From 6e4a9b999ba40e77bbd449bb5feaf6332335b6bb Mon Sep 17 00:00:00 2001
From: Robert Fratto <robertfratto@gmail.com>
Date: Thu, 4 Jan 2024 08:45:07 -0500
Subject: [PATCH 01/68] prometheus.exporter.kafka: use correct secret type
 (#6046)

Use rivertypes.Secret for sensitive fields instead of Prometheus' secret
type.

Fixes #6044.
---
 CHANGELOG.md                                  | 16 +++---
 component/prometheus/exporter/kafka/kafka.go  | 49 ++++++++++---------
 .../prometheus/exporter/kafka/kafka_test.go   | 12 +++++
 .../internal/build/kafka_exporter.go          |  3 +-
 4 files changed, 48 insertions(+), 32 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 3b83ee4d268c..a86d9b1960f6 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -14,8 +14,8 @@ Main (unreleased)
 
 - `otelcol.receiver.prometheus` will drop all `otel_scope_info` metrics when converting them to OTLP. (@wildum)
   - If the `otel_scope_info` metric has labels `otel_scope_name` and `otel_scope_version`,
-    their values will be used to set OTLP Instrumentation Scope name and  version respectively. 
-  - Labels of `otel_scope_info` metrics other than `otel_scope_name` and `otel_scope_version` 
+    their values will be used to set OTLP Instrumentation Scope name and  version respectively.
+  - Labels of `otel_scope_info` metrics other than `otel_scope_name` and `otel_scope_version`
     are added as scope attributes with the matching name and version.
 
 - The `target` block in `prometheus.exporter.blackbox` requires a mandatory `name`
@@ -57,7 +57,7 @@ Main (unreleased)
 
 - Added links between compatible components in the documentation to make it
   easier to discover them. (@thampiotr)
-  
+
 - Allow defining `HTTPClientConfig` for `discovery.ec2`. (@cmbrad)
 
 - The `remote.http` component can optionally define a request body. (@tpaschalis)
@@ -71,8 +71,8 @@ Main (unreleased)
 - Added 'country' mmdb-type to log pipeline-stage geoip. (@superstes)
 
 - Azure exporter enhancements for flow and static mode, (@kgeckhart)
-  - Allows for pulling metrics at the Azure subscription level instead of resource by resource 
-  - Disable dimension validation by default to reduce the number of exporter instances needed for full dimension coverage 
+  - Allows for pulling metrics at the Azure subscription level instead of resource by resource
+  - Disable dimension validation by default to reduce the number of exporter instances needed for full dimension coverage
 
 - Add `max_cache_size` to `prometheus.relabel` to allow configurability instead of hard coded 100,000. (@mattdurham)
 
@@ -81,11 +81,11 @@ Main (unreleased)
 ### Bugfixes
 
 - Update `pyroscope.ebpf` to fix a logical bug causing to profile to many kthreads instead of regular processes https://github.com/grafana/pyroscope/pull/2778 (@korniltsev)
- 
+
 - Update `pyroscope.ebpf` to produce more optimal pprof profiles for python processes https://github.com/grafana/pyroscope/pull/2788 (@korniltsev)
 
 - In Static mode's `traces` subsystem, `spanmetrics` used to be generated prior to load balancing.
-  This could lead to inaccurate metrics. This issue only affects Agents using both `spanmetrics` and 
+  This could lead to inaccurate metrics. This issue only affects Agents using both `spanmetrics` and
   `load_balancing`, when running in a load balanced cluster with more than one Agent instance. (@ptodev)
 
 - Fixes `loki.source.docker` a behavior that synced an incomplete list of targets to the tailer manager. (@FerdinandvHagen)
@@ -94,6 +94,8 @@ Main (unreleased)
 
 - Add staleness tracking to labelstore to reduce memory usage. (@mattdurham)
 
+- Fix issue where `prometheus.exporter.kafka` would crash when configuring `sasl_password`. (@rfratto)
+
 ### Other changes
 
 - Bump github.com/IBM/sarama from v1.41.2 to v1.42.1
diff --git a/component/prometheus/exporter/kafka/kafka.go b/component/prometheus/exporter/kafka/kafka.go
index f146c40bae3c..f68985b50d2c 100644
--- a/component/prometheus/exporter/kafka/kafka.go
+++ b/component/prometheus/exporter/kafka/kafka.go
@@ -9,7 +9,8 @@ import (
 	"github.com/grafana/agent/component/prometheus/exporter"
 	"github.com/grafana/agent/pkg/integrations"
 	"github.com/grafana/agent/pkg/integrations/kafka_exporter"
-	config_util "github.com/prometheus/common/config"
+	"github.com/grafana/river/rivertypes"
+	"github.com/prometheus/common/config"
 )
 
 var DefaultArguments = Arguments{
@@ -24,28 +25,28 @@ var DefaultArguments = Arguments{
 }
 
 type Arguments struct {
-	Instance                string             `river:"instance,attr,optional"`
-	KafkaURIs               []string           `river:"kafka_uris,attr,optional"`
-	UseSASL                 bool               `river:"use_sasl,attr,optional"`
-	UseSASLHandshake        bool               `river:"use_sasl_handshake,attr,optional"`
-	SASLUsername            string             `river:"sasl_username,attr,optional"`
-	SASLPassword            config_util.Secret `river:"sasl_password,attr,optional"`
-	SASLMechanism           string             `river:"sasl_mechanism,attr,optional"`
-	UseTLS                  bool               `river:"use_tls,attr,optional"`
-	CAFile                  string             `river:"ca_file,attr,optional"`
-	CertFile                string             `river:"cert_file,attr,optional"`
-	KeyFile                 string             `river:"key_file,attr,optional"`
-	InsecureSkipVerify      bool               `river:"insecure_skip_verify,attr,optional"`
-	KafkaVersion            string             `river:"kafka_version,attr,optional"`
-	UseZooKeeperLag         bool               `river:"use_zookeeper_lag,attr,optional"`
-	ZookeeperURIs           []string           `river:"zookeeper_uris,attr,optional"`
-	ClusterName             string             `river:"kafka_cluster_name,attr,optional"`
-	MetadataRefreshInterval string             `river:"metadata_refresh_interval,attr,optional"`
-	AllowConcurrent         bool               `river:"allow_concurrency,attr,optional"`
-	MaxOffsets              int                `river:"max_offsets,attr,optional"`
-	PruneIntervalSeconds    int                `river:"prune_interval_seconds,attr,optional"`
-	TopicsFilter            string             `river:"topics_filter_regex,attr,optional"`
-	GroupFilter             string             `river:"groups_filter_regex,attr,optional"`
+	Instance                string            `river:"instance,attr,optional"`
+	KafkaURIs               []string          `river:"kafka_uris,attr,optional"`
+	UseSASL                 bool              `river:"use_sasl,attr,optional"`
+	UseSASLHandshake        bool              `river:"use_sasl_handshake,attr,optional"`
+	SASLUsername            string            `river:"sasl_username,attr,optional"`
+	SASLPassword            rivertypes.Secret `river:"sasl_password,attr,optional"`
+	SASLMechanism           string            `river:"sasl_mechanism,attr,optional"`
+	UseTLS                  bool              `river:"use_tls,attr,optional"`
+	CAFile                  string            `river:"ca_file,attr,optional"`
+	CertFile                string            `river:"cert_file,attr,optional"`
+	KeyFile                 string            `river:"key_file,attr,optional"`
+	InsecureSkipVerify      bool              `river:"insecure_skip_verify,attr,optional"`
+	KafkaVersion            string            `river:"kafka_version,attr,optional"`
+	UseZooKeeperLag         bool              `river:"use_zookeeper_lag,attr,optional"`
+	ZookeeperURIs           []string          `river:"zookeeper_uris,attr,optional"`
+	ClusterName             string            `river:"kafka_cluster_name,attr,optional"`
+	MetadataRefreshInterval string            `river:"metadata_refresh_interval,attr,optional"`
+	AllowConcurrent         bool              `river:"allow_concurrency,attr,optional"`
+	MaxOffsets              int               `river:"max_offsets,attr,optional"`
+	PruneIntervalSeconds    int               `river:"prune_interval_seconds,attr,optional"`
+	TopicsFilter            string            `river:"topics_filter_regex,attr,optional"`
+	GroupFilter             string            `river:"groups_filter_regex,attr,optional"`
 }
 
 func init() {
@@ -93,7 +94,7 @@ func (a *Arguments) Convert() *kafka_exporter.Config {
 		UseSASL:                 a.UseSASL,
 		UseSASLHandshake:        a.UseSASLHandshake,
 		SASLUsername:            a.SASLUsername,
-		SASLPassword:            a.SASLPassword,
+		SASLPassword:            config.Secret(a.SASLPassword),
 		SASLMechanism:           a.SASLMechanism,
 		UseTLS:                  a.UseTLS,
 		CAFile:                  a.CAFile,
diff --git a/component/prometheus/exporter/kafka/kafka_test.go b/component/prometheus/exporter/kafka/kafka_test.go
index 26f321dc39fa..4209da21cb7d 100644
--- a/component/prometheus/exporter/kafka/kafka_test.go
+++ b/component/prometheus/exporter/kafka/kafka_test.go
@@ -107,3 +107,15 @@ func TestCustomizeTarget(t *testing.T) {
 	require.Equal(t, 1, len(newTargets))
 	require.Equal(t, "example", newTargets[0]["instance"])
 }
+
+func TestSASLPassword(t *testing.T) { // #6044
+	var exampleRiverConfig = `
+		kafka_uris    = ["broker1"]
+		use_sasl      = true 
+		sasl_password = "foobar"
+	`
+
+	var args Arguments
+	err := river.Unmarshal([]byte(exampleRiverConfig), &args)
+	require.NoError(t, err)
+}
diff --git a/converter/internal/staticconvert/internal/build/kafka_exporter.go b/converter/internal/staticconvert/internal/build/kafka_exporter.go
index 25310e35a5f4..16be4275ddce 100644
--- a/converter/internal/staticconvert/internal/build/kafka_exporter.go
+++ b/converter/internal/staticconvert/internal/build/kafka_exporter.go
@@ -4,6 +4,7 @@ import (
 	"github.com/grafana/agent/component/discovery"
 	"github.com/grafana/agent/component/prometheus/exporter/kafka"
 	"github.com/grafana/agent/pkg/integrations/kafka_exporter"
+	"github.com/grafana/river/rivertypes"
 )
 
 func (b *IntegrationsConfigBuilder) appendKafkaExporter(config *kafka_exporter.Config, instanceKey *string) discovery.Exports {
@@ -17,7 +18,7 @@ func toKafkaExporter(config *kafka_exporter.Config) *kafka.Arguments {
 		UseSASL:                 config.UseSASL,
 		UseSASLHandshake:        config.UseSASLHandshake,
 		SASLUsername:            config.SASLUsername,
-		SASLPassword:            config.SASLPassword,
+		SASLPassword:            rivertypes.Secret(config.SASLPassword),
 		SASLMechanism:           config.SASLMechanism,
 		UseTLS:                  config.UseTLS,
 		CAFile:                  config.CAFile,

From 900a0352d86d5f5e6890041516a2f2f9e20e89c0 Mon Sep 17 00:00:00 2001
From: Piotr <17101802+thampiotr@users.noreply.github.com>
Date: Thu, 4 Jan 2024 14:59:45 +0100
Subject: [PATCH 02/68] Fix incorrect CPU calculation (#6047)

---
 docs/sources/flow/monitoring/agent-resource-usage.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/sources/flow/monitoring/agent-resource-usage.md b/docs/sources/flow/monitoring/agent-resource-usage.md
index f7a44c638555..21b16106d5a3 100644
--- a/docs/sources/flow/monitoring/agent-resource-usage.md
+++ b/docs/sources/flow/monitoring/agent-resource-usage.md
@@ -33,7 +33,7 @@ series that need to be scraped and the scrape interval.
 As a rule of thumb, **per each 1 million active series** and with the default 
 scrape interval, you can expect to use approximately:
 
-* 1.5 CPU cores
+* 0.4 CPU cores
 * 11 GiB of memory
 * 1.5 MiB/s of total network bandwidth, send and receive
 

From cce5b03b141d8bf43ca4ab473c8f07d6d9136b3d Mon Sep 17 00:00:00 2001
From: Erik Baranowski <39704712+erikbaranowski@users.noreply.github.com>
Date: Thu, 4 Jan 2024 09:20:44 -0500
Subject: [PATCH 03/68] Wire up for eventhandler integration in the static to
 flow converter (#6039)

---
 .../staticconvert/internal/build/builder.go   |  7 +-
 .../internal/build/eventhandler.go            | 98 +++++++++++++++++++
 .../testdata-v2/integrations_v2.river         | 20 ++++
 .../testdata-v2/integrations_v2.yaml          |  6 ++
 .../testdata-v2/unsupported.diags             |  5 +-
 .../testdata-v2/unsupported.river             | 11 +++
 .../testdata-v2/unsupported.yaml              | 13 ++-
 converter/internal/staticconvert/validate.go  |  6 +-
 8 files changed, 160 insertions(+), 6 deletions(-)
 create mode 100644 converter/internal/staticconvert/internal/build/eventhandler.go

diff --git a/converter/internal/staticconvert/internal/build/builder.go b/converter/internal/staticconvert/internal/build/builder.go
index 0f92fa327363..58fedf6225c2 100644
--- a/converter/internal/staticconvert/internal/build/builder.go
+++ b/converter/internal/staticconvert/internal/build/builder.go
@@ -42,7 +42,8 @@ import (
 	app_agent_receiver_v2 "github.com/grafana/agent/pkg/integrations/v2/app_agent_receiver"
 	blackbox_exporter_v2 "github.com/grafana/agent/pkg/integrations/v2/blackbox_exporter"
 	common_v2 "github.com/grafana/agent/pkg/integrations/v2/common"
-	"github.com/grafana/agent/pkg/integrations/v2/metricsutils"
+	eventhandler_v2 "github.com/grafana/agent/pkg/integrations/v2/eventhandler"
+	metricsutils_v2 "github.com/grafana/agent/pkg/integrations/v2/metricsutils"
 	snmp_exporter_v2 "github.com/grafana/agent/pkg/integrations/v2/snmp_exporter"
 	vmware_exporter_v2 "github.com/grafana/agent/pkg/integrations/v2/vmware_exporter"
 	"github.com/grafana/agent/pkg/integrations/windows_exporter"
@@ -229,13 +230,15 @@ func (b *IntegrationsConfigBuilder) appendV2Integrations() {
 		case *blackbox_exporter_v2.Config:
 			exports = b.appendBlackboxExporterV2(itg)
 			commonConfig = itg.Common
+		case *eventhandler_v2.Config:
+			b.appendEventHandlerV2(itg)
 		case *snmp_exporter_v2.Config:
 			exports = b.appendSnmpExporterV2(itg)
 			commonConfig = itg.Common
 		case *vmware_exporter_v2.Config:
 			exports = b.appendVmwareExporterV2(itg)
 			commonConfig = itg.Common
-		case *metricsutils.ConfigShim:
+		case *metricsutils_v2.ConfigShim:
 			commonConfig = itg.Common
 			switch v1_itg := itg.Orig.(type) {
 			case *azure_exporter.Config:
diff --git a/converter/internal/staticconvert/internal/build/eventhandler.go b/converter/internal/staticconvert/internal/build/eventhandler.go
new file mode 100644
index 000000000000..bf816d6d451a
--- /dev/null
+++ b/converter/internal/staticconvert/internal/build/eventhandler.go
@@ -0,0 +1,98 @@
+package build
+
+import (
+	"fmt"
+
+	"github.com/grafana/agent/component/common/loki"
+	flow_relabel "github.com/grafana/agent/component/common/relabel"
+	"github.com/grafana/agent/component/loki/relabel"
+	"github.com/grafana/agent/component/loki/source/kubernetes_events"
+	"github.com/grafana/agent/converter/diag"
+	"github.com/grafana/agent/converter/internal/common"
+	eventhandler_v2 "github.com/grafana/agent/pkg/integrations/v2/eventhandler"
+	"github.com/grafana/river/scanner"
+)
+
+func (b *IntegrationsConfigBuilder) appendEventHandlerV2(config *eventhandler_v2.Config) {
+	compLabel, err := scanner.SanitizeIdentifier(b.formatJobName(config.Name(), nil))
+	if err != nil {
+		b.diags.Add(diag.SeverityLevelCritical, fmt.Sprintf("failed to sanitize job name: %s", err))
+	}
+
+	b.diags.AddAll(common.ValidateSupported(common.NotDeepEquals, config.SendTimeout, eventhandler_v2.DefaultConfig.SendTimeout, "eventhandler send_timeout", "this field is not configurable in flow mode"))
+	b.diags.AddAll(common.ValidateSupported(common.NotDeepEquals, config.CachePath, eventhandler_v2.DefaultConfig.CachePath, "eventhandler cache_path", "this field is not configurable in flow mode"))
+	b.diags.AddAll(common.ValidateSupported(common.NotDeepEquals, config.InformerResync, eventhandler_v2.DefaultConfig.InformerResync, "eventhandler informer_resync", "this field is not configurable in flow mode"))
+	b.diags.AddAll(common.ValidateSupported(common.NotDeepEquals, config.FlushInterval, eventhandler_v2.DefaultConfig.FlushInterval, "eventhandler flush_interval", "this field is not configurable in flow mode"))
+
+	receiver := getLogsReceiver(config)
+	if len(config.ExtraLabels) > 0 {
+		receiver = b.injectExtraLabels(config, receiver, compLabel)
+	}
+
+	args := toEventHandlerV2(config, receiver)
+
+	b.f.Body().AppendBlock(common.NewBlockWithOverride(
+		[]string{"loki", "source", "kubernetes_events"},
+		compLabel,
+		args,
+	))
+}
+
+func (b *IntegrationsConfigBuilder) injectExtraLabels(config *eventhandler_v2.Config, receiver common.ConvertLogsReceiver, compLabel string) common.ConvertLogsReceiver {
+	var relabelConfigs []*flow_relabel.Config
+	for _, extraLabel := range config.ExtraLabels {
+		defaultConfig := flow_relabel.DefaultRelabelConfig
+		relabelConfig := &defaultConfig
+		relabelConfig.SourceLabels = []string{"__address__"}
+		relabelConfig.TargetLabel = extraLabel.Name
+		relabelConfig.Replacement = extraLabel.Value
+
+		relabelConfigs = append(relabelConfigs, relabelConfig)
+	}
+
+	relabelArgs := relabel.Arguments{
+		ForwardTo:      []loki.LogsReceiver{receiver},
+		RelabelConfigs: relabelConfigs,
+		MaxCacheSize:   relabel.DefaultArguments.MaxCacheSize,
+	}
+
+	b.f.Body().AppendBlock(common.NewBlockWithOverride(
+		[]string{"loki", "relabel"},
+		compLabel,
+		relabelArgs,
+	))
+
+	return common.ConvertLogsReceiver{
+		Expr: fmt.Sprintf("loki.relabel.%s.receiver", compLabel),
+	}
+}
+
+func getLogsReceiver(config *eventhandler_v2.Config) common.ConvertLogsReceiver {
+	logsReceiver := common.ConvertLogsReceiver{}
+	if config.LogsInstance != "" {
+		compLabel, err := scanner.SanitizeIdentifier("logs_" + config.LogsInstance)
+		if err != nil {
+			panic(fmt.Errorf("failed to sanitize job name: %s", err))
+		}
+
+		logsReceiver.Expr = fmt.Sprintf("loki.write.%s.receiver", compLabel)
+	}
+
+	return logsReceiver
+}
+
+func toEventHandlerV2(config *eventhandler_v2.Config, receiver common.ConvertLogsReceiver) *kubernetes_events.Arguments {
+	defaultOverrides := kubernetes_events.DefaultArguments
+	defaultOverrides.Client.KubeConfig = config.KubeconfigPath
+	if config.Namespace != "" {
+		defaultOverrides.Namespaces = []string{config.Namespace}
+	}
+
+	return &kubernetes_events.Arguments{
+		ForwardTo:  []loki.LogsReceiver{receiver},
+		JobName:    kubernetes_events.DefaultArguments.JobName,
+		Namespaces: defaultOverrides.Namespaces,
+		LogFormat:  config.LogFormat,
+		Client:     defaultOverrides.Client,
+	}
+}
diff --git a/converter/internal/staticconvert/testdata-v2/integrations_v2.river b/converter/internal/staticconvert/testdata-v2/integrations_v2.river
index 5908cd4f0f5b..d6306565d9e2 100644
--- a/converter/internal/staticconvert/testdata-v2/integrations_v2.river
+++ b/converter/internal/staticconvert/testdata-v2/integrations_v2.river
@@ -21,6 +21,26 @@ logging {
 	format = "json"
 }
 
+loki.relabel "integrations_eventhandler" {
+	forward_to = [loki.write.logs_log_config.receiver]
+
+	rule {
+		source_labels = ["__address__"]
+		target_label  = "test_label"
+		replacement   = "test_label_value"
+	}
+
+	rule {
+		source_labels = ["__address__"]
+		target_label  = "test_label_2"
+		replacement   = "test_label_value_2"
+	}
+}
+
+loki.source.kubernetes_events "integrations_eventhandler" {
+	forward_to = [loki.relabel.integrations_eventhandler.receiver]
+}
+
 prometheus.exporter.azure "integrations_azure1" {
 	subscriptions = ["subId"]
 	resource_type = "Microsoft.Dashboard/grafana"
diff --git a/converter/internal/staticconvert/testdata-v2/integrations_v2.yaml b/converter/internal/staticconvert/testdata-v2/integrations_v2.yaml
index a335c87de163..cd0c497d15cc 100644
--- a/converter/internal/staticconvert/testdata-v2/integrations_v2.yaml
+++ b/converter/internal/staticconvert/testdata-v2/integrations_v2.yaml
@@ -117,6 +117,12 @@ integrations:
   elasticsearch_configs:
     - autoscrape:
         metrics_instance: "default"
+  eventhandler:
+    cache_path: "./.eventcache/eventhandler.cache"
+    logs_instance: "log_config"
+    extra_labels:
+      test_label: test_label_value
+      test_label_2: test_label_value_2
   gcp_configs:
     - project_ids:
         - <project_id>
diff --git a/converter/internal/staticconvert/testdata-v2/unsupported.diags b/converter/internal/staticconvert/testdata-v2/unsupported.diags
index 6337d505766f..cf356c13c1da 100644
--- a/converter/internal/staticconvert/testdata-v2/unsupported.diags
+++ b/converter/internal/staticconvert/testdata-v2/unsupported.diags
@@ -1,3 +1,6 @@
+(Error) The converter does not support converting the provided eventhandler send_timeout config: this field is not configurable in flow mode
+(Error) The converter does not support converting the provided eventhandler cache_path config: this field is not configurable in flow mode
+(Error) The converter does not support converting the provided eventhandler informer_resync config: this field is not configurable in flow mode
+(Error) The converter does not support converting the provided eventhandler flush_interval config: this field is not configurable in flow mode
 (Warning) Please review your agent command line flags and ensure they are set in your Flow mode config file where necessary.
-(Error) The converter does not support converting the provided eventhandler integration.
 (Error) The converter does not support converting the provided app_agent_receiver traces_instance config.
\ No newline at end of file
diff --git a/converter/internal/staticconvert/testdata-v2/unsupported.river b/converter/internal/staticconvert/testdata-v2/unsupported.river
index 4b78abf71b43..0dcdb9ac79a6 100644
--- a/converter/internal/staticconvert/testdata-v2/unsupported.river
+++ b/converter/internal/staticconvert/testdata-v2/unsupported.river
@@ -9,6 +9,17 @@ prometheus.remote_write "metrics_default" {
 	}
 }
 
+loki.write "logs_log_config" {
+	endpoint {
+		url = "http://localhost/loki/api/v1/push"
+	}
+	external_labels = {}
+}
+
+loki.source.kubernetes_events "integrations_eventhandler" {
+	forward_to = [loki.write.logs_log_config.receiver]
+}
+
 faro.receiver "integrations_app_agent_receiver" {
 	extra_log_labels = {}
 
diff --git a/converter/internal/staticconvert/testdata-v2/unsupported.yaml b/converter/internal/staticconvert/testdata-v2/unsupported.yaml
index 13b6c44998ad..dfce6ed22e45 100644
--- a/converter/internal/staticconvert/testdata-v2/unsupported.yaml
+++ b/converter/internal/staticconvert/testdata-v2/unsupported.yaml
@@ -6,6 +6,13 @@ metrics:
   configs:
     - name: default
 
+logs:
+  positions_directory: /path
+  configs:
+    - name: log_config
+      clients:
+        - url: http://localhost/loki/api/v1/push
+
 integrations:
   app_agent_receiver_configs:
     - instance: "default"
@@ -14,4 +21,8 @@ integrations:
         host: "localhost"
         port: 55678
   eventhandler:
-    cache_path: "/etc/eventhandler/eventhandler.cache"
\ No newline at end of file
+    cache_path: "/etc/eventhandler/not_default.cache"
+    logs_instance: "log_config"
+    send_timeout: 30
+    informer_resync: 30
+    flush_interval: 30
\ No newline at end of file
diff --git a/converter/internal/staticconvert/validate.go b/converter/internal/staticconvert/validate.go
index fb714af9d555..2c5aeb87c1d0 100644
--- a/converter/internal/staticconvert/validate.go
+++ b/converter/internal/staticconvert/validate.go
@@ -37,7 +37,8 @@ import (
 	apache_exporter_v2 "github.com/grafana/agent/pkg/integrations/v2/apache_http"
 	app_agent_receiver_v2 "github.com/grafana/agent/pkg/integrations/v2/app_agent_receiver"
 	blackbox_exporter_v2 "github.com/grafana/agent/pkg/integrations/v2/blackbox_exporter"
-	"github.com/grafana/agent/pkg/integrations/v2/metricsutils"
+	eventhandler_v2 "github.com/grafana/agent/pkg/integrations/v2/eventhandler"
+	metricsutils_v2 "github.com/grafana/agent/pkg/integrations/v2/metricsutils"
 	snmp_exporter_v2 "github.com/grafana/agent/pkg/integrations/v2/snmp_exporter"
 	vmware_exporter_v2 "github.com/grafana/agent/pkg/integrations/v2/vmware_exporter"
 	"github.com/grafana/agent/pkg/integrations/windows_exporter"
@@ -171,9 +172,10 @@ func validateIntegrationsV2(integrationsConfig *v2.SubsystemOptions) diag.Diagno
 		case *app_agent_receiver_v2.Config:
 			diags.AddAll(common.ValidateSupported(common.NotEquals, itg.TracesInstance, "", "app_agent_receiver traces_instance", ""))
 		case *blackbox_exporter_v2.Config:
+		case *eventhandler_v2.Config:
 		case *snmp_exporter_v2.Config:
 		case *vmware_exporter_v2.Config:
-		case *metricsutils.ConfigShim:
+		case *metricsutils_v2.ConfigShim:
 			switch v1_itg := itg.Orig.(type) {
 			case *azure_exporter.Config:
 			case *cadvisor.Config:

From 50d16208d1c2f30851212b97ef1fe6e106d499e8 Mon Sep 17 00:00:00 2001
From: Craig Peterson <192540+captncraig@users.noreply.github.com>
Date: Thu, 4 Jan 2024 13:47:26 -0500
Subject: [PATCH 04/68] helm: clean up logic for autodelete pvcs (#6042)

* helm: clean up logic for autodelete pvcs

* remove flag

* changelog
---
 operations/helm/charts/grafana-agent/CHANGELOG.md          | 4 ++++
 .../ci/create-statefulset-autoscaling-values.yaml          | 1 +
 .../grafana-agent/templates/controllers/statefulset.yaml   | 7 +++++--
 operations/helm/scripts/rebuild-tests.sh                   | 2 +-
 .../grafana-agent/templates/controllers/statefulset.yaml   | 3 +++
 5 files changed, 14 insertions(+), 3 deletions(-)

diff --git a/operations/helm/charts/grafana-agent/CHANGELOG.md b/operations/helm/charts/grafana-agent/CHANGELOG.md
index 70b612d74572..d14525031740 100644
--- a/operations/helm/charts/grafana-agent/CHANGELOG.md
+++ b/operations/helm/charts/grafana-agent/CHANGELOG.md
@@ -14,6 +14,10 @@ Unreleased
 
 - Update `rbac` to include necessary rules for the `otelcol.processor.k8sattributes` component. (@rlankfo)
 
+### Bugfixes
+
+- Statefulset should use value `.controller.enableStatefulSetAutoDeletePVC` instead of just `.enableStatefulSetAutoDeletePVC`. (@captncraig)
+
 0.29.0 (2023-11-30)
 -------------------
 
diff --git a/operations/helm/charts/grafana-agent/ci/create-statefulset-autoscaling-values.yaml b/operations/helm/charts/grafana-agent/ci/create-statefulset-autoscaling-values.yaml
index 89b51fc31c78..eedf5411b31c 100644
--- a/operations/helm/charts/grafana-agent/ci/create-statefulset-autoscaling-values.yaml
+++ b/operations/helm/charts/grafana-agent/ci/create-statefulset-autoscaling-values.yaml
@@ -3,6 +3,7 @@ controller:
   type: statefulset
   autoscaling:
     enabled: true
+  enableStatefulSetAutoDeletePVC: true
 agent:
   resources:
     requests:
diff --git a/operations/helm/charts/grafana-agent/templates/controllers/statefulset.yaml b/operations/helm/charts/grafana-agent/templates/controllers/statefulset.yaml
index c4ef55024a22..a4965d14205d 100644
--- a/operations/helm/charts/grafana-agent/templates/controllers/statefulset.yaml
+++ b/operations/helm/charts/grafana-agent/templates/controllers/statefulset.yaml
@@ -1,4 +1,7 @@
 {{- if eq .Values.controller.type "statefulset" }}
+{{- if .Values.enableStatefulSetAutoDeletePVC }}
+{{- fail "Value 'enableStatefulSetAutoDeletePVC' should be nested inside 'controller' options." }}
+{{- end }}
 apiVersion: apps/v1
 kind: StatefulSet
 metadata:
@@ -35,8 +38,8 @@ spec:
     - {{ toYaml . | nindent 6 }}
     {{- end }}
   {{- end }}
-  {{- if and (semverCompare ">= 1.23-0" .Capabilities.KubeVersion.Version) (.Values.enableStatefulSetAutoDeletePVC)  }}
-  {{/*
+  {{- if and (semverCompare ">= 1.23-0" .Capabilities.KubeVersion.Version) (.Values.controller.enableStatefulSetAutoDeletePVC) }}
+  {{- /*
     Data on the read nodes is easy to replace, so we want to always delete PVCs to make
     operation easier, and will rely on re-fetching data when needed.
   */}}
diff --git a/operations/helm/scripts/rebuild-tests.sh b/operations/helm/scripts/rebuild-tests.sh
index af82eef8b12d..66ce2dfaaff6 100755
--- a/operations/helm/scripts/rebuild-tests.sh
+++ b/operations/helm/scripts/rebuild-tests.sh
@@ -17,7 +17,7 @@ for chart_file in $(find * -name Chart.yaml -print | sort); do
       FILENAME=$(basename ${FILE_PATH})
       TESTNAME=${FILENAME%-values.yaml}
       # Render chart
-      helm template --namespace default --debug ${CHART_NAME} ${CHART_DIR} -f ${FILE_PATH} --output-dir ${TEST_DIR}/${TESTNAME} --set '$chart_tests=true'
+      helm template --namespace default --kube-version 1.26 --debug ${CHART_NAME} ${CHART_DIR} -f ${FILE_PATH} --output-dir ${TEST_DIR}/${TESTNAME} --set '$chart_tests=true'
     done
   fi
 done
diff --git a/operations/helm/tests/create-statefulset-autoscaling/grafana-agent/templates/controllers/statefulset.yaml b/operations/helm/tests/create-statefulset-autoscaling/grafana-agent/templates/controllers/statefulset.yaml
index 65ce63ce8c00..06151482680e 100644
--- a/operations/helm/tests/create-statefulset-autoscaling/grafana-agent/templates/controllers/statefulset.yaml
+++ b/operations/helm/tests/create-statefulset-autoscaling/grafana-agent/templates/controllers/statefulset.yaml
@@ -76,3 +76,6 @@ spec:
         - name: config
           configMap:
             name: grafana-agent
+  persistentVolumeClaimRetentionPolicy:
+    whenDeleted: Delete
+    whenScaled: Delete

From 35b803906c6e37c59cef7dd4ff09c6a6cd24de75 Mon Sep 17 00:00:00 2001
From: Piotr <17101802+thampiotr@users.noreply.github.com>
Date: Fri, 5 Jan 2024 11:41:33 +0100
Subject: [PATCH 05/68] Move 'Getting started' to 'Tasks' (#6043)

* Move 'Getting started' to 'Tasks'

* fix aliases
---
 docs/sources/about.md                         |  12 ++++-----
 .../loki-config.png                           | Bin
 .../otlp-lgtm-graph.png                       | Bin
 .../prometheus-config.png                     | Bin
 .../tempo-config.png                          | Bin
 docs/sources/flow/_index.md                   |   6 ++---
 docs/sources/flow/getting-started/_index.md   |  19 -------------
 docs/sources/flow/reference/cli/convert.md    |   6 ++---
 docs/sources/flow/tasks/_index.md             |  25 ++++++++++++++++++
 .../collect-opentelemetry-data.md             |   8 +++++-
 .../collect-prometheus-metrics.md             |   8 +++++-
 .../configure-agent-clustering.md             |   8 +++++-
 .../distribute-prometheus-scrape-load.md      |  16 +++++++----
 .../migrating-from-operator.md                |   6 ++++-
 .../migrating-from-prometheus.md              |   8 +++++-
 .../migrating-from-promtail.md                |   8 +++++-
 .../migrating-from-static.md                  |  16 +++++++----
 .../opentelemetry-to-lgtm-stack.md            |  24 ++++++++++-------
 18 files changed, 114 insertions(+), 56 deletions(-)
 rename docs/sources/assets/{getting-started => tasks}/loki-config.png (100%)
 rename docs/sources/assets/{getting-started => tasks}/otlp-lgtm-graph.png (100%)
 rename docs/sources/assets/{getting-started => tasks}/prometheus-config.png (100%)
 rename docs/sources/assets/{getting-started => tasks}/tempo-config.png (100%)
 delete mode 100644 docs/sources/flow/getting-started/_index.md
 create mode 100644 docs/sources/flow/tasks/_index.md
 rename docs/sources/flow/{getting-started => tasks}/collect-opentelemetry-data.md (95%)
 rename docs/sources/flow/{getting-started => tasks}/collect-prometheus-metrics.md (96%)
 rename docs/sources/flow/{getting-started => tasks}/configure-agent-clustering.md (83%)
 rename docs/sources/flow/{getting-started => tasks}/distribute-prometheus-scrape-load.md (78%)
 rename docs/sources/flow/{getting-started => tasks}/migrating-from-operator.md (97%)
 rename docs/sources/flow/{getting-started => tasks}/migrating-from-prometheus.md (95%)
 rename docs/sources/flow/{getting-started => tasks}/migrating-from-promtail.md (95%)
 rename docs/sources/flow/{getting-started => tasks}/migrating-from-static.md (95%)
 rename docs/sources/flow/{getting-started => tasks}/opentelemetry-to-lgtm-stack.md (93%)

diff --git a/docs/sources/about.md b/docs/sources/about.md
index 0737815b61d6..c33d73087408 100644
--- a/docs/sources/about.md
+++ b/docs/sources/about.md
@@ -29,12 +29,12 @@ Grafana Agent is available in three different variants:
 [Static mode Kubernetes operator]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/operator"
 [Flow mode]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow"
 [Flow mode]: "/docs/grafana-cloud/ -> /docs/agent/<AGENT_VERSION>/flow"
-[Prometheus]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/getting-started/collect-prometheus-metrics.md"
-[Prometheus]: "/docs/grafana-cloud/ -> /docs/agent/<AGENT_VERSION>/flow/getting-started/collect-prometheus-metrics.md"
-[OTel]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/getting-started/collect-opentelemetry-data.md"
-[OTel]: "/docs/grafana-cloud/ -> /docs/agent/<AGENT_VERSION>/flow/getting-started/collect-opentelemetry-data.md"
-[Loki]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/getting-started/migrating-from-promtail.md"
-[Loki]: "/docs/grafana-cloud/ -> /docs/agent/<AGENT_VERSION>/flow/getting-started/migrating-from-promtail.md"
+[Prometheus]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/tasks/collect-prometheus-metrics.md"
+[Prometheus]: "/docs/grafana-cloud/ -> /docs/agent/<AGENT_VERSION>/flow/tasks/collect-prometheus-metrics.md"
+[OTel]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/tasks/collect-opentelemetry-data.md"
+[OTel]: "/docs/grafana-cloud/ -> /docs/agent/<AGENT_VERSION>/flow/tasks/collect-opentelemetry-data.md"
+[Loki]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/tasks/migrating-from-promtail.md"
+[Loki]: "/docs/grafana-cloud/ -> /docs/agent/<AGENT_VERSION>/flow/tasks/migrating-from-promtail.md"
 [clustering]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/concepts/clustering/_index.md"
 [clustering]: "/docs/grafana-cloud/ -> /docs/agent/<AGENT_VERSION>/flow/concepts/clustering/_index.md"
 [rules]: "/docs/agent/ -> /docs/agent/latest/flow/reference/components/mimir.rules.kubernetes.md"
diff --git a/docs/sources/assets/getting-started/loki-config.png b/docs/sources/assets/tasks/loki-config.png
similarity index 100%
rename from docs/sources/assets/getting-started/loki-config.png
rename to docs/sources/assets/tasks/loki-config.png
diff --git a/docs/sources/assets/getting-started/otlp-lgtm-graph.png b/docs/sources/assets/tasks/otlp-lgtm-graph.png
similarity index 100%
rename from docs/sources/assets/getting-started/otlp-lgtm-graph.png
rename to docs/sources/assets/tasks/otlp-lgtm-graph.png
diff --git a/docs/sources/assets/getting-started/prometheus-config.png b/docs/sources/assets/tasks/prometheus-config.png
similarity index 100%
rename from docs/sources/assets/getting-started/prometheus-config.png
rename to docs/sources/assets/tasks/prometheus-config.png
diff --git a/docs/sources/assets/getting-started/tempo-config.png b/docs/sources/assets/tasks/tempo-config.png
similarity index 100%
rename from docs/sources/assets/getting-started/tempo-config.png
rename to docs/sources/assets/tasks/tempo-config.png
diff --git a/docs/sources/flow/_index.md b/docs/sources/flow/_index.md
index 7458fd016b03..4262238f9020 100644
--- a/docs/sources/flow/_index.md
+++ b/docs/sources/flow/_index.md
@@ -80,14 +80,14 @@ This feature is experimental, and it doesn't support all River components.
 
 * [Install][] {{< param "PRODUCT_NAME" >}}.
 * Learn about the core [Concepts][] of {{< param "PRODUCT_NAME" >}}.
-* Follow our [Getting started][] guides for {{< param "PRODUCT_NAME" >}}.
-* Follow our [Tutorials][] to get started with {{< param "PRODUCT_NAME" >}}.
+* Follow our [Tutorials][] for hands-on learning of {{< param "PRODUCT_NAME" >}}.
+* Consult our [Tasks][] instructions to accomplish common objectives with {{< param "PRODUCT_NAME" >}}.
 * Check out our [Reference][] documentation to find specific information you
   might be looking for.
 
 [Install]: {{< relref "./setup/install/" >}}
 [Concepts]: {{< relref "./concepts/" >}}
-[Getting started]: {{< relref "./getting-started/" >}}
+[Tasks]: {{< relref "./tasks/" >}}
 [Tutorials]: {{< relref "./tutorials/ ">}}
 [Reference]: {{< relref "./reference" >}}
 
diff --git a/docs/sources/flow/getting-started/_index.md b/docs/sources/flow/getting-started/_index.md
deleted file mode 100644
index bc989084f42b..000000000000
--- a/docs/sources/flow/getting-started/_index.md
+++ /dev/null
@@ -1,19 +0,0 @@
----
-aliases:
-- /docs/grafana-cloud/agent/flow/getting-started/
-- /docs/grafana-cloud/monitor-infrastructure/agent/flow/getting-started/
-- /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/getting-started/
-- /docs/grafana-cloud/send-data/agent/flow/getting-started/
-- getting_started/
-canonical: https://grafana.com/docs/agent/latest/flow/getting-started/
-description: Learn how to use Grafana Agent Flow
-menuTitle: Get started
-title: Get started with Grafana Agent Flow
-weight: 200
----
-
-# Get started with {{% param "PRODUCT_NAME" %}}
-
-This section details guides for getting started with {{< param "PRODUCT_NAME" >}}.
-
-{{< section >}}
diff --git a/docs/sources/flow/reference/cli/convert.md b/docs/sources/flow/reference/cli/convert.md
index 88c9628fde31..833341b47752 100644
--- a/docs/sources/flow/reference/cli/convert.md
+++ b/docs/sources/flow/reference/cli/convert.md
@@ -82,7 +82,7 @@ This includes Prometheus features such as
 and many supported *_sd_configs. Unsupported features in a source configuration result
 in [errors].
 
-Refer to [Migrate from Prometheus to {{< param "PRODUCT_NAME" >}}]({{< relref "../../getting-started/migrating-from-prometheus/" >}}) for a detailed migration guide.
+Refer to [Migrate from Prometheus to {{< param "PRODUCT_NAME" >}}]({{< relref "../../tasks/migrating-from-prometheus/" >}}) for a detailed migration guide.
 
 ### Promtail
 
@@ -96,7 +96,7 @@ are supported and can be converted to {{< param "PRODUCT_NAME" >}} configuration
 If you have unsupported features in a source configuration, you will receive [errors] when you convert to a flow configuration. The converter will
 also raise warnings for configuration options that may require your attention.
 
-Refer to [Migrate from Promtail to {{< param "PRODUCT_NAME" >}}]({{< relref "../../getting-started/migrating-from-promtail/" >}}) for a detailed migration guide.
+Refer to [Migrate from Promtail to {{< param "PRODUCT_NAME" >}}]({{< relref "../../tasks/migrating-from-promtail/" >}}) for a detailed migration guide.
 
 ### Static
 
@@ -113,4 +113,4 @@ flags with a space between each flag, for example `--extra-args="-enable-feature
 If you have unsupported features in a Static mode source configuration, you will receive [errors][] when you convert to a Flow mode configuration. The converter will
 also raise warnings for configuration options that may require your attention.
 
-Refer to [Migrate from Grafana Agent Static to {{< param "PRODUCT_NAME" >}}]({{< relref "../../getting-started/migrating-from-static/" >}}) for a detailed migration guide.
\ No newline at end of file
+Refer to [Migrate from Grafana Agent Static to {{< param "PRODUCT_NAME" >}}]({{< relref "../../tasks/migrating-from-static/" >}}) for a detailed migration guide.
\ No newline at end of file
diff --git a/docs/sources/flow/tasks/_index.md b/docs/sources/flow/tasks/_index.md
new file mode 100644
index 000000000000..4ca62e8c1331
--- /dev/null
+++ b/docs/sources/flow/tasks/_index.md
@@ -0,0 +1,25 @@
+---
+aliases:
+- /docs/grafana-cloud/agent/flow/tasks/
+- /docs/grafana-cloud/monitor-infrastructure/agent/flow/tasks/
+- /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/tasks/
+- /docs/grafana-cloud/send-data/agent/flow/tasks/
+# Previous page aliases for backwards compatibility:
+- /docs/grafana-cloud/agent/flow/getting-started/
+- /docs/grafana-cloud/monitor-infrastructure/agent/flow/getting-started/
+- /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/getting-started/
+- /docs/grafana-cloud/send-data/agent/flow/getting-started/
+- getting_started/ # /docs/agent/latest/flow/getting_started/
+- getting-started/ # /docs/agent/latest/flow/getting-started/
+canonical: https://grafana.com/docs/agent/latest/flow/tasks/
+description: How to perform common tasks with Grafana Agent Flow
+menuTitle: Tasks
+title: Tasks with Grafana Agent Flow
+weight: 200
+---
+
+# Tasks with {{% param "PRODUCT_NAME" %}}
+
+This section details how to perform common tasks with {{< param "PRODUCT_NAME" >}}.
+
+{{< section >}}
diff --git a/docs/sources/flow/getting-started/collect-opentelemetry-data.md b/docs/sources/flow/tasks/collect-opentelemetry-data.md
similarity index 95%
rename from docs/sources/flow/getting-started/collect-opentelemetry-data.md
rename to docs/sources/flow/tasks/collect-opentelemetry-data.md
index 70dee8041d9f..22248f9f70f9 100644
--- a/docs/sources/flow/getting-started/collect-opentelemetry-data.md
+++ b/docs/sources/flow/tasks/collect-opentelemetry-data.md
@@ -1,10 +1,16 @@
 ---
 aliases:
+- /docs/grafana-cloud/agent/flow/tasks/collect-opentelemetry-data/
+- /docs/grafana-cloud/monitor-infrastructure/agent/flow/tasks/collect-opentelemetry-data/
+- /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/tasks/collect-opentelemetry-data/
+- /docs/grafana-cloud/send-data/agent/flow/tasks/collect-opentelemetry-data/
+# Previous page aliases for backwards compatibility:
 - /docs/grafana-cloud/agent/flow/getting-started/collect-opentelemetry-data/
 - /docs/grafana-cloud/monitor-infrastructure/agent/flow/getting-started/collect-opentelemetry-data/
 - /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/getting-started/collect-opentelemetry-data/
 - /docs/grafana-cloud/send-data/agent/flow/getting-started/collect-opentelemetry-data/
-canonical: https://grafana.com/docs/agent/latest/flow/getting-started/collect-opentelemetry-data/
+- ../getting-started/collect-opentelemetry-data/ # /docs/agent/latest/flow/getting-started/collect-opentelemetry-data/
+canonical: https://grafana.com/docs/agent/latest/flow/tasks/collect-opentelemetry-data/
 description: Learn how to collect OpenTelemetry data
 title: Collect OpenTelemetry data
 weight: 300
diff --git a/docs/sources/flow/getting-started/collect-prometheus-metrics.md b/docs/sources/flow/tasks/collect-prometheus-metrics.md
similarity index 96%
rename from docs/sources/flow/getting-started/collect-prometheus-metrics.md
rename to docs/sources/flow/tasks/collect-prometheus-metrics.md
index be6d2ce71e01..350ce1ccfd4d 100644
--- a/docs/sources/flow/getting-started/collect-prometheus-metrics.md
+++ b/docs/sources/flow/tasks/collect-prometheus-metrics.md
@@ -1,10 +1,16 @@
 ---
 aliases:
+- /docs/grafana-cloud/agent/flow/tasks/collect-prometheus-metrics/
+- /docs/grafana-cloud/monitor-infrastructure/agent/flow/tasks/collect-prometheus-metrics/
+- /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/tasks/collect-prometheus-metrics/
+- /docs/grafana-cloud/send-data/agent/flow/tasks/collect-prometheus-metrics/
+# Previous page aliases for backwards compatibility:
 - /docs/grafana-cloud/agent/flow/getting-started/collect-prometheus-metrics/
 - /docs/grafana-cloud/monitor-infrastructure/agent/flow/getting-started/collect-prometheus-metrics/
 - /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/getting-started/collect-prometheus-metrics/
 - /docs/grafana-cloud/send-data/agent/flow/getting-started/collect-prometheus-metrics/
-canonical: https://grafana.com/docs/agent/latest/flow/getting-started/collect-prometheus-metrics/
+- ../getting-started/collect-prometheus-metrics/ # /docs/agent/latest/flow/getting-started/collect-prometheus-metrics/
+canonical: https://grafana.com/docs/agent/latest/flow/tasks/collect-prometheus-metrics/
 description: Learn how to collect and forward Prometheus metrics
 title: Collect and forward Prometheus metrics
 weight: 200
diff --git a/docs/sources/flow/getting-started/configure-agent-clustering.md b/docs/sources/flow/tasks/configure-agent-clustering.md
similarity index 83%
rename from docs/sources/flow/getting-started/configure-agent-clustering.md
rename to docs/sources/flow/tasks/configure-agent-clustering.md
index eacc61407986..b1ab444d4ebb 100644
--- a/docs/sources/flow/getting-started/configure-agent-clustering.md
+++ b/docs/sources/flow/tasks/configure-agent-clustering.md
@@ -1,10 +1,16 @@
 ---
 aliases:
+- /docs/grafana-cloud/agent/flow/tasks/configure-agent-clustering/
+- /docs/grafana-cloud/monitor-infrastructure/agent/flow/tasks/configure-agent-clustering/
+- /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/tasks/configure-agent-clustering/
+- /docs/grafana-cloud/send-data/agent/flow/tasks/configure-agent-clustering/
+# Previous page aliases for backwards compatibility:
 - /docs/grafana-cloud/agent/flow/getting-started/configure-agent-clustering/
 - /docs/grafana-cloud/monitor-infrastructure/agent/flow/getting-started/configure-agent-clustering/
 - /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/getting-started/configure-agent-clustering/
 - /docs/grafana-cloud/send-data/agent/flow/getting-started/configure-agent-clustering/
-canonical: https://grafana.com/docs/agent/latest/flow/getting-started/configure-agent-clustering/
+- ../getting-started/configure-agent-clustering/ # /docs/agent/latest/flow/getting-started/configure-agent-clustering/
+canonical: https://grafana.com/docs/agent/latest/flow/tasks/configure-agent-clustering/
 description: Learn how to configure Grafana Agent clustering in an existing installation
 menuTitle: Configure Grafana Agent clustering
 title: Configure Grafana Agent clustering in an existing installation
diff --git a/docs/sources/flow/getting-started/distribute-prometheus-scrape-load.md b/docs/sources/flow/tasks/distribute-prometheus-scrape-load.md
similarity index 78%
rename from docs/sources/flow/getting-started/distribute-prometheus-scrape-load.md
rename to docs/sources/flow/tasks/distribute-prometheus-scrape-load.md
index d881b2f0a34b..961c98543b98 100644
--- a/docs/sources/flow/getting-started/distribute-prometheus-scrape-load.md
+++ b/docs/sources/flow/tasks/distribute-prometheus-scrape-load.md
@@ -1,10 +1,16 @@
 ---
 aliases:
+- /docs/grafana-cloud/agent/flow/tasks/distribute-prometheus-scrape-load/
+- /docs/grafana-cloud/monitor-infrastructure/agent/flow/tasks/distribute-prometheus-scrape-load/
+- /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/tasks/distribute-prometheus-scrape-load/
+- /docs/grafana-cloud/send-data/agent/flow/tasks/distribute-prometheus-scrape-load/
+# Previous page aliases for backwards compatibility:
 - /docs/grafana-cloud/agent/flow/getting-started/distribute-prometheus-scrape-load/
 - /docs/grafana-cloud/monitor-infrastructure/agent/flow/getting-started/distribute-prometheus-scrape-load/
 - /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/getting-started/distribute-prometheus-scrape-load/
 - /docs/grafana-cloud/send-data/agent/flow/getting-started/distribute-prometheus-scrape-load/
-canonical: https://grafana.com/docs/agent/latest/flow/getting-started/distribute-prometheus-scrape-load/
+- ../getting-started/distribute-prometheus-scrape-load/ # /docs/agent/latest/flow/getting-started/distribute-prometheus-scrape-load/
+canonical: https://grafana.com/docs/agent/latest/flow/tasks/distribute-prometheus-scrape-load/
 description: Learn how to distribute your Prometheus metrics scrape load
 menuTitle: Distribute Prometheus metrics scrape load
 title: Distribute Prometheus metrics scrape load
@@ -53,10 +59,10 @@ To distribute Prometheus metrics scrape load with clustering:
 [beta]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/stability.md#beta"
 [configure-grafana-agent]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/setup/configure"
 [configure-grafana-agent]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/setup/configure"
-[Configure Prometheus metrics collection]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/getting-started/collect-prometheus-metrics.md"
-[Configure Prometheus metrics collection]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/getting-started/collect-prometheus-metrics.md"
-[Configure clustering]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/getting-started/configure-agent-clustering.md"
-[Configure clustering]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/getting-started/configure-agent-clustering.md"
+[Configure Prometheus metrics collection]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/tasks/collect-prometheus-metrics.md"
+[Configure Prometheus metrics collection]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/tasks/collect-prometheus-metrics.md"
+[Configure clustering]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/tasks/configure-agent-clustering.md"
+[Configure clustering]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/tasks/configure-agent-clustering.md"
 [UI]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/monitoring/debugging.md#component-detail-page"
 [UI]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/monitoring/debugging.md#component-detail-page"
 {{% /docs/reference %}}
diff --git a/docs/sources/flow/getting-started/migrating-from-operator.md b/docs/sources/flow/tasks/migrating-from-operator.md
similarity index 97%
rename from docs/sources/flow/getting-started/migrating-from-operator.md
rename to docs/sources/flow/tasks/migrating-from-operator.md
index 5985488c2915..375ffec59e51 100644
--- a/docs/sources/flow/getting-started/migrating-from-operator.md
+++ b/docs/sources/flow/tasks/migrating-from-operator.md
@@ -1,8 +1,12 @@
 ---
 aliases:
+- /docs/grafana-cloud/monitor-infrastructure/agent/flow/tasks/migrating-from-operator/
+- /docs/grafana-cloud/send-data/agent/flow/tasks/migrating-from-operator/
+# Previous page aliases for backwards compatibility:
 - /docs/grafana-cloud/monitor-infrastructure/agent/flow/getting-started/migrating-from-operator/
 - /docs/grafana-cloud/send-data/agent/flow/getting-started/migrating-from-operator/
-canonical: https://grafana.com/docs/agent/latest/flow/getting-started/migrating-from-operator/
+- ../getting-started/migrating-from-operator/ # /docs/agent/latest/flow/getting-started/migrating-from-operator/
+canonical: https://grafana.com/docs/agent/latest/flow/tasks/migrating-from-operator/
 description: Migrating from Grafana Agent Operator to Grafana Agent Flow
 menuTitle: Migrate from Operator
 title: Migrating from Grafana Agent Operator to Grafana Agent Flow
diff --git a/docs/sources/flow/getting-started/migrating-from-prometheus.md b/docs/sources/flow/tasks/migrating-from-prometheus.md
similarity index 95%
rename from docs/sources/flow/getting-started/migrating-from-prometheus.md
rename to docs/sources/flow/tasks/migrating-from-prometheus.md
index 8d77d6914340..837ca9da1e07 100644
--- a/docs/sources/flow/getting-started/migrating-from-prometheus.md
+++ b/docs/sources/flow/tasks/migrating-from-prometheus.md
@@ -1,10 +1,16 @@
 ---
 aliases:
+- /docs/grafana-cloud/agent/flow/tasks/migrating-from-prometheus/
+- /docs/grafana-cloud/monitor-infrastructure/agent/flow/tasks/migrating-from-prometheus/
+- /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/tasks/migrating-from-prometheus/
+- /docs/grafana-cloud/send-data/agent/flow/tasks/migrating-from-prometheus/
+# Previous page aliases for backwards compatibility:
 - /docs/grafana-cloud/agent/flow/getting-started/migrating-from-prometheus/
 - /docs/grafana-cloud/monitor-infrastructure/agent/flow/getting-started/migrating-from-prometheus/
 - /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/getting-started/migrating-from-prometheus/
 - /docs/grafana-cloud/send-data/agent/flow/getting-started/migrating-from-prometheus/
-canonical: https://grafana.com/docs/agent/latest/flow/getting-started/migrating-from-prometheus/
+- ../getting-started/migrating-from-prometheus/ # /docs/agent/latest/flow/getting-started/migrating-from-prometheus/
+canonical: https://grafana.com/docs/agent/latest/flow/tasks/migrating-from-prometheus/
 description: Learn how to migrate from Prometheus to Grafana Agent Flow
 menuTitle: Migrate from Prometheus
 title: Migrate from Prometheus to Grafana Agent Flow
diff --git a/docs/sources/flow/getting-started/migrating-from-promtail.md b/docs/sources/flow/tasks/migrating-from-promtail.md
similarity index 95%
rename from docs/sources/flow/getting-started/migrating-from-promtail.md
rename to docs/sources/flow/tasks/migrating-from-promtail.md
index 4799e0e20b5f..d38e9b904697 100644
--- a/docs/sources/flow/getting-started/migrating-from-promtail.md
+++ b/docs/sources/flow/tasks/migrating-from-promtail.md
@@ -1,10 +1,16 @@
 ---
 aliases:
+- /docs/grafana-cloud/agent/flow/tasks/migrating-from-promtail/
+- /docs/grafana-cloud/monitor-infrastructure/agent/flow/tasks/migrating-from-promtail/
+- /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/tasks/migrating-from-promtail/
+- /docs/grafana-cloud/send-data/agent/flow/tasks/migrating-from-promtail/
+# Previous page aliases for backwards compatibility:
 - /docs/grafana-cloud/agent/flow/getting-started/migrating-from-promtail/
 - /docs/grafana-cloud/monitor-infrastructure/agent/flow/getting-started/migrating-from-promtail/
 - /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/getting-started/migrating-from-promtail/
 - /docs/grafana-cloud/send-data/agent/flow/getting-started/migrating-from-promtail/
-canonical: https://grafana.com/docs/agent/latest/flow/getting-started/migrating-from-promtail/
+- ../getting-started/migrating-from-promtail/ # /docs/agent/latest/flow/getting-started/migrating-from-promtail/
+canonical: https://grafana.com/docs/agent/latest/flow/tasks/migrating-from-promtail/
 description: Learn how to migrate from Promtail to Grafana Agent Flow
 menuTitle: Migrate from Promtail
 title: Migrate from Promtail to Grafana Agent Flow
diff --git a/docs/sources/flow/getting-started/migrating-from-static.md b/docs/sources/flow/tasks/migrating-from-static.md
similarity index 95%
rename from docs/sources/flow/getting-started/migrating-from-static.md
rename to docs/sources/flow/tasks/migrating-from-static.md
index 8b7b1f98721e..a4033dab096a 100644
--- a/docs/sources/flow/getting-started/migrating-from-static.md
+++ b/docs/sources/flow/tasks/migrating-from-static.md
@@ -1,10 +1,16 @@
 ---
 aliases:
+- /docs/grafana-cloud/agent/flow/tasks/migrating-from-static/
+- /docs/grafana-cloud/monitor-infrastructure/agent/flow/tasks/migrating-from-static/
+- /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/tasks/migrating-from-static/
+- /docs/grafana-cloud/send-data/agent/flow/tasks/migrating-from-static/
+# Previous page aliases for backwards compatibility:
 - /docs/grafana-cloud/agent/flow/getting-started/migrating-from-static/
 - /docs/grafana-cloud/monitor-infrastructure/agent/flow/getting-started/migrating-from-static/
 - /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/getting-started/migrating-from-static/
 - /docs/grafana-cloud/send-data/agent/flow/getting-started/migrating-from-static/
-canonical: https://grafana.com/docs/agent/latest/flow/getting-started/migrating-from-static/
+- ../getting-started/migrating-from-static/ # /docs/agent/latest/flow/getting-started/migrating-from-static/
+canonical: https://grafana.com/docs/agent/latest/flow/tasks/migrating-from-static/
 description: Learn how to migrate your configuration from Grafana Agent Static to Grafana Agent Flow
 menuTitle: Migrate from Static to Flow
 title: Migrate Grafana Agent Static to Grafana Agent Flow
@@ -382,10 +388,10 @@ The following list is specific to the convert command and not {{< param "PRODUCT
 [Agent Management]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/static/configuration/agent-management.md"
 [env]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/reference/stdlib/env.md"
 [env]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/reference/stdlib/env.md"
-[Prometheus Limitations]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/getting-started/migrating-from-prometheus.md#limitations"
-[Prometheus Limitations]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/getting-started/migrating-from-prometheus.md#limitations"
-[Promtail Limitations]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/getting-started/migrating-from-promtail.md#limitations"
-[Promtail Limitations]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/getting-started/migrating-from-promtail.md#limitations"
+[Prometheus Limitations]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/tasks/migrating-from-prometheus.md#limitations"
+[Prometheus Limitations]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/tasks/migrating-from-prometheus.md#limitations"
+[Promtail Limitations]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/tasks/migrating-from-promtail.md#limitations"
+[Promtail Limitations]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/tasks/migrating-from-promtail.md#limitations"
 [Metrics]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/static/configuration/metrics-config.md"
 [Metrics]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/static/configuration/metrics-config.md"
 [Logs]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/static/configuration/logs-config.md"
diff --git a/docs/sources/flow/getting-started/opentelemetry-to-lgtm-stack.md b/docs/sources/flow/tasks/opentelemetry-to-lgtm-stack.md
similarity index 93%
rename from docs/sources/flow/getting-started/opentelemetry-to-lgtm-stack.md
rename to docs/sources/flow/tasks/opentelemetry-to-lgtm-stack.md
index 279960d79fe0..2da979078336 100644
--- a/docs/sources/flow/getting-started/opentelemetry-to-lgtm-stack.md
+++ b/docs/sources/flow/tasks/opentelemetry-to-lgtm-stack.md
@@ -1,10 +1,16 @@
 ---
 aliases:
+- /docs/grafana-cloud/agent/flow/tasks/opentelemetry-to-lgtm-stack/
+- /docs/grafana-cloud/monitor-infrastructure/agent/flow/tasks/opentelemetry-to-lgtm-stack/
+- /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/tasks/opentelemetry-to-lgtm-stack/
+- /docs/grafana-cloud/send-data/agent/flow/tasks/opentelemetry-to-lgtm-stack/
+# Previous page aliases for backwards compatibility:
 - /docs/grafana-cloud/agent/flow/getting-started/opentelemetry-to-lgtm-stack/
 - /docs/grafana-cloud/monitor-infrastructure/agent/flow/getting-started/opentelemetry-to-lgtm-stack/
 - /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/getting-started/opentelemetry-to-lgtm-stack/
 - /docs/grafana-cloud/send-data/agent/flow/getting-started/opentelemetry-to-lgtm-stack/
-canonical: https://grafana.com/docs/agent/latest/flow/getting-started/opentelemetry-to-lgtm-stack/
+- ../getting-started/opentelemetry-to-lgtm-stack/ # /docs/agent/latest/flow/getting-started/opentelemetry-to-lgtm-stack/
+canonical: https://grafana.com/docs/agent/latest/flow/tasks/opentelemetry-to-lgtm-stack/
 description: Learn how to collect OpenTelemetry data and forward it to the Grafana
   stack
 title: OpenTelemetry to Grafana stack
@@ -38,11 +44,11 @@ This topic describes how to:
 * Have a set of OpenTelemetry applications ready to push telemetry data to {{< param "PRODUCT_NAME" >}}.
 * Identify where {{< param "PRODUCT_NAME" >}} will write received telemetry data.
 * Be familiar with the concept of [Components][] in {{< param "PRODUCT_NAME" >}}.
-* Complete the [Collect open telemetry data][] getting started guide. You will pick up from where that guide ended.
+* Complete the [Collect open telemetry data][] task. You will pick up from where that guide ended.
 
 ## The pipeline
 
-You can start with the {{< param "PRODUCT_NAME" >}} configuration you created in the [Collect open telemetry data][] Getting Started guide.
+You can start with the {{< param "PRODUCT_NAME" >}} configuration you created in the [Collect open telemetry data][] task.
 
 ```river
 otelcol.receiver.otlp "example" {
@@ -108,7 +114,7 @@ loki.write "default" {
 To use Loki with basic-auth, which is required with Grafana Cloud Loki, you must configure the [loki.write][] component.
 You can get the Loki configuration from the Loki **Details** page in the [Grafana Cloud Portal][]:
 
-![](../../../assets/getting-started/loki-config.png)
+![](../../../assets/tasks/loki-config.png)
 
 ```river
 otelcol.exporter.loki "grafana_cloud_loki" {
@@ -143,7 +149,7 @@ otelcol.exporter.otlp "default" {
 To use Tempo with basic-auth, which is required with Grafana Cloud Tempo, you must use the [otelcol.auth.basic][] component.
 You can get the Tempo configuration from the Tempo **Details** page in the [Grafana Cloud Portal][]:
 
-![](../../../assets/getting-started/tempo-config.png)
+![](../../../assets/tasks/tempo-config.png)
 
 ```river
 otelcol.exporter.otlp "grafana_cloud_tempo" {
@@ -180,7 +186,7 @@ prometheus.remote_write "default" {
 To use Prometheus with basic-auth, which is required with Grafana Cloud Prometheus, you must configure the [prometheus.remote_write][] component.
 You can get the Prometheus configuration from the Prometheus **Details** page in the [Grafana Cloud Portal][]:
 
-![](../../../assets/getting-started/prometheus-config.png)
+![](../../../assets/tasks/prometheus-config.png)
 
 ```river
 otelcol.exporter.prometheus "grafana_cloud_prometheus" {
@@ -306,7 +312,7 @@ ts=2023-05-09T09:37:15.304234Z component=otelcol.receiver.otlp.default level=inf
 
 You can now check the pipeline graphically by visiting http://localhost:12345/graph
 
-![](../../../assets/getting-started/otlp-lgtm-graph.png)
+![](../../../assets/tasks/otlp-lgtm-graph.png)
 
 [OpenTelemetry]: https://opentelemetry.io
 [Grafana Loki]: https://grafana.com/oss/loki/
@@ -316,8 +322,8 @@ You can now check the pipeline graphically by visiting http://localhost:12345/gr
 [Grafana Mimir]: https://grafana.com/oss/mimir/
 
 {{% docs/reference %}}
-[Collect open telemetry data]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/getting-started/collect-opentelemetry-data.md"
-[Collect open telemetry data]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/getting-started/collect-opentelemetry-data.md"
+[Collect open telemetry data]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/tasks/collect-opentelemetry-data.md"
+[Collect open telemetry data]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/tasks/collect-opentelemetry-data.md"
 [Components]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/concepts/components.md"
 [Components]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/concepts/components.md"
 [loki.write]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/reference/components/loki.write.md"

From 404423b7a0d393d53b0adaf1d4e1ddf92f4850a8 Mon Sep 17 00:00:00 2001
From: Paulin Todev <paulin.todev@gmail.com>
Date: Fri, 5 Jan 2024 10:53:34 +0000
Subject: [PATCH 06/68] Remove replace directive for golang.org/x/exp (#5972)

* Remove replace directive for golang.org/x/exp

* Update pyroscope/ebpf from 0.4.0 to 0.4.1

* Fill in missing docs about HTTP client options.
Fix missing defaults.
Add an "unsupported" converter diagnostic for keep_dropped_targets.
Add HTTP client options to AWS Lightsail SD.

* Add discovery.ovhcloud

* Add a converter for discovery.ovhcloud

* Update cloudwatch_exporter docs

* Fix converter tests

* Mention Prometheus update in the changelog.

---------

Co-authored-by: William Dumont <william.dumont@grafana.com>
---
 CHANGELOG.md                                  |  11 +-
 component/all/all.go                          |   1 +
 component/discovery/aws/ec2.go                |   5 +-
 component/discovery/aws/lightsail.go          |  40 +++--
 component/discovery/azure/azure.go            |   2 +
 component/discovery/consul/consul.go          |  11 +-
 .../discovery/digitalocean/digitalocean.go    |   2 +
 component/discovery/ovhcloud/ovhcloud.go      |  94 ++++++++++
 component/discovery/ovhcloud/ovhcloud_test.go | 135 ++++++++++++++
 .../prometheusconvert/component/ec2.go        |  42 ++---
 .../prometheusconvert/component/lightsail.go  |  40 ++---
 .../prometheusconvert/component/ovhcloud.go   |  40 +++++
 .../prometheusconvert/component/scrape.go     |   5 +
 .../component/service_discovery.go            |   6 +
 .../prometheusconvert/testdata/azure.river    |   6 +-
 .../prometheusconvert/testdata/consul.river   |   8 +-
 .../testdata/digitalocean.river               |  10 +-
 .../testdata/discovery.river                  |   4 -
 .../testdata/discovery_relabel.river          |   2 -
 .../prometheusconvert/testdata/ec2.diags      |   1 -
 .../prometheusconvert/testdata/ec2.river      |   5 +
 .../testdata/lightsail.diags                  |   1 -
 .../testdata/lightsail.river                  |   5 +
 .../prometheusconvert/testdata/ovhcloud.river |  43 +++++
 .../prometheusconvert/testdata/ovhcloud.yaml  |  21 +++
 .../prometheusconvert/testdata/scrape.diags   |   1 +
 .../prometheusconvert/testdata/scrape.yaml    |   2 +
 .../testdata/unsupported.diags                |   1 +
 .../testdata/unsupported.yaml                 |   1 +
 .../promtailconvert/testdata/azure.river      |   2 -
 .../promtailconvert/testdata/consul.river     |   2 -
 .../testdata/digitalocean.river               |   2 -
 .../testdata/prom_remote_write.river          |   4 +-
 .../staticconvert/testdata/prom_scrape.river  |   8 +-
 .../testdata/promtail_prom.river              |   8 +-
 .../flow/reference/compatibility/_index.md    |   1 +
 .../reference/components/discovery.consul.md  |   1 +
 .../reference/components/discovery.docker.md  |   1 +
 .../components/discovery.dockerswarm.md       |   1 +
 .../reference/components/discovery.ec2.md     |  29 +++
 .../reference/components/discovery.eureka.md  |  13 ++
 .../reference/components/discovery.hetzner.md |   1 +
 .../reference/components/discovery.http.md    |  15 ++
 .../reference/components/discovery.ionos.md   |  14 +-
 .../components/discovery.kubernetes.md        |   1 +
 .../reference/components/discovery.kuma.md    |   1 +
 .../reference/components/discovery.linode.md  |   1 +
 .../components/discovery.marathon.md          |   1 +
 .../reference/components/discovery.nomad.md   |   1 +
 .../components/discovery.ovhcloud.md          | 165 ++++++++++++++++++
 .../components/discovery.puppetdb.md          |   1 +
 .../prometheus.exporter.cloudwatch.md         |   2 +
 .../reference/components/prometheus.scrape.md |  46 ++---
 .../cloudwatch-exporter-config.md             |   2 +
 go.mod                                        |  49 ++----
 go.sum                                        | 149 +++++++++-------
 pkg/metrics/instance/configstore/api_test.go  |   1 +
 pkg/metrics/instance/host_filter_test.go      |   1 +
 pkg/metrics/instance/marshal_test.go          |   2 +
 59 files changed, 822 insertions(+), 248 deletions(-)
 create mode 100644 component/discovery/ovhcloud/ovhcloud.go
 create mode 100644 component/discovery/ovhcloud/ovhcloud_test.go
 create mode 100644 converter/internal/prometheusconvert/component/ovhcloud.go
 delete mode 100644 converter/internal/prometheusconvert/testdata/ec2.diags
 delete mode 100644 converter/internal/prometheusconvert/testdata/lightsail.diags
 create mode 100644 converter/internal/prometheusconvert/testdata/ovhcloud.river
 create mode 100644 converter/internal/prometheusconvert/testdata/ovhcloud.yaml
 create mode 100644 converter/internal/prometheusconvert/testdata/scrape.diags
 create mode 100644 docs/sources/flow/reference/components/discovery.ovhcloud.md

diff --git a/CHANGELOG.md b/CHANGELOG.md
index a86d9b1960f6..4d008e4ab023 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -25,6 +25,10 @@ Main (unreleased)
   - This change will not break any existing configurations and you can opt in to validation via the `validate_dimensions` configuration option.
   - Before this change, pulling metrics for azure resources with variable dimensions required one configuration per metric + dimension combination to avoid an error.
   - After this change, you can include all metrics and dimensions in a single configuration and the Azure APIs will only return dimensions which are valid for the various metrics.
+  
+### Features
+
+- A new `discovery.ovhcloud` component for discovering scrape targets on OVHcloud. (@ptodev)
 
 ### Enhancements
 
@@ -77,6 +81,7 @@ Main (unreleased)
 - Add `max_cache_size` to `prometheus.relabel` to allow configurability instead of hard coded 100,000. (@mattdurham)
 
 - Add support for `http_sd_config` within a `scrape_config` for prometheus to flow config conversion. (@erikbaranowski)
+- `discovery.lightsail` now supports additional parameters for configuring HTTP client settings. (@ptodev)
 
 ### Bugfixes
 
@@ -100,7 +105,11 @@ Main (unreleased)
 
 - Bump github.com/IBM/sarama from v1.41.2 to v1.42.1
 
-- Attatch unique Agent ID header to remote-write requests. (@captncraig)
+- Attach unique Agent ID header to remote-write requests. (@captncraig)
+
+- Update to v2.48.1 of `github.com/prometheus/prometheus`.
+  Previously, a custom fork of v2.47.2 was used. 
+  The custom fork of v2.47.2 also contained prometheus#12729 and prometheus#12677.
 
 v0.38.1 (2023-11-30)
 --------------------
diff --git a/component/all/all.go b/component/all/all.go
index 3822deee7c9c..b404f27ad4eb 100644
--- a/component/all/all.go
+++ b/component/all/all.go
@@ -24,6 +24,7 @@ import (
 	_ "github.com/grafana/agent/component/discovery/nerve"                          // Import discovery.nerve
 	_ "github.com/grafana/agent/component/discovery/nomad"                          // Import discovery.nomad
 	_ "github.com/grafana/agent/component/discovery/openstack"                      // Import discovery.openstack
+	_ "github.com/grafana/agent/component/discovery/ovhcloud"                       // Import discovery.ovhcloud
 	_ "github.com/grafana/agent/component/discovery/puppetdb"                       // Import discovery.puppetdb
 	_ "github.com/grafana/agent/component/discovery/relabel"                        // Import discovery.relabel
 	_ "github.com/grafana/agent/component/discovery/scaleway"                       // Import discovery.scaleway
diff --git a/component/discovery/aws/ec2.go b/component/discovery/aws/ec2.go
index 7672165e05e0..dfc6d00f5d53 100644
--- a/component/discovery/aws/ec2.go
+++ b/component/discovery/aws/ec2.go
@@ -69,8 +69,9 @@ func (args EC2Arguments) Convert() *promaws.EC2SDConfig {
 }
 
 var DefaultEC2SDConfig = EC2Arguments{
-	Port:            80,
-	RefreshInterval: 60 * time.Second,
+	Port:             80,
+	RefreshInterval:  60 * time.Second,
+	HTTPClientConfig: config.DefaultHTTPClientConfig,
 }
 
 // SetToDefault implements river.Defaulter.
diff --git a/component/discovery/aws/lightsail.go b/component/discovery/aws/lightsail.go
index 3f47366cc8b7..2b414a54faff 100644
--- a/component/discovery/aws/lightsail.go
+++ b/component/discovery/aws/lightsail.go
@@ -7,6 +7,7 @@ import (
 	"github.com/aws/aws-sdk-go/aws/ec2metadata"
 	"github.com/aws/aws-sdk-go/aws/session"
 	"github.com/grafana/agent/component"
+	"github.com/grafana/agent/component/common/config"
 	"github.com/grafana/agent/component/discovery"
 	"github.com/grafana/river/rivertypes"
 	promcfg "github.com/prometheus/common/config"
@@ -27,34 +28,37 @@ func init() {
 
 // LightsailArguments is the configuration for AWS Lightsail based service discovery.
 type LightsailArguments struct {
-	Endpoint        string            `river:"endpoint,attr,optional"`
-	Region          string            `river:"region,attr,optional"`
-	AccessKey       string            `river:"access_key,attr,optional"`
-	SecretKey       rivertypes.Secret `river:"secret_key,attr,optional"`
-	Profile         string            `river:"profile,attr,optional"`
-	RoleARN         string            `river:"role_arn,attr,optional"`
-	RefreshInterval time.Duration     `river:"refresh_interval,attr,optional"`
-	Port            int               `river:"port,attr,optional"`
+	Endpoint         string                  `river:"endpoint,attr,optional"`
+	Region           string                  `river:"region,attr,optional"`
+	AccessKey        string                  `river:"access_key,attr,optional"`
+	SecretKey        rivertypes.Secret       `river:"secret_key,attr,optional"`
+	Profile          string                  `river:"profile,attr,optional"`
+	RoleARN          string                  `river:"role_arn,attr,optional"`
+	RefreshInterval  time.Duration           `river:"refresh_interval,attr,optional"`
+	Port             int                     `river:"port,attr,optional"`
+	HTTPClientConfig config.HTTPClientConfig `river:",squash"`
 }
 
 func (args LightsailArguments) Convert() *promaws.LightsailSDConfig {
 	cfg := &promaws.LightsailSDConfig{
-		Endpoint:        args.Endpoint,
-		Region:          args.Region,
-		AccessKey:       args.AccessKey,
-		SecretKey:       promcfg.Secret(args.SecretKey),
-		Profile:         args.Profile,
-		RoleARN:         args.RoleARN,
-		RefreshInterval: model.Duration(args.RefreshInterval),
-		Port:            args.Port,
+		Endpoint:         args.Endpoint,
+		Region:           args.Region,
+		AccessKey:        args.AccessKey,
+		SecretKey:        promcfg.Secret(args.SecretKey),
+		Profile:          args.Profile,
+		RoleARN:          args.RoleARN,
+		RefreshInterval:  model.Duration(args.RefreshInterval),
+		Port:             args.Port,
+		HTTPClientConfig: *args.HTTPClientConfig.Convert(),
 	}
 	return cfg
 }
 
 // DefaultLightsailSDConfig is the default Lightsail SD configuration.
 var DefaultLightsailSDConfig = LightsailArguments{
-	Port:            80,
-	RefreshInterval: 60 * time.Second,
+	Port:             80,
+	RefreshInterval:  60 * time.Second,
+	HTTPClientConfig: config.DefaultHTTPClientConfig,
 }
 
 // SetToDefault implements river.Defaulter.
diff --git a/component/discovery/azure/azure.go b/component/discovery/azure/azure.go
index 3e1ef563625c..9ed1363f5250 100644
--- a/component/discovery/azure/azure.go
+++ b/component/discovery/azure/azure.go
@@ -55,6 +55,8 @@ var DefaultArguments = Arguments{
 	Environment:     azure.PublicCloud.Name,
 	Port:            80,
 	RefreshInterval: 5 * time.Minute,
+	FollowRedirects: true,
+	EnableHTTP2:     true,
 }
 
 // SetToDefault implements river.Defaulter.
diff --git a/component/discovery/consul/consul.go b/component/discovery/consul/consul.go
index 1192bae6c6d2..de6aae2d4510 100644
--- a/component/discovery/consul/consul.go
+++ b/component/discovery/consul/consul.go
@@ -45,11 +45,12 @@ type Arguments struct {
 }
 
 var DefaultArguments = Arguments{
-	Server:          "localhost:8500",
-	TagSeparator:    ",",
-	Scheme:          "http",
-	AllowStale:      true,
-	RefreshInterval: 30 * time.Second,
+	Server:           "localhost:8500",
+	TagSeparator:     ",",
+	Scheme:           "http",
+	AllowStale:       true,
+	RefreshInterval:  30 * time.Second,
+	HTTPClientConfig: config.DefaultHTTPClientConfig,
 }
 
 // SetToDefault implements river.Defaulter.
diff --git a/component/discovery/digitalocean/digitalocean.go b/component/discovery/digitalocean/digitalocean.go
index 360ef70ce818..bde15337da88 100644
--- a/component/discovery/digitalocean/digitalocean.go
+++ b/component/discovery/digitalocean/digitalocean.go
@@ -39,6 +39,8 @@ type Arguments struct {
 var DefaultArguments = Arguments{
 	Port:            80,
 	RefreshInterval: time.Minute,
+	FollowRedirects: true,
+	EnableHTTP2:     true,
 }
 
 // SetToDefault implements river.Defaulter.
diff --git a/component/discovery/ovhcloud/ovhcloud.go b/component/discovery/ovhcloud/ovhcloud.go
new file mode 100644
index 000000000000..e3479f45a5f7
--- /dev/null
+++ b/component/discovery/ovhcloud/ovhcloud.go
@@ -0,0 +1,94 @@
+package ovhcloud
+
+import (
+	"fmt"
+	"time"
+
+	"github.com/grafana/agent/component"
+	"github.com/grafana/agent/component/discovery"
+	"github.com/grafana/river/rivertypes"
+	"github.com/prometheus/common/config"
+	"github.com/prometheus/common/model"
+	prom_discovery "github.com/prometheus/prometheus/discovery/ovhcloud"
+)
+
+func init() {
+	component.Register(component.Registration{
+		Name:    "discovery.ovhcloud",
+		Args:    Arguments{},
+		Exports: discovery.Exports{},
+
+		Build: func(opts component.Options, args component.Arguments) (component.Component, error) {
+			return New(opts, args.(Arguments))
+		},
+	})
+}
+
+// Arguments configure the discovery.ovhcloud component.
+type Arguments struct {
+	Endpoint          string            `river:"endpoint,attr,optional"`
+	ApplicationKey    string            `river:"application_key,attr"`
+	ApplicationSecret rivertypes.Secret `river:"application_secret,attr"`
+	ConsumerKey       rivertypes.Secret `river:"consumer_key,attr"`
+	RefreshInterval   time.Duration     `river:"refresh_interval,attr,optional"`
+	Service           string            `river:"service,attr"`
+}
+
+// DefaultArguments is used to initialize default values for Arguments.
+var DefaultArguments = Arguments{
+	Endpoint:        "ovh-eu",
+	RefreshInterval: 60 * time.Second,
+}
+
+// SetToDefault implements river.Defaulter.
+func (args *Arguments) SetToDefault() {
+	*args = DefaultArguments
+}
+
+// Validate implements river.Validator.
+func (args *Arguments) Validate() error {
+	if args.Endpoint == "" {
+		return fmt.Errorf("endpoint cannot be empty")
+	}
+
+	if args.ApplicationKey == "" {
+		return fmt.Errorf("application_key cannot be empty")
+	}
+
+	if args.ApplicationSecret == "" {
+		return fmt.Errorf("application_secret cannot be empty")
+	}
+
+	if args.ConsumerKey == "" {
+		return fmt.Errorf("consumer_key cannot be empty")
+	}
+
+	switch args.Service {
+	case "dedicated_server", "vps":
+		// Valid value - do nothing.
+	default:
+		return fmt.Errorf("unknown service: %v", args.Service)
+	}
+
+	return nil
+}
+
+// Convert returns the upstream configuration struct.
+func (args *Arguments) Convert() *prom_discovery.SDConfig {
+	return &prom_discovery.SDConfig{
+		Endpoint:          args.Endpoint,
+		ApplicationKey:    args.ApplicationKey,
+		ApplicationSecret: config.Secret(args.ApplicationSecret),
+		ConsumerKey:       config.Secret(args.ConsumerKey),
+		RefreshInterval:   model.Duration(args.RefreshInterval),
+		Service:           args.Service,
+	}
+}
+
+// New returns a new instance of a discovery.ovhcloud component.
+func New(opts component.Options, args Arguments) (*discovery.Component, error) {
+	return discovery.New(opts, args, func(args component.Arguments) (discovery.Discoverer, error) {
+		newArgs := args.(Arguments)
+		return prom_discovery.NewDiscovery(newArgs.Convert(), opts.Logger)
+	})
+}
diff --git a/component/discovery/ovhcloud/ovhcloud_test.go b/component/discovery/ovhcloud/ovhcloud_test.go
new file mode 100644
index 000000000000..8e579574fc67
--- /dev/null
+++ b/component/discovery/ovhcloud/ovhcloud_test.go
@@ -0,0 +1,135 @@
+package ovhcloud_test
+
+import (
+	"testing"
+	"time"
+
+	"github.com/grafana/agent/component/discovery/ovhcloud"
+	"github.com/grafana/river"
+	"github.com/prometheus/common/model"
+	prom_ovh "github.com/prometheus/prometheus/discovery/ovhcloud"
+	"github.com/stretchr/testify/require"
+)
+
+func TestUnmarshal(t *testing.T) {
+	tests := []struct {
+		testName string
+		cfg      string
+		expected *prom_ovh.SDConfig
+		errorMsg string
+	}{
+		{
+			testName: "defaults",
+			cfg: `
+				application_key = "appkey"
+				application_secret = "appsecret"
+				consumer_key = "consumerkey"
+				service = "dedicated_server"
+			`,
+			expected: &prom_ovh.SDConfig{
+				Endpoint:          ovhcloud.DefaultArguments.Endpoint,
+				ApplicationKey:    "appkey",
+				ApplicationSecret: "appsecret",
+				ConsumerKey:       "consumerkey",
+				RefreshInterval:   model.Duration(ovhcloud.DefaultArguments.RefreshInterval),
+				Service:           "dedicated_server",
+			},
+		},
+		{
+			testName: "explicit",
+			cfg: `
+				endpoint = "custom-endpoint"
+				refresh_interval = "11m"
+				application_key = "appkey"
+				application_secret = "appsecret"
+				consumer_key = "consumerkey"
+				service = "vps"
+			`,
+			expected: &prom_ovh.SDConfig{
+				Endpoint:          "custom-endpoint",
+				ApplicationKey:    "appkey",
+				ApplicationSecret: "appsecret",
+				ConsumerKey:       "consumerkey",
+				RefreshInterval:   model.Duration(11 * time.Minute),
+				Service:           "vps",
+			},
+		},
+		{
+			testName: "empty application key",
+			cfg: `
+				endpoint = "custom-endpoint"
+				refresh_interval = "11m"
+				application_key = ""
+				application_secret = "appsecret"
+				consumer_key = "consumerkey"
+				service = "vps"
+			`,
+			errorMsg: "application_key cannot be empty",
+		},
+		{
+			testName: "empty application secret",
+			cfg: `
+				endpoint = "custom-endpoint"
+				refresh_interval = "11m"
+				application_key = "appkey"
+				application_secret = ""
+				consumer_key = "consumerkey"
+				service = "vps"
+			`,
+			errorMsg: "application_secret cannot be empty",
+		},
+		{
+			testName: "empty consumer key",
+			cfg: `
+				endpoint = "custom-endpoint"
+				refresh_interval = "11m"
+				application_key = "appkey"
+				application_secret = "appsecret"
+				consumer_key = ""
+				service = "vps"
+			`,
+			errorMsg: "consumer_key cannot be empty",
+		},
+		{
+			testName: "empty endpoint",
+			cfg: `
+				endpoint = ""
+				refresh_interval = "11m"
+				application_key = "appkey"
+				application_secret = "appsecret"
+				consumer_key = "consumerkey"
+				service = "vps"
+			`,
+			errorMsg: "endpoint cannot be empty",
+		},
+		{
+			testName: "unknown service",
+			cfg: `
+				endpoint = "custom-endpoint"
+				refresh_interval = "11m"
+				application_key = "appkey"
+				application_secret = "appsecret"
+				consumer_key = "consumerkey"
+				service = "asdf"
+			`,
+			errorMsg: "unknown service: asdf",
+		},
+	}
+
+	for _, tc := range tests {
+		t.Run(tc.testName, func(t *testing.T) {
+			var args ovhcloud.Arguments
+			err := river.Unmarshal([]byte(tc.cfg), &args)
+			if tc.errorMsg != "" {
+				require.ErrorContains(t, err, tc.errorMsg)
+				return
+			}
+
+			require.NoError(t, err)
+
+			promArgs := args.Convert()
+
+			require.Equal(t, tc.expected, promArgs)
+		})
+	}
+}
diff --git a/converter/internal/prometheusconvert/component/ec2.go b/converter/internal/prometheusconvert/component/ec2.go
index acd89755d165..5edf6ec0bac3 100644
--- a/converter/internal/prometheusconvert/component/ec2.go
+++ b/converter/internal/prometheusconvert/component/ec2.go
@@ -9,7 +9,6 @@ import (
 	"github.com/grafana/agent/converter/internal/common"
 	"github.com/grafana/agent/converter/internal/prometheusconvert/build"
 	"github.com/grafana/river/rivertypes"
-	prom_config "github.com/prometheus/common/config"
 	prom_aws "github.com/prometheus/prometheus/discovery/aws"
 )
 
@@ -22,27 +21,7 @@ func appendDiscoveryEC2(pb *build.PrometheusBlocks, label string, sdConfig *prom
 }
 
 func ValidateDiscoveryEC2(sdConfig *prom_aws.EC2SDConfig) diag.Diagnostics {
-	var diags diag.Diagnostics
-
-	var nilBasicAuth *prom_config.BasicAuth
-	var nilAuthorization *prom_config.Authorization
-	var nilOAuth2 *prom_config.OAuth2
-
-	diags.AddAll(common.ValidateSupported(common.NotEquals, sdConfig.HTTPClientConfig.BasicAuth, nilBasicAuth, "ec2_sd_configs basic_auth", ""))
-	diags.AddAll(common.ValidateSupported(common.NotEquals, sdConfig.HTTPClientConfig.Authorization, nilAuthorization, "ec2_sd_configs authorization", ""))
-	diags.AddAll(common.ValidateSupported(common.NotEquals, sdConfig.HTTPClientConfig.OAuth2, nilOAuth2, "ec2_sd_configs oauth2", ""))
-	diags.AddAll(common.ValidateSupported(common.NotDeepEquals, sdConfig.HTTPClientConfig.BearerToken, prom_config.DefaultHTTPClientConfig.BearerToken, "ec2_sd_configs bearer_token", ""))
-	diags.AddAll(common.ValidateSupported(common.NotDeepEquals, sdConfig.HTTPClientConfig.BearerTokenFile, prom_config.DefaultHTTPClientConfig.BearerTokenFile, "ec2_sd_configs bearer_token_file", ""))
-	diags.AddAll(common.ValidateSupported(common.NotDeepEquals, sdConfig.HTTPClientConfig.FollowRedirects, prom_config.DefaultHTTPClientConfig.FollowRedirects, "ec2_sd_configs follow_redirects", ""))
-	diags.AddAll(common.ValidateSupported(common.NotDeepEquals, sdConfig.HTTPClientConfig.EnableHTTP2, prom_config.DefaultHTTPClientConfig.EnableHTTP2, "ec2_sd_configs enable_http2", ""))
-	diags.AddAll(common.ValidateSupported(common.NotDeepEquals, sdConfig.HTTPClientConfig.ProxyConfig, prom_config.DefaultHTTPClientConfig.ProxyConfig, "ec2_sd_configs proxy", ""))
-
-	// Do a last check in case any of the specific checks missed anything.
-	if len(diags) == 0 {
-		diags.AddAll(common.ValidateSupported(common.NotDeepEquals, sdConfig.HTTPClientConfig, prom_config.DefaultHTTPClientConfig, "ec2_sd_configs http_client_config", ""))
-	}
-
-	return diags
+	return common.ValidateHttpClientConfig(&sdConfig.HTTPClientConfig)
 }
 
 func toDiscoveryEC2(sdConfig *prom_aws.EC2SDConfig) *aws.EC2Arguments {
@@ -51,15 +30,16 @@ func toDiscoveryEC2(sdConfig *prom_aws.EC2SDConfig) *aws.EC2Arguments {
 	}
 
 	return &aws.EC2Arguments{
-		Endpoint:        sdConfig.Endpoint,
-		Region:          sdConfig.Region,
-		AccessKey:       sdConfig.AccessKey,
-		SecretKey:       rivertypes.Secret(sdConfig.SecretKey),
-		Profile:         sdConfig.Profile,
-		RoleARN:         sdConfig.RoleARN,
-		RefreshInterval: time.Duration(sdConfig.RefreshInterval),
-		Port:            sdConfig.Port,
-		Filters:         toEC2Filters(sdConfig.Filters),
+		Endpoint:         sdConfig.Endpoint,
+		Region:           sdConfig.Region,
+		AccessKey:        sdConfig.AccessKey,
+		SecretKey:        rivertypes.Secret(sdConfig.SecretKey),
+		Profile:          sdConfig.Profile,
+		RoleARN:          sdConfig.RoleARN,
+		RefreshInterval:  time.Duration(sdConfig.RefreshInterval),
+		Port:             sdConfig.Port,
+		Filters:          toEC2Filters(sdConfig.Filters),
+		HTTPClientConfig: *common.ToHttpClientConfig(&sdConfig.HTTPClientConfig),
 	}
 }
 
diff --git a/converter/internal/prometheusconvert/component/lightsail.go b/converter/internal/prometheusconvert/component/lightsail.go
index 10480bd082ff..9a97c2f506b4 100644
--- a/converter/internal/prometheusconvert/component/lightsail.go
+++ b/converter/internal/prometheusconvert/component/lightsail.go
@@ -9,7 +9,6 @@ import (
 	"github.com/grafana/agent/converter/internal/common"
 	"github.com/grafana/agent/converter/internal/prometheusconvert/build"
 	"github.com/grafana/river/rivertypes"
-	prom_config "github.com/prometheus/common/config"
 	prom_aws "github.com/prometheus/prometheus/discovery/aws"
 )
 
@@ -22,27 +21,7 @@ func appendDiscoveryLightsail(pb *build.PrometheusBlocks, label string, sdConfig
 }
 
 func ValidateDiscoveryLightsail(sdConfig *prom_aws.LightsailSDConfig) diag.Diagnostics {
-	var diags diag.Diagnostics
-
-	var nilBasicAuth *prom_config.BasicAuth
-	var nilAuthorization *prom_config.Authorization
-	var nilOAuth2 *prom_config.OAuth2
-
-	diags.AddAll(common.ValidateSupported(common.NotEquals, sdConfig.HTTPClientConfig.BasicAuth, nilBasicAuth, "lightsail_sd_configs basic_auth", ""))
-	diags.AddAll(common.ValidateSupported(common.NotEquals, sdConfig.HTTPClientConfig.Authorization, nilAuthorization, "lightsail_sd_configs authorization", ""))
-	diags.AddAll(common.ValidateSupported(common.NotEquals, sdConfig.HTTPClientConfig.OAuth2, nilOAuth2, "lightsail_sd_configs oauth2", ""))
-	diags.AddAll(common.ValidateSupported(common.NotDeepEquals, sdConfig.HTTPClientConfig.BearerToken, prom_config.DefaultHTTPClientConfig.BearerToken, "lightsail_sd_configs bearer_token", ""))
-	diags.AddAll(common.ValidateSupported(common.NotDeepEquals, sdConfig.HTTPClientConfig.BearerTokenFile, prom_config.DefaultHTTPClientConfig.BearerTokenFile, "lightsail_sd_configs bearer_token_file", ""))
-	diags.AddAll(common.ValidateSupported(common.NotDeepEquals, sdConfig.HTTPClientConfig.FollowRedirects, prom_config.DefaultHTTPClientConfig.FollowRedirects, "lightsail_sd_configs follow_redirects", ""))
-	diags.AddAll(common.ValidateSupported(common.NotDeepEquals, sdConfig.HTTPClientConfig.EnableHTTP2, prom_config.DefaultHTTPClientConfig.EnableHTTP2, "lightsail_sd_configs enable_http2", ""))
-	diags.AddAll(common.ValidateSupported(common.NotDeepEquals, sdConfig.HTTPClientConfig.ProxyConfig, prom_config.DefaultHTTPClientConfig.ProxyConfig, "lightsail_sd_configs proxy", ""))
-
-	// Do a last check in case any of the specific checks missed anything.
-	if len(diags) == 0 {
-		diags.AddAll(common.ValidateSupported(common.NotDeepEquals, sdConfig.HTTPClientConfig, prom_config.DefaultHTTPClientConfig, "lightsail_sd_configs http_client_config", ""))
-	}
-
-	return diags
+	return common.ValidateHttpClientConfig(&sdConfig.HTTPClientConfig)
 }
 
 func toDiscoveryLightsail(sdConfig *prom_aws.LightsailSDConfig) *aws.LightsailArguments {
@@ -51,13 +30,14 @@ func toDiscoveryLightsail(sdConfig *prom_aws.LightsailSDConfig) *aws.LightsailAr
 	}
 
 	return &aws.LightsailArguments{
-		Endpoint:        sdConfig.Endpoint,
-		Region:          sdConfig.Region,
-		AccessKey:       sdConfig.AccessKey,
-		SecretKey:       rivertypes.Secret(sdConfig.SecretKey),
-		Profile:         sdConfig.Profile,
-		RoleARN:         sdConfig.RoleARN,
-		RefreshInterval: time.Duration(sdConfig.RefreshInterval),
-		Port:            sdConfig.Port,
+		Endpoint:         sdConfig.Endpoint,
+		Region:           sdConfig.Region,
+		AccessKey:        sdConfig.AccessKey,
+		SecretKey:        rivertypes.Secret(sdConfig.SecretKey),
+		Profile:          sdConfig.Profile,
+		RoleARN:          sdConfig.RoleARN,
+		RefreshInterval:  time.Duration(sdConfig.RefreshInterval),
+		Port:             sdConfig.Port,
+		HTTPClientConfig: *common.ToHttpClientConfig(&sdConfig.HTTPClientConfig),
 	}
 }
diff --git a/converter/internal/prometheusconvert/component/ovhcloud.go b/converter/internal/prometheusconvert/component/ovhcloud.go
new file mode 100644
index 000000000000..f4a59fd525cf
--- /dev/null
+++ b/converter/internal/prometheusconvert/component/ovhcloud.go
@@ -0,0 +1,40 @@
+package component
+
+import (
+	"time"
+
+	"github.com/grafana/agent/component/discovery"
+	"github.com/grafana/agent/component/discovery/ovhcloud"
+	"github.com/grafana/agent/converter/diag"
+	"github.com/grafana/agent/converter/internal/common"
+	"github.com/grafana/agent/converter/internal/prometheusconvert/build"
+	"github.com/grafana/river/rivertypes"
+	prom_discovery "github.com/prometheus/prometheus/discovery/ovhcloud"
+)
+
+func appendDiscoveryOvhcloud(pb *build.PrometheusBlocks, label string, sdConfig *prom_discovery.SDConfig) discovery.Exports {
+	discoveryOvhcloudArgs := toDiscoveryOvhcloud(sdConfig)
+	name := []string{"discovery", "ovhcloud"}
+	block := common.NewBlockWithOverride(name, label, discoveryOvhcloudArgs)
+	pb.DiscoveryBlocks = append(pb.DiscoveryBlocks, build.NewPrometheusBlock(block, name, label, "", ""))
+	return common.NewDiscoveryExports("discovery.ovhcloud." + label + ".targets")
+}
+
+func ValidateDiscoveryOvhcloud(sdConfig *prom_discovery.SDConfig) diag.Diagnostics {
+	return nil
+}
+
+func toDiscoveryOvhcloud(sdConfig *prom_discovery.SDConfig) *ovhcloud.Arguments {
+	if sdConfig == nil {
+		return nil
+	}
+
+	return &ovhcloud.Arguments{
+		Endpoint:          sdConfig.Endpoint,
+		ApplicationKey:    sdConfig.ApplicationKey,
+		ApplicationSecret: rivertypes.Secret(sdConfig.ApplicationSecret),
+		ConsumerKey:       rivertypes.Secret(sdConfig.ConsumerKey),
+		RefreshInterval:   time.Duration(sdConfig.RefreshInterval),
+		Service:           sdConfig.Service,
+	}
+}
diff --git a/converter/internal/prometheusconvert/component/scrape.go b/converter/internal/prometheusconvert/component/scrape.go
index 651e4e2c5bc1..a2005cf85fbb 100644
--- a/converter/internal/prometheusconvert/component/scrape.go
+++ b/converter/internal/prometheusconvert/component/scrape.go
@@ -30,7 +30,12 @@ func AppendPrometheusScrape(pb *build.PrometheusBlocks, scrapeConfig *prom_confi
 func ValidatePrometheusScrape(scrapeConfig *prom_config.ScrapeConfig) diag.Diagnostics {
 	var diags diag.Diagnostics
 
+	// https://github.com/grafana/agent/pull/5972#discussion_r1441980155
+	diags.AddAll(common.ValidateSupported(common.NotEquals, scrapeConfig.TrackTimestampsStaleness, false, "scrape_configs track_timestamps_staleness", ""))
+	// https://github.com/prometheus/prometheus/commit/40240c9c1cb290fe95f1e61886b23fab860aeacd
 	diags.AddAll(common.ValidateSupported(common.NotEquals, scrapeConfig.NativeHistogramBucketLimit, uint(0), "scrape_configs native_histogram_bucket_limit", ""))
+	// https://github.com/prometheus/prometheus/pull/12647
+	diags.AddAll(common.ValidateSupported(common.NotEquals, scrapeConfig.KeepDroppedTargets, uint(0), "scrape_configs keep_dropped_targets", ""))
 	diags.AddAll(common.ValidateHttpClientConfig(&scrapeConfig.HTTPClientConfig))
 
 	return diags
diff --git a/converter/internal/prometheusconvert/component/service_discovery.go b/converter/internal/prometheusconvert/component/service_discovery.go
index 52780475e63a..69c179f1ef9a 100644
--- a/converter/internal/prometheusconvert/component/service_discovery.go
+++ b/converter/internal/prometheusconvert/component/service_discovery.go
@@ -25,6 +25,7 @@ import (
 	prom_marathon "github.com/prometheus/prometheus/discovery/marathon"
 	prom_docker "github.com/prometheus/prometheus/discovery/moby"
 	prom_openstack "github.com/prometheus/prometheus/discovery/openstack"
+	prom_ovhcloud "github.com/prometheus/prometheus/discovery/ovhcloud"
 	prom_scaleway "github.com/prometheus/prometheus/discovery/scaleway"
 	prom_triton "github.com/prometheus/prometheus/discovery/triton"
 	prom_xds "github.com/prometheus/prometheus/discovery/xds"
@@ -100,6 +101,9 @@ func AppendServiceDiscoveryConfig(pb *build.PrometheusBlocks, serviceDiscoveryCo
 	case *prom_docker.DockerSwarmSDConfig:
 		labelCounts["dockerswarm"]++
 		return appendDiscoveryDockerswarm(pb, common.LabelWithIndex(labelCounts["dockerswarm"]-1, label), sdc)
+	case *prom_ovhcloud.SDConfig:
+		labelCounts["ovhcloud"]++
+		return appendDiscoveryOvhcloud(pb, common.LabelWithIndex(labelCounts["ovhcloud"]-1, label), sdc)
 	default:
 		return discovery.Exports{}
 	}
@@ -151,6 +155,8 @@ func ValidateServiceDiscoveryConfig(serviceDiscoveryConfig prom_discover.Config)
 		return ValidateDiscoveryOpenstack(sdc)
 	case *prom_docker.DockerSwarmSDConfig:
 		return ValidateDiscoveryDockerswarm(sdc)
+	case *prom_ovhcloud.SDConfig:
+		return ValidateDiscoveryOvhcloud(sdc)
 	default:
 		var diags diag.Diagnostics
 		diags.Add(diag.SeverityLevelError, fmt.Sprintf("The converter does not support converting the provided %s service discovery.", serviceDiscoveryConfig.Name()))
diff --git a/converter/internal/prometheusconvert/testdata/azure.river b/converter/internal/prometheusconvert/testdata/azure.river
index 368673474b22..e1bc751bf05d 100644
--- a/converter/internal/prometheusconvert/testdata/azure.river
+++ b/converter/internal/prometheusconvert/testdata/azure.river
@@ -10,8 +10,6 @@ discovery.azure "prometheus1" {
 	managed_identity {
 		client_id = "client"
 	}
-	follow_redirects = true
-	enable_http2     = true
 }
 
 discovery.azure "prometheus2" {
@@ -26,8 +24,8 @@ discovery.azure "prometheus2" {
 	managed_identity {
 		client_id = "client"
 	}
-	proxy_url    = "proxy"
-	enable_http2 = true
+	proxy_url        = "proxy"
+	follow_redirects = false
 }
 
 prometheus.scrape "prometheus1" {
diff --git a/converter/internal/prometheusconvert/testdata/consul.river b/converter/internal/prometheusconvert/testdata/consul.river
index b3d7879ed47e..ccf9e8c189c3 100644
--- a/converter/internal/prometheusconvert/testdata/consul.river
+++ b/converter/internal/prometheusconvert/testdata/consul.river
@@ -1,13 +1,9 @@
 discovery.consul "prometheus1" {
-	services         = ["myapp"]
-	follow_redirects = true
-	enable_http2     = true
+	services = ["myapp"]
 }
 
 discovery.consul "prometheus2" {
-	services         = ["otherapp"]
-	follow_redirects = true
-	enable_http2     = true
+	services = ["otherapp"]
 }
 
 prometheus.scrape "prometheus1" {
diff --git a/converter/internal/prometheusconvert/testdata/digitalocean.river b/converter/internal/prometheusconvert/testdata/digitalocean.river
index 4e39bf9be2c6..27b0629afc15 100644
--- a/converter/internal/prometheusconvert/testdata/digitalocean.river
+++ b/converter/internal/prometheusconvert/testdata/digitalocean.river
@@ -1,12 +1,6 @@
-discovery.digitalocean "prometheus1" {
-	follow_redirects = true
-	enable_http2     = true
-}
+discovery.digitalocean "prometheus1" { }
 
-discovery.digitalocean "prometheus2" {
-	follow_redirects = true
-	enable_http2     = true
-}
+discovery.digitalocean "prometheus2" { }
 
 prometheus.scrape "prometheus1" {
 	targets = concat(
diff --git a/converter/internal/prometheusconvert/testdata/discovery.river b/converter/internal/prometheusconvert/testdata/discovery.river
index 4ff3cc509ce3..f2c59fa7a4f6 100644
--- a/converter/internal/prometheusconvert/testdata/discovery.river
+++ b/converter/internal/prometheusconvert/testdata/discovery.river
@@ -10,8 +10,6 @@ discovery.azure "prometheus1" {
 	managed_identity {
 		client_id = "client1"
 	}
-	follow_redirects = true
-	enable_http2     = true
 }
 
 discovery.azure "prometheus1_2" {
@@ -26,8 +24,6 @@ discovery.azure "prometheus1_2" {
 	managed_identity {
 		client_id = "client2"
 	}
-	follow_redirects = true
-	enable_http2     = true
 }
 
 discovery.relabel "prometheus1" {
diff --git a/converter/internal/prometheusconvert/testdata/discovery_relabel.river b/converter/internal/prometheusconvert/testdata/discovery_relabel.river
index 8d37e5c3a9ad..4b1009886810 100644
--- a/converter/internal/prometheusconvert/testdata/discovery_relabel.river
+++ b/converter/internal/prometheusconvert/testdata/discovery_relabel.river
@@ -10,8 +10,6 @@ discovery.azure "prometheus2" {
 	managed_identity {
 		client_id = "client"
 	}
-	follow_redirects = true
-	enable_http2     = true
 }
 
 discovery.relabel "prometheus1" {
diff --git a/converter/internal/prometheusconvert/testdata/ec2.diags b/converter/internal/prometheusconvert/testdata/ec2.diags
deleted file mode 100644
index 3301a9ad2213..000000000000
--- a/converter/internal/prometheusconvert/testdata/ec2.diags
+++ /dev/null
@@ -1 +0,0 @@
-(Error) The converter does not support converting the provided ec2_sd_configs bearer_token_file config.
\ No newline at end of file
diff --git a/converter/internal/prometheusconvert/testdata/ec2.river b/converter/internal/prometheusconvert/testdata/ec2.river
index 22775efe8ed2..d07d133a659b 100644
--- a/converter/internal/prometheusconvert/testdata/ec2.river
+++ b/converter/internal/prometheusconvert/testdata/ec2.river
@@ -3,6 +3,11 @@ discovery.ec2 "prometheus1" {
 	access_key = "YOUR_ACCESS_KEY"
 	secret_key = "YOUR_SECRET_KEY"
 	port       = 8080
+
+	authorization {
+		type             = "Bearer"
+		credentials_file = "/tmp/token.file"
+	}
 }
 
 discovery.ec2 "prometheus2" {
diff --git a/converter/internal/prometheusconvert/testdata/lightsail.diags b/converter/internal/prometheusconvert/testdata/lightsail.diags
deleted file mode 100644
index 0a96d20e3985..000000000000
--- a/converter/internal/prometheusconvert/testdata/lightsail.diags
+++ /dev/null
@@ -1 +0,0 @@
-(Error) The converter does not support converting the provided lightsail_sd_configs bearer_token_file config.
\ No newline at end of file
diff --git a/converter/internal/prometheusconvert/testdata/lightsail.river b/converter/internal/prometheusconvert/testdata/lightsail.river
index 754d9c5d39ea..4e1966490532 100644
--- a/converter/internal/prometheusconvert/testdata/lightsail.river
+++ b/converter/internal/prometheusconvert/testdata/lightsail.river
@@ -3,6 +3,11 @@ discovery.lightsail "prometheus1" {
 	access_key = "YOUR_ACCESS_KEY"
 	secret_key = "YOUR_SECRET_KEY"
 	port       = 8080
+
+	authorization {
+		type             = "Bearer"
+		credentials_file = "/tmp/token.file"
+	}
 }
 
 discovery.lightsail "prometheus2" {
diff --git a/converter/internal/prometheusconvert/testdata/ovhcloud.river b/converter/internal/prometheusconvert/testdata/ovhcloud.river
new file mode 100644
index 000000000000..dff1e85bcee3
--- /dev/null
+++ b/converter/internal/prometheusconvert/testdata/ovhcloud.river
@@ -0,0 +1,43 @@
+discovery.ovhcloud "prometheus1" {
+	application_key    = "app_key"
+	application_secret = "app_secret"
+	consumer_key       = "cons_key"
+	service            = "vps"
+}
+
+discovery.ovhcloud "prometheus2" {
+	endpoint           = "ovh-us"
+	application_key    = "app_key_2"
+	application_secret = "app_secret_2"
+	consumer_key       = "cons_key_2"
+	refresh_interval   = "14m0s"
+	service            = "dedicated_server"
+}
+
+prometheus.scrape "prometheus1" {
+	targets = concat(
+		discovery.ovhcloud.prometheus1.targets,
+		[{
+			__address__ = "localhost:9090",
+		}],
+	)
+	forward_to = [prometheus.remote_write.default.receiver]
+	job_name   = "prometheus1"
+}
+
+prometheus.scrape "prometheus2" {
+	targets    = discovery.ovhcloud.prometheus2.targets
+	forward_to = [prometheus.remote_write.default.receiver]
+	job_name   = "prometheus2"
+}
+
+prometheus.remote_write "default" {
+	endpoint {
+		name = "remote1"
+		url  = "http://remote-write-url1"
+
+		queue_config { }
+
+		metadata_config { }
+	}
+}
diff --git a/converter/internal/prometheusconvert/testdata/ovhcloud.yaml b/converter/internal/prometheusconvert/testdata/ovhcloud.yaml
new file mode 100644
index 000000000000..2201686989fc
--- /dev/null
+++ b/converter/internal/prometheusconvert/testdata/ovhcloud.yaml
@@ -0,0 +1,21 @@
+scrape_configs:
+  - job_name: "prometheus1"
+    static_configs:
+      - targets: ["localhost:9090"]
+    ovhcloud_sd_configs:
+      - application_key: "app_key"
+        application_secret: "app_secret"
+        consumer_key: "cons_key"
+        service: "vps"
+  - job_name: "prometheus2"
+    ovhcloud_sd_configs:
+      - application_key: "app_key_2"
+        application_secret: "app_secret_2"
+        consumer_key: "cons_key_2"
+        service: "dedicated_server"
+        endpoint: "ovh-us"
+        refresh_interval: "14m"
+
+remote_write:
+  - name: "remote1"
+    url: "http://remote-write-url1"
\ No newline at end of file
diff --git a/converter/internal/prometheusconvert/testdata/scrape.diags b/converter/internal/prometheusconvert/testdata/scrape.diags
new file mode 100644
index 000000000000..de85de6536cf
--- /dev/null
+++ b/converter/internal/prometheusconvert/testdata/scrape.diags
@@ -0,0 +1 @@
+(Error) The converter does not support converting the provided scrape_configs track_timestamps_staleness config.
\ No newline at end of file
diff --git a/converter/internal/prometheusconvert/testdata/scrape.yaml b/converter/internal/prometheusconvert/testdata/scrape.yaml
index d4b1e7e203c7..54496f296005 100644
--- a/converter/internal/prometheusconvert/testdata/scrape.yaml
+++ b/converter/internal/prometheusconvert/testdata/scrape.yaml
@@ -6,6 +6,7 @@ global:
 scrape_configs:
   - job_name: "prometheus-1"
     honor_timestamps: false
+    track_timestamps_staleness: true
     scrape_interval: 10s
     scrape_timeout: 5s
     static_configs:
@@ -16,6 +17,7 @@ scrape_configs:
       username: 'user'
       password: 'pass'
   - job_name: "prometheus2"
+    track_timestamps_staleness: false
     static_configs:
       - targets: ["localhost:9091"]
       - targets: ["localhost:9092"]
diff --git a/converter/internal/prometheusconvert/testdata/unsupported.diags b/converter/internal/prometheusconvert/testdata/unsupported.diags
index ccdf9bd3da88..966bd0d1e5bf 100644
--- a/converter/internal/prometheusconvert/testdata/unsupported.diags
+++ b/converter/internal/prometheusconvert/testdata/unsupported.diags
@@ -5,6 +5,7 @@
 (Error) The converter does not support converting the provided HTTP Client no_proxy config.
 (Error) The converter does not support converting the provided nomad service discovery.
 (Error) The converter does not support converting the provided scrape_configs native_histogram_bucket_limit config.
+(Error) The converter does not support converting the provided scrape_configs keep_dropped_targets config.
 (Error) The converter does not support converting the provided storage config.
 (Error) The converter does not support converting the provided tracing config.
 (Error) The converter does not support converting the provided HTTP Client proxy_from_environment config.
diff --git a/converter/internal/prometheusconvert/testdata/unsupported.yaml b/converter/internal/prometheusconvert/testdata/unsupported.yaml
index bf677c030a39..5d174c36cb8e 100644
--- a/converter/internal/prometheusconvert/testdata/unsupported.yaml
+++ b/converter/internal/prometheusconvert/testdata/unsupported.yaml
@@ -44,6 +44,7 @@ scrape_configs:
       - targets: ["localhost:9091"]
     scrape_classic_histograms: true
     native_histogram_bucket_limit: 2
+    keep_dropped_targets: 1000
 
 remote_write:
   - name: "remote1"
diff --git a/converter/internal/promtailconvert/testdata/azure.river b/converter/internal/promtailconvert/testdata/azure.river
index bfbe087b6de4..90a652e05dab 100644
--- a/converter/internal/promtailconvert/testdata/azure.river
+++ b/converter/internal/promtailconvert/testdata/azure.river
@@ -10,8 +10,6 @@ discovery.azure "fun" {
 	managed_identity {
 		client_id = "client"
 	}
-	follow_redirects = true
-	enable_http2     = true
 }
 
 local.file_match "fun" {
diff --git a/converter/internal/promtailconvert/testdata/consul.river b/converter/internal/promtailconvert/testdata/consul.river
index 20b07e0900b3..72563a502d95 100644
--- a/converter/internal/promtailconvert/testdata/consul.river
+++ b/converter/internal/promtailconvert/testdata/consul.river
@@ -17,8 +17,6 @@ discovery.consul "fun" {
 		username = "toby"
 		password = "this_password_is_safe_innit?"
 	}
-	follow_redirects = true
-	enable_http2     = true
 }
 
 discovery.relabel "fun" {
diff --git a/converter/internal/promtailconvert/testdata/digitalocean.river b/converter/internal/promtailconvert/testdata/digitalocean.river
index 7308cfa33489..fb71e471c56f 100644
--- a/converter/internal/promtailconvert/testdata/digitalocean.river
+++ b/converter/internal/promtailconvert/testdata/digitalocean.river
@@ -1,8 +1,6 @@
 discovery.digitalocean "fun" {
 	refresh_interval = "10m0s"
 	port             = 1234
-	follow_redirects = true
-	enable_http2     = true
 }
 
 local.file_match "fun" {
diff --git a/converter/internal/staticconvert/testdata/prom_remote_write.river b/converter/internal/staticconvert/testdata/prom_remote_write.river
index df5a9848a234..bc9edcd50834 100644
--- a/converter/internal/staticconvert/testdata/prom_remote_write.river
+++ b/converter/internal/staticconvert/testdata/prom_remote_write.river
@@ -77,7 +77,7 @@ prometheus.remote_write "metrics_test5_sigv4_explicit" {
 
 prometheus.remote_write "metrics_test6_azuread_defaults" {
 	endpoint {
-		name = "test6_azuread_defaults-50e17f"
+		name = "test6_azuread_defaults-fbed02"
 		url  = "http://localhost:9012/api/prom/push"
 
 		queue_config { }
@@ -94,7 +94,7 @@ prometheus.remote_write "metrics_test6_azuread_defaults" {
 
 prometheus.remote_write "metrics_test7_azuread_explicit" {
 	endpoint {
-		name = "test7_azuread_explicit-0f55f1"
+		name = "test7_azuread_explicit-416842"
 		url  = "http://localhost:9012/api/prom/push"
 
 		queue_config { }
diff --git a/converter/internal/staticconvert/testdata/prom_scrape.river b/converter/internal/staticconvert/testdata/prom_scrape.river
index c7db1090e90f..e73fd76733e3 100644
--- a/converter/internal/staticconvert/testdata/prom_scrape.river
+++ b/converter/internal/staticconvert/testdata/prom_scrape.river
@@ -10,9 +10,7 @@ discovery.azure "metrics_agent_promobee" {
 	managed_identity {
 		client_id = "client"
 	}
-	proxy_url        = "proxy"
-	follow_redirects = true
-	enable_http2     = true
+	proxy_url = "proxy"
 }
 
 discovery.azure "metrics_agent_promobee_2" {
@@ -27,9 +25,7 @@ discovery.azure "metrics_agent_promobee_2" {
 	managed_identity {
 		client_id = "client"
 	}
-	proxy_url        = "proxy"
-	follow_redirects = true
-	enable_http2     = true
+	proxy_url = "proxy"
 }
 
 discovery.relabel "metrics_agent_promobee" {
diff --git a/converter/internal/staticconvert/testdata/promtail_prom.river b/converter/internal/staticconvert/testdata/promtail_prom.river
index f3b810dbe704..e31469f5267b 100644
--- a/converter/internal/staticconvert/testdata/promtail_prom.river
+++ b/converter/internal/staticconvert/testdata/promtail_prom.river
@@ -1,7 +1,5 @@
 discovery.consul "metrics_name_jobName" {
-	services         = ["myapp"]
-	follow_redirects = true
-	enable_http2     = true
+	services = ["myapp"]
 }
 
 prometheus.scrape "metrics_name_jobName" {
@@ -48,8 +46,6 @@ discovery.consul "logs_name_jobName" {
 		username = "toby"
 		password = "this_password_is_safe_innit?"
 	}
-	follow_redirects = true
-	enable_http2     = true
 }
 
 discovery.relabel "logs_name_jobName" {
@@ -101,8 +97,6 @@ discovery.consul "logs_name2_jobName" {
 		username = "toby"
 		password = "this_password_is_safe_innit?"
 	}
-	follow_redirects = true
-	enable_http2     = true
 }
 
 discovery.relabel "logs_name2_jobName" {
diff --git a/docs/sources/flow/reference/compatibility/_index.md b/docs/sources/flow/reference/compatibility/_index.md
index 9e225aa74b71..96539228f434 100644
--- a/docs/sources/flow/reference/compatibility/_index.md
+++ b/docs/sources/flow/reference/compatibility/_index.md
@@ -68,6 +68,7 @@ The following components, grouped by namespace, _export_ Targets.
 - [discovery.nerve]({{< relref "../components/discovery.nerve.md" >}})
 - [discovery.nomad]({{< relref "../components/discovery.nomad.md" >}})
 - [discovery.openstack]({{< relref "../components/discovery.openstack.md" >}})
+- [discovery.ovhcloud]({{< relref "../components/discovery.ovhcloud.md" >}})
 - [discovery.puppetdb]({{< relref "../components/discovery.puppetdb.md" >}})
 - [discovery.relabel]({{< relref "../components/discovery.relabel.md" >}})
 - [discovery.scaleway]({{< relref "../components/discovery.scaleway.md" >}})
diff --git a/docs/sources/flow/reference/components/discovery.consul.md b/docs/sources/flow/reference/components/discovery.consul.md
index 7737131a6aa8..c63f94b8017c 100644
--- a/docs/sources/flow/reference/components/discovery.consul.md
+++ b/docs/sources/flow/reference/components/discovery.consul.md
@@ -70,6 +70,7 @@ basic_auth | [basic_auth][] | Configure basic_auth for authenticating to the end
 authorization | [authorization][] | Configure generic authorization to the endpoint. | no
 oauth2 | [oauth2][] | Configure OAuth2 for authenticating to the endpoint. | no
 oauth2 > tls_config | [tls_config][] | Configure TLS settings for connecting to the endpoint. | no
+tls_config | [tls_config][] | Configure TLS settings for connecting to the endpoint. | no
 
 The `>` symbol indicates deeper levels of nesting. For example,
 `oauth2 > tls_config` refers to a `tls_config` block defined inside
diff --git a/docs/sources/flow/reference/components/discovery.docker.md b/docs/sources/flow/reference/components/discovery.docker.md
index a9143373e12b..4d6ce94d557f 100644
--- a/docs/sources/flow/reference/components/discovery.docker.md
+++ b/docs/sources/flow/reference/components/discovery.docker.md
@@ -60,6 +60,7 @@ basic_auth | [basic_auth][] | Configure basic_auth for authenticating to the end
 authorization | [authorization][] | Configure generic authorization to the endpoint. | no
 oauth2 | [oauth2][] | Configure OAuth2 for authenticating to the endpoint. | no
 oauth2 > tls_config | [tls_config][] | Configure TLS settings for connecting to the endpoint. | no
+tls_config | [tls_config][] | Configure TLS settings for connecting to the endpoint. | no
 
 The `>` symbol indicates deeper levels of nesting. For example,
 `oauth2 > tls_config` refers to a `tls_config` block defined inside
diff --git a/docs/sources/flow/reference/components/discovery.dockerswarm.md b/docs/sources/flow/reference/components/discovery.dockerswarm.md
index f6db10bd440c..58c065fb06eb 100644
--- a/docs/sources/flow/reference/components/discovery.dockerswarm.md
+++ b/docs/sources/flow/reference/components/discovery.dockerswarm.md
@@ -48,6 +48,7 @@ The following blocks are supported inside the definition of
 | authorization       | [authorization][] | Configure generic authorization to the endpoint.                                   | no       |
 | oauth2              | [oauth2][]        | Configure OAuth2 for authenticating to the endpoint.                               | no       |
 | oauth2 > tls_config | [tls_config][]    | Configure TLS settings for connecting to the endpoint.                             | no       |
+| tls_config          | [tls_config][]    | Configure TLS settings for connecting to the endpoint.                             | no       |
 
 The `>` symbol indicates deeper levels of nesting. For example,
 `oauth2 > tls_config` refers to a `tls_config` block defined inside
diff --git a/docs/sources/flow/reference/components/discovery.ec2.md b/docs/sources/flow/reference/components/discovery.ec2.md
index e2964d2df0a3..7f01ae48c6e0 100644
--- a/docs/sources/flow/reference/components/discovery.ec2.md
+++ b/docs/sources/flow/reference/components/discovery.ec2.md
@@ -39,6 +39,15 @@ Name | Type | Description | Default | Required
 `proxy_url` | `string` | HTTP proxy to proxy requests through. | | no
 `follow_redirects` | `bool` | Whether redirects returned by the server should be followed. | `true` | no
 `enable_http2` | `bool` | Whether HTTP2 is supported for requests. | `true` | no
+`bearer_token` | `secret` | Bearer token to authenticate with. | | no
+`bearer_token_file` | `string` | File containing a bearer token to authenticate with. | | no
+
+ At most one of the following can be provided:
+ - [`bearer_token` argument](#arguments).
+ - [`bearer_token_file` argument](#arguments).
+ - [`basic_auth` block][basic_auth].
+ - [`authorization` block][authorization].
+ - [`oauth2` block][oauth2].
 
 ## Blocks
 
@@ -47,9 +56,21 @@ The following blocks are supported inside the definition of
 
 Hierarchy | Block | Description | Required
 --------- | ----- | ----------- | --------
+basic_auth | [basic_auth][] | Configure basic_auth for authenticating to the endpoint. | no
+authorization | [authorization][] | Configure generic authorization to the endpoint. | no
 filter | [filter][] | Filters discoverable resources. | no
+oauth2 | [oauth2][] | Configure OAuth2 for authenticating to the endpoint. | no
+oauth2 > tls_config | [tls_config][] | Configure TLS settings for connecting to the endpoint. | no
+tls_config | [tls_config][] | Configure TLS settings for connecting to the endpoint. | no
 
 [filter]: #filter-block
+[authorization]: #authorization-block
+[oauth2]: #oauth2-block
+[tls_config]: #tls_config-block
+
+### authorization block
+
+{{< docs/shared lookup="flow/reference/components/authorization-block.md" source="agent" version="<AGENT_VERSION>" >}}
 
 ### filter block
 
@@ -65,6 +86,14 @@ Refer to the [Filter API AWS EC2 documentation][filter api] for the list of supp
 
 [filter api]: https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_Filter.html
 
+### oauth2 block
+
+{{< docs/shared lookup="flow/reference/components/oauth2-block.md" source="agent" version="<AGENT_VERSION>" >}}
+
+### tls_config block
+
+{{< docs/shared lookup="flow/reference/components/tls-config-block.md" source="agent" version="<AGENT_VERSION>" >}}
+
 ## Exported fields
 
 The following fields are exported and can be referenced by other components:
diff --git a/docs/sources/flow/reference/components/discovery.eureka.md b/docs/sources/flow/reference/components/discovery.eureka.md
index 952e90af1ce4..70ab3f8f666d 100644
--- a/docs/sources/flow/reference/components/discovery.eureka.md
+++ b/docs/sources/flow/reference/components/discovery.eureka.md
@@ -32,8 +32,20 @@ Name                | Type       | Description
 `server`            | `string`   | Eureka server URL.                                                     |                      | yes
 `refresh_interval`  | `duration` | Interval at which to refresh the list of targets.                      | `30s`                | no
 `enable_http2`      | `bool`     | Whether HTTP2 is supported for requests.                               | `true`               | no
+`bearer_token` | `secret` | Bearer token to authenticate with. | | no
+`bearer_token_file` | `string` | File containing a bearer token to authenticate with. | | no
+`proxy_url` | `string` | HTTP proxy to proxy requests through. | | no
 `follow_redirects`  | `bool`     | Whether redirects returned by the server should be followed.           | `true`               | no
 
+ At most one of the following can be provided:
+ - [`bearer_token` argument](#arguments).
+ - [`bearer_token_file` argument](#arguments).
+ - [`basic_auth` block][basic_auth].
+ - [`authorization` block][authorization].
+ - [`oauth2` block][oauth2].
+
+[arguments]: #arguments
+
 ## Blocks
 The following blocks are supported inside the definition of
 `discovery.eureka`:
@@ -44,6 +56,7 @@ basic_auth | [basic_auth][] | Configure basic_auth for authenticating to the end
 authorization | [authorization][] | Configure generic authorization to the endpoint. | no
 oauth2 | [oauth2][] | Configure OAuth2 for authenticating to the endpoint. | no
 oauth2 > tls_config | [tls_config][] | Configure TLS settings for connecting to the endpoint. | no
+tls_config | [tls_config][] | Configure TLS settings for connecting to the endpoint. | no
 
 The `>` symbol indicates deeper levels of nesting. For example,
 `oauth2 > tls_config` refers to a `tls_config` block defined inside
diff --git a/docs/sources/flow/reference/components/discovery.hetzner.md b/docs/sources/flow/reference/components/discovery.hetzner.md
index ce92bda3cb2d..c6922e685f66 100644
--- a/docs/sources/flow/reference/components/discovery.hetzner.md
+++ b/docs/sources/flow/reference/components/discovery.hetzner.md
@@ -62,6 +62,7 @@ basic_auth | [basic_auth][] | Configure basic_auth for authenticating to the end
 authorization | [authorization][] | Configure generic authorization to the endpoint. | no
 oauth2 | [oauth2][] | Configure OAuth2 for authenticating to the endpoint. | no
 oauth2 > tls_config | [tls_config][] | Configure TLS settings for connecting to the endpoint. | no
+tls_config | [tls_config][] | Configure TLS settings for connecting to the endpoint. | no
 
 The `>` symbol indicates deeper levels of nesting. For example,
 `oauth2 > tls_config` refers to a `tls_config` block defined inside
diff --git a/docs/sources/flow/reference/components/discovery.http.md b/docs/sources/flow/reference/components/discovery.http.md
index 17be475edbc9..50ecf42dcc06 100644
--- a/docs/sources/flow/reference/components/discovery.http.md
+++ b/docs/sources/flow/reference/components/discovery.http.md
@@ -94,6 +94,20 @@ Name            | Type                | Description
 --------------- | ------------------- | ------------------------------------------------------------------------------------------ |---------| --------
 `url`  | string | URL to scrape |         | yes
 `refresh_interval`   | `duration`          | How often to refresh targets.                                                  | `"60s"` | no
+`bearer_token` | `secret` | Bearer token to authenticate with. | | no
+`bearer_token_file` | `string` | File containing a bearer token to authenticate with. | | no
+`proxy_url` | `string` | HTTP proxy to proxy requests through. | | no
+`follow_redirects` | `bool` | Whether redirects returned by the server should be followed. | `true` | no
+`enable_http2` | `bool` | Whether HTTP2 is supported for requests. | `true` | no
+
+ At most one of the following can be provided:
+ - [`bearer_token` argument](#arguments).
+ - [`bearer_token_file` argument](#arguments).
+ - [`basic_auth` block][basic_auth].
+ - [`authorization` block][authorization].
+ - [`oauth2` block][oauth2].
+
+[arguments]: #arguments
 
 ## Blocks
 
@@ -106,6 +120,7 @@ basic_auth | [basic_auth][] | Configure basic_auth for authenticating to the end
 authorization | [authorization][] | Configure generic authorization to the endpoint. | no
 oauth2 | [oauth2][] | Configure OAuth2 for authenticating to the endpoint. | no
 oauth2 > tls_config | [tls_config][] | Configure TLS settings for connecting to the endpoint. | no
+tls_config | [tls_config][] | Configure TLS settings for connecting to the endpoint. | no
 
 The `>` symbol indicates deeper levels of nesting. For example,
 `oauth2 > tls_config` refers to a `tls_config` block defined inside
diff --git a/docs/sources/flow/reference/components/discovery.ionos.md b/docs/sources/flow/reference/components/discovery.ionos.md
index e06658b4b5d5..1c619a1641ac 100644
--- a/docs/sources/flow/reference/components/discovery.ionos.md
+++ b/docs/sources/flow/reference/components/discovery.ionos.md
@@ -31,11 +31,22 @@ The following arguments are supported:
 | ------------------ | ---------- | ------------------------------------------------------------ | ------- | -------- |
 | `datacenter_id`    | `string`   | The unique ID of the data center.                            |         | yes      |
 | `refresh_interval` | `duration` | The time after which the servers are refreshed.              | `60s`   | no       |
-| `port`             | `int`      | The port to scrap metrics from.                              | 80      | no       |
+| `port`             | `int`      | The port to scrape metrics from.                              | 80      | no       |
+| `bearer_token`     | `secret`   | Bearer token to authenticate with.                            |         | no       |
+| `bearer_token_file`| `string`   | File containing a bearer token to authenticate with.          |         | no       |
 | `proxy_url`        | `string`   | HTTP proxy to proxy requests through.                        |         | no       |
 | `enable_http2`     | `bool`     | Whether HTTP2 is supported for requests.                     | `true`  | no       |
 | `follow_redirects` | `bool`     | Whether redirects returned by the server should be followed. | `true`  | no       |
 
+ At most one of the following can be provided:
+ - [`bearer_token` argument](#arguments).
+ - [`bearer_token_file` argument](#arguments).
+ - [`basic_auth` block][basic_auth].
+ - [`authorization` block][authorization].
+ - [`oauth2` block][oauth2].
+
+[arguments]: #arguments
+
 ## Blocks
 
 The following blocks are supported inside the definition of
@@ -47,6 +58,7 @@ The following blocks are supported inside the definition of
 | authorization       | [authorization][] | Configure generic authorization to the endpoint.         | no       |
 | oauth2              | [oauth2][]        | Configure OAuth2 for authenticating to the endpoint.     | no       |
 | oauth2 > tls_config | [tls_config][]    | Configure TLS settings for connecting to the endpoint.   | no       |
+| tls_config          | [tls_config][]    | Configure TLS settings for connecting to the endpoint.   | no       |
 
 The `>` symbol indicates deeper levels of nesting. For example,
 `oauth2 > tls_config` refers to a `tls_config` block defined inside
diff --git a/docs/sources/flow/reference/components/discovery.kubernetes.md b/docs/sources/flow/reference/components/discovery.kubernetes.md
index 49ecbd09ea12..1d4b2f9210c5 100644
--- a/docs/sources/flow/reference/components/discovery.kubernetes.md
+++ b/docs/sources/flow/reference/components/discovery.kubernetes.md
@@ -259,6 +259,7 @@ basic_auth | [basic_auth][] | Configure basic_auth for authenticating to the end
 authorization | [authorization][] | Configure generic authorization to the endpoint. | no
 oauth2 | [oauth2][] | Configure OAuth2 for authenticating to the endpoint. | no
 oauth2 > tls_config | [tls_config][] | Configure TLS settings for connecting to the endpoint. | no
+tls_config | [tls_config][] | Configure TLS settings for connecting to the endpoint. | no
 
 The `>` symbol indicates deeper levels of nesting. For example,
 `oauth2 > tls_config` refers to a `tls_config` block defined inside
diff --git a/docs/sources/flow/reference/components/discovery.kuma.md b/docs/sources/flow/reference/components/discovery.kuma.md
index bef9a8ccee12..c498753f58ab 100644
--- a/docs/sources/flow/reference/components/discovery.kuma.md
+++ b/docs/sources/flow/reference/components/discovery.kuma.md
@@ -54,6 +54,7 @@ basic_auth | [basic_auth][] | Configure basic_auth for authenticating to the end
 authorization | [authorization][] | Configure generic authorization to the endpoint. | no
 oauth2 | [oauth2][] | Configure OAuth2 for authenticating to the endpoint. | no
 oauth2 > tls_config | [tls_config][] | Configure TLS settings for connecting to the endpoint. | no
+tls_config | [tls_config][] | Configure TLS settings for connecting to the endpoint. | no
 
 The `>` symbol indicates deeper levels of nesting. For example,
 `oauth2 > tls_config` refers to a `tls_config` block defined inside
diff --git a/docs/sources/flow/reference/components/discovery.linode.md b/docs/sources/flow/reference/components/discovery.linode.md
index f9f4b1e4e19a..77d01dbdf4e2 100644
--- a/docs/sources/flow/reference/components/discovery.linode.md
+++ b/docs/sources/flow/reference/components/discovery.linode.md
@@ -54,6 +54,7 @@ Hierarchy | Block | Description | Required
 authorization | [authorization][] | Configure generic authorization to the endpoint. | no
 oauth2 | [oauth2][] | Configure OAuth2 for authenticating to the endpoint. | no
 oauth2 > tls_config | [tls_config][] | Configure TLS settings for connecting to the endpoint. | no
+tls_config | [tls_config][] | Configure TLS settings for connecting to the endpoint. | no
 
 The `>` symbol indicates deeper levels of nesting. For example,
 `oauth2 > tls_config` refers to a `tls_config` block defined inside
diff --git a/docs/sources/flow/reference/components/discovery.marathon.md b/docs/sources/flow/reference/components/discovery.marathon.md
index 4327dc502fb1..b19ddb321c2c 100644
--- a/docs/sources/flow/reference/components/discovery.marathon.md
+++ b/docs/sources/flow/reference/components/discovery.marathon.md
@@ -56,6 +56,7 @@ The following blocks are supported inside the definition of
 | authorization       | [authorization][] | Configure generic authorization to the endpoint.         | no       |
 | oauth2              | [oauth2][]        | Configure OAuth2 for authenticating to the endpoint.     | no       |
 | oauth2 > tls_config | [tls_config][]    | Configure TLS settings for connecting to the endpoint.   | no       |
+| tls_config          | [tls_config][]    | Configure TLS settings for connecting to the endpoint.   | no       |
 
 The `>` symbol indicates deeper levels of nesting. For example,
 `oauth2 > tls_config` refers to a `tls_config` block defined inside
diff --git a/docs/sources/flow/reference/components/discovery.nomad.md b/docs/sources/flow/reference/components/discovery.nomad.md
index c8bcdae99699..aebd128bb320 100644
--- a/docs/sources/flow/reference/components/discovery.nomad.md
+++ b/docs/sources/flow/reference/components/discovery.nomad.md
@@ -58,6 +58,7 @@ basic_auth | [basic_auth][] | Configure basic_auth for authenticating to the end
 authorization | [authorization][] | Configure generic authorization to the endpoint. | no
 oauth2 | [oauth2][] | Configure OAuth2 for authenticating to the endpoint. | no
 oauth2 > tls_config | [tls_config][] | Configure TLS settings for connecting to the endpoint. | no
+tls_config | [tls_config][] | Configure TLS settings for connecting to the endpoint. | no
 
 The `>` symbol indicates deeper levels of nesting. For example,
 `oauth2 > tls_config` refers to a `tls_config` block defined inside
diff --git a/docs/sources/flow/reference/components/discovery.ovhcloud.md b/docs/sources/flow/reference/components/discovery.ovhcloud.md
new file mode 100644
index 000000000000..453fcb3c1cfc
--- /dev/null
+++ b/docs/sources/flow/reference/components/discovery.ovhcloud.md
@@ -0,0 +1,165 @@
+---
+aliases:
+- /docs/grafana-cloud/agent/flow/reference/components/discovery.ovhcloud/
+- /docs/grafana-cloud/monitor-infrastructure/agent/flow/reference/components/discovery.ovhcloud/
+- /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/reference/components/discovery.ovhcloud/
+- /docs/grafana-cloud/send-data/agent/flow/reference/components/discovery.ovhcloud/
+canonical: https://grafana.com/docs/agent/latest/flow/reference/components/discovery.ovhcloud/
+description: Learn about discovery.ovhcloud
+title: discovery.ovhcloud
+---
+
+# discovery.ovhcloud
+
+`discovery.ovhcloud` discovers scrape targets from OVHcloud's [dedicated servers][] and [VPS][] using their [API][]. 
+{{< param "PRODUCT_ROOT_NAME" >}} will periodically check the REST endpoint and create a target for every discovered server. 
+The public IPv4 address will be used by default - if there's none, the IPv6 address will be used. 
+This may be changed via relabeling with `discovery.relabel`. 
+For OVHcloud's [public cloud][] instances you can use `discovery.openstack`.
+
+[API]: https://api.ovh.com/
+[public cloud]: https://www.ovhcloud.com/en/public-cloud/
+[VPS]: https://www.ovhcloud.com/en/vps/
+[Dedicated servers]: https://www.ovhcloud.com/en/bare-metal/
+
+## Usage
+
+```river
+discovery.ovhcloud "LABEL" {
+    application_key    = APPLICATION_KEY
+    application_secret = APPLICATION_SECRET
+    consumer_key       = CONSUMER_KEY
+    service            = SERVICE
+}
+```
+
+## Arguments
+
+The following arguments are supported:
+
+Name               | Type           | Description                                                    | Default       | Required
+------------------ | -------------- | -------------------------------------------------------------- | ------------- | --------
+application_key    | `string`       | [API][] application key.                                       |               | yes
+application_secret | `secret`       | [API][] application secret.                                    |               | yes
+consumer_key       | `secret`       | [API][] consumer key.                                          |               | yes
+endpoint           | `string`       | [API][] endpoint.                                              | "ovh-eu"      | no
+refresh_interval   | `duration`     | Refresh interval to re-read the resources list.                | "60s"         | no
+service            | `string`       | Service of the targets to retrieve.                            |               | yes
+
+`endpoint` must be one of the [supported API endpoints][supported-apis].
+
+`service` must be either `vps` or `dedicated_server`.
+
+[supported-apis]: https://github.com/ovh/go-ovh#supported-apis
+
+## Exported fields
+
+The following fields are exported and can be referenced by other components:
+
+Name      | Type                | Description
+--------- | ------------------- | -----------
+`targets` | `list(map(string))` | The set of targets discovered from the OVHcloud API.
+
+Multiple meta labels are available on `targets` and can be used by the `discovery.relabel` component.
+
+[VPS][] meta labels:
+* `__meta_ovhcloud_vps_cluster`: the cluster of the server.
+* `__meta_ovhcloud_vps_datacenter`: the datacenter of the server.
+* `__meta_ovhcloud_vps_disk`: the disk of the server.
+* `__meta_ovhcloud_vps_display_name`: the display name of the server.
+* `__meta_ovhcloud_vps_ipv4`: the IPv4 of the server.
+* `__meta_ovhcloud_vps_ipv6`: the IPv6 of the server.
+* `__meta_ovhcloud_vps_keymap`: the KVM keyboard layout of the server.
+* `__meta_ovhcloud_vps_maximum_additional_ip`: the maximum additional IPs of the server.
+* `__meta_ovhcloud_vps_memory_limit`: the memory limit of the server.
+* `__meta_ovhcloud_vps_memory`: the memory of the server.
+* `__meta_ovhcloud_vps_monitoring_ip_blocks`: the monitoring IP blocks of the server.
+* `__meta_ovhcloud_vps_name`: the name of the server.
+* `__meta_ovhcloud_vps_netboot_mode`: the netboot mode of the server.
+* `__meta_ovhcloud_vps_offer_type`: the offer type of the server.
+* `__meta_ovhcloud_vps_offer`: the offer of the server.
+* `__meta_ovhcloud_vps_state`: the state of the server.
+* `__meta_ovhcloud_vps_vcore`: the number of virtual cores of the server.
+* `__meta_ovhcloud_vps_version`: the version of the server.
+* `__meta_ovhcloud_vps_zone`: the zone of the server.
+
+[Dedicated servers][] meta labels:
+* `__meta_ovhcloud_dedicated_server_commercial_range`: the commercial range of the server.
+* `__meta_ovhcloud_dedicated_server_datacenter`: the datacenter of the server.
+* `__meta_ovhcloud_dedicated_server_ipv4`: the IPv4 of the server.
+* `__meta_ovhcloud_dedicated_server_ipv6`: the IPv6 of the server.
+* `__meta_ovhcloud_dedicated_server_link_speed`: the link speed of the server.
+* `__meta_ovhcloud_dedicated_server_name`: the name of the server.
+* `__meta_ovhcloud_dedicated_server_os`: the operating system of the server.
+* `__meta_ovhcloud_dedicated_server_rack`: the rack of the server.
+* `__meta_ovhcloud_dedicated_server_reverse`: the reverse DNS name of the server.
+* `__meta_ovhcloud_dedicated_server_server_id`: the ID of the server.
+* `__meta_ovhcloud_dedicated_server_state`: the state of the server.
+* `__meta_ovhcloud_dedicated_server_support_level`: the support level of the server.
+
+## Component health
+
+`discovery.ovhcloud` is only reported as unhealthy when given an invalid
+configuration. In those cases, exported fields retain their last healthy
+values.
+
+## Debug information
+
+`discovery.ovhcloud` does not expose any component-specific debug information.
+
+## Debug metrics
+
+`discovery.ovhcloud` does not expose any component-specific debug metrics.
+
+## Example
+
+```river
+discovery.ovhcloud "example" {
+	application_key    = APPLICATION_KEY
+	application_secret = APPLICATION_SECRET
+	consumer_key       = CONSUMER_KEY
+	service            = SERVICE
+}
+
+prometheus.scrape "demo" {
+	targets    = discovery.ovhcloud.example.targets
+	forward_to = [prometheus.remote_write.demo.receiver]
+}
+
+prometheus.remote_write "demo" {
+	endpoint {
+		url = PROMETHEUS_REMOTE_WRITE_URL
+		basic_auth {
+			username = USERNAME
+			password = PASSWORD
+		}
+	}
+}
+```
+
+Replace the following:
+  - `APPLICATION_KEY`: The OVHcloud [API][] application key.
+  - `APPLICATION_SECRET`: The OVHcloud [API][] application secret.
+  - `CONSUMER_KEY`: The OVHcloud [API][] consumer key.
+  - `SERVICE`: The OVHcloud service of the targets to retrieve.
+  - `PROMETHEUS_REMOTE_WRITE_URL`: The URL of the Prometheus remote_write-compatible server to send metrics to.
+  - `USERNAME`: The username to use for authentication to the remote_write API.
+  - `PASSWORD`: The password to use for authentication to the remote_write API.
+
+
+<!-- START GENERATED COMPATIBLE COMPONENTS -->
+
+## Compatible components
+
+`discovery.ovhcloud` has exports that can be consumed by the following components:
+
+- Components that consume [Targets]({{< relref "../compatibility/#targets-consumers" >}})
+
+{{% admonition type="note" %}}
+
+Connecting some components may not be sensible or components may require further configuration to make the 
+connection work correctly. Refer to the linked documentation for more details.
+
+{{% /admonition %}}
+
+<!-- END GENERATED COMPATIBLE COMPONENTS -->
diff --git a/docs/sources/flow/reference/components/discovery.puppetdb.md b/docs/sources/flow/reference/components/discovery.puppetdb.md
index 34e6f14db7c3..a83d8454723c 100644
--- a/docs/sources/flow/reference/components/discovery.puppetdb.md
+++ b/docs/sources/flow/reference/components/discovery.puppetdb.md
@@ -64,6 +64,7 @@ basic_auth | [basic_auth][] | Configure basic_auth for authenticating to the end
 authorization | [authorization][] | Configure generic authorization to the endpoint. | no
 oauth2 | [oauth2][] | Configure OAuth2 for authenticating to the endpoint. | no
 oauth2 > tls_config | [tls_config][] | Configure TLS settings for connecting to the endpoint. | no
+tls_config | [tls_config][] | Configure TLS settings for connecting to the endpoint. | no
 
 The `>` symbol indicates deeper levels of nesting. For example,
 `oauth2 > tls_config` refers to a `tls_config` block defined inside
diff --git a/docs/sources/flow/reference/components/prometheus.exporter.cloudwatch.md b/docs/sources/flow/reference/components/prometheus.exporter.cloudwatch.md
index 10313796d1cb..2c1682a5fccc 100644
--- a/docs/sources/flow/reference/components/prometheus.exporter.cloudwatch.md
+++ b/docs/sources/flow/reference/components/prometheus.exporter.cloudwatch.md
@@ -429,6 +429,7 @@ discovery job, the `type` field of each `discovery_job` must match either the de
 - Namespace: `AWS/PrivateLinkEndpoints` or Alias: `vpc-endpoint`
 - Namespace: `AWS/PrivateLinkServices` or Alias: `vpc-endpoint-service`
 - Namespace: `AWS/Prometheus` or Alias: `amp`
+- Namespace: `AWS/QLDB` or Alias: `qldb`
 - Namespace: `AWS/RDS` or Alias: `rds`
 - Namespace: `AWS/Redshift` or Alias: `redshift`
 - Namespace: `AWS/Route53Resolver` or Alias: `route53-resolver`
@@ -442,6 +443,7 @@ discovery job, the `type` field of each `discovery_job` must match either the de
 - Namespace: `AWS/TransitGateway` or Alias: `tgw`
 - Namespace: `AWS/TrustedAdvisor` or Alias: `trustedadvisor`
 - Namespace: `AWS/VPN` or Alias: `vpn`
+- Namespace: `AWS/ClientVPN` or Alias: `clientvpn`
 - Namespace: `AWS/WAFV2` or Alias: `wafv2`
 - Namespace: `AWS/WorkSpaces` or Alias: `workspaces`
 - Namespace: `AWS/AOSS` or Alias: `aoss`
diff --git a/docs/sources/flow/reference/components/prometheus.scrape.md b/docs/sources/flow/reference/components/prometheus.scrape.md
index 08b009c88711..8adf775687f1 100644
--- a/docs/sources/flow/reference/components/prometheus.scrape.md
+++ b/docs/sources/flow/reference/components/prometheus.scrape.md
@@ -44,30 +44,30 @@ The following arguments are supported:
 
 Name | Type | Description | Default | Required
 ---- | ---- | ----------- | ------- | --------
-`targets`                  | `list(map(string))`     | List of targets to scrape. | | yes
-`forward_to`               | `list(MetricsReceiver)` | List of receivers to send scraped metrics to. | | yes
-`job_name`                 | `string`   | The value to use for the job label if not already set. | component name | no
-`extra_metrics`            | `bool`     | Whether extra metrics should be generated for scrape targets. | `false` | no
+`targets`                     | `list(map(string))`     | List of targets to scrape. | | yes
+`forward_to`                  | `list(MetricsReceiver)` | List of receivers to send scraped metrics to. | | yes
+`job_name`                    | `string`   | The value to use for the job label if not already set. | component name | no
+`extra_metrics`               | `bool`     | Whether extra metrics should be generated for scrape targets. | `false` | no
 `enable_protobuf_negotiation` | `bool`     | Whether to enable protobuf negotiation with the client. | `false` | no
-`honor_labels`             | `bool`     | Indicator whether the scraped metrics should remain unmodified. | `false` | no
-`honor_timestamps`         | `bool`     | Indicator whether the scraped timestamps should be respected. | `true` | no
-`params`                   | `map(list(string))` | A set of query parameters with which the target is scraped. | | no
-`scrape_classic_histograms` | `bool`     | Whether to scrape a classic histogram that is also exposed as a native histogram. | `false` | no
-`scrape_interval`          | `duration` | How frequently to scrape the targets of this scrape configuration. | `"60s"` | no
-`scrape_timeout`           | `duration` | The timeout for scraping targets of this configuration. | `"10s"` | no
-`metrics_path`             | `string`   | The HTTP resource path on which to fetch metrics from targets. | `/metrics` | no
-`scheme`                   | `string`   | The URL scheme with which to fetch metrics from targets. | | no
-`body_size_limit`          | `int`      | An uncompressed response body larger than this many bytes causes the scrape to fail. 0 means no limit. | | no
-`sample_limit`             | `uint`     | More than this many samples post metric-relabeling causes the scrape to fail | | no
-`target_limit`             | `uint`     | More than this many targets after the target relabeling causes the scrapes to fail. | | no
-`label_limit`              | `uint`     | More than this many labels post metric-relabeling causes the scrape to fail. | | no
-`label_name_length_limit`  | `uint`     | More than this label name length post metric-relabeling causes the scrape to fail. | | no
-`label_value_length_limit` | `uint`     | More than this label value length post metric-relabeling causes the scrape to fail. | | no
-`bearer_token` | `secret` | Bearer token to authenticate with. | | no
-`bearer_token_file` | `string` | File containing a bearer token to authenticate with. | | no
-`proxy_url` | `string` | HTTP proxy to proxy requests through. | | no
-`follow_redirects` | `bool` | Whether redirects returned by the server should be followed. | `true` | no
-`enable_http2` | `bool` | Whether HTTP2 is supported for requests. | `true` | no
+`honor_labels`                | `bool`     | Indicator whether the scraped metrics should remain unmodified. | `false` | no
+`honor_timestamps`            | `bool`     | Indicator whether the scraped timestamps should be respected. | `true` | no
+`params`                      | `map(list(string))` | A set of query parameters with which the target is scraped. | | no
+`scrape_classic_histograms`   | `bool`     | Whether to scrape a classic histogram that is also exposed as a native histogram. | `false` | no
+`scrape_interval`             | `duration` | How frequently to scrape the targets of this scrape configuration. | `"60s"` | no
+`scrape_timeout`              | `duration` | The timeout for scraping targets of this configuration. | `"10s"` | no
+`metrics_path`                | `string`   | The HTTP resource path on which to fetch metrics from targets. | `/metrics` | no
+`scheme`                      | `string`   | The URL scheme with which to fetch metrics from targets. | | no
+`body_size_limit`             | `int`      | An uncompressed response body larger than this many bytes causes the scrape to fail. 0 means no limit. | | no
+`sample_limit`                | `uint`     | More than this many samples post metric-relabeling causes the scrape to fail | | no
+`target_limit`                | `uint`     | More than this many targets after the target relabeling causes the scrapes to fail. | | no
+`label_limit`                 | `uint`     | More than this many labels post metric-relabeling causes the scrape to fail. | | no
+`label_name_length_limit`     | `uint`     | More than this label name length post metric-relabeling causes the scrape to fail. | | no
+`label_value_length_limit`    | `uint`     | More than this label value length post metric-relabeling causes the scrape to fail. | | no
+`bearer_token`                | `secret`   | Bearer token to authenticate with. | | no
+`bearer_token_file`           | `string`   | File containing a bearer token to authenticate with. | | no
+`proxy_url`                   | `string`   | HTTP proxy to proxy requests through. | | no
+`follow_redirects`            | `bool`     | Whether redirects returned by the server should be followed. | `true` | no
+`enable_http2`                | `bool`     | Whether HTTP2 is supported for requests. | `true` | no
 
  At most one of the following can be provided:
  - [`bearer_token` argument](#arguments).
diff --git a/docs/sources/static/configuration/integrations/cloudwatch-exporter-config.md b/docs/sources/static/configuration/integrations/cloudwatch-exporter-config.md
index 8015bde84bc9..6495625b76c8 100644
--- a/docs/sources/static/configuration/integrations/cloudwatch-exporter-config.md
+++ b/docs/sources/static/configuration/integrations/cloudwatch-exporter-config.md
@@ -440,6 +440,7 @@ discovery job, the `type` field of each `discovery_job` must match either the de
 - Namespace: `AWS/PrivateLinkEndpoints` or Alias: `vpc-endpoint`
 - Namespace: `AWS/PrivateLinkServices` or Alias: `vpc-endpoint-service`
 - Namespace: `AWS/Prometheus` or Alias: `amp`
+- Namespace: `AWS/QLDB` or Alias: `qldb`
 - Namespace: `AWS/RDS` or Alias: `rds`
 - Namespace: `AWS/Redshift` or Alias: `redshift`
 - Namespace: `AWS/Route53Resolver` or Alias: `route53-resolver`
@@ -453,6 +454,7 @@ discovery job, the `type` field of each `discovery_job` must match either the de
 - Namespace: `AWS/TransitGateway` or Alias: `tgw`
 - Namespace: `AWS/TrustedAdvisor` or Alias: `trustedadvisor`
 - Namespace: `AWS/VPN` or Alias: `vpn`
+- Namespace: `AWS/ClientVPN` or Alias: `clientvpn`
 - Namespace: `AWS/WAFV2` or Alias: `wafv2`
 - Namespace: `AWS/WorkSpaces` or Alias: `workspaces`
 - Namespace: `AWS/AOSS` or Alias: `aoss`
diff --git a/go.mod b/go.mod
index 4614e9124d44..f8d9059376ab 100644
--- a/go.mod
+++ b/go.mod
@@ -13,7 +13,7 @@ require (
 	github.com/PuerkitoBio/rehttp v1.1.0
 	github.com/alecthomas/kingpin/v2 v2.4.0
 	github.com/alecthomas/units v0.0.0-20211218093645-b94a6e3cc137
-	github.com/aws/aws-sdk-go v1.45.24
+	github.com/aws/aws-sdk-go v1.45.25
 	github.com/aws/aws-sdk-go-v2 v1.21.1
 	github.com/aws/aws-sdk-go-v2/config v1.18.44
 	github.com/aws/aws-sdk-go-v2/service/s3 v1.34.1
@@ -59,7 +59,7 @@ require (
 	github.com/grafana/loki v1.6.2-0.20231004111112-07cbef92268a
 	github.com/grafana/pyroscope-go/godeltaprof v0.1.3
 	github.com/grafana/pyroscope/api v0.2.0
-	github.com/grafana/pyroscope/ebpf v0.4.0
+	github.com/grafana/pyroscope/ebpf v0.4.1
 	github.com/grafana/regexp v0.0.0-20221123153739-15dc172cd2db
 	github.com/grafana/river v0.3.0
 	github.com/grafana/snowflake-prometheus-exporter v0.0.0-20221213150626-862cad8e9538
@@ -89,12 +89,12 @@ require (
 	github.com/klauspost/compress v1.17.3
 	github.com/lib/pq v1.10.7
 	github.com/mackerelio/go-osstat v0.2.3
-	github.com/miekg/dns v1.1.55
+	github.com/miekg/dns v1.1.56
 	github.com/mitchellh/mapstructure v1.5.1-0.20220423185008-bf980b35cac4
 	github.com/mitchellh/reflectwalk v1.0.2
 	github.com/mwitkow/go-conntrack v0.0.0-20190716064945-2f068394615f
 	github.com/ncabatoff/process-exporter v0.7.10
-	github.com/nerdswords/yet-another-cloudwatch-exporter v0.54.0
+	github.com/nerdswords/yet-another-cloudwatch-exporter v0.55.0
 	github.com/ohler55/ojg v1.20.0 // indirect
 	github.com/oklog/run v1.1.0
 	github.com/olekukonko/tablewriter v0.0.5
@@ -150,7 +150,7 @@ require (
 	github.com/prometheus/mysqld_exporter v0.14.0
 	github.com/prometheus/node_exporter v1.6.0
 	github.com/prometheus/procfs v0.12.0
-	github.com/prometheus/prometheus v1.99.0
+	github.com/prometheus/prometheus v0.48.1
 	github.com/prometheus/snmp_exporter v0.24.1
 	github.com/prometheus/statsd_exporter v0.22.8
 	github.com/richardartoul/molecule v1.0.1-0.20221107223329-32cfee06a052
@@ -219,7 +219,7 @@ require (
 	golang.org/x/sys v0.14.1-0.20231108175955-e4099bfacb8c
 	golang.org/x/text v0.14.0
 	golang.org/x/time v0.3.0
-	google.golang.org/api v0.146.0
+	google.golang.org/api v0.147.0
 	google.golang.org/grpc v1.59.0
 	google.golang.org/protobuf v1.31.0
 	gopkg.in/yaml.v2 v2.4.0
@@ -326,7 +326,7 @@ require (
 	github.com/dennwc/varint v1.0.0 // indirect
 	github.com/denverdino/aliyungo v0.0.0-20190125010748-a747050bb1ba // indirect
 	github.com/dgryski/go-rendezvous v0.0.0-20200823014737-9f7001d12a5f // indirect
-	github.com/digitalocean/godo v1.99.0 // indirect
+	github.com/digitalocean/godo v1.104.1 // indirect
 	github.com/dimchansky/utfbom v1.1.1
 	github.com/docker/cli v23.0.3+incompatible // indirect
 	github.com/docker/distribution v2.8.2+incompatible // indirect
@@ -391,11 +391,11 @@ require (
 	github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510 // indirect
 	github.com/googleapis/enterprise-certificate-proxy v0.3.1 // indirect
 	github.com/googleapis/gax-go/v2 v2.12.0 // indirect
-	github.com/gophercloud/gophercloud v1.5.0 // indirect
+	github.com/gophercloud/gophercloud v1.7.0 // indirect
 	github.com/gorilla/websocket v1.5.0 // indirect
 	github.com/gosnmp/gosnmp v1.36.0 // indirect
 	github.com/grafana/gomemcache v0.0.0-20230316202710-a081dae0aba9 // indirect
-	github.com/grafana/loki/pkg/push v0.0.0-20230904153656-e4cc2a4f5ec8 // k166 branch
+	github.com/grafana/loki/pkg/push v0.0.0-20231212100434-384e5c2dc872 // k180 branch
 	github.com/grobie/gomemcache v0.0.0-20230213081705-239240bbc445 // indirect
 	github.com/grpc-ecosystem/grpc-gateway/v2 v2.18.0 // indirect
 	github.com/gsterjov/go-libsecret v0.0.0-20161001094733-a6f4afe4910c // indirect
@@ -415,7 +415,7 @@ require (
 	github.com/hashicorp/hcl v1.0.0 // indirect
 	github.com/hashicorp/mdns v1.0.4 // indirect
 	github.com/hashicorp/memberlist v0.5.0 // indirect
-	github.com/hashicorp/nomad/api v0.0.0-20230718173136-3a687930bd3e // indirect
+	github.com/hashicorp/nomad/api v0.0.0-20230721134942-515895c7690c // indirect
 	github.com/hashicorp/serf v0.10.1 // indirect
 	github.com/hashicorp/vic v1.5.1-0.20190403131502-bbfe86ec9443 // indirect
 	github.com/hodgesds/perf-utils v0.7.0 // indirect
@@ -426,7 +426,7 @@ require (
 	github.com/inconshreveable/mousetrap v1.1.0 // indirect
 	github.com/infinityworks/go-common v0.0.0-20170820165359-7f20a140fd37 // indirect
 	github.com/influxdata/telegraf v1.16.3 // indirect
-	github.com/ionos-cloud/sdk-go/v6 v6.1.8 // indirect
+	github.com/ionos-cloud/sdk-go/v6 v6.1.9 // indirect
 	github.com/jackc/chunkreader/v2 v2.0.1 // indirect
 	github.com/jackc/pgconn v1.13.0 // indirect
 	github.com/jackc/pgio v1.0.0 // indirect
@@ -456,7 +456,7 @@ require (
 	github.com/krallistic/kazoo-go v0.0.0-20170526135507-a15279744f4e // indirect
 	github.com/kylelemons/godebug v1.1.0 // indirect
 	github.com/leodido/ragel-machinery v0.0.0-20181214104525-299bdde78165 // indirect
-	github.com/linode/linodego v1.19.0 // indirect
+	github.com/linode/linodego v1.23.0 // indirect
 	github.com/lufia/iostat v1.2.1 // indirect
 	github.com/lufia/plan9stats v0.0.0-20220913051719-115f729f3c8c // indirect
 	github.com/magiconair/properties v1.8.7 // indirect
@@ -506,7 +506,7 @@ require (
 	github.com/opencontainers/selinux v1.11.0 // indirect
 	github.com/openzipkin/zipkin-go v0.4.2 // indirect
 	github.com/oschwald/maxminddb-golang v1.11.0
-	github.com/ovh/go-ovh v1.4.1 // indirect
+	github.com/ovh/go-ovh v1.4.3 // indirect
 	github.com/packethost/packngo v0.1.1-0.20180711074735-b9cb5096f54c // indirect
 	github.com/patrickmn/go-cache v2.1.0+incompatible // indirect
 	github.com/pelletier/go-toml/v2 v2.0.8 // indirect
@@ -525,7 +525,7 @@ require (
 	github.com/safchain/ethtool v0.3.0 // indirect
 	github.com/samber/lo v1.38.1 // indirect
 	github.com/samuel/go-zookeeper v0.0.0-20190923202752-2cc03de413da // indirect
-	github.com/scaleway/scaleway-sdk-go v1.0.0-beta.20
+	github.com/scaleway/scaleway-sdk-go v1.0.0-beta.21
 	github.com/sean-/seed v0.0.0-20170313163322-e2103e2c3529 // indirect
 	github.com/seccomp/libseccomp-golang v0.9.2-0.20220502022130-f33da4d89646 // indirect
 	github.com/sergi/go-diff v1.2.0 // indirect
@@ -590,7 +590,7 @@ require (
 	gonum.org/v1/gonum v0.14.0 // indirect
 	google.golang.org/appengine v1.6.8 // indirect
 	google.golang.org/genproto v0.0.0-20231012201019-e917dd12ba7a // indirect
-	google.golang.org/genproto/googleapis/api v0.0.0-20231002182017-d307bd883b97 // indirect
+	google.golang.org/genproto/googleapis/api v0.0.0-20231012201019-e917dd12ba7a // indirect
 	google.golang.org/genproto/googleapis/rpc v0.0.0-20231016165738-49dd2c1f3d0b // indirect
 	gopkg.in/alecthomas/kingpin.v2 v2.2.6 // indirect
 	gopkg.in/fsnotify/fsnotify.v1 v1.4.7 // indirect
@@ -613,21 +613,22 @@ require (
 	github.com/open-telemetry/opentelemetry-collector-contrib/processor/filterprocessor v0.87.0
 	github.com/open-telemetry/opentelemetry-collector-contrib/receiver/prometheusreceiver v0.87.0
 	github.com/open-telemetry/opentelemetry-collector-contrib/receiver/vcenterreceiver v0.87.0
-	github.com/prometheus/tsdb v0.10.0
 	go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v0.42.0
 	k8s.io/apimachinery v0.28.3
 )
 
 require (
 	dario.cat/mergo v1.0.0 // indirect
+	github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4 v4.2.1 // indirect
+	github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2 v2.2.1 // indirect
 	github.com/Shopify/sarama v1.38.1 // indirect
 	github.com/Workiva/go-datastructures v1.1.0 // indirect
 	github.com/channelmeter/iso8601duration v0.0.0-20150204201828-8da3af7a2a61 // indirect
 	github.com/drone/envsubst v1.0.3 // indirect
-	github.com/go-jose/go-jose/v3 v3.0.0 // indirect
+	github.com/go-jose/go-jose/v3 v3.0.1 // indirect
 	github.com/golang-jwt/jwt/v5 v5.0.0 // indirect
 	github.com/google/gnostic-models v0.6.8 // indirect
-	github.com/hetznercloud/hcloud-go/v2 v2.0.0 // indirect
+	github.com/hetznercloud/hcloud-go/v2 v2.4.0 // indirect
 	github.com/julienschmidt/httprouter v1.3.0 // indirect
 	github.com/knadh/koanf/v2 v2.0.1 // indirect
 	github.com/lightstep/go-expohisto v1.0.0 // indirect
@@ -676,14 +677,6 @@ replace (
 	k8s.io/klog/v2 => github.com/simonpasquier/klog-gokit/v3 v3.3.0
 )
 
-// TODO(tpaschalis): remove replace directive once:
-//
-// * There is a release of Prometheus which contains
-// prometheus/prometheus#12677 and prometheus/prometheus#12729.
-// We use the last v1-related tag as the replace statement does not work for v2
-// tags without the v2 suffix to the module root.
-replace github.com/prometheus/prometheus => github.com/grafana/prometheus v1.8.2-0.20231016083943-46550094220d // grafana:prometheus:v0.47.2-retry-improvements
-
 replace gopkg.in/yaml.v2 => github.com/rfratto/go-yaml v0.0.0-20211119180816-77389c3526dc
 
 // Replace directives from Loki
@@ -745,7 +738,3 @@ exclude (
 )
 
 replace github.com/github/smimesign => github.com/grafana/smimesign v0.2.1-0.20220408144937-2a5adf3481d3
-
-// This is the last version that used slices.Func with a bool return
-// If we upgrade to a newer one then since the signature changed loki will complain.
-replace golang.org/x/exp => golang.org/x/exp v0.0.0-20230713183714-613f0c0eb8a1
diff --git a/go.sum b/go.sum
index fed259a01614..d966bfea9876 100644
--- a/go.sum
+++ b/go.sum
@@ -64,6 +64,7 @@ contrib.go.opencensus.io/exporter/prometheus v0.4.2 h1:sqfsYl5GIY/L570iT+l93ehxa
 contrib.go.opencensus.io/exporter/prometheus v0.4.2/go.mod h1:dvEHbiKmgvbr5pjaF9fpw1KeYcjrnC1J8B+JKjsZyRQ=
 dario.cat/mergo v1.0.0 h1:AGCNq9Evsj31mOgNPcLyXc+4PNABt905YmuqPYYpBWk=
 dario.cat/mergo v1.0.0/go.mod h1:uNxQE+84aUszobStD9th8a29P2fMDhsBdgRYvZOxGmk=
+dmitri.shuralyov.com/gpu/mtl v0.0.0-20190408044501-666a987793e9/go.mod h1:H6x//7gZCb22OMCxBHrMx7a5I7Hp++hsVxbQ4BYO7hU=
 github.com/99designs/go-keychain v0.0.0-20191008050251-8e49817e8af4 h1:/vQbFIOMbk2FiG/kXiLl8BRyzTWDw7gX/Hz7Dd5eDMs=
 github.com/99designs/go-keychain v0.0.0-20191008050251-8e49817e8af4/go.mod h1:hN7oaIRCjzsZ2dE+yG5k+rsdt3qcwykqK6HVGcKwsw4=
 github.com/99designs/keyring v1.2.2 h1:pZd3neh/EmUzWONb35LxQfvuY7kiSXAq3HQd97+XBn0=
@@ -89,12 +90,18 @@ github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.4.0/go.mod h1:1fXstnBMas5kzG
 github.com/Azure/azure-sdk-for-go/sdk/internal v1.0.0/go.mod h1:eWRD7oawr1Mu1sLCawqVc0CUiF43ia3qQMxLscsKQ9w=
 github.com/Azure/azure-sdk-for-go/sdk/internal v1.4.0 h1:TuEMD+E+1aTjjLICGQOW6vLe8UWES7kopac9mUXL56Y=
 github.com/Azure/azure-sdk-for-go/sdk/internal v1.4.0/go.mod h1:s4kgfzA0covAXNicZHDMN58jExvcng2mC/DepXiF1EI=
+github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4 v4.2.1 h1:UPeCRD+XY7QlaGQte2EVI2iOcWvUYA2XY8w5T/8v0NQ=
+github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4 v4.2.1/go.mod h1:oGV6NlB0cvi1ZbYRR2UN44QHxWFyGk+iylgD0qaMXjA=
 github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/internal v1.1.2 h1:mLY+pNLjCUeKhgnAJWAKhEUQM+RJQo2H1fuGSw1Ky1E=
 github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/internal v1.1.2/go.mod h1:FbdwsQ2EzwvXxOPcMFYO8ogEc9uMMIj3YkmCdXdAFmk=
 github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/managementgroups/armmanagementgroups v1.0.0 h1:pPvTJ1dY0sA35JOeFq6TsY2xj6Z85Yo23Pj4wCCvu4o=
 github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/managementgroups/armmanagementgroups v1.0.0/go.mod h1:mLfWfj8v3jfWKsL9G4eoBoXVcsqcIUTapmdKy7uGOp0=
 github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/monitor/armmonitor v0.10.2 h1:T3P5KJpcgN0m39dhaNM+JjSqF3Z5VqUlKHlth5FgN+8=
 github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/monitor/armmonitor v0.10.2/go.mod h1:yA8WUvh3K/SABQEtFHg2Bx5D+414FyFqpT5Fu58P3ao=
+github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork v1.1.0 h1:QM6sE5k2ZT/vI5BEe0r7mqjsUSnhVBFbOsVkEuaEfiA=
+github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork v1.1.0/go.mod h1:243D9iHbcQXoFUtgHJwL7gl2zx1aDuDMjvBZVGr2uW0=
+github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2 v2.2.1 h1:bWh0Z2rOEDfB/ywv/l0iHN1JgyazE6kW/aIA89+CEK0=
+github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2 v2.2.1/go.mod h1:Bzf34hhAE9NSxailk8xVeLEZbUjOXcC+GnU1mMKdhLw=
 github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/resourcegraph/armresourcegraph v0.8.2 h1:f9lam+D19V0TDn17+aFhrVhWPpfsF5zaGHeqDGJZAVc=
 github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/resourcegraph/armresourcegraph v0.8.2/go.mod h1:29c9+gYpdWhyC4TPANZBPlgoWllMDhguL2AIByPYQtk=
 github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/resources/armresources v1.1.1 h1:7CBQ+Ei8SP2c6ydQTGCCrS35bDxgTMfoP2miAwK++OU=
@@ -171,6 +178,7 @@ github.com/AzureAD/microsoft-authentication-library-for-go v1.2.0/go.mod h1:wP83
 github.com/BurntSushi/toml v0.3.1/go.mod h1:xHWCNGjB5oqiDr8zfno3MHue2Ht5sIBksp03qcyfWMU=
 github.com/BurntSushi/toml v1.2.1 h1:9F2/+DoOYIOksmaJFPw1tGFy1eDnIJXg+UHjuD8lTak=
 github.com/BurntSushi/toml v1.2.1/go.mod h1:CxXYINrC8qIiEnFrOxCa7Jy5BFHlXnUU2pbicEuybxQ=
+github.com/BurntSushi/xgb v0.0.0-20160522181843-27f122750802/go.mod h1:IVnqGOEym/WlBOVXweHU+Q+/VP0lqqI8lqeDx9IjBqo=
 github.com/ClickHouse/clickhouse-go v1.5.4 h1:cKjXeYLNWVJIx2J1K6H2CqyRmfwVJVY1OV1coaaFcI0=
 github.com/ClickHouse/clickhouse-go v1.5.4/go.mod h1:EaI/sW7Azgz9UATzd5ZdZHRUhHgv5+JMS9NSr2smCJI=
 github.com/DATA-DOG/go-sqlmock v1.4.1/go.mod h1:f/Ixk793poVmq4qj/V1dPUg2JEAKC73Q5eFN3EC/SaM=
@@ -312,8 +320,8 @@ github.com/aws/aws-sdk-go v1.30.27/go.mod h1:5zCpMtNQVjRREroY7sYe8lOMRSxkhG6MZve
 github.com/aws/aws-sdk-go v1.34.34/go.mod h1:H7NKnBqNVzoTJpGfLrQkkD+ytBA93eiDYi/+8rV9s48=
 github.com/aws/aws-sdk-go v1.38.35/go.mod h1:hcU610XS61/+aQV88ixoOzUoG7v3b31pl2zKMmprdro=
 github.com/aws/aws-sdk-go v1.38.68/go.mod h1:hcU610XS61/+aQV88ixoOzUoG7v3b31pl2zKMmprdro=
-github.com/aws/aws-sdk-go v1.45.24 h1:TZx/CizkmCQn8Rtsb11iLYutEQVGK5PK9wAhwouELBo=
-github.com/aws/aws-sdk-go v1.45.24/go.mod h1:aVsgQcEevwlmQ7qHE9I3h+dtQgpqhFB+i8Phjh7fkwI=
+github.com/aws/aws-sdk-go v1.45.25 h1:c4fLlh5sLdK2DCRTY1z0hyuJZU4ygxX8m1FswL6/nF4=
+github.com/aws/aws-sdk-go v1.45.25/go.mod h1:aVsgQcEevwlmQ7qHE9I3h+dtQgpqhFB+i8Phjh7fkwI=
 github.com/aws/aws-sdk-go-v2 v0.18.0/go.mod h1:JWVYvqSMppoMJC0x5wdwiImzgXTI9FuZwxzkQq9wy+g=
 github.com/aws/aws-sdk-go-v2 v1.7.0/go.mod h1:tb9wi5s61kTDA5qCkcDbt3KRVV74GGslQkl/DRdX/P4=
 github.com/aws/aws-sdk-go-v2 v1.9.2/go.mod h1:cK/D0BBs0b/oWPIcX/Z/obahJK1TT7IPVjy53i/mX/4=
@@ -348,20 +356,20 @@ github.com/aws/aws-sdk-go-v2/internal/ini v1.3.44 h1:quOJOqlbSfeJTboXLjYXM1M9T52
 github.com/aws/aws-sdk-go-v2/internal/ini v1.3.44/go.mod h1:LNy+P1+1LiRcCsVYr/4zG5n8zWFL0xsvZkOybjbftm8=
 github.com/aws/aws-sdk-go-v2/internal/v4a v1.0.26 h1:wscW+pnn3J1OYnanMnza5ZVYXLX4cKk5rAvUAl4Qu+c=
 github.com/aws/aws-sdk-go-v2/internal/v4a v1.0.26/go.mod h1:MtYiox5gvyB+OyP0Mr0Sm/yzbEAIPL9eijj/ouHAPw0=
-github.com/aws/aws-sdk-go-v2/service/amp v1.16.14 h1:cak6jLkSwmPqcJ7pcVlkABsYfjCxxiyjBM2xBgjPwmY=
-github.com/aws/aws-sdk-go-v2/service/amp v1.16.14/go.mod h1:Tq9wKXE+SPKKkwJSRHE/u+aOdUdvU//AuPfi/w6iNdc=
-github.com/aws/aws-sdk-go-v2/service/apigateway v1.16.14 h1:mXf/MQX2zcKpWTfI4YgHrD4UYBh6AzyBCRfVdsxExaU=
-github.com/aws/aws-sdk-go-v2/service/apigateway v1.16.14/go.mod h1:KJyzRVA5DkFaU4hVgKDoHiSrCobfmYP8UpRXlybTuTU=
-github.com/aws/aws-sdk-go-v2/service/apigatewayv2 v1.13.15 h1:lgTqmtilhObvVhxeBhX/KRC5RaB4A0dQqDDdLmfAP+0=
-github.com/aws/aws-sdk-go-v2/service/apigatewayv2 v1.13.15/go.mod h1:lg/1D90DDo2//C84mvygysHF4JRo+Vf/W5YbkHoeUk8=
+github.com/aws/aws-sdk-go-v2/service/amp v1.17.5 h1:Wg2vTVYrMrfkNqrCGaggQq1UBdzgrAsorAfavLNpU/E=
+github.com/aws/aws-sdk-go-v2/service/amp v1.17.5/go.mod h1:JXkUFaC1ISQYHO535+mgMPF0b1OaSdrsM5FhFfBbbQY=
+github.com/aws/aws-sdk-go-v2/service/apigateway v1.18.0 h1:rByriM7T0xvKy7eDiNUhFyVgnGupZ7DIifReKDzfk5E=
+github.com/aws/aws-sdk-go-v2/service/apigateway v1.18.0/go.mod h1:OJmEdRP/gDTqY71Cc/eJ/anpvvGHNgf62FyNuah3X48=
+github.com/aws/aws-sdk-go-v2/service/apigatewayv2 v1.14.5 h1:pLmOgMUiwXOi3oKx2J3feVb9JGVgwJ78RYnOV9UR0BM=
+github.com/aws/aws-sdk-go-v2/service/apigatewayv2 v1.14.5/go.mod h1:4eIs6K6ag6ymoUMOFfjm9dmP9KbuKgC7K5eIqlIBsbY=
 github.com/aws/aws-sdk-go-v2/service/appconfig v1.4.2/go.mod h1:FZ3HkCe+b10uFZZkFdvf98LHW21k49W8o8J366lqVKY=
-github.com/aws/aws-sdk-go-v2/service/autoscaling v1.28.10 h1:moHEk4wbdc8VNvff4UOLuXVHtjh7YtsGdiyB0MrPPKg=
-github.com/aws/aws-sdk-go-v2/service/autoscaling v1.28.10/go.mod h1:P3qp1VYVoxHgDhpDDCTre1ee9IKpmgqnUoOb+8RA9qI=
+github.com/aws/aws-sdk-go-v2/service/autoscaling v1.30.6 h1:OuxP8FzE3++AjQ8wabMcwJxtS25inpTIblMPNzV3nB8=
+github.com/aws/aws-sdk-go-v2/service/autoscaling v1.30.6/go.mod h1:iHCpld+TvQd0odwp6BiwtL9H9LbU41kPW1i9oBy3iOo=
 github.com/aws/aws-sdk-go-v2/service/cloudwatch v1.5.0/go.mod h1:acH3+MQoiMzozT/ivU+DbRg7Ooo2298RdRaWcOv+4vM=
-github.com/aws/aws-sdk-go-v2/service/databasemigrationservice v1.27.0 h1:8ei9YIP3tmLbIX4rh1Hq9MM8/rpb1QBtHreVN/TP7wQ=
-github.com/aws/aws-sdk-go-v2/service/databasemigrationservice v1.27.0/go.mod h1:UXh7fjHrDoVd/tRPQyGCSfb04setwR75qxAx7+x1vcU=
-github.com/aws/aws-sdk-go-v2/service/ec2 v1.106.0 h1:chzRNw2kwcrosHm0k72Wyf4sbUNcG8+HeCJbSBtsOTk=
-github.com/aws/aws-sdk-go-v2/service/ec2 v1.106.0/go.mod h1:/0btVmMZJ0sn9JQ2N96XszlQNeRCJhhXOS/sPZgDeew=
+github.com/aws/aws-sdk-go-v2/service/databasemigrationservice v1.30.4 h1:Ir8BEejwSOOrD9juzFSMdXkXPyIdj1DfkFR+FJb0kc8=
+github.com/aws/aws-sdk-go-v2/service/databasemigrationservice v1.30.4/go.mod h1:NSAyKko0rDkrZOjcdCPPvMEe+FyIw/aDDQ8X+xAIW44=
+github.com/aws/aws-sdk-go-v2/service/ec2 v1.117.0 h1:Yq39vbwQX+Xw+Ubcsg/ElwO+TWAxAIAdrREtpjGnCHw=
+github.com/aws/aws-sdk-go-v2/service/ec2 v1.117.0/go.mod h1:0FhI2Rzcv5BNM3dNnbcCx2qa2naFZoAidJi11cQgzL0=
 github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.9.11 h1:y2+VQzC6Zh2ojtV2LoC0MNwHWc6qXv/j2vrQtlftkdA=
 github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.9.11/go.mod h1:iV4q2hsqtNECrfmlXyord9u4zyuFEJX9eLgLpSPzWA8=
 github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.1.29 h1:zZSLP3v3riMOP14H7b4XP0uyfREDQOYv2cqIrvTXDNQ=
@@ -372,12 +380,12 @@ github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.9.36 h1:YXlm7LxwN
 github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.9.36/go.mod h1:ou9ffqJ9hKOVZmjlC6kQ6oROAyG1M4yBKzR+9BKbDwk=
 github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.14.3 h1:dBL3StFxHtpBzJJ/mNEsjXVgfO+7jR0dAIEwLqMapEA=
 github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.14.3/go.mod h1:f1QyiAsvIv4B49DmCqrhlXqyaR+0IxMmyX+1P+AnzOM=
-github.com/aws/aws-sdk-go-v2/service/resourcegroupstaggingapi v1.14.15 h1:5I9Yi2Ls1q8/VTpRmlLOGilFCtJNsEms+64BhYybm7Y=
-github.com/aws/aws-sdk-go-v2/service/resourcegroupstaggingapi v1.14.15/go.mod h1:86l8OObGPcaNgQ2pVaRRdaHTepispGs2UYLp8niWkSM=
+github.com/aws/aws-sdk-go-v2/service/resourcegroupstaggingapi v1.15.5 h1:dMsTYzhTpsDMY79IzCh/jq1tHRwgfa15ujhKUjZk0fg=
+github.com/aws/aws-sdk-go-v2/service/resourcegroupstaggingapi v1.15.5/go.mod h1:Lh/6ABs1m80bEB36fAW9gEPW5kSsAr7Mdn8dGyWRLp0=
 github.com/aws/aws-sdk-go-v2/service/s3 v1.34.1 h1:rYYwwsGqbwvGgQHjBkqgDt8MynXk+I8xgS0IEj5gOT0=
 github.com/aws/aws-sdk-go-v2/service/s3 v1.34.1/go.mod h1:aVbf0sko/TsLWHx30c/uVu7c62+0EAJ3vbxaJga0xCw=
-github.com/aws/aws-sdk-go-v2/service/shield v1.18.13 h1:/QqZKWvxShuecy5hZm6P4pJQ2Uzn6TSJtsd9xeaqLG0=
-github.com/aws/aws-sdk-go-v2/service/shield v1.18.13/go.mod h1:YcHL79qHynGYok2NKGb3+mrb6EWROWD4gBU3v+tKtUM=
+github.com/aws/aws-sdk-go-v2/service/shield v1.19.5 h1:zX/1OHVjTNB2D1xiQ0pByYNLbVgbl84fTj5W4tMKdAk=
+github.com/aws/aws-sdk-go-v2/service/shield v1.19.5/go.mod h1:NKqcE1DkD5YSbTAR8MxhFGFDmSkGNo68/Q8hht3Mi5w=
 github.com/aws/aws-sdk-go-v2/service/sso v1.4.2/go.mod h1:NBvT9R1MEF+Ud6ApJKM0G+IkPchKS7p7c2YPKwHmBOk=
 github.com/aws/aws-sdk-go-v2/service/sso v1.12.12/go.mod h1:HuCOxYsF21eKrerARYO6HapNeh9GBNq7fius2AcwodY=
 github.com/aws/aws-sdk-go-v2/service/sso v1.15.1 h1:ZN3bxw9OYC5D6umLw6f57rNJfGfhg1DIAAcKpzyUTOE=
@@ -385,8 +393,8 @@ github.com/aws/aws-sdk-go-v2/service/sso v1.15.1/go.mod h1:PieckvBoT5HtyB9AsJRrY
 github.com/aws/aws-sdk-go-v2/service/ssooidc v1.14.12/go.mod h1:E4VrHCPzmVB/KFXtqBGKb3c8zpbNBgKe3fisDNLAW5w=
 github.com/aws/aws-sdk-go-v2/service/ssooidc v1.17.2 h1:fSCCJuT5i6ht8TqGdZc5Q5K9pz/atrf7qH4iK5C9XzU=
 github.com/aws/aws-sdk-go-v2/service/ssooidc v1.17.2/go.mod h1:5eNtr+vNc5vVd92q7SJ+U/HszsIdhZBEyi9dkMRKsp8=
-github.com/aws/aws-sdk-go-v2/service/storagegateway v1.18.16 h1:Gk+75k6j55fqE+uA/99jAlcZBY4OLT244JuKp+HLXxo=
-github.com/aws/aws-sdk-go-v2/service/storagegateway v1.18.16/go.mod h1:l/XhpyuxnJ3s8yKi9h0XDwVqM18iDEFeUVDYGCEcE/g=
+github.com/aws/aws-sdk-go-v2/service/storagegateway v1.19.6 h1:DfxHxomSOVAmiYb4I1IkcrKtjFrm4EHUEw/oHPuNgxI=
+github.com/aws/aws-sdk-go-v2/service/storagegateway v1.19.6/go.mod h1:o3x7HLasCY8mN914V4611sbXPOE54V8t0pzCtz5bxQ0=
 github.com/aws/aws-sdk-go-v2/service/sts v1.7.2/go.mod h1:8EzeIqfWt2wWT4rJVu3f21TfrhJ8AEMzVybRNSb/b4g=
 github.com/aws/aws-sdk-go-v2/service/sts v1.19.2/go.mod h1:dp0yLPsLBOi++WTxzCjA/oZqi6NPIhoR+uF7GeMU9eg=
 github.com/aws/aws-sdk-go-v2/service/sts v1.23.1 h1:ASNYk1ypWAxRhJjKS0jBnTUeDl7HROOpeSMu1xDA/I8=
@@ -559,12 +567,11 @@ github.com/dgrijalva/jwt-go v3.2.0+incompatible/go.mod h1:E3ru+11k8xSBh+hMPgOLZm
 github.com/dgrijalva/jwt-go/v4 v4.0.0-preview1/go.mod h1:+hnT3ywWDTAFrW5aE+u2Sa/wT555ZqwoCS+pk3p6ry4=
 github.com/dgryski/go-rendezvous v0.0.0-20200823014737-9f7001d12a5f h1:lO4WD4F/rVNCu3HqELle0jiPLLBs70cWOduZpkS1E78=
 github.com/dgryski/go-rendezvous v0.0.0-20200823014737-9f7001d12a5f/go.mod h1:cuUVRXasLTGF7a8hSLbxyZXjz+1KgoB3wDUb6vlszIc=
-github.com/dgryski/go-sip13 v0.0.0-20181026042036-e10d5fee7954/go.mod h1:vAd38F8PWV+bWy6jNmig1y/TA+kYO4g3RSRF0IAv0no=
 github.com/digitalocean/godo v1.1.1/go.mod h1:h6faOIcZ8lWIwNQ+DN7b3CgX4Kwby5T+nbpNqkUIozU=
 github.com/digitalocean/godo v1.7.5/go.mod h1:h6faOIcZ8lWIwNQ+DN7b3CgX4Kwby5T+nbpNqkUIozU=
 github.com/digitalocean/godo v1.10.0/go.mod h1:h6faOIcZ8lWIwNQ+DN7b3CgX4Kwby5T+nbpNqkUIozU=
-github.com/digitalocean/godo v1.99.0 h1:gUHO7n9bDaZFWvbzOum4bXE0/09ZuYA9yA8idQHX57E=
-github.com/digitalocean/godo v1.99.0/go.mod h1:SsS2oXo2rznfM/nORlZ/6JaUJZFhmKTib1YhopUc8NA=
+github.com/digitalocean/godo v1.104.1 h1:SZNxjAsskM/su0YW9P8Wx3gU0W1Z13b6tZlYNpl5BnA=
+github.com/digitalocean/godo v1.104.1/go.mod h1:VAI/L5YDzMuPRU01lEEUSQ/sp5Z//1HnnFv/RBTEdbg=
 github.com/dimchansky/utfbom v1.1.0/go.mod h1:rO41eb7gLfo8SF1jd9F8HplJm1Fewwi4mQvIirEdv+8=
 github.com/dimchansky/utfbom v1.1.1 h1:vV6w1AhK4VMnhBno/TPVCoK9U/LP0PkLCS9tbxHdi/U=
 github.com/dimchansky/utfbom v1.1.1/go.mod h1:SxdoEBH5qIqFocHMyGOXVAybYJdr71b1Q/j0mACtrfE=
@@ -715,9 +722,13 @@ github.com/go-git/go-git-fixtures/v4 v4.2.1 h1:n9gGL1Ct/yIw+nfsfr8s4+sbhT+Ncu2Su
 github.com/go-git/go-git-fixtures/v4 v4.2.1/go.mod h1:K8zd3kDUAykwTdDCr+I0per6Y6vMiRR/nnVTBtavnB0=
 github.com/go-git/go-git/v5 v5.4.2 h1:BXyZu9t0VkbiHtqrsvdq39UDhGJTl1h55VW6CSC4aY4=
 github.com/go-git/go-git/v5 v5.4.2/go.mod h1:gQ1kArt6d+n+BGd+/B/I74HwRTLhth2+zti4ihgckDc=
+github.com/go-gl/glfw v0.0.0-20190409004039-e6da0acd62b1/go.mod h1:vR7hzQXu2zJy9AVAgeJqvqgH9Q5CA+iKCZ2gyEVpxRU=
+github.com/go-gl/glfw/v3.3/glfw v0.0.0-20191125211704-12ad95a8df72/go.mod h1:tQ2UAYgL5IevRw8kRxooKSPJfGvJ9fJQFa0TUsXzTg8=
+github.com/go-gl/glfw/v3.3/glfw v0.0.0-20200222043503-6f7a984d4dc4/go.mod h1:tQ2UAYgL5IevRw8kRxooKSPJfGvJ9fJQFa0TUsXzTg8=
 github.com/go-ini/ini v1.25.4/go.mod h1:ByCAeIL28uOIIG0E3PJtZPDL8WnHpFKFOtgjp+3Ies8=
-github.com/go-jose/go-jose/v3 v3.0.0 h1:s6rrhirfEP/CGIoc6p+PZAeogN2SxKav6Wp7+dyMWVo=
 github.com/go-jose/go-jose/v3 v3.0.0/go.mod h1:RNkWWRld676jZEYoV3+XK8L2ZnNSvIsxFMht0mSX+u8=
+github.com/go-jose/go-jose/v3 v3.0.1 h1:pWmKFVtt+Jl0vBZTIpz/eAKwsm6LkIxDVVbFHKkchhA=
+github.com/go-jose/go-jose/v3 v3.0.1/go.mod h1:RNkWWRld676jZEYoV3+XK8L2ZnNSvIsxFMht0mSX+u8=
 github.com/go-kit/kit v0.8.0/go.mod h1:xBxKIO96dXMWWy0MnWVtmwkA9/13aqxPnvrjFYMA2as=
 github.com/go-kit/kit v0.9.0/go.mod h1:xBxKIO96dXMWWy0MnWVtmwkA9/13aqxPnvrjFYMA2as=
 github.com/go-kit/kit v0.10.0/go.mod h1:xUsJbQ/Fp4kEt7AFgCuvyX4a71u8h9jB8tj/ORgOZ7o=
@@ -1020,8 +1031,8 @@ github.com/googleapis/google-cloud-go-testing v0.0.0-20200911160855-bcd43fbb19e8
 github.com/gopcua/opcua v0.1.12/go.mod h1:a6QH4F9XeODklCmWuvaOdL8v9H0d73CEKUHWVZLQyE8=
 github.com/gophercloud/gophercloud v0.0.0-20180828235145-f29afc2cceca/go.mod h1:3WdhXV3rUYy9p6AUW8d94kr+HS62Y4VL9mBnFxsD8q4=
 github.com/gophercloud/gophercloud v0.1.0/go.mod h1:vxM41WHh5uqHVBMZHzuwNOHh8XEoIEcSTewFxm1c5g8=
-github.com/gophercloud/gophercloud v1.5.0 h1:cDN6XFCLKiiqvYpjQLq9AiM7RDRbIC9450WpPH+yvXo=
-github.com/gophercloud/gophercloud v1.5.0/go.mod h1:aAVqcocTSXh2vYFZ1JTvx4EQmfgzxRcNupUfxZbBNDM=
+github.com/gophercloud/gophercloud v1.7.0 h1:fyJGKh0LBvIZKLvBWvQdIgkaV5yTM3Jh9EYUh+UNCAs=
+github.com/gophercloud/gophercloud v1.7.0/go.mod h1:aAVqcocTSXh2vYFZ1JTvx4EQmfgzxRcNupUfxZbBNDM=
 github.com/gopherjs/gopherjs v0.0.0-20180825215210-0210a2f0f73c/go.mod h1:wJfORRmW1u3UXTncJ5qlYoELFm8eSnnEO6hX4iZ3EWY=
 github.com/gopherjs/gopherjs v0.0.0-20181017120253-0766667cb4d1/go.mod h1:wJfORRmW1u3UXTncJ5qlYoELFm8eSnnEO6hX4iZ3EWY=
 github.com/gopherjs/gopherjs v1.17.2 h1:fQnZVsXk8uxXIStYb0N4bGk7jeyTalG/wsZjQ25dO0g=
@@ -1057,8 +1068,8 @@ github.com/grafana/gomemcache v0.0.0-20230316202710-a081dae0aba9 h1:WB3bGH2f1UN6
 github.com/grafana/gomemcache v0.0.0-20230316202710-a081dae0aba9/go.mod h1:PGk3RjYHpxMM8HFPhKKo+vve3DdlPUELZLSDEFehPuU=
 github.com/grafana/loki v1.6.2-0.20231004111112-07cbef92268a h1:lvSHlNONeo/H+aWRk86QEfBpRDCEX1yoqpsCK0Tys+g=
 github.com/grafana/loki v1.6.2-0.20231004111112-07cbef92268a/go.mod h1:a5c5ZTC6FNufKkvF8NeDAb2nCWJpgkVDrejmV+O9hac=
-github.com/grafana/loki/pkg/push v0.0.0-20230904153656-e4cc2a4f5ec8 h1:yQK/dX7WBva5QvITvmIcbv4boLwSo65a8zjuZcucnko=
-github.com/grafana/loki/pkg/push v0.0.0-20230904153656-e4cc2a4f5ec8/go.mod h1:5ll3An1wAxYejo6aM04+3/lc6N4joYVYLY5U+Z4O6vI=
+github.com/grafana/loki/pkg/push v0.0.0-20231212100434-384e5c2dc872 h1:6kPX7bngjBgUlHqADwZ6249UtzMaoQW5n0H8bOtnYeM=
+github.com/grafana/loki/pkg/push v0.0.0-20231212100434-384e5c2dc872/go.mod h1:f3JSoxBTPXX5ec4FxxeC19nTBSxoTz+cBgS3cYLMcr0=
 github.com/grafana/mysqld_exporter v0.12.2-0.20231005125903-364b9c41e595 h1:I9sRknI5ajd8whPOX0nBDXy5B6xUfhItClMy+6R4oqE=
 github.com/grafana/mysqld_exporter v0.12.2-0.20231005125903-364b9c41e595/go.mod h1:U8ifHC5pT2WuVTO7ki4KZmWLjfEKfktQiU3bh0J8scw=
 github.com/grafana/node_exporter v0.18.1-grafana-r01.0.20231004161416-702318429731 h1:vyyIYY2sLpmgFIckJ1vSO/oYkvB0thDF6UiFYp5PThM=
@@ -1069,14 +1080,12 @@ github.com/grafana/opentelemetry-collector/service v0.0.0-20231018134914-c0109e0
 github.com/grafana/opentelemetry-collector/service v0.0.0-20231018134914-c0109e052230/go.mod h1:kBdpzrqR2wJkOdg50yzp4dv+2XBMyeqTgF4lCx0hSpQ=
 github.com/grafana/postgres_exporter v0.8.1-0.20210722175051-db35d7c2f520 h1:HnFWqxhoSF3WC7sKAdMZ+SRXvHLVZlZ3sbQjuUlTqkw=
 github.com/grafana/postgres_exporter v0.8.1-0.20210722175051-db35d7c2f520/go.mod h1:+HPXgiOV0InDHcZ2jNijL1SOKvo0eEPege5fQA0+ICI=
-github.com/grafana/prometheus v1.8.2-0.20231016083943-46550094220d h1:hr0QEXSfpdakWdHw2sZeT/5GnGwIkHnNO0YBkfRj5zk=
-github.com/grafana/prometheus v1.8.2-0.20231016083943-46550094220d/go.mod h1:J/bmOSjgH7lFxz2gZhrWEZs2i64vMS+HIuZfmYNhJ/M=
 github.com/grafana/pyroscope-go/godeltaprof v0.1.3 h1:eunWpv1B3Z7ZK9o4499EmQGlY+CsDmSZ4FbxjRx37uk=
 github.com/grafana/pyroscope-go/godeltaprof v0.1.3/go.mod h1:1HSPtjU8vLG0jE9JrTdzjgFqdJ/VgN7fvxBNq3luJko=
 github.com/grafana/pyroscope/api v0.2.0 h1:TzOxL0s6SiaLEy944ZAKgHcx/JDRJXu4O8ObwkqR6p4=
 github.com/grafana/pyroscope/api v0.2.0/go.mod h1:nhH+xai9cYFgs6lMy/+L0pKj0d5yCMwji/QAiQFCP+U=
-github.com/grafana/pyroscope/ebpf v0.4.0 h1:7fz+5S6MLSc+5cJfmIe7OCvBdooxEm8xy5OAV0s7GA0=
-github.com/grafana/pyroscope/ebpf v0.4.0/go.mod h1:eF5+k9lAUBYILVzGccr3hrrvuLy5ZvbDRWGQHDe021w=
+github.com/grafana/pyroscope/ebpf v0.4.1 h1:iqQoOsfKen5KpTRe6MfGeBZfgK1s7ROH+Cs/vZs1B3A=
+github.com/grafana/pyroscope/ebpf v0.4.1/go.mod h1:W99Mq+yJGP5nZUQWNv+jVytiWWgWXwHjIRmi9k3xHzA=
 github.com/grafana/regexp v0.0.0-20221123153739-15dc172cd2db h1:7aN5cccjIqCLTzedH7MZzRZt5/lsAHch6Z3L2ZGn5FA=
 github.com/grafana/regexp v0.0.0-20221123153739-15dc172cd2db/go.mod h1:M5qHK+eWfAv8VR/265dIuEpL3fNfeC21tXXp9itM24A=
 github.com/grafana/river v0.3.0 h1:6TsaR/vkkcppUM9I0muGbPIUedCtpPu6OWreE5+CE6g=
@@ -1224,8 +1233,8 @@ github.com/hashicorp/memberlist v0.3.0/go.mod h1:MS2lj3INKhZjWNqd3N0m3J+Jxf3DAOn
 github.com/hashicorp/memberlist v0.5.0 h1:EtYPN8DpAURiapus508I4n9CzHs2W+8NZGbmmR/prTM=
 github.com/hashicorp/memberlist v0.5.0/go.mod h1:yvyXLpo0QaGE59Y7hDTsTzDD25JYBZ4mHgHUZ8lrOI0=
 github.com/hashicorp/net-rpc-msgpackrpc v0.0.0-20151116020338-a14192a58a69/go.mod h1:/z+jUGRBlwVpUZfjute9jWaF6/HuhjuFQuL1YXzVD1Q=
-github.com/hashicorp/nomad/api v0.0.0-20230718173136-3a687930bd3e h1:sr4lujmn9heD030xx/Pd4B/JSmvRhFzuotNXaaV0WLs=
-github.com/hashicorp/nomad/api v0.0.0-20230718173136-3a687930bd3e/go.mod h1:O23qLAZuCx4htdY9zBaO4cJPXgleSFEdq6D/sezGgYE=
+github.com/hashicorp/nomad/api v0.0.0-20230721134942-515895c7690c h1:Nc3Mt2BAnq0/VoLEntF/nipX+K1S7pG+RgwiitSv6v0=
+github.com/hashicorp/nomad/api v0.0.0-20230721134942-515895c7690c/go.mod h1:O23qLAZuCx4htdY9zBaO4cJPXgleSFEdq6D/sezGgYE=
 github.com/hashicorp/raft v1.0.1-0.20190409200437-d9fe23f7d472/go.mod h1:DVSAWItjLjTOkVbSpWQ0j0kUADIvDaCtBxIcbNAQLkI=
 github.com/hashicorp/raft-boltdb v0.0.0-20150201200839-d1e82c1ec3f1/go.mod h1:pNv7Wc3ycL6F5oOWn+tPGo2gWD4a5X+yp/ntwdKLjRk=
 github.com/hashicorp/serf v0.8.1/go.mod h1:h/Ru6tmZazX7WO/GDmwdpS975F019L4t5ng5IgwbNrE=
@@ -1262,8 +1271,8 @@ github.com/hashicorp/yamux v0.0.0-20180604194846-3520598351bb/go.mod h1:+NfK9FKe
 github.com/hashicorp/yamux v0.0.0-20181012175058-2f1d1f20f75d/go.mod h1:+NfK9FKeTrX5uv1uIXGdwYDTeHna2qgaIlx54MXqjAM=
 github.com/heroku/x v0.0.61 h1:yfoAAtnFWSFZj+UlS+RZL/h8QYEp1R4wHVEg0G+Hwh4=
 github.com/heroku/x v0.0.61/go.mod h1:C7xYbpMdond+s6L5VpniDUSVPRwm3kZum1o7XiD5ZHk=
-github.com/hetznercloud/hcloud-go/v2 v2.0.0 h1:Sg1DJ+MAKvbYAqaBaq9tPbwXBS2ckPIaMtVdUjKu+4g=
-github.com/hetznercloud/hcloud-go/v2 v2.0.0/go.mod h1:4iUG2NG8b61IAwNx6UsMWQ6IfIf/i1RsG0BbsKAyR5Q=
+github.com/hetznercloud/hcloud-go/v2 v2.4.0 h1:MqlAE+w125PLvJRCpAJmEwrIxoVdUdOyuFUhE/Ukbok=
+github.com/hetznercloud/hcloud-go/v2 v2.4.0/go.mod h1:l7fA5xsncFBzQTyw29/dw5Yr88yEGKKdc6BHf24ONS0=
 github.com/hexops/gotextdiff v1.0.3 h1:gitA9+qJrrTCsiCl7+kh75nPqQt1cx4ZkudSTLoUqJM=
 github.com/hexops/gotextdiff v1.0.3/go.mod h1:pSWU5MAI3yDq+fZBTazCSJysOMbxWL1BSow5/V2vxeg=
 github.com/hjson/hjson-go/v4 v4.0.0/go.mod h1:KaYt3bTw3zhBjYqnXkYywcYctk0A2nxeEFTse3rH13E=
@@ -1305,8 +1314,8 @@ github.com/influxdata/telegraf v1.16.3 h1:x0qeuSGGMg5y+YqP/5ZHwXZu3bcBrO8AAQOTNl
 github.com/influxdata/telegraf v1.16.3/go.mod h1:fX/6k7qpIqzVPWyeIamb0wN5hbwc0ANUaTS80lPYFB8=
 github.com/influxdata/toml v0.0.0-20190415235208-270119a8ce65/go.mod h1:zApaNFpP/bTpQItGZNNUMISDMDAnTXu9UqJ4yT3ocz8=
 github.com/influxdata/wlog v0.0.0-20160411224016-7c63b0a71ef8/go.mod h1:/2NMgWB1DHM1ti/gqhOlg+LJeBVk6FqR5aVGYY0hlwI=
-github.com/ionos-cloud/sdk-go/v6 v6.1.8 h1:493wE/BkZxJf7x79UCE0cYGPZoqQcPiEBALvt7uVGY0=
-github.com/ionos-cloud/sdk-go/v6 v6.1.8/go.mod h1:EzEgRIDxBELvfoa/uBN0kOQaqovLjUWEB7iW4/Q+t4k=
+github.com/ionos-cloud/sdk-go/v6 v6.1.9 h1:Iq3VIXzeEbc8EbButuACgfLMiY5TPVWUPNrF+Vsddo4=
+github.com/ionos-cloud/sdk-go/v6 v6.1.9/go.mod h1:EzEgRIDxBELvfoa/uBN0kOQaqovLjUWEB7iW4/Q+t4k=
 github.com/jackc/chunkreader v1.0.0/go.mod h1:RT6O25fNZIuasFJRyZ4R/Y2BbhasbmZXF9QQ7T3kePo=
 github.com/jackc/chunkreader/v2 v2.0.0/go.mod h1:odVSm741yZoC3dpHEUXIqA9tQRhFrgOHwnPIn9lDKlk=
 github.com/jackc/chunkreader/v2 v2.0.1 h1:i+RDz65UE+mmpjTfyz0MoVTnzeYxroil2G82ki7MGG8=
@@ -1495,8 +1504,8 @@ github.com/lightstep/go-expohisto v1.0.0/go.mod h1:xDXD0++Mu2FOaItXtdDfksfgxfV0z
 github.com/lightstep/lightstep-tracer-common/golang/gogo v0.0.0-20190605223551-bc2310a04743/go.mod h1:qklhhLq1aX+mtWk9cPHPzaBjWImj5ULL6C7HFJtXQMM=
 github.com/lightstep/lightstep-tracer-go v0.18.1/go.mod h1:jlF1pusYV4pidLvZ+XD0UBX0ZE6WURAspgAczcDHrL4=
 github.com/linode/linodego v0.7.1/go.mod h1:ga11n3ivecUrPCHN0rANxKmfWBJVkOXfLMZinAbj2sY=
-github.com/linode/linodego v1.19.0 h1:n4WJrcr9+30e9JGZ6DI0nZbm5SdAj1kSwvvt/998YUw=
-github.com/linode/linodego v1.19.0/go.mod h1:XZFR+yJ9mm2kwf6itZ6SCpu+6w3KnIevV0Uu5HNWJgQ=
+github.com/linode/linodego v1.23.0 h1:s0ReCZtuN9Z1IoUN9w1RLeYO1dMZUGPwOQ/IBFsBHtU=
+github.com/linode/linodego v1.23.0/go.mod h1:0U7wj/UQOqBNbKv1FYTXiBUXueR8DY4HvIotwE0ENgg=
 github.com/lufia/iostat v1.2.1 h1:tnCdZBIglgxD47RyD55kfWQcJMGzO+1QBziSQfesf2k=
 github.com/lufia/iostat v1.2.1/go.mod h1:rEPNA0xXgjHQjuI5Cy05sLlS2oRcSlWHRLrvh/AQ+Pg=
 github.com/lufia/plan9stats v0.0.0-20211012122336-39d0f177ccd0/go.mod h1:zJYVVT2jmtg6P3p1VtQj7WsuWi/y4VnjVBn7F8KPB3I=
@@ -1577,8 +1586,8 @@ github.com/miekg/dns v1.0.14/go.mod h1:W1PPwlIAgtquWBMBEV9nkV9Cazfe8ScdGz/Lj7v3N
 github.com/miekg/dns v1.1.25/go.mod h1:bPDLeHnStXmXAq1m/Ch/hvfNHr14JKNPMBo3VZKjuso=
 github.com/miekg/dns v1.1.26/go.mod h1:bPDLeHnStXmXAq1m/Ch/hvfNHr14JKNPMBo3VZKjuso=
 github.com/miekg/dns v1.1.41/go.mod h1:p6aan82bvRIyn+zDIv9xYNUpwa73JcSh9BKwknJysuI=
-github.com/miekg/dns v1.1.55 h1:GoQ4hpsj0nFLYe+bWiCToyrBEJXkQfOOIvFGFy0lEgo=
-github.com/miekg/dns v1.1.55/go.mod h1:uInx36IzPl7FYnDcMeVWxj9byh7DutNykX4G9Sj60FY=
+github.com/miekg/dns v1.1.56 h1:5imZaSeoRNvpM9SzWNhEcP9QliKiz20/dA2QabIGVnE=
+github.com/miekg/dns v1.1.56/go.mod h1:cRm6Oo2C8TY9ZS/TqsSrseAcncm74lfK5G+ikN2SWWY=
 github.com/mikioh/ipaddr v0.0.0-20190404000644-d465c8ab6721/go.mod h1:Ickgr2WtCLZ2MDGd4Gr0geeCH5HybhRJbonOgQpvSxc=
 github.com/minio/asm2plan9s v0.0.0-20200509001527-cdd76441f9d8 h1:AMFGa4R4MiIpspGNG7Z948v4n35fFGB3RR3G/ry4FWs=
 github.com/minio/asm2plan9s v0.0.0-20200509001527-cdd76441f9d8/go.mod h1:mC1jAcsrzbxHt8iiaC+zU4b1ylILSosueou12R++wfY=
@@ -1681,8 +1690,8 @@ github.com/ncabatoff/go-seq v0.0.0-20180805175032-b08ef85ed833 h1:t4WWQ9I797y7QU
 github.com/ncabatoff/go-seq v0.0.0-20180805175032-b08ef85ed833/go.mod h1:0CznHmXSjMEqs5Tezj/w2emQoM41wzYM9KpDKUHPYag=
 github.com/ncabatoff/process-exporter v0.7.10 h1:+Ere7+3se6QqP54gg7aBRagWcL8bq3u5zNi/GRSWeKQ=
 github.com/ncabatoff/process-exporter v0.7.10/go.mod h1:DHZRZjqxw9LCOpLlX0DjBuyn6d5plh41Jv6Tmttj7Ek=
-github.com/nerdswords/yet-another-cloudwatch-exporter v0.54.0 h1:a2jReAfDiSyU/aXCKO05hcJMTdtyQQyj41Jmwyg6fh8=
-github.com/nerdswords/yet-another-cloudwatch-exporter v0.54.0/go.mod h1:VngmqrhYKwZzUuv/sgVCfUhLB6BkgSZfL5USqZbGKnY=
+github.com/nerdswords/yet-another-cloudwatch-exporter v0.55.0 h1:M3fH9gzU48jBfYbXXYEZVTcUhnfhDIG/oeIQl6kBGP0=
+github.com/nerdswords/yet-another-cloudwatch-exporter v0.55.0/go.mod h1:GR4pDHlRonT97AsGSmlcWiISF8AjifK/19SAVD0tIlU=
 github.com/newrelic/newrelic-telemetry-sdk-go v0.2.0/go.mod h1:G9MqE/cHGv3Hx3qpYhfuyFUsGx2DpVcGi1iJIqTg+JQ=
 github.com/nicolai86/scaleway-sdk v1.10.2-0.20180628010248-798f60e20bb2 h1:BQ1HW7hr4IVovMwWg0E0PYcyW8CzqDcVmaew9cujU4s=
 github.com/nicolai86/scaleway-sdk v1.10.2-0.20180628010248-798f60e20bb2/go.mod h1:TLb2Sg7HQcgGdloNxkrmtgDNR9uVYF3lfdFIN4Ro6Sk=
@@ -1861,8 +1870,8 @@ github.com/oschwald/geoip2-golang v1.9.0 h1:uvD3O6fXAXs+usU+UGExshpdP13GAqp4GBrz
 github.com/oschwald/geoip2-golang v1.9.0/go.mod h1:BHK6TvDyATVQhKNbQBdrj9eAvuwOMi2zSFXizL3K81Y=
 github.com/oschwald/maxminddb-golang v1.11.0 h1:aSXMqYR/EPNjGE8epgqwDay+P30hCBZIveY0WZbAWh0=
 github.com/oschwald/maxminddb-golang v1.11.0/go.mod h1:YmVI+H0zh3ySFR3w+oz8PCfglAFj3PuCmui13+P9zDg=
-github.com/ovh/go-ovh v1.4.1 h1:VBGa5wMyQtTP7Zb+w97zRCh9sLtM/2YKRyy+MEJmWaM=
-github.com/ovh/go-ovh v1.4.1/go.mod h1:6bL6pPyUT7tBfI0pqOegJgRjgjuO+mOo+MyXd1EEC0M=
+github.com/ovh/go-ovh v1.4.3 h1:Gs3V823zwTFpzgGLZNI6ILS4rmxZgJwJCz54Er9LwD0=
+github.com/ovh/go-ovh v1.4.3/go.mod h1:AkPXVtgwB6xlKblMjRKJJmjRp+ogrE7fz2lVgcQY8SY=
 github.com/packethost/packngo v0.1.1-0.20180711074735-b9cb5096f54c h1:vwpFWvAO8DeIZfFeqASzZfsxuWPno9ncAebBEP0N3uE=
 github.com/packethost/packngo v0.1.1-0.20180711074735-b9cb5096f54c/go.mod h1:otzZQXgoO96RTzDB/Hycg0qZcXZsWJGJRSXbmEIJ+4M=
 github.com/pact-foundation/pact-go v1.0.4/go.mod h1:uExwJY4kCzNPcHRj+hCR/HBbOOIwwtUjcrb0b5/5kLM=
@@ -2001,13 +2010,13 @@ github.com/prometheus/procfs v0.7.3/go.mod h1:cz+aTbrPOrUb4q7XlbU9ygM+/jj0fzG6c1
 github.com/prometheus/procfs v0.8.0/go.mod h1:z7EfXMXOkbkqb9IINtpCn86r/to3BnA0uaxHdg830/4=
 github.com/prometheus/procfs v0.12.0 h1:jluTpSng7V9hY0O2R9DzzJHYb2xULk9VTR1V1R/k6Bo=
 github.com/prometheus/procfs v0.12.0/go.mod h1:pcuDEFsWDnvcgNzo4EEweacyhjeA9Zk3cnaOZAZEfOo=
+github.com/prometheus/prometheus v0.48.1 h1:CTszphSNTXkuCG6O0IfpKdHcJkvvnAAE1GbELKS+NFk=
+github.com/prometheus/prometheus v0.48.1/go.mod h1:SRw624aMAxTfryAcP8rOjg4S/sHHaetx2lyJJ2nM83g=
 github.com/prometheus/snmp_exporter v0.24.1 h1:AihTbJHurMo8bjtjJde8U+4gMEvpvYvT21Xbd4SzJgY=
 github.com/prometheus/snmp_exporter v0.24.1/go.mod h1:j6uIGkdR0DXvKn7HJtSkeDj//UY0sWmdd6XhvdBjln0=
 github.com/prometheus/statsd_exporter v0.22.7/go.mod h1:N/TevpjkIh9ccs6nuzY3jQn9dFqnUakOjnEuMPJJJnI=
 github.com/prometheus/statsd_exporter v0.22.8 h1:Qo2D9ZzaQG+id9i5NYNGmbf1aa/KxKbB9aKfMS+Yib0=
 github.com/prometheus/statsd_exporter v0.22.8/go.mod h1:/DzwbTEaFTE0Ojz5PqcSk6+PFHOPWGxdXVr6yC8eFOM=
-github.com/prometheus/tsdb v0.10.0 h1:If5rVCMTp6W2SiRAQFlbpJNgVlgMEd+U2GZckwK38ic=
-github.com/prometheus/tsdb v0.10.0/go.mod h1:oi49uRhEe9dPUTlS3JRZOwJuVi6tmh10QSgwXEyGCt4=
 github.com/rcrowley/go-metrics v0.0.0-20181016184325-3113b8401b8a/go.mod h1:bCqnVzQkZxMG4s8nGwiZ5l3QUCyqpo9Y+/ZMZ9VjZe4=
 github.com/rcrowley/go-metrics v0.0.0-20200313005456-10cdbea86bc0/go.mod h1:bCqnVzQkZxMG4s8nGwiZ5l3QUCyqpo9Y+/ZMZ9VjZe4=
 github.com/rcrowley/go-metrics v0.0.0-20201227073835-cf1acfcdf475 h1:N/ElC8H3+5XpJzTSTfLsJV/mx9Q9g7kxmchpfZyxgzM=
@@ -2056,8 +2065,8 @@ github.com/samuel/go-zookeeper v0.0.0-20190923202752-2cc03de413da h1:p3Vo3i64TCL
 github.com/samuel/go-zookeeper v0.0.0-20190923202752-2cc03de413da/go.mod h1:gi+0XIa01GRL2eRQVjQkKGqKF3SF9vZR/HnPullcV2E=
 github.com/satori/go.uuid v1.2.0/go.mod h1:dA0hQrYB0VpLJoorglMZABFdXlWrHn1NEOzdhQKdks0=
 github.com/satori/go.uuid v1.2.1-0.20181028125025-b2ce2384e17b/go.mod h1:dA0hQrYB0VpLJoorglMZABFdXlWrHn1NEOzdhQKdks0=
-github.com/scaleway/scaleway-sdk-go v1.0.0-beta.20 h1:a9hSJdJcd16e0HoMsnFvaHvxB3pxSD+SC7+CISp7xY0=
-github.com/scaleway/scaleway-sdk-go v1.0.0-beta.20/go.mod h1:fCa7OJZ/9DRTnOKmxvT6pn+LPWUptQAmHF/SBJUGEcg=
+github.com/scaleway/scaleway-sdk-go v1.0.0-beta.21 h1:yWfiTPwYxB0l5fGMhl/G+liULugVIHD9AU77iNLrURQ=
+github.com/scaleway/scaleway-sdk-go v1.0.0-beta.21/go.mod h1:fCa7OJZ/9DRTnOKmxvT6pn+LPWUptQAmHF/SBJUGEcg=
 github.com/sean-/seed v0.0.0-20170313163322-e2103e2c3529 h1:nn5Wsu0esKSJiIVhscUtVbo7ada43DJhG55ua/hjS5I=
 github.com/sean-/seed v0.0.0-20170313163322-e2103e2c3529/go.mod h1:DxrIzT+xaE7yg65j358z/aeFdxmN0P9QXhEzd20vsDc=
 github.com/seccomp/libseccomp-golang v0.9.1/go.mod h1:GbW5+tmTXfcxTToHLXlScSlAvWlF4P2Ca7zGrPiEpWo=
@@ -2504,15 +2513,29 @@ golang.org/x/crypto v0.0.0-20220511200225-c6db032c6c88/go.mod h1:IxCIyHEi3zRg3s0
 golang.org/x/crypto v0.0.0-20220622213112-05595931fe9d/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
 golang.org/x/crypto v0.0.0-20220722155217-630584e8d5aa/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
 golang.org/x/crypto v0.0.0-20220829220503-c86fa9a7ed90/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
-golang.org/x/crypto v0.1.0/go.mod h1:RecgLatLF4+eUMCP1PoPZQb+cVrJcOPbHkTkbkB9sbw=
 golang.org/x/crypto v0.3.0/go.mod h1:hebNnKkNXi2UzZN1eVRvBB7co0a+JxK6XbPiWVs/3J4=
 golang.org/x/crypto v0.6.0/go.mod h1:OFC/31mSvZgRz0V1QTNCzfAI1aIRzbiufJtkMIlEp58=
 golang.org/x/crypto v0.10.0/go.mod h1:o4eNf7Ede1fv+hwOwZsTHl9EsPFO6q6ZvYR8vYfY45I=
 golang.org/x/crypto v0.15.0 h1:frVn1TEaCEaZcn3Tmd7Y2b5KKPaZ+I32Q2OA3kYp5TA=
 golang.org/x/crypto v0.15.0/go.mod h1:4ChreQoLWfG3xLDer1WdlH5NdlQ3+mwnQq1YTKY+72g=
-golang.org/x/exp v0.0.0-20230713183714-613f0c0eb8a1 h1:MGwJjxBy0HJshjDNfLsYO8xppfqWlA5ZT9OhtUUhTNw=
-golang.org/x/exp v0.0.0-20230713183714-613f0c0eb8a1/go.mod h1:FXUEEKJgO7OQYeo8N01OfiKP8RXMtf6e8aTskBGqWdc=
+golang.org/x/exp v0.0.0-20180321215751-8460e604b9de/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
+golang.org/x/exp v0.0.0-20180807140117-3d87b88a115f/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
+golang.org/x/exp v0.0.0-20190121172915-509febef88a4/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
+golang.org/x/exp v0.0.0-20190125153040-c74c464bbbf2/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
+golang.org/x/exp v0.0.0-20190306152737-a1d7652674e8/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
+golang.org/x/exp v0.0.0-20190510132918-efd6b22b2522/go.mod h1:ZjyILWgesfNpC6sMxTJOJm9Kp84zZh5NQWvqDGG3Qr8=
+golang.org/x/exp v0.0.0-20190829153037-c13cbed26979/go.mod h1:86+5VVa7VpoJ4kLfm080zCjGlMRFzhUhsZKEZO7MGek=
+golang.org/x/exp v0.0.0-20191030013958-a1ab85dbe136/go.mod h1:JXzH8nQsPlswgeRAPE3MuO9GYsAcnJvJ4vnMwN/5qkY=
+golang.org/x/exp v0.0.0-20191129062945-2f5052295587/go.mod h1:2RIsYlXP63K8oxa1u096TMicItID8zy7Y6sNkU49FU4=
+golang.org/x/exp v0.0.0-20191227195350-da58074b4299/go.mod h1:2RIsYlXP63K8oxa1u096TMicItID8zy7Y6sNkU49FU4=
+golang.org/x/exp v0.0.0-20200119233911-0405dc783f0a/go.mod h1:2RIsYlXP63K8oxa1u096TMicItID8zy7Y6sNkU49FU4=
+golang.org/x/exp v0.0.0-20200207192155-f17229e696bd/go.mod h1:J/WKrq2StrnmMY6+EHIKF9dgMWnmCNThgcyBT1FY9mM=
+golang.org/x/exp v0.0.0-20200224162631-6cc2880d07d6/go.mod h1:3jZMyOhIsHpP37uCMkUooju7aAi5cS1Q23tOzKc+0MU=
+golang.org/x/exp v0.0.0-20231110203233-9a3e6036ecaa h1:FRnLl4eNAQl8hwxVVC17teOw8kdjVDVAiFMtgUdTSRQ=
+golang.org/x/exp v0.0.0-20231110203233-9a3e6036ecaa/go.mod h1:zk2irFbV9DP96SEBUUAy67IdHUaZuSnrz1n472HUCLE=
 golang.org/x/image v0.0.0-20180708004352-c73c2afc3b81/go.mod h1:ux5Hcp/YLpHSI86hEcLt0YII63i6oz57MZXIpbrjZUs=
+golang.org/x/image v0.0.0-20190227222117-0694c2d4d067/go.mod h1:kZ7UVZpmo3dzQBMxlp+ypCbDeSB+sBbTgSJuh5dn5js=
+golang.org/x/image v0.0.0-20190802002840-cff245a6509b/go.mod h1:FeLwcggjj3mMvU+oOTbSwawSJRM1uh48EjtB4UJZlP0=
 golang.org/x/lint v0.0.0-20180702182130-06c8688daad7/go.mod h1:UVdnD1Gm6xHRNCYTkRU2/jEulfH38KcIWyp/GAMgvoE=
 golang.org/x/lint v0.0.0-20181026193005-c67002cb31c3/go.mod h1:UVdnD1Gm6xHRNCYTkRU2/jEulfH38KcIWyp/GAMgvoE=
 golang.org/x/lint v0.0.0-20190227174305-5b3e6a55c961/go.mod h1:wehouNa3lNwaWXcvxsM5YxQ5yQlVC4a0KAMCusXpPoU=
@@ -2526,8 +2549,12 @@ golang.org/x/lint v0.0.0-20200130185559-910be7a94367/go.mod h1:3xt1FjdF8hUf6vQPI
 golang.org/x/lint v0.0.0-20200302205851-738671d3881b/go.mod h1:3xt1FjdF8hUf6vQPIChWIBhFzV8gjjsPE/fR3IyQdNY=
 golang.org/x/lint v0.0.0-20201208152925-83fdc39ff7b5/go.mod h1:3xt1FjdF8hUf6vQPIChWIBhFzV8gjjsPE/fR3IyQdNY=
 golang.org/x/lint v0.0.0-20210508222113-6edffad5e616/go.mod h1:3xt1FjdF8hUf6vQPIChWIBhFzV8gjjsPE/fR3IyQdNY=
+golang.org/x/mobile v0.0.0-20190312151609-d3739f865fa6/go.mod h1:z+o9i4GpDbdi3rU15maQ/Ox0txvL9dWGYEHz965HBQE=
+golang.org/x/mobile v0.0.0-20190719004257-d2bd2a29d028/go.mod h1:E/iHnbuqvinMTCcRqshq8CkpyQDoeVncDDYHnLhea+o=
 golang.org/x/mod v0.0.0-20190513183733-4bf6d317e70e/go.mod h1:mXi4GBBbnImb6dmsKGUJ2LatrhH/nqhxcFungHvyanc=
+golang.org/x/mod v0.1.0/go.mod h1:0QHyrYULN0/3qlju5TqG8bIK38QM8yzMo5ekMj3DlcY=
 golang.org/x/mod v0.1.1-0.20191105210325-c90efee705ee/go.mod h1:QqPTAvyqsEbceGzBzNggFXnrqF1CaUcvgkdR5Ot7KZg=
+golang.org/x/mod v0.1.1-0.20191107180719-034126e5016b/go.mod h1:QqPTAvyqsEbceGzBzNggFXnrqF1CaUcvgkdR5Ot7KZg=
 golang.org/x/mod v0.2.0/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
 golang.org/x/mod v0.3.0/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
 golang.org/x/mod v0.3.1-0.20200828183125-ce943fd02449/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
@@ -2535,9 +2562,7 @@ golang.org/x/mod v0.4.0/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
 golang.org/x/mod v0.4.1/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
 golang.org/x/mod v0.4.2/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
 golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
-golang.org/x/mod v0.6.0/go.mod h1:4mET923SAdbXp2ki8ey+zGs1SLqsuM2Y0uvdZR/fUNI=
 golang.org/x/mod v0.8.0/go.mod h1:iBbtSCu2XBx23ZKBPSOrRkjjQPZFPuis4dIYUhu/chs=
-golang.org/x/mod v0.11.0/go.mod h1:iBbtSCu2XBx23ZKBPSOrRkjjQPZFPuis4dIYUhu/chs=
 golang.org/x/mod v0.14.0 h1:dGoOF9QVLYng8IHTm7BAyWqCqSheQ5pYWGhzW00YJr0=
 golang.org/x/mod v0.14.0/go.mod h1:hTbmBsO62+eylJbnUtE2MGJUyE7QWk4xUqPFrRgJ+7c=
 golang.org/x/net v0.0.0-20170114055629-f2499483f923/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
@@ -2687,6 +2712,7 @@ golang.org/x/sys v0.0.0-20190826190057-c7b8b68b1456/go.mod h1:h1NjWce9XRLGQEsW7w
 golang.org/x/sys v0.0.0-20190916202348-b4ddaad3f8a3/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20190922100055-0a153f010e69/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20190924154521-2837fb4f24fe/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20191001151750-bb3f8db39f24/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20191003212358-c178f38b412c/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20191005200804-aed5e4c7ecf9/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20191008105621-543471e840be/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
@@ -2830,6 +2856,7 @@ golang.org/x/tools v0.0.0-20190114222345-bf090417da8b/go.mod h1:n7NCudcB/nEzxVGm
 golang.org/x/tools v0.0.0-20190206041539-40960b6deb8e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
 golang.org/x/tools v0.0.0-20190226205152-f727befe758c/go.mod h1:9Yl7xja0Znq3iFh3HoIrodX9oNMXvdceNzlUR8zjMvY=
 golang.org/x/tools v0.0.0-20190311212946-11955173bddd/go.mod h1:LCzVGOaR6xXOjkQ3onu1FJEFr0SW1gC7cKk1uF8kGRs=
+golang.org/x/tools v0.0.0-20190312151545-0bb0c0a6e846/go.mod h1:LCzVGOaR6xXOjkQ3onu1FJEFr0SW1gC7cKk1uF8kGRs=
 golang.org/x/tools v0.0.0-20190312170243-e65039ee4138/go.mod h1:LCzVGOaR6xXOjkQ3onu1FJEFr0SW1gC7cKk1uF8kGRs=
 golang.org/x/tools v0.0.0-20190328211700-ab21143f2384/go.mod h1:LCzVGOaR6xXOjkQ3onu1FJEFr0SW1gC7cKk1uF8kGRs=
 golang.org/x/tools v0.0.0-20190329151228-23e29df326fe/go.mod h1:LCzVGOaR6xXOjkQ3onu1FJEFr0SW1gC7cKk1uF8kGRs=
@@ -2845,9 +2872,11 @@ golang.org/x/tools v0.0.0-20190614205625-5aca471b1d59/go.mod h1:/rFqwRUd4F7ZHNgw
 golang.org/x/tools v0.0.0-20190621195816-6e04913cbbac/go.mod h1:/rFqwRUd4F7ZHNgwSSTFct+R/Kf4OFW1sUzUTQQTgfc=
 golang.org/x/tools v0.0.0-20190624222133-a101b041ded4/go.mod h1:/rFqwRUd4F7ZHNgwSSTFct+R/Kf4OFW1sUzUTQQTgfc=
 golang.org/x/tools v0.0.0-20190628153133-6cdbf07be9d0/go.mod h1:/rFqwRUd4F7ZHNgwSSTFct+R/Kf4OFW1sUzUTQQTgfc=
+golang.org/x/tools v0.0.0-20190816200558-6889da9d5479/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
 golang.org/x/tools v0.0.0-20190823170909-c4a336ef6a2f/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
 golang.org/x/tools v0.0.0-20190907020128-2ca718005c18/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
 golang.org/x/tools v0.0.0-20190911174233-4f2ddba30aff/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
+golang.org/x/tools v0.0.0-20191012152004-8de300cfc20a/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
 golang.org/x/tools v0.0.0-20191029041327-9cc4af7d6b2c/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
 golang.org/x/tools v0.0.0-20191029190741-b9c20aec41a5/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
 golang.org/x/tools v0.0.0-20191108193012-7d206e10da11/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
@@ -2863,6 +2892,7 @@ golang.org/x/tools v0.0.0-20200117161641-43d50277825c/go.mod h1:TB2adYChydJhpapK
 golang.org/x/tools v0.0.0-20200122220014-bf1340f18c4a/go.mod h1:TB2adYChydJhpapKDTa4BR/hXlZSLoq2Wpct/0txZ28=
 golang.org/x/tools v0.0.0-20200130002326-2f3ba24bd6e7/go.mod h1:TB2adYChydJhpapKDTa4BR/hXlZSLoq2Wpct/0txZ28=
 golang.org/x/tools v0.0.0-20200204074204-1cc6d1ef6c74/go.mod h1:TB2adYChydJhpapKDTa4BR/hXlZSLoq2Wpct/0txZ28=
+golang.org/x/tools v0.0.0-20200207183749-b753a1ba74fa/go.mod h1:TB2adYChydJhpapKDTa4BR/hXlZSLoq2Wpct/0txZ28=
 golang.org/x/tools v0.0.0-20200212150539-ea181f53ac56/go.mod h1:TB2adYChydJhpapKDTa4BR/hXlZSLoq2Wpct/0txZ28=
 golang.org/x/tools v0.0.0-20200224181240-023911ca70b2/go.mod h1:TB2adYChydJhpapKDTa4BR/hXlZSLoq2Wpct/0txZ28=
 golang.org/x/tools v0.0.0-20200227222343-706bc42d1f0d/go.mod h1:TB2adYChydJhpapKDTa4BR/hXlZSLoq2Wpct/0txZ28=
@@ -2894,7 +2924,6 @@ golang.org/x/tools v0.1.3/go.mod h1:o0xws9oXOQQZyjljx8fwUC0k7L1pTE6eaCbjGeHmOkk=
 golang.org/x/tools v0.1.4/go.mod h1:o0xws9oXOQQZyjljx8fwUC0k7L1pTE6eaCbjGeHmOkk=
 golang.org/x/tools v0.1.5/go.mod h1:o0xws9oXOQQZyjljx8fwUC0k7L1pTE6eaCbjGeHmOkk=
 golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc=
-golang.org/x/tools v0.2.0/go.mod h1:y4OqIKeOV/fWJetJ8bXPU1sEVniLMIyDAZWeHdV+NTA=
 golang.org/x/tools v0.6.0/go.mod h1:Xwgl3UAJ/d3gWutnCtw505GrjyAbvKui8lOU390QaIU=
 golang.org/x/tools v0.15.0 h1:zdAyfUGbYmuVokhzVmghFl2ZJh5QhcfebBgmVPFYA+8=
 golang.org/x/tools v0.15.0/go.mod h1:hpksKq4dtpQWS1uQ61JkdqWM3LscIS6Slf+VVkm+wQk=
@@ -2946,8 +2975,8 @@ google.golang.org/api v0.51.0/go.mod h1:t4HdrdoNgyN5cbEfm7Lum0lcLDLiise1F8qDKX00
 google.golang.org/api v0.54.0/go.mod h1:7C4bFFOvVDGXjfDTAsgGwDgAxRDeQ4X8NvUedIt6z3k=
 google.golang.org/api v0.55.0/go.mod h1:38yMfeP1kfjsl8isn0tliTjIb1rJXcQi4UXlbqivdVE=
 google.golang.org/api v0.57.0/go.mod h1:dVPlbZyBo2/OjBpmvNdpn2GRm6rPy75jyU7bmhdrMgI=
-google.golang.org/api v0.146.0 h1:9aBYT4vQXt9dhCuLNfwfd3zpwu8atg0yPkjBymwSrOM=
-google.golang.org/api v0.146.0/go.mod h1:OARJqIfoYjXJj4C1AiBSXYZt03qsoz8FQYU6fBEfrHM=
+google.golang.org/api v0.147.0 h1:Can3FaQo9LlVqxJCodNmeZW/ib3/qKAY3rFeXiHo5gc=
+google.golang.org/api v0.147.0/go.mod h1:pQ/9j83DcmPd/5C9e2nFOdjjNkDZ1G+zkbK2uvdkJMs=
 google.golang.org/appengine v1.1.0/go.mod h1:EbEs0AVv82hx2wNQdGPgUI5lhzA/G0D9YwlJXL52JkM=
 google.golang.org/appengine v1.2.0/go.mod h1:xpcJRLb0r/rnEns0DIKYYv+WjYCduHsrkT7/EB5XEv4=
 google.golang.org/appengine v1.4.0/go.mod h1:xpcJRLb0r/rnEns0DIKYYv+WjYCduHsrkT7/EB5XEv4=
@@ -3023,8 +3052,8 @@ google.golang.org/genproto v0.0.0-20210903162649-d08c68adba83/go.mod h1:eFjDcFEc
 google.golang.org/genproto v0.0.0-20210924002016-3dee208752a0/go.mod h1:5CzLGKJ67TSI2B9POpiiyGha0AjJvZIUgRMt1dSmuhc=
 google.golang.org/genproto v0.0.0-20231012201019-e917dd12ba7a h1:fwgW9j3vHirt4ObdHoYNwuO24BEZjSzbh+zPaNWoiY8=
 google.golang.org/genproto v0.0.0-20231012201019-e917dd12ba7a/go.mod h1:EMfReVxb80Dq1hhioy0sOsY9jCE46YDgHlJ7fWVUWRE=
-google.golang.org/genproto/googleapis/api v0.0.0-20231002182017-d307bd883b97 h1:W18sezcAYs+3tDZX4F80yctqa12jcP1PUS2gQu1zTPU=
-google.golang.org/genproto/googleapis/api v0.0.0-20231002182017-d307bd883b97/go.mod h1:iargEX0SFPm3xcfMI0d1domjg0ZF4Aa0p2awqyxhvF0=
+google.golang.org/genproto/googleapis/api v0.0.0-20231012201019-e917dd12ba7a h1:myvhA4is3vrit1a6NZCWBIwN0kNEnX21DJOJX/NvIfI=
+google.golang.org/genproto/googleapis/api v0.0.0-20231012201019-e917dd12ba7a/go.mod h1:SUBoKXbI1Efip18FClrQVGjWcyd0QZd8KkvdP34t7ww=
 google.golang.org/genproto/googleapis/rpc v0.0.0-20231016165738-49dd2c1f3d0b h1:ZlWIi1wSK56/8hn4QcBp/j9M7Gt3U/3hZw3mC7vDICo=
 google.golang.org/genproto/googleapis/rpc v0.0.0-20231016165738-49dd2c1f3d0b/go.mod h1:swOH3j0KzcDDgGUWr+SNpyTen5YrXjS3eyPzFYKc6lc=
 google.golang.org/grpc v0.0.0-20180920234847-8997b5fa0873/go.mod h1:0JHn/cJsOMiMfNA9+DeHDlAU7KAAB5GDlYFpa9MZMio=
diff --git a/pkg/metrics/instance/configstore/api_test.go b/pkg/metrics/instance/configstore/api_test.go
index 15a111520301..84c0198dee00 100644
--- a/pkg/metrics/instance/configstore/api_test.go
+++ b/pkg/metrics/instance/configstore/api_test.go
@@ -139,6 +139,7 @@ scrape_configs:
   honor_timestamps: true
   metrics_path: /metrics
   scheme: http
+  track_timestamps_staleness: true
   static_configs:
   - targets:
     - 127.0.0.1:12345
diff --git a/pkg/metrics/instance/host_filter_test.go b/pkg/metrics/instance/host_filter_test.go
index aa53bd25b727..8a24373594c0 100644
--- a/pkg/metrics/instance/host_filter_test.go
+++ b/pkg/metrics/instance/host_filter_test.go
@@ -172,6 +172,7 @@ func TestHostFilter_PatchSD(t *testing.T) {
 	honor_timestamps: true
 	metrics_path: /metrics
 	scheme: http
+	track_timestamps_staleness: false
 	follow_redirects: true
 	enable_http2: true
 	kubernetes_sd_configs:
diff --git a/pkg/metrics/instance/marshal_test.go b/pkg/metrics/instance/marshal_test.go
index 5d2a68b870da..b102c3d635d2 100644
--- a/pkg/metrics/instance/marshal_test.go
+++ b/pkg/metrics/instance/marshal_test.go
@@ -36,6 +36,7 @@ scrape_configs:
   honor_timestamps: true
   metrics_path: /metrics
   scheme: http
+  track_timestamps_staleness: true
   static_configs:
   - targets:
     - 127.0.0.1:12345
@@ -92,6 +93,7 @@ scrape_configs:
   honor_timestamps: true
   metrics_path: /metrics
   scheme: http
+  track_timestamps_staleness: true
   static_configs:
   - targets:
     - 127.0.0.1:12345

From d8efe1a9412b8997d24a075c7ffecbd6157c9bf6 Mon Sep 17 00:00:00 2001
From: Piotr <17101802+thampiotr@users.noreply.github.com>
Date: Fri, 5 Jan 2024 14:33:14 +0100
Subject: [PATCH 07/68] create migrate tasks subdirectory (#6051)

---
 docs/sources/about.md                         |  4 ++--
 docs/sources/flow/reference/cli/convert.md    |  6 +++---
 docs/sources/flow/tasks/migrate/_index.md     | 19 +++++++++++++++++++
 .../from-operator.md}                         | 12 ++++++------
 .../from-prometheus.md}                       | 10 +++++-----
 .../from-promtail.md}                         | 10 +++++-----
 .../from-static.md}                           | 18 +++++++++---------
 7 files changed, 49 insertions(+), 30 deletions(-)
 create mode 100644 docs/sources/flow/tasks/migrate/_index.md
 rename docs/sources/flow/tasks/{migrating-from-operator.md => migrate/from-operator.md} (97%)
 rename docs/sources/flow/tasks/{migrating-from-prometheus.md => migrate/from-prometheus.md} (98%)
 rename docs/sources/flow/tasks/{migrating-from-promtail.md => migrate/from-promtail.md} (98%)
 rename docs/sources/flow/tasks/{migrating-from-static.md => migrate/from-static.md} (97%)

diff --git a/docs/sources/about.md b/docs/sources/about.md
index c33d73087408..57468c7f3e24 100644
--- a/docs/sources/about.md
+++ b/docs/sources/about.md
@@ -33,8 +33,8 @@ Grafana Agent is available in three different variants:
 [Prometheus]: "/docs/grafana-cloud/ -> /docs/agent/<AGENT_VERSION>/flow/tasks/collect-prometheus-metrics.md"
 [OTel]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/tasks/collect-opentelemetry-data.md"
 [OTel]: "/docs/grafana-cloud/ -> /docs/agent/<AGENT_VERSION>/flow/tasks/collect-opentelemetry-data.md"
-[Loki]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/tasks/migrating-from-promtail.md"
-[Loki]: "/docs/grafana-cloud/ -> /docs/agent/<AGENT_VERSION>/flow/tasks/migrating-from-promtail.md"
+[Loki]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/tasks/migrate/from-promtail.md"
+[Loki]: "/docs/grafana-cloud/ -> /docs/agent/<AGENT_VERSION>/flow/tasks/migrate/from-promtail.md"
 [clustering]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/concepts/clustering/_index.md"
 [clustering]: "/docs/grafana-cloud/ -> /docs/agent/<AGENT_VERSION>/flow/concepts/clustering/_index.md"
 [rules]: "/docs/agent/ -> /docs/agent/latest/flow/reference/components/mimir.rules.kubernetes.md"
diff --git a/docs/sources/flow/reference/cli/convert.md b/docs/sources/flow/reference/cli/convert.md
index 833341b47752..a9a3810ec3ee 100644
--- a/docs/sources/flow/reference/cli/convert.md
+++ b/docs/sources/flow/reference/cli/convert.md
@@ -82,7 +82,7 @@ This includes Prometheus features such as
 and many supported *_sd_configs. Unsupported features in a source configuration result
 in [errors].
 
-Refer to [Migrate from Prometheus to {{< param "PRODUCT_NAME" >}}]({{< relref "../../tasks/migrating-from-prometheus/" >}}) for a detailed migration guide.
+Refer to [Migrate from Prometheus to {{< param "PRODUCT_NAME" >}}]({{< relref "../../tasks/migrate/from-prometheus/" >}}) for a detailed migration guide.
 
 ### Promtail
 
@@ -96,7 +96,7 @@ are supported and can be converted to {{< param "PRODUCT_NAME" >}} configuration
 If you have unsupported features in a source configuration, you will receive [errors] when you convert to a flow configuration. The converter will
 also raise warnings for configuration options that may require your attention.
 
-Refer to [Migrate from Promtail to {{< param "PRODUCT_NAME" >}}]({{< relref "../../tasks/migrating-from-promtail/" >}}) for a detailed migration guide.
+Refer to [Migrate from Promtail to {{< param "PRODUCT_NAME" >}}]({{< relref "../../tasks/migrate/from-promtail/" >}}) for a detailed migration guide.
 
 ### Static
 
@@ -113,4 +113,4 @@ flags with a space between each flag, for example `--extra-args="-enable-feature
 If you have unsupported features in a Static mode source configuration, you will receive [errors][] when you convert to a Flow mode configuration. The converter will
 also raise warnings for configuration options that may require your attention.
 
-Refer to [Migrate from Grafana Agent Static to {{< param "PRODUCT_NAME" >}}]({{< relref "../../tasks/migrating-from-static/" >}}) for a detailed migration guide.
\ No newline at end of file
+Refer to [Migrate from Grafana Agent Static to {{< param "PRODUCT_NAME" >}}]({{< relref "../../tasks/migrate/from-static/" >}}) for a detailed migration guide.
\ No newline at end of file
diff --git a/docs/sources/flow/tasks/migrate/_index.md b/docs/sources/flow/tasks/migrate/_index.md
new file mode 100644
index 000000000000..a0c98966dcb4
--- /dev/null
+++ b/docs/sources/flow/tasks/migrate/_index.md
@@ -0,0 +1,19 @@
+---
+aliases:
+- /docs/grafana-cloud/agent/flow/tasks/migrate/
+- /docs/grafana-cloud/monitor-infrastructure/agent/flow/tasks/migrate/
+- /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/tasks/migrate/
+- /docs/grafana-cloud/send-data/agent/flow/tasks/migrate/
+canonical: https://grafana.com/docs/agent/latest/flow/tasks/migrate/
+description: How to migrate to Grafana Agent Flow
+menuTitle: Migrate
+title: Migrate to Grafana Agent Flow
+weight: 100
+---
+
+# How to migrate to {{% param "PRODUCT_NAME" %}}
+
+This section details how to migrate to {{< param "PRODUCT_NAME" >}} from other
+common solutions.
+
+{{< section >}}
diff --git a/docs/sources/flow/tasks/migrating-from-operator.md b/docs/sources/flow/tasks/migrate/from-operator.md
similarity index 97%
rename from docs/sources/flow/tasks/migrating-from-operator.md
rename to docs/sources/flow/tasks/migrate/from-operator.md
index 375ffec59e51..1e942a2da941 100644
--- a/docs/sources/flow/tasks/migrating-from-operator.md
+++ b/docs/sources/flow/tasks/migrate/from-operator.md
@@ -1,19 +1,19 @@
 ---
 aliases:
-- /docs/grafana-cloud/monitor-infrastructure/agent/flow/tasks/migrating-from-operator/
-- /docs/grafana-cloud/send-data/agent/flow/tasks/migrating-from-operator/
+- /docs/grafana-cloud/monitor-infrastructure/agent/flow/tasks/migrate/from-operator/
+- /docs/grafana-cloud/send-data/agent/flow/tasks/migrate/from-operator/
 # Previous page aliases for backwards compatibility:
 - /docs/grafana-cloud/monitor-infrastructure/agent/flow/getting-started/migrating-from-operator/
 - /docs/grafana-cloud/send-data/agent/flow/getting-started/migrating-from-operator/
 - ../getting-started/migrating-from-operator/ # /docs/agent/latest/flow/getting-started/migrating-from-operator/
-canonical: https://grafana.com/docs/agent/latest/flow/tasks/migrating-from-operator/
-description: Migrating from Grafana Agent Operator to Grafana Agent Flow
+canonical: https://grafana.com/docs/agent/latest/flow/tasks/migrate/from-operator/
+description: Migrate from Grafana Agent Operator to Grafana Agent Flow
 menuTitle: Migrate from Operator
-title: Migrating from Grafana Agent Operator to Grafana Agent Flow
+title: Migrate from Grafana Agent Operator to Grafana Agent Flow
 weight: 320
 ---
 
-# Migrating from Grafana Agent Operator to {{% param "PRODUCT_NAME" %}}
+# Migrate from Grafana Agent Operator to {{% param "PRODUCT_NAME" %}}
 
 With the release of {{< param "PRODUCT_NAME" >}}, Grafana Agent Operator is no longer the recommended way to deploy {{< param "PRODUCT_ROOT_NAME" >}} in Kubernetes.
 Some of the Operator functionality has moved into {{< param "PRODUCT_NAME" >}} itself, and the Helm Chart has replaced the remaining functionality.
diff --git a/docs/sources/flow/tasks/migrating-from-prometheus.md b/docs/sources/flow/tasks/migrate/from-prometheus.md
similarity index 98%
rename from docs/sources/flow/tasks/migrating-from-prometheus.md
rename to docs/sources/flow/tasks/migrate/from-prometheus.md
index 837ca9da1e07..74a53f2475c5 100644
--- a/docs/sources/flow/tasks/migrating-from-prometheus.md
+++ b/docs/sources/flow/tasks/migrate/from-prometheus.md
@@ -1,16 +1,16 @@
 ---
 aliases:
-- /docs/grafana-cloud/agent/flow/tasks/migrating-from-prometheus/
-- /docs/grafana-cloud/monitor-infrastructure/agent/flow/tasks/migrating-from-prometheus/
-- /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/tasks/migrating-from-prometheus/
-- /docs/grafana-cloud/send-data/agent/flow/tasks/migrating-from-prometheus/
+- /docs/grafana-cloud/agent/flow/tasks/migrate/from-prometheus/
+- /docs/grafana-cloud/monitor-infrastructure/agent/flow/tasks/migrate/from-prometheus/
+- /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/tasks/migrate/from-prometheus/
+- /docs/grafana-cloud/send-data/agent/flow/tasks/migrate/from-prometheus/
 # Previous page aliases for backwards compatibility:
 - /docs/grafana-cloud/agent/flow/getting-started/migrating-from-prometheus/
 - /docs/grafana-cloud/monitor-infrastructure/agent/flow/getting-started/migrating-from-prometheus/
 - /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/getting-started/migrating-from-prometheus/
 - /docs/grafana-cloud/send-data/agent/flow/getting-started/migrating-from-prometheus/
 - ../getting-started/migrating-from-prometheus/ # /docs/agent/latest/flow/getting-started/migrating-from-prometheus/
-canonical: https://grafana.com/docs/agent/latest/flow/tasks/migrating-from-prometheus/
+canonical: https://grafana.com/docs/agent/latest/flow/tasks/migrate/from-prometheus/
 description: Learn how to migrate from Prometheus to Grafana Agent Flow
 menuTitle: Migrate from Prometheus
 title: Migrate from Prometheus to Grafana Agent Flow
diff --git a/docs/sources/flow/tasks/migrating-from-promtail.md b/docs/sources/flow/tasks/migrate/from-promtail.md
similarity index 98%
rename from docs/sources/flow/tasks/migrating-from-promtail.md
rename to docs/sources/flow/tasks/migrate/from-promtail.md
index d38e9b904697..89c863f8758f 100644
--- a/docs/sources/flow/tasks/migrating-from-promtail.md
+++ b/docs/sources/flow/tasks/migrate/from-promtail.md
@@ -1,16 +1,16 @@
 ---
 aliases:
-- /docs/grafana-cloud/agent/flow/tasks/migrating-from-promtail/
-- /docs/grafana-cloud/monitor-infrastructure/agent/flow/tasks/migrating-from-promtail/
-- /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/tasks/migrating-from-promtail/
-- /docs/grafana-cloud/send-data/agent/flow/tasks/migrating-from-promtail/
+- /docs/grafana-cloud/agent/flow/tasks/migrate/from-promtail/
+- /docs/grafana-cloud/monitor-infrastructure/agent/flow/tasks/migrate/from-promtail/
+- /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/tasks/migrate/from-promtail/
+- /docs/grafana-cloud/send-data/agent/flow/tasks/migrate/from-promtail/
 # Previous page aliases for backwards compatibility:
 - /docs/grafana-cloud/agent/flow/getting-started/migrating-from-promtail/
 - /docs/grafana-cloud/monitor-infrastructure/agent/flow/getting-started/migrating-from-promtail/
 - /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/getting-started/migrating-from-promtail/
 - /docs/grafana-cloud/send-data/agent/flow/getting-started/migrating-from-promtail/
 - ../getting-started/migrating-from-promtail/ # /docs/agent/latest/flow/getting-started/migrating-from-promtail/
-canonical: https://grafana.com/docs/agent/latest/flow/tasks/migrating-from-promtail/
+canonical: https://grafana.com/docs/agent/latest/flow/tasks/migrate/from-promtail/
 description: Learn how to migrate from Promtail to Grafana Agent Flow
 menuTitle: Migrate from Promtail
 title: Migrate from Promtail to Grafana Agent Flow
diff --git a/docs/sources/flow/tasks/migrating-from-static.md b/docs/sources/flow/tasks/migrate/from-static.md
similarity index 97%
rename from docs/sources/flow/tasks/migrating-from-static.md
rename to docs/sources/flow/tasks/migrate/from-static.md
index a4033dab096a..bf8532f207d9 100644
--- a/docs/sources/flow/tasks/migrating-from-static.md
+++ b/docs/sources/flow/tasks/migrate/from-static.md
@@ -1,16 +1,16 @@
 ---
 aliases:
-- /docs/grafana-cloud/agent/flow/tasks/migrating-from-static/
-- /docs/grafana-cloud/monitor-infrastructure/agent/flow/tasks/migrating-from-static/
-- /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/tasks/migrating-from-static/
-- /docs/grafana-cloud/send-data/agent/flow/tasks/migrating-from-static/
+- /docs/grafana-cloud/agent/flow/tasks/migrate/from-static/
+- /docs/grafana-cloud/monitor-infrastructure/agent/flow/tasks/migrate/from-static/
+- /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/tasks/migrate/from-static/
+- /docs/grafana-cloud/send-data/agent/flow/tasks/migrate/from-static/
 # Previous page aliases for backwards compatibility:
 - /docs/grafana-cloud/agent/flow/getting-started/migrating-from-static/
 - /docs/grafana-cloud/monitor-infrastructure/agent/flow/getting-started/migrating-from-static/
 - /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/getting-started/migrating-from-static/
 - /docs/grafana-cloud/send-data/agent/flow/getting-started/migrating-from-static/
 - ../getting-started/migrating-from-static/ # /docs/agent/latest/flow/getting-started/migrating-from-static/
-canonical: https://grafana.com/docs/agent/latest/flow/tasks/migrating-from-static/
+canonical: https://grafana.com/docs/agent/latest/flow/tasks/migrate/from-static/
 description: Learn how to migrate your configuration from Grafana Agent Static to Grafana Agent Flow
 menuTitle: Migrate from Static to Flow
 title: Migrate Grafana Agent Static to Grafana Agent Flow
@@ -388,10 +388,10 @@ The following list is specific to the convert command and not {{< param "PRODUCT
 [Agent Management]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/static/configuration/agent-management.md"
 [env]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/reference/stdlib/env.md"
 [env]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/reference/stdlib/env.md"
-[Prometheus Limitations]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/tasks/migrating-from-prometheus.md#limitations"
-[Prometheus Limitations]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/tasks/migrating-from-prometheus.md#limitations"
-[Promtail Limitations]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/tasks/migrating-from-promtail.md#limitations"
-[Promtail Limitations]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/tasks/migrating-from-promtail.md#limitations"
+[Prometheus Limitations]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/tasks/migrate/from-prometheus.md#limitations"
+[Prometheus Limitations]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/tasks/migrate/from-prometheus.md#limitations"
+[Promtail Limitations]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/tasks/migrate/from-promtail.md#limitations"
+[Promtail Limitations]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/tasks/migrate/from-promtail.md#limitations"
 [Metrics]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/static/configuration/metrics-config.md"
 [Metrics]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/static/configuration/metrics-config.md"
 [Logs]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/static/configuration/logs-config.md"

From 0b25b5fdca2526ca4d4341c5484a55085f155ef9 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Marc=20Tudur=C3=AD?= <marctc@protonmail.com>
Date: Fri, 5 Jan 2024 15:40:28 +0100
Subject: [PATCH 08/68] Add `sample_age_limit` to remote_write config to drop
 old samples (#6052)

---
 CHANGELOG.md                                     |  1 +
 component/prometheus/remotewrite/types.go        |  3 +++
 .../prometheusconvert/component/remote_write.go  |  1 +
 .../testdata-v2/integrations_v2.river            |  2 +-
 .../staticconvert/testdata-v2/unsupported.river  |  2 +-
 .../testdata/prom_remote_write.river             | 16 ++++++++--------
 .../staticconvert/testdata/prom_scrape.river     |  3 ++-
 .../staticconvert/testdata/prom_scrape.yaml      |  1 +
 .../staticconvert/testdata/promtail_prom.river   |  2 +-
 .../staticconvert/testdata/sanitize.river        |  2 +-
 .../staticconvert/testdata/unsupported.river     |  4 ++--
 .../components/prometheus.remote_write.md        |  5 +++++
 go.mod                                           | 12 ++++++++++--
 go.sum                                           | 12 ++++++------
 14 files changed, 43 insertions(+), 23 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 4d008e4ab023..47d9a28c0716 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -82,6 +82,7 @@ Main (unreleased)
 
 - Add support for `http_sd_config` within a `scrape_config` for prometheus to flow config conversion. (@erikbaranowski)
 - `discovery.lightsail` now supports additional parameters for configuring HTTP client settings. (@ptodev)
+- Add `sample_age_limit` to remote_write config to drop samples older than a specified duration. (@marctc)
 
 ### Bugfixes
 
diff --git a/component/prometheus/remotewrite/types.go b/component/prometheus/remotewrite/types.go
index 473a2928e246..637059aba416 100644
--- a/component/prometheus/remotewrite/types.go
+++ b/component/prometheus/remotewrite/types.go
@@ -35,6 +35,7 @@ var (
 		MinBackoff:        30 * time.Millisecond,
 		MaxBackoff:        5 * time.Second,
 		RetryOnHTTP429:    true,
+		SampleAgeLimit:    0,
 	}
 
 	DefaultMetadataOptions = MetadataOptions{
@@ -141,6 +142,7 @@ type QueueOptions struct {
 	MinBackoff        time.Duration `river:"min_backoff,attr,optional"`
 	MaxBackoff        time.Duration `river:"max_backoff,attr,optional"`
 	RetryOnHTTP429    bool          `river:"retry_on_http_429,attr,optional"`
+	SampleAgeLimit    time.Duration `river:"sample_age_limit,attr,optional"`
 }
 
 // SetToDefault implements river.Defaulter.
@@ -164,6 +166,7 @@ func (r *QueueOptions) toPrometheusType() config.QueueConfig {
 		MinBackoff:        model.Duration(r.MinBackoff),
 		MaxBackoff:        model.Duration(r.MaxBackoff),
 		RetryOnRateLimit:  r.RetryOnHTTP429,
+		SampleAgeLimit:    model.Duration(r.SampleAgeLimit),
 	}
 }
 
diff --git a/converter/internal/prometheusconvert/component/remote_write.go b/converter/internal/prometheusconvert/component/remote_write.go
index 4756f84d6674..37c4c6814a04 100644
--- a/converter/internal/prometheusconvert/component/remote_write.go
+++ b/converter/internal/prometheusconvert/component/remote_write.go
@@ -96,6 +96,7 @@ func toQueueOptions(queueConfig *prom_config.QueueConfig) *remotewrite.QueueOpti
 		MinBackoff:        time.Duration(queueConfig.MinBackoff),
 		MaxBackoff:        time.Duration(queueConfig.MaxBackoff),
 		RetryOnHTTP429:    queueConfig.RetryOnRateLimit,
+		SampleAgeLimit:    time.Duration(queueConfig.SampleAgeLimit),
 	}
 }
 
diff --git a/converter/internal/staticconvert/testdata-v2/integrations_v2.river b/converter/internal/staticconvert/testdata-v2/integrations_v2.river
index d6306565d9e2..919af1b47286 100644
--- a/converter/internal/staticconvert/testdata-v2/integrations_v2.river
+++ b/converter/internal/staticconvert/testdata-v2/integrations_v2.river
@@ -1,6 +1,6 @@
 prometheus.remote_write "metrics_default" {
 	endpoint {
-		name = "default-8be96f"
+		name = "default-149bbd"
 		url  = "http://localhost:9009/api/prom/push"
 
 		queue_config { }
diff --git a/converter/internal/staticconvert/testdata-v2/unsupported.river b/converter/internal/staticconvert/testdata-v2/unsupported.river
index 0dcdb9ac79a6..c9585a88c5dc 100644
--- a/converter/internal/staticconvert/testdata-v2/unsupported.river
+++ b/converter/internal/staticconvert/testdata-v2/unsupported.river
@@ -1,6 +1,6 @@
 prometheus.remote_write "metrics_default" {
 	endpoint {
-		name = "default-8be96f"
+		name = "default-149bbd"
 		url  = "http://localhost:9009/api/prom/push"
 
 		queue_config { }
diff --git a/converter/internal/staticconvert/testdata/prom_remote_write.river b/converter/internal/staticconvert/testdata/prom_remote_write.river
index bc9edcd50834..2d341fed6a5b 100644
--- a/converter/internal/staticconvert/testdata/prom_remote_write.river
+++ b/converter/internal/staticconvert/testdata/prom_remote_write.river
@@ -1,6 +1,6 @@
 prometheus.remote_write "metrics_test1" {
 	endpoint {
-		name = "test1-8be96f"
+		name = "test1-149bbd"
 		url  = "http://localhost:9009/api/prom/push"
 
 		queue_config { }
@@ -11,7 +11,7 @@ prometheus.remote_write "metrics_test1" {
 
 prometheus.remote_write "metrics_test2" {
 	endpoint {
-		name           = "test2-533083"
+		name           = "test2-c6d55a"
 		url            = "http://localhost:9010/api/prom/push"
 		send_exemplars = false
 
@@ -23,7 +23,7 @@ prometheus.remote_write "metrics_test2" {
 
 prometheus.remote_write "metrics_test3" {
 	endpoint {
-		name = "test3-a3c419"
+		name = "test3-aa96fd"
 		url  = "http://localhost:9011/api/prom/push"
 
 		queue_config { }
@@ -32,7 +32,7 @@ prometheus.remote_write "metrics_test3" {
 	}
 
 	endpoint {
-		name = "test3-41df1c"
+		name = "test3-a93240"
 		url  = "http://localhost:9012/api/prom/push"
 
 		queue_config {
@@ -45,7 +45,7 @@ prometheus.remote_write "metrics_test3" {
 
 prometheus.remote_write "metrics_test4_sigv4_defaults" {
 	endpoint {
-		name = "test4_sigv4_defaults-c42e88"
+		name = "test4_sigv4_defaults-f815bf"
 		url  = "http://localhost:9012/api/prom/push"
 
 		queue_config { }
@@ -58,7 +58,7 @@ prometheus.remote_write "metrics_test4_sigv4_defaults" {
 
 prometheus.remote_write "metrics_test5_sigv4_explicit" {
 	endpoint {
-		name = "test5_sigv4_explicit-050ad5"
+		name = "test5_sigv4_explicit-bc8fca"
 		url  = "http://localhost:9012/api/prom/push"
 
 		queue_config { }
@@ -77,7 +77,7 @@ prometheus.remote_write "metrics_test5_sigv4_explicit" {
 
 prometheus.remote_write "metrics_test6_azuread_defaults" {
 	endpoint {
-		name = "test6_azuread_defaults-fbed02"
+		name = "test6_azuread_defaults-cc4e7e"
 		url  = "http://localhost:9012/api/prom/push"
 
 		queue_config { }
@@ -94,7 +94,7 @@ prometheus.remote_write "metrics_test6_azuread_defaults" {
 
 prometheus.remote_write "metrics_test7_azuread_explicit" {
 	endpoint {
-		name = "test7_azuread_explicit-416842"
+		name = "test7_azuread_explicit-9e1a3e"
 		url  = "http://localhost:9012/api/prom/push"
 
 		queue_config { }
diff --git a/converter/internal/staticconvert/testdata/prom_scrape.river b/converter/internal/staticconvert/testdata/prom_scrape.river
index e73fd76733e3..f0afe395531e 100644
--- a/converter/internal/staticconvert/testdata/prom_scrape.river
+++ b/converter/internal/staticconvert/testdata/prom_scrape.river
@@ -91,7 +91,7 @@ prometheus.relabel "metrics_agent_promobee" {
 
 prometheus.remote_write "metrics_agent" {
 	endpoint {
-		name = "agent-6ea089"
+		name = "agent-36127e"
 		url  = "https://prometheus-us-central1.grafana.net/api/prom/push"
 
 		basic_auth {
@@ -103,6 +103,7 @@ prometheus.remote_write "metrics_agent" {
 			max_shards          = 10
 			batch_send_deadline = "3m0s"
 			max_backoff         = "10s"
+			sample_age_limit    = "50s"
 		}
 
 		metadata_config { }
diff --git a/converter/internal/staticconvert/testdata/prom_scrape.yaml b/converter/internal/staticconvert/testdata/prom_scrape.yaml
index b81e865ef5d0..afffa13a2054 100644
--- a/converter/internal/staticconvert/testdata/prom_scrape.yaml
+++ b/converter/internal/staticconvert/testdata/prom_scrape.yaml
@@ -19,6 +19,7 @@ metrics:
         batch_send_deadline: 3m
         max_shards: 10
         max_backoff: 10s
+        sample_age_limit: 50s
       basic_auth:
         username: 11111
         password: my-secret-password-here
diff --git a/converter/internal/staticconvert/testdata/promtail_prom.river b/converter/internal/staticconvert/testdata/promtail_prom.river
index e31469f5267b..1744d37aee5c 100644
--- a/converter/internal/staticconvert/testdata/promtail_prom.river
+++ b/converter/internal/staticconvert/testdata/promtail_prom.river
@@ -18,7 +18,7 @@ prometheus.scrape "metrics_name_jobName" {
 
 prometheus.remote_write "metrics_name" {
 	endpoint {
-		name = "name-8be96f"
+		name = "name-149bbd"
 		url  = "http://localhost:9009/api/prom/push"
 
 		queue_config { }
diff --git a/converter/internal/staticconvert/testdata/sanitize.river b/converter/internal/staticconvert/testdata/sanitize.river
index 1bf214eda874..eaacf45291b6 100644
--- a/converter/internal/staticconvert/testdata/sanitize.river
+++ b/converter/internal/staticconvert/testdata/sanitize.river
@@ -1,6 +1,6 @@
 prometheus.remote_write "metrics_integrations" {
 	endpoint {
-		name = "integrations-717d0f"
+		name = "integrations-ce3432"
 		url  = "https://region.grafana.net/api/prom/push"
 
 		basic_auth {
diff --git a/converter/internal/staticconvert/testdata/unsupported.river b/converter/internal/staticconvert/testdata/unsupported.river
index 8c0909bb6c7f..76923a6c7f06 100644
--- a/converter/internal/staticconvert/testdata/unsupported.river
+++ b/converter/internal/staticconvert/testdata/unsupported.river
@@ -8,7 +8,7 @@ prometheus.scrape "metrics_agent_prometheus" {
 
 prometheus.remote_write "metrics_agent" {
 	endpoint {
-		name = "agent-d885f6"
+		name = "agent-eea444"
 		url  = "https://prometheus-us-central1.grafana.net/api/prom/push"
 
 		queue_config { }
@@ -41,7 +41,7 @@ prometheus.scrape "integrations_statsd_exporter" {
 
 prometheus.remote_write "integrations" {
 	endpoint {
-		name = "agent-d885f6"
+		name = "agent-eea444"
 		url  = "https://prometheus-us-central1.grafana.net/api/prom/push"
 
 		queue_config { }
diff --git a/docs/sources/flow/reference/components/prometheus.remote_write.md b/docs/sources/flow/reference/components/prometheus.remote_write.md
index 6348b7b9c3ff..f869343e0919 100644
--- a/docs/sources/flow/reference/components/prometheus.remote_write.md
+++ b/docs/sources/flow/reference/components/prometheus.remote_write.md
@@ -165,6 +165,7 @@ Name | Type | Description | Default | Required
 `min_backoff` | `duration` | Initial retry delay. The backoff time gets doubled for each retry. | `"30ms"` | no
 `max_backoff` | `duration` | Maximum retry delay. | `"5s"` | no
 `retry_on_http_429` | `bool` | Retry when an HTTP 429 status code is received. | `true` | no
+`sample_age_limit` | `duration` | Maximum age of samples to send. | `"0s"` | no
 
 Each queue then manages a number of concurrent _shards_ which is responsible
 for sending a fraction of data to their respective endpoints. The number of
@@ -191,6 +192,10 @@ responses should be treated as recoverable errors; other `HTTP 4xx` status code
 responses are never considered recoverable errors. When `retry_on_http_429` is
 enabled, `Retry-After` response headers from the servers are honored.
 
+The `sample_age_limit` argument specifies the maximum age of samples to send. Any
+samples older than the limit are dropped and won't be sent to the remote storage.
+The default value is `0s`, which means that all samples are sent (feature is disabled).
+
 ### metadata_config block
 
 Name | Type | Description | Default | Required
diff --git a/go.mod b/go.mod
index f8d9059376ab..852050ec69a0 100644
--- a/go.mod
+++ b/go.mod
@@ -142,7 +142,7 @@ require (
 	github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring v0.66.0
 	github.com/prometheus-operator/prometheus-operator/pkg/client v0.66.0
 	github.com/prometheus/blackbox_exporter v0.24.1-0.20230623125439-bd22efa1c900
-	github.com/prometheus/client_golang v1.17.0
+	github.com/prometheus/client_golang v1.18.0
 	github.com/prometheus/client_model v0.5.0
 	github.com/prometheus/common v0.45.0
 	github.com/prometheus/consul_exporter v0.8.0
@@ -216,7 +216,7 @@ require (
 	golang.org/x/exp v0.0.0-20231110203233-9a3e6036ecaa
 	golang.org/x/net v0.18.0
 	golang.org/x/oauth2 v0.13.0
-	golang.org/x/sys v0.14.1-0.20231108175955-e4099bfacb8c
+	golang.org/x/sys v0.15.0
 	golang.org/x/text v0.14.0
 	golang.org/x/time v0.3.0
 	google.golang.org/api v0.147.0
@@ -677,6 +677,14 @@ replace (
 	k8s.io/klog/v2 => github.com/simonpasquier/klog-gokit/v3 v3.3.0
 )
 
+// TODO(marctc): remove replace directive once:
+//
+// * There is a release of Prometheus which contains
+// prometheus/prometheus#13002
+// We use the last v1-related tag as the replace statement does not work for v2
+// tags without the v2 suffix to the module root.
+replace github.com/prometheus/prometheus => github.com/grafana/prometheus v1.8.2-0.20240105105355-3e2c486167d2 // grafana/prometheus@drop-old-inmemory-samples-squashed-2
+
 replace gopkg.in/yaml.v2 => github.com/rfratto/go-yaml v0.0.0-20211119180816-77389c3526dc
 
 // Replace directives from Loki
diff --git a/go.sum b/go.sum
index d966bfea9876..410e895a31bd 100644
--- a/go.sum
+++ b/go.sum
@@ -1080,6 +1080,8 @@ github.com/grafana/opentelemetry-collector/service v0.0.0-20231018134914-c0109e0
 github.com/grafana/opentelemetry-collector/service v0.0.0-20231018134914-c0109e052230/go.mod h1:kBdpzrqR2wJkOdg50yzp4dv+2XBMyeqTgF4lCx0hSpQ=
 github.com/grafana/postgres_exporter v0.8.1-0.20210722175051-db35d7c2f520 h1:HnFWqxhoSF3WC7sKAdMZ+SRXvHLVZlZ3sbQjuUlTqkw=
 github.com/grafana/postgres_exporter v0.8.1-0.20210722175051-db35d7c2f520/go.mod h1:+HPXgiOV0InDHcZ2jNijL1SOKvo0eEPege5fQA0+ICI=
+github.com/grafana/prometheus v1.8.2-0.20240105105355-3e2c486167d2 h1:eJD8U9G91ID/pKsLjJnjqve8yv1NiE/l6dGYnwchPVM=
+github.com/grafana/prometheus v1.8.2-0.20240105105355-3e2c486167d2/go.mod h1:SRw624aMAxTfryAcP8rOjg4S/sHHaetx2lyJJ2nM83g=
 github.com/grafana/pyroscope-go/godeltaprof v0.1.3 h1:eunWpv1B3Z7ZK9o4499EmQGlY+CsDmSZ4FbxjRx37uk=
 github.com/grafana/pyroscope-go/godeltaprof v0.1.3/go.mod h1:1HSPtjU8vLG0jE9JrTdzjgFqdJ/VgN7fvxBNq3luJko=
 github.com/grafana/pyroscope/api v0.2.0 h1:TzOxL0s6SiaLEy944ZAKgHcx/JDRJXu4O8ObwkqR6p4=
@@ -1957,8 +1959,8 @@ github.com/prometheus/client_golang v1.11.1/go.mod h1:Z6t4BnS23TR94PD6BsDNk8yVqr
 github.com/prometheus/client_golang v1.12.1/go.mod h1:3Z9XVyYiZYEO+YQWt3RD2R3jrbd179Rt297l4aS6nDY=
 github.com/prometheus/client_golang v1.12.2/go.mod h1:3Z9XVyYiZYEO+YQWt3RD2R3jrbd179Rt297l4aS6nDY=
 github.com/prometheus/client_golang v1.13.0/go.mod h1:vTeo+zgvILHsnnj/39Ou/1fPN5nJFOEMgftOUOmlvYQ=
-github.com/prometheus/client_golang v1.17.0 h1:rl2sfwZMtSthVU752MqfjQozy7blglC+1SOtjMAMh+Q=
-github.com/prometheus/client_golang v1.17.0/go.mod h1:VeL+gMmOAxkS2IqfCq0ZmHSL+LjWfWDUmp1mBz9JgUY=
+github.com/prometheus/client_golang v1.18.0 h1:HzFfmkOzH5Q8L8G+kSJKUx5dtG87sewO+FoDDqP5Tbk=
+github.com/prometheus/client_golang v1.18.0/go.mod h1:T+GXkCk5wSJyOqMIzVgvvjFDlkOQntgjkJWKrN5txjA=
 github.com/prometheus/client_model v0.0.0-20171117100541-99fa1f4be8e5/go.mod h1:MbSGuTsp3dbXC40dX6PRTWyKYBIrTGTE9sqQNg2J8bo=
 github.com/prometheus/client_model v0.0.0-20180712105110-5c3871d89910/go.mod h1:MbSGuTsp3dbXC40dX6PRTWyKYBIrTGTE9sqQNg2J8bo=
 github.com/prometheus/client_model v0.0.0-20190115171406-56726106282f/go.mod h1:MbSGuTsp3dbXC40dX6PRTWyKYBIrTGTE9sqQNg2J8bo=
@@ -2010,8 +2012,6 @@ github.com/prometheus/procfs v0.7.3/go.mod h1:cz+aTbrPOrUb4q7XlbU9ygM+/jj0fzG6c1
 github.com/prometheus/procfs v0.8.0/go.mod h1:z7EfXMXOkbkqb9IINtpCn86r/to3BnA0uaxHdg830/4=
 github.com/prometheus/procfs v0.12.0 h1:jluTpSng7V9hY0O2R9DzzJHYb2xULk9VTR1V1R/k6Bo=
 github.com/prometheus/procfs v0.12.0/go.mod h1:pcuDEFsWDnvcgNzo4EEweacyhjeA9Zk3cnaOZAZEfOo=
-github.com/prometheus/prometheus v0.48.1 h1:CTszphSNTXkuCG6O0IfpKdHcJkvvnAAE1GbELKS+NFk=
-github.com/prometheus/prometheus v0.48.1/go.mod h1:SRw624aMAxTfryAcP8rOjg4S/sHHaetx2lyJJ2nM83g=
 github.com/prometheus/snmp_exporter v0.24.1 h1:AihTbJHurMo8bjtjJde8U+4gMEvpvYvT21Xbd4SzJgY=
 github.com/prometheus/snmp_exporter v0.24.1/go.mod h1:j6uIGkdR0DXvKn7HJtSkeDj//UY0sWmdd6XhvdBjln0=
 github.com/prometheus/statsd_exporter v0.22.7/go.mod h1:N/TevpjkIh9ccs6nuzY3jQn9dFqnUakOjnEuMPJJJnI=
@@ -2807,8 +2807,8 @@ golang.org/x/sys v0.9.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.10.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.11.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.12.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.14.1-0.20231108175955-e4099bfacb8c h1:3kC/TjQ+xzIblQv39bCOyRk8fbEeJcDHwbyxPUU2BpA=
-golang.org/x/sys v0.14.1-0.20231108175955-e4099bfacb8c/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
+golang.org/x/sys v0.15.0 h1:h48lPFYpsTvQJZF4EKyI4aLHaev3CxivZmv7yZig9pc=
+golang.org/x/sys v0.15.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
 golang.org/x/term v0.0.0-20201117132131-f5c789dd3221/go.mod h1:Nr5EML6q2oocZ2LXRh80K7BxOlk5/8JxuGnuhpl+muw=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210220032956-6a3ed077a48d/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=

From c246cf896ce497d2821b4e18116e5b1493d3b199 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Marc=20Tudur=C3=AD?= <marctc@protonmail.com>
Date: Fri, 5 Jan 2024 16:22:02 +0100
Subject: [PATCH 09/68] Update version to v0.39.0-rc.0 (#6053)

---
 CHANGELOG.md                                | 3 +++
 docs/sources/_index.md                      | 2 +-
 pkg/operator/defaults.go                    | 2 +-
 tools/gen-versioned-files/agent-version.txt | 2 +-
 4 files changed, 6 insertions(+), 3 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 47d9a28c0716..f72d18c9f49f 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -10,6 +10,9 @@ internal API changes are not present.
 Main (unreleased)
 -----------------
 
+v0.39.0-rc.0 (2024-01-05)
+-------------------------
+
 ### Breaking changes
 
 - `otelcol.receiver.prometheus` will drop all `otel_scope_info` metrics when converting them to OTLP. (@wildum)
diff --git a/docs/sources/_index.md b/docs/sources/_index.md
index e12c414c491e..1a7a2a261874 100644
--- a/docs/sources/_index.md
+++ b/docs/sources/_index.md
@@ -9,7 +9,7 @@ title: Grafana Agent
 description: Grafana Agent is a flexible, performant, vendor-neutral, telemetry collector
 weight: 350
 cascade:
-  AGENT_RELEASE: v0.38.1
+  AGENT_RELEASE: v0.39.0-rc.0
   OTEL_VERSION: v0.87.0
 ---
 
diff --git a/pkg/operator/defaults.go b/pkg/operator/defaults.go
index b66cfb52289b..a518d884b0b1 100644
--- a/pkg/operator/defaults.go
+++ b/pkg/operator/defaults.go
@@ -2,7 +2,7 @@ package operator
 
 // Supported versions of the Grafana Agent.
 var (
-	DefaultAgentVersion   = "v0.38.1"
+	DefaultAgentVersion   = "v0.39.0-rc.0"
 	DefaultAgentBaseImage = "grafana/agent"
 	DefaultAgentImage     = DefaultAgentBaseImage + ":" + DefaultAgentVersion
 )
diff --git a/tools/gen-versioned-files/agent-version.txt b/tools/gen-versioned-files/agent-version.txt
index b4a466a81031..f02ec0731bfa 100644
--- a/tools/gen-versioned-files/agent-version.txt
+++ b/tools/gen-versioned-files/agent-version.txt
@@ -1 +1 @@
-v0.38.1
+v0.39.0-rc.0

From c467eff70e899833e5cebe64299c34e5af303bde Mon Sep 17 00:00:00 2001
From: Christophe van de Kerchove <zopanix@gmail.com>
Date: Fri, 5 Jan 2024 11:07:42 -0500
Subject: [PATCH 10/68] feat: Allow user to add service account labels (#6022)

This can be useful to use OIDC required labels for grafana-agent to
authenticate to services.

For example, Azure Workload Identity requires a labels to set additional
labels on the service account for it to function properly.

Co-authored-by: christophe.vandekerchove <christophe.vandekerchove@scalepad.com>
---
 .../helm/charts/grafana-agent/CHANGELOG.md    |   2 +
 .../helm/charts/grafana-agent/README.md       |   1 +
 ...dditional-serviceaccount-label-values.yaml |   3 +
 .../templates/serviceaccount.yaml             |   3 +
 .../helm/charts/grafana-agent/values.yaml     |   2 +
 .../grafana-agent/templates/configmap.yaml    |  42 +++++++
 .../templates/controllers/daemonset.yaml      |  73 +++++++++++
 .../grafana-agent/templates/rbac.yaml         | 117 ++++++++++++++++++
 .../grafana-agent/templates/service.yaml      |  22 ++++
 .../templates/serviceaccount.yaml             |  13 ++
 10 files changed, 278 insertions(+)
 create mode 100644 operations/helm/charts/grafana-agent/ci/additional-serviceaccount-label-values.yaml
 create mode 100644 operations/helm/tests/additional-serviceaccount-label/grafana-agent/templates/configmap.yaml
 create mode 100644 operations/helm/tests/additional-serviceaccount-label/grafana-agent/templates/controllers/daemonset.yaml
 create mode 100644 operations/helm/tests/additional-serviceaccount-label/grafana-agent/templates/rbac.yaml
 create mode 100644 operations/helm/tests/additional-serviceaccount-label/grafana-agent/templates/service.yaml
 create mode 100644 operations/helm/tests/additional-serviceaccount-label/grafana-agent/templates/serviceaccount.yaml

diff --git a/operations/helm/charts/grafana-agent/CHANGELOG.md b/operations/helm/charts/grafana-agent/CHANGELOG.md
index d14525031740..8752c007df6f 100644
--- a/operations/helm/charts/grafana-agent/CHANGELOG.md
+++ b/operations/helm/charts/grafana-agent/CHANGELOG.md
@@ -14,6 +14,8 @@ Unreleased
 
 - Update `rbac` to include necessary rules for the `otelcol.processor.k8sattributes` component. (@rlankfo)
 
+- Add `serviceAccount.additionalLabels` to values.yaml to enable setting additional labels on the created service account. (@zopanix)
+
 ### Bugfixes
 
 - Statefulset should use value `.controller.enableStatefulSetAutoDeletePVC` instead of just `.enableStatefulSetAutoDeletePVC`. (@captncraig)
diff --git a/operations/helm/charts/grafana-agent/README.md b/operations/helm/charts/grafana-agent/README.md
index 1839e56ed202..76aea9536d92 100644
--- a/operations/helm/charts/grafana-agent/README.md
+++ b/operations/helm/charts/grafana-agent/README.md
@@ -118,6 +118,7 @@ use the older mode (called "static mode"), set the `agent.mode` value to
 | service.clusterIP | string | `""` | Cluster IP, can be set to None, empty "" or an IP address |
 | service.enabled | bool | `true` | Creates a Service for the controller's pods. |
 | service.type | string | `"ClusterIP"` | Service type |
+| serviceAccount.additionalLabels | object | `{}` | Additional labels to add to the created service account. |
 | serviceAccount.annotations | object | `{}` | Annotations to add to the created service account. |
 | serviceAccount.create | bool | `true` | Whether to create a service account for the Grafana Agent deployment. |
 | serviceAccount.name | string | `nil` | The name of the existing service account to use when serviceAccount.create is false. |
diff --git a/operations/helm/charts/grafana-agent/ci/additional-serviceaccount-label-values.yaml b/operations/helm/charts/grafana-agent/ci/additional-serviceaccount-label-values.yaml
new file mode 100644
index 000000000000..91b7cbb7c258
--- /dev/null
+++ b/operations/helm/charts/grafana-agent/ci/additional-serviceaccount-label-values.yaml
@@ -0,0 +1,3 @@
+serviceAccount:
+  additionalLabels:
+    test: "true"
diff --git a/operations/helm/charts/grafana-agent/templates/serviceaccount.yaml b/operations/helm/charts/grafana-agent/templates/serviceaccount.yaml
index 8f4c8477a7d5..766201635e77 100644
--- a/operations/helm/charts/grafana-agent/templates/serviceaccount.yaml
+++ b/operations/helm/charts/grafana-agent/templates/serviceaccount.yaml
@@ -5,6 +5,9 @@ metadata:
   name: {{ include "grafana-agent.serviceAccountName" . }}
   labels:
     {{- include "grafana-agent.labels" . | nindent 4 }}
+    {{- with .Values.serviceAccount.additionalLabels }}
+    {{- toYaml . | nindent 4 }}
+    {{- end }}
   {{- with .Values.serviceAccount.annotations }}
   annotations:
     {{- toYaml . | nindent 4 }}
diff --git a/operations/helm/charts/grafana-agent/values.yaml b/operations/helm/charts/grafana-agent/values.yaml
index 7b80e68618e6..dd94b3b09118 100644
--- a/operations/helm/charts/grafana-agent/values.yaml
+++ b/operations/helm/charts/grafana-agent/values.yaml
@@ -115,6 +115,8 @@ rbac:
 serviceAccount:
   # -- Whether to create a service account for the Grafana Agent deployment.
   create: true
+  # -- Additional labels to add to the created service account.
+  additionalLabels: {}
   # -- Annotations to add to the created service account.
   annotations: {}
   # -- The name of the existing service account to use when
diff --git a/operations/helm/tests/additional-serviceaccount-label/grafana-agent/templates/configmap.yaml b/operations/helm/tests/additional-serviceaccount-label/grafana-agent/templates/configmap.yaml
new file mode 100644
index 000000000000..2fdc6f011777
--- /dev/null
+++ b/operations/helm/tests/additional-serviceaccount-label/grafana-agent/templates/configmap.yaml
@@ -0,0 +1,42 @@
+---
+# Source: grafana-agent/templates/configmap.yaml
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: grafana-agent
+  labels:
+    helm.sh/chart: grafana-agent
+    app.kubernetes.io/name: grafana-agent
+    app.kubernetes.io/instance: grafana-agent
+    app.kubernetes.io/version: "vX.Y.Z"
+    app.kubernetes.io/managed-by: Helm
+data:
+  config.river: |-
+    logging {
+    	level  = "info"
+    	format = "logfmt"
+    }
+    
+    discovery.kubernetes "pods" {
+    	role = "pod"
+    }
+    
+    discovery.kubernetes "nodes" {
+    	role = "node"
+    }
+    
+    discovery.kubernetes "services" {
+    	role = "service"
+    }
+    
+    discovery.kubernetes "endpoints" {
+    	role = "endpoints"
+    }
+    
+    discovery.kubernetes "endpointslices" {
+    	role = "endpointslice"
+    }
+    
+    discovery.kubernetes "ingresses" {
+    	role = "ingress"
+    }
diff --git a/operations/helm/tests/additional-serviceaccount-label/grafana-agent/templates/controllers/daemonset.yaml b/operations/helm/tests/additional-serviceaccount-label/grafana-agent/templates/controllers/daemonset.yaml
new file mode 100644
index 000000000000..7ac89ceb865a
--- /dev/null
+++ b/operations/helm/tests/additional-serviceaccount-label/grafana-agent/templates/controllers/daemonset.yaml
@@ -0,0 +1,73 @@
+---
+# Source: grafana-agent/templates/controllers/daemonset.yaml
+apiVersion: apps/v1
+kind: DaemonSet
+metadata:
+  name: grafana-agent
+  labels:
+    helm.sh/chart: grafana-agent
+    app.kubernetes.io/name: grafana-agent
+    app.kubernetes.io/instance: grafana-agent
+    app.kubernetes.io/version: "vX.Y.Z"
+    app.kubernetes.io/managed-by: Helm
+spec:
+  minReadySeconds: 10
+  selector:
+    matchLabels:
+      app.kubernetes.io/name: grafana-agent
+      app.kubernetes.io/instance: grafana-agent
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/name: grafana-agent
+        app.kubernetes.io/instance: grafana-agent
+    spec:
+      serviceAccountName: grafana-agent
+      containers:
+        - name: grafana-agent
+          image: docker.io/grafana/agent:v0.38.1
+          imagePullPolicy: IfNotPresent
+          args:
+            - run
+            - /etc/agent/config.river
+            - --storage.path=/tmp/agent
+            - --server.http.listen-addr=0.0.0.0:80
+            - --server.http.ui-path-prefix=/
+          env:
+            - name: AGENT_MODE
+              value: flow
+            - name: AGENT_DEPLOY_MODE
+              value: "helm"
+            - name: HOSTNAME
+              valueFrom:
+                fieldRef:
+                  fieldPath: spec.nodeName
+          ports:
+            - containerPort: 80
+              name: http-metrics
+          readinessProbe:
+            httpGet:
+              path: /-/ready
+              port: 80
+            initialDelaySeconds: 10
+            timeoutSeconds: 1
+          volumeMounts:
+            - name: config
+              mountPath: /etc/agent
+        - name: config-reloader
+          image: docker.io/jimmidyson/configmap-reload:v0.8.0
+          args:
+            - --volume-dir=/etc/agent
+            - --webhook-url=http://localhost:80/-/reload
+          volumeMounts:
+            - name: config
+              mountPath: /etc/agent
+          resources:
+            requests:
+              cpu: 1m
+              memory: 5Mi
+      dnsPolicy: ClusterFirst
+      volumes:
+        - name: config
+          configMap:
+            name: grafana-agent
diff --git a/operations/helm/tests/additional-serviceaccount-label/grafana-agent/templates/rbac.yaml b/operations/helm/tests/additional-serviceaccount-label/grafana-agent/templates/rbac.yaml
new file mode 100644
index 000000000000..3765583fb64f
--- /dev/null
+++ b/operations/helm/tests/additional-serviceaccount-label/grafana-agent/templates/rbac.yaml
@@ -0,0 +1,117 @@
+---
+# Source: grafana-agent/templates/rbac.yaml
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: grafana-agent
+  labels:
+    helm.sh/chart: grafana-agent
+    app.kubernetes.io/name: grafana-agent
+    app.kubernetes.io/instance: grafana-agent
+    app.kubernetes.io/version: "vX.Y.Z"
+    app.kubernetes.io/managed-by: Helm
+rules:
+  # Rules which allow discovery.kubernetes to function.
+  - apiGroups:
+      - ""
+      - "discovery.k8s.io"
+      - "networking.k8s.io"
+    resources:
+      - endpoints
+      - endpointslices
+      - ingresses
+      - nodes
+      - nodes/proxy
+      - nodes/metrics
+      - pods
+      - services
+    verbs:
+      - get
+      - list
+      - watch
+  # Rules which allow loki.source.kubernetes and loki.source.podlogs to work.
+  - apiGroups:
+      - ""
+    resources:
+      - pods
+      - pods/log
+      - namespaces
+    verbs:
+      - get
+      - list
+      - watch
+  - apiGroups:
+      - "monitoring.grafana.com"
+    resources:
+      - podlogs
+    verbs:
+      - get
+      - list
+      - watch
+  # Rules which allow mimir.rules.kubernetes to work.
+  - apiGroups: ["monitoring.coreos.com"]
+    resources:
+      - prometheusrules
+    verbs:
+      - get
+      - list
+      - watch
+  - nonResourceURLs:
+      - /metrics
+    verbs:
+      - get
+  # Rules for prometheus.kubernetes.*
+  - apiGroups: ["monitoring.coreos.com"]
+    resources:
+      - podmonitors
+      - servicemonitors
+      - probes
+    verbs:
+      - get
+      - list
+      - watch
+  # Rules which allow eventhandler to work.
+  - apiGroups:
+      - ""
+    resources:
+      - events
+    verbs:
+      - get
+      - list
+      - watch
+  # needed for remote.kubernetes.*
+  - apiGroups: [""]
+    resources:
+      - "configmaps"
+      - "secrets"
+    verbs:
+      - get
+      - list
+      - watch
+  # needed for otelcol.processor.k8sattributes
+  - apiGroups: ["apps"]
+    resources: ["replicasets"]
+    verbs: ["get", "list", "watch"]
+  - apiGroups: ["extensions"]
+    resources: ["replicasets"]
+    verbs: ["get", "list", "watch"]
+---
+# Source: grafana-agent/templates/rbac.yaml
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: grafana-agent
+  labels:
+    helm.sh/chart: grafana-agent
+    app.kubernetes.io/name: grafana-agent
+    app.kubernetes.io/instance: grafana-agent
+    app.kubernetes.io/version: "vX.Y.Z"
+    app.kubernetes.io/managed-by: Helm
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: grafana-agent
+subjects:
+  - kind: ServiceAccount
+    name: grafana-agent
+    namespace: default
diff --git a/operations/helm/tests/additional-serviceaccount-label/grafana-agent/templates/service.yaml b/operations/helm/tests/additional-serviceaccount-label/grafana-agent/templates/service.yaml
new file mode 100644
index 000000000000..04f6eeff3c4d
--- /dev/null
+++ b/operations/helm/tests/additional-serviceaccount-label/grafana-agent/templates/service.yaml
@@ -0,0 +1,22 @@
+---
+# Source: grafana-agent/templates/service.yaml
+apiVersion: v1
+kind: Service
+metadata:
+  name: grafana-agent
+  labels:
+    helm.sh/chart: grafana-agent
+    app.kubernetes.io/name: grafana-agent
+    app.kubernetes.io/instance: grafana-agent
+    app.kubernetes.io/version: "vX.Y.Z"
+    app.kubernetes.io/managed-by: Helm
+spec:
+  type: ClusterIP
+  selector:
+    app.kubernetes.io/name: grafana-agent
+    app.kubernetes.io/instance: grafana-agent
+  ports:
+    - name: http-metrics
+      port: 80
+      targetPort: 80
+      protocol: "TCP"
diff --git a/operations/helm/tests/additional-serviceaccount-label/grafana-agent/templates/serviceaccount.yaml b/operations/helm/tests/additional-serviceaccount-label/grafana-agent/templates/serviceaccount.yaml
new file mode 100644
index 000000000000..ba80344cee51
--- /dev/null
+++ b/operations/helm/tests/additional-serviceaccount-label/grafana-agent/templates/serviceaccount.yaml
@@ -0,0 +1,13 @@
+---
+# Source: grafana-agent/templates/serviceaccount.yaml
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: grafana-agent
+  labels:
+    helm.sh/chart: grafana-agent
+    app.kubernetes.io/name: grafana-agent
+    app.kubernetes.io/instance: grafana-agent
+    app.kubernetes.io/version: "vX.Y.Z"
+    app.kubernetes.io/managed-by: Helm
+    test: "true"

From cbdfc8733c24405c3e5edaba63ab19f456d3b4a4 Mon Sep 17 00:00:00 2001
From: Craig Peterson <192540+captncraig@users.noreply.github.com>
Date: Fri, 5 Jan 2024 12:10:25 -0500
Subject: [PATCH 11/68] create new helm release 0.30.0 (#6057)

* create new helm release

* gen
---
 operations/helm/charts/grafana-agent/CHANGELOG.md | 3 +++
 operations/helm/charts/grafana-agent/Chart.yaml   | 2 +-
 operations/helm/charts/grafana-agent/README.md    | 2 +-
 3 files changed, 5 insertions(+), 2 deletions(-)

diff --git a/operations/helm/charts/grafana-agent/CHANGELOG.md b/operations/helm/charts/grafana-agent/CHANGELOG.md
index 8752c007df6f..6603ab6fb063 100644
--- a/operations/helm/charts/grafana-agent/CHANGELOG.md
+++ b/operations/helm/charts/grafana-agent/CHANGELOG.md
@@ -10,6 +10,9 @@ internal API changes are not present.
 Unreleased
 ----------
 
+0.30.0 (2024-01-05)
+-------------------
+
 ### Enhancements
 
 - Update `rbac` to include necessary rules for the `otelcol.processor.k8sattributes` component. (@rlankfo)
diff --git a/operations/helm/charts/grafana-agent/Chart.yaml b/operations/helm/charts/grafana-agent/Chart.yaml
index 78630fed515d..45ab45dd8ba2 100644
--- a/operations/helm/charts/grafana-agent/Chart.yaml
+++ b/operations/helm/charts/grafana-agent/Chart.yaml
@@ -2,7 +2,7 @@ apiVersion: v2
 name: grafana-agent
 description: 'Grafana Agent'
 type: application
-version: 0.29.0
+version: 0.30.0
 appVersion: 'v0.38.1'
 
 dependencies:
diff --git a/operations/helm/charts/grafana-agent/README.md b/operations/helm/charts/grafana-agent/README.md
index 76aea9536d92..98e4219d36b5 100644
--- a/operations/helm/charts/grafana-agent/README.md
+++ b/operations/helm/charts/grafana-agent/README.md
@@ -1,6 +1,6 @@
 # Grafana Agent Helm chart
 
-![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![Version: 0.29.0](https://img.shields.io/badge/Version-0.29.0-informational?style=flat-square) ![AppVersion: v0.38.1](https://img.shields.io/badge/AppVersion-v0.38.1-informational?style=flat-square)
+![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![Version: 0.30.0](https://img.shields.io/badge/Version-0.30.0-informational?style=flat-square) ![AppVersion: v0.38.1](https://img.shields.io/badge/AppVersion-v0.38.1-informational?style=flat-square)
 
 Helm chart for deploying [Grafana Agent][] to Kubernetes.
 

From c30cae4b6b9ed81d2f916007793ead7a771e8393 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=C4=90=E1=BB=97=20Tr=E1=BB=8Dng=20H=E1=BA=A3i?=
 <41283691+hainenber@users.noreply.github.com>
Date: Mon, 8 Jan 2024 16:51:32 +0700
Subject: [PATCH 12/68] chore(sec): fix vulns by bumping pkgs to patched ver
 (#6060)

* chore(sec): fix vulns by bumping pkgs to patched ver

Signed-off-by: hainenber <dotronghai96@gmail.com>

* chore(doc): add CHANGELOG entry

Signed-off-by: hainenber <dotronghai96@gmail.com>

* fix(ci): accomodate func signature change

Signed-off-by: hainenber <dotronghai96@gmail.com>

---------

Signed-off-by: hainenber <dotronghai96@gmail.com>
---
 CHANGELOG.md                           |   6 +
 go.mod                                 |  86 ++++-----
 go.sum                                 | 232 ++++++++++++-------------
 pkg/integrations/mssql/sql_exporter.go |   4 +
 4 files changed, 165 insertions(+), 163 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index f72d18c9f49f..4496cb325474 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -10,6 +10,12 @@ internal API changes are not present.
 Main (unreleased)
 -----------------
 
+### Security fixes
+- Fixes following vulnerabilities (@hainenber)
+  - [GO-2023-2409](https://github.com/advisories/GHSA-mhpq-9638-x6pw)
+  - [GO-2023-2412](https://github.com/advisories/GHSA-7ww5-4wqc-m92c)
+  - [CVE-2023-49568](https://github.com/advisories/GHSA-mw99-9chc-xw7r)
+
 v0.39.0-rc.0 (2024-01-05)
 -------------------------
 
diff --git a/go.mod b/go.mod
index 852050ec69a0..071002b5e7c3 100644
--- a/go.mod
+++ b/go.mod
@@ -14,13 +14,13 @@ require (
 	github.com/alecthomas/kingpin/v2 v2.4.0
 	github.com/alecthomas/units v0.0.0-20211218093645-b94a6e3cc137
 	github.com/aws/aws-sdk-go v1.45.25
-	github.com/aws/aws-sdk-go-v2 v1.21.1
-	github.com/aws/aws-sdk-go-v2/config v1.18.44
+	github.com/aws/aws-sdk-go-v2 v1.24.0
+	github.com/aws/aws-sdk-go-v2/config v1.26.2
 	github.com/aws/aws-sdk-go-v2/service/s3 v1.34.1
 	github.com/bmatcuk/doublestar v1.3.4
 	github.com/bufbuild/connect-go v1.10.0
 	github.com/buger/jsonparser v1.1.1
-	github.com/burningalchemist/sql_exporter v0.0.0-20221222155641-2ff59aa75200
+	github.com/burningalchemist/sql_exporter v0.0.0-20240103092044-466b38b6abc4
 	github.com/cespare/xxhash/v2 v2.2.0
 	github.com/cilium/ebpf v0.12.3 // indirect
 	github.com/coreos/go-systemd v0.0.0-20191104093116-d3cd4ed1dbcf
@@ -34,10 +34,10 @@ require (
 	github.com/fortytw2/leaktest v1.3.0
 	github.com/fsnotify/fsnotify v1.6.0
 	github.com/github/smimesign v0.2.0
-	github.com/go-git/go-git/v5 v5.4.2
+	github.com/go-git/go-git/v5 v5.11.0
 	github.com/go-kit/log v0.2.1
 	github.com/go-logfmt/logfmt v0.6.0
-	github.com/go-logr/logr v1.3.0
+	github.com/go-logr/logr v1.4.1
 	github.com/go-sourcemap/sourcemap v2.1.3+incompatible
 	github.com/go-sql-driver/mysql v1.7.1
 	github.com/gogo/protobuf v1.3.2
@@ -87,7 +87,7 @@ require (
 	github.com/jmespath/go-jmespath v0.4.0
 	github.com/json-iterator/go v1.1.12
 	github.com/klauspost/compress v1.17.3
-	github.com/lib/pq v1.10.7
+	github.com/lib/pq v1.10.9
 	github.com/mackerelio/go-osstat v0.2.3
 	github.com/miekg/dns v1.1.56
 	github.com/mitchellh/mapstructure v1.5.1-0.20220423185008-bf980b35cac4
@@ -212,16 +212,16 @@ require (
 	go.uber.org/goleak v1.2.1
 	go.uber.org/multierr v1.11.0
 	go.uber.org/zap v1.26.0
-	golang.org/x/crypto v0.15.0
+	golang.org/x/crypto v0.17.0
 	golang.org/x/exp v0.0.0-20231110203233-9a3e6036ecaa
-	golang.org/x/net v0.18.0
+	golang.org/x/net v0.19.0
 	golang.org/x/oauth2 v0.13.0
 	golang.org/x/sys v0.15.0
 	golang.org/x/text v0.14.0
 	golang.org/x/time v0.3.0
 	google.golang.org/api v0.147.0
 	google.golang.org/grpc v1.59.0
-	google.golang.org/protobuf v1.31.0
+	google.golang.org/protobuf v1.32.0
 	gopkg.in/yaml.v2 v2.4.0
 	gopkg.in/yaml.v3 v3.0.1
 	gotest.tools v2.2.0+incompatible
@@ -271,8 +271,7 @@ require (
 	github.com/Microsoft/go-winio v0.6.1 // indirect
 	github.com/Microsoft/hcsshim v0.11.4 // indirect
 	github.com/Nvveen/Gotty v0.0.0-20120604004816-cd527374f1e5 // indirect
-	github.com/ProtonMail/go-crypto v0.0.0-20210920160938-87db9fbc61c7 // indirect
-	github.com/acomagu/bufpipe v1.0.3 // indirect
+	github.com/ProtonMail/go-crypto v0.0.0-20230828082145-3c4c8a2d2371 // indirect
 	github.com/alecthomas/participle/v2 v2.1.0 // indirect
 	github.com/alecthomas/template v0.0.0-20190718012654-fb15b899a751 // indirect
 	github.com/andybalholm/brotli v1.0.5 // indirect
@@ -283,21 +282,21 @@ require (
 	github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2 // indirect
 	github.com/avvmoto/buf-readerat v0.0.0-20171115124131-a17c8cb89270 // indirect
 	github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.4.10 // indirect
-	github.com/aws/aws-sdk-go-v2/credentials v1.13.42 // indirect
-	github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.13.12 // indirect
+	github.com/aws/aws-sdk-go-v2/credentials v1.16.13 // indirect
+	github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.14.10 // indirect
 	github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.11.69 // indirect
-	github.com/aws/aws-sdk-go-v2/internal/configsources v1.1.42 // indirect
-	github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.4.36 // indirect
-	github.com/aws/aws-sdk-go-v2/internal/ini v1.3.44 // indirect
+	github.com/aws/aws-sdk-go-v2/internal/configsources v1.2.9 // indirect
+	github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.5.9 // indirect
+	github.com/aws/aws-sdk-go-v2/internal/ini v1.7.2 // indirect
 	github.com/aws/aws-sdk-go-v2/internal/v4a v1.0.26 // indirect
-	github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.9.11 // indirect
+	github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.10.4 // indirect
 	github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.1.29 // indirect
-	github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.9.36 // indirect
+	github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.10.9 // indirect
 	github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.14.3 // indirect
-	github.com/aws/aws-sdk-go-v2/service/sso v1.15.1 // indirect
-	github.com/aws/aws-sdk-go-v2/service/ssooidc v1.17.2 // indirect
-	github.com/aws/aws-sdk-go-v2/service/sts v1.23.1 // indirect
-	github.com/aws/smithy-go v1.15.0 // indirect
+	github.com/aws/aws-sdk-go-v2/service/sso v1.18.5 // indirect
+	github.com/aws/aws-sdk-go-v2/service/ssooidc v1.21.5 // indirect
+	github.com/aws/aws-sdk-go-v2/service/sts v1.26.6 // indirect
+	github.com/aws/smithy-go v1.19.0 // indirect
 	github.com/beevik/ntp v1.3.0 // indirect
 	github.com/beorn7/perks v1.0.1 // indirect
 	github.com/blang/semver v3.5.2-0.20180723201105-3c1074078d32+incompatible // indirect
@@ -313,7 +312,7 @@ require (
 	github.com/cncf/xds/go v0.0.0-20230607035331-e9ce68804cb4 // indirect
 	github.com/containerd/cgroups v1.1.0 // indirect
 	github.com/containerd/console v1.0.3 // indirect
-	github.com/containerd/containerd v1.7.6 // indirect
+	github.com/containerd/containerd v1.7.11 // indirect
 	github.com/containerd/continuity v0.4.2 // indirect
 	github.com/containerd/ttrpc v1.2.2 // indirect
 	github.com/coreos/go-semver v0.3.1 // indirect
@@ -332,7 +331,7 @@ require (
 	github.com/docker/distribution v2.8.2+incompatible // indirect
 	github.com/docker/go-units v0.5.0 // indirect
 	github.com/dustin/go-humanize v1.0.1 // indirect
-	github.com/dvsekhvalnov/jose2go v1.5.0 // indirect
+	github.com/dvsekhvalnov/jose2go v1.6.0 // indirect
 	github.com/eapache/go-resiliency v1.4.0 // indirect
 	github.com/eapache/go-xerial-snappy v0.0.0-20230731223053-c322873962e3 // indirect
 	github.com/eapache/queue v1.1.0 // indirect
@@ -342,7 +341,7 @@ require (
 	github.com/elastic/go-windows v1.0.1 // indirect
 	github.com/ema/qdisc v1.0.0 // indirect
 	github.com/emicklei/go-restful/v3 v3.11.0 // indirect
-	github.com/emirpasic/gods v1.12.0 // indirect
+	github.com/emirpasic/gods v1.18.1 // indirect
 	github.com/envoyproxy/go-control-plane v0.11.1 // indirect
 	github.com/envoyproxy/protoc-gen-validate v1.0.2 // indirect
 	github.com/euank/go-kmsg-parser v2.0.0+incompatible // indirect
@@ -354,8 +353,8 @@ require (
 	github.com/felixge/httpsnoop v1.0.3 // indirect
 	github.com/form3tech-oss/jwt-go v3.2.5+incompatible // indirect
 	github.com/gabriel-vasile/mimetype v1.4.2 // indirect
-	github.com/go-git/gcfg v1.5.0 // indirect
-	github.com/go-git/go-billy/v5 v5.3.1 // indirect
+	github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376 // indirect
+	github.com/go-git/go-billy/v5 v5.5.0 // indirect
 	github.com/go-kit/kit v0.13.0 // indirect
 	github.com/go-logr/stdr v1.2.2 // indirect
 	github.com/go-ole/go-ole v1.3.0 // indirect
@@ -379,7 +378,7 @@ require (
 	github.com/gogo/googleapis v1.4.1 // indirect
 	github.com/gogo/status v1.1.1 // indirect
 	github.com/golang-jwt/jwt/v4 v4.5.0 // indirect
-	github.com/golang-sql/civil v0.0.0-20190719163853-cb61b32ac6fe // indirect
+	github.com/golang-sql/civil v0.0.0-20220223132316-b832511892a9 // indirect
 	github.com/golang-sql/sqlexp v0.1.0 // indirect
 	github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect
 	github.com/gomodule/redigo v1.8.9 // indirect
@@ -428,13 +427,13 @@ require (
 	github.com/influxdata/telegraf v1.16.3 // indirect
 	github.com/ionos-cloud/sdk-go/v6 v6.1.9 // indirect
 	github.com/jackc/chunkreader/v2 v2.0.1 // indirect
-	github.com/jackc/pgconn v1.13.0 // indirect
+	github.com/jackc/pgconn v1.14.0 // indirect
 	github.com/jackc/pgio v1.0.0 // indirect
 	github.com/jackc/pgpassfile v1.0.0 // indirect
-	github.com/jackc/pgproto3/v2 v2.3.1 // indirect
-	github.com/jackc/pgservicefile v0.0.0-20200714003250-2b9c44734f2b // indirect
-	github.com/jackc/pgtype v1.12.0 // indirect
-	github.com/jackc/pgx/v4 v4.17.2 // indirect
+	github.com/jackc/pgproto3/v2 v2.3.2 // indirect
+	github.com/jackc/pgservicefile v0.0.0-20221227161230-091c0ba34f0a // indirect
+	github.com/jackc/pgtype v1.14.0 // indirect
+	github.com/jackc/pgx/v4 v4.18.1 // indirect
 	github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99 // indirect
 	github.com/jcmturner/aescts/v2 v2.0.0 // indirect
 	github.com/jcmturner/dnsutils/v2 v2.0.0 // indirect
@@ -448,7 +447,7 @@ require (
 	github.com/jpillora/backoff v1.0.0 // indirect
 	github.com/jsimonetti/rtnetlink v1.3.5 // indirect
 	github.com/karrick/godirwalk v1.17.0 // indirect
-	github.com/kevinburke/ssh_config v1.1.0 // indirect
+	github.com/kevinburke/ssh_config v1.2.0 // indirect
 	github.com/klauspost/asmfmt v1.3.2 // indirect
 	github.com/klauspost/cpuid/v2 v2.2.5 // indirect
 	github.com/knadh/koanf v1.5.0 // indirect
@@ -470,7 +469,7 @@ require (
 	github.com/mdlayher/netlink v1.7.2 // indirect
 	github.com/mdlayher/socket v0.4.1 // indirect
 	github.com/mdlayher/wifi v0.1.0 // indirect
-	github.com/microsoft/go-mssqldb v0.19.0 // indirect
+	github.com/microsoft/go-mssqldb v1.6.0 // indirect
 	github.com/mistifyio/go-zfs v2.1.2-0.20190413222219-f784269be439+incompatible // indirect
 	github.com/mitchellh/copystructure v1.2.0 // indirect
 	github.com/mitchellh/go-homedir v1.1.0 // indirect
@@ -516,7 +515,7 @@ require (
 	github.com/prometheus-community/go-runit v0.1.0 // indirect
 	github.com/prometheus/alertmanager v0.26.0 // indirect
 	github.com/prometheus/common/sigv4 v0.1.0
-	github.com/prometheus/exporter-toolkit v0.10.1-0.20230714054209-2f4150c63f97 // indirect
+	github.com/prometheus/exporter-toolkit v0.11.0 // indirect
 	github.com/rcrowley/go-metrics v0.0.0-20201227073835-cf1acfcdf475 // indirect
 	github.com/remeh/sizedwaitgroup v1.0.0 // indirect
 	github.com/renier/xmlrpc v0.0.0-20170708154548-ce4a1a486c03 // indirect
@@ -533,7 +532,7 @@ require (
 	github.com/shopspring/decimal v1.2.0 // indirect
 	github.com/shurcooL/httpfs v0.0.0-20230704072500-f1e31cf0ba5c // indirect
 	github.com/shurcooL/vfsgen v0.0.0-20200824052919-0d455de96546 // indirect
-	github.com/snowflakedb/gosnowflake v1.6.22 // indirect
+	github.com/snowflakedb/gosnowflake v1.7.2-0.20240103203018-f1d625f17408 // indirect
 	github.com/softlayer/softlayer-go v0.0.0-20180806151055-260589d94c7d // indirect
 	github.com/soheilhy/cmux v0.1.5 // indirect
 	github.com/spf13/afero v1.9.5 // indirect
@@ -551,14 +550,14 @@ require (
 	github.com/tklauser/numcpus v0.6.1 // indirect
 	github.com/tomnomnom/linkheader v0.0.0-20180905144013-02ca5825eb80 // indirect
 	github.com/uber/jaeger-lib v2.4.1+incompatible // indirect
-	github.com/vertica/vertica-sql-go v1.3.0 // indirect
+	github.com/vertica/vertica-sql-go v1.3.3 // indirect
 	github.com/vishvananda/netlink v1.2.1-beta.2 // indirect
 	github.com/vishvananda/netns v0.0.0-20210104183010-2eb08e3e575f // indirect
 	github.com/vmware/govmomi v0.32.0 // indirect
 	github.com/vultr/govultr/v2 v2.17.2 // indirect
 	github.com/willf/bitset v1.1.11 // indirect
 	github.com/willf/bloom v2.0.3+incompatible // indirect
-	github.com/xanzy/ssh-agent v0.3.1 // indirect
+	github.com/xanzy/ssh-agent v0.3.3 // indirect
 	github.com/xdg-go/pbkdf2 v1.0.0 // indirect
 	github.com/xdg-go/stringprep v1.0.4 // indirect
 	github.com/xdg/scram v0.0.0-20180814205039-7eeb5667e42c // indirect
@@ -567,7 +566,7 @@ require (
 	github.com/xeipuuv/gojsonreference v0.0.0-20180127040603-bd5ef7bd5415 // indirect
 	github.com/xeipuuv/gojsonschema v1.2.0 // indirect
 	github.com/xhit/go-str2duration/v2 v2.1.0 // indirect
-	github.com/xo/dburl v0.13.0 // indirect
+	github.com/xo/dburl v0.20.0 // indirect
 	github.com/youmark/pkcs8 v0.0.0-20181117223130-1be2e3e5546d // indirect
 	github.com/yusufpapurcu/wmi v1.2.3 // indirect
 	go.etcd.io/etcd/api/v3 v3.5.9 // indirect
@@ -583,7 +582,7 @@ require (
 	go4.org/netipx v0.0.0-20230125063823-8449b0a6169f // indirect
 	golang.org/x/mod v0.14.0 // indirect
 	golang.org/x/sync v0.5.0 // indirect
-	golang.org/x/term v0.14.0 // indirect
+	golang.org/x/term v0.15.0 // indirect
 	golang.org/x/tools v0.15.0 // indirect
 	golang.org/x/xerrors v0.0.0-20220907171357-04be3eba64a2 // indirect
 	gomodules.xyz/jsonpatch/v2 v2.4.0 // indirect
@@ -623,7 +622,10 @@ require (
 	github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v2 v2.2.1 // indirect
 	github.com/Shopify/sarama v1.38.1 // indirect
 	github.com/Workiva/go-datastructures v1.1.0 // indirect
+	github.com/aws/aws-sdk-go-v2/service/secretsmanager v1.26.0 // indirect
 	github.com/channelmeter/iso8601duration v0.0.0-20150204201828-8da3af7a2a61 // indirect
+	github.com/cloudflare/circl v1.3.3 // indirect
+	github.com/containerd/log v0.1.0 // indirect
 	github.com/drone/envsubst v1.0.3 // indirect
 	github.com/go-jose/go-jose/v3 v3.0.1 // indirect
 	github.com/golang-jwt/jwt/v5 v5.0.0 // indirect
@@ -642,8 +644,10 @@ require (
 	github.com/open-telemetry/opentelemetry-collector-contrib/pkg/translator/prometheusremotewrite v0.87.0 // indirect
 	github.com/openshift/api v3.9.0+incompatible // indirect
 	github.com/openshift/client-go v0.0.0-20210521082421-73d9475a9142 // indirect
+	github.com/pjbgf/sha1cd v0.3.0 // indirect
 	github.com/prometheus-community/prom-label-proxy v0.6.0 // indirect
 	github.com/sercand/kuberesolver/v4 v4.0.0 // indirect
+	github.com/skeema/knownhosts v1.2.1 // indirect
 	github.com/sony/gobreaker v0.5.0 // indirect
 	github.com/tidwall/gjson v1.10.2 // indirect
 	github.com/tidwall/match v1.1.1 // indirect
diff --git a/go.sum b/go.sum
index 410e895a31bd..b3f0d41a4a63 100644
--- a/go.sum
+++ b/go.sum
@@ -80,14 +80,10 @@ github.com/Azure/azure-pipeline-go v0.1.9/go.mod h1:XA1kFWRVhSK+KNFiOhfv83Fv8L9a
 github.com/Azure/azure-pipeline-go v0.2.3/go.mod h1:x841ezTBIMG6O3lAcl8ATHnsOPVl2bqk7S3ta6S6u4k=
 github.com/Azure/azure-sdk-for-go v36.2.0+incompatible h1:09cv2WoH0g6jl6m2iT+R9qcIPZKhXEL0sbmLhxP895s=
 github.com/Azure/azure-sdk-for-go v36.2.0+incompatible/go.mod h1:9XXNKU+eRnpl9moKnB4QOLf1HestfXbmab5FXxiDBjc=
-github.com/Azure/azure-sdk-for-go/sdk/azcore v1.0.0/go.mod h1:uGG2W01BaETf0Ozp+QxxKJdMBNRWPdstHG0Fmdwn1/U=
-github.com/Azure/azure-sdk-for-go/sdk/azcore v1.1.2/go.mod h1:uGG2W01BaETf0Ozp+QxxKJdMBNRWPdstHG0Fmdwn1/U=
 github.com/Azure/azure-sdk-for-go/sdk/azcore v1.9.0-beta.1 h1:ODs3brnqQM99Tq1PffODpAViYv3Bf8zOg464MU7p5ew=
 github.com/Azure/azure-sdk-for-go/sdk/azcore v1.9.0-beta.1/go.mod h1:3Ug6Qzto9anB6mGlEdgYMDF5zHQ+wwhEaYR4s17PHMw=
-github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.1.0/go.mod h1:bhXu1AjYL+wutSL/kpSq6s7733q2Rb0yuot9Zgfqa/0=
 github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.4.0 h1:BMAjVKJM0U/CYF27gA0ZMmXGkOcvfFtD0oHVZ1TIPRI=
 github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.4.0/go.mod h1:1fXstnBMas5kzG+S3q8UoJcmyU6nUeunJcMDHcRYHhs=
-github.com/Azure/azure-sdk-for-go/sdk/internal v1.0.0/go.mod h1:eWRD7oawr1Mu1sLCawqVc0CUiF43ia3qQMxLscsKQ9w=
 github.com/Azure/azure-sdk-for-go/sdk/internal v1.4.0 h1:TuEMD+E+1aTjjLICGQOW6vLe8UWES7kopac9mUXL56Y=
 github.com/Azure/azure-sdk-for-go/sdk/internal v1.4.0/go.mod h1:s4kgfzA0covAXNicZHDMN58jExvcng2mC/DepXiF1EI=
 github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v4 v4.2.1 h1:UPeCRD+XY7QlaGQte2EVI2iOcWvUYA2XY8w5T/8v0NQ=
@@ -110,6 +106,10 @@ github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/resources/armsubscriptions
 github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/resources/armsubscriptions v1.2.0/go.mod h1:ThfyMjs6auYrWPnYJjI3H4H++oVPrz01pizpu8lfl3A=
 github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/storage/armstorage v1.2.0 h1:Ma67P/GGprNwsslzEH6+Kb8nybI8jpDTm4Wmzu2ReK8=
 github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/storage/armstorage v1.2.0/go.mod h1:c+Lifp3EDEamAkPVzMooRNOK6CZjNSdEnf1A7jsI9u4=
+github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys v1.0.0 h1:yfJe15aSwEQ6Oo6J+gdfdulPNoZ3TEhmbhLIoxZcA+U=
+github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys v1.0.0/go.mod h1:Q28U+75mpCaSCDowNEmhIo/rmgdkqmkmzI7N6TGR4UY=
+github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/internal v0.8.0 h1:T028gtTPiYt/RMUfs8nVsAL7FDQrfLlrm/NnRG/zcC4=
+github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/internal v0.8.0/go.mod h1:cw4zVQgBby0Z5f2v0itn6se2dDP17nTjbZFXW5uPyHA=
 github.com/Azure/azure-sdk-for-go/sdk/storage/azblob v1.2.0 h1:gggzg0SUMs6SQbEw+3LoSsYf9YMjkupeAnHMX8O9mmY=
 github.com/Azure/azure-sdk-for-go/sdk/storage/azblob v1.2.0/go.mod h1:+6KLcKIVgxoBDMqMO/Nvy7bZ9a0nbU3I1DtFQK3YvB4=
 github.com/Azure/azure-storage-queue-go v0.0.0-20181215014128-6ed74e755687/go.mod h1:K6am8mT+5iFXgingS9LUc7TmbsW6XBw3nxaRyaMyWc8=
@@ -172,7 +172,6 @@ github.com/Azure/go-autorest/logger v0.2.1/go.mod h1:T9E3cAhj2VqvPOtCYAvby9aBXkZ
 github.com/Azure/go-autorest/tracing v0.5.0/go.mod h1:r/s2XiOKccPW3HrqB+W0TQzfbtp2fGCgRFtBroKn4Dk=
 github.com/Azure/go-autorest/tracing v0.6.0 h1:TYi4+3m5t6K48TGI9AUdb+IzbnSxvnvUMfuitfgcfuo=
 github.com/Azure/go-autorest/tracing v0.6.0/go.mod h1:+vhtPC754Xsa23ID7GlGsrdKBpUA79WCAKPPZVC2DeU=
-github.com/AzureAD/microsoft-authentication-library-for-go v0.5.1/go.mod h1:Vt9sXTKwMyGcOxSmLDMnGPgqsUg7m8pe215qMLrDXw4=
 github.com/AzureAD/microsoft-authentication-library-for-go v1.2.0 h1:hVeq+yCyUi+MsoO/CU95yqCIcdzra5ovzk8Q2BBpV2M=
 github.com/AzureAD/microsoft-authentication-library-for-go v1.2.0/go.mod h1:wP83P5OoQ5p6ip3ScPr0BAq0BvuPAvacpEuSzyouqAI=
 github.com/BurntSushi/toml v0.3.1/go.mod h1:xHWCNGjB5oqiDr8zfno3MHue2Ht5sIBksp03qcyfWMU=
@@ -210,10 +209,8 @@ github.com/Mellanox/rdmamap v0.0.0-20191106181932-7c3c4763a6ee/go.mod h1:jDA6v0T
 github.com/Microsoft/ApplicationInsights-Go v0.4.2/go.mod h1:CukZ/G66zxXtI+h/VcVn3eVVDGDHfXM2zVILF7bMmsg=
 github.com/Microsoft/go-winio v0.4.3/go.mod h1:VhR8bwka0BXejwEJY73c50VrPtXAaKcyvVC4A4RozmA=
 github.com/Microsoft/go-winio v0.4.9/go.mod h1:VhR8bwka0BXejwEJY73c50VrPtXAaKcyvVC4A4RozmA=
-github.com/Microsoft/go-winio v0.4.14/go.mod h1:qXqCSQ3Xa7+6tgxaGTIe4Kpcdsi+P8jBhyzoq1bpyYA=
-github.com/Microsoft/go-winio v0.4.16/go.mod h1:XB6nPKklQyQ7GC9LdcBEcBl8PF76WugXOPRXwdLnMv0=
-github.com/Microsoft/go-winio v0.5.0/go.mod h1:JPGBdM1cNvN/6ISo+n8V5iA4v8pBzdOpzfwIujj1a84=
 github.com/Microsoft/go-winio v0.5.1/go.mod h1:JPGBdM1cNvN/6ISo+n8V5iA4v8pBzdOpzfwIujj1a84=
+github.com/Microsoft/go-winio v0.5.2/go.mod h1:WpS1mjBmmwHBEWmogvA2mj8546UReBk4v8QkMxJ6pZY=
 github.com/Microsoft/go-winio v0.6.1 h1:9/kr64B9VUZrLm5YYwbGtUJnMgqWVOdUAXu6Migciow=
 github.com/Microsoft/go-winio v0.6.1/go.mod h1:LRdKpFKfdobln8UmuiYcKPot9D2v6svN5+sAH+4kjUM=
 github.com/Microsoft/hcsshim v0.11.4 h1:68vKo2VN8DE9AdN4tnkWnmdhqdbpUFM8OF3Airm7fz8=
@@ -225,9 +222,8 @@ github.com/Nvveen/Gotty v0.0.0-20120604004816-cd527374f1e5/go.mod h1:lmUJ/7eu/Q8
 github.com/OneOfOne/xxhash v1.2.2/go.mod h1:HSdplMjZKSmBqAxg5vPj2TmRDmfkzw+cTzAElWljhcU=
 github.com/OneOfOne/xxhash v1.2.8 h1:31czK/TI9sNkxIKfaUfGlU47BAxQ0ztGgd9vPyqimf8=
 github.com/OneOfOne/xxhash v1.2.8/go.mod h1:eZbhyaAYD41SGSSsnmcpxVoRiQ/MPUTjUdIIOT9Um7Q=
-github.com/ProtonMail/go-crypto v0.0.0-20210428141323-04723f9f07d7/go.mod h1:z4/9nQmJSSwwds7ejkxaJwO37dru3geImFUdJlaLzQo=
-github.com/ProtonMail/go-crypto v0.0.0-20210920160938-87db9fbc61c7 h1:DSqTh6nEes/uO8BlNcGk8PzZsxY2sN9ZL//veWBdTRI=
-github.com/ProtonMail/go-crypto v0.0.0-20210920160938-87db9fbc61c7/go.mod h1:z4/9nQmJSSwwds7ejkxaJwO37dru3geImFUdJlaLzQo=
+github.com/ProtonMail/go-crypto v0.0.0-20230828082145-3c4c8a2d2371 h1:kkhsdkhsCvIsutKu5zLMgWtgh9YxGCNAw8Ad8hjwfYg=
+github.com/ProtonMail/go-crypto v0.0.0-20230828082145-3c4c8a2d2371/go.mod h1:EjAoLdwvbIOoOQr3ihjnSoLZRtE8azugULFRteWMNc0=
 github.com/PuerkitoBio/purell v1.0.0/go.mod h1:c11w/QuzBsJSee3cPx9rAFu61PvFxuPbtSwDGJws/X0=
 github.com/PuerkitoBio/purell v1.1.1/go.mod h1:c11w/QuzBsJSee3cPx9rAFu61PvFxuPbtSwDGJws/X0=
 github.com/PuerkitoBio/rehttp v1.1.0 h1:JFZ7OeK+hbJpTxhNB0NDZT47AuXqCU0Smxfjtph7/Rs=
@@ -252,8 +248,6 @@ github.com/Workiva/go-datastructures v1.1.0 h1:hu20UpgZneBhQ3ZvwiOGlqJSKIosin2Rd
 github.com/Workiva/go-datastructures v1.1.0/go.mod h1:1yZL+zfsztete+ePzZz/Zb1/t5BnDuE2Ya2MMGhzP6A=
 github.com/abdullin/seq v0.0.0-20160510034733-d5467c17e7af h1:DBNMBMuMiWYu0b+8KMJuWmfCkcxl09JwdlqwDZZ6U14=
 github.com/abdullin/seq v0.0.0-20160510034733-d5467c17e7af/go.mod h1:5Jv4cbFiHJMsVxt52+i0Ha45fjshj6wxYr1r19tB9bw=
-github.com/acomagu/bufpipe v1.0.3 h1:fxAGrHZTgQ9w5QqVItgzwj235/uYZYgbXitB+dLupOk=
-github.com/acomagu/bufpipe v1.0.3/go.mod h1:mxdxdup/WdsKVreO5GpW4+M/1CE2sMG4jeGJ2sYmHc4=
 github.com/aerospike/aerospike-client-go v1.27.0/go.mod h1:zj8LBEnWBDOVEIJt8LvaRvDG5ARAoa5dBeHaB472NRc=
 github.com/afex/hystrix-go v0.0.0-20180502004556-fa1af6a1f4f5/go.mod h1:SkGFH1ia65gfNATL8TAiHDNxPzPdmEL5uirI2Uyuz6c=
 github.com/ajstarks/svgo v0.0.0-20180226025133-644b8db467af/go.mod h1:K08gAheRH3/J6wwsYMMT4xOr94bZjxIelGM0+d/wbFw=
@@ -281,8 +275,8 @@ github.com/alicebob/miniredis/v2 v2.30.4/go.mod h1:b25qWj4fCEsBeAAR2mlb0ufImGC6u
 github.com/amir/raidman v0.0.0-20170415203553-1ccc43bfb9c9/go.mod h1:eliMa/PW+RDr2QLWRmLH1R1ZA4RInpmvOzDDXtaIZkc=
 github.com/andybalholm/brotli v1.0.5 h1:8uQZIdzKmjc/iuPu7O2ioW48L81FgatrcpfFmiq/cCs=
 github.com/andybalholm/brotli v1.0.5/go.mod h1:fO7iG3H7G2nSZ7m0zPUDn85XEX2GTukHGRSepvi9Eig=
-github.com/anmitsu/go-shlex v0.0.0-20161002113705-648efa622239 h1:kFOfPq6dUM1hTo4JG6LR5AXSUEsOjtdm0kw0FtQtMJA=
-github.com/anmitsu/go-shlex v0.0.0-20161002113705-648efa622239/go.mod h1:2FmKhYUyUczH0OGQWaF5ceTx0UBShxjsH6f8oGKYe2c=
+github.com/anmitsu/go-shlex v0.0.0-20200514113438-38f4b401e2be h1:9AeTilPcZAjCFIImctFaOjnTIavg87rW78vTPkQqLI8=
+github.com/anmitsu/go-shlex v0.0.0-20200514113438-38f4b401e2be/go.mod h1:ySMOLuWl6zY27l47sB3qLNK6tF2fkHG55UZxx8oIVo4=
 github.com/antihax/optional v1.0.0/go.mod h1:uupD/76wgC+ih3iEmQUL+0Ugr19nfwCT1kdvxnR2qWY=
 github.com/antonmedv/expr v1.15.3 h1:q3hOJZNvLvhqE8OHBs1cFRdbXFNKuA+bHmRaI+AmRmI=
 github.com/antonmedv/expr v1.15.3/go.mod h1:0E/6TxnOlRNp81GMzX9QfDPAmHo2Phg00y4JUv1ihsE=
@@ -326,34 +320,34 @@ github.com/aws/aws-sdk-go-v2 v0.18.0/go.mod h1:JWVYvqSMppoMJC0x5wdwiImzgXTI9FuZw
 github.com/aws/aws-sdk-go-v2 v1.7.0/go.mod h1:tb9wi5s61kTDA5qCkcDbt3KRVV74GGslQkl/DRdX/P4=
 github.com/aws/aws-sdk-go-v2 v1.9.2/go.mod h1:cK/D0BBs0b/oWPIcX/Z/obahJK1TT7IPVjy53i/mX/4=
 github.com/aws/aws-sdk-go-v2 v1.18.1/go.mod h1:uzbQtefpm44goOPmdKyAlXSNcwlRgF3ePWVW6EtJvvw=
-github.com/aws/aws-sdk-go-v2 v1.21.1 h1:wjHYshtPpYOZm+/mu3NhVgRRc0baM6LJZOmxPZ5Cwzs=
-github.com/aws/aws-sdk-go-v2 v1.21.1/go.mod h1:ErQhvNuEMhJjweavOYhxVkn2RUx7kQXVATHrjKtxIpM=
+github.com/aws/aws-sdk-go-v2 v1.24.0 h1:890+mqQ+hTpNuw0gGP6/4akolQkSToDJgHfQE7AwGuk=
+github.com/aws/aws-sdk-go-v2 v1.24.0/go.mod h1:LNh45Br1YAkEKaAqvmE1m8FUx6a5b/V0oAKV7of29b4=
 github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.4.10 h1:dK82zF6kkPeCo8J1e+tGx4JdvDIQzj7ygIoLg8WMuGs=
 github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.4.10/go.mod h1:VeTZetY5KRJLuD/7fkQXMU6Mw7H5m/KP2J5Iy9osMno=
 github.com/aws/aws-sdk-go-v2/config v1.8.3/go.mod h1:4AEiLtAb8kLs7vgw2ZV3p2VZ1+hBavOc84hqxVNpCyw=
 github.com/aws/aws-sdk-go-v2/config v1.18.27/go.mod h1:0My+YgmkGxeqjXZb5BYme5pc4drjTnM+x1GJ3zv42Nw=
-github.com/aws/aws-sdk-go-v2/config v1.18.44 h1:U10NQ3OxiY0dGGozmVIENIDnCT0W432PWxk2VO8wGnY=
-github.com/aws/aws-sdk-go-v2/config v1.18.44/go.mod h1:pHxnQBldd0heEdJmolLBk78D1Bf69YnKLY3LOpFImlU=
+github.com/aws/aws-sdk-go-v2/config v1.26.2 h1:+RWLEIWQIGgrz2pBPAUoGgNGs1TOyF4Hml7hCnYj2jc=
+github.com/aws/aws-sdk-go-v2/config v1.26.2/go.mod h1:l6xqvUxt0Oj7PI/SUXYLNyZ9T/yBPn3YTQcJLLOdtR8=
 github.com/aws/aws-sdk-go-v2/credentials v1.4.3/go.mod h1:FNNC6nQZQUuyhq5aE5c7ata8o9e4ECGmS4lAXC7o1mQ=
 github.com/aws/aws-sdk-go-v2/credentials v1.13.26/go.mod h1:GoXt2YC8jHUBbA4jr+W3JiemnIbkXOfxSXcisUsZ3os=
-github.com/aws/aws-sdk-go-v2/credentials v1.13.42 h1:KMkjpZqcMOwtRHChVlHdNxTUUAC6NC/b58mRZDIdcRg=
-github.com/aws/aws-sdk-go-v2/credentials v1.13.42/go.mod h1:7ltKclhvEB8305sBhrpls24HGxORl6qgnQqSJ314Uw8=
+github.com/aws/aws-sdk-go-v2/credentials v1.16.13 h1:WLABQ4Cp4vXtXfOWOS3MEZKr6AAYUpMczLhgKtAjQ/8=
+github.com/aws/aws-sdk-go-v2/credentials v1.16.13/go.mod h1:Qg6x82FXwW0sJHzYruxGiuApNo31UEtJvXVSZAXeWiw=
 github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.6.0/go.mod h1:gqlclDEZp4aqJOancXK6TN24aKhT0W0Ae9MHk3wzTMM=
 github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.13.4/go.mod h1:E1hLXN/BL2e6YizK1zFlYd8vsfi2GTjbjBazinMmeaM=
-github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.13.12 h1:3j5lrl9kVQrJ1BU4O0z7MQ8sa+UXdiLuo4j0V+odNI8=
-github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.13.12/go.mod h1:JbFpcHDBdsex1zpIKuVRorZSQiZEyc3MykNCcjgz174=
+github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.14.10 h1:w98BT5w+ao1/r5sUuiH6JkVzjowOKeOJRHERyy1vh58=
+github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.14.10/go.mod h1:K2WGI7vUvkIv1HoNbfBA1bvIZ+9kL3YVmWxeKuLQsiw=
 github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.11.69 h1:u9tquzvPabbR1hghIq0+snSCYPeF9jA7JeB46iazH6w=
 github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.11.69/go.mod h1:KzrYE4t9hLh8TjJkfGsmPYcVlYb7QWiPPv3aCOhwms0=
 github.com/aws/aws-sdk-go-v2/internal/configsources v1.1.34/go.mod h1:wZpTEecJe0Btj3IYnDx/VlUzor9wm3fJHyvLpQF0VwY=
-github.com/aws/aws-sdk-go-v2/internal/configsources v1.1.42 h1:817VqVe6wvwE46xXy6YF5RywvjOX6U2zRQQ6IbQFK0s=
-github.com/aws/aws-sdk-go-v2/internal/configsources v1.1.42/go.mod h1:oDfgXoBBmj+kXnqxDDnIDnC56QBosglKp8ftRCTxR+0=
+github.com/aws/aws-sdk-go-v2/internal/configsources v1.2.9 h1:v+HbZaCGmOwnTTVS86Fleq0vPzOd7tnJGbFhP0stNLs=
+github.com/aws/aws-sdk-go-v2/internal/configsources v1.2.9/go.mod h1:Xjqy+Nyj7VDLBtCMkQYOw1QYfAEZCVLrfI0ezve8wd4=
 github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.4.28/go.mod h1:7VRpKQQedkfIEXb4k52I7swUnZP0wohVajJMRn3vsUw=
-github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.4.36 h1:7ZApaXzWbo8slc+W5TynuUlB4z66g44h7uqa3/d/BsY=
-github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.4.36/go.mod h1:rwr4WnmFi3RJO0M4dxbJtgi9BPLMpVBMX1nUte5ha9U=
+github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.5.9 h1:N94sVhRACtXyVcjXxrwK1SKFIJrA9pOJ5yu2eSHnmls=
+github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.5.9/go.mod h1:hqamLz7g1/4EJP+GH5NBhcUMLjW+gKLQabgyz6/7WAU=
 github.com/aws/aws-sdk-go-v2/internal/ini v1.2.4/go.mod h1:ZcBrrI3zBKlhGFNYWvju0I3TR93I7YIgAfy82Fh4lcQ=
 github.com/aws/aws-sdk-go-v2/internal/ini v1.3.35/go.mod h1:0Eg1YjxE0Bhn56lx+SHJwCzhW+2JGtizsrx+lCqrfm0=
-github.com/aws/aws-sdk-go-v2/internal/ini v1.3.44 h1:quOJOqlbSfeJTboXLjYXM1M9T52LBXqLoTPlmsKLpBo=
-github.com/aws/aws-sdk-go-v2/internal/ini v1.3.44/go.mod h1:LNy+P1+1LiRcCsVYr/4zG5n8zWFL0xsvZkOybjbftm8=
+github.com/aws/aws-sdk-go-v2/internal/ini v1.7.2 h1:GrSw8s0Gs/5zZ0SX+gX4zQjRnRsMJDJ2sLur1gRBhEM=
+github.com/aws/aws-sdk-go-v2/internal/ini v1.7.2/go.mod h1:6fQQgfuGmw8Al/3M2IgIllycxV7ZW7WCdVSqfBeUiCY=
 github.com/aws/aws-sdk-go-v2/internal/v4a v1.0.26 h1:wscW+pnn3J1OYnanMnza5ZVYXLX4cKk5rAvUAl4Qu+c=
 github.com/aws/aws-sdk-go-v2/internal/v4a v1.0.26/go.mod h1:MtYiox5gvyB+OyP0Mr0Sm/yzbEAIPL9eijj/ouHAPw0=
 github.com/aws/aws-sdk-go-v2/service/amp v1.17.5 h1:Wg2vTVYrMrfkNqrCGaggQq1UBdzgrAsorAfavLNpU/E=
@@ -370,40 +364,43 @@ github.com/aws/aws-sdk-go-v2/service/databasemigrationservice v1.30.4 h1:Ir8BEej
 github.com/aws/aws-sdk-go-v2/service/databasemigrationservice v1.30.4/go.mod h1:NSAyKko0rDkrZOjcdCPPvMEe+FyIw/aDDQ8X+xAIW44=
 github.com/aws/aws-sdk-go-v2/service/ec2 v1.117.0 h1:Yq39vbwQX+Xw+Ubcsg/ElwO+TWAxAIAdrREtpjGnCHw=
 github.com/aws/aws-sdk-go-v2/service/ec2 v1.117.0/go.mod h1:0FhI2Rzcv5BNM3dNnbcCx2qa2naFZoAidJi11cQgzL0=
-github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.9.11 h1:y2+VQzC6Zh2ojtV2LoC0MNwHWc6qXv/j2vrQtlftkdA=
 github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.9.11/go.mod h1:iV4q2hsqtNECrfmlXyord9u4zyuFEJX9eLgLpSPzWA8=
+github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.10.4 h1:/b31bi3YVNlkzkBrm9LfpaKoaYZUxIAj4sHfOTmLfqw=
+github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.10.4/go.mod h1:2aGXHFmbInwgP9ZfpmdIfOELL79zhdNYNmReK8qDfdQ=
 github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.1.29 h1:zZSLP3v3riMOP14H7b4XP0uyfREDQOYv2cqIrvTXDNQ=
 github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.1.29/go.mod h1:z7EjRjVwZ6pWcWdI2H64dKttvzaP99jRIj5hphW0M5U=
 github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.3.2/go.mod h1:72HRZDLMtmVQiLG2tLfQcaWLCssELvGl+Zf2WVxMmR8=
 github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.9.28/go.mod h1:jj7znCIg05jXlaGBlFMGP8+7UN3VtCkRBG2spnmRQkU=
-github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.9.36 h1:YXlm7LxwNlauqb2OrinWlcvtsflTzP8GaMvYfQBhoT4=
-github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.9.36/go.mod h1:ou9ffqJ9hKOVZmjlC6kQ6oROAyG1M4yBKzR+9BKbDwk=
+github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.10.9 h1:Nf2sHxjMJR8CSImIVCONRi4g0Su3J+TSTbS7G0pUeMU=
+github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.10.9/go.mod h1:idky4TER38YIjr2cADF1/ugFMKvZV7p//pVeV5LZbF0=
 github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.14.3 h1:dBL3StFxHtpBzJJ/mNEsjXVgfO+7jR0dAIEwLqMapEA=
 github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.14.3/go.mod h1:f1QyiAsvIv4B49DmCqrhlXqyaR+0IxMmyX+1P+AnzOM=
 github.com/aws/aws-sdk-go-v2/service/resourcegroupstaggingapi v1.15.5 h1:dMsTYzhTpsDMY79IzCh/jq1tHRwgfa15ujhKUjZk0fg=
 github.com/aws/aws-sdk-go-v2/service/resourcegroupstaggingapi v1.15.5/go.mod h1:Lh/6ABs1m80bEB36fAW9gEPW5kSsAr7Mdn8dGyWRLp0=
 github.com/aws/aws-sdk-go-v2/service/s3 v1.34.1 h1:rYYwwsGqbwvGgQHjBkqgDt8MynXk+I8xgS0IEj5gOT0=
 github.com/aws/aws-sdk-go-v2/service/s3 v1.34.1/go.mod h1:aVbf0sko/TsLWHx30c/uVu7c62+0EAJ3vbxaJga0xCw=
+github.com/aws/aws-sdk-go-v2/service/secretsmanager v1.26.0 h1:dPCRgAL4WD9tSMaDglRNGOiAtSTjkwNiUW5GDpWFfHA=
+github.com/aws/aws-sdk-go-v2/service/secretsmanager v1.26.0/go.mod h1:4Ae1NCLK6ghmjzd45Tc33GgCKhUWD2ORAlULtMO1Cbs=
 github.com/aws/aws-sdk-go-v2/service/shield v1.19.5 h1:zX/1OHVjTNB2D1xiQ0pByYNLbVgbl84fTj5W4tMKdAk=
 github.com/aws/aws-sdk-go-v2/service/shield v1.19.5/go.mod h1:NKqcE1DkD5YSbTAR8MxhFGFDmSkGNo68/Q8hht3Mi5w=
 github.com/aws/aws-sdk-go-v2/service/sso v1.4.2/go.mod h1:NBvT9R1MEF+Ud6ApJKM0G+IkPchKS7p7c2YPKwHmBOk=
 github.com/aws/aws-sdk-go-v2/service/sso v1.12.12/go.mod h1:HuCOxYsF21eKrerARYO6HapNeh9GBNq7fius2AcwodY=
-github.com/aws/aws-sdk-go-v2/service/sso v1.15.1 h1:ZN3bxw9OYC5D6umLw6f57rNJfGfhg1DIAAcKpzyUTOE=
-github.com/aws/aws-sdk-go-v2/service/sso v1.15.1/go.mod h1:PieckvBoT5HtyB9AsJRrYZFY2Z+EyfVM/9zG6gbV8DQ=
+github.com/aws/aws-sdk-go-v2/service/sso v1.18.5 h1:ldSFWz9tEHAwHNmjx2Cvy1MjP5/L9kNoR0skc6wyOOM=
+github.com/aws/aws-sdk-go-v2/service/sso v1.18.5/go.mod h1:CaFfXLYL376jgbP7VKC96uFcU8Rlavak0UlAwk1Dlhc=
 github.com/aws/aws-sdk-go-v2/service/ssooidc v1.14.12/go.mod h1:E4VrHCPzmVB/KFXtqBGKb3c8zpbNBgKe3fisDNLAW5w=
-github.com/aws/aws-sdk-go-v2/service/ssooidc v1.17.2 h1:fSCCJuT5i6ht8TqGdZc5Q5K9pz/atrf7qH4iK5C9XzU=
-github.com/aws/aws-sdk-go-v2/service/ssooidc v1.17.2/go.mod h1:5eNtr+vNc5vVd92q7SJ+U/HszsIdhZBEyi9dkMRKsp8=
+github.com/aws/aws-sdk-go-v2/service/ssooidc v1.21.5 h1:2k9KmFawS63euAkY4/ixVNsYYwrwnd5fIvgEKkfZFNM=
+github.com/aws/aws-sdk-go-v2/service/ssooidc v1.21.5/go.mod h1:W+nd4wWDVkSUIox9bacmkBP5NMFQeTJ/xqNabpzSR38=
 github.com/aws/aws-sdk-go-v2/service/storagegateway v1.19.6 h1:DfxHxomSOVAmiYb4I1IkcrKtjFrm4EHUEw/oHPuNgxI=
 github.com/aws/aws-sdk-go-v2/service/storagegateway v1.19.6/go.mod h1:o3x7HLasCY8mN914V4611sbXPOE54V8t0pzCtz5bxQ0=
 github.com/aws/aws-sdk-go-v2/service/sts v1.7.2/go.mod h1:8EzeIqfWt2wWT4rJVu3f21TfrhJ8AEMzVybRNSb/b4g=
 github.com/aws/aws-sdk-go-v2/service/sts v1.19.2/go.mod h1:dp0yLPsLBOi++WTxzCjA/oZqi6NPIhoR+uF7GeMU9eg=
-github.com/aws/aws-sdk-go-v2/service/sts v1.23.1 h1:ASNYk1ypWAxRhJjKS0jBnTUeDl7HROOpeSMu1xDA/I8=
-github.com/aws/aws-sdk-go-v2/service/sts v1.23.1/go.mod h1:2cnsAhVT3mqusovc2stUSUrSBGTcX9nh8Tu6xh//2eI=
+github.com/aws/aws-sdk-go-v2/service/sts v1.26.6 h1:HJeiuZ2fldpd0WqngyMR6KW7ofkXNLyOaHwEIGm39Cs=
+github.com/aws/aws-sdk-go-v2/service/sts v1.26.6/go.mod h1:XX5gh4CB7wAs4KhcF46G6C8a2i7eupU19dcAAE+EydU=
 github.com/aws/smithy-go v1.5.0/go.mod h1:SObp3lf9smib00L/v3U2eAKG8FyQ7iLrJnQiAmR5n+E=
 github.com/aws/smithy-go v1.8.0/go.mod h1:SObp3lf9smib00L/v3U2eAKG8FyQ7iLrJnQiAmR5n+E=
 github.com/aws/smithy-go v1.13.5/go.mod h1:Tg+OJXh4MB2R/uN61Ko2f6hTZwB/ZYGOtib8J3gBHzA=
-github.com/aws/smithy-go v1.15.0 h1:PS/durmlzvAFpQHDs4wi4sNNP9ExsqZh6IlfdHXgKK8=
-github.com/aws/smithy-go v1.15.0/go.mod h1:Tg+OJXh4MB2R/uN61Ko2f6hTZwB/ZYGOtib8J3gBHzA=
+github.com/aws/smithy-go v1.19.0 h1:KWFKQV80DpP3vJrrA9sVAHQ5gc2z8i4EzrLhLlWXcBM=
+github.com/aws/smithy-go v1.19.0/go.mod h1:NukqUGpCZIILqqiV0NIjeFh24kd/FAa4beRb6nbIUPE=
 github.com/aybabtme/iocontrol v0.0.0-20150809002002-ad15bcfc95a0 h1:0NmehRCgyk5rljDQLKUO+cRJCnduDyn11+zGZIc9Z48=
 github.com/aybabtme/iocontrol v0.0.0-20150809002002-ad15bcfc95a0/go.mod h1:6L7zgvqo0idzI7IO8de6ZC051AfXb5ipkIJ7bIA2tGA=
 github.com/basgys/goxml2json v1.1.0 h1:4ln5i4rseYfXNd86lGEB+Vi652IsIXIvggKM/BhUKVw=
@@ -439,8 +436,9 @@ github.com/bufbuild/connect-go v1.10.0 h1:QAJ3G9A1OYQW2Jbk3DeoJbkCxuKArrvZgDt47m
 github.com/bufbuild/connect-go v1.10.0/go.mod h1:CAIePUgkDR5pAFaylSMtNK45ANQjp9JvpluG20rhpV8=
 github.com/buger/jsonparser v1.1.1 h1:2PnMjfWD7wBILjqQbt530v576A/cAbQvEW9gGIpYMUs=
 github.com/buger/jsonparser v1.1.1/go.mod h1:6RYKKt7H4d4+iWqouImQ9R2FZql3VbhNgx27UK13J/0=
-github.com/burningalchemist/sql_exporter v0.0.0-20221222155641-2ff59aa75200 h1:1zECtssRshqhP8+DELKyWeg8rxaRC5OO72kJQhrJOE8=
-github.com/burningalchemist/sql_exporter v0.0.0-20221222155641-2ff59aa75200/go.mod h1:76BPyhi77q3CgH4ZcgW91r0+34cRMpORDnjlf0CmWpk=
+github.com/burningalchemist/sql_exporter v0.0.0-20240103092044-466b38b6abc4 h1:dgjwrjeVe90AeMhrx04TmDKjZe7xqKKEUxT3QKNx9RU=
+github.com/burningalchemist/sql_exporter v0.0.0-20240103092044-466b38b6abc4/go.mod h1:aRr7CZ/KleZpcDkQVsNeXE1BFT3xRG8baUHJ7J+j8NI=
+github.com/bwesterb/go-ristretto v1.2.3/go.mod h1:fUIoIZaG73pV5biE2Blr2xEzDoMj7NFEuV9ekS419A0=
 github.com/c2h5oh/datasize v0.0.0-20200112174442-28bbd4740fee h1:BnPxIde0gjtTnc9Er7cxvBk8DHLWhEux0SxayC8dP6I=
 github.com/c2h5oh/datasize v0.0.0-20200112174442-28bbd4740fee/go.mod h1:S/7n9copUssQ56c7aAgHqftWO4LTf4xY6CGWt8Bc+3M=
 github.com/caio/go-tdigest v2.3.0+incompatible/go.mod h1:sHQM/ubZStBUmF1WbB8FAm8q9GjDajLC5T7ydxE3JHI=
@@ -482,6 +480,8 @@ github.com/circonus-labs/circonusllhist v0.1.3/go.mod h1:kMXHVDlOchFAehlya5ePtbp
 github.com/cisco-ie/nx-telemetry-proto v0.0.0-20190531143454-82441e232cf6/go.mod h1:ugEfq4B8T8ciw/h5mCkgdiDRFS4CkqqhH2dymDB4knc=
 github.com/clbanning/x2j v0.0.0-20191024224557-825249438eec/go.mod h1:jMjuTZXRI4dUb/I5gc9Hdhagfvm9+RyrPryS/auMzxE=
 github.com/client9/misspell v0.3.4/go.mod h1:qj6jICC3Q7zFZvVWo7KLAzC3yx5G7kyvSDkc90ppPyw=
+github.com/cloudflare/circl v1.3.3 h1:fE/Qz0QdIGqeWfnwq0RE0R7MI51s0M2E4Ga9kq5AEMs=
+github.com/cloudflare/circl v1.3.3/go.mod h1:5XYMA4rFBvNIrhs50XuiBJ15vF2pZn4nnUKZrLbUZFA=
 github.com/cloudflare/golz4 v0.0.0-20150217214814-ef862a3cdc58 h1:F1EaeKL/ta07PY/k9Os/UFtwERei2/XzGemhpGnBKNg=
 github.com/cloudflare/golz4 v0.0.0-20150217214814-ef862a3cdc58/go.mod h1:EOBUe0h4xcZ5GoxqC5SDxFQ8gwyZPKQoEzownBlhI80=
 github.com/cncf/udpa/go v0.0.0-20191209042840-269d4d468f6f/go.mod h1:M8M6+tZqaGXZJjfX53e64911xZQV5JYwmTeXPW+k8Sc=
@@ -501,12 +501,14 @@ github.com/containerd/console v1.0.2/go.mod h1:ytZPjGgY2oeTkAONYafi2kSj0aYggsf8a
 github.com/containerd/console v1.0.3 h1:lIr7SlA5PxZyMV30bDW0MGbiOPXwc63yRuCP0ARubLw=
 github.com/containerd/console v1.0.3/go.mod h1:7LqA/THxQ86k76b8c/EMSiaJ3h1eZkMkXar0TQ1gf3U=
 github.com/containerd/containerd v1.4.1/go.mod h1:bC6axHOhabU15QhwfG7w5PipXdVtMXFTttgp+kVtyUA=
-github.com/containerd/containerd v1.7.6 h1:oNAVsnhPoy4BTPQivLgTzI9Oleml9l/+eYIDYXRCYo8=
-github.com/containerd/containerd v1.7.6/go.mod h1:SY6lrkkuJT40BVNO37tlYTSnKJnP5AXBc0fhx0q+TJ4=
+github.com/containerd/containerd v1.7.11 h1:lfGKw3eU35sjV0aG2eYZTiwFEY1pCzxdzicHP3SZILw=
+github.com/containerd/containerd v1.7.11/go.mod h1:5UluHxHTX2rdvYuZ5OJTC5m/KJNs0Zs9wVoJm9zf5ZE=
 github.com/containerd/continuity v0.0.0-20181203112020-004b46473808/go.mod h1:GL3xCUCBDV3CZiTSEKksMWbLE66hEyuu9qyDOOqM47Y=
 github.com/containerd/continuity v0.0.0-20190827140505-75bee3e2ccb6/go.mod h1:GL3xCUCBDV3CZiTSEKksMWbLE66hEyuu9qyDOOqM47Y=
 github.com/containerd/continuity v0.4.2 h1:v3y/4Yz5jwnvqPKJJ+7Wf93fyWoCB3F5EclWG023MDM=
 github.com/containerd/continuity v0.4.2/go.mod h1:F6PTNCKepoxEaXLQp3wDAjygEnImnZ/7o4JzpodfroQ=
+github.com/containerd/log v0.1.0 h1:TCJt7ioM2cr/tfR8GPbGf9/VRAX8D2B4PjzCpfX540I=
+github.com/containerd/log v0.1.0/go.mod h1:VRRf09a7mHDIRezVKTRCrOq78v577GXq3bSa3EhrzVo=
 github.com/containerd/ttrpc v1.2.2 h1:9vqZr0pxwOF5koz6N0N3kJ0zDHokrcPxIR/ZR2YFtOs=
 github.com/containerd/ttrpc v1.2.2/go.mod h1:sIT6l32Ph/H9cvnJsfXM5drIVzTr5A2flTf1G5tYZak=
 github.com/containerd/typeurl v1.0.2 h1:Chlt8zIieDbzQFzXzAeBEF92KhExuE4p9p92/QmY7aY=
@@ -576,7 +578,6 @@ github.com/dimchansky/utfbom v1.1.0/go.mod h1:rO41eb7gLfo8SF1jd9F8HplJm1Fewwi4mQ
 github.com/dimchansky/utfbom v1.1.1 h1:vV6w1AhK4VMnhBno/TPVCoK9U/LP0PkLCS9tbxHdi/U=
 github.com/dimchansky/utfbom v1.1.1/go.mod h1:SxdoEBH5qIqFocHMyGOXVAybYJdr71b1Q/j0mACtrfE=
 github.com/dnaeon/go-vcr v1.0.1/go.mod h1:aBB1+wY4s93YsC3HHjMBMrwTj2R9FHDzUr9KyGc8n1E=
-github.com/dnaeon/go-vcr v1.1.0/go.mod h1:M7tiix8f0r6mKKJ3Yq/kqU1OYf3MnfmBWVbPx/yU9ko=
 github.com/dnaeon/go-vcr v1.2.0 h1:zHCHvJYTMh1N7xnV7zf1m1GPBF9Ad0Jk/whtQ1663qI=
 github.com/dnaeon/go-vcr v1.2.0/go.mod h1:R4UdLID7HZT3taECzJs4YgbbH6PIGXB6W/sc5OLb6RQ=
 github.com/docker/cli v20.10.11+incompatible/go.mod h1:JLrzqnKDaYBop7H2jaqPtU4hHvMKP+vjCwu2uszcLI8=
@@ -608,8 +609,8 @@ github.com/dustin/go-humanize v0.0.0-20171111073723-bb3d318650d4/go.mod h1:Htrtb
 github.com/dustin/go-humanize v1.0.0/go.mod h1:HtrtbFcZ19U5GC7JDqmcUSB87Iq5E25KnS6fMYU6eOk=
 github.com/dustin/go-humanize v1.0.1 h1:GzkhY7T5VNhEkwH0PVJgjz+fX1rhBrR7pRT3mDkpeCY=
 github.com/dustin/go-humanize v1.0.1/go.mod h1:Mu1zIs6XwVuF/gI1OepvI0qD18qycQx+mFykh5fBlto=
-github.com/dvsekhvalnov/jose2go v1.5.0 h1:3j8ya4Z4kMCwT5nXIKFSV84YS+HdqSSO0VsTQxaLAeM=
-github.com/dvsekhvalnov/jose2go v1.5.0/go.mod h1:QsHjhyTlD/lAVqn/NSbVZmSCGeDehTB/mPZadG+mhXU=
+github.com/dvsekhvalnov/jose2go v1.6.0 h1:Y9gnSnP4qEI0+/uQkHvFXeD2PLPJeXEL+ySMEA2EjTY=
+github.com/dvsekhvalnov/jose2go v1.6.0/go.mod h1:QsHjhyTlD/lAVqn/NSbVZmSCGeDehTB/mPZadG+mhXU=
 github.com/eapache/go-resiliency v1.1.0/go.mod h1:kFI+JgMyC7bLPUVY133qvEBtVayf5mFgVsvEsIPBvNs=
 github.com/eapache/go-resiliency v1.2.0/go.mod h1:kFI+JgMyC7bLPUVY133qvEBtVayf5mFgVsvEsIPBvNs=
 github.com/eapache/go-resiliency v1.4.0 h1:3OK9bWpPk5q6pbFAaYSEwD9CLUSHG8bnZuqX2yMt3B0=
@@ -633,14 +634,16 @@ github.com/elastic/go-windows v1.0.1/go.mod h1:FoVvqWSun28vaDQPbj2Elfc0JahhPB7WQ
 github.com/elazarl/go-bindata-assetfs v0.0.0-20160803192304-e1a2a7ec64b0/go.mod h1:v+YaWX3bdea5J/mo8dSETolEo7R71Vk1u8bnjau5yw4=
 github.com/elazarl/goproxy v0.0.0-20170405201442-c4fc26588b6e/go.mod h1:/Zj4wYkgs4iZTTu3o/KG3Itv/qCCa8VVMlb3i9OVuzc=
 github.com/elazarl/goproxy v0.0.0-20180725130230-947c36da3153/go.mod h1:/Zj4wYkgs4iZTTu3o/KG3Itv/qCCa8VVMlb3i9OVuzc=
+github.com/elazarl/goproxy v0.0.0-20230808193330-2592e75ae04a h1:mATvB/9r/3gvcejNsXKSkQ6lcIaNec2nyfOdlTBR2lU=
+github.com/elazarl/goproxy v0.0.0-20230808193330-2592e75ae04a/go.mod h1:Ro8st/ElPeALwNFlcTpWmkr6IoMFfkjXAvTHpevnDsM=
 github.com/ema/qdisc v1.0.0 h1:EHLG08FVRbWLg8uRICa3xzC9Zm0m7HyMHfXobWFnXYg=
 github.com/ema/qdisc v1.0.0/go.mod h1:FhIc0fLYi7f+lK5maMsesDqwYojIOh3VfRs8EVd5YJQ=
 github.com/emicklei/go-restful v0.0.0-20170410110728-ff4f55a20633/go.mod h1:otzb+WCGbkyDHkqmQmT5YD2WR4BBwUdeQoFo8l/7tVs=
 github.com/emicklei/go-restful v2.9.5+incompatible/go.mod h1:otzb+WCGbkyDHkqmQmT5YD2WR4BBwUdeQoFo8l/7tVs=
 github.com/emicklei/go-restful/v3 v3.11.0 h1:rAQeMHw1c7zTmncogyy8VvRZwtkmkZ4FxERmMY4rD+g=
 github.com/emicklei/go-restful/v3 v3.11.0/go.mod h1:6n3XBCmQQb25CM2LCACGz8ukIrRry+4bhvbpWn3mrbc=
-github.com/emirpasic/gods v1.12.0 h1:QAUIPSaCu4G+POclxeqb3F+WPpdKqFGlw36+yOzGlrg=
-github.com/emirpasic/gods v1.12.0/go.mod h1:YfzfFFoVP/catgzJb4IKIqXjX78Ha8FMSDh3ymbK86o=
+github.com/emirpasic/gods v1.18.1 h1:FXtiHYKDGKCW2KzwZKx0iC0PQmdlorYgdFG9jPXJ1Bc=
+github.com/emirpasic/gods v1.18.1/go.mod h1:8tpGGwCnJ5H4r6BWwaV6OrWmMoPhUl5jm/FMNAnJvWQ=
 github.com/envoyproxy/go-control-plane v0.0.0-20180919002855-2137d9196328/go.mod h1:SBwIajubJHhxtWwsL9s8ss4safvEdbitLhGGK48rN6g=
 github.com/envoyproxy/go-control-plane v0.6.9/go.mod h1:SBwIajubJHhxtWwsL9s8ss4safvEdbitLhGGK48rN6g=
 github.com/envoyproxy/go-control-plane v0.9.0/go.mod h1:YTl/9mNaCwkRvm6d1a2C3ymFceY/DCBVvsKhRF0iEA4=
@@ -683,7 +686,6 @@ github.com/felixge/fgprof v0.9.3 h1:VvyZxILNuCiUCSXtPtYmmtGvb65nqXh2QFWc0Wpf2/g=
 github.com/felixge/fgprof v0.9.3/go.mod h1:RdbpDgzqYVh/T9fPELJyV7EYJuHB55UTEULNun8eiPw=
 github.com/felixge/httpsnoop v1.0.3 h1:s/nj+GCswXYzN5v2DpNMuMQYe+0DDwt5WVCU6CWBdXk=
 github.com/felixge/httpsnoop v1.0.3/go.mod h1:m8KPJKqk1gH5J9DgRY2ASl2lWCfGKXixSwevea8zH2U=
-github.com/flynn/go-shlex v0.0.0-20150515145356-3f9db97f8568/go.mod h1:xEzjJPgXI435gkrCt3MPfRiAkVrwSbHsst4LCFVfpJc=
 github.com/fogleman/gg v1.2.1-0.20190220221249-0403632d5b90/go.mod h1:R/bRT+9gY/C5z7JzPU0zXsXHKM4/ayA+zqcVNZzPa1k=
 github.com/form3tech-oss/jwt-go v3.2.2+incompatible/go.mod h1:pbq4aXjuKjdthFRnoDwaVPLA+WlJuPGy+QneDUgJi2k=
 github.com/form3tech-oss/jwt-go v3.2.5+incompatible h1:/l4kBbb4/vGSsdtB5nUe8L7B9mImVMaBPw9L/0TBHU8=
@@ -709,19 +711,18 @@ github.com/ghodss/yaml v1.0.0/go.mod h1:4dBDuWmgqj2HViK6kFavaiC9ZROes6MMH2rRYeME
 github.com/ghodss/yaml v1.0.1-0.20190212211648-25d852aebe32/go.mod h1:GIjDIg/heH5DOkXY3YJ/wNhfHsQHoXGjl8G8amsYQ1I=
 github.com/githubexporter/github-exporter v0.0.0-20231025122338-656e7dc33fe7 h1:wT/4jrX36BHZMjkpPYrCY4lJR+HHG7L+cC0M3p5letQ=
 github.com/githubexporter/github-exporter v0.0.0-20231025122338-656e7dc33fe7/go.mod h1:q49R4E4fu+HqGnSSSFpAuJIMm8DV5YNhKBW/Ke9SBPE=
-github.com/gliderlabs/ssh v0.2.2 h1:6zsha5zo/TWhRhwqCD3+EarCAgZ2yN28ipRnGPnwkI0=
-github.com/gliderlabs/ssh v0.2.2/go.mod h1:U7qILu1NlMHj9FlMhZLlkCdDnU1DBEAqr0aevW3Awn0=
+github.com/gliderlabs/ssh v0.3.5 h1:OcaySEmAQJgyYcArR+gGGTHCyE7nvhEMTlYY+Dp8CpY=
+github.com/gliderlabs/ssh v0.3.5/go.mod h1:8XB4KraRrX39qHhT6yxPsHedjA08I/uBVwj4xC+/+z4=
 github.com/glinton/ping v0.1.4-0.20200311211934-5ac87da8cd96/go.mod h1:uY+1eqFUyotrQxF1wYFNtMeHp/swbYRsoGzfcPZ8x3o=
 github.com/go-asn1-ber/asn1-ber v1.3.1/go.mod h1:hEBeB/ic+5LoWskz+yKT7vGhhPYkProFKoKdwZRWMe0=
-github.com/go-git/gcfg v1.5.0 h1:Q5ViNfGF8zFgyJWPqYwA7qGFoMTEiBmdlkcfRmpIMa4=
-github.com/go-git/gcfg v1.5.0/go.mod h1:5m20vg6GwYabIxaOonVkTdrILxQMpEShl1xiMF4ua+E=
-github.com/go-git/go-billy/v5 v5.2.0/go.mod h1:pmpqyWchKfYfrkb/UVH4otLvyi/5gJlGI4Hb3ZqZ3W0=
-github.com/go-git/go-billy/v5 v5.3.1 h1:CPiOUAzKtMRvolEKw+bG1PLRpT7D3LIs3/3ey4Aiu34=
-github.com/go-git/go-billy/v5 v5.3.1/go.mod h1:pmpqyWchKfYfrkb/UVH4otLvyi/5gJlGI4Hb3ZqZ3W0=
-github.com/go-git/go-git-fixtures/v4 v4.2.1 h1:n9gGL1Ct/yIw+nfsfr8s4+sbhT+Ncu2SubfXjIWgci8=
-github.com/go-git/go-git-fixtures/v4 v4.2.1/go.mod h1:K8zd3kDUAykwTdDCr+I0per6Y6vMiRR/nnVTBtavnB0=
-github.com/go-git/go-git/v5 v5.4.2 h1:BXyZu9t0VkbiHtqrsvdq39UDhGJTl1h55VW6CSC4aY4=
-github.com/go-git/go-git/v5 v5.4.2/go.mod h1:gQ1kArt6d+n+BGd+/B/I74HwRTLhth2+zti4ihgckDc=
+github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376 h1:+zs/tPmkDkHx3U66DAb0lQFJrpS6731Oaa12ikc+DiI=
+github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376/go.mod h1:an3vInlBmSxCcxctByoQdvwPiA7DTK7jaaFDBTtu0ic=
+github.com/go-git/go-billy/v5 v5.5.0 h1:yEY4yhzCDuMGSv83oGxiBotRzhwhNr8VZyphhiu+mTU=
+github.com/go-git/go-billy/v5 v5.5.0/go.mod h1:hmexnoNsr2SJU1Ju67OaNz5ASJY3+sHgFRpCtpDCKow=
+github.com/go-git/go-git-fixtures/v4 v4.3.2-0.20231010084843-55a94097c399 h1:eMje31YglSBqCdIqdhKBW8lokaMrL3uTkpGYlE2OOT4=
+github.com/go-git/go-git-fixtures/v4 v4.3.2-0.20231010084843-55a94097c399/go.mod h1:1OCfN199q1Jm3HZlxleg+Dw/mwps2Wbk9frAWm+4FII=
+github.com/go-git/go-git/v5 v5.11.0 h1:XIZc1p+8YzypNr34itUfSvYJcv+eYdTnTvOZ2vD3cA4=
+github.com/go-git/go-git/v5 v5.11.0/go.mod h1:6GFcX2P3NM7FPBfpePbpLd21XxsgdAt+lKqXmCUiUCY=
 github.com/go-gl/glfw v0.0.0-20190409004039-e6da0acd62b1/go.mod h1:vR7hzQXu2zJy9AVAgeJqvqgH9Q5CA+iKCZ2gyEVpxRU=
 github.com/go-gl/glfw/v3.3/glfw v0.0.0-20191125211704-12ad95a8df72/go.mod h1:tQ2UAYgL5IevRw8kRxooKSPJfGvJ9fJQFa0TUsXzTg8=
 github.com/go-gl/glfw/v3.3/glfw v0.0.0-20200222043503-6f7a984d4dc4/go.mod h1:tQ2UAYgL5IevRw8kRxooKSPJfGvJ9fJQFa0TUsXzTg8=
@@ -744,8 +745,8 @@ github.com/go-logfmt/logfmt v0.5.1/go.mod h1:WYhtIu8zTZfxdn5+rREduYbwxfcBr/Vr6KE
 github.com/go-logfmt/logfmt v0.6.0 h1:wGYYu3uicYdqXVgoYbvnkrPVXkuLM1p1ifugDMEdRi4=
 github.com/go-logfmt/logfmt v0.6.0/go.mod h1:WYhtIu8zTZfxdn5+rREduYbwxfcBr/Vr6KEVveWlfTs=
 github.com/go-logr/logr v1.2.2/go.mod h1:jdQByPbusPIv2/zmleS9BjJVeZ6kBagPoEUsqbVz/1A=
-github.com/go-logr/logr v1.3.0 h1:2y3SDp0ZXuc6/cjLSZ+Q3ir+QB9T/iG5yYRXqsagWSY=
-github.com/go-logr/logr v1.3.0/go.mod h1:9T104GzyrTigFIr8wt5mBrctHMim0Nb2HLGrmQ40KvY=
+github.com/go-logr/logr v1.4.1 h1:pKouT5E8xu9zeFC39JXRDukb6JFQPXM5p5I91188VAQ=
+github.com/go-logr/logr v1.4.1/go.mod h1:9T104GzyrTigFIr8wt5mBrctHMim0Nb2HLGrmQ40KvY=
 github.com/go-logr/stdr v1.2.2 h1:hSWxHoqTgW2S2qGc0LTAI563KZ5YKYRhT3MFKZMbjag=
 github.com/go-logr/stdr v1.2.2/go.mod h1:mMo/vtBO5dYbehREoey6XUKy/eSumjCCveDpRre4VKE=
 github.com/go-logr/zapr v1.2.4 h1:QHVo+6stLbfJmYGkQ7uGHUCu5hnAFAj6mDe6Ea0SeOo=
@@ -878,16 +879,14 @@ github.com/gogo/protobuf v1.3.2 h1:Ov1cvc58UF3b5XjBnZv7+opcTcQFZebYjWzi34vdm4Q=
 github.com/gogo/protobuf v1.3.2/go.mod h1:P1XiOD3dCwIKUDQYPy72D8LYyHL2YPYrpS2s69NZV8Q=
 github.com/gogo/status v1.1.1 h1:DuHXlSFHNKqTQ+/ACf5Vs6r4X/dH2EgIzR9Vr+H65kg=
 github.com/gogo/status v1.1.1/go.mod h1:jpG3dM5QPcqu19Hg8lkUhBFBa3TcLs1DG7+2Jqci7oU=
-github.com/golang-jwt/jwt v3.2.1+incompatible/go.mod h1:8pz2t5EyA70fFQQSrl6XZXzqecmYZeUEB8OUGHkxJ+I=
-github.com/golang-jwt/jwt v3.2.2+incompatible/go.mod h1:8pz2t5EyA70fFQQSrl6XZXzqecmYZeUEB8OUGHkxJ+I=
 github.com/golang-jwt/jwt/v4 v4.0.0/go.mod h1:/xlHOz8bRuivTWchD4jCa+NbatV+wEUSzwAxVc6locg=
 github.com/golang-jwt/jwt/v4 v4.2.0/go.mod h1:/xlHOz8bRuivTWchD4jCa+NbatV+wEUSzwAxVc6locg=
 github.com/golang-jwt/jwt/v4 v4.5.0 h1:7cYmW1XlMY7h7ii7UhUyChSgS5wUJEnm9uZVTGqOWzg=
 github.com/golang-jwt/jwt/v4 v4.5.0/go.mod h1:m21LjoU+eqJr34lmDMbreY2eSTRJ1cv77w39/MY0Ch0=
 github.com/golang-jwt/jwt/v5 v5.0.0 h1:1n1XNM9hk7O9mnQoNBGolZvzebBQ7p93ULHRc28XJUE=
 github.com/golang-jwt/jwt/v5 v5.0.0/go.mod h1:pqrtFR0X4osieyHYxtmOUWsAWrfe1Q5UVIyoH402zdk=
-github.com/golang-sql/civil v0.0.0-20190719163853-cb61b32ac6fe h1:lXe2qZdvpiX5WZkZR4hgp4KJVfY3nMkvmwbVkpv1rVY=
-github.com/golang-sql/civil v0.0.0-20190719163853-cb61b32ac6fe/go.mod h1:8vg3r2VgvsThLBIFL93Qb5yWzgyZWhEmBwUJWevAkK0=
+github.com/golang-sql/civil v0.0.0-20220223132316-b832511892a9 h1:au07oEsX2xN0ktxqI+Sida1w446QrXBRJ0nee3SNZlA=
+github.com/golang-sql/civil v0.0.0-20220223132316-b832511892a9/go.mod h1:8vg3r2VgvsThLBIFL93Qb5yWzgyZWhEmBwUJWevAkK0=
 github.com/golang-sql/sqlexp v0.1.0 h1:ZCD6MBpcuOVfGVqsEmY5/4FtYiKz6tSyUv9LPEDei6A=
 github.com/golang-sql/sqlexp v0.1.0/go.mod h1:J4ad9Vo8ZCWQ2GMrC4UCQy1JpCbwU9m3EOqtpKwwwHI=
 github.com/golang/freetype v0.0.0-20170609003504-e2365dfdc4a0/go.mod h1:E/TSTwGwJL78qG/PmXZO1EjYhfJinVAhrmmHX6Z8B9k=
@@ -1013,7 +1012,6 @@ github.com/google/uuid v1.0.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+
 github.com/google/uuid v1.1.1/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
 github.com/google/uuid v1.1.2/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
 github.com/google/uuid v1.2.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
-github.com/google/uuid v1.3.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
 github.com/google/uuid v1.4.0 h1:MtMxsa51/r9yyhkyLsVeVt0B+BGQZzpQiTQ4eHZ8bc4=
 github.com/google/uuid v1.4.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
 github.com/googleapis/enterprise-certificate-proxy v0.3.1 h1:SBWmZhjUDRorQxrN0nwzf+AHBxnbFjViHQS4P0yVpmQ=
@@ -1329,8 +1327,8 @@ github.com/jackc/pgconn v0.0.0-20190831204454-2fabfa3c18b7/go.mod h1:ZJKsE/KZfsU
 github.com/jackc/pgconn v1.8.0/go.mod h1:1C2Pb36bGIP9QHGBYCjnyhqu7Rv3sGshaQUvmfGIB/o=
 github.com/jackc/pgconn v1.9.0/go.mod h1:YctiPyvzfU11JFxoXokUOOKQXQmDMoJL9vJzHH8/2JY=
 github.com/jackc/pgconn v1.9.1-0.20210724152538-d89c8390a530/go.mod h1:4z2w8XhRbP1hYxkpTuBjTS3ne3J48K83+u0zoyvg2pI=
-github.com/jackc/pgconn v1.13.0 h1:3L1XMNV2Zvca/8BYhzcRFS70Lr0WlDg16Di6SFGAbys=
-github.com/jackc/pgconn v1.13.0/go.mod h1:AnowpAqO4CMIIJNZl2VJp+KrkAZciAkhEl0W0JIobpI=
+github.com/jackc/pgconn v1.14.0 h1:vrbA9Ud87g6JdFWkHTJXppVce58qPIdP7N8y0Ml/A7Q=
+github.com/jackc/pgconn v1.14.0/go.mod h1:9mBNlny0UvkgJdCDvdVHYSjI+8tD2rnKK69Wz8ti++E=
 github.com/jackc/pgio v1.0.0 h1:g12B9UwVnzGhueNavwioyEEpAmqMe1E/BN9ES+8ovkE=
 github.com/jackc/pgio v1.0.0/go.mod h1:oP+2QK2wFfUWgr+gxjoBH9KGBb31Eio69xUb0w5bYf8=
 github.com/jackc/pgmock v0.0.0-20190831213851-13a1b77aafa2/go.mod h1:fGZlG77KXmcq05nJLRkk0+p82V8B8Dw8KN2/V9c/OAE=
@@ -1346,23 +1344,24 @@ github.com/jackc/pgproto3/v2 v2.0.0-rc3/go.mod h1:ryONWYqW6dqSg1Lw6vXNMXoBJhpzvW
 github.com/jackc/pgproto3/v2 v2.0.0-rc3.0.20190831210041-4c03ce451f29/go.mod h1:ryONWYqW6dqSg1Lw6vXNMXoBJhpzvWKnT95C46ckYeM=
 github.com/jackc/pgproto3/v2 v2.0.6/go.mod h1:WfJCnwN3HIg9Ish/j3sgWXnAfK8A9Y0bwXYU5xKaEdA=
 github.com/jackc/pgproto3/v2 v2.1.1/go.mod h1:WfJCnwN3HIg9Ish/j3sgWXnAfK8A9Y0bwXYU5xKaEdA=
-github.com/jackc/pgproto3/v2 v2.3.1 h1:nwj7qwf0S+Q7ISFfBndqeLwSwxs+4DPsbRFjECT1Y4Y=
-github.com/jackc/pgproto3/v2 v2.3.1/go.mod h1:WfJCnwN3HIg9Ish/j3sgWXnAfK8A9Y0bwXYU5xKaEdA=
-github.com/jackc/pgservicefile v0.0.0-20200714003250-2b9c44734f2b h1:C8S2+VttkHFdOOCXJe+YGfa4vHYwlt4Zx+IVXQ97jYg=
+github.com/jackc/pgproto3/v2 v2.3.2 h1:7eY55bdBeCz1F2fTzSz69QC+pG46jYq9/jtSPiJ5nn0=
+github.com/jackc/pgproto3/v2 v2.3.2/go.mod h1:WfJCnwN3HIg9Ish/j3sgWXnAfK8A9Y0bwXYU5xKaEdA=
 github.com/jackc/pgservicefile v0.0.0-20200714003250-2b9c44734f2b/go.mod h1:vsD4gTJCa9TptPL8sPkXrLZ+hDuNrZCnj29CQpr4X1E=
+github.com/jackc/pgservicefile v0.0.0-20221227161230-091c0ba34f0a h1:bbPeKD0xmW/Y25WS6cokEszi5g+S0QxI/d45PkRi7Nk=
+github.com/jackc/pgservicefile v0.0.0-20221227161230-091c0ba34f0a/go.mod h1:5TJZWKEWniPve33vlWYSoGYefn3gLQRzjfDlhSJ9ZKM=
 github.com/jackc/pgtype v0.0.0-20190421001408-4ed0de4755e0/go.mod h1:hdSHsc1V01CGwFsrv11mJRHWJ6aifDLfdV3aVjFF0zg=
 github.com/jackc/pgtype v0.0.0-20190824184912-ab885b375b90/go.mod h1:KcahbBH1nCMSo2DXpzsoWOAfFkdEtEJpPbVLq8eE+mc=
 github.com/jackc/pgtype v0.0.0-20190828014616-a8802b16cc59/go.mod h1:MWlu30kVJrUS8lot6TQqcg7mtthZ9T0EoIBFiJcmcyw=
 github.com/jackc/pgtype v1.8.1-0.20210724151600-32e20a603178/go.mod h1:C516IlIV9NKqfsMCXTdChteoXmwgUceqaLfjg2e3NlM=
-github.com/jackc/pgtype v1.12.0 h1:Dlq8Qvcch7kiehm8wPGIW0W3KsCCHJnRacKW0UM8n5w=
-github.com/jackc/pgtype v1.12.0/go.mod h1:LUMuVrfsFfdKGLw+AFFVv6KtHOFMwRgDDzBt76IqCA4=
+github.com/jackc/pgtype v1.14.0 h1:y+xUdabmyMkJLyApYuPj38mW+aAIqCe5uuBB51rH3Vw=
+github.com/jackc/pgtype v1.14.0/go.mod h1:LUMuVrfsFfdKGLw+AFFVv6KtHOFMwRgDDzBt76IqCA4=
 github.com/jackc/pgx v3.6.0+incompatible/go.mod h1:0ZGrqGqkRlliWnWB4zKnWtjbSWbGkVEFm4TeybAXq+I=
 github.com/jackc/pgx/v4 v4.0.0-20190420224344-cc3461e65d96/go.mod h1:mdxmSJJuR08CZQyj1PVQBHy9XOp5p8/SHH6a0psbY9Y=
 github.com/jackc/pgx/v4 v4.0.0-20190421002000-1b8f0016e912/go.mod h1:no/Y67Jkk/9WuGR0JG/JseM9irFbnEPbuWV2EELPNuM=
 github.com/jackc/pgx/v4 v4.0.0-pre1.0.20190824185557-6972a5742186/go.mod h1:X+GQnOEnf1dqHGpw7JmHqHc1NxDoalibchSk9/RWuDc=
 github.com/jackc/pgx/v4 v4.12.1-0.20210724153913-640aa07df17c/go.mod h1:1QD0+tgSXP7iUjYm9C1NxKhny7lq6ee99u/z+IHFcgs=
-github.com/jackc/pgx/v4 v4.17.2 h1:0Ut0rpeKwvIVbMQ1KbMBU4h6wxehBI535LK6Flheh8E=
-github.com/jackc/pgx/v4 v4.17.2/go.mod h1:lcxIZN44yMIrWI78a5CpucdD14hX0SBDbNRvjDBItsw=
+github.com/jackc/pgx/v4 v4.18.1 h1:YP7G1KABtKpB5IHrO9vYwSrCOhs7p3uqhvhhQBptya0=
+github.com/jackc/pgx/v4 v4.18.1/go.mod h1:FydWkUyadDmdNH/mHnGob881GawxeEm7TcMCzkb+qQE=
 github.com/jackc/puddle v0.0.0-20190413234325-e4ced69a3a2b/go.mod h1:m4B5Dj62Y0fbyuIc15OsIqK0+JU8nkqQjsgx7dvjSWk=
 github.com/jackc/puddle v0.0.0-20190608224051-11cab39313c9/go.mod h1:m4B5Dj62Y0fbyuIc15OsIqK0+JU8nkqQjsgx7dvjSWk=
 github.com/jackc/puddle v1.1.3/go.mod h1:m4B5Dj62Y0fbyuIc15OsIqK0+JU8nkqQjsgx7dvjSWk=
@@ -1383,14 +1382,12 @@ github.com/jcmturner/gofork v1.7.6 h1:QH0l3hzAU1tfT3rZCnW5zXl+orbkNMMRGJfdJjHVET
 github.com/jcmturner/gofork v1.7.6/go.mod h1:1622LH6i/EZqLloHfE7IeZ0uEJwMSUyQ/nDd82IeqRo=
 github.com/jcmturner/goidentity/v6 v6.0.1 h1:VKnZd2oEIMorCTsFBnJWbExfNN7yZr3EhJAxwOkZg6o=
 github.com/jcmturner/goidentity/v6 v6.0.1/go.mod h1:X1YW3bgtvwAXju7V3LCIMpY0Gbxyjn/mY9zx4tFonSg=
-github.com/jcmturner/gokrb5/v8 v8.4.2/go.mod h1:sb+Xq/fTY5yktf/VxLsE3wlfPqQjp0aWNYyvBVK62bc=
 github.com/jcmturner/gokrb5/v8 v8.4.4 h1:x1Sv4HaTpepFkXbt2IkL29DXRf8sOfZXo8eRKh687T8=
 github.com/jcmturner/gokrb5/v8 v8.4.4/go.mod h1:1btQEpgT6k+unzCwX1KdWMEwPPkkgBtP+F6aCACiMrs=
 github.com/jcmturner/rpc/v2 v2.0.3 h1:7FXXj8Ti1IaVFpSAziCZWNzbNuZmnvw/i6CqLNdWfZY=
 github.com/jcmturner/rpc/v2 v2.0.3/go.mod h1:VUJYCIDm3PVOEHw8sgt091/20OJjskO/YJki3ELg/Hc=
 github.com/jefferai/jsonx v0.0.0-20160721235117-9cc31c3135ee/go.mod h1:N0t2vlmpe8nyZB5ouIbJQPDSR+mH6oe7xHB9VZHSUzM=
 github.com/jessevdk/go-flags v1.4.0/go.mod h1:4FA24M0QyGHXBuZZK/XkWh8h0e1EYbRYJSGM75WSRxI=
-github.com/jessevdk/go-flags v1.5.0/go.mod h1:Fw0T6WPc1dYxT4mKEZRfG5kJhaTDP9pj1c2EWnYs/m4=
 github.com/jhump/protoreflect v1.6.0/go.mod h1:eaTn3RZAmMBcV0fifFvlm6VHNz3wSkYyXYWUh7ymB74=
 github.com/jmespath/go-jmespath v0.0.0-20160202185014-0b12d6b521d8/go.mod h1:Nht3zPeWKUH0NzdCt2Blrr5ys8VGpn0CEB0cQHVjt7k=
 github.com/jmespath/go-jmespath v0.0.0-20180206201540-c2b33e8439af/go.mod h1:Nht3zPeWKUH0NzdCt2Blrr5ys8VGpn0CEB0cQHVjt7k=
@@ -1443,9 +1440,8 @@ github.com/karrick/godirwalk v1.16.1/go.mod h1:j4mkqPuvaLI8mp1DroR3P6ad7cyYd4c1q
 github.com/karrick/godirwalk v1.17.0 h1:b4kY7nqDdioR/6qnbHQyDvmA17u5G1cZ6J+CZXwSWoI=
 github.com/karrick/godirwalk v1.17.0/go.mod h1:j4mkqPuvaLI8mp1DroR3P6ad7cyYd4c1qeJ3RV7ULlk=
 github.com/kballard/go-shellquote v0.0.0-20180428030007-95032a82bc51/go.mod h1:CzGEWj7cYgsdH8dAjBGEr58BoE7ScuLd+fwFZ44+/x8=
-github.com/kevinburke/ssh_config v0.0.0-20201106050909-4977a11b4351/go.mod h1:CT57kijsi8u/K/BOFA39wgDQJ9CxiF4nAY/ojJ6r6mM=
-github.com/kevinburke/ssh_config v1.1.0 h1:pH/t1WS9NzT8go394IqZeJTMHVm6Cr6ZJ6AQ+mdNo/o=
-github.com/kevinburke/ssh_config v1.1.0/go.mod h1:CT57kijsi8u/K/BOFA39wgDQJ9CxiF4nAY/ojJ6r6mM=
+github.com/kevinburke/ssh_config v1.2.0 h1:x584FjTGwHzMwvHx18PXxbBVzfnxogHaAReU4gf13a4=
+github.com/kevinburke/ssh_config v1.2.0/go.mod h1:CT57kijsi8u/K/BOFA39wgDQJ9CxiF4nAY/ojJ6r6mM=
 github.com/keybase/go-crypto v0.0.0-20180614160407-5114a9a81e1b/go.mod h1:ghbZscTyKdM07+Fw3KSi0hcJm+AlEUWj8QLlPtijN/M=
 github.com/kisielk/errcheck v1.1.0/go.mod h1:EZBBE59ingxPouuu3KfxchcWSUPOHkagtvWXihfKN4Q=
 github.com/kisielk/errcheck v1.2.0/go.mod h1:/BMXB+zMLi60iA8Vv6Ksmxu/1UDYcXs4uQLJ+jE2L00=
@@ -1499,8 +1495,8 @@ github.com/lib/pq v1.2.0/go.mod h1:5WUZQaWbwv1U+lTReE5YruASi9Al49XbQIvNi/34Woo=
 github.com/lib/pq v1.3.0/go.mod h1:5WUZQaWbwv1U+lTReE5YruASi9Al49XbQIvNi/34Woo=
 github.com/lib/pq v1.10.1/go.mod h1:AlVN5x4E4T544tWzH6hKfbfQvm3HdbOxrmggDNAPY9o=
 github.com/lib/pq v1.10.2/go.mod h1:AlVN5x4E4T544tWzH6hKfbfQvm3HdbOxrmggDNAPY9o=
-github.com/lib/pq v1.10.7 h1:p7ZhMD+KsSRozJr34udlUrhboJwWAgCg34+/ZZNvZZw=
-github.com/lib/pq v1.10.7/go.mod h1:AlVN5x4E4T544tWzH6hKfbfQvm3HdbOxrmggDNAPY9o=
+github.com/lib/pq v1.10.9 h1:YXG7RB+JIjhP29X+OtkiDnYaXQwpS4JEWq7dtCCRUEw=
+github.com/lib/pq v1.10.9/go.mod h1:AlVN5x4E4T544tWzH6hKfbfQvm3HdbOxrmggDNAPY9o=
 github.com/lightstep/go-expohisto v1.0.0 h1:UPtTS1rGdtehbbAF7o/dhkWLTDI73UifG8LbfQI7cA4=
 github.com/lightstep/go-expohisto v1.0.0/go.mod h1:xDXD0++Mu2FOaItXtdDfksfgxfV0z1TMPa+e/EUd0cs=
 github.com/lightstep/lightstep-tracer-common/golang/gogo v0.0.0-20190605223551-bc2310a04743/go.mod h1:qklhhLq1aX+mtWk9cPHPzaBjWImj5ULL6C7HFJtXQMM=
@@ -1529,8 +1525,6 @@ github.com/mailru/easyjson v0.7.7 h1:UGYAvKxe3sBsEDzO8ZeWOSlIQfWFlxbzLZe7hwFURr0
 github.com/mailru/easyjson v0.7.7/go.mod h1:xzfreul335JAWq5oZzymOObrkdz5UnU4kGfJJLY9Nlc=
 github.com/markbates/oncer v0.0.0-20181203154359-bf2de49a0be2/go.mod h1:Ld9puTsIW75CHf65OeIOkyKbteujpZVXDpWK6YGZbxE=
 github.com/markbates/safe v1.0.1/go.mod h1:nAqgmRi7cY2nqMc92/bSEeQA+R4OheNU2T1kNSCBdG0=
-github.com/matryer/is v1.2.0 h1:92UTHpy8CDwaJ08GqLDzhhuixiBUUD1p3AU6PHddz4A=
-github.com/matryer/is v1.2.0/go.mod h1:2fLPjFQM9rhQ15aVEtbuwhJinnOqrmgXPNdZsdwlWXA=
 github.com/mattn/go-colorable v0.0.9/go.mod h1:9vuHe8Xs5qXnSaW/c/ABM9alt+Vo+STaOChaDxuIBZU=
 github.com/mattn/go-colorable v0.1.1/go.mod h1:FuOcm+DKB9mbwrcAfNl7/TZVBZ6rcnceauSikq3lYCQ=
 github.com/mattn/go-colorable v0.1.4/go.mod h1:U0ppj6V5qS13XJ6of8GYAs25YV2eR4EVcfRqFIhoBtE=
@@ -1582,8 +1576,8 @@ github.com/mdlayher/wifi v0.1.0 h1:y8wYRUXwok5CtUZOXT3egghYesX0O79E3ALl+SIDm9Q=
 github.com/mdlayher/wifi v0.1.0/go.mod h1:+gBYnZAMcUKHSFzMJXwlz7tLsEHgwDJ9DJCefhJM+gI=
 github.com/metalmatze/signal v0.0.0-20210307161603-1c9aa721a97a h1:0usWxe5SGXKQovz3p+BiQ81Jy845xSMu2CWKuXsXuUM=
 github.com/metalmatze/signal v0.0.0-20210307161603-1c9aa721a97a/go.mod h1:3OETvrxfELvGsU2RoGGWercfeZ4bCL3+SOwzIWtJH/Q=
-github.com/microsoft/go-mssqldb v0.19.0 h1:LMRSgLcNMF8paPX14xlyQBmBH+jnFylPsYpVZf86eHM=
-github.com/microsoft/go-mssqldb v0.19.0/go.mod h1:ukJCBnnzLzpVF0qYRT+eg1e+eSwjeQ7IvenUv8QPook=
+github.com/microsoft/go-mssqldb v1.6.0 h1:mM3gYdVwEPFrlg/Dvr2DNVEgYFG7L42l+dGc67NNNpc=
+github.com/microsoft/go-mssqldb v1.6.0/go.mod h1:00mDtPbeQCRGC1HwOOR5K/gr30P1NcEG0vx6Kbv2aJU=
 github.com/miekg/dns v1.0.14/go.mod h1:W1PPwlIAgtquWBMBEV9nkV9Cazfe8ScdGz/Lj7v3Nrg=
 github.com/miekg/dns v1.1.25/go.mod h1:bPDLeHnStXmXAq1m/Ch/hvfNHr14JKNPMBo3VZKjuso=
 github.com/miekg/dns v1.1.26/go.mod h1:bPDLeHnStXmXAq1m/Ch/hvfNHr14JKNPMBo3VZKjuso=
@@ -1649,9 +1643,7 @@ github.com/modern-go/reflect2 v0.0.0-20180701023420-4b7aa43c6742/go.mod h1:bx2lN
 github.com/modern-go/reflect2 v1.0.1/go.mod h1:bx2lNnkwVCuqBIxFjflWJWanXIb3RllmbCylyMrvgv0=
 github.com/modern-go/reflect2 v1.0.2 h1:xBagoLtFs94CBntxluKeaWgTMpvLxC4ur3nMaC9Gz0M=
 github.com/modern-go/reflect2 v1.0.2/go.mod h1:yWuevngMOJpCy52FWWMvUC8ws7m/LJsjYzDa0/r8luk=
-github.com/modocache/gover v0.0.0-20171022184752-b58185e213c5/go.mod h1:caMODM3PzxT8aQXRPkAt8xlV/e7d7w8GM5g0fa5F0D8=
 github.com/montanaflynn/stats v0.0.0-20171201202039-1bf9dbcd8cbe/go.mod h1:wL8QJuTMNUDYhXwkmfOly8iTdp5TEcJFWZD2D7SIkUc=
-github.com/montanaflynn/stats v0.6.6/go.mod h1:etXPPgVO6n31NxCd9KQUMvCM+ve0ruNzt6R8Bnaayow=
 github.com/montanaflynn/stats v0.7.0 h1:r3y12KyNxj/Sb/iOE46ws+3mS1+MZca1wlHQFPsY/JU=
 github.com/montanaflynn/stats v0.7.0/go.mod h1:etXPPgVO6n31NxCd9KQUMvCM+ve0ruNzt6R8Bnaayow=
 github.com/morikuni/aec v1.0.0 h1:nP9CBfwrvYnBRgY6qfDQkygYDmYwOilePFkwzv4dU8A=
@@ -1904,7 +1896,8 @@ github.com/pierrec/lz4 v2.6.1+incompatible h1:9UY3+iC23yxF0UfGaYrGplQ+79Rg+h/q9F
 github.com/pierrec/lz4 v2.6.1+incompatible/go.mod h1:pdkljMzZIN41W+lC3N2tnIh5sFi+IEE17M5jbnwPHcY=
 github.com/pierrec/lz4/v4 v4.1.18 h1:xaKrnTkyoqfh1YItXl56+6KJNVYWlEEPuAQW9xsplYQ=
 github.com/pierrec/lz4/v4 v4.1.18/go.mod h1:gZWDp/Ze/IJXGXf23ltt2EXimqmTUXEy0GFuRQyBid4=
-github.com/pkg/browser v0.0.0-20210115035449-ce105d075bb4/go.mod h1:N6UoU20jOqggOuDwUaBQpluzLNDqif3kq9z2wpdYEfQ=
+github.com/pjbgf/sha1cd v0.3.0 h1:4D5XXmUUBUl/xQ6IjCkEAbqXskkq/4O7LmGn0AqMDs4=
+github.com/pjbgf/sha1cd v0.3.0/go.mod h1:nZ1rrWOcGJ5uZgEEVL1VUM9iRQiZvWdbZjkKyFzPPsI=
 github.com/pkg/browser v0.0.0-20210911075715-681adbf594b8 h1:KoWmjvw+nsYOo29YJK9vDA65RGE3NrOnUtO7a+RF9HU=
 github.com/pkg/browser v0.0.0-20210911075715-681adbf594b8/go.mod h1:HKlIX3XHQyzLZPlr7++PzdhaXEj94dEiJgZDTsxEqUI=
 github.com/pkg/diff v0.0.0-20210226163009-20ebb0f2a09e/go.mod h1:pJLUxLENpZxwdsKMEsNbx1VGcRFpLqf3715MtcvvzbA=
@@ -1993,8 +1986,8 @@ github.com/prometheus/consul_exporter v0.8.0/go.mod h1:KHTgkT1/oLpXKC4+mKZV63hZS
 github.com/prometheus/exporter-toolkit v0.6.0/go.mod h1:ZUBIj498ePooX9t/2xtDjeQYwvRpiPP2lh5u4iblj2g=
 github.com/prometheus/exporter-toolkit v0.7.0/go.mod h1:ZUBIj498ePooX9t/2xtDjeQYwvRpiPP2lh5u4iblj2g=
 github.com/prometheus/exporter-toolkit v0.7.1/go.mod h1:ZUBIj498ePooX9t/2xtDjeQYwvRpiPP2lh5u4iblj2g=
-github.com/prometheus/exporter-toolkit v0.10.1-0.20230714054209-2f4150c63f97 h1:oHcfzdJnM/SFppy2aUlvomk37GI33x9vgJULihE5Dt8=
-github.com/prometheus/exporter-toolkit v0.10.1-0.20230714054209-2f4150c63f97/go.mod h1:LoBCZeRh+5hX+fSULNyFnagYlQG/gBsyA/deNzROkq8=
+github.com/prometheus/exporter-toolkit v0.11.0 h1:yNTsuZ0aNCNFQ3aFTD2uhPOvr4iD7fdBvKPAEGkNf+g=
+github.com/prometheus/exporter-toolkit v0.11.0/go.mod h1:BVnENhnNecpwoTLiABx7mrPB/OLRIgN74qlQbV+FK1Q=
 github.com/prometheus/memcached_exporter v0.13.0 h1:d246RYODFCXy39XA8S2PBrqp5jLCSvl9b4KsYspDCHk=
 github.com/prometheus/memcached_exporter v0.13.0/go.mod h1:fp7Wk6v0RFijeP3Syvd1TShBSJoCG5iFfvPdi5dCMEU=
 github.com/prometheus/procfs v0.0.0-20180408092902-8b1c2da0d56d/go.mod h1:c3At6R/oaqEKCNdg8wHV1ftS6bRYblBhIjjI8uT2IGk=
@@ -2115,6 +2108,8 @@ github.com/sirupsen/logrus v1.7.0/go.mod h1:yWOB1SBYBC5VeMP7gHvWumXLIWorT60ONWic
 github.com/sirupsen/logrus v1.8.1/go.mod h1:yWOB1SBYBC5VeMP7gHvWumXLIWorT60ONWic61uBYv0=
 github.com/sirupsen/logrus v1.9.3 h1:dueUQJ1C2q9oE3F7wvmSGAaVtTmUizReu6fjN8uqzbQ=
 github.com/sirupsen/logrus v1.9.3/go.mod h1:naHLuLoDiP4jHNo9R0sCBMtWGeIprob74mVsIT4qYEQ=
+github.com/skeema/knownhosts v1.2.1 h1:SHWdIUa82uGZz+F+47k8SY4QhhI291cXCpopT1lK2AQ=
+github.com/skeema/knownhosts v1.2.1/go.mod h1:xYbVRSPxqBZFrdmDyMmsOs+uX1UZC3nTN3ThzgDxUwo=
 github.com/smarty/assertions v1.15.0 h1:cR//PqUBUiQRakZWqBiFFQ9wb8emQGDb0HeGdqGByCY=
 github.com/smarty/assertions v1.15.0/go.mod h1:yABtdzeQs6l1brC900WlRNwj6ZR55d7B+E8C6HtKdec=
 github.com/smartystreets/assertions v0.0.0-20180820201707-7c9eb446e3cf/go.mod h1:OnSkiWE9lh6wB0YB77sQom3nweQdgAjqCqsofrRNTgc=
@@ -2123,8 +2118,8 @@ github.com/smartystreets/goconvey v0.0.0-20180222194500-ef6db91d284a/go.mod h1:X
 github.com/smartystreets/goconvey v1.6.4/go.mod h1:syvi0/a8iFYH4r/RixwvyeAJjdLS9QV7WQ/tjFTllLA=
 github.com/smartystreets/goconvey v1.8.1 h1:qGjIddxOk4grTu9JPOU31tVfq3cNdBlNa5sSznIX1xY=
 github.com/smartystreets/goconvey v1.8.1/go.mod h1:+/u4qLyY6x1jReYOp7GOM2FSt8aP9CzCZL03bI28W60=
-github.com/snowflakedb/gosnowflake v1.6.22 h1:2crLpqmFVyV03NPAxxAtzQBMFn6wUPqOJ1uRl4ruOJ4=
-github.com/snowflakedb/gosnowflake v1.6.22/go.mod h1:P2fE/xiD2kQXpr48OdgnazkzPsKD6aVtnHD3WP8yD9c=
+github.com/snowflakedb/gosnowflake v1.7.2-0.20240103203018-f1d625f17408 h1:uhlKs7Mu7Pc1eLUFGOzBIUA7m7YKyMYu7egQ1LMYAik=
+github.com/snowflakedb/gosnowflake v1.7.2-0.20240103203018-f1d625f17408/go.mod h1:xVuVfmC5OturIIXxT0TPTyLPGLSNZaDbgJh2AIIWzLE=
 github.com/softlayer/softlayer-go v0.0.0-20180806151055-260589d94c7d h1:bVQRCxQvfjNUeRqaY/uT0tFuvuFY0ulgnczuR684Xic=
 github.com/softlayer/softlayer-go v0.0.0-20180806151055-260589d94c7d/go.mod h1:Cw4GTlQccdRGSEf6KiMju767x0NEHE0YIVPJSaXjlsw=
 github.com/soheilhy/cmux v0.1.4/go.mod h1:IM3LyeVVIOuxMH7sFAkER9+bJ4dT7Ms6E4xg4kGIyLM=
@@ -2231,8 +2226,8 @@ github.com/uber/jaeger-lib v2.4.1+incompatible h1:td4jdvLcExb4cBISKIpHuGoVXh+dVK
 github.com/uber/jaeger-lib v2.4.1+incompatible/go.mod h1:ComeNDZlWwrWnDv8aPp0Ba6+uUTzImX/AauajbLI56U=
 github.com/urfave/cli v1.20.0/go.mod h1:70zkFmudgCuE/ngEzBv17Jvp/497gISqfk5gWijbERA=
 github.com/urfave/cli v1.22.1/go.mod h1:Gos4lmkARVdJ6EkW0WaNv/tZAAMe9V7XWyB60NtXRu0=
-github.com/vertica/vertica-sql-go v1.3.0 h1:oZL8PgwrpALegtTFhImsaJvg5oQd2G7v7Uai97X9Xp8=
-github.com/vertica/vertica-sql-go v1.3.0/go.mod h1:jnn2GFuv+O2Jcjktb7zyc4Utlbu9YVqpHH/lx63+1M4=
+github.com/vertica/vertica-sql-go v1.3.3 h1:fL+FKEAEy5ONmsvya2WH5T8bhkvY27y/Ik3ReR2T+Qw=
+github.com/vertica/vertica-sql-go v1.3.3/go.mod h1:jnn2GFuv+O2Jcjktb7zyc4Utlbu9YVqpHH/lx63+1M4=
 github.com/vincent-petithory/dataurl v1.0.0 h1:cXw+kPto8NLuJtlMsI152irrVw9fRDX8AbShPRpg2CI=
 github.com/vincent-petithory/dataurl v1.0.0/go.mod h1:FHafX5vmDzyP+1CQATJn7WFKc9CvnvxyvZy6I1MrG/U=
 github.com/vishvananda/netlink v0.0.0-20171020171820-b2de5d10e38e/go.mod h1:+SR5DhBJrl6ZM7CoCKvpw5BKroDKQ+PJqOg65H/2ktk=
@@ -2264,9 +2259,8 @@ github.com/wk8/go-ordered-map v0.2.0 h1:KlvGyHstD1kkGZkPtHCyCfRYS0cz84uk6rrW/Dnh
 github.com/wk8/go-ordered-map v0.2.0/go.mod h1:9ZIbRunKbuvfPKyBP1SIKLcXNlv74YCOZ3t3VTS6gRk=
 github.com/wvanbergen/kafka v0.0.0-20171203153745-e2edea948ddf/go.mod h1:nxx7XRXbR9ykhnC8lXqQyJS0rfvJGxKyKw/sT1YOttg=
 github.com/wvanbergen/kazoo-go v0.0.0-20180202103751-f72d8611297a/go.mod h1:vQQATAGxVK20DC1rRubTJbZDDhhpA4QfU02pMdPxGO4=
-github.com/xanzy/ssh-agent v0.3.0/go.mod h1:3s9xbODqPuuhK9JV1R321M/FlMZSBvE5aY6eAcqrDh0=
-github.com/xanzy/ssh-agent v0.3.1 h1:AmzO1SSWxw73zxFZPRwaMN1MohDw8UyHnmuxyceTEGo=
-github.com/xanzy/ssh-agent v0.3.1/go.mod h1:QIE4lCeL7nkC25x+yA3LBIYfwCc1TFziCtG7cBAac6w=
+github.com/xanzy/ssh-agent v0.3.3 h1:+/15pJfg/RsTxqYcX6fHqOXZwwMP+2VyYWJeWM2qQFM=
+github.com/xanzy/ssh-agent v0.3.3/go.mod h1:6dzNDKs0J9rVPHPhaGCukekBHKqfl+L3KghI1Bc68Uw=
 github.com/xdg-go/pbkdf2 v1.0.0 h1:Su7DPu48wXMwC3bs7MCNG+z4FhcyEuz5dlvchbq0B0c=
 github.com/xdg-go/pbkdf2 v1.0.0/go.mod h1:jrpuAogTd400dnrH08LKmI/xc1MbPOebTwRqcT5RDeI=
 github.com/xdg-go/scram v1.0.2/go.mod h1:1WAq6h33pAW+iRreB34OORO2Nf7qel3VV3fjBj+hCSs=
@@ -2291,8 +2285,8 @@ github.com/xeipuuv/gojsonschema v1.2.0/go.mod h1:anYRn/JVcOK2ZgGU+IjEV4nwlhoK5sQ
 github.com/xhit/go-str2duration/v2 v2.1.0 h1:lxklc02Drh6ynqX+DdPyp5pCKLUQpRT8bp8Ydu2Bstc=
 github.com/xhit/go-str2duration/v2 v2.1.0/go.mod h1:ohY8p+0f07DiV6Em5LKB0s2YpLtXVyJfNt1+BlmyAsU=
 github.com/xiang90/probing v0.0.0-20190116061207-43a291ad63a2/go.mod h1:UETIi67q53MR2AWcXfiuqkDkRtnGDLqkBTpCHuJHxtU=
-github.com/xo/dburl v0.13.0 h1:kq+oD1j/m8DnJ/p6G/LQXRosVchs8q5/AszEUKkvYfo=
-github.com/xo/dburl v0.13.0/go.mod h1:K6rSPgbVqP3ZFT0RHkdg/M3M5KhLeV2MaS/ZqaLd1kA=
+github.com/xo/dburl v0.20.0 h1:v601OhM9J4Zh56R270ncM9HRgoxp39tf9+nt5ft9UD0=
+github.com/xo/dburl v0.20.0/go.mod h1:B7/G9FGungw6ighV8xJNwWYQPMfn3gsi2sn5SE8Bzco=
 github.com/youmark/pkcs8 v0.0.0-20181117223130-1be2e3e5546d h1:splanxYIlg+5LfHAM6xpdFEAYOk8iySO56hMFq6uLyA=
 github.com/youmark/pkcs8 v0.0.0-20181117223130-1be2e3e5546d/go.mod h1:rHwXgn7JulP+udvsHwJoVG1YGAP6VLg4y9I5dyZdqmA=
 github.com/yuin/goldmark v1.1.25/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74=
@@ -2476,7 +2470,6 @@ go4.org/netipx v0.0.0-20230125063823-8449b0a6169f/go.mod h1:tgPU4N2u9RByaTN3NC2p
 golang.org/x/crypto v0.0.0-20180904163835-0709b304e793/go.mod h1:6SG95UA2DQfeDnfUPMdvaQW0Q7yPrPDi9nlGo2tz2b4=
 golang.org/x/crypto v0.0.0-20181029021203-45a5f77698d3/go.mod h1:6SG95UA2DQfeDnfUPMdvaQW0Q7yPrPDi9nlGo2tz2b4=
 golang.org/x/crypto v0.0.0-20190211182817-74369b46fc67/go.mod h1:6SG95UA2DQfeDnfUPMdvaQW0Q7yPrPDi9nlGo2tz2b4=
-golang.org/x/crypto v0.0.0-20190219172222-a4c6cb3142f2/go.mod h1:6SG95UA2DQfeDnfUPMdvaQW0Q7yPrPDi9nlGo2tz2b4=
 golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
 golang.org/x/crypto v0.0.0-20190325154230-a5d413f7728c/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
 golang.org/x/crypto v0.0.0-20190411191339-88737f569e3a/go.mod h1:WFFai1msRO1wXaEeE5yQxYXgSfI8pQAWXbQop6sCtWE=
@@ -2499,25 +2492,24 @@ golang.org/x/crypto v0.0.0-20200323165209-0ec3e9974c59/go.mod h1:LzIPMQfyMNhhGPh
 golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto=
 golang.org/x/crypto v0.0.0-20200820211705-5c72a883971a/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto=
 golang.org/x/crypto v0.0.0-20201002170205-7f63de1d35b0/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto=
-golang.org/x/crypto v0.0.0-20201112155050-0c6587e931a9/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto=
 golang.org/x/crypto v0.0.0-20201203163018-be400aefbc4c/go.mod h1:jdWPYTVW3xRLrWPugEBEK3UY2ZEsg3UU495nc5E+M+I=
 golang.org/x/crypto v0.0.0-20210220033148-5ea612d1eb83/go.mod h1:jdWPYTVW3xRLrWPugEBEK3UY2ZEsg3UU495nc5E+M+I=
 golang.org/x/crypto v0.0.0-20210314154223-e6e6c4f2bb5b/go.mod h1:T9bdIzuCu7OtxOm1hfPfRQxPLYneinmdGuTeoZ9dtd4=
-golang.org/x/crypto v0.0.0-20210322153248-0c34fe9e7dc2/go.mod h1:T9bdIzuCu7OtxOm1hfPfRQxPLYneinmdGuTeoZ9dtd4=
 golang.org/x/crypto v0.0.0-20210421170649-83a5a9bb288b/go.mod h1:T9bdIzuCu7OtxOm1hfPfRQxPLYneinmdGuTeoZ9dtd4=
 golang.org/x/crypto v0.0.0-20210616213533-5ff15b29337e/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
 golang.org/x/crypto v0.0.0-20210711020723-a769d52b0f97/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
 golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
 golang.org/x/crypto v0.0.0-20211215153901-e495a2d5b3d3/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
-golang.org/x/crypto v0.0.0-20220511200225-c6db032c6c88/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
 golang.org/x/crypto v0.0.0-20220622213112-05595931fe9d/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
 golang.org/x/crypto v0.0.0-20220722155217-630584e8d5aa/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
 golang.org/x/crypto v0.0.0-20220829220503-c86fa9a7ed90/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
 golang.org/x/crypto v0.3.0/go.mod h1:hebNnKkNXi2UzZN1eVRvBB7co0a+JxK6XbPiWVs/3J4=
+golang.org/x/crypto v0.3.1-0.20221117191849-2c476679df9a/go.mod h1:hebNnKkNXi2UzZN1eVRvBB7co0a+JxK6XbPiWVs/3J4=
 golang.org/x/crypto v0.6.0/go.mod h1:OFC/31mSvZgRz0V1QTNCzfAI1aIRzbiufJtkMIlEp58=
+golang.org/x/crypto v0.7.0/go.mod h1:pYwdfH91IfpZVANVyUOhSIPZaFoJGxTFbZhFTx+dXZU=
 golang.org/x/crypto v0.10.0/go.mod h1:o4eNf7Ede1fv+hwOwZsTHl9EsPFO6q6ZvYR8vYfY45I=
-golang.org/x/crypto v0.15.0 h1:frVn1TEaCEaZcn3Tmd7Y2b5KKPaZ+I32Q2OA3kYp5TA=
-golang.org/x/crypto v0.15.0/go.mod h1:4ChreQoLWfG3xLDer1WdlH5NdlQ3+mwnQq1YTKY+72g=
+golang.org/x/crypto v0.17.0 h1:r8bRNjWL3GshPW3gkd+RpvzWrZAwPS49OmTGZ/uhM4k=
+golang.org/x/crypto v0.17.0/go.mod h1:gCAAfMLgwOJRpTjQ2zCCt2OcSfYMTeZVSRtQlPC7Nq4=
 golang.org/x/exp v0.0.0-20180321215751-8460e604b9de/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
 golang.org/x/exp v0.0.0-20180807140117-3d87b88a115f/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
 golang.org/x/exp v0.0.0-20190121172915-509febef88a4/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
@@ -2610,7 +2602,6 @@ golang.org/x/net v0.0.0-20200625001655-4c5254603344/go.mod h1:/O7V0waA8r7cgGh81R
 golang.org/x/net v0.0.0-20200707034311-ab3426394381/go.mod h1:/O7V0waA8r7cgGh81Ro3o1hOxt32SMVPicZroKQ2sZA=
 golang.org/x/net v0.0.0-20200822124328-c89045814202/go.mod h1:/O7V0waA8r7cgGh81Ro3o1hOxt32SMVPicZroKQ2sZA=
 golang.org/x/net v0.0.0-20200904194848-62affa334b73/go.mod h1:/O7V0waA8r7cgGh81Ro3o1hOxt32SMVPicZroKQ2sZA=
-golang.org/x/net v0.0.0-20201010224723-4f7140c49acb/go.mod h1:sp8m0HH+o8qH0wwXwYZr8TS3Oi6o0r6Gce1SSxlDquU=
 golang.org/x/net v0.0.0-20201021035429-f5854403a974/go.mod h1:sp8m0HH+o8qH0wwXwYZr8TS3Oi6o0r6Gce1SSxlDquU=
 golang.org/x/net v0.0.0-20201031054903-ff519b6c9102/go.mod h1:sp8m0HH+o8qH0wwXwYZr8TS3Oi6o0r6Gce1SSxlDquU=
 golang.org/x/net v0.0.0-20201110031124-69a78807bb2b/go.mod h1:sp8m0HH+o8qH0wwXwYZr8TS3Oi6o0r6Gce1SSxlDquU=
@@ -2621,7 +2612,6 @@ golang.org/x/net v0.0.0-20210119194325-5f4716e94777/go.mod h1:m0MpNAwzfU5UDzcl9v
 golang.org/x/net v0.0.0-20210224082022-3d97a244fca7/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=
 golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=
 golang.org/x/net v0.0.0-20210316092652-d523dce5a7f4/go.mod h1:RBQZq4jEuRlivfhVLdyRGr576XBO4/greRjx4P4O3yc=
-golang.org/x/net v0.0.0-20210326060303-6b1517762897/go.mod h1:uSPa2vr4CLtc/ILN5odXGNXS6mhrKVzTaCXzk9m6W3k=
 golang.org/x/net v0.0.0-20210405180319-a5a99cb37ef4/go.mod h1:p54w0d4576C0XHj96bSt6lcn1PtDYWL6XObtHCRCNQM=
 golang.org/x/net v0.0.0-20210410081132-afb366fc7cd1/go.mod h1:9tjilg8BloeKEkVJvy7fQ90B1CfIiPueXVOjqfkSzI8=
 golang.org/x/net v0.0.0-20210421230115-4e50805a0758/go.mod h1:72T/g9IO56b78aLF+1Kcs5dz7/ng1VjMUvfKvpfy+jM=
@@ -2632,16 +2622,16 @@ golang.org/x/net v0.0.0-20211029224645-99673261e6eb/go.mod h1:9nx3DQGgdP8bBQD5qx
 golang.org/x/net v0.0.0-20211112202133-69e39bad7dc2/go.mod h1:9nx3DQGgdP8bBQD5qxJ1jj9UTztislL4KSBs9R2vV5Y=
 golang.org/x/net v0.0.0-20220127200216-cd36cc0744dd/go.mod h1:CfG3xpIq0wQ8r1q4Su4UZFWDARRcnwPjda9FqA0JpMk=
 golang.org/x/net v0.0.0-20220225172249-27dd8689420f/go.mod h1:CfG3xpIq0wQ8r1q4Su4UZFWDARRcnwPjda9FqA0JpMk=
-golang.org/x/net v0.0.0-20220425223048-2871e0cb64e4/go.mod h1:CfG3xpIq0wQ8r1q4Su4UZFWDARRcnwPjda9FqA0JpMk=
 golang.org/x/net v0.0.0-20220722155237-a158d28d115b/go.mod h1:XRhObCWvk6IyKnWLug+ECip1KBveYUHfp+8e9klMJ9c=
 golang.org/x/net v0.1.0/go.mod h1:Cx3nUiGt4eDBEyega/BKRp+/AlGL8hYe7U9odMt2Cco=
 golang.org/x/net v0.2.0/go.mod h1:KqCZLdyyvdV855qA2rE3GC2aiw5xGR5TEjj8smXukLY=
 golang.org/x/net v0.6.0/go.mod h1:2Tu9+aMcznHK/AK1HMvgo6xiTLG5rD5rZLDS+rp2Bjs=
 golang.org/x/net v0.7.0/go.mod h1:2Tu9+aMcznHK/AK1HMvgo6xiTLG5rD5rZLDS+rp2Bjs=
+golang.org/x/net v0.8.0/go.mod h1:QVkue5JL9kW//ek3r6jTKnTFis1tRmNAW2P1shuFdJc=
 golang.org/x/net v0.10.0/go.mod h1:0qNGK6F8kojg2nk9dLZ2mShWaEBan6FAoqfSigmmuDg=
 golang.org/x/net v0.11.0/go.mod h1:2L/ixqYpgIVXmeoSA/4Lu7BzTG4KIyPIryS4IsOd1oQ=
-golang.org/x/net v0.18.0 h1:mIYleuAkSbHh0tCv7RvjL3F6ZVbLjq4+R7zbOn3Kokg=
-golang.org/x/net v0.18.0/go.mod h1:/czyP5RqHAH4odGYxBJ1qz0+CE5WZ+2j1YgoEo8F2jQ=
+golang.org/x/net v0.19.0 h1:zTwKpTd2XuCqf8huc7Fo2iSy+4RHPd10s4KzeTnVr1c=
+golang.org/x/net v0.19.0/go.mod h1:CfAk/cbD4CthTvqiEl8NpboMuiuOYsAr/7NOjZJtv1U=
 golang.org/x/oauth2 v0.0.0-20170807180024-9a379c6b3e95/go.mod h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U=
 golang.org/x/oauth2 v0.0.0-20180821212333-d2e6202438be/go.mod h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U=
 golang.org/x/oauth2 v0.0.0-20190226205417-e64efc72b421/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw=
@@ -2764,14 +2754,12 @@ golang.org/x/sys v0.0.0-20210303074136-134d130e1a04/go.mod h1:h1NjWce9XRLGQEsW7w
 golang.org/x/sys v0.0.0-20210305230114-8fe3ee5dd75b/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20210315160823-c6e025ad8005/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20210320140829-1e4c9ba3b0c4/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
-golang.org/x/sys v0.0.0-20210324051608-47abb6519492/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20210330210617-4fbd30eecc44/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20210403161142-5e06dd20ab57/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20210420072515-93ed5bcd2bfe/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20210423082822-04245dca01da/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20210423185535-09eb48e85fd7/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20210426230700-d19ff857e887/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
-golang.org/x/sys v0.0.0-20210502180810-71e4cd670f79/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20210510120138-977fb7262007/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20210514084401-e8d321eab015/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20210603081109-ebe580a85c40/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
@@ -2789,7 +2777,6 @@ golang.org/x/sys v0.0.0-20211025201205-69cdffdb9359/go.mod h1:oPkhp1MJrh7nUepCBc
 golang.org/x/sys v0.0.0-20211031064116-611d5d643895/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20211216021012-1d35b9e2eb4e/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20220114195835-da31bd327af9/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.0.0-20220224120231-95c6836cb0e7/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20220503163025-988cb79eb6c6/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20220520151302-bc2c85ada10a/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20220708085239-5a0f0661e09d/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
@@ -2800,6 +2787,7 @@ golang.org/x/sys v0.0.0-20220811171246-fbc7d0a398ab/go.mod h1:oPkhp1MJrh7nUepCBc
 golang.org/x/sys v0.0.0-20220908164124-27713097b956/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.1.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.2.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/sys v0.3.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.8.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
@@ -2816,10 +2804,11 @@ golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuX
 golang.org/x/term v0.1.0/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
 golang.org/x/term v0.2.0/go.mod h1:TVmDHMZPmdnySmBfhjOoOdhjzdE1h4u1VwSiw2l1Nuc=
 golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k=
+golang.org/x/term v0.6.0/go.mod h1:m6U89DPEgQRMq3DNkDClhWw02AUbt2daBVO4cn4Hv9U=
 golang.org/x/term v0.8.0/go.mod h1:xPskH00ivmX89bAKVGSKKtLOWNx2+17Eiy94tnKShWo=
 golang.org/x/term v0.9.0/go.mod h1:M6DEAAIenWoTxdKrOltXcmDY3rSplQUkrvaDU5FcQyo=
-golang.org/x/term v0.14.0 h1:LGK9IlZ8T9jvdy6cTdfKUCltatMFOehAQo9SRC46UQ8=
-golang.org/x/term v0.14.0/go.mod h1:TySc+nGkYR6qt8km8wUhuFRTVSMIX3XPR58y2lC8vww=
+golang.org/x/term v0.15.0 h1:y/Oo/a/q3IXu26lQgl04j/gjuBDOBlx7X6Om1j2CPW4=
+golang.org/x/term v0.15.0/go.mod h1:BDl952bC7+uMoWR75FIrCDx79TPU9oHkTZ9yRbYOrX0=
 golang.org/x/text v0.0.0-20160726164857-2910a502d2bf/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.0.0-20170915032832-14c0d48ead0c/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
@@ -2834,6 +2823,7 @@ golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ=
 golang.org/x/text v0.3.8/go.mod h1:E6s5w1FMmriuDzIBO73fBruAKo1PCIq6d2Q6DHfQ8WQ=
 golang.org/x/text v0.4.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
 golang.org/x/text v0.7.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8=
+golang.org/x/text v0.8.0/go.mod h1:e1OnstbJyHTd6l/uOt8jFFHp6TRDWZR/bV3emEE/zU8=
 golang.org/x/text v0.9.0/go.mod h1:e1OnstbJyHTd6l/uOt8jFFHp6TRDWZR/bV3emEE/zU8=
 golang.org/x/text v0.10.0/go.mod h1:TvPlkZtksWOMsz7fbANvkp4WM8x/WCo/om8BMLbz+aE=
 golang.org/x/text v0.14.0 h1:ScX5w1eTa3QqT8oi6+ziP7dTV1S2+ALU0bI+0zXKWiQ=
@@ -3110,8 +3100,8 @@ google.golang.org/protobuf v1.26.0/go.mod h1:9q0QmTI4eRPtz6boOQmLYwt+qCgq0jsYwAQ
 google.golang.org/protobuf v1.27.1/go.mod h1:9q0QmTI4eRPtz6boOQmLYwt+qCgq0jsYwAQnmE0givc=
 google.golang.org/protobuf v1.28.0/go.mod h1:HV8QOd/L58Z+nl8r43ehVNZIU/HEI6OcFqwMG9pJV4I=
 google.golang.org/protobuf v1.28.1/go.mod h1:HV8QOd/L58Z+nl8r43ehVNZIU/HEI6OcFqwMG9pJV4I=
-google.golang.org/protobuf v1.31.0 h1:g0LDEJHgrBl9N9r17Ru3sqWhkIx2NB67okBHPwC7hs8=
-google.golang.org/protobuf v1.31.0/go.mod h1:HV8QOd/L58Z+nl8r43ehVNZIU/HEI6OcFqwMG9pJV4I=
+google.golang.org/protobuf v1.32.0 h1:pPC6BG5ex8PDFnkbrGU3EixyhKcQ2aDuBS36lqK/C7I=
+google.golang.org/protobuf v1.32.0/go.mod h1:c6P6GXX6sHbq/GpV6MGZEdwhWPcYBgnhAHhKbcUYpos=
 gopkg.in/airbrake/gobrake.v2 v2.0.9/go.mod h1:/h5ZAUhDkGaJfjzjKLSjv6zCL6O0LLBxU4K+aSYdM/U=
 gopkg.in/alecthomas/kingpin.v2 v2.2.6 h1:jMFz6MfLP0/4fUyZle81rXUoxOBFi19VUFKVDOQfozc=
 gopkg.in/alecthomas/kingpin.v2 v2.2.6/go.mod h1:FMv+mEhP44yOT+4EoQTLFTRgOQ1FBLkstjWtayDeSgw=
@@ -3147,8 +3137,6 @@ gopkg.in/jcmturner/rpc.v1 v1.1.0/go.mod h1:YIdkC4XfD6GXbzje11McwsDuOlZQSb9W4vfLv
 gopkg.in/ldap.v3 v3.1.0/go.mod h1:dQjCc0R0kfyFjIlWNMH1DORwUASZyDxo2Ry1B51dXaQ=
 gopkg.in/mgo.v2 v2.0.0-20160818020120-3f83fa500528/go.mod h1:yeKp02qBN3iKW1OzL3MGk2IdtZzaj7SFntXj72NppTA=
 gopkg.in/mgo.v2 v2.0.0-20180705113604-9856a29383ce/go.mod h1:yeKp02qBN3iKW1OzL3MGk2IdtZzaj7SFntXj72NppTA=
-gopkg.in/natefinch/npipe.v2 v2.0.0-20160621034901-c1b8fa8bdcce h1:+JknDZhAj8YMt7GC73Ei8pv4MzjDUNPHgQWJdtMAaDU=
-gopkg.in/natefinch/npipe.v2 v2.0.0-20160621034901-c1b8fa8bdcce/go.mod h1:5AcXVHNjg+BDxry382+8OKon8SEWiKktQR07RKPsv1c=
 gopkg.in/olivere/elastic.v5 v5.0.70/go.mod h1:FylZT6jQWtfHsicejzOm3jIMVPOAksa80i3o+6qtQRk=
 gopkg.in/ory-am/dockertest.v3 v3.3.4/go.mod h1:s9mmoLkaGeAh97qygnNj4xWkiN7e1SKekYC6CovU+ek=
 gopkg.in/resty.v1 v1.12.0/go.mod h1:mDo4pnntr5jdWRML875a/NmxYqAlA73dVijT2AXvQQo=
diff --git a/pkg/integrations/mssql/sql_exporter.go b/pkg/integrations/mssql/sql_exporter.go
index fd9af2278be0..84d930d35a3e 100644
--- a/pkg/integrations/mssql/sql_exporter.go
+++ b/pkg/integrations/mssql/sql_exporter.go
@@ -114,6 +114,9 @@ func (c *Config) NewIntegration(l log.Logger) (integrations.Integration, error)
 		collectorConfig = *customCollectorConfig
 	}
 
+	// TODO(hainenber): expose below attr as config
+	enablePing := false
+
 	t, err := sql_exporter.NewTarget(
 		"mssqlintegration",
 		"",
@@ -128,6 +131,7 @@ func (c *Config) NewIntegration(l log.Logger) (integrations.Integration, error)
 			MaxConns:      c.MaxOpenConnections,
 			MaxIdleConns:  c.MaxIdleConnections,
 		},
+		&enablePing,
 	)
 
 	if err != nil {

From f471706f709c6a744103fa8dc182fd722fe12522 Mon Sep 17 00:00:00 2001
From: mattdurham <mattdurham@ppog.org>
Date: Mon, 8 Jan 2024 09:21:57 -0500
Subject: [PATCH 13/68] add changelog (#6058)

---
 CHANGELOG.md | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 4496cb325474..36107e76a0c7 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -111,6 +111,8 @@ v0.39.0-rc.0 (2024-01-05)
 
 - Fix issue where `prometheus.exporter.kafka` would crash when configuring `sasl_password`. (@rfratto)
 
+- Fix nil panic when using the process collector with the windows exporter. (@mattdurham)
+
 ### Other changes
 
 - Bump github.com/IBM/sarama from v1.41.2 to v1.42.1

From b7c1089ef1785faac765555705ad8e0f2d071796 Mon Sep 17 00:00:00 2001
From: mattdurham <mattdurham@ppog.org>
Date: Mon, 8 Jan 2024 10:43:53 -0500
Subject: [PATCH 14/68] add call to set perf query (#6065)

---
 CHANGELOG.md                                                 | 4 ++++
 .../windows_exporter/windows_exporter_windows.go             | 5 +++++
 2 files changed, 9 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 36107e76a0c7..90012924be72 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -16,6 +16,10 @@ Main (unreleased)
   - [GO-2023-2412](https://github.com/advisories/GHSA-7ww5-4wqc-m92c)
   - [CVE-2023-49568](https://github.com/advisories/GHSA-mw99-9chc-xw7r)
 
+### Bugfixes
+
+- Fix performance issue where perf lib where clause was not being set, leading to timeouts in collecting metrics for windows_exporter. (@mattdurham)
+
 v0.39.0-rc.0 (2024-01-05)
 -------------------------
 
diff --git a/pkg/integrations/windows_exporter/windows_exporter_windows.go b/pkg/integrations/windows_exporter/windows_exporter_windows.go
index fd0a7effe023..94e05f1121a6 100644
--- a/pkg/integrations/windows_exporter/windows_exporter_windows.go
+++ b/pkg/integrations/windows_exporter/windows_exporter_windows.go
@@ -23,6 +23,11 @@ func New(logger log.Logger, c *Config) (integrations.Integration, error) {
 	if err != nil {
 		return nil, err
 	}
+	err = winCol.SetPerfCounterQuery()
+	if err != nil {
+		return nil, err
+	}
+
 	return integrations.NewCollectorIntegration(c.Name(), integrations.WithCollectors(
 		// Hard-coded 4m timeout to represent the time a series goes stale.
 		// TODO: Make configurable if useful.

From df408837cbe96e38da7033d6eb534407eda06eb5 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=C4=90=E1=BB=97=20Tr=E1=BB=8Dng=20H=E1=BA=A3i?=
 <41283691+hainenber@users.noreply.github.com>
Date: Tue, 9 Jan 2024 00:17:36 +0700
Subject: [PATCH 15/68] chore(build): remove seemingly obsolete exclude
 directive (#6059)

Signed-off-by: hainenber <dotronghai96@gmail.com>
---
 go.mod | 3 ---
 1 file changed, 3 deletions(-)

diff --git a/go.mod b/go.mod
index 071002b5e7c3..4a42f89440db 100644
--- a/go.mod
+++ b/go.mod
@@ -725,9 +725,6 @@ replace (
 	github.com/prometheus/node_exporter => github.com/grafana/node_exporter v0.18.1-grafana-r01.0.20231004161416-702318429731
 )
 
-// Excluding fixes a conflict in test packages and allows "go mod tidy" to run.
-exclude google.golang.org/grpc/examples v0.0.0-20200728065043-dfc0c05b2da9
-
 // Replacing for an internal fork which allows us to observe metrics produced by the Collector.
 // This is a temporary solution while a new configuration design is discussed for the collector. Related issues:
 // https://github.com/open-telemetry/opentelemetry-collector/issues/7532

From d1619fc3050d20192bc57b93ffc67e419409b64b Mon Sep 17 00:00:00 2001
From: Piotr <17101802+thampiotr@users.noreply.github.com>
Date: Mon, 8 Jan 2024 17:18:58 +0000
Subject: [PATCH 16/68] Docs: Move Monitoring section into Tasks section
 (#6064)

* Move monitoring section into Tasks

* Make generate versioned files

* Revert "Make generate versioned files"

This reverts commit 240908be24c7cc8fb79feeb4daebcc8dda8f6bae.

* update gen template

* tweak monitor docs titles
---
 docs/sources/_index.md                        |  4 ++--
 docs/sources/_index.md.t                      |  4 ++--
 docs/sources/flow/concepts/clustering.md      |  8 +++----
 docs/sources/flow/monitoring/_index.md        | 18 --------------
 docs/sources/flow/reference/cli/run.md        |  2 +-
 .../flow/setup/configure/configure-linux.md   |  4 ++--
 .../flow/setup/configure/configure-macos.md   |  4 ++--
 .../flow/setup/configure/configure-windows.md |  4 ++--
 docs/sources/flow/setup/install/docker.md     |  4 ++--
 .../flow/tasks/configure-agent-clustering.md  |  4 ++--
 .../debugging.md => tasks/debug.md}           | 23 +++++++++++-------
 .../distribute-prometheus-scrape-load.md      |  4 ++--
 .../estimate-resource-usage.md}               | 15 +++++++++---
 .../flow/tasks/migrate/from-prometheus.md     |  8 +++----
 .../flow/tasks/migrate/from-promtail.md       |  8 +++----
 .../sources/flow/tasks/migrate/from-static.md |  8 +++----
 docs/sources/flow/tasks/monitor/_index.md     | 24 +++++++++++++++++++
 .../monitor}/component_metrics.md             | 15 ++++++++----
 .../monitor}/controller_metrics.md            | 15 ++++++++----
 19 files changed, 106 insertions(+), 70 deletions(-)
 delete mode 100644 docs/sources/flow/monitoring/_index.md
 rename docs/sources/flow/{monitoring/debugging.md => tasks/debug.md} (89%)
 rename docs/sources/flow/{monitoring/agent-resource-usage.md => tasks/estimate-resource-usage.md} (79%)
 create mode 100644 docs/sources/flow/tasks/monitor/_index.md
 rename docs/sources/flow/{monitoring => tasks/monitor}/component_metrics.md (75%)
 rename docs/sources/flow/{monitoring => tasks/monitor}/controller_metrics.md (74%)

diff --git a/docs/sources/_index.md b/docs/sources/_index.md
index 1a7a2a261874..4b19726241b6 100644
--- a/docs/sources/_index.md
+++ b/docs/sources/_index.md
@@ -115,6 +115,6 @@ Patch and security releases may be created at any time.
 [Flow mode]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow"
 [Flow mode]: "/docs/grafana-cloud/ -> /docs/agent/<AGENT_VERSION>/flow"
 
-[UI]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/monitoring/debugging.md#grafana-agent-flow-ui"
-[UI]: "/docs/grafana-cloud/ -> /docs/agent/<AGENT_VERSION>/flow/monitoring/debugging.md#grafana-agent-flow-ui"
+[UI]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/tasks/debug.md#grafana-agent-flow-ui"
+[UI]: "/docs/grafana-cloud/ -> /docs/agent/<AGENT_VERSION>/flow/tasks/debug.md#grafana-agent-flow-ui"
 {{% /docs/reference %}}
diff --git a/docs/sources/_index.md.t b/docs/sources/_index.md.t
index d769d5cfffc5..c8dccbfb6748 100644
--- a/docs/sources/_index.md.t
+++ b/docs/sources/_index.md.t
@@ -115,6 +115,6 @@ Patch and security releases may be created at any time.
 [Flow mode]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow"
 [Flow mode]: "/docs/grafana-cloud/ -> /docs/agent/<AGENT_VERSION>/flow"
 
-[UI]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/monitoring/debugging.md#grafana-agent-flow-ui"
-[UI]: "/docs/grafana-cloud/ -> /docs/agent/<AGENT_VERSION>/flow/monitoring/debugging.md#grafana-agent-flow-ui"
+[UI]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/tasks/debug.md#grafana-agent-flow-ui"
+[UI]: "/docs/grafana-cloud/ -> /docs/agent/<AGENT_VERSION>/flow/tasks/debug.md#grafana-agent-flow-ui"
 {{% /docs/reference %}}
diff --git a/docs/sources/flow/concepts/clustering.md b/docs/sources/flow/concepts/clustering.md
index 3f6f5b093639..e02a6131d4a5 100644
--- a/docs/sources/flow/concepts/clustering.md
+++ b/docs/sources/flow/concepts/clustering.md
@@ -76,8 +76,8 @@ Refer to [Debugging clustering issues][debugging] for additional troubleshooting
 [prometheus.operator.podmonitors]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/reference/components/prometheus.operator.podmonitors.md#clustering-beta"
 [prometheus.operator.servicemonitors]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/reference/components/prometheus.operator.servicemonitors.md#clustering-beta"
 [prometheus.operator.servicemonitors]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/reference/components/prometheus.operator.servicemonitors.md#clustering-beta"
-[clustering page]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/monitoring/debugging.md#clustering-page"
-[clustering page]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/monitoring/debugging.md#clustering-page"
-[debugging]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/monitoring/debugging.md#debugging-clustering-issues"
-[debugging]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/monitoring/debugging.md#debugging-clustering-issues"
+[clustering page]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/tasks/debug.md#clustering-page"
+[clustering page]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/tasks/debug.md#clustering-page"
+[debugging]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/tasks/debug.md#debugging-clustering-issues"
+[debugging]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/tasks/debug.md#debugging-clustering-issues"
 {{% /docs/reference %}}
\ No newline at end of file
diff --git a/docs/sources/flow/monitoring/_index.md b/docs/sources/flow/monitoring/_index.md
deleted file mode 100644
index 729bbaa8ff89..000000000000
--- a/docs/sources/flow/monitoring/_index.md
+++ /dev/null
@@ -1,18 +0,0 @@
----
-aliases:
-- /docs/grafana-cloud/agent/flow/monitoring/
-- /docs/grafana-cloud/monitor-infrastructure/agent/flow/monitoring/
-- /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/monitoring/
-- /docs/grafana-cloud/send-data/agent/flow/monitoring/
-canonical: https://grafana.com/docs/agent/latest/flow/monitoring/
-description: Learn about monitoring Grafana Agent Flow
-title: Monitoring Grafana Agent Flow
-menuTitle: Monitoring
-weight: 500
----
-
-# Monitoring {{% param "PRODUCT_NAME" %}}
-
-This section details various ways to monitor and debug {{< param "PRODUCT_NAME" >}}.
-
-{{< section >}}
diff --git a/docs/sources/flow/reference/cli/run.md b/docs/sources/flow/reference/cli/run.md
index 4a7adc21b7b2..4da0df47a473 100644
--- a/docs/sources/flow/reference/cli/run.md
+++ b/docs/sources/flow/reference/cli/run.md
@@ -171,7 +171,7 @@ transitions to the terminating state when shutting down.
 
 The current state of a clustered {{< param "PRODUCT_ROOT_NAME" >}} is shown on the clustering page in the [UI][].
 
-[UI]: {{< relref "../../monitoring/debugging.md#clustering-page" >}}
+[UI]: {{< relref "../../tasks/debug.md#clustering-page" >}}
 
 ## Configuration conversion (beta)
 
diff --git a/docs/sources/flow/setup/configure/configure-linux.md b/docs/sources/flow/setup/configure/configure-linux.md
index 3964eb416070..a2cb7389774f 100644
--- a/docs/sources/flow/setup/configure/configure-linux.md
+++ b/docs/sources/flow/setup/configure/configure-linux.md
@@ -93,6 +93,6 @@ To expose the UI to other machines, complete the following steps:
 {{% docs/reference %}}
 [run]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/reference/cli/run.md"
 [run]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/reference/cli/run.md"
-[UI]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/monitoring/debugging.md#grafana-agent-flow-ui"
-[UI]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/monitoring/debugging.md#grafana-agent-flow-ui"
+[UI]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/tasks/debug.md#grafana-agent-flow-ui"
+[UI]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/tasks/debug.md#grafana-agent-flow-ui"
 {{% /docs/reference %}}
diff --git a/docs/sources/flow/setup/configure/configure-macos.md b/docs/sources/flow/setup/configure/configure-macos.md
index 5261e75f9877..e0943be422cb 100644
--- a/docs/sources/flow/setup/configure/configure-macos.md
+++ b/docs/sources/flow/setup/configure/configure-macos.md
@@ -82,6 +82,6 @@ To expose the UI to other machines, complete the following steps:
        To listen on all interfaces, replace `127.0.0.1` with `0.0.0.0`.
 
 {{% docs/reference %}}
-[UI]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/monitoring/debugging.md#grafana-agent-flow-ui"
-[UI]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/monitoring/debugging.md#grafana-agent-flow-ui"
+[UI]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/tasks/debug.md#grafana-agent-flow-ui"
+[UI]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/tasks/debug.md#grafana-agent-flow-ui"
 {{% /docs/reference %}}
diff --git a/docs/sources/flow/setup/configure/configure-windows.md b/docs/sources/flow/setup/configure/configure-windows.md
index 010e6897b8ea..520ba2b64539 100644
--- a/docs/sources/flow/setup/configure/configure-windows.md
+++ b/docs/sources/flow/setup/configure/configure-windows.md
@@ -90,7 +90,7 @@ To expose the UI to other machines, complete the following steps:
        To listen on all interfaces, replace `LISTEN_ADDR` with `0.0.0.0`.
 
 {{% docs/reference %}}
-[UI]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/monitoring/debugging.md#grafana-agent-flow-ui"
-[UI]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/monitoring/debugging.md#grafana-agent-flow-ui"
+[UI]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/tasks/debug.md#grafana-agent-flow-ui"
+[UI]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/tasks/debug.md#grafana-agent-flow-ui"
 {{% /docs/reference %}}
 
diff --git a/docs/sources/flow/setup/install/docker.md b/docs/sources/flow/setup/install/docker.md
index 15f9e391e08e..9460ab71a8f3 100644
--- a/docs/sources/flow/setup/install/docker.md
+++ b/docs/sources/flow/setup/install/docker.md
@@ -92,6 +92,6 @@ To verify that {{< param "PRODUCT_NAME" >}} is running successfully, navigate to
 {{% docs/reference %}}
 [run]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/reference/cli/run.md"
 [run]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/reference/cli/run.md"
-[UI]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/monitoring/debugging.md#grafana-agent-flow-ui"
-[UI]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/monitoring/debugging.md#grafana-agent-flow-ui"
+[UI]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/tasks/debug.md#grafana-agent-flow-ui"
+[UI]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/tasks/debug.md#grafana-agent-flow-ui"
 {{% /docs/reference %}}
diff --git a/docs/sources/flow/tasks/configure-agent-clustering.md b/docs/sources/flow/tasks/configure-agent-clustering.md
index b1ab444d4ebb..ca67ecd2d608 100644
--- a/docs/sources/flow/tasks/configure-agent-clustering.md
+++ b/docs/sources/flow/tasks/configure-agent-clustering.md
@@ -69,6 +69,6 @@ To configure clustering:
 [beta]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/stability.md#beta"
 [install-helm]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/setup/install/kubernetes.md"
 [install-helm]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/setup/install/kubernetes.md"
-[UI]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/monitoring/debugging.md#component-detail-page"
-[UI]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/monitoring/debugging.md#component-detail-page"
+[UI]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/tasks/debug.md#component-detail-page"
+[UI]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/tasks/debug.md#component-detail-page"
 {{% /docs/reference %}}
diff --git a/docs/sources/flow/monitoring/debugging.md b/docs/sources/flow/tasks/debug.md
similarity index 89%
rename from docs/sources/flow/monitoring/debugging.md
rename to docs/sources/flow/tasks/debug.md
index a3d148e52487..6932d6082f82 100644
--- a/docs/sources/flow/monitoring/debugging.md
+++ b/docs/sources/flow/tasks/debug.md
@@ -1,16 +1,23 @@
 ---
 aliases:
+- /docs/grafana-cloud/agent/flow/tasks/debug/
+- /docs/grafana-cloud/monitor-infrastructure/agent/flow/tasks/debug/
+- /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/tasks/debug/
+- /docs/grafana-cloud/send-data/agent/flow/tasks/debug/
+# Previous page aliases for backwards compatibility:
 - /docs/grafana-cloud/agent/flow/monitoring/debugging/
 - /docs/grafana-cloud/monitor-infrastructure/agent/flow/monitoring/debugging/
 - /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/monitoring/debugging/
 - /docs/grafana-cloud/send-data/agent/flow/monitoring/debugging/
+- ../monitoring/debugging/ # /docs/agent/latest/flow/monitoring/debugging/
 canonical: https://grafana.com/docs/agent/latest/flow/monitoring/debugging/
-description: Learn about debugging
-title: Debugging
-weight: 300
+description: Learn about debugging issues with Grafana Agent Flow
+title: Debug issues with Grafana Agent Flow
+menuTitle: Debug issues
+weight: 1000
 ---
 
-# Debugging
+# Debug {{< param "PRODUCT_NAME" >}}
 
 Follow these steps to debug issues with {{< param "PRODUCT_NAME" >}}:
 
@@ -32,7 +39,7 @@ Follow these steps to debug issues with {{< param "PRODUCT_NAME" >}}:
 
 ### Home page
 
-![](../../../assets/ui_home_page.png)
+![](../../assets/ui_home_page.png)
 
 The home page shows a table of components defined in the configuration file and their health.
 
@@ -42,14 +49,14 @@ Click the {{< param "PRODUCT_ROOT_NAME" >}} logo to navigate back to the home pa
 
 ### Graph page
 
-![](../../../assets/ui_graph_page.png)
+![](../../assets/ui_graph_page.png)
 
 The **Graph** page shows a graph view of components defined in the configuration file and their health.
 Clicking a component in the graph navigates to the [Component detail page](#component-detail-page) for that component.
 
 ### Component detail page
 
-![](../../../assets/ui_component_detail_page.png)
+![](../../assets/ui_component_detail_page.png)
 
 The component detail page shows the following information for each component:
 
@@ -62,7 +69,7 @@ The component detail page shows the following information for each component:
 
 ### Clustering page
 
-![](../../../assets/ui_clustering_page.png)
+![](../../assets/ui_clustering_page.png)
 
 The clustering page shows the following information for each cluster node:
 
diff --git a/docs/sources/flow/tasks/distribute-prometheus-scrape-load.md b/docs/sources/flow/tasks/distribute-prometheus-scrape-load.md
index 961c98543b98..329f6eed9ade 100644
--- a/docs/sources/flow/tasks/distribute-prometheus-scrape-load.md
+++ b/docs/sources/flow/tasks/distribute-prometheus-scrape-load.md
@@ -63,6 +63,6 @@ To distribute Prometheus metrics scrape load with clustering:
 [Configure Prometheus metrics collection]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/tasks/collect-prometheus-metrics.md"
 [Configure clustering]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/tasks/configure-agent-clustering.md"
 [Configure clustering]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/tasks/configure-agent-clustering.md"
-[UI]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/monitoring/debugging.md#component-detail-page"
-[UI]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/monitoring/debugging.md#component-detail-page"
+[UI]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/tasks/debug.md#component-detail-page"
+[UI]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/tasks/debug.md#component-detail-page"
 {{% /docs/reference %}}
diff --git a/docs/sources/flow/monitoring/agent-resource-usage.md b/docs/sources/flow/tasks/estimate-resource-usage.md
similarity index 79%
rename from docs/sources/flow/monitoring/agent-resource-usage.md
rename to docs/sources/flow/tasks/estimate-resource-usage.md
index 21b16106d5a3..6fb8a146f6d9 100644
--- a/docs/sources/flow/monitoring/agent-resource-usage.md
+++ b/docs/sources/flow/tasks/estimate-resource-usage.md
@@ -1,17 +1,26 @@
 ---
 aliases:
+  - /docs/agent/flow/tasks/estimate-resource-usage/
+  - /docs/grafana-cloud/agent/flow/tasks/estimate-resource-usage/
+  - /docs/grafana-cloud/monitor-infrastructure/agent/flow/tasks/estimate-resource-usage/
+  - /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/tasks/estimate-resource-usage/
+  - /docs/grafana-cloud/send-data/agent/flow/tasks/estimate-resource-usage/  
+  # Previous page aliases for backwards compatibility:
   - /docs/agent/flow/monitoring/resource-usage/
   - /docs/grafana-cloud/agent/flow/monitoring/resource-usage/
   - /docs/grafana-cloud/monitor-infrastructure/agent/flow/monitoring/resource-usage/
   - /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/monitoring/resource-usage/
   - /docs/grafana-cloud/send-data/agent/flow/monitoring/resource-usage/
+  - ../monitoring/resource-usage/ # /docs/agent/latest/flow/monitoring/resource-usage/
 canonical: https://grafana.com/docs/agent/latest/flow/monitoring/resource-usage/
-description: Guidance for expected Agent resource usage
+description: Estimate expected Agent resource usage
 headless: true
-title: Resource usage
+title: Estimate resource usage
+menuTitle: Estimate resource usage
+weight: 190
 ---
 
-# {{% param "PRODUCT_NAME" %}} resource usage
+# Estimate {{% param "PRODUCT_NAME" %}} resource usage
 
 This page provides guidance for expected resource usage of 
 {{% param "PRODUCT_NAME" %}} for each telemetry type, based on operational 
diff --git a/docs/sources/flow/tasks/migrate/from-prometheus.md b/docs/sources/flow/tasks/migrate/from-prometheus.md
index 74a53f2475c5..6224d82901e7 100644
--- a/docs/sources/flow/tasks/migrate/from-prometheus.md
+++ b/docs/sources/flow/tasks/migrate/from-prometheus.md
@@ -258,10 +258,10 @@ The following list is specific to the convert command and not {{< param "PRODUCT
 [run]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/reference/cli/run.md"
 [Start]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/setup/start-agent.md"
 [Start]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/setup/start-agent.md"
-[DebuggingUI]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/monitoring/debugging.md"
-[DebuggingUI]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/monitoring/debugging.md"
+[DebuggingUI]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/tasks/debug.md"
+[DebuggingUI]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/tasks/debug.md"
 [River]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/concepts/config-language/_index.md"
 [River]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/concepts/config-language/_index.md"
-[UI]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/monitoring/debugging#grafana-agent-flow-ui"
-[UI]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/monitoring/debugging#grafana-agent-flow-ui"
+[UI]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/tasks/debug#grafana-agent-flow-ui"
+[UI]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/tasks/debug#grafana-agent-flow-ui"
 {{% /docs/reference %}}
diff --git a/docs/sources/flow/tasks/migrate/from-promtail.md b/docs/sources/flow/tasks/migrate/from-promtail.md
index 89c863f8758f..29dc2ca5c0e6 100644
--- a/docs/sources/flow/tasks/migrate/from-promtail.md
+++ b/docs/sources/flow/tasks/migrate/from-promtail.md
@@ -241,10 +241,10 @@ The following list is specific to the convert command and not {{< param "PRODUCT
 [run]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/reference/cli/run.md"
 [Start]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/setup/start-agent.md"
 [Start]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/setup/start-agent.md"
-[DebuggingUI]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/monitoring/debugging.md"
-[DebuggingUI]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/monitoring/debugging.md"
+[DebuggingUI]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/tasks/debug.md"
+[DebuggingUI]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/tasks/debug.md"
 [River]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/concepts/config-language/_index.md"
 [River]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/concepts/config-language/_index.md"
-[UI]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/monitoring/debugging#grafana-agent-flow-ui"
-[UI]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/monitoring/debugging#grafana-agent-flow-ui"
+[UI]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/tasks/debug#grafana-agent-flow-ui"
+[UI]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/tasks/debug#grafana-agent-flow-ui"
 {{% /docs/reference %}}
diff --git a/docs/sources/flow/tasks/migrate/from-static.md b/docs/sources/flow/tasks/migrate/from-static.md
index bf8532f207d9..0a6fb982853b 100644
--- a/docs/sources/flow/tasks/migrate/from-static.md
+++ b/docs/sources/flow/tasks/migrate/from-static.md
@@ -376,8 +376,8 @@ The following list is specific to the convert command and not {{< param "PRODUCT
 [run]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/reference/cli/run.md"
 [Start]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/setup/start-agent.md"
 [Start]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/setup/start-agent.md"
-[DebuggingUI]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/monitoring/debugging.md"
-[DebuggingUI]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/monitoring/debugging.md"
+[DebuggingUI]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/tasks/debug.md"
+[DebuggingUI]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/tasks/debug.md"
 [River]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/concepts/config-language/"
 [River]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/concepts/config-language/"
 [Integrations next]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/static/configuration/integrations/integrations-next/_index.md"
@@ -396,6 +396,6 @@ The following list is specific to the convert command and not {{< param "PRODUCT
 [Metrics]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/static/configuration/metrics-config.md"
 [Logs]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/static/configuration/logs-config.md"
 [Logs]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/static/logs-config.md"
-[UI]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/monitoring/debugging#grafana-agent-flow-ui"
-[UI]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/monitoring/debugging#grafana-agent-flow-ui"
+[UI]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/tasks/debug#grafana-agent-flow-ui"
+[UI]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/tasks/debug#grafana-agent-flow-ui"
 {{% /docs/reference %}}
diff --git a/docs/sources/flow/tasks/monitor/_index.md b/docs/sources/flow/tasks/monitor/_index.md
new file mode 100644
index 000000000000..ac23db26072c
--- /dev/null
+++ b/docs/sources/flow/tasks/monitor/_index.md
@@ -0,0 +1,24 @@
+---
+aliases:
+- /docs/grafana-cloud/agent/flow/tasks/monitor/
+- /docs/grafana-cloud/monitor-infrastructure/agent/flow/tasks/monitor/
+- /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/tasks/monitor/
+- /docs/grafana-cloud/send-data/agent/flow/tasks/monitor/
+# Previous page aliases for backwards compatibility:
+- /docs/grafana-cloud/agent/flow/monitoring/
+- /docs/grafana-cloud/monitor-infrastructure/agent/flow/monitoring/
+- /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/monitoring/
+- /docs/grafana-cloud/send-data/agent/flow/monitoring/
+- ../monitoring/ # /docs/agent/latest/flow/monitoring/
+canonical: https://grafana.com/docs/agent/latest/flow/tasks/monitor/
+description: Learn about monitoring Grafana Agent Flow
+title: Monitor Grafana Agent Flow
+menuTitle: Monitor
+weight: 110
+---
+
+# How to monitor {{% param "PRODUCT_NAME" %}}
+
+This section details various ways to monitor and debug {{< param "PRODUCT_NAME" >}}.
+
+{{< section >}}
diff --git a/docs/sources/flow/monitoring/component_metrics.md b/docs/sources/flow/tasks/monitor/component_metrics.md
similarity index 75%
rename from docs/sources/flow/monitoring/component_metrics.md
rename to docs/sources/flow/tasks/monitor/component_metrics.md
index 90c3769572c9..5b3693a1f182 100644
--- a/docs/sources/flow/monitoring/component_metrics.md
+++ b/docs/sources/flow/tasks/monitor/component_metrics.md
@@ -1,17 +1,24 @@
 ---
 aliases:
+- /docs/grafana-cloud/agent/flow/tasks/monitor/component_metrics/
+- /docs/grafana-cloud/monitor-infrastructure/agent/flow/tasks/monitor/component_metrics/
+- /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/tasks/monitor/component_metrics/
+- /docs/grafana-cloud/send-data/agent/flow/tasks/monitor/component_metrics/
+- component-metrics/ # /docs/agent/latest/flow/tasks/monitor/component-metrics/
+# Previous page aliases for backwards compatibility:
 - /docs/grafana-cloud/agent/flow/monitoring/component_metrics/
 - /docs/grafana-cloud/monitor-infrastructure/agent/flow/monitoring/component_metrics/
 - /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/monitoring/component_metrics/
 - /docs/grafana-cloud/send-data/agent/flow/monitoring/component_metrics/
-- component-metrics/
+- ../../monitoring/component-metrics/ # /docs/agent/latest/flow/monitoring/component-metrics/
+- ../../monitoring/component_metrics/ # /docs/agent/latest/flow/monitoring/component_metrics/
 canonical: https://grafana.com/docs/agent/latest/flow/monitoring/component_metrics/
-description: Learn about component metrics
-title: Component metrics
+description: Learn how to monitor component metrics
+title: Monitor components
 weight: 200
 ---
 
-# Component metrics
+# How to monitor components
 
 {{< param "PRODUCT_NAME" >}} [components][] may optionally expose Prometheus metrics which can be used to investigate the behavior of that component.
 These component-specific metrics are only generated when an instance of that component is running.
diff --git a/docs/sources/flow/monitoring/controller_metrics.md b/docs/sources/flow/tasks/monitor/controller_metrics.md
similarity index 74%
rename from docs/sources/flow/monitoring/controller_metrics.md
rename to docs/sources/flow/tasks/monitor/controller_metrics.md
index e0f17a2edba9..0ba7617032aa 100644
--- a/docs/sources/flow/monitoring/controller_metrics.md
+++ b/docs/sources/flow/tasks/monitor/controller_metrics.md
@@ -1,17 +1,24 @@
 ---
 aliases:
+- /docs/grafana-cloud/agent/flow/tasks/monitor/controller_metrics/
+- /docs/grafana-cloud/monitor-infrastructure/agent/flow/tasks/monitor/controller_metrics/
+- /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/tasks/monitor/controller_metrics/
+- /docs/grafana-cloud/send-data/agent/flow/tasks/monitor/controller_metrics/
+- controller-metrics/ # /docs/agent/latest/flow/tasks/monitor/controller-metrics/
+# Previous page aliases for backwards compatibility:
 - /docs/grafana-cloud/agent/flow/monitoring/controller_metrics/
 - /docs/grafana-cloud/monitor-infrastructure/agent/flow/monitoring/controller_metrics/
 - /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/monitoring/controller_metrics/
 - /docs/grafana-cloud/send-data/agent/flow/monitoring/controller_metrics/
-- controller-metrics/
+- ../../monitoring/controller-metrics/ # /docs/agent/latest/flow/monitoring/controller-metrics/
+- ../../monitoring/controller_metrics/ # /docs/agent/latest/flow/monitoring/controller_metrics/
 canonical: https://grafana.com/docs/agent/latest/flow/monitoring/controller_metrics/
-description: Learn about controller metrics
-title: Controller metrics
+description: Learn how to monitor controller metrics
+title: Monitor controller
 weight: 100
 ---
 
-# Controller metrics
+# How to monitor controller
 
 The {{< param "PRODUCT_NAME" >}} [component controller][] exposes Prometheus metrics which you can use to investigate the controller state.
 

From 4cc078668e05c8d50afa7d769ffae686bbcdaa76 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 8 Jan 2024 17:22:01 +0000
Subject: [PATCH 17/68] build(deps): bump github.com/cloudflare/circl from
 1.3.3 to 1.3.7 (#6066)

Bumps [github.com/cloudflare/circl](https://github.com/cloudflare/circl) from 1.3.3 to 1.3.7.
- [Release notes](https://github.com/cloudflare/circl/releases)
- [Commits](https://github.com/cloudflare/circl/compare/v1.3.3...v1.3.7)

---
updated-dependencies:
- dependency-name: github.com/cloudflare/circl
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 go.mod | 2 +-
 go.sum | 3 ++-
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/go.mod b/go.mod
index 4a42f89440db..5e98e5fb0d4c 100644
--- a/go.mod
+++ b/go.mod
@@ -624,7 +624,7 @@ require (
 	github.com/Workiva/go-datastructures v1.1.0 // indirect
 	github.com/aws/aws-sdk-go-v2/service/secretsmanager v1.26.0 // indirect
 	github.com/channelmeter/iso8601duration v0.0.0-20150204201828-8da3af7a2a61 // indirect
-	github.com/cloudflare/circl v1.3.3 // indirect
+	github.com/cloudflare/circl v1.3.7 // indirect
 	github.com/containerd/log v0.1.0 // indirect
 	github.com/drone/envsubst v1.0.3 // indirect
 	github.com/go-jose/go-jose/v3 v3.0.1 // indirect
diff --git a/go.sum b/go.sum
index b3f0d41a4a63..32c147bb135b 100644
--- a/go.sum
+++ b/go.sum
@@ -480,8 +480,9 @@ github.com/circonus-labs/circonusllhist v0.1.3/go.mod h1:kMXHVDlOchFAehlya5ePtbp
 github.com/cisco-ie/nx-telemetry-proto v0.0.0-20190531143454-82441e232cf6/go.mod h1:ugEfq4B8T8ciw/h5mCkgdiDRFS4CkqqhH2dymDB4knc=
 github.com/clbanning/x2j v0.0.0-20191024224557-825249438eec/go.mod h1:jMjuTZXRI4dUb/I5gc9Hdhagfvm9+RyrPryS/auMzxE=
 github.com/client9/misspell v0.3.4/go.mod h1:qj6jICC3Q7zFZvVWo7KLAzC3yx5G7kyvSDkc90ppPyw=
-github.com/cloudflare/circl v1.3.3 h1:fE/Qz0QdIGqeWfnwq0RE0R7MI51s0M2E4Ga9kq5AEMs=
 github.com/cloudflare/circl v1.3.3/go.mod h1:5XYMA4rFBvNIrhs50XuiBJ15vF2pZn4nnUKZrLbUZFA=
+github.com/cloudflare/circl v1.3.7 h1:qlCDlTPz2n9fu58M0Nh1J/JzcFpfgkFHHX3O35r5vcU=
+github.com/cloudflare/circl v1.3.7/go.mod h1:sRTcRWXGLrKw6yIGJ+l7amYJFfAXbZG0kBSc8r4zxgA=
 github.com/cloudflare/golz4 v0.0.0-20150217214814-ef862a3cdc58 h1:F1EaeKL/ta07PY/k9Os/UFtwERei2/XzGemhpGnBKNg=
 github.com/cloudflare/golz4 v0.0.0-20150217214814-ef862a3cdc58/go.mod h1:EOBUe0h4xcZ5GoxqC5SDxFQ8gwyZPKQoEzownBlhI80=
 github.com/cncf/udpa/go v0.0.0-20191209042840-269d4d468f6f/go.mod h1:M8M6+tZqaGXZJjfX53e64911xZQV5JYwmTeXPW+k8Sc=

From a0e0ca9dbe42045d03fd173c52e9a59da842b66e Mon Sep 17 00:00:00 2001
From: Juan Carlos <juangom@users.noreply.github.com>
Date: Mon, 8 Jan 2024 12:21:41 -0600
Subject: [PATCH 18/68] Enable sidecar containers to helm chart (#5871)

---
 CHANGELOG.md                                  |   4 +
 .../helm/charts/grafana-agent/README.md       |   1 +
 .../grafana-agent/ci/sidecars-values.yaml     |  29 +++++
 .../templates/controllers/_pod.yaml           |   3 +
 .../helm/charts/grafana-agent/values.yaml     |   3 +
 .../grafana-agent/templates/configmap.yaml    |  42 +++++++
 .../templates/controllers/daemonset.yaml      |  95 ++++++++++++++
 .../grafana-agent/templates/rbac.yaml         | 117 ++++++++++++++++++
 .../grafana-agent/templates/service.yaml      |  22 ++++
 .../templates/serviceaccount.yaml             |  12 ++
 10 files changed, 328 insertions(+)
 create mode 100644 operations/helm/charts/grafana-agent/ci/sidecars-values.yaml
 create mode 100644 operations/helm/tests/sidecars/grafana-agent/templates/configmap.yaml
 create mode 100644 operations/helm/tests/sidecars/grafana-agent/templates/controllers/daemonset.yaml
 create mode 100644 operations/helm/tests/sidecars/grafana-agent/templates/rbac.yaml
 create mode 100644 operations/helm/tests/sidecars/grafana-agent/templates/service.yaml
 create mode 100644 operations/helm/tests/sidecars/grafana-agent/templates/serviceaccount.yaml

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 90012924be72..774fbdd73c03 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -43,6 +43,10 @@ v0.39.0-rc.0 (2024-01-05)
 
 - A new `discovery.ovhcloud` component for discovering scrape targets on OVHcloud. (@ptodev)
 
+### Features
+
+- Allow specifying additional containers to run. (@juangom)
+
 ### Enhancements
 
 - Flow Windows service: Support environment variables. (@jkroepke)
diff --git a/operations/helm/charts/grafana-agent/README.md b/operations/helm/charts/grafana-agent/README.md
index 98e4219d36b5..c9c5d6df16a9 100644
--- a/operations/helm/charts/grafana-agent/README.md
+++ b/operations/helm/charts/grafana-agent/README.md
@@ -78,6 +78,7 @@ use the older mode (called "static mode"), set the `agent.mode` value to
 | controller.dnsPolicy | string | `"ClusterFirst"` | Configures the DNS policy for the pod. https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pod-s-dns-policy |
 | controller.enableStatefulSetAutoDeletePVC | bool | `false` | Whether to enable automatic deletion of stale PVCs due to a scale down operation, when controller.type is 'statefulset'. |
 | controller.extraAnnotations | object | `{}` | Annotations to add to controller. |
+| controller.extraContainers | list | `[]` | Additional containers to run alongside the agent container and initContainers. |
 | controller.hostNetwork | bool | `false` | Configures Pods to use the host network. When set to true, the ports that will be used must be specified. |
 | controller.hostPID | bool | `false` | Configures Pods to use the host PID namespace. |
 | controller.initContainers | list | `[]` |  |
diff --git a/operations/helm/charts/grafana-agent/ci/sidecars-values.yaml b/operations/helm/charts/grafana-agent/ci/sidecars-values.yaml
new file mode 100644
index 000000000000..a443c9a94974
--- /dev/null
+++ b/operations/helm/charts/grafana-agent/ci/sidecars-values.yaml
@@ -0,0 +1,29 @@
+controller:
+  extraContainers:
+  - name: geo-ip
+    image: ghcr.io/maxmind/geoipupdate:v6.0
+    volumeMounts:
+      - name: geoip
+        mountPath: /etc/geoip
+    volumes:
+    - name: geoip
+      emptyDir: {}
+    env:
+    - name: GEOIPUPDATE_ACCOUNT_ID
+      value: "geoipupdate_account_id"
+    - name: GEOIPUPDATE_LICENSE_KEY
+      value: "geoipupdate_license_key"
+    - name: GEOIPUPDATE_EDITION_IDS
+      value: "GeoLite2-ASN GeoLite2-City GeoLite2-Country"
+    - name: GEOIPUPDATE_DB_DIR
+      value: "/etc/geoip"
+  volumes:
+    extra:
+      - name: geoip
+        mountPath: /etc/geoip
+
+agent:
+  mounts:
+    extra:
+      - name: geoip
+        mountPath: /etc/geoip
diff --git a/operations/helm/charts/grafana-agent/templates/controllers/_pod.yaml b/operations/helm/charts/grafana-agent/templates/controllers/_pod.yaml
index 1fe0363c9232..907b5eb6bfc1 100644
--- a/operations/helm/charts/grafana-agent/templates/controllers/_pod.yaml
+++ b/operations/helm/charts/grafana-agent/templates/controllers/_pod.yaml
@@ -32,6 +32,9 @@ spec:
   containers:
     {{- include "grafana-agent.container" . | nindent 4 }}
     {{- include "grafana-agent.watch-container" . | nindent 4 }}
+    {{- with .Values.controller.extraContainers }}
+    {{- toYaml . | nindent 4 }}
+    {{- end}}
   {{- if .Values.controller.priorityClassName }}
   priorityClassName: {{ .Values.controller.priorityClassName }}
   {{- end }}
diff --git a/operations/helm/charts/grafana-agent/values.yaml b/operations/helm/charts/grafana-agent/values.yaml
index dd94b3b09118..254a28e69b2d 100644
--- a/operations/helm/charts/grafana-agent/values.yaml
+++ b/operations/helm/charts/grafana-agent/values.yaml
@@ -218,6 +218,9 @@ controller:
   ##
   initContainers: []
 
+  # -- Additional containers to run alongside the agent container and initContainers.
+  extraContainers: []
+
 service:
   # -- Creates a Service for the controller's pods.
   enabled: true
diff --git a/operations/helm/tests/sidecars/grafana-agent/templates/configmap.yaml b/operations/helm/tests/sidecars/grafana-agent/templates/configmap.yaml
new file mode 100644
index 000000000000..2fdc6f011777
--- /dev/null
+++ b/operations/helm/tests/sidecars/grafana-agent/templates/configmap.yaml
@@ -0,0 +1,42 @@
+---
+# Source: grafana-agent/templates/configmap.yaml
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: grafana-agent
+  labels:
+    helm.sh/chart: grafana-agent
+    app.kubernetes.io/name: grafana-agent
+    app.kubernetes.io/instance: grafana-agent
+    app.kubernetes.io/version: "vX.Y.Z"
+    app.kubernetes.io/managed-by: Helm
+data:
+  config.river: |-
+    logging {
+    	level  = "info"
+    	format = "logfmt"
+    }
+    
+    discovery.kubernetes "pods" {
+    	role = "pod"
+    }
+    
+    discovery.kubernetes "nodes" {
+    	role = "node"
+    }
+    
+    discovery.kubernetes "services" {
+    	role = "service"
+    }
+    
+    discovery.kubernetes "endpoints" {
+    	role = "endpoints"
+    }
+    
+    discovery.kubernetes "endpointslices" {
+    	role = "endpointslice"
+    }
+    
+    discovery.kubernetes "ingresses" {
+    	role = "ingress"
+    }
diff --git a/operations/helm/tests/sidecars/grafana-agent/templates/controllers/daemonset.yaml b/operations/helm/tests/sidecars/grafana-agent/templates/controllers/daemonset.yaml
new file mode 100644
index 000000000000..0b22a92e6773
--- /dev/null
+++ b/operations/helm/tests/sidecars/grafana-agent/templates/controllers/daemonset.yaml
@@ -0,0 +1,95 @@
+---
+# Source: grafana-agent/templates/controllers/daemonset.yaml
+apiVersion: apps/v1
+kind: DaemonSet
+metadata:
+  name: grafana-agent
+  labels:
+    helm.sh/chart: grafana-agent
+    app.kubernetes.io/name: grafana-agent
+    app.kubernetes.io/instance: grafana-agent
+    app.kubernetes.io/version: "vX.Y.Z"
+    app.kubernetes.io/managed-by: Helm
+spec:
+  minReadySeconds: 10
+  selector:
+    matchLabels:
+      app.kubernetes.io/name: grafana-agent
+      app.kubernetes.io/instance: grafana-agent
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/name: grafana-agent
+        app.kubernetes.io/instance: grafana-agent
+    spec:
+      serviceAccountName: grafana-agent
+      containers:
+        - name: grafana-agent
+          image: docker.io/grafana/agent:v0.38.1
+          imagePullPolicy: IfNotPresent
+          args:
+            - run
+            - /etc/agent/config.river
+            - --storage.path=/tmp/agent
+            - --server.http.listen-addr=0.0.0.0:80
+            - --server.http.ui-path-prefix=/
+          env:
+            - name: AGENT_MODE
+              value: flow
+            - name: AGENT_DEPLOY_MODE
+              value: "helm"
+            - name: HOSTNAME
+              valueFrom:
+                fieldRef:
+                  fieldPath: spec.nodeName
+          ports:
+            - containerPort: 80
+              name: http-metrics
+          readinessProbe:
+            httpGet:
+              path: /-/ready
+              port: 80
+            initialDelaySeconds: 10
+            timeoutSeconds: 1
+          volumeMounts:
+            - name: config
+              mountPath: /etc/agent
+            -
+              mountPath: /etc/geoip
+              name: geoip
+        - name: config-reloader
+          image: docker.io/jimmidyson/configmap-reload:v0.8.0
+          args:
+            - --volume-dir=/etc/agent
+            - --webhook-url=http://localhost:80/-/reload
+          volumeMounts:
+            - name: config
+              mountPath: /etc/agent
+          resources:
+            requests:
+              cpu: 1m
+              memory: 5Mi
+        - env:
+          - name: GEOIPUPDATE_ACCOUNT_ID
+            value: geoipupdate_account_id
+          - name: GEOIPUPDATE_LICENSE_KEY
+            value: geoipupdate_license_key
+          - name: GEOIPUPDATE_EDITION_IDS
+            value: GeoLite2-ASN GeoLite2-City GeoLite2-Country
+          - name: GEOIPUPDATE_DB_DIR
+            value: /etc/geoip
+          image: ghcr.io/maxmind/geoipupdate:v6.0
+          name: geo-ip
+          volumeMounts:
+          - mountPath: /etc/geoip
+            name: geoip
+          volumes:
+          - emptyDir: {}
+            name: geoip
+      dnsPolicy: ClusterFirst
+      volumes:
+        - name: config
+          configMap:
+            name: grafana-agent
+        - mountPath: /etc/geoip
+          name: geoip
diff --git a/operations/helm/tests/sidecars/grafana-agent/templates/rbac.yaml b/operations/helm/tests/sidecars/grafana-agent/templates/rbac.yaml
new file mode 100644
index 000000000000..3765583fb64f
--- /dev/null
+++ b/operations/helm/tests/sidecars/grafana-agent/templates/rbac.yaml
@@ -0,0 +1,117 @@
+---
+# Source: grafana-agent/templates/rbac.yaml
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: grafana-agent
+  labels:
+    helm.sh/chart: grafana-agent
+    app.kubernetes.io/name: grafana-agent
+    app.kubernetes.io/instance: grafana-agent
+    app.kubernetes.io/version: "vX.Y.Z"
+    app.kubernetes.io/managed-by: Helm
+rules:
+  # Rules which allow discovery.kubernetes to function.
+  - apiGroups:
+      - ""
+      - "discovery.k8s.io"
+      - "networking.k8s.io"
+    resources:
+      - endpoints
+      - endpointslices
+      - ingresses
+      - nodes
+      - nodes/proxy
+      - nodes/metrics
+      - pods
+      - services
+    verbs:
+      - get
+      - list
+      - watch
+  # Rules which allow loki.source.kubernetes and loki.source.podlogs to work.
+  - apiGroups:
+      - ""
+    resources:
+      - pods
+      - pods/log
+      - namespaces
+    verbs:
+      - get
+      - list
+      - watch
+  - apiGroups:
+      - "monitoring.grafana.com"
+    resources:
+      - podlogs
+    verbs:
+      - get
+      - list
+      - watch
+  # Rules which allow mimir.rules.kubernetes to work.
+  - apiGroups: ["monitoring.coreos.com"]
+    resources:
+      - prometheusrules
+    verbs:
+      - get
+      - list
+      - watch
+  - nonResourceURLs:
+      - /metrics
+    verbs:
+      - get
+  # Rules for prometheus.kubernetes.*
+  - apiGroups: ["monitoring.coreos.com"]
+    resources:
+      - podmonitors
+      - servicemonitors
+      - probes
+    verbs:
+      - get
+      - list
+      - watch
+  # Rules which allow eventhandler to work.
+  - apiGroups:
+      - ""
+    resources:
+      - events
+    verbs:
+      - get
+      - list
+      - watch
+  # needed for remote.kubernetes.*
+  - apiGroups: [""]
+    resources:
+      - "configmaps"
+      - "secrets"
+    verbs:
+      - get
+      - list
+      - watch
+  # needed for otelcol.processor.k8sattributes
+  - apiGroups: ["apps"]
+    resources: ["replicasets"]
+    verbs: ["get", "list", "watch"]
+  - apiGroups: ["extensions"]
+    resources: ["replicasets"]
+    verbs: ["get", "list", "watch"]
+---
+# Source: grafana-agent/templates/rbac.yaml
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: grafana-agent
+  labels:
+    helm.sh/chart: grafana-agent
+    app.kubernetes.io/name: grafana-agent
+    app.kubernetes.io/instance: grafana-agent
+    app.kubernetes.io/version: "vX.Y.Z"
+    app.kubernetes.io/managed-by: Helm
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: grafana-agent
+subjects:
+  - kind: ServiceAccount
+    name: grafana-agent
+    namespace: default
diff --git a/operations/helm/tests/sidecars/grafana-agent/templates/service.yaml b/operations/helm/tests/sidecars/grafana-agent/templates/service.yaml
new file mode 100644
index 000000000000..04f6eeff3c4d
--- /dev/null
+++ b/operations/helm/tests/sidecars/grafana-agent/templates/service.yaml
@@ -0,0 +1,22 @@
+---
+# Source: grafana-agent/templates/service.yaml
+apiVersion: v1
+kind: Service
+metadata:
+  name: grafana-agent
+  labels:
+    helm.sh/chart: grafana-agent
+    app.kubernetes.io/name: grafana-agent
+    app.kubernetes.io/instance: grafana-agent
+    app.kubernetes.io/version: "vX.Y.Z"
+    app.kubernetes.io/managed-by: Helm
+spec:
+  type: ClusterIP
+  selector:
+    app.kubernetes.io/name: grafana-agent
+    app.kubernetes.io/instance: grafana-agent
+  ports:
+    - name: http-metrics
+      port: 80
+      targetPort: 80
+      protocol: "TCP"
diff --git a/operations/helm/tests/sidecars/grafana-agent/templates/serviceaccount.yaml b/operations/helm/tests/sidecars/grafana-agent/templates/serviceaccount.yaml
new file mode 100644
index 000000000000..1dfd6fff9bdf
--- /dev/null
+++ b/operations/helm/tests/sidecars/grafana-agent/templates/serviceaccount.yaml
@@ -0,0 +1,12 @@
+---
+# Source: grafana-agent/templates/serviceaccount.yaml
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: grafana-agent
+  labels:
+    helm.sh/chart: grafana-agent
+    app.kubernetes.io/name: grafana-agent
+    app.kubernetes.io/instance: grafana-agent
+    app.kubernetes.io/version: "vX.Y.Z"
+    app.kubernetes.io/managed-by: Helm

From b23c66edb691620857ad49ec1273a80b8c1021b3 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 8 Jan 2024 13:25:23 -0500
Subject: [PATCH 19/68] build(deps-dev): bump eslint-config-prettier in /web/ui
 (#5908)

Bumps [eslint-config-prettier](https://github.com/prettier/eslint-config-prettier) from 8.8.0 to 9.1.0.
- [Changelog](https://github.com/prettier/eslint-config-prettier/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prettier/eslint-config-prettier/compare/v8.8.0...v9.1.0)

---
updated-dependencies:
- dependency-name: eslint-config-prettier
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 web/ui/package.json | 2 +-
 web/ui/yarn.lock    | 8 ++++----
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/web/ui/package.json b/web/ui/package.json
index 8c466a40e980..87bb50119706 100644
--- a/web/ui/package.json
+++ b/web/ui/package.json
@@ -22,7 +22,7 @@
     "@types/react-dom": "^18.2.14",
     "@types/react-syntax-highlighter": "^15.5.6",
     "eslint": "^8.40.0",
-    "eslint-config-prettier": "^8.8.0",
+    "eslint-config-prettier": "^9.1.0",
     "eslint-config-react-app": "^7.0.1",
     "eslint-plugin-prettier": "^4.2.1",
     "eslint-plugin-simple-import-sort": "^10.0.0",
diff --git a/web/ui/yarn.lock b/web/ui/yarn.lock
index 66627484b971..60d0d721c513 100644
--- a/web/ui/yarn.lock
+++ b/web/ui/yarn.lock
@@ -4497,10 +4497,10 @@ escodegen@^2.0.0:
   optionalDependencies:
     source-map "~0.6.1"
 
-eslint-config-prettier@^8.8.0:
-  version "8.8.0"
-  resolved "https://registry.yarnpkg.com/eslint-config-prettier/-/eslint-config-prettier-8.8.0.tgz#bfda738d412adc917fd7b038857110efe98c9348"
-  integrity sha512-wLbQiFre3tdGgpDv67NQKnJuTlcUVYHas3k+DZCc2U2BadthoEY4B7hLPvAxaqdyOGCzuLfii2fqGph10va7oA==
+eslint-config-prettier@^9.1.0:
+  version "9.1.0"
+  resolved "https://registry.yarnpkg.com/eslint-config-prettier/-/eslint-config-prettier-9.1.0.tgz#31af3d94578645966c082fcb71a5846d3c94867f"
+  integrity sha512-NSWl5BFQWEPi1j4TjVNItzYV7dZXZ+wP6I6ZhrBGpChQhZRUaElihE9uRRkcbRnNb76UMKDF3r+WTmNcGPKsqw==
 
 eslint-config-react-app@^7.0.1:
   version "7.0.1"

From 958f23ba51822cedf4cf0098f3fd7a351ee52a65 Mon Sep 17 00:00:00 2001
From: Berend <berendiwema@users.noreply.github.com>
Date: Mon, 8 Jan 2024 19:38:52 +0100
Subject: [PATCH 20/68] chore(deps): bump
 github.com/jimmidyson/configmap-reload from v0.8.0 to v0.12.0 and point to
 ghcr.io registry (#5920)

---
 operations/helm/charts/grafana-agent/CHANGELOG.md            | 5 +++++
 operations/helm/charts/grafana-agent/README.md               | 4 ++--
 operations/helm/charts/grafana-agent/values.yaml             | 4 ++--
 .../grafana-agent/templates/controllers/daemonset.yaml       | 2 +-
 .../grafana-agent/templates/controllers/statefulset.yaml     | 2 +-
 .../grafana-agent/templates/controllers/daemonset.yaml       | 2 +-
 .../grafana-agent/templates/controllers/daemonset.yaml       | 2 +-
 .../grafana-agent/templates/controllers/daemonset.yaml       | 2 +-
 .../grafana-agent/templates/controllers/deployment.yaml      | 2 +-
 .../grafana-agent/templates/controllers/deployment.yaml      | 2 +-
 .../grafana-agent/templates/controllers/statefulset.yaml     | 2 +-
 .../grafana-agent/templates/controllers/statefulset.yaml     | 2 +-
 .../grafana-agent/templates/controllers/daemonset.yaml       | 2 +-
 .../grafana-agent/templates/controllers/daemonset.yaml       | 2 +-
 .../grafana-agent/templates/controllers/daemonset.yaml       | 2 +-
 .../grafana-agent/templates/controllers/daemonset.yaml       | 2 +-
 .../grafana-agent/templates/controllers/daemonset.yaml       | 2 +-
 .../grafana-agent/templates/controllers/daemonset.yaml       | 2 +-
 .../grafana-agent/templates/controllers/daemonset.yaml       | 2 +-
 .../grafana-agent/templates/controllers/daemonset.yaml       | 2 +-
 .../grafana-agent/templates/controllers/daemonset.yaml       | 2 +-
 .../grafana-agent/templates/controllers/daemonset.yaml       | 2 +-
 .../grafana-agent/templates/controllers/daemonset.yaml       | 2 +-
 .../grafana-agent/templates/controllers/daemonset.yaml       | 2 +-
 .../grafana-agent/templates/controllers/daemonset.yaml       | 2 +-
 .../grafana-agent/templates/controllers/daemonset.yaml       | 2 +-
 .../grafana-agent/templates/controllers/daemonset.yaml       | 2 +-
 .../grafana-agent/templates/controllers/daemonset.yaml       | 2 +-
 28 files changed, 34 insertions(+), 29 deletions(-)

diff --git a/operations/helm/charts/grafana-agent/CHANGELOG.md b/operations/helm/charts/grafana-agent/CHANGELOG.md
index 6603ab6fb063..1d739c786eff 100644
--- a/operations/helm/charts/grafana-agent/CHANGELOG.md
+++ b/operations/helm/charts/grafana-agent/CHANGELOG.md
@@ -23,6 +23,11 @@ Unreleased
 
 - Statefulset should use value `.controller.enableStatefulSetAutoDeletePVC` instead of just `.enableStatefulSetAutoDeletePVC`. (@captncraig)
 
+### Other changes
+
+- Change config reloader image to `ghcr.io/jimmidyson/configmap-reload:v0.12.0` to reflect change in repository and version. (@berendiwema)
+
+
 0.29.0 (2023-11-30)
 -------------------
 
diff --git a/operations/helm/charts/grafana-agent/README.md b/operations/helm/charts/grafana-agent/README.md
index c9c5d6df16a9..2423a23cbc66 100644
--- a/operations/helm/charts/grafana-agent/README.md
+++ b/operations/helm/charts/grafana-agent/README.md
@@ -64,9 +64,9 @@ use the older mode (called "static mode"), set the `agent.mode` value to
 | configReloader.customArgs | list | `[]` | Override the args passed to the container. |
 | configReloader.enabled | bool | `true` | Enables automatically reloading when the agent config changes. |
 | configReloader.image.digest | string | `""` | SHA256 digest of image to use for config reloading (either in format "sha256:XYZ" or "XYZ"). When set, will override `configReloader.image.tag` |
-| configReloader.image.registry | string | `"docker.io"` | Config reloader image registry (defaults to docker.io) |
+| configReloader.image.registry | string | `"ghcr.io"` | Config reloader image registry (defaults to docker.io) |
 | configReloader.image.repository | string | `"jimmidyson/configmap-reload"` | Repository to get config reloader image from. |
-| configReloader.image.tag | string | `"v0.8.0"` | Tag of image to use for config reloading. |
+| configReloader.image.tag | string | `"v0.12.0"` | Tag of image to use for config reloading. |
 | configReloader.resources | object | `{"requests":{"cpu":"1m","memory":"5Mi"}}` | Resource requests and limits to apply to the config reloader container. |
 | configReloader.securityContext | object | `{}` | Security context to apply to the Grafana configReloader container. |
 | controller.affinity | object | `{}` | Affinity configuration for pods. |
diff --git a/operations/helm/charts/grafana-agent/values.yaml b/operations/helm/charts/grafana-agent/values.yaml
index 254a28e69b2d..0143cefe1962 100644
--- a/operations/helm/charts/grafana-agent/values.yaml
+++ b/operations/helm/charts/grafana-agent/values.yaml
@@ -129,11 +129,11 @@ configReloader:
   enabled: true
   image:
     # -- Config reloader image registry (defaults to docker.io)
-    registry: "docker.io"
+    registry: "ghcr.io"
     # -- Repository to get config reloader image from.
     repository: jimmidyson/configmap-reload
     # -- Tag of image to use for config reloading.
-    tag: v0.8.0
+    tag: v0.12.0
     # -- SHA256 digest of image to use for config reloading (either in format "sha256:XYZ" or "XYZ"). When set, will override `configReloader.image.tag`
     digest: ""
   # -- Override the args passed to the container.
diff --git a/operations/helm/tests/additional-serviceaccount-label/grafana-agent/templates/controllers/daemonset.yaml b/operations/helm/tests/additional-serviceaccount-label/grafana-agent/templates/controllers/daemonset.yaml
index 7ac89ceb865a..4a6e72f132cf 100644
--- a/operations/helm/tests/additional-serviceaccount-label/grafana-agent/templates/controllers/daemonset.yaml
+++ b/operations/helm/tests/additional-serviceaccount-label/grafana-agent/templates/controllers/daemonset.yaml
@@ -55,7 +55,7 @@ spec:
             - name: config
               mountPath: /etc/agent
         - name: config-reloader
-          image: docker.io/jimmidyson/configmap-reload:v0.8.0
+          image: ghcr.io/jimmidyson/configmap-reload:v0.12.0
           args:
             - --volume-dir=/etc/agent
             - --webhook-url=http://localhost:80/-/reload
diff --git a/operations/helm/tests/clustering/grafana-agent/templates/controllers/statefulset.yaml b/operations/helm/tests/clustering/grafana-agent/templates/controllers/statefulset.yaml
index 92ad19130040..af3b0c1fd7e4 100644
--- a/operations/helm/tests/clustering/grafana-agent/templates/controllers/statefulset.yaml
+++ b/operations/helm/tests/clustering/grafana-agent/templates/controllers/statefulset.yaml
@@ -60,7 +60,7 @@ spec:
             - name: config
               mountPath: /etc/agent
         - name: config-reloader
-          image: docker.io/jimmidyson/configmap-reload:v0.8.0
+          image: ghcr.io/jimmidyson/configmap-reload:v0.12.0
           args:
             - --volume-dir=/etc/agent
             - --webhook-url=http://localhost:80/-/reload
diff --git a/operations/helm/tests/controller-volumes-extra/grafana-agent/templates/controllers/daemonset.yaml b/operations/helm/tests/controller-volumes-extra/grafana-agent/templates/controllers/daemonset.yaml
index 39aa9491fa20..ef17189995f4 100644
--- a/operations/helm/tests/controller-volumes-extra/grafana-agent/templates/controllers/daemonset.yaml
+++ b/operations/helm/tests/controller-volumes-extra/grafana-agent/templates/controllers/daemonset.yaml
@@ -58,7 +58,7 @@ spec:
               mountPath: /cache
               name: cache-volume
         - name: config-reloader
-          image: docker.io/jimmidyson/configmap-reload:v0.8.0
+          image: ghcr.io/jimmidyson/configmap-reload:v0.12.0
           args:
             - --volume-dir=/etc/agent
             - --webhook-url=http://localhost:80/-/reload
diff --git a/operations/helm/tests/create-daemonset-hostnetwork/grafana-agent/templates/controllers/daemonset.yaml b/operations/helm/tests/create-daemonset-hostnetwork/grafana-agent/templates/controllers/daemonset.yaml
index 74c228870934..b43c8b537889 100644
--- a/operations/helm/tests/create-daemonset-hostnetwork/grafana-agent/templates/controllers/daemonset.yaml
+++ b/operations/helm/tests/create-daemonset-hostnetwork/grafana-agent/templates/controllers/daemonset.yaml
@@ -55,7 +55,7 @@ spec:
             - name: config
               mountPath: /etc/agent
         - name: config-reloader
-          image: docker.io/jimmidyson/configmap-reload:v0.8.0
+          image: ghcr.io/jimmidyson/configmap-reload:v0.12.0
           args:
             - --volume-dir=/etc/agent
             - --webhook-url=http://localhost:80/-/reload
diff --git a/operations/helm/tests/create-daemonset/grafana-agent/templates/controllers/daemonset.yaml b/operations/helm/tests/create-daemonset/grafana-agent/templates/controllers/daemonset.yaml
index 7ac89ceb865a..4a6e72f132cf 100644
--- a/operations/helm/tests/create-daemonset/grafana-agent/templates/controllers/daemonset.yaml
+++ b/operations/helm/tests/create-daemonset/grafana-agent/templates/controllers/daemonset.yaml
@@ -55,7 +55,7 @@ spec:
             - name: config
               mountPath: /etc/agent
         - name: config-reloader
-          image: docker.io/jimmidyson/configmap-reload:v0.8.0
+          image: ghcr.io/jimmidyson/configmap-reload:v0.12.0
           args:
             - --volume-dir=/etc/agent
             - --webhook-url=http://localhost:80/-/reload
diff --git a/operations/helm/tests/create-deployment-autoscaling/grafana-agent/templates/controllers/deployment.yaml b/operations/helm/tests/create-deployment-autoscaling/grafana-agent/templates/controllers/deployment.yaml
index 478a47d32f56..74959bc95b9e 100644
--- a/operations/helm/tests/create-deployment-autoscaling/grafana-agent/templates/controllers/deployment.yaml
+++ b/operations/helm/tests/create-deployment-autoscaling/grafana-agent/templates/controllers/deployment.yaml
@@ -58,7 +58,7 @@ spec:
             - name: config
               mountPath: /etc/agent
         - name: config-reloader
-          image: docker.io/jimmidyson/configmap-reload:v0.8.0
+          image: ghcr.io/jimmidyson/configmap-reload:v0.12.0
           args:
             - --volume-dir=/etc/agent
             - --webhook-url=http://localhost:80/-/reload
diff --git a/operations/helm/tests/create-deployment/grafana-agent/templates/controllers/deployment.yaml b/operations/helm/tests/create-deployment/grafana-agent/templates/controllers/deployment.yaml
index 8fbd88183c0f..e6b30b603cd8 100644
--- a/operations/helm/tests/create-deployment/grafana-agent/templates/controllers/deployment.yaml
+++ b/operations/helm/tests/create-deployment/grafana-agent/templates/controllers/deployment.yaml
@@ -56,7 +56,7 @@ spec:
             - name: config
               mountPath: /etc/agent
         - name: config-reloader
-          image: docker.io/jimmidyson/configmap-reload:v0.8.0
+          image: ghcr.io/jimmidyson/configmap-reload:v0.12.0
           args:
             - --volume-dir=/etc/agent
             - --webhook-url=http://localhost:80/-/reload
diff --git a/operations/helm/tests/create-statefulset-autoscaling/grafana-agent/templates/controllers/statefulset.yaml b/operations/helm/tests/create-statefulset-autoscaling/grafana-agent/templates/controllers/statefulset.yaml
index 06151482680e..9ad9d83989c9 100644
--- a/operations/helm/tests/create-statefulset-autoscaling/grafana-agent/templates/controllers/statefulset.yaml
+++ b/operations/helm/tests/create-statefulset-autoscaling/grafana-agent/templates/controllers/statefulset.yaml
@@ -60,7 +60,7 @@ spec:
             - name: config
               mountPath: /etc/agent
         - name: config-reloader
-          image: docker.io/jimmidyson/configmap-reload:v0.8.0
+          image: ghcr.io/jimmidyson/configmap-reload:v0.12.0
           args:
             - --volume-dir=/etc/agent
             - --webhook-url=http://localhost:80/-/reload
diff --git a/operations/helm/tests/create-statefulset/grafana-agent/templates/controllers/statefulset.yaml b/operations/helm/tests/create-statefulset/grafana-agent/templates/controllers/statefulset.yaml
index cfaf3fa7aa65..14069e356960 100644
--- a/operations/helm/tests/create-statefulset/grafana-agent/templates/controllers/statefulset.yaml
+++ b/operations/helm/tests/create-statefulset/grafana-agent/templates/controllers/statefulset.yaml
@@ -58,7 +58,7 @@ spec:
             - name: config
               mountPath: /etc/agent
         - name: config-reloader
-          image: docker.io/jimmidyson/configmap-reload:v0.8.0
+          image: ghcr.io/jimmidyson/configmap-reload:v0.12.0
           args:
             - --volume-dir=/etc/agent
             - --webhook-url=http://localhost:80/-/reload
diff --git a/operations/helm/tests/custom-config/grafana-agent/templates/controllers/daemonset.yaml b/operations/helm/tests/custom-config/grafana-agent/templates/controllers/daemonset.yaml
index 7ac89ceb865a..4a6e72f132cf 100644
--- a/operations/helm/tests/custom-config/grafana-agent/templates/controllers/daemonset.yaml
+++ b/operations/helm/tests/custom-config/grafana-agent/templates/controllers/daemonset.yaml
@@ -55,7 +55,7 @@ spec:
             - name: config
               mountPath: /etc/agent
         - name: config-reloader
-          image: docker.io/jimmidyson/configmap-reload:v0.8.0
+          image: ghcr.io/jimmidyson/configmap-reload:v0.12.0
           args:
             - --volume-dir=/etc/agent
             - --webhook-url=http://localhost:80/-/reload
diff --git a/operations/helm/tests/default-values/grafana-agent/templates/controllers/daemonset.yaml b/operations/helm/tests/default-values/grafana-agent/templates/controllers/daemonset.yaml
index 7ac89ceb865a..4a6e72f132cf 100644
--- a/operations/helm/tests/default-values/grafana-agent/templates/controllers/daemonset.yaml
+++ b/operations/helm/tests/default-values/grafana-agent/templates/controllers/daemonset.yaml
@@ -55,7 +55,7 @@ spec:
             - name: config
               mountPath: /etc/agent
         - name: config-reloader
-          image: docker.io/jimmidyson/configmap-reload:v0.8.0
+          image: ghcr.io/jimmidyson/configmap-reload:v0.12.0
           args:
             - --volume-dir=/etc/agent
             - --webhook-url=http://localhost:80/-/reload
diff --git a/operations/helm/tests/enable-servicemonitor/grafana-agent/templates/controllers/daemonset.yaml b/operations/helm/tests/enable-servicemonitor/grafana-agent/templates/controllers/daemonset.yaml
index 7ac89ceb865a..4a6e72f132cf 100644
--- a/operations/helm/tests/enable-servicemonitor/grafana-agent/templates/controllers/daemonset.yaml
+++ b/operations/helm/tests/enable-servicemonitor/grafana-agent/templates/controllers/daemonset.yaml
@@ -55,7 +55,7 @@ spec:
             - name: config
               mountPath: /etc/agent
         - name: config-reloader
-          image: docker.io/jimmidyson/configmap-reload:v0.8.0
+          image: ghcr.io/jimmidyson/configmap-reload:v0.12.0
           args:
             - --volume-dir=/etc/agent
             - --webhook-url=http://localhost:80/-/reload
diff --git a/operations/helm/tests/envFrom/grafana-agent/templates/controllers/daemonset.yaml b/operations/helm/tests/envFrom/grafana-agent/templates/controllers/daemonset.yaml
index 2d5c5f77964a..47e8370cba61 100644
--- a/operations/helm/tests/envFrom/grafana-agent/templates/controllers/daemonset.yaml
+++ b/operations/helm/tests/envFrom/grafana-agent/templates/controllers/daemonset.yaml
@@ -58,7 +58,7 @@ spec:
             - name: config
               mountPath: /etc/agent
         - name: config-reloader
-          image: docker.io/jimmidyson/configmap-reload:v0.8.0
+          image: ghcr.io/jimmidyson/configmap-reload:v0.12.0
           args:
             - --volume-dir=/etc/agent
             - --webhook-url=http://localhost:80/-/reload
diff --git a/operations/helm/tests/existing-config/grafana-agent/templates/controllers/daemonset.yaml b/operations/helm/tests/existing-config/grafana-agent/templates/controllers/daemonset.yaml
index 683d4c72adce..204bc2f541ff 100644
--- a/operations/helm/tests/existing-config/grafana-agent/templates/controllers/daemonset.yaml
+++ b/operations/helm/tests/existing-config/grafana-agent/templates/controllers/daemonset.yaml
@@ -55,7 +55,7 @@ spec:
             - name: config
               mountPath: /etc/agent
         - name: config-reloader
-          image: docker.io/jimmidyson/configmap-reload:v0.8.0
+          image: ghcr.io/jimmidyson/configmap-reload:v0.12.0
           args:
             - --volume-dir=/etc/agent
             - --webhook-url=http://localhost:80/-/reload
diff --git a/operations/helm/tests/extra-env/grafana-agent/templates/controllers/daemonset.yaml b/operations/helm/tests/extra-env/grafana-agent/templates/controllers/daemonset.yaml
index ff83778a94a9..a68d13450e34 100644
--- a/operations/helm/tests/extra-env/grafana-agent/templates/controllers/daemonset.yaml
+++ b/operations/helm/tests/extra-env/grafana-agent/templates/controllers/daemonset.yaml
@@ -64,7 +64,7 @@ spec:
             - name: config
               mountPath: /etc/agent
         - name: config-reloader
-          image: docker.io/jimmidyson/configmap-reload:v0.8.0
+          image: ghcr.io/jimmidyson/configmap-reload:v0.12.0
           args:
             - --volume-dir=/etc/agent
             - --webhook-url=http://localhost:80/-/reload
diff --git a/operations/helm/tests/extra-ports/grafana-agent/templates/controllers/daemonset.yaml b/operations/helm/tests/extra-ports/grafana-agent/templates/controllers/daemonset.yaml
index 4566af378b4c..4b2b1c4bad5c 100644
--- a/operations/helm/tests/extra-ports/grafana-agent/templates/controllers/daemonset.yaml
+++ b/operations/helm/tests/extra-ports/grafana-agent/templates/controllers/daemonset.yaml
@@ -58,7 +58,7 @@ spec:
             - name: config
               mountPath: /etc/agent
         - name: config-reloader
-          image: docker.io/jimmidyson/configmap-reload:v0.8.0
+          image: ghcr.io/jimmidyson/configmap-reload:v0.12.0
           args:
             - --volume-dir=/etc/agent
             - --webhook-url=http://localhost:80/-/reload
diff --git a/operations/helm/tests/faro-ingress/grafana-agent/templates/controllers/daemonset.yaml b/operations/helm/tests/faro-ingress/grafana-agent/templates/controllers/daemonset.yaml
index cb4f0c8964f6..c4d490e0fc70 100644
--- a/operations/helm/tests/faro-ingress/grafana-agent/templates/controllers/daemonset.yaml
+++ b/operations/helm/tests/faro-ingress/grafana-agent/templates/controllers/daemonset.yaml
@@ -58,7 +58,7 @@ spec:
             - name: config
               mountPath: /etc/agent
         - name: config-reloader
-          image: docker.io/jimmidyson/configmap-reload:v0.8.0
+          image: ghcr.io/jimmidyson/configmap-reload:v0.12.0
           args:
             - --volume-dir=/etc/agent
             - --webhook-url=http://localhost:80/-/reload
diff --git a/operations/helm/tests/global-image-pullsecrets/grafana-agent/templates/controllers/daemonset.yaml b/operations/helm/tests/global-image-pullsecrets/grafana-agent/templates/controllers/daemonset.yaml
index e229da2bf950..1a6efea09785 100644
--- a/operations/helm/tests/global-image-pullsecrets/grafana-agent/templates/controllers/daemonset.yaml
+++ b/operations/helm/tests/global-image-pullsecrets/grafana-agent/templates/controllers/daemonset.yaml
@@ -60,7 +60,7 @@ spec:
             - name: config
               mountPath: /etc/agent
         - name: config-reloader
-          image: docker.io/jimmidyson/configmap-reload:v0.8.0
+          image: ghcr.io/jimmidyson/configmap-reload:v0.12.0
           args:
             - --volume-dir=/etc/agent
             - --webhook-url=http://localhost:80/-/reload
diff --git a/operations/helm/tests/global-image-registry/grafana-agent/templates/controllers/daemonset.yaml b/operations/helm/tests/global-image-registry/grafana-agent/templates/controllers/daemonset.yaml
index 09768a686b48..692304acd2f1 100644
--- a/operations/helm/tests/global-image-registry/grafana-agent/templates/controllers/daemonset.yaml
+++ b/operations/helm/tests/global-image-registry/grafana-agent/templates/controllers/daemonset.yaml
@@ -55,7 +55,7 @@ spec:
             - name: config
               mountPath: /etc/agent
         - name: config-reloader
-          image: quay.io/jimmidyson/configmap-reload:v0.8.0
+          image: quay.io/jimmidyson/configmap-reload:v0.12.0
           args:
             - --volume-dir=/etc/agent
             - --webhook-url=http://localhost:80/-/reload
diff --git a/operations/helm/tests/initcontainers/grafana-agent/templates/controllers/daemonset.yaml b/operations/helm/tests/initcontainers/grafana-agent/templates/controllers/daemonset.yaml
index 512c32eece2e..ccf576637bed 100644
--- a/operations/helm/tests/initcontainers/grafana-agent/templates/controllers/daemonset.yaml
+++ b/operations/helm/tests/initcontainers/grafana-agent/templates/controllers/daemonset.yaml
@@ -76,7 +76,7 @@ spec:
               mountPath: /etc/geoip
               name: geoip
         - name: config-reloader
-          image: docker.io/jimmidyson/configmap-reload:v0.8.0
+          image: ghcr.io/jimmidyson/configmap-reload:v0.12.0
           args:
             - --volume-dir=/etc/agent
             - --webhook-url=http://localhost:80/-/reload
diff --git a/operations/helm/tests/local-image-pullsecrets/grafana-agent/templates/controllers/daemonset.yaml b/operations/helm/tests/local-image-pullsecrets/grafana-agent/templates/controllers/daemonset.yaml
index c3a0fb4cafe1..9aa16540da65 100644
--- a/operations/helm/tests/local-image-pullsecrets/grafana-agent/templates/controllers/daemonset.yaml
+++ b/operations/helm/tests/local-image-pullsecrets/grafana-agent/templates/controllers/daemonset.yaml
@@ -57,7 +57,7 @@ spec:
             - name: config
               mountPath: /etc/agent
         - name: config-reloader
-          image: docker.io/jimmidyson/configmap-reload:v0.8.0
+          image: ghcr.io/jimmidyson/configmap-reload:v0.12.0
           args:
             - --volume-dir=/etc/agent
             - --webhook-url=http://localhost:80/-/reload
diff --git a/operations/helm/tests/local-image-registry/grafana-agent/templates/controllers/daemonset.yaml b/operations/helm/tests/local-image-registry/grafana-agent/templates/controllers/daemonset.yaml
index 09768a686b48..692304acd2f1 100644
--- a/operations/helm/tests/local-image-registry/grafana-agent/templates/controllers/daemonset.yaml
+++ b/operations/helm/tests/local-image-registry/grafana-agent/templates/controllers/daemonset.yaml
@@ -55,7 +55,7 @@ spec:
             - name: config
               mountPath: /etc/agent
         - name: config-reloader
-          image: quay.io/jimmidyson/configmap-reload:v0.8.0
+          image: quay.io/jimmidyson/configmap-reload:v0.12.0
           args:
             - --volume-dir=/etc/agent
             - --webhook-url=http://localhost:80/-/reload
diff --git a/operations/helm/tests/nodeselectors-and-tolerations/grafana-agent/templates/controllers/daemonset.yaml b/operations/helm/tests/nodeselectors-and-tolerations/grafana-agent/templates/controllers/daemonset.yaml
index 6de1e5ad8593..8cb19e413aa5 100644
--- a/operations/helm/tests/nodeselectors-and-tolerations/grafana-agent/templates/controllers/daemonset.yaml
+++ b/operations/helm/tests/nodeselectors-and-tolerations/grafana-agent/templates/controllers/daemonset.yaml
@@ -55,7 +55,7 @@ spec:
             - name: config
               mountPath: /etc/agent
         - name: config-reloader
-          image: docker.io/jimmidyson/configmap-reload:v0.8.0
+          image: ghcr.io/jimmidyson/configmap-reload:v0.12.0
           args:
             - --volume-dir=/etc/agent
             - --webhook-url=http://localhost:80/-/reload
diff --git a/operations/helm/tests/sidecars/grafana-agent/templates/controllers/daemonset.yaml b/operations/helm/tests/sidecars/grafana-agent/templates/controllers/daemonset.yaml
index 0b22a92e6773..f2d72440edf6 100644
--- a/operations/helm/tests/sidecars/grafana-agent/templates/controllers/daemonset.yaml
+++ b/operations/helm/tests/sidecars/grafana-agent/templates/controllers/daemonset.yaml
@@ -58,7 +58,7 @@ spec:
               mountPath: /etc/geoip
               name: geoip
         - name: config-reloader
-          image: docker.io/jimmidyson/configmap-reload:v0.8.0
+          image: ghcr.io/jimmidyson/configmap-reload:v0.12.0
           args:
             - --volume-dir=/etc/agent
             - --webhook-url=http://localhost:80/-/reload
diff --git a/operations/helm/tests/static-mode/grafana-agent/templates/controllers/daemonset.yaml b/operations/helm/tests/static-mode/grafana-agent/templates/controllers/daemonset.yaml
index aedb6a176381..34b4d0a38504 100644
--- a/operations/helm/tests/static-mode/grafana-agent/templates/controllers/daemonset.yaml
+++ b/operations/helm/tests/static-mode/grafana-agent/templates/controllers/daemonset.yaml
@@ -52,7 +52,7 @@ spec:
             - name: config
               mountPath: /etc/agent
         - name: config-reloader
-          image: docker.io/jimmidyson/configmap-reload:v0.8.0
+          image: ghcr.io/jimmidyson/configmap-reload:v0.12.0
           args:
             - --volume-dir=/etc/agent
             - --webhook-url=http://localhost:80/-/reload

From a3c26178f7bde727673763232304e0b81656887d Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 8 Jan 2024 13:44:23 -0500
Subject: [PATCH 21/68] build(deps): bump actions/setup-go from 4 to 5 (#5952)

Bumps [actions/setup-go](https://github.com/actions/setup-go) from 4 to 5.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](https://github.com/actions/setup-go/compare/v4...v5)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/integration-tests.yml | 2 +-
 .github/workflows/test.yml              | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/integration-tests.yml b/.github/workflows/integration-tests.yml
index 80540ae4848e..4b9f7077ed57 100644
--- a/.github/workflows/integration-tests.yml
+++ b/.github/workflows/integration-tests.yml
@@ -14,7 +14,7 @@ jobs:
     - name: Checkout code
       uses: actions/checkout@v4
     - name: Setup Go
-      uses: actions/setup-go@v4
+      uses: actions/setup-go@v5
       with:
         go-version: "1.21"
     - name: Set OTEL Exporter Endpoint
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 229de6f55dbe..59d4fbe34540 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -18,7 +18,7 @@ jobs:
     - name: Checkout code
       uses: actions/checkout@v4
     - name: Set up Go 1.21
-      uses: actions/setup-go@v4
+      uses: actions/setup-go@v5
       with:
         go-version: "1.21"
         cache: true

From 5be7184590f329f7915b831cd8909196dced447d Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 8 Jan 2024 13:44:45 -0500
Subject: [PATCH 22/68] build(deps): bump actions/setup-python from 4 to 5
 (#5954)

Bumps [actions/setup-python](https://github.com/actions/setup-python) from 4 to 5.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](https://github.com/actions/setup-python/compare/v4...v5)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/helm-test.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/helm-test.yml b/.github/workflows/helm-test.yml
index 20a3745c8fe1..9d4738bcd6cb 100644
--- a/.github/workflows/helm-test.yml
+++ b/.github/workflows/helm-test.yml
@@ -51,7 +51,7 @@ jobs:
           version: v3.10.3
 
       - name: Install Python
-        uses: actions/setup-python@v4
+        uses: actions/setup-python@v5
         with:
           python-version: '3.9'
           check-latest: true

From 9e6545d5a816ad51f222c10a44ea1668a4ef1f38 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=C4=90=E1=BB=97=20Tr=E1=BB=8Dng=20H=E1=BA=A3i?=
 <41283691+hainenber@users.noreply.github.com>
Date: Tue, 9 Jan 2024 01:45:54 +0700
Subject: [PATCH 23/68] feat(helm/chart/template): set namespace for RBAC's
 service account (#6061)

Signed-off-by: hainenber <dotronghai96@gmail.com>
---
 operations/helm/charts/grafana-agent/CHANGELOG.md   | 13 ++++++++-----
 .../grafana-agent/templates/serviceaccount.yaml     |  1 +
 .../grafana-agent/templates/serviceaccount.yaml     |  1 +
 .../grafana-agent/templates/serviceaccount.yaml     |  1 +
 .../grafana-agent/templates/serviceaccount.yaml     |  1 +
 .../grafana-agent/templates/serviceaccount.yaml     |  1 +
 .../grafana-agent/templates/serviceaccount.yaml     |  1 +
 .../grafana-agent/templates/serviceaccount.yaml     |  1 +
 .../grafana-agent/templates/serviceaccount.yaml     |  1 +
 .../grafana-agent/templates/serviceaccount.yaml     |  1 +
 .../grafana-agent/templates/serviceaccount.yaml     |  1 +
 .../grafana-agent/templates/serviceaccount.yaml     |  1 +
 .../grafana-agent/templates/serviceaccount.yaml     |  1 +
 .../grafana-agent/templates/serviceaccount.yaml     |  1 +
 .../grafana-agent/templates/serviceaccount.yaml     |  1 +
 .../grafana-agent/templates/serviceaccount.yaml     |  1 +
 .../grafana-agent/templates/serviceaccount.yaml     |  1 +
 .../grafana-agent/templates/serviceaccount.yaml     |  1 +
 .../grafana-agent/templates/serviceaccount.yaml     |  1 +
 .../grafana-agent/templates/serviceaccount.yaml     |  1 +
 .../grafana-agent/templates/serviceaccount.yaml     |  1 +
 .../grafana-agent/templates/serviceaccount.yaml     |  1 +
 .../grafana-agent/templates/serviceaccount.yaml     |  1 +
 .../grafana-agent/templates/serviceaccount.yaml     |  1 +
 .../grafana-agent/templates/serviceaccount.yaml     |  1 +
 .../grafana-agent/templates/serviceaccount.yaml     |  1 +
 .../grafana-agent/templates/serviceaccount.yaml     |  1 +
 27 files changed, 34 insertions(+), 5 deletions(-)

diff --git a/operations/helm/charts/grafana-agent/CHANGELOG.md b/operations/helm/charts/grafana-agent/CHANGELOG.md
index 1d739c786eff..5fdfcb54ba54 100644
--- a/operations/helm/charts/grafana-agent/CHANGELOG.md
+++ b/operations/helm/charts/grafana-agent/CHANGELOG.md
@@ -10,6 +10,14 @@ internal API changes are not present.
 Unreleased
 ----------
 
+### Bugfixes
+
+- Configure namespace for service account when RBAC resources is created. (@hainenber)
+
+### Other changes
+
+- Change config reloader image to `ghcr.io/jimmidyson/configmap-reload:v0.12.0` to reflect change in repository and version. (@berendiwema)
+
 0.30.0 (2024-01-05)
 -------------------
 
@@ -23,11 +31,6 @@ Unreleased
 
 - Statefulset should use value `.controller.enableStatefulSetAutoDeletePVC` instead of just `.enableStatefulSetAutoDeletePVC`. (@captncraig)
 
-### Other changes
-
-- Change config reloader image to `ghcr.io/jimmidyson/configmap-reload:v0.12.0` to reflect change in repository and version. (@berendiwema)
-
-
 0.29.0 (2023-11-30)
 -------------------
 
diff --git a/operations/helm/charts/grafana-agent/templates/serviceaccount.yaml b/operations/helm/charts/grafana-agent/templates/serviceaccount.yaml
index 766201635e77..f2d2c90c6ec6 100644
--- a/operations/helm/charts/grafana-agent/templates/serviceaccount.yaml
+++ b/operations/helm/charts/grafana-agent/templates/serviceaccount.yaml
@@ -3,6 +3,7 @@ apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: {{ include "grafana-agent.serviceAccountName" . }}
+  namespace: {{ .Release.Namespace }}
   labels:
     {{- include "grafana-agent.labels" . | nindent 4 }}
     {{- with .Values.serviceAccount.additionalLabels }}
diff --git a/operations/helm/tests/additional-serviceaccount-label/grafana-agent/templates/serviceaccount.yaml b/operations/helm/tests/additional-serviceaccount-label/grafana-agent/templates/serviceaccount.yaml
index ba80344cee51..08eca9f756b2 100644
--- a/operations/helm/tests/additional-serviceaccount-label/grafana-agent/templates/serviceaccount.yaml
+++ b/operations/helm/tests/additional-serviceaccount-label/grafana-agent/templates/serviceaccount.yaml
@@ -4,6 +4,7 @@ apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: grafana-agent
+  namespace: default
   labels:
     helm.sh/chart: grafana-agent
     app.kubernetes.io/name: grafana-agent
diff --git a/operations/helm/tests/clustering/grafana-agent/templates/serviceaccount.yaml b/operations/helm/tests/clustering/grafana-agent/templates/serviceaccount.yaml
index 1dfd6fff9bdf..65d7e0df383f 100644
--- a/operations/helm/tests/clustering/grafana-agent/templates/serviceaccount.yaml
+++ b/operations/helm/tests/clustering/grafana-agent/templates/serviceaccount.yaml
@@ -4,6 +4,7 @@ apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: grafana-agent
+  namespace: default
   labels:
     helm.sh/chart: grafana-agent
     app.kubernetes.io/name: grafana-agent
diff --git a/operations/helm/tests/controller-volumes-extra/grafana-agent/templates/serviceaccount.yaml b/operations/helm/tests/controller-volumes-extra/grafana-agent/templates/serviceaccount.yaml
index 1dfd6fff9bdf..65d7e0df383f 100644
--- a/operations/helm/tests/controller-volumes-extra/grafana-agent/templates/serviceaccount.yaml
+++ b/operations/helm/tests/controller-volumes-extra/grafana-agent/templates/serviceaccount.yaml
@@ -4,6 +4,7 @@ apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: grafana-agent
+  namespace: default
   labels:
     helm.sh/chart: grafana-agent
     app.kubernetes.io/name: grafana-agent
diff --git a/operations/helm/tests/create-daemonset-hostnetwork/grafana-agent/templates/serviceaccount.yaml b/operations/helm/tests/create-daemonset-hostnetwork/grafana-agent/templates/serviceaccount.yaml
index 1dfd6fff9bdf..65d7e0df383f 100644
--- a/operations/helm/tests/create-daemonset-hostnetwork/grafana-agent/templates/serviceaccount.yaml
+++ b/operations/helm/tests/create-daemonset-hostnetwork/grafana-agent/templates/serviceaccount.yaml
@@ -4,6 +4,7 @@ apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: grafana-agent
+  namespace: default
   labels:
     helm.sh/chart: grafana-agent
     app.kubernetes.io/name: grafana-agent
diff --git a/operations/helm/tests/create-daemonset/grafana-agent/templates/serviceaccount.yaml b/operations/helm/tests/create-daemonset/grafana-agent/templates/serviceaccount.yaml
index 1dfd6fff9bdf..65d7e0df383f 100644
--- a/operations/helm/tests/create-daemonset/grafana-agent/templates/serviceaccount.yaml
+++ b/operations/helm/tests/create-daemonset/grafana-agent/templates/serviceaccount.yaml
@@ -4,6 +4,7 @@ apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: grafana-agent
+  namespace: default
   labels:
     helm.sh/chart: grafana-agent
     app.kubernetes.io/name: grafana-agent
diff --git a/operations/helm/tests/create-deployment-autoscaling/grafana-agent/templates/serviceaccount.yaml b/operations/helm/tests/create-deployment-autoscaling/grafana-agent/templates/serviceaccount.yaml
index 1dfd6fff9bdf..65d7e0df383f 100644
--- a/operations/helm/tests/create-deployment-autoscaling/grafana-agent/templates/serviceaccount.yaml
+++ b/operations/helm/tests/create-deployment-autoscaling/grafana-agent/templates/serviceaccount.yaml
@@ -4,6 +4,7 @@ apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: grafana-agent
+  namespace: default
   labels:
     helm.sh/chart: grafana-agent
     app.kubernetes.io/name: grafana-agent
diff --git a/operations/helm/tests/create-deployment/grafana-agent/templates/serviceaccount.yaml b/operations/helm/tests/create-deployment/grafana-agent/templates/serviceaccount.yaml
index 1dfd6fff9bdf..65d7e0df383f 100644
--- a/operations/helm/tests/create-deployment/grafana-agent/templates/serviceaccount.yaml
+++ b/operations/helm/tests/create-deployment/grafana-agent/templates/serviceaccount.yaml
@@ -4,6 +4,7 @@ apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: grafana-agent
+  namespace: default
   labels:
     helm.sh/chart: grafana-agent
     app.kubernetes.io/name: grafana-agent
diff --git a/operations/helm/tests/create-statefulset-autoscaling/grafana-agent/templates/serviceaccount.yaml b/operations/helm/tests/create-statefulset-autoscaling/grafana-agent/templates/serviceaccount.yaml
index 1dfd6fff9bdf..65d7e0df383f 100644
--- a/operations/helm/tests/create-statefulset-autoscaling/grafana-agent/templates/serviceaccount.yaml
+++ b/operations/helm/tests/create-statefulset-autoscaling/grafana-agent/templates/serviceaccount.yaml
@@ -4,6 +4,7 @@ apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: grafana-agent
+  namespace: default
   labels:
     helm.sh/chart: grafana-agent
     app.kubernetes.io/name: grafana-agent
diff --git a/operations/helm/tests/create-statefulset/grafana-agent/templates/serviceaccount.yaml b/operations/helm/tests/create-statefulset/grafana-agent/templates/serviceaccount.yaml
index 1dfd6fff9bdf..65d7e0df383f 100644
--- a/operations/helm/tests/create-statefulset/grafana-agent/templates/serviceaccount.yaml
+++ b/operations/helm/tests/create-statefulset/grafana-agent/templates/serviceaccount.yaml
@@ -4,6 +4,7 @@ apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: grafana-agent
+  namespace: default
   labels:
     helm.sh/chart: grafana-agent
     app.kubernetes.io/name: grafana-agent
diff --git a/operations/helm/tests/custom-config/grafana-agent/templates/serviceaccount.yaml b/operations/helm/tests/custom-config/grafana-agent/templates/serviceaccount.yaml
index 1dfd6fff9bdf..65d7e0df383f 100644
--- a/operations/helm/tests/custom-config/grafana-agent/templates/serviceaccount.yaml
+++ b/operations/helm/tests/custom-config/grafana-agent/templates/serviceaccount.yaml
@@ -4,6 +4,7 @@ apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: grafana-agent
+  namespace: default
   labels:
     helm.sh/chart: grafana-agent
     app.kubernetes.io/name: grafana-agent
diff --git a/operations/helm/tests/default-values/grafana-agent/templates/serviceaccount.yaml b/operations/helm/tests/default-values/grafana-agent/templates/serviceaccount.yaml
index 1dfd6fff9bdf..65d7e0df383f 100644
--- a/operations/helm/tests/default-values/grafana-agent/templates/serviceaccount.yaml
+++ b/operations/helm/tests/default-values/grafana-agent/templates/serviceaccount.yaml
@@ -4,6 +4,7 @@ apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: grafana-agent
+  namespace: default
   labels:
     helm.sh/chart: grafana-agent
     app.kubernetes.io/name: grafana-agent
diff --git a/operations/helm/tests/enable-servicemonitor/grafana-agent/templates/serviceaccount.yaml b/operations/helm/tests/enable-servicemonitor/grafana-agent/templates/serviceaccount.yaml
index 1dfd6fff9bdf..65d7e0df383f 100644
--- a/operations/helm/tests/enable-servicemonitor/grafana-agent/templates/serviceaccount.yaml
+++ b/operations/helm/tests/enable-servicemonitor/grafana-agent/templates/serviceaccount.yaml
@@ -4,6 +4,7 @@ apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: grafana-agent
+  namespace: default
   labels:
     helm.sh/chart: grafana-agent
     app.kubernetes.io/name: grafana-agent
diff --git a/operations/helm/tests/envFrom/grafana-agent/templates/serviceaccount.yaml b/operations/helm/tests/envFrom/grafana-agent/templates/serviceaccount.yaml
index 1dfd6fff9bdf..65d7e0df383f 100644
--- a/operations/helm/tests/envFrom/grafana-agent/templates/serviceaccount.yaml
+++ b/operations/helm/tests/envFrom/grafana-agent/templates/serviceaccount.yaml
@@ -4,6 +4,7 @@ apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: grafana-agent
+  namespace: default
   labels:
     helm.sh/chart: grafana-agent
     app.kubernetes.io/name: grafana-agent
diff --git a/operations/helm/tests/existing-config/grafana-agent/templates/serviceaccount.yaml b/operations/helm/tests/existing-config/grafana-agent/templates/serviceaccount.yaml
index 1dfd6fff9bdf..65d7e0df383f 100644
--- a/operations/helm/tests/existing-config/grafana-agent/templates/serviceaccount.yaml
+++ b/operations/helm/tests/existing-config/grafana-agent/templates/serviceaccount.yaml
@@ -4,6 +4,7 @@ apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: grafana-agent
+  namespace: default
   labels:
     helm.sh/chart: grafana-agent
     app.kubernetes.io/name: grafana-agent
diff --git a/operations/helm/tests/extra-env/grafana-agent/templates/serviceaccount.yaml b/operations/helm/tests/extra-env/grafana-agent/templates/serviceaccount.yaml
index 1dfd6fff9bdf..65d7e0df383f 100644
--- a/operations/helm/tests/extra-env/grafana-agent/templates/serviceaccount.yaml
+++ b/operations/helm/tests/extra-env/grafana-agent/templates/serviceaccount.yaml
@@ -4,6 +4,7 @@ apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: grafana-agent
+  namespace: default
   labels:
     helm.sh/chart: grafana-agent
     app.kubernetes.io/name: grafana-agent
diff --git a/operations/helm/tests/extra-ports/grafana-agent/templates/serviceaccount.yaml b/operations/helm/tests/extra-ports/grafana-agent/templates/serviceaccount.yaml
index 1dfd6fff9bdf..65d7e0df383f 100644
--- a/operations/helm/tests/extra-ports/grafana-agent/templates/serviceaccount.yaml
+++ b/operations/helm/tests/extra-ports/grafana-agent/templates/serviceaccount.yaml
@@ -4,6 +4,7 @@ apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: grafana-agent
+  namespace: default
   labels:
     helm.sh/chart: grafana-agent
     app.kubernetes.io/name: grafana-agent
diff --git a/operations/helm/tests/faro-ingress/grafana-agent/templates/serviceaccount.yaml b/operations/helm/tests/faro-ingress/grafana-agent/templates/serviceaccount.yaml
index 1dfd6fff9bdf..65d7e0df383f 100644
--- a/operations/helm/tests/faro-ingress/grafana-agent/templates/serviceaccount.yaml
+++ b/operations/helm/tests/faro-ingress/grafana-agent/templates/serviceaccount.yaml
@@ -4,6 +4,7 @@ apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: grafana-agent
+  namespace: default
   labels:
     helm.sh/chart: grafana-agent
     app.kubernetes.io/name: grafana-agent
diff --git a/operations/helm/tests/global-image-pullsecrets/grafana-agent/templates/serviceaccount.yaml b/operations/helm/tests/global-image-pullsecrets/grafana-agent/templates/serviceaccount.yaml
index 1dfd6fff9bdf..65d7e0df383f 100644
--- a/operations/helm/tests/global-image-pullsecrets/grafana-agent/templates/serviceaccount.yaml
+++ b/operations/helm/tests/global-image-pullsecrets/grafana-agent/templates/serviceaccount.yaml
@@ -4,6 +4,7 @@ apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: grafana-agent
+  namespace: default
   labels:
     helm.sh/chart: grafana-agent
     app.kubernetes.io/name: grafana-agent
diff --git a/operations/helm/tests/global-image-registry/grafana-agent/templates/serviceaccount.yaml b/operations/helm/tests/global-image-registry/grafana-agent/templates/serviceaccount.yaml
index 1dfd6fff9bdf..65d7e0df383f 100644
--- a/operations/helm/tests/global-image-registry/grafana-agent/templates/serviceaccount.yaml
+++ b/operations/helm/tests/global-image-registry/grafana-agent/templates/serviceaccount.yaml
@@ -4,6 +4,7 @@ apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: grafana-agent
+  namespace: default
   labels:
     helm.sh/chart: grafana-agent
     app.kubernetes.io/name: grafana-agent
diff --git a/operations/helm/tests/initcontainers/grafana-agent/templates/serviceaccount.yaml b/operations/helm/tests/initcontainers/grafana-agent/templates/serviceaccount.yaml
index 1dfd6fff9bdf..65d7e0df383f 100644
--- a/operations/helm/tests/initcontainers/grafana-agent/templates/serviceaccount.yaml
+++ b/operations/helm/tests/initcontainers/grafana-agent/templates/serviceaccount.yaml
@@ -4,6 +4,7 @@ apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: grafana-agent
+  namespace: default
   labels:
     helm.sh/chart: grafana-agent
     app.kubernetes.io/name: grafana-agent
diff --git a/operations/helm/tests/local-image-pullsecrets/grafana-agent/templates/serviceaccount.yaml b/operations/helm/tests/local-image-pullsecrets/grafana-agent/templates/serviceaccount.yaml
index 1dfd6fff9bdf..65d7e0df383f 100644
--- a/operations/helm/tests/local-image-pullsecrets/grafana-agent/templates/serviceaccount.yaml
+++ b/operations/helm/tests/local-image-pullsecrets/grafana-agent/templates/serviceaccount.yaml
@@ -4,6 +4,7 @@ apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: grafana-agent
+  namespace: default
   labels:
     helm.sh/chart: grafana-agent
     app.kubernetes.io/name: grafana-agent
diff --git a/operations/helm/tests/local-image-registry/grafana-agent/templates/serviceaccount.yaml b/operations/helm/tests/local-image-registry/grafana-agent/templates/serviceaccount.yaml
index 1dfd6fff9bdf..65d7e0df383f 100644
--- a/operations/helm/tests/local-image-registry/grafana-agent/templates/serviceaccount.yaml
+++ b/operations/helm/tests/local-image-registry/grafana-agent/templates/serviceaccount.yaml
@@ -4,6 +4,7 @@ apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: grafana-agent
+  namespace: default
   labels:
     helm.sh/chart: grafana-agent
     app.kubernetes.io/name: grafana-agent
diff --git a/operations/helm/tests/nodeselectors-and-tolerations/grafana-agent/templates/serviceaccount.yaml b/operations/helm/tests/nodeselectors-and-tolerations/grafana-agent/templates/serviceaccount.yaml
index 1dfd6fff9bdf..65d7e0df383f 100644
--- a/operations/helm/tests/nodeselectors-and-tolerations/grafana-agent/templates/serviceaccount.yaml
+++ b/operations/helm/tests/nodeselectors-and-tolerations/grafana-agent/templates/serviceaccount.yaml
@@ -4,6 +4,7 @@ apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: grafana-agent
+  namespace: default
   labels:
     helm.sh/chart: grafana-agent
     app.kubernetes.io/name: grafana-agent
diff --git a/operations/helm/tests/sidecars/grafana-agent/templates/serviceaccount.yaml b/operations/helm/tests/sidecars/grafana-agent/templates/serviceaccount.yaml
index 1dfd6fff9bdf..65d7e0df383f 100644
--- a/operations/helm/tests/sidecars/grafana-agent/templates/serviceaccount.yaml
+++ b/operations/helm/tests/sidecars/grafana-agent/templates/serviceaccount.yaml
@@ -4,6 +4,7 @@ apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: grafana-agent
+  namespace: default
   labels:
     helm.sh/chart: grafana-agent
     app.kubernetes.io/name: grafana-agent
diff --git a/operations/helm/tests/static-mode/grafana-agent/templates/serviceaccount.yaml b/operations/helm/tests/static-mode/grafana-agent/templates/serviceaccount.yaml
index 1dfd6fff9bdf..65d7e0df383f 100644
--- a/operations/helm/tests/static-mode/grafana-agent/templates/serviceaccount.yaml
+++ b/operations/helm/tests/static-mode/grafana-agent/templates/serviceaccount.yaml
@@ -4,6 +4,7 @@ apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: grafana-agent
+  namespace: default
   labels:
     helm.sh/chart: grafana-agent
     app.kubernetes.io/name: grafana-agent

From 2a9c98c7ec4469aaca7e08cb247f7bf835cb9078 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 8 Jan 2024 13:46:03 -0500
Subject: [PATCH 24/68] build(deps-dev): bump @types/react-syntax-highlighter
 in /web/ui (#5951)

Bumps [@types/react-syntax-highlighter](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-syntax-highlighter) from 15.5.6 to 15.5.11.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-syntax-highlighter)

---
updated-dependencies:
- dependency-name: "@types/react-syntax-highlighter"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 web/ui/package.json | 2 +-
 web/ui/yarn.lock    | 8 ++++----
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/web/ui/package.json b/web/ui/package.json
index 87bb50119706..ac422d7246f8 100644
--- a/web/ui/package.json
+++ b/web/ui/package.json
@@ -20,7 +20,7 @@
     "@types/d3-zoom": "^3.0.2",
     "@types/react": "^18.2.6",
     "@types/react-dom": "^18.2.14",
-    "@types/react-syntax-highlighter": "^15.5.6",
+    "@types/react-syntax-highlighter": "^15.5.11",
     "eslint": "^8.40.0",
     "eslint-config-prettier": "^9.1.0",
     "eslint-config-react-app": "^7.0.1",
diff --git a/web/ui/yarn.lock b/web/ui/yarn.lock
index 60d0d721c513..85e807484347 100644
--- a/web/ui/yarn.lock
+++ b/web/ui/yarn.lock
@@ -2291,10 +2291,10 @@
   dependencies:
     "@types/react" "*"
 
-"@types/react-syntax-highlighter@^15.5.6":
-  version "15.5.6"
-  resolved "https://registry.yarnpkg.com/@types/react-syntax-highlighter/-/react-syntax-highlighter-15.5.6.tgz#77c95e6b74d2be23208fcdcf187b93b47025f1b1"
-  integrity sha512-i7wFuLbIAFlabTeD2I1cLjEOrG/xdMa/rpx2zwzAoGHuXJDhSqp9BSfDlMHSh9JSuNfxHk9eEmMX6D55GiyjGg==
+"@types/react-syntax-highlighter@^15.5.11":
+  version "15.5.11"
+  resolved "https://registry.yarnpkg.com/@types/react-syntax-highlighter/-/react-syntax-highlighter-15.5.11.tgz#e050745b22eff81fc13cb0c763dd0d063413bbf1"
+  integrity sha512-ZqIJl+Pg8kD+47kxUjvrlElrraSUrYa4h0dauY/U/FTUuprSCqvUj+9PNQNQzVc6AJgIWUUxn87/gqsMHNbRjw==
   dependencies:
     "@types/react" "*"
 

From d2aa711eb54bc0b280d22e93d271114dd13d46b5 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 8 Jan 2024 13:47:30 -0500
Subject: [PATCH 25/68] build(deps): bump aquasecurity/trivy-action from 0.14.0
 to 0.16.1 (#6067)

Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.14.0 to 0.16.1.
- [Release notes](https://github.com/aquasecurity/trivy-action/releases)
- [Commits](https://github.com/aquasecurity/trivy-action/compare/2b6a709cf9c4025c5438138008beaddbb02086f0...d43c1f16c00cfd3978dde6c07f4bbcf9eb6993ca)

---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/trivy.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/trivy.yml b/.github/workflows/trivy.yml
index 4403f0515b02..88f799776b5d 100644
--- a/.github/workflows/trivy.yml
+++ b/.github/workflows/trivy.yml
@@ -26,7 +26,7 @@ jobs:
       - name: Checkout code
         uses: actions/checkout@v4
       - name: Run Trivy vulnerability scanner
-        uses: aquasecurity/trivy-action@2b6a709cf9c4025c5438138008beaddbb02086f0
+        uses: aquasecurity/trivy-action@d43c1f16c00cfd3978dde6c07f4bbcf9eb6993ca
         with:
           image-ref: 'grafana/agent:main'
           format: 'template'

From 2afa3ed66641744cdcf97d63d9794b722b806aa8 Mon Sep 17 00:00:00 2001
From: Erik Baranowski <39704712+erikbaranowski@users.noreply.github.com>
Date: Mon, 8 Jan 2024 15:22:43 -0500
Subject: [PATCH 26/68] Fix windows tests 3 (#6068)

* update hash for windows static converter test

Signed-off-by: Erik Baranowski <39704712+erikbaranowski@users.noreply.github.com>

* Increase loki wal test time delta to 2s from 1.1s due to windows test speed

Signed-off-by: Erik Baranowski <39704712+erikbaranowski@users.noreply.github.com>

---------

Signed-off-by: Erik Baranowski <39704712+erikbaranowski@users.noreply.github.com>
---
 component/common/loki/wal/watcher_test.go              | 10 +++++-----
 .../testdata-v2_windows/integrations_v2.river          |  2 +-
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/component/common/loki/wal/watcher_test.go b/component/common/loki/wal/watcher_test.go
index 15644d740a28..959dad3a5ff5 100644
--- a/component/common/loki/wal/watcher_test.go
+++ b/component/common/loki/wal/watcher_test.go
@@ -685,9 +685,9 @@ func TestWatcher_StopAndDrainWAL(t *testing.T) {
 		watcher.Drain()
 		watcher.Stop()
 
-		// expecting 15s (missing 15 entries * 1 sec delay in AppendEntries) +/- 1.1s (taking into account the drain timeout
+		// expecting 15s (missing 15 entries * 1 sec delay in AppendEntries) +/- 2.0s (taking into account the drain timeout
 		// has one extra second.
-		require.InDelta(t, time.Second*15, time.Since(now), float64(time.Millisecond*1100), "expected the drain procedure to take around 15s")
+		require.InDelta(t, time.Second*15, time.Since(now), float64(time.Millisecond*2000), "expected the drain procedure to take around 15s")
 		require.Equal(t, int(writeTo.entriesReceived.Load()), 20, "expected the watcher to fully drain the WAL")
 	})
 
@@ -737,9 +737,9 @@ func TestWatcher_StopAndDrainWAL(t *testing.T) {
 		watcher.Drain()
 		watcher.Stop()
 
-		// expecting 15s (missing 15 entries * 1 sec delay in AppendEntries) +/- 1.1s (taking into account the drain timeout
+		// expecting 15s (missing 15 entries * 1 sec delay in AppendEntries) +/- 2.0s (taking into account the drain timeout
 		// has one extra second.
-		require.InDelta(t, time.Second*15, time.Since(now), float64(time.Millisecond*1100), "expected the drain procedure to take around 15s")
+		require.InDelta(t, time.Second*15, time.Since(now), float64(time.Millisecond*2000), "expected the drain procedure to take around 15s")
 		require.Equal(t, int(writeTo.entriesReceived.Load()), 20, "expected the watcher to fully drain the WAL")
 	})
 
@@ -790,7 +790,7 @@ func TestWatcher_StopAndDrainWAL(t *testing.T) {
 		watcher.Drain()
 		watcher.Stop()
 
-		require.InDelta(t, time.Second*10, time.Since(now), float64(time.Millisecond*1100), "expected the drain procedure to take around 15s")
+		require.InDelta(t, time.Second*10, time.Since(now), float64(time.Millisecond*2000), "expected the drain procedure to take around 15s")
 		require.Less(t, int(writeTo.entriesReceived.Load()), 20, "expected watcher to have not consumed WAL fully")
 		require.InDelta(t, 15, int(writeTo.entriesReceived.Load()), 1.0, "expected Watcher to consume at most +/- 1 entry from the WAL")
 	})
diff --git a/converter/internal/staticconvert/testdata-v2_windows/integrations_v2.river b/converter/internal/staticconvert/testdata-v2_windows/integrations_v2.river
index 4f9e09a37ed4..8d95a97c8b7b 100644
--- a/converter/internal/staticconvert/testdata-v2_windows/integrations_v2.river
+++ b/converter/internal/staticconvert/testdata-v2_windows/integrations_v2.river
@@ -1,6 +1,6 @@
 prometheus.remote_write "metrics_default" {
 	endpoint {
-		name = "default-8be96f"
+		name = "default-149bbd"
 		url  = "http://localhost:9009/api/prom/push"
 
 		queue_config { }

From 631378ea4d768bf34f54602fabee6260d7c01df8 Mon Sep 17 00:00:00 2001
From: annelaurefroment <49911675+annelaurefroment@users.noreply.github.com>
Date: Mon, 8 Jan 2024 20:46:19 +0000
Subject: [PATCH 27/68] Update cadvisor-config.md (#6024)

adding more details about label formats for the `store_container_labels` and `allowlisted_container_labels` parameters

This was requested in this escalation: https://github.com/grafana/support-escalations/issues/5770

Co-authored-by: Clayton Cornell <131809008+clayton-cornell@users.noreply.github.com>
---
 .../static/configuration/integrations/cadvisor-config.md      | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/docs/sources/static/configuration/integrations/cadvisor-config.md b/docs/sources/static/configuration/integrations/cadvisor-config.md
index adf92dcff827..a4a33b4df219 100644
--- a/docs/sources/static/configuration/integrations/cadvisor-config.md
+++ b/docs/sources/static/configuration/integrations/cadvisor-config.md
@@ -60,10 +60,10 @@ Full reference of options:
   # cAdvisor-specific configuration options
   #
 
-  # Convert container labels and environment variables into labels on prometheus metrics for each container. If false, then only metrics exported are container name, first alias, and image name.
+  # Convert container labels and environment variables into labels on Prometheus metrics for each container. If false, then the only metrics exported are container name, first alias, and image name. `.` aren't valid in Prometheus label names, so if there are any in the container label, they will transformed to `_` when converted to the Prometheus label. 
   [store_container_labels: <boolean> | default = true]
 
-  # List of container labels to be converted to labels on prometheus metrics for each container. store_container_labels must be set to false for this to take effect.
+  # List of container labels to be converted to labels on Prometheus metrics for each container. store_container_labels must be set to false for this to take effect. This must match the format of the container label, not the converted Prometheus label (`.` are converted to `_` in the Prometheus label).   
   allowlisted_container_labels:
     [ - <string> ]
 

From 341cab723e38c0a7e8884dca830f5810bfda9a35 Mon Sep 17 00:00:00 2001
From: Pete Wall <pete.wall@grafana.com>
Date: Tue, 9 Jan 2024 01:14:33 -0600
Subject: [PATCH 28/68] Append, rather than set, '/pods' to the path in
 discovery.kubelet (#6013)

* Append, rather than set, '/pods' to the path in discovery.kubelet

---------

Signed-off-by: Pete Wall <pete.wall@grafana.com>
Co-authored-by: Paulin Todev <paulin.todev@gmail.com>
---
 CHANGELOG.md                                  |  2 ++
 component/discovery/kubelet/kubelet.go        |  5 ++---
 component/discovery/kubelet/kubelet_test.go   | 19 +++++++++++++++++++
 .../reference/components/discovery.kubelet.md |  6 +++++-
 4 files changed, 28 insertions(+), 4 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 774fbdd73c03..b9d7e66231e1 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -101,6 +101,8 @@ v0.39.0-rc.0 (2024-01-05)
 - `discovery.lightsail` now supports additional parameters for configuring HTTP client settings. (@ptodev)
 - Add `sample_age_limit` to remote_write config to drop samples older than a specified duration. (@marctc)
 
+- Handle paths in the Kubelet URL for `discovery.kubelet`. (@petewall)
+
 ### Bugfixes
 
 - Update `pyroscope.ebpf` to fix a logical bug causing to profile to many kthreads instead of regular processes https://github.com/grafana/pyroscope/pull/2778 (@korniltsev)
diff --git a/component/discovery/kubelet/kubelet.go b/component/discovery/kubelet/kubelet.go
index ff952e2ada6e..1fecc1e88f8e 100644
--- a/component/discovery/kubelet/kubelet.go
+++ b/component/discovery/kubelet/kubelet.go
@@ -129,11 +129,10 @@ func NewKubeletDiscovery(args Arguments) (*Discovery, error) {
 		Transport: transport,
 		Timeout:   30 * time.Second,
 	}
-	// ensure the path is the kubelet pods endpoint
-	args.URL.Path = "/pods"
+	// Append the path to the kubelet pods endpoint
 	return &Discovery{
 		client:           client,
-		url:              args.URL.String(),
+		url:              args.URL.String() + "/pods",
 		targetNamespaces: args.Namespaces,
 	}, nil
 }
diff --git a/component/discovery/kubelet/kubelet_test.go b/component/discovery/kubelet/kubelet_test.go
index b7d2c750d9d2..183f789aef70 100644
--- a/component/discovery/kubelet/kubelet_test.go
+++ b/component/discovery/kubelet/kubelet_test.go
@@ -1,12 +1,14 @@
 package kubelet
 
 import (
+	"net/url"
 	"testing"
 
 	"github.com/prometheus/prometheus/discovery/targetgroup"
 	v1 "k8s.io/api/core/v1"
 	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
 
+	"github.com/grafana/agent/component/common/config"
 	"github.com/grafana/river"
 	"github.com/stretchr/testify/require"
 )
@@ -105,3 +107,20 @@ func TestDiscoveryPodWithoutPod(t *testing.T) {
 	require.NoError(t, err)
 	require.Len(t, kubeletDiscovery.discoveredPodSources, 2)
 }
+
+func TestWithDefaultKubeletHost(t *testing.T) {
+	kubeletDiscovery, err := NewKubeletDiscovery(DefaultConfig)
+	require.NoError(t, err)
+	require.Equal(t, "https://localhost:10250/pods", kubeletDiscovery.url)
+}
+
+func TestWithCustomPath(t *testing.T) {
+	kubeletProxyUrl, _ := url.Parse("https://kubernetes.default.svc.cluster.local:443/api/v1/nodes/cluster-node-1/proxy")
+	kubeletDiscovery, err := NewKubeletDiscovery(Arguments{
+		URL: config.URL{
+			URL: kubeletProxyUrl,
+		},
+	})
+	require.NoError(t, err)
+	require.Equal(t, "https://kubernetes.default.svc.cluster.local:443/api/v1/nodes/cluster-node-1/proxy/pods", kubeletDiscovery.url)
+}
diff --git a/docs/sources/flow/reference/components/discovery.kubelet.md b/docs/sources/flow/reference/components/discovery.kubelet.md
index 0000a74def4e..7ef29244a01e 100644
--- a/docs/sources/flow/reference/components/discovery.kubelet.md
+++ b/docs/sources/flow/reference/components/discovery.kubelet.md
@@ -35,7 +35,7 @@ The following arguments are supported:
 
 Name | Type | Description | Default | Required
 ---- | ---- | ----------- | ------- | --------
-`url` | `string` | URL of the Kubelet server. | | no
+`url` | `string` | URL of the Kubelet server. | "https://localhost:10250" | no
 `bearer_token` | `secret` | Bearer token to authenticate with. | | no
 `bearer_token_file` | `string` | File containing a bearer token to authenticate with. | | no
 `refresh_interval` | `duration` | How often the Kubelet should be polled for scrape targets | `5s` | no
@@ -49,6 +49,10 @@ One of the following authentication methods must be provided if kubelet authenti
 The `namespaces` list limits the namespaces to discover resources in. If
 omitted, all namespaces are searched.
 
+`discovery.kubelet` appends a `/pods` path to `url` to request the available pods.
+You can have additional paths in the `url`.
+For example, if `url` is `https://kubernetes.default.svc.cluster.local:443/api/v1/nodes/cluster-node-1/proxy`, then `discovery.kubelet` sends a request on `https://kubernetes.default.svc.cluster.local:443/api/v1/nodes/cluster-node-1/proxy/pods`
+
 ## Blocks
 
 The following blocks are supported inside the definition of

From ed8cca65ce87dabbecac61a6869bee4fe1e47406 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 9 Jan 2024 09:59:48 +0100
Subject: [PATCH 29/68] build(deps): bump actions/stale from 8 to 9 (#5955)

Bumps [actions/stale](https://github.com/actions/stale) from 8 to 9.
- [Release notes](https://github.com/actions/stale/releases)
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/stale/compare/v8...v9)

---
updated-dependencies:
- dependency-name: actions/stale
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/needs-attention.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/needs-attention.yml b/.github/workflows/needs-attention.yml
index 6143be1fb2be..3e2d93a25ca6 100644
--- a/.github/workflows/needs-attention.yml
+++ b/.github/workflows/needs-attention.yml
@@ -10,7 +10,7 @@ jobs:
   needs-attention:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/stale@v8
+      - uses: actions/stale@v9
         with:
           days-before-stale: 30
           days-before-close: -1 # never close automatically

From e6b8ac7761b29d1f1f422a3e50b1b954d51965af Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 9 Jan 2024 10:01:51 +0100
Subject: [PATCH 30/68] build(deps): bump github/codeql-action from 2 to 3
 (#5998)

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2 to 3.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/v2...v3)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/trivy.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/trivy.yml b/.github/workflows/trivy.yml
index 88f799776b5d..57fd6e855873 100644
--- a/.github/workflows/trivy.yml
+++ b/.github/workflows/trivy.yml
@@ -35,6 +35,6 @@ jobs:
           severity: 'CRITICAL,HIGH,MEDIUM,LOW'
 
       - name: Upload Trivy scan results to GitHub Security tab
-        uses: github/codeql-action/upload-sarif@v2
+        uses: github/codeql-action/upload-sarif@v3
         with:
           sarif_file: 'trivy-results.sarif'
\ No newline at end of file

From e6480313edc53fb0c1fff025a68a59f72e729b59 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=C4=90=E1=BB=97=20Tr=E1=BB=8Dng=20H=E1=BA=A3i?=
 <41283691+hainenber@users.noreply.github.com>
Date: Tue, 9 Jan 2024 21:10:34 +0700
Subject: [PATCH 31/68] build(dep): remove obsolete go mod replace (#5925)

Signed-off-by: hainenber <dotronghai96@gmail.com>
Co-authored-by: mattdurham <mattdurham@ppog.org>
---
 go.mod | 4 ----
 1 file changed, 4 deletions(-)

diff --git a/go.mod b/go.mod
index 5e98e5fb0d4c..5ab46601a9bf 100644
--- a/go.mod
+++ b/go.mod
@@ -712,10 +712,6 @@ replace (
 	// https://github.com/grafana/cadvisor/tree/grafana-v0.47-noglobals
 	github.com/google/cadvisor => github.com/grafana/cadvisor v0.0.0-20231110094609-5f7917925dea
 
-	// TODO(mattdurham): this is so you can debug on windows, when PR is merged into perflib, can you use that
-	// and eventually remove if windows_exporter shifts to it. https://github.com/leoluk/perflib_exporter/pull/43
-	github.com/leoluk/perflib_exporter => github.com/grafana/perflib_exporter v0.1.1-0.20230511173423-6166026bd090
-
 	github.com/prometheus-community/postgres_exporter => github.com/grafana/postgres_exporter v0.8.1-0.20210722175051-db35d7c2f520
 
 	// TODO(marctc): remove once this PR is merged upstream: https://github.com/prometheus/mysqld_exporter/pull/774

From e8b7b295faa18b35161e46ddf1c9875d66c88d1f Mon Sep 17 00:00:00 2001
From: Robert Fratto <robertfratto@gmail.com>
Date: Tue, 9 Jan 2024 10:35:56 -0500
Subject: [PATCH 32/68] misc: copy folders to operations/ (#6080)

This change copies folders from `production/` to `operations/` that we
intend to keep (the static mode mixin and operator related manifests).

I tried to originally make symlinks and move the folders, but this doesn't
work in the GitHub UI, where it fails to navigate to a file within a symlinked
directory. Since there are references to such files, symlinks won't work for
us here.

Once references to the productions folder are completely eliminated, the
folder will be removed.

Related to #6077.
---
 .../agent-static-mixin/alerts.libsonnet       |  414 +
 .../agent-static-mixin/config.libsonnet       |   13 +
 .../agent-static-mixin/dashboards.libsonnet   |  789 ++
 .../agent-static-mixin/debugging.libsonnet    |  128 +
 .../agent-static-mixin/jsonnetfile.json       |   25 +
 operations/agent-static-mixin/mixin.libsonnet |    4 +
 operations/agent-static-mixin/utils.libsonnet |   34 +
 .../monitoring.coreos.com_podmonitors.yaml    |  679 ++
 .../crds/monitoring.coreos.com_probes.yaml    |  722 ++
 ...monitoring.coreos.com_servicemonitors.yaml |  709 ++
 .../monitoring.grafana.com_grafanaagents.yaml | 7795 +++++++++++++++++
 .../monitoring.grafana.com_integrations.yaml  | 1738 ++++
 .../monitoring.grafana.com_logsinstances.yaml |  500 ++
 ...nitoring.grafana.com_metricsinstances.yaml |  861 ++
 .../crds/monitoring.grafana.com_podlogs.yaml  |  588 ++
 .../templates/agent-operator.yaml             |  645 ++
 production/README.md                          |    1 +
 17 files changed, 15645 insertions(+)
 create mode 100644 operations/agent-static-mixin/alerts.libsonnet
 create mode 100644 operations/agent-static-mixin/config.libsonnet
 create mode 100644 operations/agent-static-mixin/dashboards.libsonnet
 create mode 100644 operations/agent-static-mixin/debugging.libsonnet
 create mode 100644 operations/agent-static-mixin/jsonnetfile.json
 create mode 100644 operations/agent-static-mixin/mixin.libsonnet
 create mode 100644 operations/agent-static-mixin/utils.libsonnet
 create mode 100644 operations/agent-static-operator/crds/monitoring.coreos.com_podmonitors.yaml
 create mode 100644 operations/agent-static-operator/crds/monitoring.coreos.com_probes.yaml
 create mode 100644 operations/agent-static-operator/crds/monitoring.coreos.com_servicemonitors.yaml
 create mode 100644 operations/agent-static-operator/crds/monitoring.grafana.com_grafanaagents.yaml
 create mode 100644 operations/agent-static-operator/crds/monitoring.grafana.com_integrations.yaml
 create mode 100644 operations/agent-static-operator/crds/monitoring.grafana.com_logsinstances.yaml
 create mode 100644 operations/agent-static-operator/crds/monitoring.grafana.com_metricsinstances.yaml
 create mode 100644 operations/agent-static-operator/crds/monitoring.grafana.com_podlogs.yaml
 create mode 100644 operations/agent-static-operator/templates/agent-operator.yaml
 create mode 100644 production/README.md

diff --git a/operations/agent-static-mixin/alerts.libsonnet b/operations/agent-static-mixin/alerts.libsonnet
new file mode 100644
index 000000000000..51fe81e0e539
--- /dev/null
+++ b/operations/agent-static-mixin/alerts.libsonnet
@@ -0,0 +1,414 @@
+local config = import 'config.libsonnet';
+local _config = config._config;
+
+{
+  prometheusAlerts+:: {
+    groups+: [
+      {
+        name: 'grafana-agent-tracing',
+        rules: [
+          {
+            alert: 'AgentTracingReceiverErrors',
+            // TODO(@mapno): add recording rule for total spans
+            expr: |||
+              100 * sum(rate(traces_receiver_refused_spans{receiver!="otlp/lb"}[1m])) by (%(group_by_cluster)s, receiver)
+                /
+              (sum(rate(traces_receiver_refused_spans{receiver!="otlp/lb"}[1m])) by (%(group_by_cluster)s, receiver) + sum(rate(traces_receiver_accepted_spans{receiver!="otlp/lb"}[1m])) by (%(group_by_cluster)s, receiver))
+                > 10
+            ||| % _config,
+            'for': '15m',
+            labels: {
+              severity: 'warning',
+            },
+            annotations: {
+              message: |||
+                Receiver {{ $labels.receiver }} is experiencing {{ printf "%.2f" $value }}% errors.
+              |||,
+            },
+          },
+          {
+            alert: 'AgentTracingExporterErrors',
+            // TODO(@mapno): add recording rule for total spans
+            expr: |||
+              100 * sum(rate(traces_exporter_send_failed_spans{exporter!="otlp"}[1m])) by (%(group_by_cluster)s, exporter)
+                /
+              (sum(rate(traces_exporter_send_failed_spans{exporter!="otlp"}[1m])) by (%(group_by_cluster)s, exporter) + sum(rate(traces_exporter_sent_spans{exporter!="otlp"}[1m])) by (%(group_by_cluster)s, exporter))
+                > 10
+            ||| % _config,
+            'for': '15m',
+            labels: {
+              severity: 'warning',
+            },
+            annotations: {
+              message: |||
+                Exporter {{ $labels.exporter }} is experiencing {{ printf "%.2f" $value }}% errors.
+              |||,
+            },
+          },
+          {
+            alert: 'AgentTracingLoadBalancingErrors',
+            expr: |||
+              100 * sum(rate(traces_loadbalancer_backend_outcome{success="false"}[1m])) by (%(group_by_cluster)s)
+                /
+              sum(rate(traces_loadbalancer_backend_outcome{success="true"}[1m])) by (%(group_by_cluster)s)
+                > 10
+            ||| % _config,
+            'for': '15m',
+            labels: {
+              severity: 'warning',
+            },
+            annotations: {
+              message: |||
+                Load balancing is experiencing {{ printf "%.2f" $value }}% errors.
+              |||,
+            },
+          },
+        ],
+      },
+      {
+        name: 'GrafanaAgentSmokeChecks',
+        rules: [
+          {
+            alert: 'GrafanaAgentDown',
+            expr: |||
+              up{
+                namespace="agent-smoke-test",
+                pod=~"grafana-agent-smoke-test-(0|cluster-0|cluster-1|cluster-2)",
+              } == 0
+            |||,
+            'for': '5m',
+            annotations: {
+              summary: '{{ $labels.job }} is down',
+            },
+          },
+          {
+            alert: 'GrafanaAgentFlapping',
+            expr: |||
+              avg_over_time(up{
+                namespace="agent-smoke-test",
+                pod=~"grafana-agent-smoke-test-(0|cluster-0|cluster-1|cluster-2)",
+              }[5m]) < 1
+            |||,
+            'for': '15m',
+            annotations: {
+              summary: '{{ $labels.job }} is flapping',
+            },
+          },
+
+          // Checks that the CPU usage doesn't go too high. This was generated from internal usage where
+          // every 1,000 active series used roughly 0.0013441% of CPU. This alert only fires if there is a
+          // minimum load threshold of at least 1000 active series.
+          {
+            alert: 'GrafanaAgentCPUHigh',
+            expr: |||
+              (sum by (pod) (rate(container_cpu_usage_seconds_total{cluster=~".+", namespace=~"agent-smoke-test", container=~".+", pod="grafana-agent-smoke-test-cluster-2"}[5m]))
+              /
+              (sum by (pod) (agent_wal_storage_active_series{cluster=~".+", namespace=~"agent-smoke-test", container=~".+", pod="grafana-agent-smoke-test-cluster-2"}) / 1000)
+              > 0.0013441)
+              and
+              sum by (pod) (agent_wal_storage_active_series{cluster=~".+", namespace=~"agent-smoke-test", container=~".+", pod="grafana-agent-smoke-test-cluster-2"}) > 1000
+            |||,
+            'for': '1h',
+            annotations: {
+              summary: '{{ $labels.pod }} is using more than 0.0013441 CPU per 1000 series over the last 5 minutes',
+            },
+          },
+
+          // We assume roughly ~8KB per series. Check that each deployment
+          // doesn't go too far above this.
+          //
+          // We aggregate the memory of the scraping service together since an individual
+          // node with a really small number of active series will throw this metric off.
+          {
+            alert: 'GrafanaAgentMemHigh',
+            expr: |||
+              sum without (pod, instance) (go_memstats_heap_inuse_bytes{job=~"agent-smoke-test/grafana-agent-smoke-test.*"}) /
+              sum without (pod, instance, instance_group_name) (agent_wal_storage_active_series{job=~"agent-smoke-test/grafana-agent-smoke-test.*"}) / 1e3 > 10
+            |||,
+            'for': '1h',
+            annotations: {
+              summary: '{{ $labels.job }} has used more than 10KB per series for more than 5 minutes',
+            },
+          },
+          {
+            alert: 'GrafanaAgentContainerRestarts',
+            expr: |||
+              sum by (pod) (rate(kube_pod_container_status_restarts_total{namespace="agent-smoke-test"}[10m])) > 0
+            |||,
+            annotations: {
+              summary: '{{ $labels.pod }} has a high rate of container restarts',
+            },
+          },
+        ],
+      },
+      {
+        name: 'GrafanaAgentCrowChecks',
+        rules: [
+          {
+            alert: 'CrowDown',
+            expr: |||
+              up{job=~"agent-smoke-test/crow-.*"} == 0
+            |||,
+            'for': '5m',
+            annotations: {
+              summary: 'Crow {{ $labels.job }} is down.',
+            },
+          },
+          {
+            alert: 'CrowFlapping',
+            expr: |||
+              avg_over_time(up{job=~"agent-smoke-test/crow-.*"}[5m]) < 1
+            |||,
+            'for': '15m',
+            annotations: {
+              summary: 'Crow {{ $labels.job }} is flapping.',
+            },
+          },
+          {
+            alert: 'CrowNotScraped',
+            expr: |||
+              rate(crow_test_samples_total[5m]) == 0
+            |||,
+            'for': '15m',
+            annotations: {
+              summary: 'Crow {{ $labels.job }} is not being scraped.',
+            },
+          },
+          {
+            alert: 'CrowFailures',
+            expr: |||
+              (
+                  rate(crow_test_sample_results_total{result="success"}[5m])
+                  /
+                  ignoring(result) sum without (result) (rate(crow_test_sample_results_total[5m]))
+              )
+              < 1
+            |||,
+            'for': '15m',
+            annotations: {
+              summary: 'Crow {{ $labels.job }} has had failures for at least 5m',
+            },
+          },
+        ],
+      },
+      {
+        name: 'VultureChecks',
+        rules: [
+          {
+            alert: 'VultureDown',
+            expr: |||
+              up{job=~"agent-smoke-test/vulture"} == 0
+            |||,
+            'for': '5m',
+            annotations: {
+              summary: 'Vulture {{ $labels.job }} is down.',
+            },
+          },
+          {
+            alert: 'VultureFlapping',
+            expr: |||
+              avg_over_time(up{job=~"agent-smoke-test/vulture"}[5m]) < 1
+            |||,
+            'for': '15m',
+            annotations: {
+              summary: 'Vulture {{ $labels.job }} is flapping.',
+            },
+          },
+          {
+            alert: 'VultureNotScraped',
+            expr: |||
+              rate(tempo_vulture_trace_total[1m]) == 0
+            |||,
+            'for': '5m',
+            annotations: {
+              summary: 'Vulture {{ $labels.job }} is not being scraped.',
+            },
+          },
+          {
+            alert: 'VultureFailures',
+            expr: |||
+              (rate(tempo_vulture_error_total[5m]) / rate(tempo_vulture_trace_total[5m])) > 0.3
+            |||,
+            'for': '5m',
+            annotations: {
+              summary: 'Vulture {{ $labels.job }} has had failures for at least 5m',
+            },
+          },
+        ],
+      },
+      {
+        name: 'GrafanaAgentConfig',
+        rules: [
+          {
+            alert: 'AgentRemoteConfigBadAPIRequests',
+            expr: |||
+              100 * sum(rate(agent_remote_config_fetches_total{status_code=~"(4|5).."}[10m])) by (%(group_by_cluster)s)
+                /
+              sum(rate(agent_remote_config_fetches_total[10m])) by (%(group_by_cluster)s)
+                > 5
+            ||| % _config,
+            'for': '10m',
+            labels: {
+              severity: 'warning',
+            },
+            annotations: {
+              message: |||
+                Receiving HTTP {{ $labels.status_code }} errors from API in {{ printf "%.2f" $value }}% of cases.
+              |||,
+            },
+          },
+          {
+            alert: 'AgentRemoteConfigBadAPIRequests',
+            expr: |||
+              100 * sum(rate(agent_remote_config_fetches_total{status_code=~"(4|5).."}[10m])) by (%(group_by_cluster)s)
+                /
+              sum(rate(agent_remote_config_fetches_total[10m])) by (%(group_by_cluster)s)
+                > 10
+            ||| % _config,
+            'for': '10m',
+            labels: {
+              severity: 'critical',
+            },
+            annotations: {
+              message: |||
+                Receiving HTTP {{ $labels.status_code }} errors from API in {{ printf "%.2f" $value }}% of cases.
+              |||,
+            },
+          },
+          {
+            alert: 'AgentRemoteConfigFetchErrors',
+            expr: |||
+              100 * sum(rate(agent_remote_config_fetch_errors_total[10m])) by (%(group_by_cluster)s)
+                /
+              sum(rate(agent_remote_config_fetches_total[10m])) by (%(group_by_cluster)s)
+                > 5
+            ||| % _config,
+            'for': '10m',
+            labels: {
+              severity: 'warning',
+            },
+            annotations: {
+              message: |||
+                Failing to reach Agent Management API.
+              |||,
+            },
+          },
+          {
+            alert: 'AgentRemoteConfigFetchErrors',
+            expr: |||
+              100 * sum(rate(agent_remote_config_fetch_errors_total[10m])) by (%(group_by_cluster)s)
+                /
+              sum(rate(agent_remote_config_fetches_total[10m])) by (%(group_by_cluster)s)
+                > 10
+            ||| % _config,
+            'for': '10m',
+            labels: {
+              severity: 'critical',
+            },
+            annotations: {
+              message: |||
+                Failing to reach Agent Management API.
+              |||,
+            },
+          },
+          {
+            alert: 'AgentRemoteConfigInvalidAPIResponse',
+            expr: |||
+              100 * sum(rate(agent_remote_config_invalid_total{reason=~".+"}[10m])) by (%(group_by_cluster)s)
+                /
+              sum(rate(agent_remote_config_fetches_total[10m])) by (%(group_by_cluster)s)
+                > 5
+            ||| % _config,
+            'for': '10m',
+            labels: {
+              severity: 'warning',
+            },
+            annotations: {
+              message: |||
+                API is responding with {{ $labels.reason }} in {{ printf "%.2f" $value }}% of cases.
+              |||,
+            },
+          },
+          {
+            alert: 'AgentRemoteConfigInvalidAPIResponse',
+            expr: |||
+              100 * sum(rate(agent_remote_config_invalid_total{reason=~".+"}[10m])) by (%(group_by_cluster)s)
+                /
+              sum(rate(agent_remote_config_fetches_total[10m])) by (%(group_by_cluster)s)
+                > 10
+            ||| % _config,
+            'for': '10m',
+            labels: {
+              severity: 'critical',
+            },
+            annotations: {
+              message: |||
+                API is responding with {{ $labels.reason }} in {{ printf "%.2f" $value }}% of cases.
+              |||,
+            },
+          },
+          {
+            alert: 'AgentFailureToReloadConfig',
+            expr: |||
+              avg_over_time(agent_config_last_load_successful[10m]) < 0.9
+            ||| % _config,
+            'for': '10m',
+            labels: {
+              severity: 'warning',
+            },
+            annotations: {
+              message: |||
+                 Instance {{ $labels.instance }} failed to successfully reload the config.
+              |||,
+            },
+          },
+          {
+            alert: 'AgentFailureToReloadConfig',
+            expr: |||
+              avg_over_time(agent_config_last_load_successful[10m]) < 0.9
+            ||| % _config,
+            'for': '30m',
+            labels: {
+              severity: 'critical',
+            },
+            annotations: {
+              message: |||
+                 Instance {{ $labels.instance }} failed to successfully reload the config.
+              |||,
+            },
+          },
+          {
+            alert: 'AgentManagementFallbackToEmptyConfig',
+            expr: |||
+              sum(rate(agent_management_config_fallbacks_total{fallback_to="empty_config"}[10m])) by (%(group_by_cluster)s) > 0
+            ||| % _config,
+            'for': '10m',
+            labels: {
+              severity: 'warning',
+            },
+            annotations: {
+              message: |||
+                 Instance {{ $labels.instance }} fell back to empty configuration.
+              |||,
+            },
+          },
+          {
+            alert: 'AgentManagementFallbackToEmptyConfig',
+            expr: |||
+              sum(rate(agent_management_config_fallbacks_total{fallback_to="empty_config"}[10m])) by (%(group_by_cluster)s) > 0
+            ||| % _config,
+            'for': '30m',
+            labels: {
+              severity: 'critical',
+            },
+            annotations: {
+              message: |||
+                 Instance {{ $labels.instance }} fell back to empty configuration.
+              |||,
+            },
+          },
+        ],
+      },      
+    ],
+  },
+}
diff --git a/operations/agent-static-mixin/config.libsonnet b/operations/agent-static-mixin/config.libsonnet
new file mode 100644
index 000000000000..8a7df26c0d3a
--- /dev/null
+++ b/operations/agent-static-mixin/config.libsonnet
@@ -0,0 +1,13 @@
+{
+  local makeGroupBy(groups) = std.join(', ', groups),
+
+  _config+:: {
+    namespace: '.*',
+
+    // Groups labels to uniquely identify and group by clusters
+    cluster_selectors: ['cluster', 'namespace'],
+
+    // Each group-by label list is `, `-separated and unique identifies
+    group_by_cluster: makeGroupBy($._config.cluster_selectors),
+  },
+}
diff --git a/operations/agent-static-mixin/dashboards.libsonnet b/operations/agent-static-mixin/dashboards.libsonnet
new file mode 100644
index 000000000000..834ec5181312
--- /dev/null
+++ b/operations/agent-static-mixin/dashboards.libsonnet
@@ -0,0 +1,789 @@
+local utils = import './utils.libsonnet';
+local g = import 'grafana-builder/grafana.libsonnet';
+local grafana = import 'grafonnet/grafana.libsonnet';
+
+local dashboard = grafana.dashboard;
+local row = grafana.row;
+local singlestat = grafana.singlestat;
+local prometheus = grafana.prometheus;
+local graphPanel = grafana.graphPanel;
+local tablePanel = grafana.tablePanel;
+local template = grafana.template;
+
+{
+  grafanaDashboards+:: {
+    'agent.json':
+      utils.injectUtils(g.dashboard('Agent'))
+      .addMultiTemplate('cluster', 'agent_build_info', 'cluster')
+      .addMultiTemplate('namespace', 'agent_build_info', 'namespace')
+      .addMultiTemplate('container', 'agent_build_info', 'container')
+      .addMultiTemplateWithAll('pod', 'agent_build_info{container=~"$container"}', 'pod', all='grafana-agent-.*')
+      .addRow(
+        g.row('Agent Stats')
+        .addPanel(
+          g.panel('Agent Stats') +
+          g.tablePanel([
+            'count by (pod, container, version) (agent_build_info{cluster=~"$cluster", namespace=~"$namespace", container=~"$container"})',
+            'max by (pod, container) (time() - process_start_time_seconds{cluster=~"$cluster", namespace=~"$namespace", container=~"$container"})',
+          ], {
+            pod: { alias: 'Pod' },
+            container: { alias: 'Container' },
+            version: { alias: 'Version' },
+            'Value #A': { alias: 'Count', type: 'hidden' },
+            'Value #B': { alias: 'Uptime' },
+          })
+        )
+      )
+      .addRow(
+        g.row('Prometheus Discovery')
+        .addPanel(
+          g.panel('Target Sync') +
+          g.queryPanel('sum(rate(prometheus_target_sync_length_seconds_sum{cluster=~"$cluster", namespace=~"$namespace", container=~"$container"}[5m])) by (pod, scrape_job) * 1e3', '{{pod}}/{{scrape_job}}') +
+          { yaxes: g.yaxes('ms') }
+        )
+        .addPanel(
+          g.panel('Targets') +
+          g.queryPanel('sum by (pod) (prometheus_sd_discovered_targets{cluster=~"$cluster", namespace=~"$namespace", container=~"$container"})', '{{pod}}') +
+          g.stack
+        )
+      )
+      .addRow(
+        g.row('Prometheus Retrieval')
+        .addPanel(
+          g.panel('Average Scrape Interval Duration') +
+          g.queryPanel(|||
+            rate(prometheus_target_interval_length_seconds_sum{cluster=~"$cluster", namespace=~"$namespace", container=~"$container"}[5m])
+            /
+            rate(prometheus_target_interval_length_seconds_count{cluster=~"$cluster", namespace=~"$namespace", container=~"$container"}[5m])
+            * 1e3
+          |||, '{{pod}} {{interval}} configured') +
+          { yaxes: g.yaxes('ms') }
+        )
+        .addPanel(
+          g.panel('Scrape failures') +
+          g.queryPanel([
+            'sum by (job) (rate(prometheus_target_scrapes_exceeded_sample_limit_total{cluster=~"$cluster", namespace=~"$namespace", container=~"$container"}[1m]))',
+            'sum by (job) (rate(prometheus_target_scrapes_sample_duplicate_timestamp_total{cluster=~"$cluster", namespace=~"$namespace", container=~"$container"}[1m]))',
+            'sum by (job) (rate(prometheus_target_scrapes_sample_out_of_bounds_total{cluster=~"$cluster", namespace=~"$namespace", container=~"$container"}[1m]))',
+            'sum by (job) (rate(prometheus_target_scrapes_sample_out_of_order_total{cluster=~"$cluster", namespace=~"$namespace", container=~"$container"}[1m]))',
+          ], [
+            'exceeded sample limit: {{job}}',
+            'duplicate timestamp: {{job}}',
+            'out of bounds: {{job}}',
+            'out of order: {{job}}',
+          ]) +
+          g.stack
+        )
+        .addPanel(
+          g.panel('Appended Samples') +
+          g.queryPanel('sum by (job, instance_group_name) (rate(agent_wal_samples_appended_total{cluster=~"$cluster", namespace=~"$namespace", container=~"$container"}[5m]))', '{{job}} {{instance_group_name}}') +
+          g.stack
+        )
+      ),
+
+    // Remote write specific dashboard.
+    'agent-remote-write.json':
+      local timestampComparison =
+        graphPanel.new(
+          'Highest Timestamp In vs. Highest Timestamp Sent',
+          datasource='$datasource',
+          span=6,
+        )
+        .addTarget(prometheus.target(
+          |||
+            (
+              prometheus_remote_storage_highest_timestamp_in_seconds{cluster=~"$cluster", namespace=~"$namespace", container=~"$container"}
+              -
+              ignoring(url, remote_name) group_right(pod)
+              prometheus_remote_storage_queue_highest_sent_timestamp_seconds{cluster=~"$cluster", namespace=~"$namespace", container=~"$container"}
+            )
+          |||,
+          legendFormat='{{cluster}}:{{pod}}-{{instance_group_name}}-{{url}}',
+        ));
+
+      local remoteSendLatency =
+        graphPanel.new(
+          'Latency [1m]',
+          datasource='$datasource',
+          span=6,
+        )
+        .addTarget(prometheus.target(
+          'rate(prometheus_remote_storage_sent_batch_duration_seconds_sum{cluster=~"$cluster", namespace=~"$namespace", container=~"$container"}[1m]) / rate(prometheus_remote_storage_sent_batch_duration_seconds_count{cluster=~"$cluster", namespace=~"$namespace", container=~"$container"}[1m])',
+          legendFormat='mean {{cluster}}:{{pod}}-{{instance_group_name}}-{{url}}',
+        ))
+        .addTarget(prometheus.target(
+          'histogram_quantile(0.99, rate(prometheus_remote_storage_sent_batch_duration_seconds_bucket{cluster=~"$cluster", namespace=~"$namespace", container=~"$container"}[1m]))',
+          legendFormat='p99 {{cluster}}:{{pod}}-{{instance_group_name}}-{{url}}',
+        ));
+
+      local samplesInRate =
+        graphPanel.new(
+          'Rate in [5m]',
+          datasource='$datasource',
+          span=6,
+        )
+        .addTarget(prometheus.target(
+          'rate(agent_wal_samples_appended_total{cluster=~"$cluster", namespace=~"$namespace", container=~"$container"}[5m])',
+          legendFormat='{{cluster}}:{{pod}}-{{instance_group_name}}-{{url}}',
+        ));
+
+      local samplesOutRate =
+        graphPanel.new(
+          'Rate succeeded [5m]',
+          datasource='$datasource',
+          span=6,
+        )
+        .addTarget(prometheus.target(
+          'rate(prometheus_remote_storage_succeeded_samples_total{cluster=~"$cluster", namespace=~"$namespace", container=~"$container"}[5m]) or rate(prometheus_remote_storage_samples_total{cluster=~"$cluster", namespace=~"$namespace", container=~"$container"}[5m])',
+          legendFormat='{{cluster}}:{{pod}}-{{instance_group_name}}-{{url}}',
+        ));
+
+      local currentShards =
+        graphPanel.new(
+          'Current Shards',
+          datasource='$datasource',
+          span=12,
+          min_span=6,
+        )
+        .addTarget(prometheus.target(
+          'prometheus_remote_storage_shards{cluster=~"$cluster", namespace=~"$namespace", container=~"$container"}',
+          legendFormat='{{cluster}}:{{pod}}-{{instance_group_name}}-{{url}}',
+        ));
+
+      local maxShards =
+        graphPanel.new(
+          'Max Shards',
+          datasource='$datasource',
+          span=4,
+        )
+        .addTarget(prometheus.target(
+          'prometheus_remote_storage_shards_max{cluster=~"$cluster", namespace=~"$namespace", container=~"$container"}',
+          legendFormat='{{cluster}}:{{pod}}-{{instance_group_name}}-{{url}}',
+        ));
+
+      local minShards =
+        graphPanel.new(
+          'Min Shards',
+          datasource='$datasource',
+          span=4,
+        )
+        .addTarget(prometheus.target(
+          'prometheus_remote_storage_shards_min{cluster=~"$cluster", namespace=~"$namespace", container=~"$container"}',
+          legendFormat='{{cluster}}:{{pod}}-{{instance_group_name}}-{{url}}',
+        ));
+
+      local desiredShards =
+        graphPanel.new(
+          'Desired Shards',
+          datasource='$datasource',
+          span=4,
+        )
+        .addTarget(prometheus.target(
+          'prometheus_remote_storage_shards_desired{cluster=~"$cluster", namespace=~"$namespace", container=~"$container"}',
+          legendFormat='{{cluster}}:{{pod}}-{{instance_group_name}}-{{url}}',
+        ));
+
+      local shardsCapacity =
+        graphPanel.new(
+          'Shard Capacity',
+          datasource='$datasource',
+          span=6,
+        )
+        .addTarget(prometheus.target(
+          'prometheus_remote_storage_shard_capacity{cluster=~"$cluster", namespace=~"$namespace", container=~"$container"}',
+          legendFormat='{{cluster}}:{{pod}}-{{instance_group_name}}-{{url}}',
+        ));
+
+      local pendingSamples =
+        graphPanel.new(
+          'Pending Samples',
+          datasource='$datasource',
+          span=6,
+        )
+        .addTarget(prometheus.target(
+          'prometheus_remote_storage_samples_pending{cluster=~"$cluster", namespace=~"$namespace", container=~"$container"}',
+          legendFormat='{{cluster}}:{{pod}}-{{instance_group_name}}-{{url}}',
+        ));
+
+      local queueSegment =
+        graphPanel.new(
+          'Remote Write Current Segment',
+          datasource='$datasource',
+          span=6,
+          formatY1='none',
+        )
+        .addTarget(prometheus.target(
+          'prometheus_wal_watcher_current_segment{cluster=~"$cluster", namespace=~"$namespace", container=~"$container"}',
+          legendFormat='{{cluster}}:{{pod}}-{{instance_group_name}}-{{url}}',
+        ));
+
+      local droppedSamples =
+        graphPanel.new(
+          'Dropped Samples',
+          datasource='$datasource',
+          span=6,
+        )
+        .addTarget(prometheus.target(
+          'rate(prometheus_remote_storage_samples_dropped_total{cluster=~"$cluster", namespace=~"$namespace", container=~"$container"}[5m])',
+          legendFormat='{{cluster}}:{{pod}}-{{instance_group_name}}-{{url}}',
+        ));
+
+      local failedSamples =
+        graphPanel.new(
+          'Failed Samples',
+          datasource='$datasource',
+          span=6,
+        )
+        .addTarget(prometheus.target(
+          'rate(prometheus_remote_storage_samples_failed_total{cluster=~"$cluster", namespace=~"$namespace", container=~"$container"}[5m])',
+          legendFormat='{{cluster}}:{{pod}}-{{instance_group_name}}-{{url}}',
+        ));
+
+      local retriedSamples =
+        graphPanel.new(
+          'Retried Samples',
+          datasource='$datasource',
+          span=6,
+        )
+        .addTarget(prometheus.target(
+          'rate(prometheus_remote_storage_samples_retried_total{cluster=~"$cluster", namespace=~"$namespace", container=~"$container"}[5m])',
+          legendFormat='{{cluster}}:{{pod}}-{{instance_group_name}}-{{url}}',
+        ));
+
+      local enqueueRetries =
+        graphPanel.new(
+          'Enqueue Retries',
+          datasource='$datasource',
+          span=6,
+        )
+        .addTarget(prometheus.target(
+          'rate(prometheus_remote_storage_enqueue_retries_total{cluster=~"$cluster", namespace=~"$namespace", container=~"$container"}[5m])',
+          legendFormat='{{cluster}}:{{pod}}-{{instance_group_name}}-{{url}}',
+        ));
+
+      dashboard.new('Agent Prometheus Remote Write', tags=['grafana-agent-mixin'], editable=true, refresh='30s', time_from='now-1h')
+      .addTemplate(
+        {
+          hide: 0,
+          label: null,
+          name: 'datasource',
+          options: [],
+          query: 'prometheus',
+          refresh: 1,
+          regex: '',
+          type: 'datasource',
+        },
+      )
+      .addTemplate(
+        template.new(
+          'cluster',
+          '$datasource',
+          'label_values(agent_build_info, cluster)',
+          refresh='time',
+          current={
+            selected: true,
+            text: 'All',
+            value: '$__all',
+          },
+          includeAll=true,
+        ),
+      )
+      .addTemplate(
+        template.new(
+          'namespace',
+          '$datasource',
+          'label_values(agent_build_info, namespace)',
+          refresh='time',
+          current={
+            selected: true,
+            text: 'All',
+            value: '$__all',
+          },
+          includeAll=true,
+        ),
+      )
+      .addTemplate(
+        template.new(
+          'container',
+          '$datasource',
+          'label_values(agent_build_info, container)',
+          refresh='time',
+          current={
+            selected: true,
+            text: 'All',
+            value: '$__all',
+          },
+          includeAll=true,
+        ),
+      )
+      .addTemplate(
+        template.new(
+          'pod',
+          '$datasource',
+          'label_values(agent_build_info{container=~"$container"}, pod)',
+          refresh='time',
+          current={
+            selected: true,
+            text: 'All',
+            value: '$__all',
+          },
+          includeAll=true,
+        ),
+      )
+      .addTemplate(
+        template.new(
+          'url',
+          '$datasource',
+          'label_values(prometheus_remote_storage_shards{cluster=~"$cluster", pod=~"$pod"}, url)',
+          refresh='time',
+          includeAll=true,
+        )
+      )
+      .addRow(
+        row.new('Timestamps')
+        .addPanel(timestampComparison)
+        .addPanel(remoteSendLatency)
+      )
+      .addRow(
+        row.new('Samples')
+        .addPanel(samplesInRate)
+        .addPanel(samplesOutRate)
+        .addPanel(pendingSamples)
+        .addPanel(droppedSamples)
+        .addPanel(failedSamples)
+        .addPanel(retriedSamples)
+      )
+      .addRow(
+        row.new('Shards')
+        .addPanel(currentShards)
+        .addPanel(maxShards)
+        .addPanel(minShards)
+        .addPanel(desiredShards)
+      )
+      .addRow(
+        row.new('Shard Details')
+        .addPanel(shardsCapacity)
+      )
+      .addRow(
+        row.new('Segments')
+        .addPanel(queueSegment)
+      )
+      .addRow(
+        row.new('Misc. Rates')
+        .addPanel(enqueueRetries)
+      ),
+
+    'agent-tracing-pipeline.json':
+      local acceptedSpans =
+        graphPanel.new(
+          'Accepted spans',
+          datasource='$datasource',
+          interval='1m',
+          span=3,
+          legend_show=false,
+          fill=0,
+        )
+        .addTarget(prometheus.target(
+          |||
+            rate(traces_receiver_accepted_spans{cluster=~"$cluster",namespace=~"$namespace",container=~"$container",pod=~"$pod",receiver!="otlp/lb"}[$__rate_interval])
+          |||,
+          legendFormat='{{ pod }} - {{ receiver }}/{{ transport }}',
+        ));
+
+      local refusedSpans =
+        graphPanel.new(
+          'Refused spans',
+          datasource='$datasource',
+          interval='1m',
+          span=3,
+          legend_show=false,
+          fill=0,
+        )
+        .addTarget(prometheus.target(
+          |||
+            rate(traces_receiver_refused_spans{cluster=~"$cluster",namespace=~"$namespace",container=~"$container",pod=~"$pod",receiver!="otlp/lb"}[$__rate_interval])
+          |||,
+          legendFormat='{{ pod }} - {{ receiver }}/{{ transport }}',
+        ));
+
+      local sentSpans =
+        graphPanel.new(
+          'Exported spans',
+          datasource='$datasource',
+          interval='1m',
+          span=3,
+          legend_show=false,
+          fill=0,
+        )
+        .addTarget(prometheus.target(
+          |||
+            rate(traces_exporter_sent_spans{cluster=~"$cluster",namespace=~"$namespace",container=~"$container",pod=~"$pod",exporter!="otlp"}[$__rate_interval])
+          |||,
+          legendFormat='{{ pod }} - {{ exporter }}',
+        ));
+
+      local exportedFailedSpans =
+        graphPanel.new(
+          'Exported failed spans',
+          datasource='$datasource',
+          interval='1m',
+          span=3,
+          legend_show=false,
+          fill=0,
+        )
+        .addTarget(prometheus.target(
+          |||
+            rate(traces_exporter_send_failed_spans{cluster=~"$cluster",namespace=~"$namespace",container=~"$container",pod=~"$pod",exporter!="otlp"}[$__rate_interval])
+          |||,
+          legendFormat='{{ pod }} - {{ exporter }}',
+        ));
+
+      local receivedSpans(receiverFilter, width) =
+        graphPanel.new(
+          'Received spans',
+          datasource='$datasource',
+          interval='1m',
+          span=width,
+          fill=1,
+        )
+        .addTarget(prometheus.target(
+          |||
+            sum(rate(traces_receiver_accepted_spans{cluster=~"$cluster",namespace=~"$namespace",container=~"$container",pod=~"$pod",%s}[$__rate_interval]))
+          ||| % receiverFilter,
+          legendFormat='Accepted',
+        ))
+        .addTarget(prometheus.target(
+          |||
+            sum(rate(traces_receiver_refused_spans{cluster=~"$cluster",namespace=~"$namespace",container=~"$container",pod=~"$pod",%s}[$__rate_interval]))
+          ||| % receiverFilter,
+          legendFormat='Refused',
+        ));
+
+      local exportedSpans(exporterFilter, width) =
+        graphPanel.new(
+          'Exported spans',
+          datasource='$datasource',
+          interval='1m',
+          span=width,
+          fill=1,
+        )
+        .addTarget(prometheus.target(
+          |||
+            sum(rate(traces_exporter_sent_spans{cluster=~"$cluster",namespace=~"$namespace",container=~"$container",pod=~"$pod",%s}[$__rate_interval]))
+          ||| % exporterFilter,
+          legendFormat='Sent',
+        ))
+        .addTarget(prometheus.target(
+          |||
+            sum(rate(traces_exporter_send_failed_spans{cluster=~"$cluster",namespace=~"$namespace",container=~"$container",pod=~"$pod",%s}[$__rate_interval]))
+          ||| % exporterFilter,
+          legendFormat='Send failed',
+        ));
+
+      local loadBalancedSpans =
+        graphPanel.new(
+          'Load-balanced spans',
+          datasource='$datasource',
+          interval='1m',
+          span=3,
+          fill=1,
+          stack=true,
+        )
+        .addTarget(prometheus.target(
+          |||
+            rate(traces_loadbalancer_backend_outcome{cluster=~"$cluster",namespace=~"$namespace",success="true",container=~"$container",pod=~"$pod"}[$__rate_interval])
+          |||,
+          legendFormat='{{ pod }}',
+        ));
+
+      local peersNum =
+        graphPanel.new(
+          'Number of peers',
+          datasource='$datasource',
+          interval='1m',
+          span=3,
+          legend_show=false,
+          fill=0,
+        )
+        .addTarget(prometheus.target(
+          |||
+            traces_loadbalancer_num_backends{cluster=~"$cluster",namespace=~"$namespace",container=~"$container",pod=~"$pod"}
+          |||,
+          legendFormat='{{ pod }}',
+        ));
+
+      dashboard.new('Agent Tracing Pipeline', tags=['grafana-agent-mixin'], editable=true, refresh='30s', time_from='now-1h')
+      .addTemplate(
+        {
+          hide: 0,
+          label: null,
+          name: 'datasource',
+          options: [],
+          query: 'prometheus',
+          refresh: 1,
+          regex: '',
+          type: 'datasource',
+        },
+      )
+      .addTemplate(
+        template.new(
+          'cluster',
+          '$datasource',
+          'label_values(agent_build_info, cluster)',
+          refresh='time',
+          current={
+            selected: true,
+            text: 'All',
+            value: '$__all',
+          },
+          includeAll=true,
+        ),
+      )
+      .addTemplate(
+        template.new(
+          'namespace',
+          '$datasource',
+          'label_values(agent_build_info, namespace)',
+          refresh='time',
+          current={
+            selected: true,
+            text: 'All',
+            value: '$__all',
+          },
+          includeAll=true,
+        ),
+      )
+      .addTemplate(
+        template.new(
+          'container',
+          '$datasource',
+          'label_values(agent_build_info, container)',
+          refresh='time',
+          current={
+            selected: true,
+            text: 'All',
+            value: '$__all',
+          },
+          includeAll=true,
+        ),
+      )
+      .addTemplate(
+        template.new(
+          'pod',
+          '$datasource',
+          'label_values(agent_build_info{container=~"$container"}, pod)',
+          refresh='time',
+          current={
+            selected: true,
+            text: 'All',
+            value: '$__all',
+          },
+          includeAll=true,
+        ),
+      )
+      .addRow(
+        row.new('Write / Read')
+        .addPanel(acceptedSpans)
+        .addPanel(refusedSpans)
+        .addPanel(sentSpans)
+        .addPanel(exportedFailedSpans)
+        .addPanel(receivedSpans('receiver!="otlp/lb"', 6))
+        .addPanel(exportedSpans('exporter!="otlp"', 6))
+      )
+      .addRow(
+        row.new('Load balancing')
+        .addPanel(loadBalancedSpans)
+        .addPanel(peersNum)
+        .addPanel(receivedSpans('receiver="otlp/lb"', 3))
+        .addPanel(exportedSpans('exporter="otlp"', 3))
+      ),
+
+    'agent-logs-pipeline.json':
+      local sumByPodRateCounter(title, metric, format='short') =
+        graphPanel.new(
+          title,
+          datasource='$datasource',
+          interval='1m',
+          span=6,
+          fill=1,
+          stack=true,
+          format=format
+        )
+        .addTarget(prometheus.target(
+          |||
+            sum by($groupBy) (rate(%s{cluster=~"$cluster",namespace=~"$namespace",container=~"$container",pod=~"$pod"}[$__rate_interval]))
+          ||| % [metric],
+          legendFormat='{{$groupBy}}',
+        ));
+
+      local sumByPodGague(title, metric) =
+        graphPanel.new(
+          title,
+          datasource='$datasource',
+          interval='1m',
+          span=6,
+          fill=1,
+          stack=true,
+        )
+        .addTarget(prometheus.target(
+          |||
+            sum by($groupBy) (%s{cluster=~"$cluster",namespace=~"$namespace",container=~"$container",pod=~"$pod"})
+          ||| % [metric],
+          legendFormat='{{$groupBy}}',
+        ));
+
+      local requestSuccessRate() =
+        graphPanel.new(
+          'Write requests success rate [%]',
+          datasource='$datasource',
+          interval='1m',
+          fill=0,
+          span=6,
+          format='%',
+        )
+        .addTarget(prometheus.target(
+          |||
+            sum by($groupBy) (rate(promtail_request_duration_seconds_bucket{status_code=~"2..", cluster=~"$cluster",namespace=~"$namespace",container=~"$container",pod=~"$pod"}[$__rate_interval]))
+            /
+            sum by($groupBy) (rate(promtail_request_duration_seconds_bucket{cluster=~"$cluster",namespace=~"$namespace",container=~"$container",pod=~"$pod"}[$__rate_interval]))
+            * 100
+          |||,
+          legendFormat='{{$groupBy}}',
+        ));
+
+      local histogramQuantile(title, metric, q) =
+        graphPanel.new(
+          title,
+          datasource='$datasource',
+          interval='1m',
+          span=6,
+          fill=0,
+          format='s',
+        )
+        .addTarget(prometheus.target(
+          |||
+            histogram_quantile(
+              %f, 
+              sum by (le, $groupBy)
+              (rate(%s{cluster=~"$cluster",namespace=~"$namespace",container=~"$container",pod=~"$pod"}[$__rate_interval]))
+            )
+          ||| % [q, metric],
+          legendFormat='{{$groupBy}}',
+        ));
+
+      local histogramAverage(title, metric) =
+        graphPanel.new(
+          title,
+          datasource='$datasource',
+          interval='1m',
+          span=6,
+          fill=0,
+          format='s',
+        )
+        .addTarget(prometheus.target(
+          |||
+            (sum by (le, $groupBy) (rate(%s_sum{cluster=~"$cluster",namespace=~"$namespace",container=~"$container",pod=~"$pod"}[$__rate_interval])))
+            /
+            (sum by (le, $groupBy) (rate(%s_count{cluster=~"$cluster",namespace=~"$namespace",container=~"$container",pod=~"$pod"}[$__rate_interval])))
+          ||| % [metric, metric],
+          legendFormat='{{$groupBy}}',
+        ));
+
+
+      dashboard.new('Agent Logs Pipeline', tags=['grafana-agent-mixin'], editable=true, refresh='30s', time_from='now-1h')
+      .addTemplate(
+        {
+          hide: 0,
+          label: null,
+          name: 'datasource',
+          options: [],
+          query: 'prometheus',
+          refresh: 1,
+          regex: '',
+          type: 'datasource',
+        },
+      )
+      .addTemplate(
+        template.new(
+          'cluster',
+          '$datasource',
+          'label_values(agent_build_info, cluster)',
+          refresh='time',
+          current={
+            selected: true,
+            text: 'All',
+            value: '$__all',
+          },
+          includeAll=true,
+        ),
+      )
+      .addTemplate(
+        template.new(
+          'namespace',
+          '$datasource',
+          'label_values(agent_build_info, namespace)',
+          refresh='time',
+          current={
+            selected: true,
+            text: 'All',
+            value: '$__all',
+          },
+          includeAll=true,
+        ),
+      )
+      .addTemplate(
+        template.new(
+          'container',
+          '$datasource',
+          'label_values(agent_build_info, container)',
+          refresh='time',
+          current={
+            selected: true,
+            text: 'All',
+            value: '$__all',
+          },
+          includeAll=true,
+        ),
+      )
+      .addTemplate(
+        template.new(
+          'pod',
+          '$datasource',
+          'label_values(agent_build_info{container=~"$container"}, pod)',
+          refresh='time',
+          current={
+            selected: true,
+            text: 'All',
+            value: '$__all',
+          },
+          includeAll=true,
+        ),
+      )
+      .addTemplate(
+        template.custom(
+          'groupBy',
+          'pod,cluster,namespace',
+          'pod',
+        ),
+      )
+      .addRow(
+        row.new('Errors', height=500)
+        .addPanel(sumByPodRateCounter('Dropped bytes rate [B/s]', 'promtail_dropped_bytes_total', format='Bps'))
+        .addPanel(requestSuccessRate())
+      )
+      .addRow(
+        row.new('Latencies', height=500)
+        .addPanel(histogramQuantile('Write latencies p99 [s]', 'promtail_request_duration_seconds_bucket', 0.99))
+        .addPanel(histogramQuantile('Write latencies p90 [s]', 'promtail_request_duration_seconds_bucket', 0.90))
+        .addPanel(histogramQuantile('Write latencies p50 [s]', 'promtail_request_duration_seconds_bucket', 0.50))
+        .addPanel(histogramAverage('Write latencies average [s]', 'promtail_request_duration_seconds'))
+      )
+      .addRow(
+        row.new('Logs volume', height=500)
+        .addPanel(sumByPodRateCounter('Bytes read rate [B/s]', 'promtail_read_bytes_total', format='Bps'))
+        .addPanel(sumByPodRateCounter('Lines read rate [lines/s]', 'promtail_read_lines_total'))
+        .addPanel(sumByPodGague('Active files count', 'promtail_files_active_total'))
+        .addPanel(sumByPodRateCounter('Entries sent rate [entries/s]', 'promtail_sent_entries_total'))
+      ),
+  },
+}
diff --git a/operations/agent-static-mixin/debugging.libsonnet b/operations/agent-static-mixin/debugging.libsonnet
new file mode 100644
index 000000000000..711184d333f7
--- /dev/null
+++ b/operations/agent-static-mixin/debugging.libsonnet
@@ -0,0 +1,128 @@
+local utils = import './utils.libsonnet';
+local g = import 'grafana-builder/grafana.libsonnet';
+
+{
+  grafanaDashboards+:: {
+    'agent-operational.json':
+      utils.injectUtils(g.dashboard('Agent Operational'))
+      .addMultiTemplate('cluster', 'agent_build_info', 'cluster')
+      .addMultiTemplate('namespace', 'agent_build_info{cluster=~"$cluster"}', 'namespace')
+      .addMultiTemplate('container', 'agent_build_info{cluster=~"$cluster", namespace="$namespace"}', 'container')
+      .addMultiTemplate('pod', 'agent_build_info{cluster=~"$cluster", namespace="$namespace", container="$container"}', 'pod')
+      .addRow(
+        g.row('General')
+        .addPanel(
+          g.panel('GCs [count/s]') +
+          g.queryPanel(
+            'rate(go_gc_duration_seconds_count{cluster=~"$cluster", namespace=~"$namespace", container=~"$container", pod=~"$pod"}[5m])',
+            '{{pod}}',
+          )
+        )
+        .addPanel(
+          g.panel('Go Heap In Use') +
+          { yaxes: g.yaxes('decbytes') } +
+          g.queryPanel(
+            'go_memstats_heap_inuse_bytes{cluster=~"$cluster", namespace=~"$namespace", container=~"$container", pod=~"$pod"}',
+            '{{pod}}',
+          )
+        )
+        .addPanel(
+          g.panel('Goroutines') +
+          g.queryPanel(
+            'go_goroutines{cluster=~"$cluster", namespace=~"$namespace", container=~"$container", pod=~"$pod"}',
+            '{{pod}}',
+          )
+        )
+        .addPanel(
+          g.panel('CPU Usage [time/s]') +
+          g.queryPanel(
+            'rate(container_cpu_usage_seconds_total{cluster=~"$cluster", namespace=~"$namespace", container=~"$container", pod=~"$pod"}[5m])',
+            '{{pod}}',
+          )
+        )
+        .addPanel(
+          g.panel('Working Set Size') +
+          { yaxes: g.yaxes('decbytes') } +
+          g.queryPanel(
+            'container_memory_working_set_bytes{cluster=~"$cluster", namespace=~"$namespace", container=~"$container", pod=~"$pod"}',
+            '{{pod}}',
+          )
+        )
+        .addPanel(
+          g.panel('Promtail Bad Words') +
+          g.queryPanel(
+            'rate(promtail_custom_bad_words_total{cluster=~"$cluster", exported_namespace=~"$namespace", exported_job=~"$job"}[5m])',
+            '{{job}}',
+          )
+        )
+      )
+      .addRow(
+        g.row('Network')
+        .addPanel(
+          g.panel('Received Bytes [B/s]') +
+          { yaxes: g.yaxes('Bps') } +
+          g.queryPanel(
+            'sum by (pod) (rate(container_network_receive_bytes_total{cluster=~"$cluster", namespace=~"$namespace", pod=~"$pod"}[5m]))',
+            '{{pod}}',
+          )
+        )
+        .addPanel(
+          g.panel('Transmitted Bytes [B/s]') +
+          { yaxes: g.yaxes('Bps') } +
+          g.queryPanel(
+            'sum by (pod) (rate(container_network_transmit_bytes_total{cluster=~"$cluster", namespace=~"$namespace", pod=~"$pod"}[5m]))',
+            '{{pod}}',
+          )
+        )
+      )
+      .addRow(
+        g.row('Prometheus Read')
+        .addPanel(
+          g.panel('Heap Used per Series per Pod') +
+          { yaxes: g.yaxes('decbytes') } +
+          g.queryPanel(
+            |||
+              (sum by (pod) (avg_over_time(go_memstats_heap_inuse_bytes{cluster=~"$cluster", namespace=~"$namespace", container=~"$container", pod=~"$pod"}[1m])))
+              /
+              (sum by (pod) (agent_wal_storage_active_series{cluster=~"$cluster", namespace=~"$namespace", container=~"$container", pod=~"$pod"}))
+            |||,
+            '{{pod}}',
+          )
+        )
+        .addPanel(
+          g.panel('Avg Heap Used per Series') +
+          { yaxes: g.yaxes('decbytes') } +
+          g.queryPanel(
+            |||
+              (sum by (container) (avg_over_time(go_memstats_heap_inuse_bytes{cluster=~"$cluster", namespace=~"$namespace", container=~"$container", pod=~"$pod"}[1m])))
+              /
+              (sum by (container) (agent_wal_storage_active_series{cluster=~"$cluster", namespace=~"$namespace", container=~"$container", pod=~"$pod"}))
+            |||,
+            '{{container}}',
+          )
+        )
+        .addPanel(
+          g.panel('Series Count per Pod') +
+          g.queryPanel(
+            'sum by (pod) (agent_wal_storage_active_series{cluster=~"$cluster", namespace=~"$namespace", container=~"$container", pod=~"$pod"})',
+            '{{pod}}',
+          )
+        )
+        .addPanel(
+          g.panel('Series per Config') +
+          g.queryPanel(
+            'sum by (instance_group_name) (agent_wal_storage_active_series{cluster=~"$cluster", namespace=~"$namespace", container=~"$container", pod=~"$pod"})',
+            '{{instance_group_name}}',
+          )
+        )
+        .addPanel(
+          g.panel('Total Series') +
+          g.queryPanel(
+            'sum by (container) (agent_wal_storage_active_series{cluster=~"$cluster", namespace=~"$namespace", container=~"$container", pod=~"$pod"})',
+            '{{container}}',
+          )
+        )
+      ),
+  },
+}
+
diff --git a/operations/agent-static-mixin/jsonnetfile.json b/operations/agent-static-mixin/jsonnetfile.json
new file mode 100644
index 000000000000..e5a27a96ad6a
--- /dev/null
+++ b/operations/agent-static-mixin/jsonnetfile.json
@@ -0,0 +1,25 @@
+{
+  "dependencies": [
+    {
+      "name": "grafana-builder",
+      "source": {
+        "git": {
+          "remote": "https://github.com/grafana/jsonnet-libs",
+          "subdir": "grafana-builder"
+        }
+      },
+      "version": "master"
+    },
+    {
+      "name": "grafonnet",
+      "source": {
+        "git": {
+          "remote": "https://github.com/grafana/grafonnet-lib",
+          "subdir": "grafonnet"
+        }
+      },
+      "version": "master"
+    }
+  ]
+}
+
diff --git a/operations/agent-static-mixin/mixin.libsonnet b/operations/agent-static-mixin/mixin.libsonnet
new file mode 100644
index 000000000000..2a015d681601
--- /dev/null
+++ b/operations/agent-static-mixin/mixin.libsonnet
@@ -0,0 +1,4 @@
+{ grafanaDashboardFolder: 'Grafana Agent' }
++ (import 'dashboards.libsonnet')
++ (import 'debugging.libsonnet')
++ (import 'alerts.libsonnet')
diff --git a/operations/agent-static-mixin/utils.libsonnet b/operations/agent-static-mixin/utils.libsonnet
new file mode 100644
index 000000000000..5467553a7d52
--- /dev/null
+++ b/operations/agent-static-mixin/utils.libsonnet
@@ -0,0 +1,34 @@
+{
+  injectUtils(dashboard):: dashboard {
+    tags: ['grafana-agent-mixin'],
+    refresh: '30s',
+    addMultiTemplateWithAll(name, metric_name, label_name, all='.*', hide=0):: self {
+      templating+: {
+        list+: [{
+          allValue: all,
+          current: {
+            selected: true,
+            text: 'All',
+            value: '$__all',
+          },
+          datasource: '$datasource',
+          hide: hide,
+          includeAll: true,
+          label: name,
+          multi: true,
+          name: name,
+          options: [],
+          query: 'label_values(%s, %s)' % [metric_name, label_name],
+          refresh: 1,
+          regex: '',
+          sort: 2,
+          tagValuesQuery: '',
+          tags: [],
+          tagsQuery: '',
+          type: 'query',
+          useTags: false,
+        }],
+      },
+    },
+  },
+}
diff --git a/operations/agent-static-operator/crds/monitoring.coreos.com_podmonitors.yaml b/operations/agent-static-operator/crds/monitoring.coreos.com_podmonitors.yaml
new file mode 100644
index 000000000000..3e1fae0fc527
--- /dev/null
+++ b/operations/agent-static-operator/crds/monitoring.coreos.com_podmonitors.yaml
@@ -0,0 +1,679 @@
+---
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+  annotations:
+    controller-gen.kubebuilder.io/version: v0.9.2
+  creationTimestamp: null
+  name: podmonitors.monitoring.coreos.com
+spec:
+  group: monitoring.coreos.com
+  names:
+    categories:
+    - prometheus-operator
+    kind: PodMonitor
+    listKind: PodMonitorList
+    plural: podmonitors
+    shortNames:
+    - pmon
+    singular: podmonitor
+  scope: Namespaced
+  versions:
+  - name: v1
+    schema:
+      openAPIV3Schema:
+        description: PodMonitor defines monitoring for a set of pods.
+        properties:
+          apiVersion:
+            description: 'APIVersion defines the versioned schema of this representation
+              of an object. Servers should convert recognized schemas to the latest
+              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+            type: string
+          kind:
+            description: 'Kind is a string value representing the REST resource this
+              object represents. Servers may infer this from the endpoint the client
+              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+            type: string
+          metadata:
+            type: object
+          spec:
+            description: Specification of desired Pod selection for target discovery
+              by Prometheus.
+            properties:
+              attachMetadata:
+                description: Attaches node metadata to discovered targets. Requires
+                  Prometheus v2.35.0 and above.
+                properties:
+                  node:
+                    description: When set to true, Prometheus must have permissions
+                      to get Nodes.
+                    type: boolean
+                type: object
+              jobLabel:
+                description: The label to use to retrieve the job name from.
+                type: string
+              labelLimit:
+                description: Per-scrape limit on number of labels that will be accepted
+                  for a sample. Only valid in Prometheus versions 2.27.0 and newer.
+                format: int64
+                type: integer
+              labelNameLengthLimit:
+                description: Per-scrape limit on length of labels name that will be
+                  accepted for a sample. Only valid in Prometheus versions 2.27.0
+                  and newer.
+                format: int64
+                type: integer
+              labelValueLengthLimit:
+                description: Per-scrape limit on length of labels value that will
+                  be accepted for a sample. Only valid in Prometheus versions 2.27.0
+                  and newer.
+                format: int64
+                type: integer
+              namespaceSelector:
+                description: Selector to select which namespaces the Endpoints objects
+                  are discovered from.
+                properties:
+                  any:
+                    description: Boolean describing whether all namespaces are selected
+                      in contrast to a list restricting them.
+                    type: boolean
+                  matchNames:
+                    description: List of namespace names to select from.
+                    items:
+                      type: string
+                    type: array
+                type: object
+              podMetricsEndpoints:
+                description: A list of endpoints allowed as part of this PodMonitor.
+                items:
+                  description: PodMetricsEndpoint defines a scrapeable endpoint of
+                    a Kubernetes Pod serving Prometheus metrics.
+                  properties:
+                    authorization:
+                      description: Authorization section for this endpoint
+                      properties:
+                        credentials:
+                          description: The secret's key that contains the credentials
+                            of the request
+                          properties:
+                            key:
+                              description: The key of the secret to select from.  Must
+                                be a valid secret key.
+                              type: string
+                            name:
+                              description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                TODO: Add other useful fields. apiVersion, kind, uid?'
+                              type: string
+                            optional:
+                              description: Specify whether the Secret or its key must
+                                be defined
+                              type: boolean
+                          required:
+                          - key
+                          type: object
+                          x-kubernetes-map-type: atomic
+                        type:
+                          description: Set the authentication type. Defaults to Bearer,
+                            Basic will cause an error
+                          type: string
+                      type: object
+                    basicAuth:
+                      description: 'BasicAuth allow an endpoint to authenticate over
+                        basic authentication. More info: https://prometheus.io/docs/operating/configuration/#endpoint'
+                      properties:
+                        password:
+                          description: The secret in the service monitor namespace
+                            that contains the password for authentication.
+                          properties:
+                            key:
+                              description: The key of the secret to select from.  Must
+                                be a valid secret key.
+                              type: string
+                            name:
+                              description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                TODO: Add other useful fields. apiVersion, kind, uid?'
+                              type: string
+                            optional:
+                              description: Specify whether the Secret or its key must
+                                be defined
+                              type: boolean
+                          required:
+                          - key
+                          type: object
+                          x-kubernetes-map-type: atomic
+                        username:
+                          description: The secret in the service monitor namespace
+                            that contains the username for authentication.
+                          properties:
+                            key:
+                              description: The key of the secret to select from.  Must
+                                be a valid secret key.
+                              type: string
+                            name:
+                              description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                TODO: Add other useful fields. apiVersion, kind, uid?'
+                              type: string
+                            optional:
+                              description: Specify whether the Secret or its key must
+                                be defined
+                              type: boolean
+                          required:
+                          - key
+                          type: object
+                          x-kubernetes-map-type: atomic
+                      type: object
+                    bearerTokenSecret:
+                      description: Secret to mount to read bearer token for scraping
+                        targets. The secret needs to be in the same namespace as the
+                        pod monitor and accessible by the Prometheus Operator.
+                      properties:
+                        key:
+                          description: The key of the secret to select from.  Must
+                            be a valid secret key.
+                          type: string
+                        name:
+                          description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                            TODO: Add other useful fields. apiVersion, kind, uid?'
+                          type: string
+                        optional:
+                          description: Specify whether the Secret or its key must
+                            be defined
+                          type: boolean
+                      required:
+                      - key
+                      type: object
+                      x-kubernetes-map-type: atomic
+                    enableHttp2:
+                      description: Whether to enable HTTP2.
+                      type: boolean
+                    filterRunning:
+                      description: 'Drop pods that are not running. (Failed, Succeeded).
+                        Enabled by default. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#pod-phase'
+                      type: boolean
+                    followRedirects:
+                      description: FollowRedirects configures whether scrape requests
+                        follow HTTP 3xx redirects.
+                      type: boolean
+                    honorLabels:
+                      description: HonorLabels chooses the metric's labels on collisions
+                        with target labels.
+                      type: boolean
+                    honorTimestamps:
+                      description: HonorTimestamps controls whether Prometheus respects
+                        the timestamps present in scraped data.
+                      type: boolean
+                    interval:
+                      description: Interval at which metrics should be scraped If
+                        not specified Prometheus' global scrape interval is used.
+                      pattern: ^(0|(([0-9]+)y)?(([0-9]+)w)?(([0-9]+)d)?(([0-9]+)h)?(([0-9]+)m)?(([0-9]+)s)?(([0-9]+)ms)?)$
+                      type: string
+                    metricRelabelings:
+                      description: MetricRelabelConfigs to apply to samples before
+                        ingestion.
+                      items:
+                        description: 'RelabelConfig allows dynamic rewriting of the
+                          label set, being applied to samples before ingestion. It
+                          defines `<metric_relabel_configs>`-section of Prometheus
+                          configuration. More info: https://prometheus.io/docs/prometheus/latest/configuration/configuration/#metric_relabel_configs'
+                        properties:
+                          action:
+                            default: replace
+                            description: Action to perform based on regex matching.
+                              Default is 'replace'. uppercase and lowercase actions
+                              require Prometheus >= 2.36.
+                            enum:
+                            - replace
+                            - Replace
+                            - keep
+                            - Keep
+                            - drop
+                            - Drop
+                            - hashmod
+                            - HashMod
+                            - labelmap
+                            - LabelMap
+                            - labeldrop
+                            - LabelDrop
+                            - labelkeep
+                            - LabelKeep
+                            - lowercase
+                            - Lowercase
+                            - uppercase
+                            - Uppercase
+                            - keepequal
+                            - KeepEqual
+                            - dropequal
+                            - DropEqual
+                            type: string
+                          modulus:
+                            description: Modulus to take of the hash of the source
+                              label values.
+                            format: int64
+                            type: integer
+                          regex:
+                            description: Regular expression against which the extracted
+                              value is matched. Default is '(.*)'
+                            type: string
+                          replacement:
+                            description: Replacement value against which a regex replace
+                              is performed if the regular expression matches. Regex
+                              capture groups are available. Default is '$1'
+                            type: string
+                          separator:
+                            description: Separator placed between concatenated source
+                              label values. default is ';'.
+                            type: string
+                          sourceLabels:
+                            description: The source labels select values from existing
+                              labels. Their content is concatenated using the configured
+                              separator and matched against the configured regular
+                              expression for the replace, keep, and drop actions.
+                            items:
+                              description: LabelName is a valid Prometheus label name
+                                which may only contain ASCII letters, numbers, as
+                                well as underscores.
+                              pattern: ^[a-zA-Z_][a-zA-Z0-9_]*$
+                              type: string
+                            type: array
+                          targetLabel:
+                            description: Label to which the resulting value is written
+                              in a replace action. It is mandatory for replace actions.
+                              Regex capture groups are available.
+                            type: string
+                        type: object
+                      type: array
+                    oauth2:
+                      description: OAuth2 for the URL. Only valid in Prometheus versions
+                        2.27.0 and newer.
+                      properties:
+                        clientId:
+                          description: The secret or configmap containing the OAuth2
+                            client id
+                          properties:
+                            configMap:
+                              description: ConfigMap containing data to use for the
+                                targets.
+                              properties:
+                                key:
+                                  description: The key to select.
+                                  type: string
+                                name:
+                                  description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                    TODO: Add other useful fields. apiVersion, kind,
+                                    uid?'
+                                  type: string
+                                optional:
+                                  description: Specify whether the ConfigMap or its
+                                    key must be defined
+                                  type: boolean
+                              required:
+                              - key
+                              type: object
+                              x-kubernetes-map-type: atomic
+                            secret:
+                              description: Secret containing data to use for the targets.
+                              properties:
+                                key:
+                                  description: The key of the secret to select from.  Must
+                                    be a valid secret key.
+                                  type: string
+                                name:
+                                  description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                    TODO: Add other useful fields. apiVersion, kind,
+                                    uid?'
+                                  type: string
+                                optional:
+                                  description: Specify whether the Secret or its key
+                                    must be defined
+                                  type: boolean
+                              required:
+                              - key
+                              type: object
+                              x-kubernetes-map-type: atomic
+                          type: object
+                        clientSecret:
+                          description: The secret containing the OAuth2 client secret
+                          properties:
+                            key:
+                              description: The key of the secret to select from.  Must
+                                be a valid secret key.
+                              type: string
+                            name:
+                              description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                TODO: Add other useful fields. apiVersion, kind, uid?'
+                              type: string
+                            optional:
+                              description: Specify whether the Secret or its key must
+                                be defined
+                              type: boolean
+                          required:
+                          - key
+                          type: object
+                          x-kubernetes-map-type: atomic
+                        endpointParams:
+                          additionalProperties:
+                            type: string
+                          description: Parameters to append to the token URL
+                          type: object
+                        scopes:
+                          description: OAuth2 scopes used for the token request
+                          items:
+                            type: string
+                          type: array
+                        tokenUrl:
+                          description: The URL to fetch the token from
+                          minLength: 1
+                          type: string
+                      required:
+                      - clientId
+                      - clientSecret
+                      - tokenUrl
+                      type: object
+                    params:
+                      additionalProperties:
+                        items:
+                          type: string
+                        type: array
+                      description: Optional HTTP URL parameters
+                      type: object
+                    path:
+                      description: HTTP path to scrape for metrics. If empty, Prometheus
+                        uses the default value (e.g. `/metrics`).
+                      type: string
+                    port:
+                      description: Name of the pod port this endpoint refers to. Mutually
+                        exclusive with targetPort.
+                      type: string
+                    proxyUrl:
+                      description: ProxyURL eg http://proxyserver:2195 Directs scrapes
+                        to proxy through this endpoint.
+                      type: string
+                    relabelings:
+                      description: 'RelabelConfigs to apply to samples before scraping.
+                        Prometheus Operator automatically adds relabelings for a few
+                        standard Kubernetes fields. The original scrape job''s name
+                        is available via the `__tmp_prometheus_job_name` label. More
+                        info: https://prometheus.io/docs/prometheus/latest/configuration/configuration/#relabel_config'
+                      items:
+                        description: 'RelabelConfig allows dynamic rewriting of the
+                          label set, being applied to samples before ingestion. It
+                          defines `<metric_relabel_configs>`-section of Prometheus
+                          configuration. More info: https://prometheus.io/docs/prometheus/latest/configuration/configuration/#metric_relabel_configs'
+                        properties:
+                          action:
+                            default: replace
+                            description: Action to perform based on regex matching.
+                              Default is 'replace'. uppercase and lowercase actions
+                              require Prometheus >= 2.36.
+                            enum:
+                            - replace
+                            - Replace
+                            - keep
+                            - Keep
+                            - drop
+                            - Drop
+                            - hashmod
+                            - HashMod
+                            - labelmap
+                            - LabelMap
+                            - labeldrop
+                            - LabelDrop
+                            - labelkeep
+                            - LabelKeep
+                            - lowercase
+                            - Lowercase
+                            - uppercase
+                            - Uppercase
+                            - keepequal
+                            - KeepEqual
+                            - dropequal
+                            - DropEqual
+                            type: string
+                          modulus:
+                            description: Modulus to take of the hash of the source
+                              label values.
+                            format: int64
+                            type: integer
+                          regex:
+                            description: Regular expression against which the extracted
+                              value is matched. Default is '(.*)'
+                            type: string
+                          replacement:
+                            description: Replacement value against which a regex replace
+                              is performed if the regular expression matches. Regex
+                              capture groups are available. Default is '$1'
+                            type: string
+                          separator:
+                            description: Separator placed between concatenated source
+                              label values. default is ';'.
+                            type: string
+                          sourceLabels:
+                            description: The source labels select values from existing
+                              labels. Their content is concatenated using the configured
+                              separator and matched against the configured regular
+                              expression for the replace, keep, and drop actions.
+                            items:
+                              description: LabelName is a valid Prometheus label name
+                                which may only contain ASCII letters, numbers, as
+                                well as underscores.
+                              pattern: ^[a-zA-Z_][a-zA-Z0-9_]*$
+                              type: string
+                            type: array
+                          targetLabel:
+                            description: Label to which the resulting value is written
+                              in a replace action. It is mandatory for replace actions.
+                              Regex capture groups are available.
+                            type: string
+                        type: object
+                      type: array
+                    scheme:
+                      description: HTTP scheme to use for scraping. `http` and `https`
+                        are the expected values unless you rewrite the `__scheme__`
+                        label via relabeling. If empty, Prometheus uses the default
+                        value `http`.
+                      enum:
+                      - http
+                      - https
+                      type: string
+                    scrapeTimeout:
+                      description: Timeout after which the scrape is ended If not
+                        specified, the Prometheus global scrape interval is used.
+                      pattern: ^(0|(([0-9]+)y)?(([0-9]+)w)?(([0-9]+)d)?(([0-9]+)h)?(([0-9]+)m)?(([0-9]+)s)?(([0-9]+)ms)?)$
+                      type: string
+                    targetPort:
+                      anyOf:
+                      - type: integer
+                      - type: string
+                      description: 'Deprecated: Use ''port'' instead.'
+                      x-kubernetes-int-or-string: true
+                    tlsConfig:
+                      description: TLS configuration to use when scraping the endpoint.
+                      properties:
+                        ca:
+                          description: Certificate authority used when verifying server
+                            certificates.
+                          properties:
+                            configMap:
+                              description: ConfigMap containing data to use for the
+                                targets.
+                              properties:
+                                key:
+                                  description: The key to select.
+                                  type: string
+                                name:
+                                  description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                    TODO: Add other useful fields. apiVersion, kind,
+                                    uid?'
+                                  type: string
+                                optional:
+                                  description: Specify whether the ConfigMap or its
+                                    key must be defined
+                                  type: boolean
+                              required:
+                              - key
+                              type: object
+                              x-kubernetes-map-type: atomic
+                            secret:
+                              description: Secret containing data to use for the targets.
+                              properties:
+                                key:
+                                  description: The key of the secret to select from.  Must
+                                    be a valid secret key.
+                                  type: string
+                                name:
+                                  description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                    TODO: Add other useful fields. apiVersion, kind,
+                                    uid?'
+                                  type: string
+                                optional:
+                                  description: Specify whether the Secret or its key
+                                    must be defined
+                                  type: boolean
+                              required:
+                              - key
+                              type: object
+                              x-kubernetes-map-type: atomic
+                          type: object
+                        cert:
+                          description: Client certificate to present when doing client-authentication.
+                          properties:
+                            configMap:
+                              description: ConfigMap containing data to use for the
+                                targets.
+                              properties:
+                                key:
+                                  description: The key to select.
+                                  type: string
+                                name:
+                                  description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                    TODO: Add other useful fields. apiVersion, kind,
+                                    uid?'
+                                  type: string
+                                optional:
+                                  description: Specify whether the ConfigMap or its
+                                    key must be defined
+                                  type: boolean
+                              required:
+                              - key
+                              type: object
+                              x-kubernetes-map-type: atomic
+                            secret:
+                              description: Secret containing data to use for the targets.
+                              properties:
+                                key:
+                                  description: The key of the secret to select from.  Must
+                                    be a valid secret key.
+                                  type: string
+                                name:
+                                  description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                    TODO: Add other useful fields. apiVersion, kind,
+                                    uid?'
+                                  type: string
+                                optional:
+                                  description: Specify whether the Secret or its key
+                                    must be defined
+                                  type: boolean
+                              required:
+                              - key
+                              type: object
+                              x-kubernetes-map-type: atomic
+                          type: object
+                        insecureSkipVerify:
+                          description: Disable target certificate validation.
+                          type: boolean
+                        keySecret:
+                          description: Secret containing the client key file for the
+                            targets.
+                          properties:
+                            key:
+                              description: The key of the secret to select from.  Must
+                                be a valid secret key.
+                              type: string
+                            name:
+                              description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                TODO: Add other useful fields. apiVersion, kind, uid?'
+                              type: string
+                            optional:
+                              description: Specify whether the Secret or its key must
+                                be defined
+                              type: boolean
+                          required:
+                          - key
+                          type: object
+                          x-kubernetes-map-type: atomic
+                        serverName:
+                          description: Used to verify the hostname for the targets.
+                          type: string
+                      type: object
+                  type: object
+                type: array
+              podTargetLabels:
+                description: PodTargetLabels transfers labels on the Kubernetes Pod
+                  onto the target.
+                items:
+                  type: string
+                type: array
+              sampleLimit:
+                description: SampleLimit defines per-scrape limit on number of scraped
+                  samples that will be accepted.
+                format: int64
+                type: integer
+              selector:
+                description: Selector to select Pod objects.
+                properties:
+                  matchExpressions:
+                    description: matchExpressions is a list of label selector requirements.
+                      The requirements are ANDed.
+                    items:
+                      description: A label selector requirement is a selector that
+                        contains values, a key, and an operator that relates the key
+                        and values.
+                      properties:
+                        key:
+                          description: key is the label key that the selector applies
+                            to.
+                          type: string
+                        operator:
+                          description: operator represents a key's relationship to
+                            a set of values. Valid operators are In, NotIn, Exists
+                            and DoesNotExist.
+                          type: string
+                        values:
+                          description: values is an array of string values. If the
+                            operator is In or NotIn, the values array must be non-empty.
+                            If the operator is Exists or DoesNotExist, the values
+                            array must be empty. This array is replaced during a strategic
+                            merge patch.
+                          items:
+                            type: string
+                          type: array
+                      required:
+                      - key
+                      - operator
+                      type: object
+                    type: array
+                  matchLabels:
+                    additionalProperties:
+                      type: string
+                    description: matchLabels is a map of {key,value} pairs. A single
+                      {key,value} in the matchLabels map is equivalent to an element
+                      of matchExpressions, whose key field is "key", the operator
+                      is "In", and the values array contains only "value". The requirements
+                      are ANDed.
+                    type: object
+                type: object
+                x-kubernetes-map-type: atomic
+              targetLimit:
+                description: TargetLimit defines a limit on the number of scraped
+                  targets that will be accepted.
+                format: int64
+                type: integer
+            required:
+            - podMetricsEndpoints
+            - selector
+            type: object
+        required:
+        - spec
+        type: object
+    served: true
+    storage: true
diff --git a/operations/agent-static-operator/crds/monitoring.coreos.com_probes.yaml b/operations/agent-static-operator/crds/monitoring.coreos.com_probes.yaml
new file mode 100644
index 000000000000..7ece55d2ac5e
--- /dev/null
+++ b/operations/agent-static-operator/crds/monitoring.coreos.com_probes.yaml
@@ -0,0 +1,722 @@
+---
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+  annotations:
+    controller-gen.kubebuilder.io/version: v0.9.2
+  creationTimestamp: null
+  name: probes.monitoring.coreos.com
+spec:
+  group: monitoring.coreos.com
+  names:
+    categories:
+    - prometheus-operator
+    kind: Probe
+    listKind: ProbeList
+    plural: probes
+    shortNames:
+    - prb
+    singular: probe
+  scope: Namespaced
+  versions:
+  - name: v1
+    schema:
+      openAPIV3Schema:
+        description: Probe defines monitoring for a set of static targets or ingresses.
+        properties:
+          apiVersion:
+            description: 'APIVersion defines the versioned schema of this representation
+              of an object. Servers should convert recognized schemas to the latest
+              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+            type: string
+          kind:
+            description: 'Kind is a string value representing the REST resource this
+              object represents. Servers may infer this from the endpoint the client
+              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+            type: string
+          metadata:
+            type: object
+          spec:
+            description: Specification of desired Ingress selection for target discovery
+              by Prometheus.
+            properties:
+              authorization:
+                description: Authorization section for this endpoint
+                properties:
+                  credentials:
+                    description: The secret's key that contains the credentials of
+                      the request
+                    properties:
+                      key:
+                        description: The key of the secret to select from.  Must be
+                          a valid secret key.
+                        type: string
+                      name:
+                        description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                          TODO: Add other useful fields. apiVersion, kind, uid?'
+                        type: string
+                      optional:
+                        description: Specify whether the Secret or its key must be
+                          defined
+                        type: boolean
+                    required:
+                    - key
+                    type: object
+                    x-kubernetes-map-type: atomic
+                  type:
+                    description: Set the authentication type. Defaults to Bearer,
+                      Basic will cause an error
+                    type: string
+                type: object
+              basicAuth:
+                description: 'BasicAuth allow an endpoint to authenticate over basic
+                  authentication. More info: https://prometheus.io/docs/operating/configuration/#endpoint'
+                properties:
+                  password:
+                    description: The secret in the service monitor namespace that
+                      contains the password for authentication.
+                    properties:
+                      key:
+                        description: The key of the secret to select from.  Must be
+                          a valid secret key.
+                        type: string
+                      name:
+                        description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                          TODO: Add other useful fields. apiVersion, kind, uid?'
+                        type: string
+                      optional:
+                        description: Specify whether the Secret or its key must be
+                          defined
+                        type: boolean
+                    required:
+                    - key
+                    type: object
+                    x-kubernetes-map-type: atomic
+                  username:
+                    description: The secret in the service monitor namespace that
+                      contains the username for authentication.
+                    properties:
+                      key:
+                        description: The key of the secret to select from.  Must be
+                          a valid secret key.
+                        type: string
+                      name:
+                        description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                          TODO: Add other useful fields. apiVersion, kind, uid?'
+                        type: string
+                      optional:
+                        description: Specify whether the Secret or its key must be
+                          defined
+                        type: boolean
+                    required:
+                    - key
+                    type: object
+                    x-kubernetes-map-type: atomic
+                type: object
+              bearerTokenSecret:
+                description: Secret to mount to read bearer token for scraping targets.
+                  The secret needs to be in the same namespace as the probe and accessible
+                  by the Prometheus Operator.
+                properties:
+                  key:
+                    description: The key of the secret to select from.  Must be a
+                      valid secret key.
+                    type: string
+                  name:
+                    description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                      TODO: Add other useful fields. apiVersion, kind, uid?'
+                    type: string
+                  optional:
+                    description: Specify whether the Secret or its key must be defined
+                    type: boolean
+                required:
+                - key
+                type: object
+                x-kubernetes-map-type: atomic
+              interval:
+                description: Interval at which targets are probed using the configured
+                  prober. If not specified Prometheus' global scrape interval is used.
+                pattern: ^(0|(([0-9]+)y)?(([0-9]+)w)?(([0-9]+)d)?(([0-9]+)h)?(([0-9]+)m)?(([0-9]+)s)?(([0-9]+)ms)?)$
+                type: string
+              jobName:
+                description: The job name assigned to scraped metrics by default.
+                type: string
+              labelLimit:
+                description: Per-scrape limit on number of labels that will be accepted
+                  for a sample. Only valid in Prometheus versions 2.27.0 and newer.
+                format: int64
+                type: integer
+              labelNameLengthLimit:
+                description: Per-scrape limit on length of labels name that will be
+                  accepted for a sample. Only valid in Prometheus versions 2.27.0
+                  and newer.
+                format: int64
+                type: integer
+              labelValueLengthLimit:
+                description: Per-scrape limit on length of labels value that will
+                  be accepted for a sample. Only valid in Prometheus versions 2.27.0
+                  and newer.
+                format: int64
+                type: integer
+              metricRelabelings:
+                description: MetricRelabelConfigs to apply to samples before ingestion.
+                items:
+                  description: 'RelabelConfig allows dynamic rewriting of the label
+                    set, being applied to samples before ingestion. It defines `<metric_relabel_configs>`-section
+                    of Prometheus configuration. More info: https://prometheus.io/docs/prometheus/latest/configuration/configuration/#metric_relabel_configs'
+                  properties:
+                    action:
+                      default: replace
+                      description: Action to perform based on regex matching. Default
+                        is 'replace'. uppercase and lowercase actions require Prometheus
+                        >= 2.36.
+                      enum:
+                      - replace
+                      - Replace
+                      - keep
+                      - Keep
+                      - drop
+                      - Drop
+                      - hashmod
+                      - HashMod
+                      - labelmap
+                      - LabelMap
+                      - labeldrop
+                      - LabelDrop
+                      - labelkeep
+                      - LabelKeep
+                      - lowercase
+                      - Lowercase
+                      - uppercase
+                      - Uppercase
+                      - keepequal
+                      - KeepEqual
+                      - dropequal
+                      - DropEqual
+                      type: string
+                    modulus:
+                      description: Modulus to take of the hash of the source label
+                        values.
+                      format: int64
+                      type: integer
+                    regex:
+                      description: Regular expression against which the extracted
+                        value is matched. Default is '(.*)'
+                      type: string
+                    replacement:
+                      description: Replacement value against which a regex replace
+                        is performed if the regular expression matches. Regex capture
+                        groups are available. Default is '$1'
+                      type: string
+                    separator:
+                      description: Separator placed between concatenated source label
+                        values. default is ';'.
+                      type: string
+                    sourceLabels:
+                      description: The source labels select values from existing labels.
+                        Their content is concatenated using the configured separator
+                        and matched against the configured regular expression for
+                        the replace, keep, and drop actions.
+                      items:
+                        description: LabelName is a valid Prometheus label name which
+                          may only contain ASCII letters, numbers, as well as underscores.
+                        pattern: ^[a-zA-Z_][a-zA-Z0-9_]*$
+                        type: string
+                      type: array
+                    targetLabel:
+                      description: Label to which the resulting value is written in
+                        a replace action. It is mandatory for replace actions. Regex
+                        capture groups are available.
+                      type: string
+                  type: object
+                type: array
+              module:
+                description: 'The module to use for probing specifying how to probe
+                  the target. Example module configuring in the blackbox exporter:
+                  https://github.com/prometheus/blackbox_exporter/blob/master/example.yml'
+                type: string
+              oauth2:
+                description: OAuth2 for the URL. Only valid in Prometheus versions
+                  2.27.0 and newer.
+                properties:
+                  clientId:
+                    description: The secret or configmap containing the OAuth2 client
+                      id
+                    properties:
+                      configMap:
+                        description: ConfigMap containing data to use for the targets.
+                        properties:
+                          key:
+                            description: The key to select.
+                            type: string
+                          name:
+                            description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                              TODO: Add other useful fields. apiVersion, kind, uid?'
+                            type: string
+                          optional:
+                            description: Specify whether the ConfigMap or its key
+                              must be defined
+                            type: boolean
+                        required:
+                        - key
+                        type: object
+                        x-kubernetes-map-type: atomic
+                      secret:
+                        description: Secret containing data to use for the targets.
+                        properties:
+                          key:
+                            description: The key of the secret to select from.  Must
+                              be a valid secret key.
+                            type: string
+                          name:
+                            description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                              TODO: Add other useful fields. apiVersion, kind, uid?'
+                            type: string
+                          optional:
+                            description: Specify whether the Secret or its key must
+                              be defined
+                            type: boolean
+                        required:
+                        - key
+                        type: object
+                        x-kubernetes-map-type: atomic
+                    type: object
+                  clientSecret:
+                    description: The secret containing the OAuth2 client secret
+                    properties:
+                      key:
+                        description: The key of the secret to select from.  Must be
+                          a valid secret key.
+                        type: string
+                      name:
+                        description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                          TODO: Add other useful fields. apiVersion, kind, uid?'
+                        type: string
+                      optional:
+                        description: Specify whether the Secret or its key must be
+                          defined
+                        type: boolean
+                    required:
+                    - key
+                    type: object
+                    x-kubernetes-map-type: atomic
+                  endpointParams:
+                    additionalProperties:
+                      type: string
+                    description: Parameters to append to the token URL
+                    type: object
+                  scopes:
+                    description: OAuth2 scopes used for the token request
+                    items:
+                      type: string
+                    type: array
+                  tokenUrl:
+                    description: The URL to fetch the token from
+                    minLength: 1
+                    type: string
+                required:
+                - clientId
+                - clientSecret
+                - tokenUrl
+                type: object
+              prober:
+                description: Specification for the prober to use for probing targets.
+                  The prober.URL parameter is required. Targets cannot be probed if
+                  left empty.
+                properties:
+                  path:
+                    default: /probe
+                    description: Path to collect metrics from. Defaults to `/probe`.
+                    type: string
+                  proxyUrl:
+                    description: Optional ProxyURL.
+                    type: string
+                  scheme:
+                    description: HTTP scheme to use for scraping. `http` and `https`
+                      are the expected values unless you rewrite the `__scheme__`
+                      label via relabeling. If empty, Prometheus uses the default
+                      value `http`.
+                    enum:
+                    - http
+                    - https
+                    type: string
+                  url:
+                    description: Mandatory URL of the prober.
+                    type: string
+                required:
+                - url
+                type: object
+              sampleLimit:
+                description: SampleLimit defines per-scrape limit on number of scraped
+                  samples that will be accepted.
+                format: int64
+                type: integer
+              scrapeTimeout:
+                description: Timeout for scraping metrics from the Prometheus exporter.
+                  If not specified, the Prometheus global scrape timeout is used.
+                pattern: ^(0|(([0-9]+)y)?(([0-9]+)w)?(([0-9]+)d)?(([0-9]+)h)?(([0-9]+)m)?(([0-9]+)s)?(([0-9]+)ms)?)$
+                type: string
+              targetLimit:
+                description: TargetLimit defines a limit on the number of scraped
+                  targets that will be accepted.
+                format: int64
+                type: integer
+              targets:
+                description: Targets defines a set of static or dynamically discovered
+                  targets to probe.
+                properties:
+                  ingress:
+                    description: ingress defines the Ingress objects to probe and
+                      the relabeling configuration. If `staticConfig` is also defined,
+                      `staticConfig` takes precedence.
+                    properties:
+                      namespaceSelector:
+                        description: From which namespaces to select Ingress objects.
+                        properties:
+                          any:
+                            description: Boolean describing whether all namespaces
+                              are selected in contrast to a list restricting them.
+                            type: boolean
+                          matchNames:
+                            description: List of namespace names to select from.
+                            items:
+                              type: string
+                            type: array
+                        type: object
+                      relabelingConfigs:
+                        description: 'RelabelConfigs to apply to the label set of
+                          the target before it gets scraped. The original ingress
+                          address is available via the `__tmp_prometheus_ingress_address`
+                          label. It can be used to customize the probed URL. The original
+                          scrape job''s name is available via the `__tmp_prometheus_job_name`
+                          label. More info: https://prometheus.io/docs/prometheus/latest/configuration/configuration/#relabel_config'
+                        items:
+                          description: 'RelabelConfig allows dynamic rewriting of
+                            the label set, being applied to samples before ingestion.
+                            It defines `<metric_relabel_configs>`-section of Prometheus
+                            configuration. More info: https://prometheus.io/docs/prometheus/latest/configuration/configuration/#metric_relabel_configs'
+                          properties:
+                            action:
+                              default: replace
+                              description: Action to perform based on regex matching.
+                                Default is 'replace'. uppercase and lowercase actions
+                                require Prometheus >= 2.36.
+                              enum:
+                              - replace
+                              - Replace
+                              - keep
+                              - Keep
+                              - drop
+                              - Drop
+                              - hashmod
+                              - HashMod
+                              - labelmap
+                              - LabelMap
+                              - labeldrop
+                              - LabelDrop
+                              - labelkeep
+                              - LabelKeep
+                              - lowercase
+                              - Lowercase
+                              - uppercase
+                              - Uppercase
+                              - keepequal
+                              - KeepEqual
+                              - dropequal
+                              - DropEqual
+                              type: string
+                            modulus:
+                              description: Modulus to take of the hash of the source
+                                label values.
+                              format: int64
+                              type: integer
+                            regex:
+                              description: Regular expression against which the extracted
+                                value is matched. Default is '(.*)'
+                              type: string
+                            replacement:
+                              description: Replacement value against which a regex
+                                replace is performed if the regular expression matches.
+                                Regex capture groups are available. Default is '$1'
+                              type: string
+                            separator:
+                              description: Separator placed between concatenated source
+                                label values. default is ';'.
+                              type: string
+                            sourceLabels:
+                              description: The source labels select values from existing
+                                labels. Their content is concatenated using the configured
+                                separator and matched against the configured regular
+                                expression for the replace, keep, and drop actions.
+                              items:
+                                description: LabelName is a valid Prometheus label
+                                  name which may only contain ASCII letters, numbers,
+                                  as well as underscores.
+                                pattern: ^[a-zA-Z_][a-zA-Z0-9_]*$
+                                type: string
+                              type: array
+                            targetLabel:
+                              description: Label to which the resulting value is written
+                                in a replace action. It is mandatory for replace actions.
+                                Regex capture groups are available.
+                              type: string
+                          type: object
+                        type: array
+                      selector:
+                        description: Selector to select the Ingress objects.
+                        properties:
+                          matchExpressions:
+                            description: matchExpressions is a list of label selector
+                              requirements. The requirements are ANDed.
+                            items:
+                              description: A label selector requirement is a selector
+                                that contains values, a key, and an operator that
+                                relates the key and values.
+                              properties:
+                                key:
+                                  description: key is the label key that the selector
+                                    applies to.
+                                  type: string
+                                operator:
+                                  description: operator represents a key's relationship
+                                    to a set of values. Valid operators are In, NotIn,
+                                    Exists and DoesNotExist.
+                                  type: string
+                                values:
+                                  description: values is an array of string values.
+                                    If the operator is In or NotIn, the values array
+                                    must be non-empty. If the operator is Exists or
+                                    DoesNotExist, the values array must be empty.
+                                    This array is replaced during a strategic merge
+                                    patch.
+                                  items:
+                                    type: string
+                                  type: array
+                              required:
+                              - key
+                              - operator
+                              type: object
+                            type: array
+                          matchLabels:
+                            additionalProperties:
+                              type: string
+                            description: matchLabels is a map of {key,value} pairs.
+                              A single {key,value} in the matchLabels map is equivalent
+                              to an element of matchExpressions, whose key field is
+                              "key", the operator is "In", and the values array contains
+                              only "value". The requirements are ANDed.
+                            type: object
+                        type: object
+                        x-kubernetes-map-type: atomic
+                    type: object
+                  staticConfig:
+                    description: 'staticConfig defines the static list of targets
+                      to probe and the relabeling configuration. If `ingress` is also
+                      defined, `staticConfig` takes precedence. More info: https://prometheus.io/docs/prometheus/latest/configuration/configuration/#static_config.'
+                    properties:
+                      labels:
+                        additionalProperties:
+                          type: string
+                        description: Labels assigned to all metrics scraped from the
+                          targets.
+                        type: object
+                      relabelingConfigs:
+                        description: 'RelabelConfigs to apply to the label set of
+                          the targets before it gets scraped. More info: https://prometheus.io/docs/prometheus/latest/configuration/configuration/#relabel_config'
+                        items:
+                          description: 'RelabelConfig allows dynamic rewriting of
+                            the label set, being applied to samples before ingestion.
+                            It defines `<metric_relabel_configs>`-section of Prometheus
+                            configuration. More info: https://prometheus.io/docs/prometheus/latest/configuration/configuration/#metric_relabel_configs'
+                          properties:
+                            action:
+                              default: replace
+                              description: Action to perform based on regex matching.
+                                Default is 'replace'. uppercase and lowercase actions
+                                require Prometheus >= 2.36.
+                              enum:
+                              - replace
+                              - Replace
+                              - keep
+                              - Keep
+                              - drop
+                              - Drop
+                              - hashmod
+                              - HashMod
+                              - labelmap
+                              - LabelMap
+                              - labeldrop
+                              - LabelDrop
+                              - labelkeep
+                              - LabelKeep
+                              - lowercase
+                              - Lowercase
+                              - uppercase
+                              - Uppercase
+                              - keepequal
+                              - KeepEqual
+                              - dropequal
+                              - DropEqual
+                              type: string
+                            modulus:
+                              description: Modulus to take of the hash of the source
+                                label values.
+                              format: int64
+                              type: integer
+                            regex:
+                              description: Regular expression against which the extracted
+                                value is matched. Default is '(.*)'
+                              type: string
+                            replacement:
+                              description: Replacement value against which a regex
+                                replace is performed if the regular expression matches.
+                                Regex capture groups are available. Default is '$1'
+                              type: string
+                            separator:
+                              description: Separator placed between concatenated source
+                                label values. default is ';'.
+                              type: string
+                            sourceLabels:
+                              description: The source labels select values from existing
+                                labels. Their content is concatenated using the configured
+                                separator and matched against the configured regular
+                                expression for the replace, keep, and drop actions.
+                              items:
+                                description: LabelName is a valid Prometheus label
+                                  name which may only contain ASCII letters, numbers,
+                                  as well as underscores.
+                                pattern: ^[a-zA-Z_][a-zA-Z0-9_]*$
+                                type: string
+                              type: array
+                            targetLabel:
+                              description: Label to which the resulting value is written
+                                in a replace action. It is mandatory for replace actions.
+                                Regex capture groups are available.
+                              type: string
+                          type: object
+                        type: array
+                      static:
+                        description: The list of hosts to probe.
+                        items:
+                          type: string
+                        type: array
+                    type: object
+                type: object
+              tlsConfig:
+                description: TLS configuration to use when scraping the endpoint.
+                properties:
+                  ca:
+                    description: Certificate authority used when verifying server
+                      certificates.
+                    properties:
+                      configMap:
+                        description: ConfigMap containing data to use for the targets.
+                        properties:
+                          key:
+                            description: The key to select.
+                            type: string
+                          name:
+                            description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                              TODO: Add other useful fields. apiVersion, kind, uid?'
+                            type: string
+                          optional:
+                            description: Specify whether the ConfigMap or its key
+                              must be defined
+                            type: boolean
+                        required:
+                        - key
+                        type: object
+                        x-kubernetes-map-type: atomic
+                      secret:
+                        description: Secret containing data to use for the targets.
+                        properties:
+                          key:
+                            description: The key of the secret to select from.  Must
+                              be a valid secret key.
+                            type: string
+                          name:
+                            description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                              TODO: Add other useful fields. apiVersion, kind, uid?'
+                            type: string
+                          optional:
+                            description: Specify whether the Secret or its key must
+                              be defined
+                            type: boolean
+                        required:
+                        - key
+                        type: object
+                        x-kubernetes-map-type: atomic
+                    type: object
+                  cert:
+                    description: Client certificate to present when doing client-authentication.
+                    properties:
+                      configMap:
+                        description: ConfigMap containing data to use for the targets.
+                        properties:
+                          key:
+                            description: The key to select.
+                            type: string
+                          name:
+                            description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                              TODO: Add other useful fields. apiVersion, kind, uid?'
+                            type: string
+                          optional:
+                            description: Specify whether the ConfigMap or its key
+                              must be defined
+                            type: boolean
+                        required:
+                        - key
+                        type: object
+                        x-kubernetes-map-type: atomic
+                      secret:
+                        description: Secret containing data to use for the targets.
+                        properties:
+                          key:
+                            description: The key of the secret to select from.  Must
+                              be a valid secret key.
+                            type: string
+                          name:
+                            description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                              TODO: Add other useful fields. apiVersion, kind, uid?'
+                            type: string
+                          optional:
+                            description: Specify whether the Secret or its key must
+                              be defined
+                            type: boolean
+                        required:
+                        - key
+                        type: object
+                        x-kubernetes-map-type: atomic
+                    type: object
+                  insecureSkipVerify:
+                    description: Disable target certificate validation.
+                    type: boolean
+                  keySecret:
+                    description: Secret containing the client key file for the targets.
+                    properties:
+                      key:
+                        description: The key of the secret to select from.  Must be
+                          a valid secret key.
+                        type: string
+                      name:
+                        description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                          TODO: Add other useful fields. apiVersion, kind, uid?'
+                        type: string
+                      optional:
+                        description: Specify whether the Secret or its key must be
+                          defined
+                        type: boolean
+                    required:
+                    - key
+                    type: object
+                    x-kubernetes-map-type: atomic
+                  serverName:
+                    description: Used to verify the hostname for the targets.
+                    type: string
+                type: object
+            type: object
+        required:
+        - spec
+        type: object
+    served: true
+    storage: true
diff --git a/operations/agent-static-operator/crds/monitoring.coreos.com_servicemonitors.yaml b/operations/agent-static-operator/crds/monitoring.coreos.com_servicemonitors.yaml
new file mode 100644
index 000000000000..5d661184cfb4
--- /dev/null
+++ b/operations/agent-static-operator/crds/monitoring.coreos.com_servicemonitors.yaml
@@ -0,0 +1,709 @@
+---
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+  annotations:
+    controller-gen.kubebuilder.io/version: v0.9.2
+  creationTimestamp: null
+  name: servicemonitors.monitoring.coreos.com
+spec:
+  group: monitoring.coreos.com
+  names:
+    categories:
+    - prometheus-operator
+    kind: ServiceMonitor
+    listKind: ServiceMonitorList
+    plural: servicemonitors
+    shortNames:
+    - smon
+    singular: servicemonitor
+  scope: Namespaced
+  versions:
+  - name: v1
+    schema:
+      openAPIV3Schema:
+        description: ServiceMonitor defines monitoring for a set of services.
+        properties:
+          apiVersion:
+            description: 'APIVersion defines the versioned schema of this representation
+              of an object. Servers should convert recognized schemas to the latest
+              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+            type: string
+          kind:
+            description: 'Kind is a string value representing the REST resource this
+              object represents. Servers may infer this from the endpoint the client
+              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+            type: string
+          metadata:
+            type: object
+          spec:
+            description: Specification of desired Service selection for target discovery
+              by Prometheus.
+            properties:
+              attachMetadata:
+                description: Attaches node metadata to discovered targets. Requires
+                  Prometheus v2.37.0 and above.
+                properties:
+                  node:
+                    description: When set to true, Prometheus must have permissions
+                      to get Nodes.
+                    type: boolean
+                type: object
+              endpoints:
+                description: A list of endpoints allowed as part of this ServiceMonitor.
+                items:
+                  description: Endpoint defines a scrapeable endpoint serving Prometheus
+                    metrics.
+                  properties:
+                    authorization:
+                      description: Authorization section for this endpoint
+                      properties:
+                        credentials:
+                          description: The secret's key that contains the credentials
+                            of the request
+                          properties:
+                            key:
+                              description: The key of the secret to select from.  Must
+                                be a valid secret key.
+                              type: string
+                            name:
+                              description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                TODO: Add other useful fields. apiVersion, kind, uid?'
+                              type: string
+                            optional:
+                              description: Specify whether the Secret or its key must
+                                be defined
+                              type: boolean
+                          required:
+                          - key
+                          type: object
+                          x-kubernetes-map-type: atomic
+                        type:
+                          description: Set the authentication type. Defaults to Bearer,
+                            Basic will cause an error
+                          type: string
+                      type: object
+                    basicAuth:
+                      description: 'BasicAuth allow an endpoint to authenticate over
+                        basic authentication More info: https://prometheus.io/docs/operating/configuration/#endpoints'
+                      properties:
+                        password:
+                          description: The secret in the service monitor namespace
+                            that contains the password for authentication.
+                          properties:
+                            key:
+                              description: The key of the secret to select from.  Must
+                                be a valid secret key.
+                              type: string
+                            name:
+                              description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                TODO: Add other useful fields. apiVersion, kind, uid?'
+                              type: string
+                            optional:
+                              description: Specify whether the Secret or its key must
+                                be defined
+                              type: boolean
+                          required:
+                          - key
+                          type: object
+                          x-kubernetes-map-type: atomic
+                        username:
+                          description: The secret in the service monitor namespace
+                            that contains the username for authentication.
+                          properties:
+                            key:
+                              description: The key of the secret to select from.  Must
+                                be a valid secret key.
+                              type: string
+                            name:
+                              description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                TODO: Add other useful fields. apiVersion, kind, uid?'
+                              type: string
+                            optional:
+                              description: Specify whether the Secret or its key must
+                                be defined
+                              type: boolean
+                          required:
+                          - key
+                          type: object
+                          x-kubernetes-map-type: atomic
+                      type: object
+                    bearerTokenFile:
+                      description: File to read bearer token for scraping targets.
+                      type: string
+                    bearerTokenSecret:
+                      description: Secret to mount to read bearer token for scraping
+                        targets. The secret needs to be in the same namespace as the
+                        service monitor and accessible by the Prometheus Operator.
+                      properties:
+                        key:
+                          description: The key of the secret to select from.  Must
+                            be a valid secret key.
+                          type: string
+                        name:
+                          description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                            TODO: Add other useful fields. apiVersion, kind, uid?'
+                          type: string
+                        optional:
+                          description: Specify whether the Secret or its key must
+                            be defined
+                          type: boolean
+                      required:
+                      - key
+                      type: object
+                      x-kubernetes-map-type: atomic
+                    enableHttp2:
+                      description: Whether to enable HTTP2.
+                      type: boolean
+                    filterRunning:
+                      description: 'Drop pods that are not running. (Failed, Succeeded).
+                        Enabled by default. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#pod-phase'
+                      type: boolean
+                    followRedirects:
+                      description: FollowRedirects configures whether scrape requests
+                        follow HTTP 3xx redirects.
+                      type: boolean
+                    honorLabels:
+                      description: HonorLabels chooses the metric's labels on collisions
+                        with target labels.
+                      type: boolean
+                    honorTimestamps:
+                      description: HonorTimestamps controls whether Prometheus respects
+                        the timestamps present in scraped data.
+                      type: boolean
+                    interval:
+                      description: Interval at which metrics should be scraped If
+                        not specified Prometheus' global scrape interval is used.
+                      pattern: ^(0|(([0-9]+)y)?(([0-9]+)w)?(([0-9]+)d)?(([0-9]+)h)?(([0-9]+)m)?(([0-9]+)s)?(([0-9]+)ms)?)$
+                      type: string
+                    metricRelabelings:
+                      description: MetricRelabelConfigs to apply to samples before
+                        ingestion.
+                      items:
+                        description: 'RelabelConfig allows dynamic rewriting of the
+                          label set, being applied to samples before ingestion. It
+                          defines `<metric_relabel_configs>`-section of Prometheus
+                          configuration. More info: https://prometheus.io/docs/prometheus/latest/configuration/configuration/#metric_relabel_configs'
+                        properties:
+                          action:
+                            default: replace
+                            description: Action to perform based on regex matching.
+                              Default is 'replace'. uppercase and lowercase actions
+                              require Prometheus >= 2.36.
+                            enum:
+                            - replace
+                            - Replace
+                            - keep
+                            - Keep
+                            - drop
+                            - Drop
+                            - hashmod
+                            - HashMod
+                            - labelmap
+                            - LabelMap
+                            - labeldrop
+                            - LabelDrop
+                            - labelkeep
+                            - LabelKeep
+                            - lowercase
+                            - Lowercase
+                            - uppercase
+                            - Uppercase
+                            - keepequal
+                            - KeepEqual
+                            - dropequal
+                            - DropEqual
+                            type: string
+                          modulus:
+                            description: Modulus to take of the hash of the source
+                              label values.
+                            format: int64
+                            type: integer
+                          regex:
+                            description: Regular expression against which the extracted
+                              value is matched. Default is '(.*)'
+                            type: string
+                          replacement:
+                            description: Replacement value against which a regex replace
+                              is performed if the regular expression matches. Regex
+                              capture groups are available. Default is '$1'
+                            type: string
+                          separator:
+                            description: Separator placed between concatenated source
+                              label values. default is ';'.
+                            type: string
+                          sourceLabels:
+                            description: The source labels select values from existing
+                              labels. Their content is concatenated using the configured
+                              separator and matched against the configured regular
+                              expression for the replace, keep, and drop actions.
+                            items:
+                              description: LabelName is a valid Prometheus label name
+                                which may only contain ASCII letters, numbers, as
+                                well as underscores.
+                              pattern: ^[a-zA-Z_][a-zA-Z0-9_]*$
+                              type: string
+                            type: array
+                          targetLabel:
+                            description: Label to which the resulting value is written
+                              in a replace action. It is mandatory for replace actions.
+                              Regex capture groups are available.
+                            type: string
+                        type: object
+                      type: array
+                    oauth2:
+                      description: OAuth2 for the URL. Only valid in Prometheus versions
+                        2.27.0 and newer.
+                      properties:
+                        clientId:
+                          description: The secret or configmap containing the OAuth2
+                            client id
+                          properties:
+                            configMap:
+                              description: ConfigMap containing data to use for the
+                                targets.
+                              properties:
+                                key:
+                                  description: The key to select.
+                                  type: string
+                                name:
+                                  description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                    TODO: Add other useful fields. apiVersion, kind,
+                                    uid?'
+                                  type: string
+                                optional:
+                                  description: Specify whether the ConfigMap or its
+                                    key must be defined
+                                  type: boolean
+                              required:
+                              - key
+                              type: object
+                              x-kubernetes-map-type: atomic
+                            secret:
+                              description: Secret containing data to use for the targets.
+                              properties:
+                                key:
+                                  description: The key of the secret to select from.  Must
+                                    be a valid secret key.
+                                  type: string
+                                name:
+                                  description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                    TODO: Add other useful fields. apiVersion, kind,
+                                    uid?'
+                                  type: string
+                                optional:
+                                  description: Specify whether the Secret or its key
+                                    must be defined
+                                  type: boolean
+                              required:
+                              - key
+                              type: object
+                              x-kubernetes-map-type: atomic
+                          type: object
+                        clientSecret:
+                          description: The secret containing the OAuth2 client secret
+                          properties:
+                            key:
+                              description: The key of the secret to select from.  Must
+                                be a valid secret key.
+                              type: string
+                            name:
+                              description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                TODO: Add other useful fields. apiVersion, kind, uid?'
+                              type: string
+                            optional:
+                              description: Specify whether the Secret or its key must
+                                be defined
+                              type: boolean
+                          required:
+                          - key
+                          type: object
+                          x-kubernetes-map-type: atomic
+                        endpointParams:
+                          additionalProperties:
+                            type: string
+                          description: Parameters to append to the token URL
+                          type: object
+                        scopes:
+                          description: OAuth2 scopes used for the token request
+                          items:
+                            type: string
+                          type: array
+                        tokenUrl:
+                          description: The URL to fetch the token from
+                          minLength: 1
+                          type: string
+                      required:
+                      - clientId
+                      - clientSecret
+                      - tokenUrl
+                      type: object
+                    params:
+                      additionalProperties:
+                        items:
+                          type: string
+                        type: array
+                      description: Optional HTTP URL parameters
+                      type: object
+                    path:
+                      description: HTTP path to scrape for metrics. If empty, Prometheus
+                        uses the default value (e.g. `/metrics`).
+                      type: string
+                    port:
+                      description: Name of the service port this endpoint refers to.
+                        Mutually exclusive with targetPort.
+                      type: string
+                    proxyUrl:
+                      description: ProxyURL eg http://proxyserver:2195 Directs scrapes
+                        to proxy through this endpoint.
+                      type: string
+                    relabelings:
+                      description: 'RelabelConfigs to apply to samples before scraping.
+                        Prometheus Operator automatically adds relabelings for a few
+                        standard Kubernetes fields. The original scrape job''s name
+                        is available via the `__tmp_prometheus_job_name` label. More
+                        info: https://prometheus.io/docs/prometheus/latest/configuration/configuration/#relabel_config'
+                      items:
+                        description: 'RelabelConfig allows dynamic rewriting of the
+                          label set, being applied to samples before ingestion. It
+                          defines `<metric_relabel_configs>`-section of Prometheus
+                          configuration. More info: https://prometheus.io/docs/prometheus/latest/configuration/configuration/#metric_relabel_configs'
+                        properties:
+                          action:
+                            default: replace
+                            description: Action to perform based on regex matching.
+                              Default is 'replace'. uppercase and lowercase actions
+                              require Prometheus >= 2.36.
+                            enum:
+                            - replace
+                            - Replace
+                            - keep
+                            - Keep
+                            - drop
+                            - Drop
+                            - hashmod
+                            - HashMod
+                            - labelmap
+                            - LabelMap
+                            - labeldrop
+                            - LabelDrop
+                            - labelkeep
+                            - LabelKeep
+                            - lowercase
+                            - Lowercase
+                            - uppercase
+                            - Uppercase
+                            - keepequal
+                            - KeepEqual
+                            - dropequal
+                            - DropEqual
+                            type: string
+                          modulus:
+                            description: Modulus to take of the hash of the source
+                              label values.
+                            format: int64
+                            type: integer
+                          regex:
+                            description: Regular expression against which the extracted
+                              value is matched. Default is '(.*)'
+                            type: string
+                          replacement:
+                            description: Replacement value against which a regex replace
+                              is performed if the regular expression matches. Regex
+                              capture groups are available. Default is '$1'
+                            type: string
+                          separator:
+                            description: Separator placed between concatenated source
+                              label values. default is ';'.
+                            type: string
+                          sourceLabels:
+                            description: The source labels select values from existing
+                              labels. Their content is concatenated using the configured
+                              separator and matched against the configured regular
+                              expression for the replace, keep, and drop actions.
+                            items:
+                              description: LabelName is a valid Prometheus label name
+                                which may only contain ASCII letters, numbers, as
+                                well as underscores.
+                              pattern: ^[a-zA-Z_][a-zA-Z0-9_]*$
+                              type: string
+                            type: array
+                          targetLabel:
+                            description: Label to which the resulting value is written
+                              in a replace action. It is mandatory for replace actions.
+                              Regex capture groups are available.
+                            type: string
+                        type: object
+                      type: array
+                    scheme:
+                      description: HTTP scheme to use for scraping. `http` and `https`
+                        are the expected values unless you rewrite the `__scheme__`
+                        label via relabeling. If empty, Prometheus uses the default
+                        value `http`.
+                      enum:
+                      - http
+                      - https
+                      type: string
+                    scrapeTimeout:
+                      description: Timeout after which the scrape is ended If not
+                        specified, the Prometheus global scrape timeout is used unless
+                        it is less than `Interval` in which the latter is used.
+                      pattern: ^(0|(([0-9]+)y)?(([0-9]+)w)?(([0-9]+)d)?(([0-9]+)h)?(([0-9]+)m)?(([0-9]+)s)?(([0-9]+)ms)?)$
+                      type: string
+                    targetPort:
+                      anyOf:
+                      - type: integer
+                      - type: string
+                      description: Name or number of the target port of the Pod behind
+                        the Service, the port must be specified with container port
+                        property. Mutually exclusive with port.
+                      x-kubernetes-int-or-string: true
+                    tlsConfig:
+                      description: TLS configuration to use when scraping the endpoint
+                      properties:
+                        ca:
+                          description: Certificate authority used when verifying server
+                            certificates.
+                          properties:
+                            configMap:
+                              description: ConfigMap containing data to use for the
+                                targets.
+                              properties:
+                                key:
+                                  description: The key to select.
+                                  type: string
+                                name:
+                                  description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                    TODO: Add other useful fields. apiVersion, kind,
+                                    uid?'
+                                  type: string
+                                optional:
+                                  description: Specify whether the ConfigMap or its
+                                    key must be defined
+                                  type: boolean
+                              required:
+                              - key
+                              type: object
+                              x-kubernetes-map-type: atomic
+                            secret:
+                              description: Secret containing data to use for the targets.
+                              properties:
+                                key:
+                                  description: The key of the secret to select from.  Must
+                                    be a valid secret key.
+                                  type: string
+                                name:
+                                  description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                    TODO: Add other useful fields. apiVersion, kind,
+                                    uid?'
+                                  type: string
+                                optional:
+                                  description: Specify whether the Secret or its key
+                                    must be defined
+                                  type: boolean
+                              required:
+                              - key
+                              type: object
+                              x-kubernetes-map-type: atomic
+                          type: object
+                        caFile:
+                          description: Path to the CA cert in the Prometheus container
+                            to use for the targets.
+                          type: string
+                        cert:
+                          description: Client certificate to present when doing client-authentication.
+                          properties:
+                            configMap:
+                              description: ConfigMap containing data to use for the
+                                targets.
+                              properties:
+                                key:
+                                  description: The key to select.
+                                  type: string
+                                name:
+                                  description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                    TODO: Add other useful fields. apiVersion, kind,
+                                    uid?'
+                                  type: string
+                                optional:
+                                  description: Specify whether the ConfigMap or its
+                                    key must be defined
+                                  type: boolean
+                              required:
+                              - key
+                              type: object
+                              x-kubernetes-map-type: atomic
+                            secret:
+                              description: Secret containing data to use for the targets.
+                              properties:
+                                key:
+                                  description: The key of the secret to select from.  Must
+                                    be a valid secret key.
+                                  type: string
+                                name:
+                                  description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                    TODO: Add other useful fields. apiVersion, kind,
+                                    uid?'
+                                  type: string
+                                optional:
+                                  description: Specify whether the Secret or its key
+                                    must be defined
+                                  type: boolean
+                              required:
+                              - key
+                              type: object
+                              x-kubernetes-map-type: atomic
+                          type: object
+                        certFile:
+                          description: Path to the client cert file in the Prometheus
+                            container for the targets.
+                          type: string
+                        insecureSkipVerify:
+                          description: Disable target certificate validation.
+                          type: boolean
+                        keyFile:
+                          description: Path to the client key file in the Prometheus
+                            container for the targets.
+                          type: string
+                        keySecret:
+                          description: Secret containing the client key file for the
+                            targets.
+                          properties:
+                            key:
+                              description: The key of the secret to select from.  Must
+                                be a valid secret key.
+                              type: string
+                            name:
+                              description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                TODO: Add other useful fields. apiVersion, kind, uid?'
+                              type: string
+                            optional:
+                              description: Specify whether the Secret or its key must
+                                be defined
+                              type: boolean
+                          required:
+                          - key
+                          type: object
+                          x-kubernetes-map-type: atomic
+                        serverName:
+                          description: Used to verify the hostname for the targets.
+                          type: string
+                      type: object
+                  type: object
+                type: array
+              jobLabel:
+                description: "JobLabel selects the label from the associated Kubernetes
+                  service which will be used as the `job` label for all metrics. \n
+                  For example: If in `ServiceMonitor.spec.jobLabel: foo` and in `Service.metadata.labels.foo:
+                  bar`, then the `job=\"bar\"` label is added to all metrics. \n If
+                  the value of this field is empty or if the label doesn't exist for
+                  the given Service, the `job` label of the metrics defaults to the
+                  name of the Kubernetes Service."
+                type: string
+              labelLimit:
+                description: Per-scrape limit on number of labels that will be accepted
+                  for a sample. Only valid in Prometheus versions 2.27.0 and newer.
+                format: int64
+                type: integer
+              labelNameLengthLimit:
+                description: Per-scrape limit on length of labels name that will be
+                  accepted for a sample. Only valid in Prometheus versions 2.27.0
+                  and newer.
+                format: int64
+                type: integer
+              labelValueLengthLimit:
+                description: Per-scrape limit on length of labels value that will
+                  be accepted for a sample. Only valid in Prometheus versions 2.27.0
+                  and newer.
+                format: int64
+                type: integer
+              namespaceSelector:
+                description: Selector to select which namespaces the Kubernetes Endpoints
+                  objects are discovered from.
+                properties:
+                  any:
+                    description: Boolean describing whether all namespaces are selected
+                      in contrast to a list restricting them.
+                    type: boolean
+                  matchNames:
+                    description: List of namespace names to select from.
+                    items:
+                      type: string
+                    type: array
+                type: object
+              podTargetLabels:
+                description: PodTargetLabels transfers labels on the Kubernetes `Pod`
+                  onto the created metrics.
+                items:
+                  type: string
+                type: array
+              sampleLimit:
+                description: SampleLimit defines per-scrape limit on number of scraped
+                  samples that will be accepted.
+                format: int64
+                type: integer
+              selector:
+                description: Selector to select Endpoints objects.
+                properties:
+                  matchExpressions:
+                    description: matchExpressions is a list of label selector requirements.
+                      The requirements are ANDed.
+                    items:
+                      description: A label selector requirement is a selector that
+                        contains values, a key, and an operator that relates the key
+                        and values.
+                      properties:
+                        key:
+                          description: key is the label key that the selector applies
+                            to.
+                          type: string
+                        operator:
+                          description: operator represents a key's relationship to
+                            a set of values. Valid operators are In, NotIn, Exists
+                            and DoesNotExist.
+                          type: string
+                        values:
+                          description: values is an array of string values. If the
+                            operator is In or NotIn, the values array must be non-empty.
+                            If the operator is Exists or DoesNotExist, the values
+                            array must be empty. This array is replaced during a strategic
+                            merge patch.
+                          items:
+                            type: string
+                          type: array
+                      required:
+                      - key
+                      - operator
+                      type: object
+                    type: array
+                  matchLabels:
+                    additionalProperties:
+                      type: string
+                    description: matchLabels is a map of {key,value} pairs. A single
+                      {key,value} in the matchLabels map is equivalent to an element
+                      of matchExpressions, whose key field is "key", the operator
+                      is "In", and the values array contains only "value". The requirements
+                      are ANDed.
+                    type: object
+                type: object
+                x-kubernetes-map-type: atomic
+              targetLabels:
+                description: TargetLabels transfers labels from the Kubernetes `Service`
+                  onto the created metrics.
+                items:
+                  type: string
+                type: array
+              targetLimit:
+                description: TargetLimit defines a limit on the number of scraped
+                  targets that will be accepted.
+                format: int64
+                type: integer
+            required:
+            - endpoints
+            - selector
+            type: object
+        required:
+        - spec
+        type: object
+    served: true
+    storage: true
diff --git a/operations/agent-static-operator/crds/monitoring.grafana.com_grafanaagents.yaml b/operations/agent-static-operator/crds/monitoring.grafana.com_grafanaagents.yaml
new file mode 100644
index 000000000000..fab68b18e6f6
--- /dev/null
+++ b/operations/agent-static-operator/crds/monitoring.grafana.com_grafanaagents.yaml
@@ -0,0 +1,7795 @@
+---
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+  annotations:
+    controller-gen.kubebuilder.io/version: v0.9.2
+  creationTimestamp: null
+  name: grafanaagents.monitoring.grafana.com
+spec:
+  group: monitoring.grafana.com
+  names:
+    categories:
+    - agent-operator
+    kind: GrafanaAgent
+    listKind: GrafanaAgentList
+    plural: grafanaagents
+    singular: grafanaagent
+  scope: Namespaced
+  versions:
+  - name: v1alpha1
+    schema:
+      openAPIV3Schema:
+        description: GrafanaAgent defines a Grafana Agent deployment.
+        properties:
+          apiVersion:
+            description: 'APIVersion defines the versioned schema of this representation
+              of an object. Servers should convert recognized schemas to the latest
+              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+            type: string
+          kind:
+            description: 'Kind is a string value representing the REST resource this
+              object represents. Servers may infer this from the endpoint the client
+              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+            type: string
+          metadata:
+            type: object
+          spec:
+            description: Spec holds the specification of the desired behavior for
+              the Grafana Agent cluster.
+            properties:
+              affinity:
+                description: Affinity, if specified, controls pod scheduling constraints.
+                properties:
+                  nodeAffinity:
+                    description: Describes node affinity scheduling rules for the
+                      pod.
+                    properties:
+                      preferredDuringSchedulingIgnoredDuringExecution:
+                        description: The scheduler will prefer to schedule pods to
+                          nodes that satisfy the affinity expressions specified by
+                          this field, but it may choose a node that violates one or
+                          more of the expressions. The node that is most preferred
+                          is the one with the greatest sum of weights, i.e. for each
+                          node that meets all of the scheduling requirements (resource
+                          request, requiredDuringScheduling affinity expressions,
+                          etc.), compute a sum by iterating through the elements of
+                          this field and adding "weight" to the sum if the node matches
+                          the corresponding matchExpressions; the node(s) with the
+                          highest sum are the most preferred.
+                        items:
+                          description: An empty preferred scheduling term matches
+                            all objects with implicit weight 0 (i.e. it's a no-op).
+                            A null preferred scheduling term matches no objects (i.e.
+                            is also a no-op).
+                          properties:
+                            preference:
+                              description: A node selector term, associated with the
+                                corresponding weight.
+                              properties:
+                                matchExpressions:
+                                  description: A list of node selector requirements
+                                    by node's labels.
+                                  items:
+                                    description: A node selector requirement is a
+                                      selector that contains values, a key, and an
+                                      operator that relates the key and values.
+                                    properties:
+                                      key:
+                                        description: The label key that the selector
+                                          applies to.
+                                        type: string
+                                      operator:
+                                        description: Represents a key's relationship
+                                          to a set of values. Valid operators are
+                                          In, NotIn, Exists, DoesNotExist. Gt, and
+                                          Lt.
+                                        type: string
+                                      values:
+                                        description: An array of string values. If
+                                          the operator is In or NotIn, the values
+                                          array must be non-empty. If the operator
+                                          is Exists or DoesNotExist, the values array
+                                          must be empty. If the operator is Gt or
+                                          Lt, the values array must have a single
+                                          element, which will be interpreted as an
+                                          integer. This array is replaced during a
+                                          strategic merge patch.
+                                        items:
+                                          type: string
+                                        type: array
+                                    required:
+                                    - key
+                                    - operator
+                                    type: object
+                                  type: array
+                                matchFields:
+                                  description: A list of node selector requirements
+                                    by node's fields.
+                                  items:
+                                    description: A node selector requirement is a
+                                      selector that contains values, a key, and an
+                                      operator that relates the key and values.
+                                    properties:
+                                      key:
+                                        description: The label key that the selector
+                                          applies to.
+                                        type: string
+                                      operator:
+                                        description: Represents a key's relationship
+                                          to a set of values. Valid operators are
+                                          In, NotIn, Exists, DoesNotExist. Gt, and
+                                          Lt.
+                                        type: string
+                                      values:
+                                        description: An array of string values. If
+                                          the operator is In or NotIn, the values
+                                          array must be non-empty. If the operator
+                                          is Exists or DoesNotExist, the values array
+                                          must be empty. If the operator is Gt or
+                                          Lt, the values array must have a single
+                                          element, which will be interpreted as an
+                                          integer. This array is replaced during a
+                                          strategic merge patch.
+                                        items:
+                                          type: string
+                                        type: array
+                                    required:
+                                    - key
+                                    - operator
+                                    type: object
+                                  type: array
+                              type: object
+                              x-kubernetes-map-type: atomic
+                            weight:
+                              description: Weight associated with matching the corresponding
+                                nodeSelectorTerm, in the range 1-100.
+                              format: int32
+                              type: integer
+                          required:
+                          - preference
+                          - weight
+                          type: object
+                        type: array
+                      requiredDuringSchedulingIgnoredDuringExecution:
+                        description: If the affinity requirements specified by this
+                          field are not met at scheduling time, the pod will not be
+                          scheduled onto the node. If the affinity requirements specified
+                          by this field cease to be met at some point during pod execution
+                          (e.g. due to an update), the system may or may not try to
+                          eventually evict the pod from its node.
+                        properties:
+                          nodeSelectorTerms:
+                            description: Required. A list of node selector terms.
+                              The terms are ORed.
+                            items:
+                              description: A null or empty node selector term matches
+                                no objects. The requirements of them are ANDed. The
+                                TopologySelectorTerm type implements a subset of the
+                                NodeSelectorTerm.
+                              properties:
+                                matchExpressions:
+                                  description: A list of node selector requirements
+                                    by node's labels.
+                                  items:
+                                    description: A node selector requirement is a
+                                      selector that contains values, a key, and an
+                                      operator that relates the key and values.
+                                    properties:
+                                      key:
+                                        description: The label key that the selector
+                                          applies to.
+                                        type: string
+                                      operator:
+                                        description: Represents a key's relationship
+                                          to a set of values. Valid operators are
+                                          In, NotIn, Exists, DoesNotExist. Gt, and
+                                          Lt.
+                                        type: string
+                                      values:
+                                        description: An array of string values. If
+                                          the operator is In or NotIn, the values
+                                          array must be non-empty. If the operator
+                                          is Exists or DoesNotExist, the values array
+                                          must be empty. If the operator is Gt or
+                                          Lt, the values array must have a single
+                                          element, which will be interpreted as an
+                                          integer. This array is replaced during a
+                                          strategic merge patch.
+                                        items:
+                                          type: string
+                                        type: array
+                                    required:
+                                    - key
+                                    - operator
+                                    type: object
+                                  type: array
+                                matchFields:
+                                  description: A list of node selector requirements
+                                    by node's fields.
+                                  items:
+                                    description: A node selector requirement is a
+                                      selector that contains values, a key, and an
+                                      operator that relates the key and values.
+                                    properties:
+                                      key:
+                                        description: The label key that the selector
+                                          applies to.
+                                        type: string
+                                      operator:
+                                        description: Represents a key's relationship
+                                          to a set of values. Valid operators are
+                                          In, NotIn, Exists, DoesNotExist. Gt, and
+                                          Lt.
+                                        type: string
+                                      values:
+                                        description: An array of string values. If
+                                          the operator is In or NotIn, the values
+                                          array must be non-empty. If the operator
+                                          is Exists or DoesNotExist, the values array
+                                          must be empty. If the operator is Gt or
+                                          Lt, the values array must have a single
+                                          element, which will be interpreted as an
+                                          integer. This array is replaced during a
+                                          strategic merge patch.
+                                        items:
+                                          type: string
+                                        type: array
+                                    required:
+                                    - key
+                                    - operator
+                                    type: object
+                                  type: array
+                              type: object
+                              x-kubernetes-map-type: atomic
+                            type: array
+                        required:
+                        - nodeSelectorTerms
+                        type: object
+                        x-kubernetes-map-type: atomic
+                    type: object
+                  podAffinity:
+                    description: Describes pod affinity scheduling rules (e.g. co-locate
+                      this pod in the same node, zone, etc. as some other pod(s)).
+                    properties:
+                      preferredDuringSchedulingIgnoredDuringExecution:
+                        description: The scheduler will prefer to schedule pods to
+                          nodes that satisfy the affinity expressions specified by
+                          this field, but it may choose a node that violates one or
+                          more of the expressions. The node that is most preferred
+                          is the one with the greatest sum of weights, i.e. for each
+                          node that meets all of the scheduling requirements (resource
+                          request, requiredDuringScheduling affinity expressions,
+                          etc.), compute a sum by iterating through the elements of
+                          this field and adding "weight" to the sum if the node has
+                          pods which matches the corresponding podAffinityTerm; the
+                          node(s) with the highest sum are the most preferred.
+                        items:
+                          description: The weights of all of the matched WeightedPodAffinityTerm
+                            fields are added per-node to find the most preferred node(s)
+                          properties:
+                            podAffinityTerm:
+                              description: Required. A pod affinity term, associated
+                                with the corresponding weight.
+                              properties:
+                                labelSelector:
+                                  description: A label query over a set of resources,
+                                    in this case pods.
+                                  properties:
+                                    matchExpressions:
+                                      description: matchExpressions is a list of label
+                                        selector requirements. The requirements are
+                                        ANDed.
+                                      items:
+                                        description: A label selector requirement
+                                          is a selector that contains values, a key,
+                                          and an operator that relates the key and
+                                          values.
+                                        properties:
+                                          key:
+                                            description: key is the label key that
+                                              the selector applies to.
+                                            type: string
+                                          operator:
+                                            description: operator represents a key's
+                                              relationship to a set of values. Valid
+                                              operators are In, NotIn, Exists and
+                                              DoesNotExist.
+                                            type: string
+                                          values:
+                                            description: values is an array of string
+                                              values. If the operator is In or NotIn,
+                                              the values array must be non-empty.
+                                              If the operator is Exists or DoesNotExist,
+                                              the values array must be empty. This
+                                              array is replaced during a strategic
+                                              merge patch.
+                                            items:
+                                              type: string
+                                            type: array
+                                        required:
+                                        - key
+                                        - operator
+                                        type: object
+                                      type: array
+                                    matchLabels:
+                                      additionalProperties:
+                                        type: string
+                                      description: matchLabels is a map of {key,value}
+                                        pairs. A single {key,value} in the matchLabels
+                                        map is equivalent to an element of matchExpressions,
+                                        whose key field is "key", the operator is
+                                        "In", and the values array contains only "value".
+                                        The requirements are ANDed.
+                                      type: object
+                                  type: object
+                                  x-kubernetes-map-type: atomic
+                                namespaceSelector:
+                                  description: A label query over the set of namespaces
+                                    that the term applies to. The term is applied
+                                    to the union of the namespaces selected by this
+                                    field and the ones listed in the namespaces field.
+                                    null selector and null or empty namespaces list
+                                    means "this pod's namespace". An empty selector
+                                    ({}) matches all namespaces.
+                                  properties:
+                                    matchExpressions:
+                                      description: matchExpressions is a list of label
+                                        selector requirements. The requirements are
+                                        ANDed.
+                                      items:
+                                        description: A label selector requirement
+                                          is a selector that contains values, a key,
+                                          and an operator that relates the key and
+                                          values.
+                                        properties:
+                                          key:
+                                            description: key is the label key that
+                                              the selector applies to.
+                                            type: string
+                                          operator:
+                                            description: operator represents a key's
+                                              relationship to a set of values. Valid
+                                              operators are In, NotIn, Exists and
+                                              DoesNotExist.
+                                            type: string
+                                          values:
+                                            description: values is an array of string
+                                              values. If the operator is In or NotIn,
+                                              the values array must be non-empty.
+                                              If the operator is Exists or DoesNotExist,
+                                              the values array must be empty. This
+                                              array is replaced during a strategic
+                                              merge patch.
+                                            items:
+                                              type: string
+                                            type: array
+                                        required:
+                                        - key
+                                        - operator
+                                        type: object
+                                      type: array
+                                    matchLabels:
+                                      additionalProperties:
+                                        type: string
+                                      description: matchLabels is a map of {key,value}
+                                        pairs. A single {key,value} in the matchLabels
+                                        map is equivalent to an element of matchExpressions,
+                                        whose key field is "key", the operator is
+                                        "In", and the values array contains only "value".
+                                        The requirements are ANDed.
+                                      type: object
+                                  type: object
+                                  x-kubernetes-map-type: atomic
+                                namespaces:
+                                  description: namespaces specifies a static list
+                                    of namespace names that the term applies to. The
+                                    term is applied to the union of the namespaces
+                                    listed in this field and the ones selected by
+                                    namespaceSelector. null or empty namespaces list
+                                    and null namespaceSelector means "this pod's namespace".
+                                  items:
+                                    type: string
+                                  type: array
+                                topologyKey:
+                                  description: This pod should be co-located (affinity)
+                                    or not co-located (anti-affinity) with the pods
+                                    matching the labelSelector in the specified namespaces,
+                                    where co-located is defined as running on a node
+                                    whose value of the label with key topologyKey
+                                    matches that of any node on which any of the selected
+                                    pods is running. Empty topologyKey is not allowed.
+                                  type: string
+                              required:
+                              - topologyKey
+                              type: object
+                            weight:
+                              description: weight associated with matching the corresponding
+                                podAffinityTerm, in the range 1-100.
+                              format: int32
+                              type: integer
+                          required:
+                          - podAffinityTerm
+                          - weight
+                          type: object
+                        type: array
+                      requiredDuringSchedulingIgnoredDuringExecution:
+                        description: If the affinity requirements specified by this
+                          field are not met at scheduling time, the pod will not be
+                          scheduled onto the node. If the affinity requirements specified
+                          by this field cease to be met at some point during pod execution
+                          (e.g. due to a pod label update), the system may or may
+                          not try to eventually evict the pod from its node. When
+                          there are multiple elements, the lists of nodes corresponding
+                          to each podAffinityTerm are intersected, i.e. all terms
+                          must be satisfied.
+                        items:
+                          description: Defines a set of pods (namely those matching
+                            the labelSelector relative to the given namespace(s))
+                            that this pod should be co-located (affinity) or not co-located
+                            (anti-affinity) with, where co-located is defined as running
+                            on a node whose value of the label with key <topologyKey>
+                            matches that of any node on which a pod of the set of
+                            pods is running
+                          properties:
+                            labelSelector:
+                              description: A label query over a set of resources,
+                                in this case pods.
+                              properties:
+                                matchExpressions:
+                                  description: matchExpressions is a list of label
+                                    selector requirements. The requirements are ANDed.
+                                  items:
+                                    description: A label selector requirement is a
+                                      selector that contains values, a key, and an
+                                      operator that relates the key and values.
+                                    properties:
+                                      key:
+                                        description: key is the label key that the
+                                          selector applies to.
+                                        type: string
+                                      operator:
+                                        description: operator represents a key's relationship
+                                          to a set of values. Valid operators are
+                                          In, NotIn, Exists and DoesNotExist.
+                                        type: string
+                                      values:
+                                        description: values is an array of string
+                                          values. If the operator is In or NotIn,
+                                          the values array must be non-empty. If the
+                                          operator is Exists or DoesNotExist, the
+                                          values array must be empty. This array is
+                                          replaced during a strategic merge patch.
+                                        items:
+                                          type: string
+                                        type: array
+                                    required:
+                                    - key
+                                    - operator
+                                    type: object
+                                  type: array
+                                matchLabels:
+                                  additionalProperties:
+                                    type: string
+                                  description: matchLabels is a map of {key,value}
+                                    pairs. A single {key,value} in the matchLabels
+                                    map is equivalent to an element of matchExpressions,
+                                    whose key field is "key", the operator is "In",
+                                    and the values array contains only "value". The
+                                    requirements are ANDed.
+                                  type: object
+                              type: object
+                              x-kubernetes-map-type: atomic
+                            namespaceSelector:
+                              description: A label query over the set of namespaces
+                                that the term applies to. The term is applied to the
+                                union of the namespaces selected by this field and
+                                the ones listed in the namespaces field. null selector
+                                and null or empty namespaces list means "this pod's
+                                namespace". An empty selector ({}) matches all namespaces.
+                              properties:
+                                matchExpressions:
+                                  description: matchExpressions is a list of label
+                                    selector requirements. The requirements are ANDed.
+                                  items:
+                                    description: A label selector requirement is a
+                                      selector that contains values, a key, and an
+                                      operator that relates the key and values.
+                                    properties:
+                                      key:
+                                        description: key is the label key that the
+                                          selector applies to.
+                                        type: string
+                                      operator:
+                                        description: operator represents a key's relationship
+                                          to a set of values. Valid operators are
+                                          In, NotIn, Exists and DoesNotExist.
+                                        type: string
+                                      values:
+                                        description: values is an array of string
+                                          values. If the operator is In or NotIn,
+                                          the values array must be non-empty. If the
+                                          operator is Exists or DoesNotExist, the
+                                          values array must be empty. This array is
+                                          replaced during a strategic merge patch.
+                                        items:
+                                          type: string
+                                        type: array
+                                    required:
+                                    - key
+                                    - operator
+                                    type: object
+                                  type: array
+                                matchLabels:
+                                  additionalProperties:
+                                    type: string
+                                  description: matchLabels is a map of {key,value}
+                                    pairs. A single {key,value} in the matchLabels
+                                    map is equivalent to an element of matchExpressions,
+                                    whose key field is "key", the operator is "In",
+                                    and the values array contains only "value". The
+                                    requirements are ANDed.
+                                  type: object
+                              type: object
+                              x-kubernetes-map-type: atomic
+                            namespaces:
+                              description: namespaces specifies a static list of namespace
+                                names that the term applies to. The term is applied
+                                to the union of the namespaces listed in this field
+                                and the ones selected by namespaceSelector. null or
+                                empty namespaces list and null namespaceSelector means
+                                "this pod's namespace".
+                              items:
+                                type: string
+                              type: array
+                            topologyKey:
+                              description: This pod should be co-located (affinity)
+                                or not co-located (anti-affinity) with the pods matching
+                                the labelSelector in the specified namespaces, where
+                                co-located is defined as running on a node whose value
+                                of the label with key topologyKey matches that of
+                                any node on which any of the selected pods is running.
+                                Empty topologyKey is not allowed.
+                              type: string
+                          required:
+                          - topologyKey
+                          type: object
+                        type: array
+                    type: object
+                  podAntiAffinity:
+                    description: Describes pod anti-affinity scheduling rules (e.g.
+                      avoid putting this pod in the same node, zone, etc. as some
+                      other pod(s)).
+                    properties:
+                      preferredDuringSchedulingIgnoredDuringExecution:
+                        description: The scheduler will prefer to schedule pods to
+                          nodes that satisfy the anti-affinity expressions specified
+                          by this field, but it may choose a node that violates one
+                          or more of the expressions. The node that is most preferred
+                          is the one with the greatest sum of weights, i.e. for each
+                          node that meets all of the scheduling requirements (resource
+                          request, requiredDuringScheduling anti-affinity expressions,
+                          etc.), compute a sum by iterating through the elements of
+                          this field and adding "weight" to the sum if the node has
+                          pods which matches the corresponding podAffinityTerm; the
+                          node(s) with the highest sum are the most preferred.
+                        items:
+                          description: The weights of all of the matched WeightedPodAffinityTerm
+                            fields are added per-node to find the most preferred node(s)
+                          properties:
+                            podAffinityTerm:
+                              description: Required. A pod affinity term, associated
+                                with the corresponding weight.
+                              properties:
+                                labelSelector:
+                                  description: A label query over a set of resources,
+                                    in this case pods.
+                                  properties:
+                                    matchExpressions:
+                                      description: matchExpressions is a list of label
+                                        selector requirements. The requirements are
+                                        ANDed.
+                                      items:
+                                        description: A label selector requirement
+                                          is a selector that contains values, a key,
+                                          and an operator that relates the key and
+                                          values.
+                                        properties:
+                                          key:
+                                            description: key is the label key that
+                                              the selector applies to.
+                                            type: string
+                                          operator:
+                                            description: operator represents a key's
+                                              relationship to a set of values. Valid
+                                              operators are In, NotIn, Exists and
+                                              DoesNotExist.
+                                            type: string
+                                          values:
+                                            description: values is an array of string
+                                              values. If the operator is In or NotIn,
+                                              the values array must be non-empty.
+                                              If the operator is Exists or DoesNotExist,
+                                              the values array must be empty. This
+                                              array is replaced during a strategic
+                                              merge patch.
+                                            items:
+                                              type: string
+                                            type: array
+                                        required:
+                                        - key
+                                        - operator
+                                        type: object
+                                      type: array
+                                    matchLabels:
+                                      additionalProperties:
+                                        type: string
+                                      description: matchLabels is a map of {key,value}
+                                        pairs. A single {key,value} in the matchLabels
+                                        map is equivalent to an element of matchExpressions,
+                                        whose key field is "key", the operator is
+                                        "In", and the values array contains only "value".
+                                        The requirements are ANDed.
+                                      type: object
+                                  type: object
+                                  x-kubernetes-map-type: atomic
+                                namespaceSelector:
+                                  description: A label query over the set of namespaces
+                                    that the term applies to. The term is applied
+                                    to the union of the namespaces selected by this
+                                    field and the ones listed in the namespaces field.
+                                    null selector and null or empty namespaces list
+                                    means "this pod's namespace". An empty selector
+                                    ({}) matches all namespaces.
+                                  properties:
+                                    matchExpressions:
+                                      description: matchExpressions is a list of label
+                                        selector requirements. The requirements are
+                                        ANDed.
+                                      items:
+                                        description: A label selector requirement
+                                          is a selector that contains values, a key,
+                                          and an operator that relates the key and
+                                          values.
+                                        properties:
+                                          key:
+                                            description: key is the label key that
+                                              the selector applies to.
+                                            type: string
+                                          operator:
+                                            description: operator represents a key's
+                                              relationship to a set of values. Valid
+                                              operators are In, NotIn, Exists and
+                                              DoesNotExist.
+                                            type: string
+                                          values:
+                                            description: values is an array of string
+                                              values. If the operator is In or NotIn,
+                                              the values array must be non-empty.
+                                              If the operator is Exists or DoesNotExist,
+                                              the values array must be empty. This
+                                              array is replaced during a strategic
+                                              merge patch.
+                                            items:
+                                              type: string
+                                            type: array
+                                        required:
+                                        - key
+                                        - operator
+                                        type: object
+                                      type: array
+                                    matchLabels:
+                                      additionalProperties:
+                                        type: string
+                                      description: matchLabels is a map of {key,value}
+                                        pairs. A single {key,value} in the matchLabels
+                                        map is equivalent to an element of matchExpressions,
+                                        whose key field is "key", the operator is
+                                        "In", and the values array contains only "value".
+                                        The requirements are ANDed.
+                                      type: object
+                                  type: object
+                                  x-kubernetes-map-type: atomic
+                                namespaces:
+                                  description: namespaces specifies a static list
+                                    of namespace names that the term applies to. The
+                                    term is applied to the union of the namespaces
+                                    listed in this field and the ones selected by
+                                    namespaceSelector. null or empty namespaces list
+                                    and null namespaceSelector means "this pod's namespace".
+                                  items:
+                                    type: string
+                                  type: array
+                                topologyKey:
+                                  description: This pod should be co-located (affinity)
+                                    or not co-located (anti-affinity) with the pods
+                                    matching the labelSelector in the specified namespaces,
+                                    where co-located is defined as running on a node
+                                    whose value of the label with key topologyKey
+                                    matches that of any node on which any of the selected
+                                    pods is running. Empty topologyKey is not allowed.
+                                  type: string
+                              required:
+                              - topologyKey
+                              type: object
+                            weight:
+                              description: weight associated with matching the corresponding
+                                podAffinityTerm, in the range 1-100.
+                              format: int32
+                              type: integer
+                          required:
+                          - podAffinityTerm
+                          - weight
+                          type: object
+                        type: array
+                      requiredDuringSchedulingIgnoredDuringExecution:
+                        description: If the anti-affinity requirements specified by
+                          this field are not met at scheduling time, the pod will
+                          not be scheduled onto the node. If the anti-affinity requirements
+                          specified by this field cease to be met at some point during
+                          pod execution (e.g. due to a pod label update), the system
+                          may or may not try to eventually evict the pod from its
+                          node. When there are multiple elements, the lists of nodes
+                          corresponding to each podAffinityTerm are intersected, i.e.
+                          all terms must be satisfied.
+                        items:
+                          description: Defines a set of pods (namely those matching
+                            the labelSelector relative to the given namespace(s))
+                            that this pod should be co-located (affinity) or not co-located
+                            (anti-affinity) with, where co-located is defined as running
+                            on a node whose value of the label with key <topologyKey>
+                            matches that of any node on which a pod of the set of
+                            pods is running
+                          properties:
+                            labelSelector:
+                              description: A label query over a set of resources,
+                                in this case pods.
+                              properties:
+                                matchExpressions:
+                                  description: matchExpressions is a list of label
+                                    selector requirements. The requirements are ANDed.
+                                  items:
+                                    description: A label selector requirement is a
+                                      selector that contains values, a key, and an
+                                      operator that relates the key and values.
+                                    properties:
+                                      key:
+                                        description: key is the label key that the
+                                          selector applies to.
+                                        type: string
+                                      operator:
+                                        description: operator represents a key's relationship
+                                          to a set of values. Valid operators are
+                                          In, NotIn, Exists and DoesNotExist.
+                                        type: string
+                                      values:
+                                        description: values is an array of string
+                                          values. If the operator is In or NotIn,
+                                          the values array must be non-empty. If the
+                                          operator is Exists or DoesNotExist, the
+                                          values array must be empty. This array is
+                                          replaced during a strategic merge patch.
+                                        items:
+                                          type: string
+                                        type: array
+                                    required:
+                                    - key
+                                    - operator
+                                    type: object
+                                  type: array
+                                matchLabels:
+                                  additionalProperties:
+                                    type: string
+                                  description: matchLabels is a map of {key,value}
+                                    pairs. A single {key,value} in the matchLabels
+                                    map is equivalent to an element of matchExpressions,
+                                    whose key field is "key", the operator is "In",
+                                    and the values array contains only "value". The
+                                    requirements are ANDed.
+                                  type: object
+                              type: object
+                              x-kubernetes-map-type: atomic
+                            namespaceSelector:
+                              description: A label query over the set of namespaces
+                                that the term applies to. The term is applied to the
+                                union of the namespaces selected by this field and
+                                the ones listed in the namespaces field. null selector
+                                and null or empty namespaces list means "this pod's
+                                namespace". An empty selector ({}) matches all namespaces.
+                              properties:
+                                matchExpressions:
+                                  description: matchExpressions is a list of label
+                                    selector requirements. The requirements are ANDed.
+                                  items:
+                                    description: A label selector requirement is a
+                                      selector that contains values, a key, and an
+                                      operator that relates the key and values.
+                                    properties:
+                                      key:
+                                        description: key is the label key that the
+                                          selector applies to.
+                                        type: string
+                                      operator:
+                                        description: operator represents a key's relationship
+                                          to a set of values. Valid operators are
+                                          In, NotIn, Exists and DoesNotExist.
+                                        type: string
+                                      values:
+                                        description: values is an array of string
+                                          values. If the operator is In or NotIn,
+                                          the values array must be non-empty. If the
+                                          operator is Exists or DoesNotExist, the
+                                          values array must be empty. This array is
+                                          replaced during a strategic merge patch.
+                                        items:
+                                          type: string
+                                        type: array
+                                    required:
+                                    - key
+                                    - operator
+                                    type: object
+                                  type: array
+                                matchLabels:
+                                  additionalProperties:
+                                    type: string
+                                  description: matchLabels is a map of {key,value}
+                                    pairs. A single {key,value} in the matchLabels
+                                    map is equivalent to an element of matchExpressions,
+                                    whose key field is "key", the operator is "In",
+                                    and the values array contains only "value". The
+                                    requirements are ANDed.
+                                  type: object
+                              type: object
+                              x-kubernetes-map-type: atomic
+                            namespaces:
+                              description: namespaces specifies a static list of namespace
+                                names that the term applies to. The term is applied
+                                to the union of the namespaces listed in this field
+                                and the ones selected by namespaceSelector. null or
+                                empty namespaces list and null namespaceSelector means
+                                "this pod's namespace".
+                              items:
+                                type: string
+                              type: array
+                            topologyKey:
+                              description: This pod should be co-located (affinity)
+                                or not co-located (anti-affinity) with the pods matching
+                                the labelSelector in the specified namespaces, where
+                                co-located is defined as running on a node whose value
+                                of the label with key topologyKey matches that of
+                                any node on which any of the selected pods is running.
+                                Empty topologyKey is not allowed.
+                              type: string
+                          required:
+                          - topologyKey
+                          type: object
+                        type: array
+                    type: object
+                type: object
+              apiServer:
+                description: APIServerConfig lets you specify a host and auth methods
+                  to access the Kubernetes API server. If left empty, the Agent assumes
+                  that it is running inside of the cluster and will discover API servers
+                  automatically and use the pod's CA certificate and bearer token
+                  file at /var/run/secrets/kubernetes.io/serviceaccount.
+                properties:
+                  authorization:
+                    description: Authorization section for accessing apiserver
+                    properties:
+                      credentials:
+                        description: The secret's key that contains the credentials
+                          of the request
+                        properties:
+                          key:
+                            description: The key of the secret to select from.  Must
+                              be a valid secret key.
+                            type: string
+                          name:
+                            description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                              TODO: Add other useful fields. apiVersion, kind, uid?'
+                            type: string
+                          optional:
+                            description: Specify whether the Secret or its key must
+                              be defined
+                            type: boolean
+                        required:
+                        - key
+                        type: object
+                        x-kubernetes-map-type: atomic
+                      credentialsFile:
+                        description: File to read a secret from, mutually exclusive
+                          with Credentials (from SafeAuthorization)
+                        type: string
+                      type:
+                        description: Set the authentication type. Defaults to Bearer,
+                          Basic will cause an error
+                        type: string
+                    type: object
+                  basicAuth:
+                    description: BasicAuth allow an endpoint to authenticate over
+                      basic authentication
+                    properties:
+                      password:
+                        description: The secret in the service monitor namespace that
+                          contains the password for authentication.
+                        properties:
+                          key:
+                            description: The key of the secret to select from.  Must
+                              be a valid secret key.
+                            type: string
+                          name:
+                            description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                              TODO: Add other useful fields. apiVersion, kind, uid?'
+                            type: string
+                          optional:
+                            description: Specify whether the Secret or its key must
+                              be defined
+                            type: boolean
+                        required:
+                        - key
+                        type: object
+                        x-kubernetes-map-type: atomic
+                      username:
+                        description: The secret in the service monitor namespace that
+                          contains the username for authentication.
+                        properties:
+                          key:
+                            description: The key of the secret to select from.  Must
+                              be a valid secret key.
+                            type: string
+                          name:
+                            description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                              TODO: Add other useful fields. apiVersion, kind, uid?'
+                            type: string
+                          optional:
+                            description: Specify whether the Secret or its key must
+                              be defined
+                            type: boolean
+                        required:
+                        - key
+                        type: object
+                        x-kubernetes-map-type: atomic
+                    type: object
+                  bearerToken:
+                    description: Bearer token for accessing apiserver.
+                    type: string
+                  bearerTokenFile:
+                    description: File to read bearer token for accessing apiserver.
+                    type: string
+                  host:
+                    description: Host of apiserver. A valid string consisting of a
+                      hostname or IP followed by an optional port number
+                    type: string
+                  tlsConfig:
+                    description: TLS Config to use for accessing apiserver.
+                    properties:
+                      ca:
+                        description: Certificate authority used when verifying server
+                          certificates.
+                        properties:
+                          configMap:
+                            description: ConfigMap containing data to use for the
+                              targets.
+                            properties:
+                              key:
+                                description: The key to select.
+                                type: string
+                              name:
+                                description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                  TODO: Add other useful fields. apiVersion, kind,
+                                  uid?'
+                                type: string
+                              optional:
+                                description: Specify whether the ConfigMap or its
+                                  key must be defined
+                                type: boolean
+                            required:
+                            - key
+                            type: object
+                            x-kubernetes-map-type: atomic
+                          secret:
+                            description: Secret containing data to use for the targets.
+                            properties:
+                              key:
+                                description: The key of the secret to select from.  Must
+                                  be a valid secret key.
+                                type: string
+                              name:
+                                description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                  TODO: Add other useful fields. apiVersion, kind,
+                                  uid?'
+                                type: string
+                              optional:
+                                description: Specify whether the Secret or its key
+                                  must be defined
+                                type: boolean
+                            required:
+                            - key
+                            type: object
+                            x-kubernetes-map-type: atomic
+                        type: object
+                      caFile:
+                        description: Path to the CA cert in the Prometheus container
+                          to use for the targets.
+                        type: string
+                      cert:
+                        description: Client certificate to present when doing client-authentication.
+                        properties:
+                          configMap:
+                            description: ConfigMap containing data to use for the
+                              targets.
+                            properties:
+                              key:
+                                description: The key to select.
+                                type: string
+                              name:
+                                description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                  TODO: Add other useful fields. apiVersion, kind,
+                                  uid?'
+                                type: string
+                              optional:
+                                description: Specify whether the ConfigMap or its
+                                  key must be defined
+                                type: boolean
+                            required:
+                            - key
+                            type: object
+                            x-kubernetes-map-type: atomic
+                          secret:
+                            description: Secret containing data to use for the targets.
+                            properties:
+                              key:
+                                description: The key of the secret to select from.  Must
+                                  be a valid secret key.
+                                type: string
+                              name:
+                                description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                  TODO: Add other useful fields. apiVersion, kind,
+                                  uid?'
+                                type: string
+                              optional:
+                                description: Specify whether the Secret or its key
+                                  must be defined
+                                type: boolean
+                            required:
+                            - key
+                            type: object
+                            x-kubernetes-map-type: atomic
+                        type: object
+                      certFile:
+                        description: Path to the client cert file in the Prometheus
+                          container for the targets.
+                        type: string
+                      insecureSkipVerify:
+                        description: Disable target certificate validation.
+                        type: boolean
+                      keyFile:
+                        description: Path to the client key file in the Prometheus
+                          container for the targets.
+                        type: string
+                      keySecret:
+                        description: Secret containing the client key file for the
+                          targets.
+                        properties:
+                          key:
+                            description: The key of the secret to select from.  Must
+                              be a valid secret key.
+                            type: string
+                          name:
+                            description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                              TODO: Add other useful fields. apiVersion, kind, uid?'
+                            type: string
+                          optional:
+                            description: Specify whether the Secret or its key must
+                              be defined
+                            type: boolean
+                        required:
+                        - key
+                        type: object
+                        x-kubernetes-map-type: atomic
+                      serverName:
+                        description: Used to verify the hostname for the targets.
+                        type: string
+                    type: object
+                required:
+                - host
+                type: object
+              configMaps:
+                description: ConfigMaps is a list of config maps in the same namespace
+                  as the GrafanaAgent object which will be mounted into each running
+                  Grafana Agent pod. The ConfigMaps are mounted into /var/lib/grafana-agent/extra-configmaps/<configmap-name>.
+                items:
+                  type: string
+                type: array
+              configReloaderImage:
+                description: Image, when specified, overrides the image used to run
+                  Config Reloader. Specify the image along with a tag. You still need
+                  to set the version to ensure Grafana Agent Operator knows which
+                  version of Grafana Agent is being configured.
+                type: string
+              configReloaderVersion:
+                description: Version of Config Reloader to be deployed.
+                type: string
+              containers:
+                description: 'Containers lets you inject additional containers or
+                  modify operator-generated containers. This can be used to add an
+                  authentication proxy to a Grafana Agent pod or to change the behavior
+                  of an operator-generated container. Containers described here modify
+                  an operator-generated container if they share the same name and
+                  if modifications are done via a strategic merge patch. The current
+                  container names are: `grafana-agent` and `config-reloader`. Overriding
+                  containers is entirely outside the scope of what the Grafana Agent
+                  team supports and by doing so, you accept that this behavior may
+                  break at any time without notice.'
+                items:
+                  description: A single application container that you want to run
+                    within a pod.
+                  properties:
+                    args:
+                      description: 'Arguments to the entrypoint. The container image''s
+                        CMD is used if this is not provided. Variable references $(VAR_NAME)
+                        are expanded using the container''s environment. If a variable
+                        cannot be resolved, the reference in the input string will
+                        be unchanged. Double $$ are reduced to a single $, which allows
+                        for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will
+                        produce the string literal "$(VAR_NAME)". Escaped references
+                        will never be expanded, regardless of whether the variable
+                        exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell'
+                      items:
+                        type: string
+                      type: array
+                    command:
+                      description: 'Entrypoint array. Not executed within a shell.
+                        The container image''s ENTRYPOINT is used if this is not provided.
+                        Variable references $(VAR_NAME) are expanded using the container''s
+                        environment. If a variable cannot be resolved, the reference
+                        in the input string will be unchanged. Double $$ are reduced
+                        to a single $, which allows for escaping the $(VAR_NAME) syntax:
+                        i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)".
+                        Escaped references will never be expanded, regardless of whether
+                        the variable exists or not. Cannot be updated. More info:
+                        https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell'
+                      items:
+                        type: string
+                      type: array
+                    env:
+                      description: List of environment variables to set in the container.
+                        Cannot be updated.
+                      items:
+                        description: EnvVar represents an environment variable present
+                          in a Container.
+                        properties:
+                          name:
+                            description: Name of the environment variable. Must be
+                              a C_IDENTIFIER.
+                            type: string
+                          value:
+                            description: 'Variable references $(VAR_NAME) are expanded
+                              using the previously defined environment variables in
+                              the container and any service environment variables.
+                              If a variable cannot be resolved, the reference in the
+                              input string will be unchanged. Double $$ are reduced
+                              to a single $, which allows for escaping the $(VAR_NAME)
+                              syntax: i.e. "$$(VAR_NAME)" will produce the string
+                              literal "$(VAR_NAME)". Escaped references will never
+                              be expanded, regardless of whether the variable exists
+                              or not. Defaults to "".'
+                            type: string
+                          valueFrom:
+                            description: Source for the environment variable's value.
+                              Cannot be used if value is not empty.
+                            properties:
+                              configMapKeyRef:
+                                description: Selects a key of a ConfigMap.
+                                properties:
+                                  key:
+                                    description: The key to select.
+                                    type: string
+                                  name:
+                                    description: 'Name of the referent. More info:
+                                      https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                      TODO: Add other useful fields. apiVersion, kind,
+                                      uid?'
+                                    type: string
+                                  optional:
+                                    description: Specify whether the ConfigMap or
+                                      its key must be defined
+                                    type: boolean
+                                required:
+                                - key
+                                type: object
+                                x-kubernetes-map-type: atomic
+                              fieldRef:
+                                description: 'Selects a field of the pod: supports
+                                  metadata.name, metadata.namespace, `metadata.labels[''<KEY>'']`,
+                                  `metadata.annotations[''<KEY>'']`, spec.nodeName,
+                                  spec.serviceAccountName, status.hostIP, status.podIP,
+                                  status.podIPs.'
+                                properties:
+                                  apiVersion:
+                                    description: Version of the schema the FieldPath
+                                      is written in terms of, defaults to "v1".
+                                    type: string
+                                  fieldPath:
+                                    description: Path of the field to select in the
+                                      specified API version.
+                                    type: string
+                                required:
+                                - fieldPath
+                                type: object
+                                x-kubernetes-map-type: atomic
+                              resourceFieldRef:
+                                description: 'Selects a resource of the container:
+                                  only resources limits and requests (limits.cpu,
+                                  limits.memory, limits.ephemeral-storage, requests.cpu,
+                                  requests.memory and requests.ephemeral-storage)
+                                  are currently supported.'
+                                properties:
+                                  containerName:
+                                    description: 'Container name: required for volumes,
+                                      optional for env vars'
+                                    type: string
+                                  divisor:
+                                    anyOf:
+                                    - type: integer
+                                    - type: string
+                                    description: Specifies the output format of the
+                                      exposed resources, defaults to "1"
+                                    pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
+                                    x-kubernetes-int-or-string: true
+                                  resource:
+                                    description: 'Required: resource to select'
+                                    type: string
+                                required:
+                                - resource
+                                type: object
+                                x-kubernetes-map-type: atomic
+                              secretKeyRef:
+                                description: Selects a key of a secret in the pod's
+                                  namespace
+                                properties:
+                                  key:
+                                    description: The key of the secret to select from.  Must
+                                      be a valid secret key.
+                                    type: string
+                                  name:
+                                    description: 'Name of the referent. More info:
+                                      https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                      TODO: Add other useful fields. apiVersion, kind,
+                                      uid?'
+                                    type: string
+                                  optional:
+                                    description: Specify whether the Secret or its
+                                      key must be defined
+                                    type: boolean
+                                required:
+                                - key
+                                type: object
+                                x-kubernetes-map-type: atomic
+                            type: object
+                        required:
+                        - name
+                        type: object
+                      type: array
+                    envFrom:
+                      description: List of sources to populate environment variables
+                        in the container. The keys defined within a source must be
+                        a C_IDENTIFIER. All invalid keys will be reported as an event
+                        when the container is starting. When a key exists in multiple
+                        sources, the value associated with the last source will take
+                        precedence. Values defined by an Env with a duplicate key
+                        will take precedence. Cannot be updated.
+                      items:
+                        description: EnvFromSource represents the source of a set
+                          of ConfigMaps
+                        properties:
+                          configMapRef:
+                            description: The ConfigMap to select from
+                            properties:
+                              name:
+                                description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                  TODO: Add other useful fields. apiVersion, kind,
+                                  uid?'
+                                type: string
+                              optional:
+                                description: Specify whether the ConfigMap must be
+                                  defined
+                                type: boolean
+                            type: object
+                            x-kubernetes-map-type: atomic
+                          prefix:
+                            description: An optional identifier to prepend to each
+                              key in the ConfigMap. Must be a C_IDENTIFIER.
+                            type: string
+                          secretRef:
+                            description: The Secret to select from
+                            properties:
+                              name:
+                                description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                  TODO: Add other useful fields. apiVersion, kind,
+                                  uid?'
+                                type: string
+                              optional:
+                                description: Specify whether the Secret must be defined
+                                type: boolean
+                            type: object
+                            x-kubernetes-map-type: atomic
+                        type: object
+                      type: array
+                    image:
+                      description: 'Container image name. More info: https://kubernetes.io/docs/concepts/containers/images
+                        This field is optional to allow higher level config management
+                        to default or override container images in workload controllers
+                        like Deployments and StatefulSets.'
+                      type: string
+                    imagePullPolicy:
+                      description: 'Image pull policy. One of Always, Never, IfNotPresent.
+                        Defaults to Always if :latest tag is specified, or IfNotPresent
+                        otherwise. Cannot be updated. More info: https://kubernetes.io/docs/concepts/containers/images#updating-images'
+                      type: string
+                    lifecycle:
+                      description: Actions that the management system should take
+                        in response to container lifecycle events. Cannot be updated.
+                      properties:
+                        postStart:
+                          description: 'PostStart is called immediately after a container
+                            is created. If the handler fails, the container is terminated
+                            and restarted according to its restart policy. Other management
+                            of the container blocks until the hook completes. More
+                            info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks'
+                          properties:
+                            exec:
+                              description: Exec specifies the action to take.
+                              properties:
+                                command:
+                                  description: Command is the command line to execute
+                                    inside the container, the working directory for
+                                    the command  is root ('/') in the container's
+                                    filesystem. The command is simply exec'd, it is
+                                    not run inside a shell, so traditional shell instructions
+                                    ('|', etc) won't work. To use a shell, you need
+                                    to explicitly call out to that shell. Exit status
+                                    of 0 is treated as live/healthy and non-zero is
+                                    unhealthy.
+                                  items:
+                                    type: string
+                                  type: array
+                              type: object
+                            httpGet:
+                              description: HTTPGet specifies the http request to perform.
+                              properties:
+                                host:
+                                  description: Host name to connect to, defaults to
+                                    the pod IP. You probably want to set "Host" in
+                                    httpHeaders instead.
+                                  type: string
+                                httpHeaders:
+                                  description: Custom headers to set in the request.
+                                    HTTP allows repeated headers.
+                                  items:
+                                    description: HTTPHeader describes a custom header
+                                      to be used in HTTP probes
+                                    properties:
+                                      name:
+                                        description: The header field name. This will
+                                          be canonicalized upon output, so case-variant
+                                          names will be understood as the same header.
+                                        type: string
+                                      value:
+                                        description: The header field value
+                                        type: string
+                                    required:
+                                    - name
+                                    - value
+                                    type: object
+                                  type: array
+                                path:
+                                  description: Path to access on the HTTP server.
+                                  type: string
+                                port:
+                                  anyOf:
+                                  - type: integer
+                                  - type: string
+                                  description: Name or number of the port to access
+                                    on the container. Number must be in the range
+                                    1 to 65535. Name must be an IANA_SVC_NAME.
+                                  x-kubernetes-int-or-string: true
+                                scheme:
+                                  description: Scheme to use for connecting to the
+                                    host. Defaults to HTTP.
+                                  type: string
+                              required:
+                              - port
+                              type: object
+                            tcpSocket:
+                              description: Deprecated. TCPSocket is NOT supported
+                                as a LifecycleHandler and kept for the backward compatibility.
+                                There are no validation of this field and lifecycle
+                                hooks will fail in runtime when tcp handler is specified.
+                              properties:
+                                host:
+                                  description: 'Optional: Host name to connect to,
+                                    defaults to the pod IP.'
+                                  type: string
+                                port:
+                                  anyOf:
+                                  - type: integer
+                                  - type: string
+                                  description: Number or name of the port to access
+                                    on the container. Number must be in the range
+                                    1 to 65535. Name must be an IANA_SVC_NAME.
+                                  x-kubernetes-int-or-string: true
+                              required:
+                              - port
+                              type: object
+                          type: object
+                        preStop:
+                          description: 'PreStop is called immediately before a container
+                            is terminated due to an API request or management event
+                            such as liveness/startup probe failure, preemption, resource
+                            contention, etc. The handler is not called if the container
+                            crashes or exits. The Pod''s termination grace period
+                            countdown begins before the PreStop hook is executed.
+                            Regardless of the outcome of the handler, the container
+                            will eventually terminate within the Pod''s termination
+                            grace period (unless delayed by finalizers). Other management
+                            of the container blocks until the hook completes or until
+                            the termination grace period is reached. More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks'
+                          properties:
+                            exec:
+                              description: Exec specifies the action to take.
+                              properties:
+                                command:
+                                  description: Command is the command line to execute
+                                    inside the container, the working directory for
+                                    the command  is root ('/') in the container's
+                                    filesystem. The command is simply exec'd, it is
+                                    not run inside a shell, so traditional shell instructions
+                                    ('|', etc) won't work. To use a shell, you need
+                                    to explicitly call out to that shell. Exit status
+                                    of 0 is treated as live/healthy and non-zero is
+                                    unhealthy.
+                                  items:
+                                    type: string
+                                  type: array
+                              type: object
+                            httpGet:
+                              description: HTTPGet specifies the http request to perform.
+                              properties:
+                                host:
+                                  description: Host name to connect to, defaults to
+                                    the pod IP. You probably want to set "Host" in
+                                    httpHeaders instead.
+                                  type: string
+                                httpHeaders:
+                                  description: Custom headers to set in the request.
+                                    HTTP allows repeated headers.
+                                  items:
+                                    description: HTTPHeader describes a custom header
+                                      to be used in HTTP probes
+                                    properties:
+                                      name:
+                                        description: The header field name. This will
+                                          be canonicalized upon output, so case-variant
+                                          names will be understood as the same header.
+                                        type: string
+                                      value:
+                                        description: The header field value
+                                        type: string
+                                    required:
+                                    - name
+                                    - value
+                                    type: object
+                                  type: array
+                                path:
+                                  description: Path to access on the HTTP server.
+                                  type: string
+                                port:
+                                  anyOf:
+                                  - type: integer
+                                  - type: string
+                                  description: Name or number of the port to access
+                                    on the container. Number must be in the range
+                                    1 to 65535. Name must be an IANA_SVC_NAME.
+                                  x-kubernetes-int-or-string: true
+                                scheme:
+                                  description: Scheme to use for connecting to the
+                                    host. Defaults to HTTP.
+                                  type: string
+                              required:
+                              - port
+                              type: object
+                            tcpSocket:
+                              description: Deprecated. TCPSocket is NOT supported
+                                as a LifecycleHandler and kept for the backward compatibility.
+                                There are no validation of this field and lifecycle
+                                hooks will fail in runtime when tcp handler is specified.
+                              properties:
+                                host:
+                                  description: 'Optional: Host name to connect to,
+                                    defaults to the pod IP.'
+                                  type: string
+                                port:
+                                  anyOf:
+                                  - type: integer
+                                  - type: string
+                                  description: Number or name of the port to access
+                                    on the container. Number must be in the range
+                                    1 to 65535. Name must be an IANA_SVC_NAME.
+                                  x-kubernetes-int-or-string: true
+                              required:
+                              - port
+                              type: object
+                          type: object
+                      type: object
+                    livenessProbe:
+                      description: 'Periodic probe of container liveness. Container
+                        will be restarted if the probe fails. Cannot be updated. More
+                        info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes'
+                      properties:
+                        exec:
+                          description: Exec specifies the action to take.
+                          properties:
+                            command:
+                              description: Command is the command line to execute
+                                inside the container, the working directory for the
+                                command  is root ('/') in the container's filesystem.
+                                The command is simply exec'd, it is not run inside
+                                a shell, so traditional shell instructions ('|', etc)
+                                won't work. To use a shell, you need to explicitly
+                                call out to that shell. Exit status of 0 is treated
+                                as live/healthy and non-zero is unhealthy.
+                              items:
+                                type: string
+                              type: array
+                          type: object
+                        failureThreshold:
+                          description: Minimum consecutive failures for the probe
+                            to be considered failed after having succeeded. Defaults
+                            to 3. Minimum value is 1.
+                          format: int32
+                          type: integer
+                        grpc:
+                          description: GRPC specifies an action involving a GRPC port.
+                          properties:
+                            port:
+                              description: Port number of the gRPC service. Number
+                                must be in the range 1 to 65535.
+                              format: int32
+                              type: integer
+                            service:
+                              description: "Service is the name of the service to
+                                place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
+                                \n If this is not specified, the default behavior
+                                is defined by gRPC."
+                              type: string
+                          required:
+                          - port
+                          type: object
+                        httpGet:
+                          description: HTTPGet specifies the http request to perform.
+                          properties:
+                            host:
+                              description: Host name to connect to, defaults to the
+                                pod IP. You probably want to set "Host" in httpHeaders
+                                instead.
+                              type: string
+                            httpHeaders:
+                              description: Custom headers to set in the request. HTTP
+                                allows repeated headers.
+                              items:
+                                description: HTTPHeader describes a custom header
+                                  to be used in HTTP probes
+                                properties:
+                                  name:
+                                    description: The header field name. This will
+                                      be canonicalized upon output, so case-variant
+                                      names will be understood as the same header.
+                                    type: string
+                                  value:
+                                    description: The header field value
+                                    type: string
+                                required:
+                                - name
+                                - value
+                                type: object
+                              type: array
+                            path:
+                              description: Path to access on the HTTP server.
+                              type: string
+                            port:
+                              anyOf:
+                              - type: integer
+                              - type: string
+                              description: Name or number of the port to access on
+                                the container. Number must be in the range 1 to 65535.
+                                Name must be an IANA_SVC_NAME.
+                              x-kubernetes-int-or-string: true
+                            scheme:
+                              description: Scheme to use for connecting to the host.
+                                Defaults to HTTP.
+                              type: string
+                          required:
+                          - port
+                          type: object
+                        initialDelaySeconds:
+                          description: 'Number of seconds after the container has
+                            started before liveness probes are initiated. More info:
+                            https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes'
+                          format: int32
+                          type: integer
+                        periodSeconds:
+                          description: How often (in seconds) to perform the probe.
+                            Default to 10 seconds. Minimum value is 1.
+                          format: int32
+                          type: integer
+                        successThreshold:
+                          description: Minimum consecutive successes for the probe
+                            to be considered successful after having failed. Defaults
+                            to 1. Must be 1 for liveness and startup. Minimum value
+                            is 1.
+                          format: int32
+                          type: integer
+                        tcpSocket:
+                          description: TCPSocket specifies an action involving a TCP
+                            port.
+                          properties:
+                            host:
+                              description: 'Optional: Host name to connect to, defaults
+                                to the pod IP.'
+                              type: string
+                            port:
+                              anyOf:
+                              - type: integer
+                              - type: string
+                              description: Number or name of the port to access on
+                                the container. Number must be in the range 1 to 65535.
+                                Name must be an IANA_SVC_NAME.
+                              x-kubernetes-int-or-string: true
+                          required:
+                          - port
+                          type: object
+                        terminationGracePeriodSeconds:
+                          description: Optional duration in seconds the pod needs
+                            to terminate gracefully upon probe failure. The grace
+                            period is the duration in seconds after the processes
+                            running in the pod are sent a termination signal and the
+                            time when the processes are forcibly halted with a kill
+                            signal. Set this value longer than the expected cleanup
+                            time for your process. If this value is nil, the pod's
+                            terminationGracePeriodSeconds will be used. Otherwise,
+                            this value overrides the value provided by the pod spec.
+                            Value must be non-negative integer. The value zero indicates
+                            stop immediately via the kill signal (no opportunity to
+                            shut down). This is a beta field and requires enabling
+                            ProbeTerminationGracePeriod feature gate. Minimum value
+                            is 1. spec.terminationGracePeriodSeconds is used if unset.
+                          format: int64
+                          type: integer
+                        timeoutSeconds:
+                          description: 'Number of seconds after which the probe times
+                            out. Defaults to 1 second. Minimum value is 1. More info:
+                            https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes'
+                          format: int32
+                          type: integer
+                      type: object
+                    name:
+                      description: Name of the container specified as a DNS_LABEL.
+                        Each container in a pod must have a unique name (DNS_LABEL).
+                        Cannot be updated.
+                      type: string
+                    ports:
+                      description: List of ports to expose from the container. Not
+                        specifying a port here DOES NOT prevent that port from being
+                        exposed. Any port which is listening on the default "0.0.0.0"
+                        address inside a container will be accessible from the network.
+                        Modifying this array with strategic merge patch may corrupt
+                        the data. For more information See https://github.com/kubernetes/kubernetes/issues/108255.
+                        Cannot be updated.
+                      items:
+                        description: ContainerPort represents a network port in a
+                          single container.
+                        properties:
+                          containerPort:
+                            description: Number of port to expose on the pod's IP
+                              address. This must be a valid port number, 0 < x < 65536.
+                            format: int32
+                            type: integer
+                          hostIP:
+                            description: What host IP to bind the external port to.
+                            type: string
+                          hostPort:
+                            description: Number of port to expose on the host. If
+                              specified, this must be a valid port number, 0 < x <
+                              65536. If HostNetwork is specified, this must match
+                              ContainerPort. Most containers do not need this.
+                            format: int32
+                            type: integer
+                          name:
+                            description: If specified, this must be an IANA_SVC_NAME
+                              and unique within the pod. Each named port in a pod
+                              must have a unique name. Name for the port that can
+                              be referred to by services.
+                            type: string
+                          protocol:
+                            default: TCP
+                            description: Protocol for port. Must be UDP, TCP, or SCTP.
+                              Defaults to "TCP".
+                            type: string
+                        required:
+                        - containerPort
+                        type: object
+                      type: array
+                      x-kubernetes-list-map-keys:
+                      - containerPort
+                      - protocol
+                      x-kubernetes-list-type: map
+                    readinessProbe:
+                      description: 'Periodic probe of container service readiness.
+                        Container will be removed from service endpoints if the probe
+                        fails. Cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes'
+                      properties:
+                        exec:
+                          description: Exec specifies the action to take.
+                          properties:
+                            command:
+                              description: Command is the command line to execute
+                                inside the container, the working directory for the
+                                command  is root ('/') in the container's filesystem.
+                                The command is simply exec'd, it is not run inside
+                                a shell, so traditional shell instructions ('|', etc)
+                                won't work. To use a shell, you need to explicitly
+                                call out to that shell. Exit status of 0 is treated
+                                as live/healthy and non-zero is unhealthy.
+                              items:
+                                type: string
+                              type: array
+                          type: object
+                        failureThreshold:
+                          description: Minimum consecutive failures for the probe
+                            to be considered failed after having succeeded. Defaults
+                            to 3. Minimum value is 1.
+                          format: int32
+                          type: integer
+                        grpc:
+                          description: GRPC specifies an action involving a GRPC port.
+                          properties:
+                            port:
+                              description: Port number of the gRPC service. Number
+                                must be in the range 1 to 65535.
+                              format: int32
+                              type: integer
+                            service:
+                              description: "Service is the name of the service to
+                                place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
+                                \n If this is not specified, the default behavior
+                                is defined by gRPC."
+                              type: string
+                          required:
+                          - port
+                          type: object
+                        httpGet:
+                          description: HTTPGet specifies the http request to perform.
+                          properties:
+                            host:
+                              description: Host name to connect to, defaults to the
+                                pod IP. You probably want to set "Host" in httpHeaders
+                                instead.
+                              type: string
+                            httpHeaders:
+                              description: Custom headers to set in the request. HTTP
+                                allows repeated headers.
+                              items:
+                                description: HTTPHeader describes a custom header
+                                  to be used in HTTP probes
+                                properties:
+                                  name:
+                                    description: The header field name. This will
+                                      be canonicalized upon output, so case-variant
+                                      names will be understood as the same header.
+                                    type: string
+                                  value:
+                                    description: The header field value
+                                    type: string
+                                required:
+                                - name
+                                - value
+                                type: object
+                              type: array
+                            path:
+                              description: Path to access on the HTTP server.
+                              type: string
+                            port:
+                              anyOf:
+                              - type: integer
+                              - type: string
+                              description: Name or number of the port to access on
+                                the container. Number must be in the range 1 to 65535.
+                                Name must be an IANA_SVC_NAME.
+                              x-kubernetes-int-or-string: true
+                            scheme:
+                              description: Scheme to use for connecting to the host.
+                                Defaults to HTTP.
+                              type: string
+                          required:
+                          - port
+                          type: object
+                        initialDelaySeconds:
+                          description: 'Number of seconds after the container has
+                            started before liveness probes are initiated. More info:
+                            https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes'
+                          format: int32
+                          type: integer
+                        periodSeconds:
+                          description: How often (in seconds) to perform the probe.
+                            Default to 10 seconds. Minimum value is 1.
+                          format: int32
+                          type: integer
+                        successThreshold:
+                          description: Minimum consecutive successes for the probe
+                            to be considered successful after having failed. Defaults
+                            to 1. Must be 1 for liveness and startup. Minimum value
+                            is 1.
+                          format: int32
+                          type: integer
+                        tcpSocket:
+                          description: TCPSocket specifies an action involving a TCP
+                            port.
+                          properties:
+                            host:
+                              description: 'Optional: Host name to connect to, defaults
+                                to the pod IP.'
+                              type: string
+                            port:
+                              anyOf:
+                              - type: integer
+                              - type: string
+                              description: Number or name of the port to access on
+                                the container. Number must be in the range 1 to 65535.
+                                Name must be an IANA_SVC_NAME.
+                              x-kubernetes-int-or-string: true
+                          required:
+                          - port
+                          type: object
+                        terminationGracePeriodSeconds:
+                          description: Optional duration in seconds the pod needs
+                            to terminate gracefully upon probe failure. The grace
+                            period is the duration in seconds after the processes
+                            running in the pod are sent a termination signal and the
+                            time when the processes are forcibly halted with a kill
+                            signal. Set this value longer than the expected cleanup
+                            time for your process. If this value is nil, the pod's
+                            terminationGracePeriodSeconds will be used. Otherwise,
+                            this value overrides the value provided by the pod spec.
+                            Value must be non-negative integer. The value zero indicates
+                            stop immediately via the kill signal (no opportunity to
+                            shut down). This is a beta field and requires enabling
+                            ProbeTerminationGracePeriod feature gate. Minimum value
+                            is 1. spec.terminationGracePeriodSeconds is used if unset.
+                          format: int64
+                          type: integer
+                        timeoutSeconds:
+                          description: 'Number of seconds after which the probe times
+                            out. Defaults to 1 second. Minimum value is 1. More info:
+                            https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes'
+                          format: int32
+                          type: integer
+                      type: object
+                    resizePolicy:
+                      description: Resources resize policy for the container.
+                      items:
+                        description: ContainerResizePolicy represents resource resize
+                          policy for the container.
+                        properties:
+                          resourceName:
+                            description: 'Name of the resource to which this resource
+                              resize policy applies. Supported values: cpu, memory.'
+                            type: string
+                          restartPolicy:
+                            description: Restart policy to apply when specified resource
+                              is resized. If not specified, it defaults to NotRequired.
+                            type: string
+                        required:
+                        - resourceName
+                        - restartPolicy
+                        type: object
+                      type: array
+                      x-kubernetes-list-type: atomic
+                    resources:
+                      description: 'Compute Resources required by this container.
+                        Cannot be updated. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/'
+                      properties:
+                        claims:
+                          description: "Claims lists the names of resources, defined
+                            in spec.resourceClaims, that are used by this container.
+                            \n This is an alpha field and requires enabling the DynamicResourceAllocation
+                            feature gate. \n This field is immutable. It can only
+                            be set for containers."
+                          items:
+                            description: ResourceClaim references one entry in PodSpec.ResourceClaims.
+                            properties:
+                              name:
+                                description: Name must match the name of one entry
+                                  in pod.spec.resourceClaims of the Pod where this
+                                  field is used. It makes that resource available
+                                  inside a container.
+                                type: string
+                            required:
+                            - name
+                            type: object
+                          type: array
+                          x-kubernetes-list-map-keys:
+                          - name
+                          x-kubernetes-list-type: map
+                        limits:
+                          additionalProperties:
+                            anyOf:
+                            - type: integer
+                            - type: string
+                            pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
+                            x-kubernetes-int-or-string: true
+                          description: 'Limits describes the maximum amount of compute
+                            resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/'
+                          type: object
+                        requests:
+                          additionalProperties:
+                            anyOf:
+                            - type: integer
+                            - type: string
+                            pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
+                            x-kubernetes-int-or-string: true
+                          description: 'Requests describes the minimum amount of compute
+                            resources required. If Requests is omitted for a container,
+                            it defaults to Limits if that is explicitly specified,
+                            otherwise to an implementation-defined value. Requests
+                            cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/'
+                          type: object
+                      type: object
+                    restartPolicy:
+                      description: 'RestartPolicy defines the restart behavior of
+                        individual containers in a pod. This field may only be set
+                        for init containers, and the only allowed value is "Always".
+                        For non-init containers or when this field is not specified,
+                        the restart behavior is defined by the Pod''s restart policy
+                        and the container type. Setting the RestartPolicy as "Always"
+                        for the init container will have the following effect: this
+                        init container will be continually restarted on exit until
+                        all regular containers have terminated. Once all regular containers
+                        have completed, all init containers with restartPolicy "Always"
+                        will be shut down. This lifecycle differs from normal init
+                        containers and is often referred to as a "sidecar" container.
+                        Although this init container still starts in the init container
+                        sequence, it does not wait for the container to complete before
+                        proceeding to the next init container. Instead, the next init
+                        container starts immediately after this init container is
+                        started, or after any startupProbe has successfully completed.'
+                      type: string
+                    securityContext:
+                      description: 'SecurityContext defines the security options the
+                        container should be run with. If set, the fields of SecurityContext
+                        override the equivalent fields of PodSecurityContext. More
+                        info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/'
+                      properties:
+                        allowPrivilegeEscalation:
+                          description: 'AllowPrivilegeEscalation controls whether
+                            a process can gain more privileges than its parent process.
+                            This bool directly controls if the no_new_privs flag will
+                            be set on the container process. AllowPrivilegeEscalation
+                            is true always when the container is: 1) run as Privileged
+                            2) has CAP_SYS_ADMIN Note that this field cannot be set
+                            when spec.os.name is windows.'
+                          type: boolean
+                        capabilities:
+                          description: The capabilities to add/drop when running containers.
+                            Defaults to the default set of capabilities granted by
+                            the container runtime. Note that this field cannot be
+                            set when spec.os.name is windows.
+                          properties:
+                            add:
+                              description: Added capabilities
+                              items:
+                                description: Capability represent POSIX capabilities
+                                  type
+                                type: string
+                              type: array
+                            drop:
+                              description: Removed capabilities
+                              items:
+                                description: Capability represent POSIX capabilities
+                                  type
+                                type: string
+                              type: array
+                          type: object
+                        privileged:
+                          description: Run container in privileged mode. Processes
+                            in privileged containers are essentially equivalent to
+                            root on the host. Defaults to false. Note that this field
+                            cannot be set when spec.os.name is windows.
+                          type: boolean
+                        procMount:
+                          description: procMount denotes the type of proc mount to
+                            use for the containers. The default is DefaultProcMount
+                            which uses the container runtime defaults for readonly
+                            paths and masked paths. This requires the ProcMountType
+                            feature flag to be enabled. Note that this field cannot
+                            be set when spec.os.name is windows.
+                          type: string
+                        readOnlyRootFilesystem:
+                          description: Whether this container has a read-only root
+                            filesystem. Default is false. Note that this field cannot
+                            be set when spec.os.name is windows.
+                          type: boolean
+                        runAsGroup:
+                          description: The GID to run the entrypoint of the container
+                            process. Uses runtime default if unset. May also be set
+                            in PodSecurityContext.  If set in both SecurityContext
+                            and PodSecurityContext, the value specified in SecurityContext
+                            takes precedence. Note that this field cannot be set when
+                            spec.os.name is windows.
+                          format: int64
+                          type: integer
+                        runAsNonRoot:
+                          description: Indicates that the container must run as a
+                            non-root user. If true, the Kubelet will validate the
+                            image at runtime to ensure that it does not run as UID
+                            0 (root) and fail to start the container if it does. If
+                            unset or false, no such validation will be performed.
+                            May also be set in PodSecurityContext.  If set in both
+                            SecurityContext and PodSecurityContext, the value specified
+                            in SecurityContext takes precedence.
+                          type: boolean
+                        runAsUser:
+                          description: The UID to run the entrypoint of the container
+                            process. Defaults to user specified in image metadata
+                            if unspecified. May also be set in PodSecurityContext.  If
+                            set in both SecurityContext and PodSecurityContext, the
+                            value specified in SecurityContext takes precedence. Note
+                            that this field cannot be set when spec.os.name is windows.
+                          format: int64
+                          type: integer
+                        seLinuxOptions:
+                          description: The SELinux context to be applied to the container.
+                            If unspecified, the container runtime will allocate a
+                            random SELinux context for each container.  May also be
+                            set in PodSecurityContext.  If set in both SecurityContext
+                            and PodSecurityContext, the value specified in SecurityContext
+                            takes precedence. Note that this field cannot be set when
+                            spec.os.name is windows.
+                          properties:
+                            level:
+                              description: Level is SELinux level label that applies
+                                to the container.
+                              type: string
+                            role:
+                              description: Role is a SELinux role label that applies
+                                to the container.
+                              type: string
+                            type:
+                              description: Type is a SELinux type label that applies
+                                to the container.
+                              type: string
+                            user:
+                              description: User is a SELinux user label that applies
+                                to the container.
+                              type: string
+                          type: object
+                        seccompProfile:
+                          description: The seccomp options to use by this container.
+                            If seccomp options are provided at both the pod & container
+                            level, the container options override the pod options.
+                            Note that this field cannot be set when spec.os.name is
+                            windows.
+                          properties:
+                            localhostProfile:
+                              description: localhostProfile indicates a profile defined
+                                in a file on the node should be used. The profile
+                                must be preconfigured on the node to work. Must be
+                                a descending path, relative to the kubelet's configured
+                                seccomp profile location. Must be set if type is "Localhost".
+                                Must NOT be set for any other type.
+                              type: string
+                            type:
+                              description: "type indicates which kind of seccomp profile
+                                will be applied. Valid options are: \n Localhost -
+                                a profile defined in a file on the node should be
+                                used. RuntimeDefault - the container runtime default
+                                profile should be used. Unconfined - no profile should
+                                be applied."
+                              type: string
+                          required:
+                          - type
+                          type: object
+                        windowsOptions:
+                          description: The Windows specific settings applied to all
+                            containers. If unspecified, the options from the PodSecurityContext
+                            will be used. If set in both SecurityContext and PodSecurityContext,
+                            the value specified in SecurityContext takes precedence.
+                            Note that this field cannot be set when spec.os.name is
+                            linux.
+                          properties:
+                            gmsaCredentialSpec:
+                              description: GMSACredentialSpec is where the GMSA admission
+                                webhook (https://github.com/kubernetes-sigs/windows-gmsa)
+                                inlines the contents of the GMSA credential spec named
+                                by the GMSACredentialSpecName field.
+                              type: string
+                            gmsaCredentialSpecName:
+                              description: GMSACredentialSpecName is the name of the
+                                GMSA credential spec to use.
+                              type: string
+                            hostProcess:
+                              description: HostProcess determines if a container should
+                                be run as a 'Host Process' container. All of a Pod's
+                                containers must have the same effective HostProcess
+                                value (it is not allowed to have a mix of HostProcess
+                                containers and non-HostProcess containers). In addition,
+                                if HostProcess is true then HostNetwork must also
+                                be set to true.
+                              type: boolean
+                            runAsUserName:
+                              description: The UserName in Windows to run the entrypoint
+                                of the container process. Defaults to the user specified
+                                in image metadata if unspecified. May also be set
+                                in PodSecurityContext. If set in both SecurityContext
+                                and PodSecurityContext, the value specified in SecurityContext
+                                takes precedence.
+                              type: string
+                          type: object
+                      type: object
+                    startupProbe:
+                      description: 'StartupProbe indicates that the Pod has successfully
+                        initialized. If specified, no other probes are executed until
+                        this completes successfully. If this probe fails, the Pod
+                        will be restarted, just as if the livenessProbe failed. This
+                        can be used to provide different probe parameters at the beginning
+                        of a Pod''s lifecycle, when it might take a long time to load
+                        data or warm a cache, than during steady-state operation.
+                        This cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes'
+                      properties:
+                        exec:
+                          description: Exec specifies the action to take.
+                          properties:
+                            command:
+                              description: Command is the command line to execute
+                                inside the container, the working directory for the
+                                command  is root ('/') in the container's filesystem.
+                                The command is simply exec'd, it is not run inside
+                                a shell, so traditional shell instructions ('|', etc)
+                                won't work. To use a shell, you need to explicitly
+                                call out to that shell. Exit status of 0 is treated
+                                as live/healthy and non-zero is unhealthy.
+                              items:
+                                type: string
+                              type: array
+                          type: object
+                        failureThreshold:
+                          description: Minimum consecutive failures for the probe
+                            to be considered failed after having succeeded. Defaults
+                            to 3. Minimum value is 1.
+                          format: int32
+                          type: integer
+                        grpc:
+                          description: GRPC specifies an action involving a GRPC port.
+                          properties:
+                            port:
+                              description: Port number of the gRPC service. Number
+                                must be in the range 1 to 65535.
+                              format: int32
+                              type: integer
+                            service:
+                              description: "Service is the name of the service to
+                                place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
+                                \n If this is not specified, the default behavior
+                                is defined by gRPC."
+                              type: string
+                          required:
+                          - port
+                          type: object
+                        httpGet:
+                          description: HTTPGet specifies the http request to perform.
+                          properties:
+                            host:
+                              description: Host name to connect to, defaults to the
+                                pod IP. You probably want to set "Host" in httpHeaders
+                                instead.
+                              type: string
+                            httpHeaders:
+                              description: Custom headers to set in the request. HTTP
+                                allows repeated headers.
+                              items:
+                                description: HTTPHeader describes a custom header
+                                  to be used in HTTP probes
+                                properties:
+                                  name:
+                                    description: The header field name. This will
+                                      be canonicalized upon output, so case-variant
+                                      names will be understood as the same header.
+                                    type: string
+                                  value:
+                                    description: The header field value
+                                    type: string
+                                required:
+                                - name
+                                - value
+                                type: object
+                              type: array
+                            path:
+                              description: Path to access on the HTTP server.
+                              type: string
+                            port:
+                              anyOf:
+                              - type: integer
+                              - type: string
+                              description: Name or number of the port to access on
+                                the container. Number must be in the range 1 to 65535.
+                                Name must be an IANA_SVC_NAME.
+                              x-kubernetes-int-or-string: true
+                            scheme:
+                              description: Scheme to use for connecting to the host.
+                                Defaults to HTTP.
+                              type: string
+                          required:
+                          - port
+                          type: object
+                        initialDelaySeconds:
+                          description: 'Number of seconds after the container has
+                            started before liveness probes are initiated. More info:
+                            https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes'
+                          format: int32
+                          type: integer
+                        periodSeconds:
+                          description: How often (in seconds) to perform the probe.
+                            Default to 10 seconds. Minimum value is 1.
+                          format: int32
+                          type: integer
+                        successThreshold:
+                          description: Minimum consecutive successes for the probe
+                            to be considered successful after having failed. Defaults
+                            to 1. Must be 1 for liveness and startup. Minimum value
+                            is 1.
+                          format: int32
+                          type: integer
+                        tcpSocket:
+                          description: TCPSocket specifies an action involving a TCP
+                            port.
+                          properties:
+                            host:
+                              description: 'Optional: Host name to connect to, defaults
+                                to the pod IP.'
+                              type: string
+                            port:
+                              anyOf:
+                              - type: integer
+                              - type: string
+                              description: Number or name of the port to access on
+                                the container. Number must be in the range 1 to 65535.
+                                Name must be an IANA_SVC_NAME.
+                              x-kubernetes-int-or-string: true
+                          required:
+                          - port
+                          type: object
+                        terminationGracePeriodSeconds:
+                          description: Optional duration in seconds the pod needs
+                            to terminate gracefully upon probe failure. The grace
+                            period is the duration in seconds after the processes
+                            running in the pod are sent a termination signal and the
+                            time when the processes are forcibly halted with a kill
+                            signal. Set this value longer than the expected cleanup
+                            time for your process. If this value is nil, the pod's
+                            terminationGracePeriodSeconds will be used. Otherwise,
+                            this value overrides the value provided by the pod spec.
+                            Value must be non-negative integer. The value zero indicates
+                            stop immediately via the kill signal (no opportunity to
+                            shut down). This is a beta field and requires enabling
+                            ProbeTerminationGracePeriod feature gate. Minimum value
+                            is 1. spec.terminationGracePeriodSeconds is used if unset.
+                          format: int64
+                          type: integer
+                        timeoutSeconds:
+                          description: 'Number of seconds after which the probe times
+                            out. Defaults to 1 second. Minimum value is 1. More info:
+                            https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes'
+                          format: int32
+                          type: integer
+                      type: object
+                    stdin:
+                      description: Whether this container should allocate a buffer
+                        for stdin in the container runtime. If this is not set, reads
+                        from stdin in the container will always result in EOF. Default
+                        is false.
+                      type: boolean
+                    stdinOnce:
+                      description: Whether the container runtime should close the
+                        stdin channel after it has been opened by a single attach.
+                        When stdin is true the stdin stream will remain open across
+                        multiple attach sessions. If stdinOnce is set to true, stdin
+                        is opened on container start, is empty until the first client
+                        attaches to stdin, and then remains open and accepts data
+                        until the client disconnects, at which time stdin is closed
+                        and remains closed until the container is restarted. If this
+                        flag is false, a container processes that reads from stdin
+                        will never receive an EOF. Default is false
+                      type: boolean
+                    terminationMessagePath:
+                      description: 'Optional: Path at which the file to which the
+                        container''s termination message will be written is mounted
+                        into the container''s filesystem. Message written is intended
+                        to be brief final status, such as an assertion failure message.
+                        Will be truncated by the node if greater than 4096 bytes.
+                        The total message length across all containers will be limited
+                        to 12kb. Defaults to /dev/termination-log. Cannot be updated.'
+                      type: string
+                    terminationMessagePolicy:
+                      description: Indicate how the termination message should be
+                        populated. File will use the contents of terminationMessagePath
+                        to populate the container status message on both success and
+                        failure. FallbackToLogsOnError will use the last chunk of
+                        container log output if the termination message file is empty
+                        and the container exited with an error. The log output is
+                        limited to 2048 bytes or 80 lines, whichever is smaller. Defaults
+                        to File. Cannot be updated.
+                      type: string
+                    tty:
+                      description: Whether this container should allocate a TTY for
+                        itself, also requires 'stdin' to be true. Default is false.
+                      type: boolean
+                    volumeDevices:
+                      description: volumeDevices is the list of block devices to be
+                        used by the container.
+                      items:
+                        description: volumeDevice describes a mapping of a raw block
+                          device within a container.
+                        properties:
+                          devicePath:
+                            description: devicePath is the path inside of the container
+                              that the device will be mapped to.
+                            type: string
+                          name:
+                            description: name must match the name of a persistentVolumeClaim
+                              in the pod
+                            type: string
+                        required:
+                        - devicePath
+                        - name
+                        type: object
+                      type: array
+                    volumeMounts:
+                      description: Pod volumes to mount into the container's filesystem.
+                        Cannot be updated.
+                      items:
+                        description: VolumeMount describes a mounting of a Volume
+                          within a container.
+                        properties:
+                          mountPath:
+                            description: Path within the container at which the volume
+                              should be mounted.  Must not contain ':'.
+                            type: string
+                          mountPropagation:
+                            description: mountPropagation determines how mounts are
+                              propagated from the host to container and the other
+                              way around. When not set, MountPropagationNone is used.
+                              This field is beta in 1.10.
+                            type: string
+                          name:
+                            description: This must match the Name of a Volume.
+                            type: string
+                          readOnly:
+                            description: Mounted read-only if true, read-write otherwise
+                              (false or unspecified). Defaults to false.
+                            type: boolean
+                          subPath:
+                            description: Path within the volume from which the container's
+                              volume should be mounted. Defaults to "" (volume's root).
+                            type: string
+                          subPathExpr:
+                            description: Expanded path within the volume from which
+                              the container's volume should be mounted. Behaves similarly
+                              to SubPath but environment variable references $(VAR_NAME)
+                              are expanded using the container's environment. Defaults
+                              to "" (volume's root). SubPathExpr and SubPath are mutually
+                              exclusive.
+                            type: string
+                        required:
+                        - mountPath
+                        - name
+                        type: object
+                      type: array
+                    workingDir:
+                      description: Container's working directory. If not specified,
+                        the container runtime's default will be used, which might
+                        be configured in the container image. Cannot be updated.
+                      type: string
+                  required:
+                  - name
+                  type: object
+                type: array
+              disableReporting:
+                default: false
+                description: disableReporting disables reporting of enabled feature
+                  flags to Grafana.
+                type: boolean
+              disableSupportBundle:
+                default: false
+                description: disableSupportBundle disables the generation of support
+                  bundles.
+                type: boolean
+              enableConfigReadAPI:
+                default: false
+                description: enableConfigReadAPI enables the read API for viewing
+                  the currently running config port 8080 on the agent.
+                type: boolean
+              image:
+                description: Image, when specified, overrides the image used to run
+                  Agent. Specify the image along with a tag. You still need to set
+                  the version to ensure Grafana Agent Operator knows which version
+                  of Grafana Agent is being configured.
+                type: string
+              imagePullSecrets:
+                description: 'ImagePullSecrets holds an optional list of references
+                  to Secrets within the same namespace used for pulling the Grafana
+                  Agent image from registries. More info: https://kubernetes.io/docs/concepts/containers/images/#specifying-imagepullsecrets-on-a-pod'
+                items:
+                  description: LocalObjectReference contains enough information to
+                    let you locate the referenced object inside the same namespace.
+                  properties:
+                    name:
+                      description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                        TODO: Add other useful fields. apiVersion, kind, uid?'
+                      type: string
+                  type: object
+                  x-kubernetes-map-type: atomic
+                type: array
+              initContainers:
+                description: 'InitContainers let you add initContainers to the pod
+                  definition. These can be used to, for example, fetch secrets for
+                  injection into the Grafana Agent configuration from external sources.
+                  Errors during the execution of an initContainer cause the pod to
+                  restart. More info: https://kubernetes.io/docs/concepts/workloads/pods/init-containers/
+                  Using initContainers for any use case other than secret fetching
+                  is entirely outside the scope of what the Grafana Agent maintainers
+                  support and by doing so, you accept that this behavior may break
+                  at any time without notice.'
+                items:
+                  description: A single application container that you want to run
+                    within a pod.
+                  properties:
+                    args:
+                      description: 'Arguments to the entrypoint. The container image''s
+                        CMD is used if this is not provided. Variable references $(VAR_NAME)
+                        are expanded using the container''s environment. If a variable
+                        cannot be resolved, the reference in the input string will
+                        be unchanged. Double $$ are reduced to a single $, which allows
+                        for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will
+                        produce the string literal "$(VAR_NAME)". Escaped references
+                        will never be expanded, regardless of whether the variable
+                        exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell'
+                      items:
+                        type: string
+                      type: array
+                    command:
+                      description: 'Entrypoint array. Not executed within a shell.
+                        The container image''s ENTRYPOINT is used if this is not provided.
+                        Variable references $(VAR_NAME) are expanded using the container''s
+                        environment. If a variable cannot be resolved, the reference
+                        in the input string will be unchanged. Double $$ are reduced
+                        to a single $, which allows for escaping the $(VAR_NAME) syntax:
+                        i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)".
+                        Escaped references will never be expanded, regardless of whether
+                        the variable exists or not. Cannot be updated. More info:
+                        https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell'
+                      items:
+                        type: string
+                      type: array
+                    env:
+                      description: List of environment variables to set in the container.
+                        Cannot be updated.
+                      items:
+                        description: EnvVar represents an environment variable present
+                          in a Container.
+                        properties:
+                          name:
+                            description: Name of the environment variable. Must be
+                              a C_IDENTIFIER.
+                            type: string
+                          value:
+                            description: 'Variable references $(VAR_NAME) are expanded
+                              using the previously defined environment variables in
+                              the container and any service environment variables.
+                              If a variable cannot be resolved, the reference in the
+                              input string will be unchanged. Double $$ are reduced
+                              to a single $, which allows for escaping the $(VAR_NAME)
+                              syntax: i.e. "$$(VAR_NAME)" will produce the string
+                              literal "$(VAR_NAME)". Escaped references will never
+                              be expanded, regardless of whether the variable exists
+                              or not. Defaults to "".'
+                            type: string
+                          valueFrom:
+                            description: Source for the environment variable's value.
+                              Cannot be used if value is not empty.
+                            properties:
+                              configMapKeyRef:
+                                description: Selects a key of a ConfigMap.
+                                properties:
+                                  key:
+                                    description: The key to select.
+                                    type: string
+                                  name:
+                                    description: 'Name of the referent. More info:
+                                      https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                      TODO: Add other useful fields. apiVersion, kind,
+                                      uid?'
+                                    type: string
+                                  optional:
+                                    description: Specify whether the ConfigMap or
+                                      its key must be defined
+                                    type: boolean
+                                required:
+                                - key
+                                type: object
+                                x-kubernetes-map-type: atomic
+                              fieldRef:
+                                description: 'Selects a field of the pod: supports
+                                  metadata.name, metadata.namespace, `metadata.labels[''<KEY>'']`,
+                                  `metadata.annotations[''<KEY>'']`, spec.nodeName,
+                                  spec.serviceAccountName, status.hostIP, status.podIP,
+                                  status.podIPs.'
+                                properties:
+                                  apiVersion:
+                                    description: Version of the schema the FieldPath
+                                      is written in terms of, defaults to "v1".
+                                    type: string
+                                  fieldPath:
+                                    description: Path of the field to select in the
+                                      specified API version.
+                                    type: string
+                                required:
+                                - fieldPath
+                                type: object
+                                x-kubernetes-map-type: atomic
+                              resourceFieldRef:
+                                description: 'Selects a resource of the container:
+                                  only resources limits and requests (limits.cpu,
+                                  limits.memory, limits.ephemeral-storage, requests.cpu,
+                                  requests.memory and requests.ephemeral-storage)
+                                  are currently supported.'
+                                properties:
+                                  containerName:
+                                    description: 'Container name: required for volumes,
+                                      optional for env vars'
+                                    type: string
+                                  divisor:
+                                    anyOf:
+                                    - type: integer
+                                    - type: string
+                                    description: Specifies the output format of the
+                                      exposed resources, defaults to "1"
+                                    pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
+                                    x-kubernetes-int-or-string: true
+                                  resource:
+                                    description: 'Required: resource to select'
+                                    type: string
+                                required:
+                                - resource
+                                type: object
+                                x-kubernetes-map-type: atomic
+                              secretKeyRef:
+                                description: Selects a key of a secret in the pod's
+                                  namespace
+                                properties:
+                                  key:
+                                    description: The key of the secret to select from.  Must
+                                      be a valid secret key.
+                                    type: string
+                                  name:
+                                    description: 'Name of the referent. More info:
+                                      https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                      TODO: Add other useful fields. apiVersion, kind,
+                                      uid?'
+                                    type: string
+                                  optional:
+                                    description: Specify whether the Secret or its
+                                      key must be defined
+                                    type: boolean
+                                required:
+                                - key
+                                type: object
+                                x-kubernetes-map-type: atomic
+                            type: object
+                        required:
+                        - name
+                        type: object
+                      type: array
+                    envFrom:
+                      description: List of sources to populate environment variables
+                        in the container. The keys defined within a source must be
+                        a C_IDENTIFIER. All invalid keys will be reported as an event
+                        when the container is starting. When a key exists in multiple
+                        sources, the value associated with the last source will take
+                        precedence. Values defined by an Env with a duplicate key
+                        will take precedence. Cannot be updated.
+                      items:
+                        description: EnvFromSource represents the source of a set
+                          of ConfigMaps
+                        properties:
+                          configMapRef:
+                            description: The ConfigMap to select from
+                            properties:
+                              name:
+                                description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                  TODO: Add other useful fields. apiVersion, kind,
+                                  uid?'
+                                type: string
+                              optional:
+                                description: Specify whether the ConfigMap must be
+                                  defined
+                                type: boolean
+                            type: object
+                            x-kubernetes-map-type: atomic
+                          prefix:
+                            description: An optional identifier to prepend to each
+                              key in the ConfigMap. Must be a C_IDENTIFIER.
+                            type: string
+                          secretRef:
+                            description: The Secret to select from
+                            properties:
+                              name:
+                                description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                  TODO: Add other useful fields. apiVersion, kind,
+                                  uid?'
+                                type: string
+                              optional:
+                                description: Specify whether the Secret must be defined
+                                type: boolean
+                            type: object
+                            x-kubernetes-map-type: atomic
+                        type: object
+                      type: array
+                    image:
+                      description: 'Container image name. More info: https://kubernetes.io/docs/concepts/containers/images
+                        This field is optional to allow higher level config management
+                        to default or override container images in workload controllers
+                        like Deployments and StatefulSets.'
+                      type: string
+                    imagePullPolicy:
+                      description: 'Image pull policy. One of Always, Never, IfNotPresent.
+                        Defaults to Always if :latest tag is specified, or IfNotPresent
+                        otherwise. Cannot be updated. More info: https://kubernetes.io/docs/concepts/containers/images#updating-images'
+                      type: string
+                    lifecycle:
+                      description: Actions that the management system should take
+                        in response to container lifecycle events. Cannot be updated.
+                      properties:
+                        postStart:
+                          description: 'PostStart is called immediately after a container
+                            is created. If the handler fails, the container is terminated
+                            and restarted according to its restart policy. Other management
+                            of the container blocks until the hook completes. More
+                            info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks'
+                          properties:
+                            exec:
+                              description: Exec specifies the action to take.
+                              properties:
+                                command:
+                                  description: Command is the command line to execute
+                                    inside the container, the working directory for
+                                    the command  is root ('/') in the container's
+                                    filesystem. The command is simply exec'd, it is
+                                    not run inside a shell, so traditional shell instructions
+                                    ('|', etc) won't work. To use a shell, you need
+                                    to explicitly call out to that shell. Exit status
+                                    of 0 is treated as live/healthy and non-zero is
+                                    unhealthy.
+                                  items:
+                                    type: string
+                                  type: array
+                              type: object
+                            httpGet:
+                              description: HTTPGet specifies the http request to perform.
+                              properties:
+                                host:
+                                  description: Host name to connect to, defaults to
+                                    the pod IP. You probably want to set "Host" in
+                                    httpHeaders instead.
+                                  type: string
+                                httpHeaders:
+                                  description: Custom headers to set in the request.
+                                    HTTP allows repeated headers.
+                                  items:
+                                    description: HTTPHeader describes a custom header
+                                      to be used in HTTP probes
+                                    properties:
+                                      name:
+                                        description: The header field name. This will
+                                          be canonicalized upon output, so case-variant
+                                          names will be understood as the same header.
+                                        type: string
+                                      value:
+                                        description: The header field value
+                                        type: string
+                                    required:
+                                    - name
+                                    - value
+                                    type: object
+                                  type: array
+                                path:
+                                  description: Path to access on the HTTP server.
+                                  type: string
+                                port:
+                                  anyOf:
+                                  - type: integer
+                                  - type: string
+                                  description: Name or number of the port to access
+                                    on the container. Number must be in the range
+                                    1 to 65535. Name must be an IANA_SVC_NAME.
+                                  x-kubernetes-int-or-string: true
+                                scheme:
+                                  description: Scheme to use for connecting to the
+                                    host. Defaults to HTTP.
+                                  type: string
+                              required:
+                              - port
+                              type: object
+                            tcpSocket:
+                              description: Deprecated. TCPSocket is NOT supported
+                                as a LifecycleHandler and kept for the backward compatibility.
+                                There are no validation of this field and lifecycle
+                                hooks will fail in runtime when tcp handler is specified.
+                              properties:
+                                host:
+                                  description: 'Optional: Host name to connect to,
+                                    defaults to the pod IP.'
+                                  type: string
+                                port:
+                                  anyOf:
+                                  - type: integer
+                                  - type: string
+                                  description: Number or name of the port to access
+                                    on the container. Number must be in the range
+                                    1 to 65535. Name must be an IANA_SVC_NAME.
+                                  x-kubernetes-int-or-string: true
+                              required:
+                              - port
+                              type: object
+                          type: object
+                        preStop:
+                          description: 'PreStop is called immediately before a container
+                            is terminated due to an API request or management event
+                            such as liveness/startup probe failure, preemption, resource
+                            contention, etc. The handler is not called if the container
+                            crashes or exits. The Pod''s termination grace period
+                            countdown begins before the PreStop hook is executed.
+                            Regardless of the outcome of the handler, the container
+                            will eventually terminate within the Pod''s termination
+                            grace period (unless delayed by finalizers). Other management
+                            of the container blocks until the hook completes or until
+                            the termination grace period is reached. More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks'
+                          properties:
+                            exec:
+                              description: Exec specifies the action to take.
+                              properties:
+                                command:
+                                  description: Command is the command line to execute
+                                    inside the container, the working directory for
+                                    the command  is root ('/') in the container's
+                                    filesystem. The command is simply exec'd, it is
+                                    not run inside a shell, so traditional shell instructions
+                                    ('|', etc) won't work. To use a shell, you need
+                                    to explicitly call out to that shell. Exit status
+                                    of 0 is treated as live/healthy and non-zero is
+                                    unhealthy.
+                                  items:
+                                    type: string
+                                  type: array
+                              type: object
+                            httpGet:
+                              description: HTTPGet specifies the http request to perform.
+                              properties:
+                                host:
+                                  description: Host name to connect to, defaults to
+                                    the pod IP. You probably want to set "Host" in
+                                    httpHeaders instead.
+                                  type: string
+                                httpHeaders:
+                                  description: Custom headers to set in the request.
+                                    HTTP allows repeated headers.
+                                  items:
+                                    description: HTTPHeader describes a custom header
+                                      to be used in HTTP probes
+                                    properties:
+                                      name:
+                                        description: The header field name. This will
+                                          be canonicalized upon output, so case-variant
+                                          names will be understood as the same header.
+                                        type: string
+                                      value:
+                                        description: The header field value
+                                        type: string
+                                    required:
+                                    - name
+                                    - value
+                                    type: object
+                                  type: array
+                                path:
+                                  description: Path to access on the HTTP server.
+                                  type: string
+                                port:
+                                  anyOf:
+                                  - type: integer
+                                  - type: string
+                                  description: Name or number of the port to access
+                                    on the container. Number must be in the range
+                                    1 to 65535. Name must be an IANA_SVC_NAME.
+                                  x-kubernetes-int-or-string: true
+                                scheme:
+                                  description: Scheme to use for connecting to the
+                                    host. Defaults to HTTP.
+                                  type: string
+                              required:
+                              - port
+                              type: object
+                            tcpSocket:
+                              description: Deprecated. TCPSocket is NOT supported
+                                as a LifecycleHandler and kept for the backward compatibility.
+                                There are no validation of this field and lifecycle
+                                hooks will fail in runtime when tcp handler is specified.
+                              properties:
+                                host:
+                                  description: 'Optional: Host name to connect to,
+                                    defaults to the pod IP.'
+                                  type: string
+                                port:
+                                  anyOf:
+                                  - type: integer
+                                  - type: string
+                                  description: Number or name of the port to access
+                                    on the container. Number must be in the range
+                                    1 to 65535. Name must be an IANA_SVC_NAME.
+                                  x-kubernetes-int-or-string: true
+                              required:
+                              - port
+                              type: object
+                          type: object
+                      type: object
+                    livenessProbe:
+                      description: 'Periodic probe of container liveness. Container
+                        will be restarted if the probe fails. Cannot be updated. More
+                        info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes'
+                      properties:
+                        exec:
+                          description: Exec specifies the action to take.
+                          properties:
+                            command:
+                              description: Command is the command line to execute
+                                inside the container, the working directory for the
+                                command  is root ('/') in the container's filesystem.
+                                The command is simply exec'd, it is not run inside
+                                a shell, so traditional shell instructions ('|', etc)
+                                won't work. To use a shell, you need to explicitly
+                                call out to that shell. Exit status of 0 is treated
+                                as live/healthy and non-zero is unhealthy.
+                              items:
+                                type: string
+                              type: array
+                          type: object
+                        failureThreshold:
+                          description: Minimum consecutive failures for the probe
+                            to be considered failed after having succeeded. Defaults
+                            to 3. Minimum value is 1.
+                          format: int32
+                          type: integer
+                        grpc:
+                          description: GRPC specifies an action involving a GRPC port.
+                          properties:
+                            port:
+                              description: Port number of the gRPC service. Number
+                                must be in the range 1 to 65535.
+                              format: int32
+                              type: integer
+                            service:
+                              description: "Service is the name of the service to
+                                place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
+                                \n If this is not specified, the default behavior
+                                is defined by gRPC."
+                              type: string
+                          required:
+                          - port
+                          type: object
+                        httpGet:
+                          description: HTTPGet specifies the http request to perform.
+                          properties:
+                            host:
+                              description: Host name to connect to, defaults to the
+                                pod IP. You probably want to set "Host" in httpHeaders
+                                instead.
+                              type: string
+                            httpHeaders:
+                              description: Custom headers to set in the request. HTTP
+                                allows repeated headers.
+                              items:
+                                description: HTTPHeader describes a custom header
+                                  to be used in HTTP probes
+                                properties:
+                                  name:
+                                    description: The header field name. This will
+                                      be canonicalized upon output, so case-variant
+                                      names will be understood as the same header.
+                                    type: string
+                                  value:
+                                    description: The header field value
+                                    type: string
+                                required:
+                                - name
+                                - value
+                                type: object
+                              type: array
+                            path:
+                              description: Path to access on the HTTP server.
+                              type: string
+                            port:
+                              anyOf:
+                              - type: integer
+                              - type: string
+                              description: Name or number of the port to access on
+                                the container. Number must be in the range 1 to 65535.
+                                Name must be an IANA_SVC_NAME.
+                              x-kubernetes-int-or-string: true
+                            scheme:
+                              description: Scheme to use for connecting to the host.
+                                Defaults to HTTP.
+                              type: string
+                          required:
+                          - port
+                          type: object
+                        initialDelaySeconds:
+                          description: 'Number of seconds after the container has
+                            started before liveness probes are initiated. More info:
+                            https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes'
+                          format: int32
+                          type: integer
+                        periodSeconds:
+                          description: How often (in seconds) to perform the probe.
+                            Default to 10 seconds. Minimum value is 1.
+                          format: int32
+                          type: integer
+                        successThreshold:
+                          description: Minimum consecutive successes for the probe
+                            to be considered successful after having failed. Defaults
+                            to 1. Must be 1 for liveness and startup. Minimum value
+                            is 1.
+                          format: int32
+                          type: integer
+                        tcpSocket:
+                          description: TCPSocket specifies an action involving a TCP
+                            port.
+                          properties:
+                            host:
+                              description: 'Optional: Host name to connect to, defaults
+                                to the pod IP.'
+                              type: string
+                            port:
+                              anyOf:
+                              - type: integer
+                              - type: string
+                              description: Number or name of the port to access on
+                                the container. Number must be in the range 1 to 65535.
+                                Name must be an IANA_SVC_NAME.
+                              x-kubernetes-int-or-string: true
+                          required:
+                          - port
+                          type: object
+                        terminationGracePeriodSeconds:
+                          description: Optional duration in seconds the pod needs
+                            to terminate gracefully upon probe failure. The grace
+                            period is the duration in seconds after the processes
+                            running in the pod are sent a termination signal and the
+                            time when the processes are forcibly halted with a kill
+                            signal. Set this value longer than the expected cleanup
+                            time for your process. If this value is nil, the pod's
+                            terminationGracePeriodSeconds will be used. Otherwise,
+                            this value overrides the value provided by the pod spec.
+                            Value must be non-negative integer. The value zero indicates
+                            stop immediately via the kill signal (no opportunity to
+                            shut down). This is a beta field and requires enabling
+                            ProbeTerminationGracePeriod feature gate. Minimum value
+                            is 1. spec.terminationGracePeriodSeconds is used if unset.
+                          format: int64
+                          type: integer
+                        timeoutSeconds:
+                          description: 'Number of seconds after which the probe times
+                            out. Defaults to 1 second. Minimum value is 1. More info:
+                            https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes'
+                          format: int32
+                          type: integer
+                      type: object
+                    name:
+                      description: Name of the container specified as a DNS_LABEL.
+                        Each container in a pod must have a unique name (DNS_LABEL).
+                        Cannot be updated.
+                      type: string
+                    ports:
+                      description: List of ports to expose from the container. Not
+                        specifying a port here DOES NOT prevent that port from being
+                        exposed. Any port which is listening on the default "0.0.0.0"
+                        address inside a container will be accessible from the network.
+                        Modifying this array with strategic merge patch may corrupt
+                        the data. For more information See https://github.com/kubernetes/kubernetes/issues/108255.
+                        Cannot be updated.
+                      items:
+                        description: ContainerPort represents a network port in a
+                          single container.
+                        properties:
+                          containerPort:
+                            description: Number of port to expose on the pod's IP
+                              address. This must be a valid port number, 0 < x < 65536.
+                            format: int32
+                            type: integer
+                          hostIP:
+                            description: What host IP to bind the external port to.
+                            type: string
+                          hostPort:
+                            description: Number of port to expose on the host. If
+                              specified, this must be a valid port number, 0 < x <
+                              65536. If HostNetwork is specified, this must match
+                              ContainerPort. Most containers do not need this.
+                            format: int32
+                            type: integer
+                          name:
+                            description: If specified, this must be an IANA_SVC_NAME
+                              and unique within the pod. Each named port in a pod
+                              must have a unique name. Name for the port that can
+                              be referred to by services.
+                            type: string
+                          protocol:
+                            default: TCP
+                            description: Protocol for port. Must be UDP, TCP, or SCTP.
+                              Defaults to "TCP".
+                            type: string
+                        required:
+                        - containerPort
+                        type: object
+                      type: array
+                      x-kubernetes-list-map-keys:
+                      - containerPort
+                      - protocol
+                      x-kubernetes-list-type: map
+                    readinessProbe:
+                      description: 'Periodic probe of container service readiness.
+                        Container will be removed from service endpoints if the probe
+                        fails. Cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes'
+                      properties:
+                        exec:
+                          description: Exec specifies the action to take.
+                          properties:
+                            command:
+                              description: Command is the command line to execute
+                                inside the container, the working directory for the
+                                command  is root ('/') in the container's filesystem.
+                                The command is simply exec'd, it is not run inside
+                                a shell, so traditional shell instructions ('|', etc)
+                                won't work. To use a shell, you need to explicitly
+                                call out to that shell. Exit status of 0 is treated
+                                as live/healthy and non-zero is unhealthy.
+                              items:
+                                type: string
+                              type: array
+                          type: object
+                        failureThreshold:
+                          description: Minimum consecutive failures for the probe
+                            to be considered failed after having succeeded. Defaults
+                            to 3. Minimum value is 1.
+                          format: int32
+                          type: integer
+                        grpc:
+                          description: GRPC specifies an action involving a GRPC port.
+                          properties:
+                            port:
+                              description: Port number of the gRPC service. Number
+                                must be in the range 1 to 65535.
+                              format: int32
+                              type: integer
+                            service:
+                              description: "Service is the name of the service to
+                                place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
+                                \n If this is not specified, the default behavior
+                                is defined by gRPC."
+                              type: string
+                          required:
+                          - port
+                          type: object
+                        httpGet:
+                          description: HTTPGet specifies the http request to perform.
+                          properties:
+                            host:
+                              description: Host name to connect to, defaults to the
+                                pod IP. You probably want to set "Host" in httpHeaders
+                                instead.
+                              type: string
+                            httpHeaders:
+                              description: Custom headers to set in the request. HTTP
+                                allows repeated headers.
+                              items:
+                                description: HTTPHeader describes a custom header
+                                  to be used in HTTP probes
+                                properties:
+                                  name:
+                                    description: The header field name. This will
+                                      be canonicalized upon output, so case-variant
+                                      names will be understood as the same header.
+                                    type: string
+                                  value:
+                                    description: The header field value
+                                    type: string
+                                required:
+                                - name
+                                - value
+                                type: object
+                              type: array
+                            path:
+                              description: Path to access on the HTTP server.
+                              type: string
+                            port:
+                              anyOf:
+                              - type: integer
+                              - type: string
+                              description: Name or number of the port to access on
+                                the container. Number must be in the range 1 to 65535.
+                                Name must be an IANA_SVC_NAME.
+                              x-kubernetes-int-or-string: true
+                            scheme:
+                              description: Scheme to use for connecting to the host.
+                                Defaults to HTTP.
+                              type: string
+                          required:
+                          - port
+                          type: object
+                        initialDelaySeconds:
+                          description: 'Number of seconds after the container has
+                            started before liveness probes are initiated. More info:
+                            https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes'
+                          format: int32
+                          type: integer
+                        periodSeconds:
+                          description: How often (in seconds) to perform the probe.
+                            Default to 10 seconds. Minimum value is 1.
+                          format: int32
+                          type: integer
+                        successThreshold:
+                          description: Minimum consecutive successes for the probe
+                            to be considered successful after having failed. Defaults
+                            to 1. Must be 1 for liveness and startup. Minimum value
+                            is 1.
+                          format: int32
+                          type: integer
+                        tcpSocket:
+                          description: TCPSocket specifies an action involving a TCP
+                            port.
+                          properties:
+                            host:
+                              description: 'Optional: Host name to connect to, defaults
+                                to the pod IP.'
+                              type: string
+                            port:
+                              anyOf:
+                              - type: integer
+                              - type: string
+                              description: Number or name of the port to access on
+                                the container. Number must be in the range 1 to 65535.
+                                Name must be an IANA_SVC_NAME.
+                              x-kubernetes-int-or-string: true
+                          required:
+                          - port
+                          type: object
+                        terminationGracePeriodSeconds:
+                          description: Optional duration in seconds the pod needs
+                            to terminate gracefully upon probe failure. The grace
+                            period is the duration in seconds after the processes
+                            running in the pod are sent a termination signal and the
+                            time when the processes are forcibly halted with a kill
+                            signal. Set this value longer than the expected cleanup
+                            time for your process. If this value is nil, the pod's
+                            terminationGracePeriodSeconds will be used. Otherwise,
+                            this value overrides the value provided by the pod spec.
+                            Value must be non-negative integer. The value zero indicates
+                            stop immediately via the kill signal (no opportunity to
+                            shut down). This is a beta field and requires enabling
+                            ProbeTerminationGracePeriod feature gate. Minimum value
+                            is 1. spec.terminationGracePeriodSeconds is used if unset.
+                          format: int64
+                          type: integer
+                        timeoutSeconds:
+                          description: 'Number of seconds after which the probe times
+                            out. Defaults to 1 second. Minimum value is 1. More info:
+                            https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes'
+                          format: int32
+                          type: integer
+                      type: object
+                    resizePolicy:
+                      description: Resources resize policy for the container.
+                      items:
+                        description: ContainerResizePolicy represents resource resize
+                          policy for the container.
+                        properties:
+                          resourceName:
+                            description: 'Name of the resource to which this resource
+                              resize policy applies. Supported values: cpu, memory.'
+                            type: string
+                          restartPolicy:
+                            description: Restart policy to apply when specified resource
+                              is resized. If not specified, it defaults to NotRequired.
+                            type: string
+                        required:
+                        - resourceName
+                        - restartPolicy
+                        type: object
+                      type: array
+                      x-kubernetes-list-type: atomic
+                    resources:
+                      description: 'Compute Resources required by this container.
+                        Cannot be updated. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/'
+                      properties:
+                        claims:
+                          description: "Claims lists the names of resources, defined
+                            in spec.resourceClaims, that are used by this container.
+                            \n This is an alpha field and requires enabling the DynamicResourceAllocation
+                            feature gate. \n This field is immutable. It can only
+                            be set for containers."
+                          items:
+                            description: ResourceClaim references one entry in PodSpec.ResourceClaims.
+                            properties:
+                              name:
+                                description: Name must match the name of one entry
+                                  in pod.spec.resourceClaims of the Pod where this
+                                  field is used. It makes that resource available
+                                  inside a container.
+                                type: string
+                            required:
+                            - name
+                            type: object
+                          type: array
+                          x-kubernetes-list-map-keys:
+                          - name
+                          x-kubernetes-list-type: map
+                        limits:
+                          additionalProperties:
+                            anyOf:
+                            - type: integer
+                            - type: string
+                            pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
+                            x-kubernetes-int-or-string: true
+                          description: 'Limits describes the maximum amount of compute
+                            resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/'
+                          type: object
+                        requests:
+                          additionalProperties:
+                            anyOf:
+                            - type: integer
+                            - type: string
+                            pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
+                            x-kubernetes-int-or-string: true
+                          description: 'Requests describes the minimum amount of compute
+                            resources required. If Requests is omitted for a container,
+                            it defaults to Limits if that is explicitly specified,
+                            otherwise to an implementation-defined value. Requests
+                            cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/'
+                          type: object
+                      type: object
+                    restartPolicy:
+                      description: 'RestartPolicy defines the restart behavior of
+                        individual containers in a pod. This field may only be set
+                        for init containers, and the only allowed value is "Always".
+                        For non-init containers or when this field is not specified,
+                        the restart behavior is defined by the Pod''s restart policy
+                        and the container type. Setting the RestartPolicy as "Always"
+                        for the init container will have the following effect: this
+                        init container will be continually restarted on exit until
+                        all regular containers have terminated. Once all regular containers
+                        have completed, all init containers with restartPolicy "Always"
+                        will be shut down. This lifecycle differs from normal init
+                        containers and is often referred to as a "sidecar" container.
+                        Although this init container still starts in the init container
+                        sequence, it does not wait for the container to complete before
+                        proceeding to the next init container. Instead, the next init
+                        container starts immediately after this init container is
+                        started, or after any startupProbe has successfully completed.'
+                      type: string
+                    securityContext:
+                      description: 'SecurityContext defines the security options the
+                        container should be run with. If set, the fields of SecurityContext
+                        override the equivalent fields of PodSecurityContext. More
+                        info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/'
+                      properties:
+                        allowPrivilegeEscalation:
+                          description: 'AllowPrivilegeEscalation controls whether
+                            a process can gain more privileges than its parent process.
+                            This bool directly controls if the no_new_privs flag will
+                            be set on the container process. AllowPrivilegeEscalation
+                            is true always when the container is: 1) run as Privileged
+                            2) has CAP_SYS_ADMIN Note that this field cannot be set
+                            when spec.os.name is windows.'
+                          type: boolean
+                        capabilities:
+                          description: The capabilities to add/drop when running containers.
+                            Defaults to the default set of capabilities granted by
+                            the container runtime. Note that this field cannot be
+                            set when spec.os.name is windows.
+                          properties:
+                            add:
+                              description: Added capabilities
+                              items:
+                                description: Capability represent POSIX capabilities
+                                  type
+                                type: string
+                              type: array
+                            drop:
+                              description: Removed capabilities
+                              items:
+                                description: Capability represent POSIX capabilities
+                                  type
+                                type: string
+                              type: array
+                          type: object
+                        privileged:
+                          description: Run container in privileged mode. Processes
+                            in privileged containers are essentially equivalent to
+                            root on the host. Defaults to false. Note that this field
+                            cannot be set when spec.os.name is windows.
+                          type: boolean
+                        procMount:
+                          description: procMount denotes the type of proc mount to
+                            use for the containers. The default is DefaultProcMount
+                            which uses the container runtime defaults for readonly
+                            paths and masked paths. This requires the ProcMountType
+                            feature flag to be enabled. Note that this field cannot
+                            be set when spec.os.name is windows.
+                          type: string
+                        readOnlyRootFilesystem:
+                          description: Whether this container has a read-only root
+                            filesystem. Default is false. Note that this field cannot
+                            be set when spec.os.name is windows.
+                          type: boolean
+                        runAsGroup:
+                          description: The GID to run the entrypoint of the container
+                            process. Uses runtime default if unset. May also be set
+                            in PodSecurityContext.  If set in both SecurityContext
+                            and PodSecurityContext, the value specified in SecurityContext
+                            takes precedence. Note that this field cannot be set when
+                            spec.os.name is windows.
+                          format: int64
+                          type: integer
+                        runAsNonRoot:
+                          description: Indicates that the container must run as a
+                            non-root user. If true, the Kubelet will validate the
+                            image at runtime to ensure that it does not run as UID
+                            0 (root) and fail to start the container if it does. If
+                            unset or false, no such validation will be performed.
+                            May also be set in PodSecurityContext.  If set in both
+                            SecurityContext and PodSecurityContext, the value specified
+                            in SecurityContext takes precedence.
+                          type: boolean
+                        runAsUser:
+                          description: The UID to run the entrypoint of the container
+                            process. Defaults to user specified in image metadata
+                            if unspecified. May also be set in PodSecurityContext.  If
+                            set in both SecurityContext and PodSecurityContext, the
+                            value specified in SecurityContext takes precedence. Note
+                            that this field cannot be set when spec.os.name is windows.
+                          format: int64
+                          type: integer
+                        seLinuxOptions:
+                          description: The SELinux context to be applied to the container.
+                            If unspecified, the container runtime will allocate a
+                            random SELinux context for each container.  May also be
+                            set in PodSecurityContext.  If set in both SecurityContext
+                            and PodSecurityContext, the value specified in SecurityContext
+                            takes precedence. Note that this field cannot be set when
+                            spec.os.name is windows.
+                          properties:
+                            level:
+                              description: Level is SELinux level label that applies
+                                to the container.
+                              type: string
+                            role:
+                              description: Role is a SELinux role label that applies
+                                to the container.
+                              type: string
+                            type:
+                              description: Type is a SELinux type label that applies
+                                to the container.
+                              type: string
+                            user:
+                              description: User is a SELinux user label that applies
+                                to the container.
+                              type: string
+                          type: object
+                        seccompProfile:
+                          description: The seccomp options to use by this container.
+                            If seccomp options are provided at both the pod & container
+                            level, the container options override the pod options.
+                            Note that this field cannot be set when spec.os.name is
+                            windows.
+                          properties:
+                            localhostProfile:
+                              description: localhostProfile indicates a profile defined
+                                in a file on the node should be used. The profile
+                                must be preconfigured on the node to work. Must be
+                                a descending path, relative to the kubelet's configured
+                                seccomp profile location. Must be set if type is "Localhost".
+                                Must NOT be set for any other type.
+                              type: string
+                            type:
+                              description: "type indicates which kind of seccomp profile
+                                will be applied. Valid options are: \n Localhost -
+                                a profile defined in a file on the node should be
+                                used. RuntimeDefault - the container runtime default
+                                profile should be used. Unconfined - no profile should
+                                be applied."
+                              type: string
+                          required:
+                          - type
+                          type: object
+                        windowsOptions:
+                          description: The Windows specific settings applied to all
+                            containers. If unspecified, the options from the PodSecurityContext
+                            will be used. If set in both SecurityContext and PodSecurityContext,
+                            the value specified in SecurityContext takes precedence.
+                            Note that this field cannot be set when spec.os.name is
+                            linux.
+                          properties:
+                            gmsaCredentialSpec:
+                              description: GMSACredentialSpec is where the GMSA admission
+                                webhook (https://github.com/kubernetes-sigs/windows-gmsa)
+                                inlines the contents of the GMSA credential spec named
+                                by the GMSACredentialSpecName field.
+                              type: string
+                            gmsaCredentialSpecName:
+                              description: GMSACredentialSpecName is the name of the
+                                GMSA credential spec to use.
+                              type: string
+                            hostProcess:
+                              description: HostProcess determines if a container should
+                                be run as a 'Host Process' container. All of a Pod's
+                                containers must have the same effective HostProcess
+                                value (it is not allowed to have a mix of HostProcess
+                                containers and non-HostProcess containers). In addition,
+                                if HostProcess is true then HostNetwork must also
+                                be set to true.
+                              type: boolean
+                            runAsUserName:
+                              description: The UserName in Windows to run the entrypoint
+                                of the container process. Defaults to the user specified
+                                in image metadata if unspecified. May also be set
+                                in PodSecurityContext. If set in both SecurityContext
+                                and PodSecurityContext, the value specified in SecurityContext
+                                takes precedence.
+                              type: string
+                          type: object
+                      type: object
+                    startupProbe:
+                      description: 'StartupProbe indicates that the Pod has successfully
+                        initialized. If specified, no other probes are executed until
+                        this completes successfully. If this probe fails, the Pod
+                        will be restarted, just as if the livenessProbe failed. This
+                        can be used to provide different probe parameters at the beginning
+                        of a Pod''s lifecycle, when it might take a long time to load
+                        data or warm a cache, than during steady-state operation.
+                        This cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes'
+                      properties:
+                        exec:
+                          description: Exec specifies the action to take.
+                          properties:
+                            command:
+                              description: Command is the command line to execute
+                                inside the container, the working directory for the
+                                command  is root ('/') in the container's filesystem.
+                                The command is simply exec'd, it is not run inside
+                                a shell, so traditional shell instructions ('|', etc)
+                                won't work. To use a shell, you need to explicitly
+                                call out to that shell. Exit status of 0 is treated
+                                as live/healthy and non-zero is unhealthy.
+                              items:
+                                type: string
+                              type: array
+                          type: object
+                        failureThreshold:
+                          description: Minimum consecutive failures for the probe
+                            to be considered failed after having succeeded. Defaults
+                            to 3. Minimum value is 1.
+                          format: int32
+                          type: integer
+                        grpc:
+                          description: GRPC specifies an action involving a GRPC port.
+                          properties:
+                            port:
+                              description: Port number of the gRPC service. Number
+                                must be in the range 1 to 65535.
+                              format: int32
+                              type: integer
+                            service:
+                              description: "Service is the name of the service to
+                                place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
+                                \n If this is not specified, the default behavior
+                                is defined by gRPC."
+                              type: string
+                          required:
+                          - port
+                          type: object
+                        httpGet:
+                          description: HTTPGet specifies the http request to perform.
+                          properties:
+                            host:
+                              description: Host name to connect to, defaults to the
+                                pod IP. You probably want to set "Host" in httpHeaders
+                                instead.
+                              type: string
+                            httpHeaders:
+                              description: Custom headers to set in the request. HTTP
+                                allows repeated headers.
+                              items:
+                                description: HTTPHeader describes a custom header
+                                  to be used in HTTP probes
+                                properties:
+                                  name:
+                                    description: The header field name. This will
+                                      be canonicalized upon output, so case-variant
+                                      names will be understood as the same header.
+                                    type: string
+                                  value:
+                                    description: The header field value
+                                    type: string
+                                required:
+                                - name
+                                - value
+                                type: object
+                              type: array
+                            path:
+                              description: Path to access on the HTTP server.
+                              type: string
+                            port:
+                              anyOf:
+                              - type: integer
+                              - type: string
+                              description: Name or number of the port to access on
+                                the container. Number must be in the range 1 to 65535.
+                                Name must be an IANA_SVC_NAME.
+                              x-kubernetes-int-or-string: true
+                            scheme:
+                              description: Scheme to use for connecting to the host.
+                                Defaults to HTTP.
+                              type: string
+                          required:
+                          - port
+                          type: object
+                        initialDelaySeconds:
+                          description: 'Number of seconds after the container has
+                            started before liveness probes are initiated. More info:
+                            https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes'
+                          format: int32
+                          type: integer
+                        periodSeconds:
+                          description: How often (in seconds) to perform the probe.
+                            Default to 10 seconds. Minimum value is 1.
+                          format: int32
+                          type: integer
+                        successThreshold:
+                          description: Minimum consecutive successes for the probe
+                            to be considered successful after having failed. Defaults
+                            to 1. Must be 1 for liveness and startup. Minimum value
+                            is 1.
+                          format: int32
+                          type: integer
+                        tcpSocket:
+                          description: TCPSocket specifies an action involving a TCP
+                            port.
+                          properties:
+                            host:
+                              description: 'Optional: Host name to connect to, defaults
+                                to the pod IP.'
+                              type: string
+                            port:
+                              anyOf:
+                              - type: integer
+                              - type: string
+                              description: Number or name of the port to access on
+                                the container. Number must be in the range 1 to 65535.
+                                Name must be an IANA_SVC_NAME.
+                              x-kubernetes-int-or-string: true
+                          required:
+                          - port
+                          type: object
+                        terminationGracePeriodSeconds:
+                          description: Optional duration in seconds the pod needs
+                            to terminate gracefully upon probe failure. The grace
+                            period is the duration in seconds after the processes
+                            running in the pod are sent a termination signal and the
+                            time when the processes are forcibly halted with a kill
+                            signal. Set this value longer than the expected cleanup
+                            time for your process. If this value is nil, the pod's
+                            terminationGracePeriodSeconds will be used. Otherwise,
+                            this value overrides the value provided by the pod spec.
+                            Value must be non-negative integer. The value zero indicates
+                            stop immediately via the kill signal (no opportunity to
+                            shut down). This is a beta field and requires enabling
+                            ProbeTerminationGracePeriod feature gate. Minimum value
+                            is 1. spec.terminationGracePeriodSeconds is used if unset.
+                          format: int64
+                          type: integer
+                        timeoutSeconds:
+                          description: 'Number of seconds after which the probe times
+                            out. Defaults to 1 second. Minimum value is 1. More info:
+                            https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes'
+                          format: int32
+                          type: integer
+                      type: object
+                    stdin:
+                      description: Whether this container should allocate a buffer
+                        for stdin in the container runtime. If this is not set, reads
+                        from stdin in the container will always result in EOF. Default
+                        is false.
+                      type: boolean
+                    stdinOnce:
+                      description: Whether the container runtime should close the
+                        stdin channel after it has been opened by a single attach.
+                        When stdin is true the stdin stream will remain open across
+                        multiple attach sessions. If stdinOnce is set to true, stdin
+                        is opened on container start, is empty until the first client
+                        attaches to stdin, and then remains open and accepts data
+                        until the client disconnects, at which time stdin is closed
+                        and remains closed until the container is restarted. If this
+                        flag is false, a container processes that reads from stdin
+                        will never receive an EOF. Default is false
+                      type: boolean
+                    terminationMessagePath:
+                      description: 'Optional: Path at which the file to which the
+                        container''s termination message will be written is mounted
+                        into the container''s filesystem. Message written is intended
+                        to be brief final status, such as an assertion failure message.
+                        Will be truncated by the node if greater than 4096 bytes.
+                        The total message length across all containers will be limited
+                        to 12kb. Defaults to /dev/termination-log. Cannot be updated.'
+                      type: string
+                    terminationMessagePolicy:
+                      description: Indicate how the termination message should be
+                        populated. File will use the contents of terminationMessagePath
+                        to populate the container status message on both success and
+                        failure. FallbackToLogsOnError will use the last chunk of
+                        container log output if the termination message file is empty
+                        and the container exited with an error. The log output is
+                        limited to 2048 bytes or 80 lines, whichever is smaller. Defaults
+                        to File. Cannot be updated.
+                      type: string
+                    tty:
+                      description: Whether this container should allocate a TTY for
+                        itself, also requires 'stdin' to be true. Default is false.
+                      type: boolean
+                    volumeDevices:
+                      description: volumeDevices is the list of block devices to be
+                        used by the container.
+                      items:
+                        description: volumeDevice describes a mapping of a raw block
+                          device within a container.
+                        properties:
+                          devicePath:
+                            description: devicePath is the path inside of the container
+                              that the device will be mapped to.
+                            type: string
+                          name:
+                            description: name must match the name of a persistentVolumeClaim
+                              in the pod
+                            type: string
+                        required:
+                        - devicePath
+                        - name
+                        type: object
+                      type: array
+                    volumeMounts:
+                      description: Pod volumes to mount into the container's filesystem.
+                        Cannot be updated.
+                      items:
+                        description: VolumeMount describes a mounting of a Volume
+                          within a container.
+                        properties:
+                          mountPath:
+                            description: Path within the container at which the volume
+                              should be mounted.  Must not contain ':'.
+                            type: string
+                          mountPropagation:
+                            description: mountPropagation determines how mounts are
+                              propagated from the host to container and the other
+                              way around. When not set, MountPropagationNone is used.
+                              This field is beta in 1.10.
+                            type: string
+                          name:
+                            description: This must match the Name of a Volume.
+                            type: string
+                          readOnly:
+                            description: Mounted read-only if true, read-write otherwise
+                              (false or unspecified). Defaults to false.
+                            type: boolean
+                          subPath:
+                            description: Path within the volume from which the container's
+                              volume should be mounted. Defaults to "" (volume's root).
+                            type: string
+                          subPathExpr:
+                            description: Expanded path within the volume from which
+                              the container's volume should be mounted. Behaves similarly
+                              to SubPath but environment variable references $(VAR_NAME)
+                              are expanded using the container's environment. Defaults
+                              to "" (volume's root). SubPathExpr and SubPath are mutually
+                              exclusive.
+                            type: string
+                        required:
+                        - mountPath
+                        - name
+                        type: object
+                      type: array
+                    workingDir:
+                      description: Container's working directory. If not specified,
+                        the container runtime's default will be used, which might
+                        be configured in the container image. Cannot be updated.
+                      type: string
+                  required:
+                  - name
+                  type: object
+                type: array
+              integrations:
+                description: Integrations controls the integration subsystem of the
+                  Agent and settings unique to deployed integration-specific pods.
+                properties:
+                  namespaceSelector:
+                    description: "Label selector for namespaces to search when discovering
+                      integration resources. If nil, integration resources are only
+                      discovered in the namespace of the GrafanaAgent resource. \n
+                      Set to `{}` to search all namespaces."
+                    properties:
+                      matchExpressions:
+                        description: matchExpressions is a list of label selector
+                          requirements. The requirements are ANDed.
+                        items:
+                          description: A label selector requirement is a selector
+                            that contains values, a key, and an operator that relates
+                            the key and values.
+                          properties:
+                            key:
+                              description: key is the label key that the selector
+                                applies to.
+                              type: string
+                            operator:
+                              description: operator represents a key's relationship
+                                to a set of values. Valid operators are In, NotIn,
+                                Exists and DoesNotExist.
+                              type: string
+                            values:
+                              description: values is an array of string values. If
+                                the operator is In or NotIn, the values array must
+                                be non-empty. If the operator is Exists or DoesNotExist,
+                                the values array must be empty. This array is replaced
+                                during a strategic merge patch.
+                              items:
+                                type: string
+                              type: array
+                          required:
+                          - key
+                          - operator
+                          type: object
+                        type: array
+                      matchLabels:
+                        additionalProperties:
+                          type: string
+                        description: matchLabels is a map of {key,value} pairs. A
+                          single {key,value} in the matchLabels map is equivalent
+                          to an element of matchExpressions, whose key field is "key",
+                          the operator is "In", and the values array contains only
+                          "value". The requirements are ANDed.
+                        type: object
+                    type: object
+                    x-kubernetes-map-type: atomic
+                  selector:
+                    description: Label selector to find Integration resources to run.
+                      When nil, no integration resources will be defined.
+                    properties:
+                      matchExpressions:
+                        description: matchExpressions is a list of label selector
+                          requirements. The requirements are ANDed.
+                        items:
+                          description: A label selector requirement is a selector
+                            that contains values, a key, and an operator that relates
+                            the key and values.
+                          properties:
+                            key:
+                              description: key is the label key that the selector
+                                applies to.
+                              type: string
+                            operator:
+                              description: operator represents a key's relationship
+                                to a set of values. Valid operators are In, NotIn,
+                                Exists and DoesNotExist.
+                              type: string
+                            values:
+                              description: values is an array of string values. If
+                                the operator is In or NotIn, the values array must
+                                be non-empty. If the operator is Exists or DoesNotExist,
+                                the values array must be empty. This array is replaced
+                                during a strategic merge patch.
+                              items:
+                                type: string
+                              type: array
+                          required:
+                          - key
+                          - operator
+                          type: object
+                        type: array
+                      matchLabels:
+                        additionalProperties:
+                          type: string
+                        description: matchLabels is a map of {key,value} pairs. A
+                          single {key,value} in the matchLabels map is equivalent
+                          to an element of matchExpressions, whose key field is "key",
+                          the operator is "In", and the values array contains only
+                          "value". The requirements are ANDed.
+                        type: object
+                    type: object
+                    x-kubernetes-map-type: atomic
+                type: object
+              logFormat:
+                description: LogFormat controls the logging format of the generated
+                  pods. Defaults to "logfmt" if not set.
+                type: string
+              logLevel:
+                description: LogLevel controls the log level of the generated pods.
+                  Defaults to "info" if not set.
+                type: string
+              logs:
+                description: Logs controls the logging subsystem of the Agent and
+                  settings unique to logging-specific pods that are deployed.
+                properties:
+                  clients:
+                    description: A global set of clients to use when a discovered
+                      LogsInstance does not have any clients defined.
+                    items:
+                      description: LogsClientSpec defines the client integration for
+                        logs, indicating which Loki server to send logs to.
+                      properties:
+                        backoffConfig:
+                          description: Configures how to retry requests to Loki when
+                            a request fails. Defaults to a minPeriod of 500ms, maxPeriod
+                            of 5m, and maxRetries of 10.
+                          properties:
+                            maxPeriod:
+                              description: Maximum backoff time between retries.
+                              type: string
+                            maxRetries:
+                              description: Maximum number of retries to perform before
+                                giving up a request.
+                              type: integer
+                            minPeriod:
+                              description: Initial backoff time between retries. Time
+                                between retries is increased exponentially.
+                              type: string
+                          type: object
+                        basicAuth:
+                          description: BasicAuth for the Loki server.
+                          properties:
+                            password:
+                              description: The secret in the service monitor namespace
+                                that contains the password for authentication.
+                              properties:
+                                key:
+                                  description: The key of the secret to select from.  Must
+                                    be a valid secret key.
+                                  type: string
+                                name:
+                                  description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                    TODO: Add other useful fields. apiVersion, kind,
+                                    uid?'
+                                  type: string
+                                optional:
+                                  description: Specify whether the Secret or its key
+                                    must be defined
+                                  type: boolean
+                              required:
+                              - key
+                              type: object
+                              x-kubernetes-map-type: atomic
+                            username:
+                              description: The secret in the service monitor namespace
+                                that contains the username for authentication.
+                              properties:
+                                key:
+                                  description: The key of the secret to select from.  Must
+                                    be a valid secret key.
+                                  type: string
+                                name:
+                                  description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                    TODO: Add other useful fields. apiVersion, kind,
+                                    uid?'
+                                  type: string
+                                optional:
+                                  description: Specify whether the Secret or its key
+                                    must be defined
+                                  type: boolean
+                              required:
+                              - key
+                              type: object
+                              x-kubernetes-map-type: atomic
+                          type: object
+                        batchSize:
+                          description: Maximum batch size (in bytes) of logs to accumulate
+                            before sending the batch to Loki.
+                          type: integer
+                        batchWait:
+                          description: Maximum amount of time to wait before sending
+                            a batch, even if that batch isn't full.
+                          type: string
+                        bearerToken:
+                          description: BearerToken used for remote_write.
+                          type: string
+                        bearerTokenFile:
+                          description: BearerTokenFile used to read bearer token.
+                          type: string
+                        externalLabels:
+                          additionalProperties:
+                            type: string
+                          description: ExternalLabels are labels to add to any time
+                            series when sending data to Loki.
+                          type: object
+                        oauth2:
+                          description: Oauth2 for URL
+                          properties:
+                            clientId:
+                              description: The secret or configmap containing the
+                                OAuth2 client id
+                              properties:
+                                configMap:
+                                  description: ConfigMap containing data to use for
+                                    the targets.
+                                  properties:
+                                    key:
+                                      description: The key to select.
+                                      type: string
+                                    name:
+                                      description: 'Name of the referent. More info:
+                                        https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                        TODO: Add other useful fields. apiVersion,
+                                        kind, uid?'
+                                      type: string
+                                    optional:
+                                      description: Specify whether the ConfigMap or
+                                        its key must be defined
+                                      type: boolean
+                                  required:
+                                  - key
+                                  type: object
+                                  x-kubernetes-map-type: atomic
+                                secret:
+                                  description: Secret containing data to use for the
+                                    targets.
+                                  properties:
+                                    key:
+                                      description: The key of the secret to select
+                                        from.  Must be a valid secret key.
+                                      type: string
+                                    name:
+                                      description: 'Name of the referent. More info:
+                                        https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                        TODO: Add other useful fields. apiVersion,
+                                        kind, uid?'
+                                      type: string
+                                    optional:
+                                      description: Specify whether the Secret or its
+                                        key must be defined
+                                      type: boolean
+                                  required:
+                                  - key
+                                  type: object
+                                  x-kubernetes-map-type: atomic
+                              type: object
+                            clientSecret:
+                              description: The secret containing the OAuth2 client
+                                secret
+                              properties:
+                                key:
+                                  description: The key of the secret to select from.  Must
+                                    be a valid secret key.
+                                  type: string
+                                name:
+                                  description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                    TODO: Add other useful fields. apiVersion, kind,
+                                    uid?'
+                                  type: string
+                                optional:
+                                  description: Specify whether the Secret or its key
+                                    must be defined
+                                  type: boolean
+                              required:
+                              - key
+                              type: object
+                              x-kubernetes-map-type: atomic
+                            endpointParams:
+                              additionalProperties:
+                                type: string
+                              description: Parameters to append to the token URL
+                              type: object
+                            scopes:
+                              description: OAuth2 scopes used for the token request
+                              items:
+                                type: string
+                              type: array
+                            tokenUrl:
+                              description: The URL to fetch the token from
+                              minLength: 1
+                              type: string
+                          required:
+                          - clientId
+                          - clientSecret
+                          - tokenUrl
+                          type: object
+                        proxyUrl:
+                          description: ProxyURL to proxy requests through. Optional.
+                          type: string
+                        tenantId:
+                          description: Tenant ID used by default to push logs to Loki.
+                            If omitted assumes remote Loki is running in single-tenant
+                            mode or an authentication layer is used to inject an X-Scope-OrgID
+                            header.
+                          type: string
+                        timeout:
+                          description: Maximum time to wait for a server to respond
+                            to a request.
+                          type: string
+                        tlsConfig:
+                          description: TLSConfig to use for the client. Only used
+                            when the protocol of the URL is https.
+                          properties:
+                            ca:
+                              description: Certificate authority used when verifying
+                                server certificates.
+                              properties:
+                                configMap:
+                                  description: ConfigMap containing data to use for
+                                    the targets.
+                                  properties:
+                                    key:
+                                      description: The key to select.
+                                      type: string
+                                    name:
+                                      description: 'Name of the referent. More info:
+                                        https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                        TODO: Add other useful fields. apiVersion,
+                                        kind, uid?'
+                                      type: string
+                                    optional:
+                                      description: Specify whether the ConfigMap or
+                                        its key must be defined
+                                      type: boolean
+                                  required:
+                                  - key
+                                  type: object
+                                  x-kubernetes-map-type: atomic
+                                secret:
+                                  description: Secret containing data to use for the
+                                    targets.
+                                  properties:
+                                    key:
+                                      description: The key of the secret to select
+                                        from.  Must be a valid secret key.
+                                      type: string
+                                    name:
+                                      description: 'Name of the referent. More info:
+                                        https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                        TODO: Add other useful fields. apiVersion,
+                                        kind, uid?'
+                                      type: string
+                                    optional:
+                                      description: Specify whether the Secret or its
+                                        key must be defined
+                                      type: boolean
+                                  required:
+                                  - key
+                                  type: object
+                                  x-kubernetes-map-type: atomic
+                              type: object
+                            caFile:
+                              description: Path to the CA cert in the Prometheus container
+                                to use for the targets.
+                              type: string
+                            cert:
+                              description: Client certificate to present when doing
+                                client-authentication.
+                              properties:
+                                configMap:
+                                  description: ConfigMap containing data to use for
+                                    the targets.
+                                  properties:
+                                    key:
+                                      description: The key to select.
+                                      type: string
+                                    name:
+                                      description: 'Name of the referent. More info:
+                                        https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                        TODO: Add other useful fields. apiVersion,
+                                        kind, uid?'
+                                      type: string
+                                    optional:
+                                      description: Specify whether the ConfigMap or
+                                        its key must be defined
+                                      type: boolean
+                                  required:
+                                  - key
+                                  type: object
+                                  x-kubernetes-map-type: atomic
+                                secret:
+                                  description: Secret containing data to use for the
+                                    targets.
+                                  properties:
+                                    key:
+                                      description: The key of the secret to select
+                                        from.  Must be a valid secret key.
+                                      type: string
+                                    name:
+                                      description: 'Name of the referent. More info:
+                                        https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                        TODO: Add other useful fields. apiVersion,
+                                        kind, uid?'
+                                      type: string
+                                    optional:
+                                      description: Specify whether the Secret or its
+                                        key must be defined
+                                      type: boolean
+                                  required:
+                                  - key
+                                  type: object
+                                  x-kubernetes-map-type: atomic
+                              type: object
+                            certFile:
+                              description: Path to the client cert file in the Prometheus
+                                container for the targets.
+                              type: string
+                            insecureSkipVerify:
+                              description: Disable target certificate validation.
+                              type: boolean
+                            keyFile:
+                              description: Path to the client key file in the Prometheus
+                                container for the targets.
+                              type: string
+                            keySecret:
+                              description: Secret containing the client key file for
+                                the targets.
+                              properties:
+                                key:
+                                  description: The key of the secret to select from.  Must
+                                    be a valid secret key.
+                                  type: string
+                                name:
+                                  description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                    TODO: Add other useful fields. apiVersion, kind,
+                                    uid?'
+                                  type: string
+                                optional:
+                                  description: Specify whether the Secret or its key
+                                    must be defined
+                                  type: boolean
+                              required:
+                              - key
+                              type: object
+                              x-kubernetes-map-type: atomic
+                            serverName:
+                              description: Used to verify the hostname for the targets.
+                              type: string
+                          type: object
+                        url:
+                          description: 'URL is the URL where Loki is listening. Must
+                            be a full HTTP URL, including protocol. Required. Example:
+                            https://logs-prod-us-central1.grafana.net/loki/api/v1/push.'
+                          type: string
+                      required:
+                      - url
+                      type: object
+                    type: array
+                  enforcedNamespaceLabel:
+                    description: EnforcedNamespaceLabel enforces adding a namespace
+                      label of origin for each metric that is user-created. The label
+                      value will always be the namespace of the object that is being
+                      created.
+                    type: string
+                  ignoreNamespaceSelectors:
+                    description: IgnoreNamespaceSelectors, if true, will ignore NamespaceSelector
+                      settings from the PodLogs configs, and they will only discover
+                      endpoints within their current namespace.
+                    type: boolean
+                  instanceNamespaceSelector:
+                    description: InstanceNamespaceSelector are the set of labels to
+                      determine which namespaces to watch for LogInstances. If not
+                      provided, only checks own namespace.
+                    properties:
+                      matchExpressions:
+                        description: matchExpressions is a list of label selector
+                          requirements. The requirements are ANDed.
+                        items:
+                          description: A label selector requirement is a selector
+                            that contains values, a key, and an operator that relates
+                            the key and values.
+                          properties:
+                            key:
+                              description: key is the label key that the selector
+                                applies to.
+                              type: string
+                            operator:
+                              description: operator represents a key's relationship
+                                to a set of values. Valid operators are In, NotIn,
+                                Exists and DoesNotExist.
+                              type: string
+                            values:
+                              description: values is an array of string values. If
+                                the operator is In or NotIn, the values array must
+                                be non-empty. If the operator is Exists or DoesNotExist,
+                                the values array must be empty. This array is replaced
+                                during a strategic merge patch.
+                              items:
+                                type: string
+                              type: array
+                          required:
+                          - key
+                          - operator
+                          type: object
+                        type: array
+                      matchLabels:
+                        additionalProperties:
+                          type: string
+                        description: matchLabels is a map of {key,value} pairs. A
+                          single {key,value} in the matchLabels map is equivalent
+                          to an element of matchExpressions, whose key field is "key",
+                          the operator is "In", and the values array contains only
+                          "value". The requirements are ANDed.
+                        type: object
+                    type: object
+                    x-kubernetes-map-type: atomic
+                  instanceSelector:
+                    description: InstanceSelector determines which LogInstances should
+                      be selected for running. Each instance runs its own set of Prometheus
+                      components, including service discovery, scraping, and remote_write.
+                    properties:
+                      matchExpressions:
+                        description: matchExpressions is a list of label selector
+                          requirements. The requirements are ANDed.
+                        items:
+                          description: A label selector requirement is a selector
+                            that contains values, a key, and an operator that relates
+                            the key and values.
+                          properties:
+                            key:
+                              description: key is the label key that the selector
+                                applies to.
+                              type: string
+                            operator:
+                              description: operator represents a key's relationship
+                                to a set of values. Valid operators are In, NotIn,
+                                Exists and DoesNotExist.
+                              type: string
+                            values:
+                              description: values is an array of string values. If
+                                the operator is In or NotIn, the values array must
+                                be non-empty. If the operator is Exists or DoesNotExist,
+                                the values array must be empty. This array is replaced
+                                during a strategic merge patch.
+                              items:
+                                type: string
+                              type: array
+                          required:
+                          - key
+                          - operator
+                          type: object
+                        type: array
+                      matchLabels:
+                        additionalProperties:
+                          type: string
+                        description: matchLabels is a map of {key,value} pairs. A
+                          single {key,value} in the matchLabels map is equivalent
+                          to an element of matchExpressions, whose key field is "key",
+                          the operator is "In", and the values array contains only
+                          "value". The requirements are ANDed.
+                        type: object
+                    type: object
+                    x-kubernetes-map-type: atomic
+                  logsExternalLabelName:
+                    description: LogsExternalLabelName is the name of the external
+                      label used to denote Grafana Agent cluster. Defaults to "cluster."
+                      External label will _not_ be added when value is set to the
+                      empty string.
+                    type: string
+                type: object
+              metrics:
+                description: Metrics controls the metrics subsystem of the Agent and
+                  settings unique to metrics-specific pods that are deployed.
+                properties:
+                  arbitraryFSAccessThroughSMs:
+                    description: ArbitraryFSAccessThroughSMs configures whether configuration
+                      based on a ServiceMonitor can access arbitrary files on the
+                      file system of the Grafana Agent container, e.g., bearer token
+                      files.
+                    properties:
+                      deny:
+                        type: boolean
+                    type: object
+                  enforcedNamespaceLabel:
+                    description: EnforcedNamespaceLabel enforces adding a namespace
+                      label of origin for each metric that is user-created. The label
+                      value is always the namespace of the object that is being created.
+                    type: string
+                  enforcedSampleLimit:
+                    description: EnforcedSampleLimit defines a global limit on the
+                      number of scraped samples that are accepted. This overrides
+                      any SampleLimit set per ServiceMonitor and/or PodMonitor. It
+                      is meant to be used by admins to enforce the SampleLimit to
+                      keep the overall number of samples and series under the desired
+                      limit. Note that if a SampleLimit from a ServiceMonitor or PodMonitor
+                      is lower, that value is used instead.
+                    format: int64
+                    type: integer
+                  enforcedTargetLimit:
+                    description: EnforcedTargetLimit defines a global limit on the
+                      number of scraped targets. This overrides any TargetLimit set
+                      per ServiceMonitor and/or PodMonitor. It is meant to be used
+                      by admins to enforce the TargetLimit to keep the overall number
+                      of targets under the desired limit. Note that if a TargetLimit
+                      from a ServiceMonitor or PodMonitor is higher, that value is
+                      used instead.
+                    format: int64
+                    type: integer
+                  externalLabels:
+                    additionalProperties:
+                      type: string
+                    description: ExternalLabels are labels to add to any time series
+                      when sending data over remote_write.
+                    type: object
+                  ignoreNamespaceSelectors:
+                    description: IgnoreNamespaceSelectors, if true, ignores NamespaceSelector
+                      settings from the PodMonitor and ServiceMonitor configs, so
+                      that they only discover endpoints within their current namespace.
+                    type: boolean
+                  instanceNamespaceSelector:
+                    description: InstanceNamespaceSelector is the set of labels that
+                      determines which namespaces to watch for MetricsInstances. If
+                      not provided, it only checks its own namespace.
+                    properties:
+                      matchExpressions:
+                        description: matchExpressions is a list of label selector
+                          requirements. The requirements are ANDed.
+                        items:
+                          description: A label selector requirement is a selector
+                            that contains values, a key, and an operator that relates
+                            the key and values.
+                          properties:
+                            key:
+                              description: key is the label key that the selector
+                                applies to.
+                              type: string
+                            operator:
+                              description: operator represents a key's relationship
+                                to a set of values. Valid operators are In, NotIn,
+                                Exists and DoesNotExist.
+                              type: string
+                            values:
+                              description: values is an array of string values. If
+                                the operator is In or NotIn, the values array must
+                                be non-empty. If the operator is Exists or DoesNotExist,
+                                the values array must be empty. This array is replaced
+                                during a strategic merge patch.
+                              items:
+                                type: string
+                              type: array
+                          required:
+                          - key
+                          - operator
+                          type: object
+                        type: array
+                      matchLabels:
+                        additionalProperties:
+                          type: string
+                        description: matchLabels is a map of {key,value} pairs. A
+                          single {key,value} in the matchLabels map is equivalent
+                          to an element of matchExpressions, whose key field is "key",
+                          the operator is "In", and the values array contains only
+                          "value". The requirements are ANDed.
+                        type: object
+                    type: object
+                    x-kubernetes-map-type: atomic
+                  instanceSelector:
+                    description: InstanceSelector determines which MetricsInstances
+                      should be selected for running. Each instance runs its own set
+                      of Metrics components, including service discovery, scraping,
+                      and remote_write.
+                    properties:
+                      matchExpressions:
+                        description: matchExpressions is a list of label selector
+                          requirements. The requirements are ANDed.
+                        items:
+                          description: A label selector requirement is a selector
+                            that contains values, a key, and an operator that relates
+                            the key and values.
+                          properties:
+                            key:
+                              description: key is the label key that the selector
+                                applies to.
+                              type: string
+                            operator:
+                              description: operator represents a key's relationship
+                                to a set of values. Valid operators are In, NotIn,
+                                Exists and DoesNotExist.
+                              type: string
+                            values:
+                              description: values is an array of string values. If
+                                the operator is In or NotIn, the values array must
+                                be non-empty. If the operator is Exists or DoesNotExist,
+                                the values array must be empty. This array is replaced
+                                during a strategic merge patch.
+                              items:
+                                type: string
+                              type: array
+                          required:
+                          - key
+                          - operator
+                          type: object
+                        type: array
+                      matchLabels:
+                        additionalProperties:
+                          type: string
+                        description: matchLabels is a map of {key,value} pairs. A
+                          single {key,value} in the matchLabels map is equivalent
+                          to an element of matchExpressions, whose key field is "key",
+                          the operator is "In", and the values array contains only
+                          "value". The requirements are ANDed.
+                        type: object
+                    type: object
+                    x-kubernetes-map-type: atomic
+                  metricsExternalLabelName:
+                    description: MetricsExternalLabelName is the name of the external
+                      label used to denote Grafana Agent cluster. Defaults to "cluster."
+                      The external label is _not_ added when the value is set to the
+                      empty string.
+                    type: string
+                  overrideHonorLabels:
+                    description: OverrideHonorLabels, if true, overrides all configured
+                      honor_labels read from ServiceMonitor or PodMonitor and sets
+                      them to false.
+                    type: boolean
+                  overrideHonorTimestamps:
+                    description: OverrideHonorTimestamps allows global enforcement
+                      for honoring timestamps in all scrape configs.
+                    type: boolean
+                  remoteWrite:
+                    description: RemoteWrite controls default remote_write settings
+                      for all instances. If an instance does not provide its own RemoteWrite
+                      settings, these will be used instead.
+                    items:
+                      description: RemoteWriteSpec defines the remote_write configuration
+                        for Prometheus.
+                      properties:
+                        basicAuth:
+                          description: BasicAuth for the URL.
+                          properties:
+                            password:
+                              description: The secret in the service monitor namespace
+                                that contains the password for authentication.
+                              properties:
+                                key:
+                                  description: The key of the secret to select from.  Must
+                                    be a valid secret key.
+                                  type: string
+                                name:
+                                  description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                    TODO: Add other useful fields. apiVersion, kind,
+                                    uid?'
+                                  type: string
+                                optional:
+                                  description: Specify whether the Secret or its key
+                                    must be defined
+                                  type: boolean
+                              required:
+                              - key
+                              type: object
+                              x-kubernetes-map-type: atomic
+                            username:
+                              description: The secret in the service monitor namespace
+                                that contains the username for authentication.
+                              properties:
+                                key:
+                                  description: The key of the secret to select from.  Must
+                                    be a valid secret key.
+                                  type: string
+                                name:
+                                  description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                    TODO: Add other useful fields. apiVersion, kind,
+                                    uid?'
+                                  type: string
+                                optional:
+                                  description: Specify whether the Secret or its key
+                                    must be defined
+                                  type: boolean
+                              required:
+                              - key
+                              type: object
+                              x-kubernetes-map-type: atomic
+                          type: object
+                        bearerToken:
+                          description: BearerToken used for remote_write.
+                          type: string
+                        bearerTokenFile:
+                          description: BearerTokenFile used to read bearer token.
+                          type: string
+                        headers:
+                          additionalProperties:
+                            type: string
+                          description: Headers is a set of custom HTTP headers to
+                            be sent along with each remote_write request. Be aware
+                            that any headers set by Grafana Agent itself can't be
+                            overwritten.
+                          type: object
+                        metadataConfig:
+                          description: MetadataConfig configures the sending of series
+                            metadata to remote storage.
+                          properties:
+                            send:
+                              description: Send enables metric metadata to be sent
+                                to remote storage.
+                              type: boolean
+                            sendInterval:
+                              description: SendInterval controls how frequently metric
+                                metadata is sent to remote storage.
+                              type: string
+                          type: object
+                        name:
+                          description: Name of the remote_write queue. Must be unique
+                            if specified. The name is used in metrics and logging
+                            in order to differentiate queues.
+                          type: string
+                        oauth2:
+                          description: Oauth2 for URL
+                          properties:
+                            clientId:
+                              description: The secret or configmap containing the
+                                OAuth2 client id
+                              properties:
+                                configMap:
+                                  description: ConfigMap containing data to use for
+                                    the targets.
+                                  properties:
+                                    key:
+                                      description: The key to select.
+                                      type: string
+                                    name:
+                                      description: 'Name of the referent. More info:
+                                        https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                        TODO: Add other useful fields. apiVersion,
+                                        kind, uid?'
+                                      type: string
+                                    optional:
+                                      description: Specify whether the ConfigMap or
+                                        its key must be defined
+                                      type: boolean
+                                  required:
+                                  - key
+                                  type: object
+                                  x-kubernetes-map-type: atomic
+                                secret:
+                                  description: Secret containing data to use for the
+                                    targets.
+                                  properties:
+                                    key:
+                                      description: The key of the secret to select
+                                        from.  Must be a valid secret key.
+                                      type: string
+                                    name:
+                                      description: 'Name of the referent. More info:
+                                        https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                        TODO: Add other useful fields. apiVersion,
+                                        kind, uid?'
+                                      type: string
+                                    optional:
+                                      description: Specify whether the Secret or its
+                                        key must be defined
+                                      type: boolean
+                                  required:
+                                  - key
+                                  type: object
+                                  x-kubernetes-map-type: atomic
+                              type: object
+                            clientSecret:
+                              description: The secret containing the OAuth2 client
+                                secret
+                              properties:
+                                key:
+                                  description: The key of the secret to select from.  Must
+                                    be a valid secret key.
+                                  type: string
+                                name:
+                                  description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                    TODO: Add other useful fields. apiVersion, kind,
+                                    uid?'
+                                  type: string
+                                optional:
+                                  description: Specify whether the Secret or its key
+                                    must be defined
+                                  type: boolean
+                              required:
+                              - key
+                              type: object
+                              x-kubernetes-map-type: atomic
+                            endpointParams:
+                              additionalProperties:
+                                type: string
+                              description: Parameters to append to the token URL
+                              type: object
+                            scopes:
+                              description: OAuth2 scopes used for the token request
+                              items:
+                                type: string
+                              type: array
+                            tokenUrl:
+                              description: The URL to fetch the token from
+                              minLength: 1
+                              type: string
+                          required:
+                          - clientId
+                          - clientSecret
+                          - tokenUrl
+                          type: object
+                        proxyUrl:
+                          description: ProxyURL to proxy requests through. Optional.
+                          type: string
+                        queueConfig:
+                          description: QueueConfig allows tuning of the remote_write
+                            queue parameters.
+                          properties:
+                            batchSendDeadline:
+                              description: BatchSendDeadline is the maximum time a
+                                sample will wait in the buffer.
+                              type: string
+                            capacity:
+                              description: Capacity is the number of samples to buffer
+                                per shard before samples start being dropped.
+                              type: integer
+                            maxBackoff:
+                              description: MaxBackoff is the maximum retry delay.
+                              type: string
+                            maxRetries:
+                              description: MaxRetries is the maximum number of times
+                                to retry a batch on recoverable errors.
+                              type: integer
+                            maxSamplesPerSend:
+                              description: MaxSamplesPerSend is the maximum number
+                                of samples per send.
+                              type: integer
+                            maxShards:
+                              description: MaxShards is the maximum number of shards,
+                                i.e., the amount of concurrency.
+                              type: integer
+                            minBackoff:
+                              description: MinBackoff is the initial retry delay.
+                                MinBackoff is doubled for every retry.
+                              type: string
+                            minShards:
+                              description: MinShards is the minimum number of shards,
+                                i.e., the amount of concurrency.
+                              type: integer
+                            retryOnRateLimit:
+                              description: RetryOnRateLimit retries requests when
+                                encountering rate limits.
+                              type: boolean
+                          type: object
+                        remoteTimeout:
+                          description: RemoteTimeout is the timeout for requests to
+                            the remote_write endpoint.
+                          type: string
+                        sigv4:
+                          description: SigV4 configures SigV4-based authentication
+                            to the remote_write endpoint. SigV4-based authentication
+                            is used if SigV4 is defined, even with an empty object.
+                          properties:
+                            accessKey:
+                              description: AccessKey holds the secret of the AWS API
+                                access key to use for signing. If not provided, the
+                                environment variable AWS_ACCESS_KEY_ID is used.
+                              properties:
+                                key:
+                                  description: The key of the secret to select from.  Must
+                                    be a valid secret key.
+                                  type: string
+                                name:
+                                  description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                    TODO: Add other useful fields. apiVersion, kind,
+                                    uid?'
+                                  type: string
+                                optional:
+                                  description: Specify whether the Secret or its key
+                                    must be defined
+                                  type: boolean
+                              required:
+                              - key
+                              type: object
+                              x-kubernetes-map-type: atomic
+                            profile:
+                              description: Profile is the named AWS profile to use
+                                for authentication.
+                              type: string
+                            region:
+                              description: Region of the AWS endpoint. If blank, the
+                                region from the default credentials chain is used.
+                              type: string
+                            roleARN:
+                              description: RoleARN is the AWS Role ARN to use for
+                                authentication, as an alternative for using the AWS
+                                API keys.
+                              type: string
+                            secretKey:
+                              description: SecretKey of the AWS API to use for signing.
+                                If blank, the environment variable AWS_SECRET_ACCESS_KEY
+                                is used.
+                              properties:
+                                key:
+                                  description: The key of the secret to select from.  Must
+                                    be a valid secret key.
+                                  type: string
+                                name:
+                                  description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                    TODO: Add other useful fields. apiVersion, kind,
+                                    uid?'
+                                  type: string
+                                optional:
+                                  description: Specify whether the Secret or its key
+                                    must be defined
+                                  type: boolean
+                              required:
+                              - key
+                              type: object
+                              x-kubernetes-map-type: atomic
+                          type: object
+                        tlsConfig:
+                          description: TLSConfig to use for remote_write.
+                          properties:
+                            ca:
+                              description: Certificate authority used when verifying
+                                server certificates.
+                              properties:
+                                configMap:
+                                  description: ConfigMap containing data to use for
+                                    the targets.
+                                  properties:
+                                    key:
+                                      description: The key to select.
+                                      type: string
+                                    name:
+                                      description: 'Name of the referent. More info:
+                                        https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                        TODO: Add other useful fields. apiVersion,
+                                        kind, uid?'
+                                      type: string
+                                    optional:
+                                      description: Specify whether the ConfigMap or
+                                        its key must be defined
+                                      type: boolean
+                                  required:
+                                  - key
+                                  type: object
+                                  x-kubernetes-map-type: atomic
+                                secret:
+                                  description: Secret containing data to use for the
+                                    targets.
+                                  properties:
+                                    key:
+                                      description: The key of the secret to select
+                                        from.  Must be a valid secret key.
+                                      type: string
+                                    name:
+                                      description: 'Name of the referent. More info:
+                                        https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                        TODO: Add other useful fields. apiVersion,
+                                        kind, uid?'
+                                      type: string
+                                    optional:
+                                      description: Specify whether the Secret or its
+                                        key must be defined
+                                      type: boolean
+                                  required:
+                                  - key
+                                  type: object
+                                  x-kubernetes-map-type: atomic
+                              type: object
+                            caFile:
+                              description: Path to the CA cert in the Prometheus container
+                                to use for the targets.
+                              type: string
+                            cert:
+                              description: Client certificate to present when doing
+                                client-authentication.
+                              properties:
+                                configMap:
+                                  description: ConfigMap containing data to use for
+                                    the targets.
+                                  properties:
+                                    key:
+                                      description: The key to select.
+                                      type: string
+                                    name:
+                                      description: 'Name of the referent. More info:
+                                        https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                        TODO: Add other useful fields. apiVersion,
+                                        kind, uid?'
+                                      type: string
+                                    optional:
+                                      description: Specify whether the ConfigMap or
+                                        its key must be defined
+                                      type: boolean
+                                  required:
+                                  - key
+                                  type: object
+                                  x-kubernetes-map-type: atomic
+                                secret:
+                                  description: Secret containing data to use for the
+                                    targets.
+                                  properties:
+                                    key:
+                                      description: The key of the secret to select
+                                        from.  Must be a valid secret key.
+                                      type: string
+                                    name:
+                                      description: 'Name of the referent. More info:
+                                        https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                        TODO: Add other useful fields. apiVersion,
+                                        kind, uid?'
+                                      type: string
+                                    optional:
+                                      description: Specify whether the Secret or its
+                                        key must be defined
+                                      type: boolean
+                                  required:
+                                  - key
+                                  type: object
+                                  x-kubernetes-map-type: atomic
+                              type: object
+                            certFile:
+                              description: Path to the client cert file in the Prometheus
+                                container for the targets.
+                              type: string
+                            insecureSkipVerify:
+                              description: Disable target certificate validation.
+                              type: boolean
+                            keyFile:
+                              description: Path to the client key file in the Prometheus
+                                container for the targets.
+                              type: string
+                            keySecret:
+                              description: Secret containing the client key file for
+                                the targets.
+                              properties:
+                                key:
+                                  description: The key of the secret to select from.  Must
+                                    be a valid secret key.
+                                  type: string
+                                name:
+                                  description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                    TODO: Add other useful fields. apiVersion, kind,
+                                    uid?'
+                                  type: string
+                                optional:
+                                  description: Specify whether the Secret or its key
+                                    must be defined
+                                  type: boolean
+                              required:
+                              - key
+                              type: object
+                              x-kubernetes-map-type: atomic
+                            serverName:
+                              description: Used to verify the hostname for the targets.
+                              type: string
+                          type: object
+                        url:
+                          description: URL of the endpoint to send samples to.
+                          type: string
+                        writeRelabelConfigs:
+                          description: WriteRelabelConfigs holds relabel_configs to
+                            relabel samples before they are sent to the remote_write
+                            endpoint.
+                          items:
+                            description: 'RelabelConfig allows dynamic rewriting of
+                              the label set, being applied to samples before ingestion.
+                              It defines `<metric_relabel_configs>`-section of Prometheus
+                              configuration. More info: https://prometheus.io/docs/prometheus/latest/configuration/configuration/#metric_relabel_configs'
+                            properties:
+                              action:
+                                default: replace
+                                description: Action to perform based on regex matching.
+                                  Default is 'replace'. uppercase and lowercase actions
+                                  require Prometheus >= 2.36.
+                                enum:
+                                - replace
+                                - Replace
+                                - keep
+                                - Keep
+                                - drop
+                                - Drop
+                                - hashmod
+                                - HashMod
+                                - labelmap
+                                - LabelMap
+                                - labeldrop
+                                - LabelDrop
+                                - labelkeep
+                                - LabelKeep
+                                - lowercase
+                                - Lowercase
+                                - uppercase
+                                - Uppercase
+                                - keepequal
+                                - KeepEqual
+                                - dropequal
+                                - DropEqual
+                                type: string
+                              modulus:
+                                description: Modulus to take of the hash of the source
+                                  label values.
+                                format: int64
+                                type: integer
+                              regex:
+                                description: Regular expression against which the
+                                  extracted value is matched. Default is '(.*)'
+                                type: string
+                              replacement:
+                                description: Replacement value against which a regex
+                                  replace is performed if the regular expression matches.
+                                  Regex capture groups are available. Default is '$1'
+                                type: string
+                              separator:
+                                description: Separator placed between concatenated
+                                  source label values. default is ';'.
+                                type: string
+                              sourceLabels:
+                                description: The source labels select values from
+                                  existing labels. Their content is concatenated using
+                                  the configured separator and matched against the
+                                  configured regular expression for the replace, keep,
+                                  and drop actions.
+                                items:
+                                  description: LabelName is a valid Prometheus label
+                                    name which may only contain ASCII letters, numbers,
+                                    as well as underscores.
+                                  pattern: ^[a-zA-Z_][a-zA-Z0-9_]*$
+                                  type: string
+                                type: array
+                              targetLabel:
+                                description: Label to which the resulting value is
+                                  written in a replace action. It is mandatory for
+                                  replace actions. Regex capture groups are available.
+                                type: string
+                            type: object
+                          type: array
+                      required:
+                      - url
+                      type: object
+                    type: array
+                  replicaExternalLabelName:
+                    description: ReplicaExternalLabelName is the name of the metrics
+                      external label used to denote the replica name. Defaults to
+                      __replica__. The external label is _not_ added when the value
+                      is set to the empty string.
+                    type: string
+                  replicas:
+                    description: Replicas of each shard to deploy for metrics pods.
+                      Number of replicas multiplied by the number of shards is the
+                      total number of pods created.
+                    format: int32
+                    type: integer
+                  scrapeInterval:
+                    description: ScrapeInterval is the time between consecutive scrapes.
+                    type: string
+                  scrapeTimeout:
+                    description: ScrapeTimeout is the time to wait for a target to
+                      respond before marking a scrape as failed.
+                    type: string
+                  shards:
+                    description: Shards to distribute targets onto. Number of replicas
+                      multiplied by the number of shards is the total number of pods
+                      created. Note that scaling down shards does not reshard data
+                      onto remaining instances; it must be manually moved. Increasing
+                      shards does not reshard data either, but it will continue to
+                      be available from the same instances. Sharding is performed
+                      on the content of the __address__ target meta-label.
+                    format: int32
+                    type: integer
+                type: object
+              nodeSelector:
+                additionalProperties:
+                  type: string
+                description: NodeSelector defines which nodes pods should be scheduling
+                  on.
+                type: object
+              paused:
+                description: Paused prevents actions except for deletion to be performed
+                  on the underlying managed objects.
+                type: boolean
+              podMetadata:
+                description: PodMetadata configures Labels and Annotations which are
+                  propagated to created Grafana Agent pods.
+                properties:
+                  annotations:
+                    additionalProperties:
+                      type: string
+                    description: 'Annotations is an unstructured key value map stored
+                      with a resource that may be set by external tools to store and
+                      retrieve arbitrary metadata. They are not queryable and should
+                      be preserved when modifying objects. More info: http://kubernetes.io/docs/user-guide/annotations'
+                    type: object
+                  labels:
+                    additionalProperties:
+                      type: string
+                    description: 'Map of string keys and values that can be used to
+                      organize and categorize (scope and select) objects. May match
+                      selectors of replication controllers and services. More info:
+                      http://kubernetes.io/docs/user-guide/labels'
+                    type: object
+                  name:
+                    description: 'Name must be unique within a namespace. Is required
+                      when creating resources, although some resources may allow a
+                      client to request the generation of an appropriate name automatically.
+                      Name is primarily intended for creation idempotence and configuration
+                      definition. Cannot be updated. More info: http://kubernetes.io/docs/user-guide/identifiers#names'
+                    type: string
+                type: object
+              portName:
+                description: Port name used for the pods and governing service. This
+                  defaults to agent-metrics.
+                type: string
+              priorityClassName:
+                description: PriorityClassName is the priority class assigned to pods.
+                type: string
+              resources:
+                description: Resources holds requests and limits for individual pods.
+                properties:
+                  claims:
+                    description: "Claims lists the names of resources, defined in
+                      spec.resourceClaims, that are used by this container. \n This
+                      is an alpha field and requires enabling the DynamicResourceAllocation
+                      feature gate. \n This field is immutable. It can only be set
+                      for containers."
+                    items:
+                      description: ResourceClaim references one entry in PodSpec.ResourceClaims.
+                      properties:
+                        name:
+                          description: Name must match the name of one entry in pod.spec.resourceClaims
+                            of the Pod where this field is used. It makes that resource
+                            available inside a container.
+                          type: string
+                      required:
+                      - name
+                      type: object
+                    type: array
+                    x-kubernetes-list-map-keys:
+                    - name
+                    x-kubernetes-list-type: map
+                  limits:
+                    additionalProperties:
+                      anyOf:
+                      - type: integer
+                      - type: string
+                      pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
+                      x-kubernetes-int-or-string: true
+                    description: 'Limits describes the maximum amount of compute resources
+                      allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/'
+                    type: object
+                  requests:
+                    additionalProperties:
+                      anyOf:
+                      - type: integer
+                      - type: string
+                      pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
+                      x-kubernetes-int-or-string: true
+                    description: 'Requests describes the minimum amount of compute
+                      resources required. If Requests is omitted for a container,
+                      it defaults to Limits if that is explicitly specified, otherwise
+                      to an implementation-defined value. Requests cannot exceed Limits.
+                      More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/'
+                    type: object
+                type: object
+              runtimeClassName:
+                description: RuntimeClassName is the runtime class assigned to pods.
+                type: string
+              secrets:
+                description: Secrets is a list of secrets in the same namespace as
+                  the GrafanaAgent object which will be mounted into each running
+                  Grafana Agent pod. The secrets are mounted into /var/lib/grafana-agent/extra-secrets/<secret-name>.
+                items:
+                  type: string
+                type: array
+              securityContext:
+                description: SecurityContext holds pod-level security attributes and
+                  common container settings. When unspecified, defaults to the default
+                  PodSecurityContext.
+                properties:
+                  fsGroup:
+                    description: "A special supplemental group that applies to all
+                      containers in a pod. Some volume types allow the Kubelet to
+                      change the ownership of that volume to be owned by the pod:
+                      \n 1. The owning GID will be the FSGroup 2. The setgid bit is
+                      set (new files created in the volume will be owned by FSGroup)
+                      3. The permission bits are OR'd with rw-rw---- \n If unset,
+                      the Kubelet will not modify the ownership and permissions of
+                      any volume. Note that this field cannot be set when spec.os.name
+                      is windows."
+                    format: int64
+                    type: integer
+                  fsGroupChangePolicy:
+                    description: 'fsGroupChangePolicy defines behavior of changing
+                      ownership and permission of the volume before being exposed
+                      inside Pod. This field will only apply to volume types which
+                      support fsGroup based ownership(and permissions). It will have
+                      no effect on ephemeral volume types such as: secret, configmaps
+                      and emptydir. Valid values are "OnRootMismatch" and "Always".
+                      If not specified, "Always" is used. Note that this field cannot
+                      be set when spec.os.name is windows.'
+                    type: string
+                  runAsGroup:
+                    description: The GID to run the entrypoint of the container process.
+                      Uses runtime default if unset. May also be set in SecurityContext.  If
+                      set in both SecurityContext and PodSecurityContext, the value
+                      specified in SecurityContext takes precedence for that container.
+                      Note that this field cannot be set when spec.os.name is windows.
+                    format: int64
+                    type: integer
+                  runAsNonRoot:
+                    description: Indicates that the container must run as a non-root
+                      user. If true, the Kubelet will validate the image at runtime
+                      to ensure that it does not run as UID 0 (root) and fail to start
+                      the container if it does. If unset or false, no such validation
+                      will be performed. May also be set in SecurityContext.  If set
+                      in both SecurityContext and PodSecurityContext, the value specified
+                      in SecurityContext takes precedence.
+                    type: boolean
+                  runAsUser:
+                    description: The UID to run the entrypoint of the container process.
+                      Defaults to user specified in image metadata if unspecified.
+                      May also be set in SecurityContext.  If set in both SecurityContext
+                      and PodSecurityContext, the value specified in SecurityContext
+                      takes precedence for that container. Note that this field cannot
+                      be set when spec.os.name is windows.
+                    format: int64
+                    type: integer
+                  seLinuxOptions:
+                    description: The SELinux context to be applied to all containers.
+                      If unspecified, the container runtime will allocate a random
+                      SELinux context for each container.  May also be set in SecurityContext.  If
+                      set in both SecurityContext and PodSecurityContext, the value
+                      specified in SecurityContext takes precedence for that container.
+                      Note that this field cannot be set when spec.os.name is windows.
+                    properties:
+                      level:
+                        description: Level is SELinux level label that applies to
+                          the container.
+                        type: string
+                      role:
+                        description: Role is a SELinux role label that applies to
+                          the container.
+                        type: string
+                      type:
+                        description: Type is a SELinux type label that applies to
+                          the container.
+                        type: string
+                      user:
+                        description: User is a SELinux user label that applies to
+                          the container.
+                        type: string
+                    type: object
+                  seccompProfile:
+                    description: The seccomp options to use by the containers in this
+                      pod. Note that this field cannot be set when spec.os.name is
+                      windows.
+                    properties:
+                      localhostProfile:
+                        description: localhostProfile indicates a profile defined
+                          in a file on the node should be used. The profile must be
+                          preconfigured on the node to work. Must be a descending
+                          path, relative to the kubelet's configured seccomp profile
+                          location. Must be set if type is "Localhost". Must NOT be
+                          set for any other type.
+                        type: string
+                      type:
+                        description: "type indicates which kind of seccomp profile
+                          will be applied. Valid options are: \n Localhost - a profile
+                          defined in a file on the node should be used. RuntimeDefault
+                          - the container runtime default profile should be used.
+                          Unconfined - no profile should be applied."
+                        type: string
+                    required:
+                    - type
+                    type: object
+                  supplementalGroups:
+                    description: A list of groups applied to the first process run
+                      in each container, in addition to the container's primary GID,
+                      the fsGroup (if specified), and group memberships defined in
+                      the container image for the uid of the container process. If
+                      unspecified, no additional groups are added to any container.
+                      Note that group memberships defined in the container image for
+                      the uid of the container process are still effective, even if
+                      they are not included in this list. Note that this field cannot
+                      be set when spec.os.name is windows.
+                    items:
+                      format: int64
+                      type: integer
+                    type: array
+                  sysctls:
+                    description: Sysctls hold a list of namespaced sysctls used for
+                      the pod. Pods with unsupported sysctls (by the container runtime)
+                      might fail to launch. Note that this field cannot be set when
+                      spec.os.name is windows.
+                    items:
+                      description: Sysctl defines a kernel parameter to be set
+                      properties:
+                        name:
+                          description: Name of a property to set
+                          type: string
+                        value:
+                          description: Value of a property to set
+                          type: string
+                      required:
+                      - name
+                      - value
+                      type: object
+                    type: array
+                  windowsOptions:
+                    description: The Windows specific settings applied to all containers.
+                      If unspecified, the options within a container's SecurityContext
+                      will be used. If set in both SecurityContext and PodSecurityContext,
+                      the value specified in SecurityContext takes precedence. Note
+                      that this field cannot be set when spec.os.name is linux.
+                    properties:
+                      gmsaCredentialSpec:
+                        description: GMSACredentialSpec is where the GMSA admission
+                          webhook (https://github.com/kubernetes-sigs/windows-gmsa)
+                          inlines the contents of the GMSA credential spec named by
+                          the GMSACredentialSpecName field.
+                        type: string
+                      gmsaCredentialSpecName:
+                        description: GMSACredentialSpecName is the name of the GMSA
+                          credential spec to use.
+                        type: string
+                      hostProcess:
+                        description: HostProcess determines if a container should
+                          be run as a 'Host Process' container. All of a Pod's containers
+                          must have the same effective HostProcess value (it is not
+                          allowed to have a mix of HostProcess containers and non-HostProcess
+                          containers). In addition, if HostProcess is true then HostNetwork
+                          must also be set to true.
+                        type: boolean
+                      runAsUserName:
+                        description: The UserName in Windows to run the entrypoint
+                          of the container process. Defaults to the user specified
+                          in image metadata if unspecified. May also be set in PodSecurityContext.
+                          If set in both SecurityContext and PodSecurityContext, the
+                          value specified in SecurityContext takes precedence.
+                        type: string
+                    type: object
+                type: object
+              serviceAccountName:
+                description: ServiceAccountName is the name of the ServiceAccount
+                  to use for running Grafana Agent pods.
+                type: string
+              storage:
+                description: Storage spec to specify how storage will be used.
+                properties:
+                  disableMountSubPath:
+                    description: '*Deprecated: subPath usage will be removed in a
+                      future release.*'
+                    type: boolean
+                  emptyDir:
+                    description: 'EmptyDirVolumeSource to be used by the StatefulSet.
+                      If specified, it takes precedence over `ephemeral` and `volumeClaimTemplate`.
+                      More info: https://kubernetes.io/docs/concepts/storage/volumes/#emptydir'
+                    properties:
+                      medium:
+                        description: 'medium represents what type of storage medium
+                          should back this directory. The default is "" which means
+                          to use the node''s default medium. Must be an empty string
+                          (default) or Memory. More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir'
+                        type: string
+                      sizeLimit:
+                        anyOf:
+                        - type: integer
+                        - type: string
+                        description: 'sizeLimit is the total amount of local storage
+                          required for this EmptyDir volume. The size limit is also
+                          applicable for memory medium. The maximum usage on memory
+                          medium EmptyDir would be the minimum value between the SizeLimit
+                          specified here and the sum of memory limits of all containers
+                          in a pod. The default is nil which means that the limit
+                          is undefined. More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir'
+                        pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
+                        x-kubernetes-int-or-string: true
+                    type: object
+                  ephemeral:
+                    description: 'EphemeralVolumeSource to be used by the StatefulSet.
+                      This is a beta field in k8s 1.21 and GA in 1.15. For lower versions,
+                      starting with k8s 1.19, it requires enabling the GenericEphemeralVolume
+                      feature gate. More info: https://kubernetes.io/docs/concepts/storage/ephemeral-volumes/#generic-ephemeral-volumes'
+                    properties:
+                      volumeClaimTemplate:
+                        description: "Will be used to create a stand-alone PVC to
+                          provision the volume. The pod in which this EphemeralVolumeSource
+                          is embedded will be the owner of the PVC, i.e. the PVC will
+                          be deleted together with the pod.  The name of the PVC will
+                          be `<pod name>-<volume name>` where `<volume name>` is the
+                          name from the `PodSpec.Volumes` array entry. Pod validation
+                          will reject the pod if the concatenated name is not valid
+                          for a PVC (for example, too long). \n An existing PVC with
+                          that name that is not owned by the pod will *not* be used
+                          for the pod to avoid using an unrelated volume by mistake.
+                          Starting the pod is then blocked until the unrelated PVC
+                          is removed. If such a pre-created PVC is meant to be used
+                          by the pod, the PVC has to updated with an owner reference
+                          to the pod once the pod exists. Normally this should not
+                          be necessary, but it may be useful when manually reconstructing
+                          a broken cluster. \n This field is read-only and no changes
+                          will be made by Kubernetes to the PVC after it has been
+                          created. \n Required, must not be nil."
+                        properties:
+                          metadata:
+                            description: May contain labels and annotations that will
+                              be copied into the PVC when creating it. No other fields
+                              are allowed and will be rejected during validation.
+                            type: object
+                          spec:
+                            description: The specification for the PersistentVolumeClaim.
+                              The entire content is copied unchanged into the PVC
+                              that gets created from this template. The same fields
+                              as in a PersistentVolumeClaim are also valid here.
+                            properties:
+                              accessModes:
+                                description: 'accessModes contains the desired access
+                                  modes the volume should have. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1'
+                                items:
+                                  type: string
+                                type: array
+                              dataSource:
+                                description: 'dataSource field can be used to specify
+                                  either: * An existing VolumeSnapshot object (snapshot.storage.k8s.io/VolumeSnapshot)
+                                  * An existing PVC (PersistentVolumeClaim) If the
+                                  provisioner or an external controller can support
+                                  the specified data source, it will create a new
+                                  volume based on the contents of the specified data
+                                  source. When the AnyVolumeDataSource feature gate
+                                  is enabled, dataSource contents will be copied to
+                                  dataSourceRef, and dataSourceRef contents will be
+                                  copied to dataSource when dataSourceRef.namespace
+                                  is not specified. If the namespace is specified,
+                                  then dataSourceRef will not be copied to dataSource.'
+                                properties:
+                                  apiGroup:
+                                    description: APIGroup is the group for the resource
+                                      being referenced. If APIGroup is not specified,
+                                      the specified Kind must be in the core API group.
+                                      For any other third-party types, APIGroup is
+                                      required.
+                                    type: string
+                                  kind:
+                                    description: Kind is the type of resource being
+                                      referenced
+                                    type: string
+                                  name:
+                                    description: Name is the name of resource being
+                                      referenced
+                                    type: string
+                                required:
+                                - kind
+                                - name
+                                type: object
+                                x-kubernetes-map-type: atomic
+                              dataSourceRef:
+                                description: 'dataSourceRef specifies the object from
+                                  which to populate the volume with data, if a non-empty
+                                  volume is desired. This may be any object from a
+                                  non-empty API group (non core object) or a PersistentVolumeClaim
+                                  object. When this field is specified, volume binding
+                                  will only succeed if the type of the specified object
+                                  matches some installed volume populator or dynamic
+                                  provisioner. This field will replace the functionality
+                                  of the dataSource field and as such if both fields
+                                  are non-empty, they must have the same value. For
+                                  backwards compatibility, when namespace isn''t specified
+                                  in dataSourceRef, both fields (dataSource and dataSourceRef)
+                                  will be set to the same value automatically if one
+                                  of them is empty and the other is non-empty. When
+                                  namespace is specified in dataSourceRef, dataSource
+                                  isn''t set to the same value and must be empty.
+                                  There are three important differences between dataSource
+                                  and dataSourceRef: * While dataSource only allows
+                                  two specific types of objects, dataSourceRef allows
+                                  any non-core object, as well as PersistentVolumeClaim
+                                  objects. * While dataSource ignores disallowed values
+                                  (dropping them), dataSourceRef preserves all values,
+                                  and generates an error if a disallowed value is
+                                  specified. * While dataSource only allows local
+                                  objects, dataSourceRef allows objects in any namespaces.
+                                  (Beta) Using this field requires the AnyVolumeDataSource
+                                  feature gate to be enabled. (Alpha) Using the namespace
+                                  field of dataSourceRef requires the CrossNamespaceVolumeDataSource
+                                  feature gate to be enabled.'
+                                properties:
+                                  apiGroup:
+                                    description: APIGroup is the group for the resource
+                                      being referenced. If APIGroup is not specified,
+                                      the specified Kind must be in the core API group.
+                                      For any other third-party types, APIGroup is
+                                      required.
+                                    type: string
+                                  kind:
+                                    description: Kind is the type of resource being
+                                      referenced
+                                    type: string
+                                  name:
+                                    description: Name is the name of resource being
+                                      referenced
+                                    type: string
+                                  namespace:
+                                    description: Namespace is the namespace of resource
+                                      being referenced Note that when a namespace
+                                      is specified, a gateway.networking.k8s.io/ReferenceGrant
+                                      object is required in the referent namespace
+                                      to allow that namespace's owner to accept the
+                                      reference. See the ReferenceGrant documentation
+                                      for details. (Alpha) This field requires the
+                                      CrossNamespaceVolumeDataSource feature gate
+                                      to be enabled.
+                                    type: string
+                                required:
+                                - kind
+                                - name
+                                type: object
+                              resources:
+                                description: 'resources represents the minimum resources
+                                  the volume should have. If RecoverVolumeExpansionFailure
+                                  feature is enabled users are allowed to specify
+                                  resource requirements that are lower than previous
+                                  value but must still be higher than capacity recorded
+                                  in the status field of the claim. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources'
+                                properties:
+                                  claims:
+                                    description: "Claims lists the names of resources,
+                                      defined in spec.resourceClaims, that are used
+                                      by this container. \n This is an alpha field
+                                      and requires enabling the DynamicResourceAllocation
+                                      feature gate. \n This field is immutable. It
+                                      can only be set for containers."
+                                    items:
+                                      description: ResourceClaim references one entry
+                                        in PodSpec.ResourceClaims.
+                                      properties:
+                                        name:
+                                          description: Name must match the name of
+                                            one entry in pod.spec.resourceClaims of
+                                            the Pod where this field is used. It makes
+                                            that resource available inside a container.
+                                          type: string
+                                      required:
+                                      - name
+                                      type: object
+                                    type: array
+                                    x-kubernetes-list-map-keys:
+                                    - name
+                                    x-kubernetes-list-type: map
+                                  limits:
+                                    additionalProperties:
+                                      anyOf:
+                                      - type: integer
+                                      - type: string
+                                      pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
+                                      x-kubernetes-int-or-string: true
+                                    description: 'Limits describes the maximum amount
+                                      of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/'
+                                    type: object
+                                  requests:
+                                    additionalProperties:
+                                      anyOf:
+                                      - type: integer
+                                      - type: string
+                                      pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
+                                      x-kubernetes-int-or-string: true
+                                    description: 'Requests describes the minimum amount
+                                      of compute resources required. If Requests is
+                                      omitted for a container, it defaults to Limits
+                                      if that is explicitly specified, otherwise to
+                                      an implementation-defined value. Requests cannot
+                                      exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/'
+                                    type: object
+                                type: object
+                              selector:
+                                description: selector is a label query over volumes
+                                  to consider for binding.
+                                properties:
+                                  matchExpressions:
+                                    description: matchExpressions is a list of label
+                                      selector requirements. The requirements are
+                                      ANDed.
+                                    items:
+                                      description: A label selector requirement is
+                                        a selector that contains values, a key, and
+                                        an operator that relates the key and values.
+                                      properties:
+                                        key:
+                                          description: key is the label key that the
+                                            selector applies to.
+                                          type: string
+                                        operator:
+                                          description: operator represents a key's
+                                            relationship to a set of values. Valid
+                                            operators are In, NotIn, Exists and DoesNotExist.
+                                          type: string
+                                        values:
+                                          description: values is an array of string
+                                            values. If the operator is In or NotIn,
+                                            the values array must be non-empty. If
+                                            the operator is Exists or DoesNotExist,
+                                            the values array must be empty. This array
+                                            is replaced during a strategic merge patch.
+                                          items:
+                                            type: string
+                                          type: array
+                                      required:
+                                      - key
+                                      - operator
+                                      type: object
+                                    type: array
+                                  matchLabels:
+                                    additionalProperties:
+                                      type: string
+                                    description: matchLabels is a map of {key,value}
+                                      pairs. A single {key,value} in the matchLabels
+                                      map is equivalent to an element of matchExpressions,
+                                      whose key field is "key", the operator is "In",
+                                      and the values array contains only "value".
+                                      The requirements are ANDed.
+                                    type: object
+                                type: object
+                                x-kubernetes-map-type: atomic
+                              storageClassName:
+                                description: 'storageClassName is the name of the
+                                  StorageClass required by the claim. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1'
+                                type: string
+                              volumeMode:
+                                description: volumeMode defines what type of volume
+                                  is required by the claim. Value of Filesystem is
+                                  implied when not included in claim spec.
+                                type: string
+                              volumeName:
+                                description: volumeName is the binding reference to
+                                  the PersistentVolume backing this claim.
+                                type: string
+                            type: object
+                        required:
+                        - spec
+                        type: object
+                    type: object
+                  volumeClaimTemplate:
+                    description: Defines the PVC spec to be used by the Prometheus
+                      StatefulSets. The easiest way to use a volume that cannot be
+                      automatically provisioned is to use a label selector alongside
+                      manually created PersistentVolumes.
+                    properties:
+                      apiVersion:
+                        description: 'APIVersion defines the versioned schema of this
+                          representation of an object. Servers should convert recognized
+                          schemas to the latest internal value, and may reject unrecognized
+                          values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+                        type: string
+                      kind:
+                        description: 'Kind is a string value representing the REST
+                          resource this object represents. Servers may infer this
+                          from the endpoint the client submits requests to. Cannot
+                          be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+                        type: string
+                      metadata:
+                        description: EmbeddedMetadata contains metadata relevant to
+                          an EmbeddedResource.
+                        properties:
+                          annotations:
+                            additionalProperties:
+                              type: string
+                            description: 'Annotations is an unstructured key value
+                              map stored with a resource that may be set by external
+                              tools to store and retrieve arbitrary metadata. They
+                              are not queryable and should be preserved when modifying
+                              objects. More info: http://kubernetes.io/docs/user-guide/annotations'
+                            type: object
+                          labels:
+                            additionalProperties:
+                              type: string
+                            description: 'Map of string keys and values that can be
+                              used to organize and categorize (scope and select) objects.
+                              May match selectors of replication controllers and services.
+                              More info: http://kubernetes.io/docs/user-guide/labels'
+                            type: object
+                          name:
+                            description: 'Name must be unique within a namespace.
+                              Is required when creating resources, although some resources
+                              may allow a client to request the generation of an appropriate
+                              name automatically. Name is primarily intended for creation
+                              idempotence and configuration definition. Cannot be
+                              updated. More info: http://kubernetes.io/docs/user-guide/identifiers#names'
+                            type: string
+                        type: object
+                      spec:
+                        description: 'Defines the desired characteristics of a volume
+                          requested by a pod author. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims'
+                        properties:
+                          accessModes:
+                            description: 'accessModes contains the desired access
+                              modes the volume should have. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1'
+                            items:
+                              type: string
+                            type: array
+                          dataSource:
+                            description: 'dataSource field can be used to specify
+                              either: * An existing VolumeSnapshot object (snapshot.storage.k8s.io/VolumeSnapshot)
+                              * An existing PVC (PersistentVolumeClaim) If the provisioner
+                              or an external controller can support the specified
+                              data source, it will create a new volume based on the
+                              contents of the specified data source. When the AnyVolumeDataSource
+                              feature gate is enabled, dataSource contents will be
+                              copied to dataSourceRef, and dataSourceRef contents
+                              will be copied to dataSource when dataSourceRef.namespace
+                              is not specified. If the namespace is specified, then
+                              dataSourceRef will not be copied to dataSource.'
+                            properties:
+                              apiGroup:
+                                description: APIGroup is the group for the resource
+                                  being referenced. If APIGroup is not specified,
+                                  the specified Kind must be in the core API group.
+                                  For any other third-party types, APIGroup is required.
+                                type: string
+                              kind:
+                                description: Kind is the type of resource being referenced
+                                type: string
+                              name:
+                                description: Name is the name of resource being referenced
+                                type: string
+                            required:
+                            - kind
+                            - name
+                            type: object
+                            x-kubernetes-map-type: atomic
+                          dataSourceRef:
+                            description: 'dataSourceRef specifies the object from
+                              which to populate the volume with data, if a non-empty
+                              volume is desired. This may be any object from a non-empty
+                              API group (non core object) or a PersistentVolumeClaim
+                              object. When this field is specified, volume binding
+                              will only succeed if the type of the specified object
+                              matches some installed volume populator or dynamic provisioner.
+                              This field will replace the functionality of the dataSource
+                              field and as such if both fields are non-empty, they
+                              must have the same value. For backwards compatibility,
+                              when namespace isn''t specified in dataSourceRef, both
+                              fields (dataSource and dataSourceRef) will be set to
+                              the same value automatically if one of them is empty
+                              and the other is non-empty. When namespace is specified
+                              in dataSourceRef, dataSource isn''t set to the same
+                              value and must be empty. There are three important differences
+                              between dataSource and dataSourceRef: * While dataSource
+                              only allows two specific types of objects, dataSourceRef
+                              allows any non-core object, as well as PersistentVolumeClaim
+                              objects. * While dataSource ignores disallowed values
+                              (dropping them), dataSourceRef preserves all values,
+                              and generates an error if a disallowed value is specified.
+                              * While dataSource only allows local objects, dataSourceRef
+                              allows objects in any namespaces. (Beta) Using this
+                              field requires the AnyVolumeDataSource feature gate
+                              to be enabled. (Alpha) Using the namespace field of
+                              dataSourceRef requires the CrossNamespaceVolumeDataSource
+                              feature gate to be enabled.'
+                            properties:
+                              apiGroup:
+                                description: APIGroup is the group for the resource
+                                  being referenced. If APIGroup is not specified,
+                                  the specified Kind must be in the core API group.
+                                  For any other third-party types, APIGroup is required.
+                                type: string
+                              kind:
+                                description: Kind is the type of resource being referenced
+                                type: string
+                              name:
+                                description: Name is the name of resource being referenced
+                                type: string
+                              namespace:
+                                description: Namespace is the namespace of resource
+                                  being referenced Note that when a namespace is specified,
+                                  a gateway.networking.k8s.io/ReferenceGrant object
+                                  is required in the referent namespace to allow that
+                                  namespace's owner to accept the reference. See the
+                                  ReferenceGrant documentation for details. (Alpha)
+                                  This field requires the CrossNamespaceVolumeDataSource
+                                  feature gate to be enabled.
+                                type: string
+                            required:
+                            - kind
+                            - name
+                            type: object
+                          resources:
+                            description: 'resources represents the minimum resources
+                              the volume should have. If RecoverVolumeExpansionFailure
+                              feature is enabled users are allowed to specify resource
+                              requirements that are lower than previous value but
+                              must still be higher than capacity recorded in the status
+                              field of the claim. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources'
+                            properties:
+                              claims:
+                                description: "Claims lists the names of resources,
+                                  defined in spec.resourceClaims, that are used by
+                                  this container. \n This is an alpha field and requires
+                                  enabling the DynamicResourceAllocation feature gate.
+                                  \n This field is immutable. It can only be set for
+                                  containers."
+                                items:
+                                  description: ResourceClaim references one entry
+                                    in PodSpec.ResourceClaims.
+                                  properties:
+                                    name:
+                                      description: Name must match the name of one
+                                        entry in pod.spec.resourceClaims of the Pod
+                                        where this field is used. It makes that resource
+                                        available inside a container.
+                                      type: string
+                                  required:
+                                  - name
+                                  type: object
+                                type: array
+                                x-kubernetes-list-map-keys:
+                                - name
+                                x-kubernetes-list-type: map
+                              limits:
+                                additionalProperties:
+                                  anyOf:
+                                  - type: integer
+                                  - type: string
+                                  pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
+                                  x-kubernetes-int-or-string: true
+                                description: 'Limits describes the maximum amount
+                                  of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/'
+                                type: object
+                              requests:
+                                additionalProperties:
+                                  anyOf:
+                                  - type: integer
+                                  - type: string
+                                  pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
+                                  x-kubernetes-int-or-string: true
+                                description: 'Requests describes the minimum amount
+                                  of compute resources required. If Requests is omitted
+                                  for a container, it defaults to Limits if that is
+                                  explicitly specified, otherwise to an implementation-defined
+                                  value. Requests cannot exceed Limits. More info:
+                                  https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/'
+                                type: object
+                            type: object
+                          selector:
+                            description: selector is a label query over volumes to
+                              consider for binding.
+                            properties:
+                              matchExpressions:
+                                description: matchExpressions is a list of label selector
+                                  requirements. The requirements are ANDed.
+                                items:
+                                  description: A label selector requirement is a selector
+                                    that contains values, a key, and an operator that
+                                    relates the key and values.
+                                  properties:
+                                    key:
+                                      description: key is the label key that the selector
+                                        applies to.
+                                      type: string
+                                    operator:
+                                      description: operator represents a key's relationship
+                                        to a set of values. Valid operators are In,
+                                        NotIn, Exists and DoesNotExist.
+                                      type: string
+                                    values:
+                                      description: values is an array of string values.
+                                        If the operator is In or NotIn, the values
+                                        array must be non-empty. If the operator is
+                                        Exists or DoesNotExist, the values array must
+                                        be empty. This array is replaced during a
+                                        strategic merge patch.
+                                      items:
+                                        type: string
+                                      type: array
+                                  required:
+                                  - key
+                                  - operator
+                                  type: object
+                                type: array
+                              matchLabels:
+                                additionalProperties:
+                                  type: string
+                                description: matchLabels is a map of {key,value} pairs.
+                                  A single {key,value} in the matchLabels map is equivalent
+                                  to an element of matchExpressions, whose key field
+                                  is "key", the operator is "In", and the values array
+                                  contains only "value". The requirements are ANDed.
+                                type: object
+                            type: object
+                            x-kubernetes-map-type: atomic
+                          storageClassName:
+                            description: 'storageClassName is the name of the StorageClass
+                              required by the claim. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1'
+                            type: string
+                          volumeMode:
+                            description: volumeMode defines what type of volume is
+                              required by the claim. Value of Filesystem is implied
+                              when not included in claim spec.
+                            type: string
+                          volumeName:
+                            description: volumeName is the binding reference to the
+                              PersistentVolume backing this claim.
+                            type: string
+                        type: object
+                      status:
+                        description: '*Deprecated: this field is never set.*'
+                        properties:
+                          accessModes:
+                            description: 'accessModes contains the actual access modes
+                              the volume backing the PVC has. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1'
+                            items:
+                              type: string
+                            type: array
+                          allocatedResourceStatuses:
+                            additionalProperties:
+                              description: When a controller receives persistentvolume
+                                claim update with ClaimResourceStatus for a resource
+                                that it does not recognizes, then it should ignore
+                                that update and let other controllers handle it.
+                              type: string
+                            description: "allocatedResourceStatuses stores status
+                              of resource being resized for the given PVC. Key names
+                              follow standard Kubernetes label syntax. Valid values
+                              are either: * Un-prefixed keys: - storage - the capacity
+                              of the volume. * Custom resources must use implementation-defined
+                              prefixed names such as \"example.com/my-custom-resource\"
+                              Apart from above values - keys that are unprefixed or
+                              have kubernetes.io prefix are considered reserved and
+                              hence may not be used. \n ClaimResourceStatus can be
+                              in any of following states: - ControllerResizeInProgress:
+                              State set when resize controller starts resizing the
+                              volume in control-plane. - ControllerResizeFailed: State
+                              set when resize has failed in resize controller with
+                              a terminal error. - NodeResizePending: State set when
+                              resize controller has finished resizing the volume but
+                              further resizing of volume is needed on the node. -
+                              NodeResizeInProgress: State set when kubelet starts
+                              resizing the volume. - NodeResizeFailed: State set when
+                              resizing has failed in kubelet with a terminal error.
+                              Transient errors don't set NodeResizeFailed. For example:
+                              if expanding a PVC for more capacity - this field can
+                              be one of the following states: - pvc.status.allocatedResourceStatus['storage']
+                              = \"ControllerResizeInProgress\" - pvc.status.allocatedResourceStatus['storage']
+                              = \"ControllerResizeFailed\" - pvc.status.allocatedResourceStatus['storage']
+                              = \"NodeResizePending\" - pvc.status.allocatedResourceStatus['storage']
+                              = \"NodeResizeInProgress\" - pvc.status.allocatedResourceStatus['storage']
+                              = \"NodeResizeFailed\" When this field is not set, it
+                              means that no resize operation is in progress for the
+                              given PVC. \n A controller that receives PVC update
+                              with previously unknown resourceName or ClaimResourceStatus
+                              should ignore the update for the purpose it was designed.
+                              For example - a controller that only is responsible
+                              for resizing capacity of the volume, should ignore PVC
+                              updates that change other valid resources associated
+                              with PVC. \n This is an alpha field and requires enabling
+                              RecoverVolumeExpansionFailure feature."
+                            type: object
+                            x-kubernetes-map-type: granular
+                          allocatedResources:
+                            additionalProperties:
+                              anyOf:
+                              - type: integer
+                              - type: string
+                              pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
+                              x-kubernetes-int-or-string: true
+                            description: "allocatedResources tracks the resources
+                              allocated to a PVC including its capacity. Key names
+                              follow standard Kubernetes label syntax. Valid values
+                              are either: * Un-prefixed keys: - storage - the capacity
+                              of the volume. * Custom resources must use implementation-defined
+                              prefixed names such as \"example.com/my-custom-resource\"
+                              Apart from above values - keys that are unprefixed or
+                              have kubernetes.io prefix are considered reserved and
+                              hence may not be used. \n Capacity reported here may
+                              be larger than the actual capacity when a volume expansion
+                              operation is requested. For storage quota, the larger
+                              value from allocatedResources and PVC.spec.resources
+                              is used. If allocatedResources is not set, PVC.spec.resources
+                              alone is used for quota calculation. If a volume expansion
+                              capacity request is lowered, allocatedResources is only
+                              lowered if there are no expansion operations in progress
+                              and if the actual volume capacity is equal or lower
+                              than the requested capacity. \n A controller that receives
+                              PVC update with previously unknown resourceName should
+                              ignore the update for the purpose it was designed. For
+                              example - a controller that only is responsible for
+                              resizing capacity of the volume, should ignore PVC updates
+                              that change other valid resources associated with PVC.
+                              \n This is an alpha field and requires enabling RecoverVolumeExpansionFailure
+                              feature."
+                            type: object
+                          capacity:
+                            additionalProperties:
+                              anyOf:
+                              - type: integer
+                              - type: string
+                              pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
+                              x-kubernetes-int-or-string: true
+                            description: capacity represents the actual resources
+                              of the underlying volume.
+                            type: object
+                          conditions:
+                            description: conditions is the current Condition of persistent
+                              volume claim. If underlying persistent volume is being
+                              resized then the Condition will be set to 'ResizeStarted'.
+                            items:
+                              description: PersistentVolumeClaimCondition contains
+                                details about state of pvc
+                              properties:
+                                lastProbeTime:
+                                  description: lastProbeTime is the time we probed
+                                    the condition.
+                                  format: date-time
+                                  type: string
+                                lastTransitionTime:
+                                  description: lastTransitionTime is the time the
+                                    condition transitioned from one status to another.
+                                  format: date-time
+                                  type: string
+                                message:
+                                  description: message is the human-readable message
+                                    indicating details about last transition.
+                                  type: string
+                                reason:
+                                  description: reason is a unique, this should be
+                                    a short, machine understandable string that gives
+                                    the reason for condition's last transition. If
+                                    it reports "ResizeStarted" that means the underlying
+                                    persistent volume is being resized.
+                                  type: string
+                                status:
+                                  type: string
+                                type:
+                                  description: PersistentVolumeClaimConditionType
+                                    is a valid value of PersistentVolumeClaimCondition.Type
+                                  type: string
+                              required:
+                              - status
+                              - type
+                              type: object
+                            type: array
+                          phase:
+                            description: phase represents the current phase of PersistentVolumeClaim.
+                            type: string
+                        type: object
+                    type: object
+                type: object
+              tolerations:
+                description: Tolerations, if specified, controls the pod's tolerations.
+                items:
+                  description: The pod this Toleration is attached to tolerates any
+                    taint that matches the triple <key,value,effect> using the matching
+                    operator <operator>.
+                  properties:
+                    effect:
+                      description: Effect indicates the taint effect to match. Empty
+                        means match all taint effects. When specified, allowed values
+                        are NoSchedule, PreferNoSchedule and NoExecute.
+                      type: string
+                    key:
+                      description: Key is the taint key that the toleration applies
+                        to. Empty means match all taint keys. If the key is empty,
+                        operator must be Exists; this combination means to match all
+                        values and all keys.
+                      type: string
+                    operator:
+                      description: Operator represents a key's relationship to the
+                        value. Valid operators are Exists and Equal. Defaults to Equal.
+                        Exists is equivalent to wildcard for value, so that a pod
+                        can tolerate all taints of a particular category.
+                      type: string
+                    tolerationSeconds:
+                      description: TolerationSeconds represents the period of time
+                        the toleration (which must be of effect NoExecute, otherwise
+                        this field is ignored) tolerates the taint. By default, it
+                        is not set, which means tolerate the taint forever (do not
+                        evict). Zero and negative values will be treated as 0 (evict
+                        immediately) by the system.
+                      format: int64
+                      type: integer
+                    value:
+                      description: Value is the taint value the toleration matches
+                        to. If the operator is Exists, the value should be empty,
+                        otherwise just a regular string.
+                      type: string
+                  type: object
+                type: array
+              topologySpreadConstraints:
+                description: TopologySpreadConstraints, if specified, controls the
+                  pod's topology spread constraints.
+                items:
+                  description: TopologySpreadConstraint specifies how to spread matching
+                    pods among the given topology.
+                  properties:
+                    labelSelector:
+                      description: LabelSelector is used to find matching pods. Pods
+                        that match this label selector are counted to determine the
+                        number of pods in their corresponding topology domain.
+                      properties:
+                        matchExpressions:
+                          description: matchExpressions is a list of label selector
+                            requirements. The requirements are ANDed.
+                          items:
+                            description: A label selector requirement is a selector
+                              that contains values, a key, and an operator that relates
+                              the key and values.
+                            properties:
+                              key:
+                                description: key is the label key that the selector
+                                  applies to.
+                                type: string
+                              operator:
+                                description: operator represents a key's relationship
+                                  to a set of values. Valid operators are In, NotIn,
+                                  Exists and DoesNotExist.
+                                type: string
+                              values:
+                                description: values is an array of string values.
+                                  If the operator is In or NotIn, the values array
+                                  must be non-empty. If the operator is Exists or
+                                  DoesNotExist, the values array must be empty. This
+                                  array is replaced during a strategic merge patch.
+                                items:
+                                  type: string
+                                type: array
+                            required:
+                            - key
+                            - operator
+                            type: object
+                          type: array
+                        matchLabels:
+                          additionalProperties:
+                            type: string
+                          description: matchLabels is a map of {key,value} pairs.
+                            A single {key,value} in the matchLabels map is equivalent
+                            to an element of matchExpressions, whose key field is
+                            "key", the operator is "In", and the values array contains
+                            only "value". The requirements are ANDed.
+                          type: object
+                      type: object
+                      x-kubernetes-map-type: atomic
+                    matchLabelKeys:
+                      description: "MatchLabelKeys is a set of pod label keys to select
+                        the pods over which spreading will be calculated. The keys
+                        are used to lookup values from the incoming pod labels, those
+                        key-value labels are ANDed with labelSelector to select the
+                        group of existing pods over which spreading will be calculated
+                        for the incoming pod. The same key is forbidden to exist in
+                        both MatchLabelKeys and LabelSelector. MatchLabelKeys cannot
+                        be set when LabelSelector isn't set. Keys that don't exist
+                        in the incoming pod labels will be ignored. A null or empty
+                        list means only match against labelSelector. \n This is a
+                        beta field and requires the MatchLabelKeysInPodTopologySpread
+                        feature gate to be enabled (enabled by default)."
+                      items:
+                        type: string
+                      type: array
+                      x-kubernetes-list-type: atomic
+                    maxSkew:
+                      description: 'MaxSkew describes the degree to which pods may
+                        be unevenly distributed. When `whenUnsatisfiable=DoNotSchedule`,
+                        it is the maximum permitted difference between the number
+                        of matching pods in the target topology and the global minimum.
+                        The global minimum is the minimum number of matching pods
+                        in an eligible domain or zero if the number of eligible domains
+                        is less than MinDomains. For example, in a 3-zone cluster,
+                        MaxSkew is set to 1, and pods with the same labelSelector
+                        spread as 2/2/1: In this case, the global minimum is 1. |
+                        zone1 | zone2 | zone3 | |  P P  |  P P  |   P   | - if MaxSkew
+                        is 1, incoming pod can only be scheduled to zone3 to become
+                        2/2/2; scheduling it onto zone1(zone2) would make the ActualSkew(3-1)
+                        on zone1(zone2) violate MaxSkew(1). - if MaxSkew is 2, incoming
+                        pod can be scheduled onto any zone. When `whenUnsatisfiable=ScheduleAnyway`,
+                        it is used to give higher precedence to topologies that satisfy
+                        it. It''s a required field. Default value is 1 and 0 is not
+                        allowed.'
+                      format: int32
+                      type: integer
+                    minDomains:
+                      description: "MinDomains indicates a minimum number of eligible
+                        domains. When the number of eligible domains with matching
+                        topology keys is less than minDomains, Pod Topology Spread
+                        treats \"global minimum\" as 0, and then the calculation of
+                        Skew is performed. And when the number of eligible domains
+                        with matching topology keys equals or greater than minDomains,
+                        this value has no effect on scheduling. As a result, when
+                        the number of eligible domains is less than minDomains, scheduler
+                        won't schedule more than maxSkew Pods to those domains. If
+                        value is nil, the constraint behaves as if MinDomains is equal
+                        to 1. Valid values are integers greater than 0. When value
+                        is not nil, WhenUnsatisfiable must be DoNotSchedule. \n For
+                        example, in a 3-zone cluster, MaxSkew is set to 2, MinDomains
+                        is set to 5 and pods with the same labelSelector spread as
+                        2/2/2: | zone1 | zone2 | zone3 | |  P P  |  P P  |  P P  |
+                        The number of domains is less than 5(MinDomains), so \"global
+                        minimum\" is treated as 0. In this situation, new pod with
+                        the same labelSelector cannot be scheduled, because computed
+                        skew will be 3(3 - 0) if new Pod is scheduled to any of the
+                        three zones, it will violate MaxSkew. \n This is a beta field
+                        and requires the MinDomainsInPodTopologySpread feature gate
+                        to be enabled (enabled by default)."
+                      format: int32
+                      type: integer
+                    nodeAffinityPolicy:
+                      description: "NodeAffinityPolicy indicates how we will treat
+                        Pod's nodeAffinity/nodeSelector when calculating pod topology
+                        spread skew. Options are: - Honor: only nodes matching nodeAffinity/nodeSelector
+                        are included in the calculations. - Ignore: nodeAffinity/nodeSelector
+                        are ignored. All nodes are included in the calculations. \n
+                        If this value is nil, the behavior is equivalent to the Honor
+                        policy. This is a beta-level feature default enabled by the
+                        NodeInclusionPolicyInPodTopologySpread feature flag."
+                      type: string
+                    nodeTaintsPolicy:
+                      description: "NodeTaintsPolicy indicates how we will treat node
+                        taints when calculating pod topology spread skew. Options
+                        are: - Honor: nodes without taints, along with tainted nodes
+                        for which the incoming pod has a toleration, are included.
+                        - Ignore: node taints are ignored. All nodes are included.
+                        \n If this value is nil, the behavior is equivalent to the
+                        Ignore policy. This is a beta-level feature default enabled
+                        by the NodeInclusionPolicyInPodTopologySpread feature flag."
+                      type: string
+                    topologyKey:
+                      description: TopologyKey is the key of node labels. Nodes that
+                        have a label with this key and identical values are considered
+                        to be in the same topology. We consider each <key, value>
+                        as a "bucket", and try to put balanced number of pods into
+                        each bucket. We define a domain as a particular instance of
+                        a topology. Also, we define an eligible domain as a domain
+                        whose nodes meet the requirements of nodeAffinityPolicy and
+                        nodeTaintsPolicy. e.g. If TopologyKey is "kubernetes.io/hostname",
+                        each Node is a domain of that topology. And, if TopologyKey
+                        is "topology.kubernetes.io/zone", each zone is a domain of
+                        that topology. It's a required field.
+                      type: string
+                    whenUnsatisfiable:
+                      description: 'WhenUnsatisfiable indicates how to deal with a
+                        pod if it doesn''t satisfy the spread constraint. - DoNotSchedule
+                        (default) tells the scheduler not to schedule it. - ScheduleAnyway
+                        tells the scheduler to schedule the pod in any location, but
+                        giving higher precedence to topologies that would help reduce
+                        the skew. A constraint is considered "Unsatisfiable" for an
+                        incoming pod if and only if every possible node assignment
+                        for that pod would violate "MaxSkew" on some topology. For
+                        example, in a 3-zone cluster, MaxSkew is set to 1, and pods
+                        with the same labelSelector spread as 3/1/1: | zone1 | zone2
+                        | zone3 | | P P P |   P   |   P   | If WhenUnsatisfiable is
+                        set to DoNotSchedule, incoming pod can only be scheduled to
+                        zone2(zone3) to become 3/2/1(3/1/2) as ActualSkew(2-1) on
+                        zone2(zone3) satisfies MaxSkew(1). In other words, the cluster
+                        can still be imbalanced, but scheduler won''t make it *more*
+                        imbalanced. It''s a required field.'
+                      type: string
+                  required:
+                  - maxSkew
+                  - topologyKey
+                  - whenUnsatisfiable
+                  type: object
+                type: array
+              version:
+                description: Version of Grafana Agent to be deployed.
+                type: string
+              volumeMounts:
+                description: VolumeMounts lets you configure additional VolumeMounts
+                  on the output StatefulSet definition. Specified VolumeMounts are
+                  appended to other VolumeMounts generated as a result of StorageSpec
+                  objects in the Grafana Agent container.
+                items:
+                  description: VolumeMount describes a mounting of a Volume within
+                    a container.
+                  properties:
+                    mountPath:
+                      description: Path within the container at which the volume should
+                        be mounted.  Must not contain ':'.
+                      type: string
+                    mountPropagation:
+                      description: mountPropagation determines how mounts are propagated
+                        from the host to container and the other way around. When
+                        not set, MountPropagationNone is used. This field is beta
+                        in 1.10.
+                      type: string
+                    name:
+                      description: This must match the Name of a Volume.
+                      type: string
+                    readOnly:
+                      description: Mounted read-only if true, read-write otherwise
+                        (false or unspecified). Defaults to false.
+                      type: boolean
+                    subPath:
+                      description: Path within the volume from which the container's
+                        volume should be mounted. Defaults to "" (volume's root).
+                      type: string
+                    subPathExpr:
+                      description: Expanded path within the volume from which the
+                        container's volume should be mounted. Behaves similarly to
+                        SubPath but environment variable references $(VAR_NAME) are
+                        expanded using the container's environment. Defaults to ""
+                        (volume's root). SubPathExpr and SubPath are mutually exclusive.
+                      type: string
+                  required:
+                  - mountPath
+                  - name
+                  type: object
+                type: array
+              volumes:
+                description: Volumes allows configuration of additional volumes on
+                  the output StatefulSet definition. The volumes specified are appended
+                  to other volumes that are generated as a result of StorageSpec objects.
+                items:
+                  description: Volume represents a named volume in a pod that may
+                    be accessed by any container in the pod.
+                  properties:
+                    awsElasticBlockStore:
+                      description: 'awsElasticBlockStore represents an AWS Disk resource
+                        that is attached to a kubelet''s host machine and then exposed
+                        to the pod. More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore'
+                      properties:
+                        fsType:
+                          description: 'fsType is the filesystem type of the volume
+                            that you want to mount. Tip: Ensure that the filesystem
+                            type is supported by the host operating system. Examples:
+                            "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4"
+                            if unspecified. More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
+                            TODO: how do we prevent errors in the filesystem from
+                            compromising the machine'
+                          type: string
+                        partition:
+                          description: 'partition is the partition in the volume that
+                            you want to mount. If omitted, the default is to mount
+                            by volume name. Examples: For volume /dev/sda1, you specify
+                            the partition as "1". Similarly, the volume partition
+                            for /dev/sda is "0" (or you can leave the property empty).'
+                          format: int32
+                          type: integer
+                        readOnly:
+                          description: 'readOnly value true will force the readOnly
+                            setting in VolumeMounts. More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore'
+                          type: boolean
+                        volumeID:
+                          description: 'volumeID is unique ID of the persistent disk
+                            resource in AWS (Amazon EBS volume). More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore'
+                          type: string
+                      required:
+                      - volumeID
+                      type: object
+                    azureDisk:
+                      description: azureDisk represents an Azure Data Disk mount on
+                        the host and bind mount to the pod.
+                      properties:
+                        cachingMode:
+                          description: 'cachingMode is the Host Caching mode: None,
+                            Read Only, Read Write.'
+                          type: string
+                        diskName:
+                          description: diskName is the Name of the data disk in the
+                            blob storage
+                          type: string
+                        diskURI:
+                          description: diskURI is the URI of data disk in the blob
+                            storage
+                          type: string
+                        fsType:
+                          description: fsType is Filesystem type to mount. Must be
+                            a filesystem type supported by the host operating system.
+                            Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4"
+                            if unspecified.
+                          type: string
+                        kind:
+                          description: 'kind expected values are Shared: multiple
+                            blob disks per storage account  Dedicated: single blob
+                            disk per storage account  Managed: azure managed data
+                            disk (only in managed availability set). defaults to shared'
+                          type: string
+                        readOnly:
+                          description: readOnly Defaults to false (read/write). ReadOnly
+                            here will force the ReadOnly setting in VolumeMounts.
+                          type: boolean
+                      required:
+                      - diskName
+                      - diskURI
+                      type: object
+                    azureFile:
+                      description: azureFile represents an Azure File Service mount
+                        on the host and bind mount to the pod.
+                      properties:
+                        readOnly:
+                          description: readOnly defaults to false (read/write). ReadOnly
+                            here will force the ReadOnly setting in VolumeMounts.
+                          type: boolean
+                        secretName:
+                          description: secretName is the  name of secret that contains
+                            Azure Storage Account Name and Key
+                          type: string
+                        shareName:
+                          description: shareName is the azure share Name
+                          type: string
+                      required:
+                      - secretName
+                      - shareName
+                      type: object
+                    cephfs:
+                      description: cephFS represents a Ceph FS mount on the host that
+                        shares a pod's lifetime
+                      properties:
+                        monitors:
+                          description: 'monitors is Required: Monitors is a collection
+                            of Ceph monitors More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it'
+                          items:
+                            type: string
+                          type: array
+                        path:
+                          description: 'path is Optional: Used as the mounted root,
+                            rather than the full Ceph tree, default is /'
+                          type: string
+                        readOnly:
+                          description: 'readOnly is Optional: Defaults to false (read/write).
+                            ReadOnly here will force the ReadOnly setting in VolumeMounts.
+                            More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it'
+                          type: boolean
+                        secretFile:
+                          description: 'secretFile is Optional: SecretFile is the
+                            path to key ring for User, default is /etc/ceph/user.secret
+                            More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it'
+                          type: string
+                        secretRef:
+                          description: 'secretRef is Optional: SecretRef is reference
+                            to the authentication secret for User, default is empty.
+                            More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it'
+                          properties:
+                            name:
+                              description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                TODO: Add other useful fields. apiVersion, kind, uid?'
+                              type: string
+                          type: object
+                          x-kubernetes-map-type: atomic
+                        user:
+                          description: 'user is optional: User is the rados user name,
+                            default is admin More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it'
+                          type: string
+                      required:
+                      - monitors
+                      type: object
+                    cinder:
+                      description: 'cinder represents a cinder volume attached and
+                        mounted on kubelets host machine. More info: https://examples.k8s.io/mysql-cinder-pd/README.md'
+                      properties:
+                        fsType:
+                          description: 'fsType is the filesystem type to mount. Must
+                            be a filesystem type supported by the host operating system.
+                            Examples: "ext4", "xfs", "ntfs". Implicitly inferred to
+                            be "ext4" if unspecified. More info: https://examples.k8s.io/mysql-cinder-pd/README.md'
+                          type: string
+                        readOnly:
+                          description: 'readOnly defaults to false (read/write). ReadOnly
+                            here will force the ReadOnly setting in VolumeMounts.
+                            More info: https://examples.k8s.io/mysql-cinder-pd/README.md'
+                          type: boolean
+                        secretRef:
+                          description: 'secretRef is optional: points to a secret
+                            object containing parameters used to connect to OpenStack.'
+                          properties:
+                            name:
+                              description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                TODO: Add other useful fields. apiVersion, kind, uid?'
+                              type: string
+                          type: object
+                          x-kubernetes-map-type: atomic
+                        volumeID:
+                          description: 'volumeID used to identify the volume in cinder.
+                            More info: https://examples.k8s.io/mysql-cinder-pd/README.md'
+                          type: string
+                      required:
+                      - volumeID
+                      type: object
+                    configMap:
+                      description: configMap represents a configMap that should populate
+                        this volume
+                      properties:
+                        defaultMode:
+                          description: 'defaultMode is optional: mode bits used to
+                            set permissions on created files by default. Must be an
+                            octal value between 0000 and 0777 or a decimal value between
+                            0 and 511. YAML accepts both octal and decimal values,
+                            JSON requires decimal values for mode bits. Defaults to
+                            0644. Directories within the path are not affected by
+                            this setting. This might be in conflict with other options
+                            that affect the file mode, like fsGroup, and the result
+                            can be other mode bits set.'
+                          format: int32
+                          type: integer
+                        items:
+                          description: items if unspecified, each key-value pair in
+                            the Data field of the referenced ConfigMap will be projected
+                            into the volume as a file whose name is the key and content
+                            is the value. If specified, the listed keys will be projected
+                            into the specified paths, and unlisted keys will not be
+                            present. If a key is specified which is not present in
+                            the ConfigMap, the volume setup will error unless it is
+                            marked optional. Paths must be relative and may not contain
+                            the '..' path or start with '..'.
+                          items:
+                            description: Maps a string key to a path within a volume.
+                            properties:
+                              key:
+                                description: key is the key to project.
+                                type: string
+                              mode:
+                                description: 'mode is Optional: mode bits used to
+                                  set permissions on this file. Must be an octal value
+                                  between 0000 and 0777 or a decimal value between
+                                  0 and 511. YAML accepts both octal and decimal values,
+                                  JSON requires decimal values for mode bits. If not
+                                  specified, the volume defaultMode will be used.
+                                  This might be in conflict with other options that
+                                  affect the file mode, like fsGroup, and the result
+                                  can be other mode bits set.'
+                                format: int32
+                                type: integer
+                              path:
+                                description: path is the relative path of the file
+                                  to map the key to. May not be an absolute path.
+                                  May not contain the path element '..'. May not start
+                                  with the string '..'.
+                                type: string
+                            required:
+                            - key
+                            - path
+                            type: object
+                          type: array
+                        name:
+                          description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                            TODO: Add other useful fields. apiVersion, kind, uid?'
+                          type: string
+                        optional:
+                          description: optional specify whether the ConfigMap or its
+                            keys must be defined
+                          type: boolean
+                      type: object
+                      x-kubernetes-map-type: atomic
+                    csi:
+                      description: csi (Container Storage Interface) represents ephemeral
+                        storage that is handled by certain external CSI drivers (Beta
+                        feature).
+                      properties:
+                        driver:
+                          description: driver is the name of the CSI driver that handles
+                            this volume. Consult with your admin for the correct name
+                            as registered in the cluster.
+                          type: string
+                        fsType:
+                          description: fsType to mount. Ex. "ext4", "xfs", "ntfs".
+                            If not provided, the empty value is passed to the associated
+                            CSI driver which will determine the default filesystem
+                            to apply.
+                          type: string
+                        nodePublishSecretRef:
+                          description: nodePublishSecretRef is a reference to the
+                            secret object containing sensitive information to pass
+                            to the CSI driver to complete the CSI NodePublishVolume
+                            and NodeUnpublishVolume calls. This field is optional,
+                            and  may be empty if no secret is required. If the secret
+                            object contains more than one secret, all secret references
+                            are passed.
+                          properties:
+                            name:
+                              description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                TODO: Add other useful fields. apiVersion, kind, uid?'
+                              type: string
+                          type: object
+                          x-kubernetes-map-type: atomic
+                        readOnly:
+                          description: readOnly specifies a read-only configuration
+                            for the volume. Defaults to false (read/write).
+                          type: boolean
+                        volumeAttributes:
+                          additionalProperties:
+                            type: string
+                          description: volumeAttributes stores driver-specific properties
+                            that are passed to the CSI driver. Consult your driver's
+                            documentation for supported values.
+                          type: object
+                      required:
+                      - driver
+                      type: object
+                    downwardAPI:
+                      description: downwardAPI represents downward API about the pod
+                        that should populate this volume
+                      properties:
+                        defaultMode:
+                          description: 'Optional: mode bits to use on created files
+                            by default. Must be a Optional: mode bits used to set
+                            permissions on created files by default. Must be an octal
+                            value between 0000 and 0777 or a decimal value between
+                            0 and 511. YAML accepts both octal and decimal values,
+                            JSON requires decimal values for mode bits. Defaults to
+                            0644. Directories within the path are not affected by
+                            this setting. This might be in conflict with other options
+                            that affect the file mode, like fsGroup, and the result
+                            can be other mode bits set.'
+                          format: int32
+                          type: integer
+                        items:
+                          description: Items is a list of downward API volume file
+                          items:
+                            description: DownwardAPIVolumeFile represents information
+                              to create the file containing the pod field
+                            properties:
+                              fieldRef:
+                                description: 'Required: Selects a field of the pod:
+                                  only annotations, labels, name and namespace are
+                                  supported.'
+                                properties:
+                                  apiVersion:
+                                    description: Version of the schema the FieldPath
+                                      is written in terms of, defaults to "v1".
+                                    type: string
+                                  fieldPath:
+                                    description: Path of the field to select in the
+                                      specified API version.
+                                    type: string
+                                required:
+                                - fieldPath
+                                type: object
+                                x-kubernetes-map-type: atomic
+                              mode:
+                                description: 'Optional: mode bits used to set permissions
+                                  on this file, must be an octal value between 0000
+                                  and 0777 or a decimal value between 0 and 511. YAML
+                                  accepts both octal and decimal values, JSON requires
+                                  decimal values for mode bits. If not specified,
+                                  the volume defaultMode will be used. This might
+                                  be in conflict with other options that affect the
+                                  file mode, like fsGroup, and the result can be other
+                                  mode bits set.'
+                                format: int32
+                                type: integer
+                              path:
+                                description: 'Required: Path is  the relative path
+                                  name of the file to be created. Must not be absolute
+                                  or contain the ''..'' path. Must be utf-8 encoded.
+                                  The first item of the relative path must not start
+                                  with ''..'''
+                                type: string
+                              resourceFieldRef:
+                                description: 'Selects a resource of the container:
+                                  only resources limits and requests (limits.cpu,
+                                  limits.memory, requests.cpu and requests.memory)
+                                  are currently supported.'
+                                properties:
+                                  containerName:
+                                    description: 'Container name: required for volumes,
+                                      optional for env vars'
+                                    type: string
+                                  divisor:
+                                    anyOf:
+                                    - type: integer
+                                    - type: string
+                                    description: Specifies the output format of the
+                                      exposed resources, defaults to "1"
+                                    pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
+                                    x-kubernetes-int-or-string: true
+                                  resource:
+                                    description: 'Required: resource to select'
+                                    type: string
+                                required:
+                                - resource
+                                type: object
+                                x-kubernetes-map-type: atomic
+                            required:
+                            - path
+                            type: object
+                          type: array
+                      type: object
+                    emptyDir:
+                      description: 'emptyDir represents a temporary directory that
+                        shares a pod''s lifetime. More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir'
+                      properties:
+                        medium:
+                          description: 'medium represents what type of storage medium
+                            should back this directory. The default is "" which means
+                            to use the node''s default medium. Must be an empty string
+                            (default) or Memory. More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir'
+                          type: string
+                        sizeLimit:
+                          anyOf:
+                          - type: integer
+                          - type: string
+                          description: 'sizeLimit is the total amount of local storage
+                            required for this EmptyDir volume. The size limit is also
+                            applicable for memory medium. The maximum usage on memory
+                            medium EmptyDir would be the minimum value between the
+                            SizeLimit specified here and the sum of memory limits
+                            of all containers in a pod. The default is nil which means
+                            that the limit is undefined. More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir'
+                          pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
+                          x-kubernetes-int-or-string: true
+                      type: object
+                    ephemeral:
+                      description: "ephemeral represents a volume that is handled
+                        by a cluster storage driver. The volume's lifecycle is tied
+                        to the pod that defines it - it will be created before the
+                        pod starts, and deleted when the pod is removed. \n Use this
+                        if: a) the volume is only needed while the pod runs, b) features
+                        of normal volumes like restoring from snapshot or capacity
+                        tracking are needed, c) the storage driver is specified through
+                        a storage class, and d) the storage driver supports dynamic
+                        volume provisioning through a PersistentVolumeClaim (see EphemeralVolumeSource
+                        for more information on the connection between this volume
+                        type and PersistentVolumeClaim). \n Use PersistentVolumeClaim
+                        or one of the vendor-specific APIs for volumes that persist
+                        for longer than the lifecycle of an individual pod. \n Use
+                        CSI for light-weight local ephemeral volumes if the CSI driver
+                        is meant to be used that way - see the documentation of the
+                        driver for more information. \n A pod can use both types of
+                        ephemeral volumes and persistent volumes at the same time."
+                      properties:
+                        volumeClaimTemplate:
+                          description: "Will be used to create a stand-alone PVC to
+                            provision the volume. The pod in which this EphemeralVolumeSource
+                            is embedded will be the owner of the PVC, i.e. the PVC
+                            will be deleted together with the pod.  The name of the
+                            PVC will be `<pod name>-<volume name>` where `<volume
+                            name>` is the name from the `PodSpec.Volumes` array entry.
+                            Pod validation will reject the pod if the concatenated
+                            name is not valid for a PVC (for example, too long). \n
+                            An existing PVC with that name that is not owned by the
+                            pod will *not* be used for the pod to avoid using an unrelated
+                            volume by mistake. Starting the pod is then blocked until
+                            the unrelated PVC is removed. If such a pre-created PVC
+                            is meant to be used by the pod, the PVC has to updated
+                            with an owner reference to the pod once the pod exists.
+                            Normally this should not be necessary, but it may be useful
+                            when manually reconstructing a broken cluster. \n This
+                            field is read-only and no changes will be made by Kubernetes
+                            to the PVC after it has been created. \n Required, must
+                            not be nil."
+                          properties:
+                            metadata:
+                              description: May contain labels and annotations that
+                                will be copied into the PVC when creating it. No other
+                                fields are allowed and will be rejected during validation.
+                              type: object
+                            spec:
+                              description: The specification for the PersistentVolumeClaim.
+                                The entire content is copied unchanged into the PVC
+                                that gets created from this template. The same fields
+                                as in a PersistentVolumeClaim are also valid here.
+                              properties:
+                                accessModes:
+                                  description: 'accessModes contains the desired access
+                                    modes the volume should have. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1'
+                                  items:
+                                    type: string
+                                  type: array
+                                dataSource:
+                                  description: 'dataSource field can be used to specify
+                                    either: * An existing VolumeSnapshot object (snapshot.storage.k8s.io/VolumeSnapshot)
+                                    * An existing PVC (PersistentVolumeClaim) If the
+                                    provisioner or an external controller can support
+                                    the specified data source, it will create a new
+                                    volume based on the contents of the specified
+                                    data source. When the AnyVolumeDataSource feature
+                                    gate is enabled, dataSource contents will be copied
+                                    to dataSourceRef, and dataSourceRef contents will
+                                    be copied to dataSource when dataSourceRef.namespace
+                                    is not specified. If the namespace is specified,
+                                    then dataSourceRef will not be copied to dataSource.'
+                                  properties:
+                                    apiGroup:
+                                      description: APIGroup is the group for the resource
+                                        being referenced. If APIGroup is not specified,
+                                        the specified Kind must be in the core API
+                                        group. For any other third-party types, APIGroup
+                                        is required.
+                                      type: string
+                                    kind:
+                                      description: Kind is the type of resource being
+                                        referenced
+                                      type: string
+                                    name:
+                                      description: Name is the name of resource being
+                                        referenced
+                                      type: string
+                                  required:
+                                  - kind
+                                  - name
+                                  type: object
+                                  x-kubernetes-map-type: atomic
+                                dataSourceRef:
+                                  description: 'dataSourceRef specifies the object
+                                    from which to populate the volume with data, if
+                                    a non-empty volume is desired. This may be any
+                                    object from a non-empty API group (non core object)
+                                    or a PersistentVolumeClaim object. When this field
+                                    is specified, volume binding will only succeed
+                                    if the type of the specified object matches some
+                                    installed volume populator or dynamic provisioner.
+                                    This field will replace the functionality of the
+                                    dataSource field and as such if both fields are
+                                    non-empty, they must have the same value. For
+                                    backwards compatibility, when namespace isn''t
+                                    specified in dataSourceRef, both fields (dataSource
+                                    and dataSourceRef) will be set to the same value
+                                    automatically if one of them is empty and the
+                                    other is non-empty. When namespace is specified
+                                    in dataSourceRef, dataSource isn''t set to the
+                                    same value and must be empty. There are three
+                                    important differences between dataSource and dataSourceRef:
+                                    * While dataSource only allows two specific types
+                                    of objects, dataSourceRef allows any non-core
+                                    object, as well as PersistentVolumeClaim objects.
+                                    * While dataSource ignores disallowed values (dropping
+                                    them), dataSourceRef preserves all values, and
+                                    generates an error if a disallowed value is specified.
+                                    * While dataSource only allows local objects,
+                                    dataSourceRef allows objects in any namespaces.
+                                    (Beta) Using this field requires the AnyVolumeDataSource
+                                    feature gate to be enabled. (Alpha) Using the
+                                    namespace field of dataSourceRef requires the
+                                    CrossNamespaceVolumeDataSource feature gate to
+                                    be enabled.'
+                                  properties:
+                                    apiGroup:
+                                      description: APIGroup is the group for the resource
+                                        being referenced. If APIGroup is not specified,
+                                        the specified Kind must be in the core API
+                                        group. For any other third-party types, APIGroup
+                                        is required.
+                                      type: string
+                                    kind:
+                                      description: Kind is the type of resource being
+                                        referenced
+                                      type: string
+                                    name:
+                                      description: Name is the name of resource being
+                                        referenced
+                                      type: string
+                                    namespace:
+                                      description: Namespace is the namespace of resource
+                                        being referenced Note that when a namespace
+                                        is specified, a gateway.networking.k8s.io/ReferenceGrant
+                                        object is required in the referent namespace
+                                        to allow that namespace's owner to accept
+                                        the reference. See the ReferenceGrant documentation
+                                        for details. (Alpha) This field requires the
+                                        CrossNamespaceVolumeDataSource feature gate
+                                        to be enabled.
+                                      type: string
+                                  required:
+                                  - kind
+                                  - name
+                                  type: object
+                                resources:
+                                  description: 'resources represents the minimum resources
+                                    the volume should have. If RecoverVolumeExpansionFailure
+                                    feature is enabled users are allowed to specify
+                                    resource requirements that are lower than previous
+                                    value but must still be higher than capacity recorded
+                                    in the status field of the claim. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources'
+                                  properties:
+                                    claims:
+                                      description: "Claims lists the names of resources,
+                                        defined in spec.resourceClaims, that are used
+                                        by this container. \n This is an alpha field
+                                        and requires enabling the DynamicResourceAllocation
+                                        feature gate. \n This field is immutable.
+                                        It can only be set for containers."
+                                      items:
+                                        description: ResourceClaim references one
+                                          entry in PodSpec.ResourceClaims.
+                                        properties:
+                                          name:
+                                            description: Name must match the name
+                                              of one entry in pod.spec.resourceClaims
+                                              of the Pod where this field is used.
+                                              It makes that resource available inside
+                                              a container.
+                                            type: string
+                                        required:
+                                        - name
+                                        type: object
+                                      type: array
+                                      x-kubernetes-list-map-keys:
+                                      - name
+                                      x-kubernetes-list-type: map
+                                    limits:
+                                      additionalProperties:
+                                        anyOf:
+                                        - type: integer
+                                        - type: string
+                                        pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
+                                        x-kubernetes-int-or-string: true
+                                      description: 'Limits describes the maximum amount
+                                        of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/'
+                                      type: object
+                                    requests:
+                                      additionalProperties:
+                                        anyOf:
+                                        - type: integer
+                                        - type: string
+                                        pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
+                                        x-kubernetes-int-or-string: true
+                                      description: 'Requests describes the minimum
+                                        amount of compute resources required. If Requests
+                                        is omitted for a container, it defaults to
+                                        Limits if that is explicitly specified, otherwise
+                                        to an implementation-defined value. Requests
+                                        cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/'
+                                      type: object
+                                  type: object
+                                selector:
+                                  description: selector is a label query over volumes
+                                    to consider for binding.
+                                  properties:
+                                    matchExpressions:
+                                      description: matchExpressions is a list of label
+                                        selector requirements. The requirements are
+                                        ANDed.
+                                      items:
+                                        description: A label selector requirement
+                                          is a selector that contains values, a key,
+                                          and an operator that relates the key and
+                                          values.
+                                        properties:
+                                          key:
+                                            description: key is the label key that
+                                              the selector applies to.
+                                            type: string
+                                          operator:
+                                            description: operator represents a key's
+                                              relationship to a set of values. Valid
+                                              operators are In, NotIn, Exists and
+                                              DoesNotExist.
+                                            type: string
+                                          values:
+                                            description: values is an array of string
+                                              values. If the operator is In or NotIn,
+                                              the values array must be non-empty.
+                                              If the operator is Exists or DoesNotExist,
+                                              the values array must be empty. This
+                                              array is replaced during a strategic
+                                              merge patch.
+                                            items:
+                                              type: string
+                                            type: array
+                                        required:
+                                        - key
+                                        - operator
+                                        type: object
+                                      type: array
+                                    matchLabels:
+                                      additionalProperties:
+                                        type: string
+                                      description: matchLabels is a map of {key,value}
+                                        pairs. A single {key,value} in the matchLabels
+                                        map is equivalent to an element of matchExpressions,
+                                        whose key field is "key", the operator is
+                                        "In", and the values array contains only "value".
+                                        The requirements are ANDed.
+                                      type: object
+                                  type: object
+                                  x-kubernetes-map-type: atomic
+                                storageClassName:
+                                  description: 'storageClassName is the name of the
+                                    StorageClass required by the claim. More info:
+                                    https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1'
+                                  type: string
+                                volumeMode:
+                                  description: volumeMode defines what type of volume
+                                    is required by the claim. Value of Filesystem
+                                    is implied when not included in claim spec.
+                                  type: string
+                                volumeName:
+                                  description: volumeName is the binding reference
+                                    to the PersistentVolume backing this claim.
+                                  type: string
+                              type: object
+                          required:
+                          - spec
+                          type: object
+                      type: object
+                    fc:
+                      description: fc represents a Fibre Channel resource that is
+                        attached to a kubelet's host machine and then exposed to the
+                        pod.
+                      properties:
+                        fsType:
+                          description: 'fsType is the filesystem type to mount. Must
+                            be a filesystem type supported by the host operating system.
+                            Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4"
+                            if unspecified. TODO: how do we prevent errors in the
+                            filesystem from compromising the machine'
+                          type: string
+                        lun:
+                          description: 'lun is Optional: FC target lun number'
+                          format: int32
+                          type: integer
+                        readOnly:
+                          description: 'readOnly is Optional: Defaults to false (read/write).
+                            ReadOnly here will force the ReadOnly setting in VolumeMounts.'
+                          type: boolean
+                        targetWWNs:
+                          description: 'targetWWNs is Optional: FC target worldwide
+                            names (WWNs)'
+                          items:
+                            type: string
+                          type: array
+                        wwids:
+                          description: 'wwids Optional: FC volume world wide identifiers
+                            (wwids) Either wwids or combination of targetWWNs and
+                            lun must be set, but not both simultaneously.'
+                          items:
+                            type: string
+                          type: array
+                      type: object
+                    flexVolume:
+                      description: flexVolume represents a generic volume resource
+                        that is provisioned/attached using an exec based plugin.
+                      properties:
+                        driver:
+                          description: driver is the name of the driver to use for
+                            this volume.
+                          type: string
+                        fsType:
+                          description: fsType is the filesystem type to mount. Must
+                            be a filesystem type supported by the host operating system.
+                            Ex. "ext4", "xfs", "ntfs". The default filesystem depends
+                            on FlexVolume script.
+                          type: string
+                        options:
+                          additionalProperties:
+                            type: string
+                          description: 'options is Optional: this field holds extra
+                            command options if any.'
+                          type: object
+                        readOnly:
+                          description: 'readOnly is Optional: defaults to false (read/write).
+                            ReadOnly here will force the ReadOnly setting in VolumeMounts.'
+                          type: boolean
+                        secretRef:
+                          description: 'secretRef is Optional: secretRef is reference
+                            to the secret object containing sensitive information
+                            to pass to the plugin scripts. This may be empty if no
+                            secret object is specified. If the secret object contains
+                            more than one secret, all secrets are passed to the plugin
+                            scripts.'
+                          properties:
+                            name:
+                              description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                TODO: Add other useful fields. apiVersion, kind, uid?'
+                              type: string
+                          type: object
+                          x-kubernetes-map-type: atomic
+                      required:
+                      - driver
+                      type: object
+                    flocker:
+                      description: flocker represents a Flocker volume attached to
+                        a kubelet's host machine. This depends on the Flocker control
+                        service being running
+                      properties:
+                        datasetName:
+                          description: datasetName is Name of the dataset stored as
+                            metadata -> name on the dataset for Flocker should be
+                            considered as deprecated
+                          type: string
+                        datasetUUID:
+                          description: datasetUUID is the UUID of the dataset. This
+                            is unique identifier of a Flocker dataset
+                          type: string
+                      type: object
+                    gcePersistentDisk:
+                      description: 'gcePersistentDisk represents a GCE Disk resource
+                        that is attached to a kubelet''s host machine and then exposed
+                        to the pod. More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk'
+                      properties:
+                        fsType:
+                          description: 'fsType is filesystem type of the volume that
+                            you want to mount. Tip: Ensure that the filesystem type
+                            is supported by the host operating system. Examples: "ext4",
+                            "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified.
+                            More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
+                            TODO: how do we prevent errors in the filesystem from
+                            compromising the machine'
+                          type: string
+                        partition:
+                          description: 'partition is the partition in the volume that
+                            you want to mount. If omitted, the default is to mount
+                            by volume name. Examples: For volume /dev/sda1, you specify
+                            the partition as "1". Similarly, the volume partition
+                            for /dev/sda is "0" (or you can leave the property empty).
+                            More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk'
+                          format: int32
+                          type: integer
+                        pdName:
+                          description: 'pdName is unique name of the PD resource in
+                            GCE. Used to identify the disk in GCE. More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk'
+                          type: string
+                        readOnly:
+                          description: 'readOnly here will force the ReadOnly setting
+                            in VolumeMounts. Defaults to false. More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk'
+                          type: boolean
+                      required:
+                      - pdName
+                      type: object
+                    gitRepo:
+                      description: 'gitRepo represents a git repository at a particular
+                        revision. DEPRECATED: GitRepo is deprecated. To provision
+                        a container with a git repo, mount an EmptyDir into an InitContainer
+                        that clones the repo using git, then mount the EmptyDir into
+                        the Pod''s container.'
+                      properties:
+                        directory:
+                          description: directory is the target directory name. Must
+                            not contain or start with '..'.  If '.' is supplied, the
+                            volume directory will be the git repository.  Otherwise,
+                            if specified, the volume will contain the git repository
+                            in the subdirectory with the given name.
+                          type: string
+                        repository:
+                          description: repository is the URL
+                          type: string
+                        revision:
+                          description: revision is the commit hash for the specified
+                            revision.
+                          type: string
+                      required:
+                      - repository
+                      type: object
+                    glusterfs:
+                      description: 'glusterfs represents a Glusterfs mount on the
+                        host that shares a pod''s lifetime. More info: https://examples.k8s.io/volumes/glusterfs/README.md'
+                      properties:
+                        endpoints:
+                          description: 'endpoints is the endpoint name that details
+                            Glusterfs topology. More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod'
+                          type: string
+                        path:
+                          description: 'path is the Glusterfs volume path. More info:
+                            https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod'
+                          type: string
+                        readOnly:
+                          description: 'readOnly here will force the Glusterfs volume
+                            to be mounted with read-only permissions. Defaults to
+                            false. More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod'
+                          type: boolean
+                      required:
+                      - endpoints
+                      - path
+                      type: object
+                    hostPath:
+                      description: 'hostPath represents a pre-existing file or directory
+                        on the host machine that is directly exposed to the container.
+                        This is generally used for system agents or other privileged
+                        things that are allowed to see the host machine. Most containers
+                        will NOT need this. More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath
+                        --- TODO(jonesdl) We need to restrict who can use host directory
+                        mounts and who can/can not mount host directories as read/write.'
+                      properties:
+                        path:
+                          description: 'path of the directory on the host. If the
+                            path is a symlink, it will follow the link to the real
+                            path. More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath'
+                          type: string
+                        type:
+                          description: 'type for HostPath Volume Defaults to "" More
+                            info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath'
+                          type: string
+                      required:
+                      - path
+                      type: object
+                    iscsi:
+                      description: 'iscsi represents an ISCSI Disk resource that is
+                        attached to a kubelet''s host machine and then exposed to
+                        the pod. More info: https://examples.k8s.io/volumes/iscsi/README.md'
+                      properties:
+                        chapAuthDiscovery:
+                          description: chapAuthDiscovery defines whether support iSCSI
+                            Discovery CHAP authentication
+                          type: boolean
+                        chapAuthSession:
+                          description: chapAuthSession defines whether support iSCSI
+                            Session CHAP authentication
+                          type: boolean
+                        fsType:
+                          description: 'fsType is the filesystem type of the volume
+                            that you want to mount. Tip: Ensure that the filesystem
+                            type is supported by the host operating system. Examples:
+                            "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4"
+                            if unspecified. More info: https://kubernetes.io/docs/concepts/storage/volumes#iscsi
+                            TODO: how do we prevent errors in the filesystem from
+                            compromising the machine'
+                          type: string
+                        initiatorName:
+                          description: initiatorName is the custom iSCSI Initiator
+                            Name. If initiatorName is specified with iscsiInterface
+                            simultaneously, new iSCSI interface <target portal>:<volume
+                            name> will be created for the connection.
+                          type: string
+                        iqn:
+                          description: iqn is the target iSCSI Qualified Name.
+                          type: string
+                        iscsiInterface:
+                          description: iscsiInterface is the interface Name that uses
+                            an iSCSI transport. Defaults to 'default' (tcp).
+                          type: string
+                        lun:
+                          description: lun represents iSCSI Target Lun number.
+                          format: int32
+                          type: integer
+                        portals:
+                          description: portals is the iSCSI Target Portal List. The
+                            portal is either an IP or ip_addr:port if the port is
+                            other than default (typically TCP ports 860 and 3260).
+                          items:
+                            type: string
+                          type: array
+                        readOnly:
+                          description: readOnly here will force the ReadOnly setting
+                            in VolumeMounts. Defaults to false.
+                          type: boolean
+                        secretRef:
+                          description: secretRef is the CHAP Secret for iSCSI target
+                            and initiator authentication
+                          properties:
+                            name:
+                              description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                TODO: Add other useful fields. apiVersion, kind, uid?'
+                              type: string
+                          type: object
+                          x-kubernetes-map-type: atomic
+                        targetPortal:
+                          description: targetPortal is iSCSI Target Portal. The Portal
+                            is either an IP or ip_addr:port if the port is other than
+                            default (typically TCP ports 860 and 3260).
+                          type: string
+                      required:
+                      - iqn
+                      - lun
+                      - targetPortal
+                      type: object
+                    name:
+                      description: 'name of the volume. Must be a DNS_LABEL and unique
+                        within the pod. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
+                      type: string
+                    nfs:
+                      description: 'nfs represents an NFS mount on the host that shares
+                        a pod''s lifetime More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs'
+                      properties:
+                        path:
+                          description: 'path that is exported by the NFS server. More
+                            info: https://kubernetes.io/docs/concepts/storage/volumes#nfs'
+                          type: string
+                        readOnly:
+                          description: 'readOnly here will force the NFS export to
+                            be mounted with read-only permissions. Defaults to false.
+                            More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs'
+                          type: boolean
+                        server:
+                          description: 'server is the hostname or IP address of the
+                            NFS server. More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs'
+                          type: string
+                      required:
+                      - path
+                      - server
+                      type: object
+                    persistentVolumeClaim:
+                      description: 'persistentVolumeClaimVolumeSource represents a
+                        reference to a PersistentVolumeClaim in the same namespace.
+                        More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims'
+                      properties:
+                        claimName:
+                          description: 'claimName is the name of a PersistentVolumeClaim
+                            in the same namespace as the pod using this volume. More
+                            info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims'
+                          type: string
+                        readOnly:
+                          description: readOnly Will force the ReadOnly setting in
+                            VolumeMounts. Default false.
+                          type: boolean
+                      required:
+                      - claimName
+                      type: object
+                    photonPersistentDisk:
+                      description: photonPersistentDisk represents a PhotonController
+                        persistent disk attached and mounted on kubelets host machine
+                      properties:
+                        fsType:
+                          description: fsType is the filesystem type to mount. Must
+                            be a filesystem type supported by the host operating system.
+                            Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4"
+                            if unspecified.
+                          type: string
+                        pdID:
+                          description: pdID is the ID that identifies Photon Controller
+                            persistent disk
+                          type: string
+                      required:
+                      - pdID
+                      type: object
+                    portworxVolume:
+                      description: portworxVolume represents a portworx volume attached
+                        and mounted on kubelets host machine
+                      properties:
+                        fsType:
+                          description: fSType represents the filesystem type to mount
+                            Must be a filesystem type supported by the host operating
+                            system. Ex. "ext4", "xfs". Implicitly inferred to be "ext4"
+                            if unspecified.
+                          type: string
+                        readOnly:
+                          description: readOnly defaults to false (read/write). ReadOnly
+                            here will force the ReadOnly setting in VolumeMounts.
+                          type: boolean
+                        volumeID:
+                          description: volumeID uniquely identifies a Portworx volume
+                          type: string
+                      required:
+                      - volumeID
+                      type: object
+                    projected:
+                      description: projected items for all in one resources secrets,
+                        configmaps, and downward API
+                      properties:
+                        defaultMode:
+                          description: defaultMode are the mode bits used to set permissions
+                            on created files by default. Must be an octal value between
+                            0000 and 0777 or a decimal value between 0 and 511. YAML
+                            accepts both octal and decimal values, JSON requires decimal
+                            values for mode bits. Directories within the path are
+                            not affected by this setting. This might be in conflict
+                            with other options that affect the file mode, like fsGroup,
+                            and the result can be other mode bits set.
+                          format: int32
+                          type: integer
+                        sources:
+                          description: sources is the list of volume projections
+                          items:
+                            description: Projection that may be projected along with
+                              other supported volume types
+                            properties:
+                              configMap:
+                                description: configMap information about the configMap
+                                  data to project
+                                properties:
+                                  items:
+                                    description: items if unspecified, each key-value
+                                      pair in the Data field of the referenced ConfigMap
+                                      will be projected into the volume as a file
+                                      whose name is the key and content is the value.
+                                      If specified, the listed keys will be projected
+                                      into the specified paths, and unlisted keys
+                                      will not be present. If a key is specified which
+                                      is not present in the ConfigMap, the volume
+                                      setup will error unless it is marked optional.
+                                      Paths must be relative and may not contain the
+                                      '..' path or start with '..'.
+                                    items:
+                                      description: Maps a string key to a path within
+                                        a volume.
+                                      properties:
+                                        key:
+                                          description: key is the key to project.
+                                          type: string
+                                        mode:
+                                          description: 'mode is Optional: mode bits
+                                            used to set permissions on this file.
+                                            Must be an octal value between 0000 and
+                                            0777 or a decimal value between 0 and
+                                            511. YAML accepts both octal and decimal
+                                            values, JSON requires decimal values for
+                                            mode bits. If not specified, the volume
+                                            defaultMode will be used. This might be
+                                            in conflict with other options that affect
+                                            the file mode, like fsGroup, and the result
+                                            can be other mode bits set.'
+                                          format: int32
+                                          type: integer
+                                        path:
+                                          description: path is the relative path of
+                                            the file to map the key to. May not be
+                                            an absolute path. May not contain the
+                                            path element '..'. May not start with
+                                            the string '..'.
+                                          type: string
+                                      required:
+                                      - key
+                                      - path
+                                      type: object
+                                    type: array
+                                  name:
+                                    description: 'Name of the referent. More info:
+                                      https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                      TODO: Add other useful fields. apiVersion, kind,
+                                      uid?'
+                                    type: string
+                                  optional:
+                                    description: optional specify whether the ConfigMap
+                                      or its keys must be defined
+                                    type: boolean
+                                type: object
+                                x-kubernetes-map-type: atomic
+                              downwardAPI:
+                                description: downwardAPI information about the downwardAPI
+                                  data to project
+                                properties:
+                                  items:
+                                    description: Items is a list of DownwardAPIVolume
+                                      file
+                                    items:
+                                      description: DownwardAPIVolumeFile represents
+                                        information to create the file containing
+                                        the pod field
+                                      properties:
+                                        fieldRef:
+                                          description: 'Required: Selects a field
+                                            of the pod: only annotations, labels,
+                                            name and namespace are supported.'
+                                          properties:
+                                            apiVersion:
+                                              description: Version of the schema the
+                                                FieldPath is written in terms of,
+                                                defaults to "v1".
+                                              type: string
+                                            fieldPath:
+                                              description: Path of the field to select
+                                                in the specified API version.
+                                              type: string
+                                          required:
+                                          - fieldPath
+                                          type: object
+                                          x-kubernetes-map-type: atomic
+                                        mode:
+                                          description: 'Optional: mode bits used to
+                                            set permissions on this file, must be
+                                            an octal value between 0000 and 0777 or
+                                            a decimal value between 0 and 511. YAML
+                                            accepts both octal and decimal values,
+                                            JSON requires decimal values for mode
+                                            bits. If not specified, the volume defaultMode
+                                            will be used. This might be in conflict
+                                            with other options that affect the file
+                                            mode, like fsGroup, and the result can
+                                            be other mode bits set.'
+                                          format: int32
+                                          type: integer
+                                        path:
+                                          description: 'Required: Path is  the relative
+                                            path name of the file to be created. Must
+                                            not be absolute or contain the ''..''
+                                            path. Must be utf-8 encoded. The first
+                                            item of the relative path must not start
+                                            with ''..'''
+                                          type: string
+                                        resourceFieldRef:
+                                          description: 'Selects a resource of the
+                                            container: only resources limits and requests
+                                            (limits.cpu, limits.memory, requests.cpu
+                                            and requests.memory) are currently supported.'
+                                          properties:
+                                            containerName:
+                                              description: 'Container name: required
+                                                for volumes, optional for env vars'
+                                              type: string
+                                            divisor:
+                                              anyOf:
+                                              - type: integer
+                                              - type: string
+                                              description: Specifies the output format
+                                                of the exposed resources, defaults
+                                                to "1"
+                                              pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
+                                              x-kubernetes-int-or-string: true
+                                            resource:
+                                              description: 'Required: resource to
+                                                select'
+                                              type: string
+                                          required:
+                                          - resource
+                                          type: object
+                                          x-kubernetes-map-type: atomic
+                                      required:
+                                      - path
+                                      type: object
+                                    type: array
+                                type: object
+                              secret:
+                                description: secret information about the secret data
+                                  to project
+                                properties:
+                                  items:
+                                    description: items if unspecified, each key-value
+                                      pair in the Data field of the referenced Secret
+                                      will be projected into the volume as a file
+                                      whose name is the key and content is the value.
+                                      If specified, the listed keys will be projected
+                                      into the specified paths, and unlisted keys
+                                      will not be present. If a key is specified which
+                                      is not present in the Secret, the volume setup
+                                      will error unless it is marked optional. Paths
+                                      must be relative and may not contain the '..'
+                                      path or start with '..'.
+                                    items:
+                                      description: Maps a string key to a path within
+                                        a volume.
+                                      properties:
+                                        key:
+                                          description: key is the key to project.
+                                          type: string
+                                        mode:
+                                          description: 'mode is Optional: mode bits
+                                            used to set permissions on this file.
+                                            Must be an octal value between 0000 and
+                                            0777 or a decimal value between 0 and
+                                            511. YAML accepts both octal and decimal
+                                            values, JSON requires decimal values for
+                                            mode bits. If not specified, the volume
+                                            defaultMode will be used. This might be
+                                            in conflict with other options that affect
+                                            the file mode, like fsGroup, and the result
+                                            can be other mode bits set.'
+                                          format: int32
+                                          type: integer
+                                        path:
+                                          description: path is the relative path of
+                                            the file to map the key to. May not be
+                                            an absolute path. May not contain the
+                                            path element '..'. May not start with
+                                            the string '..'.
+                                          type: string
+                                      required:
+                                      - key
+                                      - path
+                                      type: object
+                                    type: array
+                                  name:
+                                    description: 'Name of the referent. More info:
+                                      https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                      TODO: Add other useful fields. apiVersion, kind,
+                                      uid?'
+                                    type: string
+                                  optional:
+                                    description: optional field specify whether the
+                                      Secret or its key must be defined
+                                    type: boolean
+                                type: object
+                                x-kubernetes-map-type: atomic
+                              serviceAccountToken:
+                                description: serviceAccountToken is information about
+                                  the serviceAccountToken data to project
+                                properties:
+                                  audience:
+                                    description: audience is the intended audience
+                                      of the token. A recipient of a token must identify
+                                      itself with an identifier specified in the audience
+                                      of the token, and otherwise should reject the
+                                      token. The audience defaults to the identifier
+                                      of the apiserver.
+                                    type: string
+                                  expirationSeconds:
+                                    description: expirationSeconds is the requested
+                                      duration of validity of the service account
+                                      token. As the token approaches expiration, the
+                                      kubelet volume plugin will proactively rotate
+                                      the service account token. The kubelet will
+                                      start trying to rotate the token if the token
+                                      is older than 80 percent of its time to live
+                                      or if the token is older than 24 hours.Defaults
+                                      to 1 hour and must be at least 10 minutes.
+                                    format: int64
+                                    type: integer
+                                  path:
+                                    description: path is the path relative to the
+                                      mount point of the file to project the token
+                                      into.
+                                    type: string
+                                required:
+                                - path
+                                type: object
+                            type: object
+                          type: array
+                      type: object
+                    quobyte:
+                      description: quobyte represents a Quobyte mount on the host
+                        that shares a pod's lifetime
+                      properties:
+                        group:
+                          description: group to map volume access to Default is no
+                            group
+                          type: string
+                        readOnly:
+                          description: readOnly here will force the Quobyte volume
+                            to be mounted with read-only permissions. Defaults to
+                            false.
+                          type: boolean
+                        registry:
+                          description: registry represents a single or multiple Quobyte
+                            Registry services specified as a string as host:port pair
+                            (multiple entries are separated with commas) which acts
+                            as the central registry for volumes
+                          type: string
+                        tenant:
+                          description: tenant owning the given Quobyte volume in the
+                            Backend Used with dynamically provisioned Quobyte volumes,
+                            value is set by the plugin
+                          type: string
+                        user:
+                          description: user to map volume access to Defaults to serivceaccount
+                            user
+                          type: string
+                        volume:
+                          description: volume is a string that references an already
+                            created Quobyte volume by name.
+                          type: string
+                      required:
+                      - registry
+                      - volume
+                      type: object
+                    rbd:
+                      description: 'rbd represents a Rados Block Device mount on the
+                        host that shares a pod''s lifetime. More info: https://examples.k8s.io/volumes/rbd/README.md'
+                      properties:
+                        fsType:
+                          description: 'fsType is the filesystem type of the volume
+                            that you want to mount. Tip: Ensure that the filesystem
+                            type is supported by the host operating system. Examples:
+                            "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4"
+                            if unspecified. More info: https://kubernetes.io/docs/concepts/storage/volumes#rbd
+                            TODO: how do we prevent errors in the filesystem from
+                            compromising the machine'
+                          type: string
+                        image:
+                          description: 'image is the rados image name. More info:
+                            https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it'
+                          type: string
+                        keyring:
+                          description: 'keyring is the path to key ring for RBDUser.
+                            Default is /etc/ceph/keyring. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it'
+                          type: string
+                        monitors:
+                          description: 'monitors is a collection of Ceph monitors.
+                            More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it'
+                          items:
+                            type: string
+                          type: array
+                        pool:
+                          description: 'pool is the rados pool name. Default is rbd.
+                            More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it'
+                          type: string
+                        readOnly:
+                          description: 'readOnly here will force the ReadOnly setting
+                            in VolumeMounts. Defaults to false. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it'
+                          type: boolean
+                        secretRef:
+                          description: 'secretRef is name of the authentication secret
+                            for RBDUser. If provided overrides keyring. Default is
+                            nil. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it'
+                          properties:
+                            name:
+                              description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                TODO: Add other useful fields. apiVersion, kind, uid?'
+                              type: string
+                          type: object
+                          x-kubernetes-map-type: atomic
+                        user:
+                          description: 'user is the rados user name. Default is admin.
+                            More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it'
+                          type: string
+                      required:
+                      - image
+                      - monitors
+                      type: object
+                    scaleIO:
+                      description: scaleIO represents a ScaleIO persistent volume
+                        attached and mounted on Kubernetes nodes.
+                      properties:
+                        fsType:
+                          description: fsType is the filesystem type to mount. Must
+                            be a filesystem type supported by the host operating system.
+                            Ex. "ext4", "xfs", "ntfs". Default is "xfs".
+                          type: string
+                        gateway:
+                          description: gateway is the host address of the ScaleIO
+                            API Gateway.
+                          type: string
+                        protectionDomain:
+                          description: protectionDomain is the name of the ScaleIO
+                            Protection Domain for the configured storage.
+                          type: string
+                        readOnly:
+                          description: readOnly Defaults to false (read/write). ReadOnly
+                            here will force the ReadOnly setting in VolumeMounts.
+                          type: boolean
+                        secretRef:
+                          description: secretRef references to the secret for ScaleIO
+                            user and other sensitive information. If this is not provided,
+                            Login operation will fail.
+                          properties:
+                            name:
+                              description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                TODO: Add other useful fields. apiVersion, kind, uid?'
+                              type: string
+                          type: object
+                          x-kubernetes-map-type: atomic
+                        sslEnabled:
+                          description: sslEnabled Flag enable/disable SSL communication
+                            with Gateway, default false
+                          type: boolean
+                        storageMode:
+                          description: storageMode indicates whether the storage for
+                            a volume should be ThickProvisioned or ThinProvisioned.
+                            Default is ThinProvisioned.
+                          type: string
+                        storagePool:
+                          description: storagePool is the ScaleIO Storage Pool associated
+                            with the protection domain.
+                          type: string
+                        system:
+                          description: system is the name of the storage system as
+                            configured in ScaleIO.
+                          type: string
+                        volumeName:
+                          description: volumeName is the name of a volume already
+                            created in the ScaleIO system that is associated with
+                            this volume source.
+                          type: string
+                      required:
+                      - gateway
+                      - secretRef
+                      - system
+                      type: object
+                    secret:
+                      description: 'secret represents a secret that should populate
+                        this volume. More info: https://kubernetes.io/docs/concepts/storage/volumes#secret'
+                      properties:
+                        defaultMode:
+                          description: 'defaultMode is Optional: mode bits used to
+                            set permissions on created files by default. Must be an
+                            octal value between 0000 and 0777 or a decimal value between
+                            0 and 511. YAML accepts both octal and decimal values,
+                            JSON requires decimal values for mode bits. Defaults to
+                            0644. Directories within the path are not affected by
+                            this setting. This might be in conflict with other options
+                            that affect the file mode, like fsGroup, and the result
+                            can be other mode bits set.'
+                          format: int32
+                          type: integer
+                        items:
+                          description: items If unspecified, each key-value pair in
+                            the Data field of the referenced Secret will be projected
+                            into the volume as a file whose name is the key and content
+                            is the value. If specified, the listed keys will be projected
+                            into the specified paths, and unlisted keys will not be
+                            present. If a key is specified which is not present in
+                            the Secret, the volume setup will error unless it is marked
+                            optional. Paths must be relative and may not contain the
+                            '..' path or start with '..'.
+                          items:
+                            description: Maps a string key to a path within a volume.
+                            properties:
+                              key:
+                                description: key is the key to project.
+                                type: string
+                              mode:
+                                description: 'mode is Optional: mode bits used to
+                                  set permissions on this file. Must be an octal value
+                                  between 0000 and 0777 or a decimal value between
+                                  0 and 511. YAML accepts both octal and decimal values,
+                                  JSON requires decimal values for mode bits. If not
+                                  specified, the volume defaultMode will be used.
+                                  This might be in conflict with other options that
+                                  affect the file mode, like fsGroup, and the result
+                                  can be other mode bits set.'
+                                format: int32
+                                type: integer
+                              path:
+                                description: path is the relative path of the file
+                                  to map the key to. May not be an absolute path.
+                                  May not contain the path element '..'. May not start
+                                  with the string '..'.
+                                type: string
+                            required:
+                            - key
+                            - path
+                            type: object
+                          type: array
+                        optional:
+                          description: optional field specify whether the Secret or
+                            its keys must be defined
+                          type: boolean
+                        secretName:
+                          description: 'secretName is the name of the secret in the
+                            pod''s namespace to use. More info: https://kubernetes.io/docs/concepts/storage/volumes#secret'
+                          type: string
+                      type: object
+                    storageos:
+                      description: storageOS represents a StorageOS volume attached
+                        and mounted on Kubernetes nodes.
+                      properties:
+                        fsType:
+                          description: fsType is the filesystem type to mount. Must
+                            be a filesystem type supported by the host operating system.
+                            Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4"
+                            if unspecified.
+                          type: string
+                        readOnly:
+                          description: readOnly defaults to false (read/write). ReadOnly
+                            here will force the ReadOnly setting in VolumeMounts.
+                          type: boolean
+                        secretRef:
+                          description: secretRef specifies the secret to use for obtaining
+                            the StorageOS API credentials.  If not specified, default
+                            values will be attempted.
+                          properties:
+                            name:
+                              description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                TODO: Add other useful fields. apiVersion, kind, uid?'
+                              type: string
+                          type: object
+                          x-kubernetes-map-type: atomic
+                        volumeName:
+                          description: volumeName is the human-readable name of the
+                            StorageOS volume.  Volume names are only unique within
+                            a namespace.
+                          type: string
+                        volumeNamespace:
+                          description: volumeNamespace specifies the scope of the
+                            volume within StorageOS.  If no namespace is specified
+                            then the Pod's namespace will be used.  This allows the
+                            Kubernetes name scoping to be mirrored within StorageOS
+                            for tighter integration. Set VolumeName to any name to
+                            override the default behaviour. Set to "default" if you
+                            are not using namespaces within StorageOS. Namespaces
+                            that do not pre-exist within StorageOS will be created.
+                          type: string
+                      type: object
+                    vsphereVolume:
+                      description: vsphereVolume represents a vSphere volume attached
+                        and mounted on kubelets host machine
+                      properties:
+                        fsType:
+                          description: fsType is filesystem type to mount. Must be
+                            a filesystem type supported by the host operating system.
+                            Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4"
+                            if unspecified.
+                          type: string
+                        storagePolicyID:
+                          description: storagePolicyID is the storage Policy Based
+                            Management (SPBM) profile ID associated with the StoragePolicyName.
+                          type: string
+                        storagePolicyName:
+                          description: storagePolicyName is the storage Policy Based
+                            Management (SPBM) profile name.
+                          type: string
+                        volumePath:
+                          description: volumePath is the path that identifies vSphere
+                            volume vmdk
+                          type: string
+                      required:
+                      - volumePath
+                      type: object
+                  required:
+                  - name
+                  type: object
+                type: array
+            type: object
+        type: object
+    served: true
+    storage: true
diff --git a/operations/agent-static-operator/crds/monitoring.grafana.com_integrations.yaml b/operations/agent-static-operator/crds/monitoring.grafana.com_integrations.yaml
new file mode 100644
index 000000000000..e786166447fd
--- /dev/null
+++ b/operations/agent-static-operator/crds/monitoring.grafana.com_integrations.yaml
@@ -0,0 +1,1738 @@
+---
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+  annotations:
+    controller-gen.kubebuilder.io/version: v0.9.2
+  creationTimestamp: null
+  name: integrations.monitoring.grafana.com
+spec:
+  group: monitoring.grafana.com
+  names:
+    categories:
+    - agent-operator
+    kind: Integration
+    listKind: IntegrationList
+    plural: integrations
+    singular: integration
+  scope: Namespaced
+  versions:
+  - name: v1alpha1
+    schema:
+      openAPIV3Schema:
+        description: "Integration runs a single Grafana Agent integration. Integrations
+          that generate telemetry must be configured to send that telemetry somewhere,
+          such as autoscrape for exporter-based integrations. \n Integrations have
+          access to the LogsInstances and MetricsInstances in the same GrafanaAgent
+          resource set, referenced by the <namespace>/<name> of the Instance resource.
+          \n For example, if there is a default/production MetricsInstance, you can
+          configure a supported integration's autoscrape block with: \n autoscrape:
+          enable: true metrics_instance: default/production \n There is currently
+          no way for telemetry created by an Operator-managed integration to be collected
+          from outside of the integration itself."
+        properties:
+          apiVersion:
+            description: 'APIVersion defines the versioned schema of this representation
+              of an object. Servers should convert recognized schemas to the latest
+              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+            type: string
+          kind:
+            description: 'Kind is a string value representing the REST resource this
+              object represents. Servers may infer this from the endpoint the client
+              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+            type: string
+          metadata:
+            type: object
+          spec:
+            description: Specifies the desired behavior of the Integration.
+            properties:
+              config:
+                description: "The configuration for the named integration. Note that
+                  Integrations are deployed with the integrations-next feature flag,
+                  which has different common settings: \n https://grafana.com/docs/agent/latest/configuration/integrations/integrations-next/"
+                type: object
+                x-kubernetes-preserve-unknown-fields: true
+              configMaps:
+                description: "An extra list of keys from ConfigMaps in the same namespace
+                  as the Integration which will be mounted into the Grafana Agent
+                  pod running this Integration. \n ConfigMaps are mounted at /etc/grafana-agent/integrations/configMaps/<configmap_namespace>/<configmap_name>/<key>."
+                items:
+                  description: Selects a key from a ConfigMap.
+                  properties:
+                    key:
+                      description: The key to select.
+                      type: string
+                    name:
+                      description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                        TODO: Add other useful fields. apiVersion, kind, uid?'
+                      type: string
+                    optional:
+                      description: Specify whether the ConfigMap or its key must be
+                        defined
+                      type: boolean
+                  required:
+                  - key
+                  type: object
+                  x-kubernetes-map-type: atomic
+                type: array
+              name:
+                description: Name of the integration to run (e.g., "node_exporter",
+                  "mysqld_exporter").
+                type: string
+              secrets:
+                description: "An extra list of keys from Secrets in the same namespace
+                  as the Integration which will be mounted into the Grafana Agent
+                  pod running this Integration. \n Secrets will be mounted at /etc/grafana-agent/integrations/secrets/<secret_namespace>/<secret_name>/<key>."
+                items:
+                  description: SecretKeySelector selects a key of a Secret.
+                  properties:
+                    key:
+                      description: The key of the secret to select from.  Must be
+                        a valid secret key.
+                      type: string
+                    name:
+                      description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                        TODO: Add other useful fields. apiVersion, kind, uid?'
+                      type: string
+                    optional:
+                      description: Specify whether the Secret or its key must be defined
+                      type: boolean
+                  required:
+                  - key
+                  type: object
+                  x-kubernetes-map-type: atomic
+                type: array
+              type:
+                description: Type informs Grafana Agent Operator about how to manage
+                  the integration being configured.
+                properties:
+                  allNodes:
+                    description: When true, the configured integration should be run
+                      on every Node in the cluster. This is required for Integrations
+                      that generate Node-specific metrics like node_exporter, otherwise
+                      it must be false to avoid generating duplicate metrics.
+                    type: boolean
+                  unique:
+                    description: Whether this integration can only be defined once
+                      for a Grafana Agent process, such as statsd_exporter. It is
+                      invalid for a GrafanaAgent to discover multiple unique Integrations
+                      with the same Integration name (i.e., a single GrafanaAgent
+                      cannot deploy two statsd_exporters).
+                    type: boolean
+                type: object
+              volumeMounts:
+                description: "An extra list of VolumeMounts to be associated with
+                  the Grafana Agent pods running this integration. VolumeMount names
+                  are mutated to be unique across all used IntegrationSpecs. \n Mount
+                  paths should include the namespace/name of the Integration CR to
+                  avoid potentially colliding with other resources."
+                items:
+                  description: VolumeMount describes a mounting of a Volume within
+                    a container.
+                  properties:
+                    mountPath:
+                      description: Path within the container at which the volume should
+                        be mounted.  Must not contain ':'.
+                      type: string
+                    mountPropagation:
+                      description: mountPropagation determines how mounts are propagated
+                        from the host to container and the other way around. When
+                        not set, MountPropagationNone is used. This field is beta
+                        in 1.10.
+                      type: string
+                    name:
+                      description: This must match the Name of a Volume.
+                      type: string
+                    readOnly:
+                      description: Mounted read-only if true, read-write otherwise
+                        (false or unspecified). Defaults to false.
+                      type: boolean
+                    subPath:
+                      description: Path within the volume from which the container's
+                        volume should be mounted. Defaults to "" (volume's root).
+                      type: string
+                    subPathExpr:
+                      description: Expanded path within the volume from which the
+                        container's volume should be mounted. Behaves similarly to
+                        SubPath but environment variable references $(VAR_NAME) are
+                        expanded using the container's environment. Defaults to ""
+                        (volume's root). SubPathExpr and SubPath are mutually exclusive.
+                      type: string
+                  required:
+                  - mountPath
+                  - name
+                  type: object
+                type: array
+              volumes:
+                description: "An extra list of Volumes to be associated with the Grafana
+                  Agent pods running this integration. Volume names are mutated to
+                  be unique across all Integrations. Note that the specified volumes
+                  should be able to tolerate existing on multiple pods at once when
+                  type is daemonset. \n Don't use volumes for loading Secrets or ConfigMaps
+                  from the same namespace as the Integration; use the Secrets and
+                  ConfigMaps fields instead."
+                items:
+                  description: Volume represents a named volume in a pod that may
+                    be accessed by any container in the pod.
+                  properties:
+                    awsElasticBlockStore:
+                      description: 'awsElasticBlockStore represents an AWS Disk resource
+                        that is attached to a kubelet''s host machine and then exposed
+                        to the pod. More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore'
+                      properties:
+                        fsType:
+                          description: 'fsType is the filesystem type of the volume
+                            that you want to mount. Tip: Ensure that the filesystem
+                            type is supported by the host operating system. Examples:
+                            "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4"
+                            if unspecified. More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
+                            TODO: how do we prevent errors in the filesystem from
+                            compromising the machine'
+                          type: string
+                        partition:
+                          description: 'partition is the partition in the volume that
+                            you want to mount. If omitted, the default is to mount
+                            by volume name. Examples: For volume /dev/sda1, you specify
+                            the partition as "1". Similarly, the volume partition
+                            for /dev/sda is "0" (or you can leave the property empty).'
+                          format: int32
+                          type: integer
+                        readOnly:
+                          description: 'readOnly value true will force the readOnly
+                            setting in VolumeMounts. More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore'
+                          type: boolean
+                        volumeID:
+                          description: 'volumeID is unique ID of the persistent disk
+                            resource in AWS (Amazon EBS volume). More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore'
+                          type: string
+                      required:
+                      - volumeID
+                      type: object
+                    azureDisk:
+                      description: azureDisk represents an Azure Data Disk mount on
+                        the host and bind mount to the pod.
+                      properties:
+                        cachingMode:
+                          description: 'cachingMode is the Host Caching mode: None,
+                            Read Only, Read Write.'
+                          type: string
+                        diskName:
+                          description: diskName is the Name of the data disk in the
+                            blob storage
+                          type: string
+                        diskURI:
+                          description: diskURI is the URI of data disk in the blob
+                            storage
+                          type: string
+                        fsType:
+                          description: fsType is Filesystem type to mount. Must be
+                            a filesystem type supported by the host operating system.
+                            Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4"
+                            if unspecified.
+                          type: string
+                        kind:
+                          description: 'kind expected values are Shared: multiple
+                            blob disks per storage account  Dedicated: single blob
+                            disk per storage account  Managed: azure managed data
+                            disk (only in managed availability set). defaults to shared'
+                          type: string
+                        readOnly:
+                          description: readOnly Defaults to false (read/write). ReadOnly
+                            here will force the ReadOnly setting in VolumeMounts.
+                          type: boolean
+                      required:
+                      - diskName
+                      - diskURI
+                      type: object
+                    azureFile:
+                      description: azureFile represents an Azure File Service mount
+                        on the host and bind mount to the pod.
+                      properties:
+                        readOnly:
+                          description: readOnly defaults to false (read/write). ReadOnly
+                            here will force the ReadOnly setting in VolumeMounts.
+                          type: boolean
+                        secretName:
+                          description: secretName is the  name of secret that contains
+                            Azure Storage Account Name and Key
+                          type: string
+                        shareName:
+                          description: shareName is the azure share Name
+                          type: string
+                      required:
+                      - secretName
+                      - shareName
+                      type: object
+                    cephfs:
+                      description: cephFS represents a Ceph FS mount on the host that
+                        shares a pod's lifetime
+                      properties:
+                        monitors:
+                          description: 'monitors is Required: Monitors is a collection
+                            of Ceph monitors More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it'
+                          items:
+                            type: string
+                          type: array
+                        path:
+                          description: 'path is Optional: Used as the mounted root,
+                            rather than the full Ceph tree, default is /'
+                          type: string
+                        readOnly:
+                          description: 'readOnly is Optional: Defaults to false (read/write).
+                            ReadOnly here will force the ReadOnly setting in VolumeMounts.
+                            More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it'
+                          type: boolean
+                        secretFile:
+                          description: 'secretFile is Optional: SecretFile is the
+                            path to key ring for User, default is /etc/ceph/user.secret
+                            More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it'
+                          type: string
+                        secretRef:
+                          description: 'secretRef is Optional: SecretRef is reference
+                            to the authentication secret for User, default is empty.
+                            More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it'
+                          properties:
+                            name:
+                              description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                TODO: Add other useful fields. apiVersion, kind, uid?'
+                              type: string
+                          type: object
+                          x-kubernetes-map-type: atomic
+                        user:
+                          description: 'user is optional: User is the rados user name,
+                            default is admin More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it'
+                          type: string
+                      required:
+                      - monitors
+                      type: object
+                    cinder:
+                      description: 'cinder represents a cinder volume attached and
+                        mounted on kubelets host machine. More info: https://examples.k8s.io/mysql-cinder-pd/README.md'
+                      properties:
+                        fsType:
+                          description: 'fsType is the filesystem type to mount. Must
+                            be a filesystem type supported by the host operating system.
+                            Examples: "ext4", "xfs", "ntfs". Implicitly inferred to
+                            be "ext4" if unspecified. More info: https://examples.k8s.io/mysql-cinder-pd/README.md'
+                          type: string
+                        readOnly:
+                          description: 'readOnly defaults to false (read/write). ReadOnly
+                            here will force the ReadOnly setting in VolumeMounts.
+                            More info: https://examples.k8s.io/mysql-cinder-pd/README.md'
+                          type: boolean
+                        secretRef:
+                          description: 'secretRef is optional: points to a secret
+                            object containing parameters used to connect to OpenStack.'
+                          properties:
+                            name:
+                              description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                TODO: Add other useful fields. apiVersion, kind, uid?'
+                              type: string
+                          type: object
+                          x-kubernetes-map-type: atomic
+                        volumeID:
+                          description: 'volumeID used to identify the volume in cinder.
+                            More info: https://examples.k8s.io/mysql-cinder-pd/README.md'
+                          type: string
+                      required:
+                      - volumeID
+                      type: object
+                    configMap:
+                      description: configMap represents a configMap that should populate
+                        this volume
+                      properties:
+                        defaultMode:
+                          description: 'defaultMode is optional: mode bits used to
+                            set permissions on created files by default. Must be an
+                            octal value between 0000 and 0777 or a decimal value between
+                            0 and 511. YAML accepts both octal and decimal values,
+                            JSON requires decimal values for mode bits. Defaults to
+                            0644. Directories within the path are not affected by
+                            this setting. This might be in conflict with other options
+                            that affect the file mode, like fsGroup, and the result
+                            can be other mode bits set.'
+                          format: int32
+                          type: integer
+                        items:
+                          description: items if unspecified, each key-value pair in
+                            the Data field of the referenced ConfigMap will be projected
+                            into the volume as a file whose name is the key and content
+                            is the value. If specified, the listed keys will be projected
+                            into the specified paths, and unlisted keys will not be
+                            present. If a key is specified which is not present in
+                            the ConfigMap, the volume setup will error unless it is
+                            marked optional. Paths must be relative and may not contain
+                            the '..' path or start with '..'.
+                          items:
+                            description: Maps a string key to a path within a volume.
+                            properties:
+                              key:
+                                description: key is the key to project.
+                                type: string
+                              mode:
+                                description: 'mode is Optional: mode bits used to
+                                  set permissions on this file. Must be an octal value
+                                  between 0000 and 0777 or a decimal value between
+                                  0 and 511. YAML accepts both octal and decimal values,
+                                  JSON requires decimal values for mode bits. If not
+                                  specified, the volume defaultMode will be used.
+                                  This might be in conflict with other options that
+                                  affect the file mode, like fsGroup, and the result
+                                  can be other mode bits set.'
+                                format: int32
+                                type: integer
+                              path:
+                                description: path is the relative path of the file
+                                  to map the key to. May not be an absolute path.
+                                  May not contain the path element '..'. May not start
+                                  with the string '..'.
+                                type: string
+                            required:
+                            - key
+                            - path
+                            type: object
+                          type: array
+                        name:
+                          description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                            TODO: Add other useful fields. apiVersion, kind, uid?'
+                          type: string
+                        optional:
+                          description: optional specify whether the ConfigMap or its
+                            keys must be defined
+                          type: boolean
+                      type: object
+                      x-kubernetes-map-type: atomic
+                    csi:
+                      description: csi (Container Storage Interface) represents ephemeral
+                        storage that is handled by certain external CSI drivers (Beta
+                        feature).
+                      properties:
+                        driver:
+                          description: driver is the name of the CSI driver that handles
+                            this volume. Consult with your admin for the correct name
+                            as registered in the cluster.
+                          type: string
+                        fsType:
+                          description: fsType to mount. Ex. "ext4", "xfs", "ntfs".
+                            If not provided, the empty value is passed to the associated
+                            CSI driver which will determine the default filesystem
+                            to apply.
+                          type: string
+                        nodePublishSecretRef:
+                          description: nodePublishSecretRef is a reference to the
+                            secret object containing sensitive information to pass
+                            to the CSI driver to complete the CSI NodePublishVolume
+                            and NodeUnpublishVolume calls. This field is optional,
+                            and  may be empty if no secret is required. If the secret
+                            object contains more than one secret, all secret references
+                            are passed.
+                          properties:
+                            name:
+                              description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                TODO: Add other useful fields. apiVersion, kind, uid?'
+                              type: string
+                          type: object
+                          x-kubernetes-map-type: atomic
+                        readOnly:
+                          description: readOnly specifies a read-only configuration
+                            for the volume. Defaults to false (read/write).
+                          type: boolean
+                        volumeAttributes:
+                          additionalProperties:
+                            type: string
+                          description: volumeAttributes stores driver-specific properties
+                            that are passed to the CSI driver. Consult your driver's
+                            documentation for supported values.
+                          type: object
+                      required:
+                      - driver
+                      type: object
+                    downwardAPI:
+                      description: downwardAPI represents downward API about the pod
+                        that should populate this volume
+                      properties:
+                        defaultMode:
+                          description: 'Optional: mode bits to use on created files
+                            by default. Must be a Optional: mode bits used to set
+                            permissions on created files by default. Must be an octal
+                            value between 0000 and 0777 or a decimal value between
+                            0 and 511. YAML accepts both octal and decimal values,
+                            JSON requires decimal values for mode bits. Defaults to
+                            0644. Directories within the path are not affected by
+                            this setting. This might be in conflict with other options
+                            that affect the file mode, like fsGroup, and the result
+                            can be other mode bits set.'
+                          format: int32
+                          type: integer
+                        items:
+                          description: Items is a list of downward API volume file
+                          items:
+                            description: DownwardAPIVolumeFile represents information
+                              to create the file containing the pod field
+                            properties:
+                              fieldRef:
+                                description: 'Required: Selects a field of the pod:
+                                  only annotations, labels, name and namespace are
+                                  supported.'
+                                properties:
+                                  apiVersion:
+                                    description: Version of the schema the FieldPath
+                                      is written in terms of, defaults to "v1".
+                                    type: string
+                                  fieldPath:
+                                    description: Path of the field to select in the
+                                      specified API version.
+                                    type: string
+                                required:
+                                - fieldPath
+                                type: object
+                                x-kubernetes-map-type: atomic
+                              mode:
+                                description: 'Optional: mode bits used to set permissions
+                                  on this file, must be an octal value between 0000
+                                  and 0777 or a decimal value between 0 and 511. YAML
+                                  accepts both octal and decimal values, JSON requires
+                                  decimal values for mode bits. If not specified,
+                                  the volume defaultMode will be used. This might
+                                  be in conflict with other options that affect the
+                                  file mode, like fsGroup, and the result can be other
+                                  mode bits set.'
+                                format: int32
+                                type: integer
+                              path:
+                                description: 'Required: Path is  the relative path
+                                  name of the file to be created. Must not be absolute
+                                  or contain the ''..'' path. Must be utf-8 encoded.
+                                  The first item of the relative path must not start
+                                  with ''..'''
+                                type: string
+                              resourceFieldRef:
+                                description: 'Selects a resource of the container:
+                                  only resources limits and requests (limits.cpu,
+                                  limits.memory, requests.cpu and requests.memory)
+                                  are currently supported.'
+                                properties:
+                                  containerName:
+                                    description: 'Container name: required for volumes,
+                                      optional for env vars'
+                                    type: string
+                                  divisor:
+                                    anyOf:
+                                    - type: integer
+                                    - type: string
+                                    description: Specifies the output format of the
+                                      exposed resources, defaults to "1"
+                                    pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
+                                    x-kubernetes-int-or-string: true
+                                  resource:
+                                    description: 'Required: resource to select'
+                                    type: string
+                                required:
+                                - resource
+                                type: object
+                                x-kubernetes-map-type: atomic
+                            required:
+                            - path
+                            type: object
+                          type: array
+                      type: object
+                    emptyDir:
+                      description: 'emptyDir represents a temporary directory that
+                        shares a pod''s lifetime. More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir'
+                      properties:
+                        medium:
+                          description: 'medium represents what type of storage medium
+                            should back this directory. The default is "" which means
+                            to use the node''s default medium. Must be an empty string
+                            (default) or Memory. More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir'
+                          type: string
+                        sizeLimit:
+                          anyOf:
+                          - type: integer
+                          - type: string
+                          description: 'sizeLimit is the total amount of local storage
+                            required for this EmptyDir volume. The size limit is also
+                            applicable for memory medium. The maximum usage on memory
+                            medium EmptyDir would be the minimum value between the
+                            SizeLimit specified here and the sum of memory limits
+                            of all containers in a pod. The default is nil which means
+                            that the limit is undefined. More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir'
+                          pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
+                          x-kubernetes-int-or-string: true
+                      type: object
+                    ephemeral:
+                      description: "ephemeral represents a volume that is handled
+                        by a cluster storage driver. The volume's lifecycle is tied
+                        to the pod that defines it - it will be created before the
+                        pod starts, and deleted when the pod is removed. \n Use this
+                        if: a) the volume is only needed while the pod runs, b) features
+                        of normal volumes like restoring from snapshot or capacity
+                        tracking are needed, c) the storage driver is specified through
+                        a storage class, and d) the storage driver supports dynamic
+                        volume provisioning through a PersistentVolumeClaim (see EphemeralVolumeSource
+                        for more information on the connection between this volume
+                        type and PersistentVolumeClaim). \n Use PersistentVolumeClaim
+                        or one of the vendor-specific APIs for volumes that persist
+                        for longer than the lifecycle of an individual pod. \n Use
+                        CSI for light-weight local ephemeral volumes if the CSI driver
+                        is meant to be used that way - see the documentation of the
+                        driver for more information. \n A pod can use both types of
+                        ephemeral volumes and persistent volumes at the same time."
+                      properties:
+                        volumeClaimTemplate:
+                          description: "Will be used to create a stand-alone PVC to
+                            provision the volume. The pod in which this EphemeralVolumeSource
+                            is embedded will be the owner of the PVC, i.e. the PVC
+                            will be deleted together with the pod.  The name of the
+                            PVC will be `<pod name>-<volume name>` where `<volume
+                            name>` is the name from the `PodSpec.Volumes` array entry.
+                            Pod validation will reject the pod if the concatenated
+                            name is not valid for a PVC (for example, too long). \n
+                            An existing PVC with that name that is not owned by the
+                            pod will *not* be used for the pod to avoid using an unrelated
+                            volume by mistake. Starting the pod is then blocked until
+                            the unrelated PVC is removed. If such a pre-created PVC
+                            is meant to be used by the pod, the PVC has to updated
+                            with an owner reference to the pod once the pod exists.
+                            Normally this should not be necessary, but it may be useful
+                            when manually reconstructing a broken cluster. \n This
+                            field is read-only and no changes will be made by Kubernetes
+                            to the PVC after it has been created. \n Required, must
+                            not be nil."
+                          properties:
+                            metadata:
+                              description: May contain labels and annotations that
+                                will be copied into the PVC when creating it. No other
+                                fields are allowed and will be rejected during validation.
+                              type: object
+                            spec:
+                              description: The specification for the PersistentVolumeClaim.
+                                The entire content is copied unchanged into the PVC
+                                that gets created from this template. The same fields
+                                as in a PersistentVolumeClaim are also valid here.
+                              properties:
+                                accessModes:
+                                  description: 'accessModes contains the desired access
+                                    modes the volume should have. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1'
+                                  items:
+                                    type: string
+                                  type: array
+                                dataSource:
+                                  description: 'dataSource field can be used to specify
+                                    either: * An existing VolumeSnapshot object (snapshot.storage.k8s.io/VolumeSnapshot)
+                                    * An existing PVC (PersistentVolumeClaim) If the
+                                    provisioner or an external controller can support
+                                    the specified data source, it will create a new
+                                    volume based on the contents of the specified
+                                    data source. When the AnyVolumeDataSource feature
+                                    gate is enabled, dataSource contents will be copied
+                                    to dataSourceRef, and dataSourceRef contents will
+                                    be copied to dataSource when dataSourceRef.namespace
+                                    is not specified. If the namespace is specified,
+                                    then dataSourceRef will not be copied to dataSource.'
+                                  properties:
+                                    apiGroup:
+                                      description: APIGroup is the group for the resource
+                                        being referenced. If APIGroup is not specified,
+                                        the specified Kind must be in the core API
+                                        group. For any other third-party types, APIGroup
+                                        is required.
+                                      type: string
+                                    kind:
+                                      description: Kind is the type of resource being
+                                        referenced
+                                      type: string
+                                    name:
+                                      description: Name is the name of resource being
+                                        referenced
+                                      type: string
+                                  required:
+                                  - kind
+                                  - name
+                                  type: object
+                                  x-kubernetes-map-type: atomic
+                                dataSourceRef:
+                                  description: 'dataSourceRef specifies the object
+                                    from which to populate the volume with data, if
+                                    a non-empty volume is desired. This may be any
+                                    object from a non-empty API group (non core object)
+                                    or a PersistentVolumeClaim object. When this field
+                                    is specified, volume binding will only succeed
+                                    if the type of the specified object matches some
+                                    installed volume populator or dynamic provisioner.
+                                    This field will replace the functionality of the
+                                    dataSource field and as such if both fields are
+                                    non-empty, they must have the same value. For
+                                    backwards compatibility, when namespace isn''t
+                                    specified in dataSourceRef, both fields (dataSource
+                                    and dataSourceRef) will be set to the same value
+                                    automatically if one of them is empty and the
+                                    other is non-empty. When namespace is specified
+                                    in dataSourceRef, dataSource isn''t set to the
+                                    same value and must be empty. There are three
+                                    important differences between dataSource and dataSourceRef:
+                                    * While dataSource only allows two specific types
+                                    of objects, dataSourceRef allows any non-core
+                                    object, as well as PersistentVolumeClaim objects.
+                                    * While dataSource ignores disallowed values (dropping
+                                    them), dataSourceRef preserves all values, and
+                                    generates an error if a disallowed value is specified.
+                                    * While dataSource only allows local objects,
+                                    dataSourceRef allows objects in any namespaces.
+                                    (Beta) Using this field requires the AnyVolumeDataSource
+                                    feature gate to be enabled. (Alpha) Using the
+                                    namespace field of dataSourceRef requires the
+                                    CrossNamespaceVolumeDataSource feature gate to
+                                    be enabled.'
+                                  properties:
+                                    apiGroup:
+                                      description: APIGroup is the group for the resource
+                                        being referenced. If APIGroup is not specified,
+                                        the specified Kind must be in the core API
+                                        group. For any other third-party types, APIGroup
+                                        is required.
+                                      type: string
+                                    kind:
+                                      description: Kind is the type of resource being
+                                        referenced
+                                      type: string
+                                    name:
+                                      description: Name is the name of resource being
+                                        referenced
+                                      type: string
+                                    namespace:
+                                      description: Namespace is the namespace of resource
+                                        being referenced Note that when a namespace
+                                        is specified, a gateway.networking.k8s.io/ReferenceGrant
+                                        object is required in the referent namespace
+                                        to allow that namespace's owner to accept
+                                        the reference. See the ReferenceGrant documentation
+                                        for details. (Alpha) This field requires the
+                                        CrossNamespaceVolumeDataSource feature gate
+                                        to be enabled.
+                                      type: string
+                                  required:
+                                  - kind
+                                  - name
+                                  type: object
+                                resources:
+                                  description: 'resources represents the minimum resources
+                                    the volume should have. If RecoverVolumeExpansionFailure
+                                    feature is enabled users are allowed to specify
+                                    resource requirements that are lower than previous
+                                    value but must still be higher than capacity recorded
+                                    in the status field of the claim. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources'
+                                  properties:
+                                    claims:
+                                      description: "Claims lists the names of resources,
+                                        defined in spec.resourceClaims, that are used
+                                        by this container. \n This is an alpha field
+                                        and requires enabling the DynamicResourceAllocation
+                                        feature gate. \n This field is immutable.
+                                        It can only be set for containers."
+                                      items:
+                                        description: ResourceClaim references one
+                                          entry in PodSpec.ResourceClaims.
+                                        properties:
+                                          name:
+                                            description: Name must match the name
+                                              of one entry in pod.spec.resourceClaims
+                                              of the Pod where this field is used.
+                                              It makes that resource available inside
+                                              a container.
+                                            type: string
+                                        required:
+                                        - name
+                                        type: object
+                                      type: array
+                                      x-kubernetes-list-map-keys:
+                                      - name
+                                      x-kubernetes-list-type: map
+                                    limits:
+                                      additionalProperties:
+                                        anyOf:
+                                        - type: integer
+                                        - type: string
+                                        pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
+                                        x-kubernetes-int-or-string: true
+                                      description: 'Limits describes the maximum amount
+                                        of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/'
+                                      type: object
+                                    requests:
+                                      additionalProperties:
+                                        anyOf:
+                                        - type: integer
+                                        - type: string
+                                        pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
+                                        x-kubernetes-int-or-string: true
+                                      description: 'Requests describes the minimum
+                                        amount of compute resources required. If Requests
+                                        is omitted for a container, it defaults to
+                                        Limits if that is explicitly specified, otherwise
+                                        to an implementation-defined value. Requests
+                                        cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/'
+                                      type: object
+                                  type: object
+                                selector:
+                                  description: selector is a label query over volumes
+                                    to consider for binding.
+                                  properties:
+                                    matchExpressions:
+                                      description: matchExpressions is a list of label
+                                        selector requirements. The requirements are
+                                        ANDed.
+                                      items:
+                                        description: A label selector requirement
+                                          is a selector that contains values, a key,
+                                          and an operator that relates the key and
+                                          values.
+                                        properties:
+                                          key:
+                                            description: key is the label key that
+                                              the selector applies to.
+                                            type: string
+                                          operator:
+                                            description: operator represents a key's
+                                              relationship to a set of values. Valid
+                                              operators are In, NotIn, Exists and
+                                              DoesNotExist.
+                                            type: string
+                                          values:
+                                            description: values is an array of string
+                                              values. If the operator is In or NotIn,
+                                              the values array must be non-empty.
+                                              If the operator is Exists or DoesNotExist,
+                                              the values array must be empty. This
+                                              array is replaced during a strategic
+                                              merge patch.
+                                            items:
+                                              type: string
+                                            type: array
+                                        required:
+                                        - key
+                                        - operator
+                                        type: object
+                                      type: array
+                                    matchLabels:
+                                      additionalProperties:
+                                        type: string
+                                      description: matchLabels is a map of {key,value}
+                                        pairs. A single {key,value} in the matchLabels
+                                        map is equivalent to an element of matchExpressions,
+                                        whose key field is "key", the operator is
+                                        "In", and the values array contains only "value".
+                                        The requirements are ANDed.
+                                      type: object
+                                  type: object
+                                  x-kubernetes-map-type: atomic
+                                storageClassName:
+                                  description: 'storageClassName is the name of the
+                                    StorageClass required by the claim. More info:
+                                    https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1'
+                                  type: string
+                                volumeMode:
+                                  description: volumeMode defines what type of volume
+                                    is required by the claim. Value of Filesystem
+                                    is implied when not included in claim spec.
+                                  type: string
+                                volumeName:
+                                  description: volumeName is the binding reference
+                                    to the PersistentVolume backing this claim.
+                                  type: string
+                              type: object
+                          required:
+                          - spec
+                          type: object
+                      type: object
+                    fc:
+                      description: fc represents a Fibre Channel resource that is
+                        attached to a kubelet's host machine and then exposed to the
+                        pod.
+                      properties:
+                        fsType:
+                          description: 'fsType is the filesystem type to mount. Must
+                            be a filesystem type supported by the host operating system.
+                            Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4"
+                            if unspecified. TODO: how do we prevent errors in the
+                            filesystem from compromising the machine'
+                          type: string
+                        lun:
+                          description: 'lun is Optional: FC target lun number'
+                          format: int32
+                          type: integer
+                        readOnly:
+                          description: 'readOnly is Optional: Defaults to false (read/write).
+                            ReadOnly here will force the ReadOnly setting in VolumeMounts.'
+                          type: boolean
+                        targetWWNs:
+                          description: 'targetWWNs is Optional: FC target worldwide
+                            names (WWNs)'
+                          items:
+                            type: string
+                          type: array
+                        wwids:
+                          description: 'wwids Optional: FC volume world wide identifiers
+                            (wwids) Either wwids or combination of targetWWNs and
+                            lun must be set, but not both simultaneously.'
+                          items:
+                            type: string
+                          type: array
+                      type: object
+                    flexVolume:
+                      description: flexVolume represents a generic volume resource
+                        that is provisioned/attached using an exec based plugin.
+                      properties:
+                        driver:
+                          description: driver is the name of the driver to use for
+                            this volume.
+                          type: string
+                        fsType:
+                          description: fsType is the filesystem type to mount. Must
+                            be a filesystem type supported by the host operating system.
+                            Ex. "ext4", "xfs", "ntfs". The default filesystem depends
+                            on FlexVolume script.
+                          type: string
+                        options:
+                          additionalProperties:
+                            type: string
+                          description: 'options is Optional: this field holds extra
+                            command options if any.'
+                          type: object
+                        readOnly:
+                          description: 'readOnly is Optional: defaults to false (read/write).
+                            ReadOnly here will force the ReadOnly setting in VolumeMounts.'
+                          type: boolean
+                        secretRef:
+                          description: 'secretRef is Optional: secretRef is reference
+                            to the secret object containing sensitive information
+                            to pass to the plugin scripts. This may be empty if no
+                            secret object is specified. If the secret object contains
+                            more than one secret, all secrets are passed to the plugin
+                            scripts.'
+                          properties:
+                            name:
+                              description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                TODO: Add other useful fields. apiVersion, kind, uid?'
+                              type: string
+                          type: object
+                          x-kubernetes-map-type: atomic
+                      required:
+                      - driver
+                      type: object
+                    flocker:
+                      description: flocker represents a Flocker volume attached to
+                        a kubelet's host machine. This depends on the Flocker control
+                        service being running
+                      properties:
+                        datasetName:
+                          description: datasetName is Name of the dataset stored as
+                            metadata -> name on the dataset for Flocker should be
+                            considered as deprecated
+                          type: string
+                        datasetUUID:
+                          description: datasetUUID is the UUID of the dataset. This
+                            is unique identifier of a Flocker dataset
+                          type: string
+                      type: object
+                    gcePersistentDisk:
+                      description: 'gcePersistentDisk represents a GCE Disk resource
+                        that is attached to a kubelet''s host machine and then exposed
+                        to the pod. More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk'
+                      properties:
+                        fsType:
+                          description: 'fsType is filesystem type of the volume that
+                            you want to mount. Tip: Ensure that the filesystem type
+                            is supported by the host operating system. Examples: "ext4",
+                            "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified.
+                            More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
+                            TODO: how do we prevent errors in the filesystem from
+                            compromising the machine'
+                          type: string
+                        partition:
+                          description: 'partition is the partition in the volume that
+                            you want to mount. If omitted, the default is to mount
+                            by volume name. Examples: For volume /dev/sda1, you specify
+                            the partition as "1". Similarly, the volume partition
+                            for /dev/sda is "0" (or you can leave the property empty).
+                            More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk'
+                          format: int32
+                          type: integer
+                        pdName:
+                          description: 'pdName is unique name of the PD resource in
+                            GCE. Used to identify the disk in GCE. More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk'
+                          type: string
+                        readOnly:
+                          description: 'readOnly here will force the ReadOnly setting
+                            in VolumeMounts. Defaults to false. More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk'
+                          type: boolean
+                      required:
+                      - pdName
+                      type: object
+                    gitRepo:
+                      description: 'gitRepo represents a git repository at a particular
+                        revision. DEPRECATED: GitRepo is deprecated. To provision
+                        a container with a git repo, mount an EmptyDir into an InitContainer
+                        that clones the repo using git, then mount the EmptyDir into
+                        the Pod''s container.'
+                      properties:
+                        directory:
+                          description: directory is the target directory name. Must
+                            not contain or start with '..'.  If '.' is supplied, the
+                            volume directory will be the git repository.  Otherwise,
+                            if specified, the volume will contain the git repository
+                            in the subdirectory with the given name.
+                          type: string
+                        repository:
+                          description: repository is the URL
+                          type: string
+                        revision:
+                          description: revision is the commit hash for the specified
+                            revision.
+                          type: string
+                      required:
+                      - repository
+                      type: object
+                    glusterfs:
+                      description: 'glusterfs represents a Glusterfs mount on the
+                        host that shares a pod''s lifetime. More info: https://examples.k8s.io/volumes/glusterfs/README.md'
+                      properties:
+                        endpoints:
+                          description: 'endpoints is the endpoint name that details
+                            Glusterfs topology. More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod'
+                          type: string
+                        path:
+                          description: 'path is the Glusterfs volume path. More info:
+                            https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod'
+                          type: string
+                        readOnly:
+                          description: 'readOnly here will force the Glusterfs volume
+                            to be mounted with read-only permissions. Defaults to
+                            false. More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod'
+                          type: boolean
+                      required:
+                      - endpoints
+                      - path
+                      type: object
+                    hostPath:
+                      description: 'hostPath represents a pre-existing file or directory
+                        on the host machine that is directly exposed to the container.
+                        This is generally used for system agents or other privileged
+                        things that are allowed to see the host machine. Most containers
+                        will NOT need this. More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath
+                        --- TODO(jonesdl) We need to restrict who can use host directory
+                        mounts and who can/can not mount host directories as read/write.'
+                      properties:
+                        path:
+                          description: 'path of the directory on the host. If the
+                            path is a symlink, it will follow the link to the real
+                            path. More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath'
+                          type: string
+                        type:
+                          description: 'type for HostPath Volume Defaults to "" More
+                            info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath'
+                          type: string
+                      required:
+                      - path
+                      type: object
+                    iscsi:
+                      description: 'iscsi represents an ISCSI Disk resource that is
+                        attached to a kubelet''s host machine and then exposed to
+                        the pod. More info: https://examples.k8s.io/volumes/iscsi/README.md'
+                      properties:
+                        chapAuthDiscovery:
+                          description: chapAuthDiscovery defines whether support iSCSI
+                            Discovery CHAP authentication
+                          type: boolean
+                        chapAuthSession:
+                          description: chapAuthSession defines whether support iSCSI
+                            Session CHAP authentication
+                          type: boolean
+                        fsType:
+                          description: 'fsType is the filesystem type of the volume
+                            that you want to mount. Tip: Ensure that the filesystem
+                            type is supported by the host operating system. Examples:
+                            "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4"
+                            if unspecified. More info: https://kubernetes.io/docs/concepts/storage/volumes#iscsi
+                            TODO: how do we prevent errors in the filesystem from
+                            compromising the machine'
+                          type: string
+                        initiatorName:
+                          description: initiatorName is the custom iSCSI Initiator
+                            Name. If initiatorName is specified with iscsiInterface
+                            simultaneously, new iSCSI interface <target portal>:<volume
+                            name> will be created for the connection.
+                          type: string
+                        iqn:
+                          description: iqn is the target iSCSI Qualified Name.
+                          type: string
+                        iscsiInterface:
+                          description: iscsiInterface is the interface Name that uses
+                            an iSCSI transport. Defaults to 'default' (tcp).
+                          type: string
+                        lun:
+                          description: lun represents iSCSI Target Lun number.
+                          format: int32
+                          type: integer
+                        portals:
+                          description: portals is the iSCSI Target Portal List. The
+                            portal is either an IP or ip_addr:port if the port is
+                            other than default (typically TCP ports 860 and 3260).
+                          items:
+                            type: string
+                          type: array
+                        readOnly:
+                          description: readOnly here will force the ReadOnly setting
+                            in VolumeMounts. Defaults to false.
+                          type: boolean
+                        secretRef:
+                          description: secretRef is the CHAP Secret for iSCSI target
+                            and initiator authentication
+                          properties:
+                            name:
+                              description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                TODO: Add other useful fields. apiVersion, kind, uid?'
+                              type: string
+                          type: object
+                          x-kubernetes-map-type: atomic
+                        targetPortal:
+                          description: targetPortal is iSCSI Target Portal. The Portal
+                            is either an IP or ip_addr:port if the port is other than
+                            default (typically TCP ports 860 and 3260).
+                          type: string
+                      required:
+                      - iqn
+                      - lun
+                      - targetPortal
+                      type: object
+                    name:
+                      description: 'name of the volume. Must be a DNS_LABEL and unique
+                        within the pod. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
+                      type: string
+                    nfs:
+                      description: 'nfs represents an NFS mount on the host that shares
+                        a pod''s lifetime More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs'
+                      properties:
+                        path:
+                          description: 'path that is exported by the NFS server. More
+                            info: https://kubernetes.io/docs/concepts/storage/volumes#nfs'
+                          type: string
+                        readOnly:
+                          description: 'readOnly here will force the NFS export to
+                            be mounted with read-only permissions. Defaults to false.
+                            More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs'
+                          type: boolean
+                        server:
+                          description: 'server is the hostname or IP address of the
+                            NFS server. More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs'
+                          type: string
+                      required:
+                      - path
+                      - server
+                      type: object
+                    persistentVolumeClaim:
+                      description: 'persistentVolumeClaimVolumeSource represents a
+                        reference to a PersistentVolumeClaim in the same namespace.
+                        More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims'
+                      properties:
+                        claimName:
+                          description: 'claimName is the name of a PersistentVolumeClaim
+                            in the same namespace as the pod using this volume. More
+                            info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims'
+                          type: string
+                        readOnly:
+                          description: readOnly Will force the ReadOnly setting in
+                            VolumeMounts. Default false.
+                          type: boolean
+                      required:
+                      - claimName
+                      type: object
+                    photonPersistentDisk:
+                      description: photonPersistentDisk represents a PhotonController
+                        persistent disk attached and mounted on kubelets host machine
+                      properties:
+                        fsType:
+                          description: fsType is the filesystem type to mount. Must
+                            be a filesystem type supported by the host operating system.
+                            Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4"
+                            if unspecified.
+                          type: string
+                        pdID:
+                          description: pdID is the ID that identifies Photon Controller
+                            persistent disk
+                          type: string
+                      required:
+                      - pdID
+                      type: object
+                    portworxVolume:
+                      description: portworxVolume represents a portworx volume attached
+                        and mounted on kubelets host machine
+                      properties:
+                        fsType:
+                          description: fSType represents the filesystem type to mount
+                            Must be a filesystem type supported by the host operating
+                            system. Ex. "ext4", "xfs". Implicitly inferred to be "ext4"
+                            if unspecified.
+                          type: string
+                        readOnly:
+                          description: readOnly defaults to false (read/write). ReadOnly
+                            here will force the ReadOnly setting in VolumeMounts.
+                          type: boolean
+                        volumeID:
+                          description: volumeID uniquely identifies a Portworx volume
+                          type: string
+                      required:
+                      - volumeID
+                      type: object
+                    projected:
+                      description: projected items for all in one resources secrets,
+                        configmaps, and downward API
+                      properties:
+                        defaultMode:
+                          description: defaultMode are the mode bits used to set permissions
+                            on created files by default. Must be an octal value between
+                            0000 and 0777 or a decimal value between 0 and 511. YAML
+                            accepts both octal and decimal values, JSON requires decimal
+                            values for mode bits. Directories within the path are
+                            not affected by this setting. This might be in conflict
+                            with other options that affect the file mode, like fsGroup,
+                            and the result can be other mode bits set.
+                          format: int32
+                          type: integer
+                        sources:
+                          description: sources is the list of volume projections
+                          items:
+                            description: Projection that may be projected along with
+                              other supported volume types
+                            properties:
+                              configMap:
+                                description: configMap information about the configMap
+                                  data to project
+                                properties:
+                                  items:
+                                    description: items if unspecified, each key-value
+                                      pair in the Data field of the referenced ConfigMap
+                                      will be projected into the volume as a file
+                                      whose name is the key and content is the value.
+                                      If specified, the listed keys will be projected
+                                      into the specified paths, and unlisted keys
+                                      will not be present. If a key is specified which
+                                      is not present in the ConfigMap, the volume
+                                      setup will error unless it is marked optional.
+                                      Paths must be relative and may not contain the
+                                      '..' path or start with '..'.
+                                    items:
+                                      description: Maps a string key to a path within
+                                        a volume.
+                                      properties:
+                                        key:
+                                          description: key is the key to project.
+                                          type: string
+                                        mode:
+                                          description: 'mode is Optional: mode bits
+                                            used to set permissions on this file.
+                                            Must be an octal value between 0000 and
+                                            0777 or a decimal value between 0 and
+                                            511. YAML accepts both octal and decimal
+                                            values, JSON requires decimal values for
+                                            mode bits. If not specified, the volume
+                                            defaultMode will be used. This might be
+                                            in conflict with other options that affect
+                                            the file mode, like fsGroup, and the result
+                                            can be other mode bits set.'
+                                          format: int32
+                                          type: integer
+                                        path:
+                                          description: path is the relative path of
+                                            the file to map the key to. May not be
+                                            an absolute path. May not contain the
+                                            path element '..'. May not start with
+                                            the string '..'.
+                                          type: string
+                                      required:
+                                      - key
+                                      - path
+                                      type: object
+                                    type: array
+                                  name:
+                                    description: 'Name of the referent. More info:
+                                      https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                      TODO: Add other useful fields. apiVersion, kind,
+                                      uid?'
+                                    type: string
+                                  optional:
+                                    description: optional specify whether the ConfigMap
+                                      or its keys must be defined
+                                    type: boolean
+                                type: object
+                                x-kubernetes-map-type: atomic
+                              downwardAPI:
+                                description: downwardAPI information about the downwardAPI
+                                  data to project
+                                properties:
+                                  items:
+                                    description: Items is a list of DownwardAPIVolume
+                                      file
+                                    items:
+                                      description: DownwardAPIVolumeFile represents
+                                        information to create the file containing
+                                        the pod field
+                                      properties:
+                                        fieldRef:
+                                          description: 'Required: Selects a field
+                                            of the pod: only annotations, labels,
+                                            name and namespace are supported.'
+                                          properties:
+                                            apiVersion:
+                                              description: Version of the schema the
+                                                FieldPath is written in terms of,
+                                                defaults to "v1".
+                                              type: string
+                                            fieldPath:
+                                              description: Path of the field to select
+                                                in the specified API version.
+                                              type: string
+                                          required:
+                                          - fieldPath
+                                          type: object
+                                          x-kubernetes-map-type: atomic
+                                        mode:
+                                          description: 'Optional: mode bits used to
+                                            set permissions on this file, must be
+                                            an octal value between 0000 and 0777 or
+                                            a decimal value between 0 and 511. YAML
+                                            accepts both octal and decimal values,
+                                            JSON requires decimal values for mode
+                                            bits. If not specified, the volume defaultMode
+                                            will be used. This might be in conflict
+                                            with other options that affect the file
+                                            mode, like fsGroup, and the result can
+                                            be other mode bits set.'
+                                          format: int32
+                                          type: integer
+                                        path:
+                                          description: 'Required: Path is  the relative
+                                            path name of the file to be created. Must
+                                            not be absolute or contain the ''..''
+                                            path. Must be utf-8 encoded. The first
+                                            item of the relative path must not start
+                                            with ''..'''
+                                          type: string
+                                        resourceFieldRef:
+                                          description: 'Selects a resource of the
+                                            container: only resources limits and requests
+                                            (limits.cpu, limits.memory, requests.cpu
+                                            and requests.memory) are currently supported.'
+                                          properties:
+                                            containerName:
+                                              description: 'Container name: required
+                                                for volumes, optional for env vars'
+                                              type: string
+                                            divisor:
+                                              anyOf:
+                                              - type: integer
+                                              - type: string
+                                              description: Specifies the output format
+                                                of the exposed resources, defaults
+                                                to "1"
+                                              pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
+                                              x-kubernetes-int-or-string: true
+                                            resource:
+                                              description: 'Required: resource to
+                                                select'
+                                              type: string
+                                          required:
+                                          - resource
+                                          type: object
+                                          x-kubernetes-map-type: atomic
+                                      required:
+                                      - path
+                                      type: object
+                                    type: array
+                                type: object
+                              secret:
+                                description: secret information about the secret data
+                                  to project
+                                properties:
+                                  items:
+                                    description: items if unspecified, each key-value
+                                      pair in the Data field of the referenced Secret
+                                      will be projected into the volume as a file
+                                      whose name is the key and content is the value.
+                                      If specified, the listed keys will be projected
+                                      into the specified paths, and unlisted keys
+                                      will not be present. If a key is specified which
+                                      is not present in the Secret, the volume setup
+                                      will error unless it is marked optional. Paths
+                                      must be relative and may not contain the '..'
+                                      path or start with '..'.
+                                    items:
+                                      description: Maps a string key to a path within
+                                        a volume.
+                                      properties:
+                                        key:
+                                          description: key is the key to project.
+                                          type: string
+                                        mode:
+                                          description: 'mode is Optional: mode bits
+                                            used to set permissions on this file.
+                                            Must be an octal value between 0000 and
+                                            0777 or a decimal value between 0 and
+                                            511. YAML accepts both octal and decimal
+                                            values, JSON requires decimal values for
+                                            mode bits. If not specified, the volume
+                                            defaultMode will be used. This might be
+                                            in conflict with other options that affect
+                                            the file mode, like fsGroup, and the result
+                                            can be other mode bits set.'
+                                          format: int32
+                                          type: integer
+                                        path:
+                                          description: path is the relative path of
+                                            the file to map the key to. May not be
+                                            an absolute path. May not contain the
+                                            path element '..'. May not start with
+                                            the string '..'.
+                                          type: string
+                                      required:
+                                      - key
+                                      - path
+                                      type: object
+                                    type: array
+                                  name:
+                                    description: 'Name of the referent. More info:
+                                      https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                      TODO: Add other useful fields. apiVersion, kind,
+                                      uid?'
+                                    type: string
+                                  optional:
+                                    description: optional field specify whether the
+                                      Secret or its key must be defined
+                                    type: boolean
+                                type: object
+                                x-kubernetes-map-type: atomic
+                              serviceAccountToken:
+                                description: serviceAccountToken is information about
+                                  the serviceAccountToken data to project
+                                properties:
+                                  audience:
+                                    description: audience is the intended audience
+                                      of the token. A recipient of a token must identify
+                                      itself with an identifier specified in the audience
+                                      of the token, and otherwise should reject the
+                                      token. The audience defaults to the identifier
+                                      of the apiserver.
+                                    type: string
+                                  expirationSeconds:
+                                    description: expirationSeconds is the requested
+                                      duration of validity of the service account
+                                      token. As the token approaches expiration, the
+                                      kubelet volume plugin will proactively rotate
+                                      the service account token. The kubelet will
+                                      start trying to rotate the token if the token
+                                      is older than 80 percent of its time to live
+                                      or if the token is older than 24 hours.Defaults
+                                      to 1 hour and must be at least 10 minutes.
+                                    format: int64
+                                    type: integer
+                                  path:
+                                    description: path is the path relative to the
+                                      mount point of the file to project the token
+                                      into.
+                                    type: string
+                                required:
+                                - path
+                                type: object
+                            type: object
+                          type: array
+                      type: object
+                    quobyte:
+                      description: quobyte represents a Quobyte mount on the host
+                        that shares a pod's lifetime
+                      properties:
+                        group:
+                          description: group to map volume access to Default is no
+                            group
+                          type: string
+                        readOnly:
+                          description: readOnly here will force the Quobyte volume
+                            to be mounted with read-only permissions. Defaults to
+                            false.
+                          type: boolean
+                        registry:
+                          description: registry represents a single or multiple Quobyte
+                            Registry services specified as a string as host:port pair
+                            (multiple entries are separated with commas) which acts
+                            as the central registry for volumes
+                          type: string
+                        tenant:
+                          description: tenant owning the given Quobyte volume in the
+                            Backend Used with dynamically provisioned Quobyte volumes,
+                            value is set by the plugin
+                          type: string
+                        user:
+                          description: user to map volume access to Defaults to serivceaccount
+                            user
+                          type: string
+                        volume:
+                          description: volume is a string that references an already
+                            created Quobyte volume by name.
+                          type: string
+                      required:
+                      - registry
+                      - volume
+                      type: object
+                    rbd:
+                      description: 'rbd represents a Rados Block Device mount on the
+                        host that shares a pod''s lifetime. More info: https://examples.k8s.io/volumes/rbd/README.md'
+                      properties:
+                        fsType:
+                          description: 'fsType is the filesystem type of the volume
+                            that you want to mount. Tip: Ensure that the filesystem
+                            type is supported by the host operating system. Examples:
+                            "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4"
+                            if unspecified. More info: https://kubernetes.io/docs/concepts/storage/volumes#rbd
+                            TODO: how do we prevent errors in the filesystem from
+                            compromising the machine'
+                          type: string
+                        image:
+                          description: 'image is the rados image name. More info:
+                            https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it'
+                          type: string
+                        keyring:
+                          description: 'keyring is the path to key ring for RBDUser.
+                            Default is /etc/ceph/keyring. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it'
+                          type: string
+                        monitors:
+                          description: 'monitors is a collection of Ceph monitors.
+                            More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it'
+                          items:
+                            type: string
+                          type: array
+                        pool:
+                          description: 'pool is the rados pool name. Default is rbd.
+                            More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it'
+                          type: string
+                        readOnly:
+                          description: 'readOnly here will force the ReadOnly setting
+                            in VolumeMounts. Defaults to false. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it'
+                          type: boolean
+                        secretRef:
+                          description: 'secretRef is name of the authentication secret
+                            for RBDUser. If provided overrides keyring. Default is
+                            nil. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it'
+                          properties:
+                            name:
+                              description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                TODO: Add other useful fields. apiVersion, kind, uid?'
+                              type: string
+                          type: object
+                          x-kubernetes-map-type: atomic
+                        user:
+                          description: 'user is the rados user name. Default is admin.
+                            More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it'
+                          type: string
+                      required:
+                      - image
+                      - monitors
+                      type: object
+                    scaleIO:
+                      description: scaleIO represents a ScaleIO persistent volume
+                        attached and mounted on Kubernetes nodes.
+                      properties:
+                        fsType:
+                          description: fsType is the filesystem type to mount. Must
+                            be a filesystem type supported by the host operating system.
+                            Ex. "ext4", "xfs", "ntfs". Default is "xfs".
+                          type: string
+                        gateway:
+                          description: gateway is the host address of the ScaleIO
+                            API Gateway.
+                          type: string
+                        protectionDomain:
+                          description: protectionDomain is the name of the ScaleIO
+                            Protection Domain for the configured storage.
+                          type: string
+                        readOnly:
+                          description: readOnly Defaults to false (read/write). ReadOnly
+                            here will force the ReadOnly setting in VolumeMounts.
+                          type: boolean
+                        secretRef:
+                          description: secretRef references to the secret for ScaleIO
+                            user and other sensitive information. If this is not provided,
+                            Login operation will fail.
+                          properties:
+                            name:
+                              description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                TODO: Add other useful fields. apiVersion, kind, uid?'
+                              type: string
+                          type: object
+                          x-kubernetes-map-type: atomic
+                        sslEnabled:
+                          description: sslEnabled Flag enable/disable SSL communication
+                            with Gateway, default false
+                          type: boolean
+                        storageMode:
+                          description: storageMode indicates whether the storage for
+                            a volume should be ThickProvisioned or ThinProvisioned.
+                            Default is ThinProvisioned.
+                          type: string
+                        storagePool:
+                          description: storagePool is the ScaleIO Storage Pool associated
+                            with the protection domain.
+                          type: string
+                        system:
+                          description: system is the name of the storage system as
+                            configured in ScaleIO.
+                          type: string
+                        volumeName:
+                          description: volumeName is the name of a volume already
+                            created in the ScaleIO system that is associated with
+                            this volume source.
+                          type: string
+                      required:
+                      - gateway
+                      - secretRef
+                      - system
+                      type: object
+                    secret:
+                      description: 'secret represents a secret that should populate
+                        this volume. More info: https://kubernetes.io/docs/concepts/storage/volumes#secret'
+                      properties:
+                        defaultMode:
+                          description: 'defaultMode is Optional: mode bits used to
+                            set permissions on created files by default. Must be an
+                            octal value between 0000 and 0777 or a decimal value between
+                            0 and 511. YAML accepts both octal and decimal values,
+                            JSON requires decimal values for mode bits. Defaults to
+                            0644. Directories within the path are not affected by
+                            this setting. This might be in conflict with other options
+                            that affect the file mode, like fsGroup, and the result
+                            can be other mode bits set.'
+                          format: int32
+                          type: integer
+                        items:
+                          description: items If unspecified, each key-value pair in
+                            the Data field of the referenced Secret will be projected
+                            into the volume as a file whose name is the key and content
+                            is the value. If specified, the listed keys will be projected
+                            into the specified paths, and unlisted keys will not be
+                            present. If a key is specified which is not present in
+                            the Secret, the volume setup will error unless it is marked
+                            optional. Paths must be relative and may not contain the
+                            '..' path or start with '..'.
+                          items:
+                            description: Maps a string key to a path within a volume.
+                            properties:
+                              key:
+                                description: key is the key to project.
+                                type: string
+                              mode:
+                                description: 'mode is Optional: mode bits used to
+                                  set permissions on this file. Must be an octal value
+                                  between 0000 and 0777 or a decimal value between
+                                  0 and 511. YAML accepts both octal and decimal values,
+                                  JSON requires decimal values for mode bits. If not
+                                  specified, the volume defaultMode will be used.
+                                  This might be in conflict with other options that
+                                  affect the file mode, like fsGroup, and the result
+                                  can be other mode bits set.'
+                                format: int32
+                                type: integer
+                              path:
+                                description: path is the relative path of the file
+                                  to map the key to. May not be an absolute path.
+                                  May not contain the path element '..'. May not start
+                                  with the string '..'.
+                                type: string
+                            required:
+                            - key
+                            - path
+                            type: object
+                          type: array
+                        optional:
+                          description: optional field specify whether the Secret or
+                            its keys must be defined
+                          type: boolean
+                        secretName:
+                          description: 'secretName is the name of the secret in the
+                            pod''s namespace to use. More info: https://kubernetes.io/docs/concepts/storage/volumes#secret'
+                          type: string
+                      type: object
+                    storageos:
+                      description: storageOS represents a StorageOS volume attached
+                        and mounted on Kubernetes nodes.
+                      properties:
+                        fsType:
+                          description: fsType is the filesystem type to mount. Must
+                            be a filesystem type supported by the host operating system.
+                            Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4"
+                            if unspecified.
+                          type: string
+                        readOnly:
+                          description: readOnly defaults to false (read/write). ReadOnly
+                            here will force the ReadOnly setting in VolumeMounts.
+                          type: boolean
+                        secretRef:
+                          description: secretRef specifies the secret to use for obtaining
+                            the StorageOS API credentials.  If not specified, default
+                            values will be attempted.
+                          properties:
+                            name:
+                              description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                TODO: Add other useful fields. apiVersion, kind, uid?'
+                              type: string
+                          type: object
+                          x-kubernetes-map-type: atomic
+                        volumeName:
+                          description: volumeName is the human-readable name of the
+                            StorageOS volume.  Volume names are only unique within
+                            a namespace.
+                          type: string
+                        volumeNamespace:
+                          description: volumeNamespace specifies the scope of the
+                            volume within StorageOS.  If no namespace is specified
+                            then the Pod's namespace will be used.  This allows the
+                            Kubernetes name scoping to be mirrored within StorageOS
+                            for tighter integration. Set VolumeName to any name to
+                            override the default behaviour. Set to "default" if you
+                            are not using namespaces within StorageOS. Namespaces
+                            that do not pre-exist within StorageOS will be created.
+                          type: string
+                      type: object
+                    vsphereVolume:
+                      description: vsphereVolume represents a vSphere volume attached
+                        and mounted on kubelets host machine
+                      properties:
+                        fsType:
+                          description: fsType is filesystem type to mount. Must be
+                            a filesystem type supported by the host operating system.
+                            Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4"
+                            if unspecified.
+                          type: string
+                        storagePolicyID:
+                          description: storagePolicyID is the storage Policy Based
+                            Management (SPBM) profile ID associated with the StoragePolicyName.
+                          type: string
+                        storagePolicyName:
+                          description: storagePolicyName is the storage Policy Based
+                            Management (SPBM) profile name.
+                          type: string
+                        volumePath:
+                          description: volumePath is the path that identifies vSphere
+                            volume vmdk
+                          type: string
+                      required:
+                      - volumePath
+                      type: object
+                  required:
+                  - name
+                  type: object
+                type: array
+            required:
+            - config
+            - name
+            - type
+            type: object
+        type: object
+    served: true
+    storage: true
diff --git a/operations/agent-static-operator/crds/monitoring.grafana.com_logsinstances.yaml b/operations/agent-static-operator/crds/monitoring.grafana.com_logsinstances.yaml
new file mode 100644
index 000000000000..f36440ab0cd0
--- /dev/null
+++ b/operations/agent-static-operator/crds/monitoring.grafana.com_logsinstances.yaml
@@ -0,0 +1,500 @@
+---
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+  annotations:
+    controller-gen.kubebuilder.io/version: v0.9.2
+  creationTimestamp: null
+  name: logsinstances.monitoring.grafana.com
+spec:
+  group: monitoring.grafana.com
+  names:
+    categories:
+    - agent-operator
+    kind: LogsInstance
+    listKind: LogsInstanceList
+    plural: logsinstances
+    singular: logsinstance
+  scope: Namespaced
+  versions:
+  - name: v1alpha1
+    schema:
+      openAPIV3Schema:
+        description: LogsInstance controls an individual logs instance within a Grafana
+          Agent deployment.
+        properties:
+          apiVersion:
+            description: 'APIVersion defines the versioned schema of this representation
+              of an object. Servers should convert recognized schemas to the latest
+              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+            type: string
+          kind:
+            description: 'Kind is a string value representing the REST resource this
+              object represents. Servers may infer this from the endpoint the client
+              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+            type: string
+          metadata:
+            type: object
+          spec:
+            description: Spec holds the specification of the desired behavior for
+              the logs instance.
+            properties:
+              additionalScrapeConfigs:
+                description: "AdditionalScrapeConfigs allows specifying a key of a
+                  Secret containing additional Grafana Agent logging scrape configurations.
+                  Scrape configurations specified are appended to the configurations
+                  generated by the Grafana Agent Operator. \n Job configurations specified
+                  must have the form as specified in the official Promtail documentation:
+                  \n https://grafana.com/docs/loki/latest/clients/promtail/configuration/#scrape_configs
+                  \n As scrape configs are appended, the user is responsible to make
+                  sure it is valid. Note that using this feature may expose the possibility
+                  to break upgrades of Grafana Agent. It is advised to review both
+                  Grafana Agent and Promtail release notes to ensure that no incompatible
+                  scrape configs are going to break Grafana Agent after the upgrade."
+                properties:
+                  key:
+                    description: The key of the secret to select from.  Must be a
+                      valid secret key.
+                    type: string
+                  name:
+                    description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                      TODO: Add other useful fields. apiVersion, kind, uid?'
+                    type: string
+                  optional:
+                    description: Specify whether the Secret or its key must be defined
+                    type: boolean
+                required:
+                - key
+                type: object
+                x-kubernetes-map-type: atomic
+              clients:
+                description: Clients controls where logs are written to for this instance.
+                items:
+                  description: LogsClientSpec defines the client integration for logs,
+                    indicating which Loki server to send logs to.
+                  properties:
+                    backoffConfig:
+                      description: Configures how to retry requests to Loki when a
+                        request fails. Defaults to a minPeriod of 500ms, maxPeriod
+                        of 5m, and maxRetries of 10.
+                      properties:
+                        maxPeriod:
+                          description: Maximum backoff time between retries.
+                          type: string
+                        maxRetries:
+                          description: Maximum number of retries to perform before
+                            giving up a request.
+                          type: integer
+                        minPeriod:
+                          description: Initial backoff time between retries. Time
+                            between retries is increased exponentially.
+                          type: string
+                      type: object
+                    basicAuth:
+                      description: BasicAuth for the Loki server.
+                      properties:
+                        password:
+                          description: The secret in the service monitor namespace
+                            that contains the password for authentication.
+                          properties:
+                            key:
+                              description: The key of the secret to select from.  Must
+                                be a valid secret key.
+                              type: string
+                            name:
+                              description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                TODO: Add other useful fields. apiVersion, kind, uid?'
+                              type: string
+                            optional:
+                              description: Specify whether the Secret or its key must
+                                be defined
+                              type: boolean
+                          required:
+                          - key
+                          type: object
+                          x-kubernetes-map-type: atomic
+                        username:
+                          description: The secret in the service monitor namespace
+                            that contains the username for authentication.
+                          properties:
+                            key:
+                              description: The key of the secret to select from.  Must
+                                be a valid secret key.
+                              type: string
+                            name:
+                              description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                TODO: Add other useful fields. apiVersion, kind, uid?'
+                              type: string
+                            optional:
+                              description: Specify whether the Secret or its key must
+                                be defined
+                              type: boolean
+                          required:
+                          - key
+                          type: object
+                          x-kubernetes-map-type: atomic
+                      type: object
+                    batchSize:
+                      description: Maximum batch size (in bytes) of logs to accumulate
+                        before sending the batch to Loki.
+                      type: integer
+                    batchWait:
+                      description: Maximum amount of time to wait before sending a
+                        batch, even if that batch isn't full.
+                      type: string
+                    bearerToken:
+                      description: BearerToken used for remote_write.
+                      type: string
+                    bearerTokenFile:
+                      description: BearerTokenFile used to read bearer token.
+                      type: string
+                    externalLabels:
+                      additionalProperties:
+                        type: string
+                      description: ExternalLabels are labels to add to any time series
+                        when sending data to Loki.
+                      type: object
+                    oauth2:
+                      description: Oauth2 for URL
+                      properties:
+                        clientId:
+                          description: The secret or configmap containing the OAuth2
+                            client id
+                          properties:
+                            configMap:
+                              description: ConfigMap containing data to use for the
+                                targets.
+                              properties:
+                                key:
+                                  description: The key to select.
+                                  type: string
+                                name:
+                                  description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                    TODO: Add other useful fields. apiVersion, kind,
+                                    uid?'
+                                  type: string
+                                optional:
+                                  description: Specify whether the ConfigMap or its
+                                    key must be defined
+                                  type: boolean
+                              required:
+                              - key
+                              type: object
+                              x-kubernetes-map-type: atomic
+                            secret:
+                              description: Secret containing data to use for the targets.
+                              properties:
+                                key:
+                                  description: The key of the secret to select from.  Must
+                                    be a valid secret key.
+                                  type: string
+                                name:
+                                  description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                    TODO: Add other useful fields. apiVersion, kind,
+                                    uid?'
+                                  type: string
+                                optional:
+                                  description: Specify whether the Secret or its key
+                                    must be defined
+                                  type: boolean
+                              required:
+                              - key
+                              type: object
+                              x-kubernetes-map-type: atomic
+                          type: object
+                        clientSecret:
+                          description: The secret containing the OAuth2 client secret
+                          properties:
+                            key:
+                              description: The key of the secret to select from.  Must
+                                be a valid secret key.
+                              type: string
+                            name:
+                              description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                TODO: Add other useful fields. apiVersion, kind, uid?'
+                              type: string
+                            optional:
+                              description: Specify whether the Secret or its key must
+                                be defined
+                              type: boolean
+                          required:
+                          - key
+                          type: object
+                          x-kubernetes-map-type: atomic
+                        endpointParams:
+                          additionalProperties:
+                            type: string
+                          description: Parameters to append to the token URL
+                          type: object
+                        scopes:
+                          description: OAuth2 scopes used for the token request
+                          items:
+                            type: string
+                          type: array
+                        tokenUrl:
+                          description: The URL to fetch the token from
+                          minLength: 1
+                          type: string
+                      required:
+                      - clientId
+                      - clientSecret
+                      - tokenUrl
+                      type: object
+                    proxyUrl:
+                      description: ProxyURL to proxy requests through. Optional.
+                      type: string
+                    tenantId:
+                      description: Tenant ID used by default to push logs to Loki.
+                        If omitted assumes remote Loki is running in single-tenant
+                        mode or an authentication layer is used to inject an X-Scope-OrgID
+                        header.
+                      type: string
+                    timeout:
+                      description: Maximum time to wait for a server to respond to
+                        a request.
+                      type: string
+                    tlsConfig:
+                      description: TLSConfig to use for the client. Only used when
+                        the protocol of the URL is https.
+                      properties:
+                        ca:
+                          description: Certificate authority used when verifying server
+                            certificates.
+                          properties:
+                            configMap:
+                              description: ConfigMap containing data to use for the
+                                targets.
+                              properties:
+                                key:
+                                  description: The key to select.
+                                  type: string
+                                name:
+                                  description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                    TODO: Add other useful fields. apiVersion, kind,
+                                    uid?'
+                                  type: string
+                                optional:
+                                  description: Specify whether the ConfigMap or its
+                                    key must be defined
+                                  type: boolean
+                              required:
+                              - key
+                              type: object
+                              x-kubernetes-map-type: atomic
+                            secret:
+                              description: Secret containing data to use for the targets.
+                              properties:
+                                key:
+                                  description: The key of the secret to select from.  Must
+                                    be a valid secret key.
+                                  type: string
+                                name:
+                                  description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                    TODO: Add other useful fields. apiVersion, kind,
+                                    uid?'
+                                  type: string
+                                optional:
+                                  description: Specify whether the Secret or its key
+                                    must be defined
+                                  type: boolean
+                              required:
+                              - key
+                              type: object
+                              x-kubernetes-map-type: atomic
+                          type: object
+                        caFile:
+                          description: Path to the CA cert in the Prometheus container
+                            to use for the targets.
+                          type: string
+                        cert:
+                          description: Client certificate to present when doing client-authentication.
+                          properties:
+                            configMap:
+                              description: ConfigMap containing data to use for the
+                                targets.
+                              properties:
+                                key:
+                                  description: The key to select.
+                                  type: string
+                                name:
+                                  description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                    TODO: Add other useful fields. apiVersion, kind,
+                                    uid?'
+                                  type: string
+                                optional:
+                                  description: Specify whether the ConfigMap or its
+                                    key must be defined
+                                  type: boolean
+                              required:
+                              - key
+                              type: object
+                              x-kubernetes-map-type: atomic
+                            secret:
+                              description: Secret containing data to use for the targets.
+                              properties:
+                                key:
+                                  description: The key of the secret to select from.  Must
+                                    be a valid secret key.
+                                  type: string
+                                name:
+                                  description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                    TODO: Add other useful fields. apiVersion, kind,
+                                    uid?'
+                                  type: string
+                                optional:
+                                  description: Specify whether the Secret or its key
+                                    must be defined
+                                  type: boolean
+                              required:
+                              - key
+                              type: object
+                              x-kubernetes-map-type: atomic
+                          type: object
+                        certFile:
+                          description: Path to the client cert file in the Prometheus
+                            container for the targets.
+                          type: string
+                        insecureSkipVerify:
+                          description: Disable target certificate validation.
+                          type: boolean
+                        keyFile:
+                          description: Path to the client key file in the Prometheus
+                            container for the targets.
+                          type: string
+                        keySecret:
+                          description: Secret containing the client key file for the
+                            targets.
+                          properties:
+                            key:
+                              description: The key of the secret to select from.  Must
+                                be a valid secret key.
+                              type: string
+                            name:
+                              description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                TODO: Add other useful fields. apiVersion, kind, uid?'
+                              type: string
+                            optional:
+                              description: Specify whether the Secret or its key must
+                                be defined
+                              type: boolean
+                          required:
+                          - key
+                          type: object
+                          x-kubernetes-map-type: atomic
+                        serverName:
+                          description: Used to verify the hostname for the targets.
+                          type: string
+                      type: object
+                    url:
+                      description: 'URL is the URL where Loki is listening. Must be
+                        a full HTTP URL, including protocol. Required. Example: https://logs-prod-us-central1.grafana.net/loki/api/v1/push.'
+                      type: string
+                  required:
+                  - url
+                  type: object
+                type: array
+              podLogsNamespaceSelector:
+                description: Set of labels to determine which namespaces should be
+                  watched for PodLogs. If not provided, checks only namespace of the
+                  instance.
+                properties:
+                  matchExpressions:
+                    description: matchExpressions is a list of label selector requirements.
+                      The requirements are ANDed.
+                    items:
+                      description: A label selector requirement is a selector that
+                        contains values, a key, and an operator that relates the key
+                        and values.
+                      properties:
+                        key:
+                          description: key is the label key that the selector applies
+                            to.
+                          type: string
+                        operator:
+                          description: operator represents a key's relationship to
+                            a set of values. Valid operators are In, NotIn, Exists
+                            and DoesNotExist.
+                          type: string
+                        values:
+                          description: values is an array of string values. If the
+                            operator is In or NotIn, the values array must be non-empty.
+                            If the operator is Exists or DoesNotExist, the values
+                            array must be empty. This array is replaced during a strategic
+                            merge patch.
+                          items:
+                            type: string
+                          type: array
+                      required:
+                      - key
+                      - operator
+                      type: object
+                    type: array
+                  matchLabels:
+                    additionalProperties:
+                      type: string
+                    description: matchLabels is a map of {key,value} pairs. A single
+                      {key,value} in the matchLabels map is equivalent to an element
+                      of matchExpressions, whose key field is "key", the operator
+                      is "In", and the values array contains only "value". The requirements
+                      are ANDed.
+                    type: object
+                type: object
+                x-kubernetes-map-type: atomic
+              podLogsSelector:
+                description: Determines which PodLogs should be selected for including
+                  in this instance.
+                properties:
+                  matchExpressions:
+                    description: matchExpressions is a list of label selector requirements.
+                      The requirements are ANDed.
+                    items:
+                      description: A label selector requirement is a selector that
+                        contains values, a key, and an operator that relates the key
+                        and values.
+                      properties:
+                        key:
+                          description: key is the label key that the selector applies
+                            to.
+                          type: string
+                        operator:
+                          description: operator represents a key's relationship to
+                            a set of values. Valid operators are In, NotIn, Exists
+                            and DoesNotExist.
+                          type: string
+                        values:
+                          description: values is an array of string values. If the
+                            operator is In or NotIn, the values array must be non-empty.
+                            If the operator is Exists or DoesNotExist, the values
+                            array must be empty. This array is replaced during a strategic
+                            merge patch.
+                          items:
+                            type: string
+                          type: array
+                      required:
+                      - key
+                      - operator
+                      type: object
+                    type: array
+                  matchLabels:
+                    additionalProperties:
+                      type: string
+                    description: matchLabels is a map of {key,value} pairs. A single
+                      {key,value} in the matchLabels map is equivalent to an element
+                      of matchExpressions, whose key field is "key", the operator
+                      is "In", and the values array contains only "value". The requirements
+                      are ANDed.
+                    type: object
+                type: object
+                x-kubernetes-map-type: atomic
+              targetConfig:
+                description: Configures how tailed targets are watched.
+                properties:
+                  syncPeriod:
+                    description: Period to resync directories being watched and files
+                      being tailed to discover new ones or stop watching removed ones.
+                    type: string
+                type: object
+            type: object
+        type: object
+    served: true
+    storage: true
diff --git a/operations/agent-static-operator/crds/monitoring.grafana.com_metricsinstances.yaml b/operations/agent-static-operator/crds/monitoring.grafana.com_metricsinstances.yaml
new file mode 100644
index 000000000000..015c0339ce1a
--- /dev/null
+++ b/operations/agent-static-operator/crds/monitoring.grafana.com_metricsinstances.yaml
@@ -0,0 +1,861 @@
+---
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+  annotations:
+    controller-gen.kubebuilder.io/version: v0.9.2
+  creationTimestamp: null
+  name: metricsinstances.monitoring.grafana.com
+spec:
+  group: monitoring.grafana.com
+  names:
+    categories:
+    - agent-operator
+    kind: MetricsInstance
+    listKind: MetricsInstanceList
+    plural: metricsinstances
+    singular: metricsinstance
+  scope: Namespaced
+  versions:
+  - name: v1alpha1
+    schema:
+      openAPIV3Schema:
+        description: MetricsInstance controls an individual Metrics instance within
+          a Grafana Agent deployment.
+        properties:
+          apiVersion:
+            description: 'APIVersion defines the versioned schema of this representation
+              of an object. Servers should convert recognized schemas to the latest
+              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+            type: string
+          kind:
+            description: 'Kind is a string value representing the REST resource this
+              object represents. Servers may infer this from the endpoint the client
+              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+            type: string
+          metadata:
+            type: object
+          spec:
+            description: Spec holds the specification of the desired behavior for
+              the Metrics instance.
+            properties:
+              additionalScrapeConfigs:
+                description: 'AdditionalScrapeConfigs lets you specify a key of a
+                  Secret containing additional Grafana Agent Prometheus scrape configurations.
+                  The specified scrape configurations are appended to the configurations
+                  generated by Grafana Agent Operator. Specified job configurations
+                  must have the form specified in the official Prometheus documentation:
+                  https://prometheus.io/docs/prometheus/latest/configuration/configuration/#scrape_config.
+                  As scrape configs are appended, you must make sure the configuration
+                  is still valid. Note that it''s possible that this feature will
+                  break future upgrades of Grafana Agent. Review both Grafana Agent
+                  and Prometheus release notes to ensure that no incompatible scrape
+                  configs will break Grafana Agent after the upgrade.'
+                properties:
+                  key:
+                    description: The key of the secret to select from.  Must be a
+                      valid secret key.
+                    type: string
+                  name:
+                    description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                      TODO: Add other useful fields. apiVersion, kind, uid?'
+                    type: string
+                  optional:
+                    description: Specify whether the Secret or its key must be defined
+                    type: boolean
+                required:
+                - key
+                type: object
+                x-kubernetes-map-type: atomic
+              maxWALTime:
+                description: MaxWALTime is the maximum amount of time that series
+                  and samples can exist in the WAL before being forcibly deleted.
+                type: string
+              minWALTime:
+                description: MinWALTime is the minimum amount of time that series
+                  and samples can exist in the WAL before being considered for deletion.
+                type: string
+              podMonitorNamespaceSelector:
+                description: PodMonitorNamespaceSelector are the set of labels to
+                  determine which namespaces to watch for PodMonitor discovery. If
+                  nil, it only checks its own namespace.
+                properties:
+                  matchExpressions:
+                    description: matchExpressions is a list of label selector requirements.
+                      The requirements are ANDed.
+                    items:
+                      description: A label selector requirement is a selector that
+                        contains values, a key, and an operator that relates the key
+                        and values.
+                      properties:
+                        key:
+                          description: key is the label key that the selector applies
+                            to.
+                          type: string
+                        operator:
+                          description: operator represents a key's relationship to
+                            a set of values. Valid operators are In, NotIn, Exists
+                            and DoesNotExist.
+                          type: string
+                        values:
+                          description: values is an array of string values. If the
+                            operator is In or NotIn, the values array must be non-empty.
+                            If the operator is Exists or DoesNotExist, the values
+                            array must be empty. This array is replaced during a strategic
+                            merge patch.
+                          items:
+                            type: string
+                          type: array
+                      required:
+                      - key
+                      - operator
+                      type: object
+                    type: array
+                  matchLabels:
+                    additionalProperties:
+                      type: string
+                    description: matchLabels is a map of {key,value} pairs. A single
+                      {key,value} in the matchLabels map is equivalent to an element
+                      of matchExpressions, whose key field is "key", the operator
+                      is "In", and the values array contains only "value". The requirements
+                      are ANDed.
+                    type: object
+                type: object
+                x-kubernetes-map-type: atomic
+              podMonitorSelector:
+                description: PodMonitorSelector determines which PodMonitors to selected
+                  for target discovery. Experimental.
+                properties:
+                  matchExpressions:
+                    description: matchExpressions is a list of label selector requirements.
+                      The requirements are ANDed.
+                    items:
+                      description: A label selector requirement is a selector that
+                        contains values, a key, and an operator that relates the key
+                        and values.
+                      properties:
+                        key:
+                          description: key is the label key that the selector applies
+                            to.
+                          type: string
+                        operator:
+                          description: operator represents a key's relationship to
+                            a set of values. Valid operators are In, NotIn, Exists
+                            and DoesNotExist.
+                          type: string
+                        values:
+                          description: values is an array of string values. If the
+                            operator is In or NotIn, the values array must be non-empty.
+                            If the operator is Exists or DoesNotExist, the values
+                            array must be empty. This array is replaced during a strategic
+                            merge patch.
+                          items:
+                            type: string
+                          type: array
+                      required:
+                      - key
+                      - operator
+                      type: object
+                    type: array
+                  matchLabels:
+                    additionalProperties:
+                      type: string
+                    description: matchLabels is a map of {key,value} pairs. A single
+                      {key,value} in the matchLabels map is equivalent to an element
+                      of matchExpressions, whose key field is "key", the operator
+                      is "In", and the values array contains only "value". The requirements
+                      are ANDed.
+                    type: object
+                type: object
+                x-kubernetes-map-type: atomic
+              probeNamespaceSelector:
+                description: ProbeNamespaceSelector is the set of labels that determines
+                  which namespaces to watch for Probe discovery. If nil, it only checks
+                  own namespace.
+                properties:
+                  matchExpressions:
+                    description: matchExpressions is a list of label selector requirements.
+                      The requirements are ANDed.
+                    items:
+                      description: A label selector requirement is a selector that
+                        contains values, a key, and an operator that relates the key
+                        and values.
+                      properties:
+                        key:
+                          description: key is the label key that the selector applies
+                            to.
+                          type: string
+                        operator:
+                          description: operator represents a key's relationship to
+                            a set of values. Valid operators are In, NotIn, Exists
+                            and DoesNotExist.
+                          type: string
+                        values:
+                          description: values is an array of string values. If the
+                            operator is In or NotIn, the values array must be non-empty.
+                            If the operator is Exists or DoesNotExist, the values
+                            array must be empty. This array is replaced during a strategic
+                            merge patch.
+                          items:
+                            type: string
+                          type: array
+                      required:
+                      - key
+                      - operator
+                      type: object
+                    type: array
+                  matchLabels:
+                    additionalProperties:
+                      type: string
+                    description: matchLabels is a map of {key,value} pairs. A single
+                      {key,value} in the matchLabels map is equivalent to an element
+                      of matchExpressions, whose key field is "key", the operator
+                      is "In", and the values array contains only "value". The requirements
+                      are ANDed.
+                    type: object
+                type: object
+                x-kubernetes-map-type: atomic
+              probeSelector:
+                description: ProbeSelector determines which Probes to select for target
+                  discovery.
+                properties:
+                  matchExpressions:
+                    description: matchExpressions is a list of label selector requirements.
+                      The requirements are ANDed.
+                    items:
+                      description: A label selector requirement is a selector that
+                        contains values, a key, and an operator that relates the key
+                        and values.
+                      properties:
+                        key:
+                          description: key is the label key that the selector applies
+                            to.
+                          type: string
+                        operator:
+                          description: operator represents a key's relationship to
+                            a set of values. Valid operators are In, NotIn, Exists
+                            and DoesNotExist.
+                          type: string
+                        values:
+                          description: values is an array of string values. If the
+                            operator is In or NotIn, the values array must be non-empty.
+                            If the operator is Exists or DoesNotExist, the values
+                            array must be empty. This array is replaced during a strategic
+                            merge patch.
+                          items:
+                            type: string
+                          type: array
+                      required:
+                      - key
+                      - operator
+                      type: object
+                    type: array
+                  matchLabels:
+                    additionalProperties:
+                      type: string
+                    description: matchLabels is a map of {key,value} pairs. A single
+                      {key,value} in the matchLabels map is equivalent to an element
+                      of matchExpressions, whose key field is "key", the operator
+                      is "In", and the values array contains only "value". The requirements
+                      are ANDed.
+                    type: object
+                type: object
+                x-kubernetes-map-type: atomic
+              remoteFlushDeadline:
+                description: RemoteFlushDeadline is the deadline for flushing data
+                  when an instance shuts down.
+                type: string
+              remoteWrite:
+                description: RemoteWrite controls remote_write settings for this instance.
+                items:
+                  description: RemoteWriteSpec defines the remote_write configuration
+                    for Prometheus.
+                  properties:
+                    basicAuth:
+                      description: BasicAuth for the URL.
+                      properties:
+                        password:
+                          description: The secret in the service monitor namespace
+                            that contains the password for authentication.
+                          properties:
+                            key:
+                              description: The key of the secret to select from.  Must
+                                be a valid secret key.
+                              type: string
+                            name:
+                              description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                TODO: Add other useful fields. apiVersion, kind, uid?'
+                              type: string
+                            optional:
+                              description: Specify whether the Secret or its key must
+                                be defined
+                              type: boolean
+                          required:
+                          - key
+                          type: object
+                          x-kubernetes-map-type: atomic
+                        username:
+                          description: The secret in the service monitor namespace
+                            that contains the username for authentication.
+                          properties:
+                            key:
+                              description: The key of the secret to select from.  Must
+                                be a valid secret key.
+                              type: string
+                            name:
+                              description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                TODO: Add other useful fields. apiVersion, kind, uid?'
+                              type: string
+                            optional:
+                              description: Specify whether the Secret or its key must
+                                be defined
+                              type: boolean
+                          required:
+                          - key
+                          type: object
+                          x-kubernetes-map-type: atomic
+                      type: object
+                    bearerToken:
+                      description: BearerToken used for remote_write.
+                      type: string
+                    bearerTokenFile:
+                      description: BearerTokenFile used to read bearer token.
+                      type: string
+                    headers:
+                      additionalProperties:
+                        type: string
+                      description: Headers is a set of custom HTTP headers to be sent
+                        along with each remote_write request. Be aware that any headers
+                        set by Grafana Agent itself can't be overwritten.
+                      type: object
+                    metadataConfig:
+                      description: MetadataConfig configures the sending of series
+                        metadata to remote storage.
+                      properties:
+                        send:
+                          description: Send enables metric metadata to be sent to
+                            remote storage.
+                          type: boolean
+                        sendInterval:
+                          description: SendInterval controls how frequently metric
+                            metadata is sent to remote storage.
+                          type: string
+                      type: object
+                    name:
+                      description: Name of the remote_write queue. Must be unique
+                        if specified. The name is used in metrics and logging in order
+                        to differentiate queues.
+                      type: string
+                    oauth2:
+                      description: Oauth2 for URL
+                      properties:
+                        clientId:
+                          description: The secret or configmap containing the OAuth2
+                            client id
+                          properties:
+                            configMap:
+                              description: ConfigMap containing data to use for the
+                                targets.
+                              properties:
+                                key:
+                                  description: The key to select.
+                                  type: string
+                                name:
+                                  description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                    TODO: Add other useful fields. apiVersion, kind,
+                                    uid?'
+                                  type: string
+                                optional:
+                                  description: Specify whether the ConfigMap or its
+                                    key must be defined
+                                  type: boolean
+                              required:
+                              - key
+                              type: object
+                              x-kubernetes-map-type: atomic
+                            secret:
+                              description: Secret containing data to use for the targets.
+                              properties:
+                                key:
+                                  description: The key of the secret to select from.  Must
+                                    be a valid secret key.
+                                  type: string
+                                name:
+                                  description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                    TODO: Add other useful fields. apiVersion, kind,
+                                    uid?'
+                                  type: string
+                                optional:
+                                  description: Specify whether the Secret or its key
+                                    must be defined
+                                  type: boolean
+                              required:
+                              - key
+                              type: object
+                              x-kubernetes-map-type: atomic
+                          type: object
+                        clientSecret:
+                          description: The secret containing the OAuth2 client secret
+                          properties:
+                            key:
+                              description: The key of the secret to select from.  Must
+                                be a valid secret key.
+                              type: string
+                            name:
+                              description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                TODO: Add other useful fields. apiVersion, kind, uid?'
+                              type: string
+                            optional:
+                              description: Specify whether the Secret or its key must
+                                be defined
+                              type: boolean
+                          required:
+                          - key
+                          type: object
+                          x-kubernetes-map-type: atomic
+                        endpointParams:
+                          additionalProperties:
+                            type: string
+                          description: Parameters to append to the token URL
+                          type: object
+                        scopes:
+                          description: OAuth2 scopes used for the token request
+                          items:
+                            type: string
+                          type: array
+                        tokenUrl:
+                          description: The URL to fetch the token from
+                          minLength: 1
+                          type: string
+                      required:
+                      - clientId
+                      - clientSecret
+                      - tokenUrl
+                      type: object
+                    proxyUrl:
+                      description: ProxyURL to proxy requests through. Optional.
+                      type: string
+                    queueConfig:
+                      description: QueueConfig allows tuning of the remote_write queue
+                        parameters.
+                      properties:
+                        batchSendDeadline:
+                          description: BatchSendDeadline is the maximum time a sample
+                            will wait in the buffer.
+                          type: string
+                        capacity:
+                          description: Capacity is the number of samples to buffer
+                            per shard before samples start being dropped.
+                          type: integer
+                        maxBackoff:
+                          description: MaxBackoff is the maximum retry delay.
+                          type: string
+                        maxRetries:
+                          description: MaxRetries is the maximum number of times to
+                            retry a batch on recoverable errors.
+                          type: integer
+                        maxSamplesPerSend:
+                          description: MaxSamplesPerSend is the maximum number of
+                            samples per send.
+                          type: integer
+                        maxShards:
+                          description: MaxShards is the maximum number of shards,
+                            i.e., the amount of concurrency.
+                          type: integer
+                        minBackoff:
+                          description: MinBackoff is the initial retry delay. MinBackoff
+                            is doubled for every retry.
+                          type: string
+                        minShards:
+                          description: MinShards is the minimum number of shards,
+                            i.e., the amount of concurrency.
+                          type: integer
+                        retryOnRateLimit:
+                          description: RetryOnRateLimit retries requests when encountering
+                            rate limits.
+                          type: boolean
+                      type: object
+                    remoteTimeout:
+                      description: RemoteTimeout is the timeout for requests to the
+                        remote_write endpoint.
+                      type: string
+                    sigv4:
+                      description: SigV4 configures SigV4-based authentication to
+                        the remote_write endpoint. SigV4-based authentication is used
+                        if SigV4 is defined, even with an empty object.
+                      properties:
+                        accessKey:
+                          description: AccessKey holds the secret of the AWS API access
+                            key to use for signing. If not provided, the environment
+                            variable AWS_ACCESS_KEY_ID is used.
+                          properties:
+                            key:
+                              description: The key of the secret to select from.  Must
+                                be a valid secret key.
+                              type: string
+                            name:
+                              description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                TODO: Add other useful fields. apiVersion, kind, uid?'
+                              type: string
+                            optional:
+                              description: Specify whether the Secret or its key must
+                                be defined
+                              type: boolean
+                          required:
+                          - key
+                          type: object
+                          x-kubernetes-map-type: atomic
+                        profile:
+                          description: Profile is the named AWS profile to use for
+                            authentication.
+                          type: string
+                        region:
+                          description: Region of the AWS endpoint. If blank, the region
+                            from the default credentials chain is used.
+                          type: string
+                        roleARN:
+                          description: RoleARN is the AWS Role ARN to use for authentication,
+                            as an alternative for using the AWS API keys.
+                          type: string
+                        secretKey:
+                          description: SecretKey of the AWS API to use for signing.
+                            If blank, the environment variable AWS_SECRET_ACCESS_KEY
+                            is used.
+                          properties:
+                            key:
+                              description: The key of the secret to select from.  Must
+                                be a valid secret key.
+                              type: string
+                            name:
+                              description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                TODO: Add other useful fields. apiVersion, kind, uid?'
+                              type: string
+                            optional:
+                              description: Specify whether the Secret or its key must
+                                be defined
+                              type: boolean
+                          required:
+                          - key
+                          type: object
+                          x-kubernetes-map-type: atomic
+                      type: object
+                    tlsConfig:
+                      description: TLSConfig to use for remote_write.
+                      properties:
+                        ca:
+                          description: Certificate authority used when verifying server
+                            certificates.
+                          properties:
+                            configMap:
+                              description: ConfigMap containing data to use for the
+                                targets.
+                              properties:
+                                key:
+                                  description: The key to select.
+                                  type: string
+                                name:
+                                  description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                    TODO: Add other useful fields. apiVersion, kind,
+                                    uid?'
+                                  type: string
+                                optional:
+                                  description: Specify whether the ConfigMap or its
+                                    key must be defined
+                                  type: boolean
+                              required:
+                              - key
+                              type: object
+                              x-kubernetes-map-type: atomic
+                            secret:
+                              description: Secret containing data to use for the targets.
+                              properties:
+                                key:
+                                  description: The key of the secret to select from.  Must
+                                    be a valid secret key.
+                                  type: string
+                                name:
+                                  description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                    TODO: Add other useful fields. apiVersion, kind,
+                                    uid?'
+                                  type: string
+                                optional:
+                                  description: Specify whether the Secret or its key
+                                    must be defined
+                                  type: boolean
+                              required:
+                              - key
+                              type: object
+                              x-kubernetes-map-type: atomic
+                          type: object
+                        caFile:
+                          description: Path to the CA cert in the Prometheus container
+                            to use for the targets.
+                          type: string
+                        cert:
+                          description: Client certificate to present when doing client-authentication.
+                          properties:
+                            configMap:
+                              description: ConfigMap containing data to use for the
+                                targets.
+                              properties:
+                                key:
+                                  description: The key to select.
+                                  type: string
+                                name:
+                                  description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                    TODO: Add other useful fields. apiVersion, kind,
+                                    uid?'
+                                  type: string
+                                optional:
+                                  description: Specify whether the ConfigMap or its
+                                    key must be defined
+                                  type: boolean
+                              required:
+                              - key
+                              type: object
+                              x-kubernetes-map-type: atomic
+                            secret:
+                              description: Secret containing data to use for the targets.
+                              properties:
+                                key:
+                                  description: The key of the secret to select from.  Must
+                                    be a valid secret key.
+                                  type: string
+                                name:
+                                  description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                    TODO: Add other useful fields. apiVersion, kind,
+                                    uid?'
+                                  type: string
+                                optional:
+                                  description: Specify whether the Secret or its key
+                                    must be defined
+                                  type: boolean
+                              required:
+                              - key
+                              type: object
+                              x-kubernetes-map-type: atomic
+                          type: object
+                        certFile:
+                          description: Path to the client cert file in the Prometheus
+                            container for the targets.
+                          type: string
+                        insecureSkipVerify:
+                          description: Disable target certificate validation.
+                          type: boolean
+                        keyFile:
+                          description: Path to the client key file in the Prometheus
+                            container for the targets.
+                          type: string
+                        keySecret:
+                          description: Secret containing the client key file for the
+                            targets.
+                          properties:
+                            key:
+                              description: The key of the secret to select from.  Must
+                                be a valid secret key.
+                              type: string
+                            name:
+                              description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
+                                TODO: Add other useful fields. apiVersion, kind, uid?'
+                              type: string
+                            optional:
+                              description: Specify whether the Secret or its key must
+                                be defined
+                              type: boolean
+                          required:
+                          - key
+                          type: object
+                          x-kubernetes-map-type: atomic
+                        serverName:
+                          description: Used to verify the hostname for the targets.
+                          type: string
+                      type: object
+                    url:
+                      description: URL of the endpoint to send samples to.
+                      type: string
+                    writeRelabelConfigs:
+                      description: WriteRelabelConfigs holds relabel_configs to relabel
+                        samples before they are sent to the remote_write endpoint.
+                      items:
+                        description: 'RelabelConfig allows dynamic rewriting of the
+                          label set, being applied to samples before ingestion. It
+                          defines `<metric_relabel_configs>`-section of Prometheus
+                          configuration. More info: https://prometheus.io/docs/prometheus/latest/configuration/configuration/#metric_relabel_configs'
+                        properties:
+                          action:
+                            default: replace
+                            description: Action to perform based on regex matching.
+                              Default is 'replace'. uppercase and lowercase actions
+                              require Prometheus >= 2.36.
+                            enum:
+                            - replace
+                            - Replace
+                            - keep
+                            - Keep
+                            - drop
+                            - Drop
+                            - hashmod
+                            - HashMod
+                            - labelmap
+                            - LabelMap
+                            - labeldrop
+                            - LabelDrop
+                            - labelkeep
+                            - LabelKeep
+                            - lowercase
+                            - Lowercase
+                            - uppercase
+                            - Uppercase
+                            - keepequal
+                            - KeepEqual
+                            - dropequal
+                            - DropEqual
+                            type: string
+                          modulus:
+                            description: Modulus to take of the hash of the source
+                              label values.
+                            format: int64
+                            type: integer
+                          regex:
+                            description: Regular expression against which the extracted
+                              value is matched. Default is '(.*)'
+                            type: string
+                          replacement:
+                            description: Replacement value against which a regex replace
+                              is performed if the regular expression matches. Regex
+                              capture groups are available. Default is '$1'
+                            type: string
+                          separator:
+                            description: Separator placed between concatenated source
+                              label values. default is ';'.
+                            type: string
+                          sourceLabels:
+                            description: The source labels select values from existing
+                              labels. Their content is concatenated using the configured
+                              separator and matched against the configured regular
+                              expression for the replace, keep, and drop actions.
+                            items:
+                              description: LabelName is a valid Prometheus label name
+                                which may only contain ASCII letters, numbers, as
+                                well as underscores.
+                              pattern: ^[a-zA-Z_][a-zA-Z0-9_]*$
+                              type: string
+                            type: array
+                          targetLabel:
+                            description: Label to which the resulting value is written
+                              in a replace action. It is mandatory for replace actions.
+                              Regex capture groups are available.
+                            type: string
+                        type: object
+                      type: array
+                  required:
+                  - url
+                  type: object
+                type: array
+              serviceMonitorNamespaceSelector:
+                description: ServiceMonitorNamespaceSelector is the set of labels
+                  that determine which namespaces to watch for ServiceMonitor discovery.
+                  If nil, it only checks its own namespace.
+                properties:
+                  matchExpressions:
+                    description: matchExpressions is a list of label selector requirements.
+                      The requirements are ANDed.
+                    items:
+                      description: A label selector requirement is a selector that
+                        contains values, a key, and an operator that relates the key
+                        and values.
+                      properties:
+                        key:
+                          description: key is the label key that the selector applies
+                            to.
+                          type: string
+                        operator:
+                          description: operator represents a key's relationship to
+                            a set of values. Valid operators are In, NotIn, Exists
+                            and DoesNotExist.
+                          type: string
+                        values:
+                          description: values is an array of string values. If the
+                            operator is In or NotIn, the values array must be non-empty.
+                            If the operator is Exists or DoesNotExist, the values
+                            array must be empty. This array is replaced during a strategic
+                            merge patch.
+                          items:
+                            type: string
+                          type: array
+                      required:
+                      - key
+                      - operator
+                      type: object
+                    type: array
+                  matchLabels:
+                    additionalProperties:
+                      type: string
+                    description: matchLabels is a map of {key,value} pairs. A single
+                      {key,value} in the matchLabels map is equivalent to an element
+                      of matchExpressions, whose key field is "key", the operator
+                      is "In", and the values array contains only "value". The requirements
+                      are ANDed.
+                    type: object
+                type: object
+                x-kubernetes-map-type: atomic
+              serviceMonitorSelector:
+                description: ServiceMonitorSelector determines which ServiceMonitors
+                  to select for target discovery.
+                properties:
+                  matchExpressions:
+                    description: matchExpressions is a list of label selector requirements.
+                      The requirements are ANDed.
+                    items:
+                      description: A label selector requirement is a selector that
+                        contains values, a key, and an operator that relates the key
+                        and values.
+                      properties:
+                        key:
+                          description: key is the label key that the selector applies
+                            to.
+                          type: string
+                        operator:
+                          description: operator represents a key's relationship to
+                            a set of values. Valid operators are In, NotIn, Exists
+                            and DoesNotExist.
+                          type: string
+                        values:
+                          description: values is an array of string values. If the
+                            operator is In or NotIn, the values array must be non-empty.
+                            If the operator is Exists or DoesNotExist, the values
+                            array must be empty. This array is replaced during a strategic
+                            merge patch.
+                          items:
+                            type: string
+                          type: array
+                      required:
+                      - key
+                      - operator
+                      type: object
+                    type: array
+                  matchLabels:
+                    additionalProperties:
+                      type: string
+                    description: matchLabels is a map of {key,value} pairs. A single
+                      {key,value} in the matchLabels map is equivalent to an element
+                      of matchExpressions, whose key field is "key", the operator
+                      is "In", and the values array contains only "value". The requirements
+                      are ANDed.
+                    type: object
+                type: object
+                x-kubernetes-map-type: atomic
+              walTruncateFrequency:
+                description: WALTruncateFrequency specifies how frequently to run
+                  the WAL truncation process. Higher values cause the WAL to increase
+                  and for old series to stay in the WAL longer, but reduces the chance
+                  of data loss when remote_write fails for longer than the given frequency.
+                type: string
+              writeStaleOnShutdown:
+                description: WriteStaleOnShutdown writes staleness markers on shutdown
+                  for all series.
+                type: boolean
+            type: object
+        type: object
+    served: true
+    storage: true
diff --git a/operations/agent-static-operator/crds/monitoring.grafana.com_podlogs.yaml b/operations/agent-static-operator/crds/monitoring.grafana.com_podlogs.yaml
new file mode 100644
index 000000000000..ff6531f61e88
--- /dev/null
+++ b/operations/agent-static-operator/crds/monitoring.grafana.com_podlogs.yaml
@@ -0,0 +1,588 @@
+---
+apiVersion: apiextensions.k8s.io/v1
+kind: CustomResourceDefinition
+metadata:
+  annotations:
+    controller-gen.kubebuilder.io/version: v0.9.2
+  creationTimestamp: null
+  name: podlogs.monitoring.grafana.com
+spec:
+  group: monitoring.grafana.com
+  names:
+    categories:
+    - agent-operator
+    kind: PodLogs
+    listKind: PodLogsList
+    plural: podlogs
+    singular: podlogs
+  scope: Namespaced
+  versions:
+  - name: v1alpha1
+    schema:
+      openAPIV3Schema:
+        description: PodLogs defines how to collect logs for a pod.
+        properties:
+          apiVersion:
+            description: 'APIVersion defines the versioned schema of this representation
+              of an object. Servers should convert recognized schemas to the latest
+              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
+            type: string
+          kind:
+            description: 'Kind is a string value representing the REST resource this
+              object represents. Servers may infer this from the endpoint the client
+              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
+            type: string
+          metadata:
+            type: object
+          spec:
+            description: Spec holds the specification of the desired behavior for
+              the PodLogs.
+            properties:
+              jobLabel:
+                description: The label to use to retrieve the job name from.
+                type: string
+              namespaceSelector:
+                description: Selector to select which namespaces the Pod objects are
+                  discovered from.
+                properties:
+                  any:
+                    description: Boolean describing whether all namespaces are selected
+                      in contrast to a list restricting them.
+                    type: boolean
+                  matchNames:
+                    description: List of namespace names to select from.
+                    items:
+                      type: string
+                    type: array
+                type: object
+              pipelineStages:
+                description: Pipeline stages for this pod. Pipeline stages support
+                  transforming and filtering log lines.
+                items:
+                  description: "PipelineStageSpec defines an individual pipeline stage.
+                    Each stage type is mutually exclusive and no more than one may
+                    be set per stage. \n More information on pipelines can be found
+                    in the Promtail documentation: https://grafana.com/docs/loki/latest/clients/promtail/pipelines/"
+                  properties:
+                    cri:
+                      description: 'CRI is a parsing stage that reads log lines using
+                        the standard CRI logging format. Supply cri: {} to enable.'
+                      type: object
+                    docker:
+                      description: 'Docker is a parsing stage that reads log lines
+                        using the standard Docker logging format. Supply docker: {}
+                        to enable.'
+                      type: object
+                    drop:
+                      description: Drop is a filtering stage that lets you drop certain
+                        logs.
+                      properties:
+                        dropCounterReason:
+                          description: Every time a log line is dropped, the metric
+                            logentry_dropped_lines_total is incremented. A "reason"
+                            label is added, and can be customized by providing a custom
+                            value here. Defaults to "drop_stage".
+                          type: string
+                        expression:
+                          description: "RE2 regular expression. \n If source is provided,
+                            the regex attempts to match the source. \n If no source
+                            is provided, then the regex attempts to attach the log
+                            line. \n If the provided regex matches the log line or
+                            a provided source, the line is dropped."
+                          type: string
+                        longerThan:
+                          description: LongerThan will drop a log line if it its content
+                            is longer than this value (in bytes). Can be expressed
+                            as an integer (8192) or a number with a suffix (8kb).
+                          type: string
+                        olderThan:
+                          description: OlderThan will be parsed as a Go duration.
+                            If the log line's timestamp is older than the current
+                            time minus the provided duration, it will be dropped.
+                          type: string
+                        source:
+                          description: Name from the extract data to parse. If empty,
+                            uses the log message.
+                          type: string
+                        value:
+                          description: "Value can only be specified when source is
+                            specified. If the value provided is an exact match for
+                            the given source then the line will be dropped. \n Mutually
+                            exclusive with expression."
+                          type: string
+                      type: object
+                    json:
+                      description: "JSON is a parsing stage that reads the log line
+                        as JSON and accepts JMESPath expressions to extract data.
+                        \n Information on JMESPath: http://jmespath.org/"
+                      properties:
+                        expressions:
+                          additionalProperties:
+                            type: string
+                          description: "Set of the key/value pairs of JMESPath expressions.
+                            The key will be the key in the extracted data while the
+                            expression will be the value, evaluated as a JMESPath
+                            from the source data. \n Literal JMESPath expressions
+                            can be used by wrapping a key in double quotes, which
+                            then must be wrapped again in single quotes in YAML so
+                            they get passed to the JMESPath parser."
+                          type: object
+                        source:
+                          description: Name from the extracted data to parse as JSON.
+                            If empty, uses entire log message.
+                          type: string
+                      type: object
+                    labelAllow:
+                      description: LabelAllow is an action stage that only allows
+                        the provided labels to be included in the label set that is
+                        sent to Loki with the log entry.
+                      items:
+                        type: string
+                      type: array
+                    labelDrop:
+                      description: LabelDrop is an action stage that drops labels
+                        from the label set that is sent to Loki with the log entry.
+                      items:
+                        type: string
+                      type: array
+                    labels:
+                      additionalProperties:
+                        type: string
+                      description: "Labels is an action stage that takes data from
+                        the extracted map and modifies the label set that is sent
+                        to Loki with the log entry. \n The key is REQUIRED and represents
+                        the name for the label that will be created. Value is optional
+                        and will be the name from extracted data to use for the value
+                        of the label. If the value is not provided, it defaults to
+                        match the key."
+                      type: object
+                    limit:
+                      description: Limit is a rate-limiting stage that throttles logs
+                        based on several options.
+                      properties:
+                        burst:
+                          description: The cap in the quantity of burst lines that
+                            Promtail will push to Loki.
+                          type: integer
+                        drop:
+                          description: "When drop is true, log lines that exceed the
+                            current rate limit are discarded. When drop is false,
+                            log lines that exceed the current rate limit wait to enter
+                            the back pressure mode. \n Defaults to false."
+                          type: boolean
+                        rate:
+                          description: The rate limit in lines per second that Promtail
+                            will push to Loki.
+                          type: integer
+                      type: object
+                    match:
+                      description: Match is a filtering stage that conditionally applies
+                        a set of stages or drop entries when a log entry matches a
+                        configurable LogQL stream selector and filter expressions.
+                      properties:
+                        action:
+                          description: Determines what action is taken when the selector
+                            matches the log line. Can be keep or drop. Defaults to
+                            keep. When set to drop, entries are dropped and no later
+                            metrics are recorded. Stages must be empty when dropping
+                            metrics.
+                          type: string
+                        dropCounterReason:
+                          description: Every time a log line is dropped, the metric
+                            logentry_dropped_lines_total is incremented. A "reason"
+                            label is added, and can be customized by providing a custom
+                            value here. Defaults to "match_stage."
+                          type: string
+                        pipelineName:
+                          description: Names the pipeline. When defined, creates an
+                            additional label in the pipeline_duration_seconds histogram,
+                            where the value is concatenated with job_name using an
+                            underscore.
+                          type: string
+                        selector:
+                          description: LogQL stream selector and filter expressions.
+                            Required.
+                          type: string
+                        stages:
+                          description: "Nested set of pipeline stages to execute when
+                            action is keep and the log line matches selector. \n An
+                            example value for stages may be: \n stages: | - json:
+                            {} - labelAllow: [foo, bar] \n Note that stages is a string
+                            because SIG API Machinery does not support recursive types,
+                            and so it cannot be validated for correctness. Be careful
+                            not to mistype anything."
+                          type: string
+                      required:
+                      - selector
+                      type: object
+                    metrics:
+                      additionalProperties:
+                        description: MetricsStageSpec is an action stage that allows
+                          for defining and updating metrics based on data from the
+                          extracted map. Created metrics are not pushed to Loki or
+                          Prometheus and are instead exposed via the /metrics endpoint
+                          of the Grafana Agent pod. The Grafana Agent Operator should
+                          be configured with a MetricsInstance that discovers the
+                          logging DaemonSet to collect metrics created by this stage.
+                        properties:
+                          action:
+                            description: "The action to take against the metric. Required.
+                              \n Must be either \"inc\" or \"add\" for type: counter
+                              or type: histogram. When type: gauge, must be one of
+                              \"set\", \"inc\", \"dec\", \"add\", or \"sub\". \n \"add\",
+                              \"set\", or \"sub\" requires the extracted value to
+                              be convertible to a positive float."
+                            type: string
+                          buckets:
+                            description: 'Buckets to create. Bucket values must be
+                              convertible to float64s. Extremely large or small numbers
+                              are subject to some loss of precision. Only valid for
+                              type: histogram.'
+                            items:
+                              type: string
+                            type: array
+                          countEntryBytes:
+                            description: "If true all log line bytes are counted.
+                              Can only be set with matchAll: true and action: add.
+                              \n Only valid for type: counter."
+                            type: boolean
+                          description:
+                            description: Sets the description for the created metric.
+                            type: string
+                          matchAll:
+                            description: "If true, all log lines are counted without
+                              attempting to match the source to the extracted map.
+                              Mutually exclusive with value. \n Only valid for type:
+                              counter."
+                            type: boolean
+                          maxIdleDuration:
+                            description: "Label values on metrics are dynamic which
+                              can cause exported metrics to go stale. To prevent unbounded
+                              cardinality, any metrics not updated within MaxIdleDuration
+                              are removed. \n Must be greater or equal to 1s. Defaults
+                              to 5m."
+                            type: string
+                          prefix:
+                            description: Sets the custom prefix name for the metric.
+                              Defaults to "promtail_custom_".
+                            type: string
+                          source:
+                            description: Key from the extracted data map to use for
+                              the metric. Defaults to the metrics name if not present.
+                            type: string
+                          type:
+                            description: The metric type to create. Must be one of
+                              counter, gauge, histogram. Required.
+                            type: string
+                          value:
+                            description: Filters down source data and only changes
+                              the metric if the targeted value matches the provided
+                              string exactly. If not present, all data matches.
+                            type: string
+                        required:
+                        - action
+                        - type
+                        type: object
+                      description: Metrics is an action stage that supports defining
+                        and updating metrics based on data from the extracted map.
+                        Created metrics are not pushed to Loki or Prometheus and are
+                        instead exposed via the /metrics endpoint of the Grafana Agent
+                        pod. The Grafana Agent Operator should be configured with
+                        a MetricsInstance that discovers the logging DaemonSet to
+                        collect metrics created by this stage.
+                      type: object
+                    multiline:
+                      description: Multiline stage merges multiple lines into a multiline
+                        block before passing it on to the next stage in the pipeline.
+                      properties:
+                        firstLine:
+                          description: RE2 regular expression. Creates a new multiline
+                            block when matched. Required.
+                          type: string
+                        maxLines:
+                          description: Maximum number of lines a block can have. A
+                            new block is started if the number of lines surpasses
+                            this value. Defaults to 128.
+                          type: integer
+                        maxWaitTime:
+                          description: Maximum time to wait before passing on the
+                            multiline block to the next stage if no new lines are
+                            received. Defaults to 3s.
+                          type: string
+                      required:
+                      - firstLine
+                      type: object
+                    output:
+                      description: Output stage is an action stage that takes data
+                        from the extracted map and changes the log line that will
+                        be sent to Loki.
+                      properties:
+                        source:
+                          description: Name from extract data to use for the log entry.
+                            Required.
+                          type: string
+                      required:
+                      - source
+                      type: object
+                    pack:
+                      description: Pack is a transform stage that lets you embed extracted
+                        values and labels into the log line by packing the log line
+                        and labels inside of a JSON object.
+                      properties:
+                        ingestTimestamp:
+                          description: If the resulting log line should use any existing
+                            timestamp or use time.Now() when the line was created.
+                            Set to true when combining several log streams from different
+                            containers to avoid out of order errors.
+                          type: boolean
+                        labels:
+                          description: Name from extracted data or line labels. Required.
+                            Labels provided here are automatically removed from output
+                            labels.
+                          items:
+                            type: string
+                          type: array
+                      required:
+                      - labels
+                      type: object
+                    regex:
+                      description: Regex is a parsing stage that parses a log line
+                        using a regular expression.  Named capture groups in the regex
+                        allows for adding data into the extracted map.
+                      properties:
+                        expression:
+                          description: RE2 regular expression. Each capture group
+                            MUST be named. Required.
+                          type: string
+                        source:
+                          description: Name from extracted data to parse. If empty,
+                            defaults to using the log message.
+                          type: string
+                      required:
+                      - expression
+                      type: object
+                    replace:
+                      description: Replace is a parsing stage that parses a log line
+                        using a regular expression and replaces the log line. Named
+                        capture groups in the regex allows for adding data into the
+                        extracted map.
+                      properties:
+                        expression:
+                          description: RE2 regular expression. Each capture group
+                            MUST be named. Required.
+                          type: string
+                        replace:
+                          description: Value to replace the captured group with.
+                          type: string
+                        source:
+                          description: Name from extracted data to parse. If empty,
+                            defaults to using the log message.
+                          type: string
+                      required:
+                      - expression
+                      type: object
+                    template:
+                      description: Template is a transform stage that manipulates
+                        the values in the extracted map using Go's template syntax.
+                      properties:
+                        source:
+                          description: Name from extracted data to parse. Required.
+                            If empty, defaults to using the log message.
+                          type: string
+                        template:
+                          description: Go template string to use. Required. In addition
+                            to normal template functions, ToLower, ToUpper, Replace,
+                            Trim, TrimLeft, TrimRight, TrimPrefix, and TrimSpace are
+                            also available.
+                          type: string
+                      required:
+                      - source
+                      - template
+                      type: object
+                    tenant:
+                      description: Tenant is an action stage that sets the tenant
+                        ID for the log entry picking it from a field in the extracted
+                        data map. If the field is missing, the default LogsClientSpec.tenantId
+                        will be used.
+                      properties:
+                        label:
+                          description: Name from labels whose value should be set
+                            as tenant ID. Mutually exclusive with source and value.
+                          type: string
+                        source:
+                          description: Name from extracted data to use as the tenant
+                            ID. Mutually exclusive with label and value.
+                          type: string
+                        value:
+                          description: Value to use for the template ID. Useful when
+                            this stage is used within a conditional pipeline such
+                            as match. Mutually exclusive with label and source.
+                          type: string
+                      type: object
+                    timestamp:
+                      description: Timestamp is an action stage that can change the
+                        timestamp of a log line before it is sent to Loki. If not
+                        present, the timestamp of a log line defaults to the time
+                        when the log line was read.
+                      properties:
+                        actionOnFailure:
+                          description: Action to take when the timestamp can't be
+                            extracted or parsed. Can be skip or fudge. Defaults to
+                            fudge.
+                          type: string
+                        fallbackFormats:
+                          description: Fallback formats to try if format fails.
+                          items:
+                            type: string
+                          type: array
+                        format:
+                          description: 'Determines format of the time string. Required.
+                            Can be one of: ANSIC, UnixDate, RubyDate, RFC822, RFC822Z,
+                            RFC850, RFC1123, RFC1123Z, RFC3339, RFC3339Nano, Unix,
+                            UnixMs, UnixUs, UnixNs.'
+                          type: string
+                        location:
+                          description: IANA Timezone Database string.
+                          type: string
+                        source:
+                          description: Name from extracted data to use as the timestamp.
+                            Required.
+                          type: string
+                      required:
+                      - format
+                      - source
+                      type: object
+                  type: object
+                type: array
+              podTargetLabels:
+                description: PodTargetLabels transfers labels on the Kubernetes Pod
+                  onto the target.
+                items:
+                  type: string
+                type: array
+              relabelings:
+                description: "RelabelConfigs to apply to logs before delivering. Grafana
+                  Agent Operator automatically adds relabelings for a few standard
+                  Kubernetes fields and replaces original scrape job name with __tmp_logs_job_name.
+                  \n More info: https://grafana.com/docs/loki/latest/clients/promtail/configuration/#relabel_configs"
+                items:
+                  description: 'RelabelConfig allows dynamic rewriting of the label
+                    set, being applied to samples before ingestion. It defines `<metric_relabel_configs>`-section
+                    of Prometheus configuration. More info: https://prometheus.io/docs/prometheus/latest/configuration/configuration/#metric_relabel_configs'
+                  properties:
+                    action:
+                      default: replace
+                      description: Action to perform based on regex matching. Default
+                        is 'replace'. uppercase and lowercase actions require Prometheus
+                        >= 2.36.
+                      enum:
+                      - replace
+                      - Replace
+                      - keep
+                      - Keep
+                      - drop
+                      - Drop
+                      - hashmod
+                      - HashMod
+                      - labelmap
+                      - LabelMap
+                      - labeldrop
+                      - LabelDrop
+                      - labelkeep
+                      - LabelKeep
+                      - lowercase
+                      - Lowercase
+                      - uppercase
+                      - Uppercase
+                      - keepequal
+                      - KeepEqual
+                      - dropequal
+                      - DropEqual
+                      type: string
+                    modulus:
+                      description: Modulus to take of the hash of the source label
+                        values.
+                      format: int64
+                      type: integer
+                    regex:
+                      description: Regular expression against which the extracted
+                        value is matched. Default is '(.*)'
+                      type: string
+                    replacement:
+                      description: Replacement value against which a regex replace
+                        is performed if the regular expression matches. Regex capture
+                        groups are available. Default is '$1'
+                      type: string
+                    separator:
+                      description: Separator placed between concatenated source label
+                        values. default is ';'.
+                      type: string
+                    sourceLabels:
+                      description: The source labels select values from existing labels.
+                        Their content is concatenated using the configured separator
+                        and matched against the configured regular expression for
+                        the replace, keep, and drop actions.
+                      items:
+                        description: LabelName is a valid Prometheus label name which
+                          may only contain ASCII letters, numbers, as well as underscores.
+                        pattern: ^[a-zA-Z_][a-zA-Z0-9_]*$
+                        type: string
+                      type: array
+                    targetLabel:
+                      description: Label to which the resulting value is written in
+                        a replace action. It is mandatory for replace actions. Regex
+                        capture groups are available.
+                      type: string
+                  type: object
+                type: array
+              selector:
+                description: Selector to select Pod objects. Required.
+                properties:
+                  matchExpressions:
+                    description: matchExpressions is a list of label selector requirements.
+                      The requirements are ANDed.
+                    items:
+                      description: A label selector requirement is a selector that
+                        contains values, a key, and an operator that relates the key
+                        and values.
+                      properties:
+                        key:
+                          description: key is the label key that the selector applies
+                            to.
+                          type: string
+                        operator:
+                          description: operator represents a key's relationship to
+                            a set of values. Valid operators are In, NotIn, Exists
+                            and DoesNotExist.
+                          type: string
+                        values:
+                          description: values is an array of string values. If the
+                            operator is In or NotIn, the values array must be non-empty.
+                            If the operator is Exists or DoesNotExist, the values
+                            array must be empty. This array is replaced during a strategic
+                            merge patch.
+                          items:
+                            type: string
+                          type: array
+                      required:
+                      - key
+                      - operator
+                      type: object
+                    type: array
+                  matchLabels:
+                    additionalProperties:
+                      type: string
+                    description: matchLabels is a map of {key,value} pairs. A single
+                      {key,value} in the matchLabels map is equivalent to an element
+                      of matchExpressions, whose key field is "key", the operator
+                      is "In", and the values array contains only "value". The requirements
+                      are ANDed.
+                    type: object
+                type: object
+                x-kubernetes-map-type: atomic
+            required:
+            - selector
+            type: object
+        type: object
+    served: true
+    storage: true
diff --git a/operations/agent-static-operator/templates/agent-operator.yaml b/operations/agent-static-operator/templates/agent-operator.yaml
new file mode 100644
index 000000000000..ba8c08e75e6f
--- /dev/null
+++ b/operations/agent-static-operator/templates/agent-operator.yaml
@@ -0,0 +1,645 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: grafana-agent
+  namespace: ${NAMESPACE}
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: grafana-agent-operator
+  namespace: ${NAMESPACE}
+---
+apiVersion: v1
+automountServiceAccountToken: false
+kind: ServiceAccount
+metadata:
+  labels:
+    app.kubernetes.io/component: exporter
+    app.kubernetes.io/name: kube-state-metrics
+    app.kubernetes.io/version: 2.5.0
+  name: kube-state-metrics
+  namespace: ${NAMESPACE}
+---
+apiVersion: v1
+data: {}
+kind: Secret
+metadata:
+  name: logs-secret
+  namespace: ${NAMESPACE}
+stringData:
+  password: ${LOGS_KEY}
+  username: ${LOGS_USER}
+type: Opaque
+---
+apiVersion: v1
+data: {}
+kind: Secret
+metadata:
+  name: metrics-secret
+  namespace: ${NAMESPACE}
+stringData:
+  password: ${METRICS_KEY}
+  username: ${METRICS_USER}
+type: Opaque
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: agent-eventhandler
+  namespace: ${NAMESPACE}
+spec:
+  accessModes:
+  - ReadWriteOnce
+  resources:
+    requests:
+      storage: 1Gi
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: grafana-agent
+rules:
+- apiGroups:
+  - ""
+  resources:
+  - nodes
+  - nodes/proxy
+  - nodes/metrics
+  - services
+  - endpoints
+  - pods
+  - events
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - networking.k8s.io
+  resources:
+  - ingresses
+  verbs:
+  - get
+  - list
+  - watch
+- nonResourceURLs:
+  - /metrics
+  - /metrics/cadvisor
+  verbs:
+  - get
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: grafana-agent-operator
+rules:
+- apiGroups:
+  - monitoring.grafana.com
+  resources:
+  - grafanaagents
+  - metricsinstances
+  - logsinstances
+  - podlogs
+  - integrations
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - monitoring.grafana.com
+  resources:
+  - grafanaagents/finalizers
+  - metricsinstances/finalizers
+  - logsinstances/finalizers
+  - podlogs/finalizers
+  - integrations/finalizers
+  verbs:
+  - get
+  - list
+  - watch
+  - update
+- apiGroups:
+  - monitoring.coreos.com
+  resources:
+  - podmonitors
+  - probes
+  - servicemonitors
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - monitoring.coreos.com
+  resources:
+  - podmonitors/finalizers
+  - probes/finalizers
+  - servicemonitors/finalizers
+  verbs:
+  - get
+  - list
+  - watch
+  - update
+- apiGroups:
+  - ""
+  resources:
+  - namespaces
+  - nodes
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - ""
+  resources:
+  - secrets
+  - services
+  - configmaps
+  - endpoints
+  verbs:
+  - get
+  - list
+  - watch
+  - create
+  - update
+  - patch
+  - delete
+- apiGroups:
+  - apps
+  resources:
+  - statefulsets
+  - daemonsets
+  - deployments
+  verbs:
+  - get
+  - list
+  - watch
+  - create
+  - update
+  - patch
+  - delete
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  labels:
+    app.kubernetes.io/component: exporter
+    app.kubernetes.io/name: kube-state-metrics
+    app.kubernetes.io/version: 2.5.0
+  name: kube-state-metrics
+rules:
+- apiGroups:
+  - ""
+  resources:
+  - configmaps
+  - secrets
+  - nodes
+  - pods
+  - services
+  - resourcequotas
+  - replicationcontrollers
+  - limitranges
+  - persistentvolumeclaims
+  - persistentvolumes
+  - namespaces
+  - endpoints
+  verbs:
+  - list
+  - watch
+- apiGroups:
+  - apps
+  resources:
+  - statefulsets
+  - daemonsets
+  - deployments
+  - replicasets
+  verbs:
+  - list
+  - watch
+- apiGroups:
+  - batch
+  resources:
+  - cronjobs
+  - jobs
+  verbs:
+  - list
+  - watch
+- apiGroups:
+  - autoscaling
+  resources:
+  - horizontalpodautoscalers
+  verbs:
+  - list
+  - watch
+- apiGroups:
+  - authentication.k8s.io
+  resources:
+  - tokenreviews
+  verbs:
+  - create
+- apiGroups:
+  - authorization.k8s.io
+  resources:
+  - subjectaccessreviews
+  verbs:
+  - create
+- apiGroups:
+  - policy
+  resources:
+  - poddisruptionbudgets
+  verbs:
+  - list
+  - watch
+- apiGroups:
+  - certificates.k8s.io
+  resources:
+  - certificatesigningrequests
+  verbs:
+  - list
+  - watch
+- apiGroups:
+  - storage.k8s.io
+  resources:
+  - storageclasses
+  - volumeattachments
+  verbs:
+  - list
+  - watch
+- apiGroups:
+  - admissionregistration.k8s.io
+  resources:
+  - mutatingwebhookconfigurations
+  - validatingwebhookconfigurations
+  verbs:
+  - list
+  - watch
+- apiGroups:
+  - networking.k8s.io
+  resources:
+  - networkpolicies
+  - ingresses
+  verbs:
+  - list
+  - watch
+- apiGroups:
+  - coordination.k8s.io
+  resources:
+  - leases
+  verbs:
+  - list
+  - watch
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: grafana-agent
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: grafana-agent
+subjects:
+- kind: ServiceAccount
+  name: grafana-agent
+  namespace: ${NAMESPACE}
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: grafana-agent-operator
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: grafana-agent-operator
+subjects:
+- kind: ServiceAccount
+  name: grafana-agent-operator
+  namespace: ${NAMESPACE}
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  labels:
+    app.kubernetes.io/component: exporter
+    app.kubernetes.io/name: kube-state-metrics
+    app.kubernetes.io/version: 2.5.0
+  name: kube-state-metrics
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: kube-state-metrics
+subjects:
+- kind: ServiceAccount
+  name: kube-state-metrics
+  namespace: ${NAMESPACE}
+---
+apiVersion: v1
+kind: Service
+metadata:
+  labels:
+    app.kubernetes.io/component: exporter
+    app.kubernetes.io/name: kube-state-metrics
+    app.kubernetes.io/version: 2.5.0
+  name: kube-state-metrics
+  namespace: ${NAMESPACE}
+spec:
+  clusterIP: None
+  ports:
+  - name: http-metrics
+    port: 8080
+    targetPort: http-metrics
+  - name: telemetry
+    port: 8081
+    targetPort: telemetry
+  selector:
+    app.kubernetes.io/name: kube-state-metrics
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: grafana-agent-operator
+  namespace: ${NAMESPACE}
+spec:
+  minReadySeconds: 10
+  replicas: 1
+  revisionHistoryLimit: 10
+  selector:
+    matchLabels:
+      name: grafana-agent-operator
+  template:
+    metadata:
+      labels:
+        name: grafana-agent-operator
+    spec:
+      containers:
+      - args:
+        - --kubelet-service=default/kubelet
+        image: grafana/agent-operator:v0.37.4
+        imagePullPolicy: IfNotPresent
+        name: grafana-agent-operator
+      serviceAccount: grafana-agent-operator
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  labels:
+    app.kubernetes.io/component: exporter
+    app.kubernetes.io/name: kube-state-metrics
+    app.kubernetes.io/version: 2.5.0
+  name: kube-state-metrics
+  namespace: ${NAMESPACE}
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app.kubernetes.io/name: kube-state-metrics
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/component: exporter
+        app.kubernetes.io/name: kube-state-metrics
+        app.kubernetes.io/version: 2.5.0
+    spec:
+      automountServiceAccountToken: true
+      containers:
+      - image: registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.5.0
+        livenessProbe:
+          httpGet:
+            path: /healthz
+            port: 8080
+          initialDelaySeconds: 5
+          timeoutSeconds: 5
+        name: kube-state-metrics
+        ports:
+        - containerPort: 8080
+          name: http-metrics
+        - containerPort: 8081
+          name: telemetry
+        readinessProbe:
+          httpGet:
+            path: /
+            port: 8081
+          initialDelaySeconds: 5
+          timeoutSeconds: 5
+        securityContext:
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+            - ALL
+          readOnlyRootFilesystem: true
+          runAsUser: 65534
+      nodeSelector:
+        kubernetes.io/os: linux
+      serviceAccountName: kube-state-metrics
+---
+apiVersion: monitoring.grafana.com/v1alpha1
+kind: GrafanaAgent
+metadata:
+  name: grafana-agent
+  namespace: ${NAMESPACE}
+spec:
+  image: grafana/agent:v0.37.4
+  integrations:
+    selector:
+      matchLabels:
+        agent: grafana-agent
+  logs:
+    instanceSelector:
+      matchLabels:
+        agent: grafana-agent
+  metrics:
+    externalLabels:
+      cluster: ${CLUSTER}
+    instanceSelector:
+      matchLabels:
+        agent: grafana-agent
+  serviceAccountName: grafana-agent
+---
+apiVersion: monitoring.grafana.com/v1alpha1
+kind: Integration
+metadata:
+  labels:
+    agent: grafana-agent
+  name: agent-eventhandler
+  namespace: ${NAMESPACE}
+spec:
+  config:
+    cache_path: /etc/eventhandler/eventhandler.cache
+    logs_instance: ${NAMESPACE}/grafana-agent-logs
+  name: eventhandler
+  type:
+    unique: true
+  volumeMounts:
+  - mountPath: /etc/eventhandler
+    name: agent-eventhandler
+  volumes:
+  - name: agent-eventhandler
+    persistentVolumeClaim:
+      claimName: agent-eventhandler
+---
+apiVersion: monitoring.grafana.com/v1alpha1
+kind: LogsInstance
+metadata:
+  labels:
+    agent: grafana-agent
+  name: grafana-agent-logs
+  namespace: ${NAMESPACE}
+spec:
+  clients:
+  - basicAuth:
+      password:
+        key: password
+        name: logs-secret
+      username:
+        key: username
+        name: logs-secret
+    externalLabels:
+      cluster: ${CLUSTER}
+    url: ${LOGS_URL}
+  podLogsNamespaceSelector: {}
+  podLogsSelector:
+    matchLabels:
+      instance: primary
+---
+apiVersion: monitoring.grafana.com/v1alpha1
+kind: MetricsInstance
+metadata:
+  labels:
+    agent: grafana-agent
+  name: grafana-agent-metrics
+  namespace: ${NAMESPACE}
+spec:
+  remoteWrite:
+  - basicAuth:
+      password:
+        key: password
+        name: metrics-secret
+      username:
+        key: username
+        name: metrics-secret
+    url: ${METRICS_URL}
+  serviceMonitorNamespaceSelector: {}
+  serviceMonitorSelector:
+    matchLabels:
+      instance: primary
+---
+apiVersion: monitoring.grafana.com/v1alpha1
+kind: PodLogs
+metadata:
+  labels:
+    instance: primary
+  name: kubernetes-logs
+  namespace: ${NAMESPACE}
+spec:
+  namespaceSelector:
+    any: true
+  pipelineStages:
+  - cri: {}
+  relabelings:
+  - sourceLabels:
+    - __meta_kubernetes_pod_node_name
+    targetLabel: __host__
+  - action: replace
+    sourceLabels:
+    - __meta_kubernetes_namespace
+    targetLabel: namespace
+  - action: replace
+    sourceLabels:
+    - __meta_kubernetes_pod_name
+    targetLabel: pod
+  - action: replace
+    sourceLabels:
+    - __meta_kubernetes_pod_container_name
+    targetLabel: container
+  - replacement: /var/log/pods/*$1/*.log
+    separator: /
+    sourceLabels:
+    - __meta_kubernetes_pod_uid
+    - __meta_kubernetes_pod_container_name
+    targetLabel: __path__
+  selector:
+    matchLabels: {}
+---
+apiVersion: monitoring.coreos.com/v1
+kind: ServiceMonitor
+metadata:
+  labels:
+    instance: primary
+  name: cadvisor-monitor
+  namespace: ${NAMESPACE}
+spec:
+  endpoints:
+  - bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token
+    honorLabels: true
+    interval: 60s
+    path: /metrics/cadvisor
+    port: https-metrics
+    relabelings:
+    - sourceLabels:
+      - __metrics_path__
+      targetLabel: metrics_path
+    - action: replace
+      replacement: cadvisor
+      targetLabel: job
+    scheme: https
+    tlsConfig:
+      insecureSkipVerify: true
+  namespaceSelector:
+    matchNames:
+    - default
+  selector:
+    matchLabels:
+      app.kubernetes.io/name: kubelet
+---
+apiVersion: monitoring.coreos.com/v1
+kind: ServiceMonitor
+metadata:
+  labels:
+    instance: primary
+  name: ksm-monitor
+  namespace: ${NAMESPACE}
+spec:
+  endpoints:
+  - honorLabels: true
+    interval: 60s
+    path: /metrics
+    port: http-metrics
+    relabelings:
+    - action: replace
+      replacement: kube-state-metrics
+      targetLabel: job
+  namespaceSelector:
+    matchNames:
+    - ${NAMESPACE}
+  selector:
+    matchLabels:
+      app.kubernetes.io/name: kube-state-metrics
+---
+apiVersion: monitoring.coreos.com/v1
+kind: ServiceMonitor
+metadata:
+  labels:
+    instance: primary
+  name: kubelet-monitor
+  namespace: ${NAMESPACE}
+spec:
+  endpoints:
+  - bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token
+    honorLabels: true
+    interval: 60s
+    path: /metrics
+    port: https-metrics
+    relabelings:
+    - sourceLabels:
+      - __metrics_path__
+      targetLabel: metrics_path
+    - action: replace
+      replacement: kubelet
+      targetLabel: job
+    scheme: https
+    tlsConfig:
+      insecureSkipVerify: true
+  namespaceSelector:
+    matchNames:
+    - default
+  selector:
+    matchLabels:
+      app.kubernetes.io/name: kubelet
diff --git a/production/README.md b/production/README.md
new file mode 100644
index 000000000000..93a7f2594349
--- /dev/null
+++ b/production/README.md
@@ -0,0 +1 @@
+**NOTE**: This folder has been deprecated in favor of [operations/](../operations/) and will be removed.

From 858c71a85c2a9e5f6f355f2995fbe8375eb8d9f5 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 9 Jan 2024 10:45:29 -0500
Subject: [PATCH 33/68] build(deps): bump follow-redirects from 1.15.2 to
 1.15.4 in /web/ui (#6072)

Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects) from 1.15.2 to 1.15.4.
- [Release notes](https://github.com/follow-redirects/follow-redirects/releases)
- [Commits](https://github.com/follow-redirects/follow-redirects/compare/v1.15.2...v1.15.4)

---
updated-dependencies:
- dependency-name: follow-redirects
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 web/ui/yarn.lock | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/web/ui/yarn.lock b/web/ui/yarn.lock
index 85e807484347..e490feb4ec05 100644
--- a/web/ui/yarn.lock
+++ b/web/ui/yarn.lock
@@ -5011,9 +5011,9 @@ flatted@^3.1.0:
   integrity sha512-5nqDSxl8nn5BSNxyR3n4I6eDmbolI6WT+QqR547RwxQapgjQBmtktdP+HTBb/a/zLsbzERTONyUB5pefh5TtjQ==
 
 follow-redirects@^1.0.0:
-  version "1.15.2"
-  resolved "https://registry.yarnpkg.com/follow-redirects/-/follow-redirects-1.15.2.tgz#b460864144ba63f2681096f274c4e57026da2c13"
-  integrity sha512-VQLG33o04KaQ8uYi2tVNbdrWp1QWxNNea+nmIB4EVM28v0hmP17z7aG1+wAkNzVq4KeXTq3221ye5qTJP91JwA==
+  version "1.15.4"
+  resolved "https://registry.yarnpkg.com/follow-redirects/-/follow-redirects-1.15.4.tgz#cdc7d308bf6493126b17ea2191ea0ccf3e535adf"
+  integrity sha512-Cr4D/5wlrb0z9dgERpUL3LrmPKVDsETIJhaCMeDfuFYcqa5bldGV6wBsAN6X/vxlXQtFBMrXdXxdL8CbDTGniw==
 
 for-each@^0.3.3:
   version "0.3.3"

From f93e31f4db661ac0716d5cf33537bfd263eeb361 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Marc=20Tudur=C3=AD?= <marctc@protonmail.com>
Date: Tue, 9 Jan 2024 16:51:11 +0100
Subject: [PATCH 34/68] Change refs v0.39 (#6081)

* V0.39 update refs (#6054)

* Update version to v0.39.0-rc.0 (#6053)

(cherry picked from commit c246cf896ce497d2821b4e18116e5b1493d3b199)

* Remove main from changelog

* Cherry picks release v0.39 (#6078)

* add call to set perf query (#6065)

* add changelog (#6058)

* Fix changelog

---------

Co-authored-by: mattdurham <mattdurham@ppog.org>

* Update refs to v0.39

---------

Co-authored-by: mattdurham <mattdurham@ppog.org>
---
 CHANGELOG.md                                         | 12 ++++--------
 docs/sources/_index.md                               |  2 +-
 pkg/operator/defaults.go                             |  2 +-
 production/kubernetes/agent-bare.yaml                |  2 +-
 production/kubernetes/agent-loki.yaml                |  2 +-
 production/kubernetes/agent-traces.yaml              |  2 +-
 production/kubernetes/build/lib/version.libsonnet    |  2 +-
 .../kubernetes/build/templates/operator/main.jsonnet |  4 ++--
 production/kubernetes/install-bare.sh                |  2 +-
 production/operator/templates/agent-operator.yaml    |  4 ++--
 production/tanka/grafana-agent/v1/main.libsonnet     |  4 ++--
 .../tanka/grafana-agent/v2/internal/base.libsonnet   |  4 ++--
 .../tanka/grafana-agent/v2/internal/syncer.libsonnet |  2 +-
 tools/gen-versioned-files/agent-version.txt          |  2 +-
 14 files changed, 21 insertions(+), 25 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index b9d7e66231e1..05a4fd7e6862 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -16,12 +16,9 @@ Main (unreleased)
   - [GO-2023-2412](https://github.com/advisories/GHSA-7ww5-4wqc-m92c)
   - [CVE-2023-49568](https://github.com/advisories/GHSA-mw99-9chc-xw7r)
 
-### Bugfixes
-
-- Fix performance issue where perf lib where clause was not being set, leading to timeouts in collecting metrics for windows_exporter. (@mattdurham)
 
-v0.39.0-rc.0 (2024-01-05)
--------------------------
+v0.39.0 (2024-01-09)
+--------------------
 
 ### Breaking changes
 
@@ -42,9 +39,6 @@ v0.39.0-rc.0 (2024-01-05)
 ### Features
 
 - A new `discovery.ovhcloud` component for discovering scrape targets on OVHcloud. (@ptodev)
-
-### Features
-
 - Allow specifying additional containers to run. (@juangom)
 
 ### Enhancements
@@ -121,6 +115,8 @@ v0.39.0-rc.0 (2024-01-05)
 
 - Fix issue where `prometheus.exporter.kafka` would crash when configuring `sasl_password`. (@rfratto)
 
+- Fix performance issue where perf lib where clause was not being set, leading to timeouts in collecting metrics for windows_exporter. (@mattdurham)
+
 - Fix nil panic when using the process collector with the windows exporter. (@mattdurham)
 
 ### Other changes
diff --git a/docs/sources/_index.md b/docs/sources/_index.md
index 4b19726241b6..890ac82d71a7 100644
--- a/docs/sources/_index.md
+++ b/docs/sources/_index.md
@@ -9,7 +9,7 @@ title: Grafana Agent
 description: Grafana Agent is a flexible, performant, vendor-neutral, telemetry collector
 weight: 350
 cascade:
-  AGENT_RELEASE: v0.39.0-rc.0
+  AGENT_RELEASE: v0.39.0
   OTEL_VERSION: v0.87.0
 ---
 
diff --git a/pkg/operator/defaults.go b/pkg/operator/defaults.go
index a518d884b0b1..bc9cff6ab04e 100644
--- a/pkg/operator/defaults.go
+++ b/pkg/operator/defaults.go
@@ -2,7 +2,7 @@ package operator
 
 // Supported versions of the Grafana Agent.
 var (
-	DefaultAgentVersion   = "v0.39.0-rc.0"
+	DefaultAgentVersion   = "v0.39.0"
 	DefaultAgentBaseImage = "grafana/agent"
 	DefaultAgentImage     = DefaultAgentBaseImage + ":" + DefaultAgentVersion
 )
diff --git a/production/kubernetes/agent-bare.yaml b/production/kubernetes/agent-bare.yaml
index 0ca2da3bc58f..ccf5d13439ce 100644
--- a/production/kubernetes/agent-bare.yaml
+++ b/production/kubernetes/agent-bare.yaml
@@ -83,7 +83,7 @@ spec:
           valueFrom:
             fieldRef:
               fieldPath: spec.nodeName
-        image: grafana/agent:v0.37.4
+        image: grafana/agent:v0.39.0
         imagePullPolicy: IfNotPresent
         name: grafana-agent
         ports:
diff --git a/production/kubernetes/agent-loki.yaml b/production/kubernetes/agent-loki.yaml
index 4eeb798a00d8..497462d3efcb 100644
--- a/production/kubernetes/agent-loki.yaml
+++ b/production/kubernetes/agent-loki.yaml
@@ -65,7 +65,7 @@ spec:
           valueFrom:
             fieldRef:
               fieldPath: spec.nodeName
-        image: grafana/agent:v0.37.4
+        image: grafana/agent:v0.39.0
         imagePullPolicy: IfNotPresent
         name: grafana-agent-logs
         ports:
diff --git a/production/kubernetes/agent-traces.yaml b/production/kubernetes/agent-traces.yaml
index 7c2835846b0a..c42cec6125e3 100644
--- a/production/kubernetes/agent-traces.yaml
+++ b/production/kubernetes/agent-traces.yaml
@@ -114,7 +114,7 @@ spec:
           valueFrom:
             fieldRef:
               fieldPath: spec.nodeName
-        image: grafana/agent:v0.37.4
+        image: grafana/agent:v0.39.0
         imagePullPolicy: IfNotPresent
         name: grafana-agent-traces
         ports:
diff --git a/production/kubernetes/build/lib/version.libsonnet b/production/kubernetes/build/lib/version.libsonnet
index be3865408074..70fb0ff0cffe 100644
--- a/production/kubernetes/build/lib/version.libsonnet
+++ b/production/kubernetes/build/lib/version.libsonnet
@@ -1 +1 @@
-'grafana/agent:v0.37.4'
+'grafana/agent:v0.39.0'
diff --git a/production/kubernetes/build/templates/operator/main.jsonnet b/production/kubernetes/build/templates/operator/main.jsonnet
index fe49426c4fa4..efc5b6e9df9f 100644
--- a/production/kubernetes/build/templates/operator/main.jsonnet
+++ b/production/kubernetes/build/templates/operator/main.jsonnet
@@ -23,8 +23,8 @@ local ksm = import 'kube-state-metrics/kube-state-metrics.libsonnet';
   local this = self,
 
   _images:: {
-    agent: 'grafana/agent:v0.37.4',
-    agent_operator: 'grafana/agent-operator:v0.37.4',
+    agent: 'grafana/agent:v0.39.0',
+    agent_operator: 'grafana/agent-operator:v0.39.0',
     ksm: 'registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.5.0',
   },
 
diff --git a/production/kubernetes/install-bare.sh b/production/kubernetes/install-bare.sh
index 93cc7120af23..32127903a224 100644
--- a/production/kubernetes/install-bare.sh
+++ b/production/kubernetes/install-bare.sh
@@ -25,7 +25,7 @@ check_installed() {
 check_installed curl
 check_installed envsubst
 
-MANIFEST_BRANCH=v0.37.4
+MANIFEST_BRANCH=v0.39.0
 MANIFEST_URL=${MANIFEST_URL:-https://raw.githubusercontent.com/grafana/agent/${MANIFEST_BRANCH}/production/kubernetes/agent-bare.yaml}
 NAMESPACE=${NAMESPACE:-default}
 
diff --git a/production/operator/templates/agent-operator.yaml b/production/operator/templates/agent-operator.yaml
index ba8c08e75e6f..442bab4fa353 100644
--- a/production/operator/templates/agent-operator.yaml
+++ b/production/operator/templates/agent-operator.yaml
@@ -372,7 +372,7 @@ spec:
       containers:
       - args:
         - --kubelet-service=default/kubelet
-        image: grafana/agent-operator:v0.37.4
+        image: grafana/agent-operator:v0.39.0
         imagePullPolicy: IfNotPresent
         name: grafana-agent-operator
       serviceAccount: grafana-agent-operator
@@ -436,7 +436,7 @@ metadata:
   name: grafana-agent
   namespace: ${NAMESPACE}
 spec:
-  image: grafana/agent:v0.37.4
+  image: grafana/agent:v0.39.0
   integrations:
     selector:
       matchLabels:
diff --git a/production/tanka/grafana-agent/v1/main.libsonnet b/production/tanka/grafana-agent/v1/main.libsonnet
index 8ff06ab1bf5b..d4096bc015e9 100644
--- a/production/tanka/grafana-agent/v1/main.libsonnet
+++ b/production/tanka/grafana-agent/v1/main.libsonnet
@@ -15,8 +15,8 @@ local service = k.core.v1.service;
 (import './lib/traces.libsonnet') +
 {
   _images:: {
-    agent: 'grafana/agent:v0.37.4',
-    agentctl: 'grafana/agentctl:v0.37.4',
+    agent: 'grafana/agent:v0.39.0',
+    agentctl: 'grafana/agentctl:v0.39.0',
   },
 
   // new creates a new DaemonSet deployment of the grafana-agent. By default,
diff --git a/production/tanka/grafana-agent/v2/internal/base.libsonnet b/production/tanka/grafana-agent/v2/internal/base.libsonnet
index 53921bf64aaf..6d697c93a3aa 100644
--- a/production/tanka/grafana-agent/v2/internal/base.libsonnet
+++ b/production/tanka/grafana-agent/v2/internal/base.libsonnet
@@ -11,8 +11,8 @@ function(name='grafana-agent', namespace='') {
   local this = self,
 
   _images:: {
-    agent: 'grafana/agent:v0.37.4',
-    agentctl: 'grafana/agentctl:v0.37.4',
+    agent: 'grafana/agent:v0.39.0',
+    agentctl: 'grafana/agentctl:v0.39.0',
   },
   _config:: {
     name: name,
diff --git a/production/tanka/grafana-agent/v2/internal/syncer.libsonnet b/production/tanka/grafana-agent/v2/internal/syncer.libsonnet
index 689b14fd87b3..79409f65f310 100644
--- a/production/tanka/grafana-agent/v2/internal/syncer.libsonnet
+++ b/production/tanka/grafana-agent/v2/internal/syncer.libsonnet
@@ -14,7 +14,7 @@ function(
 ) {
   local _config = {
     api: error 'api must be set',
-    image: 'grafana/agentctl:v0.37.4',
+    image: 'grafana/agentctl:v0.39.0',
     schedule: '*/5 * * * *',
     configs: [],
   } + config,
diff --git a/tools/gen-versioned-files/agent-version.txt b/tools/gen-versioned-files/agent-version.txt
index f02ec0731bfa..999889149ec2 100644
--- a/tools/gen-versioned-files/agent-version.txt
+++ b/tools/gen-versioned-files/agent-version.txt
@@ -1 +1 @@
-v0.39.0-rc.0
+v0.39.0
\ No newline at end of file

From e54d60a9081b600775644aec0236aea82faeac1c Mon Sep 17 00:00:00 2001
From: Piotr <17101802+thampiotr@users.noreply.github.com>
Date: Tue, 9 Jan 2024 15:56:16 +0000
Subject: [PATCH 35/68] Move 'Set up / Configure' to 'Tasks / Configure'
 (#6083)

---
 docs/sources/flow/setup/configure/_index.md   | 24 -------------
 docs/sources/flow/setup/install/binary.md     |  4 +--
 docs/sources/flow/setup/install/kubernetes.md |  4 +--
 docs/sources/flow/setup/install/linux.md      |  4 +--
 docs/sources/flow/setup/install/macos.md      |  4 +--
 docs/sources/flow/setup/install/windows.md    |  4 +--
 docs/sources/flow/setup/start-agent.md        |  4 +--
 docs/sources/flow/tasks/configure/_index.md   | 36 +++++++++++++++++++
 .../configure/configure-kubernetes.md         |  8 ++++-
 .../configure/configure-linux.md              |  8 ++++-
 .../configure/configure-macos.md              |  8 ++++-
 .../configure/configure-windows.md            |  8 ++++-
 .../distribute-prometheus-scrape-load.md      |  4 +--
 13 files changed, 78 insertions(+), 42 deletions(-)
 delete mode 100644 docs/sources/flow/setup/configure/_index.md
 create mode 100644 docs/sources/flow/tasks/configure/_index.md
 rename docs/sources/flow/{setup => tasks}/configure/configure-kubernetes.md (80%)
 rename docs/sources/flow/{setup => tasks}/configure/configure-linux.md (86%)
 rename docs/sources/flow/{setup => tasks}/configure/configure-macos.md (85%)
 rename docs/sources/flow/{setup => tasks}/configure/configure-windows.md (85%)

diff --git a/docs/sources/flow/setup/configure/_index.md b/docs/sources/flow/setup/configure/_index.md
deleted file mode 100644
index b185bdac69a0..000000000000
--- a/docs/sources/flow/setup/configure/_index.md
+++ /dev/null
@@ -1,24 +0,0 @@
----
-aliases:
-- /docs/grafana-cloud/agent/flow/setup/configure/
-- /docs/grafana-cloud/monitor-infrastructure/agent/flow/setup/configure/
-- /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/setup/configure/
-- /docs/grafana-cloud/send-data/agent/flow/setup/configure/
-canonical: https://grafana.com/docs/agent/latest/flow/setup/configure/
-description: Configure Grafana Agent Flow after it is installed
-menuTitle: Configure Grafana Agent Flow
-title: Configure Grafana Agent Flow
-weight: 150
----
-
-# Configure {{% param "PRODUCT_NAME" %}}
-
-You can configure {{< param "PRODUCT_NAME" >}} after it is installed. The default River configuration file for {{< param "PRODUCT_NAME" >}} is located at:
-
-* Linux: `/etc/grafana-agent-flow.river`
-* macOS: `$(brew --prefix)/etc/grafana-agent-flow/config.river`
-* Windows: `C:\Program Files\Grafana Agent Flow\config.river`
-
-This section includes information that helps you configure {{< param "PRODUCT_NAME" >}}.
-
-{{< section >}}
diff --git a/docs/sources/flow/setup/install/binary.md b/docs/sources/flow/setup/install/binary.md
index d491ad86cfe5..88560dbf63e0 100644
--- a/docs/sources/flow/setup/install/binary.md
+++ b/docs/sources/flow/setup/install/binary.md
@@ -51,6 +51,6 @@ To download {{< param "PRODUCT_NAME" >}} as a standalone binary, perform the fol
 {{% docs/reference %}}
 [Start]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/setup/start-agent.md#standalone-binary"
 [Start]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/setup/start-agent.md#standalone-binary"
-[Configure]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/setup/configure"
-[Configure]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/setup/configure/"
+[Configure]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/tasks/configure"
+[Configure]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/tasks/configure/"
 {{% /docs/reference %}}
diff --git a/docs/sources/flow/setup/install/kubernetes.md b/docs/sources/flow/setup/install/kubernetes.md
index 51ab96260ca3..3bd0a3240fbc 100644
--- a/docs/sources/flow/setup/install/kubernetes.md
+++ b/docs/sources/flow/setup/install/kubernetes.md
@@ -64,6 +64,6 @@ For more information on the {{< param "PRODUCT_ROOT_NAME" >}} Helm chart, refer
 [Helm]: https://helm.sh
 
 {{% docs/reference %}}
-[Configure]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/setup/configure/configure-kubernetes.md"
-[Configure]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/setup/configure/configure-kubernetes.md"
+[Configure]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/tasks/configure/configure-kubernetes.md"
+[Configure]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/tasks/configure/configure-kubernetes.md"
 {{% /docs/reference %}}
diff --git a/docs/sources/flow/setup/install/linux.md b/docs/sources/flow/setup/install/linux.md
index 56aae580299a..12e4f3323e7e 100644
--- a/docs/sources/flow/setup/install/linux.md
+++ b/docs/sources/flow/setup/install/linux.md
@@ -125,6 +125,6 @@ To uninstall {{< param "PRODUCT_NAME" >}} on Linux, run the following commands i
 {{% docs/reference %}}
 [Start]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/setup/start-agent.md#linux"
 [Start]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/setup/start-agent.md#linux"
-[Configure]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/setup/configure/configure-linux.md"
-[Configure]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/setup/configure/configure-linux.md"
+[Configure]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/tasks/configure/configure-linux.md"
+[Configure]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/tasks/configure/configure-linux.md"
 {{% /docs/reference %}}
diff --git a/docs/sources/flow/setup/install/macos.md b/docs/sources/flow/setup/install/macos.md
index ad5174577aa3..9aa7e86ee265 100644
--- a/docs/sources/flow/setup/install/macos.md
+++ b/docs/sources/flow/setup/install/macos.md
@@ -74,6 +74,6 @@ brew uninstall grafana-agent-flow
 {{% docs/reference %}}
 [Start]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/setup/start-agent.md#macos"
 [Start]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/setup/start-agent.md#macos"
-[Configure]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/setup/configure/configure-macos.md"
-[Configure]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/setup/configure/configure-macos.md"
+[Configure]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/tasks/configure/configure-macos.md"
+[Configure]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/tasks/configure/configure-macos.md"
 {{% /docs/reference %}}
diff --git a/docs/sources/flow/setup/install/windows.md b/docs/sources/flow/setup/install/windows.md
index 765e9fdd3ac4..031b0caeab06 100644
--- a/docs/sources/flow/setup/install/windows.md
+++ b/docs/sources/flow/setup/install/windows.md
@@ -86,8 +86,8 @@ This includes any configuration files in the installation directory.
 {{% docs/reference %}}
 [Start]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/setup/start-agent.md#windows"
 [Start]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/setup/start-agent.md#windows"
-[Configure]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/setup/configure/configure-windows.md"
-[Configure]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/setup/configure/configure-windows.md"
+[Configure]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/tasks/configure/configure-windows.md"
+[Configure]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/tasks/configure/configure-windows.md"
 [data collection]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/data-collection.md"
 [data collection]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/data-collection.md"
 {{% /docs/reference %}}
diff --git a/docs/sources/flow/setup/start-agent.md b/docs/sources/flow/setup/start-agent.md
index b63386cf1436..b8bd97a75e05 100644
--- a/docs/sources/flow/setup/start-agent.md
+++ b/docs/sources/flow/setup/start-agent.md
@@ -252,6 +252,6 @@ These steps assume you have a default systemd and {{< param "PRODUCT_NAME" >}} c
 [release]: https://github.com/grafana/agent/releases/latest
 
 {{% docs/reference %}}
-[Configure]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/setup/configure/configure-macos.md#configure-the-grafana-agent-service"
-[Configure]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/setup/configure/configure-macos.md#configure-the-grafana-agent-service"
+[Configure]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/tasks/configure/configure-macos.md#configure-the-grafana-agent-service"
+[Configure]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/tasks/configure/configure-macos.md#configure-the-grafana-agent-service"
 {{% /docs/reference %}}
diff --git a/docs/sources/flow/tasks/configure/_index.md b/docs/sources/flow/tasks/configure/_index.md
new file mode 100644
index 000000000000..fc576f8f51a3
--- /dev/null
+++ b/docs/sources/flow/tasks/configure/_index.md
@@ -0,0 +1,36 @@
+---
+aliases:
+- /docs/grafana-cloud/agent/flow/tasks/configure/
+- /docs/grafana-cloud/monitor-infrastructure/agent/flow/tasks/configure/
+- /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/tasks/configure/
+- /docs/grafana-cloud/send-data/agent/flow/tasks/configure/
+# Previous page aliases for backwards compatibility:  
+- /docs/grafana-cloud/agent/flow/setup/configure/
+- /docs/grafana-cloud/monitor-infrastructure/agent/flow/setup/configure/
+- /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/setup/configure/
+- /docs/grafana-cloud/send-data/agent/flow/setup/configure/
+- ../setup/configure/ # /docs/agent/latest/flow/setup/configure/
+canonical: https://grafana.com/docs/agent/latest/flow/tasks/configure/
+description: Configure Grafana Agent Flow after it is installed
+menuTitle: Configure
+title: Configure Grafana Agent Flow
+weight: 90
+---
+
+# Configure {{% param "PRODUCT_NAME" %}}
+
+You can configure {{< param "PRODUCT_NAME" >}} after it is [installed][Install]. 
+The default River configuration file for {{< param "PRODUCT_NAME" >}} is located at:
+
+* Linux: `/etc/grafana-agent-flow.river`
+* macOS: `$(brew --prefix)/etc/grafana-agent-flow/config.river`
+* Windows: `C:\Program Files\Grafana Agent Flow\config.river`
+
+This section includes information that helps you configure {{< param "PRODUCT_NAME" >}}.
+
+{{< section >}}
+
+{{% docs/reference %}}
+[Install]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/setup/install/"
+[Install]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/setup/install/"
+{{% /docs/reference %}}
diff --git a/docs/sources/flow/setup/configure/configure-kubernetes.md b/docs/sources/flow/tasks/configure/configure-kubernetes.md
similarity index 80%
rename from docs/sources/flow/setup/configure/configure-kubernetes.md
rename to docs/sources/flow/tasks/configure/configure-kubernetes.md
index 0eceedd5f89d..2941f68a4281 100644
--- a/docs/sources/flow/setup/configure/configure-kubernetes.md
+++ b/docs/sources/flow/tasks/configure/configure-kubernetes.md
@@ -1,10 +1,16 @@
 ---
 aliases:
+- /docs/grafana-cloud/agent/flow/tasks/configure/configure-kubernetes/
+- /docs/grafana-cloud/monitor-infrastructure/agent/flow/tasks/configure/configure-kubernetes/
+- /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/tasks/configure/configure-kubernetes/
+- /docs/grafana-cloud/send-data/agent/flow/tasks/configure/configure-kubernetes/
+# Previous page aliases for backwards compatibility:
 - /docs/grafana-cloud/agent/flow/setup/configure/configure-kubernetes/
 - /docs/grafana-cloud/monitor-infrastructure/agent/flow/setup/configure/configure-kubernetes/
 - /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/setup/configure/configure-kubernetes/
 - /docs/grafana-cloud/send-data/agent/flow/setup/configure/configure-kubernetes/
-canonical: https://grafana.com/docs/agent/latest/flow/setup/configure/configure-kubernetes/
+- ../../setup/configure/configure-kubernetes/ # /docs/agent/latest/flow/setup/configure/configure-kubernetes/
+canonical: https://grafana.com/docs/agent/latest/flow/tasks/configure/configure-kubernetes/
 description: Learn how to configure Grafana Agent Flow on Kubernetes
 menuTitle: Kubernetes
 title: Configure Grafana Agent Flow on Kubernetes
diff --git a/docs/sources/flow/setup/configure/configure-linux.md b/docs/sources/flow/tasks/configure/configure-linux.md
similarity index 86%
rename from docs/sources/flow/setup/configure/configure-linux.md
rename to docs/sources/flow/tasks/configure/configure-linux.md
index a2cb7389774f..4b0bd3344ec6 100644
--- a/docs/sources/flow/setup/configure/configure-linux.md
+++ b/docs/sources/flow/tasks/configure/configure-linux.md
@@ -1,10 +1,16 @@
 ---
 aliases:
+- /docs/grafana-cloud/agent/flow/tasks/configure/configure-linux/
+- /docs/grafana-cloud/monitor-infrastructure/agent/flow/tasks/configure/configure-linux/
+- /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/tasks/configure/configure-linux/
+- /docs/grafana-cloud/send-data/agent/flow/tasks/configure/configure-linux/
+# Previous page aliases for backwards compatibility:
 - /docs/grafana-cloud/agent/flow/setup/configure/configure-linux/
 - /docs/grafana-cloud/monitor-infrastructure/agent/flow/setup/configure/configure-linux/
 - /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/setup/configure/configure-linux/
 - /docs/grafana-cloud/send-data/agent/flow/setup/configure/configure-linux/
-canonical: https://grafana.com/docs/agent/latest/flow/setup/configure/configure-linux/
+- ../../setup/configure/configure-linux/ # /docs/agent/latest/flow/setup/configure/configure-linux/
+canonical: https://grafana.com/docs/agent/latest/flow/tasks/configure/configure-linux/
 description: Learn how to configure Grafana Agent Flow on Linux
 menuTitle: Linux
 title: Configure Grafana Agent Flow on Linux
diff --git a/docs/sources/flow/setup/configure/configure-macos.md b/docs/sources/flow/tasks/configure/configure-macos.md
similarity index 85%
rename from docs/sources/flow/setup/configure/configure-macos.md
rename to docs/sources/flow/tasks/configure/configure-macos.md
index e0943be422cb..fc1c6677f579 100644
--- a/docs/sources/flow/setup/configure/configure-macos.md
+++ b/docs/sources/flow/tasks/configure/configure-macos.md
@@ -1,10 +1,16 @@
 ---
 aliases:
+- /docs/grafana-cloud/agent/flow/tasks/configure/configure-macos/
+- /docs/grafana-cloud/monitor-infrastructure/agent/flow/tasks/configure/configure-macos/
+- /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/tasks/configure/configure-macos/
+- /docs/grafana-cloud/send-data/agent/flow/tasks/configure/configure-macos/
+# Previous page aliases for backwards compatibility:
 - /docs/grafana-cloud/agent/flow/setup/configure/configure-macos/
 - /docs/grafana-cloud/monitor-infrastructure/agent/flow/setup/configure/configure-macos/
 - /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/setup/configure/configure-macos/
 - /docs/grafana-cloud/send-data/agent/flow/setup/configure/configure-macos/
-canonical: https://grafana.com/docs/agent/latest/flow/setup/configure/configure-macos/
+- ../../setup/configure/configure-macos/ # /docs/agent/latest/flow/setup/configure/configure-macos/
+canonical: https://grafana.com/docs/agent/latest/flow/tasks/configure/configure-macos/
 description: Learn how to configure Grafana Agent Flow on macOS
 menuTitle: macOS
 title: Configure Grafana Agent Flow on macOS
diff --git a/docs/sources/flow/setup/configure/configure-windows.md b/docs/sources/flow/tasks/configure/configure-windows.md
similarity index 85%
rename from docs/sources/flow/setup/configure/configure-windows.md
rename to docs/sources/flow/tasks/configure/configure-windows.md
index 520ba2b64539..806579ea1359 100644
--- a/docs/sources/flow/setup/configure/configure-windows.md
+++ b/docs/sources/flow/tasks/configure/configure-windows.md
@@ -1,10 +1,16 @@
 ---
 aliases:
+- /docs/grafana-cloud/agent/flow/tasks/configure/configure-windows/
+- /docs/grafana-cloud/monitor-infrastructure/agent/flow/tasks/configure/configure-windows/
+- /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/tasks/configure/configure-windows/
+- /docs/grafana-cloud/send-data/agent/flow/tasks/configure/configure-windows/  
+# Previous page aliases for backwards compatibility:
 - /docs/grafana-cloud/agent/flow/setup/configure/configure-windows/
 - /docs/grafana-cloud/monitor-infrastructure/agent/flow/setup/configure/configure-windows/
 - /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/setup/configure/configure-windows/
 - /docs/grafana-cloud/send-data/agent/flow/setup/configure/configure-windows/
-canonical: https://grafana.com/docs/agent/latest/flow/setup/configure/configure-windows/
+- ../../setup/configure/configure-windows/ # /docs/agent/latest/flow/setup/configure/configure-windows/
+canonical: https://grafana.com/docs/agent/latest/flow/tasks/configure/configure-windows/
 description: Learn how to configure Grafana Agent Flow on Windows
 menuTitle: Windows
 title: Configure Grafana Agent Flow on Windows
diff --git a/docs/sources/flow/tasks/distribute-prometheus-scrape-load.md b/docs/sources/flow/tasks/distribute-prometheus-scrape-load.md
index 329f6eed9ade..ee3a3fd9827a 100644
--- a/docs/sources/flow/tasks/distribute-prometheus-scrape-load.md
+++ b/docs/sources/flow/tasks/distribute-prometheus-scrape-load.md
@@ -57,8 +57,8 @@ To distribute Prometheus metrics scrape load with clustering:
 [Clustering]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/concepts/clustering.md"
 [beta]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/stability.md#beta"
 [beta]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/stability.md#beta"
-[configure-grafana-agent]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/setup/configure"
-[configure-grafana-agent]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/setup/configure"
+[configure-grafana-agent]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/tasks/configure"
+[configure-grafana-agent]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/tasks/configure"
 [Configure Prometheus metrics collection]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/tasks/collect-prometheus-metrics.md"
 [Configure Prometheus metrics collection]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/tasks/collect-prometheus-metrics.md"
 [Configure clustering]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/tasks/configure-agent-clustering.md"

From cce3c302dae8b4bb703bc36ff38d26979dd70a1a Mon Sep 17 00:00:00 2001
From: mattdurham <mattdurham@ppog.org>
Date: Tue, 9 Jan 2024 12:28:07 -0500
Subject: [PATCH 36/68] remove windows 2012 support (#6086)

---
 CHANGELOG.md             | 6 ++++++
 docs/sources/_index.md   | 2 +-
 docs/sources/_index.md.t | 2 +-
 3 files changed, 8 insertions(+), 2 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 05a4fd7e6862..7bf22afacc7c 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -11,11 +11,15 @@ Main (unreleased)
 -----------------
 
 ### Security fixes
+
 - Fixes following vulnerabilities (@hainenber)
   - [GO-2023-2409](https://github.com/advisories/GHSA-mhpq-9638-x6pw)
   - [GO-2023-2412](https://github.com/advisories/GHSA-7ww5-4wqc-m92c)
   - [CVE-2023-49568](https://github.com/advisories/GHSA-mw99-9chc-xw7r)
 
+### Other changes
+
+- Removed support for Windows 2012 in line with Microsoft end of life. (@mattdurham)
 
 v0.39.0 (2024-01-09)
 --------------------
@@ -39,6 +43,7 @@ v0.39.0 (2024-01-09)
 ### Features
 
 - A new `discovery.ovhcloud` component for discovering scrape targets on OVHcloud. (@ptodev)
+
 - Allow specifying additional containers to run. (@juangom)
 
 ### Enhancements
@@ -68,6 +73,7 @@ v0.39.0 (2024-01-09)
 - `otelcol.receiver.prometheus` does not drop histograms without buckets anymore. (@wildum)
 
 - Added exemplars support to `otelcol.receiver.prometheus`. (@wildum)
+
 - `mimir.rules.kubernetes` may now retry its startup on failure. (@hainenber)
 
 - Added links between compatible components in the documentation to make it
diff --git a/docs/sources/_index.md b/docs/sources/_index.md
index 890ac82d71a7..780a3800da31 100644
--- a/docs/sources/_index.md
+++ b/docs/sources/_index.md
@@ -77,7 +77,7 @@ Grafana Agent can collect, transform, and send data to:
 
 * Windows
 
-  * Minimum version: Windows Server 2012 or later, or Windows 10 or later.
+  * Minimum version: Windows Server 2016 or later, or Windows 10 or later.
   * Architectures: AMD64
 
 * macOS
diff --git a/docs/sources/_index.md.t b/docs/sources/_index.md.t
index c8dccbfb6748..549ba33ef8db 100644
--- a/docs/sources/_index.md.t
+++ b/docs/sources/_index.md.t
@@ -77,7 +77,7 @@ Grafana Agent can collect, transform, and send data to:
 
 * Windows
 
-  * Minimum version: Windows Server 2012 or later, or Windows 10 or later.
+  * Minimum version: Windows Server 2016 or later, or Windows 10 or later.
   * Architectures: AMD64
 
 * macOS

From eed6601333f488ff9e87c5ae8339fd283a2659c5 Mon Sep 17 00:00:00 2001
From: Piotr <17101802+thampiotr@users.noreply.github.com>
Date: Tue, 9 Jan 2024 18:09:07 +0000
Subject: [PATCH 37/68] Fix incorrect aliases for config migration docs (#6088)

---
 docs/sources/flow/tasks/migrate/from-operator.md   | 2 +-
 docs/sources/flow/tasks/migrate/from-prometheus.md | 2 +-
 docs/sources/flow/tasks/migrate/from-promtail.md   | 2 +-
 docs/sources/flow/tasks/migrate/from-static.md     | 2 +-
 4 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/docs/sources/flow/tasks/migrate/from-operator.md b/docs/sources/flow/tasks/migrate/from-operator.md
index 1e942a2da941..306e613bc45a 100644
--- a/docs/sources/flow/tasks/migrate/from-operator.md
+++ b/docs/sources/flow/tasks/migrate/from-operator.md
@@ -5,7 +5,7 @@ aliases:
 # Previous page aliases for backwards compatibility:
 - /docs/grafana-cloud/monitor-infrastructure/agent/flow/getting-started/migrating-from-operator/
 - /docs/grafana-cloud/send-data/agent/flow/getting-started/migrating-from-operator/
-- ../getting-started/migrating-from-operator/ # /docs/agent/latest/flow/getting-started/migrating-from-operator/
+- ../../getting-started/migrating-from-operator/ # /docs/agent/latest/flow/getting-started/migrating-from-operator/
 canonical: https://grafana.com/docs/agent/latest/flow/tasks/migrate/from-operator/
 description: Migrate from Grafana Agent Operator to Grafana Agent Flow
 menuTitle: Migrate from Operator
diff --git a/docs/sources/flow/tasks/migrate/from-prometheus.md b/docs/sources/flow/tasks/migrate/from-prometheus.md
index 6224d82901e7..aa106d940b3b 100644
--- a/docs/sources/flow/tasks/migrate/from-prometheus.md
+++ b/docs/sources/flow/tasks/migrate/from-prometheus.md
@@ -9,7 +9,7 @@ aliases:
 - /docs/grafana-cloud/monitor-infrastructure/agent/flow/getting-started/migrating-from-prometheus/
 - /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/getting-started/migrating-from-prometheus/
 - /docs/grafana-cloud/send-data/agent/flow/getting-started/migrating-from-prometheus/
-- ../getting-started/migrating-from-prometheus/ # /docs/agent/latest/flow/getting-started/migrating-from-prometheus/
+- ../../getting-started/migrating-from-prometheus/ # /docs/agent/latest/flow/getting-started/migrating-from-prometheus/
 canonical: https://grafana.com/docs/agent/latest/flow/tasks/migrate/from-prometheus/
 description: Learn how to migrate from Prometheus to Grafana Agent Flow
 menuTitle: Migrate from Prometheus
diff --git a/docs/sources/flow/tasks/migrate/from-promtail.md b/docs/sources/flow/tasks/migrate/from-promtail.md
index 29dc2ca5c0e6..1416efea88c1 100644
--- a/docs/sources/flow/tasks/migrate/from-promtail.md
+++ b/docs/sources/flow/tasks/migrate/from-promtail.md
@@ -9,7 +9,7 @@ aliases:
 - /docs/grafana-cloud/monitor-infrastructure/agent/flow/getting-started/migrating-from-promtail/
 - /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/getting-started/migrating-from-promtail/
 - /docs/grafana-cloud/send-data/agent/flow/getting-started/migrating-from-promtail/
-- ../getting-started/migrating-from-promtail/ # /docs/agent/latest/flow/getting-started/migrating-from-promtail/
+- ../../getting-started/migrating-from-promtail/ # /docs/agent/latest/flow/getting-started/migrating-from-promtail/
 canonical: https://grafana.com/docs/agent/latest/flow/tasks/migrate/from-promtail/
 description: Learn how to migrate from Promtail to Grafana Agent Flow
 menuTitle: Migrate from Promtail
diff --git a/docs/sources/flow/tasks/migrate/from-static.md b/docs/sources/flow/tasks/migrate/from-static.md
index 0a6fb982853b..a08935fff859 100644
--- a/docs/sources/flow/tasks/migrate/from-static.md
+++ b/docs/sources/flow/tasks/migrate/from-static.md
@@ -9,7 +9,7 @@ aliases:
 - /docs/grafana-cloud/monitor-infrastructure/agent/flow/getting-started/migrating-from-static/
 - /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/getting-started/migrating-from-static/
 - /docs/grafana-cloud/send-data/agent/flow/getting-started/migrating-from-static/
-- ../getting-started/migrating-from-static/ # /docs/agent/latest/flow/getting-started/migrating-from-static/
+- ../../getting-started/migrating-from-static/ # /docs/agent/latest/flow/getting-started/migrating-from-static/
 canonical: https://grafana.com/docs/agent/latest/flow/tasks/migrate/from-static/
 description: Learn how to migrate your configuration from Grafana Agent Static to Grafana Agent Flow
 menuTitle: Migrate from Static to Flow

From 3e8f39cace00130556c72e6f9533b8a4428baed1 Mon Sep 17 00:00:00 2001
From: Mischa Thompson <mischabear@gmail.com>
Date: Tue, 9 Jan 2024 17:24:58 -0800
Subject: [PATCH 38/68] Fix handling of partial reads in remote.s3 (#6090)

---
 CHANGELOG.md                   |  5 +++++
 component/remote/s3/watcher.go | 10 +++++++---
 2 files changed, 12 insertions(+), 3 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 7bf22afacc7c..bfc3e447ddcb 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -17,6 +17,11 @@ Main (unreleased)
   - [GO-2023-2412](https://github.com/advisories/GHSA-7ww5-4wqc-m92c)
   - [CVE-2023-49568](https://github.com/advisories/GHSA-mw99-9chc-xw7r)
 
+### Bugfixes
+
+- Fix an issue in `remote.s3` where the exported content of an object would be an empty string if `remote.s3` failed to fully retrieve
+  the file in a single read call. (@grafana/agent-squad)
+
 ### Other changes
 
 - Removed support for Windows 2012 in line with Microsoft end of life. (@mattdurham)
diff --git a/component/remote/s3/watcher.go b/component/remote/s3/watcher.go
index 45c4df2ba417..f591b2bb2cfe 100644
--- a/component/remote/s3/watcher.go
+++ b/component/remote/s3/watcher.go
@@ -1,7 +1,6 @@
 package s3
 
 import (
-	"errors"
 	"io"
 	"sync"
 	"time"
@@ -100,10 +99,15 @@ func (w *watcher) getObject(ctx context.Context) ([]byte, error) {
 	if err != nil {
 		return []byte{}, err
 	}
+	defer output.Body.Close()
+
 	buf := make([]byte, output.ContentLength)
-	_, err = output.Body.Read(buf)
-	if !errors.Is(err, io.EOF) {
+
+	_, err = io.ReadFull(output.Body, buf)
+
+	if err != nil {
 		return []byte{}, err
 	}
+
 	return buf, nil
 }

From f696b3aaea3c373c871d47c4d7ae6505d6f28003 Mon Sep 17 00:00:00 2001
From: Paulin Todev <paulin.todev@gmail.com>
Date: Wed, 10 Jan 2024 07:21:57 +0000
Subject: [PATCH 39/68] Explain tracing load balancing in more detail (#5904)

* Explain tracing load balancing in more detail

---------

Co-authored-by: Piotr <17101802+thampiotr@users.noreply.github.com>
Co-authored-by: Clayton Cornell <131809008+clayton-cornell@users.noreply.github.com>
---
 .../otelcol.exporter.loadbalancing.md         | 660 +++++++++++++++++-
 docs/sources/flow/setup/deploy-agent.md       |  57 ++
 .../static/configuration/traces-config.md     |  30 +-
 docs/sources/static/set-up/deploy-agent.md    | 380 ++++++++++
 4 files changed, 1119 insertions(+), 8 deletions(-)

diff --git a/docs/sources/flow/reference/components/otelcol.exporter.loadbalancing.md b/docs/sources/flow/reference/components/otelcol.exporter.loadbalancing.md
index 60480de6677e..c22c169665b7 100644
--- a/docs/sources/flow/reference/components/otelcol.exporter.loadbalancing.md
+++ b/docs/sources/flow/reference/components/otelcol.exporter.loadbalancing.md
@@ -15,6 +15,8 @@ title: otelcol.exporter.loadbalancing
 
 {{< docs/shared lookup="flow/stability/beta.md" source="agent" version="<AGENT_VERSION>" >}}
 
+<!-- Include a picture of the LB architecture? -->
+
 `otelcol.exporter.loadbalancing` accepts logs and traces from other `otelcol` components
 and writes them over the network using the OpenTelemetry Protocol (OTLP) protocol. 
 
@@ -141,8 +143,9 @@ Name | Type | Description | Default | Required
 
 ### kubernetes block
 
-You can use the `kubernetes` block to load balance across the pods of a Kubernetes service. The Agent will be notified
-by the Kubernetes API whenever a new pod is added or removed from the service.
+You can use the `kubernetes` block to load balance across the pods of a Kubernetes service. 
+The Kubernetes API notifies {{< param "PRODUCT_NAME" >}} whenever a new pod is added or removed from the service. 
+The `kubernetes` resolver has a much faster response time than the `dns` resolver because it doesn't require polling.
 
 The following arguments are supported:
 
@@ -264,6 +267,86 @@ Name | Type | Description
 * logs
 * traces
 
+## Choose a load balancing strategy
+
+<!-- TODO: Mention gropubytrace processor when Flow supports it -->
+<!-- TODO: Should we run more than 1 LB instance for better resiliency and spreading out the load? -->
+
+Different {{< param "PRODUCT_NAME" >}} components require different load-balancing strategies.
+The use of `otelcol.exporter.loadbalancing` is only necessary for [stateful Flow components][stateful-and-stateless-components].
+
+[stateful-and-stateless-components]: {{< relref "../../setup/deploy-agent.md#stateful-and-stateless-components" >}}
+
+### otelcol.processor.tail_sampling
+<!-- TODO: Add a picture of the architecture?  -->
+All spans for a given trace ID must go to the same tail sampling {{< param "PRODUCT_ROOT_NAME" >}} instance.
+* This can be done by configuring `otelcol.exporter.loadbalancing` with `routing_key = "traceID"`.
+* If you do not configure `routing_key = "traceID"`, the sampling decision may be incorrect.
+  The tail sampler must have a full view of the trace when making a sampling decision.
+  For example, a `rate_limiting` tail sampling strategy may incorrectly pass through 
+  more spans than expected if the spans for the same trace are spread out to more than
+  one {{< param "PRODUCT_NAME" >}} instance.
+
+<!-- Make "rate limiting" a URL to the tail sampler doc -->
+
+### otelcol.connector.spanmetrics
+All spans for a given `service.name` must go to the same spanmetrics {{< param "PRODUCT_ROOT_NAME" >}}.
+* This can be done by configuring `otelcol.exporter.loadbalancing` with `routing_key = "service"`.
+* If you do not configure `routing_key = "service"`, metrics generated from spans might be incorrect.
+For example, if similar spans for the same `service.name` end up on different {{< param "PRODUCT_ROOT_NAME" >}} instances, the two {{< param "PRODUCT_ROOT_NAME" >}}s will have identical metric series for calculating span latency, errors, and number of requests.
+When both {{< param "PRODUCT_ROOT_NAME" >}} instances attempt to write the metrics to a database such as Mimir, the series may clash with each other.
+At best, this will lead to an error in {{< param "PRODUCT_ROOT_NAME" >}} and a rejected write to the metrics database. 
+At worst, it could lead to inaccurate data due to overlapping samples for the metric series.
+
+However, there are ways to scale `otelcol.connector.spanmetrics` without the need for a load balancer:
+1. Each {{< param "PRODUCT_ROOT_NAME" >}} could add an attribute such as `collector.id` in order to make its series unique.
+   Then, for example, you could use a `sum by` PromQL query to aggregate the metrics from different {{< param "PRODUCT_ROOT_NAME" >}}s.
+   Unfortunately, an extra `collector.id` attribute has a downside that the metrics stored in the database will have higher {{< term "cardinality" >}}cardinality{{< /term >}}.
+2. Spanmetrics could be generated in the backend database instead of in {{< param "PRODUCT_ROOT_NAME" >}}.
+    For example, span metrics can be [generated][tempo-spanmetrics] in Grafana Cloud by the Tempo traces database.
+
+[tempo-spanmetrics]: https://grafana.com/docs/tempo/latest/metrics-generator/span_metrics/
+
+### otelcol.connector.servicegraph
+It is challenging to scale `otelcol.connector.servicegraph` over multiple {{< param "PRODUCT_ROOT_NAME" >}} instances.
+For `otelcol.connector.servicegraph` to work correctly, each "client" span must be paired with a "server" span to calculate metrics such as span duration.
+If a "client" span goes to one {{< param "PRODUCT_ROOT_NAME" >}}, but a "server" span goes to another {{< param "PRODUCT_ROOT_NAME" >}},  then no single {{< param "PRODUCT_ROOT_NAME" >}} will be able to pair the spans and a metric won't be generated.
+
+`otelcol.exporter.loadbalancing` can solve this problem partially if it is configured with `routing_key = "traceID"`.
+Each {{< param "PRODUCT_ROOT_NAME" >}} will then be able to calculate a service graph for each "client"/"server" pair in a trace.
+It is possible to have a span with similar "server"/"client" values in a different trace, processed by another {{< param "PRODUCT_ROOT_NAME" >}}.
+If two different {{< param "PRODUCT_ROOT_NAME" >}} instances process similar "server"/"client" spans, they will generate the same service graph metric series.
+If the series from two {{< param "PRODUCT_ROOT_NAME" >}} are the same, this will lead to issues when writing them to the backend database.
+You could differentiate the series by adding an attribute such as `"collector.id"`.
+The series from different {{< param "PRODUCT_ROOT_NAME" >}}s can be aggregated using PromQL queries on the backed metrics database.
+If the metrics are stored in Grafana Mimir, cardinality issues due to `"collector.id"` labels can be solved using [Adaptive Metrics][adaptive-metrics].
+
+A simpler, more scalable alternative to generating service graph metrics in {{< param "PRODUCT_ROOT_NAME" >}} is to generate them entirely in the backend database. 
+For example, service graphs can be [generated][tempo-servicegraphs] in Grafana Cloud by the Tempo traces database.
+
+[tempo-servicegraphs]: https://grafana.com/docs/tempo/latest/metrics-generator/service_graphs/
+[adaptive-metrics]: https://grafana.com/docs/grafana-cloud/cost-management-and-billing/reduce-costs/metrics-costs/control-metrics-usage-via-adaptive-metrics/
+
+### Mixing stateful components
+<!-- TODO: Add a picture of the architecture?  -->
+Different {{< param "PRODUCT_NAME" >}} components may require a different `routing_key` for `otelcol.exporter.loadbalancing`.
+For example, `otelcol.processor.tail_sampling` requires `routing_key = "traceID"` whereas `otelcol.connector.spanmetrics` requires `routing_key = "service"`.
+To load balance both types of components, two different sets of load balancers have to be set up:
+
+* One set of `otelcol.exporter.loadbalancing` with `routing_key = "traceID"`, sending spans to {{< param "PRODUCT_ROOT_NAME" >}}s doing tail sampling and no span metrics.
+* Another set of `otelcol.exporter.loadbalancing` with `routing_key = "service"`, sending spans to {{< param "PRODUCT_ROOT_NAME" >}}s doing span metrics and no service graphs.
+
+Unfortunately, this can also lead to side effects.
+For example, if `otelcol.connector.spanmetrics` is configured to generate exemplars, the tail sampling {{< param "PRODUCT_ROOT_NAME" >}}s might drop the trace that the exemplar points to.
+There is no coordination between the tail sampling {{< param "PRODUCT_ROOT_NAME" >}}s and the span metrics {{< param "PRODUCT_ROOT_NAME" >}}s to make sure trace IDs for exemplars are kept.
+
+<!-- 
+TODO: Add a troubleshooting section?
+1. Use GODEBUG for DNS resolver logging
+2. Enable debug logging on the Agent
+3. gRPC debug env variables?
+ -->
+
 ## Component health
 
 `otelcol.exporter.loadbalancing` is only reported as unhealthy if given an invalid
@@ -274,7 +357,9 @@ configuration.
 `otelcol.exporter.loadbalancing` does not expose any component-specific debug
 information.
 
-## Example
+## Examples
+
+### Static resolver
 
 This example accepts OTLP logs and traces over gRPC. It then sends them in a load-balanced 
 way to "localhost:55690" or "localhost:55700".
@@ -301,6 +386,573 @@ otelcol.exporter.loadbalancing "default" {
     }
 }
 ```
+
+### DNS resolver
+
+When configured with a `dns` resolver, `otelcol.exporter.loadbalancing` will do a DNS lookup 
+on regular intervals. Spans are exported to the addresses the DNS lookup returned.
+
+```river
+otelcol.exporter.loadbalancing "default" {
+    resolver {
+        dns {
+            hostname = "grafana-agent-traces-sampling.grafana-cloud-monitoring.svc.cluster.local"
+            port     = "34621"
+            interval = "5s"
+            timeout  = "1s"
+        }
+    }
+    protocol {
+        otlp {
+            client {}
+        }
+    }
+}
+```
+
+The following example shows a Kubernetes configuration that configures two sets of {{< param "PRODUCT_ROOT_NAME" >}}s:
+* A pool of load-balancer {{< param "PRODUCT_ROOT_NAME" >}}s:
+  * Spans are received from instrumented applications via `otelcol.receiver.otlp`
+  * Spans are exported via `otelcol.exporter.loadbalancing`.
+* A pool of sampling {{< param "PRODUCT_ROOT_NAME" >}}s:
+  * The sampling {{< param "PRODUCT_ROOT_NAME" >}}s run behind a headless service to enable the load-balancer {{< param "PRODUCT_ROOT_NAME" >}}s to discover them.
+  * Spans are received from the load-balancer {{< param "PRODUCT_ROOT_NAME" >}}s via `otelcol.receiver.otlp`
+  * Traces are sampled via `otelcol.processor.tail_sampling`.
+  * The traces are exported via `otelcol.exporter.otlp` to an OTLP-compatible database such as Tempo.
+
+{{< collapse title="Example Kubernetes configuration" >}}
+
+```yaml
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: grafana-cloud-monitoring
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: k6-trace-generator
+  namespace: grafana-cloud-monitoring
+spec:
+  minReadySeconds: 10
+  replicas: 1
+  revisionHistoryLimit: 1
+  selector:
+    matchLabels:
+      name: k6-trace-generator
+  template:
+    metadata:
+      labels:
+        name: k6-trace-generator
+    spec:
+      containers:
+      - env:
+        - name: ENDPOINT
+          value: agent-traces-lb.grafana-cloud-monitoring.svc.cluster.local:9411
+        image: ghcr.io/grafana/xk6-client-tracing:v0.0.2
+        imagePullPolicy: IfNotPresent
+        name: k6-trace-generator
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: agent-traces-lb
+  namespace: grafana-cloud-monitoring
+spec:
+  clusterIP: None
+  ports:
+  - name: agent-traces-otlp-grpc
+    port: 9411
+    protocol: TCP
+    targetPort: 9411
+  selector:
+    name: agent-traces-lb
+  type: ClusterIP
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: agent-traces-lb
+  namespace: grafana-cloud-monitoring
+spec:
+  minReadySeconds: 10
+  replicas: 1
+  revisionHistoryLimit: 1
+  selector:
+    matchLabels:
+      name: agent-traces-lb
+  template:
+    metadata:
+      labels:
+        name: agent-traces-lb
+    spec:
+      containers:
+      - args:
+        - run
+        - /etc/agent/agent_lb.river
+        command:
+        - /bin/grafana-agent
+        env:
+        - name: AGENT_MODE
+          value: flow
+        image: grafana/agent:v0.38.0
+        imagePullPolicy: IfNotPresent
+        name: agent-traces
+        ports:
+        - containerPort: 9411
+          name: otlp-grpc
+          protocol: TCP
+        - containerPort: 34621
+          name: agent-lb
+          protocol: TCP
+        volumeMounts:
+        - mountPath: /etc/agent
+          name: agent-traces
+      volumes:
+      - configMap:
+          name: agent-traces
+        name: agent-traces
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: agent-traces-sampling
+  namespace: grafana-cloud-monitoring
+spec:
+  clusterIP: None
+  ports:
+  - name: agent-lb
+    port: 34621
+    protocol: TCP
+    targetPort: agent-lb
+  selector:
+    name: agent-traces-sampling
+  type: ClusterIP
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: agent-traces-sampling
+  namespace: grafana-cloud-monitoring
+spec:
+  minReadySeconds: 10
+  replicas: 3
+  revisionHistoryLimit: 1
+  selector:
+    matchLabels:
+      name: agent-traces-sampling
+  template:
+    metadata:
+      labels:
+        name: agent-traces-sampling
+    spec:
+      containers:
+      - args:
+        - run
+        - /etc/agent/agent_sampling.river
+        command:
+        - /bin/grafana-agent
+        env:
+        - name: AGENT_MODE
+          value: flow
+        image: grafana/agent:v0.38.0
+        imagePullPolicy: IfNotPresent
+        name: agent-traces
+        ports:
+        - containerPort: 9411
+          name: otlp-grpc
+          protocol: TCP
+        - containerPort: 34621
+          name: agent-lb
+          protocol: TCP
+        volumeMounts:
+        - mountPath: /etc/agent
+          name: agent-traces
+      volumes:
+      - configMap:
+          name: agent-traces
+        name: agent-traces
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: agent-traces
+  namespace: grafana-cloud-monitoring
+data:
+  agent_lb.river: |
+    otelcol.receiver.otlp "default" {
+      grpc {
+        endpoint = "0.0.0.0:9411"
+      }
+      output {
+        traces = [otelcol.exporter.loadbalancing.default.input,otelcol.exporter.logging.default.input]
+      }
+    }
+
+    otelcol.exporter.logging "default" {
+      verbosity = "detailed"
+    }
+
+    otelcol.exporter.loadbalancing "default" {
+      resolver {
+        dns {
+          hostname = "agent-traces-sampling.grafana-cloud-monitoring.svc.cluster.local"
+          port = "34621"
+        }
+      }
+      protocol {
+        otlp {
+          client {
+            tls {
+              insecure = true
+            }
+          }
+        }
+      }
+    }
+
+  agent_sampling.river: |
+    otelcol.receiver.otlp "default" {
+      grpc {
+        endpoint = "0.0.0.0:34621"
+      }
+      output {
+        traces = [otelcol.exporter.otlp.default.input,otelcol.exporter.logging.default.input]
+      }
+    }
+
+    otelcol.exporter.logging "default" {
+      verbosity = "detailed"
+    }
+
+    otelcol.exporter.otlp "default" {
+      client {
+        endpoint = "tempo-prod-06-prod-gb-south-0.grafana.net:443"
+        auth     = otelcol.auth.basic.creds.handler
+      }
+    }
+
+    otelcol.auth.basic "creds" {
+      username = "111111"
+      password = "pass"
+    }
+```
+{{< /collapse >}}
+
+You must fill in the correct OTLP credentials prior to running the example.
+You can use [k3d][] to start the example:
+
+<!-- TODO: Link to the k3d page -->
+```bash
+k3d cluster create grafana-agent-lb-test
+kubectl apply -f kubernetes_config.yaml
+```
+
+To delete the cluster, run:
+
+```bash
+k3d cluster delete grafana-agent-lb-test
+```
+
+[k3d]: https://k3d.io/v5.6.0/
+
+### Kubernetes resolver
+
+When you configure `otelcol.exporter.loadbalancing`  with a `kubernetes` resolver, the Kubernetes API notifies {{< param "PRODUCT_NAME" >}} whenever a new pod is added or removed from the service. 
+Spans are exported to the addresses from the Kubernetes API, combined with all the possible `ports`.
+
+```river
+otelcol.exporter.loadbalancing "default" {
+    resolver {
+        kubernetes {
+            service = "grafana-agent-traces-headless"
+            ports   = [ 34621 ]
+        }
+    }
+    protocol {
+        otlp {
+            client {}
+        }
+    }
+}
+```
+
+The following example shows a Kubernetes configuration that sets up two sets of {{< param "PRODUCT_ROOT_NAME" >}}s:
+* A pool of load-balancer {{< param "PRODUCT_ROOT_NAME" >}}s:
+  * Spans are received from instrumented applications via `otelcol.receiver.otlp`
+  * Spans are exported via `otelcol.exporter.loadbalancing`.
+  * The load-balancer {{< param "PRODUCT_ROOT_NAME" >}}s will get notified by the Kubernetes API any time a pod 
+    is added or removed from the pool of sampling {{< param "PRODUCT_ROOT_NAME" >}}s.
+* A pool of sampling {{< param "PRODUCT_ROOT_NAME" >}}s:
+  * The sampling {{< param "PRODUCT_ROOT_NAME" >}}s do not need to run behind a headless service.
+  * Spans are received from the load-balancer {{< param "PRODUCT_ROOT_NAME" >}}s via `otelcol.receiver.otlp`
+  * Traces are sampled via `otelcol.processor.tail_sampling`.
+  * The traces are exported via `otelcol.exporter.otlp` to a an OTLP-compatible database such as Tempo.
+
+<!-- TODO: In the k8s config, why does the LB service has to be headless? -->
+{{< collapse title="Example Kubernetes configuration" >}}
+
+```yaml
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: grafana-cloud-monitoring
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: agent-traces
+  namespace: grafana-cloud-monitoring
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: agent-traces-role
+  namespace: grafana-cloud-monitoring
+rules:
+- apiGroups:
+  - ""
+  resources:
+  - endpoints
+  verbs:
+  - list
+  - watch
+  - get
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: agent-traces-rolebinding
+  namespace: grafana-cloud-monitoring
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: agent-traces-role
+subjects:
+- kind: ServiceAccount
+  name: agent-traces
+  namespace: grafana-cloud-monitoring
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: k6-trace-generator
+  namespace: grafana-cloud-monitoring
+spec:
+  minReadySeconds: 10
+  replicas: 1
+  revisionHistoryLimit: 1
+  selector:
+    matchLabels:
+      name: k6-trace-generator
+  template:
+    metadata:
+      labels:
+        name: k6-trace-generator
+    spec:
+      containers:
+      - env:
+        - name: ENDPOINT
+          value: agent-traces-lb.grafana-cloud-monitoring.svc.cluster.local:9411
+        image: ghcr.io/grafana/xk6-client-tracing:v0.0.2
+        imagePullPolicy: IfNotPresent
+        name: k6-trace-generator
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: agent-traces-lb
+  namespace: grafana-cloud-monitoring
+spec:
+  clusterIP: None
+  ports:
+  - name: agent-traces-otlp-grpc
+    port: 9411
+    protocol: TCP
+    targetPort: 9411
+  selector:
+    name: agent-traces-lb
+  type: ClusterIP
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: agent-traces-lb
+  namespace: grafana-cloud-monitoring
+spec:
+  minReadySeconds: 10
+  replicas: 1
+  revisionHistoryLimit: 1
+  selector:
+    matchLabels:
+      name: agent-traces-lb
+  template:
+    metadata:
+      labels:
+        name: agent-traces-lb
+    spec:
+      containers:
+      - args:
+        - run
+        - /etc/agent/agent_lb.river
+        command:
+        - /bin/grafana-agent
+        env:
+        - name: AGENT_MODE
+          value: flow
+        image: grafana/agent:v0.38.0
+        imagePullPolicy: IfNotPresent
+        name: agent-traces
+        ports:
+        - containerPort: 9411
+          name: otlp-grpc
+          protocol: TCP
+        volumeMounts:
+        - mountPath: /etc/agent
+          name: agent-traces
+      serviceAccount: agent-traces
+      volumes:
+      - configMap:
+          name: agent-traces
+        name: agent-traces
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: agent-traces-sampling
+  namespace: grafana-cloud-monitoring
+spec:
+  ports:
+  - name: agent-lb
+    port: 34621
+    protocol: TCP
+    targetPort: agent-lb
+  selector:
+    name: agent-traces-sampling
+  type: ClusterIP
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: agent-traces-sampling
+  namespace: grafana-cloud-monitoring
+spec:
+  minReadySeconds: 10
+  replicas: 3
+  revisionHistoryLimit: 1
+  selector:
+    matchLabels:
+      name: agent-traces-sampling
+  template:
+    metadata:
+      labels:
+        name: agent-traces-sampling
+    spec:
+      containers:
+      - args:
+        - run
+        - /etc/agent/agent_sampling.river
+        command:
+        - /bin/grafana-agent
+        env:
+        - name: AGENT_MODE
+          value: flow
+        image: grafana/agent:v0.38.0
+        imagePullPolicy: IfNotPresent
+        name: agent-traces
+        ports:
+        - containerPort: 34621
+          name: agent-lb
+          protocol: TCP
+        volumeMounts:
+        - mountPath: /etc/agent
+          name: agent-traces
+      volumes:
+      - configMap:
+          name: agent-traces
+        name: agent-traces
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: agent-traces
+  namespace: grafana-cloud-monitoring
+data:
+  agent_lb.river: |
+    otelcol.receiver.otlp "default" {
+      grpc {
+        endpoint = "0.0.0.0:9411"
+      }
+      output {
+        traces = [otelcol.exporter.loadbalancing.default.input,otelcol.exporter.logging.default.input]
+      }
+    }
+
+    otelcol.exporter.logging "default" {
+      verbosity = "detailed"
+    }
+
+    otelcol.exporter.loadbalancing "default" {
+      resolver {
+        kubernetes {
+          service = "agent-traces-sampling"
+          ports = ["34621"]
+        }
+      }
+      protocol {
+        otlp {
+          client {
+            tls {
+              insecure = true
+            }
+          }
+        }
+      }
+    }
+
+  agent_sampling.river: |
+    otelcol.receiver.otlp "default" {
+      grpc {
+        endpoint = "0.0.0.0:34621"
+      }
+      output {
+        traces = [otelcol.exporter.otlp.default.input,otelcol.exporter.logging.default.input]
+      }
+    }
+
+    otelcol.exporter.logging "default" {
+      verbosity = "detailed"
+    }
+
+    otelcol.exporter.otlp "default" {
+      client {
+        endpoint = "tempo-prod-06-prod-gb-south-0.grafana.net:443"
+        auth     = otelcol.auth.basic.creds.handler
+      }
+    }
+
+    otelcol.auth.basic "creds" {
+      username = "111111"
+      password = "pass"
+    }
+```
+
+{{< /collapse >}}
+
+You must fill in the correct OTLP credentials prior to running the example.
+You can use [k3d][] to start the example:
+
+```bash
+k3d cluster create grafana-agent-lb-test
+kubectl apply -f kubernetes_config.yaml
+```
+
+To delete the cluster, run:
+
+```bash
+k3d cluster delete grafana-agent-lb-test
+```
+
 <!-- START GENERATED COMPATIBLE COMPONENTS -->
 
 ## Compatible components
@@ -316,4 +968,4 @@ connection work correctly. Refer to the linked documentation for more details.
 
 {{% /admonition %}}
 
-<!-- END GENERATED COMPATIBLE COMPONENTS -->
\ No newline at end of file
+<!-- END GENERATED COMPATIBLE COMPONENTS -->
diff --git a/docs/sources/flow/setup/deploy-agent.md b/docs/sources/flow/setup/deploy-agent.md
index 8328e03b65b6..60afd38aeb17 100644
--- a/docs/sources/flow/setup/deploy-agent.md
+++ b/docs/sources/flow/setup/deploy-agent.md
@@ -13,3 +13,60 @@ weight: 900
 
 {{< docs/shared source="agent" lookup="/deploy-agent.md" version="<AGENT_VERSION>" >}}
 
+## Processing different types of telemetry in different {{< param "PRODUCT_ROOT_NAME" >}} instances
+
+If the load on {{< param "PRODUCT_ROOT_NAME" >}} is small, it is recommended to process all necessary telemetry signals in the same {{< param "PRODUCT_ROOT_NAME" >}} process. 
+For example, a single {{< param "PRODUCT_ROOT_NAME" >}} can process all of the incoming metrics, logs, traces, and profiles.
+
+However, if the load on the {{< param "PRODUCT_ROOT_NAME" >}}s is big, it may be beneficial to process different telemetry signals in different deployments of {{< param "PRODUCT_ROOT_NAME" >}}s.
+
+This provides better stability due to the isolation between processes.
+For example, an overloaded {{< param "PRODUCT_ROOT_NAME" >}} processing traces won't impact an {{< param "PRODUCT_ROOT_NAME" >}} processing metrics.
+Different types of signal collection require different methods for scaling:
+
+* "Pull" components such as `prometheus.scrape` and `pyroscope.scrape` are scaled using hashmod sharing or clustering. 
+* "Push" components such as `otelcol.receiver.otlp` are scaled by placing a load balancer in front of them.
+
+### Traces
+
+Scaling {{< param "PRODUCT_ROOT_NAME" >}} instances for tracing is very similar to [scaling OpenTelemetry Collector][scaling-collector] instances.
+This similarity is because most {{< param "PRODUCT_NAME" >}} components used for tracing are based on components from the OTel Collector.
+
+[scaling-collector]: https://opentelemetry.io/docs/collector/scaling/
+
+#### When to scale
+
+To decide whether scaling is necessary, check metrics such as:
+* `receiver_refused_spans_ratio_total` from receivers such as `otelcol.receiver.otlp`.
+* `processor_refused_spans_ratio_total` from processors such as `otelcol.processor.batch`.
+* `exporter_send_failed_spans_ratio_total` from exporters such as `otelcol.exporter.otlp` and `otelcol.exporter.loadbalancing`.
+
+#### Stateful and stateless components
+
+In the context of tracing, a "stateful component" is a component 
+that needs to aggregate certain spans to work correctly.
+A "stateless {{< param "PRODUCT_ROOT_NAME" >}}" is a {{< param "PRODUCT_ROOT_NAME" >}} which does not contain stateful components.
+
+Scaling stateful {{< param "PRODUCT_ROOT_NAME" >}}s is more difficult, because spans must be forwarded to a 
+specific {{< param "PRODUCT_ROOT_NAME" >}} according to a span property such as trace ID or a `service.name` attribute.
+You can forward spans with `otelcol.exporter.loadbalancing`.
+
+Examples of stateful components:
+
+* `otelcol.processor.tail_sampling`
+* `otelcol.connector.spanmetrics`
+* `otelcol.connector.servicegraph`
+
+<!-- TODO: link to the otelcol.exporter.loadbalancing docs for more info -->
+
+A "stateless component" does not need to aggregate specific spans to work correctly - 
+it can work correctly even if it only has some of the spans of a trace.
+
+A stateless {{< param "PRODUCT_ROOT_NAME" >}} can be scaled without using `otelcol.exporter.loadbalancing`.
+For example, you could use an off-the-shelf load balancer to do a round-robin load balancing.
+
+Examples of stateless components:
+* `otelcol.processor.probabilistic_sampler`
+* `otelcol.processor.transform`
+* `otelcol.processor.attributes`
+* `otelcol.processor.span`
diff --git a/docs/sources/static/configuration/traces-config.md b/docs/sources/static/configuration/traces-config.md
index 57a2a724ea58..8ede4e9eb94e 100644
--- a/docs/sources/static/configuration/traces-config.md
+++ b/docs/sources/static/configuration/traces-config.md
@@ -308,30 +308,52 @@ tail_sampling:
 # It ensures that all spans of a trace are sampled in the same instance.
 # It works by exporting spans based on their traceID via consistent hashing.
 #
-# Enabling this feature is required for tail_sampling to correctly work when
-# different agent instances can receive spans for the same trace.
+# Enabling this feature is required for "tail_sampling", "spanmetrics", and "service_graphs"
+# to correctly work when spans are ingested by multiple agent instances.
 #
 # Load balancing works by layering two pipelines and consistently exporting
 # spans belonging to a trace to the same agent instance.
 # Agent instances need to be able to communicate with each other via gRPC.
 #
+# When load_balancing is enabled:
+# 1. When an Agent receives spans from the configured "receivers".
+# 2. If the "attributes" processor is configured, it will run through all the spans.
+# 3. The spans will be exported using the "load_balancing" configuration to any of the Agent instances.
+#    This may or may not be the same Agent which has already received the span.
+# 4. The Agent which received the span from the loadbalancer will run these processors, 
+#    in this order, if they are configured:
+#    1. "spanmetrics"
+#    2. "service_graphs"
+#    3. "tail_sampling"
+#    4. "automatic_logging"
+#    5. "batch"
+# 5. The spans are then remote written using the "remote_write" configuration.
+# 
 # Load balancing significantly increases CPU usage. This is because spans are
 # exported an additional time between agents.
 load_balancing:
   # resolver configures the resolution strategy for the involved backends
-  # It can be static, with a fixed list of hostnames, or DNS, with a hostname
-  # (and port) that will resolve to all IP addresses.
+  # It can be either "static", "dns" or "kubernetes".
   resolver:
     static:
+      # A fixed list of hostnames.
       hostnames:
         [ - <string> ... ]
     dns:
+      # DNS hostname from which to resolve IP addresses.
       hostname: <string>
+      # Port number to use with the resolved IP address when exporting spans.
       [ port: <int> | default = 4317 ]
       # Resolver interval
       [ interval: <duration> | default = 5s ]
       # Resolver timeout
       [ timeout: <duration> | default = 1s ]
+    # The kubernetes resolver receives IP addresses of a Kubernetes service 
+    # from the Kubernetes API. It does not require polling. The Kubernetes API
+    # notifies the Agent when a new pod is available and when an old pod has exited.
+    #
+    # For the kubernetes resolver to work, Agent must be running under
+    # a system account with "list", "watch" and "get" permissions.
     kubernetes:
       service: <string>
       [ ports: <int array> | default = 4317 ]
diff --git a/docs/sources/static/set-up/deploy-agent.md b/docs/sources/static/set-up/deploy-agent.md
index 7af7714adaf5..5325d3b71c01 100644
--- a/docs/sources/static/set-up/deploy-agent.md
+++ b/docs/sources/static/set-up/deploy-agent.md
@@ -11,3 +11,383 @@ weight: 300
 
 {{< docs/shared source="agent" lookup="/deploy-agent.md" version="<AGENT_VERSION>" >}}
 
+## For scalable ingestion of traces
+
+For small workloads, it is normal to have just one Agent handle all incoming spans with no need of load balancing. 
+However, for large workloads it is desirable to spread out the load of processing spans over multiple Agent instances.
+
+To scale the Agent for trace ingestion, do the following:
+1. Set up the `load_balancing` section of the Agent's `traces` config.
+2. Start multiple Agent instances, all with the same configuration, so that:
+   * Each Agent load balances using the same strategy.
+   * Each Agent processes spans in the same way.
+3. The cluster of Agents is now setup for load balancing. It works as follows:
+   1. Any of the Agents can receive spans from instrumented applications via the configured `receivers`.
+   2. When an Agent firstly receives spans, it will forward them to any of the Agents in the cluster according to the `load_balancing` configuration.
+
+<!-- For more detail, send people over to the load_balancing section in traces_config -->
+
+### tail_sampling
+
+If some of the spans for a trace end up in a different Agent, `tail_sampling` will not sample correctly.
+Enabling `load_balancing` is necessary if `tail_sampling` is enabled and when there could be more than one Agent instance processing spans for the same trace.
+`load_balancing` will make sure that all spans of a given trace will be processed by the same Agent instance.
+
+### spanmetrics
+
+All spans for a given `service.name` must be processed by the same `spanmetrics` Agent.
+To make sure that this is the case, set up `load_balancing` with `routing_key: service`.
+
+### service_graphs
+
+It is challenging to scale `service_graphs` over multiple Agent instances.
+* For `service_graphs` to work correctly, each "client" span must be paired 
+  with a "server" span in order to calculate metrics such as span duration.
+* If a "client" span goes to one Agent, but a "server" span goes to another Agent, 
+  then no single Agent will be able to pair the spans and a metric won't be generated.
+
+`load_balancing` can solve this problem partially if it is configured with `routing_key: traceID`.
+  * Each Agent will then be able to calculate service graph for each "client"/"server" pair in a trace.
+  * However, it is possible to have a span with similar "server"/"client" values 
+    in a different trace, processed by another Agent.
+  * If two different Agents process similar "server"/"client" spans, 
+    they will generate the same service graph metric series.
+  * If the series from two Agents are the same, this will lead to issues 
+    when writing them to the backend database.
+  * Users could differentiate the series by adding a label such as `"agent_id"`.
+      * Unfortunately, there is currently no method in the Agent to aggregate those series from different Agents and merge them into one series.
+    * A PromQL query could be used to aggregate the metrics from different Agents.
+    * If the metrics are stored in Grafana Mimir, cardinality issues due to `"agent_id"` labels can be solved using [Adaptive Metrics][adaptive-metrics].
+
+A simpler, more scalable alternative to generating service graph metrics in the Agent is to generate them entirely in the backend database. 
+For example, service graphs can be [generated][tempo-servicegraphs] in Grafana Cloud by the Tempo traces database.
+
+[tempo-servicegraphs]: https://grafana.com/docs/tempo/latest/metrics-generator/service_graphs/
+[adaptive-metrics]: https://grafana.com/docs/grafana-cloud/cost-management-and-billing/reduce-costs/metrics-costs/control-metrics-usage-via-adaptive-metrics/
+
+### Example Kubernetes configuration
+{{< collapse title="Example Kubernetes configuration with DNS load balancing" >}}
+```yaml
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: grafana-cloud-monitoring
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: agent-traces
+  namespace: grafana-cloud-monitoring
+spec:
+  ports:
+  - name: agent-traces-otlp-grpc
+    port: 9411
+    protocol: TCP
+    targetPort: 9411
+  selector:
+    name: agent-traces
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: k6-trace-generator
+  namespace: grafana-cloud-monitoring
+spec:
+  minReadySeconds: 10
+  replicas: 1
+  revisionHistoryLimit: 1
+  selector:
+    matchLabels:
+      name: k6-trace-generator
+  template:
+    metadata:
+      labels:
+        name: k6-trace-generator
+    spec:
+      containers:
+      - env:
+        - name: ENDPOINT
+          value: agent-traces-headless.grafana-cloud-monitoring.svc.cluster.local:9411
+        image: ghcr.io/grafana/xk6-client-tracing:v0.0.2
+        imagePullPolicy: IfNotPresent
+        name: k6-trace-generator
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: agent-traces
+  namespace: grafana-cloud-monitoring
+spec:
+  minReadySeconds: 10
+  replicas: 3
+  revisionHistoryLimit: 1
+  selector:
+    matchLabels:
+      name: agent-traces
+  template:
+    metadata:
+      labels:
+        name: agent-traces
+    spec:
+      containers:
+      - args:
+        - -config.file=/etc/agent/agent.yaml
+        command:
+        - /bin/grafana-agent
+        image: grafana/agent:v0.38.0
+        imagePullPolicy: IfNotPresent
+        name: agent-traces
+        ports:
+        - containerPort: 9411
+          name: otlp-grpc
+          protocol: TCP
+        - containerPort: 34621
+          name: agent-lb
+          protocol: TCP
+        volumeMounts:
+        - mountPath: /etc/agent
+          name: agent-traces
+      volumes:
+      - configMap:
+          name: agent-traces
+        name: agent-traces
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: agent-traces-headless
+  namespace: grafana-cloud-monitoring
+spec:
+  clusterIP: None
+  ports:
+  - name: agent-lb
+    port: 34621
+    protocol: TCP
+    targetPort: agent-lb
+  selector:
+    name: agent-traces
+  type: ClusterIP
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: agent-traces
+  namespace: grafana-cloud-monitoring
+data:
+  agent.yaml: |
+    traces:
+      configs:
+      - name: default
+        load_balancing:
+          exporter:
+            insecure: true
+          resolver:
+            dns:
+              hostname: agent-traces-headless.grafana-cloud-monitoring.svc.cluster.local
+              port: 34621
+              timeout: 5s
+              interval: 60s
+          receiver_port: 34621
+        receivers:
+          otlp:
+            protocols:
+              grpc:
+                endpoint: 0.0.0.0:9411
+        remote_write:
+        - basic_auth:
+            username: 111111
+            password: pass
+          endpoint: tempo-prod-06-prod-gb-south-0.grafana.net:443
+          retry_on_failure:
+            enabled: false
+```
+{{< /collapse >}}
+
+{{< collapse title="Example Kubernetes configuration with Kubernetes load balancing" >}}
+
+```yaml
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: grafana-cloud-monitoring
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: grafana-agent-traces
+  namespace: grafana-cloud-monitoring
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: grafana-agent-traces-role
+  namespace: grafana-cloud-monitoring
+rules:
+- apiGroups:
+  - ""
+  resources:
+  - endpoints
+  verbs:
+  - list
+  - watch
+  - get
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: grafana-agent-traces-rolebinding
+  namespace: grafana-cloud-monitoring
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: grafana-agent-traces-role
+subjects:
+- kind: ServiceAccount
+  name: grafana-agent-traces
+  namespace: grafana-cloud-monitoring
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: agent-traces
+  namespace: grafana-cloud-monitoring
+spec:
+  ports:
+  - name: agent-traces-otlp-grpc
+    port: 9411
+    protocol: TCP
+    targetPort: 9411
+  selector:
+    name: agent-traces
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: k6-trace-generator
+  namespace: grafana-cloud-monitoring
+spec:
+  minReadySeconds: 10
+  replicas: 1
+  revisionHistoryLimit: 1
+  selector:
+    matchLabels:
+      name: k6-trace-generator
+  template:
+    metadata:
+      labels:
+        name: k6-trace-generator
+    spec:
+      containers:
+      - env:
+        - name: ENDPOINT
+          value: agent-traces-headless.grafana-cloud-monitoring.svc.cluster.local:9411
+        image: ghcr.io/grafana/xk6-client-tracing:v0.0.2
+        imagePullPolicy: IfNotPresent
+        name: k6-trace-generator
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: agent-traces
+  namespace: grafana-cloud-monitoring
+spec:
+  minReadySeconds: 10
+  replicas: 3
+  revisionHistoryLimit: 1
+  selector:
+    matchLabels:
+      name: agent-traces
+  template:
+    metadata:
+      labels:
+        name: agent-traces
+    spec:
+      containers:
+      - args:
+        - -config.file=/etc/agent/agent.yaml
+        command:
+        - /bin/grafana-agent
+        image: grafana/agent:v0.38.0
+        imagePullPolicy: IfNotPresent
+        name: agent-traces
+        ports:
+        - containerPort: 9411
+          name: otlp-grpc
+          protocol: TCP
+        - containerPort: 34621
+          name: agent-lb
+          protocol: TCP
+        volumeMounts:
+        - mountPath: /etc/agent
+          name: agent-traces
+      serviceAccount: grafana-agent-traces
+      volumes:
+      - configMap:
+          name: agent-traces
+        name: agent-traces
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: agent-traces-headless
+  namespace: grafana-cloud-monitoring
+spec:
+  clusterIP: None
+  ports:
+  - name: agent-lb
+    port: 34621
+    protocol: TCP
+    targetPort: agent-lb
+  selector:
+    name: agent-traces
+  type: ClusterIP
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: agent-traces
+  namespace: grafana-cloud-monitoring
+data:
+  agent.yaml: |
+    traces:
+      configs:
+      - name: default
+        load_balancing:
+          exporter:
+            insecure: true
+          resolver:
+            kubernetes:
+              service: agent-traces-headless
+              ports: 
+              - 34621
+          receiver_port: 34621
+        receivers:
+          otlp:
+            protocols:
+              grpc:
+                endpoint: 0.0.0.0:9411
+        remote_write:
+        - basic_auth:
+            username: 111111
+            password: pass
+          endpoint: tempo-prod-06-prod-gb-south-0.grafana.net:443
+          retry_on_failure:
+            enabled: false```
+```
+
+{{< /collapse >}}
+
+You need to fill in correct OTLP credentials prior to running the above examples.
+The example above can be started by using [k3d][]:
+
+```bash
+k3d cluster create grafana-agent-lb-test
+kubectl apply -f kubernetes_config.yaml
+```
+
+To delete the cluster, run:
+```bash
+k3d cluster delete grafana-agent-lb-test
+```
+
+[k3d]: https://k3d.io/v5.6.0/

From 6b939ce77dc34a7c55854ba89b1fdae5bc2c07fb Mon Sep 17 00:00:00 2001
From: Paulin Todev <paulin.todev@gmail.com>
Date: Wed, 10 Jan 2024 08:28:43 +0000
Subject: [PATCH 40/68] Clarify usage of spanmetrics connector with a
 prometheus remote write (#5980)

* Clarify spanmetric generation with prometheus

---------

Signed-off-by: Jack Baldry <jack.baldry@grafana.com>
Co-authored-by: Jack Baldry <jack.baldry@grafana.com>
Co-authored-by: Piotr <17101802+thampiotr@users.noreply.github.com>
Co-authored-by: Clayton Cornell <131809008+clayton-cornell@users.noreply.github.com>
---
 .../connector/spanmetrics/spanmetrics_test.go | 418 +++++++++++++
 .../processor/processortest/processortest.go  |  99 ++++
 .../otelcol.connector.spanmetrics.md          | 549 ++++++++++++++++--
 3 files changed, 1025 insertions(+), 41 deletions(-)

diff --git a/component/otelcol/connector/spanmetrics/spanmetrics_test.go b/component/otelcol/connector/spanmetrics/spanmetrics_test.go
index 62f65966a36c..7a3a3f891504 100644
--- a/component/otelcol/connector/spanmetrics/spanmetrics_test.go
+++ b/component/otelcol/connector/spanmetrics/spanmetrics_test.go
@@ -1,10 +1,14 @@
 package spanmetrics_test
 
 import (
+	"context"
 	"testing"
 	"time"
 
 	"github.com/grafana/agent/component/otelcol/connector/spanmetrics"
+	"github.com/grafana/agent/component/otelcol/processor/processortest"
+	"github.com/grafana/agent/pkg/flow/componenttest"
+	"github.com/grafana/agent/pkg/util"
 	"github.com/grafana/river"
 	"github.com/open-telemetry/opentelemetry-collector-contrib/connector/spanmetricsconnector"
 	"github.com/stretchr/testify/require"
@@ -331,3 +335,417 @@ func TestArguments_UnmarshalRiver(t *testing.T) {
 		})
 	}
 }
+
+func testRunProcessor(t *testing.T, processorConfig string, testSignal processortest.Signal) {
+	ctx := componenttest.TestContext(t)
+	testRunProcessorWithContext(ctx, t, processorConfig, testSignal)
+}
+
+func testRunProcessorWithContext(ctx context.Context, t *testing.T, processorConfig string, testSignal processortest.Signal) {
+	l := util.TestLogger(t)
+
+	ctrl, err := componenttest.NewControllerFromID(l, "otelcol.connector.spanmetrics")
+	require.NoError(t, err)
+
+	var args spanmetrics.Arguments
+	require.NoError(t, river.Unmarshal([]byte(processorConfig), &args))
+
+	// Override the arguments so signals get forwarded to the test channel.
+	args.Output = testSignal.MakeOutput()
+
+	prc := processortest.ProcessorRunConfig{
+		Ctx:        ctx,
+		T:          t,
+		Args:       args,
+		TestSignal: testSignal,
+		Ctrl:       ctrl,
+		L:          l,
+	}
+	processortest.TestRunProcessor(prc)
+}
+
+func Test_ComponentIO(t *testing.T) {
+	const defaultInputTrace = `{
+		"resourceSpans": [{
+			"resource": {
+				"attributes": [{
+					"key": "service.name",
+					"value": { "stringValue": "TestSvcName" }
+				},
+				{
+					"key": "res_attribute1",
+					"value": { "intValue": "11" }
+				}]
+			},
+			"scopeSpans": [{
+				"spans": [{
+					"trace_id": "7bba9f33312b3dbb8b2c2c62bb7abe2d",
+					"span_id": "086e83747d0e381e",
+					"name": "TestSpan",
+					"attributes": [{
+						"key": "attribute1",
+						"value": { "intValue": "78" }
+					}]
+				}]
+			}]
+		},{
+			"resource": {
+				"attributes": [{
+					"key": "service.name",
+					"value": { "stringValue": "TestSvcName" }
+				},
+				{
+					"key": "res_attribute1",
+					"value": { "intValue": "11" }
+				}]
+			},
+			"scopeSpans": [{
+				"spans": [{
+					"trace_id": "7bba9f33312b3dbb8b2c2c62bb7abe2d",
+					"span_id": "086e83747d0e381b",
+					"name": "TestSpan",
+					"attributes": [{
+						"key": "attribute1",
+						"value": { "intValue": "78" }
+					}]
+				}]
+			}]
+		}]
+	}`
+
+	tests := []struct {
+		testName              string
+		cfg                   string
+		inputTraceJson        string
+		expectedOutputLogJson string
+	}{
+		{
+			testName: "Sum metric only",
+			cfg: `
+			metrics_flush_interval = "1s"
+			histogram {
+				disable = true
+				explicit {}
+			}
+
+			output {
+				// no-op: will be overridden by test code.
+			}
+		`,
+			inputTraceJson: defaultInputTrace,
+			expectedOutputLogJson: `{
+				"resourceMetrics": [{
+					"resource": {
+						"attributes": [{
+							"key": "service.name",
+							"value": { "stringValue": "TestSvcName" }
+						},
+						{
+							"key": "res_attribute1",
+							"value": { "intValue": "11" }
+						}]
+					},		
+					"scopeMetrics": [{
+						"scope": {
+							"name": "spanmetricsconnector"
+						},
+						"metrics": [{
+							"name": "calls",
+							"sum": {
+								"dataPoints": [{
+									"attributes": [{
+										"key": "service.name",
+										"value": { "stringValue": "TestSvcName" }
+									},
+									{
+										"key": "span.name",
+										"value": { "stringValue": "TestSpan" }
+									},
+									{
+										"key": "span.kind",
+										"value": { "stringValue": "SPAN_KIND_UNSPECIFIED" }
+									},
+									{
+										"key": "status.code",
+										"value": { "stringValue": "STATUS_CODE_UNSET" }
+									}],
+									"startTimeUnixNano": "0",
+									"timeUnixNano": "0",
+									"asInt": "2"
+								}],
+								"aggregationTemporality": 2,
+								"isMonotonic": true
+							}
+						}]
+					}]
+				}]
+			}`,
+		},
+		{
+			testName: "Sum metric only for two spans",
+			cfg: `
+			metrics_flush_interval = "1s"
+			histogram {
+				disable = true
+				explicit {}
+			}
+
+			output {
+				// no-op: will be overridden by test code.
+			}
+		`,
+			inputTraceJson: `{
+				"resourceSpans": [{
+					"resource": {
+						"attributes": [{
+							"key": "service.name",
+							"value": { "stringValue": "TestSvcName" }
+						},
+						{
+							"key": "k8s.pod.name",
+							"value": { "stringValue": "first" }
+						}]
+					},
+					"scopeSpans": [{
+						"spans": [{
+							"trace_id": "7bba9f33312b3dbb8b2c2c62bb7abe2d",
+							"span_id": "086e83747d0e381e",
+							"name": "TestSpan",
+							"attributes": [{
+								"key": "attribute1",
+								"value": { "intValue": "78" }
+							}]
+						}]
+					}]
+				},{
+					"resource": {
+						"attributes": [{
+							"key": "service.name",
+							"value": { "stringValue": "TestSvcName" }
+						},
+						{
+							"key": "k8s.pod.name",
+							"value": { "stringValue": "second" }
+						}]
+					},
+					"scopeSpans": [{
+						"spans": [{
+							"trace_id": "7bba9f33312b3dbb8b2c2c62bb7abe2d",
+							"span_id": "086e83747d0e381b",
+							"name": "TestSpan",
+							"attributes": [{
+								"key": "attribute1",
+								"value": { "intValue": "78" }
+							}]
+						}]
+					}]
+				}]
+			}`,
+			expectedOutputLogJson: `{
+				"resourceMetrics": [{
+					"resource": {
+						"attributes": [{
+							"key": "service.name",
+							"value": { "stringValue": "TestSvcName" }
+						},
+						{
+							"key": "k8s.pod.name",
+							"value": { "stringValue": "first" }
+						}]
+					},		
+					"scopeMetrics": [{
+						"scope": {
+							"name": "spanmetricsconnector"
+						},
+						"metrics": [{
+							"name": "calls",
+							"sum": {
+								"dataPoints": [{
+									"attributes": [{
+										"key": "service.name",
+										"value": { "stringValue": "TestSvcName" }
+									},
+									{
+										"key": "span.name",
+										"value": { "stringValue": "TestSpan" }
+									},
+									{
+										"key": "span.kind",
+										"value": { "stringValue": "SPAN_KIND_UNSPECIFIED" }
+									},
+									{
+										"key": "status.code",
+										"value": { "stringValue": "STATUS_CODE_UNSET" }
+									}],
+									"startTimeUnixNano": "0",
+									"timeUnixNano": "0",
+									"asInt": "1"
+								}],
+								"aggregationTemporality": 2,
+								"isMonotonic": true
+							}
+						}]
+					}]
+				},
+				{
+					"resource": {
+						"attributes": [{
+							"key": "service.name",
+							"value": { "stringValue": "TestSvcName" }
+						},
+						{
+							"key": "k8s.pod.name",
+							"value": { "stringValue": "second" }
+						}]
+					},		
+					"scopeMetrics": [{
+						"scope": {
+							"name": "spanmetricsconnector"
+						},
+						"metrics": [{
+							"name": "calls",
+							"sum": {
+								"dataPoints": [{
+									"attributes": [{
+										"key": "service.name",
+										"value": { "stringValue": "TestSvcName" }
+									},
+									{
+										"key": "span.name",
+										"value": { "stringValue": "TestSpan" }
+									},
+									{
+										"key": "span.kind",
+										"value": { "stringValue": "SPAN_KIND_UNSPECIFIED" }
+									},
+									{
+										"key": "status.code",
+										"value": { "stringValue": "STATUS_CODE_UNSET" }
+									}],
+									"startTimeUnixNano": "0",
+									"timeUnixNano": "0",
+									"asInt": "1"
+								}],
+								"aggregationTemporality": 2,
+								"isMonotonic": true
+							}
+						}]
+					}]
+				}]
+			}`,
+		},
+		{
+			testName: "Sum and histogram",
+			cfg: `
+			metrics_flush_interval = "1s"
+			histogram {
+				explicit {
+					buckets = ["5m", "10m", "30m"]
+				}
+			}
+
+			output {
+				// no-op: will be overridden by test code.
+			}
+		`,
+			inputTraceJson: defaultInputTrace,
+			expectedOutputLogJson: `{
+				"resourceMetrics": [{
+					"resource": {
+						"attributes": [{
+							"key": "service.name",
+							"value": { "stringValue": "TestSvcName" }
+						},
+						{
+							"key": "res_attribute1",
+							"value": { "intValue": "11" }
+						}]
+					},		
+					"scopeMetrics": [{
+						"scope": {
+							"name": "spanmetricsconnector"
+						},
+						"metrics": [{
+							"name": "calls",
+							"sum": {
+								"dataPoints": [{
+									"attributes": [{
+										"key": "service.name",
+										"value": { "stringValue": "TestSvcName" }
+									},
+									{
+										"key": "span.name",
+										"value": { "stringValue": "TestSpan" }
+									},
+									{
+										"key": "span.kind",
+										"value": { "stringValue": "SPAN_KIND_UNSPECIFIED" }
+									},
+									{
+										"key": "status.code",
+										"value": { "stringValue": "STATUS_CODE_UNSET" }
+									}],
+									"startTimeUnixNano": "0",
+									"timeUnixNano": "0",
+									"asInt": "2"
+								}],
+								"aggregationTemporality": 2,
+								"isMonotonic": true
+							}
+						},
+                        {
+                            "name": "duration",
+                            "unit": "ms",
+                            "histogram": {
+                                "dataPoints": [
+                                    {
+                                        "attributes": [
+                                            {
+                                                "key": "service.name",
+                                                "value": {
+                                                    "stringValue": "TestSvcName"
+                                                }
+                                            },
+                                            {
+                                                "key": "span.name",
+                                                "value": {
+                                                    "stringValue": "TestSpan"
+                                                }
+                                            },
+                                            {
+                                                "key": "span.kind",
+                                                "value": {
+                                                    "stringValue": "SPAN_KIND_UNSPECIFIED"
+                                                }
+                                            },
+                                            {
+                                                "key": "status.code",
+                                                "value": {
+                                                    "stringValue": "STATUS_CODE_UNSET"
+                                                }
+                                            }
+                                        ],
+                                        "count": "2",
+                                        "sum": 0,
+                                        "bucketCounts": [ "2", "0", "0", "0" ],
+                                        "explicitBounds": [ 300000, 600000, 1800000 ]
+                                    }
+                                ],
+                                "aggregationTemporality": 2
+                            }
+                        }]
+					}]
+				}]
+			}`,
+		},
+	}
+
+	for _, tt := range tests {
+		t.Run(tt.testName, func(t *testing.T) {
+			var args spanmetrics.Arguments
+			require.NoError(t, river.Unmarshal([]byte(tt.cfg), &args))
+
+			testRunProcessor(t, tt.cfg, processortest.NewTraceToMetricSignal(tt.inputTraceJson, tt.expectedOutputLogJson))
+		})
+	}
+}
diff --git a/component/otelcol/processor/processortest/processortest.go b/component/otelcol/processor/processortest/processortest.go
index 3153e662c656..0298f8e9250b 100644
--- a/component/otelcol/processor/processortest/processortest.go
+++ b/component/otelcol/processor/processortest/processortest.go
@@ -108,6 +108,105 @@ func (s traceToLogSignal) CheckOutput(t *testing.T) {
 	}
 }
 
+//
+// Trace to Metrics
+//
+
+type traceToMetricSignal struct {
+	metricCh              chan pmetric.Metrics
+	inputTrace            ptrace.Traces
+	expectedOuutputMetric pmetric.Metrics
+}
+
+// Any timestamps inside expectedOutputJson should be set to 0.
+func NewTraceToMetricSignal(inputJson string, expectedOutputJson string) Signal {
+	return &traceToMetricSignal{
+		metricCh:              make(chan pmetric.Metrics),
+		inputTrace:            CreateTestTraces(inputJson),
+		expectedOuutputMetric: CreateTestMetrics(expectedOutputJson),
+	}
+}
+
+func (s traceToMetricSignal) MakeOutput() *otelcol.ConsumerArguments {
+	return makeMetricsOutput(s.metricCh)
+}
+
+func (s traceToMetricSignal) ConsumeInput(ctx context.Context, consumer otelcol.Consumer) error {
+	return consumer.ConsumeTraces(ctx, s.inputTrace)
+}
+
+// Set the timestamp of all data points to 0.
+// This helps avoid flaky tests due to timestamps.
+func setMetricTimestampToZero(metrics pmetric.Metrics) {
+	// Loop over all resource metrics
+	for i := 0; i < metrics.ResourceMetrics().Len(); i++ {
+		rm := metrics.ResourceMetrics().At(i)
+		// Loop over all metric scopes.
+		for j := 0; j < rm.ScopeMetrics().Len(); j++ {
+			sm := rm.ScopeMetrics().At(j)
+			// Loop over all metrics.
+			for k := 0; k < sm.Metrics().Len(); k++ {
+				m := sm.Metrics().At(k)
+				switch m.Type() {
+				case pmetric.MetricTypeSum:
+					// Loop over all data points.
+					for l := 0; l < m.Sum().DataPoints().Len(); l++ {
+						// Set the timestamp to 0 to avoid flaky tests.
+						dp := m.Sum().DataPoints().At(l)
+						dp.SetTimestamp(0)
+						dp.SetStartTimestamp(0)
+					}
+				case pmetric.MetricTypeGauge:
+					// Loop over all data points.
+					for l := 0; l < m.Gauge().DataPoints().Len(); l++ {
+						// Set the timestamp to 0 to avoid flaky tests.
+						dp := m.Gauge().DataPoints().At(l)
+						dp.SetTimestamp(0)
+						dp.SetStartTimestamp(0)
+					}
+				case pmetric.MetricTypeHistogram:
+					// Loop over all data points.
+					for l := 0; l < m.Histogram().DataPoints().Len(); l++ {
+						// Set the timestamp to 0 to avoid flaky tests.
+						dp := m.Histogram().DataPoints().At(l)
+						dp.SetTimestamp(0)
+						dp.SetStartTimestamp(0)
+					}
+				case pmetric.MetricTypeSummary:
+					// Loop over all data points.
+					for l := 0; l < m.Summary().DataPoints().Len(); l++ {
+						// Set the timestamp to 0 to avoid flaky tests.
+						dp := m.Summary().DataPoints().At(l)
+						dp.SetTimestamp(0)
+						dp.SetStartTimestamp(0)
+					}
+				}
+			}
+		}
+	}
+}
+
+// Wait for the component to finish and check its output.
+func (s traceToMetricSignal) CheckOutput(t *testing.T) {
+	// Set the timeout to a few seconds so that all components have finished.
+	// Components such as otelcol.connector.spanmetrics may need a few
+	// seconds before they output metrics.
+	timeout := time.Second * 5
+
+	select {
+	case <-time.After(timeout):
+		require.FailNow(t, "failed waiting for metrics")
+	case tr := <-s.metricCh:
+		setMetricTimestampToZero(tr)
+		trStr := marshalMetrics(tr)
+
+		expStr := marshalMetrics(s.expectedOuutputMetric)
+		// Set a field from the json to an empty string to avoid flaky tests containing timestamps.
+
+		require.JSONEq(t, expStr, trStr)
+	}
+}
+
 //
 // Traces
 //
diff --git a/docs/sources/flow/reference/components/otelcol.connector.spanmetrics.md b/docs/sources/flow/reference/components/otelcol.connector.spanmetrics.md
index c1e887b78c9f..23c2eaa0a24d 100644
--- a/docs/sources/flow/reference/components/otelcol.connector.spanmetrics.md
+++ b/docs/sources/flow/reference/components/otelcol.connector.spanmetrics.md
@@ -22,10 +22,25 @@ aggregates Request, Error and Duration (R.E.D) OpenTelemetry metrics from the sp
   including Errors. Multiple metrics can be aggregated if, for instance, a user wishes to
   view call counts just on `service.name` and `span.name`.
 
-- **Error** counts are computed from the Request counts which have an `Error` status code metric dimension.
+  Requests are tracked using a `calls` metric with a `status.code` datapoint attribute set to `Ok`:
+  ```
+  calls { service.name="shipping", span.name="get_shipping/{shippingId}", span.kind="SERVER", status.code="Ok" }
+  ```
+
+- **Error** counts are computed from the number of spans with an `Error` status code.
+
+    Errors are tracked using a `calls` metric with a `status.code` datapoint attribute set to `Error`:
+    ```
+    calls { service.name="shipping", span.name="get_shipping/{shippingId}, span.kind="SERVER", status.code="Error" }
+    ```
 
 - **Duration** is computed from the difference between the span start and end times and inserted
-  into the relevant duration histogram time bucket for each unique set dimensions.
+    into the relevant duration histogram time bucket for each unique set dimensions.
+
+    Span durations are tracked using a `duration` histogram metric:
+    ```
+    duration { service.name="shipping", span.name="get_shipping/{shippingId}", span.kind="SERVER", status.code="Ok" }
+    ```
 
 > **NOTE**: `otelcol.connector.spanmetrics` is a wrapper over the upstream
 > OpenTelemetry Collector `spanmetrics` connector. Bug reports or feature requests
@@ -52,13 +67,13 @@ otelcol.connector.spanmetrics "LABEL" {
 
 `otelcol.connector.spanmetrics` supports the following arguments:
 
-| Name                      | Type       | Description                                             | Default        | Required |
-| ------------------------- | ---------- | ------------------------------------------------------- | -------------- | -------- |
-| `dimensions_cache_size`   | `number`   | How many dimensions to cache.                           | `1000`         | no       |
-| `aggregation_temporality` | `string`   | Configures whether to reset the metrics after flushing. | `"CUMULATIVE"` | no       |
-| `metrics_flush_interval`  | `duration` | How often to flush generated metrics.                   | `"15s"`        | no       |
-| `namespace`               | `string`   | Metric namespace.                                       | `""`           | no       |
-| `exclude_dimensions`      | `list(string)` | List of dimensions to be excluded from the default set of dimensions. | `false` | no |
+| Name                      | Type           | Description                                                           | Default        | Required |
+| ------------------------- | -------------- | --------------------------------------------------------------------- | -------------- | -------- |
+| `dimensions_cache_size`   | `number`       | How many dimensions to cache.                                         | `1000`         | no       |
+| `aggregation_temporality` | `string`       | Configures whether to reset the metrics after flushing.               | `"CUMULATIVE"` | no       |
+| `metrics_flush_interval`  | `duration`     | How often to flush generated metrics.                                 | `"15s"`        | no       |
+| `namespace`               | `string`       | Metric namespace.                                                     | `""`           | no       |
+| `exclude_dimensions`      | `list(string)` | List of dimensions to be excluded from the default set of dimensions. | `false`        | no       |
 
 Adjusting `dimensions_cache_size` can improve the Agent process' memory usage.
 
@@ -130,10 +145,10 @@ The `histogram` block configures the histogram derived from spans' durations.
 
 The following attributes are supported:
 
-| Name   | Type     | Description                     | Default | Required |
-| ------ | -------- | ------------------------------- | ------- | -------- |
-| `unit` | `string` | Configures the histogram units. | `"ms"`  | no       |
-| `disable`| `bool` | Disable all histogram metrics. | `false` | no |
+| Name      | Type     | Description                     | Default | Required |
+| --------- | -------- | ------------------------------- | ------- | -------- |
+| `unit`    | `string` | Configures the histogram units. | `"ms"`  | no       |
+| `disable` | `bool`   | Disable all histogram metrics.  | `false` | no       |
 
 The supported values for `unit` are:
 
@@ -166,9 +181,9 @@ The `exemplars` block configures how to attach exemplars to histograms.
 
 The following attributes are supported:
 
-| Name       | Type     | Description                                                      | Default | Required |
-| ---------- | -------- | ---------------------------------------------------------------- | ------- | -------- |
-| `enabled`  | `bool`   | Configures whether to add exemplars to histograms.               | `false` | no       |
+| Name      | Type   | Description                                        | Default | Required |
+| --------- | ------ | -------------------------------------------------- | ------- | -------- |
+| `enabled` | `bool` | Configures whether to add exemplars to histograms. | `false` | no       |
 
 ### output block
 
@@ -184,6 +199,348 @@ The following fields are exported and can be referenced by other components:
 
 `input` accepts `otelcol.Consumer` traces telemetry data. It does not accept metrics and logs.
 
+## Handling of resource attributes
+
+[Handling of resource attributes]: #handling-of-resource-attributes
+
+`otelcol.connector.spanmetrics` is an OTLP-native component. As such, it aims to preserve the resource attributes of spans.
+
+1. For example, let's assume that there are two incoming resources spans with the same `service.name` and `k8s.pod.name` resource attributes.
+   {{< collapse title="Example JSON of two incoming spans." >}}
+
+   ```json
+   {
+     "resourceSpans": [
+       {
+         "resource": {
+           "attributes": [
+             {
+               "key": "service.name",
+               "value": { "stringValue": "TestSvcName" }
+             },
+             {
+               "key": "k8s.pod.name",
+               "value": { "stringValue": "first" }
+             }
+           ]
+         },
+         "scopeSpans": [
+           {
+             "spans": [
+               {
+                 "trace_id": "7bba9f33312b3dbb8b2c2c62bb7abe2d",
+                 "span_id": "086e83747d0e381e",
+                 "name": "TestSpan",
+                 "attributes": [
+                   {
+                     "key": "attribute1",
+                     "value": { "intValue": "78" }
+                   }
+                 ]
+               }
+             ]
+           }
+         ]
+       },
+       {
+         "resource": {
+           "attributes": [
+             {
+               "key": "service.name",
+               "value": { "stringValue": "TestSvcName" }
+             },
+             {
+               "key": "k8s.pod.name",
+               "value": { "stringValue": "first" }
+             }
+           ]
+         },
+         "scopeSpans": [
+           {
+             "spans": [
+               {
+                 "trace_id": "7bba9f33312b3dbb8b2c2c62bb7abe2d",
+                 "span_id": "086e83747d0e381b",
+                 "name": "TestSpan",
+                 "attributes": [
+                   {
+                     "key": "attribute1",
+                     "value": { "intValue": "78" }
+                   }
+                 ]
+               }
+             ]
+           }
+         ]
+       }
+     ]
+   }
+   ```
+
+   {{< /collapse >}}
+
+1. `otelcol.connector.spanmetrics` will preserve the incoming `service.name` and `k8s.pod.name` resource attributes by attaching them to the output metrics resource.
+   Only one metric resource will be created, because both span resources have identical resource attributes.
+   {{< collapse title="Example JSON of one outgoing metric resource." >}}
+
+   ```json
+   {
+     "resourceMetrics": [
+       {
+         "resource": {
+           "attributes": [
+             {
+               "key": "service.name",
+               "value": { "stringValue": "TestSvcName" }
+             },
+             {
+               "key": "k8s.pod.name",
+               "value": { "stringValue": "first" }
+             }
+           ]
+         },
+         "scopeMetrics": [
+           {
+             "scope": { "name": "spanmetricsconnector" },
+             "metrics": [
+               {
+                 "name": "calls",
+                 "sum": {
+                   "dataPoints": [
+                     {
+                       "attributes": [
+                         {
+                           "key": "service.name",
+                           "value": { "stringValue": "TestSvcName" }
+                         },
+                         {
+                           "key": "span.name",
+                           "value": { "stringValue": "TestSpan" }
+                         },
+                         {
+                           "key": "span.kind",
+                           "value": { "stringValue": "SPAN_KIND_UNSPECIFIED" }
+                         },
+                         {
+                           "key": "status.code",
+                           "value": { "stringValue": "STATUS_CODE_UNSET" }
+                         }
+                       ],
+                       "startTimeUnixNano": "1702582936761872000",
+                       "timeUnixNano": "1702582936761872012",
+                       "asInt": "2"
+                     }
+                   ],
+                   "aggregationTemporality": 2,
+                   "isMonotonic": true
+                 }
+               }
+             ]
+           }
+         ]
+       }
+     ]
+   }
+   ```
+
+   {{< /collapse >}}
+
+1. Now assume that `otelcol.connector.spanmetrics` receives two incoming resource spans, each with a different value for the `k8s.pod.name` recourse attribute.
+   {{< collapse title="Example JSON of two incoming spans." >}}
+
+   ```json
+   {
+     "resourceSpans": [
+       {
+         "resource": {
+           "attributes": [
+             {
+               "key": "service.name",
+               "value": { "stringValue": "TestSvcName" }
+             },
+             {
+               "key": "k8s.pod.name",
+               "value": { "stringValue": "first" }
+             }
+           ]
+         },
+         "scopeSpans": [
+           {
+             "spans": [
+               {
+                 "trace_id": "7bba9f33312b3dbb8b2c2c62bb7abe2d",
+                 "span_id": "086e83747d0e381e",
+                 "name": "TestSpan",
+                 "attributes": [
+                   {
+                     "key": "attribute1",
+                     "value": { "intValue": "78" }
+                   }
+                 ]
+               }
+             ]
+           }
+         ]
+       },
+       {
+         "resource": {
+           "attributes": [
+             {
+               "key": "service.name",
+               "value": { "stringValue": "TestSvcName" }
+             },
+             {
+               "key": "k8s.pod.name",
+               "value": { "stringValue": "second" }
+             }
+           ]
+         },
+         "scopeSpans": [
+           {
+             "spans": [
+               {
+                 "trace_id": "7bba9f33312b3dbb8b2c2c62bb7abe2d",
+                 "span_id": "086e83747d0e381b",
+                 "name": "TestSpan",
+                 "attributes": [
+                   {
+                     "key": "attribute1",
+                     "value": { "intValue": "78" }
+                   }
+                 ]
+               }
+             ]
+           }
+         ]
+       }
+     ]
+   }
+   ```
+
+   {{< /collapse >}}
+
+1. To preserve the values of all resource attributes, `otelcol.connector.spanmetrics` will produce two resource metrics.
+   Each resource metric will have a different value for the `k8s.pod.name` recourse attribute.
+   This way none of the resource attributes will be lost during the generation of metrics.
+   {{< collapse title="Example JSON of two outgoing metric resources." >}}
+   ```json
+   {
+     "resourceMetrics": [
+       {
+         "resource": {
+           "attributes": [
+             {
+               "key": "service.name",
+               "value": { "stringValue": "TestSvcName" }
+             },
+             {
+               "key": "k8s.pod.name",
+               "value": { "stringValue": "first" }
+             }
+           ]
+         },
+         "scopeMetrics": [
+           {
+             "scope": {
+               "name": "spanmetricsconnector"
+             },
+             "metrics": [
+               {
+                 "name": "calls",
+                 "sum": {
+                   "dataPoints": [
+                     {
+                       "attributes": [
+                         {
+                           "key": "service.name",
+                           "value": { "stringValue": "TestSvcName" }
+                         },
+                         {
+                           "key": "span.name",
+                           "value": { "stringValue": "TestSpan" }
+                         },
+                         {
+                           "key": "span.kind",
+                           "value": { "stringValue": "SPAN_KIND_UNSPECIFIED" }
+                         },
+                         {
+                           "key": "status.code",
+                           "value": { "stringValue": "STATUS_CODE_UNSET" }
+                         }
+                       ],
+                       "startTimeUnixNano": "1702582936761872000",
+                       "timeUnixNano": "1702582936761872012",
+                       "asInt": "1"
+                     }
+                   ],
+                   "aggregationTemporality": 2,
+                   "isMonotonic": true
+                 }
+               }
+             ]
+           }
+         ]
+       },
+       {
+         "resource": {
+           "attributes": [
+             {
+               "key": "service.name",
+               "value": { "stringValue": "TestSvcName" }
+             },
+             {
+               "key": "k8s.pod.name",
+               "value": { "stringValue": "second" }
+             }
+           ]
+         },
+         "scopeMetrics": [
+           {
+             "scope": {
+               "name": "spanmetricsconnector"
+             },
+             "metrics": [
+               {
+                 "name": "calls",
+                 "sum": {
+                   "dataPoints": [
+                     {
+                       "attributes": [
+                         {
+                           "key": "service.name",
+                           "value": { "stringValue": "TestSvcName" }
+                         },
+                         {
+                           "key": "span.name",
+                           "value": { "stringValue": "TestSpan" }
+                         },
+                         {
+                           "key": "span.kind",
+                           "value": { "stringValue": "SPAN_KIND_UNSPECIFIED" }
+                         },
+                         {
+                           "key": "status.code",
+                           "value": { "stringValue": "STATUS_CODE_UNSET" }
+                         }
+                       ],
+                       "startTimeUnixNano": "1702582936761872000",
+                       "timeUnixNano": "1702582936761872012",
+                       "asInt": "1"
+                     }
+                   ],
+                   "aggregationTemporality": 2,
+                   "isMonotonic": true
+                 }
+               }
+             ]
+           }
+         ]
+       }
+     ]
+   }
+   ```
+   {{< /collapse >}}
+
 ## Component health
 
 `otelcol.connector.spanmetrics` is only reported as unhealthy if given an invalid
@@ -259,42 +616,152 @@ otelcol.exporter.otlp "production" {
 
 ### Sending metrics via a Prometheus remote write
 
-In order for a `target_info` metric to be generated, the incoming spans resource scope
-attributes must contain `service.name` and `service.instance.id` attributes.
+The generated metrics can be sent to a Prometheus-compatible database such as Grafana Mimir.
+However, extra steps are required in order to make sure all metric samples are received.
+This is because `otelcol.connector.spanmetrics` aims to [preserve resource attributes][Handling of resource attributes] in the metrics which it outputs.
 
-The `target_info` metric will be generated for each resource scope, while OpenTelemetry
-metric names and attributes will be normalized to be compliant with Prometheus naming rules.
+Unfortunately, the [Prometheus data model][prom-data-model] has no notion of resource attributes.
+This means that if `otelcol.connector.spanmetrics` outputs metrics with identical metric attributes,
+but different resource attributes, `otelcol.exporter.prometheus` will convert the metrics into the same metric series.
+This problem can be solved by doing **either** of the following:
 
-```river
-otelcol.receiver.otlp "default" {
-  http {}
-  grpc {}
+- **Recommended approach:** Prior to `otelcol.connector.spanmetrics`, remove all resource attributes from the incoming spans which are not needed by `otelcol.connector.spanmetrics`.
+  {{< collapse title="Example River configuration to remove unnecessary resource attributes." >}}
+  ```river
+  otelcol.receiver.otlp "default" {
+    http {}
+    grpc {}
 
-  output {
-    traces  = [otelcol.connector.spanmetrics.default.input]
+    output {
+      traces  = [otelcol.processor.transform.default.input]
+    }
   }
-}
 
-otelcol.connector.spanmetrics "default" {
-  histogram {
-    exponential {}
+  // Remove all resource attributes except the ones which
+  // the otelcol.connector.spanmetrics needs.
+  // If this is not done, otelcol.exporter.prometheus may fail to
+  // write some samples due to an "err-mimir-sample-duplicate-timestamp" error.
+  // This is because the spanmetricsconnector will create a new
+  // metrics resource scope for each traces resource scope.
+  otelcol.processor.transform "default" {
+    error_mode = "ignore"
+
+    trace_statements {
+      context = "resource"
+      statements = [
+        // We keep only the "service.name" and "special.attr" resource attributes,
+        // because they are the only ones which otelcol.connector.spanmetrics needs.
+        //
+        // There is no need to list "span.name", "span.kind", and "status.code"
+        // here because they are properties of the span (and not resource attributes):
+        // https://github.com/open-telemetry/opentelemetry-proto/blob/v1.0.0/opentelemetry/proto/trace/v1/trace.proto
+        `keep_keys(attributes, ["service.name", "special.attr"])`,
+      ]
+    }
+
+    output {
+      traces  = [otelcol.connector.spanmetrics.default.input]
+    }
   }
 
-  output {
-    metrics = [otelcol.exporter.prometheus.default.input]
+  otelcol.connector.spanmetrics "default" {
+    histogram {
+      explicit {}
+    }
+
+    dimension {
+      name = "special.attr"
+    }
+    output {
+      metrics = [otelcol.exporter.prometheus.default.input]
+    }
   }
-}
 
-otelcol.exporter.prometheus "default" {
-  forward_to = [prometheus.remote_write.mimir.receiver]
-}
+  otelcol.exporter.prometheus "default" {
+    forward_to = [prometheus.remote_write.mimir.receiver]
+  }
 
-prometheus.remote_write "mimir" {
-  endpoint {
-    url = "http://mimir:9009/api/v1/push"
+  prometheus.remote_write "mimir" {
+    endpoint {
+      url = "http://mimir:9009/api/v1/push"
+    }
   }
-}
-```
+  ```
+  {{< /collapse >}}
+
+- Or, after `otelcol.connector.spanmetrics`, copy each of the resource attributes as a metric datapoint attribute.
+This has the advantage that the resource attributes will be visible as metric labels.
+However, the {{< term "cardinality" >}}cardinality{{< /term >}} of the metrics may be much higher, which could increase the cost of storing and querying them.
+The example below uses the [merge_maps][] OTTL function.
+
+  {{< collapse title="Example River configuration to add all resource attributes as metric datapoint attributes." >}}
+  ```river
+  otelcol.receiver.otlp "default" {
+    http {}
+    grpc {}
+
+    output {
+      traces  = [otelcol.connector.spanmetrics.default.input]
+    }
+  }
+
+  otelcol.connector.spanmetrics "default" {
+    histogram {
+      explicit {}
+    }
+
+    dimension {
+      name = "special.attr"
+    }
+    output {
+      metrics = [otelcol.processor.transform.default.input]
+    }
+  }
+
+  // Insert resource attributes as metric data point attributes.
+  otelcol.processor.transform "default" {
+    error_mode = "ignore"
+
+    metric_statements {
+      context = "datapoint"
+      statements = [
+        // "insert" means that a metric datapoint attribute will be inserted
+        // only if an attribute with the same key does not already exist.
+        `merge_maps(attributes, resource.attributes, "insert")`,
+      ]
+    }
+
+    output {
+      metrics = [otelcol.exporter.prometheus.default.input]
+    }
+  }
+
+  otelcol.exporter.prometheus "default" {
+    forward_to = [prometheus.remote_write.mimir.receiver]
+  }
+
+  prometheus.remote_write "mimir" {
+    endpoint {
+      url = "http://mimir:9009/api/v1/push"
+    }
+  }
+  ```
+  {{< /collapse >}}
+
+If the resource attributes are not treated in either of the ways described above, an error such as this one could be logged by `prometheus.remote_write`:
+`the sample has been rejected because another sample with the same timestamp, but a different value, has already been ingested (err-mimir-sample-duplicate-timestamp)`.
+
+{{% admonition type="note" %}}
+In order for a Prometheus `target_info` metric to be generated, the incoming spans resource scope
+attributes must contain `service.name` and `service.instance.id` attributes.
+
+The `target_info` metric will be generated for each resource scope, while OpenTelemetry
+metric names and attributes will be normalized to be compliant with Prometheus naming rules.
+{{% /admonition %}}
+
+[merge_maps]: https://github.com/open-telemetry/opentelemetry-collector-contrib/blob/{{< param "OTEL_VERSION" >}}/pkg/ottl/ottlfuncs/README.md#merge_maps
+[prom-data-model]: https://prometheus.io/docs/concepts/data_model/
+
 <!-- START GENERATED COMPATIBLE COMPONENTS -->
 
 ## Compatible components

From ab2be32453f4f1de71cce7ca58814f2a1748f7da Mon Sep 17 00:00:00 2001
From: Paschalis Tsilias <tpaschalis@users.noreply.github.com>
Date: Wed, 10 Jan 2024 10:55:56 +0200
Subject: [PATCH 41/68] loki.source.docker: deduplicate matching container IDs
 (#6055)

Signed-off-by: Paschalis Tsilias <paschalis.tsilias@grafana.com>
Co-authored-by: Clayton Cornell <131809008+clayton-cornell@users.noreply.github.com>
---
 CHANGELOG.md                                  |  4 ++
 Makefile                                      |  2 +-
 component/loki/source/docker/docker.go        |  5 +++
 component/loki/source/docker/docker_test.go   | 40 +++++++++++++++++++
 .../components/loki.source.docker.md          |  8 ++++
 5 files changed, 58 insertions(+), 1 deletion(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index bfc3e447ddcb..07db2c44cee5 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -103,11 +103,15 @@ v0.39.0 (2024-01-09)
 - Add `max_cache_size` to `prometheus.relabel` to allow configurability instead of hard coded 100,000. (@mattdurham)
 
 - Add support for `http_sd_config` within a `scrape_config` for prometheus to flow config conversion. (@erikbaranowski)
+
 - `discovery.lightsail` now supports additional parameters for configuring HTTP client settings. (@ptodev)
 - Add `sample_age_limit` to remote_write config to drop samples older than a specified duration. (@marctc)
 
 - Handle paths in the Kubelet URL for `discovery.kubelet`. (@petewall)
 
+- `loki.source.docker` now deduplicates targets which report the same container
+  ID. (@tpaschalis)
+
 ### Bugfixes
 
 - Update `pyroscope.ebpf` to fix a logical bug causing to profile to many kthreads instead of regular processes https://github.com/grafana/pyroscope/pull/2778 (@korniltsev)
diff --git a/Makefile b/Makefile
index 024a624d2223..5b7d4f424759 100644
--- a/Makefile
+++ b/Makefile
@@ -174,7 +174,7 @@ lint: agentlint
 # more without -race for packages that have known race detection issues.
 test:
 	$(GO_ENV) go test $(GO_FLAGS) -race $(shell go list ./... | grep -v /integration-tests/)
-	$(GO_ENV) go test $(GO_FLAGS) ./pkg/integrations/node_exporter ./pkg/logs ./pkg/operator ./pkg/util/k8s ./component/otelcol/processor/tail_sampling ./component/loki/source/file
+	$(GO_ENV) go test $(GO_FLAGS) ./pkg/integrations/node_exporter ./pkg/logs ./pkg/operator ./pkg/util/k8s ./component/otelcol/processor/tail_sampling ./component/loki/source/file ./component/loki/source/docker
 
 test-packages:
 	docker pull $(BUILD_IMAGE)
diff --git a/component/loki/source/docker/docker.go b/component/loki/source/docker/docker.go
index 400b1d30b5e6..193f27f1d7a2 100644
--- a/component/loki/source/docker/docker.go
+++ b/component/loki/source/docker/docker.go
@@ -215,6 +215,7 @@ func (c *Component) Update(args component.Arguments) error {
 
 	// Convert input targets into targets to give to tailer.
 	targets := make([]*dt.Target, 0, len(newArgs.Targets))
+	seenTargets := make(map[string]struct{}, len(newArgs.Targets))
 
 	for _, target := range newArgs.Targets {
 		containerID, ok := target[dockerLabelContainerID]
@@ -222,6 +223,10 @@ func (c *Component) Update(args component.Arguments) error {
 			level.Debug(c.opts.Logger).Log("msg", "docker target did not include container ID label:"+dockerLabelContainerID)
 			continue
 		}
+		if _, seen := seenTargets[containerID]; seen {
+			continue
+		}
+		seenTargets[containerID] = struct{}{}
 
 		var labels = make(model.LabelSet)
 		for k, v := range target {
diff --git a/component/loki/source/docker/docker_test.go b/component/loki/source/docker/docker_test.go
index 51c2a4568cff..c4b99c47388c 100644
--- a/component/loki/source/docker/docker_test.go
+++ b/component/loki/source/docker/docker_test.go
@@ -1,3 +1,5 @@
+//go:build !race
+
 package docker
 
 import (
@@ -5,9 +7,11 @@ import (
 	"testing"
 	"time"
 
+	"github.com/grafana/agent/component"
 	"github.com/grafana/agent/pkg/flow/componenttest"
 	"github.com/grafana/agent/pkg/util"
 	"github.com/grafana/river"
+	"github.com/prometheus/client_golang/prometheus"
 	"github.com/stretchr/testify/require"
 )
 
@@ -33,3 +37,39 @@ func Test(t *testing.T) {
 
 	require.NoError(t, ctrl.WaitRunning(time.Minute))
 }
+
+func TestDuplicateTargets(t *testing.T) {
+	// Use host that works on all platforms (including Windows).
+	var cfg = `
+		host       = "tcp://127.0.0.1:9376"
+		targets    = [
+			{__meta_docker_container_id = "foo", __meta_docker_port_private = "8080"},
+			{__meta_docker_container_id = "foo", __meta_docker_port_private = "8081"},
+		]
+		forward_to = []
+	`
+
+	var args Arguments
+	err := river.Unmarshal([]byte(cfg), &args)
+	require.NoError(t, err)
+
+	ctrl, err := componenttest.NewControllerFromID(util.TestLogger(t), "loki.source.docker")
+	require.NoError(t, err)
+
+	go func() {
+		err := ctrl.Run(context.Background(), args)
+		require.NoError(t, err)
+	}()
+
+	require.NoError(t, ctrl.WaitRunning(time.Minute))
+
+	cmp, err := New(component.Options{
+		ID:         "loki.source.docker.test",
+		Logger:     util.TestFlowLogger(t),
+		Registerer: prometheus.NewRegistry(),
+		DataPath:   t.TempDir(),
+	}, args)
+	require.NoError(t, err)
+
+	require.Len(t, cmp.manager.tasks, 1)
+}
diff --git a/docs/sources/flow/reference/components/loki.source.docker.md b/docs/sources/flow/reference/components/loki.source.docker.md
index cbf77163d646..3dd327f70a80 100644
--- a/docs/sources/flow/reference/components/loki.source.docker.md
+++ b/docs/sources/flow/reference/components/loki.source.docker.md
@@ -131,6 +131,14 @@ fully qualified name) to store its _positions file_. The positions file
 stores the read offsets so that if there is a component or Agent restart,
 `loki.source.docker` can pick up tailing from the same spot.
 
+If the target's argument contains multiple entries with the same container
+ID (for example as a result of `discovery.docker` picking up multiple exposed
+ports or networks), `loki.source.docker` will deduplicate them, and only keep
+the first of each container ID instances, based on the
+`__meta_docker_container_id` label.  As such, the Docker daemon is queried
+for each container ID only once, and only one target will be available in the
+component's debug info.
+
 ## Example
 
 This example collects log entries from the files specified in the `targets`

From f70a0cd1d6ee30d19fd0622bc0e522999f5277d2 Mon Sep 17 00:00:00 2001
From: Sergey Akhmatov <stell@genossen.ru>
Date: Wed, 10 Jan 2024 14:13:06 +0400
Subject: [PATCH 42/68] prometheus.exporter.kafka: fix ignored config option
 (#5991)

Co-authored-by: Paschalis Tsilias <paschalis.tsilias@grafana.com>
---
 CHANGELOG.md                                      |  2 ++
 component/prometheus/exporter/kafka/kafka.go      |  1 +
 component/prometheus/exporter/kafka/kafka_test.go |  1 +
 pkg/integrations/kafka_exporter/kafka_exporter.go | 10 ++++++++--
 4 files changed, 12 insertions(+), 2 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 07db2c44cee5..8654bd9567bb 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -22,6 +22,8 @@ Main (unreleased)
 - Fix an issue in `remote.s3` where the exported content of an object would be an empty string if `remote.s3` failed to fully retrieve
   the file in a single read call. (@grafana/agent-squad)
 
+- Utilize the `instance` Argument of `prometheus.exporter.kafka` when set. (@akhmatov-s)
+
 ### Other changes
 
 - Removed support for Windows 2012 in line with Microsoft end of life. (@mattdurham)
diff --git a/component/prometheus/exporter/kafka/kafka.go b/component/prometheus/exporter/kafka/kafka.go
index f68985b50d2c..e57bb69cd5a1 100644
--- a/component/prometheus/exporter/kafka/kafka.go
+++ b/component/prometheus/exporter/kafka/kafka.go
@@ -90,6 +90,7 @@ func createExporter(opts component.Options, args component.Arguments, defaultIns
 
 func (a *Arguments) Convert() *kafka_exporter.Config {
 	return &kafka_exporter.Config{
+		Instance:                a.Instance,
 		KafkaURIs:               a.KafkaURIs,
 		UseSASL:                 a.UseSASL,
 		UseSASLHandshake:        a.UseSASLHandshake,
diff --git a/component/prometheus/exporter/kafka/kafka_test.go b/component/prometheus/exporter/kafka/kafka_test.go
index 4209da21cb7d..7529677dbef6 100644
--- a/component/prometheus/exporter/kafka/kafka_test.go
+++ b/component/prometheus/exporter/kafka/kafka_test.go
@@ -83,6 +83,7 @@ func TestRiverConvert(t *testing.T) {
 	}
 	converted := orig.Convert()
 	expected := kafka_exporter.Config{
+		Instance:                "example",
 		KafkaURIs:               []string{"localhost:9092", "localhost:19092"},
 		KafkaVersion:            "2.0.0",
 		MetadataRefreshInterval: "1m",
diff --git a/pkg/integrations/kafka_exporter/kafka_exporter.go b/pkg/integrations/kafka_exporter/kafka_exporter.go
index b8cc491b120a..5d50fe1452ea 100644
--- a/pkg/integrations/kafka_exporter/kafka_exporter.go
+++ b/pkg/integrations/kafka_exporter/kafka_exporter.go
@@ -28,6 +28,9 @@ var DefaultConfig = Config{
 
 // Config controls kafka_exporter
 type Config struct {
+	// The instance label for metrics.
+	Instance string `yaml:"instance,omitempty"`
+
 	// Address array (host:port) of Kafka server
 	KafkaURIs []string `yaml:"kafka_uris,omitempty"`
 
@@ -109,11 +112,14 @@ func (c *Config) Name() string {
 // there is not exactly one Kafka node, the user must manually provide
 // their own value for instance key in the common config.
 func (c *Config) InstanceKey(agentKey string) (string, error) {
-	if len(c.KafkaURIs) != 1 {
+	if len(c.KafkaURIs) == 1 {
+		return c.KafkaURIs[0], nil
+	}
+	if c.Instance == "" && len(c.KafkaURIs) > 1 {
 		return "", fmt.Errorf("an automatic value for `instance` cannot be determined from %d kafka servers, manually provide one for this integration", len(c.KafkaURIs))
 	}
 
-	return c.KafkaURIs[0], nil
+	return c.Instance, nil
 }
 
 // NewIntegration creates a new elasticsearch_exporter

From 0e8794e3bb7e8ed80492973b5c06ecf7e6df6c95 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Marc=20Tudur=C3=AD?= <marctc@protonmail.com>
Date: Wed, 10 Jan 2024 16:18:57 +0100
Subject: [PATCH 43/68] helm: update agent version to v0.39.0 (#6092)

---
 operations/helm/charts/grafana-agent/CHANGELOG.md          | 7 +++++++
 operations/helm/charts/grafana-agent/Chart.yaml            | 4 ++--
 operations/helm/charts/grafana-agent/README.md             | 2 +-
 .../grafana-agent/templates/controllers/daemonset.yaml     | 2 +-
 .../grafana-agent/templates/controllers/statefulset.yaml   | 2 +-
 .../grafana-agent/templates/controllers/daemonset.yaml     | 2 +-
 .../grafana-agent/templates/controllers/daemonset.yaml     | 2 +-
 .../grafana-agent/templates/controllers/daemonset.yaml     | 2 +-
 .../grafana-agent/templates/controllers/deployment.yaml    | 2 +-
 .../grafana-agent/templates/controllers/deployment.yaml    | 2 +-
 .../grafana-agent/templates/controllers/statefulset.yaml   | 2 +-
 .../grafana-agent/templates/controllers/statefulset.yaml   | 2 +-
 .../grafana-agent/templates/controllers/daemonset.yaml     | 2 +-
 .../grafana-agent/templates/controllers/daemonset.yaml     | 2 +-
 .../grafana-agent/templates/controllers/daemonset.yaml     | 2 +-
 .../grafana-agent/templates/controllers/daemonset.yaml     | 2 +-
 .../grafana-agent/templates/controllers/daemonset.yaml     | 2 +-
 .../grafana-agent/templates/controllers/daemonset.yaml     | 2 +-
 .../grafana-agent/templates/controllers/daemonset.yaml     | 2 +-
 .../grafana-agent/templates/controllers/daemonset.yaml     | 2 +-
 .../grafana-agent/templates/controllers/daemonset.yaml     | 2 +-
 .../grafana-agent/templates/controllers/daemonset.yaml     | 2 +-
 .../grafana-agent/templates/controllers/daemonset.yaml     | 2 +-
 .../grafana-agent/templates/controllers/daemonset.yaml     | 2 +-
 .../grafana-agent/templates/controllers/daemonset.yaml     | 2 +-
 .../grafana-agent/templates/controllers/daemonset.yaml     | 2 +-
 .../grafana-agent/templates/controllers/daemonset.yaml     | 2 +-
 .../grafana-agent/templates/controllers/daemonset.yaml     | 2 +-
 28 files changed, 35 insertions(+), 28 deletions(-)

diff --git a/operations/helm/charts/grafana-agent/CHANGELOG.md b/operations/helm/charts/grafana-agent/CHANGELOG.md
index 5fdfcb54ba54..f281cc937317 100644
--- a/operations/helm/charts/grafana-agent/CHANGELOG.md
+++ b/operations/helm/charts/grafana-agent/CHANGELOG.md
@@ -10,6 +10,13 @@ internal API changes are not present.
 Unreleased
 ----------
 
+0.31.0 (2024-01-10)
+-------------------
+
+### Enhancements
+
+- Update Grafana Agent version to v0.39.0. (@marctc)
+
 ### Bugfixes
 
 - Configure namespace for service account when RBAC resources is created. (@hainenber)
diff --git a/operations/helm/charts/grafana-agent/Chart.yaml b/operations/helm/charts/grafana-agent/Chart.yaml
index 45ab45dd8ba2..992503befc2a 100644
--- a/operations/helm/charts/grafana-agent/Chart.yaml
+++ b/operations/helm/charts/grafana-agent/Chart.yaml
@@ -2,8 +2,8 @@ apiVersion: v2
 name: grafana-agent
 description: 'Grafana Agent'
 type: application
-version: 0.30.0
-appVersion: 'v0.38.1'
+version: 0.31.0
+appVersion: 'v0.39.0'
 
 dependencies:
   - name: crds
diff --git a/operations/helm/charts/grafana-agent/README.md b/operations/helm/charts/grafana-agent/README.md
index 2423a23cbc66..281fc208cf23 100644
--- a/operations/helm/charts/grafana-agent/README.md
+++ b/operations/helm/charts/grafana-agent/README.md
@@ -1,6 +1,6 @@
 # Grafana Agent Helm chart
 
-![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![Version: 0.30.0](https://img.shields.io/badge/Version-0.30.0-informational?style=flat-square) ![AppVersion: v0.38.1](https://img.shields.io/badge/AppVersion-v0.38.1-informational?style=flat-square)
+![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![Version: 0.31.0](https://img.shields.io/badge/Version-0.31.0-informational?style=flat-square) ![AppVersion: v0.39.0](https://img.shields.io/badge/AppVersion-v0.39.0-informational?style=flat-square)
 
 Helm chart for deploying [Grafana Agent][] to Kubernetes.
 
diff --git a/operations/helm/tests/additional-serviceaccount-label/grafana-agent/templates/controllers/daemonset.yaml b/operations/helm/tests/additional-serviceaccount-label/grafana-agent/templates/controllers/daemonset.yaml
index 4a6e72f132cf..a99f2fd4cbf6 100644
--- a/operations/helm/tests/additional-serviceaccount-label/grafana-agent/templates/controllers/daemonset.yaml
+++ b/operations/helm/tests/additional-serviceaccount-label/grafana-agent/templates/controllers/daemonset.yaml
@@ -25,7 +25,7 @@ spec:
       serviceAccountName: grafana-agent
       containers:
         - name: grafana-agent
-          image: docker.io/grafana/agent:v0.38.1
+          image: docker.io/grafana/agent:v0.39.0
           imagePullPolicy: IfNotPresent
           args:
             - run
diff --git a/operations/helm/tests/clustering/grafana-agent/templates/controllers/statefulset.yaml b/operations/helm/tests/clustering/grafana-agent/templates/controllers/statefulset.yaml
index af3b0c1fd7e4..340ec8ca04fd 100644
--- a/operations/helm/tests/clustering/grafana-agent/templates/controllers/statefulset.yaml
+++ b/operations/helm/tests/clustering/grafana-agent/templates/controllers/statefulset.yaml
@@ -28,7 +28,7 @@ spec:
       serviceAccountName: grafana-agent
       containers:
         - name: grafana-agent
-          image: docker.io/grafana/agent:v0.38.1
+          image: docker.io/grafana/agent:v0.39.0
           imagePullPolicy: IfNotPresent
           args:
             - run
diff --git a/operations/helm/tests/controller-volumes-extra/grafana-agent/templates/controllers/daemonset.yaml b/operations/helm/tests/controller-volumes-extra/grafana-agent/templates/controllers/daemonset.yaml
index ef17189995f4..01a82312a35c 100644
--- a/operations/helm/tests/controller-volumes-extra/grafana-agent/templates/controllers/daemonset.yaml
+++ b/operations/helm/tests/controller-volumes-extra/grafana-agent/templates/controllers/daemonset.yaml
@@ -25,7 +25,7 @@ spec:
       serviceAccountName: grafana-agent
       containers:
         - name: grafana-agent
-          image: docker.io/grafana/agent:v0.38.1
+          image: docker.io/grafana/agent:v0.39.0
           imagePullPolicy: IfNotPresent
           args:
             - run
diff --git a/operations/helm/tests/create-daemonset-hostnetwork/grafana-agent/templates/controllers/daemonset.yaml b/operations/helm/tests/create-daemonset-hostnetwork/grafana-agent/templates/controllers/daemonset.yaml
index b43c8b537889..0f6c1dc493bd 100644
--- a/operations/helm/tests/create-daemonset-hostnetwork/grafana-agent/templates/controllers/daemonset.yaml
+++ b/operations/helm/tests/create-daemonset-hostnetwork/grafana-agent/templates/controllers/daemonset.yaml
@@ -25,7 +25,7 @@ spec:
       serviceAccountName: grafana-agent
       containers:
         - name: grafana-agent
-          image: docker.io/grafana/agent:v0.38.1
+          image: docker.io/grafana/agent:v0.39.0
           imagePullPolicy: IfNotPresent
           args:
             - run
diff --git a/operations/helm/tests/create-daemonset/grafana-agent/templates/controllers/daemonset.yaml b/operations/helm/tests/create-daemonset/grafana-agent/templates/controllers/daemonset.yaml
index 4a6e72f132cf..a99f2fd4cbf6 100644
--- a/operations/helm/tests/create-daemonset/grafana-agent/templates/controllers/daemonset.yaml
+++ b/operations/helm/tests/create-daemonset/grafana-agent/templates/controllers/daemonset.yaml
@@ -25,7 +25,7 @@ spec:
       serviceAccountName: grafana-agent
       containers:
         - name: grafana-agent
-          image: docker.io/grafana/agent:v0.38.1
+          image: docker.io/grafana/agent:v0.39.0
           imagePullPolicy: IfNotPresent
           args:
             - run
diff --git a/operations/helm/tests/create-deployment-autoscaling/grafana-agent/templates/controllers/deployment.yaml b/operations/helm/tests/create-deployment-autoscaling/grafana-agent/templates/controllers/deployment.yaml
index 74959bc95b9e..b8d1f559d7a4 100644
--- a/operations/helm/tests/create-deployment-autoscaling/grafana-agent/templates/controllers/deployment.yaml
+++ b/operations/helm/tests/create-deployment-autoscaling/grafana-agent/templates/controllers/deployment.yaml
@@ -25,7 +25,7 @@ spec:
       serviceAccountName: grafana-agent
       containers:
         - name: grafana-agent
-          image: docker.io/grafana/agent:v0.38.1
+          image: docker.io/grafana/agent:v0.39.0
           imagePullPolicy: IfNotPresent
           args:
             - run
diff --git a/operations/helm/tests/create-deployment/grafana-agent/templates/controllers/deployment.yaml b/operations/helm/tests/create-deployment/grafana-agent/templates/controllers/deployment.yaml
index e6b30b603cd8..7de807bd5238 100644
--- a/operations/helm/tests/create-deployment/grafana-agent/templates/controllers/deployment.yaml
+++ b/operations/helm/tests/create-deployment/grafana-agent/templates/controllers/deployment.yaml
@@ -26,7 +26,7 @@ spec:
       serviceAccountName: grafana-agent
       containers:
         - name: grafana-agent
-          image: docker.io/grafana/agent:v0.38.1
+          image: docker.io/grafana/agent:v0.39.0
           imagePullPolicy: IfNotPresent
           args:
             - run
diff --git a/operations/helm/tests/create-statefulset-autoscaling/grafana-agent/templates/controllers/statefulset.yaml b/operations/helm/tests/create-statefulset-autoscaling/grafana-agent/templates/controllers/statefulset.yaml
index 9ad9d83989c9..6a127404aecb 100644
--- a/operations/helm/tests/create-statefulset-autoscaling/grafana-agent/templates/controllers/statefulset.yaml
+++ b/operations/helm/tests/create-statefulset-autoscaling/grafana-agent/templates/controllers/statefulset.yaml
@@ -27,7 +27,7 @@ spec:
       serviceAccountName: grafana-agent
       containers:
         - name: grafana-agent
-          image: docker.io/grafana/agent:v0.38.1
+          image: docker.io/grafana/agent:v0.39.0
           imagePullPolicy: IfNotPresent
           args:
             - run
diff --git a/operations/helm/tests/create-statefulset/grafana-agent/templates/controllers/statefulset.yaml b/operations/helm/tests/create-statefulset/grafana-agent/templates/controllers/statefulset.yaml
index 14069e356960..c0b85e38db1d 100644
--- a/operations/helm/tests/create-statefulset/grafana-agent/templates/controllers/statefulset.yaml
+++ b/operations/helm/tests/create-statefulset/grafana-agent/templates/controllers/statefulset.yaml
@@ -28,7 +28,7 @@ spec:
       serviceAccountName: grafana-agent
       containers:
         - name: grafana-agent
-          image: docker.io/grafana/agent:v0.38.1
+          image: docker.io/grafana/agent:v0.39.0
           imagePullPolicy: IfNotPresent
           args:
             - run
diff --git a/operations/helm/tests/custom-config/grafana-agent/templates/controllers/daemonset.yaml b/operations/helm/tests/custom-config/grafana-agent/templates/controllers/daemonset.yaml
index 4a6e72f132cf..a99f2fd4cbf6 100644
--- a/operations/helm/tests/custom-config/grafana-agent/templates/controllers/daemonset.yaml
+++ b/operations/helm/tests/custom-config/grafana-agent/templates/controllers/daemonset.yaml
@@ -25,7 +25,7 @@ spec:
       serviceAccountName: grafana-agent
       containers:
         - name: grafana-agent
-          image: docker.io/grafana/agent:v0.38.1
+          image: docker.io/grafana/agent:v0.39.0
           imagePullPolicy: IfNotPresent
           args:
             - run
diff --git a/operations/helm/tests/default-values/grafana-agent/templates/controllers/daemonset.yaml b/operations/helm/tests/default-values/grafana-agent/templates/controllers/daemonset.yaml
index 4a6e72f132cf..a99f2fd4cbf6 100644
--- a/operations/helm/tests/default-values/grafana-agent/templates/controllers/daemonset.yaml
+++ b/operations/helm/tests/default-values/grafana-agent/templates/controllers/daemonset.yaml
@@ -25,7 +25,7 @@ spec:
       serviceAccountName: grafana-agent
       containers:
         - name: grafana-agent
-          image: docker.io/grafana/agent:v0.38.1
+          image: docker.io/grafana/agent:v0.39.0
           imagePullPolicy: IfNotPresent
           args:
             - run
diff --git a/operations/helm/tests/enable-servicemonitor/grafana-agent/templates/controllers/daemonset.yaml b/operations/helm/tests/enable-servicemonitor/grafana-agent/templates/controllers/daemonset.yaml
index 4a6e72f132cf..a99f2fd4cbf6 100644
--- a/operations/helm/tests/enable-servicemonitor/grafana-agent/templates/controllers/daemonset.yaml
+++ b/operations/helm/tests/enable-servicemonitor/grafana-agent/templates/controllers/daemonset.yaml
@@ -25,7 +25,7 @@ spec:
       serviceAccountName: grafana-agent
       containers:
         - name: grafana-agent
-          image: docker.io/grafana/agent:v0.38.1
+          image: docker.io/grafana/agent:v0.39.0
           imagePullPolicy: IfNotPresent
           args:
             - run
diff --git a/operations/helm/tests/envFrom/grafana-agent/templates/controllers/daemonset.yaml b/operations/helm/tests/envFrom/grafana-agent/templates/controllers/daemonset.yaml
index 47e8370cba61..e9b849f6ee3f 100644
--- a/operations/helm/tests/envFrom/grafana-agent/templates/controllers/daemonset.yaml
+++ b/operations/helm/tests/envFrom/grafana-agent/templates/controllers/daemonset.yaml
@@ -25,7 +25,7 @@ spec:
       serviceAccountName: grafana-agent
       containers:
         - name: grafana-agent
-          image: docker.io/grafana/agent:v0.38.1
+          image: docker.io/grafana/agent:v0.39.0
           imagePullPolicy: IfNotPresent
           args:
             - run
diff --git a/operations/helm/tests/existing-config/grafana-agent/templates/controllers/daemonset.yaml b/operations/helm/tests/existing-config/grafana-agent/templates/controllers/daemonset.yaml
index 204bc2f541ff..fbdb2752b3ed 100644
--- a/operations/helm/tests/existing-config/grafana-agent/templates/controllers/daemonset.yaml
+++ b/operations/helm/tests/existing-config/grafana-agent/templates/controllers/daemonset.yaml
@@ -25,7 +25,7 @@ spec:
       serviceAccountName: grafana-agent
       containers:
         - name: grafana-agent
-          image: docker.io/grafana/agent:v0.38.1
+          image: docker.io/grafana/agent:v0.39.0
           imagePullPolicy: IfNotPresent
           args:
             - run
diff --git a/operations/helm/tests/extra-env/grafana-agent/templates/controllers/daemonset.yaml b/operations/helm/tests/extra-env/grafana-agent/templates/controllers/daemonset.yaml
index a68d13450e34..c2ee2305fce5 100644
--- a/operations/helm/tests/extra-env/grafana-agent/templates/controllers/daemonset.yaml
+++ b/operations/helm/tests/extra-env/grafana-agent/templates/controllers/daemonset.yaml
@@ -25,7 +25,7 @@ spec:
       serviceAccountName: grafana-agent
       containers:
         - name: grafana-agent
-          image: docker.io/grafana/agent:v0.38.1
+          image: docker.io/grafana/agent:v0.39.0
           imagePullPolicy: IfNotPresent
           args:
             - run
diff --git a/operations/helm/tests/extra-ports/grafana-agent/templates/controllers/daemonset.yaml b/operations/helm/tests/extra-ports/grafana-agent/templates/controllers/daemonset.yaml
index 4b2b1c4bad5c..8e51da6a86f5 100644
--- a/operations/helm/tests/extra-ports/grafana-agent/templates/controllers/daemonset.yaml
+++ b/operations/helm/tests/extra-ports/grafana-agent/templates/controllers/daemonset.yaml
@@ -25,7 +25,7 @@ spec:
       serviceAccountName: grafana-agent
       containers:
         - name: grafana-agent
-          image: docker.io/grafana/agent:v0.38.1
+          image: docker.io/grafana/agent:v0.39.0
           imagePullPolicy: IfNotPresent
           args:
             - run
diff --git a/operations/helm/tests/faro-ingress/grafana-agent/templates/controllers/daemonset.yaml b/operations/helm/tests/faro-ingress/grafana-agent/templates/controllers/daemonset.yaml
index c4d490e0fc70..d366cde166d3 100644
--- a/operations/helm/tests/faro-ingress/grafana-agent/templates/controllers/daemonset.yaml
+++ b/operations/helm/tests/faro-ingress/grafana-agent/templates/controllers/daemonset.yaml
@@ -25,7 +25,7 @@ spec:
       serviceAccountName: grafana-agent
       containers:
         - name: grafana-agent
-          image: docker.io/grafana/agent:v0.38.1
+          image: docker.io/grafana/agent:v0.39.0
           imagePullPolicy: IfNotPresent
           args:
             - run
diff --git a/operations/helm/tests/global-image-pullsecrets/grafana-agent/templates/controllers/daemonset.yaml b/operations/helm/tests/global-image-pullsecrets/grafana-agent/templates/controllers/daemonset.yaml
index 1a6efea09785..808c1056ba2b 100644
--- a/operations/helm/tests/global-image-pullsecrets/grafana-agent/templates/controllers/daemonset.yaml
+++ b/operations/helm/tests/global-image-pullsecrets/grafana-agent/templates/controllers/daemonset.yaml
@@ -30,7 +30,7 @@ spec:
         - name: global-cred
       containers:
         - name: grafana-agent
-          image: docker.io/grafana/agent:v0.38.1
+          image: docker.io/grafana/agent:v0.39.0
           imagePullPolicy: IfNotPresent
           args:
             - run
diff --git a/operations/helm/tests/global-image-registry/grafana-agent/templates/controllers/daemonset.yaml b/operations/helm/tests/global-image-registry/grafana-agent/templates/controllers/daemonset.yaml
index 692304acd2f1..014f4b84925d 100644
--- a/operations/helm/tests/global-image-registry/grafana-agent/templates/controllers/daemonset.yaml
+++ b/operations/helm/tests/global-image-registry/grafana-agent/templates/controllers/daemonset.yaml
@@ -25,7 +25,7 @@ spec:
       serviceAccountName: grafana-agent
       containers:
         - name: grafana-agent
-          image: quay.io/grafana/agent:v0.38.1
+          image: quay.io/grafana/agent:v0.39.0
           imagePullPolicy: IfNotPresent
           args:
             - run
diff --git a/operations/helm/tests/initcontainers/grafana-agent/templates/controllers/daemonset.yaml b/operations/helm/tests/initcontainers/grafana-agent/templates/controllers/daemonset.yaml
index ccf576637bed..70c184364e58 100644
--- a/operations/helm/tests/initcontainers/grafana-agent/templates/controllers/daemonset.yaml
+++ b/operations/helm/tests/initcontainers/grafana-agent/templates/controllers/daemonset.yaml
@@ -43,7 +43,7 @@ spec:
             name: geoip
       containers:
         - name: grafana-agent
-          image: docker.io/grafana/agent:v0.38.1
+          image: docker.io/grafana/agent:v0.39.0
           imagePullPolicy: IfNotPresent
           args:
             - run
diff --git a/operations/helm/tests/local-image-pullsecrets/grafana-agent/templates/controllers/daemonset.yaml b/operations/helm/tests/local-image-pullsecrets/grafana-agent/templates/controllers/daemonset.yaml
index 9aa16540da65..319e1cf07ad2 100644
--- a/operations/helm/tests/local-image-pullsecrets/grafana-agent/templates/controllers/daemonset.yaml
+++ b/operations/helm/tests/local-image-pullsecrets/grafana-agent/templates/controllers/daemonset.yaml
@@ -27,7 +27,7 @@ spec:
         - name: local-cred
       containers:
         - name: grafana-agent
-          image: docker.io/grafana/agent:v0.38.1
+          image: docker.io/grafana/agent:v0.39.0
           imagePullPolicy: IfNotPresent
           args:
             - run
diff --git a/operations/helm/tests/local-image-registry/grafana-agent/templates/controllers/daemonset.yaml b/operations/helm/tests/local-image-registry/grafana-agent/templates/controllers/daemonset.yaml
index 692304acd2f1..014f4b84925d 100644
--- a/operations/helm/tests/local-image-registry/grafana-agent/templates/controllers/daemonset.yaml
+++ b/operations/helm/tests/local-image-registry/grafana-agent/templates/controllers/daemonset.yaml
@@ -25,7 +25,7 @@ spec:
       serviceAccountName: grafana-agent
       containers:
         - name: grafana-agent
-          image: quay.io/grafana/agent:v0.38.1
+          image: quay.io/grafana/agent:v0.39.0
           imagePullPolicy: IfNotPresent
           args:
             - run
diff --git a/operations/helm/tests/nodeselectors-and-tolerations/grafana-agent/templates/controllers/daemonset.yaml b/operations/helm/tests/nodeselectors-and-tolerations/grafana-agent/templates/controllers/daemonset.yaml
index 8cb19e413aa5..21338cf3979f 100644
--- a/operations/helm/tests/nodeselectors-and-tolerations/grafana-agent/templates/controllers/daemonset.yaml
+++ b/operations/helm/tests/nodeselectors-and-tolerations/grafana-agent/templates/controllers/daemonset.yaml
@@ -25,7 +25,7 @@ spec:
       serviceAccountName: grafana-agent
       containers:
         - name: grafana-agent
-          image: docker.io/grafana/agent:v0.38.1
+          image: docker.io/grafana/agent:v0.39.0
           imagePullPolicy: IfNotPresent
           args:
             - run
diff --git a/operations/helm/tests/sidecars/grafana-agent/templates/controllers/daemonset.yaml b/operations/helm/tests/sidecars/grafana-agent/templates/controllers/daemonset.yaml
index f2d72440edf6..b98de68b1306 100644
--- a/operations/helm/tests/sidecars/grafana-agent/templates/controllers/daemonset.yaml
+++ b/operations/helm/tests/sidecars/grafana-agent/templates/controllers/daemonset.yaml
@@ -25,7 +25,7 @@ spec:
       serviceAccountName: grafana-agent
       containers:
         - name: grafana-agent
-          image: docker.io/grafana/agent:v0.38.1
+          image: docker.io/grafana/agent:v0.39.0
           imagePullPolicy: IfNotPresent
           args:
             - run
diff --git a/operations/helm/tests/static-mode/grafana-agent/templates/controllers/daemonset.yaml b/operations/helm/tests/static-mode/grafana-agent/templates/controllers/daemonset.yaml
index 34b4d0a38504..1f9e23a47bf0 100644
--- a/operations/helm/tests/static-mode/grafana-agent/templates/controllers/daemonset.yaml
+++ b/operations/helm/tests/static-mode/grafana-agent/templates/controllers/daemonset.yaml
@@ -25,7 +25,7 @@ spec:
       serviceAccountName: grafana-agent
       containers:
         - name: grafana-agent
-          image: docker.io/grafana/agent:v0.38.1
+          image: docker.io/grafana/agent:v0.39.0
           imagePullPolicy: IfNotPresent
           args:
             - -config.file=/etc/agent/config.yaml

From 340cc95d0028ba25ed36450983885e9adae2bc5d Mon Sep 17 00:00:00 2001
From: Piotr <17101802+thampiotr@users.noreply.github.com>
Date: Wed, 10 Jan 2024 18:13:35 +0000
Subject: [PATCH 44/68] Split 'Start agent' into per-platform pages (#6087)

* Split 'Start agent' into per-platform pages

* Add links from Start to Configure

* feedback & fix typo
---
 docs/sources/flow/setup/deploy-agent.md       |   2 +-
 docs/sources/flow/setup/install/_index.md     |   4 +-
 docs/sources/flow/setup/install/binary.md     |  11 +-
 docs/sources/flow/setup/install/linux.md      |   4 +-
 docs/sources/flow/setup/install/macos.md      |   4 +-
 docs/sources/flow/setup/install/windows.md    |   4 +-
 docs/sources/flow/setup/start-agent.md        | 257 ------------------
 docs/sources/flow/setup/start/_index.md       |  31 +++
 docs/sources/flow/setup/start/binary.md       | 126 +++++++++
 docs/sources/flow/setup/start/linux.md        |  75 +++++
 docs/sources/flow/setup/start/macos.md        |  69 +++++
 docs/sources/flow/setup/start/windows.md      |  54 ++++
 .../flow/tasks/migrate/from-prometheus.md     |   4 +-
 .../flow/tasks/migrate/from-promtail.md       |   4 +-
 .../sources/flow/tasks/migrate/from-static.md |   4 +-
 15 files changed, 374 insertions(+), 279 deletions(-)
 delete mode 100644 docs/sources/flow/setup/start-agent.md
 create mode 100644 docs/sources/flow/setup/start/_index.md
 create mode 100644 docs/sources/flow/setup/start/binary.md
 create mode 100644 docs/sources/flow/setup/start/linux.md
 create mode 100644 docs/sources/flow/setup/start/macos.md
 create mode 100644 docs/sources/flow/setup/start/windows.md

diff --git a/docs/sources/flow/setup/deploy-agent.md b/docs/sources/flow/setup/deploy-agent.md
index 60afd38aeb17..0396b537123c 100644
--- a/docs/sources/flow/setup/deploy-agent.md
+++ b/docs/sources/flow/setup/deploy-agent.md
@@ -4,7 +4,7 @@ aliases:
 - /docs/grafana-cloud/monitor-infrastructure/agent/flow/setup/deploy-agent/
 - /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/setup/deploy-agent/
 - /docs/grafana-cloud/send-data/agent/flow/setup/deploy-agent/
-canonical: https://grafana.com/docs/agent/latest/flow/setup/start-agent/
+canonical: https://grafana.com/docs/agent/latest/flow/setup/deploy-agent/
 description: Learn about possible deployment topologies for Grafana Agent Flow
 menuTitle: Deploy Grafana Agent Flow
 title: Grafana Agent Flow deployment topologies
diff --git a/docs/sources/flow/setup/install/_index.md b/docs/sources/flow/setup/install/_index.md
index 8305e7bf9a39..c9bb81a239b4 100644
--- a/docs/sources/flow/setup/install/_index.md
+++ b/docs/sources/flow/setup/install/_index.md
@@ -6,8 +6,8 @@ aliases:
 - /docs/grafana-cloud/send-data/agent/flow/setup/install/
 - /docs/sources/flow/install/
 canonical: https://grafana.com/docs/agent/latest/flow/setup/install/
-description: Learn how to install Grafana Agent  Flow
-menuTitle: Install Grafana Agent Flow
+description: Learn how to install Grafana Agent Flow
+menuTitle: Install
 title: Install Grafana Agent Flow
 weight: 50
 ---
diff --git a/docs/sources/flow/setup/install/binary.md b/docs/sources/flow/setup/install/binary.md
index 88560dbf63e0..ed55b7e5e873 100644
--- a/docs/sources/flow/setup/install/binary.md
+++ b/docs/sources/flow/setup/install/binary.md
@@ -8,7 +8,7 @@ aliases:
 canonical: https://grafana.com/docs/agent/latest/flow/setup/install/binary/
 description: Learn how to install Grafana Agent Flow as a standalone binary
 menuTitle: Standalone
-title: Install Grafana Agent  Flow as a standalone binary
+title: Install Grafana Agent Flow as a standalone binary
 weight: 600
 ---
 
@@ -45,12 +45,9 @@ To download {{< param "PRODUCT_NAME" >}} as a standalone binary, perform the fol
 
 ## Next steps
 
-- [Start {{< param "PRODUCT_NAME" >}}[Start]
-- [Configure {{< param "PRODUCT_NAME" >}}[Configure]
+- [Start {{< param "PRODUCT_NAME" >}}][Start]
 
 {{% docs/reference %}}
-[Start]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/setup/start-agent.md#standalone-binary"
-[Start]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/setup/start-agent.md#standalone-binary"
-[Configure]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/tasks/configure"
-[Configure]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/tasks/configure/"
+[Start]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/setup/start/binary.md"
+[Start]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/setup/start/binary.md"
 {{% /docs/reference %}}
diff --git a/docs/sources/flow/setup/install/linux.md b/docs/sources/flow/setup/install/linux.md
index 12e4f3323e7e..be7bd6246454 100644
--- a/docs/sources/flow/setup/install/linux.md
+++ b/docs/sources/flow/setup/install/linux.md
@@ -123,8 +123,8 @@ To uninstall {{< param "PRODUCT_NAME" >}} on Linux, run the following commands i
 - [Configure {{< param "PRODUCT_NAME" >}}][Configure]
 
 {{% docs/reference %}}
-[Start]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/setup/start-agent.md#linux"
-[Start]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/setup/start-agent.md#linux"
+[Start]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/setup/start/linux.md"
+[Start]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/setup/start/linux.md"
 [Configure]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/tasks/configure/configure-linux.md"
 [Configure]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/tasks/configure/configure-linux.md"
 {{% /docs/reference %}}
diff --git a/docs/sources/flow/setup/install/macos.md b/docs/sources/flow/setup/install/macos.md
index 9aa7e86ee265..5c61c6c82b95 100644
--- a/docs/sources/flow/setup/install/macos.md
+++ b/docs/sources/flow/setup/install/macos.md
@@ -72,8 +72,8 @@ brew uninstall grafana-agent-flow
 [Homebrew]: https://brew.sh
 
 {{% docs/reference %}}
-[Start]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/setup/start-agent.md#macos"
-[Start]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/setup/start-agent.md#macos"
+[Start]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/setup/start/macos.md"
+[Start]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/setup/start/macos.md"
 [Configure]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/tasks/configure/configure-macos.md"
 [Configure]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/tasks/configure/configure-macos.md"
 {{% /docs/reference %}}
diff --git a/docs/sources/flow/setup/install/windows.md b/docs/sources/flow/setup/install/windows.md
index 031b0caeab06..5157967a07e4 100644
--- a/docs/sources/flow/setup/install/windows.md
+++ b/docs/sources/flow/setup/install/windows.md
@@ -84,8 +84,8 @@ This includes any configuration files in the installation directory.
 [latest]: https://github.com/grafana/agent/releases/latest
 
 {{% docs/reference %}}
-[Start]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/setup/start-agent.md#windows"
-[Start]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/setup/start-agent.md#windows"
+[Start]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/setup/start/windows.md"
+[Start]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/setup/start/windows.md"
 [Configure]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/tasks/configure/configure-windows.md"
 [Configure]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/tasks/configure/configure-windows.md"
 [data collection]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/data-collection.md"
diff --git a/docs/sources/flow/setup/start-agent.md b/docs/sources/flow/setup/start-agent.md
deleted file mode 100644
index b8bd97a75e05..000000000000
--- a/docs/sources/flow/setup/start-agent.md
+++ /dev/null
@@ -1,257 +0,0 @@
----
-aliases:
-- /docs/grafana-cloud/agent/flow/setup/start-agent/
-- /docs/grafana-cloud/monitor-infrastructure/agent/flow/setup/start-agent/
-- /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/setup/start-agent/
-- /docs/grafana-cloud/send-data/agent/flow/setup/start-agent/
-canonical: https://grafana.com/docs/agent/latest/flow/setup/start-agent/
-description: Learn how to start, restart, and stop Grafana Agent after it is installed
-menuTitle: Start Grafana Agent Flow
-title: Start, restart, and stop Grafana Agent Flow
-weight: 800
----
-
-# Start, restart, and stop {{% param "PRODUCT_NAME" %}}
-
-You can start, restart, and stop {{< param "PRODUCT_NAME" >}} after it is installed.
-
-## Linux
-
-{{< param "PRODUCT_NAME" >}} is installed as a [systemd][] service on Linux.
-
-[systemd]: https://systemd.io/
-
-### Start {{% param "PRODUCT_NAME" %}}
-
-To start {{< param "PRODUCT_NAME" >}}, run the following command in a terminal window:
-
-```shell
-sudo systemctl start grafana-agent-flow
-```
-
-(Optional) To verify that the service is running, run the following command in a terminal window:
-
-```shell
-sudo systemctl status grafana-agent-flow
-```
-
-### Configure {{% param "PRODUCT_NAME" %}} to start at boot
-
-To automatically run {{< param "PRODUCT_NAME" >}} when the system starts, run the following command in a terminal window:
-
-```shell
-sudo systemctl enable grafana-agent-flow.service
-```
-
-### Restart {{% param "PRODUCT_NAME" %}}
-
-To restart {{< param "PRODUCT_NAME" >}}, run the following command in a terminal window:
-
-```shell
-sudo systemctl restart grafana-agent-flow
-```
-
-### Stop {{% param "PRODUCT_NAME" %}}
-
-To stop {{< param "PRODUCT_NAME" >}}, run the following command in a terminal window:
-
-```shell
-sudo systemctl stop grafana-agent-flow
-```
-
-### View {{% param "PRODUCT_NAME" %}} logs on Linux
-
-To view {{< param "PRODUCT_NAME" >}} log files, run the following command in a terminal window:
-
-```shell
-sudo journalctl -u grafana-agent-flow
-```
-
-## macOS
-
-{{< param "PRODUCT_NAME" >}} is installed as a launchd service on macOS.
-
-### Start {{% param "PRODUCT_NAME" %}}
-
-To start {{< param "PRODUCT_NAME" >}}, run the following command in a terminal window:
-
-```shell
-brew services start grafana-agent-flow
-```
-
-{{< param "PRODUCT_NAME" >}} automatically runs when the system starts.
-
-(Optional) To verify that the service is running, run the following command in a terminal window:
-
-```shell
-brew services info grafana-agent-flow
-```
-
-### Restart {{% param "PRODUCT_NAME" %}}
-
-To restart {{< param "PRODUCT_NAME" >}}, run the following command in a terminal window:
-
-```shell
-brew services restart grafana-agent-flow
-```
-
-### Stop {{% param "PRODUCT_NAME" %}}
-
-To stop {{< param "PRODUCT_NAME" >}}, run the following command in a terminal window:
-
-```shell
-brew services stop grafana-agent-flow
-```
-
-### View {{% param "PRODUCT_NAME" %}} logs on macOS
-
-By default, logs are written to `$(brew --prefix)/var/log/grafana-agent-flow.log` and
-`$(brew --prefix)/var/log/grafana-agent-flow.err.log`.
-
-If you followed [Configure the {{< param "PRODUCT_NAME" >}} service][Configure] and changed the path where logs are written,
-refer to your current copy of the {{< param "PRODUCT_NAME" >}} formula to locate your log files.
-
-## Windows
-
-{{< param "PRODUCT_NAME" >}} is installed as a Windows Service. The service is configured to automatically run on startup.
-
-To verify that {{< param "PRODUCT_NAME" >}} is running as a Windows Service:
-
-1. Open the Windows Services manager (services.msc):
-
-   1. Right click on the Start Menu and select **Run**.
-
-   1. Type: `services.msc` and click **OK**.
-
-1. Scroll down to find the **{{< param "PRODUCT_NAME" >}}** service and verify that the **Status** is **Running**.
-
-### View {{% param "PRODUCT_NAME" %}} logs
-
-When running on Windows, {{< param "PRODUCT_NAME" >}} writes its logs to Windows Event
-Logs with an event source name of **{{< param "PRODUCT_NAME" >}}**.
-
-To view the logs, perform the following steps:
-
-1. Open the Event Viewer:
-
-   1. Right click on the Start Menu and select **Run**.
-
-   1. Type `eventvwr` and click **OK**.
-
-1. In the Event Viewer, click on **Windows Logs > Application**.
-
-1. Search for events with the source **{{< param "PRODUCT_NAME" >}}**.
-
-## Standalone binary
-
-If you downloaded the standalone binary, you must run {{< param "PRODUCT_NAME" >}} from a terminal or command window.
-
-### Start {{% param "PRODUCT_NAME" %}} on Linux, macOS, or FreeBSD
-
-To start {{< param "PRODUCT_NAME" >}} on Linux, macOS, or FreeBSD, run the following command in a terminal window:
-
-```shell
-AGENT_MODE=flow <BINARY_PATH> run <CONFIG_PATH>
-```
-
-Replace the following:
-
-* _`<BINARY_PATH>`_: The path to the {{< param "PRODUCT_NAME" >}} binary file.
-* _`<CONFIG_PATH>`_: The path to the {{< param "PRODUCT_NAME" >}} configuration file.
-
-### Start {{% param "PRODUCT_NAME" %}} on Windows
-
-To start {{< param "PRODUCT_NAME" >}} on Windows, run the following commands in a command prompt:
-
-```cmd
-set AGENT_MODE=flow
-<BINARY_PATH> run <CONFIG_PATH>
-```
-
-Replace the following:
-
-* _`<BINARY_PATH>`_: The path to the {{< param "PRODUCT_NAME" >}} binary file.
-* _`<CONFIG_PATH>`_: The path to the {{< param "PRODUCT_NAME" >}} configuration file.
-
-### Set up {{% param "PRODUCT_NAME" %}} as a Linux systemd service
-
-You can set up and manage the standalone binary for {{< param "PRODUCT_NAME" >}} as a Linux systemd service.
-
-{{% admonition type="note" %}}
-These steps assume you have a default systemd and {{< param "PRODUCT_NAME" >}} configuration.
-{{% /admonition %}}
-
-1. To create a new user called `grafana-agent-flow` run the following command in a terminal window:
-
-   ```shell
-   sudo useradd --no-create-home --shell /bin/false grafana-agent-flow
-   ```
-
-1. Create a service file in `/etc/systemd/system` called `grafana-agent-flow.service` with the following contents:
-
-   ```systemd
-   [Unit]
-   Description=Vendor-neutral programmable observability pipelines.
-   Documentation=https://grafana.com/docs/agent/latest/flow/
-   Wants=network-online.target
-   After=network-online.target
-
-   [Service]
-   Restart=always
-   User=grafana-agent-flow
-   Environment=HOSTNAME=%H
-   EnvironmentFile=/etc/default/grafana-agent-flow
-   WorkingDirectory=<WORKING_DIRECTORY>
-   ExecStart=<BINARY_PATH> run $CUSTOM_ARGS --storage.path=<WORKING_DIRECTORY> $CONFIG_FILE
-   ExecReload=/usr/bin/env kill -HUP $MAINPID
-   TimeoutStopSec=20s
-   SendSIGKILL=no
-
-   [Install]
-   WantedBy=multi-user.target
-   ```
-
-   Replace the following:
-
-   * _`<BINARY_PATH>`_: The path to the {{< param "PRODUCT_NAME" >}} binary file.
-   * _`<WORKING_DIRECTORY>`_: The path to a working directory, for example `/var/lib/grafana-agent-flow`.
-
-1. Create an environment file in `/etc/default/` called `grafana-agent-flow` with the following contents:
-
-   ```shell
-   ## Path:
-   ## Description: Grafana Agent Flow settings
-   ## Type:        string
-   ## Default:     ""
-   ## ServiceRestart: grafana-agent-flow
-   #
-   # Command line options for grafana-agent
-   #
-   # The configuration file holding the Grafana Agent Flow configuration.
-   CONFIG_FILE="<CONFIG_PATH>"
-
-   # User-defined arguments to pass to the run command.
-   CUSTOM_ARGS=""
-
-   # Restart on system upgrade. Defaults to true.
-   RESTART_ON_UPGRADE=true
-   ```
-
-   Replace the following:
-
-      * _`<CONFIG_PATH>`_: The path to the {{< param "PRODUCT_NAME" >}} configuration file.
-
-1. To reload the service files, run the following command in a terminal window:
-
-   ```shell
-   sudo systemctl daemon-reload
-   ```
-
-1. Use the [Linux](#linux) systemd commands to manage your standalone Linux installation of {{< param "PRODUCT_NAME" >}}.
-
-[release]: https://github.com/grafana/agent/releases/latest
-
-{{% docs/reference %}}
-[Configure]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/tasks/configure/configure-macos.md#configure-the-grafana-agent-service"
-[Configure]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/tasks/configure/configure-macos.md#configure-the-grafana-agent-service"
-{{% /docs/reference %}}
diff --git a/docs/sources/flow/setup/start/_index.md b/docs/sources/flow/setup/start/_index.md
new file mode 100644
index 000000000000..0f989a07f56c
--- /dev/null
+++ b/docs/sources/flow/setup/start/_index.md
@@ -0,0 +1,31 @@
+---
+aliases:
+- /docs/grafana-cloud/agent/flow/setup/start/
+- /docs/grafana-cloud/monitor-infrastructure/agent/flow/setup/start/
+- /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/setup/start/
+- /docs/grafana-cloud/send-data/agent/flow/setup/start/
+- /docs/sources/flow/start/
+# Previous pages aliases for backwards compatibility:
+- /docs/grafana-cloud/agent/flow/setup/start-agent/
+- /docs/grafana-cloud/monitor-infrastructure/agent/flow/setup/start-agent/
+- /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/setup/start-agent/
+- /docs/grafana-cloud/send-data/agent/flow/setup/start-agent/
+- ./start-agent/ # /docs/agent/latest/flow/setup/start-agent/
+canonical: https://grafana.com/docs/agent/latest/flow/setup/start/
+description: Learn how to start Grafana Agent Flow
+menuTitle: Start
+title: Start Grafana Agent Flow
+weight: 50
+---
+
+# Start {{% param "PRODUCT_NAME" %}}
+
+Use the following pages to learn how to start, restart, and stop {{< param "PRODUCT_NAME" >}} after it is installed.
+For installation instructions, refer to [Install {{< param "PRODUCT_NAME" >}}][Install].
+
+{{< section >}}
+
+{{% docs/reference %}}
+[Install]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/setup/install/"
+[Install]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/setup/install/"
+{{% /docs/reference %}}
diff --git a/docs/sources/flow/setup/start/binary.md b/docs/sources/flow/setup/start/binary.md
new file mode 100644
index 000000000000..7d931217280a
--- /dev/null
+++ b/docs/sources/flow/setup/start/binary.md
@@ -0,0 +1,126 @@
+---
+aliases:
+- /docs/grafana-cloud/agent/flow/setup/start/binary/
+- /docs/grafana-cloud/monitor-infrastructure/agent/flow/setup/start/binary/
+- /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/setup/start/binary/
+- /docs/grafana-cloud/send-data/agent/flow/setup/start/binary/
+canonical: https://grafana.com/docs/agent/latest/flow/setup/start/binary/
+description: Learn how to start Grafana Agent Flow as a standalone binary
+menuTitle: Standalone
+title: Start Grafana Agent Flow as a standalone binary
+weight: 600
+---
+
+# Start {{% param "PRODUCT_NAME" %}} as a standalone binary
+
+If you [downloaded][InstallBinary] the standalone binary, you must run {{< param "PRODUCT_NAME" >}} from a terminal or command window.
+
+## Start {{% param "PRODUCT_NAME" %}} on Linux, macOS, or FreeBSD
+
+To start {{< param "PRODUCT_NAME" >}} on Linux, macOS, or FreeBSD, run the following command in a terminal window:
+
+```shell
+AGENT_MODE=flow <BINARY_PATH> run <CONFIG_PATH>
+```
+
+Replace the following:
+
+* _`<BINARY_PATH>`_: The path to the {{< param "PRODUCT_NAME" >}} binary file.
+* _`<CONFIG_PATH>`_: The path to the {{< param "PRODUCT_NAME" >}} configuration file.
+
+## Start {{% param "PRODUCT_NAME" %}} on Windows
+
+To start {{< param "PRODUCT_NAME" >}} on Windows, run the following commands in a command prompt:
+
+```cmd
+set AGENT_MODE=flow
+<BINARY_PATH> run <CONFIG_PATH>
+```
+
+Replace the following:
+
+* _`<BINARY_PATH>`_: The path to the {{< param "PRODUCT_NAME" >}} binary file.
+* _`<CONFIG_PATH>`_: The path to the {{< param "PRODUCT_NAME" >}} configuration file.
+
+## Set up {{% param "PRODUCT_NAME" %}} as a Linux systemd service
+
+You can set up and manage the standalone binary for {{< param "PRODUCT_NAME" >}} as a Linux systemd service.
+
+{{% admonition type="note" %}}
+These steps assume you have a default systemd and {{< param "PRODUCT_NAME" >}} configuration.
+{{% /admonition %}}
+
+1. To create a new user called `grafana-agent-flow` run the following command in a terminal window:
+
+   ```shell
+   sudo useradd --no-create-home --shell /bin/false grafana-agent-flow
+   ```
+
+1. Create a service file in `/etc/systemd/system` called `grafana-agent-flow.service` with the following contents:
+
+   ```systemd
+   [Unit]
+   Description=Vendor-neutral programmable observability pipelines.
+   Documentation=https://grafana.com/docs/agent/latest/flow/
+   Wants=network-online.target
+   After=network-online.target
+
+   [Service]
+   Restart=always
+   User=grafana-agent-flow
+   Environment=HOSTNAME=%H
+   EnvironmentFile=/etc/default/grafana-agent-flow
+   WorkingDirectory=<WORKING_DIRECTORY>
+   ExecStart=<BINARY_PATH> run $CUSTOM_ARGS --storage.path=<WORKING_DIRECTORY> $CONFIG_FILE
+   ExecReload=/usr/bin/env kill -HUP $MAINPID
+   TimeoutStopSec=20s
+   SendSIGKILL=no
+
+   [Install]
+   WantedBy=multi-user.target
+   ```
+
+   Replace the following:
+
+    * _`<BINARY_PATH>`_: The path to the {{< param "PRODUCT_NAME" >}} binary file.
+    * _`<WORKING_DIRECTORY>`_: The path to a working directory, for example `/var/lib/grafana-agent-flow`.
+
+1. Create an environment file in `/etc/default/` called `grafana-agent-flow` with the following contents:
+
+   ```shell
+   ## Path:
+   ## Description: Grafana Agent Flow settings
+   ## Type:        string
+   ## Default:     ""
+   ## ServiceRestart: grafana-agent-flow
+   #
+   # Command line options for grafana-agent
+   #
+   # The configuration file holding the Grafana Agent Flow configuration.
+   CONFIG_FILE="<CONFIG_PATH>"
+
+   # User-defined arguments to pass to the run command.
+   CUSTOM_ARGS=""
+
+   # Restart on system upgrade. Defaults to true.
+   RESTART_ON_UPGRADE=true
+   ```
+
+   Replace the following:
+
+    * _`<CONFIG_PATH>`_: The path to the {{< param "PRODUCT_NAME" >}} configuration file.
+
+1. To reload the service files, run the following command in a terminal window:
+
+   ```shell
+   sudo systemctl daemon-reload
+   ```
+
+1. Use the [Linux][StartLinux] systemd commands to manage your standalone Linux installation of {{< param "PRODUCT_NAME" >}}.
+
+{{% docs/reference %}}
+[InstallBinary]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/setup/install/binary.md"
+[InstallBinary]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/flow/setup/install/binary.md"
+[StartLinux]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/setup/start/linux.md"
+[StartLinux]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/flow/setup/start/linux.md"
+{{% /docs/reference %}}
diff --git a/docs/sources/flow/setup/start/linux.md b/docs/sources/flow/setup/start/linux.md
new file mode 100644
index 000000000000..673f15d2c7a1
--- /dev/null
+++ b/docs/sources/flow/setup/start/linux.md
@@ -0,0 +1,75 @@
+---
+aliases:
+  - /docs/grafana-cloud/agent/flow/setup/start/linux/
+  - /docs/grafana-cloud/monitor-infrastructure/agent/flow/setup/start/linux/
+  - /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/setup/start/linux/
+  - /docs/grafana-cloud/send-data/agent/flow/setup/start/linux/
+canonical: https://grafana.com/docs/agent/latest/flow/setup/start/linux/
+description: Learn how to start Grafana Agent Flow on Linux
+menuTitle: Linux
+title: Start Grafana Agent Flow on Linux
+weight: 300
+---
+
+# Start {{% param "PRODUCT_NAME" %}} on Linux
+
+{{< param "PRODUCT_NAME" >}} is [installed][InstallLinux] as a [systemd][] service on Linux.
+
+[systemd]: https://systemd.io/
+
+## Start {{% param "PRODUCT_NAME" %}}
+
+To start {{< param "PRODUCT_NAME" >}}, run the following command in a terminal window:
+
+```shell
+sudo systemctl start grafana-agent-flow
+```
+
+(Optional) To verify that the service is running, run the following command in a terminal window:
+
+```shell
+sudo systemctl status grafana-agent-flow
+```
+
+## Configure {{% param "PRODUCT_NAME" %}} to start at boot
+
+To automatically run {{< param "PRODUCT_NAME" >}} when the system starts, run the following command in a terminal window:
+
+```shell
+sudo systemctl enable grafana-agent-flow.service
+```
+
+## Restart {{% param "PRODUCT_NAME" %}}
+
+To restart {{< param "PRODUCT_NAME" >}}, run the following command in a terminal window:
+
+```shell
+sudo systemctl restart grafana-agent-flow
+```
+
+## Stop {{% param "PRODUCT_NAME" %}}
+
+To stop {{< param "PRODUCT_NAME" >}}, run the following command in a terminal window:
+
+```shell
+sudo systemctl stop grafana-agent-flow
+```
+
+## View {{% param "PRODUCT_NAME" %}} logs on Linux
+
+To view {{< param "PRODUCT_NAME" >}} log files, run the following command in a terminal window:
+
+```shell
+sudo journalctl -u grafana-agent-flow
+```
+
+## Next steps
+
+- [Configure {{< param "PRODUCT_NAME" >}}][Configure]
+
+{{% docs/reference %}}
+[InstallLinux]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/setup/install/linux.md"
+[InstallLinux]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/flow/setup/install/linux.md"
+[Configure]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/tasks/configure/configure-linux.md"
+[Configure]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/tasks/configure/configure-linux.md"
+{{% /docs/reference %}}
diff --git a/docs/sources/flow/setup/start/macos.md b/docs/sources/flow/setup/start/macos.md
new file mode 100644
index 000000000000..53fe8b05b22f
--- /dev/null
+++ b/docs/sources/flow/setup/start/macos.md
@@ -0,0 +1,69 @@
+---
+aliases:
+  - /docs/grafana-cloud/agent/flow/setup/start/macos/
+  - /docs/grafana-cloud/monitor-infrastructure/agent/flow/setup/start/macos/
+  - /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/setup/start/macos/
+  - /docs/grafana-cloud/send-data/agent/flow/setup/start/macos/
+canonical: https://grafana.com/docs/agent/latest/flow/setup/start/macos/
+description: Learn how to start Grafana Agent Flow on macOS
+menuTitle: macOS
+title: Start Grafana Agent Flow on macOS
+weight: 400
+---
+
+# Start {{% param "PRODUCT_NAME" %}} on macOS
+
+{{< param "PRODUCT_NAME" >}} is [installed][InstallMacOS] as a launchd service on macOS.
+
+## Start {{% param "PRODUCT_NAME" %}}
+
+To start {{< param "PRODUCT_NAME" >}}, run the following command in a terminal window:
+
+```shell
+brew services start grafana-agent-flow
+```
+
+{{< param "PRODUCT_NAME" >}} automatically runs when the system starts.
+
+(Optional) To verify that the service is running, run the following command in a terminal window:
+
+```shell
+brew services info grafana-agent-flow
+```
+
+## Restart {{% param "PRODUCT_NAME" %}}
+
+To restart {{< param "PRODUCT_NAME" >}}, run the following command in a terminal window:
+
+```shell
+brew services restart grafana-agent-flow
+```
+
+## Stop {{% param "PRODUCT_NAME" %}}
+
+To stop {{< param "PRODUCT_NAME" >}}, run the following command in a terminal window:
+
+```shell
+brew services stop grafana-agent-flow
+```
+
+## View {{% param "PRODUCT_NAME" %}} logs on macOS
+
+By default, logs are written to `$(brew --prefix)/var/log/grafana-agent-flow.log` and
+`$(brew --prefix)/var/log/grafana-agent-flow.err.log`.
+
+If you followed [Configure the {{< param "PRODUCT_NAME" >}} service][ConfigureService] and changed the path where logs are written,
+refer to your current copy of the {{< param "PRODUCT_NAME" >}} formula to locate your log files.
+
+## Next steps
+
+- [Configure {{< param "PRODUCT_NAME" >}}][ConfigureMacOS]
+
+{{% docs/reference %}}
+[InstallMacOS]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/setup/install/macos.md"
+[InstallMacOS]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/flow/setup/install/macos.md"
+[ConfigureMacOS]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/tasks/configure/configure-macos.md"
+[ConfigureMacOS]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/tasks/configure/configure-macos.md"
+[ConfigureService]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/tasks/configure/configure-macos.md#configure-the-grafana-agent-flow-service"
+[ConfigureService]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/tasks/configure/configure-macos.md#configure-the-grafana-agent-flow-service"
+{{% /docs/reference %}}
diff --git a/docs/sources/flow/setup/start/windows.md b/docs/sources/flow/setup/start/windows.md
new file mode 100644
index 000000000000..e586fa075ddc
--- /dev/null
+++ b/docs/sources/flow/setup/start/windows.md
@@ -0,0 +1,54 @@
+---
+aliases:
+  - /docs/grafana-cloud/agent/flow/setup/start/windows/
+  - /docs/grafana-cloud/monitor-infrastructure/agent/flow/setup/start/windows/
+  - /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/setup/start/windows/
+  - /docs/grafana-cloud/send-data/agent/flow/setup/start/windows/
+canonical: https://grafana.com/docs/agent/latest/flow/setup/start/windows/
+description: Learn how to start Grafana Agent Flow on Windows
+menuTitle: Windows
+title: Start Grafana Agent Flow on Windows
+weight: 500
+---
+
+# Start {{% param "PRODUCT_NAME" %}} on Windows
+
+{{< param "PRODUCT_NAME" >}} is [installed][InstallWindows] as a Windows Service. The service is configured to automatically run on startup.
+
+To verify that {{< param "PRODUCT_NAME" >}} is running as a Windows Service:
+
+1. Open the Windows Services manager (services.msc):
+
+    1. Right click on the Start Menu and select **Run**.
+
+    1. Type: `services.msc` and click **OK**.
+
+1. Scroll down to find the **{{< param "PRODUCT_NAME" >}}** service and verify that the **Status** is **Running**.
+
+## View {{% param "PRODUCT_NAME" %}} logs
+
+When running on Windows, {{< param "PRODUCT_NAME" >}} writes its logs to Windows Event
+Logs with an event source name of **{{< param "PRODUCT_NAME" >}}**.
+
+To view the logs, perform the following steps:
+
+1. Open the Event Viewer:
+
+    1. Right click on the Start Menu and select **Run**.
+
+    1. Type `eventvwr` and click **OK**.
+
+1. In the Event Viewer, click on **Windows Logs > Application**.
+
+1. Search for events with the source **{{< param "PRODUCT_NAME" >}}**.
+
+## Next steps
+
+- [Configure {{< param "PRODUCT_NAME" >}}][Configure]
+
+{{% docs/reference %}}
+[InstallWindows]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/setup/install/windows.md"
+[InstallWindows]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/flow/setup/install/windows.md"
+[Configure]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/tasks/configure/configure-windows.md"
+[Configure]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/tasks/configure/configure-windows.md"
+{{% /docs/reference %}}
diff --git a/docs/sources/flow/tasks/migrate/from-prometheus.md b/docs/sources/flow/tasks/migrate/from-prometheus.md
index aa106d940b3b..fae212aae6e8 100644
--- a/docs/sources/flow/tasks/migrate/from-prometheus.md
+++ b/docs/sources/flow/tasks/migrate/from-prometheus.md
@@ -256,8 +256,8 @@ The following list is specific to the convert command and not {{< param "PRODUCT
 [convert]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/reference/cli/convert.md"
 [run]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/reference/cli/run.md"
 [run]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/reference/cli/run.md"
-[Start]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/setup/start-agent.md"
-[Start]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/setup/start-agent.md"
+[Start]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/setup/start/"
+[Start]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/setup/start/"
 [DebuggingUI]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/tasks/debug.md"
 [DebuggingUI]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/tasks/debug.md"
 [River]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/concepts/config-language/_index.md"
diff --git a/docs/sources/flow/tasks/migrate/from-promtail.md b/docs/sources/flow/tasks/migrate/from-promtail.md
index 1416efea88c1..bf116e755c7b 100644
--- a/docs/sources/flow/tasks/migrate/from-promtail.md
+++ b/docs/sources/flow/tasks/migrate/from-promtail.md
@@ -239,8 +239,8 @@ The following list is specific to the convert command and not {{< param "PRODUCT
 [convert]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/reference/cli/convert.md"
 [run]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/reference/cli/run.md"
 [run]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/reference/cli/run.md"
-[Start]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/setup/start-agent.md"
-[Start]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/setup/start-agent.md"
+[Start]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/setup/start/"
+[Start]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/setup/start/"
 [DebuggingUI]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/tasks/debug.md"
 [DebuggingUI]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/tasks/debug.md"
 [River]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/concepts/config-language/_index.md"
diff --git a/docs/sources/flow/tasks/migrate/from-static.md b/docs/sources/flow/tasks/migrate/from-static.md
index a08935fff859..6f7c30d994a8 100644
--- a/docs/sources/flow/tasks/migrate/from-static.md
+++ b/docs/sources/flow/tasks/migrate/from-static.md
@@ -374,8 +374,8 @@ The following list is specific to the convert command and not {{< param "PRODUCT
 [convert]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/reference/cli/convert.md"
 [run]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/reference/cli/run.md"
 [run]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/reference/cli/run.md"
-[Start]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/setup/start-agent.md"
-[Start]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/setup/start-agent.md"
+[Start]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/setup/start/"
+[Start]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/setup/start/"
 [DebuggingUI]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/tasks/debug.md"
 [DebuggingUI]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/tasks/debug.md"
 [River]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/concepts/config-language/"

From 3b95da44088b6e31b65f7a864c297958ce95d6c8 Mon Sep 17 00:00:00 2001
From: Robert Fratto <robertfratto@gmail.com>
Date: Wed, 10 Jan 2024 13:40:33 -0500
Subject: [PATCH 45/68] docs: remove reference to production/kubernetes (#6079)

This commit modifies the Kubernetes installation instructions for static
mode to use the Grafana Agent Helm chart instead of the abandoned
production/kubernetes manifests.

Related to #6077.

Co-authored-by: Clayton Cornell <131809008+clayton-cornell@users.noreply.github.com>
---
 .../install/install-agent-kubernetes.md       | 51 ++++++++++++-------
 1 file changed, 32 insertions(+), 19 deletions(-)

diff --git a/docs/sources/static/set-up/install/install-agent-kubernetes.md b/docs/sources/static/set-up/install/install-agent-kubernetes.md
index c8df4dd8fa33..95fdd5597b53 100644
--- a/docs/sources/static/set-up/install/install-agent-kubernetes.md
+++ b/docs/sources/static/set-up/install/install-agent-kubernetes.md
@@ -11,40 +11,53 @@ weight: 300
 
 # Deploy Grafana Agent in static mode on Kubernetes
 
-You can deploy Grafana Agent in static mode on Kubernetes.
+You can use the Helm chart for Grafana Agent to deploy Grafana Agent in static mode on Kubernetes.
+
+## Before you begin
+
+* Install [Helm][] on your computer.
+* Configure a Kubernetes cluster that you can use for Grafana Agent.
+* Configure your local Kubernetes context to point to the cluster.
+
+[Helm]: https://helm.sh
 
 ## Deploy
 
-To deploy Grafana Agent in static mode on Kubernetes, perform the following steps.
+{{% admonition type="note" %}}
+These instructions show you how to install the generic [Helm chart](https://github.com/grafana/agent/tree/main/operations/helm/charts/grafana-agent) for Grafana Agent.
+You can deploy Grafana Agent in static mode or flow mode. The Helm chart deploys flow mode by default.
+{{% /admonition %}}
 
-1. Download one of the following manifests from GitHub and save it as `manifest.yaml`:
+To deploy Grafana Agent in static mode on Kubernetes using Helm, run the following commands in a terminal window:
 
-   - Metric collection (StatefulSet): [agent-bare.yaml](https://github.com/grafana/agent/blob/main/production/kubernetes/agent-bare.yaml)
-   - Log collection (DaemonSet): [agent-loki.yaml](https://github.com/grafana/agent/blob/main/production/kubernetes/agent-loki.yaml)
-   - Trace collection (Deployment): [agent-traces.yaml](https://github.com/grafana/agent/blob/main/production/kubernetes/agent-traces.yaml)
+1. Add the Grafana Helm chart repository:
 
-1. Edit the downloaded `manifest.yaml` and replace the placeholders with information relevant to your Kubernetes deployment.
+   ```shell
+   helm repo add grafana https://grafana.github.io/helm-charts
+   ```
 
-1. Apply the modified manifest file:
+1. Update the Grafana Helm chart repository:
 
    ```shell
-   kubectl -n default apply -f manifest.yaml
+   helm repo update
    ```
 
-{{% admonition type="note" %}}
-The manifests do not include the `ConfigMaps` which are necessary to run Grafana Agent.
-{{% /admonition %}}
+1. Install Grafana Agent in static mode:
 
-For sample configuration files and detailed instructions, refer to [Configure Kubernetes Monitoring](/docs/grafana-cloud/monitor-infrastructure/kubernetes-monitoring/configuration/) in the Grafana Cloud documentation.
+   ```shell
+   helm install <RELEASE_NAME> grafana/grafana-agent --set agent.mode=static
+   ```
 
+   Replace the following:
 
-## Rebuild the Kubernetes manifests
+   -  _`<RELEASE_NAME>`_: The name to use for your Grafana Agent installation, such as `grafana-agent`.
 
-The manifests provided are created using Grafana Labs' production Tanka configs with some default values. If you want to build the YAML file with some custom values, you must install the following applications:
+   {{% admonition type="warning" %}}
+   Always pass `--set agent.mode=static` in `helm install` or `helm upgrade` commands to ensure Grafana Agent gets installed in static mode.
+   Alternatively, set `agent.mode` to `static` in your values.yaml file.
+   {{% /admonition %}}
 
-- [Tanka](https://github.com/grafana/tanka) version 0.8 or higher
-- [jsonnet-bundler](https://github.com/jsonnet-bundler/jsonnet-bundler) version 0.2.1 or higher
+For more information on the Grafana Agent Helm chart, refer to the Helm chart documentation on [Artifact Hub][].
 
-Refer to the [`template` Tanka environment](https://github.com/grafana/agent/blob/main/production/kubernetes/build/templates) for the current settings that initialize the Grafana Agent Tanka configurations.
+[Artifact Hub]: https://artifacthub.io/packages/helm/grafana/grafana-agent
 
-To build the YAML files, run the `/build/build.sh` script, or run `make example-kubernetes` from the project's root directory.

From 38c8468ad881d284925c36624d53501f822e2dc8 Mon Sep 17 00:00:00 2001
From: Erik Baranowski <39704712+erikbaranowski@users.noreply.github.com>
Date: Wed, 10 Jan 2024 15:02:14 -0500
Subject: [PATCH 46/68] Add a new configurable option to the windows installer
 for static mode for expanding env vars  (#5958)

* Add a new configurable option to the windows installer for static mode for expanding env vars

Signed-off-by: erikbaranowski <39704712+erikbaranowski@users.noreply.github.com>

* Update docs/sources/static/set-up/install/install-agent-on-windows.md

Co-authored-by: Clayton Cornell <131809008+clayton-cornell@users.noreply.github.com>

---------

Signed-off-by: erikbaranowski <39704712+erikbaranowski@users.noreply.github.com>
Co-authored-by: Clayton Cornell <131809008+clayton-cornell@users.noreply.github.com>
---
 CHANGELOG.md                                  |  4 +++
 .../install/install-agent-on-windows.md       | 26 +++++++++++++-
 .../grafana-agent/windows/install_script.nsis | 36 ++++++++++++++-----
 3 files changed, 57 insertions(+), 9 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 8654bd9567bb..a4c13c5d97b7 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -17,6 +17,10 @@ Main (unreleased)
   - [GO-2023-2412](https://github.com/advisories/GHSA-7ww5-4wqc-m92c)
   - [CVE-2023-49568](https://github.com/advisories/GHSA-mw99-9chc-xw7r)
 
+### Enhancements
+
+- Add an option to the windows static mode installer for expanding environment vars in the yaml config. (@erikbaranowski)
+
 ### Bugfixes
 
 - Fix an issue in `remote.s3` where the exported content of an object would be an empty string if `remote.s3` failed to fully retrieve
diff --git a/docs/sources/static/set-up/install/install-agent-on-windows.md b/docs/sources/static/set-up/install/install-agent-on-windows.md
index 1ff2a05e61a4..ddda581a5355 100644
--- a/docs/sources/static/set-up/install/install-agent-on-windows.md
+++ b/docs/sources/static/set-up/install/install-agent-on-windows.md
@@ -30,7 +30,11 @@ To do a standard graphical install of Grafana Agent on Windows, perform the foll
 1. Double-click on `grafana-agent-installer.exe` to install Grafana Agent.
 
    Grafana Agent is installed into the default directory `C:\Program Files\Grafana Agent`.
-   The [windows_exporter integration](/docs/agent/latest/static/configuration/integrations/windows-exporter-config) can be enabled with all default windows_exporter options.
+   
+   The following options are available:
+   
+   - The [windows_exporter integration][windows_exporter_config] can be enabled with all default windows_exporter options. 
+   - The [-config.expand-env][flags] command line flag can be enabled.
 
 ## Silent install
 
@@ -78,6 +82,24 @@ If you are using `remote_write` you must enable Windows Exporter and set the glo
 
    If you are using Powershell, make sure you use triple quotes `"""http://example.com"""` around the URL parameter.
 
+## Silent install with `-config.expand_env`
+
+You can enable [-config.expand-env][flags] during a silent install.
+
+1. Navigate to the [latest release](https://github.com/grafana/agent/releases) on GitHub.
+
+1. Scroll down to the **Assets** section.
+
+1. Download the file called `grafana-agent-installer.exe.zip`.
+
+1. Unzip the downloaded file.
+
+1. Run the following command in PowerShell or Command Prompt:
+
+   ```shell
+   PATH_TO_INSTALLER/grafana-agent-installer.exe /S /ExpandEnv true
+   ```
+
 ## Verify the installation
 
 1. Make sure you can access `http://localhost:12345/-/healthy` and `http://localhost:12345/agent/api/v1/metrics/targets`.
@@ -146,6 +168,8 @@ Refer to [windows_events](/docs/loki/latest/clients/promtail/configuration/#wind
 - [Configure Grafana Agent][configure]
 
 {{% docs/reference %}}
+[flags]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/static/configuration/flags"
+[windows_exporter_config]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/static/configuration/integrations/windows-exporter-config"
 [start]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/static/set-up/start-agent"
 [start]: "/docs/grafana-cloud/ -> ../start-agent"
 [configure]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/static/configuration/create-config-file"
diff --git a/packaging/grafana-agent/windows/install_script.nsis b/packaging/grafana-agent/windows/install_script.nsis
index 07f8986026da..b08a8216c691 100644
--- a/packaging/grafana-agent/windows/install_script.nsis
+++ b/packaging/grafana-agent/windows/install_script.nsis
@@ -24,17 +24,19 @@ outFile "${OUT}"
 LicenseData LICENSE
 
 # Everything must be global Vars
+Var EnableOptionsDialog
+Var PassedInParameters
 Var EnableExporterCheck
 Var EnableExporterValue
-Var EnableExporterDialog
-Var PassedInParameters
 Var Url
 Var Username
 Var Password
+Var ExpandEnvCheck
+Var ExpandEnvValue
 
 Page license
 Page directory
-Page custom enableWindowsExporter enableWindowsExporterLeave
+Page custom enableOptions enableOptionsLeave
 Page instfiles
 
 # Annoyingly macros need to be defined before use
@@ -61,17 +63,18 @@ Section "install"
         ${GetOptions} $PassedInParameters "/Url" $Url
         ${GetOptions} $PassedInParameters "/Username" $Username
         ${GetOptions} $PassedInParameters "/Password" $Password
+        ${GetOptions} $PassedInParameters "/ExpandEnv" $ExpandEnvValue
         Call Install
         Return
     RunInstaller:
         Call Install
 SectionEnd
 
-Function enableWindowsExporter
+Function enableOptions
     nsDialogs::Create 1018
-    Pop $EnableExporterDialog
+    Pop $EnableOptionsDialog
 
-    ${If} $EnableExporterDialog == error
+    ${If} $EnableOptionsDialog == error
         Abort
     ${EndIf}
 
@@ -81,16 +84,29 @@ Function enableWindowsExporter
     ${NSD_CreateCheckBox} 0 13u 100% 12u ""
     Pop $EnableExporterCheck
 
+    ${NSD_CreateLabel} 0 26u 100% 12u "Expand Environment Variables"
+    Pop $0
+
+    ${NSD_CreateCheckBox} 0 39u 100% 12u ""
+    Pop $ExpandEnvCheck
+
     nsDialogs::Show
 FunctionEnd
 
-Function enableWindowsExporterLeave
+Function enableOptionsLeave
     ${NSD_GetState} $EnableExporterCheck $EnableExporterValue
     ${If} $EnableExporterValue == ${BST_CHECKED}
         StrCpy $EnableExporterValue "true"
     ${Else}
         StrCpy $EnableExporterValue "false"
     ${EndIf}
+
+    ${NSD_GetState} $ExpandEnvCheck $ExpandEnvValue
+    ${If} $ExpandEnvValue == ${BST_CHECKED}
+        StrCpy $ExpandEnvValue "true"
+    ${Else}
+        StrCpy $ExpandEnvValue "false"
+    ${EndIf}
 FunctionEnd
 
 Function Install
@@ -128,7 +144,11 @@ Function Install
     nsExec::ExecToLog 'sc create "Grafana Agent" binpath= "\"$INSTDIR\grafana-agent-windows-amd64.exe\""'
     Pop $0
     # These separate create and config commands are needed, on the config the binpath is required
-    nsExec::ExecToLog 'sc config "Grafana Agent" start= auto binpath= "\"$INSTDIR\grafana-agent-windows-amd64.exe\" -config.file=\"$INSTDIR\agent-config.yaml\""'
+    ${If} $ExpandEnvValue == "true"
+        nsExec::ExecToLog 'sc config "Grafana Agent" start= auto binpath= "\"$INSTDIR\grafana-agent-windows-amd64.exe\" -config.expand-env -config.file=\"$INSTDIR\agent-config.yaml\""'
+    ${Else}
+        nsExec::ExecToLog 'sc config "Grafana Agent" start= auto binpath= "\"$INSTDIR\grafana-agent-windows-amd64.exe\" -config.file=\"$INSTDIR\agent-config.yaml\""'
+    ${EndIf}
     Pop $0
     nsExec::ExecToLog `sc start "Grafana Agent"`
     Pop $0

From 7d987dfdca9c97473e39edaaa5b59a3c44124935 Mon Sep 17 00:00:00 2001
From: Paulin Todev <paulin.todev@gmail.com>
Date: Wed, 10 Jan 2024 20:03:33 +0000
Subject: [PATCH 47/68] Clarify usage of resource_to_telemetry_conversion
 (#6076)

* Clarify usage of resource_to_telemetry_conversion

* Apply suggestions from code review

Co-authored-by: Clayton Cornell <131809008+clayton-cornell@users.noreply.github.com>

---------

Co-authored-by: Clayton Cornell <131809008+clayton-cornell@users.noreply.github.com>
---
 .../components/otelcol.exporter.prometheus.md | 62 +++++++++++++++++++
 1 file changed, 62 insertions(+)

diff --git a/docs/sources/flow/reference/components/otelcol.exporter.prometheus.md b/docs/sources/flow/reference/components/otelcol.exporter.prometheus.md
index 3008f22f4353..4285f34cc799 100644
--- a/docs/sources/flow/reference/components/otelcol.exporter.prometheus.md
+++ b/docs/sources/flow/reference/components/otelcol.exporter.prometheus.md
@@ -58,6 +58,18 @@ When `include_scope_labels` is `true`  the `otel_scope_name` and
 
 When `include_target_info` is true, OpenTelemetry Collector resources are converted into `target_info` metrics.
 
+{{% admonition type="note" %}}
+
+OTLP metrics can have a lot of resource attributes. 
+Setting `resource_to_telemetry_conversion` to `true` would convert all of them to Prometheus labels, which may not be what you want.
+Instead of using `resource_to_telemetry_conversion`, most users need to use `otelcol.processor.transform` 
+to convert OTLP resource attributes to OTLP metric datapoint attributes before using `otelcol.exporter.prometheus`. 
+See [Creating Prometheus labels from OTLP resource attributes][] for an example.
+
+[Creating Prometheus labels from OTLP resource attributes]: #creating-prometheus-labels-from-otlp-resource-attributes
+
+{{% /admonition %}}
+
 ## Exported fields
 
 The following fields are exported and can be referenced by other components:
@@ -87,6 +99,8 @@ information.
 
 ## Example
 
+## Basic usage
+
 This example accepts metrics over OTLP and forwards it using
 `prometheus.remote_write`:
 
@@ -109,6 +123,54 @@ prometheus.remote_write "mimir" {
   }
 }
 ```
+
+## Create Prometheus labels from OTLP resource attributes
+
+This example uses `otelcol.processor.transform` to add extra `key1` and `key2` OTLP metric datapoint attributes from the
+`key1` and `key2` OTLP resource attributes. 
+
+`otelcol.exporter.prometheus` then converts `key1` and `key2` to Prometheus labels along with any other OTLP metric datapoint attributes.
+
+This avoids the need to set `resource_to_telemetry_conversion` to `true`,
+which could have created too many unnecessary metric labels.
+
+```river
+otelcol.receiver.otlp "default" {
+  grpc {}
+
+  output {
+    metrics = [otelcol.processor.transform.default.input]
+  }
+}
+
+otelcol.processor.transform "default" {
+  error_mode = "ignore"
+
+  metric_statements {
+    context = "datapoint"
+
+    statements = [
+      `set(attributes["key1"], resource.attributes["key1"])`,
+      `set(attributes["key2"], resource.attributes["key2"])`,
+    ]
+  }
+
+  output {
+    metrics = [otelcol.exporter.prometheus.default.input]
+  }
+}
+
+otelcol.exporter.prometheus "default" {
+  forward_to = [prometheus.remote_write.mimir.receiver]
+}
+
+prometheus.remote_write "mimir" {
+  endpoint {
+    url = "http://mimir:9009/api/v1/push"
+  }
+}
+```
+
 <!-- START GENERATED COMPATIBLE COMPONENTS -->
 
 ## Compatible components

From 7df0c05aeaa2019e3efef6c5d62c46f690d1221a Mon Sep 17 00:00:00 2001
From: Robert Fratto <robertfratto@gmail.com>
Date: Wed, 10 Jan 2024 15:05:44 -0500
Subject: [PATCH 48/68] docs: remove release instructions for `release` branch
 (#6097)

The branch called `release` is an old branch created when we had Grafana
Cloud install scripts and needed to update it dynamically.

This branch has not been used, and there are no remaining references to
it, so we can remove the branch and remove the instructions to update
it.
---
 .../release/5-update-release-branch.md        | 20 -------------------
 docs/developer/release/README.md              | 19 ++++++++----------
 2 files changed, 8 insertions(+), 31 deletions(-)
 delete mode 100644 docs/developer/release/5-update-release-branch.md

diff --git a/docs/developer/release/5-update-release-branch.md b/docs/developer/release/5-update-release-branch.md
deleted file mode 100644
index 2cb91166850f..000000000000
--- a/docs/developer/release/5-update-release-branch.md
+++ /dev/null
@@ -1,20 +0,0 @@
-# Update Release Branch
-
-The `release` branch is a special branch that is used for grafana cloud to point at our install scripts and example kubernetes manifests. This is not to be confused with `release-VERSION_PREFIX` created in [Create Release Branch](./1-create-release-branch.md)
-
-## Before you begin
-
-1. The release tag should exist from completing [Tag Release](./4-tag-release.md)
-
-## Steps
-
-1. Force push the release tag to the `release` branch
-
-    ```
-    git fetch
-    git checkout main
-    git branch -f release VERSION
-    git push -f origin refs/heads/release
-    ```
-
-    > **NOTE**: This requires force push permissions on this branch. If this fails, reach out to one of the project maintainers for help. 
diff --git a/docs/developer/release/README.md b/docs/developer/release/README.md
index 2c87654908f3..27bba296303b 100644
--- a/docs/developer/release/README.md
+++ b/docs/developer/release/README.md
@@ -8,13 +8,13 @@ The processes described here are for v0.24.0 and above.
 
 # Release Cycle
 
-A typical release cycle is to have a Release Candidate published for at least 48 
+A typical release cycle is to have a Release Candidate published for at least 48
 hours followed by a Stable Release. 0 or more Patch Releases may occur between the Stable Release
 and the creation of the next Release Candidate.
 
 # Workflows
 
-Once a release is scheduled, a release shepherd is determined. This person will be 
+Once a release is scheduled, a release shepherd is determined. This person will be
 responsible for ownership of the following workflows:
 
 ## Release Candidate Publish
@@ -39,20 +39,18 @@ responsible for ownership of the following workflows:
 2. [Update Version in Code](./3-update-version-in-code.md)
 3. [Tag Release](./4-tag-release.md)
 4. [Publish Release](./6-publish-release.md)
-5. [Update Release Branch](./5-update-release-branch.md)
-6. [Test Release](./7-test-release.md)
-7. [Update Helm Charts](./8-update-helm-charts.md)
-8. [Announce Release](./9-announce-release.md)
-9. [Update OTEL Contrib](./10-update-otel.md)
+5. [Test Release](./7-test-release.md)
+6. [Update Helm Charts](./8-update-helm-charts.md)
+7. [Announce Release](./9-announce-release.md)
+8. [Update OTEL Contrib](./10-update-otel.md)
 
 ## Patch Release Publish (latest version)
 1. [Cherry Pick Commits](./2-cherry-pick-commits.md)
 2. [Update Version in Code](./3-update-version-in-code.md)
 3. [Tag Release](./4-tag-release.md)
 4. [Publish Release](./6-publish-release.md)
-5. [Update Release Branch](./5-update-release-branch.md) 
-6. [Update Helm Charts](./8-update-helm-charts.md)
-7. [Announce Release](./9-announce-release.md)
+5. [Update Helm Charts](./8-update-helm-charts.md)
+6. [Announce Release](./9-announce-release.md)
 
 ## Patch Release Publish (older version)
 - Not documented yet (but here are some hints)
@@ -61,6 +59,5 @@ responsible for ownership of the following workflows:
   - cherry-pick commit[s] into it
   - don't update the version in the project on main
   - changes go into the changelog under the patch release version plus stay in unreleased
-  - don't update the `release` branch
   - don't publish in github as latest release
   - don't update deployment tools or helm charts

From ed6128e9f601f8fb59ec679894cc5a26898d6ab3 Mon Sep 17 00:00:00 2001
From: Paulin Todev <paulin.todev@gmail.com>
Date: Wed, 10 Jan 2024 20:09:03 +0000
Subject: [PATCH 49/68] Improve the docs of pyroscope.scrape (#5847)

* Clarify some aspects of pyroscope.scrape

---------

Co-authored-by: Piotr <17101802+thampiotr@users.noreply.github.com>
Co-authored-by: Ryan Perry <Rperry2174@gmail.com>
---
 .../reference/components/pyroscope.scrape.md  | 370 ++++++++++++------
 1 file changed, 260 insertions(+), 110 deletions(-)

diff --git a/docs/sources/flow/reference/components/pyroscope.scrape.md b/docs/sources/flow/reference/components/pyroscope.scrape.md
index c2c54a83bfc8..74c1fa30e873 100644
--- a/docs/sources/flow/reference/components/pyroscope.scrape.md
+++ b/docs/sources/flow/reference/components/pyroscope.scrape.md
@@ -15,12 +15,35 @@ title: pyroscope.scrape
 
 {{< docs/shared lookup="flow/stability/beta.md" source="agent" version="<AGENT_VERSION>" >}}
 
-`pyroscope.scrape` configures a [pprof] scraping job for a given set of
-`targets`. The scraped performance profiles are forwarded to the list of receivers passed in
-`forward_to`.
+`pyroscope.scrape` collects [pprof] performance profiles for a given set of HTTP `targets`. 
+
+`pyroscope.scrape` mimcks the scraping behavior of `prometheus.scrape`.
+Similarly to how Prometheus scrapes metrics via HTTP, `pyroscope.scrape` collects profiles via HTTP requests.
+
+Unlike Prometheus, which usually only scrapes one `/metrics` endpoint per target, 
+`pyroscope.scrape` may need to scrape multiple endpoints for the same target.
+This is because different types of profiles are scraped on different endpoints. 
+For example, "mutex" profiles may be scraped on a `/debug/pprof/delta_mutex` HTTP endpoint, whereas 
+memory consumption may be scraped on a `/debug/pprof/allocs` HTTP endpoint.
+
+The profile paths, protocol scheme, scrape interval, scrape timeout,
+query parameters, as well as any other settings can be configured within `pyroscope.scrape`.
+
+The `pyroscope.scrape` component regards a scrape as successful if it
+responded with an HTTP `200 OK` status code and returned the body of a valid [pprof] profile.
+
+If a scrape request fails, the [debug UI][] for `pyroscope.scrape` will show:
+* Detailed information about the failure.
+* The time of the last successful scrape.
+* The labels last used for scraping.
+
+The scraped performance profiles can be forwarded to components such as 
+`pyroscope.write` via the `forward_to` argument.
 
 Multiple `pyroscope.scrape` components can be specified by giving them different labels.
 
+[debug UI]: {{< relref "../../tasks/debug.md" >}}
+
 ## Usage
 
 ```river
@@ -32,45 +55,106 @@ pyroscope.scrape "LABEL" {
 
 ## Arguments
 
-The component configures and starts a new scrape job to scrape all of the
-input targets. Multiple scrape jobs can be spawned for a single input target
+`pyroscope.scrape` starts a new scrape job to scrape all of the input targets. 
+Multiple scrape jobs can be started for a single input target
 when scraping multiple profile types.
 
 The list of arguments that can be used to configure the block is
 presented below.
 
-The scrape job name defaults to the component's unique identifier.
-
-Any omitted fields take on their default values. If conflicting
-attributes are being passed (e.g., defining both a BearerToken and
-BearerTokenFile or configuring both Basic Authorization and OAuth2 at the same
-time), the component reports an error.
+Any omitted arguments take on their default values. If conflicting
+arguments are being passed (for example, configuring both `bearer_token` 
+and `bearer_token_file`), then `pyroscope.scrape` will fail to start and will report an error.
 
 The following arguments are supported:
 
-Name | Type | Description | Default | Required
----- | ---- | ----------- | ------- | --------
-`targets`                  | `list(map(string))`     | List of targets to scrape. | | yes
-`forward_to`               | `list(ProfilesReceiver)` | List of receivers to send scraped profiles to. | | yes
-`job_name`                 | `string`   | The job name to override the job label with. | component name | no
-`params`                   | `map(list(string))` | A set of query parameters with which the target is scraped. | | no
-`scrape_interval`          | `duration` | How frequently to scrape the targets of this scrape configuration. | `"15s"` | no
-`scrape_timeout`           | `duration` | The timeout for scraping targets of this configuration. | `"15s"` | no
-`scheme`                   | `string`   | The URL scheme with which to fetch metrics from targets. | | no
-`bearer_token`             | `secret`   | Bearer token to authenticate with. | | no
-`bearer_token_file`        | `string`   | File containing a bearer token to authenticate with. | | no
-`proxy_url`                | `string`   | HTTP proxy to proxy requests through. | | no
-`follow_redirects`         | `bool`     | Whether redirects returned by the server should be followed. | `true` | no
-`enable_http2`             | `bool`     | Whether HTTP2 is supported for requests. | `true` | no
-
- At most one of the following can be provided:
+Name                | Type                     | Description                                                        | Default        | Required
+------------------- | ------------------------ | ------------------------------------------------------------------ | -------------- | --------
+`targets`           | `list(map(string))`      | List of targets to scrape.                                         |                | yes
+`forward_to`        | `list(ProfilesReceiver)` | List of receivers to send scraped profiles to.                     |                | yes
+`job_name`          | `string`                 | The job name to override the job label with.                       | component name | no
+`params`            | `map(list(string))`      | A set of query parameters with which the target is scraped.        |                | no
+`scrape_interval`   | `duration`               | How frequently to scrape the targets of this scrape configuration. | `"15s"`        | no
+`scrape_timeout`    | `duration`               | The timeout for scraping targets of this configuration. Must be larger than `scrape_interval`. | `"18s"`        | no
+`scheme`            | `string`                 | The URL scheme with which to fetch metrics from targets.           | `"http"`       | no
+`bearer_token`      | `secret`                 | Bearer token to authenticate with.                                 |                | no
+`bearer_token_file` | `string`                 | File containing a bearer token to authenticate with.               |                | no
+`proxy_url`         | `string`                 | HTTP proxy to proxy requests through.                              |                | no
+`follow_redirects`  | `bool`                   | Whether redirects returned by the server should be followed.       | `true`         | no
+`enable_http2`      | `bool`                   | Whether HTTP2 is supported for requests.                           | `true`         | no
+
+At most one of the following authentication mechanisms can be provided:
  - [`bearer_token` argument](#arguments).
  - [`bearer_token_file` argument](#arguments).
  - [`basic_auth` block][basic_auth].
  - [`authorization` block][authorization].
  - [`oauth2` block][oauth2].
 
- [arguments]: #arguments
+[arguments]: #arguments
+
+#### `job_name` argument
+
+`job_name` defaults to the component's unique identifier.
+
+For example, the `job_name` of `pyroscope.scrape "local" { ... }` will be `"pyroscope.scrape.local"`.
+
+#### `targets` argument
+
+The list of `targets` can be provided [statically][example_static_targets], [dynamically][example_dynamic_targets], 
+or a [combination of both][example_static_and_dynamic_targets].
+
+The special `__address__` label _must always_ be present and corresponds to the
+`<host>:<port>` that is used for the scrape request.
+
+Labels starting with a double underscore (`__`) are treated as _internal_, and are removed prior to scraping.
+
+The special label `service_name` is required and must always be present. 
+If it is not specified, `pyroscope.scrape` will attempt to infer it from 
+either of the following sources, in this order: 
+1. `__meta_kubernetes_pod_annotation_pyroscope_io_service_name` which is a `pyroscope.io/service_name` pod annotation.
+2. `__meta_kubernetes_namespace` and `__meta_kubernetes_pod_container_name`
+3. `__meta_docker_container_name`
+
+If `service_name` is not specified and could not be inferred, then it is set to `unspecified`.
+
+The following labels are automatically injected to the scraped profiles 
+so that they can be linked to a scrape target:
+
+| Label            | Description                                                      |
+|------------------|----------------------------------------------------------------- |
+| `"job"`          | The `job_name` that the target belongs to.                       |
+| `"instance"`     | The `__address__` or `<host>:<port>` of the scrape target's URL. |
+| `"service_name"` | The inferred Pyroscope service name.                             |
+
+#### `scrape_interval` argument
+
+The `scrape_interval` typically refers to the frequency with which {{< param "PRODUCT_NAME" >}} collects performance profiles from the monitored targets. 
+It represents the time interval between consecutive scrapes or data collection events. 
+This parameter is important for controlling the trade-off between resource usage and the freshness of the collected data.
+
+If `scrape_interval` is short:
+* Advantages:
+  * Fewer profiles may be lost if the application being scraped crashes.
+* Disadvantages:
+  * Greater consumption of CPU, memory, and network resources during scrapes and remote writes.
+  * The backend database (Pyroscope) will consume more storage space.
+
+If `scrape_interval` is long:
+* Advantages:
+  * Lower resource consumption.
+* Disadvantages:
+  * More profiles may be lost if the application being scraped crashes.
+  * If the [delta argument][] is set to `true`, the batch size of 
+    each remote write to Pyroscope may be bigger.
+    The Pyroscope database may need to be tuned with higher limits.
+  * If the [delta argument][] is set to `true`, there is a larger risk of 
+    reaching the HTTP server timeouts of the application being scraped.
+
+For example, consider this situation:
+* `pyroscope.scrape` is configured with a `scrape_interval` of `"60s"`.
+* The application being scraped is running an HTTP server with a timeout of 30 seconds.
+* Any scrape HTTP requests where the [delta argument][] is set to `true` will fail, 
+  because they will attempt to run for 59 seconds.
 
 ## Blocks
 
@@ -92,7 +176,7 @@ The following blocks are supported inside the definition of `pyroscope.scrape`:
 | profiling_config > profile.fgprof             | [profile.fgprof][]             | Collect [fgprof][] profiles.                                             | no       |
 | profiling_config > profile.godeltaprof_memory | [profile.godeltaprof_memory][] | Collect [godeltaprof][] memory profiles.                                 | no       |
 | profiling_config > profile.godeltaprof_mutex  | [profile.godeltaprof_mutex][]  | Collect [godeltaprof][] mutex profiles.                                  | no       |
-| profiling_config > profile.godeltaprof_block  | [profile.godeltaprof_block][]        | Collect [godeltaprof][] block profiles.                                  | no       |
+| profiling_config > profile.godeltaprof_block  | [profile.godeltaprof_block][]  | Collect [godeltaprof][] block profiles.                                  | no       |
 | profiling_config > profile.custom             | [profile.custom][]             | Collect custom profiles.                                                 | no       |
 | clustering                                    | [clustering][]                 | Configure the component for when {{< param "PRODUCT_NAME" >}} is running in clustered mode. | no       |
 
@@ -100,26 +184,32 @@ The `>` symbol indicates deeper levels of nesting. For example,
 `oauth2 > tls_config` refers to a `tls_config` block defined inside
 an `oauth2` block.
 
+Any omitted blocks take on their default values. For example, 
+if `profile.mutex` is not specified in the config, 
+the defaults documented in [profile.mutex][] will be used.
+
 [basic_auth]: #basic_auth-block
 [authorization]: #authorization-block
 [oauth2]: #oauth2-block
 [tls_config]: #tls_config-block
 [profiling_config]: #profiling_config-block
-[profile.memory]: #profile.memory-block
-[profile.block]: #profile.block-block
-[profile.goroutine]: #profile.goroutine-block
-[profile.mutex]: #profile.mutex-block
-[profile.process_cpu]: #profile.process_cpu-block
-[profile.fgprof]: #profile.fgprof-block
-[profile.godeltaprof_memory]: #profile.godeltaprof_memory-block
-[profile.godeltaprof_mutex]: #profile.godeltaprof_mutex-block
-[profile.godeltaprof_block]: #profile.godeltaprof_block-block
-[profile.custom]: #profile.custom-block
+[profile.memory]: #profilememory-block
+[profile.block]: #profileblock-block
+[profile.goroutine]: #profilegoroutine-block
+[profile.mutex]: #profilemutex-block
+[profile.process_cpu]: #profileprocess_cpu-block
+[profile.fgprof]: #profilefgprof-block
+[profile.godeltaprof_memory]: #profilegodeltaprof_memory-block
+[profile.godeltaprof_mutex]: #profilegodeltaprof_mutex-block
+[profile.godeltaprof_block]: #profilegodeltaprof_block-block
+[profile.custom]: #profilecustom-block
 [pprof]: https://github.com/google/pprof/blob/main/doc/README.md
 [clustering]: #clustering-beta
 
 [fgprof]: https://github.com/felixge/fgprof
-[godeltaprof]: https://github.com/grafana/godeltaprof
+[godeltaprof]: https://github.com/grafana/pyroscope-go/tree/main/godeltaprof
+
+[delta argument]: #delta-argument
 
 ### basic_auth block
 
@@ -142,7 +232,7 @@ an `oauth2` block.
 The `profiling_config` block configures the profiling settings when scraping
 targets.
 
-The block contains the following attributes:
+The following arguments are supported:
 
 Name | Type | Description | Default | Required
 ---- | ---- | ----------- | ------- | --------
@@ -152,7 +242,7 @@ Name | Type | Description | Default | Required
 
 The `profile.memory` block collects profiles on memory consumption.
 
-It accepts the following arguments:
+The following arguments are supported:
 
 Name | Type | Description | Default | Required
 ---- | ---- | ----------- | ------- | --------
@@ -160,14 +250,13 @@ Name | Type | Description | Default | Required
 `path` | `string` | The path to the profile type on the target. | `"/debug/pprof/allocs"` | no
 `delta` | `boolean` | Whether to scrape the profile as a delta. | `false` | no
 
-When the `delta` argument is `true`, a `seconds` query parameter is
-automatically added to requests.
+For more information about the `delta` argument, see the [delta argument][] section.
 
 ### profile.block block
 
 The `profile.block` block collects profiles on process blocking.
 
-It accepts the following arguments:
+The following arguments are supported:
 
 Name | Type | Description | Default | Required
 ---- | ---- | ----------- | ------- | --------
@@ -175,14 +264,13 @@ Name | Type | Description | Default | Required
 `path` | `string` | The path to the profile type on the target. | `"/debug/pprof/block"` | no
 `delta` | `boolean` | Whether to scrape the profile as a delta. | `false` | no
 
-When the `delta` argument is `true`, a `seconds` query parameter is
-automatically added to requests.
+For more information about the `delta` argument, see the [delta argument][] section.
 
 ### profile.goroutine block
 
 The `profile.goroutine` block collects profiles on the number of goroutines.
 
-It accepts the following arguments:
+The following arguments are supported:
 
 Name | Type | Description | Default | Required
 ---- | ---- | ----------- | ------- | --------
@@ -190,14 +278,13 @@ Name | Type | Description | Default | Required
 `path` | `string` | The path to the profile type on the target. | `"/debug/pprof/goroutine"` | no
 `delta` | `boolean` | Whether to scrape the profile as a delta. | `false` | no
 
-When the `delta` argument is `true`, a `seconds` query parameter is
-automatically added to requests.
+For more information about the `delta` argument, see the [delta argument][] section.
 
 ### profile.mutex block
 
 The `profile.mutex` block collects profiles on mutexes.
 
-It accepts the following arguments:
+The following arguments are supported:
 
 Name | Type | Description | Default | Required
 ---- | ---- | ----------- | ------- | --------
@@ -205,15 +292,14 @@ Name | Type | Description | Default | Required
 `path` | `string` | The path to the profile type on the target. | `"/debug/pprof/mutex"` | no
 `delta` | `boolean` | Whether to scrape the profile as a delta. | `false` | no
 
-When the `delta` argument is `true`, a `seconds` query parameter is
-automatically added to requests.
+For more information about the `delta` argument, see the [delta argument][] section.
 
 ### profile.process_cpu block
 
 The `profile.process_cpu` block collects profiles on CPU consumption for the
 process.
 
-It accepts the following arguments:
+The following arguments are supported:
 
 Name | Type | Description | Default | Required
 ---- | ---- | ----------- | ------- | --------
@@ -221,14 +307,13 @@ Name | Type | Description | Default | Required
 `path` | `string` | The path to the profile type on the target. | `"/debug/pprof/profile"` | no
 `delta` | `boolean` | Whether to scrape the profile as a delta. | `true` | no
 
-When the `delta` argument is `true`, a `seconds` query parameter is
-automatically added to requests.
+For more information about the `delta` argument, see the [delta argument][] section.
 
 ### profile.fgprof block
 
 The `profile.fgprof` block collects profiles from an [fgprof][] endpoint.
 
-It accepts the following arguments:
+The following arguments are supported:
 
 Name | Type | Description | Default | Required
 ---- | ---- | ----------- | ------- | --------
@@ -236,14 +321,13 @@ Name | Type | Description | Default | Required
 `path` | `string` | The path to the profile type on the target. | `"/debug/fgprof"` | no
 `delta` | `boolean` | Whether to scrape the profile as a delta. | `true` | no
 
-When the `delta` argument is `true`, a `seconds` query parameter is
-automatically added to requests.
+For more information about the `delta` argument, see the [delta argument][] section.
 
 ### profile.godeltaprof_memory block
 
 The `profile.godeltaprof_memory` block collects profiles from [godeltaprof][] memory endpoint. The delta is computed on the target.
 
-It accepts the following arguments:
+The following arguments are supported:
 
 | Name      | Type      | Description                                 | Default                     | Required |
 |-----------|-----------|---------------------------------------------|-----------------------------|----------|
@@ -254,7 +338,7 @@ It accepts the following arguments:
 
 The `profile.godeltaprof_mutex` block collects profiles from [godeltaprof][] mutex endpoint. The delta is computed on the target.
 
-It accepts the following arguments:
+The following arguments are supported:
 
 | Name      | Type      | Description                                 | Default                      | Required |
 |-----------|-----------|---------------------------------------------|------------------------------|----------|
@@ -265,7 +349,7 @@ It accepts the following arguments:
 
 The `profile.godeltaprof_block` block collects profiles from [godeltaprof][] block endpoint. The delta is computed on the target.
 
-It accepts the following arguments:
+The following arguments are supported:
 
 | Name      | Type      | Description                                 | Default                      | Required |
 |-----------|-----------|---------------------------------------------|------------------------------|----------|
@@ -288,7 +372,7 @@ profile.custom "PROFILE_TYPE" {
 Multiple `profile.custom` blocks can be specified. Labels assigned to
 `profile.custom` blocks must be unique across the component.
 
-The `profile.custom` block accepts the following arguments:
+The following arguments are supported:
 
 Name | Type | Description | Default | Required
 ---- | ---- | ----------- | ------- | --------
@@ -297,7 +381,7 @@ Name | Type | Description | Default | Required
 `delta` | `boolean` | Whether to scrape the profile as a delta. | `false` | no
 
 When the `delta` argument is `true`, a `seconds` query parameter is
-automatically added to requests.
+automatically added to requests. The `seconds` used will be equal to `scrape_interval - 1`.
 
 ### clustering (beta)
 
@@ -322,6 +406,19 @@ If {{< param "PRODUCT_NAME" >}} is _not_ running in clustered mode, this block i
 
 [using clustering]: {{< relref "../../concepts/clustering.md" >}}
 
+## Common configuration
+
+### `delta` argument
+
+When the `delta` argument is `false`, the [pprof][] HTTP query will be instantaneous.
+
+When the `delta` argument is `true`:
+* The [pprof][] HTTP query will run for a certain amount of time.
+* A `seconds` parameter is automatically added to the HTTP request.
+* The `seconds` used will be equal to `scrape_interval - 1`.
+  For example, if `scrape_interval` is `"15s"`, `seconds` will be 14 seconds.
+  If the HTTP endpoint is `/debug/pprof/profile`, then the HTTP query will become `/debug/pprof/profile?seconds=14`
+
 ## Exported fields
 
 `pyroscope.scrape` does not export any fields that can be referenced by other
@@ -341,67 +438,115 @@ scrape job on the component's debug endpoint.
 
 * `pyroscope_fanout_latency` (histogram): Write latency for sending to direct and indirect components.
 
-## Scraping behavior
+## Examples
 
-The `pyroscope.scrape` component borrows the scraping behavior of Prometheus.
-Prometheus, and by extension, this component, uses a pull model for scraping
-profiles from a given set of _targets_.
-Each scrape target is defined as a set of key-value pairs called _labels_.
+[example_static_targets]: #default-endpoints-of-static-targets
 
-The set of targets can either be _static_, or dynamically provided periodically
-by a service discovery component such as `discovery.kubernetes`. The special
-label `__address__` _must always_ be present and corresponds to the
-`<host>:<port>` that is used for the scrape request.
+### Default endpoints of static targets
 
-The special label `service_name` is required and must always be present. If it's not specified, it is
-attempted to be inferred from multiple sources:
-- `__meta_kubernetes_pod_annotation_pyroscope_io_service_name` which is a `pyroscope.io/service_name` pod annotation.
-- `__meta_kubernetes_namespace` and `__meta_kubernetes_pod_container_name`
-- `__meta_docker_container_name`
+The following example sets up a scrape job of a statically configured 
+list of targets - {{< param "PRODUCT_ROOT_NAME" >}} itself and Pyroscope.
+The scraped profiles are sent to `pyroscope.write` which remote writes them to a Pyroscope database.
 
-If `service_name` is not specified and could not be inferred it is set to `unspecified`.
+```river
+pyroscope.scrape "local" {
+  targets = [
+    {"__address__" = "localhost:4100", "service_name"="pyroscope"},
+    {"__address__" = "localhost:12345", "service_name"="agent"},
+  ]
 
-By default, the scrape job tries to scrape all available targets' `/debug/pprof`
-endpoints using HTTP, with a scrape interval of 15 seconds and scrape timeout of
-15 seconds. The profile paths, protocol scheme, scrape interval and timeout,
-query parameters, as well as any other settings can be configured using the
-component's arguments.
+  forward_to = [pyroscope.write.local.receiver]
+}
 
-The scrape job expects profiles exposed by the endpoint to follow the
-[pprof] protobuf format. All profiles are then propagated
-to each receiver listed in the component's `forward_to` argument.
+pyroscope.write "local" {
+  endpoint {
+    url = "http://pyroscope:4100"
+  }
+}
+```
 
-Labels coming from targets, that start with a double underscore `__` are
-treated as _internal_, and are removed prior to scraping.
+These endpoints will be scraped every 15 seconds:
 
-The `pyroscope.scrape` component regards a scrape as successful if it
-responded with an HTTP `200 OK` status code and returned a body of valid [pprof] profile.
+```
+http://localhost:4100/debug/pprof/allocs
+http://localhost:4100/debug/pprof/block
+http://localhost:4100/debug/pprof/goroutine
+http://localhost:4100/debug/pprof/mutex
+http://localhost:4100/debug/pprof/profile?seconds=14
+
+http://localhost:12345/debug/pprof/allocs
+http://localhost:12345/debug/pprof/block
+http://localhost:12345/debug/pprof/goroutine
+http://localhost:12345/debug/pprof/mutex
+http://localhost:12345/debug/pprof/profile?seconds=14
+```
+
+Note that `seconds=14` is added to the `/debug/pprof/profile` endpoint, because:
+* The `delta` argument of the `profile.process_cpu` block is `true` by default.
+* `scrape_interval` is `"15s"` by default. 
 
-If the scrape request fails, the component's debug UI section contains more
-detailed information about the failure, the last successful scrape, as well as
-the labels last used for scraping.
+Also note that the `/debug/fgprof` endpoint will not be scraped, because
+the `enabled` argument of the `profile.fgprof` block is `false` by default.
 
-The following labels are automatically injected to the scraped profiles and
-can help pin down a scrape target.
+[example_dynamic_targets]: #default-endpoints-of-dynamic-targets
 
-| Label        | Description                                                                                      |
-|--------------|--------------------------------------------------------------------------------------------------|
-| job          | The configured job name that the target belongs to. Defaults to the fully formed component name. |
-| instance     | The `__address__` or `<host>:<port>` of the scrape target's URL.                                 |
-| service_name | The inferred pyroscope service name                                                              |
+### Default endpoints of dynamic targets
+
+```river
+discovery.http "dynamic_targets" {
+  url = "https://example.com/scrape_targets"
+  refresh_interval = "15s"
+}
+
+pyroscope.scrape "local" {
+  targets = [discovery.http.dynamic_targets.targets]
+
+  forward_to = [pyroscope.write.local.receiver]
+}
+
+pyroscope.write "local" {
+  endpoint {
+    url = "http://pyroscope:4100"
+  }
+}
+```
 
-## Example
+[example_static_and_dynamic_targets]: #default-endpoints-of-static-and-dynamic-targets
 
-The following example sets up the scrape job with certain attributes (profiling configuration, targets) and lets it scrape two local applications ({{< param "PRODUCT_ROOT_NAME" >}} itself and Pyroscope).
-The exposed profiles are sent over to the provided list of receivers, as defined by other components.
+### Default endpoints of static and dynamic targets
 
 ```river
+discovery.http "dynamic_targets" {
+  url = "https://example.com/scrape_targets"
+  refresh_interval = "15s"
+}
+
 pyroscope.scrape "local" {
-  targets    = [
+  targets = [
     {"__address__" = "localhost:4100", "service_name"="pyroscope"},
     {"__address__" = "localhost:12345", "service_name"="agent"},
+    discovery.http.dynamic_targets.targets,
   ]
+
   forward_to = [pyroscope.write.local.receiver]
+}
+
+pyroscope.write "local" {
+  endpoint {
+    url = "http://pyroscope:4100"
+  }
+}
+```
+
+
+### Enabling and disabling profiles
+
+```river
+pyroscope.scrape "local" {
+  targets = [
+    {"__address__" = "localhost:12345", "service_name"="agent"},
+  ]
+
   profiling_config {
     profile.fgprof {
       enabled = true
@@ -413,22 +558,27 @@ pyroscope.scrape "local" {
       enabled = false
     }
   }
+
+  forward_to = [pyroscope.write.local.receiver]
 }
 ```
 
-Here are the endpoints that are being scraped every 15 seconds:
+These endpoints will be scraped every 15 seconds:
 
 ```
-http://localhost:4100/debug/pprof/allocs
-http://localhost:4100/debug/pprof/goroutine
-http://localhost:4100/debug/pprof/profile?seconds=14
-http://localhost:4100/debug/fgprof?seconds=14
 http://localhost:12345/debug/pprof/allocs
 http://localhost:12345/debug/pprof/goroutine
 http://localhost:12345/debug/pprof/profile?seconds=14
 http://localhost:12345/debug/fgprof?seconds=14
 ```
 
+These endpoints will **NOT** be scraped because they are explicitly disabled:
+
+```
+http://localhost:12345/debug/pprof/block
+http://localhost:12345/debug/pprof/mutex
+```
+
 <!-- START GENERATED COMPATIBLE COMPONENTS -->
 
 ## Compatible components

From ee98c5fe90e990f9740e9349028d234be8ee877b Mon Sep 17 00:00:00 2001
From: Paschalis Tsilias <tpaschalis@users.noreply.github.com>
Date: Wed, 10 Jan 2024 22:30:10 +0200
Subject: [PATCH 50/68] loki.process: document limitation of stage.json (#6082)

* loki.process: document limitation of stage.json

Signed-off-by: Paschalis Tsilias <paschalis.tsilias@grafana.com>

* Add example error for future grepping

Signed-off-by: Paschalis Tsilias <paschalis.tsilias@grafana.com>

* Apply Clayton's suggestions

Signed-off-by: Paschalis Tsilias <paschalis.tsilias@grafana.com>

---------

Signed-off-by: Paschalis Tsilias <paschalis.tsilias@grafana.com>
Co-authored-by: Clayton Cornell <131809008+clayton-cornell@users.noreply.github.com>
---
 .../flow/reference/components/loki.process.md      | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/docs/sources/flow/reference/components/loki.process.md b/docs/sources/flow/reference/components/loki.process.md
index c2793abbfe2e..d1c8ef723bd9 100644
--- a/docs/sources/flow/reference/components/loki.process.md
+++ b/docs/sources/flow/reference/components/loki.process.md
@@ -382,6 +382,20 @@ following key-value pair to the set of extracted data.
 username: agent
 ```
 
+{{% admonition type="note" %}}
+Due to a limitation of the upstream jmespath library, you must wrap any string
+that contains a hyphen `-` in quotes so that it's not considered a numerical
+expression.
+	
+If you don't use quotes to wrap a string that contains a hyphen, you will get
+errors like: `Unexpected token at the end of the expression: tNumber`
+
+You can use one of two options to circumvent this issue:
+
+1. An escaped double quote. For example: `http_user_agent = "\"request_User-Agent\""`
+1. A backtick quote. For example: ``http_user_agent = `"request_User-Agent"` ``
+{{% /admonition %}}
+
 ### stage.label_drop block
 
 The `stage.label_drop` inner block configures a processing stage that drops labels

From d226a0e7e733dd5a1793a1f39d352457f106e48c Mon Sep 17 00:00:00 2001
From: Robert Fratto <robertfratto@gmail.com>
Date: Wed, 10 Jan 2024 17:25:28 -0500
Subject: [PATCH 51/68] misc: remove production/ in favor of operations/
 (#6107)

This commit entirely removes the production/ folder in favor of
operations/; all known valid external references to the old production
folder have been removed.

Closes #6077.
---
 .drone/drone.yml                              |   20 +-
 .drone/pipelines/test.jsonnet                 |   17 -
 Makefile                                      |   12 +-
 .../grafana/dashboards/template.jsonnet       |    4 +-
 example/docker-compose/jsonnetfile.json       |    2 +-
 example/docker-compose/jsonnetfile.lock.json  |    2 +-
 production/README.md                          |    1 -
 .../grafana-agent-mixin/alerts.libsonnet      |  414 -
 .../grafana-agent-mixin/config.libsonnet      |   13 -
 .../grafana-agent-mixin/dashboards.libsonnet  |  789 --
 .../grafana-agent-mixin/debugging.libsonnet   |  128 -
 .../grafana-agent-mixin/jsonnetfile.json      |   25 -
 .../grafana-agent-mixin/mixin.libsonnet       |    4 -
 .../grafana-agent-mixin/utils.libsonnet       |   34 -
 production/kubernetes/README.md               |   50 -
 production/kubernetes/agent-bare.yaml         |  115 -
 production/kubernetes/agent-loki.yaml         |  100 -
 production/kubernetes/agent-traces.yaml       |  154 -
 production/kubernetes/build/build.sh          |   15 -
 production/kubernetes/build/jsonnetfile.json  |   49 -
 .../kubernetes/build/jsonnetfile.lock.json    |   74 -
 production/kubernetes/build/lib/k.libsonnet   |    1 -
 .../kubernetes/build/lib/version.libsonnet    |    1 -
 .../build/templates/bare/main.jsonnet         |   41 -
 .../kubernetes/build/templates/bare/spec.json |   11 -
 .../build/templates/base-sigv4/main.jsonnet   |   31 -
 .../build/templates/base-sigv4/spec.json      |   11 -
 .../build/templates/base/main.jsonnet         |   23 -
 .../kubernetes/build/templates/base/spec.json |   11 -
 .../build/templates/loki/main.jsonnet         |   17 -
 .../kubernetes/build/templates/loki/spec.json |   11 -
 .../build/templates/operator/main.jsonnet     |  160 -
 .../build/templates/operator/spec.json        |   11 -
 .../build/templates/traces/main.jsonnet       |   41 -
 .../build/templates/traces/spec.json          |   11 -
 production/kubernetes/install-bare.sh         |   34 -
 .../monitoring.coreos.com_podmonitors.yaml    |  679 --
 .../crds/monitoring.coreos.com_probes.yaml    |  722 --
 ...monitoring.coreos.com_servicemonitors.yaml |  709 --
 .../monitoring.grafana.com_grafanaagents.yaml | 7795 -----------------
 .../monitoring.grafana.com_integrations.yaml  | 1738 ----
 .../monitoring.grafana.com_logsinstances.yaml |  500 --
 ...nitoring.grafana.com_metricsinstances.yaml |  861 --
 .../crds/monitoring.grafana.com_podlogs.yaml  |  588 --
 .../operator/templates/agent-operator.yaml    |  645 --
 .../grafana-agent-operator/jsonnetfile.json   |   34 -
 .../grafana-agent-operator/operator.libsonnet |   60 -
 .../util/grafana-agent.libsonnet              |   23 -
 .../util/integrations.libsonnet               |   17 -
 .../util/k8slogs.libsonnet                    |   33 -
 .../util/k8smonitors.libsonnet                |   56 -
 .../util/logsinstance.libsonnet               |   21 -
 .../util/metricsinstance.libsonnet            |   20 -
 .../tanka/grafana-agent/config.libsonnet      |  117 -
 .../grafana-agent/grafana-agent.libsonnet     |   85 -
 .../tanka/grafana-agent/jsonnetfile.json      |   14 -
 .../grafana-agent/scraping-svc/main.libsonnet |  107 -
 .../scraping-svc/syncer.libsonnet             |   61 -
 .../smoke/avalanche/main.libsonnet            |   49 -
 .../grafana-agent/smoke/crow/main.libsonnet   |   36 -
 .../grafana-agent/smoke/etcd/main.libsonnet   |   30 -
 .../tanka/grafana-agent/smoke/main.libsonnet  |   69 -
 production/tanka/grafana-agent/v1/README.md   |   79 -
 .../grafana-agent/v1/internal/agent.libsonnet |   72 -
 .../v1/internal/kubernetes_instance.libsonnet |   27 -
 .../v1/internal/kubernetes_logs.libsonnet     |    7 -
 .../grafana-agent/v1/internal/utils.libsonnet |   36 -
 .../grafana-agent/v1/lib/deployment.libsonnet |   83 -
 .../v1/lib/integrations.libsonnet             |   33 -
 .../tanka/grafana-agent/v1/lib/logs.libsonnet |   82 -
 .../grafana-agent/v1/lib/metrics.libsonnet    |  116 -
 .../v1/lib/scraping_service.libsonnet         |    4 -
 .../grafana-agent/v1/lib/traces.libsonnet     |  121 -
 .../tanka/grafana-agent/v1/main.libsonnet     |  142 -
 production/tanka/grafana-agent/v2/README.md   |   84 -
 .../grafana-agent/v2/internal/base.libsonnet  |   56 -
 .../internal/controllers/daemonset.libsonnet  |   22 -
 .../internal/controllers/deployment.libsonnet |   22 -
 .../controllers/statefulset.libsonnet         |   23 -
 .../v2/internal/helpers/k8s.libsonnet         |  523 --
 .../v2/internal/helpers/logs.libsonnet        |   27 -
 .../v2/internal/helpers/service.libsonnet     |   13 -
 .../v2/internal/syncer.libsonnet              |   62 -
 .../tanka/grafana-agent/v2/main.libsonnet     |   50 -
 tools/generate-crds.bash                      |   12 +-
 85 files changed, 13 insertions(+), 19189 deletions(-)
 delete mode 100644 production/README.md
 delete mode 100644 production/grafana-agent-mixin/alerts.libsonnet
 delete mode 100644 production/grafana-agent-mixin/config.libsonnet
 delete mode 100644 production/grafana-agent-mixin/dashboards.libsonnet
 delete mode 100644 production/grafana-agent-mixin/debugging.libsonnet
 delete mode 100644 production/grafana-agent-mixin/jsonnetfile.json
 delete mode 100644 production/grafana-agent-mixin/mixin.libsonnet
 delete mode 100644 production/grafana-agent-mixin/utils.libsonnet
 delete mode 100644 production/kubernetes/README.md
 delete mode 100644 production/kubernetes/agent-bare.yaml
 delete mode 100644 production/kubernetes/agent-loki.yaml
 delete mode 100644 production/kubernetes/agent-traces.yaml
 delete mode 100755 production/kubernetes/build/build.sh
 delete mode 100644 production/kubernetes/build/jsonnetfile.json
 delete mode 100644 production/kubernetes/build/jsonnetfile.lock.json
 delete mode 100644 production/kubernetes/build/lib/k.libsonnet
 delete mode 100644 production/kubernetes/build/lib/version.libsonnet
 delete mode 100644 production/kubernetes/build/templates/bare/main.jsonnet
 delete mode 100644 production/kubernetes/build/templates/bare/spec.json
 delete mode 100644 production/kubernetes/build/templates/base-sigv4/main.jsonnet
 delete mode 100644 production/kubernetes/build/templates/base-sigv4/spec.json
 delete mode 100644 production/kubernetes/build/templates/base/main.jsonnet
 delete mode 100644 production/kubernetes/build/templates/base/spec.json
 delete mode 100644 production/kubernetes/build/templates/loki/main.jsonnet
 delete mode 100644 production/kubernetes/build/templates/loki/spec.json
 delete mode 100644 production/kubernetes/build/templates/operator/main.jsonnet
 delete mode 100644 production/kubernetes/build/templates/operator/spec.json
 delete mode 100644 production/kubernetes/build/templates/traces/main.jsonnet
 delete mode 100644 production/kubernetes/build/templates/traces/spec.json
 delete mode 100644 production/kubernetes/install-bare.sh
 delete mode 100644 production/operator/crds/monitoring.coreos.com_podmonitors.yaml
 delete mode 100644 production/operator/crds/monitoring.coreos.com_probes.yaml
 delete mode 100644 production/operator/crds/monitoring.coreos.com_servicemonitors.yaml
 delete mode 100644 production/operator/crds/monitoring.grafana.com_grafanaagents.yaml
 delete mode 100644 production/operator/crds/monitoring.grafana.com_integrations.yaml
 delete mode 100644 production/operator/crds/monitoring.grafana.com_logsinstances.yaml
 delete mode 100644 production/operator/crds/monitoring.grafana.com_metricsinstances.yaml
 delete mode 100644 production/operator/crds/monitoring.grafana.com_podlogs.yaml
 delete mode 100644 production/operator/templates/agent-operator.yaml
 delete mode 100644 production/tanka/grafana-agent-operator/jsonnetfile.json
 delete mode 100644 production/tanka/grafana-agent-operator/operator.libsonnet
 delete mode 100644 production/tanka/grafana-agent-operator/util/grafana-agent.libsonnet
 delete mode 100644 production/tanka/grafana-agent-operator/util/integrations.libsonnet
 delete mode 100644 production/tanka/grafana-agent-operator/util/k8slogs.libsonnet
 delete mode 100644 production/tanka/grafana-agent-operator/util/k8smonitors.libsonnet
 delete mode 100644 production/tanka/grafana-agent-operator/util/logsinstance.libsonnet
 delete mode 100644 production/tanka/grafana-agent-operator/util/metricsinstance.libsonnet
 delete mode 100644 production/tanka/grafana-agent/config.libsonnet
 delete mode 100644 production/tanka/grafana-agent/grafana-agent.libsonnet
 delete mode 100644 production/tanka/grafana-agent/jsonnetfile.json
 delete mode 100644 production/tanka/grafana-agent/scraping-svc/main.libsonnet
 delete mode 100644 production/tanka/grafana-agent/scraping-svc/syncer.libsonnet
 delete mode 100644 production/tanka/grafana-agent/smoke/avalanche/main.libsonnet
 delete mode 100644 production/tanka/grafana-agent/smoke/crow/main.libsonnet
 delete mode 100644 production/tanka/grafana-agent/smoke/etcd/main.libsonnet
 delete mode 100644 production/tanka/grafana-agent/smoke/main.libsonnet
 delete mode 100644 production/tanka/grafana-agent/v1/README.md
 delete mode 100644 production/tanka/grafana-agent/v1/internal/agent.libsonnet
 delete mode 100644 production/tanka/grafana-agent/v1/internal/kubernetes_instance.libsonnet
 delete mode 100644 production/tanka/grafana-agent/v1/internal/kubernetes_logs.libsonnet
 delete mode 100644 production/tanka/grafana-agent/v1/internal/utils.libsonnet
 delete mode 100644 production/tanka/grafana-agent/v1/lib/deployment.libsonnet
 delete mode 100644 production/tanka/grafana-agent/v1/lib/integrations.libsonnet
 delete mode 100644 production/tanka/grafana-agent/v1/lib/logs.libsonnet
 delete mode 100644 production/tanka/grafana-agent/v1/lib/metrics.libsonnet
 delete mode 100644 production/tanka/grafana-agent/v1/lib/scraping_service.libsonnet
 delete mode 100644 production/tanka/grafana-agent/v1/lib/traces.libsonnet
 delete mode 100644 production/tanka/grafana-agent/v1/main.libsonnet
 delete mode 100644 production/tanka/grafana-agent/v2/README.md
 delete mode 100644 production/tanka/grafana-agent/v2/internal/base.libsonnet
 delete mode 100644 production/tanka/grafana-agent/v2/internal/controllers/daemonset.libsonnet
 delete mode 100644 production/tanka/grafana-agent/v2/internal/controllers/deployment.libsonnet
 delete mode 100644 production/tanka/grafana-agent/v2/internal/controllers/statefulset.libsonnet
 delete mode 100644 production/tanka/grafana-agent/v2/internal/helpers/k8s.libsonnet
 delete mode 100644 production/tanka/grafana-agent/v2/internal/helpers/logs.libsonnet
 delete mode 100644 production/tanka/grafana-agent/v2/internal/helpers/service.libsonnet
 delete mode 100644 production/tanka/grafana-agent/v2/internal/syncer.libsonnet
 delete mode 100644 production/tanka/grafana-agent/v2/main.libsonnet

diff --git a/.drone/drone.yml b/.drone/drone.yml
index 43e4161ef322..b65be33159f8 100644
--- a/.drone/drone.yml
+++ b/.drone/drone.yml
@@ -119,24 +119,6 @@ trigger:
 type: docker
 ---
 kind: pipeline
-name: Test manifests
-platform:
-  arch: amd64
-  os: linux
-steps:
-- commands:
-  - make generate-manifests
-  - ERR_MSG="The environment manifests are out of date. Please run 'make generate-manifests'
-    and commit changes!"
-  - if [ ! -z "$(git status --porcelain)" ]; then echo $ERR_MSG >&2; exit 1; fi
-  image: grafana/agent-build-image:0.30.4
-  name: Regenerate environment manifests
-trigger:
-  event:
-  - pull_request
-type: docker
----
-kind: pipeline
 name: Test
 platform:
   arch: amd64
@@ -1427,6 +1409,6 @@ kind: secret
 name: updater_private_key
 ---
 kind: signature
-hmac: 28ba52df6f22c10bf77a95386a49aff65a1c372127f7d89489ac2d3ee02ce618
+hmac: c6d9dd05507a2967a2ba394ee5e411e9dff9135335d31881d0d3ee262c7ea63a
 
 ...
diff --git a/.drone/pipelines/test.jsonnet b/.drone/pipelines/test.jsonnet
index 438447f99325..6daa113d2019 100644
--- a/.drone/pipelines/test.jsonnet
+++ b/.drone/pipelines/test.jsonnet
@@ -50,23 +50,6 @@ local pipelines = import '../util/pipelines.jsonnet';
     }],
   },
 
-  pipelines.linux('Test manifests') {
-    trigger: {
-      event: ['pull_request'],
-    },
-    steps: [{
-      name: 'Regenerate environment manifests',
-      image: build_image.linux,
-
-      commands: [
-        'make generate-manifests',
-        'ERR_MSG="The environment manifests are out of date. Please run \'make generate-manifests\' and commit changes!"',
-        // "git status --porcelain" reports if there's any new, modified, or deleted files.
-        'if [ ! -z "$(git status --porcelain)" ]; then echo $ERR_MSG >&2; exit 1; fi',
-      ],
-    }],
-  },
-
   pipelines.linux('Test') {
     trigger: {
       event: ['pull_request'],
diff --git a/Makefile b/Makefile
index 5b7d4f424759..7b86fcae9080 100644
--- a/Makefile
+++ b/Makefile
@@ -56,7 +56,6 @@
 ##   generate-drone           Generate the Drone YAML from Jsonnet.
 ##   generate-helm-docs       Generate Helm chart documentation.
 ##   generate-helm-tests      Generate Helm chart tests.
-##   generate-manifests       Generate production/kubernetes YAML manifests.
 ##   generate-dashboards      Generate dashboards in example/docker-compose after
 ##                            changing Jsonnet.
 ##   generate-protos          Generate protobuf files.
@@ -286,8 +285,8 @@ smoke-image:
 # Targets for generating assets
 #
 
-.PHONY: generate generate-crds generate-drone generate-helm-docs generate-helm-tests generate-manifests generate-dashboards generate-protos generate-ui generate-versioned-files
-generate: generate-crds generate-drone generate-helm-docs generate-helm-tests generate-manifests generate-dashboards generate-protos generate-ui generate-versioned-files generate-docs
+.PHONY: generate generate-crds generate-drone generate-helm-docs generate-helm-tests generate-dashboards generate-protos generate-ui generate-versioned-files
+generate: generate-crds generate-drone generate-helm-docs generate-helm-tests generate-dashboards generate-protos generate-ui generate-versioned-files generate-docs
 
 generate-crds:
 ifeq ($(USE_CONTAINER),1)
@@ -314,13 +313,6 @@ else
 	bash ./operations/helm/scripts/rebuild-tests.sh
 endif
 
-generate-manifests:
-ifeq ($(USE_CONTAINER),1)
-	$(RERUN_IN_CONTAINER)
-else
-	cd production/kubernetes/build && bash build.sh
-endif
-
 generate-dashboards:
 ifeq ($(USE_CONTAINER),1)
 	$(RERUN_IN_CONTAINER)
diff --git a/example/docker-compose/grafana/dashboards/template.jsonnet b/example/docker-compose/grafana/dashboards/template.jsonnet
index edc460218987..157860f0a389 100644
--- a/example/docker-compose/grafana/dashboards/template.jsonnet
+++ b/example/docker-compose/grafana/dashboards/template.jsonnet
@@ -1,5 +1,5 @@
-local agentDashboards = import 'grafana-agent-mixin/dashboards.libsonnet';
-local agentDebugging = import 'grafana-agent-mixin/debugging.libsonnet';
+local agentDashboards = import 'agent-static-mixin/dashboards.libsonnet';
+local agentDebugging = import 'agent-static-mixin/debugging.libsonnet';
 
 local result = agentDashboards + agentDebugging {
   files: {
diff --git a/example/docker-compose/jsonnetfile.json b/example/docker-compose/jsonnetfile.json
index 1f2735e529cf..bee24c1dcf32 100644
--- a/example/docker-compose/jsonnetfile.json
+++ b/example/docker-compose/jsonnetfile.json
@@ -4,7 +4,7 @@
     {
       "source": {
         "local": {
-          "directory": "../../production/grafana-agent-mixin"
+          "directory": "../../operations/agent-static-mixin"
         }
       },
       "version": ""
diff --git a/example/docker-compose/jsonnetfile.lock.json b/example/docker-compose/jsonnetfile.lock.json
index 1803372b5348..463fc7a6776b 100644
--- a/example/docker-compose/jsonnetfile.lock.json
+++ b/example/docker-compose/jsonnetfile.lock.json
@@ -24,7 +24,7 @@
     {
       "source": {
         "local": {
-          "directory": "../../production/grafana-agent-mixin"
+          "directory": "../../operations/agent-static-mixin"
         }
       },
       "version": ""
diff --git a/production/README.md b/production/README.md
deleted file mode 100644
index 93a7f2594349..000000000000
--- a/production/README.md
+++ /dev/null
@@ -1 +0,0 @@
-**NOTE**: This folder has been deprecated in favor of [operations/](../operations/) and will be removed.
diff --git a/production/grafana-agent-mixin/alerts.libsonnet b/production/grafana-agent-mixin/alerts.libsonnet
deleted file mode 100644
index 51fe81e0e539..000000000000
--- a/production/grafana-agent-mixin/alerts.libsonnet
+++ /dev/null
@@ -1,414 +0,0 @@
-local config = import 'config.libsonnet';
-local _config = config._config;
-
-{
-  prometheusAlerts+:: {
-    groups+: [
-      {
-        name: 'grafana-agent-tracing',
-        rules: [
-          {
-            alert: 'AgentTracingReceiverErrors',
-            // TODO(@mapno): add recording rule for total spans
-            expr: |||
-              100 * sum(rate(traces_receiver_refused_spans{receiver!="otlp/lb"}[1m])) by (%(group_by_cluster)s, receiver)
-                /
-              (sum(rate(traces_receiver_refused_spans{receiver!="otlp/lb"}[1m])) by (%(group_by_cluster)s, receiver) + sum(rate(traces_receiver_accepted_spans{receiver!="otlp/lb"}[1m])) by (%(group_by_cluster)s, receiver))
-                > 10
-            ||| % _config,
-            'for': '15m',
-            labels: {
-              severity: 'warning',
-            },
-            annotations: {
-              message: |||
-                Receiver {{ $labels.receiver }} is experiencing {{ printf "%.2f" $value }}% errors.
-              |||,
-            },
-          },
-          {
-            alert: 'AgentTracingExporterErrors',
-            // TODO(@mapno): add recording rule for total spans
-            expr: |||
-              100 * sum(rate(traces_exporter_send_failed_spans{exporter!="otlp"}[1m])) by (%(group_by_cluster)s, exporter)
-                /
-              (sum(rate(traces_exporter_send_failed_spans{exporter!="otlp"}[1m])) by (%(group_by_cluster)s, exporter) + sum(rate(traces_exporter_sent_spans{exporter!="otlp"}[1m])) by (%(group_by_cluster)s, exporter))
-                > 10
-            ||| % _config,
-            'for': '15m',
-            labels: {
-              severity: 'warning',
-            },
-            annotations: {
-              message: |||
-                Exporter {{ $labels.exporter }} is experiencing {{ printf "%.2f" $value }}% errors.
-              |||,
-            },
-          },
-          {
-            alert: 'AgentTracingLoadBalancingErrors',
-            expr: |||
-              100 * sum(rate(traces_loadbalancer_backend_outcome{success="false"}[1m])) by (%(group_by_cluster)s)
-                /
-              sum(rate(traces_loadbalancer_backend_outcome{success="true"}[1m])) by (%(group_by_cluster)s)
-                > 10
-            ||| % _config,
-            'for': '15m',
-            labels: {
-              severity: 'warning',
-            },
-            annotations: {
-              message: |||
-                Load balancing is experiencing {{ printf "%.2f" $value }}% errors.
-              |||,
-            },
-          },
-        ],
-      },
-      {
-        name: 'GrafanaAgentSmokeChecks',
-        rules: [
-          {
-            alert: 'GrafanaAgentDown',
-            expr: |||
-              up{
-                namespace="agent-smoke-test",
-                pod=~"grafana-agent-smoke-test-(0|cluster-0|cluster-1|cluster-2)",
-              } == 0
-            |||,
-            'for': '5m',
-            annotations: {
-              summary: '{{ $labels.job }} is down',
-            },
-          },
-          {
-            alert: 'GrafanaAgentFlapping',
-            expr: |||
-              avg_over_time(up{
-                namespace="agent-smoke-test",
-                pod=~"grafana-agent-smoke-test-(0|cluster-0|cluster-1|cluster-2)",
-              }[5m]) < 1
-            |||,
-            'for': '15m',
-            annotations: {
-              summary: '{{ $labels.job }} is flapping',
-            },
-          },
-
-          // Checks that the CPU usage doesn't go too high. This was generated from internal usage where
-          // every 1,000 active series used roughly 0.0013441% of CPU. This alert only fires if there is a
-          // minimum load threshold of at least 1000 active series.
-          {
-            alert: 'GrafanaAgentCPUHigh',
-            expr: |||
-              (sum by (pod) (rate(container_cpu_usage_seconds_total{cluster=~".+", namespace=~"agent-smoke-test", container=~".+", pod="grafana-agent-smoke-test-cluster-2"}[5m]))
-              /
-              (sum by (pod) (agent_wal_storage_active_series{cluster=~".+", namespace=~"agent-smoke-test", container=~".+", pod="grafana-agent-smoke-test-cluster-2"}) / 1000)
-              > 0.0013441)
-              and
-              sum by (pod) (agent_wal_storage_active_series{cluster=~".+", namespace=~"agent-smoke-test", container=~".+", pod="grafana-agent-smoke-test-cluster-2"}) > 1000
-            |||,
-            'for': '1h',
-            annotations: {
-              summary: '{{ $labels.pod }} is using more than 0.0013441 CPU per 1000 series over the last 5 minutes',
-            },
-          },
-
-          // We assume roughly ~8KB per series. Check that each deployment
-          // doesn't go too far above this.
-          //
-          // We aggregate the memory of the scraping service together since an individual
-          // node with a really small number of active series will throw this metric off.
-          {
-            alert: 'GrafanaAgentMemHigh',
-            expr: |||
-              sum without (pod, instance) (go_memstats_heap_inuse_bytes{job=~"agent-smoke-test/grafana-agent-smoke-test.*"}) /
-              sum without (pod, instance, instance_group_name) (agent_wal_storage_active_series{job=~"agent-smoke-test/grafana-agent-smoke-test.*"}) / 1e3 > 10
-            |||,
-            'for': '1h',
-            annotations: {
-              summary: '{{ $labels.job }} has used more than 10KB per series for more than 5 minutes',
-            },
-          },
-          {
-            alert: 'GrafanaAgentContainerRestarts',
-            expr: |||
-              sum by (pod) (rate(kube_pod_container_status_restarts_total{namespace="agent-smoke-test"}[10m])) > 0
-            |||,
-            annotations: {
-              summary: '{{ $labels.pod }} has a high rate of container restarts',
-            },
-          },
-        ],
-      },
-      {
-        name: 'GrafanaAgentCrowChecks',
-        rules: [
-          {
-            alert: 'CrowDown',
-            expr: |||
-              up{job=~"agent-smoke-test/crow-.*"} == 0
-            |||,
-            'for': '5m',
-            annotations: {
-              summary: 'Crow {{ $labels.job }} is down.',
-            },
-          },
-          {
-            alert: 'CrowFlapping',
-            expr: |||
-              avg_over_time(up{job=~"agent-smoke-test/crow-.*"}[5m]) < 1
-            |||,
-            'for': '15m',
-            annotations: {
-              summary: 'Crow {{ $labels.job }} is flapping.',
-            },
-          },
-          {
-            alert: 'CrowNotScraped',
-            expr: |||
-              rate(crow_test_samples_total[5m]) == 0
-            |||,
-            'for': '15m',
-            annotations: {
-              summary: 'Crow {{ $labels.job }} is not being scraped.',
-            },
-          },
-          {
-            alert: 'CrowFailures',
-            expr: |||
-              (
-                  rate(crow_test_sample_results_total{result="success"}[5m])
-                  /
-                  ignoring(result) sum without (result) (rate(crow_test_sample_results_total[5m]))
-              )
-              < 1
-            |||,
-            'for': '15m',
-            annotations: {
-              summary: 'Crow {{ $labels.job }} has had failures for at least 5m',
-            },
-          },
-        ],
-      },
-      {
-        name: 'VultureChecks',
-        rules: [
-          {
-            alert: 'VultureDown',
-            expr: |||
-              up{job=~"agent-smoke-test/vulture"} == 0
-            |||,
-            'for': '5m',
-            annotations: {
-              summary: 'Vulture {{ $labels.job }} is down.',
-            },
-          },
-          {
-            alert: 'VultureFlapping',
-            expr: |||
-              avg_over_time(up{job=~"agent-smoke-test/vulture"}[5m]) < 1
-            |||,
-            'for': '15m',
-            annotations: {
-              summary: 'Vulture {{ $labels.job }} is flapping.',
-            },
-          },
-          {
-            alert: 'VultureNotScraped',
-            expr: |||
-              rate(tempo_vulture_trace_total[1m]) == 0
-            |||,
-            'for': '5m',
-            annotations: {
-              summary: 'Vulture {{ $labels.job }} is not being scraped.',
-            },
-          },
-          {
-            alert: 'VultureFailures',
-            expr: |||
-              (rate(tempo_vulture_error_total[5m]) / rate(tempo_vulture_trace_total[5m])) > 0.3
-            |||,
-            'for': '5m',
-            annotations: {
-              summary: 'Vulture {{ $labels.job }} has had failures for at least 5m',
-            },
-          },
-        ],
-      },
-      {
-        name: 'GrafanaAgentConfig',
-        rules: [
-          {
-            alert: 'AgentRemoteConfigBadAPIRequests',
-            expr: |||
-              100 * sum(rate(agent_remote_config_fetches_total{status_code=~"(4|5).."}[10m])) by (%(group_by_cluster)s)
-                /
-              sum(rate(agent_remote_config_fetches_total[10m])) by (%(group_by_cluster)s)
-                > 5
-            ||| % _config,
-            'for': '10m',
-            labels: {
-              severity: 'warning',
-            },
-            annotations: {
-              message: |||
-                Receiving HTTP {{ $labels.status_code }} errors from API in {{ printf "%.2f" $value }}% of cases.
-              |||,
-            },
-          },
-          {
-            alert: 'AgentRemoteConfigBadAPIRequests',
-            expr: |||
-              100 * sum(rate(agent_remote_config_fetches_total{status_code=~"(4|5).."}[10m])) by (%(group_by_cluster)s)
-                /
-              sum(rate(agent_remote_config_fetches_total[10m])) by (%(group_by_cluster)s)
-                > 10
-            ||| % _config,
-            'for': '10m',
-            labels: {
-              severity: 'critical',
-            },
-            annotations: {
-              message: |||
-                Receiving HTTP {{ $labels.status_code }} errors from API in {{ printf "%.2f" $value }}% of cases.
-              |||,
-            },
-          },
-          {
-            alert: 'AgentRemoteConfigFetchErrors',
-            expr: |||
-              100 * sum(rate(agent_remote_config_fetch_errors_total[10m])) by (%(group_by_cluster)s)
-                /
-              sum(rate(agent_remote_config_fetches_total[10m])) by (%(group_by_cluster)s)
-                > 5
-            ||| % _config,
-            'for': '10m',
-            labels: {
-              severity: 'warning',
-            },
-            annotations: {
-              message: |||
-                Failing to reach Agent Management API.
-              |||,
-            },
-          },
-          {
-            alert: 'AgentRemoteConfigFetchErrors',
-            expr: |||
-              100 * sum(rate(agent_remote_config_fetch_errors_total[10m])) by (%(group_by_cluster)s)
-                /
-              sum(rate(agent_remote_config_fetches_total[10m])) by (%(group_by_cluster)s)
-                > 10
-            ||| % _config,
-            'for': '10m',
-            labels: {
-              severity: 'critical',
-            },
-            annotations: {
-              message: |||
-                Failing to reach Agent Management API.
-              |||,
-            },
-          },
-          {
-            alert: 'AgentRemoteConfigInvalidAPIResponse',
-            expr: |||
-              100 * sum(rate(agent_remote_config_invalid_total{reason=~".+"}[10m])) by (%(group_by_cluster)s)
-                /
-              sum(rate(agent_remote_config_fetches_total[10m])) by (%(group_by_cluster)s)
-                > 5
-            ||| % _config,
-            'for': '10m',
-            labels: {
-              severity: 'warning',
-            },
-            annotations: {
-              message: |||
-                API is responding with {{ $labels.reason }} in {{ printf "%.2f" $value }}% of cases.
-              |||,
-            },
-          },
-          {
-            alert: 'AgentRemoteConfigInvalidAPIResponse',
-            expr: |||
-              100 * sum(rate(agent_remote_config_invalid_total{reason=~".+"}[10m])) by (%(group_by_cluster)s)
-                /
-              sum(rate(agent_remote_config_fetches_total[10m])) by (%(group_by_cluster)s)
-                > 10
-            ||| % _config,
-            'for': '10m',
-            labels: {
-              severity: 'critical',
-            },
-            annotations: {
-              message: |||
-                API is responding with {{ $labels.reason }} in {{ printf "%.2f" $value }}% of cases.
-              |||,
-            },
-          },
-          {
-            alert: 'AgentFailureToReloadConfig',
-            expr: |||
-              avg_over_time(agent_config_last_load_successful[10m]) < 0.9
-            ||| % _config,
-            'for': '10m',
-            labels: {
-              severity: 'warning',
-            },
-            annotations: {
-              message: |||
-                 Instance {{ $labels.instance }} failed to successfully reload the config.
-              |||,
-            },
-          },
-          {
-            alert: 'AgentFailureToReloadConfig',
-            expr: |||
-              avg_over_time(agent_config_last_load_successful[10m]) < 0.9
-            ||| % _config,
-            'for': '30m',
-            labels: {
-              severity: 'critical',
-            },
-            annotations: {
-              message: |||
-                 Instance {{ $labels.instance }} failed to successfully reload the config.
-              |||,
-            },
-          },
-          {
-            alert: 'AgentManagementFallbackToEmptyConfig',
-            expr: |||
-              sum(rate(agent_management_config_fallbacks_total{fallback_to="empty_config"}[10m])) by (%(group_by_cluster)s) > 0
-            ||| % _config,
-            'for': '10m',
-            labels: {
-              severity: 'warning',
-            },
-            annotations: {
-              message: |||
-                 Instance {{ $labels.instance }} fell back to empty configuration.
-              |||,
-            },
-          },
-          {
-            alert: 'AgentManagementFallbackToEmptyConfig',
-            expr: |||
-              sum(rate(agent_management_config_fallbacks_total{fallback_to="empty_config"}[10m])) by (%(group_by_cluster)s) > 0
-            ||| % _config,
-            'for': '30m',
-            labels: {
-              severity: 'critical',
-            },
-            annotations: {
-              message: |||
-                 Instance {{ $labels.instance }} fell back to empty configuration.
-              |||,
-            },
-          },
-        ],
-      },      
-    ],
-  },
-}
diff --git a/production/grafana-agent-mixin/config.libsonnet b/production/grafana-agent-mixin/config.libsonnet
deleted file mode 100644
index 8a7df26c0d3a..000000000000
--- a/production/grafana-agent-mixin/config.libsonnet
+++ /dev/null
@@ -1,13 +0,0 @@
-{
-  local makeGroupBy(groups) = std.join(', ', groups),
-
-  _config+:: {
-    namespace: '.*',
-
-    // Groups labels to uniquely identify and group by clusters
-    cluster_selectors: ['cluster', 'namespace'],
-
-    // Each group-by label list is `, `-separated and unique identifies
-    group_by_cluster: makeGroupBy($._config.cluster_selectors),
-  },
-}
diff --git a/production/grafana-agent-mixin/dashboards.libsonnet b/production/grafana-agent-mixin/dashboards.libsonnet
deleted file mode 100644
index 834ec5181312..000000000000
--- a/production/grafana-agent-mixin/dashboards.libsonnet
+++ /dev/null
@@ -1,789 +0,0 @@
-local utils = import './utils.libsonnet';
-local g = import 'grafana-builder/grafana.libsonnet';
-local grafana = import 'grafonnet/grafana.libsonnet';
-
-local dashboard = grafana.dashboard;
-local row = grafana.row;
-local singlestat = grafana.singlestat;
-local prometheus = grafana.prometheus;
-local graphPanel = grafana.graphPanel;
-local tablePanel = grafana.tablePanel;
-local template = grafana.template;
-
-{
-  grafanaDashboards+:: {
-    'agent.json':
-      utils.injectUtils(g.dashboard('Agent'))
-      .addMultiTemplate('cluster', 'agent_build_info', 'cluster')
-      .addMultiTemplate('namespace', 'agent_build_info', 'namespace')
-      .addMultiTemplate('container', 'agent_build_info', 'container')
-      .addMultiTemplateWithAll('pod', 'agent_build_info{container=~"$container"}', 'pod', all='grafana-agent-.*')
-      .addRow(
-        g.row('Agent Stats')
-        .addPanel(
-          g.panel('Agent Stats') +
-          g.tablePanel([
-            'count by (pod, container, version) (agent_build_info{cluster=~"$cluster", namespace=~"$namespace", container=~"$container"})',
-            'max by (pod, container) (time() - process_start_time_seconds{cluster=~"$cluster", namespace=~"$namespace", container=~"$container"})',
-          ], {
-            pod: { alias: 'Pod' },
-            container: { alias: 'Container' },
-            version: { alias: 'Version' },
-            'Value #A': { alias: 'Count', type: 'hidden' },
-            'Value #B': { alias: 'Uptime' },
-          })
-        )
-      )
-      .addRow(
-        g.row('Prometheus Discovery')
-        .addPanel(
-          g.panel('Target Sync') +
-          g.queryPanel('sum(rate(prometheus_target_sync_length_seconds_sum{cluster=~"$cluster", namespace=~"$namespace", container=~"$container"}[5m])) by (pod, scrape_job) * 1e3', '{{pod}}/{{scrape_job}}') +
-          { yaxes: g.yaxes('ms') }
-        )
-        .addPanel(
-          g.panel('Targets') +
-          g.queryPanel('sum by (pod) (prometheus_sd_discovered_targets{cluster=~"$cluster", namespace=~"$namespace", container=~"$container"})', '{{pod}}') +
-          g.stack
-        )
-      )
-      .addRow(
-        g.row('Prometheus Retrieval')
-        .addPanel(
-          g.panel('Average Scrape Interval Duration') +
-          g.queryPanel(|||
-            rate(prometheus_target_interval_length_seconds_sum{cluster=~"$cluster", namespace=~"$namespace", container=~"$container"}[5m])
-            /
-            rate(prometheus_target_interval_length_seconds_count{cluster=~"$cluster", namespace=~"$namespace", container=~"$container"}[5m])
-            * 1e3
-          |||, '{{pod}} {{interval}} configured') +
-          { yaxes: g.yaxes('ms') }
-        )
-        .addPanel(
-          g.panel('Scrape failures') +
-          g.queryPanel([
-            'sum by (job) (rate(prometheus_target_scrapes_exceeded_sample_limit_total{cluster=~"$cluster", namespace=~"$namespace", container=~"$container"}[1m]))',
-            'sum by (job) (rate(prometheus_target_scrapes_sample_duplicate_timestamp_total{cluster=~"$cluster", namespace=~"$namespace", container=~"$container"}[1m]))',
-            'sum by (job) (rate(prometheus_target_scrapes_sample_out_of_bounds_total{cluster=~"$cluster", namespace=~"$namespace", container=~"$container"}[1m]))',
-            'sum by (job) (rate(prometheus_target_scrapes_sample_out_of_order_total{cluster=~"$cluster", namespace=~"$namespace", container=~"$container"}[1m]))',
-          ], [
-            'exceeded sample limit: {{job}}',
-            'duplicate timestamp: {{job}}',
-            'out of bounds: {{job}}',
-            'out of order: {{job}}',
-          ]) +
-          g.stack
-        )
-        .addPanel(
-          g.panel('Appended Samples') +
-          g.queryPanel('sum by (job, instance_group_name) (rate(agent_wal_samples_appended_total{cluster=~"$cluster", namespace=~"$namespace", container=~"$container"}[5m]))', '{{job}} {{instance_group_name}}') +
-          g.stack
-        )
-      ),
-
-    // Remote write specific dashboard.
-    'agent-remote-write.json':
-      local timestampComparison =
-        graphPanel.new(
-          'Highest Timestamp In vs. Highest Timestamp Sent',
-          datasource='$datasource',
-          span=6,
-        )
-        .addTarget(prometheus.target(
-          |||
-            (
-              prometheus_remote_storage_highest_timestamp_in_seconds{cluster=~"$cluster", namespace=~"$namespace", container=~"$container"}
-              -
-              ignoring(url, remote_name) group_right(pod)
-              prometheus_remote_storage_queue_highest_sent_timestamp_seconds{cluster=~"$cluster", namespace=~"$namespace", container=~"$container"}
-            )
-          |||,
-          legendFormat='{{cluster}}:{{pod}}-{{instance_group_name}}-{{url}}',
-        ));
-
-      local remoteSendLatency =
-        graphPanel.new(
-          'Latency [1m]',
-          datasource='$datasource',
-          span=6,
-        )
-        .addTarget(prometheus.target(
-          'rate(prometheus_remote_storage_sent_batch_duration_seconds_sum{cluster=~"$cluster", namespace=~"$namespace", container=~"$container"}[1m]) / rate(prometheus_remote_storage_sent_batch_duration_seconds_count{cluster=~"$cluster", namespace=~"$namespace", container=~"$container"}[1m])',
-          legendFormat='mean {{cluster}}:{{pod}}-{{instance_group_name}}-{{url}}',
-        ))
-        .addTarget(prometheus.target(
-          'histogram_quantile(0.99, rate(prometheus_remote_storage_sent_batch_duration_seconds_bucket{cluster=~"$cluster", namespace=~"$namespace", container=~"$container"}[1m]))',
-          legendFormat='p99 {{cluster}}:{{pod}}-{{instance_group_name}}-{{url}}',
-        ));
-
-      local samplesInRate =
-        graphPanel.new(
-          'Rate in [5m]',
-          datasource='$datasource',
-          span=6,
-        )
-        .addTarget(prometheus.target(
-          'rate(agent_wal_samples_appended_total{cluster=~"$cluster", namespace=~"$namespace", container=~"$container"}[5m])',
-          legendFormat='{{cluster}}:{{pod}}-{{instance_group_name}}-{{url}}',
-        ));
-
-      local samplesOutRate =
-        graphPanel.new(
-          'Rate succeeded [5m]',
-          datasource='$datasource',
-          span=6,
-        )
-        .addTarget(prometheus.target(
-          'rate(prometheus_remote_storage_succeeded_samples_total{cluster=~"$cluster", namespace=~"$namespace", container=~"$container"}[5m]) or rate(prometheus_remote_storage_samples_total{cluster=~"$cluster", namespace=~"$namespace", container=~"$container"}[5m])',
-          legendFormat='{{cluster}}:{{pod}}-{{instance_group_name}}-{{url}}',
-        ));
-
-      local currentShards =
-        graphPanel.new(
-          'Current Shards',
-          datasource='$datasource',
-          span=12,
-          min_span=6,
-        )
-        .addTarget(prometheus.target(
-          'prometheus_remote_storage_shards{cluster=~"$cluster", namespace=~"$namespace", container=~"$container"}',
-          legendFormat='{{cluster}}:{{pod}}-{{instance_group_name}}-{{url}}',
-        ));
-
-      local maxShards =
-        graphPanel.new(
-          'Max Shards',
-          datasource='$datasource',
-          span=4,
-        )
-        .addTarget(prometheus.target(
-          'prometheus_remote_storage_shards_max{cluster=~"$cluster", namespace=~"$namespace", container=~"$container"}',
-          legendFormat='{{cluster}}:{{pod}}-{{instance_group_name}}-{{url}}',
-        ));
-
-      local minShards =
-        graphPanel.new(
-          'Min Shards',
-          datasource='$datasource',
-          span=4,
-        )
-        .addTarget(prometheus.target(
-          'prometheus_remote_storage_shards_min{cluster=~"$cluster", namespace=~"$namespace", container=~"$container"}',
-          legendFormat='{{cluster}}:{{pod}}-{{instance_group_name}}-{{url}}',
-        ));
-
-      local desiredShards =
-        graphPanel.new(
-          'Desired Shards',
-          datasource='$datasource',
-          span=4,
-        )
-        .addTarget(prometheus.target(
-          'prometheus_remote_storage_shards_desired{cluster=~"$cluster", namespace=~"$namespace", container=~"$container"}',
-          legendFormat='{{cluster}}:{{pod}}-{{instance_group_name}}-{{url}}',
-        ));
-
-      local shardsCapacity =
-        graphPanel.new(
-          'Shard Capacity',
-          datasource='$datasource',
-          span=6,
-        )
-        .addTarget(prometheus.target(
-          'prometheus_remote_storage_shard_capacity{cluster=~"$cluster", namespace=~"$namespace", container=~"$container"}',
-          legendFormat='{{cluster}}:{{pod}}-{{instance_group_name}}-{{url}}',
-        ));
-
-      local pendingSamples =
-        graphPanel.new(
-          'Pending Samples',
-          datasource='$datasource',
-          span=6,
-        )
-        .addTarget(prometheus.target(
-          'prometheus_remote_storage_samples_pending{cluster=~"$cluster", namespace=~"$namespace", container=~"$container"}',
-          legendFormat='{{cluster}}:{{pod}}-{{instance_group_name}}-{{url}}',
-        ));
-
-      local queueSegment =
-        graphPanel.new(
-          'Remote Write Current Segment',
-          datasource='$datasource',
-          span=6,
-          formatY1='none',
-        )
-        .addTarget(prometheus.target(
-          'prometheus_wal_watcher_current_segment{cluster=~"$cluster", namespace=~"$namespace", container=~"$container"}',
-          legendFormat='{{cluster}}:{{pod}}-{{instance_group_name}}-{{url}}',
-        ));
-
-      local droppedSamples =
-        graphPanel.new(
-          'Dropped Samples',
-          datasource='$datasource',
-          span=6,
-        )
-        .addTarget(prometheus.target(
-          'rate(prometheus_remote_storage_samples_dropped_total{cluster=~"$cluster", namespace=~"$namespace", container=~"$container"}[5m])',
-          legendFormat='{{cluster}}:{{pod}}-{{instance_group_name}}-{{url}}',
-        ));
-
-      local failedSamples =
-        graphPanel.new(
-          'Failed Samples',
-          datasource='$datasource',
-          span=6,
-        )
-        .addTarget(prometheus.target(
-          'rate(prometheus_remote_storage_samples_failed_total{cluster=~"$cluster", namespace=~"$namespace", container=~"$container"}[5m])',
-          legendFormat='{{cluster}}:{{pod}}-{{instance_group_name}}-{{url}}',
-        ));
-
-      local retriedSamples =
-        graphPanel.new(
-          'Retried Samples',
-          datasource='$datasource',
-          span=6,
-        )
-        .addTarget(prometheus.target(
-          'rate(prometheus_remote_storage_samples_retried_total{cluster=~"$cluster", namespace=~"$namespace", container=~"$container"}[5m])',
-          legendFormat='{{cluster}}:{{pod}}-{{instance_group_name}}-{{url}}',
-        ));
-
-      local enqueueRetries =
-        graphPanel.new(
-          'Enqueue Retries',
-          datasource='$datasource',
-          span=6,
-        )
-        .addTarget(prometheus.target(
-          'rate(prometheus_remote_storage_enqueue_retries_total{cluster=~"$cluster", namespace=~"$namespace", container=~"$container"}[5m])',
-          legendFormat='{{cluster}}:{{pod}}-{{instance_group_name}}-{{url}}',
-        ));
-
-      dashboard.new('Agent Prometheus Remote Write', tags=['grafana-agent-mixin'], editable=true, refresh='30s', time_from='now-1h')
-      .addTemplate(
-        {
-          hide: 0,
-          label: null,
-          name: 'datasource',
-          options: [],
-          query: 'prometheus',
-          refresh: 1,
-          regex: '',
-          type: 'datasource',
-        },
-      )
-      .addTemplate(
-        template.new(
-          'cluster',
-          '$datasource',
-          'label_values(agent_build_info, cluster)',
-          refresh='time',
-          current={
-            selected: true,
-            text: 'All',
-            value: '$__all',
-          },
-          includeAll=true,
-        ),
-      )
-      .addTemplate(
-        template.new(
-          'namespace',
-          '$datasource',
-          'label_values(agent_build_info, namespace)',
-          refresh='time',
-          current={
-            selected: true,
-            text: 'All',
-            value: '$__all',
-          },
-          includeAll=true,
-        ),
-      )
-      .addTemplate(
-        template.new(
-          'container',
-          '$datasource',
-          'label_values(agent_build_info, container)',
-          refresh='time',
-          current={
-            selected: true,
-            text: 'All',
-            value: '$__all',
-          },
-          includeAll=true,
-        ),
-      )
-      .addTemplate(
-        template.new(
-          'pod',
-          '$datasource',
-          'label_values(agent_build_info{container=~"$container"}, pod)',
-          refresh='time',
-          current={
-            selected: true,
-            text: 'All',
-            value: '$__all',
-          },
-          includeAll=true,
-        ),
-      )
-      .addTemplate(
-        template.new(
-          'url',
-          '$datasource',
-          'label_values(prometheus_remote_storage_shards{cluster=~"$cluster", pod=~"$pod"}, url)',
-          refresh='time',
-          includeAll=true,
-        )
-      )
-      .addRow(
-        row.new('Timestamps')
-        .addPanel(timestampComparison)
-        .addPanel(remoteSendLatency)
-      )
-      .addRow(
-        row.new('Samples')
-        .addPanel(samplesInRate)
-        .addPanel(samplesOutRate)
-        .addPanel(pendingSamples)
-        .addPanel(droppedSamples)
-        .addPanel(failedSamples)
-        .addPanel(retriedSamples)
-      )
-      .addRow(
-        row.new('Shards')
-        .addPanel(currentShards)
-        .addPanel(maxShards)
-        .addPanel(minShards)
-        .addPanel(desiredShards)
-      )
-      .addRow(
-        row.new('Shard Details')
-        .addPanel(shardsCapacity)
-      )
-      .addRow(
-        row.new('Segments')
-        .addPanel(queueSegment)
-      )
-      .addRow(
-        row.new('Misc. Rates')
-        .addPanel(enqueueRetries)
-      ),
-
-    'agent-tracing-pipeline.json':
-      local acceptedSpans =
-        graphPanel.new(
-          'Accepted spans',
-          datasource='$datasource',
-          interval='1m',
-          span=3,
-          legend_show=false,
-          fill=0,
-        )
-        .addTarget(prometheus.target(
-          |||
-            rate(traces_receiver_accepted_spans{cluster=~"$cluster",namespace=~"$namespace",container=~"$container",pod=~"$pod",receiver!="otlp/lb"}[$__rate_interval])
-          |||,
-          legendFormat='{{ pod }} - {{ receiver }}/{{ transport }}',
-        ));
-
-      local refusedSpans =
-        graphPanel.new(
-          'Refused spans',
-          datasource='$datasource',
-          interval='1m',
-          span=3,
-          legend_show=false,
-          fill=0,
-        )
-        .addTarget(prometheus.target(
-          |||
-            rate(traces_receiver_refused_spans{cluster=~"$cluster",namespace=~"$namespace",container=~"$container",pod=~"$pod",receiver!="otlp/lb"}[$__rate_interval])
-          |||,
-          legendFormat='{{ pod }} - {{ receiver }}/{{ transport }}',
-        ));
-
-      local sentSpans =
-        graphPanel.new(
-          'Exported spans',
-          datasource='$datasource',
-          interval='1m',
-          span=3,
-          legend_show=false,
-          fill=0,
-        )
-        .addTarget(prometheus.target(
-          |||
-            rate(traces_exporter_sent_spans{cluster=~"$cluster",namespace=~"$namespace",container=~"$container",pod=~"$pod",exporter!="otlp"}[$__rate_interval])
-          |||,
-          legendFormat='{{ pod }} - {{ exporter }}',
-        ));
-
-      local exportedFailedSpans =
-        graphPanel.new(
-          'Exported failed spans',
-          datasource='$datasource',
-          interval='1m',
-          span=3,
-          legend_show=false,
-          fill=0,
-        )
-        .addTarget(prometheus.target(
-          |||
-            rate(traces_exporter_send_failed_spans{cluster=~"$cluster",namespace=~"$namespace",container=~"$container",pod=~"$pod",exporter!="otlp"}[$__rate_interval])
-          |||,
-          legendFormat='{{ pod }} - {{ exporter }}',
-        ));
-
-      local receivedSpans(receiverFilter, width) =
-        graphPanel.new(
-          'Received spans',
-          datasource='$datasource',
-          interval='1m',
-          span=width,
-          fill=1,
-        )
-        .addTarget(prometheus.target(
-          |||
-            sum(rate(traces_receiver_accepted_spans{cluster=~"$cluster",namespace=~"$namespace",container=~"$container",pod=~"$pod",%s}[$__rate_interval]))
-          ||| % receiverFilter,
-          legendFormat='Accepted',
-        ))
-        .addTarget(prometheus.target(
-          |||
-            sum(rate(traces_receiver_refused_spans{cluster=~"$cluster",namespace=~"$namespace",container=~"$container",pod=~"$pod",%s}[$__rate_interval]))
-          ||| % receiverFilter,
-          legendFormat='Refused',
-        ));
-
-      local exportedSpans(exporterFilter, width) =
-        graphPanel.new(
-          'Exported spans',
-          datasource='$datasource',
-          interval='1m',
-          span=width,
-          fill=1,
-        )
-        .addTarget(prometheus.target(
-          |||
-            sum(rate(traces_exporter_sent_spans{cluster=~"$cluster",namespace=~"$namespace",container=~"$container",pod=~"$pod",%s}[$__rate_interval]))
-          ||| % exporterFilter,
-          legendFormat='Sent',
-        ))
-        .addTarget(prometheus.target(
-          |||
-            sum(rate(traces_exporter_send_failed_spans{cluster=~"$cluster",namespace=~"$namespace",container=~"$container",pod=~"$pod",%s}[$__rate_interval]))
-          ||| % exporterFilter,
-          legendFormat='Send failed',
-        ));
-
-      local loadBalancedSpans =
-        graphPanel.new(
-          'Load-balanced spans',
-          datasource='$datasource',
-          interval='1m',
-          span=3,
-          fill=1,
-          stack=true,
-        )
-        .addTarget(prometheus.target(
-          |||
-            rate(traces_loadbalancer_backend_outcome{cluster=~"$cluster",namespace=~"$namespace",success="true",container=~"$container",pod=~"$pod"}[$__rate_interval])
-          |||,
-          legendFormat='{{ pod }}',
-        ));
-
-      local peersNum =
-        graphPanel.new(
-          'Number of peers',
-          datasource='$datasource',
-          interval='1m',
-          span=3,
-          legend_show=false,
-          fill=0,
-        )
-        .addTarget(prometheus.target(
-          |||
-            traces_loadbalancer_num_backends{cluster=~"$cluster",namespace=~"$namespace",container=~"$container",pod=~"$pod"}
-          |||,
-          legendFormat='{{ pod }}',
-        ));
-
-      dashboard.new('Agent Tracing Pipeline', tags=['grafana-agent-mixin'], editable=true, refresh='30s', time_from='now-1h')
-      .addTemplate(
-        {
-          hide: 0,
-          label: null,
-          name: 'datasource',
-          options: [],
-          query: 'prometheus',
-          refresh: 1,
-          regex: '',
-          type: 'datasource',
-        },
-      )
-      .addTemplate(
-        template.new(
-          'cluster',
-          '$datasource',
-          'label_values(agent_build_info, cluster)',
-          refresh='time',
-          current={
-            selected: true,
-            text: 'All',
-            value: '$__all',
-          },
-          includeAll=true,
-        ),
-      )
-      .addTemplate(
-        template.new(
-          'namespace',
-          '$datasource',
-          'label_values(agent_build_info, namespace)',
-          refresh='time',
-          current={
-            selected: true,
-            text: 'All',
-            value: '$__all',
-          },
-          includeAll=true,
-        ),
-      )
-      .addTemplate(
-        template.new(
-          'container',
-          '$datasource',
-          'label_values(agent_build_info, container)',
-          refresh='time',
-          current={
-            selected: true,
-            text: 'All',
-            value: '$__all',
-          },
-          includeAll=true,
-        ),
-      )
-      .addTemplate(
-        template.new(
-          'pod',
-          '$datasource',
-          'label_values(agent_build_info{container=~"$container"}, pod)',
-          refresh='time',
-          current={
-            selected: true,
-            text: 'All',
-            value: '$__all',
-          },
-          includeAll=true,
-        ),
-      )
-      .addRow(
-        row.new('Write / Read')
-        .addPanel(acceptedSpans)
-        .addPanel(refusedSpans)
-        .addPanel(sentSpans)
-        .addPanel(exportedFailedSpans)
-        .addPanel(receivedSpans('receiver!="otlp/lb"', 6))
-        .addPanel(exportedSpans('exporter!="otlp"', 6))
-      )
-      .addRow(
-        row.new('Load balancing')
-        .addPanel(loadBalancedSpans)
-        .addPanel(peersNum)
-        .addPanel(receivedSpans('receiver="otlp/lb"', 3))
-        .addPanel(exportedSpans('exporter="otlp"', 3))
-      ),
-
-    'agent-logs-pipeline.json':
-      local sumByPodRateCounter(title, metric, format='short') =
-        graphPanel.new(
-          title,
-          datasource='$datasource',
-          interval='1m',
-          span=6,
-          fill=1,
-          stack=true,
-          format=format
-        )
-        .addTarget(prometheus.target(
-          |||
-            sum by($groupBy) (rate(%s{cluster=~"$cluster",namespace=~"$namespace",container=~"$container",pod=~"$pod"}[$__rate_interval]))
-          ||| % [metric],
-          legendFormat='{{$groupBy}}',
-        ));
-
-      local sumByPodGague(title, metric) =
-        graphPanel.new(
-          title,
-          datasource='$datasource',
-          interval='1m',
-          span=6,
-          fill=1,
-          stack=true,
-        )
-        .addTarget(prometheus.target(
-          |||
-            sum by($groupBy) (%s{cluster=~"$cluster",namespace=~"$namespace",container=~"$container",pod=~"$pod"})
-          ||| % [metric],
-          legendFormat='{{$groupBy}}',
-        ));
-
-      local requestSuccessRate() =
-        graphPanel.new(
-          'Write requests success rate [%]',
-          datasource='$datasource',
-          interval='1m',
-          fill=0,
-          span=6,
-          format='%',
-        )
-        .addTarget(prometheus.target(
-          |||
-            sum by($groupBy) (rate(promtail_request_duration_seconds_bucket{status_code=~"2..", cluster=~"$cluster",namespace=~"$namespace",container=~"$container",pod=~"$pod"}[$__rate_interval]))
-            /
-            sum by($groupBy) (rate(promtail_request_duration_seconds_bucket{cluster=~"$cluster",namespace=~"$namespace",container=~"$container",pod=~"$pod"}[$__rate_interval]))
-            * 100
-          |||,
-          legendFormat='{{$groupBy}}',
-        ));
-
-      local histogramQuantile(title, metric, q) =
-        graphPanel.new(
-          title,
-          datasource='$datasource',
-          interval='1m',
-          span=6,
-          fill=0,
-          format='s',
-        )
-        .addTarget(prometheus.target(
-          |||
-            histogram_quantile(
-              %f, 
-              sum by (le, $groupBy)
-              (rate(%s{cluster=~"$cluster",namespace=~"$namespace",container=~"$container",pod=~"$pod"}[$__rate_interval]))
-            )
-          ||| % [q, metric],
-          legendFormat='{{$groupBy}}',
-        ));
-
-      local histogramAverage(title, metric) =
-        graphPanel.new(
-          title,
-          datasource='$datasource',
-          interval='1m',
-          span=6,
-          fill=0,
-          format='s',
-        )
-        .addTarget(prometheus.target(
-          |||
-            (sum by (le, $groupBy) (rate(%s_sum{cluster=~"$cluster",namespace=~"$namespace",container=~"$container",pod=~"$pod"}[$__rate_interval])))
-            /
-            (sum by (le, $groupBy) (rate(%s_count{cluster=~"$cluster",namespace=~"$namespace",container=~"$container",pod=~"$pod"}[$__rate_interval])))
-          ||| % [metric, metric],
-          legendFormat='{{$groupBy}}',
-        ));
-
-
-      dashboard.new('Agent Logs Pipeline', tags=['grafana-agent-mixin'], editable=true, refresh='30s', time_from='now-1h')
-      .addTemplate(
-        {
-          hide: 0,
-          label: null,
-          name: 'datasource',
-          options: [],
-          query: 'prometheus',
-          refresh: 1,
-          regex: '',
-          type: 'datasource',
-        },
-      )
-      .addTemplate(
-        template.new(
-          'cluster',
-          '$datasource',
-          'label_values(agent_build_info, cluster)',
-          refresh='time',
-          current={
-            selected: true,
-            text: 'All',
-            value: '$__all',
-          },
-          includeAll=true,
-        ),
-      )
-      .addTemplate(
-        template.new(
-          'namespace',
-          '$datasource',
-          'label_values(agent_build_info, namespace)',
-          refresh='time',
-          current={
-            selected: true,
-            text: 'All',
-            value: '$__all',
-          },
-          includeAll=true,
-        ),
-      )
-      .addTemplate(
-        template.new(
-          'container',
-          '$datasource',
-          'label_values(agent_build_info, container)',
-          refresh='time',
-          current={
-            selected: true,
-            text: 'All',
-            value: '$__all',
-          },
-          includeAll=true,
-        ),
-      )
-      .addTemplate(
-        template.new(
-          'pod',
-          '$datasource',
-          'label_values(agent_build_info{container=~"$container"}, pod)',
-          refresh='time',
-          current={
-            selected: true,
-            text: 'All',
-            value: '$__all',
-          },
-          includeAll=true,
-        ),
-      )
-      .addTemplate(
-        template.custom(
-          'groupBy',
-          'pod,cluster,namespace',
-          'pod',
-        ),
-      )
-      .addRow(
-        row.new('Errors', height=500)
-        .addPanel(sumByPodRateCounter('Dropped bytes rate [B/s]', 'promtail_dropped_bytes_total', format='Bps'))
-        .addPanel(requestSuccessRate())
-      )
-      .addRow(
-        row.new('Latencies', height=500)
-        .addPanel(histogramQuantile('Write latencies p99 [s]', 'promtail_request_duration_seconds_bucket', 0.99))
-        .addPanel(histogramQuantile('Write latencies p90 [s]', 'promtail_request_duration_seconds_bucket', 0.90))
-        .addPanel(histogramQuantile('Write latencies p50 [s]', 'promtail_request_duration_seconds_bucket', 0.50))
-        .addPanel(histogramAverage('Write latencies average [s]', 'promtail_request_duration_seconds'))
-      )
-      .addRow(
-        row.new('Logs volume', height=500)
-        .addPanel(sumByPodRateCounter('Bytes read rate [B/s]', 'promtail_read_bytes_total', format='Bps'))
-        .addPanel(sumByPodRateCounter('Lines read rate [lines/s]', 'promtail_read_lines_total'))
-        .addPanel(sumByPodGague('Active files count', 'promtail_files_active_total'))
-        .addPanel(sumByPodRateCounter('Entries sent rate [entries/s]', 'promtail_sent_entries_total'))
-      ),
-  },
-}
diff --git a/production/grafana-agent-mixin/debugging.libsonnet b/production/grafana-agent-mixin/debugging.libsonnet
deleted file mode 100644
index 711184d333f7..000000000000
--- a/production/grafana-agent-mixin/debugging.libsonnet
+++ /dev/null
@@ -1,128 +0,0 @@
-local utils = import './utils.libsonnet';
-local g = import 'grafana-builder/grafana.libsonnet';
-
-{
-  grafanaDashboards+:: {
-    'agent-operational.json':
-      utils.injectUtils(g.dashboard('Agent Operational'))
-      .addMultiTemplate('cluster', 'agent_build_info', 'cluster')
-      .addMultiTemplate('namespace', 'agent_build_info{cluster=~"$cluster"}', 'namespace')
-      .addMultiTemplate('container', 'agent_build_info{cluster=~"$cluster", namespace="$namespace"}', 'container')
-      .addMultiTemplate('pod', 'agent_build_info{cluster=~"$cluster", namespace="$namespace", container="$container"}', 'pod')
-      .addRow(
-        g.row('General')
-        .addPanel(
-          g.panel('GCs [count/s]') +
-          g.queryPanel(
-            'rate(go_gc_duration_seconds_count{cluster=~"$cluster", namespace=~"$namespace", container=~"$container", pod=~"$pod"}[5m])',
-            '{{pod}}',
-          )
-        )
-        .addPanel(
-          g.panel('Go Heap In Use') +
-          { yaxes: g.yaxes('decbytes') } +
-          g.queryPanel(
-            'go_memstats_heap_inuse_bytes{cluster=~"$cluster", namespace=~"$namespace", container=~"$container", pod=~"$pod"}',
-            '{{pod}}',
-          )
-        )
-        .addPanel(
-          g.panel('Goroutines') +
-          g.queryPanel(
-            'go_goroutines{cluster=~"$cluster", namespace=~"$namespace", container=~"$container", pod=~"$pod"}',
-            '{{pod}}',
-          )
-        )
-        .addPanel(
-          g.panel('CPU Usage [time/s]') +
-          g.queryPanel(
-            'rate(container_cpu_usage_seconds_total{cluster=~"$cluster", namespace=~"$namespace", container=~"$container", pod=~"$pod"}[5m])',
-            '{{pod}}',
-          )
-        )
-        .addPanel(
-          g.panel('Working Set Size') +
-          { yaxes: g.yaxes('decbytes') } +
-          g.queryPanel(
-            'container_memory_working_set_bytes{cluster=~"$cluster", namespace=~"$namespace", container=~"$container", pod=~"$pod"}',
-            '{{pod}}',
-          )
-        )
-        .addPanel(
-          g.panel('Promtail Bad Words') +
-          g.queryPanel(
-            'rate(promtail_custom_bad_words_total{cluster=~"$cluster", exported_namespace=~"$namespace", exported_job=~"$job"}[5m])',
-            '{{job}}',
-          )
-        )
-      )
-      .addRow(
-        g.row('Network')
-        .addPanel(
-          g.panel('Received Bytes [B/s]') +
-          { yaxes: g.yaxes('Bps') } +
-          g.queryPanel(
-            'sum by (pod) (rate(container_network_receive_bytes_total{cluster=~"$cluster", namespace=~"$namespace", pod=~"$pod"}[5m]))',
-            '{{pod}}',
-          )
-        )
-        .addPanel(
-          g.panel('Transmitted Bytes [B/s]') +
-          { yaxes: g.yaxes('Bps') } +
-          g.queryPanel(
-            'sum by (pod) (rate(container_network_transmit_bytes_total{cluster=~"$cluster", namespace=~"$namespace", pod=~"$pod"}[5m]))',
-            '{{pod}}',
-          )
-        )
-      )
-      .addRow(
-        g.row('Prometheus Read')
-        .addPanel(
-          g.panel('Heap Used per Series per Pod') +
-          { yaxes: g.yaxes('decbytes') } +
-          g.queryPanel(
-            |||
-              (sum by (pod) (avg_over_time(go_memstats_heap_inuse_bytes{cluster=~"$cluster", namespace=~"$namespace", container=~"$container", pod=~"$pod"}[1m])))
-              /
-              (sum by (pod) (agent_wal_storage_active_series{cluster=~"$cluster", namespace=~"$namespace", container=~"$container", pod=~"$pod"}))
-            |||,
-            '{{pod}}',
-          )
-        )
-        .addPanel(
-          g.panel('Avg Heap Used per Series') +
-          { yaxes: g.yaxes('decbytes') } +
-          g.queryPanel(
-            |||
-              (sum by (container) (avg_over_time(go_memstats_heap_inuse_bytes{cluster=~"$cluster", namespace=~"$namespace", container=~"$container", pod=~"$pod"}[1m])))
-              /
-              (sum by (container) (agent_wal_storage_active_series{cluster=~"$cluster", namespace=~"$namespace", container=~"$container", pod=~"$pod"}))
-            |||,
-            '{{container}}',
-          )
-        )
-        .addPanel(
-          g.panel('Series Count per Pod') +
-          g.queryPanel(
-            'sum by (pod) (agent_wal_storage_active_series{cluster=~"$cluster", namespace=~"$namespace", container=~"$container", pod=~"$pod"})',
-            '{{pod}}',
-          )
-        )
-        .addPanel(
-          g.panel('Series per Config') +
-          g.queryPanel(
-            'sum by (instance_group_name) (agent_wal_storage_active_series{cluster=~"$cluster", namespace=~"$namespace", container=~"$container", pod=~"$pod"})',
-            '{{instance_group_name}}',
-          )
-        )
-        .addPanel(
-          g.panel('Total Series') +
-          g.queryPanel(
-            'sum by (container) (agent_wal_storage_active_series{cluster=~"$cluster", namespace=~"$namespace", container=~"$container", pod=~"$pod"})',
-            '{{container}}',
-          )
-        )
-      ),
-  },
-}
-
diff --git a/production/grafana-agent-mixin/jsonnetfile.json b/production/grafana-agent-mixin/jsonnetfile.json
deleted file mode 100644
index e5a27a96ad6a..000000000000
--- a/production/grafana-agent-mixin/jsonnetfile.json
+++ /dev/null
@@ -1,25 +0,0 @@
-{
-  "dependencies": [
-    {
-      "name": "grafana-builder",
-      "source": {
-        "git": {
-          "remote": "https://github.com/grafana/jsonnet-libs",
-          "subdir": "grafana-builder"
-        }
-      },
-      "version": "master"
-    },
-    {
-      "name": "grafonnet",
-      "source": {
-        "git": {
-          "remote": "https://github.com/grafana/grafonnet-lib",
-          "subdir": "grafonnet"
-        }
-      },
-      "version": "master"
-    }
-  ]
-}
-
diff --git a/production/grafana-agent-mixin/mixin.libsonnet b/production/grafana-agent-mixin/mixin.libsonnet
deleted file mode 100644
index 2a015d681601..000000000000
--- a/production/grafana-agent-mixin/mixin.libsonnet
+++ /dev/null
@@ -1,4 +0,0 @@
-{ grafanaDashboardFolder: 'Grafana Agent' }
-+ (import 'dashboards.libsonnet')
-+ (import 'debugging.libsonnet')
-+ (import 'alerts.libsonnet')
diff --git a/production/grafana-agent-mixin/utils.libsonnet b/production/grafana-agent-mixin/utils.libsonnet
deleted file mode 100644
index 5467553a7d52..000000000000
--- a/production/grafana-agent-mixin/utils.libsonnet
+++ /dev/null
@@ -1,34 +0,0 @@
-{
-  injectUtils(dashboard):: dashboard {
-    tags: ['grafana-agent-mixin'],
-    refresh: '30s',
-    addMultiTemplateWithAll(name, metric_name, label_name, all='.*', hide=0):: self {
-      templating+: {
-        list+: [{
-          allValue: all,
-          current: {
-            selected: true,
-            text: 'All',
-            value: '$__all',
-          },
-          datasource: '$datasource',
-          hide: hide,
-          includeAll: true,
-          label: name,
-          multi: true,
-          name: name,
-          options: [],
-          query: 'label_values(%s, %s)' % [metric_name, label_name],
-          refresh: 1,
-          regex: '',
-          sort: 2,
-          tagValuesQuery: '',
-          tags: [],
-          tagsQuery: '',
-          type: 'query',
-          useTags: false,
-        }],
-      },
-    },
-  },
-}
diff --git a/production/kubernetes/README.md b/production/kubernetes/README.md
deleted file mode 100644
index 6a98bd3057b6..000000000000
--- a/production/kubernetes/README.md
+++ /dev/null
@@ -1,50 +0,0 @@
-# Kubernetes Config
-
-This directory contains Kubernetes manifest templates for rolling out the Agent.
-
-Manifests:
-
-- Metric collection (StatefulSet): [`agent-bare.yaml`](./agent-bare.yaml)
-- Log collection (DaemonSet): [`agent-loki.yaml`](./agent-loki.yaml)
-- Trace collection (Deployment): [`agent-traces.yaml`](./agent-traces.yaml)
-
-⚠️  **These manifests do not include the Agent's configuration (ConfigMaps)**,
-which are necessary to run the Agent.
-
-For sample configurations and detailed installation instructions, please head to:
-
-- [Grafana Agent Metrics Kubernetes Quickstart](https://grafana.com/docs/grafana-cloud/quickstart/agent-k8s/k8s_agent_metrics/)
-- [Grafana Agent Logs Kubernetes Quickstart](https://grafana.com/docs/grafana-cloud/quickstart/agent-k8s/k8s_agent_logs/)
-- [Grafana Agent Traces Kubernetes Quickstart](https://grafana.com/docs/grafana-cloud/quickstart/agent-k8s/k8s_agent_traces/)
-
-## Manually Applying
-
-Since the manifest files are just templates, note that they are *not* ready for
-applying out of the box and you will have to manually perform the following steps:
-
-1. Download the manifest as `manifest.yaml`
-
-2. Modify your copy of the manifest, replacing relevant variables with the appropriate values
-
-3. Apply the modified manifest file: `kubectl -n default apply -f manifest.yaml`.
-
-This directory also contains an `install-bare.sh` script that is used inside of
-Grafana Cloud instructions. If using the Grafana Agent outside of Grafana Cloud,
-it is recommended to follow the steps above instead of calling this script
-directly.
-
-## Rebuilding the manifests
-
-The manifests provided are created using Grafana Labs' production
-[Tanka configs](../tanka/grafana-agent) with some default values. If you want to
-build the YAML file with some custom values, you will need the following pieces
-of software installed:
-
-1. [Tanka](https://github.com/grafana/tanka) >= v0.8
-2. [`jsonnet-bundler`](https://github.com/jsonnet-bundler/jsonnet-bundler) >= v0.2.1
-
-See the [`template` Tanka environment](./build/templates) for the current
-settings that initialize the Grafana Agent Tanka configs.
-
-To build the YAML files, execute the `./build/build.sh` script or run `make example-kubernetes`
-from the project's root directory.
diff --git a/production/kubernetes/agent-bare.yaml b/production/kubernetes/agent-bare.yaml
deleted file mode 100644
index ccf5d13439ce..000000000000
--- a/production/kubernetes/agent-bare.yaml
+++ /dev/null
@@ -1,115 +0,0 @@
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: grafana-agent
-  namespace: ${NAMESPACE}
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
-  name: grafana-agent
-rules:
-- apiGroups:
-  - ""
-  resources:
-  - nodes
-  - nodes/proxy
-  - services
-  - endpoints
-  - pods
-  - events
-  verbs:
-  - get
-  - list
-  - watch
-- nonResourceURLs:
-  - /metrics
-  verbs:
-  - get
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  name: grafana-agent
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: ClusterRole
-  name: grafana-agent
-subjects:
-- kind: ServiceAccount
-  name: grafana-agent
-  namespace: ${NAMESPACE}
----
-apiVersion: v1
-kind: Service
-metadata:
-  labels:
-    name: grafana-agent
-  name: grafana-agent
-  namespace: ${NAMESPACE}
-spec:
-  clusterIP: None
-  ports:
-  - name: grafana-agent-http-metrics
-    port: 80
-    targetPort: 80
-  selector:
-    name: grafana-agent
----
-apiVersion: apps/v1
-kind: StatefulSet
-metadata:
-  name: grafana-agent
-  namespace: ${NAMESPACE}
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      name: grafana-agent
-  serviceName: grafana-agent
-  template:
-    metadata:
-      labels:
-        name: grafana-agent
-    spec:
-      containers:
-      - args:
-        - -config.expand-env=true
-        - -config.file=/etc/agent/agent.yaml
-        - -enable-features=integrations-next
-        - -server.http.address=0.0.0.0:80
-        env:
-        - name: HOSTNAME
-          valueFrom:
-            fieldRef:
-              fieldPath: spec.nodeName
-        image: grafana/agent:v0.39.0
-        imagePullPolicy: IfNotPresent
-        name: grafana-agent
-        ports:
-        - containerPort: 80
-          name: http-metrics
-        volumeMounts:
-        - mountPath: /var/lib/agent
-          name: agent-wal
-        - mountPath: /etc/agent
-          name: grafana-agent
-      serviceAccountName: grafana-agent
-      volumes:
-      - configMap:
-          name: grafana-agent
-        name: grafana-agent
-  updateStrategy:
-    type: RollingUpdate
-  volumeClaimTemplates:
-  - apiVersion: v1
-    kind: PersistentVolumeClaim
-    metadata:
-      name: agent-wal
-      namespace: ${NAMESPACE}
-    spec:
-      accessModes:
-      - ReadWriteOnce
-      resources:
-        requests:
-          storage: 5Gi
diff --git a/production/kubernetes/agent-loki.yaml b/production/kubernetes/agent-loki.yaml
deleted file mode 100644
index 497462d3efcb..000000000000
--- a/production/kubernetes/agent-loki.yaml
+++ /dev/null
@@ -1,100 +0,0 @@
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: grafana-agent-logs
-  namespace: ${NAMESPACE}
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
-  name: grafana-agent-logs
-rules:
-- apiGroups:
-  - ""
-  resources:
-  - nodes
-  - nodes/proxy
-  - services
-  - endpoints
-  - pods
-  - events
-  verbs:
-  - get
-  - list
-  - watch
-- nonResourceURLs:
-  - /metrics
-  verbs:
-  - get
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  name: grafana-agent-logs
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: ClusterRole
-  name: grafana-agent-logs
-subjects:
-- kind: ServiceAccount
-  name: grafana-agent-logs
-  namespace: ${NAMESPACE}
----
-apiVersion: apps/v1
-kind: DaemonSet
-metadata:
-  name: grafana-agent-logs
-  namespace: ${NAMESPACE}
-spec:
-  minReadySeconds: 10
-  selector:
-    matchLabels:
-      name: grafana-agent-logs
-  template:
-    metadata:
-      labels:
-        name: grafana-agent-logs
-    spec:
-      containers:
-      - args:
-        - -config.expand-env=true
-        - -config.file=/etc/agent/agent.yaml
-        - -server.http.address=0.0.0.0:80
-        env:
-        - name: HOSTNAME
-          valueFrom:
-            fieldRef:
-              fieldPath: spec.nodeName
-        image: grafana/agent:v0.39.0
-        imagePullPolicy: IfNotPresent
-        name: grafana-agent-logs
-        ports:
-        - containerPort: 80
-          name: http-metrics
-        securityContext:
-          privileged: true
-          runAsUser: 0
-        volumeMounts:
-        - mountPath: /etc/agent
-          name: grafana-agent-logs
-        - mountPath: /var/log
-          name: varlog
-        - mountPath: /var/lib/docker/containers
-          name: varlibdockercontainers
-          readOnly: true
-      serviceAccountName: grafana-agent-logs
-      tolerations:
-      - effect: NoSchedule
-        operator: Exists
-      volumes:
-      - configMap:
-          name: grafana-agent-logs
-        name: grafana-agent-logs
-      - hostPath:
-          path: /var/log
-        name: varlog
-      - hostPath:
-          path: /var/lib/docker/containers
-        name: varlibdockercontainers
-  updateStrategy:
-    type: RollingUpdate
diff --git a/production/kubernetes/agent-traces.yaml b/production/kubernetes/agent-traces.yaml
deleted file mode 100644
index c42cec6125e3..000000000000
--- a/production/kubernetes/agent-traces.yaml
+++ /dev/null
@@ -1,154 +0,0 @@
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: grafana-agent-traces
-  namespace: ${NAMESPACE}
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
-  name: grafana-agent-traces
-rules:
-- apiGroups:
-  - ""
-  resources:
-  - nodes
-  - nodes/proxy
-  - services
-  - endpoints
-  - pods
-  - events
-  verbs:
-  - get
-  - list
-  - watch
-- nonResourceURLs:
-  - /metrics
-  verbs:
-  - get
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  name: grafana-agent-traces
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: ClusterRole
-  name: grafana-agent-traces
-subjects:
-- kind: ServiceAccount
-  name: grafana-agent-traces
-  namespace: ${NAMESPACE}
----
-apiVersion: v1
-kind: Service
-metadata:
-  labels:
-    name: grafana-agent-traces
-  name: grafana-agent-traces
-  namespace: ${NAMESPACE}
-spec:
-  ports:
-  - name: grafana-agent-traces-http-metrics
-    port: 80
-    targetPort: 80
-  - name: grafana-agent-traces-thrift-compact
-    port: 6831
-    protocol: UDP
-    targetPort: 6831
-  - name: grafana-agent-traces-thrift-binary
-    port: 6832
-    protocol: UDP
-    targetPort: 6832
-  - name: grafana-agent-traces-thrift-http
-    port: 14268
-    protocol: TCP
-    targetPort: 14268
-  - name: grafana-agent-traces-thrift-grpc
-    port: 14250
-    protocol: TCP
-    targetPort: 14250
-  - name: grafana-agent-traces-zipkin
-    port: 9411
-    protocol: TCP
-    targetPort: 9411
-  - name: grafana-agent-traces-otlp-grpc
-    port: 4317
-    protocol: TCP
-    targetPort: 4317
-  - name: grafana-agent-traces-otlp-http
-    port: 4318
-    protocol: TCP
-    targetPort: 4318
-  - name: grafana-agent-traces-opencensus
-    port: 55678
-    protocol: TCP
-    targetPort: 55678
-  selector:
-    name: grafana-agent-traces
----
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: grafana-agent-traces
-  namespace: ${NAMESPACE}
-spec:
-  minReadySeconds: 10
-  replicas: 1
-  revisionHistoryLimit: 10
-  selector:
-    matchLabels:
-      name: grafana-agent-traces
-  template:
-    metadata:
-      labels:
-        name: grafana-agent-traces
-    spec:
-      containers:
-      - args:
-        - -config.expand-env=true
-        - -config.file=/etc/agent/agent.yaml
-        - -server.http.address=0.0.0.0:80
-        env:
-        - name: HOSTNAME
-          valueFrom:
-            fieldRef:
-              fieldPath: spec.nodeName
-        image: grafana/agent:v0.39.0
-        imagePullPolicy: IfNotPresent
-        name: grafana-agent-traces
-        ports:
-        - containerPort: 80
-          name: http-metrics
-        - containerPort: 6831
-          name: thrift-compact
-          protocol: UDP
-        - containerPort: 6832
-          name: thrift-binary
-          protocol: UDP
-        - containerPort: 14268
-          name: thrift-http
-          protocol: TCP
-        - containerPort: 14250
-          name: thrift-grpc
-          protocol: TCP
-        - containerPort: 9411
-          name: zipkin
-          protocol: TCP
-        - containerPort: 4317
-          name: otlp-grpc
-          protocol: TCP
-        - containerPort: 4318
-          name: otlp-http
-          protocol: TCP
-        - containerPort: 55678
-          name: opencensus
-          protocol: TCP
-        volumeMounts:
-        - mountPath: /etc/agent
-          name: grafana-agent-traces
-      serviceAccountName: grafana-agent-traces
-      volumes:
-      - configMap:
-          name: grafana-agent-traces
-        name: grafana-agent-traces
diff --git a/production/kubernetes/build/build.sh b/production/kubernetes/build/build.sh
deleted file mode 100755
index 474afb2f1235..000000000000
--- a/production/kubernetes/build/build.sh
+++ /dev/null
@@ -1,15 +0,0 @@
-#!/usr/bin/env bash
-# shellcheck shell=bash
-
-set +e
-
-DIRNAME=$(dirname "$0")
-
-pushd "${DIRNAME}" || exit 1
-# Make sure dependencies are up to date
-jb install
-tk show --dangerous-allow-redirect ./templates/bare > "${PWD}/../agent-bare.yaml"
-tk show --dangerous-allow-redirect ./templates/loki > "${PWD}/../agent-loki.yaml"
-tk show --dangerous-allow-redirect ./templates/traces > "${PWD}/../agent-traces.yaml"
-tk show --dangerous-allow-redirect ./templates/operator > "${PWD}/../../operator/templates/agent-operator.yaml"
-popd || exit 1
diff --git a/production/kubernetes/build/jsonnetfile.json b/production/kubernetes/build/jsonnetfile.json
deleted file mode 100644
index 392936f6804d..000000000000
--- a/production/kubernetes/build/jsonnetfile.json
+++ /dev/null
@@ -1,49 +0,0 @@
-{
-  "version": 1,
-  "dependencies": [
-    {
-      "source": {
-        "git": {
-          "remote": "https://github.com/grafana/jsonnet-libs.git",
-          "subdir": "ksonnet-util"
-        }
-      },
-      "version": "master"
-    },
-    {
-      "source": {
-        "git": {
-          "remote": "https://github.com/jsonnet-libs/k8s-libsonnet.git",
-          "subdir": "1.21"
-        }
-      },
-      "version": "main"
-    },
-    {
-      "source": {
-        "git": {
-          "remote": "https://github.com/kubernetes/kube-state-metrics.git",
-          "subdir": "jsonnet/kube-state-metrics"
-        }
-      },
-      "version": "v2.5.0"
-    },
-    {
-      "source": {
-        "local": {
-          "directory": "../../tanka/grafana-agent"
-        }
-      },
-      "version": ""
-    },
-    {
-      "source": {
-        "local": {
-          "directory": "../../tanka/grafana-agent-operator"
-        }
-      },
-      "version": ""
-    }
-  ],
-  "legacyImports": true
-}
diff --git a/production/kubernetes/build/jsonnetfile.lock.json b/production/kubernetes/build/jsonnetfile.lock.json
deleted file mode 100644
index 3ed712040c13..000000000000
--- a/production/kubernetes/build/jsonnetfile.lock.json
+++ /dev/null
@@ -1,74 +0,0 @@
-{
-  "version": 1,
-  "dependencies": [
-    {
-      "source": {
-        "git": {
-          "remote": "https://github.com/grafana/jsonnet-libs.git",
-          "subdir": "ksonnet-util"
-        }
-      },
-      "version": "28a9c400acbc02994ea8b08494571c7b476096b6",
-      "sum": "OxgtIWL4hjvG0xkMwUzZ7Yjs52zUhLhaVQpwHCbqf8A="
-    },
-    {
-      "source": {
-        "git": {
-          "remote": "https://github.com/jsonnet-libs/grafana-agent-libsonnet.git",
-          "subdir": "0.26"
-        }
-      },
-      "version": "4763fb9dd69acd7c32ea34a708328ad7d1984100",
-      "sum": "AcBuxWZhGRgcfHFUxYRUOhAnQ9FnEP37fVl68jAQNc8=",
-      "name": "agent-operator-gen"
-    },
-    {
-      "source": {
-        "git": {
-          "remote": "https://github.com/jsonnet-libs/k8s-libsonnet.git",
-          "subdir": "1.21"
-        }
-      },
-      "version": "f8efa81cf15257bd151b97e31599e20b2ba5311b",
-      "sum": "FYub7WxElJkqjjXA++DemsKHwsPqUFW945BTgpVop6Q="
-    },
-    {
-      "source": {
-        "git": {
-          "remote": "https://github.com/jsonnet-libs/prometheus-operator-libsonnet.git",
-          "subdir": "0.57"
-        }
-      },
-      "version": "daddbdd13374107f78a2489301f7c23ae1eb0b16",
-      "sum": "8+yZ7FalORuq5ZGpqSnSa+/4YQcPa7x9rClXcjgGCq0=",
-      "name": "prom-operator-gen"
-    },
-    {
-      "source": {
-        "git": {
-          "remote": "https://github.com/kubernetes/kube-state-metrics.git",
-          "subdir": "jsonnet/kube-state-metrics"
-        }
-      },
-      "version": "0567e1e1b981755e563d2244fa1659563f2cddbc",
-      "sum": "P0dCnbzyPScQGNXwXRcwiPkMLeTq0IPNbSTysDbySnM="
-    },
-    {
-      "source": {
-        "local": {
-          "directory": "../../tanka/grafana-agent"
-        }
-      },
-      "version": ""
-    },
-    {
-      "source": {
-        "local": {
-          "directory": "../../tanka/grafana-agent-operator"
-        }
-      },
-      "version": ""
-    }
-  ],
-  "legacyImports": false
-}
diff --git a/production/kubernetes/build/lib/k.libsonnet b/production/kubernetes/build/lib/k.libsonnet
deleted file mode 100644
index 3004bc3cf935..000000000000
--- a/production/kubernetes/build/lib/k.libsonnet
+++ /dev/null
@@ -1 +0,0 @@
-(import 'github.com/jsonnet-libs/k8s-libsonnet/1.21/main.libsonnet')
diff --git a/production/kubernetes/build/lib/version.libsonnet b/production/kubernetes/build/lib/version.libsonnet
deleted file mode 100644
index 70fb0ff0cffe..000000000000
--- a/production/kubernetes/build/lib/version.libsonnet
+++ /dev/null
@@ -1 +0,0 @@
-'grafana/agent:v0.39.0'
diff --git a/production/kubernetes/build/templates/bare/main.jsonnet b/production/kubernetes/build/templates/bare/main.jsonnet
deleted file mode 100644
index fda8512f0291..000000000000
--- a/production/kubernetes/build/templates/bare/main.jsonnet
+++ /dev/null
@@ -1,41 +0,0 @@
-local agent = import 'grafana-agent/v2/main.libsonnet';
-local k = import 'ksonnet-util/kausal.libsonnet';
-
-local pvc = k.core.v1.persistentVolumeClaim;
-local volumeMount = k.core.v1.volumeMount;
-local containerPort = k.core.v1.containerPort;
-
-{
-  agent:
-    agent.new(name='grafana-agent', namespace='${NAMESPACE}') +
-    agent.withStatefulSetController(
-      replicas=1,
-      volumeClaims=[
-        pvc.new() +
-        pvc.mixin.metadata.withName('agent-wal') +
-        pvc.mixin.metadata.withNamespace('${NAMESPACE}') +
-        pvc.mixin.spec.withAccessModes('ReadWriteOnce') +
-        pvc.mixin.spec.resources.withRequests({ storage: '5Gi' }),
-      ],
-    ) +
-    agent.withConfigHash(false) +
-    agent.withArgsMixin({
-      'enable-features': 'integrations-next'
-    },) +
-    // add dummy config or else will fail
-    agent.withAgentConfig({
-      server: { log_level: 'error' },
-    }) +
-    agent.withVolumeMountsMixin([volumeMount.new('agent-wal', '/var/lib/agent')]) +
-    // headless svc needed by statefulset
-    agent.withService() +
-    {
-      controller_service+: {
-        spec+: {
-          clusterIP: 'None',
-        },
-      },
-    } +
-    // hack to disable ConfigMap
-    { configMap:: super.configMap },
-}
diff --git a/production/kubernetes/build/templates/bare/spec.json b/production/kubernetes/build/templates/bare/spec.json
deleted file mode 100644
index d97d07154983..000000000000
--- a/production/kubernetes/build/templates/bare/spec.json
+++ /dev/null
@@ -1,11 +0,0 @@
-{
-  "apiVersion": "tanka.dev/v1alpha1",
-  "kind": "Environment",
-  "metadata": {
-    "name": "template"
-  },
-  "spec": {
-    "apiServer": "",
-    "namespace": ""
-  }
-}
diff --git a/production/kubernetes/build/templates/base-sigv4/main.jsonnet b/production/kubernetes/build/templates/base-sigv4/main.jsonnet
deleted file mode 100644
index 5297475e61d9..000000000000
--- a/production/kubernetes/build/templates/base-sigv4/main.jsonnet
+++ /dev/null
@@ -1,31 +0,0 @@
-local agent = import 'grafana-agent/grafana-agent.libsonnet';
-
-local k = import 'ksonnet-util/kausal.libsonnet';
-local serviceAccount = k.core.v1.serviceAccount;
-
-agent {
-  _images+:: {
-    agent: (import 'version.libsonnet'),
-  },
-
-  _config+:: {
-    namespace: '${NAMESPACE}',
-    agent_remote_write: [{
-      url: '${REMOTE_WRITE_URL}',
-      sigv4: {
-        region: '${REGION}',
-      },
-    }],
-
-    // Since the config map isn't managed by Tanka, we don't want to
-    // add the configmap's hash as an annotation for the Kubernetes
-    // YAML manifest.
-    agent_config_hash_annotation: false,
-  },
-
-  agent_rbac+: {
-    service_account+: serviceAccount.mixin.metadata.withAnnotationsMixin({
-      'eks.amazonaws.com/role-arn': '${ROLE_ARN}',
-    }),
-  },
-}
diff --git a/production/kubernetes/build/templates/base-sigv4/spec.json b/production/kubernetes/build/templates/base-sigv4/spec.json
deleted file mode 100644
index d97d07154983..000000000000
--- a/production/kubernetes/build/templates/base-sigv4/spec.json
+++ /dev/null
@@ -1,11 +0,0 @@
-{
-  "apiVersion": "tanka.dev/v1alpha1",
-  "kind": "Environment",
-  "metadata": {
-    "name": "template"
-  },
-  "spec": {
-    "apiServer": "",
-    "namespace": ""
-  }
-}
diff --git a/production/kubernetes/build/templates/base/main.jsonnet b/production/kubernetes/build/templates/base/main.jsonnet
deleted file mode 100644
index 687b6ad74ddd..000000000000
--- a/production/kubernetes/build/templates/base/main.jsonnet
+++ /dev/null
@@ -1,23 +0,0 @@
-local agent = import 'grafana-agent/grafana-agent.libsonnet';
-
-agent {
-  _images+:: {
-    agent: (import 'version.libsonnet'),
-  },
-
-  _config+:: {
-    namespace: '${NAMESPACE}',
-    agent_remote_write: [{
-      url: '${REMOTE_WRITE_URL}',
-      basic_auth: {
-        username: '${REMOTE_WRITE_USERNAME}',
-        password: '${REMOTE_WRITE_PASSWORD}',
-      },
-    }],
-
-    // Since the config map isn't managed by Tanka, we don't want to
-    // add the configmap's hash as an annotation for the Kubernetes
-    // YAML manifest.
-    agent_config_hash_annotation: false,
-  },
-}
diff --git a/production/kubernetes/build/templates/base/spec.json b/production/kubernetes/build/templates/base/spec.json
deleted file mode 100644
index d97d07154983..000000000000
--- a/production/kubernetes/build/templates/base/spec.json
+++ /dev/null
@@ -1,11 +0,0 @@
-{
-  "apiVersion": "tanka.dev/v1alpha1",
-  "kind": "Environment",
-  "metadata": {
-    "name": "template"
-  },
-  "spec": {
-    "apiServer": "",
-    "namespace": ""
-  }
-}
diff --git a/production/kubernetes/build/templates/loki/main.jsonnet b/production/kubernetes/build/templates/loki/main.jsonnet
deleted file mode 100644
index 1ec9540e62e8..000000000000
--- a/production/kubernetes/build/templates/loki/main.jsonnet
+++ /dev/null
@@ -1,17 +0,0 @@
-local agent = import 'grafana-agent/v2/main.libsonnet';
-local k = import 'ksonnet-util/kausal.libsonnet';
-
-{
-  agent:
-    agent.new(name='grafana-agent-logs', namespace='${NAMESPACE}') + 
-    agent.withDaemonSetController() + 
-    agent.withConfigHash(false) +
-    // add dummy config or else will fail
-    agent.withAgentConfig({
-      server: { log_level: 'error' },
-    }) +
-    agent.withLogVolumeMounts() +
-    agent.withLogPermissions() +
-    // hack to disable configmap
-    { configMap:: super.configMap }
-}
diff --git a/production/kubernetes/build/templates/loki/spec.json b/production/kubernetes/build/templates/loki/spec.json
deleted file mode 100644
index d97d07154983..000000000000
--- a/production/kubernetes/build/templates/loki/spec.json
+++ /dev/null
@@ -1,11 +0,0 @@
-{
-  "apiVersion": "tanka.dev/v1alpha1",
-  "kind": "Environment",
-  "metadata": {
-    "name": "template"
-  },
-  "spec": {
-    "apiServer": "",
-    "namespace": ""
-  }
-}
diff --git a/production/kubernetes/build/templates/operator/main.jsonnet b/production/kubernetes/build/templates/operator/main.jsonnet
deleted file mode 100644
index efc5b6e9df9f..000000000000
--- a/production/kubernetes/build/templates/operator/main.jsonnet
+++ /dev/null
@@ -1,160 +0,0 @@
-local k = import 'ksonnet-util/kausal.libsonnet';
-local secret = k.core.v1.secret;
-local pvc = k.core.v1.persistentVolumeClaim;
-
-local gen = import 'agent-operator-gen/main.libsonnet';
-local ga = gen.monitoring.v1alpha1.grafanaAgent;
-local mi = gen.monitoring.v1alpha1.metricsInstance;
-local li = gen.monitoring.v1alpha1.logsInstance;
-local pl = gen.monitoring.v1alpha1.podLogs;
-local int = gen.monitoring.v1alpha1.integration;
-
-local op = import 'grafana-agent-operator/operator.libsonnet';
-local ga_util = import 'grafana-agent-operator/util/grafana-agent.libsonnet';
-local mi_util = import 'grafana-agent-operator/util/metricsinstance.libsonnet';
-local li_util = import 'grafana-agent-operator/util/logsinstance.libsonnet';
-local pl_util = import 'grafana-agent-operator/util/k8slogs.libsonnet';
-local mon_util = import 'grafana-agent-operator/util/k8smonitors.libsonnet';
-local int_util = import 'grafana-agent-operator/util/integrations.libsonnet';
-
-local ksm = import 'kube-state-metrics/kube-state-metrics.libsonnet';
-
-{
-  local this = self,
-
-  _images:: {
-    agent: 'grafana/agent:v0.39.0',
-    agent_operator: 'grafana/agent-operator:v0.39.0',
-    ksm: 'registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.5.0',
-  },
-
-  _config:: {
-    namespace: '${NAMESPACE}',
-    metrics_url: '${METRICS_URL}',
-    metrics_user: '${METRICS_USER}',
-    metrics_key: '${METRICS_KEY}',
-    logs_url: '${LOGS_URL}',
-    logs_user: '${LOGS_USER}',
-    logs_key: '${LOGS_KEY}',
-    cluster_label: { cluster: '${CLUSTER}' },
-    kubelet_job: 'kubelet',
-    cadvisor_job: 'cadvisor',
-    ksm_job: 'kube-state-metrics',
-    ksm_version: '2.5.0',
-  },
-
-  operator:
-    op.new(name='grafana-agent-operator', namespace=this._config.namespace, image=this._images.agent_operator, serviceAccount='grafana-agent-operator') +
-    op.withRbac(name='grafana-agent-operator', namespace=this._config.namespace),
-
-  grafana_agent:
-    ga.new(name='grafana-agent') +
-    ga.metadata.withNamespace(this._config.namespace) +
-    ga.spec.withServiceAccountName('grafana-agent') +
-    ga.spec.withImage(this._images.agent) +
-    ga.spec.metrics.instanceSelector.withMatchLabels({ agent: 'grafana-agent' }) +
-    ga.spec.logs.instanceSelector.withMatchLabels({ agent: 'grafana-agent' }) +
-    ga.spec.integrations.selector.withMatchLabels({ agent: 'grafana-agent' }) +
-    ga.spec.metrics.withExternalLabels(this._config.cluster_label),
-  rbac:
-    ga_util.withRbac(name='grafana-agent', namespace=this._config.namespace),
-
-  metrics_instance:
-    mi.new(name='grafana-agent-metrics') +
-    mi.metadata.withNamespace(this._config.namespace) +
-    mi.metadata.withLabels({ agent: 'grafana-agent' }) +
-    mi.spec.serviceMonitorSelector.withMatchLabels({ instance: 'primary' }) +
-    mi_util.withRemoteWrite(secretName='metrics-secret', metricsUrl=this._config.metrics_url) +
-    mi_util.withNilServiceMonitorNamespace(),
-  metrics_secret:
-    secret.new('metrics-secret', {}) +
-    secret.withStringData({
-      username: this._config.metrics_user,
-      password: this._config.metrics_key,
-    }) + secret.mixin.metadata.withNamespace(this._config.namespace),
-
-  logs_instance:
-    li.new(name='grafana-agent-logs') +
-    li.metadata.withNamespace(this._config.namespace) +
-    li.metadata.withLabels({ agent: 'grafana-agent' }) +
-    li.spec.podLogsSelector.withMatchLabels({ instance: 'primary' }) +
-    li_util.withLogsClient(secretName='logs-secret', logsUrl=this._config.logs_url, externalLabels=this._config.cluster_label) +
-    li_util.withNilPodLogsNamespace(),
-  logs_secret:
-    secret.new('logs-secret', {}) +
-    secret.withStringData({
-      username: this._config.logs_user,
-      password: this._config.logs_key,
-    }) + secret.mixin.metadata.withNamespace(this._config.namespace),
-
-  pod_logs:
-    pl.new('kubernetes-logs') +
-    pl.metadata.withNamespace(this._config.namespace) +
-    pl.metadata.withLabels({ instance: 'primary' }) +
-    pl.spec.withPipelineStages(pl.spec.pipelineStages.withCri({})) +
-    pl.spec.namespaceSelector.withAny(true) +
-    pl.spec.selector.withMatchLabels({}) +
-    pl.spec.withRelabelings(pl_util.withK8sLogsRelabeling()),
-
-  k8s_monitors: [
-    mon_util.newKubernetesMonitor(
-      name='kubelet-monitor',
-      namespace=this._config.namespace,
-      monitorLabels={ instance: 'primary' },
-      targetNamespace='default',
-      targetLabels={ 'app.kubernetes.io/name': 'kubelet' },
-      jobLabel=this._config.kubelet_job,
-      metricsPath='/metrics',
-      allowlist=false,
-      allowlistMetrics=[]
-    ),
-    mon_util.newKubernetesMonitor(
-      name='cadvisor-monitor',
-      namespace=this._config.namespace,
-      monitorLabels={ instance: 'primary' },
-      targetNamespace='default',
-      targetLabels={ 'app.kubernetes.io/name': 'kubelet' },
-      jobLabel=this._config.cadvisor_job,
-      metricsPath='/metrics/cadvisor',
-      allowlist=false,
-      allowlistMetrics=[]
-    ),
-    mon_util.newServiceMonitor(
-      name='ksm-monitor',
-      namespace=this._config.namespace,
-      monitorLabels={ instance: 'primary' },
-      targetNamespace=this._config.namespace,
-      targetLabels={ 'app.kubernetes.io/name': 'kube-state-metrics' },
-      jobLabel=this._config.ksm_job,
-      metricsPath='/metrics',
-      allowlist=false,
-      allowlistMetrics=[]
-    ),
-  ],
-
-  kube_state_metrics:
-    ksm {
-      name:: 'kube-state-metrics',
-      namespace:: this._config.namespace,
-      version:: this._config.ksm_version,
-      image:: this._images.ksm,
-    },
-
-  events:
-    int.new('agent-eventhandler') +
-    int.metadata.withNamespace(this._config.namespace) +
-    int.metadata.withLabels({ agent: 'grafana-agent' }) +
-    int.spec.withName('eventhandler') +
-    int.spec.type.withUnique(true) +
-    int.spec.withConfig({
-      logs_instance: this._config.namespace + '/' + 'grafana-agent-logs',
-      cache_path: '/etc/eventhandler/eventhandler.cache',
-    }) +
-    int_util.withPVC('agent-eventhandler'),
-  pvc:
-    pvc.new('agent-eventhandler') +
-    pvc.mixin.metadata.withNamespace(this._config.namespace) +
-    pvc.mixin.spec.withAccessModes('ReadWriteOnce') +
-    pvc.mixin.spec.resources.withRequests({ storage: '1Gi' }),
-
-}
diff --git a/production/kubernetes/build/templates/operator/spec.json b/production/kubernetes/build/templates/operator/spec.json
deleted file mode 100644
index d97d07154983..000000000000
--- a/production/kubernetes/build/templates/operator/spec.json
+++ /dev/null
@@ -1,11 +0,0 @@
-{
-  "apiVersion": "tanka.dev/v1alpha1",
-  "kind": "Environment",
-  "metadata": {
-    "name": "template"
-  },
-  "spec": {
-    "apiServer": "",
-    "namespace": ""
-  }
-}
diff --git a/production/kubernetes/build/templates/traces/main.jsonnet b/production/kubernetes/build/templates/traces/main.jsonnet
deleted file mode 100644
index 4868b6829aaf..000000000000
--- a/production/kubernetes/build/templates/traces/main.jsonnet
+++ /dev/null
@@ -1,41 +0,0 @@
-local agent = import 'grafana-agent/v2/main.libsonnet';
-local k = import 'ksonnet-util/kausal.libsonnet';
-
-local containerPort = k.core.v1.containerPort;
-
-local newPort(name, portNumber, protocol='TCP') =
-  // Port names for pods cannot be longer than 15 characters.
-  if std.length(name) > 15 then
-    error 'port name cannot be longer than 15 characters'
-  else containerPort.new(name, portNumber) + containerPort.withProtocol(protocol);
-
-{
-  agent:
-    agent.new(name='grafana-agent-traces', namespace='${NAMESPACE}') +
-    agent.withDeploymentController(replicas=1) +
-    agent.withConfigHash(false) +
-    agent.withPortsMixin([
-      // Jaeger receiver
-      newPort('thrift-compact', 6831, 'UDP'),
-      newPort('thrift-binary', 6832, 'UDP'),
-      newPort('thrift-http', 14268, 'TCP'),
-      newPort('thrift-grpc', 14250, 'TCP'),
-
-      // Zipkin
-      newPort('zipkin', 9411, 'TCP'),
-
-      // OTLP
-      newPort('otlp-grpc', 4317, 'TCP'),
-      newPort('otlp-http', 4318, 'TCP'),
-
-      // Opencensus
-      newPort('opencensus', 55678, 'TCP'),
-    ]) + 
-    agent.withService() +
-    // add dummy config or will fail
-    agent.withAgentConfig({
-      server: { log_level: 'error' },
-    }) + 
-    // remove configMap for generated manifests
-    { configMap:: super.configMap }
-}
diff --git a/production/kubernetes/build/templates/traces/spec.json b/production/kubernetes/build/templates/traces/spec.json
deleted file mode 100644
index d97d07154983..000000000000
--- a/production/kubernetes/build/templates/traces/spec.json
+++ /dev/null
@@ -1,11 +0,0 @@
-{
-  "apiVersion": "tanka.dev/v1alpha1",
-  "kind": "Environment",
-  "metadata": {
-    "name": "template"
-  },
-  "spec": {
-    "apiServer": "",
-    "namespace": ""
-  }
-}
diff --git a/production/kubernetes/install-bare.sh b/production/kubernetes/install-bare.sh
deleted file mode 100644
index 32127903a224..000000000000
--- a/production/kubernetes/install-bare.sh
+++ /dev/null
@@ -1,34 +0,0 @@
-#!/usr/bin/env bash
-# shellcheck shell=bash
-
-#
-# install-bare.sh is an installer for the Agent without a ConfigMap. It is
-# used during the Grafana Cloud integrations wizard and is not recommended
-# to be used directly. Instead of calling this script directly, please
-# make a copy of ./agent-bare.yaml and modify it for your needs.
-#
-# Note that agent-bare.yaml does not have a ConfigMap, so the Grafana Agent
-# will not launch until one is created. For more information on setting up
-# a ConfigMap, please refer to:
-#
-# Metrics quickstart: https://grafana.com/docs/grafana-cloud/quickstart/agent-k8s/k8s_agent_metrics/
-# Logs quickstart: https://grafana.com/docs/grafana-cloud/quickstart/agent-k8s/k8s_agent_logs/
-#
-
-check_installed() {
-  if ! type "$1" >/dev/null 2>&1; then
-    echo "error: $1 not installed" >&2
-    exit 1
-  fi
-}
-
-check_installed curl
-check_installed envsubst
-
-MANIFEST_BRANCH=v0.39.0
-MANIFEST_URL=${MANIFEST_URL:-https://raw.githubusercontent.com/grafana/agent/${MANIFEST_BRANCH}/production/kubernetes/agent-bare.yaml}
-NAMESPACE=${NAMESPACE:-default}
-
-export NAMESPACE
-
-curl -fsSL "$MANIFEST_URL" | envsubst
diff --git a/production/operator/crds/monitoring.coreos.com_podmonitors.yaml b/production/operator/crds/monitoring.coreos.com_podmonitors.yaml
deleted file mode 100644
index 3e1fae0fc527..000000000000
--- a/production/operator/crds/monitoring.coreos.com_podmonitors.yaml
+++ /dev/null
@@ -1,679 +0,0 @@
----
-apiVersion: apiextensions.k8s.io/v1
-kind: CustomResourceDefinition
-metadata:
-  annotations:
-    controller-gen.kubebuilder.io/version: v0.9.2
-  creationTimestamp: null
-  name: podmonitors.monitoring.coreos.com
-spec:
-  group: monitoring.coreos.com
-  names:
-    categories:
-    - prometheus-operator
-    kind: PodMonitor
-    listKind: PodMonitorList
-    plural: podmonitors
-    shortNames:
-    - pmon
-    singular: podmonitor
-  scope: Namespaced
-  versions:
-  - name: v1
-    schema:
-      openAPIV3Schema:
-        description: PodMonitor defines monitoring for a set of pods.
-        properties:
-          apiVersion:
-            description: 'APIVersion defines the versioned schema of this representation
-              of an object. Servers should convert recognized schemas to the latest
-              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
-            type: string
-          kind:
-            description: 'Kind is a string value representing the REST resource this
-              object represents. Servers may infer this from the endpoint the client
-              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
-            type: string
-          metadata:
-            type: object
-          spec:
-            description: Specification of desired Pod selection for target discovery
-              by Prometheus.
-            properties:
-              attachMetadata:
-                description: Attaches node metadata to discovered targets. Requires
-                  Prometheus v2.35.0 and above.
-                properties:
-                  node:
-                    description: When set to true, Prometheus must have permissions
-                      to get Nodes.
-                    type: boolean
-                type: object
-              jobLabel:
-                description: The label to use to retrieve the job name from.
-                type: string
-              labelLimit:
-                description: Per-scrape limit on number of labels that will be accepted
-                  for a sample. Only valid in Prometheus versions 2.27.0 and newer.
-                format: int64
-                type: integer
-              labelNameLengthLimit:
-                description: Per-scrape limit on length of labels name that will be
-                  accepted for a sample. Only valid in Prometheus versions 2.27.0
-                  and newer.
-                format: int64
-                type: integer
-              labelValueLengthLimit:
-                description: Per-scrape limit on length of labels value that will
-                  be accepted for a sample. Only valid in Prometheus versions 2.27.0
-                  and newer.
-                format: int64
-                type: integer
-              namespaceSelector:
-                description: Selector to select which namespaces the Endpoints objects
-                  are discovered from.
-                properties:
-                  any:
-                    description: Boolean describing whether all namespaces are selected
-                      in contrast to a list restricting them.
-                    type: boolean
-                  matchNames:
-                    description: List of namespace names to select from.
-                    items:
-                      type: string
-                    type: array
-                type: object
-              podMetricsEndpoints:
-                description: A list of endpoints allowed as part of this PodMonitor.
-                items:
-                  description: PodMetricsEndpoint defines a scrapeable endpoint of
-                    a Kubernetes Pod serving Prometheus metrics.
-                  properties:
-                    authorization:
-                      description: Authorization section for this endpoint
-                      properties:
-                        credentials:
-                          description: The secret's key that contains the credentials
-                            of the request
-                          properties:
-                            key:
-                              description: The key of the secret to select from.  Must
-                                be a valid secret key.
-                              type: string
-                            name:
-                              description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                TODO: Add other useful fields. apiVersion, kind, uid?'
-                              type: string
-                            optional:
-                              description: Specify whether the Secret or its key must
-                                be defined
-                              type: boolean
-                          required:
-                          - key
-                          type: object
-                          x-kubernetes-map-type: atomic
-                        type:
-                          description: Set the authentication type. Defaults to Bearer,
-                            Basic will cause an error
-                          type: string
-                      type: object
-                    basicAuth:
-                      description: 'BasicAuth allow an endpoint to authenticate over
-                        basic authentication. More info: https://prometheus.io/docs/operating/configuration/#endpoint'
-                      properties:
-                        password:
-                          description: The secret in the service monitor namespace
-                            that contains the password for authentication.
-                          properties:
-                            key:
-                              description: The key of the secret to select from.  Must
-                                be a valid secret key.
-                              type: string
-                            name:
-                              description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                TODO: Add other useful fields. apiVersion, kind, uid?'
-                              type: string
-                            optional:
-                              description: Specify whether the Secret or its key must
-                                be defined
-                              type: boolean
-                          required:
-                          - key
-                          type: object
-                          x-kubernetes-map-type: atomic
-                        username:
-                          description: The secret in the service monitor namespace
-                            that contains the username for authentication.
-                          properties:
-                            key:
-                              description: The key of the secret to select from.  Must
-                                be a valid secret key.
-                              type: string
-                            name:
-                              description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                TODO: Add other useful fields. apiVersion, kind, uid?'
-                              type: string
-                            optional:
-                              description: Specify whether the Secret or its key must
-                                be defined
-                              type: boolean
-                          required:
-                          - key
-                          type: object
-                          x-kubernetes-map-type: atomic
-                      type: object
-                    bearerTokenSecret:
-                      description: Secret to mount to read bearer token for scraping
-                        targets. The secret needs to be in the same namespace as the
-                        pod monitor and accessible by the Prometheus Operator.
-                      properties:
-                        key:
-                          description: The key of the secret to select from.  Must
-                            be a valid secret key.
-                          type: string
-                        name:
-                          description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                            TODO: Add other useful fields. apiVersion, kind, uid?'
-                          type: string
-                        optional:
-                          description: Specify whether the Secret or its key must
-                            be defined
-                          type: boolean
-                      required:
-                      - key
-                      type: object
-                      x-kubernetes-map-type: atomic
-                    enableHttp2:
-                      description: Whether to enable HTTP2.
-                      type: boolean
-                    filterRunning:
-                      description: 'Drop pods that are not running. (Failed, Succeeded).
-                        Enabled by default. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#pod-phase'
-                      type: boolean
-                    followRedirects:
-                      description: FollowRedirects configures whether scrape requests
-                        follow HTTP 3xx redirects.
-                      type: boolean
-                    honorLabels:
-                      description: HonorLabels chooses the metric's labels on collisions
-                        with target labels.
-                      type: boolean
-                    honorTimestamps:
-                      description: HonorTimestamps controls whether Prometheus respects
-                        the timestamps present in scraped data.
-                      type: boolean
-                    interval:
-                      description: Interval at which metrics should be scraped If
-                        not specified Prometheus' global scrape interval is used.
-                      pattern: ^(0|(([0-9]+)y)?(([0-9]+)w)?(([0-9]+)d)?(([0-9]+)h)?(([0-9]+)m)?(([0-9]+)s)?(([0-9]+)ms)?)$
-                      type: string
-                    metricRelabelings:
-                      description: MetricRelabelConfigs to apply to samples before
-                        ingestion.
-                      items:
-                        description: 'RelabelConfig allows dynamic rewriting of the
-                          label set, being applied to samples before ingestion. It
-                          defines `<metric_relabel_configs>`-section of Prometheus
-                          configuration. More info: https://prometheus.io/docs/prometheus/latest/configuration/configuration/#metric_relabel_configs'
-                        properties:
-                          action:
-                            default: replace
-                            description: Action to perform based on regex matching.
-                              Default is 'replace'. uppercase and lowercase actions
-                              require Prometheus >= 2.36.
-                            enum:
-                            - replace
-                            - Replace
-                            - keep
-                            - Keep
-                            - drop
-                            - Drop
-                            - hashmod
-                            - HashMod
-                            - labelmap
-                            - LabelMap
-                            - labeldrop
-                            - LabelDrop
-                            - labelkeep
-                            - LabelKeep
-                            - lowercase
-                            - Lowercase
-                            - uppercase
-                            - Uppercase
-                            - keepequal
-                            - KeepEqual
-                            - dropequal
-                            - DropEqual
-                            type: string
-                          modulus:
-                            description: Modulus to take of the hash of the source
-                              label values.
-                            format: int64
-                            type: integer
-                          regex:
-                            description: Regular expression against which the extracted
-                              value is matched. Default is '(.*)'
-                            type: string
-                          replacement:
-                            description: Replacement value against which a regex replace
-                              is performed if the regular expression matches. Regex
-                              capture groups are available. Default is '$1'
-                            type: string
-                          separator:
-                            description: Separator placed between concatenated source
-                              label values. default is ';'.
-                            type: string
-                          sourceLabels:
-                            description: The source labels select values from existing
-                              labels. Their content is concatenated using the configured
-                              separator and matched against the configured regular
-                              expression for the replace, keep, and drop actions.
-                            items:
-                              description: LabelName is a valid Prometheus label name
-                                which may only contain ASCII letters, numbers, as
-                                well as underscores.
-                              pattern: ^[a-zA-Z_][a-zA-Z0-9_]*$
-                              type: string
-                            type: array
-                          targetLabel:
-                            description: Label to which the resulting value is written
-                              in a replace action. It is mandatory for replace actions.
-                              Regex capture groups are available.
-                            type: string
-                        type: object
-                      type: array
-                    oauth2:
-                      description: OAuth2 for the URL. Only valid in Prometheus versions
-                        2.27.0 and newer.
-                      properties:
-                        clientId:
-                          description: The secret or configmap containing the OAuth2
-                            client id
-                          properties:
-                            configMap:
-                              description: ConfigMap containing data to use for the
-                                targets.
-                              properties:
-                                key:
-                                  description: The key to select.
-                                  type: string
-                                name:
-                                  description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                    TODO: Add other useful fields. apiVersion, kind,
-                                    uid?'
-                                  type: string
-                                optional:
-                                  description: Specify whether the ConfigMap or its
-                                    key must be defined
-                                  type: boolean
-                              required:
-                              - key
-                              type: object
-                              x-kubernetes-map-type: atomic
-                            secret:
-                              description: Secret containing data to use for the targets.
-                              properties:
-                                key:
-                                  description: The key of the secret to select from.  Must
-                                    be a valid secret key.
-                                  type: string
-                                name:
-                                  description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                    TODO: Add other useful fields. apiVersion, kind,
-                                    uid?'
-                                  type: string
-                                optional:
-                                  description: Specify whether the Secret or its key
-                                    must be defined
-                                  type: boolean
-                              required:
-                              - key
-                              type: object
-                              x-kubernetes-map-type: atomic
-                          type: object
-                        clientSecret:
-                          description: The secret containing the OAuth2 client secret
-                          properties:
-                            key:
-                              description: The key of the secret to select from.  Must
-                                be a valid secret key.
-                              type: string
-                            name:
-                              description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                TODO: Add other useful fields. apiVersion, kind, uid?'
-                              type: string
-                            optional:
-                              description: Specify whether the Secret or its key must
-                                be defined
-                              type: boolean
-                          required:
-                          - key
-                          type: object
-                          x-kubernetes-map-type: atomic
-                        endpointParams:
-                          additionalProperties:
-                            type: string
-                          description: Parameters to append to the token URL
-                          type: object
-                        scopes:
-                          description: OAuth2 scopes used for the token request
-                          items:
-                            type: string
-                          type: array
-                        tokenUrl:
-                          description: The URL to fetch the token from
-                          minLength: 1
-                          type: string
-                      required:
-                      - clientId
-                      - clientSecret
-                      - tokenUrl
-                      type: object
-                    params:
-                      additionalProperties:
-                        items:
-                          type: string
-                        type: array
-                      description: Optional HTTP URL parameters
-                      type: object
-                    path:
-                      description: HTTP path to scrape for metrics. If empty, Prometheus
-                        uses the default value (e.g. `/metrics`).
-                      type: string
-                    port:
-                      description: Name of the pod port this endpoint refers to. Mutually
-                        exclusive with targetPort.
-                      type: string
-                    proxyUrl:
-                      description: ProxyURL eg http://proxyserver:2195 Directs scrapes
-                        to proxy through this endpoint.
-                      type: string
-                    relabelings:
-                      description: 'RelabelConfigs to apply to samples before scraping.
-                        Prometheus Operator automatically adds relabelings for a few
-                        standard Kubernetes fields. The original scrape job''s name
-                        is available via the `__tmp_prometheus_job_name` label. More
-                        info: https://prometheus.io/docs/prometheus/latest/configuration/configuration/#relabel_config'
-                      items:
-                        description: 'RelabelConfig allows dynamic rewriting of the
-                          label set, being applied to samples before ingestion. It
-                          defines `<metric_relabel_configs>`-section of Prometheus
-                          configuration. More info: https://prometheus.io/docs/prometheus/latest/configuration/configuration/#metric_relabel_configs'
-                        properties:
-                          action:
-                            default: replace
-                            description: Action to perform based on regex matching.
-                              Default is 'replace'. uppercase and lowercase actions
-                              require Prometheus >= 2.36.
-                            enum:
-                            - replace
-                            - Replace
-                            - keep
-                            - Keep
-                            - drop
-                            - Drop
-                            - hashmod
-                            - HashMod
-                            - labelmap
-                            - LabelMap
-                            - labeldrop
-                            - LabelDrop
-                            - labelkeep
-                            - LabelKeep
-                            - lowercase
-                            - Lowercase
-                            - uppercase
-                            - Uppercase
-                            - keepequal
-                            - KeepEqual
-                            - dropequal
-                            - DropEqual
-                            type: string
-                          modulus:
-                            description: Modulus to take of the hash of the source
-                              label values.
-                            format: int64
-                            type: integer
-                          regex:
-                            description: Regular expression against which the extracted
-                              value is matched. Default is '(.*)'
-                            type: string
-                          replacement:
-                            description: Replacement value against which a regex replace
-                              is performed if the regular expression matches. Regex
-                              capture groups are available. Default is '$1'
-                            type: string
-                          separator:
-                            description: Separator placed between concatenated source
-                              label values. default is ';'.
-                            type: string
-                          sourceLabels:
-                            description: The source labels select values from existing
-                              labels. Their content is concatenated using the configured
-                              separator and matched against the configured regular
-                              expression for the replace, keep, and drop actions.
-                            items:
-                              description: LabelName is a valid Prometheus label name
-                                which may only contain ASCII letters, numbers, as
-                                well as underscores.
-                              pattern: ^[a-zA-Z_][a-zA-Z0-9_]*$
-                              type: string
-                            type: array
-                          targetLabel:
-                            description: Label to which the resulting value is written
-                              in a replace action. It is mandatory for replace actions.
-                              Regex capture groups are available.
-                            type: string
-                        type: object
-                      type: array
-                    scheme:
-                      description: HTTP scheme to use for scraping. `http` and `https`
-                        are the expected values unless you rewrite the `__scheme__`
-                        label via relabeling. If empty, Prometheus uses the default
-                        value `http`.
-                      enum:
-                      - http
-                      - https
-                      type: string
-                    scrapeTimeout:
-                      description: Timeout after which the scrape is ended If not
-                        specified, the Prometheus global scrape interval is used.
-                      pattern: ^(0|(([0-9]+)y)?(([0-9]+)w)?(([0-9]+)d)?(([0-9]+)h)?(([0-9]+)m)?(([0-9]+)s)?(([0-9]+)ms)?)$
-                      type: string
-                    targetPort:
-                      anyOf:
-                      - type: integer
-                      - type: string
-                      description: 'Deprecated: Use ''port'' instead.'
-                      x-kubernetes-int-or-string: true
-                    tlsConfig:
-                      description: TLS configuration to use when scraping the endpoint.
-                      properties:
-                        ca:
-                          description: Certificate authority used when verifying server
-                            certificates.
-                          properties:
-                            configMap:
-                              description: ConfigMap containing data to use for the
-                                targets.
-                              properties:
-                                key:
-                                  description: The key to select.
-                                  type: string
-                                name:
-                                  description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                    TODO: Add other useful fields. apiVersion, kind,
-                                    uid?'
-                                  type: string
-                                optional:
-                                  description: Specify whether the ConfigMap or its
-                                    key must be defined
-                                  type: boolean
-                              required:
-                              - key
-                              type: object
-                              x-kubernetes-map-type: atomic
-                            secret:
-                              description: Secret containing data to use for the targets.
-                              properties:
-                                key:
-                                  description: The key of the secret to select from.  Must
-                                    be a valid secret key.
-                                  type: string
-                                name:
-                                  description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                    TODO: Add other useful fields. apiVersion, kind,
-                                    uid?'
-                                  type: string
-                                optional:
-                                  description: Specify whether the Secret or its key
-                                    must be defined
-                                  type: boolean
-                              required:
-                              - key
-                              type: object
-                              x-kubernetes-map-type: atomic
-                          type: object
-                        cert:
-                          description: Client certificate to present when doing client-authentication.
-                          properties:
-                            configMap:
-                              description: ConfigMap containing data to use for the
-                                targets.
-                              properties:
-                                key:
-                                  description: The key to select.
-                                  type: string
-                                name:
-                                  description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                    TODO: Add other useful fields. apiVersion, kind,
-                                    uid?'
-                                  type: string
-                                optional:
-                                  description: Specify whether the ConfigMap or its
-                                    key must be defined
-                                  type: boolean
-                              required:
-                              - key
-                              type: object
-                              x-kubernetes-map-type: atomic
-                            secret:
-                              description: Secret containing data to use for the targets.
-                              properties:
-                                key:
-                                  description: The key of the secret to select from.  Must
-                                    be a valid secret key.
-                                  type: string
-                                name:
-                                  description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                    TODO: Add other useful fields. apiVersion, kind,
-                                    uid?'
-                                  type: string
-                                optional:
-                                  description: Specify whether the Secret or its key
-                                    must be defined
-                                  type: boolean
-                              required:
-                              - key
-                              type: object
-                              x-kubernetes-map-type: atomic
-                          type: object
-                        insecureSkipVerify:
-                          description: Disable target certificate validation.
-                          type: boolean
-                        keySecret:
-                          description: Secret containing the client key file for the
-                            targets.
-                          properties:
-                            key:
-                              description: The key of the secret to select from.  Must
-                                be a valid secret key.
-                              type: string
-                            name:
-                              description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                TODO: Add other useful fields. apiVersion, kind, uid?'
-                              type: string
-                            optional:
-                              description: Specify whether the Secret or its key must
-                                be defined
-                              type: boolean
-                          required:
-                          - key
-                          type: object
-                          x-kubernetes-map-type: atomic
-                        serverName:
-                          description: Used to verify the hostname for the targets.
-                          type: string
-                      type: object
-                  type: object
-                type: array
-              podTargetLabels:
-                description: PodTargetLabels transfers labels on the Kubernetes Pod
-                  onto the target.
-                items:
-                  type: string
-                type: array
-              sampleLimit:
-                description: SampleLimit defines per-scrape limit on number of scraped
-                  samples that will be accepted.
-                format: int64
-                type: integer
-              selector:
-                description: Selector to select Pod objects.
-                properties:
-                  matchExpressions:
-                    description: matchExpressions is a list of label selector requirements.
-                      The requirements are ANDed.
-                    items:
-                      description: A label selector requirement is a selector that
-                        contains values, a key, and an operator that relates the key
-                        and values.
-                      properties:
-                        key:
-                          description: key is the label key that the selector applies
-                            to.
-                          type: string
-                        operator:
-                          description: operator represents a key's relationship to
-                            a set of values. Valid operators are In, NotIn, Exists
-                            and DoesNotExist.
-                          type: string
-                        values:
-                          description: values is an array of string values. If the
-                            operator is In or NotIn, the values array must be non-empty.
-                            If the operator is Exists or DoesNotExist, the values
-                            array must be empty. This array is replaced during a strategic
-                            merge patch.
-                          items:
-                            type: string
-                          type: array
-                      required:
-                      - key
-                      - operator
-                      type: object
-                    type: array
-                  matchLabels:
-                    additionalProperties:
-                      type: string
-                    description: matchLabels is a map of {key,value} pairs. A single
-                      {key,value} in the matchLabels map is equivalent to an element
-                      of matchExpressions, whose key field is "key", the operator
-                      is "In", and the values array contains only "value". The requirements
-                      are ANDed.
-                    type: object
-                type: object
-                x-kubernetes-map-type: atomic
-              targetLimit:
-                description: TargetLimit defines a limit on the number of scraped
-                  targets that will be accepted.
-                format: int64
-                type: integer
-            required:
-            - podMetricsEndpoints
-            - selector
-            type: object
-        required:
-        - spec
-        type: object
-    served: true
-    storage: true
diff --git a/production/operator/crds/monitoring.coreos.com_probes.yaml b/production/operator/crds/monitoring.coreos.com_probes.yaml
deleted file mode 100644
index 7ece55d2ac5e..000000000000
--- a/production/operator/crds/monitoring.coreos.com_probes.yaml
+++ /dev/null
@@ -1,722 +0,0 @@
----
-apiVersion: apiextensions.k8s.io/v1
-kind: CustomResourceDefinition
-metadata:
-  annotations:
-    controller-gen.kubebuilder.io/version: v0.9.2
-  creationTimestamp: null
-  name: probes.monitoring.coreos.com
-spec:
-  group: monitoring.coreos.com
-  names:
-    categories:
-    - prometheus-operator
-    kind: Probe
-    listKind: ProbeList
-    plural: probes
-    shortNames:
-    - prb
-    singular: probe
-  scope: Namespaced
-  versions:
-  - name: v1
-    schema:
-      openAPIV3Schema:
-        description: Probe defines monitoring for a set of static targets or ingresses.
-        properties:
-          apiVersion:
-            description: 'APIVersion defines the versioned schema of this representation
-              of an object. Servers should convert recognized schemas to the latest
-              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
-            type: string
-          kind:
-            description: 'Kind is a string value representing the REST resource this
-              object represents. Servers may infer this from the endpoint the client
-              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
-            type: string
-          metadata:
-            type: object
-          spec:
-            description: Specification of desired Ingress selection for target discovery
-              by Prometheus.
-            properties:
-              authorization:
-                description: Authorization section for this endpoint
-                properties:
-                  credentials:
-                    description: The secret's key that contains the credentials of
-                      the request
-                    properties:
-                      key:
-                        description: The key of the secret to select from.  Must be
-                          a valid secret key.
-                        type: string
-                      name:
-                        description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                          TODO: Add other useful fields. apiVersion, kind, uid?'
-                        type: string
-                      optional:
-                        description: Specify whether the Secret or its key must be
-                          defined
-                        type: boolean
-                    required:
-                    - key
-                    type: object
-                    x-kubernetes-map-type: atomic
-                  type:
-                    description: Set the authentication type. Defaults to Bearer,
-                      Basic will cause an error
-                    type: string
-                type: object
-              basicAuth:
-                description: 'BasicAuth allow an endpoint to authenticate over basic
-                  authentication. More info: https://prometheus.io/docs/operating/configuration/#endpoint'
-                properties:
-                  password:
-                    description: The secret in the service monitor namespace that
-                      contains the password for authentication.
-                    properties:
-                      key:
-                        description: The key of the secret to select from.  Must be
-                          a valid secret key.
-                        type: string
-                      name:
-                        description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                          TODO: Add other useful fields. apiVersion, kind, uid?'
-                        type: string
-                      optional:
-                        description: Specify whether the Secret or its key must be
-                          defined
-                        type: boolean
-                    required:
-                    - key
-                    type: object
-                    x-kubernetes-map-type: atomic
-                  username:
-                    description: The secret in the service monitor namespace that
-                      contains the username for authentication.
-                    properties:
-                      key:
-                        description: The key of the secret to select from.  Must be
-                          a valid secret key.
-                        type: string
-                      name:
-                        description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                          TODO: Add other useful fields. apiVersion, kind, uid?'
-                        type: string
-                      optional:
-                        description: Specify whether the Secret or its key must be
-                          defined
-                        type: boolean
-                    required:
-                    - key
-                    type: object
-                    x-kubernetes-map-type: atomic
-                type: object
-              bearerTokenSecret:
-                description: Secret to mount to read bearer token for scraping targets.
-                  The secret needs to be in the same namespace as the probe and accessible
-                  by the Prometheus Operator.
-                properties:
-                  key:
-                    description: The key of the secret to select from.  Must be a
-                      valid secret key.
-                    type: string
-                  name:
-                    description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                      TODO: Add other useful fields. apiVersion, kind, uid?'
-                    type: string
-                  optional:
-                    description: Specify whether the Secret or its key must be defined
-                    type: boolean
-                required:
-                - key
-                type: object
-                x-kubernetes-map-type: atomic
-              interval:
-                description: Interval at which targets are probed using the configured
-                  prober. If not specified Prometheus' global scrape interval is used.
-                pattern: ^(0|(([0-9]+)y)?(([0-9]+)w)?(([0-9]+)d)?(([0-9]+)h)?(([0-9]+)m)?(([0-9]+)s)?(([0-9]+)ms)?)$
-                type: string
-              jobName:
-                description: The job name assigned to scraped metrics by default.
-                type: string
-              labelLimit:
-                description: Per-scrape limit on number of labels that will be accepted
-                  for a sample. Only valid in Prometheus versions 2.27.0 and newer.
-                format: int64
-                type: integer
-              labelNameLengthLimit:
-                description: Per-scrape limit on length of labels name that will be
-                  accepted for a sample. Only valid in Prometheus versions 2.27.0
-                  and newer.
-                format: int64
-                type: integer
-              labelValueLengthLimit:
-                description: Per-scrape limit on length of labels value that will
-                  be accepted for a sample. Only valid in Prometheus versions 2.27.0
-                  and newer.
-                format: int64
-                type: integer
-              metricRelabelings:
-                description: MetricRelabelConfigs to apply to samples before ingestion.
-                items:
-                  description: 'RelabelConfig allows dynamic rewriting of the label
-                    set, being applied to samples before ingestion. It defines `<metric_relabel_configs>`-section
-                    of Prometheus configuration. More info: https://prometheus.io/docs/prometheus/latest/configuration/configuration/#metric_relabel_configs'
-                  properties:
-                    action:
-                      default: replace
-                      description: Action to perform based on regex matching. Default
-                        is 'replace'. uppercase and lowercase actions require Prometheus
-                        >= 2.36.
-                      enum:
-                      - replace
-                      - Replace
-                      - keep
-                      - Keep
-                      - drop
-                      - Drop
-                      - hashmod
-                      - HashMod
-                      - labelmap
-                      - LabelMap
-                      - labeldrop
-                      - LabelDrop
-                      - labelkeep
-                      - LabelKeep
-                      - lowercase
-                      - Lowercase
-                      - uppercase
-                      - Uppercase
-                      - keepequal
-                      - KeepEqual
-                      - dropequal
-                      - DropEqual
-                      type: string
-                    modulus:
-                      description: Modulus to take of the hash of the source label
-                        values.
-                      format: int64
-                      type: integer
-                    regex:
-                      description: Regular expression against which the extracted
-                        value is matched. Default is '(.*)'
-                      type: string
-                    replacement:
-                      description: Replacement value against which a regex replace
-                        is performed if the regular expression matches. Regex capture
-                        groups are available. Default is '$1'
-                      type: string
-                    separator:
-                      description: Separator placed between concatenated source label
-                        values. default is ';'.
-                      type: string
-                    sourceLabels:
-                      description: The source labels select values from existing labels.
-                        Their content is concatenated using the configured separator
-                        and matched against the configured regular expression for
-                        the replace, keep, and drop actions.
-                      items:
-                        description: LabelName is a valid Prometheus label name which
-                          may only contain ASCII letters, numbers, as well as underscores.
-                        pattern: ^[a-zA-Z_][a-zA-Z0-9_]*$
-                        type: string
-                      type: array
-                    targetLabel:
-                      description: Label to which the resulting value is written in
-                        a replace action. It is mandatory for replace actions. Regex
-                        capture groups are available.
-                      type: string
-                  type: object
-                type: array
-              module:
-                description: 'The module to use for probing specifying how to probe
-                  the target. Example module configuring in the blackbox exporter:
-                  https://github.com/prometheus/blackbox_exporter/blob/master/example.yml'
-                type: string
-              oauth2:
-                description: OAuth2 for the URL. Only valid in Prometheus versions
-                  2.27.0 and newer.
-                properties:
-                  clientId:
-                    description: The secret or configmap containing the OAuth2 client
-                      id
-                    properties:
-                      configMap:
-                        description: ConfigMap containing data to use for the targets.
-                        properties:
-                          key:
-                            description: The key to select.
-                            type: string
-                          name:
-                            description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                              TODO: Add other useful fields. apiVersion, kind, uid?'
-                            type: string
-                          optional:
-                            description: Specify whether the ConfigMap or its key
-                              must be defined
-                            type: boolean
-                        required:
-                        - key
-                        type: object
-                        x-kubernetes-map-type: atomic
-                      secret:
-                        description: Secret containing data to use for the targets.
-                        properties:
-                          key:
-                            description: The key of the secret to select from.  Must
-                              be a valid secret key.
-                            type: string
-                          name:
-                            description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                              TODO: Add other useful fields. apiVersion, kind, uid?'
-                            type: string
-                          optional:
-                            description: Specify whether the Secret or its key must
-                              be defined
-                            type: boolean
-                        required:
-                        - key
-                        type: object
-                        x-kubernetes-map-type: atomic
-                    type: object
-                  clientSecret:
-                    description: The secret containing the OAuth2 client secret
-                    properties:
-                      key:
-                        description: The key of the secret to select from.  Must be
-                          a valid secret key.
-                        type: string
-                      name:
-                        description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                          TODO: Add other useful fields. apiVersion, kind, uid?'
-                        type: string
-                      optional:
-                        description: Specify whether the Secret or its key must be
-                          defined
-                        type: boolean
-                    required:
-                    - key
-                    type: object
-                    x-kubernetes-map-type: atomic
-                  endpointParams:
-                    additionalProperties:
-                      type: string
-                    description: Parameters to append to the token URL
-                    type: object
-                  scopes:
-                    description: OAuth2 scopes used for the token request
-                    items:
-                      type: string
-                    type: array
-                  tokenUrl:
-                    description: The URL to fetch the token from
-                    minLength: 1
-                    type: string
-                required:
-                - clientId
-                - clientSecret
-                - tokenUrl
-                type: object
-              prober:
-                description: Specification for the prober to use for probing targets.
-                  The prober.URL parameter is required. Targets cannot be probed if
-                  left empty.
-                properties:
-                  path:
-                    default: /probe
-                    description: Path to collect metrics from. Defaults to `/probe`.
-                    type: string
-                  proxyUrl:
-                    description: Optional ProxyURL.
-                    type: string
-                  scheme:
-                    description: HTTP scheme to use for scraping. `http` and `https`
-                      are the expected values unless you rewrite the `__scheme__`
-                      label via relabeling. If empty, Prometheus uses the default
-                      value `http`.
-                    enum:
-                    - http
-                    - https
-                    type: string
-                  url:
-                    description: Mandatory URL of the prober.
-                    type: string
-                required:
-                - url
-                type: object
-              sampleLimit:
-                description: SampleLimit defines per-scrape limit on number of scraped
-                  samples that will be accepted.
-                format: int64
-                type: integer
-              scrapeTimeout:
-                description: Timeout for scraping metrics from the Prometheus exporter.
-                  If not specified, the Prometheus global scrape timeout is used.
-                pattern: ^(0|(([0-9]+)y)?(([0-9]+)w)?(([0-9]+)d)?(([0-9]+)h)?(([0-9]+)m)?(([0-9]+)s)?(([0-9]+)ms)?)$
-                type: string
-              targetLimit:
-                description: TargetLimit defines a limit on the number of scraped
-                  targets that will be accepted.
-                format: int64
-                type: integer
-              targets:
-                description: Targets defines a set of static or dynamically discovered
-                  targets to probe.
-                properties:
-                  ingress:
-                    description: ingress defines the Ingress objects to probe and
-                      the relabeling configuration. If `staticConfig` is also defined,
-                      `staticConfig` takes precedence.
-                    properties:
-                      namespaceSelector:
-                        description: From which namespaces to select Ingress objects.
-                        properties:
-                          any:
-                            description: Boolean describing whether all namespaces
-                              are selected in contrast to a list restricting them.
-                            type: boolean
-                          matchNames:
-                            description: List of namespace names to select from.
-                            items:
-                              type: string
-                            type: array
-                        type: object
-                      relabelingConfigs:
-                        description: 'RelabelConfigs to apply to the label set of
-                          the target before it gets scraped. The original ingress
-                          address is available via the `__tmp_prometheus_ingress_address`
-                          label. It can be used to customize the probed URL. The original
-                          scrape job''s name is available via the `__tmp_prometheus_job_name`
-                          label. More info: https://prometheus.io/docs/prometheus/latest/configuration/configuration/#relabel_config'
-                        items:
-                          description: 'RelabelConfig allows dynamic rewriting of
-                            the label set, being applied to samples before ingestion.
-                            It defines `<metric_relabel_configs>`-section of Prometheus
-                            configuration. More info: https://prometheus.io/docs/prometheus/latest/configuration/configuration/#metric_relabel_configs'
-                          properties:
-                            action:
-                              default: replace
-                              description: Action to perform based on regex matching.
-                                Default is 'replace'. uppercase and lowercase actions
-                                require Prometheus >= 2.36.
-                              enum:
-                              - replace
-                              - Replace
-                              - keep
-                              - Keep
-                              - drop
-                              - Drop
-                              - hashmod
-                              - HashMod
-                              - labelmap
-                              - LabelMap
-                              - labeldrop
-                              - LabelDrop
-                              - labelkeep
-                              - LabelKeep
-                              - lowercase
-                              - Lowercase
-                              - uppercase
-                              - Uppercase
-                              - keepequal
-                              - KeepEqual
-                              - dropequal
-                              - DropEqual
-                              type: string
-                            modulus:
-                              description: Modulus to take of the hash of the source
-                                label values.
-                              format: int64
-                              type: integer
-                            regex:
-                              description: Regular expression against which the extracted
-                                value is matched. Default is '(.*)'
-                              type: string
-                            replacement:
-                              description: Replacement value against which a regex
-                                replace is performed if the regular expression matches.
-                                Regex capture groups are available. Default is '$1'
-                              type: string
-                            separator:
-                              description: Separator placed between concatenated source
-                                label values. default is ';'.
-                              type: string
-                            sourceLabels:
-                              description: The source labels select values from existing
-                                labels. Their content is concatenated using the configured
-                                separator and matched against the configured regular
-                                expression for the replace, keep, and drop actions.
-                              items:
-                                description: LabelName is a valid Prometheus label
-                                  name which may only contain ASCII letters, numbers,
-                                  as well as underscores.
-                                pattern: ^[a-zA-Z_][a-zA-Z0-9_]*$
-                                type: string
-                              type: array
-                            targetLabel:
-                              description: Label to which the resulting value is written
-                                in a replace action. It is mandatory for replace actions.
-                                Regex capture groups are available.
-                              type: string
-                          type: object
-                        type: array
-                      selector:
-                        description: Selector to select the Ingress objects.
-                        properties:
-                          matchExpressions:
-                            description: matchExpressions is a list of label selector
-                              requirements. The requirements are ANDed.
-                            items:
-                              description: A label selector requirement is a selector
-                                that contains values, a key, and an operator that
-                                relates the key and values.
-                              properties:
-                                key:
-                                  description: key is the label key that the selector
-                                    applies to.
-                                  type: string
-                                operator:
-                                  description: operator represents a key's relationship
-                                    to a set of values. Valid operators are In, NotIn,
-                                    Exists and DoesNotExist.
-                                  type: string
-                                values:
-                                  description: values is an array of string values.
-                                    If the operator is In or NotIn, the values array
-                                    must be non-empty. If the operator is Exists or
-                                    DoesNotExist, the values array must be empty.
-                                    This array is replaced during a strategic merge
-                                    patch.
-                                  items:
-                                    type: string
-                                  type: array
-                              required:
-                              - key
-                              - operator
-                              type: object
-                            type: array
-                          matchLabels:
-                            additionalProperties:
-                              type: string
-                            description: matchLabels is a map of {key,value} pairs.
-                              A single {key,value} in the matchLabels map is equivalent
-                              to an element of matchExpressions, whose key field is
-                              "key", the operator is "In", and the values array contains
-                              only "value". The requirements are ANDed.
-                            type: object
-                        type: object
-                        x-kubernetes-map-type: atomic
-                    type: object
-                  staticConfig:
-                    description: 'staticConfig defines the static list of targets
-                      to probe and the relabeling configuration. If `ingress` is also
-                      defined, `staticConfig` takes precedence. More info: https://prometheus.io/docs/prometheus/latest/configuration/configuration/#static_config.'
-                    properties:
-                      labels:
-                        additionalProperties:
-                          type: string
-                        description: Labels assigned to all metrics scraped from the
-                          targets.
-                        type: object
-                      relabelingConfigs:
-                        description: 'RelabelConfigs to apply to the label set of
-                          the targets before it gets scraped. More info: https://prometheus.io/docs/prometheus/latest/configuration/configuration/#relabel_config'
-                        items:
-                          description: 'RelabelConfig allows dynamic rewriting of
-                            the label set, being applied to samples before ingestion.
-                            It defines `<metric_relabel_configs>`-section of Prometheus
-                            configuration. More info: https://prometheus.io/docs/prometheus/latest/configuration/configuration/#metric_relabel_configs'
-                          properties:
-                            action:
-                              default: replace
-                              description: Action to perform based on regex matching.
-                                Default is 'replace'. uppercase and lowercase actions
-                                require Prometheus >= 2.36.
-                              enum:
-                              - replace
-                              - Replace
-                              - keep
-                              - Keep
-                              - drop
-                              - Drop
-                              - hashmod
-                              - HashMod
-                              - labelmap
-                              - LabelMap
-                              - labeldrop
-                              - LabelDrop
-                              - labelkeep
-                              - LabelKeep
-                              - lowercase
-                              - Lowercase
-                              - uppercase
-                              - Uppercase
-                              - keepequal
-                              - KeepEqual
-                              - dropequal
-                              - DropEqual
-                              type: string
-                            modulus:
-                              description: Modulus to take of the hash of the source
-                                label values.
-                              format: int64
-                              type: integer
-                            regex:
-                              description: Regular expression against which the extracted
-                                value is matched. Default is '(.*)'
-                              type: string
-                            replacement:
-                              description: Replacement value against which a regex
-                                replace is performed if the regular expression matches.
-                                Regex capture groups are available. Default is '$1'
-                              type: string
-                            separator:
-                              description: Separator placed between concatenated source
-                                label values. default is ';'.
-                              type: string
-                            sourceLabels:
-                              description: The source labels select values from existing
-                                labels. Their content is concatenated using the configured
-                                separator and matched against the configured regular
-                                expression for the replace, keep, and drop actions.
-                              items:
-                                description: LabelName is a valid Prometheus label
-                                  name which may only contain ASCII letters, numbers,
-                                  as well as underscores.
-                                pattern: ^[a-zA-Z_][a-zA-Z0-9_]*$
-                                type: string
-                              type: array
-                            targetLabel:
-                              description: Label to which the resulting value is written
-                                in a replace action. It is mandatory for replace actions.
-                                Regex capture groups are available.
-                              type: string
-                          type: object
-                        type: array
-                      static:
-                        description: The list of hosts to probe.
-                        items:
-                          type: string
-                        type: array
-                    type: object
-                type: object
-              tlsConfig:
-                description: TLS configuration to use when scraping the endpoint.
-                properties:
-                  ca:
-                    description: Certificate authority used when verifying server
-                      certificates.
-                    properties:
-                      configMap:
-                        description: ConfigMap containing data to use for the targets.
-                        properties:
-                          key:
-                            description: The key to select.
-                            type: string
-                          name:
-                            description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                              TODO: Add other useful fields. apiVersion, kind, uid?'
-                            type: string
-                          optional:
-                            description: Specify whether the ConfigMap or its key
-                              must be defined
-                            type: boolean
-                        required:
-                        - key
-                        type: object
-                        x-kubernetes-map-type: atomic
-                      secret:
-                        description: Secret containing data to use for the targets.
-                        properties:
-                          key:
-                            description: The key of the secret to select from.  Must
-                              be a valid secret key.
-                            type: string
-                          name:
-                            description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                              TODO: Add other useful fields. apiVersion, kind, uid?'
-                            type: string
-                          optional:
-                            description: Specify whether the Secret or its key must
-                              be defined
-                            type: boolean
-                        required:
-                        - key
-                        type: object
-                        x-kubernetes-map-type: atomic
-                    type: object
-                  cert:
-                    description: Client certificate to present when doing client-authentication.
-                    properties:
-                      configMap:
-                        description: ConfigMap containing data to use for the targets.
-                        properties:
-                          key:
-                            description: The key to select.
-                            type: string
-                          name:
-                            description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                              TODO: Add other useful fields. apiVersion, kind, uid?'
-                            type: string
-                          optional:
-                            description: Specify whether the ConfigMap or its key
-                              must be defined
-                            type: boolean
-                        required:
-                        - key
-                        type: object
-                        x-kubernetes-map-type: atomic
-                      secret:
-                        description: Secret containing data to use for the targets.
-                        properties:
-                          key:
-                            description: The key of the secret to select from.  Must
-                              be a valid secret key.
-                            type: string
-                          name:
-                            description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                              TODO: Add other useful fields. apiVersion, kind, uid?'
-                            type: string
-                          optional:
-                            description: Specify whether the Secret or its key must
-                              be defined
-                            type: boolean
-                        required:
-                        - key
-                        type: object
-                        x-kubernetes-map-type: atomic
-                    type: object
-                  insecureSkipVerify:
-                    description: Disable target certificate validation.
-                    type: boolean
-                  keySecret:
-                    description: Secret containing the client key file for the targets.
-                    properties:
-                      key:
-                        description: The key of the secret to select from.  Must be
-                          a valid secret key.
-                        type: string
-                      name:
-                        description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                          TODO: Add other useful fields. apiVersion, kind, uid?'
-                        type: string
-                      optional:
-                        description: Specify whether the Secret or its key must be
-                          defined
-                        type: boolean
-                    required:
-                    - key
-                    type: object
-                    x-kubernetes-map-type: atomic
-                  serverName:
-                    description: Used to verify the hostname for the targets.
-                    type: string
-                type: object
-            type: object
-        required:
-        - spec
-        type: object
-    served: true
-    storage: true
diff --git a/production/operator/crds/monitoring.coreos.com_servicemonitors.yaml b/production/operator/crds/monitoring.coreos.com_servicemonitors.yaml
deleted file mode 100644
index 5d661184cfb4..000000000000
--- a/production/operator/crds/monitoring.coreos.com_servicemonitors.yaml
+++ /dev/null
@@ -1,709 +0,0 @@
----
-apiVersion: apiextensions.k8s.io/v1
-kind: CustomResourceDefinition
-metadata:
-  annotations:
-    controller-gen.kubebuilder.io/version: v0.9.2
-  creationTimestamp: null
-  name: servicemonitors.monitoring.coreos.com
-spec:
-  group: monitoring.coreos.com
-  names:
-    categories:
-    - prometheus-operator
-    kind: ServiceMonitor
-    listKind: ServiceMonitorList
-    plural: servicemonitors
-    shortNames:
-    - smon
-    singular: servicemonitor
-  scope: Namespaced
-  versions:
-  - name: v1
-    schema:
-      openAPIV3Schema:
-        description: ServiceMonitor defines monitoring for a set of services.
-        properties:
-          apiVersion:
-            description: 'APIVersion defines the versioned schema of this representation
-              of an object. Servers should convert recognized schemas to the latest
-              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
-            type: string
-          kind:
-            description: 'Kind is a string value representing the REST resource this
-              object represents. Servers may infer this from the endpoint the client
-              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
-            type: string
-          metadata:
-            type: object
-          spec:
-            description: Specification of desired Service selection for target discovery
-              by Prometheus.
-            properties:
-              attachMetadata:
-                description: Attaches node metadata to discovered targets. Requires
-                  Prometheus v2.37.0 and above.
-                properties:
-                  node:
-                    description: When set to true, Prometheus must have permissions
-                      to get Nodes.
-                    type: boolean
-                type: object
-              endpoints:
-                description: A list of endpoints allowed as part of this ServiceMonitor.
-                items:
-                  description: Endpoint defines a scrapeable endpoint serving Prometheus
-                    metrics.
-                  properties:
-                    authorization:
-                      description: Authorization section for this endpoint
-                      properties:
-                        credentials:
-                          description: The secret's key that contains the credentials
-                            of the request
-                          properties:
-                            key:
-                              description: The key of the secret to select from.  Must
-                                be a valid secret key.
-                              type: string
-                            name:
-                              description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                TODO: Add other useful fields. apiVersion, kind, uid?'
-                              type: string
-                            optional:
-                              description: Specify whether the Secret or its key must
-                                be defined
-                              type: boolean
-                          required:
-                          - key
-                          type: object
-                          x-kubernetes-map-type: atomic
-                        type:
-                          description: Set the authentication type. Defaults to Bearer,
-                            Basic will cause an error
-                          type: string
-                      type: object
-                    basicAuth:
-                      description: 'BasicAuth allow an endpoint to authenticate over
-                        basic authentication More info: https://prometheus.io/docs/operating/configuration/#endpoints'
-                      properties:
-                        password:
-                          description: The secret in the service monitor namespace
-                            that contains the password for authentication.
-                          properties:
-                            key:
-                              description: The key of the secret to select from.  Must
-                                be a valid secret key.
-                              type: string
-                            name:
-                              description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                TODO: Add other useful fields. apiVersion, kind, uid?'
-                              type: string
-                            optional:
-                              description: Specify whether the Secret or its key must
-                                be defined
-                              type: boolean
-                          required:
-                          - key
-                          type: object
-                          x-kubernetes-map-type: atomic
-                        username:
-                          description: The secret in the service monitor namespace
-                            that contains the username for authentication.
-                          properties:
-                            key:
-                              description: The key of the secret to select from.  Must
-                                be a valid secret key.
-                              type: string
-                            name:
-                              description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                TODO: Add other useful fields. apiVersion, kind, uid?'
-                              type: string
-                            optional:
-                              description: Specify whether the Secret or its key must
-                                be defined
-                              type: boolean
-                          required:
-                          - key
-                          type: object
-                          x-kubernetes-map-type: atomic
-                      type: object
-                    bearerTokenFile:
-                      description: File to read bearer token for scraping targets.
-                      type: string
-                    bearerTokenSecret:
-                      description: Secret to mount to read bearer token for scraping
-                        targets. The secret needs to be in the same namespace as the
-                        service monitor and accessible by the Prometheus Operator.
-                      properties:
-                        key:
-                          description: The key of the secret to select from.  Must
-                            be a valid secret key.
-                          type: string
-                        name:
-                          description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                            TODO: Add other useful fields. apiVersion, kind, uid?'
-                          type: string
-                        optional:
-                          description: Specify whether the Secret or its key must
-                            be defined
-                          type: boolean
-                      required:
-                      - key
-                      type: object
-                      x-kubernetes-map-type: atomic
-                    enableHttp2:
-                      description: Whether to enable HTTP2.
-                      type: boolean
-                    filterRunning:
-                      description: 'Drop pods that are not running. (Failed, Succeeded).
-                        Enabled by default. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle/#pod-phase'
-                      type: boolean
-                    followRedirects:
-                      description: FollowRedirects configures whether scrape requests
-                        follow HTTP 3xx redirects.
-                      type: boolean
-                    honorLabels:
-                      description: HonorLabels chooses the metric's labels on collisions
-                        with target labels.
-                      type: boolean
-                    honorTimestamps:
-                      description: HonorTimestamps controls whether Prometheus respects
-                        the timestamps present in scraped data.
-                      type: boolean
-                    interval:
-                      description: Interval at which metrics should be scraped If
-                        not specified Prometheus' global scrape interval is used.
-                      pattern: ^(0|(([0-9]+)y)?(([0-9]+)w)?(([0-9]+)d)?(([0-9]+)h)?(([0-9]+)m)?(([0-9]+)s)?(([0-9]+)ms)?)$
-                      type: string
-                    metricRelabelings:
-                      description: MetricRelabelConfigs to apply to samples before
-                        ingestion.
-                      items:
-                        description: 'RelabelConfig allows dynamic rewriting of the
-                          label set, being applied to samples before ingestion. It
-                          defines `<metric_relabel_configs>`-section of Prometheus
-                          configuration. More info: https://prometheus.io/docs/prometheus/latest/configuration/configuration/#metric_relabel_configs'
-                        properties:
-                          action:
-                            default: replace
-                            description: Action to perform based on regex matching.
-                              Default is 'replace'. uppercase and lowercase actions
-                              require Prometheus >= 2.36.
-                            enum:
-                            - replace
-                            - Replace
-                            - keep
-                            - Keep
-                            - drop
-                            - Drop
-                            - hashmod
-                            - HashMod
-                            - labelmap
-                            - LabelMap
-                            - labeldrop
-                            - LabelDrop
-                            - labelkeep
-                            - LabelKeep
-                            - lowercase
-                            - Lowercase
-                            - uppercase
-                            - Uppercase
-                            - keepequal
-                            - KeepEqual
-                            - dropequal
-                            - DropEqual
-                            type: string
-                          modulus:
-                            description: Modulus to take of the hash of the source
-                              label values.
-                            format: int64
-                            type: integer
-                          regex:
-                            description: Regular expression against which the extracted
-                              value is matched. Default is '(.*)'
-                            type: string
-                          replacement:
-                            description: Replacement value against which a regex replace
-                              is performed if the regular expression matches. Regex
-                              capture groups are available. Default is '$1'
-                            type: string
-                          separator:
-                            description: Separator placed between concatenated source
-                              label values. default is ';'.
-                            type: string
-                          sourceLabels:
-                            description: The source labels select values from existing
-                              labels. Their content is concatenated using the configured
-                              separator and matched against the configured regular
-                              expression for the replace, keep, and drop actions.
-                            items:
-                              description: LabelName is a valid Prometheus label name
-                                which may only contain ASCII letters, numbers, as
-                                well as underscores.
-                              pattern: ^[a-zA-Z_][a-zA-Z0-9_]*$
-                              type: string
-                            type: array
-                          targetLabel:
-                            description: Label to which the resulting value is written
-                              in a replace action. It is mandatory for replace actions.
-                              Regex capture groups are available.
-                            type: string
-                        type: object
-                      type: array
-                    oauth2:
-                      description: OAuth2 for the URL. Only valid in Prometheus versions
-                        2.27.0 and newer.
-                      properties:
-                        clientId:
-                          description: The secret or configmap containing the OAuth2
-                            client id
-                          properties:
-                            configMap:
-                              description: ConfigMap containing data to use for the
-                                targets.
-                              properties:
-                                key:
-                                  description: The key to select.
-                                  type: string
-                                name:
-                                  description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                    TODO: Add other useful fields. apiVersion, kind,
-                                    uid?'
-                                  type: string
-                                optional:
-                                  description: Specify whether the ConfigMap or its
-                                    key must be defined
-                                  type: boolean
-                              required:
-                              - key
-                              type: object
-                              x-kubernetes-map-type: atomic
-                            secret:
-                              description: Secret containing data to use for the targets.
-                              properties:
-                                key:
-                                  description: The key of the secret to select from.  Must
-                                    be a valid secret key.
-                                  type: string
-                                name:
-                                  description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                    TODO: Add other useful fields. apiVersion, kind,
-                                    uid?'
-                                  type: string
-                                optional:
-                                  description: Specify whether the Secret or its key
-                                    must be defined
-                                  type: boolean
-                              required:
-                              - key
-                              type: object
-                              x-kubernetes-map-type: atomic
-                          type: object
-                        clientSecret:
-                          description: The secret containing the OAuth2 client secret
-                          properties:
-                            key:
-                              description: The key of the secret to select from.  Must
-                                be a valid secret key.
-                              type: string
-                            name:
-                              description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                TODO: Add other useful fields. apiVersion, kind, uid?'
-                              type: string
-                            optional:
-                              description: Specify whether the Secret or its key must
-                                be defined
-                              type: boolean
-                          required:
-                          - key
-                          type: object
-                          x-kubernetes-map-type: atomic
-                        endpointParams:
-                          additionalProperties:
-                            type: string
-                          description: Parameters to append to the token URL
-                          type: object
-                        scopes:
-                          description: OAuth2 scopes used for the token request
-                          items:
-                            type: string
-                          type: array
-                        tokenUrl:
-                          description: The URL to fetch the token from
-                          minLength: 1
-                          type: string
-                      required:
-                      - clientId
-                      - clientSecret
-                      - tokenUrl
-                      type: object
-                    params:
-                      additionalProperties:
-                        items:
-                          type: string
-                        type: array
-                      description: Optional HTTP URL parameters
-                      type: object
-                    path:
-                      description: HTTP path to scrape for metrics. If empty, Prometheus
-                        uses the default value (e.g. `/metrics`).
-                      type: string
-                    port:
-                      description: Name of the service port this endpoint refers to.
-                        Mutually exclusive with targetPort.
-                      type: string
-                    proxyUrl:
-                      description: ProxyURL eg http://proxyserver:2195 Directs scrapes
-                        to proxy through this endpoint.
-                      type: string
-                    relabelings:
-                      description: 'RelabelConfigs to apply to samples before scraping.
-                        Prometheus Operator automatically adds relabelings for a few
-                        standard Kubernetes fields. The original scrape job''s name
-                        is available via the `__tmp_prometheus_job_name` label. More
-                        info: https://prometheus.io/docs/prometheus/latest/configuration/configuration/#relabel_config'
-                      items:
-                        description: 'RelabelConfig allows dynamic rewriting of the
-                          label set, being applied to samples before ingestion. It
-                          defines `<metric_relabel_configs>`-section of Prometheus
-                          configuration. More info: https://prometheus.io/docs/prometheus/latest/configuration/configuration/#metric_relabel_configs'
-                        properties:
-                          action:
-                            default: replace
-                            description: Action to perform based on regex matching.
-                              Default is 'replace'. uppercase and lowercase actions
-                              require Prometheus >= 2.36.
-                            enum:
-                            - replace
-                            - Replace
-                            - keep
-                            - Keep
-                            - drop
-                            - Drop
-                            - hashmod
-                            - HashMod
-                            - labelmap
-                            - LabelMap
-                            - labeldrop
-                            - LabelDrop
-                            - labelkeep
-                            - LabelKeep
-                            - lowercase
-                            - Lowercase
-                            - uppercase
-                            - Uppercase
-                            - keepequal
-                            - KeepEqual
-                            - dropequal
-                            - DropEqual
-                            type: string
-                          modulus:
-                            description: Modulus to take of the hash of the source
-                              label values.
-                            format: int64
-                            type: integer
-                          regex:
-                            description: Regular expression against which the extracted
-                              value is matched. Default is '(.*)'
-                            type: string
-                          replacement:
-                            description: Replacement value against which a regex replace
-                              is performed if the regular expression matches. Regex
-                              capture groups are available. Default is '$1'
-                            type: string
-                          separator:
-                            description: Separator placed between concatenated source
-                              label values. default is ';'.
-                            type: string
-                          sourceLabels:
-                            description: The source labels select values from existing
-                              labels. Their content is concatenated using the configured
-                              separator and matched against the configured regular
-                              expression for the replace, keep, and drop actions.
-                            items:
-                              description: LabelName is a valid Prometheus label name
-                                which may only contain ASCII letters, numbers, as
-                                well as underscores.
-                              pattern: ^[a-zA-Z_][a-zA-Z0-9_]*$
-                              type: string
-                            type: array
-                          targetLabel:
-                            description: Label to which the resulting value is written
-                              in a replace action. It is mandatory for replace actions.
-                              Regex capture groups are available.
-                            type: string
-                        type: object
-                      type: array
-                    scheme:
-                      description: HTTP scheme to use for scraping. `http` and `https`
-                        are the expected values unless you rewrite the `__scheme__`
-                        label via relabeling. If empty, Prometheus uses the default
-                        value `http`.
-                      enum:
-                      - http
-                      - https
-                      type: string
-                    scrapeTimeout:
-                      description: Timeout after which the scrape is ended If not
-                        specified, the Prometheus global scrape timeout is used unless
-                        it is less than `Interval` in which the latter is used.
-                      pattern: ^(0|(([0-9]+)y)?(([0-9]+)w)?(([0-9]+)d)?(([0-9]+)h)?(([0-9]+)m)?(([0-9]+)s)?(([0-9]+)ms)?)$
-                      type: string
-                    targetPort:
-                      anyOf:
-                      - type: integer
-                      - type: string
-                      description: Name or number of the target port of the Pod behind
-                        the Service, the port must be specified with container port
-                        property. Mutually exclusive with port.
-                      x-kubernetes-int-or-string: true
-                    tlsConfig:
-                      description: TLS configuration to use when scraping the endpoint
-                      properties:
-                        ca:
-                          description: Certificate authority used when verifying server
-                            certificates.
-                          properties:
-                            configMap:
-                              description: ConfigMap containing data to use for the
-                                targets.
-                              properties:
-                                key:
-                                  description: The key to select.
-                                  type: string
-                                name:
-                                  description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                    TODO: Add other useful fields. apiVersion, kind,
-                                    uid?'
-                                  type: string
-                                optional:
-                                  description: Specify whether the ConfigMap or its
-                                    key must be defined
-                                  type: boolean
-                              required:
-                              - key
-                              type: object
-                              x-kubernetes-map-type: atomic
-                            secret:
-                              description: Secret containing data to use for the targets.
-                              properties:
-                                key:
-                                  description: The key of the secret to select from.  Must
-                                    be a valid secret key.
-                                  type: string
-                                name:
-                                  description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                    TODO: Add other useful fields. apiVersion, kind,
-                                    uid?'
-                                  type: string
-                                optional:
-                                  description: Specify whether the Secret or its key
-                                    must be defined
-                                  type: boolean
-                              required:
-                              - key
-                              type: object
-                              x-kubernetes-map-type: atomic
-                          type: object
-                        caFile:
-                          description: Path to the CA cert in the Prometheus container
-                            to use for the targets.
-                          type: string
-                        cert:
-                          description: Client certificate to present when doing client-authentication.
-                          properties:
-                            configMap:
-                              description: ConfigMap containing data to use for the
-                                targets.
-                              properties:
-                                key:
-                                  description: The key to select.
-                                  type: string
-                                name:
-                                  description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                    TODO: Add other useful fields. apiVersion, kind,
-                                    uid?'
-                                  type: string
-                                optional:
-                                  description: Specify whether the ConfigMap or its
-                                    key must be defined
-                                  type: boolean
-                              required:
-                              - key
-                              type: object
-                              x-kubernetes-map-type: atomic
-                            secret:
-                              description: Secret containing data to use for the targets.
-                              properties:
-                                key:
-                                  description: The key of the secret to select from.  Must
-                                    be a valid secret key.
-                                  type: string
-                                name:
-                                  description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                    TODO: Add other useful fields. apiVersion, kind,
-                                    uid?'
-                                  type: string
-                                optional:
-                                  description: Specify whether the Secret or its key
-                                    must be defined
-                                  type: boolean
-                              required:
-                              - key
-                              type: object
-                              x-kubernetes-map-type: atomic
-                          type: object
-                        certFile:
-                          description: Path to the client cert file in the Prometheus
-                            container for the targets.
-                          type: string
-                        insecureSkipVerify:
-                          description: Disable target certificate validation.
-                          type: boolean
-                        keyFile:
-                          description: Path to the client key file in the Prometheus
-                            container for the targets.
-                          type: string
-                        keySecret:
-                          description: Secret containing the client key file for the
-                            targets.
-                          properties:
-                            key:
-                              description: The key of the secret to select from.  Must
-                                be a valid secret key.
-                              type: string
-                            name:
-                              description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                TODO: Add other useful fields. apiVersion, kind, uid?'
-                              type: string
-                            optional:
-                              description: Specify whether the Secret or its key must
-                                be defined
-                              type: boolean
-                          required:
-                          - key
-                          type: object
-                          x-kubernetes-map-type: atomic
-                        serverName:
-                          description: Used to verify the hostname for the targets.
-                          type: string
-                      type: object
-                  type: object
-                type: array
-              jobLabel:
-                description: "JobLabel selects the label from the associated Kubernetes
-                  service which will be used as the `job` label for all metrics. \n
-                  For example: If in `ServiceMonitor.spec.jobLabel: foo` and in `Service.metadata.labels.foo:
-                  bar`, then the `job=\"bar\"` label is added to all metrics. \n If
-                  the value of this field is empty or if the label doesn't exist for
-                  the given Service, the `job` label of the metrics defaults to the
-                  name of the Kubernetes Service."
-                type: string
-              labelLimit:
-                description: Per-scrape limit on number of labels that will be accepted
-                  for a sample. Only valid in Prometheus versions 2.27.0 and newer.
-                format: int64
-                type: integer
-              labelNameLengthLimit:
-                description: Per-scrape limit on length of labels name that will be
-                  accepted for a sample. Only valid in Prometheus versions 2.27.0
-                  and newer.
-                format: int64
-                type: integer
-              labelValueLengthLimit:
-                description: Per-scrape limit on length of labels value that will
-                  be accepted for a sample. Only valid in Prometheus versions 2.27.0
-                  and newer.
-                format: int64
-                type: integer
-              namespaceSelector:
-                description: Selector to select which namespaces the Kubernetes Endpoints
-                  objects are discovered from.
-                properties:
-                  any:
-                    description: Boolean describing whether all namespaces are selected
-                      in contrast to a list restricting them.
-                    type: boolean
-                  matchNames:
-                    description: List of namespace names to select from.
-                    items:
-                      type: string
-                    type: array
-                type: object
-              podTargetLabels:
-                description: PodTargetLabels transfers labels on the Kubernetes `Pod`
-                  onto the created metrics.
-                items:
-                  type: string
-                type: array
-              sampleLimit:
-                description: SampleLimit defines per-scrape limit on number of scraped
-                  samples that will be accepted.
-                format: int64
-                type: integer
-              selector:
-                description: Selector to select Endpoints objects.
-                properties:
-                  matchExpressions:
-                    description: matchExpressions is a list of label selector requirements.
-                      The requirements are ANDed.
-                    items:
-                      description: A label selector requirement is a selector that
-                        contains values, a key, and an operator that relates the key
-                        and values.
-                      properties:
-                        key:
-                          description: key is the label key that the selector applies
-                            to.
-                          type: string
-                        operator:
-                          description: operator represents a key's relationship to
-                            a set of values. Valid operators are In, NotIn, Exists
-                            and DoesNotExist.
-                          type: string
-                        values:
-                          description: values is an array of string values. If the
-                            operator is In or NotIn, the values array must be non-empty.
-                            If the operator is Exists or DoesNotExist, the values
-                            array must be empty. This array is replaced during a strategic
-                            merge patch.
-                          items:
-                            type: string
-                          type: array
-                      required:
-                      - key
-                      - operator
-                      type: object
-                    type: array
-                  matchLabels:
-                    additionalProperties:
-                      type: string
-                    description: matchLabels is a map of {key,value} pairs. A single
-                      {key,value} in the matchLabels map is equivalent to an element
-                      of matchExpressions, whose key field is "key", the operator
-                      is "In", and the values array contains only "value". The requirements
-                      are ANDed.
-                    type: object
-                type: object
-                x-kubernetes-map-type: atomic
-              targetLabels:
-                description: TargetLabels transfers labels from the Kubernetes `Service`
-                  onto the created metrics.
-                items:
-                  type: string
-                type: array
-              targetLimit:
-                description: TargetLimit defines a limit on the number of scraped
-                  targets that will be accepted.
-                format: int64
-                type: integer
-            required:
-            - endpoints
-            - selector
-            type: object
-        required:
-        - spec
-        type: object
-    served: true
-    storage: true
diff --git a/production/operator/crds/monitoring.grafana.com_grafanaagents.yaml b/production/operator/crds/monitoring.grafana.com_grafanaagents.yaml
deleted file mode 100644
index fab68b18e6f6..000000000000
--- a/production/operator/crds/monitoring.grafana.com_grafanaagents.yaml
+++ /dev/null
@@ -1,7795 +0,0 @@
----
-apiVersion: apiextensions.k8s.io/v1
-kind: CustomResourceDefinition
-metadata:
-  annotations:
-    controller-gen.kubebuilder.io/version: v0.9.2
-  creationTimestamp: null
-  name: grafanaagents.monitoring.grafana.com
-spec:
-  group: monitoring.grafana.com
-  names:
-    categories:
-    - agent-operator
-    kind: GrafanaAgent
-    listKind: GrafanaAgentList
-    plural: grafanaagents
-    singular: grafanaagent
-  scope: Namespaced
-  versions:
-  - name: v1alpha1
-    schema:
-      openAPIV3Schema:
-        description: GrafanaAgent defines a Grafana Agent deployment.
-        properties:
-          apiVersion:
-            description: 'APIVersion defines the versioned schema of this representation
-              of an object. Servers should convert recognized schemas to the latest
-              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
-            type: string
-          kind:
-            description: 'Kind is a string value representing the REST resource this
-              object represents. Servers may infer this from the endpoint the client
-              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
-            type: string
-          metadata:
-            type: object
-          spec:
-            description: Spec holds the specification of the desired behavior for
-              the Grafana Agent cluster.
-            properties:
-              affinity:
-                description: Affinity, if specified, controls pod scheduling constraints.
-                properties:
-                  nodeAffinity:
-                    description: Describes node affinity scheduling rules for the
-                      pod.
-                    properties:
-                      preferredDuringSchedulingIgnoredDuringExecution:
-                        description: The scheduler will prefer to schedule pods to
-                          nodes that satisfy the affinity expressions specified by
-                          this field, but it may choose a node that violates one or
-                          more of the expressions. The node that is most preferred
-                          is the one with the greatest sum of weights, i.e. for each
-                          node that meets all of the scheduling requirements (resource
-                          request, requiredDuringScheduling affinity expressions,
-                          etc.), compute a sum by iterating through the elements of
-                          this field and adding "weight" to the sum if the node matches
-                          the corresponding matchExpressions; the node(s) with the
-                          highest sum are the most preferred.
-                        items:
-                          description: An empty preferred scheduling term matches
-                            all objects with implicit weight 0 (i.e. it's a no-op).
-                            A null preferred scheduling term matches no objects (i.e.
-                            is also a no-op).
-                          properties:
-                            preference:
-                              description: A node selector term, associated with the
-                                corresponding weight.
-                              properties:
-                                matchExpressions:
-                                  description: A list of node selector requirements
-                                    by node's labels.
-                                  items:
-                                    description: A node selector requirement is a
-                                      selector that contains values, a key, and an
-                                      operator that relates the key and values.
-                                    properties:
-                                      key:
-                                        description: The label key that the selector
-                                          applies to.
-                                        type: string
-                                      operator:
-                                        description: Represents a key's relationship
-                                          to a set of values. Valid operators are
-                                          In, NotIn, Exists, DoesNotExist. Gt, and
-                                          Lt.
-                                        type: string
-                                      values:
-                                        description: An array of string values. If
-                                          the operator is In or NotIn, the values
-                                          array must be non-empty. If the operator
-                                          is Exists or DoesNotExist, the values array
-                                          must be empty. If the operator is Gt or
-                                          Lt, the values array must have a single
-                                          element, which will be interpreted as an
-                                          integer. This array is replaced during a
-                                          strategic merge patch.
-                                        items:
-                                          type: string
-                                        type: array
-                                    required:
-                                    - key
-                                    - operator
-                                    type: object
-                                  type: array
-                                matchFields:
-                                  description: A list of node selector requirements
-                                    by node's fields.
-                                  items:
-                                    description: A node selector requirement is a
-                                      selector that contains values, a key, and an
-                                      operator that relates the key and values.
-                                    properties:
-                                      key:
-                                        description: The label key that the selector
-                                          applies to.
-                                        type: string
-                                      operator:
-                                        description: Represents a key's relationship
-                                          to a set of values. Valid operators are
-                                          In, NotIn, Exists, DoesNotExist. Gt, and
-                                          Lt.
-                                        type: string
-                                      values:
-                                        description: An array of string values. If
-                                          the operator is In or NotIn, the values
-                                          array must be non-empty. If the operator
-                                          is Exists or DoesNotExist, the values array
-                                          must be empty. If the operator is Gt or
-                                          Lt, the values array must have a single
-                                          element, which will be interpreted as an
-                                          integer. This array is replaced during a
-                                          strategic merge patch.
-                                        items:
-                                          type: string
-                                        type: array
-                                    required:
-                                    - key
-                                    - operator
-                                    type: object
-                                  type: array
-                              type: object
-                              x-kubernetes-map-type: atomic
-                            weight:
-                              description: Weight associated with matching the corresponding
-                                nodeSelectorTerm, in the range 1-100.
-                              format: int32
-                              type: integer
-                          required:
-                          - preference
-                          - weight
-                          type: object
-                        type: array
-                      requiredDuringSchedulingIgnoredDuringExecution:
-                        description: If the affinity requirements specified by this
-                          field are not met at scheduling time, the pod will not be
-                          scheduled onto the node. If the affinity requirements specified
-                          by this field cease to be met at some point during pod execution
-                          (e.g. due to an update), the system may or may not try to
-                          eventually evict the pod from its node.
-                        properties:
-                          nodeSelectorTerms:
-                            description: Required. A list of node selector terms.
-                              The terms are ORed.
-                            items:
-                              description: A null or empty node selector term matches
-                                no objects. The requirements of them are ANDed. The
-                                TopologySelectorTerm type implements a subset of the
-                                NodeSelectorTerm.
-                              properties:
-                                matchExpressions:
-                                  description: A list of node selector requirements
-                                    by node's labels.
-                                  items:
-                                    description: A node selector requirement is a
-                                      selector that contains values, a key, and an
-                                      operator that relates the key and values.
-                                    properties:
-                                      key:
-                                        description: The label key that the selector
-                                          applies to.
-                                        type: string
-                                      operator:
-                                        description: Represents a key's relationship
-                                          to a set of values. Valid operators are
-                                          In, NotIn, Exists, DoesNotExist. Gt, and
-                                          Lt.
-                                        type: string
-                                      values:
-                                        description: An array of string values. If
-                                          the operator is In or NotIn, the values
-                                          array must be non-empty. If the operator
-                                          is Exists or DoesNotExist, the values array
-                                          must be empty. If the operator is Gt or
-                                          Lt, the values array must have a single
-                                          element, which will be interpreted as an
-                                          integer. This array is replaced during a
-                                          strategic merge patch.
-                                        items:
-                                          type: string
-                                        type: array
-                                    required:
-                                    - key
-                                    - operator
-                                    type: object
-                                  type: array
-                                matchFields:
-                                  description: A list of node selector requirements
-                                    by node's fields.
-                                  items:
-                                    description: A node selector requirement is a
-                                      selector that contains values, a key, and an
-                                      operator that relates the key and values.
-                                    properties:
-                                      key:
-                                        description: The label key that the selector
-                                          applies to.
-                                        type: string
-                                      operator:
-                                        description: Represents a key's relationship
-                                          to a set of values. Valid operators are
-                                          In, NotIn, Exists, DoesNotExist. Gt, and
-                                          Lt.
-                                        type: string
-                                      values:
-                                        description: An array of string values. If
-                                          the operator is In or NotIn, the values
-                                          array must be non-empty. If the operator
-                                          is Exists or DoesNotExist, the values array
-                                          must be empty. If the operator is Gt or
-                                          Lt, the values array must have a single
-                                          element, which will be interpreted as an
-                                          integer. This array is replaced during a
-                                          strategic merge patch.
-                                        items:
-                                          type: string
-                                        type: array
-                                    required:
-                                    - key
-                                    - operator
-                                    type: object
-                                  type: array
-                              type: object
-                              x-kubernetes-map-type: atomic
-                            type: array
-                        required:
-                        - nodeSelectorTerms
-                        type: object
-                        x-kubernetes-map-type: atomic
-                    type: object
-                  podAffinity:
-                    description: Describes pod affinity scheduling rules (e.g. co-locate
-                      this pod in the same node, zone, etc. as some other pod(s)).
-                    properties:
-                      preferredDuringSchedulingIgnoredDuringExecution:
-                        description: The scheduler will prefer to schedule pods to
-                          nodes that satisfy the affinity expressions specified by
-                          this field, but it may choose a node that violates one or
-                          more of the expressions. The node that is most preferred
-                          is the one with the greatest sum of weights, i.e. for each
-                          node that meets all of the scheduling requirements (resource
-                          request, requiredDuringScheduling affinity expressions,
-                          etc.), compute a sum by iterating through the elements of
-                          this field and adding "weight" to the sum if the node has
-                          pods which matches the corresponding podAffinityTerm; the
-                          node(s) with the highest sum are the most preferred.
-                        items:
-                          description: The weights of all of the matched WeightedPodAffinityTerm
-                            fields are added per-node to find the most preferred node(s)
-                          properties:
-                            podAffinityTerm:
-                              description: Required. A pod affinity term, associated
-                                with the corresponding weight.
-                              properties:
-                                labelSelector:
-                                  description: A label query over a set of resources,
-                                    in this case pods.
-                                  properties:
-                                    matchExpressions:
-                                      description: matchExpressions is a list of label
-                                        selector requirements. The requirements are
-                                        ANDed.
-                                      items:
-                                        description: A label selector requirement
-                                          is a selector that contains values, a key,
-                                          and an operator that relates the key and
-                                          values.
-                                        properties:
-                                          key:
-                                            description: key is the label key that
-                                              the selector applies to.
-                                            type: string
-                                          operator:
-                                            description: operator represents a key's
-                                              relationship to a set of values. Valid
-                                              operators are In, NotIn, Exists and
-                                              DoesNotExist.
-                                            type: string
-                                          values:
-                                            description: values is an array of string
-                                              values. If the operator is In or NotIn,
-                                              the values array must be non-empty.
-                                              If the operator is Exists or DoesNotExist,
-                                              the values array must be empty. This
-                                              array is replaced during a strategic
-                                              merge patch.
-                                            items:
-                                              type: string
-                                            type: array
-                                        required:
-                                        - key
-                                        - operator
-                                        type: object
-                                      type: array
-                                    matchLabels:
-                                      additionalProperties:
-                                        type: string
-                                      description: matchLabels is a map of {key,value}
-                                        pairs. A single {key,value} in the matchLabels
-                                        map is equivalent to an element of matchExpressions,
-                                        whose key field is "key", the operator is
-                                        "In", and the values array contains only "value".
-                                        The requirements are ANDed.
-                                      type: object
-                                  type: object
-                                  x-kubernetes-map-type: atomic
-                                namespaceSelector:
-                                  description: A label query over the set of namespaces
-                                    that the term applies to. The term is applied
-                                    to the union of the namespaces selected by this
-                                    field and the ones listed in the namespaces field.
-                                    null selector and null or empty namespaces list
-                                    means "this pod's namespace". An empty selector
-                                    ({}) matches all namespaces.
-                                  properties:
-                                    matchExpressions:
-                                      description: matchExpressions is a list of label
-                                        selector requirements. The requirements are
-                                        ANDed.
-                                      items:
-                                        description: A label selector requirement
-                                          is a selector that contains values, a key,
-                                          and an operator that relates the key and
-                                          values.
-                                        properties:
-                                          key:
-                                            description: key is the label key that
-                                              the selector applies to.
-                                            type: string
-                                          operator:
-                                            description: operator represents a key's
-                                              relationship to a set of values. Valid
-                                              operators are In, NotIn, Exists and
-                                              DoesNotExist.
-                                            type: string
-                                          values:
-                                            description: values is an array of string
-                                              values. If the operator is In or NotIn,
-                                              the values array must be non-empty.
-                                              If the operator is Exists or DoesNotExist,
-                                              the values array must be empty. This
-                                              array is replaced during a strategic
-                                              merge patch.
-                                            items:
-                                              type: string
-                                            type: array
-                                        required:
-                                        - key
-                                        - operator
-                                        type: object
-                                      type: array
-                                    matchLabels:
-                                      additionalProperties:
-                                        type: string
-                                      description: matchLabels is a map of {key,value}
-                                        pairs. A single {key,value} in the matchLabels
-                                        map is equivalent to an element of matchExpressions,
-                                        whose key field is "key", the operator is
-                                        "In", and the values array contains only "value".
-                                        The requirements are ANDed.
-                                      type: object
-                                  type: object
-                                  x-kubernetes-map-type: atomic
-                                namespaces:
-                                  description: namespaces specifies a static list
-                                    of namespace names that the term applies to. The
-                                    term is applied to the union of the namespaces
-                                    listed in this field and the ones selected by
-                                    namespaceSelector. null or empty namespaces list
-                                    and null namespaceSelector means "this pod's namespace".
-                                  items:
-                                    type: string
-                                  type: array
-                                topologyKey:
-                                  description: This pod should be co-located (affinity)
-                                    or not co-located (anti-affinity) with the pods
-                                    matching the labelSelector in the specified namespaces,
-                                    where co-located is defined as running on a node
-                                    whose value of the label with key topologyKey
-                                    matches that of any node on which any of the selected
-                                    pods is running. Empty topologyKey is not allowed.
-                                  type: string
-                              required:
-                              - topologyKey
-                              type: object
-                            weight:
-                              description: weight associated with matching the corresponding
-                                podAffinityTerm, in the range 1-100.
-                              format: int32
-                              type: integer
-                          required:
-                          - podAffinityTerm
-                          - weight
-                          type: object
-                        type: array
-                      requiredDuringSchedulingIgnoredDuringExecution:
-                        description: If the affinity requirements specified by this
-                          field are not met at scheduling time, the pod will not be
-                          scheduled onto the node. If the affinity requirements specified
-                          by this field cease to be met at some point during pod execution
-                          (e.g. due to a pod label update), the system may or may
-                          not try to eventually evict the pod from its node. When
-                          there are multiple elements, the lists of nodes corresponding
-                          to each podAffinityTerm are intersected, i.e. all terms
-                          must be satisfied.
-                        items:
-                          description: Defines a set of pods (namely those matching
-                            the labelSelector relative to the given namespace(s))
-                            that this pod should be co-located (affinity) or not co-located
-                            (anti-affinity) with, where co-located is defined as running
-                            on a node whose value of the label with key <topologyKey>
-                            matches that of any node on which a pod of the set of
-                            pods is running
-                          properties:
-                            labelSelector:
-                              description: A label query over a set of resources,
-                                in this case pods.
-                              properties:
-                                matchExpressions:
-                                  description: matchExpressions is a list of label
-                                    selector requirements. The requirements are ANDed.
-                                  items:
-                                    description: A label selector requirement is a
-                                      selector that contains values, a key, and an
-                                      operator that relates the key and values.
-                                    properties:
-                                      key:
-                                        description: key is the label key that the
-                                          selector applies to.
-                                        type: string
-                                      operator:
-                                        description: operator represents a key's relationship
-                                          to a set of values. Valid operators are
-                                          In, NotIn, Exists and DoesNotExist.
-                                        type: string
-                                      values:
-                                        description: values is an array of string
-                                          values. If the operator is In or NotIn,
-                                          the values array must be non-empty. If the
-                                          operator is Exists or DoesNotExist, the
-                                          values array must be empty. This array is
-                                          replaced during a strategic merge patch.
-                                        items:
-                                          type: string
-                                        type: array
-                                    required:
-                                    - key
-                                    - operator
-                                    type: object
-                                  type: array
-                                matchLabels:
-                                  additionalProperties:
-                                    type: string
-                                  description: matchLabels is a map of {key,value}
-                                    pairs. A single {key,value} in the matchLabels
-                                    map is equivalent to an element of matchExpressions,
-                                    whose key field is "key", the operator is "In",
-                                    and the values array contains only "value". The
-                                    requirements are ANDed.
-                                  type: object
-                              type: object
-                              x-kubernetes-map-type: atomic
-                            namespaceSelector:
-                              description: A label query over the set of namespaces
-                                that the term applies to. The term is applied to the
-                                union of the namespaces selected by this field and
-                                the ones listed in the namespaces field. null selector
-                                and null or empty namespaces list means "this pod's
-                                namespace". An empty selector ({}) matches all namespaces.
-                              properties:
-                                matchExpressions:
-                                  description: matchExpressions is a list of label
-                                    selector requirements. The requirements are ANDed.
-                                  items:
-                                    description: A label selector requirement is a
-                                      selector that contains values, a key, and an
-                                      operator that relates the key and values.
-                                    properties:
-                                      key:
-                                        description: key is the label key that the
-                                          selector applies to.
-                                        type: string
-                                      operator:
-                                        description: operator represents a key's relationship
-                                          to a set of values. Valid operators are
-                                          In, NotIn, Exists and DoesNotExist.
-                                        type: string
-                                      values:
-                                        description: values is an array of string
-                                          values. If the operator is In or NotIn,
-                                          the values array must be non-empty. If the
-                                          operator is Exists or DoesNotExist, the
-                                          values array must be empty. This array is
-                                          replaced during a strategic merge patch.
-                                        items:
-                                          type: string
-                                        type: array
-                                    required:
-                                    - key
-                                    - operator
-                                    type: object
-                                  type: array
-                                matchLabels:
-                                  additionalProperties:
-                                    type: string
-                                  description: matchLabels is a map of {key,value}
-                                    pairs. A single {key,value} in the matchLabels
-                                    map is equivalent to an element of matchExpressions,
-                                    whose key field is "key", the operator is "In",
-                                    and the values array contains only "value". The
-                                    requirements are ANDed.
-                                  type: object
-                              type: object
-                              x-kubernetes-map-type: atomic
-                            namespaces:
-                              description: namespaces specifies a static list of namespace
-                                names that the term applies to. The term is applied
-                                to the union of the namespaces listed in this field
-                                and the ones selected by namespaceSelector. null or
-                                empty namespaces list and null namespaceSelector means
-                                "this pod's namespace".
-                              items:
-                                type: string
-                              type: array
-                            topologyKey:
-                              description: This pod should be co-located (affinity)
-                                or not co-located (anti-affinity) with the pods matching
-                                the labelSelector in the specified namespaces, where
-                                co-located is defined as running on a node whose value
-                                of the label with key topologyKey matches that of
-                                any node on which any of the selected pods is running.
-                                Empty topologyKey is not allowed.
-                              type: string
-                          required:
-                          - topologyKey
-                          type: object
-                        type: array
-                    type: object
-                  podAntiAffinity:
-                    description: Describes pod anti-affinity scheduling rules (e.g.
-                      avoid putting this pod in the same node, zone, etc. as some
-                      other pod(s)).
-                    properties:
-                      preferredDuringSchedulingIgnoredDuringExecution:
-                        description: The scheduler will prefer to schedule pods to
-                          nodes that satisfy the anti-affinity expressions specified
-                          by this field, but it may choose a node that violates one
-                          or more of the expressions. The node that is most preferred
-                          is the one with the greatest sum of weights, i.e. for each
-                          node that meets all of the scheduling requirements (resource
-                          request, requiredDuringScheduling anti-affinity expressions,
-                          etc.), compute a sum by iterating through the elements of
-                          this field and adding "weight" to the sum if the node has
-                          pods which matches the corresponding podAffinityTerm; the
-                          node(s) with the highest sum are the most preferred.
-                        items:
-                          description: The weights of all of the matched WeightedPodAffinityTerm
-                            fields are added per-node to find the most preferred node(s)
-                          properties:
-                            podAffinityTerm:
-                              description: Required. A pod affinity term, associated
-                                with the corresponding weight.
-                              properties:
-                                labelSelector:
-                                  description: A label query over a set of resources,
-                                    in this case pods.
-                                  properties:
-                                    matchExpressions:
-                                      description: matchExpressions is a list of label
-                                        selector requirements. The requirements are
-                                        ANDed.
-                                      items:
-                                        description: A label selector requirement
-                                          is a selector that contains values, a key,
-                                          and an operator that relates the key and
-                                          values.
-                                        properties:
-                                          key:
-                                            description: key is the label key that
-                                              the selector applies to.
-                                            type: string
-                                          operator:
-                                            description: operator represents a key's
-                                              relationship to a set of values. Valid
-                                              operators are In, NotIn, Exists and
-                                              DoesNotExist.
-                                            type: string
-                                          values:
-                                            description: values is an array of string
-                                              values. If the operator is In or NotIn,
-                                              the values array must be non-empty.
-                                              If the operator is Exists or DoesNotExist,
-                                              the values array must be empty. This
-                                              array is replaced during a strategic
-                                              merge patch.
-                                            items:
-                                              type: string
-                                            type: array
-                                        required:
-                                        - key
-                                        - operator
-                                        type: object
-                                      type: array
-                                    matchLabels:
-                                      additionalProperties:
-                                        type: string
-                                      description: matchLabels is a map of {key,value}
-                                        pairs. A single {key,value} in the matchLabels
-                                        map is equivalent to an element of matchExpressions,
-                                        whose key field is "key", the operator is
-                                        "In", and the values array contains only "value".
-                                        The requirements are ANDed.
-                                      type: object
-                                  type: object
-                                  x-kubernetes-map-type: atomic
-                                namespaceSelector:
-                                  description: A label query over the set of namespaces
-                                    that the term applies to. The term is applied
-                                    to the union of the namespaces selected by this
-                                    field and the ones listed in the namespaces field.
-                                    null selector and null or empty namespaces list
-                                    means "this pod's namespace". An empty selector
-                                    ({}) matches all namespaces.
-                                  properties:
-                                    matchExpressions:
-                                      description: matchExpressions is a list of label
-                                        selector requirements. The requirements are
-                                        ANDed.
-                                      items:
-                                        description: A label selector requirement
-                                          is a selector that contains values, a key,
-                                          and an operator that relates the key and
-                                          values.
-                                        properties:
-                                          key:
-                                            description: key is the label key that
-                                              the selector applies to.
-                                            type: string
-                                          operator:
-                                            description: operator represents a key's
-                                              relationship to a set of values. Valid
-                                              operators are In, NotIn, Exists and
-                                              DoesNotExist.
-                                            type: string
-                                          values:
-                                            description: values is an array of string
-                                              values. If the operator is In or NotIn,
-                                              the values array must be non-empty.
-                                              If the operator is Exists or DoesNotExist,
-                                              the values array must be empty. This
-                                              array is replaced during a strategic
-                                              merge patch.
-                                            items:
-                                              type: string
-                                            type: array
-                                        required:
-                                        - key
-                                        - operator
-                                        type: object
-                                      type: array
-                                    matchLabels:
-                                      additionalProperties:
-                                        type: string
-                                      description: matchLabels is a map of {key,value}
-                                        pairs. A single {key,value} in the matchLabels
-                                        map is equivalent to an element of matchExpressions,
-                                        whose key field is "key", the operator is
-                                        "In", and the values array contains only "value".
-                                        The requirements are ANDed.
-                                      type: object
-                                  type: object
-                                  x-kubernetes-map-type: atomic
-                                namespaces:
-                                  description: namespaces specifies a static list
-                                    of namespace names that the term applies to. The
-                                    term is applied to the union of the namespaces
-                                    listed in this field and the ones selected by
-                                    namespaceSelector. null or empty namespaces list
-                                    and null namespaceSelector means "this pod's namespace".
-                                  items:
-                                    type: string
-                                  type: array
-                                topologyKey:
-                                  description: This pod should be co-located (affinity)
-                                    or not co-located (anti-affinity) with the pods
-                                    matching the labelSelector in the specified namespaces,
-                                    where co-located is defined as running on a node
-                                    whose value of the label with key topologyKey
-                                    matches that of any node on which any of the selected
-                                    pods is running. Empty topologyKey is not allowed.
-                                  type: string
-                              required:
-                              - topologyKey
-                              type: object
-                            weight:
-                              description: weight associated with matching the corresponding
-                                podAffinityTerm, in the range 1-100.
-                              format: int32
-                              type: integer
-                          required:
-                          - podAffinityTerm
-                          - weight
-                          type: object
-                        type: array
-                      requiredDuringSchedulingIgnoredDuringExecution:
-                        description: If the anti-affinity requirements specified by
-                          this field are not met at scheduling time, the pod will
-                          not be scheduled onto the node. If the anti-affinity requirements
-                          specified by this field cease to be met at some point during
-                          pod execution (e.g. due to a pod label update), the system
-                          may or may not try to eventually evict the pod from its
-                          node. When there are multiple elements, the lists of nodes
-                          corresponding to each podAffinityTerm are intersected, i.e.
-                          all terms must be satisfied.
-                        items:
-                          description: Defines a set of pods (namely those matching
-                            the labelSelector relative to the given namespace(s))
-                            that this pod should be co-located (affinity) or not co-located
-                            (anti-affinity) with, where co-located is defined as running
-                            on a node whose value of the label with key <topologyKey>
-                            matches that of any node on which a pod of the set of
-                            pods is running
-                          properties:
-                            labelSelector:
-                              description: A label query over a set of resources,
-                                in this case pods.
-                              properties:
-                                matchExpressions:
-                                  description: matchExpressions is a list of label
-                                    selector requirements. The requirements are ANDed.
-                                  items:
-                                    description: A label selector requirement is a
-                                      selector that contains values, a key, and an
-                                      operator that relates the key and values.
-                                    properties:
-                                      key:
-                                        description: key is the label key that the
-                                          selector applies to.
-                                        type: string
-                                      operator:
-                                        description: operator represents a key's relationship
-                                          to a set of values. Valid operators are
-                                          In, NotIn, Exists and DoesNotExist.
-                                        type: string
-                                      values:
-                                        description: values is an array of string
-                                          values. If the operator is In or NotIn,
-                                          the values array must be non-empty. If the
-                                          operator is Exists or DoesNotExist, the
-                                          values array must be empty. This array is
-                                          replaced during a strategic merge patch.
-                                        items:
-                                          type: string
-                                        type: array
-                                    required:
-                                    - key
-                                    - operator
-                                    type: object
-                                  type: array
-                                matchLabels:
-                                  additionalProperties:
-                                    type: string
-                                  description: matchLabels is a map of {key,value}
-                                    pairs. A single {key,value} in the matchLabels
-                                    map is equivalent to an element of matchExpressions,
-                                    whose key field is "key", the operator is "In",
-                                    and the values array contains only "value". The
-                                    requirements are ANDed.
-                                  type: object
-                              type: object
-                              x-kubernetes-map-type: atomic
-                            namespaceSelector:
-                              description: A label query over the set of namespaces
-                                that the term applies to. The term is applied to the
-                                union of the namespaces selected by this field and
-                                the ones listed in the namespaces field. null selector
-                                and null or empty namespaces list means "this pod's
-                                namespace". An empty selector ({}) matches all namespaces.
-                              properties:
-                                matchExpressions:
-                                  description: matchExpressions is a list of label
-                                    selector requirements. The requirements are ANDed.
-                                  items:
-                                    description: A label selector requirement is a
-                                      selector that contains values, a key, and an
-                                      operator that relates the key and values.
-                                    properties:
-                                      key:
-                                        description: key is the label key that the
-                                          selector applies to.
-                                        type: string
-                                      operator:
-                                        description: operator represents a key's relationship
-                                          to a set of values. Valid operators are
-                                          In, NotIn, Exists and DoesNotExist.
-                                        type: string
-                                      values:
-                                        description: values is an array of string
-                                          values. If the operator is In or NotIn,
-                                          the values array must be non-empty. If the
-                                          operator is Exists or DoesNotExist, the
-                                          values array must be empty. This array is
-                                          replaced during a strategic merge patch.
-                                        items:
-                                          type: string
-                                        type: array
-                                    required:
-                                    - key
-                                    - operator
-                                    type: object
-                                  type: array
-                                matchLabels:
-                                  additionalProperties:
-                                    type: string
-                                  description: matchLabels is a map of {key,value}
-                                    pairs. A single {key,value} in the matchLabels
-                                    map is equivalent to an element of matchExpressions,
-                                    whose key field is "key", the operator is "In",
-                                    and the values array contains only "value". The
-                                    requirements are ANDed.
-                                  type: object
-                              type: object
-                              x-kubernetes-map-type: atomic
-                            namespaces:
-                              description: namespaces specifies a static list of namespace
-                                names that the term applies to. The term is applied
-                                to the union of the namespaces listed in this field
-                                and the ones selected by namespaceSelector. null or
-                                empty namespaces list and null namespaceSelector means
-                                "this pod's namespace".
-                              items:
-                                type: string
-                              type: array
-                            topologyKey:
-                              description: This pod should be co-located (affinity)
-                                or not co-located (anti-affinity) with the pods matching
-                                the labelSelector in the specified namespaces, where
-                                co-located is defined as running on a node whose value
-                                of the label with key topologyKey matches that of
-                                any node on which any of the selected pods is running.
-                                Empty topologyKey is not allowed.
-                              type: string
-                          required:
-                          - topologyKey
-                          type: object
-                        type: array
-                    type: object
-                type: object
-              apiServer:
-                description: APIServerConfig lets you specify a host and auth methods
-                  to access the Kubernetes API server. If left empty, the Agent assumes
-                  that it is running inside of the cluster and will discover API servers
-                  automatically and use the pod's CA certificate and bearer token
-                  file at /var/run/secrets/kubernetes.io/serviceaccount.
-                properties:
-                  authorization:
-                    description: Authorization section for accessing apiserver
-                    properties:
-                      credentials:
-                        description: The secret's key that contains the credentials
-                          of the request
-                        properties:
-                          key:
-                            description: The key of the secret to select from.  Must
-                              be a valid secret key.
-                            type: string
-                          name:
-                            description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                              TODO: Add other useful fields. apiVersion, kind, uid?'
-                            type: string
-                          optional:
-                            description: Specify whether the Secret or its key must
-                              be defined
-                            type: boolean
-                        required:
-                        - key
-                        type: object
-                        x-kubernetes-map-type: atomic
-                      credentialsFile:
-                        description: File to read a secret from, mutually exclusive
-                          with Credentials (from SafeAuthorization)
-                        type: string
-                      type:
-                        description: Set the authentication type. Defaults to Bearer,
-                          Basic will cause an error
-                        type: string
-                    type: object
-                  basicAuth:
-                    description: BasicAuth allow an endpoint to authenticate over
-                      basic authentication
-                    properties:
-                      password:
-                        description: The secret in the service monitor namespace that
-                          contains the password for authentication.
-                        properties:
-                          key:
-                            description: The key of the secret to select from.  Must
-                              be a valid secret key.
-                            type: string
-                          name:
-                            description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                              TODO: Add other useful fields. apiVersion, kind, uid?'
-                            type: string
-                          optional:
-                            description: Specify whether the Secret or its key must
-                              be defined
-                            type: boolean
-                        required:
-                        - key
-                        type: object
-                        x-kubernetes-map-type: atomic
-                      username:
-                        description: The secret in the service monitor namespace that
-                          contains the username for authentication.
-                        properties:
-                          key:
-                            description: The key of the secret to select from.  Must
-                              be a valid secret key.
-                            type: string
-                          name:
-                            description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                              TODO: Add other useful fields. apiVersion, kind, uid?'
-                            type: string
-                          optional:
-                            description: Specify whether the Secret or its key must
-                              be defined
-                            type: boolean
-                        required:
-                        - key
-                        type: object
-                        x-kubernetes-map-type: atomic
-                    type: object
-                  bearerToken:
-                    description: Bearer token for accessing apiserver.
-                    type: string
-                  bearerTokenFile:
-                    description: File to read bearer token for accessing apiserver.
-                    type: string
-                  host:
-                    description: Host of apiserver. A valid string consisting of a
-                      hostname or IP followed by an optional port number
-                    type: string
-                  tlsConfig:
-                    description: TLS Config to use for accessing apiserver.
-                    properties:
-                      ca:
-                        description: Certificate authority used when verifying server
-                          certificates.
-                        properties:
-                          configMap:
-                            description: ConfigMap containing data to use for the
-                              targets.
-                            properties:
-                              key:
-                                description: The key to select.
-                                type: string
-                              name:
-                                description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                  TODO: Add other useful fields. apiVersion, kind,
-                                  uid?'
-                                type: string
-                              optional:
-                                description: Specify whether the ConfigMap or its
-                                  key must be defined
-                                type: boolean
-                            required:
-                            - key
-                            type: object
-                            x-kubernetes-map-type: atomic
-                          secret:
-                            description: Secret containing data to use for the targets.
-                            properties:
-                              key:
-                                description: The key of the secret to select from.  Must
-                                  be a valid secret key.
-                                type: string
-                              name:
-                                description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                  TODO: Add other useful fields. apiVersion, kind,
-                                  uid?'
-                                type: string
-                              optional:
-                                description: Specify whether the Secret or its key
-                                  must be defined
-                                type: boolean
-                            required:
-                            - key
-                            type: object
-                            x-kubernetes-map-type: atomic
-                        type: object
-                      caFile:
-                        description: Path to the CA cert in the Prometheus container
-                          to use for the targets.
-                        type: string
-                      cert:
-                        description: Client certificate to present when doing client-authentication.
-                        properties:
-                          configMap:
-                            description: ConfigMap containing data to use for the
-                              targets.
-                            properties:
-                              key:
-                                description: The key to select.
-                                type: string
-                              name:
-                                description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                  TODO: Add other useful fields. apiVersion, kind,
-                                  uid?'
-                                type: string
-                              optional:
-                                description: Specify whether the ConfigMap or its
-                                  key must be defined
-                                type: boolean
-                            required:
-                            - key
-                            type: object
-                            x-kubernetes-map-type: atomic
-                          secret:
-                            description: Secret containing data to use for the targets.
-                            properties:
-                              key:
-                                description: The key of the secret to select from.  Must
-                                  be a valid secret key.
-                                type: string
-                              name:
-                                description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                  TODO: Add other useful fields. apiVersion, kind,
-                                  uid?'
-                                type: string
-                              optional:
-                                description: Specify whether the Secret or its key
-                                  must be defined
-                                type: boolean
-                            required:
-                            - key
-                            type: object
-                            x-kubernetes-map-type: atomic
-                        type: object
-                      certFile:
-                        description: Path to the client cert file in the Prometheus
-                          container for the targets.
-                        type: string
-                      insecureSkipVerify:
-                        description: Disable target certificate validation.
-                        type: boolean
-                      keyFile:
-                        description: Path to the client key file in the Prometheus
-                          container for the targets.
-                        type: string
-                      keySecret:
-                        description: Secret containing the client key file for the
-                          targets.
-                        properties:
-                          key:
-                            description: The key of the secret to select from.  Must
-                              be a valid secret key.
-                            type: string
-                          name:
-                            description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                              TODO: Add other useful fields. apiVersion, kind, uid?'
-                            type: string
-                          optional:
-                            description: Specify whether the Secret or its key must
-                              be defined
-                            type: boolean
-                        required:
-                        - key
-                        type: object
-                        x-kubernetes-map-type: atomic
-                      serverName:
-                        description: Used to verify the hostname for the targets.
-                        type: string
-                    type: object
-                required:
-                - host
-                type: object
-              configMaps:
-                description: ConfigMaps is a list of config maps in the same namespace
-                  as the GrafanaAgent object which will be mounted into each running
-                  Grafana Agent pod. The ConfigMaps are mounted into /var/lib/grafana-agent/extra-configmaps/<configmap-name>.
-                items:
-                  type: string
-                type: array
-              configReloaderImage:
-                description: Image, when specified, overrides the image used to run
-                  Config Reloader. Specify the image along with a tag. You still need
-                  to set the version to ensure Grafana Agent Operator knows which
-                  version of Grafana Agent is being configured.
-                type: string
-              configReloaderVersion:
-                description: Version of Config Reloader to be deployed.
-                type: string
-              containers:
-                description: 'Containers lets you inject additional containers or
-                  modify operator-generated containers. This can be used to add an
-                  authentication proxy to a Grafana Agent pod or to change the behavior
-                  of an operator-generated container. Containers described here modify
-                  an operator-generated container if they share the same name and
-                  if modifications are done via a strategic merge patch. The current
-                  container names are: `grafana-agent` and `config-reloader`. Overriding
-                  containers is entirely outside the scope of what the Grafana Agent
-                  team supports and by doing so, you accept that this behavior may
-                  break at any time without notice.'
-                items:
-                  description: A single application container that you want to run
-                    within a pod.
-                  properties:
-                    args:
-                      description: 'Arguments to the entrypoint. The container image''s
-                        CMD is used if this is not provided. Variable references $(VAR_NAME)
-                        are expanded using the container''s environment. If a variable
-                        cannot be resolved, the reference in the input string will
-                        be unchanged. Double $$ are reduced to a single $, which allows
-                        for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will
-                        produce the string literal "$(VAR_NAME)". Escaped references
-                        will never be expanded, regardless of whether the variable
-                        exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell'
-                      items:
-                        type: string
-                      type: array
-                    command:
-                      description: 'Entrypoint array. Not executed within a shell.
-                        The container image''s ENTRYPOINT is used if this is not provided.
-                        Variable references $(VAR_NAME) are expanded using the container''s
-                        environment. If a variable cannot be resolved, the reference
-                        in the input string will be unchanged. Double $$ are reduced
-                        to a single $, which allows for escaping the $(VAR_NAME) syntax:
-                        i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)".
-                        Escaped references will never be expanded, regardless of whether
-                        the variable exists or not. Cannot be updated. More info:
-                        https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell'
-                      items:
-                        type: string
-                      type: array
-                    env:
-                      description: List of environment variables to set in the container.
-                        Cannot be updated.
-                      items:
-                        description: EnvVar represents an environment variable present
-                          in a Container.
-                        properties:
-                          name:
-                            description: Name of the environment variable. Must be
-                              a C_IDENTIFIER.
-                            type: string
-                          value:
-                            description: 'Variable references $(VAR_NAME) are expanded
-                              using the previously defined environment variables in
-                              the container and any service environment variables.
-                              If a variable cannot be resolved, the reference in the
-                              input string will be unchanged. Double $$ are reduced
-                              to a single $, which allows for escaping the $(VAR_NAME)
-                              syntax: i.e. "$$(VAR_NAME)" will produce the string
-                              literal "$(VAR_NAME)". Escaped references will never
-                              be expanded, regardless of whether the variable exists
-                              or not. Defaults to "".'
-                            type: string
-                          valueFrom:
-                            description: Source for the environment variable's value.
-                              Cannot be used if value is not empty.
-                            properties:
-                              configMapKeyRef:
-                                description: Selects a key of a ConfigMap.
-                                properties:
-                                  key:
-                                    description: The key to select.
-                                    type: string
-                                  name:
-                                    description: 'Name of the referent. More info:
-                                      https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                      TODO: Add other useful fields. apiVersion, kind,
-                                      uid?'
-                                    type: string
-                                  optional:
-                                    description: Specify whether the ConfigMap or
-                                      its key must be defined
-                                    type: boolean
-                                required:
-                                - key
-                                type: object
-                                x-kubernetes-map-type: atomic
-                              fieldRef:
-                                description: 'Selects a field of the pod: supports
-                                  metadata.name, metadata.namespace, `metadata.labels[''<KEY>'']`,
-                                  `metadata.annotations[''<KEY>'']`, spec.nodeName,
-                                  spec.serviceAccountName, status.hostIP, status.podIP,
-                                  status.podIPs.'
-                                properties:
-                                  apiVersion:
-                                    description: Version of the schema the FieldPath
-                                      is written in terms of, defaults to "v1".
-                                    type: string
-                                  fieldPath:
-                                    description: Path of the field to select in the
-                                      specified API version.
-                                    type: string
-                                required:
-                                - fieldPath
-                                type: object
-                                x-kubernetes-map-type: atomic
-                              resourceFieldRef:
-                                description: 'Selects a resource of the container:
-                                  only resources limits and requests (limits.cpu,
-                                  limits.memory, limits.ephemeral-storage, requests.cpu,
-                                  requests.memory and requests.ephemeral-storage)
-                                  are currently supported.'
-                                properties:
-                                  containerName:
-                                    description: 'Container name: required for volumes,
-                                      optional for env vars'
-                                    type: string
-                                  divisor:
-                                    anyOf:
-                                    - type: integer
-                                    - type: string
-                                    description: Specifies the output format of the
-                                      exposed resources, defaults to "1"
-                                    pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
-                                    x-kubernetes-int-or-string: true
-                                  resource:
-                                    description: 'Required: resource to select'
-                                    type: string
-                                required:
-                                - resource
-                                type: object
-                                x-kubernetes-map-type: atomic
-                              secretKeyRef:
-                                description: Selects a key of a secret in the pod's
-                                  namespace
-                                properties:
-                                  key:
-                                    description: The key of the secret to select from.  Must
-                                      be a valid secret key.
-                                    type: string
-                                  name:
-                                    description: 'Name of the referent. More info:
-                                      https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                      TODO: Add other useful fields. apiVersion, kind,
-                                      uid?'
-                                    type: string
-                                  optional:
-                                    description: Specify whether the Secret or its
-                                      key must be defined
-                                    type: boolean
-                                required:
-                                - key
-                                type: object
-                                x-kubernetes-map-type: atomic
-                            type: object
-                        required:
-                        - name
-                        type: object
-                      type: array
-                    envFrom:
-                      description: List of sources to populate environment variables
-                        in the container. The keys defined within a source must be
-                        a C_IDENTIFIER. All invalid keys will be reported as an event
-                        when the container is starting. When a key exists in multiple
-                        sources, the value associated with the last source will take
-                        precedence. Values defined by an Env with a duplicate key
-                        will take precedence. Cannot be updated.
-                      items:
-                        description: EnvFromSource represents the source of a set
-                          of ConfigMaps
-                        properties:
-                          configMapRef:
-                            description: The ConfigMap to select from
-                            properties:
-                              name:
-                                description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                  TODO: Add other useful fields. apiVersion, kind,
-                                  uid?'
-                                type: string
-                              optional:
-                                description: Specify whether the ConfigMap must be
-                                  defined
-                                type: boolean
-                            type: object
-                            x-kubernetes-map-type: atomic
-                          prefix:
-                            description: An optional identifier to prepend to each
-                              key in the ConfigMap. Must be a C_IDENTIFIER.
-                            type: string
-                          secretRef:
-                            description: The Secret to select from
-                            properties:
-                              name:
-                                description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                  TODO: Add other useful fields. apiVersion, kind,
-                                  uid?'
-                                type: string
-                              optional:
-                                description: Specify whether the Secret must be defined
-                                type: boolean
-                            type: object
-                            x-kubernetes-map-type: atomic
-                        type: object
-                      type: array
-                    image:
-                      description: 'Container image name. More info: https://kubernetes.io/docs/concepts/containers/images
-                        This field is optional to allow higher level config management
-                        to default or override container images in workload controllers
-                        like Deployments and StatefulSets.'
-                      type: string
-                    imagePullPolicy:
-                      description: 'Image pull policy. One of Always, Never, IfNotPresent.
-                        Defaults to Always if :latest tag is specified, or IfNotPresent
-                        otherwise. Cannot be updated. More info: https://kubernetes.io/docs/concepts/containers/images#updating-images'
-                      type: string
-                    lifecycle:
-                      description: Actions that the management system should take
-                        in response to container lifecycle events. Cannot be updated.
-                      properties:
-                        postStart:
-                          description: 'PostStart is called immediately after a container
-                            is created. If the handler fails, the container is terminated
-                            and restarted according to its restart policy. Other management
-                            of the container blocks until the hook completes. More
-                            info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks'
-                          properties:
-                            exec:
-                              description: Exec specifies the action to take.
-                              properties:
-                                command:
-                                  description: Command is the command line to execute
-                                    inside the container, the working directory for
-                                    the command  is root ('/') in the container's
-                                    filesystem. The command is simply exec'd, it is
-                                    not run inside a shell, so traditional shell instructions
-                                    ('|', etc) won't work. To use a shell, you need
-                                    to explicitly call out to that shell. Exit status
-                                    of 0 is treated as live/healthy and non-zero is
-                                    unhealthy.
-                                  items:
-                                    type: string
-                                  type: array
-                              type: object
-                            httpGet:
-                              description: HTTPGet specifies the http request to perform.
-                              properties:
-                                host:
-                                  description: Host name to connect to, defaults to
-                                    the pod IP. You probably want to set "Host" in
-                                    httpHeaders instead.
-                                  type: string
-                                httpHeaders:
-                                  description: Custom headers to set in the request.
-                                    HTTP allows repeated headers.
-                                  items:
-                                    description: HTTPHeader describes a custom header
-                                      to be used in HTTP probes
-                                    properties:
-                                      name:
-                                        description: The header field name. This will
-                                          be canonicalized upon output, so case-variant
-                                          names will be understood as the same header.
-                                        type: string
-                                      value:
-                                        description: The header field value
-                                        type: string
-                                    required:
-                                    - name
-                                    - value
-                                    type: object
-                                  type: array
-                                path:
-                                  description: Path to access on the HTTP server.
-                                  type: string
-                                port:
-                                  anyOf:
-                                  - type: integer
-                                  - type: string
-                                  description: Name or number of the port to access
-                                    on the container. Number must be in the range
-                                    1 to 65535. Name must be an IANA_SVC_NAME.
-                                  x-kubernetes-int-or-string: true
-                                scheme:
-                                  description: Scheme to use for connecting to the
-                                    host. Defaults to HTTP.
-                                  type: string
-                              required:
-                              - port
-                              type: object
-                            tcpSocket:
-                              description: Deprecated. TCPSocket is NOT supported
-                                as a LifecycleHandler and kept for the backward compatibility.
-                                There are no validation of this field and lifecycle
-                                hooks will fail in runtime when tcp handler is specified.
-                              properties:
-                                host:
-                                  description: 'Optional: Host name to connect to,
-                                    defaults to the pod IP.'
-                                  type: string
-                                port:
-                                  anyOf:
-                                  - type: integer
-                                  - type: string
-                                  description: Number or name of the port to access
-                                    on the container. Number must be in the range
-                                    1 to 65535. Name must be an IANA_SVC_NAME.
-                                  x-kubernetes-int-or-string: true
-                              required:
-                              - port
-                              type: object
-                          type: object
-                        preStop:
-                          description: 'PreStop is called immediately before a container
-                            is terminated due to an API request or management event
-                            such as liveness/startup probe failure, preemption, resource
-                            contention, etc. The handler is not called if the container
-                            crashes or exits. The Pod''s termination grace period
-                            countdown begins before the PreStop hook is executed.
-                            Regardless of the outcome of the handler, the container
-                            will eventually terminate within the Pod''s termination
-                            grace period (unless delayed by finalizers). Other management
-                            of the container blocks until the hook completes or until
-                            the termination grace period is reached. More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks'
-                          properties:
-                            exec:
-                              description: Exec specifies the action to take.
-                              properties:
-                                command:
-                                  description: Command is the command line to execute
-                                    inside the container, the working directory for
-                                    the command  is root ('/') in the container's
-                                    filesystem. The command is simply exec'd, it is
-                                    not run inside a shell, so traditional shell instructions
-                                    ('|', etc) won't work. To use a shell, you need
-                                    to explicitly call out to that shell. Exit status
-                                    of 0 is treated as live/healthy and non-zero is
-                                    unhealthy.
-                                  items:
-                                    type: string
-                                  type: array
-                              type: object
-                            httpGet:
-                              description: HTTPGet specifies the http request to perform.
-                              properties:
-                                host:
-                                  description: Host name to connect to, defaults to
-                                    the pod IP. You probably want to set "Host" in
-                                    httpHeaders instead.
-                                  type: string
-                                httpHeaders:
-                                  description: Custom headers to set in the request.
-                                    HTTP allows repeated headers.
-                                  items:
-                                    description: HTTPHeader describes a custom header
-                                      to be used in HTTP probes
-                                    properties:
-                                      name:
-                                        description: The header field name. This will
-                                          be canonicalized upon output, so case-variant
-                                          names will be understood as the same header.
-                                        type: string
-                                      value:
-                                        description: The header field value
-                                        type: string
-                                    required:
-                                    - name
-                                    - value
-                                    type: object
-                                  type: array
-                                path:
-                                  description: Path to access on the HTTP server.
-                                  type: string
-                                port:
-                                  anyOf:
-                                  - type: integer
-                                  - type: string
-                                  description: Name or number of the port to access
-                                    on the container. Number must be in the range
-                                    1 to 65535. Name must be an IANA_SVC_NAME.
-                                  x-kubernetes-int-or-string: true
-                                scheme:
-                                  description: Scheme to use for connecting to the
-                                    host. Defaults to HTTP.
-                                  type: string
-                              required:
-                              - port
-                              type: object
-                            tcpSocket:
-                              description: Deprecated. TCPSocket is NOT supported
-                                as a LifecycleHandler and kept for the backward compatibility.
-                                There are no validation of this field and lifecycle
-                                hooks will fail in runtime when tcp handler is specified.
-                              properties:
-                                host:
-                                  description: 'Optional: Host name to connect to,
-                                    defaults to the pod IP.'
-                                  type: string
-                                port:
-                                  anyOf:
-                                  - type: integer
-                                  - type: string
-                                  description: Number or name of the port to access
-                                    on the container. Number must be in the range
-                                    1 to 65535. Name must be an IANA_SVC_NAME.
-                                  x-kubernetes-int-or-string: true
-                              required:
-                              - port
-                              type: object
-                          type: object
-                      type: object
-                    livenessProbe:
-                      description: 'Periodic probe of container liveness. Container
-                        will be restarted if the probe fails. Cannot be updated. More
-                        info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes'
-                      properties:
-                        exec:
-                          description: Exec specifies the action to take.
-                          properties:
-                            command:
-                              description: Command is the command line to execute
-                                inside the container, the working directory for the
-                                command  is root ('/') in the container's filesystem.
-                                The command is simply exec'd, it is not run inside
-                                a shell, so traditional shell instructions ('|', etc)
-                                won't work. To use a shell, you need to explicitly
-                                call out to that shell. Exit status of 0 is treated
-                                as live/healthy and non-zero is unhealthy.
-                              items:
-                                type: string
-                              type: array
-                          type: object
-                        failureThreshold:
-                          description: Minimum consecutive failures for the probe
-                            to be considered failed after having succeeded. Defaults
-                            to 3. Minimum value is 1.
-                          format: int32
-                          type: integer
-                        grpc:
-                          description: GRPC specifies an action involving a GRPC port.
-                          properties:
-                            port:
-                              description: Port number of the gRPC service. Number
-                                must be in the range 1 to 65535.
-                              format: int32
-                              type: integer
-                            service:
-                              description: "Service is the name of the service to
-                                place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
-                                \n If this is not specified, the default behavior
-                                is defined by gRPC."
-                              type: string
-                          required:
-                          - port
-                          type: object
-                        httpGet:
-                          description: HTTPGet specifies the http request to perform.
-                          properties:
-                            host:
-                              description: Host name to connect to, defaults to the
-                                pod IP. You probably want to set "Host" in httpHeaders
-                                instead.
-                              type: string
-                            httpHeaders:
-                              description: Custom headers to set in the request. HTTP
-                                allows repeated headers.
-                              items:
-                                description: HTTPHeader describes a custom header
-                                  to be used in HTTP probes
-                                properties:
-                                  name:
-                                    description: The header field name. This will
-                                      be canonicalized upon output, so case-variant
-                                      names will be understood as the same header.
-                                    type: string
-                                  value:
-                                    description: The header field value
-                                    type: string
-                                required:
-                                - name
-                                - value
-                                type: object
-                              type: array
-                            path:
-                              description: Path to access on the HTTP server.
-                              type: string
-                            port:
-                              anyOf:
-                              - type: integer
-                              - type: string
-                              description: Name or number of the port to access on
-                                the container. Number must be in the range 1 to 65535.
-                                Name must be an IANA_SVC_NAME.
-                              x-kubernetes-int-or-string: true
-                            scheme:
-                              description: Scheme to use for connecting to the host.
-                                Defaults to HTTP.
-                              type: string
-                          required:
-                          - port
-                          type: object
-                        initialDelaySeconds:
-                          description: 'Number of seconds after the container has
-                            started before liveness probes are initiated. More info:
-                            https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes'
-                          format: int32
-                          type: integer
-                        periodSeconds:
-                          description: How often (in seconds) to perform the probe.
-                            Default to 10 seconds. Minimum value is 1.
-                          format: int32
-                          type: integer
-                        successThreshold:
-                          description: Minimum consecutive successes for the probe
-                            to be considered successful after having failed. Defaults
-                            to 1. Must be 1 for liveness and startup. Minimum value
-                            is 1.
-                          format: int32
-                          type: integer
-                        tcpSocket:
-                          description: TCPSocket specifies an action involving a TCP
-                            port.
-                          properties:
-                            host:
-                              description: 'Optional: Host name to connect to, defaults
-                                to the pod IP.'
-                              type: string
-                            port:
-                              anyOf:
-                              - type: integer
-                              - type: string
-                              description: Number or name of the port to access on
-                                the container. Number must be in the range 1 to 65535.
-                                Name must be an IANA_SVC_NAME.
-                              x-kubernetes-int-or-string: true
-                          required:
-                          - port
-                          type: object
-                        terminationGracePeriodSeconds:
-                          description: Optional duration in seconds the pod needs
-                            to terminate gracefully upon probe failure. The grace
-                            period is the duration in seconds after the processes
-                            running in the pod are sent a termination signal and the
-                            time when the processes are forcibly halted with a kill
-                            signal. Set this value longer than the expected cleanup
-                            time for your process. If this value is nil, the pod's
-                            terminationGracePeriodSeconds will be used. Otherwise,
-                            this value overrides the value provided by the pod spec.
-                            Value must be non-negative integer. The value zero indicates
-                            stop immediately via the kill signal (no opportunity to
-                            shut down). This is a beta field and requires enabling
-                            ProbeTerminationGracePeriod feature gate. Minimum value
-                            is 1. spec.terminationGracePeriodSeconds is used if unset.
-                          format: int64
-                          type: integer
-                        timeoutSeconds:
-                          description: 'Number of seconds after which the probe times
-                            out. Defaults to 1 second. Minimum value is 1. More info:
-                            https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes'
-                          format: int32
-                          type: integer
-                      type: object
-                    name:
-                      description: Name of the container specified as a DNS_LABEL.
-                        Each container in a pod must have a unique name (DNS_LABEL).
-                        Cannot be updated.
-                      type: string
-                    ports:
-                      description: List of ports to expose from the container. Not
-                        specifying a port here DOES NOT prevent that port from being
-                        exposed. Any port which is listening on the default "0.0.0.0"
-                        address inside a container will be accessible from the network.
-                        Modifying this array with strategic merge patch may corrupt
-                        the data. For more information See https://github.com/kubernetes/kubernetes/issues/108255.
-                        Cannot be updated.
-                      items:
-                        description: ContainerPort represents a network port in a
-                          single container.
-                        properties:
-                          containerPort:
-                            description: Number of port to expose on the pod's IP
-                              address. This must be a valid port number, 0 < x < 65536.
-                            format: int32
-                            type: integer
-                          hostIP:
-                            description: What host IP to bind the external port to.
-                            type: string
-                          hostPort:
-                            description: Number of port to expose on the host. If
-                              specified, this must be a valid port number, 0 < x <
-                              65536. If HostNetwork is specified, this must match
-                              ContainerPort. Most containers do not need this.
-                            format: int32
-                            type: integer
-                          name:
-                            description: If specified, this must be an IANA_SVC_NAME
-                              and unique within the pod. Each named port in a pod
-                              must have a unique name. Name for the port that can
-                              be referred to by services.
-                            type: string
-                          protocol:
-                            default: TCP
-                            description: Protocol for port. Must be UDP, TCP, or SCTP.
-                              Defaults to "TCP".
-                            type: string
-                        required:
-                        - containerPort
-                        type: object
-                      type: array
-                      x-kubernetes-list-map-keys:
-                      - containerPort
-                      - protocol
-                      x-kubernetes-list-type: map
-                    readinessProbe:
-                      description: 'Periodic probe of container service readiness.
-                        Container will be removed from service endpoints if the probe
-                        fails. Cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes'
-                      properties:
-                        exec:
-                          description: Exec specifies the action to take.
-                          properties:
-                            command:
-                              description: Command is the command line to execute
-                                inside the container, the working directory for the
-                                command  is root ('/') in the container's filesystem.
-                                The command is simply exec'd, it is not run inside
-                                a shell, so traditional shell instructions ('|', etc)
-                                won't work. To use a shell, you need to explicitly
-                                call out to that shell. Exit status of 0 is treated
-                                as live/healthy and non-zero is unhealthy.
-                              items:
-                                type: string
-                              type: array
-                          type: object
-                        failureThreshold:
-                          description: Minimum consecutive failures for the probe
-                            to be considered failed after having succeeded. Defaults
-                            to 3. Minimum value is 1.
-                          format: int32
-                          type: integer
-                        grpc:
-                          description: GRPC specifies an action involving a GRPC port.
-                          properties:
-                            port:
-                              description: Port number of the gRPC service. Number
-                                must be in the range 1 to 65535.
-                              format: int32
-                              type: integer
-                            service:
-                              description: "Service is the name of the service to
-                                place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
-                                \n If this is not specified, the default behavior
-                                is defined by gRPC."
-                              type: string
-                          required:
-                          - port
-                          type: object
-                        httpGet:
-                          description: HTTPGet specifies the http request to perform.
-                          properties:
-                            host:
-                              description: Host name to connect to, defaults to the
-                                pod IP. You probably want to set "Host" in httpHeaders
-                                instead.
-                              type: string
-                            httpHeaders:
-                              description: Custom headers to set in the request. HTTP
-                                allows repeated headers.
-                              items:
-                                description: HTTPHeader describes a custom header
-                                  to be used in HTTP probes
-                                properties:
-                                  name:
-                                    description: The header field name. This will
-                                      be canonicalized upon output, so case-variant
-                                      names will be understood as the same header.
-                                    type: string
-                                  value:
-                                    description: The header field value
-                                    type: string
-                                required:
-                                - name
-                                - value
-                                type: object
-                              type: array
-                            path:
-                              description: Path to access on the HTTP server.
-                              type: string
-                            port:
-                              anyOf:
-                              - type: integer
-                              - type: string
-                              description: Name or number of the port to access on
-                                the container. Number must be in the range 1 to 65535.
-                                Name must be an IANA_SVC_NAME.
-                              x-kubernetes-int-or-string: true
-                            scheme:
-                              description: Scheme to use for connecting to the host.
-                                Defaults to HTTP.
-                              type: string
-                          required:
-                          - port
-                          type: object
-                        initialDelaySeconds:
-                          description: 'Number of seconds after the container has
-                            started before liveness probes are initiated. More info:
-                            https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes'
-                          format: int32
-                          type: integer
-                        periodSeconds:
-                          description: How often (in seconds) to perform the probe.
-                            Default to 10 seconds. Minimum value is 1.
-                          format: int32
-                          type: integer
-                        successThreshold:
-                          description: Minimum consecutive successes for the probe
-                            to be considered successful after having failed. Defaults
-                            to 1. Must be 1 for liveness and startup. Minimum value
-                            is 1.
-                          format: int32
-                          type: integer
-                        tcpSocket:
-                          description: TCPSocket specifies an action involving a TCP
-                            port.
-                          properties:
-                            host:
-                              description: 'Optional: Host name to connect to, defaults
-                                to the pod IP.'
-                              type: string
-                            port:
-                              anyOf:
-                              - type: integer
-                              - type: string
-                              description: Number or name of the port to access on
-                                the container. Number must be in the range 1 to 65535.
-                                Name must be an IANA_SVC_NAME.
-                              x-kubernetes-int-or-string: true
-                          required:
-                          - port
-                          type: object
-                        terminationGracePeriodSeconds:
-                          description: Optional duration in seconds the pod needs
-                            to terminate gracefully upon probe failure. The grace
-                            period is the duration in seconds after the processes
-                            running in the pod are sent a termination signal and the
-                            time when the processes are forcibly halted with a kill
-                            signal. Set this value longer than the expected cleanup
-                            time for your process. If this value is nil, the pod's
-                            terminationGracePeriodSeconds will be used. Otherwise,
-                            this value overrides the value provided by the pod spec.
-                            Value must be non-negative integer. The value zero indicates
-                            stop immediately via the kill signal (no opportunity to
-                            shut down). This is a beta field and requires enabling
-                            ProbeTerminationGracePeriod feature gate. Minimum value
-                            is 1. spec.terminationGracePeriodSeconds is used if unset.
-                          format: int64
-                          type: integer
-                        timeoutSeconds:
-                          description: 'Number of seconds after which the probe times
-                            out. Defaults to 1 second. Minimum value is 1. More info:
-                            https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes'
-                          format: int32
-                          type: integer
-                      type: object
-                    resizePolicy:
-                      description: Resources resize policy for the container.
-                      items:
-                        description: ContainerResizePolicy represents resource resize
-                          policy for the container.
-                        properties:
-                          resourceName:
-                            description: 'Name of the resource to which this resource
-                              resize policy applies. Supported values: cpu, memory.'
-                            type: string
-                          restartPolicy:
-                            description: Restart policy to apply when specified resource
-                              is resized. If not specified, it defaults to NotRequired.
-                            type: string
-                        required:
-                        - resourceName
-                        - restartPolicy
-                        type: object
-                      type: array
-                      x-kubernetes-list-type: atomic
-                    resources:
-                      description: 'Compute Resources required by this container.
-                        Cannot be updated. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/'
-                      properties:
-                        claims:
-                          description: "Claims lists the names of resources, defined
-                            in spec.resourceClaims, that are used by this container.
-                            \n This is an alpha field and requires enabling the DynamicResourceAllocation
-                            feature gate. \n This field is immutable. It can only
-                            be set for containers."
-                          items:
-                            description: ResourceClaim references one entry in PodSpec.ResourceClaims.
-                            properties:
-                              name:
-                                description: Name must match the name of one entry
-                                  in pod.spec.resourceClaims of the Pod where this
-                                  field is used. It makes that resource available
-                                  inside a container.
-                                type: string
-                            required:
-                            - name
-                            type: object
-                          type: array
-                          x-kubernetes-list-map-keys:
-                          - name
-                          x-kubernetes-list-type: map
-                        limits:
-                          additionalProperties:
-                            anyOf:
-                            - type: integer
-                            - type: string
-                            pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
-                            x-kubernetes-int-or-string: true
-                          description: 'Limits describes the maximum amount of compute
-                            resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/'
-                          type: object
-                        requests:
-                          additionalProperties:
-                            anyOf:
-                            - type: integer
-                            - type: string
-                            pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
-                            x-kubernetes-int-or-string: true
-                          description: 'Requests describes the minimum amount of compute
-                            resources required. If Requests is omitted for a container,
-                            it defaults to Limits if that is explicitly specified,
-                            otherwise to an implementation-defined value. Requests
-                            cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/'
-                          type: object
-                      type: object
-                    restartPolicy:
-                      description: 'RestartPolicy defines the restart behavior of
-                        individual containers in a pod. This field may only be set
-                        for init containers, and the only allowed value is "Always".
-                        For non-init containers or when this field is not specified,
-                        the restart behavior is defined by the Pod''s restart policy
-                        and the container type. Setting the RestartPolicy as "Always"
-                        for the init container will have the following effect: this
-                        init container will be continually restarted on exit until
-                        all regular containers have terminated. Once all regular containers
-                        have completed, all init containers with restartPolicy "Always"
-                        will be shut down. This lifecycle differs from normal init
-                        containers and is often referred to as a "sidecar" container.
-                        Although this init container still starts in the init container
-                        sequence, it does not wait for the container to complete before
-                        proceeding to the next init container. Instead, the next init
-                        container starts immediately after this init container is
-                        started, or after any startupProbe has successfully completed.'
-                      type: string
-                    securityContext:
-                      description: 'SecurityContext defines the security options the
-                        container should be run with. If set, the fields of SecurityContext
-                        override the equivalent fields of PodSecurityContext. More
-                        info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/'
-                      properties:
-                        allowPrivilegeEscalation:
-                          description: 'AllowPrivilegeEscalation controls whether
-                            a process can gain more privileges than its parent process.
-                            This bool directly controls if the no_new_privs flag will
-                            be set on the container process. AllowPrivilegeEscalation
-                            is true always when the container is: 1) run as Privileged
-                            2) has CAP_SYS_ADMIN Note that this field cannot be set
-                            when spec.os.name is windows.'
-                          type: boolean
-                        capabilities:
-                          description: The capabilities to add/drop when running containers.
-                            Defaults to the default set of capabilities granted by
-                            the container runtime. Note that this field cannot be
-                            set when spec.os.name is windows.
-                          properties:
-                            add:
-                              description: Added capabilities
-                              items:
-                                description: Capability represent POSIX capabilities
-                                  type
-                                type: string
-                              type: array
-                            drop:
-                              description: Removed capabilities
-                              items:
-                                description: Capability represent POSIX capabilities
-                                  type
-                                type: string
-                              type: array
-                          type: object
-                        privileged:
-                          description: Run container in privileged mode. Processes
-                            in privileged containers are essentially equivalent to
-                            root on the host. Defaults to false. Note that this field
-                            cannot be set when spec.os.name is windows.
-                          type: boolean
-                        procMount:
-                          description: procMount denotes the type of proc mount to
-                            use for the containers. The default is DefaultProcMount
-                            which uses the container runtime defaults for readonly
-                            paths and masked paths. This requires the ProcMountType
-                            feature flag to be enabled. Note that this field cannot
-                            be set when spec.os.name is windows.
-                          type: string
-                        readOnlyRootFilesystem:
-                          description: Whether this container has a read-only root
-                            filesystem. Default is false. Note that this field cannot
-                            be set when spec.os.name is windows.
-                          type: boolean
-                        runAsGroup:
-                          description: The GID to run the entrypoint of the container
-                            process. Uses runtime default if unset. May also be set
-                            in PodSecurityContext.  If set in both SecurityContext
-                            and PodSecurityContext, the value specified in SecurityContext
-                            takes precedence. Note that this field cannot be set when
-                            spec.os.name is windows.
-                          format: int64
-                          type: integer
-                        runAsNonRoot:
-                          description: Indicates that the container must run as a
-                            non-root user. If true, the Kubelet will validate the
-                            image at runtime to ensure that it does not run as UID
-                            0 (root) and fail to start the container if it does. If
-                            unset or false, no such validation will be performed.
-                            May also be set in PodSecurityContext.  If set in both
-                            SecurityContext and PodSecurityContext, the value specified
-                            in SecurityContext takes precedence.
-                          type: boolean
-                        runAsUser:
-                          description: The UID to run the entrypoint of the container
-                            process. Defaults to user specified in image metadata
-                            if unspecified. May also be set in PodSecurityContext.  If
-                            set in both SecurityContext and PodSecurityContext, the
-                            value specified in SecurityContext takes precedence. Note
-                            that this field cannot be set when spec.os.name is windows.
-                          format: int64
-                          type: integer
-                        seLinuxOptions:
-                          description: The SELinux context to be applied to the container.
-                            If unspecified, the container runtime will allocate a
-                            random SELinux context for each container.  May also be
-                            set in PodSecurityContext.  If set in both SecurityContext
-                            and PodSecurityContext, the value specified in SecurityContext
-                            takes precedence. Note that this field cannot be set when
-                            spec.os.name is windows.
-                          properties:
-                            level:
-                              description: Level is SELinux level label that applies
-                                to the container.
-                              type: string
-                            role:
-                              description: Role is a SELinux role label that applies
-                                to the container.
-                              type: string
-                            type:
-                              description: Type is a SELinux type label that applies
-                                to the container.
-                              type: string
-                            user:
-                              description: User is a SELinux user label that applies
-                                to the container.
-                              type: string
-                          type: object
-                        seccompProfile:
-                          description: The seccomp options to use by this container.
-                            If seccomp options are provided at both the pod & container
-                            level, the container options override the pod options.
-                            Note that this field cannot be set when spec.os.name is
-                            windows.
-                          properties:
-                            localhostProfile:
-                              description: localhostProfile indicates a profile defined
-                                in a file on the node should be used. The profile
-                                must be preconfigured on the node to work. Must be
-                                a descending path, relative to the kubelet's configured
-                                seccomp profile location. Must be set if type is "Localhost".
-                                Must NOT be set for any other type.
-                              type: string
-                            type:
-                              description: "type indicates which kind of seccomp profile
-                                will be applied. Valid options are: \n Localhost -
-                                a profile defined in a file on the node should be
-                                used. RuntimeDefault - the container runtime default
-                                profile should be used. Unconfined - no profile should
-                                be applied."
-                              type: string
-                          required:
-                          - type
-                          type: object
-                        windowsOptions:
-                          description: The Windows specific settings applied to all
-                            containers. If unspecified, the options from the PodSecurityContext
-                            will be used. If set in both SecurityContext and PodSecurityContext,
-                            the value specified in SecurityContext takes precedence.
-                            Note that this field cannot be set when spec.os.name is
-                            linux.
-                          properties:
-                            gmsaCredentialSpec:
-                              description: GMSACredentialSpec is where the GMSA admission
-                                webhook (https://github.com/kubernetes-sigs/windows-gmsa)
-                                inlines the contents of the GMSA credential spec named
-                                by the GMSACredentialSpecName field.
-                              type: string
-                            gmsaCredentialSpecName:
-                              description: GMSACredentialSpecName is the name of the
-                                GMSA credential spec to use.
-                              type: string
-                            hostProcess:
-                              description: HostProcess determines if a container should
-                                be run as a 'Host Process' container. All of a Pod's
-                                containers must have the same effective HostProcess
-                                value (it is not allowed to have a mix of HostProcess
-                                containers and non-HostProcess containers). In addition,
-                                if HostProcess is true then HostNetwork must also
-                                be set to true.
-                              type: boolean
-                            runAsUserName:
-                              description: The UserName in Windows to run the entrypoint
-                                of the container process. Defaults to the user specified
-                                in image metadata if unspecified. May also be set
-                                in PodSecurityContext. If set in both SecurityContext
-                                and PodSecurityContext, the value specified in SecurityContext
-                                takes precedence.
-                              type: string
-                          type: object
-                      type: object
-                    startupProbe:
-                      description: 'StartupProbe indicates that the Pod has successfully
-                        initialized. If specified, no other probes are executed until
-                        this completes successfully. If this probe fails, the Pod
-                        will be restarted, just as if the livenessProbe failed. This
-                        can be used to provide different probe parameters at the beginning
-                        of a Pod''s lifecycle, when it might take a long time to load
-                        data or warm a cache, than during steady-state operation.
-                        This cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes'
-                      properties:
-                        exec:
-                          description: Exec specifies the action to take.
-                          properties:
-                            command:
-                              description: Command is the command line to execute
-                                inside the container, the working directory for the
-                                command  is root ('/') in the container's filesystem.
-                                The command is simply exec'd, it is not run inside
-                                a shell, so traditional shell instructions ('|', etc)
-                                won't work. To use a shell, you need to explicitly
-                                call out to that shell. Exit status of 0 is treated
-                                as live/healthy and non-zero is unhealthy.
-                              items:
-                                type: string
-                              type: array
-                          type: object
-                        failureThreshold:
-                          description: Minimum consecutive failures for the probe
-                            to be considered failed after having succeeded. Defaults
-                            to 3. Minimum value is 1.
-                          format: int32
-                          type: integer
-                        grpc:
-                          description: GRPC specifies an action involving a GRPC port.
-                          properties:
-                            port:
-                              description: Port number of the gRPC service. Number
-                                must be in the range 1 to 65535.
-                              format: int32
-                              type: integer
-                            service:
-                              description: "Service is the name of the service to
-                                place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
-                                \n If this is not specified, the default behavior
-                                is defined by gRPC."
-                              type: string
-                          required:
-                          - port
-                          type: object
-                        httpGet:
-                          description: HTTPGet specifies the http request to perform.
-                          properties:
-                            host:
-                              description: Host name to connect to, defaults to the
-                                pod IP. You probably want to set "Host" in httpHeaders
-                                instead.
-                              type: string
-                            httpHeaders:
-                              description: Custom headers to set in the request. HTTP
-                                allows repeated headers.
-                              items:
-                                description: HTTPHeader describes a custom header
-                                  to be used in HTTP probes
-                                properties:
-                                  name:
-                                    description: The header field name. This will
-                                      be canonicalized upon output, so case-variant
-                                      names will be understood as the same header.
-                                    type: string
-                                  value:
-                                    description: The header field value
-                                    type: string
-                                required:
-                                - name
-                                - value
-                                type: object
-                              type: array
-                            path:
-                              description: Path to access on the HTTP server.
-                              type: string
-                            port:
-                              anyOf:
-                              - type: integer
-                              - type: string
-                              description: Name or number of the port to access on
-                                the container. Number must be in the range 1 to 65535.
-                                Name must be an IANA_SVC_NAME.
-                              x-kubernetes-int-or-string: true
-                            scheme:
-                              description: Scheme to use for connecting to the host.
-                                Defaults to HTTP.
-                              type: string
-                          required:
-                          - port
-                          type: object
-                        initialDelaySeconds:
-                          description: 'Number of seconds after the container has
-                            started before liveness probes are initiated. More info:
-                            https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes'
-                          format: int32
-                          type: integer
-                        periodSeconds:
-                          description: How often (in seconds) to perform the probe.
-                            Default to 10 seconds. Minimum value is 1.
-                          format: int32
-                          type: integer
-                        successThreshold:
-                          description: Minimum consecutive successes for the probe
-                            to be considered successful after having failed. Defaults
-                            to 1. Must be 1 for liveness and startup. Minimum value
-                            is 1.
-                          format: int32
-                          type: integer
-                        tcpSocket:
-                          description: TCPSocket specifies an action involving a TCP
-                            port.
-                          properties:
-                            host:
-                              description: 'Optional: Host name to connect to, defaults
-                                to the pod IP.'
-                              type: string
-                            port:
-                              anyOf:
-                              - type: integer
-                              - type: string
-                              description: Number or name of the port to access on
-                                the container. Number must be in the range 1 to 65535.
-                                Name must be an IANA_SVC_NAME.
-                              x-kubernetes-int-or-string: true
-                          required:
-                          - port
-                          type: object
-                        terminationGracePeriodSeconds:
-                          description: Optional duration in seconds the pod needs
-                            to terminate gracefully upon probe failure. The grace
-                            period is the duration in seconds after the processes
-                            running in the pod are sent a termination signal and the
-                            time when the processes are forcibly halted with a kill
-                            signal. Set this value longer than the expected cleanup
-                            time for your process. If this value is nil, the pod's
-                            terminationGracePeriodSeconds will be used. Otherwise,
-                            this value overrides the value provided by the pod spec.
-                            Value must be non-negative integer. The value zero indicates
-                            stop immediately via the kill signal (no opportunity to
-                            shut down). This is a beta field and requires enabling
-                            ProbeTerminationGracePeriod feature gate. Minimum value
-                            is 1. spec.terminationGracePeriodSeconds is used if unset.
-                          format: int64
-                          type: integer
-                        timeoutSeconds:
-                          description: 'Number of seconds after which the probe times
-                            out. Defaults to 1 second. Minimum value is 1. More info:
-                            https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes'
-                          format: int32
-                          type: integer
-                      type: object
-                    stdin:
-                      description: Whether this container should allocate a buffer
-                        for stdin in the container runtime. If this is not set, reads
-                        from stdin in the container will always result in EOF. Default
-                        is false.
-                      type: boolean
-                    stdinOnce:
-                      description: Whether the container runtime should close the
-                        stdin channel after it has been opened by a single attach.
-                        When stdin is true the stdin stream will remain open across
-                        multiple attach sessions. If stdinOnce is set to true, stdin
-                        is opened on container start, is empty until the first client
-                        attaches to stdin, and then remains open and accepts data
-                        until the client disconnects, at which time stdin is closed
-                        and remains closed until the container is restarted. If this
-                        flag is false, a container processes that reads from stdin
-                        will never receive an EOF. Default is false
-                      type: boolean
-                    terminationMessagePath:
-                      description: 'Optional: Path at which the file to which the
-                        container''s termination message will be written is mounted
-                        into the container''s filesystem. Message written is intended
-                        to be brief final status, such as an assertion failure message.
-                        Will be truncated by the node if greater than 4096 bytes.
-                        The total message length across all containers will be limited
-                        to 12kb. Defaults to /dev/termination-log. Cannot be updated.'
-                      type: string
-                    terminationMessagePolicy:
-                      description: Indicate how the termination message should be
-                        populated. File will use the contents of terminationMessagePath
-                        to populate the container status message on both success and
-                        failure. FallbackToLogsOnError will use the last chunk of
-                        container log output if the termination message file is empty
-                        and the container exited with an error. The log output is
-                        limited to 2048 bytes or 80 lines, whichever is smaller. Defaults
-                        to File. Cannot be updated.
-                      type: string
-                    tty:
-                      description: Whether this container should allocate a TTY for
-                        itself, also requires 'stdin' to be true. Default is false.
-                      type: boolean
-                    volumeDevices:
-                      description: volumeDevices is the list of block devices to be
-                        used by the container.
-                      items:
-                        description: volumeDevice describes a mapping of a raw block
-                          device within a container.
-                        properties:
-                          devicePath:
-                            description: devicePath is the path inside of the container
-                              that the device will be mapped to.
-                            type: string
-                          name:
-                            description: name must match the name of a persistentVolumeClaim
-                              in the pod
-                            type: string
-                        required:
-                        - devicePath
-                        - name
-                        type: object
-                      type: array
-                    volumeMounts:
-                      description: Pod volumes to mount into the container's filesystem.
-                        Cannot be updated.
-                      items:
-                        description: VolumeMount describes a mounting of a Volume
-                          within a container.
-                        properties:
-                          mountPath:
-                            description: Path within the container at which the volume
-                              should be mounted.  Must not contain ':'.
-                            type: string
-                          mountPropagation:
-                            description: mountPropagation determines how mounts are
-                              propagated from the host to container and the other
-                              way around. When not set, MountPropagationNone is used.
-                              This field is beta in 1.10.
-                            type: string
-                          name:
-                            description: This must match the Name of a Volume.
-                            type: string
-                          readOnly:
-                            description: Mounted read-only if true, read-write otherwise
-                              (false or unspecified). Defaults to false.
-                            type: boolean
-                          subPath:
-                            description: Path within the volume from which the container's
-                              volume should be mounted. Defaults to "" (volume's root).
-                            type: string
-                          subPathExpr:
-                            description: Expanded path within the volume from which
-                              the container's volume should be mounted. Behaves similarly
-                              to SubPath but environment variable references $(VAR_NAME)
-                              are expanded using the container's environment. Defaults
-                              to "" (volume's root). SubPathExpr and SubPath are mutually
-                              exclusive.
-                            type: string
-                        required:
-                        - mountPath
-                        - name
-                        type: object
-                      type: array
-                    workingDir:
-                      description: Container's working directory. If not specified,
-                        the container runtime's default will be used, which might
-                        be configured in the container image. Cannot be updated.
-                      type: string
-                  required:
-                  - name
-                  type: object
-                type: array
-              disableReporting:
-                default: false
-                description: disableReporting disables reporting of enabled feature
-                  flags to Grafana.
-                type: boolean
-              disableSupportBundle:
-                default: false
-                description: disableSupportBundle disables the generation of support
-                  bundles.
-                type: boolean
-              enableConfigReadAPI:
-                default: false
-                description: enableConfigReadAPI enables the read API for viewing
-                  the currently running config port 8080 on the agent.
-                type: boolean
-              image:
-                description: Image, when specified, overrides the image used to run
-                  Agent. Specify the image along with a tag. You still need to set
-                  the version to ensure Grafana Agent Operator knows which version
-                  of Grafana Agent is being configured.
-                type: string
-              imagePullSecrets:
-                description: 'ImagePullSecrets holds an optional list of references
-                  to Secrets within the same namespace used for pulling the Grafana
-                  Agent image from registries. More info: https://kubernetes.io/docs/concepts/containers/images/#specifying-imagepullsecrets-on-a-pod'
-                items:
-                  description: LocalObjectReference contains enough information to
-                    let you locate the referenced object inside the same namespace.
-                  properties:
-                    name:
-                      description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                        TODO: Add other useful fields. apiVersion, kind, uid?'
-                      type: string
-                  type: object
-                  x-kubernetes-map-type: atomic
-                type: array
-              initContainers:
-                description: 'InitContainers let you add initContainers to the pod
-                  definition. These can be used to, for example, fetch secrets for
-                  injection into the Grafana Agent configuration from external sources.
-                  Errors during the execution of an initContainer cause the pod to
-                  restart. More info: https://kubernetes.io/docs/concepts/workloads/pods/init-containers/
-                  Using initContainers for any use case other than secret fetching
-                  is entirely outside the scope of what the Grafana Agent maintainers
-                  support and by doing so, you accept that this behavior may break
-                  at any time without notice.'
-                items:
-                  description: A single application container that you want to run
-                    within a pod.
-                  properties:
-                    args:
-                      description: 'Arguments to the entrypoint. The container image''s
-                        CMD is used if this is not provided. Variable references $(VAR_NAME)
-                        are expanded using the container''s environment. If a variable
-                        cannot be resolved, the reference in the input string will
-                        be unchanged. Double $$ are reduced to a single $, which allows
-                        for escaping the $(VAR_NAME) syntax: i.e. "$$(VAR_NAME)" will
-                        produce the string literal "$(VAR_NAME)". Escaped references
-                        will never be expanded, regardless of whether the variable
-                        exists or not. Cannot be updated. More info: https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell'
-                      items:
-                        type: string
-                      type: array
-                    command:
-                      description: 'Entrypoint array. Not executed within a shell.
-                        The container image''s ENTRYPOINT is used if this is not provided.
-                        Variable references $(VAR_NAME) are expanded using the container''s
-                        environment. If a variable cannot be resolved, the reference
-                        in the input string will be unchanged. Double $$ are reduced
-                        to a single $, which allows for escaping the $(VAR_NAME) syntax:
-                        i.e. "$$(VAR_NAME)" will produce the string literal "$(VAR_NAME)".
-                        Escaped references will never be expanded, regardless of whether
-                        the variable exists or not. Cannot be updated. More info:
-                        https://kubernetes.io/docs/tasks/inject-data-application/define-command-argument-container/#running-a-command-in-a-shell'
-                      items:
-                        type: string
-                      type: array
-                    env:
-                      description: List of environment variables to set in the container.
-                        Cannot be updated.
-                      items:
-                        description: EnvVar represents an environment variable present
-                          in a Container.
-                        properties:
-                          name:
-                            description: Name of the environment variable. Must be
-                              a C_IDENTIFIER.
-                            type: string
-                          value:
-                            description: 'Variable references $(VAR_NAME) are expanded
-                              using the previously defined environment variables in
-                              the container and any service environment variables.
-                              If a variable cannot be resolved, the reference in the
-                              input string will be unchanged. Double $$ are reduced
-                              to a single $, which allows for escaping the $(VAR_NAME)
-                              syntax: i.e. "$$(VAR_NAME)" will produce the string
-                              literal "$(VAR_NAME)". Escaped references will never
-                              be expanded, regardless of whether the variable exists
-                              or not. Defaults to "".'
-                            type: string
-                          valueFrom:
-                            description: Source for the environment variable's value.
-                              Cannot be used if value is not empty.
-                            properties:
-                              configMapKeyRef:
-                                description: Selects a key of a ConfigMap.
-                                properties:
-                                  key:
-                                    description: The key to select.
-                                    type: string
-                                  name:
-                                    description: 'Name of the referent. More info:
-                                      https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                      TODO: Add other useful fields. apiVersion, kind,
-                                      uid?'
-                                    type: string
-                                  optional:
-                                    description: Specify whether the ConfigMap or
-                                      its key must be defined
-                                    type: boolean
-                                required:
-                                - key
-                                type: object
-                                x-kubernetes-map-type: atomic
-                              fieldRef:
-                                description: 'Selects a field of the pod: supports
-                                  metadata.name, metadata.namespace, `metadata.labels[''<KEY>'']`,
-                                  `metadata.annotations[''<KEY>'']`, spec.nodeName,
-                                  spec.serviceAccountName, status.hostIP, status.podIP,
-                                  status.podIPs.'
-                                properties:
-                                  apiVersion:
-                                    description: Version of the schema the FieldPath
-                                      is written in terms of, defaults to "v1".
-                                    type: string
-                                  fieldPath:
-                                    description: Path of the field to select in the
-                                      specified API version.
-                                    type: string
-                                required:
-                                - fieldPath
-                                type: object
-                                x-kubernetes-map-type: atomic
-                              resourceFieldRef:
-                                description: 'Selects a resource of the container:
-                                  only resources limits and requests (limits.cpu,
-                                  limits.memory, limits.ephemeral-storage, requests.cpu,
-                                  requests.memory and requests.ephemeral-storage)
-                                  are currently supported.'
-                                properties:
-                                  containerName:
-                                    description: 'Container name: required for volumes,
-                                      optional for env vars'
-                                    type: string
-                                  divisor:
-                                    anyOf:
-                                    - type: integer
-                                    - type: string
-                                    description: Specifies the output format of the
-                                      exposed resources, defaults to "1"
-                                    pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
-                                    x-kubernetes-int-or-string: true
-                                  resource:
-                                    description: 'Required: resource to select'
-                                    type: string
-                                required:
-                                - resource
-                                type: object
-                                x-kubernetes-map-type: atomic
-                              secretKeyRef:
-                                description: Selects a key of a secret in the pod's
-                                  namespace
-                                properties:
-                                  key:
-                                    description: The key of the secret to select from.  Must
-                                      be a valid secret key.
-                                    type: string
-                                  name:
-                                    description: 'Name of the referent. More info:
-                                      https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                      TODO: Add other useful fields. apiVersion, kind,
-                                      uid?'
-                                    type: string
-                                  optional:
-                                    description: Specify whether the Secret or its
-                                      key must be defined
-                                    type: boolean
-                                required:
-                                - key
-                                type: object
-                                x-kubernetes-map-type: atomic
-                            type: object
-                        required:
-                        - name
-                        type: object
-                      type: array
-                    envFrom:
-                      description: List of sources to populate environment variables
-                        in the container. The keys defined within a source must be
-                        a C_IDENTIFIER. All invalid keys will be reported as an event
-                        when the container is starting. When a key exists in multiple
-                        sources, the value associated with the last source will take
-                        precedence. Values defined by an Env with a duplicate key
-                        will take precedence. Cannot be updated.
-                      items:
-                        description: EnvFromSource represents the source of a set
-                          of ConfigMaps
-                        properties:
-                          configMapRef:
-                            description: The ConfigMap to select from
-                            properties:
-                              name:
-                                description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                  TODO: Add other useful fields. apiVersion, kind,
-                                  uid?'
-                                type: string
-                              optional:
-                                description: Specify whether the ConfigMap must be
-                                  defined
-                                type: boolean
-                            type: object
-                            x-kubernetes-map-type: atomic
-                          prefix:
-                            description: An optional identifier to prepend to each
-                              key in the ConfigMap. Must be a C_IDENTIFIER.
-                            type: string
-                          secretRef:
-                            description: The Secret to select from
-                            properties:
-                              name:
-                                description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                  TODO: Add other useful fields. apiVersion, kind,
-                                  uid?'
-                                type: string
-                              optional:
-                                description: Specify whether the Secret must be defined
-                                type: boolean
-                            type: object
-                            x-kubernetes-map-type: atomic
-                        type: object
-                      type: array
-                    image:
-                      description: 'Container image name. More info: https://kubernetes.io/docs/concepts/containers/images
-                        This field is optional to allow higher level config management
-                        to default or override container images in workload controllers
-                        like Deployments and StatefulSets.'
-                      type: string
-                    imagePullPolicy:
-                      description: 'Image pull policy. One of Always, Never, IfNotPresent.
-                        Defaults to Always if :latest tag is specified, or IfNotPresent
-                        otherwise. Cannot be updated. More info: https://kubernetes.io/docs/concepts/containers/images#updating-images'
-                      type: string
-                    lifecycle:
-                      description: Actions that the management system should take
-                        in response to container lifecycle events. Cannot be updated.
-                      properties:
-                        postStart:
-                          description: 'PostStart is called immediately after a container
-                            is created. If the handler fails, the container is terminated
-                            and restarted according to its restart policy. Other management
-                            of the container blocks until the hook completes. More
-                            info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks'
-                          properties:
-                            exec:
-                              description: Exec specifies the action to take.
-                              properties:
-                                command:
-                                  description: Command is the command line to execute
-                                    inside the container, the working directory for
-                                    the command  is root ('/') in the container's
-                                    filesystem. The command is simply exec'd, it is
-                                    not run inside a shell, so traditional shell instructions
-                                    ('|', etc) won't work. To use a shell, you need
-                                    to explicitly call out to that shell. Exit status
-                                    of 0 is treated as live/healthy and non-zero is
-                                    unhealthy.
-                                  items:
-                                    type: string
-                                  type: array
-                              type: object
-                            httpGet:
-                              description: HTTPGet specifies the http request to perform.
-                              properties:
-                                host:
-                                  description: Host name to connect to, defaults to
-                                    the pod IP. You probably want to set "Host" in
-                                    httpHeaders instead.
-                                  type: string
-                                httpHeaders:
-                                  description: Custom headers to set in the request.
-                                    HTTP allows repeated headers.
-                                  items:
-                                    description: HTTPHeader describes a custom header
-                                      to be used in HTTP probes
-                                    properties:
-                                      name:
-                                        description: The header field name. This will
-                                          be canonicalized upon output, so case-variant
-                                          names will be understood as the same header.
-                                        type: string
-                                      value:
-                                        description: The header field value
-                                        type: string
-                                    required:
-                                    - name
-                                    - value
-                                    type: object
-                                  type: array
-                                path:
-                                  description: Path to access on the HTTP server.
-                                  type: string
-                                port:
-                                  anyOf:
-                                  - type: integer
-                                  - type: string
-                                  description: Name or number of the port to access
-                                    on the container. Number must be in the range
-                                    1 to 65535. Name must be an IANA_SVC_NAME.
-                                  x-kubernetes-int-or-string: true
-                                scheme:
-                                  description: Scheme to use for connecting to the
-                                    host. Defaults to HTTP.
-                                  type: string
-                              required:
-                              - port
-                              type: object
-                            tcpSocket:
-                              description: Deprecated. TCPSocket is NOT supported
-                                as a LifecycleHandler and kept for the backward compatibility.
-                                There are no validation of this field and lifecycle
-                                hooks will fail in runtime when tcp handler is specified.
-                              properties:
-                                host:
-                                  description: 'Optional: Host name to connect to,
-                                    defaults to the pod IP.'
-                                  type: string
-                                port:
-                                  anyOf:
-                                  - type: integer
-                                  - type: string
-                                  description: Number or name of the port to access
-                                    on the container. Number must be in the range
-                                    1 to 65535. Name must be an IANA_SVC_NAME.
-                                  x-kubernetes-int-or-string: true
-                              required:
-                              - port
-                              type: object
-                          type: object
-                        preStop:
-                          description: 'PreStop is called immediately before a container
-                            is terminated due to an API request or management event
-                            such as liveness/startup probe failure, preemption, resource
-                            contention, etc. The handler is not called if the container
-                            crashes or exits. The Pod''s termination grace period
-                            countdown begins before the PreStop hook is executed.
-                            Regardless of the outcome of the handler, the container
-                            will eventually terminate within the Pod''s termination
-                            grace period (unless delayed by finalizers). Other management
-                            of the container blocks until the hook completes or until
-                            the termination grace period is reached. More info: https://kubernetes.io/docs/concepts/containers/container-lifecycle-hooks/#container-hooks'
-                          properties:
-                            exec:
-                              description: Exec specifies the action to take.
-                              properties:
-                                command:
-                                  description: Command is the command line to execute
-                                    inside the container, the working directory for
-                                    the command  is root ('/') in the container's
-                                    filesystem. The command is simply exec'd, it is
-                                    not run inside a shell, so traditional shell instructions
-                                    ('|', etc) won't work. To use a shell, you need
-                                    to explicitly call out to that shell. Exit status
-                                    of 0 is treated as live/healthy and non-zero is
-                                    unhealthy.
-                                  items:
-                                    type: string
-                                  type: array
-                              type: object
-                            httpGet:
-                              description: HTTPGet specifies the http request to perform.
-                              properties:
-                                host:
-                                  description: Host name to connect to, defaults to
-                                    the pod IP. You probably want to set "Host" in
-                                    httpHeaders instead.
-                                  type: string
-                                httpHeaders:
-                                  description: Custom headers to set in the request.
-                                    HTTP allows repeated headers.
-                                  items:
-                                    description: HTTPHeader describes a custom header
-                                      to be used in HTTP probes
-                                    properties:
-                                      name:
-                                        description: The header field name. This will
-                                          be canonicalized upon output, so case-variant
-                                          names will be understood as the same header.
-                                        type: string
-                                      value:
-                                        description: The header field value
-                                        type: string
-                                    required:
-                                    - name
-                                    - value
-                                    type: object
-                                  type: array
-                                path:
-                                  description: Path to access on the HTTP server.
-                                  type: string
-                                port:
-                                  anyOf:
-                                  - type: integer
-                                  - type: string
-                                  description: Name or number of the port to access
-                                    on the container. Number must be in the range
-                                    1 to 65535. Name must be an IANA_SVC_NAME.
-                                  x-kubernetes-int-or-string: true
-                                scheme:
-                                  description: Scheme to use for connecting to the
-                                    host. Defaults to HTTP.
-                                  type: string
-                              required:
-                              - port
-                              type: object
-                            tcpSocket:
-                              description: Deprecated. TCPSocket is NOT supported
-                                as a LifecycleHandler and kept for the backward compatibility.
-                                There are no validation of this field and lifecycle
-                                hooks will fail in runtime when tcp handler is specified.
-                              properties:
-                                host:
-                                  description: 'Optional: Host name to connect to,
-                                    defaults to the pod IP.'
-                                  type: string
-                                port:
-                                  anyOf:
-                                  - type: integer
-                                  - type: string
-                                  description: Number or name of the port to access
-                                    on the container. Number must be in the range
-                                    1 to 65535. Name must be an IANA_SVC_NAME.
-                                  x-kubernetes-int-or-string: true
-                              required:
-                              - port
-                              type: object
-                          type: object
-                      type: object
-                    livenessProbe:
-                      description: 'Periodic probe of container liveness. Container
-                        will be restarted if the probe fails. Cannot be updated. More
-                        info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes'
-                      properties:
-                        exec:
-                          description: Exec specifies the action to take.
-                          properties:
-                            command:
-                              description: Command is the command line to execute
-                                inside the container, the working directory for the
-                                command  is root ('/') in the container's filesystem.
-                                The command is simply exec'd, it is not run inside
-                                a shell, so traditional shell instructions ('|', etc)
-                                won't work. To use a shell, you need to explicitly
-                                call out to that shell. Exit status of 0 is treated
-                                as live/healthy and non-zero is unhealthy.
-                              items:
-                                type: string
-                              type: array
-                          type: object
-                        failureThreshold:
-                          description: Minimum consecutive failures for the probe
-                            to be considered failed after having succeeded. Defaults
-                            to 3. Minimum value is 1.
-                          format: int32
-                          type: integer
-                        grpc:
-                          description: GRPC specifies an action involving a GRPC port.
-                          properties:
-                            port:
-                              description: Port number of the gRPC service. Number
-                                must be in the range 1 to 65535.
-                              format: int32
-                              type: integer
-                            service:
-                              description: "Service is the name of the service to
-                                place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
-                                \n If this is not specified, the default behavior
-                                is defined by gRPC."
-                              type: string
-                          required:
-                          - port
-                          type: object
-                        httpGet:
-                          description: HTTPGet specifies the http request to perform.
-                          properties:
-                            host:
-                              description: Host name to connect to, defaults to the
-                                pod IP. You probably want to set "Host" in httpHeaders
-                                instead.
-                              type: string
-                            httpHeaders:
-                              description: Custom headers to set in the request. HTTP
-                                allows repeated headers.
-                              items:
-                                description: HTTPHeader describes a custom header
-                                  to be used in HTTP probes
-                                properties:
-                                  name:
-                                    description: The header field name. This will
-                                      be canonicalized upon output, so case-variant
-                                      names will be understood as the same header.
-                                    type: string
-                                  value:
-                                    description: The header field value
-                                    type: string
-                                required:
-                                - name
-                                - value
-                                type: object
-                              type: array
-                            path:
-                              description: Path to access on the HTTP server.
-                              type: string
-                            port:
-                              anyOf:
-                              - type: integer
-                              - type: string
-                              description: Name or number of the port to access on
-                                the container. Number must be in the range 1 to 65535.
-                                Name must be an IANA_SVC_NAME.
-                              x-kubernetes-int-or-string: true
-                            scheme:
-                              description: Scheme to use for connecting to the host.
-                                Defaults to HTTP.
-                              type: string
-                          required:
-                          - port
-                          type: object
-                        initialDelaySeconds:
-                          description: 'Number of seconds after the container has
-                            started before liveness probes are initiated. More info:
-                            https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes'
-                          format: int32
-                          type: integer
-                        periodSeconds:
-                          description: How often (in seconds) to perform the probe.
-                            Default to 10 seconds. Minimum value is 1.
-                          format: int32
-                          type: integer
-                        successThreshold:
-                          description: Minimum consecutive successes for the probe
-                            to be considered successful after having failed. Defaults
-                            to 1. Must be 1 for liveness and startup. Minimum value
-                            is 1.
-                          format: int32
-                          type: integer
-                        tcpSocket:
-                          description: TCPSocket specifies an action involving a TCP
-                            port.
-                          properties:
-                            host:
-                              description: 'Optional: Host name to connect to, defaults
-                                to the pod IP.'
-                              type: string
-                            port:
-                              anyOf:
-                              - type: integer
-                              - type: string
-                              description: Number or name of the port to access on
-                                the container. Number must be in the range 1 to 65535.
-                                Name must be an IANA_SVC_NAME.
-                              x-kubernetes-int-or-string: true
-                          required:
-                          - port
-                          type: object
-                        terminationGracePeriodSeconds:
-                          description: Optional duration in seconds the pod needs
-                            to terminate gracefully upon probe failure. The grace
-                            period is the duration in seconds after the processes
-                            running in the pod are sent a termination signal and the
-                            time when the processes are forcibly halted with a kill
-                            signal. Set this value longer than the expected cleanup
-                            time for your process. If this value is nil, the pod's
-                            terminationGracePeriodSeconds will be used. Otherwise,
-                            this value overrides the value provided by the pod spec.
-                            Value must be non-negative integer. The value zero indicates
-                            stop immediately via the kill signal (no opportunity to
-                            shut down). This is a beta field and requires enabling
-                            ProbeTerminationGracePeriod feature gate. Minimum value
-                            is 1. spec.terminationGracePeriodSeconds is used if unset.
-                          format: int64
-                          type: integer
-                        timeoutSeconds:
-                          description: 'Number of seconds after which the probe times
-                            out. Defaults to 1 second. Minimum value is 1. More info:
-                            https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes'
-                          format: int32
-                          type: integer
-                      type: object
-                    name:
-                      description: Name of the container specified as a DNS_LABEL.
-                        Each container in a pod must have a unique name (DNS_LABEL).
-                        Cannot be updated.
-                      type: string
-                    ports:
-                      description: List of ports to expose from the container. Not
-                        specifying a port here DOES NOT prevent that port from being
-                        exposed. Any port which is listening on the default "0.0.0.0"
-                        address inside a container will be accessible from the network.
-                        Modifying this array with strategic merge patch may corrupt
-                        the data. For more information See https://github.com/kubernetes/kubernetes/issues/108255.
-                        Cannot be updated.
-                      items:
-                        description: ContainerPort represents a network port in a
-                          single container.
-                        properties:
-                          containerPort:
-                            description: Number of port to expose on the pod's IP
-                              address. This must be a valid port number, 0 < x < 65536.
-                            format: int32
-                            type: integer
-                          hostIP:
-                            description: What host IP to bind the external port to.
-                            type: string
-                          hostPort:
-                            description: Number of port to expose on the host. If
-                              specified, this must be a valid port number, 0 < x <
-                              65536. If HostNetwork is specified, this must match
-                              ContainerPort. Most containers do not need this.
-                            format: int32
-                            type: integer
-                          name:
-                            description: If specified, this must be an IANA_SVC_NAME
-                              and unique within the pod. Each named port in a pod
-                              must have a unique name. Name for the port that can
-                              be referred to by services.
-                            type: string
-                          protocol:
-                            default: TCP
-                            description: Protocol for port. Must be UDP, TCP, or SCTP.
-                              Defaults to "TCP".
-                            type: string
-                        required:
-                        - containerPort
-                        type: object
-                      type: array
-                      x-kubernetes-list-map-keys:
-                      - containerPort
-                      - protocol
-                      x-kubernetes-list-type: map
-                    readinessProbe:
-                      description: 'Periodic probe of container service readiness.
-                        Container will be removed from service endpoints if the probe
-                        fails. Cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes'
-                      properties:
-                        exec:
-                          description: Exec specifies the action to take.
-                          properties:
-                            command:
-                              description: Command is the command line to execute
-                                inside the container, the working directory for the
-                                command  is root ('/') in the container's filesystem.
-                                The command is simply exec'd, it is not run inside
-                                a shell, so traditional shell instructions ('|', etc)
-                                won't work. To use a shell, you need to explicitly
-                                call out to that shell. Exit status of 0 is treated
-                                as live/healthy and non-zero is unhealthy.
-                              items:
-                                type: string
-                              type: array
-                          type: object
-                        failureThreshold:
-                          description: Minimum consecutive failures for the probe
-                            to be considered failed after having succeeded. Defaults
-                            to 3. Minimum value is 1.
-                          format: int32
-                          type: integer
-                        grpc:
-                          description: GRPC specifies an action involving a GRPC port.
-                          properties:
-                            port:
-                              description: Port number of the gRPC service. Number
-                                must be in the range 1 to 65535.
-                              format: int32
-                              type: integer
-                            service:
-                              description: "Service is the name of the service to
-                                place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
-                                \n If this is not specified, the default behavior
-                                is defined by gRPC."
-                              type: string
-                          required:
-                          - port
-                          type: object
-                        httpGet:
-                          description: HTTPGet specifies the http request to perform.
-                          properties:
-                            host:
-                              description: Host name to connect to, defaults to the
-                                pod IP. You probably want to set "Host" in httpHeaders
-                                instead.
-                              type: string
-                            httpHeaders:
-                              description: Custom headers to set in the request. HTTP
-                                allows repeated headers.
-                              items:
-                                description: HTTPHeader describes a custom header
-                                  to be used in HTTP probes
-                                properties:
-                                  name:
-                                    description: The header field name. This will
-                                      be canonicalized upon output, so case-variant
-                                      names will be understood as the same header.
-                                    type: string
-                                  value:
-                                    description: The header field value
-                                    type: string
-                                required:
-                                - name
-                                - value
-                                type: object
-                              type: array
-                            path:
-                              description: Path to access on the HTTP server.
-                              type: string
-                            port:
-                              anyOf:
-                              - type: integer
-                              - type: string
-                              description: Name or number of the port to access on
-                                the container. Number must be in the range 1 to 65535.
-                                Name must be an IANA_SVC_NAME.
-                              x-kubernetes-int-or-string: true
-                            scheme:
-                              description: Scheme to use for connecting to the host.
-                                Defaults to HTTP.
-                              type: string
-                          required:
-                          - port
-                          type: object
-                        initialDelaySeconds:
-                          description: 'Number of seconds after the container has
-                            started before liveness probes are initiated. More info:
-                            https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes'
-                          format: int32
-                          type: integer
-                        periodSeconds:
-                          description: How often (in seconds) to perform the probe.
-                            Default to 10 seconds. Minimum value is 1.
-                          format: int32
-                          type: integer
-                        successThreshold:
-                          description: Minimum consecutive successes for the probe
-                            to be considered successful after having failed. Defaults
-                            to 1. Must be 1 for liveness and startup. Minimum value
-                            is 1.
-                          format: int32
-                          type: integer
-                        tcpSocket:
-                          description: TCPSocket specifies an action involving a TCP
-                            port.
-                          properties:
-                            host:
-                              description: 'Optional: Host name to connect to, defaults
-                                to the pod IP.'
-                              type: string
-                            port:
-                              anyOf:
-                              - type: integer
-                              - type: string
-                              description: Number or name of the port to access on
-                                the container. Number must be in the range 1 to 65535.
-                                Name must be an IANA_SVC_NAME.
-                              x-kubernetes-int-or-string: true
-                          required:
-                          - port
-                          type: object
-                        terminationGracePeriodSeconds:
-                          description: Optional duration in seconds the pod needs
-                            to terminate gracefully upon probe failure. The grace
-                            period is the duration in seconds after the processes
-                            running in the pod are sent a termination signal and the
-                            time when the processes are forcibly halted with a kill
-                            signal. Set this value longer than the expected cleanup
-                            time for your process. If this value is nil, the pod's
-                            terminationGracePeriodSeconds will be used. Otherwise,
-                            this value overrides the value provided by the pod spec.
-                            Value must be non-negative integer. The value zero indicates
-                            stop immediately via the kill signal (no opportunity to
-                            shut down). This is a beta field and requires enabling
-                            ProbeTerminationGracePeriod feature gate. Minimum value
-                            is 1. spec.terminationGracePeriodSeconds is used if unset.
-                          format: int64
-                          type: integer
-                        timeoutSeconds:
-                          description: 'Number of seconds after which the probe times
-                            out. Defaults to 1 second. Minimum value is 1. More info:
-                            https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes'
-                          format: int32
-                          type: integer
-                      type: object
-                    resizePolicy:
-                      description: Resources resize policy for the container.
-                      items:
-                        description: ContainerResizePolicy represents resource resize
-                          policy for the container.
-                        properties:
-                          resourceName:
-                            description: 'Name of the resource to which this resource
-                              resize policy applies. Supported values: cpu, memory.'
-                            type: string
-                          restartPolicy:
-                            description: Restart policy to apply when specified resource
-                              is resized. If not specified, it defaults to NotRequired.
-                            type: string
-                        required:
-                        - resourceName
-                        - restartPolicy
-                        type: object
-                      type: array
-                      x-kubernetes-list-type: atomic
-                    resources:
-                      description: 'Compute Resources required by this container.
-                        Cannot be updated. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/'
-                      properties:
-                        claims:
-                          description: "Claims lists the names of resources, defined
-                            in spec.resourceClaims, that are used by this container.
-                            \n This is an alpha field and requires enabling the DynamicResourceAllocation
-                            feature gate. \n This field is immutable. It can only
-                            be set for containers."
-                          items:
-                            description: ResourceClaim references one entry in PodSpec.ResourceClaims.
-                            properties:
-                              name:
-                                description: Name must match the name of one entry
-                                  in pod.spec.resourceClaims of the Pod where this
-                                  field is used. It makes that resource available
-                                  inside a container.
-                                type: string
-                            required:
-                            - name
-                            type: object
-                          type: array
-                          x-kubernetes-list-map-keys:
-                          - name
-                          x-kubernetes-list-type: map
-                        limits:
-                          additionalProperties:
-                            anyOf:
-                            - type: integer
-                            - type: string
-                            pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
-                            x-kubernetes-int-or-string: true
-                          description: 'Limits describes the maximum amount of compute
-                            resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/'
-                          type: object
-                        requests:
-                          additionalProperties:
-                            anyOf:
-                            - type: integer
-                            - type: string
-                            pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
-                            x-kubernetes-int-or-string: true
-                          description: 'Requests describes the minimum amount of compute
-                            resources required. If Requests is omitted for a container,
-                            it defaults to Limits if that is explicitly specified,
-                            otherwise to an implementation-defined value. Requests
-                            cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/'
-                          type: object
-                      type: object
-                    restartPolicy:
-                      description: 'RestartPolicy defines the restart behavior of
-                        individual containers in a pod. This field may only be set
-                        for init containers, and the only allowed value is "Always".
-                        For non-init containers or when this field is not specified,
-                        the restart behavior is defined by the Pod''s restart policy
-                        and the container type. Setting the RestartPolicy as "Always"
-                        for the init container will have the following effect: this
-                        init container will be continually restarted on exit until
-                        all regular containers have terminated. Once all regular containers
-                        have completed, all init containers with restartPolicy "Always"
-                        will be shut down. This lifecycle differs from normal init
-                        containers and is often referred to as a "sidecar" container.
-                        Although this init container still starts in the init container
-                        sequence, it does not wait for the container to complete before
-                        proceeding to the next init container. Instead, the next init
-                        container starts immediately after this init container is
-                        started, or after any startupProbe has successfully completed.'
-                      type: string
-                    securityContext:
-                      description: 'SecurityContext defines the security options the
-                        container should be run with. If set, the fields of SecurityContext
-                        override the equivalent fields of PodSecurityContext. More
-                        info: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/'
-                      properties:
-                        allowPrivilegeEscalation:
-                          description: 'AllowPrivilegeEscalation controls whether
-                            a process can gain more privileges than its parent process.
-                            This bool directly controls if the no_new_privs flag will
-                            be set on the container process. AllowPrivilegeEscalation
-                            is true always when the container is: 1) run as Privileged
-                            2) has CAP_SYS_ADMIN Note that this field cannot be set
-                            when spec.os.name is windows.'
-                          type: boolean
-                        capabilities:
-                          description: The capabilities to add/drop when running containers.
-                            Defaults to the default set of capabilities granted by
-                            the container runtime. Note that this field cannot be
-                            set when spec.os.name is windows.
-                          properties:
-                            add:
-                              description: Added capabilities
-                              items:
-                                description: Capability represent POSIX capabilities
-                                  type
-                                type: string
-                              type: array
-                            drop:
-                              description: Removed capabilities
-                              items:
-                                description: Capability represent POSIX capabilities
-                                  type
-                                type: string
-                              type: array
-                          type: object
-                        privileged:
-                          description: Run container in privileged mode. Processes
-                            in privileged containers are essentially equivalent to
-                            root on the host. Defaults to false. Note that this field
-                            cannot be set when spec.os.name is windows.
-                          type: boolean
-                        procMount:
-                          description: procMount denotes the type of proc mount to
-                            use for the containers. The default is DefaultProcMount
-                            which uses the container runtime defaults for readonly
-                            paths and masked paths. This requires the ProcMountType
-                            feature flag to be enabled. Note that this field cannot
-                            be set when spec.os.name is windows.
-                          type: string
-                        readOnlyRootFilesystem:
-                          description: Whether this container has a read-only root
-                            filesystem. Default is false. Note that this field cannot
-                            be set when spec.os.name is windows.
-                          type: boolean
-                        runAsGroup:
-                          description: The GID to run the entrypoint of the container
-                            process. Uses runtime default if unset. May also be set
-                            in PodSecurityContext.  If set in both SecurityContext
-                            and PodSecurityContext, the value specified in SecurityContext
-                            takes precedence. Note that this field cannot be set when
-                            spec.os.name is windows.
-                          format: int64
-                          type: integer
-                        runAsNonRoot:
-                          description: Indicates that the container must run as a
-                            non-root user. If true, the Kubelet will validate the
-                            image at runtime to ensure that it does not run as UID
-                            0 (root) and fail to start the container if it does. If
-                            unset or false, no such validation will be performed.
-                            May also be set in PodSecurityContext.  If set in both
-                            SecurityContext and PodSecurityContext, the value specified
-                            in SecurityContext takes precedence.
-                          type: boolean
-                        runAsUser:
-                          description: The UID to run the entrypoint of the container
-                            process. Defaults to user specified in image metadata
-                            if unspecified. May also be set in PodSecurityContext.  If
-                            set in both SecurityContext and PodSecurityContext, the
-                            value specified in SecurityContext takes precedence. Note
-                            that this field cannot be set when spec.os.name is windows.
-                          format: int64
-                          type: integer
-                        seLinuxOptions:
-                          description: The SELinux context to be applied to the container.
-                            If unspecified, the container runtime will allocate a
-                            random SELinux context for each container.  May also be
-                            set in PodSecurityContext.  If set in both SecurityContext
-                            and PodSecurityContext, the value specified in SecurityContext
-                            takes precedence. Note that this field cannot be set when
-                            spec.os.name is windows.
-                          properties:
-                            level:
-                              description: Level is SELinux level label that applies
-                                to the container.
-                              type: string
-                            role:
-                              description: Role is a SELinux role label that applies
-                                to the container.
-                              type: string
-                            type:
-                              description: Type is a SELinux type label that applies
-                                to the container.
-                              type: string
-                            user:
-                              description: User is a SELinux user label that applies
-                                to the container.
-                              type: string
-                          type: object
-                        seccompProfile:
-                          description: The seccomp options to use by this container.
-                            If seccomp options are provided at both the pod & container
-                            level, the container options override the pod options.
-                            Note that this field cannot be set when spec.os.name is
-                            windows.
-                          properties:
-                            localhostProfile:
-                              description: localhostProfile indicates a profile defined
-                                in a file on the node should be used. The profile
-                                must be preconfigured on the node to work. Must be
-                                a descending path, relative to the kubelet's configured
-                                seccomp profile location. Must be set if type is "Localhost".
-                                Must NOT be set for any other type.
-                              type: string
-                            type:
-                              description: "type indicates which kind of seccomp profile
-                                will be applied. Valid options are: \n Localhost -
-                                a profile defined in a file on the node should be
-                                used. RuntimeDefault - the container runtime default
-                                profile should be used. Unconfined - no profile should
-                                be applied."
-                              type: string
-                          required:
-                          - type
-                          type: object
-                        windowsOptions:
-                          description: The Windows specific settings applied to all
-                            containers. If unspecified, the options from the PodSecurityContext
-                            will be used. If set in both SecurityContext and PodSecurityContext,
-                            the value specified in SecurityContext takes precedence.
-                            Note that this field cannot be set when spec.os.name is
-                            linux.
-                          properties:
-                            gmsaCredentialSpec:
-                              description: GMSACredentialSpec is where the GMSA admission
-                                webhook (https://github.com/kubernetes-sigs/windows-gmsa)
-                                inlines the contents of the GMSA credential spec named
-                                by the GMSACredentialSpecName field.
-                              type: string
-                            gmsaCredentialSpecName:
-                              description: GMSACredentialSpecName is the name of the
-                                GMSA credential spec to use.
-                              type: string
-                            hostProcess:
-                              description: HostProcess determines if a container should
-                                be run as a 'Host Process' container. All of a Pod's
-                                containers must have the same effective HostProcess
-                                value (it is not allowed to have a mix of HostProcess
-                                containers and non-HostProcess containers). In addition,
-                                if HostProcess is true then HostNetwork must also
-                                be set to true.
-                              type: boolean
-                            runAsUserName:
-                              description: The UserName in Windows to run the entrypoint
-                                of the container process. Defaults to the user specified
-                                in image metadata if unspecified. May also be set
-                                in PodSecurityContext. If set in both SecurityContext
-                                and PodSecurityContext, the value specified in SecurityContext
-                                takes precedence.
-                              type: string
-                          type: object
-                      type: object
-                    startupProbe:
-                      description: 'StartupProbe indicates that the Pod has successfully
-                        initialized. If specified, no other probes are executed until
-                        this completes successfully. If this probe fails, the Pod
-                        will be restarted, just as if the livenessProbe failed. This
-                        can be used to provide different probe parameters at the beginning
-                        of a Pod''s lifecycle, when it might take a long time to load
-                        data or warm a cache, than during steady-state operation.
-                        This cannot be updated. More info: https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes'
-                      properties:
-                        exec:
-                          description: Exec specifies the action to take.
-                          properties:
-                            command:
-                              description: Command is the command line to execute
-                                inside the container, the working directory for the
-                                command  is root ('/') in the container's filesystem.
-                                The command is simply exec'd, it is not run inside
-                                a shell, so traditional shell instructions ('|', etc)
-                                won't work. To use a shell, you need to explicitly
-                                call out to that shell. Exit status of 0 is treated
-                                as live/healthy and non-zero is unhealthy.
-                              items:
-                                type: string
-                              type: array
-                          type: object
-                        failureThreshold:
-                          description: Minimum consecutive failures for the probe
-                            to be considered failed after having succeeded. Defaults
-                            to 3. Minimum value is 1.
-                          format: int32
-                          type: integer
-                        grpc:
-                          description: GRPC specifies an action involving a GRPC port.
-                          properties:
-                            port:
-                              description: Port number of the gRPC service. Number
-                                must be in the range 1 to 65535.
-                              format: int32
-                              type: integer
-                            service:
-                              description: "Service is the name of the service to
-                                place in the gRPC HealthCheckRequest (see https://github.com/grpc/grpc/blob/master/doc/health-checking.md).
-                                \n If this is not specified, the default behavior
-                                is defined by gRPC."
-                              type: string
-                          required:
-                          - port
-                          type: object
-                        httpGet:
-                          description: HTTPGet specifies the http request to perform.
-                          properties:
-                            host:
-                              description: Host name to connect to, defaults to the
-                                pod IP. You probably want to set "Host" in httpHeaders
-                                instead.
-                              type: string
-                            httpHeaders:
-                              description: Custom headers to set in the request. HTTP
-                                allows repeated headers.
-                              items:
-                                description: HTTPHeader describes a custom header
-                                  to be used in HTTP probes
-                                properties:
-                                  name:
-                                    description: The header field name. This will
-                                      be canonicalized upon output, so case-variant
-                                      names will be understood as the same header.
-                                    type: string
-                                  value:
-                                    description: The header field value
-                                    type: string
-                                required:
-                                - name
-                                - value
-                                type: object
-                              type: array
-                            path:
-                              description: Path to access on the HTTP server.
-                              type: string
-                            port:
-                              anyOf:
-                              - type: integer
-                              - type: string
-                              description: Name or number of the port to access on
-                                the container. Number must be in the range 1 to 65535.
-                                Name must be an IANA_SVC_NAME.
-                              x-kubernetes-int-or-string: true
-                            scheme:
-                              description: Scheme to use for connecting to the host.
-                                Defaults to HTTP.
-                              type: string
-                          required:
-                          - port
-                          type: object
-                        initialDelaySeconds:
-                          description: 'Number of seconds after the container has
-                            started before liveness probes are initiated. More info:
-                            https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes'
-                          format: int32
-                          type: integer
-                        periodSeconds:
-                          description: How often (in seconds) to perform the probe.
-                            Default to 10 seconds. Minimum value is 1.
-                          format: int32
-                          type: integer
-                        successThreshold:
-                          description: Minimum consecutive successes for the probe
-                            to be considered successful after having failed. Defaults
-                            to 1. Must be 1 for liveness and startup. Minimum value
-                            is 1.
-                          format: int32
-                          type: integer
-                        tcpSocket:
-                          description: TCPSocket specifies an action involving a TCP
-                            port.
-                          properties:
-                            host:
-                              description: 'Optional: Host name to connect to, defaults
-                                to the pod IP.'
-                              type: string
-                            port:
-                              anyOf:
-                              - type: integer
-                              - type: string
-                              description: Number or name of the port to access on
-                                the container. Number must be in the range 1 to 65535.
-                                Name must be an IANA_SVC_NAME.
-                              x-kubernetes-int-or-string: true
-                          required:
-                          - port
-                          type: object
-                        terminationGracePeriodSeconds:
-                          description: Optional duration in seconds the pod needs
-                            to terminate gracefully upon probe failure. The grace
-                            period is the duration in seconds after the processes
-                            running in the pod are sent a termination signal and the
-                            time when the processes are forcibly halted with a kill
-                            signal. Set this value longer than the expected cleanup
-                            time for your process. If this value is nil, the pod's
-                            terminationGracePeriodSeconds will be used. Otherwise,
-                            this value overrides the value provided by the pod spec.
-                            Value must be non-negative integer. The value zero indicates
-                            stop immediately via the kill signal (no opportunity to
-                            shut down). This is a beta field and requires enabling
-                            ProbeTerminationGracePeriod feature gate. Minimum value
-                            is 1. spec.terminationGracePeriodSeconds is used if unset.
-                          format: int64
-                          type: integer
-                        timeoutSeconds:
-                          description: 'Number of seconds after which the probe times
-                            out. Defaults to 1 second. Minimum value is 1. More info:
-                            https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes'
-                          format: int32
-                          type: integer
-                      type: object
-                    stdin:
-                      description: Whether this container should allocate a buffer
-                        for stdin in the container runtime. If this is not set, reads
-                        from stdin in the container will always result in EOF. Default
-                        is false.
-                      type: boolean
-                    stdinOnce:
-                      description: Whether the container runtime should close the
-                        stdin channel after it has been opened by a single attach.
-                        When stdin is true the stdin stream will remain open across
-                        multiple attach sessions. If stdinOnce is set to true, stdin
-                        is opened on container start, is empty until the first client
-                        attaches to stdin, and then remains open and accepts data
-                        until the client disconnects, at which time stdin is closed
-                        and remains closed until the container is restarted. If this
-                        flag is false, a container processes that reads from stdin
-                        will never receive an EOF. Default is false
-                      type: boolean
-                    terminationMessagePath:
-                      description: 'Optional: Path at which the file to which the
-                        container''s termination message will be written is mounted
-                        into the container''s filesystem. Message written is intended
-                        to be brief final status, such as an assertion failure message.
-                        Will be truncated by the node if greater than 4096 bytes.
-                        The total message length across all containers will be limited
-                        to 12kb. Defaults to /dev/termination-log. Cannot be updated.'
-                      type: string
-                    terminationMessagePolicy:
-                      description: Indicate how the termination message should be
-                        populated. File will use the contents of terminationMessagePath
-                        to populate the container status message on both success and
-                        failure. FallbackToLogsOnError will use the last chunk of
-                        container log output if the termination message file is empty
-                        and the container exited with an error. The log output is
-                        limited to 2048 bytes or 80 lines, whichever is smaller. Defaults
-                        to File. Cannot be updated.
-                      type: string
-                    tty:
-                      description: Whether this container should allocate a TTY for
-                        itself, also requires 'stdin' to be true. Default is false.
-                      type: boolean
-                    volumeDevices:
-                      description: volumeDevices is the list of block devices to be
-                        used by the container.
-                      items:
-                        description: volumeDevice describes a mapping of a raw block
-                          device within a container.
-                        properties:
-                          devicePath:
-                            description: devicePath is the path inside of the container
-                              that the device will be mapped to.
-                            type: string
-                          name:
-                            description: name must match the name of a persistentVolumeClaim
-                              in the pod
-                            type: string
-                        required:
-                        - devicePath
-                        - name
-                        type: object
-                      type: array
-                    volumeMounts:
-                      description: Pod volumes to mount into the container's filesystem.
-                        Cannot be updated.
-                      items:
-                        description: VolumeMount describes a mounting of a Volume
-                          within a container.
-                        properties:
-                          mountPath:
-                            description: Path within the container at which the volume
-                              should be mounted.  Must not contain ':'.
-                            type: string
-                          mountPropagation:
-                            description: mountPropagation determines how mounts are
-                              propagated from the host to container and the other
-                              way around. When not set, MountPropagationNone is used.
-                              This field is beta in 1.10.
-                            type: string
-                          name:
-                            description: This must match the Name of a Volume.
-                            type: string
-                          readOnly:
-                            description: Mounted read-only if true, read-write otherwise
-                              (false or unspecified). Defaults to false.
-                            type: boolean
-                          subPath:
-                            description: Path within the volume from which the container's
-                              volume should be mounted. Defaults to "" (volume's root).
-                            type: string
-                          subPathExpr:
-                            description: Expanded path within the volume from which
-                              the container's volume should be mounted. Behaves similarly
-                              to SubPath but environment variable references $(VAR_NAME)
-                              are expanded using the container's environment. Defaults
-                              to "" (volume's root). SubPathExpr and SubPath are mutually
-                              exclusive.
-                            type: string
-                        required:
-                        - mountPath
-                        - name
-                        type: object
-                      type: array
-                    workingDir:
-                      description: Container's working directory. If not specified,
-                        the container runtime's default will be used, which might
-                        be configured in the container image. Cannot be updated.
-                      type: string
-                  required:
-                  - name
-                  type: object
-                type: array
-              integrations:
-                description: Integrations controls the integration subsystem of the
-                  Agent and settings unique to deployed integration-specific pods.
-                properties:
-                  namespaceSelector:
-                    description: "Label selector for namespaces to search when discovering
-                      integration resources. If nil, integration resources are only
-                      discovered in the namespace of the GrafanaAgent resource. \n
-                      Set to `{}` to search all namespaces."
-                    properties:
-                      matchExpressions:
-                        description: matchExpressions is a list of label selector
-                          requirements. The requirements are ANDed.
-                        items:
-                          description: A label selector requirement is a selector
-                            that contains values, a key, and an operator that relates
-                            the key and values.
-                          properties:
-                            key:
-                              description: key is the label key that the selector
-                                applies to.
-                              type: string
-                            operator:
-                              description: operator represents a key's relationship
-                                to a set of values. Valid operators are In, NotIn,
-                                Exists and DoesNotExist.
-                              type: string
-                            values:
-                              description: values is an array of string values. If
-                                the operator is In or NotIn, the values array must
-                                be non-empty. If the operator is Exists or DoesNotExist,
-                                the values array must be empty. This array is replaced
-                                during a strategic merge patch.
-                              items:
-                                type: string
-                              type: array
-                          required:
-                          - key
-                          - operator
-                          type: object
-                        type: array
-                      matchLabels:
-                        additionalProperties:
-                          type: string
-                        description: matchLabels is a map of {key,value} pairs. A
-                          single {key,value} in the matchLabels map is equivalent
-                          to an element of matchExpressions, whose key field is "key",
-                          the operator is "In", and the values array contains only
-                          "value". The requirements are ANDed.
-                        type: object
-                    type: object
-                    x-kubernetes-map-type: atomic
-                  selector:
-                    description: Label selector to find Integration resources to run.
-                      When nil, no integration resources will be defined.
-                    properties:
-                      matchExpressions:
-                        description: matchExpressions is a list of label selector
-                          requirements. The requirements are ANDed.
-                        items:
-                          description: A label selector requirement is a selector
-                            that contains values, a key, and an operator that relates
-                            the key and values.
-                          properties:
-                            key:
-                              description: key is the label key that the selector
-                                applies to.
-                              type: string
-                            operator:
-                              description: operator represents a key's relationship
-                                to a set of values. Valid operators are In, NotIn,
-                                Exists and DoesNotExist.
-                              type: string
-                            values:
-                              description: values is an array of string values. If
-                                the operator is In or NotIn, the values array must
-                                be non-empty. If the operator is Exists or DoesNotExist,
-                                the values array must be empty. This array is replaced
-                                during a strategic merge patch.
-                              items:
-                                type: string
-                              type: array
-                          required:
-                          - key
-                          - operator
-                          type: object
-                        type: array
-                      matchLabels:
-                        additionalProperties:
-                          type: string
-                        description: matchLabels is a map of {key,value} pairs. A
-                          single {key,value} in the matchLabels map is equivalent
-                          to an element of matchExpressions, whose key field is "key",
-                          the operator is "In", and the values array contains only
-                          "value". The requirements are ANDed.
-                        type: object
-                    type: object
-                    x-kubernetes-map-type: atomic
-                type: object
-              logFormat:
-                description: LogFormat controls the logging format of the generated
-                  pods. Defaults to "logfmt" if not set.
-                type: string
-              logLevel:
-                description: LogLevel controls the log level of the generated pods.
-                  Defaults to "info" if not set.
-                type: string
-              logs:
-                description: Logs controls the logging subsystem of the Agent and
-                  settings unique to logging-specific pods that are deployed.
-                properties:
-                  clients:
-                    description: A global set of clients to use when a discovered
-                      LogsInstance does not have any clients defined.
-                    items:
-                      description: LogsClientSpec defines the client integration for
-                        logs, indicating which Loki server to send logs to.
-                      properties:
-                        backoffConfig:
-                          description: Configures how to retry requests to Loki when
-                            a request fails. Defaults to a minPeriod of 500ms, maxPeriod
-                            of 5m, and maxRetries of 10.
-                          properties:
-                            maxPeriod:
-                              description: Maximum backoff time between retries.
-                              type: string
-                            maxRetries:
-                              description: Maximum number of retries to perform before
-                                giving up a request.
-                              type: integer
-                            minPeriod:
-                              description: Initial backoff time between retries. Time
-                                between retries is increased exponentially.
-                              type: string
-                          type: object
-                        basicAuth:
-                          description: BasicAuth for the Loki server.
-                          properties:
-                            password:
-                              description: The secret in the service monitor namespace
-                                that contains the password for authentication.
-                              properties:
-                                key:
-                                  description: The key of the secret to select from.  Must
-                                    be a valid secret key.
-                                  type: string
-                                name:
-                                  description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                    TODO: Add other useful fields. apiVersion, kind,
-                                    uid?'
-                                  type: string
-                                optional:
-                                  description: Specify whether the Secret or its key
-                                    must be defined
-                                  type: boolean
-                              required:
-                              - key
-                              type: object
-                              x-kubernetes-map-type: atomic
-                            username:
-                              description: The secret in the service monitor namespace
-                                that contains the username for authentication.
-                              properties:
-                                key:
-                                  description: The key of the secret to select from.  Must
-                                    be a valid secret key.
-                                  type: string
-                                name:
-                                  description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                    TODO: Add other useful fields. apiVersion, kind,
-                                    uid?'
-                                  type: string
-                                optional:
-                                  description: Specify whether the Secret or its key
-                                    must be defined
-                                  type: boolean
-                              required:
-                              - key
-                              type: object
-                              x-kubernetes-map-type: atomic
-                          type: object
-                        batchSize:
-                          description: Maximum batch size (in bytes) of logs to accumulate
-                            before sending the batch to Loki.
-                          type: integer
-                        batchWait:
-                          description: Maximum amount of time to wait before sending
-                            a batch, even if that batch isn't full.
-                          type: string
-                        bearerToken:
-                          description: BearerToken used for remote_write.
-                          type: string
-                        bearerTokenFile:
-                          description: BearerTokenFile used to read bearer token.
-                          type: string
-                        externalLabels:
-                          additionalProperties:
-                            type: string
-                          description: ExternalLabels are labels to add to any time
-                            series when sending data to Loki.
-                          type: object
-                        oauth2:
-                          description: Oauth2 for URL
-                          properties:
-                            clientId:
-                              description: The secret or configmap containing the
-                                OAuth2 client id
-                              properties:
-                                configMap:
-                                  description: ConfigMap containing data to use for
-                                    the targets.
-                                  properties:
-                                    key:
-                                      description: The key to select.
-                                      type: string
-                                    name:
-                                      description: 'Name of the referent. More info:
-                                        https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                        TODO: Add other useful fields. apiVersion,
-                                        kind, uid?'
-                                      type: string
-                                    optional:
-                                      description: Specify whether the ConfigMap or
-                                        its key must be defined
-                                      type: boolean
-                                  required:
-                                  - key
-                                  type: object
-                                  x-kubernetes-map-type: atomic
-                                secret:
-                                  description: Secret containing data to use for the
-                                    targets.
-                                  properties:
-                                    key:
-                                      description: The key of the secret to select
-                                        from.  Must be a valid secret key.
-                                      type: string
-                                    name:
-                                      description: 'Name of the referent. More info:
-                                        https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                        TODO: Add other useful fields. apiVersion,
-                                        kind, uid?'
-                                      type: string
-                                    optional:
-                                      description: Specify whether the Secret or its
-                                        key must be defined
-                                      type: boolean
-                                  required:
-                                  - key
-                                  type: object
-                                  x-kubernetes-map-type: atomic
-                              type: object
-                            clientSecret:
-                              description: The secret containing the OAuth2 client
-                                secret
-                              properties:
-                                key:
-                                  description: The key of the secret to select from.  Must
-                                    be a valid secret key.
-                                  type: string
-                                name:
-                                  description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                    TODO: Add other useful fields. apiVersion, kind,
-                                    uid?'
-                                  type: string
-                                optional:
-                                  description: Specify whether the Secret or its key
-                                    must be defined
-                                  type: boolean
-                              required:
-                              - key
-                              type: object
-                              x-kubernetes-map-type: atomic
-                            endpointParams:
-                              additionalProperties:
-                                type: string
-                              description: Parameters to append to the token URL
-                              type: object
-                            scopes:
-                              description: OAuth2 scopes used for the token request
-                              items:
-                                type: string
-                              type: array
-                            tokenUrl:
-                              description: The URL to fetch the token from
-                              minLength: 1
-                              type: string
-                          required:
-                          - clientId
-                          - clientSecret
-                          - tokenUrl
-                          type: object
-                        proxyUrl:
-                          description: ProxyURL to proxy requests through. Optional.
-                          type: string
-                        tenantId:
-                          description: Tenant ID used by default to push logs to Loki.
-                            If omitted assumes remote Loki is running in single-tenant
-                            mode or an authentication layer is used to inject an X-Scope-OrgID
-                            header.
-                          type: string
-                        timeout:
-                          description: Maximum time to wait for a server to respond
-                            to a request.
-                          type: string
-                        tlsConfig:
-                          description: TLSConfig to use for the client. Only used
-                            when the protocol of the URL is https.
-                          properties:
-                            ca:
-                              description: Certificate authority used when verifying
-                                server certificates.
-                              properties:
-                                configMap:
-                                  description: ConfigMap containing data to use for
-                                    the targets.
-                                  properties:
-                                    key:
-                                      description: The key to select.
-                                      type: string
-                                    name:
-                                      description: 'Name of the referent. More info:
-                                        https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                        TODO: Add other useful fields. apiVersion,
-                                        kind, uid?'
-                                      type: string
-                                    optional:
-                                      description: Specify whether the ConfigMap or
-                                        its key must be defined
-                                      type: boolean
-                                  required:
-                                  - key
-                                  type: object
-                                  x-kubernetes-map-type: atomic
-                                secret:
-                                  description: Secret containing data to use for the
-                                    targets.
-                                  properties:
-                                    key:
-                                      description: The key of the secret to select
-                                        from.  Must be a valid secret key.
-                                      type: string
-                                    name:
-                                      description: 'Name of the referent. More info:
-                                        https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                        TODO: Add other useful fields. apiVersion,
-                                        kind, uid?'
-                                      type: string
-                                    optional:
-                                      description: Specify whether the Secret or its
-                                        key must be defined
-                                      type: boolean
-                                  required:
-                                  - key
-                                  type: object
-                                  x-kubernetes-map-type: atomic
-                              type: object
-                            caFile:
-                              description: Path to the CA cert in the Prometheus container
-                                to use for the targets.
-                              type: string
-                            cert:
-                              description: Client certificate to present when doing
-                                client-authentication.
-                              properties:
-                                configMap:
-                                  description: ConfigMap containing data to use for
-                                    the targets.
-                                  properties:
-                                    key:
-                                      description: The key to select.
-                                      type: string
-                                    name:
-                                      description: 'Name of the referent. More info:
-                                        https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                        TODO: Add other useful fields. apiVersion,
-                                        kind, uid?'
-                                      type: string
-                                    optional:
-                                      description: Specify whether the ConfigMap or
-                                        its key must be defined
-                                      type: boolean
-                                  required:
-                                  - key
-                                  type: object
-                                  x-kubernetes-map-type: atomic
-                                secret:
-                                  description: Secret containing data to use for the
-                                    targets.
-                                  properties:
-                                    key:
-                                      description: The key of the secret to select
-                                        from.  Must be a valid secret key.
-                                      type: string
-                                    name:
-                                      description: 'Name of the referent. More info:
-                                        https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                        TODO: Add other useful fields. apiVersion,
-                                        kind, uid?'
-                                      type: string
-                                    optional:
-                                      description: Specify whether the Secret or its
-                                        key must be defined
-                                      type: boolean
-                                  required:
-                                  - key
-                                  type: object
-                                  x-kubernetes-map-type: atomic
-                              type: object
-                            certFile:
-                              description: Path to the client cert file in the Prometheus
-                                container for the targets.
-                              type: string
-                            insecureSkipVerify:
-                              description: Disable target certificate validation.
-                              type: boolean
-                            keyFile:
-                              description: Path to the client key file in the Prometheus
-                                container for the targets.
-                              type: string
-                            keySecret:
-                              description: Secret containing the client key file for
-                                the targets.
-                              properties:
-                                key:
-                                  description: The key of the secret to select from.  Must
-                                    be a valid secret key.
-                                  type: string
-                                name:
-                                  description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                    TODO: Add other useful fields. apiVersion, kind,
-                                    uid?'
-                                  type: string
-                                optional:
-                                  description: Specify whether the Secret or its key
-                                    must be defined
-                                  type: boolean
-                              required:
-                              - key
-                              type: object
-                              x-kubernetes-map-type: atomic
-                            serverName:
-                              description: Used to verify the hostname for the targets.
-                              type: string
-                          type: object
-                        url:
-                          description: 'URL is the URL where Loki is listening. Must
-                            be a full HTTP URL, including protocol. Required. Example:
-                            https://logs-prod-us-central1.grafana.net/loki/api/v1/push.'
-                          type: string
-                      required:
-                      - url
-                      type: object
-                    type: array
-                  enforcedNamespaceLabel:
-                    description: EnforcedNamespaceLabel enforces adding a namespace
-                      label of origin for each metric that is user-created. The label
-                      value will always be the namespace of the object that is being
-                      created.
-                    type: string
-                  ignoreNamespaceSelectors:
-                    description: IgnoreNamespaceSelectors, if true, will ignore NamespaceSelector
-                      settings from the PodLogs configs, and they will only discover
-                      endpoints within their current namespace.
-                    type: boolean
-                  instanceNamespaceSelector:
-                    description: InstanceNamespaceSelector are the set of labels to
-                      determine which namespaces to watch for LogInstances. If not
-                      provided, only checks own namespace.
-                    properties:
-                      matchExpressions:
-                        description: matchExpressions is a list of label selector
-                          requirements. The requirements are ANDed.
-                        items:
-                          description: A label selector requirement is a selector
-                            that contains values, a key, and an operator that relates
-                            the key and values.
-                          properties:
-                            key:
-                              description: key is the label key that the selector
-                                applies to.
-                              type: string
-                            operator:
-                              description: operator represents a key's relationship
-                                to a set of values. Valid operators are In, NotIn,
-                                Exists and DoesNotExist.
-                              type: string
-                            values:
-                              description: values is an array of string values. If
-                                the operator is In or NotIn, the values array must
-                                be non-empty. If the operator is Exists or DoesNotExist,
-                                the values array must be empty. This array is replaced
-                                during a strategic merge patch.
-                              items:
-                                type: string
-                              type: array
-                          required:
-                          - key
-                          - operator
-                          type: object
-                        type: array
-                      matchLabels:
-                        additionalProperties:
-                          type: string
-                        description: matchLabels is a map of {key,value} pairs. A
-                          single {key,value} in the matchLabels map is equivalent
-                          to an element of matchExpressions, whose key field is "key",
-                          the operator is "In", and the values array contains only
-                          "value". The requirements are ANDed.
-                        type: object
-                    type: object
-                    x-kubernetes-map-type: atomic
-                  instanceSelector:
-                    description: InstanceSelector determines which LogInstances should
-                      be selected for running. Each instance runs its own set of Prometheus
-                      components, including service discovery, scraping, and remote_write.
-                    properties:
-                      matchExpressions:
-                        description: matchExpressions is a list of label selector
-                          requirements. The requirements are ANDed.
-                        items:
-                          description: A label selector requirement is a selector
-                            that contains values, a key, and an operator that relates
-                            the key and values.
-                          properties:
-                            key:
-                              description: key is the label key that the selector
-                                applies to.
-                              type: string
-                            operator:
-                              description: operator represents a key's relationship
-                                to a set of values. Valid operators are In, NotIn,
-                                Exists and DoesNotExist.
-                              type: string
-                            values:
-                              description: values is an array of string values. If
-                                the operator is In or NotIn, the values array must
-                                be non-empty. If the operator is Exists or DoesNotExist,
-                                the values array must be empty. This array is replaced
-                                during a strategic merge patch.
-                              items:
-                                type: string
-                              type: array
-                          required:
-                          - key
-                          - operator
-                          type: object
-                        type: array
-                      matchLabels:
-                        additionalProperties:
-                          type: string
-                        description: matchLabels is a map of {key,value} pairs. A
-                          single {key,value} in the matchLabels map is equivalent
-                          to an element of matchExpressions, whose key field is "key",
-                          the operator is "In", and the values array contains only
-                          "value". The requirements are ANDed.
-                        type: object
-                    type: object
-                    x-kubernetes-map-type: atomic
-                  logsExternalLabelName:
-                    description: LogsExternalLabelName is the name of the external
-                      label used to denote Grafana Agent cluster. Defaults to "cluster."
-                      External label will _not_ be added when value is set to the
-                      empty string.
-                    type: string
-                type: object
-              metrics:
-                description: Metrics controls the metrics subsystem of the Agent and
-                  settings unique to metrics-specific pods that are deployed.
-                properties:
-                  arbitraryFSAccessThroughSMs:
-                    description: ArbitraryFSAccessThroughSMs configures whether configuration
-                      based on a ServiceMonitor can access arbitrary files on the
-                      file system of the Grafana Agent container, e.g., bearer token
-                      files.
-                    properties:
-                      deny:
-                        type: boolean
-                    type: object
-                  enforcedNamespaceLabel:
-                    description: EnforcedNamespaceLabel enforces adding a namespace
-                      label of origin for each metric that is user-created. The label
-                      value is always the namespace of the object that is being created.
-                    type: string
-                  enforcedSampleLimit:
-                    description: EnforcedSampleLimit defines a global limit on the
-                      number of scraped samples that are accepted. This overrides
-                      any SampleLimit set per ServiceMonitor and/or PodMonitor. It
-                      is meant to be used by admins to enforce the SampleLimit to
-                      keep the overall number of samples and series under the desired
-                      limit. Note that if a SampleLimit from a ServiceMonitor or PodMonitor
-                      is lower, that value is used instead.
-                    format: int64
-                    type: integer
-                  enforcedTargetLimit:
-                    description: EnforcedTargetLimit defines a global limit on the
-                      number of scraped targets. This overrides any TargetLimit set
-                      per ServiceMonitor and/or PodMonitor. It is meant to be used
-                      by admins to enforce the TargetLimit to keep the overall number
-                      of targets under the desired limit. Note that if a TargetLimit
-                      from a ServiceMonitor or PodMonitor is higher, that value is
-                      used instead.
-                    format: int64
-                    type: integer
-                  externalLabels:
-                    additionalProperties:
-                      type: string
-                    description: ExternalLabels are labels to add to any time series
-                      when sending data over remote_write.
-                    type: object
-                  ignoreNamespaceSelectors:
-                    description: IgnoreNamespaceSelectors, if true, ignores NamespaceSelector
-                      settings from the PodMonitor and ServiceMonitor configs, so
-                      that they only discover endpoints within their current namespace.
-                    type: boolean
-                  instanceNamespaceSelector:
-                    description: InstanceNamespaceSelector is the set of labels that
-                      determines which namespaces to watch for MetricsInstances. If
-                      not provided, it only checks its own namespace.
-                    properties:
-                      matchExpressions:
-                        description: matchExpressions is a list of label selector
-                          requirements. The requirements are ANDed.
-                        items:
-                          description: A label selector requirement is a selector
-                            that contains values, a key, and an operator that relates
-                            the key and values.
-                          properties:
-                            key:
-                              description: key is the label key that the selector
-                                applies to.
-                              type: string
-                            operator:
-                              description: operator represents a key's relationship
-                                to a set of values. Valid operators are In, NotIn,
-                                Exists and DoesNotExist.
-                              type: string
-                            values:
-                              description: values is an array of string values. If
-                                the operator is In or NotIn, the values array must
-                                be non-empty. If the operator is Exists or DoesNotExist,
-                                the values array must be empty. This array is replaced
-                                during a strategic merge patch.
-                              items:
-                                type: string
-                              type: array
-                          required:
-                          - key
-                          - operator
-                          type: object
-                        type: array
-                      matchLabels:
-                        additionalProperties:
-                          type: string
-                        description: matchLabels is a map of {key,value} pairs. A
-                          single {key,value} in the matchLabels map is equivalent
-                          to an element of matchExpressions, whose key field is "key",
-                          the operator is "In", and the values array contains only
-                          "value". The requirements are ANDed.
-                        type: object
-                    type: object
-                    x-kubernetes-map-type: atomic
-                  instanceSelector:
-                    description: InstanceSelector determines which MetricsInstances
-                      should be selected for running. Each instance runs its own set
-                      of Metrics components, including service discovery, scraping,
-                      and remote_write.
-                    properties:
-                      matchExpressions:
-                        description: matchExpressions is a list of label selector
-                          requirements. The requirements are ANDed.
-                        items:
-                          description: A label selector requirement is a selector
-                            that contains values, a key, and an operator that relates
-                            the key and values.
-                          properties:
-                            key:
-                              description: key is the label key that the selector
-                                applies to.
-                              type: string
-                            operator:
-                              description: operator represents a key's relationship
-                                to a set of values. Valid operators are In, NotIn,
-                                Exists and DoesNotExist.
-                              type: string
-                            values:
-                              description: values is an array of string values. If
-                                the operator is In or NotIn, the values array must
-                                be non-empty. If the operator is Exists or DoesNotExist,
-                                the values array must be empty. This array is replaced
-                                during a strategic merge patch.
-                              items:
-                                type: string
-                              type: array
-                          required:
-                          - key
-                          - operator
-                          type: object
-                        type: array
-                      matchLabels:
-                        additionalProperties:
-                          type: string
-                        description: matchLabels is a map of {key,value} pairs. A
-                          single {key,value} in the matchLabels map is equivalent
-                          to an element of matchExpressions, whose key field is "key",
-                          the operator is "In", and the values array contains only
-                          "value". The requirements are ANDed.
-                        type: object
-                    type: object
-                    x-kubernetes-map-type: atomic
-                  metricsExternalLabelName:
-                    description: MetricsExternalLabelName is the name of the external
-                      label used to denote Grafana Agent cluster. Defaults to "cluster."
-                      The external label is _not_ added when the value is set to the
-                      empty string.
-                    type: string
-                  overrideHonorLabels:
-                    description: OverrideHonorLabels, if true, overrides all configured
-                      honor_labels read from ServiceMonitor or PodMonitor and sets
-                      them to false.
-                    type: boolean
-                  overrideHonorTimestamps:
-                    description: OverrideHonorTimestamps allows global enforcement
-                      for honoring timestamps in all scrape configs.
-                    type: boolean
-                  remoteWrite:
-                    description: RemoteWrite controls default remote_write settings
-                      for all instances. If an instance does not provide its own RemoteWrite
-                      settings, these will be used instead.
-                    items:
-                      description: RemoteWriteSpec defines the remote_write configuration
-                        for Prometheus.
-                      properties:
-                        basicAuth:
-                          description: BasicAuth for the URL.
-                          properties:
-                            password:
-                              description: The secret in the service monitor namespace
-                                that contains the password for authentication.
-                              properties:
-                                key:
-                                  description: The key of the secret to select from.  Must
-                                    be a valid secret key.
-                                  type: string
-                                name:
-                                  description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                    TODO: Add other useful fields. apiVersion, kind,
-                                    uid?'
-                                  type: string
-                                optional:
-                                  description: Specify whether the Secret or its key
-                                    must be defined
-                                  type: boolean
-                              required:
-                              - key
-                              type: object
-                              x-kubernetes-map-type: atomic
-                            username:
-                              description: The secret in the service monitor namespace
-                                that contains the username for authentication.
-                              properties:
-                                key:
-                                  description: The key of the secret to select from.  Must
-                                    be a valid secret key.
-                                  type: string
-                                name:
-                                  description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                    TODO: Add other useful fields. apiVersion, kind,
-                                    uid?'
-                                  type: string
-                                optional:
-                                  description: Specify whether the Secret or its key
-                                    must be defined
-                                  type: boolean
-                              required:
-                              - key
-                              type: object
-                              x-kubernetes-map-type: atomic
-                          type: object
-                        bearerToken:
-                          description: BearerToken used for remote_write.
-                          type: string
-                        bearerTokenFile:
-                          description: BearerTokenFile used to read bearer token.
-                          type: string
-                        headers:
-                          additionalProperties:
-                            type: string
-                          description: Headers is a set of custom HTTP headers to
-                            be sent along with each remote_write request. Be aware
-                            that any headers set by Grafana Agent itself can't be
-                            overwritten.
-                          type: object
-                        metadataConfig:
-                          description: MetadataConfig configures the sending of series
-                            metadata to remote storage.
-                          properties:
-                            send:
-                              description: Send enables metric metadata to be sent
-                                to remote storage.
-                              type: boolean
-                            sendInterval:
-                              description: SendInterval controls how frequently metric
-                                metadata is sent to remote storage.
-                              type: string
-                          type: object
-                        name:
-                          description: Name of the remote_write queue. Must be unique
-                            if specified. The name is used in metrics and logging
-                            in order to differentiate queues.
-                          type: string
-                        oauth2:
-                          description: Oauth2 for URL
-                          properties:
-                            clientId:
-                              description: The secret or configmap containing the
-                                OAuth2 client id
-                              properties:
-                                configMap:
-                                  description: ConfigMap containing data to use for
-                                    the targets.
-                                  properties:
-                                    key:
-                                      description: The key to select.
-                                      type: string
-                                    name:
-                                      description: 'Name of the referent. More info:
-                                        https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                        TODO: Add other useful fields. apiVersion,
-                                        kind, uid?'
-                                      type: string
-                                    optional:
-                                      description: Specify whether the ConfigMap or
-                                        its key must be defined
-                                      type: boolean
-                                  required:
-                                  - key
-                                  type: object
-                                  x-kubernetes-map-type: atomic
-                                secret:
-                                  description: Secret containing data to use for the
-                                    targets.
-                                  properties:
-                                    key:
-                                      description: The key of the secret to select
-                                        from.  Must be a valid secret key.
-                                      type: string
-                                    name:
-                                      description: 'Name of the referent. More info:
-                                        https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                        TODO: Add other useful fields. apiVersion,
-                                        kind, uid?'
-                                      type: string
-                                    optional:
-                                      description: Specify whether the Secret or its
-                                        key must be defined
-                                      type: boolean
-                                  required:
-                                  - key
-                                  type: object
-                                  x-kubernetes-map-type: atomic
-                              type: object
-                            clientSecret:
-                              description: The secret containing the OAuth2 client
-                                secret
-                              properties:
-                                key:
-                                  description: The key of the secret to select from.  Must
-                                    be a valid secret key.
-                                  type: string
-                                name:
-                                  description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                    TODO: Add other useful fields. apiVersion, kind,
-                                    uid?'
-                                  type: string
-                                optional:
-                                  description: Specify whether the Secret or its key
-                                    must be defined
-                                  type: boolean
-                              required:
-                              - key
-                              type: object
-                              x-kubernetes-map-type: atomic
-                            endpointParams:
-                              additionalProperties:
-                                type: string
-                              description: Parameters to append to the token URL
-                              type: object
-                            scopes:
-                              description: OAuth2 scopes used for the token request
-                              items:
-                                type: string
-                              type: array
-                            tokenUrl:
-                              description: The URL to fetch the token from
-                              minLength: 1
-                              type: string
-                          required:
-                          - clientId
-                          - clientSecret
-                          - tokenUrl
-                          type: object
-                        proxyUrl:
-                          description: ProxyURL to proxy requests through. Optional.
-                          type: string
-                        queueConfig:
-                          description: QueueConfig allows tuning of the remote_write
-                            queue parameters.
-                          properties:
-                            batchSendDeadline:
-                              description: BatchSendDeadline is the maximum time a
-                                sample will wait in the buffer.
-                              type: string
-                            capacity:
-                              description: Capacity is the number of samples to buffer
-                                per shard before samples start being dropped.
-                              type: integer
-                            maxBackoff:
-                              description: MaxBackoff is the maximum retry delay.
-                              type: string
-                            maxRetries:
-                              description: MaxRetries is the maximum number of times
-                                to retry a batch on recoverable errors.
-                              type: integer
-                            maxSamplesPerSend:
-                              description: MaxSamplesPerSend is the maximum number
-                                of samples per send.
-                              type: integer
-                            maxShards:
-                              description: MaxShards is the maximum number of shards,
-                                i.e., the amount of concurrency.
-                              type: integer
-                            minBackoff:
-                              description: MinBackoff is the initial retry delay.
-                                MinBackoff is doubled for every retry.
-                              type: string
-                            minShards:
-                              description: MinShards is the minimum number of shards,
-                                i.e., the amount of concurrency.
-                              type: integer
-                            retryOnRateLimit:
-                              description: RetryOnRateLimit retries requests when
-                                encountering rate limits.
-                              type: boolean
-                          type: object
-                        remoteTimeout:
-                          description: RemoteTimeout is the timeout for requests to
-                            the remote_write endpoint.
-                          type: string
-                        sigv4:
-                          description: SigV4 configures SigV4-based authentication
-                            to the remote_write endpoint. SigV4-based authentication
-                            is used if SigV4 is defined, even with an empty object.
-                          properties:
-                            accessKey:
-                              description: AccessKey holds the secret of the AWS API
-                                access key to use for signing. If not provided, the
-                                environment variable AWS_ACCESS_KEY_ID is used.
-                              properties:
-                                key:
-                                  description: The key of the secret to select from.  Must
-                                    be a valid secret key.
-                                  type: string
-                                name:
-                                  description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                    TODO: Add other useful fields. apiVersion, kind,
-                                    uid?'
-                                  type: string
-                                optional:
-                                  description: Specify whether the Secret or its key
-                                    must be defined
-                                  type: boolean
-                              required:
-                              - key
-                              type: object
-                              x-kubernetes-map-type: atomic
-                            profile:
-                              description: Profile is the named AWS profile to use
-                                for authentication.
-                              type: string
-                            region:
-                              description: Region of the AWS endpoint. If blank, the
-                                region from the default credentials chain is used.
-                              type: string
-                            roleARN:
-                              description: RoleARN is the AWS Role ARN to use for
-                                authentication, as an alternative for using the AWS
-                                API keys.
-                              type: string
-                            secretKey:
-                              description: SecretKey of the AWS API to use for signing.
-                                If blank, the environment variable AWS_SECRET_ACCESS_KEY
-                                is used.
-                              properties:
-                                key:
-                                  description: The key of the secret to select from.  Must
-                                    be a valid secret key.
-                                  type: string
-                                name:
-                                  description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                    TODO: Add other useful fields. apiVersion, kind,
-                                    uid?'
-                                  type: string
-                                optional:
-                                  description: Specify whether the Secret or its key
-                                    must be defined
-                                  type: boolean
-                              required:
-                              - key
-                              type: object
-                              x-kubernetes-map-type: atomic
-                          type: object
-                        tlsConfig:
-                          description: TLSConfig to use for remote_write.
-                          properties:
-                            ca:
-                              description: Certificate authority used when verifying
-                                server certificates.
-                              properties:
-                                configMap:
-                                  description: ConfigMap containing data to use for
-                                    the targets.
-                                  properties:
-                                    key:
-                                      description: The key to select.
-                                      type: string
-                                    name:
-                                      description: 'Name of the referent. More info:
-                                        https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                        TODO: Add other useful fields. apiVersion,
-                                        kind, uid?'
-                                      type: string
-                                    optional:
-                                      description: Specify whether the ConfigMap or
-                                        its key must be defined
-                                      type: boolean
-                                  required:
-                                  - key
-                                  type: object
-                                  x-kubernetes-map-type: atomic
-                                secret:
-                                  description: Secret containing data to use for the
-                                    targets.
-                                  properties:
-                                    key:
-                                      description: The key of the secret to select
-                                        from.  Must be a valid secret key.
-                                      type: string
-                                    name:
-                                      description: 'Name of the referent. More info:
-                                        https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                        TODO: Add other useful fields. apiVersion,
-                                        kind, uid?'
-                                      type: string
-                                    optional:
-                                      description: Specify whether the Secret or its
-                                        key must be defined
-                                      type: boolean
-                                  required:
-                                  - key
-                                  type: object
-                                  x-kubernetes-map-type: atomic
-                              type: object
-                            caFile:
-                              description: Path to the CA cert in the Prometheus container
-                                to use for the targets.
-                              type: string
-                            cert:
-                              description: Client certificate to present when doing
-                                client-authentication.
-                              properties:
-                                configMap:
-                                  description: ConfigMap containing data to use for
-                                    the targets.
-                                  properties:
-                                    key:
-                                      description: The key to select.
-                                      type: string
-                                    name:
-                                      description: 'Name of the referent. More info:
-                                        https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                        TODO: Add other useful fields. apiVersion,
-                                        kind, uid?'
-                                      type: string
-                                    optional:
-                                      description: Specify whether the ConfigMap or
-                                        its key must be defined
-                                      type: boolean
-                                  required:
-                                  - key
-                                  type: object
-                                  x-kubernetes-map-type: atomic
-                                secret:
-                                  description: Secret containing data to use for the
-                                    targets.
-                                  properties:
-                                    key:
-                                      description: The key of the secret to select
-                                        from.  Must be a valid secret key.
-                                      type: string
-                                    name:
-                                      description: 'Name of the referent. More info:
-                                        https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                        TODO: Add other useful fields. apiVersion,
-                                        kind, uid?'
-                                      type: string
-                                    optional:
-                                      description: Specify whether the Secret or its
-                                        key must be defined
-                                      type: boolean
-                                  required:
-                                  - key
-                                  type: object
-                                  x-kubernetes-map-type: atomic
-                              type: object
-                            certFile:
-                              description: Path to the client cert file in the Prometheus
-                                container for the targets.
-                              type: string
-                            insecureSkipVerify:
-                              description: Disable target certificate validation.
-                              type: boolean
-                            keyFile:
-                              description: Path to the client key file in the Prometheus
-                                container for the targets.
-                              type: string
-                            keySecret:
-                              description: Secret containing the client key file for
-                                the targets.
-                              properties:
-                                key:
-                                  description: The key of the secret to select from.  Must
-                                    be a valid secret key.
-                                  type: string
-                                name:
-                                  description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                    TODO: Add other useful fields. apiVersion, kind,
-                                    uid?'
-                                  type: string
-                                optional:
-                                  description: Specify whether the Secret or its key
-                                    must be defined
-                                  type: boolean
-                              required:
-                              - key
-                              type: object
-                              x-kubernetes-map-type: atomic
-                            serverName:
-                              description: Used to verify the hostname for the targets.
-                              type: string
-                          type: object
-                        url:
-                          description: URL of the endpoint to send samples to.
-                          type: string
-                        writeRelabelConfigs:
-                          description: WriteRelabelConfigs holds relabel_configs to
-                            relabel samples before they are sent to the remote_write
-                            endpoint.
-                          items:
-                            description: 'RelabelConfig allows dynamic rewriting of
-                              the label set, being applied to samples before ingestion.
-                              It defines `<metric_relabel_configs>`-section of Prometheus
-                              configuration. More info: https://prometheus.io/docs/prometheus/latest/configuration/configuration/#metric_relabel_configs'
-                            properties:
-                              action:
-                                default: replace
-                                description: Action to perform based on regex matching.
-                                  Default is 'replace'. uppercase and lowercase actions
-                                  require Prometheus >= 2.36.
-                                enum:
-                                - replace
-                                - Replace
-                                - keep
-                                - Keep
-                                - drop
-                                - Drop
-                                - hashmod
-                                - HashMod
-                                - labelmap
-                                - LabelMap
-                                - labeldrop
-                                - LabelDrop
-                                - labelkeep
-                                - LabelKeep
-                                - lowercase
-                                - Lowercase
-                                - uppercase
-                                - Uppercase
-                                - keepequal
-                                - KeepEqual
-                                - dropequal
-                                - DropEqual
-                                type: string
-                              modulus:
-                                description: Modulus to take of the hash of the source
-                                  label values.
-                                format: int64
-                                type: integer
-                              regex:
-                                description: Regular expression against which the
-                                  extracted value is matched. Default is '(.*)'
-                                type: string
-                              replacement:
-                                description: Replacement value against which a regex
-                                  replace is performed if the regular expression matches.
-                                  Regex capture groups are available. Default is '$1'
-                                type: string
-                              separator:
-                                description: Separator placed between concatenated
-                                  source label values. default is ';'.
-                                type: string
-                              sourceLabels:
-                                description: The source labels select values from
-                                  existing labels. Their content is concatenated using
-                                  the configured separator and matched against the
-                                  configured regular expression for the replace, keep,
-                                  and drop actions.
-                                items:
-                                  description: LabelName is a valid Prometheus label
-                                    name which may only contain ASCII letters, numbers,
-                                    as well as underscores.
-                                  pattern: ^[a-zA-Z_][a-zA-Z0-9_]*$
-                                  type: string
-                                type: array
-                              targetLabel:
-                                description: Label to which the resulting value is
-                                  written in a replace action. It is mandatory for
-                                  replace actions. Regex capture groups are available.
-                                type: string
-                            type: object
-                          type: array
-                      required:
-                      - url
-                      type: object
-                    type: array
-                  replicaExternalLabelName:
-                    description: ReplicaExternalLabelName is the name of the metrics
-                      external label used to denote the replica name. Defaults to
-                      __replica__. The external label is _not_ added when the value
-                      is set to the empty string.
-                    type: string
-                  replicas:
-                    description: Replicas of each shard to deploy for metrics pods.
-                      Number of replicas multiplied by the number of shards is the
-                      total number of pods created.
-                    format: int32
-                    type: integer
-                  scrapeInterval:
-                    description: ScrapeInterval is the time between consecutive scrapes.
-                    type: string
-                  scrapeTimeout:
-                    description: ScrapeTimeout is the time to wait for a target to
-                      respond before marking a scrape as failed.
-                    type: string
-                  shards:
-                    description: Shards to distribute targets onto. Number of replicas
-                      multiplied by the number of shards is the total number of pods
-                      created. Note that scaling down shards does not reshard data
-                      onto remaining instances; it must be manually moved. Increasing
-                      shards does not reshard data either, but it will continue to
-                      be available from the same instances. Sharding is performed
-                      on the content of the __address__ target meta-label.
-                    format: int32
-                    type: integer
-                type: object
-              nodeSelector:
-                additionalProperties:
-                  type: string
-                description: NodeSelector defines which nodes pods should be scheduling
-                  on.
-                type: object
-              paused:
-                description: Paused prevents actions except for deletion to be performed
-                  on the underlying managed objects.
-                type: boolean
-              podMetadata:
-                description: PodMetadata configures Labels and Annotations which are
-                  propagated to created Grafana Agent pods.
-                properties:
-                  annotations:
-                    additionalProperties:
-                      type: string
-                    description: 'Annotations is an unstructured key value map stored
-                      with a resource that may be set by external tools to store and
-                      retrieve arbitrary metadata. They are not queryable and should
-                      be preserved when modifying objects. More info: http://kubernetes.io/docs/user-guide/annotations'
-                    type: object
-                  labels:
-                    additionalProperties:
-                      type: string
-                    description: 'Map of string keys and values that can be used to
-                      organize and categorize (scope and select) objects. May match
-                      selectors of replication controllers and services. More info:
-                      http://kubernetes.io/docs/user-guide/labels'
-                    type: object
-                  name:
-                    description: 'Name must be unique within a namespace. Is required
-                      when creating resources, although some resources may allow a
-                      client to request the generation of an appropriate name automatically.
-                      Name is primarily intended for creation idempotence and configuration
-                      definition. Cannot be updated. More info: http://kubernetes.io/docs/user-guide/identifiers#names'
-                    type: string
-                type: object
-              portName:
-                description: Port name used for the pods and governing service. This
-                  defaults to agent-metrics.
-                type: string
-              priorityClassName:
-                description: PriorityClassName is the priority class assigned to pods.
-                type: string
-              resources:
-                description: Resources holds requests and limits for individual pods.
-                properties:
-                  claims:
-                    description: "Claims lists the names of resources, defined in
-                      spec.resourceClaims, that are used by this container. \n This
-                      is an alpha field and requires enabling the DynamicResourceAllocation
-                      feature gate. \n This field is immutable. It can only be set
-                      for containers."
-                    items:
-                      description: ResourceClaim references one entry in PodSpec.ResourceClaims.
-                      properties:
-                        name:
-                          description: Name must match the name of one entry in pod.spec.resourceClaims
-                            of the Pod where this field is used. It makes that resource
-                            available inside a container.
-                          type: string
-                      required:
-                      - name
-                      type: object
-                    type: array
-                    x-kubernetes-list-map-keys:
-                    - name
-                    x-kubernetes-list-type: map
-                  limits:
-                    additionalProperties:
-                      anyOf:
-                      - type: integer
-                      - type: string
-                      pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
-                      x-kubernetes-int-or-string: true
-                    description: 'Limits describes the maximum amount of compute resources
-                      allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/'
-                    type: object
-                  requests:
-                    additionalProperties:
-                      anyOf:
-                      - type: integer
-                      - type: string
-                      pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
-                      x-kubernetes-int-or-string: true
-                    description: 'Requests describes the minimum amount of compute
-                      resources required. If Requests is omitted for a container,
-                      it defaults to Limits if that is explicitly specified, otherwise
-                      to an implementation-defined value. Requests cannot exceed Limits.
-                      More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/'
-                    type: object
-                type: object
-              runtimeClassName:
-                description: RuntimeClassName is the runtime class assigned to pods.
-                type: string
-              secrets:
-                description: Secrets is a list of secrets in the same namespace as
-                  the GrafanaAgent object which will be mounted into each running
-                  Grafana Agent pod. The secrets are mounted into /var/lib/grafana-agent/extra-secrets/<secret-name>.
-                items:
-                  type: string
-                type: array
-              securityContext:
-                description: SecurityContext holds pod-level security attributes and
-                  common container settings. When unspecified, defaults to the default
-                  PodSecurityContext.
-                properties:
-                  fsGroup:
-                    description: "A special supplemental group that applies to all
-                      containers in a pod. Some volume types allow the Kubelet to
-                      change the ownership of that volume to be owned by the pod:
-                      \n 1. The owning GID will be the FSGroup 2. The setgid bit is
-                      set (new files created in the volume will be owned by FSGroup)
-                      3. The permission bits are OR'd with rw-rw---- \n If unset,
-                      the Kubelet will not modify the ownership and permissions of
-                      any volume. Note that this field cannot be set when spec.os.name
-                      is windows."
-                    format: int64
-                    type: integer
-                  fsGroupChangePolicy:
-                    description: 'fsGroupChangePolicy defines behavior of changing
-                      ownership and permission of the volume before being exposed
-                      inside Pod. This field will only apply to volume types which
-                      support fsGroup based ownership(and permissions). It will have
-                      no effect on ephemeral volume types such as: secret, configmaps
-                      and emptydir. Valid values are "OnRootMismatch" and "Always".
-                      If not specified, "Always" is used. Note that this field cannot
-                      be set when spec.os.name is windows.'
-                    type: string
-                  runAsGroup:
-                    description: The GID to run the entrypoint of the container process.
-                      Uses runtime default if unset. May also be set in SecurityContext.  If
-                      set in both SecurityContext and PodSecurityContext, the value
-                      specified in SecurityContext takes precedence for that container.
-                      Note that this field cannot be set when spec.os.name is windows.
-                    format: int64
-                    type: integer
-                  runAsNonRoot:
-                    description: Indicates that the container must run as a non-root
-                      user. If true, the Kubelet will validate the image at runtime
-                      to ensure that it does not run as UID 0 (root) and fail to start
-                      the container if it does. If unset or false, no such validation
-                      will be performed. May also be set in SecurityContext.  If set
-                      in both SecurityContext and PodSecurityContext, the value specified
-                      in SecurityContext takes precedence.
-                    type: boolean
-                  runAsUser:
-                    description: The UID to run the entrypoint of the container process.
-                      Defaults to user specified in image metadata if unspecified.
-                      May also be set in SecurityContext.  If set in both SecurityContext
-                      and PodSecurityContext, the value specified in SecurityContext
-                      takes precedence for that container. Note that this field cannot
-                      be set when spec.os.name is windows.
-                    format: int64
-                    type: integer
-                  seLinuxOptions:
-                    description: The SELinux context to be applied to all containers.
-                      If unspecified, the container runtime will allocate a random
-                      SELinux context for each container.  May also be set in SecurityContext.  If
-                      set in both SecurityContext and PodSecurityContext, the value
-                      specified in SecurityContext takes precedence for that container.
-                      Note that this field cannot be set when spec.os.name is windows.
-                    properties:
-                      level:
-                        description: Level is SELinux level label that applies to
-                          the container.
-                        type: string
-                      role:
-                        description: Role is a SELinux role label that applies to
-                          the container.
-                        type: string
-                      type:
-                        description: Type is a SELinux type label that applies to
-                          the container.
-                        type: string
-                      user:
-                        description: User is a SELinux user label that applies to
-                          the container.
-                        type: string
-                    type: object
-                  seccompProfile:
-                    description: The seccomp options to use by the containers in this
-                      pod. Note that this field cannot be set when spec.os.name is
-                      windows.
-                    properties:
-                      localhostProfile:
-                        description: localhostProfile indicates a profile defined
-                          in a file on the node should be used. The profile must be
-                          preconfigured on the node to work. Must be a descending
-                          path, relative to the kubelet's configured seccomp profile
-                          location. Must be set if type is "Localhost". Must NOT be
-                          set for any other type.
-                        type: string
-                      type:
-                        description: "type indicates which kind of seccomp profile
-                          will be applied. Valid options are: \n Localhost - a profile
-                          defined in a file on the node should be used. RuntimeDefault
-                          - the container runtime default profile should be used.
-                          Unconfined - no profile should be applied."
-                        type: string
-                    required:
-                    - type
-                    type: object
-                  supplementalGroups:
-                    description: A list of groups applied to the first process run
-                      in each container, in addition to the container's primary GID,
-                      the fsGroup (if specified), and group memberships defined in
-                      the container image for the uid of the container process. If
-                      unspecified, no additional groups are added to any container.
-                      Note that group memberships defined in the container image for
-                      the uid of the container process are still effective, even if
-                      they are not included in this list. Note that this field cannot
-                      be set when spec.os.name is windows.
-                    items:
-                      format: int64
-                      type: integer
-                    type: array
-                  sysctls:
-                    description: Sysctls hold a list of namespaced sysctls used for
-                      the pod. Pods with unsupported sysctls (by the container runtime)
-                      might fail to launch. Note that this field cannot be set when
-                      spec.os.name is windows.
-                    items:
-                      description: Sysctl defines a kernel parameter to be set
-                      properties:
-                        name:
-                          description: Name of a property to set
-                          type: string
-                        value:
-                          description: Value of a property to set
-                          type: string
-                      required:
-                      - name
-                      - value
-                      type: object
-                    type: array
-                  windowsOptions:
-                    description: The Windows specific settings applied to all containers.
-                      If unspecified, the options within a container's SecurityContext
-                      will be used. If set in both SecurityContext and PodSecurityContext,
-                      the value specified in SecurityContext takes precedence. Note
-                      that this field cannot be set when spec.os.name is linux.
-                    properties:
-                      gmsaCredentialSpec:
-                        description: GMSACredentialSpec is where the GMSA admission
-                          webhook (https://github.com/kubernetes-sigs/windows-gmsa)
-                          inlines the contents of the GMSA credential spec named by
-                          the GMSACredentialSpecName field.
-                        type: string
-                      gmsaCredentialSpecName:
-                        description: GMSACredentialSpecName is the name of the GMSA
-                          credential spec to use.
-                        type: string
-                      hostProcess:
-                        description: HostProcess determines if a container should
-                          be run as a 'Host Process' container. All of a Pod's containers
-                          must have the same effective HostProcess value (it is not
-                          allowed to have a mix of HostProcess containers and non-HostProcess
-                          containers). In addition, if HostProcess is true then HostNetwork
-                          must also be set to true.
-                        type: boolean
-                      runAsUserName:
-                        description: The UserName in Windows to run the entrypoint
-                          of the container process. Defaults to the user specified
-                          in image metadata if unspecified. May also be set in PodSecurityContext.
-                          If set in both SecurityContext and PodSecurityContext, the
-                          value specified in SecurityContext takes precedence.
-                        type: string
-                    type: object
-                type: object
-              serviceAccountName:
-                description: ServiceAccountName is the name of the ServiceAccount
-                  to use for running Grafana Agent pods.
-                type: string
-              storage:
-                description: Storage spec to specify how storage will be used.
-                properties:
-                  disableMountSubPath:
-                    description: '*Deprecated: subPath usage will be removed in a
-                      future release.*'
-                    type: boolean
-                  emptyDir:
-                    description: 'EmptyDirVolumeSource to be used by the StatefulSet.
-                      If specified, it takes precedence over `ephemeral` and `volumeClaimTemplate`.
-                      More info: https://kubernetes.io/docs/concepts/storage/volumes/#emptydir'
-                    properties:
-                      medium:
-                        description: 'medium represents what type of storage medium
-                          should back this directory. The default is "" which means
-                          to use the node''s default medium. Must be an empty string
-                          (default) or Memory. More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir'
-                        type: string
-                      sizeLimit:
-                        anyOf:
-                        - type: integer
-                        - type: string
-                        description: 'sizeLimit is the total amount of local storage
-                          required for this EmptyDir volume. The size limit is also
-                          applicable for memory medium. The maximum usage on memory
-                          medium EmptyDir would be the minimum value between the SizeLimit
-                          specified here and the sum of memory limits of all containers
-                          in a pod. The default is nil which means that the limit
-                          is undefined. More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir'
-                        pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
-                        x-kubernetes-int-or-string: true
-                    type: object
-                  ephemeral:
-                    description: 'EphemeralVolumeSource to be used by the StatefulSet.
-                      This is a beta field in k8s 1.21 and GA in 1.15. For lower versions,
-                      starting with k8s 1.19, it requires enabling the GenericEphemeralVolume
-                      feature gate. More info: https://kubernetes.io/docs/concepts/storage/ephemeral-volumes/#generic-ephemeral-volumes'
-                    properties:
-                      volumeClaimTemplate:
-                        description: "Will be used to create a stand-alone PVC to
-                          provision the volume. The pod in which this EphemeralVolumeSource
-                          is embedded will be the owner of the PVC, i.e. the PVC will
-                          be deleted together with the pod.  The name of the PVC will
-                          be `<pod name>-<volume name>` where `<volume name>` is the
-                          name from the `PodSpec.Volumes` array entry. Pod validation
-                          will reject the pod if the concatenated name is not valid
-                          for a PVC (for example, too long). \n An existing PVC with
-                          that name that is not owned by the pod will *not* be used
-                          for the pod to avoid using an unrelated volume by mistake.
-                          Starting the pod is then blocked until the unrelated PVC
-                          is removed. If such a pre-created PVC is meant to be used
-                          by the pod, the PVC has to updated with an owner reference
-                          to the pod once the pod exists. Normally this should not
-                          be necessary, but it may be useful when manually reconstructing
-                          a broken cluster. \n This field is read-only and no changes
-                          will be made by Kubernetes to the PVC after it has been
-                          created. \n Required, must not be nil."
-                        properties:
-                          metadata:
-                            description: May contain labels and annotations that will
-                              be copied into the PVC when creating it. No other fields
-                              are allowed and will be rejected during validation.
-                            type: object
-                          spec:
-                            description: The specification for the PersistentVolumeClaim.
-                              The entire content is copied unchanged into the PVC
-                              that gets created from this template. The same fields
-                              as in a PersistentVolumeClaim are also valid here.
-                            properties:
-                              accessModes:
-                                description: 'accessModes contains the desired access
-                                  modes the volume should have. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1'
-                                items:
-                                  type: string
-                                type: array
-                              dataSource:
-                                description: 'dataSource field can be used to specify
-                                  either: * An existing VolumeSnapshot object (snapshot.storage.k8s.io/VolumeSnapshot)
-                                  * An existing PVC (PersistentVolumeClaim) If the
-                                  provisioner or an external controller can support
-                                  the specified data source, it will create a new
-                                  volume based on the contents of the specified data
-                                  source. When the AnyVolumeDataSource feature gate
-                                  is enabled, dataSource contents will be copied to
-                                  dataSourceRef, and dataSourceRef contents will be
-                                  copied to dataSource when dataSourceRef.namespace
-                                  is not specified. If the namespace is specified,
-                                  then dataSourceRef will not be copied to dataSource.'
-                                properties:
-                                  apiGroup:
-                                    description: APIGroup is the group for the resource
-                                      being referenced. If APIGroup is not specified,
-                                      the specified Kind must be in the core API group.
-                                      For any other third-party types, APIGroup is
-                                      required.
-                                    type: string
-                                  kind:
-                                    description: Kind is the type of resource being
-                                      referenced
-                                    type: string
-                                  name:
-                                    description: Name is the name of resource being
-                                      referenced
-                                    type: string
-                                required:
-                                - kind
-                                - name
-                                type: object
-                                x-kubernetes-map-type: atomic
-                              dataSourceRef:
-                                description: 'dataSourceRef specifies the object from
-                                  which to populate the volume with data, if a non-empty
-                                  volume is desired. This may be any object from a
-                                  non-empty API group (non core object) or a PersistentVolumeClaim
-                                  object. When this field is specified, volume binding
-                                  will only succeed if the type of the specified object
-                                  matches some installed volume populator or dynamic
-                                  provisioner. This field will replace the functionality
-                                  of the dataSource field and as such if both fields
-                                  are non-empty, they must have the same value. For
-                                  backwards compatibility, when namespace isn''t specified
-                                  in dataSourceRef, both fields (dataSource and dataSourceRef)
-                                  will be set to the same value automatically if one
-                                  of them is empty and the other is non-empty. When
-                                  namespace is specified in dataSourceRef, dataSource
-                                  isn''t set to the same value and must be empty.
-                                  There are three important differences between dataSource
-                                  and dataSourceRef: * While dataSource only allows
-                                  two specific types of objects, dataSourceRef allows
-                                  any non-core object, as well as PersistentVolumeClaim
-                                  objects. * While dataSource ignores disallowed values
-                                  (dropping them), dataSourceRef preserves all values,
-                                  and generates an error if a disallowed value is
-                                  specified. * While dataSource only allows local
-                                  objects, dataSourceRef allows objects in any namespaces.
-                                  (Beta) Using this field requires the AnyVolumeDataSource
-                                  feature gate to be enabled. (Alpha) Using the namespace
-                                  field of dataSourceRef requires the CrossNamespaceVolumeDataSource
-                                  feature gate to be enabled.'
-                                properties:
-                                  apiGroup:
-                                    description: APIGroup is the group for the resource
-                                      being referenced. If APIGroup is not specified,
-                                      the specified Kind must be in the core API group.
-                                      For any other third-party types, APIGroup is
-                                      required.
-                                    type: string
-                                  kind:
-                                    description: Kind is the type of resource being
-                                      referenced
-                                    type: string
-                                  name:
-                                    description: Name is the name of resource being
-                                      referenced
-                                    type: string
-                                  namespace:
-                                    description: Namespace is the namespace of resource
-                                      being referenced Note that when a namespace
-                                      is specified, a gateway.networking.k8s.io/ReferenceGrant
-                                      object is required in the referent namespace
-                                      to allow that namespace's owner to accept the
-                                      reference. See the ReferenceGrant documentation
-                                      for details. (Alpha) This field requires the
-                                      CrossNamespaceVolumeDataSource feature gate
-                                      to be enabled.
-                                    type: string
-                                required:
-                                - kind
-                                - name
-                                type: object
-                              resources:
-                                description: 'resources represents the minimum resources
-                                  the volume should have. If RecoverVolumeExpansionFailure
-                                  feature is enabled users are allowed to specify
-                                  resource requirements that are lower than previous
-                                  value but must still be higher than capacity recorded
-                                  in the status field of the claim. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources'
-                                properties:
-                                  claims:
-                                    description: "Claims lists the names of resources,
-                                      defined in spec.resourceClaims, that are used
-                                      by this container. \n This is an alpha field
-                                      and requires enabling the DynamicResourceAllocation
-                                      feature gate. \n This field is immutable. It
-                                      can only be set for containers."
-                                    items:
-                                      description: ResourceClaim references one entry
-                                        in PodSpec.ResourceClaims.
-                                      properties:
-                                        name:
-                                          description: Name must match the name of
-                                            one entry in pod.spec.resourceClaims of
-                                            the Pod where this field is used. It makes
-                                            that resource available inside a container.
-                                          type: string
-                                      required:
-                                      - name
-                                      type: object
-                                    type: array
-                                    x-kubernetes-list-map-keys:
-                                    - name
-                                    x-kubernetes-list-type: map
-                                  limits:
-                                    additionalProperties:
-                                      anyOf:
-                                      - type: integer
-                                      - type: string
-                                      pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
-                                      x-kubernetes-int-or-string: true
-                                    description: 'Limits describes the maximum amount
-                                      of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/'
-                                    type: object
-                                  requests:
-                                    additionalProperties:
-                                      anyOf:
-                                      - type: integer
-                                      - type: string
-                                      pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
-                                      x-kubernetes-int-or-string: true
-                                    description: 'Requests describes the minimum amount
-                                      of compute resources required. If Requests is
-                                      omitted for a container, it defaults to Limits
-                                      if that is explicitly specified, otherwise to
-                                      an implementation-defined value. Requests cannot
-                                      exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/'
-                                    type: object
-                                type: object
-                              selector:
-                                description: selector is a label query over volumes
-                                  to consider for binding.
-                                properties:
-                                  matchExpressions:
-                                    description: matchExpressions is a list of label
-                                      selector requirements. The requirements are
-                                      ANDed.
-                                    items:
-                                      description: A label selector requirement is
-                                        a selector that contains values, a key, and
-                                        an operator that relates the key and values.
-                                      properties:
-                                        key:
-                                          description: key is the label key that the
-                                            selector applies to.
-                                          type: string
-                                        operator:
-                                          description: operator represents a key's
-                                            relationship to a set of values. Valid
-                                            operators are In, NotIn, Exists and DoesNotExist.
-                                          type: string
-                                        values:
-                                          description: values is an array of string
-                                            values. If the operator is In or NotIn,
-                                            the values array must be non-empty. If
-                                            the operator is Exists or DoesNotExist,
-                                            the values array must be empty. This array
-                                            is replaced during a strategic merge patch.
-                                          items:
-                                            type: string
-                                          type: array
-                                      required:
-                                      - key
-                                      - operator
-                                      type: object
-                                    type: array
-                                  matchLabels:
-                                    additionalProperties:
-                                      type: string
-                                    description: matchLabels is a map of {key,value}
-                                      pairs. A single {key,value} in the matchLabels
-                                      map is equivalent to an element of matchExpressions,
-                                      whose key field is "key", the operator is "In",
-                                      and the values array contains only "value".
-                                      The requirements are ANDed.
-                                    type: object
-                                type: object
-                                x-kubernetes-map-type: atomic
-                              storageClassName:
-                                description: 'storageClassName is the name of the
-                                  StorageClass required by the claim. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1'
-                                type: string
-                              volumeMode:
-                                description: volumeMode defines what type of volume
-                                  is required by the claim. Value of Filesystem is
-                                  implied when not included in claim spec.
-                                type: string
-                              volumeName:
-                                description: volumeName is the binding reference to
-                                  the PersistentVolume backing this claim.
-                                type: string
-                            type: object
-                        required:
-                        - spec
-                        type: object
-                    type: object
-                  volumeClaimTemplate:
-                    description: Defines the PVC spec to be used by the Prometheus
-                      StatefulSets. The easiest way to use a volume that cannot be
-                      automatically provisioned is to use a label selector alongside
-                      manually created PersistentVolumes.
-                    properties:
-                      apiVersion:
-                        description: 'APIVersion defines the versioned schema of this
-                          representation of an object. Servers should convert recognized
-                          schemas to the latest internal value, and may reject unrecognized
-                          values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
-                        type: string
-                      kind:
-                        description: 'Kind is a string value representing the REST
-                          resource this object represents. Servers may infer this
-                          from the endpoint the client submits requests to. Cannot
-                          be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
-                        type: string
-                      metadata:
-                        description: EmbeddedMetadata contains metadata relevant to
-                          an EmbeddedResource.
-                        properties:
-                          annotations:
-                            additionalProperties:
-                              type: string
-                            description: 'Annotations is an unstructured key value
-                              map stored with a resource that may be set by external
-                              tools to store and retrieve arbitrary metadata. They
-                              are not queryable and should be preserved when modifying
-                              objects. More info: http://kubernetes.io/docs/user-guide/annotations'
-                            type: object
-                          labels:
-                            additionalProperties:
-                              type: string
-                            description: 'Map of string keys and values that can be
-                              used to organize and categorize (scope and select) objects.
-                              May match selectors of replication controllers and services.
-                              More info: http://kubernetes.io/docs/user-guide/labels'
-                            type: object
-                          name:
-                            description: 'Name must be unique within a namespace.
-                              Is required when creating resources, although some resources
-                              may allow a client to request the generation of an appropriate
-                              name automatically. Name is primarily intended for creation
-                              idempotence and configuration definition. Cannot be
-                              updated. More info: http://kubernetes.io/docs/user-guide/identifiers#names'
-                            type: string
-                        type: object
-                      spec:
-                        description: 'Defines the desired characteristics of a volume
-                          requested by a pod author. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims'
-                        properties:
-                          accessModes:
-                            description: 'accessModes contains the desired access
-                              modes the volume should have. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1'
-                            items:
-                              type: string
-                            type: array
-                          dataSource:
-                            description: 'dataSource field can be used to specify
-                              either: * An existing VolumeSnapshot object (snapshot.storage.k8s.io/VolumeSnapshot)
-                              * An existing PVC (PersistentVolumeClaim) If the provisioner
-                              or an external controller can support the specified
-                              data source, it will create a new volume based on the
-                              contents of the specified data source. When the AnyVolumeDataSource
-                              feature gate is enabled, dataSource contents will be
-                              copied to dataSourceRef, and dataSourceRef contents
-                              will be copied to dataSource when dataSourceRef.namespace
-                              is not specified. If the namespace is specified, then
-                              dataSourceRef will not be copied to dataSource.'
-                            properties:
-                              apiGroup:
-                                description: APIGroup is the group for the resource
-                                  being referenced. If APIGroup is not specified,
-                                  the specified Kind must be in the core API group.
-                                  For any other third-party types, APIGroup is required.
-                                type: string
-                              kind:
-                                description: Kind is the type of resource being referenced
-                                type: string
-                              name:
-                                description: Name is the name of resource being referenced
-                                type: string
-                            required:
-                            - kind
-                            - name
-                            type: object
-                            x-kubernetes-map-type: atomic
-                          dataSourceRef:
-                            description: 'dataSourceRef specifies the object from
-                              which to populate the volume with data, if a non-empty
-                              volume is desired. This may be any object from a non-empty
-                              API group (non core object) or a PersistentVolumeClaim
-                              object. When this field is specified, volume binding
-                              will only succeed if the type of the specified object
-                              matches some installed volume populator or dynamic provisioner.
-                              This field will replace the functionality of the dataSource
-                              field and as such if both fields are non-empty, they
-                              must have the same value. For backwards compatibility,
-                              when namespace isn''t specified in dataSourceRef, both
-                              fields (dataSource and dataSourceRef) will be set to
-                              the same value automatically if one of them is empty
-                              and the other is non-empty. When namespace is specified
-                              in dataSourceRef, dataSource isn''t set to the same
-                              value and must be empty. There are three important differences
-                              between dataSource and dataSourceRef: * While dataSource
-                              only allows two specific types of objects, dataSourceRef
-                              allows any non-core object, as well as PersistentVolumeClaim
-                              objects. * While dataSource ignores disallowed values
-                              (dropping them), dataSourceRef preserves all values,
-                              and generates an error if a disallowed value is specified.
-                              * While dataSource only allows local objects, dataSourceRef
-                              allows objects in any namespaces. (Beta) Using this
-                              field requires the AnyVolumeDataSource feature gate
-                              to be enabled. (Alpha) Using the namespace field of
-                              dataSourceRef requires the CrossNamespaceVolumeDataSource
-                              feature gate to be enabled.'
-                            properties:
-                              apiGroup:
-                                description: APIGroup is the group for the resource
-                                  being referenced. If APIGroup is not specified,
-                                  the specified Kind must be in the core API group.
-                                  For any other third-party types, APIGroup is required.
-                                type: string
-                              kind:
-                                description: Kind is the type of resource being referenced
-                                type: string
-                              name:
-                                description: Name is the name of resource being referenced
-                                type: string
-                              namespace:
-                                description: Namespace is the namespace of resource
-                                  being referenced Note that when a namespace is specified,
-                                  a gateway.networking.k8s.io/ReferenceGrant object
-                                  is required in the referent namespace to allow that
-                                  namespace's owner to accept the reference. See the
-                                  ReferenceGrant documentation for details. (Alpha)
-                                  This field requires the CrossNamespaceVolumeDataSource
-                                  feature gate to be enabled.
-                                type: string
-                            required:
-                            - kind
-                            - name
-                            type: object
-                          resources:
-                            description: 'resources represents the minimum resources
-                              the volume should have. If RecoverVolumeExpansionFailure
-                              feature is enabled users are allowed to specify resource
-                              requirements that are lower than previous value but
-                              must still be higher than capacity recorded in the status
-                              field of the claim. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources'
-                            properties:
-                              claims:
-                                description: "Claims lists the names of resources,
-                                  defined in spec.resourceClaims, that are used by
-                                  this container. \n This is an alpha field and requires
-                                  enabling the DynamicResourceAllocation feature gate.
-                                  \n This field is immutable. It can only be set for
-                                  containers."
-                                items:
-                                  description: ResourceClaim references one entry
-                                    in PodSpec.ResourceClaims.
-                                  properties:
-                                    name:
-                                      description: Name must match the name of one
-                                        entry in pod.spec.resourceClaims of the Pod
-                                        where this field is used. It makes that resource
-                                        available inside a container.
-                                      type: string
-                                  required:
-                                  - name
-                                  type: object
-                                type: array
-                                x-kubernetes-list-map-keys:
-                                - name
-                                x-kubernetes-list-type: map
-                              limits:
-                                additionalProperties:
-                                  anyOf:
-                                  - type: integer
-                                  - type: string
-                                  pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
-                                  x-kubernetes-int-or-string: true
-                                description: 'Limits describes the maximum amount
-                                  of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/'
-                                type: object
-                              requests:
-                                additionalProperties:
-                                  anyOf:
-                                  - type: integer
-                                  - type: string
-                                  pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
-                                  x-kubernetes-int-or-string: true
-                                description: 'Requests describes the minimum amount
-                                  of compute resources required. If Requests is omitted
-                                  for a container, it defaults to Limits if that is
-                                  explicitly specified, otherwise to an implementation-defined
-                                  value. Requests cannot exceed Limits. More info:
-                                  https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/'
-                                type: object
-                            type: object
-                          selector:
-                            description: selector is a label query over volumes to
-                              consider for binding.
-                            properties:
-                              matchExpressions:
-                                description: matchExpressions is a list of label selector
-                                  requirements. The requirements are ANDed.
-                                items:
-                                  description: A label selector requirement is a selector
-                                    that contains values, a key, and an operator that
-                                    relates the key and values.
-                                  properties:
-                                    key:
-                                      description: key is the label key that the selector
-                                        applies to.
-                                      type: string
-                                    operator:
-                                      description: operator represents a key's relationship
-                                        to a set of values. Valid operators are In,
-                                        NotIn, Exists and DoesNotExist.
-                                      type: string
-                                    values:
-                                      description: values is an array of string values.
-                                        If the operator is In or NotIn, the values
-                                        array must be non-empty. If the operator is
-                                        Exists or DoesNotExist, the values array must
-                                        be empty. This array is replaced during a
-                                        strategic merge patch.
-                                      items:
-                                        type: string
-                                      type: array
-                                  required:
-                                  - key
-                                  - operator
-                                  type: object
-                                type: array
-                              matchLabels:
-                                additionalProperties:
-                                  type: string
-                                description: matchLabels is a map of {key,value} pairs.
-                                  A single {key,value} in the matchLabels map is equivalent
-                                  to an element of matchExpressions, whose key field
-                                  is "key", the operator is "In", and the values array
-                                  contains only "value". The requirements are ANDed.
-                                type: object
-                            type: object
-                            x-kubernetes-map-type: atomic
-                          storageClassName:
-                            description: 'storageClassName is the name of the StorageClass
-                              required by the claim. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1'
-                            type: string
-                          volumeMode:
-                            description: volumeMode defines what type of volume is
-                              required by the claim. Value of Filesystem is implied
-                              when not included in claim spec.
-                            type: string
-                          volumeName:
-                            description: volumeName is the binding reference to the
-                              PersistentVolume backing this claim.
-                            type: string
-                        type: object
-                      status:
-                        description: '*Deprecated: this field is never set.*'
-                        properties:
-                          accessModes:
-                            description: 'accessModes contains the actual access modes
-                              the volume backing the PVC has. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1'
-                            items:
-                              type: string
-                            type: array
-                          allocatedResourceStatuses:
-                            additionalProperties:
-                              description: When a controller receives persistentvolume
-                                claim update with ClaimResourceStatus for a resource
-                                that it does not recognizes, then it should ignore
-                                that update and let other controllers handle it.
-                              type: string
-                            description: "allocatedResourceStatuses stores status
-                              of resource being resized for the given PVC. Key names
-                              follow standard Kubernetes label syntax. Valid values
-                              are either: * Un-prefixed keys: - storage - the capacity
-                              of the volume. * Custom resources must use implementation-defined
-                              prefixed names such as \"example.com/my-custom-resource\"
-                              Apart from above values - keys that are unprefixed or
-                              have kubernetes.io prefix are considered reserved and
-                              hence may not be used. \n ClaimResourceStatus can be
-                              in any of following states: - ControllerResizeInProgress:
-                              State set when resize controller starts resizing the
-                              volume in control-plane. - ControllerResizeFailed: State
-                              set when resize has failed in resize controller with
-                              a terminal error. - NodeResizePending: State set when
-                              resize controller has finished resizing the volume but
-                              further resizing of volume is needed on the node. -
-                              NodeResizeInProgress: State set when kubelet starts
-                              resizing the volume. - NodeResizeFailed: State set when
-                              resizing has failed in kubelet with a terminal error.
-                              Transient errors don't set NodeResizeFailed. For example:
-                              if expanding a PVC for more capacity - this field can
-                              be one of the following states: - pvc.status.allocatedResourceStatus['storage']
-                              = \"ControllerResizeInProgress\" - pvc.status.allocatedResourceStatus['storage']
-                              = \"ControllerResizeFailed\" - pvc.status.allocatedResourceStatus['storage']
-                              = \"NodeResizePending\" - pvc.status.allocatedResourceStatus['storage']
-                              = \"NodeResizeInProgress\" - pvc.status.allocatedResourceStatus['storage']
-                              = \"NodeResizeFailed\" When this field is not set, it
-                              means that no resize operation is in progress for the
-                              given PVC. \n A controller that receives PVC update
-                              with previously unknown resourceName or ClaimResourceStatus
-                              should ignore the update for the purpose it was designed.
-                              For example - a controller that only is responsible
-                              for resizing capacity of the volume, should ignore PVC
-                              updates that change other valid resources associated
-                              with PVC. \n This is an alpha field and requires enabling
-                              RecoverVolumeExpansionFailure feature."
-                            type: object
-                            x-kubernetes-map-type: granular
-                          allocatedResources:
-                            additionalProperties:
-                              anyOf:
-                              - type: integer
-                              - type: string
-                              pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
-                              x-kubernetes-int-or-string: true
-                            description: "allocatedResources tracks the resources
-                              allocated to a PVC including its capacity. Key names
-                              follow standard Kubernetes label syntax. Valid values
-                              are either: * Un-prefixed keys: - storage - the capacity
-                              of the volume. * Custom resources must use implementation-defined
-                              prefixed names such as \"example.com/my-custom-resource\"
-                              Apart from above values - keys that are unprefixed or
-                              have kubernetes.io prefix are considered reserved and
-                              hence may not be used. \n Capacity reported here may
-                              be larger than the actual capacity when a volume expansion
-                              operation is requested. For storage quota, the larger
-                              value from allocatedResources and PVC.spec.resources
-                              is used. If allocatedResources is not set, PVC.spec.resources
-                              alone is used for quota calculation. If a volume expansion
-                              capacity request is lowered, allocatedResources is only
-                              lowered if there are no expansion operations in progress
-                              and if the actual volume capacity is equal or lower
-                              than the requested capacity. \n A controller that receives
-                              PVC update with previously unknown resourceName should
-                              ignore the update for the purpose it was designed. For
-                              example - a controller that only is responsible for
-                              resizing capacity of the volume, should ignore PVC updates
-                              that change other valid resources associated with PVC.
-                              \n This is an alpha field and requires enabling RecoverVolumeExpansionFailure
-                              feature."
-                            type: object
-                          capacity:
-                            additionalProperties:
-                              anyOf:
-                              - type: integer
-                              - type: string
-                              pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
-                              x-kubernetes-int-or-string: true
-                            description: capacity represents the actual resources
-                              of the underlying volume.
-                            type: object
-                          conditions:
-                            description: conditions is the current Condition of persistent
-                              volume claim. If underlying persistent volume is being
-                              resized then the Condition will be set to 'ResizeStarted'.
-                            items:
-                              description: PersistentVolumeClaimCondition contains
-                                details about state of pvc
-                              properties:
-                                lastProbeTime:
-                                  description: lastProbeTime is the time we probed
-                                    the condition.
-                                  format: date-time
-                                  type: string
-                                lastTransitionTime:
-                                  description: lastTransitionTime is the time the
-                                    condition transitioned from one status to another.
-                                  format: date-time
-                                  type: string
-                                message:
-                                  description: message is the human-readable message
-                                    indicating details about last transition.
-                                  type: string
-                                reason:
-                                  description: reason is a unique, this should be
-                                    a short, machine understandable string that gives
-                                    the reason for condition's last transition. If
-                                    it reports "ResizeStarted" that means the underlying
-                                    persistent volume is being resized.
-                                  type: string
-                                status:
-                                  type: string
-                                type:
-                                  description: PersistentVolumeClaimConditionType
-                                    is a valid value of PersistentVolumeClaimCondition.Type
-                                  type: string
-                              required:
-                              - status
-                              - type
-                              type: object
-                            type: array
-                          phase:
-                            description: phase represents the current phase of PersistentVolumeClaim.
-                            type: string
-                        type: object
-                    type: object
-                type: object
-              tolerations:
-                description: Tolerations, if specified, controls the pod's tolerations.
-                items:
-                  description: The pod this Toleration is attached to tolerates any
-                    taint that matches the triple <key,value,effect> using the matching
-                    operator <operator>.
-                  properties:
-                    effect:
-                      description: Effect indicates the taint effect to match. Empty
-                        means match all taint effects. When specified, allowed values
-                        are NoSchedule, PreferNoSchedule and NoExecute.
-                      type: string
-                    key:
-                      description: Key is the taint key that the toleration applies
-                        to. Empty means match all taint keys. If the key is empty,
-                        operator must be Exists; this combination means to match all
-                        values and all keys.
-                      type: string
-                    operator:
-                      description: Operator represents a key's relationship to the
-                        value. Valid operators are Exists and Equal. Defaults to Equal.
-                        Exists is equivalent to wildcard for value, so that a pod
-                        can tolerate all taints of a particular category.
-                      type: string
-                    tolerationSeconds:
-                      description: TolerationSeconds represents the period of time
-                        the toleration (which must be of effect NoExecute, otherwise
-                        this field is ignored) tolerates the taint. By default, it
-                        is not set, which means tolerate the taint forever (do not
-                        evict). Zero and negative values will be treated as 0 (evict
-                        immediately) by the system.
-                      format: int64
-                      type: integer
-                    value:
-                      description: Value is the taint value the toleration matches
-                        to. If the operator is Exists, the value should be empty,
-                        otherwise just a regular string.
-                      type: string
-                  type: object
-                type: array
-              topologySpreadConstraints:
-                description: TopologySpreadConstraints, if specified, controls the
-                  pod's topology spread constraints.
-                items:
-                  description: TopologySpreadConstraint specifies how to spread matching
-                    pods among the given topology.
-                  properties:
-                    labelSelector:
-                      description: LabelSelector is used to find matching pods. Pods
-                        that match this label selector are counted to determine the
-                        number of pods in their corresponding topology domain.
-                      properties:
-                        matchExpressions:
-                          description: matchExpressions is a list of label selector
-                            requirements. The requirements are ANDed.
-                          items:
-                            description: A label selector requirement is a selector
-                              that contains values, a key, and an operator that relates
-                              the key and values.
-                            properties:
-                              key:
-                                description: key is the label key that the selector
-                                  applies to.
-                                type: string
-                              operator:
-                                description: operator represents a key's relationship
-                                  to a set of values. Valid operators are In, NotIn,
-                                  Exists and DoesNotExist.
-                                type: string
-                              values:
-                                description: values is an array of string values.
-                                  If the operator is In or NotIn, the values array
-                                  must be non-empty. If the operator is Exists or
-                                  DoesNotExist, the values array must be empty. This
-                                  array is replaced during a strategic merge patch.
-                                items:
-                                  type: string
-                                type: array
-                            required:
-                            - key
-                            - operator
-                            type: object
-                          type: array
-                        matchLabels:
-                          additionalProperties:
-                            type: string
-                          description: matchLabels is a map of {key,value} pairs.
-                            A single {key,value} in the matchLabels map is equivalent
-                            to an element of matchExpressions, whose key field is
-                            "key", the operator is "In", and the values array contains
-                            only "value". The requirements are ANDed.
-                          type: object
-                      type: object
-                      x-kubernetes-map-type: atomic
-                    matchLabelKeys:
-                      description: "MatchLabelKeys is a set of pod label keys to select
-                        the pods over which spreading will be calculated. The keys
-                        are used to lookup values from the incoming pod labels, those
-                        key-value labels are ANDed with labelSelector to select the
-                        group of existing pods over which spreading will be calculated
-                        for the incoming pod. The same key is forbidden to exist in
-                        both MatchLabelKeys and LabelSelector. MatchLabelKeys cannot
-                        be set when LabelSelector isn't set. Keys that don't exist
-                        in the incoming pod labels will be ignored. A null or empty
-                        list means only match against labelSelector. \n This is a
-                        beta field and requires the MatchLabelKeysInPodTopologySpread
-                        feature gate to be enabled (enabled by default)."
-                      items:
-                        type: string
-                      type: array
-                      x-kubernetes-list-type: atomic
-                    maxSkew:
-                      description: 'MaxSkew describes the degree to which pods may
-                        be unevenly distributed. When `whenUnsatisfiable=DoNotSchedule`,
-                        it is the maximum permitted difference between the number
-                        of matching pods in the target topology and the global minimum.
-                        The global minimum is the minimum number of matching pods
-                        in an eligible domain or zero if the number of eligible domains
-                        is less than MinDomains. For example, in a 3-zone cluster,
-                        MaxSkew is set to 1, and pods with the same labelSelector
-                        spread as 2/2/1: In this case, the global minimum is 1. |
-                        zone1 | zone2 | zone3 | |  P P  |  P P  |   P   | - if MaxSkew
-                        is 1, incoming pod can only be scheduled to zone3 to become
-                        2/2/2; scheduling it onto zone1(zone2) would make the ActualSkew(3-1)
-                        on zone1(zone2) violate MaxSkew(1). - if MaxSkew is 2, incoming
-                        pod can be scheduled onto any zone. When `whenUnsatisfiable=ScheduleAnyway`,
-                        it is used to give higher precedence to topologies that satisfy
-                        it. It''s a required field. Default value is 1 and 0 is not
-                        allowed.'
-                      format: int32
-                      type: integer
-                    minDomains:
-                      description: "MinDomains indicates a minimum number of eligible
-                        domains. When the number of eligible domains with matching
-                        topology keys is less than minDomains, Pod Topology Spread
-                        treats \"global minimum\" as 0, and then the calculation of
-                        Skew is performed. And when the number of eligible domains
-                        with matching topology keys equals or greater than minDomains,
-                        this value has no effect on scheduling. As a result, when
-                        the number of eligible domains is less than minDomains, scheduler
-                        won't schedule more than maxSkew Pods to those domains. If
-                        value is nil, the constraint behaves as if MinDomains is equal
-                        to 1. Valid values are integers greater than 0. When value
-                        is not nil, WhenUnsatisfiable must be DoNotSchedule. \n For
-                        example, in a 3-zone cluster, MaxSkew is set to 2, MinDomains
-                        is set to 5 and pods with the same labelSelector spread as
-                        2/2/2: | zone1 | zone2 | zone3 | |  P P  |  P P  |  P P  |
-                        The number of domains is less than 5(MinDomains), so \"global
-                        minimum\" is treated as 0. In this situation, new pod with
-                        the same labelSelector cannot be scheduled, because computed
-                        skew will be 3(3 - 0) if new Pod is scheduled to any of the
-                        three zones, it will violate MaxSkew. \n This is a beta field
-                        and requires the MinDomainsInPodTopologySpread feature gate
-                        to be enabled (enabled by default)."
-                      format: int32
-                      type: integer
-                    nodeAffinityPolicy:
-                      description: "NodeAffinityPolicy indicates how we will treat
-                        Pod's nodeAffinity/nodeSelector when calculating pod topology
-                        spread skew. Options are: - Honor: only nodes matching nodeAffinity/nodeSelector
-                        are included in the calculations. - Ignore: nodeAffinity/nodeSelector
-                        are ignored. All nodes are included in the calculations. \n
-                        If this value is nil, the behavior is equivalent to the Honor
-                        policy. This is a beta-level feature default enabled by the
-                        NodeInclusionPolicyInPodTopologySpread feature flag."
-                      type: string
-                    nodeTaintsPolicy:
-                      description: "NodeTaintsPolicy indicates how we will treat node
-                        taints when calculating pod topology spread skew. Options
-                        are: - Honor: nodes without taints, along with tainted nodes
-                        for which the incoming pod has a toleration, are included.
-                        - Ignore: node taints are ignored. All nodes are included.
-                        \n If this value is nil, the behavior is equivalent to the
-                        Ignore policy. This is a beta-level feature default enabled
-                        by the NodeInclusionPolicyInPodTopologySpread feature flag."
-                      type: string
-                    topologyKey:
-                      description: TopologyKey is the key of node labels. Nodes that
-                        have a label with this key and identical values are considered
-                        to be in the same topology. We consider each <key, value>
-                        as a "bucket", and try to put balanced number of pods into
-                        each bucket. We define a domain as a particular instance of
-                        a topology. Also, we define an eligible domain as a domain
-                        whose nodes meet the requirements of nodeAffinityPolicy and
-                        nodeTaintsPolicy. e.g. If TopologyKey is "kubernetes.io/hostname",
-                        each Node is a domain of that topology. And, if TopologyKey
-                        is "topology.kubernetes.io/zone", each zone is a domain of
-                        that topology. It's a required field.
-                      type: string
-                    whenUnsatisfiable:
-                      description: 'WhenUnsatisfiable indicates how to deal with a
-                        pod if it doesn''t satisfy the spread constraint. - DoNotSchedule
-                        (default) tells the scheduler not to schedule it. - ScheduleAnyway
-                        tells the scheduler to schedule the pod in any location, but
-                        giving higher precedence to topologies that would help reduce
-                        the skew. A constraint is considered "Unsatisfiable" for an
-                        incoming pod if and only if every possible node assignment
-                        for that pod would violate "MaxSkew" on some topology. For
-                        example, in a 3-zone cluster, MaxSkew is set to 1, and pods
-                        with the same labelSelector spread as 3/1/1: | zone1 | zone2
-                        | zone3 | | P P P |   P   |   P   | If WhenUnsatisfiable is
-                        set to DoNotSchedule, incoming pod can only be scheduled to
-                        zone2(zone3) to become 3/2/1(3/1/2) as ActualSkew(2-1) on
-                        zone2(zone3) satisfies MaxSkew(1). In other words, the cluster
-                        can still be imbalanced, but scheduler won''t make it *more*
-                        imbalanced. It''s a required field.'
-                      type: string
-                  required:
-                  - maxSkew
-                  - topologyKey
-                  - whenUnsatisfiable
-                  type: object
-                type: array
-              version:
-                description: Version of Grafana Agent to be deployed.
-                type: string
-              volumeMounts:
-                description: VolumeMounts lets you configure additional VolumeMounts
-                  on the output StatefulSet definition. Specified VolumeMounts are
-                  appended to other VolumeMounts generated as a result of StorageSpec
-                  objects in the Grafana Agent container.
-                items:
-                  description: VolumeMount describes a mounting of a Volume within
-                    a container.
-                  properties:
-                    mountPath:
-                      description: Path within the container at which the volume should
-                        be mounted.  Must not contain ':'.
-                      type: string
-                    mountPropagation:
-                      description: mountPropagation determines how mounts are propagated
-                        from the host to container and the other way around. When
-                        not set, MountPropagationNone is used. This field is beta
-                        in 1.10.
-                      type: string
-                    name:
-                      description: This must match the Name of a Volume.
-                      type: string
-                    readOnly:
-                      description: Mounted read-only if true, read-write otherwise
-                        (false or unspecified). Defaults to false.
-                      type: boolean
-                    subPath:
-                      description: Path within the volume from which the container's
-                        volume should be mounted. Defaults to "" (volume's root).
-                      type: string
-                    subPathExpr:
-                      description: Expanded path within the volume from which the
-                        container's volume should be mounted. Behaves similarly to
-                        SubPath but environment variable references $(VAR_NAME) are
-                        expanded using the container's environment. Defaults to ""
-                        (volume's root). SubPathExpr and SubPath are mutually exclusive.
-                      type: string
-                  required:
-                  - mountPath
-                  - name
-                  type: object
-                type: array
-              volumes:
-                description: Volumes allows configuration of additional volumes on
-                  the output StatefulSet definition. The volumes specified are appended
-                  to other volumes that are generated as a result of StorageSpec objects.
-                items:
-                  description: Volume represents a named volume in a pod that may
-                    be accessed by any container in the pod.
-                  properties:
-                    awsElasticBlockStore:
-                      description: 'awsElasticBlockStore represents an AWS Disk resource
-                        that is attached to a kubelet''s host machine and then exposed
-                        to the pod. More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore'
-                      properties:
-                        fsType:
-                          description: 'fsType is the filesystem type of the volume
-                            that you want to mount. Tip: Ensure that the filesystem
-                            type is supported by the host operating system. Examples:
-                            "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4"
-                            if unspecified. More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
-                            TODO: how do we prevent errors in the filesystem from
-                            compromising the machine'
-                          type: string
-                        partition:
-                          description: 'partition is the partition in the volume that
-                            you want to mount. If omitted, the default is to mount
-                            by volume name. Examples: For volume /dev/sda1, you specify
-                            the partition as "1". Similarly, the volume partition
-                            for /dev/sda is "0" (or you can leave the property empty).'
-                          format: int32
-                          type: integer
-                        readOnly:
-                          description: 'readOnly value true will force the readOnly
-                            setting in VolumeMounts. More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore'
-                          type: boolean
-                        volumeID:
-                          description: 'volumeID is unique ID of the persistent disk
-                            resource in AWS (Amazon EBS volume). More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore'
-                          type: string
-                      required:
-                      - volumeID
-                      type: object
-                    azureDisk:
-                      description: azureDisk represents an Azure Data Disk mount on
-                        the host and bind mount to the pod.
-                      properties:
-                        cachingMode:
-                          description: 'cachingMode is the Host Caching mode: None,
-                            Read Only, Read Write.'
-                          type: string
-                        diskName:
-                          description: diskName is the Name of the data disk in the
-                            blob storage
-                          type: string
-                        diskURI:
-                          description: diskURI is the URI of data disk in the blob
-                            storage
-                          type: string
-                        fsType:
-                          description: fsType is Filesystem type to mount. Must be
-                            a filesystem type supported by the host operating system.
-                            Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4"
-                            if unspecified.
-                          type: string
-                        kind:
-                          description: 'kind expected values are Shared: multiple
-                            blob disks per storage account  Dedicated: single blob
-                            disk per storage account  Managed: azure managed data
-                            disk (only in managed availability set). defaults to shared'
-                          type: string
-                        readOnly:
-                          description: readOnly Defaults to false (read/write). ReadOnly
-                            here will force the ReadOnly setting in VolumeMounts.
-                          type: boolean
-                      required:
-                      - diskName
-                      - diskURI
-                      type: object
-                    azureFile:
-                      description: azureFile represents an Azure File Service mount
-                        on the host and bind mount to the pod.
-                      properties:
-                        readOnly:
-                          description: readOnly defaults to false (read/write). ReadOnly
-                            here will force the ReadOnly setting in VolumeMounts.
-                          type: boolean
-                        secretName:
-                          description: secretName is the  name of secret that contains
-                            Azure Storage Account Name and Key
-                          type: string
-                        shareName:
-                          description: shareName is the azure share Name
-                          type: string
-                      required:
-                      - secretName
-                      - shareName
-                      type: object
-                    cephfs:
-                      description: cephFS represents a Ceph FS mount on the host that
-                        shares a pod's lifetime
-                      properties:
-                        monitors:
-                          description: 'monitors is Required: Monitors is a collection
-                            of Ceph monitors More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it'
-                          items:
-                            type: string
-                          type: array
-                        path:
-                          description: 'path is Optional: Used as the mounted root,
-                            rather than the full Ceph tree, default is /'
-                          type: string
-                        readOnly:
-                          description: 'readOnly is Optional: Defaults to false (read/write).
-                            ReadOnly here will force the ReadOnly setting in VolumeMounts.
-                            More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it'
-                          type: boolean
-                        secretFile:
-                          description: 'secretFile is Optional: SecretFile is the
-                            path to key ring for User, default is /etc/ceph/user.secret
-                            More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it'
-                          type: string
-                        secretRef:
-                          description: 'secretRef is Optional: SecretRef is reference
-                            to the authentication secret for User, default is empty.
-                            More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it'
-                          properties:
-                            name:
-                              description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                TODO: Add other useful fields. apiVersion, kind, uid?'
-                              type: string
-                          type: object
-                          x-kubernetes-map-type: atomic
-                        user:
-                          description: 'user is optional: User is the rados user name,
-                            default is admin More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it'
-                          type: string
-                      required:
-                      - monitors
-                      type: object
-                    cinder:
-                      description: 'cinder represents a cinder volume attached and
-                        mounted on kubelets host machine. More info: https://examples.k8s.io/mysql-cinder-pd/README.md'
-                      properties:
-                        fsType:
-                          description: 'fsType is the filesystem type to mount. Must
-                            be a filesystem type supported by the host operating system.
-                            Examples: "ext4", "xfs", "ntfs". Implicitly inferred to
-                            be "ext4" if unspecified. More info: https://examples.k8s.io/mysql-cinder-pd/README.md'
-                          type: string
-                        readOnly:
-                          description: 'readOnly defaults to false (read/write). ReadOnly
-                            here will force the ReadOnly setting in VolumeMounts.
-                            More info: https://examples.k8s.io/mysql-cinder-pd/README.md'
-                          type: boolean
-                        secretRef:
-                          description: 'secretRef is optional: points to a secret
-                            object containing parameters used to connect to OpenStack.'
-                          properties:
-                            name:
-                              description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                TODO: Add other useful fields. apiVersion, kind, uid?'
-                              type: string
-                          type: object
-                          x-kubernetes-map-type: atomic
-                        volumeID:
-                          description: 'volumeID used to identify the volume in cinder.
-                            More info: https://examples.k8s.io/mysql-cinder-pd/README.md'
-                          type: string
-                      required:
-                      - volumeID
-                      type: object
-                    configMap:
-                      description: configMap represents a configMap that should populate
-                        this volume
-                      properties:
-                        defaultMode:
-                          description: 'defaultMode is optional: mode bits used to
-                            set permissions on created files by default. Must be an
-                            octal value between 0000 and 0777 or a decimal value between
-                            0 and 511. YAML accepts both octal and decimal values,
-                            JSON requires decimal values for mode bits. Defaults to
-                            0644. Directories within the path are not affected by
-                            this setting. This might be in conflict with other options
-                            that affect the file mode, like fsGroup, and the result
-                            can be other mode bits set.'
-                          format: int32
-                          type: integer
-                        items:
-                          description: items if unspecified, each key-value pair in
-                            the Data field of the referenced ConfigMap will be projected
-                            into the volume as a file whose name is the key and content
-                            is the value. If specified, the listed keys will be projected
-                            into the specified paths, and unlisted keys will not be
-                            present. If a key is specified which is not present in
-                            the ConfigMap, the volume setup will error unless it is
-                            marked optional. Paths must be relative and may not contain
-                            the '..' path or start with '..'.
-                          items:
-                            description: Maps a string key to a path within a volume.
-                            properties:
-                              key:
-                                description: key is the key to project.
-                                type: string
-                              mode:
-                                description: 'mode is Optional: mode bits used to
-                                  set permissions on this file. Must be an octal value
-                                  between 0000 and 0777 or a decimal value between
-                                  0 and 511. YAML accepts both octal and decimal values,
-                                  JSON requires decimal values for mode bits. If not
-                                  specified, the volume defaultMode will be used.
-                                  This might be in conflict with other options that
-                                  affect the file mode, like fsGroup, and the result
-                                  can be other mode bits set.'
-                                format: int32
-                                type: integer
-                              path:
-                                description: path is the relative path of the file
-                                  to map the key to. May not be an absolute path.
-                                  May not contain the path element '..'. May not start
-                                  with the string '..'.
-                                type: string
-                            required:
-                            - key
-                            - path
-                            type: object
-                          type: array
-                        name:
-                          description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                            TODO: Add other useful fields. apiVersion, kind, uid?'
-                          type: string
-                        optional:
-                          description: optional specify whether the ConfigMap or its
-                            keys must be defined
-                          type: boolean
-                      type: object
-                      x-kubernetes-map-type: atomic
-                    csi:
-                      description: csi (Container Storage Interface) represents ephemeral
-                        storage that is handled by certain external CSI drivers (Beta
-                        feature).
-                      properties:
-                        driver:
-                          description: driver is the name of the CSI driver that handles
-                            this volume. Consult with your admin for the correct name
-                            as registered in the cluster.
-                          type: string
-                        fsType:
-                          description: fsType to mount. Ex. "ext4", "xfs", "ntfs".
-                            If not provided, the empty value is passed to the associated
-                            CSI driver which will determine the default filesystem
-                            to apply.
-                          type: string
-                        nodePublishSecretRef:
-                          description: nodePublishSecretRef is a reference to the
-                            secret object containing sensitive information to pass
-                            to the CSI driver to complete the CSI NodePublishVolume
-                            and NodeUnpublishVolume calls. This field is optional,
-                            and  may be empty if no secret is required. If the secret
-                            object contains more than one secret, all secret references
-                            are passed.
-                          properties:
-                            name:
-                              description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                TODO: Add other useful fields. apiVersion, kind, uid?'
-                              type: string
-                          type: object
-                          x-kubernetes-map-type: atomic
-                        readOnly:
-                          description: readOnly specifies a read-only configuration
-                            for the volume. Defaults to false (read/write).
-                          type: boolean
-                        volumeAttributes:
-                          additionalProperties:
-                            type: string
-                          description: volumeAttributes stores driver-specific properties
-                            that are passed to the CSI driver. Consult your driver's
-                            documentation for supported values.
-                          type: object
-                      required:
-                      - driver
-                      type: object
-                    downwardAPI:
-                      description: downwardAPI represents downward API about the pod
-                        that should populate this volume
-                      properties:
-                        defaultMode:
-                          description: 'Optional: mode bits to use on created files
-                            by default. Must be a Optional: mode bits used to set
-                            permissions on created files by default. Must be an octal
-                            value between 0000 and 0777 or a decimal value between
-                            0 and 511. YAML accepts both octal and decimal values,
-                            JSON requires decimal values for mode bits. Defaults to
-                            0644. Directories within the path are not affected by
-                            this setting. This might be in conflict with other options
-                            that affect the file mode, like fsGroup, and the result
-                            can be other mode bits set.'
-                          format: int32
-                          type: integer
-                        items:
-                          description: Items is a list of downward API volume file
-                          items:
-                            description: DownwardAPIVolumeFile represents information
-                              to create the file containing the pod field
-                            properties:
-                              fieldRef:
-                                description: 'Required: Selects a field of the pod:
-                                  only annotations, labels, name and namespace are
-                                  supported.'
-                                properties:
-                                  apiVersion:
-                                    description: Version of the schema the FieldPath
-                                      is written in terms of, defaults to "v1".
-                                    type: string
-                                  fieldPath:
-                                    description: Path of the field to select in the
-                                      specified API version.
-                                    type: string
-                                required:
-                                - fieldPath
-                                type: object
-                                x-kubernetes-map-type: atomic
-                              mode:
-                                description: 'Optional: mode bits used to set permissions
-                                  on this file, must be an octal value between 0000
-                                  and 0777 or a decimal value between 0 and 511. YAML
-                                  accepts both octal and decimal values, JSON requires
-                                  decimal values for mode bits. If not specified,
-                                  the volume defaultMode will be used. This might
-                                  be in conflict with other options that affect the
-                                  file mode, like fsGroup, and the result can be other
-                                  mode bits set.'
-                                format: int32
-                                type: integer
-                              path:
-                                description: 'Required: Path is  the relative path
-                                  name of the file to be created. Must not be absolute
-                                  or contain the ''..'' path. Must be utf-8 encoded.
-                                  The first item of the relative path must not start
-                                  with ''..'''
-                                type: string
-                              resourceFieldRef:
-                                description: 'Selects a resource of the container:
-                                  only resources limits and requests (limits.cpu,
-                                  limits.memory, requests.cpu and requests.memory)
-                                  are currently supported.'
-                                properties:
-                                  containerName:
-                                    description: 'Container name: required for volumes,
-                                      optional for env vars'
-                                    type: string
-                                  divisor:
-                                    anyOf:
-                                    - type: integer
-                                    - type: string
-                                    description: Specifies the output format of the
-                                      exposed resources, defaults to "1"
-                                    pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
-                                    x-kubernetes-int-or-string: true
-                                  resource:
-                                    description: 'Required: resource to select'
-                                    type: string
-                                required:
-                                - resource
-                                type: object
-                                x-kubernetes-map-type: atomic
-                            required:
-                            - path
-                            type: object
-                          type: array
-                      type: object
-                    emptyDir:
-                      description: 'emptyDir represents a temporary directory that
-                        shares a pod''s lifetime. More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir'
-                      properties:
-                        medium:
-                          description: 'medium represents what type of storage medium
-                            should back this directory. The default is "" which means
-                            to use the node''s default medium. Must be an empty string
-                            (default) or Memory. More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir'
-                          type: string
-                        sizeLimit:
-                          anyOf:
-                          - type: integer
-                          - type: string
-                          description: 'sizeLimit is the total amount of local storage
-                            required for this EmptyDir volume. The size limit is also
-                            applicable for memory medium. The maximum usage on memory
-                            medium EmptyDir would be the minimum value between the
-                            SizeLimit specified here and the sum of memory limits
-                            of all containers in a pod. The default is nil which means
-                            that the limit is undefined. More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir'
-                          pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
-                          x-kubernetes-int-or-string: true
-                      type: object
-                    ephemeral:
-                      description: "ephemeral represents a volume that is handled
-                        by a cluster storage driver. The volume's lifecycle is tied
-                        to the pod that defines it - it will be created before the
-                        pod starts, and deleted when the pod is removed. \n Use this
-                        if: a) the volume is only needed while the pod runs, b) features
-                        of normal volumes like restoring from snapshot or capacity
-                        tracking are needed, c) the storage driver is specified through
-                        a storage class, and d) the storage driver supports dynamic
-                        volume provisioning through a PersistentVolumeClaim (see EphemeralVolumeSource
-                        for more information on the connection between this volume
-                        type and PersistentVolumeClaim). \n Use PersistentVolumeClaim
-                        or one of the vendor-specific APIs for volumes that persist
-                        for longer than the lifecycle of an individual pod. \n Use
-                        CSI for light-weight local ephemeral volumes if the CSI driver
-                        is meant to be used that way - see the documentation of the
-                        driver for more information. \n A pod can use both types of
-                        ephemeral volumes and persistent volumes at the same time."
-                      properties:
-                        volumeClaimTemplate:
-                          description: "Will be used to create a stand-alone PVC to
-                            provision the volume. The pod in which this EphemeralVolumeSource
-                            is embedded will be the owner of the PVC, i.e. the PVC
-                            will be deleted together with the pod.  The name of the
-                            PVC will be `<pod name>-<volume name>` where `<volume
-                            name>` is the name from the `PodSpec.Volumes` array entry.
-                            Pod validation will reject the pod if the concatenated
-                            name is not valid for a PVC (for example, too long). \n
-                            An existing PVC with that name that is not owned by the
-                            pod will *not* be used for the pod to avoid using an unrelated
-                            volume by mistake. Starting the pod is then blocked until
-                            the unrelated PVC is removed. If such a pre-created PVC
-                            is meant to be used by the pod, the PVC has to updated
-                            with an owner reference to the pod once the pod exists.
-                            Normally this should not be necessary, but it may be useful
-                            when manually reconstructing a broken cluster. \n This
-                            field is read-only and no changes will be made by Kubernetes
-                            to the PVC after it has been created. \n Required, must
-                            not be nil."
-                          properties:
-                            metadata:
-                              description: May contain labels and annotations that
-                                will be copied into the PVC when creating it. No other
-                                fields are allowed and will be rejected during validation.
-                              type: object
-                            spec:
-                              description: The specification for the PersistentVolumeClaim.
-                                The entire content is copied unchanged into the PVC
-                                that gets created from this template. The same fields
-                                as in a PersistentVolumeClaim are also valid here.
-                              properties:
-                                accessModes:
-                                  description: 'accessModes contains the desired access
-                                    modes the volume should have. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1'
-                                  items:
-                                    type: string
-                                  type: array
-                                dataSource:
-                                  description: 'dataSource field can be used to specify
-                                    either: * An existing VolumeSnapshot object (snapshot.storage.k8s.io/VolumeSnapshot)
-                                    * An existing PVC (PersistentVolumeClaim) If the
-                                    provisioner or an external controller can support
-                                    the specified data source, it will create a new
-                                    volume based on the contents of the specified
-                                    data source. When the AnyVolumeDataSource feature
-                                    gate is enabled, dataSource contents will be copied
-                                    to dataSourceRef, and dataSourceRef contents will
-                                    be copied to dataSource when dataSourceRef.namespace
-                                    is not specified. If the namespace is specified,
-                                    then dataSourceRef will not be copied to dataSource.'
-                                  properties:
-                                    apiGroup:
-                                      description: APIGroup is the group for the resource
-                                        being referenced. If APIGroup is not specified,
-                                        the specified Kind must be in the core API
-                                        group. For any other third-party types, APIGroup
-                                        is required.
-                                      type: string
-                                    kind:
-                                      description: Kind is the type of resource being
-                                        referenced
-                                      type: string
-                                    name:
-                                      description: Name is the name of resource being
-                                        referenced
-                                      type: string
-                                  required:
-                                  - kind
-                                  - name
-                                  type: object
-                                  x-kubernetes-map-type: atomic
-                                dataSourceRef:
-                                  description: 'dataSourceRef specifies the object
-                                    from which to populate the volume with data, if
-                                    a non-empty volume is desired. This may be any
-                                    object from a non-empty API group (non core object)
-                                    or a PersistentVolumeClaim object. When this field
-                                    is specified, volume binding will only succeed
-                                    if the type of the specified object matches some
-                                    installed volume populator or dynamic provisioner.
-                                    This field will replace the functionality of the
-                                    dataSource field and as such if both fields are
-                                    non-empty, they must have the same value. For
-                                    backwards compatibility, when namespace isn''t
-                                    specified in dataSourceRef, both fields (dataSource
-                                    and dataSourceRef) will be set to the same value
-                                    automatically if one of them is empty and the
-                                    other is non-empty. When namespace is specified
-                                    in dataSourceRef, dataSource isn''t set to the
-                                    same value and must be empty. There are three
-                                    important differences between dataSource and dataSourceRef:
-                                    * While dataSource only allows two specific types
-                                    of objects, dataSourceRef allows any non-core
-                                    object, as well as PersistentVolumeClaim objects.
-                                    * While dataSource ignores disallowed values (dropping
-                                    them), dataSourceRef preserves all values, and
-                                    generates an error if a disallowed value is specified.
-                                    * While dataSource only allows local objects,
-                                    dataSourceRef allows objects in any namespaces.
-                                    (Beta) Using this field requires the AnyVolumeDataSource
-                                    feature gate to be enabled. (Alpha) Using the
-                                    namespace field of dataSourceRef requires the
-                                    CrossNamespaceVolumeDataSource feature gate to
-                                    be enabled.'
-                                  properties:
-                                    apiGroup:
-                                      description: APIGroup is the group for the resource
-                                        being referenced. If APIGroup is not specified,
-                                        the specified Kind must be in the core API
-                                        group. For any other third-party types, APIGroup
-                                        is required.
-                                      type: string
-                                    kind:
-                                      description: Kind is the type of resource being
-                                        referenced
-                                      type: string
-                                    name:
-                                      description: Name is the name of resource being
-                                        referenced
-                                      type: string
-                                    namespace:
-                                      description: Namespace is the namespace of resource
-                                        being referenced Note that when a namespace
-                                        is specified, a gateway.networking.k8s.io/ReferenceGrant
-                                        object is required in the referent namespace
-                                        to allow that namespace's owner to accept
-                                        the reference. See the ReferenceGrant documentation
-                                        for details. (Alpha) This field requires the
-                                        CrossNamespaceVolumeDataSource feature gate
-                                        to be enabled.
-                                      type: string
-                                  required:
-                                  - kind
-                                  - name
-                                  type: object
-                                resources:
-                                  description: 'resources represents the minimum resources
-                                    the volume should have. If RecoverVolumeExpansionFailure
-                                    feature is enabled users are allowed to specify
-                                    resource requirements that are lower than previous
-                                    value but must still be higher than capacity recorded
-                                    in the status field of the claim. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources'
-                                  properties:
-                                    claims:
-                                      description: "Claims lists the names of resources,
-                                        defined in spec.resourceClaims, that are used
-                                        by this container. \n This is an alpha field
-                                        and requires enabling the DynamicResourceAllocation
-                                        feature gate. \n This field is immutable.
-                                        It can only be set for containers."
-                                      items:
-                                        description: ResourceClaim references one
-                                          entry in PodSpec.ResourceClaims.
-                                        properties:
-                                          name:
-                                            description: Name must match the name
-                                              of one entry in pod.spec.resourceClaims
-                                              of the Pod where this field is used.
-                                              It makes that resource available inside
-                                              a container.
-                                            type: string
-                                        required:
-                                        - name
-                                        type: object
-                                      type: array
-                                      x-kubernetes-list-map-keys:
-                                      - name
-                                      x-kubernetes-list-type: map
-                                    limits:
-                                      additionalProperties:
-                                        anyOf:
-                                        - type: integer
-                                        - type: string
-                                        pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
-                                        x-kubernetes-int-or-string: true
-                                      description: 'Limits describes the maximum amount
-                                        of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/'
-                                      type: object
-                                    requests:
-                                      additionalProperties:
-                                        anyOf:
-                                        - type: integer
-                                        - type: string
-                                        pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
-                                        x-kubernetes-int-or-string: true
-                                      description: 'Requests describes the minimum
-                                        amount of compute resources required. If Requests
-                                        is omitted for a container, it defaults to
-                                        Limits if that is explicitly specified, otherwise
-                                        to an implementation-defined value. Requests
-                                        cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/'
-                                      type: object
-                                  type: object
-                                selector:
-                                  description: selector is a label query over volumes
-                                    to consider for binding.
-                                  properties:
-                                    matchExpressions:
-                                      description: matchExpressions is a list of label
-                                        selector requirements. The requirements are
-                                        ANDed.
-                                      items:
-                                        description: A label selector requirement
-                                          is a selector that contains values, a key,
-                                          and an operator that relates the key and
-                                          values.
-                                        properties:
-                                          key:
-                                            description: key is the label key that
-                                              the selector applies to.
-                                            type: string
-                                          operator:
-                                            description: operator represents a key's
-                                              relationship to a set of values. Valid
-                                              operators are In, NotIn, Exists and
-                                              DoesNotExist.
-                                            type: string
-                                          values:
-                                            description: values is an array of string
-                                              values. If the operator is In or NotIn,
-                                              the values array must be non-empty.
-                                              If the operator is Exists or DoesNotExist,
-                                              the values array must be empty. This
-                                              array is replaced during a strategic
-                                              merge patch.
-                                            items:
-                                              type: string
-                                            type: array
-                                        required:
-                                        - key
-                                        - operator
-                                        type: object
-                                      type: array
-                                    matchLabels:
-                                      additionalProperties:
-                                        type: string
-                                      description: matchLabels is a map of {key,value}
-                                        pairs. A single {key,value} in the matchLabels
-                                        map is equivalent to an element of matchExpressions,
-                                        whose key field is "key", the operator is
-                                        "In", and the values array contains only "value".
-                                        The requirements are ANDed.
-                                      type: object
-                                  type: object
-                                  x-kubernetes-map-type: atomic
-                                storageClassName:
-                                  description: 'storageClassName is the name of the
-                                    StorageClass required by the claim. More info:
-                                    https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1'
-                                  type: string
-                                volumeMode:
-                                  description: volumeMode defines what type of volume
-                                    is required by the claim. Value of Filesystem
-                                    is implied when not included in claim spec.
-                                  type: string
-                                volumeName:
-                                  description: volumeName is the binding reference
-                                    to the PersistentVolume backing this claim.
-                                  type: string
-                              type: object
-                          required:
-                          - spec
-                          type: object
-                      type: object
-                    fc:
-                      description: fc represents a Fibre Channel resource that is
-                        attached to a kubelet's host machine and then exposed to the
-                        pod.
-                      properties:
-                        fsType:
-                          description: 'fsType is the filesystem type to mount. Must
-                            be a filesystem type supported by the host operating system.
-                            Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4"
-                            if unspecified. TODO: how do we prevent errors in the
-                            filesystem from compromising the machine'
-                          type: string
-                        lun:
-                          description: 'lun is Optional: FC target lun number'
-                          format: int32
-                          type: integer
-                        readOnly:
-                          description: 'readOnly is Optional: Defaults to false (read/write).
-                            ReadOnly here will force the ReadOnly setting in VolumeMounts.'
-                          type: boolean
-                        targetWWNs:
-                          description: 'targetWWNs is Optional: FC target worldwide
-                            names (WWNs)'
-                          items:
-                            type: string
-                          type: array
-                        wwids:
-                          description: 'wwids Optional: FC volume world wide identifiers
-                            (wwids) Either wwids or combination of targetWWNs and
-                            lun must be set, but not both simultaneously.'
-                          items:
-                            type: string
-                          type: array
-                      type: object
-                    flexVolume:
-                      description: flexVolume represents a generic volume resource
-                        that is provisioned/attached using an exec based plugin.
-                      properties:
-                        driver:
-                          description: driver is the name of the driver to use for
-                            this volume.
-                          type: string
-                        fsType:
-                          description: fsType is the filesystem type to mount. Must
-                            be a filesystem type supported by the host operating system.
-                            Ex. "ext4", "xfs", "ntfs". The default filesystem depends
-                            on FlexVolume script.
-                          type: string
-                        options:
-                          additionalProperties:
-                            type: string
-                          description: 'options is Optional: this field holds extra
-                            command options if any.'
-                          type: object
-                        readOnly:
-                          description: 'readOnly is Optional: defaults to false (read/write).
-                            ReadOnly here will force the ReadOnly setting in VolumeMounts.'
-                          type: boolean
-                        secretRef:
-                          description: 'secretRef is Optional: secretRef is reference
-                            to the secret object containing sensitive information
-                            to pass to the plugin scripts. This may be empty if no
-                            secret object is specified. If the secret object contains
-                            more than one secret, all secrets are passed to the plugin
-                            scripts.'
-                          properties:
-                            name:
-                              description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                TODO: Add other useful fields. apiVersion, kind, uid?'
-                              type: string
-                          type: object
-                          x-kubernetes-map-type: atomic
-                      required:
-                      - driver
-                      type: object
-                    flocker:
-                      description: flocker represents a Flocker volume attached to
-                        a kubelet's host machine. This depends on the Flocker control
-                        service being running
-                      properties:
-                        datasetName:
-                          description: datasetName is Name of the dataset stored as
-                            metadata -> name on the dataset for Flocker should be
-                            considered as deprecated
-                          type: string
-                        datasetUUID:
-                          description: datasetUUID is the UUID of the dataset. This
-                            is unique identifier of a Flocker dataset
-                          type: string
-                      type: object
-                    gcePersistentDisk:
-                      description: 'gcePersistentDisk represents a GCE Disk resource
-                        that is attached to a kubelet''s host machine and then exposed
-                        to the pod. More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk'
-                      properties:
-                        fsType:
-                          description: 'fsType is filesystem type of the volume that
-                            you want to mount. Tip: Ensure that the filesystem type
-                            is supported by the host operating system. Examples: "ext4",
-                            "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified.
-                            More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
-                            TODO: how do we prevent errors in the filesystem from
-                            compromising the machine'
-                          type: string
-                        partition:
-                          description: 'partition is the partition in the volume that
-                            you want to mount. If omitted, the default is to mount
-                            by volume name. Examples: For volume /dev/sda1, you specify
-                            the partition as "1". Similarly, the volume partition
-                            for /dev/sda is "0" (or you can leave the property empty).
-                            More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk'
-                          format: int32
-                          type: integer
-                        pdName:
-                          description: 'pdName is unique name of the PD resource in
-                            GCE. Used to identify the disk in GCE. More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk'
-                          type: string
-                        readOnly:
-                          description: 'readOnly here will force the ReadOnly setting
-                            in VolumeMounts. Defaults to false. More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk'
-                          type: boolean
-                      required:
-                      - pdName
-                      type: object
-                    gitRepo:
-                      description: 'gitRepo represents a git repository at a particular
-                        revision. DEPRECATED: GitRepo is deprecated. To provision
-                        a container with a git repo, mount an EmptyDir into an InitContainer
-                        that clones the repo using git, then mount the EmptyDir into
-                        the Pod''s container.'
-                      properties:
-                        directory:
-                          description: directory is the target directory name. Must
-                            not contain or start with '..'.  If '.' is supplied, the
-                            volume directory will be the git repository.  Otherwise,
-                            if specified, the volume will contain the git repository
-                            in the subdirectory with the given name.
-                          type: string
-                        repository:
-                          description: repository is the URL
-                          type: string
-                        revision:
-                          description: revision is the commit hash for the specified
-                            revision.
-                          type: string
-                      required:
-                      - repository
-                      type: object
-                    glusterfs:
-                      description: 'glusterfs represents a Glusterfs mount on the
-                        host that shares a pod''s lifetime. More info: https://examples.k8s.io/volumes/glusterfs/README.md'
-                      properties:
-                        endpoints:
-                          description: 'endpoints is the endpoint name that details
-                            Glusterfs topology. More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod'
-                          type: string
-                        path:
-                          description: 'path is the Glusterfs volume path. More info:
-                            https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod'
-                          type: string
-                        readOnly:
-                          description: 'readOnly here will force the Glusterfs volume
-                            to be mounted with read-only permissions. Defaults to
-                            false. More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod'
-                          type: boolean
-                      required:
-                      - endpoints
-                      - path
-                      type: object
-                    hostPath:
-                      description: 'hostPath represents a pre-existing file or directory
-                        on the host machine that is directly exposed to the container.
-                        This is generally used for system agents or other privileged
-                        things that are allowed to see the host machine. Most containers
-                        will NOT need this. More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath
-                        --- TODO(jonesdl) We need to restrict who can use host directory
-                        mounts and who can/can not mount host directories as read/write.'
-                      properties:
-                        path:
-                          description: 'path of the directory on the host. If the
-                            path is a symlink, it will follow the link to the real
-                            path. More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath'
-                          type: string
-                        type:
-                          description: 'type for HostPath Volume Defaults to "" More
-                            info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath'
-                          type: string
-                      required:
-                      - path
-                      type: object
-                    iscsi:
-                      description: 'iscsi represents an ISCSI Disk resource that is
-                        attached to a kubelet''s host machine and then exposed to
-                        the pod. More info: https://examples.k8s.io/volumes/iscsi/README.md'
-                      properties:
-                        chapAuthDiscovery:
-                          description: chapAuthDiscovery defines whether support iSCSI
-                            Discovery CHAP authentication
-                          type: boolean
-                        chapAuthSession:
-                          description: chapAuthSession defines whether support iSCSI
-                            Session CHAP authentication
-                          type: boolean
-                        fsType:
-                          description: 'fsType is the filesystem type of the volume
-                            that you want to mount. Tip: Ensure that the filesystem
-                            type is supported by the host operating system. Examples:
-                            "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4"
-                            if unspecified. More info: https://kubernetes.io/docs/concepts/storage/volumes#iscsi
-                            TODO: how do we prevent errors in the filesystem from
-                            compromising the machine'
-                          type: string
-                        initiatorName:
-                          description: initiatorName is the custom iSCSI Initiator
-                            Name. If initiatorName is specified with iscsiInterface
-                            simultaneously, new iSCSI interface <target portal>:<volume
-                            name> will be created for the connection.
-                          type: string
-                        iqn:
-                          description: iqn is the target iSCSI Qualified Name.
-                          type: string
-                        iscsiInterface:
-                          description: iscsiInterface is the interface Name that uses
-                            an iSCSI transport. Defaults to 'default' (tcp).
-                          type: string
-                        lun:
-                          description: lun represents iSCSI Target Lun number.
-                          format: int32
-                          type: integer
-                        portals:
-                          description: portals is the iSCSI Target Portal List. The
-                            portal is either an IP or ip_addr:port if the port is
-                            other than default (typically TCP ports 860 and 3260).
-                          items:
-                            type: string
-                          type: array
-                        readOnly:
-                          description: readOnly here will force the ReadOnly setting
-                            in VolumeMounts. Defaults to false.
-                          type: boolean
-                        secretRef:
-                          description: secretRef is the CHAP Secret for iSCSI target
-                            and initiator authentication
-                          properties:
-                            name:
-                              description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                TODO: Add other useful fields. apiVersion, kind, uid?'
-                              type: string
-                          type: object
-                          x-kubernetes-map-type: atomic
-                        targetPortal:
-                          description: targetPortal is iSCSI Target Portal. The Portal
-                            is either an IP or ip_addr:port if the port is other than
-                            default (typically TCP ports 860 and 3260).
-                          type: string
-                      required:
-                      - iqn
-                      - lun
-                      - targetPortal
-                      type: object
-                    name:
-                      description: 'name of the volume. Must be a DNS_LABEL and unique
-                        within the pod. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
-                      type: string
-                    nfs:
-                      description: 'nfs represents an NFS mount on the host that shares
-                        a pod''s lifetime More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs'
-                      properties:
-                        path:
-                          description: 'path that is exported by the NFS server. More
-                            info: https://kubernetes.io/docs/concepts/storage/volumes#nfs'
-                          type: string
-                        readOnly:
-                          description: 'readOnly here will force the NFS export to
-                            be mounted with read-only permissions. Defaults to false.
-                            More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs'
-                          type: boolean
-                        server:
-                          description: 'server is the hostname or IP address of the
-                            NFS server. More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs'
-                          type: string
-                      required:
-                      - path
-                      - server
-                      type: object
-                    persistentVolumeClaim:
-                      description: 'persistentVolumeClaimVolumeSource represents a
-                        reference to a PersistentVolumeClaim in the same namespace.
-                        More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims'
-                      properties:
-                        claimName:
-                          description: 'claimName is the name of a PersistentVolumeClaim
-                            in the same namespace as the pod using this volume. More
-                            info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims'
-                          type: string
-                        readOnly:
-                          description: readOnly Will force the ReadOnly setting in
-                            VolumeMounts. Default false.
-                          type: boolean
-                      required:
-                      - claimName
-                      type: object
-                    photonPersistentDisk:
-                      description: photonPersistentDisk represents a PhotonController
-                        persistent disk attached and mounted on kubelets host machine
-                      properties:
-                        fsType:
-                          description: fsType is the filesystem type to mount. Must
-                            be a filesystem type supported by the host operating system.
-                            Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4"
-                            if unspecified.
-                          type: string
-                        pdID:
-                          description: pdID is the ID that identifies Photon Controller
-                            persistent disk
-                          type: string
-                      required:
-                      - pdID
-                      type: object
-                    portworxVolume:
-                      description: portworxVolume represents a portworx volume attached
-                        and mounted on kubelets host machine
-                      properties:
-                        fsType:
-                          description: fSType represents the filesystem type to mount
-                            Must be a filesystem type supported by the host operating
-                            system. Ex. "ext4", "xfs". Implicitly inferred to be "ext4"
-                            if unspecified.
-                          type: string
-                        readOnly:
-                          description: readOnly defaults to false (read/write). ReadOnly
-                            here will force the ReadOnly setting in VolumeMounts.
-                          type: boolean
-                        volumeID:
-                          description: volumeID uniquely identifies a Portworx volume
-                          type: string
-                      required:
-                      - volumeID
-                      type: object
-                    projected:
-                      description: projected items for all in one resources secrets,
-                        configmaps, and downward API
-                      properties:
-                        defaultMode:
-                          description: defaultMode are the mode bits used to set permissions
-                            on created files by default. Must be an octal value between
-                            0000 and 0777 or a decimal value between 0 and 511. YAML
-                            accepts both octal and decimal values, JSON requires decimal
-                            values for mode bits. Directories within the path are
-                            not affected by this setting. This might be in conflict
-                            with other options that affect the file mode, like fsGroup,
-                            and the result can be other mode bits set.
-                          format: int32
-                          type: integer
-                        sources:
-                          description: sources is the list of volume projections
-                          items:
-                            description: Projection that may be projected along with
-                              other supported volume types
-                            properties:
-                              configMap:
-                                description: configMap information about the configMap
-                                  data to project
-                                properties:
-                                  items:
-                                    description: items if unspecified, each key-value
-                                      pair in the Data field of the referenced ConfigMap
-                                      will be projected into the volume as a file
-                                      whose name is the key and content is the value.
-                                      If specified, the listed keys will be projected
-                                      into the specified paths, and unlisted keys
-                                      will not be present. If a key is specified which
-                                      is not present in the ConfigMap, the volume
-                                      setup will error unless it is marked optional.
-                                      Paths must be relative and may not contain the
-                                      '..' path or start with '..'.
-                                    items:
-                                      description: Maps a string key to a path within
-                                        a volume.
-                                      properties:
-                                        key:
-                                          description: key is the key to project.
-                                          type: string
-                                        mode:
-                                          description: 'mode is Optional: mode bits
-                                            used to set permissions on this file.
-                                            Must be an octal value between 0000 and
-                                            0777 or a decimal value between 0 and
-                                            511. YAML accepts both octal and decimal
-                                            values, JSON requires decimal values for
-                                            mode bits. If not specified, the volume
-                                            defaultMode will be used. This might be
-                                            in conflict with other options that affect
-                                            the file mode, like fsGroup, and the result
-                                            can be other mode bits set.'
-                                          format: int32
-                                          type: integer
-                                        path:
-                                          description: path is the relative path of
-                                            the file to map the key to. May not be
-                                            an absolute path. May not contain the
-                                            path element '..'. May not start with
-                                            the string '..'.
-                                          type: string
-                                      required:
-                                      - key
-                                      - path
-                                      type: object
-                                    type: array
-                                  name:
-                                    description: 'Name of the referent. More info:
-                                      https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                      TODO: Add other useful fields. apiVersion, kind,
-                                      uid?'
-                                    type: string
-                                  optional:
-                                    description: optional specify whether the ConfigMap
-                                      or its keys must be defined
-                                    type: boolean
-                                type: object
-                                x-kubernetes-map-type: atomic
-                              downwardAPI:
-                                description: downwardAPI information about the downwardAPI
-                                  data to project
-                                properties:
-                                  items:
-                                    description: Items is a list of DownwardAPIVolume
-                                      file
-                                    items:
-                                      description: DownwardAPIVolumeFile represents
-                                        information to create the file containing
-                                        the pod field
-                                      properties:
-                                        fieldRef:
-                                          description: 'Required: Selects a field
-                                            of the pod: only annotations, labels,
-                                            name and namespace are supported.'
-                                          properties:
-                                            apiVersion:
-                                              description: Version of the schema the
-                                                FieldPath is written in terms of,
-                                                defaults to "v1".
-                                              type: string
-                                            fieldPath:
-                                              description: Path of the field to select
-                                                in the specified API version.
-                                              type: string
-                                          required:
-                                          - fieldPath
-                                          type: object
-                                          x-kubernetes-map-type: atomic
-                                        mode:
-                                          description: 'Optional: mode bits used to
-                                            set permissions on this file, must be
-                                            an octal value between 0000 and 0777 or
-                                            a decimal value between 0 and 511. YAML
-                                            accepts both octal and decimal values,
-                                            JSON requires decimal values for mode
-                                            bits. If not specified, the volume defaultMode
-                                            will be used. This might be in conflict
-                                            with other options that affect the file
-                                            mode, like fsGroup, and the result can
-                                            be other mode bits set.'
-                                          format: int32
-                                          type: integer
-                                        path:
-                                          description: 'Required: Path is  the relative
-                                            path name of the file to be created. Must
-                                            not be absolute or contain the ''..''
-                                            path. Must be utf-8 encoded. The first
-                                            item of the relative path must not start
-                                            with ''..'''
-                                          type: string
-                                        resourceFieldRef:
-                                          description: 'Selects a resource of the
-                                            container: only resources limits and requests
-                                            (limits.cpu, limits.memory, requests.cpu
-                                            and requests.memory) are currently supported.'
-                                          properties:
-                                            containerName:
-                                              description: 'Container name: required
-                                                for volumes, optional for env vars'
-                                              type: string
-                                            divisor:
-                                              anyOf:
-                                              - type: integer
-                                              - type: string
-                                              description: Specifies the output format
-                                                of the exposed resources, defaults
-                                                to "1"
-                                              pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
-                                              x-kubernetes-int-or-string: true
-                                            resource:
-                                              description: 'Required: resource to
-                                                select'
-                                              type: string
-                                          required:
-                                          - resource
-                                          type: object
-                                          x-kubernetes-map-type: atomic
-                                      required:
-                                      - path
-                                      type: object
-                                    type: array
-                                type: object
-                              secret:
-                                description: secret information about the secret data
-                                  to project
-                                properties:
-                                  items:
-                                    description: items if unspecified, each key-value
-                                      pair in the Data field of the referenced Secret
-                                      will be projected into the volume as a file
-                                      whose name is the key and content is the value.
-                                      If specified, the listed keys will be projected
-                                      into the specified paths, and unlisted keys
-                                      will not be present. If a key is specified which
-                                      is not present in the Secret, the volume setup
-                                      will error unless it is marked optional. Paths
-                                      must be relative and may not contain the '..'
-                                      path or start with '..'.
-                                    items:
-                                      description: Maps a string key to a path within
-                                        a volume.
-                                      properties:
-                                        key:
-                                          description: key is the key to project.
-                                          type: string
-                                        mode:
-                                          description: 'mode is Optional: mode bits
-                                            used to set permissions on this file.
-                                            Must be an octal value between 0000 and
-                                            0777 or a decimal value between 0 and
-                                            511. YAML accepts both octal and decimal
-                                            values, JSON requires decimal values for
-                                            mode bits. If not specified, the volume
-                                            defaultMode will be used. This might be
-                                            in conflict with other options that affect
-                                            the file mode, like fsGroup, and the result
-                                            can be other mode bits set.'
-                                          format: int32
-                                          type: integer
-                                        path:
-                                          description: path is the relative path of
-                                            the file to map the key to. May not be
-                                            an absolute path. May not contain the
-                                            path element '..'. May not start with
-                                            the string '..'.
-                                          type: string
-                                      required:
-                                      - key
-                                      - path
-                                      type: object
-                                    type: array
-                                  name:
-                                    description: 'Name of the referent. More info:
-                                      https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                      TODO: Add other useful fields. apiVersion, kind,
-                                      uid?'
-                                    type: string
-                                  optional:
-                                    description: optional field specify whether the
-                                      Secret or its key must be defined
-                                    type: boolean
-                                type: object
-                                x-kubernetes-map-type: atomic
-                              serviceAccountToken:
-                                description: serviceAccountToken is information about
-                                  the serviceAccountToken data to project
-                                properties:
-                                  audience:
-                                    description: audience is the intended audience
-                                      of the token. A recipient of a token must identify
-                                      itself with an identifier specified in the audience
-                                      of the token, and otherwise should reject the
-                                      token. The audience defaults to the identifier
-                                      of the apiserver.
-                                    type: string
-                                  expirationSeconds:
-                                    description: expirationSeconds is the requested
-                                      duration of validity of the service account
-                                      token. As the token approaches expiration, the
-                                      kubelet volume plugin will proactively rotate
-                                      the service account token. The kubelet will
-                                      start trying to rotate the token if the token
-                                      is older than 80 percent of its time to live
-                                      or if the token is older than 24 hours.Defaults
-                                      to 1 hour and must be at least 10 minutes.
-                                    format: int64
-                                    type: integer
-                                  path:
-                                    description: path is the path relative to the
-                                      mount point of the file to project the token
-                                      into.
-                                    type: string
-                                required:
-                                - path
-                                type: object
-                            type: object
-                          type: array
-                      type: object
-                    quobyte:
-                      description: quobyte represents a Quobyte mount on the host
-                        that shares a pod's lifetime
-                      properties:
-                        group:
-                          description: group to map volume access to Default is no
-                            group
-                          type: string
-                        readOnly:
-                          description: readOnly here will force the Quobyte volume
-                            to be mounted with read-only permissions. Defaults to
-                            false.
-                          type: boolean
-                        registry:
-                          description: registry represents a single or multiple Quobyte
-                            Registry services specified as a string as host:port pair
-                            (multiple entries are separated with commas) which acts
-                            as the central registry for volumes
-                          type: string
-                        tenant:
-                          description: tenant owning the given Quobyte volume in the
-                            Backend Used with dynamically provisioned Quobyte volumes,
-                            value is set by the plugin
-                          type: string
-                        user:
-                          description: user to map volume access to Defaults to serivceaccount
-                            user
-                          type: string
-                        volume:
-                          description: volume is a string that references an already
-                            created Quobyte volume by name.
-                          type: string
-                      required:
-                      - registry
-                      - volume
-                      type: object
-                    rbd:
-                      description: 'rbd represents a Rados Block Device mount on the
-                        host that shares a pod''s lifetime. More info: https://examples.k8s.io/volumes/rbd/README.md'
-                      properties:
-                        fsType:
-                          description: 'fsType is the filesystem type of the volume
-                            that you want to mount. Tip: Ensure that the filesystem
-                            type is supported by the host operating system. Examples:
-                            "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4"
-                            if unspecified. More info: https://kubernetes.io/docs/concepts/storage/volumes#rbd
-                            TODO: how do we prevent errors in the filesystem from
-                            compromising the machine'
-                          type: string
-                        image:
-                          description: 'image is the rados image name. More info:
-                            https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it'
-                          type: string
-                        keyring:
-                          description: 'keyring is the path to key ring for RBDUser.
-                            Default is /etc/ceph/keyring. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it'
-                          type: string
-                        monitors:
-                          description: 'monitors is a collection of Ceph monitors.
-                            More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it'
-                          items:
-                            type: string
-                          type: array
-                        pool:
-                          description: 'pool is the rados pool name. Default is rbd.
-                            More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it'
-                          type: string
-                        readOnly:
-                          description: 'readOnly here will force the ReadOnly setting
-                            in VolumeMounts. Defaults to false. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it'
-                          type: boolean
-                        secretRef:
-                          description: 'secretRef is name of the authentication secret
-                            for RBDUser. If provided overrides keyring. Default is
-                            nil. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it'
-                          properties:
-                            name:
-                              description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                TODO: Add other useful fields. apiVersion, kind, uid?'
-                              type: string
-                          type: object
-                          x-kubernetes-map-type: atomic
-                        user:
-                          description: 'user is the rados user name. Default is admin.
-                            More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it'
-                          type: string
-                      required:
-                      - image
-                      - monitors
-                      type: object
-                    scaleIO:
-                      description: scaleIO represents a ScaleIO persistent volume
-                        attached and mounted on Kubernetes nodes.
-                      properties:
-                        fsType:
-                          description: fsType is the filesystem type to mount. Must
-                            be a filesystem type supported by the host operating system.
-                            Ex. "ext4", "xfs", "ntfs". Default is "xfs".
-                          type: string
-                        gateway:
-                          description: gateway is the host address of the ScaleIO
-                            API Gateway.
-                          type: string
-                        protectionDomain:
-                          description: protectionDomain is the name of the ScaleIO
-                            Protection Domain for the configured storage.
-                          type: string
-                        readOnly:
-                          description: readOnly Defaults to false (read/write). ReadOnly
-                            here will force the ReadOnly setting in VolumeMounts.
-                          type: boolean
-                        secretRef:
-                          description: secretRef references to the secret for ScaleIO
-                            user and other sensitive information. If this is not provided,
-                            Login operation will fail.
-                          properties:
-                            name:
-                              description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                TODO: Add other useful fields. apiVersion, kind, uid?'
-                              type: string
-                          type: object
-                          x-kubernetes-map-type: atomic
-                        sslEnabled:
-                          description: sslEnabled Flag enable/disable SSL communication
-                            with Gateway, default false
-                          type: boolean
-                        storageMode:
-                          description: storageMode indicates whether the storage for
-                            a volume should be ThickProvisioned or ThinProvisioned.
-                            Default is ThinProvisioned.
-                          type: string
-                        storagePool:
-                          description: storagePool is the ScaleIO Storage Pool associated
-                            with the protection domain.
-                          type: string
-                        system:
-                          description: system is the name of the storage system as
-                            configured in ScaleIO.
-                          type: string
-                        volumeName:
-                          description: volumeName is the name of a volume already
-                            created in the ScaleIO system that is associated with
-                            this volume source.
-                          type: string
-                      required:
-                      - gateway
-                      - secretRef
-                      - system
-                      type: object
-                    secret:
-                      description: 'secret represents a secret that should populate
-                        this volume. More info: https://kubernetes.io/docs/concepts/storage/volumes#secret'
-                      properties:
-                        defaultMode:
-                          description: 'defaultMode is Optional: mode bits used to
-                            set permissions on created files by default. Must be an
-                            octal value between 0000 and 0777 or a decimal value between
-                            0 and 511. YAML accepts both octal and decimal values,
-                            JSON requires decimal values for mode bits. Defaults to
-                            0644. Directories within the path are not affected by
-                            this setting. This might be in conflict with other options
-                            that affect the file mode, like fsGroup, and the result
-                            can be other mode bits set.'
-                          format: int32
-                          type: integer
-                        items:
-                          description: items If unspecified, each key-value pair in
-                            the Data field of the referenced Secret will be projected
-                            into the volume as a file whose name is the key and content
-                            is the value. If specified, the listed keys will be projected
-                            into the specified paths, and unlisted keys will not be
-                            present. If a key is specified which is not present in
-                            the Secret, the volume setup will error unless it is marked
-                            optional. Paths must be relative and may not contain the
-                            '..' path or start with '..'.
-                          items:
-                            description: Maps a string key to a path within a volume.
-                            properties:
-                              key:
-                                description: key is the key to project.
-                                type: string
-                              mode:
-                                description: 'mode is Optional: mode bits used to
-                                  set permissions on this file. Must be an octal value
-                                  between 0000 and 0777 or a decimal value between
-                                  0 and 511. YAML accepts both octal and decimal values,
-                                  JSON requires decimal values for mode bits. If not
-                                  specified, the volume defaultMode will be used.
-                                  This might be in conflict with other options that
-                                  affect the file mode, like fsGroup, and the result
-                                  can be other mode bits set.'
-                                format: int32
-                                type: integer
-                              path:
-                                description: path is the relative path of the file
-                                  to map the key to. May not be an absolute path.
-                                  May not contain the path element '..'. May not start
-                                  with the string '..'.
-                                type: string
-                            required:
-                            - key
-                            - path
-                            type: object
-                          type: array
-                        optional:
-                          description: optional field specify whether the Secret or
-                            its keys must be defined
-                          type: boolean
-                        secretName:
-                          description: 'secretName is the name of the secret in the
-                            pod''s namespace to use. More info: https://kubernetes.io/docs/concepts/storage/volumes#secret'
-                          type: string
-                      type: object
-                    storageos:
-                      description: storageOS represents a StorageOS volume attached
-                        and mounted on Kubernetes nodes.
-                      properties:
-                        fsType:
-                          description: fsType is the filesystem type to mount. Must
-                            be a filesystem type supported by the host operating system.
-                            Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4"
-                            if unspecified.
-                          type: string
-                        readOnly:
-                          description: readOnly defaults to false (read/write). ReadOnly
-                            here will force the ReadOnly setting in VolumeMounts.
-                          type: boolean
-                        secretRef:
-                          description: secretRef specifies the secret to use for obtaining
-                            the StorageOS API credentials.  If not specified, default
-                            values will be attempted.
-                          properties:
-                            name:
-                              description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                TODO: Add other useful fields. apiVersion, kind, uid?'
-                              type: string
-                          type: object
-                          x-kubernetes-map-type: atomic
-                        volumeName:
-                          description: volumeName is the human-readable name of the
-                            StorageOS volume.  Volume names are only unique within
-                            a namespace.
-                          type: string
-                        volumeNamespace:
-                          description: volumeNamespace specifies the scope of the
-                            volume within StorageOS.  If no namespace is specified
-                            then the Pod's namespace will be used.  This allows the
-                            Kubernetes name scoping to be mirrored within StorageOS
-                            for tighter integration. Set VolumeName to any name to
-                            override the default behaviour. Set to "default" if you
-                            are not using namespaces within StorageOS. Namespaces
-                            that do not pre-exist within StorageOS will be created.
-                          type: string
-                      type: object
-                    vsphereVolume:
-                      description: vsphereVolume represents a vSphere volume attached
-                        and mounted on kubelets host machine
-                      properties:
-                        fsType:
-                          description: fsType is filesystem type to mount. Must be
-                            a filesystem type supported by the host operating system.
-                            Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4"
-                            if unspecified.
-                          type: string
-                        storagePolicyID:
-                          description: storagePolicyID is the storage Policy Based
-                            Management (SPBM) profile ID associated with the StoragePolicyName.
-                          type: string
-                        storagePolicyName:
-                          description: storagePolicyName is the storage Policy Based
-                            Management (SPBM) profile name.
-                          type: string
-                        volumePath:
-                          description: volumePath is the path that identifies vSphere
-                            volume vmdk
-                          type: string
-                      required:
-                      - volumePath
-                      type: object
-                  required:
-                  - name
-                  type: object
-                type: array
-            type: object
-        type: object
-    served: true
-    storage: true
diff --git a/production/operator/crds/monitoring.grafana.com_integrations.yaml b/production/operator/crds/monitoring.grafana.com_integrations.yaml
deleted file mode 100644
index e786166447fd..000000000000
--- a/production/operator/crds/monitoring.grafana.com_integrations.yaml
+++ /dev/null
@@ -1,1738 +0,0 @@
----
-apiVersion: apiextensions.k8s.io/v1
-kind: CustomResourceDefinition
-metadata:
-  annotations:
-    controller-gen.kubebuilder.io/version: v0.9.2
-  creationTimestamp: null
-  name: integrations.monitoring.grafana.com
-spec:
-  group: monitoring.grafana.com
-  names:
-    categories:
-    - agent-operator
-    kind: Integration
-    listKind: IntegrationList
-    plural: integrations
-    singular: integration
-  scope: Namespaced
-  versions:
-  - name: v1alpha1
-    schema:
-      openAPIV3Schema:
-        description: "Integration runs a single Grafana Agent integration. Integrations
-          that generate telemetry must be configured to send that telemetry somewhere,
-          such as autoscrape for exporter-based integrations. \n Integrations have
-          access to the LogsInstances and MetricsInstances in the same GrafanaAgent
-          resource set, referenced by the <namespace>/<name> of the Instance resource.
-          \n For example, if there is a default/production MetricsInstance, you can
-          configure a supported integration's autoscrape block with: \n autoscrape:
-          enable: true metrics_instance: default/production \n There is currently
-          no way for telemetry created by an Operator-managed integration to be collected
-          from outside of the integration itself."
-        properties:
-          apiVersion:
-            description: 'APIVersion defines the versioned schema of this representation
-              of an object. Servers should convert recognized schemas to the latest
-              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
-            type: string
-          kind:
-            description: 'Kind is a string value representing the REST resource this
-              object represents. Servers may infer this from the endpoint the client
-              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
-            type: string
-          metadata:
-            type: object
-          spec:
-            description: Specifies the desired behavior of the Integration.
-            properties:
-              config:
-                description: "The configuration for the named integration. Note that
-                  Integrations are deployed with the integrations-next feature flag,
-                  which has different common settings: \n https://grafana.com/docs/agent/latest/configuration/integrations/integrations-next/"
-                type: object
-                x-kubernetes-preserve-unknown-fields: true
-              configMaps:
-                description: "An extra list of keys from ConfigMaps in the same namespace
-                  as the Integration which will be mounted into the Grafana Agent
-                  pod running this Integration. \n ConfigMaps are mounted at /etc/grafana-agent/integrations/configMaps/<configmap_namespace>/<configmap_name>/<key>."
-                items:
-                  description: Selects a key from a ConfigMap.
-                  properties:
-                    key:
-                      description: The key to select.
-                      type: string
-                    name:
-                      description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                        TODO: Add other useful fields. apiVersion, kind, uid?'
-                      type: string
-                    optional:
-                      description: Specify whether the ConfigMap or its key must be
-                        defined
-                      type: boolean
-                  required:
-                  - key
-                  type: object
-                  x-kubernetes-map-type: atomic
-                type: array
-              name:
-                description: Name of the integration to run (e.g., "node_exporter",
-                  "mysqld_exporter").
-                type: string
-              secrets:
-                description: "An extra list of keys from Secrets in the same namespace
-                  as the Integration which will be mounted into the Grafana Agent
-                  pod running this Integration. \n Secrets will be mounted at /etc/grafana-agent/integrations/secrets/<secret_namespace>/<secret_name>/<key>."
-                items:
-                  description: SecretKeySelector selects a key of a Secret.
-                  properties:
-                    key:
-                      description: The key of the secret to select from.  Must be
-                        a valid secret key.
-                      type: string
-                    name:
-                      description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                        TODO: Add other useful fields. apiVersion, kind, uid?'
-                      type: string
-                    optional:
-                      description: Specify whether the Secret or its key must be defined
-                      type: boolean
-                  required:
-                  - key
-                  type: object
-                  x-kubernetes-map-type: atomic
-                type: array
-              type:
-                description: Type informs Grafana Agent Operator about how to manage
-                  the integration being configured.
-                properties:
-                  allNodes:
-                    description: When true, the configured integration should be run
-                      on every Node in the cluster. This is required for Integrations
-                      that generate Node-specific metrics like node_exporter, otherwise
-                      it must be false to avoid generating duplicate metrics.
-                    type: boolean
-                  unique:
-                    description: Whether this integration can only be defined once
-                      for a Grafana Agent process, such as statsd_exporter. It is
-                      invalid for a GrafanaAgent to discover multiple unique Integrations
-                      with the same Integration name (i.e., a single GrafanaAgent
-                      cannot deploy two statsd_exporters).
-                    type: boolean
-                type: object
-              volumeMounts:
-                description: "An extra list of VolumeMounts to be associated with
-                  the Grafana Agent pods running this integration. VolumeMount names
-                  are mutated to be unique across all used IntegrationSpecs. \n Mount
-                  paths should include the namespace/name of the Integration CR to
-                  avoid potentially colliding with other resources."
-                items:
-                  description: VolumeMount describes a mounting of a Volume within
-                    a container.
-                  properties:
-                    mountPath:
-                      description: Path within the container at which the volume should
-                        be mounted.  Must not contain ':'.
-                      type: string
-                    mountPropagation:
-                      description: mountPropagation determines how mounts are propagated
-                        from the host to container and the other way around. When
-                        not set, MountPropagationNone is used. This field is beta
-                        in 1.10.
-                      type: string
-                    name:
-                      description: This must match the Name of a Volume.
-                      type: string
-                    readOnly:
-                      description: Mounted read-only if true, read-write otherwise
-                        (false or unspecified). Defaults to false.
-                      type: boolean
-                    subPath:
-                      description: Path within the volume from which the container's
-                        volume should be mounted. Defaults to "" (volume's root).
-                      type: string
-                    subPathExpr:
-                      description: Expanded path within the volume from which the
-                        container's volume should be mounted. Behaves similarly to
-                        SubPath but environment variable references $(VAR_NAME) are
-                        expanded using the container's environment. Defaults to ""
-                        (volume's root). SubPathExpr and SubPath are mutually exclusive.
-                      type: string
-                  required:
-                  - mountPath
-                  - name
-                  type: object
-                type: array
-              volumes:
-                description: "An extra list of Volumes to be associated with the Grafana
-                  Agent pods running this integration. Volume names are mutated to
-                  be unique across all Integrations. Note that the specified volumes
-                  should be able to tolerate existing on multiple pods at once when
-                  type is daemonset. \n Don't use volumes for loading Secrets or ConfigMaps
-                  from the same namespace as the Integration; use the Secrets and
-                  ConfigMaps fields instead."
-                items:
-                  description: Volume represents a named volume in a pod that may
-                    be accessed by any container in the pod.
-                  properties:
-                    awsElasticBlockStore:
-                      description: 'awsElasticBlockStore represents an AWS Disk resource
-                        that is attached to a kubelet''s host machine and then exposed
-                        to the pod. More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore'
-                      properties:
-                        fsType:
-                          description: 'fsType is the filesystem type of the volume
-                            that you want to mount. Tip: Ensure that the filesystem
-                            type is supported by the host operating system. Examples:
-                            "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4"
-                            if unspecified. More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore
-                            TODO: how do we prevent errors in the filesystem from
-                            compromising the machine'
-                          type: string
-                        partition:
-                          description: 'partition is the partition in the volume that
-                            you want to mount. If omitted, the default is to mount
-                            by volume name. Examples: For volume /dev/sda1, you specify
-                            the partition as "1". Similarly, the volume partition
-                            for /dev/sda is "0" (or you can leave the property empty).'
-                          format: int32
-                          type: integer
-                        readOnly:
-                          description: 'readOnly value true will force the readOnly
-                            setting in VolumeMounts. More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore'
-                          type: boolean
-                        volumeID:
-                          description: 'volumeID is unique ID of the persistent disk
-                            resource in AWS (Amazon EBS volume). More info: https://kubernetes.io/docs/concepts/storage/volumes#awselasticblockstore'
-                          type: string
-                      required:
-                      - volumeID
-                      type: object
-                    azureDisk:
-                      description: azureDisk represents an Azure Data Disk mount on
-                        the host and bind mount to the pod.
-                      properties:
-                        cachingMode:
-                          description: 'cachingMode is the Host Caching mode: None,
-                            Read Only, Read Write.'
-                          type: string
-                        diskName:
-                          description: diskName is the Name of the data disk in the
-                            blob storage
-                          type: string
-                        diskURI:
-                          description: diskURI is the URI of data disk in the blob
-                            storage
-                          type: string
-                        fsType:
-                          description: fsType is Filesystem type to mount. Must be
-                            a filesystem type supported by the host operating system.
-                            Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4"
-                            if unspecified.
-                          type: string
-                        kind:
-                          description: 'kind expected values are Shared: multiple
-                            blob disks per storage account  Dedicated: single blob
-                            disk per storage account  Managed: azure managed data
-                            disk (only in managed availability set). defaults to shared'
-                          type: string
-                        readOnly:
-                          description: readOnly Defaults to false (read/write). ReadOnly
-                            here will force the ReadOnly setting in VolumeMounts.
-                          type: boolean
-                      required:
-                      - diskName
-                      - diskURI
-                      type: object
-                    azureFile:
-                      description: azureFile represents an Azure File Service mount
-                        on the host and bind mount to the pod.
-                      properties:
-                        readOnly:
-                          description: readOnly defaults to false (read/write). ReadOnly
-                            here will force the ReadOnly setting in VolumeMounts.
-                          type: boolean
-                        secretName:
-                          description: secretName is the  name of secret that contains
-                            Azure Storage Account Name and Key
-                          type: string
-                        shareName:
-                          description: shareName is the azure share Name
-                          type: string
-                      required:
-                      - secretName
-                      - shareName
-                      type: object
-                    cephfs:
-                      description: cephFS represents a Ceph FS mount on the host that
-                        shares a pod's lifetime
-                      properties:
-                        monitors:
-                          description: 'monitors is Required: Monitors is a collection
-                            of Ceph monitors More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it'
-                          items:
-                            type: string
-                          type: array
-                        path:
-                          description: 'path is Optional: Used as the mounted root,
-                            rather than the full Ceph tree, default is /'
-                          type: string
-                        readOnly:
-                          description: 'readOnly is Optional: Defaults to false (read/write).
-                            ReadOnly here will force the ReadOnly setting in VolumeMounts.
-                            More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it'
-                          type: boolean
-                        secretFile:
-                          description: 'secretFile is Optional: SecretFile is the
-                            path to key ring for User, default is /etc/ceph/user.secret
-                            More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it'
-                          type: string
-                        secretRef:
-                          description: 'secretRef is Optional: SecretRef is reference
-                            to the authentication secret for User, default is empty.
-                            More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it'
-                          properties:
-                            name:
-                              description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                TODO: Add other useful fields. apiVersion, kind, uid?'
-                              type: string
-                          type: object
-                          x-kubernetes-map-type: atomic
-                        user:
-                          description: 'user is optional: User is the rados user name,
-                            default is admin More info: https://examples.k8s.io/volumes/cephfs/README.md#how-to-use-it'
-                          type: string
-                      required:
-                      - monitors
-                      type: object
-                    cinder:
-                      description: 'cinder represents a cinder volume attached and
-                        mounted on kubelets host machine. More info: https://examples.k8s.io/mysql-cinder-pd/README.md'
-                      properties:
-                        fsType:
-                          description: 'fsType is the filesystem type to mount. Must
-                            be a filesystem type supported by the host operating system.
-                            Examples: "ext4", "xfs", "ntfs". Implicitly inferred to
-                            be "ext4" if unspecified. More info: https://examples.k8s.io/mysql-cinder-pd/README.md'
-                          type: string
-                        readOnly:
-                          description: 'readOnly defaults to false (read/write). ReadOnly
-                            here will force the ReadOnly setting in VolumeMounts.
-                            More info: https://examples.k8s.io/mysql-cinder-pd/README.md'
-                          type: boolean
-                        secretRef:
-                          description: 'secretRef is optional: points to a secret
-                            object containing parameters used to connect to OpenStack.'
-                          properties:
-                            name:
-                              description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                TODO: Add other useful fields. apiVersion, kind, uid?'
-                              type: string
-                          type: object
-                          x-kubernetes-map-type: atomic
-                        volumeID:
-                          description: 'volumeID used to identify the volume in cinder.
-                            More info: https://examples.k8s.io/mysql-cinder-pd/README.md'
-                          type: string
-                      required:
-                      - volumeID
-                      type: object
-                    configMap:
-                      description: configMap represents a configMap that should populate
-                        this volume
-                      properties:
-                        defaultMode:
-                          description: 'defaultMode is optional: mode bits used to
-                            set permissions on created files by default. Must be an
-                            octal value between 0000 and 0777 or a decimal value between
-                            0 and 511. YAML accepts both octal and decimal values,
-                            JSON requires decimal values for mode bits. Defaults to
-                            0644. Directories within the path are not affected by
-                            this setting. This might be in conflict with other options
-                            that affect the file mode, like fsGroup, and the result
-                            can be other mode bits set.'
-                          format: int32
-                          type: integer
-                        items:
-                          description: items if unspecified, each key-value pair in
-                            the Data field of the referenced ConfigMap will be projected
-                            into the volume as a file whose name is the key and content
-                            is the value. If specified, the listed keys will be projected
-                            into the specified paths, and unlisted keys will not be
-                            present. If a key is specified which is not present in
-                            the ConfigMap, the volume setup will error unless it is
-                            marked optional. Paths must be relative and may not contain
-                            the '..' path or start with '..'.
-                          items:
-                            description: Maps a string key to a path within a volume.
-                            properties:
-                              key:
-                                description: key is the key to project.
-                                type: string
-                              mode:
-                                description: 'mode is Optional: mode bits used to
-                                  set permissions on this file. Must be an octal value
-                                  between 0000 and 0777 or a decimal value between
-                                  0 and 511. YAML accepts both octal and decimal values,
-                                  JSON requires decimal values for mode bits. If not
-                                  specified, the volume defaultMode will be used.
-                                  This might be in conflict with other options that
-                                  affect the file mode, like fsGroup, and the result
-                                  can be other mode bits set.'
-                                format: int32
-                                type: integer
-                              path:
-                                description: path is the relative path of the file
-                                  to map the key to. May not be an absolute path.
-                                  May not contain the path element '..'. May not start
-                                  with the string '..'.
-                                type: string
-                            required:
-                            - key
-                            - path
-                            type: object
-                          type: array
-                        name:
-                          description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                            TODO: Add other useful fields. apiVersion, kind, uid?'
-                          type: string
-                        optional:
-                          description: optional specify whether the ConfigMap or its
-                            keys must be defined
-                          type: boolean
-                      type: object
-                      x-kubernetes-map-type: atomic
-                    csi:
-                      description: csi (Container Storage Interface) represents ephemeral
-                        storage that is handled by certain external CSI drivers (Beta
-                        feature).
-                      properties:
-                        driver:
-                          description: driver is the name of the CSI driver that handles
-                            this volume. Consult with your admin for the correct name
-                            as registered in the cluster.
-                          type: string
-                        fsType:
-                          description: fsType to mount. Ex. "ext4", "xfs", "ntfs".
-                            If not provided, the empty value is passed to the associated
-                            CSI driver which will determine the default filesystem
-                            to apply.
-                          type: string
-                        nodePublishSecretRef:
-                          description: nodePublishSecretRef is a reference to the
-                            secret object containing sensitive information to pass
-                            to the CSI driver to complete the CSI NodePublishVolume
-                            and NodeUnpublishVolume calls. This field is optional,
-                            and  may be empty if no secret is required. If the secret
-                            object contains more than one secret, all secret references
-                            are passed.
-                          properties:
-                            name:
-                              description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                TODO: Add other useful fields. apiVersion, kind, uid?'
-                              type: string
-                          type: object
-                          x-kubernetes-map-type: atomic
-                        readOnly:
-                          description: readOnly specifies a read-only configuration
-                            for the volume. Defaults to false (read/write).
-                          type: boolean
-                        volumeAttributes:
-                          additionalProperties:
-                            type: string
-                          description: volumeAttributes stores driver-specific properties
-                            that are passed to the CSI driver. Consult your driver's
-                            documentation for supported values.
-                          type: object
-                      required:
-                      - driver
-                      type: object
-                    downwardAPI:
-                      description: downwardAPI represents downward API about the pod
-                        that should populate this volume
-                      properties:
-                        defaultMode:
-                          description: 'Optional: mode bits to use on created files
-                            by default. Must be a Optional: mode bits used to set
-                            permissions on created files by default. Must be an octal
-                            value between 0000 and 0777 or a decimal value between
-                            0 and 511. YAML accepts both octal and decimal values,
-                            JSON requires decimal values for mode bits. Defaults to
-                            0644. Directories within the path are not affected by
-                            this setting. This might be in conflict with other options
-                            that affect the file mode, like fsGroup, and the result
-                            can be other mode bits set.'
-                          format: int32
-                          type: integer
-                        items:
-                          description: Items is a list of downward API volume file
-                          items:
-                            description: DownwardAPIVolumeFile represents information
-                              to create the file containing the pod field
-                            properties:
-                              fieldRef:
-                                description: 'Required: Selects a field of the pod:
-                                  only annotations, labels, name and namespace are
-                                  supported.'
-                                properties:
-                                  apiVersion:
-                                    description: Version of the schema the FieldPath
-                                      is written in terms of, defaults to "v1".
-                                    type: string
-                                  fieldPath:
-                                    description: Path of the field to select in the
-                                      specified API version.
-                                    type: string
-                                required:
-                                - fieldPath
-                                type: object
-                                x-kubernetes-map-type: atomic
-                              mode:
-                                description: 'Optional: mode bits used to set permissions
-                                  on this file, must be an octal value between 0000
-                                  and 0777 or a decimal value between 0 and 511. YAML
-                                  accepts both octal and decimal values, JSON requires
-                                  decimal values for mode bits. If not specified,
-                                  the volume defaultMode will be used. This might
-                                  be in conflict with other options that affect the
-                                  file mode, like fsGroup, and the result can be other
-                                  mode bits set.'
-                                format: int32
-                                type: integer
-                              path:
-                                description: 'Required: Path is  the relative path
-                                  name of the file to be created. Must not be absolute
-                                  or contain the ''..'' path. Must be utf-8 encoded.
-                                  The first item of the relative path must not start
-                                  with ''..'''
-                                type: string
-                              resourceFieldRef:
-                                description: 'Selects a resource of the container:
-                                  only resources limits and requests (limits.cpu,
-                                  limits.memory, requests.cpu and requests.memory)
-                                  are currently supported.'
-                                properties:
-                                  containerName:
-                                    description: 'Container name: required for volumes,
-                                      optional for env vars'
-                                    type: string
-                                  divisor:
-                                    anyOf:
-                                    - type: integer
-                                    - type: string
-                                    description: Specifies the output format of the
-                                      exposed resources, defaults to "1"
-                                    pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
-                                    x-kubernetes-int-or-string: true
-                                  resource:
-                                    description: 'Required: resource to select'
-                                    type: string
-                                required:
-                                - resource
-                                type: object
-                                x-kubernetes-map-type: atomic
-                            required:
-                            - path
-                            type: object
-                          type: array
-                      type: object
-                    emptyDir:
-                      description: 'emptyDir represents a temporary directory that
-                        shares a pod''s lifetime. More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir'
-                      properties:
-                        medium:
-                          description: 'medium represents what type of storage medium
-                            should back this directory. The default is "" which means
-                            to use the node''s default medium. Must be an empty string
-                            (default) or Memory. More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir'
-                          type: string
-                        sizeLimit:
-                          anyOf:
-                          - type: integer
-                          - type: string
-                          description: 'sizeLimit is the total amount of local storage
-                            required for this EmptyDir volume. The size limit is also
-                            applicable for memory medium. The maximum usage on memory
-                            medium EmptyDir would be the minimum value between the
-                            SizeLimit specified here and the sum of memory limits
-                            of all containers in a pod. The default is nil which means
-                            that the limit is undefined. More info: https://kubernetes.io/docs/concepts/storage/volumes#emptydir'
-                          pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
-                          x-kubernetes-int-or-string: true
-                      type: object
-                    ephemeral:
-                      description: "ephemeral represents a volume that is handled
-                        by a cluster storage driver. The volume's lifecycle is tied
-                        to the pod that defines it - it will be created before the
-                        pod starts, and deleted when the pod is removed. \n Use this
-                        if: a) the volume is only needed while the pod runs, b) features
-                        of normal volumes like restoring from snapshot or capacity
-                        tracking are needed, c) the storage driver is specified through
-                        a storage class, and d) the storage driver supports dynamic
-                        volume provisioning through a PersistentVolumeClaim (see EphemeralVolumeSource
-                        for more information on the connection between this volume
-                        type and PersistentVolumeClaim). \n Use PersistentVolumeClaim
-                        or one of the vendor-specific APIs for volumes that persist
-                        for longer than the lifecycle of an individual pod. \n Use
-                        CSI for light-weight local ephemeral volumes if the CSI driver
-                        is meant to be used that way - see the documentation of the
-                        driver for more information. \n A pod can use both types of
-                        ephemeral volumes and persistent volumes at the same time."
-                      properties:
-                        volumeClaimTemplate:
-                          description: "Will be used to create a stand-alone PVC to
-                            provision the volume. The pod in which this EphemeralVolumeSource
-                            is embedded will be the owner of the PVC, i.e. the PVC
-                            will be deleted together with the pod.  The name of the
-                            PVC will be `<pod name>-<volume name>` where `<volume
-                            name>` is the name from the `PodSpec.Volumes` array entry.
-                            Pod validation will reject the pod if the concatenated
-                            name is not valid for a PVC (for example, too long). \n
-                            An existing PVC with that name that is not owned by the
-                            pod will *not* be used for the pod to avoid using an unrelated
-                            volume by mistake. Starting the pod is then blocked until
-                            the unrelated PVC is removed. If such a pre-created PVC
-                            is meant to be used by the pod, the PVC has to updated
-                            with an owner reference to the pod once the pod exists.
-                            Normally this should not be necessary, but it may be useful
-                            when manually reconstructing a broken cluster. \n This
-                            field is read-only and no changes will be made by Kubernetes
-                            to the PVC after it has been created. \n Required, must
-                            not be nil."
-                          properties:
-                            metadata:
-                              description: May contain labels and annotations that
-                                will be copied into the PVC when creating it. No other
-                                fields are allowed and will be rejected during validation.
-                              type: object
-                            spec:
-                              description: The specification for the PersistentVolumeClaim.
-                                The entire content is copied unchanged into the PVC
-                                that gets created from this template. The same fields
-                                as in a PersistentVolumeClaim are also valid here.
-                              properties:
-                                accessModes:
-                                  description: 'accessModes contains the desired access
-                                    modes the volume should have. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#access-modes-1'
-                                  items:
-                                    type: string
-                                  type: array
-                                dataSource:
-                                  description: 'dataSource field can be used to specify
-                                    either: * An existing VolumeSnapshot object (snapshot.storage.k8s.io/VolumeSnapshot)
-                                    * An existing PVC (PersistentVolumeClaim) If the
-                                    provisioner or an external controller can support
-                                    the specified data source, it will create a new
-                                    volume based on the contents of the specified
-                                    data source. When the AnyVolumeDataSource feature
-                                    gate is enabled, dataSource contents will be copied
-                                    to dataSourceRef, and dataSourceRef contents will
-                                    be copied to dataSource when dataSourceRef.namespace
-                                    is not specified. If the namespace is specified,
-                                    then dataSourceRef will not be copied to dataSource.'
-                                  properties:
-                                    apiGroup:
-                                      description: APIGroup is the group for the resource
-                                        being referenced. If APIGroup is not specified,
-                                        the specified Kind must be in the core API
-                                        group. For any other third-party types, APIGroup
-                                        is required.
-                                      type: string
-                                    kind:
-                                      description: Kind is the type of resource being
-                                        referenced
-                                      type: string
-                                    name:
-                                      description: Name is the name of resource being
-                                        referenced
-                                      type: string
-                                  required:
-                                  - kind
-                                  - name
-                                  type: object
-                                  x-kubernetes-map-type: atomic
-                                dataSourceRef:
-                                  description: 'dataSourceRef specifies the object
-                                    from which to populate the volume with data, if
-                                    a non-empty volume is desired. This may be any
-                                    object from a non-empty API group (non core object)
-                                    or a PersistentVolumeClaim object. When this field
-                                    is specified, volume binding will only succeed
-                                    if the type of the specified object matches some
-                                    installed volume populator or dynamic provisioner.
-                                    This field will replace the functionality of the
-                                    dataSource field and as such if both fields are
-                                    non-empty, they must have the same value. For
-                                    backwards compatibility, when namespace isn''t
-                                    specified in dataSourceRef, both fields (dataSource
-                                    and dataSourceRef) will be set to the same value
-                                    automatically if one of them is empty and the
-                                    other is non-empty. When namespace is specified
-                                    in dataSourceRef, dataSource isn''t set to the
-                                    same value and must be empty. There are three
-                                    important differences between dataSource and dataSourceRef:
-                                    * While dataSource only allows two specific types
-                                    of objects, dataSourceRef allows any non-core
-                                    object, as well as PersistentVolumeClaim objects.
-                                    * While dataSource ignores disallowed values (dropping
-                                    them), dataSourceRef preserves all values, and
-                                    generates an error if a disallowed value is specified.
-                                    * While dataSource only allows local objects,
-                                    dataSourceRef allows objects in any namespaces.
-                                    (Beta) Using this field requires the AnyVolumeDataSource
-                                    feature gate to be enabled. (Alpha) Using the
-                                    namespace field of dataSourceRef requires the
-                                    CrossNamespaceVolumeDataSource feature gate to
-                                    be enabled.'
-                                  properties:
-                                    apiGroup:
-                                      description: APIGroup is the group for the resource
-                                        being referenced. If APIGroup is not specified,
-                                        the specified Kind must be in the core API
-                                        group. For any other third-party types, APIGroup
-                                        is required.
-                                      type: string
-                                    kind:
-                                      description: Kind is the type of resource being
-                                        referenced
-                                      type: string
-                                    name:
-                                      description: Name is the name of resource being
-                                        referenced
-                                      type: string
-                                    namespace:
-                                      description: Namespace is the namespace of resource
-                                        being referenced Note that when a namespace
-                                        is specified, a gateway.networking.k8s.io/ReferenceGrant
-                                        object is required in the referent namespace
-                                        to allow that namespace's owner to accept
-                                        the reference. See the ReferenceGrant documentation
-                                        for details. (Alpha) This field requires the
-                                        CrossNamespaceVolumeDataSource feature gate
-                                        to be enabled.
-                                      type: string
-                                  required:
-                                  - kind
-                                  - name
-                                  type: object
-                                resources:
-                                  description: 'resources represents the minimum resources
-                                    the volume should have. If RecoverVolumeExpansionFailure
-                                    feature is enabled users are allowed to specify
-                                    resource requirements that are lower than previous
-                                    value but must still be higher than capacity recorded
-                                    in the status field of the claim. More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#resources'
-                                  properties:
-                                    claims:
-                                      description: "Claims lists the names of resources,
-                                        defined in spec.resourceClaims, that are used
-                                        by this container. \n This is an alpha field
-                                        and requires enabling the DynamicResourceAllocation
-                                        feature gate. \n This field is immutable.
-                                        It can only be set for containers."
-                                      items:
-                                        description: ResourceClaim references one
-                                          entry in PodSpec.ResourceClaims.
-                                        properties:
-                                          name:
-                                            description: Name must match the name
-                                              of one entry in pod.spec.resourceClaims
-                                              of the Pod where this field is used.
-                                              It makes that resource available inside
-                                              a container.
-                                            type: string
-                                        required:
-                                        - name
-                                        type: object
-                                      type: array
-                                      x-kubernetes-list-map-keys:
-                                      - name
-                                      x-kubernetes-list-type: map
-                                    limits:
-                                      additionalProperties:
-                                        anyOf:
-                                        - type: integer
-                                        - type: string
-                                        pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
-                                        x-kubernetes-int-or-string: true
-                                      description: 'Limits describes the maximum amount
-                                        of compute resources allowed. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/'
-                                      type: object
-                                    requests:
-                                      additionalProperties:
-                                        anyOf:
-                                        - type: integer
-                                        - type: string
-                                        pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
-                                        x-kubernetes-int-or-string: true
-                                      description: 'Requests describes the minimum
-                                        amount of compute resources required. If Requests
-                                        is omitted for a container, it defaults to
-                                        Limits if that is explicitly specified, otherwise
-                                        to an implementation-defined value. Requests
-                                        cannot exceed Limits. More info: https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/'
-                                      type: object
-                                  type: object
-                                selector:
-                                  description: selector is a label query over volumes
-                                    to consider for binding.
-                                  properties:
-                                    matchExpressions:
-                                      description: matchExpressions is a list of label
-                                        selector requirements. The requirements are
-                                        ANDed.
-                                      items:
-                                        description: A label selector requirement
-                                          is a selector that contains values, a key,
-                                          and an operator that relates the key and
-                                          values.
-                                        properties:
-                                          key:
-                                            description: key is the label key that
-                                              the selector applies to.
-                                            type: string
-                                          operator:
-                                            description: operator represents a key's
-                                              relationship to a set of values. Valid
-                                              operators are In, NotIn, Exists and
-                                              DoesNotExist.
-                                            type: string
-                                          values:
-                                            description: values is an array of string
-                                              values. If the operator is In or NotIn,
-                                              the values array must be non-empty.
-                                              If the operator is Exists or DoesNotExist,
-                                              the values array must be empty. This
-                                              array is replaced during a strategic
-                                              merge patch.
-                                            items:
-                                              type: string
-                                            type: array
-                                        required:
-                                        - key
-                                        - operator
-                                        type: object
-                                      type: array
-                                    matchLabels:
-                                      additionalProperties:
-                                        type: string
-                                      description: matchLabels is a map of {key,value}
-                                        pairs. A single {key,value} in the matchLabels
-                                        map is equivalent to an element of matchExpressions,
-                                        whose key field is "key", the operator is
-                                        "In", and the values array contains only "value".
-                                        The requirements are ANDed.
-                                      type: object
-                                  type: object
-                                  x-kubernetes-map-type: atomic
-                                storageClassName:
-                                  description: 'storageClassName is the name of the
-                                    StorageClass required by the claim. More info:
-                                    https://kubernetes.io/docs/concepts/storage/persistent-volumes#class-1'
-                                  type: string
-                                volumeMode:
-                                  description: volumeMode defines what type of volume
-                                    is required by the claim. Value of Filesystem
-                                    is implied when not included in claim spec.
-                                  type: string
-                                volumeName:
-                                  description: volumeName is the binding reference
-                                    to the PersistentVolume backing this claim.
-                                  type: string
-                              type: object
-                          required:
-                          - spec
-                          type: object
-                      type: object
-                    fc:
-                      description: fc represents a Fibre Channel resource that is
-                        attached to a kubelet's host machine and then exposed to the
-                        pod.
-                      properties:
-                        fsType:
-                          description: 'fsType is the filesystem type to mount. Must
-                            be a filesystem type supported by the host operating system.
-                            Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4"
-                            if unspecified. TODO: how do we prevent errors in the
-                            filesystem from compromising the machine'
-                          type: string
-                        lun:
-                          description: 'lun is Optional: FC target lun number'
-                          format: int32
-                          type: integer
-                        readOnly:
-                          description: 'readOnly is Optional: Defaults to false (read/write).
-                            ReadOnly here will force the ReadOnly setting in VolumeMounts.'
-                          type: boolean
-                        targetWWNs:
-                          description: 'targetWWNs is Optional: FC target worldwide
-                            names (WWNs)'
-                          items:
-                            type: string
-                          type: array
-                        wwids:
-                          description: 'wwids Optional: FC volume world wide identifiers
-                            (wwids) Either wwids or combination of targetWWNs and
-                            lun must be set, but not both simultaneously.'
-                          items:
-                            type: string
-                          type: array
-                      type: object
-                    flexVolume:
-                      description: flexVolume represents a generic volume resource
-                        that is provisioned/attached using an exec based plugin.
-                      properties:
-                        driver:
-                          description: driver is the name of the driver to use for
-                            this volume.
-                          type: string
-                        fsType:
-                          description: fsType is the filesystem type to mount. Must
-                            be a filesystem type supported by the host operating system.
-                            Ex. "ext4", "xfs", "ntfs". The default filesystem depends
-                            on FlexVolume script.
-                          type: string
-                        options:
-                          additionalProperties:
-                            type: string
-                          description: 'options is Optional: this field holds extra
-                            command options if any.'
-                          type: object
-                        readOnly:
-                          description: 'readOnly is Optional: defaults to false (read/write).
-                            ReadOnly here will force the ReadOnly setting in VolumeMounts.'
-                          type: boolean
-                        secretRef:
-                          description: 'secretRef is Optional: secretRef is reference
-                            to the secret object containing sensitive information
-                            to pass to the plugin scripts. This may be empty if no
-                            secret object is specified. If the secret object contains
-                            more than one secret, all secrets are passed to the plugin
-                            scripts.'
-                          properties:
-                            name:
-                              description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                TODO: Add other useful fields. apiVersion, kind, uid?'
-                              type: string
-                          type: object
-                          x-kubernetes-map-type: atomic
-                      required:
-                      - driver
-                      type: object
-                    flocker:
-                      description: flocker represents a Flocker volume attached to
-                        a kubelet's host machine. This depends on the Flocker control
-                        service being running
-                      properties:
-                        datasetName:
-                          description: datasetName is Name of the dataset stored as
-                            metadata -> name on the dataset for Flocker should be
-                            considered as deprecated
-                          type: string
-                        datasetUUID:
-                          description: datasetUUID is the UUID of the dataset. This
-                            is unique identifier of a Flocker dataset
-                          type: string
-                      type: object
-                    gcePersistentDisk:
-                      description: 'gcePersistentDisk represents a GCE Disk resource
-                        that is attached to a kubelet''s host machine and then exposed
-                        to the pod. More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk'
-                      properties:
-                        fsType:
-                          description: 'fsType is filesystem type of the volume that
-                            you want to mount. Tip: Ensure that the filesystem type
-                            is supported by the host operating system. Examples: "ext4",
-                            "xfs", "ntfs". Implicitly inferred to be "ext4" if unspecified.
-                            More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk
-                            TODO: how do we prevent errors in the filesystem from
-                            compromising the machine'
-                          type: string
-                        partition:
-                          description: 'partition is the partition in the volume that
-                            you want to mount. If omitted, the default is to mount
-                            by volume name. Examples: For volume /dev/sda1, you specify
-                            the partition as "1". Similarly, the volume partition
-                            for /dev/sda is "0" (or you can leave the property empty).
-                            More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk'
-                          format: int32
-                          type: integer
-                        pdName:
-                          description: 'pdName is unique name of the PD resource in
-                            GCE. Used to identify the disk in GCE. More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk'
-                          type: string
-                        readOnly:
-                          description: 'readOnly here will force the ReadOnly setting
-                            in VolumeMounts. Defaults to false. More info: https://kubernetes.io/docs/concepts/storage/volumes#gcepersistentdisk'
-                          type: boolean
-                      required:
-                      - pdName
-                      type: object
-                    gitRepo:
-                      description: 'gitRepo represents a git repository at a particular
-                        revision. DEPRECATED: GitRepo is deprecated. To provision
-                        a container with a git repo, mount an EmptyDir into an InitContainer
-                        that clones the repo using git, then mount the EmptyDir into
-                        the Pod''s container.'
-                      properties:
-                        directory:
-                          description: directory is the target directory name. Must
-                            not contain or start with '..'.  If '.' is supplied, the
-                            volume directory will be the git repository.  Otherwise,
-                            if specified, the volume will contain the git repository
-                            in the subdirectory with the given name.
-                          type: string
-                        repository:
-                          description: repository is the URL
-                          type: string
-                        revision:
-                          description: revision is the commit hash for the specified
-                            revision.
-                          type: string
-                      required:
-                      - repository
-                      type: object
-                    glusterfs:
-                      description: 'glusterfs represents a Glusterfs mount on the
-                        host that shares a pod''s lifetime. More info: https://examples.k8s.io/volumes/glusterfs/README.md'
-                      properties:
-                        endpoints:
-                          description: 'endpoints is the endpoint name that details
-                            Glusterfs topology. More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod'
-                          type: string
-                        path:
-                          description: 'path is the Glusterfs volume path. More info:
-                            https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod'
-                          type: string
-                        readOnly:
-                          description: 'readOnly here will force the Glusterfs volume
-                            to be mounted with read-only permissions. Defaults to
-                            false. More info: https://examples.k8s.io/volumes/glusterfs/README.md#create-a-pod'
-                          type: boolean
-                      required:
-                      - endpoints
-                      - path
-                      type: object
-                    hostPath:
-                      description: 'hostPath represents a pre-existing file or directory
-                        on the host machine that is directly exposed to the container.
-                        This is generally used for system agents or other privileged
-                        things that are allowed to see the host machine. Most containers
-                        will NOT need this. More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath
-                        --- TODO(jonesdl) We need to restrict who can use host directory
-                        mounts and who can/can not mount host directories as read/write.'
-                      properties:
-                        path:
-                          description: 'path of the directory on the host. If the
-                            path is a symlink, it will follow the link to the real
-                            path. More info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath'
-                          type: string
-                        type:
-                          description: 'type for HostPath Volume Defaults to "" More
-                            info: https://kubernetes.io/docs/concepts/storage/volumes#hostpath'
-                          type: string
-                      required:
-                      - path
-                      type: object
-                    iscsi:
-                      description: 'iscsi represents an ISCSI Disk resource that is
-                        attached to a kubelet''s host machine and then exposed to
-                        the pod. More info: https://examples.k8s.io/volumes/iscsi/README.md'
-                      properties:
-                        chapAuthDiscovery:
-                          description: chapAuthDiscovery defines whether support iSCSI
-                            Discovery CHAP authentication
-                          type: boolean
-                        chapAuthSession:
-                          description: chapAuthSession defines whether support iSCSI
-                            Session CHAP authentication
-                          type: boolean
-                        fsType:
-                          description: 'fsType is the filesystem type of the volume
-                            that you want to mount. Tip: Ensure that the filesystem
-                            type is supported by the host operating system. Examples:
-                            "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4"
-                            if unspecified. More info: https://kubernetes.io/docs/concepts/storage/volumes#iscsi
-                            TODO: how do we prevent errors in the filesystem from
-                            compromising the machine'
-                          type: string
-                        initiatorName:
-                          description: initiatorName is the custom iSCSI Initiator
-                            Name. If initiatorName is specified with iscsiInterface
-                            simultaneously, new iSCSI interface <target portal>:<volume
-                            name> will be created for the connection.
-                          type: string
-                        iqn:
-                          description: iqn is the target iSCSI Qualified Name.
-                          type: string
-                        iscsiInterface:
-                          description: iscsiInterface is the interface Name that uses
-                            an iSCSI transport. Defaults to 'default' (tcp).
-                          type: string
-                        lun:
-                          description: lun represents iSCSI Target Lun number.
-                          format: int32
-                          type: integer
-                        portals:
-                          description: portals is the iSCSI Target Portal List. The
-                            portal is either an IP or ip_addr:port if the port is
-                            other than default (typically TCP ports 860 and 3260).
-                          items:
-                            type: string
-                          type: array
-                        readOnly:
-                          description: readOnly here will force the ReadOnly setting
-                            in VolumeMounts. Defaults to false.
-                          type: boolean
-                        secretRef:
-                          description: secretRef is the CHAP Secret for iSCSI target
-                            and initiator authentication
-                          properties:
-                            name:
-                              description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                TODO: Add other useful fields. apiVersion, kind, uid?'
-                              type: string
-                          type: object
-                          x-kubernetes-map-type: atomic
-                        targetPortal:
-                          description: targetPortal is iSCSI Target Portal. The Portal
-                            is either an IP or ip_addr:port if the port is other than
-                            default (typically TCP ports 860 and 3260).
-                          type: string
-                      required:
-                      - iqn
-                      - lun
-                      - targetPortal
-                      type: object
-                    name:
-                      description: 'name of the volume. Must be a DNS_LABEL and unique
-                        within the pod. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names'
-                      type: string
-                    nfs:
-                      description: 'nfs represents an NFS mount on the host that shares
-                        a pod''s lifetime More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs'
-                      properties:
-                        path:
-                          description: 'path that is exported by the NFS server. More
-                            info: https://kubernetes.io/docs/concepts/storage/volumes#nfs'
-                          type: string
-                        readOnly:
-                          description: 'readOnly here will force the NFS export to
-                            be mounted with read-only permissions. Defaults to false.
-                            More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs'
-                          type: boolean
-                        server:
-                          description: 'server is the hostname or IP address of the
-                            NFS server. More info: https://kubernetes.io/docs/concepts/storage/volumes#nfs'
-                          type: string
-                      required:
-                      - path
-                      - server
-                      type: object
-                    persistentVolumeClaim:
-                      description: 'persistentVolumeClaimVolumeSource represents a
-                        reference to a PersistentVolumeClaim in the same namespace.
-                        More info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims'
-                      properties:
-                        claimName:
-                          description: 'claimName is the name of a PersistentVolumeClaim
-                            in the same namespace as the pod using this volume. More
-                            info: https://kubernetes.io/docs/concepts/storage/persistent-volumes#persistentvolumeclaims'
-                          type: string
-                        readOnly:
-                          description: readOnly Will force the ReadOnly setting in
-                            VolumeMounts. Default false.
-                          type: boolean
-                      required:
-                      - claimName
-                      type: object
-                    photonPersistentDisk:
-                      description: photonPersistentDisk represents a PhotonController
-                        persistent disk attached and mounted on kubelets host machine
-                      properties:
-                        fsType:
-                          description: fsType is the filesystem type to mount. Must
-                            be a filesystem type supported by the host operating system.
-                            Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4"
-                            if unspecified.
-                          type: string
-                        pdID:
-                          description: pdID is the ID that identifies Photon Controller
-                            persistent disk
-                          type: string
-                      required:
-                      - pdID
-                      type: object
-                    portworxVolume:
-                      description: portworxVolume represents a portworx volume attached
-                        and mounted on kubelets host machine
-                      properties:
-                        fsType:
-                          description: fSType represents the filesystem type to mount
-                            Must be a filesystem type supported by the host operating
-                            system. Ex. "ext4", "xfs". Implicitly inferred to be "ext4"
-                            if unspecified.
-                          type: string
-                        readOnly:
-                          description: readOnly defaults to false (read/write). ReadOnly
-                            here will force the ReadOnly setting in VolumeMounts.
-                          type: boolean
-                        volumeID:
-                          description: volumeID uniquely identifies a Portworx volume
-                          type: string
-                      required:
-                      - volumeID
-                      type: object
-                    projected:
-                      description: projected items for all in one resources secrets,
-                        configmaps, and downward API
-                      properties:
-                        defaultMode:
-                          description: defaultMode are the mode bits used to set permissions
-                            on created files by default. Must be an octal value between
-                            0000 and 0777 or a decimal value between 0 and 511. YAML
-                            accepts both octal and decimal values, JSON requires decimal
-                            values for mode bits. Directories within the path are
-                            not affected by this setting. This might be in conflict
-                            with other options that affect the file mode, like fsGroup,
-                            and the result can be other mode bits set.
-                          format: int32
-                          type: integer
-                        sources:
-                          description: sources is the list of volume projections
-                          items:
-                            description: Projection that may be projected along with
-                              other supported volume types
-                            properties:
-                              configMap:
-                                description: configMap information about the configMap
-                                  data to project
-                                properties:
-                                  items:
-                                    description: items if unspecified, each key-value
-                                      pair in the Data field of the referenced ConfigMap
-                                      will be projected into the volume as a file
-                                      whose name is the key and content is the value.
-                                      If specified, the listed keys will be projected
-                                      into the specified paths, and unlisted keys
-                                      will not be present. If a key is specified which
-                                      is not present in the ConfigMap, the volume
-                                      setup will error unless it is marked optional.
-                                      Paths must be relative and may not contain the
-                                      '..' path or start with '..'.
-                                    items:
-                                      description: Maps a string key to a path within
-                                        a volume.
-                                      properties:
-                                        key:
-                                          description: key is the key to project.
-                                          type: string
-                                        mode:
-                                          description: 'mode is Optional: mode bits
-                                            used to set permissions on this file.
-                                            Must be an octal value between 0000 and
-                                            0777 or a decimal value between 0 and
-                                            511. YAML accepts both octal and decimal
-                                            values, JSON requires decimal values for
-                                            mode bits. If not specified, the volume
-                                            defaultMode will be used. This might be
-                                            in conflict with other options that affect
-                                            the file mode, like fsGroup, and the result
-                                            can be other mode bits set.'
-                                          format: int32
-                                          type: integer
-                                        path:
-                                          description: path is the relative path of
-                                            the file to map the key to. May not be
-                                            an absolute path. May not contain the
-                                            path element '..'. May not start with
-                                            the string '..'.
-                                          type: string
-                                      required:
-                                      - key
-                                      - path
-                                      type: object
-                                    type: array
-                                  name:
-                                    description: 'Name of the referent. More info:
-                                      https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                      TODO: Add other useful fields. apiVersion, kind,
-                                      uid?'
-                                    type: string
-                                  optional:
-                                    description: optional specify whether the ConfigMap
-                                      or its keys must be defined
-                                    type: boolean
-                                type: object
-                                x-kubernetes-map-type: atomic
-                              downwardAPI:
-                                description: downwardAPI information about the downwardAPI
-                                  data to project
-                                properties:
-                                  items:
-                                    description: Items is a list of DownwardAPIVolume
-                                      file
-                                    items:
-                                      description: DownwardAPIVolumeFile represents
-                                        information to create the file containing
-                                        the pod field
-                                      properties:
-                                        fieldRef:
-                                          description: 'Required: Selects a field
-                                            of the pod: only annotations, labels,
-                                            name and namespace are supported.'
-                                          properties:
-                                            apiVersion:
-                                              description: Version of the schema the
-                                                FieldPath is written in terms of,
-                                                defaults to "v1".
-                                              type: string
-                                            fieldPath:
-                                              description: Path of the field to select
-                                                in the specified API version.
-                                              type: string
-                                          required:
-                                          - fieldPath
-                                          type: object
-                                          x-kubernetes-map-type: atomic
-                                        mode:
-                                          description: 'Optional: mode bits used to
-                                            set permissions on this file, must be
-                                            an octal value between 0000 and 0777 or
-                                            a decimal value between 0 and 511. YAML
-                                            accepts both octal and decimal values,
-                                            JSON requires decimal values for mode
-                                            bits. If not specified, the volume defaultMode
-                                            will be used. This might be in conflict
-                                            with other options that affect the file
-                                            mode, like fsGroup, and the result can
-                                            be other mode bits set.'
-                                          format: int32
-                                          type: integer
-                                        path:
-                                          description: 'Required: Path is  the relative
-                                            path name of the file to be created. Must
-                                            not be absolute or contain the ''..''
-                                            path. Must be utf-8 encoded. The first
-                                            item of the relative path must not start
-                                            with ''..'''
-                                          type: string
-                                        resourceFieldRef:
-                                          description: 'Selects a resource of the
-                                            container: only resources limits and requests
-                                            (limits.cpu, limits.memory, requests.cpu
-                                            and requests.memory) are currently supported.'
-                                          properties:
-                                            containerName:
-                                              description: 'Container name: required
-                                                for volumes, optional for env vars'
-                                              type: string
-                                            divisor:
-                                              anyOf:
-                                              - type: integer
-                                              - type: string
-                                              description: Specifies the output format
-                                                of the exposed resources, defaults
-                                                to "1"
-                                              pattern: ^(\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))(([KMGTPE]i)|[numkMGTPE]|([eE](\+|-)?(([0-9]+(\.[0-9]*)?)|(\.[0-9]+))))?$
-                                              x-kubernetes-int-or-string: true
-                                            resource:
-                                              description: 'Required: resource to
-                                                select'
-                                              type: string
-                                          required:
-                                          - resource
-                                          type: object
-                                          x-kubernetes-map-type: atomic
-                                      required:
-                                      - path
-                                      type: object
-                                    type: array
-                                type: object
-                              secret:
-                                description: secret information about the secret data
-                                  to project
-                                properties:
-                                  items:
-                                    description: items if unspecified, each key-value
-                                      pair in the Data field of the referenced Secret
-                                      will be projected into the volume as a file
-                                      whose name is the key and content is the value.
-                                      If specified, the listed keys will be projected
-                                      into the specified paths, and unlisted keys
-                                      will not be present. If a key is specified which
-                                      is not present in the Secret, the volume setup
-                                      will error unless it is marked optional. Paths
-                                      must be relative and may not contain the '..'
-                                      path or start with '..'.
-                                    items:
-                                      description: Maps a string key to a path within
-                                        a volume.
-                                      properties:
-                                        key:
-                                          description: key is the key to project.
-                                          type: string
-                                        mode:
-                                          description: 'mode is Optional: mode bits
-                                            used to set permissions on this file.
-                                            Must be an octal value between 0000 and
-                                            0777 or a decimal value between 0 and
-                                            511. YAML accepts both octal and decimal
-                                            values, JSON requires decimal values for
-                                            mode bits. If not specified, the volume
-                                            defaultMode will be used. This might be
-                                            in conflict with other options that affect
-                                            the file mode, like fsGroup, and the result
-                                            can be other mode bits set.'
-                                          format: int32
-                                          type: integer
-                                        path:
-                                          description: path is the relative path of
-                                            the file to map the key to. May not be
-                                            an absolute path. May not contain the
-                                            path element '..'. May not start with
-                                            the string '..'.
-                                          type: string
-                                      required:
-                                      - key
-                                      - path
-                                      type: object
-                                    type: array
-                                  name:
-                                    description: 'Name of the referent. More info:
-                                      https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                      TODO: Add other useful fields. apiVersion, kind,
-                                      uid?'
-                                    type: string
-                                  optional:
-                                    description: optional field specify whether the
-                                      Secret or its key must be defined
-                                    type: boolean
-                                type: object
-                                x-kubernetes-map-type: atomic
-                              serviceAccountToken:
-                                description: serviceAccountToken is information about
-                                  the serviceAccountToken data to project
-                                properties:
-                                  audience:
-                                    description: audience is the intended audience
-                                      of the token. A recipient of a token must identify
-                                      itself with an identifier specified in the audience
-                                      of the token, and otherwise should reject the
-                                      token. The audience defaults to the identifier
-                                      of the apiserver.
-                                    type: string
-                                  expirationSeconds:
-                                    description: expirationSeconds is the requested
-                                      duration of validity of the service account
-                                      token. As the token approaches expiration, the
-                                      kubelet volume plugin will proactively rotate
-                                      the service account token. The kubelet will
-                                      start trying to rotate the token if the token
-                                      is older than 80 percent of its time to live
-                                      or if the token is older than 24 hours.Defaults
-                                      to 1 hour and must be at least 10 minutes.
-                                    format: int64
-                                    type: integer
-                                  path:
-                                    description: path is the path relative to the
-                                      mount point of the file to project the token
-                                      into.
-                                    type: string
-                                required:
-                                - path
-                                type: object
-                            type: object
-                          type: array
-                      type: object
-                    quobyte:
-                      description: quobyte represents a Quobyte mount on the host
-                        that shares a pod's lifetime
-                      properties:
-                        group:
-                          description: group to map volume access to Default is no
-                            group
-                          type: string
-                        readOnly:
-                          description: readOnly here will force the Quobyte volume
-                            to be mounted with read-only permissions. Defaults to
-                            false.
-                          type: boolean
-                        registry:
-                          description: registry represents a single or multiple Quobyte
-                            Registry services specified as a string as host:port pair
-                            (multiple entries are separated with commas) which acts
-                            as the central registry for volumes
-                          type: string
-                        tenant:
-                          description: tenant owning the given Quobyte volume in the
-                            Backend Used with dynamically provisioned Quobyte volumes,
-                            value is set by the plugin
-                          type: string
-                        user:
-                          description: user to map volume access to Defaults to serivceaccount
-                            user
-                          type: string
-                        volume:
-                          description: volume is a string that references an already
-                            created Quobyte volume by name.
-                          type: string
-                      required:
-                      - registry
-                      - volume
-                      type: object
-                    rbd:
-                      description: 'rbd represents a Rados Block Device mount on the
-                        host that shares a pod''s lifetime. More info: https://examples.k8s.io/volumes/rbd/README.md'
-                      properties:
-                        fsType:
-                          description: 'fsType is the filesystem type of the volume
-                            that you want to mount. Tip: Ensure that the filesystem
-                            type is supported by the host operating system. Examples:
-                            "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4"
-                            if unspecified. More info: https://kubernetes.io/docs/concepts/storage/volumes#rbd
-                            TODO: how do we prevent errors in the filesystem from
-                            compromising the machine'
-                          type: string
-                        image:
-                          description: 'image is the rados image name. More info:
-                            https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it'
-                          type: string
-                        keyring:
-                          description: 'keyring is the path to key ring for RBDUser.
-                            Default is /etc/ceph/keyring. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it'
-                          type: string
-                        monitors:
-                          description: 'monitors is a collection of Ceph monitors.
-                            More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it'
-                          items:
-                            type: string
-                          type: array
-                        pool:
-                          description: 'pool is the rados pool name. Default is rbd.
-                            More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it'
-                          type: string
-                        readOnly:
-                          description: 'readOnly here will force the ReadOnly setting
-                            in VolumeMounts. Defaults to false. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it'
-                          type: boolean
-                        secretRef:
-                          description: 'secretRef is name of the authentication secret
-                            for RBDUser. If provided overrides keyring. Default is
-                            nil. More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it'
-                          properties:
-                            name:
-                              description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                TODO: Add other useful fields. apiVersion, kind, uid?'
-                              type: string
-                          type: object
-                          x-kubernetes-map-type: atomic
-                        user:
-                          description: 'user is the rados user name. Default is admin.
-                            More info: https://examples.k8s.io/volumes/rbd/README.md#how-to-use-it'
-                          type: string
-                      required:
-                      - image
-                      - monitors
-                      type: object
-                    scaleIO:
-                      description: scaleIO represents a ScaleIO persistent volume
-                        attached and mounted on Kubernetes nodes.
-                      properties:
-                        fsType:
-                          description: fsType is the filesystem type to mount. Must
-                            be a filesystem type supported by the host operating system.
-                            Ex. "ext4", "xfs", "ntfs". Default is "xfs".
-                          type: string
-                        gateway:
-                          description: gateway is the host address of the ScaleIO
-                            API Gateway.
-                          type: string
-                        protectionDomain:
-                          description: protectionDomain is the name of the ScaleIO
-                            Protection Domain for the configured storage.
-                          type: string
-                        readOnly:
-                          description: readOnly Defaults to false (read/write). ReadOnly
-                            here will force the ReadOnly setting in VolumeMounts.
-                          type: boolean
-                        secretRef:
-                          description: secretRef references to the secret for ScaleIO
-                            user and other sensitive information. If this is not provided,
-                            Login operation will fail.
-                          properties:
-                            name:
-                              description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                TODO: Add other useful fields. apiVersion, kind, uid?'
-                              type: string
-                          type: object
-                          x-kubernetes-map-type: atomic
-                        sslEnabled:
-                          description: sslEnabled Flag enable/disable SSL communication
-                            with Gateway, default false
-                          type: boolean
-                        storageMode:
-                          description: storageMode indicates whether the storage for
-                            a volume should be ThickProvisioned or ThinProvisioned.
-                            Default is ThinProvisioned.
-                          type: string
-                        storagePool:
-                          description: storagePool is the ScaleIO Storage Pool associated
-                            with the protection domain.
-                          type: string
-                        system:
-                          description: system is the name of the storage system as
-                            configured in ScaleIO.
-                          type: string
-                        volumeName:
-                          description: volumeName is the name of a volume already
-                            created in the ScaleIO system that is associated with
-                            this volume source.
-                          type: string
-                      required:
-                      - gateway
-                      - secretRef
-                      - system
-                      type: object
-                    secret:
-                      description: 'secret represents a secret that should populate
-                        this volume. More info: https://kubernetes.io/docs/concepts/storage/volumes#secret'
-                      properties:
-                        defaultMode:
-                          description: 'defaultMode is Optional: mode bits used to
-                            set permissions on created files by default. Must be an
-                            octal value between 0000 and 0777 or a decimal value between
-                            0 and 511. YAML accepts both octal and decimal values,
-                            JSON requires decimal values for mode bits. Defaults to
-                            0644. Directories within the path are not affected by
-                            this setting. This might be in conflict with other options
-                            that affect the file mode, like fsGroup, and the result
-                            can be other mode bits set.'
-                          format: int32
-                          type: integer
-                        items:
-                          description: items If unspecified, each key-value pair in
-                            the Data field of the referenced Secret will be projected
-                            into the volume as a file whose name is the key and content
-                            is the value. If specified, the listed keys will be projected
-                            into the specified paths, and unlisted keys will not be
-                            present. If a key is specified which is not present in
-                            the Secret, the volume setup will error unless it is marked
-                            optional. Paths must be relative and may not contain the
-                            '..' path or start with '..'.
-                          items:
-                            description: Maps a string key to a path within a volume.
-                            properties:
-                              key:
-                                description: key is the key to project.
-                                type: string
-                              mode:
-                                description: 'mode is Optional: mode bits used to
-                                  set permissions on this file. Must be an octal value
-                                  between 0000 and 0777 or a decimal value between
-                                  0 and 511. YAML accepts both octal and decimal values,
-                                  JSON requires decimal values for mode bits. If not
-                                  specified, the volume defaultMode will be used.
-                                  This might be in conflict with other options that
-                                  affect the file mode, like fsGroup, and the result
-                                  can be other mode bits set.'
-                                format: int32
-                                type: integer
-                              path:
-                                description: path is the relative path of the file
-                                  to map the key to. May not be an absolute path.
-                                  May not contain the path element '..'. May not start
-                                  with the string '..'.
-                                type: string
-                            required:
-                            - key
-                            - path
-                            type: object
-                          type: array
-                        optional:
-                          description: optional field specify whether the Secret or
-                            its keys must be defined
-                          type: boolean
-                        secretName:
-                          description: 'secretName is the name of the secret in the
-                            pod''s namespace to use. More info: https://kubernetes.io/docs/concepts/storage/volumes#secret'
-                          type: string
-                      type: object
-                    storageos:
-                      description: storageOS represents a StorageOS volume attached
-                        and mounted on Kubernetes nodes.
-                      properties:
-                        fsType:
-                          description: fsType is the filesystem type to mount. Must
-                            be a filesystem type supported by the host operating system.
-                            Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4"
-                            if unspecified.
-                          type: string
-                        readOnly:
-                          description: readOnly defaults to false (read/write). ReadOnly
-                            here will force the ReadOnly setting in VolumeMounts.
-                          type: boolean
-                        secretRef:
-                          description: secretRef specifies the secret to use for obtaining
-                            the StorageOS API credentials.  If not specified, default
-                            values will be attempted.
-                          properties:
-                            name:
-                              description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                TODO: Add other useful fields. apiVersion, kind, uid?'
-                              type: string
-                          type: object
-                          x-kubernetes-map-type: atomic
-                        volumeName:
-                          description: volumeName is the human-readable name of the
-                            StorageOS volume.  Volume names are only unique within
-                            a namespace.
-                          type: string
-                        volumeNamespace:
-                          description: volumeNamespace specifies the scope of the
-                            volume within StorageOS.  If no namespace is specified
-                            then the Pod's namespace will be used.  This allows the
-                            Kubernetes name scoping to be mirrored within StorageOS
-                            for tighter integration. Set VolumeName to any name to
-                            override the default behaviour. Set to "default" if you
-                            are not using namespaces within StorageOS. Namespaces
-                            that do not pre-exist within StorageOS will be created.
-                          type: string
-                      type: object
-                    vsphereVolume:
-                      description: vsphereVolume represents a vSphere volume attached
-                        and mounted on kubelets host machine
-                      properties:
-                        fsType:
-                          description: fsType is filesystem type to mount. Must be
-                            a filesystem type supported by the host operating system.
-                            Ex. "ext4", "xfs", "ntfs". Implicitly inferred to be "ext4"
-                            if unspecified.
-                          type: string
-                        storagePolicyID:
-                          description: storagePolicyID is the storage Policy Based
-                            Management (SPBM) profile ID associated with the StoragePolicyName.
-                          type: string
-                        storagePolicyName:
-                          description: storagePolicyName is the storage Policy Based
-                            Management (SPBM) profile name.
-                          type: string
-                        volumePath:
-                          description: volumePath is the path that identifies vSphere
-                            volume vmdk
-                          type: string
-                      required:
-                      - volumePath
-                      type: object
-                  required:
-                  - name
-                  type: object
-                type: array
-            required:
-            - config
-            - name
-            - type
-            type: object
-        type: object
-    served: true
-    storage: true
diff --git a/production/operator/crds/monitoring.grafana.com_logsinstances.yaml b/production/operator/crds/monitoring.grafana.com_logsinstances.yaml
deleted file mode 100644
index f36440ab0cd0..000000000000
--- a/production/operator/crds/monitoring.grafana.com_logsinstances.yaml
+++ /dev/null
@@ -1,500 +0,0 @@
----
-apiVersion: apiextensions.k8s.io/v1
-kind: CustomResourceDefinition
-metadata:
-  annotations:
-    controller-gen.kubebuilder.io/version: v0.9.2
-  creationTimestamp: null
-  name: logsinstances.monitoring.grafana.com
-spec:
-  group: monitoring.grafana.com
-  names:
-    categories:
-    - agent-operator
-    kind: LogsInstance
-    listKind: LogsInstanceList
-    plural: logsinstances
-    singular: logsinstance
-  scope: Namespaced
-  versions:
-  - name: v1alpha1
-    schema:
-      openAPIV3Schema:
-        description: LogsInstance controls an individual logs instance within a Grafana
-          Agent deployment.
-        properties:
-          apiVersion:
-            description: 'APIVersion defines the versioned schema of this representation
-              of an object. Servers should convert recognized schemas to the latest
-              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
-            type: string
-          kind:
-            description: 'Kind is a string value representing the REST resource this
-              object represents. Servers may infer this from the endpoint the client
-              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
-            type: string
-          metadata:
-            type: object
-          spec:
-            description: Spec holds the specification of the desired behavior for
-              the logs instance.
-            properties:
-              additionalScrapeConfigs:
-                description: "AdditionalScrapeConfigs allows specifying a key of a
-                  Secret containing additional Grafana Agent logging scrape configurations.
-                  Scrape configurations specified are appended to the configurations
-                  generated by the Grafana Agent Operator. \n Job configurations specified
-                  must have the form as specified in the official Promtail documentation:
-                  \n https://grafana.com/docs/loki/latest/clients/promtail/configuration/#scrape_configs
-                  \n As scrape configs are appended, the user is responsible to make
-                  sure it is valid. Note that using this feature may expose the possibility
-                  to break upgrades of Grafana Agent. It is advised to review both
-                  Grafana Agent and Promtail release notes to ensure that no incompatible
-                  scrape configs are going to break Grafana Agent after the upgrade."
-                properties:
-                  key:
-                    description: The key of the secret to select from.  Must be a
-                      valid secret key.
-                    type: string
-                  name:
-                    description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                      TODO: Add other useful fields. apiVersion, kind, uid?'
-                    type: string
-                  optional:
-                    description: Specify whether the Secret or its key must be defined
-                    type: boolean
-                required:
-                - key
-                type: object
-                x-kubernetes-map-type: atomic
-              clients:
-                description: Clients controls where logs are written to for this instance.
-                items:
-                  description: LogsClientSpec defines the client integration for logs,
-                    indicating which Loki server to send logs to.
-                  properties:
-                    backoffConfig:
-                      description: Configures how to retry requests to Loki when a
-                        request fails. Defaults to a minPeriod of 500ms, maxPeriod
-                        of 5m, and maxRetries of 10.
-                      properties:
-                        maxPeriod:
-                          description: Maximum backoff time between retries.
-                          type: string
-                        maxRetries:
-                          description: Maximum number of retries to perform before
-                            giving up a request.
-                          type: integer
-                        minPeriod:
-                          description: Initial backoff time between retries. Time
-                            between retries is increased exponentially.
-                          type: string
-                      type: object
-                    basicAuth:
-                      description: BasicAuth for the Loki server.
-                      properties:
-                        password:
-                          description: The secret in the service monitor namespace
-                            that contains the password for authentication.
-                          properties:
-                            key:
-                              description: The key of the secret to select from.  Must
-                                be a valid secret key.
-                              type: string
-                            name:
-                              description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                TODO: Add other useful fields. apiVersion, kind, uid?'
-                              type: string
-                            optional:
-                              description: Specify whether the Secret or its key must
-                                be defined
-                              type: boolean
-                          required:
-                          - key
-                          type: object
-                          x-kubernetes-map-type: atomic
-                        username:
-                          description: The secret in the service monitor namespace
-                            that contains the username for authentication.
-                          properties:
-                            key:
-                              description: The key of the secret to select from.  Must
-                                be a valid secret key.
-                              type: string
-                            name:
-                              description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                TODO: Add other useful fields. apiVersion, kind, uid?'
-                              type: string
-                            optional:
-                              description: Specify whether the Secret or its key must
-                                be defined
-                              type: boolean
-                          required:
-                          - key
-                          type: object
-                          x-kubernetes-map-type: atomic
-                      type: object
-                    batchSize:
-                      description: Maximum batch size (in bytes) of logs to accumulate
-                        before sending the batch to Loki.
-                      type: integer
-                    batchWait:
-                      description: Maximum amount of time to wait before sending a
-                        batch, even if that batch isn't full.
-                      type: string
-                    bearerToken:
-                      description: BearerToken used for remote_write.
-                      type: string
-                    bearerTokenFile:
-                      description: BearerTokenFile used to read bearer token.
-                      type: string
-                    externalLabels:
-                      additionalProperties:
-                        type: string
-                      description: ExternalLabels are labels to add to any time series
-                        when sending data to Loki.
-                      type: object
-                    oauth2:
-                      description: Oauth2 for URL
-                      properties:
-                        clientId:
-                          description: The secret or configmap containing the OAuth2
-                            client id
-                          properties:
-                            configMap:
-                              description: ConfigMap containing data to use for the
-                                targets.
-                              properties:
-                                key:
-                                  description: The key to select.
-                                  type: string
-                                name:
-                                  description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                    TODO: Add other useful fields. apiVersion, kind,
-                                    uid?'
-                                  type: string
-                                optional:
-                                  description: Specify whether the ConfigMap or its
-                                    key must be defined
-                                  type: boolean
-                              required:
-                              - key
-                              type: object
-                              x-kubernetes-map-type: atomic
-                            secret:
-                              description: Secret containing data to use for the targets.
-                              properties:
-                                key:
-                                  description: The key of the secret to select from.  Must
-                                    be a valid secret key.
-                                  type: string
-                                name:
-                                  description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                    TODO: Add other useful fields. apiVersion, kind,
-                                    uid?'
-                                  type: string
-                                optional:
-                                  description: Specify whether the Secret or its key
-                                    must be defined
-                                  type: boolean
-                              required:
-                              - key
-                              type: object
-                              x-kubernetes-map-type: atomic
-                          type: object
-                        clientSecret:
-                          description: The secret containing the OAuth2 client secret
-                          properties:
-                            key:
-                              description: The key of the secret to select from.  Must
-                                be a valid secret key.
-                              type: string
-                            name:
-                              description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                TODO: Add other useful fields. apiVersion, kind, uid?'
-                              type: string
-                            optional:
-                              description: Specify whether the Secret or its key must
-                                be defined
-                              type: boolean
-                          required:
-                          - key
-                          type: object
-                          x-kubernetes-map-type: atomic
-                        endpointParams:
-                          additionalProperties:
-                            type: string
-                          description: Parameters to append to the token URL
-                          type: object
-                        scopes:
-                          description: OAuth2 scopes used for the token request
-                          items:
-                            type: string
-                          type: array
-                        tokenUrl:
-                          description: The URL to fetch the token from
-                          minLength: 1
-                          type: string
-                      required:
-                      - clientId
-                      - clientSecret
-                      - tokenUrl
-                      type: object
-                    proxyUrl:
-                      description: ProxyURL to proxy requests through. Optional.
-                      type: string
-                    tenantId:
-                      description: Tenant ID used by default to push logs to Loki.
-                        If omitted assumes remote Loki is running in single-tenant
-                        mode or an authentication layer is used to inject an X-Scope-OrgID
-                        header.
-                      type: string
-                    timeout:
-                      description: Maximum time to wait for a server to respond to
-                        a request.
-                      type: string
-                    tlsConfig:
-                      description: TLSConfig to use for the client. Only used when
-                        the protocol of the URL is https.
-                      properties:
-                        ca:
-                          description: Certificate authority used when verifying server
-                            certificates.
-                          properties:
-                            configMap:
-                              description: ConfigMap containing data to use for the
-                                targets.
-                              properties:
-                                key:
-                                  description: The key to select.
-                                  type: string
-                                name:
-                                  description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                    TODO: Add other useful fields. apiVersion, kind,
-                                    uid?'
-                                  type: string
-                                optional:
-                                  description: Specify whether the ConfigMap or its
-                                    key must be defined
-                                  type: boolean
-                              required:
-                              - key
-                              type: object
-                              x-kubernetes-map-type: atomic
-                            secret:
-                              description: Secret containing data to use for the targets.
-                              properties:
-                                key:
-                                  description: The key of the secret to select from.  Must
-                                    be a valid secret key.
-                                  type: string
-                                name:
-                                  description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                    TODO: Add other useful fields. apiVersion, kind,
-                                    uid?'
-                                  type: string
-                                optional:
-                                  description: Specify whether the Secret or its key
-                                    must be defined
-                                  type: boolean
-                              required:
-                              - key
-                              type: object
-                              x-kubernetes-map-type: atomic
-                          type: object
-                        caFile:
-                          description: Path to the CA cert in the Prometheus container
-                            to use for the targets.
-                          type: string
-                        cert:
-                          description: Client certificate to present when doing client-authentication.
-                          properties:
-                            configMap:
-                              description: ConfigMap containing data to use for the
-                                targets.
-                              properties:
-                                key:
-                                  description: The key to select.
-                                  type: string
-                                name:
-                                  description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                    TODO: Add other useful fields. apiVersion, kind,
-                                    uid?'
-                                  type: string
-                                optional:
-                                  description: Specify whether the ConfigMap or its
-                                    key must be defined
-                                  type: boolean
-                              required:
-                              - key
-                              type: object
-                              x-kubernetes-map-type: atomic
-                            secret:
-                              description: Secret containing data to use for the targets.
-                              properties:
-                                key:
-                                  description: The key of the secret to select from.  Must
-                                    be a valid secret key.
-                                  type: string
-                                name:
-                                  description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                    TODO: Add other useful fields. apiVersion, kind,
-                                    uid?'
-                                  type: string
-                                optional:
-                                  description: Specify whether the Secret or its key
-                                    must be defined
-                                  type: boolean
-                              required:
-                              - key
-                              type: object
-                              x-kubernetes-map-type: atomic
-                          type: object
-                        certFile:
-                          description: Path to the client cert file in the Prometheus
-                            container for the targets.
-                          type: string
-                        insecureSkipVerify:
-                          description: Disable target certificate validation.
-                          type: boolean
-                        keyFile:
-                          description: Path to the client key file in the Prometheus
-                            container for the targets.
-                          type: string
-                        keySecret:
-                          description: Secret containing the client key file for the
-                            targets.
-                          properties:
-                            key:
-                              description: The key of the secret to select from.  Must
-                                be a valid secret key.
-                              type: string
-                            name:
-                              description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                TODO: Add other useful fields. apiVersion, kind, uid?'
-                              type: string
-                            optional:
-                              description: Specify whether the Secret or its key must
-                                be defined
-                              type: boolean
-                          required:
-                          - key
-                          type: object
-                          x-kubernetes-map-type: atomic
-                        serverName:
-                          description: Used to verify the hostname for the targets.
-                          type: string
-                      type: object
-                    url:
-                      description: 'URL is the URL where Loki is listening. Must be
-                        a full HTTP URL, including protocol. Required. Example: https://logs-prod-us-central1.grafana.net/loki/api/v1/push.'
-                      type: string
-                  required:
-                  - url
-                  type: object
-                type: array
-              podLogsNamespaceSelector:
-                description: Set of labels to determine which namespaces should be
-                  watched for PodLogs. If not provided, checks only namespace of the
-                  instance.
-                properties:
-                  matchExpressions:
-                    description: matchExpressions is a list of label selector requirements.
-                      The requirements are ANDed.
-                    items:
-                      description: A label selector requirement is a selector that
-                        contains values, a key, and an operator that relates the key
-                        and values.
-                      properties:
-                        key:
-                          description: key is the label key that the selector applies
-                            to.
-                          type: string
-                        operator:
-                          description: operator represents a key's relationship to
-                            a set of values. Valid operators are In, NotIn, Exists
-                            and DoesNotExist.
-                          type: string
-                        values:
-                          description: values is an array of string values. If the
-                            operator is In or NotIn, the values array must be non-empty.
-                            If the operator is Exists or DoesNotExist, the values
-                            array must be empty. This array is replaced during a strategic
-                            merge patch.
-                          items:
-                            type: string
-                          type: array
-                      required:
-                      - key
-                      - operator
-                      type: object
-                    type: array
-                  matchLabels:
-                    additionalProperties:
-                      type: string
-                    description: matchLabels is a map of {key,value} pairs. A single
-                      {key,value} in the matchLabels map is equivalent to an element
-                      of matchExpressions, whose key field is "key", the operator
-                      is "In", and the values array contains only "value". The requirements
-                      are ANDed.
-                    type: object
-                type: object
-                x-kubernetes-map-type: atomic
-              podLogsSelector:
-                description: Determines which PodLogs should be selected for including
-                  in this instance.
-                properties:
-                  matchExpressions:
-                    description: matchExpressions is a list of label selector requirements.
-                      The requirements are ANDed.
-                    items:
-                      description: A label selector requirement is a selector that
-                        contains values, a key, and an operator that relates the key
-                        and values.
-                      properties:
-                        key:
-                          description: key is the label key that the selector applies
-                            to.
-                          type: string
-                        operator:
-                          description: operator represents a key's relationship to
-                            a set of values. Valid operators are In, NotIn, Exists
-                            and DoesNotExist.
-                          type: string
-                        values:
-                          description: values is an array of string values. If the
-                            operator is In or NotIn, the values array must be non-empty.
-                            If the operator is Exists or DoesNotExist, the values
-                            array must be empty. This array is replaced during a strategic
-                            merge patch.
-                          items:
-                            type: string
-                          type: array
-                      required:
-                      - key
-                      - operator
-                      type: object
-                    type: array
-                  matchLabels:
-                    additionalProperties:
-                      type: string
-                    description: matchLabels is a map of {key,value} pairs. A single
-                      {key,value} in the matchLabels map is equivalent to an element
-                      of matchExpressions, whose key field is "key", the operator
-                      is "In", and the values array contains only "value". The requirements
-                      are ANDed.
-                    type: object
-                type: object
-                x-kubernetes-map-type: atomic
-              targetConfig:
-                description: Configures how tailed targets are watched.
-                properties:
-                  syncPeriod:
-                    description: Period to resync directories being watched and files
-                      being tailed to discover new ones or stop watching removed ones.
-                    type: string
-                type: object
-            type: object
-        type: object
-    served: true
-    storage: true
diff --git a/production/operator/crds/monitoring.grafana.com_metricsinstances.yaml b/production/operator/crds/monitoring.grafana.com_metricsinstances.yaml
deleted file mode 100644
index 015c0339ce1a..000000000000
--- a/production/operator/crds/monitoring.grafana.com_metricsinstances.yaml
+++ /dev/null
@@ -1,861 +0,0 @@
----
-apiVersion: apiextensions.k8s.io/v1
-kind: CustomResourceDefinition
-metadata:
-  annotations:
-    controller-gen.kubebuilder.io/version: v0.9.2
-  creationTimestamp: null
-  name: metricsinstances.monitoring.grafana.com
-spec:
-  group: monitoring.grafana.com
-  names:
-    categories:
-    - agent-operator
-    kind: MetricsInstance
-    listKind: MetricsInstanceList
-    plural: metricsinstances
-    singular: metricsinstance
-  scope: Namespaced
-  versions:
-  - name: v1alpha1
-    schema:
-      openAPIV3Schema:
-        description: MetricsInstance controls an individual Metrics instance within
-          a Grafana Agent deployment.
-        properties:
-          apiVersion:
-            description: 'APIVersion defines the versioned schema of this representation
-              of an object. Servers should convert recognized schemas to the latest
-              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
-            type: string
-          kind:
-            description: 'Kind is a string value representing the REST resource this
-              object represents. Servers may infer this from the endpoint the client
-              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
-            type: string
-          metadata:
-            type: object
-          spec:
-            description: Spec holds the specification of the desired behavior for
-              the Metrics instance.
-            properties:
-              additionalScrapeConfigs:
-                description: 'AdditionalScrapeConfigs lets you specify a key of a
-                  Secret containing additional Grafana Agent Prometheus scrape configurations.
-                  The specified scrape configurations are appended to the configurations
-                  generated by Grafana Agent Operator. Specified job configurations
-                  must have the form specified in the official Prometheus documentation:
-                  https://prometheus.io/docs/prometheus/latest/configuration/configuration/#scrape_config.
-                  As scrape configs are appended, you must make sure the configuration
-                  is still valid. Note that it''s possible that this feature will
-                  break future upgrades of Grafana Agent. Review both Grafana Agent
-                  and Prometheus release notes to ensure that no incompatible scrape
-                  configs will break Grafana Agent after the upgrade.'
-                properties:
-                  key:
-                    description: The key of the secret to select from.  Must be a
-                      valid secret key.
-                    type: string
-                  name:
-                    description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                      TODO: Add other useful fields. apiVersion, kind, uid?'
-                    type: string
-                  optional:
-                    description: Specify whether the Secret or its key must be defined
-                    type: boolean
-                required:
-                - key
-                type: object
-                x-kubernetes-map-type: atomic
-              maxWALTime:
-                description: MaxWALTime is the maximum amount of time that series
-                  and samples can exist in the WAL before being forcibly deleted.
-                type: string
-              minWALTime:
-                description: MinWALTime is the minimum amount of time that series
-                  and samples can exist in the WAL before being considered for deletion.
-                type: string
-              podMonitorNamespaceSelector:
-                description: PodMonitorNamespaceSelector are the set of labels to
-                  determine which namespaces to watch for PodMonitor discovery. If
-                  nil, it only checks its own namespace.
-                properties:
-                  matchExpressions:
-                    description: matchExpressions is a list of label selector requirements.
-                      The requirements are ANDed.
-                    items:
-                      description: A label selector requirement is a selector that
-                        contains values, a key, and an operator that relates the key
-                        and values.
-                      properties:
-                        key:
-                          description: key is the label key that the selector applies
-                            to.
-                          type: string
-                        operator:
-                          description: operator represents a key's relationship to
-                            a set of values. Valid operators are In, NotIn, Exists
-                            and DoesNotExist.
-                          type: string
-                        values:
-                          description: values is an array of string values. If the
-                            operator is In or NotIn, the values array must be non-empty.
-                            If the operator is Exists or DoesNotExist, the values
-                            array must be empty. This array is replaced during a strategic
-                            merge patch.
-                          items:
-                            type: string
-                          type: array
-                      required:
-                      - key
-                      - operator
-                      type: object
-                    type: array
-                  matchLabels:
-                    additionalProperties:
-                      type: string
-                    description: matchLabels is a map of {key,value} pairs. A single
-                      {key,value} in the matchLabels map is equivalent to an element
-                      of matchExpressions, whose key field is "key", the operator
-                      is "In", and the values array contains only "value". The requirements
-                      are ANDed.
-                    type: object
-                type: object
-                x-kubernetes-map-type: atomic
-              podMonitorSelector:
-                description: PodMonitorSelector determines which PodMonitors to selected
-                  for target discovery. Experimental.
-                properties:
-                  matchExpressions:
-                    description: matchExpressions is a list of label selector requirements.
-                      The requirements are ANDed.
-                    items:
-                      description: A label selector requirement is a selector that
-                        contains values, a key, and an operator that relates the key
-                        and values.
-                      properties:
-                        key:
-                          description: key is the label key that the selector applies
-                            to.
-                          type: string
-                        operator:
-                          description: operator represents a key's relationship to
-                            a set of values. Valid operators are In, NotIn, Exists
-                            and DoesNotExist.
-                          type: string
-                        values:
-                          description: values is an array of string values. If the
-                            operator is In or NotIn, the values array must be non-empty.
-                            If the operator is Exists or DoesNotExist, the values
-                            array must be empty. This array is replaced during a strategic
-                            merge patch.
-                          items:
-                            type: string
-                          type: array
-                      required:
-                      - key
-                      - operator
-                      type: object
-                    type: array
-                  matchLabels:
-                    additionalProperties:
-                      type: string
-                    description: matchLabels is a map of {key,value} pairs. A single
-                      {key,value} in the matchLabels map is equivalent to an element
-                      of matchExpressions, whose key field is "key", the operator
-                      is "In", and the values array contains only "value". The requirements
-                      are ANDed.
-                    type: object
-                type: object
-                x-kubernetes-map-type: atomic
-              probeNamespaceSelector:
-                description: ProbeNamespaceSelector is the set of labels that determines
-                  which namespaces to watch for Probe discovery. If nil, it only checks
-                  own namespace.
-                properties:
-                  matchExpressions:
-                    description: matchExpressions is a list of label selector requirements.
-                      The requirements are ANDed.
-                    items:
-                      description: A label selector requirement is a selector that
-                        contains values, a key, and an operator that relates the key
-                        and values.
-                      properties:
-                        key:
-                          description: key is the label key that the selector applies
-                            to.
-                          type: string
-                        operator:
-                          description: operator represents a key's relationship to
-                            a set of values. Valid operators are In, NotIn, Exists
-                            and DoesNotExist.
-                          type: string
-                        values:
-                          description: values is an array of string values. If the
-                            operator is In or NotIn, the values array must be non-empty.
-                            If the operator is Exists or DoesNotExist, the values
-                            array must be empty. This array is replaced during a strategic
-                            merge patch.
-                          items:
-                            type: string
-                          type: array
-                      required:
-                      - key
-                      - operator
-                      type: object
-                    type: array
-                  matchLabels:
-                    additionalProperties:
-                      type: string
-                    description: matchLabels is a map of {key,value} pairs. A single
-                      {key,value} in the matchLabels map is equivalent to an element
-                      of matchExpressions, whose key field is "key", the operator
-                      is "In", and the values array contains only "value". The requirements
-                      are ANDed.
-                    type: object
-                type: object
-                x-kubernetes-map-type: atomic
-              probeSelector:
-                description: ProbeSelector determines which Probes to select for target
-                  discovery.
-                properties:
-                  matchExpressions:
-                    description: matchExpressions is a list of label selector requirements.
-                      The requirements are ANDed.
-                    items:
-                      description: A label selector requirement is a selector that
-                        contains values, a key, and an operator that relates the key
-                        and values.
-                      properties:
-                        key:
-                          description: key is the label key that the selector applies
-                            to.
-                          type: string
-                        operator:
-                          description: operator represents a key's relationship to
-                            a set of values. Valid operators are In, NotIn, Exists
-                            and DoesNotExist.
-                          type: string
-                        values:
-                          description: values is an array of string values. If the
-                            operator is In or NotIn, the values array must be non-empty.
-                            If the operator is Exists or DoesNotExist, the values
-                            array must be empty. This array is replaced during a strategic
-                            merge patch.
-                          items:
-                            type: string
-                          type: array
-                      required:
-                      - key
-                      - operator
-                      type: object
-                    type: array
-                  matchLabels:
-                    additionalProperties:
-                      type: string
-                    description: matchLabels is a map of {key,value} pairs. A single
-                      {key,value} in the matchLabels map is equivalent to an element
-                      of matchExpressions, whose key field is "key", the operator
-                      is "In", and the values array contains only "value". The requirements
-                      are ANDed.
-                    type: object
-                type: object
-                x-kubernetes-map-type: atomic
-              remoteFlushDeadline:
-                description: RemoteFlushDeadline is the deadline for flushing data
-                  when an instance shuts down.
-                type: string
-              remoteWrite:
-                description: RemoteWrite controls remote_write settings for this instance.
-                items:
-                  description: RemoteWriteSpec defines the remote_write configuration
-                    for Prometheus.
-                  properties:
-                    basicAuth:
-                      description: BasicAuth for the URL.
-                      properties:
-                        password:
-                          description: The secret in the service monitor namespace
-                            that contains the password for authentication.
-                          properties:
-                            key:
-                              description: The key of the secret to select from.  Must
-                                be a valid secret key.
-                              type: string
-                            name:
-                              description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                TODO: Add other useful fields. apiVersion, kind, uid?'
-                              type: string
-                            optional:
-                              description: Specify whether the Secret or its key must
-                                be defined
-                              type: boolean
-                          required:
-                          - key
-                          type: object
-                          x-kubernetes-map-type: atomic
-                        username:
-                          description: The secret in the service monitor namespace
-                            that contains the username for authentication.
-                          properties:
-                            key:
-                              description: The key of the secret to select from.  Must
-                                be a valid secret key.
-                              type: string
-                            name:
-                              description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                TODO: Add other useful fields. apiVersion, kind, uid?'
-                              type: string
-                            optional:
-                              description: Specify whether the Secret or its key must
-                                be defined
-                              type: boolean
-                          required:
-                          - key
-                          type: object
-                          x-kubernetes-map-type: atomic
-                      type: object
-                    bearerToken:
-                      description: BearerToken used for remote_write.
-                      type: string
-                    bearerTokenFile:
-                      description: BearerTokenFile used to read bearer token.
-                      type: string
-                    headers:
-                      additionalProperties:
-                        type: string
-                      description: Headers is a set of custom HTTP headers to be sent
-                        along with each remote_write request. Be aware that any headers
-                        set by Grafana Agent itself can't be overwritten.
-                      type: object
-                    metadataConfig:
-                      description: MetadataConfig configures the sending of series
-                        metadata to remote storage.
-                      properties:
-                        send:
-                          description: Send enables metric metadata to be sent to
-                            remote storage.
-                          type: boolean
-                        sendInterval:
-                          description: SendInterval controls how frequently metric
-                            metadata is sent to remote storage.
-                          type: string
-                      type: object
-                    name:
-                      description: Name of the remote_write queue. Must be unique
-                        if specified. The name is used in metrics and logging in order
-                        to differentiate queues.
-                      type: string
-                    oauth2:
-                      description: Oauth2 for URL
-                      properties:
-                        clientId:
-                          description: The secret or configmap containing the OAuth2
-                            client id
-                          properties:
-                            configMap:
-                              description: ConfigMap containing data to use for the
-                                targets.
-                              properties:
-                                key:
-                                  description: The key to select.
-                                  type: string
-                                name:
-                                  description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                    TODO: Add other useful fields. apiVersion, kind,
-                                    uid?'
-                                  type: string
-                                optional:
-                                  description: Specify whether the ConfigMap or its
-                                    key must be defined
-                                  type: boolean
-                              required:
-                              - key
-                              type: object
-                              x-kubernetes-map-type: atomic
-                            secret:
-                              description: Secret containing data to use for the targets.
-                              properties:
-                                key:
-                                  description: The key of the secret to select from.  Must
-                                    be a valid secret key.
-                                  type: string
-                                name:
-                                  description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                    TODO: Add other useful fields. apiVersion, kind,
-                                    uid?'
-                                  type: string
-                                optional:
-                                  description: Specify whether the Secret or its key
-                                    must be defined
-                                  type: boolean
-                              required:
-                              - key
-                              type: object
-                              x-kubernetes-map-type: atomic
-                          type: object
-                        clientSecret:
-                          description: The secret containing the OAuth2 client secret
-                          properties:
-                            key:
-                              description: The key of the secret to select from.  Must
-                                be a valid secret key.
-                              type: string
-                            name:
-                              description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                TODO: Add other useful fields. apiVersion, kind, uid?'
-                              type: string
-                            optional:
-                              description: Specify whether the Secret or its key must
-                                be defined
-                              type: boolean
-                          required:
-                          - key
-                          type: object
-                          x-kubernetes-map-type: atomic
-                        endpointParams:
-                          additionalProperties:
-                            type: string
-                          description: Parameters to append to the token URL
-                          type: object
-                        scopes:
-                          description: OAuth2 scopes used for the token request
-                          items:
-                            type: string
-                          type: array
-                        tokenUrl:
-                          description: The URL to fetch the token from
-                          minLength: 1
-                          type: string
-                      required:
-                      - clientId
-                      - clientSecret
-                      - tokenUrl
-                      type: object
-                    proxyUrl:
-                      description: ProxyURL to proxy requests through. Optional.
-                      type: string
-                    queueConfig:
-                      description: QueueConfig allows tuning of the remote_write queue
-                        parameters.
-                      properties:
-                        batchSendDeadline:
-                          description: BatchSendDeadline is the maximum time a sample
-                            will wait in the buffer.
-                          type: string
-                        capacity:
-                          description: Capacity is the number of samples to buffer
-                            per shard before samples start being dropped.
-                          type: integer
-                        maxBackoff:
-                          description: MaxBackoff is the maximum retry delay.
-                          type: string
-                        maxRetries:
-                          description: MaxRetries is the maximum number of times to
-                            retry a batch on recoverable errors.
-                          type: integer
-                        maxSamplesPerSend:
-                          description: MaxSamplesPerSend is the maximum number of
-                            samples per send.
-                          type: integer
-                        maxShards:
-                          description: MaxShards is the maximum number of shards,
-                            i.e., the amount of concurrency.
-                          type: integer
-                        minBackoff:
-                          description: MinBackoff is the initial retry delay. MinBackoff
-                            is doubled for every retry.
-                          type: string
-                        minShards:
-                          description: MinShards is the minimum number of shards,
-                            i.e., the amount of concurrency.
-                          type: integer
-                        retryOnRateLimit:
-                          description: RetryOnRateLimit retries requests when encountering
-                            rate limits.
-                          type: boolean
-                      type: object
-                    remoteTimeout:
-                      description: RemoteTimeout is the timeout for requests to the
-                        remote_write endpoint.
-                      type: string
-                    sigv4:
-                      description: SigV4 configures SigV4-based authentication to
-                        the remote_write endpoint. SigV4-based authentication is used
-                        if SigV4 is defined, even with an empty object.
-                      properties:
-                        accessKey:
-                          description: AccessKey holds the secret of the AWS API access
-                            key to use for signing. If not provided, the environment
-                            variable AWS_ACCESS_KEY_ID is used.
-                          properties:
-                            key:
-                              description: The key of the secret to select from.  Must
-                                be a valid secret key.
-                              type: string
-                            name:
-                              description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                TODO: Add other useful fields. apiVersion, kind, uid?'
-                              type: string
-                            optional:
-                              description: Specify whether the Secret or its key must
-                                be defined
-                              type: boolean
-                          required:
-                          - key
-                          type: object
-                          x-kubernetes-map-type: atomic
-                        profile:
-                          description: Profile is the named AWS profile to use for
-                            authentication.
-                          type: string
-                        region:
-                          description: Region of the AWS endpoint. If blank, the region
-                            from the default credentials chain is used.
-                          type: string
-                        roleARN:
-                          description: RoleARN is the AWS Role ARN to use for authentication,
-                            as an alternative for using the AWS API keys.
-                          type: string
-                        secretKey:
-                          description: SecretKey of the AWS API to use for signing.
-                            If blank, the environment variable AWS_SECRET_ACCESS_KEY
-                            is used.
-                          properties:
-                            key:
-                              description: The key of the secret to select from.  Must
-                                be a valid secret key.
-                              type: string
-                            name:
-                              description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                TODO: Add other useful fields. apiVersion, kind, uid?'
-                              type: string
-                            optional:
-                              description: Specify whether the Secret or its key must
-                                be defined
-                              type: boolean
-                          required:
-                          - key
-                          type: object
-                          x-kubernetes-map-type: atomic
-                      type: object
-                    tlsConfig:
-                      description: TLSConfig to use for remote_write.
-                      properties:
-                        ca:
-                          description: Certificate authority used when verifying server
-                            certificates.
-                          properties:
-                            configMap:
-                              description: ConfigMap containing data to use for the
-                                targets.
-                              properties:
-                                key:
-                                  description: The key to select.
-                                  type: string
-                                name:
-                                  description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                    TODO: Add other useful fields. apiVersion, kind,
-                                    uid?'
-                                  type: string
-                                optional:
-                                  description: Specify whether the ConfigMap or its
-                                    key must be defined
-                                  type: boolean
-                              required:
-                              - key
-                              type: object
-                              x-kubernetes-map-type: atomic
-                            secret:
-                              description: Secret containing data to use for the targets.
-                              properties:
-                                key:
-                                  description: The key of the secret to select from.  Must
-                                    be a valid secret key.
-                                  type: string
-                                name:
-                                  description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                    TODO: Add other useful fields. apiVersion, kind,
-                                    uid?'
-                                  type: string
-                                optional:
-                                  description: Specify whether the Secret or its key
-                                    must be defined
-                                  type: boolean
-                              required:
-                              - key
-                              type: object
-                              x-kubernetes-map-type: atomic
-                          type: object
-                        caFile:
-                          description: Path to the CA cert in the Prometheus container
-                            to use for the targets.
-                          type: string
-                        cert:
-                          description: Client certificate to present when doing client-authentication.
-                          properties:
-                            configMap:
-                              description: ConfigMap containing data to use for the
-                                targets.
-                              properties:
-                                key:
-                                  description: The key to select.
-                                  type: string
-                                name:
-                                  description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                    TODO: Add other useful fields. apiVersion, kind,
-                                    uid?'
-                                  type: string
-                                optional:
-                                  description: Specify whether the ConfigMap or its
-                                    key must be defined
-                                  type: boolean
-                              required:
-                              - key
-                              type: object
-                              x-kubernetes-map-type: atomic
-                            secret:
-                              description: Secret containing data to use for the targets.
-                              properties:
-                                key:
-                                  description: The key of the secret to select from.  Must
-                                    be a valid secret key.
-                                  type: string
-                                name:
-                                  description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                    TODO: Add other useful fields. apiVersion, kind,
-                                    uid?'
-                                  type: string
-                                optional:
-                                  description: Specify whether the Secret or its key
-                                    must be defined
-                                  type: boolean
-                              required:
-                              - key
-                              type: object
-                              x-kubernetes-map-type: atomic
-                          type: object
-                        certFile:
-                          description: Path to the client cert file in the Prometheus
-                            container for the targets.
-                          type: string
-                        insecureSkipVerify:
-                          description: Disable target certificate validation.
-                          type: boolean
-                        keyFile:
-                          description: Path to the client key file in the Prometheus
-                            container for the targets.
-                          type: string
-                        keySecret:
-                          description: Secret containing the client key file for the
-                            targets.
-                          properties:
-                            key:
-                              description: The key of the secret to select from.  Must
-                                be a valid secret key.
-                              type: string
-                            name:
-                              description: 'Name of the referent. More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names
-                                TODO: Add other useful fields. apiVersion, kind, uid?'
-                              type: string
-                            optional:
-                              description: Specify whether the Secret or its key must
-                                be defined
-                              type: boolean
-                          required:
-                          - key
-                          type: object
-                          x-kubernetes-map-type: atomic
-                        serverName:
-                          description: Used to verify the hostname for the targets.
-                          type: string
-                      type: object
-                    url:
-                      description: URL of the endpoint to send samples to.
-                      type: string
-                    writeRelabelConfigs:
-                      description: WriteRelabelConfigs holds relabel_configs to relabel
-                        samples before they are sent to the remote_write endpoint.
-                      items:
-                        description: 'RelabelConfig allows dynamic rewriting of the
-                          label set, being applied to samples before ingestion. It
-                          defines `<metric_relabel_configs>`-section of Prometheus
-                          configuration. More info: https://prometheus.io/docs/prometheus/latest/configuration/configuration/#metric_relabel_configs'
-                        properties:
-                          action:
-                            default: replace
-                            description: Action to perform based on regex matching.
-                              Default is 'replace'. uppercase and lowercase actions
-                              require Prometheus >= 2.36.
-                            enum:
-                            - replace
-                            - Replace
-                            - keep
-                            - Keep
-                            - drop
-                            - Drop
-                            - hashmod
-                            - HashMod
-                            - labelmap
-                            - LabelMap
-                            - labeldrop
-                            - LabelDrop
-                            - labelkeep
-                            - LabelKeep
-                            - lowercase
-                            - Lowercase
-                            - uppercase
-                            - Uppercase
-                            - keepequal
-                            - KeepEqual
-                            - dropequal
-                            - DropEqual
-                            type: string
-                          modulus:
-                            description: Modulus to take of the hash of the source
-                              label values.
-                            format: int64
-                            type: integer
-                          regex:
-                            description: Regular expression against which the extracted
-                              value is matched. Default is '(.*)'
-                            type: string
-                          replacement:
-                            description: Replacement value against which a regex replace
-                              is performed if the regular expression matches. Regex
-                              capture groups are available. Default is '$1'
-                            type: string
-                          separator:
-                            description: Separator placed between concatenated source
-                              label values. default is ';'.
-                            type: string
-                          sourceLabels:
-                            description: The source labels select values from existing
-                              labels. Their content is concatenated using the configured
-                              separator and matched against the configured regular
-                              expression for the replace, keep, and drop actions.
-                            items:
-                              description: LabelName is a valid Prometheus label name
-                                which may only contain ASCII letters, numbers, as
-                                well as underscores.
-                              pattern: ^[a-zA-Z_][a-zA-Z0-9_]*$
-                              type: string
-                            type: array
-                          targetLabel:
-                            description: Label to which the resulting value is written
-                              in a replace action. It is mandatory for replace actions.
-                              Regex capture groups are available.
-                            type: string
-                        type: object
-                      type: array
-                  required:
-                  - url
-                  type: object
-                type: array
-              serviceMonitorNamespaceSelector:
-                description: ServiceMonitorNamespaceSelector is the set of labels
-                  that determine which namespaces to watch for ServiceMonitor discovery.
-                  If nil, it only checks its own namespace.
-                properties:
-                  matchExpressions:
-                    description: matchExpressions is a list of label selector requirements.
-                      The requirements are ANDed.
-                    items:
-                      description: A label selector requirement is a selector that
-                        contains values, a key, and an operator that relates the key
-                        and values.
-                      properties:
-                        key:
-                          description: key is the label key that the selector applies
-                            to.
-                          type: string
-                        operator:
-                          description: operator represents a key's relationship to
-                            a set of values. Valid operators are In, NotIn, Exists
-                            and DoesNotExist.
-                          type: string
-                        values:
-                          description: values is an array of string values. If the
-                            operator is In or NotIn, the values array must be non-empty.
-                            If the operator is Exists or DoesNotExist, the values
-                            array must be empty. This array is replaced during a strategic
-                            merge patch.
-                          items:
-                            type: string
-                          type: array
-                      required:
-                      - key
-                      - operator
-                      type: object
-                    type: array
-                  matchLabels:
-                    additionalProperties:
-                      type: string
-                    description: matchLabels is a map of {key,value} pairs. A single
-                      {key,value} in the matchLabels map is equivalent to an element
-                      of matchExpressions, whose key field is "key", the operator
-                      is "In", and the values array contains only "value". The requirements
-                      are ANDed.
-                    type: object
-                type: object
-                x-kubernetes-map-type: atomic
-              serviceMonitorSelector:
-                description: ServiceMonitorSelector determines which ServiceMonitors
-                  to select for target discovery.
-                properties:
-                  matchExpressions:
-                    description: matchExpressions is a list of label selector requirements.
-                      The requirements are ANDed.
-                    items:
-                      description: A label selector requirement is a selector that
-                        contains values, a key, and an operator that relates the key
-                        and values.
-                      properties:
-                        key:
-                          description: key is the label key that the selector applies
-                            to.
-                          type: string
-                        operator:
-                          description: operator represents a key's relationship to
-                            a set of values. Valid operators are In, NotIn, Exists
-                            and DoesNotExist.
-                          type: string
-                        values:
-                          description: values is an array of string values. If the
-                            operator is In or NotIn, the values array must be non-empty.
-                            If the operator is Exists or DoesNotExist, the values
-                            array must be empty. This array is replaced during a strategic
-                            merge patch.
-                          items:
-                            type: string
-                          type: array
-                      required:
-                      - key
-                      - operator
-                      type: object
-                    type: array
-                  matchLabels:
-                    additionalProperties:
-                      type: string
-                    description: matchLabels is a map of {key,value} pairs. A single
-                      {key,value} in the matchLabels map is equivalent to an element
-                      of matchExpressions, whose key field is "key", the operator
-                      is "In", and the values array contains only "value". The requirements
-                      are ANDed.
-                    type: object
-                type: object
-                x-kubernetes-map-type: atomic
-              walTruncateFrequency:
-                description: WALTruncateFrequency specifies how frequently to run
-                  the WAL truncation process. Higher values cause the WAL to increase
-                  and for old series to stay in the WAL longer, but reduces the chance
-                  of data loss when remote_write fails for longer than the given frequency.
-                type: string
-              writeStaleOnShutdown:
-                description: WriteStaleOnShutdown writes staleness markers on shutdown
-                  for all series.
-                type: boolean
-            type: object
-        type: object
-    served: true
-    storage: true
diff --git a/production/operator/crds/monitoring.grafana.com_podlogs.yaml b/production/operator/crds/monitoring.grafana.com_podlogs.yaml
deleted file mode 100644
index ff6531f61e88..000000000000
--- a/production/operator/crds/monitoring.grafana.com_podlogs.yaml
+++ /dev/null
@@ -1,588 +0,0 @@
----
-apiVersion: apiextensions.k8s.io/v1
-kind: CustomResourceDefinition
-metadata:
-  annotations:
-    controller-gen.kubebuilder.io/version: v0.9.2
-  creationTimestamp: null
-  name: podlogs.monitoring.grafana.com
-spec:
-  group: monitoring.grafana.com
-  names:
-    categories:
-    - agent-operator
-    kind: PodLogs
-    listKind: PodLogsList
-    plural: podlogs
-    singular: podlogs
-  scope: Namespaced
-  versions:
-  - name: v1alpha1
-    schema:
-      openAPIV3Schema:
-        description: PodLogs defines how to collect logs for a pod.
-        properties:
-          apiVersion:
-            description: 'APIVersion defines the versioned schema of this representation
-              of an object. Servers should convert recognized schemas to the latest
-              internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
-            type: string
-          kind:
-            description: 'Kind is a string value representing the REST resource this
-              object represents. Servers may infer this from the endpoint the client
-              submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
-            type: string
-          metadata:
-            type: object
-          spec:
-            description: Spec holds the specification of the desired behavior for
-              the PodLogs.
-            properties:
-              jobLabel:
-                description: The label to use to retrieve the job name from.
-                type: string
-              namespaceSelector:
-                description: Selector to select which namespaces the Pod objects are
-                  discovered from.
-                properties:
-                  any:
-                    description: Boolean describing whether all namespaces are selected
-                      in contrast to a list restricting them.
-                    type: boolean
-                  matchNames:
-                    description: List of namespace names to select from.
-                    items:
-                      type: string
-                    type: array
-                type: object
-              pipelineStages:
-                description: Pipeline stages for this pod. Pipeline stages support
-                  transforming and filtering log lines.
-                items:
-                  description: "PipelineStageSpec defines an individual pipeline stage.
-                    Each stage type is mutually exclusive and no more than one may
-                    be set per stage. \n More information on pipelines can be found
-                    in the Promtail documentation: https://grafana.com/docs/loki/latest/clients/promtail/pipelines/"
-                  properties:
-                    cri:
-                      description: 'CRI is a parsing stage that reads log lines using
-                        the standard CRI logging format. Supply cri: {} to enable.'
-                      type: object
-                    docker:
-                      description: 'Docker is a parsing stage that reads log lines
-                        using the standard Docker logging format. Supply docker: {}
-                        to enable.'
-                      type: object
-                    drop:
-                      description: Drop is a filtering stage that lets you drop certain
-                        logs.
-                      properties:
-                        dropCounterReason:
-                          description: Every time a log line is dropped, the metric
-                            logentry_dropped_lines_total is incremented. A "reason"
-                            label is added, and can be customized by providing a custom
-                            value here. Defaults to "drop_stage".
-                          type: string
-                        expression:
-                          description: "RE2 regular expression. \n If source is provided,
-                            the regex attempts to match the source. \n If no source
-                            is provided, then the regex attempts to attach the log
-                            line. \n If the provided regex matches the log line or
-                            a provided source, the line is dropped."
-                          type: string
-                        longerThan:
-                          description: LongerThan will drop a log line if it its content
-                            is longer than this value (in bytes). Can be expressed
-                            as an integer (8192) or a number with a suffix (8kb).
-                          type: string
-                        olderThan:
-                          description: OlderThan will be parsed as a Go duration.
-                            If the log line's timestamp is older than the current
-                            time minus the provided duration, it will be dropped.
-                          type: string
-                        source:
-                          description: Name from the extract data to parse. If empty,
-                            uses the log message.
-                          type: string
-                        value:
-                          description: "Value can only be specified when source is
-                            specified. If the value provided is an exact match for
-                            the given source then the line will be dropped. \n Mutually
-                            exclusive with expression."
-                          type: string
-                      type: object
-                    json:
-                      description: "JSON is a parsing stage that reads the log line
-                        as JSON and accepts JMESPath expressions to extract data.
-                        \n Information on JMESPath: http://jmespath.org/"
-                      properties:
-                        expressions:
-                          additionalProperties:
-                            type: string
-                          description: "Set of the key/value pairs of JMESPath expressions.
-                            The key will be the key in the extracted data while the
-                            expression will be the value, evaluated as a JMESPath
-                            from the source data. \n Literal JMESPath expressions
-                            can be used by wrapping a key in double quotes, which
-                            then must be wrapped again in single quotes in YAML so
-                            they get passed to the JMESPath parser."
-                          type: object
-                        source:
-                          description: Name from the extracted data to parse as JSON.
-                            If empty, uses entire log message.
-                          type: string
-                      type: object
-                    labelAllow:
-                      description: LabelAllow is an action stage that only allows
-                        the provided labels to be included in the label set that is
-                        sent to Loki with the log entry.
-                      items:
-                        type: string
-                      type: array
-                    labelDrop:
-                      description: LabelDrop is an action stage that drops labels
-                        from the label set that is sent to Loki with the log entry.
-                      items:
-                        type: string
-                      type: array
-                    labels:
-                      additionalProperties:
-                        type: string
-                      description: "Labels is an action stage that takes data from
-                        the extracted map and modifies the label set that is sent
-                        to Loki with the log entry. \n The key is REQUIRED and represents
-                        the name for the label that will be created. Value is optional
-                        and will be the name from extracted data to use for the value
-                        of the label. If the value is not provided, it defaults to
-                        match the key."
-                      type: object
-                    limit:
-                      description: Limit is a rate-limiting stage that throttles logs
-                        based on several options.
-                      properties:
-                        burst:
-                          description: The cap in the quantity of burst lines that
-                            Promtail will push to Loki.
-                          type: integer
-                        drop:
-                          description: "When drop is true, log lines that exceed the
-                            current rate limit are discarded. When drop is false,
-                            log lines that exceed the current rate limit wait to enter
-                            the back pressure mode. \n Defaults to false."
-                          type: boolean
-                        rate:
-                          description: The rate limit in lines per second that Promtail
-                            will push to Loki.
-                          type: integer
-                      type: object
-                    match:
-                      description: Match is a filtering stage that conditionally applies
-                        a set of stages or drop entries when a log entry matches a
-                        configurable LogQL stream selector and filter expressions.
-                      properties:
-                        action:
-                          description: Determines what action is taken when the selector
-                            matches the log line. Can be keep or drop. Defaults to
-                            keep. When set to drop, entries are dropped and no later
-                            metrics are recorded. Stages must be empty when dropping
-                            metrics.
-                          type: string
-                        dropCounterReason:
-                          description: Every time a log line is dropped, the metric
-                            logentry_dropped_lines_total is incremented. A "reason"
-                            label is added, and can be customized by providing a custom
-                            value here. Defaults to "match_stage."
-                          type: string
-                        pipelineName:
-                          description: Names the pipeline. When defined, creates an
-                            additional label in the pipeline_duration_seconds histogram,
-                            where the value is concatenated with job_name using an
-                            underscore.
-                          type: string
-                        selector:
-                          description: LogQL stream selector and filter expressions.
-                            Required.
-                          type: string
-                        stages:
-                          description: "Nested set of pipeline stages to execute when
-                            action is keep and the log line matches selector. \n An
-                            example value for stages may be: \n stages: | - json:
-                            {} - labelAllow: [foo, bar] \n Note that stages is a string
-                            because SIG API Machinery does not support recursive types,
-                            and so it cannot be validated for correctness. Be careful
-                            not to mistype anything."
-                          type: string
-                      required:
-                      - selector
-                      type: object
-                    metrics:
-                      additionalProperties:
-                        description: MetricsStageSpec is an action stage that allows
-                          for defining and updating metrics based on data from the
-                          extracted map. Created metrics are not pushed to Loki or
-                          Prometheus and are instead exposed via the /metrics endpoint
-                          of the Grafana Agent pod. The Grafana Agent Operator should
-                          be configured with a MetricsInstance that discovers the
-                          logging DaemonSet to collect metrics created by this stage.
-                        properties:
-                          action:
-                            description: "The action to take against the metric. Required.
-                              \n Must be either \"inc\" or \"add\" for type: counter
-                              or type: histogram. When type: gauge, must be one of
-                              \"set\", \"inc\", \"dec\", \"add\", or \"sub\". \n \"add\",
-                              \"set\", or \"sub\" requires the extracted value to
-                              be convertible to a positive float."
-                            type: string
-                          buckets:
-                            description: 'Buckets to create. Bucket values must be
-                              convertible to float64s. Extremely large or small numbers
-                              are subject to some loss of precision. Only valid for
-                              type: histogram.'
-                            items:
-                              type: string
-                            type: array
-                          countEntryBytes:
-                            description: "If true all log line bytes are counted.
-                              Can only be set with matchAll: true and action: add.
-                              \n Only valid for type: counter."
-                            type: boolean
-                          description:
-                            description: Sets the description for the created metric.
-                            type: string
-                          matchAll:
-                            description: "If true, all log lines are counted without
-                              attempting to match the source to the extracted map.
-                              Mutually exclusive with value. \n Only valid for type:
-                              counter."
-                            type: boolean
-                          maxIdleDuration:
-                            description: "Label values on metrics are dynamic which
-                              can cause exported metrics to go stale. To prevent unbounded
-                              cardinality, any metrics not updated within MaxIdleDuration
-                              are removed. \n Must be greater or equal to 1s. Defaults
-                              to 5m."
-                            type: string
-                          prefix:
-                            description: Sets the custom prefix name for the metric.
-                              Defaults to "promtail_custom_".
-                            type: string
-                          source:
-                            description: Key from the extracted data map to use for
-                              the metric. Defaults to the metrics name if not present.
-                            type: string
-                          type:
-                            description: The metric type to create. Must be one of
-                              counter, gauge, histogram. Required.
-                            type: string
-                          value:
-                            description: Filters down source data and only changes
-                              the metric if the targeted value matches the provided
-                              string exactly. If not present, all data matches.
-                            type: string
-                        required:
-                        - action
-                        - type
-                        type: object
-                      description: Metrics is an action stage that supports defining
-                        and updating metrics based on data from the extracted map.
-                        Created metrics are not pushed to Loki or Prometheus and are
-                        instead exposed via the /metrics endpoint of the Grafana Agent
-                        pod. The Grafana Agent Operator should be configured with
-                        a MetricsInstance that discovers the logging DaemonSet to
-                        collect metrics created by this stage.
-                      type: object
-                    multiline:
-                      description: Multiline stage merges multiple lines into a multiline
-                        block before passing it on to the next stage in the pipeline.
-                      properties:
-                        firstLine:
-                          description: RE2 regular expression. Creates a new multiline
-                            block when matched. Required.
-                          type: string
-                        maxLines:
-                          description: Maximum number of lines a block can have. A
-                            new block is started if the number of lines surpasses
-                            this value. Defaults to 128.
-                          type: integer
-                        maxWaitTime:
-                          description: Maximum time to wait before passing on the
-                            multiline block to the next stage if no new lines are
-                            received. Defaults to 3s.
-                          type: string
-                      required:
-                      - firstLine
-                      type: object
-                    output:
-                      description: Output stage is an action stage that takes data
-                        from the extracted map and changes the log line that will
-                        be sent to Loki.
-                      properties:
-                        source:
-                          description: Name from extract data to use for the log entry.
-                            Required.
-                          type: string
-                      required:
-                      - source
-                      type: object
-                    pack:
-                      description: Pack is a transform stage that lets you embed extracted
-                        values and labels into the log line by packing the log line
-                        and labels inside of a JSON object.
-                      properties:
-                        ingestTimestamp:
-                          description: If the resulting log line should use any existing
-                            timestamp or use time.Now() when the line was created.
-                            Set to true when combining several log streams from different
-                            containers to avoid out of order errors.
-                          type: boolean
-                        labels:
-                          description: Name from extracted data or line labels. Required.
-                            Labels provided here are automatically removed from output
-                            labels.
-                          items:
-                            type: string
-                          type: array
-                      required:
-                      - labels
-                      type: object
-                    regex:
-                      description: Regex is a parsing stage that parses a log line
-                        using a regular expression.  Named capture groups in the regex
-                        allows for adding data into the extracted map.
-                      properties:
-                        expression:
-                          description: RE2 regular expression. Each capture group
-                            MUST be named. Required.
-                          type: string
-                        source:
-                          description: Name from extracted data to parse. If empty,
-                            defaults to using the log message.
-                          type: string
-                      required:
-                      - expression
-                      type: object
-                    replace:
-                      description: Replace is a parsing stage that parses a log line
-                        using a regular expression and replaces the log line. Named
-                        capture groups in the regex allows for adding data into the
-                        extracted map.
-                      properties:
-                        expression:
-                          description: RE2 regular expression. Each capture group
-                            MUST be named. Required.
-                          type: string
-                        replace:
-                          description: Value to replace the captured group with.
-                          type: string
-                        source:
-                          description: Name from extracted data to parse. If empty,
-                            defaults to using the log message.
-                          type: string
-                      required:
-                      - expression
-                      type: object
-                    template:
-                      description: Template is a transform stage that manipulates
-                        the values in the extracted map using Go's template syntax.
-                      properties:
-                        source:
-                          description: Name from extracted data to parse. Required.
-                            If empty, defaults to using the log message.
-                          type: string
-                        template:
-                          description: Go template string to use. Required. In addition
-                            to normal template functions, ToLower, ToUpper, Replace,
-                            Trim, TrimLeft, TrimRight, TrimPrefix, and TrimSpace are
-                            also available.
-                          type: string
-                      required:
-                      - source
-                      - template
-                      type: object
-                    tenant:
-                      description: Tenant is an action stage that sets the tenant
-                        ID for the log entry picking it from a field in the extracted
-                        data map. If the field is missing, the default LogsClientSpec.tenantId
-                        will be used.
-                      properties:
-                        label:
-                          description: Name from labels whose value should be set
-                            as tenant ID. Mutually exclusive with source and value.
-                          type: string
-                        source:
-                          description: Name from extracted data to use as the tenant
-                            ID. Mutually exclusive with label and value.
-                          type: string
-                        value:
-                          description: Value to use for the template ID. Useful when
-                            this stage is used within a conditional pipeline such
-                            as match. Mutually exclusive with label and source.
-                          type: string
-                      type: object
-                    timestamp:
-                      description: Timestamp is an action stage that can change the
-                        timestamp of a log line before it is sent to Loki. If not
-                        present, the timestamp of a log line defaults to the time
-                        when the log line was read.
-                      properties:
-                        actionOnFailure:
-                          description: Action to take when the timestamp can't be
-                            extracted or parsed. Can be skip or fudge. Defaults to
-                            fudge.
-                          type: string
-                        fallbackFormats:
-                          description: Fallback formats to try if format fails.
-                          items:
-                            type: string
-                          type: array
-                        format:
-                          description: 'Determines format of the time string. Required.
-                            Can be one of: ANSIC, UnixDate, RubyDate, RFC822, RFC822Z,
-                            RFC850, RFC1123, RFC1123Z, RFC3339, RFC3339Nano, Unix,
-                            UnixMs, UnixUs, UnixNs.'
-                          type: string
-                        location:
-                          description: IANA Timezone Database string.
-                          type: string
-                        source:
-                          description: Name from extracted data to use as the timestamp.
-                            Required.
-                          type: string
-                      required:
-                      - format
-                      - source
-                      type: object
-                  type: object
-                type: array
-              podTargetLabels:
-                description: PodTargetLabels transfers labels on the Kubernetes Pod
-                  onto the target.
-                items:
-                  type: string
-                type: array
-              relabelings:
-                description: "RelabelConfigs to apply to logs before delivering. Grafana
-                  Agent Operator automatically adds relabelings for a few standard
-                  Kubernetes fields and replaces original scrape job name with __tmp_logs_job_name.
-                  \n More info: https://grafana.com/docs/loki/latest/clients/promtail/configuration/#relabel_configs"
-                items:
-                  description: 'RelabelConfig allows dynamic rewriting of the label
-                    set, being applied to samples before ingestion. It defines `<metric_relabel_configs>`-section
-                    of Prometheus configuration. More info: https://prometheus.io/docs/prometheus/latest/configuration/configuration/#metric_relabel_configs'
-                  properties:
-                    action:
-                      default: replace
-                      description: Action to perform based on regex matching. Default
-                        is 'replace'. uppercase and lowercase actions require Prometheus
-                        >= 2.36.
-                      enum:
-                      - replace
-                      - Replace
-                      - keep
-                      - Keep
-                      - drop
-                      - Drop
-                      - hashmod
-                      - HashMod
-                      - labelmap
-                      - LabelMap
-                      - labeldrop
-                      - LabelDrop
-                      - labelkeep
-                      - LabelKeep
-                      - lowercase
-                      - Lowercase
-                      - uppercase
-                      - Uppercase
-                      - keepequal
-                      - KeepEqual
-                      - dropequal
-                      - DropEqual
-                      type: string
-                    modulus:
-                      description: Modulus to take of the hash of the source label
-                        values.
-                      format: int64
-                      type: integer
-                    regex:
-                      description: Regular expression against which the extracted
-                        value is matched. Default is '(.*)'
-                      type: string
-                    replacement:
-                      description: Replacement value against which a regex replace
-                        is performed if the regular expression matches. Regex capture
-                        groups are available. Default is '$1'
-                      type: string
-                    separator:
-                      description: Separator placed between concatenated source label
-                        values. default is ';'.
-                      type: string
-                    sourceLabels:
-                      description: The source labels select values from existing labels.
-                        Their content is concatenated using the configured separator
-                        and matched against the configured regular expression for
-                        the replace, keep, and drop actions.
-                      items:
-                        description: LabelName is a valid Prometheus label name which
-                          may only contain ASCII letters, numbers, as well as underscores.
-                        pattern: ^[a-zA-Z_][a-zA-Z0-9_]*$
-                        type: string
-                      type: array
-                    targetLabel:
-                      description: Label to which the resulting value is written in
-                        a replace action. It is mandatory for replace actions. Regex
-                        capture groups are available.
-                      type: string
-                  type: object
-                type: array
-              selector:
-                description: Selector to select Pod objects. Required.
-                properties:
-                  matchExpressions:
-                    description: matchExpressions is a list of label selector requirements.
-                      The requirements are ANDed.
-                    items:
-                      description: A label selector requirement is a selector that
-                        contains values, a key, and an operator that relates the key
-                        and values.
-                      properties:
-                        key:
-                          description: key is the label key that the selector applies
-                            to.
-                          type: string
-                        operator:
-                          description: operator represents a key's relationship to
-                            a set of values. Valid operators are In, NotIn, Exists
-                            and DoesNotExist.
-                          type: string
-                        values:
-                          description: values is an array of string values. If the
-                            operator is In or NotIn, the values array must be non-empty.
-                            If the operator is Exists or DoesNotExist, the values
-                            array must be empty. This array is replaced during a strategic
-                            merge patch.
-                          items:
-                            type: string
-                          type: array
-                      required:
-                      - key
-                      - operator
-                      type: object
-                    type: array
-                  matchLabels:
-                    additionalProperties:
-                      type: string
-                    description: matchLabels is a map of {key,value} pairs. A single
-                      {key,value} in the matchLabels map is equivalent to an element
-                      of matchExpressions, whose key field is "key", the operator
-                      is "In", and the values array contains only "value". The requirements
-                      are ANDed.
-                    type: object
-                type: object
-                x-kubernetes-map-type: atomic
-            required:
-            - selector
-            type: object
-        type: object
-    served: true
-    storage: true
diff --git a/production/operator/templates/agent-operator.yaml b/production/operator/templates/agent-operator.yaml
deleted file mode 100644
index 442bab4fa353..000000000000
--- a/production/operator/templates/agent-operator.yaml
+++ /dev/null
@@ -1,645 +0,0 @@
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: grafana-agent
-  namespace: ${NAMESPACE}
----
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: grafana-agent-operator
-  namespace: ${NAMESPACE}
----
-apiVersion: v1
-automountServiceAccountToken: false
-kind: ServiceAccount
-metadata:
-  labels:
-    app.kubernetes.io/component: exporter
-    app.kubernetes.io/name: kube-state-metrics
-    app.kubernetes.io/version: 2.5.0
-  name: kube-state-metrics
-  namespace: ${NAMESPACE}
----
-apiVersion: v1
-data: {}
-kind: Secret
-metadata:
-  name: logs-secret
-  namespace: ${NAMESPACE}
-stringData:
-  password: ${LOGS_KEY}
-  username: ${LOGS_USER}
-type: Opaque
----
-apiVersion: v1
-data: {}
-kind: Secret
-metadata:
-  name: metrics-secret
-  namespace: ${NAMESPACE}
-stringData:
-  password: ${METRICS_KEY}
-  username: ${METRICS_USER}
-type: Opaque
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: agent-eventhandler
-  namespace: ${NAMESPACE}
-spec:
-  accessModes:
-  - ReadWriteOnce
-  resources:
-    requests:
-      storage: 1Gi
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
-  name: grafana-agent
-rules:
-- apiGroups:
-  - ""
-  resources:
-  - nodes
-  - nodes/proxy
-  - nodes/metrics
-  - services
-  - endpoints
-  - pods
-  - events
-  verbs:
-  - get
-  - list
-  - watch
-- apiGroups:
-  - networking.k8s.io
-  resources:
-  - ingresses
-  verbs:
-  - get
-  - list
-  - watch
-- nonResourceURLs:
-  - /metrics
-  - /metrics/cadvisor
-  verbs:
-  - get
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
-  name: grafana-agent-operator
-rules:
-- apiGroups:
-  - monitoring.grafana.com
-  resources:
-  - grafanaagents
-  - metricsinstances
-  - logsinstances
-  - podlogs
-  - integrations
-  verbs:
-  - get
-  - list
-  - watch
-- apiGroups:
-  - monitoring.grafana.com
-  resources:
-  - grafanaagents/finalizers
-  - metricsinstances/finalizers
-  - logsinstances/finalizers
-  - podlogs/finalizers
-  - integrations/finalizers
-  verbs:
-  - get
-  - list
-  - watch
-  - update
-- apiGroups:
-  - monitoring.coreos.com
-  resources:
-  - podmonitors
-  - probes
-  - servicemonitors
-  verbs:
-  - get
-  - list
-  - watch
-- apiGroups:
-  - monitoring.coreos.com
-  resources:
-  - podmonitors/finalizers
-  - probes/finalizers
-  - servicemonitors/finalizers
-  verbs:
-  - get
-  - list
-  - watch
-  - update
-- apiGroups:
-  - ""
-  resources:
-  - namespaces
-  - nodes
-  verbs:
-  - get
-  - list
-  - watch
-- apiGroups:
-  - ""
-  resources:
-  - secrets
-  - services
-  - configmaps
-  - endpoints
-  verbs:
-  - get
-  - list
-  - watch
-  - create
-  - update
-  - patch
-  - delete
-- apiGroups:
-  - apps
-  resources:
-  - statefulsets
-  - daemonsets
-  - deployments
-  verbs:
-  - get
-  - list
-  - watch
-  - create
-  - update
-  - patch
-  - delete
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
-  labels:
-    app.kubernetes.io/component: exporter
-    app.kubernetes.io/name: kube-state-metrics
-    app.kubernetes.io/version: 2.5.0
-  name: kube-state-metrics
-rules:
-- apiGroups:
-  - ""
-  resources:
-  - configmaps
-  - secrets
-  - nodes
-  - pods
-  - services
-  - resourcequotas
-  - replicationcontrollers
-  - limitranges
-  - persistentvolumeclaims
-  - persistentvolumes
-  - namespaces
-  - endpoints
-  verbs:
-  - list
-  - watch
-- apiGroups:
-  - apps
-  resources:
-  - statefulsets
-  - daemonsets
-  - deployments
-  - replicasets
-  verbs:
-  - list
-  - watch
-- apiGroups:
-  - batch
-  resources:
-  - cronjobs
-  - jobs
-  verbs:
-  - list
-  - watch
-- apiGroups:
-  - autoscaling
-  resources:
-  - horizontalpodautoscalers
-  verbs:
-  - list
-  - watch
-- apiGroups:
-  - authentication.k8s.io
-  resources:
-  - tokenreviews
-  verbs:
-  - create
-- apiGroups:
-  - authorization.k8s.io
-  resources:
-  - subjectaccessreviews
-  verbs:
-  - create
-- apiGroups:
-  - policy
-  resources:
-  - poddisruptionbudgets
-  verbs:
-  - list
-  - watch
-- apiGroups:
-  - certificates.k8s.io
-  resources:
-  - certificatesigningrequests
-  verbs:
-  - list
-  - watch
-- apiGroups:
-  - storage.k8s.io
-  resources:
-  - storageclasses
-  - volumeattachments
-  verbs:
-  - list
-  - watch
-- apiGroups:
-  - admissionregistration.k8s.io
-  resources:
-  - mutatingwebhookconfigurations
-  - validatingwebhookconfigurations
-  verbs:
-  - list
-  - watch
-- apiGroups:
-  - networking.k8s.io
-  resources:
-  - networkpolicies
-  - ingresses
-  verbs:
-  - list
-  - watch
-- apiGroups:
-  - coordination.k8s.io
-  resources:
-  - leases
-  verbs:
-  - list
-  - watch
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  name: grafana-agent
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: ClusterRole
-  name: grafana-agent
-subjects:
-- kind: ServiceAccount
-  name: grafana-agent
-  namespace: ${NAMESPACE}
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  name: grafana-agent-operator
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: ClusterRole
-  name: grafana-agent-operator
-subjects:
-- kind: ServiceAccount
-  name: grafana-agent-operator
-  namespace: ${NAMESPACE}
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  labels:
-    app.kubernetes.io/component: exporter
-    app.kubernetes.io/name: kube-state-metrics
-    app.kubernetes.io/version: 2.5.0
-  name: kube-state-metrics
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: ClusterRole
-  name: kube-state-metrics
-subjects:
-- kind: ServiceAccount
-  name: kube-state-metrics
-  namespace: ${NAMESPACE}
----
-apiVersion: v1
-kind: Service
-metadata:
-  labels:
-    app.kubernetes.io/component: exporter
-    app.kubernetes.io/name: kube-state-metrics
-    app.kubernetes.io/version: 2.5.0
-  name: kube-state-metrics
-  namespace: ${NAMESPACE}
-spec:
-  clusterIP: None
-  ports:
-  - name: http-metrics
-    port: 8080
-    targetPort: http-metrics
-  - name: telemetry
-    port: 8081
-    targetPort: telemetry
-  selector:
-    app.kubernetes.io/name: kube-state-metrics
----
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: grafana-agent-operator
-  namespace: ${NAMESPACE}
-spec:
-  minReadySeconds: 10
-  replicas: 1
-  revisionHistoryLimit: 10
-  selector:
-    matchLabels:
-      name: grafana-agent-operator
-  template:
-    metadata:
-      labels:
-        name: grafana-agent-operator
-    spec:
-      containers:
-      - args:
-        - --kubelet-service=default/kubelet
-        image: grafana/agent-operator:v0.39.0
-        imagePullPolicy: IfNotPresent
-        name: grafana-agent-operator
-      serviceAccount: grafana-agent-operator
----
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  labels:
-    app.kubernetes.io/component: exporter
-    app.kubernetes.io/name: kube-state-metrics
-    app.kubernetes.io/version: 2.5.0
-  name: kube-state-metrics
-  namespace: ${NAMESPACE}
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app.kubernetes.io/name: kube-state-metrics
-  template:
-    metadata:
-      labels:
-        app.kubernetes.io/component: exporter
-        app.kubernetes.io/name: kube-state-metrics
-        app.kubernetes.io/version: 2.5.0
-    spec:
-      automountServiceAccountToken: true
-      containers:
-      - image: registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.5.0
-        livenessProbe:
-          httpGet:
-            path: /healthz
-            port: 8080
-          initialDelaySeconds: 5
-          timeoutSeconds: 5
-        name: kube-state-metrics
-        ports:
-        - containerPort: 8080
-          name: http-metrics
-        - containerPort: 8081
-          name: telemetry
-        readinessProbe:
-          httpGet:
-            path: /
-            port: 8081
-          initialDelaySeconds: 5
-          timeoutSeconds: 5
-        securityContext:
-          allowPrivilegeEscalation: false
-          capabilities:
-            drop:
-            - ALL
-          readOnlyRootFilesystem: true
-          runAsUser: 65534
-      nodeSelector:
-        kubernetes.io/os: linux
-      serviceAccountName: kube-state-metrics
----
-apiVersion: monitoring.grafana.com/v1alpha1
-kind: GrafanaAgent
-metadata:
-  name: grafana-agent
-  namespace: ${NAMESPACE}
-spec:
-  image: grafana/agent:v0.39.0
-  integrations:
-    selector:
-      matchLabels:
-        agent: grafana-agent
-  logs:
-    instanceSelector:
-      matchLabels:
-        agent: grafana-agent
-  metrics:
-    externalLabels:
-      cluster: ${CLUSTER}
-    instanceSelector:
-      matchLabels:
-        agent: grafana-agent
-  serviceAccountName: grafana-agent
----
-apiVersion: monitoring.grafana.com/v1alpha1
-kind: Integration
-metadata:
-  labels:
-    agent: grafana-agent
-  name: agent-eventhandler
-  namespace: ${NAMESPACE}
-spec:
-  config:
-    cache_path: /etc/eventhandler/eventhandler.cache
-    logs_instance: ${NAMESPACE}/grafana-agent-logs
-  name: eventhandler
-  type:
-    unique: true
-  volumeMounts:
-  - mountPath: /etc/eventhandler
-    name: agent-eventhandler
-  volumes:
-  - name: agent-eventhandler
-    persistentVolumeClaim:
-      claimName: agent-eventhandler
----
-apiVersion: monitoring.grafana.com/v1alpha1
-kind: LogsInstance
-metadata:
-  labels:
-    agent: grafana-agent
-  name: grafana-agent-logs
-  namespace: ${NAMESPACE}
-spec:
-  clients:
-  - basicAuth:
-      password:
-        key: password
-        name: logs-secret
-      username:
-        key: username
-        name: logs-secret
-    externalLabels:
-      cluster: ${CLUSTER}
-    url: ${LOGS_URL}
-  podLogsNamespaceSelector: {}
-  podLogsSelector:
-    matchLabels:
-      instance: primary
----
-apiVersion: monitoring.grafana.com/v1alpha1
-kind: MetricsInstance
-metadata:
-  labels:
-    agent: grafana-agent
-  name: grafana-agent-metrics
-  namespace: ${NAMESPACE}
-spec:
-  remoteWrite:
-  - basicAuth:
-      password:
-        key: password
-        name: metrics-secret
-      username:
-        key: username
-        name: metrics-secret
-    url: ${METRICS_URL}
-  serviceMonitorNamespaceSelector: {}
-  serviceMonitorSelector:
-    matchLabels:
-      instance: primary
----
-apiVersion: monitoring.grafana.com/v1alpha1
-kind: PodLogs
-metadata:
-  labels:
-    instance: primary
-  name: kubernetes-logs
-  namespace: ${NAMESPACE}
-spec:
-  namespaceSelector:
-    any: true
-  pipelineStages:
-  - cri: {}
-  relabelings:
-  - sourceLabels:
-    - __meta_kubernetes_pod_node_name
-    targetLabel: __host__
-  - action: replace
-    sourceLabels:
-    - __meta_kubernetes_namespace
-    targetLabel: namespace
-  - action: replace
-    sourceLabels:
-    - __meta_kubernetes_pod_name
-    targetLabel: pod
-  - action: replace
-    sourceLabels:
-    - __meta_kubernetes_pod_container_name
-    targetLabel: container
-  - replacement: /var/log/pods/*$1/*.log
-    separator: /
-    sourceLabels:
-    - __meta_kubernetes_pod_uid
-    - __meta_kubernetes_pod_container_name
-    targetLabel: __path__
-  selector:
-    matchLabels: {}
----
-apiVersion: monitoring.coreos.com/v1
-kind: ServiceMonitor
-metadata:
-  labels:
-    instance: primary
-  name: cadvisor-monitor
-  namespace: ${NAMESPACE}
-spec:
-  endpoints:
-  - bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token
-    honorLabels: true
-    interval: 60s
-    path: /metrics/cadvisor
-    port: https-metrics
-    relabelings:
-    - sourceLabels:
-      - __metrics_path__
-      targetLabel: metrics_path
-    - action: replace
-      replacement: cadvisor
-      targetLabel: job
-    scheme: https
-    tlsConfig:
-      insecureSkipVerify: true
-  namespaceSelector:
-    matchNames:
-    - default
-  selector:
-    matchLabels:
-      app.kubernetes.io/name: kubelet
----
-apiVersion: monitoring.coreos.com/v1
-kind: ServiceMonitor
-metadata:
-  labels:
-    instance: primary
-  name: ksm-monitor
-  namespace: ${NAMESPACE}
-spec:
-  endpoints:
-  - honorLabels: true
-    interval: 60s
-    path: /metrics
-    port: http-metrics
-    relabelings:
-    - action: replace
-      replacement: kube-state-metrics
-      targetLabel: job
-  namespaceSelector:
-    matchNames:
-    - ${NAMESPACE}
-  selector:
-    matchLabels:
-      app.kubernetes.io/name: kube-state-metrics
----
-apiVersion: monitoring.coreos.com/v1
-kind: ServiceMonitor
-metadata:
-  labels:
-    instance: primary
-  name: kubelet-monitor
-  namespace: ${NAMESPACE}
-spec:
-  endpoints:
-  - bearerTokenFile: /var/run/secrets/kubernetes.io/serviceaccount/token
-    honorLabels: true
-    interval: 60s
-    path: /metrics
-    port: https-metrics
-    relabelings:
-    - sourceLabels:
-      - __metrics_path__
-      targetLabel: metrics_path
-    - action: replace
-      replacement: kubelet
-      targetLabel: job
-    scheme: https
-    tlsConfig:
-      insecureSkipVerify: true
-  namespaceSelector:
-    matchNames:
-    - default
-  selector:
-    matchLabels:
-      app.kubernetes.io/name: kubelet
diff --git a/production/tanka/grafana-agent-operator/jsonnetfile.json b/production/tanka/grafana-agent-operator/jsonnetfile.json
deleted file mode 100644
index bb15a4133cc2..000000000000
--- a/production/tanka/grafana-agent-operator/jsonnetfile.json
+++ /dev/null
@@ -1,34 +0,0 @@
-{
-    "dependencies": [
-        {
-            "name": "ksonnet-util",
-            "source": {
-                "git": {
-                    "remote": "https://github.com/grafana/jsonnet-libs",
-                    "subdir": "ksonnet-util"
-                }
-            },
-            "version": "master"
-        },
-        {
-            "name": "agent-operator-gen",
-            "source": {
-              "git": {
-                "remote": "https://github.com/jsonnet-libs/grafana-agent-libsonnet.git",
-                "subdir": "0.26"
-              }
-            },
-            "version": "main"
-          },
-          {
-            "name": "prom-operator-gen",
-            "source": {
-              "git": {
-                "remote": "https://github.com/jsonnet-libs/prometheus-operator-libsonnet.git",
-                "subdir": "0.57"
-              }
-            },
-            "version": "main"
-          }
-    ]
-}
diff --git a/production/tanka/grafana-agent-operator/operator.libsonnet b/production/tanka/grafana-agent-operator/operator.libsonnet
deleted file mode 100644
index 71c2fb8264c9..000000000000
--- a/production/tanka/grafana-agent-operator/operator.libsonnet
+++ /dev/null
@@ -1,60 +0,0 @@
-{
-  new(name='grafana-agent-operator', namespace='', image='grafana/agent-operator:v0.26.0-rc.0', serviceAccount=''):: {
-    local k = (import 'ksonnet-util/kausal.libsonnet'),
-
-    local container = k.core.v1.container,
-    local deployment = k.apps.v1.deployment,
-
-    local this = self,
-
-    container::
-      container.new(name, image) +
-      container.withArgsMixin(k.util.mapToFlags({'-kubelet-service': 'default/kubelet'})),
-
-    controller:
-      deployment.new(name, 1, [this.container]) +
-      deployment.mixin.metadata.withNamespace(namespace) +
-      deployment.mixin.spec.template.spec.withServiceAccount(name),
-
-  },
-
-  withRbac(name, namespace):: {
-    local k = (import 'ksonnet-util/kausal.libsonnet') { _config+:: { namespace: namespace } },
-    local policyRule = k.rbac.v1.policyRule,
-    local serviceAccount = k.core.v1.serviceAccount,
-    
-    rbac: 
-      k.util.rbac(name, [
-          policyRule.withApiGroups(['monitoring.grafana.com']) +
-          policyRule.withResources(['grafanaagents', 'metricsinstances', 'logsinstances', 'podlogs', 'integrations']) +
-          policyRule.withVerbs(['get', 'list', 'watch']),
-
-          policyRule.withApiGroups(['monitoring.grafana.com']) +
-          policyRule.withResources(['grafanaagents/finalizers', 'metricsinstances/finalizers', 'logsinstances/finalizers', 'podlogs/finalizers', 'integrations/finalizers']) +
-          policyRule.withVerbs(['get', 'list', 'watch', 'update']),
-
-          policyRule.withApiGroups(['monitoring.coreos.com']) +
-          policyRule.withResources(['podmonitors', 'probes', 'servicemonitors']) +
-          policyRule.withVerbs(['get', 'list', 'watch']),
-
-          policyRule.withApiGroups(['monitoring.coreos.com']) +
-          policyRule.withResources(['podmonitors/finalizers', 'probes/finalizers', 'servicemonitors/finalizers']) +
-          policyRule.withVerbs(['get', 'list', 'watch', 'update']),
-
-          policyRule.withApiGroups(['']) +
-          policyRule.withResources(['namespaces', 'nodes']) +
-          policyRule.withVerbs(['get', 'list', 'watch']),
-
-          policyRule.withApiGroups(['']) +
-          policyRule.withResources(['secrets', 'services', 'configmaps', 'endpoints']) +
-          policyRule.withVerbs(['get', 'list', 'watch', 'create', 'update', 'patch', 'delete']),
-
-          policyRule.withApiGroups(['apps']) +
-          policyRule.withResources(['statefulsets', 'daemonsets', 'deployments']) +
-          policyRule.withVerbs(['get', 'list', 'watch', 'create', 'update', 'patch', 'delete']),
-          
-        ]) {
-          service_account+: serviceAccount.mixin.metadata.withNamespace(namespace),
-        },
-  }
-}
diff --git a/production/tanka/grafana-agent-operator/util/grafana-agent.libsonnet b/production/tanka/grafana-agent-operator/util/grafana-agent.libsonnet
deleted file mode 100644
index d5edf3ac7bd5..000000000000
--- a/production/tanka/grafana-agent-operator/util/grafana-agent.libsonnet
+++ /dev/null
@@ -1,23 +0,0 @@
-{
-    withRbac(name, namespace):: {
-        local k = (import 'ksonnet-util/kausal.libsonnet') + { _config+:: { namespace: namespace } },
-        local policyRule = k.rbac.v1.policyRule,
-        local serviceAccount = k.core.v1.serviceAccount,
-        
-        rbac: 
-            k.util.rbac(name, [
-                policyRule.withApiGroups(['']) +
-                policyRule.withResources(['nodes', 'nodes/proxy', 'nodes/metrics', 'services', 'endpoints', 'pods', 'events']) +
-                policyRule.withVerbs(['get', 'list', 'watch']),
-
-                policyRule.withApiGroups(['networking.k8s.io']) +
-                policyRule.withResources(['ingresses']) +
-                policyRule.withVerbs(['get', 'list', 'watch']),
-
-                policyRule.withNonResourceURLs(['/metrics', '/metrics/cadvisor']) +
-                policyRule.withVerbs(['get']),
-            ]) {
-                service_account+: serviceAccount.mixin.metadata.withNamespace(namespace),
-            },
-    }
-}
diff --git a/production/tanka/grafana-agent-operator/util/integrations.libsonnet b/production/tanka/grafana-agent-operator/util/integrations.libsonnet
deleted file mode 100644
index 04161e8a29ec..000000000000
--- a/production/tanka/grafana-agent-operator/util/integrations.libsonnet
+++ /dev/null
@@ -1,17 +0,0 @@
-local gen = import 'agent-operator-gen/main.libsonnet';
-local int = gen.monitoring.v1alpha1.integration;
-
-{
-    withPVC(name):: {
-        spec+: {
-            volumeMounts: [
-                int.spec.volumeMounts.withName(name) +
-                int.spec.volumeMounts.withMountPath('/etc/eventhandler')
-            ],
-            volumes: [
-                int.spec.volumes.withName(name) +
-                int.spec.volumes.persistentVolumeClaim.withClaimName(name)
-            ]
-        }
-    }
-}
diff --git a/production/tanka/grafana-agent-operator/util/k8slogs.libsonnet b/production/tanka/grafana-agent-operator/util/k8slogs.libsonnet
deleted file mode 100644
index 93d4b9e2104c..000000000000
--- a/production/tanka/grafana-agent-operator/util/k8slogs.libsonnet
+++ /dev/null
@@ -1,33 +0,0 @@
-local gen = import 'agent-operator-gen/main.libsonnet';
-local pl = gen.monitoring.v1alpha1.podLogs;
-local r = pl.spec.relabelings;
-
-{
-    withK8sLogsRelabeling():: [
-        r.withSourceLabels(['__meta_kubernetes_pod_node_name']) +
-        r.withTargetLabel('__host__'),
-
-        // r.withAction('replace') +
-        // r.withReplacement('$1') +
-        // r.withSeparator('/') +
-        // r.withSourceLabels(['__meta_kubernetes_namespace', '__meta_kubernetes_pod_name']) +
-        // r.withTargetLabel('job'),
-
-        r.withAction('replace') +
-        r.withSourceLabels('__meta_kubernetes_namespace') +
-        r.withTargetLabel('namespace'),
-
-        r.withAction('replace') +
-        r.withSourceLabels('__meta_kubernetes_pod_name') +
-        r.withTargetLabel('pod'),
-
-        r.withAction('replace') +
-        r.withSourceLabels('__meta_kubernetes_pod_container_name') +
-        r.withTargetLabel('container'),
-
-        r.withReplacement('/var/log/pods/*$1/*.log') +
-        r.withSeparator('/') +
-        r.withSourceLabels(['__meta_kubernetes_pod_uid', '__meta_kubernetes_pod_container_name']) +
-        r.withTargetLabel('__path__')
-    ]
-}
diff --git a/production/tanka/grafana-agent-operator/util/k8smonitors.libsonnet b/production/tanka/grafana-agent-operator/util/k8smonitors.libsonnet
deleted file mode 100644
index 90de24a88962..000000000000
--- a/production/tanka/grafana-agent-operator/util/k8smonitors.libsonnet
+++ /dev/null
@@ -1,56 +0,0 @@
-local prom_gen = import 'prom-operator-gen/main.libsonnet';
-local sm = prom_gen.monitoring.v1.serviceMonitor;
-local e = sm.spec.endpoints;
-local mr = e.metricRelabelings;
-local r = e.relabelings;
-
-{
-    local metricArrayToString(arr) = std.join("|", arr),
-
-    local withJobReplace(job_label) =
-        r.withAction('replace') +
-        r.withTargetLabel('job') +
-        r.withReplacement(job_label),
-        
-    local withAllowList(metrics) =
-        mr.withAction('keep') +
-        mr.withSourceLabels(['__name__']) +
-        mr.withRegex(metricArrayToString(metrics)),
-
-    local withMetricsPath() =
-        r.withSourceLabels(['__metrics_path__']) +
-        r.withTargetLabel('metrics_path'),
-        
-    local withDefaultEndpoint(jobLabel, port, allowlist, allowlistMetrics, path) =
-        e.withHonorLabels(true) +
-        e.withInterval('60s') +
-        (if allowlist then e.withMetricRelabelings(withAllowList(allowlistMetrics)) else {}) +
-        e.withPort(port) +
-        e.withPath(path),
-    
-    
-    newKubernetesMonitor(name, namespace, monitorLabels, targetNamespace, targetLabels, jobLabel, metricsPath, allowlist=false, allowlistMetrics=[])::
-        sm.new(name) +
-        sm.metadata.withNamespace(namespace) +
-        sm.metadata.withLabels(monitorLabels) +
-        sm.spec.namespaceSelector.withMatchNames(targetNamespace) +
-        sm.spec.selector.withMatchLabels(targetLabels) +
-        sm.spec.withEndpoints([
-            withDefaultEndpoint(jobLabel, 'https-metrics', allowlist, allowlistMetrics, metricsPath) +
-            e.withBearerTokenFile('/var/run/secrets/kubernetes.io/serviceaccount/token') +
-            e.tlsConfig.withInsecureSkipVerify(true) +
-            e.withRelabelings([withMetricsPath(), withJobReplace(jobLabel)]) +
-            e.withScheme('https')
-        ]),
-    
-    newServiceMonitor(name, namespace, monitorLabels, targetNamespace, targetLabels, jobLabel, metricsPath, allowlist=false, allowlistMetrics=[])::
-        sm.new(name) +
-        sm.metadata.withNamespace(namespace) +
-        sm.metadata.withLabels(monitorLabels) +
-        sm.spec.namespaceSelector.withMatchNames(targetNamespace) +
-        sm.spec.selector.withMatchLabels(targetLabels) +
-        sm.spec.withEndpoints([
-            withDefaultEndpoint(jobLabel, 'http-metrics', allowlist, allowlistMetrics, metricsPath) +
-            e.withRelabelings([withJobReplace(jobLabel)])
-        ]),
-}
diff --git a/production/tanka/grafana-agent-operator/util/logsinstance.libsonnet b/production/tanka/grafana-agent-operator/util/logsinstance.libsonnet
deleted file mode 100644
index 4f667c14f5f0..000000000000
--- a/production/tanka/grafana-agent-operator/util/logsinstance.libsonnet
+++ /dev/null
@@ -1,21 +0,0 @@
-local gen = import 'agent-operator-gen/main.libsonnet';
-local li = gen.monitoring.v1alpha1.logsInstance;
-local clients = li.spec.clients;
-
-{
-    withLogsClient(secretName, logsUrl, externalLabels={})::
-        li.spec.withClients(
-            clients.withUrl(logsUrl) +
-            clients.basicAuth.username.withKey('username') +
-            clients.basicAuth.username.withName(secretName) +
-            clients.basicAuth.password.withKey('password') +
-            clients.basicAuth.password.withName(secretName) + 
-            if externalLabels != {} then clients.withExternalLabels(externalLabels) else {}
-        ),
-
-    withNilPodLogsNamespace():: {
-        spec+: {
-            podLogsNamespaceSelector: {}
-        }
-    },
-}
diff --git a/production/tanka/grafana-agent-operator/util/metricsinstance.libsonnet b/production/tanka/grafana-agent-operator/util/metricsinstance.libsonnet
deleted file mode 100644
index af0da101fd46..000000000000
--- a/production/tanka/grafana-agent-operator/util/metricsinstance.libsonnet
+++ /dev/null
@@ -1,20 +0,0 @@
-local gen = import 'agent-operator-gen/main.libsonnet';
-local mi = gen.monitoring.v1alpha1.metricsInstance;
-local rw = mi.spec.remoteWrite;
-
-{
-    withRemoteWrite(secretName, metricsUrl)::
-        mi.spec.withRemoteWrite(
-            rw.withUrl(metricsUrl) +
-            rw.basicAuth.username.withKey('username') +
-            rw.basicAuth.username.withName(secretName) +
-            rw.basicAuth.password.withKey('password') +
-            rw.basicAuth.password.withName(secretName)
-        ),
-
-    withNilServiceMonitorNamespace():: {
-        spec+: {
-            serviceMonitorNamespaceSelector: {}
-        }
-    }
-}
diff --git a/production/tanka/grafana-agent/config.libsonnet b/production/tanka/grafana-agent/config.libsonnet
deleted file mode 100644
index 7c1e7a2c8c80..000000000000
--- a/production/tanka/grafana-agent/config.libsonnet
+++ /dev/null
@@ -1,117 +0,0 @@
-local k8s_v2 = import './v2/internal/helpers/k8s.libsonnet';
-
-{
-  _images+:: {
-    agent: 'grafana/agent:latest',
-    agentctl: 'grafana/agentctl:latest',
-  },
-
-  _config+:: {
-    //
-    // Deployment options
-    //
-    agent_cluster_role_name: 'grafana-agent',
-    agent_configmap_name: 'grafana-agent',
-    agent_deployment_configmap_name: self.agent_configmap_name + '-deployment',
-    agent_pod_name: 'grafana-agent',
-    agent_deployment_pod_name: self.agent_pod_name + '-deployment',
-
-    cluster_dns_tld: 'local',
-    cluster_dns_suffix: 'cluster.' + self.cluster_dns_tld,
-    cluster_name: error 'must specify cluster name',
-    namespace: error 'must specify namespace',
-
-    agent_config_hash_annotation: true,
-
-    //
-    // Prometheus instance options
-    //
-
-    // Enabling this causes the agent to only scrape metrics on the same node
-    // on which it is currently running.
-    //
-    // Take CAUTION when disabling this! If the agent is deployed
-    // as a DaemonSet (like it is here by default), then disabling this will
-    // scrape all metrics multiple times, once per node, leading to
-    // duplicate samples being rejected and might hit limits.
-    agent_host_filter: true,
-
-    // The directory where the WAL is stored for all instances.
-    agent_wal_dir: '/var/lib/agent/data',
-
-    prometheus_kubernetes_api_server_address: 'kubernetes.default.svc.%(cluster_dns_suffix)s:443' % self,
-    prometheus_insecure_skip_verify: false,
-    scrape_api_server_endpoints: true,
-
-    //
-    // Config passed to the agent
-    //
-    // agent_config is rendered as a YAML and is the configuration file used
-    // to control the agent. A single instance is hard-coded and its
-    // scrape_configs are defined below.
-    //
-    // deployment_agent_config is a copy of `agent_config` that is used by the
-    // single-replica deployment to scrape jobs that don't work in host
-    // filtering mode.
-    agent_config: {
-      server: {
-        log_level: 'info',
-      },
-
-      metrics: {
-        global: {
-          scrape_interval: '1m',
-        },
-
-        wal_directory: $._config.agent_wal_dir,
-
-        configs: [{
-          name: 'agent',
-
-          host_filter: $._config.agent_host_filter,
-
-          scrape_configs:
-            if $._config.agent_host_filter then
-              $._config.kubernetes_scrape_configs
-            else
-              $._config.kubernetes_scrape_configs + $._config.deployment_scrape_configs,
-          remote_write: $._config.agent_remote_write,
-        }],
-      },
-    },
-    deployment_agent_config: self.agent_config {
-      prometheus+: {
-        configs: [{
-          name: 'agent',
-
-          host_filter: false,
-
-          scrape_configs: $._config.deployment_scrape_configs,
-          remote_write: $._config.agent_remote_write,
-        }],
-      },
-
-    },
-
-    local all_scrape_configs = k8s_v2.metrics({
-      scrape_api_server_endpoints: $._config.scrape_api_server_endpoints,
-      insecure_skip_verify: $._config.prometheus_insecure_skip_verify,
-      kubernetes_api_server_address: $._config.prometheus_kubernetes_api_server_address,
-      ksm_namespace: $._config.namespace,
-      node_exporter_namespace: $._config.namespace,
-    }),
-
-    // We have two optional extension points for scrape config. One for the
-    // statefulset that holds all the agents attached to a node
-    // (kubernetes_scrape_configs) and One for the single replica deployment
-    // that is used to scrape jobs that don't work with host filtering mode
-    // (deployment_scrape_configs) the later is only used when host_filter =
-    // true.
-    deployment_scrape_configs:
-      std.filter(function(job) job.job_name == 'default/kubernetes', all_scrape_configs),
-    kubernetes_scrape_configs:
-      std.filter(function(job) job.job_name != 'default/kubernetes', all_scrape_configs),
-
-    agent_remote_write: [],
-  },
-}
diff --git a/production/tanka/grafana-agent/grafana-agent.libsonnet b/production/tanka/grafana-agent/grafana-agent.libsonnet
deleted file mode 100644
index f280da77fcf9..000000000000
--- a/production/tanka/grafana-agent/grafana-agent.libsonnet
+++ /dev/null
@@ -1,85 +0,0 @@
-local config = import 'config.libsonnet';
-local k = import 'ksonnet-util/kausal.libsonnet';
-
-k + config {
-  local configMap = $.core.v1.configMap,
-  local container = $.core.v1.container,
-  local daemonSet = $.apps.v1.daemonSet,
-  local deployment = $.apps.v1.deployment,
-  local policyRule = $.rbac.v1.policyRule,
-  local serviceAccount = $.core.v1.serviceAccount,
-
-  agent_rbac:
-    $.util.rbac($._config.agent_cluster_role_name, [
-      policyRule.withApiGroups(['']) +
-      policyRule.withResources(['nodes', 'nodes/proxy', 'services', 'endpoints', 'pods']) +
-      policyRule.withVerbs(['get', 'list', 'watch']),
-
-      policyRule.withNonResourceUrls('/metrics') +
-      policyRule.withVerbs(['get']),
-    ]) {
-      service_account+:
-        serviceAccount.mixin.metadata.withNamespace($._config.namespace),
-    },
-
-  agent_config_map:
-    configMap.new($._config.agent_configmap_name) +
-    configMap.mixin.metadata.withNamespace($._config.namespace) +
-    configMap.withData({
-      'agent.yml': $.util.manifestYaml($._config.agent_config),
-    }),
-
-  agent_args:: {
-    'config.file': '/etc/agent/agent.yml',
-    'metrics.wal-directory': '/tmp/agent/data',
-  },
-
-  agent_container::
-    container.new('agent', $._images.agent) +
-    container.withPorts($.core.v1.containerPort.new('http-metrics', 80)) +
-    container.withArgsMixin($.util.mapToFlags($.agent_args)) +
-    container.withEnv([
-      $.core.v1.envVar.fromFieldPath('HOSTNAME', 'spec.nodeName'),
-    ]) +
-    container.mixin.securityContext.withPrivileged(true) +
-    container.mixin.securityContext.withRunAsUser(0),
-
-  config_hash_mixin:: {
-    local hash(config) = { config_hash: std.md5(std.toString(config)) },
-    daemonSet:
-      if $._config.agent_config_hash_annotation then
-        daemonSet.mixin.spec.template.metadata.withAnnotationsMixin(hash($._config.agent_config))
-      else {},
-    deployment:
-      if $._config.agent_config_hash_annotation then
-        deployment.mixin.spec.template.metadata.withAnnotationsMixin(hash($._config.deployment_agent_config))
-      else {},
-  },
-
-  // TODO(rfratto): persistent storage for the WAL here is missing. hostVolume?
-  agent_daemonset:
-    daemonSet.new($._config.agent_pod_name, [$.agent_container]) +
-    daemonSet.mixin.metadata.withNamespace($._config.namespace) +
-    daemonSet.mixin.spec.template.spec.withServiceAccount($._config.agent_cluster_role_name) +
-    self.config_hash_mixin.daemonSet +
-    $.util.configVolumeMount($._config.agent_configmap_name, '/etc/agent'),
-
-  agent_deployment_config_map:
-    if $._config.agent_host_filter then
-      configMap.new($._config.agent_deployment_configmap_name) +
-      configMap.mixin.metadata.withNamespace($._config.namespace) +
-      configMap.withData({
-        'agent.yml': $.util.manifestYaml($._config.deployment_agent_config),
-      })
-    else {},
-
-  agent_deployment:
-    if $._config.agent_host_filter then
-      deployment.new($._config.agent_deployment_pod_name, 1, [$.agent_container]) +
-      deployment.mixin.metadata.withNamespace($._config.namespace) +
-      deployment.mixin.spec.template.spec.withServiceAccount($._config.agent_cluster_role_name) +
-      deployment.mixin.spec.withReplicas(1) +
-      self.config_hash_mixin.deployment +
-      $.util.configVolumeMount($._config.agent_deployment_configmap_name, '/etc/agent')
-    else {},
-}
diff --git a/production/tanka/grafana-agent/jsonnetfile.json b/production/tanka/grafana-agent/jsonnetfile.json
deleted file mode 100644
index c903ac17c07c..000000000000
--- a/production/tanka/grafana-agent/jsonnetfile.json
+++ /dev/null
@@ -1,14 +0,0 @@
-{
-    "dependencies": [
-        {
-            "name": "ksonnet-util",
-            "source": {
-                "git": {
-                    "remote": "https://github.com/grafana/jsonnet-libs",
-                    "subdir": "ksonnet-util"
-                }
-            },
-            "version": "master"
-        }
-    ]
-}
diff --git a/production/tanka/grafana-agent/scraping-svc/main.libsonnet b/production/tanka/grafana-agent/scraping-svc/main.libsonnet
deleted file mode 100644
index 7e414a0e816d..000000000000
--- a/production/tanka/grafana-agent/scraping-svc/main.libsonnet
+++ /dev/null
@@ -1,107 +0,0 @@
-local config = import '../config.libsonnet';
-local syncer = import './syncer.libsonnet';
-local k = import 'ksonnet-util/kausal.libsonnet';
-
-local containerPort = k.core.v1.containerPort;
-local configMap = k.core.v1.configMap;
-local container = k.core.v1.container;
-local deployment = k.apps.v1.deployment;
-local policyRule = k.rbac.v1.policyRule;
-
-{
-  new(namespace='default', kube_namespace='kube-system'):: config {
-    local this = self,
-
-    // Use the default config from the non-scraping-service mode
-    // but change some of the defaults.
-    _config+:: {
-      agent_cluster_role_name: 'grafana-agent-cluster',
-      agent_configmap_name: 'grafana-agent-cluster',
-      agent_pod_name: 'grafana-agent-cluster',
-      agent_replicas: 3,
-
-      namespace: namespace,
-      kube_namespace: kube_namespace,
-
-      // Scraping service should not be using host filtering
-      agent_host_filter: false,
-
-      //
-      // KVStore options
-      //
-      agent_config_kvstore: error 'must configure config kvstore',
-      agent_ring_kvstore: error 'must configure ring kvstore',
-
-      agent_config+: {
-        metrics+: {
-          // No configs are used in the scraping service mode.
-          configs:: [],
-
-          scraping_service: {
-            enabled: true,
-            kvstore: this._config.agent_config_kvstore,
-            lifecycler: {
-              ring: {
-                kvstore: this._config.agent_ring_kvstore,
-              },
-            },
-          },
-        },
-      },
-    },
-
-    rbac:
-      // Need to do a hack here so ksonnet util has our configs :(
-      (k { _config+: this._config }).util.rbac(this._config.agent_cluster_role_name, [
-        policyRule.withApiGroups(['']) +
-        policyRule.withResources(['nodes', 'nodes/proxy', 'services', 'endpoints', 'pods']) +
-        policyRule.withVerbs(['get', 'list', 'watch']),
-
-        policyRule.withNonResourceUrls('/metrics') +
-        policyRule.withVerbs(['get']),
-      ]),
-
-    configMap:
-      configMap.new(this._config.agent_configmap_name) +
-      configMap.withData({
-        'agent.yml': k.util.manifestYaml(this._config.agent_config),
-      }),
-
-    container::
-      container.new('agent-cluster', this._images.agent) +
-      container.withPorts(containerPort.new(name='http-metrics', port=80)) +
-      container.withArgsMixin(k.util.mapToFlags({
-        'config.file': '/etc/agent/agent.yml',
-        'metrics.wal-directory': '/tmp/agent/data',
-      })) +
-      container.withEnv([
-        k.core.v1.envVar.fromFieldPath('HOSTNAME', 'spec.nodeName'),
-      ]) +
-      container.mixin.securityContext.withPrivileged(true) +
-      container.mixin.securityContext.withRunAsUser(0),
-
-    deployment:
-      deployment.new(this._config.agent_pod_name, this._config.agent_replicas, [this.container]) +
-      deployment.mixin.spec.template.spec.withServiceAccount(this._config.agent_cluster_role_name) +
-      deployment.mixin.spec.withMinReadySeconds(60) +
-      deployment.mixin.spec.strategy.rollingUpdate.withMaxSurge(0) +
-      deployment.mixin.spec.strategy.rollingUpdate.withMaxUnavailable(1) +
-      deployment.mixin.spec.template.spec.withTerminationGracePeriodSeconds(4800) +
-      k.util.configVolumeMount(this._config.agent_configmap_name, '/etc/agent'),
-
-    service:
-      k.util.serviceFor(this.deployment),
-
-    // Create the cronjob that syncs configs to the API
-    syncer:
-      syncer.new(this._images.agentctl, this._config),
-  },
-
-  withImagesMixin(images):: { _images+: images },
-
-  // withConfig overrides the config used for the agent.
-  withConfig(config):: { _config: config },
-
-  // withConfigMixin merges the provided config with the existing config.
-  withConfigMixin(config):: { _config+: config },
-}
diff --git a/production/tanka/grafana-agent/scraping-svc/syncer.libsonnet b/production/tanka/grafana-agent/scraping-svc/syncer.libsonnet
deleted file mode 100644
index d24373e164f0..000000000000
--- a/production/tanka/grafana-agent/scraping-svc/syncer.libsonnet
+++ /dev/null
@@ -1,61 +0,0 @@
-local k = import 'ksonnet-util/kausal.libsonnet';
-
-local cronJob = k.batch.v1.cronJob;
-local configMap = k.core.v1.configMap;
-local container = k.core.v1.container;
-local deployment = k.apps.v1.deployment;
-local volumeMount = k.core.v1.volumeMount;
-local volume = k.core.v1.volume;
-
-{
-  new(agentctl_image, config):: {
-    local this = self,
-
-    local configs = std.foldl(
-      function(agg, cfg)
-        // Sanitize the name and remove / so every file goes into the same
-        // folder.
-        local name = std.strReplace(cfg.job_name, '/', '_');
-
-        agg {
-          ['%s.yml' % name]: k.util.manifestYaml(
-            {
-              scrape_configs: [cfg],
-              remote_write: config.agent_remote_write,
-            },
-          ),
-        },
-      config.kubernetes_scrape_configs,
-      {},
-    ),
-
-    configMap:
-      configMap.new('agent-syncer') +
-      configMap.withData(configs),
-
-    container::
-      container.new('agent-syncer', agentctl_image) +
-      container.withArgsMixin([
-        'config-sync',
-        '--addr=http://%(agent_pod_name)s.%(namespace)s.svc.cluster.local:80' % config,
-        '/etc/configs',
-      ]) +
-      container.withVolumeMounts([
-        volumeMount.new('agent-syncer', '/etc/configs'),
-      ]),
-
-    syncer_job:
-      cronJob.new('agent-syncer', '*/5 * * * *', this.container) +
-      cronJob.mixin.spec.withSuccessfulJobsHistoryLimit(1) +
-      cronJob.mixin.spec.withFailedJobsHistoryLimit(3) +
-      cronJob.mixin.spec.jobTemplate.spec.template.spec.withRestartPolicy('OnFailure') +
-      cronJob.mixin.spec.jobTemplate.spec.template.spec.withActiveDeadlineSeconds(600) +
-      cronJob.mixin.spec.jobTemplate.spec.withTtlSecondsAfterFinished(120) +
-      cronJob.mixin.spec.jobTemplate.spec.template.spec.withVolumes([
-        volume.fromConfigMap(
-          name='agent-syncer',
-          configMapName=this.configMap.metadata.name,
-        ),
-      ]),
-  },
-}
diff --git a/production/tanka/grafana-agent/smoke/avalanche/main.libsonnet b/production/tanka/grafana-agent/smoke/avalanche/main.libsonnet
deleted file mode 100644
index 6887337ce2a9..000000000000
--- a/production/tanka/grafana-agent/smoke/avalanche/main.libsonnet
+++ /dev/null
@@ -1,49 +0,0 @@
-local k = import 'ksonnet-util/kausal.libsonnet';
-
-local configMap = k.core.v1.configMap;
-local container = k.core.v1.container;
-local containerPort = k.core.v1.containerPort;
-local deployment = k.apps.v1.deployment;
-local pvc = k.core.v1.persistentVolumeClaim;
-local service = k.core.v1.service;
-local volumeMount = k.core.v1.volumeMount;
-local volume = k.core.v1.volume;
-
-{
-  new(name='avalanche', replicas=1, namespace='', config={}):: {
-    local this = self,
-
-    _config+:: {
-      image: 'quay.io/freshtracks.io/avalanche:latest',
-
-      metric_count: 500,
-      label_count: 10,
-      series_count: 10,
-      metricname_length: 5,
-      labelname_length: 5,
-      value_interval: 30,
-      series_interval: 30,
-      metric_interval: 120,
-    } + config,
-
-    container::
-      container.new(name, this._config.image) +
-      container.withPorts([
-        containerPort.newNamed(name='http', containerPort=9001),
-      ]) +
-      container.withArgsMixin([
-        '--metric-count=%d' % this._config.metric_count,
-        '--label-count=%d' % this._config.label_count,
-        '--series-count=%d' % this._config.series_count,
-        '--metricname-length=%d' % this._config.metricname_length,
-        '--labelname-length=%d' % this._config.labelname_length,
-        '--value-interval=%d' % this._config.value_interval,
-        '--series-interval=%d' % this._config.series_interval,
-        '--metric-interval=%d' % this._config.metric_interval,
-      ]),
-
-    deployment:
-      deployment.new(name, replicas, [self.container]) +
-      deployment.mixin.metadata.withNamespace(namespace),
-  },
-}
diff --git a/production/tanka/grafana-agent/smoke/crow/main.libsonnet b/production/tanka/grafana-agent/smoke/crow/main.libsonnet
deleted file mode 100644
index a159e6c16657..000000000000
--- a/production/tanka/grafana-agent/smoke/crow/main.libsonnet
+++ /dev/null
@@ -1,36 +0,0 @@
-local k = import 'ksonnet-util/kausal.libsonnet';
-
-local configMap = k.core.v1.configMap;
-local container = k.core.v1.container;
-local containerPort = k.core.v1.containerPort;
-local deployment = k.apps.v1.deployment;
-local pvc = k.core.v1.persistentVolumeClaim;
-local service = k.core.v1.service;
-local volumeMount = k.core.v1.volumeMount;
-local volume = k.core.v1.volume;
-
-{
-  new(name='crow', namespace='', config={}):: {
-    local this = self,
-
-    _config+:: {
-      image: 'us.gcr.io/kubernetes-dev/grafana/agent-crow:main',
-      args: {
-        'server.http.address': '0.0.0.0:80',
-      },
-      pull_secret: '',
-    } + config,
-
-    container::
-      container.new(name, this._config.image) +
-      container.withPorts([
-        containerPort.newNamed(name='http-metrics', containerPort=80),
-      ]) +
-      container.withArgsMixin(k.util.mapToFlags(this._config.args)),
-
-    deployment:
-      deployment.new(name, 1, [self.container]) +
-      deployment.mixin.metadata.withNamespace(namespace) +
-      deployment.spec.template.spec.withImagePullSecrets({ name: this._config.pull_secret }),
-  },
-}
diff --git a/production/tanka/grafana-agent/smoke/etcd/main.libsonnet b/production/tanka/grafana-agent/smoke/etcd/main.libsonnet
deleted file mode 100644
index 46598632a545..000000000000
--- a/production/tanka/grafana-agent/smoke/etcd/main.libsonnet
+++ /dev/null
@@ -1,30 +0,0 @@
-local k = import 'ksonnet-util/kausal.libsonnet';
-
-local container = k.core.v1.container;
-local containerPort = k.core.v1.containerPort;
-local deployment = k.apps.v1.deployment;
-local service = k.core.v1.service;
-
-{
-  new(namespace=''):: {
-    container::
-      container.new('etcd', 'gcr.io/etcd-development/etcd:v3.4.7') +
-      container.withPorts([
-        containerPort.newNamed(name='etcd', containerPort=2379),
-      ]) +
-      container.withArgsMixin([
-        '/usr/local/bin/etcd',
-        '--listen-client-urls=http://0.0.0.0:2379',
-        '--advertise-client-urls=http://0.0.0.0:2379',
-        '--log-level=info',
-      ]),
-
-    deployment:
-      deployment.new('etcd', 1, [self.container]) +
-      deployment.mixin.metadata.withNamespace(namespace),
-
-    service:
-      k.util.serviceFor(self.deployment) +
-      service.mixin.metadata.withNamespace(namespace),
-  },
-}
diff --git a/production/tanka/grafana-agent/smoke/main.libsonnet b/production/tanka/grafana-agent/smoke/main.libsonnet
deleted file mode 100644
index d8cbac4dc142..000000000000
--- a/production/tanka/grafana-agent/smoke/main.libsonnet
+++ /dev/null
@@ -1,69 +0,0 @@
-local k = import 'ksonnet-util/kausal.libsonnet';
-local policyRule = k.rbac.v1.policyRule;
-local serviceAccount = k.core.v1.serviceAccount;
-local container = k.core.v1.container;
-local containerPort = k.core.v1.containerPort;
-local deployment = k.apps.v1.deployment;
-local service = k.core.v1.service;
-local util = k.util;
-
-{
-  new(name='grafana-agent-smoke', namespace='default', config={}):: {
-    local k = (import 'ksonnet-util/kausal.libsonnet') { _config+:: { namespace: namespace } },
-
-    local this = self,
-
-    _images:: {
-      agentsmoke: 'us.gcr.io/kubernetes-dev/grafana/agent-smoke:main',
-    },
-
-    _config:: {
-      mutationFrequency: '5m',
-      chaosFrequency: '30m',
-      image: this._images.agentsmoke,
-      pull_secret: '',
-      podPrefix: 'grafana-agent',
-      simulateErrors: true,
-    } + config,
-
-    rbac:
-      k.util.rbac(name, [
-        policyRule.withApiGroups(['apps']) +
-        policyRule.withResources(['deployments/scale']) +
-        policyRule.withVerbs(['get', 'update']),
-        policyRule.withApiGroups(['']) +
-        policyRule.withResources(['pods']) +
-        policyRule.withVerbs(['list', 'delete']),
-      ]) {
-        service_account+:
-          serviceAccount.mixin.metadata.withNamespace(namespace),
-      },
-
-    container::
-      container.new('agent-smoke', this._config.image) +
-      container.withPorts([
-        containerPort.newNamed(name='remote-write', containerPort=19090),
-      ]) +
-      container.withArgsMixin(k.util.mapToFlags({
-        'log.level': 'debug',
-        namespace: namespace,
-        'mutation-frequency': this._config.mutationFrequency,
-        'chaos-frequency': this._config.chaosFrequency,
-        'pod-prefix': this._config.podPrefix,
-        'fake-remote-write': true,
-        'simulate-errors': this._config.simulateErrors,
-      })),
-
-    agentsmoke_deployment:
-      deployment.new(name, 1, [self.container]) +
-      deployment.mixin.metadata.withNamespace(namespace) +
-      deployment.mixin.spec.template.spec.withServiceAccount(name) +
-      deployment.spec.template.spec.withImagePullSecrets({ name: this._config.pull_secret }),
-
-    service:
-      util.serviceFor(self.agentsmoke_deployment) +
-      service.mixin.metadata.withNamespace(namespace),
-  },
-
-  monitoring: (import './prometheus_monitoring.libsonnet'),
-}
diff --git a/production/tanka/grafana-agent/v1/README.md b/production/tanka/grafana-agent/v1/README.md
deleted file mode 100644
index 5eb6f0513722..000000000000
--- a/production/tanka/grafana-agent/v1/README.md
+++ /dev/null
@@ -1,79 +0,0 @@
-# Tanka Configs
-
-**STATUS**: Abandoned. Use v0 (parent directory) or v2 instead.
-
-This directory contains the Tanka configs that we use to deploy the Grafana
-Agent. It is marked as `v1` and is incompatible with the `v0` configs
-found in the [parent directory](../).
-
-This library is currently a work in progress and backwards-incompatible changes
-may occur. Once the library is considered complete, no further backwards
-incompatible changes will be made.
-
-## Capabilities
-
-This library is significantly more flexible than its `v0` counterpart. It tries
-to allow to deploy and configure the Agent in a feature matrix:
-
-| Mechanism        | Metrics | Logs      | Traces | Integrations |
-| ---------------- | ------- | --------- | ------ | ------------ |
-| DaemonSet        | Yes     | Yes       | Yes    | Yes          |
-| Deployment       | Yes     | No        | No     | No           |
-| Scraping Service | Yes     | No        | No     | No           |
-
-The library can be invoked multiple times to get full coverage. For example, you
-may wish to deploy a scraping service for scalable metrics collection, and a
-DaemonSet with just Loki Logs for log collection.
-
-Trying to use the library in incompatible ways will generate errors. For
-example, you may not deploy a scraping service with Loki logs collection.
-
-## API
-
-## Generate Agent Deployment
-
-- `new(name, namespace)`: Create a new DaemonSet. This is the default mode to
-  deploy the Agent.  Enables host filtering.
-- `newDeployment(name, namespace)`: Create a new single-replica Deployment.
-  Disables host filtering.
-- `newScrapingService(name, namespace, replicas)`: (Not yet available). Create a
-  scalable deployment of clustered Agents. Requires being given a KV store such as Redis or ETCD.
-
-## Configure Metrics
-
-- `withMetricsConfig(config)`: Creates a metrics config block.
-- `defaultMetricsConfig`: Default metrics config block.
-- `withMetricsInstances(instances)`: Creates a metrics instance config to
-  tell the Agent what to scrape.
-- `withRemoteWrite(remote_writes)`: Configures locations to remote write metrics
-   to. Controls remote writes globally.
-- `scrapeInstanceKubernetes`: Default metrics instance config to scrape from
-  Kubernetes.
-
-## Configure Logs
-
-- `withLogsConfig(config)`: Creates a Logs config block to pass to the Agent.
-- `newLogsClient(client_config)`: Creates a new client configuration to pass
-  to `withLogsClients`.
-- `withLogsClients(clients)`: Add a set of clients to a Logs config block.
-- `scrapeKubernetesLogs`: Default Logs config that collects logs from Kubernetes
-  pods.
-
-## Configure Traces
-
-- `withTracesConfig(config)`: Creates a Traces config block to pass to the Agent.
-- `withTracesRemoteWrite(remote_write)`: Configures one or multiple locations to push spans to.
-- `withTracesSamplingStrategies(strategies)`: Configures strategies for trace collection.
-- `withTracesScrapeConfigs(scrape_configs)`: Configures scrape configs to attach
-   labels to incoming spans.
-- `tracesScrapeKubernetes`: Default scrape configs to collect meta information
-   from pods. Aligns with the labels from `scrapeInstanceKubernetes` and
-   `scrapeKubernetesLogs` so logs, metrics, and traces all use the same set of
-   labels.
-
-## General
-
-- `withImages(images)`: Use custom images.
-- `withConfigHash(include=true)`: Whether to include a config hash annotation.
-- `withPortsMixin(ports)`: Mixin ports from `k.core.v1.containerPort` against
-   the container and service.
diff --git a/production/tanka/grafana-agent/v1/internal/agent.libsonnet b/production/tanka/grafana-agent/v1/internal/agent.libsonnet
deleted file mode 100644
index d6af77dd0bd7..000000000000
--- a/production/tanka/grafana-agent/v1/internal/agent.libsonnet
+++ /dev/null
@@ -1,72 +0,0 @@
-local k = import 'ksonnet-util/kausal.libsonnet';
-
-local configMap = k.core.v1.configMap;
-local container = k.core.v1.container;
-local daemonSet = k.apps.v1.daemonSet;
-local deployment = k.apps.v1.deployment;
-local policyRule = k.rbac.v1.policyRule;
-local serviceAccount = k.core.v1.serviceAccount;
-
-{
-  newAgent(name='grafana-agent', namespace='default', image, config, use_daemonset=true):: {
-    local controller = if use_daemonset then daemonSet else deployment,
-    local k = (import 'ksonnet-util/kausal.libsonnet') { _config+:: { namespace: namespace } },
-    local this = self,
-
-    _controller:: controller,
-    _config_hash:: true,
-
-    listen_port:: 8080,
-
-    rbac:
-      k.util.rbac(name, [
-        // Need for k8s SD on Loki/Prometheus subsystems
-        policyRule.withApiGroups(['']) +
-        policyRule.withResources(['nodes', 'nodes/proxy', 'services', 'endpoints', 'pods']) +
-        policyRule.withVerbs(['get', 'list', 'watch']),
-
-        // Needed for Prometheus subsystem to scrape k8s API
-        policyRule.withNonResourceUrls('/metrics') +
-        policyRule.withVerbs(['get']),
-      ]) {
-        service_account+:
-          serviceAccount.mixin.metadata.withNamespace(namespace),
-      },
-
-    config_map:
-      configMap.new(name) +
-      configMap.mixin.metadata.withNamespace(namespace) +
-      configMap.withData({
-        'agent.yaml': k.util.manifestYaml(config),
-      }),
-
-    container::
-      container.new('agent', image) +
-      container.withPorts(k.core.v1.containerPort.new('http-metrics', self.listen_port)) +
-      container.withArgsMixin(k.util.mapToFlags({
-        'config.file': '/etc/agent/agent.yaml',
-        'server.http.address': '0.0.0.0:' + this.listen_port,
-      })) +
-      container.withEnvMixin([
-        k.core.v1.envVar.fromFieldPath('HOSTNAME', 'spec.nodeName'),
-      ]),
-
-    agent:
-      (
-        if use_daemonset then daemonSet.new(name, [self.container])
-        else deployment.new(name, 1, [self.container])
-      ) +
-      controller.mixin.metadata.withNamespace(namespace) +
-      controller.mixin.spec.template.spec.withServiceAccount(name) +
-      (
-        if self._config_hash
-        then controller.mixin.spec.template.metadata.withAnnotationsMixin({
-          config_hash: std.md5(std.toString(config)),
-        })
-        else {}
-      ) +
-      k.util.configVolumeMount(name, '/etc/agent'),
-  },
-
-  withConfigHash(include):: { _config_hash:: include },
-}
diff --git a/production/tanka/grafana-agent/v1/internal/kubernetes_instance.libsonnet b/production/tanka/grafana-agent/v1/internal/kubernetes_instance.libsonnet
deleted file mode 100644
index a4749c9797fc..000000000000
--- a/production/tanka/grafana-agent/v1/internal/kubernetes_instance.libsonnet
+++ /dev/null
@@ -1,27 +0,0 @@
-local k8s_v2 = import '../../v2/internal/helpers/k8s.libsonnet';
-
-{
-  kubernetesScrapeInstanceConfig:: {
-    scrape_api_server_endpoints: false,
-    insecure_skip_verify: false,
-
-    cluster_dns_tld: 'local',
-    cluster_dns_suffix: 'cluster.' + self.cluster_dns_tld,
-    kubernetes_api_server_address: 'kubernetes.default.svc.%(cluster_dns_suffix)s:443' % self,
-  },
-
-  newKubernetesScrapeInstance(config, namespace='default'):: {
-    local _config = $.kubernetesScrapeInstanceConfig + config,
-
-    name: 'kubernetes',
-    scrape_configs: k8s_v2.metrics({
-      scrape_api_server_endpoints: _config.scrape_api_server_endpoints,
-      insecure_skip_verify: _config.insecure_skip_verify,
-      cluster_dns_tld: _config.cluster_dns_tld,
-      cluster_dns_suffix: _config.cluster_dns_suffix,
-      kubernetes_api_server_address: _config.kubernetes_api_server_address,
-      ksm_namespace: namespace,
-      node_exporter_namespace: namespace,
-    }),
-  },
-}
diff --git a/production/tanka/grafana-agent/v1/internal/kubernetes_logs.libsonnet b/production/tanka/grafana-agent/v1/internal/kubernetes_logs.libsonnet
deleted file mode 100644
index 8ef2d4f40200..000000000000
--- a/production/tanka/grafana-agent/v1/internal/kubernetes_logs.libsonnet
+++ /dev/null
@@ -1,7 +0,0 @@
-local k8s_v2 = import '../../v2/internal/helpers/k8s.libsonnet';
-
-{
-  newKubernetesLogsCollector():: {
-    scrape_configs: k8s_v2.logs(),
-  },
-}
diff --git a/production/tanka/grafana-agent/v1/internal/utils.libsonnet b/production/tanka/grafana-agent/v1/internal/utils.libsonnet
deleted file mode 100644
index 35ab5834a782..000000000000
--- a/production/tanka/grafana-agent/v1/internal/utils.libsonnet
+++ /dev/null
@@ -1,36 +0,0 @@
-{
-  // Returns true if the scrape_config only contains a service_discovery for
-  // Kubernetes (via kubernetes_sd_configs) that has role: pod
-  isOnlyK8sPodDiscovery(scrape_config)::
-    // Get all the *_sd_configs and filter that down to the sd_configs that aren't
-    // kubernetes_sd_configs. It should be 0.
-    std.length(std.filter(
-      function(key) key != 'kubernetes_sd_configs',
-      std.filter(
-        function(key) std.endsWith(key, '_sd_configs'),
-        std.objectFields(scrape_config),
-      ),
-    )) == 0 &&
-    // Make sure there are 0 kubernetes_sd_configs whose role is not pod
-    std.length(std.filter(
-      function(kube_sd_config) kube_sd_config.role != 'pod',
-      std.flatMap(
-        function(key) scrape_config[key],
-        std.filter(
-          function(key) key == 'kubernetes_sd_configs',
-          std.objectFields(scrape_config)
-        )
-      )
-    )) == 0,
-
-  // host_filter_compatible instances are ones that:
-  // - only use kubernetes_sd_configs
-  // - only use kubernetes_sd_configs with role = 'pod'
-  transformInstances(instances=[], host_filter_compatible=true)::
-    std.map(function(instance) instance {
-      scrape_configs: std.filter(
-        function(cfg) $.isOnlyK8sPodDiscovery(cfg) == host_filter_compatible,
-        super.scrape_configs,
-      ),
-    }, instances),
-}
diff --git a/production/tanka/grafana-agent/v1/lib/deployment.libsonnet b/production/tanka/grafana-agent/v1/lib/deployment.libsonnet
deleted file mode 100644
index e557a0739516..000000000000
--- a/production/tanka/grafana-agent/v1/lib/deployment.libsonnet
+++ /dev/null
@@ -1,83 +0,0 @@
-local agent = import '../internal/agent.libsonnet';
-local k = import 'ksonnet-util/kausal.libsonnet';
-
-local configMap = k.core.v1.configMap;
-local service = k.core.v1.service;
-local container = k.core.v1.container;
-
-{
-  // newDeployment creates a new single-replicated Deployment of the
-  // grafana-agent. By default, this deployment will do no collection. You must
-  // merge the result of this function with the following:
-  //
-  // - withMetricsConfig
-  // - withMetricsInstances
-  // - optionally withRemoteWrite
-  //
-  // newDeployment does not support log collection.
-  newDeployment(name='grafana-agent', namespace='default'):: {
-    assert !std.objectHas(self, '_logs_config') : |||
-      Log collection is not supported with newDeployment.
-    |||,
-    assert !std.objectHas(self, '_integrations') : |||
-      Integrations are not supported with newDeployment.
-    |||,
-
-    local this = self,
-
-    _mode:: 'deployment',
-    _images:: $._images,
-    _config_hash:: true,
-
-    local has_metrics_config = std.objectHasAll(self, '_metrics_config'),
-    local has_metrics_instances = std.objectHasAll(self, '_metrics_instances'),
-    local has_trace_config = std.objectHasAll(self, '_trace_config'),
-    local has_sampling_strategies = std.objectHasAll(self, '_traces_sampling_strategies'),
-
-    config:: {
-      server: {
-        log_level: 'info',
-      },
-    } + (
-      if has_metrics_config
-      then {
-        metrics:
-          this._metrics_config {
-            configs:
-              if has_metrics_instances
-              then this._metrics_instances
-              else [],
-          },
-      }
-      else {}
-    ) + (
-      if has_trace_config then {
-        traces: {
-          configs: [this._trace_config {
-            name: 'default',
-          }],
-        },
-      }
-      else {}
-    ),
-
-    agent:
-      agent.newAgent(name, namespace, self._images.agent, self.config, use_daemonset=false) +
-      agent.withConfigHash(self._config_hash) + {
-        // If sampling strategies were defined, we need to mount them as a JSON
-        // file.
-        config_map+:
-          if has_sampling_strategies
-          then configMap.withDataMixin({
-            'strategies.json': std.toString(this._traces_sampling_strategies),
-          })
-          else {},
-        // If we're deploying for tracing, applications will want to write to
-        // a service for load balancing span delivery.
-        service:
-          if has_trace_config
-          then k.util.serviceFor(self.agent) + service.mixin.metadata.withNamespace(namespace)
-          else {},
-      },
-  },
-}
diff --git a/production/tanka/grafana-agent/v1/lib/integrations.libsonnet b/production/tanka/grafana-agent/v1/lib/integrations.libsonnet
deleted file mode 100644
index 6b1482816cf9..000000000000
--- a/production/tanka/grafana-agent/v1/lib/integrations.libsonnet
+++ /dev/null
@@ -1,33 +0,0 @@
-local k = import 'ksonnet-util/kausal.libsonnet';
-
-local container = k.core.v1.container;
-
-{
-  // withIntegrations controls the integrations component of the Agent.
-  //
-  // For the full list of options, refer to the configuration reference:
-  // https://github.com/grafana/agent/blob/main/docs/configuration-reference.md#integrations_config
-  withIntegrations(integrations):: {
-    assert std.objectHasAll(self, '_mode') : |||
-      withIntegrations must be merged with the result of calling new.
-    |||,
-    _integrations:: integrations,
-  },
-
-  integrationsMixin:: {
-    container+::
-      container.mixin.securityContext.withPrivileged(true) +
-      container.mixin.securityContext.withRunAsUser(0),
-
-    local controller = self._controller,
-    agent+:
-      // procfs, sysfs, rotfs
-      k.util.hostVolumeMount('proc', '/proc', '/host/proc', readOnly=true) +
-      k.util.hostVolumeMount('sys', '/sys', '/host/sys', readOnly=true) +
-      k.util.hostVolumeMount('root', '/', '/host/root', readOnly=true) +
-
-      controller.mixin.spec.template.spec.withHostPID(true) +
-      controller.mixin.spec.template.spec.withHostNetwork(true) +
-      controller.mixin.spec.template.spec.withDnsPolicy('ClusterFirstWithHostNet'),
-  },
-}
diff --git a/production/tanka/grafana-agent/v1/lib/logs.libsonnet b/production/tanka/grafana-agent/v1/lib/logs.libsonnet
deleted file mode 100644
index babb85d5ecca..000000000000
--- a/production/tanka/grafana-agent/v1/lib/logs.libsonnet
+++ /dev/null
@@ -1,82 +0,0 @@
-local scrape_k8s_logs = import '../internal/kubernetes_logs.libsonnet';
-local k = import 'ksonnet-util/kausal.libsonnet';
-
-local container = k.core.v1.container;
-
-{
-  // withLogsConfig adds a Logs config to collect logs.
-  //
-  // For the full list of options, refer to the configuration reference:
-  // https://grafana.com/docs/agent/latest/configuration/logs-config/
-  withLogsConfig(config):: {
-    assert std.objectHasAll(self, '_mode') : |||
-      withLogsConfig must be merged with the result of calling new.
-    |||,
-    _logs_config:: config,
-  },
-
-  // newLogsClient creates a new client object. Results from this can be passed into
-  // withLogsClients.
-  //
-  // client_config should be an object of the following shape:
-  //
-  // {
-  //   scheme: 'https', // or http
-  //   hostname: 'logs-us-central1.grafana.net', // replace with hostname to use
-  //   username: '', // OPTIONAL username for Loki API connection
-  //   password: '', // OPTIONAL password for Loki API connection
-  //   external_labels: {}, // OPTIONAL labels to set for connection
-  // }
-  newLogsClient(client_config)::
-    {
-      url: (
-        if std.objectHasAll(client_config, 'username') then
-          '%(scheme)s://%(username)s:%(password)s@%(hostname)s/loki/api/v1/push' % client_config
-        else
-          '%(scheme)s://%(hostname)s/loki/api/v1/push' % client_config
-      ),
-    } + (
-      if std.objectHasAll(client_config, 'external_labels')
-      then { external_labels: client_config.external_labels }
-      else {}
-    ),
-
-  // withLogsClients adds clients to send logs to. At least one client must be
-  // present. Clients can be created by calling newLogsClient or by creating
-  // an object that conforms to the Promtail client_config schema specified
-  // here:
-  //
-  // https://grafana.com/docs/loki/latest/clients/promtail/configuration/#client_config
-  //
-  // withLogsClients should be merged with the result of withLogsConfig.
-  withLogsClients(clients):: {
-    assert std.objectHasAll(self, '_logs_config') : |||
-      withLogsClients must be merged with the result of calling withLogsConfig.
-    |||,
-
-    _logs_config+:: {
-      clients: if std.isArray(clients) then clients else [clients],
-    },
-  },
-
-  // logsPermissionsMixin mutates the container and deployment to work with
-  // reading Docker container logs.
-  logsPermissionsMixin:: {
-    container+::
-      container.mixin.securityContext.withPrivileged(true) +
-      container.mixin.securityContext.withRunAsUser(0),
-
-    agent+:
-      // For reading docker containers. /var/log is used for the positions file
-      // and shouldn't be set to readonly.
-      k.util.hostVolumeMount('varlog', '/var/log', '/var/log') +
-      k.util.hostVolumeMount('varlibdockercontainers', '/var/lib/docker/containers', '/var/lib/docker/containers', readOnly=true) +
-
-      // For reading journald
-      k.util.hostVolumeMount('etcmachineid', '/etc/machine-id', '/etc/machine-id', readOnly=true),
-  },
-
-  // scrapeKubernetesLogs defines a Logs config that can collect logs from
-  // Kubernetes pods.
-  scrapeKubernetesLogs: scrape_k8s_logs.newKubernetesLogsCollector(),
-}
diff --git a/production/tanka/grafana-agent/v1/lib/metrics.libsonnet b/production/tanka/grafana-agent/v1/lib/metrics.libsonnet
deleted file mode 100644
index 3cad8e867ab8..000000000000
--- a/production/tanka/grafana-agent/v1/lib/metrics.libsonnet
+++ /dev/null
@@ -1,116 +0,0 @@
-local scrape_k8s = import '../internal/kubernetes_instance.libsonnet';
-
-{
-  // defaultMetricsConfig holds the default Metrics Config with all
-  // options that the Agent supports. It is better to use this object as a
-  // reference rather than extending it; since all fields are defined here, if
-  // the Agent changes a default value in the future, the default change will
-  // be overridden by the values here.
-  //
-  // Required fields will be marked as REQUIRED.
-  defaultMetricsConfig:: {
-    // Settings that apply to all launched Metrics instances by default.
-    // These settings may be overridden on a per-instance basis.
-    global: {
-      // How frequently to scrape for metrics.
-      scrape_interval: '1m',
-
-      // How long to wait before timing out from scraping a target.
-      scrape_timeout: '10s',
-
-      // Extra labels to apply to all scraped targets.
-      external_labels: {
-        /* foo: 'bar', */
-      },
-    },
-
-    // Where to store the WAL for metrics before they are sent to remote_write.
-    // REQUIRED. The value here is preconfigured to work with the Tanka configs.
-    wal_directory: '/var/lib/agent/data',
-
-    // If an instance crashes abnormally, wait this long before restarting it.
-    // 0s disables the backoff period and restarts the instance immediately.
-    instance_restart_backoff: '5s',
-
-    // How to spawn instances based on compatible fields. Supported values:
-    // "shared" (default), "distinct".
-    instance_mode: 'shared',
-  },
-
-  // withMetricsConfig controls the Metrics engine settings for the Agent.
-  // defaultMetricsConfig explicitly defines all supported values that can be
-  // provided within config.
-  withMetricsConfig(config):: { _metrics_config:: config },
-
-  // withMetricsInstances controls the Metrics instances the Agent will
-  // launch. Instances may be a single object or an array of objects. Each
-  // object must have a name key that is unique to that object.
-  //
-  // scrapeInstanceKubernetes defines an example set of instances and the
-  // ones Grafana Labs uses in production. It does not demonstrate all available
-  // values for scrape configs and remote_write. For detailed information on
-  // instance config settings, consult the Agent documentation:
-  //
-  // https://github.com/grafana/agent/blob/main/docs/configuration-reference.md#metrics_instance_config
-  //
-  // host_filter does not need to be applied here; the library will apply it
-  // automatically based on how the Agent is being deployed.
-  //
-  // remote_write rules may be defined in the instance object. Optionally,
-  // remove_write rules may be applied to every instance object by using the
-  // withRemoteWrite function.
-  withMetricsInstances(instances):: {
-    assert std.objectHasAll(self, '_mode') : |||
-      withMetricsInstances must be merged with the result of calling new,
-      newDeployment, or newScrapingService.
-    |||,
-
-    local list = if std.isArray(instances) then instances else [instances],
-
-    // If the library was invoked in daemonset mode, we want to use
-    // host_filtering mode so each Agent only scrapes stuff from its local
-    // machine.
-    local host_filter = super._mode == 'daemonset',
-
-    // Apply host_filtering over our list of instances.
-    _metrics_instances:: std.map(function(inst) inst {
-      host_filter: host_filter,
-
-      // Make sure remote_write is an empty array if it doesn't exist.
-      remote_write:
-        if !std.objectHas(inst, 'remote_write') || !std.isArray(inst.remote_write)
-        then []
-        else inst.remote_write,
-    }, list),
-  },
-
-  // withRemoteWrite overwrites all the remote_write configs provided in
-  // withMetricsInstances with the specified remote_writes. This is
-  // useful when there are multiple instances and you just want everything
-  // to remote_write to the same place.
-  //
-  // Refer to the remote_write specification for all available fields:
-  //   https://github.com/grafana/agent/blob/main/docs/configuration-reference.md#remote_write
-  withRemoteWrite(remote_writes):: {
-    assert std.objectHasAll(self, '_mode') : |||
-      withMetricsInstances must be merged with the result of calling new,
-      newDeployment, or newScrapingService.
-    |||,
-
-    local list = if std.isArray(remote_writes) then remote_writes else [remote_writes],
-    _metrics_config+:: { global+: { remote_write: list } },
-  },
-
-  // scrapeInstanceKubernetes defines an instance config Grafana Labs uses to
-  // scrape Kubernetes metrics.
-  //
-  // Pods will be scraped if:
-  //
-  // 1. They have a port ending in -metrics
-  // 2. They do not have a prometheus.io/scrape=false annotation
-  // 3. They have a name label
-  scrapeInstanceKubernetes: scrape_k8s.newKubernetesScrapeInstance(
-    config=scrape_k8s.kubernetesScrapeInstanceConfig,
-    namespace='default',
-  ),
-}
diff --git a/production/tanka/grafana-agent/v1/lib/scraping_service.libsonnet b/production/tanka/grafana-agent/v1/lib/scraping_service.libsonnet
deleted file mode 100644
index 6962ad3b8d30..000000000000
--- a/production/tanka/grafana-agent/v1/lib/scraping_service.libsonnet
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  // TODO(rfratto): port scraping service code and expose as newScrapingService
-  // here.
-}
diff --git a/production/tanka/grafana-agent/v1/lib/traces.libsonnet b/production/tanka/grafana-agent/v1/lib/traces.libsonnet
deleted file mode 100644
index 98a91fcb4191..000000000000
--- a/production/tanka/grafana-agent/v1/lib/traces.libsonnet
+++ /dev/null
@@ -1,121 +0,0 @@
-{
-  // withTracesConfig adds a Traces config to collect traces.
-  //
-  // For the full list of options, refer to the configuration reference:
-  //
-  withTracesConfig(config):: {
-    assert std.objectHasAll(self, '_mode') : |||
-      withTracesConfig must be merged with the result of calling new.
-    |||,
-    _trace_config:: config,
-  },
-
-  // withTracesRemoteWrite configures one or multiple backends to write traces to.
-  //
-  // Available options can be found in the configuration reference:
-  // https://github.com/grafana/agent/blob/main/docs/configuration-reference.md#traces_config
-  withTracesRemoteWrite(remote_write):: {
-    assert std.objectHasAll(self, '_trace_config') : |||
-      withTracesRemoteWrite must be merged with the result of calling
-      withTracesConfig.
-    |||,
-    _trace_config+:: { remote_write: remote_write },
-  },
-
-  // withTracesSamplingStrategies accepts an object for trace sampling strategies.
-  //
-  // Refer to Jaeger's documentation for available fields:
-  // https://www.jaegertracing.io/docs/1.17/sampling/#collector-sampling-configuration
-  //
-  // Creating a file isn't necessary; just provide the object and a ConfigMap
-  // will be created for you and added to the tempo config.
-  withTracesSamplingStrategies(strategies):: {
-    assert std.objectHasAll(self, '_trace_config') : |||
-      withTracesPushConfig must be merged with the result of calling
-      withTracesConfig.
-    |||,
-
-    assert
-    std.objectHasAll(self._trace_config, 'receivers') &&
-    std.objectHasAll(self._trace_config.receivers, 'jaeger') : |||
-        withStrategies can only be used if the traces config is configured for
-        receiving Jaeger spans and traces.
-      |||,
-
-    // The main library should detect the presence of _traces_sampling_strategies
-    // and create a ConfigMap bound to /etc/agent/strategies.json.
-    _traces_sampling_strategies:: strategies,
-    _trace_config+:: {
-      receivers+: {
-        jaeger+: {
-          remote_sampling: {
-            strategy_file: '/etc/agent/strategies.json',
-            insecure: true,
-          },
-        },
-      },
-    },
-  },
-
-  // Configures scrape_configs for discovering meta labels that will be attached
-  // to incoming metrics and spans whose IP matches the __address__ of the
-  // target.
-  withTracesScrapeConfigs(scrape_configs):: {
-    assert std.objectHasAll(self, '_trace_config') : |||
-      withTracesScrapeConfigs must be merged with the result of calling
-      withTracesConfig.
-    |||,
-    _trace_config+: { scrape_configs: scrape_configs },
-  },
-
-  // Provides a default set of scrape_configs to use for discovering labels from
-  // Pods. Labels will be attached to any traces sent from the discovered pods.
-  tracesScrapeKubernetes:: [
-    {
-      bearer_token_file: '/var/run/secrets/kubernetes.io/serviceaccount/token',
-      job_name: 'kubernetes-pods',
-      kubernetes_sd_configs: [{ role: 'pod' }],
-      relabel_configs: [
-        {
-          action: 'replace',
-          source_labels: ['__meta_kubernetes_namespace'],
-          target_label: 'namespace',
-        },
-        {
-          action: 'replace',
-          source_labels: ['__meta_kubernetes_pod_name'],
-          target_label: 'pod',
-        },
-        {
-          action: 'replace',
-          source_labels: ['__meta_kubernetes_pod_container_name'],
-          target_label: 'container',
-        },
-      ],
-      tls_config: {
-        ca_file: '/var/run/secrets/kubernetes.io/serviceaccount/ca.crt',
-        insecure_skip_verify: false,
-      },
-    },
-  ],
-
-  // withTracesTailSamplingConfig tail-based sampling for traces.
-  //
-  // Available options can be found in the configuration reference:
-  // https://github.com/grafana/agent/blob/main/docs/configuration-reference.md#traces_config
-  withTracesTailSamplingConfig(tail_sampling):: {
-    assert std.objectHasAll(self, '_trace_config') : |||
-      withTracesTailSamplingConfig must be merged with the result of calling
-      withTracesConfig.
-    |||,
-    _trace_config+:: { tail_sampling: tail_sampling },
-  },
-
-  withTracesLoadBalancingConfig(load_balancing):: {
-    assert std.objectHasAll(self, '_trace_config') : |||
-      withTracesLoadBalancingConfig must be merged with the result of calling
-      withTracesConfig.
-    |||,
-    _trace_config+:: { load_balancing: load_balancing },
-  },
-}
diff --git a/production/tanka/grafana-agent/v1/main.libsonnet b/production/tanka/grafana-agent/v1/main.libsonnet
deleted file mode 100644
index d4096bc015e9..000000000000
--- a/production/tanka/grafana-agent/v1/main.libsonnet
+++ /dev/null
@@ -1,142 +0,0 @@
-local agent = import './internal/agent.libsonnet';
-local utils = import './internal/utils.libsonnet';
-local k = import 'ksonnet-util/kausal.libsonnet';
-
-local container = k.core.v1.container;
-local configMap = k.core.v1.configMap;
-local service = k.core.v1.service;
-
-// Merge all of our libraries to create the final exposed library.
-(import './lib/deployment.libsonnet') +
-(import './lib/integrations.libsonnet') +
-(import './lib/metrics.libsonnet') +
-(import './lib/scraping_service.libsonnet') +
-(import './lib/logs.libsonnet') +
-(import './lib/traces.libsonnet') +
-{
-  _images:: {
-    agent: 'grafana/agent:v0.39.0',
-    agentctl: 'grafana/agentctl:v0.39.0',
-  },
-
-  // new creates a new DaemonSet deployment of the grafana-agent. By default,
-  // the deployment will do no collection. You must merge the result of this
-  // function with one or more of the following:
-  //
-  // - withMetricsConfig, withMetricsInstances (and optionally withRemoteWrite)
-  // - withLogsConfig
-  //
-  // When using withMetricsInstances, a [name]-etc deployment
-  // with one replica will be created alongside the DaemonSet. This deployment
-  // is responsible for handling scrape configs that will not work on the host
-  // machine.
-  //
-  // For example, if a scrape_config scrapes the Kubernetes API, that must be
-  // handled by the [name]-etc deployment as the Kubernetes API does not run
-  // on any node in the cluster.
-  //
-  // scrapeInstanceKubernetes provides the default
-  // MetricsInstanceConfig Grafana Labs uses in production.
-  new(name='grafana-agent', namespace='default'):: {
-    local this = self,
-
-    _mode:: 'daemonset',
-    _images:: $._images,
-    _config_hash:: true,
-
-    local has_logs_config = std.objectHasAll(self, '_logs_config'),
-    local has_trace_config = std.objectHasAll(self, '_trace_config'),
-    local has_metrics_config = std.objectHasAll(self, '_metrics_config'),
-    local has_metrics_instances = std.objectHasAll(self, '_metrics_instances'),
-    local has_integrations = std.objectHasAll(self, '_integrations'),
-    local has_sampling_strategies = std.objectHasAll(self, '_traces_sampling_strategies'),
-
-    local metrics_instances =
-      if has_metrics_instances then this._metrics_instances else [],
-    local host_filter_instances = utils.transformInstances(metrics_instances, true),
-    local etc_instances = utils.transformInstances(metrics_instances, false),
-
-    config:: {
-      server: {
-        log_level: 'info',
-      },
-    } + (
-      if has_metrics_config
-      then { metrics: this._metrics_config { configs: host_filter_instances } }
-      else {}
-    ) + (
-      if has_logs_config then {
-        logs: {
-          positions_directory: '/tmp/positions',
-          configs: [this._logs_config {
-            name: 'default',
-          }],
-        },
-      } else {}
-    ) + (
-      if has_trace_config then {
-        traces: {
-          configs: [this._trace_config {
-            name: 'default',
-          }],
-        },
-      }
-      else {}
-    ) + (
-      if has_integrations then { integrations: this._integrations } else {}
-    ),
-
-    etc_config:: if has_metrics_config then this.config {
-      // Hide logs and integrations from our extra configs, we just want the
-      // scrape configs that wouldn't work for the DaemonSet.
-      metrics+: {
-        configs: std.map(function(cfg) cfg { host_filter: false }, etc_instances),
-      },
-      logs:: {},
-      traces:: {},
-      integrations:: {},
-    },
-
-    agent:
-      agent.newAgent(name, namespace, self._images.agent, self.config, use_daemonset=true) +
-      agent.withConfigHash(self._config_hash) + {
-        // If sampling strategies were defined, we need to mount them as a JSON
-        // file.
-        config_map+:
-          if has_sampling_strategies
-          then configMap.withDataMixin({
-            'strategies.json': std.toString(this._traces_sampling_strategies),
-          })
-          else {},
-
-        // If we're deploying for tracing, applications will want to write to
-        // a service for load balancing span delivery.
-        service:
-          if has_trace_config
-          then k.util.serviceFor(self.agent) + service.mixin.metadata.withNamespace(namespace)
-          else {},
-      } + (
-        if has_logs_config then $.logsPermissionsMixin else {}
-      ) + (
-        if has_integrations && std.objectHas(this._integrations, 'node_exporter') then $.integrationsMixin else {}
-      ),
-
-    agent_etc: if std.length(etc_instances) > 0 then
-      agent.newAgent(name + '-etc', namespace, self._images.agent, self.etc_config, use_daemonset=false) +
-      agent.withConfigHash(self._config_hash),
-  },
-
-  // withImages sets the images used for launching the Agent.
-  // Keys supported: agent, agentctl
-  withImages(images):: { _images+: images },
-
-  // Includes or excludes the config hash annotation.
-  withConfigHash(include=true):: { _config_hash:: include },
-
-  // withPortsMixin adds extra ports to expose.
-  withPortsMixin(ports=[]):: {
-    agent+: {
-      container+:: container.withPortsMixin(ports),
-    },
-  },
-}
diff --git a/production/tanka/grafana-agent/v2/README.md b/production/tanka/grafana-agent/v2/README.md
deleted file mode 100644
index 33c18cadeac7..000000000000
--- a/production/tanka/grafana-agent/v2/README.md
+++ /dev/null
@@ -1,84 +0,0 @@
-# Tanka Configs
-
-**STATUS**: Work in progress, use of these configs is not recommended for production.
-
-This directory contains the Tanka configs that we use to deploy the Grafana
-Agent. It is marked as `v2` and is incompatible previous versions of the library
-located in other directories.
-
-This library is currently a work in progress and backwards-incompatible changes
-may occur. Once the library is considered complete, no further backwards
-incompatible changes will be made.
-
-## Capabilities
-
-This library is significantly simplified over the `v0` and `v1` counterparts.
-Since there are many ways to combine the various functionalities of the Grafana
-Agent, the `v2` library aims to stay out of your way and provide optional composible
-helpers that may be useful for some people.
-
-Users of the library will pick a controller for their deployment. They are
-expected to know what feature are compatible with which controller:
-
-| Controller       | Metrics              | Logs      | Traces | Integrations |
-| ---------------- | -------------------  | --------- | ------ | ------------ |
-| DaemonSet        | If host filtering    | Yes       | Yes    | No           |
-| Deployment       | Yes                  | No        | No     | Yes          |
-| StatefulSet      | Yes                  | No        | No     | Yes          |
-
-Creating an incompatible deployment will cause runtime issues when running the
-Agent (for example, if configuring Logs with a StatefulSet, you will only get
-logs from the node the pods are running on).
-
-To get full coverage of features, you must create multiple deployments of the
-library. You may wish to combine a StatefulSet for metrics and integrations, a
-Deployment for Traces, and a DaemonSet for logs.
-
-## API
-
-## Generate Agent Deployment
-
-- `new(name='grafana-agent', namespace='')`: Create a new Agent without a
-   controller.
-- `withDeploymentController(replicas=1)`: Attach a Deployment as the Agent
-  controller. Number of replicas may optionally be given.
-- `withDaemonSetController()`: Attach a DaemonSet as the Agent controller.
-- `withStatefulSetController(replicas=1, volumeClaims=[])`: Attach a StatefulSet
-  as the Agent controller. Number of replicas and a set of volume claim
-  templates may be given.
-
-## Generate Scraping Service Syncer
-
-The Scraping Service Syncer is used to sync metrics instance configs against the
-scraping service config management API.
-
-- `newSyncer(name='grafana-agent-sycner', namespace='', config={})`
-
-## General
-
-- `withAgentConfig(config)`: Provide a custom Agent config.
-- `withArgsMixin(config)`: Pass a map of additional flags to set.
-- `withMetricsPort(port)`: Value for the `http-metrics` port (default 80)
-- `withImagesMixin(images)`: Use custom images instead of the defaults.
-- `withConfigHash(include=true)`: Whether to include a config hash annotation.
-- `withPortsMixin(ports=[])`: Mixin ports from `k.core.v1.containerPort` against
-   the container and service.
-- `withVolumesMixin(volumes=[])`: Volume to attach to the pod.
-- `withVolumeMountsMixin(mounts=[])`: Volume mounts to attach to the container.
-
-## Helpers
-
-- `newKubernetesMetrics(config={})`: Creates a set of metrics scrape_configs for
-  collecting metrics from Kubernetes pods.
-- `newKubernetesLogs(config={})`: Creates a set of logs scrape_configs for
-  collecting logs from Kubernetes pods.
-- `newKubernetesTraces(config={})`: Creates a set of traces scrape_configs for
-  associating spans with metadata from discovered Kubernetes pods.
-- `withLogVolumeMounts(config={})`: Adds volume mounts to the controller for collecting
-  logs.
-- `withLogPermissions(config={})`: Runs the container as privileged and as the root user
-  so logs can be collected properly.
-- `withService(config)`: Add a service for the deployment, statefulset, or daemonset.
-  Note that this must be called after any ports are added via `withPortsMixin`.
-
-
diff --git a/production/tanka/grafana-agent/v2/internal/base.libsonnet b/production/tanka/grafana-agent/v2/internal/base.libsonnet
deleted file mode 100644
index 6d697c93a3aa..000000000000
--- a/production/tanka/grafana-agent/v2/internal/base.libsonnet
+++ /dev/null
@@ -1,56 +0,0 @@
-function(name='grafana-agent', namespace='') {
-  local k = (import 'ksonnet-util/kausal.libsonnet') { _config+:: { namespace: namespace } },
-
-  local container = k.core.v1.container,
-  local configMap = k.core.v1.configMap,
-  local containerPort = k.core.v1.containerPort,
-  local policyRule = k.rbac.v1.policyRule,
-  local serviceAccount = k.core.v1.serviceAccount,
-  local envVar = k.core.v1.envVar,
-
-  local this = self,
-
-  _images:: {
-    agent: 'grafana/agent:v0.39.0',
-    agentctl: 'grafana/agentctl:v0.39.0',
-  },
-  _config:: {
-    name: name,
-    namespace: namespace,
-    config_hash: true,
-    agent_config: '',
-    agent_port: 80,
-    agent_args: {
-      'config.file': '/etc/agent/agent.yaml',
-      'server.http.address': '0.0.0.0:80',
-      'config.expand-env': 'true',
-    },
-  },
-
-  rbac: k.util.rbac(name, [
-    policyRule.withApiGroups(['']) +
-    policyRule.withResources(['nodes', 'nodes/proxy', 'services', 'endpoints', 'pods', 'events']) +
-    policyRule.withVerbs(['get', 'list', 'watch']),
-
-    policyRule.withNonResourceUrls('/metrics') +
-    policyRule.withVerbs(['get']),
-  ]) {
-    service_account+: serviceAccount.mixin.metadata.withNamespace(namespace),
-  },
-
-  configMap:
-    configMap.new(name) +
-    configMap.mixin.metadata.withNamespace(namespace) +
-    configMap.withData({
-      'agent.yaml': k.util.manifestYaml(this._config.agent_config),
-    }),
-
-  container::
-    container.new(name, this._images.agent) +
-    container.withPorts(containerPort.new('http-metrics', this._config.agent_port)) +
-    container.withArgsMixin(k.util.mapToFlags(this._config.agent_args)) +
-    // `HOSTNAME` is required for promtail (logs) otherwise it will silently do nothing
-    container.withEnvMixin([
-      envVar.fromFieldPath('HOSTNAME', 'spec.nodeName'),
-    ]),
-}
diff --git a/production/tanka/grafana-agent/v2/internal/controllers/daemonset.libsonnet b/production/tanka/grafana-agent/v2/internal/controllers/daemonset.libsonnet
deleted file mode 100644
index 5e5f8880a2a4..000000000000
--- a/production/tanka/grafana-agent/v2/internal/controllers/daemonset.libsonnet
+++ /dev/null
@@ -1,22 +0,0 @@
-function() {
-  local this = self,
-  local _config = this._config,
-  local name = _config.name,
-  local namespace = _config.namespace,
-
-  local k = (import 'ksonnet-util/kausal.libsonnet') { _config+:: this._config },
-  local daemonSet = k.apps.v1.daemonSet,
-
-  controller:
-    daemonSet.new(name, [this.container]) +
-    daemonSet.mixin.metadata.withNamespace(namespace) +
-    daemonSet.mixin.spec.template.spec.withServiceAccountName(name) +
-    (
-      if _config.config_hash
-      then daemonSet.mixin.spec.template.metadata.withAnnotationsMixin({
-        config_hash: std.md5(std.toString(_config.agent_config)),
-      })
-      else {}
-    ) +
-    k.util.configVolumeMount(name, '/etc/agent'),
-}
diff --git a/production/tanka/grafana-agent/v2/internal/controllers/deployment.libsonnet b/production/tanka/grafana-agent/v2/internal/controllers/deployment.libsonnet
deleted file mode 100644
index 5afbe9923118..000000000000
--- a/production/tanka/grafana-agent/v2/internal/controllers/deployment.libsonnet
+++ /dev/null
@@ -1,22 +0,0 @@
-function(replicas=1) {
-  local this = self,
-  local _config = this._config,
-  local name = _config.name,
-  local namespace = _config.namespace,
-
-  local k = (import 'ksonnet-util/kausal.libsonnet') { _config+:: this._config },
-  local deployment = k.apps.v1.deployment,
-
-  controller:
-    deployment.new(name, replicas, [this.container]) +
-    deployment.mixin.metadata.withNamespace(namespace) +
-    deployment.mixin.spec.template.spec.withServiceAccountName(name) +
-    (
-      if _config.config_hash
-      then deployment.mixin.spec.template.metadata.withAnnotationsMixin({
-        config_hash: std.md5(std.toString(_config.agent_config)),
-      })
-      else {}
-    ) +
-    k.util.configVolumeMount(name, '/etc/agent'),
-}
diff --git a/production/tanka/grafana-agent/v2/internal/controllers/statefulset.libsonnet b/production/tanka/grafana-agent/v2/internal/controllers/statefulset.libsonnet
deleted file mode 100644
index d80cab383bc5..000000000000
--- a/production/tanka/grafana-agent/v2/internal/controllers/statefulset.libsonnet
+++ /dev/null
@@ -1,23 +0,0 @@
-function(replicas=1, volumeClaims=[]) {
-  local this = self,
-  local _config = this._config,
-  local name = _config.name,
-  local namespace = _config.namespace,
-
-  local k = (import 'ksonnet-util/kausal.libsonnet') { _config+:: this._config },
-  local statefulSet = k.apps.v1.statefulSet,
-
-  controller:
-    statefulSet.new(name, replicas, [this.container], volumeClaims) +
-    statefulSet.mixin.metadata.withNamespace(namespace) +
-    statefulSet.mixin.spec.withServiceName(name) +
-    statefulSet.mixin.spec.template.spec.withServiceAccountName(name) +
-    (
-      if _config.config_hash
-      then statefulSet.mixin.spec.template.metadata.withAnnotationsMixin({
-        config_hash: std.md5(std.toString(_config.agent_config)),
-      })
-      else {}
-    ) +
-    k.util.configVolumeMount(name, '/etc/agent'),
-}
diff --git a/production/tanka/grafana-agent/v2/internal/helpers/k8s.libsonnet b/production/tanka/grafana-agent/v2/internal/helpers/k8s.libsonnet
deleted file mode 100644
index 5ae43c901a6c..000000000000
--- a/production/tanka/grafana-agent/v2/internal/helpers/k8s.libsonnet
+++ /dev/null
@@ -1,523 +0,0 @@
-local k8s_tls_config(config) = {
-  tls_config: {
-    ca_file: '/var/run/secrets/kubernetes.io/serviceaccount/ca.crt',
-    insecure_skip_verify: config.insecure_skip_verify,
-  },
-  bearer_token_file: '/var/run/secrets/kubernetes.io/serviceaccount/token',
-};
-
-local gen_scrape_config(job_name, pod_uid) = {
-  job_name: job_name,
-  pipeline_stages: [{
-    docker: {},
-  }],
-  kubernetes_sd_configs: [{
-    role: 'pod',
-  }],
-
-  relabel_configs: self.prelabel_config + [
-    // Only scrape local pods; Promtail will drop targets with a __host__ label
-    // that does not match the current host name.
-    {
-      source_labels: ['__meta_kubernetes_pod_node_name'],
-      target_label: '__host__',
-    },
-
-    // Drop pods without a __service__ label.
-    {
-      source_labels: ['__service__'],
-      action: 'drop',
-      regex: '',
-    },
-
-    // Include all the other labels on the pod.
-    // Perform this mapping before applying additional label replacement rules
-    // to prevent a supplied label from overwriting any of the following labels.
-    {
-      action: 'labelmap',
-      regex: '__meta_kubernetes_pod_label_(.+)',
-    },
-
-    // Rename jobs to be <namespace>/<service>.
-    {
-      source_labels: ['__meta_kubernetes_namespace', '__service__'],
-      action: 'replace',
-      separator: '/',
-      target_label: 'job',
-      replacement: '$1',
-    },
-
-    // But also include the namespace, pod, container as separate
-    // labels. They uniquely identify a container. They are also
-    // identical to the target labels configured in Prometheus
-    // (but note that Loki does not use an instance label).
-    {
-      source_labels: ['__meta_kubernetes_namespace'],
-      action: 'replace',
-      target_label: 'namespace',
-    },
-    {
-      source_labels: ['__meta_kubernetes_pod_name'],
-      action: 'replace',
-      target_label: 'pod',  // Not 'pod_name', which disappeared in K8s 1.16.
-    },
-    {
-      source_labels: ['__meta_kubernetes_pod_container_name'],
-      action: 'replace',
-      target_label: 'container',  // Not 'container_name', which disappeared in K8s 1.16.
-    },
-
-    // Kubernetes puts logs under subdirectories keyed pod UID and container_name.
-    {
-      source_labels: [pod_uid, '__meta_kubernetes_pod_container_name'],
-      target_label: '__path__',
-      separator: '/',
-      replacement: '/var/log/pods/*$1/*.log',
-    },
-  ],
-};
-
-{
-  metrics(config)::
-    local _config = {
-      scrape_api_server_endpoints: false,
-      insecure_skip_verify: false,
-
-      cluster_dns_tld: 'local',
-      cluster_dns_suffix: 'cluster.' + self.cluster_dns_tld,
-      kubernetes_api_server_address: 'kubernetes.default.svc.%(cluster_dns_suffix)s:443' % self,
-
-      ksm_namespace: 'kube-system',
-      node_exporter_namespace: 'kube-system',
-    } + config;
-
-    [
-      k8s_tls_config(_config) {
-        job_name: 'default/kubernetes',
-        kubernetes_sd_configs: [{
-          role: if _config.scrape_api_server_endpoints then 'endpoints' else 'service',
-        }],
-        scheme: 'https',
-        tls_config+: {
-          server_name: 'kubernetes',
-        },
-
-        relabel_configs: [{
-          source_labels: ['__meta_kubernetes_service_label_component'],
-          regex: 'apiserver',
-          action: 'keep',
-        }],
-
-        // Keep limited set of metrics to reduce default usage, drop all others
-        metric_relabel_configs: [
-          {
-            source_labels: ['__name__'],
-            regex: 'workqueue_queue_duration_seconds_bucket|process_cpu_seconds_total|process_resident_memory_bytes|workqueue_depth|rest_client_request_duration_seconds_bucket|workqueue_adds_total|up|rest_client_requests_total|apiserver_request_total|go_goroutines',
-            action: 'keep',
-          },
-        ],
-      },
-
-      {
-        job_name: 'kubernetes-pods',
-        kubernetes_sd_configs: [{
-          role: 'pod',
-        }],
-
-        // You can specify the following annotations (on pods):
-        //   prometheus.io/scrape: false - don't scrape this pod
-        //   prometheus.io/scheme: https - use https for scraping
-        //   prometheus.io/port - scrape this port
-        //   prometheus.io/path - scrape this path
-        //   prometheus.io/param-<parameter> - send ?parameter=value with the scrape
-        relabel_configs: [
-          // Drop anything annotated with prometheus.io/scrape=false
-          {
-            source_labels: ['__meta_kubernetes_pod_annotation_prometheus_io_scrape'],
-            action: 'drop',
-            regex: 'false',
-          },
-
-          // Drop any endpoint whose pod port name does not end with metrics
-          {
-            source_labels: ['__meta_kubernetes_pod_container_port_name'],
-            action: 'keep',
-            regex: '.*-metrics',
-          },
-
-          // Allow pods to override the scrape scheme with prometheus.io/scheme=https
-          {
-            source_labels: ['__meta_kubernetes_pod_annotation_prometheus_io_scheme'],
-            action: 'replace',
-            target_label: '__scheme__',
-            regex: '(https?)',
-            replacement: '$1',
-          },
-
-          // Allow service to override the scrape path with prometheus.io/path=/other_metrics_path
-          {
-            source_labels: ['__meta_kubernetes_pod_annotation_prometheus_io_path'],
-            action: 'replace',
-            target_label: '__metrics_path__',
-            regex: '(.+)',
-            replacement: '$1',
-          },
-
-          // Allow services to override the scrape port with prometheus.io/port=1234
-          {
-            source_labels: ['__address__', '__meta_kubernetes_pod_annotation_prometheus_io_port'],
-            action: 'replace',
-            target_label: '__address__',
-            regex: '(.+?)(\\:\\d+)?;(\\d+)',
-            replacement: '$1:$3',
-          },
-
-          // Drop pods without a name label
-          {
-            source_labels: ['__meta_kubernetes_pod_label_name'],
-            action: 'drop',
-            regex: '',
-          },
-
-          // Rename jobs to be <namespace>/<name, from pod name label>
-          {
-            source_labels: ['__meta_kubernetes_namespace', '__meta_kubernetes_pod_label_name'],
-            action: 'replace',
-            separator: '/',
-            target_label: 'job',
-            replacement: '$1',
-          },
-
-          // But also include the namespace as a separate label for routing alerts
-          {
-            source_labels: ['__meta_kubernetes_namespace'],
-            action: 'replace',
-            target_label: 'namespace',
-          },
-          {
-            source_labels: ['__meta_kubernetes_pod_name'],
-            action: 'replace',
-            target_label: 'pod',  // Not 'pod_name', which disappeared in K8s 1.16.
-          },
-          {
-            source_labels: ['__meta_kubernetes_pod_container_name'],
-            action: 'replace',
-            target_label: 'container',  // Not 'container_name', which disappeared in K8s 1.16.
-          },
-
-          // Rename instances to the concatenation of pod:container:port.
-          // All three components are needed to guarantee a unique instance label.
-          {
-            source_labels: [
-              '__meta_kubernetes_pod_name',
-              '__meta_kubernetes_pod_container_name',
-              '__meta_kubernetes_pod_container_port_name',
-            ],
-            action: 'replace',
-            separator: ':',
-            target_label: 'instance',
-          },
-
-          // Map prometheus.io/param-<name>=value fields to __param_<name>=value
-          {
-            regex: '__meta_kubernetes_pod_annotation_prometheus_io_param_(.+)',
-            action: 'labelmap',
-            replacement: '__param_$1',
-          },
-
-          // Drop pods with phase Succeeded or Failed
-          {
-            source_labels: ['__meta_kubernetes_pod_phase'],
-            action: 'drop',
-            regex: 'Succeeded|Failed',
-          },
-        ],
-      },
-
-      // A separate scrape config for kube-state-metrics which doesn't add a
-      // namespace label and instead takes the namespace label from the exported
-      // timeseries. This prevents the exported namespace label from being
-      // renamed to exported_namesapce and allows us to route alerts based on
-      // namespace.
-      {
-        job_name: '%s/kube-state-metrics' % _config.ksm_namespace,
-        kubernetes_sd_configs: [{
-          role: 'pod',
-          namespaces: {
-            names: [_config.ksm_namespace],
-          },
-        }],
-
-        relabel_configs: [
-          // Drop anything whose service is not kube-state-metrics
-          {
-            source_labels: ['__meta_kubernetes_pod_label_name'],
-            regex: 'kube-state-metrics',
-            action: 'keep',
-          },
-
-          // Rename instances to the concatenation of pod:container:port.
-          // In the specific case of KSM, we could leave out the container
-          // name and still have a unique instance label, but we leave it
-          // in here for consistency with the normal pod scraping.
-          {
-            source_labels: [
-              '__meta_kubernetes_pod_name',
-              '__meta_kubernetes_pod_container_name',
-              '__meta_kubernetes_pod_container_port_name',
-            ],
-            action: 'replace',
-            separator: ':',
-            target_label: 'instance',
-          },
-        ],
-      },
-
-      // A separate scrape config for node-exporter which maps the node name
-      // onto the instance label.
-      {
-        job_name: '%s/node-exporter' % _config.node_exporter_namespace,
-        kubernetes_sd_configs: [{
-          role: 'pod',
-          namespaces: {
-            names: [_config.node_exporter_namespace],
-          },
-        }],
-
-        relabel_configs: [
-          // Drop anything whose name is not node-exporter.
-          {
-            source_labels: ['__meta_kubernetes_pod_label_name'],
-            regex: 'node-exporter',
-            action: 'keep',
-          },
-
-          // Rename instances to be the node name.
-          {
-            source_labels: ['__meta_kubernetes_pod_node_name'],
-            action: 'replace',
-            target_label: 'instance',
-          },
-
-          // But also include the namespace as a separate label, for
-          // routing alerts.
-          {
-            source_labels: ['__meta_kubernetes_namespace'],
-            action: 'replace',
-            target_label: 'namespace',
-          },
-        ],
-      },
-
-      // This scrape config gathers all kubelet metrics.
-      k8s_tls_config(_config) {
-        job_name: 'kube-system/kubelet',
-        kubernetes_sd_configs: [{ role: 'node' }],
-
-        relabel_configs: [
-          {
-            target_label: '__address__',
-            replacement: _config.kubernetes_api_server_address,
-          },
-          {
-            target_label: '__scheme__',
-            replacement: 'https',
-          },
-          {
-            source_labels: ['__meta_kubernetes_node_name'],
-            regex: '(.+)',
-            target_label: '__metrics_path__',
-            replacement: '/api/v1/nodes/$1/proxy/metrics',
-          },
-        ],
-      },
-
-      // As of k8s 1.7.3, cAdvisor metrics are available via kubelet using the
-      // /metrics/cadvisor path.
-      k8s_tls_config(_config) {
-        job_name: 'kube-system/cadvisor',
-        kubernetes_sd_configs: [{
-          role: 'node',
-        }],
-        scheme: 'https',
-
-        relabel_configs: [
-          {
-            target_label: '__address__',
-            replacement: _config.kubernetes_api_server_address,
-          },
-          {
-            source_labels: ['__meta_kubernetes_node_name'],
-            regex: '(.+)',
-            target_label: '__metrics_path__',
-            replacement: '/api/v1/nodes/$1/proxy/metrics/cadvisor',
-          },
-        ],
-
-        metric_relabel_configs: [
-          // Let system processes like kubelet survive the next rule by giving them a fake image.
-          {
-            source_labels: ['__name__', 'id'],
-            regex: 'container_([a-z_]+);/system.slice/(.+)',
-            target_label: 'image',
-            replacement: '$2',
-          },
-
-          // Drop container_* metrics with no image.
-          {
-            source_labels: ['__name__', 'image'],
-            regex: 'container_([a-z_]+);',
-            action: 'drop',
-          },
-
-          // Drop a bunch of metrics which are disabled but still sent,
-          // see https://github.com/google/cadvisor/issues/1925.
-          {
-            source_labels: ['__name__'],
-            regex: 'container_(network_tcp_usage_total|network_udp_usage_total|tasks_state|cpu_load_average_10s)',
-            action: 'drop',
-          },
-        ],
-      },
-    ],
-
-  logs(config={}):: [
-    // Scrape config to scrape any pods with a 'name' label.
-    gen_scrape_config('kubernetes-pods-name', '__meta_kubernetes_pod_uid') {
-      prelabel_config:: [
-        // Use name label as __service__.
-        {
-          source_labels: ['__meta_kubernetes_pod_label_name'],
-          target_label: '__service__',
-        },
-      ],
-    },
-
-    // Scrape config to scrape any pods with an 'app' label.
-    gen_scrape_config('kubernetes-pods-app', '__meta_kubernetes_pod_uid') {
-      prelabel_config:: [
-        // Drop pods with a 'name' label.  They will have already been added by
-        // the scrape_config that matches on the 'name' label
-        {
-          source_labels: ['__meta_kubernetes_pod_label_name'],
-          action: 'drop',
-          regex: '.+',
-        },
-
-        // Use app label as the __service__.
-        {
-          source_labels: ['__meta_kubernetes_pod_label_app'],
-          target_label: '__service__',
-        },
-      ],
-    },
-
-    // Scrape config to scrape any pods with a direct controller (eg
-    // StatefulSets).
-    gen_scrape_config('kubernetes-pods-direct-controllers', '__meta_kubernetes_pod_uid') {
-      prelabel_config:: [
-        // Drop pods with a 'name' or 'app' label.  They will have already been added by
-        // the scrape_config that matches above.
-        {
-          source_labels: ['__meta_kubernetes_pod_label_name', '__meta_kubernetes_pod_label_app'],
-          separator: '',
-          action: 'drop',
-          regex: '.+',
-        },
-
-        // Drop pods with an indirect controller. eg Deployments create replicaSets
-        // which then create pods.
-        {
-          source_labels: ['__meta_kubernetes_pod_controller_name'],
-          action: 'drop',
-          regex: '[0-9a-z-.]+-[0-9a-f]{8,10}',
-        },
-
-        // Use controller name as __service__.
-        {
-          source_labels: ['__meta_kubernetes_pod_controller_name'],
-          target_label: '__service__',
-        },
-      ],
-    },
-
-    // Scrape config to scrape any pods with an indirect controller (eg
-    // Deployments).
-    gen_scrape_config('kubernetes-pods-indirect-controller', '__meta_kubernetes_pod_uid') {
-      prelabel_config:: [
-        // Drop pods with a 'name' or 'app' label.  They will have already been added by
-        // the scrape_config that matches above.
-        {
-          source_labels: ['__meta_kubernetes_pod_label_name', '__meta_kubernetes_pod_label_app'],
-          separator: '',
-          action: 'drop',
-          regex: '.+',
-        },
-
-        // Drop pods not from an indirect controller. eg StatefulSets, DaemonSets
-        {
-          source_labels: ['__meta_kubernetes_pod_controller_name'],
-          regex: '[0-9a-z-.]+-[0-9a-f]{8,10}',
-          action: 'keep',
-        },
-
-        // Put the indirect controller name into a temp label.
-        {
-          source_labels: ['__meta_kubernetes_pod_controller_name'],
-          action: 'replace',
-          regex: '([0-9a-z-.]+)-[0-9a-f]{8,10}',
-          target_label: '__service__',
-        },
-      ],
-    },
-
-    // Scrape config to scrape any control plane static pods (e.g. kube-apiserver
-    // etcd, kube-controller-manager & kube-scheduler)
-    gen_scrape_config('kubernetes-pods-static', '__meta_kubernetes_pod_annotation_kubernetes_io_config_mirror') {
-      prelabel_config:: [
-        // Ignore pods that aren't mirror pods
-        {
-          action: 'drop',
-          source_labels: ['__meta_kubernetes_pod_annotation_kubernetes_io_config_mirror'],
-          regex: '',
-        },
-
-        // Static control plane pods usually have a component label that identifies them
-        {
-          action: 'replace',
-          source_labels: ['__meta_kubernetes_pod_label_component'],
-          target_label: '__service__',
-        },
-      ],
-    },
-  ],
-
-  traces(config={}):: [
-    {
-      bearer_token_file: '/var/run/secrets/kubernetes.io/serviceaccount/token',
-      job_name: 'kubernetes-pods',
-      kubernetes_sd_configs: [{ role: 'pod' }],
-      relabel_configs: [
-        {
-          action: 'replace',
-          source_labels: ['__meta_kubernetes_namespace'],
-          target_label: 'namespace',
-        },
-        {
-          action: 'replace',
-          source_labels: ['__meta_kubernetes_pod_name'],
-          target_label: 'pod',
-        },
-        {
-          action: 'replace',
-          source_labels: ['__meta_kubernetes_pod_container_name'],
-          target_label: 'container',
-        },
-      ],
-      tls_config: {
-        ca_file: '/var/run/secrets/kubernetes.io/serviceaccount/ca.crt',
-        insecure_skip_verify: false,
-      },
-    },
-  ],
-}
diff --git a/production/tanka/grafana-agent/v2/internal/helpers/logs.libsonnet b/production/tanka/grafana-agent/v2/internal/helpers/logs.libsonnet
deleted file mode 100644
index 30a88b899d5a..000000000000
--- a/production/tanka/grafana-agent/v2/internal/helpers/logs.libsonnet
+++ /dev/null
@@ -1,27 +0,0 @@
-local k = import 'ksonnet-util/kausal.libsonnet';
-local container = k.core.v1.container;
-
-{
-  volumeMounts(config={}):: {
-    // Disable journald mount by default
-    local _config = {
-      journald: false,
-    } + config,
-
-    controller+:
-      // For reading docker containers. /var/log is used for the positions file
-      // and shouldn't be set to readonly.
-      k.util.hostVolumeMount('varlog', '/var/log', '/var/log') +
-      k.util.hostVolumeMount('varlibdockercontainers', '/var/lib/docker/containers', '/var/lib/docker/containers', readOnly=true) +
-
-      // For reading journald
-      if _config.journald == false then {}
-      else k.util.hostVolumeMount('etcmachineid', '/etc/machine-id', '/etc/machine-id', readOnly=true),
-  },
-
-  permissions(config={}):: {
-    container+::
-      container.mixin.securityContext.withPrivileged(true) +
-      container.mixin.securityContext.withRunAsUser(0),
-  },
-}
diff --git a/production/tanka/grafana-agent/v2/internal/helpers/service.libsonnet b/production/tanka/grafana-agent/v2/internal/helpers/service.libsonnet
deleted file mode 100644
index 08f6502fa8ef..000000000000
--- a/production/tanka/grafana-agent/v2/internal/helpers/service.libsonnet
+++ /dev/null
@@ -1,13 +0,0 @@
-local k = import 'ksonnet-util/kausal.libsonnet';
-local svc = k.core.v1.service;
-
-{
-  service(config={}):: {
-    local this = self,
-    local _config = this._config,
-
-    controller_service:
-      k.util.serviceFor(this.controller) +
-      svc.mixin.metadata.withNamespace(_config.namespace),
-  },
-}
diff --git a/production/tanka/grafana-agent/v2/internal/syncer.libsonnet b/production/tanka/grafana-agent/v2/internal/syncer.libsonnet
deleted file mode 100644
index 79409f65f310..000000000000
--- a/production/tanka/grafana-agent/v2/internal/syncer.libsonnet
+++ /dev/null
@@ -1,62 +0,0 @@
-local k = import 'ksonnet-util/kausal.libsonnet';
-
-local cronJob = k.batch.v1.cronJob;
-local configMap = k.core.v1.configMap;
-local container = k.core.v1.container;
-local deployment = k.apps.v1.deployment;
-local volumeMount = k.core.v1.volumeMount;
-local volume = k.core.v1.volume;
-
-function(
-  name='grafana-agent-syncer',
-  namespace='',
-  config={},
-) {
-  local _config = {
-    api: error 'api must be set',
-    image: 'grafana/agentctl:v0.39.0',
-    schedule: '*/5 * * * *',
-    configs: [],
-  } + config,
-
-  local this = self,
-  local _configs = std.foldl(
-    function(agg, cfg)
-      // Sanitize the name and remove / so every file goes into the same
-      // folder.
-      local name = std.strReplace(cfg.name, '/', '_');
-
-      agg { ['%s.yml' % name]: k.util.manifestYaml(cfg) },
-    _config.configs,
-    {},
-  ),
-
-  configMap:
-    configMap.new(name) +
-    configMap.mixin.metadata.withNamespace(namespace) +
-    configMap.withData(_configs),
-
-  container::
-    container.new(name, _config.image) +
-    container.withArgsMixin([
-      'config-sync',
-      '--addr=%s' % _config.api,
-      '/etc/configs',
-    ]) +
-    container.withVolumeMounts(volumeMount.new(name, '/etc/configs')),
-
-  job:
-    cronJob.new(name, _config.schedule, this.container) +
-    cronJob.mixin.metadata.withNamespace(namespace) +
-    cronJob.mixin.spec.withSuccessfulJobsHistoryLimit(1) +
-    cronJob.mixin.spec.withFailedJobsHistoryLimit(3) +
-    cronJob.mixin.spec.jobTemplate.spec.template.spec.withRestartPolicy('OnFailure') +
-    cronJob.mixin.spec.jobTemplate.spec.template.spec.withActiveDeadlineSeconds(600) +
-    cronJob.mixin.spec.jobTemplate.spec.withTtlSecondsAfterFinished(120) +
-    cronJob.mixin.spec.jobTemplate.spec.template.spec.withVolumes([
-      volume.fromConfigMap(
-        name=name,
-        configMapName=this.configMap.metadata.name,
-      ),
-    ]),
-}
diff --git a/production/tanka/grafana-agent/v2/main.libsonnet b/production/tanka/grafana-agent/v2/main.libsonnet
deleted file mode 100644
index 71a8e4b69f6d..000000000000
--- a/production/tanka/grafana-agent/v2/main.libsonnet
+++ /dev/null
@@ -1,50 +0,0 @@
-local k = import 'ksonnet-util/kausal.libsonnet';
-local container = k.core.v1.container;
-local podTemplateSpec = k.core.v1.podTemplateSpec.spec;
-
-{
-  new(name='grafana-agent', namespace='')::
-    (import './internal/base.libsonnet')(name, namespace),
-
-  // Controllers
-  withDeploymentController(replicas=1)::
-    (import './internal/controllers/deployment.libsonnet')(replicas),
-  withDaemonSetController()::
-    (import './internal/controllers/daemonset.libsonnet')(),
-  withStatefulSetController(replicas=1, volumeClaims=[])::
-    (import './internal/controllers/statefulset.libsonnet')(replicas, volumeClaims),
-
-  // Syncer
-  newSyncer(name='grafana-agent-syncer', namespace='', config={})::
-    (import './internal/syncer.libsonnet')(name, namespace, config),
-
-  // General
-  withAgentConfig(config):: { _config+: { agent_config: config } },
-  withMetricsPort(port):: { _config+: { agent_port: port } },
-  withArgsMixin(args):: { _config+: { agent_args+: args } },
-  withImagesMixin(images):: { _images+: images },
-  withConfigHash(include=true):: { _config+: { config_hash: include } },
-  withPortsMixin(ports=[]):: { container+:: container.withPortsMixin(ports) },
-  withVolumeMountsMixin(mounts=[]):: { container+:: container.withVolumeMountsMixin(mounts) },
-  withVolumesMixin(volumes=[]):: {
-    controller+: {
-      spec+: {
-        template+: podTemplateSpec.withVolumesMixin(volumes),
-      },
-    },
-  },
-
-  // Helpers
-  newKubernetesMetrics(config={})::
-    (import './internal/helpers/k8s.libsonnet').metrics(config),
-  newKubernetesLogs(config={})::
-    (import './internal/helpers/k8s.libsonnet').logs(config),
-  newKubernetesTraces(config={})::
-    (import './internal/helpers/k8s.libsonnet').traces(config),
-  withLogVolumeMounts(config={})::
-    (import './internal/helpers/logs.libsonnet').volumeMounts(config),
-  withLogPermissions(config={})::
-    (import './internal/helpers/logs.libsonnet').permissions(config),
-  withService(config={})::
-    (import './internal/helpers/service.libsonnet').service(config),
-}
diff --git a/tools/generate-crds.bash b/tools/generate-crds.bash
index f4280c05a638..4a46f884c657 100755
--- a/tools/generate-crds.bash
+++ b/tools/generate-crds.bash
@@ -6,18 +6,18 @@ ROOT=$(git rev-parse --show-toplevel)
 # Generate objects and controllers for our CRDs
 cd $ROOT/pkg/operator/apis/monitoring/v1alpha1
 controller-gen object paths=.
-controller-gen crd:crdVersions=v1 paths=. output:crd:dir=$ROOT/production/operator/crds
+controller-gen crd:crdVersions=v1 paths=. output:crd:dir=$ROOT/operations/agent-static-operator/crds
 
 # Generate CRDs for prometheus-operator.
 PROM_OP_DEP_NAME="github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring/v1"
 PROM_OP_DIR=$(go list -f '{{.Dir}}' $PROM_OP_DEP_NAME)
 
 cd $PROM_OP_DIR
-controller-gen crd:crdVersions=v1 paths=.  output:crd:dir=$ROOT/production/operator/crds
+controller-gen crd:crdVersions=v1 paths=.  output:crd:dir=$ROOT/operations/agent-static-operator/crds
 
 # Remove known Prometheus-Operator CRDS we don't generate. (An allowlist would
 # be better here, but rfratto's bash skills are bad.)
-rm -f $ROOT/production/operator/crds/monitoring.coreos.com_alertmanagers.yaml
-rm -f $ROOT/production/operator/crds/monitoring.coreos.com_prometheuses.yaml
-rm -f $ROOT/production/operator/crds/monitoring.coreos.com_prometheusrules.yaml
-rm -f $ROOT/production/operator/crds/monitoring.coreos.com_thanosrulers.yaml
+rm -f $ROOT/operations/agent-static-operator/crds/monitoring.coreos.com_alertmanagers.yaml
+rm -f $ROOT/operations/agent-static-operator/crds/monitoring.coreos.com_prometheuses.yaml
+rm -f $ROOT/operations/agent-static-operator/crds/monitoring.coreos.com_prometheusrules.yaml
+rm -f $ROOT/operations/agent-static-operator/crds/monitoring.coreos.com_thanosrulers.yaml

From 28a8f20c22dd115a91addef4f5cace159212439a Mon Sep 17 00:00:00 2001
From: Piotr <17101802+thampiotr@users.noreply.github.com>
Date: Thu, 11 Jan 2024 14:28:35 +0000
Subject: [PATCH 52/68] Add a link between docs guidelines (#6111)

* Update writing-docs.md

Add a link to reference docs guide.

* Update writing-docs.md
---
 docs/developer/writing-docs.md | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/docs/developer/writing-docs.md b/docs/developer/writing-docs.md
index 7cd9be07eed3..b4c5be583024 100644
--- a/docs/developer/writing-docs.md
+++ b/docs/developer/writing-docs.md
@@ -66,6 +66,9 @@ The Reference section is a collection of pages that describe the Agent
 components and their configuration options exhaustively. This is a more narrow
 definition than the one found in the [writer's toolkit][].
 
+We have a dedicated page with the best practices for writing Reference
+docs: [writing flow components documentation][writing-flow-docs].
+
 This is our most detailed documentation, and it should be used as a source of
 truth. The contents of the Reference pages should not be repeated in other parts
 of the documentation.
@@ -76,3 +79,4 @@ Release notes contain all the notable changes in the Agent. They are updated as
 part of the release process.
 
 [writer's toolkit]: https://grafana.com/docs/writers-toolkit/structure/topic-types/
+[writing-flow-docs]: writing-flow-component-documentation.md

From 2ba44881acb1f59f8467172f7ecb24bd7c3c5c76 Mon Sep 17 00:00:00 2001
From: Piotr <17101802+thampiotr@users.noreply.github.com>
Date: Thu, 11 Jan 2024 14:50:17 +0000
Subject: [PATCH 53/68] Docs: Rename 'Setup' to 'Get started' and 'Start' to
 'Run' (#6112)

* Rename 'Setup' to 'Get started' and fix links

* Fix links

* fix links

* Rename 'start' folder to 'run'
---
 docs/sources/flow/_index.md                   |  2 +-
 docs/sources/flow/get-started/_index.md       | 25 ++++++++++++++++++
 .../{setup => get-started}/deploy-agent.md    | 10 +++++--
 .../{setup => get-started}/install/_index.md  |  8 +++++-
 .../{setup => get-started}/install/binary.md  | 16 ++++++++----
 .../{setup => get-started}/install/docker.md  | 10 +++++--
 .../install/kubernetes.md                     | 10 +++++--
 .../{setup => get-started}/install/linux.md   | 16 ++++++++----
 .../{setup => get-started}/install/macos.md   | 16 ++++++++----
 .../{setup => get-started}/install/windows.md | 16 ++++++++----
 .../start => get-started/run}/_index.md       | 26 +++++++++----------
 .../start => get-started/run}/binary.md       | 24 ++++++++---------
 .../{setup/start => get-started/run}/linux.md | 20 +++++++-------
 .../{setup/start => get-started/run}/macos.md | 20 +++++++-------
 .../start => get-started/run}/windows.md      | 20 +++++++-------
 .../otelcol.exporter.loadbalancing.md         |  2 +-
 docs/sources/flow/setup/_index.md             | 18 -------------
 .../flow/tasks/configure-agent-clustering.md  |  4 +--
 docs/sources/flow/tasks/configure/_index.md   |  4 +--
 docs/sources/flow/tasks/debug.md              |  4 +--
 .../flow/tasks/estimate-resource-usage.md     |  2 +-
 .../flow/tasks/migrate/from-operator.md       |  8 +++---
 .../flow/tasks/migrate/from-prometheus.md     |  8 +++---
 .../flow/tasks/migrate/from-promtail.md       |  8 +++---
 .../sources/flow/tasks/migrate/from-static.md |  8 +++---
 docs/sources/shared/wal-data-retention.md     |  2 +-
 26 files changed, 181 insertions(+), 126 deletions(-)
 create mode 100644 docs/sources/flow/get-started/_index.md
 rename docs/sources/flow/{setup => get-started}/deploy-agent.md (87%)
 rename docs/sources/flow/{setup => get-started}/install/_index.md (73%)
 rename docs/sources/flow/{setup => get-started}/install/binary.md (65%)
 rename docs/sources/flow/{setup => get-started}/install/docker.md (85%)
 rename docs/sources/flow/{setup => get-started}/install/kubernetes.md (79%)
 rename docs/sources/flow/{setup => get-started}/install/linux.md (80%)
 rename docs/sources/flow/{setup => get-started}/install/macos.md (71%)
 rename docs/sources/flow/{setup => get-started}/install/windows.md (80%)
 rename docs/sources/flow/{setup/start => get-started/run}/_index.md (55%)
 rename docs/sources/flow/{setup/start => get-started/run}/binary.md (83%)
 rename docs/sources/flow/{setup/start => get-started/run}/linux.md (77%)
 rename docs/sources/flow/{setup/start => get-started/run}/macos.md (80%)
 rename docs/sources/flow/{setup/start => get-started/run}/windows.md (73%)
 delete mode 100644 docs/sources/flow/setup/_index.md

diff --git a/docs/sources/flow/_index.md b/docs/sources/flow/_index.md
index 4262238f9020..1b95fbe29ae8 100644
--- a/docs/sources/flow/_index.md
+++ b/docs/sources/flow/_index.md
@@ -85,7 +85,7 @@ This feature is experimental, and it doesn't support all River components.
 * Check out our [Reference][] documentation to find specific information you
   might be looking for.
 
-[Install]: {{< relref "./setup/install/" >}}
+[Install]: {{< relref "./get-started/install/" >}}
 [Concepts]: {{< relref "./concepts/" >}}
 [Tasks]: {{< relref "./tasks/" >}}
 [Tutorials]: {{< relref "./tutorials/ ">}}
diff --git a/docs/sources/flow/get-started/_index.md b/docs/sources/flow/get-started/_index.md
new file mode 100644
index 000000000000..80b48bfdaece
--- /dev/null
+++ b/docs/sources/flow/get-started/_index.md
@@ -0,0 +1,25 @@
+---
+aliases:
+- /docs/grafana-cloud/agent/flow/get-started/
+- /docs/grafana-cloud/monitor-infrastructure/agent/flow/get-started/
+- /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/get-started/
+- /docs/grafana-cloud/send-data/agent/flow/get-started/
+# Previous docs aliases for backwards compatibility:
+- /docs/grafana-cloud/agent/flow/setup/
+- /docs/grafana-cloud/monitor-infrastructure/agent/flow/setup/
+- /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/setup/
+- /docs/grafana-cloud/send-data/agent/flow/setup/
+- ./setup/ # /docs/agent/latest/flow/setup/
+canonical: https://grafana.com/docs/agent/latest/flow/get-started/
+description: Learn how to install and use Grafana Agent Flow
+menuTitle: Get started
+title: Get started with Grafana Agent Flow
+weight: 50
+---
+
+# Get started with {{% param "PRODUCT_NAME" %}}
+
+This section covers topics that help you get started with {{< param "PRODUCT_NAME" >}},
+including installation, running the agent, overview of deployment topologies, and more.
+
+{{< section >}}
diff --git a/docs/sources/flow/setup/deploy-agent.md b/docs/sources/flow/get-started/deploy-agent.md
similarity index 87%
rename from docs/sources/flow/setup/deploy-agent.md
rename to docs/sources/flow/get-started/deploy-agent.md
index 0396b537123c..0a76e62c42df 100644
--- a/docs/sources/flow/setup/deploy-agent.md
+++ b/docs/sources/flow/get-started/deploy-agent.md
@@ -1,12 +1,18 @@
 ---
 aliases:
+- /docs/grafana-cloud/agent/flow/get-started/deploy-agent/
+- /docs/grafana-cloud/monitor-infrastructure/agent/flow/get-started/deploy-agent/
+- /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/get-started/deploy-agent/
+- /docs/grafana-cloud/send-data/agent/flow/get-started/deploy-agent/
+# Previous docs aliases for backwards compatibility:
 - /docs/grafana-cloud/agent/flow/setup/deploy-agent/
 - /docs/grafana-cloud/monitor-infrastructure/agent/flow/setup/deploy-agent/
 - /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/setup/deploy-agent/
 - /docs/grafana-cloud/send-data/agent/flow/setup/deploy-agent/
-canonical: https://grafana.com/docs/agent/latest/flow/setup/deploy-agent/
+- ../setup/deploy-agent/ # /docs/agent/latest/flow/setup/deploy-agent/
+canonical: https://grafana.com/docs/agent/latest/flow/get-started/deploy-agent/
 description: Learn about possible deployment topologies for Grafana Agent Flow
-menuTitle: Deploy Grafana Agent Flow
+menuTitle: Deploy
 title: Grafana Agent Flow deployment topologies
 weight: 900
 ---
diff --git a/docs/sources/flow/setup/install/_index.md b/docs/sources/flow/get-started/install/_index.md
similarity index 73%
rename from docs/sources/flow/setup/install/_index.md
rename to docs/sources/flow/get-started/install/_index.md
index c9bb81a239b4..dabb07857d74 100644
--- a/docs/sources/flow/setup/install/_index.md
+++ b/docs/sources/flow/get-started/install/_index.md
@@ -1,11 +1,17 @@
 ---
 aliases:
+- /docs/grafana-cloud/agent/flow/get-started/install/
+- /docs/grafana-cloud/monitor-infrastructure/agent/flow/get-started/install/
+- /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/get-started/install/
+- /docs/grafana-cloud/send-data/agent/flow/get-started/install/
+# Previous docs aliases for backwards compatibility:
 - /docs/grafana-cloud/agent/flow/setup/install/
 - /docs/grafana-cloud/monitor-infrastructure/agent/flow/setup/install/
 - /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/setup/install/
 - /docs/grafana-cloud/send-data/agent/flow/setup/install/
 - /docs/sources/flow/install/
-canonical: https://grafana.com/docs/agent/latest/flow/setup/install/
+- ../setup/install/ # /docs/agent/latest/flow/setup/install/
+canonical: https://grafana.com/docs/agent/latest/flow/get-started/install/
 description: Learn how to install Grafana Agent Flow
 menuTitle: Install
 title: Install Grafana Agent Flow
diff --git a/docs/sources/flow/setup/install/binary.md b/docs/sources/flow/get-started/install/binary.md
similarity index 65%
rename from docs/sources/flow/setup/install/binary.md
rename to docs/sources/flow/get-started/install/binary.md
index ed55b7e5e873..fa304df0acb2 100644
--- a/docs/sources/flow/setup/install/binary.md
+++ b/docs/sources/flow/get-started/install/binary.md
@@ -1,11 +1,17 @@
 ---
 aliases:
-- ../../install/binary/
+- /docs/grafana-cloud/agent/flow/get-started/install/binary/
+- /docs/grafana-cloud/monitor-infrastructure/agent/flow/get-started/install/binary/
+- /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/get-started/install/binary/
+- /docs/grafana-cloud/send-data/agent/flow/get-started/install/binary/
+# Previous docs aliases for backwards compatibility:
+- ../../install/binary/ # /docs/agent/latest/flow/install/binary/
 - /docs/grafana-cloud/agent/flow/setup/install/binary/
 - /docs/grafana-cloud/monitor-infrastructure/agent/flow/setup/install/binary/
 - /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/setup/install/binary/
 - /docs/grafana-cloud/send-data/agent/flow/setup/install/binary/
-canonical: https://grafana.com/docs/agent/latest/flow/setup/install/binary/
+- ../../setup/install/binary/ # /docs/agent/latest/flow/setup/install/binary/
+canonical: https://grafana.com/docs/agent/latest/flow/get-started/install/binary/
 description: Learn how to install Grafana Agent Flow as a standalone binary
 menuTitle: Standalone
 title: Install Grafana Agent Flow as a standalone binary
@@ -45,9 +51,9 @@ To download {{< param "PRODUCT_NAME" >}} as a standalone binary, perform the fol
 
 ## Next steps
 
-- [Start {{< param "PRODUCT_NAME" >}}][Start]
+- [Run {{< param "PRODUCT_NAME" >}}][Run]
 
 {{% docs/reference %}}
-[Start]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/setup/start/binary.md"
-[Start]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/setup/start/binary.md"
+[Run]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/get-started/run/binary.md"
+[Run]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/get-started/run/binary.md"
 {{% /docs/reference %}}
diff --git a/docs/sources/flow/setup/install/docker.md b/docs/sources/flow/get-started/install/docker.md
similarity index 85%
rename from docs/sources/flow/setup/install/docker.md
rename to docs/sources/flow/get-started/install/docker.md
index 9460ab71a8f3..c7884a6dc21b 100644
--- a/docs/sources/flow/setup/install/docker.md
+++ b/docs/sources/flow/get-started/install/docker.md
@@ -1,11 +1,17 @@
 ---
 aliases:
-- ../../install/docker/
+- /docs/grafana-cloud/agent/flow/get-started/install/docker/
+- /docs/grafana-cloud/monitor-infrastructure/agent/flow/get-started/install/docker/
+- /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/get-started/install/docker/
+- /docs/grafana-cloud/send-data/agent/flow/get-started/install/docker/
+# Previous docs aliases for backwards compatibility:
+- ../../install/docker/ # /docs/agent/latest/flow/install/docker/
 - /docs/grafana-cloud/agent/flow/setup/install/docker/
 - /docs/grafana-cloud/monitor-infrastructure/agent/flow/setup/install/docker/
 - /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/setup/install/docker/
 - /docs/grafana-cloud/send-data/agent/flow/setup/install/docker/
-canonical: https://grafana.com/docs/agent/latest/flow/setup/install/docker/
+- ../../setup/install/docker/ # /docs/agent/latest/flow/setup/install/docker/
+canonical: https://grafana.com/docs/agent/latest/flow/get-started/install/docker/
 description: Learn how to install Grafana Agent Flow on Docker
 menuTitle: Docker
 title: Run Grafana Agent Flow in a Docker container
diff --git a/docs/sources/flow/setup/install/kubernetes.md b/docs/sources/flow/get-started/install/kubernetes.md
similarity index 79%
rename from docs/sources/flow/setup/install/kubernetes.md
rename to docs/sources/flow/get-started/install/kubernetes.md
index 3bd0a3240fbc..9326fce4bf03 100644
--- a/docs/sources/flow/setup/install/kubernetes.md
+++ b/docs/sources/flow/get-started/install/kubernetes.md
@@ -1,11 +1,17 @@
 ---
 aliases:
-- ../../install/kubernetes/
+- /docs/grafana-cloud/agent/flow/get-started/install/kubernetes/
+- /docs/grafana-cloud/monitor-infrastructure/agent/flow/get-started/install/kubernetes/
+- /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/get-started/install/kubernetes/
+- /docs/grafana-cloud/send-data/agent/flow/get-started/install/kubernetes/
+# Previous docs aliases for backwards compatibility:
+- ../../install/kubernetes/ # /docs/agent/latest/flow/install/kubernetes/
 - /docs/grafana-cloud/agent/flow/setup/install/kubernetes/
 - /docs/grafana-cloud/monitor-infrastructure/agent/flow/setup/install/kubernetes/
 - /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/setup/install/kubernetes/
 - /docs/grafana-cloud/send-data/agent/flow/setup/install/kubernetes/
-canonical: https://grafana.com/docs/agent/latest/flow/setup/install/kubernetes/
+- ../../setup/install/kubernetes/ # /docs/agent/latest/flow/setup/install/kubernetes/
+canonical: https://grafana.com/docs/agent/latest/flow/get-started/install/kubernetes/
 description: Learn how to deploy Grafana Agent Flow on Kubernetes
 menuTitle: Kubernetes
 title: Deploy Grafana Agent Flow on Kubernetes
diff --git a/docs/sources/flow/setup/install/linux.md b/docs/sources/flow/get-started/install/linux.md
similarity index 80%
rename from docs/sources/flow/setup/install/linux.md
rename to docs/sources/flow/get-started/install/linux.md
index be7bd6246454..2241aeb78d0a 100644
--- a/docs/sources/flow/setup/install/linux.md
+++ b/docs/sources/flow/get-started/install/linux.md
@@ -1,11 +1,17 @@
 ---
 aliases:
-- ../../install/linux/
+- /docs/grafana-cloud/agent/flow/get-started/install/linux/
+- /docs/grafana-cloud/monitor-infrastructure/agent/flow/get-started/install/linux/
+- /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/get-started/install/linux/
+- /docs/grafana-cloud/send-data/agent/flow/get-started/install/linux/
+# Previous docs aliases for backwards compatibility:
+- ../../install/linux/ # /docs/agent/latest/flow/install/linux/
 - /docs/grafana-cloud/agent/flow/setup/install/linux/
 - /docs/grafana-cloud/monitor-infrastructure/agent/flow/setup/install/linux/
 - /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/setup/install/linux/
 - /docs/grafana-cloud/send-data/agent/flow/setup/install/linux/
-canonical: https://grafana.com/docs/agent/latest/flow/setup/install/linux/
+- ../../setup/install/linux/ # /docs/agent/latest/flow/setup/install/linux/
+canonical: https://grafana.com/docs/agent/latest/flow/get-started/install/linux/
 description: Learn how to install Grafana Agent Flow on Linux
 menuTitle: Linux
 title: Install Grafana Agent Flow on Linux
@@ -119,12 +125,12 @@ To uninstall {{< param "PRODUCT_NAME" >}} on Linux, run the following commands i
 
 ## Next steps
 
-- [Start {{< param "PRODUCT_NAME" >}}][Start]
+- [Run {{< param "PRODUCT_NAME" >}}][Run]
 - [Configure {{< param "PRODUCT_NAME" >}}][Configure]
 
 {{% docs/reference %}}
-[Start]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/setup/start/linux.md"
-[Start]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/setup/start/linux.md"
+[Run]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/get-started/run/linux.md"
+[Run]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/get-started/run/linux.md"
 [Configure]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/tasks/configure/configure-linux.md"
 [Configure]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/tasks/configure/configure-linux.md"
 {{% /docs/reference %}}
diff --git a/docs/sources/flow/setup/install/macos.md b/docs/sources/flow/get-started/install/macos.md
similarity index 71%
rename from docs/sources/flow/setup/install/macos.md
rename to docs/sources/flow/get-started/install/macos.md
index 5c61c6c82b95..9903e13ff632 100644
--- a/docs/sources/flow/setup/install/macos.md
+++ b/docs/sources/flow/get-started/install/macos.md
@@ -1,11 +1,17 @@
 ---
 aliases:
-- ../../install/macos/
+- /docs/grafana-cloud/agent/flow/get-started/install/macos/
+- /docs/grafana-cloud/monitor-infrastructure/agent/flow/get-started/install/macos/
+- /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/get-started/install/macos/
+- /docs/grafana-cloud/send-data/agent/flow/get-started/install/macos/
+# Previous docs aliases for backwards compatibility:
+- ../../install/macos/ # /docs/agent/latest/flow/install/macos/
 - /docs/grafana-cloud/agent/flow/setup/install/macos/
 - /docs/grafana-cloud/monitor-infrastructure/agent/flow/setup/install/macos/
 - /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/setup/install/macos/
 - /docs/grafana-cloud/send-data/agent/flow/setup/install/macos/
-canonical: https://grafana.com/docs/agent/latest/flow/setup/install/macos/
+- ../../setup/install/macos/ # /docs/agent/latest/flow/setup/install/macos/
+canonical: https://grafana.com/docs/agent/latest/flow/get-started/install/macos/
 description: Learn how to install Grafana AgentFlow on macOS
 menuTitle: macOS
 title: Install Grafana Agent Flow on macOS
@@ -66,14 +72,14 @@ brew uninstall grafana-agent-flow
 
 ## Next steps
 
-- [Start {{< param "PRODUCT_NAME" >}}][Start]
+- [Run {{< param "PRODUCT_NAME" >}}][Run]
 - [Configure {{< param "PRODUCT_NAME" >}}][Configure]
 
 [Homebrew]: https://brew.sh
 
 {{% docs/reference %}}
-[Start]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/setup/start/macos.md"
-[Start]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/setup/start/macos.md"
+[Run]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/get-started/run/macos.md"
+[Run]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/get-started/run/macos.md"
 [Configure]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/tasks/configure/configure-macos.md"
 [Configure]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/tasks/configure/configure-macos.md"
 {{% /docs/reference %}}
diff --git a/docs/sources/flow/setup/install/windows.md b/docs/sources/flow/get-started/install/windows.md
similarity index 80%
rename from docs/sources/flow/setup/install/windows.md
rename to docs/sources/flow/get-started/install/windows.md
index 5157967a07e4..2be2fabc6019 100644
--- a/docs/sources/flow/setup/install/windows.md
+++ b/docs/sources/flow/get-started/install/windows.md
@@ -1,11 +1,17 @@
 ---
 aliases:
-- ../../install/windows/
+- /docs/grafana-cloud/agent/flow/get-started/install/windows/
+- /docs/grafana-cloud/monitor-infrastructure/agent/flow/get-started/install/windows/
+- /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/get-started/install/windows/
+- /docs/grafana-cloud/send-data/agent/flow/get-started/install/windows/
+# Previous docs aliases for backwards compatibility:
+- ../../install/windows/ # /docs/agent/latest/flow/install/windows/
 - /docs/grafana-cloud/agent/flow/setup/install/windows/
 - /docs/grafana-cloud/monitor-infrastructure/agent/flow/setup/install/windows/
 - /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/setup/install/windows/
 - /docs/grafana-cloud/send-data/agent/flow/setup/install/windows/
-canonical: https://grafana.com/docs/agent/latest/flow/setup/install/windows/
+- ../../setup/install/windows/ # /docs/agent/latest/flow/setup/install/windows/
+canonical: https://grafana.com/docs/agent/latest/flow/get-started/install/windows/
 description: Learn how to install Grafana Agent Flow on Windows
 menuTitle: Windows
 title: Install Grafana Agent Flow on Windows
@@ -78,14 +84,14 @@ This includes any configuration files in the installation directory.
 
 ## Next steps
 
-- [Start {{< param "PRODUCT_NAME" >}}][Start]
+- [Run {{< param "PRODUCT_NAME" >}}][Start]
 - [Configure {{< param "PRODUCT_NAME" >}}][Configure]
 
 [latest]: https://github.com/grafana/agent/releases/latest
 
 {{% docs/reference %}}
-[Start]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/setup/start/windows.md"
-[Start]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/setup/start/windows.md"
+[Run]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/get-started/run/windows.md"
+[Run]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/get-started/run/windows.md"
 [Configure]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/tasks/configure/configure-windows.md"
 [Configure]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/tasks/configure/configure-windows.md"
 [data collection]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/data-collection.md"
diff --git a/docs/sources/flow/setup/start/_index.md b/docs/sources/flow/get-started/run/_index.md
similarity index 55%
rename from docs/sources/flow/setup/start/_index.md
rename to docs/sources/flow/get-started/run/_index.md
index 0f989a07f56c..f98f8707354f 100644
--- a/docs/sources/flow/setup/start/_index.md
+++ b/docs/sources/flow/get-started/run/_index.md
@@ -1,24 +1,24 @@
 ---
 aliases:
-- /docs/grafana-cloud/agent/flow/setup/start/
-- /docs/grafana-cloud/monitor-infrastructure/agent/flow/setup/start/
-- /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/setup/start/
-- /docs/grafana-cloud/send-data/agent/flow/setup/start/
-- /docs/sources/flow/start/
+- /docs/grafana-cloud/agent/flow/get-started/run/
+- /docs/grafana-cloud/monitor-infrastructure/agent/flow/get-started/run/
+- /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/get-started/run/
+- /docs/grafana-cloud/send-data/agent/flow/get-started/run/
+- /docs/sources/flow/run/
 # Previous pages aliases for backwards compatibility:
 - /docs/grafana-cloud/agent/flow/setup/start-agent/
 - /docs/grafana-cloud/monitor-infrastructure/agent/flow/setup/start-agent/
 - /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/setup/start-agent/
 - /docs/grafana-cloud/send-data/agent/flow/setup/start-agent/
-- ./start-agent/ # /docs/agent/latest/flow/setup/start-agent/
-canonical: https://grafana.com/docs/agent/latest/flow/setup/start/
-description: Learn how to start Grafana Agent Flow
-menuTitle: Start
-title: Start Grafana Agent Flow
+- ../setup/start-agent/ # /docs/agent/latest/flow/setup/start-agent/
+canonical: https://grafana.com/docs/agent/latest/flow/get-started/run/
+description: Learn how to run Grafana Agent Flow
+menuTitle: Run
+title: Run Grafana Agent Flow
 weight: 50
 ---
 
-# Start {{% param "PRODUCT_NAME" %}}
+# Run {{% param "PRODUCT_NAME" %}}
 
 Use the following pages to learn how to start, restart, and stop {{< param "PRODUCT_NAME" >}} after it is installed.
 For installation instructions, refer to [Install {{< param "PRODUCT_NAME" >}}][Install].
@@ -26,6 +26,6 @@ For installation instructions, refer to [Install {{< param "PRODUCT_NAME" >}}][I
 {{< section >}}
 
 {{% docs/reference %}}
-[Install]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/setup/install/"
-[Install]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/setup/install/"
+[Install]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/get-started/install/"
+[Install]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/get-started/install/"
 {{% /docs/reference %}}
diff --git a/docs/sources/flow/setup/start/binary.md b/docs/sources/flow/get-started/run/binary.md
similarity index 83%
rename from docs/sources/flow/setup/start/binary.md
rename to docs/sources/flow/get-started/run/binary.md
index 7d931217280a..7f9fda22ff77 100644
--- a/docs/sources/flow/setup/start/binary.md
+++ b/docs/sources/flow/get-started/run/binary.md
@@ -1,17 +1,17 @@
 ---
 aliases:
-- /docs/grafana-cloud/agent/flow/setup/start/binary/
-- /docs/grafana-cloud/monitor-infrastructure/agent/flow/setup/start/binary/
-- /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/setup/start/binary/
-- /docs/grafana-cloud/send-data/agent/flow/setup/start/binary/
-canonical: https://grafana.com/docs/agent/latest/flow/setup/start/binary/
-description: Learn how to start Grafana Agent Flow as a standalone binary
+   - /docs/grafana-cloud/agent/flow/get-started/run/binary/
+   - /docs/grafana-cloud/monitor-infrastructure/agent/flow/get-started/run/binary/
+   - /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/get-started/run/binary/
+   - /docs/grafana-cloud/send-data/agent/flow/get-started/run/binary/
+canonical: https://grafana.com/docs/agent/latest/flow/get-started/run/binary/
+description: Learn how to run Grafana Agent Flow as a standalone binary
 menuTitle: Standalone
-title: Start Grafana Agent Flow as a standalone binary
+title: Run Grafana Agent Flow as a standalone binary
 weight: 600
 ---
 
-# Start {{% param "PRODUCT_NAME" %}} as a standalone binary
+# Run {{% param "PRODUCT_NAME" %}} as a standalone binary
 
 If you [downloaded][InstallBinary] the standalone binary, you must run {{< param "PRODUCT_NAME" >}} from a terminal or command window.
 
@@ -119,8 +119,8 @@ These steps assume you have a default systemd and {{< param "PRODUCT_NAME" >}} c
 1. Use the [Linux][StartLinux] systemd commands to manage your standalone Linux installation of {{< param "PRODUCT_NAME" >}}.
 
 {{% docs/reference %}}
-[InstallBinary]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/setup/install/binary.md"
-[InstallBinary]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/flow/setup/install/binary.md"
-[StartLinux]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/setup/start/linux.md"
-[StartLinux]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/flow/setup/start/linux.md"
+[InstallBinary]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/get-started/install/binary.md"
+[InstallBinary]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/flow/get-started/install/binary.md"
+[StartLinux]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/get-started/run/linux.md"
+[StartLinux]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/flow/get-started/run/linux.md"
 {{% /docs/reference %}}
diff --git a/docs/sources/flow/setup/start/linux.md b/docs/sources/flow/get-started/run/linux.md
similarity index 77%
rename from docs/sources/flow/setup/start/linux.md
rename to docs/sources/flow/get-started/run/linux.md
index 673f15d2c7a1..1085aaabdf46 100644
--- a/docs/sources/flow/setup/start/linux.md
+++ b/docs/sources/flow/get-started/run/linux.md
@@ -1,17 +1,17 @@
 ---
 aliases:
-  - /docs/grafana-cloud/agent/flow/setup/start/linux/
-  - /docs/grafana-cloud/monitor-infrastructure/agent/flow/setup/start/linux/
-  - /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/setup/start/linux/
-  - /docs/grafana-cloud/send-data/agent/flow/setup/start/linux/
-canonical: https://grafana.com/docs/agent/latest/flow/setup/start/linux/
-description: Learn how to start Grafana Agent Flow on Linux
+  - /docs/grafana-cloud/agent/flow/get-started/run/linux/
+  - /docs/grafana-cloud/monitor-infrastructure/agent/flow/get-started/run/linux/
+  - /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/get-started/run/linux/
+  - /docs/grafana-cloud/send-data/agent/flow/get-started/run/linux/
+canonical: https://grafana.com/docs/agent/latest/flow/get-started/run/linux/
+description: Learn how to run Grafana Agent Flow on Linux
 menuTitle: Linux
-title: Start Grafana Agent Flow on Linux
+title: Run Grafana Agent Flow on Linux
 weight: 300
 ---
 
-# Start {{% param "PRODUCT_NAME" %}} on Linux
+# Run {{% param "PRODUCT_NAME" %}} on Linux
 
 {{< param "PRODUCT_NAME" >}} is [installed][InstallLinux] as a [systemd][] service on Linux.
 
@@ -68,8 +68,8 @@ sudo journalctl -u grafana-agent-flow
 - [Configure {{< param "PRODUCT_NAME" >}}][Configure]
 
 {{% docs/reference %}}
-[InstallLinux]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/setup/install/linux.md"
-[InstallLinux]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/flow/setup/install/linux.md"
+[InstallLinux]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/get-started/install/linux.md"
+[InstallLinux]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/flow/get-started/install/linux.md"
 [Configure]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/tasks/configure/configure-linux.md"
 [Configure]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/tasks/configure/configure-linux.md"
 {{% /docs/reference %}}
diff --git a/docs/sources/flow/setup/start/macos.md b/docs/sources/flow/get-started/run/macos.md
similarity index 80%
rename from docs/sources/flow/setup/start/macos.md
rename to docs/sources/flow/get-started/run/macos.md
index 53fe8b05b22f..8c7a055dd853 100644
--- a/docs/sources/flow/setup/start/macos.md
+++ b/docs/sources/flow/get-started/run/macos.md
@@ -1,17 +1,17 @@
 ---
 aliases:
-  - /docs/grafana-cloud/agent/flow/setup/start/macos/
-  - /docs/grafana-cloud/monitor-infrastructure/agent/flow/setup/start/macos/
-  - /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/setup/start/macos/
-  - /docs/grafana-cloud/send-data/agent/flow/setup/start/macos/
-canonical: https://grafana.com/docs/agent/latest/flow/setup/start/macos/
-description: Learn how to start Grafana Agent Flow on macOS
+  - /docs/grafana-cloud/agent/flow/get-started/run/macos/
+  - /docs/grafana-cloud/monitor-infrastructure/agent/flow/get-started/run/macos/
+  - /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/get-started/run/macos/
+  - /docs/grafana-cloud/send-data/agent/flow/get-started/run/macos/
+canonical: https://grafana.com/docs/agent/latest/flow/get-started/run/macos/
+description: Learn how to run Grafana Agent Flow on macOS
 menuTitle: macOS
-title: Start Grafana Agent Flow on macOS
+title: Run Grafana Agent Flow on macOS
 weight: 400
 ---
 
-# Start {{% param "PRODUCT_NAME" %}} on macOS
+# Run {{% param "PRODUCT_NAME" %}} on macOS
 
 {{< param "PRODUCT_NAME" >}} is [installed][InstallMacOS] as a launchd service on macOS.
 
@@ -60,8 +60,8 @@ refer to your current copy of the {{< param "PRODUCT_NAME" >}} formula to locate
 - [Configure {{< param "PRODUCT_NAME" >}}][ConfigureMacOS]
 
 {{% docs/reference %}}
-[InstallMacOS]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/setup/install/macos.md"
-[InstallMacOS]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/flow/setup/install/macos.md"
+[InstallMacOS]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/get-started/install/macos.md"
+[InstallMacOS]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/flow/get-started/install/macos.md"
 [ConfigureMacOS]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/tasks/configure/configure-macos.md"
 [ConfigureMacOS]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/tasks/configure/configure-macos.md"
 [ConfigureService]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/tasks/configure/configure-macos.md#configure-the-grafana-agent-flow-service"
diff --git a/docs/sources/flow/setup/start/windows.md b/docs/sources/flow/get-started/run/windows.md
similarity index 73%
rename from docs/sources/flow/setup/start/windows.md
rename to docs/sources/flow/get-started/run/windows.md
index e586fa075ddc..2ee89710b028 100644
--- a/docs/sources/flow/setup/start/windows.md
+++ b/docs/sources/flow/get-started/run/windows.md
@@ -1,17 +1,17 @@
 ---
 aliases:
-  - /docs/grafana-cloud/agent/flow/setup/start/windows/
-  - /docs/grafana-cloud/monitor-infrastructure/agent/flow/setup/start/windows/
-  - /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/setup/start/windows/
-  - /docs/grafana-cloud/send-data/agent/flow/setup/start/windows/
-canonical: https://grafana.com/docs/agent/latest/flow/setup/start/windows/
-description: Learn how to start Grafana Agent Flow on Windows
+  - /docs/grafana-cloud/agent/flow/get-started/run/windows/
+  - /docs/grafana-cloud/monitor-infrastructure/agent/flow/get-started/run/windows/
+  - /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/get-started/run/windows/
+  - /docs/grafana-cloud/send-data/agent/flow/get-started/run/windows/
+canonical: https://grafana.com/docs/agent/latest/flow/get-started/run/windows/
+description: Learn how to run Grafana Agent Flow on Windows
 menuTitle: Windows
-title: Start Grafana Agent Flow on Windows
+title: Run Grafana Agent Flow on Windows
 weight: 500
 ---
 
-# Start {{% param "PRODUCT_NAME" %}} on Windows
+# Run {{% param "PRODUCT_NAME" %}} on Windows
 
 {{< param "PRODUCT_NAME" >}} is [installed][InstallWindows] as a Windows Service. The service is configured to automatically run on startup.
 
@@ -47,8 +47,8 @@ To view the logs, perform the following steps:
 - [Configure {{< param "PRODUCT_NAME" >}}][Configure]
 
 {{% docs/reference %}}
-[InstallWindows]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/setup/install/windows.md"
-[InstallWindows]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/flow/setup/install/windows.md"
+[InstallWindows]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/get-started/install/windows.md"
+[InstallWindows]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/flow/get-started/install/windows.md"
 [Configure]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/tasks/configure/configure-windows.md"
 [Configure]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/tasks/configure/configure-windows.md"
 {{% /docs/reference %}}
diff --git a/docs/sources/flow/reference/components/otelcol.exporter.loadbalancing.md b/docs/sources/flow/reference/components/otelcol.exporter.loadbalancing.md
index c22c169665b7..4552adce44ce 100644
--- a/docs/sources/flow/reference/components/otelcol.exporter.loadbalancing.md
+++ b/docs/sources/flow/reference/components/otelcol.exporter.loadbalancing.md
@@ -275,7 +275,7 @@ Name | Type | Description
 Different {{< param "PRODUCT_NAME" >}} components require different load-balancing strategies.
 The use of `otelcol.exporter.loadbalancing` is only necessary for [stateful Flow components][stateful-and-stateless-components].
 
-[stateful-and-stateless-components]: {{< relref "../../setup/deploy-agent.md#stateful-and-stateless-components" >}}
+[stateful-and-stateless-components]: {{< relref "../../get-started/deploy-agent.md#stateful-and-stateless-components" >}}
 
 ### otelcol.processor.tail_sampling
 <!-- TODO: Add a picture of the architecture?  -->
diff --git a/docs/sources/flow/setup/_index.md b/docs/sources/flow/setup/_index.md
deleted file mode 100644
index d639fa3eaea1..000000000000
--- a/docs/sources/flow/setup/_index.md
+++ /dev/null
@@ -1,18 +0,0 @@
----
-aliases:
-- /docs/grafana-cloud/agent/flow/setup/
-- /docs/grafana-cloud/monitor-infrastructure/agent/flow/setup/
-- /docs/grafana-cloud/monitor-infrastructure/integrations/agent/flow/setup/
-- /docs/grafana-cloud/send-data/agent/flow/setup/
-canonical: https://grafana.com/docs/agent/latest/flow/setup/
-description: Learn how to install and configure Grafana Agent Flow
-menuTitle: Set up Grafana Agent Flow
-title: Set up Grafana Agent Flow
-weight: 50
----
-
-# Set up {{% param "PRODUCT_NAME" %}}
-
-This section includes information that helps you install and configure {{< param "PRODUCT_NAME" >}}.
-
-{{< section >}}
diff --git a/docs/sources/flow/tasks/configure-agent-clustering.md b/docs/sources/flow/tasks/configure-agent-clustering.md
index ca67ecd2d608..d8539914fc69 100644
--- a/docs/sources/flow/tasks/configure-agent-clustering.md
+++ b/docs/sources/flow/tasks/configure-agent-clustering.md
@@ -67,8 +67,8 @@ To configure clustering:
 [clustering]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/concepts/clustering.md"
 [beta]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/stability.md#beta"
 [beta]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/stability.md#beta"
-[install-helm]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/setup/install/kubernetes.md"
-[install-helm]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/setup/install/kubernetes.md"
+[install-helm]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/get-started/install/kubernetes.md"
+[install-helm]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/get-started/install/kubernetes.md"
 [UI]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/tasks/debug.md#component-detail-page"
 [UI]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/tasks/debug.md#component-detail-page"
 {{% /docs/reference %}}
diff --git a/docs/sources/flow/tasks/configure/_index.md b/docs/sources/flow/tasks/configure/_index.md
index fc576f8f51a3..c44ea3dc023b 100644
--- a/docs/sources/flow/tasks/configure/_index.md
+++ b/docs/sources/flow/tasks/configure/_index.md
@@ -31,6 +31,6 @@ This section includes information that helps you configure {{< param "PRODUCT_NA
 {{< section >}}
 
 {{% docs/reference %}}
-[Install]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/setup/install/"
-[Install]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/setup/install/"
+[Install]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/get-started/install/"
+[Install]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/get-started/install/"
 {{% /docs/reference %}}
diff --git a/docs/sources/flow/tasks/debug.md b/docs/sources/flow/tasks/debug.md
index 6932d6082f82..331307a58d9b 100644
--- a/docs/sources/flow/tasks/debug.md
+++ b/docs/sources/flow/tasks/debug.md
@@ -118,8 +118,8 @@ To debug issues when using [clustering][], check for the following symptoms.
 [logging]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/reference/config-blocks/logging.md"
 [clustering]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/concepts/clustering.md"
 [clustering]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/concepts/clustering.md"
-[install]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/setup/install"
-[install]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/setup/install"
+[install]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/get-started/install"
+[install]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/get-started/install"
 [secret]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/concepts/config-language/expressions/types_and_values.md#secrets.md"
 [secret]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/concepts/config-language/expressions/types_and_values.md#secrets.md"
 [grafana-agent run]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/reference/cli/run.md"
diff --git a/docs/sources/flow/tasks/estimate-resource-usage.md b/docs/sources/flow/tasks/estimate-resource-usage.md
index 6fb8a146f6d9..e7b066d9e8ee 100644
--- a/docs/sources/flow/tasks/estimate-resource-usage.md
+++ b/docs/sources/flow/tasks/estimate-resource-usage.md
@@ -51,7 +51,7 @@ will broadly apply to other deployment modes. For more information on how to
 deploy {{% param "PRODUCT_NAME" %}}, see
 [deploying grafana agent][].
 
-[deploying grafana agent]: {{< relref "../setup/deploy-agent.md" >}}
+[deploying grafana agent]: {{< relref "../get-started/deploy-agent.md" >}}
 [clustering]: {{< relref "../concepts/clustering.md" >}}
 
 ## Loki logs
diff --git a/docs/sources/flow/tasks/migrate/from-operator.md b/docs/sources/flow/tasks/migrate/from-operator.md
index 306e613bc45a..f035f95484ad 100644
--- a/docs/sources/flow/tasks/migrate/from-operator.md
+++ b/docs/sources/flow/tasks/migrate/from-operator.md
@@ -283,12 +283,12 @@ The [reference documentation][component documentation] should help convert those
 {{% docs/reference %}}
 [clustering]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/concepts/clustering"
 [clustering]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/concepts/clustering"
-[deployment guide]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/setup/deploy-agent"
-[deployment guide]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/flow/setup/deploy-agent"
+[deployment guide]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/get-started/deploy-agent"
+[deployment guide]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/flow/get-started/deploy-agent"
 [operator guide]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/operator/deploy-agent-operator-resources.md#deploy-a-metricsinstance-resource"
 [operator guide]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/operator/deploy-agent-operator-resources.md#deploy-a-metricsinstance-resource"
-[Helm chart]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/setup/install/kubernetes"
-[Helm chart]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/flow/setup/install/kubernetes"
+[Helm chart]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/get-started/install/kubernetes"
+[Helm chart]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/flow/get-started/install/kubernetes"
 [remote.kubernetes.secret]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/reference/components/remote.kubernetes.secret.md"
 [remote.kubernetes.secret]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/flow/reference/components/remote.kubernetes.secret.md"
 [prometheus.remote_write]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/reference/components/prometheus.remote_write.md"
diff --git a/docs/sources/flow/tasks/migrate/from-prometheus.md b/docs/sources/flow/tasks/migrate/from-prometheus.md
index fae212aae6e8..62fef82d3c2d 100644
--- a/docs/sources/flow/tasks/migrate/from-prometheus.md
+++ b/docs/sources/flow/tasks/migrate/from-prometheus.md
@@ -64,7 +64,7 @@ This conversion will enable you to take full advantage of the many additional fe
    - _`<INPUT_CONFIG_PATH>`_: The full path to the Prometheus configuration.
    - _`<OUTPUT_CONFIG_PATH>`_: The full path to output the {{< param "PRODUCT_NAME" >}} configuration.
 
-1. [Start][] {{< param "PRODUCT_NAME" >}} using the new {{< param "PRODUCT_NAME" >}} configuration from _`<OUTPUT_CONFIG_PATH>`_:
+1. [Run][] {{< param "PRODUCT_NAME" >}} using the new {{< param "PRODUCT_NAME" >}} configuration from _`<OUTPUT_CONFIG_PATH>`_:
 
 ### Debugging
 
@@ -131,7 +131,7 @@ This allows you to try {{< param "PRODUCT_NAME" >}} without modifying your exist
 > In this task, you will use the [run][] CLI command to run {{< param "PRODUCT_NAME" >}}
 > using a Prometheus configuration.
 
-[Start][] {{< param "PRODUCT_NAME" >}} and include the command line flag `--config.format=prometheus`.
+[Run][] {{< param "PRODUCT_NAME" >}} and include the command line flag `--config.format=prometheus`.
 Your configuration file must be a valid Prometheus configuration file rather than a {{< param "PRODUCT_NAME" >}} configuration file.
 
 ### Debugging
@@ -256,8 +256,8 @@ The following list is specific to the convert command and not {{< param "PRODUCT
 [convert]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/reference/cli/convert.md"
 [run]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/reference/cli/run.md"
 [run]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/reference/cli/run.md"
-[Start]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/setup/start/"
-[Start]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/setup/start/"
+[Run]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/get-started/run/"
+[Run]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/get-started/run/"
 [DebuggingUI]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/tasks/debug.md"
 [DebuggingUI]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/tasks/debug.md"
 [River]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/concepts/config-language/_index.md"
diff --git a/docs/sources/flow/tasks/migrate/from-promtail.md b/docs/sources/flow/tasks/migrate/from-promtail.md
index bf116e755c7b..182dec857c3b 100644
--- a/docs/sources/flow/tasks/migrate/from-promtail.md
+++ b/docs/sources/flow/tasks/migrate/from-promtail.md
@@ -64,7 +64,7 @@ This conversion will enable you to take full advantage of the many additional fe
     * _`<INPUT_CONFIG_PATH>`_: The full path to the Promtail configuration.
     * _`<OUTPUT_CONFIG_PATH>`_: The full path to output the {{< param "PRODUCT_NAME" >}} configuration.
 
-1. [Start][] {{< param "PRODUCT_NAME" >}} using the new configuration from _`<OUTPUT_CONFIG_PATH>`_:
+1. [Run][] {{< param "PRODUCT_NAME" >}} using the new configuration from _`<OUTPUT_CONFIG_PATH>`_:
 
 ### Debugging
 
@@ -127,7 +127,7 @@ This allows you to try {{< param "PRODUCT_NAME" >}} without modifying your exist
 
 > In this task, you will use the [run][] CLI command to run {{< param "PRODUCT_NAME" >}} using a Promtail configuration.
 
-[Start][] {{< param "PRODUCT_NAME" >}} and include the command line flag `--config.format=promtail`.
+[Run][] {{< param "PRODUCT_NAME" >}} and include the command line flag `--config.format=promtail`.
 Your configuration file must be a valid Promtail configuration file rather than a {{< param "PRODUCT_NAME" >}} configuration file.
 
 ### Debugging
@@ -239,8 +239,8 @@ The following list is specific to the convert command and not {{< param "PRODUCT
 [convert]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/reference/cli/convert.md"
 [run]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/reference/cli/run.md"
 [run]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/reference/cli/run.md"
-[Start]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/setup/start/"
-[Start]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/setup/start/"
+[Run]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/get-started/run/"
+[Run]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/get-started/run/"
 [DebuggingUI]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/tasks/debug.md"
 [DebuggingUI]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/tasks/debug.md"
 [River]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/concepts/config-language/_index.md"
diff --git a/docs/sources/flow/tasks/migrate/from-static.md b/docs/sources/flow/tasks/migrate/from-static.md
index 6f7c30d994a8..ff006b514a5e 100644
--- a/docs/sources/flow/tasks/migrate/from-static.md
+++ b/docs/sources/flow/tasks/migrate/from-static.md
@@ -67,7 +67,7 @@ This conversion will enable you to take full advantage of the many additional fe
     * _`<INPUT_CONFIG_PATH>`_: The full path to the [Static][] configuration.
     * _`<OUTPUT_CONFIG_PAT>H_`: The full path to output the {{< param "PRODUCT_NAME" >}} configuration.
 
-1. [Start][] {{< param "PRODUCT_NAME" >}} using the new {{< param "PRODUCT_NAME" >}} configuration from _`<OUTPUT_CONFIG_PATH>`_:
+1. [Run][] {{< param "PRODUCT_NAME" >}} using the new {{< param "PRODUCT_NAME" >}} configuration from _`<OUTPUT_CONFIG_PATH>`_:
 
 ### Debugging
 
@@ -130,7 +130,7 @@ This allows you to try {{< param "PRODUCT_NAME" >}} without modifying your exist
 
 > In this task, you will use the [run][] CLI command to run {{< param "PRODUCT_NAME" >}} using a Static configuration.
 
-[Start][] {{< param "PRODUCT_NAME" >}} and include the command line flag `--config.format=static`.
+[Run][] {{< param "PRODUCT_NAME" >}} and include the command line flag `--config.format=static`.
 Your configuration file must be a valid [Static] configuration file.
 
 ### Debugging
@@ -374,8 +374,8 @@ The following list is specific to the convert command and not {{< param "PRODUCT
 [convert]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/reference/cli/convert.md"
 [run]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/reference/cli/run.md"
 [run]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/reference/cli/run.md"
-[Start]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/setup/start/"
-[Start]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/setup/start/"
+[Run]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/get-started/run/"
+[Run]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/get-started/run/"
 [DebuggingUI]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/tasks/debug.md"
 [DebuggingUI]: "/docs/grafana-cloud/ -> /docs/grafana-cloud/send-data/agent/flow/tasks/debug.md"
 [River]: "/docs/agent/ -> /docs/agent/<AGENT_VERSION>/flow/concepts/config-language/"
diff --git a/docs/sources/shared/wal-data-retention.md b/docs/sources/shared/wal-data-retention.md
index 1d2caf844e17..973af3afb4d6 100644
--- a/docs/sources/shared/wal-data-retention.md
+++ b/docs/sources/shared/wal-data-retention.md
@@ -111,6 +111,6 @@ To delete the corrupted WAL:
 
 [WAL block]: /docs/agent/<AGENT_VERSION>/flow/reference/components/prometheus.remote_write#wal-block
 [metrics config]: /docs/agent/<AGENT_VERSION>/static/configuration/metrics-config
-[Stop]: /docs/agent/<AGENT_VERSION>/flow/setup/start-agent
+[Stop]: /docs/agent/<AGENT_VERSION>/flow/get-started/start-agent
 [wal_directory]: /docs/agent/<AGENT_VERSION>/static/configuration/metrics-config
 [run]: /docs/agent/<AGENT_VERSION>/flow/reference/cli/run

From 19318b615fcad183e96b0ed6d5c05f1857c1844c Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=C4=90=E1=BB=97=20Tr=E1=BB=8Dng=20H=E1=BA=A3i?=
 <41283691+hainenber@users.noreply.github.com>
Date: Thu, 11 Jan 2024 22:40:47 +0700
Subject: [PATCH 54/68] feat(exporter/windows): expose physical_disk collector
 (#5927)

* feat(exporter/windows): expose physical_disk collector

Signed-off-by: hainenber <dotronghai96@gmail.com>

* fix(exporter/windows): correct river attr name for physical_disk

Signed-off-by: hainenber <dotronghai96@gmail.com>

* feat(exporter/windows): set default args for physical_disk attr

Signed-off-by: hainenber <dotronghai96@gmail.com>

* feat(exporter/windows): update unit test + integration doc

Signed-off-by: hainenber <dotronghai96@gmail.com>

* Update docs/sources/static/configuration/integrations/windows-exporter-config.md

Co-authored-by: Clayton Cornell <131809008+clayton-cornell@users.noreply.github.com>

* Update docs/sources/static/configuration/integrations/windows-exporter-config.md

Co-authored-by: Clayton Cornell <131809008+clayton-cornell@users.noreply.github.com>

---------

Signed-off-by: hainenber <dotronghai96@gmail.com>
Co-authored-by: Clayton Cornell <131809008+clayton-cornell@users.noreply.github.com>
---
 CHANGELOG.md                                     |  3 +++
 component/prometheus/exporter/windows/config.go  | 16 ++++++++++++++++
 .../windows/config_default_windows_test.go       |  2 ++
 .../exporter/windows/config_windows.go           |  7 ++++++-
 .../prometheus/exporter/windows/windows_test.go  |  9 +++++++++
 .../internal/build/windows_exporter.go           |  4 ++++
 .../components/prometheus.exporter.windows.md    |  1 +
 .../integrations/windows-exporter-config.md      | 10 ++++++++++
 pkg/integrations/windows_exporter/config.go      |  7 +++++++
 .../windows_exporter/config_windows.go           |  7 +++++++
 10 files changed, 65 insertions(+), 1 deletion(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index a4c13c5d97b7..3253b1909844 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -113,6 +113,9 @@ v0.39.0 (2024-01-09)
 - `discovery.lightsail` now supports additional parameters for configuring HTTP client settings. (@ptodev)
 - Add `sample_age_limit` to remote_write config to drop samples older than a specified duration. (@marctc)
 
+- Expose `physical_disk` collector from `windows_exporter` v0.24.0 to 
+  Flow configuration. (@hainenber)
+
 - Handle paths in the Kubelet URL for `discovery.kubelet`. (@petewall)
 
 - `loki.source.docker` now deduplicates targets which report the same container
diff --git a/component/prometheus/exporter/windows/config.go b/component/prometheus/exporter/windows/config.go
index cc4cb20e4b17..44568833c1cd 100644
--- a/component/prometheus/exporter/windows/config.go
+++ b/component/prometheus/exporter/windows/config.go
@@ -19,6 +19,7 @@ type Arguments struct {
 	MSMQ          MSMQConfig          `river:"msmq,block,optional"`
 	MSSQL         MSSQLConfig         `river:"mssql,block,optional"`
 	Network       NetworkConfig       `river:"network,block,optional"`
+	PhysicalDisk  PhysicalDiskConfig  `river:"physical_disk,block,optional"`
 	Process       ProcessConfig       `river:"process,block,optional"`
 	ScheduledTask ScheduledTaskConfig `river:"scheduled_task,block,optional"`
 	Service       ServiceConfig       `river:"service,block,optional"`
@@ -38,6 +39,7 @@ func (a *Arguments) Convert() *windows_integration.Config {
 		MSSQL:             a.MSSQL.Convert(),
 		Network:           a.Network.Convert(),
 		Process:           a.Process.Convert(),
+		PhysicalDisk:      a.PhysicalDisk.Convert(),
 		ScheduledTask:     a.ScheduledTask.Convert(),
 		Service:           a.Service.Convert(),
 		SMTP:              a.SMTP.Convert(),
@@ -230,3 +232,17 @@ func (t LogicalDiskConfig) Convert() windows_integration.LogicalDiskConfig {
 		Exclude:   t.Exclude,
 	}
 }
+
+// PhysicalDiskConfig handles settings for the windows_exporter physical disk collector
+type PhysicalDiskConfig struct {
+	Include string `river:"include,attr,optional"`
+	Exclude string `river:"exclude,attr,optional"`
+}
+
+// Convert converts the component's PhysicalDiskConfig to the integration's PhysicalDiskConfig.
+func (t PhysicalDiskConfig) Convert() windows_integration.PhysicalDiskConfig {
+	return windows_integration.PhysicalDiskConfig{
+		Include: t.Include,
+		Exclude: t.Exclude,
+	}
+}
diff --git a/component/prometheus/exporter/windows/config_default_windows_test.go b/component/prometheus/exporter/windows/config_default_windows_test.go
index 9fddd1d635eb..7242ac42e525 100644
--- a/component/prometheus/exporter/windows/config_default_windows_test.go
+++ b/component/prometheus/exporter/windows/config_default_windows_test.go
@@ -25,6 +25,8 @@ func TestRiverUnmarshalWithDefaultConfig(t *testing.T) {
 	require.Equal(t, DefaultArguments.MSSQL.EnabledClasses, args.MSSQL.EnabledClasses)
 	require.Equal(t, DefaultArguments.Network.Exclude, args.Network.Exclude)
 	require.Equal(t, DefaultArguments.Network.Include, args.Network.Include)
+	require.Equal(t, DefaultArguments.PhysicalDisk.Exclude, args.PhysicalDisk.Exclude)
+	require.Equal(t, DefaultArguments.PhysicalDisk.Include, args.PhysicalDisk.Include)
 	require.Equal(t, DefaultArguments.Process.Exclude, args.Process.Exclude)
 	require.Equal(t, DefaultArguments.Process.Include, args.Process.Include)
 	require.Equal(t, DefaultArguments.ScheduledTask.Exclude, args.ScheduledTask.Exclude)
diff --git a/component/prometheus/exporter/windows/config_windows.go b/component/prometheus/exporter/windows/config_windows.go
index b634788eda8c..42270f9e241e 100644
--- a/component/prometheus/exporter/windows/config_windows.go
+++ b/component/prometheus/exporter/windows/config_windows.go
@@ -1,9 +1,10 @@
 package windows
 
 import (
+	"strings"
+
 	windows_integration "github.com/grafana/agent/pkg/integrations/windows_exporter"
 	col "github.com/prometheus-community/windows_exporter/pkg/collector"
-	"strings"
 )
 
 // DefaultArguments holds non-zero default options for Arguments when it is
@@ -44,6 +45,10 @@ var DefaultArguments = Arguments{
 		Include:   col.ConfigDefaults.Net.NicInclude,
 		Exclude:   col.ConfigDefaults.Net.NicExclude,
 	},
+	PhysicalDisk: PhysicalDiskConfig{
+		Exclude: col.ConfigDefaults.PhysicalDisk.DiskExclude,
+		Include: col.ConfigDefaults.PhysicalDisk.DiskInclude,
+	},
 	Process: ProcessConfig{
 		BlackList: col.ConfigDefaults.Process.ProcessExclude,
 		WhiteList: col.ConfigDefaults.Process.ProcessInclude,
diff --git a/component/prometheus/exporter/windows/windows_test.go b/component/prometheus/exporter/windows/windows_test.go
index 8b34164f5d7c..6f15ad6e7555 100644
--- a/component/prometheus/exporter/windows/windows_test.go
+++ b/component/prometheus/exporter/windows/windows_test.go
@@ -34,6 +34,11 @@ var (
         service {
             where_clause = "where"
         }
+
+		physical_disk {
+			include = ".+"
+			exclude = ""
+		}
 		
 		process {
 			include = ".+"
@@ -75,6 +80,8 @@ func TestRiverUnmarshal(t *testing.T) {
 	require.Equal(t, "", args.SMTP.Exclude)
 	require.Equal(t, ".+", args.SMTP.Include)
 	require.Equal(t, "where", args.Service.Where)
+	require.Equal(t, "", args.PhysicalDisk.Exclude)
+	require.Equal(t, ".+", args.PhysicalDisk.Include)
 	require.Equal(t, "", args.Process.Exclude)
 	require.Equal(t, ".+", args.Process.Include)
 	require.Equal(t, "", args.Network.Exclude)
@@ -102,6 +109,8 @@ func TestConvert(t *testing.T) {
 	require.Equal(t, "", conf.SMTP.Exclude)
 	require.Equal(t, ".+", conf.SMTP.Include)
 	require.Equal(t, "where", conf.Service.Where)
+	require.Equal(t, "", conf.PhysicalDisk.Exclude)
+	require.Equal(t, ".+", conf.PhysicalDisk.Include)
 	require.Equal(t, "", conf.Process.Exclude)
 	require.Equal(t, ".+", conf.Process.Include)
 	require.Equal(t, "", conf.Network.Exclude)
diff --git a/converter/internal/staticconvert/internal/build/windows_exporter.go b/converter/internal/staticconvert/internal/build/windows_exporter.go
index 73aa706e8235..2f0b110a68f0 100644
--- a/converter/internal/staticconvert/internal/build/windows_exporter.go
+++ b/converter/internal/staticconvert/internal/build/windows_exporter.go
@@ -50,6 +50,10 @@ func toWindowsExporter(config *windows_exporter.Config) *windows.Arguments {
 			Exclude:   config.Network.Exclude,
 			Include:   config.Network.Include,
 		},
+		PhysicalDisk: windows.PhysicalDiskConfig{
+			Exclude: config.PhysicalDisk.Exclude,
+			Include: config.PhysicalDisk.Include,
+		},
 		Process: windows.ProcessConfig{
 			BlackList: config.Process.BlackList,
 			WhiteList: config.Process.WhiteList,
diff --git a/docs/sources/flow/reference/components/prometheus.exporter.windows.md b/docs/sources/flow/reference/components/prometheus.exporter.windows.md
index 4ad33effdd4a..8042b5458d1c 100644
--- a/docs/sources/flow/reference/components/prometheus.exporter.windows.md
+++ b/docs/sources/flow/reference/components/prometheus.exporter.windows.md
@@ -254,6 +254,7 @@ Name     | Description | Enabled by default
 [netframework_clrsecurity](https://github.com/prometheus-community/windows_exporter/blob/master/docs/collector.netframework_clrsecurity.md) | .NET Framework Security Check metrics |
 [net](https://github.com/prometheus-community/windows_exporter/blob/master/docs/collector.net.md) | Network interface I/O | &#10003;
 [os](https://github.com/prometheus-community/windows_exporter/blob/master/docs/collector.os.md) | OS metrics (memory, processes, users) | &#10003;
+[physical_disk](https://github.com/prometheus-community/windows_exporter/blob/master/docs/collector.physical_disk.md) | Physical disks | &#10003;
 [process](https://github.com/prometheus-community/windows_exporter/blob/master/docs/collector.process.md) | Per-process metrics |
 [remote_fx](https://github.com/prometheus-community/windows_exporter/blob/master/docs/collector.remote_fx.md) | RemoteFX protocol (RDP) metrics |
 [scheduled_task](https://github.com/prometheus-community/windows_exporter/blob/master/docs/collector.scheduled_task.md) | Scheduled Tasks metrics |
diff --git a/docs/sources/static/configuration/integrations/windows-exporter-config.md b/docs/sources/static/configuration/integrations/windows-exporter-config.md
index 53c58b60fe0b..7f12117ebfbc 100644
--- a/docs/sources/static/configuration/integrations/windows-exporter-config.md
+++ b/docs/sources/static/configuration/integrations/windows-exporter-config.md
@@ -114,6 +114,16 @@ Full reference of options:
     # Maps to collector.service.services-where in windows_exporter
     [where_clause: <string> | default=""]
 
+  # Configuration for physical disk on Windows 
+  physical_disk:
+    # Regexp of volumes to include. Disk name must both match include and not match exclude to be included.
+    # Maps to collector.logical_disk.disk-include in windows_exporter.
+    [include: <string> | default=".+"]
+
+    # Regexp of volumes to exclude. Disk name must both match include and not match exclude to be included.
+    # Maps to collector.logical_disk.disk-exclude in windows_exporter.
+    [exclude: <string> | default=".+"]
+
   # Configuration for Windows Processes
   process:
     # Regexp of processes to include. Process name must both match whitelist and not match blacklist to be included.
diff --git a/pkg/integrations/windows_exporter/config.go b/pkg/integrations/windows_exporter/config.go
index 006bc5426d72..a8bdba73174c 100644
--- a/pkg/integrations/windows_exporter/config.go
+++ b/pkg/integrations/windows_exporter/config.go
@@ -23,6 +23,7 @@ type Config struct {
 	TextFile      TextFileConfig      `yaml:"text_file,omitempty"`
 	SMTP          SMTPConfig          `yaml:"smtp,omitempty"`
 	Service       ServiceConfig       `yaml:"service,omitempty"`
+	PhysicalDisk  PhysicalDiskConfig  `yaml:"physical_disk,omitempty"`
 	Process       ProcessConfig       `yaml:"process,omitempty"`
 	Network       NetworkConfig       `yaml:"network,omitempty"`
 	MSSQL         MSSQLConfig         `yaml:"mssql,omitempty"`
@@ -126,3 +127,9 @@ type ScheduledTaskConfig struct {
 	Include string `yaml:"include,omitempty"`
 	Exclude string `yaml:"exclude,omitempty"`
 }
+
+// PhysicalDiskConfig handles settings for the windows_exporter physical disk collector
+type PhysicalDiskConfig struct {
+	Include string `yaml:"include,omitempty"`
+	Exclude string `yaml:"exclude,omitempty"`
+}
diff --git a/pkg/integrations/windows_exporter/config_windows.go b/pkg/integrations/windows_exporter/config_windows.go
index 17fd03d4f80c..657ff5861de4 100644
--- a/pkg/integrations/windows_exporter/config_windows.go
+++ b/pkg/integrations/windows_exporter/config_windows.go
@@ -22,6 +22,9 @@ func (c *Config) ToWindowsExporterConfig() collector.Config {
 
 	cfg.Textfile.TextFileDirectories = c.TextFile.TextFileDirectory
 
+	cfg.PhysicalDisk.DiskInclude = c.PhysicalDisk.Include
+	cfg.PhysicalDisk.DiskExclude = c.PhysicalDisk.Exclude
+
 	cfg.Process.ProcessExclude = coalesceString(c.Process.Exclude, c.Process.BlackList)
 	cfg.Process.ProcessInclude = coalesceString(c.Process.Include, c.Process.WhiteList)
 
@@ -87,6 +90,10 @@ var DefaultConfig = Config{
 		Include:   collector.ConfigDefaults.Net.NicInclude,
 		Exclude:   collector.ConfigDefaults.Net.NicExclude,
 	},
+	PhysicalDisk: PhysicalDiskConfig{
+		Include: collector.ConfigDefaults.PhysicalDisk.DiskInclude,
+		Exclude: collector.ConfigDefaults.PhysicalDisk.DiskExclude,
+	},
 	Process: ProcessConfig{
 		BlackList: collector.ConfigDefaults.Process.ProcessExclude,
 		WhiteList: collector.ConfigDefaults.Process.ProcessInclude,

From bba4a5d0c7d8e47aad012520ecb0d93e40d37d84 Mon Sep 17 00:00:00 2001
From: Robert Fratto <robertfratto@gmail.com>
Date: Thu, 11 Jan 2024 11:19:53 -0500
Subject: [PATCH 55/68] example: remove k3d sample environment (#6117)

The k3d example environment has been unused in a long time, and no
longer works as the Tanka library it depended on has been removed.

The docker-compose environment supersedes the k3d environment for simple
use cases.
---
 example/k3d/README.md                         | 128 ----
 example/k3d/assets/alert_firing.png           | Bin 163588 -> 0 bytes
 example/k3d/assets/alerts.png                 | Bin 84885 -> 0 bytes
 example/k3d/assets/console_failure.png        | Bin 16667 -> 0 bytes
 example/k3d/assets/logs_alerts.png            | Bin 229967 -> 0 bytes
 example/k3d/assets/logs_flow.mermaid          |   9 -
 example/k3d/assets/logs_flow.png              | Bin 103519 -> 0 bytes
 example/k3d/assets/metrics_flow.png           | Bin 24634 -> 0 bytes
 example/k3d/assets/metrics_flow.uml           |  10 -
 example/k3d/assets/pending_alert.png          | Bin 86157 -> 0 bytes
 example/k3d/assets/traces_flow.mermaid        |   8 -
 example/k3d/assets/traces_flow.png            | Bin 222160 -> 0 bytes
 example/k3d/assets/trigger_change.png         | Bin 57710 -> 0 bytes
 example/k3d/assets/trigger_logs_alerts.png    | Bin 33552 -> 0 bytes
 example/k3d/environment/main.jsonnet          | 165 -----
 example/k3d/environment/spec.json             |  11 -
 example/k3d/jsonnetfile.json                  |  76 ---
 example/k3d/jsonnetfile.lock.json             | 112 ----
 .../lib/collector/collector-config.libsonnet  |  28 -
 example/k3d/lib/collector/main.libsonnet      |  47 --
 .../k3d/lib/cortex/cortex-config.libsonnet    |  91 ---
 example/k3d/lib/cortex/main.libsonnet         |  64 --
 example/k3d/lib/default/loki_config.libsonnet |  41 --
 example/k3d/lib/default/main.libsonnet        |  26 -
 example/k3d/lib/default/mixins.libsonnet      |  30 -
 example/k3d/lib/grafana/config.libsonnet      |  36 -
 example/k3d/lib/grafana/datasource.libsonnet  |  25 -
 example/k3d/lib/grafana/main.libsonnet        | 132 ----
 example/k3d/lib/k.libsonnet                   |   2 -
 .../k3d/lib/kube-state-metrics/main.libsonnet | 135 ----
 .../load-generator/load-generator-config.json | 630 ------------------
 example/k3d/lib/load-generator/main.libsonnet |  54 --
 example/k3d/lib/loki/loki-config.libsonnet    |  61 --
 example/k3d/lib/loki/main.libsonnet           |  64 --
 example/k3d/lib/node-exporter/main.libsonnet  |  35 -
 example/k3d/lib/prometheus/main.libsonnet     |  90 ---
 example/k3d/scripts/create.bash               |  20 -
 example/k3d/scripts/smoke-test.bash           | 142 ----
 example/k3d/smoke/main.jsonnet                | 512 --------------
 example/k3d/smoke/monitoring/main.jsonnet     |  61 --
 .../prometheus_monitoring.libsonnet           | 282 --------
 example/k3d/smoke/spec.json                   |  11 -
 42 files changed, 3138 deletions(-)
 delete mode 100644 example/k3d/README.md
 delete mode 100644 example/k3d/assets/alert_firing.png
 delete mode 100644 example/k3d/assets/alerts.png
 delete mode 100644 example/k3d/assets/console_failure.png
 delete mode 100644 example/k3d/assets/logs_alerts.png
 delete mode 100644 example/k3d/assets/logs_flow.mermaid
 delete mode 100644 example/k3d/assets/logs_flow.png
 delete mode 100644 example/k3d/assets/metrics_flow.png
 delete mode 100644 example/k3d/assets/metrics_flow.uml
 delete mode 100644 example/k3d/assets/pending_alert.png
 delete mode 100644 example/k3d/assets/traces_flow.mermaid
 delete mode 100644 example/k3d/assets/traces_flow.png
 delete mode 100644 example/k3d/assets/trigger_change.png
 delete mode 100644 example/k3d/assets/trigger_logs_alerts.png
 delete mode 100644 example/k3d/environment/main.jsonnet
 delete mode 100644 example/k3d/environment/spec.json
 delete mode 100644 example/k3d/jsonnetfile.json
 delete mode 100644 example/k3d/jsonnetfile.lock.json
 delete mode 100644 example/k3d/lib/collector/collector-config.libsonnet
 delete mode 100644 example/k3d/lib/collector/main.libsonnet
 delete mode 100644 example/k3d/lib/cortex/cortex-config.libsonnet
 delete mode 100644 example/k3d/lib/cortex/main.libsonnet
 delete mode 100644 example/k3d/lib/default/loki_config.libsonnet
 delete mode 100644 example/k3d/lib/default/main.libsonnet
 delete mode 100644 example/k3d/lib/default/mixins.libsonnet
 delete mode 100644 example/k3d/lib/grafana/config.libsonnet
 delete mode 100644 example/k3d/lib/grafana/datasource.libsonnet
 delete mode 100644 example/k3d/lib/grafana/main.libsonnet
 delete mode 100644 example/k3d/lib/k.libsonnet
 delete mode 100644 example/k3d/lib/kube-state-metrics/main.libsonnet
 delete mode 100644 example/k3d/lib/load-generator/load-generator-config.json
 delete mode 100644 example/k3d/lib/load-generator/main.libsonnet
 delete mode 100644 example/k3d/lib/loki/loki-config.libsonnet
 delete mode 100644 example/k3d/lib/loki/main.libsonnet
 delete mode 100644 example/k3d/lib/node-exporter/main.libsonnet
 delete mode 100644 example/k3d/lib/prometheus/main.libsonnet
 delete mode 100755 example/k3d/scripts/create.bash
 delete mode 100755 example/k3d/scripts/smoke-test.bash
 delete mode 100644 example/k3d/smoke/main.jsonnet
 delete mode 100644 example/k3d/smoke/monitoring/main.jsonnet
 delete mode 100644 example/k3d/smoke/monitoring/prometheus_monitoring.libsonnet
 delete mode 100644 example/k3d/smoke/spec.json

diff --git a/example/k3d/README.md b/example/k3d/README.md
deleted file mode 100644
index 10512b2bd92f..000000000000
--- a/example/k3d/README.md
+++ /dev/null
@@ -1,128 +0,0 @@
-# `k3d` Examples
-
-## Agent Environment
-
-The `k3d` example uses `k3d` and `tanka` to produce a Kubernetes environment
-that implements a full Grafana Agent environment for testing.
-
-### Requirements
-
-- A Unix-y command line (macOS or Linux will do).
-- Kubectl
-- Docker
-- [Tanka >= v0.9.2](https://github.com/grafana/tanka)
-- [k3d >= v4.0.0,<= v5.2.2](https://github.com/k3d-io/k3d)
-- [jsonnet-bundler >= v0.4.0](https://github.com/jsonnet-bundler/jsonnet-bundler)
-
-### Getting Started
-
-Build latest agent images with `make agent-image agentctl-image` in the project root directory if there are local changes to test.
-
-Run the following to create your cluster:
-
-```bash
-# Create a new k3d cluster
-./scripts/create.bash
-
-# Import images into k3d if they are not available on docker hub
-k3d image import -c agent-k3d grafana/agent:main
-k3d image import -c agent-k3d grafana/agentctl:main
-
-# Ensure jsonnet is up to date before applying environment
-jb install
-tk apply ./environment
-
-# Navigate to grafana.k3d.localhost:30080 in your browser to view dashboards
-
-# Delete the k3d cluster when you're done with it
-k3d cluster delete agent-k3d
-```
-
-## Smoke Test Environment
-
-The smoke test environment is used for end-to-end validation of all three observability signals.
-
-### Running
-
-Smoke Test environment is invoked via `/scripts/smoke-test.bash`
-
-This tool will spin up cluster of Grafana Agent, Cortex, Avalanche, Smoke, [Crow](../../tools/crow/README.md), [Canary](https://grafana.com/docs/loki/latest/operations/loki-canary/) and Vulture instances. The Smoke deployment will then periodically kill instances and check for any failed alerts. At the end of the duration (default 3h) it will end the testing.
-
-For users who do not have access to the `us.gcr.io/kubernetes-dev` container registry, do the following to run the smoke test:
-
-* Build the Smoke and Crow images locally (from the root project directory):
-```
-make grafana-agent-crow-image agent-smoke-image
-```
-* Run the smoke test using `/scripts/smoke-test.bash` script.
-* `Smoke` and `Crow` pods will fail because the images are not imported into the cluster. Import them running:
-```
-k3d image import -c agent-smoke-test us.gcr.io/kubernetes-dev/grafana/agent-smoke:main
-k3d image import -c agent-smoke-test us.gcr.io/kubernetes-dev/grafana/agent-crow:main
-```
-
-### What to look for?
-
-These alerts are viewable [here](http://prometheus.k3d.localhost:50080/alerts).
-
-Prometheus alerts are triggered:
-- If any Crow instances are not running or Crow samples are not being propagated correctly.
-- If any Canary instances are not running or Canary logs are not being propagated correctly.
-- If any Vulture instances are not running or Vulture samples are not being propagated correctly.
-- If any Grafana Agents are not running or Grafana Agent limits are outside their norm.
-
-NOTE: The alerts might be in pending until the system settles down.
-
-![](./assets/pending_alert.png)
-
-An alert firing will look similar to the below.
-
-![](./assets/alert_firing.png)
-
-If at the end of the test any issues are found they will look similar to the below.
-
-![](./assets/console_failure.png)
-
-### How to trigger an alert?
-
-Changing the avalanche setting for label_count to 1000, located [here](../../production/tanka/grafana-agent/smoke/avalanche/main.libsonnet). This will ensure the [GrafanaAgentMemHigh](http://prometheus.k3d.localhost:50080/graph?g0.expr=ALERTS%7Balertname%3D%22GrafanaAgentMemHigh%22%7D&g0.tab=1&g0.stacked=0&g0.show_exemplars=0.g0.range_input=1h.) alert exceeds the limit.
-
-![](./assets/trigger_change.png)
-
-For Loki Canary, the easiest way to trigger an alert is to edit its Daemonset to query for a different label that doesn't exist.
-![](./assets/trigger_logs_alerts.png)
-![](./assets/logs_alerts.png)
-
-### Architecture
-
-By default, a k3d cluster will be created running the following instances
-
-- agent-single - single instance
-- agent-cluster - 3 Grafana Agents in clustered configuration
-- crow-cluster - serves the agent cluster
-- crow-single - serves the single agent
-- cortex
-- avalanche - selection of avalanche instances serving traffic
-- smoke - scales avalanche replicas and introduces chaos by deleting agent pods during testing
-- canary - emits logs and checks if they're stored properly
-- loki
-- vulture - emits traces and checks if they're stored properly
-- tempo
-
-Crow, Canary and Vulture instances will check to see if the metrics, logs and traces that were scraped respectively, show up in the Cortex/Loki/Tempo instances. They will then emit metrics on the success of those metrics. This success/failure result will trigger an alert if it is incorrect.
-
-### Metrics Flow
-
-![](./assets/metrics_flow.png)
-
-### Logs Flow
-
-![](./assets/logs_flow.png)
-
-### Traces Flow
-
-![](./assets/traces_flow.png)
-
-### Avalanche
-
-Avalanche is used to add some additional load on the system and general testing.
diff --git a/example/k3d/assets/alert_firing.png b/example/k3d/assets/alert_firing.png
deleted file mode 100644
index f134cf8f2b44dbb413480f59bae74acb90bdaf1b..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 163588
zcmb@t1yCJ9_vkse1xRp*1b250L4sb~-QC?20t9z=cP{SkPH>0d!QE|1zW>{|@9plZ
z-Ktl0Z{5CAGt+%~x{v(MnP53tab!e1L;wJgCBBL%000#D?dt&#`F7+4;m@bHA1Fs*
z2_<-V_~i}I@3+6WPNHf~inb<BuKEtffT@kGwK2V;p@XrpjiZ^Z(<xMk0058x5+a|K
z+|rI#UA<;!mVvXqwC&x9lQ!!7T8!Z}eCS1~_tE*^f6|H8L%}h~bwN;lc@GU8*Jgam
zk3>%|$3vCx8QH=z{wNLy<6(=`jjH?TCHMrvHiXM9k&(tHfnfOVy)gX8AMZ<I{#;f7
z|C+)R$YMQzj|mqYberM)ZNMvQ;~<m%ZDf}q<?8=!d{lBikJnWiALgJWWAWc#oQ3^&
zVz%#3vsqzw-SNd@1tirABufXC`hAmkljcPl&l4p<|2q4{nwKOkZL2hoSSBr`wJ43?
zDEuj~`(KZL)+0-1MGBcI$y6*hByHkwrEw7d)9)*Gk%sorla5y?%K!U_^x4Ax^-#hP
z7Wm<>Fmkg2lT81lDrsiI6Z_YPGWP#B@&1=LyW7+LCW$_6;9|?|csG@Pr{tfk$m{Mg
zXFF^4%MbQj{k8-L<zAXjmHB?x52aihw?BV~b+5NGTmq!Ns$##My^Is!HfoSkj1zC)
zj3QR61l3kv`dXv5ypK;%At|*w^0u5kS~(5yks(k9^qOyWN_~kq6X~SjDgW?6Lh0iC
za{p?{$u6|9!S25+DltB``?S_!Kjf$Ho+#jBed*qpy*@v^R;<}*xVsXdnmjRLm=JkE
zt1iNGK9;CUgw0MEXze2yx3cg!ceN!U+@tP`Vo_eLp?==KqF;K8p9bs2YOG~u>>(u~
z&}eg@F`Lxn&(nxTeLSa2i+bFamS&^S1UqxYQ9BT25&?2gqIKsr8P`0yJJ`MbQqGxA
z(BEPypyl1XR_RV!y398@DEc<*zZ9<tb_0=NU?N)p+E#nF{uWxS<DX%YEQ5IEgr?)t
zKY5?_0&fef1yjc|ve2f&6+>NnDewt2JEn?3tCUDZwBpiS_6#6cAj&o~qLosxB}Nh_
z*B9sJoE9l3KL)SY>fZZlpv5IkN}Ae8gO`2QbiLheV_rQ}U^SU0p+dB1d}wibWO2Et
z3+3HV^!(ho&dt~c-ww5M$U-x_l}f3oB4c48|Mqt8^kqUmTk5aEHd+Y7l?%|z9czE_
z-rao1bD1qD(euz0{LFe&?9`0ba+4_Eu^JEfS>UzKn0j%ZQksYK+YZK|EVbb$YRw1^
zb^b@{n~n_p_SVzR0(U`<lZVaDeZ^sIy)D;uU2Z$G-?c;GEzZ>Uf`(5A?m^%^)-LeI
z9W{T;Otmtz;#5<vqc0axw4Hs|0nhb1(j31DznabG3dot3aoR6SGd>A5bq3qltjUOb
zCmV`M3GW@Bog7*$+9z(XdU1S?txleWq#}5kZJn(cw!C?-JYJ6rKFX#Ud=<PN=s#_s
z)X``%be(R{abVDpn|7JX+aGfS^!jJ4YZB?3)a*<y19%B}S_H#2?Av81yqC7kt@c0D
zy`Bw|+B<uA&!~w5h>U5=soOkuFSK7Q?0{b+BF?Vc4_k%Pfiq_hg}lkh28Jv~nK{1j
zFZ3z*g8K<>9SOF#tz6EF=NZT?^FBvS#(z}^zxL~)+1<lFD`4mT`WbLzBVj-c2*qk4
zM#k3R>kw3jSbLmB)j7fKgaF>xxsFs2hqKa0)Y@KtheHMEeD_A1kh-&GJ#9I78uo8#
zIeM@naJNgz(ghxt18EbtF2mBoeV+rrh<7ZkrE2NkY|WIbvj8i+0#y@37XJM&Jlz8r
z*!2&$iUSpe#-TLxepy7|Yl4;D3@CD+=bS3b80!|4*Q&mBQCh~p!l4@o=OED0G^-E*
z$XzhlF147vmj6*guW~J3Em%#84u`7CcO09#R+LX>akgGGwwv2+qKpM)jC<|)R72A?
z+V3WkQ_2qD&#bX~MEo)9FkalW%sYN0_MQ6-=ru*}sZ?~hkyEfvm)%${SoJOwYBoCR
zl}lb7-8u^J8|eX+uEvp23}CNYn-N3ot<lc=`V@|0(Vuv4%Wril9M1sbcGU@`ggTD(
zvjiIve+wMA8KVFsDf51#Sfpp_OEQ|n+|YUhn9q(<xxRR@erv(x)?`c|b8FswgOL$7
ze&+kn{UEGkHRmfGEN81<HS=-$T?~;wYA;r$G#N{lyfx+nAOW+~Yn|G!4rlc0vX#!Y
z5dK|HW~6<2Kb1QOdC{U%iYe=f1j-+736`fDsGPsyDxg$6Jc45pBw%LPsjlKD`90=G
zpSM;sRR^enP){qcfX#mC)A!Rv-u7nq<}G6Mgrj0^r|X%erA<U*t0V#6^68OML7P8%
zl7jU&r`O_Jr`v<|I<vgU`|KAmuE+pDyproac+<1Y;8eD%amnU^{nsRbj(pRpne84h
zz<3aUS5%jbqc7EC?v&g@shH5Bka|R@G!s)6gfp)aEk5#x2J8nPo@~QC9+WrxOnC-m
zk)5nmF^m_uc!MZ0Cv~46d$@x@WM|hNwfh>eeVKv+dm}xZA_oc$_UpSg1P~T`%T>0e
z*k6uGC^rW{9M<h|#|ve%em4w(%kwJUbw11dFn}8-Tqj~K%GmvLhGvb&wRT)sY9iJ+
z?}uE#&+Bo5J+lHaG^Vu$#Y{&x7PH>-uy7;?N$Sw7-Eq?^V|1~>ig2Y`2AR;EME$#Q
z(8R05ZI`BdFKd=WmV?7apmp#&_zibNK;ftgB(PSsCz+ubssgpdWt72t)mP^KL99}P
z{9rau{SgljF{^^;L1DfBn!qu~W_v`4U*pG|LgGH(!Hn_KZ&z4O>WELo*@K8sK)3w_
zS+GdNi{ok<{iN%4N{UQL3pqjZ^Kv;KZ0Cm;pOuo82gm14shHSU$zhOShknndVq^gp
z)zDt<ruBD?AjH10sRfTm?u6YfNrXv#T;Z?Qw?VmP+|FAK_%22d9sHKvA>>;o?MB4)
zPRAFt6aYZ}Iv7d2t6RO#YCbdJ2zTomto^jO`(@F_e>d#U>6rU9Zj=7;VcV)CVwTRa
zW($^9#5>LeB`Wp<r?6kO-j)0q84t#NX<rIVY&-6kFA#{Y6*7}M47!rLb138*qUOHs
zhMI1M`MqhH?7c%@e$KMGI`6|r+eDDJAU8+F(L4J^xx4byj@hN9go^I!8bnN>Yjv?_
zY1&4Z3ZRncKdA9NnO+D4zHU6mK<h?E6||W|lu#RSlSi)j?AXjK{=gQmJzz`8KW&S$
zsRy55EU$i{qUA$(omk`V?C9DyC-na)iv2iJ(%3tlc=7PKpa=<&6e6W#M|dp;NgmG{
z77&3N@d*=_sDF|29~B(!pK6;9{&rp7zxo`|v#T}2MeMGK$l$R&O5pq~UC_-PR9il_
zjQ0iK44m1XN!P_9n=Y8%Q)K8rw2pkB2SV&|347h915lv>={?TOMsu<V#;ZpUgCb<+
zKq^5mpSz>}>0@DD^D?FVoe1rR)kYVVxjbZZ0TZY9i~~VCOu**uhT1(oaRF$liE?RB
z2y<KYl9_0SRzfrJW=-WrFz!OpF#oROmOS-aDYsj1Yj#F!OxxBLj36Zx`L@py{a!zk
zx3A7pcWRz(Qk9*1+{Yt_oE3q)E(qHG6-obtaQ_+9L;xr|8z;U5QNX!AWX0cXL}l<?
zCkfPt&yB5%!T@U-)=RdLe2(lgHb-zns`crLOYQ3ox{AmEbl7Qn%^wZfk}{OZB82Sk
z{o}GdwE19ysRQdnm1VaVrM!jKDn!5hjL_D6l$Xlli2Sq_x0PRZN2R38i;BQ$`?I*{
z*rScqf+hWun>=vv9>XlR!-Y}4SR1|L@cUmw1e(}LMT>;(4P%zdW&(sJwWtlt$ZA=L
zA0JA=vhl5C{g2`5JT6(LlY&K-(+}67d$9K&;7Iiw9)L+bMkKtv2GC=}!VtjA{*bET
zja>%`$YDreSf`~S^j38XEAHoL2_38GU;uX(8SQ*zU;9@eVRbT~1T(qb14*BP(W)Bi
z3bW?%r6i*&GDC)AiXCfsoRx&`e!C#gn2yI$NKv^OD3HUJL}|zzBLE9C$kv-~4Ae*f
zuwDBzl>(+HvLjc36@)t4vmRc3H+Uw}q$p#l?2%_K3PGVr<3%{`c2Su5i4Ev{r{2U(
z0i$Ho7RYvyl?65%Q;?RYx$I7fNk&WT@#EsOJ{X4roUK-uOzqW<pz0`7OjhyTFM;0*
zf-})##yA((yFsvJ3Q-BvmfnQN#L1l|?)IhaPllmQ8$p@%*S=R2A@DpgHJ-EW?hQ38
zjxwJH`?dPk$e00c2I`EaT2!hCaIp8_AgV9`&|ML$(${L&8G4RW{0xUumK;x>zO_ne
zurz=&P%|jo6v(Tfr#F{1(`Kx{II(7RGY9+{o0q?+xCFlYPZ%;WdwJizlncSEh8O@*
zR8vX_lbaS3P4@+W17^ktIP(&qN0TsOqi;LAd&lKf(eRkRtn3(%$fmU>CtJpano`q`
zGSoc%DDQY_dp2;e$WUiM8RpWv?P1NC#sV>2(0l`g<gFN1dEM>Kn=5~M-g{KJnJX;i
z@A6WP?~HUJG9G1ceS`GlR;7Na?j0d4v6r@GVg=&M3$~d%=GG#F<k?2UU_4;6M4nzo
zeyyL**D%p@cH}8wm0Xb+obC#f#OG7&QJr;ORnpPM<=*yuE%;MYa|H<bDK6j5A?<UQ
zS-w7KDB#ISg($g<#E?M(?@xRZryM#eRb*}P!(d^BW?VS>>S}AI75v~nnU~l*QLWXA
z(E<RITcfu$OX}xxAGZe$*_M~fG8yq7ST*e@a|^|3N~j6Mb-#13_g0o$FJ-~+QPc4h
zUY_)3B>=#L1&91o(MYNl1M%KkefVSZbF{pH-fCG<Yy&$zEX;x54!(4ZgY7JD&0HKq
zF%?>IhT@>m7vQI4Ib@Ad_o*bwo9&%gbbMU1TlB-B3+e`ho-H4jCa==&e)cdEiosk0
zURxh*IbnhGhk5@wB5ym6i<cUg{gZ=5O;_>{>nQvb&X@L^=r4EMr<XguCV(Da%TZ*0
z5aP_|vGvrItdw-8mxkHHPqa4vUbi!xml5kxgc>Nmb-vo-8z+lkUxX35`(kdEO{)Y*
z;NfZ}>59b?lTzw^xr(R|22!{QfC*3qwzf{msT!JoAqkrEF#mlPc>9IbVlSIiuc*-?
zpLSus_;^s%#3T*1<3;QmHXm#?q~0Q+-W)&Uz7uZ4A1V+b<fLutEq5go90ZTT!Gp;C
z5Y~cQ)?{k`nz9vpGW@pWuFnON#n>#6A>^cC`liR}7<FICG95@;N&JScI%SRBC#6iR
z`S$O+Ia!y3)b4V?+)qnGbdjGkU60k$A%U+VbSH{A^^+xP2|5#<O)<FBGhi9B>kfwW
zh?5Qb#|Qe<r7wrY5JJDqmC`1pbl)8vDY)>`?8W@iVhbiYvv}J68{uB1@lO=iib7PW
zh6A*3O3bf7KD0uBKwg2<x5Zps=^HfADXl(aTCdwA@8g67WEri8$|~bHTTK><9>TtS
zqwy}m^`qX&dq<_-U~`E1`)RrEc!@77A~P+%pN{SUpgz$_gBMZFo%eeP|Kgo~wfN?I
zVB{lV<V*NfTxX57m=Z6rK6Yj-!nw%eYKM|KTntSov;4AvI3a*wKG@Cog6%}?A!SJL
z!3}pTCCn@6bRb&}9Q&fd0ahN7pG#eM4mKKr{|HF4B^d(%L!)Nsl0}r_xbJIE@}WA~
z+XD<kA9>ZXrx&DVp$5ID2^(n4$`W&d-fl@v)cr|q1n5bIYt?UB6hI1x^NjHm@n+>R
zWI(t;tIhR=n!jDXSSU-*Kg9X1xV(jxJ#Rge5suq(qO}91XxaN-0`9NM{|Xx`;*8RV
zfK|qHv~<6+ne4o_zDzs?UT4FwowBpszv@Gh)cH;8N|AVpV7-^=d+v3$SaW-%ISU3u
z0CKZu#h+^wk&a96n=zly>vv!%A7e%l$VvH$)6$8aC1L*ph?j<p%hR0crKR?ktHh85
zv=ZdZxt+PfM=*u1CKvstswTds#rP2G&^!3q+5Jc1pbJPAi@i-_P=$#xu}+;7Jc}-W
ztPOEd_GG|b!;zrgbn%x((P00`M4`>_hTEf;x?k*v7vWAIR{>V?^WI7JSzhOQEylI!
zK7S$MjWI#2la_JHjMmTJ)Ap~A8joqmxlx_C?JI;R4g$;lk0mV!xEpM?>Mm3a<g0(!
zrWVM&Hab%5E!|GPD}+*aatk#0LegO-FLU`)ZkfT4(Y6QPzrQ~C<G?`FVz26ie>U4F
z<}=3|y1;z^R9~Ckjy-%Vu+Cg-`>r8_pLzDu{c}5(mooES)3nqiAOIG@ug03gqO<b=
zLmJabu&VU(!Sb_ys7-$68plbufH?23Jv?a^IsA@~hMEtKSdJF-3d*Nbi`J*RwabU9
zvcX7BQjw8wN?j}Rf&&BR2txBzEH#x=73vKu*qL2pDo-=N6#Qu{B}bCiOpL<2F`lMo
z`zGLXG}EQc9PZhIYpe5Q9i+zjGp*H=k$HV!qEx?QcVMq#t-7niP*MC#@69SNy4D)P
z92$k0Gu@+#lSta{ormA1lU(!l*8KA)f{m;_1;_7SbCxj=Chde$W7p}{(eh4a=5)(D
zJh#Aoj}>!xSBG&tF3>_l;qBU4$X7Q#d4GA?AMQtA2j)50y3CrhF$8bR`HNqE?IhwL
zg4Sn^>!XLsCu+e~%uN*=TDH%m6wYS5xePyBFK&$$W9@r7a8`MGznO@L{K)5v)7GE1
zpONxD<Su44ydjeP&4cpv<j=tWR3~|HY$$)Pg2vmF<q|7CQ@%mcm)2;<Gv>KH0Pf%=
z`K4^!==@+}<<`4s6<}sjYprqP4?9z8Y(_#anIKmrl{-Z2Y;z2bRXov(*jw(HZt;hL
z$l`+m-hb!uzBZny$WDoK+-o3iH@pE0Zq{&$&zCY~$3Hml&v5q2Mpb`eSeIdC1;z_U
ze(UbG@fD?afcZ^nm<I6%I!)*Ye4oen+W2X1``{0j9q&MyF8foRJ)-oxJ0Y#Hrn%TH
zUN_T48z19AmGq%tR;xeTCod=8Kkixxt8^l<!rnUoo%WI3%93pwKa}RhGn;g-qTv#p
zE_Eu>Jgp`}%!%n}pINu&54lnM57T^8B}gp~UUe>a2Lm!snOeCv@}t{?32l!u`SuiO
zY7W`Vdw)>$w+Yf^GCfa(Q@7jta8#z^LyXrMp33bl2MH#%+uKfk@&E48fP(y0M%D?%
zTDN8UC1#=C^LEU<JReGso{)JnNJ3C+)b?TO=)5k}COqyc)zsjJNjcP+<zHy}>r!mk
z^SXrKffbvZGRRarwIl%d@`TLDWETM<+&hiBGL1H~t?oQ*^0F@Aw3X=Wb(>=cVaR=m
z8lgB~bgZKyGR4o!aHm@Wf12$W7W`b<K4xewF|__V3zGVJx<kxaVwH1xNxAy;oJd`0
zIriM-nU09A`{u%ay!x?yq@`V2fXQ%^#!6nomO$M0v_-#%sJs@AUwgBsP@%<JNa-S@
z;d1_J`(~rF$d1;StSx!C?&__Hf9G_#9=N4+x40atAD#>A16eNVVopz<OWEv+Unn@-
zw_CbjB^@@Kj6FvgrLA@Gzx-R#_gf}oDay$^y}e{5eFM!P%&K#Xwa&GqXk1^?8%Yrb
ziqok|sd@9Ql!w<_LAK7Od8FbY>;f{10Nvp5R#S%}Tpqpd&UyT0fi7>r`K<KxeZyu0
z&V0Rd$>GbjwyCt%?d(mG3V8hJSmzum>@T_Xa2PdHxOZ1=#4-8jbiil7W=WbzKJ8@=
z{bR%*jXwNuAiMv6F|jfS9)(7o0So_h$zM<C?MWz6QJ_zj(AF3k=jvytFizt$ll+G~
zzdD2r^<If(r`Q@}QG``V+Nk~qpF_d+{*_Po&wA+p1)dB17q9*!2)my1<=+YaThR4?
z7f^R-=gQ-mwH)rRfqDZdiL!;IcDQNy{|}t}PG9mPr)MmMUB<Xg#JKmjN-3{3%m?4Y
zsSn|oEVJzSo8*1a**ARGD*KD`2>)dH{2E}^NRpn}tfT0iF}@>i4Ss$a^Tq1O5TN(U
z%=cnlv9rwCIKVd;7&cK6%(%P6+gogYQAO~iNQDD_^5yS42J_*Cu7%6D)hircr;lHn
zjuknwg+c&ETFSf=bBm*Mi{o=mPg%#c+RjwO03iL8)wE<^MNT{7w2P)4DJ23i*jVE7
zEXwr}`<3h{soxoyShaxvrLOmMd9Zyux$gbHK@vau5+k#ca$Ym)M@s6jjJj2Vja)Tx
z+>&VBF2<tq_sN(<4o-(!t&$R<YP_+!(uC{RNxF1~7pWL_)B}3RJ_YdcELt=c;xz_<
zicQv7rW%{t9Jca2dgC{LCND|&hH<WV4cHxER+*y+I;GMyqfIxfG<uAX9#W0}Cy@E0
zTQ<d-DY=ws2zz3Ct^WAunwK<o8hQMf(ucjYK@b(tYplBtTBJn{qTF|%*GL!l=DLj6
z;2;U`7Ic&S9CW~Wo55V4%-rR@9z(A$83guCom`6s{@7aUo*f@-MN8bLd9G&Uno6G#
zX3^6htTlgN9AhN79?&)Przz8w#OUawV>}>tnTPbdu;g@m=8;e$`O$qHo5D~$6)<<!
zWiz{u+iS&mjBjYu2Qg@LD8Dgc$1n%Yz;JO_u}eLR1Ht7jxBSc(4MC!_Wrqd`?R?C@
zqYhM%Lu};sRHofBhc#q>%3I{`JGlXXU0&ffZKfJhD{heC1^jiC&k1GyG$dd|d7+3>
za#Qeubs{Ao1-qRJ&c4q%!SRlMe^?Vtb;#+^f|S>A6!QA2(#Uj!<2nY9d>D)l?PHaI
z^H^;K1)wduXx(vy^#AD^Q_NUU_gYT<K$}0ZvH)|y4(pey(c%pN{0}%BbB54^-$K2@
z65X<6350-^(Ng0LbpA18765=z<=yRpSdh|n&S`nwzS#@?oHC3ORW0cm<BARnLpw}d
zbEGz!|FGfD#2}M@Wl0+-QhW=C|6-%!^(6|c^uYCpU_4U$Y<}N!ugU=>HQv8fRi)%%
zlXOPFC~mca44zo8^?rO{9uL}M;MIT!NCuwo_Z#+}DJlefZU!Tg>qy&QJ+#Z-3AthR
zW{e%yZO>0ec($vFQdVT}3f+4?azg<a887CW-+NVvpM9>jUph=?+Fy=mU=qVXbAFb$
zMVlWRs1cTqp!%%6^WP%^zfVWEl}?VIwe&ovXK&we1_mQj0YVOqObn0|?>O^h*vk+;
ztskqTM?(M_&MbK#&e3Ana9*5glRvDce-y=kI#U5r{6PT$6z)CH-b*b7oZpB&<7kIT
zNubR>Hn7RR>>zK|*%zENm7p>x;sQnw$Fd)X=e>-pU&i4lSv8V~d<4xmR4`npHBa_Q
zubp!>Z7^RuV#YdJA}`HtLo$t?hGNIt#4r?EJsC0-K&_=-95YdDi;ZOz_a?Cxg<Tf=
zX-}8D{pxGKDndVc2MRa_`gm)L0YV@56u)M5Y^t*8;x7!gR)im24PMbh=)L~#`dlg-
zc!m3*xw;bsxfDjFf5eW%KWgV%R_xkrAwlyih6O%%1l&{mv45eV_o281H?inx(Bxlk
zFr#?@(d}o&Y}Us*YxpxA>*XIwTZRfo!0!^|d*}IsNS?=qGrY)z^wh<^^)Px5k%_P6
zV&TWDUTtp6Q4h21I_(*fF0$Vs11ReWv-sDECVREV%)OVwh-L+BUtfMsIq4ouTHa(H
z`VwsGp7*ko?t64ERyq(5AaRTeL>}NJ3nHm_)s8NI+lL4I#I+somUll?NdH#9T&nhk
zXwt#ZQjojsgpxzVBVyw#;wE`xXO^ypy+T!0SkU29f?uhn3lVN>;1_;jRinauqT+vE
zJa+m70Tg<%bXPXy9u-4snifZL220Z;oMJSyhp?eWw{gv}CTTZ!tr`M=I>HJjzPneE
z!AMQ>bzhe(`DD##IWpy{M(Ap~-=6y6?q(^CjUr!_3J);BOyn2GCZb&1C_IJOHI`tn
z7hdJ};`DvwDo&@irkTJmX5==dwB}XJ^fkQVdH?a;QXW)7Oug&%j{Mt{8K?kDZT&_e
zmn9h|tV(q`^!O;bt%fa!q9tBOHszn$`K5TPcKY*!scT{md{7ZI=2r##yIAZh>z7S!
zeS{{HtZD&q8(M7sM~d&|>2IDO4L&|S#IRx%Il}f;OK{+iXIl;}N8f4TWg~v5pq#95
z*E3|NBCYTcQ)UPu>Gucad$BkGBV($WhcY1Sw-=|wzW61Z<-<^aPf7ean+){uSB}`7
z5HzDP?v=Ejr*^g&@LM$QBzH2QrLb$P`J{@8D*Y`dJfG~06?B>C@R>}H<6FItJ%7HF
zjb#Ljz|RkUcwG+Vu}|Y#=B=c8JLo2qj~J^N?^Pzk<)Hw8H5!MXyH>uTLfSiJ=et#%
zljW-MM@99at;g3vMOX@imFK*C@4T##llY?Y+CR$0%rHQsz5KIF;A}pw1P#fFfHYM}
zs7CQ2V0wb-i@N#WY5{CRVHU7om2)9YDwp2>^*FK%x6j*?<ksGm#WZgn7MDts`aF1x
zpmWwanY*0cPDv#e=B=<JoH?(lcf6DXhp}<-ovp`7F%nZackUs);u3+LB|eWM&|c7K
z0YUgxk69in&8;R$*`cJBPRh&cw1^L657$^5QJLmazT9faLy5E3jQlfcK|{DDoUUhU
z>C&e7Gz<h*%O$BA7rCX;EA-Jml}e8v0Dw8=vv+Kmbr*&TK{=Lf&8Qf){#FqFu8L<P
zMxXFL)`wkdB<#zd@5<Z;SeaPgQvpC-G!`;?s)C$la$>=DF$4r6Ny3mu6y|R;iEM(q
z78++R0H~?hyoJE^%&JGd=Iy&Z{^xHA-cEE-e;g1K2@ZdFXT4bfE61{BP)!>W!WDV&
z(!Gk`fEbEx1Y=$dV_YMWztWqu@Pp3LIK);>M!wKa9O)Z8-Jmjpy%8q#9b!|Q^g&>V
zHo-SY45MEyn6s+Xd5M?mr(zD3c))KLu|DeZKqZg#L~%AbEiNEH%sBo@s36sLN`(<;
zBAg|I(3p>RxUwk#%_TO{^tVM1NoF3Fa$xje*rqf>j>>oIuWlL=o6!C<d<w}G)TVez
zG}g~*UIf^RET<_S@@>vq4kYD0xy~Gn*wd0C3q~t{CzT3KAxX7EQ%3W8?CM{hIeF&4
z-!<u(x(rn$NlF&m73fm=EB}v-0$(CzMQl#&1iQ<E3})}q1ak4}BMBSXirImcC6(tE
z-VBYGt!xp016fqf+b&C6FMBdDn}ec)t1p||;5M==O)U2T23`A3=h#y5QoMBT^!|-m
zim7)(G!rBK*RT1D@4^;W66b@VqNGc~XY%xyS$6#KUx6X}5=;pp8M0*yBpA(Ix=BlJ
z0Fm1@L+}%88&MdrOXef~?F}F)tVZASviOS6wO0^C4IdA}ate}jMd}jCj3Ndjs+LdC
zrTZ!e&M7jaqtE4`t5eK(2iSBVSki=%B5+xd@O%rUA)#)%Qjoy23EDN7rh7U5^0fHQ
z<38}94ysn8NNZvkgI~E>#nhCcm}4!M8Q1Cg!|X?${bSQQv$qWvhL*Jb=!=aB_?f(f
zFbC>pB7}T(A>3np?s#n{{yTFo>yLZq@Yq+wy&Dxl>&J7sdzw-;o<0}muYN`Mr0eVH
zHso5h<}WARktu8HcVdqT=?`Okn_LcSqvJQAyELtQFP1^J?|T##v$YzzI#Ic!L<U4>
zb}k~gKalrHIKHAC(EoB-0P(h&5uHlyf>mE*%-u0RzhuS6xJjemg_>;3-1rbzQEmj4
zE2P)(iPGH#*Bo}oC@*Ch9~je^t5YtLs+iS9@)Gssdkpapx2E^E47CybnM=jc%FpDX
z!oD%{_L-8Fj2{SM(um=jtgPE_SUS7pDPO)#`Ib0X`Lg=~vp^Yr4jivWsXV)DYW<9P
zK)o@eq?8s~YZHZ&R_5UzQ1Iw8UfyJG?bx?u#iQS*%La1JW1Y9e1ItZFnh?KZ>d33B
zhD_QDSaNh`Sl|DC>kxoj5^?GD*7nf;gy;w2x3@vQ*pW=1K)Yt(v`^aF%5(o01o1=t
zQ1>W4`0Ua4qOJ-Pe|;-^%-hOc5@bbQ`T8nTKuoVVP{&$<>h01IiTc-NQcn37dU&Zk
zgR_5uRn3+OHWkPQrFMM716*b?XD=&ert^(1+k9stf<Jk{<m4(XBgV_N|ED(Sk9&91
zhHvyyOUW(D+2a(#G!-F!DALk!#%q)G_cNxAHpP{ANP|5pRBPLp9FE5cS)aer;ve_Y
z(G{luiWmQMAh44E+e`1OVgJwirvGID(0`Aj#CjtAqtW5mAr9|xXgi!Ad?TY_ES<i2
za$jCnz<V%69L=gM_a$ezvX@0SNgz3K)HriE)@~V$+`9|M{j&cy?o&T*PM@i?<4cT0
z``gpI&~u+g|I_V~mUd80@5QN~uL8@nUbKzc_Ex!*LFSx&w4GSs89Ls;X#oF}B6toe
zj<5ZZZ|tdzQYUl#US_Y!pOv}VseJsNQQ#04nLfaZx5(xyc3eMV+&p79_lK$CurDkr
z?dz0R;`#4ab(~9>`B{b<XBWr1a@VuTNCMcZJvQ055&r$u<=P6mhi^M6AKHf2=a$xG
zqK~{t=VgL_xo}IJUp!<E2%aMHQJS2L#joJoCiB`wRw?LzdR=4Z@cw~u7iRMb=ib_%
zX9s3W`gTAQtcX;TDpp+bi1y41Vmcsl#gxt9)Oii>ZhMq+@30iz_2KK~uH~R$SE$8k
zd|k0kbJr5ly8&pveL!^KTPS^{kHvDq>n~2`he!v~V2@sRJVTh^*cVE_q1n9`B4=8y
zDYo;eJ+r}a-y+|_0Z}mhW}C>1+uN65l#UE(?+aQUNed|!Y2HIDR?)2(flwp5tap|+
zuj`5%iB!)`@z&H)Kit5_iwC>uC#j_a-e!9#`;?_@sZe36x@C8&%?>u3L;E?9m8OL*
z4?Qqc(=C!M9Pm>9;io);_ATWKgX;qUAh3fy8q!tt`l$txoc!mIjF(!F8rl~}n0$Mg
z{TA$e4@kg|S_6Jza4&&Dd~tgoS=U`K)#7#U367Mi-%rVDF1FgNcT3iasrm$(ah@~W
zODqT)pkkv#<|A^Y?>>N)a?W(orkM`^)A1WYY;_CVec3r8chW}58p}m$Nu0GHFkZgz
ziwon4srZ&HTeR%_JoZ8kmy-_5#a=_Im#d%FN$^5GTRr+2;6*0wJenERaZ};MMA+~B
zLmrN#<n?k*c=03Ss9T9ho(wLc6qQ_#8cF9}+`v~kFNI3BT?9L5r-%zAo9+XvsEuex
zczptxcIk<cPr)*qScHnt@kkNz6*&1q*-x7G>5*)?Jg*znC*cCsZP(>gPRp2R7&Jiw
z<AjstNC%v`3yF;Q4@<G6lmX|O%IxAluglZk;i`9tKZlY%-xL%l2xFh11riz;whY$;
z6zI{beOut*I!U}wN^Z1%l6<mkR<e9&Bdz(5J?IV?dm4o6NgU30+M19Kn{&lI2`yet
zCtEit&}wVJjJl6h_jPrGsAUv{X%F27k&)tfuNtj~Vi_`eg|6*)XFDl)0Px&pzUot6
ze>c$l*na0SGE2s9eYt<q_naPbljUH$`ZIACJK|vrT=f}qJ~G<)unyn<9THm!v-o|b
z*RMJD)qUDhh-&nEYB*)j>7U7_W5Q!dx^ezofZu{+3Pn&6Zq{A{A7D4W*)?h4hysxC
zMrYcKI8()Al*GAQ_qiYM9FY4fjBn1b7=CG?T7nyykk}OD>ple)G__9AD5WgRBg#Vn
zU)@*Io=cR^+3?lABJUsC7>MHoem~Juu&48PDpqbe_g96B<maC}O&3%B;_@t-H89Ho
zy7@5(KsK3w=`Mp6@Kfj<TP)SU1+n6kZcvV$P`fblP+{`ix{j4$0Ki0lLD7lB`Dp53
z8;7oPTTmQkf94Q5cPmR9*gVbDK7h0W;WTrnVjFEu$0tAh&RAR2v<|<Vs^b{#b_w(y
zgevbVajlA2<s2`tZ%DKO3)pSN6?nH|a420+^u-IVbXK+?)VReP81-c?>3WA#E>rUX
z)0d3&o2hL!PYZ+q$#aCo)W;V&Sbd9pbL;&9Sp_EDR`ik8)2t|M@gJz&jcoB#;Bp+a
z{54{$yB6GBmD?8b1j$6C#->MQU$S3H!Lx{Q?I$!YmDD=qG{SDL?_8OK-fQOTB3-75
zNy_s@M`xw@B(0~4Vbo34XK;c22|6K|E)IFd>H)_Fr`ZRim`~Lwj7eB?#-fxBgQeX`
zhEK@RvnW__5JE#upy3^X_0oqehA~pQU!aH9)P<fd4cf9Wo~S?lxh0DqRtTfr-3L!w
zsUogTdJkx@JlA+&-w`!tsM~t>D(fHMo)|F5FH(7Hr21NwEkLI67A2d+_$%D^#5~Es
z)$c(2%0?%)o19d@ylpW0V-c~0^683OPUK-FZ)}-s4P!IPY1cYj+a@PK4zY<CrATF9
z+7qpGpV50s^hnu(ngQ%oZJ%mlFzWx@Nv#{n(q;}Pl;j^+3=KfuKsr)68q+s)&n=CA
zRZBW}u35?VGT0(PHKX@Y235INsxeL5z9`u`ah@Jiw0r=9t#}!{@I?);e(zF)j_BHt
zwFy!dN^vneiG)Z2us-HEvUu7rC)os*2M6NJEi@d<)rHnF|08|lQ7Ec_6;<AVd{+cp
z%1E=~xV${|V+JYs8dX*}WKzJz!cJ~oaAE}!yPs&Q0ykTq-~M}N<QSTvZh|$?`^JNg
z&n{Ch0#>^x&dIRjCe~SGovRwxWg321q~5(1Wqovu0D#Vs%YoFjYM7{@x!mr=4XrW+
zEv@Zy?J>m?W=Oqu(wSu#R^IM}OE!u~In@0<9|K-`zxc~mW6-gd>HW_dmk>8EXW>2&
zLYs|(8~%N4M2znK`)a=3&@&7iQUH^@g{j&i*2ScPuQK@_3I7^3{}miX{Q67lG9KO5
zPC{q1p?$>_+bp4>u`pAqyxS9}+k-PkaH;#0dC<QOlTI@!@4#ESNL4j$LFwS=9p*YQ
zwbQEdR8G8k93yEbtTUP`9opOq`kqQns~AHAO-49AwTlxha370uv1|R59pNAd;eZV7
zG^z<KzaE4y)+pV#7(3p9rv*FEn9k?Z3nOikRt3C=wrx>&Sb*_{^`Pl5<D<#G6p2->
ztb!BVL|oUg5VKrwbz4#GkC8~uCS?NEzJ1V{Nb6p8)a_K);@aiS;upm*x{MPCJdYFn
zlqgm&Pkof$M`CI+rY>87Ow{lCQQ3N>InoaE-ni7Xtt+B@`z~$lwX4|AjLGgRI|V13
z^2yPpv+8XlO6$~uiL`7GF+B$@&j;)?bdJ)n?1IbK>&YI`3A2ql$66;??qihj>R8?;
zJ~=Mh?X|@s$zpQ>9(mtK=PHl1vjgT5I3Qqr{nJx%OnpZ#C`AvC;=IS@!W9<)KwTIk
zwytci{7dfzl+b#95T8N<XF8iruA|z}#{FNtci(yMDsAz~_R+66s;Qa9a7w=w=vsQ9
z-&Kh>J>_J|84u$>jN%3g3KOUCf9izNMi+xcWzr!seVU9N=jo<=(|}KE8?&U_0Vn+n
z#SiG(aU+kjnUreBVk30*gnn=r^V~~Cq31U({gH%C`@W?)nH~joz20r1*eUq7py_p7
zW1IAX2d3{-de$ALA_#`yu0Q&LErv2})5=l`-xT~pZXUPdE28?Af5_n3Pjh)sK~JZ4
zqAm|nVqANroee`Q71c01#B4Zma$i(>4AXZ5aaulCCIW@^`v(}_S9U`ife+y^Q|^)s
z+8fyc`=e?-RrOYT5c-k0fY7*t3|HsuiNV)212uf%*JkAvAw8pI{S8~n^Ip$~E7x#c
zE{E7i$0ij<;skNRGy#fM^Z^0i)hL#s#yp;9hrdMafF{B71wqZqv%uoXr$S78E8YA-
zYBgRe=ttk%)bqh{ZVqK-_wVz(wAGv~9u{!oG;pAF4ktC#qC;>Ya#j@Cz$Q<C*sN?v
zIZi&j(A28%P#NuWY`8|LgwL%L+Tsmdk~Wll!lccw$<Pir73aS*&2yKN&yrLxU2>4(
z1-erLzaC3bHqt3ANG{jpD*K~M&+&)3792#nniSp?ceqiNDt}CUQF$%Ed_DT~ri=VS
z3un+zX)=-7$z(VfN+sH<7f%7bQwmf>B`bt8hKne@zWf|T4$$Y;LJgY)jxg3A*NF}c
zh&2WXYWSB%>mT&1$d27qiCKl6A~(Pog&`Wp3?q=GBW?WOAn)!apu9qI^~qCxU5WRm
z*DwT!?qVs^J;SN;?t}-qsb^)bf(T1WUv^2+-`Q_TlM<F4yE;d4>j%DkrR^&S<o0NO
z!;u1xA^S3#fZw*Az817Jj?LFp3pI3+_T_ROQYhd(WNnmY3f1dH;Q11l;;q&!T%!3T
zh%RG~-o0dxM@l>`Ua>cp$+2dlbHS(JJT4Pm(F9P(yNnF2oQK_y?N7nth)y4l06`Lb
zgsX{TC+&M+?k;qn%J`VGXMJ*t*xZ;jCvGG4C%ZQ!A$Pb^p#LZ5SQ`T8wX1dLScx)1
zubDHlNuIuYS(WNJW*WRCt0`K7!SSfMY~egizJvs}d25_pveq~>Fv$MBY_I)63Y|q)
z(=^~=i^`y~mGCM`QoLug?zn|zDH3mb4Kz@?ir4X?!gw9rw)YMIW^(6)6c5sqAGg|}
z1id{=#%oa@JQ8hGu1?Qy{N%9lgR&BJPIrASubQl20U-kI^gMj?kEgy54(NiW;;M|O
zEswEZ-|lfFIRDBu*b#$1U%^4gnCx_F>@yqMWRcuKPYQHWXNEBy9aDLhbk3<CY{`65
zEY_Mb`}Q`gT))n;c0+7`$Jjaq5#)jJX(|X7S_U)g<ZMJ8I3>l5r72)cv7YpTR$IDG
zrzJBv6rZ5&oDu|2EmPE?j9?Y;8W_^U%^3qMgvyo08e-B<96Tja_$(MB!6R&dhU&ej
zxC3b{6F@?8CIrES!p3KIH&w{-f2XbFb(?Pkk)}GWo+-(mkwp?xOH4sDn#6$t246}E
zuxZ*=!_BGg=HD02{V1331Fy%ghbO38ct)pWZ{q8W%9ggyDO||r4_w7B#zubmSPW}d
z4TFz}r)j)v*RvZK_Py@eM<6gp$h?+P5vk19vshk&SY!P(Qn@*<3oIeO=J^>#-e0n`
zby5fM>-Nnq6tL(Tz&eK}Sk^_LJlYZ1nAdR^0|j)hYCa*9v(+STj{CQTUVZ*Te!+vS
ztk5ju$JQVF0q78FYL~Xzh5*P0rr>$at>_CVeyb{atzP=HDIf)_jHD?E!OXRlo{JGT
zeIHm%5KHeZ4<#Yg2=Pu!&N4XG2;n!fF(jy}4~Zuor!j$r@;iuD-*#9Y=MLuW$L|35
zS#h5sL@k$^yA2(3^=g}!>(3r1w*{f)8O$DkoEE~MHC&r||7O=0r5<YQH)$%dWb!iz
z`0eI3_7z||Sc1b3so1L_(q-M-Le1?RMGdci)=V<{4#2%~F)in8A{?&E9~q(wsm*h2
zmgZmDCD2+GAH#KXGmE6@q%Ye2CZ>`-BiH;i(rPm@7@&A?Ta(ZJoVUp>nyiU0+gyj$
z!V57`GdI?!s=QKgx5=D$6OF|t?*^=CKeUUU=efb~CJt{c4YIS3HZ-#p;BljU5ur8I
zDR?xH2oh63M?S+dc2ZnyGP=?@s7MoeDQ8dN31wrn`QXzoIxX^5W}}`gCg)Nv9d?)c
zB@BR``5=f$b5dFceG(GRC!kcdqrUpEsaN<I4L8f8nl*W|38vrH)7&+gNOLdEjqpo>
z`-b(J|HqDsrZ2aG`^oweUX|jk%-wpi!%wS&IH@w5-iR1cM9$-(W_e!(veGAmaeZ1~
zKHjrey`72w!{?V1=jr#JHx8h!)=n1JgM@y*xS4O?KbP5=-~d8>>S@u)H?gZQed~d<
z=P}mDNyHy<=L}~R_)53F+L)>wc&p%x-ybs+jBLrUwhbN}r+B2^agAK7yd%T!R7Zxp
zH9Kxsw2kjlM^g8&oUB|E5@C0g`(rBQENgjh6v3?+WBwMS#tBh=*W|xU*eD=A>?}x6
ziQKeLXso75rS7^or7$wi^Z_47upG{TBon(bp-3vy1wCG8vdlB7R(Gxb?CMY$)Lw(-
zpFrc&1L(5(`Lw@>AvU-(E-jV?YF8-FTm5abX7^f9736=fZWBeW$Q1mKC>~}&!3&F>
z%pSR;Dbwr=+ffCiGc_Po0WqU-^9w4iQ5rGAL1@U$@g@!q0`Ox_UE7JviYat!tw94y
z8npmV02mK+k1M#Ai^9;;JB|+F4oY=QT2B<azyyMSqDYcQNbH(xu4qM=DnZ}^7-*?7
z203gId#8+rC}aWepbe_<>8oaLa;7YsF?Bt;Ja>`Eih(Q^?1^E;p{>;O9uBjcX4-V9
z9SG<A2-!YwwHF^#vSPo+$I2W8+Z>exo=#k#$gD$9W#0iMnA6eFcP5-(JEq#j9jM=S
z;W#h#eD#iq5~79%0JLg&uA0smo3h>RM!uLVA$}B~bFAVHf`8*P@cxZ%Zu24DIM~O0
z(w`+%Kkv(|gc!@8<z?@hkC$cN)~U-+d?F&Miti008-ItKCUx@D4a*ATvWJG76u%NQ
zz`qG}T4gQEp37%Ub&C_ZCoa1H4%E^~=${SW0nmu=e${O^XHPP*1L9pOV^jd>vqD*f
z`^Xn~pj8W_Ws@pXxq)2#G8i&UgGzh2z?F-<(&&ex=FW~BQ1tt!r`5l0%FNv>s6;I=
zf~L}wY-}3s1uGiah?e_fgW2epT$S;VA&JQ+W)BCmTpR6VgVddbM6fz{YmGvU8zYM#
zTtYHvRHeUF8cl|-v%+oW3?+oPT(6yC8PL{c@-89eJaxbyM{;aXoRrO&oHxpMoxVV*
ziS?GW;X7zz*1#)7llw5opysnJk>4k8its<>eI7q^Uee&w&=4g-iV9XaWMHE!kIj`B
z-~xV{P>M>Cn|Y0eE)_Li^;Ke<YdS?Q({Ck|EkA?Ag2QQ;+Y0Duv;ghCkpu(l?>nfn
zrE}1!L2gWA=&)|1pOK*ba`g&ff!}82OKLxuu<5sP;7gT+-X5BHTz|XdCGW~LpFyS1
zH#h*$^vus_*%TrHqanQ+x-%#FgM*|HfVNmE6gv!o5#zNjqUJu-Gi6A1Uv+jTgeZr^
zZ(tCgB2EFk(P90ZCDBwmxEMSHTNg;aCV|~`|3d0AoX8!_LSn2l`spSDbewNgqA!bT
zBQ-A9*5rSCV#Kp7XTPDhtg<>2!XXR~53xJg72~;6+UFOaI;^yYm2sBO7VOg|%C&8}
zG^LB8^5w$V`B@57n;yf%cBIF*CPsa`bYsS;VOV?&oay0Fd2ZGxsv0nNFF7-bvFE|%
zG(9)m&ySZhU%z>7V@W&D;|owN`B$yaWRI)D`$B$*7Y`Bz?Wlz0l9S3MD>CYj9S)XP
zzf6pFUL16~cBfB&7TP*`8a9Gor+n6bIc3!x-Nm7>8eB`BL5mX%uJn>0T&F$tFcr^{
z&QCg6reiR)x}dD#o2@8^n;Y327&uGrUtpz}yN@Pzpoh|QCl-VDfqJ#(ozT31siDB~
z6juYHGUoWbR%1M4a^;z+BG0m|(3R7LB551~z%t^}7A5+-<dPHuzTk=;x%K&ZR8Wr@
zB-Q|*XC->Fuw(|i`bh-|H30Z2JE}CZx&5A2OQ1UXChJyvs72J|U(0epN78~?Vwyi<
z8Hn4=1u3Ok_x$|rTw4}Sjenw)FHa`d$Wgu`z5cFXY52qK!XA%Fw#uCSaM^r#>>GpW
zuJSXz-$(E8*gf53H&ii0ZO_xy+(Y0LF3(iU#0vN!dVV=^>3MA>gnl_G=J0bTBb#Rz
zGD`nPg0)QHG9=ZNCsgABU56A@)-+4k*Xm#vn=E^RH_DP6#_qwEom`1GKAI+dfwS-%
z+MZm=<q56D0%ClT(>6cRhzgHI!9i+*fAiQmvz)E1-f0rP`eqt4+L%ZHgN%F+JN?)8
zOdgxvtrM+gPJlMq4n==2h0${^>JzTQzOxR|q>%jvfPr^CC{9b<HiG1&YzEt=6T@7B
zBcYH?!)4KB<i!O?)hYUMG4G1|>#p`o5L3#ypR2-?u?H<U@3T5v1l8yGBp32CyUJXQ
zsge6KSJJoqB4Edxs{qOz5s%k1#Y&XCkO~<bp>zkOESbNpIzR}`A#{&+hc8AX2}}<F
z;@_y{o{Y7`6lkIax)hlbPCoEUFe+-c;j*C&OUd+!`iHk@R;JH45}3Gmp#LX#MkEQz
zIz1S3`b%y7G$Brt=d>3Rw<$%vI!Xi$>CH$~lTf-)UcQLag0)qj(WEf^4#vZbVwcH}
zB?muME5giUf_VEc2HSF8ln2A<6nKotSeX&Zw2Q8sb*C4<DRi-)IFSdA<mN`0sb!_C
z(5zOA*z8o{jo(rR5^LvolU5L<@%fh7%UE9wQOqU}dvEQCp|L*>8<sL7`zd_2QR4bh
z7IE+3Y7iYqpui`G>CoWkzRYUT<g_MH%rO1u`=&3A`$`P!6J|~Plsed^AITP%=#F*x
z$wG7jRHoF}T3?eAaU=^%&%bF<^E1_PD2-Dn(WT(td-T~sd20eYQu@ErkmeLTdArfR
z4xbV(&2kj9JPe5JYfNcI3^R(75`|87vF9h^L=8eUZ-1;RGpORj-jl^+&eO2uZXVqX
z5IO(PSyCBl6}t@8s+0;zLeBh%R5UA1uZ^e7^uw&yt+pZ(+r&+cSr?x><~V~-oGfO;
ziVw23+uYZAO78obfjf1X<FLf2q{(mIFkT)Oy~{(+FUw$)-!Nz^D;NTEcT!T^y$7X#
zM9SG5vi43fQH4$NOsmxl!7MOCWCH&EakviOTNG6D_M}`~_0f>`;tR%sup_~bqm4eV
z>@k|Sz5N;d<%?0Tt&;0w=gyB;<yci7FZIg-)p4GN14kdg<0~n70FY!;apx7za+LeQ
z`OA9JeTv0%Vrb9FY4hRoe3~qF^8VV3Gu-q+t&L7_lQ_Bat+;=X^qSpXrq_ygrSUjg
zTLM&8l;hq#Da-U>Hd{izMJ4BCPcT_|RBzs-8am+T88xH5As{$JE|oR0(Y}<o?{oCR
zS}UXq!!lG32TEJ3+m?lW89`zb{gEbp657_iL{~}L*)sHHbqG9g509R7<#bM6Q5m>W
zlQV$%!w@AdEnI{5Y3RSz0^|mJ#3YIKI6?qL3GQ-@8Iojv+g!6DWLXq3<!^6<z(}Lv
zkQ<of`@#(!m^UawEpm%p56R@1M#T(9K4@RA(JM>_H+v;4>1<!HzsNx_1zR<BQhE*(
zIsrgNg!JGx!ygF10PF}yGrIVRt}~dNa<T={PxvOl{+!%7UP0*?yVO^L;*+0I4)%0#
zOO3&ovg6zTG1D3!_V&hIn^uD4o>tz*+IB-v$t7&mnA5Vp^GJu%2SlKf0omwUX12jT
zPw3OReaVpLJv<D&AE<KX^MtQ+w8>yp?D#~xaLQcl_i~~{0SJe$M6ZryW0*tN@U#6#
zF-Y-)G7rkE0%^OnoknQMB3BV*9-={RO}Qv;?q)>}n`IW_SU*2;duY^&)1#tRz6CBB
ziN;KldU2m&ql^vWI?1qA)ytJ1YGd$r9kFR{c|u$04Hwx~-i=DDrvIK|k1{SINvZk^
zXL~>G@;>E=d}99jZtIpQzXe=3<<9BeNU81-hRW&p88lCTB@jx%v!<~>cM(Wmsk3oW
z$#88vD>KV!-%Aynq*;=Q9^d6meD_2%IjrlNs3?mlnEw_D6}~Gk)Z(Emlc21Yt_VO{
z^+BK8PUyI<-kh*ZYoBa?90aTAdz{RdvVp!Gk-aqVmO09Z8XJ!)=1V!dT%q}v0Eicj
zr;LscL%)2!pH%mbfe^;G62;MLgmb!;4_Rq5sJxEk#gh_|$?~SGVEe63Mh<%+LRfj}
z-+Y~hZC}R<D5=7qA%AR<tP_emWGZI5G4-|`Ad%tYbzDrBLT(c1K7YeS9PKRwVkNS1
z5y#FzzP{lipB&X>5<_zI1GK&x`aj~3iX{oYQ`Vx5)fS1*M&7A(?EXJkd#kXxqNZIC
zNkVV}1eXB8-5nA%cyM=jcWDybNpKJD?$FQ>+}+(>8*iWwN&avC^UTb}Idi73_R|+@
z*Iuhu>04FyVILWjD)@f!?a;L;?jm<e3voYik5tLr>K_-}T&8jMS0bqP)qGJRxE)X&
z&CZ;bg848UH=Ym@_}cx8w2+{i)E!?Ys`Ur;D|{4{vP*pp<r)0z6{0O*R^QcKi9gTl
z29n1Wb7pU47~^hx{U=gycVcz%*<RR3ZuVQfmREV5@+vA{zkXt2c?*x+qsQ+y;%Ylr
zG3REhuG`w$+B2()f)XE#oo6>Z3_<vnvn&%@+A6RX1L)7-VKq0)^xhqACR`Y`ZjDcZ
zrCGC7ib2+;W_E{K7e!zjL;?x4j|qubu1v%I7J7{f8mgg%yFZc^XbbtRo?7(G^V{b;
zG^<O<v`!P6iIoF6c3feL>kk{HYc7^tal&(&t68YN>Pa9+l7NcJou+A1z&;XW?~c?|
z?QG8-g*crNvInJ3U4WB4kH&Om->f{fBl*fzAw(2Oh$J)HO9HQLVaiyF5;j*@i=jrE
zY!qtrh0B|{HN)T>`W=K;<TfTNbzWq6-)vWkdn1Y;KQ3|!kyb`6liC>6m`b(QE4Ld5
z`6_YUUDd60r|ldLx}<VUJrN9oeyp%lr4-A32E`kBvoD0!E}}v3Q`*<hsInBRV{21N
z82MpB8R^2(8V+3K4N!(vz;G(2crYw9mFbsaTxJQQDDc%@rl#(Mry6=IY}bc0e5Y}q
z%n4cqh(fL^a%VDZA!||$D)h_wxi?k{zGI=7)e^6Fyc9ko`#)^iDa-NhMcGX9t*~l|
z__x;7R?n)!^lvroN!uPq&bQ{1-#2l16my^%@gmIB%nlA;^hub$=O-MJAev%I=(fPW
zv?UxWOn8s)&#Lk?5sdFAJ#;}tVTFupO*cC`%fW>UV_u*$8GGWc)Ow{jF`&rXRKmjm
zJ}QjQ+OH(=k}ln3r3!d=QhuKTJ4ol5>Db)B*D<499hxMsQ@JGiVzz^87wHHFIBaun
zBCW}p9+kZhmyT`S_iYAw%gHppfIOrt<Y%;AT-BNz85h~8po%DLWYjviF^k*rLA*Ra
zELU5-lh3bU;wy%c)$0e_OxRrl?HISewWKQP@6n*xlz-u8Le-&*2+}C7vr@J;-JOpi
z7ue!3=TYz7iPr|^y_gS6c`R>wePSzp>Sl0{;?<bS3W#04EH*{dBx1{7Z(GOL(5ATt
z4~nxpXS-XA-vaeF4eWr1V#+fLXj#m$S|tR)xEAJhax$-JRau(XFl8-VW1;P<;h6{~
z--hy(D4zF%2l+OBK1Lr8bC1f_|AJjQtBQ`InJp>6`x*w}WsLFHcyd(7B4IW93cphw
zP-7KgU|yU$ucG)+HM`BI)!TU~bU67HkWpE>>-1}bL_Khh@6!q8X4c1TB4A$U>QjrZ
zsPJRHsWVn&q7@|8Cn`sgTJU=-4U)3$rB)1<pPl0RjaEa0k#CF5FjIyiQgvB?l`VaK
z@Q?Q}9ib;${kbuNep>W$20bm&;kFA1)h%g{3JErYLK#vAESx+12>pGF?>YE;a4B}r
znBo)F&ZS_n%_Tg?SaquG(}w^?a27u_+f==)n;)&Vd~}4u+279@e;aPneRyQHixS4j
zB(9Y{3X<$iEa`a;@dq^yTjsTSnV@ivc<%s2Ml~y>Rz2LholZbU1*A@+?}&Gk^&cf&
zxBW*ygl%?tTS7lWzgcJWm#r1l&XPUVX-8*%-<zw`%_^#RT`G;M2+v=qZ=T$+`3*gb
z!sJ~_hIc(6j?V7>f}o(0N|;S|1*pH6SL)l&YDDcmQ$sv?UBC0xZuYwe@Q#vy&;Lro
zZq2oHRwa^In_~su5Zz=;)H$U&cxI!IQ(cv@B?M6<=i|CUv0QEB{rjF!$;r0j-(R(_
z8$$qj$Iw?lcwN*Q$b^z8*|c{E<^;?Vo)K7-CL)dP#MmsUa&SaJ!;fcO)Q;RLj~K4R
z`N9O>GHwcI4H0@O-T>`@COgg^ciT@}ZBVAyt+P-4V&~-8md7)%CV<j*6#U}BxW9}#
z{O-4gUz5GXICl&lSIC!?G6P|RxD<Z96OPW=fE%w@Wh|<gc}ngsY%3WCZT*J2=Kb#H
zy0p*uqAA(4OAggNSgxWf!CyTdE3CJ@VSi!nLY#0r0uop#g(;MpC8x4+`PO?+1dCR<
zhHMR77rg`PfEEq{99M{4=5N2{$`7v*-=G3R_NssTQ<d~ln{e*3<}|FU%COc>g7$`N
zpRtd%ZsBD-i*~AFl)rR`@5Gln@yiZ!PZHGT`Og>oK9o2G$p*zFc$For?!b1;-q*gG
zf3fF+?JnDcp6&%N?JpQ5rT;;IE}yo|^TZtYH$MJBSCV~n$415agBFY3jL0$k^MIk`
zqsSrq=RqW#IXw7py~CFa@d=hc|GcGbM<PHq4?Ia*oT)TCS!Cio^l*P-Keh%ur~O?&
z_N>qV)K1n-l*tQDcRO3)*N$h4efxb_V}!W~mv<(^)3(*t2TXQn7WJ5vnZAEP3VBWT
z_pO&>bOszmBsbrSIm!E*>qfZ;WB4{9x5bo8jH{e=5@wGhESQW)L4V2VpBp&)g2-xU
zzs5HzFKinj&(HaLWMN`pp}GJP8ixeqAM4?~Rb(JM*K&QtVI^$PnKCyx9CcSn&)1B~
z|8TQ0yK$1rGv`*k!4GXX+!C5XL$A~=?U}|f6`E9U12A)Qu+L4+j64>WQf$GTSI)Xw
zvs*n!R<sL^NSp|@dD`^h$fZKPc$8?q5dZt;O*)Womu#4SK5p7j<=D-WoX}0bhXQQ}
zOS;&bPoay#X7l>{oVVkt(po>L3s6#dCOe)h^-L+(%VZWVAh(ez1FED|$6w{x^CE(S
z2(`!xfC@NlBsK(#2eWOBbX%91x&Zv?mY*bD4n$bayuiiG5zfMf<dzPjjoJ4J5Vv^%
zQ-fyg>$VSH{vO(8Ec6FvnOFg(G|!tdm4bXq$ayn{>%-U3>a~{98Cl+6E>nKrw3mp5
z@Mqg>#L;RnDX(%X53W{tyO$zi4bqKc7BeXt&teI+_9)Orw1SH$6lShT_}q&wT8{vu
zsjLnqqc;a5axg6UR(vUkJqyWI>Bg$M5hnCZw5*ze;_Wj3>TAMFzef>{Mq%KSz(Qak
zWfdBui=EL?epmy!<Osn#A1AF=PYY!2v}+y`O|QX8Z}-M+ufyyX00|`A<aIltg63GM
z^=~@x@bFo_Z1dO(`l7A#B&zS4pTGXcgg4<vJg{K#vLT<#cjhK}S=KC%@9S)2G%3iK
zSe-psh9-Z#{m069`lOOI4QLIrcM<BEaak8XD)o>X(A@6vNE!0PLW0`D<#54zoF}6X
zj>-*!1DOVLBqTS%^>wU;G|7LD)+dTQG?<a#VaC(l;b7N0OxpBvsta(8Qn@>qry`WI
z5ear)Y&-&Oexo~6tskj3R$xr6emn-x&(FEvj_P@+Owx=`RTV+f|LYcAUT+0=YTe1F
z5DNP~@0-c2hDqcv!<i2sTj+O#20It)(ztG)(#4fqAKz2&FR9()w|e|)B!f?tiuy;*
zYYA*H>sQz>GBS`^&A(egmiPAH@Nl;oEec5a_d@sJig*2e$h*t2`1cXm`v1FkoQ8nv
z-(qtBA%a~}2BfkXH%}U98~fi~74Z`g*5hF4wI`i-U5NWGR+-9WXbXfyADkH8Z@rKI
zN2>eJvy5-dMVW$L1swD>a(Ho8Lbj#vKezwo(S86rMYxgQtc;8dmQf``R=dSseG=mL
zcHfgk3aYEyx^);DQ8Ui04s@b2Uz@2J^@+22=@TkB=s-{C=iY%0)ValIdx+ib>C!v<
zI9IFdOuk}gQ(_nlWzthU7RZ<~x=}n|qH5X=3GZ-a8PhMXsv^}!RAyn9OX-rR`L>o;
zL4;4bhlkvXE2&EbefmEHIuan3OAUSrO~<a&c@+&GVA%9Xl7*e`s}U5PiY+bYqPrxn
zUAPQuZmGp=PFJlAttvqc*YwaW-?qPaP}%|)S68qOH5C4>(il^6)pOg}X4jrbG_y7R
zDSqR=2px>SAurd)U1IBK9Jh@y5Kv&go#osBT8FJ73ON^S&3W9lnFlyPnxt=WnfNd%
zU@+oFM@fL|p5=~dWBPpUt{w|%QxZ(=39z4(T-Q&HjaOU;Zx&oOcI#!hnJbTt`Yh#j
zpQwJOin<5sw0c;Tm8wO5FOt)>{ro}fG>w;i+VZesikpc<V?wIN{O}<y+-HvHFYnwd
z?g$giUgNbs?SEe{>18W6Tqr;tEEM)8xOdF6^Mu-+;t=7rS*<cjFn8&hG8<aIadT!h
z>r9=#EelQ>>v|1SoP?IH$ay%^T9IEN*4LY>o}|Uv7cKM^&VZ*__P75=9vkD!FD2gi
zQd;+fN|SWpBk6+!d$Ga`Y2EIuh~J~binAkku7>X9c$;o<%@?Q>EH?Okj}q@sh>MK>
z^6vIpKFmcL`Q|1ma)XWsQ5rc*Y#~i~y3m`hGE1qc;f~ZF{U6s=MRxZh+nY7j#u%vM
zYJk!hutE>2fd<N5T=bbHC@05Jaa|Nj;^tdpaC1HddLIsz=hU?^Dnvfv-eT2ibFb`d
zAMPHk46n61g(+Ce8<}X&7C9{ZyIgCE?U3O2?n$Uwjtju08bL|sbfJc$B!bEGA^hua
zHt)7SR!)N!`=*^4L%TZxqo?pog|6l1nBGQuq#!+OQWI=Pw150A%nX{S!oYoSk5ujI
z=*>sv`E)^dEVn^@zQaIl(;T|Dp-Exivpu&VMM-3HB^>Dh6APYc7f^;e#fcPV@|$WA
z*z3%WRL=Du5H?0R`+BbT8_)FRm*jC9j&)&K(6IiYwjU(xmuooNKP*cCy^<<JDoLg<
zb$?_uR{r@@)zdziQ1I42_~(>$qP{P^dVWxrX7ffvRF-}Ha5h5ZaK|T1Ux<~3i-^co
z>3E+azGp$^5fz3<kO))K(0jUf<XPAHLNU|M)Knx7^`?c;jF>ODWM<ugLSFEM2oW)=
z)IdRw0^{-VlS(8_(!YXZn}6W;3!-3*pYU9a*5pL1=Xj<0;8n)tPy{bW-O?q05F!k|
z=-37_LPE>EcZk<@>Ko>;B4JN?P|1QZY2A_A(Gg~Cf%_B{tnI^d`;K2pviV`NZ4OXq
zsIT7dq~$cKKvxb~d#+gTY0;JNYLS4}LSFFpF_nXuwf*z<<a#ejy^b&6u;&h!r7Yot
zAo?Gv6$=2t4Rb%1*Zvb>U*6Fz-v2Xh-riSc|DQ|B|5@zbEp1T5jO|Z%=Ss-!rM9^P
z-wQEeOp%m9c&joaB8<y%lttt3=Mylhivg8#KYkZx(b~&eD)s#_VAQrQk}j*USPdls
zF&#S!$d}rSzn5&EtoV5O`FQ7!pXaQ}&QRMku8cvmmd)oCy~~BfBzj8&`7PFQZpP@q
z$2#e|5M-@6*RmI_z-=J)MXBA-m(_a+Ap*|2UYBGLmuXJ_08;RrK{Fazk~IeY?qgn(
z=IpyHL8^{DFzWZKRPM)Dy@!=H`L&S==<`nuC6uomk0Uhpl}~Gk0hxrAfjX_#IpsZl
zsW>_44EGevuBQ_+?jmTBj)_*wG7q)zwO$QZmYh(t{>K|sE%f`fl>RdRuUbcqqPX^Y
zskjFHKDBIBIJQYTt!|EMV>29kmk8NQKBL!Z>Xj#tJ<kunP4|TF867JIV>6P@bcAmt
zYvWO&OZPySPD<;o6?a*C^r1879G|smkRYocq@!Xe(<j70UzTqi6kVG;6#}s9BwTwd
z@_6t0#OHQKJng&rZB78@tz(F!D~T`LXE1kBq&oF3D&l2@dS#;I(5dpRusjy*Cs*?Z
zdtymyb4lu?L#E7CTZFNBD2JTbZW7U63~W}ik3o@hT*@5a{7(4ks<PbNcSsiJVn)K%
zIC`xJ3;$jx4N%WDe;s$Tt^?T<Jp(bp>u9e1$mO47eK@SWO`8)Sd-X>ZLK#>&H|1(<
ziMjc85tE$5FrKKSmGa|iiy6ii)dd%Lymr^@pi3MZ2YG8f8^$PeD0spnZhf0KY78CH
zCTxfl_YFTVsed?@sa&4Gos#!d5g`y0a?jP&-T=e4458VFn$gC*xmI>Fa&ADsu3Uyf
zOYW@GiM&*WC95@>R$-6BwamkXTyyE#<wTad203}3tSh}u0k1izR+<@Q|3F>OIVwG~
z>a#6m9WxDbv*ri7KPMP4$0-+0qC}Ok=#NVF@ic>m?G0TKfF_6dc6t}_Yat2~E39qR
zv@rcvP@tI_vN0>g#ld|&d%@FBJ)<QP_Y8ZjIuQ(U7SEZ+L(~1Z$nOGbw1GLm#kZ^q
znZ4oi_j<yV2W^RCk-5qQ{cKP(9>$f*Ay{k8R@1b~rPuy|f?Y(~n|8@U<=!E9_J@0~
z<~b*@-Q+<dCpRX$!c{u@ib~_|n`wMca`+N{@S<BX@NQ1NJ=3;;RG{9=p%sVZTkR+a
zt0xa09vCvB$<tq{7@>DGcAD|191+a;V1uL#`{^N0aH<7?qvYgRtx@xqm7k>0jJg6T
zWhHOmN~W6o84pimEMJ~;ufkgIay^T|_J{;X_9#l7fCn)6<vo<by{!oVqvO_9Ko<N%
z1m5PnjUFohF8<D@0=fN{&pRAD)wQt&ok9PXVDQ~F>1w?iV)L$S(M!xJPk8lG+nl-a
z!8PqR!<CQDd-+?ki}_G8$v3_0l_QQr7Ke#uZcnsA3}q6VG`!{CrEbLN?$E4WTR?ot
zy%S@v-O&j?aC3ThjnA`rrgG`A(6UeXBl*YGWgfcuv3k2FzNkfX4Ts%&HvTAY0IKa$
zUUZr}SkF0HavNkHnBagBw9M8mHNTAOBjsvs_X+h6+wT!%MXAy_EI3ChzQek?aXo6{
zC>2$aeXGgMQ6#>?_u@n$9dm;Bk(+m?@2Q6Z4x^XdycR-7ZI?K%ZqB%FecaMifIK{m
zO(})Wf*>aLXcGPT?9p>$%datj`UdSZMX<Tc^|d9J)$PHEF@J-_<l|gdN|&R`L{cIO
zs+C5i-^l~xVvLSABU9@@eg@ITgx^F!=oI*YtNcu>+^o&dn{8|jj+<;IK-{ka-W}-s
zAPH%SmLH8C6?}g5c&_&84m)Ur(>ZGKZXj(uv2;Vox*WOi41gnO;pg@CXoR|sjFf$5
z9*otDN>f;Kz5_h*HQKNC_qnf^2!wRKJzE2r%Sxvn9UhoHPfaAU82Q+Ug#9#Qu-2OV
z$jbFO!N+prFkW8Nmw_Xr%;-35BxH4tlq=s{w67*XhhH{jqL6EI)l8o^?~NG_4vrdH
zf<S=eZOQfN@&UqY{E{n6zG8HDxuesy@#cyU$ss>w^x%Bhby8+a?J@g}HPV{_kQS**
z<4&1263ka1FDo>uVT5qT5o|Z>dzpwpYvh*Lczto)aG*NhN&8udgwv{}DVo31u_^$g
zy}D3le6diG-@Aq9k7l@Y8O98FNhv`ZZ1!~;v)5vU?LlJ|p035X-&40Lp0A`9ptT`m
z$J)ize$H-AZZ1y6!W%{;xx9h#+Z^!9>`%uxze-E<F9>UUrz9QCbTU#$|LiamuY`1w
zZ4s{|0_|v|^Yws_+OO>0nJh=E)2cuW)aQE(jnHLoXS1TIY28A59f7KxIFqsIYi>^6
zBD^r{u}Ufklm5ce-TB$k0vX|M-Mi@H*2GZ<Os1!Y0L<J5g_mIO{qd2VGdFsv3*fAn
zh2$}!9Lr3%k+5dtafThzr{>3Ezqor`xK)-BU^|$>X^a~(i{E_Ef8mU<_e#roeX!m}
z`Fh})LZNmRb2XEX$Y=qmDpzi=M@ld-81Eh`P<?P0fvxunX0+WhOD{^s@=$s9tJ|kg
z9w(MX^TkyxNK&Kejoiap^{aRO816Qk=Zu#)$~WnP?q1glyL(h<`lJQ-ndM$JmYaj!
z1;}VGI%{|RSOW3L%pP&-5twF7=`&wpJJwck%-akQ_g?rx3+2bAhQr9YiNU{_^UlH#
z8O;)WaW*=`!YH@{i(zO;%kV$~%eD_ckPF?SDhX<Y#VT08<xsse2UYK{k0|VI@tb{%
zq~~^x&7CMePjT|tmqL%rWJ9P9ImqD+VGq!*FLuV1ceL!2TI#fRKNSMjL|M%(yEdxA
z1kSZmDYTkQ0JfTIwR_duYpekA{WYob_Q6}p$wM16yS5~17n4vNv3kwcoV10Yr#++B
z=VNm*cPGEx3g1hP>F{zee=uGe4};{eogHZ1<TK<jF{U=~b(%lScHzn&r!LRO(yCzn
zR3UDH%xk!3)cA7gHhG>*jttSa&YSj;ZbI1kD^&4XPOmOz+GLr>v>iCqUVZ2#N*8>t
zayviFB}=*;u|9X}>E>)qfa$0rN^|fT(%l;%Y#?0~o?^co<6Y9<cKo8WT3BPRAb*0p
zKGn_t3(}vUo}+5OSSBMOh$u7S@x1LSWgQTkPj94!j$AeA^Fu|b{q{?dN?#96sibnL
z^c*icpW4J|+a!KepO_%)!SQh?a^@UC<Nag)mUc)|8?Wv5rZ)Zy%UCEf9Zp|BG##;_
zkNefsTyjs={V+XG2^7?8OoApm--gT^6>cMSg<NKfhvy?$-5kb|`B|M0nabDim&P)A
zYrKngVYSPA3lngmbIV00X*)^GD?m3|lf7Su3%FzwP0c5v8w&Jj=_^8YlUu6n?!Zl0
zxnf-4@nLl9!<6Kj{c4zNXG2R=fnKxQ!HWZDPBk58DIW-c3aNUuyNfssnPm#uwkpi~
z&?_1j1_Vzb#BwIPTrB1vEkV==Jd2q;L{+uHhht6OR}B%#I&MRQd;Xt})Sdv73b}H%
z8KbDPHhq|1{$YMyxea4bw>vEyOz-dF#Hhr2IjMQ|Qo|y9Q`;*cRw)>B(z?s_VAd#`
ztB;E~6;V1UdP07guGVHza&p~C%;kQmvorN|DUOIT$j10Evjv_<Ue%JfYsxVG7@o)H
zUE#3p?}e_=986momTR1yl&5^ulaqfWl1WoeGG{#?;#)cub0odi-yB33BT@zrq_5u~
zp9w5;y59sl8+u+>S<vu*K#DGZ@Je8t<t|?+R)(kAUbf}^(4D#Hy+G&SkVZ$PBoA`g
zBI}&dBNEK_bSO{8z#ZF9OB_#N!Q2}BJQQ69Db~phKo@JbI_eZMmAjJ7_|E4kWvAN`
z2m4mB5IqPFg1WCWq9RkG-(m^sP#TL)N7>5u^1C;Z%}*q@PLtMHQIc!rsvWuAe-ow>
z9_ixA#7UX(#lzF<*=r9^o^ERLr|-pb!&g&vQGC**kDP4G*<ICIW}FCRyudP7HOah|
zY1pd7)y{S_Eq^!s+lPiQL*_WKP$}+80S;Tt<D*~H>_r&kOJnjWF@1Ql#i{ZIUWr^(
zHoSc$EjV0iI!Z=0MP5E8(Avw-@IFI?gC@NR{5Mu+F5vwI4OkdFV|FZ63)y^q>Q}Q3
z^oBNOriLBwD-gfEIM;}As$c)O*ANZ0cB3V-Z_x!U5($g1r+dNXl^!sWDQ8y{t$yeX
zxy%U(MXTK-RL=)f?xbi=|2N0pQeG#PUYto>wP0&{rxXXZ7z^aO{c9%1gAhvgt(e~H
zI{C86Z!H`*vEAa?+CZ;demGR2e_cA6z`C97oYqh>$*#$Ex}()9`%O=Q9-o86Op*Fo
zOJWNqF=33Ju2l~a|HCK53Y96d=xXyAQ@y6UzL4nPq+4snAMo+FH^h<P<C(cBdG#Dq
zz0xCvb}ig!JsAX;Dyo8BT6ApxS*!nG0d_Luf+1@4Y^+?htWzUfPTf*@m^cQelVdRn
zG#dA)``bpvg=gao<GRqEDO>@LLcOntF)tS`B%wc#0X}hPxRRj~*3_s)Cw~N#q;kgX
zeBYueI4G>m>o6UCF3_&H<M&`f$^3HAI}fj_3{X|&Myz?ZkQ_rO1ARgqyL5v5nNF$A
z8tqz!24+U4T2nyoJD8r^-+vqs_QOQS9UdI87*H~JBp|`y!BYtOCpf$Wi%F2>f0u02
z!F=(na^E0DI18kv?YOi&^Kch}R17#_s?GHbi3{)TWU*R~S4?aoLhR8>4hpU>@3L76
ze>FE`=?vA$o(v`LHb&;K(H?h~2pT46%QK{az4{9!S5|9o(i8W#OYTd(PHOy&8@WyZ
zz7w%h3Rk&katBpC*SD^q#_=n?gom1ddK%Lt*R?p!g#?wLZXlMy4V8e>vq81~Ne`)8
zCtiH$rs8Mc4<B5Sjx`<UJpdrrdYvP04+x|siL)OZ0jFJ4*QRH7s3b$^JX4?i5!UR-
z#=9!?s<Fk?TDL0W+%>UF8Z1KMAq|Z*bEb8h<1+AyhO4#rOlq6ilV0V<bAq&m?@wka
z{M$D;6x@~VI@g6QH!VRZhRCXJuDs=>%btDXoql`td~>B|6Vr{By8IaeAS%ZKO1WCK
zpVIm3s&wx}d}Px#CK>s0s){s5W90_fJ$pO){XdiUSsooY!}L`Hl@NtC<>IF+RBrBI
zMrS*5%=IM^s|-57@F1G+oN97PCe?oprOIQ~59VrklOi5(VO<TRb9O<Fdwx9sZpvTT
z7CMHZNk$P?ISeLelf<hnpsZ~#VZ%&$1(XIS!KS?QH8!t>(oES8E-f)a`CM)b-;D~I
z+aDt4t?7@uhp9I@5k9zkCl~0p?1YA$43-|9nBs-zw44=%$1ao~jt2btNncM)fSS&m
zlS%URoEp*Rs`PDVL9p#h?=Mk)@2&0gP?d>=`I73asmp}EGt}~v;Z<QbfflPhvm2rh
z?EvD;SdV-2+b7an@?sMFp{{T6A2H>XMsq*6gAA;GYc6P+orX+IPKeY<_tRg0SMpv)
zc752+3=BK_KGpsbOMh@(E<F-NBl4YTP{2pMA9=bO5QQZyAs`rS5?OvxA8T8Td|?65
z^c50AGTbpeppTJW)_cIUMsrT#7H(sz!WlD4nr|57QR()gbBkIgun|&-s?U7ZzCL#P
z66;psE`&T0r5RJeV|6hjS15B=H9xPz<Hlv!qLW5Ao=wfyRWUo$Fe{+pd3{o|KQ4*p
zt;`p>+x^A}y)BbHPxrjOMy_%%u8zw8mS76HC-$;Eo-(~&Wy$i}nIUQx7#yw1G70^>
z+sckI^kt<tU2nDkhH|!e+VvoFH>M(sA8_!vT1>2_N>Fd+2T}4|K4^+5jv((aX>SJa
zK=@I*U~=AGY$?81705c<D=SNY7ER1O#GD)hEO(3V<%BJ@`Q+iL>W&2OaG_wqM%yFx
zVu#L8*@Mp$h1pof>ue6!7hLE}8LbW*zY8`172rGH8JDb|L2oNwe|`n2rUT!L3Eg&L
zH**9ipko?aJl+dX1zCy^>@=jsvpY*LAz2IAk32ri@@-D361S{=P3nO&l1Z$Y^25#Q
zH`jZ&gFeR$)C7E;b2hHz)_F=AJK6YLs=%GGKz=)*T_=-z1ZFncd^K+}Ls_Z9rewKG
zI(gWZByX$rJz+mNkz-~=$Wk-7hZ;3iz4*fhQYHWgMg!dI#{|{(IPPVRo}?(mvbwcP
z<*f@a)SRXB7|EQdcLu3c1xx4)FTvI*4W6(^72^gzZ0Wfaj+uYF$v>VKbwnf|w9t|R
zYkYLQbp8bf&RX(pU3&hJeTUva@j_Xdt*D`v`)dMT->nA63TAX7&oVd|`QM+j`w2Gk
zLStm;js>C~!3Z(&oKO5STyt=NcesZ4-VvXaXn#dLUHkTpp71BG7ODCM5UJyP`rLu5
z`nP=qjgw~6ssKv@S%LQ;hUN_8GJ5MZ%Yz@T@HPsO#I?-AXIuHYsdH^(E#{<H2^#7&
z<w@y9hL0J$H4%=A_O<jpeB=^ZlfOe>o9iz|`##@Ux~T<iH`-5u2Qz3C<cvq?z3Wc+
zy(V^}L}k`ioo`0^n3z>3)2jA15VNAxu(rr^YxRFdhK0u^)^QkhF7nN@Z7|nl;a>h%
zeuzke-I<+?kL~D*@!3?vqg`KkGpihGJBXEJxr8=s@pFsn165WUpI4z>qiM+OEt3gN
zBycbjS?zcD<#8h8$8JiWGF>4-PSK$ft+;4-Km8U@SM`-CNChRXnG2=0kyYgUeABRP
zP*b7d8Is@#t+};*ISSy%(+xV5>JimgnNCu8)7*VsgfknRf6(0Xo*SK{K+R&Jp}igr
znf0V6qUiV7aBm1{hOpH@&#@zph{}9v<WIFkOqj1iD{K&_ksrEcTWe1FL#a}cMAG=(
zVw6Sn(Rnq_sG9pbr5Bp?Z-2Bx8u98VtsgifhPr!KS7%2bjA>9<dMP7&0`CIRizUUn
zx@D(u5l1IG6C*rGGG~Ij{}Y?Whl#8<M@HYtSDv#c5=_!tTcdXtj{N3(fEgB()orG*
zl}Lh{5udwN)6vP@Rdfaq^_dY+9ut=9)15j{_Ahu{lzE)O;np>BoJ~}sKBgar!$qK<
z#h^sgN4K*ed8=y!q>~&4m3c;)r?>DkkcqVc1PE}j(4Q7-rl6yec@Y@wMk1tb-=YFu
zBm37k)Jx2tfRx2QoD7`$HX{3So6C*J^_=&`Oo_2F+T32UBL>S(w)%9>rf1lv9lAr4
zeKiiJTHHn}Cw=C7vjP_71#q%J+Q8u=m)uj>1mn}Sh=FF<LgRz!250zk??y0qGr{dX
zd^ekLue=>6g(;Lg>z(UXrK`Crr*%Tyr|kr!W*sK=qF0~3(rr66iws0~Cg?ia?)CDA
z(UF}DRGjSLsaK|I!5A-o=um!XMLc-KibN)Oc{rKfDTuQ+3iF`|JB42@EQf|hI1ho$
zXX;nMlX_4$Eesjwrk_PwbjC^_>&)*ZQDeS0s4LHhwboT^CbtExXDT9#wSr4ymrSVX
zbuhCz+4>po2uXJBNkuAD!h(-|qvuwBa?*~m@vf!jI4#~?JE3(~caSBnj4?<j0EhLu
zvmDoLgpafQs|cj_8y&OVnv~-K#<5Llk~#y!d3YHT4%ww9bO+4j&4eeY&7YeLxy|+P
zk7=#i8xEP*yms*H^H&52$|}K@+-}@vQKs<C@3Rposi#SVrH<z3D%kNu)CLNJh;=;I
zP21lT>`5!NYkmqc*G?kwxzx-5;!$Nevr&isIWcv5hKno;FXh{}j}JF9<NJYu`|8;-
zxg2(#$?+WGCi`(F?=HCu6Nx-cJ3fNwr_~Ys+1XWB)_Ck6PQBkb+Gpu$aJxQDNtZv-
zIm1AmhSH~00SAh@a~;Df@4;NEv3)&xi8Piur*GMNS38Mq?U)G~54YEtv(|VyjJs>h
zXC4U`EiB%Z1zEQ_A@-@;x7=*cl#a^~;+{p(t#qvDDaTDaqg&AMwwc|}G&-qj-K8WD
z+AZDPs|}%4;lp!7-!#=2KACn>bWpS+Xm9S58bA%Yez%P&d8#VyKOd~{N3LLL?nlsR
zz>7ZJ#xSjgg~k8~pFeUuw)Lhmiya<TaJ`tOi&NCKYLTdSg=Dz;z0}?9o;SBLBg{RH
zyKgMj)fKV;SBfq^-Cc2D^AqW^sX@u9&(k`XFYJ~??*VJ1R?LAOx?XltJ|%i4lmu^d
zxne7s>9Yt(*B&Vq-kM%}QSAheTNIRdaRn5;!YS1pO&7@@-&<R#x9;Sz+A?UulzD<X
zeVJnjr&^k;^IsaFXoHl<nD0fdpB;9VP!Zc%Z5^hzdfjH0P>6*)eYX9B1pQ|8g@@*J
zwp72dT2D_Jch;*vKPQ0Njd;SaMJh6AF^k1y$HoNoZKT#NBI5SOGA2z;Rl+elPZ;RE
zU9;E+`;s@Z%2Ckt9ySP}%&0f8>7q%ft$r016~`mudOfN(2VG@nb9Y)|En&ux0a4$`
z7a?OAhX}?pd$PBpALGeSRE^pNF%alz6Mju6(YN0YJ5FIbLug`zGeIpN(%!T;SaUnB
ztTdOmTjQY%N=l7)wHJQkJ`?Ekt7;G;`JL59s2BB<P~DRKqOpJq1!nfQ`{4530a%h-
z`%<2RZU=|Q*i6zJ&40M~Y&&y9nd<Hghanv<#Jw2c8AS)sCHhYD9paN}4&(p!$Id0Y
zc<to_Ll$gnEj3Q-V(}{9CoS*o3fGKsWIZ>_@(R#hl-_vrJ(@E;!Yxy|0Q&K;&BD*Y
zm4fROerJ`m{OW_8Vc<{qTiz$@L5_U8Y$ntSn?6T)(wHnv4f~&#s!-U@D0_J+hU0nI
z3YWPQ<v4SulNA>;B<-9W^TyX8F3!0oW>+~H^hMX!YghcX8uuyjvdreTv8o=d^17LV
zuEZ<SX~^SU@dzPvRmrqTf3j3V90J3s@VvqG=CAL#igTvtKM{wARlBrDzibQ-dA}LS
zSj>-n<#RXci7<qsr>>0a@7-8|Q24m)OnAi~X=Rbu{<t`Uz?hQDX?_qXbcCgtBOUj7
zNP?r*0QUL<U7gF~VSc~3wC@$8v}u%$H3uPgYg$XSLJHpB+}=pqpWL1!Fta=ky3P9}
z)E-l)-8UC;)`)fT(Cn8^p{|ubcZ`qkoOER?#2Lg&t6jNu9QJKCC?@>l3><{BofqJc
zCM-^@ywvivC)db5jse2ualKY2tnX`!NS#7}=}5RdS-5#TX8q=!pw&AYoniJgu_ESs
z7%7$Oh>W%Ocow6_NIhVRqe^(A%eO2XvmiDtCCvKU`gq`2Zz%-!v=)}}taxvaTbW<{
zoqEI57_n#px|Q4X^kjotNTSfLjPNSNsob;PJpJL1DhhZMf=J6uakw4;f-$P=)z9;B
zmT(#%ht=jrzgPYIypQbkroiBL`6b%U@F74#N3Rme_O+|`<Xouf{uiZufS#3O2qu;r
zibZpM@1m`hqyVm=R#+=S{qhFzqLL&FRFm7nz6SWRSxF7JeTV^>FbZ?8y8pCUytr_M
zz85C{1McymXle0;CXRwQo9Mh=v=IQX6?tv%+fqmKeU7DLKRNje#pxO#Z4~Si9c|Ft
z6sXu+>x~|lP%@TS)U)XFY&-(u#(wS#g&PCoJG$G0J|QZ1DU`~rdnV9b-=9ccP!(8_
zdO=GsViI3_HfFgCs&y6yo-TT&I65+ZrzZN7Vg{@N*qCS{BjdINeBYeJx@L0Di&uWR
zDcYL#E;>qkeWIIj#CN-LKOp0*b1)mwLO^^rSCttT0lgx;0)xe=PWt=#>UEFq<l59t
zJ36SSvSjrk4vI@&@=T}!jS=5KE@d}aD45OC8GsX0fN_rf(*r8PX<S_zTaDsr+=oB7
zl5J%Ur9VSW$O0d^C%z#5%jI(Xzoc*Jp&%x)f4O%6>h=F7#O?orzx>Zh-Tz}O&3`ZU
zbKAKMw=%cgQs^&*Z}0bZxC!2TT^v1J+6njvpTT9;lYGC&5+m^sw)ek`&ih{@z4Uyd
ziq1s}Jg7RTf~a*J&fM>2G?@vTK&MhXZnjekXN%C2GGS**&*LQz%BLH5`<v6xGq_8R
z1yNlet)J}bR6Es6bFQ?(Aw0I9_~qQSfv-`&uKj}u4v<|hrmvH*bESL6n|#fde`<-Q
z4C+TPho+C$p0!jB%S&xsKiouf@|DG4TrT564dlUA2?#{8PqQgZ4F3f<>@S>TvRT0@
zFc|jTOXq3v+&Y}$k0H5dZ;E_n>E3YKRtfh3DCGE9!KM#Udh&goANn4Ja2Mj+YLOh%
z4z$wvTD!<uqF%PKG39$WIzFAAapW`Hlm7%qz@t`rvgkBlqAj%`!>&i7&q31<%5-Mz
zYhmP*n}1&Swad6P8q5`B_pY~6snxnh;ym<rC#v4J5qm~M`U?qBRFI8Qh>h@%E-v;n
zE9%E<M%DE_zUpa}44yO5tFYMH76dmasRYYfD~(pKjedN$*{YpJ<!ZTcpi%FYz&FAd
zx#|JVcw1yQVx`u6a=0h3O)aTfy3e;635TI9^3q6dEnD%4Pu0qc>&f!w+aCT}W78TP
zftrxcMB&<ZU-tynMHh6Z3145+A^Rt@ESdYJ?|AMOlige4m#$V?)zvZ4qXZl$8aZ!6
z9jU2aLxG$9qSamojnVbVtxJAqtXB5hdu``Nlf{;TeoG!?tAnM!4s-qlHHDJ6Xotek
z=tsi$e}`D+H5tg#sWz;C0IqW649)NG%dhz+<QZKt$}A=CJHS|Lw22!CTH_cn9@ZU@
zELQ<#QP$Xieeoyim?u81?l*M!0OQ*-A!D@eP#dYe#B!?y1K813!6t1<1#NkcHs>#m
zjxQ4`rpuSI)k~d<)o0O<c(1Qo&v;2RFKyk1LUh{-Yv|Q`EIV=#<>Zt~sXS2m@qBl;
zR~+@OYn8T*7bLVBo(}UEdr!~ie1^mB;`rsMxoi`fo?<8z;neG)zw@64oq!<C5H;t~
ziiIl{gFNHtC*fusOlF4!eud1XN(Kb7mY14I^yW*p=C_QyOW0w5u3Vl+?DQdfwt4?~
zJ-U(Iv4)FrA9?UpecACWP&Y>C#3~^^-r-1Se<w&Vi9#Gg_0;EDYZz3N!HvZ@q{c93
z+Itm!0}PpL?c3d#DXhqUeaC$`wKq`g+lbkO1PhA3m<qV;y;8-+6xWT}DBW#nG}+Os
zQ6q*5H2Em#SCY7`SwEg~hX*%H3nr1CBL49$c#Vzhy4QWBod)|lvTCiz>r%O3dWT1*
z6rDC}HW#*%N^UFd1XRN!J@b{cswXD=)egc7j@#zuM9E)EMkw5jX(iQ68IeQvZj>P)
zLa*s!-MJZne_`?Q5_a(4&($!Lo`%{&syo0T=;=TY%I%u~bty%3`SK^oaW*}>8{>KH
zbJ@|4dMkc=cWsz;RivQ7?&b8)*ia!}xj?;9&ij7t#$3-TuJ_0H$@>-^WjegJfx=CG
z)cGM98^WqBV?MbSc;QKX&)mNE&uPp?O4uT1D8uVh@(#W8-8@Hthu{Yk|LJKCvTNV)
z4<expyxrz|eXa}pp^b1(VqIJ()MH+(eh)9H>uB3%UmIk+FwGIBT3qy7w!&MuzhKIC
z0&|s4ev2k|j1PI@%d3qxhjke-Ynd9gTbAG~dY=Y5QeVTK_<QdPfe7ir{&2_#cqjbl
zb0J#sS9gWhUS4JQcf}w1E*a59Pty{_bM3KE!DDmLL~Vx^lQkQ$LAvSXbzNMKY@Ptw
zXw~l9fivM}g;&4qfAt*_5>%n^fD0(7>*$}zDojmgO@%8-i`&kct{H>-0$1DLVLI*f
zXTs0fzr+h1pK3vKQx8<)<bMPxElzj*d2DGTiJ-Z)D`HUry#GvnF)@eVczv$uO<}J@
z-`jqCRAg32?_<rCO-Z$NCBARl$(1o$G=BTN<tc=Vh0OrwrHS(0gb<~0pjTODz|QT_
z*dy0O)#gB3AJPw2hokY8#&+53OS^9VcQ9iBA3}K#*Jl$8sFiAccN6^{RPEbDu}XfV
z*xD~O-qYi*ZIg0oz13L;Y-VOsP?nK}RZ&u|jGipe+u-a#vLsc|+jGWRu~{#|ErI<I
zO(-4@KSKgO<lo+ZPj)+rc^5aDf5g+)sBtf&%Z}zxw|m%wU`eiFjX;P40}o^5rPcEG
zt>G<cet4{k_0&@3H&&yYitu-^itC>5VDNUkO1#otM+k71Gm5%70v7f3s3Mau?;eX;
z62fN8vsZ-=OLGl{Ts#|b(u7u`hHZ}<I+SJ^G7Ho7*eq`t588~~=SwJ?wX4a}c5T?s
z)*|;{t9l2#-@Fkn*C*TBy#No8o38+K8_Bxx>yA#qbLSN5=C_B}Ri9~l0&+v_`UpH^
zS2RIygi?y5C!|{&Phz6%>&8|P&*|)oBAdM*ROqgB+jLN9vH!wg?~!bzpxM4R%UUjb
zqv4sSOE%J)M-ftr%oK6)vGaAu#2Tsax#~HAI05mJgniGL8#8p{o$`Y~)xfe$p0oUe
z2rS$<x_M`^N|IBZ^TMat3RM|AXB6x?brh2ODk;d1mG9myrzvg+^Lg^{qKDca^@M#k
z&rBlJA{x9^9_)5@sN_=Pv#wVu3zPBieICLv+<k`{Vm-c%d1R%>Uk!k!f1-N3qL&pv
z9r{_!Pf5mXp%9>C@U|sf1Wa*f21|xV`(>6)9gVdcmZED-jGaGLbj?wGtw}xWUjW@N
z4dStQ?FhCF(NJWCtTs7a-_YlquFU4{M%t^ZrNKfkx3eImv?v)`?%*o-q9e`EK9I+a
z5gFWyz{e*EJ3V%T@%Z8lx<jRZ1p`VL`hlL9$a`i{L)Q6iGSZ<@URd~G`Fv~Lg?iOB
z#9F`&!vJio#*&qAv)A6v(teQ%)*KW3QbPDWWCL6nLn7|T`7oM3n>&3}n?wTgiql#w
zlnc<BeQdM7B{#}hE70_O!&RbLD&-py&us|M2RZG0#?~He8@gLC_9<(hDYd!p2sLV_
z^6<XkE2+zvX&goUhjR^i4`zumGx#^b;{RWO^nV+5|BbeeqzS**JnK0svd?(`&q94R
zoaX*dNrlw2I-{-m^~vSuzs6sC#ET^u?wl;?`~MZTt?G|I`**1?jvvr{Q=80`7iZFP
zbe`M5m$s~0TK~a*$82XSP<Ww3#`-!_#F`&Vb2id`Bs;z7%Oca&RM8~w$%w`l+F@BG
ztS=YV7dwf<{tYM)x1@Pl7`wciGc8<-COzz(IIHlH?>z-2H^oNv;hG~Z8I+GtNoPM}
zt3u%<$|njc8}U%{vdfp(Ldf7u?>pR5i>7n?2{~TyS?iBjK!girLHfW2Vm<duK`uMv
z;n0gE|K$h0S~g2N6@k!m+1uLB{d+>z2Ggtk>JMXeMF9IzM6&HZl{*WbGrRX_5fUGA
z`5BUZPR0v}{EE+?3Ve*e*7Lbti!O`NP?49RQ>lG-Yj3PL3d7y{aY?Tw9r1y=fHRik
z^=}@RY1;2?ra#F0u|~Bt0h;l@2T4K+(C<G2_d}!-e!ceZT4cp26iG)iM4I&La@1Fe
zg;|{EMm*?b8C^}$W-s#V<FNi>b8+V$_+T<7|J(59D-9r+J%a0mO!kwttLPNiiX@A(
zD(9?sNRup!-r(qIm*)ymWb<S9tFB#yfuDS-^f$^urQ45Z!iDy$IqluQ^la-m=jxEm
z!{0H{6c@Z<(2c#|$4MN#*Z@__q+wi=_NC%8^6T6@T#P*@EUYR=Y?-trB{lm2ha=yh
zbWD>RJ6y-PRuI!W`xSOQ(3&yQSE2YXtF^oJSJ>a9CrK3y+_BBY@I@B=xJI<jo5>03
zA*CmhKV^2_aX2t0wAn-Fa$;p3kJ<@Iu}>D?>%~)pU3QlS0g*@RMV)<#nu1g2Fbo63
zGOEfjFICeRv}V4`5giV9wpW4_SuNDwFI(%FzS9r_;P)duv1yEBjIzOu*Y;i5?VCoG
zy0aW1WgZ!dU_7fc(K8CYV~;kRb}WmMfLFJ<pxGAiQD@FwLDSiaD1s3`nL-)}@~?-y
zbHO>g<g9p3GmaXs$HWvdxWy&+i)1K{lk9muhcJsolJwr?=t{{QO*?kR^9c_pF^Rmr
zrz0ozqTK0jMu#df3*$PqnGaA*DP+j-Ix_8S_gwYS+Vt>AfJW*pEPp`s@QWFWVzPDZ
z$mq>2&mov;VV@s38Q<OWJRRza*F=|Pf)+M=a2S!t-BnE3%N!+=XOY^ZKkJ8WC0$JM
zcKg-DPxO8ee$;_gBahY*%Zm77Q0?@Qul+X%z6AVH)I}|?K?F8E4@vK8d#FGZVLodI
z>;*Fh5H*S2K#hRjXJVRY@MD=!<V3bXnPVd<`51W}oL7AJiZ$Nl8=1$i8J(LMcPIGg
z;w`lK7eLAARn8unc>NedJr=(hG=PCR9gIT~>+oylpD(duEG{j>M_&|IiOPj0qa=1h
z1r{K>L>g?z8Wsizu|oQ}Bs|Xn1s~kjje#-4cRs^h&NsTBK*2>YHbQ~zw;k+7JD2yV
zFnGjuj1i@M)!Jc}s)jzKVdOCJ3=tr$-@53ym79)~S5l()^&aI3GCdV|VZU(klA}}P
z$EAMHm){LxvYz}xePl&qB6Mg#D{)M&MFR!H!+0ag@PD#Oo*}q1DQgeiBX=OCl=x63
zKvaQKAk{S66)pWXJzDT(7H^jq^E~av9xqRW|H13&VG_vxRsgN5L2_iZ_C?<k+_C-=
zO6}vj<Ck`EH|bsLM_=I5by?PkM<u?5_vsh1-oS3_tn&M=5dQ}Y@P3kdH)3`u#~kLN
zyVFpR;LVQT9RX(tgSpCV&l+H>@TsYActYjjv}3bEzpjq6pC)d|v5YjYIO^#J2@?EE
z2%(8=0cmHhs|~+EC4@KxlD%Jx&b?!`nEWau70|w0=)`N=lVfAqmgy%OF(E>#|ETsl
zv7_F5-~ClgAo>u?F9e*FU!8C|n-c|sZfc()#q*S%pY$V(P-Jk%^o)l6(jEJ&p;>y?
zz^c%qrgyCOkjq%>o5UEgMw&>4uJgfIDx*iV#|y5;GI`MfCJn9KxRo%CdgKJ{t_=9^
zU$+E^6gmzfdJkrhLNYqxZmE6^$r9B+JYq_|C4<rdH#;^P`8S>X`gbOMfB3LF{@y&M
z)@3{ClqqkWKk}H{zR9>VQdRUIL<S#H1pt-&_(zbln2eeVo`wmuS!mHQLloqj;$Fdw
zC%!?cJ+|wKr=>Qei2waE$XD*&H7fgCo8TX48V!hTB-!GkkyQiLKuz{x_wJ203on9-
zDArsen10Xwgn&NnE8&<PZ-=nHCCK@505=_tSQ8(`2^*ij#DG)s;VZT81K-{nU;qiM
z*;vXrQ>Do+zlJ)Lexs(Y{`ki3bY6`Zbk@m<80?je9VgRLq7k_o^PKfa=<;r$z+p<#
zg$6AT&OaJ$__Yl%7+Go^<~8~(jP5XtmGCK>zDYpWgW&uf+TfSF%HOogWnl3E-19|$
zbIR&ET4^>-@4ErGfJOrlreJDkL_jxr5+`i3+9y#QZ_=%G3X3H1so@O*%t-4X39aNt
zbZyu11#FDY(qfI*=ub%JVV_$CL+QTZuf_^}2Jx?Z4lnz!QLLLG3%yBOGa)7>d;K)`
zYmCunwQ__a2%+oq&$&5zFkA8pigTKwowCP)Uwb@#*n6R>u)beUUy8rCFbLI|6?1+!
zN%nnhS&%$|(R&Xi>D!n?!?TFC)MlZ<KJj5K=a5$U?e{X4O(gAFBQa2a(Wp*Ui0-36
z%xv1xMs3Nr6VxAmgd}OPI*4g)ABGlG>_8*=`IHXLq>>}H!y$cDwoS|*j;RE0MAVQ=
z57#&FIr!etOES3K&r1sr<%yo?%s$f0O*OpL*7At9y1MC{B;fJJww3Rg<<%b}qMPXf
zTFo~TqH=BMAr6<JZ!ZH#a1)WgjJgYZRV*l9j?)DUDvVpOlMotbGE46)iixMUrf+H7
zuEl`#3_BEoxQ?56aFxGV8hbr=1QLNkbZErt8!TBvl+iC$qp&!bX#UBWnGgZ<+gr+2
z={<rg8bx*HzP-q7ySPP$A^O|0FT*dhZB1xy6#y${4%3g$_b5S%Cca(dqnTpYaULY-
z-?}EXX!PMi2lWQCT`AAsB}3mbYaCyQEz#jU66L%lL&S>SN`#R>kRrz}ZhDW<2}d4_
z5w01N?G=%Bt++~*?%zyU#RDG`cX7k(=P1f6NCYqT;h8p3SQOtHrM5FDjpq_OpJKxj
z3Bl6tK&VHbEX!P93#s?hviCU*-qqW|!(GL;pdqDD@(zO@!^e9x1LuL>4IVKt#``AR
zFdqExiR6^{8%RVE0p^JFY#8F7x)0f#&Pf&(CMu}t_BUOOn5=tYMoL8Z-!#ICZDeDA
z+o?Vw;bG@s`F(Vh?1UcPXQ4%0&Y@OD2U}aQ1zWX52ukggh^D6X4^^M=$oH?txx?!&
zLBz(RwUPS}O0yLTBM5AcN%E{O#B9K`f?O!5N=N6b<$n$8sX)GC$JRo6mGIp3<x5X@
z*IQU=)h_0OD&tFjw$Db<pO6Ffdp7&Nwsl8*4VAK(e3b}CMbz^{C0!*)#=fpN(vsCv
zHI(RpK#SQ)*at_|;J0xP<?>($=~z`h8<E0}4PD0&vsP+1TjN$Ja50%Fy61!HD+o#B
z<}XUg4BXIY$?rIJ+>*A+4pwZQ*BiLj(&M?TM7;ie4_M9V4VbDE^&BL^oI~<Q9E)n-
zFrrc#G3dwz&~7e)A>vZJEDR;{9gpwcF!b`1bWlUo4Q=#r6CXF7#xiL{u5rMpTiKyA
zl~n~CIx~^ucl_7@z(uwioXRI7xMz6@2u?HSXl>|M5$tmoB*gxmMJM_-$`66Dq%hQA
zQk#vuyYt372m9lK<xFRMzBE}v`;RaN_~4pFRmS8<Tq*6!J+}ojJSr;B38tr+|H0Kc
zh6lD}Z9D3uW7{3uwr$(CZQHhO+qT)UZFKbI%*>f@&b$8Bu3dGN_O4oYJ*y8ifP-*b
z^UdzsQmm{ABwzmX#z^^MXGbYNiy&jo3cq`1wVm!zs{0B=h*`eBo-x@YKOMgi$`Ihq
z3>E@R!AkVf)`t^7ln72rw;urD3n$JzKc^Mx#+Oti{AV=aKyMLDF>Ajz7$vasd#a!&
z1PGoIjGUk(2Hr0rz~CPl7VYx2>}=KpzhYJ$3Bzk?13`9#uvmkS-A%X9fVnG2_MMCa
zOSm!9(9qeL1YkW<#rkS_HJzV3d|OTdVt<8<`WiUsB+T(`(8rqX?uAxjCznC&zlqNI
z(ZOXw;rK$>%-@x&;v?7n>fPxAiexld#s9_qEu<?>k4up=v8Ll;t-72pHh1C#V-FA1
zTdRxCJE@NAOYU($a=hz`MGk;v4BI!G88R;l78yGF43H}>+!zXL!+R^{N(BJ5H{UZ_
zB3#KmiQXyg2M}tX=>tTIRtZK5PXz|R{avK^smW4LF~r=aJA;?=3v22r5JDwJ&>_GC
zU;h9%LlLZ$5D>-h84Y#M>JfN0mdT2!F>&2|8jK8q6u&@${*WS_M!K}y?=iJ=9S#7V
z+rPB1(?iOt5J+{o&`90O55~{9C&)V(K+6em$GP=fqwh~7++N@YOsY_)kL&IBGPcLB
zrD{J?HkBQl{;21P(c3F1#aLManUJZnkjPl*^Ag|}^k?{04|{4P3y$C073$gNX_|w3
z<osj*`VD<8F6$>aU*xLCOnH}njC>=hkes=)xnf0?jaig@`C_@8N5!gm)c2tdc-Uz4
z#be~#bBN%u1Alq<wob+KTM|$FG21csN?Y|z+qB!X!xe|px46XEn+Ee6m2@ixvrCKR
z$Hnb%{q0e8=_}?uKSOvr+Ci?)-gCEFc}tB$jzOFoiCqq{`>9%cqWCiPTuB4F$zIIS
zOYzsKxoZ8<J+-12@9!c(MM8Vsz82^~qkIqk5Nu8^RPysspY<PU?+(d|j!!L>qv66J
zZwg<8PVD>JwP?m+>r%G|)hC-bZAin4c_lnNC2%-=t>Nib5FkR-+2~OjbiXr@&(n~`
zBj-HjA6&Bf<E4{a1tyX|EWLqtloE!LPIddDCFA?1P?*pdT~+z^9I!P&5Ofb5(XLhY
zFX=Ts0PxmoceyyL7al=;xs&ZiLgU9o_vZ<+(fFqJ9T}$=XKls7$T8e<>2GM!v9ytX
zh)xS8lNtf%lJSX!k-TnswQ2N6o(@j5uIGam{O~f@M-g%)H@&S5L|SZ4ObqpI-~Q4J
z>E!L=H`HI?n^{!Cnm_JDFv|7n#z{-sjSrjmgbCkEby0H78&-@w6Qt1qr7_Nk8&D|K
za@+<XVmPHEdG@k+%5c>54icYOK`~c1$*&)l`UR7|lwTYz#piYiElkK@Nf>L}G~Je`
zAbmVRMM+=aj!x{T?+C`cHRkf6Pm+vkfY<!<evycj2p-s)S(lI-5llgWC>Vy+)B5G@
z(KGgXrW7^o-bg;v-`~G~8`5i7#fFEOjfIjFt>e1xdL9b9{Eq=wvhzwZRl)Q)9Fj+H
zW_I1t$RdmJDip3>12M-jZxEgEv#1PPmD^PKd<`J|C~69)X(z~7-e3!+7REbxht8b2
zYE)35cvJ`GH6zH4?a;?s6ZA#*Ku6PwM!1zbx4FQ)O{YUaFR~%Q8vS(9sW#}BrKFq%
zEpQcjQdgQPxLW@R_D0}wI+6MFZ@ge@!mogdNc6#zmp_Cb?zPTHR=__~$`rz?iNd;s
zDkVSJq%DQTwE-ci5LDIYI=Q{DV<Q*s3Dpd<Y7L{#RErv}=tUj@jzEo<b6td*w~j2y
z3(RR5B5&*)S5Q{!W=5IuDohok99Y&o!neukcB#g-_tjCP%xCLBEC$@xVGY<vtP$gV
znDlh-orD=p7HFA+bdUSsWPVlGv2>|c?2d+PCY^5j<Aatn4OH!zzZ}krG>}A_F{Pr6
z2S8L>_7+1+_V5`pabJkO;4)f?p#wKqBe!9AAH{CtaI16)+1@eBl<#OnP2fM6Nd>67
zV^hlVq7uoj@2kpTLH=4+?S6x#ViHAgeuAo$q5@uqc}dM&0*xIcsyVh6g$${h_^ndb
zh&eMoiMHyL0snYoG3X8~(VojO0Xy>qX?R7#>n6NRpfNKlKk6&^oNY-xBI41SD5c3P
zj9jK0cl~Fm<?IKNRrWe~&rzlLAu!E6&P_)2cyaMK7OSvoA1SA2q$URTVyWmk+I!Gm
z;<x<2bH0d>Hy!HWZ{al@Wm#F*Dmv{oG@nYhvFJxEk|wDfXUVV3tj)j$aElIADeHq(
z8gi2X0ckNF_p#N=w&pj|k%k<?_iQ|1QTej+BWs_l?p75C)GWFnn(2g#zAbOVoPlfZ
zrF2^6?ErchTs?6-FL(QVSfT<|`-uLJDPsu$b{FO5A#A|1XH_`KA>s?msiQ1Q8GTWf
z^lsB~TC0`V>07*~<2N=mVd6l|;wk6o?+9Yx4H@zSz2P5>tJ*JS%KQxJhxdDH5$^~y
zvD%)OV{aWl=WA=TT*VO+F9v<>3xn<DaukRuG8fi5)u27N?w@V9Mjvn<#7u1HeKoO0
zju6mB+Z;VN7>be9<Q(7p4tE*L2QE+)XAD14hC#V(I4(EsK(p|d{lcoyc7|^q8n;C>
zZ=bdw<T|fq{3#|n^pGd145Dv+z=0u~?*up#-s<wnJ7DRUQUf_2IC(AAywUqPmMP!U
zY7D|Vdl^DHP2PYWA;LO`eG^)l_ZDg0OI7XaYFP~P<{kG~k3=XRO)wbl_Q|TnDA6Tr
zShu)kjMb7CQKAlhiF3cjQsXpB*T|c_vbhJ20Ww;QRKp1B6m5&$`CM?hB|pwNUX8}z
zRknq}FWR0URUoEvq(TmyTI~e<2El;T?0He{ip`&#fZ6w_z--?|83_aqocN_cgcFP!
z`uK?lG(X3sFF=TVR@;g)#&0){)jmxC&EQprN*(F}Y{XQVn|tF<KvGntnv?C{KGY#?
z!^+)KD%bM%R_FoRWJ0Diok@ZjT@}uSL#3hI{Pi?Ke~yy;Zth*?bl&Csl0;fT51K9R
zA-fsUDPI5b+0~Eq2W;8*!HzCN)|IK0F|i)+7qZ$wdJGzpbXnAEkMWm=fw5nLpdo1b
zJV>X=JG^?f$8EpRC*$?=im;8(7whK-m8aQfX8xil2iY;1$DB`t3Fq;3=wHj9PRT6&
zwfDf2Pj&bBn)RB@^do$BA}wayrh%bbG|kT}yKwjY3Cio@uo*V8I0fC&{Q3Rzviulf
zXtn(FmP%Q@$FLuH4ANXu1LeZ|T-~R|O6ZRp#X(f<)WGB(5!POp9V~UFvhr4bbY#LV
z9C#lmeT4-r(C*=56FG^si{xJjr#_+KYzC=jLl0S-WKt>;)SwZty6@0(Y_<o$<|4Eg
zDx4T{a>gE`5h?x2>-|36Fz#<}Be&N!yAyZoq~r2#cj<qv;m`(}^KV%RgV*TwDlsr>
zS#K*zMX;DORGPX2g|pCYK3pxew|n!o{7X?`X&%ZVmugcwJBKpjjnAJHm*nqak(BFW
z#f0ym4OQSinfqB1G+#wGUugS?!xy{m;LTkF@AH*gQ~jf;E98W=D}sNwsG2sW(1!z+
zima^ci^ts^2~jm?@z9yi*-?1^HkJgHiLgA)cAtWf4TMk7im+TUw%lJ2p1&_8Abi<s
zd)u^Xf8W(B42ijG%IdEel$U_T?enZTk=i|UwL(%-6hZnnZMOKf*9gci;m-H1+V9@_
zm-Sol<{4=(ia5+mXMOoJ9{WsIxb=Ux!hcfF{RTR0J}R0+l9v9Pg&*fgi9A{RqsghF
z_$!#H&d|C#Gx57N|FRdAdm5c1GLHd>zwJvq@&D)T?@3Ad(sArf8kywjo7?f(V&Fjj
zt8U+>EkW7T_-yQqdFU58ba<#T@HK0)LP7d(>l`*bS#`)L=o?2IkC^!G?o=OsHHg1c
z-?7JL>AnWPTHwFnw7r=;8DEgo^K$=VH{^23=0gYHFAQQ1_IMmP5t;EPp;@%n%$jIo
z3FnU0>!b0$s1UG`bHeWr)+RFV&f;I@NK6hVy*ai*Y1to41Z_oGf?zZkJF%26nG?|1
zdES#<&j?Gh&$l>|I>0Js?W)Wo=6fiW*z~LymOV<lMbL83|4PiT$@jbRqV*2Xd~4`f
zzOVKyVmjMflg*4DDkD;(Gk}}RiDiz;IWzbnx@a+YtuU4@@q$L|`pa)QPDmguQ)(UR
zsb!!cv`)Sk6X6l#ZUc$_*w%zJOX2`|q1AR7)(r-Dl6Pta_vlq5dqOZo-*F_HCK!Pw
z<RJ~~RJ4u1%RSF}2z9EW$mxJ*AoL?JG7amRf5>x%2I+RMqE3Y;(&3~4u$F2_#y~Vn
zV$zkHTtLn^`N4RFRsJ}hHK^&aj_hn6VaeR#&;W|zG}EG7f~`4*$O%SnKUJN%B+TRw
zYA3~9tC{pBZr6;6(S0R391X3@QAZr%6#f&ivFjm{$5BZ3)jKx}O>R5*B28)XyZ7k5
z*JoT&o(Nd}Q5+rGn+fwO{kawWu|v0;busg4({cpZ{hisV0?d*C!cx*C`bNr69{G~G
zJp5&$r6kkMK*$8K9Dx&3;S_#^C9h$~$C`SBM^^eH+hQVfxkV5!)FB~*kz*UgdvG!Z
zwQal+P(4jaGTngi>Pzr+p(D#_#{&L2HlZD#IA%%Y3TOBez7qkzk6&Mq8%}pen~d}(
z_eCn+N?a_krLWEqX#=(tFV(ayoZBsXW4{X@_YSyb$g#2nhq11p3najKGb1#|>m0Dm
z9K>E?m7MCx>8*hVy_vD!iq~D`s;93*;*nRGk_XuarS#3HD8ps_Sra1YeaVU)EacF4
z(8pa~h7OXr6!!Yv{#YO9@6IgEvnpr}MVW>_&hGbs)r=nnL#J-n+A5C=1leebkIdar
zJfYovXk!^wxSmUKS0*+<P%0pVNLmwqFgZBHQKqe+boghr+#O7)bKZ-BLq?KKu8MC{
zJ^b!Rh1Hf?r~wW8{GF!bw|}gPI+IJ?dG4DAmeC>0?B_<}deED{#kfe{jGDm7<{qsi
z=V&>$cjn*L9LqvEQQt&?9It8%Q-+1vE+;>3<|rzHVRpx;(C?oJ2Wp*njq=CZ$mc9#
z3THlwOgocxB0i+idbp+Od#vk#hUICcsRl=RpxH$QN2w{ZxF9Q$?v?YD4VR?W+2VOo
zse1cQ98sR|S?OKT9anTaDl?cdNbI4nM}b%GoimwD*l5*_Pp<$=pgfPPq$`oM=?$5D
zoa(}~{ec}t>9kM|j>5L{5bVim(;YhYGOeDz74~x#i+nOFMC8FbMw>jBvakZ=xlquf
zuzTf?-g(2_`OF!IAt#10GH{}gdev^&KYm8v=RI=puyXB39Z9uIL>Ia35D$+#Q6!Z6
z-A<+Yy(}ER68i&crE1D+uB>NRWs#zfyfYBC)iuI8Df)jS4xjuV8_5Q>m_3#SLuMH1
zt27rKc+?nMw?^h})0rj)zXCewCkjGaLq}}_R0Nn=NOn;mfy?H6gO&#OMNfQa=YmD+
z;?sCxfpEhwTHs%GW~muV`3xk6X^hW+?P?+-Xj_mrT4-ADBJQ#cr{cF5M|G=tz;WJJ
z;YpH6QPb{?c-qx!`*Q@=A}^*@k9qWh&2$0{di+H(hbEWep(#LTwFl^Zrh8R&gxNw9
zeMdL)<?sd_t&yYmd}jU6t_LVK^sP1%FO^O{&^w?QE&JP<UC&k>$y_|@IbnlQUmDXt
ze8YKS)#B+vt4EHztWT%w;9Egw-vK6!=XQy!IY#C0FA29Ka^GXvhRRn)YM_&Lj|Dni
zps`(FYxktm+3yJb%{bPQdwuyV$tOxsPc{PUg_&^-FQ6ZGl(UJjPcDKJr|Tv>ZR39u
zP$RD{1{^78b_iZD7-+uAsQhu$&)b&=Fo3ZWi80{Ih%g8{bsBd*)b&!d9f-k)TvPKG
z(mGYbu!7je?!D$#5T^T$zLSibQGlNK_SQSYx~r$(Gx&^4w}THknF@1$nYIIjQ`o-W
z5Nv)0CxBO(IXx?CT*9yhc8O?gbKF5Xd#CJSypo@pTq{D!*}G0^C<ZrJ!e}MbBk623
zyT2x3KI}Aj27~HZ3r2V`NlV<o66#8IYjy%?OFdFf?P$xFGMFA9*^{84QNP=;8%Ztk
z4jgQAs5qQMYPLIx`WsCXrNPlTOaJ|vFs;y!ze&0RT|F(s#PtnCoxvDgbaDS|uqK7g
zE*Tqq(@{@_i990?ZP-6z5)!~=Jt{9A(%k-!d?JfyCmEy;wxKtOAB<%MzlVgk_(&PO
z!^GW$)*n~k-2A}gR??>*1_bb0uH8Sv+M!>nk(;bS!*}+zEJH=24TiXkHSq?5oRjP?
z?BGt7>vc6%h!y*_j%L+_vxxF?H9*W&<OYzvzK_93C?lUS<%Xb{&>$b>h8E-8#<5<|
zT`W)=8Bm(Ibe<2h<T)XXU8)@`Cl<D&ahK`#@t09)4HK-9R?`eclpwEkjz;h*snV3Q
z&!*u5M2Nc2MKws`4PKw{AO&b8j7A|Y*zXO}GKm|D+!oRyLtaiet<3@*OLWv={*s%~
zV(IJfS>462+ePrWiqi_pZYnh&OIz%}l~3wj37CbH<Or}L@8&u^6$^NB^G2)xq0wre
zGoY7h6qgG&=$#uHmxRH;A0e4N+H3NIN%PjklCebO;Ky|1$}nL!M*?CWY;YdL@x6yA
z46&1v<Fnt0<n3`cmlg4jM$iwEA5Pevudi5OGq&_ua4OA;{TdQX3+-}f;dx)vOsb2R
zkYO#La&LsVsejG!fC@3qi<2FpVXiGM;c$wm;rR-32YJc8y}q#7esi@-qK7o-lGTf-
zCqS=fxC*^7@A!t;zVRkq&~B0^9;D@9^+Hvp;xHV+&o52^U7uRRJs&2OsGtq2`M8fq
z*}mt6(w^*?!@Wa4O}dB6;l_1UlG`!nWMN4Ah-JlloJ?0d<r>>3#>XVu>!ebC4oGjd
zzJ5Gw)`k}Hs!5Qx(aG?ejmhpQ)Ms0<0vFhFcK%E}hS8(Qv;N5P#J~s^G_O!R3O*g6
zEGb4~p$2y1_1SRyCR3ye%2vCe55UT(UWSZmts6T*BFIF%$%EnoURub(uw&%~xyl=a
z&OgV{6<TU*e(`cpTf+tPib{Yd25H?Xbg$mSSwwur=^XN$EDkQIgcK-`CF+D9FmU&o
zGAtN>JZ{FQosH-lA-k$%IU4e4oDfgz(y`T-pZYa|rhN^CR3QIU9gZ*xI~KGclY1;f
z=R-zrkDdUmH|u!;D`Idz9YRxiYp4;;ot~m@A_Q>I%_obUpLzmxq)*=Q<>yWf)d^Cy
zP6sVeMhN4M_%2~F-rNERuQPaI@8jIb>42)&d81+?%yAWOm>(UzeWW&xdXLiUUP?un
z4rdylQct6Y!sH%O<A^QV5s;^wqGti#-@R-WT^jpeyvm?<5~?>EXc1WF<Sop+>&=w6
zm>Lkn{K|DQk^^4GJ#z1ksWmcZSn^9F5leD-SMJAZ0)8t&V9Of0o?8QDoV=8B3G1_X
z!B2qon8$Z1$rEQPtcYZf5%`hJB&6^jZ(jUpQV9v!OnU|6)lr+9$x9hzuEwgMBoz#q
zViM0B0DNhi5(;j7q3ukFr#4pw6-)wRTzf_8-D2xps36s8C>@NV4UyqKz#l=Fkop5I
zF0e8$o-38E0NCzW?VeEO*f=rPwo?2=@|THy0m&gGj9?Tdk8>YW;xZ5X#rPde>v$#4
z;0t6Sf6=(296VYSU#Z5)YTVEgTWbc)C!=@5Ocx|9E*}*E>MvQgxp8<JnNC9LkOG#=
zf;wON7>=~nvi=sXea<y6-)G=cdF~Ran)t+6yP5$59t7fhE9k~w9MEC!+5RD5+{%o%
zf(6I?jN~HA&n0H$HXnn3D373XV~|UzYf18WTL__1Vl%^_ZpR7(S`f*VqCX9UuDQc@
zs^i+VTh$g;p#^|c=s|AfId+PEG2(C)62jB$UiQkozTZ?}XoM+eg=R@#NIEkP$|Jn-
zan?sxvh`I}0{x~NyniLygS<jcd-{WZ#dJ$Ck!}EjF65--x{>f0XiG4Rgo93Yo!NpK
z-(&rvRgAL>q(~-FGf&8K5HF|M!up3MC-NG+-pKi?;7jOT>Js&lYm1OtrJ*i%bea%2
zl1y+k(XMZpkvh6mYH^;6I0rhV>`D@WGDEZ-cLi*A5rL5yeO36vN5SeRGDTX(3E#IO
zdE7^g<VOu^qsKmHLO|@}r22qK%$Ft(?fpTNq3|`yWHt@^KG8T;sO7@XB@ICoa^tOg
z+rj?P4-$YFgt#WfM)-sLN|KjLqg^h;FzKW@j8+_yX(+4phE5a`*oAX6oX53!{)=Of
zg}R!8;xOhwW=N4b{Ajk2SGr_-YpCi-@~Hi|Uqom^X_|}>APv6aj4k29b^Q`IXEEE!
z5BcfgR>y1iz5+MaKL89MFlo||l1dMS)fw}I%K;DsJm%NJ;Vs&VJ*v&<DPrna!gk^x
ztRynz-;ekOs4%H*&*)rgXuBb^ByL1OfhlHe8Io*j7|OA&#O<cTn2#=4$7K3$VxOGQ
zRHNwi8k-3&fVMXUo@28gPk?=uqYTBoSop6O3<1@OnNepDx=x)G1y5q5K!oEp<8h`z
za*PaE?U@xU7CJaHtl^D#r;lWS$@czc0fr6w72SF?n2}a>&LHX|>A-smG?{*>#S<oE
z4KJ}eqAc1UEW176O`H_G$^iJ$Tj1OYuwiJ-*R$IbGR)X*j1s7LZY+!h;Gy!t#i6ak
z&u}=x>K!zoso$DuP`@>B1?9ETls^cX)ZSC#TTj{yx>%KZ`hLgLVNA$1%oj*q1+lS+
z28gxA>^V0~pX<W+8kajWw3A2%FKofoLsi8H`~=K%iA^BYNCV$0#k<4NApti}ip~ub
z6m#KTkFwG_V%9T;+ZO;(T%PoZ*ln)doJ1z@9gn_5G$r2m0qT)mq@J|$jSA$>{?W6r
zF^JhWXIOfom4UtD)<I8RyC~lUUO?EMHFRTKz0i0vFDAKnu0y7lQRejej-%k@mQ3S5
z+Iv_?jF>zX$Ewc0hkxkFT`8aPaXH#KGXhwuCD^XC&;Swq6J?uNai}`^p=^9m(D+dO
zb4WmrDy<64^oyEDnm-;KM%Nsmo^)@{&dofMfuT-e3R4^Hm)bW=O+R5?HxHQ`_=B7&
zsxq}U3g;4iD~X`5k)h7voy+(#e-6)jQjpp9fVN_f?04#svE^Ho)-xN@3>gbfI5+wE
zeyc&Dozz)~d>6Ab0*X3e1J;L0_!blA(eHgMOA$p1s8i4OGz!pi7M8FSP>HaMl967h
z6GO_T!Gn8&bgnS7!Qk6lvG$f?6_WRB1*rotJ$KI^rm344_p+b&wV^=dluIX2qrQ^K
z@D5g2Ztilwl`q*;V;0edFNhSsH<oDfSRWH0oP5EpuGU3JEiCQ{t(wxu$_SSfw4+hI
z;fzWJ@&<XxgF^-JVe0g5nHB=ND9+}ZT%nw!v?R%lCTfTn+wev^m_P%PBlK%PL+MG3
za{{HkAsBJhgt3sXIw*}9$&$7hyrP8g(L+<fGKg9Der_dg#0u@i6ch8Skzi`Fv@NpI
zx)~j!T^J^}7iyE8&qXNU^-ut7?uOtLRivng<Et$c6BV|vgcb;bX?#Pg<!A+}uHUV$
zXO}p}Z-9Riak|=5j$m4_tK>J8P!)kS#LNxyB$P1S!m*kb-83!;?xGf_y1LO{#WR4|
zM~RoJ@f;^cNAKGo;rdvi=OICuw(1BVKu$-0<O}Lj0mQ;E2AW@AdO3c{YtIdDcB%;@
zmR}4^$kPJN6*CW@FHh^=#U{O6x^u|~70VZtCg|pY0|=_m0EjS8>mR^I-CSz)YXN{3
zE-QK*!$jf&pB<S%7ms|uEbQGeRhSEHDG3&jE*RG5XoTd46?HU`v!|tdmS>27qB5&^
zD<e@Ioo^dNfI(bKMA&5t02CP~GrE$xN_oX<oX7ZDs&FP0{p~5<uC8AO@-S(>k#DLZ
z6hig#9v=G}?MQ-<#cY}ZzF#=PQKO~Qj3PUTzJ(vkB8GUWT5b9dnG6+$r4TusL<NNc
z{QC-pVT7bWap5EnOJZ_xEo&V@$P2|6q?*DmXljJrGBm#Fy$3B{&_}dw5a`WueKFr$
zWpDyD+c)|N>pW>=RiU#aeq^9#O6*}%kM51}!H%{oaib&UGv%Fqmep*&XOJxm{|3P)
zVCLeVo$z)EH0KN@$bD3=1P}p|^~p8q4krLCij2zusu=}h`5P&0S@I(DuU;65d5PRJ
zcSCVdXQMattQK*Ka4Gjh(pAJ*XMwvo*e!MwzRIN<OwuT(T;QqDxl4E)I|s2Qui>V0
zRLF>b=v0RSbACGSY)o5*<%vY*#+-SY1Q9VHau8ur(Fz}rQj&j5871SajTR$XdJQUx
z{An!cju@5pNPaGIMB|b%PzktZzj0&4w3Iz8r(=i<2;0lk3q4NQel4Qw@ey?;q!W&3
zkUKupp>bd7rswJD>vDMLk$7WCU5fFIilhxoQI-jgOvB)nHz1D7*3t!%XcJn~VC%tM
zm@UGTlE_DS<;%qRqJK(4KO6PaaZ_AWF&CzXN-cA^!mXE$ON+`oY4_1I+#&eGay*hJ
zSc9<GglYt=@IjK64MYwaO>EazmuVBTP=RVOl7KQ2K-pO@I)O4cv?iCEY{J4l23l`e
z&!1+OCJ1eHPM6E*thWcHc|whr)TK+Qp;|XASeGFAxI=!Er>#<0efP#=jF=#`&NRUT
z6_EvobvJ_~V??&A3#vxkCS;hQ1@7k_R0ZipH0iNsHmdvi(9H!MFPW|#8<CzRSYm8z
z<6SyEl<;szf=r%f49c)cNhf?5*^%+w2EJbJ-_4q8ZrQ|(x%>%~kv0E457G0WHih@u
zC2@G?F^<y6`?8S3g1V>#W3{64+mwc^4E~;ky9bhn;4BsZRoF#JgMMo0)M=TR)%7tL
z#_u>%)7{<Cu-ye)vcfILZ@52!0^k`OCh;YrB7^`depBK9FtJdC%i+_+5MJ#LVcP{5
zB`lf+n%&WZ7HeHUNQ@Ng!`s!%aLAHhM#Di&5JPBP%?Aodu3wJ*8T%)7mjc~DfWU_P
zdR&ES)xG)q|G9xsN#%t-!{zvKI90k+a?i-qXJV{J?KBASmSON|g3am>_h&rF&OvZV
z+_@baO}T`u_%F~+%U)4WP`T4mOERK3JcW7?bAq@sLJdfN)wPKDWJ;Wwy-ngz*O+Uk
z)x^Ec$jy{=hmr6)IajXT^9?k`)QUK#(XC2T!CIb28Tk^1Pw4v#M>0Q9C~{58IK(kh
z=dnP?JtIvkxqvx;ZYH`2{Rz275eJTQ;!<SP5ibJkW;T|)48CNXMoHXJk7m#M>>qlg
zcxnvgbkZ?uXrpN!jAa2fM3l^X^c*b(SwFT+>l1&RuO5aIBflAAIpB?kkD;tS<>^@0
zF)7r(#a+-7ZW=fc#)C41Nn)o&AF6FN5-fD7)n$w2O`=Var~^EkU!01bIk8_5F9P5}
zI$7XRBmPEYzrg!bM(rp_bgWiwhq@@gws$Vpk6YO;(TwrM3{@d0K_Q2$av)S__dOep
z5E^9F_Q~PFj4ti1<=oLkk^?)SeS<*pBxq_G1|p)DvATw@WEs^Yt7MMDDW!%<<>oPZ
z`-Aij+b{!rPSaJ7M)AvahNeaZOst<sXi-MKk6pVoT8Om~Bxv@&0^h79&m>)N)6)hk
z1~K>}6CL=0qor9VK!#A!EQ&hOE{577GADX913=K-AAa%tT-etsv0}n<y6Dn*_{|{f
zpRIcoS`rQiHeS(+n&EI)BCC~S4n;k+g=iT;IGb#3b+SWQdQLSCTKuOc>8H=<*w<q@
zQnbX%`~_6590)R{YwWZPZY;LcA4EP){iz@3uls97PMcEs6-?IT2uiA@v*%;v+Mvtr
zkd3>Zs=2E}!k|d=0nxUIxW-`@HTrvB(n&wQ!wBrIozCtZ`?;d?8U<tsLba*}#Jy1R
zS<{7DO3)*gs;ssPA5iFRc_4`dL)d_Y=5;cZTV9Pz(vJxlNh>r1S5!E-@&NmgVEeW*
zCa8iTW`vDnu!OOiDo3QVH*+F96j@s#MzujS;&aefyX$2H6|6QR?N=arMoqD>#`fp#
zI+pjw7(+3RK^1SI{2HxRcV8ap*x5|S7qI)!_ww5r4T63;p9#o**4PWa$A>yJ8>M<g
zVLXYqlq6ouPW()iRtkcWS*(M~T_xR<vFYKThPqE~-}9>~$0}JI@79~69|(ONz=^$w
zoA_6nguA*@ktXNi*<Cg;BFixn&OPxnFq%3~iJ>9T=jF+Ay55>Bx(=jwS6_kZbn%Tg
zba4>Eu9SvUv<*tMp6D+Enb=t2c)vtS%FVkqO-YGn`n3ag;WSGwa}sw&!c)Mvy|fFd
z1r1K>sZ5Ob&Ip^k?a0{eE<T{Q0*GjUHPPls2ebAR{I@kS6L8+kKph9=qB}oSGuRiZ
zgwc#h^U32WHH?urXnen%fv`y=klQ1n^{wf(4c7_|fk&t<Dc?zF27obt8qght-VGD8
z?VL1cMJ|y<j)2NG&ty?1<6NeKdKN?qe2JG<gA9Nj<)}5-pOjK8kU;#QRL)~Jq)&r%
zRiF#}ZnAz!(5sDpQp7kEiWGa`8aQ`ST-_2QI{_ha*8;cYGn6v=0<`XQQ;>$!+xgyH
zTV{ekTz+MpR(?<GXI(}Bz+c~DrX&wm@iz6`elBN-Zdn7*r=83usY|Al@#K`NqtTAu
z<^lohie14bPUI7wP942@hW{iP3=B=iN8jHAKc@g5>^vQ03N?T`u5YZV{v_*XWXG(>
zK44xSP=U>kfSaQ)fQuKTvEaVgu4Fqa6K)<xmd5biIb1gGPYMVt4b|Xd>P3Rli^kf<
z1e`vc@`h4SVc-+pSs*PFJ4c5TD;Aq+{V7t&$2cU49)d#|9&&cHp6117Qm0#r(rY2T
z7Sggf+xS&xrVJh7_)eh471w<0=@fwiT^D7bz`A69aH3PMzfstKJ=~U1q_3;se>L9>
ziUG`WUC&-<+u1A<_ZnN|^g^CB?<7l7OOWq7?C30MAz_cM95mNPcZTH5HK_d8&#_>B
z9V`w;=VGbVsdm&02n@->93&=*C9iXV3se6<m>uQj`Tnz*{M;n40G7`|Hb-LRsinNj
zGnH|Z-fhOFeM#|T<pvsn({8)F2XS+54+Rfrz7;SdyETdJP~nx6LEXcbg|nZBf@Fa+
zCrA!?(3>|)v#lmj4(%s43P-~O=lXajKEow(JCbwiAki<S++@yI%r%VOLgmV{z#gXG
zlWd5R_KkSJJ{9B_10r_*b)8HREmBAsX5}HYIB74kraj$qdSBb^0>>i6Y=l83u+>P>
zrgk{3fVp-@3C5LEy7}KDn2l!FBwfQA(lTNa<*zm4O3&_ITOTN7{`3*l<@c#p+6k{T
z@xmG*>QIWI3;|;pi25C$gzwFpWfw*0WA#R4X^0NNGN$VMkKbzEKan1Y+8e`$_t>oS
zqZCgJ^c`CHc0we>0H<zBC6~?<AMzRp?eY-vZ!oEDoVgO9V#&s<56|hkb~Z7nA^*Lv
zRvGw1I-I>zg5r5SvA&>577>8KmbK3pB*APNqec&S`a>J4YkYiI(p;i~qmorzL&x}e
z|3u9@+$cW~Vsdd5-7;KH&W7``a&;nG5-P2;D<J7|mBW7#L>YU}lbH(uo5MhD6E$Wt
zepoWt#@I|G8D=<j__IK=HC)d4Q``K{ogIyIrilX(fuiZ7r^C-27)xxww(N5kba#J<
zse4Q6Y9e%y3{4RdhZFV$c7}x%u!+})Z`GX!SG05}m}~<B$GB$}3`C(PRPxNJWPtT$
zeIt!!Q?ZDn?zj>Yn)-p(o$+91xPRdbfw=qFObr<gG7_d}15Xapu=#kzLk?%BfUw9?
z4RH-^aD1tgRsi4o7{f}0SE^u&4cl|+o@G;pTb`-bZPEE!yi_%*RkdJPm-w|1{NJk`
z;8lZ37OPCVZ}Ob&18+TXf_4%ZP?W3T4lcyc0$F`m0+LiOsdi#S<wOnkB-!1OrUA@J
zOC7K5>B7*oDWqzCKV)Ql(O)mP6<Tz+g0`w^XYCF#5~Sn5-1PZv276N*JQsXt7B_zy
zuIeE$uwkZiFnY!s0pTJfPjPUlu0@YoiOCqgN*{5P>%M;DEb`g-U8Nog&n~xKHYnX=
zRu+WNz}us3r>ytP6u?65K?5SG`9|V0!=svALz@~%tyTOa<wXWZ%$6Ltw*ZunARu>h
z@Hi#6tA#OS<;Ux5(d!~=$Ah`ii$C>$Q*qZsD@SDxujb4-8kuWk3o@9&nmp+0n>0uF
zy}cCwI1kYkJ$^wS))BEWJb_VeGP%@^-%ovJ$XG!89dp>$Qap7L!krE}kyaPubeVQf
z92bMu6cPbS+;(`PBhBKb0^7r|nJr^p*8(2~Ub#9{Z%c3Q@l2^5<M>{ilHTRkLUmf_
z*_g5YaKJN(<PiWU?fE;@4cQf|?*$lZT#(={fR-!&Xu$iyD?L)8!5c5GN8yyX0`$N;
zM>)jG>BR{1^YKSlcX9s!ih<>{8wu~ZvAhd~*EC&UnoRmEdjhn_D>E}mebCufN3Sj>
zch$sZ_~6LxAvbezK0{fCSlvSo;c=EcZ~i_e@ly@L!|!w5-B!vNA*WbjF7#L8wJ^%H
z>3LROI8?SRL8`LV!-Ox~64#aVSEn?ygGIHi4*xmQ(cX3YU$~%1%frBN`UZx6IEHaw
zKb|sPd;}=lSNkuy=Z~v`hX~q3IdzNi&$&r7)l{(e(rkTyGLVPcNAxo1xeHZU%tvHA
z8@}A2X14FGq=(=`u}SJT<DnY4%4r7;$DLl<Q+pf%Xm}$Is&n@nGH{!R)J$HhpnJtz
zsx6`>)b(&iLm^t7L;+<y#`nUu|NL{QXJ%2{DdtSh5yS97U5BLHulF*$xZxs%zT+?E
zY$fq=+3H9^+kzojpt?&GYuKjx2?-rTd3>s!do=Qe9iffg^`~zCRABpohWh<a!O@0T
zWO%`ayV2yo$%l7}SRN{6x&@=Hp70c({`5l$&Ik>@|JbgNf4w3FF-;GK_4UUd{olw1
z#1{>zM3esC6p8tvj_!X^iObqWdt<`K@Mlfb!@@xc`I_%AWAg(dYaxG;Cx6*Xhi+L>
z$V`qZ1jT!iiTEPL&{d0e648I(4e@31&6}wHT?M|~oalOtZ+PwB_VS!x8T>cWf%Mr$
zTA}yjKNjReGj9Ihe7oBdI_|}T{{}&H56k`yjHsHMT~A#w`yaED-3Rsaq#v7V>@xAb
zUSs~N_!@)-lTV88g!8_fKRzg5l!;&6xABuad4<e>l@Zi$c#`Uq-%By>nRnx^TW%G!
z5|E+;jSKA^Wc;tj?BqsD$4h+W-)-W9zqc5hs0oJjn!R3vEx_ganrAyu30se<aA=#y
zc!Z1){|A-9_sosPBQ*W7rUl7cuRn~J&x3D;!Lu}SCRC;40Suk{U#{VJ{pet-&CGDx
zSk3@va>7FEGg06%mJowwx8HF77>+%Bt|&I#^mh@~#z;JSNU5D9l}4+o_eS_doM1}!
z3D4nChAHp)s82Bb8#p=x+g4DxIe>#nH>TJ;mOhVeFsi)V$F~C(i9Tdkc^0OMAR-un
zEu#_r!Y1TcfhhguEa>4Z#16)baVWGk-KHe=5vC}@R#VKzIf}rEI!r-T12<z2{RT-v
z2E}ORUg^RAB$P3?ZvVa|>@_g4tkTBUiB8>(n~0*;f-=k@G-GgHT@_$QEvO)2G<Bd$
z&yh^dP%Fj$0!w6F6M@@M>Gv;WqJy;09!i>J$=ifT+jkTn!gTXDHd9U3^AOGuKw~x>
zQpP{!&BPozba$G?9lrkqWB6lKrRXkNgxA)lsw=J4xnrR_urA!WrOg&l+ue_0@S%eX
z)+PTh1mc@s!$Ub+76$X9TFuno^~ZgX;DY;u-7ACA=db?FA|qGWt7*K27z$uhBdyl?
zhR6q<<DTo-FSXP~X-PBR^Lvr?uh?S~fJ2Swm3WmW$uP*{(~hi&U=^pXFKlBR%Pamh
zkfW@fIN%8P1zD+oQWU)TJ}yTpJ1=a@Lky*m*X*4)>$&=SvdqdP3om>1(B`wN@wX9a
z?in=Ebo-<X(R(gQNCb0bsvZqhh(!CTKEZ@6$xnIFr0(%V5pVkzQ{@SpwR;Vpj<huS
zUHKk{hhr&CywhaNjTDFzwRW%s)pNCU6KDDHXqOYBB;Kskbg3&D%j^2C1UVYRPx|pB
zA~SX5;n7rTn%Ji^FK0^z(<)x4mB#bN$%71yn24GYS}iZ@FBU{rl1#Zr*gD0@$CGZ%
z#PqEc4V>D_6*3u3dP4x~7OF=x=xFB?q+o;=$q&VRpbj5mH#;NItl-B~4&4_bERf1C
z4x|}zztPV#@1+5SkomGdaZy&*^Wh@5_rB$N%{27?!a?ju!c8B9LTJxTr){<2!}(+!
zL6I@)+t|QcRMAAEKq)JOZ^LvKBe0b%tJeREON5V4#S`7H>!)nQ(=Iz{)V8vx%-l<X
z0Jqb&8Ac~4@T0W`b!(h-Bz=_8*jsXI>vzXirmY2a58)<#VPiBJD{<vp*YB_!mDin0
zQGVr6zGko%!qJ#04S-JCsJ<**e_{IAIV-%F+>LYhGFy*7kw1J!dR1%UPVFabmJQmf
zRO=iBh)|x3ONAA2q{2szNB`*VJP(SBE;vTF3s*&7fv~*bbFi4!#w&#=m@jKhwsjbG
zGU6xNG=j-8T2zytfT!>5-O_#nCjazR47y&Qn-9A%e9AI<zb*vSWi(ia<0hX;0E5~Z
zf0fLfs4IuW)|@4(JHlJI*0q`br@LRzBA70%i*L{(Ohy1U9$J9H;U3B+hu3155;)9V
zmd=KfA-B)IdhGuL8rKfO=0Bro=)VJBK)Or*4|71&f&6x!=YL)Dt<ZO!1;{%DHXs{x
z|H_5+e>~e$P8<ExlH^kv%bKi%BFA<T1ce;mk|{6Qz070kiv+w=t<kE#cl}|Xe8VxS
zPY7O**!A=}w?oOTO(k~D`A&WmXZ0~7Z)ZO|>^QdP>Xg(wu+O((E|?o+4U%lAVo2zt
zK~mGx0BoAE1dCIbM%*O*lLLsocx|V-PTZ5D?SS+qB;9le{U7|JLH{3~>JDecrkzhC
zZ>awDc(cQ@E2z3ft6rC?QY!&P5Zr5h0m^tGJvDB4H~CBA+T%v`1BbHKxm!oNIbR~|
zuF=+!juBD2qB&J}rNab4JHswd)mvgIY&V3y#w<$-xYs^^OqEsK-u0iH4X2wwa78Su
zOilV|NL0}Vp-rBYi;|MH;>ENm`fV8Am~}P>h@!T*O3!}U5r+dci6Puv#manPj?ynl
z8cJXMFa45bh)}?KAvsJ_z85{nU<_oH^Ap(>*0y|dv;N&ag?kG?efOkeLPZaNT%(!!
za9YS)+Jqmw5%#1bL={@%DIqfmzMBF4vGpe<rv=5lx#VtKy{d$%4JF|ghTvtwV#lCn
z!XV_|XbLdE#vO4Tb4fBRr*SyX^Q9RB;5IpBXvu$RkgTzsy){p}CO{XCdP5o|_1SKa
z6rYkA_<W=BKS-jdh*xzsKvPS!vFasdS28`)lQm%_>AoD1>jO!YpfLIZWW!l{515Mn
zQ(&&wprBzWQ)=^xXUTzq^j@$Y2tNc=IU6b`-WvG5rd^INsFR5s4pfqJcJspJm0U;A
zO~OW;g^UZa7@_FtR1IeKyrCS9<!CJ!)KmjnP;MHso2y>(xw(}$+lNBCHfO=xnTfH!
z!d|iLkv<r>G-#V46+B7He!T!PJlC_(9Yf%1>uOqLDx^I^CR3$dN=d?TH9L&>E@!i8
zp=;xa5cq8Bjq^<x9jDp+2U7BcEu*G96R(*!Rd~4q@P2lE0#rEcEqhnSE=Us7q15_c
z#7M500_?oNAJZF3ZFJaEot!Y>wkJUn{?pFH86e^8eh8P+vfm$hG7QL}Su)Q84VhW4
z;PBqO>y7Bmo~smL%9@1#E3+T@)9x=gVgj_@D1CA7s)jNmPt2it*>H=R+B|g;g9f>a
z<4#UZ*>dmqhNE`?SrOmBNOvRCF^|W~T6{|;@9_6#uD+EW%w?f3XV~VhjpdJO@wJg;
zcaEKj*lc|+DwF<ccRD<vqv_PnW>)PTQ`vhgO~B2KF`tzp#?e!8$KVdrd+b;U*J&;h
zacbRnD2i{WqJ<tU8?Lk<kj)(INruRtJ!ZS00UE=kynM`d_fB%&*ftmY3ZZu&t$H{X
z##}|&IoA*=pyjp{N-3v(c{Ckya~y%S{C{`_qMQFZt#{dsHZAs4l9@(+(j$1Ml!>$g
zD2>loFpj~t8N#tD%<BS<rH#VnNV2<f<RPyqE5?j38kYkz$i$N$JMQv>kdvsh?Hz`t
z3?AAVf^{ke4i|(Z67CUoVmow8lP}hk<g`q3x)G$!y@59zM@+k-tGXcdXs~k3ml12z
zlL*X3cox|kdikUm-!02j&ggFe{88QA$hOPA;O>3%b0quXtTAWwyqLgLe{ZfA&sVro
zdH<)29EdD#TjA!WcO;xR+w?&*RCs?lM#~nu=urlwqrMZkI-WOK$ZdWR2U1Qf&pvR4
zajDk`9Wv}flD;>UKTr}K)iS7x^`8t2(VYO61I)bv<>4lpCb|;F2*K_D`t2$4%ilnH
zx+ptCDCf%P)qz*`1;gV(+Pn1fzxvbN&g7v#xLyoVJLu8ZgSM3O(aJ#fTV4p}Gz+bw
zMm_!ua~#X}&!r?760tWHflYEt1gED@6ZX}I6~5Vd0Z83j(H`MG@<RrxGhvhcHn`#9
zYo46;dgu{_T^NK^S3zOY{m`pEZYBzC!rpo^<ig(!r3(@f9_J`vDhLcTP~ta1U`xQ{
zBKwk05Nifh8=76WTph~{VYC{5v({B+ErON5|J0K=jK<D;{vp0%;3NPfGyC-OYDsM!
zfXNV3c8$J2>Q-a5!oXETy~3_+I@)=Z<+MEs&V~6YKhyMQgh}$|hdm~2vm@~x=e73!
zflzTa@mMnGlBwR%6x=U2ZDDtDHH82o&yD+Tu#xvPyBxixSYDca?FcKI*jq3v<~Yru
zsVX`|rz#_Lz>t&sCZ!_yud=@Atj6_0Xb}`)V|cy4Spen%_GbvMDs+cHMUid{{-6xW
zpShk)+>~JC+!&*bGTy6VF$1fLCMGPJ_6ezmL;0VI5rx};`iq{NzHv{IIwP$io{K4d
zuhFMy36QFX`s=7+eOYK`6NQhC+`d{;#;>-!j1&2DBXqh<VD~Yyi0DwxuGv1ptPD;x
z9oDx1>mCI_74?mD#|Ki3OgggX?%g$Hi$XKj5H)mPNdr>!gWCp1w1*P6dS=s_yR%&5
zT*XC*Mnuw|;!`@{VI!r+Zd&B*`Ev{7(Kp*^J^>ea?2Ch_vj4|H|KefUX*i$FrjFbU
zvuJm4;<g#{E1`iQ#VO}mCgD`j1-Da67E|p3QGx+noR~c@OzNgNSP&qI>3&PUm5PGJ
zVMr8=YYzQ_Qz8`e9`jZU(|oJw|FQ_GZAnQ0iBJCngao0wlI=2kuZ%GkcnJJS9GK48
zVf2j^#o_)fvqam*bd>i_vW+@YweC=hQ$`oLCQ%y4h-h+#>o6j^pS}oN^eya8NZHsL
zVX2S?>Hffnl+%1z&$FR`mX107Psku~ME=*C87N(DLfzugK?MH?xf4WhY;Wg+W&)X3
zLXwf0<!}I{qO)ZVF9Z4);tTTaScfA~dPdzPi}UYeS<aG8*U~*N8mKtR)^Y4KqbAi;
zr9zbnkoooKT1Za^*xv%~%LTBx#WG5fa+IClPt>xG8|F<LFH>Vc?+r^D0*k;jkmCff
z0jDISOR6%9?3td1h6v+Lkhy?lXQmR@mN*9H9`L8^37dF|>Olt@+Eau*A)_4#>k6fp
z%azsD!YyhY2>%0y!7kN51Dg$qg7x#7E4;siaV}QShyYOo^|j=x4@?Rg4LP{z|Kn`r
zhD@DfC<PRs#4A@UhIc8){ed}{J_c&2jALMf&_{H-k<47QieZgF0G>4VQq>ug-%JBZ
z!7Q0;H4{#}Md9Z|B`oI15wSa!DRH_FQgD6RD$Bu8!ptIFPlG)M!NF9GBZy;|iYSrZ
zPznC{F^5Wb2B~pEGi!c2OiVzOFd`F+Po1qnHkkgB`7_vg@E+#309x8ca*$c&RGnf0
z10FEFn($<k>Hoz`fUUW|C?kDKWL`M!{IK;_-}^|m6z%*;{1dIOLUFPQZ7I;tc`<?!
zkY)VYd>r$$5zk6e;?*4d8OT&O3v95-)pj+pQ3)EP?J1)&#1@-~3tku^FnEmySUyTo
z#JUU!xi7QB%LdYRCqFiz*dw%uFpJT}@|_SpvH6bPud!&EUd*aYjdS*sBR!OoQvgjB
zkimc}rtO##uKm~c1RnSEtJ55q@mKK4eyq0_2+PYgF;cg<`H+PLYw}E3a*o_eN;~WF
zVnx`%CHI>+kzR)~Cw*Q8YUyrCIU-ysscD2U8=nA%<#C-_4uv*pF65C3!J7Eb)PG-Y
z&nRm;)yn>P-nsltco1Y3Yo_x)R~|=Mb}fA3l}<VOibBdCVo69FPiVsZA8=;{gdT0N
z?&p_iCHrW*plkzA+;gWLhsdEg>-nl($}*R>ti)yf%9YCP-rD7ixyEkJkk5Ikk0!aW
z=mdXqm>5{vq9q|RIjLH75>=TT(B)U1%l0kP?=RpHo#Rap2134MLJ)8|{tIM}!L1I`
zqN@Dxa&oIF6diW&rMs%zB6B4<CVgb&#nLWtcyN4=YrB!xkGMd>=R(E%N2^y(+|SU1
z?0dJI=i`spOqpq}XTg3TL-4WmdblKic-kA<XJ`!QXyp@fdn*)Q=?MLpE||6U*%3Y@
z0=d)4r;#Sa9N0a`R*wjk7CS)SQNjA&L_U9hBXF^NF@>X7*)a??e&tvqfVJqN0yLH6
zLyc6dKp;rvI^RxOb2o<Jtnrqy;NJW9H_&t>VWk2&w}aRb8-%1LVfoN00NP^s0@=-v
z_O|@^Ibh*@hS*9{gQpIYHH=6{-Rl}oN?Hh-EWHx}ZL^_gf-r62N;UeZ+ex;GneNQ2
z{s2*Z$wEW9@5|Gc;c|ze>x+dt7+Ti)CP6Ta>f#!-_Ot^=TUs);ToUc~22hv$V~Vx2
z0HPR_g!J}z#E?t-^u-8yzWj<9qN^Ib%*Bk{Tl@p%lNY@*X^vb4_7(*VRQBEnYGM}>
zKvXcwsrg|ZjRQQR<xEES?9hn1gyal0GFp{%LWh^Tf3&ItG=rA{O5uciwn-I24z*O#
zrrzqH&d1M_Z0GUE;6f^ulZ_<Jo9sl0vggff9A~+$t`C+q;xJV0Q$Ih{7~&pSuZ;HN
zq=Na3G)yQAU9HdrkYej%OZ98wLp0O!pniwj0B_;)-<f;Q7x)@om5?-vLYxYFDz+@q
zdID^}+8&X90E-4JUrv&Xm(YW!GSsA*_Vx}qe&aKevdai#{gpA2<ohcM#I>m$!4Xe!
zd_~RJSmDMs<s84&>wIWbj69nFn3GKr6oqxH8>-UhMfLWGpnT&jgDzyb*=6EUdW50M
ze6a~p7|tRDO?8rMrp%oJUPb-<TOu-!H^(yCkYDYY+$AarW67+<qTO^%63hnq13*Mo
z#|#g1W%5^!-8_~B=e;<k$n(0U8$7#3@rki{bEHsA4M&yJ=4+5v`}_UaxK2(a$-t|E
z14SMUez7CsQDF-47xWE*Mh+SR3kuhw*1DcCNTB#m2Sp1vs++6ZQxMSXM0xxqpXs<<
z-Hs9FSTrdN=I+!$N2&~9Eo6aI?cah>K$3$X4J-k`+f{^UtV|z<h-EU3QjA}Msk%ve
z@wfVLOkb<^oDH|O`o4E>kD6d}bcs(4i8TL!#t^DNdl*}dCt+$yMq<Z<tYGa@m}g36
zA_S6K&_NO}sO2HbM;#Op=l~h-2}o%a8O`|QzWJwGgsu!HV(^cS>2e4iR~m>Io#fi&
z^KA^Qph9xplwJI2+ekcvvC)mg?JM0K9@TXOc1zl9taDN6v5+w78$J4;!YYX7j*Auj
z8S8$?i~mR1Sq8_kH0fHl$U<Ap%w#b$g9R2dv&GEJ%*>L7BOZ~(%*@Qp%y8$Nv)|o4
z`)4EOM@MvZS5-$>O?JLdX1ei%3)SlDfBm&qu%*xqK;lFd7$Sz$I-T^DkMN+9_)KD_
zeu#2Z8)XKD%3F#CqtIgWc(1&y+cy>Ge5bw~tX_YJkvHA!#G1@X!r|L5Za$giTLgCa
zXiI5$mI{o9)Ti`~_LjMn+64$iG9_c9@|xSNvThlqJfwbs8)QRWc9TL64~#(Yt%OH2
z+J0w18!w#lm+xP~CJPe@k_yt@RK<bjeRsL(&vUT~R_*-wqDk_{T)gVuu~ga$Xq0cO
z$Ipjh$7r_^c2Z@_oNR=Vv<MGlB5w3M3A$mA^GV+OTSb#{x+a=rQ|~aLJqtvgsge`5
z7IAN2F^Pt)ZLj2(v!_nx{s81)Lz6_WFAyPBVv=e8>%bTEwcSU&boN{uC#jq<4?97-
zqf}BYE3ooREajkFz4+QVD@qC^=%f);_pbo66Lr!6ARZH@lTyPFO~oRu5snt=cCIn+
z@$ph=ApilI9>|Pp#WsUI(}ukQxXHs9nZMGZB#1JMmTjXotm~T>i*wzcEu-wabZj&1
zY+>sOpB3Ol)GbiwP_Af7>3Wvj6-lUUu+ripe>BH%AlRLgw1>JGy{@JSo2rLtA1wl$
z$`~)6I0A;_Ihc%FPl<x5Wd}J|Wq*e+HSj}BH^BisAC12XPsD#3tYfR9)ciin2GC>{
z{YB3AK&M1!Js%sMfWXviy1g=89^-gxq2%~#g6_jcGcA4vLtT$&q0ZuwhW4ed+nO-o
z<^kwV?W}uKzjUYwh5+8m7!2fhnJS>5Ov`3#8YCT38^VNlI~gP{&|&Q^m!ht3X6dv1
zy}GaPj;}<qo{rz70dysfxY2bsr}h3s?PZk|8U&7JEOc5*>_CBzo4P67jmIWRY!0HK
zr&D&ryF8@`ZV%a1(iqncZ3Zs;ELpEcl#VePQ&x4qvNUN3V&f|xZ4Ks)$a$Hl!{x^0
z-qDxi^}VX#a)`8`*C{`CY^dY-Ct-|~O-ZO^#G$rp^r=35k|QuguNG2ZtEH<%zS`7j
z7U+a3sxayxy5N=<<NC0xg>8WBJm9}Bgyc(dZN%AWuD+T_skM?K(dep&*I<xJY!qhN
z)#aXKHs_2IW2$8Sc#3Yp>ZKvgD!#aI!=SHacC`(pzi}~EFR;BHizcJ<Ur@blpc`vd
zTTGzW0GgZn)opaSsrU_sC;GATqvzy^@41l2hML@(MaJ-oM<ba&7nD<*oDCO7@V3Cv
zS0B8Kupp=)*Fv#ltee4Z>L4Bv%Km07LL>;e>P#5_le586dxLH>Z}`)#0sAqRcc|lL
z-%8Ay_7+P=k^E{Lmmt6~`Dj5>ngmCocFsbzpzkvXT)s50cS41+VLwhZ783=r5N-@>
z;Ha|NdHN)L--Rm@ME)?22H#LL<qXC=JQX30Ff+LCSa0*^r5g3a>yfs;GZQ_4DrSq*
z1Rt7DVvC1DlX|w<Eo|or8j4>m_fptSLToBzs6RBR`{}4?!4WCs>1>JAI}TtD6u!Qc
zz#FHnrmGHLtqH%T=gv9MB#D^}(dq`<kZ)p4V6dC5p|)^%y9yX3OIecNkihEqc*$yf
zmQe9zgE+8gb@oTXue&seXBRX+QVI_wBvxE>&M8EABo2T@m?W*H!^NG8ft%!FEGDyH
zN;?&N_L4PWC`PhjDJa8<lXYA`LjQsNIL|bq{LPeWstrx}Zq|H+1w(9Y^U$k**1%bj
zt$XF1l1JwohWVQyErkM>X2?-qpvPA67)=G9U!-;KsYyBWwbR#I3N@F2pF!vdSeb%H
z%Sv$^r~yIT$Z9G1%7#!&Bxxn8!D}YQPyNRA%ReJ1v?{{8_li%le%iN&&kN`wqipEa
zp!|@_0|-I~9W6`&tX?_?Il-+gwy<JMh5MJ8-4dkm=P4L}lby4cI6<n~P)p!O6Fq%;
zVLsgOBV>n~C443ys2yUO&?o+po+q<i#G0@S#?v(Nm77z!DPJthv_WpF*@^jO);TVn
zv#_`n0(plU$vGiTX42@=0z#!;`ME@jgpZcTo1jD`Wmy7V6>xTWo4@2?L$S87E0gQw
z`P57f$94^j%i*KudIpOEZ+8ydAm#bcd8J!$t)io8LDCbZ{}BzHkjHkc40zTlm#PR3
zDveAW0O;3;vEP68_H$G9)IA%M0Pk_J=bS39x(i&_6Z1fK*$u{VLNkHL5Ai!QSIE&w
zDLoWM2%`T?<>|G#WIk*+YbnK^HYuF-t1hBPBZ5@Eh*tPSaUwK|cfF5Cgkcj3W?lMl
zFhH|)4Z6eiILBw1`A1~@gXp3c-=86JT`^t4serG)CVTyK?^@;4G9~;Gd{{{K6krzP
zH@Y!*#<X<V(p`%U)@fp(;?)w`>p2O!JDpj=3P1Sngcb40NP`V)o{D+G*1eW?hoD<H
zQiQb-$<rwK&U(J}B!AgoFto;`sBr6mMN;J`FXqktmelFLfw>y+#0THrb?&<Ukl%+u
zOwG`UnBj6MW5Ot(Mld31(mobSy3Qpe#5E+Q0A!@v#hm1rF2){mff=DEnPUQF2zwer
zG_=9)S<y4x1P~_jCn$F&mN`44=r~Szu$KS6UZR?R+~!ZUac0IrXFbRg*gxwo{z`Da
zHE8~-i1``z)!w(1tLT2mDky^eaTlr|7jc7arL?z>gw|Y8faVqp;<Z1d@tQ9}TVxpz
z9fG-lbA^V{m|GnjYbpYi+#u1mV%UF`+e_y4<U3r$_H;(q*`zVjB@T-BKuNU$H`)tR
zGjB7C%GoZ!EY{AYkSg)BFzN-azL&-OObTm<T^`dt_9TNbLxBB^mY<Vw7*E6krz0}P
zcf}&k52}eC&B%|nQ}Rz(F5J>JA_r9`7nvqabT>HHlC0Z1kDlx}`L1TkqgQ?)I-ou)
zZ6$6nByy<_3%sPi$XO)qTXKdH4l=3~*_8*XpJvTT|0t0fPLp%OSH#$&%Pf8;=*uDk
ztQybigbf5Uqr08j$#}06l0CH(@T=CAl#nIq7o-t<c(aJ4Y`7G+3rhETEw@KzdmI{W
zpa}<+9SHfCF*if3osZMkE_KMLXIDE6kPY~~+??(9K6^GY`i{%lR|Fw8a=5wqX}xhX
zK=xLd!z0d4e29U;lYOJkWbI2N7B1g-FO5j>jRTt4ZSj^<|HURhxY{gCj<)E?^zUTJ
zAsIUSdR6S-#phW~`K;B9Xc1m4Cj**zLz3GkIcnI@C6*R}3k@~-DDMT5KlJvzW%u-$
zMueNQyIRziqf0@}3}5v5;DzK<ubHEH)7GM2h$0_@NJYs)`j3_3rnoNki(B(~+fxX9
z4!pO*x!iQUkRRIwo&d9vLNo|c<ovytdtlVqAmOc&mc?}Rc`&A*e`^(R`RMf=SE8~a
zr8RY$CEcBxh*8mnBf7Qkg}+-8#W%Squd}azyn_Syj<+L&v(LI~h%z9{aQ~USUcO3W
zZi$n+{ucvig)=>krOlGBBl(TOk7ZbC?B?#;a%G~{x65)3waAW|%eK(6JpxJ5QCe%F
z(6U@NVj@Y~*TyNnDi^Jq8b&IoP2VM3h8h`wqZcz?Vz#+o-`U>d?bRz<{u*1jds4Ad
zol?cx9^5WEEt5Os6+7LI4%;l|0rE6E2<dx(nOa=iK_5RcH)7bZ|Be!oz%;zKU6BY~
zj=X(L0Y}*YK(3w<ZmckuqpS;B!kMVB`VNl3*Bk&$a4m$@FqtR5sg4>;zV!^im_J**
z^HRgU#MG3*=fDpL64Pc%zOS;#3wsg7ki6Q%6?$BY@vk%6pELD5V7M25za^&ebeo82
zXiV+E8d#^r4`NI3qFBPz_EZWPix!<=f4MsEPM%W3ZbI%IBsoO8*WGG6_gqc!*r;Xn
zxvJEFiW^qk9q5c+iL?@Wrn@(O{ZqcbKj{heO~*AppJ$F6Y~QC-BV9e-Zct-b6Dd15
z-}nw1-b3Iiij>!lTkspi)`djc$Ky#nuWl=$QKsdPG?}*kqwTzM{($N0^;b`mj~^v^
zRviqZDQ@&hrXXg+35G8QRJCzs)g$BqFa<>8tpI^<QbT7t-yj5Cv%@n9rLH}%@-I&$
zXO&b~@@1_0J>oHkgFc1`@R8q1<wxm%o9ZHf3M~Agl=l3SMG&9Hn^`gT$1$FLoTvy=
z@LQly2{A=zJdbWG<!40Z7j(Q92UoCp7dK;<^$lU9_k9t@j@axs*)TYyIvuiiy+*<>
z{y#(OqjzkkN?vy^LT`dD4H&A<FoK&Dx3O5MC$1U~cj(qxK|}inR_=6rrK0}*uQqb3
zT2^rM!KNK-v|s!|w;*f<)44WY2kPRWgIa=qfj(R{*#C8`qhrAOpJuJSztsLZ51Oi5
z*j)8rmwxfTyq<nfilP@`xcCAc(5FbM`)!_!%YzZnHjH8<q6_Cw$U|U2?fw2vc+fo}
z@Op=kM|rjD3F_m6lM#*IhyIda!Ik(bu-=sAA`~-$zDSz)CK~lQ`p^Q@<Um@wZz9KS
zJSe3XSQY#gDn$>od*eskIGPt7sNdJH(#IzhNpDWxmtReTHYIP+hUqdL+vmdb)kf4H
zvoJ2Z^?>5^I88_0z!Ba`*l@&j!!HOU&LQpik#^;tAkzFhcm(G<@~Bwc_#3xY)MT>$
zmPPL<krVbwx*oVM0E3%6_8vx3QGEt;MZ9Xh#tga0t^D?LEUlaAw=JM##&~d%+X|Pv
zojsR2@UazES4J=`=i>r}d<Emzay^Xt&0~YqmM;r!n$$gxQmjC}v)A|0-bcnY))?X<
zIgEThG6xRhn~sCc@t6yP=fsKC8y%pzvtQ9c0?)S}b5>-_4Li%?Mq}F|Hf84FYxDKg
z-0MW<-|a4H>hM*{R`|lF(olf%`%Jx`JC_o2)`_gX%cG>KV8Ki>m{5i}gki}-4$*qg
z#%P1G@U<>SY+@OW@2XX`Vk*6eif&>4n%!x97)l?>l6S19v&Ol56`oq2<h=AL2+b1S
zAHY2qWJNHWJr<-3DZ2vf>Q-p~fd`Psa;EH9QBD#~u=Ll%U&stf+nYE%DRV9JiCV*{
zToBahaO|&xGoqC=X5E3&W~sfS4>^Qo^@`(5_(m_h*t$S*IyCY5TNi#}F@CZnwR0GH
zOa<4zn!UW8y(wqAAF~i<HJRf%#C^0UjRQ)2gz{#UP+};;{901U`83MGN(>NSVDze?
zw1ygdV9yNyP}j<cy`$Q2eGQWliPx1SYl!9X3Kv}9Fr+Pgdy`pG**ZZS{nPt&YPu>+
zrg{o&O4rKQ|3vSMA<;UOVxE1<BN<6y=#Gp(G*IKo7<!H+y(kidK6>1@#(>@nHhXRC
zk5cqnfzx18^YtahVJ*p=w+W@cSRNFTP{q2_Zlp{OsE|O=AH{<A?cS^7$Iy1*M|?!i
zR@CDelExout?kXAO!(k^!Oq0-=Sv%CJkD73Oa=TYmV?u=2>OnYu-w3=yfo>zYcVQy
z;H8@^I<?n2+z?JT5<JNn)%R%@RQkc|4@$pFw8=_#AB05Yp%gP+IE+B8$ra5lYt1gD
zQ~Gt4Y7?lel9g)(IgDv(eTo7rhc2o2oMEHVQHpl`V<i=P)g^fALLw_n9k--cy*DF8
ziW_c#LN@Q4ZTrM4P3v;JGG58KT+uKaHRq^u2^*={y^%dx^69pxn+nUp2BTw(ggMat
z=g@~bc4{9#y$spM59G0BNN%~{mdl$M_zrbxW!`%1G4;7XoD}t>AqZVI=Y9)r*6i<%
zKA^0yg%u2iOb!HH<i3|7gp8H+Hk`G)43!9vj$p+p-`4!mqMptuFUW7y>E~U#EO6f3
z8Rr7dD4KS<U+C14g)bs_=1f(T25j=BqP+5qf$CNzz2#E-S?{d}!~F@pswN6J=;F+W
z!BS);CN0rVls^@hk%xMl+fF6H2c>#*xxjg}H6R2j1<4w)@2$GzSg|hYoiS}oyBD+%
z&;1j-@@}NLq+HJ<jG*oe+`TO0(|}2ZHI`XJx&B0$n9ua~*B_>5{drS~En<MSR}U!d
zN=0iB;+)(%un1A+ne)Ju(?4o0hp^b1Q<E|k5W+sfHQnvkYg=SvY9W;Ovts1RhZjo=
ziH7%}^6K7uH(Bd`XJdnLk58@k3A{N-VNd+Heru#?mRi)3cI4s4hC3fxA9AF4%80js
zfFY0KLS;Zk{{yB!lTgrP4;sF0K#BL`n&^(N0Fkko;0=$%JMhzhWXQ7hw;mZ16<N>u
zh^?fWLA?P+@@z6JY&Ly2&EpkhwDD0q%TQ6p<SM8uF*kfDpyK$Co!J^%YT<*bFAREH
zl9MMQxVwOB%dxZ1BzVi{;hy?m!lPBWnF09OT;2G!X7m>MlZgkz9K_KHKSQJr%<pjI
z>XYZIufc<ZuVu+2jt#R$BgbfC#1w-ez1(KNHF=@s7@sj~<fKCbbv5}cB3-DgSM}=n
zRnh9p9{HQyW8Fg7zs6}qn_NtGpyy~6C8N1a+`L&?mZ#}J5>SK+e(yP`fN7G|%xQJJ
zyAS?S1ZCSud$v(%BZIhLDo0}UIN^wG^Sds(iP9O`kOnCW(l>eGrFs&2TMc=*fW~ZG
z`6=&fg_PYjZq3t1orGa8)3D>gi&RX3EL_(E{Dqu}*}ID)@(6o%F^?+OfzL?bhve%g
zv(tf7+;zSn9V^WZjYM`P4|)rrZQ1zm<)%!<rFpZyIk?k5{pq&U`;%?Z>xjoIV$>Y-
zn+e0OxV@dLfZu3`W<5u5p0=<ljzaFtO<X9@lM3Ktl6E~0ztvxV4OCJY&eM<ocF+59
zP>_Y|TZ<nFh#D|Y@>c&ARC(Ey>KH{p&Ks?72EpeZ{5FUP{zEP{E()KN1{hb8Ec~-H
ziffNS<a!LPyBl*OGX1-mQIh*5^TZZp(j$hp>JWdJ=t_OL;2~H!sScjlTLBB##DQo(
zhaMlxHN84o+7+(7+6ySRp)K058}mAhYLvS*-fWqwaj^VYk_Z-@G}Yq<xsJFe7gX%X
z<U-cuj5L3=Hn!Kx)I=7^_ru6?-Y$IJ3Ju0W+;i+ij^wqif*B*OnNqH~EKpe@D@4n+
z@G8wsLm3H5f^!4aaE)x6vdA}be3SY-bl@{(vLviw7ZzU|l(nOK#_{-Z(&Q@7O8hhY
z=I+oizN4L3&gik1rz;#cjS&ikwJk&~lLY&xW9Cl9venGoO3yR7v3bYuV^2VM9)Y_2
z={gSw|K?gpf;-I}fZ>f!0|&4SvLP&TrL)1PUhwzNrHs8SvmFUp*cLg4D_Y|WyJBt}
z@RHTo<c3Vnp2+}_vU;<`(Pk#e!Xy?sAszZ#e9>{<GOrLNpxMlQyBr6^?6_SF$j|YF
zZW!hG6s;IP+yzVjC*EhhS}VD}=kOB>JJUI~_nG<vX%$vPxTA#rDt`CywYm!rs><1x
z)yL<Ld)x8YMuJjQ-FBff38)LQ{jb!@BQ)ouOI^{lV)uFiR4lTVm?Ax-&*cUg(X4M*
z)UJuhJuO$sco!7~FFM1s#=-1@>`f(;^;{a&WfC}W(W`{@#2Ze8@3d$0)wDrFS*2K`
zO(U35v>Fq|`i^JA1_bwKzkh(W<EbA)#v1lEVBZO++G0JFot{pFy_H86ICwm31W1Ep
z<mZPar@g~oZ~!;O$yW`2enof9ciMWvPlPL6bN3&)vcec1x;+~W3_o2RdCa&S^a8H;
zo(o7fINCv$s7ArUu7DHh%1<hTvb&O`&1b2tM0V~tu8bDemU|}Mqf?66qo%VGUZFbJ
ze1usbbBb94W;lZdxkDZG^gV{9;17qPlhp6QZJ?&xz!hnDIEk$97MJ}-f7HGEC8k^c
z3JH=dq#mbHliW3mgDFz#Mx*95jO$%eT3x&PE_xGghL9Nz6{dq{jx{8H=jL$#9~OZ9
zI;EOP$9PC~*AGUK`m2nR9q}dV#fBIogCQ%NAr;-$&xpyGu-8<;TM4mZ&8Hur2qM2O
z=n_p7ZSR_~(;v`yz{YBYVGlS=4(D|3AfKJ?-eZzg%2z0%QMz_`dHy-`%*Qga1-WbC
z@MTb{Yh1#tSj(SHDgNX5a_YvKhPVzsTQ6!n+L$`voLN0_eU=to;@Y9yeaF48Vs&bQ
zQs}U~#j&4soTb;gSy5c*C*3L7KPzvu^E(%4bf{U#*GkHF_68``Au7$4-A1S=I%<u&
z7)tqJYK;g&wS~kpg+TAPjzIpz3H$Y=T8e;D+!Kdqe&Q=G%0oKN-)W|=@)f%tx2%u8
zbZ?_|E%W7;S17vsey!C$ID6j^w>~dUH&E21bz|c4p05(ShE6VIy0`BeQR$vay*pVw
zmKdulav|N+BG42&jsTf4`MkmG^ePr6Y5=TssP~5}r!8HiW7<4E2iH_*a!JT4bG0=;
zid+KJoW)PYeG?WjV7ty{81U-~SDse!0lLuY;v#`ult%X4ukr>rtCGHQzHo$c-oaBG
z4$jGn@A$Cd!gJJuDkBZ~Y~W^3Mqq7Z!BzV$v_-cC5s2J0q-inz$jn)frK2UUj|-<l
zpjAJ@m_Ha<J`sF2+9nr)9_b=)!}X9P{Hxj(gTh$nVhkEvjDUC`NG?5J8BYYA_E0WM
z&ArOtmbJOgu!+|lC0wL~dURv(Q9z^KNCoW<UAb97!MyL=NXUB-`6~>C#AGSUTd(j>
z-hsV1tm%+2w$_%kgr(yH>n$?X>&DgODnXAQ4S2?046DTs;KB1nub@;JpL5>(je}sF
z)a9{s=`to91}(qdfrZ7r9qNQnSu~Y@^e~{Q;CAz;>8V0JO||oMaL*_W1kd0`5FUO;
z@t9omi|l_i>l|#>oidLtH$N3R)J~@-#ED(Jj-4n|ykTh2;W&BX{Gv4_2&q~Y0<@!n
z1AbyL&$Z<be}OWY?Zq7577#LauG80}BM;7{#6(te4qCYywF#sOy*O7mK}T6pC}bg3
zobbab?o9jiJuu7U$O``9OIuKUBvn-2Mtri68Y1+z*^X~ZFd{xCDAYYp6ZWHW0QRfz
zra<N6)D)Zygf>7Q*3|T~(~Tmr`6%&1^(Zu1e2g5j*|t9Cv$IJq_rSC~;Tc<kT*95H
zJLdxfKlg~!;(GRxtWqM!GmVoE87Y23unmsF*eBwg*l&gC_hKs9y9VeZ0Z&snIX$>c
zRj>%`@kd%o`rlW}#o!QXp?>f(J5O3-s`865+HYd0^c(JU<!gBU3Evcdcpp}?n8c9>
z3$jE>=BicrA`AT`jI<o}89qM#=~z|kgt>wU?&8ux*)sC=<x58)ic8$PH<$*+auU%g
z%f_mpPmXsK=A&u63T+s^m3ies5)d=oO_GWZ^JblGh>`fH`n$KLrj0eCP)1k0mF0v{
z{&EA~7#7LY2}FOin<mzFlW}+B_bB13QaLOb8afw43DsD|KbWePmZE#9cRz6P4C9U&
z^RXE@;T=Vp3<~9sFn-+F#r0}m8%pG6p=m%<ukFrRj2@3;tSz?rdGC{4jqfz3;@6Z~
zs^GwC-cLWtwEKLOBznZ2sT2g+&tLXkZg9)ylKOc*u&7x}jqK=<Ah);w#C5sWGp_4c
zneFy#8TGH=!vAdktQjm%6BQ>u^fO{iq2As24oi$ol@KR%+~@^HNGo+Aa__7ZCA3~d
z_MBTv>=t&OOK6;_FTy5-S%sK2Tt7r|VncW=`1D9*UfV=RxPT4%nYCxBH?ja%>cE`|
z!D>)x4Cod`#x&H*HV^34deN#WQ2X8^cQLI%wD|=n95-At3NKt)fI8H0Ov!My=bmh0
z#~pO|jhua8B>3c8!g$ii=$JtnfrEREDVD0V94mOquovHP+>9k$&pon3Yst|UMrs*d
zC9vomQyYfwUk{an2%>KQemhx5N4_crY@ywgLyJo@oqhquw%nngD`7j|XK<socCk!m
z^P(u0e<q=yd5$(K)F*LU@|Zg7CHJwtL5DCXo#8%E5y}@sk^q43(DS4MjQXh)nB6}L
zcU61Foy|~*9S-<OrmzOtI3&UPm55P)hDw3Mc);P(QYpLMJSu@XIzEWRmsouDd2Oln
z3poN~EKSWVCyQnqyj*4orX(~ZlJEN@r|WLf)p-Oq{~-kAi#!@4l?c}#HffL9JFs{K
z;ArDjmr0pWzAz8{8CXQ2weHs-V6feV5Jto>Qw=CUYYx}SfXtoAUo@oulsX-z{L_BW
zx6V;IHakF4h$fFFBxbb1j8rp|4F9+OXR?e9e=sBNV5hx1DUPF9qfp^w+v;vqnbm^U
zy?xef?Wxh*{A;J?q@7nHp}$=GNrN#v3Luqx3RXZGTP)0;Z8y6pKmMcF!y#rDpB%ZA
zQ-X_S^LQwnZI&uZ7DRiLPSPkN6Yu;>4F6*aP(b^EIMcyzK^~7k&}PX~J48M9EU5IQ
zV8bS{wCDOeZ6sL($uf;+j)*!2DGVH5At_UonprFu3{6^jrVx8zYW(4yn|GDi-vYng
zC~Rb}3IBIGf!ZQkk%RR`Q&Oot?>SSV6~;WaEsQ1ASHzjS+@TlOs3dawv_7j0tl`Ou
zN4Cv3BGM}IZp)SOTF<HQH;+HmI{?V)8j*y~OyKM3$PyJ#C~3cl)I4ytn=(b;Db730
zWZ4F{q`zq^a%|gxi5yNLiux_TBnob<ASRRA2#3M=dP)Bti%K!#f?7emm=C!iqBZaL
z)><XV5;Z*43m$20$=35oc03rs)WBy2goHz+9&9LCYNHK*V8id9p}*!P9b=}<hCr2!
zy85<3d*~GELlv-BQ^C|x*Q6-{RO_AQv?OWO`utyw=C4g6xs$3AK)JwQ(u5Guk+C>g
z9(F9~=g&Yfq(%28YhdZ+6e4*#4)-oSt|670fAo91TdT;(mwe+=Eqw>S+~<4KhPy@e
z*-o^w{R~^W5vwU!Oza=fG*e4T!+WGks5DhFfjV=tj4;wn5=kf;y~&Gbtqm+E`~h)V
z@Y>#*W7-Uy%OIcElJqIV%2k79JOX>RtQ8;uuxC9C!~c|+DcJp%0Um2DkQ}EZXUh3+
zlm|&AS5y%S2G)9BVxMlfDb=MgNP~vU=tPKsR5?<l5M#sfDkRrC8k}_5EsjKf0PW1`
zwlA|KVjQ%<ia-mDu@sYR_3YYNcOA-5WW55hmhL+;<EAAz`8Gm%s?Mlak2^VC@svcr
z(?0)(9Zn=UEp1JpCBnE0B-_-s2|_8y5}~jsIY`3aEY=?N0`nEJr>=2;vqbJXp>bVF
zHqoIy9m1$ss>=#t2gO8XN5y7w+K0PBqTb^heCYG69&QASR$#e>C4foz#x>F2hB+>Y
zIa+hOZ|AUN;%b+eZA;;ji*KV1FXeqoKm$K9K<azb@I36Rb!x>J7T-xN01x_YX@oN@
z*(<om6tl6lhBkQ0)~b;L#c*S?r5rItdkqjVCR~x%Ar|baXTe5^d$Kq|PJ<xDLBG$P
z=f(a`)`}e`oYM*eTZ5&iw+!;!UALo<)tH1!DO<LSfj$&9?C1mT5(dM>6w@l%a9c;m
zf7UHYTSz~ouR8RNWL*}yWkkE9y;x~U_jdb*GZEb@#r;9iJp3Fv?`OwHx~i{88jlVa
zM$0R?l-o52J8es!!LCm8-#mlg_IQv_u!W4qiJA}KapVTp1*H>Q?nkt-;+kKknvgX0
z%5u^HFM&Tj@QB(&5$m37t&C~La)kjyLqnfEw(E(mJUe`C!LyAZC!#5}>7w^ewF&Em
zwqAa?Rk!S_>(lc`2G>0)DT5IypX4f=?Mk_>J(E&@-@JGVI-37>-e>FNSidAFcq9Hb
ziNta<LlqoE4=T;Lz#rxC#NxsN9%9M^H`G~U$AV-ZzpgY>Ox@#N7YO@W$$hr(K4$@#
z`jtb1<HkWNOGBIuvCta%ZT{-Vc`jRNZ;@(+PW`;HgK<ZelZq?ZwKAa?)(?d6>{|#S
zX;-d%NNDj)RBMXqdNlN~^43u|6l;V-`7D)WBNby+)#=JfV~RX6umla=0b?F~mwzyX
zAJhW|`Z|U>tu{J1T+ggD*bc!O_@p@fY(0$rqU@aBA^Ql2ns_1Htp+ME*f*Adn#%rK
z6A0+ZM@ocdlu6WFNnS2Z;6417ULj<VGzrfb{H19L+Z#k5eEuPzt|PpF<m?z&hXDM=
z2o+nR1|`tYr%ucWPIH6q0M{g;s-t2~R!=PW>j7ay#p?O%SHU-2Q%KkhpM5=El}4jQ
zviU;(kw2QQTS>3KIIh_~WgX5%%X9t=Xjgf4PojhrIO)wyE*~<gg+6-VOp>`IpU3d*
zjp-HzZwC=;pW(a>ZNKinFg$X(AlF>#39+856s#5Kl9I(@ZiH25L|Xcj2k4S~k=x4j
zYpB1B8~_p-o~5-OU5SfL)|&B<#Jiq+fjJ_@ksRxXC{k(&tZn7Q#KH^wjD~GrO2Pkf
zqfIN1l`8#vcXzFMww;Zl3i!W}hW<GU(&7dj1)haF%={&^fm<%=uX{SmDlA(e2$u6i
zeoj;xtR}I%@nP=99NsyM^{H!#QI`$eux@bModVYNhQEINwsj^)|0POxEzPED8c7eQ
zS;G>2B}3#l_H{E2|F%eKT91s#!q#CcstD|S&(=f13lD*`hTO}-fiKYS%nbR*#~Urk
zq9pmZelOWbs01o!24(uQnN67#QIyGo4vq{=+t~Tp?h%anf^dbofH#8Mz9*^~miaTB
zE>7^j)o;!{Sra;P$6dj1hS<9m!3cJl62_KzMIp%NLAvi#%2&C02vKLTEOq5k%1|M~
zmz7~H=wA`Ax!o7Y`TP{cmbrKK{o&^T4Am?t=eDYHJ5p-coET4(NssOrYxjo;-RTS!
z7?oJ?R5G1N257m54InqB#<os?hN|sdk$>+Nrfd+#8rwELNcl&2=W6%VPJqODS{jri
z*!rI&Mi&KBB2`F^`m0n>{(v{_dbzGa$;rTl)#Dz-!CC6|upgcX){<L+S%(otNmRt`
z03&XPlp44RLMLOq9e%I&K|Vg*O`PizZHT02Q?h7~g`pT>g2v2rgycFzQlTOhvVW)o
zAS40Z<ViJxf32JL1BsTcYDll-z3Dx=EXpn^uSU+RA7?hEvXBEu;w^X<nk<CQbk08G
zw@TZuiiAEEpw?Jx4^6>i6MVfa@?Jj!4u~N4hFv)a)_u|i6^Q?o4$;8d%Z&I33I!WT
zl@*u7Kx(IH;Os(8WhuLxl<X#al(9nX#e4F<00Y$#plo4(bYaPCf1;SEVLJvO9$Hjx
zN33-!vdmh9Yf4*Ojh5<H(qt7-s$ow`RJ_X^4?P!{8;p?vD3EY%LE7%3h&tLG{X}92
zNN^1yS)wj@q@OlZPH%YIG0nhMmNm5ra`1$oRxi?}V2rYq7!sTM{8+zR55KCZ0P_yY
zGp<tDx5hr#JYAl|Zo_PE`0l0qhb&F9)uBe_ql>5{XD3sDh%HGbB#kBc&)MQumGgP~
zZOYB}*B;QyUQFyg$xvHPD(qn_1RfAx==72r=8?U87ay*fhu(H`q5mqw1HWx>)dJf#
z2&=n(Q*cI?jMrO54}@~Kgg7xwqa_Lmf+9;GFnF{FLqnjwF;zwHr`1{M50`z6A*b_8
zdf`;Q3?>BMI2~w#(-bo_-<0}B5|ay!`dW3Z%(|<0ZweNuyHg<Lxf;+&D=Dq_gg9SJ
zytZpZ^6U(HX|JGD%M5?<ud6h<2FO|S99bEMHGlst?yvw+tp_LD=H|nYF7147s=<IY
z^r{tv^k(jwb;bQS0fz3B|1LPs#Z*q?WDUHB0>x9Cclr_qYhR5z?(ZT9!F}ieu-)c~
z)+ZSNXe~~G!HmDYQXsshg?RJ%Q6){t*7Re1ba?_Zma0oQFIK&~RpL^x3?@{^IOc<^
z8BDT?#zitUl*^aIf!?iiahas;?_q^@n54lM`x*1)IDU))Jp*a3VJ}Z!dgej$L`>l)
zN4D`US*bIb&gzzzrjnL<ycx)@hB!1_SM3B?lAbMDa`^FBV=Qv}3#Kw|d~E_Lh=)d#
z%o91yUTI4?B*lw~ouE{(A`6HyIbyF@dhk;$>O+ZLPpVBc)z*}8rbkKr$%t;kl{Ti&
z*lCYwAF^F-EQew4w{i4Q!wvW?SWh%GnvAMFN6gYqi4UQ5#4E==SgjF-XQ|6^nJf(i
z`#pqARLvDry<wBBGVtq^u<RE%gds7`zy@XqZsey}#ug66CL!vV)V>bPgr^#M=93hf
zKy{{pBr3YY#GWpa$hJtB%CftNr>4#=J9u*<_~nsn=TSg+7UBA;cz!qiK8ZYQ$h%u3
z6klZ&Dc^dyHoFO8*K%ilhNrD>qGP>#tkSg&eg{7Ab;JD?(XuPu)04Zh+qs^xl8FVi
z9*aH%3vm#+J?d(#;(+CQ)=sX5wQ?EAx@~fwpxsvz`d={0zmbo-%q3xjuqkaf<$Xbj
zi}StAWJop%jbP_Nk6v*VLK^F`TPI|AJ0m+q=Q)a7d=h87f!|Et%Kh(X3TVJ(hT2IU
zlL8HV`_y}qWM0fkbQ)fa?>Fo6wZKtoBLA<WKrejy8+lM#zphcU@p~!hCE0lav0H<K
zM(KLJUtSs#T5Urmydso;Eo7;dg6Z3-0=dOu&u>R}(%jwg=n!>6If9)wAYU@JU-!9Y
z<e~710*JwRefh0kQrEQefw}#&jwWDCgK^(>@s))LZRVDMtI|2zVeG?P7S*A$wt(m&
z+xR_)*9DILlcaq1G2Z7Jem%M|+FSomRhNoUtrX>N!b>U?W*nxCGZ*$lt2~!6MWa5i
zPI2vjN#WTs9dk;j%YhzkYJY-VF5Y5Do~o!*Z&E^@m@W#hPvz8r^StlPo{-Ida(83z
zC$vPR&>c&9*t4iox*OU16q<e>q<^UXrJN)7D!smjk#=Ned$F$m=_Gm9Xxwswj(!^-
z^4TX4O0Y~@%ONU!G@$4RKPX2%*Sh(D1*z;4eyQO({BgS}Gr$chJ0gG3x4iDH_b2re
zj(7B^VgC1j>*c!m+p=M%vn4zO8~HJfu9{nY`V|E+jl)`m&l(`);SZAH)s3pw-?IAu
z*Zg(B=s`1CszLxM_J8U6-TYZ<|2d|o|37g6^N-<v4B}Lmz<{pps}Oo53%snh)HxlV
zV6ne}0*o$@fZu1>sVkf2?hI+qpvIFT|DO{ZRE!s)YOo!xOn0N)*ByvLf1QBXqW8F;
zyX@LTh8KQ3K!W^dOmLe^sy$>5`f5G#rA8fskfo&eD!v666vYXw5fi*pt`lUH{-D1H
zer35^kiO6M_P%>YC)e>ooXNYy=XWb7k=i{RoJjqucs1_(_YLWNG49ilWsWy3#(Mjt
zTOK+P_hN=xm*c4Bre4?XZH5j4j*R<i!R`+(RczMno^5(5{y`o(Zd0<U<R@eGUw@`O
z6=Th24wJK;?_>cmI}2fTUGiGs6re)JnU5&9$TI=g!UP&g+q;|wH{eTL0fLY{j10HB
zmNb3aU6J-X`V1DeYDyuh7}aBGG&`XjvO;*&S;c2)d}kvW_>0G!uHjPym&e`NVuP1C
zM=Ux6@FX-IlYLlTOn`^0ExO;=T3F&DU<bTdx}X$G!8Th;=(5?Oy5^vqZpa83)va`Q
zR$;KF`-p74`E&r}EfZe+b=ngNIB4XawDznD7<jz?;A?4)@g_v25E&0Fk1RKor$MY$
zNrxT}R-)mZ`Beb0mBu^zcW<o`L4*+g$6!7zQI&%g#Tq?fi>)=!H6u3k&#wQe$nX%z
zQr7t>%G8&vraDDEVBhQ?oU-k*=27(p2$(=#FX3g*U`>W-AbwL-xFi1ONjCm8SO~ro
z`>k+WXK;z#E@$dU50xnNePmhx);A0X%LSq1zTCpU+}K2y>oBz~C<%E@3S7@%4uAcg
z{?g{_K_p1kaCJe1yqwY&n-lvS;BP=Go~I6uEXVl3_SSqYXq^1knc?Sn(K!pN#oPDN
zC=WlXHr7G>Z%_4io3HIrLmYj8V#<TQ*XKcvBvtg^|64veM*5Yx$PgMVd8^*XhG+4-
zLzZAD(qLEzhvL(#J8`0IPElhCO%WxcTQG)*kFEwgf>`bmgl^v2ob9ya$rb1)dalG^
z+U5T~8&>#0Ev8%WgF85ds_sK#z@PwotCz*65>@R52PN%nBA=TQdF@v&v%M&75C{nZ
z?HF5$i}m`VpGat;9eAV2R5545?)Ny4B>wHoR=_+P{^p!+bDrBF2a4=~kjCYj$Rp;S
zyKIN<H#5oF4ffZhYp+P$!2P{ua&2ClyIM8-mK5tMjooe~!3sT1fSif=4SC25T({EH
z9KBI76j9&aq1BQD43>0t8@Pg*|7SA(*SMK9byfLpw-LQjXlqZ(1J*O0IaT1EEnzep
zVw1&TE_$8^Yx?n`ZMq>6gtnf+*XES{yw9+J7+W4R05|+Efjb3=-uUv^gz-L()n7c;
z7C`U{+QnyX?(<syY{T!XswGzgUW9oGHNav&aA>(L=Wmd|M+aW$H(FCmNL9`at&p)z
z_u0Ety1z~MGm}yi&NNbN%<sO+t575=)%^WB5x#0CF8;#ol(0k>5aJ@QZtPt`j1n?(
zUzaOjj<vG=%X?L<|2a~`c;D*mXY=7f-8OSgV>ha3;%C?`svvLdB<b^mCM{m|sbH?c
zDM>Y7tzB?8WSMlPi4dvzLFC%&M@Tz!Ou->?89@@F(zfYBCX|eVAe<%IXd^XMovOeD
zM9E+dBS~H%ah(5-_EAU<@eMna_N}u-g^}6%aRa#m3#LxQ22My5<|WygpwhGSZ}*K|
zW#>dh)bL;c3z&?0KihyL@d5si@z@gmN3iyrtx@@B=-B&#ihp+LSMa36UuqF82&9VR
z=vdp#VUm56Th=KLGuLdGB%wpZSea+BT_pvz2&8_=Xo{ofIPZ}l|A?j**>+c(W8S>I
z4Na`2+G2plgIQDJ<u4ILI_$)M$CmU3S3M6qKu_U~dI&~T{>#%M%G=%KD1ABeeV=bI
zf|WCAzRy%PKD<G>l#?7r6$gyQR7{!Z(Am#Wm4SLugV?VKH5xe#Y_(nL1;D{IUCH-j
zg#m!>WzD<(K_HTpF`CKEG2xDig4bL<9HM*Aa7&BT2TlLa7BQim56};5<hFmnCc!Bf
z+FbZTjPm7Bq{=yR*bn=*etQAH6S*fsZFs`Kn`le_YA?)CYld<Hr!%kIlp28Ak7=|2
zTszgvjW)MD`>)SW8rzO4u?WaR+LEol-D67Rb?e2_wxg=|VN!(~n}ho4e}C|nqU%56
zjboW<!cDmH;4sZ+4`s|c6r~Qz+m;DjNa4B*NO@~+31%LNJgC6WDHhYsXkj|-T*c3(
zN|c0=-yNdKzNv6Xkop(liuV&{89zHA&kP19T1rFS6MTEElmDc_p3EYg(JNy?UjNC}
zHbrKOvd^06zvi!)FQ+yG<W24iI4m_z<8P^DAiH`dzo(+b8)vUybckjDZZHk9d^gZc
z?oDm6Gmr(uiftJ~c^lzg;fT8j8v;BDL}O%WFO4#mb37OdLD;jx>J@?XxTMKOp|iuf
zo!hH_9XIWlA`ORzM#C9rZz&TIdW{m^b+x-BIyj@lUM%luQxTu`vcX5Z)%n^I6!BSN
zmj0_{w$CG5{OOSRr~G}TnFjI6JuwTDEj8U=8$Ziq?O^?h0v4(<XR=p3IWlL!u9oUa
zne59OfOgPtCl;^PA|(2e#>+^wCrAv@S!YexI0Wm|bszRua(HNFpb(V;r_CN&+SAeQ
z@yH4hNq#ht(ejr?;3KV&Slqmb@k}@k%-77LGevh7{OGa-4Eg%h^ax1C+trdWCpiXf
z^{A_c;pbdMTn(-8^80*z`LIZQ`Z)RW*F6LuNB%)MJJ>8MJgzO?xjM2%WQ;{gmS;^`
zDZ=u!7<glxbJjQbyFcO&6v6&6g+7!g+Of}1mHqWmX*L;vHd8g+A<%kWDXPvWFYGOL
zcNYX(K0`NDV1L~o#5I<gb|`KOK~$*5m400GlD)S5mzDNWwe!zB=uupxcnZY!IN#B|
zTKl;7=`k$uKnDtcvz37uy}It*8U@#<p7p<pk^UYuh=i;V$*Cs)XOH{xLHU0onaBYB
zzefYHwRcC6&HlQ9DEfEbAUhVw527too@z$_nH)X!)dKrJy+CY{k*W0jm-#pHqdfTU
zzn^b`DJlQ41Yh|*4zLK6r|!2-EF~{^zY*T9dt9`s3JMA&l2b35`G3h*!v{SAagifY
zuFtU3zcI^h5&Z&V*F73CAB2$=oIlg_KgegE41`p3?`6NdPw)bP2boE)9&s)DVIstF
z5~RpO9T<Obl0gTWsFn=>VFCU+_wPn2{Fkl&eTm=bN#k~hb_Tkm%Gl_u?#lH-{^Ig`
z>DuK|$S7xT`^s;e@Db9X4m=OuENX@Vy1O5!-an4d2nK+tV*`<*pnkI%nW{EmJ@&>-
zy$Ld-($k)xz0>|o#w2EXNsQRMGt#8(<^;867l48qoh91d9Nd!g%{kFQqjH0ytQ(7P
zHB~u|L-`Q)c+YWrJ_$a+eHQ<267K_X1htP#eHlKx!k=PFm7Z(}nqRzWOkFPU!vf`9
z*X?=jvVEn`ELcP#Rp@hq`-}Jut>_JbRV!$+YCRph*kR&4Z`O}P;@leO?K1seJkbEy
zwCa9gN$)OS|NJb`iJ&tKbIU1z_`{t30MIjaI_t0ak}WuF<bD#-g+8%NI^Ok)A8;0t
zSC4xOZ!QYHlKJrjb-fW6I6>%u-es7k45=wF5^i2XknbJphG?$1w2&pmRc$yxI~}r}
zyrMSq9n+M#5uzE)dUW5tc=d&`-jfTa2Zv>H(&pQK+AZDj^ex3uL2PIE2W3sJFzgNV
z+)GM<@$I*5QzX{JcpsF6aG~AB4xV%sO$D$ZlRK<U?cEn4gb!i4dNSlN5d~DA3{xpH
z*F10({OU*Y{SVO(G#vZi6o_G#Jd%`kr9&?hiY9mkl{dR^0M^@5@gdA(+MVN^MxDGL
zPIY+@Pg5PlIP@C&zGxgthJxJdA6d+49LXjdw!bi!+_HbDvs87B61i5H2r>9lWy{GS
zLHnV(7Q&p&n7yvd++sTV`=xN0QzM>ye7@!u@l8YH=1de7s&W00E3n(^qwdYhU$%bV
zCs@qcT<l073n!UrPG}ASl{e~0mIS?@%)$L5cK~G_1lSAeIS-uf;BqBh4ctp9PQ+1!
zZ1=$DswACN#fQUFMdi6sBgM=5*$Tjp^EwMaBSV!ImL|9y4TXTVC8>>&2G2AxYh|_0
z+<x!?LrGxg*GgfI<^;Jj+FN}z7b{i2?VaOwGlFDsL4|H-gcW<ald&~{805B*-Uf^g
zpV0fAXpN!J*Y%RXj^TB~NItR5;E(p6&6m-7eb{ox9R!;%gnc>K9*cazA<&$P$ydgq
z2quSOvPPTA$;N9(r%^<4dmgFwc!dxc{nwWa3p9+=A#fCKZ=ZDUa+ACB$E4d3(BFy@
z_s$1D7h9-5lr+V&uWTldI_Lt)&;&gE*>R9FzcB2&sk|`nASYlm94mU$C{IRaw6dmC
z>42%4Fzu39&u^W~&)N|aM?N&vaHSJX0GlCDqL~`-lJwTB`?Y$1|E$vAiuW~`@V$mO
zGX(hknX_vVX@%WX%w}yf-x{nTv{ur0#70y7_KU{$wAKX^c@%Io3JCBbo?)-<k16q6
z>{_^(wnYoUkyiw9-He<N0uGsd6L~H}@&Qy~djm~?ZYrMjA|KIV2;L~tbe5eE>f4V{
zD{^dBLt`8%tjG5+tj$|)iOqj7be)fTGsT)n89}D6_`BczS?l9(3gHpGg#HGSR_AaL
zv&q;eI<rkF16m72rZ=XvWeRR1$HX9a*4EjGDaJ%~$rhsR%X*tJ3WSp5&Lo=F)`W=Q
z&k9&K;1N1?KbISg5>a|<o?-{gEswpNTV);SSjdKQ!fDK>f;j6b3-_j-#4a{1O^~o>
zt~?jI$!<te8-CeQTg_G!#}ru@T00qz2@cN|{6V3RV=^Mx(qL;7KNxwmBv%~imW&K5
zSpBsxXR7yZWU^bRO?#9v5%1AD8HQC)1)$jdbmM&EMIJ&iEd(cA@<zjo$aGlK9{<+{
zoA6U+Az)e<c&!uKZlQwYS&;U`@U}>ofHi66IlMAwxyx1Gtb>Ko&MP)qmfwiQv}`=F
z+xs&DMZ6;C20F*h<yLvtac2zYs76di0CL5Iw=JEm@#C>#5KmvlIyB;_8zSgk+qD?}
z$2`+9_S*85^U&uDm!s}i?9(OLg8-JJ&H*$qCK(QuTw~H5Z{sPp=#0=-5r7pBLww=%
z?@#6wu3Hd%Xphy1*mwlD#VOsBd!89x8KBH~;;eCn({*g@K3f3F^aedcIuo0n-_ep*
zUz8x;unW>^6YQSeWjMs*DP*!jo5m}Zz&t!!$IAJJrbOyujfHkb8R*y7h9LX8;pu1^
zYq&o32)ldte3ENFiI!uqQn6bJ>C3v3x7To8N?Di(&U6lbubaxhK}&?-p_!8HxyN~R
zMQFKp9B<bW9`Nuovl;PmuI|dl;1TRo3N!>tb13I4qJlRfop%jbO>G#Rx=EAoR~R^B
z%78P7)|?B<I*w9Bz9df_P`)BmhoPc`qpu~jr$2ljDAs;#h0Ad%iW1&(spq3T5gAe=
zKP4^1j$%!<zbmKj`i8^z7R4gRXC0Dpw*Y3A_KI8O&g{aAQpsG+?J%+}AC$#=*(%qO
zL@Q~u4OaB1xfL5rQKE{;_pxmGOZ@qwPV0vP+I)RiQLd7A3@Rm^EKT&z4(t3-ZwAgE
zqy2Gp4eNm-{0)}vW1{7cNFM}r)=@=sB9f6=jKoo44yy=xb0Qz=bSUOBp$&V_rr@gu
zv#Ct1z3>w2{R{%QCim4C+!meA_+-4NcE*M1X(#ZGmYP#Y4O519ig@Mw59tp=DZX`8
z&}L8U##B_U9YI_?G4|59SuOaO<u<+an6_lRAK1af<!KdKW>;sUsY<g5RkA-w3Dl;0
zfU&9zVy_5qxKXP@Y?m6|d#s^f_qoctlvM12LWIlm;5gB*Q>gSGKbEm(%t8R*z6WV^
z*s`Moll$&U4nJ-Ex%hRY38{#AQ-xHnuSo-?v{T<wLcK3ya=w#^)t4=jRIW7Mr*|(J
z)O6x$4{k_mnxQy_Q;{~IT0<FtBPp_OY@kTZam`%v%_E|)kxJE{{fGT6t%r^LJy8V@
zRRPAGM+9pzTt?N`UIc@9#!s*$A=OQ|zKrp~5%S7E)fz%BPy|RA4CUaF$Y*K4^O5!k
z6Gcc$5|c*c7@F+~`udmo4}<be$@HJ2gP$l2`2}40$IDL^ayiStA_h7r=Qz{^&PU8w
z24)+Ki`H6C{z3P`KT$Kp&B@$mva}j8qL(tUXNFWd7q{hyW7m|HN4-Py&!_0b14{kD
zzO~=&B0J|jy8apiMh?0Awvei@sr?~PX1-{jcu{4T(HC3mW|OAq=JU0fsG1ywm#R?B
z!`Od3<Gno)qUI2)-vdHdT;{i-`0MECYgk+9tAXAk%`ISfwS<C`G~srj1jFvp6R>4%
zuw*xGe0gUzuUgpe=da-Bfi5-k6t+E>z_Q;tA^*F~ES?i1z=}M|KP;4NJb9x<VFSeq
zNeoK6p0d=?2>O><SMTtfzd3*zJ!iU{PZLcHMb5WP5I1`JQL<>^x3aq9gXrDZDSwZ5
zL`oaJx`B~B!mMo(-a&dAG~ew}FPIN`pMKyYM<wZ&*%6J!Sjt~pT8?0VEL_Ra(RT5>
z&N9-)y}#*69DbCX*hg~uL-Y3bWKFx6A(N#hx(^@Y!yJ6ic#M$CJ0o29nG{S%Ev=QP
z48|=iTkcRt%fhyKNIPnZ3D}`i$$1kESdkGvdd*9iWEaFQaw=*KNKsJi_Wo>c9WORy
zRQiIbG^~lln22(i6nIi1Eh+-Geuq2DJ>)#+oQNaW6?Oaf!_MEeC#L6I)Aisx1WC+D
z>1{nU%aN9-IN2B7gVU}@@+{vHJYKEIneYh7P?QA$NGVFESU(YQG^5+HX7v6XH)#|1
z;j@QIbVFde#oj{<q$`H02oiC^iR#*FtA@#lp9IFlA9z}I-7J&X>?cY`>dhiCDUarw
zO;Q@^_GP|3jize8^;gX<h9FH|ADu{3V@j!dpeBV3f%TITD}fYABPr5Zco18H?#zcC
zg|ZHtN0ll#w!4s#dznsx89E5TP>5WCe3-cNF~GTdbv#z|^RdpA(>K~?-IxlLPe?j(
z{QM|R$?=gJRYjwmAsV&(ku++__0rpg%XKF=cLw?4P#Z34sYyL?b_xj7=BP({NJt*x
zN7Glr0zeW$c^&qXQlj?djN(A^@tFF5biHGAWkI*L9ox2T+qUgwhaKCtZQD*q9ox1$
z?pPh;O+V*3KhF5Z_q*1vs$FZ<s2caY=Db&JfjrukPI)8O4t>7n_s;{kgQU=jXuy+$
z;z<wRIO?V9Wynw>hjdyv_zmxClhbvVt2c{R4KUGMto8)l!>Y08sCJGntKMj^`y+7`
zA`y1c#3N;N+J~)PlulOjWO;s()Vs#U_k<uUCwTrfnDHx-!;KGQcfyco=LQU(r9f(I
z&#3eLG9FHh|D}3K@D~GFBk_h9e3t_`IgmJSCVRYxL5&?L+qPY24}-b%6n(6RL>9;S
zjR+n=wG9^%SKBzPV)syG3r(NXhcDAn{nR@Femo=$xvEe@_pbi3%GI3BY9<ASPJ6t>
zs4VX2qll21nC_2uq?^~u*I1`VK%dT3y_^LvheZNd&x~b%327fN3c>jri4qWNZx~Y#
z4`bT#J3r8H<T3!NT_|1@XvC7@f>MN>KXnl?f-^WR-0HNeqVgaDn2ilV2(a&m(k@61
zlaLZvr8EF7bP|*=;?v`vf5pJ=jMGRX@ZG=7Xn@X|7*ZyP7sv%Mb}g$POyc^<N4)D8
z>JqIOIS+hH*RPoFksM7DIhP4elI(??RwbQf{vxj9pD>C`8DaDKe@>?6UTj$I7dMxv
zy=;P#upjbL-+D*|b>Q^qB}%npnX<xxLRIP#e(A?4ih?I&<LcTFt46zDxr)i|()n!P
zB*eFWjiI0-TUq8%7b2DKp9HPQdBCi_JO1Y_mq?-6rj{wF-+k6^ykn4V!Ee59ws}4P
z2&-Q1S|hltRf89)_m#xE8_C@)!cjinJmA*|^V|(}W^7&K5n|DLc^E)DkMxv`;|}{a
zzIL}8FnGaZG5ie;et;qE1%DN{%G>nLRBXV}^;3{uw~*g*8gyzEfG^9XMQKWVr5+n$
zq*=PI1?+@Ppl4`7s~1)Ye&-CZ%Pw74;KCV-enO^aE=IE43>!oIH6OOzFeFhcwIla>
zM)nQ0Ont|sjhY^FhcPRc1onp1VKXY=jmq30Ad9R)O{>uc4QJ~S926i8sExE@|6`aK
zyULX|aGE6tOWZ=2`>?|Eh^$Sa25(#K{LaD~f1^vj;}OVm!ksU@nC0SVEKaq4z*OG&
zh2wsI?J8IEt8bECi#O<}yCb}j7WKePGwXEKw!^cpU6qUVI1}n}_JOVg=er9Q={oY@
zVU`@iv4LkAhw0^yGCi^`9(y<92luR>MJ<tkG^4iQ1)aw1p9rgWNVt4rpJ^T{XEJ}m
zS&9x?zFtx*^&t@}Z46o}<H3@wX!X3oUb<4j)Y-vRirS*aU8((S*T5A*PVY+aCZf-2
z-QkQ@wZc>#GJ_$GIR*yW;5->-1Ibdw>FErfpQ`n+0m)QK<VCkCo@Tb+;n6tS4XDmx
z-Ory*f=|cZ4vE)opbEQ<C5nSDtT1C1nvQCTY}}~+cX^;j0lZo;3cMH2<vJ9>+db5U
z`(l*h&arv08!0pTW-e?@J&dx~l$A1mF_dnrl_xUt($7wG6b#^*c^H+{?6hi#AEnFE
zR8V4WSvLU<Z=3zbxeoL1yV~!Fp2?Y_q?Cd&Iw5L`W4%XM&c3U%Hweu4JHD)jJDn^9
zeim=oiy8(jHEH=n2Mfw>9>fQv=uUOZ50}~44tCbQCyX`Zv3V~5r<nDYu_0{jjrx2&
zh9m&H&(1wU`YDwAtD3WY`#6#dF5E!EY{yZt6?+OW67Y_vX@&hgh*pW&9f8Nc=h-J~
zQdMfA4W3LwnUV%5WKJphO&5u}ZpD1(lt8npda)A4=1K!qvBymxovFu_&zGYf$RuD3
z&)RF_$sBY}SxU#k9oL*J<Hqxr@%sgw#G_o!46VRD9`!l$T#}4*I_m?#4iHgJ2KV#0
zwvMB?N1p{lBRg<kIMUi68cT3CpYE<~_v;qjIp@vRSYp!gGTQ<fi=u4y5=BS21ckdr
z24-2GnFM0FS%P+O(sJl7;MFVGg1O>ekYzs-N2Yw-L+)W<!xk9BFclM&!@ym|SUVz;
z;un%UHoP#(7iz@OrZ3{$^)0mQ&C`ze>U}&2r|8xt6B4n5Jp@wK=L-syx!s!ss{Omh
zMV*0V<E~Ch7uD?g>jKpxjfZsNaGCjxT)B?US$e-SE+4A?=|fS7_v`G9ZwC%_*UXh4
zsCHh_Z|ru%;?1&vcwuyB3<Y*>+g+<>?c!_pjp9VfD-Bs?8MWrWAAlEK<zY=a%(6K|
zEzk*X{|eIaeDUJq5PW0m3ZAsy!TZ7#t>iE3$6j_0HxHVS@?zTYQs$vgx#|N&zlN4q
z<DK2vn4Qm0$M<Nu_u}~n>#^=UI^BNUr%#vNVfoL-e^(Gzp+ei8T#4LIt&f}&cv3!G
z3_cMqjuRWKzWV5|4QYh9Tk7lB_;>R8riRD4t-VS~wZ5{V(J1h%)CVIDb3uEpgLAeM
z=X`{os4TlKKYG@Uf?EcF?z(1izt2&4L|c!1eA|!ow+9Qt$Kl&zYZU8wCTqMWgQME0
z2TNf@Z-pHU!+={(v4fe}<c?R6ZcyySpeP#1YXMJMJt?Evi2qF9n$9P!=p~-R;CmrI
z-NY{9KR&CpZymfo$R$@t{r=>;(i+bzf)lKp$H`^hZVblzNp+)CgRMB(Xz#A<+HiF+
zeg;Pp7pLoXpdZiXz&~kE##w7Tl2AkF$uw0^`hLutIUM30_!B>0zp~n=sZ|axxUspC
zvIoY7dz`y3<f)aqtGD(hJndRY*!zEReWGIsh_ijQS`3Dc{1g6Wf&3qBo(X3buft{q
zN{%>7FhBbtB1^CuR-GTv&rW{bsGVKrPd1~;PyWwx_x1X4zCUQnEHU=aYo6+>``J@b
zD_s12sH0hP_?GBUza={DC9Ur}!{NGU<4<3wLW_uU!T$)0|HMQ-P_&I>@h(={zhjYK
zh5TQ$W0X+e;?BP&sXGV4zXQEz9$Hsn|D>valk;5DsMNa4X2jFweB-=`MAy~z{4Trs
zujN~>%<_NXP|Smu{qN5|yT`U0{--VSa5wsDR!!h7fjfN7{f+QtOX+|5OR~WIA1Sid
zhv)FX<68(6e0q8L?_ggL3-A~1BR!jUj(_40{?w;rI7``u{&y;$S0%U^&ZqviL%SK}
zyYSb)^kdAwXYrqIKWPqIFPZs1Qc*$?!rtIboY7zXhd2N`(K?0-@siFV5Rl9y199}%
zCe6{;w0FVcuEYazQK<B=l*|-yPP@nyKCfGZZQ5J$l*to~XK>2md<S)ov>YuXywR9F
zL`7CRyWb`^NsQWofjAgDLvS4E?Sd&^bo=*f<xQ-HNZXT5HN3gq<8p`LgK|8QI4M;F
zZTeP!CW5`?wkEDhK$ibah#kUrjKke8TS(M)=6u95i(x+qm+<K@bfF!K+a=5q5{msm
zKaG6*^h{m`&hTQt`OVUYo1fq>QY->sVzqt0FGWDECPEcL7lG*!&I&wsm7BGLk(I{j
zn`OcqtO0DZg{>W;OYy|dnr}_syJBv50pv_Sgm*du3L^;Up({pTdboDW_uE1|p+`J4
zW}gk@s-vtaHW8Q~(JH~;X;-p$f<3!E8sQWm6!eTP6t{vHcZ`xG?VwSUF&c;jHj!Pf
z2jgD#1m$uKnbrkbB^&;l2pi@xN^9U5UYPFiSGE53fxPphSRY!de<qWji!;+#FZ3hr
zv6HuzEFyV+m&6D&q5k1Z)Mij5*MqnxXj{Cg-4bd-=H#U83a%<y=w++%w;(PvFTa73
z*Q3L^bywf~$y`nQVsYIo;<j8Gd=}>7LeUo&qwbhhyujfEh3-mTP;kNI*#<H{{M*ht
zPMlYRL?Lx&g=TbCr20s#F&mTqbfX^Rn?@++95HPrIR49868*{#fSB`i_Q0EFhkJ>D
z*ADVyb;8dx^o|O(yH52IxgaphD0A;HSH82g@M|-7(Yd{7h|%|(=9^H+j>YH@!Q<}|
z=boG3J4jKqN-oYz_|-Ju-eiL%+Rf#hfPk4{R>(8ijwQxS&o9(sN5f_{F@Uk;M#huG
z=zjm=s|L@{bCVyIGVk!pNBZb6N~WX`WoZDF-b9j`jNe9ShtfdP3w>Y`d8Ig|C#?VP
ztK<n|p^cp4^!SZePmxugkNsT1Sv;|yFg))Zv#r=5&4v;B3jb1t?wZ?<IhDP+mQ1md
zF$wq}>Yeq6^FL$gd<V-l+9OvG@H;SC@5W?jvxyU{)zS-lKSE2Nj>Taq=M&7QH{q-)
zROFW#QTk49`F$YikC|EmyW;y_Roa~DGTa*i6ZI?QCs3;oPedLC240DnyuqL0OC$kB
z3t@kpk-L8F*Vg@C3~C>NTJsTTxH;%EV7Jmt0o=*FF!hgsBtq*rRNb&uU1q@~;kJw~
zJl`ogKDlWLp9eh5Uen$=g3uE$=5oI5I8?&1jH{fU!J=m$I|s8ttt`_+*&cHaygidg
z9^=7i`nmD~o<>uqT$K#}gtNb%KM~tRv}|%^(Y(#uM%AaadBFi{m8(fF>}%dBlYU*B
zxw^ztaULeW;I8|J7U;J6Gg0VlCp48^_`{>|$KA1gQAi7%1jx(VMX3d9r;C4{Li5wa
zTn^Ia(eVWset&k9mc*FXEWU*6an$OG%;XVrm_JdeE4;VjUAG-!jUTDK*beSL!RS#+
zKveniFGkgY=e%zf@JUpa=m2CQTAEz;S*<506d`8lW47GR98rnB9&L1+@u=!)^ZZb-
z78{^AD<zTq0KpSn&|P`Dnw#0A49<{1a}0tabI{|*<8<<GhV9;>L515{1x!buHYyiL
zR{&S4jg6wF*p$`$;ZOl8{}lWKgbMCl1b|<KErdLs7<#KD<xR5f)@x;Z5uzLy(Q4-s
zVICeUet~iSiz*bxDHKT=;XS^;iVr}Mzo3HszIEWVN}4mtvXoALj_nmY&xoP1{QxGc
zmln~Yro)Dly-@Qf=#wYd&qB*xfIw&tgn+|TAGR(B(47_upXr`2%n3G;nQfG6Pgsn1
z?&;(gjX8AGj1?V*X5e*}Nn3;a2`Pb0omD>gdgn%@8}B%o-j>zO6lI_Z26&l>jOBNL
zHoF23<FIg5tg=V4k}FXRBqSq=vgO<=(Y_L{jFgan>7g%$tKrXerVf+mzKSg=NzxQJ
zCqVBdAB<n1U^wJ$Zh5l!ntawP8n)}nQuvP|%)0xc&B2bt)J&ghJZLbIGYS-_uDuXw
zPB0YC>`9xwkM+)HJ$Yk{1e&cfGL^;O<%LZ8oCXlK=zJ+EY5an#C#0B)araz#EDHr4
zRlGml>fZ_fdN5L=zJSZ=8EWs=<J?!CGq<K|v?-TEd}I>>#k63tA<+HSFCjl<iWHB}
zx2L)WH;Xg(!5z#f&PhB4p00@r9jW>T{6hb~afzzQ$}2==z0gusEP|OBww<adfjn%%
z8&|MX&q7qzAF3LPW1z>E=Hg&gBv3^wfpgYV?IV<JHwvZx_EnyHHnNhut#~Fo@C;s!
z%{aAxFC6xw1H06MAlugSycdcahp}gNewQQJutc&3#f2ap=b1i|-;^J4(Rc#VB_Jh(
z9`9zLeN;O(qlL}Z@}Ua2ZohL`(uf}kNICDS(|)IR_@rPW7Pc98Mur4gz(&P2Lwd3&
z85+*`j!(@TT!0k_dz+gxUx88ZGUOeN%GN*?t6^++sxE`7fbkPFYK3M0G*^PyT==8E
zgvI_)1%v4MM&!O_`3B)z#l#7Mn7DH{r?dzO;4(BIA`7{Vt=x~+2#(InfO6X&ktV*I
z->5bd!NjXWRYT{Dy11RcQacdI2MP+#@IgC4dwnRi2MP~*p#u{-m>MzH6C4j?E7NMZ
zckC><LZ|P|`8~(XG3vOUZM$4qa}tB<{KiCsL<#z)aC3)Tg!=MoIdf`27)X&4Z(rE1
zI|PNsOYyK5EAw1^!9Q{e7>Yat0Zx7HguUdKjxzsEaJ)TC5o#>!a5>`svhtO~ojtWD
zv|!KtLvUPx%`eq&c}+E#@Vq$iOQGyHM&JN`x5rGXeXqrtFJ3T{Sz?(*m^d#h;a-|I
z4M58Dg`iAt^gG%^Y}i&7hl*_6)fT(l(a(^=iFTgCdfg;c-RMqdk{-13v*GJNuhM)p
zm(|A|RMMLwy*Lar3ohCZ_@-tG(rnEs85kXiZGanvaW1daF7-S0E|Mii8|_G|S-m(K
zV;W(U2BVR+*cH{3Qn(IiIBkAAQwLs<%QLajyMy{$X{u58EE7)WD`j63vr@jIDLHxZ
z3VH*S-wfO@agWf$F8ewtAYsPR#8sA_ZTUheY58X1w~c)Z-y3Sq1)lm3Pgw22miXUx
zC)B91@j~2j1R%RQGh1SXPAFjWka#{Yb-`^+y6L;e`ba~eSkdoD5}5N-Kau}ht8d@n
zbs$`fAM$Wf+<j7DghqGc<C2Uu2AgO(MOO-!crP}hq;@qTTh;uqn&`9e&OjYecjr(q
zOs21<V>8EC7QYIsEq>1DtodtfW${je)fov{T3H6nB*AJ%d2siU?GVG2diF`xs5isk
zt%>*i&RrGGYU!T1iU@S-!4UA&)<_@xd;8CIz)JKoXl1(4wf$O+g}5M%B~ykH-l_3u
z0lH86#3cXs10%85`Q^M_tznJnmb+=G@bjl0^@x`bQ(I#!p>+)FD@-l4^<1o0<lAls
zI?;dBm8mS7+0!h+FTp-0G!wA^Snu%Oa$TGmnp+un{HRy=GeTip4Nkb#s7!n%C!9VB
z*Vi9$ByYrvApme436?8O4BLbD$T8WLjS<k$&K@x_lu8pOW8JtaPOIKHT)X#j-ar_7
z-aB7F9e(LKgrEE5TUhA-vH*Z}*p{Ejkn?D>Q@K;WLaXL}vUs6lnn2z3%}nKb1VBPp
zc+qsum7}7{H2QKL)Gu`F**VxcYFKWko>Ge`0-Q-NVtsn!Gc|AS3asft)Da*73&xPr
z*cC|GVmN9yQ;AloXH+Lxz93I`KFe^tj8#_BPsdYiD&<YTNIzwOGc!zHp4l3Uiiv75
z4cSia99Jleql{M+eK6&<4Z}1fk|zSUTr?_1Me_0g3i#|KqzXC`x54&fv8y?dvgRqV
z9-9(mP@jY<RJ6TkK*NY0NLwR<$RbxbP@pBlGr$lmL*+?4voSoD=0Fs<;P1FvY#6IF
zmB%!Uz60DTl|&urB%~C`Gzx<tx${&{xAJzF4zT_dx!H)j7Te#SDR7Jya?Lffm3h?R
zobHCYPc)d)7uU_#;@hWBvG(<1uueAk2y#yCW4Zp{aNLk9J3)<4oH=z@LsV+!6u}e_
zWE@x{X<Y+v^T`D|s~e0qc1bXICR6Id&K6I<E~iqgoZ-xtHApDr>+hm{!}M_0Nbl%S
z_QrXbjmFhmVSg`bIQ^M6?5_3n884R}pH=*Pqm7#VR>WxDgXBxg=q}?@r<9_fIz(<!
zeP3l@3goCrLh6uNX(AS6R4Pl1MuST;LpesCSJ(#1&Ls_xVx7J%*pr03#$m`3>l5?T
zMeD}cyxk---=u8o<<R~H-e;uW8?<HLYZ_G%o~2n{M~0$RzB!ardTE}w`1}cyHjS=3
z^D|y6MpZNNusEJ-;+e@{yH%M1QBNG(?J(M?Ht5eTsgQb#B#va*U@LP*jkvzHqD)$~
zIIdToXxBOE66W7sNW;Sm`JlPOtgB6i*5@Ebs!?vzF&~LYoC1F&jF6r63QSpPpYC*!
zsFf;N)Y<f6$z<6uc=@AbL@0!`NUGvw>_B3nS1lt`(Kgp_NZ&y!>x>tn-L?RXF*Jxq
z3g**R(M2#neWhc`*5uHIj6DoHxo_@ZW^f6tvnCckF60hd2|+g(Tfurg7o}#;h~oGT
zkF^cX6*w^oDvV72C^M8d+<+AGF0_J;@>^L?9uL-Z!aw~{ODA5Y#uvfW6bX91!w7qO
zsGS7@deA}h#(75Z2`_UVZ)sWQk&Q{aw1i?U$m+mRNFwa+ZugC0FRak+(hdJS(((?4
zLj8e(Nr+N3{<hhZ*!PKIp{za?Ikh#)%^JlYNuynv6WwnlX^U8w(+5=*#hmn|w_i1J
z_vWLUM)BBE6^Jv_a-he0-xn^Bi-pt&Z!e7GJU3Sk8C~sg%rtpWQ6d>AhbokYtlr-r
z=N6bTkm((FPGh)iZbcLj8y2EgB<gX^)V(oRPYY?^L<Ss7E7&FMoEjXSfgLlSd~Tk#
zR3yyAezsR-R6e_2J**En24}H3U5)@Yqs9)44$2q2wi)dpAY?P!fEQR~Z3MxA>K(S=
zjBbBcEcCX{!tuCL+flhxORWZ-FKu*S)m>D|0q0M<Ggbr5L5pde;urs7Na<9l|J9YW
z8DSLDzh=#xp#+>N$J**;(=Fz;c<bc-KVdAJE%|a~A5LiTqet?cZZHO{1u3b+Xv3T8
z!C!x$pD{$Q?u@->@D9UG!%iT^nj~@U&Do|J-<!2A(3_fOqvWyFF8)##1g%7CyS95|
z=vx_)T1uAFHr0(Jt}`+%WR{+DS(6-M{`eT!)|%46SS>DsH1#K~JgDVZgSgLs6Q8o9
z_pLU90erFtvD;V=2mI)Ai>8b2B&VGp2$Sz^yhQK@aPLq0{+2x5;`ZjurHyo<nZ57P
ztCeD<$DuDXwJQhNf<N&~6Z*}5IcI5g(TAITx*eIw|LoaQfUleSf5V|ooO%Bzj7c(M
z^s81iPNQTQuk9!v9}nZj|CIwraCX?Lg2L}J(yVdq8QT1){wH?r+&xwq0yv(wM;w=y
zr6T$%2PFkKfKrbFDYeDPMJCF~&BqG+*JcayccLc(q}m`}f0whKCUj(>3xy7o4poU1
z%rQ1VC2xTs1^uv2(U<Nar+?5xEh6&BsYc2bX8gzRcCIKE+Yl*NTszh?Aa5R&c^p+7
z!n%VT2u*qc;E-$M5K35`8+BD2JT$8Ey0JF==!}j~x`%q|h@KhA286m_w(5S1$33Zn
z4CL8b&#EcFc)s8tpJztu`nuqKXrmW~-1RC=7_yUdLt!-}UAC2nHdRXpqj9ENzq=*x
zOZT+!NTgTidJ(c2Z%oYCjOsBh;gt2iclwvz+BAXqcQB<dMI<GPzF=^dShESJf`Wvl
z@?h|1wW)b;Nx7~zTBy!dg6X=0Kn$N0c!bOdoL%d8N^BrzzC{BJjt$yG$1M;OaxO4Z
zdKC7S?X8<cHA<fEQCH*`8(W;m`T;~Dbp|jh^15L}b<Jz!NH_L&@G3EJ6es76zK?Kr
zZR1et6W!*xyJN%%Fe3Q1IT;&p!?MvG)n4^`#N}*W@;G118vLoRQ@s;JUye)+3{9g|
z!Jb`sJ?L>n4lhuV3KR7+7Y4GJ(B#~wk8W^s_#gKKG%3!4pjwPRjqswR9|cMH$74Bh
zBu@3V@;xG%wA}vJtMlEI)9>0z0o<WhxRsiDPaC(QJo*Z^pVX~vzn8K@!cfg9s7WnU
zaT6nm-It>98O&LJZ(#Ry2603pqgNV&_(K|4M<LXi-sO|H4dPf(s8L?vdEe>3BoIs`
z$g@>W>IO^e&FCc;NV>a^uno%+pA%RoWvWNbrUM#=6@cLxT0^ws=EGf3Idss3`V~Ya
zFw6^gTpnyh81b>7dBn1X;g)YkXzYG9H{hNZTl!_><sY-v!Iy7(;G~tgTD_Ldz0l0K
zoeEbEij$rqxA9G;zl(H6#bOA}n-nLcrIN;D#8%YbZCqmkHy7X+3+rhfOcf!=xE`Fx
z%5_D;_?c;ML}f9YqT2{1d)r)VWd0_&_zZ;<_kAfIUPSPvW|#(=J6GCv)QnJrUH$7O
zl3cwI1NKOUwr(_&!`^rU^zqub&#nS!PnR~Lu=??PAQUanN{qev5eb*jVI~+D-)fKe
z2jm93i2}ULX0h^Ig(cem2_(On<%sVfO(7&Y$&u8~_*o+JCVsKk(Gg0GBfWk`S<Cla
zO^qhXHJ!G3f_t?ZUE4AIuq*;~Xc-<6O4DiI6?LU+u^4nnw1dZRWMmmcD@>q_o5>-{
zz#pNDUi17-JfR@6{=5N*8>9AoK}e5Ql2V4cm*c3CPWa_>3FhVIuU2mP7h@%uYSB)-
zfG2*!#&WdwfX_Wy;W9%YB6>HWG6{QXiIwcs(lEcD+|l(27xt*8H3xG?d}d1o!wy;8
zupOcG2SDAAHF94?I)#wVH^Z3mbXC(recR^iq^4`#NyVX!Smn^RFez|Deti>tk-pPr
zKT5i$F=f(cBS5>hV>@b>l&O-;9IcSK`Y$!L*zI*#GK&(r4?gfiUCI&?C`T!`t>d;s
zs{T^TZ#C1awBf#ULsfq+0PpRteFrcFD@W^^NEwFxFA$BlO;HwuI7=dq+zhp;n?VHg
zP>_P83^`dL$pBKa{eu)$78>kikpO1}UUEEUelnV1u^TrDPzruCJYry?BVy8YmYK*A
z^yhZS{GX-=jX@l`7Sd6L4!q~BC$S?r5;Zad*st$t%^PNA=r4GnjUPW03|}<e#DQ-f
zN>jM6&rxb&$<d1XR-vbc%1{%-Mlw-g9BKR*ET==t6Ar1MNMJ5`?&abAUK5GSovze;
zkwiPgV6KqFxf$8Cx1>sJC~zcw&`b(qtY^mUB89>roZiVs7aNxgg*xMyFK>Oux~lQI
z#TPptDnllz{dQzyou9Khu7{6K+HrDO8SF7#j28B6<Fkb1;M}L4d5S?@)`ZFu7vJWt
zX=SpxpVbRX^VC<Jue=-?`b%)O1ZF#<FBFbn5?$zLyRw4_itYCKNy`&4wr`p(KCP!_
zZ6BYQA2!6N7r;j?iP#8m5oN5}&lR}g+lrW>{-z0EYjew6ZE>kZweM=XCDYMEZn6}i
zm@zI?LO8Z*Va62=N)Qi9-NSID?maK*efvjj=hf4D$^A;T=okt8Wj^6m1d6EGrDiu&
z1fuh*IgB>4b1_?FZl~3fjLle8ZE=P)!gc>Ca~xI>v_CewUFjC@6%AD_^_;+W(pDcA
z9+>Ms^rQ@&5i#C}q<AtdW`4er;B07K*!f*42K^lm_@WD2IWC)%%d(Mj#p`f-eNL7Q
zp|}hGX+i5Rk9J}Qp>;Dd^}8QjCd{V-kQ+~cTyg=vym%Vh@uM&fUYQ*y0tblYLJl>$
zR#TF6za0MLTl^Je+Zb-pI<ZQeFEoX&rR%o^`u8FD&?}1F$<=htw;4Qdc4r6Lsczbn
z*$@6U?NZu-KLd)DVtsMfcB>O_`zPo_qYuxrkRP*7_q6o^`KluH-w_(67J**8=*iSN
zcfk|^NGJN<rT7vS1&%|S#1L7lWodywS1pYS6N;!(Ebag?sD})NdH%DSlPazp<Q|(M
zh`Z}dB?)OUCd<q9(gg!W$#^j*ag52G^Mm2pkq-_-nxa7vyzmmFJc&-n;yTYOR2d!G
zpHnRj4yjbHL9R@>#-ue9_7d|`=qHe{gk{kyhNW@puFcKiBhZGSR5xy5tc{r__PR9K
zH}x}d3?+I6_ijPWzc6D%>5lzoIS5^-+u1F8c{NeQa8OrLwIsiH?BKQYpxhG%9EVaH
zc^(pM7*tsOc()fckTVapfLf4!k&~fHWCY-<9`0-=oE^(0Q}=cajHQsooo3;9-nbG3
z=71N)DfKt}eA(@!=s*&eZHX)U#E42O0bnb$ouT}u9bv0u=mvtDeDHv4Eium)D-k^P
z4`7rL(-UdB(R5_V)QQO$-Lii2cDl<EPIfO<bf`4Rl7t(Tch`qQ*J@m1r^#}(Cdo|f
zT>3hSYzLr8XRltcj!y7hsY0H^=0J8HG%4T)7vzl;=88^@Rh!0u{EvE8jie?wEs&0)
zd8?5&Og&_hSNtvuRPWR&h0j)yICG3Wn4=98IiDz!Sgs%}Zn5lM6@Psj2vqmrtI=cG
zd_6wr#~;JYv1+{Wfh&RHYUXBSYa=}%8Y&|PGbisPnP$2WJNY?^=1T$JUw0~ii8s_M
zaZY~X`I3$ML9&g}yLEIOjsfnlpM`tSd%C&UPwhHMd2V{0vRZuS*Y{?=Jqm+rsX(k>
z@C*)EHCzkyNR)~>LVrvBT}4EpWr~EYY~*uhy7yQ_jUAjpXjCsj{M4x{9f)Ws=`qfj
z`SSA_b4xyc=G;eOdNFT}&0Xp}naUS3hu!SKEN-&&f@;23ma=@{WI~g4ALZj$Zb_AT
zf*aIN$aC`WAh{<)Va=t5xmLL4sjyen+^wr?=pSd$2bhdf2H*A!MN3Loji&_hAAdQR
zDVX2;Vk{puv&pQ8<BlFP0o6jv=Rp6;dMn^$-K3}Ej5tfP9(zy`+a1OmI}}oa?u^Y1
zl8EkQWMl_{y6HDmY|lIf&M<lAcSog(nSVTwshaLXv0=GW&_(e-DBTs-ZMR#KS8yxQ
zg$={1SkH3z#dZvJ3S4q731p2*J6>*-Jtz^q%2D^YBtQ0UJOz85Xi?4d=?JhGg6SR3
zV}o!xu0y29Ehf8>jVZu?ZvgIwPo-sQM5z){_qW?D2<Qf-$6=boAC|L4OcL`PR9ZK2
zi%3cSLAvszaE)3g@N3&1sb-;uAb7!{Qh_`4L)lboYJ$GEdEahkK&crTwu;Fe9=CZ-
zwPIIFW4m>3hdB&<p{Br&R9*NYWD*QYMu$d~i)Ys%dfhR$!XtW3e4p{({<r(}&8KIs
zXQWbKxQsf)q~4N*lFcng@u?aGMLTI$C>NY`Z8u1DSGI!iYmK<*Qn~#FtNL{=Sr$e-
z-R_wD$UdLhjx!l3EB9l%sSeMjq?}&T9+i+(NulMaE23}S<Tx%8MeCVJ8p#(>VuY{P
zoQtY)$SKa|%&Bu6UJXKMJ_7stG11w%zAkz){5GwfI5Q-qa_u}IL^_X$d8mbJ?pE9~
z5$2I+jbIdG>=<N3w|UXdkyA2R6LU}s5n{NPPFK({5`t}`uQe};nB?>C8jaOo9j>*U
z^z~>wT%SW9{0oCU7L*ev-DV9sn~VYd{T;<8u2eo_DQ{&}yD9$BH-kCCcT@{~S_~Y1
z%~E+$8+Z8RgWAk=T*1xMXku@8n(lIJCS5ubux_AWI*-fLz@GI23Oz<|HDh$hgW+mC
zuQXNp-X706W2}+coUG&PQBN4I(7+Iv&VCx}(~(}4yZ+45D#5U2`b<30HrBkZBfHRH
zJ0B-(b`4J93eX|EqCXyl_jok<gmU?F!99~TMsjV>Mj3IzsKyojH{H@OyYy1Kj*>lz
z*Sx9zyEX*zSopFnaTuo?Y86UnetOH4Wj_Od|F<DQ;(-JbxbnaAk_WNOW$Mq#sohHW
z?J)+QH&ZkG(>2QlCCZe|_UKa{-)?9Y=kq5F;i^zQ`722<|4R{b^W;5K%&J>6XXNe*
zU^Dl#wvpB0kuMn`IkkUD-)A>c8z0KQ?-W0Wt!S}8lgpc6wd}nO46%;&lT(gHwoRo9
zk+DrYe}HrIg`_C}_o0UlH|H%@OrK-fY*GS3kD?D8PVA7OEsP1`(nuM1=SoNeMi-Ik
zh$1S#V$>&=a>R+u8+dh&4wgN-fJtP4ZX_enD~GeoqnFy2MXNhGbUr}J{zaaX$rg1+
z-_xGyQG!ALC^uhP=BV`FyV1S;_H4M-5bzM<2>~kLLMh)*=(A_W66ZfIyt`ER@z+Al
zd!fkFg0~kNxMe0~?uLl_8g*D)nK#W<*W09ePcyG$UDH47<rE=5$4DI24Pk#$e=5XN
z-t#ZcwK&RN3^&j9dd>jWciD=zzg^qujx;BAH~r{S0c8&Qs&s>#%{8dBVM%C%7w|Q*
zW*0;lCp$Rown!sV5?fQb%`~)+bM1`vE=06};DQYmd-N3I)bGpir(QR9-utAPEy2YQ
zGde8*Df27aGEOsVtDP;G5umWYrmHlqDP~%NXZq&v9G{!{p7@z{5qDun7f95j0YcSj
zjjWWg?}EoTqVBh5vKk13DI<Z!U2cI?KOK6#_m!OM+1WJ2)jPcMy}zTir0TGj;ttay
zZPZ0;(CN@(<h6L)?bbo-g(MNV3Msi!3%_+ax)u`!Xv$}pADPNzKtgRAf6~mNWd)~o
zOooK!sX9z+4y$yF@QaboEjSM>pP`X%d-QVf;wB@FCfU-(5r04x<7KMGTbak<0j9K@
z)B>HR%wczN`c00_qf!83Xuiot_%T11GN^j3s-w-X>@hy&MhsGb>E75YSC*Geib?Mg
z!hN25AcpQn><B7akUTe4#-r%b@s(ZRtRx?wEU;IfuevPhgkyL|(&1mECWotIo+HK3
zQwDHoX@bYM8`!C;exw!$i4IPt-7zZNclVAI?H@3H<;MAAi1ShE{TI0a{yRvr+q8B3
zQSI?cS+jnguP5=JmPoNXK}ow!g28W!gje0e3HyI=3zYFMybfD$I7R=`q4n^VcZtu7
zpZ}#dc5%G<B@GMxB1vG!Xvy=EUdg#$VY;g)n%)0PYV?vmdU<L34rplIm4B!F_kwL2
zQZf85>p_<EWuNzHqxIjxNnXlH-3R}RaU}UOI&sqdLqxuNdU+!G|7-Zyt>YuHGeYBa
ztIyeg$dQKC#Yzy?4Vb(mvQ^k|!K_hB-8(oUe_zpm;|xb0Ie#8`5qolY?AvR-J16$`
z+@?%%lc{F^`%5s%c1AOWAoXK^Meb~jDs9J``@h%XX`4ZU_1{G9E|e?-6V5{qGlipG
zG7tZ_4~7byKH-LVQuux?xsDA-uB1B?I<&%XP-3W8>}IH5C%pg{9(WX^!93suyofGs
z`EOc-QX$Cs=8Zi`=T22YaPd_>-CxcD^LV*am~i|Nb@Z;W%|quB$c(}E*$MG(zW34;
zG`06d3#E{U_KI%N28%bhfleXudSaMFtWRQzj)3mcEpupmZ$;-O3BB@V_8U7wI2F3?
z_m@EW5cspmHJ2Nu1EkB?;}<%lE!I1;B$QG#Qfl^l(=?{9tpMK(QGih48BV4A4j?IG
z_APs9DwgaLO*LZ`G?VQA%bGiuO`#ib^h00c2uwkg^2kPqcW9aku%YAEPT`N&oJTDp
zT?m*-jW;Aa^G(_{GZV$DJw3X8PPN#qCYvHLM~VIcfE22vxyTlKrL&7I_$8a@+CACi
z3Q|dk^h7avhF(cU9RKiT#ocILqsTJwV*Mf4vh)b}1}tnS&gdXE4?POzE~;0;YJ5g2
z2$_a)*&a@ZV*i*<?O7^LSkFVkn0MDf!PYKSjilOBBnU(o*Ak>dgPtL?hEJta*9K6n
zMA6qHkl9dBCu?s*NeWG3+GAiXi9LbXV(1V>8FwpLew!og_?JxNi)H+Jh`E@at~8xG
zyfD(?#i)CrBK<ge|BLYA51YJ_+=jb<|D5^wHFm%n@Sb*%S+bT#jr^SjC+M)Crg!=A
zWsKU_d6g0gcqArhzxVXVv2tu2%$Zt>h0~ku`|IO`h?aLgoO6fAHS^TSx0|bcrD%i8
zCWkkZg=3nLuh(iUpS5<s;j_~{Liv{28DII9;TdPjnn=y1VWg`0Zj#}gB4&sIUr<No
z6~%v_UmQ<5iQqgR7@t?%Y>WJX&QB7q;-iDRlw&gJ&D6+d?RInLiNpT8+RGAc<ncGU
zVh?|xU&eMmhZk*E;w=3)Q=vlrh;N|{rmw@?3o$`>tA6|K>jC<w%xr-NV~C}T(*9XX
zf7Q$Oy(38>4QK97g>Z*{bRM-v+Q<^I43e)_qxqMs$+!{EpXW0o$=}NYF>aEMrr#t-
z*?qt8KFD(&Y~FzDWSS!6{9+tA<a+inZMVlV?MW_36ipD{$8OuoMiJ7K;ra64@RnMp
z8rWFZ4rg(;H<E8y!f?jL03~Kz%9Q5_x3Lb~Q8U9mH48pd6W_VZXeAoo{HI3le{h3r
z%NJVlBlF?B^-IU;OKGfgFZxWwU{=a!mYDu+&q>D7@ozw*DKGFGyFHOmHSciEhi}-c
zkc*|37qm7%)gK;yv!O-+IX%-maA8?{6Zq{bk=!3O9Buzk&5xx7?pPTA*N^;LN=?pj
z!DN#+pv@9&LAAm!$&0(+16l+G$6n+TuMWS->IL_z36@l}S~4r!=G$4?5Q{+^SsJdv
z7zv4WhRgY^y%q-&0m54q1E*{>bwo>P(EJ|7D4#Um@!!?{sm(fgoBGxbR`_ZBqE$lc
zc^4*<YslR24}PkafEcwJ-!bh_OTP1m*&T{O7?^3V<j(A1p=kGnQ?EKUAEmS6@r)dE
zF?cuE@}$~2wD#u=&EO85MamCDMWGJTI=@gc5{TFjx}ZW!%rU*Gmx&Ax=V)3jrCe{S
zO!RFmdgimLTrC`u*~^<s3CB|__^>54nniSvj>Ve(JRW_u-0MxYYDi+11fIKjg<>o8
z@qvAUvEiD@E5=hes6#xbRTiEEKN*;jqm%x>9KiFRv_6huWi}F_$q)uEJ<19iyMVAP
z0j$B7I}l>x7<)N%!v}^3Xd<qNaY;voLPf(@h#TuHBR$C`CkU1X%H;FCjIp<DEi`!%
zC}%~MH<af^N4(Uod5quH0Wv<@p^tfF;>`|-_g6*jx5GjPH2uMwHjK}S1rFDLJkl*}
z?RB^u-r45kqt;nEdA~+?JV(`CZS22(J#mNAkl>@CBf~~?KkazO;>1!gw_4IQ4%tO<
zQrt=uH;Mz6)&O*C?2jnyZlzFEQ48LT<rhzgL?9MQc6GgPJJvJzw}``;+SYl0YuKI5
zXV<50`_b#R0q@K~wzrLY^YDIN5kJYB`EOlAxNz9aZFSF5iFtxv-d?y7#*5nNlEvhz
z^uRv#lp?v(WpHz&6eMsOO0prfiM#xx*etUA#()Sh$fHTme@|yAv@}ps2d%%YB~$J9
z2YGXH`{c_bt4)<kDt28qHWoF5_vV@X5xwHxKM~c1e<LsM(cptM6(%wa-An23>v>)i
z?Mf^XGE)QV>cm+1nmxp_rl1jY>xtD`%fo3n$2zzwNR2T;i?3DwBuVE$Wz2$Z@#T=~
zBiK_4R;0bRW(w~5CIc>DkFy<s*2A{xp*lzE<jR&L??d__BUPLCnJT%ljB1rv4#;k9
zl47N*8;4oVI>H(PwWPZEbG%M0pCR*c&<zU2b;C@X1*3a_);w^AH*z|6kj7(J`Di5H
zs2{4wlfWi^M8qE}QJImMG`*zXoOn4_Gxu+6{g(W;FQA@`J%{5FjuA1tCL#BgfeJ61
zlK~&B@CM#xh5Ive;#yI$?}r3HbYcxR9(?KGOJ-o{0bMp8MIPA}Wt{Isr`6fB9zS3b
z;2!HY6^4n{Oq*u>)c%RA`RZULSgoRci(Acjr&i`8zvDclOtR2A6qSO=J{XIqkq&r4
zlK6GYmm<GTS3A8ayH;8Z(CzsV(uV%|8FPD(r@{0SdX|gzClWE`{70n)tiZ)MoV}iz
zNIuglV(;NQa+#r-3NPMb<`Zq2t=69Sh3M<2NCJU8H^$SxzTyS^7J|u$GJ{2r!|p<?
zD!`#fu{yYfx3LBjl%_x$aEXi&c5?zLw;p#N+RY=bTil_=b3bbUR~ZqSCV0jA8!Oe@
zu?3lBOLuIn)P}aC)PyC&Cs$2oZ!{MCDRU*F-mbZYTXv;^3ukJbJJ{g2+P1<a2jltQ
z&s97cBPEPlJBz_j_R#Db!SL0u9%FIEI+6QMu&<G)MmGBj7NM*EWdVk-czjy(t$&pL
z927M-;xyMVpLW|pERlpXR|8_df197r@h31%C%5Mf2qNfo1#~b<BF_DVo94MK#q8t~
zxCMw53MMloRv3>1{TQ9M00mqv{=_GRQ5fJmS300J6dc-)CjXnT?8B2FfI`Y~2jEzI
zTT~adp(1>3<U}5i+DV<GL@p?;;iln5m?b$wB^jMBhWjDuqh`wO2w=c==32n!geGE1
z(`_^jn#gq3cZ@Y3BFNJmpp4f6#hu;HCnc&fr!Ucs=?>CY@39x|Ll^LiC<5$AeBRRa
z#_Hl@XqX>R6X1AYOx2+3g=VE<D+Ml<zZYUAP**kvEZLw*Ns*&=;mt+(&{|2Po-t3x
zb(~0P-jzGBgRBR(K6<DPiSCcEqVe*X4xr2l>%c&x7(BkjCr3@wUf-u_i}RGQd@}t$
zdai;b@Z!ifEfkD<bg2&xALw9mA*nO<ZtW6}cG=mPNW&Arogkupbv0HIN5C^S0pjO3
z9I4Woe)n^kYjEH^C-21M+qd5hU3TSm&jBuXupgRPks8-i9NfmYr_It7t3CJu_XE@K
zEYcb4vK8fQ>a31S7DPL3sH9O4qbN<}2x^pVr4Jq)Hge0RsV_kyM1-8uCPV}8#ghp>
z>CdmgZX6EyK3R-gq}lz0cQi?KOo=6-nLQV@t4A#?j})*QK5TK(pG`$Q(sU01E2t>3
zCmhR%tyoNI8I;q<yu{CFYl?UkcKeQIOTo8h?B(P@jUue^pm%y-imd3CT8zeUZ0AlC
z|Ik?J7g6YD#@;a*mrE%_Er&=tbXPp-!0Ym)j)Y&LR?4RVjSefY{AfRxxl~_=7Ov?!
zVBQdJSJ+>1Fb(FonroPK<DA?2(uh`CJyJ<2BP}4{toS(h{zQz#G@(2SgiMqFV0d~x
zcuB`d*5i+ws_=U6iXT?Anh%O(Fw*EMLDXcv<+6e)S75rKLC0w-ga)?w;{n2HsKG7)
z-r;46JJQbNN$IDvb1A`#uF!LF8FLq4@XPaJq!m~VxwOH<jGBv)@nB|#KurJl2XD@=
zks8>NwYheT+FFmB3@QVS#5<++HRDJ>{fyI@O4cdQp;H~H0#%3V$vgzp?XtgaD%MTK
z_~u2GKgX#=BI*)qv*ceaY#*<RFWs)zn_I|Nz)9g+%?F?tE?>;a)Crl61oD1n7=W9a
zBLLjQ{k9}`4^nQ;4DEAZqB2Z}o7yVShZ9JLsxkyq5GQWO&A-DU$3|i3on-(i`u)`8
zTRk!fmlIIjGTXvYWSeuQ+3ae}X8{O(K2c7G7KbpLaifs!$!F|8V|0R#Z}(uG9>l@w
zW*gbgSHNdH^{1|Fa{w6i@#<`7d!|oC22Sb(q=8N)zDd?@5KMa~x)7Sg7RQ37p^n{(
zd)#<brV6d?fFF+)t}Q>0)?Ed9C9gy~R|*LWiu~mtkm(S~<jnnXAzqlcLu~!A)>$P<
z0RTx~Zv}(?OEQ=jN@wo)439t?$XAbpqmYTdrrMf`V`CcT_{<GFMr$dEgxZ%2+nt}r
z+X!|zr&XjB(Z1;(7Xv5q+M9Vi{VAyqu7G1;8=M;}=VJlWJHX1NIX)0NUj=#d2@GVu
z1KdviD@+;+sJ2JC4eKkLu@bt?EK(Nm4OdjT=Sk&{?__UJtS`EUy>?s7I1V!YG-$sN
z>@g-1RZQuGKyz11v@m;q8*)0f_DG-PX>it8sw_qxrvtd&66PwRoL}*CN4|bpVI@dj
z`PxtYsIrk;T`)zG)kc-$^_auQ>Ysc80*SK>4w8i;_$%sVnb?X>3AQh0F!bm%IcCPt
z`CYVX<*C@-eimP(apVp=q2(;7{Bx3xhZw>zyQ^lol94qUFa^2vzcpVNz%Er^IZcrY
zOcD^oEYo&Kq=@<QWVkDwGTZXY20J)0#b+ZAY7~X+XBw7E%2DzrBRw|O4(c$*oFozg
z#w)Qw{At9XbQoM|Y+Wb>8R`N@*PqMhN@)i5p(-R`(VJjkVTE_i7}(}-?$u``QGAle
z`TrP8$^!_5AkDg<v0`|VQ@z*IrTO7e4o`udT&YkrFh~%_1w$`aqnFt`9OGgmr8Gdq
zu`vT<PC_5*F|8>um9*SpdeKDmv9}T*kJdk?s3cIDls{Lv#H2^lhtY8v=G=yVNL-{I
z$?1>CJoJS0sD3JSdI&!r9feLL4*zX;j}y(5(pal<aHBk<D#q8EkGjrYJca8-Y3gYY
zw*b?rotvUkZHkl=348{7UyNYg&w-L~EjB^&CAb$3q=!Aw$_7-5R7(P*Il*OED_PH(
zC*=&Z_5Rk0*M@&)2`NN0@WYe{=;HLr>z>$gnAkE;#AL@Ol2%%nzML0UA^EJ-f}A6Z
zIR!(R?%2)^L#Vh5Q(5y!i?-4VVQLpxu61}A9`EaN&Y9Q~hJmjcr}>yD0!f&>*+%*y
zK7WHY?zxzp`Io^N&l7FzM)uT{2TPMI(rx;W1tN@Qo%7Jz?=Ayoy7rjfplrlyTHuza
zeudfB$*l=<TPoh}TYmbiEbep^SSV>)6I!WIvIAA%av_R35^cl2=7HA9oS9=i&9IT?
zcY@zm@5KUnkCqFbld(6|K94}PA=!x8Rf{`t_(aTAg8VgD&5^u1OGkgsrB2CP`9;Ug
zH25LBP>eqYUi*hIjdASw(pfFlq|(@&h%b<*(+>r~qvndRpdv_y6B%(-B}CHul6XO|
z;jT461X0f8o4B#n@D$8*Fd5P-mGLF%y@Rb*pU}J26c{i3l8FqqKh<rsZ+b(&s;fV5
z|6mc3LW&b}prS1}Cz_f%)DCoVEHOk&48WN}k0&`H<wg<A-SS-n$HG9uvY~hM0tppM
zG!7~R+h`x26Gi2n!ePAr-pH(nyocw5*}v@G0wbb{v|%z$s!-AvNwVAunf0wSjie){
z9YYDQ8LXO*VI1AqmV=iFB*)bf>A@A)iE%Bz6LliGf!KX3mN9c-$4Qg)d*3Hk=9VQ3
zZI=V`<!OW=-(H;-b%D_lQk0`e0&kVb=bv0QO5vCEJMb)|>++2?p7pFo7mOt_hj)}P
zJww%U$u-P&^yQf?ieOL3lGmmUw2v}iD&}DSldrG}WJ5O>AS18MDgkdCGL=#rveDQC
z$qTT;lt>H8gb`9Prbx`pHlz!=Unobe3=nbQky^_XMhJ5`zA6(|KX(7t;5+qE^=w^e
zg7x-1-B=`(g=4$H!?5<h@NUR!bW{*b7MOv&ikj~LXC{%vJpLh&@g6`;^th0!#5tds
z4Yku7bw1dGqmFRbBfnA|mWalY;^~q~YlTZ<kpczH#OW`WOJf!CcA~6|j;tWyj22B<
z_C1q=B@r@tgbgWSO+75QM9~wNlW$s3ZxX_5n8Gd#wS5H$WF{p1=8FP6ciJeIrC_kV
zd_sNIW3a~Jd-Qlm16WH$&)p=V7NDX6m}A&cK~FvMfRVDpfG09ZGqH!qh{kqlSOUqn
zuowtPbA>h^ABWeg&lH|C@OTIKGtGYhSv#vm23<_DZdO6Vqf_ikK%R~(k3j=w;FFeJ
zY{uqb)`V1`wGF34e>v4KEu77cWP*g&N8>tQolfsZ(QQVo;K4$hPGlup<DKI*J!DjV
zn`pphUg))qKYa4|o2sMnQ!KQjoI$>)USm=ZnFComk3pouaR(*&wJ9O8dSm=8Nk-K`
z`GFqke>N&4hau#J5EUX58qIzhISm{UbqHmoah6JsD|8@2$^V0$eHwaV%H3nrIB1f!
z6o2$}(V@4Ug#E@$#!RUJ?l@&-%ov&%7H(dQwg4#+CLp93y<(jy+LfqU>AaFGx=iDN
ztf!&Yu&!w?HM90~2g4TP9Fc{c$UkJwMoDV5XqL>NKS4Guh^~+(xOr%i4bJnol%(>3
zjWAh3p(Hw4B#&D{luc-Nh$?JSHgLw|DZb_5-|x*U=!-HVZgTFJ^=M|pC=hh0Rd&5!
z9)gLgoC?r$#v^yiZ@9}!g!7}%B;=o6xc_SUB2LDcn~CZ)Fb#8Li#D!5Q(wEv+Lh7U
zmh%X{&G&;0F`Z85zx5OeRu@wv{ecybBu~@6RshnC<4!9D!GF7MnS9!rjs=89Z-owx
zv5o8J5&!t);838?ukq735b=W)e1*Qcv5dOV!qO$~m7i-73<y3S4v+&M-P%Bg2R=8~
z%WNR+gBxKmq8D03&Yvd<p=Wbvh-wVM-ANK$ZeA?at_5moQ%QvSr9zW4Q3TN)lT0qd
zA`O!o#c`?y>rL+$e|JCk3xkwq&pnM_8EkFt7r#EO>STl*ngZV769xlB9?#t#J;=V4
zBl2^ZEL&D$o(4e*_3RNhxIzm_1)VUubl3E&k&}9k)$Hk+TKhBrR2@$#xEnMM1`+k{
zgDnq}D7{~t1S6-WU#KX{5#KSw)Cvew)Y2f|Z<*Sgzt_=t$igVW;U`3cgGmcze<9fk
zk?sK<GGeN2G~XbN9e*~OL({j(SlGnM%R<zoMC*t+34zW^X<QoUk4|mpI|Rr9r4y!V
zWd5qgdY*ibMswK3feh9>ahygvz%u!d;tauC67<qD8BBcqou60+a-cIgJ&KD^RXR6h
z$+d)uxT0Yd_C630&qqYj`A6qu<jJ%DkGOvf&n#-%MbRg=ZL?!r9ix+UY}>YN+vtvM
z+qP}H<K(3KUEf~&J!f6#-@f+0`HW}G8Z{=WYL5FJRZ*@SspF~Yftz|mywQb>Z(6M?
zMn*hpOxn(f5k(~SbO;I8ET?U}v7%Zl+haF<ux&rc3FlT-<&B!v#>AUMDSxL0wu=>;
zuhS60iCGwm59g~%6=0ejZ&kZ~7$>!-qeaLI<qNFY9S*FFl?vp7u?1lMWSAVpS}xZO
zlK(^H8}7GxOu~`ebTWgSDMW9fX&7%rW9ZoW=4JTxt?HhtC6T+JR3e&o8@mQZ0tsUy
zgP=*P#+P;gHenr8u!kjBP8-iqSCl_)z|CVMwA-C6(McLyO#&?ul_uQy$LSI?QtD-!
zzp7?5@?sKzBT8cu<G06LtTIdKMu4E$tS-RyRgvPPyM+6fw%S(#G!iqf%!z{Md^Cz5
zGnHUgXdlnq83YD91L@{0i6UqcJ8N*B8r#?BHKOp}zHVDej}kG^`WU*s>QMOu?%csA
zsk&@RN`lfdIzZ>jFb%6SDRnmMMr#HA9=Z|kq@S{R_3L32cEcgn>RItij#-?wMcr$=
z?u+3WB^4xk27mXS;%^@w*<VphMuRodE}(oCb&!bJ-*A$q{H{RXc|O2iv0|5tctONL
zOS!Mch~-*WXXyQrxYZ!=mExfesna==SGIk}sGM5V`Jk4p(we-z=P9NONhT;Lu)KF7
z=rJA8%)N&?{>yQ2(b$?}s&ty{>NUe19`wdr3p~XnCOYjx;yLS)fXQ4V?&=!5R@`=X
zSGDkL+*{x$7iVlb$zr8s6qf1uSFX+Zf4Mg2>4w_F`*{bqdn^&;n(b4-;nFN3ri}78
zFs&z|q<CcXj}$sBhF7KUH=A*uh+qT8m;ECBU3?C16!5W+SHknuPn!mTkO5)Fo6Ti6
za(T6Rvb4y^oMr&qk^z4TP{rIPutx%vUvf>9^0XT>Lk?}*_(_$x3L1CG%=~;s1_tx$
z{<Eg0!p3eIof*PIpq)2GPAHbUD<6@?mVP$idsw`OM@5=!5V15*=9E7k-Hwn+cujW(
z#5O@w3hL0pdW3(~K2nvP-pP=oofb$M+JJI|9)T6(sm;gBs7XH%?op*MtIfwgrvF@s
zq7-vCg^VG=OMk|+LmO|Hyf+<Splw)V8Vj2F$n+RhB|vA>!;!WX+ZhOMPJJ-3)08yO
zv@#As+7S_R>a70*!StI5CZkqlDm>eizGfhYAqX7~GhSjv-BmI(d|(_8il)MJA+*O?
z9Q<_Eepo#DY6Hpa`@U?TxCoN{Nj{2brHUOKC^_>pZ!&l7DRervqg?7cprZJSnb+so
z^z3^QXeo<sCZ2)|r0a6}_;hmfQuh&E<)&gR2cFa@bF>jtE=Z3xY`LH`;K*T^?T{fX
zNk*OmMR!EZ3XsjK{|Z!zsx*I$Lvv4Csli@gV}&s{jz%j(8k@SDb`20^6-^qkiBp~b
zD&1a3l!H34Wg_Gh#>6O8co7=8doIH*5F_&pR`1NLJa0I{=Dlz?mbtqEQG9M@{9PD;
z1m<$%vSp&KvFLIX$=Wf|f+_i%@+_#-8<}F-+_jldLHj&dB#8Zz91rA9)^qE!j}ngr
z-j-s7a#6kaEo~|LAnV$tAiB3*pq`<aH|lK1AtbzWUhauJHvb632anoh5-Z6u0El+J
zQnbyLW<eae@c>gfrq#Xt;+k%U%-`fq;@<ctMK%~?9z7mPu}eYyH>vXY&y?#TPweh!
z<H#0?cnD^T>E-OL`gWDHbxI*8`Z94hL=MZzAlpIrx@N33SWi{Pu7ehVc=OpRbas5^
zV!Wt5Oj|`B)&p4~eNF<E>V1j(lc8wpah_p<mi{CCShs^UKF6B#=>3RR8u+7HG6D}|
zx0E^cRS@WzFq)R`*lf?8F+?ADvg;ZQ+PARs?%mb%)hQP>GFKy>l!Wn|?qNed4k>+b
zD)(7?2Fm?YInL=OY^oSY`q(%*a1*H>*&iHYvsg3W7I<6W1#jQVfrD9QPK|prqCfAg
zRVDVyzFC?FZy|Pa_Y0}6W+H$*zY%tNJr~lORPCmW%E@hivAIoCXL6vRo8F%13B2fv
z2(aO(8P90GY1sZoTa}*F+)l`SyVA$_?hYv>l(v-Vm6X~Ub1wJ=OBDdd$u!GqNw0oa
z`T6kZkKk**FcjjYTTW`~&R!j(EnXDp^AFaGB}@i`c;bLCT~@LHeVZ1!+fi$5JPh%+
zZ0(*HT`mzAxF>?0ENJ;EmWSkoSH(XqzTO^S<={;@bw^14VeKd(Ft`E!9hVX8^(D3}
zlClp2?x`Ld>c-P6G^fDLTKKSE;1E~e0R!EI_>}W&B~}JPXiJ!R)c>02XN81fwdCQW
zDe$B2T-NjVnt3~Z-!uwwm8Y2)E)cgak~F(<p6)9y#adTwV{?0ayT!DL&e-lm5}ql&
z#UJAyOx3jL>eicjtDN=3l{{~l4Ji*=%Pju$u6%0)(T<7~E9c$U*7M%O#y*|*A_YRo
z>PxpR1WqrEJ^+)dYLYlcCTtEj|Cou?l{9bYB^$;M+%zsx+}*ZCORO-yggJ~f&y-?F
z?+3$u05*^AuD3Vl@a*IhJ`J5zK&Zrs%zjMquOHM-j=K>Sx*FKVVrHv32wZU)<Ka50
zXb6xmr#o34<!6ywn6oHqK9S#AFe6=ur<wK%%T^f+P+CsTxhE)kD52+k2J$dq)^6?@
zNn#SpAvxw%h7?4trYN%RL_BUFxqXhz<VCc+sp){bFygxen4v2aDb*}vj8+7wPgVDZ
zdMp)}BK7CvM7y@<+e|-_`A|ewm3JfRTsX13>^qydY*2%Ii+IM+j0lP?De3QcE(Qil
z*N)t_(x-43mb#y%BHO|Q6CZ?>j`pGJOPL{=1{%9F1r=Szz?t}Ix>oClMMe(HK}+&g
zDRhj(Ng~qc=rVHNRk1>VHrK{lCq38W#toIP_U4ZK<6oC@V^9(uD>(VZ7+d(p=CB;I
zH#<}r{R@s<kD$5L>+<o-M7|HK8x(_#W!P5Z>&brQ)ItQw`=zP&(axDyeFeK@!PEre
z^sc&|0R?ADa>J2X6XI5UR8vgc@noyJO%d0(A$yyE*T=nwH@+!{t_Tv^+9$`|X*K%H
z78t_(iG4$cD`lS3MOZju1LmTL8l7blK${cYtxe41AM*yuAorbT5C$RT;<qLJ=Ghbr
zug|((e+{whX|HunCDt6*EL$kO^Uie0L4mx9-96KqzT}_N`Wel7PZ!v$%5(gHmgu&g
zNUjLwon@`x54zU;+2zI>J%?J90hGT`-;S3*W9_0wAa_j<y9UkiLk7{h1KIK8^Ak^@
zd~fKhlMlOo@Efuo(1w0R^L2LQeL3>pI3rb;CjL<5sk*&BB#HFeZ|@J47&efGxMQ(N
zqQSkPNR}nSQ&k)v{7;h~T}03puTg$CY*#ixT_3@$V@pqb=4k^cuD3)4Dg`Rv+|}%9
z6X%!M+y9F5hx(L2)gaV9a=-bVYe1iGQe8=8WzJXwEupvm_IVo-BK?G+hkS<<*42q~
zx%=?a&QNVhu%@8O;m<qK;+6LJ(XEIs&Cmmi@*yT~>F1htHjv@ZT%?96T!f#AA9_Ht
z$(8u|DkuF!A0jbsL;CR|6P6KIzp48YwDE6na#X)x!4U-0)o&3wsf#cuo3NOFbwByt
zuOr-dtNG^Jx%s;Y{6Ad*s^-UMw99mV`+Y3Q$2ZEjGG8xE1<U*${+|xgt{~U!TZiut
zb$b7+;oo0RIw5B4mjABae=gw`#_x^l|IGfMXdj(a=f3|8^7o36zj^7c!e#tD`u8*S
z`Z4Hb>%@~eern2|Y5pF4gdH>)yVbQOw__WQ>9^{?o^K&~r6Zqi?ST#`o4Tpqufb3Q
zdhQOLe?|2AAV{-5^T)71HCZNt&fzS65cBa{NDi>0sHyYuYwT0}kBCqI67tU@z3~<(
z8@7)Z>nFow3&*~|PdZeXN~*<wx_lD+8zoizLu04vDmcQ60gnN+Pv|AZ5kYNW6w5GX
zP{jRVxC-->zQNOKnxPynYW(vBV5}`nYaHCCbHc3)89V?>t=Cx<7p33xZo?5Mw|0BL
z-A_ksg|2~Z0OuQkkz$h2;akOPTiV+xVdyEj>$u3?4eg8V)N;+Z5&?xJ)5Js;tsn`B
z<!mYb2ZIvKNB>n1Jf4#Po?M^kr0%&zq7!YY^!zh+f1qF1KuL>+bTHa`M*bOiW2jy+
zOs37f#s~Q%C!QxjCW=zQf5Wpfv$-D8i1GV`u=6LbV&7~GgXg3>Js^tr6IW)Pxc1P#
zm105Bl*jc}4GAHJwa^y4jg9=(LD?f*Bl_FHxuPd`huoNKnmI+Z){QFazJCWdcaiQ>
zWYxM3I$xep_@h#tfgVzm0=S;GqFFqeLoiBRXyl5eRU&^hqoD?yG_eIE#+okO&n!F5
zKt{BqhG3W1TT}d&2v>&qOQSpK*)kY}qqq*=h>ns{;5d8jk&7Hkc}}-a4aE19yyC$?
zH=@W0#*eIVw0l}T3FK-mq3qJpn+3{Uj0DaUl#SwiYCSsh%}beMp4vl)PWA;wGV}8T
zo;Qre{ZHDrpobaZ+b!rSD-yQ{=zuE+na|e2S9%dFS!GAv87u4kw*e&T7X6foj>M%?
z^lRe~f!z-8@zP$uv3_MeOM2q`)Yr_x1~cQ4CnL-0+c`z|Gc~*5+lJ>{guES3lflXl
z4&H-^w)Ty9IJ{!-(71fN54=QHF{bJR$dEap+JtGrfJK_egJlu?W~MR<q8-od$@Dx&
z36p0mbJqPn@4!HZ4{`_mBiU*v1FqjF^zDN-lk5Q}aU+Fzil#mOn>^4aMZ?ycawKgt
zic$K2*ip#yN@?J0vq4fZSg;P!2YqugW&C|nw?)>YS5<fLy9FvsGC&jw^BGb?^t7N?
zeD1-*&q?@E_1HhDHA~Y#&@Qu#-)vC1`D=x}F3hio<m##PhoBvv9%6T)SB`b(m%1zG
z*2mTwGH!l+V>!X3EUbqO?i@H$T5(7tMHqb8j}a@EM8>Qy>4n7b-WUlL80=Kgbh?WN
zv*XnKDIK*v=kFBNY#U8Q<++eip>^{DHbj1I8uUr)T$;L?`b!q;RxUTwX8zaiAF@#@
z-f&atM2s9VsNGwc_8RtGXgO-gSJ5PQc<80bBv=v;=Dq;06iB<Bz2x%9Uol;}bVHuc
zHBdk<EAVsa)l_lLT@ftgvqioTU*>1$6TIpxM?^VT*Sz62|8iB|KmwZ9$&P>GNC}Ro
zV{~Y{C{ut3a~u9570qg2DaW626I(qDN7z@07O>A+$Gv&X%&WOm$gQb@Gmy;3_yYX{
zmO--JX9aKOEm0avS-54VNIREl{}6Tyu9@EKLP+B)16h3}722$46Z&AqexWgf$242m
z7BUyE+xHl0ALzsLbcsg>9+#g@aAWD)1|pic7BM#+aEt*pz72Jz?MaMNsq+z33w8<|
z&S5nv;)!bf33{@rc?SfYg}g@hRD<^>zPuPyOxMI%a$|7%P}2rG!zvwE@>q4!e{xK2
zoqpyD8Z0*c(#FasN$twX*^^7!TkC08$v(=%jlDC=WQ_jR==hw>%r#z$_(m5;@!ZJc
zaVwNt^nHyu+vgcmq;E}2RW5}ZyEmuq9x@|eKI!Pvm6$$WHA9l!)XDGX#V@7uoRMk<
zzHxmsUK)kericc{VoSBzm`7g9f`fgu!Ay$Fq(E^;%Q2O&3WvR0IgH-x3c{sN6dOFl
z&^zx6g`9Ku-@%`3=TrLN;&wt-SU!?W{AeKe%Mde}Fqbh1Jg_}>%8Z_V{5ex~3LD3*
zH}<zf=PS}gTYM}mLs>;-!#_wMyf+VaIlALgRJ7v{t$}D!yM8W8-L#~Mh10w}qA@gy
z*8`;S{TBye7Gk|^Warf~JXfEN*L~M&YV>s-ta~v6fvb8VMmNBBP*}s0#?>((2VdW6
z#8TE1PsAC>wz#J#>6tZEP#aJi)J-Qb+~~QH&WvDsmO)>-I(eM`bV;|fBW)=ugHgz@
z>cRNw!;c;H7D@kIV4}_Ic@|?=4J+A4(NY|#-qVzF;e6Nd|Hgs<QeR{a$II6QMD?%c
zaB60^X=#g#GMQM)9zJbDFI_TzVD=~j2SL7IU$;dP0HU~R8B(BBOy@6xX0b2we!}5v
z?q}7Rj;9t;s6ilCXw>9`btdz`?<EA_x)50sq9fZN6m60TMJhg?&<bi!rXVU9EG*ax
z7MR?T!CROugr7_{e<cJjhGY95E`S!n1PV9->5qx<zQRL7ZkWWm<?r1UhVt#{zaWzm
z$V2&b55{Y?VT*mqqZ-6iG5vx320`8IR1h(c!|&V}q%vEK2c4tzi7s)Hu71XmQAv*f
z(c0rtGDV+CM?BOd8w;CUD7g$ws~N-{z7b03$pp#twa1UF3K~N58-ykH`gyu>UA^<B
znJs~VwdHqOy$88>85W_cJ$9m!HV;4Kc=#S}goEyi^cvgQg;<CY__JoaFMIrYP>K8=
z%HjQ5%J|r}QROhA4A%OG5y)Ef?GCRaam3&VW-)6m^5~OG1fPlAlOD`o4vch{J#@M~
z&E-H__A*X0-dCY-%}Gzj>j<v_!PzX(R@R-Xu)mav7Tk=GITUgmgEud(MiZ$$PiAAZ
zli1OxzQB~dGJID`OOA2SE+HTIJFy<U(EknGcJ42WO=w)wtWJGciar?TqEU-^<4Xq^
zzF6y41<Qb3Q}alLA#FT&2b*ae+kviejo*<k=V(B0loo(Tgx53fmGhgSJ=cIhEtxfi
zv6e_*2u;WhZV6VIoGA0b6lt(0zuMmew5F!ZQFPpa_D`u4qTFNB93dV{alZ;@8I;Eq
zNqM}e`Ad6Y<Qs&>rM;sQd?h`iNbtv8Pasp0Yr9sE&FnL6N|G~Cb{Y7p>WD$EwBL<H
z4nECXrHaXc8kz^Ir3G}VT;Si^*^OaVUZS{u7yQMWt81b1!#L@TSUXVtWV@J<yWgi~
zsgRvTL+5|PfEKLGW?DEw9@~BwUb!>!7?prM9~>VoUzvRMyFc!Zgsvj*ub}hbign6Z
zT$896iFQuK0xfOM(<O?_kU__s4V5e27asl};zlxP?R3m9qObBz7P&JH?Ahv*u@X6Y
zg><_su6(wFKcNO|6z@(1Uc@7phhtWxuVhu=l5qYD?^p8wYXA%nBT1aupqNutup|b{
za5*J-n03YXT7YE53SH3&j*2)+n;G)K?ZJyad9r>ow{gSAeC31@5ia0MJ2Pu;+p`k6
z3omxkj6zxg8&91}dirKb!_hYfb0K+uDLh7b_=I6;3ac3<;GA2*i;s2_+kA6A&{Oz-
z(M^g~bCMoHTSsD1=1anU7c)RN(HxwUGLK3wzap}w6t}FO#S}>*a+Au_30NYI;VYcS
z8Nbq%SB|yp!Eyw7kT^GrN+MGVFS8?1i*;I!1dLhA9%vK&^2&;e38$g39w#$^7vtI^
z-`OAAoTNlJZpaw2w!{$#vVF-SQ_<TZ3f}Bp7k4twZw@t}{<+a%%VenTvAr$+&Lqr#
z6ef%(_H+BS#E@?PQchhpJc(o*U62)pS`62V^)BRAkdtp^ys&5-cf6X3I11`c2o=MC
zk9T2roV8J7wbS<|o-}L)opPl+*+9Bel1s5lP$tb6(_X}(MzLT&w$#_p#H{$Dgc^qB
zH^u`kul>U?Tcn-d?T@$m_O&QyYCEJc3(n<qC<^hWql`F3ukOTG*F}AIG&@QQwu798
zmA071wHA}9*<{rK<rqT|dYE9#-6Gh*d*j@s<$OD)(x?hmhY!h_+N+^Isx>Dn(t^f^
z48|(^Ltgj1Kd^NEJPej>J7~mt1xXfapnO!izN=V|E#-D_dQ8=@qGr$j;_EY){~-Tw
z=ssPGox_MlNJ~Ip(Z^kt(HO<0p5948Z-eUXC!~{+t=MYHkqbq->C-dy5eZc1$bR;H
zHO1E|FZFcY0XqvdsT6h#;-An%sbL^eXa1wI(|H~lEc(p)H*DBS(_H^=3na^pA@mLa
z#gp7?mh>X7!v$f2o?C%l!#_=Wu?PtS1(e6gY7QwOP@Xf0-x>J%dMQFjtZryvsOB4n
zKA|}nr-QD`%H2aRq4WePsW4};8q@C;dmT8DWN|#!l^m}H2nOOcK&d=+Qk?Jsd4B5`
z;uQ3XagJrdME)RQ^HjOQKe5~@^`qz|Q61<}Ot)K@-&+}mv+l4cV?Sa`R7O5j@-x{d
zsw(dQe;Q00Nzlk9-$k>wTr+(I2Ts8i>q3fE5c8jOi%i~)tc~i}60<g+vJVq$s1^U4
zV&H|HhXsf!a7}*{5d5t}ue`KB$jL^|JOkXon*{9o$_L|qE#m_JPJ=n5skfr6Y;?zv
zlsY7B^|ck~2*eaw)DbxBaQ*Vf_YnV$>bOnk@0Q>$SJfODSYM048GSf4ig^nK0BBC|
zan|RJF;^4@OegYhkF{0X&G|xF<Xkn+h&#}P`8S+*f94!H9uM=6IqfnZpz0YK+rYgX
z{ucuQ=_7ol;g4<!!WbK(`6F?RGeO?i>l+K41kpWT-6h64f!v)P_jupak%F(WQqAJs
zyBeJ#qE7@69!wh5YHea&!tBg{(F_tbzIKf`2m;UoJQ;-R?!QPKJ2#4>f?%!s&=NFx
z+=MfAv=a^OPI!37KXoWC+|WiPn_C(00Bm1tX`BuO_9GY+Aa|2?)BzAwEY;-98LtwQ
zh&kN>pmC?9vx&QQW)$Hia!zfP%o`C4B$yO&=o8m-hUV2uJLf;<<wd!x^U=20i)OG$
z4oGj}Lf1Y97ia=CNe*C9MRYEtb;N||Yc8-P>FQ1yrxQR*M6na3#v}CYPF5B|r*MHn
z7U_W7TGfA@TG093#2boM#$L$z#ox)*0flfUyoWyf97^r9kWSOVm(Y=vA!Upas*v)c
z#|s#Qx>E9@f}yfyALwJF6Tw!>I(@4Q5C8JYRw<lW6D^gnQ6|s4y>m}uUOX2whR~E9
zRYLJMCB6!TC@OK~^wq^C8zT6Hb+>c|+;g2gAyKs9@iUsFsTYse?CC05@zPy}&?oH&
zqEAYE9=^)G6CpASW;VgmyRXnrZZ$aMZ@f1zE`2}Pic#~K0MjT5VU|$_+9whuKY@ad
z9b>DR`!?I3T)>cL0n^h3(DA}}+~Qs(ym(X00R1@z0Zs?p^0=L>9atrSLFwMPZ0d>Q
z0&qN)sp<y~nOCMp3<5!WnmLyn1>CO9BZ7?+;}{X8+Fp)ikxP_8Eqylywpah?x)e<J
z)>thxcyv>0dmkWQ(J1|pEKuEH!XJVoWGJ)D3<9Eb;7|>LgI~oXI~c`{Y~x*%qk$4}
z=|Dk-+5Yd~y`GI9QScML+t?nfUjXCyWBx5jE4RZQYD^MFo1WhhhFwiBqD&+(Vn(!f
z?+P{(AYY+>$bepKlO;}kOk_3}c!|2);`>FdDe1UCa(F!|BJrLnm^s_HKHf0(ygT&>
z4;6{rz~~$-X7}$A!~Q!`h!|X^2wp}xMtws57yAobkjYqhPA*tAPp9+(cT2CQ8sY}D
z8II{ZsGQfIBgkq(%CThQ=W6o_KYpl66f2Q_Jc}=j+n7ZE{4o9SF>a|F$`~{@JYiHI
z0zyV-T4{M!k*n>+Yz#4ecy^_v!g;1aHr%udSAyjaK0?r!F0dRM>`{a)`UJDIsB8SD
zGsrM8Y>lD<UcbAHbUDJJ0P;oS`Aw!mW$uE~YF&JFtH5-i8B03OqH2c89*D%G(1>h4
zG>U&7`RjnQUak_n;GFXoX9_L0x(UE*$4M{#gd(DTn1@=&Ogi^^=8q{lV?Z4B&3=O8
z%fZk==JpOCe|PjA`=V3G`3p(<TlN*I3$O1M&p4@z$ijneZhQDBmPA&H_CW`#2V^hf
z`WA~v1FnzA5xv4rX)7TNXw~9F1)ONPYI`GSUstjRBKa(_#P>G#Dfa^zkHAOFx!4R%
z!7Qy-<fJ)kco+|rNh*yQCG8LlglAGJs#9#u1?`yu4p<!^bLyC8($qxs;R7PQBK<{-
zAuGwiZPvfeGKRWt;!#QTaX=-(PuY%CUG9k-*8;k<%WF_DIOL;lNH9|-Do|mK3#rIV
z%jaKE`~EL7!(h24l*qV%B^za-#f%AZmF_Uvcfn*itdQAk-!d9UBjazaO(GdRF9FhU
z!x+w*Yy$e=;ML3+Uq};Ex*Jq^Vne>=%)7Wd`J)umdpuQQkJ_$THV2yiocuh82BO4`
zSCBx{pJK`lCqa}=j`oiYTT5(rD3^@4oiUAqnDMUD|Ba{nM?2L?HM5r=6g05l4m{Dl
zU6UXP+H{ZOIt<J2C_c4K{BIPRm=6Tx%|3Qu3LqygL1Jx}M;F)L77b-&dODEO@${RO
z`_B!JZ-my#0^&+oor<`ez|JsLbk<;B6p)qbYPx(=3#>2baoCh-hVW8H|NhEM{B`M;
z;qJDO2#CubBS&oRwq*b`EIMpyfEtUe*HeE4t41pNVCD_Ytgnzgd@buF@{Qcep8<!9
z06!YbzBQ*}ggcOMZF>exH}9BZX+xY*DN^dMO7BL5rMc_Lr;k<b(DAG~fBKK0;FOW%
zql)!@9Ty;`KyevY9Hr8IQp_M{{Dx7iIpdQdDK_s(kZ$xAwuTky9HN}b`-bDm>7A;#
zG{Wr!_rn*uIqf?+I`woM$W-KD+<&tuNC%xweBnrv>xQ~-u;yRqV&gWkmwrW%WmF*n
zp_|JM&)zaXF?&#t@-+4-kdwlX-H!huyNBn#v?Gn$xti^umLl#61ELGmB%PKcj#5rK
zF`gLV#)bTz)mJWhUp#1y!-d{Z=9K^IAHctTK8VF}+28(CzKvDfX<#fXl>B)@v@7Zz
zX;g{yhV3k1M9J<qZ$X*D2~P|v*J7`B#8$x@Nyk2}+>SZWNpniUwFYr`J*a?E_)5tI
z)|He#BzJ!7e5!<@g-FdeDvZcH3Obw>Y>Y5hQ?(Q>^+t%<VR0g|o(A#?R!cZ!9)=mR
z+hN}bICFt0tbNn4G0&bbF(r2{+f#D8Aa|^?$#Nd%$a~w~upa~Ug%~AtA(xw}WHle~
z?6A!XMJ7(_BcMgoW7rsJhFCCIS?~=t_U%v0sT%UEV@?KnaUtJCX4nnmb7MUNyt|IB
zNbSkIO*J$PoIP5M5;3^s522r7*>)MmhOK{)SFB4euvfXG>cra%Tbe*6eu>}JWuLv8
zeE{gW9f~;23^Hzen6Jg94o}NJkss+0Q&%#|Z~4H`Q|XiSaU^o49oIg&Q;dyYSM(=d
zMqZ6J=6dF@R}g_6F%8GY($-Q+4sMKyD%WB%D%#q(YMMg*)?o^A)JN5{k`K_%Z-<MI
zK5mb}6?sI95l&#W3i@nxeQ(<-4#_-`zH*M748p#z+ivm@{su4?LvJutKv&=$b{$Q^
z6>_O=xK96VD<#G(K*SYChJiVoK<|ll>-%LUc~TXl#1>2+kDzJ%`uisXAs9*-OQpRd
zNQsm99qS+RB!QK%878AkxS=bg&69r^8Zr@Nk}(FL@|tmCcE=80GAyz|@EZ8b=L&&X
zKklmVdq<LRp#=ENYuZ0hGF@2MJp)1byLQn9jMa$^jsGcpoAju1AO1N8N96~h?#PH6
zY2y5atKSq-pJCU%n>d@rcF%?@M`2oq80J>eV&pI_h6KqhgQKj=4{w2jf+NpIW6{PD
zbI9FCYywZ!EkF3yOgz=1mF=c2gCegyz<$g|Yz7Xu#eXZab=c`32V71zcS!0S0ZWuh
zbg8eqj^{eFL>qK7CS#WgP3=FbUJjRjGc}(U)cX@aY$SCtIQqLd0jhexfDJH(zvB{f
z{X&Bo`W<zTH`J$_R)hh*GSzP|5?fokBAR&TLew8yqPG#Z?^IqTrU7qLS-&IcY_urq
z_`DyAcds-7wRgqx@|C%YcZ_@IN)#{1&Cf8Ev7YRb^|~dZj2(^i$51{5g-g4Uchs<t
zI(6a9C6ONVS7HLvgxZGdL=H45wU}LJ*`Qei1#ihE>%s7Jnw7yz&1m#GoRQlJ&o4wK
zWEA&!_ylDfX1`#u{(hIl#(!*PCA?o(A60H<7SD^P35L&86NY3gL?Y{Jv%>OAkaM3X
zEzs-F@kz39!3#4@gdA?g`(MGm?0%Wd?BQAPV)As$Tyrx}>==f{mm|5g>+pI$ga+8P
z)l?ey<;P)vkTv2#p*iz^1;}rSsbeekYEBX4FTrERFFz+<Vb`*ubg*B7dqeIyqK9ot
zpZ3=glHdO_0DiDWorLo{Wf})_r_`7em*Qk$R^D)+*^9GaC_&<8!c>CNVnT3e_Q^4`
zQrpU6Uc6^J(x;TT0Y1o-W!+VdNRwy9!T5H4?NUMb(u(<CAUoG^`2-DZY0Wdyu=Bv3
z5VFywnGXq{4K&BN1XFEWj@FlF{G=*ajxYQbMmZFf6p01nAt#}yf^5?OIz3RwrN)rb
zo&L5NyqD6f*XOA6<9td7F2YP&wZ~cb4Mz+OIk}hk&re99mYizq^Wxs|fVVg)Pdf0H
z?R9m1AqxBr6Galmv^R7SJcEcsf5SIMaovM%s@{m!N0xZLcPWN1f7oBk9Z!E+%aJ*j
z?0GJ+ul2*iEM}&&S7&?BrI&pv^_so=Yzq!2-pvJ~thL4*G#C~>$8eMumg&FIZ1!uO
zR1Go&H0KDXiPXioM!|AUi6L(q%-#{Hueh}|5Z0JFk*0B|){+p-sr+V7m+i%JbL9(y
zeTpLDje8hsj@K}i!`s5^Yx~wVq+7XX%}_9z4~F`7d1J-8FBfeDEWB>=gY59nK8Qm+
zvRYeCg_$^zrnPt%9Vsc(4Jb3q`0*5Ikj97S>1U};p2WNz5lOHZxG!0o-Fe^8cR3@w
zZOl5M5$PQjSyA}h9uV@&qYyuu3+avoOJ`kIc60u(jaxb|`SO17S~L(SsaO3*KE2_|
z(s@TKMXs^~{>r$si0G5YeVU7CoXfB5dgA}zYzKnQe3f~;;ME%|g~=u&p3LW^P<BN6
zp98-OST3d@vW8`h2k6VGU(isJ@UofAJ@`&CKNBLvmfezi#8lU!r+A^D4&Mt%u|W4s
z=TwnL+Yisn`tQ9A5%dk|2MLaTASg#}A9HTD^hPh17Y~8QZNgHd=?zA@*T*(vbRYK#
zQwwYV7q*QajBBXGZR|+Qp5;~aOp2M?PHTQJz}XQyXy+Hn(eF~R!i4NaUPRCIOt&LA
za3N}lh?LA9J&7Yiv`r;zA9W6XppyzTPCNZgSmcf{t;M7IWb!Rf^|YCwdmN?ki(tWq
zxvTByW}l#@^puaEF?zQm)9Ngsa9x_9Pb<aQ2Ibe@l;V{2+)R=-QocD<H1)Ojt!9m4
zG-$N*{4!Q&_{AwNCwpY8_63w6gRzeJ9kp^x|Bds00Sx-43HAP+5ACrwmrVT$T_niq
zwRky(@nWX1ZU?Y67>hP02a(Laqs!Zy&2URd6fDF}h8lM&>>dh-VJe||z#$D6#<=0C
zai~VB5N)d!W1sz4@!SsN0GHX--<+{e4SY~YCAv<H%U){CIXDVME=n8Tnf+gwdA>Fe
zrAJ;3EW;>_60O}K`jLWcVKFdj6V7)b>64dIVX1hbZ$xXNlF8#G#!-dFst~vM0Y(tF
zb9g<Pt2%md-{v%?Ia3l$uv{QO2+@{OoBiLp+w?&Avx;1*c10{7#yqe>n1bi;EUORZ
zkd~za#jfKBfWXZG>VF1mJQ*(CgpKSK3~TD-nGVCtNhx_)?J0^$=jgMZYBv%u20Y%=
zejmkfM{<b%B*KTe`WCstuww%wAupL^J=oQ)o~~2a)7|v+OZ4Ll%oUUW&DBHF+!^z=
z7u0J|O#a>u@Hug*EkhPWN=h1t>VAdyl~~B1keU)QKNl5A1c?AuSP@lG_#Cnr6-@9X
zYuW;sC{_THh^RwnW5Z3G)DJWsk-<0p^RW-cp1p~gTjR3H!NDWohtl}IpAYND<;3S!
zZ3PrjAdl{6vBT|lo~pv@)_b%LzR2qv|J9#Vm6G*WyhT_M>k7pQjE;_OtKoN--{QYT
zQox_;Axe$+?i^5qBCOWeK1l-+ZwY5OpL+^^R4QKb!aYKEK7YdFF|NXS!0&c<IY4tc
z^q2Rz_J)FW8MIwY9(>+~TmS!@=JmV(2Gmhilz;!7z;If3OO>U}`3`Ay@k@5~^q1_m
zj;YT()8GBP=E`udgZct^FDyG<eYripTx6NRrWz<h!vSJP`w&(2d=#Hnk9=&>kVJuq
zLLVU1ZsTo_HF`q-`FTMJhw}F@b~Iv^;co}XlJ@^YQ(@QL?jBTX9gIf7No5E^s9*qo
zkLwvy>mAJBbHoRlA6cYbKE1EUoy%kT7foByi2tWO4cWn29@U#;+<AQEp&Cc<@36Ny
zwpV7Z7LH#5?mFJ7=fClx?XJw4^}&NhXwt#Y>aLB@YU+vC1MIe0RX2MfSgBn{&?eb2
zs{)g&$x4?77e^ST1_$Ji&os}eu#+hMsg3x#;vrdY>bnRotr>b!gV080gmP`jE)5l=
z`lfg2D;t~}gmrZ;+)B`S2KE@<sZ03xEFzz?Y-AB$M&NJ2*Ox>*o8Umy-Y+Qh*?zFD
z3;h(lGea=rfmTBdX6%(E*RZ|eK&CeReg)!Gmcv!dH?A{>!<c*+7LlqPs0E&g1W`7$
zu3bRco(L8^cJ4gLe~3DO-eU6R%-(DWv&(?KGPMWmjpKtp_755(`c`RwzawB!=$Y+2
zK7sN;@BBbvo(xdxJGl{G4m0peMf9y7!+eJ6rMZS|Zz%lfNQRZ(*d71F^gQ%z>H5${
zH5+)OArSq;QY?z=DIaIGm1qxJTO&kgj?oh|S*1_vm7x<x$S)~_fezS#eAh{~8=-}-
z_>PtC#=kVvJiiU!!e!^3GV`W8xb?WOhf71mitgXj0IayZT&)GfoS%dLy=%b54Rem*
zdnBUf%{$~h82Lxw&Cc-)q_-)MU~dM<j7Wf5moC-!t2a&nb+T1I3{LplT4(_@_@8c2
ze#^D6B?E?1d`v<ITQIh0Wtmu{;1zkyd6+8j?FckiI%Ka_-E{iNKs|HR=EyW118d?<
zEPpX9QST@lnp7r8URE$E(+%9;3_MuDr9G}qjG!ff@gfr1PnGng+M-7UNLpw)kHSiM
z`{?2LsvjKb#`@h%<uluBJ&@?S3WOYbkr?Eaz2MxUk3uHF^k0=t!6bH$pKx}cCtBau
zb5)QMfB-jX+t`7qIW+$sMxl>RXdIkFT)FE5KH+`+88e<OycoqkAQztezVwYJM(k#P
zd>Mvz{I|X76)?My>l2aXDqT5d9&mwyMuTPNF(DD@3Lr8l8@z5c_?*_K^{#3zLU!mX
zTz|0QRy??-y`R{MNIC2xp*Xj@NLdho6l6P*!4Q7^8Zh}4@zy|<Rl;Q;4FG&$&d?j>
zumr~@JW)2{0<z?b$4-(iq`<C-rz=?BS0)#>UCZV8@M!C6l$l?J=r2LJzre>3^kjkQ
zaEJOkkM|;7;cY!TU|#KWyF!OD2<JnysD^i|4|as9J<T`DEkeLytEmCH2|ZYm*ngk;
zz}RplJ+rTk1BI#pLS6)FIS~k1ics7zH?S%4G(wK<K7a}#6$Ui`Y-s|l%Gn{f=IM5J
zyf{C^9dC)V+m5zvxo)X0_EU@LO2Bgk2`)2FZyLCl_Ra!Jy}m#5<(geU7x8HVxTHl6
zU@bxyGTbdmeS+p2W<>~OQlXj}iqyfdN`Q~e03;sNEoq(C1_HW$g5>HC0$dNvs)d9g
zAQF!Su&>yL)xXJm&Udn^4FKUn0yrXLis5@XME}*kFki_OJ9+yEV3=1*0!la$xsOW;
z>-__4O4-3T-q#SO79dLj>6<U;3la+@{$xLDbr*a@G6&s*v<YkGt8-HV{5%Jp3Uc@$
zvZ2bN6=^{vj_Ykv088|gkCyL}|7^{25|BkJW#t`47GoV`Y$52^*ug-8sq^MLl5+Fn
z+Fk+VIzlTw5ddAT9kZeWvzne10RQU|*Pv<fKoP+hs7J}yaQ@y`_q(F<N!35gMD$oF
zG{?{fvw?^bZIb?-Mb85md9J38`^9CD5=RaO<YCzx{Dx{dC%_Kwdeul1Ms(?ooYK{Y
z%$tU*e9W#F96jXdOxM}st#EhXlx%@YXo@iO`lh#z7O1<5+B0058j;KtC<?v7|3;FM
z<2xP!$FG#?;&>@z;v!qFDs2#O%t+HM+!z%gg_&V62ubsuh6oPo0tGG5-$d0^gGxQ$
zzDZp&SN0C>>_mvY*IZE7!kmqEM0QDIu7hECG8Cf6PwK^JPELGz(Jy;BS|)T=Z9LS9
zO5=(9PU=|$bVe)3%;-+`v9HR5oU=GESmF8yRFV78vRg2k9m2qrPWd+oFbggPovwjm
zoDW89uI_}grwg7}+g^u2In@aT#XRmf!uLi3HrSvGfbl@CHctDoQ=P!2NIOPUESu^Q
z*0&`+C-m&om`1XVit_&Wi}3sDk3Q9m;3Dw7z0=fdoP5&uExa~K^St=*q9wvwYPQH8
z57uiH%wEYhyg<0JUcJYj6s;YFLZ$UUDhs=1U$v|qS1?&CQF3}CsDJi<Uz>4q46T+<
zM+Ub1QsF$w2K^g@E9K(+U~J1%g?<PFm@7wbW&lrg9LY@p|I6f%@xf%3hb{h3nCG^~
z4(PwHk|KE1P`l*8=1?#k!ah2L*6Yp-i{}a~-kF{dArswR^9$iAZCA)_FT~vQzY#y(
z9<zfzKvi^^B^w+djI+d=_?8(#gE3)WL8v~fp+FFR1tI*t`-(!oob}!1|B3>@nK%BN
z`7xVT+t8#dc`RT2bzZ|hz!QnhViTo$TdJ_d-*Z;^Il$q-=kqAt!HMSohYRq}>;KgI
zSj1aQSL(ZxRaTVxcPAm;rm64YE&gc~_*N!|P5$pN3FFs)B7>i9^8bIDmbBhp2H&lr
z|0)SdgrMp+_n+8-=#!U4!T+CyQPfTh{x=En0}->-|JRy+K1WcWU^O<oS~qTXE&fvj
z@s^!2;K$h&MXM5(ir%D~+bGou)?zWH@jMLI#+C*Ce<t-9XWn3+AfocEn8&ZVotezi
z?glmJ--L$wb8_bx3pUX)bSirfG%49NsG$E7L-~LS7JWN<(|$q6`zPf87)t#gqO1Q$
znxx#9;V9WX?8kpQLAc;|A!isihP6^}Zo;kAV{$di$C9+A3{a)%ZB?qZ^3sjuL*X$x
z?=aZZ<l|_H^L6a+Eqx3t5-wu1p3LQaeSYL4moV~s{n;HogU+>JG<-fcR)Thy;{Cj!
zs4ACG0$8o-S!`JrR>iKCn;gQvx>ao~8~lk>(LlY_7(JNEemC|CpSIk+ck74>vq<54
zolweK*+%=c(Ec?pLy@z^bGXm}wK`bmgTJb*5WVVl*&`ywFJbk#vsO_Sk$h~m*7;7$
zvzwmA-Lho1W_`{)@%_?Dg(~1-JX6o&c2Fi~>9rDrc8I|Jt^p()Wk|;QLVT(4@B7hr
zhqxIs(bD3g;d_*|#p$)%q+`i}k*2GB4^A<YjPBxgG}YC~WA&Z~>x~c<J4K*cyYn-D
zrQu>v>t(6xI#Dr@*LrKm5)6=dT<x%w_^P5nG&T^E<9T-@f^o2mur?{0HA#E^jqKnl
zED~Zmd5xh%HcFY+yaCc_M)^A4ZM5<MCdNI+t3}BvOlRwM%p#(fR;I0s(c~V7B%s`5
zvFpZ7_^{)gs;Ne}o&9a7f)f`&+SN&aPoSvdg76x%zhr(|ryYX+*~$A$C|%^Q&-S>>
zox2XBT|0!uZZ+;1`h}+Y-XrD!4#!(#q!BknQ^W7wd}j&2q-?|Uyoc5G$>s2H%HHKu
zrr;%J9L3#uJQVS}%?4s>bmAwG>w=f3Yun|+<=%GY`}#_NS*hy6*p?p^qe&m~!mF|p
zkknJ!ceN%^n!|H*-DIhdsny$0Wd%C?D21pWq9=UX5Q(8J4Hxf|+*9p$ilN^Jl(Ssy
zo)Iv-!2h`R2MEfn{t;ubS#$Z5ie7=UU^&-zl{i#-fD6xWRO0KN*lfYbo=nopda;tP
z^l%HSxfSi^e91aa@$#CJe@lt*_f0~W2>8kb$97KWi=xp4;(ES7)x^{G5)kvldM!?;
z+-&L+Eani8yOvcxNYQFJlE@2K1fbh$Ug6Px<L@-WdE^}9DgkhvBw)s%;R<4-=U>~u
zPQQ}n;%RYRm*Zz8vV3Ik%H~1JutLHE#%9B3Y}6PsKR>SxQt**d0cfsqmwbAE=IwQ1
zA6RsFo(^3hoO5Pm>Mgl~2H$&^PN7U>iWJwBbz*k$%+w4G2US#h-fYxd8xC+*e+)~!
zzk-?r2~6<S7~kDiV9=4PrPX<4IpYmRSz{YEBi--UK@iWO_7pfhQp_&VE$1}z(_GwS
zB#^mYJ_qFZw9wNmmX|5lO%+d0o+Z<A_N{jPIb6%C2TXCfJhdqe{TM9#wc@yd(}elp
zd8Di)lDI&+Gc9&!e8J!V$mlxjn0UWIAa?=-9Acjzxe~wZ&y+PT_NZTvCtwty$z-W3
zP2op$th_JIzjs+`;5Z-H$BW!vUobRJrD}J=!``OxXJ@-HY!uC{t7Lwt*S^YSZZH<_
zq?Wv6lbydDm-X#XU0cpu-`0y^b0tx1mO>4fNEV;WlyyEiyx%BB1gMPpb-bpsb>29{
zJ6z3tqX5Tf7xInAeV&+|@DVW_t@PdygTr5%d2ifEF1qBdUPHaLM?gUG-DW(#kkBGk
zIr2xZp;p2L9Wbu3!?ZRlOn29ROySSsK+8xfGvx*T{u*`3ULO|#0GO|qbV&K|xZm41
zTHaf(*1f`zd@bjwv)WoW!>KZyPZ)KGR$!ZCvs=n+Hmm5cTe=?Zo$u&G;vA~j>KSp?
z9-eUCbns>0TS77s_jZ2lT<;u@^UN?7i<~hUaI-k000bPbX80WkiXdEgmCAC40y^pb
zS#n<pezv#eG6hd_aA1xar&n5%e)jxo*@^CaLA4f7y2)`O(8a5L9mh%9JJ0<YHG1bu
zb@oqY7x`~Ma(kc4)wi|Zvw}C3SjHV+s+Nu})-fnpk2fmC7-D#9T{bhbjxPK?-han5
z-lJlHQgltmG@d9=L8T$VY^m4%aSgVJU<=@G%_x|9yS^;lswx4HMnPV;598f+b{($d
z3x0QDWj%e`MR*)2{<2g#DN`>yiiMgLL)*!44<|)z?`#$;1MN6g^;#<~q#8(B8clFk
z8<oG~&@yOxn0xuN>dan)ED!OPX~Z|Wo|d-uI587QfqXs9rZjA<pY9Bula#H%n;ay#
z+xL9xn#5G)j1xd}jA^+R=V5#+MLYar*sQjdtNj+tfgZHt+=x&8fo<<f_UzbZiuCZ_
zCm;tM5Ip}}v~>lFIdo|UsLu~H$mIC&`-uI979cSLWMj45kJ-v}#0nJ9KD^C{5YYKt
zovA+lZUC-Nek$O`C~wy93fT~p`84PmCFrd*IqOJgdl+ABf0@%#!<CM=wl*a%toYR3
zn3V2l^UJ8z(f%B{@*&$`OB|IMLeSoMIIE`=-;Xy?lGSPICDO3wb0fz8_-L@nKq~l+
z|LJ;JIp&>Z;&p%96p`aiPI*$)(sebt53s~=o_yQ#yAS3)@?_b0w<A)^Q0{n8;IZL7
z&cOK2njRabGxhf8IXx&ZlasY<OF9SBnY6%mf6Mu>J1Fz?fg23!_MoHA*oymV#rm*F
zp)+l*P4ITJ>F7Kv4n}9W-WtUFVA~EG?{B<?pA5mvW@+n)dpGk|Rn(d6dSX9=w3{#Q
zIxcnx7ah&6-OD_CrzoJYFi}=cpUX%NkVBziJ@j7eDggo6zovy!=dW6wc%Ag5Q_avO
zv%7yuP$5AWaKc&mJ*Jvn`)nFM(Q+7j<gtM6y4f?flvxH2&XUek;Xql5L+|y`ckoob
zw-Vr)1qKd~3~xN!o%!ww)>2@-KHp)dLZ2;pioBm>Pc3-^U##r%go472DMREYJIS5k
zzOR{xyQ&Bb(AfX$H;$FtyzoY5epbcpSgMY%RQJPwcmsDUAmBoc?fY94j1a(H?2q66
zuu8pNBoY7y(dDgm)=3O%;bYqFka)mN{nhw#!_AFQ0e>b}710?<4tKKd)&0!;O0Ndj
zpb?FOLo66IawRPDaQN`B_D6@uU9I8@!-Hj=92AuOM*69x`Zcj^NcnO^5o~LRSuFAz
zBatq;s=fMPxJoR)?Y?*f6GSnA)3v|Ztm2`>TWyM_#W4KGpB!E{d*%tH$N8GAp(5e_
z{%@?nFpa5ZYoEqfl(kmPrOB>4zce|YO`3xutlv!{-D={ZO|sLtcTzwZlt~*(TO=A6
z4Z5%{%VfCuEZ$c8em9dKC3|ZR47nzq$uoxA=xoIs>l81!ROn#;zTm2J>b81~+17mg
z1-1Z2Pj5p4!qXni@@(*Wi85oJa`;sPF{Db-rs=*U_=8w(&O$%><S6i-<?zT75vzG~
zWV_I$8vW8UIu9@16dgBG5`TG713**r8l3_1!d6VQENcnbruu8ZKShIm8mO4bSbuax
z0)jo$n!P0r9KifCf2*{p(_DEE`|;>mkn|P&KGVBFUUfG?=uf(t$zuX;ha@?Vg7!=r
zd9ONNFa3Jy!z31lXz@N%T|Nl>#qNUPV3^|Ow@>WGvcbF2)Edw5HtK!9*lN8DxDKXw
z#~4-s0VSihjl6K2KBMdulMZ=B*z&nSF#zGS$E!qW0<BsLF5hNM2lELdKr`ur$-&tX
zU6)A>+9GxeKU7);v<cnm%)GmB8a~Pq0%0?iCQmy|BA%0_!GhJr7=U}aWO3-uL4*g$
zB^47^Q-bUSs{CDViPEg%ThwhZ6*Tls%YV%LXNhB!`uy}&o9(^p>Ge8H(QT?to%)B6
z&`urCRd13iSb2C;4jnrg+O+F@F>z*>Hz!Zp()blgiF-mYIJn}ClZ#;r6Dw=_!W_^w
z{PldDt5hXfmAH|n{Ma2DuaxC3D|}Ch@mMPtV7x*36?~QVH9Uq%3aG<fX%3_qd3jlf
z2e;(#P}Mr?Mt9`Lh*7pumQ6(4?ZSn{*4vwX_pv;EBTF)3QiHq9Vi+2KIlm9>w?3M(
z@XT*z+HCM-yf5(snEMJ9x?w_cTSUx20JkQ3PylniDM9}0)B4Ul8%QbB*-D+5y(f6%
zBWhA2%#5+uMS6oH7??;`cPpL8q?Wi!x?30k)I=5`IV0Wbka9`--)D$obqF)QlLw*b
z*DXd|=g9<BO*|_JgZ>JV{1d8lF4UQt$%x2V+f?-q_uWbEZSM|H#*#1A2$GVG<mcaV
zRY#ARrovt?%DNT_q@+h1sleiXf_7oirOn92c9BLU0}W3d-Zs3irIhoa+0hOe(o;@Y
zJC<CGcJ^^XyKc_NBxs`omTTwzxusxF_UY{tRtABh3Octhq5XSS!if0c9Hc74K+O9e
zb7G!8jJfaP>+GR%lq3@*`!X};OADf4`SBcxuk67cPL_Mcq+6fssh0BXi%*7*BKf@U
z<QczFDbX%V2v;!rocfWPVWuh@!~%THNZ|s4(9X)^FRPV>sx+jPlL9y~p}PhtIXTTS
z!++_Kb2cAN+3KoyM5DFQwAK)2Y>cKwR6aGWG?STclr|+7&Eq_-M{a6!C3d@8uSGT?
zShPLheM-ydU{u69-)EJ00050V%#N*XPwtuD=UyfnEZ}j+PPT>+k<gQH<|_?YfvOMF
zTFkCW{a$T^wJNFGB}I48P!j6ZuW>Vy{;jIt+Va%PnnZx>C*lVIK>|6wWd<gWFNbC^
zW@W=90ZLAak1~L(bG&Sh!#4&Xh-|!v>2%)hE^Tm7Qgw<ptM2bBhzH*97j?uWv)9cz
z>(7gRaoal)(duNc4{u5E-A=@Oo7!;0ODu!f{ItDt8~F7wtQT<FW?qHwes!l{7Bsaw
zDS|7h0+jkQUO(JW@Rx2aC^IGttg}b<0Jtfj`0)H3M_%P>zdM#{9{Xu|c#u6Hb9>*&
zkYTIEjLZ(s42vea)%A91-0^a~-YC?U*lf8+o}M98=`_l%CT%Oq0-W6K8AhDa%nZ%<
z1Ww&gkTK0+;SC0jlY7V;f!Q=oxxipuzX4+<@8Da8xA$F9`Qlu*PfLddRa=X_-c_1~
zwG2PzR(l>eAW?eYC&Qh}k!j$FWk&?JF9)cLIr#*?BT-qznP0)-bkBpAu)qu_W}3np
z5CNZ(WqPooBh{Ni<4Sk^sz-|i&fh?dy1TFa%Ez1VPYIT)C@MI>D?yppQ{*>!MOK&b
zcf(3pz<PSNtL^*9-B)b~sflK1#{Um*Zy6R>({&9tBtQZIf;%L*li&`)o#5{7PU8?H
zI0SbZcXw~x-Q67;cOCBB&pR{MHSc`#=ezp+=sw+bdY?MAckNoWYL)nouSM}o=^`uq
zhsnffOMuGE(z}Rcudj<a0-yHB+eC-jn`Yv!47DXD^tXrR=$AUeSRRqA=WEh+Fcd`U
z;Q5s>&}CwLDk0;wDZAE>4kvYdd)AKzgY)Xd3aGb%xm2H@-W7*@y6G?2;=o^b-9YKH
zUdEBWDnZLaYiBa*>!q`(w^l2TFV?TRNO?DqYY+ytY+bj)sq(}2O*1`Zrw0_Sl$JbO
zR7{r)PW;}zrsHGIXkjsHzEb6UL{6w4qx5_9d^Y8qB55l)lFcvK;odX{(I?r?OQ!*%
z-6op{yl`AE99UpeUT`!XdTkT8ei|%LkqGYu=(1`gW&25X$bAt#<-+Uh;P|5a5ouZ@
zYm**>R<5<mZYQVyR-1O7M8Yz=O+4_Ymf`dST9l}L5zzXG8t{2V!0*%UQKN5UJ{a`(
zD38(p)}TUl>`BH&7S83yzBXq4PkJMULwLak{1g#^mf+=;FR%U@HPxh(SbOcbnbb2y
z+-C1+i*A{;pd8@$v9~FbcXFWEpYkhv<0E_Z)Bz5c_k00jWg2hdCVmbU{Vsu8y;F){
zf{bt|BbE*kU1+V)YvVyNcjOh?o<d8pgxTEIEks*8TXJr4iOjXx{d@P0@N<pJkQ$ZO
zt1IRvdFn_*%ga)ib!6iyS8DM$t*yFDHa;k<mBqTt`x60=7sHQW=aH0G#~t0>q{zIa
zF5kPJGsT%-Un#%^Z95rt9f8i8PnQWQ4!F}S#)L}_FGVX3XUz=Eh1$+0-zii`{^)Vm
z7~S-JhdkaEYUM~iB?mmvft>@6a9NS3-wB^i(JI^UmON+P-fFAg>>^LlEkm$~orQNf
zS&14N4hRk(xw_kb^H`kfIMZ8oEti+E-S&ruNlu#CBvHw=!QA`9hAz>QZrd@Kz*16q
zd$_YxRX|MV!h)D^V2l#?wX>UaDi1yg=oXaMaOrn#Jdl`g46YK;M0?_zE0p(;8Zuv6
zO_m#ld%|JSUE{A!X#^p^dhOh|ltG?g+B2po?eZhF5sG$j*X2quddU&hP3Ov9#8VXN
z9h!Z)^30O2Y_uE}+alYXJTqmbkqtpBH*;8c$9{Z-uR@4W05&r126EWjW^cX#v40SX
zs%J?rwAs&-cB`8vIvzDLbPPOFjY;IY@}+JmygaLSj)Q#$=I-$gm=AyC${o!&iidcB
z7v*TP#tdOkYx8xrTK>~PK?-v=Nm?7@_l<9Zi-Ii4(1jKznd7H<E~chiq;Cbm6Yj(g
zgV;srf}B!>O5nUu{OVIvRr}fr8(tne+dqN59$#q><z2cnKgAtb)Y)h|PRpK|X)%cP
zgJ?71Po&Ag6SY=8a*bX)LM7AZxn60S*k8n;0j7dYEnNAsk!}x1fsrL^u05FJw$n>v
z5mrApujaD+4_BJG)tAI+@<me{k~KYYls=WrEKBMx`Y4BA)ob&AkV(@aWHPWN;L}*X
zK@{yo4VQjIPI^^$06pSPbr<<*6L98KHg`mOaB{D-o*Im?Mqz&m0jkk3vD%=ukEV0Q
zzw!t?);d&HT|cb?wRKpnL^i;4DkY(fMin4e=hItxlY@5O9+E!K*R8mWbF>G<gOl`%
z-R8MD(vVE8Ro7Olnf_86X*EWJ16QrN%vX16emGOSI_#fAO-Ebh+B$@uNA;N3EL^Mx
zb}CZWT(eFL%M`iEk;AU})oTF+Hf=TQg$Zqs^qofiB~g)c{ocuY>Fhw*7poMdGufzr
zAk&;>)dii_rVhumMAe=hulhXujre04J2SI|#rC{5YiO6<f%?7@Uej|g^K(gAxED!!
zg%|RfX!MlSL_OfgQk?znjGS^$tBpyq*}DL<(_4qOV)}JgIU-qAC#QBvBE*}!xv*;L
zLJJd*y1Yd+9k6`L=0A9{{6uURtwG8zkXGcD-P6Tow5NPc6UZ*BP->Q42eo+}V}g{D
zs8Bt-@{U>*9k#vNnc?Log|fL)B#nM#IhIDQnHZy^)b9002Dk(>{PpS}-<QGz>;%l;
z&{}!Ln263lS-BXh&DhJE$)fxRCg<kfJYJ|CQWzx!eZjuEZTueh$>Gdwp?@Jd8Pok`
zav;c`d7#zqmT*ejl<=qP3BwomSu>pV#1uQoWL!-CmcBy`OL9FfTdhi8(XDM<FTVNo
zRdbX3fOVx39AAR>6HEZU_gyP8u^@Q_zFPBzrOjK#ZvWWCEY5SQ<-*KPLVb&vZ)f-l
zQklqJ&IL{Xe)L~v`#%q(??`tIXDF1;J}#oaS@ch@>Th1l=vT%~Hk9(a_Qh-2Fq8j3
zY=RBN;<yxAb#L$mx^e2IJ-v$fSVd2d0~3t?-;x(&J)byB!JvKRT+M(X(7zJ`AMPVF
zZ6;9u`N98$b@0E5i%U|QaKsEa>MZ>`uPfHWh#L;16*TDjTa`H%S<L@hP0b+DRWE<p
z-Dq+3g9tZm7pIth(z=H4820&15hfR?k;jp}+L*&5qp>HrVsr6qgZ57yh}pdcFsG&v
zOKatppJz^ZW@er$Qyre}%vF4Yh#nk1l8j)HC&}^|oNBHn%>XHGf>y1{?8eP{Plq<4
z)|a8)T(?9OQ^`L`2RDsx>SS~*jn(cczn7X%T;;S7r7+)#5M*&n1>>E*n0>2CuSH)~
z;G=#Mxk%-8yqYZg&qKKQ@^m!ytv*P>d*Y=~uFYez>RE1qO8s$O=KJj`R^MoTMaJUA
z7n_r<c2CWQt>+I8)EeID0S^U%#63s1G)UD!M<xCp%Dn_7o5}2e{#N3XxJJjd$s$n}
zBS)>7@PD}<FCBwC7jHTV+$WW#R;wp2b~8kKs0zc@1Qe}Y%{o5s0lNrbPww01w2hDC
z1KG-Rd)lCT7dp89d|o$wZR>noxfEpeMQQKK!+3_dG<mMp+mWk?vQOW%RKcb%k?vz;
z+d)c4w>Vs$_F(?5@S?I(e3rARmOZZrBaeQ9B_NNyx`{&DzQw5#Aj4}0O%`NyPHm3B
z-mJ66BhI^s$;4{*B4Na8;yT2xfrs*Q-ln<Mp|eL)xuKZ`&22vK&H>initUQC6CF_L
zmhcS7IIkkYwkoIKAHmqOn)Se<$+6e2ZsM+wY)xPS%$J$sS#}SPsse?A28?|Zo)!S^
zaPI(y-I5A*7OWIZDcu^=)pRF${y{KS%8a>ARELRuGfKrh(v26``M!M&{uX_wC}XPQ
z4Zog+OPP6Byv%|&0sO|`)0xpobbYC_D`j%0T0WidYDROF?(<N`p%MPr4l@M6)rpPv
ziqGEOBodUz632IjpDV61pRQG=N?>YDx+SN8X3nIQ+~JFvna^Dj5{M|XrdFk0*tuxR
znq5JJ&P(DW<y6=_^B2a~Rjh;I>9O39$MkBp7Q2z$s_^C-CYj&?Tqk~acZk@^?9WRb
zI(YgI(F|s=$I(cJ9p%4U41HR|Ph^(T|3(=bn%ntrF+$?Os;wVoy_<}mAC$J1o#|EU
zxR3#{LwsY&-Z>9BM7M;CwR*;BL6NH(uHsOMIUTuz3!dO7^O7Ub>*J5at1aJ-L!Be!
z6sYY0PewC2j}*4HwN~#VhN+{}G(M*ZyP?+7_9P46!`zxFtfvEf!`ElI#yS81%34z#
z6|_bT>r|8Owczn0?oI*)K<%n!5L)kv+TAYP-T8X#C!OpE52!iNmvNop9wU<GQj5+{
znaoRx7Fjrg2h4-GYC}s0%NdfRDbzs$%wF}0F>5rR1kxLrweO#BhLW&KTC13uWIn(H
zgcDx_StrMw?W+z3DVuMFA;lYP6m*(F=-EY7o*p}*JONHv@PsN%Il&r2YZ0^aDzqRM
z1ccFVaTu2A25^osWkoiT-zcQ&Xc3H0%O{@n=&POO?vKfaj?MSSS5g^QVp&&eig>}_
zg)~Tn&f7>&Mp0(9lpfy`zuK{=xY?EV%8$7jRvm1L{qxrffiO6_&@R3{b+bBn1_L_s
zBW<%}9mjpuS*63_lX;;WMok9-3_J1sDY%6M-mnHBW*q_>NJ7><<41uFr2dApYc(l6
z>qh3@)o<cV&kY&Nb*g`(C_GSwi7c^lWPHO3ADa|(12JFHHz=b42)%CTSUsJGm$e~9
zuNFJaVaim>C0y`j?Ug9U<c+3#@kSd!ezRQhdaas^7?*{#c!F)v9=Q36)RfXp&#c&P
z8Y31o>P40lPiS1O(;hF20tDZkaNCZkg#-s9wRA^r)gmo(XnbR>Y$Ygqz;$84vNi;)
zE3IL^v{=Q$%}KNv5s-aJNE<;;fObSB<^P<K@b*Hx>>@s$7(zWyY%PRRZ{?&E8j(cV
zw3g}LAyKDlgHBY2ptWZ!B!1#oT*Eb5T~<4vZJ&@n(FsqJqz(fXooSF-sA-&|xPpFq
zJ+-)mzvFjHb(#E;^i$R;*5&#44Mh=po{6v~%BWji?QIdX_@<S{VxU<!OJzyPB9!<x
zYCF7&kV1}kH}&8b6+4LDL1O)6u`NIEcZuZ<;xY5LRhqWWDy!DH+UykRV>Z7;tTf_O
zfIGIz8eDeXD(O}tFHHq%@@p_6d$-}Er+8eySBA^)c?!|&LP@?uBSiPPIi$t&Ey`KT
z8_F~7d8mrI!<n2MlSjhuV#!M+@BZzS<R?xJx%7uii`>0B^>9mJt294*SCM$VIu7(I
z*r~C82%%CiE8q6M8L5eoQRhczK|+Fs{eha%&lnq9e7@UII>xH)<uI{$6HJbj@H9@|
zcn8xMTQ022?`3quZsn&W4-H3Zv_N|FjSkz7w8+!%o({f}<MqF|0CGtS3x{dRr}_bg
zT<=F28?u%U+TiM>>{eyWBpHX~ppq7}rc+1~pl|JH@5)7>RieNZM|P9L-ws?bk3X@}
zd_qK6q{<Hh8x^4mu)j0^O<j8<>1{ZGrWuvm)ey6p;_ce$@=lgM5z0qHEi4$KYNe@`
z!$VgEe_?7?n;`s?sI+Gfg3)wS*;wt{jhjNBh}PYEYGHj7ovx#V0{_A7r1Q&1UG<ap
zj1TMZL*-hwv0!X+HVnY})AyCjLZjIsH39nK!=c*yp}E3qE!zq)Hds!qCzWz2wgiKJ
zW=G%H5_QeZ1_I(F73Pz_Z}VPs39bijvy)v9x3?S~TT|_`TiPW&$ov#<bCrsF-><T|
zxzxL`P?Y6W8b%zh-teWzjLb2=tMgsEGspEyxtWcduhC-T5>|W3X>6u(3CVlD1>$~5
z2)La!11i>+;pO-r{&5kQJG-MRcAz0sx;%z0RL45X>@8{zTJvU-q4PMr;yCx!O01kd
zg9UsGMQoyEZNpG;{n5anY8({+A0~@!roHZML1#`?yCxUDcrmUz%a>T4m@;Gb&T23H
zPcf!WDx$D@k9D!6kWZkx%6mY{`RE$lcFR1f^#Sl#n~mr{*%RE!>6(H-BRYzi&7`*w
zlPp0-o>s&_g90^btNDA=@^tVYm7jn1$SHO()5xezdipd&BpKYT&42a26rD6Ra3M<#
z335*_mOUXs=@|8)sXe>hoRod`SytSLxW!Vq^he`p(Lp0qgab?z0@EkWWl%>Y1`9-r
znm-f>7`knsg;cOgm|h0$oH@h`j;SH>m}oCa@L-Vj*t@XXZdc?y_1Zeq*XriIpDN5m
zqUCP1-Fz=9&q^aZ_YJ*~no`C#3JbaVmXfiUtzQsBKA<|F8ch*Fl2YY%4Y8Mpz(qo)
z1O0<F+NhC|BgWtK4R~;xuh+3MmDVRLoW#!7Q}Sr9(!?}0I81$MU@e&Pqg4~xqt#Zl
zMXfeBRh?t2(B!3_=2666A%?Z}y!&hbtW7mGJVBj#^PPV4n2#9`Eg+Pt^C48gc_BM2
z?2-M;n;yt|g<+7xC?i%y4I{Xd0=pr>r&?SJ7L~!GP1;A-2*;=_b2h4ZpfgE|-zYFr
ztQp;!u>*P@H3zYAaJ|VKQH5}Q@SUb>--Cp1bi>zo=`%CqmIp_n!+BNxwj)I~oqCFL
z1QYx`UaHO90aWl@Xl0Q5aOZmh2U5RcLaeRseobc{Np`P%vj!!>ZSA7FQLpcEzo`^F
zfZ=U(=}$?xz{oD@F5<4D<tMNfj1MMM5t)d39PG>}>q%V1>(S}y-}d0$3I>UG|LLO$
zznbT$G&$uph&R4+wV2Il@0S$?*HPt$HSCYuZ*H<B>!>|R_04L*4lnO;K6E8%rJbHT
z*oQyN{yd@-PpuJHGj6ngqh13Wtj<cSNkVizTqxYL-&^?!|CZ4RpkJ{>dz#NLb_C_e
zy`YvdW{2W}MTxE&y&TcKOTn$kG3ie~92%~^>RUNIE<fB|zzOy<t}uqTl!R_Ni7y$4
zHn7P{UC6m{t<X}rQhRFouVuY==?6K=N4}VyJqx``L^EcxV!@k`Gh16c=OOWGn4LX|
zz0TX+Y=2oQ;F2je_Ta~JUm=xl9{Yp{o{|2DRbqq%{E5k9jNDpe)i#cOmUbhi^f;EL
zD44`R6;7wDVe)I@`JKVO@plHLse8ffN4Va$z9jfN)(VD#fn5)it7rN8iK&;IqgJWQ
zzntJg{;-4_GdDZ(m;*1i0QBoQqTdOm8iqExVY;uUc^_<Or?gIV)s#+Oo(YNmj*eKe
zCtUg%uhg#jep9#HmS(OXoi~LYlO7aH?*9~=S-v-VB{%;)ZIh{|Ny=2%fL(acBMaFS
zmHSJILPiTmeDyQboM~y1UX1Q+(1t8ew-vN*K7&%kKYK|$UO=52(mU8Ii8$6gmm|H7
zA$k3S@o($VjLm=h4^``8O^Au?Zv^~6h48;b-}--(yvjbL(y3d2TBKbZl)HI?@|?kt
z@ASK$_^76OmYsR&)uH)gNTE7co9K{F`qf>sQbLgL8}FMSLGso3d;qYG#gUIR)+8G%
z4n4Q@vC&%V#M5lrJN>_gPJ&k5EBL3#zO)f9<KONF1+4>ElyIMGJ3P}THvBZ$eol&~
zEr~Ajoi@y{KRU-%Uh`(^vzAj2Klbjo{;099a}1b(U{O8uraG}%eS7~J&a>gxP}a*h
za{gG&XQCA&;%#!4WaH?zhFzg9k)y*2-M#<>@AHY#y{MK=-@e;wp9)**$;ZUzBG88i
ze7P+d^(>n(`;`fSJ;<^@vafqJ`k+qNv!YPGItS5?qL!|M%H0T=%#DMrG!-d6bvVFX
zJx4NKw<!-Vuz~m2B<b%597JmoAQye5N?o2-T`SSCl{}VX4^NPt*v6CFG!f6*z*L+(
zEjP9~*k#(bT4~G01=jxaHkM<khQRdt;4%7{6S))3Go8%tt!JG)Uu2>>JJ7CA{&P38
z!YuPq`=-{`F@yKCRw0A3qSlTj3UH!B4enQmFhY1b-m4j(F)0Fw0DZAGE@d^6M;xPV
zxrAri{MECB!!3)Wq<-^UR^u5Av0l?-(Ec+^_G8*MT<h*K2V2gCQ(yh$6T1Zm+B#{6
zn#$)e{3G=klf>xWc|Uy?hwM-w(Uulb<+a#si}TIN+UDtzbGd08#nKaAT`wQe*0tcy
zLp=|!UD^PPgsZTyQYn0X^oG(T(=xG_ZQ}I_9ov1rm0=XnMiT|AC%633Pwy%&f9{Vq
z-xuB~9Xt9p$x*_&65t=;+{Wt(TVC_2D~DFl-5#=ktinLwBUrkJke51i#Ly{)`Xw1v
z#u^rARO2o@<A|kMV>{^pdy=y?y6C+;KUQ0vyyM%Fd7}kFWQS|svQTuU_q#nNueWdR
z+kM`OyGGI=ZcejWDqcdN=s(!U%n6J6^+dxAHHup{@os(8tzjR&{)1n?uA>s+`SeR7
z)Z0EW9Wib@waVtj?<S)bZ)Sm)<nCij&tD6q7Iv*MjYHRN?gJ(3fA<*`S=Vy%F<Bj=
zT@&EM-mT^F-q${+#@RSK>a8z4?s8v?Y%0+3x)1BD@?J-gY1>59JyjWQ-CG7`&@()r
zUVrUy1AMar&0f;Hk|7+~+^;=3<)cXnG^?e=e=3Szi#)82%ZBwzzFn3DhapqRKFXJw
zYA<|+yiGplvzC)E91{mh_`Laz(9uJKs~!NL%3x|?*)fJ@NnkZ;AlWl6a(5KAzBG6v
z^u`2(QO-_t(h8Lqabwr0Sw1t-x&)2fkHi#8<5!9)xaSxtE9rIIJ}k^ZwKo^CR3*rt
zadm~Tdqr6{;si0WTS57(K93aREwlH|X9_mC2KJaH)tj3?o<#ZT=*omowKOR#rVcBn
zEw=r7?vjzn_+Wbj8T(!SMEl59fZ8rS+0KxIDXXzs0?+Yd>Pd7&7~^h{9oeT~l)%EZ
z@oYK4QTsu%xa1?XbHDKM6i_-Ae2KQkP1|d?T32YLM)9`i=^_-1tj8@fWU^SwUS6bD
z`E_*X3!C^mzA5VjDBX4bsgS0C6<6UUT@qvG-X;<ODOR+W?J?MSu5F#Gg#aZkmQxT~
z`Cv;?AZJ~ul?1?q(qe^aGnZ<KB_$?FdXw&O0TZYo(CzDV8c*yE`RavEra2-w@=$l$
zOg)1QFeDc%KaH*<hgXYU%u8>{sMgeY2l%sa>Rx+E5`c}y-5MvZ1sPMJnFNL1T4c3U
z$~;V!aLc7jDhl6GX__u9su$laT?E)d?sztF5OCQlzy)!=`AZCla`=G$&cl`DMwCqq
zuG@2Y?L%WCozfDt{SC;2nKBuv_#zd}DRA@XMm$i-=s=-P8x|16p6v<w<H8s!K03Gs
zId(WK7Kx*K68G+v4d!DYznkBC3?{<Im@Hm+#sBhH9ddjx8F)S7{DC!N%;TfazVRCG
z?5g~G2`-mY()(!RcKQQ;%qR1HN!a<NeE|Oe2A1W_6FLRyK#TI9Cv9YRiohpp6EI|U
z^dlC7+Qvzl)V^NI<`|AHIIHv(Py2MldxeT%KsY@4V(<C5)X_+}B;LN|EtK-kOz+d>
zgQAg)E2YFeujP&qRspszK5Ygi9_Id<;TSC*CM1`6#+sA{D?_VC5_+-;<dBIc`!o*M
z!D^z~aL2%8s_SQUbJora>snvN#)(A{yaiDP)yLd8uS3e#n<}>W!LJx=m5su0lIhLD
zuz<W6Z_kC<{0a{<6Ffi#g5;b9UlV2Gr$eTdlGB+@)cM1;>lpoz@`{4C+th2d{7H9z
zI}-xngaa)5!FpD+D>Q?haLL4?df;~nijs!kC_Kk?G08d#-`py8Mh=1IwjGOAX-iJo
z<y7FXiuze-GD5o^*2IdtjPb_oQoRlP2Juv|+~qySuSUvpN0o@uIP=Jw;R{%Hjk>`K
z&h8ema-4b%&bW7io=0(_7+Pkcno+IjG+{#kfY(SV3J*HsXFGMS>kJp#P&54L7b`1-
zl%fa#`=fd8%Pqgg82U(&kn_r@JCDAWCTI@?Bk3iMBf+uxbGET;yR~e({&&@yo}^rT
zx+f;usJha?57**q&1Vs_Uac$5Y#8j++GSzyBLp(2RHpS=aRAhHEWJDP(AIIOMf?hh
z@N(VC5dT76R#mt+gzMJ%zC7M)L#Op&bf8^a=NYB$ajua-p)Hl$TND#c2n<yYR)1V?
zkwrGPOZPmhc6Im5Yh#($d7ns0Y&0b+dL;8|H#cjebH(%U(rlrB$(J&IKX)d<U9sO<
zKIK0Ad_U&7G}|^ca!<%WWq95i9$lA9=9YXg=ulTTkUU2+h}&)gE!6C?Y`V0j(^w(f
z%r@RsoZ@y|gRQn`fsO36r822DG3K%(^%b|J4)05WLi+byX|`9z@;f_9YEY|Tk`^LC
zQ;I^~Kgf^r3|Ng{CR$l_M`>#$AC_`1(u^+{4!|Ob+pIiTV!*@G<7k(2Y_EMgyumdL
zit#uO)TwfsE1DAhr|@K+x^|KM<$_<O@2ZZO_7nS`_w(guZFK|SHeFs8u~F{4G|%8T
zHLj&9$!4K=HYw(wuqu`CD4CaV<mMzfZKj@B))CH*+Pkg)24lLv?oOL%NzU=QZ=rH3
zGV(-d^QhkS(cEpK>3rg=iSnw8iIG+jS!iW2*Fj{MCnANKm7H`_S<*2W*&s1|q=Ix7
z1KKaU6O=8=;Fg?a8HM?*%I(y+EF=HC3U2oy?UQRMtr6<UBwDIr4zKED-)G-3llhfT
zrhnwx9IAbgXlkHPfnc_W5;~dxX0{96Uz)&u4B0`m(d)p;tMct)w2ZvT9ePU3ADPps
z^iUH_bkKm*{}D=!G!hh5)n<`kAnII_)c|d5h71AzywUtDvD|YKb|w|4+D;CGOPhe3
z7oxoLH;zvCrtV$XkP^%Lu?^=_)ARCF_>=o&I$AryZEBf|(<v#lDQPML2;Ifn$CHco
zk-q;AR0a6C5WQAwadpGOkcg^X!;5e*zz3gqMfTf5C#XG?WMn{LWJquxE`=HH@|F&^
zgWL-<curI`3shYzGZV)3Wqzovxn?Wvhi}Cby1RbGPB%h)z-s5Q7BD$a?V)MSuAHV)
zg*6>@@uo^hwr1ECHUEjM$MysL;C`~@2u|htOsZArXO`L>!lo)2g4|iJTfESN9i6<y
zx0X?c98-*WP+m3Wq%s<E?qn%Sk?d{L>AjevWdYs(cvXS#R(1!TsLMnG?#E`}O7Piy
z;J-e+&|T}?DvQO?`|rU#4~jhmikh*$0uT~aP$wCYov>#3c**!+`D{}o31m52D>1($
zRX4;#V3Z?kp`5?p=KEHM_0y9pgeL#n#&?Hd!^;i&BFtPOyL<NoLk&JUZ@U~0t0t<q
zqa`H^DwcV~zf^x@G@fQks?WW!4``ZzKAI8t-uWrVUwPJVYs7u=lCRF}wFb(lEr&Um
zz|JW3NMh+o!qbBClAunJ)$Zg+7?Ez;7qLtI5Oge;6ix{X3ZL`c+MS59T!u{cJe4LD
z19yg%gBH1N$Wp6ftQ9r=QmmTBFZ+DG$E0gK1ukB;G6SdVoJ-4xtHib@&$q3up!m-Y
zA0J|2;jn0zs~|D=aECG}=ccuIp|x;VUS765K)8fIzhrMqa50?O{oVl_t_z4kvSrVU
zC0|F1nj78jTsT%*exkNKj6S>0bY?>BsK1LNOOoqBL4v-DI2?}Jtqs2?m<=f`eQN9o
zc>Gq|$N+TSRiZ5kV^DqHczN~dYv7hpV%bb&a;vlIl)sA!i}$)ZdS*hyO`VnoYUBHF
zP;MXHJ|+{xBx)y3{`ffQ@cP9ygN7?*klps$w`T0im}RDN-1;&7m}yBmm&SvaX2lm%
zvJWs;KH9!6*_cWViKD*UGfRO@4H+%tG9PChz_=Ie-gPv;7lsP7Q0g@G(~|o~uKrvd
z&hLgStv!AbBKg5^5nUE?AEX>o4#;~0gU|NS<GpKgcD^ZfwO)OGuU*^*dDH80FC2El
znyD8_Vgo9-u-H1rJgOM%Mf>B4Hm{dR6^vc`bO;{o4vyx3N7CeCu=?I#tzIxwYwM)2
z>N?F?O^%L4xfx<RTV2|!f+2=#voy&oMN$?_*Y<*1el(ahrRrLSVtLSMBwo5Df824!
zexBpUn3;Y^dH#S1kyWJPUK`jP{4iTs+X}{;Gj|D`y;%)uc(@>N11Tvj9l9dE0hhVI
zO<fR8a*~qZ>#l1kXRE=-W7p8o=8JDjuj>1K8ASY*Rf^1K0C3uKqIQm(GdPm9ijHFl
z;~{_yjLbKj7lBW@InWPlJr()L^mKhVZDm`o<4FKM28u&T-Al{!9woO93D@sIN|fW9
z_HybwfcCZ3#@LdGt8Hnw#;hE){es%%h|#r`(dl}p)=KO^_>4tDPbd(6E0^FDu*e+G
zg$?L!hAS4s(jR;ipgz)0Z!IIuyoLxC+f%$<lqT0at6}N=x7GUK&g^aoD`4IDd{5HD
zl%ywUl1(3{cFoLSXQ5G~;o3ny{C(?tt@FMi-nqh=*f{}3Ac4(_z{!aJhzeADNB=v`
z&{v0z2x!Kw-0wrzPT+B%M*j1$?;lIiNhdok?jgRkIV;7pUn06%k9c1LO6d%Qna!7q
zTAFAAs}~o8AK#{VnPTlzQ>W<7ME&(HJ}<TVRvuPGumdWBLHL+WwQ)x)>=@LYH>$IF
zh0Ci@NTY+rBXL<a-h@cpTv6AD7I?c|JfFDRqnKiyx`XvQ%#_hxUT$XIMzhM5Hi^3T
z1(-ne4ZH%!>5m)2S*3y*+@mQ>8E$_jf9ma3pFTyS#yNM#xs^3{@#<V?2;!Vp<W5o(
zaa$3b3<q9SdSEMV(}B)^q(Pq3pnBbFs*#(GtUvlG`z&}Z^?w8OTDV^v9SCT1fH|EX
zof+O4rGyNz8UZyr+~V>-1JWH>=y^zvcW&@PTI%!!LVN)zx`bM5E|B(dGn+!5z30Vh
z^C-k!?4Q-^vJ*>lcyQ4QiY`IA(Uifw5UyF8a|iK(9)|wh914jnIr5r6=}$`F#-c?Q
zF&s^u6V07bCY9wHfZqr9BLGxZ2&3E3nAXhiYE|KR$Mi<A&0e8q6HbK{m+@8^LA10P
zpUyd4vVLmz&k3XJy?*d1C#R!5mYDfj9j%_%{v<0Q)V-)p0`>}i2>OWSC!JIFiKStS
z7??IYzhq$gVz#rCu};R0xqdyOdp+evwJU8C(IVmwu8dh|(8jC7QS%7KZDbbhrEzY%
zr7|-~ai+s?`HjE}cBPnnpZMjDQI@Stxqm-o2CW&_-r2X(5|;@8SQ~vOuQRB%Gl~kR
z@2BQ<f0L4a$2by};8@fWFaX`tZi5398`WDDKc~ZgZ@xZo2__q&JFY?uUxsIBCL=r?
zW;OZ_L#8c>K7Q1Q^cjZzumK<jZHV!6A@>s|S|O0fzB-3KXvYq)+yj6Of=+b=e1Weh
z<`=&87&tjt4`_dfkZ*RxvTj@eU{ouS#s`nHw~19EE%-1crj@Q1-qS0K)d{ZC`q6~A
zRZFFH0^7_-Q+KM4@SW^z8tM%?4nt6}6qh%k3uB!a=CoDhAsr_$r?FYZhsX!&^y>gP
zZ`Xz&^_$Q~Dj*7x;K$`y4x>?Y`r?~Ows`7lG!tg9>a^O+4m^wz=%}c%Fal;yg?l_0
zGNeZ>fe3|TeC5*3In<w376K-mpjTy>Pm4W>R3BOlmC!-?F{Xu03MDl}fQ=5NsV9Mh
zhzV$qClA+Vz|~Oeb;needq7D5(b0pVye0-T1Vh7`?Bf6QJ*OfNPPi9j3Xj&{LPh6K
zKGuC7YUbT+j{r@MhJMx`1_+kn@PzoI%2H^bjegm9Jzg==MAyK3(}^3l9H$~K)hDKe
zN1dep;_C)EIf<A<IzE}T08(Tn76c{EXZbQq%=Hep5CLEe69Pi#in(8jh#Y|?qe)CA
zqulPhNor8rk?$@rqb3Ds5s*Ux0GFm{i+5z<RDeIO-2?bXhPRx6r2O9(a-)(jpM4~#
zh-kwcin^qlht^a?m$g6&)Qj~saU7q2!21xR4U!!LIlk3V$u;WZ2`iV_u71m;9L$&-
zRhY7r(DWA%ju=9rwws6&M;%A;a8KLBSky%l%Ut%(%2ZlC4kE_b(p<LJQB(MJx=(ZJ
z+Io7~`fOi6$DnsbyG*F~qXXU(G`%auSb(gv4jY+d^kd{sj3XDNi`r5RDWAx^bX=0G
zHBW3_Nqxcb9Lq3%6oW3z;N#^~I!J!AZT&#(_LH%;@C4S{lu6ln!f%OD=Y;t)qcZ>d
zP9ocQlX*?Ywd9%HjVr3S;9SgMs9OUOYyjY=Ki&k5Nn>GF%1<O(IQ}-9=BE?`F*7cm
z*-d|+T8$Grin{)?y$|S|m?01!@9Z56UYF2JuVpFdSRW2%nd!Q_J0W^aj8SR*o9p58
zX=wW3(<flm43-*(oGE_+He+2{Z2jDXaB=!8UovDR$iY*jZ`wo#oMDL@Y!Nrxz$lr}
zSlz#&Feu1tzp}LL92e80A+RIi6`tqi5rxl_%S@fMua92s^2b!y$_x<z7*!0sw#=Eo
zHpjt>R#~lI$`3K>>@T#H;Qn4Zrs>+xr$=@uKMwttz`1r`9m2)RO4>c^o6QE4&%FF3
z&h0kC@~p%c)jW3iarzm1iR!k6D!+RijSXQ-azUaobo_Xkw{c4q01$9sxv*fk42ofz
z9XNC<ISzSFkt*pP;-x}d$@QomhtLO5DGK5|YLSOo4Qki<R!Rq>Kg07+OIz&cw790k
zzSf2f-J^nTtd65v_}ESA3vOqnpZk9;G;8mA>CiK=(v#RAB>B$^6{t&>+XgchQAvkJ
z+<lHK*=NG9?#aj*crl_`n5Mh+<pG}Hqzys=#?iMihsQ`wP{my}l4lJ^K7K^Zw;#st
z!!5BVJ$2@sF6xYXklySwm5(^&#25d1iqLi=LWU;7<?XQ{_ebOGIbwudTo{atMoAS*
zl0o7hdyKlOH(9v<mcfv6rtO>AdMxCk@tS=30%E$jjipTTxJw{XANV5`QLH1#IicX_
zl+nLMbL!H0%jUg&lluM;Ch}k|XeJj*^)L=PlCL;(C>s5uQkO@E?^2m3Gn)O2KwSj2
zYr3i}N2H&>qkM~k{k8>?X>lxJJCsim>Y2Tm`2<#Rf&HH!s0~lGtxwT9_;Q=W0ozvg
zFDyELqU#Sdr3qZox)|jw2?$OMpa&@Dd#^r4YahOs6t4FOzTB%qTCLiA+ngBR^`UnC
zRUS1B1^}S_7)lb4NSdzB4`t|;$&01UCz{20@rsim!_G2VktN&041<r5<-56A4F)T1
z*3nEKN$_V)UNpnUh-7^<k^dY&QxnTcb`~LY7U7}yIK34T2^QAS@H$|0#+-wcr|J@s
zUuD@^nazz~_TwA@zVL=`vtbGH8oh1$j1QAq4z%9SNG0}u*P}J`nAll$!+DP}Yx8Ac
zokZJGOuAL`>`JXsbosIGDW+&ryf!31{fH{6VfZPH@<F1N0rG*aPxY2F9u<$NONxUG
zz#7^z`eG9LdGu#O?YIHm)%*je=1Z$dRU~_offmPOOA8Y%4RJa6=Q+le*jd8YPP>o8
zvp+bv4zavx$O3(SW(IFW-!^MvFDWWoW{dG)q<`L1t248}Z399MZq>q=A=eAS&rPH3
z7(>v2pw;8#`bY>zE6B*Njmhm2nQs1R`w``GbGWTp990J0VP}0tDAd?_F;^v2y5U=^
z#_hQ%3C6(npWaI?HUzd_l#f1&LOfE$N=~Xu(EN70$=hbkaR}`@@=H2DbNQl0cIzCR
znER91x<^tm%$Y{@A1vWjWE0*2B4DD>?Q?~OJs;V`E^knw=*V2Kgu#QP=VpqkKk8y=
zMVxZ17r0*or?Ft=V_ZTB(KKkx2;hBeS!x;^R1cXD+M|6auJSwYWtj8DqaKM0_bpM=
zq<Ca$T>SKp_H9wbWA_7n8!X+H6sXezVpUg1#ma=~;u-QCL#|6kS3YdPm<SkiwqBr&
zpr3&7IXpClJ>$-TptGp~-#%?id`<ZJ3D6a-Nfnf1&){yi-ET$~Y2ldj-p8-u{UJ$3
zEqqyYLIVVvMMhMDM-oO?y#L**)9<0t-<ll40PI<#<h?UYfBAD%v1f@fFfIF^PlxY)
zjNMf$^}hOgiu>#JSMNcerullB31h`aClszR$Pe|+=~;*sstC_zm~_sH??GHdyJ=mo
zQ@!^sI)FliQ=ghT$^VNBkPYSj$op!^C`P*7tMwxMb*lI`bWd!KD~Sk&FW(X3!0s2`
zWVSP#+)A6^mWh%qjdWDs-$C#p<iTpB#8D4lp#M0W#S@g$K#atkVb6)S0VH`ca32XG
z&brh9oj3&oiqLVLKdj+f*I_2!UtDX{vfI<fzI=fa$80^IGBO_R2MbZ2x+G*KV^Z8n
z1RB2sc)0w4!$hZZSi(4PBKzpx+nkJ)>W}Z;FUhRS4Nqt<pqK<zJMdew#h+6iBp}O6
z<+}ezt0^^2_`FdBF-MEJu=yMw!kv`;7Se-w&sjalQ6v2McD2YYEzkf9u3bAnBeW^N
zodAIU(IK4~W*^Zd=_@9*nkYU+mI^Pamy9qL93aGrW#fc<iwDDxJw}^Q{o#}#)}W-g
zsMn5a+TpvczWJCHr})Qc2Z=_Es^QRn-c7>@r=6oq`>~3JQy7`00Ld*0jbLK-3(An9
z3I4@O>U^mX@HJ;J_I^CC`M~mNm7b--ugY+N@XY=|0KmuQyY0f}G6vr7hdUEgt4rgR
z_>lusF{tg|r&nvD*UK}_Z!9VE+r*_;XOOE#>TRUWAl#Sa6T0iMFl(+Cg}h|fp@SC!
zDH_g$*nEbS!(ouU`T(DwEq9q5!2qF(@&^Dq*SMfP7ytY^nMp|xl6Ajgvzj_Nh!$N%
zCA7QuyY>u#vMzwC#BFe94i@0zrZGTwx3m(~X)X((bhZaCH_iY)%#F&~ZxXMW`SE|*
zK4e4Hu^jC;vz8ESYJ8XEB5mp#V=G~K*}JL5dXM&N<hXlf^aD5RMX_0xwzK@{Udw54
zq=#`06W3WpbPwWB6@#Vv&!uz2uZIV!ej|u^L=rd&S-BU*;w$p^qZa$B>zc<s)x|?}
zX|`>In^1f23E0l>lZWSbQJX2#w>1uEo%k@rXmh+mG}SixX9Wjiz$>br%4)Z?KZ_=(
zvb)QwFu!W{#c!Sgye?}y(c`Bkjot4<9zEP^Y{Zx7zeUkjq06jfw@8OORAboKAVFjh
z@ZWW3t}+67bLm$mKjyvvXl0EW<>OR|`UaF-?sAl*1UpN-M?j*E#IjSmn(u)0Jcp3i
z>~)U=*=N_pevQCoIAOCnz08O)s_(g9NvTAY*=7IMQe@q1AXnZ*x!$i_xTp9Cr*h8u
zo6jUt!kfy(u%8w}YW?+3qy7DKQD|fxs#H^^p>zC)>3P<OtR5#0S63*E#S3bHhv32M
z;YVWvCG8<QH}&JIh^%CR1vndy&(^kFb`Ka{<>5~Z?K6xq*5(YAIRKxd6Y`Jj3>E5d
z<TE)AEj=vs@OuQP=GUlito&q%z8LZ<xl1x4%W#hdf#m%U#H2oVjHJ+lxp-O^n#49O
z*GkU0inbgO3PC$`KTZSszEh9g7nr(Y4B%aZ{b{*SYms9qXu9O5i20>R*doGW`Bw!)
zdZpg+uf<pLKui#H#5<W^G%@zQoKy(Ph&ZUkCGP%%%6hO5!AmMvvTy^7pE)M-Q{lZ|
z!<rn05f;h#D^?VlrBr57;A{vl$IQiSrl0hD|Jb&jY^IyQtXkX`sSmRQ3!TvEz+^i_
zc4X$`LX5-`<3@f}WtdC(0WPIY6<bcZFP+OPh=%dR4k(g13IL&96gK%ARh3;{WFy|L
z7c^RQZ#P{+`UIq~9Zdq&1sucs)xpL8xE&&YVe^L%`STt?=Q{mr?||TP*>lyh%H84N
zyxh5WO6>FrgcVBs_uD6wvDG@;2l=nqG2OuXlp9D4*A~_bY%fE1)Yco-p%07i!T?<=
z(Zf!(@SbbeSVx=(M+bo+O@Xin4Sb<Dh<8gYES~iqF)~_sO9=96!6&OQ(bo2Pkyn@D
zCXO<>LKTU&RzGr5D<u^TQIdVl1dK9^w0;wg&i0z%9dT0MLwc!klEsBQN|1T>ybVrU
zGcMWcPbV2{9=7+z5A}u#@t~~n?oTHmt$dv7`|}!W-_1%*ojW$a!TV%@LS|e=u;&_h
zTa(xQuy?!{t9n=+RU<nCs=9b>OJ!fJid;_g3i<uE@JElt>`|y<zt%BQxI=GP9^n;J
zn;8vcYoOS6QRfN3VsK?bMA`6FE0=W1z{?#TzKUYKD}P>A<`65`*}FrQY{Fd1sC0>U
z#UWSm0#6#zta<IJiamFxIELEWVGKP$D}Vo>B8;;tq7aN3Mi0Xb<4<C<`9UW<+rFUm
zmNGrKVS;F!!#j_G!T;vR8Q6N$Yw<I-1bEt56N5<23&9Bg$cqOF8>xF?`q@xsEXzfk
zD&dW=#P8Y=V)Z@j0r;FV4-4D^4QCa)9CK~lecp{md+ZuJQuGm>=&t@~@HBLK_e@4Q
z9Wum?C^|7-^>juhXZ)nWcrtfqGTiOG^Xv@hi8zaG`-sl0F3wIi+ZyZ=ysUG~T#rul
z1o1{!rRU{p?24q)i_3Og7_48jfupYXM51@z)WYQBh@jA<P&wam@O>Bx4l=%x{aj12
z?fA#m6MrDH@nI&{y%l?9kmDz1i3HDim1;+e=U_}uY9>^5i<NfK7*S4`!3smdy}YUO
zZ_LYvrdraaP^CDMA8hXvip6|!DIMSTlvd><sk=`~Lj9M<@yr=wD6w9T`<M8n=&HvY
z_77>-pPC`;_g~ul&z*pYZ~vV6T-5RnSLAP@I4qH_zi$dIs4bXN@$7oRkva}|DS6??
z+z(F#a-(bSg#LcN&zE5dZtEb|)~wpjn_M^Q(@;^_t1RI^T6@TpK8T4+dpHSw!Sql_
zwqn&z+qwX~5a9i_<4Q-R*OZ-llf;a%u-OW62c$@()({p}Qj|6a!d|0fcp>+v=>CcQ
z4<qKoGgFAMgzZ3n;NpThGAAm?(<(Z<G`F_Y$Y4)gr3V0L&+~_*Ob(58tPYe3C!koA
zdB<<lb+;@ncG-3A_$LHXIN#LNnl1JNuMG}vos4x-O{a2dy$ghXUF7265QkH{6;V^W
zdQ%TV;{p=<wLH0`)LI)N%T<c0DEyE{_h%QUOb&Zg>u9Zf{;f9};l1C%GE3n=4<Y3E
z`xjZ}tw~xHUcgsoSpdLtdEo%<rmGzT%Xt>97nUBI#iXj~;N{mYcLri{$~O~PX&nJJ
z{K^A?E$TmAX0Z&lzC*)eCJtT5VW;Q&YQBoabrvAI?8P|+GXFgB%@xXG1vtFN`Wu~W
z@XgumgJ5%dYtnR4Gw<q`pue_AWV+<N??L;(K`8CBiQq5LQ9rlPkb#h??$zwBelQ7O
zX$f@VUcTR)3G&)?GW)#0U(gdsiOj>>n+*>IC?&Q~v`_Q6N)+q*`HQn+p)s|JQnJV3
zDdb$e5cx&B$t4GTF(J&m2;eVbtD9AN*3Xfih(}bsnnK*KiFHJ}!dPYew@InR(b+VR
zT3RZ8N~~iU0fpoujz|^U?W@8bPV!SG_tjt6&XSSQi5Ds{sVJ0uUMx9{Xm5jgE&lE>
zdE^`;vm$0aLkI|J%H#Zno~$gdlnrH?tWO$3s`HmVl_^n9Jo&L7xssmh3bnMbP+9-m
z6Y_`fVmyJ1gxHoV-H^_l5C2+0_{trT6E+eiKHb;<6bSlW83j@^U_yhr@LL$Z3kvGb
z!7satH0E1ia_ESvhe1|F6BZUym<hZ32LEr9e-(le>UtP?K9(P|;l864CKmSw+FhPg
z((sKP!V7gZ*2e=6xIHWyYOW%w52(nrH0oW3!jZ+rL7;T)x*NuFVNsRvkaUOt_|F^b
z9S>Gw4cHM<9;z&BQTsJ+s^nze?mXH$596sAKUQupfQB)?{PMK*6`|O8dEBD+A&L<9
z{h7G=zivhJ1wWrZ3!2~A`DU!_uQJ$Y0Sqx=;oRvl-Cer>e{bzH{nuxdw6PIM{;8PE
zL4<6*e{1M}?D{WvrimYQ<|@VW>B^IIv{3$*xmvqi3;o?#E-HGna8*Y;QQRU-N%AH`
z3D>OncxpxY*N%rB7jP3a-=8+`Yi;@5PRy^1%Gzlq)EV0U-pQCCdxXNa!@|OX<zy>e
z=qv&9ee7^i(qc^tvwK4^FCrj%JeRjRDJnY-8fiH)Og8t>DZSbBr-C$eqY4G<nh|%g
z!r?$nqyg$=T*{{#&{B09BLI+aeX*Tv<gJ4s8%wETvCiXi@t)5C17LR71b#SqzOsr=
zFkv~^j_}H32J};F-4IWT(r{j_5e)&xYhejE7)uDX&Tw#Yhn7DB`kx)GucPUpHtdMo
ztPumP(egf3%#gzz85khlJX%=Iwm*yho_RU-Z2hZQSCpfus3`Fqw)yeB8r$sfYRpFM
z%jU>9O$w)7zHwReKLdXMtio-Y!1Tq@CHJe%1+ubAZw9`HC@4Tk-q*wFV0Q41`&c?3
zXZ7l3?GZg$6`(zLMU~ZUB#@j5c@@6R-X+U*zH{J+Xa^cl-q9Ze#grO15{TbGfQgFl
z4AiheQ};Tk!rEXV^d@HB9<9Ye>LkV^u69hqgSI?QB9qkCcm#cLbJ<&-C2Uc6aqsMg
zugCxQ8I{X(<0{)F*<D>EYa`aY_ds;8sbAzcUF-20n=W0+E3f876q*^#F5Jxz>h}c}
z^b$O>&Sd#aI@{O!$`WO%0{Y>3fm)0D>$;ET)Z9iS3BOuXNMSXR5&(eAduT!^flC;H
z%%7C&Q#m!0M)c9I(LT3UNNkbElSbAb5|R^#sV$DoKTxWd=B@c&=JzeY!?R?yoo00f
zDg(cF1^;cHnQM|bn{0N&X(JX$D_$|N1E`;kBtDgZ;ksh2l~!8Xlh59B>*iRl9tla8
zOS}xz(yc3m#qIzS@A|Q43!?12xW$>Jq-rO#^{d!5O7(vg`{pJDA5YF0T7S^Wx3bx5
zH-favs&cV6xz(6&$?4?V4xKZHkFX4>5d7QD5vaJ?XuX=uHaDByJlWEkJh&*=yBkEF
zvQE(!ep$jyzunhs<!Nq0!&mNV)*;z+uBHlECP+?uoZu7e3H(^;I_|&W${Un5@$GTv
zI#kGSmq26oXFgPS6w1Vow-1BX$Z%rB{pUE4>rk$Dgv8W$Ci%zs4FEvc20~MNMTA8K
zJRplPG+|QTjqrL$!LSH4%<IZ`NLUpEgK7Q+;lc{L|GE?yM>tzgqFMsuWe#W)lk-Ko
zrG9H30V*yjo}SLLBf5aI-f9$Kv2n-CS1g&p$#ZG7PsFQD*|iW(D5GpN)Z63L$-~~>
zWBZ8Bt}!=Wdy}}GQNL1*6g4;(-&X2{FG*g40Vly;&%Bwi*t%!iwta`Z%?krj#Q0$?
zCF1`ETZR@0|8;LHId%ns8KZgC{077oZjUC}R&9rU-(M%&op)^->9G_5Qrt4Mxrib{
zR<K32@oFn;H~WYNZ^@4zCw|eMYnjq$K%|=+%O$=2C&97m26;&aGn4_pTx}#7)|*i}
z%+;}o`IYRXnDEx6_O8m3r%B1O^19m`HS0<|_gY7@&Gi{4*PN~81A?<#?!P^vm$#A2
z>e>GjG7I!UZ2#sv;~?1owLtja<Us#zRNVjt2Der<1m;U-_tu5O5lQNT!5v0{r-VzD
zYEyaf(&~?a66mTJcn-RE?e8irH|9u@v0N6_)R)v*%{XXOf5q7j^!;vjT)rry1?P^C
z<KxWEFV0Rb*4crdK?{>uKYi{FnG?uK#`5AH@Pamv6jISGK^_ZO6pN~CR{QG<uDy-2
z0SN}$Wo9-u3-cWvHr>C+nFG8$E01$u6U0s!uHGm(qEE#~a)e;u(CY*vLwFq!m*~$U
zTBxo*v`U2K*2Z!{u$Do-3=LtNQNx4hbDn2<`07-7QeP(=Sfdq%8cL*#FMRvFOzGF*
zyPFjRMAwGen3vml<E=5PdHkJ<P5ZN$afd0Zd;7WQ%a`RzC`ikTIss-=Q>ez{_u{g?
zT@cZo^b2r9M)hp44tG1>>Rs-dnV?vI8k0fk_FNV1z8i!>`gB$7o?=?P$K>9x;_+)=
zUlOls^MP{a8frdWFFyEj`$zk(a+13W!E3vs$3y{l!@nKTO~NrU{q@8PRjUUig>$}k
zpVMO}PB!a_Z9cXlO~I|+bk}mOYRc!{WOaMHm9~wyYs6ap=L=R?>fF*}BO8%7ee#C9
zOt`ham4(^LbWw1&R;bLg$*Fgu=64<ZSBF?!$288yYT+J4Sib(IO4rq3+DKP-dYwje
z7xS(5hpRD~qq#dL&vZ#Hw&l^;$%iG7LAmF|Ye7CLL0?-8#hv17A6Kv|xOHuv<fHe#
zo}U*oHsUL-rm~b{Q)OCqFnnZQVP_^09uYxbbw&LQ2D<ki++_V@9-Zri?!zyGElbP3
zm)2&`;f@-DZ0`;tF1qZO&+smMK&(mbUq9RTlyvtc@RsV2wk^p^8d$tUDU<W!!tn`)
zdnP7y;6b*O$-Cz)rTBQ}eO?jDcTz&@d!AGLfXUnPRY{4|qSpnwG0#SBlg_fcyqMc`
z4ks6Jt{>|y!Od&pP(IS!Y~G76C77W|X}n;ou%70btvTLd>NeX$NE}n0$xE$a8|XXY
zn@W#W^<n3IF;)abXSwunN*YahmA<VX^vmRMd86EzoR2}kNPo@yGmGiU)WUK`h;>}i
z!=lmC<S>=v%3i`lfF~~rou3I8WV!TDv#a+Ht|q+a>?t_8!mWum>6oI|JN($o8z<6H
zxeT2nmAAADG)hOfdvvngJ<(PDf3fz~QEhc^w`eFWv_*?MZ7FWWU5dL)@lxE~3D9B%
z3KS?%+}+&?h2k#32`(W>(GY^1yzh5@=b!K1GtL?Jj*&64_a0emXYaLk@;vjIYtF$(
zZ*i4jN{T{r)=sJtli{3z1aZUZd1v=e911y=M{{0~+cL306A?DyV5h-@i7FFej;`bp
zH@kf~UzLyD-apM^=F#D+f?_Tju)V5Cs&7A@0CqaXnrh8fNcfxMuB&cUB~Ti9!-^E`
zW3wKbt}}h(bRzr?_BK{4Hv5bizgj3ogy74RSH~ec-Px4TRp;TpuZXvMyXn{0{RA{h
zzul>(JQZ=q+$5842Jqg|(&b}k-Z@^~JbhlIHS2QoM_koY=A8A7#|j$29YS?$rtTxp
z7?6{v9J=+AL)zU=9ar^qeR^$psakd+0p={1>JLmD#g^bM(Rc8n6d~Q`54ENNChIQy
zDFiyGH4GqT31oTbQ4=1h?T-*z6j^FI;Ql;*HM!2&`O0o?7XbtwADN`XGlOpnN(+e}
zzimzT)Y0pH+tZ{6X`cK4`qd+gz9PIR(&3%vw`21A*=NPe<m7^7exK%Mud@SgFPp`d
zIV=t#Px#GA)$wuWk)bD5>yCTbRr2&c8lbSQMKAtvYrZlqwm}`qMd>mCgk>zbOtO(L
z)-@Fr#CUXU#!Li{<#dFt!b|qNuRNU&k5-)Kp)Ep1PV|Ir6)us?6{PU9D|^0O%c<Yw
zYlZ>0DqX))<LF}XAn&^aF09q~)v7vFAjIcIxuaHQSvxaUCcY|DBY6-tT)o%~9Fb(7
zyOcI8#l8iE(09?4zs??{0m=?W$}11S!4eN6^XI6Lk{w8r)!u6Vagsxvy)#hWnUjxN
zj*6Vlc`jh)IlMgrgD=CIe4~o?YR8WS({UA?1jq4LJ9Ki<E3#Kz(4_17ld8Tx%F)S0
z=;aToeBJkgRc^VAG>o$`y1Bc%`->ZO$2HK9%z7~Jfdx*M9KqoL<%0id@<Ly3T@m(e
z&ZvD<lnV+^D?}PGz^~3+oet;PM}My2b*C(!*AJ7~S)H=&t<BTK5ppngii*}XlvJtC
z%5_)JDx(2fcV?w8N{C~ul!hRu+{&D3H@7Ms1J}m_pz#+b^Z8N#<h?~}f9VwcvRGle
zQQ`N?ye&;WZgv7=kAX4|xSNS_*lx!GuerDGzMhzJ#8L=&{qj>b_14%uxp0(|!<eov
zFUc=YgqKvl^GTP6kf$ITyCOsX>9ffsLFEPi+22nKXdTt}_n;5dD~NXgt871U?iyVb
zJe|0a<~&|vJnCD!*pi3(yjMfQ{!3g8ROu&8-Y`t*>Quh(|1kvJ!TA(67>Ng;1-3X+
zR(iQT(AbYbcBvPYZKT|vj~95*guzsV+IyheDOPw?`c#=3rwFLSEA02Qc$22LJ(gn-
zBX~_tmZn7DZg1!_{Xu3zp6xM45u3_jCjmrH5v#x?=c%m%x=DpeB!<hRsekGtGympt
z|CGHr%7THJ=T|i0T%{8UrSHbbph^TfAXl|365G)ri_zwl&<bwPfUz*`Y13cNjV1Q1
zp|rM&Cy7FUPoSq`X}$_`{=ds81wy^CXF7yzwz8ii&^s=VzX+{pbuMILy=V&xGKkq(
z8^x9VdA?@4AqtaIaQ!$`g^q4d1Of1$99_OZ@^q4zwR+Ln%1d1J2qnQueoho&W(7hl
z2fATs9T9q6Ew;a-N`o&9DN^0;KPqIMb%a(Qk(CDc?52+@QUP3}_EX2(OXnO0cc(gR
z^xEkivl=ekAWM>WuG>f2ci9;=>m5MkkV=LREX9oNv`K=4&UO5ba=;?qxPy?Q)uVIT
z<T1A8T<w*C&%$>D(qqB<Q%av|sx+;~{+TFPuRB^ulqkQ=(zanz{L^*uwsxzza7t)V
zCgls&q(2>+daQVArIelas>YEfMo7Ij;I%aY)>x!i(u0p_+2H)>!l}u}C4TtOjgZYb
zr^0j93fSPY8lzUaC5P$Fm=<*PF^94bBj9jf9Jy@lUz?SV;yXRZwLdm$J68OIGd$TW
zMhT;f6Kkma?L}Npr(<kVTL&Jx?hfP;Ynrw^win9}I2Y9j4+Ac)GM3xh@~7`kO}n(K
zZ0s`42=l^qou*-b)z?7`HWKSxR=PSDh>H%rM=tY_(O4`Y+Dzk>eu&1ykdmg(d{&o!
zW2B1+t*52oHeQC!N#L7j0EY9PM)K6T07t=qdq_VxYjf^qsl;Npxzmwb-f&4IhQHFe
zw^N7@ILto#Ductg!`(`L-Jcf#n6~RUQ*&KhWABPqV;C{jH5l~6ZyoO<bcgkXP_T>_
zn|07q{ga~E0Byvc{J*Dk`0PA9;BP(j4~$`5dbC|`_cOz1?mUw$J~@$N-`Q9;%O7i-
zO|xm7kg5=GPE%*E-AwZ@{FJr(dLM^kb;Vg^h2LyWi!$6TK09c*zDeVWj5vJCz8)m~
z5Khp&y*e5>V8|kn6)4R6PLOS9z;OM}C9Qs-J(|ky70X}L<7sUFnY*I0s^U$qZBu#>
z)<h1C4J(t?E3FncLL4y*^lZbf2yim?_li2^vNSdTJ`lzrCna4_{>dJ!AU)or!9zzM
z`)s)p*?bXD((+zwml-P3Xj}dO9gn=*&Yqb8?}-Ds$r@|prDItPg~69iPXUtTh(?zb
zPsC9}=d7$_Pk*Y{%I!SDTk!|~Y1j4CnIEM6r2tuKM%L(=-yKT5#nHL>+a%{^EbVkt
z0DBtb=J?#yWM16Q?{j~BmjE5N@(cGJM-jlF;RD}XS9?mj^EQpxs=~qe;9CGcbQ#)#
zK`rl7JGD1!&u171wYoYx=R*uP8K0-t$f)Yehs*mKUUj&%HwI`_%~a=TiGGn}B6^AN
zOz2GbFT9M--w^r|VgC<cR{8KS1O7T?XjtF{n)mY5X|ne@f>j||Zi4Ec5O#zO?n^tz
zm4?Ni`-#f^EI7y#Qdv{85H>t4x1EQr&SQvo##;hHbk0mXp?~h;_`o+$vLdqM<jmH)
zMl%jl0`C(C7UpI(i&4Pv0G+q#>YOPk6O%0UY&S+hu_8KxTb7x!T}=%C;51JS@EUdv
zl`Oyd5yY<>-dLY7yYZzOs$U(Z9HQFpv+u-LL&J{!RK|8=xkMT$8~p}MX#^|R<C!V8
zH{jQp7U0gE)tV84W+>aNFPw<?wlqgb=IVl0di2uGQ(fNG0RS=;(ao1$pS#K$M3#RY
z*y?gk>6eTygojK8qQ(D{)T7dQBBB#gD@Q*-$g<O|Fl<&*r%E*4J}6q_u9r2*)oHgK
zY26jD#EhPrl)|CApu^cp@{?(5ZmX!IcsIv>iL-^|-erN6+Qy9X_-&Tp=A43$4<;ii
z<~s92Y{Vo?(+EO3FPfPmzfPlyGsin7is4zB;rjT%h*9_ot;EdWns(c&TJ3@t=1n#Y
zxj9QVIyW>mMdOw;^b=9eEhr#)lxv&4<DzN0YHGZ~@qDR8%#<y8BW;?JshbSUEb)Ev
z<%c@qYf<y;yRG`KlP0OnWP*#`=`YonhO9oFGDM-J_R#|XKbx!d_LLJ~t5MxJ*o{r)
zWV)KnPR3Q8z-(egL1AsfhK$FQW7xnVP)yWsE>6E_6~MTSjfKc~y^;F9=N0iF#~Q4H
zV1ryx1WXtl{VmmuGn#Q@`swp{GvAs~8W@Xbp=_xnG}K$R0M>YXOx0T11%KgyDX$-|
z=OlUv`>BQXRzsT<FvV-8tD6SsF9=CcLi+~?WkGF6MW?eo<Bd;@E(8Fen<Wd*;*alG
zRI!PYvPJ}Xp3yy*y<kc%K2Zfn$EC}xRC&Z)HB3gt+8;69dG1PudBKSX!g1f{RokhW
z$hIUT70Nz!mLS#ytz~{@)>Tnk-InfferdALr%?$_9=o@ux~6&fwDzmb1-!+9%F2e!
zA5IWe6~jW;RxTnMw_w$Cb<!v3D1yk;A03i%8TtO`-UZ}R<zw^9{A$8MN$MpVqi(@!
zA>#jV0lWs$ycoyqw_7@*LQ!U3lx8*_SLZnL|AB|i()oFL^0o>r$V;&Rxz>6noTt<y
zQ$v6ghCuT?r82u17XA~}l;c&8W#H!wf8k!Kt1Ymn_iRp}>);wj=#i?fk`dnYd+v#x
zq7CL3%yQ|e79ZTjjg1?izC(jGZB+ex#avh95$LaTx8^GL>&^=9oxx2`dpldlFeeu+
zNWil)dq@{hef)6!Tnl~BdR(;AD8LYgg%+ZCOO-|FWfgMOeVRioIB4Zz{P~V_N?=HW
z5ucsTLRZUQRAG(}{GxEGF|nKiM{<^kE&)JDNIfV}X6hQ07d!rab6{VP<dXTdXu3S5
zU<W^wJ2;G8o;1;@hPzo5pwX^-0V*fR4#E7cQ`h!(ct51S;LdDu0y0&@Pn)};@Mgpx
z?65FBzeTw5(#j*cx4P@f&LRLF_NW(szg?+|Wm@9dwRcQ5^J8!)D5|y1<v4dUEu-bq
zCHGy6WwssrZ0CGlImJOz;h%RTDi-<q9$#(R1+oyw7LAItzC!Grk(CL0kcqcM<J(4l
zf-shOm)**8s_jl}l|V~uhq)m^i4+D3hGIjgCYM2G6$u(m{2tidjYqFDM;9W_>6-0!
zEcZLu9@pr{-`2GUEOkt9OLBvmWw!aQQ<NGCo8x~Sh(=pDb8hu?lnN%<@B|ePzPv+D
zzyCY7%q9UPc;&x8kk#>pHPUfyJ$PjvEkz<z=;b=zhwe28y-rjlaC=70zj@Rf6(Dmz
zf44R%r_O|9v?IV@HY9bpOd;XiS`U<`ZJORcDO{m2!&dO5nbAT?O~=3U*>9o_R-1Ah
zxOV1?`TpH;?svkmURTYM144<hiMukZ#!5$ZEqA#VY=U`0ITJ7leO_Z;&yb_E<Q>hT
z^X7@<a{zwyU+NM}r$dbhcD?Ean{DPCeLQCr2<x>Bf?fM-dsm-mbqB-@;}s>kaBA|J
zoKw1MVmKA6V3CU#*ko+bFX#o39vY3z(^>n_i25667@@~ek?YmW`L>2FaMy6=baM3C
z>`s8yB1Tp_j!lrFY&VVmvk4;Ap3m{R{gBtk=!B1uWA0$&+ZyiG&swFE+PY%J)E%oA
z)5k_FC#w)acX-@2>$O_rEZ}ud1DV&sR4#=qjAJ)?Rq{`rmRv%BJ5zb#a&qmb%?L&c
z!~UA-)Do;=-R6|Xyy)oRAfW9)sgqszXiL1;6pBautv-c8LX0oAeA?scAsb*klBQD@
z5l-@~2LJ$_{k_6!$9lruK5?<W(P<N1WgnC#3TBaukP`*a5niOXO?IZDgqQ24WP?_f
zNQFt-?u<&G=lwLQYCBo4-;q_e^%Js;Z7e!sGt}1J{H-`qPDHgo3JU-g@$&MGo~w4c
z!x1i}<zUsHTA<?h=LI1IleI+}J4w;2r%V===pn(vGjA^o%%+3iEiHXdX)9Ro8IHN8
zPJ{l1t`-USDLRN!{Mou&<vv^BwA&qj`dK^-l*sEm+b5^~yeH_MOmlgS!O!<<+50`v
zm0@EqEhLj9Sg4Fts94slKwRceF{@{6*1F^M5*=$-qJI3!-&O^039Ds`?V>fh@8~uv
z5(Ns`+TMRhf~37ckETqMwQ4xvOCq5b<)L-&6J=wm59ot~@6Ia@9ke7f=HKUuclyDP
zUuZ*Lybvk^#}QgtY5QN92;*cmpKNrW@zLb8YaVFg%rqW+!_yp&7ClMf=I3G1q{ZSm
z|F3FP!&k@lvBlOq5thZ)1K(2n+!BR&E66Eg{cDRVDUDFeV#5$LRT%`8IBr#1S0%m1
z=HMersXICNn`+=?=;O|<Qyen-aC3${cIw%&+<l2tDcTYH3v{*-C(iQ0MoMWIlDxKG
zv}EvEH>p@$jFDs2{d2PV^%7S6J3wQQ7ting1sALngB@-{LT++E?q&I*`wKTjS9DbT
zH?}K&;iY75e!ibF!0$F#&4MiHWV)Q(_j*Tx`qdnlPO>lcbWBH6LvQ-($mzTlk<Lr+
z#U)UJs2dA)rAdSjjjuHYk%%OL5fVLX#L7g4eXhFpt+=*z<B(AOCkq9+VcmVnw;ass
zB?o)&{_L53uqNClY%9mmWzJP~NUuLN4IX_YVjK)+_YT%D=*>x#Up_yrq#ZIzu5{}j
z3)kV{DYg)o*`=j7zTGe7rRFI(eH9@4v>-Wml1DRDUwz57<n`p&*qCo)RrVUkW*PWN
zK0%B-gEt@dK4R{YqhjB25Dkt8Gih-%tnN@x1sBuUc?+gL{mHUe9SvY*>-hXtyqTpN
zV97;2+t2u<(N_t@1dQ>&V9406r&Duo%dY$|qec9!%8qay7bnNr)H~r63@JW%he259
z;s{ssc(Sw3VjA+C*P-!Xp*d*l!X`?VG&i}zz~>Ok5P03%m@$EhGwc_@0bMS;aX%KR
zQnr7swnid-)_?FjYsFwv(Y=b1d7JQY<Vh{TKOnp^S#_fmX(ZJ;{GIHGHAu|ulEKZ@
zh3)C<c4sG(A~aaDm;zCQP#s(#?i3t+zikZoRJ7GetSl5~LBBqN&VSg$bh^1B4f=+*
zSov$eCh4cDO834_!wb@4ADH-qZQ&Ce2_;Zlj>#b+7Bi<v;T`mp!&#ihYIh&ulp=I@
znZ5CpE0q!m-2m65aNrug%)D)_{3}nZYIyaxx}ZRZO>=j9n=wtb<GP+tkNs3T|C_h2
z$v5CVe-^stWfM;7Td<<Py)Y(VCe^6DDXad`DxF9&{ngbSFugi0;f_}>4Jf{!9UMvH
zF##O=9FkPn8T=~E!qHv@J*3_Osb~0GM9(Z{!n|Km9ajyu=JRmniOU4U987mZ3*ZbM
z8Bz@J**sOA7L}cBmDm6~gPSLieUy`+@gLDieRz(bU&nI;CJ^jjM;z}+UzJu|Y|*X<
zQ|Dw-(IReDGgs*?TLOg?AV*ovhoPgF<j2@c-@lKcUSmhb7$N0*OG{ALrfvYO3{cgV
zwAH`Q%L{ZJ$I>s*vO5QL`Zar@w?6v#dBm~=Wfb}DPmsUYX;1#~?-8}}jGrk}J#wa^
zWJJk*N}w<*!Tb5zv`}UoPp?T(B|%)Z*bQ&8dHq{-{n!&h|6n0nRaTEe_Q{FQh2e6P
zWiqImOFuTNjc)xQqF&p}c_ovy(PQ-fX#%gv;catQeC%Cd6$^iK#ZzE*bv`Sw+hsRD
zY4UUTyUvcTmEg$^|Ks}+xa7V|3GE9kW7B<n<wAED{pp=rnO&(zPVb5AJ9@_cAnf3r
zch7!^%_rNSf>E7E|Kg|9*V(+V<E_{(LpAjzEeZzy<2|)gjo2purAeF1sSci!7Wj0z
zwJmgIxW@m0vDldLNxSzxR~HQj)iF?Zw9q{Atic+lN>kVTsM92-4BS;`Ph??VZmWC|
z<v3gXAmKumK8TsZ3jK;7Ke_Er<TpX83-+16y#%w8TtY}vnZKB3Re*g?TLPm~Nz5TG
zFtEdROIwPYvkkzu0TQ78-HFLz1t=(|wBWQadyVZtPLNdKv}6VG<z#;XkXi7!KHMp)
zxO;TJfBTAp_nf@NxiOX?M9@~RVfafMf*1&yccTvJar)2`!GBnsWvz1GX=$38;+BSO
zwzAqbn*ZqclOA61SMCtW@$t-S`p~Y5ztBA$OfAA;Iy3$g1CU~#o9<#1da?bOe)C4V
zNv&e(VukhES0!aTWG|U_%%ey1Qo>(`N4IIb^mmIj0@-M6p)u((cG)&?Ay-K&ZU`K_
zg<K&ysOmot|HP$Cau@t!Di$9!8Y#fBJMhK;Xu1?M_7!xeA8+3#sQYvzLJy*S7qGWh
zTxu`ie}Cx}GY|L5;@Cpn5=e0W4hhB65dKqspTIwr$z7`?_J%ic2iq5x=I(yMgE7_9
zHc`R1iLs$wsg_#8UM9%uw8JV!pVN^;sUnT~Q;|k!qf=<tf@ZmYu_@vFB$q~_LEKTw
zsp%fO<=bi#U=rbld*^!8*HqikYLN+5=aJc~v?eyY=@GlN=AyH5zVobR=fbOaN-5q9
z)%3M)<U#+a30wv6iEvW&ubBMvs=_=Qdnmuf_Fp~WB5Itw;_ei@5}%JZ!pSa2qMywl
z{Y3$}-#a)=Q`$W5pRThrXQms>@?WG}bGXoyk0msZiNwT8@HXBj)_$d|w)R~d11PoJ
zr;PHX4;v;Q&5YL3|64IMY_kknur?#pwSb}8;yGwcg8=9Ia6b(@VgEkIdQ0RV?-(At
zuI1`A{Tq0-K{X-ug}w6R$qHzVOK{-f9l*rmZ+D-C)p{o@>X~RXx<2*rgQQPXp{SBq
z<B#ce9+@=i*B=L2kqR*yWeQQ7%klLM4a$#Gr}42uqP6<2Fggd3$8D;29Ei*JpxJ9o
zA6%wvRaRhQ{`Rjq#Saf0FKK%m$G#*qn9pBl7m2n)eO?1wEAPLBX)fsdSEM{_x}!==
zarQoA-s=w!*8Ld|!-xD9TE(VWr*RgHw_d0UhGG0IH*}AH^C<H9o6DrK($b%|Y3mZL
z<xEsb$SXv5e*i(Je@pc@&%pf3s_}Tg2hlf?=D*$&{+2;Gz{BqwQlSKPbv~B)-~F8-
z2$9HMW4XCe0nM|hy3<g&V^^lNolVi5cC<Np#PI$3<(d4{G?;1Cn5|Et$bgmxbX#6k
zagS`K`-dCALNV|R;a)T0c}3x+GUWk1C?@8yDLWGM?UcSu=fG{gZkCQGZMTc7o(|HX
z9cS%J7ie%^ww~_OqPe-T`2>n^%ofe9aw*Bac;a_Va^rK$oB+Ho8usSL^$vQNWRv@T
z$#yC8ac{R>ZM-sr|J3UzOt9MMSqar!RNei+C*psS)D9-Y{zF$A4*l<JwA6gRJ{3gv
zUCh5V-YHJ0*&>N%>iz%DUmLmG(Ty<g?d^U0_HB@y6TVbw{;!OTmBmFS_gL&VVH#F?
zdu^LPe&Az=zmj?czIyfQ&6_u%b`sQWcz}&i;mFI$J$(0n9i|c9cZRZ~(<poI@*g^l
zRb0gQ*jSL97^=_SP2X_Tn-1#O@$vEa_;|3KE^7Zt8tPOlE02eUC@#QlO`qBNfB75+
zGu&O_{7W+k+xh*!_&F#}+rN~7H<$ar+y0LjI{&AI>HqJYi9VBnpLwjRS7H9k9+4uh
zh=}@7mZQl_q37y_nyy&DJE}-J-KbhC{3oLLEVR!UJ-D==y!q!E|L=)M|J%#jjgKg*
z5xALaDYcsh2E5Zw*==pqraJ`JmCl;4Ai3Eww_vkW<FJqI9RBavXWdbBr#MCIH3^@O
z`grmy?N?QYeBR!tf}bA}_L)&y=nKK2f|hy8z?gI|wnNWV8qH>NM20)w(YYSt?&dsU
z?T*TkVxf9{Xr?;c<#9>mlyNWiQDx^Oj)a7dJ(3C$9q=kSXJ?ulev8@{t_;v_-R92m
z_N>t!%=eBd!lSPz>HoD8|J9@Kd7gx^-q5+}J?UxJ1B+@`Tvk$-l`cR3-N1SSCiWUN
z3W?s(n)vQ)J8doN3w5JH`l*wS%9+6b)Jk;CKT^1Tl++MK2fPLnla>BGlAA7m-D#h4
za^g(WY+YU`Wl!(d=4A^f@8FbBCDLi}_I9-FRSu#K44lsWT|u+|1fa>)?B;Xf+Qdzy
zqu^GWxFv9T&R;Bf`!Js+g~^xUiJWJ}U@Az-j=cfZdLOL!A;H9w&+~Fvkk^~quRiDR
zx7=;LbTN4uqTB&nZ&-hbSI5l>g4lev5Z=8lLK+zJJ=5zC!tFfQc``52HSzfNY&#_P
zX#{_%Hr>TNav>F+4im3RF}3^SS+Rx}Rb7AGmOVYt{Zhl1zqEZ!w5_3p3lHFKS_zvC
zIBxj1EiWx6;H^D>k=Z@mur(r`OgveiTmr48PT+LLV7wNnl0yTyGQ+DSl3g34Qd@{I
z`jY=lW>8vhojT`CbtS77M0ioQ`CeT}JP21DJY#1#n;0;6T4Sqnq*_*8d|;~DSX))s
zpN~C+6sI{6DkJB`tZ8v3nV?c+sffe5#4o{3wvOOhH9E$4=cM_yZwY=M(BJ6Txfz%x
z$x?;XS63TCLgaa=2Tz|rZ@;*lk%3ieqgQ4!KC^OD`BRLm=Oui4Hw17ki^m;1URws&
ze~`xN&@(AH#!}u5K{PfsGz}&W5~vZhPc@|M)^6KT0a6jSjgNn;*)xyWC_4P{482dJ
zPdFhEZUTvyo#{O@;B<AWtx~x{&KhH+j-~fU3LhKf9~$xISPHPi)}}z<E&{KOp6?lw
zU3+V7;iAupVy<$Z`%3SF_WQ|HKO=DEO5x<@Q<4x>zfPC=AN=fD?37D<4ietSv8@Cg
zygbaqWmNdx&DquunX&GnzcbXHJ(FndSX6EEEe<<4Z)Mo?qVR%Ty>&coygu>1q7?SS
zHTB`C`=q?MQ+w|b(Bj?H=xDiA>9p=Q*f)Ej&iYap<9^szugWleI`alvB~pgydP}!s
z{gFeSvc(qs!|dEvgX+Q`h+IZJXz_wM$)IQt=}I<xL(kQ}{56CuB#XIb`!=$DiK#}B
z*hU_EWq<OeK_{xZ;_D)pAoEdY>!3#fe7AR1NdHgMF$JZDVhsl;b<_LT;piLPPbZG~
zykSMD#(i<X4!$?)@nfeFyPl3`6^X{nP2u;CEvMJ|=x~m%+eW8%zCM1(rJEHw--2fL
zUWWzg%XF9mffS3Am<(6hb-N#@W`}s0H7oS`6pYd^-j?nz^>s1C1B#ZWYV_CVQ__hj
zy=*@}K9fH!`gL;+gPLB!`jV6*RU}dscqy7s7RP=($-O)lzJ!50n?q`I;^Uzr9t&6M
zEY~KO54x-{NcIc#yHF)Tg9n?a-Y3<J?{)a_)b;Vy<@vOD4ZbROb(QW<@s;H4{Axos
z)$asjFY|T78yghuCHVVW_y|-}=i}_dR9|!>L|r1JZcp~Em?D^#ZktP$6ir>Ig?&$^
z177Hg-d>;aeg`!>U)Jiz2i?5<U16n}p}yFN#e<AD@_4tg8CmmI&0un@GFnNIl=p>M
z59X)OYLn^yN|wh^Q+*-!t-a<KF;BEn65hc2Alsa0gD1gYkL!!NS(WGF?^_m1(P_y5
z&sakrY&$WsO|5xTkp~0!on-X;zhkG^;<(Q)?T3=MD1IK}>%Xu40Gd&cj!654oGfH$
zVp~=>5D4g9<s%dYe~AJGT|wbXMhsE*b$dhA$)j+ZUtq1!&mdDVlApa?v~kYeM1wOp
z5jAT!pgJCbN?Ipb`t?P>4XZjG{yis!1O1fh1rJEHfwncrVy(?p;dFtp0RFe2f(BFo
zVfNdB+wvN~iW99E=<B#PXTFvpA}HuZb{u@5nNK9SRE{jf#d!)SjJ^md<GEddxxT>b
z)hbV0xT5Lso!%*Pux_r9Ybg7@Am#2!g^WF~8b;4m6^oqAoG(hK-<j?{ZqXJbE<vqB
zQOOjvxmY$W#`g&tEjw7><7M=BXJ-16SHTajC$Sf7s@JEVSx5zi_l@muQ>x1;l^UWi
z&>DBRj<0u=2$i4BoZbN$#;bj`i3}O1UC-Qf=p1{qR%*xqpWeDaqCb7B?^2Ipc?a98
zrk<>iiktlEbit@@+#2wK(qtG36nPS}KCQ5DAm$NfL7c7%^z)wW+!R}06!3BovxQ8E
zOw$jP6Un00Dnj)dt}D}dET9v1&gEgM9X|VIM6ESw8P}a-dF9^5-8Q3%^r#gfPA0NH
zke5Aqj0Cc%p>=GOb*MoR&Ac85`WylHVr_1mu|=v~os@q+k{5jNHkhxm{S+EhltY9w
zdxhcH=DRu87H&$RRrk#nW=F8WJ<9`%=W2|~Xh|jj{9uWzP7&SsbGjawXe}CWqc-v?
z%O4!Bcy@NC*h}H%#k_YBI`!EspQ-PVLFz5A&Q2qB8f*Tj<8C^4{F`|fke!!h?*S)l
ziZ<*3Rj#(}31@GR^S-v#GKrbo`x9=q!q?)`@nT>3S9TuC20)bDb#rdOSuXP<8+d+}
zu7`^px+D>%pmJ0&c!sSZ=cSVN=jP_-Crgt(^Otvbzmvvj=Wo~F`3LSAzEy^``SFne
zraiCfwV8ji{k9VK`>WNf+3u}&6^1HWUOkBHfG;8$BhyD!*%;C%OeYS*5LAIYU(xta
z_F@IFHQgMKi<Jvq`m&1}Bo|7ZekSA7(&pIdjArh+(}?-%iGKJ}YKXT)>gzn&t0`v0
zS7jpmJfE}1h1x){bTqf?6?Y;z6V4z>94f!Fov(IMK+DKVXTX5QOw~HZJ*Q|}EJp)O
zUmN(qr(q?j){FSz{|u66mtHoX9sd=iYVhrk?pCjTEai;mOS>M{KHJxnCI2--UZhz!
z+CAm6MiUW0l`*0QzqJU-%@gUy#-{VfqT)O`z-w04jPa2nOQBDM@$qNE5BCi^fhte1
zZo^ZGzqgMW-MY=^TcAwfam8>2pN8odxt&_U7~5f++T8e361jXZU(cL_Y3h*iIKM#a
zq{rTE7lJ1~Gy(fO&2n||+-EH<93O#)5M*oP>fJQfQviMD1NRKK5MXa@0*yli1R9Bn
zSN$X@{Y7Lth;O<e1QvzuN-nVP<2;EDnAT@_940^?bC@x<wrA->)6~{yUujk1%>-u7
zahL@K!_<yk$2W3anM>OdZ4QJ#tP5@20f~_nEA3Se-ICVEjue=>(UaErx;*<6beSUY
z0DO9Jywzsc>GgOmX>Y2R$Ktcqh3>jwEbhK%N>82us0P0Z^6_On%P*|fy9;8fR!RO4
z{NB`rllI~m_Vxr4m{8%zBN&la5#Yza@xee2Jx$Q>OYDmXw#Qczj1<=5N9m$YNNvTY
zJ&XD4W<HJRMG<Gn(x11qo7^)z-H$Qo06s5WB~|IHw~{bF_3X8_ffhBXrx6k=vVT>9
zHYavsTxVC?k$HJ=jx1sL#&q^$l}|etDD7{FBZ1UG%O5Mba7ggwAv(Cw$A}f>U7+*b
zv3-()*xhezsj~1!h9p|9&v7day3G$6nsFy<^(~EzGTcHy3GupF{nifCQLB2Zm)z!g
zYs%L#*p$GP%Pwxwgks%fKZgL4dUqWQXX|FEdlCj;wRH7Mp1&uDlCuGD05eBF=h!g9
zD0Js`tJ6w5{6*}Hai4>T@8s_H2)RlF8r^5#0c1?Hvn07E%O^)Pam&}m)$PEVtOUTl
zKjIzmzx~M7<t&jEdqM!dUekF7KNOJ+LFQ|35%yaxDs@Lh5TLm^`?r&Y-~m+B4DE}_
zo*o{))Wf((94td1P5jmIt&~)i9ukRp<Dy+`zE<Qo&)+-^A&lv#Dkb>DGs}a;5EQlb
z1?Sc)XyO-p5b`MY7oB~a2@)a9XIGj*o`e!1=p*vaG~21FsF4Nq0NZ?E;Y8ou#bVM$
z`9>L<Y<r7KuwZQgtpadcJ?&p<^luI+WNFQZi$ujb0<LC`1$ZjvT;|&+7oT+$2b2@=
z)AM(;rE=m+1&ectSY8y8U+7KbG%)Wd2W4mTo;_s!b;M<o=AnBTf)5DEJfgw{{Q9<E
zQ!lt-;6-+{Z@n@kLzOy&=E~OR3XlW<TJPd#B4R0_vpq$Y6)UYB0&v#`o_FLz*hP7o
zA0}7t+hpRajg>8<3`fCurh&f5^S+f-T8KD^zvvC<wZYd?f%>X(I!E`RW70N24}BH|
z%<6P!+6zW$S69pwXDb-cQ5t%47M^TFvxo1cPfM!$1kkxWuSY@TI!s`K3E!hRp~3N@
zPkXCZnrG@s5$fmnY2@cK<^6FJKX!hJORL#zi2q&qGsDS0t!y4NfiVp8N@0XzUBrpM
z(OjV|)=l0GJ_rZR=M|r<H0UK4&dw`GEg&XqZfD6qt0DDG&v1%jF~ae2*m0ip1O{HH
zVWZYQ#lj}B&Yiw}MGaQb!`bTl3xDPHdCZqJavOr%3WJ9cM1e!t%kO=b=pGtE7<EF+
zFAEB%&`0qOa9sM|10?N=awwKyS=w2vwX7{OLd#Pn8Ic%yU=h6QWr?$ydn<IzZqEu1
zTu|VqTVi|6qg#ob2Ge@x^M)MirA|&m=w4FuNfY0@DD}{4t1s!H0op25a?gq7be(vD
zhRWn&*`iCrJ&13bUebIV>?hie=}&#-jxl^HKcE*BRj9sZc-XmfTXGf;710yeOnT~e
z5GTYc0S&_LOwt?ti5nZ}7dXCNY|(yr@ce~k_p*S6@%I2Em-L!Hj;mnPd%;i6@d<fq
zx6F7P7~KjBj}B{^ss14U24%*VSgqNA@QE?i^~YVd8Jw1T8-5?|tDh&)+k2942Do0P
z;ROs_NBh*IJ^a;jC7E`koi9L({}#jFkDu|mV!?KAJKyb0YB3g5(hh+TuGmk`+naBR
z?+1Hv#>K(1=G&tT$FgD;=>F{8H|Kbk8u;4r#cytBh3>CDxVl<acz{(@8~xJGG^d%{
z*#7Bzt(}dLLkn#45#9y&k<ZMY7np58L*Cg>k*Za>fgZ+x&V3AL31vZVPqC>GHZtuF
zq`>ub;;i|H0Oj<~hWEhK)~>u9*wFrU>hD28lDvXp2K}n<&(EbY5Jf>;z(IOFI_0IA
zmjOS<f4Bf=@%s@%no39erKM8AIZ5?B?nC)!RfqO5re@*<WDZ>B_Y-aRnU~MXCTmRM
zhe)F60g?+St3mtO?^6!&d__JOXwNzGuviUHT3&SzuQ^)Jk2si4L&vNMns=P{7|td(
zQH?fH*Ko`1bh@ui*=vheKZexZPc`9<@UPjptV|W$?Bh!%XKVFsuEf`ngMXi)bbD+9
ziF8SOHXj`o8N+m>LNo}T=fNQruV*yVwF;RPTxJq*qdoCI2s0^=5+%H)erlGEU)~rd
zDW%}jA##fOL~+RZ8`tyni@S3)Z|f5=kNuOQB@rK#40-t*fg0m3;^Hed19)hinM?Na
zlq#A@8V5S$+G9p;UC{4F>)V@PWR!*B&ub0m<Ml>Zv{AfYjLo&vjuU0T)ke3nIX_<q
z+(Dz~!;230n?JFP7>$rqc0;~A55D+Xi}jjiPc~llwQdhk+Va${+21PB2e=rLmYlew
zJl0;Y=(&Cd$eB)pT~R$n!<a(lqX=ly=s{25+G*_};JZ&&bxuw8+PpG4C%-I(kUekN
zNhunyT2scHuXsamyYHjbs9Xz2>Ne!z%E2cy>cWoScC&nw_}FaG&?tAdH+D3#sYYA0
z<zaX&gjIkhE%V;Kk-E;ZFaH|xxa9}wKCiVJjqKK*V7^(XT8WQn)jNLgd^K|tbc>Bi
zSC8(LHxL_h2ypr>7aJ{p-&>@3>iEOoVI6K0>tZk<O&RDvsV;CHB<k=fIrF9c=fEfA
zYL0(kg{AfpdnBvvlsfNo_ABC0i|QV5g|rRcveP|1mm3P=_Wkon4EO(c1<La?B?W%A
zf8n)y&fy3YF!%h8%r*T|?Y~&zQ1?4Zl7B(0rButle>dJD6CFSP+tku55eMrZ)au)j
za=rP#@Kpj(@jso_fc}n-)d&;)d;CrPk2`Ku#_>-(=(JTJ`1`vBspn@DYweWpY*-o!
zt->TB&zICOO8AEs|Nl61C+h3m2t<S2*&Pw>zX)ySZf+K+M=Odx8m;Iu=TyiuI!LT9
zP^0kBJBNR+{)RIK<bE79`TG$edc({oE`B>zhicWC0(|qL4qwW0YJDVP^6B{!+O;Vo
zKUc-pt0z5r>U6XN^F@K#3)Im!saQtc92teZlVxXT=A#R{*?gN`m?(($5jQPIAdull
z`siYiftGo~)n~$`ptST+LBgAM=~s{LT#OT)C-|nJ-;bLp5Q8aEwB6cmD$x8Q2mTXb
zyX}63tEKusB1r3NJKZKnau7<p1NZiDk<LP{`RmO}KyhQGM*gCFNB(TpiaTN;l2H%)
zc(E|BY({o;&VJQtCPHVo<g<U^b%uJ!e1&nfZIlw&Fi`Y3GNTUQCK0IBtnun`E||Xj
zy9AAohk<hNBX11KDD(_o#j{)ZX3az+C)0$dTDzg$N;#R?bhpYUl3gO3%0p=YQyxTd
zW7@#7J9?X325yCgdF}UtQ#qBEc;)4EI1+?A>uHbUlp(O%_0%h;1N}<GQ4C5`qzB*A
z_N<ows+{P8)2R6*;C_#`-Nm<?ZWB~Pe(xM=|3E*Y>v+By=CtrRn>`BD<#IiE4AZGN
z(64uIBB51X3St*VkKy)W;+Z0{Kgj;=6?nJ8*@o!sX{GG20WNl`4HH-?FZlUv)X%;t
zE_sznWmF*3KFAA%`q*LpwrrFL+5DXs9ttVbE&B*9Z(7DS^*u^>F#|1%QkQOT^mANj
zVNK!KHme&Bu;}i>PoPR*K01m{$g<aG+BeH{Zh)8_b!FJLy~@7M9C8AV8kRoi6W%~F
zcdb`zcgaM#?;ds|&sOh!2(nL``m4{4dw2WUm6MtHjwGcpNUW|a^W`udX=WNbU7F4!
z%?x_e5OtfAxC%6Erd5kF;vzlGYBeIbXD%sg7!f%mL#7!gPBc?qGqURwp?lvsav=|P
z(9F87w^Tmk_J@`D9`^o|<|`&5LG7+mXcj$tlQ!_%kBA`PWPZD6OEjp%X72}=$oA@y
znO@88ISv}@?WKXWqexJH<9T(22$J-B)}q*={ooyc+wAwXcNlEPvkoVHFT3O>DpEwQ
z<DFu<$>s$hR<JM@eqAJ|(faVu{B|C!$f`M_i{|so?8bbV!WXZvZ@$KZ;%r5nEVX@b
zau<C`W<UFpeizWkJK#rt0LMpimj7Jwd^}ia=ssF9>j0W8^e*eb`g6>tx=sxthZ1(K
z%=@hw5*!bKQj_>ACKrYs4l@Qn+shAr2|5)8DP!n0`(Gyx^uwVbaP7K&998`do`?V?
zeb=>^P=(EDEbpD|YA&~$ImqQM@ON(a$SwQ*o#(HUAc4xkN+chq8jT*uU_k*ZL;MNx
zZmpGGsId%H+MLr+yz_CS3bp2#_|{f4f=B*3&V5<D$ve)IggH(4C%Ns*tKk|mHKdSA
zL90aY?pb%#DW2HQlHX#YB81CEUp?)@O=4}JY3(J{v%ftE;guA&bE$}eWk;tgzOv|^
zfzP#|UUo76Of<<cls@x=ZN>#=-@fV)rHA$S80T$py2Id1oT*-le;J7i97H?iG_#v1
zHVD)m6}$YKU#8t2xpb2GsOF4ARvom~a!Sy*($`I97#5=1V1q~Xsl`g0Rw64n9<k1=
zJpDWh4Hg+31oAZ(EB;$*>kg(Buc>%!I3Qw$=L`1`bz1z1EO^jw+@B&R?5d*4T6*ts
zvXLDD7K!{>U%#rG*pYp<cQ~nM!v86&*<hAqWYs`67I#q;kwh*}?9-7-I|_PpvGf-L
zGa!q=-%}JI+ycKhU2A_RH4MJ)-5k#%Dm5NP4xf&LZZ~CAW{bVw1au>=&HK43A{(!#
zB%xX-d8Esg25yZP-<S1LTIvO!IvNJf2luuBw~BemQ%%A4!n^CME&GXHq5aYs$<1i)
zJ`~HlkzF~DuDqRI8OEH2!BIBdMjq2;YYQG2`VG&@fBL+*tAgQ4WYd}yMK`#FvoP!3
zS^TcNK!`6+F~rNMm$4`|)Z|Og+YxDhsn;zJVBF^<@%in$T|)aL(=b@PMBU3M*ElWT
zZQnsn(D!l^87`*1S0D9=+$=#p>!{2)4|+kZQCz7%RJNxKzb9E}FN2)t>(E}<J9;(_
z4^+q$u?#Q$_0YrwLGagu&h}n{I#;f0`!V8#JH0Qmq{O;2W>?fPbvT@W1)7hva1$6z
zUquY$jZiGXT^~Czoxor+34@Jeu&>O6Oa)R2C64eo7lOx2<4h@X9mxkJ)IE{rkMz>V
zEN3L7y10{Ld7i$0+A=xmB35SIJ`_gBcRWyH?Tt8>AnY36&lf{_*%VB$)4N))L6`aL
zL&56wCX3CNx-S`9J{_p{$(s#<?T1UQGG~z!KRj(`p)(|*!?wXaM6DJl5r2yt7O*Q$
zOC^PZCp$%)TVXm=hDSwYoX&<o89QEhOpwd2PVUbfaMu93o+Gv`f9)@Zz;%7)npEnm
zz5{O>3ML~KvlFeyh9;g6uec{xtRxE6H;{IEMyKV#rKVC63l$w~q3Gml<F+F#p&aOD
z4ayh>XK;*Wc~uc@BxTCjZtAor4~DLcFgjs@D0bL(UL4Q$#~-$obq46C>!~&{b@>4O
zBYRx;GOT=HC{E|?;f9Z1_oc11>0ZNTDjv2&n!q>HH@-D*7iYq&i8=#qOUxm<Dx79;
zVhtwKL`87v@fW&PoX=M^W35uFqb*NMjbmb)+>~=?NgW?or1v<A+LltN&OGljW9x!j
z8sGT~>+CKo2F2{(PgI`MJ*eNMT$H?gN$X|t;msE3c5_@Q$h4V*Gu1zjChw0ac1TKE
z&if%5Fk;7L)LLR$#j0Y7RgV+)&i($w-7Igl5NV}%)!(f)&3ljSdo>Zqy=w0&$)id*
zx<I(WmGQ3@o4g%$BXFr)IQ@eg%XtP^eL_4)Pwg;S74I#^rJv_H^hz%4c&N$Ga7jMa
zp1M=wRS#sP8)!7>Z&i8GW?T8)e(3&YHnLaWIjS4U64BBW4l!#iY2%33o}sZdUNz>8
z_;uh*e4J)sgF}xw@1}e^HH(<5O!gVZ8|0w0Pi^Q-?waq|)`y9?uZS*PCYEorr<xg7
z%znxDo3D&EEzu^*njgc@sa65G_;@u<x*#1RGuPair>E;UGZj?e%_?SyLPRF~{)*g|
zNVy}IeFok^2-KdhUSOpFE0u(t-R++?8f=3$<|+sDZbu5dbCm1S^B0Vmg;~2WW(;Ju
zYAnhx#iu`C#c#75&Y@WHj$Mx9dv48q1J1VDE8z{G!WK&JrU92Vl2e_(28_+#UT&`$
zgys5g_RF@vOz<71G%CJ)Yttlb)o7uX=|9tCQeZboS;Qn`VO6DlsptQUiVgJ(mZws~
z4EQF};k!Jaxi;S%OP-h+V*0pUUZw$$o{WfhQd+1vX}<nb=P+PTujP$58)}jhyKXVN
zSz+##X_}2yf|RS(XM2`p8myoQ4D@_FZEhj~yQ&y|(m$$#qqI2Q>T>E9pmVHG6P+4!
z+0oJ4T-_#D1&an9{$}hqR=aoS&6_!pn>74jR;xDn)oxUq_B5+wL#Zf%hjj`4k4*n3
z2N!Ec-K37S^Q2>~?oU=lnw6E8g$uf!S;Re;pZ0$u1Yj!Z8h)^B(t2}`m>DPwG)tGr
zDe8-Z{*Lzoq%)oWuJUp~)a9de2?jQY6b6SwCqXx{&|F*#)uLY_l(8)*>5ST7M_vx1
zVry%FTZ7LsKJrzEES#Z#8nPP}!QV}e^%|Y(<(ZWjizuaoMyze8tu0>e;><hF2>lE8
zoj+X5PFsb$P$#L*1fA{VZA}SU{|8dwQStCm%k73l;`~xD3&)(2Sy|a=DxnABqhOMq
zsC(cHMELjz?S}D^7vgReNV!5hMTs61F9rnX!t0$N?C=pgwIJ(i=?9>mkQf%RtMYBB
zG|>I-;MvPm)+}u<jP-6pmmGnd(Thn;RhrXIrN74kTu{enN)xMX<NK~<Mf%;%Jw{b5
zX}CdM=Z*?*|47_;^{04D#4gWIBs3fMGw63qAu@BU0*f&jam^NzIrQ1C;J-@glvA@<
zrwi1*BEL5dEBpNZNk&Rd6L>Y0UWcXLE^xXyrHe*|rCVuK@ylo=UfV*-aV`m&dd->H
zD4eT-R0BKCm=y{l!Ij!e3yNr{sY>Q}G!~iXF?xJ{{(&vF%HcuEbdumbwm@7awl|Z>
zfPT!`NsiCi`L)tX&Nbq^E&XJz9e#)2Lq<!8xS43nYOoGOw$34)l#5C^#`8gbOze$X
zy|k<h&Kkn;z;(`DQZle5ZyuOlzFJUdUkm+oRh@6@b0^5@=%=($M<9P?dYZU}o-j%=
z;{D{WV?5@*Hgeb5UlKL#KGyISSW1;ffpg^adL}S&Pv%^TlP~>yE|~GO95TE#?fIyd
zJM4RUc-6X!s8VMq`>U2^U&PAiDD-J~bAvah<^`!f+f9Gdw*2@ik;0*tw>MO!S`){O
z>s7pS)-tcteEjlqRyuKzoxY}Ya3&WVejXaJpw9E)?5$}%$zq%7(UBo$VO_@-(3{TB
zsBJh?0Kknp5*vt&MBx}^pQS-9<Qh-alf~o@yut=4x+w+%TGBrED}3Dj0}vQe{>e!1
z-B2a)1&OG7P3uSKA2YG;&W5}2mCZ@cLV%zT;V(c}le@ENO#1}Sz3BPcs*q2j`bph}
zlM?gT`dBIKM=_-I>*`U2esn?VU&ihVGGojV1&GNQd>XK9fn7aR<r;!ZZLmGOh=pA)
z8J|WqnJWCf0vp<|pdX^VeegcH!s?@O1~;x~>*TMhN<W#%xXNK^P~T;l{Hu?T=v|W*
zI!yX!{d{QsDb3+Rb*b!8D$H@S&w6zL@ZL(N4>$pFnXh}|O}TEWH>#V`B20w8<F?!g
zra-M~acnN-=J)o@MI1k!xw2I6;gj{<&|$g|@4-BFm=wH{C3>0c5uezp<sv1>(}(5=
zWFW<`$-u?v`3Wj<$&9{29(Ua$ij3?y9Lh4CSY5B7)S(gSpSIDX<|8x;hE<w$;uT>Q
zPYVR<1qB^$3-N<Pxy<+PHdNn~na;Kro2YlSUTq#oE7H0wi>fJuyqR?uyW4FR$9YLp
zbPC?wL`{?=E5m?aC{K$_t!?1bA(`QoV22eN>|2(-JT%EuX9>$p<ul)|oK*K+YYdKB
ztL#lkb=@p{sp+P^p@u};(~=h#*L%1`v3~-hX7Ms6nrpMPt`=<e!x@2C&j1~`tv{UV
zBeY8BHP1?U?4dVuoD+!(bSH=9To;pj$Bo5S<%s@bq)5sMH-83P4N^&t;4(Ft$wS-$
zlKAzbu9NiRt6=$n<tJ4PfnXM}e^iOh9IXA#$ENer%iq1k=q$@1%Y<r~eNIxws@wq?
z*$jf}K#}_6o<34qdSTyW=gZ%@o7Boywz)j)eCK0d-9}G--dS1$<-<`@O@c>S&0^ly
z-ZJuX8NR|~$+a#DyB|8XiB~$CBn*VN`|_FHdm3ZD2g5YdUFiE_b#tns?fF11%#<9(
zi?6DD%w2GeUw$hNp#yNWIAf%Lr{OwdnO6*_aH*l?fqgu2hDk6#&a}a-yB3SspC$cq
z3|1H>y1t3pypAY?QF>ByxqJg|bj!|`Tv0f8IVlbjiJkYGmhUiWOpRY&(CQNy>Na7#
z7wh)gu485p9w=nVGand~2&}8Mk3=)Oc6%Yx7P!1B4qUo3$st;Q0<HzFJ3g=Gs<ucd
zT=?gI)Z)()F>TA;)j`u>x%L;OasTgRi=77-+t&WAb@~NvjM(W^;SicSN5hOx3I&y#
z3fpX|be{Xt$q;r`F<#EVhYAvsuEU0r^<-I#zL!qv@5eG^VFzw$#aCp9$@YFp3}ei{
zPn>um>d6=?7iixEKA%dDf4Y4bxkH&m69j%SG-|VX{h>(d+2^=vDA|d)3P-5i;2-|Z
zf+>VU${<%OaqLy89Dz=G%HE+kiD;ocPB(jhVO8cFS1Il@BAzP>8ZLKCp!VIBh*TJs
zF14>~c-Azaxw$p%qeo)jrtO>G-xx4WjLEx0J(SYlH&!l>q%*$5m<c2Ywf<G*S#{C0
z;agZUSS0hIFAKvHI{<y5j`DPnqGlJy<8gSxAzNBvZUpGyu+aWBpbp}IlFcUG&Ifj9
z#Ws7oqY)Q`N2tEv(g>5ovujCyZBq=E4New+?6bAJwP#pE>lvy;&T)JVmAZPnxVqoS
z)fJlj>Cf*}ZUHD<;+(|V$RX~?-0peo;mr9`xKfMMm}Bn|!<e&57Vm;(;|ZHnm_F0J
zH~y}=70!T7=&M^%&)Uy>Zl8^R>BXyLUxxc06J_N;)8*?=M@E$XB4`0p5?foWRLSGE
z%yq367fQ2}s+eoW=)EiImE7t(fZm^Yl3&@bRH%k;yEswKc-`6M{Eiu%^Rrt{E33k;
zOGtS2>YrD_^cmEQiF<Wf^z%XcuK_~6;K%#w)0FS!o-S(ZTp~|Yp+xy|CWg~B3zaLn
z#cX$lolYaY-_eZtv&Pr*rNNc$k8-dz>%$1JayQlV+~&qX9D2)xow<!?e+P$2!{?>%
zK~3AB$AkN*0NOO}dM3qAMTb-}0;AT^ouc*XG@e4eE%l^;YZEUXX?1zuFBIONo!3oS
zw+$z5J0o2NFhG~dm{o>N{?mn~MWH0{LoTFcv=MUFz%p)EI_;0KHknJXh?kp2AJ;u=
z_pb^2u8bzOq`#wg%pxu_6kA^>oyi(*eBVZ^l>q0F1T|F@B1oUpZtZ~7W_rRIPrK3I
zqVZ7r``?!Df2nYZ{}0B_Ix5a*>GO~P37!P^0KwgZ4uRkfgS$I}J3|C_cXxN!;I4za
z+u-gj`Q5#{@4I`?o;_#&obya~KixG|)t_&bc01v8rpds@Hoo`yT|jSAv}L`HlpQ<d
zT2VU@dj#3vDw$<>EfrVzvUO8Rth}i}q!>a|L^`1t<Y>ulx$tl`gh{7V4;_}U)++OC
zUa!Yg&6WAq%t>5jG1azyv9y$6Hn}L`i%WNz*5=-I&g35F+HeP9>~i6E1yi$+hW2?@
zgYR%Kc((w6R*x~PcwJU8_JgT-CGXK?kEv!i$d{6R`oSNsmkm|lu|rXd375nQy_QgV
za*Xx4JyS{d<`o%AADLH7M~!XF=QM)ro-f-2iwuxVmvlyx<gE}@B?5M=-czCjT|IsA
zU~zwOD-r2()liz0n}7*nKf<jV=_z|2-XQ|txAsOsF$cT!n9$Po$2gD>6o=qJt&Q&G
zmDiWS>rmu1IMPU5SYI0=HMRGDK1lcY7SK}DFOLjTWw2oM9)BRlRlxX4A|8PCS}hB!
zBNYyelo`k7h6Tg|wh8=M7q=>#D5DoSoFg$Y8Sx*_`O1lYNA!LJo!{E??wU_S)na$+
zm_~qCP6#GcYJzpykAu&omxi%3t|`Q}hc2yHA;bOwwm#iU`lMa9-U3*iXGi+%lH{MO
zYhQs9uI?E2L!L6e&oOqJ>$F|yWdYM(ns%I<>GwHheG%yuoYB~uTg%&LX1a2{R6&1C
zrBvyOkkt`$YWb+2j9W_L9uyJ*-f=TUZr<Un19GT}FLT#szY~YBB?o4RA(pVzDoH}m
zoOiVcPb6L5Xt41$&`)lUXF(Ru!bLncB_H^YZnh{I&-ae7Q0h0!1iZXyoA6J#mAzDi
zUhDqdd0^-aIFfT5bPj@BcbBQTERGJZ+a%&?i3o`Tf<k2Ng29ePF%rpL6FSkODsdvm
zc=FcWZLToZKaW?BtU!&AbGq@v{CiX84-Iu-jf{#DqeWgBchAOaAxN8xB36~h9)#eR
zbhsRN#bvFiAEA0S1auI4k1^uvHhZjjM<7QN=LBFgPR>{J<?AU>EY_#-svgy)=Q*Dl
zUNE`V9f&Lk_ILtI6w7royD8tAmRKo))FxwoJ7V+a7PCL@Lb}pl>K*5!uF;dwmMf0J
z8GlPX<-&F0UP8JBgq;^1bs7v@uX2#5-2Dmbd_+Zy`Q&1=$g=HhhtI6cr0r<6$_(^r
zX9`py)vDEYx>h#zZJMy9z9N<fraSUzOxA@o2aatlZXKly7$!3ViJVxI?k*{;(3v$B
z@|Af$VC8kmf`e_oV)pE|y<}4e@k?LO$BVMtE8W#a00vv|u%o%sINDIh7dLh9@rA`j
zGyb4^{$!GjEo$YJc-^vP$sDuEZ(OrdR}}6eMBeQ$mtd!M1rFyG)Q2mp8?#ARQz{Wd
z`wGb1!##id1*8tB?!BA`<r0!ner@)XaQxD8;T?A6p(_52WCqc@u0$Bfji*(WcBr2S
z2?Z>HX2^9F+imF-M@!!;TW}UcWg9~7kilk+8I3(<QMM*$Q`TY2GcGhSJE2&nZVD>t
z%2gV1sbB1Ij3gK&d9qY1-pCA&X7}_UcnL6uz>h=a9nRRHT%w=MNKX(0JKtOIDbQ-b
zi)0#52+(~4YqBHZb2J7;P)mOx3NJcmMgV4gl4my?o+%bHOtx^Yve;6f*QX^8+xt^c
zbwOpbaG~;6z`ZRkvRTf7cSxTvS8bvaaru0+NNhr|zk1yTqoWe$)!9PQ2)*OL(p<pq
z984k?jz*#f66Pa+pWlE(Cu4qtaNN_9qc1bTr}&MO6;=cU=Dbc<y~`$+k%WAHM^I*<
z%_D4FgxD<zWTy;}{gZS0SoiaXuF|SVd{a|O9X0LGNEpBO#03NBIxKz;vv5eHmDt%>
z8|k@bPenYp6fe59Jj4c!1ih^ZUah-yc%Pg{!3}Hiw^T*G$e`YCYh7Qi^yFgoF)dz%
z*4tBAk?dEM-FMBbG(+B#oR=QL0PRc3s&yX%0>FOj=Yr$QPz(Yp(<qG_p_RG`7aIWk
z^rd?fPH!{U$=X$1y)}<!Zdcj;sj{U<Axu!M*hjkfzPLdy-)A=}MW}YepNr}rqjcWH
zzid{eTr)o~{J{4DcZj8zu+?c+nb@Mn<7h6qLig62N0p0>ZROdu?Of!DznY$c6qk7m
znF-Rfd~04SBcZWHZjipQ*t*IVE1Qe6))1iKP$2XS-d1v6ZHv#qeuPYtN#^2YMnUSu
zZDf6X@b8eR#5fL5rv!wr8?QB=jZY>A*vx8I;9I#pp<zECCBm(O8@zbG?;b_Vxq06G
zneedTz>g8fkA^g0G8~vJxId&xIJLNsKa%y>t4i$37x~h2^lV}PNWg?vglZ3W+Uk_i
zJk9F+@TewfDXUXD@i(Pss~otvn7HQK2m1zBi!n`->wa=1=GY$K^?WH%EM8S^u^hs2
zoM+@bBT=F(bG4+-u(-Eibh)6;_Mhm}Em*tgfdJ8BueLB>9SfzL<q(opJhzu`A+7$V
zjGJw+!B+wz7f|*<_zTO;uJrCAH5!TSM4(8q*E4sCA0e;(M3GiK>wZpj(o&m%>_Me}
zCgtyGU$6X5<mqDdt$m{3W)}~4U%Pc1h>WV{l+U$Z?sk(SU9fAYTi50V3Mub#RyQFo
zT|RJ9!EM^AJeFg$>I{|#z{A8DlotRESNcO6oRfI#oVYk)pg#M`Fa#ZgBXT@nqC#@e
zNUf5O*#<h4HK?^J=leUxdhl5i@BNTgYvf&nh0V(8g!ujagav?rywM}Q8DDZ*#_2$T
z4O=w!Ammbif)-)f07%lS3D!;0hUC7#y0n_>xo7_ICO1JTrkB$yjQkCseFl7XSc~)N
zmu0`&&&F>Fgl^ARPG<icu>kzWJMFV`bxjaNx-)6F>|n;ZqclnBdld1Iu|c@Pe{*|m
ztf1R?ntD+p#R<)u6zG+{zL!212hTFEB1Rb?@g=*frJm>=yIjljp}YBBYd7^Yr70|d
zck`+LgkFg5<i*aXilXC67cIZzmqDLBCARyKCJnc9muUQ5iC7c$_+s@5_d}+4zj&Nw
z4c~45n+3R@ghBKs{EE4yl5L`(?XIbw=X6c8o3imz)N{^(cx<EM$6J4l>y~t4(BJ`0
zJJ^C2c~^dr7rv3jZD7y3+o%<`NN|ga!?!!Wu?$*$CsMs(DBId*-dUg|qwP(oyS*Qw
z*%?~Qg<40!?~pgzfdSU#aCfu~@6;5K#XkscCAL*{V%XM?UCD}(zVUvAB+DW1qCLKh
z+%x;80ldQ>K~J%CW4*kqp@a=1b-O`sUXuAu{pBONrJ~R9yx=?jI#FXyK~(;R6Bn8J
z4rPaeb^mx2Z8I*Dn{!6FYOJe)T1)hSqy0=4bseLlq(EWwMw%38_;RDe_(k~J&8u23
z|CjRTmc$dRAwz%C)5|nn@+Zw{y2DhA0G=8L?*#AN1!DXF0e+X^s*FJl>=spKjBFb0
zCdV+xUkctsYTo1Ss^vTUpxrU5Z0J<YyQzv*Ic?P-PFK$CSs|v-MkmKHyj;a%i@O$w
zpZ8`DW#m9Y?Ri*{Qmxjn!C>wW_p(x|@BsoI_gNDcMD4p6C>V@sjb`*qLx3KwkDIln
zo4e^(CtT0--wig8E^tVo=UAtc_BZ+a<aO~Wt(H2F9MVA#RnT_}{__UQno;bgAf<^U
zU2E&qN4?F4w@OXJ^>|HoW(;GG$3;CN&PgTw#YVOCgMPJh)MhoV?&GbW1a(~a(&Md-
z7O~u8^0bND*qBQg*ZcOt0?LR*fpA!=Oe+Ip&ouz^HyT7L8TDBO=x>8FXfZFo^ldtJ
zv8sZ?VFc8q2DwG@)QBn1d%i8y>xnQO=&qGX&XcvICX2<p<|yvv>VKy!*UJ`z)#SAR
zW@s~FV&tX<GUKGqb4bPgVf2e_ubhR^v)+P4)tqfF4iN@ssY(d6b}j#6pERw}PnTlO
zvMA6@$sPm2Ggm&~lNUKWQ18kN%-i-3JxcwuaZt`RmubSK(IE<-dc_J}>;uoBao^d~
zA|Wr@_0D2%W>+P4k<<1soBG~axKDY_4&2RKwfh7syd&N=J2H7uV0!ogKk-dYch*ws
zcHb!?5igs`xTW&=;_9bJGn#$l#bP0^1QV^wvB(g%<M4EW$8LGk7#{18vtaa_Gn|<b
zwTp_$in8s}$z@ux;pJeQw}#4DAirYD<q-&#+<eA>a)Xt^ERMh`=Fm3OvfgrM-s37^
z3^@#3AJR;-cU$x-Dq~zKb(*hvi+tA3lzt~{l?z*2QkE)k)?(&S{;8++5bKZQ!wylj
z)K$whUOKoyRCCGKLYwFIScfyO{o>E@^o0d++WhUdpU2&TY?;lw-o?c{89+?^O-Y%t
z<7ntAsIubbT+VME4P2knyuT6|t9u-94P9-Dk)2T2g7cGtiqf}fxUDr@3uxT5aC$%U
zd5f3m&%K*IhmxePHr`%jJ74A3Q<uOS?oC&75hpWidw&20p|&{Qf3Fd(yrS1(O&4B@
zH0O`wv*Gm;g|<j`mtX7<)faLXc`oH*P^BNG^i~R*w=b!HUt!~=ug;GZEnUrV_2`er
z1D9Q+*6|!er4vaSj^-8iQ-{wO)8WbSwn43xF7v}(O+}kY*fSQD4dN3<8}hX7QZoA6
z1vgI80>pkkS~K{T^=|~)(lnSUwHDajWV`1hg?Zy@8ok$wX?RN(7;T`X%Gt7>-1b+g
zo~0`{4Q`L)BQZoWC+b;>k@3R-nS3b^4K&Ks=O63dx?W$Ogi6nJotg5c@7iw^mKn%<
z(Z+c5Oi}YQ(s71YK*~24*mr5I6vH=)UQ_$V7@RimaXGe9g|t@rO?z3&(c8>-ihe}3
zJDsRlKFHu*<~j>@@yW@8`K`qqeKSwuJfF>C*9htjFVl30X{zk4iRG5JiIm<^^`cs-
zcKm*q-~M25hBX$4oZLjqv+Jxq<PF%a{s}P<u-Y<w*qR)5lVWUSzi-Jb{$)^DJSYE$
zs^^d3FqTJX?@Dn12uvpqQZN~%4f9#$AvmR0Q2u=^n*51ao7+pWT=~*QWDu*0&znN2
zijsg+gmn{_uBalL-@%0yEl+iO^T!qz_%Sfk-LEdId~jY$x+P{OvlG#(LGWpkzEJLn
z-=rv@sW%21QZ^X(h_WK2rP;)8`fv~r7gwia_@*5$LH%L}G$o^FkGcS)c(;URGQnu_
z-1{_@Zf?>w$3x}jOHOsy_CZ@i>6nbfdb^lY8q{y=AS_}s;~88HAJ8;-K@uI(K2(m#
z&iI-J6<CygZ6aXR@e|`PV2xj%ZL(tQ@$8-05Txp3W;plrVGo<Cn|y3~S=4!>EgsVa
z6ARy3_ESmGK<7>gUk?SShV={mvy=g&&&VnWkexZ=Ps06tZ|=$ipe+*!)2Lagw9sAj
zL^^;3c2=@T?fS(N#aFLsHntb1*q&(^gy=wz3{%GxNIBR0vd`4hKlJI|uTJ02-R3?u
zG01=wHdplL*8`QWIE@h)p0pBKK`N_Pa*oFo2dIztkeim;eUS2guM0UZQ|pzLP+!!s
zcH9r;R=jpb%kA5Z-MF6fSV9i5(ljWa;lN>;C9$Zbz3biVqw7Ehx>TN5chvrbFY*n_
zdcDAj19eaF0-0Am=;WjvUV2@wQ`y76Jp#p0(iBJX=H(zc#o?8<Tk)`Km{_S+t35{c
zyLNZqRJsk_d_cRcXNL_k9Fd!4v`?-z+f2~W6{QVxlbRx|a+JR@aQ~btVzIaVyFI1<
z?kCb-@Qr%ilzZ>e$fi3(2=lxfcH!g7uF?b7NGYsA*vN4jyBq!-XWc{HZgl~wem!G~
zw>+B;JS5cthnV1(v-kD$F(z+*IlKO9&<#IFqo%a>M>dD^bGc^E$b@Xco|$weBCToI
zan}}p%UY8a9J)BP)n{heU9Al1%}QNVFQ#+^aZ`mnG-Dna{lq%K_<aXqsxckrj3<oH
zV7cjQUGQ?bI~u&<_(}UJ#}{1AQ0Q}~VHQW@f|rx6Xz69J%uT4C9Uav1{x`neZfE0=
zZx#?n<`|nT4$nkRm$m63zOv43h&`>!pnq{dZj){GHN1PEPr&EbUmqrhW?dck99*g0
zn%_jp?PAk%TZU<}(Cto%L<6+2G98$7K&L?psZnCx)29`-(`^C5MNApj$^zQYzMCbv
zt09lJ8X+5d+q%`Wzx4SncYuPLr@wuNtapYVOh(s~!!fLvkW?+Wtgor$K!2*|lv!!m
zOk;~uG*^me<0^9Kw{~jE-hH#PXx;0+Tu^^l;t)}0i;4IbL1$XT&}U@+dBd2U=X}l<
zfTY|v+qLH!&u8g&-jsbWRbpkU@IFXnx5szI=lOeSHj`ZK^uWt^tBrQjqr?NzT+uic
zPNwN{la{YaWJl;05$sB2=Dvh%@eQ+s`h4d-t?Q<TyR8-W&kb9wS2L}<9!^X-AJQM8
z1l&m6j#ejX<u$dcjG>$px2HOtjjLI8Cn0<n%owW#$mt8o=k4a2q5)Rouk4%*Lb&Tr
zwSIHpIj{c9XVhqc9VK2-oAn?Z-Pz4^n}c*$nfAqank22qb424~h!cq$9ouYrp%gC8
zWmKuvRd>jX*apT6qIv}Ci|Q*8_g&+a6SR5d1la&eS&`_AOs4LZXE=!ot?(y1A<z)U
zFk!K~y~}nQECgx&%jMB1chA|>Ju3Re-plyc1SWa9DoNsB*srQ`*tE+KT6NQeg8t$_
zc6`zCNx*ek|B*=bSuFMC$@j|oDx~ybFze&|Zv*Sn-uw&8z!#aIE4n)t(^q~^ZtxK_
z5j)nko>oKcXH7|bO!d9V>b3oC?|NFy*u_5powM>_`(J?Wu<;cqjO6x)CVtw!s3=uZ
z5qYKW)R|PnWnU3HqvCb_o&_FNbZ!o0((j_i;J^IhisuZtO=qaBqFkGSSDIM9r1Z#A
z^+My?w>JF*8Yc2eOmgV-ovb2~b_4ns#<*@u5X*UAHO(JD)Oi0dBGTJ(<up-HfcLW;
z5w`cw(lk+lkW#vES&Y}k=qC8f)+7pAFh=vKJ#thATD1?aK+oy_AtzftvI3Mgs^3N-
z1xp9XY*oK4=lzGV3}}x=J!wtz)eo=|yAS`nrYmrXV}8}1dUHemKSk&frkeQk>}uQ%
z)4~rox+Xq$hZ>vwoFy6@%2}<TF)oW_(*aA`>wo+EEYL5moy1T0JREwqA8WAV(!Yu}
z%cQVBXMfAhHjpTqoAgHOdhuM&%sDYeeaMSv`iq2~(HhUI6&uKun}nQGai#FdrSoga
zen08<soz(5Z;H{btG{Ox);pd_Zh1a_!t8aR05|g@coOV6ldfPB5l<}_#L!pxCfHJ`
z_vgDCyy{qv@B+n98E{SFpsdU26{#(t9czmmBm|nc(+um;-yJ=yH$U<fi0T0_ALA$S
zr9g$(^oirYyr>^fXIc*~bBycLCLbk0(#q17nn#1a=EdhgFgcrZ=T5mS(hU`*+%f-<
zMz;3do_-JromVDC_2l@4RE%qFWX^`)9Em$R+l=Q1PZ56iSsS^n!KCO?CsV5j$3<(`
zh_W*@5R<w$3jydrc_=_$ce=cZ!hSfr1dO&E()8((DL4`8Cf_+SxgXgQQSoh<4@F)y
zb4Lh$mk$tf2tax`qwU@Bo3bY*{go=V_d-DakW0I|Wy(k^*Q=u^5AQx~luughp7Qt2
zeaG&vs$6dhRZ~m)4Vb()Jy+2amT|=QbJF`R5C_Wa3I7_SC*`n&`6<NA{xtL56ITU!
zq>W5Lc7++8SSXxs#*7Ma!^MBU0%;_h7XKv~i_}e+4PjaGO3*?G4P!Z(fCNU;?YkuF
zAMLG0)R=5n`4Aa)V#OV0orGa}H-ELxF(wxn92$GTbNXG@qwpsqZ-x1XiVW_~NS4!O
zgEYh)<!a-R#Sbn6ANPqv>371Mp9?0B_sIEIg!-(?6@v)#S!s#gNRvK}9rCHBsyw3Y
zv~dHx<f{_1(D0pYR1YQ*+7dgH>1JSX7Q{lOhi#vKVWIU9SCb`|gM#F2lvSWbaFfSz
zG_mOMGfuFAlb!J`+Gs0_@Wbm0`FxNwo|vnMt9wo$W`3eq1s?lE0EjJJR<5>25h=C5
zD0D#5u|x_ieZRrSmZRH#{giB3Lnrl-_ZmQ^MM0WWO^RExUlCF8{`kwO()-$!f#RGZ
z8Q(tDgpWT+6WFHDoVpfLvCFgooeRwch$u|L$wF2rqP_(%2x*_uT=ggqN#U6h*siJL
zfqYNu34q3+U4o{Q>?r{oKZD7t3c|M0@2i{c?0-f++YltQCf(V=egEJY{Zsj@a+k{C
zn}v+Y%<xHvAPM^i$I$tD$YDdA`wrPKREmP%Qr4C_qS$nAH6$-=$wR%%9b2Z%GMkN~
z<o5WhCa8icMwoa>g(m4)L1o;sKQg##^pM|gR|hC>5Ir=eG%W-~l5(j&A6Pvx{bz;L
z>4&QH(KV&f-z$9E-auvi6^nk1R8P(VON*W@@6@pP;eEpUF!+EVG3D_*;!Ks2y*VG7
zJG<#@v(Meb@14alMdddG6(?xTj%-zIi+iJKVP^0{M$LZ168l_Sf*DN3ba0<gLMh@=
z^WO2vf7=FsFUlR`8rF`WsHNTy(CI*8FH~~Cq*d9d{<KvulAWOtt?EiD-m{cMymDC{
zgvQvzMnydmMz=%mSSj}Q#AS;gi(QQd(|%)R2%pnf`{7&mIW@xPW5nik7^We=O}zTw
zOQ?zSVd}P<NU59-JU#Zo3V4kKvEYe+rdlqBZQLbF+>=?^Crk=g6rTqqTNR*Gqi~UR
z)C2ZMzwP<+d+stw0rLm#G~Rw!mNH6HPk}(lY<~TKQXa05a@wQl(53{N-KHTk&zmnJ
zXycVe%tty2TztQ&&ddn=OFtmF5h=yqISTirnU9>lMB869o=D02;}q9j87ml<o#c0Z
z8{{<hrU?F)q<wLzbLkPSQZVynB&>Lc93`+9F1e0v-A1uwJ#wmMNkER^b$WNj28#XG
z=z5!?vqD;^;*}?~qFC=NF~=9yvpygQ{&71<>+A95F;378u6(X(h|&V{DC8z&zwY{1
zON%h@TBJj?PDeC4*)G;xBNC)B!Gx~R;YlFgHYrWrvlxr381P5x(O|t%<KIz#cr_N%
z+=4>(n<M+oIfaEgig0>nxN5eTP641pjxEbfO}^784tYvj+K#2-W9jZJ9Juv2Cl^N1
zcor+kE}K$SR*&en>>kMP%2=55rp-jMZ?gv#Z(6ZLyl~avlrs~kxG~v8S{-Ewypo8<
z1{54VuC(`>zpZ_uF%xUW_k2JD?^t+d>JurIIK0qOVVG<DMr#YP?D&PSC1K~C%o3tW
zIT)MQ$dzreRsv(T%*~giOQ6^tR6)H#N=B>{bWUDw%1--t>H%Ee<CaD0Z>apVGTeph
zI4N)GkI<v^46f^kTZC^^tZc;lU(70#nWcXF{0)AxsH6@qc4^wsbEPcX`uoH*5yx3t
zNzwLql|?B*M#k(8P3K;y$2vyVwg*_iQ5|Dd!JzhHIQ;pRco6Y;38@lN)%?=Qw*<08
zyO4mELo>Nfh2G^1S7m`~ah+Fbn^M`PW-Nn~TDz~zx}&))hr>jYcC~vDx$Ra?A`w83
zQONN9323K^msh|@684&KQ>}A|V1`Wu*efqEH%!B;;+W^p5Y1U7&|`$4^wkjUd_0!J
zy0Z0;9k~YlCb=KUpC<N)hl*0PU9j<1EO5Ko-{kB6T!Y_PMR-jCUQiqP4$rj0I>HMJ
zvU`7XTc^*QQD(8Dsp_%mCTzE7q3)L*$t3zFh0(e$a2o)sqeMwQivKO@U;}VkCI8%S
z0kz$OF7&9S29=7xl3;x~#5R>K=gpg1d3?{d+dkp_&wc~N-&r+8%3=GREgZi1+Nqk2
z$LKETdHi;9Ip0HVUWbl^GdnyJJc<1^$}i4|-g(_~O^2<rCBDrY&kR#$d1a;tP&9HP
z5ZEVCuh`UTdG=qOV7gcF2pH4-yZFr&q#50U+h27O!3KoK5_f#%y#Gi+0^09d*3aGM
zW@w7Z{^_6gVIw`xSWfM)hvf5NLs#toR+9WDS<3Sa8^!3WBID;vr;>jU)Sx&&65SA*
z<hGV{S*H3Wl@sUnaaEbG-lyrC!bWLUth4%V%Bm+;kMj0gID>ud^03^0eI<W*Eavv`
z#}_&>%Wlfo#{tX5Pu!;`>l$CrWF)__0Ktj}KXTWH`DNr~3HMomAinzRFxO6ux|mRw
zYi+{K2}|imTE<yH)OOlu@~qnHy76a{SORwu5i@f}b+j_FaaZKdZ~QGYN32L+P)d=7
z={C}SzRkQ^JN!O6b!X`jb9S!ep2<7#=T!H4cGY0A|8>}K>bKH?7=32-fziDsv?uAg
zxh1^baFG%7Z|pI1s^6`8i;d{IbuDHniU<^6BDKf09Gw57+NqL{GwxC@sw^amt%V`>
zog0roMf{Gk`{3@%U;bUVd1r~JZxi<N299V|MldyH1N7!ZT^~A{b?g&Db)baC-Y54?
zBQEUA2EThPsS#g&lj349$5Q}tUpPl4)v_ckwbsuy2~S;YhF4eV_?ZuHtQ6h+1SMlc
zM1qbH&QP%cm^zdlh(G#kkT9j+7h$i)lOrksE#&q`#f{ypeAy=||Bryk#n!zIKPLs7
z+78i7B{4?MKRi?rz}keX0l?UUXeq|@tX(SJr2!Du_jV5on<3L|Vo?Tv*G8g%fk-e+
z52*Pu|Gr~1Rb<(XId1%?^tH&_CO)mC?lGr?nb1?jrN<u@oa{COk@$12_F%$PrEs6c
z2G)9lOpE}+(SyM)X}plI6Uq-O*p^YfpEsK~a}&4~nPNaJMSh;V37dE%Vq>mv+iHrb
zr^>rP!hytng`6>yZ+DuPq9VJ&f5x5RLdkOgUJjakMkYy&)(q-%i&(V4jZ-}Xs`E7r
zllVV8PL>om&JMhEe=S-})w5d{K9!1d4&J4%R66oh`A|`i#I)LWwho+^vt3^xo(xS!
zl@*ScOU~_Lk2!hjYL+P)LTT1M`WAi9o&j~lf5uKGIa?)R{adWeB*$6YAJMhcAz}7%
zW|bi$?kY9CV!un@iL5ON|928a6hpA(qX&rv0_297<=7K~a-%t=KH}tp&Dpz;#(*A?
zQDsbZl9nTa;pbLuM#RqusUa3_T{C|aF}sX#)<m>7(a=u8Tu9JlOAHINb`{IKn57Rl
zw57v`GJG#E9QL?$G}w~7Up7(W<@uU{FCky3_%p%Kk;ktYJ$lIYTooJ6@cnwL@nM*p
zLVVoElk-XfCC>2^q@yI3+_j;w8iO72RB`pT2?Jp4&?n~*MA!t@rE=DlANwv?W0Rh$
z;d85njbZNrGqW9oOJURzX5CF6ddd{N`C(-}S3=(4J8&df^03t=RF%~8K2&a6YuP~D
zv4T7C=HepL22f+G>YMXX$-7V)U*CukhBwr$%Ve8IQrnV~#OTVYK_<J(ky<v54W_qG
z`abrh&^6W|kW1Oo>M=B3cTOj>61yi3iFm2$+cZu0TMZyqmmzj4`RAB{Z5D0gJJiSW
z@pevM!U3f}2D$j}cIxt7KWuyN1P0YJ#a@<hcVr5drDb}vCGpr#VHDdkc5kQ?dZVtA
zm~3N}VC<dJlLM8d*FzSE)G>lM{wr#sbEfrP*f&C+QRLi=B=_2m4Kq5<cl*@IFC*vH
zG-ZR#s&MGN>NyRebaftQS|FC4JhKn$HhZ-y8zAh*`(Gf|3R;2d6ec}Np;TT5twyj<
zt&0K%u8tq4?;LIjQg}HtIgBu~Y0)NB^pfV7Dl6%hJiu0!5>RZ}YrWuVy9;;mmicj@
zl&)Z%nh8pDUn3?Ntp)yW6RaQt&wL7J=bfu-TmhTTRhwIubss&{Kbf5pYIx?viJ9FE
zcHlj)8G^sKgMXI4yXPE2Ruma~X6HCSF-a=ZiDj>S>>N{{S|o^}tPivUR8b{)1v>6a
zKn<kb%<}5FWSXnnZ8<k}zx_QoR-d8O`t^in%D=K;nLiQ!?j=@*|AQ-$fkca*B}f{N
zH99kwyTZpFH4RW~gl}Eh!Eil~=peY;VfjImBt~oThUEiRC}I`{GtFMiCGE7w_@4k-
z|8x#j1Ka=Ri;{I>Yzmj*4j2Y!eZoc53t0P^<cZ2d<0}7OT;;7E*y|;Db;aPQusy62
z!3(Rw4#=%SfVAL5Hb;HlOyG*LowE3Cv|GDE<)`%6&+QEO@S#DXr1_2SIh?=JH7IXN
zV8K|TikjARz>q57eha0N6e*6dzZV{C!uDUwv*kj<C^&m`#}b4_9!IK-5EYJZZSQ}-
z`kW%Y)DatrAl;akSeDf>jpj&CF#2iSYyxkfJZE-W2q=#jDsfP0ZaMWe$DGGkZgM7T
zUCzH`?+BmokTmk$8BDJkaUrIy_<>KMyGKc5>h!;qojFlg^QT?nAxLfxU$D~qhz&oZ
zE5n4oB}PK;7$KJS!B=Db<xC^Y{2E>pyxp(!X+r~E>n|)07Y*DWC6=?ZL?i*Ks_3FE
zPa!%&Su7oSN74<*KO|k*4VN14cq2c2^e>9&gB9ErxACpmbt));0TzymlVFz`j5CN{
z>3beDCIs<AlGb0Sws#y><1^5(4LO@lIyshlDNFUBegE}(SC3Rk2_=(O4xGJxmg8}|
z@#?m><xD8f<PHfJ1bLv<=v8G})07aOY6lf!iejkDs0p`V*PCL5Wls_pS`Q@WV8q@>
zjkA8)lu4D|RzShUZHwXe%TXo99XaZEhAAa?!zBLY|2Dz3giUD^vh10;FZ8;86$Z8{
zm)H5alvi7|zT!39uTjCPUaXVp(z*KIwp@S!4N1>iIB7Q1@(pHgF6zVRg&_QRBWoKE
zodKTOkG)00;N5$7m3+c7AU84ukU50mPP}HvzAj3(sVmUTo+>F*`AW8T1JrbV(Z?$G
z@bgipuJiS%;fE%8aelif4E_v8XBHf{E-PX$mB1nIDc+1^B>?w|hQFzEo+=P*)}p4A
z<aKzMR}={j{UsWl|8AKMcFU;`qQ#c1t0XsGt)NtjMmMghF!h=alE(^i`{dLo?c=BC
z?8n;eZxR3g(m+Up)5iGce2fxB$B!9b>^7g(wJ_3sV`1h+VO)i%kM+0J%u=*fHmC&Y
zrd^a}zWT~Pz->#XxuXz|RY&QQ<Q?%``j;^ju~-^B&_N8E4&`uoT+iJRr8QLk>|^N-
zE9FrbOoo%b7HXX6nFMUs%a%`|j=6;+GBd<+6EaifzyEspy}4gi<_KKt$0xvI5iof+
z6NPaX)8+MudDol_&;(!e)u*~08@zAcla|}7OIxPB;C)R_YJ2R1u`$&41KK-aT~s)`
z$YWpuwqxD%#fM1ZXD+dS;C7DJxy0I@B6L@K?hr@_UGJ2gq+%%*=Bv_`kkV(!RjL1*
ztM177h&9R&$NcwZg3sAh-{G*#Vc^mc3JgoxdXR6b*$MXatcisof)GSO?>O$oO$f=!
zn0ObWZDZ`XsC8n)M`XBN_mdQ66YPmri>wN}?is9*@}(ST0qi)Lkpl$kcq1ugp1QxA
zanuQ{GIN2~DVu3wa+->C+iVme(syy&nJDICWZrd0`mTfNCd`#)OjIZ#)^dGjDu6fe
zp&d(+lIpLW))b5-dy{!`GhWVCzAe!?6wooS)ALA(XZ0|O=U{jIn+1rs^~X3aF%J`a
z{}#OF?9+&^J;I)vs8Ll`4`>rACUM;wxzXOU8M_SiJY(+Jz-;9|(@J8lI$r$S_4aHv
z<5e6kKnz+&rA-)P+ol^#0MgaC#mk78v&EJoJWv0h>1^-yiFYqQxB#8Q3RF}t556l`
z_-6kWWZkwWf6KGFc=4+-r9F$O3Hi`ZK>9GS_Hpb{8d1~h9HhQ|w!wft1()@_?e?1z
z2jC@?_~5uKwla8IWYu(MLXq@0d@wBbK5IXhGA~am<pcj!mf!NSQQ+Twd1*FbXySI*
z`zrRbeY2O)x!0WP5cZm99&1sn3*G<r?}&!V*hTU|_l#DY{I3@MF*WhiKQ2GQ>38gk
zX@>@??Tat%WUWwTsl}ZaRC~OsPv&@}5nMvo(H-PzuS(o=x35dl*gaeB#r=Gm{0u>f
z5<@vItvqoHTCXGNPkWxhm>JyF*UT>o`W^txaY6hWq>w~h{jY#!Rp|dSVClT@({=h+
z%U2<zO!{YI6F0ru4;!dd;WPE$HALTUg+@FX*)pq|NWT8?>!0C&($xQ_Na#NZ^zV_!
zUUSp|-r2Wwvz>9}!Q6JDq2b=kl`R@UwYA!@=Z)@;Ro53@%ayN5>Gt0LhqfIDN22^;
zR$|xe`RzuzR`aUEskZ<+STZy`T)>fjryH-_SXW%=wRiwt%-z41J>)2!g65+-6KCX6
zd|_h<+s{Isc%2)N(Z1O;+v`Y%C<{*=EId8u&YkeoS<b^5FaVzU_KA}sQnOY|PLsXC
zFQAjQ&7`IUn6MX{Pn=||B7&GA3JSLCX-?ryrOn5!F3>WM6J_YiLX%kSj6%IisYmdd
z;79puN&8iRQ8e7v^vuk~)2;v3Qp&}WL)sTADk`pz_KNC4e=5~mla;CWH`VWp^Mt{C
zH=@z89^X=4)(d5ZT(R~&J`d_G-a}{MwAI*Jv|A@BT96-rrHkACrRE26!UXP4M>naK
zadgUaL-hvHU<kTEAZ!5t*NPmE%q;U4x7c)Bf$M>yJdt1%YT5&xf&#ItLY!#?xo=<>
zr_I}IRLdCpb)^!|Cy;1~K>8;KizHQ3Z^ETK{kusDey^gLBR;!}D`xJCtSM~=6Ciha
z&3f#i2Q}w*$*PX#bbg&_WUqtGJ_-zs(^}y+xyBT|ZjRYN6vx7)uIGU-&)xUVGHb#M
znbIJUR>|1XS+9*W{|N~SyXU^0OH1um1NE_uZCcKKUZ<0;0(wkiOX})zEc^cT%xPq7
z>(&hkd*8}%^pWG026wyisFmq<yp{v|ifb=8oId4i)~|Vfc<(8%2iEUelV+&bx3x>O
zUguESikUU?C4v1i&tQWt;eNU>SGcY0K(o79Xc}8MKFuRq(SL=^>&W8mj3aeQ**koO
zwrp6k>r0wKE<YoMcyNKzQufX;okS|7*z$|9MY-rSots-Mt@36v7&-i1cl(L0Fb)38
zWB0Fbt3U>&s)%?{59Mo<70;*`J@<=mUJl?=GINhYwO!Po`#iu4D@$||xpYQe;ce+r
zF5aqkPQE*zgvj^lD$;MF<tp;M1{uhp&#kOsJFDdPow4oB17m_JqZ$v7yWdj18@4C(
z`yW~Ej9$p;cEh1~HcooZZwUhTq}bd;<}7EAA967+%#UCATx7?<lT4cKm@0TJs!P>f
z)qbJNB$l8^b5D1u>Z&fJ`G!_z2+=YxzE0^Kp)RY9;_Phi19p9Xs{Rq>`t#rlKMq3d
zKDWC<&k~EvHGMKymR!owap1NL9g13Qu2)g~<Q|=rScwv*9h<ZLgMO&05BBGs$0#ts
zw?0Ln>F4h^5z?ta)DzxFNmK*~PKg&qLhX@5o(`6}DNp9tzlh()cyPHeW=K0|Ern8O
zKUifw{~+;;s|fTuhn_cLc)%qSsZA|?)6bx`R#KR#lw5tLLx^XSZIaN3o;|;uFIqxH
z(KW$+ODjOusdgOGo4wl51+PBzvr4ds_2LqR@V&UE^VJP7)2q(#d;L695lR|s7BGy<
zbXFP<!Zv9?d#KU)9&jNXuiw5<Pt0iz{1|+y>480lzf3pjeo|w>je;pLk3UH7==*pa
z4iEA6D2^bE0wMBq7D7&yWQjyeZaWz65Bv%*9<Efa7pHo(b7?2tI^?c4l=2|w&DF@g
zCFqw7Cz)TA?te!Lc_&ZV&DkxQJeh_wT77c08Ch~$_D>|zg7hk90utDr2%u6T6oQxO
z7w%Wfh8IWuA{g3P<yI*ipg%W_*QHjwCF8nZ_Ccy)VL?$^$<pbQ!wiKu6v(Dr@MhWM
z+5K13{UWKslvn;nhw@*o3o2(-q!-VGI$8D+j-X!IP2M-E>%?8Avi59X2V-c7udqh}
z*CB~Y=bT_ruT~<&Ymd>t48k>fRTb3at+(Pr-qc<@$Clj`E9x!KuMnvqImUP)I$b9r
zY3Zvhu*e>cd{q2a30pfTF6u((<<3Ov+O$iI#Q34?SA_EZq_oj;`vQQ~Q+J{B)I<HN
z<;d@4&Cx;K5p|xb%38Q>&*c?u%g4<Q<Ox*#gm)x5&HM$2bEsWOytIFseT4f*unA^U
zj+m>HDxW>n3r<e7z_okbN3DkWGXx-Jp0`&3Zs*%NiPG&Z0{7%Mjf?0fuBUrTzfHT6
z>ic7D?&EEZ`+7BJO2J8hnk+o|wwj|M058eoRd2%iwl&{ijGWV2Dn&J@0o+_GLhSpI
zVvy>1HV|p0B%<a{GOm0pj@59|11YIb3~i;}M!*GpB55K>lipd$RV2;l_FCl@Hh+q#
z9nqVJ@0`rLZ$ydLtq>+XYP2IBznt&d)an93^gehPaw#hfjG395AFB5p1d^+74W!rg
z*6KVvB(Apaduo8*iKVSvI{fgcC%W)(EBax-LKzN4xxJd}5=ax-B1l%zt+8o#Hknn-
z`{6=L%t2UXG4>-#+lq;hk66XxPw&YBH{FjY0TnqWM{d{0x+aagudO26omFfxafvP>
zQ@OrM;f-MJS=Sdxw`L8~P3aTIu*=j~b}~0jhLJ*Y#?H}<P1BT(rwB&z8{<J7@%@en
za`L{V;c2U$8xCufR?~i~{sUi<g<I(2WS5Jy%}EK&AhyzKA?N;V^tV!89=HQ^N~dk4
z*24D-@ekNGsFuv8n*rq|U#OL*28>q?-^GUfBrE;tyj{?5Mx*+(s;%vKf937p4LYFE
z-K^CZb-&|z<}xF_RAhDQROy8ieT;e8*EVE-RO#TyRTuXoN+-yp_CEdVm6>fI*}W3b
z>tgoz7@_9yo>FrFlI?*&!FC&GGMaXxR_lS%6S_4w53NSk4gHCxz*9D#v9xz;?V4y}
z9tYEjoVx|YyKO$|DfLq#(*%t=d&=DCSCh0bm{E8<t-bW-e&6qvpB^WZ*ATnq*6idc
zT@8}9J>rXlR=<*oO?2;(cN;)u=8S3#%?+<VT1XjvUo47Yf!&*ebwjFL9=HLUeYtlQ
z;q^_pRx>HKiABEgUeig<aZ!~tK_%7yV2sHQ3U%fix#WjqlZtXQzdpn9Q*sJMBT48=
zPl-yicH@oAK>O-VNxGk1Y}nKEy!(BB#e9A})zCtd$|S0DW<@3Q^^8XcHrpQ;HMxc!
zTnCQz75!2!YVy(Mb5XV4)1h8ocxo^f+Vs39mK{Ku3Rld1BM}+15)~;)AwioP7S9_i
z_j2@Z2JKA7Jr1}qw;Pp}WiaWrR_4`a+1un2>hDaO<V$7Rnx8>GW!mSf6irJ3pePOr
z`QjT{Dfwn3v=NoxQ<O09UC5x9%ijIUPaTOd*Qm(I${bcsMO=Ea_3+Bv;Hmrds-zn!
zorJ{XeNUfcW#am){FPj5)ON)r)zk`)v7*s|U~fw2y14IRB12|rIy^6vdG?_jf#o)e
zqe0VNF)oZ+?o^sHiQwnKh0#$7Wx5a<U{qvfB;0*)6<3U3)0-c2#Y6cgqx0L%ac+tT
zIv0DRZ%aKIt0ac{@>X<}tI!)gkM*0vduz+lq|<EYYK~$)PM21n(-#78eZ3&u9%#ch
zNn(*x>UDL!=MUgv17>q_spug4z4^`A;Udm5t61Dzx5#^I{8(ooJ}v8186go?Xkuey
zSaeueNbhhbpW!#Mt7z2d*}fXw>Cy_?yOp4&QWagk>KZ$HD%y}xtf<P$$aPHRA|N#;
z4P65*d2Y^YwfNg{*?_RH_~GFz@Cs==Z>?VMywGp|nJS3^&$qkDMCl_~Gnh5yJ>x>2
zAv9oT*O+Y}-GOG+3mF^ZIT;nkLgjEY{Z;j^yj)wfUKdV}mzP<OK=&Sbfz4mPu!+@?
zKO@sGtIJ2TN`SVEP?1b6G-1R|rX0SN8jeB4Y}W}(o$XngHQfYi9halh;y516Jfd9g
zuNj_OF}e4*B=(H8xXv~%-b<uQ^ISXRRSY#A%KwxSgFHE`PE2?2c}-;Ul^zP3FB$rJ
z92hbZJHL1ZLpM5Ra;+4nqp#PH2@Z!S+9?Z%ML~47cI}2EIp#^e$s+OkvIJZ^yl(wZ
zOV5uFDqDE7Go2ie0b@?QT}S&d)AU!+8SL_WD1#JpK1yS*^YE@)y`dpbx)IZDNh@de
zc`O@s2{|XF(E*y)m1|r8Hg3Bg@vNot)^OqY3cI26RB1Bnl+43Wyxp%>Zj>}My*y26
z{wdqbY5kHs)}@fleAQhnO}+7;Nwt0@w(3$A08tvJ>=yNH1>2fzHss<E;nx>iQ^Ben
z8(RVy4ASqnff%pq_T!$TO)2j=+tpU5hoC&a;4cJYw9`XwYEoa?`jZb5QHu{97EPWb
z%Q}Y{%bOi0fk;=IY&g1_?hmfi6MP=`D5hMyF{&EKs;az44(+=GOfX3edjaD=pbw^F
zOT-#kN<*ItlZNCkz0q>hbb{KeO(s<eyBcKE3RnO1YlLFw(o)zDEKtTjvaX3Fm3AcI
zc=XEf$5wA{eZ+Fw3L)kBrJ%vn(70PCUPQGsm{`n$wnCvDqmDvZ>R4FdX8#gMSsv`^
zs4^?cAsJVwm3@>@tGe1gwa3Idb^I`&nHWZs`*$BVt_<Y$dOy?{mqWw%RW)XZ6;=8~
z{oBu)YaH$mbz`R&xac$3W3q}qg=%7=E!;quT)NoJvY*1N=5|jOTGa6jh3`I#iHRCo
z*_45vaoo&1YO+VYMC)xOo^b!#)bok5ioD^0sXWIaf8#e|V-ru9AjMe8yh~7bhS1jm
zLIL41HXqtsJ2>mdM2lfFHPFas4_nen#B$-o{hp!C$HeqD8=u<=ecoMz%Av7Azo}X(
z(vWmCmV07F;<B5aZHZ&7tl+n^OsuEeQuqo&24`cQH}6?%2olq&v?oi7djLI#{KCbC
zL>*j1cN9p1Zef|mXUK2O7Q;eiLz)L7SRIpl+-7U^`SjG}L>FO~h~*Z|`A+rSI6Udy
zu6|WE&)@ph9nB^9Kj-gjM+;SKe{QwOh@@8Le2V;GBs%m)>+4_{Tpo7UJtfE(#{Z3#
zg^)4wsMcB=6@T`bS{EAz5mB=}ob}TlP8SNva3^kcs7xcGg)a>~iNri=%9|0*<E;!Z
zEVxNF>=78%coElm|ITvz{epn8>l;W*z-j&k$Ppy!Kp>l*(PNI{Nv+vN#>;Qc61t4<
zNmtdzQ-)Z=>#O?KN>1tg`-Z;L0rNagv2CxF;T;rRoKK0@gfs6qLGQ$&K+g{;pKpm(
z!{yS6DL%dx`(F)hKIRX%Xu2a9_v^!Jx96F@N>2*sRc=0ml|vJasSQSt79CgnLVef~
zA(m9ZyvF_Y)7?!_+!0A@RO5x$BT6JrK>_@{gcyDWEbH6))Ii(l7M|wO_$i+X0<0-c
zf9{tiZaME8uD3x4=m`P{s&-a<6HL!&xLVw@rti?Uu2TC6KrooSgKv7Iy$I&qaUz<~
zzz^SNJCOPa-)j21sN>+IXZGi%ELX8`FUtfXhqgN~FwOv#3nJ7v8BL~#{4O7kms{nU
zSB0M*|1{wB4JXs@tz~{E!20N$Yh0u%I<VBKmFY!*SK1?)xvN9+NAJmPkzNOT!BjB+
z92qG2=}X_iYH5nR*y?WnfB{JfN%L)y)I+EY<dA8mZLa?ON8Wl?xwgRQVE9f)P+cg_
z>MX5;TWwm^Ytl~>QGUmg^Q_OrJWQ&Aui9j{wA|QGY!wt=h6kJ>izbUz^@ktAK#zEJ
zU~0~8>cVZfZ!b%^5aUKyoZ5(3tF!~@85~W%h-s;_f|Ui&epa_tMFj)}h4k<_ts2_s
z%L2d0#N7ldob~y|64+DAvN{xU+HMaY`zpzZvtgS*muF5bOC9t<smjBx>Kfz_m27f(
zKIUq|a>*{Wk%$P;!DKz9wM<zMW^Wovf1;bd1>x~NXdN?ZBE*e4p1AWM_@Tg9pBAcb
zx`-;jWLl~ljvJ9CINr#m2QAcRo=iP!=35s|yG>>3V>5*_B(t>cibwO)Ei~>i*|Ux_
zMo!?5B(piVm+-sK1GJ1a3xpug<Q~%lmcL$YNG@V~Q=TpaFe-o&TY7QFdB|yDyV<$(
zDFbzh%V}V<2*XsRHcDqNfY(fOjAxUn0E>HxAXI~+)i?Of6oTSZfm!=@_39Pza>Ej4
ztYUJ8z2$w^xq|TsOzw*3xag}#z_$o!yV%;C)$LB;!783K89zP7A_T%zs;Wva#%2#)
zU*9R`Jd-(>tXz!5h1YP>Ph=63FR9ff+PIj@N3V~X4??F6+i?7^<!`=jTe7r%7ED11
z{snZCNe8I4Bv<3>tmYipq!kCo)9Cu`In)6Bg}>$9X2`P?!s|*o-Ud!rqF9S+lN+I)
zv0}Bj*@jSj0~QQle|oG)4yN@3Ql;l)YhMwFo@C1vc|VPPu#tk7(pfh2#{7|pcdfyx
zv*m~@88DmC|4ocn^mwx=h7^SY>Qa41gveyx60~ZqzWCuCpa`@U`Bn<L@tI;~d^r+U
zb3R@$-W{l#Wj|&2MNcyz3F&%i_m8$Tvi!|cvoV%o@_8(x!%fvl$aUT4><LKa89qI-
z0#$%YGh&UtJ8B5=_yZF=zKPYEKMV|eipRHFAvH-Lt<OF(qa_NeN(+J%x@X$>3zHU7
zMLxGFS~Y6|4~JRO<$Pu<Z}kC7KC#1rB7c`DtK>VCnGSBB=Z64#NpAS0oSygDd^H><
zGj3Vdi8|5fu9K>)2L$)?Y)*7fClf`aN*9Kk18t&n_YhD1p-$YTs0ms11MDvD5{D0|
zE%OS|36{Wl=>{szBEu9;{j%1XNKmHaa<=(b$blJdQ);pXv2NxdafnpqU_39??ZJCl
z9eT#(sN(%!j&!A)f6WOA|LU_B``H6dJ24x__Uf-_#3lhiB<Kju-TRLVhE5$3uDepG
zIc%_`Y!ljafv&G4eDXY}%YeLz&5Db>tP957dfFdsqO>b~jIU;M)#c5t3s;}ljZ-3b
z^OtcjcI!>mb`j%|(X<8X-18u#R?AXE7#}|p6aW2u#4^48O;)=)mhA@$E9156VrnOx
ztK8sS-Mx4SS-w%U%=pB8ex3BpZ~73Q-sGsa&)z)5e&ce~lGH4*h;$Die`c1f$A;9|
zs8#9#-ws6^E}*VF0mlXkf}C_3?M8|cpNe~)ChH+N*@cW)dKuITDJte^9|)B)He+HJ
zxkgD;IM(}Ph`nY21C!GqCnHyN)aLSco96PWcbzZ#7dGM*8cCtEAhl~@xsyNJ{LLec
z2?xK35rP~i05O4%PQHKt+P8n!_M!DN6Dc=wSRG)zJZuy`kcbr+>gq1@IN#mDeTkJ!
zjPXK5pAAoT7%3gA(ODsB8yH_}Fw=PwxLWM+cW~BZE-s8Flj_KcX2Ghps8u1*uDJMh
zvY<kvQvzK6=^!?(thH40khvfj`O~?U1yN1I&li6hx5cQdw>EmQK|pP`edtn2pEU`t
zG}6teB2T&;kD#tBZMKVUZ})^ZjPFzu`87+Yj$D3+g0H=(;<AO5++;Xwqs|XfTx{Vo
zaXhNrv7tv$V&9o5(%(eW0JDK0qfgD83@1>qv10pxcS|hl_HV-CIQke+*HJrhyJy$T
zb~b_fBX_xKx$msu&s*MNDx1u%xlxhHBS%)-SEnR$#?M%mIJ=uA%_l>-ss@vo^Fso#
zC?}CB31_%HIQ`eMvblN;tXza~jeZDVP?;eLPoMQnK?_wB8i0~{li)^jWmyL7>>|#M
z<0eoe9D1_V0qEPpBWc*e8NGMw4-#wG)h}SnFSorVz0*~k#^xf|J`ym3Y+tSuY<J=R
zA|HqOq`gozMI`u?R3#N@9HHhG;B+FGNgg8H(K7kD&ta3Iqqjy|(&#Jf86jd`5h~-S
zDil^g>Y5{59=f@5l+X^LckyQb=K@s}$mcTHpGz!RzV8-688z7&vT51|=cpSeO7(Cu
zsLmxkF^TaF@XZ#?gJ`>7iNF5}d7*oZo=FG;WJ!t8CdtpHwliXEr4Hy73adM(K9EY&
zgkHlIlPFyhzb#s~iB-!CMHW_U9V{k?I94eM1kv7ZvqO*dKglgV(ugcjQxa~lZqbeE
zX=>$`981g3LpmdWAk(*n-_w9^BDxB+|3_<I85CEuwF@LjaF<}g-JJjv+}%9{hv4o6
zcXu1yoe2bYADrO9-QDHRn{&Q8=c~HEZr!Q<WA;?<)vJ3??OxA%p4}^RMQ7k`WP>(_
zYO)S~ERvOr_R2P#Ev|Q;L~JmBd%E_LQPWuaHLObf{87-Rr)viJp?IXqnsb<O2F!;k
zmJ~%EP|=;%w{bLBfi5EdO9MFFNPF|%V?!Z?LfyG6I2Dt#@=bm)P_yXu{^3?UPAvh`
zM4J#&J)6p=C+DQD>PgG>AZ6>0lw8Hn+e~MrzMN^PDSmWL44z8f3o{_!?3%|LQgt$u
z$iqqh%^;E__0e`FYmOuwsHUr<jY)u!e8}*qj1jM6ipqc#{KM-2&%s@(UwLp7D(Ru+
zbYV@$?}g2;Qp<h1<z@APNig{fbS#}2^i2!Xf^&l~(4RAz=;P}vlJL@Gq|+0!0jaX}
z_`nC0teK8{%Tp5G?bN2zS#r`7Q6=ytHeF%~!cN5;v(apAZ=0$4;Y4}y)^ib2HPuLq
zN~8B!#_5L}xCy=a{N1oVCV04rRn>=>=ab8!Z9uy$Zj<}(ulI9;Zv3cB7s9gV8C?{K
zo@k#<mW&QE;*&A&*zvV@St%&VWvD$au?Qg1k$TK_&5kY}t$HJrDZ_l_=4`{py$7Ia
zX_^YCqBu2B14#=}wBNXh-=M~pFkVz}J80Zw5$u`CG`XspKcNtRK0E@3%2F%fcp}>v
zegp67&4oYJZJt&V{M^sk^Ji+0Ff(^idi&KU_`1_-o5<XHtJ@4JahtwPlnWSU#U)Tx
zwlp#-cV;|J2aSr2DCdLVI|0|SUHX2?M(ro`M9Y-|Gt|wVXPBl}{oJ<AzE|O7>X~yH
zPSqMRtW+{M$^sP}PRreRC>ekZo-Mt+?$3ngZ6>mq6i*^W$4JT@GF6v+OI%uQ+h1p>
zn68WW;{-xen434)9*5Rzva$UoHx4cX`2$mqPgTlJuwEXNe$DSPv?m-f7?dadX?<*O
zvgusu)XKR5d=Im%E43R&j%63!tDx{=znRLRbcB>2QjgFzqBKH|n60C&<LVzu&fJ2E
zQX6V^?@Y-JUoXn>P_(D~7`GLcq%0$aY3h@HEN;Mojfu!t6uvG6LdOYZ#KJ~lkH3&Y
z#O7b-5;00Kvyq!Srw(aikI^XoLecPspvYKi7}+sAXz70IYg+<{x}!8+`duJva2yqf
zjh+R1uHJD${$fH@AEc7^BsCnBa*Cg6Z|43j__V*aL%NV)?wp<oC3n}unVPsFdNUds
z6XQZkqQ%V^;M0|zF?&_4f!Zk4)%RJ}W#mFk)C5}xBAI50Z##N@C3PnjN1;vUiX*ek
z9JLIgykdv>LOjlpzHQDZk3RwWgh5omqmzxDvLGuEDTd@o<R<_X4vibvRly4-k8Nji
zsZAXduwl!V)O%J$C`RSFoBQpzl!m`ZxQyuP9TOEz6e7*l^#g9c6Q{J-Aeen@A>;!}
znQ3fukc_m2qh*L3N8`ACVZ^}BgAS|}Gm&KCMqiO)oZTC@%+|m=A|DlQ&LOwkw#9N|
ztXQ?S=B=o5sD!$n_EJlOqUX)|+O>dg?yWkpEHr)9DQ_*<OcK-lVnbQF;pD*~5s?$p
zr}Y<39Tjz3V|}u+kRbSt$k+kDfU&!a*d~<YpOm!&Q8tN(#bC;0)KgnCW$0JoCHnBS
z%xM8HOn)aI9*%c+>|JfsLpPb8BTxz9#$?9JN<KH%qB(G4w0{t{Wyi^qomK_jKLTPE
zHN!E##I)2Eo^_37XfSZ2R%LBunttqTC;=|2m8SKJD+hi9>I*pN>w^ran)*iMkZ@f!
zZBfttDyV*oQ*DPyLXrWH4HR>oH;+Z?uW2{wi7)*~SoZwNYr-%?$depBu}8*&*U?c(
z&nFYsa&qRp7T8)}EAXx_6&8gnoJY?FEIXmNJg`_6aZk@kD;*j3>4R4V9d4U_c61EF
z8D0>VdxB4Xw!Q$ZO)KDOT=1kHRr|Y?Mou4F$gg|sN<<B<;WR(TInz{W<jhQZNmoJO
z7f-EH^DMBoU~auD6=T3vp>e=Zp^6Nr^yL-Pjg2S8w{v>Je4%<A7I0i~3>OlGNzciG
z7JbBi5Hi2ua;1YO#X-S=E(h15qP&qYA<lon%xH?DQ}H`ji5@2;LMT^X{Z-_&JV>+q
z474q$TRC*1JgFmuhmH9*AHVhEjGTJzCMRuyuwJ8MuK518e$7%!yBG?JxItP>SdCOm
zb8qZI*65V00$XN<w+eiuJ;{Dr?3at13A!mNEY<LQWb7Vk^4GsK?g97zRuCdR*Q)}M
zo+|*~ieVA=)Sronh;E*zrZVGw=UbCkl2$O-w<>TA797XI!;@!XK(AM039%f6DU4~W
zarugLKhy9?-Z#qYR+90i1U1dRq~EbnJHn8i(R8zy(ex&~KD4F7kB(gI^O`EC)I$&Y
zG@z$cyHe<R<XW$tFCsj;PapFxle^yrm?O%}N?pxTm@`FPCgbbJnH~{r4!X6c=e{|V
zT}dsA%yND^f^KYs9nuVV2rjc8nWzg2G)7IzRo?i9dWP&;NmBM%ix^y!=Ug7;L)!^A
zBj#5^P|Xq9V;oO)sRdJ7ImC3qt!{a%Gbw>Zz7_Y5%0k{!8)i$hE#^Ii9{3ZCDXODv
zn{Ve~4KT?P^@#F{`r~Yr-msC&CQ}XPth9^7fJbu{*;)kAG*<@QPm$vE;#_l|jJ@1m
zZ&!;47ha*q3HibJI?nVoHQVkV$TZA;0p3qd@ku#2jDo7KDbW+~M;RzvN`3iem%@kl
zFHQj|&m?yWa}6l+iM4x!wF5{_T*vX&YjOL|!77)UbvQCL85&h9m~Rn67!Ai*;E)35
zv17oKa5LR!-_lH)v5HXXGI~?_ffrx$T77tPSaiR=zOpY*BkG71$bV!3Me^NuYm9P~
zM^%OxXJ73qQO}Vk&wV>0A@xw57MFU*X?>_Zg%V}+x|_Oh?PP|i&pA*r@jXBO3{BW;
z3I+^}W<6W%^_?+u)jqk1Jlv7G3<7-5#cVWI=**WKVmcdr!D;h<5RVU2e<9*u?Z0v?
zRtFW-<>k+USYp6HkJ-m%x<8n1J{F?3EA9%bkIba!h&3M;*gVfk8c3{hZ*CPDw!Wk{
zecNf1y?yazDt6@K_=3vkah#FAJ&DM-T|2`N!oo%BW#KY-ho$@Qr#Do1+tpFc;s!5$
z!PJ=c#w~bEbL;kuG~u~0-vd-OG1S?i!&xC8FR)u`Xdv_~DK=%sh4gFZJ-Olu;I+{r
z)G7ustfkHVxV*~|D-|^S)_wI!bPLnZ&E<`4Z$+}oaI)pgk`X()oCLqB@_|NK{&N0H
zr+!qqK|f5~nnCNe6un+W+=x>AtE;hHWp?eZcCxZDAytQ9WV_RgZGguI9xq5ynAUr%
zsaLEe98XgJfwzGwrDSU%bF4M8Of<LOlrFz+Z#wD(Z*j6Z>UGlvP$LF2&7zicy~lru
zqhM;X00HhqdCuUiu1E@}o5E6vEP^KZ0pP))>E3yhxbI&gTwm3mJ@S~{;T^Y@tu16@
zt+!PcSkbmdLnpb~ajWHOkv2clJkTbXY@CQC;$vg9XKBY@l`}p0TinO^MC;F9X8TTB
zEGMDHH~KuK&21@7Lnu7>tc0Vv+C7p#ZI;QQ#8wispN<9e?F!3;=P+4}_rUWWd^s0S
zRJm$K$PxqC%tPxULzv=OLl{=9jQS_8trJa|Qtc&DgrZ6?R|?ZDAFMquf6M0#Cozf@
zth6<c5fa?V^@d6Db<HAt0E5f)LNuD=K<>-v)eQXElDKz00vRrTj%p}h^EaM0LFZqe
z^vA`f8+g~?&lv$OQT0o8!<$?~h*sEJ-!JblK}4QIr84)xoe*wQ?yMVrfK)C3&E%t6
zUO~vWWP7>KgySSP*0*pR<-7&Y?mGTBri*RyQ#=Ta1CyQttrGp^+rL?N8&?<Y9h<W5
zc+z@3v)V>=6*F+RCTKvF3X43PfTUgjAWi<ulO00+g7lPAIaw|O4plPgZBTI)+UiF}
zM`f|SRVnGa`1wTYZ~UZfw`f9U9e=`ReZYJ2#2l?NquJe-wyF!J0t&A_<!f#wCQ)*p
zjLxS9U8Vl*M5gDDj2E%1Os~Hkl_@HOqp?V+Y$6ama?t5Acfsa5vjU8?h@1`#o&ws?
z1Ia|OF%zpUXdDF|Z62p7sllJo>QL^lRHjdDhZpkfho3c?51miWjprYF%`#ESQ&~=T
zchd<2y(OKQZN8ry@Z|&lwA`>uP#;RCRjLa%dtW5bMd-oG;5N$MT~Z#@td;6igebIg
zM`dUFfq8^bm%6Tw%wI5da%Ha)2uP_M<~1hx@wYygmS6Oa;w4lx+TYUeekX(0d82{W
zS(ahO)%H`RmOKy)jv!w4B+}t>^&eZWPS(Q~)@)>2cwG6plO(g7d$GphGeDPW(D3=G
z^!uT!RXu3_@COAr#8-7h_~{wk0{fIN0ME&im!Reu`NhZUs&of!1chX+C3m{J|N6i#
zGPJ)`(p#6UMtMK_Wppox>&;3c5k_V*NZ{8auUh2oR0XdMcyu|HMU0M;qvTt^K9li;
z+*u<zXeTOtOuz6PfXl>hr?b;KUDw1ysV{^Jq15drRt9oTyfhZMZF>+><FjRT+n#;;
zqh`37G`YZ4N>-W9l|N5g`QA|vzkKx49uyF2v6{0~557P_q)pyuO2A&kml>8a)Wp{%
z@X#uX3gs6{4e#j_G89Imp|aStJIi7RJRk0FoJ3@H@Lp`q`V26oHaV+~#N**ct)j0l
zRVHpFUX`f$d8xBIUS2YpxNEi+`VE1EKkrp_WVgOX!H{XPgiziUR7ujI5lSnvLLGMc
z9t&-m{r-T|g6jc%Xi-&G2g$E}Y?XkNyJByYG(GBCO9AuQ>KWT&X;S4jNzE-+_bif~
z9)hGrXXAY`-FG6;cw22x=QK(5ch%W6t+LeI?&JwG&_DlDCy+GIUuCm<5G*N{C0w9m
zq;!kj1}=ZGwzVr)(%!qF-7kkZ)5w;6V|Te+KbZP+gw5&Y=Jl43(`0i5uCgfsO=spK
z9)c>Hub-%lHTY1f3}@+A&$dVSI!8?<IIop-c#p>5i>$}j8&n5w=TT2y)S)AXBs;4z
z{61B0?{f>$Q<xf{9VIc#B8-%&h<)C@8?vJqmhsuk+!^%xNNUbq8U1yaZ!XE)&>HvD
zTmW49rSpjn{@F8VLju`Of;7FNDcw2qng#FTd;75FYUO=|Rj3Om#zS0LEWYXweGh_`
z$b}T=@8DIG^!F)s`tkyuYx54<iGVVUiKG!w=@&={IadD;{K)a*Qt2F0=jA&BZO(id
z`I$IV^$^#`?aCO*Y}Tx>8c&i~a&FH`h@3R;**L*r;+`U>1p*p|x7*#hjGVC)^u8MM
z+I$(88KiD@3T-H|)CrAK8mIZ=z5`uDZ@&#)R)drZc|e6d;`qcibRfzSHk@KM{ZTS=
zljaQ$DO;|4$}p-@9;n@8r69dP%^)`M#qqt^v|;6FWMh#!qlu#XQ_qx0G)H&Nvb6op
zfKNf4>XUyR-UkIQ8AlN09Sy#WvIB*CF6n-qxtx3l3S8&)NooFUV_6*B`&v$8S<jeC
z7v>A%fK&LhKe6d{J|rg7(Qh9<IAm%D&1a`K?DO1Kjkm2}e*M(+GnFSar*u<mi_ki=
zP}1PJY6#2Dk+Z33e|cu}HKDZYu8EMYT_9R5F8fT;l>YSA5N-3@rpE1AJ^PMCu;{XS
z35_}{`wc<8V>PD>gf!7zEhB2PLVZ1W;<lCPy}R^jGj<M5_LV*p&~!fe1rudG{%owy
zQE`2R(S9Qf*<Pl}C~pjm<HT==9HFvp&#Y6l7D4tW(tIVR%*W|!*U2SqZDqAY<xe?;
zL_b@F7Eku)KGskBZu9`1Xas^&==SQ0wRRde{AD9ivt#rTse~M-m6>4m>cuU;hXe?4
z&9_ix`lPM?;5)<qv^d%rebW3%q~7tOoc;SwT(x)<)H`v<p+AY8hC>fk$oM!%?N&v@
z;9x-PSu>}e^{HB^US{(Q9OqCKRQ|-+LB=o0mKq$@M>*U2vxiN-Ja%p6m^6Xh>yKkf
zF6(*2*(#lUJeS$--{om&#80Vb=ENp4>K~tCt}q?98J4|INAhqOp@WSJ774K<cdNAd
z9PN}UN2q~{e;fd)c3b68$p7f>P@IE(N4$y68IjZ3&4+X6&afL{89)Z-s&6uUl$<~2
zs|8gDE8JqvS~yMwv72>X+#Su-dw(C2)(3^o+e%WsKf|B1lq}zpKV;(Vto%`y^A&3Q
z+&^>vtVNO<0KYFS4snb_vuqEn#a4V2fX{&kY*C#@w!VH9@p+8AZe&>GPJ2{+&i4Q?
z5qD7VDkP8oZXK9(5nXypgW2gc6r8ZS9r;<%su-J6nH8yV&}<?WOP_vRt-kx_dSEs4
z5IHwa+9Jf+J=@`LS8?D3H`kcl^(BIzGpk*J!|t?&?Iaa;u<ZLvn|1W7gZr|#3~L;k
z?a6MHY4?h}lV^=b33r_ni@y2D<BzKA@1LbV^8CZ*Coq~@ifrC7vUXZ$*h$M8H!K#$
z2_oWn$a!FdS8kSIfV?Df<jVkG-|$$u`!&c};gUIcyf7St%FQ`|R->vauW!KNmI*&j
zfO1fo<dy2sz1+=0(|D+Q9)z1W3DhTWu0|=L_q1LyE|W!b!<-L+me#iUH40uT->>M-
z?m+XhOx##+s~dJ{;T~(Ki%oA1BEoynznUM!8d9IL?Z3}@kPn0KY&WcAOHv0KlYPHs
z$f<qbR=O<xy!Uask@Wbjewn}DK%yi;Fw9_#alfspHM?c=b(SBZhsAn22a)y)Sg55-
znCW>Jdc7MkmyM64DEKv#L;bL?PJouarN|D1h{qe=q~?5H3mz=VpJS1M2KBqwOOqTM
zS}9;IP~*sX;!#5&neNMUrFdIA(TdOH(eFWHgOT!0Qzm*`4t7s0FO#Rt4#6D7hxM}B
zPY3~VE{leQwk_%HZUA|u0A`JGMq4=!8nwEt7MV5Ud!K5+d2wtB8iSQecSfn(cR+Wo
zb>SPXGMs$GKQc++TYBZwGh`aY(rh^a!Lha6&xT}kA+Tf=7hmqDO&t0f0E8Wv3G@|V
z4{v^9TIkoT9GlK)GJDd^;t;Kx=D^f5cHej2^fVMC5sA$o=S2_OpQ&W_Hk{EiupcJ;
z9_gOnfuk%`#0IyeA<g4Erk=f|s288}#{GV>Tvfsfqu1}fwG@jT2mqg*6osWEO|s90
z!K0}${4S@!n9VaYgN|zealj{po=%C|`4C8ZA;0F9pKsH+GE`WJdVl(KC4|v~Dlr?3
zgwbC|<pcz?G{+iBH7;b+uw<#JaeveE*JPM)9$Y96k|PA1*IYRG`iP>x-)J!1Jc#$Y
z?epVD6o#B~P(cO^`2sP;k_s6Kq(8`ESp8;Q(wCenC)7P9x%pW0reP*AOE>iEBR{hb
z72F*b+vMKghR-kc07Bf(z;jac#IDs=A|FcM?ai}-nu)(A?<GzAO8U03zBOKxVkCBL
zV_Di_1U{9S9y|T*@D*bbh(hXfjnRw#YIGo>ihR2E#ku~U{=HElW)+%T7uvX%E;whJ
zu0)3OH~L%$lt)|xNtutLWsr{*?49HqmXpY7Dju;o;%C&A&6*NAL#I<VOdX__X&}}Z
zk^M?nOv7J(1V0F^Gv_D%<I#rG`BXKX!(Z8p@>Sj8lNTM`L09&d%?4fJm}h7E?Nnm5
zhro$8H1ARN#k(^fUC7Kq{5fxawCL<m{vX!eiU^{pNrj7%ntHyad8c@}`67&{!)2C)
zhHE6Z(7nlXj4xX;OIB+6Il6rgY$Il^DTnpTJ5eaKnWh0E0syiL{IE0-yPtXBY2hho
zMk!I8+~ic=x5M^_G3CAEGIyPM{8%lnr4bpy-R9F>s(*|io*ub5pywT}(bGhJRI!!O
z)uQUo)pg5BrC9s@-*Soco=khX-b<@{t;<7LW4DH0xK7+O8IWD*gtUyInTl%5PA~h9
zg1vp;2p&X@nA|GTmv3nsf!g@SjdjmlBUy6tZiQLJnkSbH^<*w5(g<56qEQ{866QgJ
ztgc@bC^9}9V|QN$M)`%2qs@C=UGn<vmedfE`8qEs#CQ_X2g2A!m24q%_nTST|Diw6
zB|*B~&<^I;c=iZSk#uJ|LYOFmK|8FwM;B73wd-pP{N7})F3z|%?L`3yB}<>~#0W&(
zpme%N7Mwt*-_i)$`B`Qq>&^Q#!Mct)x8uIxFF)wOAWkLAY*2Wj4CC^%G`>_N9Tw+;
zeJh-_;I95IJ4S>2>Z%ZFylnMdA4KNCm0<o@?36sQjm?_xLp<P-xEAKW2j(5h(4_k<
zQw%;3W<hb$bW)ghsQ>#H_SO)3y$QjYtF)FB#jg!t<#{NFI~t|tHa?aav-c$Z)RmEr
zGDOpG2<3BI^yub4`jLOOL=rWmvZPzsG3Bcq24&d%*MlDuSdVYPve37jdtf6CIMot3
z`7vZJM6H(EpU^+{_HXeP>gsTcR;NsG0EBhLe6To>_iz!a;q#ooni6M;?svux<tM4;
zPQmn9*3wEP&tLP&gWg#aZmvt-pa?jAwbZYCXW<#(o(?HsyGt&A$kr2Wnt9-w3dcoo
zihQ=kB9{G0=Y)DP<bbO-#Uk%$2%Dbz=el(`Dxi)(C2y?Mx{yW$$9Q?NH)HB(|7;>m
z1N2jD4xL4{19@uC!VfhxK<;8=la$dTnm>)Zf)_jWH(T`lCx-jE(CF5*eZ~HWYnNH#
z)hCK&Y_nH`ar*sBE{Y`Qw`g}s>WBOQ&zrQf{yf21L4^k$ITnNgIU9uw9`E*uQ=T&2
zY}96{Npe|EC-V{N$JHW7s)6Ps+o{z^pf$x>{*-GDZ(SMR0~K*q=^Cr2VTQ?(Ux*R~
zvAnq_qPkT>HIbX5svqHerS@XZ$ARHR#Y}4C+OLz`;{yl$+JB!OLL8)Tsp(hP#UUR6
zK$BjI^AZK=C0vRL94L8Oz;m}D`#6=>hJ**s^6Pe!^Id9bg&2E56oqeW8EZ1{mvF`c
zRMSP5(@@qT&L#LtU%4qS<kFB<9FNNb8#SZho;hr!!fU&>M2D-c`LJj_-kSt?P5j9?
zIE^fq9^R--HeQ^9(f~t+hEo#i3(y!4KZ&sb#rRpd+A3boqBUvA9%hpdQ%;>QYwOno
zE<u3kFXHY@<0RgJM0Ai$N=i>J91PYL&?8*8wgRr;*glyzeM8EWC~@Q)T^_2@q3Q1T
zuMUiNy&f+?-8i%s-O=9s<Z67AeKC^e3)jeeIq^aud-G*$6NL6b@KdRwQxPV~t(g9%
zI81%Y=O3iC3Us4TG|cBtP$~0iO6ZEZ2-6s=>ICc8KqBv;Ee@;Jh6m2U*{o_&3PLrR
z43B(|?&sEfx&{5@6mbG{|M&o+W?IYMDJNcH@sJhvt_`Ft<jrI80qhbhUo~HT9q>kQ
zdkP!P0~3S<Nvi)OVa|ZI=*-s}p1yCh)I|rn5kcL4YFPPwx$>jf#p0j`&0p*y!do{C
zB~u#<(X(gh)|TjB_bxaVK-f6(Lxq|Z5elWIKw0Z64YUQhJ6#~SLMm>^G%EVTuH_jC
zW_O4o-F#3^G(N&v0DepK&pfCl+SQ?<|1cMM3CLVl+fqy@^f)=xE0F_pFtE;6l7s}<
z__Duru}*`i!@NFTrjZS|ML{WrUdaql($)5@3$qvN3$|?ck0VG!cOT#_IQ<u^Q>eJN
zHW(`=CXj$3qc2Hcb)XLYIsCqa@iDQ!L++Nmh5+$HaFhsnNi_n_?t;{U=C-~E6c+49
z!lWAL0E#JpBFVxi74oOnVAFtnD9p_;*diE8;teVi0tn~xVd$bQ96n5?K<N|Re=|oz
zI1~3i+tp*08sLz@JBv3C=rWyI2`u_8laQo3ao8B#TryhJPv=zd(8l^z_<5|dSFn=W
zy%n@C@<#wzNheT^JJY-O;`#CRwNPL3J%u-^BK9O)fbX+u7^qg2|1RtkeS<(0c=6nL
z`{8&k9}*-^mJbQg*eSd+?|-zzT6|D$_?8so)4OaiZ3^qdNT(Th5S^wU%;eRuX3-;C
z{yfq$E>{MQFL*DR7o6>tevb^5UQ0W`f4=<@1Dzz2F@6y9i>bJ6c+;@WP#bU{sito~
zfKhh>9nf(!_P&5KUJ6&vPHL(oNe7IC2D5w^t-Tk2fmTPF>h7OT^WQmhVa1>&3lWpm
z7wMU+@U@M|ND1R)>5>;9Sim_b^#e+G9c5e5=|mgc7llt^yEiCSD_wIbheC|iBfs*m
z-&5*2!O$|+rMeSFTMpowu8IXFtQ4b5cffFhcA7e!L6{pO@ARKS&W^q>t<$wdNW=#U
zVCJzmLsBFkqTZ{<E#4wYwm+0%o>bQf$=nSi{$2F7AMP7Ax}Jz?<hKr;V?uj4xpo#%
z42GfTKU1rHlSdA`!q}N;<|VN)5<T3JNv~iv{zSYswe>zvImj|BO!Uc*vpkxt3n=Zj
zpptW{sdXDSYE_Oy<%jSfJH>z}il)?)pj)FP`oFS$f`kg+tb*Q~?W!@0R_ICTwAq|1
z(kCaS$<QY8@=gE7>*|N5(f?EVBt-#}$lO-+zq6NN$ded(k6cfp_!@B$O&$l}zRmB;
zW0=`kEa~oCGP)V==(lN5E@pxi!0~fN6c!=t1*cfsRnSN;Di?(nx@!&z3-2GS1Iz;3
z3+@D7gji7xXm9m!g{fa^<SdLHQQyl7`d{1-m_*)m1X?A5)ZRD&6F`2Q16QCOk5LLe
zt_?ETt!E~;J>s(MRD-|_Lj!MGM+f>yqxn~Oc02Ng%g^t;*y{LO?+y?Oj(#4y{rVea
z0(%DEaI<fT^&9P_%pBlxad*0uTMWdJ2Ix0QoO*t^pg15KO$z5&H$VEnyHkDf>Kb*&
zCD~PEXms0)wX5|2H_;4T_f$T9l&5Ss;!UOOsFAKl=YIj~!{54?TM3~8w;Y)xWc1Kr
zlsfaz97Kq<mhi76SLQl8-9AFnBeDp@nH&?z9j(nZ-z01tsq8|-AUT>I{e}6A`-Uh#
zxjMvar&$~)Gf4>{lS2vt`dUbJYu7rCsF-Lvyg~*M6xGH$=7@*vha&a~+q#3FIXMZC
zsup|n9d<ImzZ>dn`?;HPEJs`%VT7#ZnQ|zADDN0>SEx5oC=|bLj$N!CmyO>5@O@a=
zW?$|gdsSU{@V&yTKD#vSJ4ABR#0e}ehxF7O+#{j=<ky)JyLx)z9CoGkr}dF1bbjP%
zF(|e-y>05@NE^@O%RH19e`cUw>H3Ks=y-%cF>~kgugH9iQhR*byvcV0=BkyysCjRJ
z6CQLQk{ygyQ+r!u_C2CX>?<<8x$Q0aHiG(uuR&s(B6gkt)y~@i+}&AfE2AP|gCj~{
z&TDVHw@TTQ-aRe5km`rC@EnZyeeX6#6Z<hHUKKuY6eN+(jBLsINN&56zwIoO<23WK
zqXY4rg+gTc1Wa6o9@>g~fV3hU1=oHNhB8mH(>Kk3@BCZX@mW%7;^AhQdiivJi0U5S
zQ~DdKt{KSgpds~0<9L6>#9ZUVNMap8tf~W~?cs+-d7<-0{GTX3?&ar(0~hZjtplvX
zlSZQ-DDKth?lu3>@XZ+=&gU9oEDB$fVvMN_{*LtGkiD3I1?`zMq3%DR#O9YXiNam3
zG{(h`v(B`14EYHA7Wks8!e)Ks(~|$7muEvwEr#q+!4rT6WzU{Ca`j)|4Fh8Rg1P>#
zWABCUo6!HkUl928eq)r%toQHSBlM)og8y%*ikXcN_n)T1=pA~HOu)fl(o2qyS?4hI
zUzqU;0dB|5W#l@oa{S*Hzu)MTJWl#+{hv#|aWnp_p?7oNcddW@eD4^(_zw_<9OpZK
xvEcuMFaIA5%M?sK&#?V_96bQh%Kw6r(3|G1(ru2nKcFBVX>kRyYLTx2{|Axf7C!(0

diff --git a/example/k3d/assets/alerts.png b/example/k3d/assets/alerts.png
deleted file mode 100644
index d76f62cb0bd3d5bd44f202d91b6c44e37f7b1161..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 84885
zcmb@Nbx>SQ*WfSi7Tie)?(QDk-7Q#v;Lcz{6Wj^z?(S~Eox$BTxWn>1?|xhR$JST7
zRa-SvGq>;U(|-G$^E>@ZNkI|?kpK|@02FDdFDd{4)%^bTgok`j>1)Q1c>jTN5|vhi
zhlgL@RNQ#K#CI0ga#po7cXl&&Gy^Pb?QF~#oJ<_e%xs;$**Tv>bqWFi86f>dM9n?z
zWYx_XYi=3tuZ4L--gnRQ^y@V#$j`Hr%IJAI=rQJEWm#QlReoCNUz9^t@}*<eWJNzr
zljX&%9oyEVey_1HUlS6Q?)jjCBfh@x#6M`}x;MVsTDy3@((V)j|0^6K5M31hW8ftD
zAKw<p_doAf0=dj|<o_n;k(itP=l*POS@^#XMtlBF!1yNzx=PfQq9*X494_OGw&r_#
z&<{+<R16G^UIhIgJ}-W<u|!A6Y@+;+jO;gV3tTQIBw64#vqH-5ue(=7lJpF%zCJPF
z{#EZaDP5QBpQ5reSlPJXj39pcwtSjEjLn1hpPZWWxJ>aCv-wX&g?^Grlfj1%qoG5K
zC=(?bXZ%+I9|LEf-Vzd|OL2Xgy)G^-V%mILDF1EI!6LZU`pH?MOt6u^M1Rs$TVifW
zOEubIyN}eDsF@;<L$6(syc|xR7+UkrkiplHl<(gLik{wlB|+A3e!4bnBwS|9`%G<P
z0y_Ws2Un1Ynfp1cQIJ>tM$SxSy6i2yS#<;n?W=~wzr_j6g_VuM+mSpw=o+^&nu>0`
z45Ja6i%(=?dw87QXpGHOOf*%TRba)x&CCh^ljE_Gnu!4d&;`Mb;m{>;YHDi8^nGpC
zg9RYEvvqWIQfOC}X9UcR;**nUfZ4e@!w#IJ<n+>*SPs@s*5x#hji@}DH^L3vlb&Xu
z5YFVP+l3E>or!I6>>Jy660O5g^vTa+!H9kq*qo;cG~~T2r*d`K`5gzhH@$qWBx4`g
z0AS_!uH^hcp4aUbN%zUaOs+s#y?T#-U;DamYhl;d6GFRDqAhExEJDP%Tkp5iaoyOb
z8K@7BXVsM*?1Ge&L!!dN;=9QR7C!5)+{GF&WO%i=lcCfkK)9i=Ex&5*`B?J$JOD5w
zf8#;bz2CczfpC2!D<5rZduh#lrHx<p<<U_HC>+Zm!aOoJ`=idOu}77@{5G=IRMW8E
zyqQV-@>T6-{?N%4clEqvFSx_)IW@+mbKK*h@dK<MD^kksQr*<%nd<;=d`&U0&`VGE
zdV?Xgtp|Y<K`c%TQ=jKC=V#Ify7J9#RCxVL3{^25rn45E>+tJBCln%qc7gQrv1=Fi
z&kRYN^YPd#9SORtCEXGqiE|23F!Np=SX;F*^Bs|iAR*h+%EE8zsr@zBx#kmg3JP}+
zu?eW3NX2!~(s)N3{$7(J)SpJ8_D~z0<oOjKbsC->{r*@E+r~Z0|8$>u7(pPEM)RXS
zDYLLNJvo~*Do?lnMja-(kxho8q_BRS#8*x#_0J)B8ImG#Xr-+o(zNB@x@=fCRMK{e
zuLv_67ZV=8#!ovmF2lX9(M5|w)M(Y!%_smZon?D&f>sPk2V)Tzb+cuY*qk=+7k2FU
zu~9kP@$}Qv!&m#5LeOYd(dfyFyl%tX+}vHYmpsRhvSR6ONW(BRAWN;pZ?b{tVc^sL
z5*y#P)!957khlADPRJX*T;KKK@9iqg*Wpp?J|s-R*N>C7L#c$*I)GMwsJV11g6#SS
zsx!TYtdwn5^NSG7b-f{{VK%O@)%K%udD>DDBtcKJ&Cr4s%k|I0fFC;a`0DdbScA*2
zL06m6l0uZUCm}9}wP0p&ex<L2$U;inwy&Y|9s|B*T8+u+4?Rl{3>01fkm)_ZHf$DK
zSuA&Ogu3fy3Mc72K@xu`Bb~tpy3V;?M#ioLbfzcH*6UhTDr`vkFM}3KAD_IQmYxPj
zTCR2nuTt*Dl9;sP4PTwWKVm5-Yp)4;ZRaoT(mm|jd}}ne*E5I+aV;1e#A>rkYcI;N
zj7dkR!l5!qN1I<QYRu_mzAa1iNq`QeWu0nm^Q2AbH7920SJ}RowJ-K#f|2qkw%QH?
zD@Hb0lyM?>XdH@fR4D#l)2Dd{kW1pl_@)ore*Lk{z5{btBc!-Ll&Lg6V>$gsQju(U
z@)JN(m$!9w^b82!CDdy5ghnN_&U8I9)k(iBK8Z`vH0!4-37pu1_=zs++ZfnnEiphj
zFhHqN9ABUgC>iLKl$O$cKp_0m^QsK>q~h+gw)(h~0{3?P_j-N~`?`Jr0F2DdTWrT1
z_0vOUJ}YKCq~r#?#Q)kB3xEQbYrnouCwPaC5DX9NQ3)yP`!iD0=R#=dh(mn~x##r0
zTxy})YGC@54pF-=LCBS%e|u)3x#Stlm?npAv-r3aW*7eA)cwi|i<bf$86e)>dVVq#
z4JABPxlAru77-CH^YVST;rIhiR@KSAYOh#fki^aQ=QRz8L9<6brlwh952tZ7u5*{q
z89W}Kp^8cg#x&3Cqk_?tGD5BZ^O`b)oAjm;1X_U11pvZ(+Dg`StIo_Zk$}F%PwA`H
zUq9upHso29NR>{VckI!1HXY3+BpomJj1|vZ+z7q0ZqF@Z;A#xi^EZpE!lJr-M)K9Y
z8mfe`=~a8>cg%I~*YmXoK`7Hr{cU8O81K(eP55AV&N4i=$S<$8+9*80#yLgRM^Lg1
zrK9iy=Z<g`r=Zuwpt7o~p%bsFCFCfl<ku?gVD(aqOO8McrwOv%y$O?UzVop|pHrV3
zYVP$O9fjtRmk-QN#(*(XWIQ-zKlDX4BVniR%Awf5F3t-Dp%@sXWg1TV&QibGpXXp6
z#unD-s*7p6_Nvn0e++zeL5`3o_|gL#6Fs=CtD_C&C#7YmuRe9FW+;>Rv;Q=prlaFW
z#}5%w>!+@q=GtYrUCw@reCy6tJT_{p&6P!@{c(e8a~ng~sr@p!OB9>-;Lhh;XDSu<
zvp)~KI7?@lQo`F2P8VBGi_yo##Ky=jl97Ev&j{+;UT4mGbb^ALn*(seOCN;D+Z-64
zd=%4b3UvO|sOjhpzx*6h)103Sj4Eb90OGAjnW<`yq`o4o|JmtoN4vs|Bb10hL~$i!
zyPA_^_8%9h=E^@bh$&+~w}oL_Sep$5$mrovZug~``pv2((4xXpQn^M76j71R2Y<<G
z7BkckYlxR>O)o6YrKu{-H8k+=H%8&Q6*7S2Mk+Fil}R*p7-l~_f|_&+G&D<6e+6PK
zJcU5t)Ur-(7Ns1Aovp}?RwO|ImK;XI%)O(s6p5Q36SqcNd3^*2J}(H|m1wH>Y<99H
zm>YaFHgGlf<X4$nQd0k&7_ag9(4mY1I?@2OZD4uG?F%tMl;tST)u6tFcr5_L&qP}W
zd_2_4y&^O04Gnu@N{XR;@$dB}8ojCK4%gGuP0NT*14}`nd#;fe-iK8h*tsA$)MD9d
zCl@i_NO<{dw`-2aLWV?(e6-c@jMvjk_8@00KSI#&v~u7kg2c<|O*>`qNQ&Bn01lZ?
z^1H{ey0R=QL)HZ9nL3EB)BMGt(iy^?o62&UD?ZbGWGPgT#)FGY#k;POR-E^2V;<<Z
z@5}t<LJt6zA0D5-CDpJ!#aZD;DtAUJ2~n|$G00G0f^jS;KktX}-WI^Z!9v5qIG0$+
zSb56mcrqDmU=nss@?>>p#^uLw(%6+Swz-fuS7mQcDW<^66Ig3{QUqMX+q2B=u`+PD
zsaE92bKX49hFI*MRWOYRW$Jvi?$k1falH6ep||kIHDyI*WQC5uZ*^QvF)T-yu;jde
zvLK$54fxw+uGZPMjfX5VLBq^GIX5hYq$9qo%@t>>Zt3{1qPZRZKHbGdRh^J@`JNtI
zbO8Ii%aW3^vdVInGhGcvM%r(0iYTzVRU5*Uw_;4ZEnXaq^xVws+>^^Q?Mx;~pqK=j
zMsNdV+q?rlU1d{;$Kj(jn&c>?zJbaGSyRk_>#b)XZF^JR3z&hNw)~s<bNNXbO;b_=
zVGs&hr==w}%J<qLkws$!5hW}LzzYON7`r3?c-faXu5QYmxQE40Nmm;h8cI;GDzuA;
zLyh`A^8@0D#g8JiUI%|la;j>jSVOTF+r@<(w5ftVNO<!f^m>CN4Lg0<co-O1C`vDj
zk=e+ciS^44FT>0nCDh|Jk4X=#6122m|5VNql}>K<KG8T~GU}BiTI+hC9SD7AcG{A&
z#YAEsLx<!tJkHrsJ&ch5s!hRSp6A`4ynV=l2xCUb!atg`HIUyljH9u<z`*_0K0N2b
zT|x}a5Yf!aRz}K+?n_h~p-rdI3TSki-g0kq1V>N6MfH=hRM^I*vVwf$mI4+#Ef1{1
zN9BNEYJ#Y|IhL*}<iEsX{AYTCE`RI7t@jAoJcaAZF7C%X0YG$uVYdE$d`=a?=wMBV
zmV3By%bsaKs7fAtHz&)lY7;|EM?u+4O!mnMz2M|18~Q9y>C@q#et!)ZF}x>9w2Q#9
zV_Zh?h%lJ<o6*8w=Aj==!@=Qfg%4<{@f<!YXYjRt2R|ZX^XRB#KeMm@`AE(B6`Fi8
zb0K@nCb`L5?@U&SQi>#V(AqbMG0D^2JnIyXg?CB9k!rI~JX^*Hm!Hgv-O%M;#xexS
zO*@g|n&1D#&OoqQvS_jfF_M^tS;zC_i-sy%6h=?qw0~g<W3lIsni@?psBS&Uf|P~6
zuY_{<@|WYUQ0r+XdS3IalRt;Z2>b>3$8sdKZTi`It*_+43!DW5neFuXqx?POA^nqs
z3Kl<E7{~)(4V8-37*uGY1{>>ZC!`du2?LbXl{a^f=`6p0kC9QQRX-nKY)n}3L5QlX
zK7J4t^KUUQe%mz3?*73N0Q)?qos6ANEaY|0%bIAWRvx?5qdUZPMaWyguED6v|C}*3
zJx>Yjl-EQW3OFW1`c=MUY2x7(T)AOB{fXs-&YXbrXM8wLwPO;vBp1}re7Y~r(B5;H
zz~C2*G73!M^m*AQ$K9)n5NE9?bm>te(teZ}I*^W&L=FGV4eG-(GOaJBYVf_9S>zux
zSdoNJ(;vg8z@>`^CiUVCi3yIrj?gh3IUgn`2G|L;2Zx(nctjxkHPNuF^?BAsrCJ(T
z>8hYp%P1BkNofIO&fgNvzBTJr7{LobK{1%=D~renAZ8WQJj6E1MV)!<QQh+{5q-0?
zy<_<(g(|+<IYK#7qQ<`L8s>Sr*G8CZ16KOryq9d^wu`cb0}G_snyKHT*4KQ<14{z{
zyi&aBO0kt0u;Y@PEG{UPmKLshBn}AM_b-BH!c2k5-zleC*k<2*LY6Wn#(Ln{#`U+5
z;qStU)|g^r!j7$JM`W+ALQC?If!t^sJV3NKdPp50YX+T471vZVD9fhU;(A2XHnM)E
zJ61z{=%qZ}8W4)l&L;WEdPPh4E<VlS(7FC&5x(oBAmd%RWHP!tYU=L8pRX<D-Zy&Q
zL=WoHNwH!1^nRa@m*i`4bKCV*M_BXHImuEHr)z^8akBDhw-xe1b+zs9yAIkQLCg}b
z&g3-x=^jl)3FX5qLXJ3f3=|+`yY6xqS;e_;F7<nm-GnPebEJD&yp{GsO~(=m`1t{|
zuKA4LTkvP=O|~R_wr~CAbZp76Op1oKjy4!PUk76bWLc^QC>7a#)6!R0*3>mIGcmEY
zSfA<Pd%vahhvT+zZsi(*c<o(JSk*4KZckxjyg8^O-U~kto=?QV@vAHs7k=VFtgE{R
zrW4oL36^PXjJ3%6#1Rk{30mL~mp|E<{aDsZaU{>C(!`AU5`vdkrpWi`v^15;<Jr)W
zjUhHD^tRH6#&s}KP}w#;qp-+`9;{$nP%chWk1QPx)J*q;R=wKZ>WDuO>%_6Ma_mZl
zmGs>?!RzblE4HSlSc#+~1Hw9nmA3Qn8anzP^B`d(^W-mwhv`a=QV2^yH=Nb<%bb+^
zA`wKnhD3X#?Tvnnf^NQBFd8a`zP?S+rE0Mf85qVI5}r#sL?5IWGtpIN15^l)NUv4d
zwj>amj*eByAc2PJhTCp3l4gHch>%Z9!7w-IGitGpCD#od&GqRK_4V}$vRUngoxUO~
z%_9%#lK4efWf_u63jih*v0%t2Db&p9yMvR|3Ytm{ap<T>j2$dZ4Yj$@ewX?v?Hdun
zv*k&ohJ5Nn71vf$2fs<DUwAw3zM#D7W|k@U(!K7X^qd9>=<YpAEa%s-LM#MQXp^9(
zYU~x{YlH)14Rh^a8{eP&5V=YY@=&mWI{1in4_FXbnSoZQFj-!5Y#*X@U$dm9|MUe~
z4dJc|6|2nU8CG~WPr!e?HtZKX42y-q(HaZHi;>E^SUkv}jgW_#<|xRnd)FbC_;~HJ
zUPTZo#)wW`5aw3590~l6tUxaD`Tb_2WN=YFl%}`6>m>*s9VG11JMErAhp{;-*qi&C
zmXfRA+*rHj*f!Y1&Li~mED7L4dp+(2WZ_5UT;{x|N>hes7)hjB)0Ez>8epJcVg6R=
z9gR(D*Tbu7;+n`zIA6<Uh9GI@hqWtoucE$yiAa*r-J>!NZ|p^R`~xM386Zu8F4}~n
zK_j-Fa8;^2A3@uSj{yO>3-c{Gb%CkLE&@IfmwOu6S_JU$O?M;wstKNF?l=Gd=KMV0
zsDG-CRw4@jh(dsArk9%NPGRs_eKODN&lO8Bv4*!hWA7v~dKyS1#Vpx%+d9ic?wm)1
zrkG}^jAlp<M#cz}2=f#yR8({=qa4y3c8-qCH(J57JrEJtV&04x{$e6|dlCiE4K+K<
z?d|SwVqu-)iVurZXmi<`stKAml}W%-&oK0ql%P5d4AGx8(u9mqAk1Vr)IyO8%0?@d
zkAd<S)MeCL9W>cdu;#WES*uhm=@yQURh7UI6=u_aKz)CN%WLBAM|M%lWrAx+*=fQd
z4|4EH|J`j!aMgyXGMsAZ0TE|gm{>ATH^E?Z(Fy2xuaK;D>ie>XjrlV(*jQ8JpKS?{
z(G36T+p%?R$WN#*Zx=fsFgiFma@CpsWb<w&5a8GA=`vj(Il@T7JvGcd)+BY(&;_tw
zIqJPQnZOC)K7fweJ(&H@IUU2PC}cZ*ay0`W4|A-O!pui6e0_q~o6o10FF$5)KMhZ;
zM_I4l-X8NI9W;C-hEAF&1Tx&!Nr0*w2TeN$czBY#tuAsy1DyJ~(0x|3v4+LRkfgQ?
z?-U|D<@BE)M{R7}qrtcOvO37bXKtOT@kd-Qr7o%q0!TuS+ne8P5+RIsS(9N4L1bgA
zY0weLNfkR>LVD(Ve4j@9wWHk%Uy7{qMTa=C4O$i)vRKGLm%mjs80nil@;4~E=NhZ-
zkdc4kp^m{-BwgD-GPZQI1iRL_)NQD(5=PQuf;GY*fcwXEMa#1{)sgYV6y0=Zj`lj6
zJq$(>7j6{<)FdQ(rbeeGA|tbsv$pP4Nk<oFYHg?1yKvhIsdm*(j)g8QVXS&P<KgLk
z5#4wP#^S2eF3Je%GZUFpXBmZ9G?S!~?EBk<tz~FQ@a#MVHNR0`*Zj*qJOB5>Ry7%z
zv3ZNk&J~9@T5UR{^w&CvrnC^2n2}w-5?njzWhK?Zztt`dle7o-rSSG+{NBhxix2f^
zk~kQ_s0!wChe5~MW-{-}m$3a$ILYzt6y?*)=MX*>TCA>Jp^J%ZJxZvINL0A2)j_|>
zIo#;))^r94KhYoWw(PliTl|kohC^#q><l|$v(bTYIk^%#x?RWQ$cij5CW8|<5wZTN
z0y&FgZEc&E_miN_%5Evx1XjYey64?Hu&i-BVn8AksM2ftYuT6A(2o1-;Uk9=WjF!n
z$%FQ}jUHF8x{t+iRH3ye?x({Zfpy|x%|*o*tKK7?i6~+otE0Awh6>PBGtKGWhff56
zpJiEjT!3rebx>s+w@04EK8-j@zgp(AkFG@R;orBHrpIzz$p`|D%^S0IyNvzZVL^|r
zNFu<GvE8*jaGsF+u6!!{Ou<%AnN9Fz-JP;A1;YO`#6eD8yyxmhBbWEp;tEaNK%}Sb
zbogDz<JU;Ibl(%xls(E{y9-U+$Dv5)iSu(vq|cghNrnaNE-uq{>!<zf^K+$jFkV4g
z^tM=Gg#BNu)693K2Vw6(gmEo<sFCJ6&_I=pv`hEcY>#<HcJ<QhRYg6H1x_9OV^FZp
z1s^@t{QxE8O+N+^V@Q@+%~SdUZ=^yZ(Km3qB%bc?wYNz}Wch26PiGIv#QJ3N{)3%=
zMe9-xLLM<ZVLgco)R$;5m5E6DhfVLCguug#4cqESXo%UCDOpWuKCv5w1oi3PF?A?!
zBQ+o)0j-3(3T|>1-7om~_}BT8ZA^H|`cQO}yVB>RY!UK~!M2vlSJo)t*_DGeQVh}M
z1ueMG5$(V6l(l2x$TyeZLRww9Kh=E?ASd^J(zbTfO5So5p^01N!=|_<P8&r4$VisM
zcj8i$EYU;15j$NywNi~iNk-ytRe%qPjR@%I^5P>(ot~)N6G>j=4vwa2iI&3AA2l(5
z1p-Q%x=vhtx{OI9yO*tti!SvXXc<Qwl2l0wvfp$PVlp(M-85-!G+L#(%*^-A1zvO7
ze~T!;>%H2G&E9Q4*4O7Mk-KIM^jH*Q`9P1q9h`Deno9~&T4_Luw(D-$P2f8blhhfX
zjK-{;xuij~3~sk7KNa?P3xl;9<H1cr^*evnnHzl}eYXrkmOYojlv=|K9`Jo1D|RzT
zFh!N;rk*BXaMVLHvouz1m*PyT*=Axc2PCbT(0=7x3LR#S=IzvrS5nXUHgLf}YT))}
zmCBUa`w@tLcv{n+y+0Z;$sO!uo%Taxb#U2C7c(q>I5myj>yYtqWxUlvS?o^_7Ah@4
z8o?&lOA9|=@oZw!K1}C-Q|^ZHH>L5oVO5z}qT-*;zuC)n@`xhIpbd(h<gBk}*5Ht)
zdGgDyn64u{3=+lf1vlO`fNjc)PRCF#;?1}!3kXqA!ig=sxTrd7s)GvZuH{el_0z)_
zhiA)%CB+!&$}t=4(^lF>gJ2kR=GR1QOO7O}*g3KPepUgDepFo`IjEXy)LoW6LlIFc
z>%{y#oG}WE#8cMLsn&H~_`T`bc&_nNN3Cm$rNQCqiZgb{fciU3mYPfob7Kt)=A0~{
zczr}*W@(6xnJxL?tUzB}366j6k79^Ug|ctpJoy~T7^MoE<L~9Fs%tX%EkP~#rG5~=
zhW3*L%!h&tt}E+&c1fed)2~@&Bi|=YpU)8*iZ>Lh4dwojWz*I-i43vT-Jzg0mUQ0l
z*KdvQgV@(usK5M<RWF^bN4u;wrL~K{*~7~|R$(gqJpelxPHK{xu1RTS-1MkXkwK#I
z#qxP~8Rc|8+=RkKG$^XPP_`paG}~^U@cW$Jl$E*ZSNaW3p#ppl+bGMmkX~_9ie#AA
zY9Hl~)3c%oW=A9^cH;$9f|n`>OS;lQr~zVw$l#Gbm5G!5-l`x)CQ$m)ERq|CW3ALX
zf*E8F4GjL*$;vRj*Fbpku3sM?Ab$B|Y_eWc)A8d+akKanP2%$G+<cvxLu}47q`#*d
zVP}MHgLk`mP^3bLE%y6nJA^qH0t44jS7*CYQx4{^6ASz@a9s_5?Kb0x&%z^fJ|3_r
zMY6Sk@|$;*{=9FBub`Jyfe2*hV`hy>j7pv~o4B(gH&mPe5xs}O)VG9{#_#nO>>Jpz
zJc(f(=}Fe&viFA}U)BC+XIxMWDx6w*1V=tT4UJn+JMp0~!gm30Z#^4&WM}u!<aQWf
z_4pn0eH?`4M_STmf%-)CKUwg0))4vVntKI$igvC9f}ciX>6=}5V1+!be$t<LwaXVJ
zrN`jZ&F)eRu2aV|M`4LBp`>xBMSC7NODIyYK)u^~<@`|I={E8x&|abHG<jPs({16`
zD@*ToTa(7e-jIjimst6lsD_MlS0wCR;I(L3F7RGH<>$HI5>dbGcjhTc_>vGR&{Eme
zi;nRKi1(~2`f2le{Aa^)Dzh_sYM(HzM2ra0_tqztq`D|9oAWBzxp;UAb#9%fH5<<y
z##kH?;O|^&*r)f3bO^0vY^e(OeyN?FbIAXORv_9}ap6!t`><o2KarbC=VWIfOLKk$
z{VT5`LDMg)wLCfdpYB58$Zu}6v(Rj0oxC6c2X@hT3Hx$6>5Ed*PPAZT_IgHy->|8z
zwKu(S9u`*MOW%wk5$|hq+M^&K*|Tu%h*^t?-;U*7hvK+c&;>>&NLCpNft<W;P|2-7
zsN<OCo5!=SJ(+F@RA7is6rHWRE9R@@Q&K?)D@iS=whX#}cw1T+ZC_gOqLg*?{%l{6
z-q8cUlam=!_@1VICDztBaS0xhfDwb*YI1T$LQOOz-dKsxNq@ZZ<VkPzIWQ&^qV;Q<
zMA5#}*<(-VxTDMI55VO8cWl<=vbHj{>4hStKhmMoT+Hm8oGgu12cD%==DVD08E5a_
zhB|pPO<krouNzOdU;}3=x;JkV=KrA7+H;z*!-D+$-J|()%XnlU*_$NkncH`{-uqvU
z3I8&(frtDrlznR=iRgAOaCSnLICr){hQ0mo05LZj?7v9amuQ3;S_D8RXmbL05{%R!
zi(&4>fg-96-#y*vq6b116%9CkKo|bSxiMaf*&>eR2qw7C=U?EQ{npgu&kr!OaZ&yB
zH5{xF{RnnXhL&!S(j{ndc(P4nL;aUKf4s3r{<kc2(W7@8@ZVZX35*W^r~1Vq+W(dW
z|MBMk4rrs*vi=AB{-1<NR?$Bxf+7AbH`@Z^zwLqlg~<O~iT_vC%jhF}4<`6eEWrQ9
z-v6Hk7ve6T$c3Pd3%kt3f$L@i>Z_UQvT*qx-e6MI$gA+*k-oqaL7zO2hq!wEjiTPn
z@XBoO*w7#0bGssJPa=P_MG~7THev(bg<9|DSJ4oqSeoJGv}V2vUU7*Lkj7-^51js}
z8sv;~f!^hX^3>GpcIj*$Y?%(f;H$2>+p;VRoMIG--mXm(bZ8f+unw+VeyU32<Fmv-
zER9z=(q!n&${C@BgL-_gs526i_u<RHK-nsgb>M<(d*b0+5Omn>iM_lYZ4Jm3Wnp{^
z@Jvf6?>N%v)CVPcD&1_h4<_fdCFA0}QK>qDbg+EElXflmNly!TlWB;DVsCsj%>pWf
zkc`f3jCa-eyF4D)l}tVZ?~g)f+Fgxs;U!^+9<1+5T-qS9ZJ$B!at2ZCa=7IDMDHxr
zp_>gNiPAi?Bs#1c+8bScd&oitSamvhoZPrH&rIS(hj8D<-jn3$;=QKET%H!fQFPtj
z!u(l*Do2mr`TuIldylT74Fek|M$73_1P6x?t(B)?r3w$JclU}9PX?B~51p2hZ$CSa
z=juN{KShrEnxy|T9t@#uVb5?35vs2<H}`~-jo_$@jP}kB3lnnB!(vl2?^lz|qlIF*
z1(289Q$JK`xu?@FV@b~+<Ekb%(m>Db&4@13*>hi6l9^TV_=ENE)cVt+iZI@9IW3__
zt@*I!#NSGHR-+E7B-Mw*NK`6R-yetP)Cs92?`~*ReYC$WJ#bhzJhg>Up3WBQInEDw
zN7h~uS?u$SS6mV0YNXl?k%PSH=k%*De;@zVMitS-ivaanJ|mE<F6RJ0pV>GCufBtE
zG0Va`uQXGC!YBxyFVc66+8Gy-3-Pvi8@Wn9{*fR!Wj)Wq=X0gST)|)Gp-Ol0xL?OF
zOuz^nabCWUYpCRPUb}Y~X^mo^)AgNvI9TR|^tZ>eYA`FDx!I0<(!hf`fUwNDn}gWj
zK0iFb(4T)_?UQeC&fb?5W|i_p=pT0W4$ldBJTF^Q$CGGY4|Q&m>G$u~0tpIIkE0n?
zJ60|>je5ro!xe+}YA>BKqC4>(ldak|D$sRe?4ZYfa%2Gu1tt3D{dU~+hw4S-a)TaG
zPTzTItFuJGkL6He=AIueT}9%ycW=4}T|M2-&hGW|geVW%HBqv;-|mETZ3;cns=ci2
zw4zeujh^8`1vBV9?Y@LLlpCFz&#*<APm+9!NEPzQz0EaJuZ+TL5Z@nU<1fz&1{0B8
z#V?km#-INU)+8$4ev<PoHywz?ZIy*yH$0TZ@%1O+BBzTZU8P<5E4%EQQ%mvvhGTPj
zA}HyIxALKBcU9uP-3V(a;iaK5zhCAp&h7fN<g?JZb&yeR0+Xdv&{!vtIvyHJhUxn8
z<@+>y;hLlXt^1fbb?g%gk?<tNI`58Fo{MulU+k@rs=V%|Q<a4G9=lP@x-K??ZHYy}
z<6N`tjjK5Vd7EYY^TenMP;C15yUiIIpTF%oS;Uf4MWQ{t4kP(eL>h38MZ*E{3iqHX
z-EFE&Ip5bL`L)+~Hr)jddocZb8#qLzI`H;4A+`0#Szr40df47yNpWJn!*k<r98TUl
zx|lZ)J`l@iZTB;u#1H{LKKqwGHkyFoRCI}#b|C@oSNkO-&|OHBYa#Ef{|Dp@({4Iy
zo^(;Dq@oo!m)9Ks(2&Cjd%UkUNGO9~bE1W4S9U0(;Kc=%>-2zrGaa1jT<1&~tuy(!
z50gw<&z|46pMTY_heyYa@#2QT8x`Gm(hv9^Y_v~qHrsgeI09r*c8-ouUCwtDwJhhn
zp6%9G${#{t0gCet&eW=)NMpJ&R5eVSK?d><UKh0wNi;-z7rMj?R+uf5EYA546`k~L
z`@HlcXOm<(?CrH<*F`@Vg6Yq_cyWn7XUcuk<5xdHYjZl(>uIs9K{6dcI&=0`Sk!H|
zl+dVXaxZcK{}|ARBXA?e8dUe+6^`S`{Ef^BWm~m)IHO=V&c0GLc(|-JeAInORy$*n
zCYV`tw|R%E`RcgTDYu>g2Xr}2>R#k-&uvGxu5tZt@8L1d)Yf`JYf8Mm?_NnX9ct!f
zMw+|XqgAxQJzY_~1MzBoIq-B^=y8(Ar?(qr7QFdg^66beeiKQIiI*5?yU-}hEdSM!
zkzEg-Y@Dw!6rdUvp1XCCujat*OcCJy!_>uOK3{S*XM-=H?dfycwomTw-v$YX>T7nB
z-CCX{^XBD#|J=F6xT4(05aod6weP;%8UHI&98Jrydi%VkB-H5`HxeIj?+hEA*?j;G
zRGUW+OuBX8@7LOcgXF^s6;jZNd8l1CBXy@46QQcM>e6Kkkt41zP!PkDFZcEc>)ENd
zHTp-_bTz78`lB)EFypQ6<{XH%TUqd&ZJsB>C{a=VqFp0|rC&}}u(Kcm!^b1Na6S!h
zJ7A~64s=2`=B<Y)G%RWW(78gZba&BuGjglU+Q4995{Q24JL~H(H$z3B3-SMf19YKV
zaC4(jf1v&R_cA*pF;9iHEb`_z^+lvx?D!l4Y{xNiHk>Cpq~LEG$~BP9Pz|C&-NbUO
zJT;mA-j@y`{mPxfCPhtkN0WfW_I%$L-@{)jN`32|=jE;ace&-XrTp2DC%N<tQUJqD
zm3;+$F@3V5`x9TLk@nO+TLp2_68+;+E9spvF}%r@5n7I5c1t|0hL(eoZiLcYM`U17
zyPuj=X^FOxj&+Ilu*O6vByT5gd$4^3GuNb)*1TREByjMp8XAcfdzLbVk++~6Tl;D7
z)31%h!)2;_8KY*R#F&Fu<*Amh9rk!pZuXtVIfx}&@*1D*$8wLj6cYFIuGG`R)H>D8
z(uRhiGnA_iu2_bT!7iqNX~-T~9NPmc!=f-Q4xU1F^hPpmxfB_SS|XOR&RDjzdR~%$
z(M*f-a;y2V9OjtRhXEX-(x<n>dfCRZSanEzK|MZS&D9Fzy>1WY(ys~h_&gG=-z3M5
zoM@MSP*#dZ3)>HjaS`td8!o6cw(Ehsm?4mtJKoZ^3oyTSndjGW)&?eUB#D&{TWJ|B
zrVtQ>H#M|$&DK*U`pf$@5U=sSD;KYZ+kDMSjRWV42`Wy$3ow=>yq43#U=XpZe9~=y
zt5+4*$BXOW?5)+(hBY-vYBny$=Z(Cz(oVzXWc*HxU-~_TNS%r*9$$hl?Fvn4Ap97m
zWN^84%~wa&ApJ_1dBh2r$+SvWZ5Nk>G~4e&wwlKZ?bbUkz%@RWnZDPmI4A&CQf^cA
zdD+WWdPt;!VEwevc1UH^9CMWZ_<W|;#lT&DjCEw*ib6}1ah~ZQA1P5;UQXgmGrQc#
z;ha$H1mpRHax0T<hzp51SBvR6pWRuE{Qa4VjMb4Lo!Dh(X6KP86jE3ApWs@M?TumW
z(?&8998Rj?<Jaw7b0b>R@>lxqi|t;AMSSq<bKleWQbKE3#@{$s!%ojTxgQg-z0I1&
zfpkQfFkYx?9Nk%l*-hDl;?;ojOuymP%=EBAn$6d`o0BqlkLlBX%<;0veBR^l9vVo-
zXJi}7kILl8#U(WXt+c9<1(g|2ry+4;@)Tnq2(%oW41A7zNk6LP+>fYC_p)|DbNkHy
z2)-_7OBiNeCiC8#e@)vdOX&rbCPX&G*rJgW?;0767>`_%aQOu6SYu@6B+vs@v@lTo
zp^A``^8MoUgF{^!<n2Bw-&7jJduVVSWkO+6D=*abJbpsOM3*q^)hUop9c|NO9QNbn
zAMdaVqXSv)4th@CI`?SSklCHWQikfj`_R#VEcKjzC+&<ugi0F5KbAY*m&czZNXKq|
zL^=OL%S)<-OjQ~Dc?@fu2uO*Z>e{V>2BN#jMY2Cz0({o_I3pwF({guhuqiRKnDpys
z_RfX9Q|YLZZd&s7=Spli3rn&&@>Hp+w2KNOBTSqma&h|n9~sQxL42si`Pf_1v}}E;
zudxRAV$L}^SBi45uKXrS*omz4K&IlmBa#B}lj(;P`E~)|nHkf_E?p46W@M(m+in86
z+-sG-Z=HA-w_vzHH2kOGSZtvaK2YJ=<~Os%v%8+uIDTaJr9`N&z4C-IGM~$6xBI5P
zRwk{H92ZDpEV=gLDxeh!I(<q<42S<Ftw>k!qgYzn79o{W?oGoH14YhT#<AGqi+f0z
zDf|q=F=P7cnL4S7pyV>A=QR*_S=OrZZntHP2FsD!jKGjxzd-6QPUj%*IgDse^^<G<
zTHxBd;o8R}BJWJL3!j$eb*OLXRUD35P2zPPIyA8~pXd~r0sj>HJNh({Nj&FyXevqv
zpbIyJr(#%2Kq#3*Ks40EZds)ygr?$EbV+3@s<hm)$f8o6WE@`y-p_+8*NBV%w&4aY
zbtP*8KuN0cWTg`Ik(p(9n@ArdI%{z#1veH#U~&HrcE;w5vonvdqlh>Vturvtr8d+@
z50ug>R?x!%8A~)R$tz9?E^KL{J#~lz^zx=0o%-qr;hRo=h)?T*CUgLNtRhRI2DIra
z2oBym!_PE@AR)>_60bQNhOz&BXf`gSl_ptX{nURF;`d}$7RD$Dp|I14r7xJfy$627
zN79;y+Q&jPYs&bk>~G%@B|$K=OFK0s*o07uryl+D@@0cYXP0MhK<_dOuZIBSP`;_0
zid_ED*usHyuM1)X{DN5IU6w*A2=aw>CWE1Yek<iHHH`PYFfa{PFe)36(q9684w(DH
zG@N^ALyi4usI%2)8n@wd_?jGR)i6_7T%nNf+9xFjH3sPyZfPu%`bo-0r3<3@XJQo~
z42Fle<}0f#RE$NQS$OX@M|>pVzfAz3#|S~c?D|L*!`wxIQU~$+f@}XCmVG2(bN6fH
zPSL%RpN)crhk@sC!$NodGFRyFCY8n(5QhI=cK$Y8p5ITUMoVC7mS67$qPhZo3}UZt
z1Y;*@Ho$)(Z`06|u{Ncjjzwyhh(xkzuu;Ti<+PM`OaGLV;x@|u#rop#+;;&aP+1@@
zj!tU{g;~&Y*UM&UWxLcM>p!^vqa<us&dh<wdU^fKr;&MZyc>3FxCF22bghG=J3c|<
z!!0VBkLz566SF2|;@q?i)7(nDmlBk}#*}cgyob|LzhZ%8<^@6&5gyxCb2SDkuj03h
z4)fhOH{(kKZgyfR$fG>wzqo&JZ>#@=z?c7a3kYtVwM}t9a*vpk1jBxT0LbmWLr;HM
zjt*oE-Y2j=AF^q4Rq%!wUfxBhw`G|cPq1wX?HkR5)u4$j^&7u`d@d-xOVQU@XFNmK
zw_tB5DN5cu($W5)#8_2Le(=>{H-Pb*{FrXe4@!#PMb$2~CqH&3HCz#y#Dan8FI|wD
zw^LL-cx&x0ax_g9=DHe&Autr`V8|>*H3Xj3mW4>8n|f^}rFsV7QHeZ<WU)klBv!_P
zO+$I2{A*W5#yeh#)Q~yyffC$gIN(HKCofeqTZvx#cK6_XSSNb7=G2f7Gu_2i01f>U
zez+&E)P;^Vo;K9PT0|Ji(n9QqlJe4Yujl&#fXB*Q=mwvu_fMR8=S*zvZayy9*Vkuu
zz!(rNdLW<xc=NGv{K%wgC*ecJh8k0CKCq>W39?_ufL0=8?HuJ=Y$o5#22tC^zRx_&
zA$3yYwO-tv!!3S`D~VU{HDo$zgX194RzN4V?&%>nd{$i2<U&Uy<yV24rr(<hz%^(k
z_B}kRM_R^xd%lXcyDcZNoL9Fig!L4SGVP@c$<ja!@R>7Jf(6Lj`5~oL21l8{{wQUt
z%FF+e>frPYgJ5DT<PvFfz`fpY2(5^+J8Y?uZ_4vRZ_;ypv&<DHis##`&fMpuCq()3
zJs~h?KJQWu;gDr^eobrH<UQzd;;FeYRU#aFBo$v}B3c$e_k0xTJ%vSOo~065p7Ihd
zE6)_r_RKB|<RE#gUJpBm4R^J;nov`l1fVCnqD}iRDdqJO=fRW|T}%09U$UHkSB@@6
ze*}Qvf4elGu;0GZYEti=FWJ0y!;}wRE3!hoVCmG&pZgx^E3mDg51y`teSKcV_R_H)
zG;T*4l34G*;I$KH4sPjUSB;<tiit4t$U<*4iCLZ>{R}vZ@vw{X05ugE<gy<Xu)GP&
z{Qcy$7N(c8t@PkQqi*WeY$k%J`qO8~)X&IbvB93u0DN4^%<c+Ht-L{s8Sfa}aHVvu
zIsiOAex}C1@Vzczd)JX#0&H5EZ4N^^S1sRADz;Cy8I{;M8w4xfBu3`f^bGWrT+UOI
zi|H6GSzN2;K2i_<R9e-QF5I4m5fRyo&oGR3G4DCd!%~-uw;1eDE8sqLt-TAx5BOdu
z4HR%v6?SOGgw(m#Q4Ax>oPiCsb<`9VmfY}qmukIZTv0i{I~ZTQsO!jtTD!ZV;zSW^
zh%_P+>eQFLgp9j8^*0D{DUd6iH!n=OfRoG_v6qrjUpj))))bTTNtQitz$>HXaoR!>
z;i`K+4`LC0_3J%{k3mBHzHUWBuXBGAMr@L=EKBFr>q`PPBRLut_!#aNx(mdvCbjqJ
z2<w`4$~nLl!`eVYg=z2BC^9BEpAU|SKy+;}E@{Q~nO6T3jV6Yx?IRXoX(M#ETx6EX
zyQC60r1X}*E<R51$HLL6^R=yRsC9j028A$^vT~im81S2Ra{i<yzU7EA?pAO?$$?h6
z&a6S%_Fd4WeTYYgldYitfF*gBQ|4Ydx`eiSrx!Er2bAsuP-5H0+)BMU*gd@TB`&|P
z>0>slZJ`5J-td^e*^zq?Enp<@^;ifg_gs&8NxQ<+$9$De0|3kt^zgG!Eb@nb^=D4U
zEQ*y~E|_ojTaEvDFlSo)Gj8GH6SU<R1kXKw`x&BZmfia%J#SRvJYs061bXvwl@$hv
z*0TWl(`d%?pGi``yJ_Fh&|4Bcd#;X?+Fq^}XLF7`jrA>ESI!a)Ni_q*3BElxWl%=0
zFYKo~y4vx_tbduA-ohkwwcrj1G5SGuT|~lvFuZ?}3$QDqgNfIVt~`1ipTYitA)-SZ
zMkdEFmd(wPuQN1U@`1Cmb>+J#y!A1N2n3(|5i|FflWxQ3xgmTr@8Mfg#bQ_iu7!Aj
zF=~V}9vjRdjXe;x4DNN=L7QgV<#zOn{(CU6nv5bNq2XcEJI@`Uyq#M|stTdu^|+0Y
zyS|)mP-%o8^!MzvjS@=tm`cvHpjtMlug2heU*cZdcGAr4{cVZ~Ie0}^uj6Lrpxh?P
zjv=zy#rLM9xN{xk?D`N?JF=XVC#4TEpI!pJ-Tx7K>&Cpi-#J_xI=!O_?X3O!Onh^L
zF_*Vj^ZLSYTHMmJ!gu90Tc%NUKH%?7oTyZh2!Zqc^^EtIxgF_DDJ4t@26i*~tboWg
z)Bre*WZhW%WM#`AgtnM9WabgKOfq6I#+2&fn~uM|^tx{UydTWis3MnUz;Vm5^b;xH
z!e$<#ba^vw02(w>7h7L}jZV(5y)k4lTKs!z(?h`vCyE1G^7q|6g<H9sWP#%yUr^MV
zaEp<m$4*8=$j!Foyjy!3gI$_HOZ6#>{z~0h?%wWAo&Scy+raOH>eGogbq@xb4*??G
zOa7{3^7Oi{#kLBA%_-7sr}m&C{^@rdV?HbP9(;5zywv`8Ofa2+(A9_Qyf73N|1V1U
zYCs76o6Xu6zRPNGt$o{`-E)o0+`u7}koBi);$F(KH-`>VT)>YM4?_vG<JqStL;~2i
z`L~t08K9<Ne>!N>9g&t@3x7KZ%N8j`(T8h$97>rZ2{T;0zLag@OS&n04IC=k6`J$D
zcnC4^tx&bnc1Hm@ZBuQJ!UHcq9dfUem`FISu9q;aXV0zg?5fe`c?6$C=1vNIYDH=;
zkHx2s3Gnrg{gh>Wy?y-v;g?k;gaBn(Fn0N)`R30`YqPwL2=E5ie5a7G>}d-c*Vk5_
zy-UH;%B+@RNnO8u5;br4bBB!|4k_)~>A@K0syV(da`xu8#iVg99xY!Um<V5XonlD`
z3<R`SD;VmjeU^5%S81}M<PpIU>>#JsHOn?j!Fyc&<=-u4BKF@a7k#v6BGqq{+d}B7
zR94-DI6BXiL9Z@{xm-)i34{WjOVN0m4({POy$D3bC{QgNF5;xA)%F`rg|3AB{zM(K
z#_CO%8=jjK6-GnLk1ZB-hAWdxXY%Bb`^zufD)nbK!@X8}qvU!POV6ArKKfeK?M*L(
z2^&}Gl`hA4|BPUGQ;gSg&*;Kp_w7(ABp_@o?IE8|{i*M~cplLud(eb=e&E)f^pxvY
z4f5H=tuIx>*+TkuKW}xI-uD(R2%^Ic)?<&;OYdad621&)=eLC0YU%E8T2YO@h{yrr
z$6s}KrOnwo+1h)O7(uxoW5LESqK#&o@Imx*->iqorIWK2h}iy2+4)dOOg$t;+IF@G
za^@<$6}p+$jP^6sx7uQoCu-Sf70r0ozsA{=6HnMK=)w_fCFn3I&S3C+;`>*h9b>xZ
zgyo1)q>o!?n*ZxD$0o5=I81g!k{xcXb$oA+=bk<qS7D+4KW_XxI;gI3=lc!0#>c<(
zH%2z}qloTJpH<_zu6njCTCBA(>!@EVve(@STV0%9I@oF03q>C%EwZh(ucU0?n*jeT
z+lsX$^Z5N8^|p@tViyK$lJ5QG=S!6J+}1(7_j8LDUjmwFs49y}8eV@{>m;XoHu2!&
z7p3FlzQ}vVB|K59#y7rW13i~vUse`t<!9=VjfXY17Sec*tpCYL-qQQztOBN(?eCkO
zM4Hcccs$-=LgVK={_S7M8&@umaD?rgPyzoCs_VKJsQ-z!vVCF3M)5=b!}EO6{=4Iv
z|If(i{~#>wtg=LjmSSwWU~j%qlkgul`0h@D^@OzX{_*~DKK0~yCq-vig-W#6K@q%5
zUM5i9@@i=RVP?MJQuLOV38|@guEa^Le6V8E^m9{t$HzxjIkxXo-bKB{UAwrr)IG$S
zTY^hnxahbz8VLvwoVe98>E1)(-k+Hi3h&JhN4d`AZo#WOeV@edx&A-%zHuRah<}@P
zZTG(;uD8RMm0a<QT>5~0(8OO(*O~7_DQB7*l#Efoyq-=l&&pQiOIGAfAootnO*m9i
zf{Rr&(GY&VFv{NCos<vCcdMQI%#m-ru!R<Cl?u*iQS4%0ENhIC3ULn)4o<L{{w+#M
zdUem<LAWbBfojM<7*&)tB;fk|XT3Aix36n|-@Ao8TW0Y#Z|nKVn1sz$oi$}4j`d;&
z0%DsBcQS<<`Mo2KTIH12Mv=mp)cS<@MDPLAx@S@G=l29QagP)R?Ottd7p{*YCxqB#
zGyS~IX9X9z9SR`F0aL3Fn6i3LA%vJIrAF&Tv59EO7qUa^nYtP61@4Jbc6J_STPrR}
zW)L$;W$R6ry){XXs$5)*X{^>WHe+dZE`6MRzAPrgJ(<%UF_m5ouOXS>cA>G-hm{s^
zW@;ys;RDv~KeJOnmeb<Qr$EIK^e;YZG#{Bg!9y<i#8RBIUS*%l_=$KqEnWQ!pFlIS
zMl4>Y2}Va>#<U*HQ*iO<Fcxcr?^|T%dwqs=?9Nt|&v-25{CLiP9S_g=-W#d5EQXi!
z35B+~ZJ-bdZax^7T8yo=neYD*xYA=^vMSq|UdmsVU0Gkexe_H^ZFoT;VKM$XI~cd7
z`}Pp?u~UI_cIWK9g4q^w?`u;?Kd9ncn<v4kra58k*7;Ik$YM0mC38k}e?3=i{Q7zZ
zF=c||<=df$AiV#~%(4?8JH2HS*Y<4qT<#B{G`F_U=Dw5_P3HD?Foo37spQaUt&oV5
zR6)G9o({z@hy(4(umG}I25sk(dp-B&P<r3%O1vL!BNMuDjlR=`tN8BD(<5~GB8vz}
z#9uzau}Oy9KY^f;iC(8K^&3CGANJ90z2m6-LHE|u;4%LDn{Q{<WcB%36M5Uy{;*{=
z)XQ_PiNWKe%4xgdn5FUMJemaxD%#OLF%HM!OXi0oOTetBqzJ=WRoBj&Wd-ciZ8!}Y
zqY8by7*l=;czlpR^>BF!I(pI{A0Cz!YJ2jM^Hr?u$}+AMTuc9G4gsh&g3)g9U*=Aq
zN~hfBBM|YP)msn&Er+EFvl$8GzZaJ`@Fe`U-HjG9*ir1_g<v|mMb1_7?}xijHUsf*
zg8hYWv9eL&mhN)iz`@czgPkHi#?Jo!9xjG}*-$~#QsnBM^L+6B%9F2s!$bFng0K4{
z8Qo#8Sk+n70xvf?7c4IV0xxYnk_!4Q=WEN5mu%<Ipmvvoy>W`|oTsOIapd&cLka!G
z<ofp**FX>)YDV2jWo(6y78#E`&3Zd4tLLz!P}(S#>jUPOt2qHU8RWsvHx1J#HufIo
z%hiaG*JsN}B$(m830T<i1y{4>HVnZZS7@PHMyYIQ6+Rwvb(K+_Ztf>LcfRe)l2CPN
z9!xz~2`}|Fm44$7u4R?F*GGZxBkO4H;G4-632!~|>{GMm@CawO@(z9hVeQDrZ-cJ^
z>+<ZKcfURz4m%lk^5=AhXeuo%aQVtvwF!AjXxKZhrd<TQw7s-FMtOUT8G4{eg#H;B
z_p1H2lEti;Syd!0FU-R9U$FqPJ~HTntUm*6<h1yfd?&3zNZ5)#+y6}D!W@%ARyX&Z
z>M~qGlKHzY(mYWYL}$H+*2x6tSM%RAY^B?MbkT7(2Ox}w(K^^bH)gMaOmFwc?`NOM
z%|h1Fu5470b~!DUZ<9`%UD;gw^dDSGuxTb1{yz4UyBL!`x9$JAje-rmW%M*rZ6N}L
zlQA;$5W|r-prWzhu%w0FwAhTVlAFQ_pVn$*bguTe98>@@ZoNoWi;0GukA^1;HO$ea
zwD&e^Y3H_!9W{r4i;+U+J56J&Jjb7W)tG^<O{MSK{h5)39j*Icb)IjBX8W0N+S_<d
zHXgUZDif86G%w!$m4~!|(ynbXm)#3P>Eb$ZlfC0HRW`QJgkc?p<PeIs<4J0@gkEMN
zntqreZYdJb#hJF&r2nDys1YiJYqV;7>Egl-tox35K6GaA`ARlVEDL4ugYJ_&A`h+i
z+d)-r#}}pL;7<L&W+gYr>u(;nvqLtd;#{OUZTF4*Evl-{KJBYsCM24q8qP<xjXsQ*
z-fqiNak!{9UL&o}Bf6QyC6<P&!`?m6hKF;xnrDU91$#Y<$mzck#3GX0Y-HC~)d?TF
z6$ceag`Qtz&AB>$H!>O^0>VmqGRbY;l2>)7`*xp6Gpu8tXSNPA)0|!oCak%(d_!#n
zpZo8UTJcD`(bArdgJfHi`m2)WM~T=^@}nBkCa_B*{7X*q*nipHPcpA6D568ck#dov
z0_b{-Ni;&&*8UT4oiDFG;exu}*V{=+hEvIPdmG6!zBU=_Om0`lSB-l`bz+~Mi$>#h
zS%G&uouYYZR?mem|2OP=XMfJ8Ya<t}XR|G!p@-{tcd_;CSr`M0y!qgA>bw3u&Rv=T
zpYnFxg<a@yb?E;O-rfQ#uBP4djS*ff1Pd12JwR|vps^4jxI=)Tjl1(gAV9F-4lnN7
zxHSZKch?3QXj~fTo+jTpGqdj8v*yfM_fD_9)?RF?_O5z%?UG;p>#12co9Y~AHbY$}
zb+U(via4fdzq_3E%|b3NFty3k`GV3c@YSe_+r^m?Qnc!nVk|K7d~MZmeuIGx3#r|D
zLk&xSwWl2n`<{_MHXaW+>J3g{AEu3yBXJ}B0#ojN(=20geaY`;)<KM*n$4@oG#iI_
zD%`)@&-?7>2IkF-Mo2e}Ens*chmpYblJ85S0<nv5_#)xQ)5{3#%bRb&`*yKgPEZn<
zkAJ?4*K+!fZIu*Oz+9RCbgwli4M!X=JMb=_Ae##;)GrfG?~=~c#=V+-wR}n_^yKx6
zcbEKQ{#UA>|B23}@dYART{;`{hYEvQw3ix#M)Xf-Uo#qyRp-=?ca~s>wDR;U{Y{Iu
zDs`v#juy&|^-}NrZ&QBDB8dh@0p<QccE7o+&v90z2m!X=J)@oO!*^_kbz=xyt(=Hl
zTjuqrANTjj$@c3R7<6rTuKcMYa2(xFNkt)bBw~(AZbCRVUAMM(3U_T+J!g>b={6aG
zM%wTNKt`i2I&aItwP_IAElx8cx9?@k!lLk9A1A`D4>lyL6Ej}SBHX@ehhub{Bkp46
zmpxpDOx}2^RDWgH8JCEtavu`;ej!4run_4<qwjij!+?kSex~(>otLQHen0W0wq^2l
z-Rr=GMZa=zb~xFSFuRfi8k?9Pz9-2Ce@>&Y8DywU&p~f`E!h@u&LjwZo%iu%9Z@jZ
zB1B|x{oN@-w2%Gf;G{<l%z<esdbQuUrvlQXY+Jh3SJBX7d*KX(a`suj{-6cL(X0Qe
zT~!HUQMre}v=X@O{SgOG+{xJr|AB}<IHdc{BA)Nps%ZP;ddeIakUi0zjCEelOgq#`
zja}`3Hg3kka``IeVT6Itm1lBt_5g$GZT*5LJQb}PQDKLmd!vY(&k6#OYkwU?E_>-N
zBg^gAA}^h*T*H%ZZ)1_Bu=cLpqFIT*!Mq?}(0*IYD%LNVJqkiJ0NTe7AJkhzskL9D
zJ#CYVVU+&x@k4yn-_$vT`HYj2&+<ZoE`G_xt{gIo@PZ{`sm(A>4c~eBuZ=lpL4J>>
z2w9lVhQKm?AvVfg*_GG37$&zdig%xKnMO0m+1RPy!EbTJeR4z86jzTHEb)hwM>B48
zG?V-*Q<e?8YWI4dK6xVQ7wdrB9}>pKFeR}7_k>AlfsZbKmpt{x&%Co!SYjrprR^O=
z1drX>w+LRW!<0EZ`g)@1Xlp|My8n9pk8ju*OnBbbhl{V!j`!~KoH)OJOZ3a*n{N3D
zhhYclHLgsNd+$O!GFsYM0T0*7DjfSIIg%7)|Er-_5+LN{dfm|TKn}`tQt{tq!-bi*
zZLF<Qc|YaY!LjjuFJ)!<AGSso8^W#ClHz~4ja}afR4{6lJ_IhlSL&00W~g0tu~N7!
zh>y87x_S~7Sz`;I%eutI{=$#Y**sqOQ9e4rX`d{!CHh;EOc?)Dr6HU7Lzfg$BnK&|
zW1Qba^OKBecWk2<-|Rh)H7}pVN&$<V6DuzR>BY+!aEwd2Dk&wwtjk}cyd`a}D3>fa
z1OrjdcI311se;Z5IHu#|p*I(Kr7!!6NTLf&9Hc#5irx!wSGT5&$(EUZPI~eXO%;_^
zX9775@+r4GBEUPa?j3(f+KfK8O)>AKJ3W~1X|fy=sT?zGxNZP4)TK*(0sNhNcKjXW
z_7LKdkS^xX2%yIQ6!qY=P!Hp!hzCTdcI{FaqB^6UV$H7M`}3yv4W6ypnrkkJW#NS_
z7gs&zX11a$c1GSrq}V^+`0B@t$cPKLj<i1*wSP@%gs$hOdb^njMKKuq%m=YTUXyJu
zI}~CU%ctaMd7K<6FymrhTG$ulCB`VIM<`761epXJ#EmlO)Ilc;+n_U8TG;fO2Cd1)
z1S=D=v@vod_`xApkQM&rob2Z^W>z#z-`kb)nzx5o0^L978Ekp~n5d1$eyv7OF>^|)
z6$hpG{w$SpRbA$@c8#TzR$4FkKy6mp6DAunU^IHP)sK%?_opD<2Ok7`#ki6mW-m}7
zPY2U#+z?x`+D_fU$_MWXm@+&dd&>r{G^RN+?wcgQYk|a&p3tTtru2mbi_7KTdrxPj
zp%xZv+riUZ%B|q$T5hMXAI`F$u&rDA-QMDD%?}KGFBUp?4lYx;Dce8(NdQ@;^ylLe
zwdqx7GCO~M$0gQmad*=SIz>bH=9ZDr8tRo39aIh<5yA(KjsmL<4|E*e_lvdFa*2pO
z-TETC!xJD%g@WDf*L__!Wvb<^6o)&Qq;v;BAh{Dkt~%e37b;r0L^{B_gR7^c3A!UB
zb&Cc1j2p*3<KYR*;{HEE<!s)njzrr7?tNMWVgxYj^Ua>ETz{aYi$OR(C9SX4`ly$?
zgT)^mb$@mB?uBXFo}TWi{_ofq?KP(&g_Z5AApePYvj*+E6DH*4hBsZ;@P50(Y2R)A
zXXmZza6jY{j-in)!mqDzjbnB&JvTG$zO&`K@3CQDQ1#*IXNi&R2MMCqcb~j2lGr$(
zui7!u;oDPWh+Rc)ac-IWUVLl><)^EH-(H`MxgYjAy0^C-H_ijF>n^;Bq)vmMuld$F
zLMHS<dk{k#3%9Wp=T}NsF6<(*vc{?AQNNirB9Sy<b$q&+Dl4~?Dkbp|+Ql<r=|+8)
z;r3jN2Qpp=zlm`-r(cz<pW$6S?@d47-qK4?kH5y~5?(9~o|<!x+@4)l=SLYrC9m@x
zJ6;$)SuLLo;^2&?lg-Ya;Kqxw`65w8H<w`NQ`5kAQc!yeC{MEwo~W_rhhD7fw1sko
zg%GC2Q}OkICwAr6l|aJ?GIB)u-mVNTpDY3O4n9@P%_b!*zdeF1%VevzNb7}bB^rqN
z^?ulI9;TL-wly%WZ_kv|`jVpag$u(@^xIC@eV%Y(eMT8Wq4lDBorzsuMypH!NZ%&-
zY$fe%>MZ#|_L<0)GtPb9$>x?`*g=e$S@q^}%6rHwkiHPD$;j}Cw$<>q0jPO}^irp;
zYsL8Q3Cm$Qt=t_LMd<P7!V9zMy$%UOB9}$ofKWPGd|+MO=89wCDN>z`S7v;64`4mK
zhFa{&_Ni<J^M`KzB4_SIa`hWuafG>QHw95Kw#D)Erb17u)ii$6Qw7b)%Qn-+%ov>(
zhxp&i373FOh<%96ERV<fQWlO+T4j^t{`~A1@kj=>@PjDV)t@4>dM-;lVYv;%${vXf
zku#Y?^jt52Z`!MA&zF_ck~ou3e+)l_kRHJ}`!sq*1v>numHV9Tm|rn@y@J2{APM;4
zeCN-3Nd>;jc-sCJW%cHdcYm>kM-Z_{*e^9AmbzH<`_<@n52<E(JI)Y99D-|C#=GQx
zVjg9O#UJ_I4X{>rVEo@+;7~2sZ?vQo*hYLZ?G3x-^T*bhp0$+LELQ>1V@2DJaW=Zt
z6`koDu1^^|rIh*hk5CYwt0{2K$hNK;egu3x>N2~FLf*90n?hPX<@NkjOLJ52j`A2>
zb6IDgm8qDJW9ZDC_2ZvE9u>*1txm|Z9+uOyg~Pe=!74_6>nA%y=LK9xjgW`EA7fY?
z&5o!d<j<g@S5V1Bn_FEUMG|EkIuYarJ}qd;iu?SV2Vaxjf`nHuIQ~X&=aLq0rA+Xe
z951GOTG-S?r!ys7@-8YWb9QE8!)C+XGexEzlph~6AF+fyB%zi0U7fQykzRCIoiRmM
z+Bu#nkyaFTxYvh=$E`_2QxUJF4&B^2+WB+re`8cxTH@oNpyvPfY?MQ=L(+Z6#Cpqx
zH|ut#JG-*7r9@fSHz0a%{5Wd5(@5Dy*EHZ@N|nb$L0K8<EjzaO5?usi00Sr50x!k`
zI+zbF^SA8iN}>dIHwC}YIXL^oU`r-@ykk}QD_LZo*&g@7*z?yp4o*zc?h4Pfjc8y}
zVV%Co&Q}Jy*r6R0+sFz>uP<f8azG!-()PWxm@I;!7qpwh%XH{UX=m}y8eY0FVG52+
zP5Lq~%j>P04YN`bo!7QqdABBZG9@nbtRv+B_-wHG4PM3z^*4p)>MQO)YwD#kuUg$a
zh6F<JpJ(|khSSlOOj$#9*np)!TBtSqsBX&D3H3ycm)~~fbD_pOrZ>x`CJonMA;*g}
zw8~3vqWG}T>5LHE^JxkL_&)BfyN?x3VwSEbbc@TqH(|w}^{KJnXU*S72_K5C4t5AT
zS?I@8X;fvqgESe_;WV60iU4o6AH%=td?&a3gk9U2tJLCu(3sfVMUj0qs&VfOByg`#
z>m+^)zjz2H2P>D^9bcFsHlEt}eXKK`iac=x{Ti@6;t(8V68xa)#FAZgntX}D)`yc-
z!<)oJySdyVMoIx+X5wvD_Y-kO4Cv9;-9PrVY8iv4!a+XYOD79m7lkbKy}~{KOca|s
z<xuML2pSWEx0!D@2#zKQ_m6Mk+T(pxEIUhrZho^208M9j5+)sn2GM0swa?v67r{&9
z#iAN|pEw0lZ)Zz1ST-R6ia)APNN3VT&dWk9>f#cj*J3fUK#J03#;5tXtSpU*^V!`p
zh~X7av!3oIs6o`G&P$1^xmwrNs?4qmTl|&Vy%2ppAT6rWtDh(R!sp&*ayCH=6ckl8
zrD+liZk#QR%nx&B3fIIfS5)%|#1nQ5Dq$W~e+LB9no*;ndOQ)>adwbkkka&JQ=Lzk
zf%IXh3StiIg9JTb2uTMEVMuU#A1%;S+6}(rCv^GClURwd;2V(uufmA-mCwFT-;Eis
z=G!K>+@g2q_t#XB<Y&VocUUiC8(+S(98{tZ^^Iftm{tt|trRPwF*C@DXNfxYme9%T
z+@cAwShTOW)XwvlmFJ?$AVi}Y2iu_x>~T`qDvW>WDNAhM<bkBHH5c8yq!RZuJ-bU&
zG92OTZ}Gd_`(bNwAi5Z$&C_k+BXZd^!M2%p#sm>LSy<mzOslLXUmmN=#&!LgoRnO3
z-7+O4fTb4gi<)7j;fY7NnoHEsxm&9+WF(n6V)XaD=^jP1fAv?jm7k0eC89T{xY|`h
z(c7)NmT1Xe(CPkUHPX2c$J-U?+JGzJy8vs?5W4Qn^=4KoOTAUp_xk8K+9L)cMp%aW
zoCbfvz~i1(sa{QKX)si+vxRixRVy9+=D@E%RyqycU+=)j<4!$>jremEZMV#2c{|QF
zQ-nlOiM2w)aSh4NM)7Xfo6a*`?T*3Bv##sO;*(uiYfBESd|+m-%i-N?qXXpc)~yCW
zZ^_(Vz?D4IoKxIoe{tr<0GZiv{0yzuwSCKXNEkO=s5IKRuk02jqs49iQz6o^vnBD+
z$7p*Ai(kirNV#WMHB-Bnu^N)siKXt`Ts@D!zp`(i>eV3Z@#>U|(5ux80&hn7k95}<
zoyVd<JGU|jn>-6EFaVN+6Zbr`JOx<^b&=AQ?jr5i&EFSHGg!R<d?Y>xDK`gINpyDp
zY$MHL$lJNv6Odxu4<CJ+qPGvi*g7@lCP9IrqFE#p?qjWEeUWg_-*DI(cE)`VzWM6U
z9s;+dGxN-e?@2z~#Rj*t%IB?Kz4NQ2B7#WbwTMrKf_AqF_^ZNIu){H?zT}eaT~XOG
z-M%rs)~lJ1R5MkYnK2I#f3aIDkwjhb6&9SExkWBQtRya9S8qQ)EB)`ykp`#7L+$vq
zm=y1Yuaff5d()#mEv^^;L8p?WxI1pv*v;}q49xTO)TJkQFB!(oDU)vw;}^FmK6u=S
zWVO$gi<ur1-d}7FaIJVe=owPS{!r9!@4s1CjP9#soroPAZ86AFp8XtEJm0k4j;c)M
zTTYRg4!&1~&zF32>d%k3PusLGIoUU1ktMj4%1Q3Cqq;Q?TOnNRtWzL!B|q*lPD6g0
zP`XW5>Ea}UrokoW!ZL+Q!>3qNhanf$Kp!mU_AT+uRN<{5tvmZKjrHWBp0j;Nu?Jkk
zhJq$!4c_?*3S15HgGG4ApVp2*jg#cdHFUoguZK|sg;$AtBy}0ecZM)~KU<Hy^5Sa&
z=*cvb5j1IZ?PQeq+&*mA&ej|Ja4FIyMrOhSS*7XqJJrhfr6bo2j(Y(JIuM|&IVRqk
ziPs|y-)j&!vIcvOz<t;JT3bGkrHI@~;~>5bLB9vGQ=TovRUZjlr@_Y{m1(!jo0Gy#
z<;noCa(n9ZQXtKwOGfoB@6LS!75Hq1qvi^FKUi|zcjx3{aZ3c0__`a?7xFoSui<=^
z0ry{RI9>Da6(HsV<IR}9vAc)gvbEG<+H<-e6hc)d2Qva|*Pf;c76yg`neJmpV|bp@
zt1;n*blxF~#btg+!&K<6!?Bc@>afDM&+2#0$-+Win7I5~zwkKfU;N%Mxvgu3Y3_=x
z@~NeSBoV&Go48z-R2C@g6N)w8!)+%ODc^ligN7`ctd`ZC%z?d5ZxsXB{1HW6TfWPL
zk3H1hXAPIOM>L{<Gb{;-R+YFAnPu5K^0^bRoKdDX9UCIea|lE$q5n1#wG`;d2{I)x
zPU38>*E@)C`8ib$a!hn`?dUsFx_3I#6g~P*aMW#hGdjz?ll<kAC+o;Mr6{~|v7lYi
zvyBHj>vyQfJz2Nku=a%a=c*wy)rK&Y+VkgPzXI11VQ1r^;Z~B5AuNkg7dYAyFP!#o
z`b#Mg<d{mUL-|`-ID;Gko@S3BZu~LNQQ#T%L(+WvbLGj@uLM-1_T<TDDNWRqQT{k_
zbVwi19q<320f1JTv&k$&_8O#-_ofs$e*zhGSZ<@PSPjRI2%!GYFQ5js#?jC{@)!G)
z=D#&H^JfmMadyoQcGK!E-0wn*D%#siWb_Qw?u?@U+~OZTRODTA>lF1xACN@MzY>Em
z>IC^dKHy0K4cqg_bMlWeloe4949RLx5b_Dii$MRsGV;F<Ag{Yx``IYQAVF)0oN~?b
zG4>P0vrkIL#>dvVRo3k~3jSNor~vvg#hZjqVfQN7xQ{{pnIVaINl}SgduAuj*--nE
zu7wpBHG%dRS)iZ6iKwu@Vi1Um407VI|9}#lq0)pTMMck^>G7!lbBF)cg#TL`{~rga
z)f^fO8Ab3ok1UfJC<6bO^vOS-v6}mJGFqUMw0wYitqpvV<$Ofl9Cxjd6M1oJ;LWA~
ziGy<{M&ERw^6jLBHW-n;8_jV{&c&5++lkP7#=YyyWaA^DKJh-*8A~GFxk!e(7rrk~
zUidQ9G0i9)PYXKkj1U+@L&_4Xmqn$WAMUP6UnjMDxofA%dQ0Z;JFZ<sPnt?(h|+%O
zO)5ClZ-bpQ-8&f`O}2Lxg*`XPpuE-V@bKIp)?r!E^qE+D7|Z<m#dC8l%U46-Yv-Xh
z)3Hi47RsFKW7Zj-X1obH;ABHUd`!~iY|TDyhQS+Gc_YpgQRlUdb58-+h{4Z{>PZEe
z;_cQ4InuI2w|(OJ)w`Ps@y!L`84IJve+Z7}hjp4{T>c8PffU^;S2EI7pM_(D{XBKl
z<Uy`{fiY+rEWJbKId$(DKjkSITM}|Us_>bENTk=SZ&}b<kFtCCBZ(g9_Cu8Q#i2(O
z0-m(Aqjht<m0%K^OR98C;DXuNN$9YFf*X-IVhIzK?2~upyp^8;Q%0#WfRL?d{_Y)f
zi=@jWT=u2RQo5$=4!o(}hU;+$NsZ%bK5{Ljx`$KG@hiNo79H`;P)~Fj)8ffQrYwc6
zr5_Fe`frRz>;xn1)6II#Ki-u2k6rIx-d75%z@u;GkzgvQ@4-|9Oo$cA<NxcqY@UR>
zjep|ScpaDMekY#iZPNj7-|@<WUe>x_D)Q<KV<%-_BT%i&h$O9Q4}si|Avym?h3odS
zb{)*4a?Wc>y!}t=$DfraCKT^D>iBPjIQNLkKhN@jjWBCPg@*FELmy^IGCXSMd8dPE
zst>!-yBZkYWycYtb&nx8VrK~0G%p;@BGC%{S8K$?X>xN?la@SgFW-tgSZbl`4A}F^
z95?3t%xE+HmKPC`<Q|a)2Zj~xi8`-FP-5a^HnfS`I~S~sYryL0XgAZJFJt*Dw~!c7
z2Q^mHZ)botnM)+^Z7MTcCf>EfTY&F^^mNeYs03a3nZP+wybb5DajR}NG0Af69CW+p
zmX}hW?|o*`*R+Ii{GGkhuz>to%3MU{fhN7}ym{fEpins@hi{ixuqX>Hp2VlVS$+%G
zlS^2fr^aLcb$KBVVgyTzz`Iw8@TkK>COTU2bCc%TI;nU)Q^)5(V!|De_fqg-vtRaE
z%QZo1%~j=s`@3Tq6(TN>6DIU}8fYp>K@R{(&Rl*6ULQ+jsOhu0V~4*Lcl?5zbT~to
zNX1OFe;}(|iR<qU8`1=tkAB*(H}OpK&DCVO@Byws4I>T6Dl4g4wzY4d(6v{wbIXGF
zJF75db0SUNRDQ%mued-?TzODvX!Y@G?$8geD=O9lZp>g3RLL7J(e<Q=*ymF8w&ea%
zy{_w2{-I23uHIdmsd%a5y0?|*{qMd&nqqZHfX@K#kYBUi4(YBfCqwp4;U#QT_(rd$
zQ=F$ntIWVx=J%D5!W&9f0^8O=eeI8FX_;KFG0@~w%yQIOixm_H`S8OQ$@hhxm7Zdr
z+6>08u6}f)fi2hh1jrRNx>U&h@(zJZQ1@UEfqj~-M*=>#c`q?#L1%lWlFz0xqs=LX
zh*DQv1d2aP(yR9#>DIR8C>GYY@4EJ2fH@3&nzgBEeSfF&4ZX@Ep3}SO^I(g+8eU4b
zB@EjT9Po{+f)8O3yVy~f*lN?_Uk2Z5M8uUp90h>hD7}hZ4BR~Peo1|>saf`L5O@$q
zs-|TR|GJv@cS#%h8(0g=>zFT2>$wSOJn27t-`n2S#E8vfDHOs)?N7)W-1Kps!(a+9
z--h%2(ZPbPexH_ZYr9Ov;rIOQ9fd|wY?IwrCmMg{he+sD3meWtGf=A@Gx?i<4`a?+
zzP=0N^Ge4Q<k|f~aoQehf7-Acg}U8Vr|;h8N#OMAv&@$!u00$vB%`AfX91uH>@Ivf
ze>JMB-ob&V)<61x)i_D1HZkM)+Ag+24h1*Q>$%cu`OlYka|hb8FkY#EgnCF*ye7UY
zE3x7m(0MJUOE~eBemQX+9ULfOvdYT>$Jd000#uHcIDdsJH+xm*RhEkGNd8nIBO|F0
z0*`FV-H;~{T;|Y!-3y_+)8p=Tk6d-*G%_0_2}?$|Z-&^QA{(S!2H{j*)f!tbg>Oj+
z>Ur)g64?r%UmaxAnLQg=LI4Muo|i8)FWWP5z@tLVj=8kfu_n)4G{ya1;q>wDS%-nt
z29Nh-i(_MyDv4qHhLmS#+h(o7N#Ut9v=F}sf8q8slf+{k5wpR4s*0jJPQQBh<oN#b
z5j`opaz(JtF!OSP>W>X|*2t#7+$9Jd#sQ_BEAzh1?3AD1Tf8jK1E*@mB|BqPnxl(M
zEE|YUZdSAgH$aI__7zwZ0yRi7`YU|)9f1B6(<OULD8<W3Lu@bcvELx-SDuvsqmQ-R
z)JQZ7l_R7S9_rVXLA^;{0O0rKbhlH0;B{1ntq`hGFE+JItK^yb1gh8uJ^wA1hhF)O
z0dj6&U72^18fAMYyiK`~nxa24H0d<-0=3vx%~!<7Y4<31rAa{uGNyH{ZqTARcH8|z
z=O={f-Ai&}ro^VqvmNpw&c2sH!FNBzR={yWvVd+0hd9ed<cA3QM%!8(DS#8MmPI1#
z3xhgMLc1L^sPv|OZcdptZLE;{;a(LV$J+J`J6pv!8(SOXg*$q>Zn5&iZbx%o&ZbjF
z4Dms2D~YZa(@$4Yflt~N_FPt5O~Po}Dt`a21&~p`VNMM#TD=JPmVG2LpB^TmCO9~j
zuya0^$=LuU!(%35n{xU|+F&7-mig`5$al#jD6Ro`R5nCDG<0HKXE0J)VCaRaF`5I)
zj+SC5J3{PreFPEAc%Cg@oM|=dh?iwe<v0qur{>0_%I+G*f5~JfET29rt*^EGY$WNb
z7%A7y!lyV^UTx0GC)Eut0m@NqZ}l(~SZu#3)M5k*f!`@}>EU9TZq97$f~KEk)?s4S
znIrp;%A{Nz(kd$o4L`NhkBvKzs;Fo#!*B&DMlTmgx#E55k#o}*Yi@<e`ZSUh*X})T
zSj5SMs7KsD2$@h_PIg3cjC>w;j9iXfPDQ;Yy-5O@>y!|Xl8~v#OG=F8+u0AS4rX=M
zn7J9U&^$#B7vbkA#p>6e<<En?&CBLhDTLi7=jGg;^J~TJCi;NTFuAfBvKKsYYicXY
z*u}CCrCo^(`DX6L88O}sn*fczV@iB{psQD>hw08ZODU41Y@&Zbi_iD1$u}M$Qk=^I
zapA|#^}U&{5Zf9-yrTG0pAZ@v%L4f#lnLJ{M96cQ($V*LR-R3H34rTs_EjM5M^f@q
z!e3>*!x7n^vg?~===r1ok_q)P^d=f_cCmplitUa9{jn(U7sKCzmpGb3?5)0ejw~3&
zBU4b4NcSQES^sJL*ISftH_o<>^WyFVDVkh<I&AHI)Jc)sSlKV<GGQWw7$^?Q!5{8p
zwuB(yRk-hT#Dw4Scm7Bx>wPrS_)ln3^s}1K(BUw-an1b~v}!Xf5$c=_z8N3sO+rbU
zKxqjiM*7`x%2L2=QHf|RZz0{ajJjKL45rD(`4qaB(k!8&L70YI__C<!uJW(aZAwhB
z(pXwWzh1gwfy95^cpKUyTufq|TPhH5V~W(-w8Pf+61q$X-D}OZ`5V-H3^D@fomgf&
zQC9m~b0&4op@E*60B>Ls=Wv^o#uUC0tgr<t@u1x-b@JD_zpSV|AP<v%nIG0M<^>Pd
z1$9GuGg!95LT>_j<%LA6l@P|G?DG1Ofe8`(TOHZ@6TNKxDQ52}KT@hY>;m)ysBtbX
zlU95MM}=4if7+Qd5Qkk&bY|ijW_)Z+xtemnYhR3GnQxK3+81)`h0-m3k}GP}VSNuO
z-kFPVbaYGN?S^DXXwke@G3YGj?ZHj<HM2S7=$<?)=yEnx@k<RXJr#;%BR)q9bJVG+
z=gyq;cAFx%mNz!0v9)&F|Hh-7BiF4BZ(Im(8c+l(V&y{;mGzrXO-#{#SX#f0?Qo;8
z#T@O+@6KRxJf_?j!NW7%pX-eo{B+4*as2AfaaGT%X$726kE78{P$v^q5CIZ?McM5`
zsdb&_PU1^5T3V}h0<}KKux?W7!&ZTONJ9x9k7=Z)Jt1kB?KMl6x5ztn-!*Y3B&6>}
zmVpn0<4DcE*0YtM`x}(UtaR6F$F_TV0R1JdJ>A2Ot_pYV@dlKGhIZ+1YG-&mb(SFb
zoju5#={-X`#WRkpbatlmD{k9Vo&JazD}w9$d%d3h?!10CP99&!-jpGkS=#qJUw&8N
zE>E8g^(LcTADQF%7x5U+)R1DVmXH_g@UbSAe6HI`e^`mvv(HNk%^t<ZV_CfP;&<3c
z^wi@pI@;@bL#gM_JO!Ey(%xw^Xska~p@@`lsEBs{RrAgf^1~(Muk-E0`v`pBmcOH(
z2P)g?w~gpc(#h#KB9?q*?cpOQF|X;=Sc5n7N{dwjUUBlfQz#uw6qoKqhxipSI~)jg
zHPPJHv}e3*5WC!|v9)Eqwu7-3D}k%bZlgWL7|YYw>6mDF%=35SER<p1s5Snmp8lM5
z-CCoa;}=F++LW=XFt%q(N6VzwcL~4KH0tmpZ9iyxAUAxy(NZ11!NWfEF&P<Jx>=sj
zVqp|+P6_7wIt>3qoJEE|bCNb6!8kvc(ULf-;PYE_2LQl_y~bTw{i)l_DmcB1c+ZZ7
zX;moXntq=f$WS0ckDANRIm!#pWe1D;!S9R3m;hmmzr~s%$&SyPb-A&{9OA;tkR7ko
zRS1lH^Zk~hrh=`AYo5bjrI=hUmAPurZybXYexB6Fl;Aj`R-A>*R{^?(UZp;GJq(J8
z>~dDVo}pA}vuK|fll3yfO+Dd;xfs+~_r-4nHo5QdBFRn(uYt!AbXn~Kqsu%t>xUS<
z8h36Zw`IfB?$}Yu7yIiZ&OiEd=e{C&jbNFX+ai85K`2uzZ?5qzyFn&s!2t$#NFM><
zlK(8dZo~DR(7Bcd2CH6DmEYEG)P)s0YTJYe38SUm;x9~}A4mQlpeBI0we&TJ`i3W4
zQxDzY&G>?ml99NG@5OWox>;jf^`^|n&JpX`8Hw?al6evh4x{N(8nfRS?UOg%jr1#&
z4Fr&FyxCabw}<XVjEENeA%C4~IOawI4#7#wBVsu5&>*pMb^B>k@Ue8}t0>+QBy3*1
zeCAFfNjnL?lIl;@-ZOve0-Kf5i19p_V^!HebU)!zYfwG7{>>{EWxre{;kF8Tg$&iv
ztrosrinOxhQi4W35}zmKQE6h{ZVHPlMJ!)F5#rjTN0ZXIMq)eRv4%T4;d6b<BR;LC
z!RsoB^kI~<;=$x~YWZTcl0D{MZcR>Veb<2OvCKZ(wt)JLW8Yhv{OXaQT}0WVLn1X(
zpb?m!W;Jfj_t@!2JqMc2N0Qw72b28A^ydGVEc`G0=il#8p0A@bFo5#gV@mNj-hI+x
z)cf^4vykVxt!`?9*sy_XE2ZPVI0^b6f^z-N-L{>S?xzV>w01!yikg(};3Yjai|bj6
z0|TfCwuG7^0(S)e;!f*GBGD!E$NT;lP|yGWu;?)#3a_*ZD&;Er)g3XL00`zEe^NVc
zjV<#%Y7Sl3Q-CT-Pxm{DH--Eu22YUW+xSgC)xK%%@U4~Q>og?_P%}TitPUhLD*E_=
z$^XUt>Xw@ANLl!&G@08)Rut6zA%0KBMdeE`baP8}ZbnpTS#|k+_v3HPSwSH%wIqM|
zO+_0qXa1X{1G$Q77u;9-yk$nnFXw%4t|OC@M(@8OIRZjMjRlpg>~`L~9zPw(RCaax
z!V_IO7lKz8c30pZPkFb$jrWwN{k<9Fz&B)UC+XZe>54)I<%kD*(QjXTdN!E?Qf)53
z$pPPGwarTIg!%hlX{`K>1~ScPlojJd+3D}T$p866iZ0PgQP))0jZg7!Yc1JauEP?e
zYaYz2F<%UC&Z|sRMBZP=2eMLdsiY0ur0Vqu&5b=cv8?6WmL;8?cAI4j9^X`}KWBOW
z>T1{g)9e==9Tz&LjX98`07Z^z#&kJeQcnpGSO}ZKd6?U_dt>9f8s)BaSb|9+bbFiK
zwnQ?9Y~A>WKhOW42RgYSpUty{aJ!%jOifU?+|2H%pP`>E`?mj8JZZ4ENXW8%yBK@W
zCFaCG>yIS_VR+HnX|T2Y`MYK~7m5zeaupEcnQfc3)!BG~dPv|y=!qz=lrhWR>+>3G
zT&vaY6USmxh2k6ZkRhdtdEXLMpEA0HTJPO+4rhLwG_dK~VYJMx4v(wAD__uIi0Vf5
zm9?%f{7OvL%%B&?X+87;5_L4@^cIf5QttIY0|26Z{XcveC|&_;NCXbi#9I_-@nuk(
z61-Ufm!|DXz->B`(IdSEm>^5OeF{`C+s9qXJT7z#U*>jRBo*LIY~1AHINk=J5{g2C
zY`gMgH{IU$GEGhZKv|O>tf6<WJGUn@n-e?Cj7glNog)Avqm`N34}qIhmZ@Ex6U_!>
z7koHRJUYc7C7Nkn?j5RxoCHX<2={;TOXGIxBholLq@bfS`_|fOdOvNX0FZ{HoSR>K
z`Sqpo=+ZNd_vlB3SLMpe)>jQTZqq)n%FRG4okp0ql7%>5e-hm$8y8Ht>R~)#`dPV3
zfg=`B!s9Tm%}1lz)F=u;|1pB1Z9k3#hwhub;k$jP{>K9m<DvM%Bhu>o>0#n}#$?y@
z2ZQJf`7FP<{6i6U-Qk1`BdS5>Vl7WM@3RpB5${!r$jY{Q*w<oM|EM1i?Itf*0nk7M
z(8Tvfpvvu|ig-(dL4O65m=)|TQOycOruw39*%4}-@~{<F`6;*YGfsb$1kkG+NHn^^
z5K}@ubxwU%{Tl@6mktAlVkWl%sxcLQ7Z>mo_v?0>I`iGKcssVlh6Mp@SIM!4*|y`E
z`TSEjyjmeD7~GCHqV^n#>@qrjKz!3Q=F7F(TC+cNrW0QH6dFnbJr--WxiLXz=TPQ;
z34N?!k<8`ybsh@lNs(xCu|PDFw&waaHf#Bnm+b<(3E6n!Z?NU_@o6^|{Isv8T-nCn
z**mjf^hlKZyU%v6#o}DWsI-|J9q{7UkLlE$d`Yp~BHI3qxww3R;ylc9gX{$Ps`3Wb
zsueME)2ni0c-oO#p@qfzeaX_7xS+4{%>AuyYV_5@b_0_sz%fP*OG)oumkZReB#Ofu
z8or`)Irx>zUa4%Xe_%JPJ9Rrx@*``^iKkW^4&dAH@W7@#**26bL5=~CBknmhM?O`S
z(|kKmVxNzw-2&NqUXSTPxtR3Fn_NTdjKk!niFdWQQA*W@kO5smAvtTTpF^+(wdtO6
z?YkMY83Nvdiq(tGR{5tI-U95a?rPMu+1nkmYyxJ2ICqwdXJ&NXRm6!(Yo4p?e0E2T
zl)LzANvn5u5QU5c#lDzZx3HOI(X?bM8=nAW@LR3Cu%nIA*Pn3xYfM~Q%jQJvD_2Bq
zo#x<KkP0}wCc8RgS%hCQ#+k9Yimzbv@g*Rf%Z((xl=a)e0on$R3iLnfoNIm7%jmmM
z{jRm?kVu0jr^)nU?pK#qA_DXY;gi4S3OF)FtOpORuzI}*x(}Swq8YKGI%%vExkme^
z!*lqBisf7)_eh5mjYe1r<@*0HpsFnJw2M|*Te+A5{W2>DaZrSj09E^d^XM3dhx^q<
z42&a%pIcLUu`FZFpt$bxmD|S6*>Z$x4EBPS8d|s#cT7ohe4c1#P+&ay%rgkZZm~JZ
z4+i|(w30m?EF+(tatzq3Y71%8<J;*??>GjdUx|evr*r48C~)+>B2h5^EK1m3<`4S;
z7tRO7gtUr!F2u%sr(4lCczfS`0j26KG#H-5J7p>KZ_GIsIbB#iS{8jS71GAHJ@BC!
zMStFZV(D^VP3YBk>=VF^{pWZ?Gg#gNbo1l%TV}Jq%~ZW!vbvl|8|2xN=jI;7)F2~W
zKUX&DEv2fX$J|bV)9Wy;f3VCT-wvo;kSL2kK_u!*u&v3{tMQey5510I7Io2#t&2F^
zSUTy?a1i6G)~6nAGqun|L2c&)lEoi%?eC$V#G%B;Gz_MiPU1%H51%kAG3=HEmIG>d
z<4SKQYnOQf&M_~2)^ojcm|x>{IhA?v(r`pG^)lq;R>p^h)`cD)4#X6-#Kv$4qobE<
zw^NJdW{wTZ&C1{BwA5dk4ON&Eox+EwO#(o#Fzf7^5$P5-MFg?{e0O_U3@J%P#gVo-
z$^Q;|#I~kC`5s)aDf!zTCqoLOecY~^v05#QN(p-O{)Kufd!y0HOfQ0>4Sjy!1yITV
z;XCoYSuBL1p<@!>&C3-)z(49`pNCk?mw!v8X`&ndp*vF*M)rTrbXy*>@AM9)nI&tZ
zn*YE3<7dmX?B4lLZFZf?hV?JaI4{JbT?>32v9;Bn{3(Dn<k4J;DfRBGY&(iryDnea
zRF|LxXbqrMDz@^XkK|J;CZ#phGLSl;rsCq{7NctrY~#@xx()X9TJX{)A*f`WOU-|C
zQl{~xh!4oqKrjO#BEkTq=eKcatW078%6iL+31o^@s<BCdE;F>mZ;x5TT=;nNsg2@v
zehW(AZIb-5r#l|}RD2<)EWl%KnC+jZDq~h)Dfk1xiNbk}VDIYHFUpuYTPB1NlKJ?a
z2IT>JSJ;h87Sy~62bu9>#K$SsCJL^5^YW&2D<cV$@J4B>%5o;!YE9tl{?C5OuFkx9
zlo=u^NEgQaUQ4a(;UEy2CPj<4918pFqisbdNEMbLOsiz*ERcO$0X!+`5kI^{S07t*
zRMncE0K*t$%sSdi4-AYy#5uYoz-a197qyFS6nBT_B^27`gtYTir73nPU{4Ve=tQQF
zN+n3zx<<-b{|F6YwMF5v682%z*;SGL0L7+E3jgfZAjbppvP2z^JGm`Ye9qLuIc_r8
z7yGDw52UtSneg3|MtO(a{j=X?LSezF4EQB=iq0K5$BCM+!)A*3uyZlbuC`-qRMq^G
zcH?XzADD{0Lqp7=b$L^B=Y!HZkCd45b-$uXo)gPH6q^=Ls=Gg9rL6mAlQz?bjJDxR
zW>#Nm+uL$jrpK;5eY)J1iA59%VLml2KC4HY+*>^EPj!Jrm%<rxZ#eX~CCTPFhT$JJ
zVV-TbQ(@AhN6m0&Kn{xcFrc;#cop7s?g@~wa~A2Dn;}gVM|=Dv?@epXaby$%dGKP&
zRyvf9@p%fU3>)8zm;Pj;ZD+ks>M??SDs7L^{`MvHuluq>qar>9AG_rgp3KltF2T6?
zE&}K_)$VX?Hv_%)fF<v%w}V8exruZgnJv8Sk7yQ3-9&#)elYTnD;1kd$U=HOEKcz~
zD?Jvh&BYp;54mf0px-r$1RE*?=$C(rxUR@WNbC7?VK_#ue!Pm{zMKwVlQFA`ZV38@
zSZ&8Y+JSBHc-AX6&SmLmr&L!ryjB=WdsDjAnsfgiO>4`U42$9>u)C362h|z$#w;go
z%T6SG^JcQZJV}Z1oc<>uB0oB<EjcY+b*@UDS**clb25?`N{(Pn9X$OnK^-VqYv6G@
zxkIXUvDHc8JIaFZPr{0~oXyJ>Mi7oud0l!lWGU4$r2;=Ay6f-aH`*vjO4{wInvmzF
zfn%KQv5n>n7i<A`l79Ea>0YDFca4UA__VR`kcJq9Q+ZLc%Js=*;_DdO55I(bjeaSo
z8zna^P_WE;?B5B<QkqB`>KW?Tz6Qt~pAPTMH3La#dmH-pRw26&=?zD1J#!+BLs+q6
z`W0sEfkr;ua`FKDxpnHDRXQ_<h+5m^!t~JUlfN7a&q;f_7tw+j?+4JP1ugsqc4o=<
z8BB_Jr2s$O+A?wU8_iZVhqOezs)PGxsRl0&`Dipf$Lu12<Ww^gH_st(L39=@0(Uz(
z_t1CBqoZTY6Af5<g48$Ly)#R#3}S)tL=f<b`$fSTHWdapPrfR%QgbR9(cZd=^YzHd
z-t^2_pOl0;q2Oiu#`0@Foi(NJOPO$#D4##hyTLtCz0hdB=Dx3$GEP(JB!&Qw6r_4S
z04lt0lX@Ja-FO54lZ>YTi&Xo+#CUFw3E2)x!?8-jjPqF|y}x`&`sj=9?rL3zVgA0_
z9?Z97i>%Lz<+|7JC@L3i5j#C>^vfXA3}7tw_aGmb0J@g>eyJjr0-#R6NYfm{hef5R
z?*Cf(&is2xri8z{Cjpnz1U20R5wyI5Ub0;uCbzUos(S-2GjC-ivhEULU*B(-uI@K~
zn~7rSLUV?VTOjy0S&rwHNoB=-<1(7e<~tS$B1*50QqOf#J|2_2<=&s_<le=Ok*(}R
zShTN-i4C~lmtfc)3uktNfsIF_xzc{mTWYORnapkP#!>;$D?bSfL<#FhGbsM7{qk~*
zcx3RnYsx7ExFkw+5M=eJLb<UpMnRt1{}A$&i@UDeUylZH-aA#TJx{E?yTkh*7{_ZV
z$M6w1Ae30K8-zuq`KSJwF^6Y{9-R*a>HIb5A2kgNw(ufRvYq!|+Z^)OGI2d?AfH+`
zd^=6?N6vw8JSo4Cz%r#2_48snO0=&R5c_rAz^I;ya{J*vW>F{xS%#MqJPwEMb;>or
zKX&P!j5j0N|Bb%*JO8JJDF1aj!7(!UNy+XV871_~<Kv&8w%N@6I53cAKQ&o)Xnb6<
zbs0MJc>P48<Lmo9kG7B|;Q0uN3Zb4yH;=Ehn}#7rbmJfS4ASO*=w24G{w?Lm%Jl`*
z&eEvge_jmq?=a{;R15v511O?^xf%TDVM(j*>dB4FAB=TE{Kd%$*IA1^SmR&$aB4*5
z!%4c}r&>S5nJl;HV`Bf-G<`?r(keba*mB#rJV_RDSR(r3UoxjP>ZE>+blMiy%3E`k
z?dn>e{+n{g0u?<(lX&a@Vt#cw*r<f>hKBi^fi8UIe2*!A^7pR1ZvGsZ!N_m>M0}Nr
zntg@BVF9%iF`umF`>8(nqc#VYx<++br^tM72e~Zc2Y5)TM17-uYpcsH`kg(-b^B-&
z_-6FLaS+BdV&ESc>2Vj=^!)ws)}B#g)19L$jWxlwB9d9`YHEP)**A6n^WnJ`@B;$}
z?2YLT#eMe;Bs2USgwo7?+JW05-$n0K+W%U@yDMmr0Esv(ZGMVn-X|<}VEkCp-xs>>
zCZME44<=rCDl&$%dP4;gE^a#048Bd@&W2Gu2eLBF&B~kd#URxSep6B${)U1BLUoSv
ztJB-LFuEU&Tv$v~=;>Q#!NVKKko=x2{Nh$fbW{1g$xI#2xiYJ41mzoQIv)B8y|$CS
z#jDEJ=C2DwT|PhENA+9o;JHmj@U>aoEIcg^RQ<IGO_?*ou7~5&O8n2Fn`7@s&67jY
zY>F0R4odq#mxJoZl5e86vKjiHkV>f4){?iSU^eUZd}?H=KdWeyiF-)s=?Xj5P`BN4
z`4$Utq<e@r#5FiAy0TBE%(D-JKv*2UHH&i5>8w6$hM-1|k}GR$yjw4?@>ir>nu}$?
zJZUKUY|!X$an|83MToSOy^ow06+<IH&C{Tm3Q|JswJGKM1BNV&(klwsrLO%_pGW1R
zMUN+~by9RGlP-z<1ht0aP)+&uYJ}5HXsEVx!>WDcM3`*2n3Mqt{*aQ-J0HDg1j3#w
zAMWp|ICaFTO{A%`X0;vQ5RRoS0v^^9&!)&Eqp^+WA#Sd}67Km;x1-of<`+a{WCr^^
zJo|2n!HJ<iM|mM5d)d_44olE;ev3sMgG<8}2}d52%Q^ybf%H(Y+xZ(V_rLz~h0oAD
z|2{&p$;Fj*+qufR)XAmn_<6n&^2v?Clo(%RH={G-t&p`J)PRqqByY^Z_ry10>O`Qh
zp{dIJ{Pse1f|c3)P(-R(P$4w*0!>!a9(nA6ib*<ty`SXE)z-F-Pjz*#rQkKccD@pD
zwb=eWznxCxZXh%iTT88ibj9f4>%{y|=ZJ{<RWEkFArgF->olpd!9}q7T4y7<v_|Xj
zAWPYrT4f}LZTi`+J%h~>=(b}9nlF>!{Q;bmMKv)YYByTz2__5U$Av!lBGH^%GSbD^
z@|S+jWPo;kYPZe7Go|omem9-#yFgqCrQ_Of57b5l@WBe0z!5lBr3_MLkn>XFeDIwF
zF!BG5r1&Rj8ls!R6{aY4BaGP_6ZP3%qujC|8L-G7@Sn7CS7Jw=RDYFYO?ZuGbk<dq
zRiWqk!!u1mo*7~F&;ojeNVKVnjyNC!YGuV#`Hsd0hYSM9E2)V!$9D@LSOCe7s^%%o
z37-yB<D4P^Iae}XQ61K;lA=feJprb&AN)8<Dyf8`<@)V>XAUjP@et`6B^yDQ9BUj8
zy(Z;a`)1yIbGb1kJIRe6({RY!f!+OVJs5q0d^$;R+P`Z7LW2ey4Z`cSYWJsS=UOWS
zHyZN8m5H$cdCJ-#^M!zmO)o4YiM`omre_)`l9u}|Q<FWuroYfe;Apv28IA&gK7MDd
zOl?6}ciFCQQDo_znE=+MJB;x^mfGNvPVtv#wt#pJXE4I&T5ompuGZ7J>h(>9Tg8AT
zwd!O-hoxd5L)#@6Zc<mk^%H6HO<1s^89Tgo>eQ>j?x;-&0iWeEF9+LQFAoiYQ-oly
zYq8}(@zqod8%xIPsK_td>GJHYm40tg-_*LJ)dSzwG0GRE!0S>ryRhymx2Qzi&z1is
zv*CB!8I*S}=oOqUJX-#x&iP5oFs<I>xQGQ*$Uy>QASfNP6;EXsd>K-t(=JG-#`SY?
zJCAmPFUR7Yo*znQLrufRRGOLB>4%t1%=)gK`b)<QvbV6aUu=)-x6_r~cBq{#e0ym2
z9IqN1FHGi)Tm;s$(e?84LlL+#=wja@I{yrJ#cPfQA1|z#2MQrpOung%aW0V7tI63I
ztYg!qJ(`h{9efcRf&>nNB}l}ad!S+?C1|uJ|6OBahtk-jbuW@VXCWGtAmhPINGGxe
z0%4p3=G!z}%7*pdw%6qZw20BcoT!H4)QTA70{A8;UIiXMx+RvmM7iL&I)EQkO|+#$
z!`VpdbXkbxS?7{ViTppS@S3AULo9abk!--f+8&ivB^k{w?#58nYuIR=msj_8C*nBD
z&2I%=(QB6T{BDhNj_;89QDk$NKI|>|*a~-SO{MaYToVjT^E%r|{eu$NWdDC9uvsCb
zf{xiy&N`n{tjGzE-XC@yySoj~OK`jG5C8zJ)$N&DdV0L-v<J1Ww0!h-GH=KhSJP=|
zM+ex(6XiKd`bTHOK9=m(zg+hJ@t>C4FmV36+$MxxseHQ7&-tr?s)}RNXg`*#t|4}L
zDM1)l|H$NETiX$t#DGJ^^HmC20HBT$x7+fWi0oiedb=+Cvw(L!;-HvqW>rkM!T1)n
zKdH6O2R&s^wde|C!#8W@`8!y6ne2GE)u4FtaJxi|JnM&O50oiSkdjb~o!hiGR8bP2
z0IL<5Lj~-O;HN-4U{|bWtB!W>lz|3GV2lNWduvAtN18Q8&_OC$OsJZ5D&?T*h&qZY
z%xTR167KH{SNJ^E&!JTLdDh9#IMcA6@=b4d=|G)%F`6ilh|qe3f5%NGyShPhIcAi8
zcF-FF44wooX&xhQO^kIE#nu|B6x`|ki**+Sl}GxCFn>HsU;wIoEi*5a$}K}<BR<ob
zg#z%U@m=fcXz@y?i_$oQc0W3*mI+M9Niy1tK9|W?`E@)h{|&WzmRLJq*Y#TH>^~6K
zgvu3GG8F5tp2;4oAGM$l>>7w0tzOEXNANld!yro{AOLC;&Ok(Wx>cbal{}%xM>Q3e
z_ddwZ{%=k^WCzGtJ~@=xo)pc1&cr@0Y=eAJ`-K0BZOd-+qor|Aj_W(Zn}gV8)SlHU
zUW{wKbOTv=gf$tsbXX4$lavrzmjVH*yeKYj1q9G)ni-E)U9En6Wixnrc!RaW5TUmA
zwQl(Lk}O$Ltiyz8ThxR{h?g@UGPnj;8+~h3VokWl<DtRPOL0lu9tYP^bxjzt(EEJB
zov*TV_CPw82M}1%EJH1m^Iq*8?t-<K;gw&6>cZ=)Qdht(fZnpy<ylN|ERhUrQf&Ju
zHNU!R6@P`>+2UlNQw&)tPf$*)s*?@O>6(?~J~D{FO8;;e?|Tj*N>hqfNlY&Cg+=3A
z(ab~GU!_r&RN3<+*WRwmAwkX>lv2%$PJmX`ViOIDwNxI~?I?GKu9CyF(cFsB5BN=l
z(61<4br|LIfrstnQIdt&I`a7e1IgZtF07<p3yo7ix7H4#<_2nDH6wr@j{S)sAnWo1
ztIj-ZEK)?RmjLe+%_7#x!zAOrD_tkHG3W&wscmn7R8vl*)-T>6OVL2lqV?gh#%CYN
z_MlvMyiC7|^Ue08V{fjHR_GR)IwrJr8DED5s#p$2oA|2!hV9Ve&Ey-k=+oc>p+~;n
zZq2vlxP6U+EkmT6=c8GruTcvH)~8c8(E(b$y{nS!99*`8@S0!$ywe$7X#CkreBivb
z#ac%D9OhXQGx0}MGa>jeLaZ;GG91T@>MS1aT4^SEaa30S)@2rc=RG02<V=oh>Gakb
z$*EGa-3TOBHY$G=wP!i@8V@qryVP1y6zJ^a?%?|8sE(;IPt=U$oi)*r&kq3Af@GdP
zPL$qj=-L`K<$p{;M7P~V{oM4rdx97~<g9ABpq0+MW)1u~Uv*6eJY=vwG%)1~3nSAz
zMExZ;ZxW5u`I8XuwMr^&n{B{K$~A6>wkEy(d-_{n2_^`=&hfIhh1=ChM#~sBfZoYo
z!1LzZQ*SdfV}b8@*{?V=v7|^ldy_QV>ZH4!V}z8|$DZ7FF7vyXeR*iqa;=wntv3fJ
z$9?a)YJlU(_!~}1TKp#X;!jRduar)?G$9epu>R>0sjR5N!kCVpK9y_bas$i=pe|-I
zyT<m$^QEZ^Rr}sI3u!emI?8?`p2H;>=y-T^)A9?v#)<&jhl>+*D{GlPk)q(Zzl+!n
z{q_nqdiK2P?W|w>@pG9x9O&Rh#cnqiO5-PDz8{?#tV{Ipclyn?y7ZHVR%Q(rUO{Yb
zyH>4OXle?bydmh5bV~o>=I#X<mFZoam3LyfpU%+Kq}(Kq329(TzJvCOD|nxM+ORmD
zt<K%K+(PGHa<Sj)C_wl*t#NpUQ@&x3(Pmfe>s|{3x$y~jw@6Tczv7nX6JN`Hqcnmi
z5-S6nTn?=HF4wu1M!ajU`SOMfiR&q`RqC~y>LWA$4pmp)n(S|H%56MAe|($kmBpES
z&9piy2`Hk5XC-t=334;59L2F6ag{fuhU6F6Md~TtSi!g7^iutmP$qq6Jha<jx7Q&K
z#`9wl)!WqZACDb~3mif)^5;VKZRn^?f|SI~1mZ9#+74?;XlMJUmbS;lI+OT-0@+$v
z0?!#4&X#xHZ)J8t#w_QG3KD5q;F^+-ItOpyF6ql7?}S7T<g@cM{~K*@85P&oZHw**
zA%p-a2p(Xku;9UiC!z2F3GObzgFA!}+=3Qb1PX`39jYL>6Wm=23Mibyd6oU`^G<8;
zw)^9@cW!Iz-&#NBoNKHx*X*PBK8(^FHU+Bus_r+AX8OILFBGxp(B!a-oW4Hy9)9k(
z!0aYq8Y=tB<4#AmyUy(^10y?ozKOZ^y12*qfYK<guApLO^_o`WUh95{TfqhTAQG~_
zY^7)oqD!52U#vcL<PY%?%5(T(YCMfu^N(UBZG1{~s^|`#wo7A*F{l$#Yw9d1!}SOY
z{Vq<ETHm)1OD{)*z4t{m0$ot!hvdy3kp1bLPo2;Vxvk$0CvATGtM2v`R~yY0OW#3h
zwdr*Qx%x9{pW-O|H0`O^?ZV9e!FJ|eiyGz%k5O}>sjR4d+5(0b8^0W{z)~JC`-{H1
zD=wsS(Ba!NO48^D;96WEFcgh_{yMHj^Xn%k1MeqiCl>T%bLy*XSK6v@y7ZZBGq;Wm
z^f;sDj@lzX?wjj2HC_k3yfg3_3gR#<+d#~UKk={o1D1-X=$ZS`_kWeAQqv`nZh8cp
z<^Qa%554O?V063^@O9_R<aT~yZ_U=L*nH@Hugr9;G%zp^qq#nsuUo|?QWwIfbrf{b
zVv?A|6}iyFi_mCc`StjZ-sr&nQWL~@{#cs$jpO_{LY(m1$xe4!Izj(PF%92p2=*U~
z-|z|dC8XU_fPL|}|5rDo|M7=AiTdUpo3o|bI}>@LVw8W!%Rkvfxv-Y%A57*e>U4za
zX~}<dPM`nPIsK&kSLbB$FG!R6FM9Mp@PNid2|L+mHub(?VN&c!{`%SyrIPy`znaZK
zb)v*J-+@Dw?b&|_IudUSRr<!Ci1_aGrE!Z6YgTmIN};R1sWnjj%kWv~xNj%oi|tbg
z?Mu4}`;SEHKmrGI_76<<KQPw+^W|tO5**Z67iW`AEKbaH5co5}zx*Fmyq!~8ngw+i
z99cXaK33o6)QzQ1OM3;_`ix&A(RuREQ$^TiNGK#lOGhVmZxl@$iL%K`{VVKxWS3P7
z`gvUPcg>N7`e2_^4e`H#5^r_TEFFxq3;rLu+W+8N`rpo6T~|Zgd#7z)F(TYdYJ&ft
zmHyg?S8P5G)E=oc)Bue1Pw;9gUcb}KzB;s%AGJ3Sa#~#stdC@;wA!JZ_3)}eE#$%K
zZY?9Oib9GvhX{L-TJ1>@$PZ8AUV}h6(ZW2os~fiYLpy@CH5XN;$9?O?<b=T>kXY{k
z$L4opF?{AJCNYtd$2_FImlt>H^J|7O(PCiEC&@HCe6nNL=ko=bUHgM5ZYw`>XJadi
zt!St>S4aLPuXHqIFBr46QpR;YuBvj2sKF3-_5_;FQF8k`sj8#GqIjdJqIAc&exDE9
z|IvTl6&G3RYinlD<@w<Qz2YuiMo}qr`udyZpL8{qu=_<rQ(+2^bartksYT~PbEV(W
z(FWLQJkz^Y?{-38Gqd=XPPd4}&tSY_aC2$H{I0)6w8nLIl~)s3+0#~9+hWQQ#=c>E
z4)L@R_)dD9>C)$q%emjz2Y26XRNgY<WH4V(BIqCL+412w*+v<|Gk6Gx7kv1($C`P=
zi{~zfp0KTB^JHmM3+>W?!sXrLruRET4}xc<VEUAhUf(!R>}zSg`)XbMD_Q8XeBxT=
z>Pq1RuButi-n3`W<r*7dhL+#S^g!<(d(Fhm)D$f|7NhOVL~len5x<1dXS*J2FHo`9
z^QKRB<SPB%L3;Ea{BEq)KBd}YrX%xgfQs~Q<8h%WCFza3xi+W6jIkzkvKtM+sE;_)
z`)+I7Cv!zIxZ2J6_~5gk<1+bV;mZ(H(oCZlu1<QW9lwW3_IAQv6Qh^@ryW#}Vm_OD
za+wX=&9v+pVX@b@{DlyzNFH8X#h2O6E8xD>Bisn?=NP5M-jDG;@P)`jR~VK{RN@Cq
zihtC9u0VOV$WOUiRW^wB{`=b@q<o&^IwYPbau%jP*O#iEyCm9zH1g<(pMPId8y2W=
zjL7ij=brL%b=A0&9Ep2`Pk2i78#vJ}+0J}-8$M;l=iXalA>09fb8s5B5M}|N96rF>
zsnkDgXn7iisJT+{ftHr;=kvKPw$tYmLZYG-xHPP`CyoloTxGAwhKSK46|rladCs7d
zFWOh!)VeXVyo$_aUztsEy1X_PLanPa#Ky|hrrJO<t<M03hMlxG7rQ}oy_7tYt&<Hi
z;Dr`ji&9B7Cp+Ct9E_U50-3AqT=Q)}(am>7=!@i%ZW)10aern;X!41TFyHQiudJ>O
zw<M!x-Kn-m*?8g2^}FjCnk=F?^I84{;pn}osg@E0sSMZs)l#@SG}CM|9-)83B-vGc
zAYc|6>Y+V<C`nBuE#6PAJx)k9jc&(p*IPV=x|_RR)z(^s$x<Gl$M#u#{Q2%87u*W`
z2|2v&cT`q4pxsY5Mm1kuMWZh`&@*feI^C@ZgSD4yI#)?ir9&}qzSv?4lXKV;JGx+l
z<q*S1+aVn3mFw=LBj`nrm^%H-g`R90IQW$`Ed{#)+{oM_jbNw0i#a=PP65dtZCCH4
zOKzF>`m*Ox|K*4>&-43hsjf|KS4DLZ+*k;xoN!ldzm8vKpP*oB`gvUqwj|OjqwZ`}
z(1)sIz4=s<PCuC?XV))?ZzNSCJdE`L<??5K5DWso#IALQ-i>ZtEIbB^2(6D?s#VN%
zzqBr?lzzKFMlc|s33{Pd?=&-GyV&sy%G6Jq&yeE?((_U?5#S=mQ&`PbQ3LrnI<+}R
zPdFb`a?wSe+RqM3b}$+)dB4OgIP71vl_wT&+9OC4i;)Y>em~;>=GZ+#$x+9MbC^eF
z=vF(uHVb=baZf+Brr3t{S+a=mXYOXy$|nDkeWTN!fll-{a;oG>J`SQjpI=Z#RRMHk
zGDF$+LP=rNE5^&Mx?&B3fwfSIthcfq@Wv{0o93j52vq`rYO0gbS(iQ-QkYKVvcFz(
z3`C#Aq}48JJOj`ZKgRls*%S*hrtsS=HXveGJ;!fxTJ(CB!(?e4ea-}5f}x}u9I394
zpXKX`Bfc!=B3Xf}$ECDd&9`pvlX?USqQOeLNv?Gg)n>!w9gE@Xa4OF&ZcvALzIl@D
z2acx(VCi!Hk`Kwd1LXUh?8n-c81|VA>jj7NaGK*uzolO8?SZ&N_hS#BO6UG;`PLW6
zaOfvCfhao4k3L>2U1BlGt%b*3<0N7Cz3zN$7ei-B8`5GgahtXoq!;}@aZ5;D4}Ot?
z<+;AVLFL>~BkdG;cDQW^xtzg1d)L-?d7W3P>ZH_@R_i@7Qj1qp9BY5FMoqzOXN~*n
z(G|gY+q@5iVsfDEAP^JI{Zs*j`Vchy!*!>NBVBK)neX=Ctl)*gI=@q2xYPqC&g4p$
z`am*64@*q0)==A+LSGRtgn`uq@kRi}=&-jmA3qr8dHIbVy?vaY%W&l4$kCD(r5Ue1
z_v>_!;vx`^gf0^L&&MyhXZEY%mw2&fAdD>TDB1EOt^Uqh%@4sy^>Z|PpC0m<hdtC7
zlsTiAAB{6VNsHQ=Y<=HD-cs*+a6qKmLjBw7GPJh|W9ZL<3=8#kJR7*+BQ+g!S}Zb-
zw@^O!ODG1tYVu|mO{6!`2CniP+jR}-ovtNQF4%mM*GumkpJe$mJ#Qe{MMORNF{FNe
zE^Al~)KU2qz>H038#|wFbO<1V<$*O{*}_Hq`6Jej%g{}+I(=F$lzjg0!N$%qL}kT{
zF%2H8ek_g`g38kCPLZF|ZWT69X`77tBFTs^aOJ%x!iI?_HaR)XF(OAtK*liF4u3TO
zuQ0J)Qhfi$K1fBn#c_WltvlKpY2sjKv8IlRsGSTCiODPoO{mC!Z!nIUv3$$Rj4Knu
zMDImpYpk9c+bx@G0#F9piTM@|(J72a+Aj$E3HR2uRrWI#cu+W&{jPNUqFBqox&Ar)
zQ$827iz~J>tTP^(2aR9Vv8G9vl;H5nv9h>ODa`+Jrg$E^*)6yH6t;Q2*d3p@A&!;W
zg(Ahh6v%8Seh)P4BDgqNIC(<o0~9~ftKI{|w(|7Mogq8UOY%poY;g@mMz*)|E38mm
zM_b+2@Sn4=K~+w)awLbEO=rHD^L<N)E5Us_lB*i@w!3Bfjjp${;N9d#%(jJeM}ARQ
z#px3#G610B(J9po{(Doi5oJi>_55Pm&mP2Kx;}(^3cdK)`^Cj;7NMp$r|+h@07Pw%
zB6WqQfdZ^joxIWrdqN#hN3uJOf4$8`a4rbc5xS82Fi`>%==!<gi>?B2RY=_mZ<|^{
zTczj8-Q)a{02?u703f!fYfOE|BOEBS5~R~9>ZRAm3)IyO{5Bv89BNxk!1Jd(ew}g5
z=69qv$osxdct`~Zj8%9bIM&X^%THq^<z@h|(Q4mSHng^qle%chn5jW&&lcbJWGUl}
zEgolL1ffn6@;hgvqb)YTlJ|EA$3ln!Shc=HB*Yu~*IuHaX=Nin>{n9Pd?=@j?PO1q
zx`h92&c}XOEnGm|Wqr-49Ao7}g>)Du2H04e_4QQoB#Po4zWH<5I1fb)_et#PIC5SS
z1B7(u${_V8H;+mXg?I{`KARD?{BZT4Uxni(2T|l&g~n2pe`#u|b&%k7czJD<l{XTz
zNaiGwlEsd<_r80Ua=^ey|B|a#YkAdl-^kkXXLw{-;!am?u{J%CgX!7e{7`E3i}3?c
zNAC24mW2#pDMcJx57%a>me@l0JBkX(cXL^FhO6a_uR2{24qfkBTg4ns*>LfO!{vY`
zPvvNXhB2s(@x5UZwvma8kN3@8bNxkwVSLA3we44&%z5T)@(q>0C|0Ngc~ru3fKO4O
zQcrsoHo`|$ST&A1z~5oXbZ63YC6S{1!@cGphB(>&ZX*Vhu+2BU;8*gVan?5KeB)y;
zXVM~inoDGVRhVoy&4I-)FY+&#r8v4zDAeW#-i8c{SDE)20D*BV>kOllrCvUX<9KJk
zb&d|~mEzAXmEX6UMT_ldRe+ot(pB|z-)wa4Ks=NNw>LH&%?-0(&jLAuxzv)5K>r-z
z4geGBiA#8WRQr1*T3#NZGwZ84HUJhl$DYA(J)ikqy{n)i>h!Y6Sv9^AOpyn?E%$0{
ze7fOy)CPp)JOw!7bV`W=*tmaNPE$qGZtkw-Sgv5447ihEV!1kxqLs4Cy8)O}5_t+S
z83&nrBf83AV`sKAA_tSG-%VFTo*L}3m0pijl0w<oIay=En%P^D*TN>^QE>8(aUm8W
zAcPr7$-j%T8X}H;yR=w0yaldnx#WMB0@lyTWn&DkUj=%4mZ-AfKS^LEMp4T3H5pBZ
z8#E-)i};D2e6ZUb^S3Y8Brxtf+}q*WY!P~4sHKJ#SO(!dflzRSMay=`*HE%f6p4NL
zqB$kOBV=RJ&SPc5{mIJ8F*aNl1k!sqg4^ds$w32<%<UrvasW*fO9rbqw6}#sQ^1Np
zyi-!8$Xu;a&F~D=ObuH~mtA+1^*#^?R6!;tCHU+94N#C}x#J}&_;ERPI5k7*)>Pi$
z*^zO-39a}62V`BL)h7RqN%6(<X;<N3c^nlfIc47{F=S+v?ByR7Mr*gaCEQ8<4=*jr
z5E(4+UWGATx0dzVDj+p<9EXKmWA_cQVe*R$6_&|o=i1)n4yH-tEXG+g)<B@E*XMC(
z{)(hhaSe7n8!ylBlvU>Zp}YeoLRt-Ws3p=^W;<)DZB!_>sVW$$U;gOVgVgEAYI1_v
zWBtc8s_jz^d0)?~lMiyR$$?X1S2`}7B5<~p@IBCk0=Sy!grf}d(K!#^Kf7u6yNh<F
z46ppq!=`HA4POsUOirbi(}$Nle40sj_$upr=z03_T(A$f^YZuORETPcyjQwLA8*_&
zK@)D1XCqaQ0huGH!?A46DabJkV<rkPeBmybmtgs@mQ&+?KuuF|=!!Z{WSIYheJ=vh
zy<Em472+LK`F(s`@0abxtLP5$BTzH@Dn<r}uE2YQn>)d&p^TL_G=F1b1$ug|q16eG
z$z@qFZjio*KHGnud@SGaZG?Zk*uzZ<b-Kgl2|;4_-kM!kg;m<zq~T0&PwQVt7r3f@
zBI6WUxusD%)}6s(jsCoOzsDpB9!Y|}rPfAYGIBZNBnfOz{&Vpwf=WuWK6QrI2(t;M
zk*B5Jgpu0*No7mwb~}CQ1brY75aSjfB9U3gh@MH&UmMy3qpS+U!%0~ofYe9IyK|%I
zS#6lw5w|^|>Ep@ptscc<OX;Sm)zLNwQ7%#nTq3&_AOkSAxD2+{1_e__R;N@!e}sNm
z5Ix!U@S?)g^LgRQ&&ZOcP$eGaz}}>i!^DaoP~uz_z_HIRl<8&E6`u2!dhcZVcZgG0
zYn7n{5jUWWYr>S0)z|6EN+~lzV6gv))0g8=?BTSO!_ddODJ3_yoPl}AJX&RNs~%%b
z`?LLtNHxCr#c^%|+mcdWu>*ZXBN?0J3F_2tm*FR7w6e8rHaRPDRo8OT-j~(qdYRkC
zbU=JCs<~DS)DnVaR<Lc*mFQLc-D;3<@LDv@@>Fc@QCc}W|Mu9jR!2<^oVrC0<NCb$
zY0Go)%W~@K$%S}+>*=8za8J*?g11E<G+j-O2*RzB^hD_PCWrM)wJY)WZsr~jZ~frV
z5zJNgPLTGTyY1Na^mHTNZAZnA7x`HW8H+cj{@+qLhj#ZhOM?Zikn&umd!ko;y>e_D
z>Lxx}EycRs(MeM=bknwD@TdoAmsh>Mb?Y2nTIC><3RxNwf99dtiTSn@7~19fn^<*{
z!90Der_Z+T?bA0LU?qK69__VxlV{8sA~@mVq-`?rWgi*aRBZ*xGXR%@4}_^4y>-xg
zm-9C^3a-iV$k??$Cc5=XZJT5bb<e3Q#+H0Oj5b%x{rLd|x^G(cb$Qkc)s}sY<!`nT
zYfN=C7<|0jesDFx`|Q~#In;zC(OAz<H)ODZInfTI^wdlpLM$`wj0bIO^4_a3tH}@}
z7Z@zS?w$OIezcE3gcRH!Au8-{vzOQYtXTJ&Z~an%)MnJ|W7AhEb^sXQw&A1~CWl2=
z#B$ARN^5NEMJ!jVgiI9mL|j~WjB0FfCfz1jy)Hx<H&?30O~QPQ#sF2`{AG+lpmg_m
zq&L~c8)i0M<xlNU*B>zF_P^-p)jz%a<Y$2{9=I=5Y_qpLXWY@sondXw+p(qf@S(P<
z+vaii;mF}dn-1-sG$GZ(tX{`6@a4gDu3BQLZ$FxrUkhjwm0@F*FJ%*Y^<P{7W@g3~
z*$=EgCii*FoqTW33$~Ccl+B9e3X2#0g{;ul!}z_p;UEcFmWi6O1$T=j!n4_@+&UWQ
z08U#aYp>m#dYNI;OZ2Vb(2L&_>LD+sZTD9{P%6jqjH);**i6z1jow}ab!$gz8x8+;
zRcFct&CQQ&^b%jF)c>Mr7aaP~LL72-^nHmiLxk$+ASKCW-{I2L$;V+Y2{6|{VHT`E
z*K$0+oksZx<{gEyQujEv=qcm=upm8{>MfEW3U@i5&w{SRUTku75m0?pR(@MjfdHaR
zwhH5kj&`XZR*uM&7T@=pbSA@=_V`FdC2p?*O{NUusYJjM!GZioXQ$5?48>i%hSB(z
zrHsYtf!&HW+j;%OfWyji!{{Jt0h*cKvj@4;*vL9)0cB~-ZfUEJeqG@&p|bw6)~Qc#
z7pTm~2F$Li<DB>Lu-R<wr6cM)Kqdt5p#|AK*e_m(7<zg5m2wfDua?81<cQr$b0>_>
z#NF~QR+W4M$i;+Iv8OYWz+1IH6^QKrhNuUurhZP;K{sE%y3^$z^`d!nZb^G}VSgr*
zxq%`2wV^-fBo0%`=h~tFvt_-VxVA}pxRM#nZ!O+n*gCdmqhwwnzSuZhsG^L%5bAZF
zPk8H`{s+?hC^hjfVeupUw&7pG;@y}3c|`et!78yBsYyVsO73-u>Oc78`P?gY`HHtq
zM*`S8ZkLlhHTVBTkRK$l=6-;ckJXhnQ??)bka`dN3*P>#5nWPb|6My)CosZY)coI!
zMb$43bl3_0_4WS(JpR8-=Ks51OeJ1p|Ki{}7Z(=TSAvZe!Dsl@dnYhOmq=EJt^-lS
zM06!-Lq$UvaX@tK$1Bwj|M3)?#V$jN&WioImZx5+H9;2^OaGU$=<u7&TH&Ga@Dmj_
zhd%(lCL18(&(bYRNa_~cjG#>B|D%fizgZagubFGtm~UW1d|;uvKvqLdpXAR3|0+l?
z*OBIkBjva<Ck4Ru#GEHO=v){Z>6Y>s_BIpgnbBgQ{XKE9wUDf+e9huTyIHRt|JwR8
zuX=0r?hhaI!W53cO`aWv{qZlyh5_grnVomXrSgs2CtSJtJgG543#*zJjz+a*Th5B7
zP&K)b$sr+KXH+W0?=n(&=WvCf1=19s1WlSOA$eo;A>>g~<|XK3KKjD?g0ZDSBF35Q
zx>xby+jP{LJ5wE9T{*bsj2S|P9d&EwC$XKrM&bp5Q{87H@#FdN8pGFHC?2ke*+!?f
zdBfoa#lZw_VttO%*KFv`#M5{%S4#r)b|Bu|<zxUhz<zh$T^)=FEwjb9Q*an=44~!Q
zoN#7567PhLNuZNzQYR;rGqXm=+nojJ<f_m@maC(k3)d0v!G0vfuycmB0{W?eG_O~x
z*nb$~n*cFf0ba{nAFfEm)$i?hI8APQ{%S{Zc{tc{9^9$fS=n#?WC6KwUaM&9mAbfU
zA0CXO0$F%Q-FB}x5>{MyPaf*M>)TKi5xhQIy_|&x+_tAt-AVwp)$wi`Z%*`o8cfI-
zod!xrJz>4e9L`uT{_5@OHil(Y1)qMI0s=cT`d=z@c-f)H7M0$vFPp$*UpTF9O=v*u
zZaX;rjDDtfe7`>wht(14BbTLz?v@}f^SVTMh?|>W8xDVKtEg13KS97b(Qu?aQD0K;
zexwwf3PSH$M3&ib{0%fYwW&$x)9NzpE60@fKFjpAb6a`<h{Sx~uwRi#_c0o`-<#E#
zEMdLbyb!}}r-!VQVdX0?^inZ<^TlBelf}hVmvrGtd|F=${J)YF($Z3iUtlzwm7om@
z7W`u`(VYQh;9VuYof^Mj!;NFE-lq%BtG|QlEwvf%OX6oH?IEa8mW*C?kJbh`>htrv
zquyjN9Ax;Jn3X4ou7i;S=Z8%DZ%)!C9+Zqv)t+j9QQnxa`xH_=xI<Skt31uu7r>ze
zuijZNEJqenG74)D{(9hb=3rkc3F_!4ZpU2vF!F6m)utz=>R#1Yi<~QP9b-_U^3bvj
zAKQ78k|s_`5US$}uX8fM)h1C>y4-@+H6xm~9#fJNg_*-4Y8K_T?aouksz~va@A{c%
zy5=VqQeFAVrk#`_W6=k=zIpt#p*BeQ?Gm?s>V!}2N<V*orAK(ml2zLN36w^qo2zAA
z@C=EyYq${r@nu$T*n}LtRF|6zE@|GqI;}0Fot5fE)<WL+-E2p^mmZ$18T>(OD8NTb
z44^;Tr~1sjIa^qe2Q8{_`4eWh-Rj4w3j^;|#dWX-Gyc!nkfE-hRpyQcM>RjehIk+O
zPxLSKetj7$D+@wtGHc!?nVIdc6>tGL*Xr!XkQoT7;u65eI;jU$qs#zY@=`rFfiywK
zgMwbCP8K|?7XUDAV)9@Fs4cF(;5jM4Fg^Vs-SqTD^DbLimAWXltK^j!pcmNfCWaCj
ziI~H6XJ0%mIpKQoRQlC3V#hMH?F?1f#_Fn?WXBh6B-vf{<rkO6Xqzj8Q#-T6Zg9zh
zOK~XkDn3+T=zL?UDJbuh+I3rFSn+)IvJ{5z#st@_`RPYYm1w>~v-Rq4;3_HC=o1Qs
zF{(26X#R3O^1d-%r^Uj4PQ`g%hb8{fvuQd@yBTqF6SmE+BN*=51PC-=ta?1P=VdbE
zeVf2vd?jeQ4@>ntFC8`B+RPd}2^tE-GF(LqV(YW%IFMZgCp->POhv3r*njTbT!TQ1
zAz{7A28Sv8$5YnacBst-RVF?bv6jy_(II_Do<is2H9bwfyccxkJbyL<Y-y_{`z&K(
z16DN&AN$HRFo+BTBx_Uny@vDr3z<&4lFVa$jE)W)_dW?V_js=-Fp3R4%uy1n_nP1A
z5NYD-tliz*W;D;V6qQpua6?TOfSYUlo#UIxO(BTobQnb3Uq?RsFLF(Q7|d)omxU-Z
zv}AAhe%Dj#O|HI*0jf$?&J7E-qh})BckV0?uzx_{6bD|*vlEL;_E=U_&o2?F=4sQO
zxL<o8QsOS#xJkGSXZ)M6_EQ#ejw21CJL4|bf_AoAt6megr)p1ZnAMJQPB$Oce`9v^
z1TyQ+Rho9QnL80Dht({;aWe@c>wO;XE?<r_xqwJp9BS>Gm3<4+fPdS0F-vvvcZf6h
z8r_m8C5Ih+H6lqIn5|PA--vWj>KQO{vF!i`17sPzE``5I5SRX@pPt&X9f##-=;=Mg
zesk1BydSIuPXUgHf-wuG)PvO1RRP~$R_-pf?6(JrM2qgOsVc|3B-UztgQwhq#S)|W
zKL-EVQzx=7tB%q<MqP$q^z(o^ocG0ktipqX?+vEsJ_P{4&&gBTV_TUDVhg{9${JCw
z+g&-E_)Ly%@zn;FWo)^ej7{^ontGm?)););o7`j}$1rzcv)QU@rBFas9lRRon6x;%
z&~$+o3<f+Jym3@=Mg~X>Qp$pwb<~R{xp{t@$i9pxJqG#1cENxqemqw1dR*|~mKB*y
zWJ6-EumoFtPtT}y+UVLUZEq@W+En>(6CUEB0ZQ--t*M!@?iy_gqIOI%>G}15Esq=T
zsMkI--7jl}@$LLcnh1~74Aqa>o9dOop~jp9X7M|@Beu!Dku0Crli7;}7pI}2;^hUU
z8~V(@8Tdp`I{zZK(a3Pyv53|t@plJglHZ927M=#x)n9+DxTIa=mmg+gEZn(x942d|
zA{i4i+`IYsACrzEnN!ORIycxGa=)<97qC4|WxY$k2O3M`-*ZjGkELo;7mM1K)vPtn
zyYNfKfBzJ9cMOt}5{<>W5ju8L6|=?ifULER0divLFCNC?DXZ`hADKkpaEhN1=D9s8
z>PgmWu-9u$<v%(QuwZi%fkHLgwUANOOnhX#9c=M_B8XEXke*J~`%W<bO%;*MSm;C|
z3hds||AbT&fZ1Iw5hq`wkl0se>Yf#RAxLjJ*!4Sk8aJO-?2S}pYfskBNm=ki#LY7?
zL=H$!XEu9Egg*AbIz><JL|C)mOnx*`b}{-~PkOqt_X^@wedi@jgR5E*sxZy%G{p-9
z8W@zU%W5{EVw_24_^k`>bU&*dy|qc}2-V%j+R(VYU)|ur$(J{nvRMt5uqal+vwp6o
z_uML?Mpj!#Wt&$98+(6=L#>DU_8*!@Vb1W_#Y8)7og7DNLK7B~+{!HVQY-!E8`GFh
zy?iGc3gu=Lo~i=QwZ!!GgOA>L8UvJ7f<x=SVFjC^i4<GBwgfUn&S#FJRR`WeWfc9B
z5EYIGGR&W**Fvu@@faf^&^qYXg639@HRsoA+}%kf^^l?Q&zG)C0-Tp^GM1b6;TNAP
zc!pm;mFy^%m-is%?O+LyShDFTCza$T7UP!en6!RvVP+RU1xOyLE&BBg5BANQ!)}%z
zxjk0U^F6e91x!y8Q}#yR(!sDraOwvo2ZtT&rzD=TI+%G!h-I@{ys9=3=`^Y`p@NIQ
zR!8r)xF<riJ_OCHwKHma2I!S7WXFd^Y8AB~JxPgV4rJxbikMHkq{s|!&X`s4<vq$x
zG$hfy2jEIVmA?lE?08L0c{;bvGLf<%KnCw;fw1B8$Upz3U**-2;5l_XEDEIKmq9)I
zST6C4{Y=q8K8`g|g*-=3t71*o$Jl9IAy-Rs*>X?6IZ9h4|9g-{F}Cx-cGjoii4L8{
zORWlqlI;x^i}1{J;k352Hy&CQk&uiKn%ocrd<7&3Jyc4^qP^_AmT6hwIXT~?YH4U#
zrjvc0P7LvgUSrjNXr7~@4^**a5K|=qfGJ7I40~ZVB@Im(cnS$+30~e4Hp}``-N`Jh
zpYRz}xJf$}#T(bAv%UmnL3PLMGnm--01U?U*XbWF=6H>s4t#ipQ8(xm^S>X`$mzAs
zy)xY2t)4FvEH+W3zjT{%M37tZoqU@r!4P;Ll;uvx8iuV|ak~_$2P%j8>Mb&YT`dQb
z)kXHfhAddy!mqy<xOy0F?5Eete`{*|x{baMG<m9T%kfG?!Pvyk)c((<+OF0Xu1LUY
z%`-le5)@e&i}&P@ck|CiwYf$o^*?e`Y~6o-Wf*A}=Iv%NRquS2>!nkaZ4wl2`91F!
z$yF_%Wx)a5u3F!l@T|E8DC{(bN*O`d)K?!+4=dnw{gTwJ$0m?<lnq<s!It?Wdb`ct
zR}4T^K_Xva2t@imIi1WxOo=&<7ysbN%=dKiI(Hc98#c(i{G@9F51tTrw;v&xu>9_~
zMM+^qX5cGU@vB{;G__wA+AGTV1E2xtnl2wX(EGAwTECSvw3wElqk`JkcfZ=NvhbYZ
zliD?LwQN`*84K>Gxo#h9ow;=N)s^(r>LVHa3>Np<zgAsFmj*Lt4aZH?=syI3g#9=W
zUkqz4d;Qu0?+AAz`saq2X6q;>-d>;eL>Ag`#K&DBl|)@_jep!N_YFDE*4S{z%Jr6o
zTPHW+xE?ekoZIio81oW2q8H#T27N9m8w?E63hbLa*(R%~#x&jLW3pL(TN97X-QIbZ
z{>`eAzEQ57`Er{*YF$mb@{He=(TU}+R~8}smMUpcx`KUjX`$m>tC<CnJ9B^k<AqgI
z2zjBxz*gk+$8n4!f6;WZba$d53)aBdi@)AHJ`Qv2$CFUZoNqgSpx*Ysr!4k)Qi>^C
zQr`p6yI?zVGXaT(y=JVqK_#*Ib-gldF|PN86?b<&scN2WUBj+;>dMGtu8W%B0e?$e
z>dg1c%X4e>bMkuExd<9nk(4faSaBO2{4If}ki+`PiV#_%9TG&+<?6`G;^BjyhFy6|
zpCVq=niZA3loa+`ARlxX`>C-FJqE|TXm(`No`af}bsnc`A+DmIqz5)D8cGK-YOovO
zvp2GzH`dwBW=Yvt3`o#eE;^y>>@pUcSU#@L`MsA&I}x)9_HD48Fo)TXU7qf(cLbv|
zD_7qEOcy<W72I-`MYCT!w&jSCuN$l(_SFqDUuNk?l$K^U$yh20d+;7-oO8L@t=gof
zpN(cIna+i?ROZ<sqpteckmqf5!KeCsJNb`|)3PFhg%c&(gji5#`0bYjcH(lRZ?GRm
z>m6>p|7XQxJ3)ha{!xMR?+-HJt}C1Ey1ckbw;msZTY~%F2;7Dk+J)F9qZn_d#&22C
zx95BAa*9)>c0n!woZ>STN_kph&EGN-6mf)9+x$k&eL8-YaQCRh^QtUOz6>IId0uv%
zo6wR7Ji8uRauxPnc>WLHtcWDL=k7kuFrg~$R=Td6X!f$<!CwN1<-;L!!Q30%)8orA
z<)A;<(s@D=?9o5K#80mqXPbY_*#Ej+`Pb{6?_Y7|@2CIq+<MFVuh;wF|NjSyQWHDx
z+vUn%Xy^aY%>H#yhwUF_65zIBhrNRZNX)HqR{wEuzsCIs3o*`j(D&pGMqaR<CBu4r
zHGZ&a(sTY9d236W)=#^92fJ)jHP8QchR<JK{Et@ke_*Wt$Fu#Qb(+VRn~NjW86<Ty
zEJ*!lf?rz#Af;M{nnjGn>Wh&po(R^3#DpY7-%xyLO%%b&|4S}ZRPqb>P+DSa@*n6&
z`rW4rPzj7H(J#E=ABaqi*|$&)ILY~nwX|7V9owipc7FP;;j8D@8)5&s&ztqp$oA*m
z{|FSsRD#C)Gx*jPxerQhUCD4k!$sAC#0fF5lkok$V6t07@3Uh*x7%tlf0XOS=)uLW
zcO*mp>t#3^v8?vKA+zlm%cIPkI^_?pcXOLHb0vN`m)_D>V<F$X8{9*6_pk*4@wJlM
zN@W2#^I2F%M3;-rOiy=z_k>`9TwQEc-O`6Ef7fDpaUr;kDN)Q<agq3j7U43Y6$4rd
z^fqckV&nY^l4@0w9@%}}Xkl^}O>n(a@9}8dZo+aL6GFFM5Qg<R5fW`1^ls~oxxNQ2
ziav38^WffJ%gPbGa$EjZN4eF%{gtpuGDydhg`@f|x0hQ8FS8b@oSvwDXl#73NN~fL
zSpBIRwm*;V#-$rh)|2))cg}CU>>9{VTQ-C?inVyQz=kLMuUhY#B@c<($QPI1l+S7Q
zmnEH_rBwPX1S={qV-6Ga4Y(`kk^`0RPI4oKZ#!y93WwHe_w{E-uALKKIa=i_&kH&_
zel!$wWyCleJV7{j6&a>q<T=EoTxBNLQdNEKOgddsM483=`50%?E~R@N&Xi(_kIOCQ
zrUQ%qYVv;Z?_u*4RhY4}3oDz~*bQ~gij!l9TAg_NJbPM3&iX3Gy^H*Nh`2zR#Dw(0
zHq-gkm+csnN}-(=|7HKhtn-0&_p^QM8_Jg4qtc<XV{3w&%m#0zO1kf*KL2Uxx5{rb
z2h&|X;j(a8@+@x8?rQY6_>B0w>}!qnLUU>Ho~6hviaB4oL(6rZkJWDUnuNSc_>>RZ
zAM&k3X2pCz$<h!W%j48K2UEk4qX*RUc{0o`vA#*{1{0;*mCM7t*qNLwH(VSUxGHDy
zWcqkzx~xPF!)d4ttNh@p>{vO;NC=W}TWfe~s>W@M5IUvzfrC*+!eCC!=rVEDa<1jz
zU=Pj~MXv&HtZ{T&V!G$5=bKhb2j5iDvGQ~X#}%aSIDMcW#DGt^hvfFUJKa+i7PMR5
z&@Edb=XH}JJpzIHsz^{C(GotV`R@pP0`v4)UamT!_aKWczF*7AboaVokA{|x%fDh<
zJsIxNZH{=X6z))mxPM0NsOH;u%ZWg%)?&DJ=kh9I9B!5aBn&*&5!HD^h$g$PuNJ4+
zaGbO`@2pld*0#<bE$<}I<!a*cKlf#Gz>MUF_Y)Z^Z3R2--N!zL%THIiI@%wO(>!{@
zX2a}?Pw0X<C?0ca74(K4VVeo4uZNQv?17~b2FM75#ZtGbT)-bT7~O8lSe+|97m<VD
zokfOpnJ`%IXfeyf(w}s=&VO6O;cTC@J5pg`p`YywDiMP?yKVIe9WQ%d_hD<IF*+uu
zN;xnOo>$s(f!Z^7K80pBHa=34Fg&>=<=g|mL*JUlAP>~yuIFM*MR0K&o31>@9p)_0
z0*>l}5|B)n-jNbsNN{0B>LafUzR%n~H?V;O=YHvGE48JuvKew`C9yKwPB1CiqOMrI
z-IxLI6eO&-)WxoT8S{X7bg)s8`bHS**&EwhxfT~;Y}xm%5}Pt`_wCt+>C(m#2+cA(
z<%t~6&H0Foo9mYO<I45JMmMzhLM=n##p*P4i4aAxySA~nI#)mVo3Vw7HFWEA`(!R-
zfyBGIR5w4`9SR}AfXKmnH@HL!l<EV$s>-%=ZclAzg|wKj*Dp>4lUyb!r!=Ecdc#x0
z#h+ph=Ny)_W@g}PvohA%MCnObg7eb!Nd8>kj^Jb@da}SzfB37081g$qQnPzkQG7HS
z&Us8JPzP>L)BIcK4DL4#-=A(Xf*+Ann6HKj`RZPHTzUzj`K|V$;on%JuyO=dprFbA
zfZyJ=udmpB5yDHfTHBTSiy|bh4F4hO{3c2dvVJH-?mtm$tgq>AxF4K>%OQNIr7@$6
z<>TDFa^PZ((7_23MI9>kw?JOu5Yo)+dg9$#XJ+~gUd3CO&)iVQHl9+w!4In+rzZ*V
zyJ~U+(-A@%zZe<oc8)l<Yc3?=rH42yasQT9D_$B()AUE1_Oe3#F0BV@2fW4v_eCm9
zE!NU+Ol3-AJ`w{GrGpkVE^sC$nM`orvo^pzC8fbpNPFo8;n#~tXYOkni|kB5=~u)_
z;)``+g%=o+y2wM4LSpwQD#T^h>GEm!kb!Wc$xpfIy7qjU4{KO0%JTzHuwVvXdiDNM
z;BOi+9B>Pr$ktpz7n_nni@&4e+aolNgiJxGENPwjcmXL9M@Xr-&-OsAw(FRHznEM9
zn#!lv@gIpaQ6K}7XagesMQM3Z2lBSoUglj|XA>daRbl1?G-Ig*@sb`G7j*Y#btj|H
zfJ7i&$lrG7Ra2-rl!-<TcCBE45v30GuXi||NL@n?LuSOQtVTw9<J}nxmV}<~qa8?>
zl8FXGhJ{2Nt~VL><>vgwoVT|c4<Ws}UBe=&hnpX8O7$B($PKSft)&__c{np-;vTwN
z84obpW(r#k7dMUx23@-yO{WG})FJ3<M5~iSLjj==bKTu{*-=evtFWeS>ExvazKecs
z@^lN@7C$x@)wFEWrLqfnT(+BC3qZoKvC>`Xwf{!bt)dQLdc%f^9-?cMd}8e?wsX|$
zm#fR-J_yKZNNMpM_%hSken)8R6V^Co?w88XNm1v?=KW2DH1El04NoN~yzDS<sZVcQ
z4Tr^w?Zy0+d$yO(e5ZnL?7GeeM_99u#<u&4Xrz1vAPDFEuB?DK1qq)zOhf9{gNzo4
zrd&tZm{n=UY}1n*f~FcCpD!pEr_NHxZCpf3rO+?W>tPvXhcvCLl^FbCGpG9jU&TFi
zk`$#1lq4!qn$QuEvfz+~`Dq<DpF>Q3We|23h?~EvTkFl$9@E(`1>+Cs!)?OZO8L&G
z?Iaef>1r;wD)x@4dxv~lJRIUu#m~c-fGW&;)V#KX^hm(Y8O`jSzRcOcZq||km&Y;c
z>u}Ry`*~-@ZG@nrgIR}^LpsmZH@D#pY`2=HGk5xyd;Rzb17|w*LF{LvR21SU@!_cm
z*#(&G3FD@r&)USOLWfVAxI~z8N}>YLVPWNl`tmcN5K4q@{8gJ$<>KL7rz2qh%M?Mq
zcemPe7U5Z<WoXE5^l;WoI@oKrMD(N;!5l4#jM?AX-!#ZysKy}?5dr5QR7eU*+R*D>
z`~_E+SI&9ppN@*wsPf2;m5A63J45|9p2~8dr;>UagZ9Ud9$k6PP!`eA&eCPgS)E-Q
zoYKIog(r7fjC`CqZ4G5rF5n8R?VEw#o>Y&u^oPj;Hua*_Lq-Nms%1Y<<^+|!qUU^>
z#w@i3q2XroCFi30-CB_Za}Tk?51#Ho&ytir3ny@`2?fZW5Jcsezf{j~7<C*uiN04F
zZ7>*2gg@Eu|01o3NgT6!CfUo`j>uesMZ;_0{xLJhjSBYm62z+78NA?(a|TV+YogWC
z|KbA7A)qZ)H8p__X}!hnXvoq~T&_D|=iHTUZW)>_B}VwBS2al6C`6-X4`!Es(~=B#
zyGsgFT-5o=_zp%WhAJ-2Y>sOu0XR}>4oOi}Z;#4mYVB|((TX*@>0HeY)z;bvz=LaR
z`Ur{qkGuqN?)ipXriD|`T;(agNU?=?8M-_EcwG|UU-fou^}O3Eamp7zYF;GLz-#wt
zM&Hy188omrUcK-&sHLmL8&=Tglc>PY&T(6By)3_RWRg;{OP8WDNCIeotw%`r#!VX8
zh~Ok!B^pYfnB*THv!D!!M#N@8qTenHf8L2T)QGX)Tr*l*o-y;d>l#JYwX;qJcqZn|
zgaQIAfF=y3G`gNgc-)7qm(#|vK{s9kbNMzhBKKmI-sTgMRlLk6?)U3~*FSgCCFMh<
z`MJ{A>QfWk*ngmrx(GkPRqj73?BSS;*+ZKD{da(I1|i3;JgtPhN{eq-QI&yt5sn7`
zpoEG}Hnzzs;<J{jvZdyoJ$;k+As#ngk-YebXd#ejA8tAAi!QMz5Y_k9jnv|Uy4!ih
zo?U*6;F3ExM|BtyblGc-4(hzkk@bm_=j3P<{8CY9wL>bp+fCD?aq8GQ#&++o+l=ps
zQeI75H;gd_8<;c}F7Uy1s|wLx5lVY?HePD;9@IfGv30CE_W<Lafmm?du1>YM4+K8&
z$IQqyT~o~*_iX32>&oJ&%;97y>ZClr-gFl~f#oV`XCj1Qf@g2sn~YV(uuZ^coF&!v
z_f!?XM<&_awN4-#gG9F)J)_d{e_1ZJE1y%#(~x^LwF+We%XT0^GP#wIQv-jFp~-_{
z8(m^jz}*n$s+YSWNQFEmyzgU{Zf0(Ao_h)7-)O06m|6EDS4B1xYMXsD6X%^nRur5=
z_xxI0X{O9HAR|U|=B=K_0QBkP#8i_>Z0v|DrgkG!+)stJ;`=1w27gPWnkMV(T3Be>
z{jk#HgeQz;O3_{k%xAED)sdi9ggwn#b3uU_L9ddL`doMA^|L1@1g8|a@8xooLc>4l
zjKdr>KRqp7(;e1LAf`-F?L7t9d}^skTOCNxI-aCO5XWi^P>Wo6>+bNJ+-9Ad`WNTL
zT|B1wMx_g%=iS@E(N)s(J(1^pjX7|yde*WaWHVXoO|k-0MH)C_D@*<4w5hddvR6zd
z9bUGm27aiQo84r!)y+?fc1&JTqLWmoK_&m59jJ^*pxE5TaOboF{6nR%WOO6DR_bj`
zZ<-&$%xw4Tqn>SCseRjy@~43An+oF6#=0DR{r%Z{=6C15t_41c=>YHZMzt3KF$359
z0cx6w2Rp0A@Y(9m8WIJL&_c^&p`cY)kt}$zsV6uR#A-bLBnU;HaU3+Iq{n%(|9duF
zvv7iS5~}K*#+*OgQ4ktBK1>{co@zi#dV1UFnsy1!2%!_<pcG>!FAjgk9xI=W!2|=I
z1P$nh$n$3D(qtYfQ`s1O{#dJ;=#zbsF2l{GW$8Y3)J9mVfz-BX+1W4<r{>)0tAlDZ
ze{M24l^w3M@AOkd$=h?%@wpB{me6ATnmcn>leK~!|3veie1i%EHZh^Z#o%+;_<=)W
zYQ>Q1iR`in=a(<ejRJe4+4PJCfjfk@uZ$w?x=IfVhx1D)Nxc{*3c4%3Xd(^mbr0B8
z2RrTHXM@2<RFbQS?wkk}`N8|w4?&Sqk_sYuuTFeQHB6U0dF@<E7gB^pnI@(zC(RTb
zH%P7`#1|Z1xuRePE>n}PQ4~N|M`LbHDtJK_rmoC?s8C+&tib^cIg*m<Y>w8tf-iR?
z7aA_6n}0=0*jt!(svPbZmBFB$2TvNB*$G~o$ayxdnM-ww+OQ`!qkqK8=0+CP*8{<L
zI1Z&n6>U>jSQYx=hAOKt@8sR}&WJ}%IPYNJ<`$fqm@;cC=0Q*S2GprjsuOjx@ZiB2
z0`e%Ibt9w7i8X@dJ*LbJU3Kl*UGZasL=#!X?=u$z;f1!uh{N4q-A*qR721khoFZnL
z7FLi8-9)}E4pJ3K>I<|a7RvjmlQZWJ6zvuZvs;RfFF4@Ce~skgkMN6pI32?tKe#w3
zc+TVpvyL~1&uVza^Xg%eAsPOryaCJDMk7&yiX9)-TQome%!}0QBQrv{a<?XTMuwF!
z8Diwgx)VQldRd+v#U{a*#m)B6gp43HFaNdr#IlxIOPAX>0pbG3Qz0xj(<isiroP=n
z`iRy+J<W)wV^gG+gLs(q`4Ha8$k4?+TeshEJSoTL^@`=FjE~n;+_TJYBfzBnve{SN
zBjl7+^8G^t@=6LaK$C}Ub>N64iRO|*Pl7B~Ar^HhbfVv`RQ6QF328o`Bi${?ng2<I
zP}fJ~4e$@Qb}Gpi`XiA-7@2Uefg4t{4Zr+xh=$<~!7>o8h}qw;jaDJ&VE)%vh7FFS
z*wZ-Hp^}wAdD@v%fm1I0g{k(Gf%4mnu(`76dDSCUIfK+2R_C7)iLhvpPBDa=4lcYY
zUl2!Z7Dg-Fa1=*A{5%&_dD7f*qLO9l3HF>C&6a1k5#%FVd{s2o5h@qmavM62oZ#DV
zibl&vD4W0MY{adpaJxI}ycw0ZIGggREEzy9;ziXxNw>tZEHpF?!K4$JU(5`~1fk+=
z{8N55^wP@8U^8rVxHAKr{Mp{?xi3?<j0tI1q|*~)!|KRHXjpbJvSZ^eZfl!I&oMSK
z|LA&<oSgLdy=ft#q`LQKc4&TnKUKBPb^n_?!SDde0EBrW5ovKTGwI}Rxzo)vq+rq>
zCC6IoeXoJ$#8ZzNog3ka@?c0t{_V79QRAzNUmG_P9EN=1b)qdfzq~`fEk3qzxM2pA
zsT3|L$R!Sj$bQzyUlMe^^o8~*HXqNS)fFtGCMt!5iihSBf3IGO36E18%xxrS2qS@e
zO#_Z3#IZ+8Js0d#D{1+zU&x*T5}95_NEn;PvSJP|9*ETKiD9&sCl33AUc%FwC=qn|
z-|bIP6zFCzw6($2S@2T;ccZ|fE4HPT{1Zi-gwnzt)}i#_1~1m?`o$7DguOxFOCT##
z&^6RsOB<=zb@Ah4?RNSNbO&+Ea4?gPRDO)tAj1E*Yyk{9$Yvfc5&g~&5y^bXkk1H3
zk}MDC!M||2MK)n{9k{@LesglhJNE|d#OoayGe2wOmGwJyc6N$dS=E2%wXQW%$0SqI
zCk=>fwNyCF2;xU}6rL93!ektez@IdgOAH(R*4fAK)0+HiWlrw>)w&eKHKdV194pVr
z^-{X^b;p*cNHmSZnn@v}8Rg4<<m<@N!syWP3!z+5fcfTPgFJ{~{3M-QTtw_dT$8z{
zZLz)_!gXb0Xq_EyXZFhEJCmd&g5pERV;pv_n%~TQx3*U&y?!F3OK{Rc@@MNRXHCDi
z?xvge>zUAZM9ce4597))&wdbm`#bwF5G{s!1)CJxDXKzG&djbDXzditSug0?z;tk5
zJ?V?fVxQ?Tc=@t-VV~${Y3O)nQti^z@rp#8GJ3HApU42ydnJB&P@Wf=F3*N5gZt0r
ztw57in^NdDNT-Sr7JY1+Dlh`>npZAJvDaXvN$2@|bQV&%wfsfBe{yk{(MDZ<JTn6C
z6>TST(bL_%D1%Z6zt!w`Ttq}@i6XU++(6*-$%(4oG%#)P%ksl7f<G+Q@$GC_-OB|@
z@J|P#82yuO^QsxXoSi(|uuRyRnX>)$Yf+Ygk56!%fjA80W8P3*yHfM!@RMT1S0M8d
zW-0s08zAu(-`TdH_a<(XJe@?}C+AlXW@4+j=Im^@MuVi2tzNeHDc5m&MWQATv8;4v
zU{)6N?gtmMYtlLsLlWYMm_H5otR@ETVszK}st(~xgRLZ~lafA}{M}Q2$$ns-g)BuL
z`@oqacYyxoraoXLNd%(L9c$Dc#df8sw429?1xu`Oo>J~=9qu%$w`?^3W^7l8H&r!s
zX0{b$L$a~uGzVuHD=yv3bicUPr-W}`PgOW_9$y!J8FahBtvxw7DY!w-xP5V`YwNcR
zWDBjSup2Pzk|^?pYJOj+H}nm|bk&*DST9xFZ@Sk$yUj$W)yTMdVJ@^T7edalP>r0*
zY4kEdokv+j&M$B@)Z@nTlSB2;Go5q<OJ8)Qv5Kf>uT$&U+v5$>!FCPKYauzg4$>|I
zxQn2I6sV-5tr&TJ5vX5GOtQFyL15Xb4~TUMbyw%BPY!p#LT|do{rUg^LxWeEajm~W
z@h?qa1KvcgM>WM!E?hU-Yi3z3$YNWLSwFLlENxn!23a{htJrUvWVE*@qdE6ll&+Vr
zlMz`{5lct~4^8a`R^Yn$(&$n#Q~Z-uLaLd@_4By0=wK#uWKOsKj5rcX)MfAUH$9NU
zjzgSlQ$wq5ZGfi&OTJao#!d3|zqX%mFUPk5+coHH{vPENTDPwV@$W}Yb(-_jp|3W<
z-h~Z9F?ZADw;xJfhy6GV2wLBly=(V1Lu&ds^N2DsGYh#4#|;WHWJqKDHzx0<NUn%z
zR#Ge1BKR$VkaaVOu=;Z2Rha;iGbYwzYT^3GgS1bFy$!AdD!h*}WPHs4jVt{>m$16R
z%J?=VP8#a-m3dz67kIFR)Ge}kVY>8uU@7phBXte0hTxU5{}P{RA6Vj=HX}XdltFwQ
z3D<N|Oy#fph>cANRwjEz_UD-4yVOro&FpJ^vkx$aVo=xd_Wbl43sfZ6*`iN!YGUls
zL0_ri`=VVP4~o}0^4Hi_(e#1uZB*-98<u1g*Ur%1TVg*$Tu;TT7gB`|0QrQEBzpUm
z>Km;ll^SB0b<>}x>FHhE-PDpP74C_dVsfcvG?n((jP)?%g?Y$?8s}LJNCw#(lSLw#
zVZ$cZo4$(&X=H?GeizBgodV^iRD>4@r7dKG9vN4o^}0r0X)E(Whf9+ERr-fxJyQ=}
z7pvV~nqe-Zz!Jj#tUB|hGSmy?kiW~fXJJ+|HL6nzGhG?p^(<u$y6(bEylmTNLtK85
zKgRV8CJ$>%+9US0CQVx766plx&mC=B4%yrw%|07_oq_L;#c8kglQ*_p4c&@t)K41y
zpg52RA=M?Kn7vWSI+Inp>)WyH8p}#p^E{-bG2TP@&M)20?DusBp1RLWMkbjO1dblK
z$vGJ~k--e@ih^?%N*YLXu=TUs2rZ4AUq3#6HgY&TERYuNpb(-$N#}-uUn_=qx;Z$U
z9=1)6A!q*|_TDn8t@dC4e5$m?8YpfhP$=$Bpp@W}qQNQd?gXg;!HYW-cXtb=xVyVM
z!CfXizvp-6{QtAgI%mzSnOCzGFG#Z2&fa%+_MQ9ly}s9_aV%K87}+{`F<s$^Cwz|P
z&vHRU6~aM$kekU1T2W<`Xl>K&V*HGG<4#CSwBr&tVSH!kkaS-6xm{qp`O~`}Kccxv
zCKT(>&<gr~%hj8W#W#*Tjv=tqz-KOeGGUc8tSAdUYxH#%KAg)crSeLsI9_!eAQCPz
zK%i>~Y`G$&JLX+}*HL7<5s+UAwWOA(bRAPlEb?2r=hvth@U#o65Y;;AR+;&x)X7_a
zy&a^e%13C{TYbFGTq{Uzgbd)-o1AbNjd9r`e8nRMs&3!wRNCGCXo)k*u-Kc|lO1fZ
z>;DKm+7%wYKe|GS`(5^d5Pi3&34>=T)wgJkTnPxGa;|E{&yzK7F+>6;Xx#e#6#~5)
zLWcY2#{w0fPZ$%<lGqHCr&m){NW;X-=}4dq6PB8HTi6f=$)3@n`WYTglM6gD?ep$b
z*W|(L5gXb}#%n~%InQ)fe^OR2MG785<J4Xm1zPvktu@Q6$CAaqLkT+7$YcnbLdUIR
zSDD``N;%*F)1S6^8-E<nlZm0pCy#sPoPWEF@%4CetsDn2%a*#qTv~blg-9kECc*G0
zrjVFl)7GP0#S^<)BV1Kf*g^$4q(8AV1F5CBG&?ViAnCVZ&c!iLn6A4%)ou7}sB42u
z325{X+|Kg|+$pz<_fm@Xj;``J?j*Nx+MV%WH)*r)(LEN{u5|7E7|hY51MRcm5n`x5
zA9*U3F!0z>*UMKfhJ2sod%qUbF4yPX?X@^`9wsu6cn)VIpWgh2czKq@OZB`REA<W^
z|AR}H-To!#$H&&X6oOk#7RQJ{VP*lfv_Z}iXLQ0^<J+2jc@5dQCMu^Jar9k3oB6y8
z<Gvy@QF|kteEi0ky~LTJFG~)|!V=^wP!D`T+nzrZH`ub8^$3qPYztcQZhB|{1_{jR
z%Hukb+=<2sRj{cJH>OyK-(&A`virG}iRV()d7FK1aoL63_+|`Byz?0urP$49Pfm_?
zLH6S6yz9TXMYJ3g^%>*G$YHouJrd$!;GM3I3w^ut$vr$AF6qu;e@VX-S&GQ_J@6?d
zLgO)6MNACP#PL+4^41lk-K!dd*RBgPu*!}{ZcSpm?JPFl;@*f@z0ZqG@x`3osk*Gr
zEL=eDW!=vxN4349C!->xL`^1+9*Pt1DlW#yAHl;>1!nA}GnsQ=<|WMK=lQjI_fGSK
zc6L0N4gLkJw+fS`M&&#-*Rr>x1R|H9<>B*C<h0i&Psbmel#KR;tIL_b=I{{DnK2tO
ztA|SNceR7~gq%B~c{ew;u{ZM{;z~?<e}ddp3nhxRg$7>{K#{l>93FkX!$=;h#1p%a
z$gyhc@zX#i^eaLt`X{JxE{QK<Jq&S_Hsli@9y4knW-#v<-2X1VFH$V&Ev+m;jk}bK
z)h+Wx{GX*g(H`gGvM;(<8vK{3G*VWHY6JD8Q>poJsCoNqbg*{8^v&2WEs9v^Lrwq7
zy~4l#`O8)2pO%E}e@uaL{QhOV^Nai+*C6-*eFNx1K|wwh9V49zJt|_E_@VZTDqJh(
z(lgSHjfIVZ3J~h*5D85UI+ntm3vYsl_xo$`w=@HNMwC5>Y_HC5>>PFt&yh}j&s6-L
zq4>so;$NHmbabM2=bw%zCU(NUM*k<m%lp;--rwSbPuTwm3_$+~3{L+kxsU#%K=|)B
zfT-Q4J}XNb9S)L?y17;Pd$$KXKVN{I-N)PYTOJNfpa|Vi%uY;7<8i6vdv}7hzsu#E
zgtdyyDqXV}WIG`}r+dwkOnv`OX@4H}DdXMi>}cb^PrFv}oy0#bKNw-3PTKeXqtoKQ
z9L)cAwExE&=zKR?3#?{gnZI(Xt!PO7J5TMeoP-jQGYw`Y-AZo|V9ipk#B2Q(8B-FE
zu*4y!;6-aLY>7?1)=2s*c;ZjjR1>87H}g1u?@Z*c?%>(VqgEuF54*xjDv62b@>|!0
z!co8F!%!;j<i0gYQvvslS&`uT`5s)A_OFKw*jYL7Axkco%QBrhE(w{aI*Z<EgDrZX
zUP7A%zSFq!>=e&#k3iIV5_I>zW=pe?>7q<P*Rul2yx=+tITkAQtY%S)v!^y463gc!
zL37_>%e%Qq*Ob?-i&4)Rt}-8TZ;ceXi$-1r7j*NodY$4SbA{y`?(&fs2+sYEE!eO-
z<l6ja<tACogEHN_*f$P3J~X_wG~ols;RqLAC|L|H?`dH4@*b>klNgwl?xI)mcdB?=
z7G42|HF;FK_g`%S@0jR6wNVIrt&4bNij{v&pN0`ObhP|}*HXlH0049xAFbDN=NFRA
zyY_Dd3wCbg^tuVWx*5plrQR2VRP!oouBTW=fvgqQQ`0RSGat{bu%A<LIvyUIu5FA;
z9;wE#6w?NRnv7E_W@aDFyJOI?hcM4OGmf|~ro}PDcu$rI8m<wT=o=yph4XTPW!6c%
zlmGyWMIQUbPWg44LsU0*b?NbR<o+D&ebshS<ilxVX6da*`I|Q9Oo1KgPNbc*iX5EP
z@tvIe<}=uJOh>F13%b0De2G1bbT;oicd%$PlY}c+e!KamT(ImXGte=vz|BUpc7BHL
zEzCr+1L*W^#0hK*;u_uBB6c$p08`&#YE291k$IaIL+@C$g-fQN^A8Vq#`>|RjH7~{
zj{oS7@Rk-8l{FMN!!0&07o6_A_tcm99cy>)Ezr&FAS~9m=>@knp>v%6lFrEOIKx1Z
zndj$KxUczY)Oy0(6ZyRwHAl$n?iYUa<I#Ya*BDVkj3K-I$?;38YHH^lp{$iTWcBQ3
zUG5G{XbyF@2SQwGs##YZYuzOrsZ;bg{4Tnz)rF1EQ67VAR<~P|T~QtSat-`b=>Bk)
zno`?N7C_KO(3spuXrkxmNrv}136<<DtG{!pVsI6Y^PfJ)@2fi_79Ot$L^K$T)<vk3
z0*uIY=FVf=eo^3uI4fjm2~}@w-ugkh-vB*fDPI6eb=91J*D+3}%jee-@8+74_Xr#u
z&)ZtFUol-{HD*I>ELdoO%SS7rRs#1kjVH6OhRf|=Tu|G}LUv4!^8z9l7xnQhCfzO1
z|3qC|zZ3sq=m;D4ZI)Sqkj}YNvsWrlcGk~rE=|)KlLqQ13<!f#zsJHELO~AegFZhp
zg2L&^j@Lb}<O$dHXfo=galpm5raMunL=&$hf!i{b2^9fPe>fo-Ewu1@>E*e8RH5c8
ze-@Z6k6fl6a{DI^zB+Ec?r!s9rc^4LR~`NlYyGeAG4ATK{c(qrPuLEaK=(aSmXptu
ztD~N?%2NQ?cnX44C5OGjOyFci)qe&dpk&Q~`gLw#rPCc95KCgR5?m+iG@=KWjB>oU
z^Ksfy<>n&bEy#s2WUn;+$W}c)@F-pSS}a>v4%><PS<|4;mu|B*X+8OyZH_Uo!#0y{
zqdJKn_lCM!(Qv5Oq%-m^sX(zBW6qU1CEHKtdjBNer2*1@G6rqPzT;FtrA9=<`%`RE
zv}Ur>WvBRz=TwTj1U6~{yGNM!c%6=n?VX9zEq102dOJj)$o>GgN@`%4TCuIQ*KT4(
zpiE+piXUc|8&S@K#EEYT<qMNRsl7qLQHQP5E(c~e9^0QW1^Nhujbe-I<9@;=MMWjS
zdD$jBH}U$W3%v@E?}lNTJl@`KfpRUS6CGaik)G!V`)e>IyaI&8z!`%3u`eOYAI$5k
zmmFr?@(vn7aRYI3`V4)E63oJFnPLNRdF4(c0se?d31A7FsfP_vwWyLM21UJl*+i~>
zEc09f9B`tGe^+xZoj2SiTvA-lE3kAEUnsCIWbq;=0O8G(f*b2zad`UT0H1@ULhnG#
zn^Xhw?nFVzU}$zOEbztEdMHK+A<m0u;0#%zla(~NX6&QWo5uprV)1?U=Ma|A@Str*
ze=f7Bjv0{zO7W2*s}3(vQn0x^>q2MC(3kH01t}H4q0!5wQt7Yd<q6SOcX$ZKtB%WS
zh+kCPMdjXostvB*Szn_-^qy31-f=2H<5msRoYV5WQf`r)3`<Kzipw5G)DigcqiboA
zyw;za9_Rz(C}l8ECpt;JTP;5J_EP<?d>b?7g5GYXRUMCH;MVW(?>sf@N)sNno)f!q
zbFrHFE~H)=K;Uw6vSyu|P1+i*jET)GYXdF`!mD|RwYFu_%0OW2Ws*dnu&bl8rqrG@
zXVT2&&iY)4be@%&0w|;*B7J9}OTBkZ_lm|;CdW9Y)}d-I0hHdjjN<E)WOT*3J*nyp
zfy?#HX5OL`4-WqgESP-7T6>vOYh=3CUS@wmRn=N?saP!x)u821QCVsk-4R>~b#CIg
zR=$#l7m8`Vl}Skhk#;K@=5I9CL)BA$l9MKJXBFSWu`g+>k(msq4FZr@(~hIz835#z
zSaZsmjN3%bKpH>`;f=u|AWEL->W<V?1L{O&uaQ*bl}CM;(%G4rYFf?md$$@=!3}{(
zeu|&u=fhAJ%t=Db*19g8PXz4yX3*cpzwn1g+VP~J^Nx2e%*ZLpjQ5M#GaRXtJcp8c
zaF@jzVDMvWR_6GSQw2_5+%7AD8Czb5oh%(v<+6*{j}&x`%$T#`oz23npb%ZG%huF#
zYqEDvTf9Z0H<j>JX@!WpuPdHEGP+S6PHvbkJlKVUn&<jT%JSn1*y%<Eg%I44j+jw$
z8RmDCS#Xmie%bpp34`bwkv>R@jLF^)`{bv^-kWV(BXuDOW{#bi)bCzeJugn=8x`qX
z)6(VKm*g(RxRxe)291yXRIp@dq3OBrR$CGNGz+J1!<l+$m^xSXOtBkZ&HG}nK?gOl
zV?G0qnttlQmv9Dy-mhxOUS2GgvrW%Uc#T%ZJr4`s+xYr!hJ0g<eYqV6(-&ZBwzcj5
zYyj2B)0iH!)V4X(<*AKo<jKp>46AML6W|<KB!8Cj!eoY-h;L9gkg|+a$U|}!S|2Kg
zWxbx?^ZF&DcH)n0@=OBT5M$F8)HQJtV}4O^BbYqe>%jgo^=D4N#=VCu`JGi$QgbCo
z+{g3ZRwCL=dG{^E7moJhMe<t2{Zu?m#8Th}>D*8Ln5SGs;Zm7+#rxlfj#6rWr=UEG
z-n{ZDN(PA1H57cj+W7Rfu_-(A3;ahg8PgA0)TG&vNGs!4q`S8(4HnE+Rt`%J<CbAJ
zQ#a}x$qWBx6O*IXsA@&V2?t!c!=%!z@27lIyXB=74ueYkn-a)H!TO=j`_D~^2yg&l
z^jvf(kU0KlTvq2NRIDM@%HR=25>C>u?Oi3PRB`6obhpg0v8ko2_`p$pC_Q0BwAcEs
z!Knd}0|&Ys&H15^*vPO(wY~LpZ{-N9%M(l>aQ_rLccyk4=*G>L9!u3eJ=dWs2`-3(
zCeU<H?dQ+@r5g_YATEc&H72M^tD2G7&0l>92HT71wKyOH{;dTtiwb~B_wen|KZAHk
z=}#+Fg{6ziRhck(&@!FA11jb$glCxqj<-{$Qch866{xGM?=5~DIb)jRyjYfi*b^m$
z3R(zQtASh~9BplpZ=!5CC;=~n`W!DMe4dg1y-vB&<nmC}DRtS)9Ap5mnp!pKt#?Dw
zO5AD08C4GWw%q8;P!)@Gt2N^d4KWWl9YyiB!0(lqCl(ttZf@Phv@WC}lAVkZbQa-f
z7RFhZWquP?HjU)bYHIY*F$_E*iaSCkGP_e}A0VbLoOjt@GR(zdW9U0Hf*sxPRgpU{
zRe`65iY(YvNP@b)+HLI3BLJN=s?Sf)gL72tcMn4*I3qP(+W|*Sn@QU@ubf?1f$km9
zXgS#*{albi^o+Bb8{SluF)@5}Rylzo70^JT3s7i}b+5L6vx+c&Z$Zv#<+a~VAxhp3
z;w89VBxQRn>i6ilJ=Cla+9A4aU8tl<t*cJC;ZJB)7@tq9Dg(Xd$~;g}u^)b8Hrl``
zUXa<Ak6LNDa|bg;bxTRe?6l1})Viql@yG7Y!;Wt7v1o8G_Ye2|VM?fQ`|ekK68vdb
zEE`#R6Wkw=6F)aA!p4ImfYv5NRa>UC)CfiTl}NJ$w7%J+0*y??&#D?Tn80w;a4m&X
z?wtzM_vW{-=o6E*m~Um%uxpeXq_u{nyZSbTo|I^T7N<XFLeTu+5BM7%7fcP}GkxLr
zEu+RXM!T2D@%di;UVd5f;TACnAx!UZ+;2M@i$UL+k<Tkra^&)RbBasVs7mYZ&C$dp
z4|E`tVy1CjGOxR0>Y$Ab)ca$L*5&p9CbgH|J-MUcLkj3RQsg*F2Fa+5_%_3-aezK)
zX&=?eZfeQ`hK0YER7G<ulny%oCTL8!pAwJ>Dr$^Pt=4=S%yw{Ui$g7l@TlcY7};4{
zV$7H@G6L$QhkRFcCj1neNJ@6fyX?L>mXi@-F;IQs2CrVXpfJ}#O1EkNec|~($7N?7
zhRez(g2zVRC`4%~IH(dSP?3lVaq>ur$&XEdwDgR9rDvM|Z2Ht{A};nD(W3ez)=y4&
zjN$MM>X-?wUdf6!MwSR^x8dTAZX#l9vUsATz`BGX6+F_Yk<R+Y{4ekr(?Ipqp3c6M
zhLTt4RP04^hbmDj)Wd@w9q5~=rRnd597<u*A_z*JJbbdhFfH9_3n?nPxpUVFLv>$6
z-_VGq+%cVUQ6%63bWb*=iULgfK-Xu-M@J<?@97Gb{Wo~`quhj;uch=~LLT=xKe_cx
zn3>6uPO%3IcI0j+<0xmfn$Ww7=evFQ+(9F!eVWO)MhdV?3@|5QCA3RmfhILot^KKF
zA}F%rt4E4LDbuBcUUV%=e%7<0HFPzaO}aq+LM;wLkZURmyrV0rbQ#x!GeEcNudZNM
zRaG3Hx>sk*r8XxF2z}vD)oz`-sbDn@7Yej0ATwRmi1pIW!4*bFO#2)NaormBDekL5
z1Qx|vQt8nOw+04OF&5g@c$azwNnvlt3U*XqE?@pL90_h+13#s0SjXoTUl@%INXDOV
zo_#^8QM+jj!thk&(22rxqE#=iO}Ui`l<Uk?Y48p4>f^Wf(34clNOVnx6F#9O;Sd5b
zBa9=o?iz!Y#*wwU$EwR?jaaD(E+i`jB?5;oACtMaCx;b2fP=mU7CysU?FlL*Nzmls
zuC}%`PHU5vJ+XkXD?f8H3i3~7BYxmDca6lBI<*LqIJo3U<9VVTBzo61@wQ`$j|Z|%
zD5+-VmMhzKjFFEVw5bWLjpzNdsS&qb8j4<y+{eV>?ZL6h-r_aq2t}tzzMxZvDF+hx
z#>cA%#3`G#`!LbcTT1Wyz0sU}g|3(~KkMCW9f{o8!BJBqVT;tXyZ$&BVyJiX-L<L|
zkf8O($zX!0F_Z-Kf@zV^Uxq|?PgpefcQ?cD%UzU@IX6c6mt;9CumpkbjBqyNa2O<1
zexpJ?FYfc$*~Niqg244Ki${HGLHc)9>)BHQzE=tT3zl}3x!1qT_@BFDtaa{NE+Cj2
z+!nf=2SA3?!xNVG>6SXnyDOPe#Yri~oJP3>*g69MP|(h<UVb{GEF3E;Ji6L1oB8_6
zk1)@*?@T9kX=|cw{p^r-%Wu69a>(5oD9bXgm!r7XGvwgNmGeqUPKnC}@EYLXSnsh~
zwf)=04}+${?sIwZenYI`f>C(WYFjoNO%Zpy$~jAtwDWG7?$P3OvP{}Kx2&@C^oTvj
zF^$y~XJf5N4@<}&`Tg*;k`#z;m&4_-lw?pA_|KZSu&n8tvGt*1oAaYROlB=X%}ArE
z%O3GD8=i5#&mWF81-NhY1=1}7#s8FbETM7hbZ&B59aGZ+0J&up@92YXh^ZbLt8N0h
zdKV7u&D<Ivyx{#4(IA)_967pQ3Tv^X0=qK`oT+#Q=2JrEYHY@{@3xzqA-f|k>#toH
z$jo+as*y4YvN}R`9={q9zo^&6KlTTX3<Y@w+Lh11;w|3%@Y4#$chq9FYp&t0n$~i5
zb=7L_DK8%Y@Ora*IKmii^Li6DsFL~5bx-CNe@8zjHp-=RVNbUK<JkpG&dh9F3h9hz
zIB7Ce)nR@&2&%`vw^!zPXkv5p$jd@iVuY?R!oC=xjEMWGvKdom>vH8qHm7!=>3CI1
zS4`TV-%2}j9noA!?lNs$gH(2gLodsvz`nA_*W>%^jOkljODY>Y-vb+;H0eyYEQkZH
zXT}WtZ06)~YrR=bFT>BGEw!<4pT%RfL}Tu4>E)=0lM^YK3+u1GC5X;3u52K9nK<Jb
zzY1QE%1d&^S3A+=zQmpBrP8%YY&!Ay<~Gr`aN_80^wI#cc%H+TtDnEbZgx;*r`X(!
z*Jbi2Lf*17b;^Pwl4JcgT8?=C=wuRVVeH|xXrI|pfkeC9Vxz9uVgIc{wR`bx02^(i
zk+YG}(F$o49v!zbm^PQ9yU-VZqQ!32AhFa{tQtgebQ+TY`~hnB0*&Vyzubu2te<-B
z^(c5@gXaN6{D!q3m<v02wH5BNiiX_@%pSJQ#C)f+VIkz(=@YqZ3W!-VLAk3&N*8F<
zY?ihX+*h5B;0>`~3yI8JH%uULEM2>gc2{R-f&CS65m7%V#kThkEkd)*sx*)G2*`9V
zUx_oHx1!W0RvlJxE2+1|Tend@g_r9ykys)ka|eH$gWqe39fem#3prt!mXHVO+|9XP
zx>)2i-g89G2~?WO$@=)31zPJ=eY-(}8e{}H_uP3^-S441thD+sZMc(r7f-btXLv?p
zghFb<+FurGo}a0lYp)f!A-l-DQoPSD(2A($?#LFt(gt2z4Nxp282H~lm<8R`zl>(m
zR86rnTT{nLt$X_f6*1;)zHP)fFwh&&l=3=44Orp4$8Ej3DiodO-M70ngG1<cHS;3y
z6$d%U>vdSTdhW_-RZrwIPYuGn(CCjG5<JbfWH1ggfqKoGl~62Q;wFc~xPad;IrvGq
zZsLPbWBmy&PI_LgT7m2daRJ)jy!Mw~V=3Ab3c%kF{(DyaKc=VuC7?yoZbkrVwR8z%
zdVp?!E!t2)yWc%lm^0W;KsBKiWYQD;y9uo`%05@xINL<~oE6oC=5Ag3K{Zk%ULp6R
z*5AzCo5%lyVYZ1CBX<F8QuiOKe*Yi#L;n}f{{Q^g|Jyy#7Tga$R#z}L6VH^syUY8V
zc3+T4J_QPZEDTEZ=2{4oH+ITvQJZKfghzj1#0i)eb9)$tzc9s%B4t$Ac|<$vR_r}t
ztco%mum5E-)FeXv#_VNlZYGfvcD{{jk#g66xDQdkX)LWL{KwJ%|BDZA;<NhY@?KA1
zwU;(ClTFUwU4(ya(^&p&jF#zv?&(6nd?fe<DYYLZWH$N+6a+D`h3vL<TxC_Q;}qWx
zRodF0AxD@>0xPkOx!>j3Q@Ioh9>Qc(Wk+2%+tpKeU(6dboTj?otiXd!9QbgiL+1Hh
zKCLvJAAzInKHqeIr=tg=EGJ%w@waD%^d&f<?@sos*DndFe99tyso^+e-rxRp-d!0V
zcAITAf$~OVs0f<nKP44z9+1B&a>@B$K(|ReOYpVbRdU7r2!hy<$$i4<;pd;QMoY#!
z6wW92(uTihqq;oCM4#ua@9kMWN0Uo%L75Ik7AQukNyxlqkP56h?{UfBC<tX<UPyba
za&x$1LcR*s;3VPAYxHY|31S4qUZ=W|0>ap-R#lU?Z})PecjpIM>iQSnWO?kH1Z5$@
zGBf>4g)}cYSMG{8pmOSmbG5s9=ej{xuM7r?r)c-MUA|P4x2!!a*0E(D&$#X7;%JKB
zV!*g_>$>V3uI9@wUS#)9zBuhy!~0KQ+fJ`-vo<(sBFhmuFItM}^c!_){rbu|*}IHl
zbvtA+MhYeqyK?j^KHPJ@MFLf4ow-pG1B{x2tqOh$87Q8OEZQwb{tITa*^D@Kc6iAJ
z&zqaq>AWfBNk?Im-g(6Ym3MPNo$K>6Mdr$4x`E7Yd=_O`q9&I2m-!$GD1{KOfz}s5
zK4T48#m1&V=CoXc?(9gQ=KXt%g?j@YIiSj)t{%YEo^d~N8EJ-`O5I2th-WC$z60%$
z{V+lRIq1^Qrhhzu>#7L9`I*M0HtV?#$H?R<d#aVjl!x}x3tF>S@*s0`@jjX~nN(=r
z%8^9^8+}Xv5955v%~{Xp*{U;QFgU2S;xyZU7D^t7YV|Q>p#~xr+y78DfmxF|RC!)%
z+ns&YEB^J%dc3>g=acLZEqTelVjMy>&YfwC8#Sc3>`{oqj=ZrQIMU74X~6*hyO$d8
zv{;z^<!o~LIfW3N68vP(^Rc+>*8DK|gVuPe{{j*c?Rf8ArQ16+M}V6`U$HB2k}T9%
z*of*z=?N9C+PkqiA9i4n9O$N8jQGt4DtzZ{Y$GOZYg-z?WeKW+Ep>ZV<4}EMuLD`M
zEM^|khFF7e;xy<jSLduxZ1-?ELc~h@Hd2xYMPyr}I+FPuHa~t;6qkw$aXS|Bq{TR9
z#Z}aP_cCq5tKw9e2m)^EPx6||+sR8pu#n4&8}1(sr49Muawp3U)Yx7PNjS{5fwiQ%
zi?5k=YN8?)az3BRCRA7ndpHWXh%)QXEsL2j#LMb5nE#~fiP1@{cXg=wR*Gyi>p;VL
z96mP<vX_c2>+1w@tTFiB;WWGUU*#&zpW$x&amc_yUw}M^kZu0D?lyu0*W0ID)0vg#
z90`H@X3F4FFBu55FaF3;lhet>I|NRDKe(NleH10-;%w81gA)T~G&w0GoxvpG%}Vge
zxk`<!hk4)ZsmglQep;y2o;Zw{;R7|YTK&0vgEtgumYsk(TiSkk)cSz6t&sp8PwA48
zvSJgo(G#T{cIE*xhaua$iNLz;&XGUf^X^-rIf?o{tz~foKk04-rp#2Emi||)Jv{S}
zR(RJ&>`E4N)yvGlVPIe+Sb9e0K`fl2sMaFS(GDS6-?65l1`ZFt#tGZrn!;?#BAn)N
z7#(@5zB=BwK!IA0*zTT|rr;VafEr+z^UBZikwfK;#lc@F#V5wHb${t9iDq3~HMcPo
z`)+Jjz1kg}*GRtTsI@^LlDhz5pF|~FdzR1k=Z`x}RM2P*jHLb)ON`%yHv__ew=q7#
z`;Fmwjz`$LJB<DEyiLYCAsg$p`Dw_7zKy3@<W?S_#|>@0=vIUtLll0|HZMIR2h=!S
zTvmbK5SLWnseGS)L@|{J?AsbsrGxJtpr+sQkFvy4Vbv@%QPk=DGWv2FXNS&%#_*vE
zi<weghzV6Ct(xUR?sp;?l&o*X5ig9>4w)D%oah?MRAx1k?o;oqFd9dNzLDtm9*^H`
zDv)q2;ztlYFgz11toVwH>mn%Q0+=irMV>;l_6$oW<e><S!oYmDeM`3f4gwS$B6jV4
zR`q8R?{%iC>Dj3H7ygu2rlTx<qEh1I)`NpmqUhL4Su=J|zQxc+<4K`KlQuMSrPQtW
z?A03&?6%KpG_D*_;Q{O}^>$1sFeYq-9p)OwWcZ0BNOkLubQD&s7m9Z$B~6E2#sX5B
zEKD@&pNtRH2g|M9E_PJX`VU}+$l}yjo{wdPcT%kH*8;8h_4<}ms)F~@$r|nEQ)eob
zP6|ZJRq@+gzK`7bGC!2$FS1Q9xK?xmdWx|YyI%#m>Z_HD`#Q}<wXre+a*quA+AZe=
z_wv=f*7Hs}!I%~T^+Fu&a*4c-cQ0rui)FDx<X3`kB|IkQ#3Wm{-CU9n)I(LX%4*=*
z?!ko(&#@CY=xo;;<f}gFkfZo^$Ao1Jbj|FNS)I%BW+P(#S$t^&JBX1ohKd<PDPpF-
zGwMFOEMkxqN`m{ArfAbz(%j1AJNv%4<D(AZOIW>`d8O$FP%jyECkgmIAdc@4B+{Xm
zk01fT+GeM`WM4|OvSR?GD9DAw=?zdCpm@RCk-L;);`yNur>iGxKf_U%1EWC5&SGlI
zYbx_$VcQ#9h{GvuESHTT<J)C)nE*ba^NDhk@I1A^FDzBE2^=OTM-=UjYzC`z-lR8;
zYO|wVBEO+DS(&+#Q5U>LA6xPhs_A0xSan1^#PmHVSy-*N^*Y%xM8R6Ad1IS4O{BbL
zQ>~P8KQN$2i#qE)AapG={g0)-5rtN#waVQY_Ti?1$#Rq&K>r`~467`{3ZHM6s*lGR
zx5w)I-Ka<sRKN3A{alqmA#QjN;z;8C2FTbLErmw4Ux-XNVZ2R7D?WdCbO@gfBR#jU
zFrUf8neb`wv@<J9J%RcNtQYUcyfne()y1Ylf98TsWL=QjXt6e~l7qm6S2<cmv|mb%
z)+Z(Z-@|QEY6tHd|FR-PT?+RC#ARqJDuTIYN=83EQYzpL++W5D-pqIje78WB<J6&9
zqi>rl+)|AH&W<Q|b~+liC9gFbk_0ZRNc%`z<`j4Rl%+3pb)pE0zVCf@2Sx$wPwyR1
zg9xRUjPQnq{a)?ff|#CxsV#R+DGlwT*4EYp)%hK7%}t;v$NS8*fRmsK^>C>kdW&S$
zs5c(<;I{2b^POKJL4y-BGB{4x1Kb!Y&WZsj2N=1Vxf4Pl4y?j~hu5L;CmgPvEA?_s
zuoS<__~=^${W7K%3Hrrm<mOWqlaxB?Jlc>AI9yNNm!4wYTd|GfxzM~0|AS=P`c7wg
zfdwiQ;FY$!GFcJ!mRo=+7o3R~kvO1nzBQqIB;o2I>)Q=EdoR_s$?MAdN>a!3AlUP9
zff%@zcv?U*cJk;*k?wr>l<?oAdq>lZ=|7Y1|3tUDBY!Z?chBf3IxwGVoNEro!#BC&
zR0nGsT~<<T=KK{ZOjDad!LQt?&u&}g5+VVIM2S|A(CKw2@tNip|0%Kr9WfexAn<Ex
z9P@on$rq|}-=@~54|*E07LzqR*o4lj#*g5T@iP+RA`hp(@=f$x6`!R<BxeH|9s$^<
zRjr+iR9a&;-We%3@T$#xXmSn-kIBAqx9?bj|LA3pE2A-MGB%E9fw@{;kMHRD`()ay
z^nF@7ZcZ8+20(3~?}tCb;Z(`+H*VF=<RDiry7CWMi+O$=f2L94eBdAJ4&X9a0#pw0
zIxG#WUQXODA=>w>p+Qj^Ow2#cMf-JZY}hD=pWzrUN)f0?vmaMuJ5bJU2yw9Zez7B+
zN5IU%6iTHp8!Q*w9mF0&t11J@KU-u)_54O>s2Jg?6u?HZG&<PX$!Vj_z($A0dkND5
zFUaC%hPtM<0$S~dE!TGQM7Y%B02UT1&{k7Zb5`(8zFkytUU)>7WO|lzDp&^Gw#J@p
zULWD6F80oBOIjxYB{oh{DaWFzKTj5H^7-x${tjz^Ezc_hm-Fc}NvX!)j9uT!eziLO
zt6rw*S@wGkUV`TmH0Cf2b2=JCT3PrCc}l|c@t^Xfyhz#O;a4H8jDRr7G%0(rF#+}T
zhZW}?9x*RN)0@b#`5D?0M~4ypksihS7c#{9YiUv$Q-&wLG~kSyT8qKq5`t@q{Q5_5
zRA|OVlO~KKkZp(6O%j^`q_^wSrb&UA7M1}k1Ii7$4jIJa`zbK)8p<<^fW{j!P3?$U
zcjnv4eJ%+_m8?Ermi<jV8d>4m9lr$`a|)GqolyE!xMXxpeAxM}dfq=ejfb0!WNJ>%
zCmgfa0I2HWhK5<tf1=(p$&LKlFg8(}()|wfi+~>t6X?pV8dbKX_|oA{>b`G=%etre
zJ{J{Kgj1n1u&DHZ6!lqhc?Zh`yi{tXtJL6|wjgA+_MMGuMFV(b1yml}kKV}y!dc_v
zfqCH!=E>Bom8EIdahLRYTkqEyj>=xCTWChaSno0*U`Ub7;|xB~Z7>lKNY}L{h!SfI
zkK-Sxv(rINwflcmzA&|MyZAV|;!oqxqg46C-BlVcsU)NM)^`8q^xJs*z=mU3k=~wn
zK7GDqM(X7qz8q@R^Tj*f_lC7r=x?A}?`^?A*#fGqJG$Pn6O%?2o)u!>cwSX2pH9WV
z;VkYa)X=u_^<>X$H#fIQ)5tffhpi5z=iLo&V{WNSf6#t4s{eY2=-abW&V=v*lUJ0T
zAe8h<%N%%u>0^R#OAI2iimrwe?L*+a@?w>kgh4fZG5P(vGxkf<(dZLZiF4<v`9BpN
z)Eu_dB_-9k><#Su@*YHxR;ajcC{u0{9B*=3V28Ceis4k-^A_Z(IYac`$bNr{`ecU<
z<(0<3V6+W;9qHpw+azF17h_P7^!%inAUwkiT~p4NrICP$>K$-dX2nLL(@lJJepo(&
za4$<f_?gzW4G*weZNvBsh%@QNYuXhtkm8p1IcOFXd^Zh+v0i1hE1y)<WPSJLIy_^e
zt0y4R1aZiDD42ptcNRyqjue4WGWo8UWVi8CCJ0t)Mn!o+2>7ukR7M&iozvK#g8^c5
z>1JszW=uFI9nVXuwi210E7=ry$$v+t-HM8iMT0VMXXpGGovpJw6*eG~OHK7x-9y6j
z-WCV3v2lt&LBWpS_aV;{phY$hg$YL_$YeI+odCJXy`5`+Uj+Yi990b+dZk0bmTiF(
zlKu33EN=0MZskx<tyoVNo1eecqg@5$IusJzv@Q->A*s{p8V#(YqrHl~8PXigmV63&
zO7_ATlYdmzeqNod-=RCFd+5$NGJW-_1c=t+RkJ+Zlf-WqhMSO(ly-?J@Hi(8UDphK
zAAB4VR#S24$$dy)a`ehp==yz89cByTFO!HTLqly7X9IMBj;kZ-BYalT-FbfIFprDW
zz9i2r0>s>>@gWfgp8cyNQXjbuo2r`WQP0onWKTf8_J%H1Ho64!4M;-)lzt%`+d9!!
z;{(0AorqgzxCy7MKriWhJwOI*47xhuJ8$V4O<0g)vfNA6CMB{HPMNSr3Kf)-i&B?3
zTAFtYcK5Tqo<2Dm)PsZNc9WjEP$eG}B&TGr=-%K9styc|{i3Jlk{g>9`v89I=QZcq
ze@j~N$5886x~laki{{EH%yWF`Br~Tswq}|TI@jb#KUEs&)%D#1#_S(I!>T}M2I=YR
z6>vEKRd_FK_tdq_VMs?nY-*E@PyGX#TL=OxFNP)br08&P%Lzi`e`mRA`k^=N)rHwC
za%HHWvOF@FuXOkwHYZ$I1_(Z@ic-#6K-{cUNfZU*_nYVUy$++lR!AF0nX5lYMt|S`
z^u4UtWo9aNdGHnsJ6_Bcv3P!pUcxm&X{HbtIcB}OK6O1(N^;(JHL80%vG4DB)la%?
zok<mZyLaYk7SYv18-iUiK@izGE7|F0#~(jr!)EOagE$0#JNTJD^eqIPhM91pT{WQx
z3p+I5V(iJ+W7-yp>gwU*?glrZ<y?n*u?0*lOS4}J(Zu$&99QDXfDU+LqvuI-pl5;9
zPL-;q6Up-qLKlj=wH)KBy1c~A3uQTEu9D{o5%3Ypy%eQ2kyjV0by7<DHdsDUEY4sl
zaH?77{v~@nA%w|d-pa6^rv0Ol>hkU6pXqfCL|z7~00RqcargwA6LRwQxX)q3kt?^q
zHmIs+(rJX&Yf)e8>f)-c#5FD#`3t}RJ+m!B+{>G;3@P`%E`5F`SE!CM(%YLWPzQ>)
z^i7?zETq%gTCbRe<9gEOX1Vxso!)x1btL=naQCV=S;|BjpAYHEIeVU}n7f`PvlZBl
ze+^#oEz<B-Ic}+K@jY?U7scw+x&B~2Yrc;1BF?1TF)oU)zp<B(cqBt`kx)imVs<E^
z+1TnS;?RWc<_5wVuaHB_pIy~TN0r~r34n$ejoF1nL*jrsz3s9gs_`NLmeV-UTKSiF
z88YT~SJqWubw8|}pBZhUX2XMl7QyNUu(q|4A5p-`!cqv!Jc5+e4c6RQYCj?KZ!Lhj
z4OaKPN&};?08@E}vi{f~vCwyji|WFZB6#%F`OE3~jyvJR&YD@=5olr+S+!9}hwhG(
zwPaZd*MdjFFeOU4$F&}Xy6@j{1gyTZV)EQ39Q+I-Y`m#IJwlFug58_EuXiyYijRGT
zIf6geVEOD4yQp1~XfOKq*7CjuHA$!)&qoN{2;J`<Vrxm%-3lO{K=99Jl7(A6p^ksc
zcrO-!YE_o%p6!`YCQ?6^&$W8*3B_k}b7M*cg*h1Rygth6`wvc6&eViOT&s<HUzU5*
zrN*TvEZ&7Q#)Tx!G2I;&N3#Sk)LzJnE&d=%3MTdn7DJ7WtDhmgo57s;-;f?<(1Mz|
zd{5iSF+4K<e(+!GtN&YS`#;`5$FsZ){5G6n4O#i-?*nKG)}o7f0d@+_wNb4aDUZ%G
zg!eqWa6s`E+MP)smz3=EFXmg@_74_*_3w06>c?S8$(5y(CHs2b|47AeAkF_|mHyAg
z<NxDh|1W|3zxR+_awm!sYoj=G6#eCO{@)t%MVq$(`0hzTaGS3awt;JM@xc14|6kAj
ze^1Y?bH|rI<FHmeqSb=9GF{L{9Ok5~d+J~7yjtnmZ>ZKjz*ER3VD#L*zYR*2<5amk
zl&DTbII@&~%Cs6wJB8DE-Y_j()@u^gdL4#eV2KEy-Q;J7{cjZ8=z(Hi53?S3^K0;f
zZt7ku=!+k1kl;7iImgAcA+h7Rk(+Uvbn2P(r6JKDRKxM@kTFQr0d)%P)+VuMc^4}k
z1A?8!6{g&_$}sHj=dOfr*v>_dd4WJ9@y@~q=*OLU+WPb3lA>cCAG(xlqV!xF!>P`b
zTJQGfY1MU|7lDMSsevgH48qys;VumV2u|mTfQ0Z=Dq*uUseqvLz-qFd3i2A$_3kx_
zDn@Me%eFYeDS@d_dh?ZVK8ZX?;_td1zX(4ruA3bepCJblfnvF>`9?qe{CO$$hcA_j
zX{?(OP=nQ+8=(EFQIRZWCs8|EEJ?eZCpU;-+L46UqAVpp^|@{wL7n$PU5k|22KFAh
zZSoTBU10r&^s63Ted5Y3{#AqPbM8!8aKL23&@)mCV;h}AYJn|d@Yy2yIP&~)CjFI$
zV^_}vc0tP^Q9fE6;zatg>|Em|03fC1$L!*XJ)<Hh<gpxJT#t9#_YAe5gAPz@VoY<_
zR40AuY;Mzt=3E~=+?k6%8@#=zaV%opvZFImzolreiL)7~o(o6$ZpMbVG%eVt?_?Dr
zFF_A?3#8<CBcnWTts)Eo-1tIZs>As+hnZ=M*8n!0k@1v}BrP|_@z(qZ)Dr&U8wtAK
z%>#5*o1=DYn?mz#{PwL*o#FT+RwBPWA0=0l^ykk*1s27J28|?aT>|2T0&#5sh4rN|
z&ro%YE4?LC0<rEj2Uy6w_eF**<#6@+OG36xm<;YCJ9R%AuO?yj;oF@lFE$AmU0IL3
z!7}6^?CPZI47H+W7QUOTI&PYi87O=UV(|L{dE9YQ;l=HfC;1YKS+&%+u)~=}s}`xM
z50(_KHnAc^DTP~y3MGI_GCsi#Gr{CVp8D;j@2f6vMsWGz{xwIF941)Wl9Ju;bBEb%
z=ChGM^vI1r=H*k1oJ@yS>CmnCZ%)*XuxL7ISB{*sBm#7@?%w{Sw_jQI$(ELT9+Y4P
zDBS?dnzI>fFA2NvfB6gjkzJfHMD5U_tmJmqOa~i6R)3iBWyEQF)MWdOx4@wch|ps+
z>m52IS_3N%@tfOY2T{^-*^pYl5L^3okNBlO+)%yAhR@?b1GUe=4A_EQKlXZo$1ij4
zgKVdyUY%Dlc%|6`8v@uiJ84oVRpfOjLxE;>S#B-<XSq2|KC=6Ff|YrG8-bYE9!A4S
zbDG6JTG#M;h&&lOoLioUY#A$nd>Q2Un)XKH7HMmvfPuzBqFE<M!>Br=&31=NL6Fw8
zOZG&A(h5d3vkuMzrD^)!7C;lo?~U-Zw?c-n8*RioK^tk1i7U+Xkot<1(XNE9DWjmG
zLW@u~3T#YP04h<yjPF-vTO`Rwnt<%l@CEwDLv@u{`U%8_iID3$xR0>AcT$ZAQs9Y}
z(msHOF<vqfbg1NeS(ku1cTUb9;0$+n=aynR-?Ki_Q%*_zTBqZ4G~h5NDa><s13cw|
zjnqN#s5EcGPAriYRG;BPPN!Q0n-ily=@4GFhu!&0e07D71uCnfY47az6N-yX>``s-
zuW=5`Y8va$1=%gfn!D80!w+`CxS9-Y!5NbGMoXcv;tcwvn<v-&f#taU#Zz@F`{e_7
z|L-yF^d{SHmlG6EhX+SL!&wl{yqj6Rx}P`xB4NJ18>`g4P0j-XQ?s4}bn!|J2A;(^
z6pMI;{7IWUMngp;UYO(l@Xh)OXFxbuo-P4rzO47VtJDG}CW<lp*Wi-)rA|A(4xtWs
zS4CbS;hVS%don6VtuLPbfztRHg#nfn6UOh_QO1g8yS<9-!>zjmW)7+g!&+)_QJS5N
z7o1|lU*DnG*!E=?UD{t4O>xw-RjVR-ZzNF!4FsxoJe~*lK%)ESYxG=cxjk;brR&-I
zmCm#~599KO#(N)Z=2V4G@0s#fA5ZkvlSL`dY^1r9y3tBZG)0uh_B5Ty4Mu<JV|LiE
zoZ*3q!`f_g?@I&}b(CWMPr|MGQ2TI2Bfd*tj9EU)e^OJ1iZ&!1F9_4q?!&=o!3m>>
zj9d1u_l+Rp*G!6}LuE%xs>*jb3}##XQNCQZI7i(li<_MDlisa<bJ{<^1<5WOFH=rU
zjpzddUGpX;yDbh%_#z&g^zRrltghLGExCF0IlHMOM<c^kTH3vZ%yfPc^)QUI;Mnsm
z598uQ(p1S8b}*518ei40J<?x(&~A^@yf>N+-h3Rwb#(4LGHO25FZL%V+*;faipE>S
zdtqtF)<Nh<TD4t2R1WP;+Utn4{a>`(Ehz1_@ZSAp-Vzz6GDKb%i!QgEy1i_r28)~@
zgDs8b_DKi!IcM?x%XJ1_@7HitMk+MCCl=|8d6_X#kO@lip@w-}n|}*{8>s_<wW1Sk
zx@Whp7e9S)69S~7ZfEv3p&AY-B%`D8nbY<(gDwU0-n^>#QBRM7z5zX)o?Pdq@e5Vh
zgb7EJHm|+i;A%g=5h;MJxJn_XjNC{P(@Lv1znV5iHT(l`$OGjE#v~WsZOC$(_M$-e
z#(6$otWkr9&BoAR#2lsO4!_Ak^C1nR7rL+vaz3Y{a5}9jbveFSJ^np!9U0RDcX~&R
zK{Yr$JccWLP8swd=GJpQ*<0Nn%$Kgii?f(*5aqz!S2*yut=fwWdvaUI#8l|%hfT4p
z;JBq`sP6Rcu?zvNUUNFC@bXa*by3`Ka2aB^=esI8q>xj+dF7wydN<Iqy0maML!_0^
z@?-z&%(prX<$FJ_gRRv9ZL%WHL<wsR&TzPElwv9l$+iXi{lvVduY^LS=U+`GRmiM!
z9jSMZa6Z00VHV4K7MAxO4*&J*=<VAy;9Fn-@Y~xyv`>#7J;HnT@#WLU8DWoKzRWl;
z>x$mp@4cpc`I_+KBHnkQ`-QcbpByIr$=by?8@nJA$?T!gc~2~HA}*ND8vtN{2;;c}
zI*D(Yt9IeKu~L|ea!xrM-b#*;*U#!yQ&MV)D2Lpi^PJHFlR1dDJO7Bch0CXpbCasZ
zxLwIc`B!d^&PjX>;$<&r1RnPGv12HS7)Se?w0>0(!N&k}iMl`4+zVx<1p<|vjomRJ
z1rgcb5d|3`t`-n%KuTm(r1dt*(Cp9s=E$>CSPKHNN73q4Y?%U*z5EdI8`TWc!h{0y
zeAiE>*tUG|rlyF6O7sM+(x#_N!L4e~uj>NCi^o@u@azHOACaarSYcJDw``czQp;Q9
z+}23W@9rBvq_*D~?TUW~%$1oa3K1w;ec4EgD98yfEw6+P%79d}IM?ov){-wQjMm1S
zXy$Wrmu9yy1P@h+cmmW3bW?n7nANg7q4R;%K=v2s)R>q^eG*&}CD!JJV6L?!K5grT
za)X~giW}@3;db8i6{Q${l`pWISV{Z4*~O}Gal<;tn-iN9b=rrLRNkSkjsrsT+kytm
zp6sT!J1H>2dOqKTrK$drg`P=^B9m^cl0Fa$0I<<dpp0wzmo22(9V`;KRn^tGnMIGT
z3Utq{C-G8}v&V@@!p~4g?smFnurndnVH647k;9a0t44DXH=`*=LK!1i!L0xY*f(5>
z#QO$0)Z4(G^flk6A5MauFB1~Vv<7$FXwqU61%rL*4O*-TAt2=Y<x>qzfK;zCrp;rE
zB9sfh5W{gL>KP&qZV1ffxKM91AdvX`MWZiuP?(0sOrACDRG(oi$-!<x>aD-@(9d^7
zaa#Sa52rP5tyaulz=O2t)34TalAo5b`zzb4x0JNv_`+$EX?4=aj=%+fw8mH|=pEKT
zN7OchB$CWgT*;8!RXO6q<W1wS5b<<cj?A*Ha89VBb6diFBfg;FmB5ma^Q)IGr}bu<
zW&Yc`FC>i1qHQ*44!7s~mM3B}NO0!_*;fWuHC^`h-qGmf581Vo=n4tI_6nPcgMohA
z?LLNaAEn(z=UOc1A0#;5^{V~dE>De`Vb|b(5fN!_i6l=!W`~0OrbtO*UN@(=03vy7
z_p`>Dtjv_&KAYWOI<y!sclH#!O)k$}+&lc`NKy0&ZG4?~1#<HxrspYmicPdBu=L{c
zT1vN-8(pP+VRz<@Y^3VlPpdK;9xpxQYc#w5c{$x%g|Q1w18GNnJ_&GL`0i}DrbHaE
zbIWJLSI@$lKWSPN47euNRb3e$DATEcqx1*D?umw%jN=&D*5~bg$@N((@OQrteUr*j
zn%H&?X9XvUYqtQXRAak{hR0o0mDGD8!YP4HR+y01_sZR9lRn=R-fyo|Yls?(fVHeD
zeQ^;DderPMx3*6N0ivy)TC;_hlW8AuD|2o7qBhpzm4)QxdMYow9X43ZZgt`W-gie+
z0*8MhD7QIYMJ28|5o1E4nMlj2bD#nVx;O)CXFN&rjE*mNh#vBZ==m7VQZCkFX*A1O
z*=O3{=w=sE#euI}b|=tK<9%;acnPwVc?hQEv;-4C*;=%P>uy#yM_*9^05<OjWT($z
zXCMS6EfBHXeG0@K;P=HMnMZiS>of8iLTHm$YU-m;YQF6dsR;Tf!US>grkZEwl(l;S
zhomOvUZ(@GQPC!gL`Htr=`ge^%#zVJ<F=@fSQ>N2-=9~tH;Q>(QP9)C0-H<|_IW4g
zFE)d2cxcy}<m&3)J7ZUa?I}(!NUKFeno=GyltL_d-pd%nj!V4fOJ~ktC$o;Kcv5nG
z<qJ<6jF#7j;)VOo()yaLFB>T7?zH$IU?->&4!x`Xo`<K+{-s_WeuUa*R31dLPlaHJ
z8agxu?R^YQ`&gT3`%gNaeUE1nV5iG${eb<$=d4v&(H>@QW-T&rE*+0}2AW7=jZ1Z1
zktwcc@fD&bNCEDIL5poy|2U%-A$t!uS*>r$5AyJQ?tLr|d2<a>BW$Sq-7!&$6=L$>
za@nVy66@8Dc>;wC_nxI}sSGj%0R-w7+<=mD3Y1ND)|WQ_{`;J5i02#~JYq=Cpupig
zUiJPr>a)3!Fs*c2i+*kd1ezWEtW_#vnYOK5yeO)rJ&#wXQ<Iac>~B5Bu-M}8@c8kG
z+Mri^k7+W0?b$|E0pN0ry?>VVScMJR!-BlzR^_5=kWzx7neasvc7ZCKA%(E9wpeLe
zh@HCgVV9L(0}WUCMto;ipKof~G>6}~WetsdePp})WXS|Q4#aZW=CGnCbCNwo;ld?Y
zc}`38O>Gr&-DOeQ+>^*xv|8lrOhh<+s8vF~{K1+-xIHhP45mzD-cN<}*#YZ5zLOzy
zCmRYQ1@n`skKbVn*b~odc!Wy};-a33`qY*0Ocd7*>P<QpuP0QS;^+_>N}#NO*7#;j
zJjoZDfx>5s$^Kz}&U+K<>t!tI^Z{NjXThv7c^8|EPy8F7yP!wmY-zfB>Gw`!?HUom
zYS{1c$BtJ#qj-jk$KI>w;hQtqzqEz!*4S0XVmqOlQc=s|++TPzG5aO)(_?;2ymg1R
zSuRb`v^Oq^&CI{&s`i&{gmsViOw^sWCf64X$xwx@0+Kc^tdOtTepR4aw>^1XyOhsj
zVzcMhcZ`QA3*xdt%BhP1;mp}Cuk0Nwt%g%t^EDy)qJG%Qs{-dqNX2_1!`r&xU0d^(
z?WE-LE5Ca97?j2G{^pZ)N}MiYSX>;O^^Ji@JfWZbZ_(#HM&U7Sy|~iI@<XgFd((!F
zX8F<7(wrb!pQKXicnN*XuR%(d#*52w9^C*Ouia!p{mI?Z<|5<x$b|u|(WmnFpQn4$
z8=1sZx@d>d6PP79qL-A`PcWP!Bemgt@zmQOo9PBRZIFsqvk!W1pOxC%BN7fTdkD0r
zt|0<#CGb|9QSEAWGei}~$+>r`Ap_SRkCX}<J+P!^Z^wDONX7+Pg~0f3V2KuzBAlC)
zU7O2F$D~PoHf;fj#t6&tg1#(WXeFYMMGlV_FrIxl8KVAflCp&KWM@})D{h_@^jZ1h
z4|;6X)_xNdNVmpR9B9==4W9vBuD{PGDU~8J&xFO$-j$aOSPhK6b`$3CO0>DmjJ3dH
zuRlwtK?rooxQ9B-89eQl=g30LF0{lK*4a~P5^%ep*}{C`t!eeeo2z>Q;P(#w$yT#(
z<X1WM4^P;V-Gmu0Z<5ZjvINd_FP46ByIAQlnh6_@^Zp;ry$4WJ+uJ^>$D<w<ML?v3
zM2hrIq^kswF49{fU23G4P>v!Hq)Cl*rAn`%7wMfSC3HgXy(B<FxWV7~?sxBh=FacC
z-~Hx4cV^FIvXe>H+I#J_-u1lC`#e#E?Q~6V{|+0a?95qupoam2xOG>GrogCRWE)Mh
z@NDx*E>3^Y#{y5`*xetMzU|QRdAtDAeMNbC#~ZpOY3kAy@|^K!MdM6F!;ADiW*`e@
zVDhe!=;89`gT`HfWMPjUg1|zDW<$+VhxlFNr#9@VJf$1c1B+U+#7jVuC`l%8a(rN_
zLEUcH$9vIA#Uksv<kp(#O@(O)ctxyUaL>LDJjl<dE}kbo<lT>NE`iw^#tg#Nl8)tB
z)+_#GN#SywiK+I8SHWw}obH%v{+d(qK$(;a1#LgYwXw@z$f0^f^rpK}0$LSLSD#0k
z17=RCcbfxhCav2G)ho_-KlKG49rw+K-ZCvS%es(TDPyjyiD&VT8?_%uy6WXbGCuub
z@$Cg<bVed0@kWtepwLshA9LTY7P(`)0?!DjJ9->rDqC$gD{&9v!IDXZW;#qtZdl)j
z4+of_64i^{x+wnw^R20)o#nj3ZfW<1Bm|6%dE@aBSNw?_FdtPmkc?F#A@<LEGmNA7
zk8uNC%WVnAFD@lAPP%?Tw$W|l<Vl2ihDOOc`XPTQ?BP6*n1-WLzu$SP8F_>KUh|)s
zTf(rF>9TEK&?zU5S<1JHv>_PF>jV3tHBUZ7mc7LfH8>%ss<&0@H={YDSehgq4?hj(
z@5goqNgG&QN?=sx=oPe(UawqvYl<ssIbktvCGjh+T&WTGM@Gc#A0l?^KXM`;{{grE
z`bSpe{y$EpkN(5pg!Ug@6v2P@1NOFhdT>jhOk(uCf0*N$zzu4E;i02ZQhX!tv?vGD
zKg{tvYY{#X%BxoMXx~fwl80D>oPzG+!O^7q2ogYgWiDNvHOAYpW}>$!8H&B~zbd2r
z_gnbi?qaC%Y^9ohv}tOA*gDJ1+sg}jg?Qt3bbnv#fS%LL?_MOh>E{%@Eb7+zv?N@%
zRYJ>r`K4zCzZj0`WBI!$t50jDhv>t%HcbAsy8PtC^K+<`O0;x6sh-rDZ=lyGmif0&
z%@v}UrTK(kL74MDHogD$y8pL(^&fZM9$Dyn(jOhPnK1I!&dC0<byuzoP*wLD+KY<u
zRQV}_f(lms#9@hvLtDfy+D`&0vxkSLcY010>@r`P?TmB^*scBj>wLQZO9<VEyeDSE
z2QmR{h)qjoQ~+^>mgQI5(GX>D0YvkJ@Qgyq9M!{s@j+*b@oSPT@8bh7I3*Q34}}P=
zta4YfwGrF)8ZZ+RJ19%8$*dob*r1;hE_`X{w8+3LbQZ)}SEm|UsYKIIaZuS~Jx+?1
zZ;1Q9IoW8l=Pa!0mpD3G!wa!e|Js#p=6PQcU^kG#)e<3MTT{8!1J$I>YD_5f%9Tp4
za_TXzSIIul-SMq%%sOpJn~`)P8Wve#tftbOreesy=N(0L6f_}Zj(Z4^9=s(Qp+s!5
zh0QScU6tgovVq{V$q7~Bt5^>x$@i{)(Z9;5av^nRp!vbox{<((#B|y^FZ7-5c=F>O
z(nIifv({!IPcqj)+S+s!T-c?gvCL=IPaolJI$0$qf+0Fz<P{R^VyD%(hID7(a?P&m
zoUU@J`ExAhf96!q)Z-xBqmoFN^=s7q0;Q*SgO|d}*h!RiA>fKm==!hJyyzVQZt<-7
zP$8vkezh(|<}iWpWCP@2WXQ)UqF<Jjky3LFMx%ML@+@I~MT?B5+M~>qbX01`)QK*S
z&u3QvS@^ua^ia2c@xI}<K}k7pv#*ara(SYv?j}0gG%!1LQR;i0#d^cEw|oY{68Q6p
z=!Id7z!~qiGXZZ3lUdwwf`gh6iQT><cW`Wz_V!S4O#k5Pb7*AzMV*7@G(?1#G>*LD
zjBHF3;VbG%@*vVS)Q|;{Y-);TXEvy1*B%I)xhZ|Pax{1qO$j!ptaseZH%$cI+Zmr6
zfa<N@G?iG&?;T|n;y1-d`Ay=Z`M9W}S(hze({)LDNuj|4-O_ZBy=f|^DC{5E{Obm<
zM~i5!dnarCHnZu$TR-hrmhu7{3fUXPIsNfnQ@HFLe_Y2pToX1m0@QK;(&%l@d5dDd
zu5eKmbHY_DZHxOx0LMBIKWUXY1*StpPfFJExSDu(>bFl@h9P9tZ{TX{u&8!p?8!;0
zzhgFNX<6aAww&ZaSGz~1=|!`Bjjtovy0`~PyjknI%9+Yi#Tkw7){?(hG+CNy9AZ05
z-oSsU#SoCI*Vj98P*WH&#bW#hP=@*84RtRerwMOu>Qfca7$e4+k2OVAe}SKrQ|(61
z(4jsKp0NpfOuSb`2aXle%~|t?P7n{tm4+%*H$i$D+h^qdryYVcE0e*>1y~Y+Ev|Yq
z)=W-920vOKdw$nY$$x^d*wHsOdLuF06I6Xm<c3Ej$!M?HVzO(hnCk|A;;_VN*X})=
z2Mlqujlm5>A5W+R1%-YRb{KdwKrUTdNA+Q`>`Z64zuD*H1#3YO%T!rYTl1p&hNq>z
zr)X`ueWBWGPVr`YNtH5k#ducMdZR5$w8eqfXqurMdpXnW1Q3Zxffp!GGzWBjJL;d#
zmlWx`Cm*8DM6>WHXC;_T<?JZWJs{s3aCTfY7FC0Vl(Dj%y#X@`xG;!0V+92a&zEXL
z)D3lP4ALEkdrY|n=fkJ#r@m@5o1Dla0*Zb<3sBY*pV105<A!4h6HSjpmpSZlJ1Dss
zuEpeRy!|w1!}(~~PDJJ-`N3Lb`h|-$@{{`ki?9Wu=4D@fv0Y6HB&tJMig&}Yhmt}+
zg%)BvAtd^BURP*k-Z5}ucah3ou{H^Kw=bALbra~%f=DsVW(~4<Rj)OiPEYyjqG^A!
z(ABt!c&_7O8!<jqqI7}C#nrOsPyPoN;H|dr+m(?(LyinO5gZb>l6<;FL-l*g;0tLJ
zu}*QS@ajo%Di0n@ge?`(+%s;juzVgMavpI9Q-a_2GB?Y9K0nQGz7<a4*N_DQy+*aP
zHR2p){QVm|^+zE>^`!B%2d_Mkr9I>rsD%mz3kk3*bWv^2@U$*sb)TZ^P=yGa@Gvru
z`&1OlY~}!AY8HcY`vjz?6y(mWbxO3~=|1*^ffCcA>FFeYebvJc*OK6H&7My9yG>R-
zoV8Q>k@?Bmpkq;D@7e{wiT}}yZ{E4T{Cw)xMItW_=3~~RBjN3oLKG#cGY2y(Jm^#(
zWSN*=_QhFSZ)z<g1)YmW6aF|st|G!QLy`P2mL`kEq}HiTVrD=H&2B2K-y6CmU#A%C
zb|+Ruy;tz$)1s8D0Rt>M&UxehR$oWS>7EzA5?N?F03ZyW+CTmvpaJ1Vu1VKv0`Z^5
z`8H{wy(3x`^5)x;_wF8Q3AMj$tiv(OcBAs2N)@F%M(4N+XijX$u8y3JDp;g3Y}xY=
zZq2DHlJ>M^YtbVk^rW^`+oDd*BWht?STwK+Qz@j^MimO$a=f!3A%(%Of0%7GYRQ9|
z5Y5&#b9ecT=2TFr+^^j2FjYj@b!}VlRf)Q3Y|;Y{4YbZ@ZI7<#oWjgLxljCen2=sG
z8SW5GI$OWxWCb}02`Zt(O{83aOSdFoqf_a;8x{=B_{QZ`9_bst4Gq;{B%Pp7Rv3Y8
zGmO_CXkcMMJ$7NeAOb1@ag$`#W*!lFt)P1g(uh3ORG-S@q4CELgvskFr#Ck)s<nNP
zvtSt=)Q@%HXo@5ag*j(*(q`}Rj)Cc{;6<Ml{kx5W+iA4Xfnn~h9lx^#d7!Z!q=3!!
zd|E);C`Opg2@IwX$x&N>!sW^DH(zm-GOP>)(>@e4dk}Emf6ADtV1UURZZH75ax{&%
zwvAR?)YL9YKT-8}+z>F#yG5gNRx>F=rrMsY5*KZ+cjQh@2jiAYs;GFv$=~=kBiTa3
zr|#EaMFeU*2!$;j!Rt2R_sc%H3Qcql9^-z{X=}2@I~S_!7<|^r+ng_X8vm|<EU-Y@
z@6opyi^8)=<FZH7AAWTN5cgZtLk)si0Rzi3a+aI4y6M2&=2_F85g%8oCW*S;m;JQq
zO)CRrd5~SM#-Yd#$Z+o;O5y$zFC0|V3YOpoJWBWk$iw}lf?pvEN79cE>^F&56#npC
zpG~arZ#pkp3{rK8P!?*oqF3G`P9IF5@bKE!wd>mcPaY+hLD^lkZJXS%Qy8)e8z%x0
ztBQX;x=y35E+Yjz|FPjxY{FT>%6u1bRWVgj^LG4}o<O+Tw?~deY4$#b-F2YGV_m7B
zkcy%>_*QD#ttp_C5bM+f=Jp2!Z|Q_PFdL7Ozo;o{8zi+Gv8W9|tmrFt3tGke*NFw7
z6p}t^v?>l9DMyU?{F;W6pM9a%Tywb_fLAbhHBTOp@*NwnTre-QMGL^syDH{HVj5Pv
ze-3I+kzDZ_>r0TbLXGgvl}JAZQZUU7DN2urcEvucGH*8*(qanW@mv@174=<Q?_`&7
z-dlsBk391)-XlM)E#~H<R4AK6A-rEme#<>?1$&D4vdPv(lP2p?El)D7QDG#~pG08G
z8z-~2R}V`HMyDOP4<c{7Kct8rZyQtYe?Vt%XXoXDUB4i95=qX`it<c`<KGR2Y)2-8
z+ctzX)ANMO9;VjeU&1Mrf|2@cX|;yIX58KV!u#P*1-ZLFumZeaM!hLG|FsMPS@sU9
zmCT2_AGrNQ#E(!wx7S%0V#{NO)cqbOF$|?{!~!Y0W}pZ5i~5>_aa0t!d;-Ozu59~j
zvL0XWs@CC|Cg7{rTg!gbi9$U1s$(8^@;z<URs$8v<BQ+dFA9iDBxv0rr+-6IFw?)N
z(r~bg)G&2ySiIJ!s}o0;?Sv(7`1a>xZNZ@2szOXcG(<OBEJh1rB|JPv3cYw_(mn4U
z>WPY0t_k~sX#g3p{`Brln=f6s+(8b8);4w%XY+n)@1-w~sOc7mT_jM?S;g<lTj<EL
zI)2%G?XuCWp#dsH1~SFd=qCMkgq{;ZpBZ{jBxnYNoyWp`XBzZTV1LhR=+?pDY@;T@
z+;&hg30%`Deh$9s-aZy*xq=pVEG#c~Ak%1&-5hIV@aV{0&2#SzzV8_oZwvN29Y1sb
z<xICc>Z2{My}#X(s+H8UiKp&kBcpI`r;7fzG}6g(0TUG|QL~w&ZvxW*ne`BiEXKVQ
z>w^Kc=D~0{nQmwBj9{A2tXBIbk{%HAC69jgPqc~c;44496?@VdVQYsp?9PgD+fQm5
zu^aoayLnulgPjT4fZ~R)@W)+K5E&a`p^PbRUM~&(=#s~ziqIZj#uxP-48Uxtlt}P*
zR!4>ib?n~TlV~%jd++TXI!?i<Nh2A}_V00b^~DN@2*u^5=>Gn4e{<Tr7aE{;5zi*s
zromTAloJE)mSr!vGJENnG$TfP8jAH)Ra_N@rF#o3Jo*FVCg$^OAh6NCUoTV)n^DO$
z5KN|Cn~+OhVaK}h(!{sqF=%u8pzue0e7Z*Wt03tqEe+oyy*_9C0B^^i-;((xVx!kz
znf67eumeKX6y4o#Yz2`XpFIQn<w9SjR}UMiHJ2D4WLdh7Omr;@ch#M#hGxBw)xSv@
zJ-?J=g9)>*yTi~Xn!{+(+mfB0)^Ee;qt1f=*c|k9`Dd#;;(81N#V7~Vpc0R|orj4<
zHU1i#nEu@0Of2ETvB)3}hdp@$y2U4|8JbHy;ek(Wc5_OI-|YxRLhO<xGXj9AvWHVo
zQKs5mE85E$Mwr&lJ_1A%B^*Hld0gn?Un}TvVHr=;S(zSGgHvm(Q*2LP2vFFsGA*^|
zEa|0$HHqh?Vg|Nfs9ooz8I<mIV-U2p1EPY9>v?BQo5?$w+7r;X6GoC!T3;6zY0Gbj
zT0;0lDaxwQXj07D+Z``V5`P&L<(+n=M;d*dIG2i1$+G;p$zY>yxx1r6bEu*|^2)h&
zEMW;z;gsf~ju+-&iV(mt?-57-5=ek|f3f;0e)L2;59HgV(H5(IXHj^Q<U)T~EFY?$
zJ7Ja5ujdW}=sX9#&Q@VN*sQk%BRHt%g%3N|h1ZVR;#EpJE*Z8KMPkhtj>;r@ZA@^)
z+5)$A&889}fHBp`j191GcR5iR?~i&o*aQOkcEoQgaHP4DF^M<$;qQAY>v}V3N_RPX
zVp#Rw$z*=wjCPH($pA=s)hFkNT@v8c21?H8Duxcoq%*gEI=b!tsJfbv)Jjhxzz>2V
zuG5A$Y!aw%Mit4p{R`4}V4{9xt#%ppGKQu!G`5pL)nt-$RzkfTU%RR3E&|U1nov2B
z;2Qc&t7n!vZ!KvAcrrCmGe#eqfWc;PuS`9XvSz4EI_(OdMNRAZl-_oup3@@$IN5c5
ziXBhcr=ndvqOy!rw+A$9ykFr>d>!eJS9Ri30tIJi!+_`D4k7dO9o9(lw0K89lYYa6
zL+wQ;+E6%8xLhhxkU_HojTX<Si&^M2qC@lZwrcpvvMN9>L?9Fl>Ahzlw^yQm(Km`Z
zyN$jWj$H7RM9BHqeku?+pzyx&R9nN^XHhpy+yiAS;*nNtw-WoK4*S<3uc{0U!cCl{
zVp!dr0)M$hHP`!4Z)8%c&U@s-#-4-Pc#4a`I;`Lc7dwMefl@7ml@x^#nvs)rE~=O2
z*P>qC(_CXTjx|Q_e8;9^VFQH^3UhLdY!<wOkw<j0vM-(#3#}AmA8w5vd~h{J!wGJ5
zHcnqo^S=}<BXGV91xXKPv+^1PD^hyUOUy>~x#-3XbG7W)+#25clcg$oa4cX~hCezs
z`L4VI(&k>##5?sA53Y#gQnM0WwzTm|%z`aKwakh!b8nYEua0g6RJ>h(%2X3$1PPx1
z>G*06o0ZjTF}0FU<$Icv#i-Hoy6ukwZp)D;xC&#}dw!KhGgC^2arAywKj&s~ZOE%T
zIC>2kbbs%MZ!cyhjyLs9*95naJN}uRO-To*NmSXnO(#eFlC_B+N{Y}7-jox6YI@g~
zAmB#>o-f0_tG`hJUXP^}zzxs$Pw%d*6c($P+APrN?tRr)lnmW5?1O2>{2V-=Mr}2v
zRV;3!%3BLnC|$S*XoqCq2!Pl;akz{|Ti`};NH-h~l5M-GNH{o8vhvVY#B+yHdKRlz
zFcR#bc&Xx>OHEe?2~n&5wX`Q$Fw?VnKm4&HVf-YeKw;yN(rQy9z|&#stcT)o|GD1i
z7`7;)X<o7ulQPe<tkQI*Vq%@pI#_Jm0q<^<_e_^>hDvJLjru#(2e(pm5&i1V_hzbj
zrmbSzq^T!UM3kC{D=I%ecw)AS&EYjM)8V%hOD+N-m*ChBOrASYXN&|UF~)_$U#{S$
z?d|nsr5ciRGwE!(N9gsIDIZ8KWz)!E&Q?^lTBBxSmB^B1#K%X~Vh`|%VM#yMS=3<O
zmDSnbxlchpX2Z*GJB59FQ_{Xg#+2U?Qi=sNuBs;kvkP)R@zlIyMHVJ9KKZXg{(Rrd
zJWT8A%a5&S87-vV5eUlL(gW&2%C-|jrDNc*QcF09R~5vDO@6u<xNbU0a%5(P%O+Xw
zZHW*XH5G%ocY)P~|2M$jT{?Q)|3`*54~BmHaeK=PhwphpJxtS*5xy&#P_TD-P*m%E
z39{3<A_Z;9YFuU9=&0U02n~LJo~vfuX!r8#0#WJC=d*BQ0^#d@ds|(N7cNNL$57N+
z1?X=5vdk59u`AF<-DGIFvjH`!)Ks>${_}vUVAa3M%Q3@kZV8urb6U)%aCO)M0{_XB
z*1QyiK<}39h%OGy%fr6pIvO1Bx46s}4{t4_+(z09lNuL_$Ri)zi1dYm<789;xINB#
zV@n6qLv)wWsi*G~1AK9#Nmw!U#L*V*$kWVl_woLCsycde{pKpKgO8f}Oe3KF#C^N!
zvpbwkOAaq`glp_?e%mf0EtGTnEql0e^ya<X+Y5zO2?6t=<mnPFlJoryq0m{mCl|*1
zbweK*ymd!!kG%`HlW@|D8EdTMRbG{G8#wzGb!7OV2xXxCuIT&s4;9d{PTiKztoV9_
z-1&ZRWmiTNaTwpi+|nJNcK)u{$-1-k`ZYeH5VARVGdb6ve%Kp}C^>n=OR86^%(?BS
z>$wWICVBGQ?Ihv)ftfcd(Gx7>8;5cN28kv-W#lYBXSH>F*58%~Yq>N2nmEKTkwz$w
z^vV1x%+<T^@6xnwUNQYe&FQ&zC(~e%>{>-{C~{Nu^z=)u@jY<3PjTj{9Dpy`1-C7c
zwJB;-2>fulJ}qigdhIVHRMu<7mfV+n_xb&bV7|EH)YOLR;lVI}4yTPy=*%BC)DoZi
zeRu5x^5SzTCq63HhVk^emY6g?NRQ7Ivmb86gnP@kvG{7<1)zn$M_3V>B4~>0Jw3hW
zQWGvb>M9{}1YQBVmOGk0DlGUG60LwRwXWtv?uz)`+23sNXPb4<yEmNLE_2{l{x_iH
zB-HwLv>J3oZs^<PKVBg?9w|1yV6$&hSFI>V1SNN7$^WASbG1>cL}<N%cRC5$xhIWj
zW$tsMo*1n)qWUKxP{9Qf7Ptd6Cb1d^m>*s0N|Ao;|76?$&!;N>EoAQ8mz=Q9U0&dd
z<T%e{xCHJ<liIWY%t~DLB4(%8jXIAyQ6<`hBjKF7?RTr+iuq)MErzZe;>B4I#zujp
zoI%*v-vtmC_k_#TxMFPdSH&@f*@lMpLys?2hDbi*!D_tqP<Nq!gx~)++_<8Ic+%5Z
z{%$6QUR~Y(ckixz^)8By{}<lx!M(r5P_T*=<!AULzzC_{i$y3k3N>8xYqhOt1}xSW
z1uUWW$R+;N)@ls~Vi-i;t-#IFx9Y5Yy1_=R?~XTD!3;yIqpa5wF5U&gK5|l8_RbI&
z`dR(JOhcYnSjcF#bzfYg?LTK$kIAFZ=ejn-EEvIZ6e-ILm4Vhc{<UAvaSU_s{vj5^
z<F!D_0e+DnG5vyWlBD!E)oeFs8PGPJ+AQp}JHzEyA<;*tAHDD3sOdtxUr|>0&xG5|
zG77yLTv|`|F#YcTV7H8T5*&S8viY9QH2^H))QYWGCdc0*Ju-hcKi{;p63L#RO2t!X
zDefQ>+O5EdD#wBT>VWA0Zl2~zHlX$=H(lTYYS-kfXBrj5%<=s*mm_ZH9HD~L*iK6v
z5ozC`&<JEbHFvnB1hVXpkkCDNqV0Wc=5)8~IAAsGsYPtS@?8Wf2h&g~IP<d6U=J9+
z>?FMUvnsXjPrTHpi-pMAUW<Yzxm__Iw4jpEI@MT-sq;$);=#yrL2kIM_R(T1)Whan
ztVExt(RqtdajXns{AqEv>GwjXKhX2B2ZQXqLP?fb0lh2}X)NtMwL{W}d&jO+KIPw}
zBrlwf$y@2zxt0bw9?q2`G!VMZ!)PLp#Vp7!L3SSv++6PJZ-hPa5@D}%HBJucmgKX1
zDUqntS$1!BkQ*K6E!;F0eKWHz%R*V#(?qV6o9E6DI~&C53wIM6|MCq^Adp6`PM<#<
zxpvmevl}4o_~PS2iH!U9X`u1oR748BSr;Y5*%{Z8?;+5**ZSkfkGZ*)3QpPOg!+rF
zk&u(G(;aS)WpLJVfYl$IX=Kg_Ssl$n-QB!vDFRy<e~mySDOdJ)*9fGs2KVUyl0uM6
zZtPdH<@l+=P%T&W17zO({&03<hmRFt{s3zV_HnMm=02#$`ZaWb+7YQ<BqtCr4mULC
z`?9`!Cgscx)&p077RvqD^nj-^X{JV;<t}z(0egJ{!L@>8;%Y`nVEW^X2Gevhe9!ts
z$!zKtv|I9^Z-qqw+*B;y&D;36PW_8eX=W<ChQKr|JL{n?^sXmmut(0{^J(Vz*P|V=
zrQ@-BSYIf-W~ef~N#X>5nv!8u{_c2P-1_KF;Ivc6GkNs-a6AXPt}pCb9|9^9Pr(u^
zHD?&r$@2glTeaHdF2`o6A7<L>qsCk^DYBUhs%n$M=U`)~oW;2CxZS65X^F<VHY?+1
zYo&RMFBscLrayy}(`Au6nqnkvnWp12iZLROxFRKmkhS9<aWn#1>6$_w>rXhqe(TeB
zW80;EaPsia>uC(HcJ5A|*z_+G0LX5BL5HKG=s*HBSt4b#!O_mF-D;VL^;D<tIi{V#
zC>wea?Fv3bVe0(O-xshqxZ`co(xqlG4eav>o(UP(p3VnVi__!?GBF#tK=a<_B=Q%H
z%Q1J!=jal*;lfk9Rrk?3YL>yR@t;hpCj0Atm_oT!legu!cci^{*3ybS{Tyn0W9t`1
zQ#<duS%kg}kl^cB6Uqy-Y6FF(00532jOxwSWVf0YUuiFQT<pve?R`AT&}`L5kz4z%
z{qMJnXi0=mUBaM@aX@W~uAPq0pRz*BiL3QSDSiQiLyL+TMHXkfOqGO8TQN+8VSaLz
zYq|OHf-bve;dwrh0MhYvI{iTYy1r=gX={`g=S8JwA8{!hklNje9PZW<h}y3<3x$J7
z@qhyH>~!Z26#zCqFK&D}FkkUpym#u^DF093UEXD?xdQEH-6(BgVp&QOwSNhqpo-2r
z`LO}1C~TZMHG26HQM%I?Ro#X8d~(mf&Xs}tY4v73d6gxDLEq=+GLL5z$b?p|QnV>~
zI@u5CC|-EZA7s+p9*~OI86H+ocP1dn5ujCP5L*H~)XQ`uVOJbdwlh)?QB=l#KE|TA
z)4vSw{#<c5Q&LSxbabE+^ZAnA@aTN5*PX%1c(quy&Z{_%Y9hoff^7XEhfPwP*&cP5
zr*Ek^R)uSEgmoMd205JHHz7%^hbn+98>$vJuR~IrbnJe4yQMo}smqMf0<&>>nbslg
zlkSZ4E1Bl-Xdm}o8Q;(8>TL}D^&d}+qR$p49H=NtG@3t~KR7+T&IP?rQjMDLlfdkJ
z8l1nDp?LQ&XG9y)SaFI1q`}!<3sLCPRlsJPwWj{k&u$XlMx^qrLJ8tM!qP*AM#jGW
zhuB>zV*{P(KM?^7u{i(Gp8ROo^<dcd0Mn{PgIh{$lwnTGPU06QpEL*clMK0E>eI3`
z`i!n;)T38UH%3H4eP80<xCX;(${S)Nvr}W22Q&<B(irCyX3Y%-Sv4K)VY7{0XF3~?
z);+_}zS8}`&7VWM&hgR|bR`ak^-Ep79@>yox0%ghfE{_$#WD6lPT#bG2!K5XE`-@J
z6h+Eg>{#nC!EW}7P@$+r2Xl9N*9}r(CGQ~7T=rdKVdB;kax%+@j&~3mIG)+Eoj|7A
z&dzIX_4otjP?{YA;4-dYCNHWjHrb6FUA}wR+>m)Sm%n5#l!D|M5tg(bLXuGzj$fN>
z#4Z;;qn5X<IWrD!AL!#T?~LPOVqYH27Vu3-bCq20ywjG!5x!88E|G3g`PZhDdlF5b
z{a`zdu~&@`mIdgUa?`4(ME#tdM{NFuGK)Se*eujbJ5<<Z;8RmEz(R9b$<^cGa(gz7
zx|?givL<lSyK0}Ves6*~!Kb;`Q%+XTnV(~7T;i1)$Wl!vnzS~EYneTNon0K#yrA=9
zrRU_sYT7%C(3;-io0QxVo%y>p)OT9>XiW*LECPf?xD_p6$Yl0hzA94d*xU7Nb0%J`
z2nd`{&csKyhwrc3&-Q;lJ5C$o*)|}E74g1nUqd`@x9lZJ0eCCFdj%K9j-1BvYBN-~
z_bE%FMF2mEBsl;ZiPfL;Ym{ln41^uLrdO#6q#%B{S^aeWnFa=7a>?}9UL+C_RCP}Z
zrd4L~XEFSX!NUuDi;}&c99-q5Q}m)4Ar5xCMi?3hRlViU+NoKFG^)rCIh#rv?4t(&
z1o%)-ZVKF@&pdUs5yB24bLHVa6ie*nhw##G3UEmgj(O7A>|?ZJ?O~GQrtRWZ);39u
zA!j_BA^AnWVqf?hN8cogCK?ng7A*H{VXx7JF<Z#qvSw;@j3<ju-qsG(Anf}Y1(#|6
zi8$*c{(-Y0ihPTzfOp$$&?3)pgbWo9gY3_H?LGZ`IxfLS5$9jrZ<EJDC0wf<mb5*1
zqxo5hA11xuLiMZo9WQnmH_b{=^y{3D0l5?+CArN_K*{+;XQpgW`;#fJ+N6vU6A_tT
zWycqgOPLiZ8E`<lH)Xd@xB)Lm{^DtJ^DyM(?MdfwL^2Q_s1#6<)2w|?UZ@LVX%03n
zV)LhJHV}-4d&T~G6Ju<wLN{b9iu6nm)KVNsqaoG4xZVhCnQjgK#tYVm6-4SRF;Q>u
z0sv(pC9z+)gwZ1-drMox7v~Y@q43r4V9D}Qt+K4)@5s9$qgH9M+E(U#lJ2<Z`;Q~Z
z>`PusyH=33>3mMKTA*`&qx1Q?Jm}yvbBi86leCO>$E7BM+o(2|*1rny<UO999F}kA
zv|`UrK2sD0X2D+HaI+JTp-XmQ^?Wr@%YzIz?HY{S8ch}{sf|g2F7!-}J=fDSRAF=W
zEVC}ZLnZu4Vl23tRq$&noxJ7BM$Q|4I(EmvDQ<Xo=dgTl*1El2Wp!f|Y1i8G!qyZ!
zYMw@Wc#pN^Hi_R__c5rKKWzkP%XTk<eu<MEu!$uyXDsOy>zS%r&Spgv7nTPjT}lJy
zN|dv>l}AfLs(cet^-YSz_HrbPepwnTS@xo8^>_}Ck<c1xs@l7Lcm)7p=r*?P%T4#F
z&qb1cwQf2BH_`7-b;>8JH9a-aZs$J1M)cz?#)=V4$ip%MaWY=II1{J}DojN(W%BX;
zIy|Z#izMwKe)u8%^}toj!x-}mHUI>;J6eIj%>0cktuV_=5a{O;iY|b|Y2)ob>px@K
z7h_MXMXECt6gv4I4sMdd<$5!HU!OE18;5QuoI&EsC?cu|Lc@g60vAEUy%(ker7}fh
z$8bCe$|M6|I43~9Coe*dh<j@dP8|GM>e2f@LGyRh>@9r>wN<lj?Wmme60=}I_vq`m
z+5d4QhHR&T_<Ob834t;_=H}vCrk7;{1T{42nebAGfL;fwsgVp&vdn{z`W;of!o3k4
z^_(7dykCSmc72>R+(Lg8j@eeWQ)LQki+(gI8&Z2d!p0+F&U1K%e51%8D+H3BiElfV
zOnuK8uQvHqWW{CZEwY;W%Ue4)#)4N|yYS55IB2ui?%!D#;klgdrPXm2Rv~EAX&M|Z
zD#@p8S)S0PZ{@Z7W_{>m%|V(xudw-`op1UrPqWZUBfeazePW9E!b8$#{C24_=(&zI
z5VjyeWdqjg8Krq9BpezyKk9Q$^W&xa*xtD9e>KZMHC|M*`~OfNz@K0A|E)k^DkdZE
z8(Cm9*8|WEdB>vYmoGrS3k2@#{bzx|bLY*`L|7l4Pt7(XZ9(^E@r<JarAVEJ?;Zxq
z6WZN)ctl)8sD;{%aI_K@rHcbRw-xOcSu+SBl8`%!Y`Rb2tYGcT<qZLgaHQS5`xM@t
z4IyaxbBsbc6pnPSK-j7t_IbM$UWmR6s?A<{u)_`YNfE-gmr*7^7lF_%2(SW#b?G<g
z?Y_m|W?x5=mp>26xA0OrU8z_d@nc#<>BAy+Y&ikKTn|+ACXOQ}s9reXArWTr_aa;i
zfg}6jl|;KsaD*9H<PC-Vn*xDG=#xdBViN)3{X&bi()sPFkQ&we-c7FsiJhHE!{Rv~
zMQTmJDl-bC;IZcc)TMDHiO44=MX7WaR!Uz(J&|%_n2{=V{5w0RH25(fQbfz*>W#;{
zk^vnp|0)ew8=t&ptaKetr>*F##;*k6gbE0?F=(T5^1Mk2fd{FtN4>_9x`(Gw;jG1-
zZ|UySQPWR!^!0upcCCK+Z8yS<7BKsLbjJH8<K}(F`8ITpwY6*h-b)tS*jCdZh_Ow=
zycm))eehef);F^q$_O+_Wf{_dG^Tn@&LS1;<^IAYKN5cO=}VaMSx9Z4x|4nO0{15d
zPws@^KdWQGa;{Yw^EUDtTNAf8;g5Eun)K$5jhHN~t!8UH6?S@JgQQW1AOMXgw4&}P
zZaSDpsCW<2k={_vllx7+MJWFdAGesCH1%4qv+_E}uHt)S6rm<Eeta9Zc|e2Akxsvl
z;wnlKmR{%FF{xvu)ycE9#q#Dl1L@WfWs9ncr-w*Pakjh6!k)dy3Jk>$88KqGC9nw3
z^@6-SbfQ<98J}NpRMfi%a6))(LF088vSDsIK@1>g+L_2;-Ne0Oce*Tt>CEQ{0@~W`
z&hgrmi`9mpck<jz>S(psm$>-*_+@LiKaXW~!=hA|maN-eX>BLU+l!k}<(jHk$T*DK
zQ-^YjZ&!OwF28o5>v}?{SDf{E9n_8V12$jNf4$i!$XIvx_H<gDj<>^<iTekE^w_wz
zJcHL`K;58l`elC)`@wHfdId22ld#vBsE72^c>fylAC0G>Rs)5+wA>@9rp^ANLHF8n
zU^7@Ad}Q>!sp1EFx0~VE*LLNy19jxg<9--VPX2Avz4U1fr%oQuh1Y%56wn4H<`Kdv
zQ4TbFp7BS(cydgD`Fel(U!JBL%PxuGwnl-!$|HScrr_o!CZl_^)?^eG6xfmO$A>__
zYAvEAIj}809k(R_JzQ85kC7sGJ;qr?v4ll#OFaGiwuXbO$#hPHXztU)Pjwd0=3+G^
z)2HhX8KQn^o|M*hkrQy?RhVH7-sl&sLZ(eFvNL=?e)SY9dmfa|whS!?IOyAbNQYud
zZ>Ed{jK4(G)>k>Y`1-tr@o?9AShf|PpZOP{rRUj6VOgxVjOG$HOVhQwhy-CiE3ie{
zm{dO{xj0An@79i?3w=GjfSO7oLptBZ3VYd~xOJ-v_%|I7ATmC()N@ABio+aA3lce&
zaUwKg?}z2SU=Q9xRkd^vLXTQ=`hJC5oy1AV$TP89(U?bag!-V8#i1(tn$-I5=3m$u
zilFXMoJP>e)#eshna=hE?sxb<e#q<R<fg<EDk-(%03Hf$za1GJ5~N@-U1i=q>At?x
zi$<8e3*Y{+f5?eE6a`XqWLv4Wfnj{DF|3qjB(1b@=t4Moj;F1?-b2`<v$ruV6{tO&
zEFE2b17^BB@)`&BuS#l$LlOR*xG^!qtJL0}w>&KAY~Q|wRY;8q8BRr3$oiSN>37xj
ztzvgIp9qrEV$qwsWJp*RtH#pAYSHy`$(mmGu@a7D<GZOqX*ESq;o8-bdD^hK?;icj
z+IbP4K$Q<1&BD+x8$-eF(B}P_G+$IGOY_r_<Kn1W_A+xwp+>7)=?#_dCZ(E9$YE!r
zbmuo}5(r0Fgq)QiF&2D^db>Fiu{rB|+y^zcJYUgFzYk!gtY(-Lc?L5ZEflCW{W)9K
z#7j=T`-Hm&ygXF_TSO1CVd-!i_(jHI2QYr}Fbs@G5iRS9VF^dL{B%9A>%Pv7pvv91
zp;o_<8_Krow{3q&>fX2Et03IbyrdZq-?CXz_dO&&KgE0+i+?!XU68L=6O1=5ZPzC@
z?POaiOYVNNN0T>J7|lUG74V^&z((J6PebaHL@awR4pWt3uj!iCF({uQ;`@ci5EvG(
zj}c%jBM$u9x%iUn^Tj1<5OzwAP`G2QG~+$?J0r=&eWW{+`Z&q<r=1urDJ4J_N&nNx
zCP4Z->Z0L|l}k~(tnV|Jrq+6PW)HpMs58h0brC_DfP9^&lYk`i<|VLJs$^YKaeAn#
zn2`9nk9#%j=UVr7K#0a#jl*HJbK`7S<+)OpRq;Xl8RoE6see2C67k)uq2vQM)Ua<m
zjV$rBAK<G46D)KbC#$MQ5i85NrfQml-zn>_lYJ3(K6|x#k&16Hu;1;zub{5AkIXvy
z*mvD7NVR=0cSVid(+h6@RB?W^MaZTrs*C-b%pd*C_)3TVnPyvsaC|?z{2vsTdO=2E
zgIPF1Pura51*30BGbt$@QjABxk;e8xf4?jG^It^zXa8kF|G!1a|JRBD63?F+kU0B2
zAWNRqAQH!YibV7edWrT;PO!Ej;rkKFAvOQP!vFY<l9M?8VwmuG@1`J`|3KT@|3!|s
z(S}=sA39aJY_25BJk$G~-Z)AB0K@<8%Ku!=!vE_o{*PBp{Qs{7TNhW*J6yt#zbgK^
PyxPhN8ld7AZ$A7V@2#qy

diff --git a/example/k3d/assets/console_failure.png b/example/k3d/assets/console_failure.png
deleted file mode 100644
index bf817cbeaacde4bfebc4bc4a043df84547108f10..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 16667
zcmch<WmFv7)-~KfNC<=w0)#-&;O>y%!QI{68<*e^BuH=z?(Xh1?rse<?(W?<yqtT^
zdF~nScklD#{qc>_qk46BRdv<gYwbPPTys~joQx<cGA=Rz06-NN6H)*G5K*3OWhD6L
ztv)_k&GQ?AgMhda5)u+*O?LJ9BaWl6nxmqPiKC0Yy)nSl+6HJ$=U`}WY;5gdX5)B*
z0OADzhydb3-;}<m94$HVW6l!-PEV}XqNzV-_~W}!*#EG9srJ*YPR}<Wtkg8qG^O;T
zsY?oF2wj@*(j?gr{}5KOYDr+r3Smwa7fVIP@=04dD7K!Ze7n_kB~@*3VFCAD5wrCH
zRo@jFvNn@_bNMAGl0g88*#Dit?h|1EI`f}467dT_ij6kl`RhM_YxeoaPyeu$-jEpm
zy%Q4P-*&-Ak^X-j`NszEZ(EM(S0wu1{{i^7ooVoqnB?yh0sdk4FbatLeImd=>=1qb
zUw>U35}e+@ZLBUNoImd7k7MB5|7}wT{{MLcJ?PB26P+f#w}Ly|$KRJ*Hk)i}4P`N$
zLLLa-lpa#NxtG^G`*2wZ0JMxsmalMew#`4emW-M+-?l&WMG*3N-Csxb*-N%%MKIQ3
z{nc8T3te#f&9CX*<I!d#Kn{)vA_*H$LKaXvyy=i3H#Dtmg0~y59&)n3lx52z0(@Gg
z(M~p)QHnLry>VOzM`kea@Ol~So`@9B(LVqK{%W~`+0!Hl9Uho`<2D-69bV`KVD&8Z
z)9o$1vAotuOkkP@<3{lo>_|-5JoxkKsXf`ICN|<<jT;Fct64Hle>dLUh>d~u$~xBV
zf)^wI*YV6m1A%G^9&Gqwd@VW303L8(MpFi?nYg|W$?pamPfsQ%`V(UTd?3!Zg%7Ym
zEkL9QemZ*>)UV~z0Z;JmfdcRSm5n%KI%`Etl!<=J)eSymQBXM7SczqCr^ePGy{_qW
zZ=@7s%n^IUVxQeOUb6&GZMDvp+s#a^JCMv5Kkw`1;{d-}?BiN*9ik`#viSiDpnc+i
zb=LfxKQtaSfLY#6V3X#m)%~PzU}y-h-efK>;XMG5wzpUf@pi4U?evv1cU{KYu=^Pv
z<^~#c4o%28j2H$A$NUu~NSR3;mQ%kaF1(V9Hk-)Dx}Cdp6+gXb!hdkk4biIaS{-nx
zFJBwhI*y`z75wx#U??N^L&o7PgOvwxz#@Y5D}ZWv^fRD65*a`g%3D9a?AOPUYNuy6
zHK?xGY5i7kvA#TY|1*%i)AeE67}gOk+L;UBH&-8pRMpg9A4fU4@SQK9CUegVh<TQ1
zv{JE66^;fzCS1`j#ZXTHZI+_tq@aiyxQ}&?OF86ieRYKHF&%}Fny^M!LHxG`c!kWh
z%D}DAzk45EM?0LGi=_F>Y}R)R3y-&m{$ioXr1lv#?ouh^j}P*Fd<+x=Z~%cH7y+VJ
z;W*2WvyXCAm?rr-MhJW~>F>m?HSF!rP0>GjQUiQgIq1l+zl+?2bU8#j-u0WGe8J)0
zzL8vZE*>7f{JLgmpW)~}51qKP_1c0JpBMpr(chDRQ9X;*Y$P(U+`W#i#~k4Sc6KLz
z0H4CPb~bCU1l?L5BsV{b8Gr=!_R0^Lr|uY6sg3`iZm@3&d16mJYI684_%<?yYqU<Y
zg>;cUmD8eVZ<zb&YxSWZW`ZbhqM3YVV(r71(oMn3zUaP8vU&B-X4%<2aFGc0#?7<$
zvMvvj7(L|(Bsrc3%62D{<N4*xZ3Xa(p2lYrOp}ifrlVpY*yl~4qg2uL0e9I$>ACQq
zqfzD)rcPbTR6!a0EB?1t1);?|Jl1ShTR%p7g0<*?sA7$+1M?5sJ(0gKjW(wrA$dVk
z)O2G306C>IG=Vc#)`NF;Weta%mcC-7#LB-S#lNXIFDJz56)}jP&ov0Fewpp{YCPg5
z-t2KtUulC%**XI`dg}+V{|dfG#qUvtr-lbA(86&gf$m@%LB+32p%NIzjb9B41h;zn
zdL?$9&z;13vfw2I75xz8@JNfzEl!JXQN;Zt2W8Kg!K(2eR*&DWzQu#~^1;$7^hQZ{
z&N?<=0b+1~pcH`I7UJ4@V~B)s5e9g23kAUc8v5pwxgC|lZ}jxvbPooW$_jrC;=6o)
z4o}OkuJunVoSiU92S4BY32UU5aGI;UfqwVU>3MoD9`)jd1$++^wWmdGe^%FLQdG_)
zoVa_F>e~o>$muSJezPe%6cGS$)v@m%VR6aYg5t8RVm}3MZg2kJ*A#8N?uylMz`&Qu
zr4{?;1&74ShKO8cI-!Dm{(MZ?UaTjDOd7YV)r`$;9E&m;*53`p@_ho^MR&K!X?R=P
zY02h$Ux@#R+hdlfcxcWGfY|88l&Q{1T4g8VsE)_`xZ>INhT23Yh7Rc7!SPPq@i*An
zlBmJd&?xz-f?A$XT6)@P;r&aqB&D*zva}EB@H#xi!e_OYxE!Mi2vq%2Bh)#dL5WF1
zU9Z&&{a+WIC5CBCEwC;M&7zrM&D6yGp%eC}^2f>iF~Mbu9e#vr^g3Xuz*PWNtX0Y#
zCu6h}F82a=JDrrt<chhPB$0Ytl^DwFUt8e>U$?-&UcE*<U-S=ZIGpUH0n#jZ{5^Nh
zydgmUiFfDewJy}B-(><VWuTOJdgtglG%)qp;{uUb)^$uv;9a)ctU&aH?u$7n7?Qvr
zFCx*DRJ@9|cVB6nML9GDp5zZ~h&@o>hcIYU=MRjBQRLOrwO(@#_5d*fm^?ZxwnrF&
znoZ(mU>#HJ`5(bkU`XV2q<454Ooy{LQ%C_JVr%l*k=_xAqv9~u>TWdc6Ul^}ayG4>
zLUSgqw(P*p$Ci~=>u#!$AKmZ9rc6)jwT*PBUa8mIZMVLZB)>mq)(WF>t#$22mPJ?8
zoY?uFaY;mOc6N59=?!%jF677#9~)$GsZuVmE&D$J0eNN^p+y%bSD)R$Ds(u5gK&xz
zccg^;7cj<l$CfCt?{C1MbXxu^@^utSG8BhtywW$GKl*X`WP1TWUyzCaZ&Z;J^5oZC
z@^`yt;`;EN`29Zv3qbqEA9InBfy1$>H=SFX{x0Fwh2&GQN#o&t9vmkQf#jjfEq0t|
zhy|lZKE#8?tA~zEN7E|xWb++h)#Yj9wke&E7QePjR>QK#hRJKicK~RFrh>Y3s+D#7
z_(fXe<PK8EgZAve_@)p#9kz-o<YtZ<+$l+#&4to&JcXFM=b%XYHkKHgzi@As(UX5}
zS@dmg<7wT)IQ6WNs(R62OP6IODX%2rOCan{_DgpuPTiidbp3&g`?NeRIgiM%Pp07F
zIFatmV24GFLAUtH{rbI-3kIy-Hri1jEQiF#m`&N@PjuB5u)ZP~-_~3?G$X52=M|qH
zknpOr{i$P8>nB3W?RI>r>tm+z8vVc-Z>`q|TL^g6dcI&g)6_*PB7R_MWqZcsH2+2Z
z!0J578{|;2u!o{*?yc?p*JCpcF9m0T1agX8bbW05Ym9AFu8z$gJ{yIVDSki&UqPDf
zFCciqv=o)IZE@Fps>z-?-B+&Dg^4ndW-lq4+RNQ;ysXS!j7hVIRMY#O9xgK1%GXc(
z<syG}>5oaIL?hu=w{ud#v)e>)Q>gI6J%72&5iKokvV$PW5IqJK`Aa_O7pp_1AN=$c
z`ll$`bXjP#FTI@X$J>rz!zOO!xR64n*mz3#w+yQ1Gwb(B9fd31{A%xRSMyGi%iZ=q
z&iI_17i@sR!)_I(zK~Q*OKfmrNSpuXMD+4B?t%O8!9QVZWXSLGHv43CXLH)uJT8Mj
zrv?fgu)8p#nAn^PgI0iBwWuJA{!TQmQC@7-+$Dtt?R**QwOT`WBh}<0t3IaP<1cmv
zTe5Vhm#kmcH^okp^TTzJq)Zbza+h1ix~a0=omk8Iuqb}=IPf`Mo8&am3jHr2X;WKO
z3u2c24Gz%$2K<u+03dCn&yHWFea-mAEwz_Zn!s$LDpQVJLN>@_tIg%alU=%#sb<C7
z-mQ5(+^YU;xg5ZMew?skJn}D`HJC9<cljb9J*$N~9N!U*dgL;c>!)j;!<hBc)<Ea$
zR|2`Yg~50Aq`zfx=LW>88JF+w!-2<{##gx0=Dd2d_h+pO`vMEeTok&el+Iydy3|F>
zKGN2qH8L_O?!=X(B;l1^9fmL}&Azh6bU~%v0D*<~XE=9A0Lmjm(MKi+CGhrwux{N;
z!NQ`jy&z?;&5EKZg)GtLcwTrw5z|tBg9n^gXbzT3A5#^dtt0<}U(N>}uG8$rtEKUe
zJnoUfn_&k@an@^yGiGpqIeJnwQX<Xx_%toG`u2NQc`qIL0pyga8i$>{^Ic82iAN}J
zyFY#Er}SX)dzfn2G?z@uJlX9ut8SD&m>Sq`zBnm#yS*KJ@H*YzNMpq9S8A23WU8x7
z{%3Wq$L+*9>uXC3KmPh`?_<fR1Lu$2uE#L8l*A#P_cTIPu}OPMrh-pH?(xUsaeH<3
z*5Z_a{{||l&Bcq>Y$U<b7VGX-ca<DCDNWLl-^m=)Yk*`V^|bE~Xg_~?ly!_lA%Wc|
zDXxtC@cx^oaa!UZYEo-lr_|`Y!P+!}_6JGx(&<gc7~U`~u*)I+)qe-2dybkF#+Ayj
zqb^HAQY5Z9nM5n{90RqZ*g7TBgP9G$fI;!`Ew-e9QMf+Z!FGVxPOC$(MJs<qVFUp1
zVml`9;;FG=qpbUTdrjfgpr)U8VNt+iP%fAK+_V^0%iHSFMV*q47!&WyW+(fn0g5x@
zF%w%T>Odks#2~-?<CADB7ySYFldQHeU)9BolkCMFEa+b$KF*<nM|{CGYS+q?e`!<I
z;NU=x|26>*AQwj4#F}p~cAGD@aep5}KChv%tJ9LEA}DDUeMQAiE<!0eOkFfdfC%gz
zJx*}YAAMjIz)_)-G;c3dhBJObc|BlZ(O7I6v0WAwC3W&K>wm$>=Rd1`-<$QMr8h%Z
zQUUy0i+4l-0OhcZ_`pjq6<*@##hT5{&9M#gGP`CKi`N`W^gLm)aQp>N7hENlq!{`6
zLB1sYaqnEenb_Og_cWITd>{#AAA@PNJ=WOp0$v1caoB5fcyy0pYkBOJ7sP)Sua8K9
zg~z}drGYkq^@GDw=@<kQuZq4gK$f9=DcWrZx9&Lna{klfPC(gs;XFF50WWAj$ShGA
z%`f!$^$Q<EBjXv`m7NkBdN?e1UjjiwI6%*cx1HHV;;I1Pq}~GGOI=|W_fSHa?oyQY
zD5^^<d;fFQaQ)Tj^$Q_Vqah~^=X!iDw-K2oHWqe1n#M15ve34Nb_VWVT642jpJp_8
zfnO~fz-An_&2~`_wLg<{&pwIeX)IU$rH+K$lQZIg!rUP>32<i>DhD+1Nff6)%M*cF
z^s1T_eAb{SsG6DME1H5Aq2xqUc6QoGGHuPJ8x~dBD1ARv3LUnhn1}qXpDr)%*ipdz
zIW$sMJhJ{$-#S?apKZp`Bn_6L4&w+JB1xC3DHum~DU}dRZ&NrIt5>MH-u-C)^vGhG
zqw9`-&dy1$ti^KjVw)WZ(Ws^z=Bv3JO#RZ&r?pV8{K+#MtvPv%j4+EYK2|t7mFx#Q
zrv@J2>uFLwut)mp%`Z9`(k!AUBz4);BucCSsOzTcuGP%a>JNALwU5vWi};g`eG2O3
zx)1KY>helvLT4N(qzq(apQI!-{D9AH4+|<SCHX0yHnsxska#@0+c&PcoSTJ%J!tF3
za?^f0?{>8(a$WamR7(-{+1$b6$9K|Kw(b`F7s%N?pm9}Hwe~QRliTw7F?l?_^~!5>
zD&u1~Kar2iH{$gUZ7-&&h6}OF8A%Nl@>X5bFRW(}5L427<bZa?4LE=*QAxH4GD@yg
zM^HxU#%!tc5A1xjGU(lJWup9FK#r2V0ppA6@qcDCME;mY9<UHSg~&MVEwF10X+#*!
zi*Q5WVFF|nLqO*_V?WXydtq9PyDq<vD?s@!c#wexJ6P!bpwM$7(oQZw&TJmQP6ohK
zUR2RSMP-XlrlDSXJuo&v_4)9#QJzASR=OxJB28)2CoM-==DI3&bP(qj1O1~B5C%{3
znTD2jtk%G?f=1bi5wEh=X;bMn`YRr^ew^uMWfp>NtQB+V%@+WlcRtbH{k~mmfAd0Z
zHkS!{Gb2sEXV=VN5Zi3s`ISw4Zze2Wx3duficMBV_UQuCU60X)#`}m?6?e71^mLXz
zxsMNYr7bEv?w?FowCj3CK-UUHvJvm8kt4*nkObqCNdh^QbUdtRmmpcMiDw!kl>SRf
zRq*{M{Q&lkAU>TmFaJQ=bPX#asVpfyJxLS>porV*Inkmu{8*@_1h8<L9^@UxMxJjg
z3N2LP7ix=Wy--zm;b=ItG&ZI^=Ol<!tpXmw1e_{qu`m!t@h{LdxkP1@?Y>~X`+CQo
z@9!2ER?~n<H5?>6+?!4=_%HuhdA)$tDDz5^1<JkB<(=||-qlQb$)Gndn9t?r+i7Qc
zkhNr8<I|zz?iIm)6=i*{<&(IH%e*9kgXhD2f^ig1J+z><nl3AXEB#zLM8B;=iD)(E
zUQ2#2L~Fb*RDEeM{WIbXBGLFXCLs0|cNNl;-h_{gN-C>o%b+)BQs2%1>92$`$txPF
zXdixQehl%!i)caXw8p6?FjW|CtZ3v6S*ZIbviFXxCmE0ZTxbAFX~hfJ;$lKnkL*zN
zVv5!~vx5S~NNE6N>oz&36@5N}&!P7B*b<lL%(vi_^_g6X2PR(-=aWky0*GMln{+ys
zz$NLf!7n>oQ9e}+Miv>^yOp~nh-^i{3RK+tY6O-14x38FB5xYF(^~G2;UyqhrWADM
zO4nSoD`>XT`G*iz{$!HUUiZU4^MN8ZM|5UTt1(4tR^+RCzs|ws#*|yeVg0rM<4<WT
zmQ)2ezn#sM6V_`j`w`o`UeQ=OC2~I;6_3ZB&ouIb{Nidw0=N`WFn+XVOP;{x`a_|p
zZ&;1yH9U$ot))ar`Mxr<HnzaG@G3-_dcHvoGpgiF5WYd&d~*y0Lma?<LORttQ`oR#
zhC;l+=$goOwd36=MX!<Xk#a<1(m_E(@i8eo`C~21Jca=%DXrI})T*Vvc9tv$IzJAk
zz)NF_v57wp`P%NptlZ}3U+5qY#r9uJVen$<vTwO0KdE}}P3;h$#5iR5&LctUgfs6t
zEmjlk&L7GagDMHC&1UkmRR!!1lINw5=zj5fmTvxx5Ia6-7h^U*HM;=RGbW0A=j+q?
z8dWYZiMxAjO*GURroL>M_hk5H#%b;L)QdTUl$fam07PP+j!V`oTbH$|z%B$kwqCQ1
zqg=+q&{J`#;ySa#_kxV={^*fslB>RAcTTCl5F+qX&`!g#u5L7Ps}J#}ZH%~OHs*@n
z{KF0HuBSr0(p1h+M&{B%kM{ifz_}*<Ul>i56`i>}EH|KRGptxQz!X=!>1xO}F($wm
z<@f-p(K$i9csuzlG{%bnbZZI-27l1p;W9?kRY=;#P)SyuE9Bl96!^*0v9ez#@!74>
zdt}Yk!4$8pEq1dTafPe;;I@J9rOIsz?SkipjvpC@mkUl=Z(Pd)w?RNY694&Q)<w(Z
zSvbj0y4_+`(WDsMPw2KgA|IO*1P}m`v5-4ht&Sd_r8}QAf#|*}Y^bKn|5VJP->2{a
z7p(lsPQf2Mf%UVTVn(Pz{-c-u&7eU300OoZ9tGt+=9ZH|Pv(Vut}c21M%mFK*kHaJ
zT2_Y`Oq`ZKwrtbfpW^Jj<uu@W20l-%-i}!DG$*E@xt$M?WRSwcofdnhmx=gJCx)z&
zeW8<Oe8`U_0m{dSfo@a>ByMc-)WV|pQ|LqM{e>oBK9<woYYS1gWE@y?!@7nD=P#}r
zG0@tg2AP-J9*veg`@2^h_xZn>2wZm|G>7ZH{-E#kXBP9gMQLeyV59x=FUDP97h-rb
zP4zdyf9d`9-z9<n=kma#`?SVoWqqv~zvqGdG-i>t=-ten7K7{Jt?86c(-X&xKoDJ8
zPZmo3W8=QF(UcU8=W#tfs%5Oq&yEc*%W|k^nEGFZhDXhYk;4xR`?-lx;%!di7D)AR
zM?VI%Z<gItcSaYWtUFJ+8c3Do?w%GChb#4qgVuZ&6Wya061+Vu$==Hs%dPHL$4iTI
zvUisLxt%(eHp|T}C(EtP2?>sC$`a&X)2~xa7(QM3RlWDdXnE%G$#s5ntnn9M0w|Y!
zA*1wl?{c(~_^ekf_v-2K0H>S`tu2)^xqB>HeEr2uh5yXj2}^LB)*5qELevoP1dEwk
zYXr)ckd@h;ise>t`~FD1I*F}EDx?|W>hL_nejgNbq7IRHmp`2yw-kzYV#P-DLfx}U
zO6M*+Ioi$HA5SOj&JJEa+|<}tet9{|V)BN=W~wAO?Ii`@gXikQMV|~`IGs`p%_GC8
z>MTxrGV>5!{LSwjR-D!on|v5Ifat4B3b6jWXR1o(NPXR1f!jvVU$nseIjDbq(L|Q>
zTt(&9n{A_QYWvs8MT}Q!i+^OZ_X*F<mo@>yiM&~+<BczdRyK+oZa+GIp>?2*;`2fa
z1YS*@G-jO``ZGg`>UEmioU>oLJWVv%Y0FqkwU2Dv$++kCV|psV!AgC9dxSX*f}uw$
zh_Nah?p)cCT{J5+Y6pet^jsiwADO_u_jjp}!du=u|6owc&sAbOc0Ikh9@?J{BPLHt
z!mF3oH(OvVvPYk$ViEX*q&~|;pt$eZ?dOQ9vBRxu(t}zWL0JJ!+#4d|I`DqhZ>R9A
zIBUlhV~p~9g<tZto?p3wYQ}KGR;K3w1~RVP?p^Cf3R&@ER7H4|D;Ao$cR5_u7hXEw
zz3$|ALi&vZ8Vd=#T26GnxbrZEY2$TR&e^S=61UQMGftH2=I<)jr0*nVTbD<ZS}6><
z2!OU#jqyB};u<ANzacZP^BHyLe-D&lWMQ^$cf~5N=*FW@PxiPNQ&u(T-pfK3MatEm
zH0*A$b8giz7s5;W(#Ml&Wx0)oSPFmQ$&#O9!TfzB&`V3ALyST^EkWm(3&G0O`gyYX
z%FyO$Oz1_8*WSdo*zPAPIVfEzWau2ZEuj+*u$k-iU6-O7_u%#aO|_i42VFIa@Zj}w
zkVRP2q*oVduh{stiO}vBf0kG=akSB2eJr-YN}b+S1ToaEsOX~QdsT1mr{CMOHl!ud
z%~<HOd2H@$OE<7QdSu+TP{=kmx^+6Rm32fqCBK>$QU_gl!13oA3gRABUi<<zd}oQq
z)?9PU2Y$6VIA30O?_<Z8vRv%5J12zf2jv~XXdY>S)VWJezC(k{0THs+e0cPeR(xhf
z8-(-=H;Q%c!AKivd>0HjnX%Sm=2Oj^i>-Et0@UV{z{`d+?=rd+CJ0?%k3k{wvs*pz
zjl}e{%@_Gh9<bHC8Z#Zbc!PLz?p?tOUIXN}H5yx{d7CN6%T_fs-^sM}Q-1nHdgXc3
z&43E3ICIp4Q*Awyedzo38`K)tn{s1)k~`U7tO;&emj|>1Sq%1m&)SSNYCUIm04gar
z3WSV(b-MZ1Jon{L$vy_rt<z5*YmXN5(~V<7z0yVXxOvgU^!4?X!^1SvAj)42K(}=s
zegrW)GW+vdkp$;snXTAui?KJuI+z~L4*`_=2pChmex}wZ`c1%5jWMII8);Oi7fe&$
zGiRQgXQ$dpHIHZrA~K7osv9#bb*=rMr3#Hdg71rdWhdeL>1MK#1_Us#p3&%*(23@J
z6}PLj!-Cghn=*F?N0{fv6QuqYWW@w#dkA;<Z|3&&nAld4NuY^VuC(qTCI`Ye+B^eC
z3Za&(16jH^?7J2-+q=meRk!i8z|Xq3Y)3QOn%Kp^STCo4;LOZNDuRN2D~K*Tq*pjr
zpbG~mGi4{<F$=PF&U_{-n$Ax#S>Hs{LoC9ccaJ99dTPB3Oj)$#swh4dM4J&bDx{>7
ze}Sh{cJ5lI;!*6OEW}Kr!{eH@N-iM*O7ALnBOEPTw7W^gEQmmDQXeDGdn!(Ts#WTY
z9egTOMdO*+P=<`QQUZK37+r^CEZx+e8is}>2WyT@AL&S9jd<oazw^-LUza?rXPZC}
zvN@CY(n9s=U9dC|hyyH4mHGFa4sI}7meGk+BKs|uda}H{GQiEwA3ns7G-gIwog@GN
z(RZUe0~lm9rmovuE2`x}fYbXMuF*4))hno_`<h+>E6IA#6cPZiD%te#b|hMt&s||n
zgFbh~)JQfp62W0sOPY#+!-c+i7X92}v$GH6XkG4#7b9Q%;Q_P3;Ydktne1;ZKxGQM
zA$ECU45RDC#bOAs)59boU(~JjJGC!`i_IeHitYEPshVR34(^fMk1(ljUUxh~(!6+~
z3>U&aBpI7sOH0rDEhuYeq=t%H9vg^yqd=sONRbOHWT}J(YBQPj<3U+G&QWV_7*)d5
zrqPz4_U{Di_})B}x_xZy@t`1PMk8GtYw@x@oY*&03&~YZ?$38;?!7EJg$viouar@I
z>13VxFSxR0cbMTW7cjf_zZ7KQd=zY!P1j>5S~+pS8zC`WX^n)O9xTyYsymByQ?f_(
z9GmbytozqBAy@2}E9eOg-jY9Va(q*Nv7&6Wj-AYH6KHtk1Nz3jo(A@gLhkC8dfh?r
zfPrRRuRdWmOU&v1$My+0bF^rU%ft2v`xO^K!^^{O<k1{umMTpF*Z@FZM)O8@W;|al
z>-f}WPz*_{O&X^gF{AcdK>JD4`hv)(uyrmJlLp=tH~`U^6He`=iTErlG?#(J(-L#T
zMbj17RgPPA+7(_s)}wsXpIzgPchfg4ubpg(t-Q$M8TN612*|T_{n$Y$lOE$-eK0Ga
znRLGWSh)1_#Jl7g5kHh!v580YYAWoD!`A{IZEA<Mn!f5uoz;&_c%K{%eQ)OEmQgO<
z%N$QA#~hF6k3ih&YUgso;$h@yHD>d2lo+`bLT&ad%~xJnXzu_3wix1KEtC51tqubw
zW7iU<6s|JyK>%GjFBh5AZ3L4M!j<Au`kdBAhjYa8?X(~IAD8%N9`yTjf(4r%^a=!n
z6_ycszqoJOlw-nQZX{qO@n$i^o$Kg1SuuuV((3{yKkx0VC>%Jl+KhxXpE8Re^Y1|u
z_r^tZx@~Nhziljdq6<>X0bYchUq~k83nL;bL=G6y!tT{^FvE4(V!UKfC}8HrDCx_K
zoM%!l6D4`pSjX-8IGHs({U)RG%YMQ*=EfXJ3QmqrYz3VziLU;Q!-txJOk3H>mW<!0
zI_9A^v`Ox?CC}tpSa>y>)d5Dm!}dNGmA&#dXJS$yF6bO+>o11f9Y7WpeQwviZk1~#
zlEsryiHpJ-8y`}{p%(-BTpEM1qa#K;kKQ-8w#sxDTWSbi93!r2<zI=uR83J*!zys>
zr6RuXs6nMz=26JWfHsWKHnYb2r*Um{?QKpshOPzoYp7Lx5D5e&D5QRxHa%m<E3+2V
zmeDt}=qWZj|8bwiz$@~4CIAx?%k#`-W*fE-YfGv0F6O%^u3J!2Ad#p(iU=f5z~&95
z^r5W3^P5e?bx5CD;+1<I%zbJ1mZ1rXO={3eIq%z`p&C<j4FijtCo!GjX43g`=;gj0
zk#ukDV8eF4uJ%;KiiPOsjLVjHeRHElH6rsXWWw*?AqOaHXay4-Y1|?K3VI#W6)Ljy
zm`Ez+KVrcM+?)^PPNbx6UCx}a(1J)06R~Z4l@DmnRDjuO4{`d;dEDyb&Xe2HhPC(F
zE~Re<N-a$|Jon?J@8=z~SCkK>B}N>JsxzOqcqFfK1|1=q^`w{p!2cq6=r=Kl7EaeR
zJL%X+9{p0$V7_G}F*l+g^qc@GYUhlId?`<F8s?ol6KlW(YzBj$Y`^#K;J(oY0mbe|
z6JH^a@{4)J3qf(=R97NX<}2x(Z$r+!r<*sbyjstum0=`Yy4qK)gg#RZxxtqsBN$)|
z-mU(cB<M#j<BNFCixe4Q2{_WnJBo;}-(GW$d~K;Xt0gPuiQWX{FgAO%<rgy;CdSnV
z4*q|rXPA^O$@VS0D8$XEzWQJ%%tO(LTW_MtIQgr(atkyPY`<GDI%#@fP318xp#B`L
z5^m|4*k;dDPGx&mX)NrAMfNX?YsjQiOwu(0#OqM{Wxn+k`}Q`f(-*lJB=yqyiduS^
zUSE2UO{?x%FL_9QUhhsZhm|Rdp-^#41`k7wq|6xS(g!Pbt2ocQ(}h>BJKxqRk|)0|
z{9UwF_(G6S9@j*sx$X`4yXVbi-b1B9Z7;st6^Bjlg+vtK;o3N^e)2hHv9uW~zOwJ0
zaSn4jxL3ZEO?sF(nH_kbNbkmGAozM4_>x=Q$|~zkfg6vB)D!XUsrra|%$r}h4#XNF
z>Bs@!>Ul6q+#~RzloKQZB}>-VyVm#pG*A9wiC0>cX2>FxxyD~@h9;NSn?+}r9{Mdg
ztj>*4h@odg5>z;uzj*o?VR2V_J=W~EBd+?owP4Y)ws+N(EC;i4i|(x1n(@~WLuoQU
z<LQ$3`7FKl(o{_Ia|HurXHPDrsB}A&Ez34E=^Go`%H47U;<$HUA?TW|Id3+CW^h!#
z=I$`h^ukLQip>`H!A19|EI}FK{rmB{2xdo69!A}<b;0^<ebkyP<8nY{xd#>*CK(bE
zK{i)=gQ6dMY5%c6W8`hIU0`lzVG)0v&`);b8h~t{xxY7?zbSqeOj{;9^nSSq)6DS`
zN2^T|WUBx2b3nk_%*mI<yj0p-M>7~U$E#w-dR5R>;;m|2qHf$w-Z}2G*uu2-c%k;}
zqHkSA<pXLocc^Y{doiT51^+5c)o8#;#@H0bfYl?^H{b<ao(#HU3|UGWDyTOD_G8@$
zQS-95i5aV1u!vwtxJUNX4T6^k$58x@xm3&92C4C}K1N>^Ln8^ETD+sxa{JzzQEAEp
zx_))P9T1Zk-1&{ewkB|Ub*e{u3do>5EX4Mnh_p*zXmzjSk+xPyqptbLRO4E=a}Le-
zynrL3qy<GCG_8?%wXLozu0iDgZ`sXr{fq#EqQ={M`fO}S+#cW)xhk|a(P|i252{U{
z5u}@3tclfH#o3}c*7(l?A3$XAlwx-~`ldus3lYoLuZ`<$rTgF@1i-n{2?XuF({MOC
za2BQEj)<tcpKG};Szhq1N30*~>U5D$mA1dX5nJuzOtq*3xL*v1U*B0mg8j7m{B_i3
z9vKCNDyKeWIYTHjjZN5d4kug5#3Z0@5Wmh6YLChB)RQ@4`U3^7Wu?gJ+E{!(ZO^h>
zOPA<%{o9A5WKu+==Bkxe@JfuRBj47EdL5@8HOq7IFs+xZ7BN!ZmLl^}0q0!Vo|^>*
zKT`Q^w-4Sylj;a@Mg#}kpiNWjpKP6wCNc;hntr;$&y%K(lbSQ=4gpRjUt6o!JjkE#
z$of0|c5(v;iQo|li_2coFCNNQb!XvTRvl?Sb<J-zmw^)CUI>e!YJ*`V7QM(!m*{<Z
ztFijhhGV1lyjWy#0Hn8WP7y;?=GF^mLsB<l`jl8ehKi4(5~9da#%--Gy%a>Bi8afn
zs+y1HCM=!z%MvSZ)XCv8SXtR9#dUPhbC-;ZrpC~Jnl95P@x(AsPG|T~Ve#YH>P=`=
zb-3;{?%{>>J9Lhg>v-J)&#by@fadO0xX+mpLo@F)d@f(~f~LM9ViYjgY|6CRs#EzQ
zpngeoG^e`kXZ$7Xmfl6(EZ*6xrwHYQ)M{|JiVf2McZu|9t?Y=8P^-Rsz&lqrz2{+*
zL-o)VHqVkflXOr3E*tuA-&N{?s-E=t?PWV-_*|;KIpy=5jDs>b9v@-^a@*9c87}(S
zA$;`$zMZM6>bW@LFw2opv5S}#Z<IAy#2?4<767nitz|37YH49$=z<5#^k+#rP{T^R
zLs&=0_{^hAa|4crVJ^1k3o^XxOpPrmR0-Iehp6-e@$2UYNCC{@8V|FcsfS5Dt|g$`
z@SYcv%!GJzz&ibo)3~333<DwVpAIiBXJ@=U-b;p4J@ZBm2e;t3e8iQ7HOKwO1O~;T
z$Hg**6PC+zY8G#(YH|&mn}hSuog%D!o3Dxil~-3*=Y^0FYsV)q9&fq3(`&~p8zbwp
z`g4iV!?<_yWkGTxoEn&7>PL;Sr=mZ_XD!gnc66!S;4|#0kCF&|n34cZXPP5o{>LqH
z&86}h6_?Eic{{)ClAOm4b2Xw)(q7Zp6n?j1Jqm&UxK2{nz0N&8ZD8ki&-ony5VlEk
zEd~<a8lEnfnhSxrqaZav%aJU`r}0S}K=-%DwaK>9g<S^^>Sad~RL|S}p#&aVh~s`i
zVIIpx&CYNYNM4KJ#wbfTV76WQFdA)wP|}1$+&La;Vb{zK@cZ^#94;JS0ApvscQg26
z%fOBRE;?Nm;503HY`D6gI4@IG&ty}mtLitFOZhe-Sz8qfE~utr5wsLTi1_lApit#l
zSUwZI$CNlaAvzkByksG9DXmL_fhKagKj@8DL>;--SjJ?dZ{~1H9)gJGS&NH~>UZ-W
z^l`+xa`xO)P<X&mWrw^gE#<*;^d-{ra*8Z~o`!Muz&iddVd3Ifs%!es!i4aNNIvah
zsjd1{7jJX|1RvVl$t2f^fFx816pv@t{OG<!7?S4k8PKu~)U=!8K`;zuA^EE`SF}~~
zu1hSF)tlLJ<i_^)tQmPnwz1?;O~vk>`iLa(tk|A`5}(SI*W2cT>ZbmrIALPaQ1jK?
zm5ZnRnu?Xg)Ucg1`1c0OiFdT7>Vog25)=k2j)!HZ9cw!AamqF?`G{jYEz&yac$_=k
zK*eu)XmBzY<Bv2h_?~C2)Zy;GB!*>G>o<v&ulD+QH?;Cicsm9{+$v^ozT4g;E33sN
zX0l-#5-gEI?%HP$?zCs|b|uMl?jI^nuvcEGSeB8@6Y9QFZL-#_q-Wg-I>J$D+)tg~
zV~P#gyyZTpaje_7w(a2Ywf*I$#x`_i2c>C4Njt(T-uzv{L!D+9r1Tk)UbX{+KDO++
zcwxPd`V_$&DSY?RDE!#eyzE)-dX!32^)X_^oggnxTaf-%Y0dhzS3*yMHN#6lWax^v
z=F^=HLwxZ!^ZO+_#g;`br>CC9>FHsQUAzO|hs6|Z0+bIJ0Q3F<*Qv5;8#cY!tQBx!
z@b;k_^hSBpV(h4P{*HR&zE&x_q+Jmd(PU(`Tnb^B&8{cN$VyvkZFbmhI;}z0&7tI~
zrr`%<G)Vc6q`?7vrrO=s2BV+|uu-mjy&IAAq96O=y2ck+N3LtdHGvwCiDH!n%eFa?
zhoYQ>vq;^33`SST4_;n_;JyuCA?k-D7OK>B%`37@m-05V$=!(y*%#D8{jp7f?~sME
z&N1|(#7HxxSlM{FjH7;(9JVmfbk9uA`ouz#Q<nJd0wXbvru%6qgG&rPy$6ICTuhA?
zO(Ow(`d<S8#65<DNKptsyD|a%<D+&5DqJ0*Q?J0cp2O6UioJE8W-m939{r|h2en3K
z^?du0QHJiyMXt1z<mBp1qtnyTaIMOUW8Xb;+Y24Aj;#>Vq)hE9Bwi@b-3_;9+|S89
zN5S(P1e1#9W-oj9CA_v$*P2Tf$@Oe`r{0DKW7vy)i{mNt_#%Oj_EyHB0Y~ee)hM7f
z6k{cj9G*X;-n;13W@jGeqI>){7N9C97`C|`GWbF6=IdAC9P;N9EAQm=M3$Iy-ui7J
zr&k;dU9nK<7%_ee<DYd@IP}nNq4A1?U#=k1^b{wG068Z%)-OV|?=b*@N)k`?I2#bM
zG}}cxGM%>o;to5fxA=CyCr`FJX{h|YAnzqaC}jn!-=gn?4CSrEM~Mkg3-^cYm~Io~
z5Z?WAz|RE_3yBi!9XzQQ@avkWlxDt2o{;XgIpz)i#M`mEw9#w>YDp+fa=@1@D5aOX
z#Iu*zk!g$d!mH%&qE@BZVeV!6eQ?pAua~Rr@~mJG?^T&4Usuh)m!u!4NHL5n!?B34
zFvWA#uxLtAt#4yTOxMNFtKo9G@lC&Ar3@r_hqS6K7xdjWL3fz-nA_lDl^YP*;(wY!
zL}s%e?cY?!eW<9Gzb5NPA&Xaccol?G%&iWpmWjXU*qMEmu4zrgSfSqL-nit?3;y8#
zJkkUtil05dM6YUUxb?Wk*H4S@u*wPw8SB9&C&i2xV1+Qs*7PGhk+-`O3NYBf5`=!J
z%-Q}o_gtaF2``%L@z)#b+Rcl>=gC7ZX(0)7U|@i(-FgfV8^1RlHq^A!z_4OVQl>C0
znqCzB?EASFSWAES{>$>xk&L>k{Nk%cq~T(>*596$S%8eNh`IOE#pU9Yip8go2@A^S
zRm|eoH#3qnk8l8hSlbuEeKYfOIEe*aX-P%?bD{OI5Lu)`EqrzB@Q?d)u4k2%D-+E*
z%7y4WI>l+NVbv$}ko9fd^9@_K*b0#!;_=3h^_kN(wKEdMLgwa{@;3%sSM45^z--;V
z%bB-4Za1}ApRS(a)E|CabSZEYhM32L@fEJ1Vs`7C59F%wU&`aLBXzNIV--;!5<Umu
zoCVLvk?V`M`}P#ufbp9x%QwyoA7$<kuo&*dogI~!_bjYR1QGMl|1Os!cVZ)hS|U3l
z8Tij=@3+!F-ipPhN>VP}a$+jAS#`MGQ}-tjTtszEqp$^ZW%~4oI>b@*kV&{|zq~}6
zW7$Z5*5j+L$fc762TR8@<=LYqC!Zqg^u+R<Qir+|(rhK-a;yo2#CmB0GH@~#Dhqrj
z3*Jc=J}aqd(si-I<v#Ef45lDFi{B>KHzpnUK$C*HCLc;OFU?F@Yzk`e>%S}c6=a}^
z7$*F3tv!`;?6G_|lYDR;4@%GXe4A*E$Ao_*#iDSehvz4>c{j)99p~iYH`J!0()+o5
z11`5%BEH&%ZT3y=Pw7N)6QxaxA{Q1CdXGmx@qH6*sRLWqJ7B{^`Jv5uIOsPrVXNN5
zmrQ$73f@DgB|5+DxajdC0tP-lCl6#xb&JeHeqB&@Wq#HqFs$LUu;qHPdrs)9s-&jh
zk8_78Y6tftn3t2Om$FK-BU_dc>4{%opkmueb*_?UGPLj3gmC!~52Dw8Pe#MML)&t{
zbu^uxK2Kvz#%QkJPv?P;Pl2FUyTe&3^3XV{a&5NMxj`JKOZ4opS-6Ctnw^013EbHD
zx(_#)3GI(;>dGp1!tyK)fpouI*H4jPAY$bqGtoHOV_>Y<_;QP%+u0M<pBjMve$o%}
z-~7ER#EN5-DMmsl_z6HSbu~3ni>8Bo`P(UO8nY$`r2nNtVBixZeda<6UKdTjWRo*l
z9+T-CZE8$?bdcM?wf4HjoybF8aN3tU_p@yIV1n-$lC|trPyx%KVgWszM&-GpEuD~4
zC4Jmge0JTe***biIO;7=%%AFm*b--|KePwPqAlDEUpKcCxhBrt!f=&57|6hmgKZcT
zvT59P`y8H#p9USO?1MI!0)P|(PCw}qXM}%J)3uxGqt2{SOp&MDU&?-l2UNMN$yWuI
zYR=HyAc2e_+q!KiF~qt6g-BfhytH(OY3a8WQK3stMup`P)023tx^?@;o+mvPueeRg
zh=-``66}xRsKz8)7hIH7z|geRnjHDHo~z#ILn4q^A@{+20OZUbuv&j;QpkXM;ZA1~
zl@t>v=ub{J*c50vw-`h*HrOA{VvWMjAz(bAj~@LJf8>`0r|?5xIB?f%?2Luht-{R^
zgel%qX)+nhvz)$yB&ut&JuBx`!!r6Qc6)3p_2|>>iEgve(VAS>84Y;?fl<-4>g|Hl
zJUrruGFy}wxUMe-xPDfqq`4Lcc+`LBF|3V&OQrd7cB4Z-;fy=<O3RIklu6u525G}C
zVMEh51JnL@^L0*~YDtAVHv~Fgil^6OI)pWzwJDj%F$ABYcO@x~O<4~)%0O_TMa6r2
z;PNk6a;R^Tk;PR+U^~^6aOXFwi~#D9BewB7+S~d;77%i=bQ5mWaC<UA`Ld}boR8&X
zoAG(;#g)KH0G~57$ijF*C2Vc@5z%_1O|W@y(~aj6t9p(FFlM_-n4Hi4da=?996Gqh
z?z!(0blh_4q~VuESuhcw^~{MQ70JI+^t%U~$RXN@UbF8e5Z-vHT6e2OsMqXIP0$cG
zLPrksU>`)%+j>t)UIGC8_G#(77j9R-u;^`J>oEmdwJ&>1M@rmZm&xk7r1xM4YN2ZL
z(D5R+xCw-;Tkf%0r!c%yh)hh%U67ntDnRE^kJaTLU0rr=<#FK=+hjXn^VA33zQ0}{
z;-BwxAq<vg;7V?n)K7fx>gCp%AI(s?w_og*NTu)TiGYBrUiTsW2QEJApk;Tg#3rsv
zwJIrcc`FrbO`-vq6?*(=iglu+q+wE&2Hjo3Z3Wp*h)%ep>?*2n7E1vm5O3p4mea)l
zlh`8;IP#y@GAKXLh?*bH9Q|y@OL@BEUP=5!kdLABQ@!s4ZU7HTkc=3Hog+jI6?ZQ9
z?)XsonXd;#!>$Lj?JWB^QNLH;>HHXXT)cb?qv|izh$p2ZWsK)?+l<v^At1%<cfk0(
zUbQ9VNh;godcWX92m4e%{ncUSE?cd1Le}%uOlz}QeS-hewQ@WIPoP5OF5<1B;DFd#
zZCZ<qcy+(&x09HvoFsDXm#9ZN499~X#-gvnqe;iAU5?mcP8#>$t{H3fPlBDL6^{==
z34@=NKX{&~TvwRCwM;cOJr)gS)4X!}IQ5y&Z0uqEmGs_~6qkVb?Zyxq9{Vplo!?Hw
zEP-IJYa>avx)p?~-H!e6hxd!Kis8qEiA|O@7p2H90?e_`sD796mvxcORpU@#5g(-D
zz&a#$ajtFbemr`s`bUcM_qg~nH>k1O+eBwPCcL9JEbmcfk|^efmtEn|T7?ddw)ZWK
z`S>uk(lXX1MB;F%bg>vq#OLE0DX&NUHsN^OSh?`EA2S&Lt4`@4`iyk^M9;WXel5|z
z(_imoH+my{(qdwMfiwGFI8#`>y!A5{w>2&7tM?6XrO??qkK^jaM7mgE)9g^h{9xLO
zH^C)6TSPv%E}`@&0`ZZH(ECggOCcDO(wAS(j$Fyuy4-hJbpbS!exs}otSXJ7ebi2Q
zT+IZv*hWlzGMnP;c(O%5<(y2Ne}?qgkcFyG1$&9Vp*RK?ew$k`Ls^i=y5vL})e-$g
z9qlgiW4<nC-M-0EQG+O{c)6~y$@@Shks=|CndSJS#*$eLKZ<v@{N#n}rDn0tD52rf
z0Vz#%j$bhIg-tCF-l%(NMV{Q@byj2*z{PrT9H`8XjeZAT)4|X5o+5hcUk_~2prn$c
zX;s*zWSlC-f`hSsj*3>^4gOaVPjN%|l+kW4#uOwz-a0lELJ6RBYcW|}peXXx&y)z;
zeK#@mVEJ||nQP+|noCMSf4!Wj4eonjIt@k3U0kj&hr-{fL+;GazbJstb?dWBZGdr&
zFDXmW4XFn_?T6XQcWP=e9F3_m>+27BH;4A~(;7y8{(1~(S#%U!J2=}_R350W>x1`{
zRB;$PZ?NRLs#RmRYb^$TGYHz*tG<HJGc!O`{?iH^Co<LLy@B`ER(x|?r|UN;o}H?$
zdF0pJ9){yH7T-B|@KLSxMGli8%^YdxlysQ?MMI>-)@OD#;*J_Gb-iTVfUA0LaS?=-
z_PLk$^Lo1<inpv|$`_;i^EFO9`N3u%_p*~*0Bv9Sq{rSwLWnSf(!pG$af|1}K+9cZ
zFlcYu_s6jR>Cacr_@MV%&d0=Gb=(txqv<UAhs+0@H?N7o9LGHJyqIQ+xrC!nl{K~@
z8<FyoZu_Sp%!VtA^OalIrITFQX7#y*nWSLL^6F5lj_$n!;Ioj5PgK^OA$3OXvp$9_
z^Oat0pBGg~*P4Bshd@H+@a2(Igo&dAF7(b*p0IJJh(~tvH6U`@-TT4V&J4O9@J+^h
znZe60d=RSq!{iS{cFFQSxuuvxw(5851p;B~a2<{s!_jT_>X-^uQHhaKA^J$sD$bOQ
zdYn407u4XC=<ZwI&Lc8qu-$hcEuABojn)J2-P`^<<A&jZ&ML$!C;vA9pGnsAiY9~l
z0mU*}$2rCGHjA>%k$X0FtoPN{^wkb$$`wipeGd+>vwr9Up4I59m5hhUAfp>CZX4DN
z_wvdmkr~CGEwW6+1dzu^$i>i99P3x6xZB2T*O=lnJH%WPx!gwWt-k|M6IfM@F5cQ|
z>2k4k@iuK@IJg1iy%BI_pRqf32mruO*&T59huHIZzHztvzBh0A80Rf5HIeoes!<E<
z-Z`bED6OHr%izA7wTA$C6*9~e6ARu;7gW#<IjGaszLXtnQKZr7NbaWQofu-<2iYF=
zPr4^sZI@TVx&F9Y41TpDmZ*YBy;1uJ)EkNbyWGwWI!w(7s%vU`A24S;;r?UgdDav;
zzC<;o3IwjZNZ}BkIN_PfFN$Um5Ob0uxg3h%sDo^9(tFM9mg*GslIQ{t!Fq|xz7F^X
z-^Q&MGE0xFhp!(jYTIxh9&O)vY1i55=whJuUoBgM)}67A(Z3bIJX$Z{#|$QJr2QNl
zg{gQcz$JDOaw+)bQ=eTDzBw5)yGD({D!sqY_J4{sf9+n{T9cLR)3p_HQdY6F4(;K1
zqtwc4DJwOw%nDQ;@rcl5QRCYT7<cgr(y^+1sC6qu%Crf!^H;z%A?dB_f8%z+B%L)e
zY|%N#{@Ug3E3YBBn0Zj;@RRQM{e_U_-IoCV&4Beqco<qTIOC*RDV+wHkJGiko?b{g
znqnDpcx|i7(|U`0ez>3uCCM4C=Va*DNl)PzC}pIf6O_8hez;rOetvjB{2$K+5T6{!
zsP1cYpn8UliFa%-C49kY<}u+40HJ58&ka2HfJcSNwO_ehICaM#tKY|6eBU)zsHdYN
z;D0iEO}cmTU|qIk$9c(x#{Lv${0Qnisk@v^=fMJrNu+t0KQ?%lgF2ippRe)hb=8mI
z*zRE)ZRE=pSm`KA4iO8J?~P%A`arO<8=`-anAgi>dr#fRSC@uwVpMjCX`ZhTATBH;
KR3@PJ<Np9rs$zTq

diff --git a/example/k3d/assets/logs_alerts.png b/example/k3d/assets/logs_alerts.png
deleted file mode 100644
index e353eafab411a6260f22bdab53c62009d50fabd1..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 229967
zcmeFZbx@p5_cn-I@Zb(1xH|+G++Bi&;O>$HAKW#NK!7l4@Bl$W2ol_a1`X~IbdVVs
zW_Ea<_x-)^x4TvQ&$m^(RS#8D+|zwdpYFa}PG8sQNzl_#CBUP>LqS0yP*+njKtaJh
zLP0@=;9wzBCVg3_P*Cs|T@)4d)D;z(^nAS>UECc|P}CCMWn=3Z9#DiMf@f$kNQu))
zgH)wZOQR<hNJ^tBqFK}R6x49I#Ed9Rym>3)!`q9KSnxjcDbGck*7HUZ+(q)BjkKHA
z7hUkxN3Vo}SM%PS<lh1PeBp-huZS^Rlq}-UN^emOQHRL()SjS)Q2CtW;{O&#K@}-P
zp<(h16vE|}md0Qb`VO~TT~Y2J`RX7;a<m3S)D@3V4h5jdCE&1w9Xhn4ElB7$)Jr8%
z3R9V1_db<;i`$tZV3|l3f3}WMu5-SJt5aYv@@kr$D>9{?1SLQyn_C+*+&yW5`fG;~
zE1@KvjfJ2UtBM4pjc!5us4CU)qZ%RMMz#Pd8{s}HG?bWB0bwY=pdo?+U`7HO)iype
zvdWCSAs=R?{_TL+n}T@_kEQGG3CL&hWMQc=Rb%;v-Ap$|lJn>kP>PMSz)KOVk9H!a
zX2vob9)J2UaYgX_&v*`{&^RXxFqK7zkli&GQ>bgm<-Maahi{qMVvWnLhSSB!ObPkx
zqVSS<5PNds$K4nDV;wH<%T%!@Aob+0E2S0myX5HBg)`@^rh-5H;lEFmNc=AOqe4#k
z^!JBbOxrmvEwlV$vCi&!uK{-R4gTSC{q48*(cCahYE-;$JmLlo;@D6Lr|Vemp8_eg
zWU}Mkl#mGGZJTg!Ya%+5W<~cubUoAg362Y9ZygNus|4bD6g>08dq}|UHB{Fv*Viao
zzt<{tH^;vZ2jf<5Ik}tJqvV5_C&lcx;8=3tDnQ*FNX)J;&K$S<AWizK$eWSaf&d#7
z5)O2!NsRVx;v7`BQZc7>!j6o@C^@Qlv~z2cbyVgd41;=%8WcA<W)3WiZbCi6>&W|c
zVhOy|C^m1reDv&Y(MjBs@VG+k%P2}~j1F`=VvG$YJf$cRW|<+XFVTOP*|u?^^2~Y|
zWJFKpE7PgoDsmUT(i1d7d#89;NVBiH&+1Ruj`m9ars$<JP7pz8q`m<4r(UUgTxo2_
zA3PFNsgaaFD!s+>u_?Rr)`i;eWYNTb?5(?<(YIlTp{5n1Bt{#k9+cGRYmw2C$7;xx
z6_!>QSFjjyR^b`Pxym<}coqfe^;V=g^W?@l7S>Lk?92I!<i`C}sZ;P$$}S-)qMf3g
zY@PhRPjYF3k6Dt^(AQ=okt3nS<%s)<*f6njK*XBQ_Qd*D@U-5vMrw}iD3YLWz;32~
zw1KwaTf^1Db9c%XqGyS{8zMgMC5T>7r6!H`kZ-=;NL~NA>A899!+6Hp!LZ73nx@;G
zbnbRu2I++eL-HV~FscX*0k$@hA2=aDgnl^wKvj6OfmH+&P%&c8C6$TS?-SXiv88TE
z4ak7RLt>R!sMBAlgVk9KWGj>Xll?!;YTl|ne`=AwxUKXhzat?e{kKM^ZkS?`o)*Vy
z7KR3)!{f48--3(i3;Bdk_9cD#o7}a}tMpur+AA*&J`}pwj2XNv%`bmZ6`}x*y%2aO
zCtCES^2H&SE9MnzbDmU{f?<OpuHmrJVui2iPU1)*m(DMxU%Kz=%nRGCt~y*936zCP
z8(gH9q?S;Zl+6M3n&M@C`!1KZxB5ZYp-S4u<NCZR9+l=XOD@d}ud><`q*P@TLmO{>
zuD%_D91q59$4SSQ1gbsf#?4Me9o+)la6}SC4n<F#L#FMWZ(TmQdH!;r4ylQm`!bnZ
z*R150Hm6*>v3R+7(iqs7<j4rRm!q9)nM|F0`T4umUHf%K>SvwsR3)eEpMf83EMHlA
zt%$4~w>$aAT{;I91hITS4syCG5T2#tQNb!n_K6TIuB&CN;GbVBUn>GQTDuZ^)Xx>J
zt~W4GrMu+Vwyo5Ud-thLaLhW#=+{o6+eHe_m^ydNw5>qCCseA}3<qVhWy%{87^b=u
zxYQmz5l;M&ZPsG;ZqdW9Msh}aC8Ra59MgTnp1G-_zRd>LLdqhM=Z(c{Gn<+hwSCWx
zpRdf>yS;z)`Bm+!x|DY9_;K?*w!Cb=<XzUWMXB=8pC%UU%lOOaEkwsg$B}>LmYNs7
zx3t#pEt)K>y)Kl1Jga%_{5oLA`GCXw_g26}!Y<ii(`x1TK~iH<<LuX;fkXX6PlwB<
z%ktEnVui(p_`lh{2z_Dlt-$wwfA`P(t=GSgiQc%~_}}!NMEPm&;q5ZyEbrN@_gpRP
zO>GUIX<fip8wWMll8%gbu4b1f^G+>~Wx9o&${JGZU*0a<s)f>otTwJJa4*(&a;%}O
zv8)jSjJuq>e7o4;Snx`CGyDmv4(cenIl5p(PlN^fH%TcvhVocp(rwZvp?w7bNeQ7g
zX^2a_a=b|CQ!+vVycLRD=Yn(T^Nvpf!~?j?6xR~JMWmm>_Mi*U4KVjEAgMmdlw^uQ
zJ?RBqpu~k`mhS9sMckC*)Wv=a)lN=dPHxUkLubR&1{oi}&F2G_N%M)6{o?HFq_(70
zk5wokybBG5fGN%ff%6lEnHWvVmu98S9ClL&{Ub?VlXO{a-r8movWM=*`c$`-4Cil;
zY?CnLwPxN#o{q2mWF!s1(ZE3GWZ-<t8CA(pxoi*@{ql#wMtwXl7v*=2M_S8y*RnD^
z_tv)oD()(wY_h_f;8IiLe7?@~vb<)IYE4^C&a6xOZw{wJ3>jFO)eh<IMKzLfsrVZ6
zJB}A#+uy$yd?o+N_`Z)vvcbrqGT`9KfnrpQhjs`&ac3hLB<U5njCW7&_Wbg*eeLg7
zJo9%QRUXY7hmpVTp{UTfIpX=!I;cbK@zUF7ulfGZZk&^xL;U-9Z0mVT3S|l|Ha9^x
zSHWG%K<?WXyQtn+OWIC~^Q6xd%M{rZz}2DUfU9TUPDeUv*RsA;+BJfAWi09~`YcX7
zua<%;l*(A^O1&)hTLzAkkCm6#PE0$tG%D>5RzLQAy!a^N!0a&oE%~*_;?>s|reWnj
z%8NS<zWFNd+^xV?#BTylE0?PqTLVtZPnFl!mMQD&8b(U1`~k0lCvYchTf!zpH>~KB
zd3Af+?Wp{DPk|yy9N%o)>@3}!Y{yrM&+q05>D8sD17~lX{XV{0=?uEM-LzZJfh~X;
zGs8N9r6B>!xVs7Mpk!c`d!Z<qs6xspjcRVRw#@kXxFvg(PD^uJs|d^;4DK<!E$7my
z{<s<v8}Mm;46@kKSW^3TZo{u~?{<lzRYsce4g5L=N-4#MWz`WfjF^VLetx$&%8;#V
z>GRF^f(z_ABf967GXL?jIBfG$Q!&m@b&DXIcKqY#kGz(C-+unSY!5tne_E^AD%o1M
z^5ISSk>}+~@Jhmp%njrQ>(uEt@QUfCXQ3CSnxm?mR+**=at2i1{({ZlGVB%1eDC}|
z4^oj0T^KwHKF|BpI&qIV!7-tMeTn6Yb&Rb`03~`QYjxIvh}rI6@ZLD(>N4pR35L!v
zt^!{$CeR)LpN5LUgSKeL#j)3<Iz4C!7(*}kz$*)P#YDM`grW9f?g+9w7i;%nr{8;D
z_;;<$JF$SFA_bDNd>a~HGfPnL^d+8RhR<VXKqVMZ%-K=;Fb%<1rE-P{TsB-7dqHjw
zdp~t}ZU{;-F@XoBb*s40G)q;ox5O8fK=g$k`66H<Pk&Ds7eys5wYJ9K;2IP7$xpg)
z{*|pQJMFD4tEvoJMwH20PuI^N;zJS?DZo;@N}RMr*e6n$;wMLV*Ck|voP!Ipe9Mm+
z$$&=`;feHUQJy=Psyk|Hqi`XgaZpg>Tu?BOPpHTb4f2D6g8nuZ1snOF6!}pqMEiFx
z?olE7zn@Vd4}$WBit6gf|AuzH4i27v&R+f!U8beTqUK$UO#Mx@wWRF4Jos$vy=)!$
z0zAAQR8XV?q>zsu4*oVw0Uqw2eo_H4EPqKzA)g<T`B|9$67hGFVKLR#V^Z|;bzl<X
z6W|kIk;P+TVv_c?ca$<vQu&uU@|z5cv%kN$6hHr)H*fgf2=jUQI`IoiN=otz2=NOE
z@ggO7{Q^DxZ31{b{hs_?$iK@`a`3bBb@BFh@$zJPDA&f;>y^I@3(JF{|M~m7o(=&n
z|FPuh_pfFl8_55V!!O7u!2dsGBUPmzQl<1<0vz1Ulw3TJ-Gj6tD=Hu&{g?dzCFegD
z|4Y;KKbk_K!jk{3`d?Z9XH{cA2VX@m52Q_h+5fzne<}ZW=D!rB`5&78UtRHcKmV1A
z>}Xj$Y5xCtX|i}VPQE!PC~_$3O7cblsDDDS3!nE-UH={}<E#*Au<=^xr?9JWc8|CH
z^YnT(*!Gl-O)UAlY6|D;l<%z^XxDs99Elv(@`pRChz}n=^6q`F<K1;b<PUvl|K<b|
ze)f&u{aU1HvsjGpx!86Phk20zeYPu3<gMe=Wb!4AS`LSuCJnzKS`H`;5l2Vp;M(TU
z*2Exa4<w!ENIhd(Q~(TxpF`(&Q$qT(xKj<jFq1XwL2i5J87Wjd;b&KIb$|=^Tn8<?
znA?ZMPI!Ib6GlNFk0~rWMULFUzXW(vL+&?@h^&Cyiz1^r19(>tS|Rr~U=>;0&81?3
zfml5e`M(5A>7aj?GSukuUND9H@Ieb{?ZJ9qvodWmL6LLhkH5@FTs)Kl2U-9{%!Rg}
zDu;=lIS=tClhSe&d#b(u<@CG}cbtuj`-hncpCJ=T@Ez*or>Ve10(lH(JN**hFV(V*
zK`=Aoh+9Zfh7I!;RCVjg=+^=uuY~)4mJmCLO7)MeWULwITeI<9FsSfxhM-y~Oug@{
zYLJf+i2G=uZyxZJp#aD;5ldnx`QA?1NO08qtRi#IN}ip?j(G=avegUr>h1vo?_h4j
zJqAvkcQ8A!7L}0Lpxh-iPB5V{d7_JgwiBM-7N23m*+0)HZS76XB#XF(<=I9&=>;O*
z2S9F1a%^VkMjL*hZh`9x3-zKG&Y>ooKlav$Y2F)z-0P$E{nZgYMMWD&X{5-GBICxl
z0xo!ke6R@|>oXIx**YTXdCFp^II?F&Nc941=q4YyEM=BfEf5Y}{~lW(BRH>Vu~<9s
zT;E8Ele1k6|Le%|8<-5-Uu1WSg*M2AXJ;hQPg%=hNno3c5hx1}fk7c#(HVO&(!ZKq
zswGU6IQjlk0;laUP5=skOJjm&q$7SR8hpb=1B99T4|)&j(ue@~hSuA?m@Kob>IP#n
za(%pn&jgB}FJN2H!3Sj>s=$|%HJK-(Es4b}8uC-kHbcgLtDVDoai2^);skS;*j00I
z6_b%#(#F2n`CDxQkS}o2QE0}#;^t1Steh2D?ADuJ{b21JS#sQCl>$nGUH#90w~zII
zsj7rcU*?s;h&t_+gp64sPMyxdPqU{l@Yo+!&5mcTN9lfPOyW{Dp($-Cy||_aCSmnO
zDyhDH)X<-6Z&)_SSc1lbrh?1(yxPFOEaDNlX%LKBjsX}Oje)zS;4YZwUUhj+iE?p1
zC})3;+5^`8!Ad}f#dZ(_zDk<_P#|A26{(O2WEZR(&0>Rmv(d3AXgmtZtRWJfMx5=_
zOaW}~_N<VjgP;INkdWj5W5HH((dgg^sDf#VkxVLE^So?d1D%qq{_@-j1qu;nWmSVv
z*d{F^YnIl9lAZ>@Vo4&xDFBkPxvUEasPpI7Awu8{DCf|@^z@=0aS)J&43`!Jd@6!L
zY)xXzy3y-XqA~Rjt4Fv}8W99<c0Pl-sr8jU9-tT<{-j}r5a#M;vCcZPX@2OBHob_l
zGywY0Ac&b+{zogZ#TZ*2S11fKJOn04Y!)I1X@FusdjsVX+fhG$E)zwc>esZ;)J>MD
z<X$;-v1p06>Bva^Q)?{fE)^)t=^7B7^Oi|7W1vN7Y4($Y?@Li%C(*&mK`Sf`+fd|C
z1D|I*ku%U109h5)G=6n(xri`7b_{Dy@M@sY)2`_S*G&Lq5spzT4G**C2>G=umxQaa
zMypP0@Hvkx0<AvQcDzWUY>Y+%l@Qr%*Fu|^2Mq{p3!KIlH^TFT)7bN^%Obn#2)NER
zvtHQW=*gQ1GNh!C9_bMn`Kn|QrmN}p5j`aK>ioW77_EUyYSsjRh89ozXF04Y0zGd6
zK+TbG1s&XD1OYE<M(ld`7>9}98i>|ie5|A61OdrtmD%=;pS=0Y{=Z9IbAtDj4>uU<
z4&)Fv4f*nzJ=gFt&ffA3QO{7&3k|Ci98^&}to9kwY#pam#w(iZ8W>A-SG0xEHQ#hm
zbV%i*%_vmx>e;<UPSg;X52;3FPF%_!XlYwt)o?rOudM68=M`(d1X;jB0K8J0;gyK8
z4rlZdn&>W0`yK)Zvv>F0gjO1vszt8g5kcdJv9iUl&{H1>`-P=TuT5eYqi0b#Kqr3#
zNzxN=X8<<$7^)if88OdNR0yh0%D`F3@bd<(JkDmP$OMgXnlW9+Nc_{f{=Zo)!fDXT
z?h)fKyL?dwbJ}Q4{O_d6=C?{1MkyaNUa&$ch%HO;R!AzOJQXb-nUff89iuCuW;WQ$
zp;tWBXDa!1PC0~}>Rl+0FByPXgmKwvfN?S8h~&b+SMCGz6KB}}_!>2ZyY-2cxgqBl
zxK55jKm&rAQ+NY&TMvLg3=OM~9wG2|HB8nVEXXlQ@<A)$#M)nBl}A0tbnNiI6rl6n
z$X#~N3Iu%Bf?VdmM1~i|Ltu}T?1eTSECe>P+Sm$KPjsP~b#rV`T1T$#S)n6K2O)Ro
zUyB2KR>OE`u`HVpRT_@oBUEAE9)BC1&|f2qz_Uj!iM9&I4FUlP=pMwcpe9Za3jj9`
zRbu=^mz)yY<AP^YAJfG(N!chGZ(-c&n8~DJsBHV8a8d6t7;JfRdU|?9^~}e3!}|kO
z{6PG8G^2dd#r0S&tzMq_&P$0;v4<6zy>Gmg11TUE*W}oPR*~|yr8rqAL~8V}d?AFN
zIVRAo7=VdUgCLBkJ~a{!REBh^!|gNr7y1R5ozieJ>@)x_Rze1g9-1`MtJ&d=XKlsO
zk3s@roP-QOQhd@U%7qvKa{pxmVn`<qXQg6QNtDAq3!l|zk2_sYyx=+8IWLz8fT;_p
zC6h&vuA^3#=n$^;knfnSk8bJuoIx_J)2TSoo_3=fsD7mDjN%???9LtpZLXiQ_b>?>
zU}%J6m!?WdhG3gyIYscN0s4EkbpL<VkTdknx~a~07G5O<>m%i-=a{yp)tlc=|J0p6
zUGAr|BFi@ESx(av;OLL>BCq}f35JnpoUcTt0Y(LoBRa{u{R)=%FhZ#CLBQ%QmKfyN
zK>8=nXII&ET?Xcmm-%&F?q4^K_^p68Ly+4UETti&w`b23a!);=5}%llOqvIg5_Q5a
zubc{~I<ZfWbn`qz?+=c2@u{qUOW`<+z4IXa=sG~}0*-#hV=Lh8t>I?RJg5^s_PF<E
zJ@npXrnU|cdY^#0b)-v6%p454&5VG^9!<oWNth8myGHY-t_)!iZ^Us^517ujnwekI
zDl%(yG=6;{x?eynjmbzl%*&De^?aKs%4|`cfkw-%ER@@8mDiwJgPFjQ9Q-8cE}0tr
z5MmL1;8P~#A|S?qbZH)(g`I@BOw_?hR%{S31pX@^y>Q*dh$T8oagWpr7+um85m(p6
z>H@hH?hcnH9ZYzr;&B%Mb`v)avMDR$M1%eSB9;@;tRLFHCKPvjN`$yCg318{_bula
z;dfDc#EAQyt}Y3}01?Qk?gtUrjZ?ThWp*z6{Y^Onez^vM-x&hm9OhHcU{E3MEBz|8
z7~pp^K;X#w*+bsrh;DU5FW;LrkhBEsMm#PC0f*lJfvs-trF@o-<tKixcOss@e0T5V
z-iL50?pG;;FJz+Tj<^Km(v`}wg`JCzyBDa-?B-_X<}Q7BTp?v@Rx(wjXRk1j>s5*O
zmNO;SuhdnbaVk+V{)4F9c&icSaF)urq=9J8qH{l8-&k(Lu0>U(y++9{T_w$!dy_4p
zt>d^UnAccds7&84)ri1R%v=y#u+gyw`o4<k!*qqDY893+ZEa3ej+yXWh^BG6mdkAZ
z6XU24DbL5`$7-nEI?K4!K8d*g%&6)aQ{moaa-2&RT{9qOHKY;UQ~PD@SVHbcEbR7A
z_5SI-f5zTFQ{$h7<^TO<dG@z-5?crq^Of_V+)6<2%M`oHACBM8QjGmXXxu(K%$B_y
z2oWmSJ^humBq~aw(`;-cs-BuJsFFmZDQ|iBY|gwYmsRyARf$7pOex<Ly&JEw_S+{;
z$y3Gs271}Ism<@J*oHHN2b>q}nJYCz2hBB&Gq;DR?V6k$$Y#qr?P|-a)P1*;1<l3G
z)D8{S8s-dsu}b<5Q1P1cV7{t6HFc|WeM={4m;7Fv;%)ovo0{f-o2U54{6C%l&(Qm4
z;{9)1b^;y!9)$|Qh0VQJSA*gmgvdR<OfF1M7i&Dz*X=^bq0im~ghV*jw2KY>>~7NM
zmozmte}Af8@-jVUssy8d;zgL;-CS{tox$^R8YGeqP>CF5RNUB_022+$zvq@g2r-4s
z)fnKWCr_BhBm%nLTCq9gs5C~n%~YfT7=d(jW;Leq0k9bT-Yw3Q%KWSILE=Do!~SHr
zASbP%D{)P-G5<tY0Z@|Vi|IM6TCr~rl+Gn#SepN~Q5GSfghZ?Sox5|gcF06=o)1)I
zKj2s1O7;z#;50%K5Ky6NT`R*^<L51`mlz7On<_%JGk9+}%VbJj{qg}6>m|wPPn-Zq
zDTTmsD<g%KM>r*qz(k7M;56kptYmdF9sMY4hngTL5<MeQRifaQMeGxwL)lC5ev)yP
zZ`Vu!@H3F$COwS+n}eh>LFBuJ!z+Lj+$AmQ#POV=<1_<7<5R>qr+;F=V|-ToHFw4P
zgT`o{J=v1CGvjhCW`n}yEmJ~IO<?UGmsiXJk4JTU%e;3knh94sHx41Rq@+)YrQrcM
zs0643lekiBLIu+~7w7DSr6Nyos6DkFKku0VgZ2=_cm+U@(g3)!8Vd3Z8{qr^_3;lz
zIK&Y@)(W{N5zylax$l=)|Kjkzo<dw}+?q^(=ZHuJKf4aVW56oK1c8nEpo(BnDYEb9
z1i%TXI4BB$)YvaLzehH=*|=hrJTM{Z=QjCD*ccOCHUhW;u{yHdRGhS$@S8Q{YZ3D{
zQ^Rrd>7B(_kwGG<+W)KMq+rImz1=XlZqEugG0X9(0*`0TCsW)4_ze;KhM$=Xc53Bb
z3V}tXqfp5rE+*wf)T~YYG3XzIfaq9>F%w<M=zMvOF@IMCrxx)Pta}^W)DiWY=qTwk
zVCSy6|E1Cq5SAqInTgy`{q*^}cjE5JVj>tsO1V%CbsT*xyPf`P^rcqwnvQ0-*<~V*
zXK>C{i6Ln?DZ|4lxYQXZiJgH}kfbp^IKD=FoWB5wPKYXm95((CSe+aMX0b~I0zPK=
zi=ZfG&U+mSAE%&^RQRwo&xjve*A;UA)Mx!jcbK3PPC+$<fNO%$5Tk1AXab9;W>h>t
z*Ru*uF_NTW4lll<=iFXCPP6B4V4|O-;fd$y%p=zBFplS9Z6Wt=Y62+%I~o&!$k_h0
z9ZO_~E6ze-CaH|wq=S#Cl0d{-Hqn9bVMFacZj&H5E_2Dg>8ju%lwAo4fM$6~*rI6C
z=~_!8ltjLOEDL~OqdexUN@KTkyTHMUJy3Y=gOD@=mNweO8(5VTVsGE!$2#ixU7CdH
zvrmKFv}=Rjf)MIAOiFMQFi(7h&%nexoyPl-XeIR<ZvIu4de!MFAji8_Mppq{xA}@(
zeLe{_g0`4kg#%{_DE1XHRse$zNPv;_tfcA+iCt4Zk$;P%Hu`%{-UCdpVcZ<+@Aakv
zaP_yqjOa!$VzZFVJKToOE2y*Jv=Xb6DE6k2%fc}*f0J@0n#he0{w<X9tmF{mcVrY(
zyoH?5oXw8e#yR^#LHZqNt_(nYJs)ZViZ?31aN7c5xMZaAZ82(zR5W2VXaA9sg;N!7
z3YEJ5rZ#3@-`&zJOvm}bt7OnOd1e=r29QT>jZWMo*8`sqqL61ZJ8b=|kU|w_1fs<#
z5qmPfWr>Yt<PL%1;<Y_BBC89}MRE%jZTOtDf0=|r9&@lpdOyk_6BL1&Zfxo5b@LV#
z2Vl-3xd6F-2erjE;VPZ(@j;LrGfA{Xd}(~q#vmReFcQrZm%N|5aCa*Wm5WbtWZ<Lz
zD>P4J)A16Rek-sl;}Za$Lm-dIyfrI0UZRRJ{@qHkljN$$-r#d~JvEFC3KmXVXGp`3
zK~Q11g@W=qUIi3l7oIqp{>8`1=wtY@t_a+|@ulnH^?va+)zk;V)Y`?&rlx(vc(+U4
zX3jxbS2C~PO-8@cc4}%(tv=bM)r2O|dRZ0Pp)9x20UuUkX#r^j2a-ZrR?93N*`)yi
z(bTBfCLypqm9#p5h!S!UL4SguO|yB#{{X>aV9Tjdm(uW<eNH*gI#@q}iWlu6`M*Ih
zKT-0bsnCZl<rGrMwlW+c#*#(Tq$>xh&%+3KPxlWewk&ee^Tge52{;3ghE5hP!1@43
z)qWb{aPre0EB`<kCW|OtT;5}RK;;6h`{a#mkfiB41eP>;hJ=dOG-B0k#pVY>-X5&)
zKhPf({GD(;){y(2gr4GJjnD_tTl9v%cvT}qB_&o1x4w|K{wW9FI$tPWU%kM1cRNa)
z^ot$$9R}mnQ^iZ|<X^NPxg#B0Z&5&ek*AG;a)SlTf3>so$)MHN(?^+jZa(kOblO<4
zfZ&<i*%w%^-%9^Y2?}mP2jy^FN@Go5s^hA*vBr|_mS0s$I?%n=c>6aq7?2zQ7bKQY
zY<gw(FA;@ZY?8vN|3{fABt2-AkSMZMpTqh9&mmc?2eKvfUSA7e$Sq6U!lV=v$pVM#
zMLy|vkdVK8z$#g}rW2F;S)sS1^H!bki-)9;d*lC>@A|)&KSKPx9VP8)O+%>MeSYPe
zjWhhCR1}{E9IkFkNQ<H6JJB{K?)*!4v|fXOo7?@Vka5NGvWYuBb2xjA?T0P$La{j3
zNJ9W`FV-L<ljAyd`-hP&T^1x)HV~_fBS-Rl(13v-&7_;>e54Ze-X<jt5S|m^wC{+d
zR!OB~;UZ!@3Mh&7QtvMUNZQaG6HIjOoABL2V5oig(u(4SP)O$F`FVMR4GEfF^sk1j
z!K7|-0nHBI!*U1Htu3N|*&75!r=|f?2$G1yS!z<tq+eou4maC;_fRPsMj(nH`o!e8
zku03mKLqCDZW@h3X7h??=bXhGbBweu|JH?i4gx`srw)kq{Dj<Hi?+6O?Rr@-3UR9K
zIMXO2xUJs@?93vYKQPEBH`XoeFZ>RP+tV`wX=o{!QIt*TH3K_vUZ6JiahHdg$BN3r
zQEagait;K$VCwr2$jm}L4l2iwL(`Eh<#oKAr!OV1W`t_a&#{Sx&+u2YcD8gC2LJbU
z6|{~DNSZRe)Vh(Dd1bD_9_%K?!dlZDS(DqXGGA=S(_JK>fa6;oMrIzW@KsNN6`X{r
zXL5ht=%mmyTiObWKz%_E?Csr}7)aKq7iFW?k%jZ*1;D2k;z>x^p}y5EdsazQAOtZt
zF4E5kfv23WgX?zmOOU(cEkLKzC!cj-o>9ucy@Sad?dT{C|M8fh%SenY?!)d$yVbL2
zMJufGz{7~^a6ZWHS<!Qfy$pe0U12-nGccQJ$!Ta3?q@O;upxs6a;UGMadyL#^%Cl+
z+fb8+1RUl15ST*_lefW0ge-0WkSaMm4p|-Q61-&fSVIi_59%IMy@OWaKft;ak8$#|
zd<%6W_ZYFBtZzUEZ3imQ?A~sWp@NYVVK(IuYE1qWj8>Jv8oHJbY!s*7Be0vkMQ1+}
z9l1*zX1-i|p-CL+#*{LQOH(Z}o3+7_hW25FmZnLM%QaOVjJ`x<98-RN{fJc?MJg50
z-3|O7L>;$x4<z6*pj<f76{(gZZWywiB-g7|SqJcy4!L*G<V&D`jFM5;g@OgQdx6B<
z$KGBfVQNfb2rkMXSa~i&qD;B)3xJ7gLOl=DU#An27MHYVrA@>6YC#S+mx=A$-dc3b
z-WnY$2#6;#V)a(6W_|O>Dm(%aKo<!A<^I+;@!zGf@m!q8B1`Lp^Rf(MJOm?z-Xq=G
z3)FH=B+)jlW*GN$q!8Ek%N;DQ{tPOv+C9&RNdv!Q?`GcWpT_ft-w|1_0|xr{7{@<x
zmYWx1XcK4NBjTWO&+b?5y`0}AMa8cKnmRa>^O$@Zyi$J~>oFS#nq&#xZQ#Hs^E_9e
zmR0AUwL6Ss3{7r-eV_oauzRK7{Ns4AsqV^$c0G}Z%0jdD@_fPP^7o^O8GiBK>AN{4
z)zo;mAos3XIAw|=q~REFKh}r@Xfo%l-mJ9WBXnEp?m5nZ&|fA8y=eo}6nS1FGH&2|
zpb26v@P<C<xLMr!sJ5ka;Pvt4)$W_Xwdb0PVbpGb&!Lr)Zi<V43KpBvIP}@!zOc1G
z?E9cCZJMSXIoG(b#VfnDuJ?nzLtyLln7!NEqv6ZNJ<ycGqwAvADcS*IZj~OlhOHp;
z4X0{)#PH|et<7ndN{q=2iYwp7)%|`-X1^A^%+y>9x;t*Ve5*O-JIYIY2RcODEbq0q
zeN}%fTRvD2k{foO)a+dF($6W!m)0A?a0)tdJ-TgyH+C6;){IH29wIHGBL_hQSps}H
zXA6*<3*CzT=dv`e4-RU-B$8d-v$Ds1H~}RE_WZpI{KZDWz2JA)R*2=M&zX6@lLAxy
z^6P*h_i@rDeK8LYy<dCw03d_}<!l%1wClKzC~Tpti>vryuA*nG0}<N~Aw~`ezMjRY
zc}9T!{nbF<&Hk5pgu+BxaKb0CiS(==REITvJ-;eQ=lp9WDwA$d6O66ruDU)kuPXOZ
zT%!(Z>|Uj;f2JG_IfvDyG<T~ux3EFpES)ZVMz38Ac961;`RKCfnWSmqv0~2Nr6974
z=KArHOSEa7`V6PzR4yn&M`%z+wY(Bj=tf;?;@xnsaBobOsg-FGTDUe>RzZWNZPt7z
z8hgl2)-sH7QI_#=&I8lcav#Sv$3yuT{YKe)Bg`35-UXJ`?l|EWaoE?Km9mo>o7@5n
zsH??ePWkx^P|5~^0u@WFBS~v9;RI;xMwR#RT}A_~){jdOcE{rWf8-i#+eu$7+p!-u
zk=b%zT1i#vMm#I%xn+FSJT@c<nk;_w^O0AI<oVETg*&$`arXLPle_vzyo@g@HY#z)
zdJlh;6*?dDZ~L~*C>4V7e8J3Xz&aDn#iky3Brz_iIL3Ldh9YP)f!$@hLcf?iZL(7g
zW4yHqI1zd?)zBqbu=HlXuz94UbkD|t>*aFiLUZYFpz~d<dd;S43&0(sDMALkxUTzt
zjn#gcSPdpD{NOccC3rV+g(&W!oJkQ!D1TcXxI@Su1J1V_1Dx0=FF%aqf>Eqj5vO1{
zkPD^=#)Jc!?%4~%VpC;KFmfgRVvWo1AKBa}4qC0sc3ru7L4*lzf4y${!Bst@LhGfY
z$@3kJ-utXb#AUj4b~P;-P`%!ThtQ`wjbnU8S3BwTYH2+?Z+fJ<R^9D$qwLDv#2xV|
z^T1TL9Wa<h<^r;H8*t%`_yA$N-%$0(xApD2dy;s~3`?T{B38E6mJt(uYrrc=<8@B#
zC2JL;>iqPW9fJ;mM_~rPLB_G@wuGw|2EbFQ?-;+rbxO1)Cjhu4AVhe~p4I)qQ}l7<
zG+0Y#j(IrS>gMo=zzF~hc1mX#_$F*%f6_QzYqSs*-`X=-guMV-21cPZ?G*Af0?9;u
z`~>MQBjZy@-dlY5beZ9_w4LD=gR}?D?o}KhWnsZg=deQt9w6N-bt*xYzdS8cY$xKc
z2Dd{_G>x&$_MKXxaOm(JNSyt<>Ngo*d>Pqm%v>oqHu!iNf+6bkR!73!7=3B7cq`{!
zKw#}c^1!LyT1n7_+h&S}G^XA{G}}pAnRzpfr^2fcC;HQ9$jve+mLM(-2t&KSEh;$}
zPdEiXj=}o+&N~z=G{qfEtR3=!ra?cAe_7~h9{v<+v_$})Vu`YNrjO{H&k6f$!(qSC
z0TGTia7QoRJ>{c20VmoqEec+*0fT<T(6xn={t<@t)kT3)w-#|0ZGoAUv^MZ2lqPt6
zN(8z{8SiMF_UH!mjrAT==uezbveN*LBhRR#$mA?y{Zn+3N_3k>CHrQb2Pgc`phx8i
zU@C0%l3HYEky+%r&~D1>5AMdJaUVcw@Q>K*OqF(e&p*uBA6qyk+((i%n$yV{1)U!^
zFb62Tq~b1aj<?sRlU^JTr{E9ewx(A2z8bRUac)*-)m121%&^OD+AHF>tF`0?x<5Dx
zu2*OO))dN7D#vBv0TRdjyyQiGI9pkgwR=OUM=rTyKwlhX6+&TCYVDu)E1vgVZA%@d
z0RrfL*Y)fs<o2HNXSIjb#VD}zp3BkWsw;4gCusA)>0l3F@x<Q(#0^BOl_Mf4*icrD
zxwF#|FJWD}2&iD!)qQWo-Gpp&_O<b8eWKMFse_pcYiC03JHECvTdA!-Yf~cbu`&m(
zgVW6>R_fS)S}A29XHP_|M{8X+DXr8T*06y-u!v(n>aZ-YW5DuOlwSgDx&RysE8lWi
z7h9gPyjfL57hlW&+<8eVg&^9SrnCGuxuHs@J^vEnq?~@V2_ec{)BV*cZA^Qg9Vnm7
zOw$$`_~-HuKpAn=%$O_IC>!1C#lOLx1VA@kt1{+~;AZPg*gjp`T0`y>#K`lcQp<MB
z)uS&lJ8w^g5k6tiA~1k*Lo5XD1KZNtIUnprL&oeNqqdNq(kp2W8mQ%yzD*=@R^Q|h
zkCByQj45J;K*vJdKem06LT?3x-f}zQSpn5QKb#~09+t=rhJjR2G5WlRb)304I>}}i
z2^f|3X|Z<Vs^LC+h^9%&*aX*=l0G~(f9=~_Tl%Vmt)8o>q(Uk<1_$N<`Gb!gbC-k+
zzoi0ovr~+RkYTlFyFwp~6>P_+U2kvRg!cz5!bU@WM@IuC=6Ox)HR*Y_bl01gCfTy@
z5|%-$LQ#ByTaE{L&75d!DpnQc2Qgxcp2wrYTZ>mNi%bZ0{nba^UtZ@1qf>nJv;pFX
z-aAcR0uF*}a0xVw5f)2>pJZfX(m|5fRzaE~8@YKd6xVLU!vXGu5i9{11wK=m6lL=~
z(eP^74Sw$;!i9*GfTH*&?pIF7N%UTi-f_cWyKuK9ul`Tp6Xt(M&s_%c!j&@!$if&p
z+klmnV|k?vyMy#89Rd<78EL^rW#$C<mC?ccS|0Mx<D|OFzBGggec?vg3+5(ZOkMd<
z$o;wgMU9a~PrCC|p_6W>{iHW{fXyL#nLq=%NA9aX0}f}Zd_#?n&C^>F@4T*lnWP+7
zTXJPwFPJ<vRiHOVJybwg1hm%X8WAu?DU%u4aB;KH_VH^pg!0z##>OUHgGauGx+zL@
z;+9;oi8T=^y9-h`;|&Fku_f8or0c~69Mygb<x6;z)l6#2d-rqsRO7Dt(n4~U9u#YS
z&SzSg>*Zxt(<Z8BvGjuDy!KdgCH4cE+OY*J6m&gR{DKsDbpg-pP7;2IK}-9Kchjo>
z;I0Yaad>H3aOC+2(XzxSeqwk#^VCGIjzQ+2PJB%+_@v=k?YC?G{hX4t;u&4Z1lfrD
zh&#sjabtIN6V9PCI#nMnbdUXFAw~CfvU@~<h-}M1@=#$Y?JaKsqDEM^3{Lx5*TVBF
z=KcNqyvhl*(0!qNHpxe{iaT$ye-_+7TLp%gy^!$NP_K&eW3dv2DAuyM7=>KMlznk;
z2uSbNuakf`+fR81Bpa!67%a=umR8KMg#GyRWy;|EPWF88)!;=%$0x*U=ayAMb<3vJ
z=9kUA^YSRw!R+wIw!>;Py^)MaSO!f8FXe|p0(Tl9_Gy3W0HqOmJ`&&2S@XIdE(m#u
z(JYU!mZULoco7KC$Y5#nJ~@XyAu)W+jzmr=C%U9$6<+e<@T6}+HX7`^9DbEX>_Fo(
z^m!nBHE4bAO-A0xAX#fDWCp^4RiJY~Cn*b`MoMl&<FHd$-w_LvJ~4Zb>z+tI0l@n}
zSQU?Dn{ZVCBqNyskUqu4cfpUrd59o3QIuCy3{3ctWfF2fSYO)kIHPiX8=CENfeh&`
zQR|R0b`tDUJKs6#3eP0u$1D^246oY;?G0=g*0&(oSTi2q(aRCxcf_{8$~Cl$zDotP
zFKU>s=Az@&160K<4+glY9sW>GByO2*YJktNu~*Hb`bvLo{;r>de|l7>ndTXY?jgX)
zc#BbejL;us`~?Ry9(6uBrZFiso}sKe3<SVFn2fdFX1Q)bvhVes*IJ5)vc^6-Qhru3
zJqA9x%ylY?t|bSJ8`Inpm5`CMzh(+@nKf$Pf^v$uXmE!@$9beKMusof&nj*2Dwi2$
z!mw6ST4ZnY#T{JllDqQXklg}&|7f*8mIdj!zCT}kj<8_=KCm*+eF>`06Z`WnUAP9J
zLA#d|6?F2I`$~30?XYbqa<&Yy)O6-CKl2A*rML<J!o&;O2c_X-z(uGCBF5>_0G$*s
znpi<@WmDy;3aU7a+G$}i;@co*3>NI`u3pPv*f;%~@2@$RybgaQN%3~(G)?TZeg3)d
zZ0=|Xz0zeWrmV}O8Q{P%KzQdix;gm8)o8YD5<=?qJc)=XN>6CE=xI~vMl&rWR|q?Y
ztR~<KVT&FpD<e;$no7fQ;$5Iq*q>Uv=7?DQz>N1+ugwmp%N_v;v<E)r17PPNhh0;j
zE}%cx=zuIKbfOwG>l3k_vfge7U{T2S(LkP;ysk8~bfFW<mUXw|*tBmjI$3w~JMSfx
zkdnKv;@xTIO+kHi%@-l<f(rtVjsv;d!Q(fRP>C4#X3=?-;OZ&$@&cW$!L&hiS47>{
zYbhEDXWF1Y=j@ZKa^~&_JI>D^rG`h}$I^Ng)4yJQM`7VAx#Tjxa=_mT(>~08S@J!K
z=vltbvn{Rm>vme_+E?>~?9wKR7Evxsmk0iHrwF;xx~BG!IdEU5PUd5D(Mj*B?d@TI
zKArKSu5-sG7TLSNeCxA_bp$jTcly+(H+H5zJ9dVxd%ZY`pTN>6{j}|f;oQu>va@M$
z^==xQF_~hl54V*)VyhFIK`V*(E1gGUFQ5OGc54MLB#l-)Rcz7yQ4rnzFFC!Lb%3SH
zv-_Yl2pj+npra3gkRZ)9w8KWKOX^f7+jIvK8n1v71!+&bW5}O(JEdBcrs$t4rb#CT
zy)N&+<<sQvl*s>y&Jg^k86;Lrq6Gq8ORkQi1np0$8uK@=zwckm)Rk4dD<Vqb|ITw;
z&wWcQ+e{k*kOxo!2l7Fu#L`FX8_+g`q%M*tsvBRirayL%ojH-M1#D^eoK2}RI=yM%
z`W)=CKDW%$^8Ve8?+GJ+x`cIdC)6?V@|Y3PmJ;UoL%m6Q2`0IEb5A6#wk1oiicROA
zBfS@NFaADf<F+PrU}QjhRd#TVS(Q$GkRe$5`~A;nFG}~jxJ)U(4&lqYds~(lgh-Dk
z^l_M+E!*6AxEz#a7nc_VN=ai(xz&Bw=~}h(>bn*aB7`)xC&UX^=dB&PIOQvgGk1!2
zL(K7WPCJemM1n4J_Jz?0^Irx`f#UCmw!Er6TFRfDba2ZU(w-u8tZy~@FbqRg66k`!
z<E`8GfQuYk1mv;q)TUZ)@bTB+WWe=aC;jXFh;^F%9g~;uxFBMUfovaxSE2i({M+}8
zZ(!<Felx`%seeAbI|jygOnC5yDZp@zx<P=oj$R$<&g`<<ux6PR*nC&{^;Lh2eVy@I
z2$+`?`^{*1V8Tl}sjQZ@K*}sDl>x+J*B!d{$4?VBr&gM=*@iA_XC{ol8zH*wL&_?8
zvpPza&3s;rlQ=l|8C(1jo9E>MXY^ZZKNPY;kRkUMpa{~~)C4UV1PYSnqQIpi6}21Q
zW3)!nh|wzegdiXWkv9DUVMrSrNAlO*9NV6Xx-R?#wa|N9j*xp?VpdWSKCZ1kWUyyi
z1Sv9$^|}8(<N=J$mD*gHw+d7-Hsy&?N{5{y59blqldQSL#iZ=W*k~lqt{4)%j=V9n
zUZgnqaJ5D4zz}_F`DQKWMpqD_<u%Y{=*OhtU=B71*D8P~WQoStUNKB*=6|C7tt>~9
zYS}s3!XNB!+Rt(|VnUjMXbR$Gr@bm{YeAgu|7Z?-yo^|s=AM>ryeba+{@xh)dXKGb
z*B`z5Dg<<0-mK*%jA;4!<2h#~=ndf}AhdfyM{9Aqy3kQIjDZh_D|8DE-t+v5*5HFG
z5R#B5fklGXxgLBcJnlbhtS#~yrj>hUEW82^!486dbmZ)91y$XD*x!o)x_)YeFR97w
zI<t@K=Kt0Twz?$X?VQJ7I!?3F%(HazDtvM--SyS89hT{wcMR@&=a{XAT(y$P6n(1-
z!WT6jtp;$8HxH&Rl(zCUTU8K^&v`v{JzPnWs+*+rSmza@yEv^|7{gkcEJ~2Nu_S%n
zfk1gDTF!D}kjmNEwvje~I*%#1A6eL<XEt$vQ|kH6Q<a|5TyE*K<As&^pQ2^wjpe#>
z*?CK?B)}{F@rLpD)7x5qv~%r_P(={yerNRNNo`;5-+zeb4HS@9U^KQ5b`4Vr<1@tK
zf|%-u?QiqH*tx-$of$*N&u03>^Jb2Zb4^9YJ=-$2u#$i_`MH$-wTrv}0Q|elIpx<p
z@mW1~YO2Jo>BF+)k^-vLd3M?+BXbKeY}$KyH&e>rRfxHp2Wp{_2ybPW_8sNXj%uM(
z1CNV?@~d9$lME7rx|=sOMrTm(P8971Le!oef59f8mf{hUf;p^eYc@?Ma*wD~->4)P
z&P+(;d44}8T-r6Um>Qt<P!dP%)cKzksZNiXQ8Bg2f&>y?0`Ik@{#4jG4?oTBE?2sd
zza#L6?wCxwI2CBqOT8}bC6d7@An@PhET4V_>=e94^a|QFP@nO&Q|INkta)0Phd~_<
zbhBUTSa>y}%fzOr-JLYD*LE&dT~fNEwg0KAE=@I~Qc|T0rLzpX676;nU2;*q4t;z5
z+X;{xt(*OG?yE4tk}cEK;bK(K<-WWHY81IiUuATggk<Oa$uoaKG0dyeE>w@sgHM-z
zh7&`(63+tN7tXTlB|WWf_e&ZU_Wg-p9Sc4C=u0C;wtD8|0+f=?yIs9|vd`^Kl}x#M
z;{-~hl<8_U8|Pi<XyO%9BrJPE_$=#sC73AaqSDDF&N7VmbaoYyq!>42pvjw}ZESgv
z$7vXUzKZBpgvg(#UVr+!ccKj1%xZnJ8mhb6rL5!UC;VO9mo*gWmEYpfc^Om^rrPwr
z{865MQ${our%1FR>;K762axo+cTW$xX}BC<x024>dl27Cl(}a|_xkrMaT#h7*&-=(
z`;3_VqdNAPHLtGmrWcqpkfA5jYwt{6CY*dbm6tkPu&WfV2OOR$x@=%l7ITxh?OA$f
zK*XLrUkwJbehj;oygX+IO~Qjuwdt4Mq)Q+-V3`JaH!k|XKAYJFLu~h;XS8kKsh0Ql
z);m}eo~jUL?Vs__nP;91I=P9{3dCP`-vQw<%!fSzYNNks@!M9zEW~f_ZEKsU4mVw0
zU5oEdI-~fy?CXt?jwxvJy@i)<34l&9j?ov#qaNPwPb8LioO=C-M)+2-{VMg@!SrZd
zA!?q7!u`Aj=w-kL=IvGtW$q){uXn*TA;V9bMyj}HNGi%PqoB_2A|WtNcf7t|b9YuQ
z{W}ekZ-nl*=9ZJ-0LWzT1^lkIqqu{XVHEb_c&WMi08xm<a48X2WWxt3zb#Pwwo;H-
z-RVrzk<K%9*n{5ww&6tl#E6}>uDk8M_a9U0Z<dark2<nj`0a2k8JcW*{;osUzS$46
zpDShPU!Td(b}9x-9c0by<88BfVg;J><(0#Ij_CcTUCL+J@?fN(!<A%}RJxdyux~bx
zPk5xjmxeA|R-Q^GR&VG(2F{(9=99H%$KNgmA(qfi7B#b2md2fRlBLX>@l~FSe2oBK
z6JY3tZ$tb_ONXF>;4Vzps($1pQpO)uDWhN_xrPWNLkO-Lo24M8qooEtC7DwAS+lrr
zFlY~k<;iDnkevw^u5W_@PaMJnkQcv3ZJBA6ievK48hy%Ahj*duQGC6_;IzJYOgy;@
z*l31rIPz)@EU#bTy^_)+$wtROW%|r<uosqPEb{(k0?8w?aHRkLq#xxRiEfD}#qcD=
zQ}{ZLUnEMg<?XHEx8t)<bdf%x;6ND$^Q$JJZbIk5UKEeaNJ)6N$8vYbUulU=bW!_L
z>#ThQS{yUBK~IamlBV;XtYnL|xtRnV3x^11{DP^jVuFaVY8pUsuOM>l-yRWARI;3C
zzZEhsxbNc-=WQMM%{_S=I%ofg%can;fKiKf<=eB5Hy6#tZ)LoHiy@%mOWASTH2SI;
zK;~sgqak{kO_S3^lJLd0tw|*c#Y%qMcT@>^-RoFXY{~Hyw`{3?v)@Twt9#e_az2kl
zizAfxj^+3*BSW#DtuqOChW)r^3=QP^F4L0GVj0Z#>SR*w$-sD_wyyi9!Iv)l+QV`D
zJ>xPa!Aq{=)R(ig#|LE@!kuM^7g``ofylmcc8dG#X@c3$7UGN1;>C#Pmjr|>G{BR7
z5!bvG=N~)sZuBJFS=f5D3z;Im-Pa<nN%Z>YQJBePd|__Cb6dFYCYZ#EEm!j9U*Exm
z?CqXv_%2GeuHfA~zlFU$QYtw8ZCF|4$DVt8Yaw#gpFNp@m3vnony@4~twl#SFa4TM
zbX*d9yaB4h@$2=SL9=Y_mv`T+S;bupma-{%!uEAZm@4bZY=n)pQ&K2mi%6aAB&n%u
z)MAc&@EOsom#ZVQxyUUFB`>1%MX1>~Yuhyd=fRNS!TqU0h7$14dl`Zy*Fp#ZT^l9=
zl>`p0H(Vi(!5`(g@#dxf#yVhXBCG}LI88e+<b1b)y&xb`M+zRWWOrk!+&W+IZ7ZwJ
zYFb--MXS25J#qgfolx@oK3vO{-Tb6Z*sZ2?A>ot-;+8Vk3m$mh#0uKl(Uu~Th2V&>
zc~mhKcR7K4Xgp9q^g!^xaU<eW%=7HFrq>@$WI6%1yD64}yQ21!g(r$UT32%&2iYW6
zrNznbzwK<?xttWp9E4NfO>()xUWgeI&|cubQbhg)lHaP-k%y9^&j?*Bg6g)1Dj#_A
zbs@erhP9NpLEgvD+8c?3&oD3Kw;<qmlO>RReyh9Fa;o@nrk#nH)u2%;=i##V-G0pm
zAlXMl10_V>cuTfPJPPdj0YbbD3%348Yo5i6j(OUtVCg?+B@U0LQlGh}xk5P4R#_iM
zDz5F^E7q!N*a}mLVO-z>yPkpZmps2&sn598UHJv=E&`{rt-_R7c5^jTD?{kY89cj=
z#cZ=_#mr8=%v}55R+i&j*KEx(4Iy$={o1}<o7tB&)zPY_0S@dXU5@9vR(V3#<%1ST
zRHvvHaQZ{nXD%+GI)iNL9zb5{H9uI$0?N>-m5Q)Q%9d>F+G~sUeO+KNZYG;Sn&-+_
z<@UXky9&hZkzwn}N=1VuI(?jO{Ymrk=h@k!s0C<~a%zTMnv{Y4K+tf1cHz<Ib_KC_
z=jG<&Yqs2nQ{SIi`u*CW+DmD|6!WR=+8DSbmA&u4N}XwfY!O}{3=m}+OCH&l`z97d
z#m`PV@;-N72Q39=uQ)@=pZCR1eRo!LAJ`su>wn6h<Sn$aJWEe2xtH^VHPG)1R`dly
zo<6%y;gg0UpCfs6msRL4c|~yHgvpCQ-cT{P-=X9i-7x8dYV7)9FE}Pex^GD2`WnKA
z_T!yG^zhBUe+%GSW2N7qP80E_mhJ0m-oDP!&(Ef+s_WEsWuRoWT|bwKx3pV+-E`4!
z+MTUyx=i<}cej6Q0^Z2nOvfI1$*r98#dbwLQJ#Wt#+!XOm!OhlSZY@odwsAJ1Ajf5
z@`dDTQjxH4VBBLLj?Gx?HzBDx!T>}Y=-y14t_61C(h4|bk9Wl}1hRg7eZAPnPNY)+
z6V<utNEci6R&3vXn*?dom)c%OcQ(oA2^@AXnU)PcW<DKxN#*4U8$V}f0?<c~1F=Ul
zW$u6b3A9cIb^-Dz%<M^~YCEPiBt$QS34#i=z0G3XkM8~MeP9W~WNW_=;RN$PN&2q_
zG~cauu6K(MuCerO)rlc)ArFMLNjaVN`=JlAh_k+>Yw|fO_u0z1FK*r@Wk{A8eJupu
zjPutGN=+hW3$=o?2P&h$cjxwV7Z40(|2Z!8p644)SYdM61fUy9!KdOS5&wM~Qv8!H
z15GDfP7ZSWNDz6GUVwp^7=FX}j<slVXk{KmLi<tE{S}G87hDyNHDvq^&R>BgV$wgH
z&#$mipr_`*eK^sdw4PI?4;N=Vz%>Yqx&P-Fmp#?g!V~(v;-q=m5B~>w=NZ*h)b)9l
zF4CLQJ19~Vq(hKi1O!B+gCM>49+lpkh}2L8q<4^Bq>7>U-mCN^gd}(3^S-lYKF^m~
zvu52dEVA$B<g9zo+3fw_zq5Mt9{2iiIW%AkT3S6YNde7OI@P3C2;TjcE?^E9F)AHJ
zrBH!#BtQ9px5bfm7d-QJGpYuzZnTxs@aNN2`O(~3If}O+|N9-`Kg|~Z3izWn$Gh5B
zR=mcAOC|y?tCW`nIv<%{?ylKY`WqA%xA80Qk#@zn_`{j$8xRp*7e68=jZ;?(bC{)L
zNDVCw7C#KX6fxH0$rN&C&ylnilEFOdtQqbJM-wd5VH~N^=<=)%KYyzm6{dx_cpnt#
z3i!L%l^=WRl6Nxak{@YipEt3!IKf>mG8HZLCqW^jMZRDZbMs;a_KG9;MPst)yJ+Wn
zo%93}uL1tlgR;4$iN6d@<1ffWDE~MX;1F1BZPDkn>d?z{X8gH1@(TES!oBGBA;{q?
z3qH+rOrdP<%RqDKSp16FS1Jz<)k}aKzUi4<*nDYtRY=Vz$tKt0&}O^5yXDXbkIJhn
z$0@tB4*sjVxvtRotb>fXXl`xiJSpuSW`e)Mn0ElgkA$c2MMGg@`qr2~iHHsA>2bJS
zajZ|SQl#lB=Se*X4o1_^AN&DR9A>>l)1GqDxO?mJfT{^!u?=08$DD6<P&wEb<M3nV
zbKI;u(`W;aNs)+eQ)Q!><x`BIqQz=rKn}NAFcm*+=tOZoPmC!t$J@k5jUGI}V*l65
zZHUf`1OHgglf|3Wo2llRrhf?USkt1qxPLW=X7G(Z5)qYJN)xH*-MjIjLt82#GvK#U
z{Xnp?u=_&;6~>Y4;b$e2Zy2w*7zlSxC!-_<njgGqa4nz>V)7g)f#`COesJj4$h=;_
zrEddt_9=58l^mb%b|erBs7`?%YOYC(;WD7`b>}cg69#bUD2&_OxbZ<LEZuNdylS&}
z<YQLBduCd2Ml&LK2{D%wV3hct-iVT>%f9vZUHO4sXmRc?OH2lD!`-Z}W@)6A4Hx$}
z&yajk0(P{9eiQ*)mCf7Qj^YQWN;eHWbkldK9lpTK1JNYWsZ74}0zdpyrycvui(&=D
z1rKx4bC(Uf&=6W=_)j6$8|tU4rGs>5+^f?4NU=5lwtYaE0T%g`Ov|-{n4v1icR)*9
znaTi1)as<}lC-z$Qox6~o)p;93~$HQ0%dc`UDt~3X`Hl<xwCrdONkh&zM3`(21n~%
zwgh81A2)ZM6%eZdH>r6+i)?);b}if~jhE@))AV1^o7QNvWOENNTq7Lhz~?!xh#<s-
ziU=NLJ&3Mkm%sf?9wGAgVZhdy?|x<T>i1u?#)>GF_S?=c8!-Q*I^Cn>C!B7rv;KQW
zV_^cV7wS%&ZIJ_3IFsspm8t|R4P8#tR!amdL2`ORcitY%B`Q@CAV?n8v=SAhAzS&s
zRtT<5V!o8=9js8CPW2M=D;6pz4(vIs6^KnlD$yCgISdBSaQjaGK#jn3bN95M)vu6h
zb4<{pofEkGqvkKbJ=<bvPRg}Qr4U5V!Jxe0of;30)+2|@Z)T~VcEDvxe(eQ=dZIsa
zsDSgjyCc_r;WJdwiH)BRsD=PRlFY8tTaG<=w?l!b&7*48{5#0U3T@wkO#y+R!zF>J
zdKKoMkgE1gUF@VP-m-Y`@=y5sOA~DN2yL;WYFe<mGt(Lh;U|h&(VK(K_(qnkJ7=q~
z!d3Adx9K6BtC8~RiT-Hwkz0t6{b&8hr*oo*?uCx%AkBlzz|(e~#?y{D<^~$k!+3?>
zEhsEOF54X#yvx(sFuVwdGCaKb1xgqzdC-U5Tx0c~4XT@(*aaY*oCdYNarPqkBv+Jy
z+b!zODpSA0f(G@Y%K8M0UWU+;3#oph#Mq||Lh<z1`9U7=vF5dcUv#El=!G&oQSH~W
zZIi%?&yo^1gMUbSUzY37Pi9P*d#moMsim0Qz|%hEi9&mjQ>F|`Xr*)z6TAyysoVl+
z+>nOi-WQMJ!d>lR?`BP4lbtpeLzj;QOyn(I4<K<1VXRk(K$!VqN@hjFTL!+^_zSAd
z`!4n<E^zrv=HVr>?s?+R-)bW`q#nCOnDN>ayzZ31P~2DUs}Z?hIB!XnHfT=Bi8J((
z$N`7Apf2OH=_~3Hv46~jLdzQZaGhf;d*PWJ9{ua}=M~??JgtS5T<Bh`Nn=S1aS@jG
z)XKG3Vgpv9YbW<<wC4Tl@8mJ+R@3RA%YS?Z`iNqkhrdX({z-=O?&1mb#rO-Wi0W<o
z=v<EdqdM3<{Hkn8ErrE6Jb3*HpStA%-|iUW!mH#ZrLq4Wz`OtF2f)R93M9qL$1w<q
zj?MUMIjqemNH!eF)i<9$=#2h))I{y=G8YZ+nPB&PDi>MZLSUxHCwh^iNbGC+aX=Ft
z$E|gnvU{+cDqskwu8I*b2E2?q;4yXf4yZ5CQro@1UQ-d^Brq7TyJ$gZfij;bbY@~+
zc%O>!Xi+#8wAQ?I+eggpJQ6kclUbF0nI$-Ho@=#l>pC>hf&RLXEZGZ>k3Q9fYOUCv
zEtZV8=LFi@y+h?qA$OPjfK4h`*Sg`O)avi#@u-IA5MMr@MLZ{$kOCZ2zd7sV>R<!|
za*K(n)E7>>=r?179Gqg>kK!x2M{o@O7N+UDmASucoMneGtGxO<sOg1B(-cVsEk~0w
z1}r=XKz#U;Qy*@|^hwhl>P;=P1!B5AkVP~w#RKYMAA_HlB`d$gtT@MufVHQui8_&y
z@!rCj#`eekHj5{peMF8sU=7FeV_qkrnpdbLrv1i=`M5~iS@=_5iinOS&XX%sa-W77
z-%l_v=x~nRFD2buR8<QQeA|!?2PO%>q-(n5%U6*)waZ^W6&^*?3Ezu8vixw#<JYx0
z_mS#wK#!PI+2L3=(&?LHrj?d}A_>CC9)~pZFf2ZxQaq^Q1JbKNYuvjhm)0df;2IKq
z0?`?LGw*iadM|`eH$8rqCZv=2Pu}-jaWBWk2M)&*@sj+l-=^1wc8c$X;7a4>mX8{h
z4`2T7pX0a@s(ai1je_ApfsXM}zH81`GhNZc#-{b)^=@GS*_&`W9WtFrF4|<t7Uos2
z67=W0IcWmQ;Vrg4Ul$7F5mr=W(w%ir9?1?U3nmk~lBXX`e{MSggz*^XA?P2S1!9HN
zB(iF@%SrhPwXIGsGusRV%l_^dn5W_6J2wYcye)VAh5y61e?Uy?T9ew%kA<Oh_drI>
zyO(%o?>_%otS#-_w`W#%y<yO@wI_VB#O3D>cKPA7)NNnnOqnQnJN9z2l-tGRuVzDd
z_D|?vT;P;7LxaRWykhE~j?`wt8818|GQd3LnUlD6nxA=+-oVP}y0|qe(tb;AKAZN_
zEM!Oj&BPPP$Oo3Um!20*Rn6@9vx4vHVGCUb(AMIxM+j;O=MtK%ROMP?nX7%PD<RCg
z+lnp3!xuIpl{Kh~$<B=d(U5y9xkbA0)}K@Q>1Oh_*_VNm7xP=&6v+Ippda%_j#bg$
zjn$BMeKFHzX3Iu=V+munvjTc;igd_cG#!ty%}FBt_1zz?c`D2sveKkvOb_EI;QrL2
zYyy!hbp~cWL^=Mj)9ut=)W`CT8`58w=+9yq(IuiingUJx><!EJM@J7FmrxGmSXq_T
zdlQzdP6WM#11D49GLZ=CL-qx&K!~D*Iu*^3l~tZ^k9~}hL@v?kmnHi|XzAgHO8L#O
zK~7mUUT&Hmi#P4l^+XK)NY@%!{*Rg#k(<;#a0&=i=2p7$=f%i`#=|!qs5*_QYcbNn
zJ>QbyGT)86ma{P@YTvXlNXMJyBPQQ9j%Q=u-*WsrjO<;qr_-zOGl`?q))X}MN39Y;
zpP+IO<t^DqiJh0by3UR^!ZwVpEwk87Zr<}Znu=%b{PE|+^~-S-M(mxd>EmA|avrTZ
z9Lg~jV$;rKhQIDZr|StQ8%@u$h<Ri#me#EtR1)Ypl>8q^M}gjEZ$UiST<_!vxfe_e
zZW$h`-Ds~$9K9BV1E+|7fw_s#+H9j-(D0RgKTKhQbhbbn>d7K{A^2H{k^PjWSiV()
z^k-VdKO4_y@dS9J`EH*7p!{1Ftl!gf-ym4www4kreb$|@OQCH5bis{Ut}NA@1i#J`
zH@@`s_H3OGM&FggwP0t+AT*uCoqwQF`1~Qwo5U_g>N9+^s<);8)h>|>76~-UjUwVG
zPO$r2a`sgt&Vl4THbED9Z?$`LCN6z{%+5nZh$_~`ECJ-UvBu)@h=iSE_dFf@`DY#j
zVKZiMC+7T`3}61?Ls6~Gk7^1$nNIWb@1BorsR{g(>|W;GaqUShmw5XRP<4%p{X~u*
z5uYk<F*zR1%^)iJHSWSMW%QpcPMWvd_-xxDf##n`R0ep@8urO@i<9)5h*!aIM0`9~
zp>*!{#lNH=+5IzG>DElE9Y7VcL)~k-5et93eF||-d2exRGy4X4<GeHxfp9tr?-GxG
z`?ogki}*o!thK^gV5)51uQvWyb5&s4F|nm(-MuFrU$-3W%Wui@CdA`UDYLOGW)tGq
z@IRgt-Qd3})u(<eV-EJ;?;?%``bN#QsK2?lZRB7d&(5xbPR|WDCe-cig-rUFpH<)^
zQRLKO$%w+*bx+^b`o8VKw~)XoO3$aSviRF&O=GbQ04cKPB;I(G*9WI-4Knqfx9z}(
zaiggNvOu5WS}L2#pMwpP3VoUT@3K$4N4IKv_xhO@^-8`g2hj42%fLJWkpc9umwA*`
zdl#Wb2YaJ`v<S>3GngNaWbNBnT$)jJB#e2*UgatQ(uKlW;e9=?c{GbBAm_tA7w>9;
z`9xa1MH&Li%EkwC*CaAR6*7n4URud+p$Sgxq473D(O{Nf+1Oc$w@Y)G4f27x+Ff6m
zC`4>+gK{XougWxx33k4GBqHD!$sOpsS5Iy`fe`EyU|s*?b3PJO%;ciXY<86Xr(W!+
zX5%C@2VVFq7sKOo@*;E&&LC|CRGcT0N=JO}g3<m^h4wkCUYEKo^0|(yL^5hzW(P2O
zA9Rs=FSwaz-fZxQ+mmGx+y2f=&f3z*M|kWOkS)iI1+?QRI8H)$3iPKZreon68{@K!
z&uLgbve4<a`3LAhG@y8M>gJo%Ape&&zk^P3dMavDa}#*qxqayUDAY*oaH4Jf+Sp5<
z%6h_3qVO$21-27ol9x5>x@hIK9G`%O@h^ud`iwnw>nV*OT%Bkx>1T-Pvw9%l>#T90
zX{{%*hCr>jY%%g_$Jy^GarXpsw)P3n)${qPVHian^QyG0#hwT8=9d?%ep7LGEV>G;
zHYOrFu449Y!W#4Ll~#)15KGA@$h@+(oEmG<mMtC&X{CsrR~%e@EB{8^&?RJH=JvpL
z%O2zQgat$lSs(cH$ER&Fwq8<q-JVPz8occ|%tc#R0`X6XkcLxl#+^@N>MI{xu(qg%
zj6Zi0PB<6LrF&jJFYD?mOHrLhy6g&COa;;X)~Uu*Tx&dH6o01WE2^C(OCrfX=ob=7
zHGHL}KM3(R?E(U>1hgoE4zcpW5yz@RQ{T1NT)$&BBl0ZT$ae8ByDw{?*pOaH#$@qu
z0z(xXZ}miT5Oy&2UB&P=EooEMjf8-)hV0}MbkaxyX4OfI>|TyQ&kgQ2T}Nq4H0&)o
z!#mD{$X-M6klm3T71R@=h~wvw&oCO<)WEqF_@vL0lV*;4CPN@&(7ukx^9}#KT!r$A
z<;2~6QMw#o%#GKeDO_FV*s23*cFyv-K&LK2w)r~LannkY-=)ZfvlUzTkEm+<i+?kH
zCQmH*stW{v8uZ;?*dF3KOXbq#y7ocoa)7~ggy;Lru#sJ{3QMs38wQv;8N|CoUW-K<
zpJ7zAd$+$e@VZ~k4LUI~A2v)k=cq~)o3(F^D)Xk)3SV~Y!m(F!`YE;5pl6p+e5*TG
zRX_ES9~@57Fdxr6vfm<7R56Q>oXO+=gnrbGar}9k8)&y=?i}xtQ)EIWt)0j$V{a#|
z|NM$(Wn&h^eEY0J-0NXwjJBzu5D@enW0ah?Me}pzbMqLGRnq*o4rI|4Y!8+3dC5gY
z7gA7V+Qw>@i=*P9z8+Mn2a%e6chz;Ot1&S-9~}H^W^RLOk#7=P@zF)ypqW~L&IWjH
z+f=zY|0O1px!|a}Eg4%HB?;J^h%Bm;#vDIxF_?j`y}dO7!PiC}0UeuyUoK!IjbVjb
zr{{ZHWRG|_X_?r*eh?vu`SY(+<39kUFXV%tt3iJJ$vdM%^nFL>JHhCkBSB+-Bd`Au
zqW<xrN~*i+*XVD8?l%IM?ut)D9AmlB@PB<;PQi~kcm<xuonM!1Y#p6`dHGZ_=pRAq
zA1n$>m%`$vaJ?c_>lLP7rr9L+-y$!80i<3b%PCE?TvN21rA{}WY6ujC8Pv|<#cB@3
zidFU6xQF5!cCmH;PopR7C98&}@d)1=?&&!qp35<Z93`tx4B?9x<2~9CQo7%5llP!q
zZ`m6J0~*NCdwN~n_Q8-*wP3!nm2?}|!&eab+>cYYNUt1~+#`cn7j@KN6;0q%F7KnC
ziDHEdBZ5jb*YOPLG#;<dFf16Bz^YDMmW&y>%j<46Kbi0A4IMt>Y}NX_O9a^t9qTe=
z2*wj0;T>OkgGLM2)dzEO8o#I1$>eh-JHiJ-WT{LzDt~T2&3;Qr8<>mamnDV_>~v@$
z@6-m1bffoRbjR^yc0z)pEIx3Osh_gB-P&>uzvbH>$7`=T<}FBR7P@{vFe5ymy5BhR
zC~6*x6AYEOV&(FpAp5fuzM+L{1_yb&tdagOyxI|q!81yWjCOsMH9J}Qxnp}X@<E_U
zOTg^lbGLQ0AhN14>`fn{UQpInDqieRjV52#g%-@I)%}X$nR;dh40bCbC3@6&6gS08
zXRg?uiIq-8$T(RjGGH6hvop^c$CRrcq#b?IkRy68bqrrG_r7?O@3gmPml({0RW>|o
zY;x7s%MD79?b?K1ppK{GaH_Un9uvo!C~tDg@hDdc)Y`og@TclEq^`4gTlG?uDkgH4
z?)<kmFRSZYvs~%AD;j}&R$gf_k6urdj`<b$G-?(wx3eW^Zy0@;2{{aR_-cs1My9+~
zr~;N-ahH5cmc2Ve1&L)64HB32{W1KpXHU~7mHSo9N%hCn>4ylFy41Sw+K`t7EIzpC
zb5v{*W}~!FDnU7$g(vkO{GOjbnKUXYs34_nNX8$TVOuPKG2u5Sndj9%0k0LGXBa9T
zbC7{(otMiAm;>JBViiVTKU$~5<~U#S|G4swCV}?y^EV%ROk#$}lz(C1cWC=+3=giw
z9^nw_|G~SuK|qyuFW!E5%TexL8}8^r_zhMxx9Z1K5`TB?uT1{Y%hdDM#S#dHE;yX^
zI9wa{{HwxEeV@sFC4ZbPA<S&O$Ycy$IFq>rV9OqXk??m+r!<_d22M)YX0v00M%c`u
zfFq$+?QQE>Kwql+hjTT<SUs%%j2+zMEs~IL&39z>izrsox*@m^vUHkY#UHpS(}_7e
zLTn2RMhy&qdAyG!Dxo!C(?)h?dT`6)_fGV#K>XMnRFEwsB&Go{6MvR$oOy*O3m<t<
zr5Vy%do~B$aMOQ+7LhK$_nd%s5A-yjt8HtZKVE)m>>M4RPrOc5UO$mU7qO{EW85ih
z6NH!IuEs%nOz{R)IJ9UxfOOqT1l`=ubzyQu7p*-PJx|f4kBE*l9R&(inA-`mhzT~V
zU(23MsQ+5Df5EI*dfT#=tE%@sjI+olXcy+a2=5NHL!71O+jn!fq`Om^k~ys}(?PV&
zVt)Fbe$t~bSFX%AV;ga#d5oz5f)2Uh5D?A^7=2yyvR+Jc;JnyM7WH~@+{3vGT$KS5
z{tXR0Apw7fyMJEI`-GFHc>-UvFm=)mN^t2wlTHu^30+PUmE^i}GkO1Z7w^#(gO~Ax
z&0I_&8C!{BnCtz8P{h=N=h%YjCgk$BHRn-@cnG)l_YcottpFTz*(o$<7fkn{^I;Yx
zT;=(%^*-=2Kot`BAjcb7)<7+~!0ffZ5tWm?oEMj_!W^8v*nG;$z^#ouaXlkiHvKfL
za<wyO9!)k!4*7D+VKnW)6!uhs+y5oiS!8|7FI}VJ!!NGby~Xb~0USk{*d?BV1%|!~
zbK>MopqwxcxIm?D^gpeVZu{{)04gI53=G{XY=?q#!G6EP?8pn+6FAMW?Z`7{XE!_y
zJd)yAE`<0rR;R`7gheUX(h7~-{v$O@%gc)p>X;42{{uSbZ(z$OPTBid4VOxHzU=w6
zN-wq%(%t56Vf(+2dpI~1L&<l%m;Zy0rf2TN3=Kq+lA42Y84puWn=w%U266)4K+|QX
z`vD}_vh>YbZ^rk~NTUx5t8AmE3EFd;sg-@zdFWi}XyOq}tl|9p^m2?sBmJVz9L$t+
z^yKICTd&2#NWFAeeZGrR)YkoC{v`F=%6UJ}wSAr<bp4!ojAQXF$WM19Nc2MiwN&sv
z#I73zFXsQd1i@eJ0_C83!;ux10MQ(jVXr0mn_;6yX~|32^M1^hfAO<rm7oy@w2|FK
zgW=Udn9p>*2C*dz1OIfn;mCv5QYMm)8YYs~(&Pw}dBtG5ZS<pMQr8Cx#>m8*g5Iav
zp3t7G^|KG-we2VBUAp29CT(?SQREt-Z<YFO_vK3*{^yA<BY`lI5SGd-*tbWPg}GjD
z7aP!G%fNzE<78NMLonXUTDx*!*}OAgU9V#q90Jq^uNSJu#GZ{TnBGG1<5|Am$OnG*
zPkKZ+ySah5q4snhJe!j&+A47P_KU_2XryJlx(=8Zk%YESyChUiR|WbyWVZ1bylYB~
z+<;}(5=2!GRGHqzIh5ZzY4a|W6*Curbmd%J5nl}x*?QRfgX1jq;H^c$nM5Y?x9v*0
z{vpg~-hxLUDeGJllMy#mt#(ovub|C73A0S60JXXz-;9l}l?fifee-4auL#|aRbeF|
zLQX^xuPZIP(TCzRw@5+e8UX)j0-Fz)5BwW=hskq#<6;<!m2ZA_xmg13Z>J`dG@cPn
zX)#Gn+#lUYEhdvz)DT>v<H6<#X8U+}(oNpmOYVyCjL#>625j<g4zL2EB5buXTi{Vp
z{u^NVQo$~#aW<u?q3xpk>Yzp2p2f**(Y@_t`!XFY4Hmi{h<0OenP=&28RzPzLl(v0
zxp}OzX7~Fn%otcXa?4)FQ2jFVa~EIny5w)TOjsJlXFYj(TgVhDpQ#8m+KWDU&xo2N
zoj@Mpgoe|7?|{j?7TT}xMu`)hsQtWg1s6_f$-V>$$9gzcG(9o(n9=td#_G!gjw%#J
zuTJ=`&o#3~>34KK1M_av6p`bu+R|yHphMn8M#xTfT)fAgxfjI?=r<*8my4Qg?q<Yh
ztfkd-jtExoIiZe_K6dt9Rw}GLj}h~BS2DNKV{v_jyjgUd=nQ0gY$bM0W3Y0EfdWkG
z%jnY>BJT5mseKVs5Q`qf=LsPUeExM?xOE?J?~=*&S@^&sVS19i2Hd3$vEYj6q7K6h
z^^p}*X^V%GN+Ip&YYqnLo*lOn3k(d$2p^OUvV5-<XF6N&BUNgzP`W*CjFeu}pWD0{
z59tcwQ+u(O17<V5e_YjuR5$X?X)L9~7Xb%c_x7X@aSy+EYi^o(8l}w#H~k^F0$*3C
zJBSe@SiOK7AE4nXuWc97%B>2OI<1~6HGtc*^aQSEC4W=PU!yfBm3$Qv8y^<+C5UG-
z_t{!DFMF_>`t|rD+E1SMaL<G}G*ZtEKkJ{v#_@`wg3@%5QJJqk^Zo|eCe1Yb31imP
zofq`z4HU6m(?Z+$A1P<SPQL1vdn91{hsfY(m38W%g)={nO>x<H>GXjvYC`Q{&4Zx1
zkD4JGlyG422=mJHEMw~t;_76*Cv+wUGKpLpxZMi~xISbnL6UTSt36dKuTD6PVxV^u
z-|45S9X=zGq}|HWE;Dw`X|#VL%C?GvgU2tSAi=C>{+DH@_CcN}Eu5I1NSH*3miRe!
z+^0hC2d^?-(XocutOxF7IiUzepZXM?G_6Fqw4B>y+brbHc3++y1RI!o@}mRNbCO^A
zM+P5)ZIAamQ7Ibsu`i9MLI@aN`L1Hfr1$u|1{U^W0BlRJIz;oEobSrDw$s3ghUd^h
z;)Qj7I`X1->Id5q$jXvj*`y^Hg+<YHfM-f5YimkH03%~{OF7G_9qsSxuAuyk*Se;1
zui2>g-$2yGF_fij7BU!dkRf&W{`vXd4bMQ>p1Cq>968%RJVpQWNGK4aHk3ymgf7fb
za95+)I!a8^!o|W<|1I<8qOoDe|B2uiV>EauQaR;<&}lY$3=*9f-B<GXpVt5JWS`xm
zr?c-zAgS`sgeX-1JK|q_N^gVh%*6)&Z?mPt*Y8uXV<pA*qK(N`mrf5~x?!=j$_ek&
z$S<!|9%|hihGSW+`H{WzgacSrU(myJCq11l!8Jf`K5CBlmWAHFR)Vf5C;j0N-d0yv
zB4U%n=*Lp87u?2R{D^9;_!`SnhIHg8m2`@~%d{Wham%95+J~Y6xf0S}md1p~XZv;y
zpRg$!pGD6y=TdDtw8PdlLd1m+#v%<nzihB>R@$$jf#pdluWB0$)KPdJiSy(Lqtt&M
zth9~GI`o)P$#SasWNjp09T--7*3G}~jxust#^}R+iw=ajr^*X!4hUG-Oat+pX60Kk
zd>iD&k&9DGzFNgIU!96BU0m}LWnGKX1xR@pFgR7X=`SVBp)e8G=CUiwL#eBn;S0a&
zxJjIE2>X_XxC3>-86Y$$C*{AYFP55+Uim)71RTmiJ7nSqz--DcnnF~d$EE1gDNouC
zv<_7;Mql_kvp&ZKr9crV`X;W<2>mWdH=U&ep53BW=tMNrEBK~7u{QuUA;xXCOZekX
zf15?ZUXK*fSVru0xB3CNG=8NhxKgguWrUP*;$qpa=@EyD&Sk$^UA{{)_(GPpvq2D+
zcd)&V?|`vpJg%IsCF{(4i0on&J$&&;H0z7g;YupfB(Rn`$L%~#<a%eWZ0os3jPvaD
z<I>FA>Tl|NenYf9Q7n^-Bo(Cy`|A}Cu0!k&MYLMO6Z?clvoVWK#iC{8i4I+1Pe(1W
z6L&4nZ-3zo{VS7?C&<@*5hR5I^<x4IvD*h0xl~eYt}TDnC3hNx&kcVI|MK*4!brg8
zIS%HePVM-oUK0FO8MLY&BjU+^MTa^!S)}A~Hw_#s_M#uj@%{r?ol4!gF8xsn?`S>v
zL@iI!VRi5BL5C^@9*q(tDrV;(5M!Z0q4S11`Ma*7PLY}*?H6`JcEVEJq}5`v@FZnb
zw&4!IC=lXlvwM5NrP#w$!#(`_!1hmO$K2{(5Rb5mzeFd0EM$9`22z|IHODG@F;qC;
z(x`m^@f}>c`E3iYzx~@v#*oz+^+mQl&57f7SB$i2qwhvS|I0?7Tn`eF;nVL++SsE&
zuoO;*nG8W~LEeY1^4=m;Ku!d~2Oq;U;<}_<Lq9xOJcx{UmO+;ui{B%CZMnD+gFCoB
z4OyH!Hyl?uGknXe5J}P~2u^+&)V(F$u_trd09tjEksS=kmbu=Z@|kZYtNnWw(7Z44
z2lHF}^?mZH)4}ikkA!U&B=)jx(@g_fiBUETuJ6|dvi9(;tmqS2Fze#C+a<8ZEp0^d
zpznge%F<R&+tRh)<-<hp!T5TPMCsoN(#YE;s0wJqzP!5g2O5Q{KWnPn@WERZQVoB{
z0%3&poyTI_sfbv%*PDC>z7GL62=JD0LCJhrmTOb~ysFPSU6+M9c1D<(t52n(Z#<w6
zr_4?RtH*k6D(izDbX~J&x%{l{+K7WxnYu2&le#!N?MDa4!RKrpD>@@g{V*9VT@+>^
zwU&LT8#4O1XHuew2&B}i3%F(1Xo)Io>E{%mfFa^`O{!P6@znMtuR3Hb_HP0d8geIV
zMWA=j!ygf4k$s3DIN(TZeueTsJ)oDewZE4U(bb{G9MoUYE%g^?_p}>-EVS01QaKuF
z04i`uOSzT1Z#;i;(zY;dFSvL!KMosn)k|o({5dDO<|Hh2c-D6oF}yP$ebT&Ea%@Sy
zd=8SPxCx$rB|1wgd3NXaPqIpWj+dZao4F}mr;Zr$n&+Jjrw=;|czL4p?q47n={fX5
z>g=N+VlPbQGqRIddc~?CCL5RdWiXu=;?S|GR%Q*YwNH4>wrGRy2_;x~47y2X^1gzf
z9c;t~>ph(sCRsx*8k{SG_LZDb`S`_jAx+D-7kq!kMxhI~5ZiPN%)^&mbjgY8?AKf@
zsnGBE9y;{yd#RnPsg-dsVU`*h^5X8XWEs`zvxKy_W~&M4RUKF~urf!ASrj`i<shvG
zuaBkk<OKc5ai2Bhoj%EuCj(&3>N!XR$1|MXrOE*)^C4<WreJH?x4-;nvf1d^{L?$&
zYi;cDCgEM%f|o2@3P^&L(xp4+iHP)=<U}Vc@^myCZ(Wz6NQ^5t(6>{ds_Y{+iBiC*
z;45OPQQ9|<3lOp12oUn<sCr>93E%?wMnB(LEQqCJe<Z$4>HV>=k^*E*bK$T9dYBRv
zlwNNLNCEH?o__7SsiReB-_-i&BK4&=ynZMG1)Yln7S28*mQl?Zziep(0S+0w0sjOm
zms7?z#Dt?0Jk7TTUe#1CBa1E@QiTE>1}qkICrA$CfU}hO(&mh@95E<quG@p3>q}lg
zkN3cB%dmIBwo7hhwM~bceC#Am-%z6_ZsV8rh{wx&P8n<(n^Y~(1y5lfDInWzFQe(t
z(2P^oj%ZV2MMp_Guq7<EU<e29S8j$Y2x?#oAjiP=!`n5-rS#*;EaX<a*Gkj5k>~L`
ze9JL}*R4A+a-oQ>WJzM~K|?+8QEZ%F6sm<bf$)opcWe)xZ=F~$wtz1<n$6wk2BUAi
zmoT7%Mh%_^HI3;ItEG5|^W3uRomO{(VsJlts3_J^?AdvjspxyV^qk9L=C(8B0_^J2
z=5)RR5`6F`=!p+0A2|pX)msKQ502H}LiTIhn6s>w68oA2UDIW?uTs~(49({xc7`F*
z&cvO3F`^&Qn<<d!InDVC=8nf86=Qus2Xs*=3u19RP%>C;ZtkPk5i@59F4mGB+xZMv
zaPkM{d2ec=^ST5<i})2kQ^tOt-eqXnb(m$jHAM!nnahT3_9*{0Yq=m3J+wlYTz;EJ
z49B?~D-d6`wO7$8f^ZB>7i?BT(n(f=^jNl?+U1_qbU#dj=KDpg1u}D`&Oh2bF!Ip#
z(99@cTpU4j^pLSQdL>cLo1jBm%Pd?{b!_z3rQ`Gt9&V^Wf(G82$>N(<3wQOl{q2mz
zHiL}7Lah?dopRf?eu&e#wq`!}ezNNEf-=kbLbUP+V8#opSnzZ@>%O}aGC#1~>WLn6
z<*50@ySAk7C$+!>*qXO()|oHSJ680(7sZ2U1Yas=EsE7(UqG^8a>)CfjXUl*mSy`~
zQ^7lKqllX%ZW+)ps4^o4@xgM-byTGiiC7rQmhg0XBJ?oYKmxY)9mH6PfDYIi5nP@2
z?AEn!jK(S%Q)Ii|yUl$5p^k)JWPa`YpnN4-8&CPzmshMwiO(5*iNU|RT6cEt=4V<K
z@)r<|UhyA|#~e$ye(2`c336zjTXSl`l?`03<{8LbDo=N20=_)fLtzLkQ_avr-n<Iv
zPtft6vAq$L*+U|i2cv^!AgQTN^hw`IokmDF^tLK3mH4aPcg<^qHc}jBX%CiS3;yx1
zb1CDL*O|GZkhlQdBgCa=nYU?U8YPcrZkU*=tZn(n_LjTxDjk{ww!gFSf-^r9wq(>6
zPXsLB!PjiD)!cRxmfDtUmOCBReK)0IpBuiG=HMT9dCzaame%gvHu4=Cc9?xdjzOsf
zBbul9V>RRAWj)OKy`@`MRr$fsw<GKNG;__08X2zw*{>O-`{SF5nZe#Ttr=zyqxN_-
z>nLK$2)NN2pR&y<FJ#7e3UeDu(dn?G`0Y-08{BqP4T;_9)M>EotwCgcLPkk5XM<un
z`{i&c4-t4{Z5T*F=@U+Sf7h+T+vXTOYS5<!X4oizC~!Y$!+Z9+;Qd#^#+^p&Jsl|}
z|9o?zQ!#2l5tuVhQV{p(&0bUc*RZdp23HL?*3+r|piLI+`WG3dvlkxY&p!QM^QQiv
zc}qd4pg1rTK$6g5J9&j(&eDYurBQ*|#MEx8jyC0g{@^AHrE(74lildo#%3Dw8q<9K
zi$Tv1)v!LHU7_HCoListv-ziKP0k7@w`V?*11*MvqL0`}?_Q4u<|dxtw6h1k?z$`5
zvSyJbZTrMbH4NA3s2h49-d?wt$SggXn~h0K8Hn+pqB18JX-<S#m^NT;H=JeoNX&b3
zzrjR0-$>5g=9mM%r{0fTzcYq7&Q+c^8;CY<MEpUZAKdOr_<61Ze;Q52=$!;R!srM|
z?%_Z5!f-x4dQTjynKj|a5$TSt_cLt8Z{Q2qqiP?;Qdn=E#?~X92p210-tI^AmySzK
zuM?2amDf&PtAGL+Vznj<ZmRs*u&}yB(y+vwVMUM~*9^qxSd|3d4KyGB0!p6-D#@S?
zGGs?}GR@gmDj|%whT|6PU!JZ|Zj}KYiMf{G*6J=(&o}A(UAQp%u@dkSQuIv)sn6xv
ztg9;vXz7)+6`{MH1W9OOx+Gi1ul81v5WzSh%5sdM%wbK%s3w4Ey1*;hJn=#N7F-RR
zlks|HeApe_0aft{t{&@4S2Vsg-`Vu6Sc}?#ZHEvnK5dtPvJBrtnxpH8D;&=)Vf`hf
z-L}4`u)sg)$e^rBA9S(Pcgc3S!BSg4ifrZ{*`NAvRkH|^^{S2bfL(zyT!Wd%ABi+C
zxPM%=5Iymb{n4&k=;q%Xr4?wIxdL>fn}(Io%O?B^5_BXtXu$IpF9NQ3*I4yj`QXsz
zR1$2m%47LfX-Q^Yd_XLC=4jbt)ZCeHRjc{Xp?qLSM?4}~^zOZle1%8^kF+DrR*2y&
z!(Lf1>KGh7fs(GU9i-U{V1i!YE?ac#jM{dnUa{*dtyzm=d)?}ETtm=g_wYXynmJ^l
z^~V(7GXdEkkN%<g(z$$a=T0KS)S<J!9}cldzt}-qd_Wn%!1Jo6@_hKcOWkjrTyvnE
z3^Wb~wU;@UaXp(IQ0|}?(5Zp77Xrx~$_ShCFH9#J*{A-vt4ZS23_^Qz;MG$2Ss&Tb
za7m8MAY)*A#}5AzR-*XgmZcW4nV{lDiB2bdq`GA*1cy-V&4EU5Chh_z&8u(uFs;#c
zB{4HcalQCMjdO;?SluXX53k-1M*=2t{lvTQ<A;-hjE(T}x|0i*%3@*sVJH!qozrxz
zsAN2ltioKIdhWk)%HrF8(t=at>NM?m3PE<zis}k9FFzkM-r+B*efF-)7CS@KsvkUL
zcWi~+hrK-_O8WiM!$NKup6mGQobO@JIt?R*Ba}N}n8K`<$EQDw0T1)W+jG`au6r{Q
z@$p3ZW}H5~YkXZJ7lX3XU4`S^;9f{C+f50hDj-a#7^<Qvpc|xfBi77@QS;+w&{-hp
zHR)^3*eEqni**6Qz!rQrsi;-~RlrDG3A<dRq4RZzfKgU*66P1Js_r-71%@dUh-0Hb
zCpuQ8T>8eGG#&?g?peYjlH6klFnF#<MEa?0Ql{u85g|q#g%IP|_|c=cNsC|Jt~!kp
zyUU5;B7bosrwA+QEz)JYr&k=P3R8jc5Jw$rEBES$@+?5^DTR-LY{3Mu{-u=`%>*!`
z*@XzK?aI=apxI+bETh=TX*>3Bhf1~$G{-8{JaZHJ>jZQZNM+V*GnQqg?Ow<{xxh^J
zcl7+BsHJ=1DrgFjZh)U{52E9P{pSoEfl%ZxSIp|;)7aok$f;qEj9c@!H9ck-SK&^f
zq4<EC++fc~d|T^-4_kE-NtC>sqI@<51<F`lgkt}+Yd5_Rah|^Pn*DJN@p<fT+@2*(
z3&!7gx9~&*KL32a(|s`w$7!${wm=773~lg-rNOuGUS1x6Luc?8+M2#OcC}c3l!5sk
z%Wli$n>YgC;C-&P^Uk}luC_l-G|KQi_|4T?j+q}#Uth2!?(7WqutE00zguuw@sQ79
zvr#g!HDJuSyC*7n;A=~4)Wh>{u0U?+>;koqZl~WC|15Zz%PGT^iJIa1wc~|<mpa4s
zymLL!#e$S^wLB0E4#-E7t({bM>bTCD!WWOFtO|1tcK1=V6Qbs<bkX92!Gl(tB+ANZ
zQ1;|~`>_XtCS1k0u<1_31DD3Y#9z8ct1_E$l6i(5gcgh#^*-Jty?66{J8|7xiL#bQ
z@l3W^PVJUoMk!MqH+K7Y>t_qDpsOf+PmLCz1+Vski{R4*oRK#~`edEat*bw`oH%98
zWB=&hw4g4xAYj0$5sRax{3{I4sy+}f8%4uE=e2#h{3CS|Ht`0!3GzpYSqkrIYe|wo
z9<Pj$%HTqN28ZvQ#$TcKO2EYQ0B#WJZBgnc^sMnxJ_02|wgHS>tbIQ7?KW3I)t6qB
zoa5Y;0n>#B{oCQp)PPivYium63hV&3f4B5eJQyk<nF?`gZVt}ViUz3e<4w-(AtQHL
zW-_6UAJ8fo?HZ~VUm}mYuouX?;9)tn^6~+{c!DjnVIU$j4q=WmPmN+{V&f2C9WKVz
z@?YV{<}~}e>OlW4>j#)}<465DW}#L`5=Ep7EDPp0Ecp!6kws6L3%FZlY0~6doqR86
zM)SUg0L}bg&DN?y9PW`HT*q52bN(_7IG50}h;&<c{q@<e7o+CKc!x^a8Rwk$z+cXq
zFD*T(>f5#M-|-bpFa>u$9&NVokVLz7F8g%}f@UB<sduI8rt>+hX&Pv2rni=I>K5B2
ziC*%gOgN9MP}KV(T_hj!{&!H0MI27w=6Dk6=--Pp3im%+2d}IcoTk>8(~)G^3pPc{
zWi~)VdStNmH>R`PR@ijEzo<uTh^S38hWz|Wad!%^WMOu?J)LkYjPNk0UUEGJU+)AQ
zFBS$mmu;Xjts^li@v)0`?AH->HVUF<P&3q&=IRsU#PdPKJRR8xQSJG|0Zr-ms8?2@
z?%HM#-J7T$???MH(lMyYcv`L1N3vK!Ay>i-bv@!)V!;t(?I&7CeRQgq^%l2fDyLvt
zQMe3dBe=4>1hO{x83}o|Q4QM$j$H+1Q15=u!7!0dEwYPy6!2f<r%TXhcf!yEGL2`i
z`%{91bnll4ZLV53FhF`LxxQFbjXFkdCG$X<^uL<_@ia_~T(jn&Jh=8W_Bm*v6cId)
zpK<gd6<c&tTs&&{P!5(BC&*7B>E%W(g_kI(D}1L<hTV5wAnkyJfqqqy<oP@>)}z;_
zPo7Q5XmZ><8NXFS5QB%;<gZFh3yr)S*shoAOs`S@6~--6TZhoky>fhGub8>>&~en}
zGYa&X6*FA$u^a{de0Gr#q4k3O1bas@7#oBMQY)d1OFuT`U#I(A94Ae#Pb(L7$Q%3I
zHN7y%V|7aD^4T~@noKJDzwld8%D)*GdBOW5f*U8ken<48ViH&4`X4e<nl+yh8lEUi
z{B3$7!F(lMJ)HB#iS@^>hCrCO@L6J3+4x(hfLL))X}&ZUmnHd4_A5}SZC+08)`Y0f
z_Tj403vNa8_7$WH`r$o9kigQ_m~|PhEBgvKuAUye`ffn->1>uLKO$I)yYyXoBD*`Q
zgb|eCN|$XG%zu?AM&T0=nsIu!n)f#1L;Wd`C36js)^si;u_e^St?5LIuyBOV>;>a&
zNr${4{-_(=gcGMn50Mjz_3Vv1?}k9x7jJy8*Ji*;{NPO;QH#nXeinN)#@)42#SzAl
zxFy`eClLCcco%R9Ihs>pDdGLYtWjNdu*-$yIb*(mM>x-H?nvd?pkSKyeMco9La-wH
zFJtTRLZ^-e_n6v8plOgLIY!{Qp?C}`Ebet!N|FEPZEfV<RZ4L$M>0F+Qyn!rU!JSj
z!7Szdj>&nV!dIamXH<ary>2B`R=5Ht@wocf^_}qz@aI0MGAlcP6V>vpc!yOoS}coB
zjIR}U)GzJL_aBfLHd7c+D97!;i^_@bcB^9D0++oGB-bCW)+F%HcmXofz|MJl#GYzh
zlmfZWdBgIE@rLCBv<(hxOanIlV}Akq7{x%fNLrBUSMRSD!L>Jnk+dc%yx)aOHTeN7
zEMC|3@3M5Z2ItV+8OTzuvb24#uml@*bqYnOnH1qkvhfAozWbs%WLckhns#x8U>4ZQ
z9hJt{WfaVgCH(V>lz{~gRcUJ$?dopDys8!1%{Kvb|GnFU{-$~IyO}ZmyfR{T%WfYS
zKc8*HJf3ar$DbFPhu$XYw)p>z-(*F(%J&frP+og=>X5<zY)Xq`2zPkZ4eWR7D{?dW
zZU)T(&)dOtwcD@V_#M~Uj@W>#EwPrw$kW>xqoT4f&M#K`_bygAQ9B_pz)~uXQIlhQ
z|2~7<bKy*Ul6|WB=>|ZLsP{tIZ$f7;sQkQ<r}RSI5iXr&@i!C6qHdKl?ahZb=^Kd4
zz4%Lk%ZVfqcfhavS$1)c{HH074^K{h*-U;ceH+O&+VjMJpNry?3dC>mtr^>Dg@Lv!
ziP+&@pa6+-6@&q={H-LX0Uj--!?bN!B$ABLgcZ}e2cdtruY_ohVxUMxakUa1oOvp|
zeo}jwWJ2>!wNwW}!Q2aSOTx4XwZw_wa`l92L~j4+mY0u5#+@ah@JLfYbolAX5qX?`
zZU_JCmXxmUmlu1z>(3|2zu=MyFr}2=BPM!rDBP=XK_{+?F?ndBO#eA$y{A~gL*Ife
zUpZLWPZe{IU>HIiI;yJhno_#OOSS6$Q_ks9C?VOf`8w;3r={B?dqVZk1nH#1`k%tX
z=&v7bu-y<da)JdO2yl?RR6ARrWNUp=lk~b!mP48o{3&!B8s77vh>e$s+2nuw*4u(^
zNvPKU%U`BmCD(5NKEdw<n2L!VwjPUcKH2ytfLU>f(BU36iuq2NBdA|*@5<K3_jx1$
z2m*2fD?O&c%I^?u$Lg3mIZm!*3`LZd;v@g)Yd5w0u$5lHr!0gT0Hf4_Ic*fD^d#sW
z8=6lsdAs1J*G1P4${dAFNQKL$`MKbgB8-Pmk)33L<sRE@suzcv5}N&X>-RzvMrW{8
z?;T8RDjxgN3pOai#P}2o9xRw+&9eU6jPLg7;?6@#O7HV`7T<P4Ev>;!QVWo$<Z3R~
zV8XCtZMGOrx)~)HPpyE!<2Rq`lgLM7!9*#?iK7X}+Ha$ZB<eu8@~}u&&SbmRAq;1E
zsK)(9)@g~6i#kyM9%v5JqE^cMW~uM@1q-C-gHL(Ewt-xL*+@SZopIi{kT805$FTl>
z$zn^<>lvZjt$Ym8X9bE=YNgi*x<^kus0d#`f4>5rWTc|>-*H~Ksj(fH<7o}0Ab1{A
z2;9unV>dQ!JC$Dyk5^kb|9;3<uk7!lp^f%-SId`teYY4vAkOL44`QR*T<hgga;5K2
zW&h_ahYEP}U(U|8@w5n&5n@<pn`=o#=hX-?&iu_WYFCq#6U+RVx7Oe%Pg7=kxWW(R
z@V;!CuP2RD01>aEz{C*h4tsL#80_%Ny|hqzmdWFNT;cs78gVwo&9x%MmME|ScYhbw
zXIPAwUc0+mQ)KuPqhxehjp|#1bm|{CG_Pa8pA_U(Pz=x6F#JKfSKnVsKkof~RXr(j
zt{tu<PnJ$i3A|YkBaa5BQf{zgNHYA=5OW}Q)bs7?wl=d;JC_i-bN}fUy<9#nxWn~@
zKAW_Ob>5vWsj<S!cYowU3L^tv(j_Uo%;<`MAQ2r>*Miu#vPlp&y)#E5zfz$ne@_|v
zzf<$yoM}8I48a>EjDaa<Oy6T5^>6T}K8ePV6yPyHbuXpFUz4d|c?k3K=MZ3L^zCQf
z5Jq0n8hpgA^C02h<3!Z(m{F??Yt05=Q{(RSi_?l21GjKg_4h~}I_ewqB#Ikz?_^$l
zx@g%@N1G9h4emC02uQ-3_o>y@*w_$o7CkVbr~Uq?<li2kd2okWP0kv;15VOB4C?Wd
z-3GT0pc2)qFFE2!Qb>+0R)$X!2(%d{+3yTj6p6CaHsRyx1cpSOQY$J~Egh#|52R?V
zfVY*R_ehOg*qbxzXTagj3S6kzerv;Il#bwewf>v?x(~vXY0%L7v%G!W>>RclfYHm!
z%}0F0=9Ja<>C=BaRbYFMT`nm|?#$rwuwG;j4J}M|z0LozIoZX@6&BWmwJCY3z)S&1
zJ=kRFz4OxkzDiWoo}%&}TA<;HJ`Ekf`IwFK!Q1f`=?{-Cq7Z|Y<N!H7p}L;9yrMME
zbB`uOiGJCS76gwP5u0Vr=YgHaqe&|LAkt7oq>$X}%w7uiO^M{>`d^?*b^TwzKx*oQ
zM4>by0@{WV((D-bhy9?iyPqei6UZr`(Q(=Q7<>I6PXsV(y7H<IEArg^N1ks}oG13N
zV%Q##fBEhf7Uid9z3p_aU9PL|ey*KDDc@^>rI5V)pDX~p_))#DY>81|M*MR!%a3^?
z;T($np4dr=1skRPh=~QKd?BaA=d&}(t$X0Fh}sg00u$ok7C&ZWW6z~}BoVlQ3QZAI
z!2Aph3@l8Y^!WPL%yGj=Xf3Aeah*>r#nVG`kHf+ko5`_!^s+P2mw0QzLcoaZI*{M_
zE9!|7nu>aZrGWp2FEbfuva6qd6CznMtNAiYy`1R2&4-+)>fs@dkFhIT^)Z=9KTZC3
zK0|x#3uUe%hkb5K>dNZ6X!wT!LKb!n71mU%7g;H+Qz$8hx!>5D%>}5G@rCIyJ3GKv
z8-YsvO&e0V|6<JM1u&Kr*1i2svm}Lc7-Q`*Ov#0fYZP`$57cQX79jofb)XD>YcMNu
zntw9dn<N=XR$?dQ7<9<a{HBOe5fw0u|M%?Xc}#n8#YUkL`{}n+WAqMtKB}X#CWyK{
zD!BEC)XrVsRz21Ew;rc)9NhoK5j%7b(aaEO@P0;IonNus?f82I*Ne|@rhhzT54lQP
z2?`EBYNw7-35;q@uvM~c43N_I!=U#9+TVWY@XVeDhij8cs7Dck)rrR4ES^g~j;Bj6
zQUA^fCRH!CNq9XFKX<?UjV_W0qfx+$fo8H}!m+0mEwKEEI8Hnk++nR(NFg%Y26H~R
zM|@-6e^<q)Ui#Zk#9VfAb<&d?7R3jVsKlp_1(>3SFuDRCBXCkD)a=`%z*P93!V&4>
z>!tfNJx|5jcjJO+fDz1_i)00?X%sm1xrET8oS&a5$|^L*8=efwho}P2UD}&)IML;2
z!)z)<6bCH&gm&Usqb~!oqk3F=lOTd(U11g8tpUey{U>EN>AMg$Y7yY~|M7THJPT_M
zOrg*xqk`4?-{40qb<W4(V}%ancKY#SI~-zZN46_Na{|C$N%g`Kli4G7-A%%6WNtGd
zdhe|VdfBz}2M|_wR=piB&wW#VmV}80Ke1<hR8oj5o%@Z`_Pb+I448_P==lPKoNQsO
z=tW(ZcSJHe{2k};ncS}ST&8>**ZOdA(EHUQ%QE$Co7G{119N#zq`@!)7k&-3zr5Uq
z!FUp&XIFxoZRJ4dFRhiFxx;g*)foe(bl8N%xbljBEFPk|XBcAgJ!U@bBTxDT^Jt0c
z*meE#PWiTAK6Xso@dY^VVx-xUb_R=oM41x#c|1O?4T_mI0gak=s$(b}Qo7Vvc_sg+
zn;-vQxH)oE!UP;C@NZD^Zo$U_yjfWd#NXAZ$2*jHDBt7y8Hik1ZoO0=ZWj|YUr1?A
z%e<g<Q|DI_{iClvWE_U^#AyxrD`w8Y(oqJElt<v;4@0g5sZ@U2U@YFCws_ay<WmMQ
z*`j>$XzdtVt#?;~;^lb-G2Xn464^!+zY(=b+fbeEGI_2u^-?tq;p?p-)ejw`bG*3A
zMPSl!4RS5Dl=~5nK-{VTBVP8CH}|T;GOrTvyhw<9GuwuB)vbx#d)<P&@rAR@;@i2^
z=d1ta4EX=v8LI6%5i5a1Uh~20@-S^@KZX`Ngx>|$F;^733+WSOiR|EI3Hv6*(?9D)
z!uvYAkfj>%2h)x(o*S_@dT_nFXV%2Lm7^ylQ<*z4`2%UrD*mFuVMo0NHw;8xTF7>j
zihaNPyZ#V)zb}2}fJ^tykk6FQ;4|0y&fzm`H1w~k<*rpqr4X;v4^p)Fv_3ulBaN?z
z^33D<8^Qp^hoJ!^d8VWD2Y4w=ENm*hDou#Kenb!uPEU{nG2ma=4QVgze^B?=QBi&W
z8#pQg0wN(GsI-&{g3?F~B`IYgIUph+F(^vIp}QoN8W9vxX(S{D=`Il@heo=G879s>
z<NN!$Yu)?j{pYvtI*Y}Ellz>#U-3N8e(l@0MlZ^Q(D!{yEBSw)`X5^+|KF(#yjRLp
z-Jd)D?n$$u^RDx~`|r9jKo0AAo3ULgt@zE#M?W5wQ0c1@D5=&RqyAlYuhc_5=i>9Y
z%Ri}~jp>d5->IA52Vfqn{gtaCM&Buj_^Gb>SX=+^!_ajfn<AiU(>_)<mEMid8HTvx
zw1f=;etts9x2_xw#5UE+l*Rfe)%qn$T-&U$PHd;A_jwlW_MTgj?)-eP=5!pQd66^w
z!!s3a3h;eNh8?{l&GL^rTZtbrK_?=Q<-=g%dix?o2tu%6*J6hJK^Lh93ga&1CL@=D
z9&ij=5J3Vd>qL6zFq;h<hWB|Cy)ASm6(7+Qqa2C48whh?^yKRpaz=URM3Gtz1*@(3
zjOIPW>*q>260J6NvhO^LAKGC$Aws+U9@7v>NtQy^hxpJy0QxWDEt>bl%WJC4R%1k~
zaW44rLj;r5#|E=f>#H#<9!L3i?lvV^pUqGe&o0Rsd6#prFY`s(uILi#Gf2pf-Yxu^
zm`|%ur|GNUrB`a|mhRM{r$MVj5(IFodfiB8Et7PX&!TY~cjv#PXY2W7z0NB46<R|c
z8l7-V3AMon&V`HVy*Io_>!s&Vo}E!@^8He5RkpxC7WMh%dm%!`rWeB$KUO{-=pFw&
z8F$Bg;LSgNRfgf(Pw2YmT5?9r#8#J`AGmg0xv{DPF|Q-2%!pJQy3q?~<_*`x(#cON
zYxgGI1KI;ygBxf-9e4d~sC(fn_Ff;{<%e12I=u?e9^_%^Cw{22zYbTcy?;A)xxqjF
zOaJ47Wv+kEYWgdQMJ)J73*Yp$oc5R2O<KR7iH*EWfLb9!{OY7bm#%7M%e<XB@I*lZ
zp8s5m-AO?k+LJ>1EnPsR|Gwnr|7Y_KkRO0Q(*xkay(#mb^%wz~&sUX3nA*Sd(U@>g
zKX}7bV0vEgO7cR0z3A%_&PxjEy=iCv3he7ezZ6|ZMbHI(<<s`PaGpdZ0A=yLk}0JW
zcN6Th&)Sfak6*rTnD-DN>X<@dR=$LuCBDX(E)sKGSmdTr`a6FHo0npX4^E{J-#{D1
z={p*F#+bqgx~P0f1)Wj|b|PO9pJFczr+mxRD}SN+De%9|ihlhIADI7`q4^4!|FSMf
z|H2EGmzE@L=%Q($nqjx&Q-vZb9TZ3<OPzN*9a|F-jjg%I{X7MmQI*UX^kz4S*nK;t
zv;xMK9H*6@a^+@Mbi=(5Z0z9JO$zr5%g|GvveLX~d6IFfcl?xar=%hEO~`!=7C(ks
zV-&Iw-+`L3vYHV;8_so>`P!w;;klXYIA@=!`a=8sbn`FW>7g<5Q)_x@Ut~RgrhXuC
z_n+mRhuh8%rKT*Ess;xgmi`n}IQ_H@c8U@x(q2H@Kw)LY`+`)q;{A3gnSI?9EG8q_
z24m3efns}X#!@Wm0mmL9N$U=`naMr9m`At;^jZ2n1UJP5^33Iei!e*;msHpG0g5vu
z7U;M#-S%r{#{WAmcBs^!9egV2od%+Z3b-gF7oatcP@@9>-^bDK-+dhgh>DTP2nONq
z^HEWoOwG;keTZr+b80X8zYA8t$d4EP|HI>za)9Gr>qj4le>>%UZROl;a2(^Ip?c%U
z_vhl=1NmE}G1|Vw?B*j3_JcN)_lJ|gt1Heni>v2S9QdygQux}11XfyTyk9Dn991qQ
z(&~WGA&?=@ioP(yhu8kt{ANO`Y|kU2yOQ}0k?u2#_@!GDyggb%YOi}OY*X8{A>(Us
zR&(q;c%~4Fb{Y9O0|%a5!Be`Nir7SS=_JSYR5No<Amg+xH&&^#7KQPm_$)TsC;a%S
z(aR#qHd9=8+td?uYd`9jtWm#7Uwqx)>olrbjAEvSK90yW=8tM5SlVgrXEDtkgO`K{
z)invM#zK~oPZr?hM+nv@X4`m7laYY})u-Hhh^vuUxq0S_`BgFD3Rv?Qn=VpBoM2rN
z(ct=G1q9G6=WY8eNniPhlQ8+GG2<M=;o(hYrJ_!TM*!tjrQar|VoY}Wg>oAr1rHeB
z-(z@r+uu6xN3?nSh}y#$`iw)a&xO8^iQ^D#dm*R=zRyviw)_Tih}k#WQ4{H-QI&!Z
z56x<%h3fB)zq^9hV15cwTdIspAho~)s)hG#)oDcX)~^}t%*f8LSD+UFK|@LD_qi|N
zcu#4QwEN@3H6NU%a<3xY`*R0liW#S?)Y05GbAB<Rd*yL4Ak6m^xJ)~0vR4KrBuqkW
zPE;%==c7c}J;?+7Maxwde*B{G=x$KQgZ29k=GPx{9X()*g`6K71BZZ)rjTmx;{tu?
zYrQ5P3B_X1y;be59~DX6xFD9``z4a>d}AVF&kKHF;WH8&5hA;4TefIs@HU%_()(L!
zC!_Du&$4S9_M@BcJeM}kREuW8sFvJw4${r#5b{|OrP0?-@)gg~7)1;Iye0wvBCABb
z{4$3&^^u3C^kVpzAM0=|hwdAK(DFjbmV5!wmZzhm9-a}Sp=3h1|5S^hAMMx^*Xf;1
z?B<haBcm60?mq=|x#Y?4MVMe0cs77mdffpB*A&>Gn~8^RZTpa>-%iQLI(5kmdQ~+#
zF`K0u&<`QeMrYTKe?ai^^1T<IMe;05Sc5-2R8agBX8rjKIsRbRJr4?Rv4Bs-&x6K-
zF%g2exsMCRMr@E5e!Av9{O>9D8}vM%0`@>`K^IAwA(_Y!kpxPBq1R0=URk4&NMqR3
zWb2k>4SvR*xVHo~jm$6Jx%U*XOsgVcdj6odRT@GiKcBf0p?Y4rc{&ZgbJ>idfukgC
z--gYmY^f@hzD_7@FN!BC;|qgCNXm(kJhe21K79#=W4P5^7QgtdrnqKSfjd~mw+t7r
zpHpTM>4u-a`kwBwQc<#KH?M8c(?Y&qAt{H6^3kA%3IxLS*$8Q9#zaD6mNmp!=@Z*k
zvBgmVQqikIJ^_+YXf1YE5U;`Z6i~nN6u8Qe3EV!r595mHiJ-c^bQi}f<M_Pg-o%A|
zkXBzvk@^yjH&|aMp1_nr1F@qJ^I&=7^34Za$q&fzmYgQPra;RL&pVimvIjp{2_XgS
z+0vkpVFiqzmto;IA@YOCFaAWyI|NQ+D6vgAmB4NdNfw}d*jT))_-E<X%PV+&g*QY7
zToUo4^wWC`($^XHl(L@!DcMxg6tN-~(sje`+nT;K?`h=0((ETGNm}pYu@zNwJ-1kc
z{EO|=Y|>1_^`4#eHni}(p+<ywJowj1w#KhcdYzK=Blp&LN53+(nUhVI0BNo3hK#}5
zV=cn3OG1NAy(L0q3D*KLVfx;$)CBuBSdPhlcJ=1}a|bVEN+M<(nzpwm$KA~uK51Cj
z%UEZ+3_2QJ3;%lR?2+y2-L3F<4|z0-<EuLK*D!II)O)pO-zS}LkdjdqOm!m+5$0*1
zWvumT9I6UaTOOVY{}=B-QO%Wb^UrCT=8GR4{j~h_u31tW>p-uAEMdET?{m1hZh?$-
zO!fax`agwQ;s5g|HB@71@Q2Sik3P3OSW`N)?OEI@@F-`I@-I(f@`IqsH(#{#<CcuJ
zD`M9bn?9b2@lKnLI$?5@<e~n|#!RAq!z|Mc*LZL`wctS<1fK{(C^jNJ{C2dr`J*cn
z$ROcGlOR3FormajC2tyOJg5l4r9tYJbJ36)HTwUP<36zCSs}PT+LG_Li}3F!-}zz<
zky5QZe)GCn`y=$DcSyyCB=c6|Avfmw)sF}h$(7?4$=PQmaVI)<)`8hobo|qNt&V~-
zrKWw{pClD}&d6UqGD;1DwAv3uUTHy)*Lg7HqCFG<=CHhY8FKDj5~#)@dg={$M{N2@
z5BTbhd*pP0^Ockfg?CjO&l&EcxH((+K?{=CXU4&310`DGo~U8N{t&_R0O$(YL|hFc
zB(_|HjECS7P&;)Yg7S>OAp~SUxf@9-f<uaPhG{?&ZX;8AB1xTQDnPUtU^&|llLkL<
z1#xHdsS8(;bkk{7rNOIlML6w?CZ|I}&!15@TmpJQPu(t&ewd{kEhGxb1ZvG4N%OM#
zoX_mM!FHFA?HM(;${NYaYL9M5rDa`A)E1N7SY}zC6f+lv>)mXQ_pLE%7>qbPS4Enk
z{5AzV)nRB28t&E=>7(QO*4OeT<(G%Pu!QVjfzyLj2gb{Ew-POwI_bKLZmo=j{<Tw}
z5>Wo0tf;OCxiNiG0a*cnkfpDH*~Ya#=_PfXzR(!IBteGag&=*poKLgEjS@zl5rTlQ
zM<(DzD#F!_@m7&O9ElX8oQNhHrSqaEVv-WlOSq@CcjsXdQ*&<iqeBFX14K;d{~ZW6
z8j|z8Unf}>RK>92cOxfR7+9FFBk|!z=@Mlz%$bP$UQ3#e?Wd9G&#{y8bC|#ijaAzc
z%WX@!%C8uIILFs5w}BH>aIxKTDEi`9l37|*G9$I7mKDxOb9_!!x#_5cg{yiyrj7lV
zu!{J~txV6~KG8Zh_a^VM8)%llqBjXw-c=2L)jDe_ou~xS9U9)))?kPf7a`FpGlL`5
zs=O>*6|hsMy_5JM3vLQA5Hr_fsN~97F6hxPF&)4(y~UnJ-d-9B)m%>_NRY+(d9<Uf
zIOM?PeN;Ao4&O2a{w9NF*>v*f_F>C_NMP7wN21XN(sJxKq18&KAEnObK1R5IfS9By
zhB*?$U7FiJJ%06ahd;y|IDOh22-b8Y-q|oR2RurlgxD!?4Yfs1jg9Oj^T=;`*iP^C
zPh30Lf6}|@Q|YRTBFVZ%%e;_qD%r?ehYFc%IwQvPbpyL6z8M>pwx4g9e`n#+7SukX
zs^HF;=`c2bY2}LCvTnJmg_`DRhLn-s+cztQ^)lbyX`9;jJX_mk6H*iHqPa*TNq#f?
z3t|u~LJgxbjRLY$D0Gbrv8Ir_%y5e!FyY|j)^(<8955X-oj&(t<W}M@0=*9NrBnGh
z2hS_qjQuDLGigxRB6T8s3}CTxBwc!$hjYL_zN1k^TC)ycfhW-x1NCA<fwh5MprF%9
z9vVhVNqyzg0~~syKN(~wAA-OFCI{NcJa5xXK=8*XA#@}U4N8L}1W`YeQ7HK@Lc^{x
zWdg0nB;G!h!pC<fBlOknlALqb_!cm?Ik(Ep6dEIk<*{AvSnB$79yeK_QXC(+Ko5O_
zk<PYGSTlYp+UI6el%I@5^UG^I(QARmOx?2y$L&9OqF5(O2Rj?ABtn{uuPLsY=s-UC
ztRS`KzUiUCiMAHm>BL%j1P0yR1^9bN#&S`#^KXbkrc~#e)k%?r(gIF#jziHU;73T;
zKg6TdMM9S)6L=220o6{m1Bt(9erp^Ud2z=mQC*!!IFs^l9IrGFBqTqrATt36ASP9}
zz4@K+?@Os7{U~X$fJ^nhYGx+zG$1e85js}8EBHV#I%I(#%nCbiIlsQ}J`6=RS#oV^
zB)Lni#a}jJ4k8E=G<Qf2U0Spe1OyJ9N`*t0E)hbtYHQ>!{y7rEU3(ZK;{9mi8_mNd
zyIsv(Z;dq>pEnWTu8-4W&nS=C&UD2yKb)4+DEkBsnk>~9+@BxTL$D=c9?PYuSFO+m
zs&j=C@JlWt3dn225}T&vh=upN?n%akCPBlx4GO{Oq5K=GhB1ZShJ+W#5-_6rG<L1y
zN^P<lr1&5=7{d1FX!}v$N$-y`p0Wp+=xrEnt2z-4HWCl{e-TDxG&fM@z{p9;7+QyZ
zO^%yLqP%&C&j<uVb4E|H#?X9cwpE;oH+<q61TE&TU1Llln;?#2m=hR_0kLr{0nfK3
zR}idAcZ*>SW8=J7Dvl<w#APi1U0)=Vvfxh!A$VH1fJTdZYUF#qTUn1KGU#t{A59PW
zPBmOA;BPF=Dtz1Lr`Tn4JMl4-p;u_zbkk}%b-|s9S4NvOz+)>SB`Zyc>KUFE)afu5
zjfppe^HghaoihqTODzf!(F0fc#TJkuXRZnbv49bAyV=XF_R*e_VLhc4Km}NVN>f)=
zd<sxR5|~2xKmqAcS((EtQz=hg*g94Q>?uvaY4k`mAA?=a%7idGk-p+k(4vM$$Mse+
zpE)4=01HdwzqyZ^_U{5mPQF6Zi_lI*S|m9J4eaQ=QG~WG$NhuEO?Z82PS6M;)DiL`
zl2GRog!)`Rs+pGD1<efPWWceLf5tf3|4uRNwKb4WbAeQaPt}a8W}_M3d09JkzbE=`
z){J|^mk^$3_qKK;j6Wq-a-98Wn)sDQfFg%qYhj-=ih%viF4soKKc$(JcjBte`7P3a
zR{B7><*d(@B2qZa{(AR?r7OhOm+}g9NI}tuMo_TEU>J0}i<Bf{4`n`G;1%vJ@KvHY
zsYXCG*j<jr;h&?t>G(gF($apF#~fHlrdLqgFv`~7gLj3GAz9ccqQ=lwB!&;~dAI0s
z{9L50V6t0ze?%k4X-s`34~_bQyur=Uj|zDA=)kBS1+|sze4xK^!Lz5&6|A7mfuR$6
zw)yW(qy@bk<=G+k0or{n<p^TG@9*tK>35ilbNF+oIb_w%qw<G@M9>8NZ}<2tU0LWh
zJ|&+T(GCA?(wSv<vqtAV(Z=UGQZAP80NtDS>J=MzdPCF~AViCeB?3yHMTqp~=fR*0
z&0jS&2%`9uzT!>9X?2qJ?o$l+5}?5H&oR)1MBG1M>PN{d$I}%`Y3gV<e;|*GOu(6_
zwjt3JQ3#oPm=p0@U7|Vk#h{^3Me3@fR1z#kDM&nrd~KpQtvSE|Q`;zQRzrcmTvx>I
zZ47D#M@sx~BKuNZHgz6#*(VB*@PN)`bHHEu8!W;ylKL|^JC}8|f69r6@Ir)F((K$Q
z!${w#S!&pgW$H_`F`{>M^|i*2u1~*2maSF?P%@ZnPEQ$VE`fOQj6D|wpBr_6kHj^Y
z?9RvfdteLtBUQ`1<Tac};oxuW6ArP{?{ubr1|9G$Eb!h_3YvqvH4j{j24-fB)vpQ=
z;06`2p)5h(3RKC>dB$!q$jw+^Quv>y>k*cc`daIR)Qd<c&xKseyz?8GWnkE?3rq#M
zZ>y!fS5yPCDAuD02y!nOA?P0%B@4KI<m`)bB+==siN3it40+T+_pdVGC_%A7$Ne;=
zQWc5UT4tBe`8i3qUM*`qh4IQlvm;3@e3*Rpy)g2NehziELJRGF7`z<km08m=a8jx+
zU8gktcPYrsOQO+KxT8DPH2ksXZx`#w!MO}C7n$-Kj;9~I^)fOrC<}gi*l06tBW=-p
zFlB#%@FFsEOENt(Pb#ft!dtV1oY275c)KY0qJR()?sFm&mpfws3i`e7^!x}02y@*u
zvf;;zf*Pa@f{~oSK1zYOi;IGSKX6#`sf7B0#IY<<5VGnutU`@Wa$GXJ7Eo7#+Wu0a
z<)J_W9n!1grEA|^a&uE2X_7m5H|xNKOrXwUel{!+*sp`)NZUIy(5vcou#$Hot?3N;
z4H0_Re%{c+{>cQ?#jf&Byc{i4Gancxd)b~4a@d)~pRFYWo?;1Z7bW7Erj}2PE*4G4
z=5KRjj4ydex;{?wF1S<t%C5*poL5NonYXvvdS7%zevV~U(bZ0HC5<ugik#c^b?;&V
z%<7&fso47I(sS$F{9S45`*1QwGNCK^lU_4yq+R15L-5p<?{y3WMW`kp(OJwJ%ayy0
zw~n2O>>&x~hv*Y_^gHPIldk>wSoJ{KIUCAnpp0hh%zxtMeVC2lGSD0v6|P$1u*Caz
zI)G1>){)pcBW9D5eZ4d6&rNYq9}2{w&LZh0Y^d|#jj|!xlR|-mGo=Cae;k@m7l+=3
zLbdweqfq-x4`Yk!jWU7c%hI5sTj&b9<bo~~tiM0vsL4DbGI^?RFoBaNl>H@@vB)nz
zm$_cS7yG)Eo316q=H@Q=xQc9ld)>*yA<mPra#807ZnDT>>2zOnaD;-1XU1EzS=HyX
z8P9_!1ytU|#e9C#Qz<^*wRT=TD|b-k>dl4<Dpnu+(~SQoyV(yu2uFr=DRp;$m}?FH
zCJ*JY@XW+As|r|}wWbb6?l4s4U+9%eY0j8UxDKW`k|PX}DPtV`0nI*TZLld0$xJ7r
z54nZF4^X5)nI-^9c522@Rir|kLp%NX5rS0xzfhzY=XJL+V1J7$4_EV_QH&jfSCLpe
zbjUUb3OwBtsz{%YOp9S)=Qq@SZk)u8@cJoh*fP;enQ+cc&TF{ytj@!TN|=$Ib<fkA
zX*&1$6NT<y<bFA<@UcT^a_^20Lh6R1f~~x@qe}YbS0RPN<R1>sJ{ox<_qyCid%pl5
zD6+j-NK_Qs$q&Y<I<DSlyWWiy5Fpau&MSxlEG^cvuag+gK)5W?UGJlD7wI<JYpXY8
zIgn3?2oA1xVIOsx28VRhS^gJJaGZn2v+X5m@^JV?_gI%4S#--3on*&^oOj~qoxf{h
z<A3zU<Pq5qW@~%D)S8!BYU5}>p9<13L*7Jf=mg~q#Y}}~R~d>y5sR!>p|?(HD0E|!
zOek+=@Jzt@n01CKAazsr?h;F@^Lqh2XN(|7xz7g;Unt(Q(Sj_N;n2N?pF|1po`qya
zRd%4fsbtu>xz_x`dh4zmC50KMj|y(KeOAS{(wFqD&U3Eo&AVGae!sb%sBXexTT)lX
zaQpTwE$_upCEWZ91Dz9{$oKf`AC=&!w@gQaG^eFmR1@NMGYD$K$+8hGYB#T589@bU
z5GaG)XUQa6636t*T7J6wSMVFXk|hG|4Yz%|z^)2)d9o0NtkB|=OoE00WIl!n0?rzD
z<!vO%rs4j<jxkL?N{v>f=3k0NerrjqqbEcS$m8mfqcOzqN%Ox{<7RUTYsW_7ve>+%
zPCc!^#y>6$pZx1C$=@MQwI+9Yl9`;!1TR3*92j<#A-%fT&aGrEU~II0txiD(K0|%I
zF8;0P?W;F=WUVNX_q~+}+IkfC?st;#D6fHJd8Mp(x6bb|bJM3rkEd$+4Zjq7QqGuz
zS&HyJm{rMq00wjLvy<*L3jz<sxJF<hb7G6$QNUH!U>b$r8Vm6MjKci15G*7&jZj*K
zBzsqKkZIayD<$H-583z?WVYA;(Twgf@t1_?l3DdTbdoXwN~+Vrt@C?ka`&V`Pr-kI
z1i2+@8%%DzEs5@}?>0q>Bgw8Jf{C2Gn7k^AiduosKXE3RaJj6SBr3#5p!#bG2-Wv!
zkdJl}_yFAtoeBH`f`kdY{jeFny7-rR*F8nwUAHFuUEA9FzP-KuMRkV$@Je^rM_o2$
z0l3#<8^!!zfu2Jl%I3F-ndJ*_?$X9R^^J2b@D6q9ohs2Qb9=?i?Nfg@E{KxLN>lBK
zS6*I;Bo+p<zq8MAMi)w3i~gjU^OHVmc9G<Ddmy?s==y_m^Hdaf{lCBcGc>WFaC#s0
z#QvN+GxMA<IR3(YFA3DOe*q1qYoOHC`y>Z@t0mx`@X|kamNN6yt)UZMtSZUNyi}i+
z(NY@HG1ZD*VzifMC8zt;KJP7!`N+deajAJt?Eo>(@FjxW;Ce%>i)aD=O5T#;<wqPW
zI3(j884aUn)L1fdaK~ys*n^6Ehr29l!AayBlg}m<Zk(xmIZtvJdVZDFrI=N$RO$5n
z?ZQ?SWtY)>q3e+v@fS-U%G<${UzXHd;2v7t8$X}V-1}?uAPRZ)-o^0jMQ?j*SW;w}
zTzf5tJ>@lC)AabOy8Jb971q%gjCpO3j8sp5jbnN8yOJ+~k)v18pH9AoQRq265OPXd
z5TI&#kwgkNG*M`Sy))zEG`ze(7P@LksRz?qb>9nl3-YJkgkw5`lZda)@*eyT|EQ5t
zyWI_0+|bKv2dcmo|FdT!2|Jr+6r3UqI5btrb{N6vtma?6be6Uy;8&-hWG3K9T7Gp&
zwmm$gf}+m-x_wCO*(c_p{w~!cbAV|+34C*de%Jlui|}M3HTyp7D)T<9E6q%Q3FrpJ
zD){~t1TZ?T`3?qEC;tP6oJhK^yG1p~zp6sS=A)wql0H~=TT*1#Je=+hhj8xRl#h77
zuk|OYmxfbE5rv5A^OV|UX`h!kvUkVtFm09XP22mj>DZi|=9pGHn^vu_yyRC|)aI0t
zyT}l5xaH?(HY?Lx(F<sUvlcSU(|G54kmFf{4XXA;u6n;hbg~*T`#cYef@(sL5=A!m
zVQ~8?x3aY2#{J8se+~czBKl~kQ8r*jddg)}Se%oMy9d3gAThDzl;ScWl%DW{#JYd{
z^2Ezl45X*dDI`_?u{;>x_{J;S>DKr&y*BYq3Wz%bIzzoCvwaR+T3?S9vV{5Gcn@A}
z{?L#QGy-c#2msd)xN>#`6~2eWc7DGDMb-jP2xa$X1$J-%l3!Xfgi`&V=l|#KCr%Hk
znQ3Egju73Q$$~O?(wSmFyk|!u69_V?b;(T_KiPpL18b;5bR(5{$hWaHbWqjF4m2SQ
zx&!KSw=<M+ZX*9}@JYJ+QT^xlJ{AB-A`pmSoARxTU*P#0gH_6>>S;W>`5-G4`>X>?
zS3s5;RqQmyDxtSBWNDTeGYuIwg4lm81WDxaMGu_+dh1>Pt!DO1hb!+AVY4dw0=t#H
z1J!Pp2w;v;5#yo#DeGC?gIm<>qu~8PWjikw@0yvDIak>-XjSiDU!141#%G(;FMnTB
z#~*WQfq^?>IVTpWB(rOC=7)P;>%cz!{mpf{@yDn@<?7L{;p%p5zjKP-mFKcACZE=C
zS97`yOxIPnB-^=E9?4egm!et*YB#w$@f_MY_WA6bb*co#BlK+&E8r7jP`e?FKd_RU
zT!SkP;{l;uu;m1)6!3-nRm)GzL?fmZODu62p-<TgqYr!n)GpsfCEn7HFITSdi){3$
zukrJUy#mm0z<M>(QT04c908b#KM%)V;C8lh93rz{hB0u<|EZp|i8U<%t*d}$CdO(h
zCWY?w&Od+P+i04&i-`aYsd&*8OlWB3BNQbX9_DGK-qVB|5K{=cB=waxGEkWa!BMNf
z-vU)9;6ChDXY88xzR&-te)4Z?+!1U74G}FA|IIadu@y<<n($vy4ze626*5H!X(XZ*
z$?K&Q3-dl|nGD6&C|>)An$TlVq5*l|hV<#+#o~AF9`ySvykWfY`HTrcblKU74OZ0$
zO;U(XSXR2>IdSKQ!+vUS1#`aq-azeIysgnw$q}sF_w$O@9w?W>L6!aL#&X*o%lfUK
z^_w1@ffETt!g+f;bnhBS5CxoIq~Aq>JAvrGU^2{VzQ%ni5M5!=;a1yBB6_|^43w)i
zN)SVc`702?uZugQpht@EBppir<21e<4c0MmOUtWqV&SA!(alsia`_^nd|SBs5-Hw-
zXdruW`H`8MJ?E{bwTaGZSg&=Y`U7527%@5I*7mIN#`sL%vH%}`90`3|7;!<$wK*sl
zlMWRgC{oXe%zc?U;|b<qhG$?l&Lw3(tlW?8coL{ZCX<_rUfhp+CyCu(Lf8@=HvjNg
z5cedE?1v1oEyME1W~dT3{9bV9T)!`o+3FPz2?sYyZ_SQbzhF?DUlo};k39JSgJah6
z_kW2N0tXu)OpRo*Y_vFjkU?-@Ng{#un?|A_4IMo&j}&9kjn+Cu9ztnCG;euW0G^5b
zjiiYHpt39oO{x@vRMXL*JxHdb8=h>y%z-@pt6+W;$=p%`PW9%WHOMH9`tM7V%d0^3
zSW1U>O37FG4~BxjbvSeBWknuQggPuk4qOR*FTbBF*A~#k!f;2_%G-=vO`N7kgu6&-
ztv2w%E$Qs3y9}%Sel8#B6JDgo-|cAlI?d~rly%tRrGBZPQn2?{ymnmhp7<0E5;e2B
z<%iqJ@ltXZk=^9J_}WAqOqwVHMfX<fSnGVw28b#6)A{Wr>{Ni0d&;DAsoAAq7~zNV
zZX25Y4-j|8VOFZMMUg0%0Q@9UD$LT0%S~e(Q1x*D9A0Wg=<E$}u@2%}yjb6pwJE2K
zM2PtBIc}_Tq;Z6SA$aZ3S<Q^C@~v&p-*l*IqXuVQ;dz^{;^$`rvfrL#<Cw=ud<L!k
z&tkr0m6jKGEXKbk6%O(QuJgN$*0;`9w;N(?T@I&TO@H#-)kZDVc#s~V{LP35{jVFm
zdf<g5KMG$FoQ6HuZ|rzW#}AowxQvj*B-U@@+|GwPr0R>PcQf9QAVSvT_WNZG9Y<8l
z$+#0i<;TSj|E0w6vPNjO1(gG85>uK&Gyz*s+rSXaUxpyj&FlVgLkKVNZyWT<B=F*3
zuVBv)fC+eunn>9A9Sd;igt8HbIpY0r4UFY8uJYEaya7$c;CM2B`aF-WaU!<U<UAA(
zH{3&^x=5-Y$tK`GH2%_TIyvjxb~-tiCS{64hpCgZ=_plKqA0uj+pYkuwWyEhjCysI
zaVdFu_qIJ&8q{SUR5_lxvAf%{opTZ)(@|&KLj8PJbEz}D-DBp@AzQCo-x2f1N8wAm
z6)tD^jRsv8ehf~j%o!kGbk})yQhH6TCMXP{%R1W(i5^l5<*URY3(h($Eq>TEp;BnK
z+Z3~#;5z%v57=4^j5M9a(pXR;;C5i5%E8;51Qkfjq2lM(<00$$yWHDuN)}V%>gf?w
z(zxua2!4UTA5_7&&|tnJNhf#f*K#dfJ}y5hOWeWmPx%sWG;q1~l3uOGdk%l+m{Mkf
z1y!klhuhYQTTTdTXC>eD3Z(U+RQ*xYl<QX7c-6xUczf?a>q@1>Hqi_}KWL=>?&9&Y
z4Yy5S(ymnEq}QPQz!Zp8RCyZ9WYxEWd^fG+-F<}mZY4X@bO>~!x2qir?;h?ghIO(o
zW6h>3OR);JWxPDQRvR6h=x2lPTpdUl%X-{4>dC=^#>K%H?A={oO!*9^JTH{S5A;%c
zm67AsF0mQh$y;V7(O*&iwXu7)az=6QSxY<thdjxu3~ukQ?$G->wTea|tvoi4Jb$LO
zed)!BJVGhVxYeybvUo9ZVbiXj^6Q?(eziBJr@*=uWCphkT{<jZ)TM2v`1y|-s^Qio
z2C8OiCfaAKapEfCF=6^oFCT;&DY-~J8)$1xIIjNlCm<2*f8le?SYJ3+?=rd|;9BE4
z`#i(atL_NX-~M**NjI*G*M7bQ4Nmg-?;~WN6)n4D9o1AMHrgRJB4L|BMDS!%e``If
z^m{$ekIpgk7Y2T!veZo;SyrwiRYldXSpxPC8o672jKdVV;N=hu6Ejnc;KZ@ZP;+oK
zXpOAqwe<cl17ce}39E?}Zs>D=Yn-)nUc@QGUMF+cq4QMI;l#Zsc%lJNRnOZrCEFR%
z>g86G<@$qh_H;BX6(v{tJ$EnQjn_haip7(~*{?;w-;y}kvC%t$*_=bBx`z8O@ast_
ziCZfJHqW~+feXE>1Gd4c?4<A33ja8wFCc@Ii}(2O`bJ^aa*214P}=BzD;cE7OoL2l
z>;c4b8GhVHkt3{BuoxG)0?!0GUKS4CR`@k^;&6(b^gt=nKiIPBtU2(~V6LHi*j?jN
zb#m{YrWSRt<nyV`4>u5W0;*)9@IQRP95}bQXFdz4<JqMI_kCZF5(U$nvyOa~YuKLL
zfW734bIO1B;H|9mxoaM4{so!23GQyAQuo9~Z@vBH7`7)u61mMn>=-WObdnC1pBg~0
z;b~<z1H5Y*8yI2Hc$^*6e&FpRFtK}ZvhST#Lu=wDMvYVE9OuzJus6Yak`X)P;4)a#
z@Jmaqy7u^>&jTz=40MLqW5zZ%>$+Kqf!iGs-xde)<vF0Do7+a^H3_JKHILsZ&K90F
z3mjv4)^=n26ma-XWOGA=+pV%}Ek3|9p!d7yZgk|yO4X&xXMf_%DmOpXBPu1h{K{r<
zHGT~PzgUr&>Oi^qV+_$Fp(YaPKZ>^s2!FWQq|IA~=M5MtS)JPFiWJXsAMgLm5s(l5
zHnr^M=w9n8)5zWN{cG*V;_6Ff3{UVRUPx2OE1f#{)Nr$ZTbuJ37Kl2+U~bPw5)N-F
zuI|$Z<j+><i@PQ&6Kjd<>-w8Pi%kne^g$O9GqJ<%2-Nw7B)%yH8`g4BlNrDvLzero
z!EEdOL0hHf@Ygs(Vbe`&J5|`<jb0cbA`uzWPC#TIa=S2Rhx-P2c4~M{s(H8a%c&ds
z+J2eAG;d+r?NFyT-Hv|@8s)~VTvfapAIlVSH@vGcab|Vz_oJwqv0GpfaEfxSVnkBZ
zclcGs@6K=YZ<Q5sb)#qeN|$yrE!@g>vJ(tmhn}%XS)g$Z7wY^|XKHCv_(bE`Hn@ql
zvgynLJ{)bV{j|WV*bq;S|CF!h+N=_`)j6eYlD4YW7-e7nafd9c`;^Zjw@Xgi*kMzy
z4~ZAkr+FAl^Boi8d}%r6I2Vt^EJ(XNYUp_cx0L~SIOcx!r`EThVLIv$1m7Nh<Hm-T
zPR%5Cc$;)Rvi7{dyE>CN-TRE_?tk$`w);_BYVX}M9+z+S5bsB_e*z9#k;GRcs9OHq
z-+&E2!HP`~$YX^>t4z$^b)-Zr$5_wSWm>@r;6GU6aA6?{<oNWEgkYz&UIr8|XM$l@
zyFkXAB=80q-d*9HqbLS`UTs!ki8kEW`45x!+AsW0n)A<tC@mD343;nl_Af*{MhahS
zGUWbsw-_b3Hbe$suAUWVly@Q@fY?3axUM04A&;X<AX-9!!-37AVU#|rhM@DV=#hAj
z-b48d1{vF_=M`rsu8OXDGHVQhau<YUR7%y<;8gEJB;#>>i1g^^?zp74`NQ{8`)yYO
zQaLfZiA1y~OeNayoZMz!4(<@#y`N|<abS#Cwl{72t$2fY;OdIs#?ejrtsc+M)^Cct
z_+Cbh{itsD&6=c+MB1WA+dkFXm+h2ym})Fnx3DX6(yb&pYX?e2+*eo?Q<JL%y&!%w
z9gjG``^=ToxCT@m<#HdFp?UBgiW^xX6z(nwZOVkTlB^!A&y-YIo_jq*O?5uZ?=yEf
zy2fQLD7gCInd0qS;Kznm107=yMFE{Ro~wNF)n<q6ldc6FJITw<r_jggUbmi@8q{_y
z`cF+S13!8?!2wrv#B25^oJ728Lw7SU8T)IiqrQBN*&tv~1NprY^*V+)7mNPh-{JbS
zbx*4$`j_woLyg@pzJ1)a`Pc-dadDLsC2(`=lbu|7C%7m0<q9jY((DZP^9Nm61l2b~
z;w00i1_CcJEjgtA6SYtr;!hGG?pHnN-poQ0Vu;xHi>@=j$Kx?WkD@%f&g_YBmD3Ho
zEG+3py_$F{lzy}?Kan!19FFIL%4Pa4m{l@7F!zlXB6Q?tViQ9EE0VW`e?IzH<$xPM
zSK>D@5AJYQpOL*oI?pNW!;w;G1l9kMZ7c3TxS_#ATg-X?+;@mh&P2KC91k3|EHme^
zN?EU;Yu|{SOJ8#D#4I8J=_={A7*rntu8`Q3{Hw7T6c!uZ9#+5S@&c*o)=;dRXplg7
zbx>ll>4=^<W(Ln4zQFT3_1dy7>*@?H^4@kVOH4s5_F_E<n>QDCex!GxuY+J5>HET<
z-yUh?z!dz)hp~c5>}$VN+1pUvpnEI#TkoVl%v|R28LMD7Nt(zzfqsfu22RnM3gUnz
z%YFKif3P0<E%=<YY6#6g>q`XNPO>1m1>A=iZCy`}<Fn`X6UhYV5)~xrgCHnJ(np+#
zYv>s4JBbb|1Z&g}tGjtzx(Pv^_sM_EKf$+I9PEsroP;WBFMDw!m6tDG89LID^rw;L
zsRlm>FTHiY&pc=KVw+neeZLGT@HedYlYh)WRl{!Nd#@H@-xmu_Vk@^~<eEkA>rBsb
zv~(Tbv%Y!McT;~qgCq4|J$G*SK_SOO0W^R;y6njDTEr-8!BrC2%WJ&{7t6Zrv<4K$
z*VN?5PRxF4#D*vzZT^xC7<=V^_SokT9m`-dSTOv-mSE2cHg;;eK<h=9-OA4>uM}4t
z^lMsuL*vr>TJAd-FxVMDNP%ZR2U<A~tg{uAj}REK+2ob@GHz*UHiVHPRsdcRh~+A-
ziEpcMsfs6VcZj-5&PpHul}h|GlAr$FVlVpflPXG;UJK=?F3qhrUTqfB;tlIp@cq0J
zl}tM)f%T*W&W61jx26;ZZppZQUr^<hXOF-U%yEuyiJG)(8JKJEPIjWBq#}VkB;JGa
zgh{hpg)_qMY4Pf(yA}C^3Inn~S0CdZwJfJU?)ddf|FX%LU(1a=>EkmMvXdmLvdfKF
zM+?sk`>npX3$rYpMt^5RYj(=}XgmW;T`Pa4^Qg>)BCC~|e%x|P$vQV-I9-93lX~pX
zL!aVGD_d;4b1jA7?KGf2_KWv%g}DLgWbapv{7OSu4etl7uLRdvqghFx^+Ts-?m=KB
zmP9E0!1Ro;)vZl9+1~Q1DcN@0L2)i8;x^|y_PhjI{MvHr2;VVAW)7sGU=7QGlFVHi
ze48RH=2QLVWtTI{S*J|7D`RH-ci_VoNZ|52q@b1&Hq;3BB!7w9TU0;}fzc->TDsH%
zff>Y_9uSJSRP?54BAB?mTT)iO^(9_JozU>e;5@Rkdudtr&9R-YJ1LH)U$wMv^ubAu
zwGfuC3q@cH=$o*rjDm5~VeqN;yi_--n{@x;64(Xi%XMf#jCmTQf2QVjB+<aS9jeO>
z-{U0uDH(5nE@L%JrNx_{{Wa~66*ANrA)tw(En41^;`<PSzq0<}NMf7`haO-we7_G<
zOELdH@fJjUd0jffa|Srb>t_OOf)L5r50e4Uh%_U{PAFZd+;{2hEtT$m@_slDAELP3
zqQ^XN3wVbnDWdCA0dzmL+4n%rBb~jQbP4e%J-W}cC(eyrW}nw)PI$t8+UOa#9Gm<d
zXbzoPb>BHek5SZujTKKrw&$7|rc!@!`SR!DNV!bzgF1n?GH8<NrAo=`oe9Mvd(mTQ
z8D>twM3|iGhk)a6ymKCva(T+fFMDtP`h32VcUl<F`~A<=)D1~DPtIt$p%*C@yegu-
zS#_)P_|09ZrbMF(m1udrgJ7x7v=&OIs%Or{RlY7wde^vC&p0R6@c$V-TKM+P+XB5+
zO-LTZVe2U45tVi(+s0mZG;p`{Z#Zm}Dll@MY*$S2H2e~8BzZM3Oxge1+G20`nP6MJ
zQ8Q1WN%&hyfi2j`fHk1FeL8Mo4%-~Imf+wy>iS`jZ^}92c%I?K&i5MEqeu0Oi1GTJ
zVf>aCfD5$>2mHmI7o|$!cx;AC-SFNsMe+AOMqP2MyjWIIPsNK_VC_$r{llW>H;Au`
zTJruWm+E>8;sG(amoEY<-tzN4|Jh@Ahwq1ru!^G6t07~+(v0-zv9C}4UWvu-Bbd&0
zw@8-u>#TKqECKt)UKE;DJdJOaNt>*mZI?PH8=24>iw=G&m)Yiy=z#RbYO&5tsic7u
zt3RA?@yBdSa?7x#$vy4m8kdS<E1zGyn|Xyi`xugcClwy)1@vVF5O$2PmBe{!n8A$k
ziZL2dHHdyyD?Q8A6&4(NX5w4MGntMZ>Zud$7qe2}UMfwzJL9Ke-)VkK#nqg%ZPd|1
z{PzfbtVrbp@BDN3bd%EeOhJmq(8c%s;!tq`HcE)YVKLk-z;;rHJTVz|ZF^3qb|r8{
zm%#a_i*$;HkVbqBMMvkM>bVjx1$EgVx{vB~BmopV`@alitE39aq9Gg-MbG^;o7oh0
zAP6d!y#Wm>uY(XvzDh+Vx_0ef{4gaHl5>^r@b_X%?^k#qFyfHgdMDAA6m+_$SvYR9
zEAW><w<S5)2!O2ebI|R^=^#}bl;-@b7-`r?5(dGGAZunfO>zSdldNI)NN3j3mB<Sp
z%w-90LY^`$T{p=r|Kr-_BA=zx1!|-gV=-JhT9)@OIqFxvLom7W{j`WkndcmQ+}c{i
zi@wQ`h5qbP2=}edd9kMOx3ssTw5}uotkiyw9w3%hO!ru`@61+iAc#`4-ZgchE%>>;
zkBdwl7JY8*9ks8w{2Vt5Ida_OW?ok!8m2fAg%)&KO#`U?RnJPGL}tD1k3b*AL*j9o
zQPY0E103wGabcN_sloI(Pu5pY&7^bPn#8~`qErd_hd}$9`nT5vLfD2lmTkMV1Q$Q^
zY7o8!Ey!^D5kXS|&C(^1nz*R#SDR7eR!%RwK4UL3Z~I`t=6|&S?iVvDdBRRCSvav{
z-?MN|*0au|>dhv{U+X)%{@5RIyB_RiO&WO3x_B+ddznsS{jwCC({uJWez_7ZFS<-W
zM^x|ztl>Q+WH(+&%^4g|FCh6>RvPUFlz%2n?%d=J?LEEIk4P}}Kbw(n5B`<4-1`C!
z$KD9;_YB=-Z=LXNoejVw6r<Odd3;W8mG<_hTZ=sG*4P!D<WhNh%cUjj@1i!fwx@zi
zhaEU*kQ*h(k|6x!FRC}!8>5Tr{HT4SpA98~7_%?wWmLe?`mrOsi2K@2Hg={KG_Dc}
zgR{BMOlSOWAg0r;o;dBKXOYq`eNUxacNHkT1|IEIKIY?vN;u1vHU=X)2*0-ECVP5|
z|5jAaXjv@gp12%#)vo5N5N}vO>#I+^tzm95MaDmN2}3in;@F!nl$oRq!V=M)5qq67
zC#%@TD1oI`M^2bNR0I){K<n~L%Y%EA7LX30$ZnJ&Lll}fmN<I;rRteH1NZB?(Bu{}
zuoZM8C1C6M9+2`Inr#D~|G)>49U=juCy!O?&Td=|L=nJdh*cvXP9BoOp}hYR^<)}v
z$Ny$ns-CYREumr^iSdCS$YlT0%K3xmgoPCezu>{7@$6}LEtOBRWPMa9d2hjyTrunk
zBsw)6DEUr0r{Mh#4{u3{N~@C>2=~97!Pe}hQ8yeHtxz+c$XA+v!PY3|Uf&9XiPBp4
zE)C`FA9XhX){FUKt1)pE-+C^b=CPJOIgWoW)>+-4ydv;ZasK0=+&XbH*&``OZk@Yn
zh!lD5;#1C&#-?MSJ>GO;u#}Y67-Tdx(BWV_NZP`AFHRQ+a!$Df4I)3(Lm12WBImd7
zO^tq2Gp^HL?DnpWUJB%Fuz&Wfupdz@OLDt@ecuNhGz#EB3g@gWqnnm3Tr&)2L*xc;
za4#P7{9%qv?iiHYxiu?E+LE1~>{OiJMokU^z#DWYh7++Wr+)W?#%Jvo;Omj>0cq!W
zu*Y-C&0>4OwR#b~3GO){_v2$YEOGP}4!^%|O6}m`_@5+g#qEYQ-TNXFcgC$35Yvl=
zHpi1bMlPvJ)74YVwRw>a!VAT~fe$Gm1O3UN18b2BW9=;Mb{KUqB`jaZcb6Kr7WxCu
zXe^y9NZqC4rWa9@ak@_+P=K9tZ4ntSw`q^F@N1Vz8gqr%xDU-2uy?a?A&ItIX=BZW
z0W{vX_gc4bnnxcqtShv0eMhUU0sSeT6mFM3mfj~)GdA_ayn21`t3*u<Eb(i(kHqny
zgXcP8pt>|0YtV3bQ#QR~c(w3uLT5^c5sQG<8^^Iwqy46UuQ^*@tR>~n2z;e$kU^S$
zV%r(js!j%9E_&qR)rRsHOJ(!bRI-1eP*&=Xyzf`aH+W<eL$m;POuZ_nb4T7p*x&u`
zai12bvO9^rgh)dvx$n?7`qpz%o~{E*Q<jW~tnR16dPVyII!qgkJm-ucLd<WXptk%s
zd!rOm{QT2`l|@U_U`0T54rM=ZN`v-J7j>)nl~=h}MY8J)aIu3#f0BWCaA`Ex>Tfo3
zPK`&`kwpGY=2rc=05_$A(r{=yvFD>I2AqgYPu?FH4LtkIgw@a4?PhrK!d)7qJV&92
zO+KfnnF-eQIg&O`FFbZ6?Fh2G`f$Wl3<g0`2`Z`r+EaPBaZwrYi~M+=P=kC+h8^GE
z+DL@*K`V#-#vQY$sn`aW)cLwcZ5zphHoNb#v!X<$ph9LFoIP{b>IYNJ58|Ke>{_S_
zah&$-qKs~suq3@|FxZLf-PKZlS{!L$&^dR*`(Y#XG59-?+Yxzt-vi^-aBE8&B|l-<
z2AdV&zTnwhleq=GaUMA0dpV}h1E@jUNsZ+j!6M`q4a%=!O}VXyX&!Z;b52%+)(CTw
zzSyh&>#tvA#mQ|1>}2!)5gLcP9m6nC4lAb`w<j<lP1<2VAxBwR6at(26OeH^(ym_|
z%2qxt%3|=(lso0;2NNP0d0gt<nkvbdD)VyTqnZOoY@Ga~*#HHCH6=LQno$M^_gJzN
zJU$^Dr@S{KFwOZ)>;$>yh|bv3`o4k21@(g06FY7VlX7pYyf%=`JC)qKTJo4xjm2=g
z{n;!12lv1RS6Bmh6<>D@^lS$#S^H~wf60kt2=(6<m8eu-gPHD8RHls5bT$x1_H?J9
zuH80fW`9F?{>P`S>LYPaepz`&-s;-o+t2J9@^)FWf{o4sBuf09<L`TwBS92I*M|+!
zdx<q@n?;fmJLeL6jlNrL3y<Fl9cP?@pAy8P7Hq}TaFEuSI5^S%@`3T?o~s(ib6c^f
zDlb>Or+*B4z81J4K-}z=sFIR^4a!=1*;&~2eR0Je;1J-7D}e{u!U?ToIY_!1+9Quu
zn9C`%-A&aWsF?78SI8ANR4bqK*?IS(2VHs@s>^a@XMf%b^z8A#ENotCwlRAU&c$-M
z^GqQ&R(kdq>Jt!nKX8F4vj=+pMV$=N(gKhNC>;P7kkokC0x$ua0B|s{2a>+?Za?S&
zJud!r{xy*fr3bnn-s3o|?%y?$ulY^*#SaO2HkizT;S<&|k6TO>u#rc*k5i9!KL4y7
z1FA?G0{XZ-d9teV2B=sRvJplYEW1G_!|H4J$Y>OqBq6&FYVGJI7KkCKGZn?a+Lg|}
zAF|mG>i@O_i`C49H$u{}zh81M8a4VnF_M_28k>o)`GM<`xbQ7)mnPO*Sy8UjsPSZh
z(#Vm$b@8p$MeifMh7sd3yTR6L*UL{i^C{~a|L|RYz>BMy1tN2z`+Z&BavmiRr{@#i
zAx_z)g&)G6{C$EU4hD1v?n82qPkxB<OMj9&=&a>Pn^kL`n2F;Zhfo@ZLp%-&R;Nj~
za0>NX!HS#ng}mQioANqOEpB;o*m|%hUKG;cVp7?TA=TdpiS>B=;~yq5xX3NPC~n{V
zH{Ki5=q*wwFGLK?{?7H^z6Nn3ir&Ah&-@M$n<1X~WZS)Z|CX^YYEV3D>**@Ey*j%t
zi<s?+U})*M)$+Ht0>DJ=&879Xz05GEsX>$0&T>M)mv<JgY(<_WtZCq#!Tyq5zx$}b
zbm-ot$wicVRREaHx|tifQ|XMT%N2@8<V^vkM3=pvt(yUg+qNF71K;TbLH&A81Yeu;
zl1tYdKPGo;)}D9v2sOlG;Q;fWb({)6^P*~yPrHw20zl;k&Z083M*g1H|8tE7=~y$D
z(#CY^t9^!LhiBWf@5jJvUcj1IOE+Lad)NCIheOnkotecF6NwB+F6*hC5WABl9^Oh0
z>+FOYirjfh_)Dy#B9wfW%Vfa0YntnwGEk*~ho|rzx{(uJgSQ!R&!!Mn@mo#5OFWPI
z$5Tni=#BfbpB;j%!Wm*YNF-BnU}t(|3sa;_n%WaNtBAm`XSoj+doRwu!)z8fY|;Ax
z9Xm}(%3zivV4+@2c18JsfOh@5mnD#+8s6kj2Hn)W#WSpc@SKAwdO~^Q>)0F@)N$aI
z`16R_)-%Q`puw1rN8Fj#Cm<I<q5Qp5`omv_*B60@3cpuBH(EOoI6eVBO8=X{gp2`m
z9y%rJPAcu`eOQ{u+=s{wjq)Vo))EL|Pb0LKUce1V$or1DulV*$`(W)bNJ&8UHcZ43
z%n`=~d;;#xwGaE7-wU3GCX_A%pN{A=&ymN4jX3)>ZSd|<Nl(V(KRbYl5fp0;>OK1#
zxq^n&C;ySmQx2cr(?XMipfS}81{QAube(U%r6ss~C@mB%NmG^i47K0Z<1Z(;^|2i%
zJI8Aly=)?_Wx0;NKW{B2Rlq9zRo+QUVwe)RX`3Q;o(BJ9IjXY`yXO+5ee!epP=By`
zinrlc0*)~M+qGOLld55wwA#PXnl-{x6G;3)M)mwzrwAuV1;0=I8#xZG5$6udv5jr-
z+3P^3KR0FH0{{e@H(yBvcx0&p@u~TnnW&DHI=f?7%a}z#cIyK3jRh>6kwoCyEa1qk
zF~L@?H&gs+d&?6}bLtUPX@2%lE_x0xtOztw4I_oJ9hsz#mtmlkxFT=XWn}qqzSfjB
zx>`;)$<wxPd_wM)C&urv5ar4_zZK{|u$lP8gcn>*#8)5$mFDTut{dPTmjQpbp2}*L
z+0o9ekZ(P9YWs3W?M`F7h=IjtZDV_@Bz#co(%LT<DixDnx%GYop>k#5=c*gt4CWH`
z+C-~Rq7WRphLqULRcVjVVE6O&y}Srw*0k+BmWiI2yu!X3@B=SY3T+A~+#BCJhGy0d
zqIq3>g_{y@dacWCCC1iqBT*+JO5L_bKgzG3h!8YHp>l>vs@=RtVh6}W-g|0+5s&}P
zuZ2$_O`S<l5ilz9<Y_Xe{IaHZO_i+O#-VS<tE~Q8&Bg!y5pwDJ2>dRA7HzVDJj`Ja
zAWn??_@BP=Kij&Ga?-CN8KB6z|9@)CSpU!ek!RxT1i$^wqUzr-IqP8a(3<Xgfo$4R
zAIi-nz(3hNyCZkMv_Jp3fvlU*V&tO8{UWr|<3h>Ea9|m37DnT_Aed$-7pZQ|EkZad
z5=?1maPa0fJ<aYe_=k}*mN4!Na=?!*6j!EMZ!W32<jXZqBupL~GZJ3Qk@WY3n|E?v
zH!!)<sw^wMcd)?`b}vE;nWmPKhUAnyeMw&Pu0crLHpkXdX>O3wM9IQd!|XC*VKf@k
z6pAU=P<fH$TL1Hr%F4z67kl3w6h+hZ3zBn|oO6;WS(hXTN)ixMau5`hjDX;fbIuZ6
zKm<{epacb%9F-&zRdRAc2@)1|XYQ=e`+i@2b^p9o_tvd?tE&jJy)!-Cr%(Ky(?P`c
zzgK{EG{D2FdXO>za6p{%;1&jr`S4s2MrsfdLdZ2QKFI!WF>J>&8ITo9f{`0P9MJfz
zn7?fwmQYoP_Mf45AR(ZMM(nNp;9NZR!l3qnHE0ORfh3{h!)?g;S?}i%&YNeC=nX$1
zCj|QH($#n?CjCpjC+T{upXpyBx@WC_ET}YH%62ZJN1@BVHZ;ybaS3Xqx;0M3OGsP9
z@wu!G8jZ=`3@b@R{mOTJI-+zbg+^Dgwhjs7APRmt-=Resg#D)d-JpZOyzBTGpaOnx
z`ZlXvoN{N!=wy3`x-e0Bu;$%9#}Qb3{1*8H6T}%mI&xtXlV<D6eO6ce!`bS){|=`f
zSlfzGn`cK-{<w>iw&Aw(+D95JrM!YTP+#n4@|F1@G(0;@gnPW2>7dLQRI2_-2Rugi
zL#$BT^(5%!j8_|`Zq<I@gt#1<0AM^CpoIqZf$p0FP#(l<uJ!EjEa?f*m3Bo)-%gC-
z<Wee_{RCJ^b3esph?y#3hh%Bz=y4z=AEQ_SU@AsH1`Kc5FKZj`DMp(s);6HRW8zN`
zv%KU<+iB>OYteXJn>-RL!vPm!d}tVapNpT{l2Mh}y;JVF*LhO5R-x>v_o~wNv*g{%
z8h%MBT;V3+A$K-AQi2Qk-m5eSXX_FMGV1Xd*hT1FT6@emEE|q$so-P0!Ip6S;M`Vh
zyAq>)9gc~<|1+ZWw2vLN)L0if_5FgZ*S8H5%=*&%U1;`<R`Yw}&u^_8JS~5IJkAgh
zGh&wFyU8ebzf2}UIyY~1tx6`B%}7C{Abwozep!Ovb4JN2u_m!ZVKWBPa@H4DGk#=`
zT>5?X@uJ7kwjcO78kxj@{G`zDxcXM((Wf71dmQf(iem_cTtK4M7EZm+`q|tL_n=hh
z)kqws86xAAf~J7eh_B+1ANDofx1+QhUXYAxJ=iT#EpjL`kC;dJc3_Y@C>(MH=!f3M
z9zm%<3B}37<UKPQk|jYL?llUC)s;0_J>JcZOQ#=9L;=SjQCKlg=UeKyWBcf51Fs`h
z-@dS52Ov|w3-YA;@yRPD`&#FgPm@9u-;!M~we`Wug<%6|o{%2XgVYyN??)1Ei2F3^
z4#Zo@b4c8hR1HbJS!s{RE=uKPuHn4S#os|Fr|IA%&1_6rGUI!B%tMK~@hf{0)9u<|
z0`x>k`}s~jx{}CDXP*a)iivxcUbx6(o+dZD;%BHQzp$8vz-r@B8Qb)$&HeV=Yxb)8
zz8y%&f$ApH*~Ta$hPP&IVILWStZ^wD8jxUvtf3kxg{TQ=0`46*yu&exmJ2pPLk0OV
zA3%cMj?PB3jM;Tl?%qSu0b&)xPH&v_{rGD(KsKEZ&T?wv(5;oWcut14LLq~u#_r}1
z5|?)tNxxoM0gu2clgq}Z)!lb%FD#%=4vse#R2(pFtK@-W%9B$^3!n^34~V)?`nKnc
zSBRy7`D?;ZpbB*J#}0P>kZjssAl4h_Y7i!VtH;up+vn9YOBVGQ+qr61Yk9i3g6nOZ
z+ByO6!)FQKc*+_3nvN$F<4&b?75{joR|acd^PTy<zN+YBiyV->-?bc_@+5$|jwo4G
zRY;)D3p7s`@{ejWYw_NM6b)L-xC}g{fGNZfsWg@JQ{w3G5M4Nw;WfaZ-Go{t66yu}
zLFMdH4vK!>RK(_0E?~eUoz98mlBDb`UHOVk2*Yl)rw>*uA;ap$%jj>W#$13ZSZ+X5
z)iJv#x)Y<=yH~j~N>8fB_%e3Iq#wyo){vD=Ge=3vdjI~y9&0N<a`|L<PxNcgp7KR)
zGZLdKGc^4RPKjs~KPNw1DoSwG7dL(AwW&=Wwc@qGE1NljDgsoY{bOFk_ua}WP^_&#
zF5=CB3>LiRS=O;=8ud-1Q`7zBgDGbUq6_+0pRuJolG&mCUZOKJIsXJ1Ndw_Zd`%Lu
z?qwzJiJw&S{343#o|N3KnxLHOeIJ7@w)>tn*1~qo+Prc28Df4gY=1xNP==Z(C7Msz
zDxGegci#St_sqVZ_u{i_X=W?ZJrBDH=c`PqROZGxLaoX<C^J{+_NkM7v3Fkd@1a&?
z`t2LaQxV+27YQ|p9NNSVWAYAUHtg~5AU<x9ZE-+44S7sTjf`DYf!3`qr87+P+5kQ{
z@ojB3lIaC&U-Li%-sRImbQ%aMKNp|owFR=JWFPwC1`m~|c^L%1S-}UOdM&9d^vWjR
zqyIcvBpRZdJ)wj?jHV1@qhF3+cwgsjBN#f?O&#7+Kt!BY@};+pKIl)5`<6(MLK_A3
z=UwJLivx%7ARdOa=?{eR8`ErViy~U%zD*^^r#X4+2;y_vTH~4?m_~3Gq^8t*SF-aK
zC(N`BXv=S!>s;XDIYPNmvT56vHmHE^-@>oaX!&4S<h%Ta;`|5qSlP7O`JKm9z_?Iq
zYW_Rh06)hF)Ir?OTgv`Nyp+|HuAdkG<vU9!-FsGjtjuKn_Ksp)z>v!B>PeQ52$&_~
zgEbP=ihUV?-8rp1NYmnfd42@tz)=K5P>i6o71+#U>@+VG0U6?nVlyg`H#lD2iLtuK
zJc8=d+buffzw;AIL|yt_$a$;<q{FbWEuWZQ_`0_dc~ZziZK%)nIkyBh6nXaY$6Jf9
zo_~M-WkmX%@^veHRfb)^p>Xe-3u#Js6C3R^412$p$?@D`y6d88!74nt5ZGSebMg0W
z51;-Z+jb5^{AQ|nWn)&rNIe)?PvrP_s>afPjvnQO)<bWg04$-A>DUHL;*~4E`5$E3
z$)deMLi;UjQfuvj$;Lu0BAqDyyaS&t<O8p&=z1oWH6%kk@Jb7~ieL9y)O+yf>FZ??
z3`LmR`ss7{3PQp&QlbUi{O2E97Lj#xe6LUSgNJU@NUNn&bt7BmbcenDjspp|M7j1`
zUNi0b@-fEl6f3+Ru1mQq`mASU-8<k`8&Z!ap|6dNv9Y@&{<>@{M5=a6(WE#d<^p%Q
z+n&M{+Xrcm2V)r)Op~o1d6JLA4i@&U0tQaq&YaIA>oOyrwI##07F>A!w(iOaTp}W)
z7$$dQDvJGzDm1`#%>Ym6$Ptt+;EjX1W^g};q6E?#_xVtN+TIojz<oWm3X5AgZA6dO
zBJ|@|e<RGUE#1_JP1&WdMHybO0cs-`Pan@vOfPhj0np-aUMwyO1z3ln017vH#<Aaz
zzT9oUUO&i_!}*FX=l9~pbNgK8B<G{q(*@6&ccwN{S*2Xq&<?L4-B{0K>2UI;?qO_8
z%_B8_O`a@iz=Y~fwT$m#C_MJRNamyJXjFDn&m`|LZm|sGg?YZdSPypI9_W|>O?lic
zT-BmPbx9s~`HnTrffH#n&<td#4s*b}WAcmM*ek;XdIRyV0<i24d-qTWY4HL@fC^O7
z*s+8q`XS)-AlS5jVFXbGw1OL_mD}N=(Vw29>7;tb^jkn!D56bjQLUiJ??rf_z2aH2
zFSWvp`WjuA$Y=}D7KUG?sL=X2ab|K-LtNf{Xf<sw80d@3S(vKo;Cn5uv$t>)aHh`U
zNc<o$5akXgnLoW{ytPArdb^5Y?^VcJ%MvwZcD}|wg2zUvGI2k$K7ev!vMh?+;Hg!h
zbH`fzkCV#aDC5`l`7b0}?Sy`-CQU0t(tt(&q~d)_wHrmo{nda2m9Vh1em^J7^cE!8
zj}S{qd3<^$u>;97P$W|)6)X%;FWI-QZ~+o?V}pAr0W)jLe)}br_iT7lH|bwU6ks+t
z(7OMC*!!*so(JAI&jqN%+jI^41*4qe*z+|}#1^vpwS`qE6WdrAQVQ?|xdXL7r3Vc-
zi8a|RV;kqj-*Rz#;b-*K(<*qcAV(065;$C*goW?(RFoq(4u=#V-LQu}mSr~5P0&Ln
zojHfgRZL8I`_*p}f9b1sElko>jxba;D(%QE8{CeK#yY9ffw~XBS=c;(?Le>48Gk5C
z$|u8g$&ER+rgr~y9ko`sW&D*w$&>-RRS$E#8L&cWEC9deT~{Thsz_en)nRcGtM$eb
z+F88w!CDqe6a<|qoH6rzR}32WT28!GIYQxE70nSU6@eFnky-xO81k;Y%Cd^{IvIit
zR;u9L>OnCkEO~9bYAT|Wc_8Uz`D7lW-^gt#;-dLd!AAx1g=a|eT|~u~z2+4!HiP~J
zZ~9c!+QmXT%lNHR<p82&A1t?A_CXqlg`o(3ax%aEIYx}2e*1u*buFi^RPq~-QY(!&
zVjD8ZAh)dC@01EfEsfR@+#G6kO571@S@%UbuAZY^?C80k&CKX?m1#0zjGFV$q?rH%
z>vE#usE6FO63%GViz62a{8TgO4Q>c{2jTa=C{3B2HPjO=>(Ydvr(hoz;gwqLaXj;Y
zn2x%@>Akp>y3Pxvt0(ZNC#Z_><8rDU9DsBDMi4CeYEU4!gZ;2(HG;aw>&VHj0n6>z
z>5cCDOIY<2ttD^J$WqI*3L^bTyowcEjpEN+@#<e-2$4L=jZ^^xu|`jKkJGkvvI{E4
zUC=Nm&08^fYS3rx60`C<{sK2lROD7m*lrA~s_aZmcoA?{EWqTzB)9vd?u|9iJ(V@^
z!!3~d7mV*(bIVZt1V*n|a|>Dbt3Ki>9bsdV*WWM5*S{kE`4%FO5k7-GE%PfMV~f%S
z=jVIYNvu6>mujX(l|KQ)yzinjJGxI<JqZvUl=HlE7W-XCRt1ibpgBLv5t8(n?PpF!
zbVZei4&-Kvr=ofi?QU`bYGC#=Sei**k69UABwC@y^G9*wR8%oMJ(Q!1usXo{g(Apc
z8nA`#8dZ!|iLpgcVd5PU&*^OEPvKRCS%zn@fTK{+Hu>{{OLH34N!-6cPdp91U{8h1
z54bAZLUnKS9vYO^kW&?4DGC#xt<b$GOZ$o^z07|<xo(jN2LnB?ta#yWL`G&xsChEK
zX5>3?@(!#J&Fsq{&==k`D~)dn$4&=a8}juh|49>;qLR$Y>Iqrtj|_Sce%bJ$<p|kQ
zR!c+%O)!v9kCd|f{MM$lg*k8z4hr+G*pClaaR%>zCGM6S+Dm+Fll*ApPTEc#EFEO1
z%dizIbp7^!k`jv+`MCkT>K&Nc`_u14UpKw9s9FTLo^E0DI?J(Qx0bQyc0HKp1FwyR
zdo%(|u}))gEg=22H%JnZzJTW%Nr76=n9g@$ta|3~`V-BYfC1vK-S8}pzRh8d)6&DM
zh1o7DkUzKubC^oT>Uef?`B-nThMuyGK*wEb2~iC9ICb4XlBjPof6*b<p`}=K(1_D1
z6MvaKYx<pbKJDChkqMH3bBfISDS0*a4?nCNHLP!QykVd}IRRsd^Th^8`j(5h;$l_V
z5?=C=p1;9HyRPA*Ftm{H<&~WN@`+-Pw{7ohj&&|w?>7YPm!I;l$IG0mp8qpwo{|sc
zBG9~_NFV6WWR2x{FLy0jeCfFVMf=4|%O-@wofXbt_cO`v`;d76iM%63#Iu+lLX6l3
zxPhyT_{H?auKm>@yi|zSnMM!;#2fav(7w1~Of#BJKDibZeJ?wSZ}XH%<H|uHfemnj
zt5-|_8`p3>Fy;{sak2!<8ktPuX?whG*?Y)3ZO_cx0(NK)9+FW;q3IYDKEUE=c&HZj
z&3A*__4!5RtL6%C6%i_Ih3j%3LNWXD3JMAi<_ZT%0U6!ymZEx!Sx$EK-KX<8ymkS(
zvALf=l{th5YnC`p9B5`yFsQd)lA7z#&81QMe96>ZVD?&VU6oUpS^$W=c=3D3A=mDy
zQyRu(s}Xw(@&p{NcDu}hv_FKg#Hvn^pdh@J%-Do__Q<fJL1mtw_pBOAS;9Z2t5VCk
z+wv=?B6`U%9Q{aUntr6ObSk2psh%n75o~)rQvq*`@gvZuWUGXSl`mPphDTk<y;wDu
zqebJ|0PA2{ba=iYTHdkOd_boLE8S~6#lZMQF`M`x0W}@}rIYzR<=&_WVU<pL^F==X
zuQg6ZQH(F>#l+d*1Ic5_VVxhDPLvS0Q|BM0=5mHU&GXluQYz=KuEvvjQ7!g0PDTgD
z^4#OUxpv~A`s3xJ`QqlhJHOgqY`+;aX16JGz0U5V>sLZ)yre_#?W9QI6f_Ym-)n=J
z-BHe?@@i?Zc{D%DRy)Mycg$li$~IJaWyrUBfjY4GdKmqc>f~n^9CS9O>f&2ZfJ^lH
zigdQo#!W@GK=~eCWR0HcA2^&533{Dz{)$M|d06qD3d7Y(FR%@)>g>P-qyjpXP!yJQ
z!$KLhpGHvmcW!2-2fH<0EFtGv+Quq(iT5u^!TNh3*7iBYOf1K3vG<z&7_!f=@cNr6
zbwb2}OfSP%CsSDKQ3q3JCiW^-(tRE^O|szR^d4b%u-yyL%c7mXmJO`VF7Yg>6$5He
zE}L%P(rFZ0=2NRU4J8|_pMPvV_${n(ZC9`TaM&3A;Lg+?za7)7!b({t670T>b~W6j
zmS{zX{jc0g;)l03+)|sk4aVr59TdN*(XcU@Yzn`aj+0b^y4S5iQX>Nrc3DC9zaNbo
z{}g(0I0~z!=FU9x$WDv$2)6(68O)0C&15d(uH=NKVh<Y|O|vmkUk_7=!Bh0z`Kwta
z{CyqnEdd;|BG1OI4cREq>lF~w$dT%G*L(?=+l#ilvHpHmX+p?7UQU+dVKHfPg6N-2
z`RUJ186sLb$r0n;@TjkAl;&l(K5R-+q~LI(PL91(N$9*x(O&*3pz%TZ|9lPC+QJ8d
zMv<{>M9-I|?sen`Y0HTFefQ+N$M~P2{b$zxLu>!{wn0ih>JF#6rzB;egikWXEEQMb
zCWWO*t4xG__WpoUNJ(9gZNe8U`+ms8<1in>$_UBMx}l2)NNNu5!K&;Jo>AnXjo1X1
zOunL5LKk^Np!j+)fl7tOhT@53?Ja1aWIUtDuzgr5zC#&}wC1PisxrK>;<%qijz+eG
zf9c3sv|1}TO#6GY$$xGJ{^w@@XLHsf1G~W4zqNT?);k`g-1ZL5k0@*Jyx#JJuhL_u
zEGp%`;^PnHgk|W*lXoa9ym6Y!&f!V4fs@>}M4XF<oe|GC|4LK0Gr__!&e)MM(w0pJ
z{qN%!>+xS{Lj2PjDB2x2r4o1ORO`k3)E)--(|Cq&o<7^D`=@zod$Fk{F)o%xaR=y6
zcaYA2;Y62|J%I;*n=4aD_t>pT0#@$rm+J3Hl{EdsMvwacHhra1W$NN9Z*cr%=Ut8a
zYf@_?Xy|Ph8gcLbwj85P8XY&Yb2k3<&wp)l%n;1;dY5d({?Es9{MTdSYk$vz)pkd2
zgZpd48@Xf4lg>ia9W;Ul84pa4{;0}V6`Rz6(MgXj=wyl%^jIs|YYYB;flfh~`FYY8
zp$BT1h}&ah527!<isRHGa`N{n(6fn3{@<=`A9f~!kLr7yDL$diE@^nnm$KOwiQJP0
z4q9J;#OsGId3aQwnkHW`&U(8Jg+8o8L<GZkBr_KI`;;0C0(s}BiGy9*&!vbgir&p-
zMFS6TbR+kaDS!HTNYJ8-w%mIaqlp6OKezjTJ9qg-MT03JT#MsgBUC}goHdc(wV23L
zM^ZM?FL#N!Oh2(q(?3tS7Qq}b{Tnmcy$%fM8IlJHj_teQ8gX0K-Pvf0)orV0N~ntY
zhmKe^e&*+Kp-ls3j+BG4xFUDSsc-$nSYDB)h`mr!lH>u0NQju!*M%RcXRnzsy5Oj0
zuTl`26USaS+!qM6d`9D~sl_@??+n){{HN2QNtyG1I^m}vUsA!(Z@4#8L`eK%X~vD$
zY#z);1ATW~GpmYd-#*|u8n42&o|r9`ESYk<H#Vagt#8CMnFZm7C=XCs6a!|4$!m0>
z?D-68H_xU}*-t&A<YqZfa;e|qD1Io?&Vn~@&VYgPj%VumwEc)9#MWi`zIPCfu?on_
zTfkIv^ZBg_5oHSa%uu-V#i>~+P~#2s4ywuR#mM{-_*{vTQ6ac%@k9kODSY}sR^;(u
zWuI)%zTA}9HXtFn4X8g2U!)cxJ1KR>2`We+Jb@c`8)*7mWH6I#cVU<FYqko5c$|rA
z49-N9NtP>WnDEKw43y5E!+V4fSC}PrZpaJ0Pu&Q6+}}WiWCgK`V_@Y91$F<TZ#b{o
z5yC}pEe>ZgbiJuFe_I&I(Y*~6K%Iq$cU=-W{UoMIZP7XPnNxQMHHojEfA{lx%Gvhw
zC`6`A6)R1ih-2^MFWFy*WOn(`B{C^M@S(+vCeXlsqB{HvY`T+z1FZ84^%YS@Mp{+*
zbKHG90IA)dBhm&%j(UjK;6|V);0bU;b5IA*n9Up%`-RO$pJOPo>bv7N@X=xn&TEvg
zpI7jq3iNtA{bTtp!VwH_egtB_7Zk1DaxgbHm8b}e^EpFCu(r2HNTrY#K`BDw>aZ+A
zjX>Lg1D*SY9iaOjb*&(cD}I;{A@$uZuz4eVC5=J32(k>k3XhXu155X*gBRljF-`f`
zSBZ<Un1ASQ!Hsq#{rI7ot4A~f>1Aef<K4VD+0ebpA4S=zG8J5Jy#^_Ngu};OW@(l&
zF-0qv=(wwWepAYO0&+#$Awy+hcX5@qe{|KA*}nV{g9?8CYT#?SZWdS89^vB#-UmQ!
zUIKCofwq^(Jsdr9^SmhEk`Y~=A5Y9ZZ$EGETQYRTFcn7^0Ov}s@y~(VCpz~9+kId!
z$7>E#@|cyhH(#%A2+#@_>PDunq}{*z++buDx}mfUnDdnFj9Pk@o4{Cq1S2s;3~tog
z1CB>2`5VhIB#q$-PMGYKP5C-Gq0Q0roza{J??>S9WhEtjPZ#J`eX+`B*|fnxXmbX<
zsl#aGJ8~4);CNQJPyYaDg80e0LTBKWs&K}KZRDB?e1+b!$g^oI(Nlz7&ncW+%_$?j
za5jFlk-uI$$NOOF&J8!tqrN_&;E~=L)@12-?`4X^*+mGhRPKNCE~olw?j5<LedJG_
zm!vXYv-2jh{Yk%`w~GT`&|OgZ9^U)mB3qz413Q_A^prNvImja0E7`?DsvTfw18-uS
zKLw*4d3yTiIlTLMz(FwqA51dn)}ktNmgQ})92|e8Z7@6qzgnEH1Ek~HVgI%8zDMCZ
zc)#^M_vwMJi_(xu$ERwAZ3CI2Ve@`h>Tz{A8Im55^?JA-HL33Pdq4WXY0!$a(I6W3
z(DB|=8Sj(JPy6v@-QBXZ+|>i}fUc?5LoehP>wX%&d-r*64!XHAuHpnaLs_v==XLu_
zE*~KVvp(*$3e3Rw$vfu+QHf{@k`f72D0($!;=Dl8hrX9j(s+J5TE7*TnH0=EUp#Wc
zv?}R#QBO@Qfa}{kF0$YDS<~Pc@s)|-umjX!WVnbW<5Lkm4l2WE(!dl-M7#;{wQUZJ
zjR_BPk9FSFAf!>!4I5j#NT^sfwB+q9z)|}S_Xc+_)9K7S=hKnsgM=NrD`oet=Fllc
z(XdP$O@pE@bjsv%*$;yzX86?cj(MXS+rVqmStvHf8~ghtN@83}_bc3+j)74~T!ApT
z&MZxofo6IRo^eHkH&BLz*}{!HPhcQZgg*!2Ny;f8bT!lMzq`Rp2Y16|Nc@cyNWX(h
z4Hc=(4x>IV>O>P8?0*8|xY!S_UwYP49`WekPj@xk26liic{9+3Kf<L#QFLa!dP2du
z;G?^=zZa=ol9hC#By(5MI1w8*s`U6V?*||3vYPC^H|tyVJ^#`7l6{??!q^TaFJ{f;
z`Ly5a0O`r@BDzZTGB}hHbq_-YCNqzo%6#T<xoT^evtwT`V9m6v(cXaLze74pfjf7f
z2MNE8===g4$+kDt3D7t~IQ2Q`O!f|fl|K#YMP}qjYv-VJ>8S1KFhaQVHryF@e9@ip
z8b;yLS{xurC2A$b7AFV|hivsLIf~!7o5gCw#1pmSUgU!%3BLEu8)v`2c%mQ#hdh$E
z;%TC2D0KdIW=W@~IkWfGlw!vwq7g1b4(c3k>wANTNcv}sqXWBYkg$gu`;9y{0AjBu
zKcozLW;Y9_OE)1D1>Q<K+7o=rVw$%fN;p8Kr)^>Bwte0Wc<u*0S@pQ2BF#FWv=^qH
zOk;{Lwicv{RgeA~$vXI2v1MB+E?Iu-`n4Lsw2tKZHvK;uyyRQy;)?3@z9Y9@n~8zQ
zC0a*Vx;URTYR^yH8=}1D3Ecc7oFc{c>;G|g0i)J~5%rC`ci-E03kO%~ybpPTGHUg9
z;ICkyBZyzG_p5m9_)}KT9TYk^O9@%((7rCnLqHF2q=o(IqX@e9TJ9eiKmS(#8AC)R
zml8yv>4IwnZ$Z^Sl-XtpM$hF5D&qo|b^N^^A_4)J^Wz(`Q_O!XR8StZaFvx-sz-5|
zkRan<&a+VmW;OSZ3{Mxl%BjfCJ8|q0gb)17aB-8R<W^jW|MXjV;=dmCcS4=d6xd>D
z3%qpKk2$xxB4YCOGzj<_;0=p!?8(|>pOppRq5J=P==e>9Z`69FQR|!;7@Xewf4?nW
zgn9y?+br+)7qrq(vxKS%4E492x#Q=`MJr_SU+D}bG#^b4JKqT07k$*)v#UO`Lz%vr
zS=56j^T^~)F=LU1IQ6wBVcBg)QDO1IssA)j3O@>?Tbn8I-c`Csh|YpleP;`jZGb~x
zJ9it<E6b#;$c1U&B>|3Nm<(xq=|*1@Zh$DJgb*ChB^;nHDvS*-kOE_lh3q?xSxD&G
zHn0r`I70*lY$P&pCiNniaW+fBGh|;zy6_n?<7Ihd)!HB^dh0LyY#8HYSh|t04MbiX
zOzV3|33Hp&XsKB!Sy!0lx-=}=1{v`V=j@mt@#J}iE)Y|-!4pM2%MP&8N62LmbQ6-O
za=0Jd02$=sWkb2tA3fa`i?U!)^a*Jmvw>+H*Yo#wWKCBpNPKHOKLq!^teuYF#`rso
z<UCLwX8U@mRxgO8{nXm9bC(_8F>v)ugsN53cPVF!X>><wsG97?P*b66^3M?NnG6%M
zb(`71#$+?wIwJM`t&Sqe`G>i3uh0Pw`j@%${aoii%j*TS({2w`68XUoyY-)k{bw5g
zLm>ZO?lXyyz1!`<oQEw$fyvrwe>D1tSddX{UJgVY_d6^aiX`tycVtcTHWIhH{0J&p
z_8Y@`g>r<G2G~&A?91O7wqFZB^paxSe6gEMRt+p)lkY#O92_K2e7SOC@kTBTsC<KC
zAoB$JB_ix3MuR$zrjME*sYMkjMzEWTYg@>5ieH;GJa+O=)|Qdsp|c33UGI_8H_m%L
z+cXZdoHl}_6tm5>-W9?+nU6w#9UY`fC8ea-g|FG&^#HACt-(Hl2s=vnwx^=-$JKz5
zF=>ewciy?YhU^-=1XFQ1Q@=^^=SFZJQ4^{O)&7NjwVdKpxFJJXB8Bm-p_}hnpF1;$
z1n=SBOI9>h)%QKu=cW{x^R1Iud;T+|ps+pRr$nSm^@KDR9VBkSuY7>=?bug758pPZ
zk7x=3f9#C&@RcW^`PstUlKsN-0W7k52<I2x7?$J>De%<8e!QLH5k65P2U3efddutH
zLpPcx+S$0Dj}0gF<L6q{=TpX)HTR|miW@^pG96C;45<U1Bs0h*TOUE={*usqFf(uV
zM?VH3+1Y6>Ri*riY*~`yOh=`}NlK6L<6dgv@D*h{o7xXMvGUDDtj@%B`fF4&Zn9~1
zp@Uod=iU{0YSI^U($M!RzxJiHOFu5X7m+NvJf}M5ahq@D$A_f$k0%e|Kz=o#h*y44
z=@BAiOFE2ND7@6dYjH5{!ukq_E*{ggDtpZbBq{cWW9@hNU3yY$5iMYuf8>@h;eCBl
zx>`g8XD!qUuH%tSis_C#aY~`?w6fpvP%t?9982GYX+}W@$4JU*TOb_p$8|113dWg6
z;m_ee56NP_QrEeP5Vn8>cZp#<q&IHuqYY3x^sr@})U}ePNgO>=dnX{@40yNaen3yl
z+B3RH$?2kHyF?Ns5c>xC{fW8i+AD?Oxkitii*8fdg7;!|vSnWyjGUjoOI~~7aZ9-J
z$D)I-nSo#Nv;&*FU8f`h3<28WFJg6-^>t#p(OFa}AJzeuJck50wrUln@rok43s!dW
zo^``k)nA}Xya2oCVmvK>KQe{?Vu>%d*s<w=ZZqMaPWJo=;-0jt6q~I&RJ|^5y^IGU
z9GKi5y320^ndfg|nHZN&y^LVo!@y-2AS3%iXW{u(wfmY&Sjpn}zraug4(B#wfJr`Y
zs|Hp7>cWWjcK?Hk7(prc|2c+!K=en8a2C;0Nb`^2JFNkj8rKD*V<~j)8zn3gQLxh1
z+io}EkMq_25lfqcF(i?DB~JW&Fs#1#$>-L!rnTlASB2sFEn$j9`Yd`~N4ED=g7-Uc
zi;&Q;hphcbA;CtP$I7!mkb9ppe~VI4t=>;Ay9F#A;XBw`ebtUvnO@Whuogr`6!$p(
zrHSW#)RScQdI?lugo43Sat{MLzFJ?bw6qThzmoi&x#9ZK5yWd5LKp)#8T17cw@lf;
zV9B$3sq48Kj09W4K0l>?Z?@G(fQN75Av{(=*ZvI}6fXN0VBv+{r&<L6)vnmWA+o6z
z8z9nCEQnUx2lryX`;gVU<4`oQGwcNzh~{q2yO>vN##6ubFmps>&-~T-%ch!}Zr-z0
z#|UZ#zE^csRLgch5+cmnmX0|8NFa8;y>^|YC&?#!*vG{E=)$>W(#y47GT1*K3}fT$
z0{&eKAXp(dCO#^+gqFk6#`5=-W8F|b^p1E6KO=O)tkL!nMhrHBoy;AuXKV(<8;)wA
zH|)iLQBVhTeOKT!8$|Zw{ZewGmj+>=ipfCi!S4aV0kSHRY%*EbC^be)vOpW)s>d=M
zDW}UM!J|QC-+SYfu|&nO=mpBlYnMG%*`IXpxgBy)OL^mC^mzCTS+(Gb*aq)csV+Y}
zTC9oy-c4w_WFB$qT9hu=4o;>P(FzLLwxmrXbES*n3aEimQml;&8X`L=54ifA_S4IE
z4OG~~4lENQeTKHK*3D#mC@|=ko1h>kKBIgqNwW2pFoaY$Kml3XN3f?Mz*F<+x$T5a
zmX+^MKI*x|?f|ao2AC@H_^w(DrRAa`_$S%WycRu2WY=FRnJayT?d~|9^G;fR{Aoj^
zgLJ2OD4ZBeDvAr35Q(nw$4VE!JTf!OJ)q;DP@{e~0u@1O5C?PQeXaQ|Y}9pckRh`(
zUjRN<g@PfQ<sbCq#RuM?8BNTJ7rXwm+hN*GlY7m}4^`=8d+-1`7$@dxCdUOxmivQC
zzX3c5sQQK42J&L{!#$T_6?%7d=>9i6eCQfs^npnMrR8QpSpH?Gh<&?W%G78ne|Xse
zTN@S-?iPJd^up6-Eq6ZV>lTmP1;%<tRTppD@;vy&?ABh!oYe18<gD>(%AdLAncq2~
z9(mVqcZ+E+oml#-!~#EeBNfZxDXF|}*&1mxi5Mgo?%gMQW(|1)s|2r}jjc@N!r)OG
zytXc1X8LF8B#M$>Ik6Fsmt`jX=N(lct~NpQ3qRp8_Dx`|+V4h2c!PsB-FWt~fn>1!
zVhls(+VR|x_3rmcviC650t8{`1vNvUSS*@u5vHG^cSQj0+!D-kU}~sEwSYa5Opu&i
z{7nZw8vqX(Z$1mbWxOgpl~6ftHA{02Y5Y<DI4#2TWoyI6KnWqEelwdsRi1U|3NLB?
zU8Z;oD%xoF*am82gHVyRl9x>H*zdXfFLF%yNNBFSrI~zVDkYW}k^>vt;&i#FR|->z
zdEU*a9WNCaEHguLW`Bh}{uUQ7*+L;-3d6g1wd7vlF`;-ctSXGqGLl}@LTusjArgvJ
zBlJAlU8O-2a7iB+q2!BG4y{0Y;i0kXr_L!b<lP@PemMP72@iz!lU6@F1Ev>pw9d}r
z#Dq@H$aXv7yo$5Dm$fyuha0yob-TGTQ;gx1GAe2=i`EyX^s}^UoEiR;lY;9L7JQ#*
z`14Iku8mx<u~e&JdiZqXZeC7D&*y)EgOkW7iG3vVtzOf|2qyNwzfHG#I7lUDR+DYF
ztpMpH;xi;}({eQ->Z=?*T(!37UDVEr^1vW^ej2Fm^1OWzdjoMCE{#|u-w~qwUXm+h
zQX;--c$5B1^!ZtM<)h!vK&E$A9m+4>V6HM=>=BMARVCPg%|>ouY}iy7-reb)<abrT
z5*JemF}C}7;Eper!qOXS^qK&@2=hiV;)po3{TP`r+kU|af=yZ0pZwWXJ>u9k2i>Jp
zBpO)@ZzNw(9KDGxj4ZJ+A0hk|WhdZM3&SJv;LF0M&IRBKGn`n0dDKI@g8gu6bYgNk
zmRz@LtSUr+i26|U4NZST@+jtc{N6%j#j-%KBf)4?(yE1FG|`<(J|l+%Hv?6AJb2if
zHnnGT+xJHalXR9r3e)ey-pZjXu-m~67v)31<Oy^cC$h^I6{qBsE(Xnfl^y%4M3g7k
zgzBWiXHMKtTcMkqs+VjKNkzG6eMwXUGn>Z;VFx1XR3zzh4&#2_RgxE77#SC>CqmM0
zqMUf(u#UbMJDzX`?B0W9FfY*JQGw!HZt#4;Se;PZBhw|i&hW_F7i91iNWJPKBnKlS
zwZ+6%(^gCpV*m6X+8gSI+W!29BjYnKT$qZ1L7gG1(=)oD!GSC7P~TY^vnULsHU9Pm
zo0Vl+CSc&4c3xD#U#aow1Ve9c1KYWH?&8P(6CMN#yUGFGResUgswQ?uQkyNG+jv5+
zJoyVJUZj`rO#K&}__w}F)B7QGA(V@%P`4DF(Y&%-+5HzcUpS{ZjTf9$g0rlig*2A&
zr7c~1WI<+M`}V8?Ub!#t5N(@B!{?%@vsf8?S;qUKVQ;k3zl92w@x&gh0J$ESrw!zb
zlL;;F(*H?H(7#|oJJryWGsLv7cY6gE4{--|>*}wJEi4D)=l@|JRW$zG_zCQ|ss?Gg
zticDEHDXL-@)ISwfhg9mo@!vN77NETgoj6FfAt638TWs`ui0V!g(_UjOOc4RxKlpT
z#<U<+-k}$p7?Tx3KNcXnwiCj4MU$9zo4}>4Bt0BH@9rDR!1>RnCFc4O{x<QF5|`>+
z#TE7l9gS1`Xz)1_v|{|slufw^-_E}?;Q`MA=N|0n=TO9>8@En4OUoj!xUv!78c6Gg
zUqL2zltEnu;`$@Nx3N&l`{@l{4UF*B9F54jJ<U5ngU^$>$}92p>hr;=JyB}`=cN;c
z=*~UmL+!YOG+9{O-1^`L%57fJ96?Ov;B^fcKiW#lEoywf7!Xh11(R-eXStWdaAGWx
zR7QhX7Yv?!v>Vm6bdt5k*}rfci2c0djkU5gyZZt0-}vDd$s#Q6C~vOUQN(DKjS<1i
z#>o^<1%r(~2|h1T^_bIIKI#7BC?A_mJl*H&smSB87n$E&d3d@Si_a^_HDwI4h9YSe
z$*djEbP5gaW<W!QZNNohRe2k5l|IYw+S3n8&!(HbA>X@~XFWcgh|iXqV0y*{#8i1>
z*+U(QmS8GYj`@pW+^}C_$Fou=HA0!K(>nA*_23^>77{^keqILnB$#;aFL-7ktlpIc
zAG$}VznSncn`rY?Ie+nl6Hcr^DZ+5T>o2w|(9p%H0qOC#ERI@P2uJgAKP>;vKW_@~
ziA(?WWR}npWB|6+9b2OuAR$&&)~)wOf>2(D)XgnK;2sx+w?!lmOJY3L0HEZqI-=vX
z>CxlZb~RmHLDI}7i8hR9qoj0NXjAOTvUq%OA=~SRr6b%bi&~>d-r;U^ltPX^aSuDp
zJjkxRo}i~B>nx$Y1x0eh2y^mT8hozR97!;(n)R7IDQhaifhTsRYme16@+W>G9?cmh
zc9#e;)2IBS7pcGFKle~97FN4%b<%F|(vx#sn+9y4GBFjnzR9jP$kG~%Mvb6iXVhHa
z8{nbWL~$xGj93k?q&F*e!})eFO?l(^UuBqihdVk@ubt}D!y2Z@cY1QXTq+f70W;ZS
zwpV2~&g>=lXtx~0C;KrkXJx;0I|77bJ_)rRm)Ju-eZsh$1gq9MBWvohW9Z&f?7J3H
zw71Qmb~GPpZpqU6WdSFi2_{zaOeJL=;Z(W-$2vOWiyt%M7AZM+))7xN@0#B5j=wbC
zjJ*X3QQ)mGIM4-aP^-M$fSjpA8|+(me(;YRy+WIzhL`rr!d-`PSKkOeG>xoLiL{$M
zB$Ma=NwXS<rpu<7ws%*x{VV)MPfgq-(K2|wpzNgMkd@T17G=sNKkfgINoE6>QL<N<
ziA)@l^`+Hklb729>He~vH@V~n5@Cd}Nw}ax44RG~w(PLS)4W3I#g{5W*T*AV12Ow+
za805L@xUZ%7O{iO6H{kNrT1UO7)`p_JSOQro?m<$zSyEcqCLGx*&sS(5kVoz85>BE
zeEr7i#Cy@&;rS(10^ySg{&Um8VS8HJa*#MjCd;rrn~=Qo*acr<*(ro~WK*(IA8dfJ
z7HAn|M3%gPN_~md{d1#AVOVevy(4Uy3a)A{FP-ST*ZS&>g@3CNI(lPsW{X!$hID(_
z<rz~E?9M7+Em%fsL;c1&sK(Zi8VXVY1^fnR<$LhSiRnaDaVsWUq?UM)tjQKJ%t+wh
z_jLvc!$gUw*eUvvPQ4}kZ;M^hR%B!&+A{PzRSEi$wZP2;@+&^@&P)$c0kb{FZmNL(
zSn=X;S?V8O4-xx4dwG!;dg0O$-202CZilQF7j+wd_Akg2f3^P^LD;yaB}vG(M|`y9
z_}q?jpwqLvXQ-T-k1T-vMXM9xdT0o@su8^d$6X%BGD&KI-WJc`2-;-ADU0o-Y^F({
zx8*4p?)DPPak>XEJZ|BspBB}Lv>Fut^M{wThxfofxgI8;my9ZSxA_jRYWP}hEN%wM
z6jXsTm#kosD~liL4pt|YK~$Ay!`>zOV01uckm{6j18Mfc8{9e7`9d=F#^pkl;Kh&r
zpg}i7t&n!Lw-kf78W;%MX;FbX>*sR+rG9r3Zt(7={gajHqO$WFxJNH|(_J-Aey<=&
zKGhp64TUlK=L`p^h`aDu{dD34q6b%vR3<~96g<NCy6Vj*AkE-%&*9ZVt|uDl{Ex4t
zpG=#gCWbPY9%^!1&tNxRh~}o`J|J$deS6=#3u)*z`KU8kn!;Q5)r5{)MD4Pwu3#s6
z7g^yd8sftqq7gJ*{x!#rmy6-cSh(PcM<}yYZiWY8KD0~%nUrMLu9~iJ2DxGctul2M
zsXIgPI{Hh=2C*j880EY@1svwW)veH36U`765ck`==;+amtAWJ4`F{)y$%UgxTM0+@
zL}#_P%#=1y{7i*5;3&MSBp2{SH=WAAiAB!?qI!}pyi9UZ7De6V2nR&}5#7D%U3+ft
zk`z-E3*Hu<jP5D3Y2PJQ<^r-<4!v>nhhB4(w`lv3W0dShii_l60XNIHw<0isEk@xb
zKq^Av{Z*>*ZPGv8aJFnF*Eu&Xpgg|?+&ZmvO19(&-=9vQhxq5Y*cv{QWj<3b8N^DJ
zj*z-5JcuqKQo8V(_4O&M^S670(@GLfEQaC_-7JD=Vm-Y3aw0XT<;IIrS$BOS&1|X@
z2sY}pjBH-=xGja(zBEFk4f&mI-0EcPG7Q!cYoGS@RsTtd>QbD828!qYnz_AVgL|UR
zp1sGZsEjPxh428~I|^Ks2~PJnc%|RbFJh?*R<Kz^5m5{zUt_8HxBs%LPP{k6nkb)S
z1F4vl+|;G523F*G|21o2y``RH1hvRr1axV^8ACXJC!%S4dRYnMR}q3l0|V7I0KH5k
zui6KYZ?;4^09SgSV#sU+(MgrFRs<u?E9{~*R3LC|ig)$d=1Xsv5&b*G`W7P_iAreU
zOkS&((&SN*d2}jA_Z<_a#S+dHdz-lm+|KJ0zssa|up~q^s9Qu15=s1`m+p_af*{c&
zE_n>S;hmWAOAR9JlT^5px|?(CFH=`HUxPh3J*I_5PsZ8T`U<_I$accUHV@$X<adVO
zDchJg{qXci=muD!Gze_o{V;xQi2v;Jbu|V7<#ueb?=QMx?nmFuXulm03<eJE3SpYD
z<E9oK4mf-9{YQ_s>()m90;c%Mzz^8J|NKoS{iY7@oHUkcUM{F>Uk%D6YJxp6W-$|o
z`uWjYX!}}(X1M#!-`co&FfN(#LlN*Eq%aF#dxJ*~LVL$Z5S(5B;uK87OI{j^hEVWq
z){pYtAHtEPq6QHA@J%+L5r`YkRkFK<Av@P1TkU;g>CIRkD)ZfgmRsyRYO>r??G}aK
zHvOc;%ho*iAD7p$-aFtq^Gzi1XObIGXnfriskEAr57m+H^3l_HrCe)B%Z;Hvf{$&X
zOFGK-GnUqGUp@4pA?=a1BQJo9?g?Aj-7vm%oV<_oGZyz4sl9ddBY1Sb<m|VV(t^u@
zean+4vJ%ysM<>`vUbx5mSjpSaPtID&1r5xdLyV8JL(lEu+??;t3oo|c9vZuDeM<IT
z-nq00B~Gz|7xsZS8>nBg=wV54PiFYqGqCFjV;{B>u*S{%*bVd3U?E$>vw3Z5tt#$P
ztHxS}Nzu;(drur@|Iu99hy~-Hj^f{SXK>hcZLMx0%;lEb?A+RzG9vUvwSDer4g!p`
z%6Sf*+Pa>7ZYmu>Hx>v%$4bx!0^wCLji@vETvlA>Q>OAm89vEn3yA=pvcVo4Y~3Ng
z5QE#97vu*0KIz{>uGsfO$1$gI2fRHmBul|%>?j6_Hc9prnMM}F23!D$#!h4E4(wsp
z0{nB~YykyzVo(RbG$OkR?82Ema)XkN0lq%1m%~BGGoN3du?Wf_v&S!AXo$>X$*ofs
z!&7gmaq$=^QYY96dJmt-h-c<Ejyvkxdl8xUrUfnDCwgfsxe=>nr!Ao65*wmIIHuNe
zc}n-r2DVrf3{*Xxq08efdVD{4>ke4Xb$G*b<^v}h_#=sw_>G->{Pu>%XB*5n07rH{
zUlKSjo6aWteOPh@7C@MYEuQiFsUO~atR-mtX^y`9YviEL9rwEK!>hK#=f5XI+msEg
zZ>6q{5qcrddfc)%xc2<NpIlmkm(Knc5_+75)4bKR-mpJIhPZ*G2tH{3jr*{VYcvrb
zy|g^*dd&Suygzj9%UVr8)_m4!<?~SY(WR4zVc?@Y2*Oq!C&qZ4Jy(uTQ@ECw4TSWX
zx!w&F4{G(j422!fG;hD@{<X&4-}a&H7fIcE`AL-bR^87lKPSU1z?)MWY5GS8X9vyL
zJJ18j6DlP+0vJZj*f!aI74B8y5X<ME=o<d~=@t|FhKrNusrq*~Iq~~zJY*&np^e-D
z+`De$@D&n{KUzb+SS{gR<O<y+dLW)72yfU7E^@}Lc<CJvR60so9Uap(p&V-drpDFb
z<xIbQDq@Z9mWIP*C*Hdb`-AYgf!9Y+){W#;TGH&P;eyVBy`R2uDFrUM>)vxzH|KOt
zDP#B|)61Hm>ocKpZo%kPgj&Ifln<7X5qdLLc4sQZyk09DvExa++a{_(RR}|FT3$Su
zAsV;64Gk~g?gwv(wwiev%zAcz9)?0bd1WtzY=0S2^Qh@18Is)7Yxa{-^%_51x!l6@
z>t^-h=kM<hF<c>R7u!TW6s^==f|qJ~o_J95`upF%=%nI!vH1=C#vl4QI#9o7=yK^o
zmjqk+b|oL-a`rF_Z?LJp-xB)sbdDa2U5;Yc7|h&XxdvE#1g7YQnRr5if=8I1e9&M<
zq@2ClKxrc({nRrTjZv9Jgz9S@qpp<=WOrYm!G8Z}OkO4S&3C{4@52x0f60H{K!zwG
zA-aX%{A=o!#U)6{_Bv?w2UAB4nuLIu(~ZN{;OGXThouxt4!qEx>2m2l@rPwpH^$NO
zc3+l$m4bis*!3+N!SU+d^e{Xg;T=>($zSsl#z(EtaSTc@rJ`0<0W)ytWC2d;<~^m|
z07if>k4$-XO#r+RP0e4iOf?XbntXAlw5=Ygf~SKH!hZWC09t{~5?FCOg@t)4g5@gT
zuX2q=B*+D`)^eNZt70FcZ8it2v$$c&PKe>VtNG}qGTtq!2L1t=*hpsd4ZCFgAgUCz
zg8SizS2fLKysuIIsP0D^taWyJV{J`>zH4M0q&`*SUDnsIF}|I#?O~Wea5vU~n16+e
zryz@Uy+Dp4h~@RyTgz%B!X#eSk7EZGfbF;;x{=H8+P1~o9Mcd9RLd+iqrs`Cn}~bg
zX{P5(+R&pvZYbFSf;G^p4)9K6#S-;e6}4Ynm-`(Vh^PUUTv>CD!+u4rCG!^B*0%i`
zYB<InNu&jjIj&9f21l=}@*sv!Gh~3sM|O6ne^_$>%%}0S9t9H#^@r^`m<80)r~P;w
z&j{zl0mQ206t;gdn%y{pC`5(a=BY<NTWjVyp7ibDIdcxBo&Ja_3Y`*P1J!@s44i$q
zu|HVHd*_$U$F?@?Q>d;Dmk*2|KqE{@JKDax7x#Cu!xzN7G)`;64KeMaknt_AVj3Zb
zwx^YdU-#Dd+W6DKlSGeNDY%xBjPx|PeY*c^^ht@vdS_ftjna3+V_^B#f(*3xy)K8z
z1X1<rg6(szmSb>+`8ep?yxrO-s?qyiKhF*}+RHpqn5i}Fu#5z7{IS^`$BM06kfi(O
zTIY)!^%4X2)9U(crNmJXdQ=BG-5-~6X5xOfB|IAB7)%$m-~Pqqg8IWoonWx;(rd2w
z3*9$Q;A(z*n6-*RFNw1iBR>oV8L-q^a8{KDUR>PO3|chWZQWBi`=tEQ^jFKlh`f4t
z^S1~|HZ%f~LGHfWPgnuli~PoeT|Y=SOUG?PvY{77yOcU!ggmjaxO{jxnzLep)x#_W
zSLR)M)4FHHdpfgUu9GG<jorT8*19)36q9EgKk8PYar_Q2<-wHb4EZ5<Kl!enfgh_=
zXr9U7c35+pmo|b&;p0#q&vFLPwSo)WVHT}F`#gp??f={k1Ce0g#*mdUR?THA*>{(S
z=f*SN8HP1}Y_j(P7JIz#0Pzh=Hgs>}S!^@O<+qm*2z#E1!c%NC#eRh9$j6a`XS`QS
ztUiK&AxdQ58^9N9rKPtVfO}8yR*F?1)(v(EIYUJA_u-#9tc5n-*feh<FxMw8NP8Xc
z3XA1(sSPzjo8U9+VK-?)08actA}lB&Q!;!l0xqEIq6%2y2G?HDSpYKVwqWnp^a=Yi
z;nf95?n(L*x#;q5=sX5ofORRj1dAfi2x_8oEJzK!+p=`J0ew5IQ#zD&Pqx<F(~6ut
zJn?*Ip4K%|DoYqWzLF}#J*!9m$}fCQm&JVPI#F5PpNwbFnA<xQyKiwm7q0d$t8vh(
zjd_PX9JnEyhdx)CgWjLpBL4*IjuoI!I(%49W^-F+<Igz*wEdGqmbLXe563x1A1^l!
z>7gHdn_39@QZp?147a@hRv+=gv;OjKO9s*|AUGKGus8kqWTJV<@+9F_tsktUNI~A8
z)Q9xJ6{eOzgH|5S#gUJj-+a%5xWRd-p(v;?A@rN?(hJrcROm*=+SL5RFGM_#Cid1w
z7xoH#C!SVjBNsvyey!Z~bU1qwjJX4q6$Soa4*{>$wN)1dcdD*kn{hZg=EcVOg1xNS
zuj|@xczLUDbotfysjd|wPH3|;Z0_9nm_!rkW*hWu3bjCc{6)=4K6qvi7&cOp0gkYU
zbMlve`aRhfv}q^y@=>qC?#<g-eoX$HF#RJatabnN_0R@%FuVq}Z?UXdc#6#j9_&y~
zU*bIWS5jhI&h#Bpt#n$MpS^wD)A*$1OyzebFB&uYes{a!`}z57^uxB=q8N{s!CxkD
zb^W!+Zbi`^8$DT8DD;5ua7{COpfeJBdfTmH`~CL|M!zn6#LAD2-Xjt^?>UM>2ZpW-
zuO*`EgczAaKQ0|0K=@QY^Y4Yjw}+>sMjuZo3<nlIFu#m_k(T!eSYMbs<;70)56xfR
zH*wvXc(JB>@^taVHMe22O<?m{fA+g6>knLDx_*w))I511k+M`8V$%%fTRWwPG9OO&
zeZ@hau!p<qJN<6C3Kvvf*8sQ_<y@I38<MWgJ1c&eO&_F~S8p4-rrj?1i0PTx1=M=t
z{tyrppt^%?6p|@&+j#IO+w&PE&o>s##+QAy%V*^q)A{ZlOhcaxrx36!6(6Ag$1y~;
zLU*?Clb1b9^>5ITX;1A-eNGl^oBfRw{u3QbMR5ayLwfJ%HtcWUzQbi2{wgl`9fbFl
zbi)_^rFCeMzQ-wlTU`1LSF2sE{e^NgzG7d{Uyge;SKS|m&^QU`Du3Qj*_Y>CkX!lw
z-c@yVXSDr%Jn=p0AXRo$)!3(Ras6lvH;<Q5_<8EMez}qAdlW<w*Akd7?7{lm*4m?b
zOu|7?q;h8aY7LM$-|^kV8fv>X+TS}V@GyDqUgs(5w7x%wRpao{a3d{H(AOg8h5UXj
zPPed8vOg}Eb^!wW(sILoH8)Q|5<gx}|6=g)!x0@{E@|7a{M~W4dSRXMq)<}yE6oEp
zXY=nLA8XJT5+W@w1CyddWOipVEp&FuRv*LW9$h4?7%Ni#?rR>*{A2N`4-xu6bw8#~
z+@q$oT7%Z>u^`h&TsPD1&5w)26qU}-d_s#Q?YuThJ$DZOOsR&E=Ihs~^&}TDH~wnv
z=8;o<1{F~O(XZEsJQfZ@YEUav^Lcb_>$Yp{bs>*uot_(MA*_CcH+R*bM&7%Q79Xz?
zuWcs*LLfv?c&H-$dy&iyDX>{YRga+?c(Awr{<HFr>)6o^#4dQ2cZ|iT4>dkn+j@Y@
z8U-URo9ugm8+Aq*`H%0kVPp`{wc3^z&)8tM+{K;X!;B!hI}aP!M}~)ASUG&*VmMg!
zBE>BL`+mcP;O@ZwwtcW(@b@I})po2=_`)gJ{0@W-RjVHdTgOW~adgsNA$toyAEdxc
ze<24K2xwx)SkuHkYUS=cdvfBH```_s4_dle+yuaSEkB4MyDu&sC)~Q*{lD0I%c!WL
z_YG7+LTOMyT0mM5k%mD^Lb^jjKmkFzg+Y++RH*?8N$C=B=u}D?q&uWzU}nxeBfsB&
z-F5G$yYBsPKm6BTx)yVKpMCcG?)QD(=VA1&$XYRhAY=c&Kk{n-yzqMi_=H0`uGkAj
zcfwQ6eJ)n|6M%F6f#Zt4lQQT@Xw~T}6VN?ag-6CxmNreyECWxbgr=>d;=1&l!IhM+
z^Zd^b8%|akSd?>gmy;6*m$z5T54(|=IH&{kZ^*^hX&SI_V8Q25BZ(M;kiTwI?^8^m
zw!#x&0tv*j3s!sq0VkxTzo*dFQc-)zOQt=poq{h<d8)TBKkh(zEwyP5%7qgX9%0K@
zwADe9-~a}dQwsv?Q=IaPYA{?)uYEOsK<j}$9FPm-+Bx$?O4$J^$8qLh0*d<a!;)#f
z){(YPF+C1Kl8+f;2ZX|PEL=JHSsaNk4LwGff-FbfyvQkEGt)92J35af5|P0rM{9lj
znDJ#Fv+_)KKOP~U5d4I*AUyWVGvYTv4<e3oB06C7a&kGwNr-K(usg;Ul*8&_bT{;w
zlOy2~nL}0|CGkAu6InnWyN=g-cQD><S}j%`?yh=g#t1)O-AMT*JeTL-cA>wvIRup-
za(*yhcP8L)=GUeJh`<U=<NQSTN0~mRzrAdn;D`g~8t$02;BQed160%oyz1xAK&J*}
z>7Crlt(}1dF%qY;raDvStq_~r4zE^B{(4JZwuNmgDwS9hxg`>>S{^|ee)a_qL05i>
zq=Gi121)O9ZUuN%<~XMRsvkFgXR?$oeKB!F*}N7v<S!6VaQeI%wddX}78~`Blnz&9
z!Pf1U2X}z*S?cUtzSjUQL?_Dc9cREyN>g#As|j!(fNEUqd*!XVpudJ=jtrlW$dvS1
zeCmsCkW>45THZm2zCfxT6i5tq{EDuhckwe4mxy}P0|QEJRT@zw%`FuH=tRC&B$8BY
zk=z%(14UQ6?hzZTG&(&ruwtDXHw<oGro-yXT@c+>26On-4g{v!vA%~1@#NV8q>~y(
zJCl>XF0(d&YA3nkx=hYvul^p+(D&}d_RP}M_Y9%`Myln!!(my2PC9yZr_FKp`Fu=P
z6Q0RKk~s-9Q^F%8tKAjPJ7G5K589jffM)7|^;IMP0Bi(eVFz54{DKa^z%rN~5FGLB
zFzkBi7patUYkGp_&LMyM&CahQg72)Kll;cQ?w<Q_9}S~|a>TB>B=qiq@!RWW$D9ca
zG*$e4g~^<`E?&qbE@CJ_WMB6z{FL*?0BF{bl#z?q#DRqb2ZW^xBN76c_n-j1A&D-y
z6!;Gus{%jij7bczX6QzozeIR>Ctkc_8(cEK$7`Ydd0dg_&PAuzqq^@bVtgzwIgvUo
z@j?f7G~E$dYR+=S{7=i04sYLkrD(5gTF&w?L~{KG1F5<?E~$E)w8&@j)A=E2Aw8;*
zlyIKZ>6^rMS2;C(B_07cgTbuLPUf;SmU+-GdkM!D)(5!1ZcV_qL*MkLqxZ@#8;wR>
zT*}HN>^@fYn9R8c#|SjzLSWxh7vD5&-SU3uA|5bva=H(7YrMGi_Gm?NV1@R?v>AV%
z8`7=qIqO2|aIa&XuT@;256in_VP;^0TjUQ2ZJ4N+nt%DV@$el!WU(z!469u6C}x8N
zN@Kfvyu)EK!rt|EcD~&7;&+sg{LhJWM_QbQfRbPJcoGdR4&RWgU#UO(SH2ZH3toHf
zFd@O@^q_fb!la*-RJ7*j;6pwbs+;=cxE|7}LFQJ3zt>2rA9vcg6?0y*b(wDa_eon)
z%%NM=oPd#6NrZkd1K{*yFSTmWc!#iTh~~Trb$2#}QeA@lN~rB|x9X>lRt9E%wOLN-
zznq8K-!}|~EFC2cK(%8fFZmk0kYl|1zw?560kL;?sc+Xm5vGWIv<fMw-e0~&Ha5^J
ziR`HGesRdg(Uwd4&Ke;Y@Z+NAV}^NMy9PJ(YK*d<33+)eP?u-wJ+092ssLO=c_q-`
zPlk&~9?g_EH5WL<62~-uwLwN#VkMp@4V8O%1iRQtL$n%yyp1^@m4eRk$LDpV(XX=*
zyt!GR9u&H>aeREQ++0j?J&{GSSG~`8twgC;<mmRwI^6J1bK&!+NuzgpadR;^32w^M
z;_YY<ds&Vmb!0{NxoblT?}PPv;djp9RAJ%J-|pJN7#{>gjXnNcS3UE~UKNZ$0wwc8
z%WpxF5^$L<Z@Pu#X@4^bCwtbeA`Zk$f)Q_|j`G*z{R2vCypA^;u){w}d@n`~MX%uv
zuY&OI+vH%6C8arjAhe85_*5)!YYKRw77jT)SUm{%K)1&_$Pk3yEQ9G!*XnI?PP&rk
z$ow?jZD_dUkR!hVQOdNIYjLj?a{*QYWKT1#{tSP8gfPrM;a8hNWd#3Nj5~#}sK@xt
znbW1h8eY+%$}x>^nG$mmgDd{9E9QBNbIXyv`X1@2!gF!c`sGuv=~vI@i1r=7y`zML
zTvqrq&M>||zc{K#g$TFr!LM)z(#>40ea^qmm&EweSyIkdL)SzGJWU+UrO#3{lJ_$Y
zgMDwOu=*;hM?;WEhdJ>C7Wui%vtnpKOaO_;P^KrphS+X|uf!jwLk_<k2HV`M^(C9B
z-jFv}8|GG94nD}XI4)2;w{q>nWA%pyX4H_B%VB?#hdbphKX#iYoQ8(_E=p|!uXaTs
zOy@*%4`=svC(>T%_<tJ`Y2=$0z8DfY-`WdVM5LxWm<gMHgp?1=8fi<TVurTTP_3{h
z2L(-5l}7t-IQ(%YSJXVR7yPJ^@&fyGz<L8~`8P-hY_$uf-kE@RY-je1=3MDn%ZM+X
z1?7B78Y>J2ksIjy*7~?dW1(At+I;Yrr)s}`x<k<^q5`!680-i5BewJmk|F+o2b`V!
zmK`JMlF#3*qo#DdnkN=qbxgy6Z|w!}vV&4n;9EZvV=m)6W+bj)z+W#0Wb|Hrz{OtG
zW8wEl2vWZTmSy1X1)(`b3t9pC!gF>hpjAup2(baKxn3r5_=KK1HEeZPF$6Grp*JAP
z=vsmGrOOWgaziwNy!1Kh_;R`MAGU9Vd9WH@qr3&R&Ara1>6;-<o~Xp2;Na-q7e&{D
z-h&6S?GtMdm@~(C3}R?wqf>((SXE&xybbSqFpC14aHtD7L0|KK!Uo|el*X^rMXF4w
zWgPaI_+nfWwfibMj3v%O@(<qAp(*?9IC7B6IQ+O=?;#M4Uwkwa>KUx2@Qb%6eZXDG
zid*;&-V1VVfo;tNUJaWsiV>lT5hjWEEn;9#mT9PJ`G{ogn5jq3*hy~Z>s?-v{Ula<
ziZF8+^MfoDhIO5F%r4BA#`w~hSfgrF%U+Poxj_z>R4<gL<CxC-TvyaYQcT{$^WPmr
zG4XI@MyPpz0)}xIzg>yxK~Tp1Sbl#^0#>v%9$xK!H)uTEfbe@arpJC?Q>k&AvY?LB
zhB0M&qZ`{rPF`G9?|A$oj}vXC4;Z#ucJypL@TqyEI;4S%J}Le5dj1%)-6|&(Kq0*2
zzuTaZR3nK8iKCNLByA;v(%fSf8AhF?@l+rVR*&l9epJ&Rr)a$Yp1dc#@Na!*6ISM>
z3EP40mcTkSDj)LK&j;`bvj!ON9BmkaZbmhRwaeFyX#>400?%$d|Feg+hSju}e+oG!
zev56Yeb)Y};q>5l`zi!ZXBc$#35nPd_9*M*|5PA0wLs>yu;RAhO9!1v)zI(HlK5K?
zC5?U}S<U!ZxYqv`9rgL#VSvr_y*JqAF=87yzxL`E%mUmGZ>|la7(-!#0W|^ZUYWHM
zTwgQ%(h6=WPdhecK3Oo(5NB+8ibkJKk%A+;$9#wJQTEC<T}1@>CsU^QZl9s%f&9m+
zU|2N38`19tH~Vpj0=TdCe=yCb)`xWWI$^&y_kKHV-9mgg(G_zW;YU0F*L#$9p@(Mw
z!36v$jb}jdg3IQGz&<8>V%l-K0f8%C7}*l7q}`U1Z0#S0dk2)mU~mL!M4&g{D=7PK
z3>TS$mZ4<E#x!)s;EMxL`1~dAXD!Q3nhQ$(k9Vg)c)rLoSoQ}t^C?9^7DqM<<KY9Y
z52EWAlOU}vX(2&P4xY&i^wu>g87IC!h|UzePjc9ff$rGjNrhcgn>L^qFXdK0VZh-x
z7B(?(zi$wQ=*>&IYNbggy;t`+4u(z*puo;P)W}Egt`u<PL>u+vuY9|&X0SKQ?DXf)
zbD?*YZkm6wfaz{pGZmtl#kEDSH?_D9nKl-=%vXAdO>-(7l(1ZD<c}?mk{Fhia^8sP
zGs!xQttd)G??=@)Gn^()E~R-sA+#bM?Dlc#KLwCJ<-Gjf9jg5{20%?SYGt2m|Kb9k
zDC2JG_srp?-_Kyio0r;*-td;nob9h`B@0)+jf;u5Pbt4$(i%Ku_gwrwv8}%2=v*L%
zOfF09)@XYh2@CvFVH!s4=XBW$Nw$I`x?Il`HpVtKTDFQjh&f)tc8=$t@KCoM$}~5=
zwE|sZr*@prSwMCRsr<kjC9RD%52uTIktlQ7o;4dv)2nmn#rG;Ax`W;?!12xy|2}fn
z?~t;Z<D<DB!YL))=|@D8Me66HD-9pB7cZ541cXJi0%0C&Lo08892VFN#MIvy2Me|a
z9Q)Y~Od}iD`{n*Z1OKL|x>(UH@P380?`7o#yz_oL$N%l~3BoC^e)AA91YZrR+8Fe+
z9lY9a@bkGZ-0qKTfbxTi2Hs6Clm2kT0i^*H7x_cpBS9M*9c7i>_r6?pa{)$-2YW4@
zzz}NV<3Umlq>b)iV)QcIsYb!4y@P}wb~#gN!!>W(s}}wh=Jg7(`4M82b=1o$!2gz!
zw1#PQQO;Zvk4`*}ixdm)weZ&9(4>QAqdFdl3mDE>TQNtRgNq)1uJU(hs?PhX3ZO7@
z9e14nL2mz51>wQOtP_vle)H?b#j4x=P164Ev(J@&yzoKktreKO<(_r=QMR5AAig4l
zbyp<wkuLrgr=Pq0SF)zcMG}tSf+s^DFfUOAbjQo9|AkSOLN`UOVVI(5*&2ceAe19l
zcaU|KlT!J1n_<<qvf=?nS}%jrBM3OpgYfIada52Uw6d=cPUslOI{w}l431$CPAee+
z1W94s@W($mUD3+H+51e>pm&17>`uZ=p*k6zWA7yh?89QNX?;tJu}AHF2SoptUA`HF
z*-xdG9@0^1_mmDc^ZOjwhEv)%6jQ9;;BsC}%PyhR^_8LuZG5j98pv06qqoNLw&Ak!
zS2eTm84S^3wc$6C2$253oKF801Yns?LV0#5wot>fY$=XQ#atecp=9b$MNFZ=M-Q4q
z_Fuq!&Bc~}QdWv>ztVp5w}%0_d6c-|t7YU@W@G5~4cVrXRSvV3LX<M4GFctdi0m_X
zF0$4%s>Zca3fFaAreV{KO?A9_<Pgr<X&$&%Pz(28GEaf~4DEo?hZkmpZFCb^?!Dw|
zUwEL}0nTSdE=>qaiyxo!R|$ODH(HyGIo73+IdNP}h&T<~za3{#T;Z%To=-#N8-<QP
zq}~VP@1dBR3HPzQZ!fUeM5&38>SF=3aaS?z#A(QgxhQ_PuH>v`2}8e=^cmNhGjjE<
ze{vP5rF`_(n{{mw-_^}Ra!2mWR}(??ZDnt-ena{@X+Qy6@9Ff~v$i2mFqrq<Q;{-W
zQ6pmh0KrtTfzHn40b`l!jexper?KJUd1d86cY1&sdaZhYW7noSMwpKuy3Vw`=Y3&h
zR7xW<Q2WyV;pN7VzmLyplbHb;y)fVX{>WAmC}+4VSt~hx?W}y2__{fp*TgNxb<PVO
z`YX`8gn7buloh6l9&(a|O93mS0S;nICrJZ-Xw>GBj>FMA#AEZ)*X#ZVcy1`EiX!Ko
zU-g_HmmW*wI-RTtIE6J|th|OBrsKj7%mFRwXf^2S1|=i9;i&y9>PNVe*ICGh<&V#<
zi}Q<ET)l=zv3v$gvdpXBaXly>-Ivrt9hdOSCQg)q<oSynhp?B0>FW)X_>`^O$4s(V
z?+dFiY}Hy+4p7^Va(vd0v1ZZzO7Y~&#Hf3ix!>GK?K%e1Zzqa2`viyqfz^4xJ7LHC
zon#oek2vrOw+u3ax3Mq?PtjNAm*ri3yeXdSJn~i?z?Mkl8-#rJ;wqHcxsX`q*;Fys
z2{BzvSQ#o7iiOB&V6tBBNW$F3izHqP84Ud*2<1=v(EF(K_8J4m{qF;zsu_X+-b%Ki
z=&&y5oO&jImH)c)Tu$9$;m`d;O3j7uC!JM&g6I!i6wI8DHe$EhYZaP1)|Pe!xnwnH
zGV*qs6-5Wz9*Kvj43Q5;o%ws0FhU1Ue(_5Qek-s4HPTcq4Lv(=hnao&<?`4!omM1C
z%^1MMCA@gyxux|JzQ&Nh#`SLXlklYix=Jwz+WEKj1){!QS-_yg$B%H-q)2i(49Vx3
z-@Im1J~_L1WYyF(G(^{X>U1$pY(psgw+yZ>x$+VT=NN(-NCO{R)-?L}K;#GdFb>T)
zB!)&J)*DN{wG{7GjGxWj^!a!JT>&#nkE^R~{@Cm+MsN(68%ckKanIYLh{g8g5lyFc
zvjg|yQ}Q2snDcbSJf0^;tPHUqb0mluzD5Z~)g#yeE&zJ`LnQh45Txnd#gqN4hJb#c
z<rmcM&wVidfGApWgDoGMCm{bYT)jqv&}0Zm(mM3#94v=RS^@36p>9Kp@*xx%$3ats
z00R{N)A;$8{`3J`mVfO~17Mc>|J)`I@vA*&ux)W}(Vm~3$6Y(W*G#3DT=qY2xUBTz
zc-y3$Kg<EetZoo@p~&rL|9<q9l;dcmVQGNNllyNP0&cYfKGVuJD^EnC)qHuC`jZqE
zi9BLu(hT0@GTu&YP)fSd`X!G5SGnRv;loyba-KrE2vwya)^BUp-|s06mQ3qcp2nfp
zsr$8<0we-VQ-?$iNal6|k3y+i^qWn_vw-O1A#Q%(m4SgK^V2w+$uci9K52l*si6S5
z4wGzZzC1^l(tEbD@&bBWWk4NNkIMS+W;Ju}{I(Uawcve$=l~GMUxf_OYn%qb7ekjC
zKJ_4{Q9UY7<VcIo0mKYglJ5fgh|4$>WG@p1zivB_Z_r^nQM3ng2XvW$VgQW!Kxh1V
zKs62qKmzRr(oewVEykmO@}*ZTjt4vWqSiY%iNAJkd05WvrdrQ&b^tmG&spw$<l)7(
zm;cHVn{XFjxW7v;d*akX@ojboxtpzOX2DR5?_A!q$TgqZf+(?_{O?&EPiaeRJ(pg3
z>zM-GCIO*6#%6WX4kbt7{*1<1K;DM4SAIidu@qp|v}+Ww<D$_uG#=2hd%2o<lJjjF
z1{`t(<VrF^I^Ip8NyEH*HtrS68FJ?fi<iKV<=Zd_$k#LkYE}%P7Y^f4Fv(_9@L^Y&
zdZ4jD=mFH@ClrOaI(DKDR5ksx4M_!6ic03zhG3sxcJ|rlQ>Hv4OQpg3XbQcf(-~JR
zpO|?G2~U#x1_|SBL{sT^A-rlC9juj|3&K~inn7AKr(VUiVCyfp!Z9qu^6!P)55uBu
zdxKX<X$cS{J?4=T7{C$+izsKjh|&nB(cj;PzOJc^eT37Tmln7t+F`}HYt}ZjNW$V{
z8u<9z>$#`hM~hh)GW;@Pq3j!KxKp0VADD}|#Y_vy@Lml6?0eG{E#~yF6|pj77?)qz
zIK@{;{N~Z)?rr*#<xA@$S7dsd#`w3`A^3MFIw0UP1MQ6gVEZ+|3#39r`6Nq$31FNL
zT@8*4OsfZ~0WahV2=^gny`PF?zHP*58nOd+6Fne?PU@Ec%!x6f=j)wye!jk{pYaDA
zublqV_AfVzO@ZdSP7{8e!l<Fe&_8kZ2Ahy}*cXwVO1iajOG78;lJph%*c?kL8mhjA
zr?C?2K913Nozpe6an$x3oZXG@<B~IU;5%u@A!4y^Kf4E(Wtdhk{cQ(37~V-@7ll@r
z7VjJbzNX^A8!K+*p+iGM!qWB-I0P8i09ErQptJDtNx%eDM45o@z%gPlm{D8)_LQ^-
z5(}jVMA0t)o-Pi2`H%{nl96-s>t}OAZh-Jc*a`$QCg_2(v_pQ78qVxH!2vm9Ldtx)
zN59arn(_J54jr}zt!R7(o8Sm)eajl(G|DN@m>Xs^ZoMPh-19`vtwX;Kbjw*%q0J=t
z8?3TBH$ES~DW$+G<D3!Y|LuQE2A}WB3~E6j_Ud0UY?yEsRxw>wWJzspW%m$+cxA)G
zV5ZZa1h$0BfE>b8N?AJ6R5nFb1Z+5b%oy9_iDvl~FAE~W)ow_DI84GpK<+U{(IT7e
zh(lh}fRlI2Tu7gA586eabr0I9dSxzv`#k3$+v8u#tS6gH_x6?fCp=J`;GdiYk+dv-
zHe)QLmrCG6T|1^swr4?&&J-vK9Yy@RIAm27RIOk+p|d8sw+{*Yr-wlgl@p?e1{21@
z<sQ?#3j?Jrz#HMRAaLy3rUX?~PdndjJF}eRf3SpXJ@fv#Ij6onwpqotO4Z@+^8Nv~
zbO2b+x_xA8RUo><VZYT-V;dbd-W^>r{{>sA5WeU8<TTAI<`GgSZ0Gg;B{2NlubaZt
ztAI+1*3{;OE=K%|MT<CKkF}x0JV*akweqLo;MHTwZ6pAiQN^vB)ekq!`}r|u-V^n{
zJ1}gApI2=7K?AzoGzgG=ICZP^^`v<#@inKkLV(<>rwcRR!Q~!Uh<23n4bsYsS^I&1
z$c1)!&tM#28sQPJgbU=EwqU@(?7L3C>gAyo4az$|31;H&w%Fr6DuA^yc<v|g_B*%`
zUhZx~*|QBh|D#mV)QB5MP}?fwYv^O7P8<6mkwSAUVkWvqTwL_=XIM$~5U9Kz8}hR4
zZ$h)Qn0&!!u=J)_ZUVxoP|H*YsmZGPf*fr<Gf-EMBnRm<h!QkvL0^99A}WjZC1EkB
zO5@sbD6%T^h3rT(rT|%V&6A9IauEB>v2;nj+KTY{K=2L1Ir(aA^?DT>VsvoMR7G$=
zS?hr!3|hj}IbT<-<?fV^VKZtuxufp9BjX8TYNOkX7+y>{hm7s>UO)Fopy>2##T#<0
z(=+w-)2h~=2Qq7(GqQ{+(t(mannb@<5()5$@_$q;@3xQU1-l&r+%~~(0|UCPUu4F8
zI+mA5TU}JX4H*$S-}zfS!7aZ;u+c?MZ^qQj!rw}NZ2pd!j#D4B?&gN%Ag7D@6b>V(
z+@P03bCi7sANL5N6S^x2mW(mST}NLdIIFioe42o4WnJ_?eI2q7$%KZtM2R<;#=w8%
z3YfeCmj5DVq4SIlEIf0ia{cF@g+ve>5)A#f*brRbV_r7@5?HO*Z;W$+m2+?ok4{YF
zz?2*O(=n-u`36zEyLGwZUyU|I-K7Y)Jc!=crCE-@fh79tI`1DAZ&=Mw4|$0;8P+vr
z(;%Ysc23B!pSnXD9qLn@{#Rb9zqyJI6!cks?J4FoY<KVN`tOuZKY!N;jke$%kjEfu
z1hlIw-FJYFzU;4CAEKB>7p&C)%2DJ?vPz*Sr_TEzSP%3%+oHwM))z6KC`&;^Rj!j=
z=rL18+abrDU}!AFj-!*PD2z9>Vfi8{QWoKi<QgGxqNu_W6~o}VIBeQ5KI#nNG+4sC
z_+iDVKj@eg3OpV7q?HT@G;7L|Kv{NkSE}fOHBp;KAi22H#no%Ur&=H6<*>Ek>G&C}
z7@t||E~aSbOJ;l-$ZM}I3TO*~HLKZ_Jp4em>7(2zX1@IA#vJd{^B<`TS$#qZ3RXOt
z$xV{(Uiz8cyfh|8LD?f&`C#ip^m*y=A`kaU!ScNqDZtmtO&>a%4jHotzS1Gi4m-wR
zC8|@Ej!h7;JT6om6OEsRjp3!KW6Ei0lyA=0#EPa7r$k{s0hXuE$UBcdtPI`L&55Wt
zAFvlidx17J7cp2&si!Bn?D}to`^+9kP7M>tv|!7G3LIkeDUuY)Px~tpZZTy*wV#-R
zrr|f@HE}UJrNyn2kT5tj$XaMt%SYQNh5RGfE8vmZbhhFdP;kCYa7Sa2ZeLfRxw3)f
z;IPGz6^+o(y+7?WL%J8hlz`c11pe;;Wdj<<K9dYt1cg+InhTYprTBM})j@kPVIkf5
zPeIg6=9$WkNqC8YIHCfNa1<JGN$i5e$<uOVa$>QI8psTEea!~66_;_^GwyBN3vA55
z3uj{|7yVDU_6TFI*(O!!b57c*Zl(vWE|}8oQU4G7RRAqmZg#aWOxjI@0U2qLY>GK+
z?_4C!fdF+RhkxM;e=*J;jsuQK4-8bmQ0-ZG0&zi;AIYo{=(&IzMPQ0~5Q5)C7JocM
z#QtyML^BlCCpys*V3tVNLO3A%!Tm6IjMC5K0vY|a;LFhY=Szw41i+rl)Y1>ykMgQU
z($3NT6^OglE7P&7AsRdWG$`duf$X-P0nP2IP1DMePD$?mH-pBWiEU(X0srLPuta+O
zq5-$MIZaNs5Ta)qJEwib2N4{{u;;B>?0RXfj5d+7HVDesrBF+CPLNh@G<CiJBv!jw
z2@s;<mGd>HfXF*7-!PC67Kyf`m2yl0T@WdVO;y5}18}I~FCiaG24hN*pK~m-XF{9M
zeQCNd9W4QD>Lc<ts+)@ACFEroSXC9PWZ#zxVlgc(`s@`Afwog8f}kB>l&HsC@J<!T
z31MJv;t?z*5bBzU%uyf?RrcM5w!L4(m5M@@uYTZACYoK0MLBVTDq0v{53~Gi7ZgWF
zItOLFd=dvgDd^sQxFzP%t54B><D$a~BVf^U=Lh*op>t<LAUcfLIQDor^t&Q`+ik*`
zZ)oPoH(1r{?P4^WwiE#txIUvS=XmmbOJj{L%DEdm@Z*C^q)cl}KeG!4X7F^RSU9x(
zsQ~Bw3Ajbr9x1M@X9uQ~-BDar@V{IDpa6wjESqTrs=QxtG-2J$MiMN=D2->h)_QSA
z64UmEgCqx-AzwtC;M{71slnSqN{qE3M2Lc1Z)1i5rtjj#YT<x0DxxSEV>O6tYljIZ
zjL5_gR~mQe+#ArMy#zQaKIGS?mA$s@^y4K1v41#N)D6+3H-$FxkD1#K_9$X8&ff4H
zbD&dmsJr!kX0wn(A&fAZG(G3N>#bAPfIO-jCe#z>fN@5$sL;<gC3)OO6*ttH3xw9A
zKIevay`ia@6p;V@CgAzjX|TC<C1L>=Eb{1Tw?wg0THADjN@xA@2f@O6@z-GGl{kXG
z_VjJN{f7n@8rLXgQ6Q3D*bzGk921z8K3HXp33L@q^>W%Ve>SXohO>pFd(O-X7PIw#
zfA50kQ~!@cfC&aO17t2A=wF}0P8bIvnNUR{aCj|qhU%_@2@itGOlZvw6Hi^K&m+Ll
zyw{COE!`cBw-4E{D6l`=l@V9k$G)Xfdu}#geYLAWb;>_<IrepmY~c56{F{E%l~JR4
zw^f|5NAoyjWC<D(&;_sc-NF3_=h&0k1Pc$Q#U8u8dUd|L1@C)%F<Uwd;1MFhNwMt;
zGz}Qklp27Qc%Tspv5B|N%}W$-(o?&0o1uf1mDR@9w(yy4i%gC#t3fcQuVR1G$nw$x
z!M#vixkEjiRz}A^HW4b^xcb^sinM%bWXGW$<5pvK?>p7i?oireE$3?SIUHOTKo8ze
z$u)DX3jj~!WvzLkEuK00RcMxHU|A@o?MwN{EI9|LwZ0?hz$!_PhU!|q1P0I?RJe|u
zVjbvu)czvQ7U9)GB5`CWSVX{-NGKq;|3Vzitafe6xmf>|hsx*FlZ}^M1HeQ)f+g)U
zaGcR?h_HTgYl01Mx+aj0_XSI+tDe39=@yPj|8o{VCQTGr#QY#gF$h6Y9+83?DGv^h
z>vFQSmhbCY_60KpE)7}07=^bhM;ZQb)|@zBO244=ef<#9GAC9=)?tP9cKP>C_<Q+x
z_wX1k?{gF7$#AF-#!0u95~^~jYhGzlh!nf`yS-BTd#VO~ggxDdeD;~pNSW(t*++$b
z@-@{X-L)v~F!493a5n5hOBBw_c*fPQi(IbZr%oz&ZCP^?WVAk%LX~iLn2KUoDL~{I
zES9?PnIm+~X$tuIZPgO&sjn!fMr}R%Rl{i@)w2TFyC$sJfOLq80`Vibn=H9oNF2f?
z<n0db4fEdHV<}whg{Ku5XD<Vq^F>n~jz?20f!2OdkX0z7L{87S2MtqaciDyJ+h92<
z+3rFU$j;z}ihX1(Jbmni)4+|J-tp3Cl-!33R7z<)Pb*zuzRH^v!4r!L`0cxVozmY^
zyeChY?|6S;RQ~j>myKrr`#4V;yG}bPj;_f^<GCNsW@5*o#{*+aTsHlyYb)c$e}JHs
z-E0w<oQOECzH#REZG+Yyy7uxqw|kc2glRo#EQwsX&7QbCvHGhx#=i0a{zo#XNee4n
zx%tNy|3mU}_AvK%R_JP^7R(R`#2f9-sVm7g1ZMuxk`UbKtIiOn3OuZ@&J8LVwZJF6
zGG`7#X<Wh1APhi=7ki7+xRTWNg@~m3=crXO%}@)eUFZyuSBe{Tz?<_Fiv}toMlt82
zcH;~pgMY<z24Q0#t>t3LoXZ|Z7-)B$aY#}*hweE=MhNq2>f8FrYC1sWi7@`g8GIKy
z`c|8L26#Zb&GH88dqo#GlAW#=^eD7td|S4_cVr+snZwgZ+j74a*h6WI-f6op87!u|
z_yImz>OhgP9YP@b7yr!b(R^Y3;<u)Lq=Hwn<7=s!=jLxi8idWhTr}f+$^50{J1Jr7
zf=`~SKkI(pGBy`V?Duh~rE0F~K)88?l&MRPTEoMbIO_Z8Kq0@POwXs-CWmLbx0I>L
zem|2M656I0_>efO=q-}Q`cN#j-L!$W-03n3@)Md&Nl!sNz(i<?l4BrL!E|OIDQ0;&
z1$?3JRSIoPHkFqeI)m(i!YKbk`ZCTf7#iQTYxR7?JOk>Aj*}%v+>Hq9>_Sjq|L_YT
zvcZ%I^*~R<q1vRPz%H`-cxVtJ0WgZ)>5iHQMhE163B7-SMzz5qk`)0^8rfLe^<-Kb
z)YeXNifb<88WXS#5A>KG|K>RMs>RGsH~OvU4F+OGJzkIZb*u?Zu5*JVJp3NcIc=4W
zeCNc)WqY=-h@9sJ@tWFpT1jY{dB>Wi@07scqSo<h_p<JbzI`1$yXawoPf%X=8Tbjs
zWCpiB=syy=$KL89LAQ$s^8U46;#1icS)$(jYdo35+@XrOc$g#q{O3p`!0=yF;;4zt
z8R49O<h3?*+7*uf&t_u)(^RfEW5v!+TZniwOkqtxvSn0>cg(Nb^>v^8&vj+I9e-W+
z{A<s|bM%N}6f4mzH@n%@<;pO(^>6d!C8il%ZzlYo=e+p315*a)?I;9<{>YZUETkIF
zpX>E5qq6eJTdv^Qg1diTt8n`E^eE2>QA^cj|CnK^Q{$UsahExXjr+}F;5Ke`d%J|;
z<?L8HgDk%M{)H$*)g(UG3`5D6S?%yi;aX>nz7Jo(^L0J}VhU2XRawlyU8UG5Bj*oY
zC?-#s)cD3f$~M;(h4`sFplVrJVf(fPNi#0y5Ak-?xqY7e{NJ@re?x_8b<J-b&VcvB
z^;r|Vc2YwDU~6CWgKD`JydNFGoJ|HM4i`0GWK7$itMg5|al=<@*%1k8_2o2lZc+Z_
z|K(;-&vaBz^U2B`?U%9=2^GNmj(Bq!_rEvz|EdR@95x}zATJ(gT)?bZ`{B|@!-vi_
z$Eu%xebux#pb|4#pgBIG_n#3R=S^izEAZtrgV-ifsZikYnfRWLy>)(Lwb(@?{286C
zCD)v1_}dyyxo?ODanN!yRPR|-`QYKEDX*mHHNl<g4AC;3q29`W3i^&XCMuCPo!G(x
zIkDwZjRVLVxqtbJX17K?a;QYU4<|lM{H~U?rcr8zxIM2#f~AEU%3F)P@2Zz}>MZk~
z+G^@00*9P#ncXA(!2ry#=ZLyFfgbw{$g*#bP*^P%+F1(3=I^cmIg0KJcdBj+tEECJ
zW7qh-S;cVW$!V&_j-q<?>?S&}Zkk0~My-*`JA{86b4=rfzGN6MKTvcf2){32U9?7>
zP%>H?hI6Z#rsM7aQ}`4af6=Uv5xP@66}}j=N=Bw&(W^bcf8QYAh!mg7`%x%gDuk?(
z#Z0^2t_m69!3%Ap>tkV#Y>m%PHJAUUQq4%hdGM0Rgcr*E66~nAzpW9JJOAHxlpBx$
z&*_SK=C1rluK(*@3YNOqA0)Ycy}>4@M+Kq`&P_gs&+;cuQFg)}859hEcK<ZsKG6F~
zl1sOJN|zScs{H8p0&-FycrC885cH9g#90TJpHC#JGqh#<=azR=pv&?qP<Gzf(N<Ti
zJrCZcXVFZ+SEE%(cNUUA^9BnTsfv5xR-<cC3C3HZooDrl?Pv8%gq*SStJy8(Q|Ne_
z6vjG8-(w>@%c@lOZ2}D6z10=YEq991_jM3rwQNz}q~Nn3FR$cY>iSNh*@moXKlB-o
z7O{T9up9ns<$2k6ZeB5Ej^8lag`Pa5-W)ZMPX`@brL4YDG`@$5HY+0UH8X&wuG!)o
zBOkb|&xts7;ulYTuw!1F;v4wy2Dly@&AVL%i|i1e;<D>*Z2FXW1aaH*JvddmCtC4N
zf0#8tRD6VE{3&W!zLc+a=G+gJbvNapRsdz<o2R37DqD3&^Cy%U51kmt3uRGjdCs0Y
zmTJ6rRR;Ant~tUpySG_^BzD%;FNKyui{2f6Tz-k7Q^_@8;Nq;!*S`wbS;)FO0q48v
z0L3dz$VoqWZh#eu0xbh3iZw%i#bl}Gmu?TRmMZ0kqxchYH%PBwQhY%=M-BiFSKBBe
z4ofZVj%GKSBm6x)nRRwy_(6-hvSJbDK23nLn(VAC@MU1GPzS+DW8<*^qhn+^(4uD!
zP}%e|@h7zTbz}AmPFKHwe;Kb|%zsa^1H)49k35Y#<xk;9Ynzrr<?K$1S#MtNhDxs)
zR&VJlKJ1F0ey)%q|5NbNU0ui{hk_DUB#}iTbMVIx#=Si;vKHwri_3ICy8;u1DN?8=
znjaRMmVZ%b2!QPK3fj-R@mKqNllK})D5c7vWl)`pQt*HLT1D~t<#=n#oa~pN#Z|qf
z`$K845|!gHg?<2$pUwhT2M%l^7|%-Y=B<JX;8Ed|(S~qY<p<#YKrZ(vXQC@8+f6*X
zuo}iW>t;jOmxLK1G*6#fUOnb~QU^jc#5vN#<qJW+I&>m-3ct4NSYTc0v*|3JX`w+7
zqWo2mY^we2wWhsxgM1EKlBQ-Qx-60{GB4wl)TiT81OW<oI9$oy`f!N>&#QH~0yXfN
zQjsDRH@JxS2hky}-O}6LsrG+T)or&pZYUo2HZE!4_}&-7al3rg5Z`o$JEPxb24`XA
ze0hmq5-#==nptCnE`=69&wJ=d^=xvigp|c=kFcgJs0>Oc7<69>>#5)l(+-SVYyv(3
z*Z!0#&*`J7QDjDUI$}Tbtx5H)s_XKjJQ%o$9ql{&O3o}0w&(QK5d+n8faXy;N9G!2
zOpg|l&Mw4q5)W%DRP2?nK#sytq-0nWOBaxukmO(#|CM<gNf)?&7%HaZekKZ7f{e?<
zc1o2BPSRbx3?*#Cb+_sOJ0R&NxIsQp{sf!ti~Fd})tf7xkZG3>d*w<a!@(4~#L?#v
zJ=wqqdn4fPDAd=f1ti|XEHwe=o^Ee$2HtFcYd!obW&ihmkIlvAESGb-+g_Bo3<r#j
z)UrnfkksDb@4+4ZmG<XRO#Ee~*}}=bXcy8TWZ>xI_s+{O-VtS`HPX8+Bzn20<$D^g
zVTM-muXR_H{iXIXZ_zX3<&_D0@0o}Y?wG<?QSC<S=^e7`GrH(`&H^0D@_AXFnEuPm
z1Bc$)OH}&zF^~iMf6mIPnfR&>lGn@p3p}a(wjD;}`L|2tUYstW4Tnd>>3-sOw(zkX
zvhg-~<;Ob<>~^nEx6?3TGZp2N?;U8cJHhW$3js4;sQ?m^D*%PqO}4xv{3x@qVscL9
z$5-b6w^N^%>qe|B*jPcs?yfMz=h(Ntydkcb>)Ss$plCp5)=Qk)D#JW=8r^>TM?Uuo
zIS<KQ6uoR)-;RO!O}il8+|7Hqdv??(Y7}0z+x4H(PsxvApX>sOq)2b(V#ZP_l<hXl
zJr?j|&z5sCaDevSZTY*)`8ZNz7l>Csg9JhFh@3ov{TT1(dt)8~m(`tI=cYKHj-Jbq
z#EZC7Qg)@)mA=c5x)o^R*a|eeh$wKMdkP&%)Iv;HJOxw$Hb4n^jH1y=K*)-DV*Vrp
zgUv1!??n)(LlMce3k`iY1tc31#pg`2=vij~2m9r1x7zMu#Z~dt!P!*#C34J%g(B4l
zq4DbAx5$JOIeEx$l$*e!Hx15*d7vc`#CDAyEvbW8gHzPeO^-L5lk5m<qbc*v+~Neo
z)hlLYz&BpR2g~S{pUIiO)YuuN{t(3<wctq+)GugmS3y#fqIP#Dt%eF8l&qXRd`jrr
zHIFVbxu;A^*>m~YfxGB+#NUFpe~$I*=YK|(`ag+IK&*6>rBvNTh$kSJX0@G)IZY*+
zHeF@g=u4Ab1-cS!v^w=diGmMePlu*-wf|ifoFU^*hdzDJPe^{`QVQ)ZNc2tJe0vY`
z62QO4_+s*+Bdk!5g;U0=<-LAepsc|5xZtfFo6U3j9av>iUKacJbUg422fy)09#L#I
zBVQDv!a~!^mnd2iSYjAo>=&3;S@oroG~x%=&`7*aqkeVf|3Ohh@cX<a|8%9bYS<i(
z%+X~598o@tKR1AvGa@VWf8JDuG(z)2Q{iS@Lc_M~;88gb|9e!`zelP>Z>7lM#OUA8
z-C@{HWKgYh@0Gg2_V0$kTl)XWVTj35$kf+Khp}8ToxEelhS}P(XJwEc{6#&|=eK0s
z#+Dv&@gVwMJRE`c)YD;65%(!K2gE<v8X+&nE`UBuuy}I3aH9lQt5~!0B|<e3Ga?@F
z*Qm%la>>_0o~GqJdj_)5qur?p&8kqe7AaH$DU#D@Hf78lnn-QT{-uuU{w$1HZ8Vov
z7qrjfk+}TRXrc<0Tc1?2z&+S7!U}!2%P6!=ZYAt#{O7uL5C(;ykDxU-WWV{GU84@7
zOaYp5*lLJ=L?K^D?-_?u(#a-)9u^qMx!<M=TIJG2?1Ds&Sr}UcXs<MmWJ~17Qe~~L
zDD#wk-9Hou?rA(rSY)4tVd*P_Jjh9V8i}2tvEuN_(YtT2%5u*Jy8O7IQ|W`aYeiAf
z6N~y@`S%$-1Fy2$3JN9yi7z`r>iU6KssH=e|MtZHj)MRF9{!)s1%+L2P8A);R!FAW
z9*l(#SyklLz2>--sKEJN@FV}rnyHaJR#r2bSy@wcnb>peY*z>+A$}@@|3o*kF3%=)
z9j<~ku)wUEo%-|flqG`lMIvZ#8DJ;ZJFMpOmVvfX9&2aeX@U%2$ZJqqd-AgWiMSNZ
zo#?j+`)#dGTn>I4uIZ?G@Zzoq7S9}q1~Ww0d$+1Y2EK`G^b6u!R9<fho1_NM&1`}1
zDKj}%uUi9Ny8xOWh;WK$*Hm2xDUXp650&W$%zHSbhMy9reBtxqQpH$0t=3B~O*T!{
zC2$vXE!r_geTajh<3z1bmg-SkpQ@3{*%z-0!diOCDXrP+$Nw1ecYjsw{A#TFiDl?;
zy=CcC;UgOf!PI+(;U}kjclhi+=Wm&FS)l2x3C9wB@FaMlUsNf2jwTP4N!>N&@@-Yk
z`bR+*<QY{3nt_UNOxqhz0<-!t$^Ct-+#}$xQ$?om-1$g5HL+!r!9kV}pA^%tKO?MS
zGamX?@A|rZ<8`}nm+pFtxBm!x1P->R1-`qQzp8?&@hcz5SGe%b+U%M5gL_@v-}^$%
zeI@5=-qtkEl046T-F(&+HmzFagNjw<wmKc#vW+QV|3sWw0O1-NF2SJ`0NB~V><liu
z8perngci!J5D;$V2ba|W%-Bk!Z{is1Q0!qs$kF$N;F^rx0qRGn0=mO9VABrkw!Bgm
zKbd*|<cjHOqM6?epkxfji$4e*VfF@8RKR~lc4FNar+GVGG)PYSWty<i>D=#*33#5C
zTsg_})=LpCOVq5Y=IDn+YZRq#=<6LO?VOF+*ax=TjbFpcpwC81SYKdIz?BJi7R-VY
z!4eP*9l%%)n8;2fY4NmB6MCvsF6BFQ=0(*aKFV%!m7aXzx99W@@8ii`9{t!1`MRI%
z+;dMn0u}$v>WJLCK`Ui&c$p%|EzTX|`!LUQ*2}4AA-Y=#bg71pJ__otsVMMRIX118
zk1#7Y`005j-@NwXl9qpOe^yr+p01;;-y5hrZ{AhJ0eJ^OZ;MN!EW<;4biibC3`^|5
zEai{wja0}0Y>mI`t4e63x(YAUZeJqNU54WCzirnZCzrIIpsu_2OVB^WVGK-m=N-Z7
z6Fo1+oD>|AwP>}&qQsmpNfhpNd!3F~uDeqFO(Qoz&kizR-mlK{Iy3p?XyS>73`w(r
zjmW(~43Qc_^*@IUn9p3rvN6PeX!^J9pUbKdsgXi-Co|a)n2S5ns5atfGEUxG(Y}4p
zc&+<SZ&K@4Jzs{w!*oBr&rQziw6srgL@w<F7Qfqk_T%BO!?A#OvpugfY-njHtba>2
zhP=bz2fuBOB^q=yBu4#LU%(=Nx2ar`q9(SgTh*VPbhNd6RW8_@)XmJHt$pCApF9hz
zn>iEl2vWIX8jE#hNPN5tod#<Do3!d#5QrOuhyv{y*bIsrFlLfLxEQdBECDkG@T+tD
z^<-OWO9s>xsT3}NUR*FoUVS|(rohicUPVEnhx`0!R2LkwR?e#@a(T`{)((gG0F;f)
zvG~jTadJ~5!dCq%Ho;pvDJiMx`ujEfRI;afUAli>wY<7A$tN48b&hc%gU-J=9{4Ph
zVO~J2#-$VbF-|l^PBa<2M?k?XPfPap4y%Vf_XFe_xdOb1`_r9<izb>ozjT5jW(GAb
z*6p%Hf8zSUtdtX&jWPmc__dqtbyC4~E9phsnTRRf71NgYH1LH-xxDhhojqtMsUtA^
zUm6NlIN7WFZX}kEjS+=!K~aV5Kn%k>hQmSvOixA~YvkZ#vMPNDk=47L|9a&v1St;C
zyw5)dDJUZ;GoYU6&whp(P%m`LFaFTa&gesPe}LM5;U=qBD#GiJR$Y3nf)P308QZ>Z
zt7zYiVdcMZOSmTTml_GyZ*Xrq+Lz;m4~cB6(WMy|sGCV=@C{}vaf;zbaK{A44nmk@
z>8fT%C~p<b*uG#r^!RMM8=YG4;NkjGYwPCa6KdALPrCX4mSHV2ngyH^QJ{()1oLrL
zeW@wRp|;ht`G(2u#?$VC>7RV-+*^?-jYs$z4F0=NIa7LQAWJKiyO5SRSQHD&AW{?b
zn7eXe($b;+&S-w2;Fa=i{ok4HNacbXPi;ZYNikr50U~ZEqXcGh7ocEbm!Z$CKg<C{
zuXX(qWMmG%?zoPD0t-=eDgvbYyr5fNypRA-w2wKFD^d+S(chhmbf>#nLH=&Z9Rp4+
z#SXRG1*V2!7l}W3NoJf--*7*f*V~i4urn<*_LC=iGh@}ucYFP1n`LR3%SqZ3NtO2_
zfnAy%%a`Uh4pv{gH8n4Qa--LeCksEwCe3K|pt9Sgkvbtbg7MF`P8DFxhQlJZ23)pa
zL<|!T6TFebR0>tb#{~GUn2soRp(D99V4Q`HDm>SB=)ahXJtWRv?lFI+hedys7}o}j
zM)i<MnKHlC))_qnrqUKNpl;}2i26ZkQ9wyz3z-X!14zGtJ31lZLzUAYL?Il+H$ee|
z-aT;i@Q;xW!aulX*L?_bMt32;Lf4S9$xBPF$C>q>l4{I*5H~xJ7{6k^baH>5)%a5{
z&3)2a%(I+#T~@6x(#)QRl6<G_j4Jb_Vv8;NG(K!AiLI|TIjB_h`{_GDCW95YxEarH
z+czv_lr$d6;4tXpS%-5!#w65wgHN4k2ta=Po13`W7*xqKk9zUALA1dpAtD`<KYZqn
zp<*%cV73*-;F@3g%DTL=4PT69j>14m2f=s!EPV^}0E2K*Ko|9T1BUquej%QP-X4UD
z1KY?FZ16W8R#D(#KzK&v@%|tjpF<QdTM1JV7YC4mKOr5rVx2h{;(8fQ1>6W6Cb)!m
zY=UBXRYdgZzEm!Mv`7=}(UlySS`Q_AUP$bh@xoDW%RW<JK+?-o8Oy=+Id7W_{XIux
zh3p66s%_22A!?#8kFykaLYt-SSnd}mk5VI^1B>^MVQX<|IAN!x?)IC;cEk1rWzgUU
z%j6)>y%H<B{O&B1p;01k*d9Lti#dL01%NZ1oy?}j%vBg^u=qQKY8qob-4?GIIaoZD
z%eWM{#v|^fu#<u(h_C`W&>#OLtl{|#4A6LTdMNH=O#S%U1!YydIEc+V2H&kH(AheI
zs1N^=33W$5np4<d`dk)gO6jIL2pMsDDSAhU{38L;uc!CKfOTa0vC|-&?+Qs*tLn=+
z+>h&{w8a)Uv=}?=Tm48~bn^R*XmKn(uV`Qzam!(t-or$lE<72qu2b}B&H8JXY4YE~
z{<cf>X?l=Nm-$x8hbcvu(|=EcFP|!aiGtUNVAmVurBGRoNE&U@nAnsr7VuLi+rdy_
zjG@*OJn6P9ro3W`kKFE_2C&(K?qbHkEI@Kg^8rZEJ39)>F@mCVA3i-*f3;#Y1K=6`
z2jMZ!y#IY&5i>$QjK>?SA?v-{4!t&&w?IVVQSqu8;v6<iS;gdBBtzx%M-;;e#PXEo
znUagrOIa93mSpLo#MdY}QBnAYj@uM~eG?2-{W#f&B$9n5zk=z~<U9g@$fA0(3q`k}
zMG*GQD6fvK(SFmdWWGnq8+DC)Hl*+(Iu)ts8H#o{sAGde;~);}Z5nKy3SBf`yd?e*
zF2jC|-)0UYggq{f$yfC82YZ6!E4OvT7y10BT9&s-!J4}`5YB<476vZx`ID{FD>mH=
zO^L3U@?zeVRj{1Fi?!~kDbY>z$!0(Ak*F>EQqcX6!xW`v2aXCbEIWXvj?P2zdy}1z
z7`7@-gunO;25%F)5pa9qJ*X--x5gCUiDW6eu1eh>^ePn8(z8)C#aPlsq?`)Q3r7qw
zUk)3l2QmD|!N>eUk%JIa(vg#?{=+8q78o{;!eF#?V8;wqSm@kh?z|QUdPta7m}*XP
zQtesxLz(1FC0yYOK6;ycw&{GrZF$a1+<b1=yqC<1y6<Ayd2IY-oJGclp4@N~^QcJp
z<j@K_#csbL7Xx4@H?*BK5mZdEOs2yVbTI^@l!el?6GkAW;KY}O8O&FZo`C&71>9#E
zc3sXJMROEcf@V?Ul8hooH;s1>8pNi3_Y59POApn2=q`%BrH7d@Fi3M)iy2Yx;p^|(
z|FGNWSEb55gd8cc@HNHD^YVvbd=pCfeWQmQO7|^YK$?9W-`{W`L{d{s6pgDINPsy;
z9KCxgD-#R(o#Ki_oOi+I{Cc3{camo3vs{5c0+3*dPKNcqsEDpj4aeP*Ox!mRkokU0
z>~idrl-Psy1f4>$k||0t^vg?UTECR=%16;5msWfv;XWp&<r?;%(CZKtLb3N@Yy7=8
zd;_T_AY(;&A*bbR9cRyqF$g<@nW|H+UFe6K%INrq>{`3f2r9nvDbN$*5?ks+8x-EU
zf<48*q{Vz7Nra$CG&qd!q_$zWGD9gV5(fcs;8(_TI-P_^U-&LqGq?naOz>S8z#9BS
z#-+YP>WDzrRe4B1mOGkGz5*atbVi#eS^_%7+P=RL!1kNfRJQHN;cR8ta1jXTA>%SO
z{{>Dm{C$KPXK-1)Dd3j)@ZbzUKM9!qM0vQXaPL&am#YN&kBCW*-B(@?56rz^qs9_W
zBXe0T(-*+#D`y@?-ycQL__*nQm!Yoh@$$VLw!&WMGFSY{<)g6YwwWd$d1xL4QEQTx
zGY#ca@MT4TE>du|o?WSI6t<uhSc_MQ&gX3n)%622eJ%0APXc7JiR)2&jwLA4d!)$V
zqY5CUO4jv6QWm?Y2XmuW=3K-}&QAqEjLjgP*e>Wn6!L=AMZi=23V_gZ(Grk&=ZL{j
z`Ywoj2Z0RfAb~VP7{~#BD!2?Hn(NuX;#Caz$r;U3m5|^Z_%fRm)P{)fKv3iTu^_;}
zRakgHT@3P&lRPL0g<tzI1lPn`iDx8<zw~zh?fmI4UL`}|I?WfC7iyu5kKLqc14w#A
zCya_yWX<ta(X|cYZ@i+}STMLl5|Q&tmUR~C*_SHI69T1gR*0)+cY?JU{wT?5-n>cr
z8z#^EsFzDrKC2Mp8Z3h-FHGKV>K6AijB6m2T=Nl=?g|~U{^u!{hqGvNh@y#jmM$b@
ze;&|n%87vm9q*-eD?mtgWEIa-rKCa$U>O-D+IEe)aRH4z2hB5#vyfY|ilhr+v2wgN
zp?wGr`|dG9jC-vZ0csBkjv!)gWI*$FvRU14^5jTN2SEEFTe2PFsvr3u(r@_QE+&nO
zj!w?W$@x(`9wb{NVie3dUw$TKdGD4|DY@uji{E!$(d1~k2$ct`h7ta0MvAJ=v<E_7
zaXAq+GQ4>{(=;~@ru(?*1in4EF}`=IK$qBkLQ3)o$e**ZL$I=!Li5;4p<TD?AeQ_}
zM4$DN1K;Sy2v*cg+ICuA(S4`_$lb~OKq7aCDWD4UlxERhpMIV+Rp;&HSt{_WmC9hC
zS)BaVc%R6q&fuK%Pf0T6K4E}dsc~x;tW==dMt1PnKU{6zjZbYDAl4SHkKWdcDmK62
zO0uLW;4bKJvW0~|m7%;^V8-?dzD(Y@u?t$JZ}d+?5BB%L`G+)*aTls8T*$Kro;LY;
zAg%9yKbphtCD0_U-^R=wPOm=wTmAhoB1pPRTFPO}DqrHemhINkSj!8YGYSRu+qe`J
zX3vJ6-S`yU$7)#9E_2I$c@?>dQ(7b{Q<#x`mdo~5cZ+KEXWAUNXnKiTm4t{Bq^wHR
z4l?GCN@nf<xLVXteUrpvg3UJ-GBSMm^(YKnSHzv%><milJQF!#>to613Q@UZe<cU1
zQun%p+S&=sBAaoYA-?j<LE6pj`a(BSIme4}2hflrtRvhqdLWzzW0ULP+C-w$Kwv-(
zprDv7=7H`&bNIaf@ed*=M7bE6MSVT@D9CMHB#{J@fKC}`RAlYqd$K7R3b~mE;YtSL
zfV>T%c|YP~JY}MsENfW%A&2eKMLH1%mI-<%=R!dHMKh#$h^1?$WA&@DfaH^LqY=6N
zFQZr}$=qzpZ_;HyGX#^Wv+=8oS_z?RmzB!SBy89uHwlG&x0ok9JzW^pLNdSFE8e8E
z_Y!RLJt&T#<CJ_ucB}Pb_7`gd-JQTme1_*x&<W$ORkaUSchX$ZEYmF4)GyR3{XZ!C
z>Zquq_Fa)w2@xqN5fKpq0qGb*Km;Ttq(LN<E&+*yBA~QVl7oVTbT>l}f^>J6G(!!;
z%(-Xu`+oP{b^p5SEY?zq#W|k6_xnEY6Tla>%g-O@-K6dtMcfL8PTwM5%1%N>dFRlG
zOyX^w+xQ0n6($fT&(<oB8*hm#SNWK-1R8XeJ)=2>rGn7~(aM~Pm!z9R@#MXOnmjgk
zv7_K>h|IS{_29!lvFBjjQ;Ln#yh)06Ql!~(=<-#(0#sYI=`FtYAh_I_@#dWN?Uy!Z
z{3#>=+2qzz;;=kYImIcxu#c3zumEyD+(HL&Rjjnl?sOTMiKBrY!9XPH!M92k$x|iv
zE)uKcOnxP@svFr~Umj+~oA-JJD*e8;PEEF-=puph>S4ST>}+Qjj<Y13A-F@^LiUry
zc=TO(qoKP;gpTFmrg386V^g?}5cU`8Dk2)M|EJQ;I&$hHEFc%Z<?wBrs#+m<=(y^w
zSSrE-nxaQOA;XyUGk=Hj<%{o%O@TWf+V)9nAQj?2)8^K>H_&aw@Wnvk5v2e4(D;sm
zE6d;<6NQS}qf7xlxXnWid(i@uoIsalp<+VR8yrNIT!V8nNik??J6OA4nw5>gcdhvP
zeG|(GPHx)Oc!hfZl%v812}#2oMxUuVM3%Ed)Fb1yt5-D@L-}u}KS;_vXnpOaX!hOK
zHswX7?Beyd1qPBu;{b3xTm)C(=4@(e9C;_L|6OYa#*D@A+Rw2~&vF{S+GpBVKitYy
z2l|_!;`Hx1Bfkv$sraw;I!2^Zt+V0}T|8%&KJFbQ{*E^8>N(1$$unL~yn;U@2%stG
zNH=Nwqi=Cg7cMAEKG=#D?GK==#5X0HH#2XiKz;}+l^hN^OHSSik%++s>-&5d734)j
zh`YQ*rFqlX@t-32$9Am$)>FJ#Sl1f=E<k}r7%SX6bhOy5qI~lllqaUrLcCEeeSMxz
z{F}(>L;{1BV87mM(5XkX$ZiQ=)`j%2k5AJ!OgwnfHG~Kg0I^46?g|sl5>Fg6`z3PR
z@<sG=k~j53A_(7Y9w}<!Yf$gvb6v$-Jr)qMWCsnllY8G|sl2ZoBj$A{|K4+8(&xyG
zCH}Ked^MzS1AibY)^NUtfR_{?j5*m?X^m}(6h)qE`(Ry83{<kBrX*syv<80!Wf<Vw
zFz&b?D2-COUYMMy1h{-2gVGodKa5KOE;7oJuR#(yd|Pr+nO)Rc61*w^VH$ghtT)m0
zcf}1Ff75(0W5&rwTpNb{W?I!!AX{M=4tRF_pl$1YJ|$zrw6F5*8+6<wuPy$(yzjOA
zoH`*g*Rb7@fgypz*qtn4=)&Oe!Q!2`)<_xoYJUI4EACFU-+}ov<JilA^zEt#XI|P=
z7ti>O%Zq;-6<_detX6|p4$jDcmVII+`4y8ltjdl=KdW(qeGS;rQrnlA`GS^K`@-VJ
zU!1AXfWh7zG>7e?ijw?kU$r4(HRK^`cxRK%?X1MAb%H6DV${^^;g=ADl@E%uh}*$k
z!g`93t11p;#g^S)-#x;f_kc8IkjUIQ5*t-l0YM<nnhroa*D(wab7kKBAYTj}Uqkpd
zXLW=b!ginl5!inN!2cyF7DM%ZU`?&hF{TPN7frv0NCksCy+GoL3nguV=3vmQEG5e;
ztPS==b_6^m`1vYO=R~<_f$JKf(<oE(o#bz<+{(hOmYPE9#M}yJF4sBDT9Xv=?6orb
zxuSrHJh`Ly@|#^`W72_18mMBb>WwbnqZ}vOegk@JjqiB`X$A|H`S!9;B~BNLbm*<!
zGd`EhyDwUAJmH!V5}(Ri>t|pYHzFKI*Oa7cWOnk)Xu<Er%%^<*_iB4Mq#>A9Qx!W0
z?u!j9lu*qf)QlW|YO2T#g6lMZ0o|;(&4h1YPZtDT^CkU}@vfymWNW~2uca9FqPvM#
zO7r-5%JfooMVeQOly{1i4WLYV!p*R+_3^%%-KRLWNlYl{?{^@u(yHwHUR2Zn&H71q
z>`DR>%Zo+B{hJL|X3S2_(UU%~v6&t5gfz3p^QG2qHvUtgb?IFDiUGQn9~$RXrAw<*
zIFmz!B+jVbHZ#R{cEc)lWQ>o>z|v#@9L(eAf#Z(pyJsc0wPvxUV3iu=G32Bl$Is^R
z2z@XGR^6|fc70hxI*ii53MGNNkvMJu+QN1*^va%ZQMfE{*ABb3w!6k}skdE;h7vhI
z1KfhM?4w;Cu<s0iQ4ypZ!LCzuI>W*siE+VS*Zpm9x(aPG1v`6J2~>iS0I~~&JX2CY
zJt<cIMAV#4(qM{QG*B{!NP*-?3gla-aQUs%IW*O{=WE5g9<dOtW8emDCPTO)|Ipeo
z94zkfqp^n%*fpfDvNG5Nhs$C9tQWtIp!tyTMRWdW4S(3?3tCzKhUcjy+Wm2C_{#X3
zJm4%MWOaDZwqI~SC7w$6qXaY2J;i&-*2uHB=sy}!*LRM+gvQxPeKlLh)6u)uSSRqT
zZl!Dv^MtX5??z#Nky%%WDL8vj%=>1zJ)%N}{t|IPSd_2_*NMH~3#{}BZ1jxY*hR&A
zq?vSnkuD)y>R^8*V6Fbn*P!8MVc0^GP2AM(SAEm{Wq`jA`0chMfbFYiNWO)@G0q5W
zly&?TCgQK&>~+063HT2d)x2Mq?Q+I?j6Kh0KA-eVn8@o>Qq7;EKk31aWe?8Ke^NuZ
z8Weyi8bC|NeVNO}C#Kk7x6bNMEO+gzePh&l4TQ(-`r#=jJzaAA;+mT%hqrw`YpUG`
z-MnU|`?2)#3%|PKT7kEZYR-ZYaZdj8d!?&gc@`ul_g8NReo}oH?>l|~KJNqaF=hc2
zNl`wnL)};4d*|P)v|hab{J9-+cb=cJZJ_ARXDqvW4xF61t<9LG9jva!>%*3QtW02}
zO-@SgZ}5leWIz5w;`-^K%ZkJ%-*~SjBMd0g@V@BsE6qg^%bjFiVJ@z<A~OVAg+YZ)
z-(Tb$2?=>W;u%Nyo?sHRu4mFpgid8}kz@@P?||#W%QXLk8UHmxHj;xBuE@F2db~GV
zEEK4SH}MhWp2yOkyafl;J$t!*@*}V|!WrCxEiJF9Xu3WG-}4LVT$MVQ>c<idWV<O^
zUS)c=@H^yT%RsClP9e1@L7NHAo<Jhg<xe^9f?~e$kUqfCq+A8(ac_lF!`IZCT7=bQ
zE0I3UWcKt^V1RQUWDdZMj0Ibjq@N1gt&DV+9s3x1^NG+EJn%@O^WMy!)#a-{(4J|1
zzKIgbd30yt;YX(DI}2wFd!BRP^UavvTY{l%SlqhnbRzI^Q^BWR{vqp8!w>Krjp{Nh
zs`+m0zfHT+8|1m5w}gv=ZN9W0#zZ_WKH-bH@8q{Yuo4snMDhhX8DJKv5E9im!MC^?
z94ra<WOy&~&c0HIKaSqa<JAIoxAKT@1`Dp1&&7GCFXh4a4-Tql*q*Usi~YJb(~j;P
zCLEw>{29GGTS2eT7Peg+x0h-RtV^$%M4HtXr{ER1+FChH%yd+&qS>>&;ByBsHglB-
z1+$BaUrbn_3c8Cl&@+Dbz@-^Pd6Qp0P%p!1ZI3g%0rIM1oz9XWoS=ISHi_$=)<O-$
z8-mRa)c_iC7-bJ`BrnYQF#w5wjR`6dqmV<#FyU{%eK_7*5@Yu7C3tiG?z&tDvOK&C
zQO0|)3-s+mwI?(1xeDLC#7CC=cd%jr>Gko*@;MKZZDDEv8Ids+lI8W@;gp>3%A{YM
ziSjVYxQ>VNvg0&+;rZJ7NFvwvIzf}l0OIQu!9bR5P!Ds4UCXCai56nc&cumkzQ%7n
z&V>F0G^XhSA#5Hm#cANQeoM$XJ<4V-7jN5p3zkx(qesfc^IVPluPmSgcI5yd_4}SL
z;b#@$-NnJCp9U5t*lj_N#$kdS?z(c8U=cH^UqS*yy~Xy3#ukW7ly23bIJ%#)p>HqX
zcET;YMS&y2W>P7zVny}z_eSnon%1ZphJD3K!&h#?5+hxEq#?Gpd=O~quhWa^R<t!T
zuAFoZJDA48Bm2@Fi^6a%QI!06N3IE1C;&vMO!V#?h}E*9uHND81N_j3o`?V+gM9VS
zI)_$u^B?EL@Ko&H7$xz;+<ImwJEK?a8zu2?_v4$2{PXQAo3pIceJ88FT;r7S2>1U?
zyqpLiSyq@3XQt?-Ae;Cye(@rE#6;yO^WGb1!ONJyNpX{Xjk^AkeQT@WU0>wdtiB%c
zHYK_*u$v9%d(HX=w~)T!k9rg*$iMoiyVkDonZNIJUsuZ1TC8Fi-2$&`Ov%>bL8_&H
z07jB<Go`3+#SyWu2i>~AMdG{7#y`P%-5A6<b;<9rw7vR+?ihcgr{X7v2U+yzHWQxN
z(%qMAV&1^`)=b|J6aoUa<yPK18E~yPllGD`zju4Z3Vl&yb7Kt+=s8of#=X|oF2w}1
za1ETJDQg|Z->Pq$ZD4<{UUHT2#Al`4t@kc~ouaj>Q?KIn**X1qFg|n4Y4s3UfO6uW
zJ74ka-UnnD;gqJD$L*`NBhGV~9Ixn8E*;w6d>*uxe+8X5rCm8=pBE~Yo8q%UY!&os
zsB89A%6Sl|DtN<Prf*c1;<n-4v=%N!f(8~$JmWZ`a7yTrR|x(wW58j8*=f^fa#o|w
z8sR5QweJK6l+kB>2!lxJ%{JE&5B-GHs`1A9`I0{FDW_6(arD+uH|T$Yl1<iW#MH6H
z&!u|%dLIp$8op`bf}5e6MPt{tFvF!I9Y*n<ehWa?6}A&8U%Hde9<$oLbzA4I4`eWy
zKiQ4dTeUrfllES1{EZRn>0I&2tJB8EEnM#KDo|*TuKj3n&;^uSDu`WP5=X7ZCi3+5
z*Kz~h+PIpV8=aUjLiXnyMQ^BUj&;!|XSc^n2N1VJHK6fw)aB23VDP5lygS<&tmXr>
z!OtD{opD{)=$Ere%LiISrobygCFDy^Q*21KZw~g*EIyEC3nXQ6U;PDn6zYG{dq6mn
zxn1<~g~2k2*JY78*g=B=W#{);2<qsSf>e4GvSdgwoe;|Aj#e87oA}qSU)du<%X4u@
z1kf-$fy4rYeb7&;at#N-jOQPWqoH0noq)^&!$a$%vBiHPLQJKbs9gZF$`jdC6e4YV
z;IVj}*Oo3?;bO8d)`{)#)h6ryro!U=N!E+qSFPIRfZvG;A>#e%iOtLVbVA`*jmMg&
znik`z83^0x-C9}CsF2oKWqhF&K5T1TE=WjH##F?EqM!a&!r!7)tDDs~+*Ti1VO?M{
zd+?sHSbVp%R8WM`1#9P6omIcpu+MF<Nd9d*C9IEo&Dhnk#<KbSLA^4p?01dB)0+9v
zD;_hXerGdKyo6K7Sqx-wXr?ub4x);Ovz;{vTA_1Sz77HUvmrgU^{|En3YxU{>VDZT
zP?KD9ho4J@MF>niW-3<RLs=*KrYB>rQ!G~kYO3=eS{XvVlMxWAVfH-u!I_tR?4)0E
z$ObF4v>wizJzh-cVJ)RDJb611xQXI?UA15e+l!-0h+=VeW@P=Itu&m@@=6+5NFC2S
z!nsb?*bwi_4GZy~J`>-3U)I&GkNZ)-^uvi8Xtgmcs@ZpXt5*;56gJjRJEJbY)fCce
zT9sw4ntr2-Zr%lqk0-pH?CXtkx4`0tZvVP14rZAdYN-qjV6ChP{mK(W$-=w$cZX5n
z^G4_X>~5CococsfLm4k07--jvF)KFrNB3+X-@joS#iD4+>gR@JMIFyEZOJm^lMX=<
z@2X<2@DcJpz!kuKm1|sfm<zxVD0=Gr<l7k5bHb`SwOih|_Jjovn2Dp#VH;@=bjA1k
zvg2vqxotXB#oKIS9u|*37C+5n<L5fx$P^@!_&nBlT;>!z(!}3fU^^f9o5Nypu@BBK
zPRhif&zDya-q-z;*uB;0lBf|dR66b2Iv|fjF4{|yCew2=F%;$Az=6L#Wz78Drw6P+
z6X-0T@R)O5G~kL0q=IGUhoe2GUavt-o0d1IFQfBR99qJ=d_D=%RZ|Vj801nnK?t)B
zrS#r>>GA8l1T1T%zW8|#M_0#qK<$*CWSp>d!MC26>5memC-plwHeYkFiay>c8_IB|
zVF!?DM<ECLQW?A=lNaGVEZl5jTb3)2`j<cXNLA)nw>(+V_sYA4UMX{u)Da9!zMEWF
zRkE|-D-~w4Z{1uE{0Xt*1yyi2Z@iAf`DTG+*rg*LVx@h=UoL>$-J4{iK<-IdW>S`!
za##PXqKdk!6BhB)@8`gyo->%O9Tb$Nkv#%cd7=+5K5ssQ494<#9S9+c_9TdBT@T@r
zgg*qVk%-rKCzj2S7%Y2^Qj2cq-_Rw!zbpY<u&FyPW>&E+)c`+8$HNPMF>dqqc?gEH
zX^RR+ERp^CC}bF0R$!5JW8X@xK}LIgAX(sUGDEqD2|*rr@pum#QK#?pOj`hFM{y*=
zo<nATxl>7#CSqW7*;MVnUI0&@-~Fr=S#$8DCV<YO+2aMd=uAU2yiKu6WQ!$KV=)qf
z^2Y<Rxcd<UTSp!d+h<WgoByfW22U4iUr*4qvj*zTDyQs|51i|Dw<JL~FZ6<Pqe112
zyIqgV?+xUokgD&h1UNpUZOz8R$iDdk>%O55nb}>&@zai)Uc~vAQf$^#tj!K;_@GRo
zQ9sgmm;QyHd)mjUDrzo&P41O9_QO+GoZe#AfkuSyUd1l&v-srq5r&xc#+v<brtIpi
zUpDX#xykFoe#G_dYDB?%OW#e;GJ$7D8uajxszN^_2V;(1cq&3_Lx246SowE31N<d6
z>Htf{Mh&M=d#K|Nob8V@oQ51E+2EAL*A+=Gvh<OFGDq=Ii<5}VBen`lKf9aOr^{6`
z`e|pQYw-#7yTU6dm{`5B`wHicz_5GtCN3(_vW^^;mU$J0jN4`Ny}h$(QVTeKl)7}%
z#uDxghL!N{7I<aMX3w1ul%nD#UlT4Jr(=Xpyq}2QNM?&Vb*i_D){np}+>v~$_MARw
z==Ev+{x>Iy>iRV+r!b{MzXKyUy|n+E#iC-ZD5plF`zdC?neqxO?f8YslnnxGcO5El
z>w*_E#w0I3UP|4Iuhn2V{d|zM)>t|H@Py9vW&c&b?>1JC_HVD=2F-w>h)MIr^S-Lf
zre5totd4)$y;AE2?fMMMjDc<nD*_SVAjyjfO{dUXahzZA2n;m!GWQ->f}6>l2cNvc
zKI?5RBR#m}Rk!d9@&`|{Y5ZP~<s^;QmpS^8K85UlGNgAGb~dB27mPgGKd!ei|E)Pe
z;B?g&mjO2sF|;ErP!w27nr=dWP?n-gR@P``+IJi}t6!a)cdPW-+1qPTPXsPRrJZKS
zbWfR{uR<=L8~eIml5-(uCo&Gp=j^i=5>NW7?tK9rNeT{did^Luxtu$&8yTs4>lh^Q
z>u|>;DrnRYw{_ivqW4IptYmo(&sZwf!$At@>iH{w$F}@Eqz+{26cMUTm9U#1@uhbt
zG<$tTg09e^hDHQ}ksnWyIMMs0r!D(b4WEkPC%QP~K7QT{!Sj%v+uu^X7aW}XJGS`C
z_A$ewZ9E!lbMU3?r?|rA%u8+_cfV_Kt2GZZ;IJGoI}qSUxv!?pu#|HQ)yoer%~NOv
z%eGKa(mfR<W6ji!<nO$gTc^u26sUeEa%%4oQC?4Fx*oBD(rIaw(SI5)LNcKJH7Phb
z)w!%%bt7CNRpj+Ixr6|JYJyhx^w0EDi^`<b)nsEIy?^)?o90Va<J7BM%V?+Q5;lhP
zu2HS>-gm%a-%MO_`Z$&MyO~R?=xi#^Yidf$A%AgF-vprT4ctU9!>^=P9K5zV{$m%%
z;g9nu@Sv0d&YU6pQeh1sx7ex1!LjD_r|Quip<aa`=b4_dFeUFE9<@a6S@d94{IBtc
z$iObQxl}e?f0qNN{nbYC6{y0~8#Q#;z6Li+{ZRF7Vd%$gW<IWsK8=-G5peV%)eNj=
z4zBvST`ev{->qOP-<IvyH*~hS5Yx~%j`@||ecNFavtI(^6-7n7OEA$nZm}`SUUKke
zetg!~W)p~Bm1CW9DD^=1Z_epcVt##I@%2rMcW>C5?CxIi3Y!-7KiWPxvq6+fZEI;X
zcQklevLeq(*NZRC(p69C)xF*-sG2hzO%(Q-$C+Wv6Jn9lF97K$k={o_d)_a8`_b5X
z{?Y}wt9t5Ed+KQiBI!qG!DQ3D$x^g}h@ufU(6ICKAP(+J;lx}2bJ}H%Wkss~)79yB
z=;B;TxUkG>`I57SSL=5#>ua-jy#!=LeJbv7O*I}VI<*O<>Q;74t?-?1wy$J!oy*%H
zbNz6(&B9-BqP-0zzfB35P>=1tubYIP_8#uJ+A=MJE5Qk4I#-nG;<>}J*OM$+d-c2A
zj(sFnQ*<1gf*WhnM;uU2G%}lysxKs8_;ivf%~tefvq;cV3B9k3_)$~cxJ>o9Hnz5r
zHOo45NJet^l8kt1%G=)DMRZtUEs>LE{kJVJMgLC{e;Zd2`h3jD?M+QIlYju#4pAUi
z9Bj!UMh<L$yTtnHm#Eq*7PMT3FO!|c@Gmx&wRv=ynXLI`0DswWsu)Xj%w+!CPUyhX
zzteea6ALOB^;o{bd5Yct6ALPX9Q(pKXKeQ$6ofY%X%KzE3%FuG%@abXJ#;;O2dyi9
z_eH<YKsmU84=covW`wUlQ?mwRWJ2(NIY!{E3Fdb{976=U`xq=V3dUm~uIEQh9}$bB
zyzAvswxR@UyJoGvmQz<@30?OAR*GOlEvGt~2)M*Z)GH|qLx&Z1KD#8stEzXpUKUS;
z1T%by96xWRu)NXsO!Vu_Pus%KT!9equ=8L9?oYV)c)}6o(EZIxOl-8toH%s-*O6#a
z1HnCkk+?ClXChy*(Jo^M*5pE&;|h(~m_BKivSGp{%PTC|e?;%^qw@2fnkgnXWi6_E
z<rS7csrj5tIM934*KS=&#ro!>NJP7zh0L_JG1JwD^p^vY9f}##T9=<|lKt2^?ceSW
zeU@zzGk1QV?AzjzDqO_%lVqz>SSCzW>bK|z(VPVp+sXu)jrLQWErXRo2xBb*$BiC}
zDo4jM`z+9o2N0XLPHdLY0xy>B?K>B(r5*2ubF7Zi%rouXyYnr?p+v!ZT*33c{+zqI
z_z6FKJPpq41$u@NnPKzTsm$lF^_VBY45k15b<Aw&cn<Q)d@XbLng%h7-Z+D@yr}Ap
zF%|Oa{xl+`NCRQ|iNdqqSp-FNm3TMKcAyz!2J{^D)7ja7jQF^9YjET=g&)>uXmAPc
zfz7$IaHeqDT8G&B)7|YcNv7ZRus+rCh%xUK3+1HO3`G!IA1v3n=zF0C*YYt01r4uc
zS(um-kFnmPB8ULr40+URs?m;h*dca0HcNVS99XU9Y;hprto6yhlYiFK?XIweGf!Sa
zBIj!|oW2GIeyjPVQX&_hxO>U>T^-G@>Ure>ig|8c(PKHS29IRRLKb7{5#Z7#D>Gk_
z1gC)|>~3lMQ+es#1C$4U5%%hAY3HjKj6FUZaS0X__up6Mwmz%&HE>>&p9$+Pm$@0A
zv4b#uC~;4J<4*PMy}IW7pWl66p`#w&eo?4#=Jw4OH*=kN7qW&y%?02}&gJ-JL9GzY
zgm6glDYjmLyVP*wwQ1}hTkF3AoGUE1bg#L-00RZtzkIk{@vkua_r52e{|h*S-t)m{
z|DpJllRgoHGFea>y$D59D1W+FTMT^eaEE&lPXQ}u!eNCDGf_qOIox!0bT0x_U7lM~
zrXjvSesM9$PM5fcIl#hU_{w$mS95BSG;0}Oj@t4#lR2jE1l))zJ*DxnxiGSSxnrE`
z`il!Jk6VVAtCI{Z<idT4(`RRinOV>Musq6c8M9-;V{cB|){s<U)o2S_XjvHA5Jqqg
z?%SklvX*Q+5^f?^hMXW|#>W~0%eK4Oola%ZEmR2Yr!s5q^||&d2TrFCci!3+=r>|F
zcjJZvS|eclBGLCfeoRueU0KvCWS`C0DU0>=KW<o|vk#c^g>c=W<G1n#ej_8@$uc;z
zBizS6?j^Oid$>sqTgPgH@@}me8uFfd-xrr=DpJkJL?Ivw8<4bYr}dDw?<coK(#hE~
z7&X?TXq|ZYz5DWp&DgFu!Vi%o1;V54)<rx=6MB(L&5VVJg|`cRrhX0;dxncW!3qo^
zza~N}hxo)Yrai{Km+sss>#oh~<15>*MEH5W)tNZ>$`;?}yM{WuzGnqs><oM=goWqM
ziBa9}gRbDQXXR@P6z)~Ab(&@_lc7hSk-E-H#<MV|^;D2_lE4#1A;PaQxB1Cx^!G^j
zyYp#*)sOROeG-(t&e#+t7pKj1=xoVn+7;`|Pt3D;c4G&f#IvVn6Mup@lb)%Tq+h7L
zLzOV1pQsxte)QaAciSswQ3^T$og|iBX4JisQ%4^WqbmB~W8F{b^789n*LdKJdwOg-
zlb1+ZR153N=Qm4RLTv<cjf3qb+*2cj3zOvnpVU~*rW}~fCx<u|zw%ykgEl!+Cl32@
z<C6MC!Xo}>drC5eFsAagj#|aAoxx<xqTu2!Z!qP_@Io!i@5?j_#-GjSrQcThl{6oe
ztx);~C&HU%JQI{RXnsGMHZKU7kNIU2x9h)d_f=Q4or#(ym`j7Mlf+SHIccal=1*ZZ
zMjnS^eH;>xbIGXRtmZe39-|_89)C7=NW~}!O<nSVmntohK`wut2l&k~cx(is4V|qV
z!>F%v<E*Ja>vWi<5?fse3M3Y|EtzAp)gyyu5)%k6`!}7-Y{6xBYI=m@d6y44@ibKW
z$oE)&3EgAF>(FT&*GL9-_e}EAD><sJebR=zNVBVdC&#Hkz|%I!XQ{x7xfk~CFH5^R
z996_^wh_Fat-~VhA1F8anV&o?iQFSVTNj&SyDaYheE418&uhqgmKQGzuZ?*YfBI&9
ztCj4_#Kfmki~uQ_?+_#Ce1D(7C6gi0&mPk?V8(AIeHosl=rPq($sJO^AK1d^gnc#c
zUNICuWqF!;5C&s@)`*$fO)%Q6W?|~wxoZYaR2|YuG*)eWmfVS~p-U*^m(j3uLCr$T
z#C5_tqoAwcoXF1DpQtfsZ*sWf{mFO1N$(ob*|!|CI->es8sjK|6@hVgs4S@nP;IM*
z*8_#HQS5HRP+D!_vp&fTUrZHjxM4T2Zz)tJB~00bZED6{ohiS>RD6%PXf4QN>=%Y>
zp=#3EZ2|5%fnL#|#~O$s)6gNVGtB-kD(2Pgwve>y9Y#|RgW)C(nhw5>AuLA`uKi$R
zc0JZ@cZ@`Q(1Kc|!R6Tv3Z_k_f(E$>_XhQcqMI;@ox8u=G{9NSG;}4v)91IQ+U4|A
zGD~fcPee`P56-FjD9d$dTHFx46y>Eh0gU-|Z5h~+%sI<5XY7J*uv5XbA%~UAzO|<x
zGZ382j=jkxEumJb(?Vlw$#d4<w!e9WEf|iAdEb`_!JuON1J&QTb&+hEbKItsN#e(?
z^PHaVv%D2r6a~;G`9U2w%~0nqMfOV!<VnJABd$v+r{wm2^;SH-N+(c;J1-!Hxn0ml
z0Mst`t@!r4C97Aq8KxvWTrxJca#>*7tR9VFJ8COslKD|DA;LZDzgF+s6EW8D_N!&t
zk;q6b*E#xSoG}OuI^s|KH|7u8;moXCib|~r@p-x4gg$srz2iRlD6kyqlP*X!d*)wr
zP@8wOVYP@#5^0vW-h_CcmG|B;bM2m&&+<e<N=P4}*|o920XIiPqC!97Nj~keJj^I#
zuqdj|ew57*%rq&~h`#*<y(Wg;BmLlulSkfE&-EEC$i*9&q1bK{*_)#?4ldB<*!;Mk
zE)@SAk}l-~-2A2dcsdb&&OLDV1G*Sw>=?p{GRW_f_54_(3ME|+5CVg%17z$gK<=cy
zmk^>M`k{57G%g6A!dXs{*ll?nBPBPBcaw_oC6H<Qg*NN@G>y-<g=OCS!IsIDD{o-=
zNeCpV!&6=5C~in;(SAfhg&qr_X)rjJ2@%7{jb1=3IZ`Y69bygv%v^a|I?|5?=#;hO
zMLXVi*%QzdZU1J-sK+_=nqKQ@$zPvT-tS{dv1I?Kv~kO$rI}X`RY%2dN{j^68V39p
zoHum65b1Tr_(53ki&G2qh7tLA8q?A2Uh~&@!hXG@9qlmy6E<gPiuo)Wmsf<S^j)np
z8-$tanM%U+Yx{bAT(U~H?-<45@k?g6$=z<V!kYSN!L@i-AsL76&1JBI{pO8TzYd4j
zewXWT7i~rlb-V8k*_dyo9F%a#=tj!m=vSotBX#r0B7}ZEweEcLrs@Q7q-3;+suk+y
z{mMmWX8dN(I-%Nvy^NM;Y0`^Z1>|}WGsV4@Y8u(f^?LKiPXJ+Z!V8nxSv!^5s#pn7
zn9ZViF1moLwsRw_4|49?E`CK#SUKUP%8QiS1qYS85`e=B*JU4sPTF}VGR}=(y2{w)
zXk}%Bv>_*7+OEKLJ7Ub%Z<a`u{%Nvch5fs}yq)?LN-vHD#_uQ48j!Ycx*~B<dNOT6
zW&fphRfPE(iJXfe1)R>5f~nQZB!pRI5?gQVj8^>0dL>%#Hl5QG(eP0fj+M5ur+gad
zA-9o^RrYylu%vI$V>_w}i6wH|L&Mg#`3Hm=*Z-(?pL?S`Kz^UDu&!FWf<TI3ri8GP
zOWULf%%xdtuh^_L+Wi{0Upr_*N(s_W<LImPC3{>*kR1NAAy19<hSJdDflfX3-a733
zC-YfE-|JScxfkB!8j<(&ilp+SP6YZE!jq~><3^{vj)QBfc5$mAUUhRi4efiy8Iki2
zo|`b{K0v{D7TszlsRJK2v8*syN#J66_Oxxa!4q+Qvqy;5NpRX1tKL;|+P2-X>8SH&
z=5@B9Ul8MWs?^xny^-Q($1#UDd?9Q>n=M9URWn|8GfaetnW~u|`GHlZ4Ok)2#1ywo
zA74>CarmK3V-)2zQ)X)LrX^T!FbHnE`h7WQ88NRkds)D1-*zD|w|tpOd`pY}DeV<r
z=2jbHn|{AMMloAeV|BVEv9G%11J5hp`dv#t%!w7owsWi^hQ;GyPl7WEv+r^0TK|*v
zy_B;DR(!Ms{#iPdO+JB`ZM5s6{oW8=P4FXS`3-!#1ZB6shP;9~c<>~s^e2!M$CV<Q
z^glmIhjE_fAA?qomFVgDcHrMhb0i|K0Qwe>_tzmy<v%K7)HrNhM++W@Y<Y$MQCE<2
zC!4269r=<gJ1O?*FV=V}oOSAo(#&0C=5d-v^PUj{@%IQ)4|DbtNCHVQmNCyLq-X;U
zZhdT%ad5b@^!>_wle?1EwE~i38{^Y8SFzcjNOhB`6(wnsx|gzibTpAQxO+qTd~Ddh
z6HAT>j;_nkvULv`YQWaxdvNb=b}zyy_Z}3R2EZuusV;RCLGC2J#H9nTJc%h+xhopC
zKY57gaQU@;)~e9mK3$usvO;*ed=Eydnv?>dgI2hseDAN$RvN)At&9oOI+Xa{d=Q$P
z1Fw?6tWT7om*ldOe6mQ;$<>p-AA9>IJt|-A_UEUa{AYnhbz7c1^(eN(<e(md5azvi
zrBm^emv^o0zZwyswo9-(=>uRa?fxB!q}tqW4PH_i@W?76vFyQErfc`M*APp`E?DeW
z&Ten*7j|QgIbjp#1lq(`A(nfRJP-Dqz2~~;B1JFn1ZvDa4Wo!+Kro85`K_41n@QT@
zgp0@`!d7gYQMiyh6bo(@yOE;QFSb#9h-#@z$wXDax=51bI42y2w$1UKuh?yA=)KOO
zmnu^xMU}jeRx|cYAnBz3HF}+C*6huc#12{`Atf;4Evh)t8F}!D5N4dEVL||>O4FXj
z{Pc`9shkxrBpfS8DOB<E16^SrslI$+oV<72Q)*=RUujQxY^FXs<SA^pRY<+Y9h1QC
z1nj@F+8!CZ$9DDy*$w$J-W72!G@cFWyI%Am!pm1_|NPQ^v-&-u;%1ZyKfoj+YifkU
zpxEw%sFkQ#B<x(ks?|gED)wFG8nCxHYxHK^e(C@*hk4=MM=$dsB7H4^Fby+VIu;pq
zGjtVqf^<PGF1mJ(!E}3T*X{QR#+u(b30ECdfqXuB=#si!Howdpnl@_5d^Ho+F%Df^
z2viMJf?%seN*XUd^!{V2(c+uQ=Z#q`y_mMY>XrPW8|Z$5`vp|b@8A-YfMe8)`bO3t
z5UpK9on(g{{{Gt%aPx~w=hKsE+}FR7uTew;NFRJ>+f4WFzhlz;o>u^Ex*%Q__a930
zKP6yz=Km=EdJzIjH&Q`1NbcCmjkiv8#|@yBA%|Uoyxuk^iC#okGKr!*tgGS;j@Rph
zjtfp}KOXA!VB(-V&<9g-*zly;K;^ut&0i(2<_#geV*8es*7SQrGojb{NOqiVc0O|}
zgVp@U9zg-lK=N&>7YRuW>HDN9hE@?u^heaU9@l)o_<UV}lWA|YsK~B$09i7ic4f3j
z{11`oR(b>Gh<;%xFTqlQR`f$b-RhR0RHBodkt-H`W#_IZuc?k+Qss;L1147q!mH^w
z`%(cT1Ai}Xd$KT%ZdYmb5Y)^J`2Dlu3U<8MV`~FRQ^y>t0XkN3ixkX+9eD&AI!EKe
zly+LCb{spBXZ42e6qKyP1O?x3JG)0#8x<fxCV}HgCR~<AW?{`e*uE<Bm%O^Vw~1lh
zM^)456rZ0#Sy{8wFqlK#xobMhI#;deCP?OlkUUHVvxR}9T(~W^2Ia`hQ&j!MeBZEP
zx;nFcg>M@AX5%Pzx4d|6FILqIki~OW>+uO~RzXwp0K3diq3^FX*lr~8$|WaXCGUM2
zGfmUO4{NW~>TpMHj`za^*8T{Mty{CF##hQrDc_72o%2^slyUe0g`pNcyRF`Jw24yp
zubL5{Iw2Qt6G*~+&AAV8ngodtE#ZZiyk=+?g%q$m%T5C=bzRfwDocfB^529qIp@j}
z(inv4$Ev;U!k*NOu`!P|E6b5j`1%`_=1q8_gKO}Y+V#Oe_Pt%UUzi^lui#nG|Hwii
zO8zR)#s@pJ6f-^s@a)4sEd)x0Cl7GNAoq6YGYZ>n!20SYlv+`=1Y*R%*O22DkD?uh
zhOz;I*PL!^;a|+ZTtv#2YY4<Ir#}}>*MJnz1(!`jivNQvZkKf%;e5`!89GGB4|=2C
zi?2}Ip%h=ZXBrIqEc32mzjMn3<|+NuWWM(T`KEmMjeGlbttejqCd;_wt?TtauSMp`
zM#_qQem?ez@=6g`hilrKSxTyiq%W<`^{1Emkb+0G5AFiY6q!Daxc+5r5n~%{t<0Li
z+1a!G%9>R=XX2)UlXQ@lKJM-3rJ_Cx{gm*NTyN(_t`lIm1jZBMyEJs8{fFo5Yh)?!
z?ETKLv~_INrbe0+V=_`N3ca-Gp6Xqq0)A78aY3ujf<MRiD(}q|lNz?6)^v_0Nj{3^
z<~KgcA1c(i7O4na3)|E{PR%SnclDF-KbO=VTO;|M$fHj0;4YcMtlSO6a8WI|6?#pv
zckBT_ApkwschkfKX5D{(Nd~0NdJ5&a{ZZ|z0x;Nv6l|JSmRjO9QT;J^JH=;-;yYb+
zKDcyS1BV~FLCIW$VWQIqY;)$F5pOMjv5EGnHyaVEWIu`UDVO<tfOZ?P$S=Drqn=OL
zrh=2)NO{&B;kFhJ0Ow`ZM3IxoF75RqfA^UgY?P_lQhC!n7O8j#d^J!l0=c>-gLk7F
zq#n!fCPF9^#UDtUxfgN7&pQ?XS(&}d(8Ly*U!4Mb=gP4q&;_yJTMZnt&&dp_%S#gP
zy?0^E4}JNgm5CO3Wt^H30sb=?V*#V$z;D_c=hWQvNMNuEFZjiG0P8aU-O)(7H7)P2
zAs91)9mzYKaS8jiw>*fp(U@!~Gw~CiJKsz?%wST#abBfkqfCXIONSi9Lq#Xg37M48
z@D}Qm&ULasBAcH-n6!LV;I^IKh#_stQX+D=y7={pzd1>p_AlGWkzRw}oT?%Iz2Ys$
zDH{5r)bgYD7t1K68t$c_bQZ=u2qL?E<_iI)*-m7#vCrrYtElZa{QQ1{S1@Y_H>&|x
zGWb43=IaO@>OQlBJ;I_P_rffI1l)J~m2Kv(Ck{R1E>p=ZMk)11&ch2Upyg9oVf~H)
zKfhgJDIJ?moMkr%3k3Hrr~wlcC^%ZfQ2!Y9E+2Tsq43AzE<R9Z6!=283EPCVU!-yd
zr|>L~WB3<G5Q&2?%>mZ9?sFTQ5GZiL4fhK#?LwNltFnzFpqv?ZJf{;H??NWc`0O0F
zbJ5SIQNDp+wZzpTLqt|gMIHUS2yae~OL%2&Sn$-Lb8j?@3Ac7%8cQ*?=8LL&OC1$c
zk{?*Z1E&yZc>CwMnCSF+c50AThwS{)<JLZE*+JjhOFgs>jARF;?i$RbUoBZ5Z!THp
zSP{VmQh$#T$dK)V&A4+vkjfE#f;vG_Vdy$|?Tso@9|n!w>D(diBJ9E?f<53WQ0pHL
zU=WN`&q3JpMcCATF8~9Bb{*(O0Ou8O8=QcGfo#A&92^V70LS1K^bZ*t>*qG-%48sp
zQG$AOpP&ZZXubwcyRW5`A}1vmxH|+!adqDwtq-g-uMxCsivD@Wl5`wOvH1<uZ%Xwp
zzik|pO_V|4mQH|LFL*nVE8yO8HQI$iR^DCB&95SZj-NBEA}43DQ<idt(A{s)o{Z^;
zHU9)O2XKv`CiyDR|LxBtX$<u6lfey!=Q#ZT6_pG)b~cB<@M%wfFSaC2m`?w_dq!lW
z?;NOx&*4}$8HlVq1q-b^f<qSqg`i5C1My*4+u-<rZn6jqU_dH!5MD^>Y9KY(YSl0U
zWcSS<JN0oGl7D2+DeLNSeiHWW>h&KYa|DV$E7e2+<FAns?#y9;l<PA#3wzlicOo}l
z$3sY8eP?bQ33&J#KZ3dojzVRH*Ks^PczvmIV#&Dy7(kT|v_2ZgHA%>GMc=?LzMplF
zN87a)oXxrldJ5kiKR8~5rFlQ9r%k@4>2a=jEBb-NV+gEDCnbYoV0;&#98>z!rhWap
zkCA5mVUdVs2TADNGic>Q!sD(+!djnpX5$4PLf?6ia7IgQ4Ot_l^jtBXyVqafvqA9M
zW0)AEIE%q+ip9axqEw*3G}X89bc6F85^|^#Bq(&c`$VwQO8zn<&lczvpzXU{Da8Is
z&Xqx|Zt`{i506{-*J{F4<C<E-*P}SaA{8>!^T>vYT)4mL=M`U47Av|Df%o~=Fuh8X
ztJBYOEC2>w$K!iB;x5m@maGp2pNT((<7Kr)Y9C)d+M-U1k-ApI77}MgLy2L#`2mYC
zC&9q?>hE&?qS+JHjLVnJ{&0N)I@hQdAsBt|79mIO=k&+!-_>=lF?=EHKSu7u4s-DA
z%5MtWKvog^%Hv-bq8<LR_sc=`nfX(Wdgw_(=?tEDsG=JpR!kn=U;&1ltR+NkZ}GA}
zxKH|O`Mm0c4X?a~bnAnWIBZn-{2ch6Q8w(;8r;^TwYQ6hvr|Dy^qqFF5<^4r|Eal_
zr3y{xgh`!lx!x0hKVX=B^XWg$HAk{cxie+YPYTWy(Y+6<Hu6||s-?s-FZ`Q8x^RK|
zKJbm}5jl6H67sQDF-%x_$Oe*p7>O%5rTh?^z{%eG$ykLY{wufM0)A=4xoc{4POiVi
z8#yY<**#gwg_7`GgO*_TAkk^;rB6ycOaU>1#|XSUJ5ZyI=NM+C_xK9lGJP8$A-)SK
z?Bock-~YI&4OvH$hdj*6c>&UtL&D1msInL+26?4bB2=Q@|Huyo0CGQQbHDwlbn%pM
zkeV;(Z?Xl%Ld~RKIaM8q|0{;+(i{x@veYzmiU6;|={QsPM#Yo@b;-F@gyWu0$S(&>
ztyU%o?IqWK*0Ir0Q~S2k-}d9dQ1M!`MkZc=9r4AIS*(QB{DQdJX^NJ^ec>)>gujY-
z`sSxvalps<BFg_)d%c6#UZZItNB6LMB6#h!A~lGK^(ei1cWD2qLtaj<3!ZN006e?#
z&+@z!B<6SpUSWNt?%^pzWYkhr462xgnbNIO>rlIF0q^e4(+}WHG<TnR>ZC<q{Pw#I
zFE|ZZii#!q`4s=uzTMsiT4W(_#E~ug9AmXLfSc)NICgjM8#ADjtu6Ie&s?4bfOvv-
z9g5|rnvQNFHFBnXj(k}7Q8u$;9gVXH6$+^&JVva;=&=ZH#ao8G@2E?Tlui9~ci=Ob
zy}1!lm+Pf}x@-oK{Z4-pZI|>Pi)B=0?%M>-zCYP|t}(<vvfxlH(zu5gCU+TkC9D+P
zqqs-4$(HkkyE_t=4+OH7K7J7w%`yc~<0F793BYKdcQjt_cH$WV<rR>vIQm?3NQREr
z-olR&EB2B&jqK)sEeoE`(5?Oyvwp7dXbh6GaWFhtd^GEf`>_@lkOHXacR>JvSqku?
zP~{TW+T0@u4On@OJ~`<PN%uWH(V!;S;e3Kur{ne5M8wR1vi}+UGZZ1ny;0cdL@h~~
z@?SAFg--_c2KHx!Uqy_0YOvdy77+T5{iW*h^4G7*$?^|vDC#~j0|I{bj2jBB;Sm-|
zyrS1T0=`zYADvwj9%7TS#L-a8l6JGz$jK9EKL<6lwR0h3c0qffB}My@J@A9q2;Kr2
z23tRWhA|stkfXRGPPEdeTz>x;vF<SrQuWS@XNC|v@PUgjF+6V{zsJ8L>^BCPj$t`0
zFBNYy4bo~evH0a^y|=iSaioi{kQ@LjLwTj!JnUTfjXCG(Ht>!Nzl2(L<E_g<mYwVN
zK`67q$YYq?yS*DZJg<awKEjr@iwDqbpIi2o`*{A%tiRal3g6LvWUGzebviFcBG#Wp
zLz+xg$O9tUO{MM|zoL$ZN>8prz5K@(n$%VW-Y@r`&fk%r%A64YDuukriSb@1ouL#D
z7o|P`I&?D`!a{NS*H_asGE}}6b9Fwu>Bjj`r>eM@#le<T1_p}{8CxS{H+f7wWR_w9
zx!A}J=)8*VO%K<6ln=aTh5};9Hq`Ojxj)1Pl#GK9ejLNDn?6>OIFava#pxeh{$&C3
zK>Mc#W)6aF8S&-~c=H9-;Lm(kr++2)kP>Wh{+v*XxLxm`IRWHEkoc^>ZwiuKLz=Qb
zZmNeYL#AS2d?|iN8PyQ3Dci<~*O4urt3H83I(iYEp3b;SFE3DcQl3PeD;!xq-&@$5
zZ(p!Y4z8QE@6paN*_Bln4Sls}Z7DzA-l^y+rT=o-gno2)&d@luA~}`%BiVNg;-~dl
zbkg!G++P?{!k+pFw<ejQ2!o!Rvc=wtcqDou3vo)GujQ?1-0^d=-DVZ`EB5X`jd}(4
z(vl;FN3tsh8?`rw@2T+0L50wPef_T_#Bd@OphX*Ru)uqSPZZ%dC%QxDECwpyy4!v0
zZ8Tpmj97a8*%iEr57!!8o?rIntthsqSrAgD@efLCMw1dVjAVZ>m5t+#M6|Y(*AZAj
z4mVap>&}w6o7BrzG0fk?ASv@-Ddr*(e$jv```OoBKfGP|9nHQu5Mbr?@?|DD1;r&Z
zEF)tV@e9?v72}~F@7;-;RhDE4e9qy#2m!o6TV8ki<DkwOS0B^Zf$x{Z6IOQwTwfU&
z9lMyOZ4RShsy}O+z212FeMTPAS4Hdp2H4rz9posw&DJlyhWtS<eS)}6RF5D_BjL<*
z^1Tm`rSQ8__OMX53;p!BDf8?v%#DNBSRS!r%wAILhvLQh-vpV#qtOvaS=@pXrQo?M
zN5fOR7X4appzmq!pk@xc8h(M;T5LlPl!*Q>zTbM)KM1uu^0=#f5~O@R4(>GYVCI&g
z5E$3m6*DNk1}ZvuuH0~Ccf0%@?}egb@{4fo0;H$I;RW0HlbPpK_D?ecd<+S;v6#M@
zcDRL}d}7mB^gD}R9A2UOQpXz>8LYf6o*zdvEhk!k`9Lb|*M-jm#BCZP=^wY*n747r
zw_PSwkx1htU6*AuS8uP?6qnmpR+-Mx=3f2XG;))&$*ai}PISqTGfs08PP}o~l{$Mc
zfr#|J_KWfjjavaXR$<rV-HXqI)U?F%0qwE?(aeXC=?`RvlSD1}sPl>IrPpT)x-I@w
zY}75s`t|aK_+I;OmdmU6Z%d)qD)5>dN*1`~ds#39yL*@~%fwBAnY&Fia|r`~`7t_f
z`P%RnFoe8qg<oY~YRQvtW!-cN;Lm(AaZ^vO2aR}=mL7-NZDu}(4VDJ5Ub}HAcAMW8
zQWla!AGLx%+MunxFA~~F@Jdi_U<yNJ%j1n-uF(8tFumW1OF~muMpGslg*c?baClto
zX1&9GhkY-6u9qfx>BA7gMA;+nMd9oO#_m4N=q$M#?`d$MM-QmD`ZzZ;WC@Mt8|N?I
z8}6BjP=J973gKCKfocA?!XvOr?^=W;bfJtBD8t3=?XCH}vzzb#W0&=q<}vRRVeP0V
zafXmL2$3>T2%i1AKKucH<Q$Z&XsK#VLZcr7Y(JL&@Q<<>?z^Ne6%u|6N~DYan^1?G
z8;<zBvof%<-M@MorlWEhPxy(`zL@9&?LmasozE3%Rqn}Z{Dd^-l9IQ?R)WdIwt)A4
zx8zAsZTHFBcR$~~ee|;pI?A0~6<t5#i50n=c=`Jtj$`tP_wX^I^=ULiCNb`f|A+Zu
zrbkT!ZETMk(Y-ZRQ5Bw{GT-}`KbBtn&a!49?-285FG4<i--B+uF^rl=Bhi%Zer=f=
zi(#XY?EPtV26}qQ982G6RWbQ`>!--DwX5%wSfd#TB3_b8jK~p<3}+Lx<PnM!xJ>Yf
z{gKdLbQUQx%O!e|jB9p+)Iw~!!ABaMgcbQm{5i5^3dt`ZX)h158K-<ye3xPHYsLDX
zf6|~V`@MAKcV$aaPp&{`2aKDx_!|C{ZS{7>k^ZDUe&-*%)HnY>8g9rjB6tK39+K=f
zp}E9J@#Q>S<7ZS983Ti|^1`_t=Z9(q=WD^Q11Z7_@#^1CDHr%$@OxPfBnQr+O9h@>
z*^in9M8LuzD=4?+p`L``Y5|G#q_f^ra><vk+W%0KsK-%m1vFa^J2tqPqK6{Z;&NMu
ziY=TN`i!4-7<=eV^b}w9@SC^o3Js9Yzx6uzdk=LAH;HD&s%GVPrH6&>UwB_u=A>uQ
zwu*Qzy-;&+7kg!An!DP>P{fvW#r-4bLexT}_4xY}38*NhFMat}?OpK~&G^s4B8Kk&
zmbUYGdwOnIa*Iu&T<ntBV6Zp=>s@A061+Ll$xJDzcgVxBnf|dZG!oz11n}nwrGRd@
zXO(!%8K^yvL}ZdP13}r#r&qR`0%4onqvq20A`y?mp4_~SKd)6ppbzEK6G(Q~3(IVF
z$8mBut2^`}0&W~KLQ{mg1O70sh*(K_-utNC+6;S9yRgzhSDq%hZLtCZOeH?J<>S#x
z`(S~?0I9hLWy*^$M)bWr`o9}~PM116HtUS+Te49)(zM-AVKZ3|D{z;hu_UwkMwY-u
z`FWEpUA@Jel{e%WOEJSQ|HSL_8-G517rx*QBPu4vLcZ$sPDDj}YH$A0BXT@kG;cnC
z4hBn?U@w_QYyEH`cC#IlcDRTBV0iuQ@UiG=(Cse~1m>WE)V0Q>zeOL&0(J9lP^xp-
zY|LMCuKzTC5aO(uvwr?8_&1aZ#drtrHDbv(iB=}+RpXO~zNV|K?D~)Y`1gUh#X0z`
z><+eX=NKBd-#0%1K)3lt&eK*5e8&?5Umq$cJwGhPg?s!_YB=lE{1EcYq|tVivGIYT
z@2^N!(o3|T0_xjscbX{I2Z$p^dV9CJ1%oL^zw`RkH%?!R&XDPde9qE;jePI<_M`5`
z`<CnGypyHKLs9I~8Z8R`@;gmDr7bbZ|NU9WEwSue7|NSq>Ay@qUo!bA-p`<;zuB<d
zD(bJ5qTTIGLdkSmh9=7j8eU9k__x3c+iq6K)3NVh?D1pBZ<Oaj0P;1L;jtB?0;%0V
zy!2ng$D+^C(5tRzej#e)Y5D*Bmj6r}IoP29pn|3gta+)n6A4!2EcuE?$Il`6$asX3
zyhJgf;X48;J;{Mm{%!_|=V6swP@@lhGU9`~IcfPtLa+Qc->uBz1>B42944T$1p4HS
zOB+r9zc=OyME{KiX^W{z)~L^?E9Iw>$+@fh@MdB)tU8yUs{DlZ;dkv#-*$Uu1106r
zYeh`+`1~?8BzsR<dlp6bP#H6%$VNk{Acw{0oc}wQ<FCae)!lxT$E1@u(TDFA*VQSZ
zFWjd3q_tsziIIx2x_ZY>B|Fj_!V3Rgh%fK;u5SVEdW0`az=1mBbX7BIhf+t7!~2dZ
z<PpiO60sbU_AUh^pLD<e=c5&Ns=w{5ik{_3%n|>{6KPo}Yh(%zWsNuhowxB{8fno_
z<Hw=|#ja2F6Mfj!?FDUir7uY5{mk1(Wer+?{T3Q<Xqp+C6HV4(e(jTR{MQ$%-)}3S
zIFr8mqLbU&as<qVAFAK(h-^r|dGS{I$M^0;nI{rLO`0LzyNJ<A8@SI76UhR>rIy;?
zyJ>!B4VzUblbC7GYFI24V|tic&lK)jnHu5O-<(e=9&Ez5HB9qgeMD!=Ti~|cFSZG2
z@^yuTqZ7<^q_zNU8$k+l!2~hkrY#7bhdhj$9wiD32&ig4T*}cCa(2*Ysd%M+;1Kh<
zM^TX_*MJSxInRbn$w>{~FSFpyo%lA3qI%8%vO?y$WD!sPRKg}y2QS|g1TT=EbMURs
znGd~t_Dt)wN)P4HF^rH-dQLV$iS`)eQ11#yBk|GfI8tBP+H#O0TcA4fc9)@cnL-10
zHy{Y>6cw-(MSa5*)D?TluflT|bw*`A&*lOJW{R+g3Df?FAKub*0)@;6P!#U3bQX^0
z9>)k;;sn6ASR0T~=BCLc7(B#atbEPt@9&87Y-+((DL3sS$ta4zd(5Q?nY6LqSkec3
zQPtxhQ8HypQmD4->o+-7AY<`5nxyvO&%HCJOqE0d@GHRf?FjznPdnAZfg%uiq@KS@
z;r04+PiAyy+l2*+^{YwhWsaT7-auq<8eEJ4*fhIA$6{fqm8F&KCi09{uoCg)_UGF#
zZm~7RpdVx0w(m$e0F{V`_ov`!o8LDWrynb5s}B<~qKeQ7WI7FxdrH7>4&z{!%%e#-
z#2T@GDT?3EbuR{Ki{Ti`lqBfcV;|&R5{!i1`>gb(a{|;B-2(m>dtVt9RrI~B(n=#D
z4FZx9(m5hXh%|yo35c|W(lK<Xbmssf-H0GHbeAHHbT<q!z|7qDj=%qJz3ct>e*Z7l
zg1Ou~_ndp~Is5GW>}T(-%lu$}^rhol&2z{(L<g4}%$YK6w+DSH{!v4eLa}cem<1>U
zOK5B*d7c<<u<eghi=EX1)j;uW+&YjTW28=(LjF7z+Xp9(coj-X1eseWD&vaW7EA=d
zdP|=99DWYpezgZ>gnlv9jSewp?N}lTPao^mYbjPe*RxNwlKYKe=#+Vd`Sq?PQfjtJ
zTnxYegGNvDTZiHax9yO4^Bdo{US!ip|H)mzBe*a1xX^N|qQ`LlcdK5_=HVOM2RH$3
zLr8JQTFeYa@xD6S5M;y5<?RQ4a{Q}3+2OG~fg}gO5>PmceI(C@kEdg92_`VTW~NXY
zCj|e(*hwEpL<h=wYbMl9gw#CJ#h%*<M3Y6`1WNwuRX94>14jK{SuMa@By`E+{}M`#
zL2Fw4E|leo-v^zZ#VqIW8#nI>kw-kSUFg9~VGKfMM6g+AV%RnEU5HPA`OKD;KTLE?
zn*|3^hingOON=zwFK~6VG`e1V&O`#%#rdB;wEONsDHG)Owc{KBdq52=?TSZO6%qIZ
z_c=l=rV1EdY*Syufv$OybmrFusLFQO#BKM%9+*j%O8p4d?rk?2bUC^b^&BQs{od!E
zy@(Vyi5>g?oM-%xircSvYj6oy+J3q${9Sq}e*YF~EW+|ghLwaNPiEE%MxL&3<<=l1
zN_UkG9fGLq4nZdRh9LbM8_Xq&wXr44FYrlU=3Y)=IO`NjgeGa%J$3%(NMqlry6zsd
z6mJH=R{*OHqvR88h_&~F`<E2-A|4hCvwpee>P?^{@!JPwLVCe8(3fcAWUIEp{Ped-
z{z~WDC35OKRf~Ha4Kc1V#lOa;P?i|mbPG%zcN%mE-VYk&B9T4h6LP7<a*Clg@u^^T
zw>Y791IO&K_<MWcxMzTO{PZ0AX*^{bsMt~KP{C);lTl$8QUj#zZyzpw?kI9p3}&Lb
z^oCz=->0gg_?GLmTPbf;aWMClcU4=!GLhJ_h)5$Fe(UZSF5kGbC?>>eENe{Qu6ido
zs^CoEh?X{c-z-^lE4Jnj55nvT#aM{UaK#V=dsP+os(zG0<`6uWdBe<3!A<5Ia?5gw
z+{&c}D0ZjB-q3Rb6JAB!NQDZ@vy}jQ&v^|S15+N@1*2oMssL(YoN#;|Y>j&c=*NOz
zanC+KzUvJx(1x$9tH?W7zsHUc(Cy&W(J?~MG8m@-ug3j_&BCNj&8`PhKnV%s+bfZm
zWb(A&7lcVTApp@jk*`wM?wLUD_D2=NWaJ_2=Cf3TzVW>Ql)|ea2s?$V+R>d5TW<@@
zw`@-|)s>JiDCH`?46&PSDjV;%n@h?U7%mhl{AD>iOMF@T+|6L=G73z2**GK8w998z
z=g8Fe+z~2R`SQu$ZE$@tBS!6heydHK_#p(8F>y?k>HMWm1t-r2Y{FH|n!D7|5@RU)
zyu|QZBd;JR0EZx@>&YWJ`g1*~TJJ<X?CsxxqBa$(Klmu?TiK7OOY1YP;&(|q6>Z=&
z0B@OWB&BBPNRJrZ(bgH}nJ@_iWj%PyNA(|*Yi7m3R=(z^zbt9Gg@^%9)V_YdjqM`X
zin6L`sh$TO*uR)d>$>>|YKA{u*Z-6m{;gcD@v>Ifk(FHxGp@6kh@bQ%AG5hFZQV#y
zK<buQK=xR6@pa|vYCBbX8A6*i?4wui<1jk}|Nh99p6yg_Q2weeUz7<~qy{~MaR9|{
z;9V(OsmK?j^#!H+Wv_qJk=>#L=k33Nd2%~TBulYi(`fu9ul^(3D1w_&|4x8CVhPnq
z*LX0FDBmujE=~U46C9xQudBT%;n=5~>YQ=gmy;hSKD|_Xy(<5N?cc*$VrW%z6ABXg
zPJQhg?Yc`i%8yxc;{FYX5I~$iraG?r*1J{I<i8Kq_iq4Gq4+vm`P=N^W2IO8_p#po
z8*=|2NP_Fr#wc$Qi}a5RI37*smwhCg$eR}HUpYu}r0p*5C#IqLO*Dj1(I0jLAMV5l
zdtw3}9@{*5*^U%fd^%AEWqV1aRiZ6qd99`bKG@=)&}>D$WTm$N)fhVyNfFO9Afos*
zWe=)U5|3Yy2u}NuE=(_m(=C^iBIz3ih>VCtD&v&gK8KLRjd5JV;!5%Zx!3zKoUGO0
zmZEC1rK)IUt9TB%slM_npajg{rojHOA7h=*WBca0R}G-5g4Ho}XuK)44e8?0noklu
zMRH2s0ORCDCSdvR;^%a!I@zEgrNqkB|G%!OBOu4Z4GwW6cB3xZDZ5=_{Vzfpc*oyo
z{yVC;9O}XzCI0Wx|Bl4}&VsK0T@U}CvS4kc&U;*J$Aw_8fl%_trcg!Ex?$wiL$O?H
z5{^2<=%nI@OZ|u#R(bw*dV@bFWg-}oLU|jVaGgYs<h0iS&#fQu>gOye1Hu(mXrdI{
zUex&MTk`Zjxp%FK)zYwv+tW6bv>4IaZ_gg;4Ksw(;YWN~+uOo-zuo@T#a_s7#WVML
z)`h}##>-fHu=X)Qw2*5<+3@#?jaO;!2wsTsKjoK>;gx|qt2*C!LzOZ1DJ*`LuX^YY
z(g3#%YMJzeKgrtI{F;iND0;tgyPrj*Sb=*$C*`pyxQB-XTzWWA_I*44!aD@tSX|g9
z_WphM9oKW}yhv3IlL5USG<B;F)@l$9dCAsRqzsm8&W0JbrNh;ahe=Z%j6;mwnG8Jr
zm*baiwEcH1EYgaPD+yl#Jv@QNJfjUA=bXlr40C4V3I7?7Z~Rtv;8sR>6LC1r9;>!W
zYmf>ZhPRB<p5}88X(jR~QYB<ICKfvg*!4c^v)Xid_Gol~L87N`xkhYUKf}^0ol$V6
zf$*o$;OxEs<^tH0sW?J)aJ1hHP<MFBOZVKaw(IeDuLNecEX8Tg{<(<y%Z~|Jt;GAz
z<Bh)#-e;tC<anY#lhr0yd0`4TURL9Oq?_b={cJ|d78R)#Za}3A)|{jK0dEhYqyjhb
zDNHy6o${-`H;jCB00CjZ+cz=tKY(vxAFqCQfq(%O=ncSLd2NRMakXJMhj*F3A=m)(
zqqF1qNMTg?7@)tNO8MAYfKD??qFysw(Uu-8!Yxl4$tJ@7sDM}DSB`A31BOG1(Nz6K
zJ1RpZ6-sdD`3oD>4cHQG_Ao@zd@MSQ=o9`v?OVj5NHg6>?o_Z<#NiwH$VjkvU?yS)
zx^T3B%l+v<N%Nq*Kw115j0c@5Nh7v*k>R`0Rcq(SdcA79HQb5Eg+;Esc0t~<e{^?A
z0zYNfdSX6(i4Xhz{V>$#!i|g?T_GMOgqehZB|o+5csW|4&engxqva_Z!V|^bvi?U$
z6oF-1rzhpq2w2ax@?Xm#zn_J@xvm8@tKaV4()Rj~r;T{+p1S+0*zS_FpId`xzFq1K
zYW*(jI#0p0%Kr|*Jz)J-E{^+8KT6opeWajTO9>tjNZsJI<@pt&ml>Y;V}Tr;jNmdz
z*Q_Jv7=ErblTzzwmg2|kJL|1b^-qbjm2Sxr<)z&#rxs<EmdpRYo$xKO;<DAZxK@KM
zve-VobrJh}l0N94#-)lVPR`9YjJ(_w>cZ*@SFI(pJcfUno``*MFFjD&pfQfQn`E)+
zp3GL>!tsaJ-f@`w7=`l==ehPhuT==w%caLGlXo?qO~OfO=U{*EBig>;4_cTHbAy_k
zlyJ^nt2l9RJy8aZeU`Tzf>YDVTL9y>Vdxk=oQMD=f_GNnmDK?4$9GS-2Oc;9x{~;+
z;0@nl%BKk_5l)4)8)n7$<Ts;;hdMgabuBQA|8pUxoFSOqnU-7_(09O%ysRH5MpXX0
zBmO({e{GZgw{3mwdm@fVgYt?6b)n{L!!8X<ZYn-u!>O&R+DHT^RTiz*r<%SDC~q$d
zkuiQ3*hhMK3(USqCyICC#)F)=K*LwBK0F_S2agbQJu_Szh9_CZ;_~BIY%G3?Vi5w|
z)6FqSb~h--`r7#T$|N~r)G>}3XFWVoYKJpb3xiu5r{}VNy;_DV#CCV+uU@O$k<^Rq
z_T8c!VW}NJ#2mkR_LI`mf`gArH?WX0plDV<L4givD;$^HHRDk(8If>8t4WuZSYDSt
zVdsysQduZgRN>@-$iGN>4Cw7ql3zm*hdFojNP8icAZitF&FjYAt7D+|7E|6g=J{05
z4j2~!Q6)@$$@5zlpaCwubt|b8<M9QI!@in%&bVz^#LHvHXAdMygY|!;)8FN*&H(ys
z&!1pTPy&-2*J&X7xC&5*7!|Ym5xYHm7G<>$rJ}z!vsE7dBEo&WXs1XNfv!aV>%#S-
z5EBTAfL+Ls$*m|VsxCu2Sy%$R`!?xu53K;BD6X5;KpnvNF>t^Iit*5xpd)`T%)MWn
zni_$+E4DA17W{{_96d0n_H%dTaovgj3qiy0y<|~5nyjOr-&CUZE%sh3uHzDm>FRUB
zyHoU)m06p3!^MR3PA9DXJdPR>l2FSUK@jZqEM8e(Qwc{fM?5>xC@2#IBDC9on+qs@
z$w`G43+ct4J_2dCf2DXH4pplZqbmbIk%P$@o(A*>WBs%=;0fHkpx;RctB>2VopSuA
z-bdLaiy565=qulQ@@D6%3(Nc~4u%0<XpUz`SD#xub_FUSEtraI*2%jPn~l=C`kv@v
zJQ`%jC^Rr=3iheW{H`hVrDKsj31#S%*>BQcc3a_7W~NY8#%9dPmD;DJvy=|PX|Mvy
z0C6;&_RZ#%rG<N1dhPqPRJbGehkI|kitqhSy`F)FllcCAC~8r})Hb=t1!*C5Jm^$v
zSuac~p0T%3SVYaz><dzaPxzJ_xgANGC<bqh(}iTx-+Z+&TU9bx`}s<!yWO3qG-y-&
zpCmi!_{gL>V$+q2FaKbJIWPF@s*zPw^QHI^E5D4+s7@7VxBRnROsjxm_Q<Ydh^$im
zk6d9l6zhxoAHYoiTntb*v0Ez580I5qlzM29dk{O?0TkvSLmtd;nAN<5Y>H>Mtvz|y
z8RBL2DiWGCKl{f&ZHnBDL62i!tQ}>K5e3qr{WMXgJe8@?zSJaF<r}$UD0@J6KctbR
zx;A5I@N9?uWeq?w?t+rX%U$pULN8#R0Lf6>F~MKOE0PEh1%=ND+TIAQL6KEJ3m+bG
zQzdvL)x3e}yn7UJxjMKa9%||9I9o>3RZv<<GF`PXAt!Y_^tG;emH36b_`}y<li%GD
z?KCd8dh|v(vD-OUV(0<$BbO1NTUEB^5#1X;3`}c+#wACJm|(S?LPtOFD&$X+4<<m>
z`6kU%2Gut<sL~U`YD{RHJQ%P8TD+AFy7D>b7<8qKV$VI$msPbjU$_dtt+Yc({m}Au
zpXiY*iuza6NHjzm=edas=*k`6HLC>rah9L<C7trPJhb|^{Y7n&_L@<DA*JaxGk=(O
zCtmfALLl|yXt)&41Bnnk5ED5;2ta^%S>z=RcgJx`kv1-^C$6DR1&GbzKA;Gk&DWHV
zg8^e-DDiKsVACcWa>RV6#(EghsKHTqAK2P9Z{J;i%(J_m0lY?h1-ITB_OQ)8`G}%$
zCgkU#s)-|KK<!rPaD3K2w<!k-4|>KBgI!WS<`0-8q3DCu2~qXCXyW(Hr-t8bJ{d2X
z`sG>fSFpM@IvH};(x@?*!lFiWDDxXtHIij5mjXXFy4cU9!uGX#cbZev%M-ZMv|vR?
zsKB(oL8JmmYx)7%3K$Af><Fg)t(&+x>Qg$2V)Gn=pF(x$u9@k=(3KKwofK9<O5~HV
z$_!9)dXSS$8x1c}2dCdb;%lysH)|B9%SZ(+@VI4c=D6@<2R7$Y?;?d7I6U*;rkFp`
zHe({zJ#n?DDJ$Vi!W6Pguqm_lG*jqJ0ti4Le<Peu_xez?dW8I;V!_JFnZZ)thwiRj
zvPwuZ=IBa6o;otHxedp)3U7^%(poWewQ`KM*Q~Am*x<hES#dNxUNT4mRAZFd3f;_7
z$Gq}-%&3qrXQ`)^ISZej8>2Bzh6#>F=3I$=$$2$;6<SrcL<7Ix#`Aw_`*3^Bete65
zwU{--=0>8t{+wZ=c8Q$KGoRr_sp79!MXa^x9!PB7CMQ>qnbb4U71o!x{d7$2x}GPp
zY8&msPJ7OkNs1d;Npgp9xZBP3VX?yyTZ67naPcU}f~Af%Sv8MhBlELZ1a{tV48#_d
zqhn6N%5JxH-4y7arV;2|!vex$_4xLn2?j;~aO`%f6YlR+OgeFYsMcoKCGl%!XMqS1
z2Q3oR%N(PDKvmiDejVv9R|6Dav5)@JKO~@1x41-fsppDER;;o^bm9=taL3SbAA0k)
z7R5UmJW~)j%;zC_`|gZr29@FdOa`mA>;%Ff1BJ1io_&hHHDYPpswk~g{!C(&y+If|
z^#6I9edzCsh;VQzk)5?+l;uKY+7%wgy9YHF1t)PS<oy6i6Cl{l^J0R;me7hx1;&N3
zw&OSu-+Q)eMyt~OWEz)&Dj^}^2wtr?`L1cJGkO1hj>9unKG}*yuU&<TM}+*>yheCZ
zBE<7yR*WAUA5(AnXlG242le!`&swGFkaUyIklPOGw<GAGAix}B+^!&U>%Aaw;|sf5
zn@;fut-F6X%1gcl*jsIw@lcUEGHK@UL=1rS^bE0^Cb(_BrjD8g*~a=XZN_4>lOkJi
zE_PveBY6}wD6HQ-aKo<rWAU<_tN4!(2E5U%#@M;mxf{b;7EgbM{jek4jCpf+dlRNb
zphS$L{k^S8iRMA{Jv+TRY^julNvcn)NZ~zYX9-Zwl7JgfCw9VyRXsHinPN7D{z+}$
zjd@&Wq00T4lu0kh#nXdbr*^iKur}X5(W3d@eaY|UwKCraP4N`oRN8#Qt2%u-T|^K*
zaaBWVMHk^`7_MMF$vw)zGZXDbeCt{$PeiJi=(;-hHCs74?hFNPt~BQq1-E9-X?*3M
zfC#KQqVh>j)|kf;&UzKV`Vaf<;D1AT!kSAx{DQqI=v`;Rs=yMtisV1eJXL1w{PGzy
zvN}lqlQT-Sa2ct~GN!Smcp2y_fnn#t5+K4%^2vzGZQeZyG=5&|f+8a1f!-kb4+F7-
zDPEcZ8pO<Vf9*vt>?2(?1n<^<Nb6THdm&7*8(jILRi97)({QYstynbVru;ft4z|t#
zC={j@T*Fs2j}-8NGr=*`=sYg`*Ka-G7&j8qAJh19;T+BI6L@dIu}~Jy=u;|Y9#F7y
zU94a~JJa>J+0f~|UoF!eCFT7ovuE_RVv5XB<B}fKYboE}-7hq`C9RlUX%=OXz565^
zu8<S-4i%`{-ElRQ6Pq`U8G?K#MF?o+a1P{O-KBm~aZ2I;@C0;8!E^7)NMlqGasBy!
z1>I2c<RN`W@Iz&>i5`@ZV?<R%Sd&b3=}{WAUpNrE6f{%uMzM~piNf#s@daoB^5R#X
z=*67abiG*+K$lF+k-!w4KVW%Uv9XH$jE^IDGzxMeDh2Ok^Ts`;i!M65N|Dj2t^ypj
zR5VLw!P!awfJ={N`*TQa=~YM;YcLdRRutilPQ(^T?MJ*u2<#VGm}9`J)k|hmp`|1g
zcYnQ4DLl|S69RP1Z-J2iHSFKLBlJ%6qIyObZ>V&GSsCP6AE^Q#7Im5p4|DV~Rp|Ap
zr4vV%HI?gw6|*iI11kk?KUBuKTl0F=DtK0|$AWd&b__{t{Ee$moi*u5BE>(z0B1d5
zr@!Z};7g9s3Np^*U@Hid!_Fn%v&=6LmnzT|24b^j*RUOs|GiCpq!}2#g5S&Bg~PlP
zrsJiN$pFQYNWKwe4NG9o!DUf7kit$x7cm7>%wsZzQW9d7w9~8cT}|u<J>vZ{@s<ae
zn<U*YUNnRMpBrUHq3}YMHZ|KngXMXktCY7@ke3-2;Um^pml-hl<)zUX4LebHd=2G>
zb1Y<A1BGhGeg*u+v^&bIXdrK-YI$}@q`*#?-brJaM#4B<RatKNLNkwOWH7qd9nx$V
z)1+L>9CSN!R(l}(zMi}%qs-ideBqc}1sU~Ku*=6tdAn6@<}fFhV!EgD#LsKSKoPVP
zex|u$ek}~zP|FOn!6yq|W1=&lc!}pJjs7kX<gFuY*z?XteB_pFF9fV>0ai+p!mztZ
zVD1{-B9bz^_27UZfwL4VnTmN{D$~W}^<h$2h+C5cZx)7d)f9Q4gx<Ub=&#HHHU!}{
zR^J2lyLbjkvP22Y$s+TE*c&h1tHVz7c?MOi8K7U5u?#dSy13`qMa7ByGYYjKm)X)~
zxxOT;+VXrljb;0Ra?3caA7t9x#($)8S941w@nxo6vFkBJ&aHU`xoRzdc~#B6P^PSK
z-|y!!^`_V4+S=Pbb0Oyvhv8sbP7e!__2`$Pdm2JUs72RUBR~4)dn9gl850gLg!RBL
z?hlXs;^$@H$A@~F52z!XY>Ih<qvZqb6egZ9?UX^=c$NcguGt6~Nx3sXhub-1Wg_Pe
z7Jv}4^2mEP4Pc#3>&Oog)!{eBk3AGqaKucZH{uAnwxpUdeVa^azniWul}&s?%!u6n
ziQ1lD%zucn!Y7z>O*5Zq`wathtb1TN?8ej`)@5_UtE?9j4AlOZmqJI2%zMzzFtARP
z0`$Mld_KO_5O5q4O)Ln`OLiQwXn2512|;^*gRt%nnN=^08mAYQ%U_i#_)zFY<||9A
zH@Ee^ggZ-WFGyi0b!b*z*TCCECqBNTY@m|l)S~qG&_uaFv~+{6R-db#C}Be{liO7=
zztPA2x%B=A!S6#^7Yr$kXT@i+6Q+jxUBAM#v>i)vIY$Kuaky8V&<XO`#j~Q15MX?E
zM*9{l@VTVzXRn2q^}Z1dsMrZ#D!Q-jle($=tfb751(ZvUluyp#=6cakbNYY|Ot`PM
zWN^SVz#fMW8!+aPD;5~2c>szvXO@RS`4-=BIk5u4j#H2P+Kl4U6r6o{O&2_7z0rjc
zXN*KUY2i5+$%*biGt}<^$$k>#RPs92Izb7mF#*p?EP!1kn@aaC)LG%Acs0hE9k=UP
zS&FikS)LkeeBnXZ&3Jy~xq`HPD(n{@I6oMDihU)eSz7W8&@f$ak9e;l=f~F#Q#as^
z*`CEutI&c34^|3&wpt$e@_bH<&79jG-{ZjBv!MNNS@n2QC9ocCKoWP;M#_X_r2iFf
zmk0w%@$hK;&=zIvuY0fa4M)TrjUH{Bp#pl4YKK@Q6``rME|N{X`N>Q*e`C@2z7zPa
z=ECni8gT~mI;XD+9DQ3IeMfW38V!%UMT*rOPp+mwAp>v0ylYt7H2aP7v*%a}6g&J}
z&M%Boe9+rxg;OwdI&<ci=U37V9lK8P1sKss$5*vam$7F|q2B+wgqQ{^mukbFk57Us
zs}H(7$0gkqdD#it0O8d2iILp|$}*Lr0^JW4B}YDRosr%C9_;kGb4y=3T=~n*rTY!R
zX{u%4xSqVQ8VidpT3x%%{Yz12zw@D;Y2|~6ANo5Tb`Xs`b*LYsH3HQG`AEFXL)`(|
z&cXMzX!>aN2z^;np;h_R>^Rnx%m{%qw&ol(SzM9Q_*@iPfGZ^6bXv;^->3#)6<bT_
zBD%ayg9nl|rZ9!CpU&dxT$@#gHFSc+fvIC<4zTXd5-tSLo?k=Km&Ceo=*-}ogsnQ2
z;2$4d1wXk#PzedRRozy&gO67U$Btd;zgtwoyV7MQfM4(+Hs)PyAe1L4a=rxP|C$Tq
z>wyCAW3{krS$H4!O3N)c2wQOuoD&@RCM<3!?n>6hV?|$#88yoRT((#Hh|x*{F%!K|
zRv2I5$ycENtW-`sRD4%`$mGlYFm}aq%M2+Zgp`EO0N)eS;6IN!>Y@gI<&%9HczddC
zVER}f{aI{WN!LGh@I`6%8->SZRg81YGhdlNqfbDO)$!>&3xG{#%^(mQ82Oy|rB&qD
z%ey_sScb}g2m|=u<lo(3^F*(orA(Pks6T!Omftg2YP-*4>6pYK0JKw)VjDD6A{Ji7
zKIYj?P*3qT>V@UuV;`yi3sx%vjTFo^eP&Qc2pz8kCOWnMSo}2TrUKI#SvOhT3!;H(
zrFEOlGXnXx@E>bu1|0X;KY;>RO%%(yE&%OHcQAJ4+Pr&_H#xZmnKQC^ZgI7&^G>}k
z=N`#h?-wqAQk9-2zI7R1&ei_xBglf5>Rk`#+%RH|Y!RzK)XB`bwck}L_Y-;^-5!Z-
zZ=m8SdrYY@6>x&O8F5@Gb=SM&#klw`GatTP{JBa57_p()kP0o?f1+GO-+>c!N%LwN
z+^#+eD$uY<VREjEj<Z)QwFrC7Cc?+`-?Az+FC*`y-T*DsVmfwm^9RNtt7q<}j0khD
zS-_1a5||KvY_z4S4k7$`Lac`yDk&D1B^rJ!ri63oyC-PgX6*!o5A`31KVjwnB>rF%
z87%PxlnS``(U2-V3iFU}SYgZpGC3&KpVO{AcgaiJ$|rO?s*i>c4h4j7b^ZHdG^Awz
z#^>*>z07SPZ;+QDfuG{t)-6RZ8W6&s7)V-5oTnfp!SrAZDhg!D;-tXjQj5js7i91K
z%9SVfH;A=lI8A3>Co$n&MTeiqo&v6UnVo-LNBZ8tJ<+33R${f9v>Kny#1qmKdow;8
zq3SMQH}Ep-Z+cmqssbX+j^<lk2jYU|B?}ej%|35XP=9@V#I_owm&9HZr%<;~7C;E1
z?OQmU2!Xv04Ch{+whC7mS^#ZNr}}N`d3m0Zey|p3r%9-Lb&L{<-+T)we7pfd5a`NP
zGS{G0ftqhzln<AYUr(NXU?oSP<mD{2D7WrdlKDp@+$H3`%>ZR*!3`hNi+w;ZDFRY+
zSUS2;yomPxU9;)XDL780{&f|QYepnS!WQ_#0crkoCpNDQ!+A6AWE#ki$7P7aQ3QEH
zimBl1m2<8Eu{}4GwpXB%_9Zs<h^*J_i@><5-dv8~m<I9}R%7ts3F#AFd9kf-N9f1*
zvfzY|y_ifR8WN%29hyVfaia&NfL7%wo+f8r>57Ra*kFF&X7cUM)w2t8;BVL3+Vkda
z7k$RNs^@eex$o0O>b^jNn@sohnp~wluPr1Q@z+vij)tEfC&`;HyvU%UuFh(X7An8l
zJ3+CkR4+x)wDL8pHya+LU2R)M3)0cj851qiz52g9K!aE%9O#~Gz}l2PDR4feehd@@
zV|ie1sGD+F38VJ*l^>23Q#8<m3FKGQn+UPv&3#}B;7NfcJDGppD~>A=Bzn+3bIfTw
zaqMv>^qVk@sSjHZl6AGHQ9kWo-oLTXqbhaqKSo4UwsHmxbSk0&C{$_C-Db+Fm(lW3
z|EvM*UKc^kBd)c9jW{Ft$l7d2mF|-iy_P<Op=rR?Az|rd)`=TqfdJ&)1L;9;l03k^
z4PtrEaqXi@C{ee=_{Y`ArKNKg(LVK}%otcZqu5S0rSe&fXn2tG?UD@l-@C9GEsdm@
zs9&^Ud98#msMB)4z_*7=JgJ!NW|YntV%^GKq@9TlJ{XBXMJh9!YDn!kC)v#3e@KTR
z8!{7EcM%5DF3i7<zC;0FUGu9mf>0p11)#6ER+T&vKIAblaTjZ)_b-ka0^@i$q2Esh
zHsK#GA1|H9tPdSB7sH8EoS3c9O`8i%1I3G%4nH0HNgBWOe!{>=h(|8lwUOE8Imm40
z3bfhD>S4;AQQ2eveaLalU2m&vfO#C^*Mgh9F%<0Xh>C)o$-|U;Fjh$7?}xoW_`<dW
zx)zP)SAix>C1@!Ld;|%NY}KGDiYNOo)%I@8k3WUMXIGG^thA18sejUN?my*NOrdQ;
zaws_9iC#VfAz5O+&T^&iV0P}^7-NsOw;6NOxz3-Yp~;?90bUK)0((%v1Lf3w7T?1s
zs;~1QwjJPUA6<GpG1pUN9^HM_p?wbse{Ao9BQ+iB_==O_)~+kpry)yRH+iq}Xy3QB
zTJ&f;9E`u9z^jbQS7AgV1WLM8nHq8%<8;6$wNai*?^S|7N=dWiJz*0511NDbsNv7k
zJmzFIe_y*aVQbSFiwxO;^CsC+zSq!Nm=v6!aCNg>oSdlx74&TZq0j<M3`4JL=m%-R
z+COQjq68P!sxyu-1^ss5hmjMXwWaRD+Q9X|6}^+8``>HH^*>I~#!UB<Ujav3HD{!n
z0(b5?9t9vP-}`fG<_MtRnC*+i-HO&4W7h>Tun@*DjdmFKO3!MkZ|Vi~Y<)9%P(X&n
zOw^6K69@WD#<HRXb{SMN8Pr`C=PmOa0R=+X0_MbpfL~T~S=pwOh7IxyvIT2NGACEi
zjyPtXO_<Bm8Jdgad)|jF9?1ge3&4P14j8HdYN2%ur={Vtb_hf^KhRGmh$*Y-CcVa8
z&`nt1Rrb|#ubpcR$HgZ@U^qEB2WjL^MozBk(MB^zsz$x3A&J8A<V?Zm;wAud)ZyaA
z;o;(y)3rDtd%hxofb2bv3Eu{oxiI2D8ZZRifYhk-5tW>R8iyDdWj>CUeZ32<1e!q-
z{VKBeIA)a@w5I?Dz?EVNX_mZnrg;ZMwi9TXF5!^pqo@mU0R0OJU3b3)fj(FTS+x(R
z0Ui34qeW;y=L=M&cc7802ifrF(PqL@4V6NR+J&k#9^PpiiL2jRX5oyfymW)Pmaksq
z{|zz}2vr(=UD-nyLE<Ty_IOIF+wH;NuFs@EYgy*UQ|m!$8Z#}qV*#j^KU&b??xzvD
zK#OQ76ahOrBTG4Cx(HpmKP3N(U+z$OeY%p#)b!K{s_#C#y2;CT0fF}z2#kEfG%F9!
zXpl)jc#K+lbT*q0Ul=0BHq08=8eM;bY0xWM68Am4l+x-qIw&v@<hk_#8T>=O#SEuY
z>&qFp%FRSDxpF;fDWo#dZOW*!td_-p;8n^g`R3u1F|;Fm5VPJ`TER89{{!+q^kT@U
z<l<DY6>1)4zdARif!Uzw!^dO>DXV|KbRBlP7jpmvZa|ic06uH~3wo=4ygP%ti&xrT
zPTP=9Eoiy*KdW%Pd*$`!hSphUyIo!sTZ7P;9L%C`XVUujglHZD_)`5~ndAqr()BBQ
zsE!=M$%)s4-z@r4de`gj{vkc=nsa_y(QDPr_pxAyrZv!W2(N!J)T3!5e#^`A0{(Yo
zl<Uqt0e&;|Y15$n;z@4XJ%x=U+<O1r7~1PQ-9D$S(4B-sGdqD6#D%7b&mNL_7veU4
zu6dV<3qz?C69Cks=P<+24WM`6Y7nE@C2%DUK$_1q6)Em3JnwE}&Rd06LhU@a&nl<D
zI$?~U+TjKgxy4h*KtXdzm`E!ojoI*Cjze81OfhTm_Aav1GW^$9f-U@1zv>i<*J;~x
z%n7Dbf2QXO9XL{On*4m*eG3?^yZ@BrWs*srTa(g$@>86<-(?Nc8Ssd+4cnz8z4Hf3
zSaxb5;m`E)-5Izt1a+Qb+7wI+s~fa;pF2!nufbc3n|G=%dIK^A(zzWyv^OF9YXUZ3
znKFh=EKO%zE($HnX4dD&;kpI-8c70vrzTd*8RA?S?|*`o91Oa`Bu^r4km78dLE2C;
zU1-P>s^gAF)S%?`spUW`LG%5T$U7Zqgd>M_miLRM7b5bPiZhfMBMVpAY=eBwab)7{
zI!TqJ06`|a6G#hhZj@Q2@&7uMJ{)DmkTNA78ED$Z@lB6fBa(SXqE|BmX1OL|<j`c9
zCTlIH{A{WL5S?66>dq7&pBRPq))-Z7??<~H%6dSGE+gmWA~M8A+@?l-9LB%JZtrXY
zwinR$w8b8@MiQfk&yNbHZds4y&c*AV$36%1C-GBgusSG!qW9}f&s9%(S|ALAi2YTH
zt*HF8NJZLaBDVO>gV@*!MbQW_!mfr+I;o=hJm#y*$|l52R^%jDG3)Johb7Awgu}r2
z=_rEW);}jB7L(bI*n&ALbtGb>LSD?Q#6?2;q(HD+@h0*e$_7;q9iG?e`*Us$5<3QT
z`yp|B+ltQ5G3;3##hz#!*<3cwh%K8W8fQgSkf>n3bz0c5h72!ZTfKdK`$<PdMCzZ2
zH>{S|cb?$lA7crp!yur6CD)dG{)ob3u_23w*iwN}fe$IiJ{!Y@^7UR2y^LIXyrR|%
z!^Ms8L~A0BuYz}2LJ6-`u5%^5&=l?~o6JeVMU+Xe_MxFf!y#a!+MaJwP7c5CY?_!L
zbD(Z?x8%YzesZw~cBi!6<2nfH5{tn7Ef<U<(dN5!x3fyHRkeV<+uO$Xd%5ga4fQ1@
z`BWZ*so8K#D&ol{=1r-i*r}b%$;e&?3a9DoO$cA*6}r(})9;sW(q-X5wb_;CY3J}r
z*2{$>YvARiAq~Xj6AD8Bukl45npN@_W}((=w(m79`#&5wGcbD<efgVUkOa&;uRmX#
z$G6}dT(c_&*CIuB8`z_Sq0Vn5w=-Y?#shbti2e1g(H8i;^S-F3!r$5ToK1Me-uZX4
zPrGfQu<+pzi_!<W>&f)*+x%W6lVpFll|1r-M~N>n7GcbQy~PwY0SO#>JP$t2*^koA
z&-MqWpGX*zqND0l*dPd|FM`^nQm1F0h{g8CAG;MOmrIoLVj%sa^`8O~#PsQtp}6@G
ztj<#V(q>)nT2j7W3Up^|9kg7VMs;4UUT5)G14mmYSzqN!Q1lBJRR`~kV0VvXC%<)^
z_20}u(fkhwLqngey20c***b<3d!TU0%#v|<^tjdUkMh9qlu0mbB8!jy{mI(N&}Q@P
zDUaA5sh!%xM=8e6QU_KU;H*YH61z=V8na7hc9a3tkH(;`2cxD;UrxUExp}bbW_3|0
zD^S7sXaus_;Cj_>#xrH&Vr%%lJ#3xE>}11rh(=E9pdG)?kJMA%>#Ej_b*P{uzICg9
z(QvX$f}+aqllvlo@qlaVm%Y+Hmp#H;pUkNI)iXrRd%$hvP;W1J`Vwk7Y3kGBiiBWH
ze;%jv=3DU|WbiSgN>h>?-DjInztt9B=K-=-Fl)5k&*R3=gU>cmRSr#qa#nMUFntY)
zE4Yv$clgbE!w>Iv(?LCG)#d|bPg6-*6Xwclm+|5e0eXObVBTx~MW2&Ro-YuhnJla+
zS;E(}{%}dQ-l2IrdEHCE@6JaH`adfT%xIwBt1waYNVcqLAz?ai-eb{^4iLvI;aqWB
zKV{u5UIa?6%mTJ)a)Xr<=bTJ#H&6D=5nS+&`W(aFC~#CTimCpUyiAQr{s8rKF!V-5
zSuN*vTa8+yKDAD**Dn~$owP1;4?4kvsgf>$?mL5|K1^DqUdKiQg_yIL92)y%8u-=W
zQ9|=!z+Y58Y60d~_Gal^)_0>5s*}9vt>*O?#!&II)n^Er^uZrlUb9w^G5An(rbK3S
zDJ6x`9qQf$?7J_RWt{Q1ED>1Mx4=G2Pm-+A^^3+@Eh^r6vkW7=ImJ9({fb42?rV(@
zdo<z**^31vnD;;5vjV~4*jL2_ATZ8cbjzz9BObs)8Vw1M2RE2E3?L}-Om9x>WC`4s
zKyt=SI<Lv&6c#X*q@Od2!vrKhyk>#uWrILgI|1mL#)d1OAT&cYj+Y9$$;i$RHNo$j
zQAB)^Rw=`t)fRZL2f7;qj}XkyOlSinF+owt%NQ8Y$Fe4o0enQUx);eQw&Sh6ya2-y
z^I+egxs<F)bV61?(TAgZ2xi}mngA4OH^oPqI+oUj$Di@Z7iD?vN?&M&|33az7k8ZF
z{^_PP<aeryh(2$pL}IZXx}9$TKX#@d`di1#CI;s|`zqUm^&+nI0X2R;SXWpJK{}9}
zQNfd-n_wgNGW%@az~bvd*#2#?X(acw;CXt@oE*WMuYWE6c0Lj}HYJ5FGAEYuH>uE{
zdG@P0wf@ZX{8Kns4?lO>X+r(rSpUJHHn=}Mc3uoc*SdDP85AF$tk<Vh`dtCG<MfBX
z7u{ClR#YUEOWXwNXejxUGGnfws`zl{<T9qY*4TTQEaU=gCCVi^`SVD}!-h&IF@45+
zUXQ<CoMMOj#_!D<%jQ2de$WK;n>Ox@NafClxsJeR^qZb}bwf*DB!8PGbRR!Uv3Kz2
zEHp>ZSB73_mbpw;qkb3(9>%-!_Hb`0&qFW*PCV9GuFVJbm~{IsFuhpTWy=ZdaNUSR
z?I&u5Icd~)OJMNKz@#|J8-;Od-q<<mj%g`HA<I_BEN*91Rs2pBUvv%?{K<%z5A$ho
z+m1gehTha~fSQgmB8jHhLMKeFFaqdf?sYY0ACI3q@gOL&UqD~M3&Z~*ZVDwi@Zgr4
z-kT=<tF=WkaBz6N8P+f-wCNGBy}fw-?&tMEQz-C_CR<lS@*e#o7rvjzJ2jN_q{Vhr
zV-%*F@$@TA?9p97h?6e^JwN=j_~BopgT~b#d55hl0`r0+;&OnggD*<)=fTcku03xZ
z#r|mmTwCtU$*Cvv!u*KHw;nK!1_q!hM(-ObGL$y$no9+ms(g`uo!UJ7zaFKKsE-5o
zm5pT%H8YcqrrDFm_JLwukBmLOHbDK#B}9!B*!=q&IFqxE(Ur+g{>KWbA56Vw14jk!
z93xt+{eZc3dYF&X_dpF_Fdey$#udJ}!wA0*1VR3-`EV6}UTHN#XP@-<T=qUa&gPcF
zCHI_6QqHP$3&oXt%h955#@_)-htsB$-?g(S4?eR`ut##G4mI89b{{}%2VVomkC-xU
z+C!HqI4_E)2%x5#-t<E3F5vy|q*prbh^^)k6YM)p1TRA1-;0{zhmb=vnqc>syFgc+
zr$2}YVXfP~@QuX@(38OoGOBiwINpM?sce3EFU*a5TGD<@^FOFKp80PKG+1Afh7l@>
zdHol`j71O`K?D+O-GaX1XU)@-@k3a2x&Ab#C)OX61E(joAAI*H>qgr@o2FX!E8=Q!
zS77UgI8%fg>tjbBN-TyL_8xf&-Bc)z`m!?WQa8D8@~f<0)#1;IcBH}M{R*b<Kfky0
z4eB|qD}*_fkK?oEe{oB+wG26%d=yw$LFe@P$1V1A1tU{}>)&InU#*5JcR$OMb!nC}
zMUeRDPQP)x<e*8^L?bc`q=7nvOtW6zb=8c+ssWTHaG8>%07VN7w8OnqH{iq>A(M+X
zt0!xZe(;B**Lw$y7A|LMJaHVpJl&UsNHJNPaGW$x_1DaZNheP=uLoO!slINe$lS4_
zTIbx%E|aWmL>Wib?JkV+Ku-<?Ql@}ys13uy?@Mc@(zp=P6W+jfUBO8;(~FdKD>!1x
zifQ51k24Kqnl?j<iL(aUyI>%6(>F#qMO|!>60F>$mz&Pf;J$dhDFV=XCeZO7wAy?9
zM52T_4jX#M^B#?&S{3uRdWp0?Zf4c54BHsw-F7;;o-jy(V6H0@4O)*617_}d($770
zSZV?bF3yUJ_Mk353>qz>MNwZ4rUo>8_G5<M8ZA3|rP$3+bBxq;I4^l?^(baI*6Ml<
zGq=F^h{{|sZFVILq2dR}ODOosC-J03Z^ZS0QU+L4V~hFf>!a{S(9A_;PbHIK&ISkJ
zs0rQy2v{wBP#IXH-)R<tI3+mc`7AqOxCQ+P1Wkfdv`2tnk*U@t&Bp?AhVI@x&dW&8
z!TF4ZW7Q>qe>peuSL%5+jaXI7$;E=9|3Qk`oZy#3Xo<1U1Re<SFcr>uO@8n%Z{BZF
zPD)vpUQ0DFb5WH%B=#TGop$zWzIxw+=3kFlbbISHZU&{Ke_Y>r(SX;}poQF0l%+8R
zCqjd9O7*XYMyuDGNwv2iOJ%U7XQT;T28P!xR1IHEM7l>AM)|KH*Ldq53+|p?BX<_`
zOs|!h`R`1c=<!P(Uf;L9<unJ5r7Ox{AfbNto}=8SdRh#H7>@r_@9W@0-}0f1di;fZ
zUat%rJY5W{Y$(L)ne^RzjP82b_(unMdCcwpRIy$z_gZ`#g~@`xn;y)*hQQ|oqr4Vn
z&+k|@WnBccpa?d+K5rOVMqRGcE2Au%fXnGG5*`>Chs<UoD=-E6*+peg!;NfF_`!w$
z0R(@8-*2TicnUu=AE4IdzOfs7cyxj4ff)}%C*gLyB2={WR5yZG!6Y9(n6|%2BQSF#
z)}!D{Ror&G$a4%S3vQDDtw>FSK%B6ZvzRHUDbR6mC%tDE2ng~7acVBg&#%pw&md^L
z+@c@xa*7qW)F2({7X8zIl!q6$3I$1C6Hwz=7s$NY+#L1CXy6rR?jYH6SeT+AK_HVt
zg$7KPAmD;}`SY<~k+H3WVK1yL4CGRML~$n&j>H!Kx!(zzqrn8#UJl)hSHg{xQ!b%3
z>pVLpF8wbyhtfq$@3BQ*Yc=OT#f!5^zL5N$c(>bS;~{VB52rOfLDQ|<b6sC(Q@|vy
z0vi_6@5Yp@Vn4Q{Q4XDK1qxDp0eRQxQ8?<{NaSw0XSv(GfmF$^osGroGy%SAnblCw
z()q{Dxd)FOJewF#9Mi8xjGU%W&3wZ#pV8|nE#+lRHmfyE3%@VE9x{HthOhh<9^^;P
z%qy53Z`$;dXp5)VSGgP>G`%lHXf6$Vig!O+847qi*_C-xB95YRw>Xv)l#}z>yHG=_
z&U`pJufHCsGe9+z)h};&3L7<>zrQFv=6vcUdE5G<iI2?cnCr+kXR@${><?7O=Y=m(
zy2^JJ%RPMU3_lFx#adEjTrJPW1>c8VA|@xBjTQYaGGII&D^Z@BGw!1&8E|0qShvFF
z$GsjF%*E294={A!90=mcQ9;yE={1-zqd%1~7eN$w&cs>O;!da(GYls(aw2N5J^a1)
z2y&r*?0t!`%Qh{N=&yB(k&|IbYZC;$c|6_#FY_`z+3~OtUU1rJ^crr|`!dYC(ZXlu
zUOMX%%p!oPkWTq(Y>>0z&@j$)z0K)8vs--4sONu_<+QZ#S)bx_*jQT@IUJ3cG*%-V
z$xb!7$2Xs|5FXaep}B1R!Gk~i4Nk_x?(I*oOjd0O@Fm;8%v(dxe75e$y+>FR&2!TH
zltHDUanGUo=P^0Tm~SKP)hBVD>~Qhht)&ii=!Ny}N-yi?Uva~DblxZWc8k(Zn?_`u
zBJW9Qllb0o`d_=)me#@x4+!{vokp*#<%El`><0`EnhYMcJ?x>TJ4xpq>Avr|yY|6f
zcORKWu7J*bMD3S%g7a*MnzP{8q?CBZYx-^d`nhz<oslbkF{2uDFtxrr@qts;$=a|-
z`@`|WE$KPW+Wo<al&r7b3%lue?j?Tvvz^41PJIFINw-gyb}|dwUCy`ZQf1lcBk}@x
zJ_k+wg`Sq<u>6X>Z{v2pxO#|<mLyZs9qv6>ULn8DP7YG>>$$;fN~@C*jOn!n{t?nV
zfh^Ski3$UhWhVqo0GLIK`!O2+6moY?3PXZde9AhimKKin!}KzX;HCxtORfiJfNDT7
z+erG;SC(oP%V)}-#Q&ih@+Q+%Pkwq9HU$&Sd+V@&X3eEi6t=QQ_x>xx4KMUfke`xc
z@jo6!Q>YhuLQ?HY*~*?4BsJcO_eXc5#ij1+++ahihv504LiaKq*tKS~@NB|G?#AFn
zUWo|Ju{mqQGrv8GHvH83+&Qn0MVa8r=GB=Z-s7@LtLLxATK~?HKI3Ha^OW39WfM8L
zH+S&L)a}05&+a8R8}+{afdp7h!YoB*MrBi;jID61NlY(#6gn4Ae>|QEHLd8>Z25sh
z^NjE0N1pgd>N{4bKFt|ov(j*5WmEm~VLf+iIr)^=Ot*ES0B~WJB7N8(eDIlZEcv1*
zac#uDOJCOEymRjQU2b*~53f~|30d32){8A`UjaG5#|q8qNPA{egD@SHZ%XfeB_lTb
zmbZmsAGGGVAd-hoNTT`565m4{QxF0Tce?J(I2{W|?|^)wHvVD|_{nrVx?^e-jXqJX
zqCL!Z9jJ$wkcoddxJJNrvOjDcrl3hNXRZrroZHs60xd_z4l>d-IDSQCpX)1H_B<AK
z#pXRfi&gNeCafD%SuJ-&i2^bX#u>qv2SzT;2aYB4(J<;sz&3R5l~eGrpi<Fc$20on
z^h*L6y)`$4{_(QM@qjqyk-rW#Jt2-Z>cy^1-_Qf+H=kT4O}+?CGh2P0+MK3_qE0K1
zl+{)$C8tAIKlr=L|LxISxQExb)>4)2cII6%Zgl+W)j)mgsrffM(#V_hARbaC58eI-
z6#A~f7C*__UL@7}Bllg!<Q(ePNt?iemRC+^laRAjtxV>A*^7lxG2LmtpZEh7HZKKr
zH)A%MbyW803~4XvD_a_T57+>j3|6P*wuXmW4|T-W(Tfoz#ktVqd!6opUAMV}##;#k
z2t-JWR;s!`d(_kaCyEmq6IHyKLL%n<{O88N;Gi%J@jxR)T);G_r*@#fYAzw>vTU}t
z))^P0mSSRXud+V!2qx_$=l>ANG!lj{39){Y&Dl4!W5M=vA3YD3s;V*FV{3<iasB_<
z`{JrSr%`G?<hPgYw~7)gF@qRRW0xz3B{m@;%P_5Fh55uI2Y^h*`)|-5ve4q`BUT0q
z=q$);`AzVMCx?E+tWBOFb%|Z2WSAwvn0IIh9!LgKR&z_9I6D6TNUr-Oo^9Y5<*D}v
zJg@?3r(C#GxHC8I-srJFXg-OP!Z99#XMte=A^s7bEf@;obI4fa0PGyXa)&{WSnBRo
z;+jtWi3|ywB*P!;0smMcD=^t9NRoY<FPW?MC+2lQ*S`?u4z9ks2@RY3U~EWaTYv+=
zwr?ZV!BABVluHQS1gSDRUshu_>;t16RFLFMTTztRup20~bHeNP@;k)Ex8K}f-+9-<
zS4uMT-Mx~-hJ1_UYjv2Fp@!Al{I9;G_mg}TXg6O*@3WXMlBQ3&&tzKexbC8UiAYUG
zYM?fhzb}WIt$<5c&-AQ^%tnT`6Ah*ucqcs>c`W>+5L&v|I4V%$Hv%vpdbxpUjQxO;
z=4^g5rkuH3)3ud={;XoGr>PLK$-%YQ2znlr2i2!c=%+r@Q-tX~FtuM$P&eeGm^zsu
z146|P9~pmd*n^I#Rl7JOoXh~IQupw^N+Zph-Uu{$G+VfEuj<-=JxExSn`U{_Nxbn=
z>ZQ{s*p`WXx!YIKjjwiyeb?r^mTWH@$&Jr|_CK7jTrDNZ3#t0c(S5$s_zP@fT}-qk
zl$0hdB@6MP3hfW-!|#0{^_kG~<Mooyqx>|Pes*cbl7{}yD1$+<IY_xfUFY}!GYSgh
zHZb;m=x=)AGfj>}*Q|xnS9>|BUj9~I%!R!khAEM#t@++hWtI;;Olm_&iMY(~H|{#>
zy|dI^dOqYf!C{?pl8MArwp`u%{)}F1QbOf2#*i45ukOKRUr`rJqSbc009hrU6sq><
zccw({J)<*`nzui!3>gw*t%Edur^?z{cp@H;j9U6N?+YG7CzzY1kDkH%sV@=@KWwIm
z9`#6y{dL&=JHQOz<V7-R@)#I@^u82o9c@ZkG~|bG&AYA$AtPrM7K@HW2sV46_RGUi
znS-A=P9OjHHs{QK@j}^){W)MhYqa^1!2`pL!B!r*4Gw-VLrGhG-oJ=jU_j46xoEPW
zQuN7Zb&{^PoxGbX%IYx%JeH8$uAiP6XH-^aw|3AM2q*a5&D1MdWdEYm@}{3<!s>zM
zHMPlA-kEs2pziuJ_}O{QWpdMx%Fh>_%QSq(%+^d)>j%<@T%X0JQ!O&2aqs@w7PXn=
zwPI9SdGi-t+sW1s$%ZXbkop5X@M0@n8;~|VilSnmc<X?{Gtl8sB%ufylEBmfsuMLp
zHDJXM6tfChT0%}8L%ztLKM7u<=vh7kNeinnb|lg8t~-|~U6HttzaC#8P@Ig8KhCZe
zM<GRbuymT|WX>lD18g*dIl-`M5DWSOBoF<EK27!$zY=~|#0TB&Tz%F5F~t<hW6Gji
zRs%esc^#QFwMbmf6uzrTCy&N(@3ch)$(+%rpcW8>LZT0zzr43!Ygj}o<7{6UN=Iik
zHOYM|so}=Gm0*AGb{gf*wd&(YMxpF0M2P!<GwIrK4E>qL)ds~ZXHB;|ST^^X8Ci@N
z?W8{x^FArC^Oy;>PNHf(Hb)unI9lQP<DX4eqJ$TaZgmB-UX{TjfT#fmS64kzy?!>A
z0XaXF=;%IOIq!GzHyyIr`mouPtl{DNCpsJlX6K!1z174{TSh-EI0$V^_Was%tzbB&
z#*>Q@3#J8gzgV_L6BVk+VcQq*&GG6PqIGdo4>!q8WzK3=|A*&ZHU@KSqvBuJpL*5%
zk!fcbrSMVF%DF8D-&u?<EbS8Ap{K&QtY^YfoLB2olG$QBJtUcs4nOx7)<fZE(I<0I
zq^1osa?yV-YJJVgPtOsV&`QAQeczwwY;`*1N7jbf2+X0od$-0@{jBNp<;uNP9>E#(
z5RgAy|HsYDw|!>a9(L7q^4Ah#8jZYw*dq{_f>pRff1OqT@YGW9X>#dcd`88igalqu
z(#=BQv58&j;){{jYpdnnD%Qi3-N#W849Y3Prp+(>EpTs_4vprD{k6LY0~kFOmhR2T
z)j9lF=U>l5v>IqYw(qQ8@s0@a9w*c)GaX;7XP9}Kr3w4I_gWZSc)f69VAeMO1efY>
z>uFB|*T^^fb=wlYS3cDn@O}Me>dFilP2nNT3aOdY{L1~E0aM>XIE=S-b<${1U;5x7
zdNqUWCx~JVLgx>l359!QKdk+M-7S$J=$}nYE(4}@QQKsCQSaw!^qk1Y5$0)P#Avo?
z{a($K@PL<frq+n${&dZ+9?hN%N*G_(^xMx_u^LJCN40Ice6v~*$!5}p=UyP<2XY<c
zD0C4WmYAl)=F+kj=avTM<l}-P0XUFpw(s_=3@noPmCE~rO;m?{xAIkCbe|5eEBohi
zB4+>8>VNQ|IMO~UiFh!WiU;c_Duu^Z=0<A?#RgVP1LSwSDT0Dx(1%|p!9*UkNe(4u
zK;H-ha5E)B*T!*!Ip__zFtKbGijXakc#?t*pD~3l^*f>#cm5B1?-dnA*Yyt~NCuH4
zS#m}R5*2K6h9)V3C`gbTMMPAJjFNMfCMQ7@NebE^IcE?Q$w@$xgof^_srGr^??2&U
z=3>^|%)3gP)m?Q?ojP^S&il7%_0BMk?NL_wF1SJZt@a@xJQ@Xce(K%ytVXlwoMJq2
zXLc_N*4D(ABY%l6Bg%Nq80@jwsUdVReIN)&SL>YPgm7>|g9lE7Gf_)>L%qPvK`5)u
z?Ph=BqmjA7C9|_+`*q)vI=d?z#{T@>3g=8^-_EA018J_c*PDFItm=%pSF3RrC7Unv
z;b4?qpM5z*^jBdwf$!zm(+4~0KT4hkVXQF`fDi;WR9`)|8Jm5AKE&)RJ-3zpIi?Q#
zkstS7K0{b9xqs?7TB)HN{K_^oD7pi5>HSHoKKs2?a^wDmozN#2r`lC)1IcEw?e-%9
zY)hpMj&^N7%@h_~p?iV8qf>uKuKTWBndiK_(0{h}?gUxP8Yy)_|I^BaXA6RM3WG1!
zTW=;iq$^!WDiUB1{k(~Fop*fD@cl7O^Wks(v_*qw;)}|MGt(x?8ojLggVuBRn5Lc$
z(ipZpZ0Pa%UEXC!KXbGa;VRzcZu~}|*Y5_W(U&Jb1bZz?*}F#I&&zmU&OPk%2LC7U
zwI6UvoRoAY@|aO!MR@VlH@0~$01}IXA$V3>0O<SFx<Od;h5KtWl#?C@g*IV`GjQtc
zXM33GuItF&rv^|o@RMJ*(31M~Zv?6jQz`0d#!ON71{GKCm>Hx3p>eQdCU?c5`s~>u
zPmxvL#>B>Y+u7g_qVtMFbk!5_Y>)T+UX7K{_t10qCUG->vZF^AlDyg|`ExLo^YNhf
zak}-(hHLjjKYoctJ^V?*rkPIZ`V)HljN`}Ew^NYCiN(rO*Fn*MHk-lf?D^C@Wrv&y
zska8CV`UlFfIth!g-<K{ltaR$foCsk215>e%LN1Te+0{II~Q`zR5dI-98Ony-}<}h
z+c-uJb`2d}Nx$dI8d!4NUNe@9obtOrSl3biY<?zQv@39f$U$&@uH^1^!BgAG2cQy+
zf$TYXgB%h0ED#gU^yTVRa`UFvh`VW3_227qPG482Gammmm7Vh&@@bo3N;5^CxJ>)@
zxxdRy2)KSLZT9(RS*v|V-(n%53HDFL0iHr5I7bf0kEk<8Z}#;_P|>(r^~&N|I#`~_
z8WyKvH)Ortb)xsU=yAR_K3RN)(wp>9?KWY)kJ-ap@iCZ4u1q)(e+%d!jzhGQSkb)X
z<p5|SZi3YjbSDJ4%2DzPaNL;jwnlv@92y-Jwj@rR9fuf`O1KVZGlc${Ka4~H+<r-$
zZ~@tq?4hI2aN3aQbE2X9z{H6{%lz~vGGzX+0fp$M!(uyzP+07ViqGnQumA>z=CIhR
z4wC(NOiOtuO{T+Z6j~_o&h`OmrAmRyy=<4@ECQE~w=SP8kp7z5w|PHEcTo6Bzg$zQ
z<B-$xW`05Q+(;2yZ7Jz#R#rNm#nkdp*Hp7k<k4kW8;-Tee($}H?1-icxnJCUa=*L_
zb7cda?@MEZ531{IaQk<GKdrD$_ItX;hdtSA{lWRZN_RcbcQLaKKy&5i3qO~`N7vB%
z$i9f|-8E&(pSpf`EgGG0H3zvvM!93VGmR}vIiGxEQV$+&HF7ssQQLjSK7roCp3<AY
z^gceGPO8EEKC^YhvOB#-%_Vk@T=^hQQ8EjuXWsLhJ|h?>kE+4Q-blf?zNLS(A2J-f
z)J5_!1E_XvHnOWiFLXMD#-a)~mtD=5PN$iVhd2Th5SByMcCX<<pTs-too=S<NPpZ<
zqU`(pWH$87nr3B3)b;J>ci11*SdZzo7VF9E)3hJHls|_fVgnl2l#T!oOb1g}r$QW?
ze|va`l8?tA+f)z6aY#jJpZK`TZngs{5{a9OPgT2r`s}29k*F_t=$QsQ6E7Ip$c?Md
zmX0GLnmyQGA^P?~i?^1w>Fp_VsWm6L0=9#fp{m`ncQ+ItBL>>Oi0(9*zi?sVTQ`l*
zK<t0gqEd7n+}iJz!<tS9HYoM6W8EYHx|7@{bAsx+zG&cVduF*4W4+f22qA-i?-N#k
z{$=8(+f?3v*Y5J~<KsTRCXSbvayU@VbI?)KmbpjsX@yj{LCPNP{k;i=+9}-TK-3Sj
z9-<E&)RY<NUw(VOTkwqa*)pdQw+5FH^NxvYYBa~Mrftji7tPW1Y`eMnsJq~=QjpfO
z<3{-wnSL&`-(W{2D*`)$;c|r^{O`FP-7v|PRr7p6Su0pyegvhs=SC?^s?&I=E+Y-s
zR`gTTzkstR7Hcnhr%PWnJwII9xiZ(K`5AU97dCGl?ifEi`gmG%EwNv<2^Ifw6U!Qz
zt{UEZHr3qy_`tRPH#iYr>U^q2@XM&OBfr)4#xJUU_NfC>MR`h!B_yBfTG5kk;m^Ps
zuYZ1=yxv+yNlvPp1CBE2Wh^YT+WpH6RnW|E<R&bmQgX?ICjA>Hrrd=~o?gp^C)ldd
z>M6ii<DXzd6fk`J7Xy#Fh%^vn@+QokTd=-G#i)@sbhv&qvn0ml*5r{(%XI{FaDeWu
zu7%|rICew289Y2~m?5QyWk;&BxjdZ{B*siQB8o>3tvl5#?O?3qdoaftOmvP1PGW;o
zP6B_GT6PyQ0$xy(Z#DloTG5O8u%$X!)3gyN`(<>FhO2lWV$8J8+V8pWqp8w{m-V_M
zH3qqMT(?+$F}oR0n$;ytNYFJeUAaMHH|{6M@xuS({^Ezl*Z?Vka#N~57gyJ|?>{-z
zn5k`mt?zbA7H%ZjH=)l@=3d3#Jx-OGvS_$ZFCNC!D@?u$=e!TD==C*!bWKq>nDp;H
zMkqYB#<ZiGS+X;(j{XoodyN+PzSRt=WufoMUB$J|qZfZR^;MlXPijQViae^_)0LZ@
zMFg%Mr)`EWz~&M=|MAUd4y*%NEj}Tg-2P=8rVm}XlkC3y3B<<0(Hw1ankxxR5N+1L
z*Y9Uv?tck9ANY&;Q2fQVwT&9P?3J26wRWhre`p7wXkx%5w_f*kZtV7ZJ^Mnj1*_-r
zv83{S=Zyd6{9+^886K#NMcU$;-;|}R%0!iu>^+Du>y=Lr@timcGi;q^{S0TFw(a+H
zHD(7I{GOgV{b4NylOZRueD9Y4(dFqm^^ds8>^<2phZR@e20)^}KT>+e<W$QYkh2p0
zNkGF^oSmBNUQ0@*g{)P-gCP+Vwm~j^v%0wmi$b4?y!D*Ga1QK1!6$+Y=lqqTPS-Hz
zLr^Db@*(WnOT5Hsi5>Yva?gAXfd5^tfJ~o#Os%LM!=lzo(aXmz;%dqrQwOGt)^G)*
z>go5}oM{L1Q`XdSS?rkZzmY}wWYZ*C4xoio9(*ysR*m=g)ywz(lL`GkYz@PWfFgz-
zV_Aa#24&;*s8fufRR{#~OI6-fF|5Jpbj`uB0Yc0-Fgw<PAWl921mI}mx(sxhNDc3q
z%256~_O8a0bw{tv9kvK1bu|x<rR-(@GAomMEd|nn>-DC*IVm-qD=t=&RM+3s$ZBvy
z&fg0nR2AN8y5}c3^}61ePnha7+v=-nPK=aC$OS85gm2gsGz#2jYrnOMiiC@UX&+aU
zbmv$32_V`rAHAbHJ0AEdcAp_u8spPp@2jM5TV279Ch{jc+u`n55sfz(83junu8XnH
z?<%(7kSQ9Qo^;3i7x%1ZagWC4oCO2b<oDKYW71ST()d8vg)5KmZtvEzEI~Fq)*|7U
z-$>|WRw-i#_<Sf=D7A5eg1<y@9Wlqy2x>aD?WA0*(u7Q)hM(RDY~{|wm6RofY5gq5
z;@T);5WRXmdeP^ESTP8^a;Gu)H|n@Adwxm}w}ki!S$X_imRXZ5+(D-hN6U@kT*WTL
zOM2c5APTHGZr<+`2d+`bcU2q=wSxiJ$J21VsY*b84sre9p}ckz=@4QavG;-tXIHmZ
ziX!JL`Hnh7xVe^qs4`1P-7vL6`%9QQg`htS(uX*pF@VGCaWor}^82mrP^uXRqyUC5
z4wp*Z_r|`d^N3)+52%Qj(aZei`793-vU>kht}3~H9-p(P6uyL1oj=JA4Bq4O<snPT
z>vk4Nv&lT4Q=rVg2wwolA*!cJ&~U(caU|7<5RtZq0Juu1%G6&6vc2v<+V;|jHQ*hQ
z3q+oLnFFTav>Gk}9_+=(X*b?r?!T={zichAx=3xC6FDIqv|*cM`F696$&`u7+kN`|
zq<6y6Fx~zi7zo1Zy7#E8JN;$B1I{PQ=(HWqV@B-OHmgJAy`v6f3Ftj5){z~EorNqA
zEy&8t2hPn;e?Od^3pu=$T2(*yLGd^oxU)LYCh%VH+cE0+8BPWvjDm&`;^JqYpQKaE
z{j3N)j7RT4H|9>_eYP2yQp~YG&s5O|XKA070<Try1+cT|FLw?&(eCWC$5n3W$H$x}
z7nv^CQa&&V?|KEf9t}Q=DO2#6oC5+E)H~<UhjT}sAlu6p?9QPemVcbfKiFA*Y`5^r
z4VR0t8~_~$J6Fm^qr=ZVt$E%YFI^ek)_)NTlbMp_dYA%1w#sRV{A<P$^Yhk%4YG_4
z{okSUx8*mvu6`|oK?DCedMJCc`6$mgjaT2*<5MwHgTv@yz3gb=5RC%#kJ&PxU^%Re
zukdr8)sm|G6FeF?ymvevRqS9pqB2o3$~4y4`94#2^RVgoR|ONbt6*Kc;bK{SiT;A4
zSDi)t(uGTJatuE&4Vi$%+||Ls*FGe+GoPX_TQ1F9qL#P>RH)uGOTP^b5m0v?iK)K;
zurWj8R=Z=B4zel%JhKS2Rv@a`Q$SuR|2HD_+y6vYXF@1#a1Io|_zr6L-yJ}K60~<f
z0|!w9>~JiQ_kW_Q_X!Gk!iZyHxh5YiFU4!5Z0=nHj}ct}KGwQ54R>q};l2Zq7MT-V
zk&NcLFIKH|_v96{d##Z^nr1MsuH-a{x2Sk_De&-G;~vEqsuzic-J#oWZ0*xFyb=_L
z380fK2Z|6Q6{-DHs|vsTn<SUDwL+(a<u5_rf%Vbe-#f-DSK}T?h}}@{Sn>{JS#g{7
z4qbZX4K?clkW`Fxr(hm<20D}I_|=eQ0>vX;N)YDk_}CNIfQ$aK1*u1V<+-)!eHqHa
zS673i{kj0JbKZP>tLU!71DXRgW)6$8cZ4I%zeD7~(&T4wrLnHPxql}h*?#9gf#u3v
z!mWF#CHS#@Vqjki5}9+7p8L9}bN11jIY7>}=JVuL)pPFkg=J!-W&QGoMsWfX48r7{
zM(HyGr=9*TFZay^E|k`P@X|zV_l>cS+&^eA{KcH!5`ks<t~;X2l9L$__<%ylm#nwN
z^r@<P&PzqQIvH@3ZIe@`=vRbvm=sOX#HyM586^yLnSXf{9ykuU8}?k+B+@G0FkjS-
zhfamXzOD|UMbAKH*1T1D9z}G<&PDR0nJFAl@jY5LIMYvVOFf6eIMR&o@I1d1@9hGr
zS2I~aFmbI`#x1w71PT$Sgv<#+`vc@J#=o(vWw3a}W61x1!ll5N2iSqdU(IF{B8*mp
zQ|2Y!AiIwccqj`Pzbi7p2I57j=FW4|>)cSeKi>Km{o;&sBNj))Sn}_4z>u2M+~shJ
znLxD>0-xp#XX=_d2`U!xlnZu$(D9-A`y8d;AfpFm^7-QSDe`5~*m0MG>UVIG?frZY
zd~Vu#WOr$TsK2&`2{OTvo|e3q>&>>^G_+3ml(#uQz_j^yPmj(wz=%&y#C*`c&#$ti
zF{QXGRm$^4?VBswWjWf@BExwS5|6Im>9We!Cth@@bEf8Y%F!>lmnJ-6w3R@eSntLN
zrz|(X>FeE$it4=cBnLDt+BN6JQm>P0sN5T^u%u|b{SYjcS{Pm(IA0M`R*8#G>A)vX
zf=}{pjg-MTEuM!g6NxjBrnD4u)ZfgiYN=%g?}q~Tx<fF#Z=<LX*AXnJoZ|f2@eg_l
z^H-6N#&~L7b`yq&&`b;j$sgOaOI*~TY<BhKUUbUWyv2qO4suq?mxl|<1)h&w^6Z*3
zI{y!Ww<8l}(8TA&XvM++Dnh2BX(=`9^D6wzkx#UEWTN5tx!TX7_X-)79Gw#jcY0JG
zPMZ_UOc=@65u~}lGp4!l=Fovd&<^opy!<M|x45T)M&;4AUymxs5aWBwUu2V8-e;IU
zeY1;4lbHG*w@t%f{3<Mm`-{#m0?!OUB$1FEPEwA-KlQF^F|}~`QaqP|kI;LYUnio<
zURX-@BIf@@&R@AsW`0g^;pE18Vvs-X+(jwhT{wCPNs@?dk#7czoc-ZQC&v@=jIifU
zP8!$f$t&}wcb5-Iy~v8N$D|Oh0{{pG`JS9$5dR`l7?c{{BRvc=4C4%fQ51&p>FkVt
ziR`SFBmL@xAHyEPD8?7fK!U#&xZ&7GCB7#xheeo4bZ5q)3AAt<cQG`l344iWI|8>C
z2LismmwW3Fcfqpb*tE;#xj@>&K)|ET?87?}*If|A&u@9yO-8I2dSCZ3S0RaZiTJWj
z_l<l1dDR1k11r*fEC(T@^b(D}$fZd%NjO6XEa~Mx&H#c5m5c=@O3Mg*isN^$B{slZ
zg1T;gdQU4WUSD84qI`)agiAdl<9bcG?CPA0T9}6PkCj*V!iTVWx#Ws?OslVA{`GL9
z@|(r{snT%GD;Tz66Cw#8FB*+lito)o-?67v$8?U?M+Q#7lx7YJ2JqryxW%s3D~3@o
z^{OfKa$*z=Lm#RdU^3AOHq2a9$^WEn%@<}hA-F}wg1rW10cuzL-$tlUIBSh(0nS>C
zln3zDF7VZOSc|-ueocyxODp0r=@j(-_{|rF?_0ensnkU}5F}9+fveh4Q#k9KqR!Ib
zDI_gkREN>4zUBK~06sNv@crtaqJI9uSVDm{FJXdJoNfF_@)D&5GPHAOUPMF1gQ7gF
z>*F7yW>z6mGo)-uP`QY(?+f|&>|$qoHl{=3LW}m;SD}YP|BB6KoGy@Fbr3+I$RH;V
za$P<#l1u4*w77gCn&5>MHduG-+-tx`&E5LKr!%bF4D!((?w%$q;}_Nc%F?!Vszz@x
z?$J02J+xhff1e8k=hwu!&LaSd`+S0@7`AjH<*!3?3^#mlj^S-Eupy=b&7~uhmXazF
z8H&|;vbaWrZvubp-T^?aPZTq{tZx7$GmpwJ`<L!sxAm5Y7w#N(0dxjl_x%*>&)`+`
zLn#Y)(M)?h&g7^)kK*g*{Pf!k*TavzUz81V#uVyNnXtv5N<5F&o480}Ym^iY`&Ug7
zm4Flt46fgWrCb}noN_!E`nCs;k!WV|xTu46JUOdJN>;7O`_j4s%&JrW!FMQ!K~lca
zX%F|%UG!edP_%HsBe>rxzdq{EpmBsg|6sQ&j9i{yJyGNHQv5mIvpGBxc&663czEZ+
zVGoJR-B0t{_tGKoV(|I0nrN9K!CMxZ*OyN0s3PHFEvVs_W)ye|)LI${s)f$0pa`dj
zfFO-7`mddMD>MRH?$xh{0b(SaR0{l6OY<ui&Gb^Ep}q1Y#x738v%Rh;{=J7vtY6pr
zVyoqcJ_ra3s$GZ<Hg#~ltbgMpeWCD^%8Cb1qNW$2w9p^FzR%Y=m6?98e0Y|FFpV?J
zOx{RdUd6-$r2%y1+CMb(?y>k%QJAq+kn9^d;)rgO)2M&vR9W}Zp8jhQpsgmkhc6cp
zCEP?W1824WQ&~?fM(KP;9GdqN`@6kUqL=E*cqv)y=5cq*&xs+#uNhvfZdo)wFI_qg
z%zKEJ!dVo#0iHu`(xsEotG6%6oo~EPMo!Z=x?^9lTDE&o9Tg0LHV~VvJ*3Be`k&ia
z$1t@J#|Zk`2Q8e4a<RPg#uBTWD3KX<zRolOgl>S9%<>@B<KUGr$yW~++hN$OGtT{v
zmiI)hiV--ZkIj;j$P*FyozfHw`A@19&o^a~p6*<is<M!o%BWK%H_VVOUDQtu<(`=R
zU^?TB3e9);-MrSgRfepJtUQ7t9^z!fqFnCs%RdcNVb+GzW>HkV@aCay$O1NmDu%dB
zXCQ+3Uw1=A)_uobz!`9e^I9D*XWA4IA|?**L@-%$NhW{++zNfLl-~&$ju6Yyy)5V3
zLBUtjCuXZAdpa+S(-^&BszxM9%f~3n4<pKdgUoK^hrkKNM$I6<vj7SfKq$|_)d)7U
zw}4QQAhpACXBc`y>H?gr9h^ay6qQN`qrRLMGhsZlh7lt~?n9w$Nk|SLjF+1$4l$Z2
z50X{ji`<ExaAQo~Gp6#w#Z~bQ>4NE>UcwiHv)B%!SUkCw6Sahd@h3Lygh97YmQVGk
zWV?OCPg$%2V=cre%^#Z0M6i<U!PuCOrrNGi|9%+z`t5U^_>*RrmsHAQ8!ldkotE4s
z3r^bZfob-d=|M5|!#o2%_0Hd2B&*j*r8}(y9RCLKhKQ8zRmz)Vb$Mi<)i!_lUCrIB
zb@GNO@5>2xAXuCOkZsDN@x~f3c;T6E`V<-u1pzx!+W29}x69o!aZ@l3gpW$F-OQ&S
z|Df1V!Sx=>YNqB|8Sewh(udW~uclCp6#oaH8~et2JiU@J%c>uQQEoOpiDSq9d>!Hh
z(@}`Z#$tW3oAQfKtDXwWa`$@Ys+9vqc^uEjST!4F6clZ#2)bH0`t@zEXq>YZ36%{~
z=MXg4ekG9P!YONf5WuKXTW7*_`^=lp{d99vJ{v|B%(o*mFTV&Izd37zJ}D38sm>F%
zVng|>xLD+qPhbE>&IRIa;HA1u)=!TuK!y8!QCCF3wQor{n)lo&KErPFMxlT5oF?c-
zuO`4dPNtm$Uz7nZ?4ba&T0uD3U{L^;Q^I3J6MJRXrPu*enU`>A^LavfnEx}pB))k|
zPUt^S3-~SqaQu_Y<zPI>$d0*#uMpJ&o75k$OTYXnYcC0&JqZniv*f!_&Vs{{6>JQ6
z@EmweT;bj(EMG!CrN+bwE*?M?1m4iLLR`p>P+R7Z-=Bv{slFX{l64}Mhabxw1XErq
zZ1O~KlN)b-D>3}qd|@zGiZWq}t4?3Xz0gN`BeXz@<;8evdVlmoTKgiAJ-pB(I94I}
zErCkZ4Gu0lDvQJu<y+d>37Ov@G8)V+8#_qvVj16wJm_>YToPZ{3MEC2cgiKOw2<MW
zzg7;-A1BAKz-xq2ULvCR&RzcQK43RY4S&Nl+BVqL?t|5M(Xw!o{Bv@zw5%0x36d(r
zJNCe{WC$cF&6CLQgpnF~ANpXaKijk<kp5BIQ@dgsB2{m!F!L0ra&b5R%2V8}SH!Oh
z;2WF3|KrfkFz_B8+A;9X-tmiuw3_v`8>sKm8<BdMG7}+|(g_=q9maO7<i<%IGLey*
zkKP-5?q8M{r_x3bdSez|VQy>NRufHPEOWO%*-#WteqrYC3QCTdjeKrYd?72eBWLiy
zyqTN?(TV<b@v#Q0ExcXAMKS>Gi=j#{4K-MeJz%?RzTx~kh@XO>ZBNUF!1~vTUYO2i
zf~C+WFDzS*j>NLA7hU8oUl<8s2T|$=>2}(g2nJtTIYQrh5@h@<0W*cw<G^EDG76jB
zQ|8&hgQ2pC&{C*W+1wX|A*Av<*y7MUgFe_>J;@IjPfT@#;h7>>WOzaty=>Gq_YW`x
z3NoUpxXR^?)j2j^x)Q=|ZgLQZ7J>07*n!(MURdgE0vMU_?I4kjJeX#vExvwj{XT4c
z;iG6T3}gpxg1La<tSQCONJnc`wLzti3<(48AjM9rrkeMWO$C%r|M*@sgZa<fz58SD
zS3Ixy<}wj=e;rm1-D~eu^!c-8HD+0rlcj9JA|->gjh~Wu#LQ43xlBbjE#WYPw249c
zMhXhkGm>&%Hh9Wq>S@MY>=Htl%58c8??n`*bS50rP<YXXC$0r9N&xFV)SSryi5EIS
zL3VflnU-!mPqVGkEtmNTFCEi!%#1YuWDZ;hsiw$HxEzz%q*hZntKOF_i4&TBH09zR
zQnQb$4Q6uaUo<NJXHcGh@jTz$^T*8@lS$BO&8Jwofz+}FRw4SvB_Z}R+>BFM06CF?
zo;Df1y~|Hn_~-&jH4`-pQc4I_WJ64QSLfyv+B>j%CLP?$39>7%q#k;gnHg}EQ)On!
z!D8hAdg3ZO^n`&>znvCl6z5?i!UY2pI46I_dK)Od$l}cPx;^^$?Ub7Rw^HwIcBEvU
zsYDxz*vPOP%^Bz$zHPtD?nr$|WhU)GAMwdK$+EKfb4ru=)s-&}^KW#vpXYoveBg0u
zb(34imfg@j5ou`mYAegGK<ZLO%4U5Fb5Nc9c$4l(MwNVxEWc|Ab3C*b{})F!E9qaa
zLHXrzcoIq5N@I#t6JRtuIw9XITKDT9!=>P;rJX^S+B<tNBAGazG9Mj~`jZiV3k1Ke
zSp<U1Yo3AN`dWM-*u6qTHZla^j%mWkELBc1$tVN{{y=Z!n^ZDYtfQfN$M=CC^A|$L
zt7RrCByh<rxf5dq@aI75-;c1+yzG|i2adlmY*U?&m{MyxWsCdoGke52DxedGf6Zhc
ze!5*zX;$`=Cw#J)ex~JKX2AJCi>v{-PSSLUbA6Q55UPwu`;U{(WwptQQYJ^Zg3*sp
z%H6k(W&5vdzi{nYx>^+w;Ek`9R7Dx)#^}&i89LsOrucjGzZd^MpA87{Z0=l{g+cA>
zXAMuTi#>i~acYwGvsmsdQYeayOjhh0qXx0)K*;t|dc~-*GK10e5R;<gpU)hF9iB|@
zBZl+^1lK+vo4lQm+-3irt1pneY(H4LOs!B%5tQd+HReh*F;3F(CS}pkcUh@w=fA)H
zcOL$`9{#&8{!0n|FBEYaMylD4`@Z=yE*gq_XPp?3IUCv^m9R(Bj4+F0jZpT+)6buw
zr-GdAK##T1r6QHnwa)xIG;6W5p#~3i6B2Pf5#!148fwrf)EHDk<jes{933yDceNYp
zg(B<{p<7tmOHwB3)J>5YcW9-e5KhViQ&Qw{EQDLHnoAE~kGI~Oww|6d62pJiPmnFy
z($U%4@^yEE57mC@co`n0*KkAh`}58(hHULl`5;lqHN-}h8ycHr#c=-Zl{q>g5lV&l
zNo%aaR+$MKyPsLkUHe{{i;c%3FLAvL$0F~#s(y@7YZc&C(L9o4qeF%~szIbsPtPTg
zA~&0`Gz#;pYM?nN#~zK{VUq;k4Fo7A#xv2FZ*Nz;Ct2Fkcvj^{RN_o9A)46mh<w_X
z_x!Dn(OagUf0r{f<m%!=#TNm7%_PKzbv;{JH^|^BdZt$z@y3fU^j7X_?Mo!do#Ia}
zm8~^sc!p@`d9~Gfl_SJP`Eki$W~&e#_nBQ~*~z(B=ke0|S~CgszgIF)|F0|0M9*AF
z3bn(ws^1qZl1i5tqh>};TCwoh`oLb$L|Q+Fi#C>krA9k_t9q-NC5DH#2HhDI#W|dz
z`NBm{kNDtCC#x9TiQb5WWQe*np?x>cJ^W}MN<^u5gRG(=fy#EQhviqUF!oooy1s)u
z5!YyIC!-r7OW=-%%X9UDS$_xW`u}jC?LZx_ZXm#e?uD|$9cKGr>UYLBgny?k4fN(D
z9iRBWq5WER+HtQb&=~O9j(Jt&+$ND1ef`3n4zAnKa@dJD<{H1Vuhyx#yFwbS=g8zp
z?)fV$Qa(<MmEYOzW&Se22!y$1I0=CieiAYsLZAuO;nT=B!w%~xbX2h!Hq)SF5!rB2
zBE7?V{AZY#om%C2Ut_IJ&SmY93Y+*zI4X=jNz-o`SO%g>x}l7!ynM2|B4>JO4CFo7
z2czFEs)g|RuPQgit@vLnD0#aTzlBU>nC3L)pXQvNdsn=VFneXoT@xtb{QM=i3Y}sy
z#H}@>_<`NCvnb-pK6)RmVX_Pir2Jj_;)&4qhMtuUE2r&K=EV6-tS2%TXMHmFTS1;^
z3?A)k+x5NY_q>~b>wRwYcac_oH{PJB7Z=&OU@NrXJanG_BeiIo0gi1frktghb$oY%
zWoGwn%AN2edMK7N36cI%%%G|$k$VI6Ncl*R@?~_ywGN}$dx<#iyR5UqIUDoISWXPz
z+2;O;RC5$sh&A<sMH+JlYLG%s{KAuOjMLUN8b@-ghWm)O0v=|Ra?+4w6F0O;#|^n!
zj@qi(seK^nfkZ$rW3LgfJA0%j!zYX#)(p{|ehh=Y-LF>B%gNa4KCQkzCs1#s%(uIy
zy&IAj{n0G{<AJ$7&~s_pdH^t>u;LJ+;|Sn^HuV!B;jf7fd`X=V2_flNWSr?T?C~SX
zUw<dMk1i4JWSY6uAg%-tSMR1XxU`?Rtt;xyYq}g+Q*?q-wbM<tI83WYBt(kQ>MzRc
zI3~{a@KG2Q-7-FxT|*)g&hjqlatEU-E*eTg8`cR2m^<sDq{WMiM-gS_Gy=ED;5WxP
zjk@WsS1kNuv>W_0z%ROCY{hL4;E&VVE2$-aba>Ck<kBmPw7kO;aEb7-F;;JuH7Xdp
zg`Bgh`P)5gq0l-iMSeHI_g;f|@u){PfWiF#<<4!hq+BN}6=r8Aro43SZzN3o?oStZ
zcIi($!y*a62>Vt}`GrdNUb4rsqnYC4N|XV%6y8KZ+JB!sfb&V=<x#|L!9xR-X0f9R
zQom!0zyW^36=)f{t0@peG-}8TH!J#|W_$6AoE?a|WY2N6Q_}n6l^bJaf5g^bm7lQY
z!OOlHfAR`1edjsnQreAvrqNttCCTu{bIL_0T5wC$Ob;C8h$9krnf&8y761>?>^Zd&
zJVoaClWB?MOF^|`FMU@jorgklGgN;NaG78W;g-nlWwyfvFqlck^;B8}KNgWMBtmDr
zXK(N)`?|xtm1msQuOEch;va$AgW#etXpB9Wy9C*w?$;T|tLi6S&>EP1`}pUhfmsBB
z`_s}Q0yFcszhkB7Q9m4*2A<UFQ77C<byCOOa1G%MH)gpAQEFL@^8r_ky-VziZ8cAs
z#PBbe+M+D><$~&~WgthUHU4WERX4;C*C^Hl)vEI|^qc%#215Av5&H;k$~sy}E1^Ve
z{0D&(W9HOz7}QtVbbbsftt>3WqBk3he5Vd-fr9q=vOE!#{7I1a<aq=|p%fQnD!*96
z2aVCC8cFCqO@_$Rx}k0;Ol(}U-78;xA2FCUul2x;WEr5)vPxS9EDPu;9twNzBU<S&
zoG=>=pLxlAHANfjvY^Kb#q<VYkqa;TlCVfUGu2kH6$4Q44iCf&(bpKU(YA%tJwD-t
zsICf!a80=tR#*|I8J<$A-%Y%|U2A;nEurW>7(8;j=$5FvS?ZgXsAj;XmeF}am+jVy
z$UB}LPG)xv%eqm`TOTPZyU$29;bv9;ZT8<O`R^+E|K-M6Q9#_Twky2+q@~`tJ2BV1
ziEF9w;tH{tvWiTG{v~$}7mnQ$@Vl7G)r_gD-6ui}5G9H=Pnj{DovAs-Y(HIr3+Ebr
z-iKRpn{WfQ$DhG_X1ZK-j>62l$D3O(u@~$HnMv(|?{MiqA!L*Ck@-=B-}TrWhG1tS
zZdEhMP_;B3nc0I;S&ENkKk(hhM0}2Qx~j{2r5Gk)#^+ww8Fy=}_ywQJeL4TArG@ZP
zULLEy0Ofs65zz61HaG*<${>TgJ#~CezN!sH<wz?Bi(FN>YA<YpmjRZ7wmk3hCs3|9
zGj+o<?WAF8Vls~ewTSvlk%wO0CPgLB?$2m)Go^kfX5kDUdDlQYpy6CpEIkt?Et2=)
zpCK7Ro#{3gnD4X@GMI(-*thm+cR>B;daUpAB~UInGigIH;;rl()``g^LPj0@UEyLH
zA~0*SV^6@r5cEFz@T}mKoS6-2ACvPXD&b_t9aI-AqQ-rP^u7x%7x>^OTY~jSw&0^s
zY;6imiZzLSC;u7JuelSt{&Pf>cY;D(Br?VPSvJ^mpn3~&!|$T1<J=;$-MaT#uT#yC
zSjN@|os$kR=X}mwY@dB9Zjwa&X2Ebl#z-lQI(!kKV7B)r=$tkfLO+Vu3=I*iLDZo4
z5w-b&A0wn^R4TEE41zT2$->|jK$ttVnL&a8GdCZG^(<6rrH3<&;A6%Jy$tk3c3zh#
zJ!!KTy@TxFY^Ch59#7D<reF?Qtey{BtRBv?v}FK<z&z@`K7KywlCS3`w2?%8V3HOi
z8op@D(@XWJVI*&!Tt?@pYny7P2C=Nl%MmW9EHgURQiJBeid0f6AIZscpM7^S+EqU?
zhZ$_T?6^3_dO!dDg?<)fkV~Z&Q6J>D`{vzM{0Q68n*i=w<8s3*+qCYhQ4YR|3n3yw
z69IJ%CTs-6N&&`D=Cw42tB;$Re44I4tNT&yQpmDry)THP<me4>(5bSMxqoVIkzn)V
zjV`6*xo&usc7tK3<9;Ph<P@%o&YLx5XT4)4Y(amJr*NCu^216eokCCITR~+f6{G+2
z`(aPk1Dz4N4eOJ$uStaGm+s%PbRqgjoFxDE9DW&g6Vw*HR6nQc_3!yqTq=(G-}4NU
z{-cu)#>c6p#j*q&DENL%pG-F`Mv^q=C@Khy_ih#c&+osIW!jPo_(##Z$Km|MWSyTY
zYR5^q;MK-^M*r`*8iXg;*%GR??l`q$GU>|^LDKL>09?qBa?m^|4K8FjpSU_hvV8fG
z^Poim$d)T(<&(440cn=yh*Nh(wXo>!n|o`XI@%J&DaW!7@JOw}f|Ij-$wJbSqB#C8
z>|P(8_+WkdQ70^mnCe7e<6n`;6JDFSbDQVUARPv!`H=Oh!r;L^V!D&d`-?PtGH#$*
z5>}9JCvl&-7MzP~iIGkV@6P$4e$<ed8KD<<(7feYFR6{cyFGBtGlstgooe3=W;q4%
zO7O-yaQ_{E`+o+I?M_9vrq?DpJ=f0$`zSp5S!&P%tn+03+IAK%`xW%;0k%x%#%1}T
zKJX!1Xgg-qOaDmj03PbuU7d)n>c2xBy>kga)aki@hgyUFzZvRstTWK}@N>QP(uk{T
zM%O57&g(CZyhCl3x`kq>VRKzom&W4hx5~rw(h||*KsKjRn5e)0eHQW1(oV&;pjWpo
zbqjR%<}ju`Im_Z<yy~T|)3M>X4kL-6gXVebsMP$u3*4$RsoV4|7lo%${Y^G6v8XLi
zUP^`w9SHY8SbBUtP{Qjb=FnkOgU-BWcA4}_DkPjlE5Z+DYw$Dkz^0M!-Gt$4V8Z|n
zW^VVxv~O5^ekF6o9SaO<J{DW8qm>wAB#fD>RBycq@8vnoOG51XXne;JD7fS2RB*=~
zy}b~L=Q3b$J<2{zw+DL2PZ5FFW@T%X7ZM=%12s?%>n6*wU?(IRA#(dRDCf@$xsDq1
z@tWy^a-zl(>aZQ9A(5Cus~UWA;jNegKQ|9UOvk-@xo`Hu<%yJfuV3V_c;nD`pTZ^O
zlnLSoMiHzrGgs|Dm?m9z;CLBVIdRQOoLENpuePOi6iHH8Pua0+pQmL(TEOdCM>VCV
z5}Wi_LrcWvx0Y?I%HH7LFrExv@3vHGJ2WvW{70*^2b?5anvAHBBmpUpxvtmT?(_Q0
zFfR006NI<m|L3=CK&;p+O(|69d@zpx#S$a+?NwG&^4*`=yzAO?ij?wW(kp!4MGG^;
zN;4)<D_1k+lHudNX8sc4M@1*dw?RyqTGYTxKl}xi<BP@1;>>&)O2dqV-86@28`D+o
z4eN&qf8t}xmWf!VQ4xZ%iwTm{Ke;+MVeN$rRw&3#sbO`7LX`DqH<abXtkx1O#!C&O
z_r*zDHMN{f=h*`efEuek5K7;%Za-`L1-|Pd;6vQpt>|*1R?AC0b=9W$l6W!D%C%wb
z^))Q4LG14NY$+{WNGh}luvh2jgiUqQip~s?G0wXr!XT{boJ)k@kQ$d=0m$^u$gU<h
zrQXI&c;BAI`9$sG-{<TcBH@P(Qf#AKa4`oVO~K7e2L_qEj8L-ZyvC|=8)pHBbEDrm
z(K>%&93_bk6hbe+*X%IO^DRZe<TRay568<Zf>G8yDqYYil(*Lpl`G=~+XipluQGV5
z$+YEwd!FN%)+Dr7f&y+1G#&>_A7ritp|)>%ubs`4mQ@A>l7&9iMe&9TjnQq(l&#;4
z$kQO^TH949@W}VdnTTD|nn0h>yidUDKtHT@a}6T5kalXb+I?VF71!Nmz)2Esf)WA?
zx{R<Jd$LqTi=G1rX~@M^5H3E))k-`Q!G6OTbXQz3*yPLtTyZL!G!n5Myw3Dwt~l;%
z1<X2C2xSTRxzW?mN$Xm$;83s%{ZXm5Nx|SpEtq#mT7{5)pFGKVQF26eSa$iF&L&MK
z{m)uZd3qQ-_M>z_@x#V2_S&@qp;xP@i*y5s4>ZAVv095ezu!vRjCV^r{U|7R{r1kh
z7P^4y47ZSr^%(zjq6l@=%Lf_S9F3Pd&(z74{$5ZsWmUZBnL~P*&k>g<Oy^2T!ehA>
z5_WIBeru*)RZ-Kc=Zz%}>t#$SJwiC6zI5-S;cz)1fyAc6bAsPtD?ookFT~1bL(dyv
z6ZZCm*H*GouiYdH?IfYMo_9ju{Ic=7UKD;}_O0{}#0L;E(Bx_8S^qA*B`|UtJ&DTV
zGTB7s+;sxWF@mM0_-W!E;;X~Yh6nq+L#Od3(h@lMcz&gokEkKT++JtoG<gzL3)*X%
zZhBe*W2f1Zb3Ys-P~)fHfu7UvZtQNyi~Z8ie$`6*j@FbvTb8(U*lhUKKg0aIQm)?Y
zhXt&jz5R-UXIN#bYd!rNaB-H##(e&w+c;a8?7MgcbBAX?CbpPN-t^raCg>bg1#Jd@
zzix5e^|na<>d1Cr6vq*+=~%1K(lGf>_{#dXs8hkn9x{++IWwzkS+G$63`O9Lzg27{
zS85Qo><`QbN_xRwNEx{dICK4|9(D67xEK&pxkw|?(HNS&NRv*#q`hqyqtz%3-oh52
znC>~cv#qPm8#^g{trh|akqm$c7?vvp76tD%hCEc;D_z{#rN2lzfXHJg;b?RQ7yQ1;
zn{+XE^8S#9hOue~Gy@2i@5-D7n8;P@gwU6w(omS;--+EST1EL@%mP9v-^JHbW&sf>
zE@Ul4q9~y$F@cS)l!zOb6tHm_xEly6<lT7uV9sjlUH(SLvz;e5r)QZ{h+oAlA&?{y
z+O!%Dly?35R&CU#0#pHMgIQAi)ETa|xcJ(uIX~Yu(ASM{T#Vfv-H;@;yoNP<VznEl
z5^5W1telZPvShfZQ0bVPY|z+h2HB^0OQE&)`^ERriC28oVeu;&7hIKqE0#%sybITF
zrn3hxNdO|yn-gAA+9)*h-C&jydi~5&@>^IP%8HZhs3ZrTXx-Z!-xB8IU&SmU2cSIh
zi*y~<CD%%1vLHvciW5C}uHZGtGx;Y&W$(#_iUcQ|IXpdRF_%%S>49fIpKV~K15dW@
z0OH{J-Gd#e1}?2XXX$~^=qXW5(WJE#bt9cdp^;nI>Kwcx!77X#HIe%{@hZe}-i-hL
z%mBJ6f=d4y>ZvTXKzvp7%bC}k&7=V~&nX7UEyfQPAq$(hfy*i4gW_@rxgX}PQnwG7
z_ytD?OZ{vdsS&!-oj`bvqD2cvQ_Es@rFc9dfA5v`xpPDNigbs_`^jpZ(nX7ikKCAK
zum=`CBY;FGKe;<DXI1hndOjZOxrAT@8lU5h-7Lm(?vde{jiO-vE}h(<aev0?0CUj^
zTfYQMdrh#6d*O@Xuq_<E-W4ZaAXIchc~*u=KWLM;<+2m)n4^6x3SNMhM?NNf)%p|{
z{YZZRT?Z;Fyd#dxalwWE7~Vm>WSSS^{W5t<l&XG!96$`*`D#DI_hvnE6*UMiwFi>1
zj9CEs%O;Kd15eo(3@>Cj{Dwr2<{l4ZDLpf6aL?Q1vi;+j`ph%f9qrY#;@tA%(YdeD
z)cd3QZ_N=Jg0#Qhz4po@Ie5sy7UYwWyieBh@qDJYxAe|0baLIwKs02LD<qJB;?Wb3
zO+xr|G4y}6kYgQ1FkNWsgXcx{;#Lxr2!#{1a#j^L(fwoud_PStIxzyuH?2(YDhGwJ
z(C@I({F6R+p{M6)y<bSSRKgo?KP-Kbrh{{r|HKpvpDUz*8;XFw)y^JYJ+5+8-I_NP
z7<nCZdrxbUd;ja#3q#4VmcZm``XbVWP`m>bg?PZWR|@Y_!Ouln98riHYNBhD({{9J
z-nyH>d^n}SYUCm^`9c+>a(Ugj=2J$3gjVGuvI8YRAwV64W&l1<FAhy3kveTt_pgNg
z7^5?izVOKA36bMa=B7R61Cm<l<VV_f`j1ZH`wxgwT)u66su`Aid|y+)+hc8?{k{_~
zFf&6?ypXxjk=49k+v4OypZUc(-M_S6<aXpOm{W;kT>rE`RzDSlW%A80>R_ZH(-%6>
z6ioLE?w>C{QQKo$QQj-PqL&@(mCbTg@JjThIo7~=Pw#;9LqQgh$>jV;eNXQ2FBy@B
zysRr=;I8nFOId&uSPZWb)FlNe-QiQTfq*nLj-@{!IY_*GEe!3p%GmA-y8klqB?($Z
z!6b$#HrEL>I2^`idzXAS89+-z6hH-jjlr?+pab_Z;0tCx&9!^JiRe0zapAH`L)^9D
zee9M}@3XpYv+(V*>j#SCCCQ=jceT$yI_p(Fn!j@)4A~(`t6?YRsN6wL8ehr(b>;zE
zQU7Ck=MSjXoc8r^m!l^T-)Nun5_JISG)!`ihGfw_G#)7eJ)FfFe`iA!wvfI#X~UK*
zij!Q3LI_hup_QtQnKk}{1@Lklrk>*PlBRbDm#@>BiVUDzFYR_<OIGK8-%xnpZ)@96
z{y-A*Ab)kv5*R*3IfqPg{>!7CaIK4aRR{?$m~@209R9NUUq+9=3})+M>bq?1!S_uz
zkv60PNtQr}gcFWh%<D$x$Az!?hjMb4Jl`E^C7ZKKTGJh-h+kkb_NLBJdgk}*_ivAP
zv@F@=d=?(uNS;?E#$34(t!G}WB+2b}BsZRNb9X+v>?XOEeNf5hnc!~mok~mj!O((1
z#{7FR)_#L7NOGa-nbM&+nC-6(T0L!{+CXg~zYV(Ga{w0H*1Ogd6?;?R-2;O-fJT2A
zj~rIjDku6cG3W^;rY3O)H?9|8<O*G@5GTE%bKC2LF64LY_QITFCIM;4$9eda^CS;b
z`p<Mk<9aJ#;RWH0)4}uPS~6oaG!xTPYG4VBo@N^qzfc`mA+f@Lp<hw{hifkZ2d8g@
zC2z6x>SwR+yJ3RfqsY(xyfco^eP=aI&umQ8^;1xd$&z65?GxqU_@&MQF)4daaqEHs
z34xNF6z}3Fl}u}8E>8p6Rv%ZcbfR3ffWDfEA5sUmdswB7a5qe02Q}(Xyr0TZWLkZ9
z$W}Er{-Ykox`XqQQLCyd7Xu&+`sx^A4Pb&8c|cIfB`yv9<qM_}0$H$lf)~fmLpJmj
zRp?elC!8@{E@$z)Y>G^Jr(MQ#C){@iVypbh-M=kxpk2QDZI~rHD}Q(~jOQ&lFngjE
z=zGw<eNJu`=0Z}Tld5|S-mSBwOCtN~d!^nj{`qr=!?V&%Jsd3bn8%6FksTmEjC)jZ
z_};iIp|)^!YjE)GP1B}1trCKdd5%(ti+!fYKOVhjWGIl)^J+tV9HdyO(+Q#^NmgH>
z=ej+jTM=-P-!(o~LRlrcGEMxZ%-Oq36Np9=xL%~(beYAXEidNUO>L-!1Xg;iQS&2B
z?Gq<gVAq1RHnDp#ObxALgcyK`%rIRcaPpsRu)*6yJb<_o!zaEw)t;EC^iaXTGANIC
z1TSJF)9Hrjkb1`cz%Le3VpTj>b>g;Rk%ol)Oz>aUMF$><fVJJN8Tl}!Y*^*I#a@L;
z&(u1|$pTo}q#+Wve|OGus{A#|W@j8R`$7^CICe@&9MbRqVr}jkD&TtT9mmJ%DxaJv
zib)UR`i_J3tHgNSNUcfpr-rKLTl*@`iOj6kR9u*erVyI9_KVx<S);p3mPs>t85KNm
z=OD<9r}OCCwKYawN8;O|hn2P@;|O`j=I$6;yq<}+<%6}ts}6uL=|1AOXAjvYDvb3S
zX(3ey=R9E;56{&O>r2`nw`={!m)@}ZB^j5f;CZMBSaNl@U~nF}S9%a~zvE5;EMvfY
zp=0i{r^r9^M#)$UMxQ9doD$}vc=;Xegx?USxb&Y!o7MFRMTh2IEf4jcepV2aPO0y-
zFD7|*AHN&MPemCCk3zEw56v6$a~wmi{O~M3EQK}?1!r8)JgY+_vk6x}K1y<*q*SG-
zMaa(aynFaZl-<bexf=b$zPxKWJ2f9l?o9kzoAl{S6yVNznb<3ouj~{Fe59V+W5)&9
zY3AOz3Yl|M+?D8aG=VTL9Nx0JF5Oc=RjFf1+4x|+`&ZazINr|(M@e|LUyMR9%L#!|
z>#qV;_XK|wFM1kkO6+*g?h2D$N|u4eOud7l&YKxYyO%DR9Uy($R@t(EQ0jlAq=spt
zJH%B8C%mRJPW0{k%aFhF6Z}<N@>w1%qf-(Q4{|$k)`2#cMt_9=-DWT;(X-?1*T(m^
zDZU&r&`=8!$~xgRHpMLg$!7#_b|dZpJx4uPWCdHFOYqoT9!@2(oYx|H$W*GGSu(6;
zVdU=;d*0x!efIGkRHDoqZ~FTliC@NVTv*)FR?ddz$P4W?p0Ovqzs}-(#8~G}=;&U<
zPen+)T3Fa)RRXqN+?ylrF6v!T-`DD(aYzJ>H5w_n&eT5U`7x`(wx?_O@BqAyXM)}M
zqOvE4En4Ng#E)l)|Dk;b-0q*@GTX9+o!Gy+%2J4GrHB*GU~`U&tqv?ZG_OKDdzW|k
zB>GY<_;!x7Uwr+T6bF7~Zk@`;*rfyl3qMRYcPxP?-^&i4RG~MINv-VyOmSe#p;S}v
z)^I7=Z|X-Dx<nu62St(jZn46;g<+;!6`A@}RJXZ&9z*DbZ^BA$9{rOp!x<CA`3+wu
z{a3C?`D&)MQ3s9Guqa2w%d(8G`Ms*CA4i|;eC5M@$cu|2im+Eo1V;w(#?8?O!*&Vu
z`v?!I6~KUw0r1aRi5Qg*1J(Xn+*GAL`o(y4LgDQsp14&ZxY8zJwGAeawysoutasWe
zrjbs#jyp?_C}5rm>#X=UhqMF=?v3MBvpjN3Ak4f-cAn4%eaowdIAMXeWb~i*i`NNn
z{#_}SKyZ3qa!WBrPE7Tr*G;evoUeHx*}(>*yo!sUrJ|o=%Lm3yYaWS(4b2Z`USkvg
z*u))WdF%01WF@1Uu(IAG;m~p`b?*Eh4A;Mk6+a9=PpiRG;6rOHCis->{)Or0%gz{-
z<d?V0e{K(D8$qp9OU_?jL07fxNyT9vfrRZ#4SskBFWQ&-4|M`@2d6|r3R$N+US9im
zV`qH5?&JlWqcSMU?(OD6nlw3sEB)Lz{NX=0>n`zkph~Vrp}83FRH8}CyQ%ynd!+QQ
z=#5_IXF;w;gGmoc7KhwKLRpq+7Ur3zBo|Gv<tNEE>u&RR%z0?lg3b}@o9I>J7$#r1
zBL=_)BCb;1mS&C;2BQ+9xi8H|5*NnQk&(iu5?KO;K{&MKg~;d1dm5gEyJTT8UrT?o
zRP0B6?M{Un&hZ<!_ATCoS;kn<$F=>eTb@6Yl)}+eW_jLkLTz0?gezaszv;aHgMo*p
zLpBE2z2HvpAbv)%Ds#Z)C#$9@?kxJ1oG94P9&0kGstpza|9A!V(H^9Dnc4(P9-nve
zJ;W*78BhJ0N=sx*SM<LXslrLk;rFtDCO0P>cS<`Z|1fgWCloItjna`hy_!TkkdlTb
zv3CzVqYM6=MQXrd?*U@4zW;(xfJIxeWH}5LzLvsQt!2-O>>J&jKt|m~>@fBXqlYWJ
z(aiO@^7vu#^bjwj!D@#M4XAcdZGluuj;Q`z(NUxDQaE6Jk4lCP)#{M{U5v>{tIflk
zw30Z;kCzc#Y5CUL+xWDc=IXD7$MpT%Cv^HHc6Z&{uG?HxQN^}}-hl`#2HQQw9=`qo
zgf|o_zy8sy_d+@kY?a%av)A5V%W`)S#9cdE?9{*qG{D{m^Swy;)uQ+VZ)2-4S~5eU
zFg^TB@LMo;pRX1kGIdftz5c2$Z4pri79GkNiq?T8@SiKQQeG<qRpIA66ly_L4en%V
zNCYI>SJ~KQn<hH%M&41<*$3NJO)mH62!URrt`r4xkk}t1>;n>0a7r<Hk>=FQr<JPY
zu3?AueCVQhcNku+7$=sa)n@>b$)#y(GqZqU_i>-SnSOLko0kr4ab7%o1LHaMO!vvc
z*M9p{{`EgxD-mUKt{243{S+&_)=-bn>yxyRv1S#nbfjBfMR`f~rD1~H;{PaQ4}!BJ
z5p!F-H{?etUe)BXk$f@4b&UmhcEgq*Xl@Ov%)B=ChpA-Rm0i}>9<>A2EkavNjwLK(
z_a)x5-gGI7Kc@gxzv!EDoq%c`QF@T#N{Tc@7hRev`(s{a6FL%otN-NQBX`TQdpp{N
ztFMO+dD^8(xuH1l^X(;Z7i)r=`4tS}P+@m_*>sF>`8&xbr1i(MGiGDs6D61{@b;4n
ztJ0j}(c7P7r@(eNfFvTJ(ig34`t529{r+?`BmHc$U)p<rdFme2>nh$N`V4}m_Dewn
z?1$G>ZG<^kPdg?jb_Sr)y~HXkqnR8V{|7F^bfK9R3l!dY&IRx^9SFeslU?x5FqI>@
zYVH%BZr}i`1x8MqA5B%g5RzqCWX4}24j(%Kv@Qi0(#6}@VZt+`w0jiFZ%+3&;m{2@
zCMy0}wvm`ryQJTm0laMf9-Dygn=IfVDi2o0{)!F`GsXm(6Ip;igMpz}$;2ZldDS|F
z-Y3Fb{x%Q0-IJf7-Wn%+D*CbNcAr)Ta`J$Oi4ILf6h+8(@m9`^kD2^gXiefx(v2U0
zbKjECaf&?&CgdEeAaa^CdpAwxK@2Ge#WX|p+qWKOxvvM6PVcnMzL<UN+<*fZQt#h_
zkcuZZpUyt9jomZ1P9~wcoOJ1KV5YQpYLD}8;#DoA_$-2yd1#sD;j#GyKz`>`5=`HO
z@^AdsZm@oOD_}nE#+Xfv`&K*un2&2!?y99zB{~~OhQy};&mE{I^0M|57Id{=pm;;2
zJ6YDVR!rX+8Z3w&+e6F@oj|elaeBO+F~1IR$ECn;lHV!lO=u6f8GquL>*dR;5YR80
zgdPMr&!cy~tY(cX*?3vHeJmdP-<bOHaH!h2|0GnBijpkTE{{-Q#y&-%EK_N-XD4IJ
z&Tx_>yRuc5AzPa*vNQHwBU5$;V;kET+YGau-|;-}d%eHw{4-|ETyy5!=f1!9XZwEY
zy8Ks@4Xa_5c~YXwvxnsDv)!c%6Ha_kyvkaP!sU9zyu6$>K$XgWuND2F+JZHA=OQ3y
zU-v$S-df&kcSp{y=KVOeV{EM=AcpurFwr8Pt+v0iYOXZ}Q;gprWGlt`85r9VqWgM}
zW_>O~vlJ*`1OZI?rL=Q$5omPR&N=FVUp`1z9>(IZ^f1rmN}=qB@bUfD&so62WEi2C
zNJNZ<`7k<Qu(%TzL4GjlrN4`o;7SOymo2S+fRzzDRAQe;3Mz6vrHb}7o)kp)2k^C`
zEEO^M+CCwEq<l~H{-s;8TjhrAhM0jgaOw0CZU?YtV8@pL*Da_ek2b}E0!E7hx7ijj
zP=Y~OhYca211IWX{Pg|gz-jj8-7Q=ITNc{tuKRZ*XCP>{lD#|B!gdjlP)=je<IyEH
z#%ut$ThH8u;E!F944OtR>@;F7H$@-?ffvv}F(?*b)_u)1v!9tnE_j9%-}KcW41pP&
zgCV=S6JDS3|DtnBmYXl%;ZL;k&46$HsXt?T43k=|U%ak%MZYcHz`|ZEpA>VvKWr1m
zZ&mWEnEcDBKsOBIg)bf9Kz6d?mu48a`R4dO;V`k;=u9*90|*0m*$D$8%f;Bg=kMA{
ze+n^1MLv3UMMqRK@B$00CIMgAvTTAQ`HzKIDlsiqnzj7hb9S<c5LQQ35E)tg4PG5A
z-I!OSWzP&4NjMjG8H@vVouLv;4yO7s)7gOLP#@223-Dlu)H0J5*mwV1VfuE@+)T^u
z1G*Nj?2<y?i!TcAvX!^-gmwc)kL6aWz$4S6YZb0e%%!O)qUhU|nypjb@5kB2V?{=;
z9r7-r$NS<eH3=_C7qcg`S~seJm^0I^6ZJP7TQ(6o17@E0jGxck7ER#0S{e;~dkSa}
zLj%R0rOYg3gu6zLnjXvh!6y>l<4?VNz3u_nX4N!w&W9NP=!t7u>Gm&`A%P#61y`=4
z+l;r)x<rU5dp<FC7_E>;cRNT$7MSz10v0mE`jixVJVs=f-f|y0^~SR2cDbp)Fx+1}
zE_c#K%iN>LT_z@M(_W&F+cK7YpA_q}@qEpv^-Pgb-0xU$dJl<DNY)!{!9OjpTK*7a
zR#?xj{lkFa);b;E<|N++wu!{+2wLlDH?LKkAzP{b<icVDut`h;sIcJ;?oHe~fQE31
zG&f<`m%Zs}8k}dTV8_5+jQfiDr@|z5tvNM$iC^(F<3GSflZwczopm|zf5Xjnmmt}1
zk+BI&Nsu#GwJ=)~Jf^(n%4C1pl+6bnSp*go%IbK37tWT#6zmpJXLuuU?8PZrnWB-i
z0YPCWuI@d|Ik%9;T?TI(?9|M)d8uk%tMIT0jj*`q6T_A12^;@FYY=t2sDkEcI8k$1
z%vs)2g0g3lS3KkC4e}A+2Zwj`eMUJv%@h-tPNH8_sf+E*s1e!@j}H7(V+szW`j{)T
zikkAl-|KjLENuByZ<-9F%hB<adc)3$YoJQtY%)(yv99!xJt!J!vCZLZ+Po?(oHX}!
zk9jOLfH;nIzd{4Mvtn}%0hW_B^Q^9HV*jY!w~eU{VX{W*!L4o*D%(1!!gXiscAG>D
zjW`LovXI-oP2}GJ6kT3xfm5ewkHe@IUcV~Ig<)crs={i-8poV+XNQzX8OA!f>^Hf+
zwk}?s)rHNwmGp6s`4If<m1vN*pWC+E+I5*mGy!D_3g3bKM~F$q-Hh_&xgY(>Oe3!9
z85(}B<mj*4KBhj-{!^1-eX7<%&s8|y<-z>g;S0hFwvDa*i6=}fD>w3yQ-PlR`=oa;
zp=-n}K;ASK3?c3q`-9(QN$a0EQ$v^d2b^+%=}1~~-yIR>_uPj?O<VB@q)qePQKifX
zb&D!cLL8&0=1r_6leH!MtBnSRVv7^=?L{r{Qy*N%MzihGn%7rrYqxfM)@_qXl~sMs
ze~ZI~2F3==utDWCAHu8KQn?S|M0plfV(?0`@Y)YnR^9IjvoJO5lzdujG~iLyp?czp
zqZ6~4uD~O*m;_g*uph=Cap%e&(s0aSr(8L}=Yjv^kUilFL)9|{tn@g)&GB~Q8xYm=
zdf+#bE3qbg_Vz;@un7}A0_wlq-2uy;FYNmlZnrZuW*~R5krvo)C9c8UUAVgmXbOB8
zuBnIAxFHBgu^%y=53kz}07ZBA>Nong>V5|uSelE-KY2AZS(~!Z8=;x>4^GH;f9|G5
zKG=Bg67-IIx(O9wf1<F7Li`U*VB%Y`Lz#Z>+p6<Lo|IZw1T(*%Mbww>?|OArAgMmX
zG3*HF%73m0_xyTIm#M(5hbg0a0=Acm_W#*`Xc0?!8o8<tx4b1RE@|KSI!oW18P_m3
z<?-Ifa=rVE1>1O-Ph_iNf8%@(IRxLjP|ryx+`yIDX?H6;-svt3O46DlWXZcZ)dr?`
zPW-AKmb36%@gpzm>X*vE>KH4YGU^ZgiTa4VJQ$!VT|D}HOS1dtILkXAcM)XMJSPuG
zWR0h8q^qe%3oHd;U8>h2O6#X0^Lo68&*&SwviiWDWYdo_Y{D0EU5e|~(PM+2rIU;@
zeSt@2L&M7JtLF&IkIk&H_s!f!D?B@}s3v<u`&_Ug+&oW=DY9s7nEFq}(y)^-bJdKN
z9S`itktS!Wm)@uQFWrlZ?*15G2JSp2sPf99t!E@2fg8N&DNdMpHAOvj8ZINYmRM+g
zj#ygS+HaC)kM+A|7TE9i$W<vds+`RjPtjT<d}{4f^39dH7vxg4*(p`bfqrWI?B_$m
zf{C*wmWA00ZzJ3zZr||VgWY=})^%sjmOOyn))-#p9GT26^&)&hf(q68=jKjXr>tr9
zL<>y!u6`Ur#|PDP6>RA}P762;Uz9%Zz3XnHR*u99a3#%?d4pWwRG_~uUH4>o0vL~f
zH0rBK5<zIGMYx+{I<W-jWQ%mWnk#Dhrp}3_+;EAQHtv7moiya;kfbjH(DN}3Fsq{U
zoAg=f%0|Y6{W>CbfJ*zHJ*qP4QTzivDZ1T!V1;5DFnS=#0v1>h)#Kn}0hsNm3|E5v
zCWJ_WUG{|}3z>YzxKB>bz>}u*p}_>E??Qpn82J?X?x;<e*muVyGp}EMJyQZz2Zw6N
zSWssUw$2leL$Q|HasyCmYfqFH%W=B2Q8z>Xg-Pwz+haL|J0h-e{Q>xZ-eYvR0D~$~
zi3{d_TT0~25lZs`?<T@jmkgH9o--4qh^zthbfO+1J>}ygfbqz&C%;T@fX&iC52_Be
z?u@H>qX3mDA96pm8{mCem;%_el`^^Mul~UvOgS&BzFF$Ysm{-ASEJ>Ie=GRduO$LZ
zO8RH`(&oI|?DSkdd$4Bq5E+%Iyv!!;wT{7?zi|@czL&(p;^%ZKX9}vbyYR|VV;ix$
zOMU}`{@*sr_+7B+z|QUXG#*L~pXXRynr>g=C6y7^lvacHPbCJZp{{F_{JG!o>WH!D
z+sEfAa*n-m4P@22b5WayJYsw5CQDTY3v>-sq{p69XC}t@95bn;;!2mqjk4vkCi`Tb
z$%d-a6av9d@$LE}%-NlW5!Z4m%G5ToRM;2cN#7sPKfZ)_p7@K2y!@`U8(G*vjEpN+
zC?8U;B^hG%e69~H2Tm#JNB9>bWv4uv=U_gVs-4tzssXHw&wH_kk>>cf2VQpdg`=Y~
z{2&(Ca3}8oY&o?UlqV{+=Fadw)l;~s?2S=5R8CXfTJ%PHEp1pub)Hn6cUz<&8O~Y_
zBZM==;$9yTONaWyp>n`6Qlz&rX#`oEf)p4Z(nI&NHs^40kDdTyrII$!ch>QF>#=Ga
zEYsBVfVB>JN7iQMw~^d!A(QV>K;u6}+JoPH1~w7dGnP*NB{;v*M`5z*Td>=H;2Bba
z$ceXL(BCp)u4$poBZ>N;H0sXO+oI>PTNW&Y>bb0DV72LH$1CpBIbV*R>40rF>h27*
zbDzJt#dD``@ZC5ha+2L_U5=<!iUdxj7wc^aG2>VdnFL+tH+n4O%u0Ur;NShX#Z|;T
z2tpZod2#SoK5!Qzx-(RJQL_&gEsR0JPTpe35YOvAJIRQi>;eafy)FNs*MrOy+7#tf
zGWmKfukT*&E{8`tByhy|UJJy1{?<TM|F*dV0V`kV1S|cWhhLi(MF3--d07jWkJ8rS
zszUsw(f-HZ4&_gg<Q`6k$mHE@JDV!4XZ^s|kY5**uyW|6UdCRD*+=}646D}p%OTHa
zvkJUi_pfy?IB&h>&+JR}lz~r-h6-#QW^|@I4zS!C(-GrYfQwzq)?Rg!19PQA2CzHl
zAo@cHq1Y20-#g9-#ph^Km3|$~YKv<&&|z##s5{HEld1@{h%p<`E+dVv9I)_TA=~${
z%EzAJH%4l=4De_1i$^iXw%$`%mzDz;ZV#HupEnCw*(Up<zn>8qRD``1$#tn_e%%Pi
zE@4k#OELaanLGr}^09Z~I7$$D{KGTS+?={lx}y3Rzze5OmLwyrGzmYP@@+{t)*4_b
za0;P(f$@Do9^GuYUQ;oNCh<GFl8hZ1=^M8<8VrVz5^#Pi4>8m+%+fed--hG35HAdD
zf)!n*CY3G*A$7*+({s*>50~0qDLr@kkzzZ??bB^R^>Dm<Osc($2+sALp11LMVEGt#
zooaM^Up<A){?MzBtkFEBKr`(}eo&w^^1dVnWNTBZgqY&ac<1kDUh%nVQ`XhcXECj<
zTYKOgVzeyQQfbw#WV2RyvDi*dVUB&?i-FT~^va_P&sOOqr21)T4s!#n^6|X$EAcC}
zGj>^L##k>X)!VZhSH`JZ0YS&{jUN;ACH(e?RK&1XXu*pH@rdzD`ER2Ar(2+<Re8Ug
zl_<h9v(tI7v>i}^HoK*NKGI*wo{FVreeoO;wjZ{WPe&s}Hf2;;g_4w+5^6}igS~<O
z))&daJ?;829#Jl{5Rfqk0|m$1JQrQ}(OYQ006dcFIsClbtS=O3mPqAS6RpjbKb6v!
z9<&s`(S1uOcTuM1%Cg_+y|Ruqb2Rr1J=rXPFFtclGOK*_89t~PK`ZOA5N$iBc!28A
zKChm~zRD-6eBR8hF`V3eE+{g|GL1U=7#rYHC7e=~yKY$6j(<^eH_uNPpW1z`J3cwx
zGe?+^dn3v9Cp&h;2izDnM45nuOoTm){aM~}<~U(~d$xp{l6IYwa5^jj`~nf!a>Zw2
zQqB#H9AJn)C1o-_n#4wY_h3ki=YZ;aw54;gt=x5_cB4P<<5%jauRZblh}^K13aLQ1
zLN&r3w1)a@08*!%xp**O+%J<N3TDwp`2*`N1TG{aXGqqjCxbgeB}$RZY3Z4U@5dc3
z>X{EA6ZzgxFU8jWP;JG(ECTYxFgjHmvUzzA5o3z_<DT)J0`O(_WIZS0&AqI?Yfe*Q
zJ*jCitjQp9QdckjqDbED#e(F5ri&BAr<%(WtG8`k;!<lmw8*f$)XrbMt*wqrbgBbj
z;D1a+IqZ-Kx45V9%BOfRp^QFn;5d<SqaPF-FijM%TU;rHt}E%ST^?ym?aCNtC<j{9
z%Jnq0qwYLT^EwPyu}D_mjKt<nW@!)6D}TSGtec}xnguQYltW!nuM0RVXsf5wOkGpb
zL4B9Fl;4VCLioVHwEcflk50%H^v}P1EMf2S7D#w9i0Rq5u}e!=-VNTaF7$JEetGew
z)QRioeqP|W@izh8M8C!FIX;*W3Q;ikA)ftT36R`=V^9uWulx`D3Xn-}+SFKtD$bLh
zlI*oT_x}^c$b+90{$(ojk#~=-RUOpSdZjykfR%0L$7&Tazkh08XH-ArV?^EQd(Uk5
zo`3Z8=XcAzuJ+MLl-1BxK7r2nYm$dbopoPJh&etH*=O#8(v1sLiLos{@H)+<iWHWw
zA9O5P;<MP+-@?4HqJ|4vMl^6$%x5niS5Vq}jC7-K1@KDMu;ah3`rd;QjmSHonCQ~J
zI!QLe4yo}qzRo3*){|+bfOQpjN*27H?2e9(?Qoj<8c*P+5aDJ(!!2@+b*$WI+GBHP
ziODfwWVydzLstgs`0A*g`fT%o@<dj3=1OX_0L`~E{by+OGeRy(U&^JT&iS*jyr;t{
zMH`2YHQRRHABXjm%?~Q8!ggx5uc1{Nf6Bv|heYI*qb>Yq<ewG%F0;G>{}bKt`jWa3
zB3-}vVwOz$rMAxbFd>AFbIIZ_$I<ND<i>c^?E$mZSkHmzfjo$o*q67rAUUSxqEcNv
zSJD&J<qBGPU-t*uTw)MOh3uI6*=H&ksc)gUgmA=@VhzHqtdAl?s;71qClU(B2)&l)
z`j!WyPBQ0S->`PsWDg8J^C(T5dD*CAzE<hhH)ho(odR$A;#xi_|5NTTa_=oO@|IJ<
z?a0g3o;y<TZ|+&+s=N?G0;43qjusCWXg#clcxpY=!NXDwoQw-090$}0@LB5L8rnKm
zw=2KeyJ`s!G-wrD_x+p$)tqak3^wJ|t334^S{u*NhDUZRo^5uJYb}O3P5P^fl-8_7
zz>}D3+g;jI>m9x|1b%fv5hYd$PIuB%t?YV|Oa$uP;YLXp)wfaDJ7&iu62=01yc`dz
z-%xdFIo|hOSZ;0h&KefgN}FeST=N-F7_jEN0AH|VS~Q>Z9UijHOAGdKcl@~a$Ius!
zzM~56{iEwRqmMA4fSt*N^}$}>&KtP;fDhsNZ+!A{W<T(vG`*=Yf?kJyFhx_L4iU~3
zV~ir<rB9wK#cjr*k7?k;Q@Fl6-c#Z;R&_0{xwODZUdOE^Bl5mguTzM{Om(l9AoWLE
zo8`-}pv@G;?6@B{F^^BlQAWv40YLR%@KS1D#X61F;22KJvo5B_xH7d;>nk?fd~OG%
zy9vUFG`v?TW%G*~{Ci7Kn#9+^TO4<{TikK9$bf9F6K1N>MsDMtQq$@?601iH-m3~h
z$)L3?Ygo&dFbX&5suLFEj0ynCtxCp@^^#1^=%PJG@RZ>AGv%*>h;RHQo*?mR)SIW2
zWDR~<pR+l|{wy*2S!a|<I)Px9pihq%Qyat^iE20ce&;@sI1bK<RX_Cy2kLB6mgr>z
zEnobJ02t<We`3aw{IkD)wl<QGpUmc!*bF?I&q((%0T*j2YUDPR<s_Nc-7a8{TJcpn
zi=3+~TmGY*qYPo0_6gX~ahuVH8-P0_AIJsY3a_T@@vJ(UC;YsLvag0_a#|Z<t$BLp
zbqcpqQX*pP5^K#6tDnp!;~lLr=Bdtn;_83kFAX?Q?V`zd69#+ZvMv|7ivR}b(bE)L
zroqQeQ7;Q!hK0B$EB^QtZaVh<^&4(}S8nCR+yT3v?TX#(?8k&bnmzl*1v$hekhG<>
zC4`A%{i{^D(QbEdxAc2*YhTvx&RmkM(W~=t;-46NmxIJ{VAkt`HFqEn>C%sgx`ac|
z!~PZ1-V?-3CB}<7IIw;vG&3(7B@F#X+RG{*+0}9#2aGT8iY_6E!biXzp1CbCchvRO
zc3z=~M`y|z?AFu}bB#WZSmcrs`u)`~HHFtLoxij<D&$&viql{jOg{}cuf+)`{|Y@n
zV-qQjZ?H!h4LlvaY^zjYWgvI$BCP*e?xvai5;1&d0clWcU9G7Vef?+h3O3I){|8x%
zo;|-#zKWK&+PMseV#-nDV4T{efbMGFzDLz7FA0sax7TCL2H}fTrIm&`k7P6Zp3)wP
z3Z?J7ST;sk4Krs(<|=K8+{F4buZDb=J`|VYr2ZnF$o<sX3_WXnAZ3|OHcWrFwVLKL
z67J_Sb@Ot+kzW>{TU(x;yT+JAkpFdM5<)v$M7H&!+y)*+Gk2f;Kz^S3x(!~&SQA?Q
zBfXY5@Z723Lw{RtlMK3M*rnq@S$L#s(7rr(Y1N>;@L2s@Ff+$4Gw()6-^e|U_P2fL
zN8l~2M)d)uz=d^s!s^LVr9nE<Vf87a^a>Fy8GZU%{fYg2`(y>@2aA}^ab8ez{}LdF
zc9<qx@<v&V`gRB$#bQ=1rAU$ym;p|z(x2)E&KTQ$>A@9kt6zE@@u;7MLxaZ=z4^tP
zCo*)rhsSE@sgl??5<jk90PjkRZTC=~l12z+_t0UkljqBV3l3|pj%NFDQ&`zp=4I*H
zov)5+P!k9Hr6=Fot_kcP-5zzCXujssU%lpPKe<tn*mqp9GHT|VYo(I96Gl0F*$V3g
zz6y&zX&GIV79X?~S=xC~WKym|H%DPr5|Vb=<Q2PL8JIZV@O!;G1kWyb(ennY-&AZ=
zk_42wq%1NyKFEoqD;Ix-izv<+*?f2Ix2CEo8o4w(5T~{M0_G&t(@(U`-g|DJf?7$6
zVX^BT31!2z>NK}*4MTO3TKS=86X_{{ctA^b&*jzwu@n?9Nv@4oR^h5yL{AtKtpHN@
z;qF<_HrhW68>Dle6ALHoE9tNi=--0Fh=0|q^<J9@x58M4zr>qw$JD$L3CCZy2<dq*
z`gj9R5R@n=HWubYrC|=Ihzgl_4{c1=)<H;e=#mE8FY`d*BBUkjD0{70?n@ne(kXGq
z+0zDpb1$X53=lz==WnvQtx>sO25mYG`M2S@6Ax~d`GC$oPt<~plQ)OX&uptmU>#J;
zWPF=!StU?c_XU`3Lg+n@=-UG%!(XHID(fvm%L45QAO|PU)2#XB{#Hz+%scT4&Ol=o
z_1S9Iir+iY)Y$rf%=}3YEeow!<(j?rcr7i?B74neM!Mm6${{cFaJDvBDFR8`gpA^u
zwqo(@;~(N!nYEC23KFzEWLn1DpeBc<4axk&j@nL`qS!sRTIbb+Uk;)p2C)B0Id-WJ
zO)Agwi+&t>2t|E-Vjm><adu>tUxTE9+aWJ@g~O-0KLSIp_7{08j1F#2<PeD)jI8{p
zwwXmr+|y^>Uia_dB%^07E}r}dxG5cspkjxCE#m_412u0_HhBd1?&ryC*zZCD`X{bs
zY`A?rqaZ45X&d8{in<+@ZrpVJGQlsURgLsXC1dm=!lV1w$zy9)w@mBY&y{x_a>tx4
zr6ib<mxyACzZ&e_jFf|NZhL=CPu%JQ2i<k2;YBxA8h8jAk+Lp<n}0z$l=@o(HuVNM
zNvfb|tAlT=i}1JNUU)JxJX$%r{(x1s@T(r=x#FQ2B{X{~a=K`x?e%8?ex|$sQZP@x
zc-zF!yCL%E$X9d|Pjb%va_2wRPUCaU4<9vLtef=i91<HaPn!+ISUQDmCKcnSl*JH#
zmWyZz0<U3uNqmz_?bKJ#nGg0O_O}b0zM#K3mpK|A6iKcD6I!i8%%gzQ@L}l}gi-No
zek@Omq+jf)k1H8S=Mvi6-L}}6TN}DoA)qdTDGY2JV7qDu$UZ&n$H|UOyCQ?Me(b*x
z9M(X&aJO~NMr!-(IL<woQ)BY8pIfJJABP!dpXx~gL}=zI-yO8S%R&0VAKJxNDRdTp
z>FcGT@4r_z=$y1X9_qGX#P6C&D?_n2+Zd+cLMJ`daRZ>}qeEjOQGHWp#hfni=~hkk
zeGChy6z4uZAu}ti=Zw8~VIy+Q<!w$<W1c6@4m*1xe>2v&tFYYV4iEFZ83dF%uA8a9
z<V&(QF;UG~?K4DicAF~(ZH;Z9-sEu?{M_uPN395xS47;DVFp2@5~@crxL%33;_P35
zW=mv*04MaJ9&AQ9pvP>B6wxJ?wAmA$rn1|^ECWQ5vLVX{>_Z9%^};}I>nzeG^nOyV
zf@r3_h*lb?DCXM0b+@YxPg~gxOxT*e1iscM3(%KV<KEI$uP`{yAVR4u6?`q_o(DeU
zx%wYb^fj@Rm1ZrqWaNVh22XmRFBr4VHhOKie8NQV3x6v^;(}ArZS=|J*@ug;<~B+!
zerWbu4E6#4q+wUcszEuUZ;lX-WPeDD@ST0D{i&!+{R{(+eiS&e1$%0p(V8gSCSz}a
zwRAqzn)f}QKjsz5Lt_z(KLwV{p0>Fc(fJ$H7qUn)V9gX3Pp)76V=c9`7ptDG5c!Z`
zt$6e;<-Nq#klao1!3Abpog#Z4yIj7*Q=2$d()G=`_<{k6;o*<BN2aX=AEL%LNYy%P
zO5woSl<yD&O1-s6+?VQ{rLfk!#4p)9{xo%7Nep|ffMI_Wi)*9j14-NK-Z5D81;7f8
z@t=E1JHFM{Ids6${VlkF^8;H2Ah+khH@5D-=9M0PZ@R_*q5a0EW9ChE%K>=HkIJN3
z3!`)XA3!HaqnXzuRdF&{cM)a`{@!`)x)}SPx);*7)ZYql(AZ>z{b%42+Lio4!ZoJz
z<6R9DVaEiv=vvHe>%^y&{wrG#9m6p@bkC{|brz*^*?o}g{H5_(>HPQONpDXG?fp6W
zk~E+90;;CJNMkBGjZMRj-S5p5_$c<LKehbBz@57hyqE5$uQRgxDn~zu-GNBTtIK6z
zY)w%tTSyc+?y!wPn0j7SM^(qPCH60-dNw1r?v#^CehNG?zq(vStRuUIiN1wy+2<p^
z<<!G4optFdhpJV6i5!)Jis9CJeJ#vkQmC2$_Bi+)ylVBF<io(=4gQ)OlBmsJFYp;8
z+l66RB9(K`n0vY&yzePiGaU=z&h9WlM@1{<P0D3Fo+>F-oaDEa`d;gODyHZDD_CQm
zH@2xGP*XeR2fkgVddv7E>EmF1iQ~?UJ<=7=+z;o5mgR-hG@p%)bFmq@G<;C*#Ci2C
zB<&?{Zl%yfuJjf$v<HpK;i_)sXbty+K$f=XWi2gxX<=ENp(r9fZP5b61GzK(Mk5Pt
z3?v$&(ZwDI6Y2XF3m9N85fDbEe~p5nZmPy0MbzzVPF=Hk?|lAa&Co^1G@m-ov`?55
z*-%%fjywp~RPBis*br}e-6R>SW=Cn${+*Z}B$#*drOSDBp{~4{7J(B7?z8DeLnQ!>
zQQ9I?{RC{%iq@+JnQah@*zY;_b0Bww?R7!@ae$fsp1cGWc@C!oV;#kgi2rF-w;Aj$
z9iB}g-K;I?D@G3D-Qp1=s(j*CM|ZNm57P7R{6*5`pVnW80+EC<=6)ldi#QpS4{2Wm
z1o|9FsS!tMW9C%I)p_Z!2;_^|wFav2G4~mT!Cs%hD)uK}>Qxg@-`_#e3W$QqiB_iv
z0k-gKfG%81HEUgs7RzSVGUy$$yq|9{>+{Pq^Dm&8G~)BfpVQ1XO^@%2p)%v(%fUTe
zh5~8(eGYZd9rxewaiJ1hU2kIa60$0N4{s5pfdbHB4<&qGbKC3_r?LgCT6b7aR!w`)
z7{Bt7Wy@rdf+4!i`imQ!?#5?PUV4rXYm#UB%_PQNqJE8s3CQ{_oI#YZmfsL3<yzub
zCFhTSj~-?pk{i224xPigrU%E`CcyWKz&P*42YRP^Mas)goL37{4mdi`s-{XV7Yj&a
zL->BS#S&W>{i`YWZm9xo@KzsRvZ-APjeF{5TNQ9_^&(>h8)zp}P($S=GfAi-f|x6_
zEyr;@^hEQ4m%1Z#AyX^UDlu&P*!p}HrpaBH3vM)J*g7re*UrvUSGmxGy8_>5Ki5FB
zD0s&F<@J2v4Chy>2<no+qm}4aY!TYs`adfV!B$JB{*gyus}U~v!Wm!+*L7H!)W>yw
z?eT{Gj(z8Sy5)1L)@GIk33wW614OWrS)rkcVCL1F&faWzGNh|5G&<P%n&~>PbMI&i
ztc3`HGuB4*8|S`m$BrE80aaUjnFBMBQK^Le2_g!i8E7NvBXCmajvM*1yKW}kWSyUu
zmhkrM*^fYiFZ4$b^7Ba-Ni$7IiJ$U6_MMQjhRqwhCLPHGfy=n3QMSpI50XC&D6^;8
z$y52=j+Ju}G0S`$Gb*Nsx(-%cE_Q2M*H?U>ch{heB`WC4&alQNg>toDNGeZt-kIRf
z&Nw3mJLoz3${KI))p5ytQNucVTEnC0`+F00#^)@;P@AX|ULoihB4E-mt)F{g>o*c5
zW^zp84^^_DUcy#(hje@J)w=0NC2N0Wu!2Nz9^BJ1XJX0P%ufz*ox1&C%(0{6TecT*
za|O~<+;$u;G0ewbgDCwGzdr#W!~wy})o2OW(K2QA_^Qs?l-$Y_=2yxI;z$O?i7Dkw
zhhI}3^KMBbe=;=SuuKjdPEwu2iOAH+i&66f`x-2mXARb>g{3ElUf{4;+<EJ_u<GgN
zZeZ51YOThjm}5CY-g-wK9i-Z7fF=oCex?6}_j0k~CDY4nYM5cswxhSd`%WYoCXr_4
z9F^+i!dQ}J%!@0&iA`F;u?~|YhzZnyHJe`VNl#oi#U6{2tEa5jQ$~vK#ZrJi?!_S|
zFC~qZi5Imlz})Gq-ly$jj?|gt5;oR%HM8`H0ma0IY}@PexayPyk9lwqoh@W$=lH08
z?vbk=ZR&yMm9t}>9W9PHF&_iQa;dKRWYJq(A#8o5bkx{s<m4|Tn}6_<PnsIxf+AmR
zN~L%ms{kUP#$6>41r-fD{h(p2noFQ(9r(9wbRYedz^V(JT^P~xZV8LGwr*bkz?9=x
zoCcG0Wl{E`-ZoV`-#rKmif5KX0+z%1%&}!<itM>`%th965iz#}2=H8J%x&&LR(b3&
z&w!DJYZ$p<!FFNdEwuOsyB_HsM+EG$Xs-B479Q7Zm6K)&c)9J&-ImD1Vco2D2(tV#
ztdWccd-M6$;lQ2W+62Q`)fKSl>bup{A-U*_J9E{J(Zp6h(-o}9A783R5yAbPSv!u}
zGR=R|dp_-y^9El1M0$nb%By2=6ZNnjN8OxIcdKc!#};V?^bsZU8T8#iQ4s{_O+QNB
zTQhPi*#x4}<gj<J^dSz1zBX4ZT8q=ha0A~a9z)>qQ$w+q=W#Wf1aN$rsOd8r{mjg9
z*#~VcVy}%y;sT9#!oy&e+WknRSNEdUyz2(isr3+gi+N9Z{S7fITNsJxTzl@F!LfEs
zm=U)0k|dGM)h7MAryZ=9$d}dm=2EQWklA!ZH7Mf!8f`FyHX@n9v{~KHtmc<cRCiNR
zw>OOjI<sO)@r{a-^1Sx0Oj%Ol4*xbOKGD7;cx`#Y$gkX;^r*uku9=>%?z({0n}5h|
z0S@YzurB~{$A{(Ja#t@V=t4#&%`Y$9-Y>_oxL~7TSOk<=SMJU@0~wnjXV+!O+SCHh
z%IlwSbHaR{LSX}*AJ#cBxl42*G<kGFy0rE^-gR=_8!_0G;6U=4Bt?_OLOZ0NAyfaN
z1B)Q!93=$#P;I_DR%LElFqXA<r=dRwcKus6dbcEYry1-9??-@erAmEOytqlko!!ya
zJ-m2;Xkl9Lw|hHAc+cql;8n#-M=pho?#+tQxMz4URllO<@S^`0O>{JGE&CAq_>s!c
zKQHt3T$VG_?nki~+H6uV`^q}?ZRf-Tqtu#SCAu9P=TIDrI=-APB7Y|%uAc=w#TVv=
zAZei+)0(l_1b(&4Y3!7ywceWXmx^iVnP^0*w&`98XSMD2Ci2JiU#Qq|4_WxAT4H)j
zhZp9s%0qt4<Y%gw(FDCl^wzrQtM-(u^h5LQm92wcobyCCB0aasKnr)(2nHq!-zhri
zWL%97UjAX^6dAp`a7S0qczncfM|crCXxncraBEADF1VmYHg$P=bH)Og)YW24m6GZE
zRy?zW<%mp0HMG*Z5#*vE3$~r_nsouji?!astQ%J|v&sFi5n)wjQHew5Z|lIiW#_E7
zYEtuM<6idi&7-NM%qpi`hHK@Jx;`V#hlLtGffY6LitOp*sXGkqAW~4O%)830Bda3d
z(pit9Fo)n<$wer_kK<*ee5#SE>+N4}+p>pj!j_AR*X}U7DM2bLFY#+JEw5G4-*4vF
z_L~Z%><i0z2p>~4TT8|be(~f1*j<jz?|-)fWkrM6y3Pk3`+)teKaFH_Ta`=(xP2W<
zQ?Up^@uBqFm~O<4(5Az!zSuVILV+cgIV4MR+&4~&25Sb>J!be2t5ispaL5G9DPH&{
zUSRGP5tV&)9q*K<KCF2C=0S##aw0>*W&Vw2*^QX2xz?szN$Kxh8p56A<s+r5O+N-?
za;++jk1WYI@*1dKm5wZ~TOIXKv|aTJsDqSzT{|@KD6ynDMvRcbhaajRS|lvNiVDk>
za{-jZ!!3@n1dI0{*=s49d^q}#t{3Hl^bUK({Xgfr=i0n_^VCCB+F~^_-ms=JLA;yR
zjd8^<e>HE&1!-I|IgAe^N+X6CgOK`IVaUk$EIjdD|33ko<6IM8fyT(oa#!<Tz$=E9
z+g$+(>PDv|{guKt{_vxg*(X7ETgOuGbi{ASK+ZZxN6f*UAoSfx8cq;CZEWE%-Yvkm
zZnjXbs%X2$fj*Dk#OIN$k2>zex*PLp8slD_5JmoK1%7wr4IThW+=hutxHdc86Kfjw
zT?Lg|r&NMWcSy0o$8>1teU-NdTcFOU@g!YH&K0ZM^g1?aA!NWzeWhO@k-Z+HCjPum
z8Gc@d%(9Neu7{&kc|_F8b@FW0OdQW)_6q$S+KU=ab$uI3pwNbSB(#Ih_x$YDAlt1j
zSwNCB|G5>cj&8p4(0*)dZkHp$TxVV88k`pWDyw85H0hcvv-rindKE`g53x4&{6p6A
z6@R*B#!r9qV=*%n!2AQ%UjQn$?>yv9uFO%$(#Y9UU;VFfh+oZlt1wp}3Q7bz4&1%m
z=wi2hmw9Wza={8RlH^e}sXjSUcA9>K{}lYYX1kK`bE5{&{`1j@pW8L5|7)mee|t9S
z<?dz*($44O{Jx{#J>|XpMzEBvwf=b%Q2`k(?;k#Wh<Q%VD*sf5g=_RC0_2Kaza76{
z#NU-cDf0SSbm2PT!nGJ7#M_p?*9GNC1<vN@(YAJPUf{hdKZFSgGjMx!8qUI7g<f^7
zV01IGJj!X@*%U#EbT9Y&!+!@RZ`N90CnmO9XN|ik-ou+{F#4BtX-KP$_oZF2L2-{p
z-D>3pQ>y4k(2?Lp*P5&9emioQN8Y8IxXm{8i0DUBlW(i~ntY(0ixh9(<~Ykh;NrKC
zD!Q-D3KrivTLT7%aJxUDkDkZYN-b~H))o&vyRkT@j;=6XTsFxGr!%F#c?_xteS230
zA)w=}_`bhXNmL%CG2C-8?@SYO{VUpG{Fab@0COjq{%7_kJQ6jf9unV~I}{>a-fv7M
z;FR}cxx`-9(KAkRyo)Xa0OO+~{)*zCD!1L|C@b-=V^7(VjDQhZPC3A|rte#AbR2$w
zKB!r}PHL{Dtx%OPNj@da3A4c?KZW7f^DSpYyU>`VB>v7GXBZdm@$l0SdEdb+i(xZM
zn1^c&A>?i5pUdv53iycnhd-j3(+ml)#!_7lAzcvX&2FIeeHzr+QiY?&J<g%7>pAB8
z)TlXwn}ttIJfyDx!^g3o(;P(NX0zw0O82*}I<olg(yIH@#gsaN1{K*_liBtBLF<cq
zs`JN?q*s-j<zsMX_FMiCeADXCkO(?Uysh{*5Ar>{G4}@i6kd#i#aH*kO-AJMi+dim
zYy6|geJCPu`wQI2`#FdyyYT4AnLvj^*X+uoFKgjE;zjzO2t}3X3+RKR)arm>A&)C{
zg^4sTf^D+p62i)Qf>{q7m$+`AwI~BPoDiaS)NRA=Z{1tOraAC5UP>wI>?G@k!QPG6
zGFBWzKtI&5xQGdHn>@xEs=YzN5e8VkXGZWgaSXJ9qKkUSX6$d0SbR+KZ;itjt>wo0
z27OO*C5WlZ9c?x2<eFCussqaGF*fHMqITAT)o|&Lh|jv@pLLsVbxcVPen!C5m#e$@
zabeLhT~D({i#Dj(rC0%><e$+F%$ik0ezhp(eX<;G$L~}ler&c(Wf{M=m=Ce;>>YWh
zSv?AN>}Aq4yBl*ciWlEFS4MRoJ)OZ^A5)Fi_tl1|B639_zuq_J%Fwj^9SfoZM=)po
z@+g$}iv>0BoKLH7F&L9_wdL79fH$qQ(O={wMF-(W(C<5|D7>zR$=!a3#NONS+1A8W
zg122Y#pG*Gwkpf|J{_Czdu<g}&0J+Th98&6L4uS9GL1MSVdl}m<@haj<z0V}kh(-#
z8+aOV@e`!|d{pATHdYKa0tuTZk!@pL^zDLAz;K!|`}@A-wI2a1xOi~E;(zi+et=oE
zuky1iFSGx1;|Lk|#z17yCAJktc%2_|#PG`r_6lCpq9TSews}6(`*B~sbU%V?&f||z
z53XIPg&2W54vg%G=yNUY?FpTQO$7VhU*+8Tml%({P_c5G>-UbtamWQf{lXn8e}3_N
z)T@GaTiwPE>>EbyTmSl7p?WB)2Y?KZtl(ew7x`U3Z1TiL%^zLg7(RPpaBuAKH*MT?
z|Jd6YG;0)|@OyM{@E~Db$ReG4Dn8<BFzvR~Ji4#(RpSYx!Y;9p{$oEzF(gY-!`YP3
zqg(a(hqthE?3K@+13w4y#tuW+U51C0IZ-OP-~216RAQH-?PfLpf@7@gck~yeb~Om8
zHgb$g?5s+<bkq+DC&F69nGZLSeAuy>*OfOkxlL3G?U<v@p3K-S)PQx?QP_kv&k|%|
zCh5D9uva&^FbkU;8w!_tV)Zec)S*8gK}L;zwLGW9XXiRXj3bFZa1XX2Em+LEgm4;t
zb1@P$gz_%Dg0-8ppIQrq`!0rpm|q-Y^Rc0S8CWi+wPH^JuPp>B?RUVClHzODXcp^0
z>mNt*wtZgq@AY3!lw!no%I1_FMq?{nK0;nmGMX}&&i>mDGmuSLqZ^(C9-nf?@+=21
z;pmOuO6-r2l?0deo;LbGWu_=#PkQA$AO_fFaX+-B*E?d)p#@G5LpSGTWuHs4aSuSb
zRX-9ETpJJ!E}i}=WobRw>UdZ^0MnYOoeiX7eniixNU$2<Nq?DhPXgj`zA2jw$W@>T
z+V`|NdS4U@L|5)f_}?smMNoGuHqURixXoEW3X!+j4@SzF>*3Y6vz>p5>Zr+Ijghb$
z?gy(2s%2QSQWm<^D~xmKH>Q=q4r<$PjVzDZ(3zipTE{lu1ZKO99EaBp-H%OQN~lhK
zR~7`yx!<4NGcSjb+)4&VeHEQMOB@y90+2^2+Y*Q+`T*z?HA;aq?M*{J&AdR_4lt<G
zq6R>XFy}Zw1M7lYGR?rw@gIB32L{<XZ2w{8b7LrmuItVK5~Q7K1%Ck00j>dSU<4ot
zZkvWztx~!{1#lsNT}XdS#myo=f(~r!NSTk|kVe^*>wmX{6gx;7fK+qU{X}8gySY0%
zEW<^dG5B|<a0-vGW-6_Jk#uYx{`P?@YWpHlUfL=iyBj1o7CBmLHGF-qxsvOK`4<`Y
zW4&}((BOr@8E<FAA@`dCl$Eq<8#Mp1-j+QcXKjQ;BCovAKZj)yJ=^$4V%xNgovo}C
z7PpUY;q~uYx5eTUpW|vbkiLUQN>xiY@CUbSw*6{20_KyKfx-R6ReQ!+ix#>pqsxMT
z4Pxtxo@+Izc3=2AEgvJYxpNXcg1PVYJ12Q>ex(}Vt!_1oql`AiixgJ%O*9N%zj=ao
zEod!)3A^eqzh@&>|E8=$&|0EcQc*}?h5-UjmX>!B?R*lk_%I3=1Y$nU1HG$f91A9S
zixf<k;?0JjZ}qgdUVdP&>fg9fRwB-YQMxQ84A_H7vC)qUi@?mdc*{Yw9Ue_O%THx)
z2l@oJc}%W<e>>Ofy9sAM?gJ+pLi!?Qf9VXQ1_V_tES2;LgOnn9k5+k=(3opKT9Zs5
z1*=~~mfF4*oo{o+zrbi{ST2`p#@~qAXT3SDSg=KBtl*@gjh=Gc)z-gjw_Rd?b0nlF
z*vn=0mkrjY;uApNZA)Oc70OFW*A6d`EdV7o{nRMJm3*%Ur81vj-<tE5&H&?p&nX4G
zD%;eTd$CMt8}@>x{9GROb18rs@_NEkZ*BJBCSHQnRLL|!u6Hk6?@?|=&QRM3Kj+Ni
z)GG$kZJFP<JGY4g^br<Kfjv$ygtn(0u+oe^THP{s1HUBw-u7BZDS<sV&vA$ApxjM)
zuRRV9-Jj3e=320|nL?m`+<BnjZXYg&Zn%|4p+DY2sGR=~b{AiJ#wHiPngU7=MD-|u
z!B-xv)eG~=Myd+CX53we&4tVY6HVVt0r>6Rw3iMz)YkmZnQKihP@c6@&<i>54=srx
zhwOj6UWWLtLp6sUU-rVK0RZd;Gl|#@MoMVBVCZ-dP`amUU#MU{U7$_==*;2QaiJm?
z9~wB_3hMIde-qgtweV5zT0+nA;Q6=QBDc`I!KoK2ObA-s&v;j#dmS5w9gKdnIjAb<
zt5FsTeor=av2~qd`<;b_A@Ca3goBIU<Ke{Za}!+jemoVAqknSbHkd#4n$Nd~Tb~NM
z%q>v=fRWXEG&pi1#gx5EutWS^tnPrh?+yR?U)9T=RpH<C45SLmgN)b3Olrw(SPPFr
z3b>4AK2dfDVR>yZ%$1(<)w8a~3=bBU(By-b=)UaD{wyy)-40N<7A$|sc4Dppy>#<s
z>@?Uz0dv4UfQ(xrns~9#F(m%yp!J)A?;vFIe-FsXz&-~`{C`Iqw$768%t7y?n0N{}
zp=b+syaIJub0QhNwcYG$qY`_3aeV&uh2+Q2o@yAqNNJA9GsoOoNEeYPq-uN+vy8Z5
zIN`ih(Ndf%=szOp(Bp9q_MFblu@0VgsWE-6@uK@lNz%JtGK&%m#Sw&BVMe(CrHJuk
zME&SazX+1(Bd#$1qZO>`LT()8QS8$^UV99TUWDSbu)KQ(U#d)%Af)`)>^6|1MgRIW
zccpSy^y8r5sAMo6)V8@ENw-S}2;-9MtKVcn*t^sJ-+2{6f#NX5r^zi`-X0_SOIfom
zgcELLT49aV9d9Z^gT>C<&Es&5$;uGiVWmVKuoHpU-XI{_>jEuZF#6Dk$iEaQ#Q{nI
z`SYe%;A_~Hg|NVA9viAAN}!|)J_~!V8h!KGePZ(OPq%VyT(5I8pOlbxa1&fHe`fpP
z%6!_si<~#KoR!1pwA7&9?$0j%^R{i@>z_4+mtCIh@z`uC$q)#+@orApAQoyCfArhZ
zEBzWj213SiT~PZO(?2qrNc>rA7md_ySo{Y}y^_HRMY+T-xzbM!!Jc1dx7DsLJ_E=^
z_ubwMyGK?2)%ep4UAtcOvwq*Y!43A9(0xupK!=^PyFC26IFxd3@D#mqo!WG5K}G=M
zoj6d3eF1z2czApSf1h+<adHR4Z$R1Y$QE1#w0itzQuK?!uH?<NIwhOVnIgZS7o6Ka
z{93rHH6C-Yoy~ebWR=D>+>ws!mL3`oRtQbWanT#P;)8)u*%LE-H?|_>85gdyKVc4w
zv|ud{-5g^AKaBG-O07ntAF$%TtW-x|ZIvfssk;A`coBh6n&aE{*P?Mtg(JG#u=agV
z&VVCy6#uQ=D({n5#@O`nxZTu^E0E#&-?*AttR2rh>?1u`DIaiPX)jv5NmQK6e&)d9
z*W##ox_WaxZu!=#_IhD!&@=YT+P`S|)x|$dImOKF@>yb0>_<TE^R9_omYes)J^wqe
zuYCJ2tEh!}XB~Cw!2bl+Rkk7OcX+Lz#9D9PR4W_=2L7(gReX3~O=;YweMfnrWKEy@
zow`CZeev{QNKJ3mmD2Q2@%z074Nl$-@hgepyRMW}^4zec{WMXJX!Mz_Vw7SbevI_b
zhl6kqnHrmMb~9M>0-ZXgzc$xs=>uJ0ey^88eB6iLK$#r;iW3E|e71=O1ID8HOxfwC
z3%95|OZIkL`CmR5KG&v(U4_s;n;TRKg~r6Dm0eX66pgi;FCbFJ0T_e#n9G?7jDs!2
z6@{kzNvX52r{TI0yMm`zmlE7w_CY58itDil&7t~M<|NXM6SWHshP<oS{nu$PvYH2F
zKfuHvRu%R#n`(1MZjYy_3<FQ^C6?qE>dYIoOSWJqUP6&qT;qbkN7Xn1*HC)E7QwJ@
z_2*-fTgtb=2(<RSYem(;B{S_CN*V}`fAptCkDVw{V`rf&8xCkZRy|?$HRRRJisvb*
zM~2h+`?D&4z^^;{+W8h=EEGK<tnYG`fLK08`SYk{q3G+sDWTEn6)`&hlDA{Y?O-pt
z@o^*22|{fxg=_vDA)=SqrM5~XM_uHa%;nv=s1Z0x=^#h8^`i&tvg>D~p)kGNpxto;
zoz{x30{9}YXz<?%n_WzTa8_IEfH7F!@oG27%4+<ndY|>{)#RR<m%cqXeY1#Pdv;~B
zD7TE?0zJ4d;vlw`vZwUh=YDfqE^Tk{U5(R;=g+?~&v_NYxBB?&o0o${NZy?XH*+Gb
z0(SP0Yjy5P_5~DjXz(9VK7am9+9(4c8p|=dD-lBN9GLw?gCDd%3UW?`K^IGA0K%_B
zM*o1i?8p6iYY?W=0lougE>7eAf_jQ5cwH=ZY5T`#xd)HBrITmv6K032Ql*r26dSEw
zy(fcIXSX-*->KU-3{zL^d=mT8t!47f-jj=tcYjY#y#0CEP4QJj(ii?TI4FGiqpwP%
z_0Luw<!j?_u1_N8&$Ua(#fP_$c@X#G=VSkzWydq$G85Tv*@>)4f5R;yKAs`$dF~;i
z<;_ko4!i&gT>H(+n+RXJ-vM$PzYrQoS;J}i^cCybOtp73Pi-{a*@mRYm)LWu8T61T
z{@sVrgOTJ2WUt$OW^gm)O+NYif1ZV2##MwLLBw(X%$`DB=MlZ#g1ru<ba8N<kr05t
zR1^ewEvf2}Nafo5Z*J+xr(@hJo+K3hl9rb4A00K7>Pae&ybjkr@=l<`>L6E=;g#l-
zzhAeW*RA=u>^Ir)u06E4#T5O^;}S<)ktn?9Xz8lozWoxa{kAU-c(P#v9BMm`m`P%X
z=7vx=r_CGiJn&;lukYcSQ0Hs^s8f>PP028_#k-eF{7|bDB$SXUI~`f~hRMHeVZiSq
z?|X-BzxsyhYCI5uyg7YlCCHPba^Gk7fJP-PD&!-)!50B?@UKC3Y$@pMBf-wE^!O<h
z6hX$$rDvJE*<lT+<+`N^0{59cW@NX|!Y=ht0W*cl=4>Gf0)|W~Qi;8wr}v0k&M=ot
zEkHf*e{-@v7FE5wxT^KjbDS~V^3deGsLP>x8_~AtjLX+<!V35Q&XpH6RJM(J@cU9E
zFIT(Dr4vQt9NGTaCPU*TuRflZqoj#uNGJrIzC{;eg@c!b&I6YmrHtdCtL^S3$&z9;
z@%^KtbL7>M>=5?Gfgd<Y*bK1m@QZ^}8f>U%%Qo@XAq6L6Di72L26!3d7N$W(yy0nq
z9S1hv2=v}<F@1KbiL6O=wHJIETH2_~&SOHMSft#WRy^BS!HnDL?O+0!PXq*1nq8Gj
zE1D*9cM@3oHg}EN+1{65?PQqUN^NI*9#WLqVB`gXp6*|W(64uavBsJJs<IC|igm=1
zl=KZN4pf)Ke?{eMQqCD(xPOb$Hkv{yn&n^};7WWk%Rjn0@X-FAVC~Qzp?w!c9%A=U
zW6TXVI3<--_hts~eY2D#^XsFv;>~FO?}F_o*lF-P3HyfLutoW&kQq1DwAT=#s?U-!
ze>ajgVmD+zzx;83D{M*DSnvn3<o!O~c6JhY2D&*Vyv`S&1_?bnQ+oj?ZySwRU4y(6
zf_LAxLpR6d1C2Xw3lsTT2q+8!h&w$Ew1b~sy|9S`?{(bXhOOZ~OPP6evOT*R-kxC?
zZk01*8)K5dnW^6jc}$dc2-7v=2K4j7poRObq7ZM5BztevmFXAA2wdFhH&L{HFvz;q
zsoyEfD}?*Yr`rjZ-P%S~KC^_y`@xh6C&HB-iA(Q&k1Jf)22CGby&ia%<2W-V;hgqC
zi?jRBOg2oqAKpirc>7#CYW1z1jPh*iV_*KQ^%%)aYOqq<EsdyE*&PA!p@zm<*wp>C
zWY5zqft{o`8J%%#K1^?C9E;=fi%UORE-<?IzQm=u#J&zp>^3;tsid=&w}cuZPIH-0
z3o{d0!W9{h+!NZ_?^qY0^Ya-@`GK2(euL+RH>ehaQ0~@$_X8AV^6#xc1itVc2R5(2
zn<}h-5uhtMo+>VwAa1>8jM6rzB6dgC1<mV0aUOyIpYR=|fWu^vR120}NJ1t2b+=7H
z9`KYs)ak51{GKfGF2i~l6M4xi(;^}BO%$a?PvF|HpV86}kGo3?EP>L5aE-hp%2wzZ
z>4xhsns5iSmVAGaxUaaTa~H55i&a%$?NV}NZqyxnB=&RLj4QoXi_UZECNPCuySW-V
z9XnkJjR)5<s9{jA3#3cVmsmJ3guR>m14oXkryLmHpUl}{vwLx;f&S?bxdX07FFV2W
z@KItM$S2<pCV|r6$P7pJ%m3!W>*_D`_DJqNoexcqvO@tG=?|EpulEM-@6>LAnQBy3
zK@d7s;x6=>!uEv5%ks-Njss_)PrJ|La@c)IsKvrm{Q5sNvQx6R)kB+e1-iqFAt9K4
z{}3PY;1%5b*&O&ohH0`%Ga+~y{w3aZ+!`?MUuxC&J#f~`@lfjjWA8nfnu@x%Vd)@E
zKm?`tDxe@8BGRP`iqfLeJEBsgM0)Si!62Z32q+*$O6XO3?^SvWH9(T{p6Go)^ZkQw
z-g%$d!;F~2$;r;%YhCMF*ItW>Pc^V=6VUb2@;Khixmib-AOanlVUZ5g)OboLXr^u(
zU!=Q2z|jJ`7H{}?Fk&Mv8lJ9-R=@G$`u)SOH%fbM!5UazD-A#cJpUgLe#_!-f_7Xt
zz{Tyt(*^n~0l*YzAZA03y`q+(dj_pABeW(`iuk&_5m-m79bqpih%H1FFAuyB=Ev@h
z2QKelV46<?{b7UqqLnn9^S{~hjxWjmwAvTwVboKFs5;yQ951!m3K!TIMURRPsajP@
zozu2{%Zh`wv1;{MEqi{}hKhLL@!sp_+1SinD>O<B)oB{uHyL7Z#=rWhJ^W+t-G?jU
zOZsHQ0-^(A_M?0?!tPJ`HAdoqnA8~uwAWO?MpMxNn?w>b!K1VdYC=vdxr}lG_c>kp
zgG1ws&d)sU1Q7wz9H4dN>eiTo_Ol?_%nPNPI7jo+!A@5_Sc;Jz`&PeOQwz=F<%j^1
zRK`O{IN3RyF1683ZGNnhPZEqC_>>io(E;nP;%r2M6}QF%B-HL|JAxi4NNnN(46)VA
z)ZI^-f~q9?h%F8gMPfyFBFKO-@~1=l;4wwfv|y(PDI5b`Kt9D1)SdjJ%oibmKvFH2
zM&2B(rvCw>$=l2WR^v~wR$Zo>VpC!&NAQaY+(~^7`>CHIS%>8j;_+~AQ<dG3IBn~G
z2Wm6T96ylu-AhSzC$%6-`>-=wR`yfG%t~kOm+YstQh}-`+bvghN$5(2?MS-s-hF5E
zBmBhaBN;?ZJ%XS;2<E$FU0}D5!6&rzp<?p%h|KJumZxQ@59eNj9;@HgkiQMWhgU=C
z6x7|&yToFg7`k5%E{t(@G)?F8a6UHQdP|r#m($kH_D=SUVeG2bsd3i_+T?N|C^jEv
zzK&Z{OXY^AsXL<I1DC-#MF6W_^7NJt&H?uVT_UNOS7nr;QJcR-4-w(fHLD;9%-4DR
zmG*o=1oRtR;rNy8fGM_mTi5ujb~iZL901tY&mP=`AHbEF<nqOoyk_X<A%(*2FW#mt
z*otvg@{(HD{jWvUJn@1wHy8t!4EGzMzY48d^?RoDd+UDZeerPh^DFJklyA>?_ojNy
z#r)-6M((u;nvvj@fJ2Fe_xnKwip*kyQ<*EW*QIVG9ICqia%!!jx3j9RteWC~mus{_
zr*}_+6v&0d2a)3+#-XTN%I<6A^T4=apJDl6;q}3;hgs~PRn?t>k0$)HmiT<qLI-=B
zR>pMV27G`x2d4sPS!$UM5sbcxz+;)!0P=G<&Xo3mpNh<z9~dbCOG?sIRia&|Ne>a5
z`io_Ge;sxK5!f1o)FKiR?4*z8A@6Pi4^q5cBF4GzA}&%lvX^(jzHrz>*9e3@zvxrD
z+ebH^o*|1(Uzf4+7e=Q=QYph<s}=sSY0$1n*Eg^*Y1Le_O&HMK*(~{H-Op@#JX&$u
z@omaRemG8+7I;+Co?#O2z$;IS*IZ6}<zS-Vy+qt#bPxOW@yo17Gun!TJ33P=&df#h
zX87u4_lcxSiJ#wV1bq&Hq4atLkf@#T7j%-D3xgX?`P8_|KwR(o;T>TeDPe0EzUaS+
zNd(9!#JsLVY&KS*U2$&G0B2jKV<RDg*sHSo=x0dVb~rt(bZ0eOlpkx>X58{zLn0Ry
z<qwSRBd#&9LfuRbK9I~US3CcMS+{F)hl{6yPpHgg*GL2=tZjk4LH2Cd(LA)&N=Lz`
zqw$_JQ6nE-?r(xEif_i6qwP-`_`lWp<bM_xAZHB6pDZtQ$k<9N+bUKO6gqs2kc{xq
z>A{Z?MMq)Vz#jFQIb-=@t9m?#LJ7}!xM3{xM2Zf<hH!_8eBpQyUH^BK7&94tA4YWl
z`DSF346gn{{)3?uU-w4yr1JaVzM-CCD~DLYz@mLuxxh_;bFF_~H1}A2r7efxZdpEQ
zcj<(?B}M@BxS%s8rNm%|)!cjj`e3b7hPDURcOQceD>f3J%{kvT+4(;gAGO+ol(FyU
zsNdJh+vwt}3=+w=OYROJ*J2#}gj99dUHabT2DSq#6@=u}*7q2ll(_U)<alX0nO_yL
zztH~+Ae-p!O@S4wnTZ}=?Oxy(_3l?P8-}zgH;8DaA=NvQj$Km(??-WcW(5m?W0SFO
zr%6kf%rDe03KFjmBR-krXa_1cu_Z5RKOW2LP__v6sEu0{z4OT6v6|j>nM8*gTo_Ws
zuX@<&9TJ^r9kHtC^Nd#GYj?cx^Sk}ru$h%_k1S*JZ|!lzc)+2Y%a8rQQ+TY`5q#|G
zV@^B!XoTZq*tKryB&>6s_$G8QSi_C8XejpIe3}IYLdpq~v3+UrSm!dWKof_%qesJt
za!4X$0%q)^trZN953so`PKW;>yF)+R4Sm4*h`ElTs4%jUfxblkCS}?;hv`c422I06
z<3Q81!sY|s8hdnb&V8Mn&y*GfpYF{P`HM#uo0Xde15Fw%OA*-YatDd)!MuNCD}kq6
zlMfCVyb3qzH`x+Zbv&M=*(>vv!@~JM>kWR}8k8q4_hZ89siZcco6v#~_89gkN%zMW
zVRl7G-7bdfKbw<|sgc|mx?>KEvO_%fl`yx&sFlWthksr2QvJ1W24Y&Dt<6s!0^?Td
zAvdSka#F7{MIz)By0BLx<1v3)Dyb;%-J}hC0<Nz(6?Uat!-%%`dHG+AuLJCl9Ln=r
zw3*}uurzISs3N-hLm)gOFjT&mb{9rwMChaXixR4dy>>eha-H+TZ4PL>oibk{B0tG<
z4Y<$B6VXNj@tR%Z?0=R4cmAqiT3q~jy6PyyV@x%mg8{1wbDsLLTo-64>vUve23ErJ
z`KkQUfc=~c93!8c1f)N=f<?bsEV~`2A2SdoLU4nnCk1ysc)^{N`Y+~h|9`&x#`=f$
zD28fDDF$e(^-*A0z2}TCQMsS$W#ZRYw*%BlCS?qnpPCh0e!U%Eb^i73W#lQ(;}sM9
z7zv!Mb418Yr03tJ``KrlHQJc#r#V)Wa-RzcN9m#Yu*GB{oMTVIEBlOfW{fLEi*8NO
z+HwD#8m@Cgx~r;RORm{xmSt3x*+C!OE9Du~00S1>DB!&wX=KVVED62m3>|9BcQDh+
zNdQ4BZs_UoUoWb9knh~+F#SL8*Uk2Kz%%suA329;%=nH~{?GIOoAX4-y-)i2(^nI~
zk6`~lAAuY6S-9cw;FHErdQRt~$0MioyINm6eiGi&#A<*8ZQISZGa@9pl@QTA>`ghl
zYqG{=T-Ql5sK9o+`$~KAFA{y5Lq1O#m0h{R$J7!?k(=Qi)T36uM&S?1mJlr(@fjOs
zu}1g;5k+Y<fHm0sPy=gY!XFZzYR#L7CHv2XoA9e#N?OB^xA}=Tf5Yp+eiR>YXw>Te
zq6;1JV9Vk)P6<r;A5T<OOEsPZNn~_=Kdg9f2sK)bv>K}aVHKJTC;D)a%W2FVwHCu8
z{tYdhGs-|;%lS;gRXF{{A6vZ7jfGwG-MQYD-4sF)a{j;fxzWd@W%Km>+5I9>L3h=1
zyZNVgTYCoZANm<22qmf>btK+=;(tSbD=N|~K{!Jy<u~pvAN}uJ{_n*8@ACP7XOpZh
zKW&g?I;kP3Y9y7ZT7L{p=y}bvRcw`980o-M^b9mSidS53Ay|33tXId3^AF7g(8gY0
zdA=G2eCF@1`K>nuZF!F>`^X*N+hz#mz`m}xTGhZBy?LZ%RD`c(kYX<Y!38(W1c`_f
z;Q%w6j~7?Fq1_9QHb*z|InzuGcsa_`3dC>!DLAqi9cSQ3m7Bo5M>-x!G=<2-n(gCE
z(75frZ{CWE@6Fy8l4xAv;UXdZmiRbV@N06u&CS$v0W=>)ICe`DzgAoRgnk*)sihW+
zD$7kW$$d!wG_qV<>s$cznk$U)=n`A9)w@Td#v0g%*p!C_YJBv~qmg&X658dn!KchV
z%LQkkcDA;WGkLv-Li)LtTdgFdcp5aPuSqDLK!eTp%%Go;ETT7M?mtidM*G;Hg!>+D
z0+t{z?jIZL(RNuc7nNNDWGwEwx54PMM`<5_ZF=;<+N4Jh=U+SDuevH|v8SdNG=e<B
zVYQL$J=r4CFHb&bh6}H4f={_w&+zj^wd+s+34M{gu}u>mS5WWI^JinA0Z*5E{{4b;
z)qVZqYRtY@cNZT1|9m|i*8YtH$o<TdLwg^3nx7o>P%9<TpB_&uMJt~=C;yJPwUkW4
zwq}y6vtn$NNLn14eRYE0LEWkFIyT}HKJ@WjJ{8zax@E*I66-9SdwmG#hj!32KU$$m
zc?b}Y-PhE4H#$6w$d3=S_-duA0oZ730OQj9D=HVp;7GkIA+iZw{>00YmV}|<FVfVT
zV!O#uj_BebLKt;}97pmUj!U7}I+}NIA&Y)!8~yb}nJ@gx1~Km(?7N}Mg-yoEzsb56
zqQM{B6T~NR!yfb>h@2}6j~3>&kVQI-8fs}_tD22Ner3g@L3EBTd8OYG@t1%TwYD<@
zajLS8tk}A=lEJ?Rbv}6fNrW#SCeAxwgpC<kq+QUBjNr`FNbwH;P#XC)_{?P5bc~6N
z_8qJ03g2&3UdyA*vj<M8Z?&Q@xl&EIup9|p`_yKP<@f$3%mC2Sa&x&9eWbTZhzEm@
z1a$X~VNZIbmj1Jp3g>63myH-(@MeGUTB>)!YDJ`$1NsU5<A~W;MIRr#a<_quArfi>
zZ@Y;ttWiOyp7@0%3MSB08x4GwqWy=g(*0;{QF+U>xD_&Zr6!*<LNI~M_U~W+i(|wu
zx%&^)+j$Cwd#9?t_4+MfE4E^S{{qC`dc(tK?L7DVizC0P?A83eEBJ<RlxT(CG6l@Y
zj1${?(fB|!xhvfCEAB!6!Mxv!5#nfrR}rfNmm1jX;KI?0vOWJ*Pe}CHZN+7kSN~ma
zR&CWmk!^|fskW8=`xyU5!}Mg0_?zfGrYnw?5_nIAdP%Pv&!&ebuqc-Q<{`Dqn9ePq
zE=zwdaqnl&O{%LZ7ApkSEszbRV?M0baO<B)aykSK4nF)3MW`CWeks1GHnpHjc?b#Q
zTZJWvCbDq=BO!!=#D|EA4t+G<&QP%1e>q`rcFH0lBf+8SpHapBK-YN1a+!<Vdgk&#
zBt!`N4OM~rhan$7HcKLJc|eyE_rKcdIVib5EhJ)Cm%j1Yvg)_y*5UWgwwhJP&3*Ti
zb)QpS{o41A#$WWSxyki&S^b@;`Pb`H^_K-t4bNQ0XG@B!4;nlPqajoyu*LgIUk@lf
zzj+R79Q2G8r84}W#2&ahyEuiLyotSArIMi(aGiM&bzie3`vATXNJ@i|c@Ykn<>2;G
zXii%LEp_Ru!sq%QtO}2*hm<WN2$f|b!;W2B$OKez9M}}R9AR&K{}JyU0YDuKM}r+r
zMHuE>t~Rp+QSQS!UElfa9}IotemC2bAF!D#;iT&-f}_z7sO?p;VaxEPq(_f%Br6Y?
zhG3v10^6ZN?B#8=9$~}KaZXYlhFFF_`I&>w{1TtyQvp>KmC=5KL@UzB_pCU+sDhaz
z9rwqo=}oxY%m6W3&mlR4yu^CXcU#dv`reCHi>{}9g8bPJH4E_dZ(WN43-%K!h3_O$
zS_qby$oL3*Z5TK{tLc*3GMK89)`}S>wl{ur&LF&3U|IYPjehpl%A8-VDx%5`&#RI2
z_#_?Q4PBN$?WHK<f*nQ0k}k2esbp}B@lroIR;Qu^G_iw&8gJOoGq00)D_?Z};VBC0
z`7msFG2u-lHO1y)+6~edWOI1_IpL(|?`;!oLw5AoNxX0*hbcBpE7HmkN2TJ}Juoqq
zN|3yy0u!1d7h_(9@i=t>-1mZS3jn<=<lqb;1b=KEDq(FSs2LbUgm8o*F-N@gwTQue
zXr%z|R~$2Fh?@}9?Wj}Q>WBk(A3UN%1fAq;V+x>o%UkpmK802tAN?8imPvegQ}p}Z
zUgLT%#uMeD>P^(1=&_O;kowxl?PP*U-1gb)iT>|I_SX*Cwh7eUs^><WykEJtHI2u)
zRew7%Sea*eB}c5M^$w43i{{Tl6-c0}P>i0Hb+F7hzGwYP*}=ZX6+sQF06KMwqg+G|
zJra(~J!~^<!u40;KNzttlCOOR8ABWev^hNVCt%0*U)G@q_@ejhA{pdXSlSN}EM$iW
zdYD}+-*+AyLDr7Zjt|A99;AsGT@Mhr#A_~?YIJo0yM285M|=&L<s(YKeHVx0(F##q
z*`IgBmNb!R`x^Y%4Gk}72V3T^w^dR$eW%sQ3ns${*c;%-&z|~P<ulL_IGSLOUNKd_
z#xwfBXzV@50`poDo9NC4DdVeIHwUr@?w@-0+!R@ulRi1i;EgXnxV&C(sTXD@rFd6$
zzD`9{`pq4e44qZKRJ>buzDsPuD@MFv7D|Q#x1R#9nK^R@;;6D@3=MAzZufi$yB?E_
ziPKI{kAaFju!a#Z$fWgOx%x`|_xGpRI5b$o)y4X6);yRUw?#;sW5QIf{Wq0Pl$8Eb
z2?@KnrV_jm-&WC;*CERA=@9WATqPHn-dZIb3xACypD2<D$B-JJL%sx^Lhmcfa@sxN
zSlZ&G?*iVKCQY)NSiuO$W22kGcU%`gHIcNFiQ00Uvo)!3VM)GE3@>|WrwI?A9It1d
zlm~zvQ<$NoqK!n@DAQl!aM4D2i33S)Yu-mUKU(||O?8_R7Sfhfc7!#1lb)_Xo1R-*
zX!EKk>&WP_@r-rGnv~tQ1j)pp8yfO1`Tr=z5A@eqv2HhM+*QHA-}oZzaCpo~?5b+P
zaanPEG~*N-hm18WK@XRe2o2`eT1*6#LclY8f=Lf?`$SZVbrnVo(U+(>X9tA7@%NCL
z_4DE;r*@h2L`e;a;D60YCYt~#Sv4Jg5pHG!jTJ~Z8b;jLuKDfO@tg|Aug9;lT!bpa
zWyGJ8wF3h5iKoYeR>5Eb5I#zmPd;BLg<_DQB^TvYe&2<~7r{LTE@#@R%Gs8;<0?qO
z5Z$J>K_y6i&K5wO8~W?`_O719o6lP3S8p3`K)0S7x7A2hug<j_M9P_z2S~jv8?C?w
zxJxu^EeS1m`zGkk4W>rk7Ljkrs7?!y3!po<6H}WoTE9JOR=DWCJd4-oF`r_<WHzt7
zV(i7K%WVAd8b~-TL(1`Gln%qZH14JxegHv;G5;`x$XU8t19;?aQ>S)HvU?Sm-#0f4
zWVC`A(;8ycdH5pe&e<wU!b!1|ibx6_(J5$bS`H1)b~m$imlk@p3aFg&@qk@Hr?Ya1
zE{e+`^Z+5tAaN?@rbkHLgHu}`KBb%G5CI_;8eigUFR}>LQ$7LiA<}EPr~-1M)S`4r
zX615(6|5Uf-Q32RGtdpdzh|t1369WiVIY(E&}SV+AS?f2we4K&%`8fkHM>Hqlk@5q
z`J3YvLS^OB)n`{n4`6(Q-^td+u8?HSGGPq#U$dSMrz@L6rF~w<n=l!v`xuG!_0FvH
zcOWAK_CF&-VDTznvQ_AOr72}L!$EqQLobjSN9HKQHGubAVCu!O3tMQFkK1G}WkGkW
zU|~b-0N2eiUAp5|Gl!o4I33$^mPBohT+R>|+|!miX*n3S1J?l~G{b{O{}R`D#AX6U
zvJd|K(uH`ND5F8$UD%<FfC=J+5RR1X@ar&l@}3jbr?mEL<kmK3)3C%db#C8{vxPxW
z^>Y8(1?CKx1xO9|Z=Wr^Ese$3t$Lp5`j&d{+es5X>yie~mja1ne=(k7EdLvUZhSKe
zquit<!eZK>RVbc$SFZeoczo)mdgAwI+xPLr3iSKG+=6S+g9{<T)d9`*|B<#N><Udm
zE4f|>4|?Ul%Q25Y+=P@v2-sq2^!_bcA)oA3^6w#9ROj$(*@uV#LQvHL)M$ifl9S#g
zuE3@DyMV6KpJ?i<BseQvP9MRCwZX;%H&O8bS)`lMzr?Sc&)gwGoR^(}pA9!-PtZ!2
zY-UtmP0hQSXLqi{-0+HU8ks4?J4gpxVXJan(u*0WH()-poRTtbvv7anOM>g5<xSy0
z9<vXWM=rIkvXmQf*Y%t6wx>Uv$wXDf42HSg#aHOdR6Zo!LcVq&Vzgdru6fPWUhjym
zDlC}~1wl%L75+t$U3a(IvHFg5P^~oiCk`z6@<AQwTSQ5lMR6h*{%h#Zl@yO#z*AjS
zUw=NTEQj1@Qxd>oc<V=nqhv*3KBh~58K0XLy-b!`UJePTv%tN0KXvi1EqL+x00&cS
z?R1Rk{K>ZpqwuR$X~)Q>d$1bvDrPlPG~T%eU}gqf@`-d_xK&R!6^_8!mPcBlV;q+i
zCHC}Q9PegZ+_eR;BxZy|+`ga?WJ@1SeSAMAak4!kSSF<h{Hx9U#Zge>csfDShjsFH
zPC1!%%hp~+exr!YXxW)H)8gw(zu+cY!mq?na`*b4ae#{Jih8f-!WfvEeC?;#cbZbd
zq|>PVT1!ZzU06VhML&h;>1y&UzH8F`{L_0i!g1sC?U&z+|I*a=6v<d=K#T%{I*|nI
zr{R#&VC)C%XEXM@;Pc00RAu8an=kBBX*k3y>I<jng;Oy)4iQ?|I4y&7XsN1$FXv?@
zcz9YFhsy>(A3|~jW~*>$MGJ>ks+sM1__6!_!JwiBe!yg=9@-awV%=BvycX?hn;K~w
z9}fZ&I>tg|1lqMc49w}Jb7=hmwO~CLMmQsmgEX_j=;{kN*?M=!88S%$dgE<qPh{<%
zVRZDcnQ7{4RT46Fubn=T*|<)5xW&Wn)ccpMB<eS}4X%|+GaFp7RG<`;WtJ~bB%%rv
zo4kASX=Du&q)O+i?)7aPbzi-MiH09d;zw9Z<bL;uG-grFffkcs(gp+L7sN0Gmm@KA
z?ZM_Qv0o;&v0utXYy86?4|sn8*X0w;1<x1mlOHU<GsJps=*p%<Xfw;CKh5%g`cD@C
zWYJxR>7)N6a&fx^jm9nANJu>6br>lZPFV!z^l&dTNYN}4yXT}Bp~*Jha}}ZJ!a?ys
z4*RNAi`uoYWmgX2d0V7<f$`NJq!ArSVE@FZ!?D`WpW8DsGaWxq-Swd9vH_6?=QHh3
zP3~7i8M&qh)2t$lD-=ZKpVHQfRi#Dsc~kLRp-pN1A`^H+G49GzaOW=yv4DQSk~2pg
z0{UDz?{I9O_j?Kuf$61WYyNtOeK4gTXTTMbEQI00Xg!L@aDWT302Dri_zp27fM0Fz
zW^)X&UN=C&ngHl*n;^r&<=f`sMA%cW+;h>B?&JqG*FuF#NXViRP8WsyoJi<1dQktR
ziR8m2Bj1pN-4lOxUU$LC#1OSYEL8VeDQj>7v4}T0e_<K~%hw6bj_B@rZqrklV>_@e
zaVq`-&MLWOK=;IWm~g%@rQZi$U*ixJ+!}+I7QIqK^FcLqV}+h$`a`JY!-D7p!CTg^
zK3(x9X~!Rzdv6r?Mrg(-MW4=Uts#lvIKP8B|8F$R_9t+an#Wm{9QSRPis0~OjS>+V
zS>Ru-2S3;w=T9Cwt_e?H$?TupV<!ERjm}?@+p^vu^`1UImKd3X1Cy+;@Na!h)6%h&
z_T$IyM&o~rf8x~*qHRzDHv2(ihaE`5m*@tiVTTA%g#9uMbvx{aC*!OU=w%})9+FQj
z#D?gzRThWSftgFZ&JbJ*7cL?K_D@8YSwS1wK-53VQNnf8UB1Bns?-Zlk4Gm(Z#Vp`
zzN&n+1JZnsSjOdZAfIw*2hjmc*k4=1k-1V#i-Ap6d0TYs^Fxl2{_H$q>g*EwR}$ui
z+n>Fr2rEPeB;!xDAV$<864{xC;44aK5{bWIU6A^2Vp+y~A_zo@9_v5BNfcD0KsSFQ
z={ecd0?re31NpJsH&$W4Zfcq>y7t9tZ@lW>91X-5qy;wzB<rCDnJ!EH*oGQt52$H_
zaT3B0*WxJ-A%ZdjppjsB``Ho9{=3LX-~ES}3?_#T5oYqg);<86b~q8yUj^kdwE*q<
z%K)i%=zE$_<^y#k11(_!a{gk$^|x2wJLgK5LH5TI5qG1{`L)jaeczc29<ca2-%<kz
ziRj95i8nUjy@JGr)PgyIuq5|YjU_EY4sLmA`Tl_C%<_-+!f6zTf2($89bMgT_MgAQ
zBcUj^4mvv;9D+hT)X>1{n?1xPQsu)QEYQ*z-5f>)P@8}l=RMIi)v6jRSS<&A`N;0j
z_p-z(O%)juoQ)T_%&c#Uk`Dq61_8sUU@R?&vOo{egQfDp3E#jua1rFkl3(8c?|%3z
zduj(Ou8IEqv|Prj0k$$`baNGG&m0K~9JbW9*xu|C!l@^h%dAMdsNG|i%Q%!bZSiq!
z6Hz0;TXaOZY^l=`U%+07Qf<jv=83y9?Hlb(SDMcv$5D5$Cm<Wr>>sGfiAI@wP(_+I
zzyee58f;vDpdMXP&%;RShLUOyXBqIGy|UIf(liEqRrZv!k>QJh&l|UV&67kFH&slK
z0{4S9^w8=bNgHwO5KbZ6CmFm$Jxy7TC_hnA;JBpQdUPt4O@mTsW?FJ*PZRzdo(^RA
zy74aE*3v(Rw}oDUDvki+^MylD7FQ?#-snHJu!|&~j2%>K;379rs^LRDniPo`)X$+-
zIxj>8X=xZU;FKDK4q(?-UN$q0gA|^^Wl`{Mrjdv%l(?5bkwY(mM#z~eny0%Ue)3JA
z%$*xHkeqJWx+QhIH3swi(Jv10ZTBcI+4x!Bw}*W`J9@ntb2Vh5O8Fu&0k2o`H3lUy
z3uLa{v5G7bmY$r$e}vxE5v+@mkwx7P+1{YIJ7(|8u7aY*cmH}-mIjl66t4&ex;Ufp
zHL&p_T`aNJx)*{ea8LqND}di}D5#U8R1g4KO9*i!#eY<=b@8mO2IyV|2NW1-3Sc|l
zKZpgFz!#KMpBhf<_ZTe`P1L?HXQGcbM?h*U2KT8iFd>o;+WvJ+{N!4MQ-g6Z(Zh^!
z7pO#U5}aHTtXTU$o_|q8`iaso`<X5AtTzuskEM34<iudRNK<|XzY-zm+c<!-Q>o|$
zomkx1m9#U}*7pzW>W6RK6yzFM3JtF2Va%_WZ>~T5U^vxXHSHt1SB9L1t)m)?_)4~0
zC9q6U3{x%M<nIrjY!4NC*5{q!VHx_fZKD`Ot3=G}Oj2Fu=3ig<)a}FOcVs+9h!`ew
z9vlBavQ7QAKb^|~QVSF;J<Z>Rl>9jVQgzssz$SeGzr5IPnhB|z9psQ);$pM!1Y8*a
zEiTv%k*9WNP@jevGoRbr6~FH)&0M#@R$E}}8CL4J%>vPNz_0C+T0>i=>h6xGRD8<K
zq}~zSA<M%(@S?LhTUTKdC$5QS<XVo}*v2H}0_DX7Dh2^tVv9ba+NB<XZ<HCF3t|5f
zFCRJiy0AIWx=Jig*cf-LXNiqFF8eodu^kSY_5O|Agfv@t(AX;sa}93}yX%mbpww?_
zp&aq|WnAoXTD`L`c`D^3_LOvXdI@;iTiixxx@gsKV`FH|ByYBOgEf2E;=bnKquWwR
z`FO+giSoB@L(FPk*|G^8(bwtv(mk9%?tB;4Dw}^E=2s@WOR;~l>X+n<$fHuW4@`ZI
zgdM$uRH-p|l-+2TaDe(@y?qWFNp`w@_A7MF>n7uW<T<yQI6ecEf_xpE#)eRMAM_78
zVJPSYa-sVoRRY^WM831vTY4Z<BJUntBJXk1bYmO_Jf4`&nkt(STzOKR97=t5@*3>}
z)<U~cuQ>5ebY`K$`B%hBI0XMqFhJs3Gu1DD?55rq*DpKw?qvV6@hPy6aDU%$(Gpd)
z3ASxgN1#=IgB}eSUIflN*$A>{U9)9_bf2(U3&q@`uMwOFD!|e_Bdl33qZXdp6_>~~
zKViHxyH~UNsBU>wJPZ3o&L{9>Zy`>_aA{#7&yr4xR$zWCa|tp6@W5o|!8$)4J{wi0
zyQZDkT8;}?#R&vJt(+bcP@jKM=i~f+dw+Qie>|)5^U21@jQwsy4j?C5+g2)jBEbgx
zS;6}hj@M=y1Ei_|_i}kKBA83WUe@a!i-YbAQ<pu=xycs@keiJxZgrlvq@GEQlkEwO
zWr})K&&MFB-B5=Hj)SOWP@f#5mk!3uYsPdtQFEXG?iG`3v@y-$es=W2^soa=;Q+CV
z(3Ku1F0ILpTdDq>gYdkoIJ6#>AJ4&h^clGz36KLhOo;<^zhP8KFQt=sHj-Ai3WDl8
z4{hyN5%b{KfP#?rY;PKx2rLS0LN;Mjkfr1<Y!avfgJP*I=?;PCtOj=oMR4I34nnUq
zgabm@8*6-TV?n+OA&3<Qf!Mmw<z<;a3@@&^-WaWi0J^akkV?dJ<evjaMp#yqX@FNK
zNk5<NxMP3CapbI!6y=$Or-sf*5R#(hxXNorF^7Tn`k_IBzins|K~a1};7HW|?>q)M
z-iT(PTS;T5CrUt;B<XaPfaz4XnvZY6wG)`2c3$A3)+s4}b-A{(;MQMzI<TV4e<3l&
zl4`MLxpUMT<UIPz@iI&97MyO`*AMG;G2A0Ju}!BdZadHP!oRW2vkJ=-v+!Aqp>C&)
zZyJ4m<lJJDIk{&^y~^!Oqe~$NcFgf}c64os@!RrQID9Lbg=p%RIppu$QiG#|OMZ|^
zZ8ykZF__ECh?DbM3w+yr{t+*=NqX%l0K<J)lL!jKM%I3MJ|_BY!MzvXSm(6O?`#Hw
zJ@d*par#L{=Y-(;u2k7~iJ&-%TN=F^?ZP$#gPOi-BW05H5SBDK`A+}DwC~-?W>kjf
zIwsD{m1W_Zl*<aGAFHm(J|{+@`vm((IxL)MX_<7kZDtuQMUiRZbG&x~>WZV4sVW!>
z6rC-lrn{=nTjtwZG7o{lA1m*xKUSd~icQM=C$IGgEFSvj8#Jy+qHN78oBRY8fHzLZ
z^;;jrol;%>T4jUcG*k>-8v6R>cQi~vk#?MpcYA;UY<?G6fv!8Qq4WJF%Hl`J@Ioj1
zHx&xw8gMbaHNS}})-f9ijb^oH00w|*MFjfUH_9~gTj!S+B@1Ldf5_cpP5{2{g=r>}
zcNe|;(CyCNiA&FOF7R}b7Pi(Z{}(dq?rHWG;tY)b(d(uUpFVwfsdb?T3Q-5Xds_qd
zqX#DvF`__05DJdg`%dCTD7;+%$j+iVIYkl+YJ>ldV%!l9obmj}AZYzlBZk`MqvW*l
zE!u+pVeezKPYO}3KD4livKcj%PUlyH<~`nm+_Z{8T7l8hMM*r<cW<>ZBxR+|%Dweu
zzeyVewy$Ru#(%61BT?ckYwjj^Cs%c<a_n>xs*%J<dOH$BBUMpyHs6|L{JeFZPTG9G
zW}nRtDt{>U#(NvNUwiSj(qQ1*etD1++J>#!mN#>^DhjYCUmK{P^G6%XE$SgE=)<U6
z8MRm;fF6l%=13G%0eXC;Vpq-_NbGRk8|_vrt*+8(+#_BvTid4zQn>8O^Sv3ntnPM;
z3HdPKXgSHyk2MQ>@RK)RHD^!fV84t^%4K?4p)AO8`2<#tJ^tvc_G26@t<_vFbGmG(
zXKAl<+R+kn@7LKq5;K?COk~TEq}##OSVIxNj;Mi|l|}<<Mh^dT62B+Snobazec^4w
zi=G;;(!2BZ(f2;GbDyr5O!EJXT)uy2q(&0E+Ue99w`Zr5{UbBV&+xo11Qz@IUObl1
z>Br5rg?nE<5O2>H*HN2LVs5M;E@qETmq+wI8?wk)uM3B*k=s>ZIUJ*Z0*Yta(c}q)
zlcqBYNB^w_;BBsbWI~InkgtC2)@0d^VC){+sy<zLZOK}eFqz+bCi(V|z+-s8-=(!v
z@B7cHxt@N7EvY-lGdJP;3kwUG(Q$X4ZXd1A(GjxlLoP^Cp4_@uZepzcQea%KW^!ZQ
z4cX=HdlDo0T}W4UY;9S*PvPR&K?-X+v``lVRBcb7yq>wX04)%2UR2m<_Ia)WmH}hU
z9g3y_A^>h!V)6q#f>(w;H^Hnr6o<GnCO(_RW0ca<XCpozfY_@WdsR0PbM65$pAejG
z6c?*1<JPfLu(*{V$kTw}dy8nA#P#g#FPX3k3t9aD5XslKV+sE0iW`lwwi}!(Ee~K^
znP<-2u3<e2lG_P--nF@LR&xrEebNh%2<V)O$G{zjJZ7DmqjssT9B!VYxc3&n73;l(
zP2Pqy_X%^Xr+@eBxv(6zJ+q>#Tdo}OeLek3{slF>?a$Z}YQuZ!4(#~nNeiDQHLCRv
z(*Dt#$;CXm$%M<D_3ZuHLqR9uTcP76jo#Z^NqQ9pU*w&@c4h5)TBdYNX_Dx+PQR?n
zQbd0#<kIycc2x>tlL~iBRCqUGUNsy4*eP>h*WOZU>bjUEhI;N@@!Xr{5Xs$7>H#TF
zm}G6DoliH-olw(se)Fj;utWuqGli<2w4o~WSLNNcC?G)ZMb%_M<N4b<lxXKmOi9(4
zh0o*$<;2mc==0XOb3{kCDWhNAz<x}h+V&(yYS!+xO@HOHvU(>>iuw4*rgc+4gZqDW
z(#xiL2eeyfLnkZMS;;CbS&K`55NA|Qb5$?cdz!yWR*3G?!Vuq%(($Ep9?{!<Nsz*{
zS~f(|9^)DUr)k`vhP4$0?^idYD)%xnU2Pm)5iwF6*n;KJR>uKZh86kH7*}#9((zy2
z{qRZyY5IOC!B0cS_5)Ko3>J2AbFa(#-ksC?hI-}3%)Q|<bu8AT;zIxeQVTCVp?)Q>
z^0XQ=XSDQ;``Mgx$Wrkq7MoTwBpWgs=DH}+TtO|@VuNopfW<fuz?sA8Mt)8A!GJoQ
z+CNWxm)}O-hB!TD`gv+nHD#-4on80#XR)4K>s}4|syco05ZEV;$j<V<?9YV7+OIWx
z#D3b-uLq2V9nQ?Wb)pC827RwS<@iWF@0Dln*HQZsJM0=;ZsSzyv)i7!6G^96RYa{|
zCH~O|4?e~cL-~sBM@&HGV(k;3Eo^twoHsW1#%(h~*_$yJ+035I$A@%!Kh*bYW}e)V
znf18nnAq`m8mwR1Ir7`dPC!IUc=6e}C394rtSdS?I{k_mh<oj`IzF>2^6e<1JIVP#
zuz1qra*x1^Zw4*%+Npu1y83PP0+n)b4*NsMc?`if^?{G?WBONZ6%Bx%ih=28VPJ>N
z56*~vhMoRik!ljx+V)>y;iMDK$^NQIKdDRwzhBwzgJnB1zMN@EK37geSq^T`_)h2r
z**y7KLA}%+ThjDrPc2K)y)(ONM2h;m$lR~Vdj;^ITNR>gM~>U0zx!fKJbG1qVbwE+
z)QZo8j9EhI#E@7;jDT;)FD8?W+bzUejh*WI^-PwEYukL3u5|<R<MezduP|DPkT|^5
z-qOn45qTD@s<e)4D~o4kod1c|>7=>mrH>6%1b$P|izaJbUo-s`W<jKK{h)hQNvLEM
zUNX1#+GpvFyo+?Su9PMA%-p9$Aw-YjHQoHL85c_?Uni1G%ru1@D^o1g_u^)l*KaJe
z3YqER@Bzf`{*`Y@{QQ}{&fx@&&dL*vVR{P6x=YKbsDtxuh~IWyRYwQYRDOdp?|kH|
zJtD+4y}XHqCdrGoPBY2XlejdoA?(<juOm~8PP2|G*fr$QMLP9#xHr-8djYD9ad_td
znp!fd_@S8TO670B%=TE7Q@=a(Eh-Mb3d|!Dsb}C04RC}54ll1hFgxU%5=capisl1%
zIj*q`BVMRpqifSD?=gqJ8`p{`vP*sQjX@=1p~3HK5;_^(XT=H9cjOc`rYgu~cP_rP
z1T>|9;JFY+xiKF5*09AjmTHRadQ!~;U90w<Kz?N1iqIG?5uMzvf;*9di;O<8eTB1p
zCHxt=vp<;opGXKt|Cy5^LPnHI7wO&aGNlNI(;|E>jrhR$U!6CpdI?78OmzE>xkc^u
zx`*Hik=2xJm3TXY&k6~3Dn0{4i%5i+$E2e3F#Gik$m|t*J;@^@#%N|fJihSv(KmEa
zc3}?}3Y%*W#2ZSa$0*+l&-6$YR8G?uz+dRi!Vs@o=l#*#E+i{@ooYoPDD7`&?P_Tj
z1Q(b1(%AR(PrjQsVsw1$w+zRNMHL&!*hhYF?0R0peo89ZoPmMFB-qo%j{JwF&CviF
zk|}5TMaM^2vN0RA0-xFzw{`nD>2*|@eG#R+yBO8qYV&>11GqOac@y=GcVd0JIW6wF
zA)D0cF0jq@gUt4uPUl*QEt}t{h4<RcOlp*h_Sv3-(?Qn@$z6lkp<v4AQd3(@rTb#6
zbr`BjSljw9&go;e`ua1D8wFtbwZ<UgsTI!!BB#u^`%`mk1DURdV4uA~L7|xuLskz)
zu!%+opU&lEYxSH9A9i(pqkDWZKU~LeR=zF9=h8Co89ac%AWZKQ?X#vn0TLFc*A_l~
zGm4RSSX*T?+<q;Xn7Z1Je9``aSTsM_iXCX8UAFX`+jPXBMXAaYw#yvFKf;=^=<NL$
zmP?L>Bu@?w`4-+pDY%XFNxF_Z&5&k}NXK<gnA;Yxxl1dZUz}t4ps+mGhv*BoWkMB?
zGZ=f!c*+eqKng+hEwf=@0yr>TL}a?g*KI{t)ZavcJ-;{r1)z<tY9@}la#OUyX$0!k
zy&d6M3j9okB2O+ZThP8?LLG>e#9rqp1&?ao9CeqyU%T+sCo8X6cJw6r{GFfFv%xjV
zC7(3BKwJ(RBa2@8n$Vv#{75)R4`Zt;VDl$*ww*qOFOV?F6ifox3F-rvj1tqcJ*vHg
zx_wFPCAt}MM(LBUHOwsa6PXdzm`@$soy1Z5j7}2<D*%?S$!+8wl?X}tDntyRKOT<+
zp&KfiExlkP{wT`=a;nOUVy5R972Yol+QG{_M{JNXw6LVFJBKZ+N6iR+CsfR})I6ZC
zq&S9cA5P<Op(1n$fe2____OT$4xvL%DeP~(1uy+@`>9xJP_A#l?KHWGkIgo6&};Ly
zLb|-@3C)6+1Pjmj$+0kpo}klXWiPP$PtA;;f3P7+cFG<CBrCYDvowa{EfNjyYoX4L
zm8oYY{9zI{4`teJ`t%^1P812Jp^nA3eSQ0FCrum!)oM9X_L)mCZ)8h9SzvPlpl1ti
z4cUIHWzHKluc|0ld&CV{e>nDc*eD;*`6K*%E4TY)dqotMteAeRd1Y2kxSXQQ&!&kc
zcVuCE%rgfoY}FBqnVJ1{qz5L>C7Pzwi!WNUzgV=^?G0Cubhwn$hf-E#_5+#DK*+$0
zpqIvMmk~aDKN!9!+RNoonD1U3^;c-cVuUuV6c+R^7Imbi$N-Gt<(6w)dGe1JDcevN
zl)mfbXb|-jqwmA?eM&nwla-5S=N_wNQh#pC%4m1qJ_M-F%aC-$!N7gOji<*X={#T_
z^V1Oi1255CR~!uNd=IiX)OXmypqYRX#Ctex(Lb@#ADEX4$h^Y^)RYFIIRn888uFo}
z*YTKMXb568wDVD~*@+}7S5dDYWc(GAfLwML5Lgd(>fq+bYHdf-D&c^m3Q0MFPQ44r
z3C|DqV!ME5J<CXuQ++&5HyP31$D_SIy~?E$QC9f%u-uNh<f%^BhbTUJvFF=Nb@FUI
zN&SqMs4slnj|OfDGw?e-V9X*iRhhoC6?E;%R+OZ?j)Ra>7Uu@vj~Dx>eU@-yEmk0;
z6Mp<7!{j^C`sXLAIg*zGSH6WMEqS1a8Jv&iJWs%4#=1XVOumuu2%_8xE6B2fG#AJi
zvmip_-Y)!{@L`gj6<$Q;jX&#cL_%QYw>@X(*89J9?l($3S2&bbES6y{=-st~05jgF
z4Ro<39qab4RO}@%MM>e9PJ6pc)(fqfbz>4!hAif)(|k?E!4ESoN0j!#m;-0e9Mhzj
zj*cu=zl-HJ-|5{lSaq9Q^FR8b3?Ljk-QCnOJI)Zmn=S4Lhtw)cg74hoo1=l-qPN^&
zFvmreGPt={BW7`x&MCb)=tsb=YTe$>(Ul;fHc0)`FTY-LO)*fNhxnbYL)yQTPsV#9
z*#N?{Nqw)@66_9Q=Pp)e1fJz{LzfesUlQxx7#$PN43w|v9mKo~u3cCPo21rL=<aa(
z{;{<YHPE?a)nxpmKaGLhxNYt8ezsSZA4U{3xKXLdqFL;jmf514OBS8|-qy%KrBCUv
z{>}x4Bhy!_8a_)AMIK`}ZS#IRb&BpeA}%gfPgSG4(FBvf+hQWwFvHlYZR*BdH<KR%
z$X<08`vu5(S#Tt*Ml3ZMFKQpSm-W3%C(h}&POkqlr=$brO$A!YA=d5J7wSRUy}o>g
z`?U*F-x9EmKC|%MPFuK*oFB%~i)4Fx$M{R0W3lU#RTPF;WaYSHV8bQ2&n$1keB#ym
zV(sKH^>c-!35a|4&)sd{NIf$+iR4*3lC5*ojTuO^)O&8Zg7U$h1)QEhuvFVO*Grar
zI|9_<;^V#8PCuaYlrL)o{0Z-b$-jy}US?o*8e__|K%8DKOz)BSQ@3CDpS<FE<Sd==
z%3JQ>+X$Llz0@Af%QO?$FF!Uu^^U2^9p%kY=X;cSnw%H+ohA(?qqu~`Alu}t=3W7q
z9R{Fgu+eMs)BM}Jy5_5)!?hK*V8MSmKXf+YobqyB6ZW(0Io;02$wajU=3?rb@sEg<
zkq*QotlMi2a_?zwrtg}3SuGp8zM;Nwr$8p)P88p(R`+GN1Y(Zi^amyum8=7DbC<Kt
zBvTK$)EK3Dew?0cihnoQziw)o7vr?hO7)}UY`XUpa^c3L_@dtYbw~Pmts{dIdTuNQ
z51=x8#WUknZT@4*#XO9OpaVr$J&XUWUhhyWQd&`}CJ_i-B5anK<VWi{jhgyoIy=Lm
ztX8Hl4{9eu#TH@_2qV~Pd3%4pp&&uZ7IEQlMf3aNh2Psoqu4;024d=Bs_7LznudWM
zBbTiL8*WQHU~3wYpvB(vU;O<_08J86PX<I_ae3qTjQ?hi?HrqfQJ$!UO7QIKzX7V*
zfMh^#!TjGD;VC#pmYT30Qm;!Tjw?xYL&EFB1ia=>ZzSnGzN}giP5X9uKn|5ZjQ!9G
z$58)=g8q*T4pVRet&C~4eJ%)H(&AuvJf2=4b^b@~#ngwG$ZY?i9=Rvoqp5IDYrX0Q
zGDfmnH1(W1(sl$v*^)l2A<na(ko_8$blLTIlo<ZrU6$w3%P}qAZJDUT`Lu>=n1Q#x
zE_ZK4(QUswDSbybp4b7GwkOZ58M`5Qb|P~ssB4lLMu)IzxQG;WkyRwvim1eoMa(r`
zK4o(XeCF}F*<&odz^4yH_d9$`e#ctSgWBKO_j*6V&}61!wl232WPCLZSsiDaFOGDi
zW=_->&XQ(cHtJNZ-N>9VH?{~d?6$cDfyueG)BENz`W#f$Blp~7Z|RoQ(epJZoHto9
zDO%&N*-5@!CIoW>p&mnUED2xSoW1yu&~#Btapr@HTe=s^n$G0wuN8GBcdDZm-n8mi
zRC^6^?gOI))E6e`+lNGpZsPv_ZwVE-dI7xZR{zWC5Co9ts=~Fi=U3xh)-LrUJ8a-M
z*2L3!=1r>J<P|6Eiu}39$NGJ|**?iRZ(F9SH9{zG`d*xfsm$x$Er{hW3SGJ16CS86
zM}U5itwGUeP;b|I5kVqJLEI6J;jKfuGDtgJsW6A36r9j4Xt6G^_3#!(+G0NdvuoiS
zIl4LEBeld`DIn>wLg{w#oUO7o1nEP$;izzVjOTTV|E8ZQd3(1e8?NuU{s$;uN;@-8
zh4!&dZq$~*zKq$oY{p@h9~eWS)fQlQW(J%i&Kq>nDnm*FDgC$iYJ!%u%5(vRcV{i}
zO)LjqSOdh*gzXaN%$;&NNnMfs8V}SJt+ZEnXtr(VJfyoz7Vh>wUzvFB8+i7n%!in-
zH-^|;{^;QPey3iiyCLsHMQ=6YMc7Vb^?>LRoII2e4u4BY(bk25wyJgedS~*^xW~<*
zD@wtX0N!*RA^h`4C%t9yE*<HFQcna{8t;4Y3Y?GmlvRv<o`zU2?I+9W!o>K@3nnOH
zr6*mI65s4l{FjoHFAQ@aFtv@3XOFgZd&n(S-9F|pv3R{sroy6iJ>R%m;k&>c_<cqy
z=Rs%+WL4dw;bKWb=XW<U!zxBk%te=>&G>;9Me>vTX5|a=O&KyP&rDGlW`o$?G5a7<
z`Saj1SZlVTi|>#xpi|O^YCC*^Ev-%X@d5H|oXG3BK#bg*7HPogj6iDMDeuRRw@9Wa
zG+h_^&8u}0b74uY>S?ea<NmV)>h+#`C+0R+6dUBGZd41O(viyem-!PMJljdPXHnsM
zm|E!%6+1|DTb}xAoJ*lQBy@$q&DX5*MLOc)2V~?M1+2LI-_z46?652)oay*bQhL=a
zr9<a%;tnoy+jjq3k!1>QMKnR7(S`lO#t8(S2BJlW1JQbRny8~D<rjKAe=BZ)MF2XH
zIsE)gE#Wz9xGZZ}4q2k=?jxM`MD}K7u?BrU%{erAgWG`_tksew%M2c4Xy*BM%skNd
z%}=}~c7W~?o;=58rj5#E2Ad5ihBGqCeC0j+wL>)9^q{-jX7AS3UZGn<{Tj@FsEupL
z?jsk~7+o{!<>Spm9B&EVOOsf0XAzv74=OTv7#M>bPRhRXnV(yU&WPU^Y`=a8x>|eN
zm)~wMNxlg5Lx#7attUE2gCbU_E#BU<!XGXkP;l)n`_+>f3weD}d|C}<v!q_3E6w7>
zs=>5lHtQ1^$(ibjsoZ#eCmmd%Y#4ocZ!ncf+q&?}u6O0_K3-U5z~J%nkjCh9)(vkM
zcu{9Rjlv&&foYxiXg7DDIYk5t;OWlh*E0j~8D?|B2A1Cu@4B_zfb?Em*B$ja?)SM;
zF{bt+?+M&G^=ET&iH#^&2XziP&?~5V$Lg5T=h)?=MkuASolh$f1970(w=!})|CjgX
z*$(1j-f>g=Ka?tioj(p`XQ4-b*uR+cJ#C__M%n7_*KRq~F#%V8KViMo;{gnveG`&=
z*xym0Uu&@tpE?gTHTU9C6$B2DuDou$9Yx@229esLkuzI+$fds6ChyDpp{38ZIfD_N
znUl61I1v2nKzUCl>vu}maK9pYg8v0MJdw{LO?K>c`d8`33HML2#&G%`6K4utb;~;w
zm3`}{Rdr>k)D`<3UZ$x&27tw$Z(OXSo);BZV{$XIQ*!bJ$->|%w_<@jJs_RX*n8Wu
z&Ub|g8!>a@F+0z@V%Uj}M$Q>SEj?*GugF-f^3TxoO;ENGtHDzSLMynf0wYe&HX(yA
zJa(t&q^ywQt+$`HIssO%-YkFVehMr0_Tk&}0?bPDuIZ3rdZp7#9NAphxhJ1&6aL}`
zys4~>$}z+g-!@zq7wLb{ymtS#ut056E?S35F6y|WEmp;B7a`LLxs|d~f%P7AYV4QY
z*?0=mZtjF3y9-JT*ZWV4fQyuD&(S-Q1O-YKu}M49P=B>|6?2NtrU#YUh#sWrtBchK
z6qN6p)mr2gX=~hiU$0fT^vw^?h@JF^4@^&~vp5gPAAT>JVfZr`SOD!%gO<V;pSviQ
zuq{AE5~5DM(M^wU!5`O)`HL%({5CvtA<FhU%!Iawc9A%7=n`kuoZG|#sb7{xA71NS
z0DOhzP!}?9NdnrOvP34?DmxN>Jy$;9^i7%M8@KT_@`1q)|Hx>PaNB5|_Zs*Lm)-B-
zgO<`Ld(n|>RYW9rP~1~I;6%$&T3>*xm_;S9A`7K=$Tvj5^9wu)MC}ytU65Qy5W~c2
zcuEo+vQu`;7FPvD=k-G@NlEy-sVkO&hmWu%2eh=7_A7CRu({eZR8XDpFv8hO8>~JM
zwyb(V^0evk^p}5fHY->N<tLQriq9%ZPxo>D;po0-0ChX4=_QieI8$#2tGASHYHvl>
z1L_Ebp?8X62P^~F#g8SvZ-&fJ*tJpmy0^o05~=1Q<wbt|B2KCMeV212U*?}HwQ^tV
z*d8Ru=qFv&-FaY@t30or49Wp!_?*`9;9l3hoSkTXL8cRr3h60~l{T&4NoQ5`58Mq)
z`a0Q=ha{mky*F09OqVS6a%C)ZUMdclAb>^dY0n1@80uE~#Ywk`$n6nAB1-iDe^lje
zX_c_#XLHz|H^}=<60RSSB?P2%?u)AmcGyy`C#SqDK<_;F{o>9mnGsVSqj+wx4Y7-7
zxeQ|aL^;90fj~h8$ZlNu;W}!WWK^JAbvkZ3bDII`6gTT%aQkdn(4{SA%8kGmznY<-
zDZqK`UWYnu-IfdH62jc!mi1npIkx#r1H(tJ;Zn%HZ%*Nu+P9yv@OK?xZC@wOb#dT?
zg-L?&`>Te4q&iv8y+FF*c%|%t(5RMsOngVLD24yn2bmF+HA;___$)M@CNE&7rLq+K
z7aC4Cc0FGNEn!ZDB{7&?Pgv!^%2DN<&ztJ=qqUiB@$dF=+v;ai+H{;Aj>wU0Oe(Y=
z$`fS)S7ZUJ^cOukG9+7Hswl{Id&vZ8?r8^W&9hn9vLPKW`(Ndi46tY2?TqpNk=oaI
zIFrXhyty9};);r}n)5k5e*4{(bphbZUO)Gb*Vwk5d0REt;Z;6=Gwl7m{?Gn#(<P(E
zj~kiud61~HIJMx3qSqCE%S<GbU!<q@hUE6I=<?32Zo5=IYx+Y5!KAbJ4xRgFEKJ0n
zQ|dPRw1wAohRgXncuu!cuN=2PrWg+Ft*CAtuWRa-x?tpY<Bv{A66<R|mC8x_^mp0}
z6tKPPl0;3O+O_B;7&eG5Kqgw~uchiz)!eS$(%+tE;=_Muji1s{Ku2R2@l$QzZtHl!
z9<`xy4bYfCLE<`ht>vBjNjhszRw^dSC(Skp0<Iy5e?5#xTh-cR@lUkAiaYz>Cn;&u
z8iTIr7<eAz34N8^2Zs!ZK#*3x{qHE5es$EmM5k%RDK_{u9C;1%@OB{;nrq!#YQo85
z2hNzH!byalzP;cGn~q+GRu1@{$w^x6Fm6W}UWh=jgmq_Ijw~JT|D>Ls992~0+h5V*
z?BTdTF$={(hum4&6ny^=ZGZh1)%V2@!_v}?bO<t(A|Wk9r!<I&IHYukg1`{codz*T
z2#9p4s6&GwjigEp9m0U%05fx*Grm9H@BRD%_kHbOyqv>1XYaH2+H1YmTCWxUX*?-M
zu6=h@aiI7kK=hOWafvsI`HJ<!A_S~I{%#~O*H}bkXhW@n<BKtQ%tDR77!2^h9X~{n
zeYrOwE)AR=Exbd>&=lH_2#JhR#$u)?&qWQnbw$=O?*6}i9dnSM&;Eiww?sw~d#Awv
z85Nz{Yl>*tW!}~9^*fUSgml(Aw{kc!?K0hh_;mXk^Y&7MI3ZpZP!{<W%xf{xqnZam
zrZc-|(0mt&H{CqU;Rz$5)={Dkwhjyd)>y&4JM#$Hb}$(R%uM(ni__~XKkNV57=3)5
z49Uo6NmWZw4&CvCu?A*t#$GbnH>)O=ulPnW1@(m~CcA&txQ;~z(YnqNK;(Ha1uK5G
z<6~D}eCvY?p||s+B-Z%UQyRxZgfG7%b;58zgC$K!BS*1ud6gEG3r$R8YVb2Io%$)M
z00}UeWNI(jVpNT!`MYpxdqjp(?k!)XNb5r3TaHCZTfdwi<90nd7z<`LMqWClu#L8R
znn0&`J1!nBm(Tb6v@zPZE`Ywt+F^oGp&QrlKa^ZbK7}Ja5dTnru=TVM`^d2fZ1Vhr
z{^rR`^arCzoxFnIPd?go>MN|QzBf)?0=e_O@Qn3O|I~H(5&t6lLgd!HQQ-8(oi1ve
z0ztV>85Weww!HT4_s_67s+zj^NF%(>J=s2p@21nyh+HxvNjvhxYt46*1=R}p6pPAv
zgE?$7lj@if57<xqq+Wb)MfrEYkES?ZeAn?Lv+>bLu*^d+2|IXbn=V0|y`eiGWH{~$
z%DFiQeKrsAN-=@=n<#T5=ilu4)PMdXO;_jH4>1@B#m^YtkcupRPg$w-3)4<rb5gJ1
z@t&4fX?l_2#x5JOaZa9r7wF+zT)7DEx`FRO;I#d`9}GOZF5h0y8<_idg>&pSC)e@)
z``+tWbKjoHecBi;cG1+yXaljofkz*n?is&3IIG6o5j`ABgK+>;ynU5{s5~KTDfFm3
zrM3O%!T@U1CA7A6|L*tmdE#b&Y;*ce1?f%9pm+PC3;g!P?=In{;I?@>gd6U4#Of~0
zL1q9@30FPYpavYC7eC3q{TG93>vL6gy5I@Eckb++Gx7v|jSq1t7SHXM%06X#6?cYF
zkP1{#P5AZ&+{hJnVS7m-yHLDCCGIHGBm6G;b%#8+fk>>@aq1OVBgYe8Zg{_;qz$!d
z<xrSUC(3G)FYpsKfmStZKh@$O5gz#}c%nNlDrJ-|ivH?l25DR%-QXsAK1ll$QUbcM
zYynoGs1A`k$#9;X)D73SY&NVMuDeg|O`=R%cE?m_<5M|Y5DLpRrxi=wRx5BextQ}G
zmn1Vx9_~k{1%KMOGXQB)4B<tH-iT|7O8|P(4iJH>*g?Qo;vVVwOAjacpS{99&8(`?
zpJRNJ3zg2)|7cjq!W`yqCIlYbnhjf0!RJ8`ju8AGel@S^87TE})h0ak02QFpyxzF-
z<b%~+^wgCD<VKjSYlrtlv2<)OJH>c$4<$U}@PmVo^ExF$rZ|F#EA`;?yZ>))_(n>7
zKO`w@Q)qF8&(9I}?1kU*aVKrW(fP~6uzW@qhqIi=6#ITh7fvn@0p%=!lMfRjM97pL
zj{<Fyf%Q6qMRL;c=U*X2i^G}8DP&!J?l)NGDM3WdPqSbo#Bc`v{rMU!{oxINjUSmF
zYXBqbN&*G_htK=+AeAVeF@*oh5z|+&5UF9g6tqkv!2I&M%ku&_Lk9xq+`q`ZX*PI2
zhex*N|0T{ILG6SF!CI2&Vz74Pk6;e{iF!J6*=maAP=P8Z{O{$e!}Q_6c%EDD175m5
zaXPG!(0a9RW64(bj;ZcWGe?=No>rA4zhd9(RQ?|hC=vvZ3oHg@cnI0`|1c^1%yKZq
zx;XrmUED~pmqH=eNxH)H;+G=yV_etY{jnu%I+*)LeVXBv(GFilWW4O>dzR)2;!52s
zwedOc-yjb^{Y)^DlT<xnF@F4%wi1P&YGYS2%AGp8<shvZIU2CxmVi|7_Te{f-AOTW
zm)Z9n!2SZ$;iSW*nGyLQp{ZxLbd<uK`dSzuhU&kM_=4j}cVhLnUb6qp&R2AFu3O)c
z4*#8x3S?$9=@;ZpNae^W(TQxmHTy^PM|m3xf1z}v?)G2q!nxqG;BHrESa`tOzZY}Q
zPcxDNzC4g$KC-Ax*lV+X1+|`cUfgS~gzLPlY`1%Qs`v%pQTK@oaev=4$M<93z(%}g
z$b#eFu{lA^r$g@W;uGtRgY^QcE6XghGqowqlbFyS!gs=J#(uk77YDq${bacIG{s~;
zIV~O=1bG!5KhxK*J884b$HjU<+aget(dK>nYZx@~vd%b`xkizla`R^>xsbAx#yZ>m
zUIe!@7~E>IQK<Ia5LaMi`1xTzour-$%Ouc?dYQoE4k)2nE`I9|gmNKNY+w6Wc`fWA
zzcrn5p8p-#jI-{k_WpEFcWBhN;apZ0k_rbW6Y$CJ+fy|QY~evq`;U!3?L%ANYb907
zRQM3LKL3_jPWJ|r9m9wotEi`4@gI=7XEVVU9lC4T&%J9_JdkmI_X0x%>mi>OjqFCX
zZWa%xZy;{!*v9yq-U&<%;yGTgFI5TjYdJe@gjc7Hg>W-iKSa9Tto#NzMO{?#6+23*
z;!<&Y%*u<E$O~^<hu*`j*r&_lThL?2PJ13XTSwH^T$<eB-^Wb9mWC9H0!~x6)8V6`
zwY8Awf&5lm$@7HkFQ5ZHU$ze9!f?TUoGWEpBZ|i?UvK&A?mpv2NRjXUsFsm?LD#R-
zJz%p4#&&KGqu4xCy#~u~DE#z4d|R^sA{1^l(UD<J&3m=L`)?1!&fRyDO%4NY<DT<5
z@A|ZZDG?KWGpSRo2`en))$}TEvn#oyX;8eBR}OisBMQ}kM(ufgy71&*)TwPRu9bCs
zh8lPO0l9*zPZ=o%RDP4btNcFm!?C$VINY2Qf~mdbPTj$M<j*L_NY~~1T(tcLbVZA+
z1Kls@U!(skWJA1uwYTd-+cyL8b7kB6XSQ`qmFo&d@72{c{7>*QClZvvFSzJBvLB*I
zj-v$1<^5zBRssycN_s&>1s*Mpqk-0+Oect8`mamQ9cuZe>1ti1{h0C@Dx2YMFRpcI
zU-2`PUJjOQC5qn}xI~*y@fCJegW%(+reG1T{DP9Bnu5Vhe9cn|E3!~hd3d&iA0eLo
z(%XA}X*tcbVwtfIE@lIUujAfeB}HgNz^r_=SX8uu6<DcIZ_0TD_2}-Bx(Wz-c@xTx
zs>HT@S2j$PVDAYf4?|z#v66>6Rpy6-Pf>8iW3t_fr{l2NL?wx$ce<MLuq>h7nH!QR
zr&a>P??c~ujIpjr(&{{1F?0yk(^59($NL8uDd18gaJr8Xmy{nllRoe<cHBl`3U~5c
zmxbi99QpD)AJorJ`w!Ag79#Ntu!UzCUXDK-U&deA>_bD07l<LvJl-IL=TPmPLF*+b
z?3a^q*59fwUY}|*7x_af&*a6i{!0IcMxG0Fn%v|5O{bT=(7Hc?6nxIZ%Q<<U-kbUM
zWcbj}DQweN^Fn7b!XaM2)DaAYttav%a|??;Tqu$qOoo?-9opT34ot?vI(Ql#$`0_h
z{$60kci3C}Qt%3MRE~@fAuF7W^GOGcR9jQ_5Bnm#=UJ^=tcxQ?A9m_|uDcz^DZk_W
z=@=rV8(zm^P~^G7k=lX7T%c`?I(Onj3Vwge@%}R4qk51L9_G5pS+Mu<?_TtX1O2(q
z=ifh{E|mX#+^YZdHywMe0<C{x#ELbAQ{c~?FOiXTE!N1$wy(y@^P@}WO2Vv_ao(-7
zykN%5De-Uei=-%SB$)R(#|u4so%SHX6Xih+%y4gyJich5<&l~32gaN-nx7ZHeAK~%
z(X@qMct?!(0`IJ0{i1H-=a5kAu8rHLdy};V`>A8or#<8<4^?O<1i%R3G2g(zbSgyX
z=>B60u!Z;|ao+^UuW+9&j3d`UEL%-FSM1aux|T1)H=OEK<wxYB17cU78Ob$%j>I#=
zhIR3<<vK36z@6NL@G@Tc2%`lsccz8He*k^Pdy{D(uy_^24tctp1SmaD!nMCtJ$IPe
zlFz{9M4VqNwHiG>E00*Mfwf5j8?$pF^E~5zS$j+>kIs+|XOITYd#7k3J_?z0R-7ZQ
z*k^}jea+gKYWBW@zt73Zj7jF<*-D@96T7$RAIj`D;69UUc>})Pkdnt20!vG$C0Tg6
z{YKsJvR_T&wayor@eQK2TyEY#Sw?5|Q>O+8-{PN-f6^*Y9%?Vm{cVL}=~PC>emb7M
zVDZ0_o66zDw3Y-pK&0kyEghZ=P-{_7f1g44eWQDTL@8}xU-E_1b6uxc2pzzV8lTTg
zHi|YE)FM%I-_P|+l_OA|b1(jyb!@)%++RZg#E4SWSvl;St~bRXSUNJ(y_svxt@;BW
zJXwu-b^@(IN3ium{9`UK*ZsPM@tKdw9WBHujzU*I3_t$j!ezgweB<*EW5q4|4jPEP
z`J-@7MEmG2g8Y0F*bxFS0r?vE0BqZCegEHfwv!hRf1XFg^DIN_p-4D_rN6od-WZt%
zGl6%*OW_lIH~H~p;e-;GkyDBj(7d_HkE6Dl{{<#xt9wd&*(?A}NH_Ok5OU!O>rvFe
zQ(QM3Olpuc1gr`5O^#9Fs~<H9h6)2%E#P`tzWTq^ZL(c;{FOgKwN;qSjoj4(A7v3d
zeT68X?4=iQ*^YLTMP(gsX8C>^q-8kA8R8#5DX5dNw{TVz0AyBWEUS)?cne&;tS{Vj
zXZA*A7`)H;?43QM0XA#$*B1%N1p&ps8_Msdq9P~K?z34lP+vUDM&qu(J1V_tQzJp;
zJ}9%)O|Gxl+$c|<N$O%<6vQbvt73n_^VQ@@X*ZGJ*Z4s&4!jhG?Yo%`i`;Qv@@m~1
z62D(LTJ&52PaJOE>VkIM{nc@We6Yt~!@aYD9sa9u7Hu<LH^&}tQs>x06W8#|16SB%
zlfdhq)5w@Kh+EA{ShZ|NhiZHe`t|!<nG=5c?d42NnqdS54e8#cUFMVTn=AJw90MPH
z_PKrGAjkp>vBj3zv#AoL9{gH8{xsa{`Iha$Q=s=Cd^xUQ?cUFc3q)+Ff8oOj%=RSB
z<*|xRC`9pi-MWFXQTdlEf{JR`5Zf-{(`x*H8Q)fcWUuQ&TgcZvM||E-NPGGtbtWXd
zxJ7RF`*!5keP1uq<D|Ae<XCFpAC7)4#U(n-!H$K=UlXpswjm705<hr?mc9zZ;Gc`|
z!#&*iF9{%*Xx-<#2^f=}$`wvqIJH|mLVd$oxfGfH3z<Rh`Y0cXES`(fjr2lB7K_Pq
zK_I6@zXn}Dg}>86q_;U@Az-v}?f}<$s*GjelJXykpM`=cHQ@#yWQ?bGx1F-XS1VXh
zPCsT{zx`omMib}j!Kv9K8jKat^%kWm@musy!gwn0p6)F!uHXL<Ih5(z!1$*Ff)7qY
zAw}_xrH^CrT#*1L3{%g370kcQh5wRBsf_`6xQ{BZaG49uKPDgY8RsA3L(1XL0AlY_
zXut!IZ%^R$O?|6LXr`X;DnO|4`$vQH=*Cwd3xCb~k_^7;T}MNK%)B1(AE73hqM80>
zLiN8oNa#-xW-3@ANWbCq!cw+|1^$kqo0Nf>F4QG`7*FSzg){Q;ckJT9<_=y<=EUL*
zu@I1qiaB7GLm%X8fH->zQxG^kJ$?aN7iDBmHN(6THFMppKYq?kBd-&wK<f?oHQsy}
zqOuCV^JaF;09k6AdjusJXGh=Gz-A@g)pvG8F%+Bu?1>>9Hv&265OfsY%>|~dnia8Y
zgH=l&2e*k-N2rUW19i&Up{l21^G7}L=T8dtby3I8%^s9@8fu~LQP+QBe)@M?tLgb2
zE{837;MxHk)5Rj#`X@s1&*j48Rxx9?wQ?>yxGv@(jrsRv3L5?51{zk&SCAHVvK#C1
z4MDAU@Hq^4;l>AwRlLfnmP5B4FOo}cG<biaRuj94e!9Zk$#J&~1Nr&K&d2l}byUQ{
zr3E&isG;lTM$#LeT0YwRQ{3jsV-lXA;R2{r;`xaaCNef39m>>h*bA7aFHt~tanuNw
zjbIen6?;Kj>q1`4D_`>!h*`qw@s~M4y{ccryn0AO6tjqlfKVOD2ObpCqg#JEEhC4O
zf)*@2-X#AVt&o(Z7x-&ApiqsHiem#z0jDo$h(}02-t7Zg9OmB5Zk>1h-H#<2S4I=*
zddjPA)z7MpH^K}b!mSGrxAcaN-`PTyOJQ$!Gw}_{s_Y3U<u6m`u3w~i5cXgCO`Zf{
zFLBNe%Xw+MPpg9_{<%IwzlF73g`ubkj8gw-TfmGQ&?l77^ax?fMRhm;Q#<#wL4VHh
ze~E<u6152|`5;5Dcb}Ls1We49cZ-s99PeFBgj!^k=yqV*SCO~AT#e+e02#%>9vuHw
z77!{cnRiOwKwfjR0J*pmhX$yB<O5-BGTw%TN#HBlTFpq9tblm**Z7uF$AYT?5`#s8
zhQ_Ppd6&;!#~l*0d!Ib>{w8q0*O+;l`H{!(DLwA(5Y-*?dX+?zuGbq%2gAkO1y`Pi
z-yGOX3RgLE?K~Quf1f7b<b68d@kEjjdvg4f{KGOX^70bU(TG0@nd7abJZ%G$qb?yJ
zk%Q1H9Y==~a>NLuUjg+$S6P$}&l9o$)zfv!1w~z6?<qvY47nr9QQPT;wMJVw!<O$+
z@a+6TPFoAQz>C}5;^_IiKID5M4(#xqd?|^)hDV#RYJiUghB_b2VW&>LaRvd0Bu<w{
z5+`|~dy3eD&4aCt)_^YI68}QUGvpE6oi|EY+V}l|mP0j0rcq6IC-(e;WL6lABcy;3
zoe&^ET}@E|{9wz(KgS9FKezZH5_R+Po%cSy2O|=-^F}K&lG}f0OZazkGOK=h>t7rk
zvOY-oN`5w^DKqBb!+tF5bIT7y^ZWYa`+-2@!~Ugio6YeT#%kf`+X+XPm@TNMC>m<g
zRkiN>C?tJ((uvl-^r$mk)k?lz_a}uP_HMXp3)$igWwb&k{mMCX?*Ooa!Jlv@Su^q7
zO%=ook~ghV+Qj`xxQG9=`-g%<M_q^85T61R(h0#Iw0F4WgXeOvMkZKrVrWOO>}L~Z
z0akE!eZVR}?};@z`aeT5@`r%rVZt@&<x<S&1cyGc)HUx<9F&k%%6D1@NGK6lH>zYL
z@*ks?fT1X)izSi~lFOKkWaJ@8nv(pp>jD=fAmtLsE#F2G6kkJo_zaq&Lfrxkf3I46
zl`c`PbOdEX%1wp&yr*MLhrN!r;3QT!KzbUVY<E41#)?$k3UY-|)pYo-p@J}vM81E1
z+FA8m4+FU>WufLdb>r9Db{AH%XrPNhB=v}&rh5!>c1D`HnduV{sWz~==>2<I^z$zL
z(*ITns_MY~sYm&B3Q%Q5JobOc2zu2L2OitunF5N6gwDjlL|#E0*P9pr|Fw(+26+e&
z8#0j~kFWV#|5p+$_!)SpiNhZ|T;NQOVE-Ek^d+$P44FtD%UQ^)x^)3B2hhb(2|S#k
zb?G*~;3%|=x6A?0@nc~-)N4a11~P>ikdW^Yu$w8lq+OMPoHOk|efjczbVh_tzhnL;
z-!;Zmlc-gT4zq)O?t3jxCSby18pv9dp{hy-V$nI7F^}{-|0xQSM7{s2IOKWUng{Wh
z8~HD&`^yVzWyL}Ta^!r6@j`M@aoxW{hCdBbj51MyROsNxDSA}p`CtAE&sDJCSXRF`
z_&+uo9!GT$x%PcEhv$1=DD>~By8R!y)j!68Xvd&fsZfSws1@e2xH(#0{xu7{T!2H$
zmOwyYiM2vo_rWx^@sK{)&t+6g4~fJ+6zr`5w|5}9@>e$TNyTZ_;NPlbWzKB=xpb;-
z=IYeYyC3|u-+Segw0Wh^)Y)4+mivR;>h1sZ;!ZqgK|ryp!P~z|X$S@pkPy97XjBW$
z0z}^u5$9LIu1pH9B@@W4{?M;$ne!1?CHRHx5`-@dK=lZ=6LC-kvki+0s5&#})oqHi
zCCeAQFQQnl5xD)azDLo=q-W9ZR(8O~31wX_S^@6~6g1Xo-*~>QNAV>kTYi-}WbaJ{
z06`(pAkB^ii_Q56CwE*}CZHduFIWIlw1C|Jo@Khl{85|qJ66YA-!ofde2^||nzHBX
zDA-E@k{b~#rk7WNT^m3$Bq7O_3_|wz!57>*@z?ECC5awgX&DI9qmk>EIYS+O_?d*t
z1=Sf9+5-01qR7!l&R+&+)v_8;-BUH8DM=Xi5ebUz=fS_O);yRYb2x;TG!?ZQ5zoAK
z55L0OjbzSZ{$Ro5Qwkk;7MP34$R4}~Hg@>eA0X#pwHru{b^^Udk!DV)td`|=`9~VG
zzr*y6AtcY18DtQ+txi4c5(fdr0SrQ@-{ptA-(8XKgKFpy*ctS{T<#EK7ZMV7ip}Nz
zkEq~ZAB2!r0{2MW4Rsm^>tR3$w)J<w3-Y0|>z-YJB1jR1P|z8a0Ew~wl>_OM5o*;n
zRfmA|+uAnr@1I#>qhHA^vK}G%B>^M+m2uvtmy(?$S2%C@e8QA9Kd-p@<;5Nie_!g-
z@am6W;+GOTa?Tuk6lgk$Ab<N6M5;J4273lW;#Sfro}!2~0zj%FPS!ieN2l+b{lgta
z(+E^W6R_2yUXZGYUU8Sum5C`rC@d38rrIeq3FW`M4SW8o2`a`RKp@~)T(zf}UwSRG
z4i_q$bdQMy=_bzL|FuTA)25kCsc%_6o<^8!p0~dDTMS|qWSbBWBGlM}93%Ffc^Vah
z{}GNPU~M5UWB+8PdZ>WyhyJytnlUACbF`N@9_W=O35l`7FaLavlW+a3-J3|DQ~OlE
zO7F09=0L&7eECbo_su`aT$*G>HDzi!QNtrckjHFco+{m0$@c+)u?vT7E4bQ;)V-*b
zXam_l*NNU45G7;9OQ>yfH^ZdOfAi^gKdL1m>nzkzEC9J<tUzx4YhS9-86dz+VENJo
zbK`W|>Yd>e>CYO~P+2?CA=mJau!DG-a0MNee}s70`n}+6$xgN#;OEl_0x9m8*5KlJ
z)KvkW8~lUp-w1uXz}>Jodju5$De?w^p}RuGn1VA+yz8<i9wO3hCh%`(9qa`U1EVjZ
z9+ZS<f?aFCPA>a!KgDGtigw7)0aI)jSvg_m&cF_i9bQ65f7>|T8@`TvY?NYq|9(LP
ziCuxt7xfI6hRgYWW^&&;*6DU-OQ7azWEAf_p9ic<EXZl_b$`A5N7k3_D|6MrST(DC
zZX5+_)SKnF4!u~~7RCj-pO9?It;*7C5UvTnMikA)s>HK+jAUZZ0YT&QlOoH(o*A#z
z4xdj-TT&i0K^NZ67)%V|FGY}65DMM$^k17p%E3^bfMybPrru!+<iXGop5GXZ7l93o
z>|#JQ14jF;x;hAqWv_498DXwhmEEBF!KQBsaRd9ipc(vE9_g+n>404%z^0k{#><2*
zMi6H~Jb`~m|2oIrguSu0H&)AWTmIC;QWY3JKSr&bLxGE9p!qLPRG8)W8D;tB&x9D5
z!X#r@wv9yZvM?+%YxgCqHrkVM#o$8_iDb$<%&d)2YO$(BGS*x%Z6$+*aY_azroqp^
zeNRN-MnM6WDN)5ced)lV;=o6zdrhZ!<3~a~qkuZ^mRa&gJ-vHQHRwuorIz}nJ=O(#
zV%mccZ1zp7Ui7w$Q^}w;4WbKtQYC(6%w|-SO@q9J*1|)fp#X*Ed-<FaVelgUdC|>Q
zh0M#g961<m&)-jYjavFIRV>)7^vit6YfzJQNz_<M8$K<c5mid442wKoI-1?q-$^_f
zI~_Qck4VDN7u^WIhONX&?i0W48o~5nQUdI;)h#VvS_|JiB$Xa?g`j*541Ln!&e}Zi
zuPH%cj#wj{A9e-PgVsGaAK*J=>1IoZa>ErtFhX=qFLxP>jG-Jrq(d3y2X%!XRpFab
z#OHovY<DJu$jJ!*-xY0a!VR~$%?)REeRDk+yN;<jw-|t>BMJ8asZ`qg5pkPjC{KLM
zCPhK~O4HGThv)4_p8NaX*S73e6nMurL?2`fC}nt5tcz>zmVBM)kCb&5NmpZuZA3&R
z6H&lyzLKZ)Na@*(I*h+TbY*J=acBH2=G&_Z7bF=0ax+-kosC)9zS4)}3J>#D^qsq2
zI9+%GPJky?0O^j^Ube^TJKV$@Gi-x1e2y}i)9N#+X1-M(fTeAVk~}I%M@~JKZjf-i
zx?$;%g>9HZw;$7w0{YB_a6f$48O0`FA)Mh$5I(x|>lp=A>@huMY0>}l3!~N`PjB?Y
zNf6*7i7r1jVIbdJ>Wpd0iQ^LG9z|9(K8afAyH+pj_>yTvkdIqV?z{IBXJ?`K`1p@A
z$*C^H`ge6i)P)M%S>}v;G6RKZyM%0~jlz5s8m@U#w%r@<3+22<v38HMz>k#WV>-7+
z%)l2VdybFzj3n;cW5?JHWN**W^C6N)_W&>W+kJ_d@26Kr<0DgfMa}AP88}JpF7WFQ
zW2P`%k*|GHwYlL6_-vKSvQ=vsnc!Zu{6y<9{man7&kya?t`m7agOp2+0t$EocRxIR
zxF2>Kvj|Qe_D8(t*klx{2&`cXjx#h8@i=Qni+Cf#|GY6(BJp^`)j;@-dA;*Yesif1
z9)5EZR?%zeA|m5`f2et<HTC4qy~>2Rus_ed#f#On>^{^*m<N_=tD`nZB{p{7XXR?g
z?V<8T7tD3+he}dkip4bj7?1iG??`fSOKn>>H22TjfN5#zT_t^zw_9g9q8rHdv2)!H
z`wLCOMdz;5S-kG=N&GBEGm46hiP!<$Y%jCzu|^kL7{Sm>cQdaLWKap8FCFBzK$uJ+
zJO*y6wu0sQ7JHmA3Kc_<%C!_4Zb}L9jlvDhI$4LP<UxT(;w~~uw9F_55V9qGstWiZ
z?EVrwMQP1fQR@fg`)$=U<X4*e)F@wnfu9uqtf7urQM$w{c-#~cKJ?)HugL(645rGk
zYGSj~GGlW``Qh-hZsrE1j`!ypMUi}YcSU$ocsGil+^4xNb30}iw<Q)#6@n3;RUFTC
z&AG%yBb>AVQ41;!BOi?waaW<!h>Bqhy+8ltd!eS_%=g670Xq0?=nL(cXxLA<xkDPQ
zbNQL?Sx&wwlMovdEmhiDKPdecUUB=9vc32LeEUm%H6|22N)lxvK!NgA8lv-x6-|eV
zrISi>ev%*?;LE)7-#+a!AWZXTRPd%eLAawElHU)V!8ZBqIkqH*HVBe%PBnlqy*#kw
z9E0)|BXJ>uD|1`*YKB-W#KgyZL{s~TRzL6ftpYwtl8W?X2$VYN{OJBtuYOoR><{aa
zNI%~=)q*~6L(kG^#v_ZjY479WSA+NAUvD+k9BMz%O1XD-vy1Pr_VLdE&pV4gyT)3B
zxh!wI#4j9pzgu&*#Q4$(*u3=6zhTaFoSHN&!Bh75Mj~a7aGrX<Qt<eZFQYM2g~Vp8
zy-Wh?33rw@ZALZ?5vQW0XQ*RswWjN#O3^(kC5!dRm9r7}FwBB!mv1C)pMJgbR34W`
z*e3$9Xx$wWvwZZG_m^H*B~D>1)RZDB51*{=5_fzRanD4{%j$m8iyW^~zzb-)*>!Op
zfq7ogRAef2YKarh3BOCdjkR{XfieNd!8Dnp#{geClsz*ac29)8dwP9*=RZ|g?&D|C
zu#K@LUcnUTO#Ua20r-(K-Fuo*y7fq+JC_6#%eDoI;IE%svaBp2`B`qQenhSwWSu?k
z*ZOi;=XGnd>*a3#V47TkVfkYI$lEqY@jnG-wqQo-H|WKu7dL|qXs$;G!!^%da0yVo
z%Fb`}E}6)zprxozZqa7_)2ywfkW$y0p7YL$1oqgLH3b^KqNAlHHPxR3HV&44eY4E3
z7t6Pt)Jtyecve$9^iPj2eoDvDf7U%WyMXDFM8u;L(9au4gt|eUvWQM7e1?(?9r}iq
zMe5VvZ%?(gy(7%E3M$zvYh?=zgf-xXs|n=hx)<7;|HN?7#j5t86HxRH6yQ%t>_q|`
z$dZck^uxZ^quyH<_QCwEch*@+gac*vEJRrg3V7oxJFi5PNki<>3MRHoXB~VRVRyc!
zmCZ><@{pp9IsOk90NjGkjSt9M0vv^OuKeH-3_M5_E%0H{oO;u}Bx|T_y0;*lnwn}~
zM|^m(7F${Bx|bg-@hQURNASE=<6)bvQ;^W2uq=P>sIgA59lMlmfU2SvOE6o=)s?iA
zpiIgVt;&9~OjG%d@od$gsyNizCH?1GbGyBhn`d8Zx}^@&KIwls&boH-4gQt+S+#}6
zFyh}?{9MO;hKS;V?*evChN5>T_17Z44DJtD>4BrT0L!(8Yu)AV*x_&JrSNaOOnLn}
z({+cE-#cOVF|kdV(Fx%xXh@!rcLHcfv=au3egJlKxz~)cgm9`}&AxGuNMi+4vlWjr
zS)dwNN_x!$pOQ1><%TN*nE}h#lw*^o^iiZDut8AUqsTVQw(1B}vpv32lE?5}>wTN5
zfv8&hMhW2?;x4=k1t+9)<Vqi}&Q6M5*E{m^>8%~ls%d#25;F58?3=|!t5?nK;w7xL
zy~|mRn3<)&|NZ9oA;k|bcKp9(+VITT0^V>haFFk5i??-0eYW@a-;a%mcopgGr?ANP
zZy<=MCz5M#y4@sPCqQ!TE{`Bbk?+p1F;ebHHn;@|V=OApt?w?oEW3zgU6FHZJ@4^!
z<n=|5jFYi*R~*-P=3TEi^*HrV|9zpFh?5tUr=Ih7pT2|7KzEm-;#(ZWX~bxTQam9x
z`!xe9t+3&?1t(lH-Uc9-EoZfLFm*6}_(1uq2kiDnHST`fcivs_8=cFS2-MC|#Ztu{
ztuE-_z1Wd5*`IByJ-r8jw?z`sx`S_H$)0;<*0^cGIwRBrneW{?0KUsp{;j3)t*u1o
zCR~ep_4m8f;if-0wZ+X7JJO&Y)3p0`WNB5oN>Kj-+uM(HYpp(p5N`~A(OEg87XJni
zy^LB8x|(oW=XfS4Lj`>Yw|cZA#bM!@XOia725mzI+%wYHgHws`!O5M8<I4gS-44V~
zq2Rtqz?tN|47<}meSh7;>BYYVqgNOQC$|qLe?r_d@qxSLG3y1NblG7KzH;c!ZDA*m
z+M{ZzZ{R8L->|-avx=&pZ^Sd|dOsh}8Zqo+@)L{Qem?L8CNQyb6#->K`VcidPCRr<
zVfuy3g>onJ;*xQ2l~Ef~R@{XIeAzwt+tKMV9DQ6l;aX<)KhCf+x861+i3$-)DJS-{
zj`(+}`OXY-sQLfCCwN#xBxi)y96aIi!gtu2#9sxl6bH3E8o$gs8Bpb0Fy?V<$EBR;
z*HBg2sMLv=I(G+J+`%1<b#xuzJ4T|k4etN6#fw3nwBS!9^lPJJ+MxF2c=HS|_|&T)
zxe6)+chT>4OQ-E9vi&>l^Z1ZY4Y*cd+a~*dbmANk#ep$Yb_8-}TAHh^ObraHLvW{1
z9!c{3>(14)4i{57<@XzLjkpSQAM9<)zAtCmXpp70==F+)lf{2`;#rHrnPhOuN-YRU
zw#KlbU^hwNU#~1KwFnm(RmYg$H)!2$$L&AKI=A}U2F+tu;ROE5R^RR9SR`Cnt=ool
zH&QAvC#z`5^_ca&SVYH!yjk>uD?gmWF93hQ*{Esl!8>WN6+DfAzURXHw3tXmg=I(N
z1tR@Q>?vE*^lk%gTi?7^<=I}w-5qpuZ;NoOhm?bqZzr=mE0Yvy9yfn&md@&vA9E1p
ziu*^te)SsxA2;QJ8v6+bEAN_ty{RwR)zqxRFtc(M%XAw+gsTl|#e1aiz8!asVh<Q3
zyMSFR?cCdkr$NsjYNqG5Wxpv+PSP`#!e6!Kgo$lVUpk!*<E8k!E{mQzojq+A%ipix
z_g(U^L|vt<cD%}D=><;_7|~oW+?RAAh@2*P?J06C3Iz-30+0V1rMsZAtN${aDOgck
zUR_1_i&W%bUjOqU#amIgTZ;#}A{33VEx1-(ZL-US=fz?>=lAz|8gE}DlCmx?IqDso
zD!N`6&Nl$nN0|d%pK+3k%b4d6ZsNmAP?FbY3QSu**cN<EnDw@rpD&fp4;q4bB;@;C
zGNt(;edWP6DdR@e&m^187o`I3qAkS|G;MG9z{5W|ex3eKlui(p&>LCrW_;3ZZBr4c
ziaCYyH|Y_v`8sy<ORQ5G^Y}TusjwHklN3~4OOEovH}Rgo`tY;(_ARYg2Bvgj0S`I6
z-fsoGct{JS;kw~0KNaERPkx4myttIMMN{=+@?8zC9vr^6SQKU)rx<Pp?>GU1@u~B)
z0opF$vcrZF!G@uPYZJk1QwZ16Jj%Jexzv|T6lofp9P5v@WhW}8@rkV!TLcyWbG34v
z%tYhp>A4oLViK=QUZ(#HmvK+3liux4rD|+`K2`prea%oCvJJ^Xo5Uzo%FKUDZo3Kh
z*<{}rNA9y8euSVW9xHJQb6<Y#RozmRC?fh{Q{3dcu98Tw&x6*NTnN~Q*hzExpX?rJ
zY?`Z$+k@IYeYs?Bo`Y|oy_CbU3zND*P)?#$r_eRcW(IBOldbSX&VBekye3Fb_FTG*
z^YPBE^8n~=l<6m<btm{y87&MquZ;LvqRcajXw9g%b`)*g%&j_jfXr)-<^#%$u*Ib}
zqHV~&_jCBWwjLLTS#F%>Yq1HV@oyQ0@?62k=pkI+`a^_+KQ#l5fP1zhAZVfSv%0PK
z^s$+3_MIKC#2tpxA(_P`?a)UT)Wvha95AF8)Yb#OLJvmp_S;#QC8-0}O3?xPK_uV6
zdpkUFrytS3)R(Gix|;FY>=TJ}pKL|5qSAw{XXjz_9n24k#)}q5XG?1DV#!~#v^y$=
zCHT-}*>9dv$7bL9nlBY@6d&@*5Pz4g{neS|7aP3!)v#n&-1A4lO1a682>#}UatUWO
z+bMKebJKbsF3MK4?^Vbl2s!IW!}%T!;H~@12jY$6r**3Xuvzc)W}HJ)AI{@5uNUo=
zN4|EaL3qIjA&X178O1C9Sj`FcaRIA&$BTk@4Y=z{#38ATHK$M(#tXh7GH=g?S?%>+
z{PO@upy0>>Fm$idx%FXUp5es76|h|svdQr>vuKv?TMqi<dE03VyshdYA~)lz^=D0p
zrl{KtbP;itUzD>A>aNk?dw1s4`rVe7E-DpgVq&}pw+J;?4NI@=>@<$o`#J({dU>+f
zaa0xK?^5^c?@eqQqrPd5<GXotQzht6g5$F@f1r!MMul;2dGyuQi?@!Nn~q)mNkR)+
z3hmf5tAaO=NnSPGd(|;zzRNf5$tX-GI|uHpIlRP78;#qLqq`TJZS2~K#N_R9dvF1r
zE}HKxN|%VHR5apjRGv>a>-|-W-Om8Wn4|Y_)EkNX{!>@<1M`260EH18DXrHDPvBfc
z^abkQP6?v_|KI_WxpCB2(&=bv!)c$dktmfn56moPri4f=OeS^^C+ai?JX((XY{zHl
zM8RR}JN<uuP(gxjndfe%@=tsBcT8!u@;lnfY~Jp@c0^jB!9uV-W;x=bC+`VLxBb$)
zvVX6og7GmK13~i;Mv#s}iR?^bYOVa_|NXQ7rrZWCGGiA>yLHuRH!Wx)UE7w^-}+M4
zzh%nUH*sYlH*iWDoC_1QYjK*$*ZIM!=KODIoi3*S-+tU!>@eQG=vSx4Z80gUkH1K)
zJLqPbXZDXt=H5cCvD({<S8kTPn>P6!ko;SDb)P14D_1FT(`3dnQdTD~=4?qJyY$i7
zZjym?g$S!SXfiMnbgdY5td5qqRni_j`&J%bnpuTCFr|>)<P1zP=e@O83UCE1Y#c#g
z$HK*7Jh7@)EDLAS^ya8c>MhG2oKx34e-9p3YR-B`_xB!L%y175+A9(?oQ$nj*O~zR
z|2-LJg3=qx2F2a-ZOryy5zfRV3ACk5^5WD5OWWRRokG998p`OeGH(Ffx%F+DfbAp$
ztD8I@nt^JGMo<w|H{Ep8n!XE?A3|&_&L-HcK#iCtC~9~Ly=_)a^+xdVDKzieDfAR-
z#YUc%xbT)K4GlfxcwlZB6YvP>ULt2Iv|XsY+3(VB$I*P{hmPIal27F<=bIS1u7;ZW
z@RaOZcGT{&k8X2pmZe3U_)kL0{d(9p_}9aN9g7;qr^P6ijY1;>zJmL!VyAqRfckjB
z9oYB5nYu7F=0x9lc@xjyYY@*4&$@E-q94ITNfhAV8SqBTm|9Icwg}z+L^FgP&IPaB
z@q@ifN*?FqX+&iepkM<)CfUW3<z-aHBdJuV5K}*2jNP`v@=bG-RAh1=i*kbuKG!Rg
z2UMU4b7}yu5p~^b9SgA`Acj}gFU_cvUv=p|Gr6DSoJhC>54@cDnr1^|x5iKs!E+IM
z4Q6ob$q&*IJi>AiT3nNfUzW?aaooP=dA`#)eK-x0Qd`L#8Qjo0dAIKP*<d0)Vv^`w
zr;GT?PElyjnN;wT00}8s(fB`tnjGwOsr;3D49sfx=HqJRo^RfL@bE^lsDmZQ@)2A9
zVzUC`rxD1J`dN#itXxxSaabhyYATB0_5bIRwSOeLKm_$~H}1n_)U{j84r2%oE$Cv&
z??;ugRmU2nL#1B?f&k`!ARtoVKh$d!DSX$G#fF*oR`H#|T#S@Mti4O|3g`jL_YnX>
z5LTKz2>ze5r4n;&LTWLJ3<bNs#vIp=A}4tjfIaMStQ4RU(?>!5`=iW8+7HG8$#w^c
zR#LXT*6T9FwL`?OTJD*s2b_0DBPx_8!#r;12cmuy+(=fwxsto0uaM#Ud6zVy%rHyA
z(WZC6nYYHpsz{_M+Q>!9hAzu_o#}{Ww3C)}J?7Q}x(wAZUwq}^VFJm&IYUl5PoIAw
zJ2#zk07!JA_*xiFkz`iv@XL42gx)9SJ$N1DXYmpc&}hx&*~u)YNShWXfJG=15#p0x
zjK$p^j3Jvj`Q$$su{oOZ5;+0kaO4wU8wC`BuPt>bdUd@4m?+hpG6)|T0n6CfW62is
zJ8~|Q`db1iqtIxQQKZ_{LbyNv>zVv(;msw3@am<ILU;hanv9u%A?oy6lE$F>;KG13
zd<FYL)<0>^`NN6-^=mU$)r+Ed&EVycunPTzg%M`*MT#Af;+wlIFQnYJ1Ij-6|C0Ty
zlJN9>ic;<?kcPK0kzCep=<--}&WM?TeLibig+FKDL>GBll8@yvg*0JN*4BR=x#A2j
zGTXXOb>%oD^rzha;lze79IyoF&>dSO0OAuXvCibLgZll`k)4zQ<f;Bx8};(J6^wFT
zA6mXvJLN_pAiB|wb{&dCjrHC$(kuj6-uhw5lKk+tO=^Gu?k2u`VtQi<I!I2X<zLmm
z#QKN>t|>vlUNhquxHvxsV9mZ&py&-i_=6y6HKiguv2fte0V0=TV975Rh{hBMj9jPo
zN#VKsi^+tD^=x;iWy<yYsl(kslwi*rlDix;j&fDvi`nVGhid>t$XZBanN_8co{llN
zNSJssFHA0fw=2|bM&VV;=G#o=R499f`-3d|8-<o#p-iEX#|UD5qDJhkh-UmmDdDh@
zLkeG9dbtc}v;ePtG6kJMJj`3WiRjZ!{7t;rM}ZIgbvN<3G3;<<ydTyIcP;H1NMeN$
zr68qCN0x9|(hneF=!|%?MU&cjz$wP0E8t7}f<W-NV^#Fk9WnCLpz5ZQAB0eXzGBpy
zPB$fd)w#wse=yo0xULqG9UrsmfHjKEYSY-c`bOy2O}rdFUV$Ax<v3VlVC^iQitJ@U
zjpe4X(4c(5phXP&Zv+Q?oH8S|oGibXwQ#bvO5M)8k=HUSLp|*WI%df8sEO9juKse1
zTE^z#kG&Bls|P6pPu}1+Mb58nTRusZ&R$dG9jnz5(6xvSsfyKGf@~^~h3D(=DAa?V
z({=c?@Gh)XxDDEpGUo+f7ubU*M>GJpz=dD}9gp(ZDqf4xtKQdA7E+Of$p&C4xj-#I
z&;ZG{mgYle5F!x*1TGXWfv%A41@Th^LDJJ6y~e&lErGrsfL~t%mLWy(Ks>D@KV}bW
ztDdUD0(+frPLV^{BYkI(dN}%=Pn)HC`hm;0C1E$2BKVVrO+F0iK`747_MNW0jr`9r
zgBb2>u)MFeP0!ZL6G}=NKi-?Ly4r?PQM{ivlA_MFpquc1*#04^BzFIYG~a_d^0eUa
z6Mxc{Yu+D(M`NKXKaXP}j-(tfu{QzbcvD9a<$S1g*ZK2o^@8jG0j?e$n_L#QMMOXC
zi(Kd2ecz$Wf2~x74FBYS9b*=Nd0-I;p(5IE01IzZp@XETjA@$l>FJamlUD<AWwm(i
zh*P9vE}EhudWOY=R3HGmi-EO)isZfRTlLR=c*;|O&omrP*lT|su<KYtjO?-gckpvd
z3B55^d6}5aFoo9bo9$kRGfRgK(hl%tQx3o~NeK|OJtG0g-|IFSSQ>>YfQrVjD|r-p
zT@}zF&3khHMK*VtWM4nl?mB&S#lD-nIE`zypyf*=k^*w#5s|VhR29Z!Wy$kVUroza
zCdr)Pc#jlnN3}sIGiUe1ra+qFgvf`o7gj5jw=(}=H=r(W2U*ujv3aSc<`VGbr2hhI
z-o(>g_=FHbumOyyZFFKR5*IMG+$Cz4bsP@}2Vq<nx)S9}h!#0WCl?%>-1#srtN`@h
zO9squ6vD;c>BTF6V4OS+nSTq@nJD-9NGB*b;MJLnQDT|QcwEiJym`1kwpO+l++a%}
zzzOcS5Nz!qk_lq&^8aoeeN|=dSkin41a5jb7^maHBz8x_e(ro`x|5RcqRpV-$M7od
z$Ey#{ha<=}D^a28Hv%gk;+Rr%%~rM*bbA`_=?ay#W)%-rI!wSuukcg_mKHXgxO_j(
zabMF|c?}w@&G-tNMqIR2l-)IXFVMM5?q~(Br{2WtDcdy0qMs``fGX1N5-Cq50gR+E
zky*}-)7#c-BkY9#MT>HK0zpj=*+fu<2jLgNe}LP;dGFFQFnF|AN(i|aFciX#3YW3s
znB^savVcQd3Al5^&th`q%z6`+B2unW?&YjBvkP~V1w%<9YkU@UQzSI_UnPBEC*<3_
zf8JBaOYo9xzL|LUrdgCy_bnyI<z$vOt*n*epAGKSMSV`MC6i@m3{JD9$pYyTE6m!-
z2MxO(ysG%Kx%xT43iM2#=c*|P<>W)7RjV^jBx^4_m(J0#IsY|n$GuLX5X3yEZV(62
zrFCBsfm}v>z3>I!mQfb{1x)l#w*ZQMi@de`s24;6<bP7ZOG>_Go=CLy{1XWAMz-2F
z=qtE*f=KU>TE+OqJSiaCN&FADCBXla3X|4D4v)a92o<u=TI)#!ElOF#0}8b<3uQqk
zvHT{$Y!%Db@+uv=Ex%>K8k8yMn2MqoOC^BbvW)3a!lgl2(St3_v1$s^@COyN1{Sv!
z@BwUMq0u{jc|x2k5OS2B=$a>UK~b#c9QzB~BUb;JF7LNpt;=OP)50&8kBI~4qE+o~
zm~`<Gd87~D=ZLp|n_F`{_z*lCZSn8mH|gwS_DvS_r8IRyI{O#!G1u2jPPj=vsoU;@
z5Y@vufD_IR=YS8TvBPDsrYZ!apYOJ&He)*SnOv(3sJioC3%$xmv3Jf9kbea{Q*x$<
z&@0m)FSi#`?+{+U{E9yaZx@7Uv~{DO+sBPRgTu}Dz?0x}6*x&)^2dfitf(==Z7@n1
znmM4Cx{qOY1bZtKJ4MO6)!ZiB)0B;H-;%gYj$ka2v5@5N-6gofjbrF``HsZuM`7+a
z(ld|F8)R4K^Ih|(#h>M=irRlWJe;g*hER<9@63CV@c;$Z^O&R`pQ==JUB3g{<~kGY
zVH0L1%(o9TyjAi)fPUMObLAi@Jp-e`75RS_RHX-rQRRL;jy`qGzH`Q_>cKl~*!e=s
z>r-T3^>QX~ksaK`Q0V?i+&iwtqwpUtYx13(fck@RH+ltq6g_|99a3q88Qh*JoZr{f
z53hNX`jcphfr^0dJ$bw|UKZTtX5Oxilzo<#z1x^!FhpJdmNuxUf2n`zW_JIQT4w*!
z5hxYh@I2TZG6X0|vI_Vc4PEH=meRpzV5k~7=z0DZilN-(`)!Ah_OYJP?zmx0qGp}m
zEJyEY#+_5_VYYNtx$Yfn!$9;`lpHs;i_p69cQeYlXj&2(Q#PST&&fqdR>rSYS()*_
zgsi4&j0Jv8UnstoS{*s69=(#q;<c7VJNM6{1#Jf2!G~_o<L?+rv!y}rIIk1155vD8
z69>L>Dn()*coWIs#14vy8Qqp*!_)*O=f_QOeiji`=qul&Pl?*1bx|gX&r&PUkCVWh
zfpQg7MRTiEWDyX6A49vkUTIpxG;0u&4M6qhx>dVuOWqA`p?_MHa6CRw1*2mD1Y0sn
zaFeeH9*jRD%7IrZ9l`YDsN3j&@0@oyM3O&Ftl5$wnVh(JZoze707;1}eWvl2)%pdq
z^!9`M$C)S*(RwMv1$}Z&Z1>^IrUUbU7ZrELCU#;pZkZ1@&`yR$29SiWj$$Fq4XpZk
z!VNkvOHFO?y&Su+SIh><`xz}R<8K!5Z^*zsfy>mdFr5RESz|vsf+nPZa#s=B`V|$b
zek~SV$zA>5?)PIzhfc{5;;Uc%h#yXZ=>>>y`n3I)EU8|GXL>iaqs>m=>h2Og{NClq
zO(H693PnWIOF=Mk87oiPbq05jM?b$4w-<j5^v$yUw5LsdU1*6PFBR?)x_ydVRttzJ
z?!#LLbQcN553Hr*e8sZS6l;XQe-B3ddKucfn=&jpK@mUsd?C4`d~;gZ_A8T8C!bG`
zW~|oHdk<gISflMke_|Xxy+RYBfNlELDygK9Tg`cn$e8v^#VhIRC1vWE&U<Ud1wXhr
z4X7$p(=0e|!;tsn$Hpj#eOSnoWWbO-ee&HFDOS1|b;d^gHDxb2KSL8&8}by|LVd&?
zAhd0;2hYpTN|*gBhH}7~xy0=eY)gXV$I}o*o)8txcuULS*Xg44?<i6J-i4N@iE*U<
z-#G}FI(Y#26)dx+DB(ca4e+dH{?>d+@$9dOFjtErF!%K`QN^dkW64p_V>55<I(vS^
zMH`U_?hU9ZcOg8Ke+_2vZ6Nj%Z-x!K7pKqX)>dA!==;9)!rBRx-x7@6N?vH3^k(D|
zx8x_CTp)!Z*W`kmWk?wFE=#E8)QgUw1J>?1qPb&Ei8W<E^$%ngL(jC?3IL-{3Am+%
z*9=rz{jLtS0r&cj5Y)}WstF81G=fH>o}aZJX;vQE`kW9J_9etTrQ>VmqPr>ysz0>@
zJl{bxhFa50D_1s?M#82nItWWEoXI%X%d7p<%^!Q+m|*6B`6dK=habpP&`58_n1q1_
zcRG|=QvrX6TU$>XG`9^B_c3KeUh`((opqRfn|-jfY?!~$%Q3Tvf0+xI0u0fsL%w9_
zdgfZ0bM~txvASdm?;b%xK`B|;X-1k-wJa8hb&SYW!S$c)3MGYsLL+Yem)^N=-^i%4
zjO{eIl@a=ljdrk6Hbl28FfgW257i_^?dWHm^$c7F{?jd+7eFo;WKa^?MSuX5T{UYP
zGWYTYABR3c0aj_a3OMt3GP|UF<%+rfyV)L__fo1MmWF6472ZdYlmLb}wZWa^j(sUS
zg=s#%(T~Wb{BN<wNfV=w;SCi1OV?o5#B|)C?pGwe#%wD5!Vh$ssE^b>l&BHrR}{d1
zyo|B^sQ%p#JX&m(Ub~4`2%t<CjFs+ECZQ|uO=xfR)kcAh`}$$itUhzDU0~$8S&x*A
z5W$vNSKH{qSbS8s4IRVCjChDKhu6|bWc<jkd|;9g9Coit*JN6*k@FUBN5Fc7=iASm
z;t>9giQPnXt+0;~K4;9@qOp2%>AJ-wv=JhnA~V`UL<Z3G@)5B#4IYjbr6kC5c<yZ|
zNA{<;4>W3@vaOZPX}{`*Nprh2GPxE2&cyE>&IG|U)?L^ROJ2`u<$bon_|*7)Ne%}<
zQ(hxl&#u}$<`sTCw_ypdo7w>6y)za2FXtc)=|VX)3Zf4bw_<)rKe;MJ7T1I6xGH|A
zqtk;aNaZgCT@|(RI!jUY5ljJlP9eeBGTe}kNPZU6MD!t3)FoDn?A9hg^)%ah6j|xV
z4!0a5j?{B6HwCpx9GU`Ln%K4`k0cNmam^tkU;!wT74LdzN&VUexK+UfDvwwV-~G!a
z$&t$#(@}tlFT}Q$QYFNt$&r|N47>ly{8(k8MPuJ)?Me6d%Kp@^G71L8<s@K^%S4X?
z_a|c;UNX)(VoZ#<NQGR8GChv7%`|*}%h$8SS_Rivx^9(|Z-H0dnDzRZw!Cl~=!pZ$
z$^`uvKYhqXx*HlNC22APs4*aa(Kkg9{&(tLU|#ELlI?-sHN6uLfSNp5?x*g#t~&z0
ziB<S52?r6>1?ham7m52yxQ>nfUB`ZN8ON_*bAot`G7fsqT;$4epX#+w4$kN0`+ZGt
zb}BB5ML`jNPw|`IKHoN0*zKK*M0q=%n-7=Ie=In2N&T&hUz)-_#jjEe1^)evEdaDJ
z{_G}z1Uw(=AhnAKM}0nl#$sl{R(Qn1pM5}tdX*21bbv#F53~sQl$I_O@U1}guUX6z
zsGgl}0w)K9NCN6>N%ueG7YUuiGwmtigF(+}77eX^O+e>Tr`9>By~<-d->9u3Y~iRS
zKI}y-YRr=F_rWk`xBsje<zM5I6HDFWPQGW~L(%4tPf^ekBWVT`96lZvnZ&DTwz&8k
z&~*dQn<CTh+yP|4#fY^MjXZipPh%&e%^j3Ev6L)RdZ5|T3KY0Yv+`sk&b6=d6zBHA
zZ8DG9aOL*~a_8IzJ)1I`G$pAdC~Q*5oe|a>-}pV=wm*5e&M)H_a(ViD)ZHs@l7N?I
zp%Y;4siY6Sz_*A84jyZ(E2jlMDNk*xaaExgJnaMZ#@O2Pwgvm+dx7h>ejlF!Q-6Vj
z7eMlEUHbFS!1rwA|Bt=*ifXFs`o5JSD!un6ARtYObO=Sn3MfjE4k998=p7;;y@@oH
z5{ifoFoJXm9jQS&f|LXZ(nBZ-gzR_cy6)#bc)!zceB(QK#u{?K0L)l>ueIiy^Z)<N
znEAc7smC1^Xp|dVVDgW@V3`7K-C5-T=Uui;w7b^EL(O41nV{_@*ajXT!qXC~00DX{
zgctcIwENqr+tZe&Odw1KHh(<MjGi)2OD^|3xyn>VOw+)r;p}Q00tY$kJAY02^b4XH
z!<scM9tIliC$B};1JiZ$d{_tHNY9#~I7OG={&px~#LJyqkfVpU^R(p(iS>WB_DLY1
zI@!g96p$bAs{sdQ)-sr1O{|_S13>!k<a&f_eK-&aHf5rF1=Nwbl^u9|U`LP{*#8Wk
z8D}UZS({al0J24RV6B=rxmuadb)RGcUr%n3f0MZst4~<PC|O-km^*)iBK8^J2P2Uk
z0h!)Uo=<Qu!3r!m2IS?c&euX{$`3cUk>fi&fZD_-N3a6raV%49!_h%FjM{=}hAdZK
z$hz&INZ^=$-xc~jgNgQ2+9mRpqbOCdkGL#do09RFg5SQ`1##$)n#h!#t4};+_AX!P
zzwzR6N(a(4B^+a4phg!)9JNoO4VzC?me<reI2qHzm>&y{aUGn9;bGfT!d=`j(gV9N
zyKr9)E^Qo}?ok|bXQ|rU(KGDiat=TA^Ch3k$QE(aE$p$wENRlY4eZ$fNDLy^&dYcp
z?3V#KtKq#j+Y#r$cEofoBrn87-{;Z+w*wR&=7R^yw_(l1`JgFd^sCSE$sleZqIu0a
ztSmo6x;YU>B=;(lOMj+x|LOtQpmtgs%kBescv9W=W~~nQ`UAVR=EKXtG4f$$Nb)8o
z8#Q~&_W^39*M*3jZshOD>NR)%Gd_{#x-(H%!f>DKPIi-KyABG)|4~W1kZk9Nxnd<i
zC<vapHOIpqFS#}}RKK%9SY3?oyk@m`v^d$UC67GlBaCD?q<^kNUTpDgb!%HYenv(d
z!f@H#J*OQAdf@`el67-WWbBTgX>IYzC?I`3Q)%n(_rT%+%pZV-?=Za24_yF<!L;#+
zrYBBd%iXpRH?Yhdr-*VepQpoHZlxZQbSNdH(l{Hy6XwWh&ikZrn;U%40H_}LcYqbo
z-{9bbi7ZqQ5og*HUfqnv?fmFN?u0YO)z5&LcTj=+e+{>e9$Mc~(CW(lSRG8~Efd(4
zP9^WKH~{(&kX4fq!lCfa7?JztL_{HMq@+ZkA=q<Gim!8fAONBCrIVY}ir)}vFuLmD
zQ1(;IICCzuCI6j~_m_UDlGf}yuATQqOl(0#_bEAGhvV0dZ@;^C0X@-bJ{gYe!tIo{
z2)fx3EM=!=9H3L??IlbfiChK1RAzdzA*?etv=q^vvWz)5qpcfvk)i7@j1)4f3$xz<
zh=-lIOay;z-~E7)eaw&pyVygk4^8M3m#YIO+x0-#5K3mq#E$-r6%j6Q5fwjX*|VUt
zJMCDN3>Xs}P!X+v0Cf^P;Ln$O0cdEG)8PKzyI>>-tJ0!FCd4-hkSbr|H(tau%e@Y3
z=OQr3^)0d1xtqUVQhurZ4OfUo9{slVnf@Z<eDZx_w7%I9><12$1&9_u;SuPtS1vj?
z)-qN)G&ru?RR#jXq{DYGnC|-h6lJ~{-Sf#010bciQcT*CYj=|adBQ3n_JMO4SWVyb
zLpSx1MZn|R8Zj=WHmMO51e7Y?+sZ8U>sVd>7N8~egqI5Nzts!7w<!Aym;VW7e(_GC
zpz0s_ZFs5ssk=*4L3onO3wCcb85DL24U^-QO*@@`Fz#uq!*l^(JB_ZBJ^*pJO(c>A
zVZE`-=}$dQnuIrzo6JUE@L&m_5|tky50GDz!H@_HiYPUm+l-IM`Wg(IQ@-iM_^>`C
z4@{C<n1R@HEC#G#x3SxlYRIN=#3%grzdGPdiXiwjw<d7adxH|7wqHwwII##_CFZI)
zhWo#fWNR<e{cLnaXVOVC{8`uBU!n2mcAKYV`2^mx_^D96*S3aY?sX?_hA1)5u1TD=
zE%Ni8ZG3XOW|c+ml7?hjz-@uU(BH`_dunM%Ok5iU?8idUv|+&=Lj2rn5N@%^wI+B^
zJ-hSD9xpDI8Y0*)R{&>-n83if6v(iuF;1bdk!^H_hhs6vnI``US6sk=kGyVm$jQdK
z3&z+}z;x~ahui3Z7~UqHxcBrNMxGcBXz)QJeyw9*FyE{BzFY2yiBBG#GH~2T@GO^B
zLfYY8IkJ$$m`rx_+3Mmh@wyM6i&z{Aqk-J&4<mv7#nMMn5M@={u#@1<we^I+#r9ZS
zEjLm_7l=`axwsvs6^_nHBciQyyL*s0_f(+I?T1RvTg^L@4)ECE{=|M4y&En&`Wb)&
zxp(sNyfxz2@AQ;A6Ei9;>1s^&-qS`1;!$2FKOA`2{L!moN%G8sj-cO2RSf-i3#-6}
zsn8fXG*Js8X;Fx9CgJuVU3KY1hz^juRqN)NZgek5_BA&h+RH7-@$^y-|1+VgqbkeJ
zNO+{%02~4-Bu|xhZOlANazIyq4Ceyzw~DxCNr>8Gd7YTtB##tzV)H0^Dl?K@5}g{*
zKWHmjJN?9Octc2L(Dp`i|1nZLGISP&QQ$7*Rr}-X;@P}aivFvmdqpUn)=zCV)UX*l
z%-j>33o!1nqY28UNt2QO$lza<VGD1xbG{^q0m1k436tjNDi}m^!g`YxAvf1vD_Phh
z9^R;`@Q4Pru&Tbb$6m7l%`^65ZF&}8x3swVqT$o+j_3Yo_kUTrbUknZayQG@b2B{Y
zJ1<l=FRl@Wo#>K{t3nT8JqiFxra5&Rg&2EvD@wSjGZ}u=UjKI@&u36LiN2E1RERof
z#ZimWKkhDU(pH$TaVa1ySTavED})^t9=*d!FZ{A`AiTG7PFy5RC?Km4ki%Nj&f(#!
zwo}(hd(4n@h~Wx36c>UR`n29z%kLG1@P>6{ULiNr26d{zaDUYIXOW$;mbPC^#h}%T
zT(~5+7LH_wa&*g%_+GAQBB;+0HPHcTth{0$e4olb+0fZ+9>tuq*<|@FkNor~^ALH=
z4v#{i$qu&Oe`674T<aNJk~<9A?0xt<b#ojJWSrB>D&=Un&)nluISeN%l=qSE$vax2
z>!dyBe0&<t{=-Zj^sCQC_3>P=-%^rK=dbxhIB8MJcJhh9-hO(|NO1K+&raNr^=FN`
zx`CZ;XyD{<20UgJ(#2Zg%q=UeR(=xAcfSq5#D_5W6GEOYN55RPK%wGF6cY&ysuOr`
zDX^PP`St`)KT}ANz)cv;0ZYA^JMUZM(C_?A5-ovAdx2}U*@tlYf?jd^^V{jPEDL&?
zLiMRXU}^pK)&_;;e1TF4IUPms4m2;OWx;+etWrv}!Zq)tK(Qz2V#!UTK7W@)!#oQL
z0Yo`r!;k(=J^r%bfpMM9n0ni74ogLLarX$1u%3xXL(*In0NO#Fejs=Q1kXJ@^ZBxT
zKs>F|O1k4t>|%<FAWYH_^rx_K1l)9|R1rWuKV{px*`N+k>9bgPlW$P`8}AFH7&sWP
zaG_5`HQjkOB|V@?u0N6IMwHrms>sg;I^li`6rZ}zF<)%TrH|5v($}*jnBLkM)!vL%
zAy|e5u&qx?CGf;B>+37bti^JRdQ~>(ANtBpVGdGDkrk%st;3Jh=$8@94>w4p+Z)Xx
zem>nVf{DuZZ2j`Fv7wEH2@i4{r02*ZYVJ;`l(O;|XO+ixFt27bbrs5EG@l)vkA#1Q
z;kWC>?4QS)Rzu-}SckykxM={toty{FOT{((+)fHc<wDqyggs{GUWto6P}AcG`3VE~
zbB$-aS$;za=D2NT=!q0pzs{w~?r8b60Ahe;=PYDFQ&AF9+86r}>(a(vhd~kiJdwSn
z4|Ite<``0cb;OS=ljHkI>9K$~+BGvGU^MSg{4cAeLy%nekF&{H^6A1ZzwRly803fi
zazLo>B;$J37V+&*bcnO&V2BguAb3F@87fb<i|R6$?7_~F6N3jX&Nwa#>xP8>8OLeJ
zUJ6&4s}Ee-PES(anJ_eoY_*3<^kYi;$wK(8)`m%2UO()728ypV^3W2J;wRrAqKjK$
z?%5f>yrRVk=Z}EeYac<8E8ptFCzh?Gf^UW&YzlW!^}8aTuO|g#dgg@iUwK~gSK&Ei
zH8IG#7D6h5lk2b`JvN^0qW@3<#FC!XZ9Xvh12S-|4$Th%<Q3>=u7^}&JLh+9j3543
zD^T=l?<64SN#ZR#9aZAgZ9iR1wV6=sdx3Vhhi}LdZcEfWQtjo=28i@49+7?H@l0A$
z&kFrMZ^5>jiMa3Z2zq*PwPeo6@>N*)E`-ewJ2<Li*6pub$XUk>+jmhsObcnmh6D|D
z{7BVfk{|gY<(^R3;SHN75fA&m8|VA^^li@jz_zE4pYs%|3v9=P7lseHHv$iKrkDEZ
z;iw-=&FcPup+9`d<Bs<I6O7-~vZAR0Z0>Lqzp_w~71Vk38M7HneTYP-a5`V&I<X7c
z1cBtVetMi2JAbzSnmT0PPLZi<QaT9k+X}sp)Wrqij$#gzg$4Xy6yh1J1`ZEU0z7qw
zP<U;JJYr#p7Pk)Gr>f<r6j~1E6uQr>e-Tb^@yR1}B_iWyz4$%8G(WuEWwXCxAWsNv
z*V02O&S_ugg`B2Wot%A>yzg&`!(-A@rEkgd_M19bg!YGQHLh0@6l7<A>>tdC=UN)P
zhwQ9T`<&lIznJo_Fn;Q^Bw&lWSFaWk_#A^PUjB;F1;W)`*KWRUH;h{dPm2=mGka=?
zjC&;9mkk)L>gAERv%xB^ge*sy(PsKGGoKN82foj&U4&>uHc~Fxzrm2XUH2mS1?UF5
zOpfMB=>o=~JfMF=i|lmYBIP1NBK!lGvQ58mUMc&<L>e+dvJV1^8(2UgK>Rlia#kv6
zjPm^8evYDJaTF4OwfY!v=L6+V*X@TrD7mP=V4wt+0H>}3<UCv%n2m(!fNqBOER#Fs
z?{B<y<fi$l#|oY3;BT){{A}=Xd)&;4O<vUH!2ejZFj_8V@TNJR({&}M2V8J(0hWoP
z+b+AEnr=)~;cu(6?+)iJ(9mUvkY(x}nfJx&9k;2%*$!V)gPVA|x43=kL4E?>A$+_{
zF<NQcck{u-fQa7x4dK*sFI3%oL=^T;LN(%vJDyQB)!piH-F6`~p*I-wy9v41Mp!q(
zc5j;;yKE%Z)!?*EIuz@=Y}yLb)v5&#b0OVzJKajY>oxR434*xy4fF_aPx_SabA0RQ
z)G&oaejL~L+?F7y+3f^KLBvhZq`LMyj=N`ISZC2;_PP*(Ikq~P6<ei?rf&tBJP$dV
z?`&EP7rv<SPeW&x+g^=FWjJs3cz*L5c&(}Pxa<1|EDw<;Sa>QJ5btE&et{|8fzNXa
zb{Tvo;^MGdf_YADQ;WtC%4GkE8$O!B8pj7V&TrgDF(+2GXWD}=%;g^(<o=L&mKSET
zaoBs}GLbsjeHghPGew7O*^GrIoahFKa530(&mRw_W3+n0g|R7UIWL8@E0)%VlOKtS
z8r)Mqj;5;;28A1ZNb}Hi8U@o+rl>aO=FI(z?abj4*s%7A^wblFMu%C=LyLhRy@5t2
zF5S;Z9l?M6>^U8}%TqLl?l<pmltKx5Uurha2YaB4>kl&bbCBiRUp+`WrN#?hk#vs5
z^PIsmb4<7u?iStmvKpN9N(x;DKenI8mo^^!f$ur^Oc=TK*!Z0Ez=>`@yrBHD>ZJDc
zdNYNcobS9o3--|DjEq>HVOFco?rXXl0$H!I_#Q}0*Y<b1&GJB&m%RuK*G$)~!p8EU
z;giyk6(wbiSQQLr8*uU<*k-Qh@`xEJ5lWsp$;NfWAUUBLO9ei>x_^$<cf#g%LI%yh
zer2Pd)3fHLZNW%D)2>)p>sWMBAv1?`@8I$7<^l>WM@qfIpX!m8-F`kWw_ULJoqR-l
zHZ*SL(VshCzv4J%TVH^e=7ZF7DAF%K0!PGExO{D8j+yoD9}J$Ey=@z`Cfnoe&cwBh
zsF~;+6Xwtl+h?47LgvIVs6&8Bfu`Ue;nefXRw>3Om~)ytx_ZI<h3oP&IyZdlh+;xU
zRLuyVTe1uh%v`30-03sE@q~k_7U9Xk7Ez{%W6{tVp>5!t4MYgF_MD)zw_%<Bhml@J
zvQrU84$vn4GVRRUt{n?le&zC1gd1JSmRHf_BVb(6MP*~(HLf<)-ae3wzN0W@tbM{X
z#}INdsMb9>?<cjzxSOOn+0))^8iB?8XmVBU4nEg5{g%Qu&(N?p_OTHNHEjm3{po+N
zOavdMOV|A2KkhlFgH$)YmItuJ>7Qgi*B_RJaWFsi?(2()1-%}i0RKHDwX+FOvOroS
zC@G_!V$h^mG@G1_dW7FVN<sHs3@+s6nR`5a(!Ca~?!%ei;`wj&0mV_S%jx+5E9|YS
zDD?F<OV4?1KHyD`FIga&j)KOIV__omhggb~92YM@69v{CE-FS{Nrj|>m9#9Wb{zN1
zXpE`)*|VJ|+_3)BidHuq#KSF;NflRIW}Is3x|r;g&-PP&4Na=F$n9?t$YoYU^(yY%
z=Tz~#J>rqTYJ1A!`(Nb%&+&#S+=pc9g0sCZeXW;&hlnIH<#YIJ+A)60@w?{z^g#Iu
zN)C&4Q*{mh1&R25&sBaTNB{EH0!a&c{B8<-4kI?Tgo%2Mpn<k>Z)j&kYG?K&s@+{c
z7}&`*-1u?a?-KjBzw2p#RZ8942upK#SZ}P=m&4b=a$I-rw4ThT(0ap~cJDPydz!qF
z+36ixZ}ho5Tq8Y-{-XdhzP*IKt)W_Z*b62RA_GPc!PHZ7!5;GxR{6Cz^V8HOagl-T
zZXvu0D-V_=AL3qh3S`pR7Cg()9`{3kT@VgQ^%`HcNYV-XEtp!0=*fh~p!N%+TQcfb
zcac4xWGY|Ou@14H>?-GW%=DUE4WWUG*nCg~j_Ulb9C8t|wkv0JG}7AmhgzahL|>bT
zuJIk~X>4&8si%m~O-ojO2@4CkvmN|b(`WW$Po_ZffPAX)ms+N|BvpsQW-8q~p;TO`
z#Tu&wwZg@vg>Vww!p#xKi-H}n7k)&|@0uKd*HdT7oy2eTj%@`9SzRA(UU>L2iS**{
zx6#KtwC=<=*0pGIZks{#e8DaqQw2_AvLQHmu`hV^f~1Je{2nRdD~q4Z{cD&2R761d
z(mEYxR@5IaOX_eyut_?2Pt#6!<GxlTcfAp~Zu<N%{j@{0DJ}HtikM3T>G&@WnWBui
zyelhfvGj2I&8@*!w_wS2a`{5NY^7<`6*`Rn)IrFWjI&y^YnmVWRVdzEM!p^mRX2WT
z^+a7cGH6XW6c10X<9XKfOSP!i1DH@~;jYtDQw{ArgPZ%o+=(^|Kl6I>;gOH83FGd}
zGbHEXWwudV!*uvt)*$rsOaI_t9{+mtq0}>T>*BI1cF*h1pC_dL0$jbTmb%(w#UAdc
z(P=8W$<IlhyS9U`&j+++MV1VjQYYq$W<3|Gf8}*UA+W5Kv23SjL#DcuM04_Vf7-7p
z*W&^-#yDKH@&~ce%Dp@3s99+nKoG{{8gV(-<!u?76Ss%zS)js8_=k+iq~L>jT;f6n
zf!E=FPGMu#7LcRi=e(co>(A=LwF}CPcgc61jV6sxkjM@AV;ra;D)Z6<q_}e+>%yC*
zpg0>84{W;V)7E6tm}!sr73IG^>q@*=+Z(?2QcLBpz=hO}%FP3y8^XqYJ`M-pfvD?0
z<^e{scmOSO1ANzEM5zb%x6%vL<7|Nc-ZYOt1`9g#;HJTT&`RhhGGk$y`5PqeQT8dG
zA}s(*l3YFo<O8wSUUHi;u7V6>v9RG&{5QYzdIo`t9B3jvZ3pfU%<+_$w6W{gy|a5r
zH)^i3=Z>&Xh02JU3eN8CdEPJ@bTaqrU)Xq@@%apgL`nOF=e}2>pH3J`D4q}b)c5^o
z#&mIUjhNgA`qRt~T1R<4gkQn8`1<m^zP<r_WWU9&IJkZP?xSRhV01$K8AlxSdAP52
z4Z=<;)H-{R#A$V2Xv^r$OS9>fXW4U`CNk=JiMd@^YxmXM{N_gk`MP3{F`FT!V);;m
z{A43zVPdx==95R&80jeErH;CFonetkUjpOALuUH@dLCJuDdcio9!AdB91|E$-UDNm
zlyS>?T~tSVLyu<)3LSm_vwc6c0Hf@){%dyZ5RJFmZRKfgdN||&a>Q3=*T9TkmdaKr
ztYzKHK(;e)NxlvHtifkPn6y$JVnjRU{R!WoE@zqw%$>OU4BSAn>I8-9c%iJE(QMXW
zlUEv&19U&YFS5o*|M$aSywJROkhJcD(7#{$ufHS0c4pwKzxM~~UomnIqE7p@p*IQn
z@>qwE5ZkafFrsTtx+L`YYQBT2E)OZ223MF&vh!V*Sblhc>F9Tlesol@*Hm!*-r6nP
z#isrHZu6S;y1U6P71e8R-&X3vuJ|&MYy!&0(J@sabwli|furx`QZ-E~8G23>;!%~K
z`ux6{?GF4z(N41eJ<|*GUw3$;*`qhZ7mVjWp3+r^MUZoC0}?f*ZGf0#j15ok`GV&}
zg&%9XV9rCr8BDBj(-~fLTO14qjz>GL@Xg;Rl$7g2?3?@XmyHYG5x>(%q~%s*dh6z?
z1AYA!UyhMmE9;8J2!Rse*k%Vo8%$<r^I{+DUIJXKl<;mN2%|+{P=eUl#Pxej{w#f2
zh3rxeoYMHKp*W+Vy0RF7>)yj?9X)NTq_5Hxrwf>u(g~~<#9-KU`C;As3_(3qsCn`-
zVWH&LGU7F>Tf2~LtV^c{WcPhO9D_KGw>?)dKK11F3pKlM5pz`Xj?35DWixW}4rYCP
z4-f@i7hwD3GGBp|0!``u@9IK;(cQDVW-E^ISV`^yppWK1%J50hS4C0wfvYO;xsN`W
z8l69tlm>Zq?#e2a;nQEByiW{6<O7syo-E4CocHw5duzPe;77_BP$J({L;x8k6bI5J
z+47L@z@3X6+y-%DCI6nqxZI+5ftNXJxVrR~PHT?veKQK%N`Yjmb;B2^$$YSzk|_}I
zkcLFbo~<IJH~9-*ngpdEZ(K;CQpJL<v?KRu#F-cFdi><tY&hoLp_}~TeXH{G)XXwN
zu%gA}TW0A)O>@Hpv()`8?U?VjUbhg&Ut{AM4e~N&beINzx)irDt`PQjFQ4J_Wg7Nn
zDU9OZ3O)_}+!d%!_s0QpWP@W2C+9$Seutmj!DK>p&*J4H$pIF2HZ{SA_5!dYIIg>C
zvx~!?t}ZBi<&V!=NV$vC?0ej~lzpUeq>hQk@qM}GFvYo3wG%f#_Z+63=;w!$-!vK*
zc6=Ty`xYJ5NHpH>wL8F7f8QpK(4jBND$RIr?qjA+!ykXS>_QBt*KO*{?BynVs3rZL
zIu<TePf?rHk%$bRHN_D}kevaaXNwwwrZyBqZ;6yU2qm{li7fTFR#$dneS}LhG*lrC
zeW?-3ZUZb;A@drhLk>jK!gOyR0eN@M@ZTy`J}OM%L>m`I+3PM5ZFWKEiU6yG9{ry*
zo;?Mm9#zPMQ&&3KTV?L(kY>-cQ(AoKBRl$SUX?o@A08Q*HFHVXGVQ_F;EEwwtNn2z
zHhhA9=b*N?gV<fi8~k~uM%vt2h)aGhy#J0DSqo=TlLu|G&aH00EwA_D=dCTPFL;+i
zPK$|v>Sg-vRyQyGp3Gn}TYY)i<pVFCJUmkr_vE~<%NL1h-X#8d5ysAC4*S}nWum#{
zoi3_jlD20bq)F;fy_WbZTIqA+1t#%J0*ay@8w=RC*6zC~r5O?6$o5K-m&+SK{bFU%
zgXU>gI-MEAdEB|Z<q;$iz36?rK<NSAyfAReQ!D)1;r-@2JKEuoiFJzH$s%Al4sD#f
zNKnCF`$Nj7!pO$f>G~?k=X{y@X7yT=Q@e?Z9<NEHW8_*GEL7%Ks&3qZ`+l%#jrDDl
zf&k%DsFuV!%PkI6`0O)+?Pi}9gSvwKQK9AE-yx>yRsj{SW9t@uMkAP4VFk#qW-ftv
zN#=FD!{d)-d)9w2<lXowpU;~Zf#zb|pQ>;=<8ePLTIjue-GDa)_~eiH(Tl*Z4irCr
z^ZBegpxu0uj=kN3EuQISug|~|O2gjm6um^j4=V~c#2AnC)5zMp{(Udv+B^6^18e0H
zFZPp9ol-HoaaI4mNtz!J!X~8+v2p}ejYa1{%NtmP58<}DN)hFSUc)e-l69iNDC|(A
zAfSk1|9RejxB_P>N}G0ZD%R3RQ4<-9AkAe6x!h0p+TPtpP78RApe2A3Bv6%=j92)`
zN-2e0RRO;dL9GFPt#1t;rRaItZfF8%QnEo}yboFQim05+maBMj#Z~Ln;JcjMjqes;
z8b|SNs-D^W{Y|F->CH=le){KA6_f;h`$9|#TNh&cex6(XV0BklFLioIHREfHe`B<)
za@0H6my&_l(0Ji}FO!E{YY|IASh%Kp?^I}qoC=^Qd7>G)Gb8MBcS7KYTnd~@XOlE~
z1;EsWe_4SXZ(~2UET6II^xILbyd#A08F-^+nJan*?C+*C+dT)cP;<^PY%N}sJ!t$p
zVRL0=G${P(#?h*zi#{h;*<V{WACbA64X~E-^nJxcptC}_{8)#Wk6e%oGJZNF`S*^m
zIy3jz3%ce_M@gScwMEkiT|pSqEd`cA+3;_N^bpchlNcX0>*KpT<vR{Rukn(=qIO2s
zVl{^3QPFH+PrsIHAHl0@+!*PZfU2|i>-diAhn#4dXaEY0<j>H2&Uo^wOyhj{W<CF0
zXb$}H$@DqoCH#tC=VhOb#GbBRYyn@8Y`qv0&{bEXmy(MZdg{^r)@s87i}aiTyG%Uf
zcWl|myj`zq3-56*7RM$Bk7@F+&ZTKC@`S%9<nXldGk|G7Rs^=mp0$dwu#V94E#7i+
zwl)hUyK-YR6o$WlL3WGHoXk^h{D{aeb-%^XDfFlm2QqOIR|giQzgxDKXbr^lCv`;n
zUY)&sd?uWVcxC`6H`wp-vV}n#pryyUEG{zo{7Eh9Drs5Ag<#ejUbDo!%+oBH&4dk#
zP}#9#^M2M%MBU{^D|eD)KVScPl!3qdBzUYw+siRhb@z=9+o9$1_QVV}0k&RQ`z$}v
z=sl7&3Pq!3<dbD8n=Z8Mj#g1>STF)<^XO=7+igA#b-dfMLxQ%%CJSk(lRsvF?Qm1d
z-s4%+Fcle|D59}TW`J5^sVTvA_Bm?u8*47FF_{T^t&_O49ef1T$pGEcXjfC1sQ>z1
z1W8HR2SuQ%coiL@kp9rELw$2rdFKFWEz<RZ=Ma=@B-Mo<fw%3sv>swe)dt$lKVa~!
zutd%HI+oPr*~G4^7XFNcW`23Yf9pBQoV#R-l#$n!z0gY|D_fu#@mMz5bkC$f#V9$b
zssZ;qpFh*PO%D4uk+wAEu*%J#08N{7jD&0ogYk4QQ#kq23nKG$HOU&RhEtU3FCZJR
zbI%iucXE~5E|K?l%K54bXfB8biwT1FPx?I$(swCx%|FhK%b=nVLr8C-wry=A=gz4_
ze5Blv|22J`MCZqZ)3`8sDP@CxgEJ?_UK|22eG>uLC9WV6W2`q>bo_L9(c|IV;jC}}
zmEtXss2NHqvRgd{p?spGrhnhp1OKhxyY^-Sl{^!9O;ZwPotbA;<rDP3PimU=)<xbm
zWxGBmx_kY8F_NX^+tk_fWv?r47soy|>Q#pvtB4-^Fe%iIzyzVA$K5F0H64GiIJGsw
z=(+_(jn~*eC#3D8?GqPx`qt;J#}0%=OSBmYbLG;LP8tu4a=Dh*3C*~gO%UdFtdTQP
zWB>5shrm&<Y8O><K%U81K<)7)R&Dx)E}0P9vD+`pubf+0iK>f4&%jel(*Rdnu)Mg6
zb+A`Yi_JMyjDn(^S^5_nvXAE<{V{gRcm2Avo#WX}RwQIe@|tf05~gAL0{#R^+)DKf
zCV*}`URSnR#s&Y58?qmw7{WGhW(mhGkd~jSKz{q+I@l$<J>bWE1T-^qG89u04N4tM
zgO6v$!-Wp-*`ak&VcFeB13}0Hm(I7JD_M_!?0g6F%OO4+y~tz*VD&Qs^O!KZy0`2<
z*lb7De*!tSpUowIilCKMS;B_r@(86x1j392jxbf-LFsMbZjQR)mvZ5i%XnCaP*^gV
zR%^T1$aWIdB3*b=%S}7K6*yW^t*^|7`t#S?sx=#WW-0m$UO@vQ-_wr#GuIrpkzTj2
zLrX6ZH0$4_zE~yMbs7$H_>$iB95mawv@A0FZ8ZKdQFQI?MI2+`tPt|aT_5r?cNd;{
z>K4AV$;-N1=x`7V<JILQk%G1#6uRp+f6OfJ`V}88>}5T9Qhl53@mwjX@UCu;pjw1~
zeve0sW))E|?1zM^l}mxq%4DZT(Tb!)2*6+Y!`>75w-zTkJFf*f)E$S?z$@XYYCO)3
z1wJsa24^6U7>1cSm#)3F8oYPWri(V0{Nv}Z>z-w%lM^1@0q&m7k?g2=XmQhO5;BH)
z19c3;;2i`de_*qM0ZUyrh2O-6(Ed3mh}H$6x~{a~N}Cvt$!kw{ZbZ>Oi~KV#991pZ
zX_=<29XPWn?X$l>+3nT>`|!k^Y>d$`4Sh^nshRJIatMYsJLc-B^Xujv$J7hJ@946G
zFOt?PS_->QgmlZBSdvwPX2YAJ6xAh(f{4x1+7bR!$hg>+Ca=0`UCRolly6{dv$(5h
zn=}g~W1WX2a`V|Bq(M{k7i0mugZ9Gc+g#N8w&iXMuGd3$wcig<{!Bj6+JMXJHKhTC
z@N}_dxKeb<BaL(-sjK2N5rY?(tAlj|OT4pr0NQc!JH^Fv(iBG0SpCmVF_QNiXb)-?
z@mH^GrT<2k$_cX!xlzdr<ALd2NI{<2>n7)_w&T(V9xqaJhyw;DjU>?Ng0tK&|F1q`
z{+!S%fA-v?B8uNN*LPjezR2p`bBcZ@+iHdg!vY0B&_AF!hkV#gIH9T%^7F;x64}i+
zbq2*NGI4~!Z@)8WH*VZjWi7Ec{jjOMYhHCT(npf-VplzfByC;fvuq~2bILUyN7^^8
zOoaG(j>snETXpB$y`LZ1X6-}6weEv407(wXYHP*$^x1lW%y`u6TK{n0c_2~JbARe}
z60L@YFyn^V#_ns$F7CO=>#{mt(kbeq_V|3uZZ3Y$_c$<hdoO}2Fetp8tG~4dCu?`<
zpwwz1r!Janwu8;^R#9qcNi>-mNsc%gko?T;h~tJFH%N4^kRHCi-(wJQmVPPNWIIaH
z(O|UF>d}2HOnb{odX~DXcn&iE`>+@kL|NE9;~YdKFA6A^E3jA1U>+b2s}J}VAgGSK
z*^9n3bGM>XHMd_B=l>;|hA<8N;fHS8T&e6VHvuo4_i)dIYc_H3+`5EKAgAH?bc}LI
z-8%LlW<K!S5BR?CAPV&<@~^Q29aNo8b>Q$7$o(_@y@IngiU7+Qi81y7+3HL<c3&Hc
z#dhkV{%BcrNCs)lOIX^K7+F;Hgrh>xu)jBnah=R92Y(P`zVudg_ODZ0kAH1^pGn3n
zn}*$;V<aHg545^U)w-j*l}_4Y=@F-Vc;I>wZrUzAcDVQTyjCeer|0s6GPkxD)WStn
z+ii}6sfhdj!?&r^Lv-ikg29TV7fBNSQ(2y22`@Rw!ezWGB)RYti#or31DcExER_u%
zJavwW@idbu7jSphHD1z#_3`p_dq&eR%5>V<5V(4Svs(_kgXai{Ofx1UvDtK;qd~!+
zxDpFte~pf^wx7yWay27UakY)onYk&bmQBZIX&=Mz%D`tNat&m0Ghnjwj8#3MEGXg(
zyeXDx%&j}*!BAMpEZ2++>&&zd_Xcg%o5}BMyPsF9ztt@;zS`E@GYnpF=*U~IO;+1(
zFl_*}M#8V}?!&@lRsOIi%cpCBa1j+ES)GdByLUdHKD;x3{mVBC5=wVF%0ym}4u*M2
z(Zj9ECBZ}1+pK7sqF3O$0UxL6p;$~wAG7cQqMnxiDgI4@ix>HZ)n0Gx+vaRZ2%oW1
zCh9E70hYRtc7Yy=_&cfVMu*HDF9WP7-DniL66^-n$fX3NBoC!Y>Th3UGTk7gYkfWn
zGCgqHA=6=dXc`N%I2jTi?nb$KQj-+23XwZ0rqiVI&A8XzbcmdkqWot4%%%8<0<tw(
z^F%>FEUeRbq5_sx_-&f}ob@lbAGm7}BsDTryFrNo_r+0i{Nr{qw?I7v4Lfq9h;;vB
z+EI9DfH95Rr}%HW=fO%Jqs+BHauwms*G{78Qk4|{5HK+hPY}F0V%vQ8{)4xjGQBBy
zIQlsr=}3Lq;(LW`?ro3+Gnn*W>7ArgtdcT7MK+-`Ouwg^@<8qTQ_nSCxo3aOUg6vW
z?lCglo9V|9KAWbx=H?eSTr!xT#dF+wiN!L|q^Rt?`<d#8Tl#{v$756&TVqVlM^GIO
zB$N5#Hx4tl=B~#_rp|X8*tz=uy>JuqNA@?jyZ~e5(*Sg*s2oFHf|03)-_|+_zk=%E
zZ{q5{XT{O!<cm33eRU=0HxNZ6T94cy4E%i+-1G+$2GAo!HVoqh1$q|o@LApcoEYco
zeO2oXQvQ0<dQ}o<uAQ#MQr_m;e)ciohQ$)Ap-r60HCsu`Ifbn3aj)P@%Mf1x6}*l|
zAB5o1*{D!yu8kieD}xTFgi^Zi%L>@c;*qp)!9n6<=N8+u<$2f_u>dK5E5D(xXIGhU
zpsTVLdOqvYWH%N?TV^}eoxFSnPnNz6UX%@Q7ivqqH+}Qo-0zfsao+lBz17x1NL|m~
z?%z=a9w<Eos&-)hi`N;VP`~|uSug2~9V45Fh!-5tu_oR33z?Oph=n^xir#=g2)TeB
z-L0XvI9jFb(krnu0Va?`fw#${IYd-v^!EtnX^1XjJKm*#U(Hfkp?q$hbJC7iSwtB8
z0}5~%<E8zB{i;6Ufc3}WX~8RFe--c2U&TlE3_+l6;c{bnwM+MJ*RGzJL$;bdoI?DT
zN>HGT6+f}78DgR*kL`(W;#vqXoy1oi!ie83yX=L7?=&BCZYN0kA*2&}QB4>CoIe-r
zWb5+Vnl$qPBf~|=-<~EQ5Y~LIPqU#?$=FsKxbjdd{))wA8m2;rd=|(6>?}>ERGra2
zYS(hZW>f++U@+GheR4jY*`VgRV0mWox@l(1#R#s7TeXzRHy_MQIBE0>+2f1UwQ+*h
zpPRe1yTybd0yW7S43JTT8Ss0O;-?)yO@S6I43zNmEsUf6scz<#9^q`s?s+s#&^KYu
zB!1XP;rYkCISC5mEvk0kfbT%;-1Yk#AVew!$pPmFi|Ktqnn1yIe)$roGpFUYNXN>-
z&Lp`TFSXzO`ssX{levMkJ&1=U_Ea{eJ~KtazR%nt-T&NR#q71oT{AKY<@><Mkq!@d
zI*^}2Yn%9c{q@_d?ELyK*RUb8B8d`Z59QOiWM@LMq+K#s$BX^4UWiAj<nIZ{9t(fM
z0~_hc1j81*#;mWeCx7?|eqj>!QjJ{H0Jt@~roT=`Rc@UO<SzO(D-2if;Z5C5d?I&#
z0yDUVDfi6s?yy7M1${AC4dW}dY4){2h#QPBy^)F1l507tM7f-n;7;q?(e~VOP<yz+
ztbsi~#KSHV;bEVF9N5pMeTVw71JuDh83m5*Hg?!=V7`ga^UtVy{3QkUKSPKKi5#2H
z-2gTKp)@4qA(>d3fkSS>!Qt@ul>nel_5q&-wj~AjtR*ISzc$Be+)iJp?Cq5n-`m0O
zYI3LxMi=7v{x&cM7BM0*Py4$9L<~jq>W$wd+e}%<4FjHrSKNx|TjL7S_@sLl=xLvp
zt}L)L995C3gcx^U7Q%)E{W>!q<l1Ny){RzUVyeinUYXrEZBEly?#%beRfrKj#7dt>
zr_wFcTw4OsaAkk>UaQ36)Zf?X_cZtPvH-OW+*<w0`*rjhe`VzG&-ot+NZrs6xuFIE
zDY(C|YSJxE_}M}E`Q?sr@)3Ddgh(8n*Cp-5FVF9qGFbr?KrO5m=tlB>kX8+Q**SlB
zk&FQ9z@bJ~BrE@Sh+R}6mqCKPNgzL)Icm8Yt)ITxc6^-oulOBwSW;@7J%)6!@k5CI
zr+!uPk=74uQ>!zPFZoa3k^ZDRr8?EKd#>6f`AueyH1tv@&BNQ4T&qs+Y?J72T5-#x
zZ;5rBOUU1ag=14ZFEAeOaQEC>+OxhUHgnZX{`I7F(rVc1pn}li8KU&mIp&VzDqkt<
zofF8$(mcxHj4A5R5wKGYKJ|Wxh9h7c{^SH!zvwUn`Deh6A>e>vgfYUQhD9auH^`&l
z!uo#>(EfpAmKB}ozpNW7RR!}QVF}xdEWn=^s0H0Lcw5(dE90_fmNRkF?~MFo8IXx3
z#evmzvW<r3=_Ym?VsfgoWBt{RSN$X3)XVZ`xktJFdLpuP_t@G0+S)Xqe9uOO`c-oq
zlI75{^n+sIBs|?**whx$DHvcr#BLwwy7m?<Bdckd*^k|bbtJWap3C^wIL1%_m?mG@
zw7mT5>sL60hkCJ&bc;<~!i?)HbpXkS^hQ<`lEj(;V$b4Ip0nQ*q*&LZRMY`+{xy;f
zPDuM_rsMpp<Y{sKhs`NZ^k%M8@H>B@#2!M-&8%HVlBoSp5Iv)RvGp8A0T;#ROcEVD
zOEJiXm}08X8k90Mt)OqYm6#tFZ@|w)kP;#5OUe!g8Kack+_&=v_nD&!e%I;O{lB~Z
zwafXuh?-I~NZ$X3cvs;60TTYTysY%CqN9xE-Z#_cR+Do{Uy7KqJ2m2KYtyeW&*L76
zOXv2U?)Tr&L+rWIaUJ>GPKla4z4H3gtDpEhK$?z2pkJ6Hw$b^dG<J2V?I3>kdKl=Y
z0Bu+{;a^Uj&MqTZ{p03Uc-Y^_3+`~`pi>XDR4K-F{@3ykrV7~oDel81QYIdH${1t|
z2YVj05{=Kt;?ozX0Cq-<J9b{F2Tdwvs~SRrruTJ`GH>z~ub6zPlWQ4_6kDSox#EbP
z;%fCL<Maz)W9cam;D0x}9bl7O>xwU)K7X^6a$y%NF3Bib@K%lyk<q*PY>~w}x3n+u
zh?bGDyLuNgUDCe(NGq4=;=LfB`!Olu`jF}B(|k74dZXD;KPDCDX<vY?npFYJ7eLg-
z)9bM><@Y-NOUst&)Ej7(JM6Of6sr~OxJS7m>9f2@l;C0m@pcB!is_#+%XH6=zoh_#
zZgD*U*&I%MNfG~Y!{cYmX3KGs`Y&*G^$Ud3qBA}*H_@Q=2UJ6e-1wKMY<U#xf1WZ!
zR3ReHpycwj(IU;Snt##KSMduJO6f2SR=AkK9>BHQ0tPgh9)H;u+C8)9^F0b6Ro}Zp
zRonyE_e4dyyY=2wty%Ck-OS#*Of4e6a`~^nlIgpGN3h9OzkMWa-0+#@UZI*@1(~U<
zm8^I5T?8E>VlTVnZ$3qKqXSlo3WdWjgQ$-Q<dDd)^Ax#N1vI*!JAi!T^>6vey^HXy
z0VHm9W+f?DN#vKDRwT3d)q4<be|tnS5-mPjeF9=)TuI~7G~?|A`uA-F`rDVuHwQ)D
zU;ptuR2|TN|6H_&Q-!PBA(g)yZge*VX>MF!btG!zOk#{1e)dvPT^(Q`uJRbvf^(~q
zf^4P1RE;r2SB=qsh{tiip^6&@6|TH6i*S7(Z?ZCDEUr9-I;b1o`Gz3o07BZu^y9z}
zut@?XY9^u|xIicdp8zcCTnvs|CxJyx{M~D_BetB=txt>_7~SUsIlk0<pB`iNO?Xy6
z(jPUfd+A(fgQiZp#=WimB!i14D((m6W6oFeWiD}8^EGeys%|G+Rx}VGXV$(;{Fj1J
z_L0lF^)ZoJn4(>&MSeZgrT)`x`k!Fp=Pf>1n-WDm7vyBFpHA_oYy6|Er9LUeEA&ZU
zPV*)wHW*M|Y?s@1=%+soiFt@xJah=6GzqQ(3JXFLuquebSM6jDL9{?blJf9r>T}oF
zz&Yyn=U2nUvgY8Sj&YN)%M*d*vQZ`qW+~+75<Ha4fivWJqgnc#9&}>eV!Ky{<7N&n
zT_~pYt%*xfypdcBb)vVL``zo7{Z}udx*)9Yi^qv)r&I)f&m@d#dcAYoO^*OKM^v(&
z*6Q_7r=L1lXvF*rf1#&DP)n@`+>LqxUjfz+q6(C_=KQP@`4R}hc<0(`@s+x`=IN{-
z`>HC%w0~7}S=80giCg@I0R~JB(0RpyTnyot)IGxP7X)FgTCEpf@>Ax8V+wTWUT()3
z|Gv>9ya2*}cD5mDNM0k*rt2GJ(>+5zVGn1Kc_rM-UnV%rV6Op~`FB%X?-bMt2e3$@
z2GJSJdvAx3ryeA+cIKAtoJvNrPnrd}cZ3YfbFYsJ^X%?6<%w31mn%0w)lxw97189=
zw6E10f8QMb81hQ)9?wKW@AIWDZ$7)1CUV>#RP8^X8J@L$@Wr~1=bU{&?a(1<Dfab;
z(r9}GiexGsy~i<)AY}_%v@wGdlD?_H5d|Y6VV_gYGP3txQtTt$!aMv%V8Hk2vZL^m
z3*x*|W2$3L5H>e{SQ+OP(Ab?-t9K^_5__qLr+eNV+}gnsC#XVFCtuPX!AV{f%@B(K
zfhIlkN#CT{rUYQotVb2J1Ky-_xAbN1hM@li>g2;py!^>>ceB7Z2B|MxuL0yB*Yp(=
z__985`<o4SaRsQ8ulFw!k}pv9naLB}v0I{zW8&WDvk%hpvMRZDcxPEd6;xMDmIPT*
zm)s7Rwe_Pe2;1|iocB|^FAo)AJu}%bn{C8=VSs+XiS9_xHf*mOQW)zY9{Z%>bxGFe
z-C*)k37AaE40HsMQCgyjFGIcEjtwivPzIwV@0WQN7$08m5Sp1^iajyyOMKKt=Kh^w
z)kzSG$$e^+0$K8^sRl#i?BXJ|>_vecL>la@!6TzCKE)4?%2^)iVE&oTl>$jkrl2qg
z=Fg1g-ifEDB1e)b>uJP+MUMxT%-+lJF<v(AYc?JN+Hxfym4>FBo~FPQ?ut`fxF9gY
zo0EKEjmUKbx!6|5SRj^10Cryg0mm}Iyf`<I!W`)}W4qJu!_dh?K5>~PWRgZ;GAygk
zsoLy#f1b(<5*AM_ZLa4px2?3<r?o=YE`D$`Wg2j6GnbJ|<%LaE@;ltk0~NKaUm8c6
zQc9rvC8dQIL(@K}3I*i+vtI55C7JA;;w%pIsU}n8wH97Q>t8|Zdu)cl?I|_>O9`U3
z8CGImA8^J#m(-VLpjMLfZEw1pMl7y>?xyS^Q^0*M%Fk2yO3yP@$fu&EK5oT{rXXqH
zQv6ctfW+%JL<204blXf-N`i6|r|d9S!#{dL5$AkGzB0ON767z#0x%2rqIJqKM18Ft
zM<@FZj42p<9J=DqJ8J>k1oP+xf|mX}k_4+nN-PWj`6Hy5=9P%uW4F69ol-Yfvp%H8
zcW!(Su}VfyeaSi97<B<~i+V1|q++jemG^VXyV(rQOQ*H2XGXmeVQo^;<2@VCpyW<{
z|E@@eWJ%d@b^78HFBIEA{E-G7JD2vW=v3`*r}MDfC>huwa6yGbs9*TLQQrkdmyD?J
zXOu$ZThn$GFwp=Xl7G}oR@<ajq!87)m!B81YYC=8dKtlG0pT>fe&y4zrC$Vo*$f2O
zx5CMrr2k`hg&=b$mcrekkYEA>6>p_MWU~I@?%>p1?odf?`1_OOc>c~KA2QjL+)cd*
z?#OLy(#aIoz_&c|iNbzVcN@6)sBTj_JB<F9wISUDKa?jg{njGOnBD#w;cYoN&xlv9
zH?%dfb4A=!{0~8+4DK>1H>hzmW)-%kp^>In+%5am6fAQtvMU8%WW}zyYkz=X(dRU_
zL@Kb7YM{+c`1^}jt%FCoo~IzK=Vyd}-`{ONuzc$TLR>|WPJoPuMuKz-WF+Q3@ui%E
zIY{|R(zjLwc@SBJ-fpDq_w58_qFz3QHgrdn^2RR`WOQOEZ#;wKf<yrjK+e;6)Al+k
zI>Sp^_}qJ`%buH~6mW!uR(k<PLFu&3T4H3D;V&ZeavOm^8f;&p(m^nPe=l&92t;35
zdnNumsir6!;%<Idnam<{2Jsfm_vY@s(85%yaCSTN(j8f2P)%L)q2^_JH&_LQUOccC
z!GH4$e)94<pD~qZtm9W{PFBg6fF{%+rKr7RZg?_bG}x!TQK>1l*Y9pI3d5taHv+x?
z0$zX1`IisFpjr1yLv~>mvMLWt=XO5bip7mGKO7a;4KE4M#ArS`sRkj`6l6rKe%8DS
zxE4wrIDDhy2ZV?J-8TIZu^5GDx3_e`COvS+tIyJqT7t#Te<uIycWHWRcxKj&0V|xK
zoGF-w6k+LtYm$p>fBLn4)Ffa3LV;@-$5-6D_(6!Wf<9HeQ}<VL27NMyuNEo95z3^#
zN$q`39~Z^bj<fvMfs>?(9-<;p0$UU;h$LvGU;g^ch1b46sZ`O{o@{rrFT{=dGuAL2
zlr%8DWA8hqZr1B&Vz0?H8{l@E&psOI{***IiKg-VX`KZdUJ?+<Yn*-)RezJl;vP?6
ziSfJHGPaM5O;m<gv}c0V-tCeW?qm2v&Q`vJObx)4iq9tV7!*D#NMy;D1-b4s@G*L+
z7n=%<v0zJ^>qpGK6x33T=3PajPYM6j?}7{l_VT=oy661`e+$5d9WV7sF%$<s`a`)i
z+yK?C6jFvDY|T=fa*(oIQU~-{{*tJ1V0c0)-c!K%(7lv#$zhN|^*T61`V1B>E+{R+
z@C5-@_Ag5Hi$t>AQU|g~-e8LcwHwitgXn~A7a9bXy&m6wTPX7W?GvGXRkM`EjEoE(
zKECMv${%k;epXL|EnRMiUl5y)sHtk$Tl1M<#Cl}!E)_eSqD`TuVk{FD+ueK0qG4fI
znA_v|>p6`bUsLG^^ZuD{>A4*dTzcu(zJEQ9%@)=h+az}J@Ai>Q<FiI`X1|ik3h#+k
z!0u5%sSY2aPfWkR+^zOUqy$Ry?@EDO3vg~q|KVEn|A%W~)93^~XUb7g_2Tvr%zyPa
zPSO>m=|r1!aZ@@K3BYo~UC*iefCukIjzB4bi5qzI;_94JcKts86QaC~?|g7{H*Ms!
z4W;k_B3kaB0V5m6SIjERG+at-<da)pR>fb`W^O2wY1n`Ae_}bbz6`EmS+<NM^gQGh
z^F3yOEIM6OahYt(0ZUs*4W;Lr;{|6=Ow}rI^RfA|$0NtT!S!XgSy85~(RDSQ<5ZGe
z7s3iJiEiwtbc2-CF4sDHkdivkX1M6G=sl(U_l0wd98~3+w{Ky3i_+`058@VjcO-XO
z^Z4^wU3|t%yXCoyGF9{odw%V6d;J3;wgw&vJzDaFjcE5J&5++KQ{P(B0-5V)G)<2k
zoG8~%1u)aK&4(D))cnT{or$=j&#u}tPpiN=y98Rq6p|1h#J+M+WFe>SdXq<q+~U&(
zuvcCj-Y@N>w(jYIUg`Erl(@8{qv)nOsQaL&mOC4xO1T<SXhq!JIbGuFz=e&eT{Bv<
z_bK3tCAY1o@A=7ZyuhI7>`6LKPpIZT)cJq;G4>QO_D=fp8s|FavF?h9%FnLQn6G9-
zdf5GkJ^8<@Ec!UohT>E|-5lmSinR~=Tw?$a&VN|8N4m}Q7I?t)_QU<t?u;h}RZR~b
z7Mp6DRNR{gSx018L{AJW>^0hyaUOMI#xA)Q)CuvsOFa4CAN=3x`QMk~|Bp)nn4fFd
z{FyqZr(V4c3>3aJvd9>_WFUWVLGP2(Dz<p+8*;f=a&_vwE#}?w&w4a>`c2*3@^>6k
z-l>^6VwfZc?Mp=4!dLf-TCbQqOiPi8#C=%u3%PkSifU5bT|=po&{g^hwJa@7`@etS
z|Fbz@NW{-q=*<632Fy*HD=+^@TD~h}5V06Ug-><{sQ~t?T4`FC-Eg`&cql}e1FdvF
z$<kaIpz*gC?`p(Ymn^ItQJ=qWX509x^Cd}XflM7+&ybBCADe}pTW!9c6wy<CwQcZ(
zj^jg7y}v}FDABd`gzmf#@1?HK9~%I+;gAfD<21L#=)7ZQDKmYazc<+ocl)0oGyms5
z@&hD_@E4>H1W|0XYKOvRMbYSyZ1K3I+|!4`Qk||JII7;SkZ<W>jqYt|6-u0cwgoBD
zqwOk_xxvt@K)nSqOXxR~w!brYlKXrp`Q22I_AQRtS(skb`J`KxuXtWLoSB6cvE&xt
zYkvFoSmAU5_YK5$aE?@c1Mr-RlOwlMTu~g!P!H&d${UsiU%7JVK&7eh%6T3qd)M0!
zI8A#=O5W~<^YutxZy?IRHtr_w>C-LbKNHjP&%}`bU!Ry(z!w1dP5tvhWW@=X^=p|N
z*z3Dv^ACmiIs>Dj<#=W3@sOZD7pNOIUFRP=U8rSW7wjk9mfs)g&056LMcwHj*}=9T
zDB*z@Iy@6s<?zZ4W49#D&-l;aNw|MT+wG|sr#l=dxcJUFw_gu6-zXK$6k@CX848cv
zg%~_avWRbN*UB=bJ3yq8Cto4*-|_lf*yS&Y4_DlLKjxaeXIQPp5;6abm^WYPI^IeZ
zLT)Uu50!lPS8~;>(?L1>JO2F~(*OA!aadE9DHUy)&Obwu{lL+R{rdoF>7GKtZQfxo
z6dntBkVzyW9(yP$X@WFSyy~fRe@AwCLKz>ZJHF%aY_8Y~IMI<gu6WZ__>`cawmn>n
zEqL<az{XH6m-N9YRc4XN%Z7?K`()z!tgzBGMi1L_K~HAbety`fyXFjmn32Auhb|mY
zLE~$6#N8>sR<XW)<NvgGrC&{6d00{w5kw6jphDOzC<+3i78!#i63}6@fIyU;ltm0`
zM*>t{_C=|(NEIlA#efh9Q=vA5Kv*o`g0Ub_!6qRH5fPFYF@z-V+n1i6IrAsXhq?Fb
zZ+XshpWnIX-g6f%P>X3i{kiylz-!{xpBJF}YLFU7Co#=qtmVTmc_9*DEDQQ?7a2OP
zAISU#Gh<TPxnJH^H>n_Z@>qQ{b&1<NL*UfD37}7iD2%uK@=?BJ+tc)f2TqXH!8JS4
zwb&U<X<!V?=~X3Ewo_q1I^MZ#=1G0X-4#Cy{T~L*hNaAa_26#dcguEya^=l-L;aO8
zf71>Yjtf6IZ%gG+SDtL{rTd@UtWb=`%`Ald+`mQh$f3U!Pj+%kh~+U-DGd~A&68pQ
z@lc4!<6^G!vJ8LG!}^8>VPb4yg5us!k0__DJjq$IGqok%?{=f1{fp)8@!9%F-|#@Y
z<x~|K;mEaM3N_7v4{8-?nJm(Z<=ZH8Aay!CS5@!c#F_5U3~I&q7XlaG*A&qq1V0PM
zuz3q&7U@vSksvb_HNxr`&43qAh`JlVU|3nKurlbpl9er8kgxL!t7U7ThihhVPv?>v
zz4G<%F&j_{<bOk1LEpLczXfGZ8U`pqPz9;4No{mSCI)=9&p%p9b;zkC8ie%ttj~5r
zc*r^_&S65cr+cMAJbub1m&~<(4oqNQ?XVeIH8`*Cz8WN7K~HM45f~zUN3Fo;ryXW&
zF8mQ$cl>}P**zZ(k)WjOB1f8(SRxVtNiUJh&2^qFjJjDi>R0!ioEP$Bdoj2QE<fRu
zfd;!{CwhQv*S=U2P)2qv`zEsv=Z)A&p0}~emHIS@zza@0avd$K_;Yj!=`Il|B1T0A
z4t*N&>~jHJ0I`v~K3_R*%>)9y9`o*%>xwTkfekb8KW0o|qi1C}V;iOHNMv?Yp!efp
zG3aSHIw;R~8tmwMX<?-z0e=GvS;0cPqR9TZ`0<2pP5ksQyTE(^@}qJ+KaFp*N~b8A
zh?V$#A3VCtq>}tx84*EaVH&EYmHFwjL7Lbaw2DRgUIR9_veEJDU~A*J<c}QmU?jWh
z0i{d?qRX+vl3~dd8R!8bP2SQ!fo&9fYIgQRi)C+)JUNI2T|$70%du+$)=(xKukaoK
zY8i@cx=7Hg!_^f}-4-{}f<`;jIM{>LIRJS4?|^711$yi<a(PjSKNA(Gp%H_du4YPw
z{}zFNs48T0FGXzN`!AFOKOyZQg~1{IxhrC@InLR!Ja??*nw3!Lc;GX$FvM9CQY7y$
zyd}6T5TZXxP`%C4n~l#{_pUI60<>bQp|5XVmUa`T_R&dO)zxnohT7M9e}K=J=`0A>
zqoU@`qYcEZduVse^kJ!Mcp6*g&FYfgO?9<j-%VmbZ-9#jq+|iRdY2+8drL%xEAkdR
zFA<UN7~%6ID4Ixu9-6#=a}EGqXKING*)uXLHN)L+O)^})>%6Tg_MgS@k{0z3k0sNu
zgxuDx!mvq9wR}1zJN+Xl22YyR!XtlaiUjZY@}4@V)F&}ve#=~^)Q)Rp7W~$JHEj3p
z6$xy(h`8}k1a@5*TtJvbW?AlGb4@J&Rs19TZ%m%RZmI6Y^;OUl;dEldyDNwZC}nfr
zUI$8l)HgItDKxO`ieg+^=T-aSiqfm)Aw&uH1?szCVG}p8cQ>9mV1xSM#D}%h2h+po
z*l3Qa9(7)#g`?L&dNTE^QK_WS<?W8GS8)+?nO4+xqm2INihx8KT8dK7+dlv+!oczD
zv%N(|<h1dkNL)l3TshGxwRh{y8#A`Q>J-D!`}=%Pkv0k{>8)yi!q711@bhb0epOA<
z+ftv&OsUTijN*OoVlXvsNjWo!!ER{%*s&{FJg4P3CFV={8~^Y$C>0`Pk|6b*cLheK
z8TE;C$|dE^%;p;+!8QQo@rpV^9Z!62jCq7Fn0D!bDd^B)0v$&Db5bvMh!<YSH8C;g
zE9aDh{Uy4p?Qtj}%Hg%35iuj5k{{K2EI(?B#XaAoqL)|&kf4v;zP&O&DikzXs52gE
z2%G4fZJi|(!19g}iftt$RMs}1Ixj>KIp7{j?F;r%U;?2XpnuvuCg=P<$@}%IQ1e+A
zAeEU4PUaNIYWwZ0np!K&M3~{Ur@jI97ZSAVyQW~$aOHg2xYvSgFqkhZ+gqozxIPj^
zu+FMsanP+gcZS-GNGT^T#Sg;(&z19)GsbU~c-;Xqq?B3U-E`~a7PnuUZO+Sa`g*8G
zBQ(^sGOY(D&3_*U9ZUIe^mD1e$J{UXFxiEWXKILau$kk0VF%wl>8U~2pj-6VsLoQj
zOzggCmij!(`4TI|nRH;bYim}dK$a!Xv_nHT#r>WF6W(%`3D}?hOHgN+0MvV?#gmZV
fciYU3@P-AcXA?LjtA5qLZi1WVDQ_&zEj;T_ym`l{

diff --git a/example/k3d/assets/logs_flow.mermaid b/example/k3d/assets/logs_flow.mermaid
deleted file mode 100644
index 56a5542dd663..000000000000
--- a/example/k3d/assets/logs_flow.mermaid
+++ /dev/null
@@ -1,9 +0,0 @@
-sequenceDiagram
-    Canary ->>+ Canary: Logs to stdout
-    Agent  ->>+ Canary: Reads pod logs through /var/log/pods/
-    Agent  ->>+ Loki: Pushes logs (remote_write)
-    Canary ->>+ Loki: Queries logs storage
-    Canary ->>+ Canary: Exposed success/failure metrics
-    Agent  ->>+ Canary: Scrapes /metrics
-    Agent  ->>+ Prometheus: Sends success/failure metrics
-    Prometheus ->>+ Prometheus: Checks alerts
diff --git a/example/k3d/assets/logs_flow.png b/example/k3d/assets/logs_flow.png
deleted file mode 100644
index 66075e56d52d8f283b95fb1ac597e0de4d82d2bc..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 103519
zcmeFac{tSX`!`%7;v+;9LMbW=NkWzuDQla3jUw5zFEf)=%92)VwyfDE*(Qupw#u5N
z34=jlEMpzRjNv|~&-e5DeV_Yx-^X)5$MGD`ar~a6zZma%zu(t&Ugz>U&+~O%9$zxl
z;pP<P+_Y&E_r(k6u58-GM%c88^&Q7n_{*@*qj~tT+53vlnN3A)qNGimBsN_<clug@
z&Gf)Ff?Lm;=G-fc@6|Jj$CHj7;6D5%{szZ`{YdTOm-ajSl79K}&83I?Uk18APyeXB
z|D{y)!H5gbw<Z#3xSFaV<obA9J2J($%{+LPio^yPQ^_UE7PGU+loINALCLZ`mEhg3
z{^k7LO`BO*Id~<s{-<B`_3RWv>7{Gc@&B7ITw`JJmuC52-^}}2Lc+8CZtk}K<)eAw
zqW|{)`pVyb3H^(Oh5FZ{#Q!p&e|?|DfBb(lpg%ADX9@p^7qt10BK>34e@q4(+#iqh
zFSq%}Is9=B{}#3XIEO#Z;Xkp~ALsDLIs9=B|0aPy&f$-9_)iJ^aSs1x8h?<(ALsC&
zrtt?k{BaKdot?vMt%_%z?QFq$ul~XkHF@E)5>JhYA7xrEL>`IlY{?R8$LGd!@J>YE
zrQ!!)_GyW5%2q7=HCxEtI;|118CMeSG0ia}@Mx&F_=B`X0Ap>t^Z05ZzD~$<Kv~Hl
zl-^B<2<%ZZCB(XKP^W!x2iPJS1hjP`_%Kt;!J7AjIwBN1&x!@jKFE%SEIo3^O8b$L
zE?XqZvMh;;*LGf|YjD=nr=C-7PZcibCLly>6od{EQ*vwHOk7c5p{QThKc81ewO2LO
z(pmSKNhUQ;k(28uD$#fEO`P#!DWYea?D#!|0As}U4=tRESOtO0e8~qd6U&px`tvbd
zEj#ivj99<&Kk|rVtom1EB{a9?t{3x3$fH6n*O8W$?IVW@kNWsWM43yFA3L@i9wI+>
zW#wqGtyTZVVr4~LeYRKrP$-6M88Uz4eM4p`dEg>(a8rJ!^^}&@51T8-OIg=K``v34
z2fXpF9^117FW@)?_ItL@uFGM}Z9K1DGWW^46pFGz<nxqr6&l!98lxmhAM@n~;`WM2
zhaTdpSO2y{@rng<CqL)ybK*Y?R(%#eiE(1cE+#&q!HQ`6<)SVALU9c*&*^Xq<~sSD
zx}&b_z!rBA&mpjvSJ@_Vz~8H+KQi~B;mf1EvuH&pDLsLgHo4oWay8GEhBguh28VZu
zSe)NXJ-2ATPOi4h_h>THl^T7V{kDy>UY2@O41<}fxoBcW)VP@2=@-c!L|8!g)~K3W
zTwlt$5NhTvJ1A;`_^Hpsb@=@mRqZs<&B`{vy3ZJW6?!x`meO0&bvtG$`sqS`PpcRw
zp~~DeL->gn!sy11&JC*Xfbwf^gZu%3NBX~Ns0PMG_Lil0YZ2ehYm@hS%DtCWHO{?T
zi|zO{AsEWSMhMtxCSZNoM2l$S>KxRi5E|^E>z1~gm6g1>uaeyCY47|-84Bl)S%Mhl
z#lwysp}`7S9nS<gI0%-P_FM12^ysb#`V42fNFgsTrs9o$GC8vr+x1Hc(*jle(BQGF
zy58#iyclH}Of5FSR3Vs)5P9gqlTs}$;^4h~q<x`h;6)Dv&L~^#mGJb?PEZ}V7#f_@
z?Bbcg#!6<Pw&c7V3zC8>CZ2z<h#*GjD(4>OP#8a(cBeMW0~iO_q5JNoXW)Sm$9yYa
zuuu)-@Wf+W90WFUg3+N?iauN^Ai@l68m5nU%4G|vcCu^^4d#l-jAZ5H<HZPF;TX8}
z03NvW=A@4_8#(zX`r}POUJMsOG4)E~R03Qv|Hwvet&ZrmB--d7^2uZac?b$z6xt@R
zPr_3!leh94Cp=K*Yd6V|lb~j86V@y%;VFc1(#SfFSA;7i_qYg2fjdhoYO(QGCN6Nn
zl#d*Iesssdb0G8!dwnu?!UIiSzU@jD!1z~IZ;dn8A|CZ@57Bila$<^}P3V6o`daMM
zGZW`!;DLn)ujZ&7@|^Vv<UU$*x7M1Nvih>qsvWMhavt^c7&C4eWTD#Yrb`}Su2b5D
z$_r_{Ftoi7I-*UOYk4`_(Ekc?khCCd<+wSts#bmRP}YZ(Z5)K8omRxbmi%}u8@b`-
z8668~v3Q(*=JQNzFAVL^!v9(LKNkPT;{Uk%|F>N|eM#4=%V0y7`k@`sd93-AT@ZJm
z@86F8h2f5a5bjdYe{C>kQC;d(!V9uLj{eK#nw~Z|?8w79a%z&E9y+~f+<K)CDGO&H
zQ-rx=5j@jWp3$|!@$>UPT!1~(Sr8}&KXwJ#Ul@Pw?MG`zttX%8yVX_t^SNTxsqW%v
z1L9zm%|GtHRnMzc38l*}UTsV3ZFkIaK{LF2w5;abKK$b9N*by*vheF=KjG0W^RHO$
z^IVG$VnoQzlOvDLcD^!QKZ;n&X!`ko9j3TVZ|eGzZ&zW(U}DV%BQ<BIiJ7wnI}K*^
z!e%isE_;vPj{}IGk~(swg)zt_qEGi_aRXag=VRwOZsmmUUf2LbaKR`RYP7PAnzjFc
zZT@Dt3c>=3FUCwwefoOL1xpXCbzi_}j?aRQWaC=6rq#1Hwb>ZwvYzh~KX)~$AB6DC
z2~qCv@N9kvIUkvtJyS7scpzx%NDmj@Z1g&*sES;0kD3){BV~<Tr8qx65PR!;F4j^K
zBB8-spO>{i0ILM*$_Fn`mktKGn9P=#+9F&mZoj3EJD)r&Gk>IFMP9=FoaXwxgJS8A
zAt_ceqY!aOQV7F?-oX?2+1_|m$a-nKbm42h{*;yh3snfWl0X{Q-0)Ie>M+X0*Z5JL
z_uwPP1$Z&-!RLJ_mFV@=<e~Ojk-@pxr4*`Y=T{F2<Z?;s1>5z7@y@q7>&FJDHPmE>
z02b=-Mk7B)S@9p_M*pcd-;Nr5`rQ^)c-R%ys91g>b*0{`2fy2a-lVynQiK`lEG1<d
zrG|tpyCwtf@jcLWoyCEFVlo<^d)ld0RmrVtCbs8#j0R1HbU>~b*==n`oIhGUr%W<$
z?~_pfb*TM<bjr#6cw||zBn$O~Nueb|5N4S&%1PK*h;z9j%U%2{*3w*XpLZY|nZZSn
ztDZ|N?bPKdl-eCa$#2RI+aBcqU~a}EH8y2^$;nBh?%|LXBbelYs?sBBgpdQDfW#mE
z2b%d3H-eZAcA~8`X}%PrVx%*#8ZmnIIlUk9YT84JkU4tM)S420+<UBL3BKW#V!lT~
zjogl^QB|M39P{>j4t8xJvMY7n$JoNVHQcnx+_gB^>3(<r(7K;n<=TQ?CvF4bLZM`r
z;gME}3J#5;^!mz&{zC}=plJvE#c%6q6vD*9wV0mSV``h97>%P%y0n#yt>M;v9U>w-
z*)`@)JHIkENjjz5zAS*D77!om*$IO+I1{<6eR7g*VhuG``+HLB!v}_F-`_5}opj%X
zqW5#<Q9BJz^vYWM_RMw(;R5tkC(>eCy(D*vC)(cmqD`7bZCF}3M3?1JhYrM=-Fegc
zrABVZuOHRPgY>-8cQbCLi$CQZQgz{TyQy2jyH63$tG`TJ6j#K`_Ib`;F6P>kSBnUE
z;JgFVH2WPB_t-<Ju<W~J-Y=Q0IQ8nZ-DKPb<JTcFcEo=!Osv$(7kAC0c&(u&L66(x
zuDYu^QN!a~RnS01TI!I0wF7l&wH<XByG{wt0^gIi6t1~;bYNqhioO$Nc8_|GtF7?;
zgZP)1oP<qn8BIRDH*tkURbq^ZCIfw&0;SRMlP27c>@<r;kJhYwTIvWdN)%g+Z!*=a
z^B?dvtz7Diyi&@K6W=G7FjW4|1&cAPo_-(Mbv3opkkV;hf_y>tPHpI7%;J2QOJ|Ha
zak5T5MO=Vi_KmF<R%jz7I1<_Lv)OE2Ug}0;+07{IpgWFH{?+MiR%{+k9n*uW8d0K@
zMC@z+F!5%wlY-yCT5NZDS6H-G$%j$ShxFy|JVn|xBEYU+S7w0zuDl(&EJA9K8}v(;
zi%OcqF85_6u4-VgV@har&G%hA7SV+@w?bxvc`kxya>_6JG&vL49_&S18^;;5v3YG?
z?Zdk#Ay?{NjNg)rEnRJKs!0SJ%y_Jc9ukN-IpXcyu5PO~KVC(qjrlBn6W5y!XbSEe
z44&20QKL^UX8W`#h#S#oH-<}_#5|Hjb$O^eFw}Pw5B2RLSgf)0iTj#f+6amt0|%3T
zP5D~!`YdSmP1TJx%`9V6Ys8b~C#M!VN;lSn+o`)07Eie^+tbICaW6-<7TX9OU7y~|
zW1eoYeXO?~X_G<y#c#M0)E78z+Tz`UArV~Ah@9ht8n_F@!STsB1;0@G+@ySOEhBhH
zZSPDC{fYP5lPB+H;vH&i)T=$`2Aw^*si30urFGjaO;7)D&SB&wnhDJAp)7}quYD3G
zCp61=rV5qj;}Kl6)#z!7WA}xs?UI(3D`w+TR$C}tQc0)EI6Gt1mvcF9VJRus82XJr
zYm{-TzND8|pQLVa$6HhNX9L^WrE5ZWoc4E}FMMf)T$p=|7`1T2F}53qi!Ka4cA99g
zbuVd^>CDk&{Cezq^B6t|#h9|~RGlhNHQLNB?b{t1d@9339`zU*GAc5JzDEtBw|XF7
z4bDB>GxphQWOjLI<1C5WBfzDnB7S1NG)Fz%VsZWDRpg1L;wcAf&yPJl^-cUnYmR-v
zv&wDHBwJ^F6Hu8tgRg6`yFdJ!?!^1neB4S!j;w+wcY0>4xAsd8m0~k@uQg9O)c1R!
zJ&l4!JsYu?FVA>FyAssfY@^hq?XYIFHZq8$<1-`WYSK7|9O&ISHSy&G%c#5!WN&lI
z)z;V{$E2Cgkw`fk#48y`)Ty=M7+p<zuZOe--ySO`xAEj5GX^8sfAF$;x9<xBG3y6h
zIL3^vl;c`M__mmU`mp@S{*^p4s~>%1a!^-w<du*&4=oxDFz{PbS*HJJ(ug12SVwei
zW*3chubzLn^ejg7+Ccowhw%*_ypbx&vWLC1xWVGhyjG1-$jH0N^9LNQ_XH4i@^FzN
z@pvrxR}ZQwd`!fB<>ylJY={z!1D&r)|6+7B_a1{5Hm8l1Yih|iqbrJi6%t3{D1{rA
zWsCQv3*x?;J7GoZW{pKys5Y;vK7ZsSgqy~GVI?~yQ(i2+5gMQmPxKEilb0|}g-OV@
z(XLLR8qe9V%Ttu0@swdPMZ3}Tf?~wDT24-my4&Jp%9vuR%KOUH2%g()<W(0?Is88=
z$Ma#|(4%+iXQ&*6sUt-__MeFSshHD!_K`xFv_Q^h{`F;j5c^X!meLvdvXbk7uW-s%
z=(=$lRjWl+lZ?s8PaXZS4-cBHe655qDlA*>@MP73vI+miW(s_1UDtdQ3QOB0Q68{z
zr^PcSfkgQk`4L%P_VcR@+JbR3;>$Cy!jmrF1C5`qH)+}=oFL2%8>=bstJC<}qjSAe
z>v%SN`n;N~rT1VoiJO~E#JASZzS~$$#b-sI2+~!ZDZQH4!}UasthS1J+VtZMXk5*|
zX&m6FsHNv|r>Z#f<*KGDFJceYhzZz+6;$vbChksN?JcZ81}a^ZET_Fu&?t+dw8vWA
zaiol=(z<mzk#uYsO`HBLM(irXTy}MV$S$Wm|LU`uiDR@9nW5X2;AC?R(Q~+*X5ckf
z<||&_H|b28E@{^vS{vi(QcPWaJsE>qc+u6RXIt5D2A8M#b~DvZIy9Ik!u1jBv28w-
zMj8J0eM!4R%x<^P9v`qP|6!jo={PlABA2uhw2*H@d2@UDo7&Lo;8L4^4f-~9sSB5C
zGaoUY1Hspow%RUdSV6e6SkK);q}xtc&DI2)d~9j9tvO5kDUIuxK=cZeBV|W3{dqA)
ziC>?b-NB3D+2%(aym6h!AbR|I{cJaaia_ne;QMWYXRO%9tELySeda#u=!5gxO`b(k
z+4G*tovEtZu67tp>#1s0cr;TUj8q+sn&l#dU$O|LSLa$|$@wJ@6x&YbB*qIh4>$g`
ztUC9Er_{bTN7YmOwfrt!zFi(ThRMz!;u`^r_0MI)uKO~o(zjRQ7GAyR@=o!db=j&J
z6?rkNn4s@UnSB_4K)jj##E0*Zcq2z{>PIBOvyS3CQ)Zg`1VR2_YSO&pJI-NnA=W=@
zgE7RT|5~6}z+U#TnUl_o<YBQF`%{-PbxdZg5R^jaw^?LchJVzNnh#xBfYl2U|0#2&
zS{<5Hj)-sYBY!}}6C$tZj;Epwm8uw%`RKf(TOA%+hrFj}h$mZ?6{q=fOex2Hz~@Il
zRo76!E_@xzF&mZtZV+jtg`@S%nxu;H)C6{yoZ6};Vw)3#KGo1dH;a%euc+~@nB?#O
zFeECi{#k71AQNA3zp6dXRv9#^WDt81SB*5g9iqNkHN+ros3+a{b$g6PbZv<5-K8kX
z9=5bHc_+kMraZr>@-1!5EQBa(S#7)BUC1WDMs<bAkovSLHQUTWy%^{HOpTKubn!;`
zUMT2=vsdTtCMyqxTn+kBCuZg=aR%#)AFz9)=#<JRDeW;aO2(k_P&!TFnZ-}M_4fxg
z$k<pP;XXl?@)Wl*U?VT~`B5r8=K2@CV`$d1s_$qIZ3~ob*vVc4O1rj;d)8`@9!YM0
zTjRFzOD^@e4u8LENucUti@3p!-C-^{O^cKE`DoHu%8D7vyEvs~7miCRxKL=uP|8zt
zwp!Dqy*0nW?4yLqv6HJmQ!^>}p_7I0zhc`r(ZH!%s%yR(wBL$iB^N^iG1TRYXSiL_
z`&utcr{Hb#zeb-JS_>qFiJ!7hQ5p)TURCdlWtJQNDLHC<xKdviJjw22<v)PRKVU6b
zt}QR-!rO*5G_RI&9A_-V#hJ?4c0?l>*~aYL#U89Pe6c)5>Xy{K--A%YT(%Yr55|}R
zF3V$mF%^{qXtlC$HbQ3ovbyMvnX))^-)nlS*PUaGK0V?fI!NS5D2W5?)kRgxz=l3)
zipvb*iS`I=P%gI*ZVw(bDJ1P~&O*$E>6oBQ+Aqc2bR3asDNYWW^zV|fUHx=h(6}XA
zm5edUsld)qxYR=!gM^<5bK+p;8?GT!VoLiJy{k|RHfnV{hPJpy)WFEL0Nlol@>Ggh
zeP0ycz&Jg*iJNq2ngs;2bWcU>?jDr1XR5w$c6m%K!lt6ghT5ZvD}MQPByy;NGi~%^
z>ilWb0=$@IvUQ6`;k;R!+^2c75xH2W-GoW=Nk9YhOO^N;g{C@PA+Y|TPV^S46h7!%
z_*+&o-<zgs%4m$H<PqFjgmXzN+4{QO_5KDS+a!0)u=op3f&(}89l@`E+^}F+tbNld
z;$0r27C+nW`Mw1z*x0Kb|EkE+f9fh=LYjF{0e*dUVbMagPaKU7Cjw6$+<)e7{97c0
z^4oQHzht2XJojU8sn;A6pUQ05acurlHySa6nH<jZW+&rqf_0cF#wkXD_)}Us58_y1
zd0%1=p6rmk5<l#2iMd-lu=~v2+8e)(t9RbW2}isB_S^Xo17%0020@-|+HwW%3LB}o
z+ETU-GQn0|OAkiD<m{-*!TFlyFGgY}h^L~namC&G2>#{n91WQUgMqd3l})PdKCI-f
zw}ft6h>?}arejbIANP7~D-+2{ki)G#UwWBy%DqO<zcJ`@@wzu-^CZ#x#J*cqkizBN
zbXXn?-dK9#U+wgy4&0>aRdAE#;3h4*+dVF{c)YheQrdj9KW8*%!-7^X{Y0<dtzuNv
zlX9nm@-sq8ksu_1F&eXwQ+=lBsX0}kH%6}$oT_eOzo!uB{T{sbL;L4Hg=*#!mOk>-
z<W#0apRnIHyn0iuj($ko9sGi0&42j0kV7NsS@Ux#W|cR|=u90M*nD7AmOX8EQan^^
zk3fBp695(AtDJ<<xEV-M)>Xs~?`SHB3uER$$CLrqzsN&7HcI!*&-I{D47&4TYpPmc
zR0<g?>CVI4Nwos3On=4}(J1$r{h3$*u}Y9u`H_l^-zKg&!d}75d`jtLk9>E--*p2R
zGO35|K@d1HZF&3ZHUc~D!}ox9HkY6(lgu#+Jp~>#OC;yCeL_o*NtJ)$i00aGW9jsJ
z>QOm<OU7RXG)r7qJ5F`@zB#FKYTaVMwm}d#Bu>d~(yullYE&n362{ABCVhwAAdzS7
zuLF#&JBoZl?Q<Ctz&lb-thCYrykG8fEpak*c^Le{1v_z8y-4rqs*A<-2d~BsPORPA
z_;KCyVeqMrQkyG|*V}U*;jO(IvYfjN#4QU$QNs`LEnWrOCjtT}mwp7;T-IOPMOdfd
zahcMZs|v;w8n|Eg!m0ckYfR@9^&ie@^~!7Swq6ocsqRqj1*rO+dOeDyR@qWE=A}v&
z+t9i9R#qNh#}cU;-TPwQ9<wJmE;q=Dy@23mJr<8u=oO*!gb-0(IvRH_1$8A2CJfRC
z&*m+U<X@Bv{4&<lS2mwkVb<(9*XnRuk>HRTuf3z>qJ89UNyt<+$5&`$KaFW+Iki|@
z$_WdWE<R?R!be|fu@CZ49RHN5m{<L{l-Qg#?u3}9Dn@W(7U^$Jk?)CC9+btdH1ub`
zGPTK~Z8c+DDh#j=;T2OpUc4S$9o`u1jBVKRWwvsvt#mAr2fcpl{cLmbEO86YKDrHb
zA9?I-X?qAXRtzJ(m_f-j^b4z>9BS3O3+hvKrR^H*nH4w$E>DrKzG;6t#;F&z!IP!F
z96%32>4^Jw>vTa#j1_1$e;u-5bhYI$)Y$%QX>TBrLV}o$NmHjR$QuqBk9oGK;8NqG
z%rq^JuAgF=GNU3?6$wdJQ`!{Brg!E~eUb|qURhcj_fXe4EzOT<(x(Nj)|nxQ6B)Q;
z#RbM8@w~VS`?9bfBk4IVg=MakA%&~zMOPgn$0r(Czy6r4WiYW8v*x#Smz_|B!n%iG
zr`zU`c{=^?0a`-G>hEMY>D8MQXEAhyayYj#VSj^kjBkK7TE-Hkei-?sF=|Cm4x4K+
zn?E>dTlxZ9EWY-24Nz*L*h(#XmIq?0xo3-#eLntZ<VMku08CHEj&EwPu^bG?fL+wn
zOz}|)`N;odZ|CJyMx(?t0f^a95?zW`{S#HZ->TSXV!nG6M6T9}r&tXX)XOfK366c0
zL7BF)Mo<TZuoE|Xjwu#5aO=ya3tHYkR(#y5Iy}YmlX53<@ro3^Ms%hnMZGGq7-|((
zmj|>oW&`Dl24{^<d3`_SvQ7ES#Bdu6RZI~3ZZFfHJ*5rqM;f(xT)f{NGUft6D>gA;
z!v4M~BvE}NcFmJ-E1M$B)92Un12p4@W+ztCmQ~t&Pd0cfX)HWz&xE4o2jM6vwkYky
zw7c~8Ox2LKlJ}M^w)Gq1E$2(BDc}3EL_Dg~X|V{`FwK&#ZOkQYsPRD2MLLU{#EdC>
zWAWJGhf`fpj!HQ^o#ILq)01$2|0N@Ts!i#8fEi>g<2n5vxFZZAyR_-XdaFlKVtj}>
zDtA{?FiFqW+!~z%xtFwICI`Xcjbli^^quU_{v+4(bCUgZ%i6Qz)(b6^Yh;q3vw7ej
zOCGEikWOAI6i{p%-C8v`!gB08cT~7Vy=l+rX3hCm8JM}qBS>dh>Xn~L_sIVgWled`
z3|tQ{goJ*jE;aEMdi~`|4VCEdJN1G*5s~bTJ(j0FsEYAcj6UhVW_va-_067=snNJ~
z0?!^{QIegVSL5#SOh9mHD(84?_j=A=|HhqAEATtWX+OD$E2udXnYQ*>Qd4sX-(!nY
zhid4xcDY`M7*kV4$x&>;OqsZ4>;AkU6ch~lo%0LH*6va@?xM<Ol<=SPPQ}%IN2{ux
z_r-fG)QF;Es8gocNo{`dyG^Odh~=BcW;c?mp(nmzvMl-pex5A)b{paGK25S7Ye-nE
zpY2k{1&%)+8Y)JGc#}HLY9_>5lK1vB3oWTt+8k3Pe;7%bIL#B}*@vVT=DnLN?LsOk
zbom5iOq)V<3Y;2%1*eVsBlXbToWAAq@z#HF4*24&55>l+jK#;8s%X3N)qo2NH`N@a
zn4q{cW33<KVhU6Ch~Wc@tvs;Ffnzb9C;DAAn(FHyv1~vp53aN?F>6R~l7k|r+A!;{
zZ8hyvgDxh#Fr<0)`E=!&%2m-OHM6l)<mfqhF_hpiy}ZBXFm|<-uCFip*y9=*YBh&a
z^e)dXey>>fpb*kAN26;IUk=3Shwt&TqYd-mEPtsL|1RXa*pyf*J<HT%Du>cP%ArBI
zQlF&FI#vALq~&DlkYLHUy_632N$~U{8Z{74u3mf+_?<IJ-)JQN)%?ZD!}$do3TO8_
z{%D}h&1YYe^D4<LpY*LSP^&ulR%L_PPiP)wrO9^mh@i{6eNMM)JYF9PSu`M}ZdC6r
ztel)QkG)z&Cs*Z*6ve0So~2UmY;`L>oSw=;-I3QZtHD8Nev6WAnxo=2j=;Bt&5=5B
zitouw=b%7&#F~19w)VtnP+MaM4;HO?&T=U~yS(WJnzGOGvB#GJ%*fXlZCA$d8ERyV
zq;>F&QqS{;-Y7M1&yCOb_US~pbUbkTh7L$+_|%t}sJ|NxC@(+k9~T&TsNsU@j^Q-`
ziBFgNXWe>o^1abF)t(!cu1EkMK*$KcEy}Dm8h@)64SkoTM11w}naZi8u2@U=SJ2Ja
z-J{&$*ZXT{kD}prjg?2Yw^kLpLg%8FLOMIkN=D?qR~UoDm5bn=tk*}%VUi98{*gYA
z4$gNzQ^q>yJf?KoUrZc*LieL=D{;F6_2e%qy^)(jU$T-jRJgXQFCjo#sj0Ic?E@1a
zv2D5SyxFoBzV&{pD|~Ppfqv<xL(2gsH(^{guC&Vt-d|GrZ`_2aOi5<F@%En8))T>w
zl-lP|WVYYmH1qW|E7|&OrWfz78nBg>Mz8yjwv%#D=%A;A+Cs^x?v*54=fW~En?m2!
zucqXevF2l&Gf0mz^!2oe8b>tb+Wy|O`FIeR25e-kN-ww1K^T=|!9OtW4=dvjE8`Cx
z=MNp{4-f1AOCA>6-mN|VZ~^|1@&22W@%S+9R(|IxG0~esA8^%2<433l&Sg4n=d|r)
zS;&tYKatap>}28#%b>|gKPGq2@d3~>fzdgO!K{rBk@b0O5F~qArX;KGPERlM+c%dY
zwE|i28^79onvxH-h5#a|o}9Ss%;H|Hn}1=0wix3wtFLS`o|21tr9ASMqrT!fd3|=e
zl$H^4!Gdn>-Qeb2Oh4-Wrs105K{P43Ruf&LRJiac!TIe?!P$WyImhfm>DRhB1Eb9Y
znEcNOAzlsv+kJcXUy9OVgf1VGY0;-zb~fBlc<}An2<tw~V-%2KTaJ4>Ysxh2%$43#
zIrF{uQ0%Mu*31+Ef_#qbB_pkfA^d!BzaRSUl!g;a=$CC6a?<NAq74gm%(0>RP0BaE
z(Awub@q2e2%s!@iB|@wE&>HngFG(X(T2V#!Py~|qR;X6XoeliZtUh05lT?7m>2E$>
zH(2=k>VsXXn>0Kh>~>x?4iUL=V`cksTVVAX{>8#2xN9vL`;#GLl%Fu5!DG^L2gevH
zv8Jw`-X|{}I_dv8xunZ&qf$}*R>N-6ULN4(_VQ~JHO$|hp+*|r*zj(ip5*>?{%&nG
z%b>vPova-C+7g4d8;Is<pKvPv?OdP%535*pXH+TSt9xb8rAd>&zNuf9`I`B{LBP|f
z)N^emTR+61@%R1n*R5qGM=R02y?dEt&!xdZiALL$fQ%<cYVyY8zO76R%aBLWp<=wZ
zs_s(1&zs6i3D$eN*hfCaS3Vmpd<=i0snOoBtqt0gev_xdtY%Vf#dp5&=%1bWV!6st
z2+Y4eL#p&Jdw<mhKO6J*Lqk3*`D(?YF3TcEeI?D8=<aq(n&UT1KfXo_TXVbg26m1V
zd^;3K=XC<P_?{St6{!~atTKbNB%qB~n&UN|=n@B;@<bLppptSnqeq^3^U}52Xj3CD
zj~}cYrB{Hq`}IBPc&I(A6?G?&eiO0*dnVqsF|@m+MI?v(y+I@p_{+a2-NJD9!$T6D
z;@L&z+k9+meQl{Ogg8D<0{x2fsOV$3aevG9Gt5&g)OUD}_GH+L9Nx@QC<IK{n)_R|
z><VB^jbCSpyMf5FTR}-1o-g|6`G4f|M}Pj<*Z&{=L)yz)#&f-+7dO_%HM=Za3SXI+
z-`x3NFYGe|uecK&WM3!gB=}089RB7RNo3res)>qE6wU`vTCg^7as`SYua}2V8@J_C
zfzH(V9(p~|p$69lvRKJLUQ+8UFfZwJ0siJvqjHTGr{w&O-{&=5dI+0Ej!mWs!T!eh
zD0tQ}-Q~SncBjGpz80~D?vsDka|h9;5929Ge$X(=W6wzmx*aqJt<lCoeMZLyP|iAc
zJH39k4urmJWh}|y>g|J0L@4%er~?ylNUvEA7ZUW5%cdh&bCiSNy`m(XnY;~-cS;ii
z)Dm>rF>Jq9nj}D<Cjy=F98ni*eTU+Sdrnl{tyNcZ-VmPFC9VT0M;$S7R$Mm*G40R=
z{hSAfb{>OQlviMnFn&sFUQ`1TMxR5Bx-i8_G&FcS?tECO;_uLP211wISJ$Vk96o>~
z2cMl0-WsX^7(|4>y3P?Ijg$0@Z5R+C(Up^Vr6UnC*;%m`hq;2D)WQZJERXDafh&?A
z6^V{Ru+Jy?aLz~g)eGt~O<b-4tPf?0l^&mK6UAXO3gSlhfO^L@7HX1v<srmk(vbeV
zXFCoC-czTJH+M>2>Wr&7-Wspqu)W|1RnL}og*M}XN^<}3E4K98d6BFpb+Q-f>DldX
z#W;d~KGVqtR;%g&l0HL%HqJ#&kZ{-PcxtNH#!6ETRQlzCmK)^!064j~HfsPCIZGTa
z7^C*pLcOjvpW)Q@I$?0N&A)BFFO@OvL~2oN*N?Laa;8vS&{)49py^q*My2W#k<<Zy
zQ-{?CIpk#u1^Sz}pjXPBhtwG1i@8wZ)NaTw7GOv5pC@*O17)`-z#-DXwQ8o^dubfF
zUk0ksqUd@cWD^gysK=$`$|;lW3bCt&!!_^L@!UgDRwbo{ZO>cxA5ZpA8UL7HY_d^?
zw@E4|+-WZTB9)XWg&bg9lt0GQzg<lAyPkXd1rwEkw(&F>=d;rG5i8MhugL2s*~kOv
z`3{{Q$30`-trmJ9Ty{#eW7QX)#ps8NBLge~f4$1bMVL>ck(B(a1w0x!x5y*q7l4iy
zoJR~ELQoB$xZZcF3OjvMPLB@cm@|9)dT+-03<i$3mKfci)nt&2@-<^5PQ|`n{a#U{
zG*rIa=YlSsA1yChcOUDF%rO>M@vfmG=>0>6?BXGFr%*!TVy^>69+QBttPhJ#VrjC(
zEvE#NFWRn+2zBx4h!)otb8jWTAZ=`{wQpQ=YX}!gaw|8d3>8-!vNFQ@p#@{cMl1Gd
z1zU=f8dYB6|F)TVa#Pw1um)9gldyeSX&Fpw5d8j*BkBTJ!=to4juY^gbbkMhO~6EE
zR!QATT2CAj;}G8Leg9W}VY!9UC>?Cgc4q-|LPk(NHe(aoJa;qB+C=@4(su>aQiixS
z+hCJ8DuhC1Dn<V8fq5E7oI~(08QTOK7<tZAQPt4~{b`OcAptvl&*Sxw)n?nG^~bw^
zQKrds!nj7yM$<CT$DE#+4_UgE8Ar^E`V+i*>I@vzCI)nJ%DxA5vuvUM(A3!f$V-EC
z(I`)>P55-c{ki5N6@>aai;blm&8#ikPf7q)kFCe7d<aR;W5j>Kb?V9(Z|va-7zm!l
z=5HVuUZh$f<oOI0`WX`$F-7Yk@<24$kgP?uIEZzf^h}MirJ{C3Jq1l+eYls{=&~!X
zZ@<>vT2DZ$bzVJ(Lu)uN<SD(ZDow-CV5-ZhCB75e2*CD1UsL?yphn7kk@xG`<Ppc`
zO)b<P`&OdoR@meMPE$4%&Z;}+H3{myuitT0;p}=D8sXN5pblJ>eX&Ea#ev?3uQ55&
zy2G-CB?h(cq-}TkJ0*fcBh@=)@%7<@F*iNzPav?`biRcRs3+@9p{tyOnnZXk?1;$4
zR^=Qg^(phksJCKxJ58bGj_!$eJ)4E+lVOo7clS9C^3?dXt5fxzl6}8JoxFElbH>>y
zf3nNxVepb>lkiGp-ZPvubDQz{Hq88_ZEJM=rqE@e#rIpPsY_qF2i|{2UK)=IOkPDG
zc<}s-TJ>0o1SJ=fAYdCLYpi_aY1=ELh-HQXlk{cqCZ?^jL(VzLd5D_%Xb=6C<1rf$
zD;Qm0q*JY0-DAwj;6*g^cs0t+Vx=6zn{Y|4TwGCT%t*xHYcX!}9q9g;^*uoo>CVug
z&`s4`2<EcBBITH`b5gvy=bWabysc|-!x(Au6ARTWg8?2JK}n3?gKHFaX_=?>eMlLG
z`Qh~@fYkq5W%&SeR@XT(^TN#3fLG$FDeRoUUv*)nNrBya?3^VBfZZ3)d_Mnuzh{hj
zFHrY=`@pH>qs9g&58T*yE2ekK2r+pz-+GWz<ZrB4IW+@O2&q)1c4j%C_LggLfu8K;
zs~!rLYGMHvav$FxeENWmtV#P8BPEt1%%d0`{$jg(nBuggC#vIYtT|Db%!h0WyD;TT
z8V!4}Ylt8C_bPo>W<(qG7EMg!8ZmNwJ0WRFv&NaX<W~|<Pnu5DAuc<`|GhYGIWY5y
z5s7%PVY^dcrt=uJ!=Xh?MbteIeHL<-_;M{+n(vYu&9>`Tj%?u%r4cL{@@?@3V$IFn
zJfl&RL5DB#zTeGr62I+nDQQ}U$f>Cg9xUnB*g~_M5s+?jq{V!MLzjTQ9{QMwydGw4
zW*0K~Hpe7Az!lhF=rQv*W8m5hJ%Bo!kK0%pmd@O1YU3Un8a&OfxG;J>v$)<6J5%28
z-V-q8c0H61)PXNczzsNBSVNoa>09vj0J@6-O`InsI=q9Eki*DGX9iC=Lyg!dv*nEx
zxF`92n?vc~h#qR`uvt-kOW&!B#@1rPwcFKyN`=y4)5F81Dcg-oi<B%IG~%6Rv0+d_
ztC(UJY<`F{9S%8VcHFU{9osOy%t08h5Y?0Yu%l$aL2!*zra*rFQrClM>~_NF#{!^f
z$Bq4<tSz>q9kZGQhkXm=G%?BGY>jR0>61>#>W%|9x7rGgM&7*nNxs}n%IViD)1vh%
zxc7SQb$Lufn8Vb8z%lCPT0&^>i}mmU;`3vC)0)HEjN(UEDD0A6uR#Vyw5kWIzcj{6
zb(pY<!3VG^)k5UZW|kRd-idp7Ud!$^Gw*ym`$GltP8Fr#J`-3yG4k$@t}SMo>no$<
z@rRHf*@QBIS?l|11a@f5|Bh&=4f;?|6eUP1pv5evtk(f&pgiD{KH`)T=or*&Ie2A8
zkt#g57<?VOJ@`I}FOSDP%%xsOOH8ltFZbZ-VjUU~krTvf#xlA>H-ft}w@`15W+%Dp
zCVA8Z_7I4jD)Z@QW!V-#3DwABso2@%(Ez^pO%<&6YSZuP@_dQx6(6=xzbtPQ#~@sl
z7B$55s{mCP8#F3&*}qK<`ppeuZ)#+h3=5@yS_`6OT!&m9tnM_Rqpjx*n3{VIG?(wR
z+FzkhV5{}it?R)jWq~OgnG*atEHt>~p$$aM@!&@sz32~PiKQS%6O_1KZhgUgd^!@g
z{9FUyS$EFCV38Syo#z{bjKW3lT%ZA=-JGqeSc(pS#bPEHB&1mg_d6%tj7>Oca=(Y~
zK3*^V+y&IiaJVT-T(M(xg{yxn{(210)|B}ur_5mThn&QjJ*QDE@iD$58OcBz;&<*b
zHZ4qyJYc;YHepQShN}DNol+ti4(UL=`Kd(1QodW}>{fKl)I0iNe?!##k9}q_ch$=!
zpPYQdi5vaFjM4e*8Ru<39Vm|jOwgmeX=Ka2_?en@+LS2@Ia7wuUXePzX3gm6URnII
zq}lhFy|2+klc40d7OvA$jRTyMcOa+@SnIb_Kh`2HBR{mO&G11{LQ9jC5J1UjJAd)6
zmNGcxf!vJCyu0GSMSFcwb9V>G=>AQtTzMBp&UM9iVowPky5m1?<ITtiSf&@-)I3JA
zboTgO>+`JR&fge<{VZ1t4%MU`Ir9_f6WXLsJvjqd=(A;(tR1lUi2PqS>?6(loA&q<
zLgG?(yDE#>3-1kRAr#RCH={zdc=amJJ>9d}k3of)?p`_HC?XwO6$qjA^<Zh&=^ih~
zqu7-YyeAIco39l-7y8!JCh(?jwdW%qp?&vb+&uN?H;Qe7WefRFhqRDmI)WiYz20>u
zDj2|OzD8+o1x)-HBc^=nK#-v-Df9M+q@c)k?MIpzKs}KQQ^PS2_wq9(vK1inZeFF+
z;OY5*YNf+EBhRXO7~FftgPGxXtYmfBAo5<GBA%Le<v9AlZ1yV?i?@9T93yn*Y{Ez8
zo%rmUWGO%n8|H647a+Phq<~)Y^SNGj*>{WlptNxh<YLm}4pql^oeQERZAO}mC6&r|
z4T6@}TpEBQx9~#PujK^n+!@l)!PytCY~eZeE(p<56k|>-acoVzCFhu?^Fy2`6ua=L
zKTp&45>ZUCdo(mh`nBh$a~lpDE0^q25zBAa)iDpQhUCg)xR0uNf72E+E}3FKyUcy!
zhr|Hj?4DHZ)X6L-sjiKn<&bHS=CAcFG|8A#cSh#E;qZX`4>^*Wc4z^tq1G!4+UIDm
z8su^K?fad~Z2_eBdOKL)tr)1^s+V<MWjO#=CsTZwc6=xJ*=ya^Qb}5@b$s?s)1)9r
z>J4FWE9$A(lf8GEkL1TS{I$R_@6?`>Y+~ira5&SWQoBR6<fB7m8WOg^#pgV}rMdig
znZ0gpDB0hoZ1x@twKDzW`GR~g#R>6+r{S6Gr-+-mrX8b5u&vPBB8Zfgzk50?J%I7X
zYzmA3jcybbzaV?t^3ujQwK8bv<a(IcQku4sH5(;z!SaTr-`@qe4QXOy^IK*RUxwy!
z|5X|F1DD<~@kss~qpN`7jkH@`&P&bFhc;>wxy4*wH!Ubq{MuB;uPGKf(C2{ZQ&?g1
z=|pcW_I}Oemfx}FRv2UfC$3!-2Q=V`25Myj;5r{DG8*W#yXZj=KJFSfBH^rrqb_dJ
z7@cT#^yX-^auHN)<!Vm$Or@Y9BO+Z*rClp?4BiGLiTj5qem~deBDlD?JZD)*0IeYb
zq;QIehYo|VMT*ehb)=y-nOr8RB=D$~@$#zS#U@ejmQy@aQQ0FO(`Nxs=ifBZ?PVor
zT|1-s8=}j=!c|_mI0|T;2mGbRwccIZ{xSlHKId9?$^usI7Iu#tCrk0e6=u+$Of{QT
z|E?bso>K&I_UbJ+j2s_^2X8vX^t~OLU>=P84}AO*9X8+|f?aaPS#^0m2TafGT-qBB
z$#3|Z6C7))APJ_NK}HJzm%dKDRf5R;*H!4?>s!0=Pt<_W$#{&MB<yC(>TFcm0fV>@
zzvn*lhM@h##(bTI6W3T+Enr`X2Vxud-C8pU-_fszJ}Lr^RJ6Yx0nb<Y@BDnNu3841
zY;7>#zE=KWBZRy$1WBwQrx?n1wj>u}{Ddh8j+ci)65U@Xgy6#%^jp+qpwjUKL`Rwk
zbh`*E`8+ROu23jm%@cigfsGN|y+!OVBKwxr%hbAg=E5^czJve+ldnivx?MO(_t%s<
zwy?MfdJf>nCQ0-(km9PAM1~eCc}SJ?V`=6^O!BpSuB1>6oH>b-dgPW#2%_VIQ=6RY
zhH8LNtx?{M-<}|pj|&j60;Uck$iKEB1_BcK;+y&+O$J6)bglDb1aG`8QN#bKdXZhQ
zypJYrB0~nf$~ONE2fJ#0?Nt)@+4<i4z1T7^#fmItPgv}Ou-MnX`6OsDOE{c|9~S+?
z_>hv%fg#3OA(1;x(6rA94U65O^fi`%kHPc5x=w?jmj3VSB|UbjY>67j%Z}#<9ZFQa
zi>6D5$Q53pon@vefP^QF3Zq|wTL2DbzwKE`33<cKc*JP8|MY8^(Cfs$Nvu}?7V1Zq
z^DAN>>BRSnOhY-M)I~25WzOO}%)+H~@Ch7K4vcpWLQckb87n|(@9jQN{vUj$E3CuE
zV$Df#>G%*vjh_+wSj9X*hm|7=#*IJta!(k13WV?*C|Y(V4GpuWS*((yEs2BJMB#6{
z*eZ8n@UIp65uR^%mkcxoyiqw0H~$}*iB{YeYA%^jGVp-h76>oo-Br%4T5!3f!W&oN
zjjOU{=h9-BZ#1L0KLK)mYo%~cJZq&G244`yyv;$iS2PyBtj>g-FV2WaZDvUZdWrv=
zsI8~%T$zyb{A?}re3gXLN_daZ8dmb<UmrUdPyizN4@ajkr}<C{q;soOSPG)6ANUNv
zE8IIKUV$3J_N=b3oxe{hQNA6j!A8Db)$d+q+}tu<IaSo7d4f4$iKmv}3f(U=;fh@V
zEXHu}?F21x@UWEhuZ&$8wODcA6JPnZEgkVhJALqY_i-x_<KR#rrjsXt-@6leI|c?(
z2Rj9L+D)2SX%Z01d5p<TyI|9BZpq~*7t-Jqns-3dfB34XjG*K5T;(sObYaZ-PHf6n
zpqEELFMU^iQebN~I3X;n>eGvm_HDbO$a*F%CNx;RdEosq<W{D^+3kWiK1|OufRX>D
z1I|v=v~b5nBuusDS|xoH4rIYKo<Dg8jzsY#=mb=%2r%CS1%Z5_n<p-?u&TldFtZo-
za);H%!~CMR4PGw+eJpu#`(69*^KVkyQ4Ww;*UAHE<34Mg#9Yt6`Gyt;I)p%B5pR8{
zO~5usMn`+zXF>c$@Q1>u5BbBml-}2<xpUqJVO&cWK%OxXZn@AFvjOF#?GWA+TFeYB
zGPp1&DAGFBcMF7Su#?3SC)a+b@z=pVgdgUefDk7y3Xa;-s!TUcj;S+ONaUES#6gCz
z$S?;RO%Q|U(H{UmcI6K5P{Kc409Nw<vvoY=8FTZ7y-LE57I*P)+s5Q!k`w8mv|@q-
zPq*>jDg@|Jmeu9Oq7C*X^X4zrXQyE?Hecpvz0Fj<u<KR5Gi|8fs-DeM^~u{wu>66b
zpn>XT=hHlx!#0^GKQSc^4)h84?qa3wfMM(IERPx9?+t6fv7`_3Y3FpufP5@KK9dWi
zQ=!FNAfMoEJ`yh=!trN1a@^O#Z=nXYF7L{JH=ts~40IX1o})^fH=CFkQVg_QOs9}{
zBA>bRCN;sMf*5~v_W9%IL$gDJS$`A{1dK*I1I7|_Xct1<x=w!+Jq>^pOp@7wRPNcw
zv>Kq+iN_ZBZCg4E9Z1bdLilCqAOYu2G@<qe3sv<7dSg#=KkQELf-0WMd*lg~4!aI9
zbpP*i1Dt!sR7U|&$MfmayWrDjIAEZCG<PQpVkdZi{8xVu0t=Pg)BULN;JdV11adFk
zPMJq@ZEgwnsJca|r!IEDu96j}xwD&32P^#g#>bS5E=UIb)$JWf#tI~}z%r>3s=$<t
z_hwOzB#?|q)<cf94JE=xz>GF24`=lf_E(DMz=09=&yE9v)oqq7Y1u~=S>Dd~4u73a
zEWSTe7mL?`$#TeoR>pZV{ooAXu!<a$Al<ZcpwS0Rv{SReEK-@3iuf3<`#tkxa}cN8
zekwXNM)|;APo*G(qU5RF(_EarqaSnUfwI7SUX&hqR?N>maqy`X7QeN%`rf9{4LM?E
zdv6DT)nL=Z&Y})GbK`6uqm&1jkksevp`7Cg^9;rmvS&lg>agRx^dL7smr~`CvfnlN
zzb?ZQdA*bjz_Gw_RMeKVM9B_C7^1pNKzO)}=d7m}x7!j6`|QSiqaq<AZZSz)W5vmP
zgYo7b<HMF^wu^tY*$KUmSr73#2jk;4D+TS;7U^Y9ISWFD-rM^?8pr{C@%wIo9{)Sq
z-w=2do^5kyb(O>rACz&(4@?yP3x8zii>7Nb%mtPY0Weml?8gcZ{0Ufd{CW5GP$V-E
zb{eQUc{?;%DF3#;1OKC1_3{KgIhzOM$i&BDbTV+lN!yG9K8Yg4LIytdnRU=6DXEqy
zglo>dEx%JBDR^vxgc370^1;w_?oRWvszTQQUDq(v+W{$%3}$${shzy1E#;Zw)q+<w
zX_U^Xl$Jy#nIk1F$LeO{zcc$JceV6Do6AZ)D-G^y$-x?6Wvfo}e}+n#9Oy|SoN6Tw
zdQ)S`0#zJ^$_MI~d>f;7lL|`OCI#<(W8S|hGz#?h7@$3n(OKq(m)&NItg1(0Afs&L
zZ*wq^!{zDQZS9bu!HDkFRzF*>hMir9a$X->d!q99zx=rM7Ni_2Xjrk0cOnZsN8C;2
zTP(fcTyJJ{cf`Y(9FE?t^VhSx9vU2V+_7pFicS1sgRUj5ojOo<bKkp*o2g8^pASMs
zNisW|Df1iP0iT8{8KsSaD^ax}ig6ne2Y~}HImafr6Qjd(v}*eO(pw|MVFvWWjG*Z4
z&<Fp)Bz#CghdHIqEJv6vvCdDV6PsDE%$C^u>8%D5NwDs&FNKBSuq{Ljo9BxAHhn2i
zv`z?=p)+BNs@f5F=)f6yVdh{Yo`NQtp4T^EM#RsciF>!Wq-ZrU>s!^e>cT0tSOCx6
z!(7L=5yFQ={`J-wA$aS$u<&MP@d)0U^ZmRoM5`h?M5|UWSmdU3a(psqoqu`h*5Cha
z#R0etN>TygQ1gV1OF+=jT7<rv6v$3xcO^4WL76av11yQ}X2<V;pfd3kWW9Z7*ClY+
zz=p>z9yp=Jau&Re@->_27@%2boN*1G1kNv(u5{uIb0)hA;f`-XYD~gKHu$I1Cn@+H
z5TDys{=-DIVQ7&D!wi4xQ#iyu-`x0zXYOi^!`daw6>r|LD-T4MzHmF_K1hPkUhNtc
zt_+}y`F4P~Yj1%DMt|@B#$32Puy8(0)c|Jjh&HHnauBK@Ct@CcV{>k|&u=uU%1k}Z
zHXIj#SPZGhY{+Bor?r<rvfQssM<rpkVtD)0E16dy!u~Gj{~sYg7V5sQY5dHk>(~pX
zwdZhlI{X?4vK!ZPz03L#stX>u)xzTGu=@9ZZ0|w96{?HtedZnV7H~%f#qT%>OrHrU
z_Nb!|Xw~|rdjA{NhI8jGZ%zJfGTWIo_e%=g4>pCi0eDcewcoN|{u)gA?5~~`4v>vx
zy<aXFu2k7NNJ0~0Q|LElJ-e_XgQ-rcAVf$mj%)_ac)jIcP1MHA_hHc<9h+cf8iNlL
zKZHj(AB10-_+fR2h(u^Q6F(eAH|hX}7vEcc*4GxU04&)1+ZUUF=Y$lK>6yEjSvI7`
z+aP5e7oC7S4lDEO_>+C0VA?NFOT&b<($0d_t6tMTyH_i15ysON_hZwxzl<SWy%eaV
z0pN+wQM@OQ4p+$d9~?|iV^_+Ib5k?7Kwyv`)gn}bZ1nB|b8B476dueZn+w2+fO3Eq
zen;6oOxjMmy)Y+WSty_S*VJ#lV3*4@hOhbae2`)4Jes*Qz`O!*?ZWTi4o0hF;h`f5
zI^_e8?E1E7!NN2J_CKcZ-^>(3H<|_m@9JH?;f4`7cUk`WCLe=?Z|qsNI0}@+D@Y4y
z%gZ?8A$xJ=c4<?&F6iATDsQ*_?)!b5G)>zX+Y;aKi-?@6oE(~Zd!6@eGN~wUF(omb
zp5K*&A?pdqMdw`D^if^=htE!p&8*Zphp2GgyPH@go*v!oUfuc2z=Qc|a_?QD4Uc-;
zgH5a$vcvZKXW)*P7e;iXI3zGm`~HG|EXDj5%RVqOt&jCPIkY4KSUAWZ!*{XoeR^<n
z5q(F4-sqtnTAoIHC#)YB!Od&CM)$HxY}(9`sR#blC$LKdK7|Is<M3x=y!UQ`d*ZjG
z^J;nW9C*I+Y#Tf*fn!S;b6lH3?{avK?z|-L#m2(Rk+SJt@Z8?U(;WMC!Ka>^?+l1w
z<t1FbZ(usi4>xNz25@ZV(Ava8+5yqfdT?ngd`c68$5A>)tvIy6-o~^J!X0NH??>La
z2M?3_R4c(8mzIPC3n73_K;J5K6YD+cyF{^&M_#-vk9PnRxLkcaWgo~&;Ch$w3fx>5
zqab!>6No^ok`*(r8>fst4WDwu;c@CqCxuveiIp)byqs{yrG1aZ6C~~uQy$C9b1=un
z%kgNFvdv~Tep8qjahn8&UEE&uzSbKM^M6^IC5KbUwSdJ&5s&zCxBkRmakhi{N<G&|
zJo_5Op#5&WxY(|l1muOG7A3sZPRsQvG_K_lpX9WHo^0{`1lVilAbQaukp|~`v;aH7
zF&n5QT{%YLbVUKK-inj<0wW<$!XjNHzxtnj&2UUV;$Hopm#vX0inJ3TurjZagYfHd
z=F05;x0Ttujckizl<ija$%SS>)U!(y`ujZ5HrSSjBJQ_PC;Bv2h+9eq{Q7&ZpQ3bM
zb$qzn@z&DQ$;pkhu<gf;PR-xnebO_n7shkA9FF2ZB?8mpqnJ0P$218THq}KnC7ug8
zsmR;FX3$f6Ib0W>l;D_nh^sE*=3mY$e(S5_Nl^C1i{AOXH`^A6ERIrpd|o$NQEzb-
z7z^))WV~Ax!aqQ*^@SGiht`8b+-1jWpcJ2kuAzOk3Z5y;_8xC5d)@iY0W*JlSCHyM
zP%qvDShX8BUc<Ztn7Xd|Z@PYeKL!P_bcALz`m-;z732Zp=$-AA#3-i{i{b~M!|Mne
z-j&sZmToDaI(f51l&-&6o{7<1mv<@pkZmmyyf)vYNUuNp!OQWYCvNzmNDJ^)jJrOW
zS}Yzi{K&vk2Nj|D5N7W4O}mho;yc<XGsR~g!ZfXQolPH;dtp%BXF<<{CcNBZnWlG0
zI4X;@?fzkmjHSt^35?fh%jaj3(e(%8D9EY8ioONu=wqzZF@8dvx#Mm%Yv56wDgoxr
zK1|cna3GD8(+cO@*nKy1;P&ow&S~hrz1I3t#3`1Q>Q>&{7_#(DXAE@hIM<QVOKZFq
z-|S!CqpOU+c2K19z?y#IKTx>q%IzG_(O1H^Rqui1E-8b8SMqgkV!dMkW3&p_JUGrr
z2;-D)JD#YOd#{RhnLJP>G*`n|?mz#F<3_ZgD=*>2PJ*#1ok1O{NO<REZo^8o_q*tX
z5%>FXee9c#xRTRruZN`m3J<H{2yF75QT?-?=$jg-g)h>MK*Tu4CHw9!G)gS(skk!k
z#se6mlvBM0Q2zD%wlo|rej-`b_x8-wD{3(!=<Z8hd`!<#2?mCbe!5lSsSAr0^_S|}
zX_XkF*tL^h+22?f_F*DR_zi$*p;OYXK^N#i!D5X;o~kelyZfHq{a$FPTr&N>IT4c8
ziiWN6J8Dt_$97kd#zE6=?PqCKY(KU9W1T@yI^ou*&u6&pT*VNwDiGA6b>dq_YxQEA
zOFs@|KV6LE_J36$2n7yT@xFi(|JlLiA^XT9j>=|*H@^1aw?0^ykF!M<JHXq;-Lj{k
zA>{_UlQW)=1~2zIxuFi@J8BTYC3By+EOE_`d-_C|AT?6-z*1rp{Q8_*fz;+~6ZmUq
zzrU3dAtUOdL)<3mkHs$dBFC&(CdZ)Fl7M(KocY4=7+73+!*`4F9k0<<WK~NCt84>z
zV@b>Gg<}y|IbG%nawb}WIbhj6vhP3dJHOaEq;Ik~cAwwyom+18x7^DauG}H5nmt*u
zD}*9zH9GQ$>~W`G`L1|t|782oKH#AdZlS`U)86DhIawg+cNr16fXEKaYgs1cqz<+n
z8eim+tG3gOd0)q)N${EINY^e&%#V1iA<1Oq%><Sqk7m5{PmUGI8AMBA@^Mw<%4X!c
zl1`Nm$zIa|NInS(h~?g#T4OzZU4@#7H<2xH(AUl7eh<wOP_K%U`(1{(aU1JZjJ6K{
z<P$OE-jW=~U?=q@-E}8DS0$aX*97`-8TwR5dH3qXy}D6+;Jj;5pdE_*zrzsp1|ZtC
z?f{LJ)eb8@t{z&=K{h;owe}&mh~qWn>1@}IJ6W>(rSu4-AH^B!CP`8@-mOXp9Eu#^
z;Gy?|Z^}<l`@tI&N?5kNCKg@cb=Plb(wM8=a`VAK|AOY)Blws`|FHz8#001R!QOj@
zMcFl5gMzJspg^O5<eW2-1rY&}oRKV{$x#H9D2RcmC=HSk1j$HF3ZevUf=Z5ppdc9}
zOPadzdEWP#nKN^p^Jl(mX5N1dSBHJ?UAuPGTB~ZO4$?C-Ew6QJidT(#n|#y_zgGtX
z9}Z9E&eiFhJv)*aeRZ;7dn!rw^cCi!3GUz;`bzZi2gK)eN=d>R(Ha5TwLQVq5mQk-
z*54z_hd%U&ZA<lI4Z_~Z<7bB|Cpel=3dAWd_lG<zjlv$|%g37Ojb->Vspvr~r^)$x
zqQr*I^6hEgxk9^x3$r<y^Hwo#t@M5cnC#{psAxamHC;-v(JUKF^D;W0wfX=?x#5rq
z?Poks@+OiSUo!$x-N~h1>ZcPe<)k@^rD;L?gNq`9&`GoMa0Py}h+Kbr#PjF#2XV>r
zi6?&3uTg%<Xs=MBZHqEw$?4`mwqzffoVy#Hcqe#}eN{M)ZRP)c9Lv$8HlZuXwH5t@
zR$)vsPq(Sjhr1_8DvMoeXR-}0q}V1pw1cHNH#;PlKYhjRiJ@V=zA@X|rj{)6<)mre
z60bC1_)#dm1e7k}PYq{7_1h^dWQ)K)30e5B+>_}fT*Ory8vKUz-LWjqE&)R^Tx4GN
z3&)e+dDfz-D<ot#@)4bMU%1{cL-rE=jC{3(fk1<D;k6%+LM>BRp1v(2b{Sm$_CCu0
zap9|XCv8FfR%)$pTS`G~vwm_>yX8f@8{f$fu@3dXlMnNH^M(5#>}`sX@4X`uC|~M-
z@7?v{s+hI;LK`aqe?^bZh7X4G)A?>SU4lil5v7H{M^Xy^eP7(AAA+noIR6-fpkkn7
z<5H%YfDg4xQ+fD~Id7c)o>|Gbc}G<qd9U<!P#B8Cxt6DWyuLIkz;o4zNO6Cc;bNfw
z^R-Bx%j7>ijfi%v7`UU#o{SeQMO~r4-6Zz%-Z6|v(9S~D)c2>Fl@W5kcSk^rwej%@
zrw|u?+75kpHwBDj<qXq@E}y#_-Jeb4q5Wm0EwF)N5O1WU9EHDz&+M@Lln4kkF!R#)
zi%va4TKwPNQ(DJ-u*=Wju!(H)=5Xb?cKN|+(Ywb_3FA&;KNRt<>0nOkrC!2N+i1#e
z+dMD0hgzNZ-H49riEi=^TNJhs+ym|x)5b2bI`>h!(G0_==i}cY+Fu^>S|mz0OC&FW
zyceJm=_LK7q_l*C@w+5LkpWoan8*6bW(8{AgqCO&+YL~I87YMnQP8v66ju&88c1xk
zen&0%qI}lLFluPNipS|{mRM_#AO5l11;q9jUDr$XO)C1_q1R=8;lQGrCW>>;G~4-h
zf<PBHjoIq^>2p{`y+)an(iZN;%~g)8J#UK9;y6=7!WgLLb_<s*Li3`pV_bvP8dTF|
zLEo})JG>&ouQ096aXzBe!X^0!$_M*q(DDJDvuCr>Aay=&=R>(=fvlUhmCl70a?J~0
zMs821@KNmUT9>YkjtlUP-0W7j1%XWY<=)NceeCa|ZlAuGEA)dCI~9Gm`#wxUSi>6d
z`!KADg0SYiIqfMtf^yckUJN44XCS6~u7JKMe2G!7@eNf`=~XOQT@zY$po;aeDyL6|
zp~wBguRcFc#jY1h&35XgDutv+$JiInyAk#TiWN1<(`C*(VXA%`ICkq{i;x&=!7@+3
zVE$IGa&a$rm?Ih|dOAV)Iu^?pqd65}UL;^>d&R1<bbhatyMAjX`cbKnm1MAv=t^cJ
zf+>rAx_I!q<8=JBnR(dI<wRV<e9v-huDo&XH7E?Jn+n;IT20GvU)m-<FK+5QBB^bp
z0G{zxez}7q*O+5Uv2o~Ut5C<zc<w=#6@5*coS*|LL;9C`g};nt<9i1vA2kd~v~}1W
zh<q0yI2&X;vUxf7*_QR1b#b8SHqXH`-T-lX3qou|%*@r(9YK2qHqlW#7y6}IsRL-m
z&7-1^>|I8p`4pJIg#rmQKIyY3NBRTW!?hp)dw{;W`vDaUhU}6p0iAb-sef?$F?Ubh
z^Hra+Gd3U!CHG~;-v@5Kl1-1boH8ji6PjLpsV|s!r<<Jh-)W6QkFZgw*c%qQBs95V
z^4v;4vfJk6X6K11m>e}>^Hjl9JB@IQGwJf#xX9;rF$%kwUgMqLab~UNd9RmINj@HN
zg8aca7}BFF)K4im&ODeP_Hjw~Z6doez~oq_+^b$3UpVAgI9~LUXYJ;l`R5PlOEt~5
zm<z=|d9gXt_UG`%o~6yYUsv6WD|#|+jsr)sen3J>o+4oB8+?p{^LC<aF?aEcX5o%Y
z*bNWSpUw6y=j_U-6}L?dtSv4)cAVtpsIK#!Z)Wo_-C6v2LgpKz_C*!7U7=bX&1NFa
zeIcVASFMlS0VI;$K3VmT$}QbXYJB%yPsa{DtL>AF-|!f@m8G7%k7QfrNFFyg=)sO+
zlsn}!B`1MoRbgzYHg_O$+yNc-^;(}LS8;T#J>QB+MJpR<4Gb2%4EHf0m~k!{bnv(q
zOITch;Rv4zAjEJVWatQ?kLq_d5-tXISYjW1@u<h5N7nZlf_5z_3G}QKCgXBLBUJ2_
zuNB!~6+}~}QPzYeLlV8cSwS;d@!6b{5M2peTd`m#vxp$zE`i8ybwEe5nc~5Ck#Rpb
z_S#W?5o6{8TnlHNnWm63Yu`1tYU$u2`byc09Sps#n|yhkX1R-1Ls2++(ZWoE#eH(3
z-T}q+!noq|SPh-myT|f$re{1~INR^N9uFakoXTsOnGjZnn5XxO=*GT;<2k#U4b!k^
zH@tc)9=`k(OF>iqla!5ppQ^&*E=~uUcMRG>V_mMWixFd|exL5SU*&p06wr`+UZaHM
z_u`j8YTwdJS^0?{Nk@{nj3dwDlYWqfFy{5ABfAge0wATyf5c#ChvcT-R*lN|jHI>W
zMWi*gpMIN7tRsQIS7`fO*2Z5qK=2hX;A{vT&t~TG&WQG1drzOKe#R`oVQ*o!A|B^%
z7*|``8NdT3V4eJylc|%zGYiiE-Md?o|2kZFL_hm7yNBUmX8rbSR+J;z+g_{y+virM
z>ITqA#k9OAu;o*$j?&&+QGNYXZVq>1d#U1nVW%ed`#076wZFr0?*w?5$*Kn24DTy?
zJb4QT9Xh10Z87dzLDyBRnjeAvids@<{nkW;f&XS3qvD>a64{6oGHoODq#9ZR8`|f-
z;?}&AW|YFhoK$yoIm^se%`{ia;bB;Dyg}kWcNBT`HdMT}NAGuZl68<^=eo%GkgP55
zz@uixG0$D-8UO&(V1%Bsc<v1NUXb+{YurgrJ%<1hgvX8&219J(<8pyJc(+4*tb8I?
z%tSBFPZIBqo@qd^`MCwiApE`wawzYF>_F1xTrQbsu6vF;NaU?!h+oOTiw=c~6)U!U
z*1Q_uE-8zIE!;zIuUOSyQp1*pCUwI_dFCB@zj@0#!^+&!#efLr!_0;kv{oB8FYb&L
zFPOGHyIJq}Fu$|jk6MoAhoiHxn)?qWoRFuyIiGXyee#hCrn%!Z&Yv>|b24s<ei7#;
z>Tv7Li$B{hb^!hMT$HM*B;k;%%c<Aj(a_ti7|&Wc6BMnIvIE$`@QO4~C)K0hH3cnS
z*LCL*x7om}wGxt=R#U8aadR+SDy<?dM0f_;QMSoTX6q1_?T;=))x#Mv-wjpb87>Mw
zQmkKT_K>O5+Rn%=Q7Qa25(Gf-MgWAe31tGg>nf0W3Gv7SphU02y23(^`o&mHR8H=;
zR;SWLd;5D#3+B_TXxM8sK3fyduwKX@q){dxG&aSJ*6&$`O%L^G;%8V)juh)&fY8$9
z^ra<LT7BC}6_pQqr>y{6cqRIS%~>@k4HIYN%wDYWEoT%-$*iL#vnTvLG7_7dvHCGN
z{M}07+$otGrecNWKIbaYxmdPE$Kg8X0J_QDSY<ATCb_|7-#3QE=9PQU$z+I_PO7I~
z+<pA5JXfO1U9SkTp&Wyd=d+1d=$?{?U@sMjeJ`Gs(R?P@cyp$!xm|kc^*yGZHiJ{S
zsBo1?<z@XK?zYT%N5UO##TjFTG0v4QTO;@(rFZl%niALVEJ~YXTQ@x<i@Qe-2U^6e
zNrix@VUhBWl+KF>yN(ZrH%GG*ew(Ek_3nC8tV0OrS3!qK&YCJyp_*CEZ+F4&czE7~
zK(dm54<a`^v(FQ0R%hARJAL}ya$i#Wzd}6l45tgl9FB2@@OZO+_DiR=6xQzJpFoG0
z6?LE?y`a}^`myWM$Sn*&2>__wk;A}JwUZvAWTu<F0LGOm0A8p1<vOprCZj+|9sZA5
z_Bo$k5`*JaxHtBzN(oIiE+a2H&W&d0XdHP$aPiji^;HnJ4O?StWIN7xpAnPvBEMwy
zGSuZ_{?|7zJp%!DkXNcS_X*hn@Ifobj+e{`KUoA*`Wyd7?$v1p(alu<)xF09LC`Pg
z>`;srfA9$Afs^MIY>qqcuJ5L!ZbqTSWupQquUVTm8Hs#-_swHsDfzy?Jv${|o?UXH
z>jnU1q2z~})jr7YZ7Bt2G5NBt_1m^QHqyF%h1X=Zzdtq5(~m1rOS+c#wV}*0DLamv
zE7LRc)#nvlMqfsZNLU;?lk;Yn!{1tf0M8J=Gu|FVi^dX9225wU?%ycUOL1$~V!Ohs
zwL@d4v}fAKU3~?7&-Q!^U&GqAiA{`RJLJbF(<B$3j!(JAKFg62FK$vuOH-lYv74#;
z_BYCNs-ph#P^F90#f!oLc4m-1_E81|&2rHOT<q2Pl|N5;>F5|RJHg8{)X1_Zz_O49
zdq|)dKZij0q4w|};m2ceMTs>t*-6GlXyrPuxxSDRM>Ds|L0g0InCsk3eiKb$QveK<
zcnzd{D0&*pRiJi@ZV4re(c)R%0u+(IoX665@E6Y5P!fe1t94e#)a1o&f#^x!-sGK0
zL*QP4JEvzzU8g>chX0L_SjV?KtM!SJ+UoN8p`K%uSfejH{7*+J*j6kCXK^7u*(+B`
zb#sX<26}e5V=}wM>OXv~^Kna>DeT|<MTKq2FUc*BY7!-M3^Z^mw0^?)vfbY$GH;_?
z`MF})m&_}aEmZ)E4bAWS4&o@WrzIh#a*^>EE6>ezw5u!SXb!0hU5yeO`jDD&%D&=A
zI`6b>!0&<na>AU@799f~q7)u_W3834mfj+<IQ_U+I4(Ls25q5C=~ZhVu2Wz}C&CRo
zQS|BVuzO#}j^pZ3i6QTLY$K8;G;?Xo##g+0B-N?1x;^SMR*`m2hVGkMnl^U-%e&+<
zP9cv~CDEyf&8M8rBC2riM)!^AcHAD*i!hJiF4BvycZzK+zE=jp>+3j&Cp7>l;!KsP
zNRbS;6poPuT3A9E<nVn!KW!TZhi_a)<F&+8Ic0!|8?~|vR6Zzg>4cqVnDX_gL(8{5
zVsLAFwUtrcWKFmwH6~uM4X4aN<gKu;*dcmp?}CmH!?<!`IUc&X&2Rk<UqQs|B1sn3
zG(=o!Oe3Z7ZW+>o{tU4I$yB6Z(0Q8zlU3IxT4*U?sf%ADLE*MV<)s#QVEp~_gyIT&
zWFcm*if>F*^9&6Zn;UC1Ld~Al8TRfSU4E1Y+v1gq8}kroZm#^^{lL)i<pwyRbDLB=
z9d-c%Kf{g^;^?HkBYV8w2z{LJxqHpQLwi+!j0HPEO=xic^i&Ja<;Lrr2zr?ZK)zi#
zz}@Qrg%{KNCMU6hIU9u^w|4M_7wQc1b8=ZxWbc>VRRr{yl{J~y7KW={<)k;Ca`~P2
zk~DU`Xx^LHyF>8Alf+NAcU?cozph!q$)BM*ip=j2LK?J$Wx~rY1hKXK2V#53PI!?p
zyJaM*JRznLYrmlzcDgs+&>;z0juvWZTwxP8C45?occSOWd?{r+tM!wrrTYa6@ifH+
z3Lzc{J`YZ<@r@KqG&}{49B}+Wvi}2)-y`$zb(kZ!V&>5IB8qwvEw7&>7na}3FRaym
zJKl$U>*xRbZw2Ex`Zrhc><_EJG0+R>i;e8|cX9;iOEQ1s%Qm1}nMg10n!F7lOqAHB
zUes=9igZ${j9()7IWd!?9pm=b<KLvSl0AJLD1Kh5mSFL}les`(s1_Q033<>va&kak
zoaB5~jgLowLO7Z&(n&@XnhlgZ8MhoRD8fQ<z01yD29)dpgY|{bLoVhfAppSqZoYRB
z0GI^64xnj%6eDDqo{ay<Fag|#3Rw~8cAPf@yPVzMniR1MSTZG2aB^flGvvq!=3ptS
zqG{}aJ~@EjWe{Qd$9J4=G?TAWyLjRhwaxw0bcuvxR4DiYB)TAjfjgqSej`KrECu5%
zoNO_I?+=moWaNcEEt|>RsMXTx8%HUJQfLSkPo3r*MRK}3a_`|`#4n(T5C7<Zjq0S-
z91Q;_M1mB)e*`JUEY<PoA+iw>GL7SS@S8{Q&oKhobv)!PDKds0pwQkZY0(0`6pN(S
z<ShRfc=)*aRr@RMpA;nEQaR+^Hg|yYIY)pGVilM*7ML~aOCD4x;DtJA2@=6MeE!y4
zQ%=~!T;0!H&Qkr7PVzT0zej=#fI|D^XhTJb{K195l|1mmm*D>lSE|6F^?Wq=TF~Bl
z2Y~n^Yo_kVGa?gYjDIm`=fU<u|3}*|_u_>;1$w@gFMZCgQ1_re9386~ti9#i^CZD<
z;TKNOkJHvX7*EZ-KI!-ir9!w^NH+A8flKDlWR9Q`BR~UnF>L&+DU)?MOx$Vs$h6?k
zYT{rjc-2bqG@Dulrsnz9%!Tv#KZHlvYNfx)gnu%ty(wf?=N)z9Wa}Yub_5l|!iYEh
z;pnGJ?j-!B5-2=^P$d{f`NIhkR2Lf%W?*Bg(J(bPoE;<|pz?a%A924Xp+5fsg0u4v
zSUt}DdAMZ@Ank+z!^I;wk67bW*jbi)aukH_qw&o-g4uoGhultyb_UCx!|z4;_!t+y
zlMa#AJ$3luUmCzf9;Qj~Scr=jQH&^&XY>P~(q^tkrTs7COlJ)?KDKFm&j;nhPJK9K
z-&0^gZ>QmHL9lzC9Ddg}oWlB^+y*R6{F`Tj8UF$~<#<E<M8DBBri39x<PrSa9AHFW
z?T+k&Id(vt^(G;s`5Mz>88APL0DEMP7nr0;Yg8E{Y5usm#;q&vb{Pn@ct`FlvhOy}
z-8q2QA_#<<Z7*a%VDkt<gTV+w7DqZ5M4!hbF99oab)C`!5(Zc3faqEVKyp&Afyt?%
zzjogULW@>CZ}os(L<kEeZuyx?7$vL#{0;H3yU%+RVMzS`$;82NsEj`M2MmW#3**MZ
z&o>hTGs^h+0t_*U!yxhuz7bfy1x4n&XU3P|W1>A0C-5<_p+!Uwcj*!Q739avQ_GP@
zXS@pg@@iL>3qhzR{MfQ}G9?Mw$ST@lSM455J@>O2)ZwDsP=H0DJw{{5bR;+%SlF*?
zOieJyvGAOynl-0|U_(42V^_Zf?3g6t3t(~{#=~N){CXjZ{B;!}ouBZ#TxRr#Ilad)
z`TEww@zi+bNjq*Bw{D{v$KgyoW&ykT!8uTU624pp<}RCr>9kz>b69&P&OoV0F)*e`
zL5Gtt==MLqa!2kpc%ATgjzVNXl%K#Gp4@bx!T$z_gupJ<bn|7%xfQ4{>O!KEdeT-3
znX4ngv}7;^R~lRNVZLXO`3@lPID&r)@v)azx^G9qn5;vu>LSPGY2;a8!%nb)iM+nx
zfEcOV6L`bZ7plXg1Zgk>-&!RE=$Wgh*}Aq8kW)!du$%CYJtCyC<Vmq2*j(!1%HPaf
zet4AB9%16C!_zvgSt0piQA-5ATiWx_uP~Ad0Np?F<Ej(#n@`{ksjOy0_vN-=28b@U
z++HDVlo5z&`J@L6`Z6Rz<8VnCufP=Gv|o7u$YB51K~8%|?lNq*ey!b`^oVDpvg|qo
zgHAYlIL}9dZ-M2U70@(B9NJ@6cmwN9ml*0D2h6~hP-nygg2mfm=L545fx+4Kn{X7t
zG)N-4g6NQ_e3*f5p!MB;lTI8#Q6r51{fU>We|wrk|B1LbFoY&VR&eWf7qUNtSz)F*
zuEtj~k;=jhynEzfenG+glj@5Vk+ZO%x!1GF4-Mx78BD>AGtQ=<a!5n~sqP1)Cm26#
zf#HarxtP+5$Rw1Woj-<$@|pVcD{_qHU^mTePy3MHWW5S+xLR9&DtH-YfHE+0b%H6x
z&zw0bEf*G4^O#7=;gZTlgMI-E{*)Vb&l=24l5D8Nk>L9X#(?-qB^Z;?yBA!@);aN?
zt@FQP>#UsE0oXyL_{~OQg70judYWv&{HKBeU_&uVkyMrs$^a*S27Ne$crIHbk^L!H
zMW;JWOz_eOi5w*V5jl`T%y9g#m;sNBV4=kc@^wT)AWqJ%CWw%f3DDZ09V&6%fNgeN
zeH66&er;)NtR4E_hAAy~YhDyJajnT(u-;n!W}BU0t5V*;8Fc_qjV*Mgc=Zx)!RWPx
zD$qwaeA%PVjsY1xfE<bBla{1k2%y9E$0_I>A&8KAMvl2z87Z{ieu5UErE>{_N<|5t
zod?X-b{CZ*N%4)?Nr${F;*3NpZIJEK7T@QIoWOQ?t!9V2LpfQ_UfjGs-Sp&F2tnPV
zB_;^UpgNPag`!bLsC)`iCQ%TMX8tYbcrurBi4Q2y&8grM^n!qg)eVBmp89<F_u5|O
z0k{puS$Y84G9U^Bt)KIENn`~#$ATJ+AYM^_L@zT--voE(IA~m0QSb!4bONxu6^k3C
zU9c$)m>VS+KPRK)>lU3lIR$4WV4t*JiV<U6K0y4;$$$BoQ18hfM2iTY#8X)Q<Q$|;
zK%V%tL-TWcy+uWDpiKsD2wbHK@k8rHC0w{&ItXR^9ak6vY@qU#f2T*@Ud(wwaJ5HQ
zGXaJ&I1fEpp4ZszA%cTL(s2*!g||=2@`HMKV-rLrpP;vHxYth6r`pgBP<8Z<0EM0n
zjFwkb!oB09BV~w|CU}YsndDWakeGf|aLeW)$s~A>zzcWd9r}9k!oi<iU;8&g#}7^M
z{Nj3Fyn%j;AeTzGRgb53ZW^YNN}&C~?NsCFz_DmWO0ynB08}D`P>db9FH;>A^)P%7
z>~E8fv^Dd&Hk$3(r^3xDr@WurHtcN>S>Yg@BU4I-u$Lgzd$eEh@y!u;a5kq%@QxB7
z0gv*RCdxma5FZ%^H{s$$A)1_9RH)z7GXW&M!#}s4YDj&&Zv`xWMe&aJ_K$cP!gcOT
zlfn~#R(Y;MaTpNVw_98v4nfMl<5tp4A>uMzDOx{X)IJ0=+vA!6$WTL~B85>?oC4S4
zm4Ij(@lM+Vm4f}nx+Uk0;%ElJ>vy!dXzhl!Zhrp|GX+*&HTiR>B7Xq^=EaEktFJdZ
z=&PREv`Y)<`wbT`EG29#3@3qw4-|kzz(7u*61c*q5#UIt5K&3REJ!JCi@YZmxz=go
zTyjtH`{T>=Trk$M!r?-1VDWfZJoGCnL~ZFTI=+{+q<e>_Y1{&NiHpIlD%a6=1P-6v
zfxD&>!^k-j5m8J%yYBth!jl%Du*md?Nb1xEzGzVmV+OalS(V|q^9MZgD5@v=K@njx
zYXf~l%69NBY>nR)JMO4DxIqmHrM+x-MUP&qVB9wtqqw&wUN41VgJXBp0-~%~iG74<
zT2eHHJt$Sj&SY|=-g=iq9I^HB5j1qE>lOVXy7cwd<f%DB50_oYqK1iAfD5oYIi~l>
zY}FUI*fQtucb((SyoEBAqDrlM{1-=R$_AloBdTRVjSWL#Y|pfFy9TVg9Uv&Du`b#~
zz(wbmxCIbdOXZMHfI+iS_HDF$oOFm^g&Wb=2S-rc;IL{R*-yuVbp%>JnkGaJvLoE;
zf7EV8gs{i-^T+u;mSJ71X!2_lyCAP#IFnJ@<UyEqg6`(yLC5?;XG!v~>MXU2Dz-Df
zL;P|lSyNS;u*<V*A&WprIX3rM=_bK?R-UcLAd;Dw&qmI!WY4=oi&(2wANT3v9qJ<3
zW0?xnEbWYyC7=o)=gkppu-kNvxgvDl>L~-X^*8AKG!FM%ViZjin!GGt^k;m?iZ^$(
z<~TURV#m$Gs%=O_75?1H2nQWuBzP8arn_f2Twd*f!mM0Ev6zPfP~P8X)X$1^y?Zzt
z8y}wEl0`hvZ&v#ZdJtqfpF6wau@V;q4P9OruA1Y{U-@CDr|Snb<gqdfi1r5PA<yT8
zeD1r@l|dL95$Hx7qvI>B-cD~mkuoXveH1nz5q>Q-+*&BAwz)Xk!4_|-W8aUB{(}GE
zG1Fz0)7#7MNvb@r^cjz>D}<&xl8IMsp|P5A(U39foTnl}B|eg~?+@sp#8aZBgm|f1
zx$874Qixzt?daiNMFLUzx|KYbtu;Nab9?h+4Gqv_-I|$b5gl^{POCY2o+O_*BU>RT
z-7XJU0M}dI$VD*%BChL6Ukc{UF~3xHb#rOLhJ|~djoD{L&CfwW|BDX6zU%~Cvg~A}
zNP$*iq#YmWF6=0S^u7|@F4959WvWtPOCv>Uuz|;jt<lV=J+QKYic8fr;;6=W?-thU
z0E9hfnpC#|TdNy%b|D<ocxX_$QQocL6d((r-oh)^+1Xo!V{qZo^RphH^J>X^I)pv`
zB^YfFfNP!kQ>s8{&NRe9z)GN6aJCF8_}}-P>Yr%d-&t}~yw!0uY7_49sp#MmF+cY;
zaJMIwLVm40c)|zz4V|quP}+f(;|}$3hb4_4NBdkgAfuh7!vKo8?4GCJF4|yw=d{Rm
zA0%XnlB?|^E=jnSxaEVXB)1`F_o`Q!1<sg<Z9R`lmoPxu7YEGB4<6t~3@P5IX;LbT
zp1HNVwUX^NR==^E`ABw1Suoy#={ll1u*McAwsit(?=LML8&h<R!tGkY?Ys_`X2sn#
zROmo$hil5XtV0*;>Y!cP;HPZ0*YU=VTsw8LC!~t$$C|Yx1dXprgK#FVv!Z|jg70+#
zAz1>OBxL0WvpatN9gue-dELl8+6SPJg(S)n|M}>x?ToZgX-wZfG%%^W5FTp85nfx$
zsx2~t{ldd!$ow5@OLQJaD`;ZlW41#UVAfoY+1jDcVXq2!zAI614I4%KFa&N{nzS@0
z;QVuXqSU50<_Eifvpx;t7N2ZqxLo6)tKm+00?QinDi2K?I8}>s!X7-fpP7BRGq?~q
zRkl?dY12Be&3mBN_ueB9^SYB{^F`x@)pl#6?J1(gEU}R@-Ov)^U8>IRnfIZD<jylx
zgFrjjQ1b3>!6l#iwopmWc@vZ<e4Ly~<|QuO*--&*5bE6fCCOcqi5AGCTXgIg116FW
z*JmH2l&~aR_3-%^Pp`Y7Lp)p*+LW59cogfgqD~}gtmm%j7MpbRhq+<<Swo9whyg{G
zwx`sT@&<-6aD3kJRP~QNyJWSnX;ft3mqop}zQx};QMmmwt;3aIv4j3n3rTPb8vI>x
z$@!T#F%V49TurOL%L2KQsj>&b;Q>vp##l~MJi$AxbBm2$x<n*zyolHclh_uUn?G-a
z@z^nN05wGPxeK>m$(S-1min;W<QX<*Qx9+JRi2L<;Pw2WV%k!KQotzisMhv%Tx}y<
zgt>oywinZ!b$Kn((LW6|e8;|YVG85XLMa!2=^prd7%e%J8Otz{Hk&5#Ck<WfCtP&Y
z#rG%)i$S@Ct>gCj#bgxI3vO_nHw;f}EAPKG(tX5HGeXLhNdcqFN}pdI;rNVFp!4S~
z8EpDX+VZ#0BmFVuZE&&&4pL%jDEnCqjVQx*OQC03?u!Aluo{*1oS;Ft7Roj4f;$oM
z;)UMthBCMLq<+dATnlpDX7df-agG`{f3(Ein#mz&Gj#c_#piJ06J<95*Z7|VX8IcL
z@l^Tk7TD^~wke$%Cl}EMY~^*v<LG3pOF_Fehp!>pd5?Jc0ln{sI7<(Cmx>QkcqS9o
zrC-_laC)vvMjwiZuVi`S2p7@U%xXvtPqw&S!RWAVwXvo<v8YwmWH;T4x|FSc$xITB
z!REgRr#Q8C{tmf}S8{2YSG@|fsA{OM88T3+aMN%%45Kr2Z4Mff!D<yUU{|$2#`O^Z
z8A$k%`ff{xT2S+Fb76Imc+uY>;KqVVNFC2Noeq*W7TouHJ9P<ZfvzJW=dQ~X78WM_
z$sLxdNCewifZK91Ug_6#-&sRbZEx91CHLZ1pQz^E=>7o+Lccn43h&8=_+`I;KhF60
zHvV(7O$@!nQME`oX07ZUBp!kBtx|dUBg!2leMLgqh(Mg2ISB5Y4JtzybSU)Q4QbGK
zDoS!xY^ys2v6v$DbG?RVAmpnPX2Q8!K<lrz`zACxDk$t8$V0#}wAuGLAvXsy%~hMS
zfY7MnrgHB5PsIOf`I%s@#IntcCF%FoIKG$@B}_suVT#ymX(DhjIkvUKJ$e&`Vs{JK
z@4)fxQA1O)fZBw|`Vu$FB^FOt+$D>C*p?txqJKM~8s&p23<B|XT-5M#@6s^#<4Rg}
z4r?_7wB7M$(diH}w9SbXFm7^}zumKRns6aJNy0(IutOk9GlI|fLd-?0f*VT4%Q4G~
z6p`EuB;$`VMS&ivpYxoUx`!ik_$pe)R4wkgMkS4+)?_T7t8XF4prV)o6yp4~MuT7p
zjPJvB599yOa)@WtA39%g#@51Jps2raGKDkm7bDV6ErOj@B2S}6_%#MS(hos{a!8$+
z8TL9~zTW-Jkuxzz@>WM$($F?+v2kTLGIA_<%qRRjKE@;A?{5yzis=Bd`s#~@zAv`C
zdiUef^Mx6N!>WtweX||~JGMqtQLue4b^~a!7lSCpT?Q$zZn?G|go{PlwE{Ui0d@C|
z$QX^IZXmjuU;8UV>3RuYhqiiMtV}xMbC#S+6p2vvH3ja51|Nbxxsc}fKRGipw*pQ1
ziqRJlrX`$Bx0R*Zj+>VFIKKK7WD2s0jvS3fv|Y}e4g~lu02vVd3o?LQlP7PSAMcvc
zvalh`DA_)c{|m=6a8?3r)pe7m>RyKZ(kl0NpmNaG)FI~U8$Sprjps`0_FJQ9?0&D$
z*&XOPoU3wh$W6!?`lc~%m_XS}8P8=M2+V9nLp*w4|JQdUf=aqqt8M|}1XaI++1qWb
zUHJu3s9^vaizgJ;#dQiXEUJWE6SMJx9&~!-BYX9FZ2_QsEt06LMr}fJJ8FNl7y1;n
z@e6O!Jj}D*O}}(^USedb6yzv%sid6xQmq1WnH<N?TTF;`knmC0aER}|Jic~&IgON)
z-r6*zu5?g*;QC#PqTWfr+^F!$sW@9df<=d}YypDM!wFhu4!u$VAYd`}OzWle<B;x%
z%1r>hjlf=VD8xz>&yL)~5l-c;@W<$#n?Qt(qt`tVN<N!>gl(6L=$cm*Hl?V*2^$(C
zH`ovq1T_V%3OM)p@uC7?>z{5FwcA&b&Fw5TxQXxfC}nEA(ogZg%;Z^MaoRGst4i`_
zlj^8ve`E)@?1Mfz3F6Wr+e9Z~;ohGHQ{|`$kU@WLha2oSys+QgX+ou9%-<D=ebS4%
z!H2%NFw`3f0@Qt7KkiS$z@-nYvQ4D{9$^cCW41|^t5O6l?oRyJ4>2h|`a1FqeTpf#
z-O_c%TeNYsn5Ve;c(XmE2Lh4mnqm*b{P_4A1A20_<6_i)1nM1Eir|7qK2P~RWp+vB
z1q6YlGZA#_1CzVWcrI%BH>7<}US66rUAUAk`JC6MqZiu!w5PuOJ?D7EvsyDvmaHBx
z`$CTk@mvebm(c{VXT90A!a>jFg8F%?>+W&%HuS&ldG~Nb?ekROQ+9R7iX~U`eA=f}
zqIIx+{ZQvFqNr65w{O>rO(j?wH_#}aMzDQ%re>zYm9ZB@@=xGgR6lRD#VWfS<Wh_!
zj|aZRJ29Ys8G}}3>y+}$63?)$p7S@%9ID7tyFu6s{q^1iT%9<8hEdjYtvo!VV{p;g
zrO7^}xF55<b(Q+@CK-8Uuu5a?P{c3=X=r6ecAIM-dj`~Gmt@qciGF7zP~E~F$@|5>
zI56SBd+FNx8@SNkp~_#?<Zms&+?~4p^GX#nEyeq+vW6m992rZmfI#O%M5FHFQ$KfQ
zB45FAIw|$!=We`GaE29Z+Qt?87%S$3QF1(A^@y`Y*){utpm%IPEj_RG_POsQb!N5d
zR-AJ2F=jhBwgu4NFj=KD`6YaTL6HA?)5ki_K~YbYW&r1DT$9^yrOUT9-(x;9r_vQs
zcAY-G`%9mnU(OHkk>7W%Td<{+O&kR@Q6?mk0YB;xXs~wZ@?$|@<|ncNC!m5vruy*&
z!bt<j{R}~K&>?2`ixtd!_ls<C)dpfEv)0m2#|tB!F;DY%ALL&xlIlZirH~d)Vzb^H
z?C%Wg&<b;?%x?Zwg_HZaNMQlt;`a+Xu3*^&c3^S~IeCNoC`;I+@**Dy5A;TtrU=yj
zWcCES;H-jEO7V&#i|Ss1ExJyBLcyz~H-5HE)fCIMV{9~!ll5Wu&}V)nwtq8Wz*n<X
zSuOrf!78>_*79Abyv%Kn+t9bH1JQaTnKmNnRWK9UP#nHteE_8%C;g#aXrsJXZM5P2
z+GnxD=X)!1C2-<Z4*3x&QxPp0$6_5<x@pO(bSl25xECEeA|o@drg@69Xg~Rj)qPYT
zW|uN4+R&iVEigA7F0t)9*{vzFt`|YYwG)IS)wHuh9g5hS+I<aepErkxAyu7k$@HCl
zCw@@&vh?zgDXSWF-SwU(z=wvdSguzT7u>8ea@QN%L#y}-%SZlCmIOfi1EM=kl7thu
zY%lp+HOo0S!<!t!#?f(mzem>Z>zx~Sv|#qGarWXva~=(ZM5Hn_0_UnAifIGLY$z_8
zYq7QD8Gwn#4~Hw(o(o?<V=$l!Pn!W4V9!jx0b)DT=+ZY%WJ7!Vde#<f0mfxD1!K`I
zOy3OHY`R9|bbn}{x8rW^jp}Yz@+{GPsli7fH6nzrUT19~7HQYwB+^s$ca&60JGwrn
zLbE*$(RhhdM{<7F5>m4vCi~kow?Hjd=9J_59>5hMh)_R*i~An=^mI9e#S@9+jWUFJ
z<%GezAOR4#SaNz)7q$7BB{C=%VQ9{Zr~KiyP9xa(T}F=Y8KwQ$ib7s{!qraGFv`6J
zyOn<FNT|zcC#Dj7Tk!f9ZVCz>bE|67KN-foF5Pw#r89A}^)C#_x}BUaS<JyWGWEe>
zBTc~qSSGD3b%O5?fG^n&^ZJ>}T>XIFa#s}#{wA+_hWIe7zafXPOeje_N^EXXDT^>R
z`HSs~A=Y)cACW7zNt-Yc@=un&uVz={Cx)g=ywP&jzR+)syvLE7q3i>5M33(+UD|0C
z>B5p0YVV7|TEvINkta~pNUc_j`^)|<*n_Pg<n%<S)z-#VuR|}V9105_cKuYnHg->I
z&%3wYhbH~E29)yjRTjOmSd}@=$(`j1Xw<Nd)bFrM>9oPfSpkNA!oYbm?XA7H)xWbA
zpbkoQXJlmIcv~rX!A3v@)Fj^FM*o|l5OFJXAn(`CR2mE-=g>Hh$fbaZe^A(v5_|Qg
zA$tHPoBWfB*iG-T+tYM)gN`);q={IP5Wg~|XphT`GzbT(L`$W(2Z8CFoiY(ACqhvP
z|G$f(`oJ3uvcQ(;La4d2T^?`Tu;aSy{>ho(92E+vu>JsbGWO#}M<I-)X7nIHIRfi!
z&chXb$h-r?uLLGCB;j%9Ped-!IJ&Nl5VD%WC;ume&toI}<`6$gpnzq{m~5_-+Mh(&
zCB<h{Hvi%fauCxjd?9iA4<xKb1FV$eWRvzEVopoLU4Y^%rP(bmk>8nw8$XPst3*<2
z%T;e&D+g^qN(n6PEq<c44@g&O{Y@XG!FTPdIUw~-M^L}i;Til}8J2)dbtcVWuikmL
z^E-d(I_ql)Dp|ZE@qvSe&m-h@A&}82+j#$C@&5`cTc~^{y@q8Dgu8v5t%rQ<kN&}n
zl@s1V|6_{WD};+frd~gK<05X-p8!gGn;oExrL70wWe&mR`1=TXcZ-1P4||4EdOLc{
zrOagP?S=Pr$d33%{&^}7X`j6nJpt9hq(rb5*95zij|0SS$4EfTL<{!)tqHApI2y3Z
zU1A?cJUbS47&++&hG4iGo4Ndb<=yuB6T}@1ycZySGFAtez4xbtkTqDY2nFf=?h$yA
zBpnz@e>f$jS71u!n?uRK{cN*nIi2!}8T5Z2Z2MN}XzsVv28WPV(wro)4KJ1#!I5C|
zpOhJ?l&Ih<-alk9{}V)dBQ7iDnjjhgnFf$LkLZ_~87*X9OuT-n#KAFenke;hdIdrx
z^GSBLQNtq@D2A?_7ljwury1@7$O<VQF+z>sy=18jLFpoa9#jRC&!suP+xkebSd&C2
zK^(jVQUXc_Rbxk9_*~1cmz!^4PEJs0jr`%2?~{Xy<{Q)XBgitVaUnt%I%e<zM2D)J
zqMh02tu;oFDWzuF3&#DMM@Jsu0~OepFwD$RJc92}?g;$Rxp+$Qxl`kpAY``pi}M4F
zF!87GHLEPaS(Atq-8y#2%SN#PFFQHVErNKOD{>)zY|la3Py?iG(<QJY3C=Dh3S{Y+
zPDV0O!8bI9qObf}Iu?XDhN(P`JUlglmQMC@Wm@=LETZ~(`Va98_)Buj>wm;Tq@*xX
z{FCfOFziO8x?8qMf*@D{5qEH!Q)?m|efX;xZhyo`TB%6>KxAe>&}OwIeMNq^2hk;f
z`iuw<X0w%+08tun#xy-rLl#zn>MuPJ3XvS#2?^tYwOEFgzDpu>TAooG_9<I<e2XqZ
zjWavfo<w%mmQc&(Kdv0n9L)U67DxVChp#IJogaYYzy+T8zvKd8$<wb-oCHI^0E;?)
zIr1*4G9qjUn*c#JoER?&l8W9TmFIzxE2M|k+J$HVYG2PBY5`<mY;&-#u;fsV68vvH
zD16!f6QZvFEX{wG=KqtsMqTdu{6I;zb!&9CdXkvB;84ry70ANGEdsZ*kh0?rs16z#
zXgr_p<NBKVND4pVXvz@*5Kp5A=uNJJLuys{ubj(cZTzMBouV3~@E;L)2JUa$N#hV2
zcMYmmkp_YYVVpp-y|psg0kr{6`@5@}5UEW+143DJUC2Ce`^OX%go{FVvJ6QmOV?Ry
z_(FGMviB#!=ZlCZ9Rjb>-x<yV=Q|fNih}=g6qoRUBz++X<;ZQ(&P6p-!f?sRp)507
z=>SNCr016(3<;$`zX*iq$bBTB*SH6%ojAx^?{thHJwI_bezfqcb6q)X6!P~83n2#M
z`xHrV(x^?udqyE@tt~1+d^i^UP+tRgT;Mu%>EU3$S8wrcL0KUTY;HQzG2%9;7dl`P
zY{rtHIH2%IQkI$zrZVmJRD#%hGos_51lFW;hbpjFmhanjHDxf<El`vnHlF&sJ>$^%
zuE0_7D2<Cxo>3E}T>e3~{Qbt+Mw$7o2{RmcNZsQaKH$i8Ne6(m>VRc*1N4dB6Ixp*
z09RepT)oHpi|O+HfnUM{2Lvyesvl8{;t+(u`wI)7lR+a=03y89a8S?pAoNd$q6)`L
zJM`}OyNk#OFUao@rcU+W(j-Pw5xia(q=?=nA9(NbLEr#YH^!R`-$+_D5p)AR><RtU
z6M@4`f~wxOK7q|cCK2iWJoEKU-Jorfi}CACXaJA|eYsnqcYw5*$QuBBY=Perg-+8&
zh$@AsHLpENxL|!Bp{d~pVvQt^iyjjS!&4v!w=1{IExSx2)1wC0wcKmq&`fnkR1K>@
z{yjq&as*nctN@U182VpJQ!fFBY2EtypQL@E@|(nQ{-AZ6JG&`@mLa3pynyW&2kFSv
znFWNkHwC4JEyB@*K0y>(ekIf0#ck&ld;-eeElqF>xWYmU>Q$(AwDbiK1?b0fWouok
zNx)2IPTXQs&JW-#{pnxwxLC>%(5YcUj^yiOx_m)0>*+!tSgjD{03X%C&d_jse(`J9
z`d!D^?bZus9T^epf=KZ{pW<YDMQ#JoeUzEULJ^u=7)f&ZPOx@P6mPEsBrxP*Pp0gd
z8FaAECcfOe0$l>#nd%W8$ToEEpEpNwq}+UB1RX$3L>a91pM9Z4c27GJ2B>jT5ug&0
z-K={*>QX$SDJ#Dt_b*}I9XV1IfbbMZ!we$}R`WQXj~SbA4^WU_a_CYJbPlxroPKEv
z)cWV)V)r|Ppl~r+);dRxX+z43E5ApGG&ES<LHO0tt#WWM8+;r#s^77K2hi=}tVRvg
z#uX~>0EkCn{#4>3$QA|~*jgBFe!iqcbTVtcdNNuBaI5+N)ddQHlhvNAv4-TYcnBAb
zuW4CisaY)xwbEKs3fQ2Z`wTg7tit8!*bC-FGzd{0^#y8*ZRrEnzHmj;fW+d<yUT2K
z&?un;?xVQS%!FP8x8%AC47Xazor%+ZR3kMAI4B9qg#}tpG0X&ytg+x@u0WoGS0Q_5
z5mK99{oKCAA{Bw1m-yICk<JGXifTN-I4ej;fn~nw3EGDE3(#}91IjZLQc2E!TY<{X
zBf;#5Pxy{!vqfqz2yWu|i93td2){<7LLG7kDD8G|7Dw>;2$P{KTa0EPtnkN{Khz7^
zf_;^{sj9_4rq*{4g3j^n<BfM+Xy8hi+>Ve`=mHR_(kG#9UQ8Fb^=*TS!)DHhFb4|U
zU(mh8-TNs)_yf0Suu;`cxCnBjD!4se#<>pNR-yIkvpmtD^8z^Ha>lN@dw0RJx7zA|
z0{l>{%<o@(xw_GAZvpghDEM7iIfP5CpUul3>M*NdOrJkML_hUK94C?oKwUFzGIsuS
zuUh}{3eYPgnT<bo;6<lmQ)J!8<#rM&q{P17vaWlZ?lBL1IHvgqUGdAKtcj{UhEvrz
zLawK#%>FMmQs&2mF}qIB<*aIle601n-w1bM!n>i*xmD1Z=Vvn8FZ8NOxx<fy>{9#^
zqoQ^n-zh$ZZ{gm*LVedC3LypBk;VX%lecEVB0$<TSn?H~R*XXUfG`pf%glqcV#A9s
z*%{CU?{@S;#bACaV>J{PEbM4cU#_^dDvPX-E#zxo+rL=PliDL8X-n%JvL=X`W$2^J
z@$o>gloE!}&gpD;n3t-b^{$eIefgo5rGZcdV+L{SN;EEKuDTnZBM+Om2w2A&!F@q4
z>~(Iq`#wo!d9jh9W)|-8a%QHLO4Ipk58H}-Lh4i^X+4_ADz}klB#L})*qcTetp2<o
zjy?YEe5fn-mgJ9E-IMRTp6#K<e+<NukI<Q56>C82WMX6276b|k`4H4C7p=O+<1_>O
zvCoUtyb@Z{b)=1XwV)1>b<1iM?uD>vd;5Wvcg`Y92szu7&i!cKtFGVm1OhqeFC6yz
zu;hIDWIKA)u%hA98!f-p;ieMX6tBLLpt_d~{*7juyoj=cTT%nlp}MuH9?~!sB|OPi
z+ZKx{R>WV?bvOjh`>~Qi^ChiAW1|<sr5JF{3H?Y^5Gn_g7s@$t6h#f_>l=^x8A)?E
zK0usYkqoESr)|{R04Rw(iLarjKXo(9*_E&!s)*apM?d+-->CO4m)ufcU_|`QlFIX(
zf`^XxrI}0;y7-^g4g~9j)CrgA;}qpL!#GkU?tS9+%4m1t*p*%}Ik5=fn^@9t@i7aR
zA(%3KU9%~opGAB@Bj{+hP>2~iH(aoz+M_q^(2v<z>!=WR&>%FPOT=`4)~=BKAU2r4
z#CSSy{*#`ry1uuoy(zAGvjclvho)+D>(#l<J)50M)aC}=(7+8@^gC=ok*t5?sKB(Y
zW4qM~Xn;&&%o4WVKOm`^T%XPv{@E|!ky(l8FzQ~hcxqZHq>xnH_%4C$@eZV5;#_9S
zGp5IMFe8Iu$5?Vf2<I2DD?x+L2T7v{6Oyr&vyQ9aa@N9UvGF1eo!cOtu@e6o$y~i-
zG}vo39;(A(lfU*6NGQ`^<uD~}*NXcdk-M`ktJwRje`RCNC+=WRa@Ns#$nRPeJ6@#b
z691#Hr0vAmu9_!i$qDZr=4-xQgvyk}Q~N?;F7%-OFQx2jGgpt=aT@`?TQs7|Hr9+Z
zwBhRskFPG41;Iux#Y=shyU%)e^Kv;kzZg<SAp?Z`ua7cj>1p-jfz4+P)xN}c>U-}u
z9PGK7<iF9Q^W)>r@orFS{b}KGzb>t#=;g^NXp{1eoVcR%fn)2+|7_d2NO7&`Wvfj<
z53F2PW~_|Ixu4LQJU#)U1Qx=@yygX5FsI27_6S#Rg77!dXqBXx+Epmoz%>~v?SqSO
zHGq9t$`nsEr{L;xCeL>U%*GRg+eKPY6y}(GREg3R?KKOddSj9NMc|SVbB)@$&48Va
ziuHc%V4>7{o@UVs&yLx2+xa-ygT;ceAR&4ihj&A?Q&a=9CY{C|Wn}aV{Z7AOY!Kvp
zuC3z*PsSHjYVDc6g=Ti9$h-R_O{ugSioF)7hGF#fRatp5*P0s+p2Kd<K!2Xw0BpL@
z`B}IJL1@$t$|z^@yr;#A6qu@rtPPswwykno*<~4|_J&apEatfqMFZpG)8M6UN_4CK
zf=KVFof?TGf^qzjR%?;txk%+X+a(CU7;VXE=5Tti=_1eV2dwOZ?MwdmW<O-~NJhmu
zs#VJS?&l!=lL{~K>(;~<nbjH4SvVc@F?3aU_eRV($_o8Xpn4pi2i+E~xTxcTrJjCq
z^{E=72>xdLnUi9_qH!9eL#|`-KS$sA`IyKnTK6kuG-uCyM`h{FP=<ZNc^gvrS8$vS
zAJ$LfuK5Lr`%sl$ZMJGW|Ar6Hz{Z>VHAPePsP%|XZvsy?noVj`)bGX}0EK*Uvf<iR
z!(_B{`&EvV9(i||If^SIEjjxG<;&?*{3T83jUT>Kmt$+*mmsK5VlZqU5rr@zdB!@J
zjWQY<C5peBegq>;@e&x3w`H@wg0CF9!HssRh<WLly|V$?%)k>KVHd5uC_xPFok8xi
z33V;D`zi(cQx)VRJcM~ath$UFN3kL?%iJD85IslJdK*rg4t_!V@gxXWvh8x`8&A9v
z!QP9xWv;U2GyU^gRn2tJ{whOK$zo}zXduSR$uhI&e#!nbq+yoH@hb+VN9z+;_wQE+
zO49JXy#U6?C&uIDGUN3|pl$;<+<rc&!#2q9YC^-yRQt9u`;~VtYsTvCo0K-OUu5B4
zIm-Km93<rlg=yc4#4Y?5M0a}b`7vM8JZ@j_fad@WDtMC_TK#ic9&aKZ_&kCk+J>E(
z43!gu<j78hKayJt{`Iq6;wU}_{v#rZ_!+gUZz-MF9QRk#4$ea#fLHR_UssP!Bl<5b
zj$MctD@Cg?u9@8{ldVZe`27kmpM1nCGM}<|469%GixW2xCntcn2_cs#G%q)^yi<5~
z1e!L{fYHQ(02N`3&!9}PI@;cqV)$MeMHHvZeP`HqhM={y)jg|TxA=p-oz1FgLt)H4
zCu`jVmBO{T{!eN$>pceZ@oB<g^&01qE<FqEFJ|qamQ@fg{COxd1<GX6Jn5oSSM*(#
zc=d?_q554A;;uC4NM&tFg>KOwHjAJW4qKbxse=b`F-p9V-Qm$2=kMHKlw#)m1$t(=
zJe+GOC>25PpX~-|bpI}h>ndp<TV=0e^&56ec@m#X(_ykxyrsHt?>n?7OeZ^^*R<ic
zu1_3abj#!MF#BO+!=02#?A0tk>Hfo0PfSVEn)AJRJM?RFgFx(rh~+y}((~dHsR$_s
z?&C?~hsz-ebI(q~`2K<1U6_1vi6b`|Xy9K1T3w{5oNt}9V4;j!(RV`i!`@-rU2JEg
zk$AoR4&Kp|FF7xp;}^KqkMj%Zh1BvSWT^SN{L1wnVNa;PHUjoZ_(lWOKW41_Ov1zJ
zxf>=;wLFf?dW^6J?anqOrF+WD;x%9MG=$G$G%n@Z-}r>Ir`ErJeA)q#WCtj@9mcw;
z^uk+RI=K%j2<?$zYzJ=kdv+U|;I-YC!x;B`g7nc2`qG{7OCGWZA~v|rG0kZuQ*Y)R
zU9s^xx{S_k%pz<Jz03BlZ8vbON_gw6bk!|J+eL>5pg#P{E9mC4+OcT?w^Ht#9JSC?
zB&L=4yl<}V9)Cx`AkWew9D8>Hw;D++S^C+V>v~>75TqA_$6|9<pF1D9bri5axg)TH
zj}kER%cTdyD;k2dB5NQh=y^1#+obV?M^<HzE;B&2s)Afnc3#g%$k#76TjE|A@NG<V
zXkhV*hbD>&9w_)=Q?$J|K)YkvY=+^L*1f-moT#eB5?>6LxH8SN3|T|#WKC1tG56z5
zh&d}9^5#_KtA6jp{eUO;RMQPyya*f7Nf_?N4Bzp6tKeweFp8k3T`KcPO@v4fHkVJ^
zbfQ{KzHAr!cws012@m(jiFnyB5?%$4KQuuYtCUpB?P-#wJ5n>jE@Z~$Tpm;C2HM@Y
zvv2oq@HSgh1o0)?PnrZ>K+jev!*QB>x^A`k&0>7Ymx)G?)>M1h{qJ|*Ik<KkHn_gA
z=r)g#Zr=N8gUQJks4~1`Zen@wtTSC;^A!)BsRrTggWq!kZErpFc`F2keb;`<zg~~M
zJDg+a(ksQV6^GausW4dG<ID&*Qe~vl=U3zm6B38axM#;FBWd8(bPuRV&55`ZIslwm
z0@T>{olJpCn?ywZ)&j_^J$5MuCdoi;v9B=ctQVHBu!|L^0a68wrXe?Gf<$FHCp0ot
z7kfmTFz$ugevUxYpg^0>$QW!-7s7Zr!av$ZLkkIiYNTssb-}#{R!`H5dHsaKyDBZL
z_nOEx&(9T<MFSAfn=L#8(ohYau71afqGt}4Hc;B{#I#FU^*oT(#^>kfM%zhB;MrT|
zh6MseFYazd8I|{s*hcezahlo*;66^>55oM>3<18`hiSt-70Jazg8HkKBgac21Ti+c
zahUtsA~GtqFIEMlALwCb5Jsc|kz~wOdr+WM0QI-Cf~bx3p^}_ckxCh7cg+AdCiTkP
zy-dY%PzzQjOy|8^B-$u`{VV*Ou+77JH^C1-s}I<*J$WtD^>u7+F$YW2d%o-TOqbSI
zux!NzKA2`}<TPSjz6i74e*6$liK<=9w`)%(3f4hRD@xLb|Ejtp{cs8|>=`<sq9zCT
zth$Sbn{Lwa*7R{D`RMSH+2Oih;zRTL89UH<LpO)3xb{0VEh{M;Ol5Owit0xYBcy4c
z(9f`7F!rup$O8CqOItL(wqcakhZT&<FodWVnq#E)f%s9t(*!!+dW=*%8%3V9b~J_;
z>NHZvPea-6!#j>H`QIPl%5rE44KCslE+Qo>g?`0S%gxy@3H2V0xV$nBdbCpU`5}z}
zwz>v7$#sCzUiuyj=$zglc$<l{4NY2AIaIgGrPm<-&u5oP21Tu&PSzg~wUMy@9x2ST
zHC@TOgzRxtsw?6%<<i;lxxcL<%~^u-Fh#YiLl?Z@B+Z@KRif?rKqJswg*4{lD|X0E
zXt}vKGPnlv-NlP{4$-Q&vB*@O1^)p*b9>bAQ?(=|elzkv@_$Y*vJ%%LzqLd-9RA*I
zh`+@(3#hnIrOLqL@G9LCs<;ov;FRNW8ij-HVdsb#1AOX#MR6jI?3!%?Ms4Zq8^n1p
zeCmS|p2Lwbjw7^=>3@ZJ!ejlD*2yMRcK7KsMp)QxCR=yX4;P>=P?&-F_%)<t@vs=%
z5$SkL#1?(XuK{(06bBC(d9WgBvM<3F{3O)>Zu&C6{qOTHHi>dvjWT)5(c`Hzq#_ao
zHmN||B#@9DEkF!CDqVsYzXG9-?x9=%nqEhwJor!3F=Pcnwp(#>33?YR-1+afNd9m>
z*ci3x2!+mm*_Yc7<)%<vEUQ5L3Mn)c4Ve%m=#huoc<3MFQ=CQg_XB?qztcoxw;)~q
z5xXP-gqa+pIzF@)bo{;;E^esk{wVS>Qe}NuyY!DDefS<36{V}}$(X<D`{9F!O1niu
zV)_dMKhr=OvDuAx1UxG|ve}k|<Yh2Mku${iyLM5tWFsa|wYzqkmj4(RqgDcpVbuSl
zl$V3uhZ}Y+$X6-fm+Rqh4R}5pMbIddFz}fh^$V#L6^J=KrunCPH5WPuXnBukH~)~7
zr1sQ60g9^UP;o-N<#&{0z(i&2=V-v88tt}7KM)`*k0!XU{jct||7x|1{M`SpnD_?)
zC>VJN7r<ljz=WIzdaoHO&q|RjpGf;UaU-lA345%>pQ_b!Ot5%L_>F>KG2?`gii7Y5
z`r)S018J!TmKqOL!B>%>{p8~r=8G^5tK?1>p!5{peiNaTPuuw-#;3(weFgbo!bRA{
zw7?@r++}vLK|V*3@s=tC>7%5^>G7vpT38;eG!hkJ2}5rrcLyU4^#*3~<q04#&%$W4
zpmJ9SAk9>Ko7xXZef(|{wdSFZVWdNN()S7GNHlB;H&7~B`N@b`?%E(KgUYbKR0jDk
zB|Bk+HxQLU^05ooeaJ?Rp5`ygLb^o+Os)NCwQUJpG!MY<ba2X2z;C>o2oon&Mo4rA
z@|O)Sz_)NH#(8@p#j^31tqz9<qWl>6Q^I#yhkpqnfc`noj!TSoi0;Jb?NM*aMw#*P
z3FF@|OWk%Fj}DIxQZb-|-$e_21y5%Q7(5A2>aC-}<p>=t=J8uK9A-$z#z8zDKI3`L
zJNb{68imx&GnytMe*s93+I$w=Mf;xz`p*je$K?M1vxhwU7NIYGJ5tUaXL{pmcZqdt
z^6i6*J~VvQ2T+GSh16V&v<u!%@cDYX17a%%Ro<3pIwz%QT8E(uCp#!EtGPDxg6yxO
zjSsXed4HYRAC7}dac&CMmP<DRN7P>sV?Ba|TRiPySD&&cxKxc+&K8^l2Ila7QF_W>
zcyPT`q!$9qiXc}`eJC<m<Gb3p2fWPrLy8K3sdh-q$E;|f9r*)HP`A4HS#t{j{W^d$
zBbB6pQo2Vqa9L~n+u)-_tG}VVOB5;<>RjePx)?UX&QTuy7QV~b{MNT)o`6p$X2luj
zc}2NXAg2sF5?wq!@%S4kwQ3OHEZ=>S7iERCVwhKUc!k8EJa-O&GVOrNqqRiOgQ8RH
zcf8$Y_XD@Jr)Ne;B*u@d!tBJG_EZBa(vDELt?4g`V@JP&O1?Yau=qpwjlbEjzk9XM
zZxbwj5k!>mwov3X1$E&fkXZYaKRr132@38}MA^9^z_-h_5B+eC1YbaOQIE7+?H~#^
zLIP%|?^NQbQbb*Z%yJLX+XDZxg*!sEwuQ%|#Sc~<1@$mQvAg2^Z|uEiSd`1QE{Y@(
zR8R?m0gNb!AW=ku1QU`3M6!xBp-GZjz$U1ON-!WG89{=iR-nmAjD#i%NY0sVGDv7R
zqnLA@z0N-8?!E4hd;Z+@XTrm@zpkopRE<&NeaAaKQ_DW9UUlGw+m$}tGHsr{1$?VB
z2kMbU4A<NQ?%_bMITd@n1W?IgXjLHM?)YU}DGcsqHvlQaFfS?p(}gJoi|yEi=*a^a
z3@@ORc(V!|Q@T8ib&-ie-Yza2{7LgBVgi~h;Mzun`v0&Xk&7-a5V^qa2Xo+Iz&*1-
zwcG=TLuO)jA<cVW8M`LT9!?aEMs*X}kRfQ_0-{lLm>}ulr}$jH{7XtaVZ8@4^ny11
z)N$nK0t8Kvqx%N|%O?kg5S&&kSCC-PwTG+dqN8Kx0lms|7l<;>qneh>U<qQVvTGUA
z0VEKFymeH)2f$)ft4}Q3ghL{Oka#TSoiC>-!ok|0{PP+J*eC7ng2l2?X@(8(;~FR%
zo+_TM!2AsWWBkpCZb{bi@=!ZD4D-sOrW8MIZ+Q|?Dht`UVE`mVfR62hCm_HYz`E1=
zVg_=k3Obhz_oYqxeJ*Adz;~<2bP%7F)N5vpLh`>z68{>MPOCv=PyWqm<Zz**7OdFn
z;){c}*@gbt3i-v~W{btpL;xV*wj^I+*uTUA;H8uJV;|g+Vr>rID(kVB)9LR!3Yc`)
z?5-xLt^1s%7j4sg8HfxJGFArjM<ONpmeYDgJcPZr@FEv+Ju&XnvU9^fxkwX7Vx^jJ
zmRM?I8LD@{B)0Z@d^q`m|CG2Xz}`F^q1jF9G9<^wwO6*#d2um0|LKcsbAX&uvPU*q
z1EAiGlo;}UR9RTK*VTPDu}TbKo=XMraMHawB#aFF4h%fV`pg;-**i}hN7wtYrsNm+
zDM$)SB1!VGRzfUdnAjFW6}3e58i-b(4!Cj;>PSc~3rB`Ql{H<<)*WA)+6F6W|38b)
zmxW!&FYPN^9Buew1E~R5PfI!MX@OiQn#{8`H4`)^KDeRNeW{0`KZAd_kzuVoapI;1
z=mrc!;jt9-JMg1k!$aaQHz1^n_QMVf1Irn+#8zzhgjVU+)R{p5sAy;dkpfG?&n98C
zDM#U8NDv#?&ZN-m1p%6wBobUJQ9Me$exO;j(`#jnKhiwCowWN7tIVWGN7h$^W}Kdy
z&9eu)2af(3qar?p&D8GBqjx}7x5n4(sN6vq!?C(o3Z9TA{hh13s(&Y*{>L5d&>Ur(
z@HH8PO?aDD0emj#RDWSBNB8S;!n$B!5$ESFb1c`=$xn*_HslHyo$F6EG%miEVIAT>
z07d6F*j8MElvVlHIrD`2=71598&CQAY!3-&`i3bQCJ)l->)>STDLwVcVEfUSP|+DA
zl|?q>1&o}Xg@&>}%+17q>KpZP)Q$7sE>)B%8(1LmvS_DosJHTON0EW=fr5euC-&o_
zJj3>qr&Qw9w3phk!X3`iP<$hH`jg2qod-@V40lqNk3vegD}Ylb=kj}BS}D(Om;Fyh
zd=W^D|MvKLQr(m9UEqCQPZe<yd*ev~%@kCPrQ+E$U&xs*9(o5d%G4S-EKToAS6O^p
z*0bK3%II}QLnw1Bn|#fGr@`Z<@5I{Y@_NJ?7gDf6=~e;7K{fQgxc_@`GLFMzER?FO
z)0ywmTa8*WBN~oBLwRLeEpBp^O(`e>Ov<-GrJ{by0)>V0<;jk0{Z1e(5c~6#^}~hl
z3$C_o3*D{nxATB?cEd5vs{z3u4wy?K$8<w8^nlAREy+mzhch6|U<vgI$HkzEynX47
zO6K-kZHU)|*J8|7Ha73AMgkv^(WioG#w8m%p@xN-AZVt~J)33yu;{DZw)NfmAsOir
z0|swi)<HK90UHr+D0}RhLDk?v7s6+E%gW$j!OHB5$dZwLlaD>VT?}s(Z9b{DSQK+v
z^LwfC0IEF3d=rc`wM~7Jn>Da7_%JIVL?T`CsN(9qF2Kdpy@B_lU-J<kB--WSnj0B4
zF7YX|d8z-T8$fx`cfbrd4aNq=)D}bgaH;P52_joh0~WMe`gl+u6aH--n!1o=hP=W~
z8>fFfeSB8Q6II49S}_ZySl+%|S^}(q<5r)I&6>Wa^Tf(w`x9)OP5-nW4pkmNxti}F
z7WA(54Yx@poDgP5GkM)d-z|!zpK@6W|K(9-874w#JpVj+&#((pdFNWrj`z*<+F0#b
zj9qi`SE#CL?Gg3bqU0r*J8S&u*B;K52bODgpTBGvHJ@w6QV*suz1mE;|3691X(A2t
zYXOKfs`vCgkbciyyYp80O3yk7Mn<5rTg(x`G`;YwENyk^M3pu!{(RN^(3caDS!ufK
zib;-K0!8nx*+0tz7x04P3)NAqYOw?);4@NAY%%Fie{4o2S9PWcJsZnp_j^2w%Cr~X
ztxN3eIXbG^t8=5YeUV|Kf6{c@umJW*+VOlrCtRRJ%f}yAX+nC*HN2*%idEHHcWnPN
z@@$!o^udLJRvA6s+3cv3M@;&Q($9Jr_UF)F50^aIT;U@cf2@5;KZzji{CfsN@m)6z
z{l2W5Hno2L=!&5FEXnla%!?TY>yVO@k_%}Cz4kdPKaad%r^gC?OnLKMjASSj2b3@W
zPn-s8(tNLs*9DYJojRms+v525-;L<-980=WhW~6lA_Q2QuaXgGq3A5}*5I&znPt+s
zNddDx3)%7NphUOCfRpmNO8U}YvMavE1<#p=XMGdBR=f#SDj}k?rpR7qbZ{ccvGBv2
z$+&+~0`;~0^RQ^#SQy%@2nF5XbiTK3$Fs=YuR>%eYlP1Xm_XwVL8X?ElUj_0qMxIu
zZ=AZGRswXUk1tCyuFZho>|~x74T(V6MG`c!XumUA^&ag18lIgcZ1;+Nejnp%si<|x
za$1drxpLa1zi1HNKg%jLYg*S+<?zR=St;THrpHytpr37A$q_vgbLs@wjj~fO#wlE_
z*-LdzznzOYrQeL1+MrfEBqm(NN5en$_hf8jziw~y*eXWOY05pD!P!II1AQ(Ky)T*l
z==LzQePu3bNL%(PyHtELOgCDS_z{(OEI;kd^T<b;_S?un3;RUXcDl)OqI3+8XT1Au
zVbZ@1R^hR8b0*Fe1b^C=GwS?IpZqjsZ>R_ycKKEJoRb*OL|Hk{(OQZdIJIu15<X!N
zm$oRYNpY%}K<R)i#M(x^T2R&|1?p^~xgibnzjRB|dwTH=55-eV;86VRVbPG6nxP*A
z)%s9p6T!5$ZE?Gg65SF7C;I8{m&uzR)wz*o{ZcTYJ0z*$Q`Id!$-I4ju_~sviq?;=
zH~Z<47w`CFMTy+}peDp-`AAK#$S^?Xpz^-Zb0F4@9nfBSqd-iz2wRvCT@nmzGEdhV
zNQme+c&WMHwZoisuF_(vLpvuf?%qkIE};{@`ipvE1qY7ERrL#-1MC|TEDe3K$a`24
zuk~kFu}iC}Itc3?zGQCHsePz9U$6-e3Pge)H?j0MiD6~CC4K)D{f5J;uxD5dh9rH2
zI6D)-24Co`9!&ZEb`t`HT#=NC{!>~rl;wqL68fdT%2+fb;0UPs`v|xTh<BOM<1($(
z9^GS5K0wX!i5D%`wJ=I*ANZzUwmUQWR%-eLWc1t3j>!r7>$eSxnp;CVp*Bpn+lT~`
zm&)i8(z@A?lMYrOthCt8sZuk~a2USXj*DIefS}!%DNKdX>e_?H8G0CVsyKk|)hY={
zZ?<)5M@`1@BY9VQQ<Ct<n))Bc=xDkwLqKG*SPv=hGEI}=t}su@7qTud3RXXRMcyk5
z_%w3DvpwoYI(DYZWgg<x-=fOT37j%UYK#3oP&%=Y^O$qzpx=s~2hWQbO$UF)z}=nA
zWy2x%o~PipRF{?L;~XT~M@?V2a~cY>wd4hPF0p?u(c$JBQJonPs4~LY>Z}}0`Lm_>
zFHia(Sv)W&$n=%`Z<Puhhue7I0awC>a(~Bv3{RbaW(pLG^t5ZwB*k1JvtxkOs{OP~
z;7~%Agy^>4T}3$I`-v-ksZ>0w?P}HGHFT-e4N?j(64;gSn!EX$`FS1QQXOO4=zY2l
zIO+%Gr&sgxcU&ei#RbYn_hz<_rrsk*ibm=N8&-UhZ1{CC*sh^G+O(EekFJ=rta%AB
zTz$KMHI~J5cy;{};YFT&vb9V@=S**iuNvl9K342nPt`Id=w4e*ZJi?>6z5~LE+ks&
zT)!N7-&&r=!r=X@x4dD!CPw_m)O=qab5fC-moar7*fo+qF8jWuMrlBZj_o%YkAwQ{
zlvs|yZ`&wCG4H3jhG2hc4HwqE?_5$y>vKGe4m@_0ZG&Qohsg5y!Sc>+aXd%wsE*Qy
z8s6TWmmCOeHK4bkemN{oaM$l<ztEJ)@vOA!s}EO&@;dM6TvZ;HtkRL*)og$I*!opX
zm$vqytEqqXok-2iHZ4pr=yD2FT1Y44_cO~J-!?y6m)F8fu{P_>zlVCk<x1<FQ!!T&
z|9;2E)LaxnKvFMV6mzojLIO|EWe=+Q-guzXWO9RK9~=I)2T_5?FZFDrK*IY|WKv-S
zdFblQo7pax{^6%ppU=uAGHL>|E%cASaH-{0p%vv_o%lnYwu5P(F8_2fH-0YF1bx0t
z$%-%gwbObj!jiiF=EPfHkL6#Yrdt|O#L|6t+G-lw04X4$X5spS=Ve<{&-@iv>!Uag
z<#AEk^%v-^l}M`ZhrIQh<4FB>vkqo6P7_Fo7d@JIE#BZq(1Acx%ID^=8#{(TS%(zk
zib}VAISqcUQ@-jDKZuF|UpkK<Kl61DXg-L((EYB=O&0aa)_8_Nq;b4)r1e#u<{99d
z6>vVwQF^ldOjn^xcKqlezx{VQTxolO+k#RFB)Bo!e{)*M{(Z;4O_E<d%JN6*q*0ju
zlzmIeYe|9ZzN{Cz`-~R)%-4Tcz0)mmnz?Q}=SptpwjCb3>i-jGtC`j)RrNEpfOG~)
zS!bdSW5UM67M`n7x=SXuDRzYq^o))UrUsSVNsZlYHk4Ouc<0$M8;?6FqEaR93t5M=
zB)N2DM892enKXWqzgIB9a9>1W>(LrH#|<aUz(TH=lk3=BO!S2PM1pc72>f@<VP}k~
z%N5z}Lfv%b7KT?GmZUtJ&+BAN!<DatpYAAg_4A1@VX1wm7c+IVW;|)^v@Xo4%w5(v
z@c>W{*93jC1s_Psw|=ry(xzt4OjOc*yY4Rpef#p4A^5i4o~Cc~&;y*%_aXoJJBM9)
zHh>Xsr@ESR!$GfuSi1m$_y5}$8bW*8NAGaPSKT(?HUwP#`17cV>hBu|7LXJIqE_Fq
zaeY{X#WkpKNwjx1+8!0qQt!_i&!|57dMDs0#lYNNwBNRr`bFrI!SO@Jhuwg&V586d
zEL3zs8dLLDv52P{Zjk0ZO>d8eo@@HV6RCV3mnk~g^(4qMw8+C$UYF;aK2ix#&2-AS
zo%*<8!)!{uJXc_R;|1$OzQb(KSD(DLdK;mbw4T0}7`kt$UGdIvMMBcM{Eo7koSai)
zP3*t2a*U32wzG$ct1zh9ib>$Ks}C^bt(nHoNa02b3YM}-;cl@L{j@P7QPN_BsS9<>
zopUw!$j0ttiIR`QeD`-HIT%g6;?KL=o9XR7J6K69{b^tG_6+qJM@!J&GZmhf-^F#>
zW@)e5byAL{tdxePH2AUD1s7STvhwAO@w2ku#6p@PBHE2$+pPQj?T>?A`L0nWx6=69
zGb+2SCoAV%v!c|}%4L^tKfTty+PxG}w!T0hPFxsiBuYWOzd=gR2?qjiY-R|$i3bTU
z-+q~9HXBjjTDYx~>(tF#bS@U@E9ubGi)#JBDUCHFH=Pz2ozUSWxPqIMvuT(qES-PX
zL=aK<2N%Fsj=kx+iWTjWI$;4_6B9Oe<|q$FGVytPZ>2qd-%XRg(3^&q$@zprZ}%bg
zqC=pOx`ncuFQT}M&%s{n3dzPrtk{sl$fxLG8_G{GVk53hn!Nll@H+cTSL5N+4g}V(
z#IlEX@m}+z4OI0sRvLD9!8fj-i(P+1rNE^BHIC!hCVwTkPhZ=2ieJi?9I+s0Ss&LP
zCSiC}%)!2R=6ieVFI>q9op;HRSEfooI4nSVD=#~@E6H4m{R9@vm5+Twz--h-NMK*p
z>+xPcvE~xlBGTGELNUsU7Por6<2122umVe3bcuXu5Li@ddmx$1PhdYz>|5-E*(*gh
zFEEGEx1PJ?xQz?{^W9v2Se><(Z+W5Q-Bi{cIac5QNLy_DKEJe9X02vjrnFP~Yi%P1
zGigV?-`pY8+BC^y!;wGnc16Jm-{=y@`fNU!!46ZFZO@rMVbI_wy%J(1pdzml$Lcq)
zPLuaRC|XHuWhgoJqvr2)HTfOySZU|C_@?i(&1(E@Q5)4Zb*|x*JD%yC!Os0>KXN~#
zy3ckoW?R%zmLBRZ=*mmKGmjDXmn)E-TH#{Ht=g;bKCxPkAKa?4lILErjep)_N<j*n
zk8{eva>uD}$kgwCZGRYE+%cBvUR}p6XJu)b`0AlawFlSD$>%h*{!9)%KU8)-hd)45
zn#?{qmvNmUdOyr3Y&fS>La}Zud%sl@k#-fcDtKA92+rD1y!1yOEw1D)^gYBJW8Eid
z^D3@POFjm_sK4*Ab&G47Yh>VsLm8pPn)fqVIXnFr7FMy`JITr6Gh~c-k(o=t1NL_7
zg0Mk9-UV_sY7dzwFBIo#>59)*8_*q1m0Sp>36#v}Tc2IyB2`G4h)?NzN$<PX+M3+-
z$->QQ{0mQ@HkDi2@ot8d-V(HZC>_d@s4TU#b!|44zwom2?gv)UP|ze3v;LKGt&m_)
zWrQhgIk%kms`8nkcq6HdW5MuvyK~oQ&z(?1{#JLXjRQZk>~nm<tnVHxf24Qgb<QLB
zeNb4TH>T{2g#zDQuyDmpJ0r6r4#FS0GfW~3u7{nqWu#pYRwKn-iBO=~LeHkaXT9ZM
zar|ldN0(@Po^NBz*Gs?U%(bPCK7VR1ozFShVhin3%vj@r%e^tRb*%~8I`J9Xsfy^6
zDXBE9Cb}8>sTXN{_A)Sanx&sJyT~U4-<g&DKG6~WqB_g(AiPa(q-l5l$o6Y<uor1)
z8@5gNau`=~Ls62>P4DuOif;)MO!xW9@v&P~;#k6&*zzqZe&dh0e;NZpQp*+-58Kt*
ztGOcdOr2j+jwEajdHRy~R$(ve3mR++G(N7h^c3>rKTvj`v%9zS#l#VI7_g>5<=J93
zK8L0F?Vw+bCdmhrq!l=>bOC^17}+D?Gjz&)dN5YUp~M+l_zTO|VVyn}wtPQRvx`q*
z75OyNVS3-(og~r61Hr&}WP?;_(3!!A&J5PX*8yKxw$S2)s}%TQAY15ZclUl4jJqQW
zTFXo(-sQ4?c8e*{J96}v3hSBh2y4Pz6>QWwO5sU=BruOR7vmc<SarITg%W(c5vHEp
zFmRKe4W@zR`@cJlSlT7GxnZI>x4dUD7v`@uqw%=`2j@LJdTY%vV}g3d=t){RW`~{;
zGu=^bVOaQ*lzZE0)#zupcXGt>E6uMclo*$HUuk%KsCa#HUHxp&vxBSX(@cYhz&sD8
z<~&2c9|7}xA((NP&7Woo|4HZE+P&SIt9~<1A)>sCVVLAOWxkj6aMt9D8&?JYmp>*e
z-_C5V7L&68JSO@2q#r!y4OqE}=Z?`Ww7Q(VrG%>HgsCg=HZr%;i?UzdlMlUs-kEFg
zkR%DQuVP$JRDLXLwsFTDjP|N}b8?YT^H3wLZf5hLf%NyM`wP+gOND`%L>n|{(?4ME
zEv@^JTAyqJX6K<b0OABp?{|ReLeQ#sa3{mG7^dc90wMO;R0ZxKZryEjig!=K*g_*V
zcjKTSOpzd*afGc9rua_pY|PBA{2$ubiw52>#S(9dx%>0GG#Y<mP6`DcLhExB4Z`ui
zAH-Mo{MJ1uoLeWC?*6Gw$E|<Z{Ob1{V0amPKaRkozQGRWvLJ=CF==_Pma?VsjJ##)
z97vZ*sJ+5BT;BCclDV5$TVyyP%kLfm)(obq<Gq!jz*7AYto$-;9lq+SIJOhl;KLOu
z(pt6flBMaI9vH#TjSL)qy4GeXe_cq#0Bs6E*i%`r-ycA~d%;K70;TC_53xA(a5=gR
z@a*&PFj~OmNW-2IW=`)dArJ_Qfskw8XObQ<=X)8Q1_}ybU<^9fo;;+X{S5zZtLYua
zrwW<0ol8SissjwnFqNmI4;5VCp^XMs+9;1HeH(_i(AH5vrfGiciVXUF9R|0&&xw&<
z5iCJ?aQwT3B<)iEILXq96F#{kJuG!REVsaEWY}m&#HGzSUw}EYrT*Lt1LuT+-xMI7
z-SzVl%=v+l74bg&rJp2iRt}FP`%ft1Oy0M5KbPIy;{ko2{nOARQi5O~yI8Ae?3#v!
zmg7xRjCF@SGNlq|#%6gKVvM%LGeEvAI-*+bJp9cB4YLM@{LKjeJ&1-@cMohQgKwk4
zw4U2wJL$=es!hSSm2})Y3NDQ;ALptiQe7g(zqonO-g+X_3P!@Gc??D-pzB|HxHp!@
zr^rj<-K7$E-AlvYwV1@&;map0>Q!}CS5_u#(}%jlxjm3=eS#x~13Sbm1?R06oI%fZ
z6Y7}$9D(yzo*2hJ1_s`=d{3N~3ctvd@!h<U<RrML3^TmL2}U(MF6Ihzjexl}3taTt
zHLVJBEgQdJ?+))|sw?QouA9p6%sGEWu}+DmXl_b$<R^X@DO&=Zoo8-DpE=^KpbLj<
znt}96pf@kP*k!G)?yu14SaL{+PZO45YVD4LSm(A*87VUjWJnjmsO}(7LgSMP2B1fD
zoZq)a9(kjLo%4rFU?lEJ1`6<{epvX=R`Hz|V6cbTVXzhPVs~M%>F`g?RWJS6HLVDP
zMW?eUc!D~bSI5~LXlr1R41fXrq=A5l<Y10CSGLV{Vp2vM_>H+mJuI{qEcA2EAiE>I
z&tL<`us^hW52mD{cA1W8O%J{{JI#kH$#wWEdapFJ-=}-O>7s3{a|!<6IbwV=)1MQt
zz%O*)X_Ua*T#EmGhDjX7nO;^RMI|M>JT|v2JZY<NCL>Hb?i{@Q<_{dQD&?2J!8}N3
z#*eGOqqro3F2IjuY&k@BH&rVwuW%!81QRv@FZyl4=fC+*FeLmAwp^Ur_br<PeR9k^
zp9wil0p#aD7|e5Q*?{*>P1`0rt_EKuB^9I?_fDZfwd(wQy%Gj8!qbI3%<UtjNDD73
zGfYwIP`nd7$QuWi?54N-+++BDaSlF*k$!llIK16N@L#d;M0_eE{zI|CE}tS=8`~8s
zG`>26y07QiRqB%;le<Ho1tHTkftYT{#cdQMMfmD9yvw6mz*jdyL>G4Pg&BS~xbF`<
z^NF*xZuAs8*ZYp4`Hv!GaG7D4g$t{1PHG2ue%d@c`RX&k*t(v70vaoyW(>T2x5X%K
zA2u)<mUqtsF2K?nZDqQ9;-zjcrNTujvP6qZ&(Kyv%xSo0yGLy1hrt?;*4K)zC3{1{
z5|XlqERhjnkP&9enL$XDik2$l&OFzaGGv5l2j`P;U>)7$v%7s%=o{%NfwU7hzV5U6
z=z|(%sb(l<vodztxMGN51_#w)t25Cf-^XTtmkqYXGZ@`bU(8#k!K3APQ}vJHhWYT9
zzQHJwyFPYwOLj_&@4FB}2Aal(CoIy2Y=7+nNvWLuQQP6jd8!Df)`_YbzFi7@Y%l}`
z=1LK^6IbBWdfh8+I}Gy-4{p3wL)*nj$r_)S5M$0N>Vo1|sch&rVqR+GKcSkX5!mtq
zM>Uu9$O|#^LYCxX2cBpAqCb8Y{EkAl>V=U>CLLpVXsX`Jbs6MQ8Nj2C9&>0Nn=loP
zNK!3H59_w-jWv1^4MizB&&=SHTj<Y$3rf>IxrhRpDmWX2%NXau%)l4u4UIP}y{GY!
zX{Dp(W}fHCPh(*&;V8!K@x&F{ODQ?~;6?LCz9n}tWeLOk^HvB&2m6OBhUoWFnA7q~
z<2l-Q$f>yd4si4Oc$_C<-ZL=0-_~iobWZ;chS+>VOw6Lz=&o`g?foU9t5{D5zKljr
z9qkQ1@AAX&xO-Y?zx~%COcqmTvvbigjO6cIbWVVRU*G!IMtjHwC(C9e$HsISj;+o3
z?ka?61bS!naDRAvr_;rG(iCp^6s;Kuoe_iTZ$$F=UR9I7xiE)OP#AwlOb1S;V))lX
zsy}H!QW4ho`m(g!6PO_Pokr-}!bnliZm?OhYDx+RmdX}nIIsZIFnR{$6lrL;fE{i{
zt`Zs}buNW?*Pe8O6Q#~K<f0kJ&m#_DiI^g+EiTX4vGN!O#E=6*!tbGYfJyl%n4j`D
zObTocH?W$ju$No-G*jVNOPqC@-43r@?CblJ^s~&J(UZ_l;Wma8VUD2okDJ5)myOPC
zE9FdwC^!qSqq7Y6r=Mq20zhad^(4epq{0R){exW)Q-xive~|-owqlSz=<^tiB8(2r
zlZLhpyi`aAe+JsoZgA|6d{FIRdMpf^<c~y<`D1#@C!L6UoZweYn8f(eiO=@*GVF$@
z&q<oQ6yj##ks-o|=oI2~;P|{cG&0By&#-uUMH^0EryZN8E#FIYOtiT-^1wH~Oomqx
zQ<xK|@CO#t*L2|K#ml`1RTH@_4#A^*MVxkTPUI<Uj^`=Aw{vWv7eL|W@@`QY`l}Gp
z6LdV)W8T3tp1c)@%jjS3`QOv{_uKflQT=;w{QIQ(|L=kO`VFmc$^2_>am$zb;EA<!
zzxE+Nz7BqT$i9XfdB=2!kF(LOxgW9&!nK8dXRT?M*wU)rUWMC`aA3@yyj}N!=0}1i
z1-8f;n?Rv<dpD?Nhm1i`hfV*)_(YZowUil->{&}f@+KrejvAF%JP$hdKjV*(b{c*Q
z<;Atd8`P<#?BIC;9tdXRPfF0K&_FE%QzzYt!%7Nq%E(cE9r+cG9A(uNvrlmS{^7~+
zM|vH)hmcUGonh4H;rC~x4{eiGdEC>rd(H&3m`H2uOJ!0(+>B@gp48Q;47qFJvL3mc
z;;<LC9{8p0#d+GuQnKfPlgA_=SpnaFK2ZpV>4$u%D?mXe1%^;GcgLQdZ4}%)ub%P=
z@VM`EUf;WaNTHXa!ab@SU5+?QrK??2?F0&d)WdsX|2#InJ`9pWXY`Ej`AUzy53Yey
z`XIwFT0~lG13o3W@jR#mL`w*H6oC*2(p0he4hq_yD^0PBozWon@)h+08um9`iwC`<
zYjtD?K3aVyh&g-@+ahcI27v<CK#e{d6AH~V1^4yjL)s)w`baI@nPo2-MNss65mgUZ
zjV1cF#O4}d&lwi6Tjky{9sT7S%s;QI68?y@oKGu{K6j)y7y=DB-AAS9!5I)>6)3`$
zA`l`jtNF7n{18&drd}}pJD^~c_D+B%7D&LwHT)$INQnt&py_BZl985#;{LehAM)$B
zZy3Ai&Xq2e)Y*W{2?p2)*|uwce#lF{kXuPXG-eWX_QWog0sDglYQ&^nm-gRoF~ADV
zg_W&+TchC0va8$HP+c{`A5jme8l+WxF_5R3Al$RQm`8fZz)}O>bI%D%oFkFUI;hER
zoI#Qx%hP`Hoz9h^P@mi88Rr1f+~K#sJP8NFT*M3fq?v!Z>^cDYZ7!Aez%iSHipjUz
z_8fnUB#CVhK{MYjZ<8rD#V^17OdqIeSieoqDzqyX=Uu7yo0Oi%7of5v;LV)FfGmG*
z41$SB8F}5-fqMGp9MHh0<7V|mLw>Whh8Lc9bCQZz-s>-A3hA*DSL>Bn+rp<->WAK%
z1)YIAK+f@0Qc|RyH8w%AGl_MN&X2*CO5!V`OCIs|#zzR{nA2hcfE-={S9#W=(tw>l
z#SHmV)rM~u{o$@Dd^KWD8BFk?O1PlZW#3fyPsx(LSx~I(S$*c{5}`-y0>$2I)o@?x
z6s*rMz^S6{Gvk1eU-#fnTSOFPQfGk^DXerp@ySS|9HRW{gH#x{M=vGj!8<I~2SBAX
z>Dix0uwwH)&_Kuuz=KFr>bTyHx|uNzuXan<GRX|p%s9i__o+$x;|4rQk!rl+DJ8(Z
zZ7Y2$xvWjM;@z(uyYgm7$t57;%D=g6w^Asl{L+}}3Ze~>KqoF)9J2d9I^K|iF|aV{
zD0Z8hRCOd;SsfBOIVg$0JPVp-;jqSOi^LV;m`s7>-B*b&QZBc9L?Bpa&dv;g=7klI
zLt;h0`ozOkR}dCtPzVy4c_QRX$6#S}3k1b}BLX*4K_aeuLZ!Y`>}uyo4LrK!=U(yb
zHE+6|A5B|p?0xf*Op(?;=z|m<{V7AguKo3vsR(SQm3XkpmQN;)scl`L=~dVUib#{`
zR;2EhQ;sC%*6XL*j|0jb1O{WkYt)<R`9X-J(`qx0IJBJVSkARe@+(>%0i~JYgY8M`
z(blGGsoXQn<s8G<)$dZJw=HTw)MI&gwP&N0+OAi&qMP0AKG7E5i&#?yqflxO^#+Bh
zBcLm0_Q*;fNYN(LAQzva(i8`3N<vW9L>xABC4gJZdbLXV^BO1=VSe;KbR*|Mn>lCM
zi}<(G*|F4`_3N^oey5=R|1GsB7jV<Ew2jne-i<$(vdOs}?X2g2ZP2lvucyRr@02N#
z%*v&ticIc*52wL}(2xs&IL5(I=ffF#`;g{KI1LysI7M{A@!-TiOn(M$cRzH<)`7a!
zk55>t*YfF2mx9Dohvv-=)KkggIJSVpm(2WT>(2eZo#QIYjkCMMfc~hm2=pHduH{0^
z8$oBikC{W5&S6?yN$<iD-sQ{W3FZb!NoeeQi9O&>%2M}y>hSZB-)~m7*O4YW)51Kh
zw}pZJTRGzogR3fLA-;;1w$>fgf~M!Cz?od6+b&I=4J*s3{&ExmVv~(M47JyUC7NHK
zuf;)c8rQ{A$&4?VtosTNB*^48t7-@P6pecUHCSSQuH4OrVcI3T%)nC_G8x-eeTCru
z`Fp|K8PXr2aAUf;a95m(T?lS=4gFEV!f+!kh6=H(@bg5qN%#f9wHrUvxV!9{+$Z5Q
zh%pZ95(<u=g6@A^0lf01L%)sgrzc)vAC~H1ZxI;PT{Y-1^vMa0YFPA>U;DhBTlDLC
z8v`Xd%JDhX$x&N`An~K?40B4Cv_v)jLt^N7URlc})Q;P(EGfJ#LPE~AU3?XnG3ELD
zwx2{)U(b~@AV*{}=PUf+bM5Oe3u@^0&gQyTM=rIvHvIl2yzrT%&?-fI;~!Z-U_Hlv
zANwK7?t2RB&h`><3GRFlCLD6T5_QoK-`h<hz8k`3Wl`QAoZM3iZ@;hg?XJV#3TNT%
z_x*bPicj+iynXW&r`q%23+FTwNtR#*2}1Zp#&v=hwR#PXTyZ@UH*+EH8-LQmo>}MS
zOOj{_te+;fj?pe%tWM3x6LVMdN*9D=_7yj{LMw>oP$w&ne5`Ac$@NsV>;d9pzRAV*
z$|Oxw;Zw5UEUl~CM$eL-w_dvsLi+r+R=h%3r^;htzgcPK_iR}(6!s}<cQ}+Mr|_qI
ztK2Qm=|{ZI5*P6f4QjoatcN2=6as5!QGw+A9vXdpoWY(&7DKprf1Icu1*dijUfaj<
zN=vpA2H-a1ze$^#z$D!&8|~h}Pp#0BtVcK4GKsasnkv-u&qAk2qS?^*lU?~~hgN?r
z<GnFo--=nN+X^|5;#zt7c-MNjlAvdmjS|*2nsKwTdwJ4A9{Zw!XDA|(z`Fg{5}13k
z)eiO~Y_xOU*duyUx1L9PjxuSfbZN)=ZEOGF0?1~sjHlsrE@h|^!oFHt#h`AB0X!1c
zuLiQ1J6}MH#LOSRVRm8dk{#o8OHe;in1)p%ClM(re3R_H@W!;>gkOL+#)tMR`|I0$
zK-FEsAN%aoUW4)_{E466!cVhI&xP-vV5Jc!wUd4aVO#zH@ynEjz<~ie)N`S&&8Hpo
zm<Zux%x%QXJVU~H?#noye140Y6MHkFGr4=2XBRG9kcw=vZJjYtHR(VNnM&7&gmJ$f
zPx!UGZ8ew+M3e_o@04r6X$Ks(wRK6j;QcizpCXggak<~4gY6C@YGz$p7k-~)MgiUl
zu}8`@J_;znJ9+erLflal;5{7435USWLjCHaGbq3_qK*d|W1nHw?%771$qajIZF|oa
zkH=s1aZk(8?ahpH0VY$fAJ%Obi5b@cN7*g8x$wH*Wv)E=P{+|X4C+#Z5=&id7Sj69
z4ODN5v=<K=td=EG?(=sbCZR>{L^54&r(^XKzq=gyOQIKrToPgrrg$C7n6M=H6t#3u
z4Y#NGjeRQ&cK@icAELr<S{4@p6ub@Lm!H<9i$2i16OvoU>fExyN!J;?S&WCDFACSX
zcdm~m$4Vk0y*BU%<a2#=jN3m73(7*ML{`1VQM*1YRrYDZO>lo1qRro&uc(E7f$da|
zIIRAzl1^=GEEX&E#du3bdk<6s)V#WM(CUR-pD$MpYJZ2?GOywozM>R0HQVqD9*%)r
zpR$!X)Q>Eza9kz69ktplQU>2MvqrY}%FgbT2z6;SZl%n%V+r9%6W%g(33RURlr2tq
zZFD>tgg7b|wYxm<V&%>DnGOz-<vZHGeWVu8IspfGq2pen@53rN4Q+1cB&}5VvXEzG
zN*F2DMNQZvEEBH8-qm{uCD$wA76MSg5Hj=a3kge1Z_ugP#?iZ`58lE8fnR&gAiCWC
zfc-3-^MNK`+iaRxbh>PueXD}`H8M*Ebq<jM>i|(xgFK_i$dK;S4)RbQM4oiA6(kgA
zam%_p3t8gu;Xp452PO|SjiqzJB3f@EO;8ipk$-OhX>gjEdZ!8%WERQ%nC|<6{V^J4
zaPHz~yrX1UY37hq=Y950-ut~iwyMdAIyspu5aeB%3n4s699!3CpmYUktzxgChNRRu
zrAWDexAI=4)cS$AM?0@_<m23JjiB`yF*a(nxzP5^??VE}hy|n`!7b%En5tf}w==KL
zYY5N;3uvO`#NeQ*f%ZBmAH7AM0m(lWaprqyrA!P#;h5!4=|Q#xKA8fcn;**==d&@S
zRNuza#a&QOPpXxfva!GcS!{h6IuCyIDR?-yLWaXg1SzgI6!zOS*|=teW$G{e*zXiT
z%`#N&WS~Uco1!(toA#|jm}hN~T=cPvxCBx^ZEa-tv9yky4Y+VvSoGUNozG&m`?mD&
z&R{T$6G;`WL>b`x<bKn>g`ddCYj0bmB*q8sbcZHrHK&Uv@03Y+EZT@U4*qPnOMTRW
z>46};rWL|nPro9`g$uscP2{~@>jqLAAHVDbG0?ed8G)$ZWt2n3w&Mky9>9tzdUCEn
z5|Yy~zglelKkw8+MxtB5eF}`k2#lnk;r%Mpn^RyUl?=V};mAlXUQyaif&LMU10H6Y
z;f1^kbJF=6B3;%^XP9k?`zzt%(BZm)u`L0mjKyM5=e%BKep7s(AsNe9A_=4<<7E)=
z`*j|+8RqxL+pd@gMQYWA^FVF1U22tX4nwl7Z9UQSWOA+XuO*oS2`dT5oCcHCh)wsi
zJ7KV?HqnV3wuvZ-jsQQn5UIehxQ>zB*qF4zWr$4h45a);9jR6GK4$Kikl4pW|JtW$
zz2*rduOY`PoJj|{*#8P4ivv_eCXA7`1k7g1?#C;p$EP6V_}Of310e^3E-g9C&oi+L
z!n%CwjuMgwQ(A)#_KNV6$-nlc7+kyS0$x91W4a2CEv~Ba7C1Hs_@Cu0HPdWA^<k7z
zK31h7@E3%LZwH@nMkoBt@G%FZAG<s^5(!eHo#}<+scz9vTp=5M2hKI!O%e_L->291
zgFe6DTuVIuev1Yi(6T4#yO@;VUKwyslz9_o@PgaPY%=FOJtVd*`2jsve>w%wsUV!;
z`EvinHZi4L0ujj$)PI9z5A-wN1PRdnzH#&(SOMa!_;|o1clgvJ_$woRCdjW`w!2+y
zc0Ya9&Q6P(x3@1r;Oh~7;SuAIh++f+dSP*I!V{h^48wYPEAYTP#ohP&)4+i5?RX3+
z_k&lDar<%6nln&NTjI*<!o~c`yZi+os&8g_-v4XdgSgT15;;rUm%|QqAIiny;V{;G
zaJ0U`PKsy*f3b|tf^c!b8TelAfBIe(1`6q+EAVVi)BQE$m+#<%o2UsS^0Q&WwdLY3
z6nbI23?{u#pIquasP&24dYu*^2{L?eX$`xXc-cb#9D!6f?Q4-`y$A3_BjLv<CSV@%
zwkrHb65^#^Z?{#wdN1Xh`QN-AQ3Nh4U5h|iyd!c;+;4|>F&Tkfl(Xz_m}crcA|R<m
zGUb~nFX@Qu3UmNU{u#I;++3#{-o6QLFb$rHn;vcs>k%#TyrYp_WuQc=Ph=c^aPcoT
z!l*9nT|Ma_z|LTAI34(>xdSXTH%t-(7i|*Y|JQ=^Y37#uTJ!)K;kxTAf;{Ul0&=Pf
zmh%q+(LVvOp*}?-?1k9SBF`yI2WS$LfazK&{TQKr@ZzVhdvjAvLVeW{>aqhOngWr{
zM8zi6Y2k`@c~`P^eOMLC-2?eDFYO*Jq0AB(j&67Gmd$t1SN@3WFJi(0Fq-jS&tnev
zCP1Jhcf(h10dXMwd4BNKEAtUxVS1xsknG6XfZ24gSn<Qr0Z0bzh23D5B5J10Cl97R
zo1Hjx2ZrGfrs%^mcpx9gQ@kgCtLM8j=h5d5!{-jeQiF%6LLQ>@@pc-Y>&Qcd#0Fac
zuQTS*akWF5I=$Ve@AEs17;G9hlL~BVL<fThFv2MJrq=A;^-}|09-ILMH{maLN~8^Y
zX;rp@mEmC13yVKN^rC+eHmd^IYz+bui-QlQFCeuw$O+Lf1DyqJr6IUlr#{%mz4<uU
zM_`r$w9*LQrV~&LMPL@Q4F3+@xXE%^9lh^}#>dA-0Nb8viFpOPe*qRJO;5}{z*_@s
zds%14%4>MlvVjMG9M*(0qW0L|`#%@X8}o@PSoD=KDEuC8l%(xLh^c3w8TTO{k5eI-
zC|{J|s;IdF8AzZ@{A-{j0Oxdn8Sq^}I8k$Ba?s8h1V}F?`Lyj3wo-W4eXVChckRyq
zaoy^>{!`eChianGA@;AnEtrM`7#|w?zo+qEL&X1n8~-+{{|j6EMrJt@4xK|S*HNbT
z^P{a{9pQ!9J&<O;NbNw$W4H;FjPHvc6P||DZ#Yt1Up!|3C<O_4KH=LM;5u|`eLh*f
z4eJEgNy-N`AQ1mP%d~}l9gbbO)4rN;t|`I!5Bw|$Bt+}C!Er(3<BbxuDQ|bN4xxtL
zC^$z_>{w>zD@aN`8<Js>yN+CZlZg)54nL#<fa>fMm-t(DLfSxH1QI5RD8EVqX^^%T
zeNYROw}8@q)}}o`(60fhj(Uk!B)eF9ZsJt-NQ_5>27X+7@ej~m!%Iu$R!4v!=-QRE
z6Bubhw(D!lnDJj9hT)#@aU<|1R7@0My-Rj6AzEZPGtZ0zIQ`RdN_B|H=Ar$Ur+JF<
zBKZ@%6{EavgS)apC_wx`6<iV_9#MQJw)YY30#Yw8hRj4#gUd_;FZCx%^yFAHY8<w7
zU4>?Zw<Oyw6Ef>ES>4fvG<!G#8v($@<MI;h1+xipxH`-M0ulLW=eZO=&VT|WN{bMh
z7t~r@saY-*3B|Pc@zE;+%|iIiRneX3q6EYp2v^vGlQvI%HW5TrGuL$SfvyBOlG)Tv
z{0Njb$XTKW6)Lyaa;%z)_Z}AOtQP(Pw^$Dk*$49pyb=f?SarE97Ki$(uS)n9#X_$+
zZI?e#l_Mn&*)$TmBoVII0<|t^9;`+Zq#&}mrR<`XQC_?2^G06Y_)6E5XKSs4JT#84
z0f558+V2q?cxFIaz%xVK!N~R#_|dX|2U%=D?~BI9_0t;c>B{iUFqc8MZ~IHi!1uKZ
zl3TF^tfW;uYAoISSq}ZHT$DsdkVtj$7kWz9E6lEZ9PZ-cMZO2%+o!SntC_ZSntc!-
zIE9FcY#8-T-^}(3-0Ut6neuli**Of^(x=Am{UG%q3CVqrO9`mBhXf{M54r|&t9NSt
z0e1{jr@Xw%1|(PvCd#HD5_j#ILKR?0SpyTId*ck`YKgK*p4zdV)Cto_6fc!g$@WOK
zBM+O44b8|M<e|7rCodL(+(^wHjq|tJtFX(jcSv>CFQzpovF@9vt%XN4ul2EdiJ(pi
zh>k702#c2|I}dwJ0+mCNvDCsDh~YD2DY8>;FHnZ8V@gK@+KCi^ZIN#-%+~Ab88;VC
z;itrqcERBb^TxO?^VN-VI@Y&dFfL36u_Y@A#%){H_7$lvhf82Xjf;%Psb!9>jtVQ;
z9p||9_*Z{*AYB$$Oi{~X>+fLUX5Hwa_p#6GC4u3zT4XesKt>4}J!6-U<!aOQI|toI
z55d*;@@CQ<FM-J$^Qdh5y)h@hVHWnOq2-iA*bfFSqg#wScs8?KOB02mpQYg%Np4;2
z!kLO$f1MqEwK^P`?d6!oE$STCwo#6^@p6_$*;>iXo(Bq_12tS4+-Fx}FmBarbi9AO
z8`|elnBCze4435q)JC4<CpUk{1HV4VFMkGPQ<81HKtuivXi{dE$T^cH44gOQetA-P
zme1)YxB7%Gp(ZftdDg@2joV$8K1Y-imLx5&6?S{Vgxb9lpg&4PMznQOtmC~7txE^Y
zpKRxDw6BRaDzjGFxZxaKeQl$59t+7=qJ)`J+*OFsbb(Mw3_)z5t-y4H%Qxa5Z3fCB
zU!t*mG(KiQ(%(1HxC_&Do{M6r$|EV^dhdOJf;zZs0&_LIR+^9?2mwFwg?Ihqj=7B`
zuZ>p5h=mS-m5yaYh3~J@;#;3-=N1TFUA6Icxdr9;z6xK-be%Z;vXi%TFLzt7eiQc8
zV!0E%nt|Fgg3e~1spG^`EVP;rKE8le$A$?0`n8pl@`Z*h;xv3MA<>P;mRZhgwWFt<
z&-mT&5=f@EuM9%XiyLQ2oKECJjRJx5wmFqHs0U}y_+6vuNo}u#zP0CG(0Y=bHS98L
z7k-Q$i?n+df3fdVM-Mr<OfVou)ck73$rAAeFt;2ps35{FhtusmTTap55Y;vI8jqDU
z?n%p7vzwbXHI)or^5Xxh*Gpi1)ER1Y`V#g>t8nzdViV88_!2moeJx+{TD<wA$(M9i
zQJ)qhThg<>vI03bTXv&X`vu;IE=~tVzxZCX9e-fJbGZXS=1Cf{c41KsWn?IyENk&a
zxjD~iKBv5sQ8?baF7DJ+(hBQ)BM&#~QRV7~(`xkB;Y}se4?5U`S1LKla9|rSZe<?}
zh$3Dt&6ZenF-I&^t}Uc=YL#B;9ai1FQcz^HPw}{gNRg|=fMK=^(W(sTD_G{{U`$NG
zS1eBS{P`}m38=1)++|C<W&AFU_9v1$S&!KsM=YyQTY6Yiho?9ZT|L2hw$gfV<)`gn
zXlXB9X(qI{H8Q`iJ3Fx52?`I14;s=c6d7ij%_I!<u|e43j}J$oe`3<&!%Cow-knYh
zpJkSnFf+(56E2z*mHE=fu*7_h<Gyv%xuFPZ>96amZTi%RzKrnp2o3`G26OPj>{a{;
zM}z`#_eFFOB#rn|+bUN)i|)CcTU^0@AQ0+eRPimpUw1$^WV3ZZnA>CJ>RqAzM@J9G
z(IQp{_Qr{!Xr7Jdf|-_&T*58)kLM{)`Ot0U!H>p=C0g5nlO|NkIOxfnC(WJMj%1$}
z)EGAm1TOJXPL=-Y&)rF(<HW1+-Xyjg^-|XHR-yT|?_zg{pE0{g)+AZ#i4YRq=BH{H
z=GyI_9Sa>DKUW{%hG$D;-8-);9OJ@EYxSgHJ(I*h$+TaY@|JUGlt}q>@|2!&*+PbW
z8#UO+Be|6zr_-b%cM1-!;m3Q_Kej%i^}?$S+*OLRM*9<3ym{ehe=`1`_9vSUz@ydB
z(Nvn)aALpq&(&ud58`ueo+u6+z;!lI66*DQ?mKosM-SV*AIwE_iv1ux)>?PBRrEmY
za*f5Loco!i&;t$Ec_I!GGCVPaifLAWQWiY`>6l_p;%LWOZO<$AlcTZB`{ieNP=$Pw
zMz@!oJ2=xtPZ>{8yeedypkR>1{Boad<wC8?&Nhh-@gv;;ea%=)W_7TuV?XS+b-(h#
z)9Q(98hTlGy>gU;G8q^K3^<cs*^9<y#+qm5I-4{L6g+<FnN`8ivQmFhbw`1k*vf+T
zE=YvTo(FximB1^l-iofx*Tv=~f@KTF`1j54+1c()9((i}V<_s-dJm!9wt7-5#`t=_
zs}y&{>p&qD+0($!Shds{_8Q$$oK0F-(s8<_!Ru<3pVq)167ZJ?5#DDiq@74(T1^}6
z+<0ZjMzqAYfqhK(;Z{z$tu=aG1Ma1=pYE~I2BI{B=wI>3&l?ai*~nUDoZpi1Ba=Ii
zxw$jxqn1xJX3=_iE9q!!l0IeOPy(h(@O*1hcsH}Taj$39$>d+53-wFE!dRE;XZh0_
z?=nN38>E8`sjAu%sy9?iESn6bk!pCfO2=4|`DyV-dWSxSUTtU;0lZ)ocOT#r%uzvy
z)}*#FgM`Ai;ZTc)rQqx*`^bb+s}0~ulh)@Is7dDX;zv3ezC;J41>;|jXw?%GTp_9R
zX<|mIy`6zV*-K@AC}*?`6bY*m^P$X>Ak@(DoVhc&dM4jV&~gL3kJUyhHr?}LSt)_l
zI>$=QHAAJ_MwOAm+(>jS>6o8V+`u?fkB1$)>Ukob)y|oW^EfcNpKKB_zD^qJ36xv2
z%#mOQ%*}IQssm4x3}Ol7W&&N$SegE!Qu$U$lsrhG#s7rpS(ZhmU7;6I_zT$o(~>^$
zK|BgqD=wjtcWPoUIgVmw@A>*i+qhqdS0rK(;@6`cN08_y4nA$MBe3#zEsxXTgoyFn
z*#?Z?Z6jO=ZT$uh6S|W4w6<i0hBPFZONzG)`kNMQ>s(O0Oj>Jgv1`eWjE-Hi^2ShI
z#2$A9Ucx@dJ_}O+-drhHIrm|GMd3m<HGk;x_-YgE07p@S2xWPO2FtV!&7_oaWBE3%
zjVx24f%w?0(YsC8mLSf~AImJEr&!k*Ppvqp@+v!f97qXNr^6AaLZ7GdUQQ@4iJZ{m
zJ$S+rH^p1O)o2A59~=5%!#iz{{o;i<8(5R7Oq!9ptFR`5SK2R>?^WupHUCeE1y818
z(8qCg+fAZrZErO2SOywH_Joa~h_+^zjrQ*hVhYh^Pd+vf=j(WG@#&GEo9~xb%Dc#M
z4u;w9yI6Q7_N;mItj6fWMW^G=I?xPqs~hvfm(M9+L$DuMZDAklnc|7kAdp7BXZOS_
zd*@kIq2L6G5kuP*8pVkyY@j<{q`}6}EKtI_x;kfHSo`Q*UUKq~0{f!1u~W(A?6wvG
zhgSD~Yo&qug@hrM`8^CPCmDsL-e;tj8><%llq@)gT?X&|X{=G<+(ogz;Ov$OJiwVA
z1v}5}=#=WP$!=d+U7*^tL+vazRhGJ>Jh6ZsJ7`STuH#kWt=~$wk5(57BnelW;|Uqa
zV&wjF%q;<NI4!4x@MV{3HA~kbOaZo%OGvn>vIU^hW9KqU7Tcd-F%w24S{z<O_19?P
zJ81e9PY!MAah-_4HEIa$ia#dP$#Qw&^Fx!#F<M;4vkX?g*O3@WtePEzpZl{Ulhb2z
zPaS?p$>bT*74K1vUIj%b;^$0{0$YBwMmf^=kn^Qoa(0q)2$Bn<v&tnhcP_kp_|Vo^
z)&1EB;1q_~q&A7hiS0`(tTOX^wx9EpjP@Xg^w=I;pQy&nt{b)yVAm|{{tW}I_B5?d
zPS0t)8vR;0%k+kihj6P8OJ^kYsITGmqz+_DQrqGUMtut@-+nT8Lbs@n7+YyJA5mDB
zYR!=-H%OL^yt^9N0I|U(LwCkaHvUUQ>yrN5XfsA@P-HOi9?O{Osc|~H!7k9Tb=i(~
zY0%%0V^lCe-7bR`muEVwk~;1r)q%t+01s95cxrg@QuTAo&IRGxUyhQ@aV|RnTp7;9
z9Kx#BzPA6hl~mOlG1uO%fBeV$=_TVScRi^uqJiIadla(q^M`LT#PdY9jA}3rE!gHT
zcS@+PK?^G}2+9n}=5gfAR~LOeM42=eN9w%Royc^rRwSAiwD+uxZ9^z}rNpm}<}Bkg
zf0+uq4c09MgUwmuL1rR3dvA)(GWUUwjCSb@VCez$3M{>BbZNXEoEr~y952>)(`;e{
zd}fe+6=h5;s9=~sd<g*Tg*v!{*v_HOCE>#c{Yo9^23xvFB!o-#JZM4$Lf2=zeESSM
zx=K#X0_Koi9cX!+jCuj>Q<C!Wm`zM@zmgc5;UMNuq~x_=T9bOU#2kr7pSRGrs-6dl
z4Xi~0+@oJ1%-Nnt<oG>_M_!;-=_)h^35kv&8zYgl#M_826qclQIgP|nFgH>sH4^Jp
zYAkFVIn22G%0IXO2-D0sNk|mS8Dq${R+`XBvo}amzK|J(SXiq?6*u+A^Wmn~b1+%I
z++Y}!5Ga|2eKau?Z+$5;G)_y%Xj+JlB)ML}RjRpaz&|j4mp9tJHcHx+N=CTYy0a1j
z&SM_*B|n%~H1=IysicwWXv6>Pt8F;p5Jp7^FYZcaD*=0>`j=&s2CZe_G$d8HOPFq|
zw&a^%gPq$P<nivqdiwgrqpi)?d2@|`BRBjZIVKBlnP(0#DI9~Qm8_NXQ@XC>8we@h
zY6VDfmr>dHBhPV#*3lHLgvo^rFQ?RJtM;lgN~JIU#bog}7E4Bg;nl?T$p~(b&kS6@
zFp=2k`N6Ei2pQgy!BK&2>LKR%)9RvwtzBNax{H|HL!5lp0mLkq)-FHVb5n@z;ISoD
zZm*_hr%h8tBeP|&@HJhL@mjaB#ISZY6XBIkNPl2SC-%3x4^|3s=L>4ao_BN1C}WoR
z5x{NMac|`MO&RFLxO&~d_oZDhu^kus521;zY(M}SUwNs-d)=~0RgL2&PV_Xnr}8&3
zwt@=c4poe`sK-mSe>SZBTDkIZxa)cZn$%8Q`!$VlYeeG`F1BUQ$I34Sb7kHD+0X)V
zm|XAW(=JCfxN?euaC`EF5mY>0dy|~;x5mUoJC=x6-0496`q3}8c(v9rxtw|p9?NGD
zCg6vf#}*>f!%Xrg)}ue{D4EU=#tG%n4@WYwBfRx<Z`5fi$TxIaTAjTJKli59zTL!F
zW)XIzVcdRNQNgDWqtoga9Q)@h|K#M%N}{oNwqCY5Qid>CVvisH7R-D?Vztv2xE_bx
z9M4lctOb`vHH9MMU1EZ%NCMC1Y%+<MsGn^S<Ce5z{dHu8>w*VJyQ(dVf6>E!{98Bz
zTPe8a(t&!enNmhqj=X?tUt8}i1ht>~h?tZjwF?<5x;?o;pj5#TH1RE~JqC$K4EkZV
zY>G$t8TMc7L7i&IZk^S)7bJYkSDw)Z>fgp}8a^>&y1V&0u_a*UhGAN{@sAIg%#^OA
z(lqsmN<!=@2eH*?e0I5UYb>a95C*TGT=_U4)3dBzR&T7j<$y!^mX_<0p3G(;9IfIn
z*2w1BtDaLePg{wx={U!LtVTZt;BQXiqDT3qfg?!Vf7aoaY8dnn{5rbQoD_TfO6e_K
zd5O5#sCqx{EBnY3p_<oEWXAq+02PD_SxPIFJA_Q%ti}B-VQS0x)=lQ2WKz{LO{w&c
zOhO~hmyIXID&C?lhKB9znb&~~qy~#pULoLkQxO4lY?h}1f@uCvNXihCr5me|M!e=V
zpE%5{^%Gp0nre;ZaKXdha1FKSo<ZIGo<zC3S*1-It)8dOH(`FhJhb@5=f-La?mEPv
zoy>I-jHL7SIaWwJf~~MC0D~(IdX=nbD6}Pk^;m@MEGP;8Afa|(s|{5qpd67dxzNNA
zn7bK1>2v9-zOsyBHVXcnT@(t<i<aB{c9CnTaGT#}d}L+Y!@=YBLS^w2-|-(`t*t*?
zwh#X?WqPYDXP)^HNmMYmw3ZlaebOoXgYnXy{p6LmBTF&`J3E(~?R^I}wIi+~?Fd3B
zRjWh?*W9!9%c&iff(Idh>i^&}dgPb`Ye_`_K@)6Pu|S%86PTd~d`U&~?h`0N`^+@I
zJAbR#eMZQleE{T56)Iw5z*%}+XDZzF1mK^&E_c~Ca~|tJt{&158r=qus8@&7TQpk_
zR8!snA9D}?PY5SH#pI38U&tmss#H_>cJ~CpV5n4X`WVKWX;1*RS7x!eNgVve=XaFA
zUunG>rp@j3FCn^r(aPyJ=khNXoU@jF4*)d!Uj@hiKbXd2!TQ!#i==DecfP;i?Qwhw
zb!r|vzDkPHF8vm$z3&8Nw{;<5-#3@x|5*O~Q}<TI<88Tk21>?59OzsK(FJnBb<BiM
zGMU*F;^Z|RF$BHS_}l@QQlKR=8==5f5CJtIE<qo2etB2mNB!wqylH-`g3Xa54lgqL
z1Elo8GK}1;KvWqpK1GDco;s%lwc1q>D(U4qJMZ@~VgODZ=CjNaz97`+I|~F8!fcV+
zzED4R&@+(x(B^CS1SZ8XL25%^FAi5jAjWh0I50#oP!>L~z71&+tCL+Qq|ORpcStCO
z@$5a#e1ydShCDhenjen<V$P8Vn^yJ?a9}@^+us4PJp|afpN`u1hYGH=WLg|9=^nPM
zXHxW@MnccF&g{A5#D4TasgZy!@R_YfMo$oy$*1|;o2B!`M(yVsM}b7zC<IWCsw=!J
zlEfsrj(qP1Dv5}FcX8&E<Z@$Sy{@$*`*1G%WsdYh-Di<-NF474u>GxC7a2FtkKR}C
zEcv1-&VvijGyej}(G6r!NCdy)oWPZybx2bJRxedIVBH;f)s(+0pS=|r7>s(?!&cWV
zL-p^8h#eQasZ<z1Lp#F+LHK%6hHYgZ9jQ@pdyvI+0E{n!d46HRB{9L=e5ahV7iG2Z
zx|zj)ApWpPHY-dK%6op#tsS^JW<?xYWlq}kzS<!eXCVDK<1hHx_a!9P4VgB{&pZ?(
zRb4m@362Y+ML2jD-64;6B2)M$P7xm)q%}QshA<zQoKMxmea@Y{@(pkL<Nf4l0j$Ib
zL%c^bQ0NIaN=AXO1_k09@P3y~kGLZtm9u}<5VKhxtv}^}yHF(aWK}LR_P+#ywli#@
ze+bbhYw6eRY(6pcU{EV@(d8xlH+If~W=z*We?4&=-nSkBGrt#EV!1thN!f(b6q@Sa
z#l}qHyB&Nyvf*>l6UW72;p+ve?q7v%BMfwb&C*zU*bWD8Y5kA(zB4MytXWqP1VIHw
zU=SsUii(0{C8Gi=0xBw!RRlz`<j`P?fC7S%)FeefB(&t5B`7peGISFphnCnt)AX$u
z$2s$z^L^`tweDK?p5^?R89MEEhpO6D&+`=LZXjucVh6XSIp-fVNwgr|b-Ux9O|BiG
z17JAX2oe9-n|Cp9Kt%w1E`03Z#t!y@#Nfxv>0`$LDu8Tl%ArkQ5&?9hR#j8Z4P$e^
zw!Ppg3VwE?<N2<Q-LMQAJ)uU6u~INY0PTSS4Kppvc~D|70%e)M!7cuTHf%hX7@RO!
zL54nr@~R7)&E6G0yBDlA0De-Cqzb|_xdvsZ;<-b2H*K7WXh4Mx>nM%wgmL~^UOx>Y
z6QQifaqQsi3{RaF*scSI>HCD}hL`}{df@z@jj~5%mWsEXtlW?R*o1b5hZ(vERhlw6
zq@E-UmZA8_mMCOrAyjC3>_h)Am%#`iavA+<^_zCpBGehM4MmFZ7n=0b*Oy^@Ke5lS
z4FG@Tt&KpF;N#~J2^iq`?@|PJoQD2y>;-*<u>of9ziw7GBagB7_hbBC4a7G5S!Mo5
z1M|OPQ#EO!p)RX10^GTiXZ?0&mrmp&^+)6~zQL^m*}C{=gGh4<q%x*snO;?o0G7Qp
ztxft!UuK~8^omo~<x`i-&@;990iZ2{JJnKC8AOADrw3)O4cnr$?e$_m+nxj7h&^IN
zSW^rUt<bjYO06ecQNp1c_?KP)-KyNq$*~)%4rfM<ogH}<v-VyG0J~Ei@=(|8A;vuT
zdUUDL#EJ^#h5AJK#iQ=4U72PW;90os%4@_(HG+TZDyff>$vw{9!1Wv)4-yj&gVzo<
z+Tw;droRzMcv*7b4G6ttouNKPfw0egDt)Ay%f_-h3E{Rh+!L_1G0J_ng#?$HMtw-#
znL^eix$Of=xGU}=n5XL>*-?vNKKsbKo0T@AA%DcL{3Cj^gcpsVE};viywi<BNuL~<
zsZZWIkjSft%krIdpviRVbR%VG3%NVK?vsOi_9OCB<xXQ+tr}v`C_zU_duQU&t6-$h
zTQ#u#71|<Bfes#vV|&9mvN!j@c#i%!wFkYEF0FLk&3<{nucx^5hmUX=Qa=OCXY6n@
z?F{YAenZ2lkQeaSD$m8eA0nx|o$zrmtB_AGlhf1GMMOB}kR*;)XwI&aBfzB-MQWg~
zzz(hdDu}f-ZHP4A3PhriYPuPuSdYq|08qRsH^3IeoThFTwv*}Qf1rJ>dI1}tvbi)w
zkyFw#tdDBULk@EV_4Cr&bzQA>pmT{J&<`Aey6!v=Qyzu@;!E~jxA;0qmxOD#^+HIj
zP$RZB^t}C6$2{K|6YS+6klE77H&X6Ly>DH-cw-)6?I3A7)3xPU)5;xE;zUnUVNZ~b
zMLQM2^HY%464UFtcSZp&@nKr?!Q@?EcLDZ~jezF3g~0<qu^yldcPZ<z@iA;SZkBt@
z1{jHR7&yE@8vjkpBZLx*$*D;JHvRp;9z7k$(RUx^*`_NtDAj$BU&g5ojRV~(XR5_H
zX2FBt8sFY&zP_;uF2e5Des{@XH_YlMSQdQ-hVOzuI*o(Fqnx_GM1KduVfui(00wf3
z)9wh959uniWaTrw+Ku&GO!oEj0ODyHE~8_orUE6)phBhGF>V@w@1h8Hf(r@(Nz8H!
zm*W)42K=hwL&2x(0u9|<#YoT@l^{2)7a*R<yjKX?lH^q45ePei!0;tcBb;0)s-~c@
z*Zc9$e3tq^lisS3RX`(!ZgREok!SHqCt!zKbP8xU`Y>^H7sx|JJYdQh;RM4LD46c-
zdW&41<}4JMY2fHGe+Wa&AOuf;Q?Ww_!G4mtb4P&IjlC(wjAIY9#Hezrb`^m75CKSW
zmdj)WMgWwz8mFy`K>V|+96&JOBMovSeS2t3+^wJ)CEeC=wPX8|PNr!%Fax3D&P7=E
zU4i3nU0MRYI@;S`#{k^`u{0ZPU$-n9QCB-gU@yGo6uEP*vdmyIj0*UnY^&&{KKuF%
ze!P{T7eykIIv~S|yV{XrL$|~@;sq-m2BpyI_2RySE-Hc-+L0&0Z^&~4>716`HFMu$
zu}wP{2kFwn^z*>2&>qOEKpJ0sgXB<kS|%02(lmOEh%FTXspQ&pB3+1qlMaGlu!r{4
z7{I@fm&mIu#>I>6nUixdcGa9tPDT5=)*vb+m8w8@V%QaI$Jh-vG}JzTl!^PHujd4i
z+ZaTW4L*o=4PzlxCY?=D7D+D$D*c=t&T!;;jjI`nGWPZ*98yCl3*-)DKa3zS4p$^0
z00f15r3pl+498452T@1_0>WB$at+zAWsjVN@3m!|WE{m<EvkLJm-L786m+G&E2&Sa
z9LY~Kl)@IRW^|cNoa+fZGY*K4?DqFGo+mV0t+kemZ<Rmt+?;Lt%wn9~s%F1)WS1v-
zdO8LJ91Y!rTS$nh2I?^Owvk@3cpGX{Iy5ti;Ihtp>*SF*WIb9z3IMRQaCLa*IRp)U
z;VtLkjS%=YOo7i8`vb6rc(Y*w?w{GK7#shP#v0e%p3pVpy>-XL`IIg-t!$4kNO$g@
zQ^T*d0+-abjztV3rRhZ(KhqS!$POojbBskzTP*#ND(ne##@s1QQCljWRHDs9UYyfT
zwTUhwlD!0`jR9l3Ij(<Y(ui8HQmZQ8vNZhZnMNAtn(kSHffY!m7-Hn)O}_4lGwOzm
zWS{Om_7c6TDk!G`PgJQc9Wco$#Alut6*28~2o7mVllRkgHL%ILi|=xy!3?__@)jV-
zU*5~7;go!R6SxyFxS!z}cX7nL<v3sqP>*n=mqqj>l)pa-@1DME!Jb!mSzCDgTm1?U
zfm=3UXbLM|G^NekOX{zwC5*+t*NrRgyDI#pOwRQY!sRHj6n7=$+LjFg6FuTi=$qyo
zKzVgLPI480%D!SY+8ARauBWe7C*GY^O)jVBu`F#nZcA)GBSwVMC-giKpSDOYqfF-#
zBqOG=hirNiVnmxX*^fhOg#B$kQNMJTczI#`KZA2{1b>&o90LWTV*bNUX8><sOnXf!
zUDD?Z;-6Hlkiu6ITk2?9_%JYpG+US0)+Y|dM);(b8H#<A&?;`b!INikV-2>|b*{#4
zi%Xwi1L~Qiz8!hv)7Z1v*B9u90)fBAG)}_();U3-T&n3ytb-PN#h6dBE{}o5JLlbb
z&K589uc}NASx^>LAc5F7jUB!VXbnR>drw5fX*Fq6?u>`3k6B_1*dVpI(a(I4Q}DZa
zy&91j<Gq{!TP%Dv62$Z2iVn{qBfO*%tG5}~eZw|IU6|ETSkkIP1F7%kT9}dmtY{YM
zZ=Rbk(TBhX=ZA&8@`q=DH(Qr_@ATeck3|F;Gb%&&;|SM|@iId>(ak`j;T|=`<aXA%
z0H&rzbQ!F2=YoE2?}LD5x5e(e2L*HYLt`3Pue9+auqX%W$_yxN^z@~`*~3A@rF(^h
zr*?&Ivy?k9`T)C;<1fI6s9wG2i)dc*UJirN-~I*-tKjy7kg6k|Z)LeB*l+kTX@B-Y
z?G2E3s1>mvZIFNxd<hbVQ4FQfWFVI4>)lrtO92IMLWZU;*+8rbY@E_^?F)Vk!ZHSo
zlJ0z(b8%e}s2-ROetzmS9;P`h+BKDh!!Io(1Z4|_6RvUUYIRf4-b}qQF7(X=9rT$=
zJE@RAekeuS`GGGPfqDRaUAPd_{=o=r=X6YA_L!utW=UQ)+XE<L=?+ExH@u|q59r>8
zLHv!=ffK_SK#Pt5om)IYAR76YoR%Rh+y`#ter6F=k_jI3>V-muA=u`W`B$3qT`9nk
zU-Ce3SNT6Gm~hgQDaMjrcUj32#eoiBwX(e0FFnBNY8z!GDIf}*l%@cMS7`E7SEj{)
z$K3FH0ncGeG1Khq`l-_#;qjrIw|m;@>2<fN7`HfqB3JkGlCBU-q|H;>qQHvd37>hK
zjc2Rmi?uK4?{4FLx(<8u1gAo=MdI!TJhDZAd^7$0WY-7;H@OCyUf@^7kj^`qy}`0`
z=j}mhUayisnQ>k*x*N&&%l7q`B9X$5jX;^<E+PT??**;av=zlV6V)*{+~3~g=SmIs
zgf<)DfS+-as5Gz|KlCAnGG%6gyPp7su1c%(De7JwR|VWIe8@rcD?9+Cl{SrCtj?BO
z9gABcA)HeqsKpi^SpbhL4mC`Sj&U|A%s5yUx6gLDfnpf;(YP-k)JR&orzk4M9T9Vk
z6ManDQXp^^$9zoR%OTM8I~Bl#Vu)I{)tPAPC6@=L9#ZU3Genv<Q+O+_=B^U5tP2f&
zlVkSU8ecE%JGG$nB(n3r?gQ;;kSmGRz2qN#bQwbL+b-FrlBQ|wq$-P>18!u8tOCo;
zxMV(x_^sVfTSilE@wF8d0?Cve7x}UcX+P@pFA7^0gJYUrXZ-LAV>+Z6E!!2yCDkAc
zm=sgc7Dy*(G}v|!c-*H%dd#eh!o=H(<^VzW(a50L#`6AIwTdy4Qx9~1wlMRxu<ZUu
z+V9j^UgEF_aae}f2wR3`g!mUvqoKBzQ>)h%UKMFE;hs2)Q5Q2hOer2f-<zt_dnN3B
zooAtS3u9;YOwnpg@17isc5<weclVAcqB|s4W|Ve~o%xH_ja*HZ5fKyB{bO`+=9>_;
zKY@!=-au{8eQ-{g4F!a;K+}tYHya*kJxN*egMJ9mSgkK-90}Lr?~3z#hMR;W`K((p
zi&uXmkap-icxZ4(S*>KOSNB0YMqP5E4yhP~)*#Ib<@CiS7SUCR+6R;XS0z@!pka`@
z1cW!HFSHyjn$xf!!z(=K)^u-FFKX6|pM9Me<JpZ+<d>pii=z^Z2m-bwM9pvziDZO%
z`!<wOe}HA}D}33+2TnaU39wQe^axi9FvUPSS%nyRMoVH$Z5UFif<|YyZd}It!=Wx7
z&GvW(xzC(Ht|PJ#5c~_d6VOjX?kbH4tPa$r>A@U=eB@rZ{X{~Zrfyq^DHEa|7#Ydx
zdmLho2acRvFq01zIU%9==551i2(Zw2+OPpUhD(+2VVMk4PB`=!2}^#G)c!Bz;r~5B
z4CVk-YW}|~C;Sf{!=#sl!$@I=!=L~WGZ|(sdkF%IlapURTtsgE+oD^Mj3J~>FIRhO
ze+t`<XjB4SvP{nGR)i|AE&BKjc@LrrZR(|QcKpn;X=$Q4#<&vJn>j8hu!0pXUYd+b
zQX5y-N4shV%LV_~j?|SHTp&w1<BA^Rrio^9ctGela@j^ot+?+K26u-TZ_v>W+MiSA
z;d}%Qg?b`uo}Z4k%Jr9U(k}dngjUC}^=_gyxQia`m)(NggO5c<3OfD50vv`rUizbE
z14xbEb0$C+g6(lesgiWPU!E7r|7bX{$yv!mbj^mnfwj!t=>^-j{WPRUv8UDd!2z-R
z7Jg;pY4->;&6FqSMcW=mHu68HkHc3cUhbirDG?eSeB`{Cd4&P%X|d$aUap}13ULkV
z?Y`015gG7D%5ilYUc!(m%l*e(!Mwvx82FP*Fm)M^#Pn%J*%@X_8gY-XMvQ*_azg<%
znIk|Ng)DFqlI+NyR3&ayeb!hRX3OgoOx%$8=q{2{ea4^4%aW|PorJO;aeuH>Xj)V#
zK`>55-5WY=%bfZyF!35JAm~n>-Z)baX+%I>@}{IOeEtQ3bkTM3eWs{FBhp98AGXu~
z(GW-q6gr?8!DmZ)&*H$p9a;Q|+9MkawzliZczGR<qZ_hd3ox&L9Y_&8sg0gk@5DT0
zwB=_#@K=Fwqe#LMs2Ip>SiUD14X4@xW~KQ}<YxZoNs9F(l<xh*D`z@Elh^FNnsF73
zhyzMQG)NtwsBAm5$_A5Uiw@%{Vyqe2(11onLta1J7o_-|CY?Y!WL9YLl=BQ}V%-}O
z_14p4`F`;A-0VI=e8@JvrpvoTkG;qd+yG(y-+mZ4Y(!fPNY|`4%!!5@8v018^cx<L
z5@0fb<yc@8liyh9cSwy)H*y~Ns=s)~yey-8XP!-@h0g#%^YIMZx~fvY;lN<CBZA07
zM0J14<p0~E@e09+5n<|GwTNB@)&FpZLyU~Gb^Euh&_9W+JfX0}h;H`A23Y}x+&74n
zKkVcTICPB{UplcoL5S1qj%McJ6YDbn{81r0e=&69N$<iOykLtQIPg3jo|K~0cig%C
zLF4in!PwJ~q<?-|Sr*<f`z_+d&)v-rNqUinNF*;%`wL*mYY6p*)ed~>u)OD*ix_Hk
z!9_TbF(~rqMqY<?0$C)tpXD@ls8@W{k#c*siN+3IsL^p&c?MeDy`)`vW{xM`^zB5u
zBLW6WkYuC3uCWzqSHRnk1_#2u2Q7p+kp1u}XND?kaG#f<H~>=q>*jC^xO$;_0E9LR
zIZR?%H)dut!hOFi!pR5*2&un#Jmuu2$p>wE)&A&7x*NBKXlLl|*nj*1o~jZn!oR@<
zJ%Zp(f$oX8l;^*wln;?<!J>fz6zABR?OE7vXO{d++glKPydnBPv+~9sxClRaJ?TNS
z4xCk>+sn-{JsjYFeid0rngWi52|<Y8)sNN<C?h$&6AdempsL1PP_!L6+={WZFf$hw
zM_(h}EEwiouEOpQ8it!NwfKCNm$&~^H2#-2QtqN-+M?1>7Tg8juBz|h8>F}urgf3I
zCp$1O<kjtDMEH2|zDlqh{3<E$lmk*{QH*^Fe)D>Ur2|N@9)QwUaMq9QT<AdBJEcUm
z21^0U#<6$Dk~nEdh=6by4C;3Kn=2cq<+T6{*<0InE|L?zW(=t>xr+sXy`wUIcO;O2
z`h(fLWvh$2+=dD5X6Pvvx~>|<Z%cggG>T;m4B21W<%+Rd=pybSX*mV*#uqz)amVMg
zxgU5~_KrrUk7S;Z=h+8hcBVkN8i6a<j}Se|wWc&ecDiX{Zv4bYW7-)5yL7R?bkyJ=
zK%SE~8Gys?$_V8Zsc1sXA%w&niV<XaDVbi%%<3#6mKF(_Zu5dSJ?R^&)A=HyEho|L
zN2emi5i@vMur6=IlzrWOe!l<ujhNGj{xC~2Ok>I$vtBT$P17i&%;$1l7`Slb_d$cy
zE{BueH$dB2DlRHkZp$@h49xVWBMwOgFmr9G`{jN{P+GA)^uh|NN?61{oPx0peGrQ~
z$19B1m?2AV>v~1ONIQNE2OyN8!OVv~Q&jt$h%VNkw6g-q$$>&y!d)2MOQy2%4I}@E
zb?ke&V4ji~FS4BP;Fs7=?CVo0V?~>iP>d<r+yF#fC#AW&LDyRh(3G4|`Vm|7%VyeN
zYUT{nIQdLl4#0`>)6-MA@dzGm+gK!$(^TZW2R{;9SJw~!i6|SCF@CjWIdU_$3l;Nd
zvZSOW+6_tOML-YU<MTS-7jL`8LH;A`d2wRP^;KRP5@KA)VD)G8l*gDioJkuTv}8l2
z)!<DuKeeo^s{Iw0Xr>_sC=lq7*K7qWj@|e|uh1>C{4jC0k4xz=XK6geB-ku{nU9)~
zCISer8yw=twM__RnwRBQ?w{c`Z_^i4Oo)Y@T29vF;HTS_^>8<QrE@+;Hil{HRk_?|
z_d@^A^C%jU%YEE=CWtVEH-&2<TZ7@;p{6h1+ShouBcZ{MKWoPlw8wax#!)e*5rPgj
zQbQh)fRcjyW$yug8;8h}_Ae<Ujisbb5(f2u1~b8sCX!2Y6GNIFY(lTmNuz#zEft8|
zj7(%~6wIm&UkN;SDs4eA(L$;R1<XNH=%*CR4-yA|s(Zr}KTodf{JG&+#+J&H1LYrR
zY<!<HvVC`NY+qp#D%J4Aucb^F-(7Q{=@op1rsclJipEIAcsueD@C9sR!{vfK+)ap>
z@k7N#*cMS2(|JIRefQX63ASsu7!)iDks?o-N-UyfQSs&U?OJ#jpLXa^)%4eVO_Sc*
zoT%YQ<O`<YrF5gsfjnpj8gn8UdYPwWd_88`o}x1@{kfT80Se`K{(XLYO^`r}n%wB9
zvI%WT*COv?(!;e;Z(z9x5^)WPBE30nMjp|9p;;BDT{6d(Ip{AK@k&GbsJb&iJfdNj
zxF-xL(z1gw8vTeo3Ou+T`ZzR_nBKLa{>&f_dK{zOFwy@}P#&h@Z|H{p^144aPAs?v
znb7~<P30$@8bG}y6awlUfEfTWii+nj!n0{Y#z^eQa^x&H4AF0=k(LHcm`!56?)F1R
zXjxpKQ-pll<KJcL{~XlwyZR1??>83WA35It3#;!e0DJq5O!*(-gyyB+Sl>59t)v!3
zB=!l>M!QcecH`BsC-VaMyCj&=hy0kuAvGVS+KP0K+QsmLs;%IkB0Ux=Ns)@8riB`D
ztW$NN4^;U(nl-7OnB)pM)>(q3!u<-bOqpcwM}|3bh(b*1)-T*+r93m-z1Zj#0vA&A
z{g&ZJbsKb?uMi`y1>c@M#K2xBG}>cB&86S6^>rUt1GT!snI_^&9kXPd_TUzlGzJKS
zFDdfeQJ5{GStoRJYV*10Q%mQl?Pv0OqR&yi4DNI)W=^>K=JbW`XE}1FKfP4=B$JWr
zXi2cyy91x~V!X}X%~?F3Lc1T<g~Ex)y}np+P<3%E{wM|iy3RU7c1xy5yW3bB?i;RH
zddpAGMY(f!6Iz*$y=b|hS(x&<TvTw5_}Bu}Rdkv1czm>PiFur^IG4sjyLa1Ixy67Q
z7K7fh<E>2S`EeQ{%hB);3s;*q2h;V6?Rx7@J&;e9UndXDR;hJd<Y+<>>Kc#V%1{n{
z10d+#^`U)z)IauYJsAMqIh&Y`==LzKjXuj|pz}DvLOD~$k4DhNc#pcUfx6u}?$_80
z29wI{gBwP-SZP|Ys^z*I_K$A~6l2;f$GU^tvOYslY}*&ti7kb>4uqP60mp?zx*2Yk
z`OI9pJ5^K*QHq{xc4A?^zFT&D(F8}767;)~iZf2#u|gU&Mvbx3$Rpr2NHGQwX;!I|
zO>cc;c;|~RZzd6`xz57<InNf?%Lu)~Pj|m`|CaWi>CDxrmkw8i4t?We(>Qft4;$lf
z#FO)5k7qdYoqDxCT)S8+7kcEy`*-?M)KRG=uawMod>!6?ijp>ss#yyhJ>A&cZCo-b
zC12`{J6+=(v=TIOwx#B=iJW!%*}5bBk@s}#F=;Nb+j<N>huOX3{FqB)_lA5Xpne=h
zc(|WEkD1|mx3%5bU@}#{OCUX7LPbuQF)OBemC@wI^p!mzp&RMK*0!^1j}XfMj`fv5
zqDeH7i_a(bWA5;_UiThdddbZ+)2CkqJYQ$-AeU?lyXQNVsz^Iyk9%|V`>`BOCWc-!
z%WL1cX-Efp-hDVj2hoY7iViK~9^1j|x3pegOMyF9XZv>b+cc!N=Gj|tyu7wC?9Jqo
z?W}byXZc}W+wY^@rLcFF*z-7A8GWw7>)6-}7Y|;3@{kpKX7Ag;W3+&N$x7-_1`1i9
zA$_QhV!x1Wqip<ksk<~l=iI@O=RAMR)CTP?l6v_(9sG$g;{7=q9|q`@XZ~39BMSf|
zniC8;j@l9(-S_L8ZblcD$<4nO?R~xt^t~nYK?OBAte9@5D(eg%8+=Ic-pk$F_8frF
z{Qa)4AI`wNS{dVJ@V>0LW7^R+93Bt!{j|Q?o;{2V9dMifeCTDx&sC1ZF>Xe?vsq0z
zzMvr)=5~~uu(RYb^@?d8t=tg~v!YiC#or?TF1>!kOM-i@qTx@E4j+A?$Oq5x`@w&&
z`0uU$`;7lKZojSi|Hz$Xw)+F<k!T)tdgMIQiG@HNuG+Zd4PSUzdG`@;Yth&p!E#GC
z-2iph0*XCRHkbL?4uRMExc{t9U|Dfc4#B>$Z@ggAGc@GpoiF0%Edi593jD4!g6gbX
zWIMl~1E4130eog;4&C=O=5bP9G0clcWhB8Py8ZHs&Nfy1o!9vGyY%D70fKkY8NX6v
z`p~5^cYW1H6Of)}x-J9C1<Vt>u7l%EzW3_Dwmp1MJLvG`50*XE_n=OF{0YBCt<;AX
z{<|Sl-4^urxJtjgot0PLq+tj*$oV=fbt$L^2(L%#tSXyDEqZ4ywi7SuS?60xul*QG
zkZFhZ5@Ddy|72ki8xwuQ2$ia{TFfnbL$P087EO+@(75PKpp1?@1RQ2MU^`#6%tz;5
z1!*f>ON2#9L8#YWyLvz+8y5`v_q2%C9q*_!_V~zru^*qh1>z3Fs;LtY0r&$jZZNBg
zo$Eb4cV4M$|ARU?VZc4`tN#FHG2z$Nc>~enplIR5^$p*KJf!)XGuvc`!Nbd*2!qtB
zTa{pljiDK+AEC3#XqZMgPgNe7J(0V7l2_wg>2ejTSm3Fmvkbj{xup1gAfhuUJqtjH
zRL-@DWNKK5{(~fVa043B4k-`RDu`G`0#<Kq0nI#hQmwSZyM~dWH!*4#3PtExrv#Ct
zK2er<E|90}ZQl?S*S=~8X@K|(_5FMUSs9>0`PKWP;rnA|L7FP?S6m|RA_$01_g28e
zG(DcC&hkvgLl2Oo6=`EjM4zeUnUrB@yCK=poB3Yj1cYgA*_X;`qeamr(JnaarT`&n
zVXK1iRUB4sCeJ1TlxOZZh5mS7O8l7Y`3nETx2+}Fh{7|z&?<Z^A#E?yuDp)UY)`<E
z#pHR)Uq_Q;)*V#+<N4Z+ytdSxxoeFrLoL&g00P1<2LZ8_kmz!IuEr($eV??wZNDBJ
zP3$P1c@}Qg`I)&xUKkK?aWtf-07I3681F4pZ=ow&W^Nhk#|?nH@~9cD4ZbxWeq$5?
zlFOlDMK37>emojdco(aJ#db_9z=C27=U#?t+Fw`I-%qMhz(*VYc*G$w*^0NVlo)6B
z%9A)zy5^4~x^}lF=<jN=1|qas!GNztD+pOA&Mzihcy&Vq5Uq`2s5=Ig(1t>`c)2S1
z{U20l^`PU{-8ym}6xYt!ORR%ZfC4UJ9?lTzDE_rjMy*)uRkaghr@lU)K5EO8;VYw0
zlZiyjbVXN~Q2=Lt(;z$ldPHFMHi=Z~h0ohkv#p=#>1;BuThI<He?1!tYPGvV<2?Po
zA3h=iS7+a@0GT}sK;MNe59(5ziq_$2J@}1xt`@BIds8(=BkfhXoqA5Rs2LU9m!9~5
zl{5zFo89K=RUx(ZKhBE#m!Y0S7>vDT>=j58fj#D8{medm`9>?FV9K}SMk1>{m6}dI
zWKbD9>u-;B+37hV#$nYE+I=FVG|X$A?(obeKij)#a+W%Al3XG{CR4^#ozDaGJha76
zK1&URk+!q|XzVq+zHRy8nkR=`utjqn>NzYNhqA(}p^Om%z;b6CIgO*lcKAgAhaPTO
zCg}Q>1D(MnyAFN(>uxjlp&G(&&1w;)0|1p32e@C`(dwt8ezj`VJqaX3VY~o>#2uHw
z>cqQ_DRWQ`<3wsA&CBUxqC<?<U2%;nMg!a=W`CyR@6udKIjCL}Cno#@gpF4!^LWMZ
zde!N<J%HElTt5D(j7GgLE_W$kkh>M1d?X_hH24qn**6+R41ZDyZVOF>=E1od0Nwq$
z!9LyiyrU<2KJuuP1sOD$Fp|Btt>f}1H7cCDOnOGXlA3$k^}If;=o<IllgL?8A4-&W
zv|U~8C~Zk$Yqz#>t@9m+BjL%q$Ix?O{1+DBGgmFM$E{X}nS8S#PT`QO)9cGN@gSUL
z{C#vfVDN?Ny5=g#^PQZV2MF6~C=PJ6s45g_b{hwyY63w%P$r&LWBE?EGodjaUbH&-
zny*)_U;eSWb1kju)mW^6q1YD@E#?5`aHF}G@e!;aZ&FFH#Sc-Ia=p$2D0(VvHb{En
zc^0V61(Ib3zs{fP3YZ3Y5jTI<&rUjd%Uzi<#V(oq>H#?&qJgbTj9QAy!bxH@=VgZ8
z+lLy+%WKuh)HCnSW40&NopM5xKQG>HDx-K&Nm*HyJN2Hq1_gbZe#~0Z+FNA1kl#8c
z(c36bUdS2_;gV45Tp6Wi<bOJ1DAPS1Y42&hgH%7wmZ!<o-9bWWE|Ivpl<qRvxc5|>
zlln*+STD*)^VDp^R@!k;`>@=y;ICbjv4RN<AUok#yvO|%WF5EnI`yDVO=mVL@e>rE
z#>(U@-}ow0<KcOi;DXH|;pr2+nb*J7$}J4?fGwC`03@dIK|Rjz#dt9BiCJHdscE*B
zHFG#-q1}7qY#i2iJ9>}`&7{iR3n@SWxC9Dz!(sab)~yIAW_9=<3oSkUvDxm9k}RG1
zbw7n7hkBy5SH~M|JYIj<Wp$jO<~}t`Fn;iUmOFGs(=CTtz?P^YWJ?^mUXQ0CmFw=(
zj>6`2zt)rm0J~S?4~wVZ4K!PO@Hrau2R?m0CahVy+SaI5#2Gl<X<QnOUrZwfxwig6
z<&VzG?YuMTfRoUc9B{WZT5aiQNx-a|%@c@j9hivZVR*DmaX9;uM#KKe3ODp;>A*94
zNzFYS8*^;W=^81;czJz);fKK#q-D1=VQdGSOUbRZY+kdsD=rGkCA->l8L<UO<>bu5
zP1qE4ioJp5`Prgrs4<-YXZ3Qo7d1GMvLtgH>GLxV(Di#7^}wc~GIfAb7#T<3l3u0z
z&hBgpxRI38SDq%PLEnZ-j8_0_7>H2y;k;`6Mv}4X9~ZoNJOmBws<06;l<xxClI5Oc
zrR6}w(4nu%H_2kwUpaU@i3O7a7(2t&7VY=fZ@4N4Rq}ikp`AI~Hgkaa1`;H29<-%)
zHG00p&juak37X02F+@y$2<Vv2w|)`O%on*|xK942oma#5$xf@i6C|*hS}cqTt?f0S
z<B_VwsMf4fYMGpu4c$y@#L^;)@QOmI_S1i1bFP#7tvmGFW+%1{J}M6_^~lb`yV<Bs
zQ}!GnJ|W#l=n~QkO(@K9{&mtiS#w)Q&yRc*_mkuXP3iHx5#p(wS_wRLeHxS8J0y40
zQXulj^vKpU?~)F^+dgcqNr|3`E1P(8@>U+`4{&QI<Z>7Vrt#weR{6aJXMaV1A19Gb
zxM0lx@cB~ERA~W>XlEd+_B+-6c7!LAq?NVN(#V|d`-SK&Br{p#fsx9GE<4GM)U{i>
z#?Q19=NqZFGu_HB2vB&bJaby7-jx+|m4L*Iwun1ZFTF)o6^BunWY_m+>Nio8MQ7%P
z*k!lN9y>DncFH-Fj%al~lXP>ok5{pr##AqV6Kz+3Mq4YG7$6GxB?5FY+x4B?;1kw}
zn5vh;jc)Dl_>G<hnwWsZ=~wLt82!XZ@{ROtVgERup7u}WTe0eZioCFjCpD<U!No-I
zfEE?Ud*>4S;&IRGUa?!aA4S1hHr@3*&-+TzNV7<Ew%#_ZSxW6$vge&`VT<j0ai_Zq
zrZOf~OQP2Re;=2>ItHYlYpb0#(0&J0Ld+5&9<_)NAFmouR46{&=S5Xe)wrcnx?WWR
zj1WJ}t&u(=UUa{G{g)`i(9{9>O39r?-ess;$7D2~KP*E%x}_S0xkOAzvQr3j(V#5X
zkZfoGp=lCo718g}W9592p4;Vnt-XW(KuL#TjMbSEhG`I$>0BrwQ98oBJ1sMF6PSc$
z_4?&Er-H!>Kn#{uj_rU?s1(OY)q^}cI(IIY8hYLIDJ`zN;F4P>UmrM$zZ0-y@24JX
z@@VbL<8hS}OZjhi6qK&u#9A?U@nMlTg}{J-t;YG`o!z6pc^BnFn5X6pg}D`K_s+yk
z=7F4D%liufQl;dM(vo<ckWZ)}gm>^le&tJJ&?Wzyj3OcDEHmSju(rVg2aQ&~j!F&n
zdXl%8qv_Z!*JXlEl;pQ2szY3h`4!jlq_9mhDeG4)O&SqoJH4-71a;71TpKuMPm6ie
zlWCs<G@ZN_;*6w>WxJ#wPczkhn`~35<&Fu%Kd2*WrP%#3nNTGVOIU5!!6nwj8Oe4h
z%c^j286^f|Wvkwh()Xxa7S601;RJHDN>A<dcz!l34v99VFK?@Vhb*`03zL4oTv%?b
zK#XI16_tuVs3xhM7F?n$l4cnwxKEXSe70?PdE|y=E`Bw51Y<mlwzr&hJMC6D@lmh^
zO+O>IyTRGj08*d54V*JaY-9Ld>_2=H!hX9lv4RQ;*mG4k{5-ok<CDuo6Jb58_hE<#
zuGOb<3zdeL?$NR3=i=>lK}=6232P`^%PlQf{il;jWhmXAk`f{pWqKtkcolm6U7Fuf
zdef$8NAD1-W6ahCu-BJB3B-2ZifrRC6ex1mvS_wo{H2<w_)C*OLm9alZ4NzhwDklN
zPmhgI4u@E^eR(W#@lLN24GG%arRLih7FIECO@CP)Znl0fwO}H`JSje*cgq-)(eg!m
z>Jz5`!DY}knD*sbe+jy~Y3PvGPm`xW*VN~*l&*7M?t2j2eGnl*5SYQbEd>D`V+8Ie
zf4LJWqPb0q9jPx^LapGEO~5VLcHT(0s0^1&`cb3+quwUjwJ#b|Jshc$_nx5m?*)JI
zSm@5Q+L7K4VD9yX5w9F!?x7Q?d0-m}o+zAZ#Zat^X0bS&(qVPo6i)jIj+*kjz81o0
zvh89|^X@RVjT?afh0vN3A_^mpeLH&syIg(45*QnLnF(gcL!FwGR3#KFu$O~POa}$)
z)1#d6I^)1Da<^x@uCMOca=}QWaC+(O`1<Nnc7EMtMp?0%YGNt2OfDw=g{cNCq`kGb
z?0pq9dCcVYOu=Nch*SZ0ampyrvp$EJly(#LHxd9EJ{-n%tEO~YFa3B!{WQOAOnWMp
zNbW8r+`MQ49F_YtV|lY?9!+eM*){E^97CxR+;uC;r?}PDs^*SE$aicJ;(<G>{q)ZJ
z>@!<9>1L*L7eJA#&b|1<ZByvT(L6M<sHIta638RF&7&L>Qcj*Mo{q4XxkSQ~JJ2+w
zo0W3MrTP|d{1$mNa+^p!M0<Yi!p1RD+Z+*&SrpJrHqzGQTd98(d(`ER8ioM50teCJ
zquIO&S?fK!`4sh&JR9Yl6D8VR$}iE)*a=K8ZIdez<(Yh6wOiCq>l?KBdp|PrQHy>C
zF4ndYh~7?8X0g%)=#sq((J@^au^^>uc<2vUV@d$KvYk)y)@5X2cDSu&W*E6=e*1&J
zB!Np?qKaKAL3;SLjii#>aUy%&Cj+-}W%Iaa_@*`YUiw3Z9gsr!G~)f;r8qF&wENYk
zj-rtrM>Qs@dj_|RooWUq?8Q;j^>i9ic<y|yEON088hR!gS4Q#WN>c}p;nyLdKF&$L
zn$^Z>`VVo$%w0-72w&_t7s$kt6M{V*Vnj*};bh8zrL^b)ODVQW-tlx+h~3gBr_U+C
zVIqm30U`d?Zp+Nn>ay&*z8ns1hx`i47aEcheo}eY=`AE+BXrwQJMTo1mK9G5;rA^h
zB#B(sKj=F5r6$pPXLq8j0+;dU-4#P7GOQ$R`E-7`53c+bvj4d8SzT>tL@wQ-?wiqt
z;49HCgHKJ>yP5|)Xlbl2vrI-6uMOAXuJv<k=0Fd@bz|#eyGt_-b|$FxbJz72%|63g
zmPByIT&uxpm(E9JwiZm5xY`Et^=b9XzklZ3No#s$BgR&0Ug5LjZvh@3Yb&aEtfM$@
zw|v?Yo?__kx7i$IAT2aBpiN;wE1b51kwqyD{{+&B?C@>9s$TY~^W|=eP$-ew6@7m*
z1kjGRRL};;U**?}YPBCLfj)vQ6-=5shKF;OxNlD9da4qr6Irc7KT{iP$8uaey~>#k
z#piA!vG=up`BW<-0tq)plscHe0UL8_kmv$odh}qiPT{ll5sG;t<w$B~!=%|bBT0z3
z_zpT_f}mcb`D|5;Si;*OI%<05m|*XaZ^HCT(bhr*W!af(F07gbmNIC%V-0TS#`Q#9
zt86w5rlOkSKUfjm+=E2V3m>(MKWyu((GzkRT(1!DybBp3<6l`KX1sr$aOv^l6&&_H
zH;Z#k5XQb9xIQ>)5Jxz0(TcVW4sCN^8BXl|b|A#+DOXfAXtzZ@m!ErKRij@lGWL{W
zra=DUuslHjKFVqJ=IXb^oz~R>*uz#CUkY&D*>-WcH|uN{0%~3v3~-Y_Uq5Ikalz8A
zsuoOHu80v~pT0@n(w;nK?b7`x&^o)uCZBesgl(Ve1Px=$yOgi|!D}%uxIA)$pK(P7
z88R&-VA5=?6ADHmCf|b?w)lzs?^khBW!;$jRYQZ`KTf@Ux=0w35I0ooIbnT%eJn2c
zJ#dQBSDIt7b?L-0F3+mHQ2{~)oxFbcV(cJal2D~}0xtM@JGX-vAi2**Lt(W!-@H+d
zqz3BV&RUmfXYF2Gj?A1YB)&BV+!qh&^eRw$&$~}AzSvWz6X`lqbu{hRGxfip9`7}Z
zhOjLaE-xYY)pl*E@XFy(s^|ARpO^3tX6G4FjQdDB`4xy28^bdh<(-=^`SJagrn(Jk
zQpI?$H1w9&Zpp3Vsh-$Uv!8@}VUjvn`Pc>T-?sBk046%^Q$+=Y=x-)w<t1|Rf(`W*
zIrX^mjBLxhHgbTCF4eCoJ&r>?CeDZdqYtu9y@wSKR;>!CgsAn+;Hw(RBI}MfR;Ao*
zni+P=Yrx6wOChycPqR+P3M|Eyik7zB=!sWmcQsvwHonchm-%y?rZbj_OUibTUZiDD
zpRuw8cDqHlO=)F;()Mw<H1Sy#RUSUcN`sP{jo9X|!3^9i`xaA7alC6iWFZA{3RD_n
zZUwhg!cC5O$aq?6+!#DIf0KO#g4FwIwEi7<=b|A4oTylO)wWB=-?HmH7EKq|FY=9c
z>UM4&Bgb!FE!a17DOxr^|IRqjL@hOV33DMkFdgJp&C+`j*^g!TwhuJGC@kG>`yojz
z->lKYv$Ci0FBxihsMAPxFR<4^q$2svjfmIaega4K38pbVBO6ssmb)}I&niu0@L8t*
z<oo+PmuJoEPUM>JM3S9<nZ?Y#d4As{do0_F2>zwR(6@HuiiOLaGUlR4$q1s|LrHGw
z#F;{y7!BFk&II3^h7c7JFTh69WOZWRn^&{@iACyS#RzH?Nl^mtO|KPF9APk$`VlIS
z*mHyQJ-R$U{837bB6?`fdoKD5dP<1CIA9yhBr((@|3XZ;gjGsUj=IJpNe1md16;u@
zstb~Z(ok6a8D-3*o*D`yCgu&wYJBQBfmf_9K-*~rEPr(C?H4F{u*YWYPJjR|?|{6#
z>$6yQctCYO9#4IH{%=4@{ovX=Do=`kG25;Abm&!U-ceOcySTi(+xmr7QOQGF?SOS?
zH!tyiNvPY-5hXjWiE4e@tST-2Dep%`U2C0Tj;`|)K99#`C<e^T^KJF-H)6<_#{GWT
z0w%j&^EiIfu0iRO7kkd`JYA6Q^(9EA1e-4^Y8W7(?q+9y=n8q&eeh}G`yG;D8NHW0
z`c7$l>Sq2jWR_mkozpWTzPlbm$)K8=$wf$e1ifG`8#05-3yPJ!Ybys!9<#Mc<I`O%
zd76P1f!)y<*)E$W_ED!spN_UdOk?_eMP@13Mri+oS`qVR<(NK*vZCX94v7s#3N}2A
z1~uk*h#q3MB{wKgL;1BMG<vV>?5L$7nUnj#5l$0`E^62;Mys5Y(uIGVSO9a9a8nob
zqDwlz?@3o)E}^c+*sNFgq*B;Dj~DKya_hM}x)jv}47>GAL)7_N67SL{!oj_B)lhf|
zwn1q;l1ADyl%-ch3?#)2we2EjseO&Ks}64MwkS<=?L^XUOPxcds*h%ubsiHj)~ooe
z`3CnO{ZqRMA9`>5rC#j~eb;B!0iw9Q&PVW}uswko8DF`Rd`X(rn;GFDkh9p~<=*W!
zNxd(0aJ=;}q{r2N8Tm#J!NIBnj}~uQ2&SFlu?a{X9lRLiw4c;DO7tofmYb`sY)xU4
zJb!4m?d$SEN9cjNKmW`@xMwU53@IlW44SGKXHP!SaduL<YD_hNntdIf)>j8{t=S6;
zUuICd7pc%T`aB547n_5qBQ7Jddni}|A8A{~7BTBa5Hh<QaDAI2W3Sp+g>45^ITESq
z`znprA86~kjSpwYs)pL%r6ir}m$wowCSqpSg52@S^1G#qZ4}O7X5&n)gOv!A$~n6U
zFLmxbJw)GdwK{nW$r%G|TQ&3jz&Ap}zGAPtN-y}U+?&R&u4wl*-f=U=MPA|zhA3~+
z`_~;iz`V-x=)sB=$hM147n7`UiOE`66B#}K56htdJg|;#*;Wq%hlZK-Yajxl0U6zf
ztUf21#KjH*FHVjmi<4@CkZ68{TLA8#ckSs4Q!N2t&_&_&ouHkmY%-|{Q`^8sNQ4H8
zMM5NIjrv>pFzkfSR8}ilwOuXXkhzBR`0Ei?)1F)KuJXt!<%fzFX-HjSOi({)9e;jy
zX+J5nYEINF%JD*G*2DkqujG$v;H2j!Q|4Dkd=CLDl4!Y7j9NKFLn?7-v118yL4p{r
z8k;9r0dO5uNvW2?)d@nvMzzX^?S^H0fk&e|K89U)j59NlrPL$@9A)O`(Q;1sHz&&u
z5pfzCXEeF#k`ui&f|RgM`E_X(PGDn9QUt(;(yQ0!V_9Ho_?}%>VT1P^>;5)*fNrMP
z8tYwmoY$5k&n)_?FPA91BiHv=aiBQt#*z0l@FzO;s|V0$;KzK#&v5=MOle^Q_T-TY
zigyZSJ}fink9NJtX<ZBN=-c~O#_o>p+vkk%CpPg5PiYy!AaJxWm|TNu7WSQbvC!3i
z{N$2!UOh5&_mQI}d3>zE9<j*#x1Hg0<``0)YdUyn_mOk(4Cnb@U-1D%h`;1w!FjYh
zwr8?m6reVAGvSG^2YfF9%sF-7_k;gl@!wnh_Zk0f+<sg2|ID2ou#NE=aE+j5?&3X(
z0t_VQ+%<3~F%vtNDG~sLq??hzX=jHBAfQIppD|ld8O6p~?qziLRBJ%e1wPt~Y(GXa
zzBPOZP;{kn?p?m+)~#>P*js1u%>PfUr*F#pQvAyK0;2WkxwGv~elo9UX8Fd4g4H$Z
zN^Y%(?|bXTZ2wl7>NfG@utxv7JNG4~6S8Ky4i`8M?|66Imgihj6RPOcp6)+P*aTS6
zWs&yrS@rY9`Nz{vGak4crbtFFoe5}+8Hu)OsQ9S06a9eJ!#yR^aJ&5>X8Dt+tFF(K
zgp1c_mZdWvLjbWyIYf6#yH80?(afR^)(9<)F$y@U!{~YMdU`aO_oB~Ct6}plo0Fpv
z&Kl*4Z&6p<wFFp%8G_|xPb(kk_Zdi<^d?-2l|<)#rM&f0*EmD!mQKWX9cqepIFYd|
zYn~pjKP+C@ONpMPi)0Pwq)iZRie!}&J&hAlec(twbuE_w)8p~r;=G(Oceua8VVWTZ
z7lM?1>lq|*Sta|CaxN$A(VjE0C($eHkz#V>{Q2cQIiE_7_$fj=g5HH&Ze!>#@u5lb
zG@9XMnbBgw*gXm+tDdvpXspIGK)iUC&O=d}5<Y;6DcwiY%JHKFOWqF6#H0l0cFj6o
z<l0PQOy|+|C6HI~)(yI%l7^45HKZ$LlNLOM-ND9lk$u7P(*8v>(V6t5g?*xVZ{++`
z%j|3G7j==raVtOEw3&vMfrVG`AOE8oz$@wu|Lhfb?{g)<6K!s0`6r)4zDcp)dgp)m
z!k<5Z-VWi}_9wpo{^x!TfX3PWAII_Q1zLu?5HFc2iqrnn;WEIBm@WTeJiOjOliTu+
z@87=bA4Uhc(tZDGJbwnEO8;U|v@;|BeEJwzY5~g8`0(DpnnK9$(f{-D^sMqvZra59
z^ujr%YY!E-LWH{Y+}VE^@ZWwCU3mK6E!<yUDhewo#=G~?-`@TA<z(o^{fn9Wy}Z9>
z`~SxB{$A2w8}@(AiT%B#znAoHruDbs{ppAQAM>lfPwDSd`umjrhnVm8DTRpn_l4%q
z3()U~_u;1Bcho<xjQ{$M`rDWO_NBjl>2F{9D^c=S(&>MlFD;{P!T8EqrarEU*#!Sw
NP}Vq?cIMWj{{vu$B8~t6

diff --git a/example/k3d/assets/metrics_flow.png b/example/k3d/assets/metrics_flow.png
deleted file mode 100644
index d6ca3cd60957d6f2989274267b618dd5a1788970..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 24634
zcmcG$by$>L_clC$f}p^S5()w;A`L1f4Fb~5&?VhScd3Yi(gT8Y$IzXFA|l|>-Q7rc
zy?a3K$LD$O-}}DbcYGiJjEBrzb6tC{z1F$T^IW`>mleasA;p0}Ah;6ZB8m_QMhFCg
z=5z%e{7)2oq7l5%If$w`7}&gUwKOtzfQT7c8`(W~FfzQO?|R47!Qllr3(E`3=hhC6
zR+h{LHdX`=xo(3i*qJG-IsE>A2pYJIORQh$u=y9kzuv5oc=%WLTy0mpPa<lOD|$_w
zZ^S125wna_!%xdpn{f$Cwus250}pw|&)T1x1f^0Zq%jp1%%P8p(Vhu8e!*eakXX1Q
zQbcdZ^hi#=o4ooBbJ1gy>;&ycg5>kh%*@v{EuOePTeGH5zpduLPmN`G2XS}LI;Loe
zncHCd^S=7^o>^v70%jG0q|?^SN0IH*=Ct!ESK^ivQYHC#dYlxSMq-%?7!7VeO}f8*
zH9A{yZye8S@-(LQ*>Ve$EsggQY4jS=cS5E@<8L~>R|Bl**~!1)5}L+6CVf-esmHd0
zi?te(QYoj$>ofV}<2t8bgBO}n9o10IDrW2k$J4j4Y2z`zLLo7@(cMX;h2kwt`Dd%1
z1HPk0b+6NyBiOm83%?%T)Vb@zUebySU2jM|O1<JVE6H?Qc;h`yb8uVN_pg#PXyuz-
zaRDEC-bG=PJY^z&b9F$jZS^b3bJp2h>TSZ05QvVfgou!`i_XgERW&GdOyGre(#Y&R
zQVx~_HtuJ}I!{H!?v|#f_cKJl+ket_bZD&OW^u?9)QyP!5$nd@f;p?(w`@dTneHk?
z&hoL1_5n_eqKmH(MrA7cy_YygXMybSGWWGot`|>YJqO0yizyR4)!kQ1_tZ^RSw1y%
zN}xgq^6(+eEGnuX5Go<P%cxgj;a{)S3<YCVD%z2*BOkkSTb4J|(IGeeL$TyKUkmld
z-Y(1^^8E6t@ybse_;&VvE?o9GWv_{fnk)$9+w+;vN^H;N*=fX9a-0&@jUS<Zs6QNa
zXJ~yK{+`v71aW=zGUWY_kFPRJza*L)2lcA1@=qf5Z<G4MbdtV(yYVera*rmd8sZar
z%YL0u=B6_8N8w@iC{2y}`-bP}%X#~y{`iz_&COiyyOy@LwooXnW)=c*GW>Dzt*lK;
z7vGBKj}52uc5`0t%RSm%Jvv;@&uUUuR{pMu2hkJzcAHo91}2o%9$sg@hiyYV{o-T&
zVSi(*z}fK@@)M_0a8iQZg4k`>Ry4@U_y4+8yc=qqr<1um%l+qX#G~ZbQd6U~;ez;(
z|I<BNY=*&lv^gvXLc+qH3QWcFxvPxXK_EPj=O*Z49%jZw8|*-<<y?wyVxcoYd`jPQ
zxdc48mTf$z=Gpu6#u(!_-+CN~9+LrHd@}Z{>}W0(U8vmAp7+emjIvIhZf!F$>OGwS
z^==zeZD)u1%>qa2!R|k8m&ZoWqD{V0@Exi;7CI$#XhZ5Jwz1@5ii!m?s#n%0gEKix
z*S=cMtLA&9jeVs7Uzk3ws($wT_{1|q#=Qt`nNX$HBpnlX%eS|L5f?t+W`&D~cT<3W
zsopm@Fu;j|XLoR_5plAU@14ag(VeT=)Wa~$i`uu(i`U{U-6s9$CMWSLD=K2S!t=(4
zg2LzcbRL1IU_Gg8Ic#6-HlwC?$D<ru?-0i4-RZgFSom$XuG2#H@9&f2CCCcOs39xF
zD=}!&H5I9wrzp?WR8>&*+UY&3SgWI?Y}#EVt8!Xhh8sS6_OiU3W_iJ+-Alrq@66-c
zu*huF`&-#hM5wB+LT<*lO-OWqAQL-2t|_-U(_0yMtEv-ycU)Q3c{?pi|JBPXS2w4)
zCmV(B{F=-NVZ_<#Q&Isl!qr}e{nCEp@wzx<U-4b%{=D8-SbO%)i1|*jhPsp8t7TaS
zivx&EvhKG+y(8O4+4t}s&>*IlmK1f**vAc<Kg5%aRod@_+{JfVoT4D;JR7OZ6$`RV
zt&<Ggw(&Y8)=}$eXXh!FohN~&J)v{Ola=<^F%ei6n!kCy>txhfcXDSP6_*9H1uDvh
z+&nx=XYz<hOMRBJdSAr%A6lAf6|brqM=IN$)_$JNMy;J~CETL)+$MGGkmEnN0fXnA
zR)6}$a5D02t0ex-qVDmOmrC<n0*ol;xSYJ(-~e8eWpgPqYk0%CnC>z!%Q1Rtre|30
z&4G;G`cb=wsSuf#v^gCdwY@;_-6l;cl2@*QYW7tiiSy~I&AYvE%FQN$Q>@`Y+{y-j
zfu{y$I%6aaZ}@JLpU@6RM3#kdc<znPg@y64W&LY$hOGuSDMn9h#(qqFVyx`k`qIOC
zwh_ETNSl?fXqToV84Y9FoLAyL(JE$LcJNYwCf94o7sRz$A8cNB;MVm%p^Ll1a0iu4
z@B+~pb{@JpW?^OON^ulMB_Ia+^T<;ZY)s$JUG_RVist>;C8uFi%bsAIE_cT6n4hOT
z8W?z{qGbQkOPSkc-Mbf-f(p`im~tGVqPR(gLB_P%m{?e;smJ)5y6UcP-?X#~oUyVT
z_zV2dFIObJ&c|ETfsD5~Tq&MKL-VqX$E`ft_54m89yVrcZ*PRC3=`nHj>=Nfi2Rmf
z@)IfTsOw1{;eMQMDlThd-i``~3Ll6Ohf6o=#QAo2S1qLuE9b<}d*XC6=oR$RLL^x$
zE1NeDiO$b(yzkD@nsaMwcd%AX{q8Dd2kEZTP_ih(b?TjXOyyb~g}OS~;)!5wfY;5<
z?G+7GXJu_JRDj2tu3K6ju7v00T&2WcOh26oZy4kyqYn)5BGnj_mniQ_5j&G))zP8w
zNKRNalX2V`C;Q|-($!UK$x<ec_OhL-;N@Fc-Psd=M=leSc`-`dqo38tO&Q{`1@`I%
zd;!B2lB_0;u6A~eoT{y5WojHap?yOG<>uB_P~Z`}k?E<zrGwX;fwpRdYD~xCkTu-H
zlP6SEzHVL7tc!JZIz0lBjILh0E6vIH1sus>?I+)1wtq{f>@?d>`O)&=ji2&Pu@5=V
z=@;uX%kIyw&ZJyb`9~|eznE;Yt!)ILQr_Y=bj+LfIF6?rW__}Rx-ZA7Opnemue@7o
zz3j`%u;@yay4JB;%1!g-WyDyOV{eUX`{B`%Z0!EWV?j$$r=Bq4z}fgt_aE*g;LvkZ
zuHmliX$6cEZZGfUj}sOI7oN^>P7mtZcGd};9kh#3>RE|6qd^*O;Kr9*lP?dlz5rpE
zA)B^tHc_v8yeMZ+`pG-1%B*|1<`|?vBM>Dt)lQCQ+uh|o!ul!Z-(lnZs2!&nOkqT#
z?*H8({U<_gDU<Ni4>}ovEhIZfmBuE-y>O-8jcEa|EG=+;EH_T}NLt7m9_%Lhk#Ppm
z?lz)s8W(<WpjqX-H?M0U%5r9rkDMDPOZ+*ty(RhL1>|Jnsb7Ddr}nA(%D433LPg_~
zgfrK7a~2lGnc<aHRi<7(r39#xF309#J$75pAZ|*cH{tAf>SWKKjqSFL<zY%rNXSnf
zr(?f2Eso1$i4My>$E_#SQt|j#)>8!K)heb}23hF(i#`r#lG@FhO(dNCNIW<@85e-T
zR=eMme*iHr)1x};DN#J1$+<X!+7o?+j06iO<G2`6Xm2k$F3u7$*^#o)=iT@3Ut>{J
z1h0m{N;h8N6Dx$IePK1`9nDdF=&sswUfH|qC2#C}KRa%h*beC0mzs2JiD)V=7Kqxr
z=_*j?xI934woj@2(Q~*_jI#DYe!xl4%5uJdQJ{i?@SnRi{q2L>@y7E2*nGQ<z4@U|
z{I_(?Mej3b#!(})YsY)uloET!8FRYXUE61;<7ea#6N9Ud_`tak_TQby$ZF&Jl+HOG
z>%3Mg#LUbryRX3@Pp|`Z)h&8hur#u;Qw<)kr=6^nyVwhvoV~F6j0<*eXQ6X4!gP??
zq%BooSFIvAn50zTUb4Wfs+ZO|sL8zo-;Fshy+ao3T4k0xrVF)8JF7gP5Ekz)<vfT+
zWwc8w5Qs&o>-vvoiJ=PH!Ag70t2kxe+npBR&b&{z0+;kJKESaDwU_-HCJgbqDC&7`
zcRp;%vbN4c#Vu`a5hA#35#X~QLnEq4E)=S|0*65Q{$B%)(j(NlzEgk>QEUA#6!ib-
z(n$nrh(KM5{1Dp*=J=?b75(S}O8&T=a{(ovu%YKXqH!RBJY=N8KZiP8T>84_cR(;g
zq-F!vVG(!{D^oqypMJbJieT2M+rYQ!lrlOq8-0fQ)C1v*PtkE1UVI7-d}<b8vl_?c
zK9JHqYD4ASGod|YU%osw3Pgiks|QbX<rfBYb}1f+dRQ<wGt&`F@QKqVUDfo}BYCMz
zz8-pWO<UW-BG6%B>eYW%y7Vf$nM+=`l&400MfRpzdpzIKPQPxqg|L8J>P?K&*F(a&
z$z@PwWm?T^5IqPcfSCZ`#bN+}*YK(F=WAb>mrtUqpI6uukNtIi26)1j*lc!La^%IG
zWoOf$-&tZUrd*}dZSh&uXPFMOVU|6;x&EAiqu3Y>wG`W|muesS`T3dT7A(boZh=~f
zG9~TG=VV$rIy$xxV?b^Sy5q*%tv(590a3=Kxea9)%*@fmw;`^+f!VhkHp8Y|2_U})
z1_s^7OI6%&QM-GS98>Wjwu9qes3zbc_q9~L>kCVF^tbBW4&^LhIS@!9`@@iz5{Wsl
z-Xbv=P;G(_`(J9PcCo(WKVK~=)Hcw}ArOY=cP@tus$vm*!cy@Ny$tbz{kp^z6w2-V
z{aaM<r!)xSJn+rKyN3#?Xa2r~(&*acBL8%u7k6l6W7jt~vvYEktWoz-K<SRzx3aQ=
zedEC;OiVX7w>NLzv?T~2l9QjRXP(T=&B;bTrhf9|<70Js`HpZo{z}JX6{EYuJWeYg
z!^67))Q6F2yzAYXc!j^o-k-0Vp_BqEw;7Kls*!RhCkNM0Y#3lFFg7-Jb9c|zD9z5!
z4j>K;2q0$CD6yZHb&WnebUR39uRB~~prlN29{1d9fiaY*X=}$tM(!SOwKKGq-iV7V
zS2Z-;*<KyqTh2!qTlD4Y$^}~C!MUw4QTI<(eYx-S<Os3Tr`b}9d}j_)nCIcPt+R8+
z3RFdf!>sFmz$af{->vy}lS+C%zBrr$Z5{Vj_MzD?eplJNw-*$2b#)!}-S;Q`+3}m?
zz2ev{R0IWm5)#ILM6=qARNQ4Re{E-l@H*k;<;BFO@L1}}B5rNfjQ{vi{78{GL*D@>
zibXdM4o}U_{HPk<o1+?NPPMVIQR}voym|NTT?W;>V^z&hg$+!aW$*K_HE)oU%glcV
zI6z~klgO&ArDe)?_i$&~e(uL}{M3doU+nDcQX^w7fd|vO%7G7$p-cpsbdEsDS2QzA
zDMJMc?d|L9ig{%4O@1gRD~pbaiTt5neX?kv>1?S*zm~Q(SX)!Cfr94|<^0F%!Z8^T
zPV141>YRwWvs3rZ$&cXY-3^*90=k*bNn%E|JM886IXEJNpsK2z2H&o6%LmTRGL4s6
z4IgaHo4t9=No0VlBrx3r&n+kj30NJij+!&;ZVsn$b$!z-+~~Hu;tG00kYE$`Mx7~V
z9Vyh<bD+1iJB<%is^+M~f@&NVuOkz9oPSO=1~PGALo7w??_6H+=;#&tI_C@BVxYIP
zx2HSQLU?IcCUHGgc&Z-=mNLDuriQodV?>0=!F!~?zrXipGfhP7@$s?gT(n7iXiWU$
zJdM%-q6tEODLJ_eZ4Xb+YKKL;`L?)#033k5j*mUc*r}+fXlcdGt+89b&P;rMWo>QE
zmZBS9uJ!!v^n`+fB8>iVfH?ylU6M$ANQk_;`k+>mwhNye-%d{?lV&8d_Tka^S$uA4
zJ$<$cYr!VRR_^TVESqruhg=g4%j=MVw{wCx9S5kR?1|3cJ_F80;z**TG8Y$DiJFp9
z199+euBTk@kt{kjE<+_|5xwyqn-VRhXlQ7J5_GTPx$NH%O|T^tY+5!=!F5@2inObp
ztV~TiemF%&Ma6{Kiio^MAOv6=ySwSR5y3=_BBh0+bl%-Tp`oGC(a|*;Z~BGrdTq`$
zqw3Y-SIuGZ&U?dgx=ykP35Xt53<jOx{40<LcCq1#-6m?N(A3HakPo1NH#avQV=vcv
z9=UBVJhB<90cTCsJbN9<IerZr`?)3&h1<g2MiVvHG6p85wCJfR{R0&pL2@-F#`btI
z>!Ff&o>GLRk*o1>aZD@^vOlDZMlq^izj-rLtsP&i%5j;)@cUnNiW#8+DHie5$T=E#
zvhHCZ2xE?Wq~d7Yw?JYn)YL=%__4jQAt5fFnU|N|C>6!b1eT~jPkU)TB1J4X=-s<Y
z+v#UuJL-KgNSL+0_bFL!uCK4}>=;!prA6r^AKYR!UMHX3T^nCpT}2|OeRj2rjd5F@
zN}hNf?+*;9mA$*S8PDf_U+80T&9UEA64Ox6H6aBB1!ZNz;W*Fh%BMHgipyTUM32eJ
z&$lr(RV&mNeevQUOZ#_x=i`0b-QhE0vaBanb6iD@AjHMQ#EQSS@;40WhePV0iGX#b
zL9Ht|lH8PuZEbDo@<capF3ipnk&;&FeSS&lwJ$`jMrSGW@u6>*m7rk#NTvO(uEp8@
zbg+`8xus?50XdITM-Ul@<%A}YZ0r-E&*koWKO?jjb$2`E%CfSv&39J@g@lAkvTVld
zK>7%~^P`Z_RKj(0ci5)5!O!2H=D~x_(M84qn<YB7K=Tv`DFK0yiA<75N21WuI3fqX
zNp*=$vFd0cX8t?zA{KU?yPBFBi2FbpbO>4JEwBeSP<!ACsuL<_VuA_+er}Tf$7>8I
zPW*zn5IyRDRj`;Dww}81A|VJQ2vhjhdBt-O(SznK3GVW7Lj<eq<uU&#JxSNjOAo51
zy~q3Y_5t34p*@VAg+oXO_JA`;0S_-~qq#1sT!HK2`4XXCui^fBMV|VWo=W!m1#|RA
zD${b7V4-Rp1R`d#RiC|uwp8TVROhyo#)3`>0F72<ZXBq<f;5S&A?OYdF0Py%^nOP*
zTb5aJ|DK*@*j5KyyF!^%PFP<j8ss+Ko5$ysda<Kkqik&;e)24Og;;`t)7e|!J_I)*
z_wo6C>d|7LYHw)J75H(edC~GijZ`zug?&8noa<Hm5C@!_E%o<7B1@%0&+()&dIf>p
z#{G3&u*iHT8KvO+HzV`MySB0-m=T6|?TXJnBGC+ZCa@VGf;2t|5wzc>y)r<!63c5x
zKj7%CVgGlwHCn^-hc#93$5eSE@IuCpB4+9Nunjh91;7&c*SA1#xA3vqCdnZD&zJ3X
z93KXQLHF6>IS+X|?jQCrAU_lA`t^UpC@)dmn8Qu+&#1?_1U8_4;SZ$ppTThc6?(WA
z`|*(NlFDD)wo|X8qEtb}wiEV$a)Am~hsyyf&>uI(fPesDb<oo;v%Do53FtlsPPGqy
zNdO<xb3Tc{qHwvxz#vsw#{S-eeCW2Crr}I6s-&}j!s_Gj_Nhury35A49V$j~i{GQd
z?o;m&Ur|qgKZEMv04Rk|pFSleBLiO}JkRZLe2WgmzzZu1akSf40VD$vS9ZWa|M>Ca
znwlEf1pd{Pm1B_U)_0<qwMqHhN-{D`Kq(N|pTLMW14zgO8AJ5fUla55oS+VqaaxNb
zJMS|w<?155K(%;<g`Xa)s;(}vRWg>-ywscHIxFqr;gPRXn|Y1;3yeXv2nKLZ0;`EE
z$R?}TiHRe_!yD+wD{KuC_&rBPN3(9dd-u-aj*X3tc|)p1IJ0gYBYXMebg)4BvCOAT
zD_(lDGW8yaUz$`@-TIfS@XekcW%KLW;dh1KbYNQ#7Wpybt@4|8+^O<`*Bq)XEhj!n
zfx{UoR(dj6)H`H%gs49UerX{gAqghuQQ4SU(yA{idR*1U&(Hr0^W6P3uYknJYOks+
zgna9r^Che=M3pXEjODNIZcI;2nHu+GDny9xA7*A|nk0BeCgc0To;SSNs3*N~L%3QQ
z3RMs%Wi|fs^77Txxs~f=WbUg&rBzi`AQyKqd(_UcqPl^h66ZCYn2aIWc;4ndrH7<k
zcJ~{NVg#Ijjx+|6s8cI}&R@T@w6w%)xXfz4Js~RQC1L6FkqTSIt-^HaXhkI@VFIUm
zAGG|MO`II1Vq`KVt^Cc=T6fNz<I4H?YPTKwxI2Dal8)UOa`S;y&))0JvInPC;03UT
z*+3KOs8@TqG7m-XZl_!!f6J_FW@hH%^2FWNk@-$<b8GjZXdv;%p{pL0QhdG_>tQ+v
zekvsBG62WdNYw%Z14l<jXhS-Whe|D~9hbjdzdK75KzeX+09P|Nr*CB=A|e8*-ox|R
zvuE=1Aw9Qc0s;aC4naUDmU`408`9Cy**ZGPfO-ap&oH#Mwq|*NMiM@OpikO<pxeAU
zju>xf5H@E9g}tedhMIb3WiZ@W#H!EI2R)8JJ6yBenof4TBT2YKTs4@bXp4wk3cwB4
zDNS}cM5EIZrSeH~0ZEi@W<&(x?o<GCVluC8{uTHV#$wGO<XcY}*vU!MP6}Zxccn?K
z)$WY}q}9PYo0O+rou^qIG-q#TM{C~G(^H_o;@lTuMl03%UY8Ys-J!IkBq7$2jcfM<
z7#9~8J3Bka#>Ot-Mai4q_Tbh`h9q*Td-sk{PO{KSc&yTt^cwf;#DZ=o-K1gf&$4FC
z5$lBbL330ZzkQR;=2*X>%oq@qR$1+)u(h2QIW(C4N|B0)g;|@nOveGOcXrTC2eBZy
zM1og8F~kvq{^a&WA+l<~${bA4tgNoyGo728`{os`si-)0-~CHWWaPJd;$~)9;VaGe
zXaX1q2M3v+MS_r{mWl)&iX>7_jR>)$qTCk$<Q$hIbpcQ_v+-8oinOe3I&1PRg-=|r
z7=*MB(o<8#|GvEnyqMBaORq242U6Y=BeI=B?7>ezl&oVjAbbKgOLVrda}EU~!NR`j
zdIJ`gAnCkOvmjd;C~RnK^iyn{HLiAAO@96Pl+6U3m+o|#oZQ^p%*?m%-y0IV?hB?A
z;OF4j1-*-+Qp8}fN$~x)XDeG#CT+0?i<w9q930be(CD-v8C2j`@bHY6Y2@OiAB8ru
z900&I3$RXNV;qmOqzs}cI3OTwJ{P37zMh^47!3FJll9psUE^v~RF3%RPw53(w<@ob
zs{8yxJIQl}g#ALr9A%mOC&a^a*m&8lgni=NBGS^=j(qGyL_`8fUTiOP*6`-)R=h~6
z@#^$-(D4N6_2C^VOchBk!eBxMx=(GNIOWV+UJ_aiP=+D)#@s=?ujIsmHqE#_o}7?y
zW_5KGv~&CWE)tw%$T*&;lWaF+47&jNvoOG3($OF6?-wA7<`Ii|d3kd?{(gS5b940c
zG&YD6r@fz}S%NMuF8cb(yf%dbb{UDcNJyFxxPqty{sJ@(?uUyRgEei~^u+AJ)T5r{
zY!(KAOWihwabXjQF=Ed@^c>?{iMuL(*X7G=?4CD1J`iq#UCZjmdir;|7msm-)py7M
zCE*{^(o{?u(esu0#8EhoP8QAGukr5Q&`{}v!!(I%T|w~3FBo^P!HN9s@MYBYMJJ|b
zv4R-N-vLx#s5?hYObj}uhE1EA$LUV(nrk&%vZA7zo3*dZ_pV+69}Q{*y~+vN68I)p
zo7`bg&+pGCWl^MPz*L$i8~g!^TLp(`ZB4+Uk8vj<j|_J+67~WOtp^~+jMo>4aWg+N
z^GSsJ#5<DkQL+2g&(dARZ18Rm50!w*`*c5#@&b;$t#6^sN_V&=6v$?UcQX+6%ey0u
z=Vck742$e}+DN5G&%s(K4L_J2!0EUJVpLr05^4!(NT@vs9&!vi-XwD^KN;Rf3gsSY
z0)*H7Mf>(|CSVqHlEcoHYi|detwVdL0Ng>32F3pRz7*m4_XF4hoyOM+kM&P?Ej!da
z7dPvbSN>9~`~|oAyztLK<HrCL+(4c=oI}aD_>*6J1|Ev0@F9iNOa1~ApvfcBRY3a}
znEaoi#=kQf|8ya+6Oek+3%sajih9+%(iB7va$J??Q5k?9dSVFIt#mtK6O*AESWT#}
zniv4>+%sQ;lf#`BT$SYsT7!`Kp`l`HE7xizwt>kZ{5iv|`T%@+42YV9$sN#xUBSim
zoCy_sgHM?^VqA(B^w{bud}n6|5JdVV^+P)IX~r}4+1<ULXHdin5x`z5UAM$p|IZkM
z;!@5(VT@4fKQRWs<C3zG5jC>gE&oA|YW^II^%slq_<}_+WMIlqfUz($Q}8&!tKwo{
z_V6zs$T)WwyPHNw<D5Eq^HQO~##$+)1JWRO9>RNJFJe@);Bd>XREfXQfU20B6FgYp
z^rP3nI%qI4i+3~IrHbiQ7}?p`85!R*kA~b8UT{O9j=a0<#-O+8p&an-i4q;vi&GV=
z<q@blM3<~0X?e=6O)iZB?ez-|m|cKS_}19i`6E*yg|=gT2XtKR{6~z`*Ccrx-r!D$
z-h1%ijT7i_k{KTx|M+<MDzP{+nhGRKP;&v_2B1Zv_P!g^#0C&@C1z`5wQO>walEc!
zxi-*~*NW_yi(+C(B?BfWC*g6)EnF&-Jy}X-7FJfd_n+h$^Cj0b_A}s^s@%({lk9<b
zDPmw=Q!6nIh3^LsFe{}?Cp|_H3Xf5^LYGB=1(~f@I3Mr+6JR(8J~~Oo^*DY{Zr$6D
z^e^#*%o%mopvU9~%~oq}W~)EV$a&R#7sczvnciVyW_Gf-9|m{?nXg@42Ff<$tUPA&
zLP$bFdq7%xdXYGI<jIwlAN?kVhL<j1mOw_QfXa|7;Ie)P+S+e{*%uaeT~)RJ_3PIy
zEs}Lbr8~t=b0GKZ0Q>+48`)Zj(;mmuL@e6W3m1zh7x9G_U*{5aZIqxshYVX8T`~jA
zOOFG#u0zu*;{EZ+lSP-Vd4y`~bfWHgNi_p{anC)yXy<L0EL#Y(cGdQn`&zC2d{EDJ
z_2Qq1K=>RHsH>|pDgtt^>kmjkC`7nS)YaXcl9EzeTMIZ8R#sLs8H;7rlCAHdRF<{I
zvvvVEqD`=pB?9(0`Kk$}RjAwCkx*DU%5u0-7FhM(5Bg44sF1dbF{V1l!lL(QWQ}>`
zUyhEDzYjFvCywkHoSpY5kRu}_11$DZl9I88a%$aOU23VcOiYepd;!xU1owG(H0yMf
zw6#aWsHM;`FwE*ocLL)JHpypUt#tH+<Wb@M_Del<^jZoEpE<06z)T*|PseScU_dxa
zL<5VB9hthJLNClhsXML@O<vAYBh)4qeI;7@&WS`@P)E=qi7{!g7cCX<Jd0cfOy&z)
z+oW~d%0aMBwA=-VkGI&(drHi@%`GhG)I^>=+Z2Cv&M*uBGEZE_)f8~nVNZ$*<fs9e
zGnbLV!9Yu!=()VSOvjn8R(KC^rKs3tqa-IMzj331--3*Q;B#Lf{X8L&<jZOEK4EtN
zFl#rykpXyI>9TPT@uWt!QQhJ^h5-#SN5lSNq8`u}Edgh5$t?ig2+k(_M=J~BM}I5o
zu*QK0>ZxH2z+CQ0udH4`FLOzPz)=o|i4a<8>3ClC!mzG}8rLn;bP$9^caD~iKv{1e
z9IPxXR4_lZ_z2($*5%8t?(Tc5!<_v5I$a+a?dRK!5Cl5K#z;B;&{RO7wM2oGvC`gk
zu;#6)iI^+D^_G6V=d<iqMY3C&_2^Kwvkf<`6(Fvdcrt5b57YzcLzT3sTbyn@kWSP_
zM@KgWTNjti%R_t=31MN$uc&x}6sV871YOjUYfPRq3jJwaAZwL8%FdE_>X*%wRk7YV
z2dda63=)a*&MeGuSPi9~=CTcha(|2wI`Ey=z4V^%dU@)Ue4ZVdpcE>|xsw1(xXUyC
z<;xcUiquX&sOmY-U4zePJ(Ud5G%S)5c{b2<yvH%=%b?Z<$`EBDCZs@-4701jAHP_4
z2q>HFG3<e7X<Rpb%`h0aj)d%rwmKZfo1FM>f12ab*r+eX1sU$k9|f!<y5NUoE%%_~
zK%0O3@L{p-u`k2l+&^yW$A^wnbfbHPlxM3P53r-rE?p2H7<3K~qMXTPD@~pRW;Zi8
zba^C~pAJ{7O$jvJQ0X|grGVBuse8hVy_c0fZTUMwPUrsFHPn?s3p<6;18U3{L7X^@
zv|hjs0N`;Pnw<=}_${hJM^HYApF8?E6-w{phx$fHec8HzwlD1b-+xF8|D*)`e<mrQ
zN;AabBWD4qOh1~N7w3?lT5xlp$4YY7gVF#R@TH}t2(sI{H2kHzQ?#{&5C}K*|ExKD
zHy)bB94V6|bT2In>x(RpT{U+iRH<X*9xBWZdR{FB9<oEj=_(wMp`dNaQOV8DKHTso
zW~QgtC^7A9i{qI!T3TM74P4F9wyw9z`PxF;F|--koi&)A?>B4NdCfKM;$rk%np%H-
zbBY4Xm{<zdN0c)0=Q!d_)222}YuG~<bf>@icR<K#U+4%xp{TE~2h?~mkAs^VH<4a-
z&F+vzNh^wLJYDEasjI6iiK>yc1Aqf0hD%sj?yjz&s?E;K6kw#Kr2+b*y`jNied2S5
zY@EK|KVX6d)h|D%N{&wU#?MZV*17@9a85G}g@l9vo`Iu$N(=^rmBjCEnisk4n8!ul
zfAFA7QgXNFdes$B=v3C2^JAf~m>5aq*7o-8$A(v+rADp9RYN8Hi9)Xc3xbr)ZdcGQ
zo+|wgWCxm@I>NA@>Qa%lhD$0E8rn~bKWYUwb@7&VbtxVYB`V45nj?jmYhJ!T9O{xp
z1~D~dp8zsbSXej<zhiQsQC0UZWVU7JEx@dyaKXK`B2{%ng3p6az>POw$Xq#ds>*~U
zBwN>#>a8sS2LN^|J2y9t-Qe5%q))aoGPtwv&@eC=HA>#9=u|r)dwWYk!kY8PC41)l
z6JOvsWG;$HljB^yI40<QXgBj6Fvgw7mG<+@IyK+%2+7E#fJWYn{P^hA(sMrpef<Zr
zvEsOiJdemdKfk<u2<y;x1uY1l`|e1ME2|YfBV#HIfb}%j?3tP7a7$;|EuFl<FstFR
zI00`Ra~#f|>rUnYqq76)zYu~lQ5seY_urHQHG8{4@$=)-5F4m&0CD?JSd?@Ibdxzr
zT{^GP;GL|@7S4B;(zzr@9U)n5m~m62LA7-BW51S;c6#MGn5xd?vZhDyKr*Xoe9COK
zlAcu|SSqA1Vd9n$(D#lm^^J^ZRhem@D<KEpp51!O)a4mNytTPGps%QSefB8_B?ZN4
zGfhGVUweCduyMTW+%1h;<m9#Hz4R(R3@j`ek_(BOuoXeZ?hwFER8>}XN{fp66&Krk
zdGTu|goY9j65d}_*^ELQQ{TUTpMfDTml4PxB@yTH2OY}~v$57*CWQfnHv%XwsYBYb
z3cX3f{-&W`yc2<k^O=JWPc_zaW1^B9iz7AMnzuC@Ki#EIPxNN&%retKtE1&Eq0UcC
zrjH9k7Hanx5q=<n8U?l`@;9lh%KG+(d7+#CsY{G|pYe^>f}S{nOnI*|Hukm#JS*#Y
zAc|k8ruw8?<FWxtZ<*!b=1jO;7az}^J3iN60NSoCma75h1taB_<jqc87}2i9-171;
z(7fKf!Hkmxn#M-;_=#*CKM?qeLd(mY4Gj&Ajnh5C?>{N2qE=MmBOo9+Jw5HYmi?h`
zywYAwK}R-&{vdhbHoLPbi@6R?R@(WKF<Qbh2eie^7uAxLZseK-CJS5qOxxEANPaKd
zG=~CV#42gy*-nesa!2F#%uoK~$^NCdRI$*<Q&7{;Y+)$?>tssmlm8Z6W(RHvHL_5O
za`u1&M>F_}RyO0hxema;x}H1Gg9nPLs^x~wVfFQbjfX2MmODwkOwZesL1Fw_XZ@}%
zDpz%dnI>DZkd|9aiqxt206S+PsxtZf8ANgw*@Ts)h0ee;C~2WJCNFfvl+vN+obS)Z
zSR--PwKxJ4GCIsPk7`RSJ_2lmDc{*xFko#N^4`e`pt1jXh!-$=K&l0B02><{9Jdme
z#jZ5K>a7ixO4;h(|3}@X8yDochW`F2>WnBIw|8?UKR$kTj`+muYUkj<R-H@F@703y
z-DZBeDLDAUhg!SYfSw3UAb)i0Q-jzzd4<ovKNZNr!NEaHNZ7#)8Zca3++V~=wf%~L
z$FW2~CN+vQxwVVL78Ml*=-aYZ-<eARx+IFUFG+oFso+Vc!E4d{GD^A_x`aBTzZYXC
zt&g|F*eaktJ5REwkV~Z<bQ2cl=4#PVx?a)wHXD4&=ex^Ytt25JfZ!Z+nFa-=hwmO0
zmAb3cA$I0FOhq4A%nNDV(a^-CJD2(4!;aQg1~xVakaPr&*IykPOPALJF<rh2_sW%z
zJkEK?!=sem$F^0I3eWyjfo5rm0gmLMrTsoU%)`jY$jPZXkEsQPHeS8JWn*EIEv>Cs
zxTM>|<EKCcLVS4pHW9NJ(b#vKMiY1Ch-fK>-NHcwB@j8Ujm6=SP*4C(`g?z?bChb1
z5=>vgA&80NJySM|sF#;lpb1myc9>b2<R~>;VAkSosreqlewD&ZS5xE=p)XVsn$}%-
zO9damHMiiejg4lfXm$59B@xiou3OvA<5i9pATIg%__7S(+SQS;@`41QVJK-T+D@h*
zcT~NO?@9S^6qo?$M!uv6aA-vf{_V4S>l;+IQuKJEJDk;!NI|{J4{3pFuwYoHxnb7A
z*ATA##^|*S(%a?+Ma9cmfLE^JfPRuY!A9ro;h@<<nKxOv$-Z~`(TC3%ss$l`NE#?0
z1|+HNK<kvfU^lNLjPQL7)eA~d#(XK_<3kih0)S{tcUi~AwvAi)BMIO``fK5BeYO^0
zEOLE)3Aw|IPMQ>}Ps1{Lfi^P&D4m+w<>h>3K&bpCBK%}uWuPDz;T{3dX2v($3zGl%
zWt(r8Ie?jATk@ykPzA`pTP^%#6OZdR*v6X(gO!Ocv~HA4BaL^~O{9kXOX2#hbp3us
z{syVPH5x$2G^#2?AZpnEN0-UJ(JCm?<s9w)aiP^qLF7EZnd5M@Yc-2`!+klo9DsBH
z%pS9{!iHmFpV+=E>+9_;%yHhDlQF_hnPO74Uib^Ie{kjW&}m?~v0d3g#NT}tXk2gk
zFf5#$cEJLJt_%bOfCGTf*HutRVl;#>jrp&5wf}sG&$}+DqM`y=h~na{&J;1&r_!72
zQ#T7Fv;yOhKM7Uazmq6oEjPE6R%!5d6YEwJTY%*u04|OnKcsDJ)&Q{#g`VsSTqPkQ
z0xl6#Ank8H23cTJ)cv#PTP{G8h>MFG7))<WH!%r}t7yjtxi&h+^gP1t=+rl{AkvJL
zrMUvHp<&=$FyD~Y^jOt^1IQ?{LacVQw|3U2X+zh~5xfXQo|W#5;Oc6g52r>(M&S=+
zHa9k~uU(53@aC_^%E-u2LMv;v$gh1?tyS^DcP^NM4}i*?3KP>Y{j6)B4la-o9bY@}
zW=GLoa55PgG^JZ0c}?skef|2?>*P@3xqyIxdGBm%6axbTA1`mF&$&NDsSw~{^<v}8
zmoCXa%HI9<feb#hzrU|j>!#pZ1?2k5u-phGlE2vF=kj$C{D4B9n9$?426C>fY>=r@
z&QMBa7$a!!{YZ2M0I(4lr{HrF*XS1sW7p(sFjuO<*;Li)(Fj@%12~XIJiik#I<zk>
z0i&bCXg>Tm4$M(R=mcOI8X0Xknd?Y*?o2u`i)(0*S|xj8;ZsOk8PAHw$;fUcE)|C>
zuieRB2O8Yu4k007MMVW6F>!!X)TJhU5mmXZ8n*GuutYBfgNoO$FClM)?lB-4^1rzi
zWj>XV4>pz~u60@>?TL~tngDy?146p@7{dNxQx*yQETh-bW#crUP^hM+l*PCAw}h#@
zWMpK_%ocsnFn~KqgaL3Zb4yDa%E}^JfJaJk-vW)E_*QEq6WF_vQ78^8<)`S!MmSJe
zXTt1b0I{AMJqxBl;*(NPw5<sPp^3-)w5G>_HT_MY0o@YKqeqW!(8#7LC6Zky(k#$J
z%T0B^OEg^V%!2Gr52uma+<b40rZ8<5ukqyHfhMhnnX5aS>SMx7Aj>jk#iV-6^srj8
zH0Ip#Ze-VFXmWD>SvjAlQ>&q>D(38V7;131z35^4^(_HB)fgJXG>MA>jM8z-4U1YK
zz@xBK)$<)lXYvRmu)-g1kSoux>@Rk(gPM9ZaA*b?;W8Q)SD3kpGhBDr+NHMQ7_xPX
zAK4|}2rU=eYRM^#XUvwr-jgyIE}9?bg}Xu<cG(1JhL;M7!@uYW&AmiLt*x1HM}Q)!
zYHdo<O?SIMv?a9UBT%4#;W`XhcADoFch^x+Qf+O1UW~P!ck5d2`=B75Qgb4Pdb2To
zS7k-jyeFoTk~j$b-x8K$FF4|W;fe)}7cn3_U%q^43e=U?Po01Y3yzOHxpODu9di#?
zS1x1+Y=-*XT#HJnn0;E$cJv49(W=oZM=3>i30Y6Dbnw(E=tO=+W~rSe$?h}`m&3we
zOkHw99-T;}%yreY!Rup?I_Q>uKwj|Msh8^<l)Nq>>|J4P>8|o8#nTzW@t(VbB)T4<
z#z6a}8}tSW0(Z3qg_P{pQmKp1F)~dZk@*NGhUVVVhvOE8@9ss$emLCPLt*{0UD>|5
z<?HZUe}e8c#92J%Pv8id#q9kUA093o2&fjz4M29WeJwr!AV=;KhZP7oFc5HmlnbOx
zS~Tayu36v<gF`Z017{T^v?~u2kNG3w<0%LTCfC;10133ZDzm&cQkjyO&}fS=RxYyW
z&ja|y(m9}~#K6!nb#A;r=jvP1_Mk6h%?t378on5Y#U>vR865ehVW;d0?cW(D^IuY{
z2H$|DsS!diWHo)sm&;Tc-a=}(#>C^=9%S%m`k9D1{Tz{yczbVXtkym2zWaNoA?+<S
zyBHe%X4ehpyehA_Z{N-0-`1eTsOl)ZtD&(_p~YUB#F}DVvY$c44!p+C1Znzr=+G2M
z$|OA3uJfq0%UwFnaCs9N8~Y=n;OB68zF08D)*R9uSiI8GamGEikRc&|l|g?3<fM#!
zhVv4j#^NI!p2!-z-6ZMGS2uQFm;!Zdh0H1w&C=7!sjLPGT3^{BEHCqtqYE|<Mi$eI
zT7vj9IxmBq$|9>(1$gRfp?+Uvt1eY1yTbUWC{40Uqo!qU>e7AQ`*g&jP&yqJ<d8Lo
zz;o!CY;0$ZY1n0w*F@7F2pu_el46e&lZ%yZzm-=8ye^4oCdg6q3EuI!gsW}uWIMug
zGWb~zc%lktv<TVcUULdM%&uim{fvjJCuLGNMu7~KOsc^n|NU=d2MPt?Jv}`<u3x_n
ztN~^lKwJ$ZVHqp6h&puQ0gVQ*(18qeA<n&+{NiWHH+l_t1A!4uJ=J9~Ey~mjWHS%3
zAoH!QE%)gUoC~K88&i$nzl$G`oBm?+Hc@bM^{F$vSI678S5!_>PQ-?~mc-0VT6+3`
zTocOHaDhQ`0WS|r%N5Z0r>5^$o3vA8E#`BZrUQ~8Dd~A*0MX~qpKEwi)CGH7hS*#;
z4b5q)CpUs~%=6A;%6oqji-m>dlmPF*;(pbGrRwShk)HetV~bglyArjT>aeMuF8Bw4
z4%6p$LM=947U*w2Gk4-}jZ1!I9v^q;2DHea#7Gx6w-&^EX?y3+!Y5LB6c&g%9#v(8
zu|ZD{%@?veRhyfmM11O9+49Q4RZ>zf`(>41`C<6|8wJpYm04U|Y*vGJ?OLj)xT)y^
z@DVIHCD)C1J>h@;<&tDMu*IR+M|`G_O_biT)-Ef{W=<;uLOj+31->@0;S1=wSSG>=
z1HE3$n&65idL}NIT072npcCv~RXJ%w{1O`hXAQcJ8#itoxS8KPsvQIHI5i#dAeztJ
zNnZXh*vfFZjfV$s?vM8NjFj$oE^H^%)rV2J$>=d3qGC?Jex#%Z0*L33qJ7%zYNu8u
zNLv{RUNP*?6paXx7Rj#8{k#M_40(eZTyY_(;9ydF*PiQ@fmyDegxf4v7^rMgGmCA1
zEnir%Nqbj|KZTokog!-WW;ANt;3qL_S_&sI9~6`l&d=p(MjZ5f`A``>4P<m<+%O}s
zesO>oU`6o)fHtS<t|@&*+KAT@)lv%lSA4f1^+I<G?iG}+#5s>Wn)7~&*+IY141wSQ
z^n4C2>pP^$FMP%OfYb_)eKX{&$Z-Wy-#Nje@V8^h4vJN@2E0&1mw$Pdez}&7&RxsD
z@Z^QT>6arY!uOYVImc5#@IxLxB+kbZOVJ1KmnUx55Ae?r$i%{L;&Fvi4FGEGeN%g@
zcQU64kqg6+m`QuRhAr)$_(<5lnYX}4pKybx-NDKPpPEIKn>Ded->())bvj8~?aF=)
zE*|&N4H(BFetAbJZVgiPvaKyx)zYL@h^D)X4YK7*0y@8g?%#Y{OOf$%ogx;dOFkv^
zNy`|589u-4Y25b;ey__P9}u{GVC>x!YuNvsSA-&Z*Sq}ESvE#IP=OrKD*|8rHgBIn
zcH%zmjMwZ=&P~v$8;^2sB0|*BAdJ3$c)CgxC@Q$cQe7Rt(tuw9TGn>(Zo%Uf-{sQ<
z63aurbJyF%0!TGnpHAge!5hHRfh9w|72@zG^Ly^B1E$0M0I<G)8^Tem`OlVb)cU{2
z`_(f1(}hsq0O<qm80uA6SdTr*peYDgS4V+j01QDoIyyj<i@9t)UYDze58k53@&*qM
zYGBHGiPwqSEN0HeNczZxJcY}IFR&raYG^aXy9D}{Hj<*QHxz}$u=pe(INH(i7b)rC
zcdFoPV6w9kX}%g?1@JR0$8rUf4WMU!`0$|x7r=j8@FW=KTY@+fY8N|OiqusAR+P!v
zS;xa|GvMd7sXKU+k8oJ*0{kjyI8Ye=GZy8#15{g^&!P_wTmhg_k7hL)tFRR|msJJs
zAHcqDt*_tYb$K{j1N63-j2#^rm3$o}gUQtNwENDIs1Yr}Im)g97(JHD{^hGzW>EzN
z1%QcCIRI$<XnS$`=TBLrxU_UC29QaV$R5bVI2>#mWmV#WM*h*P&5(%Iw3*zwPw5vD
z2OUYGbh|1bEG`goSB<PeCfeqRx|SBN(~8;-HMBp`by36w4YHbs#GvyrKppRC%)URQ
z)4BG9_I@!@QNE*<;)sBjmX<fTWZ$}>z|66#2!)CsnEm+p=qfQ|NX(Wxs0tt%f-VB+
zsY2E3J2Ao7bgP}|weEXeyuD7FGZJO-*M|X$p=0j;O_$O~b34)#0nbX>&IL5)MamCn
z;sURHcuX+6QA-3+SzA1SeCjd_Q&o$Lu_9&{d=B*AYUi~&Ks5vYjh3$%mXA2)PIKkR
z@4hLjm!`e2lIaR+JCJ6N!<PE%gYIFsp+klgK4B?BnqC6u112uKv9S@DPzk@AdI8rM
zfPn_@LeMGG(tyH*lAK{_Ip?NrlRExij%`_0z~@+=e13(MrBSEDS`Zl#QBhU(;QoDO
z6_rgGFl;FE1D-@>T^A<r0?VI4S%D`f@3NBs@0G#w1-_MFP3ExR5cF+(o7bGHS#BCX
zbri@_C(a5&E-5J~!Rs)qs3iN*W_=4YosAAax%hCqCDH-6PIZVNkNGf&#22VYO!RdG
zm>dXaYrvRe8gHiwY|8z)nqphvs6<4X1Inlngnwint>m8yYG~fTJy<_B{62_OZtfvK
z>;MNMD{FXP!Qp}JEl27Sg9~>zyN^>wt^*GI=J+1irik^_IqqI7;~iSk!~*l)Y!nzo
zfZ>Riw}d)?!Is)7Fl1Tect)W{6crKE#H<j=Ua-l19!gdqlo~E7MIVQUPs~Xrth(Ag
z*chz&is}K7k7bK!;NVCwYQrKUyQFPxH?)be9#iAPfv0M7Ck8}N<hhHRmK`9gV<#O2
zF89Y^D(}IrHj1`1Xj0^TF7t1msy2Z73tVwRQPT}CfSqR#jA#_Y4nGvmVCQ6FHl|r@
zFhc6xtZo7uCc#BVQuY~e4_aDUv^TY_%PjhtB}IYw5f;PW#cefIGBh*<9CZL1MJAh`
z>~BmP7#QShRo-Lww9`Xrtn^A?oA_zm=6*yc1P#Fx6Mc4b^Yb%CYV;ceKvP_XvcVJH
zP=6fm{RXD$HTmVT25?<x^lUR60U+i2ESB5R9JG`dhH_o61EaD)<4>Zv6JF=oD1W&>
ze~TR;yYvQEH#g8kN91<eyypctc!Lu-7CafB+`IP@M%bHJ=MV!H8>mh??{BKnK@_-^
z;i;C~He<Y5bi4}n`rciqAWFD+c#89#fWQ%R4mUyo13g~nIXyj1ZL61d05prDas7Pt
z;<=0laYew%`*BcGQsUzW3%$bJ82_%Ss=9TEn*Ff1CxV5Sk9$=Ep+fl%0F{p(DZ~>D
zmS2+Zcpn%z?Jbr+Xsm!y0miZTPPV%@*-hHx(}a1qJA^l3+#eJ!sdSRCnD*VtVvd_r
zN2TKul7DhY3Ftk3?3h>D1xTE}yhauo@Wy&ZP>RUb*k(>#8%~?%ya@JPfa=<U)OU4t
zUD@jd8WzxF3XaM0-)D_tEc2|@C@FMCdZ5a~#9M$edMOk0cpXpc^L3=10;TPO#J2*>
zp&HcSuMGSgtu6;-3IcHkS1%^?uCx(crBFkwxBSx`b<99NK-J6Qe&QacbSZa)b(>T3
zrFZXtnWGN7sh}B2mWM~L&tCnPH%hf9n5%cT2`lHE{>#D*x3j#w@E#mwlym9?mJOuf
z)rF%Ub3YM>$-^Hhv2^E?7Wq3}z5tIE_AieWAkLttXiLD1EtZamUn1I>^*oDT;lB2d
zCMoTEfIhqqeg%FU2JRNv3Gl!8pxHIF_WZoADixaO8Nm+{@=(7|>@N1cD7PKYfBTJo
zlX|EM%|H)<z+e9w+4{Ho{l6V7yD%>OaiMd^mKp{M1zwvRC^V3jl?Bc{73%`hoC6@q
z{yp~9&8QbBJp6V+1j5aL0uoI?Yk7>L366s*cyGIF3vSu->YjnAcO@<h#1^K`<lZ6>
zDq-*hFZ4ho3vy^M@8<XQ$p+Xkyzg^#R%6eAF;l#FpuctD8>bBWufXRxOYhV6x9T3&
zCK&U7QP9~`{;8n1J^QnuuLGrmo`JzEzR#Uqz1EFAKlWX4@EU0PU_hHtue77qG;=+H
zdw?_t9=~_B2OcX0>hk+GlB+m4AO+!Ey=un)=uv3U6zI`$KeCy10cws~eLp-yursNb
z-Bbq$$qF-Qk_5`+)vGBf*KR$2-R1_MkHeE}D^LozvkSwPvU|h~ORYvK3gr^`fByUl
zY&6Frd4JP%^b$=i&CQ`2RX%Uh{?jK0*8e66i5P3jvkx(VWYnc3BHCFgZdcr<V_*Pd
zAvfg=07X?I1%(p%rGoJ;MzsP#^B|SN!a`7afK>eHkpbrFmwpTWnG^@{PrINjY$*?e
zIhDafm0meos1hv@(ZDnqE<V1=Dj~E@yVk7~$fb<Yq5ZnvaZAs)epmgDcS;xl<j`QF
z=gcK(!hOj_ug7NH9-ak8>y*AOb*1ZIkN>tsF=T;8@vWsTXj_%xWo0ULur~df@1fgN
zIDe0I=?FG-EiUQVp}aKDXh_8`Jk?HXV=`NS`B?4CB@?|BgYY<bJPZ4~>KFb;)yEV5
z-&OtG+=NnA7M9>#ISGm9U{kexr}lqWbizvlC)-L!*b+m(q)Q?-QU5v%?_5+xk8YuB
zJ3O~nv)s}(BoR`E8SAC-((9(4&vS);`qbLT8mT2{a2+_5&Jpzu+*Gh;z)0;52pr)p
zLK*PKF{-RbxntU!o0I-h0<&EKg}RhVq$z5`tX@da@S8;e^$}?)GV6%WAR#9g92B&>
zyBqZW{f{3%QrUBJbvxU@6kNeh42)rAq%!>FD8M7AoomvU&^8}>bno7m@$rNp*=i*}
z2hSc~=vfChsO-tCMw+)e)foWmVfHgm$FO?q#-v7#&$s(aOOW$L&fp3u5-7KGc3$iJ
zfkb{d$*xUJ{VK8hnw^R1gHg)4m?+FI%X&@W0O*DXZZZJROGPpQZaej$uWx+HK-P5@
zhwvT>2p2LkGygo8PcUH^3~xl4XV=_^%55lf<jKJ*689!n5GJ$2Zp4-9D=337xbRQY
zAEqJNF0(yA=HcCO6x3_P%0z>}Q@KKZUKpkIkrzhkl`p69X8&Q7o>4G6-roQbt(vD5
z8skNU0Gx)zUvI2Ay(6~)rzSvNsxBmiwyLSCD_7}yL2y`l<}76#EGz)h<>s#XFd$3H
zbd)Q<fO*1{<YZnxKETVj^r0Af^MOix8YEB*I#pDXxC<m-3J03Y>!J>HH<v|YvN1G(
z%DnFzG0Jy6|K%Rb(X|{uk`5oXYHpt%G*rg4^i{;8CTf&yNe5h4c+3}Kzni->>%deW
z4@7hWgOr|ankS&A$HT$d+}#DN7@!hr?q3mRl=^Q^^bE=qE#NYbaIm&Ii5WM(ldUzm
zGFYs9n&eLrmhW-2S`I+9tQbB%zMQnQA(1(z3KHCGh;r1^E$LZ@HjP5sY)LN><j{b=
zqa*t`-?=o{|K;kH2|-kG;I0H41qKO}Dv1*@dLxy!K#P3>qo2iuw4%y|!&6krE^q!<
z$%d>XU&v8-z*2&e<Ki&S<v7T~YcSe90<2tea&q3@XF!q2It#d+I1T&B6|+JbJ;S@*
z8j^uHNkB~fX`%wM(gGW8ak|s3&>1$iK~E9MC|!Dr3ZRam2Ak`W(a-(ANvxC6Fqte0
zs)KWF?t)(MvS@mpr6jBA#xHS}?o1Z``UeF4Jfgw8GIw~5K)#&Q>7$HvC-Q^x^>NE(
zzDHD+=BMtT)?X7j{H}xxY-$>#UDFZ)*^6E&!C#p|z26Z1hx*obSKzdmuza$anc%<8
zQm3NzYK>G-$W@fL6XIhv>0O1+aQ<(IPtxz#!9Sc=|G)I#ao-9Jnqp&Pt;cGzMmp{e
z%`U7eV)xgTzC%4GxRFBfnclDM?Q4q}3H;7KV~awNwCL(hGpwObTyE9MUrNi$`XWuv
znU?yF8G?C0djdl26(+7?1ek18g`2Tlfgfr>$!eu@>Dw<JG>PtB8}Jl4gE^r(ufGSR
z5uQg*03Cy&Bw#cGf*z3a+7%fYB0(=mOgy)^$YuCF1o(EW28+_X&rZQ8RD>redq{KO
z^^gCLDQN{TA7vC9lduM)keJ@c$Vf1xEilC9vaXjcQ&L^EVHp}Dx%JD?ED1ydl{~Fx
zobSN!;t6~mfXQ?)HTM93#UeOQ3ESfOs@K`c9s+ov!Y;2$fHr&@43Br;UEtQO^H8rk
zy2L)5=n_rXuT(Tqp$J9;|7AKC(blGT2jIOw=)%|6U(|Vl!UYs2)aVgtl^+qNg2qi!
zN($@R%>vWTdpau@(?#am+T@qBIyyQQyEC>L38<bGU^IUHDjoYI)I4QE6v_lDv8_Yh
z&GXSG_90Ke?gBl^V)ZAX+EsukjDa*>66VC^x_O`Bj@bO;f0vI2hEkT5pUMo?x;ul8
zhSO$D`V*sBI~cGABldEv+po~b^?}o@Ym_E)5VNs0wc<|XZPg{8`akCN6jV(Jn(`&U
zY+2epNiGk*Gu~wYTg)DTipcbUnp%N$y77D}N!TB+Q{UG1k*<TieM<DdhM_N7>$hup
z;;}Vlz#LTe+!+TBT0^jj05t(WnPoW08C)<>OJMnytDTPY2d%oNfcy@F!5US{1}OYa
zj`rMLT*QlR5S9vUJf>rQ>(?X-;NZnyIY`dSd;27L2eifi8h$>I(0(uWtnpqNcgCEW
zG^mqcbY`fdBeAl&s!V0IEhrx7CFJC*tE=R<ZUJveGtLY6Q!noKnH-(q+ZQ`in%2Db
zcn;i7cEx2b-@BMY@}hqR1I?X3r$i4XlA~1@NgRBBZf{beW*QZM_;wq)b1~(-NdsRB
z$xvfFcN4qL78Muw0ypxFRS*nx8bHVTOblQ#vjBHiPL5`gp@g2^9o>ck|C9jT(DK~{
zZdixk(rEQwPJSKz`2Bao4HSN;AtRiQDKKO-kmMRJVkKXqZp+8jX?yE$7VhrS5;3OA
z<A2Zwmh_YBCAa=Cx)6HrtqfAJdw<^q6>oDhrqt}GEcMCpF>soE0OMO)H7<`HKMsSj
z07o(Uzd2usT4dsRxwyGwL<Jk0<kWqMgY$Ho_kdpp{NaT<;FkgP22<HQ5E4rIfn~+4
z?m|i+*BHBx<e(jbSHv?>L;(So$P-LxKp0W&#?zkO-p|S<@lR2mASwZ%qtCU)wZ>mw
zdd=IY5B|^qC|a*xzO1RO1zZ3bC1rbyJanah1dwi>Su!O@egCVSD~*OTOT#55q$3Ei
z1VMMiq{SB9%96wy)fw87v4v2U*!RR<3`GbLX<MV4vLu?SpsJKDmWm~dtx$+#Nd!sk
zCAKOQO2yodoJ{|iGyi6O%<=0x=R5a%zx&?z-gEEs-uHP3b_d)SF#&<f(50K!+B!Og
zBBiCDFvnHV!VXAeulxxfp6=dWzn23W@^YX??T@|9x)wI5SF!W$1NAI`;1^bQ{s81k
z+JH43oijZ$n6U^QEA~;;e_|<@gR&%$oc!)zH029BP>Pgv5}FS*T4-UW-w_wc(7`kf
zU7>{r!2TrFK@JNctHTVw;;r~`a^tuJ3?g`M!QfxCHb$GuWk}-LU}FO~F6OGP6I=lb
zIxI%|JCeA_K6kn`^`s3i4|Ifpo%snMO&)1KqGIWFe^35n_yjjbt2YxOm}u-Pg6trh
zTsw65uB?3&jZOVcT7&p**c5!-4N5jDw7&e(Gjs!#LU)MbjhPbp(^ph`gEBz|{G2E3
zG{;xfkL$r38IpUW?D?K^BhEF^J{7pSVDt;Dmz6mj_7DPq2NYfsQ7N)mT+hdoGOu33
z3DW4y+*oKkIM6Dg(PS_4SEqSb7{2-IMJ|whXG0y;O@_$7B%%Ylghm!FjDEAYVA=O~
z1p_S0AWGmO7G%TkI)nWY!kRUDZI9o@O*t4Y(0|S~*NRT+@pgx{bC{F;ZmbU=U0bH6
zcj9NE<UP2bc=Yl5@}$dWr$GRbU+V7%IMEs6ET4efM}q<WGw1w4!2SOcUm5fT2Jx2n
zpEcwoiv*t`x15f#uuD6b5?Yqu@BUT}zo~;E)bLdar{Ffl|26|;4uh&f9BTus5I5?g
z4>cPPH5(5#8xJ)b4>cSAA2l2ITJl-EgtC+=4Q(|Eiuu^v1hn8$QNyHTnj3~)@mfz*
z6-eAy^(f94Ul$n25ft;3iW5rteg7b2_naQ3&HlunS;FtHCduiX5mvSMs}^bd+i%?X
zwATG_$dtLf$%Ut6jmej&mM!hoh!ri?bM|iY9KZ!c22sImy;-0siad$35X6{JqqwaD
zwmA9R#BJPq2>5^ae|XUm_9@)feZHsU81+{5eELvp?u;x)j_P0L>MK^_&v}J!0f7cY
zMruNWR&8wsM#-u6J`ZfexOXr&B3WtN%-x#oyO~B~BXt8-?yxMqCqve5k$cG0h}HLw
z#4d(b2l)Y3+=IimclugFOL}^I-cD1P8>)!^{u73~nkG}yrs*1=h9w$}VaUx<qtZ1$
zv00o+ujWER0)#}BN1qZX+i{-`x^=+{*)+hy-6gKNy>>!VXLgF6hRV>|awKJ!@!CZz
zRz>}EgRpS7u_)>0tD`Xy*jY_Y6l$R8Jil}_z_H851SHGYWom4AJ+TaDhR#6ker5-}
z#hEYs8Z;+Ta4Dp7Oi<CRJEUMl*?#MXzO{0N$)eKs9J%t)h9cqHH&&Chzb&F-o@+9B
zs~0*s62;H#vVNW+B3aaC)cSlRwQbbRvF0{&S(!LjWxL)P>eLj?W>r;v>>0V))eVFZ
zFxwNbfLAkYBNQs>*`0Lmy4tAeXCh;{jSsEdhh?r!WT7X?VTStF*V9%aIm!|CuqPhg
z1zK8)uNUoGO1=Fj$hX=u68X6ar8<o_tBUb;%=#KiN=m9*V=w0O?Uu*RW`<q*V#i)D
zOjy#mb9|OmM(8#6bE>x)?uEPLrlz%F0;Aa_5n=I*x`lPVE!`xANsKuarE7px=L}qy
zn2nLa@WEBqe7qJ;!Qslkq!cVIUakzBvDmawLeju3bCj6t%=61(%~io(4Nda-ZSDgy
zW3g67f(?;OANm8My{r!*tWBEyjmEsBJG0?|bb2gjKv&#S0NK-z5GF<W{Lt6weP&e9
zAa>5=Yjl9vTk_D51ac2G)t-v7nCx~j$v0vym8VzZ*IO0s9MXb<CP1jn&znWpyY~*>
zyO$~~+-uho9fD2g%BwEnlfv6Qt5*eOu&EWbcN68xsS0kIB(A*qI2l@_7o}lFboM>)
zN_Na-)>5ogJ%E^*G#pJ?UCk*gqii#hUD*<9`0Q;sBj`uq&6LgwytD8fjz{l&;eA+a
z<4m_`<Q_US8O+@3tfAk9FbIAwYgp&dL(E)%e_ejQiHuCrz(6&Duz^4@axu&ZX*Dt!
z+-flocmXgM2hPcX@Tplj&c()%K1$vt4^urv+YdR`OD(CN9U-efQoXMv_ZD%3)Bm)Q
z2SZiZ1Wql=8tVTay-VzC-LdP&(T^|4+42LobEvak7jnJx5c1`ZMS-)0u~r@eqA+hS
z{{k#n1r|cp;t`d$s^P9q`MXnnlW3`$MO^mN<@UbjH|Tms+*P{yJx9rWu<A_9Ft}3B
zvPz*Ye1e0o$WbXVoBWI}*R$#KG}?~QDce-M(QvjYZd{%Vb~ISc?9`Wkx>Uz^YmoSO
zdAr8$0|1Y@*F3CeeReV3s_Sigd;2@6wa|X+9>n+Mk3nmy1_^6k8XL=j@|$KG)bUjb
z?weNA)?Ri{fqnmogv#x=bWzf`<(0(92DisrP3U%(pIteZ(KU^dbd{}=vdzLT0WiBP
z%o%g!I0pBP34Hc!=1_m7t-i+@o0*L?=1KaC;=zT?ua;F*KKxtD5IXCR*#~K5DiC<l
pg@dUAgFR{A2PZ?Pp~{;_Zym)<=q;H$JqQRK7$Qs!i26=<{|T?RocjO(

diff --git a/example/k3d/assets/metrics_flow.uml b/example/k3d/assets/metrics_flow.uml
deleted file mode 100644
index d62485821163..000000000000
--- a/example/k3d/assets/metrics_flow.uml
+++ /dev/null
@@ -1,10 +0,0 @@
-@startuml
-Crow -> Crow: Crow Generates Metrics
-Agent -> Crow: Agent scrapes /metrics endpoint
-Agent -> Prometheus: Agent sends results to prometheus
-Crow -> Prometheus: Crow checks that metrics were written to prometheus
-Crow -> Crow: Crow updates success/failure metrics and serves those via /validate
-Agent -> Crow: Agent scrapes /validate
-Agent -> Prometheus: Agent sends validate metrics
-Prometheus -> Prometheus: Prometheus checks alerts
-@enduml
\ No newline at end of file
diff --git a/example/k3d/assets/pending_alert.png b/example/k3d/assets/pending_alert.png
deleted file mode 100644
index a8cd3fc3b5ae6011111a92d86e64c084fedbec66..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 86157
zcmcG$bx>SQ_b$58K=5F}Ay{yS;1=B7-95NlumHg=xH}B)8r%kVcXxL#-}|2L{B`Sh
z&#haxYVVrqp5EQ7cdwT9JZnv;ysQ|~N8FD903b<-e^&$msMhy88V>S3CqeFz?)?MG
zQAk1=4i0W<LvH;&iQ^=q?xbXA>f~zRU;>!g+S!=UIT|^bnAkd++c}*<b?^ZIF(C0>
zP}wc*c*V>OV`d5V+|0B-&)VZG{aTk8o-Er{ULFG#f%wbUuZF!HS-;?Zeas<NR8E=X
z4qW{tL>v?-@bSPqZbgQD!8$$pP8gCbJC6>0_n_kiSHog9nvrgN%IUd_h=zsv0gfaP
zRR}ISgf!Cy=Kafi%462RT=bvpBB;+PX#eCL0>P&LDMu2><(G}~?<2_i|2M_<EYyI1
ze&&S-*%D$UCPF`?-6SVsVDdy7!pB<2vPtyh$bzE&tz*AqYzEvtIfU!yy@+{$Oc+&h
z!)&3MTT$@=NFM=@E#$-g+c+$OloWvF=eCIHt{P1yf*P37u4^{uTUICdkC<bSKgs-w
z8CljuP@zTa)q@YVAOE-9oo_AU(u=Lv{Y@-;?O~g|Cn?1L^mk7r$qsrN@A70YXrlZR
z<uEg@yN<KZ?hfhOYs*{nuUXTZTL0PzcQ#o1<5v0Eg;Upmd#`!4dW=){ZR>vHck}KN
z1H9zi^aKa<VZPkc?OB`Cs98UCX7LY6&Ff^It(oedEB{Lj`8y{DR+gO77T+c1@e-wE
z)cf{_;X|sbGucqChUZvqsk$jxP)i{<jEP(e?!R3MuZ}eYDqWo>ZL63yj8sH|YTI>-
zl>q^H^Tx=?$oh|WH@Cl!ux$(skO4Nfx;=Ud<CUQa)s3t+_mqXcGMzUHx%&b;fg-%U
zNu)*V<I8|69pte$;-<4bqKF@Ar<re;49U1ahD=Wn2PI<oxfA15P{Cr?Zz<2WWruZB
zUMQe5LaWi&U3*Ba!WvuJ+f}hFsT?F4?`zUul3Bl}72&a$J_mcx4QDPPc*$Stv*@7X
zVU{A;HSV~tRS^}6;8OJ|TGC!aRq=T(^_BvG4fq)|d`BC$3(@%}fwG@*=B@Q@QEmnR
z5TUq6157*kE!3j}NCv2@M{Qo+S2iGf(;ITPCVe-jleW5et$#NiHis<@Qo6oYk!IIE
zINP38Akz})*4a;9+XT6CRWxl75j@(fgM$z3o>fKwc`Oq2LK*ytrK!KlQHmVOE3*7;
zPZi+8@D#%S<zIO!(^A6TH{^4-M6z+qD-hXdEZZ}T56R`&A2VYJT|hB44HXTg<w4nm
zQF#f~&4-iEzmGUo9O&3T9$;|WM-$(y<u>5fDNy$hP<@^6@9mqG5BXxQVx%KuFY6&0
zDV`rxok=}ezg8M>j1c*jN@nfsgi0Zp+xLMj?e%FnHxg&E;EX1K){bB?Nw@H(JNeW6
zBeYu!xBBO!OL0wIJ+0)-gcyx4Gd!RdmxsB)+VB+Cp8ECqjGmI&I%1tiIec>`qci^_
z!$d|Df~%iV_uKX1y<-CvghFu6F`~J}WkmpBrNxabW;J&Gm3p9}q|E#^Iq$398(>3j
zihyvnz*6w&;kl}{eS(9Hp6*PuH+Pe2X=zzkjZMe5{C#3P%h11~`vV|f$|kU{iQ>7(
zt7h<=7<jm>3F}u&czMz+XXq?7cCyk+*O5_uj&nIVKjsVX^5^aKu$BT)Ezj1Nv_1aG
zd81bE#aSA*#qO|LxV8G0vKMP+kx^rFk*3GS&Q!za>3EwHoEFNjs{jBba2Zv%A!^4~
zApGU#T~j)n?Zv$ydlogZMg}*}1B;mF#mqI@xY0EJ5!RitofZdUlOWc82%sp!2%GLI
zFc2LNJzg~9MGu#0cR0VKnyMqe6!2TKn!K}GyRnqyuezGE!IaeLA2(o-(OK?4E3_aY
zqCOeXh~8tl>Oa$KpyqC{I|6OOGFBpg{^l{%m8tE1=H;babTjp}e-x}zs5@zXd}`^z
zD>B`E2|tyE{p3i0(o(Pz_Nn<cM%c(3(U_c*gP~9YlXk9id3B20Fg~|8nKbF6@!00~
zqri5px0nf4=LIVG;yPxwbHp<37vbFCKhYskE0+5HTg>a^W0T(fSMdb#S8gfS9U)d|
zj85Xw2?bnxvvp3PKX>pJnmu7qaCiQ=T$*b}JXRgYsi>|>x8|VnhJPRyg5$N2fX9}R
z220C;jhS&|tbnYtyzhE?dbC*Y>nq>Hi-+R<N$awv!OhB>hx^mv5rT)N5dc(HGU`<s
zXSc7m9VF`c*re3NZ3WsJbqNQk(Q4dZ{H&;pO|8RDX`+W%eS}Welb3|5tPO@8N4m1R
zH(U(6x&fP!wY4jm^`y+E-(PlDjB?yzrt_tc>2}yJ(wzNX<ghZMf<lym>K~+j>qe<J
zqlU=((Y;$lG8`f*Qs~2GFhx#<ATR&;RP}cQy*t;_9%O9px5a)CkhE-h+rj^mR7$54
zej&!PYp26*eOvm0{y9a(`|5HgdQN>d>rk|-i3|yd_5c71G(Hs~u%>;TKMb(>J$tpD
z++LxI@Mx-rH4pp?rSO4fjMnGq$gvJgwKsp!v$*#9=XrK|U`mgY)p@yq@CBAD4#t=6
z!BE)e3NF$6i2<7~1<m~ED{-JAU1o+mvTbDAP<)SO#l|Tp(ITfLgPbL!IGIGDBENYh
ze`~U^A}WjhVc-C<s=!1;!oWrFq%wv?FvC=&xNb~0gX}tOnV<<XX_RcQ)(eURR9vRu
z@Zm{A9j+P=7tRO){i7r|{r&~(fiJQN&L?!^nRxGKbq9B;fF#V7cAaIj`}5A#_8_sz
z{3w$KT!{m^K_ja7oi>BJufX(EmG~E|3pXz-JS_k<+_IE<I92aZVsP^DaW-^ee0*Sh
zpeUrS?Whe$NsDsVRHT=D*jE!B8=cp)Z~A@C(`#0@?r~3wno~UV-SP#j{ox)A!bo5C
zEeQ_V6=VG*@A_bD_>vwya1#;18kF+#gns7TQbNz=&T}Ng-?7>z<C?&(2gR5(jBU4a
z(4wTK7OI{oDJ9+%$Cg|YW|?x%!a)w<=MaUrEu?zdp*X_9)bixkyQBt^2u49casE<c
z%l|DL&1p1-fC`CDq`JCw*`c5#w+RPAK)wGOWqWXxV%b>clz@0fts+s@gEPmKK~|`F
z*I%T*%hDW4Dy6wu%i)qHbxzgv?dG9%wALi);M=tW@z5v9lJ8tO0t~K4(<Naaz<NR-
z@u9kfJQn^O*t15|1#y6Mn^a1nf%o+`P_R$KEWF$^L}Siu=Md&TId=WLON%c-!V|@;
zn9i%~ix)mEqFbIQeKD=Llq^lW3+LJ=NHZczU7fx<yiN9q{%Mo`x71;Cb1cBm0f(`Q
zpDeS?G2()Qp1<Zwo62IArnVt7E<YPNL}3;od@>HSGcy4M`kz(8``=*G53Y3al)-4L
zlF*B{rMb0$cG7F|I;m(WM!Ng_6lc|pb!5d$kF!|r{lDQOLm*C=e!4Gcb^LG%_&MQT
zd-$q-BsSe#+Gy&3m7s-!N*X`cSEE7ar7yKCqiRofB5x6u`2!n8i0x1z5%sZ67xzHj
z$#^XR_gzj_1Yi3=EsN(-W0G#B157N!bwh(PVGE3#uAH(wtA<{iCpF=K03qR@i!&_b
zY`o-jZFqK--LQ-<NQda_hBi4;)OaNyL3-_~#1@{{al0g2Vw~}5V`ObVmq(nNq?Md)
zhkD~<gF$*w7x+B9NSF<B`H3`|462ERX`Ioy7&BET1^v@i*9Qc<2l}>I!V?Y>Dz=9S
z@v)+?0O9O!6x~%9H&~PPPxyq#wnjNn4)zP+(!n{JI!?Fu!%v2NL4m2WVN6qgLR)~5
zO#~{y<LyOFLv0x}Q^1P=772PNe=F_n!AHYAp7Kx@)!L&c`yL1z5(4|=;d$%j<#;E=
zvcqI!G+A3etZwp<Ux%Qo+saXbwO_q?*#aNQ>imP1nDs!Uw|uPScVk{_41BG9WquYp
z>s%<=oov(ldRMPNtI(h!go+^o0BaM2k!0>$9sJDg-k3O%b>uK8@ZhqN*47k@8@>E6
zm@r{TU}t+%AO=<#>y>-E9jrW?*bE?{*v5J8w;C<Q1^W_S9q@CDYBxLGXlgDd#HV6L
znLtBkpB<Y@C8blTFsF3!80c5FfD^*1pV|j@=L1m)m!;C<oF1(c6zBRH>@o#kl1VQ(
zk!Z(Rh2eOfZ4fF5q$;e6)Ra+4LpT%ri6kpji@!b%{6$mUNgAV2X02*2Ak2<=*-~~6
zVJ6q{qKR+H=Oh`X!d|<xVD%-PxMY#4$qP#2PxalHS1FDsDHr-6*21bS_bpbhaQAal
zph!QW{LG15sezvX&N_F9`^q<0>pOdxxh{U&?`!HJE7_%Wz`JgXHF{1&AoRy}&ezB}
znb-P0tlA<*=;I9y_mBvp1&|ik9(R3|P&x`nE4c2;AUnPP@x}cu*{dmxL>kKIgIhOP
zs&H(ET40SmPp@Yk?f?|{QNr}u{<V$5M24uIyX(u>`pg>Ehvx}HDlmur$IvkRE^${~
z3#E(QAIn@EcVtZHWKm;Vb?xa%QY$Ur$DJeb(X1%jVw|>ri<AC<JHg}qS+U^Ro(I-x
zryc$Tt4k88Hb$^OuXr#Yh)giapz3ly01l=nBn?ci!<17}(RN>BE7sI>^p#^AV{(xH
zBjY^OL~5dlG*_nf-CCQ!_jM~-(M_CX_7AVId#O+pvUf0IWrdUskG-s@hTBafE`}Hp
zPliTR6%NVu+fUJ4i`YRop7wXeHTBTEI{!U%=|JS`YoVhPCtWaM-ptY7)U-V-<>pns
z@{CQ0b-9n}a?1Oe5EmbN>dqp_R5i`T+-_LLjCR<3ThZX}jg^|6)M6i-YO(wZ_s0JI
z;U_?{Dd&V!yjULM-1+Pl9jd#QU!v-c&O-G3!Hal*vz!0b>9+ms?qD%3L=FecjN%!w
ze&G&H%GI(P;(fQ$+dYd(P1vZwE&cEcbA}Q1`R%gOCuXYvIT`pZ^vA>aD(Xmf+u}}E
zKxqBYwwRhv2?Xoc*R`awv0;1LTHWPxSA6j8;f^`lm{5A8)Cf4l1CgaHM4n$Uj!D@>
zB0{PRPFx#OApn7d;A+HjWoi{f1AXJXToBbrMWQ)?iwjCGXJE@}A$)~z&!GR1f~)n?
zj!G7ibILOiXTpY?0;3NBx6;=-tO4fG{^X?k{8u|auRRpPFZhUK_~pamJlv#J9socW
zg|XNv58(hNGODWCYXCO(RJ<k=fV%vsl{ATf3CJgT41*~br+=e#fyVZ`elg2s>|CFm
z5U@3>VdR!ol!Ly~G^MMllN$k_6NGvJRLcaRVhF(EwD*PluzA;<&Sv22HO`5-k+kZx
zx$=;w%;T>Rc!j<`SmM#4(&(>17Sq-71+|e|=dZxorY1A*k-$#Rag4JktSRt`)%xk)
zNQE??XSsMEq_~}KtL24cS%s&iMM2pLtg*1qBV9}^jCsjOtHK7((V_Vdn$qy@XmK50
z0&~lF=gUP=CGV4Yv>XXC6-Ypw#evtG)P}ApS#g&HJRiC{V}I#9Ro?1ATb>6G^r*!;
zHD&M!^G&-RCK0}`m{um_y$P6@tmRepRppqf9F(R&mPN#OGG<nGPzh}Xn(EU0!UFd<
zm%4M8P#i#6vi!xOj`b`Hp|z+nkEPUE)U_~8inlTw9PgM;Y-ec*ao@}ZU7N8WAQpl`
zY;`DmROO(7-VLds_b1*-N(x2AAl29bt1*I{Dk-kn;RsElc2M|mu@<VMkl;SuNdJt8
zkn_h#IK%HJr@Cyz$+^9jMVTkKz^d?&rdCFgfoN#>tglpGqxQEpij>@1WUOK-c6aeL
z3`}0q1%wbvEiL369SMrwje`M8D<al8Xqr-LYz4uW;0aUre3P97wg_jHmB&Boi8h2F
z#|F{SstQDhoqF1=aM{&lkblDL>?)4L-;$ZUP*>x?h){nJatL(nFy$fDyF$k<w(!nL
zd#7V8BOy_tLIGNo7^?(pxylp7>+;{Per3}e;)W?jCK!L#T;!TxSX^9egyHu10J}?>
z#^c)Z0zgNEv7LVm-M2E$>)(@y9^615qSuL<nlVvH85l>i|9PAfb}4D#?HzGWQo4#X
z#EX~kmmQNLvu)<kihvk#`HRsq#QVNn$4Y((Qd?^qQi3n-MYXgL6@23NwyfH>6;hp<
z8~ocn5bZ}FY?^2?KN}+c;d4T;72!0;a-VwEa3NgQJ(;roSKvlCCB|+3vPC48!qilG
z%H|@ylt#w+vFY&X?l-E?n~Jp<r6iWRejU1Dk73m;WsN6f?Ke-+51%C@s^XDcoLn{q
zPFB82YJTHBL{C}HVaE0In7&2Hp{JrYF-&XqNRDYZ^^TA^M?%UHEIFS2Acc*cX#NXe
zu={Z6P+AHJ@<%JIYB%vBm6;Nd#~*D&rzfdoobw&W(VLP_bTL(1Y|2|);{YGxq4#k6
z)^m4T5&dFxb!Ev%91&~Xb+scYb#a^?9<!Os1#j5H`=9-q^Ew5KiABp777F`80_t^-
zf46FJ6n3jfs{wwLyUN$>iL%xLM!Ew_RhgtUziI^#gcT_S1fAX@OF}Uv$_g~Fz8HdZ
zW2fQ?UMWHSsmnx~D-&d)HcA<0LY-2J?8!9R2rjv!xBQ#}@pCG+NF&jL?HYD*_XcD%
zGkLgK_I@d6LAzwzS3!6SeUuu-uIFsMmz@y)z{zT=+n%O8RW$8qu|95~^JLX2Su;kc
zd=Kr`6xaj%Jx<d80z90=LPN-$r%Ds>=YT@N#3Yq!4@1>;F}`~zHqd=wzxeN+F1dKo
z<j%@mB5qy5Of+o@Y}nzY9djjfGCuyh3KkuFH)FBb<Th5Xl(mrDY+?@82Fph>ZIOQU
z6Jy;HPHdo#AKv;Yy0X#BF${_N{YjM=KF1T=6prLt`W+amuCJq^p-TMKyXy0biMjJ`
zcL5R#?;6q6V5_k-zsSwyZ08o7(eBeiE>kUP;oYVx%8p<q!WX6ecVV!~y)NVIXfViB
z-Yi|J$lE}91VO>Kuzn;1!Yj&vw2eySF@Jak_nSDjE|1zbcaQb(I4IfIv{ifzc-}V-
zUp+R>c8k*`t;>Vm2}0<ku|j~WH3$WmUkpT;GlL0=^vPd)JsS&6wd!?Dtu&re?rytU
z(?}?Q7S$#-g_H8+CfsJrbdo6b4}dy#N>gm3pwnXVU*UVI@jZ*!H^l+ocRO?YSh&f_
zZV~w;=iBF#KF?v==aBD>O&>39YYE-URf`vbf7X~SB8!@05JYjCB;-7o?p;-U(iWx>
zJ6o?D_&eTsq-c+A_LgH+T4I6iX+|S!G90ZU(pFhQ2>98}zb@{M`a0ul+cc>RVoyq?
z?9ps|Qcev>SpU%k&_QH$?*OIaPP<U2Jh7#PVpO<V-lk4Q?uQW$nXjS+kU5pk2uicI
zvdx<#af2}659}5~_C$)7E#XeFtw|lMu{po5L~x+R)|OZ4@?6KGeJ;}}>v(bsYgjEY
z!LzGe&Y+W5wvU_$C$D|>jcK0lF~d841$aczG{qo=hlLi-gYAZw4CqFzRiC~bt%jgG
zSOT;@S$Zt#!2>A{sdvCE&~F{pH7YHHZ3`-Ct-XP?P7+4jC&U*m;UmoX_4PNP+y@EH
zTNq++Xvb}dSZM#DcjL$PHH=CE=1x9&`zyq!7&t(BWTb?eI$km;qdjX0o!#*pKCkzS
zO8~2b?aKAV-PuE#;~u?s*b(;4FHDNxcvG#KD6Y`wznBsi3mdE5SBf>aNDx%%llffk
zvjiDrAI!mFgQr7yc)r}aD{ZV2*w%0EV>S_6rNgSe+%LTf-N7APSEUg&y7o5WOP(ds
zuz>zyAe-cPL>lW8SWTC3cg06E_K8VFOwDG<nw97oY_~S*ZgPLVVYK$@FteEKlcFUS
zwJZ+_jFV$CU{1lln2z9}ogQp%VDmosuKhM}DEUk*{>hJCTDEuwCH?6rN)P;p(P#P`
zyHD=bd|~oH_xdD2Y^s)Hf%ZR;PDeX&LtcTZ)1994>WN}qQ%ktPQ6ysls6aKBX1(<A
z=;-MEe!mh}bK`kg|29}lA8K)NYVD%}ohA7y4{AyXxbA%gD8~xEtnLb`K5<!UZjDGC
zV27V}mK1J3?4d)3Nz8*bWgF@<YQot*XgZ&x6{zmI`gn5onFbS=pFOq`MhT<@MY<p4
ztD^+4-;g5yM*Q|$dzKzw0iUp!8pD+yXk-W7+Su7QYQf1&LHD*jk;AOb=RI7ejx#wr
z)uX-3VQI`JlB{MMN`;P|n{gd;2Tcl!sf6^-I38tEn#(fYFDUrn<=f5Hz-sZpEwrDK
za_C<R!n>j_8Lp|x*X|!*J++C1BX}Aw`ue6@-)y5=(5Nj>gF!c!7nmIvP7VR|2&cvz
zH@f45ic249Xs#~sTHx?lZv%1xE}4LmngV_9@v@FqM`z9Lp^2zkg7W6MS>U*%3@sLf
zKtv_i-7H<cVzDx{quojgn(CT&@lu-3@*-Wfh0Ob5*hd#6J$v6N!$ozZItmV1+rY*~
zCm_W2x>Ai)B}BT1_Dq5Jypb%zlFz9`8G+ABI{T;8qG(iRp<Vxqzc9S{C6KM2>EtfC
zCTz{aNczp5<q_d)LLTkW^5cx}X`A*!Y!)uPjgIS}v*`9fLwc#47m;r@sGC`ZbBRAy
z_u{Y?{zXjoZ9KX(Ms-)`;p#|ci2<YjyDqq#ZjBbJmBV@csZ>nSVdG>tWY*VX&~bsn
zmoG#ZD6)II+VFI?Yh$8z8A<K_eV<iSLETtowh-G9X=-(rHstujaXMz1+LGhDrjm+$
z0q*9mp~u!^n>UrD?KTWD$_ZYM_+Y6@G;F<3TldPg+Fja6%iFh^qUk_TQ(HoDfuJZS
zERs`FzK$#dD%I!q?A(gn_Ezorbg`3SsR~_j4xG<CPPG=cw<lrE6e*KTtgcS3u1qF0
zigv2YnJyX{5k;X}n;S+{Lw1u@H%J%b$}|3T#Z7*c2@n86ppL+w5b9Fx(HeL}hnyaZ
zAj1N&EyhK|9*(In9z#-5WcGmpI&2OLzg#oRJ+yVJFJMj`;tyG@mMN9BRW+z{Lx(+G
zTwgj@hTFdsMjD;s?8>Nwb}kGo|I$;cu$;+5+JvnVFSa_fELGE?DE!Ua#VgI$2>|ET
zFS!BmS3RW-LCh(nmAB3;igU&iweAGtnAXCt5jlR1m7ilM>cn$)akwAvPHmJtP1kyJ
zZn1q>*Eq?f;~kWWW?d2CD^02ClU(*bXIm+b<^MrJioj!;d{xygZVcVPU2OF9TtFoc
z-D4&zFHAGaXZw<n+19XRW6?A;{+EBcpi0};z|fR>ot-Za$DI(xV%3vW0;5;s!Cx3E
zr`xy~MsaAFg>^huro&-PD?4Z|4k7I^Bnsa;+Py_m@(K}5(B_SQ6Ifj6Sa<nZ@|_B^
zJnZ>mq{O16R70U*bd~#5W@CMG4P#hU1TxEB7#|o|o-Dah27@gFXTaHMc}0F%(Wkt`
zKfsSN{InW*g>wbIy$gdEJN8CjgaT4iwykFE4qd=nq+L0iwTh@7IZn&Lt@t)SwodUW
z?tb7uwsQ@9IUDfD+YLCA5m;iDt0_+=3{j8_>RnJ%st)=HOfp~QXS+Oz-L1OE6C3O^
z{SXhVf%sL?f7StVfk#4cs$!nl@)Oln(}_)vjios}C5DsKKRY?wvo$lx>nFuAQSz2?
zw;wG}6H;(I+wqp`oUMWn552C#lrMP<ON*B}h@cM$`K}(<i+!iJ+ux2`ApT9o3j1_R
zKL<*N&3*0@1Gaeb(?=45M;V;2;wz3kHKmSO5CG~U`|96U(Cw}$Bww$ka`j_MZ0pE1
zz5zNEpq*OzH{f~1y(IR^b1dQWec$zsE9>rLL|5x{-nQk{d`!%!_C`VgWliUcZd^gw
zb$YiE=`x+OdV+L(X3D}g%ea=4p;;^{^sOM8f19-ow05kjq?M!tNM{(N$dmDTwz%Ki
zQF{5O$5V@X>b?W3gM_nvU)?lMRl&_x8GOyUeeMc1gSJ9*klVuN%l*Evv{G!Pp=REW
zFU59S=-Yc1b_Qkr5E0snI<avv_N9`e0!#ho=#WXP-cN4ohv*;QL8;-;g|e~AY>2+Y
zWfpFh0lyDyqz~)6LG@RxcugT9&`lb+SAz6Z9nNf=ZLJ4_Npyi35o+cF3}RBkI>@=^
zsA}75(qLMU)dRS*-<&isLm}NaFH<yEqAd{-ATdCTI$&BXKR7sQaliKHk&lSYfh3H2
zt5k#N?CN@cM{>_HD<5{t)7S`jMYZx3RpXQRt2gNwS#$Sfmp&+F6^5`P5OOS*Z{BD0
zP#+tKz-621BxMBXs45}?nweWd+4AuTiQ-3x%GBf%3c;d%@0ePms%q3~N%#2j$lMYO
zeSzK8u|t>UL=!?17YlXnRrW(D@|eKC<YRk3D|y;G&DbJV(XYS^7+Y8zUv~2h;z9gN
z27AzNoFo3jqQ14$BaOKgI61h9-Z}ZW!QQfx{=<__Lm-0xsS3^+5N7#@#1$gwTwwW!
zL4JKw4<><w^c&yI?aZ*E9cD(9iB3Ne?92FvVa|SQ$IV9d13Hs$v=|Y=)z)!k#c@YQ
za{tsa?yD#0LkOs=Ykumvnwu$8q^i@U5R8?nrjRJiM2%D${fBxcnTEj6@c*YR`45c$
zqe$cLCeyp1|6hvv>1*6t%t8FiiJRg6&#&PBZF?m`KZ*Y93-JF}Ph{`dmtv7KdxTYl
z`>izbIxn*s$%{On9_+eir#@PXz7Oaam4vsji>^U_WqmiB4K28hM_c+gVunEZcrF_4
zu#0ml-NE_eDahvXPRizsRN^-~o7wun5)7E~<HOZVDlQEEMXqa|wZZlR!t~|5z48wc
z#qzBfWQBe)uH{)~Sj7kw0i6eqsDVxn;Tasc%-nL-_F77cA4|OoP=tPt%^jgzGTSh(
zmDcoses@$bOU`TGu<n{6Ueg81-V%Vc<+T$t5|;S6@Exy|=F-QlYs!>XJj*rk1a=DP
z_{~DEbh&xY+@pre59FWAp?r^xZBGr31dXWkP@d0vc4ozO;J8)>mzTRul}+~&I(W};
z-ixAnwXYEI8`_G(Wxx3i&oP(LN^{5kNyWrSQknZj+6_r)RW2XW%u>))YLLG|VO3NA
zlJtoM_-ekhSZ0&1-4s&(p;ziH^&M*Y%!$Epvfa#UEjrj|Gp1k&`)=LDTOS`Y1)~b>
zYp7C{op`<HsZl<SB5n&rEh#mkF=kWm44z%vdpg)jIvm2E>=(N!o`I+i9=PE$`?=m{
zmq(8B#TiT=t++h@i3bmaQ{PZbyOQgyi+ktyJ6_PZ^?>iblub)AyjVphi|)crxeSM$
zgmo|R{LM^uFd1NQ`ug%8g4SRH%<Mc;NR;to{Y>{3V~2<SxgUKi(zw0#N`54jshMo;
z8vKHeY<uO9w`iNQ(tagYtJ`90DwBQCi30*n>F5-;G=qP@zb@a_Ab4rGq7XMP8((wN
zlcHR*3iMRCx}@6RR2-Np09gYZ1YA?@n^g4WyQgcGc-;N@bF_sq9Vukf0o4P>J<@wg
zTka>}bC#5kq$yQ894s5$D;JmW4cn@3w`0>2@QnO!%Qs1A7!xi=qr!=<FdO_UBpZGw
zrMCi~58CSnNM56ln#x@=k=7lkPJ0sQ;eG!+G*rA?&9Ftjzu>BDs|uSJhsDNr0}{ej
z|5pW4-PiLurTmgYol-(2W1__vWw4V2!K6*sov+X0TH}YkO^^p|_5+MvBQJ_aGJj+>
zQP_B>2c_|)Jn2V2o1*1Mh0Vh@#bzy-<fvPMlVyw!ijJ;@t6UKfvWfffs$83py4*A0
z*I3Hc7LYW~J{wcyT_az<ZEZ%f+DjorI6nbRM3!4iy(Vbn#C>HxOOUNYHVM}G2{0&n
z2|+}V#@)SD!p^LJeuf<TT6Eg2o^anh7~*-uDtmJVBka+7kz7DHcTLi~`kOYrTCeso
zD$zHU!D_k}X*f~YPTFKqCvY4^W7R#c>F@P~wn3}0FAmN{!47wJ^mEj`0Qp@|6PD4)
z%+srFQ58oTpI-pF(3e2eW)z)Pqf>4xJI{`*rPnyB!M!aGFATbeyBC~}Jf1xrnv{_?
zng$AZB6nMxI^^uLb)wUSmDdT|iB}8vc*^4pIIPF>egvIzsew6$9=&i}4hrj;ha_Y@
zoQs|BMudR8M;m|G%AfnoiEHe)`x%aL3;?)?wb#2|OS`_Dh-d1cy*g)|Bx*1j5v#&~
zJ>L%ygKGP2qpO9(W|l_6Pi#IFp*GuQCJh1ncq+%o&iuqO|C{k(>#1YK=(eD(*2wG(
zEyIR8f=cl1LbdgIbBl^~$8dYVp!#;D`3GqITm#2Qf8SU{d~8>*Y(p%fhRqAVxJj$L
zAGe8J7EhDIC~rTB3dyCj=|?~XL=G+3=}@S!b77Qe7#uZ?3ds8`&R!9;m?Zr+^E%k(
z9k%GAZ_~u`Bd^G;#ATlAJu_+vDo*3ZcKiNF6~2InIF&4B!{!DGU-N1SGLxYkb;7C7
zTx(wX17ey_kZHWLK-`LR_S(4@%-OLMU-gz??usw3*qo^z>HH%aF50#-H`ssCCfSe@
zV_=&GT5B!^J*@d3;dTwKPr;~835ow)Z+*<Q+O*qM+T}`HG{!piuzR4P(LwiR!MiHC
z0kwhl8kWHDg>ZmS6u(8xR<SU>m=C+Jdx=dKQ%Lf=#fR1M3Twb~Q?>OGCWL4%Bv-aV
ztEtWQrZ1Q|L-vhP(mi)WoeGUzS^o)|A@hBU=cU9*9<(rC=5`E*olnKV{k-&um{#Mp
z(=bK)n-y%P99GU(V}1B5+Aqtmkt$qHh3$^GL`s$}^TE(q{FmI1j=y$3EtG1=Dc5JP
zcRqJNt_b)`0)y-c{}SO_zGglSsa1LJWm-JlR1`dK4=s>BiMTyN!`x&(4@RakV*&ek
z{E@e*Z8z5ySGolJ?CjL0`^Wqh!-Q4%e&upY)%snXU-{pn*Bjx_D%xoC1k)?O*&aqt
zK7%U)ksi1tUOK(&bi^hs-C*gYpI_SSp#mTSUcLm&-dkH~@*)6-QV5=RPnLTVM5e8e
zljDs(F$_NKG<q-qaYvi$gjT>~pvPliAhNsBUl6{=o~ABBcCv8S9MoU&4}iWO&AYy1
z!0#x!8Of<hO%~y(j=2~+y<`%-)4^!hPvabu0Aet-H}g!6Pk--&UZSJn%dRY2uAfsX
z;mrkEz@{_&o0j%p0^G|T{BEhWJiQoy>WfD)M~Cp!Yep;EMDm0HquM%5_$(vBiPTbY
z`ZiHc@XG>&vcmn!c6f-f%h}8NQn+UYa$vDZ5w=3AvWidug<3ofWx6mOI0C7y%{fao
zO=<L}Vth)@EPTzachBdr!ijfxi9F<7gsh25r-Y4G{@=EL=E~pHziCt5JJlF4L1~AP
ze?H9^-VV3>xOe+SQ7*-nj&%QHF2mj7-2B|jb$t()9>ZCCg$QA*O4Gzo-ba<hNs)?~
zqe9%gDS<kfjvV}zR78TE+)V&|vg39M9!VEtAnb;I&cC>PG8VeMlt(+H)k8^bqAl1;
z3J)yq*BNhQG;=wo+;C%6CJB?5u3u@}J;aYYd|HQAstUEE&)Ah^e_?pxoH5#SAbN_?
z7*XTK5KGOg+Hy>c$MHP`N}$13_2)-~9i_U<?N5n}>x+0l^Ax8BAeC~lssqb;lX6rB
z4_J3Vc!tw8s_&kG*F-(8_O9`iwreSh-e%unEpYgJy!c&Tc0q~3HE(3i-qoZBLl-kp
zM-6nVZYoGwqna#Fak;Q|FW#?~s++eD$P#a<ZPXfDn3$tu;!VY{02e=}&bp=dm1QC>
zzzQ>`Xe{V0?5uf`h<U2@Jke2tJxe$?(CBqPtZT96U4Ke}1YjiPHb0NS_q%J|;(v2J
zKI$CN^ZBL@=5gZG@-&{{E|ttlJeC_2=d1Dfb3KN_x1b{^;@e~=7#KOM^`^^RRf)3a
z|Fl`Jv8U^j8}90L{_4^@pE*{LS3vm6b$namik+EQ3E+ptr_KAcjm6ruY{{Lan7O+g
zq&P-&#-BahmXhs_-BBzLwKkq1tl<rJtg6lzSHWw-ftM&d)m}EXwHSK{kYynFK2YNk
zn?hkoG;3oZ2ymn={NSc5za9vM6`kw+8!S&@HiC!OaUWHZN;zc9j+Q73Noew!x93j@
z?MhqSmmPt}hAD<uhuW&_Mg>VIt+hX{T0Un_@DblG(tcl8BQrzE`q@-6dGodl5f~5|
z4rs3>d!LxztP-eLnmv7u^5pf1kBi|Ap##TF0@f0%C1*5lTSoPIgs-;I$LDj&#STE0
z)D^A;udo=m%{7!|{tc^4ngd#4ZCD5QY8Eh0jN*KP^m2r2D&T8jw^v~C5}yM3QuB!z
z4$vq4FpcDzBo`Wcr7r8kHobkgJL&W$coX2s*2a=E@z~CBvtEAbboJSzlW|Z=FoNiJ
zd~)4d*jMU3OL1q0BTtFus`>pky@*Rhlgy~tBS=8)#A0xWx^X9pux*-i(Ofi^`_-x+
zN-GW7+McVj_hL!#L`)1dYrekVblxPtQD?7Fv)$3kNHpd82dvbh0|95+x&R@$)nawi
zM%VksEamjn?i99XDQ7OJ(#wj<^Ha`G6ATHM3xFXr<xo4Zu!~voL8-hhZ0|=t%aE<7
z+Y-CYLynG>hC4q6yHUOCVSY;6>1Di$k;yh)58u`#G`YFvv+>p4*iA#K(m@`Ftbx6o
zrd%GxuR?PM=f@I)Di>mt#p?rE1=qD-aQ_^}TgjlIf56f0P!)$#N_8mj;jV5FJgPx8
z;B)C+*y8WlF&o<3U+j<Ew^DUsQR{<51>$@CBuI~&fItI*N^UJh^-&&cP8z<NH%O-I
z^ki?^2k3sX^*Yz!BXXi9Vrz6*!sdz(+2K({(lu`Or&g~N_&?1S_Ew4~E^EZ%wgCZP
zgWba+9tK800~%(5CM>+fTvc_g^9Kw?uvhG)>+jSK4vQs3?8Cn%4OS2IzN&W*ESS32
z{y(^X`Jw|^C1{510{)Gu`Am|be_)6)n31G@eEkIHSek_Ges`K*I0g}mfD7q2&BO*%
zpr|kgS(#F8g=qqGdakFfNskVOr3}&=pmD+I&YFfDcF-4Hi(YaHh<LHwu73f3ZY%w+
zLxSMY;``VYO-Y;_%*BS#iE{gPiEz~SqUQ50?~sk{IO5C`yWMNUoQfu)NL@(Z`a5v#
zX6?_e8TFOZZ01e-D(bfs(L^h;szbD~y5*UjYzTxO`81*qH3a~`&5roN0Q8wVP=Ynz
z1Agnn_f5a2C!^U(*C84{@fg$4kYWK}jUsxzwIou-gL5LzoaSctlBJ(|$%eBop6;yr
z{;(xUr0zq}<Q>*A@d@LB2h2xp%Xl?cFFTqcQ>v`5xR$bt-Q^p;(d3d_0{W@jw5ZS$
zv9OPwl5BPFX)7yp*hN#lpR5>u1^$UuozxmI2-@@z0CdtiT9$kzt$-14F3DG;wElNm
zdHltRx1VmA^ES7-ES_d=5=4IXYWd>eb8Lp^leP{41a^+j7VWg==5|xE;^JcDlMA)y
zhMP#)p<3+j7wPG#PLTZyyVh`GFORH}Y*Afjv39aEo!WImGfGNKJNi`DS#7h2M#8|=
zewaj%bXk(h3Y{Gz@dr+3xKny^d9u|#2|8*F3QU^Ff+=EB=1mmBP0)+~fs$MNYq@b}
zyW>+cijt<H;5RPL<>GQsKwSQ#WO1~uPif-r_6jcQyBp7tQP&gtm=_Zj`)Y-&az`Tx
z!|yPs$s^?!D-u>Ba8QzKXNH8pCwbBUAKy+Jg?A4I!TlcZ&&=~O_eYIJAtg3^E%O|>
zz-JR3f@ss`KC*abp1bVG)#c`JN+NAPu3TD)eKhPN&5i7e=GX*UgBino*!>YA*%y!O
z{1?o+a**Ax7Ko4^`(}GR2`7&YUvFSNhr4#_)KdpgPbawV3N6iOLGKDv_c4a{x3UtM
zl{E;i*2oROghiAXCoNF+S?_}cP|N($q||uyjr<9vDvfQRAUZ9{(x|bdxvPeE%S-U!
zfJD&Nbmh1$nc$Jxu6YR(pSD$+jc$i6=xhCr$0FWnS%Rst6m!bx-f}5MfAz}8^isxQ
z)*-*j-9HWxtbt81B0^82*Dd{@mx}1iL-g??{rp7nKy-sx2}K8m%$Q{Fw)Wmf@=BCn
zbtu0G_-_IVj&CYDsvTyEH>_YG0Kw%qHgbsZ)3SGJ650Zd@SyfqQ#5xafp)G^F5)F#
zw+a3LX><@r)O+=Z?bOo{d)lMR?c}q9)vGS1QK6KjA{L5IOV$e^;kv(`egg;|p}a<|
z@OB3Nu50;)jhJrpwc+Wy_IFPWHhsn_&)MDDhv)mThHhFez8lNE?bbJ})}{}E%)b`0
zz&(h7z_}ZAbY4b~{Wh(uufBv8Dauq|&y-@{``&(VyOH~{M~CFimR6dl5s|WUT^$+D
zXzduDAsO!`OaFPDw;4OmCr5GUCr=Ztilhfptt;!yP0Hun9oIG<tq57uql5@V3;hvt
zzj7+;X!M^&gSKtC1brR)qxq>}?{4jZ+3->NDmR)3Utnx%GurFC<SVUz=qoi6bVC6E
zjh+UO)EZl&wJ1(b*x=?{D)=f~Uw0ne5<9)%wk6B~%}+E@aiq;$`y;6Zb-Kxj;t7P{
z!&m0}MjI;nh$x}t>;NS4)X!ZDksclNEK4%#x=y>T;IuKr`sI_!2<%UYYU2Jp|NQRf
zVsLPzVJWJ2cEf@Ah|HKid)J<PpkC09_6;_k4<bt;O+wx=AcEfqeBa#wt?KY_V8x0+
z%=m?qR%h;pvhh6};?d3s4`i!(exS#p>HD{I?{JSwer9Hn$OU$;%C%M*Ye%jAdV`To
zq*tau_SOS>2OkII%lqIa)J#m)6Uz(-R|S^j%1FzB55Kitsu;q^H(`B@Ovis8W=O`a
z<KsnJqzW>d^pnuZ=S}V#wIqy0wA;wra&(WmTM@2r3soX8BCe_y)bu60oZmEfoqAyC
zuqC#+>iwZ8J37p#+S$-Ux0c4lxzK%TXLIYw2|Qk)7uXi5D`03kDoH3yC#;9;Vsd9V
z*WMKAoX^-iV-5Z`_hjC&erw0Pxe@Z*RbJf0OmK+UfBxG{A(o_($-Pi#LHW2_{4tbX
zO-$GO;%6+3zEzmo*zgdmqh4kHn<vx&-qIDQ4)<OXTWXj!Fd&2kM&6h8=4p+FZ9)*i
zHwu4m+09{ahaeddFgYX1O35SNSv>kW<8h=gJDH%Ae~Q^>$58V?5*127hP1)!CKK6q
zojT!=%bd&b%B~#5ey<>4#T8kF|KVVh$zkhbcSSwkkhe*jxF5S(Tv<(dO7{=PQaF9i
zAfZ@;f!c72;ky+2HLJ&NgBKxKfo?F`r^k9r?vtAmzJh?t()r~THs8E)Q0@pnjtH5K
z;sjs=DzQ*8z!|n*=TrbX3ts88Qz6kR{zO*FpJ;11=3xPFlxBotxuXo8Kb7kL111ro
zKF-4CDADYVy}W$4G*BroD%e)-s;}_<miG~Fb?n(-&rY_p2wSJRp`6p9#lOHrL`>Cg
z*a`PV2=#;C79NhG@8g+UsBa@TOuX=~j@`+`t)0IyBwRM(#3SW&*<ac6CBf9xakHRr
zbLOJI0_$`#mXjE980izgHTifuM8qo06<EKX{Gr$ldfkQo;jXQ!sHr?ftdz`Wt#>!8
zuo^KDe^tpuk^^N`Zz3`MJ7;tAFaln*yZ`$UUmm3O%f(oK<h{9;M|qfua?bMaR#;L`
zt(Vd3bqhz2mdDePfX+l?U)1Q8XUD$SfbPUvTKXk7hn~LO%!;w_79X>lA+<N#hl8H3
zDN3w*dWnQ)9-rsS#5XT2x2IEtp&qL^uZp_W!fzLSIZPac+C=uwmdJSX{fjXrR9UI9
zYI@STD=tXw8s=ZsVieQ!R~}GXW;{CW(K2=4I<s5KjEeTp#@Ts6SXBuNRdoDUkU<u{
zwa@r`C6`@A+%z|KR5ts+a}q}nLaZ@a<r_=+jf%%C!=yvbpo|C#ZXnEdsqQG8KiOTf
z5)N@9AnYxx@$b;BlzyZb(E>THN%2m!nHtxy$A7mq?@*3Y;5Jnsc9gpFQLStU*g4L}
z3~EyY06)p5tB^|_#b!a_dueB4b<J6iS;EBj#F9KHXHxvoYsf?!`RBUI>xx<K0yi{4
z3~#Lrij&dQ|CmjBqFk-lTl^kJYIYCqyUh-vkoSG{8QD-+uWXKKP!Cy4vG3JyU7e<!
z?S#)sAKs}z8SLXTx$M}T!Tx{%?*GOJcD*EhF@rvTFNMCTRJWsj9?vNFw4xc6`R21}
zCiNlM%j$UbuACv!>xk_PtheT-<2#(BQ_63^?zPdJlE3E7b$Ewc7nv}YbvNh5wD=QX
z{Eg4M{9~h4uv?6lzk2)c)8g&ic*_xfibsQGWW{Tv=Hm^@Sud!_=-MVAm|_0hUJs%(
zATwP2Gm>6q&X0?znviE=<>+7+zLzzP2m3YIAhe$*Ez8L!HHan6_ia^m5XwG_myYM4
ziA8Upj6^gnbVCj=@?V)A#|_&bv;}aG!x!%ZOol?llG2q|thflmGH)-lM={pAX9J`t
z7QL-??-;*y&%K)YOleeaiipfugxgIfYv{%M?#~~p8-C+fUGOEhp05_4-g_N<P`}*w
z=x^ezW(&6pK5WpGJrr7#m2sQsHl^L?cx2+!A2TgG8P#}B<qouB;Y8m}=^r9jG7ELo
zB#_Pv+9*NVy}d|4_l;Z2ymW>HzdfvGZ6{5lL|SS_)$d*DFt{9k7JeT=+7>Um?xC*f
znZfog6$l_JtFf$E6dwocT-_>&YdXE6FA3#jf?{Gedu9G0u6q{0)xJpFZr{_^<qjoe
zBQ-MBVr*<+)n0UF*D&|WuH+rgrU+<meK8V9VWZ9Xa+CPEy`k%|-w;ewfndf}-}d;0
zjp27<vm~Ob&i1PBK{hSBW*n@)@ZpEU2Jh^tGf)V)Xl~D*FfgItvYorE7T>7u7Eg&G
z`?}?fjMHYxuh`;#D|*qPXb{2W&PLin?~kFr0>#P?%_$e?xvlbd+9#W`cetCJm!{#p
z8!R-~7)kkNJ09+hJg1u3$j*g@I6!?~H|0h8;b9HC-;S_><aiso#%AlB?3iZ(cWR4x
z$fg~^eQrgu80FlV#J|YD7Zz7)UDR|?))X<^!S*4qg{X;(?!(d*p^;fl{lDP<WgD00
z?{`keBT?cIulnjEO;8;H$im3tbZ5iRFfcBf&wB+C%o|TWs+C$t_m0`SM~(h(o+Dju
zM05Pl$6hHxhr<r^bO{|s9BA20S3ah@wEvPDLo9^p@O*j|az%r+gMa?KgKpV{`v-yl
zE5<T|^d1%F-+;sahj7dP!>G*vu~-^?dAVX~enfS!=z~!S(!Xq-T(G~uoP5^UmIHSU
z^WSP~%3+n_86k!A4EnX{fyxgv?`rlg;Qj&noK)(zq!i26==Lr>;#f5M(6!S;@Z%$I
z5#GNQjX?{0d-LkF*DA~=C$ylZ;Nk8Rhz8>$&#Z*~r-pZJEnENbRf)7)7MZ8-zYOF5
zak%OK*s=c|1Pc5&Ds{gp>Axc;B1n_zqH{Wteg8fW&K_lN*>2oAhyTk=9ZZv6WH{&1
z|3QQ-91}#nR1cf;i8-V}*vi?>*q>Hv<<1*?a5f&lCSWU5m7HRhIc$LX8T{&{bY*-y
zyHlWFQs1_Nd2Qc%$TVBhU#lu%;=WlRau#_&bh3xNPB80xkB8vHt@C{U3R@`?ba8~$
z%I6^<uCHIwIpD)E`n;AYk#M++ty0Jrd7jc*_j95zV_NNXj>CLp(MuCA=s#MCU)|$g
zk)Gk&%yW?}Ir2Wk6AFjX^|*N%q|)YI>-v<%iQsaC-(ucR$G`EvhY))cvlj40Zq^Z{
zur*0Y+`LX?dqk;+j6OJzoD)rQA*V{;B+&GpdV8dPS}fHcGmpha{_`w$5r@J!rmMsw
zWsGyQhR<Qt%PBIR_dqlE-26B^_av`2H<H1)GlzJh-B#Bt`6)>@gV9rmi{TJlq569H
z6c$DK$eN*jaf@*F>ZtYd`8MQTTNdist(I!AlC+e@hw3zz78&StAJ;;M%b6U$>OOw^
zIQw{xSnw?A;9eovCPNr=GT*1gfnbpoiC~nk_Nk`aW6U+LR_$+w0ky4Z=;tTOjxDna
zDngcr83Nx#_b4J9<H4gJIwp?{na?S<OzvBWV>z10tv&($?ces7sFddD7nrS|q&dp#
zacOv4y#DSQj-k}Q@-4}Axck0@{3gJDdAN^K^=a_!3{HxuYvTS7?b#Yw5?`njgv^r_
z9IGUk`$ev2%iU`6)WVc}Fto{~jr3R?(9h>^c{wXrK=b#{5Ue6KE9X)vfX%A$#lgNE
z)X<nHxZv}zcvcw&%mb6=MpHkdV{PJm<~E!ync8vXI>NAkKWJ`ya&yQ!STEDh)ZnJK
zeKeQ0&ePNXetj?ZHe{_20mS$32H%e^IQ!h-#rP`_WvW0hZpL@;yW4zM*UwUu@AzB6
zu<W5T1PN4j5lneKdVAk*E*_8?K|u+1iFx1eAt{`;S5P9KV581+pWYCSe$;B0FBF+$
z_u<O-J&V?DN1NE<*G*EEf+~u`5<}6*pzdgQs_eKc>#k13!k~P;eLd$RX?xCvZLPa>
znn{;6ckW%#<MUzyMK#F%7|5c^v>Prng8*1@Xg)kfs3+Q+u|4*MZ3w<3<y!&&!RsG)
zdPuxqyq?>Ho}w~tl)OR@+Y8L^d@y@cDcnV9zquBI|5SHS-rpqq-nMTbqZFe6bkf@V
zu3gd5en6Dpz&!kwuMBGaiFlzM$meg(7$qg{8NI<!L+b{?<0>B$LP_ive=7&YyELwT
za%Tn=^!J53Mi3^?AF}xzZ?#vLeVwd{I{XIwr+nMAm2f+}`o`PayaS%1-Y$P!<hEN9
zb0SgkcW~0WbeVPFgFo?JN`>|zEV*LhMLoF5Dj!L)b$vVRX7ju)Pdyd&e<v<pep1?T
zby)18cC5R)hHL2K)wuXR^$n=|b_lGk3hTYPb?@NfW>LN7il1?~eoS41NPn67>Kiq0
z7pJ*cPvxUa)Zuy?9(dtPRPLN{J;?3)P8tL9v)%kpj(ew>{TlVpiZM>TgG8&JC;Nvf
z$qc8TI>_f%aMW`L_?rzM|CBN;5B=8{;1!}Bg3nvDt!n$n>dKLqiN$l&Swv*$`EB?w
zLVjPJ*!}hk0&AVgOEiC`DHn_)uGjVVrIwfEq$PRK55_1`FAC3Kb}N=Dps4s1!jzZ(
z3W8uGsywx6w>4r8v9O{VKFhiNb-MS6GGOr(rH0(Lf9U~StEcgO{7ah&KX+jJ(dLzZ
zHy-zmlts>YUiq5zlgY!K^E6*ZL&3@Ta=ZtXFe=)?UkLpn7hlGkCCBHgwKvcEZGJrz
zrDJ#BN4Y_n`2K5|R6W;iF6md6jptxB8*!7}!v-_Eve5hOyOSpl-&wiVtu|L588t|t
zhy^{4?XQBM7ZAJYNBwZOR?-iOkQ-=y9>Y)FCO>=oLktD{?A|G=X|SWlue=_+sR?LG
zdG0WkeS2trN$oi0b@3P*nghqSr@vlw>>vU^zF}y&ny!#+p)_PlNG(4zJDVPO+Igie
z*zIJ87Z+lMBs{m73pc|8tei(?quTB(riWuKvP3KQB5n_7XYCDqT41D9-}8P23hj<2
zPkIW_=Mog4Q!=t*ftH~8zCy=SO|HJ}VQ-IL&+;A5ZNBXO?fOQ0mHM<af$sVC=OC@!
zYd552n2@(m#pj?<W36zpz0Gnh)JTlO8*8c2Y_+xHa^FQ};`PPlGQeHkTm7P{V)t2h
z|81iHN=)udgQdU0_$964R=EL0wZrLB)^XhBf8}b(uH^mry+C()-oHS4wcvrs7Bkql
z`gHw5*i)^|*53VK1T&Nw0Df*N9$KZoS*JBVOz&8EnyKq(ao9~_Q?BqYxn4MIHfKk8
zCV{x_er2OSujAm!X0F_t;Cs3ZS}_IazFEH%r#*f!6#|!UvljcD`J+9a=n_NA`Vdm!
z1H_Hm^h)(+!m(?VzArEKX(U?C>sK6D8FP3Y#;(s7-BxQS2{pGTt{kRTPTgOiipt`T
z-v2H`^p8XN(6VA&jN*4Fz`XkZ;_WSf+WOwTUs~E<TWHZz9Ev*>cPNnJQrw}qLm{|U
zkl<DvLb0O3-BR44xRav6EjS_EwEz2`d*+_^&N=hWdv0dWWM*gYy`E>Sm9?Ms+28f-
z#7XV;_|@h#-ASz(ZdZwe4Dg%tV=tc8$zqk1L)7Z0!+at`+ygxkS@@}%sQ|TM+0{nw
zESx&7C$Ro}dmK};jaCQ&MHl+22E(x{<mgAh$4``1AG_L(9VCuNO%aDnBafX{s+)hq
zd=Q?9734Ks*SLu?=p#Cg0TcZ29;;)Zwki-ft9=~<U0eh%Jsf_@k$n9qz9hwzu$+uR
zaQ|>lqh8^t!5gd!vP`FIa%tJ5Zu(_Yw84QZFJgD%L9jzX7dVjGavt}6H$3yMmLgr7
zG^L_CXZ(Q}#!W9Y$e1=Pu*vZTgX@W0MdQ4Zb%@U4ihD`S6hGfo!P5wr59W?PnKr}k
z9iayT9;=z^IVLMKU6Lke9VEEgX>tF2M<kRhB5AuGdnqz?!n`GWRm14djQXIwy$ar^
z?;{8>o<2-9Xd#CBigV75&8N1v1Lc}OoP7x)^lh16XnNOLZ##;?Xm{JuxpmfIAN8bF
zxMLPX`?wwRR*&0!F}~(z@${1gKJS}2!>mLmbE)`74`A|qcMnWC+#UGwl=}K4w}Hat
zuI@bIOP&M!?*~#lq+}V}f^v+_D~?lw*-=;scf_7#fI+5Izy*YdOmCoAMO4XG#jyFf
z2anh<<yXope|}Xiv&q9Ux${RnxyVI=yPx=Z(&GCE#+YHFx7TA(Vw?t=9AnMe0BDxT
zb82<!<~7gHow;NE9a5YZF;qG0#K>xkyC>XEvCe~L8%k~b#JE{RH5eGm=kr(3^KvY1
z$sXEC2F`<xq5fjD{aphCrDMUxU5@W`%a_`31&S-fHDyMcf@72%qsVD^wl5F$bj82$
zVI9EwjFK~qQQKhknDEPf{h<r6@Wrg3l*f~MK@rcZZxy&3^-!&usi*Hg*g4$xn^8Ra
zrTx#>_Dp`}DcE!-^TOrjV~?e!qm>)Ui$hVdh!Q8vD_&m1>X!Ml6+eb&cnNqV?s2Tl
zD&3)2v|qk|VFnFGf;7I-zI*!~;Hw?+P*LU6TluFu4<-mF5|{TGMR{S=^zzRfj~{<M
z^1A1&P^t!6Zw;q~EcsoerKzGuW57;f!|4*g_6KL2PFk%jZ!rSaLioU-TH>+7D;yur
zH=>;F()4S<wKc^h(b|Sm*5(`wN+XJB<TAcPtL!~|M8Zs>-K-5pM%l5+#FP?Azj0{b
zS6O|x7zx`U+&x?)7q?z%Sw4R<b2LiST@4f5X9>>~vhk1o_339nTmrcbagO0{YS=1N
zU>7~v>8_|2xwqNesJH*2&xC`4VerqMMA>o}_SeM{g>mR4Y6z1l_AIMvFD-yLTc3M&
z<TD+u#-r=j2CH9(!K;2T7nwZ$%8G!fZX3W<0$o>N6QAQc?t!l_FhLbRL-4WC5J%sk
z&qbotX{ghJh>EE2TFOy?lRho&Ui|U}(~GnjZE41>Hft|azti~u?z?;5`SBYXLaG**
zkis!hPo<0bOYlCa*z`_UjRq$Ev!$K8i?2Ugo~XG~SF2{_GSPa%+|*!~P6CuQ2lp{@
zzeGoQM-{zkOH!On;S|E-bf<)iP9e(c>=}-Wv7U*SY$e^d<#kRFU^gHZq_!Wp<U);X
zzLgvBLejFe6iFC$UGA0Dy^g6WB}F)%e4!!I4AXg1IXwOF8P_asZ24?K>H*gsmzo};
zcRSuWT1`Blp0zAMlp$WvQ<yvDMU3O@m0@O`1L3Mk3Q4x-tnU51!oV~u^z~)vGZBTK
z{aml0l0TE^a$avK*L%4KtE_KVfj>Wp2$fV?5?h|%-J2bB4y^qxCT+O96#qWKy#REM
zi_L9kJCOQMXk(;43+W4erM0!`_r$|R%G#Mpeinxt-+o|C?48kOXL%P$qqF}kG(H>U
z&4p;cGdK4n#E%8qQ!bEX3-My}=gsbfU!8T+x5)s$$ytmvD(G2)_?T#N_8-91Dsj}a
zFx{bnXM_6%i!nWLI{;huF&?pI=pkhUG^W9a>KApmZrG@5h-AB<+34<akO@oq=Kj}C
zOp2FY&Y5)wqP3A5!zh`ahw<<I&l;2j+Oq8`UYozP7r6X2yPi!x0dbfu!ddQh8r(du
zYwpdn%o1PDZ}=x8smZT-h0Kp(=lsSxz?ja<_HutJ$?u|^)GogAE+vxR3)1aIq10--
zFT-d<Ju$eml{QhxXdPi<*3l69o{D5`Y(-vyg8>d=hIeA0yn8s!1XikboNUrHOv!H?
z@+BzcH0rO6+5b%!FHiqG{LA>APXi7wv<Xwz&Ww|(tz0#~c|(cii<g$@V(8`bJm*Eu
zx608_jXoQChFQ@^kNHe?il0(Lw}%Fd%g6(#3d*v0?sRVl93&1le-hyH?{z=Gc#F+D
zg-u(!eN*PMw3G;=T5ki}A&ed=W%kq{7A`6|O(ZVHIA%v~M{xWG)0J~Ot;gI1Mad;?
zG^8WiE~hFUiW4LfJC|%+@0$Lg(m%JcD9A0pIvWsCD3Wmi(#o#<sHw|u{k@^z5hUH`
z70NdGipuY@hCHUCKByErAaf^+SCGkU|4puLdT50$P=^CnJ#hLxG{VAZWuf%V&imF)
z2<xPhKw?n*Y$9_KNIJ=0$>bpOS%J7!^?@OW`3tR&3%;sRQ{@%|)$lWxlT*Jz)(jK2
z`)}t=+&n|a)joH7YGAEh(44662v{v)PuV@I?Vb5vXf$)$q;Uo9mVGXd=F5PrJz;{o
zhYpmF=8IomP&bY((6!;kjfoRx9Kl386KK}>r^#|qr-hU<TPp^fB)bLRO|O_dJ<U9P
zm6xY}qh)%ohguN<XJ^oIe+wek9!MOQU_5tjdHux}2{)FNi~(L9KUsX828)YRoO+2?
zlvJMGb6bMLi_%WL0SL_p5U4wpa~gT0bG2&dN9gnQgQf=SFL7Ni9)cZHi+(<^y_9C&
zDnc;EsbNP)@R3a0wxPzw_acU8{s*_&6i`Db@F+zyS*zO9ObvQHe#V_+?LPJ%>CrlZ
z_>P*B4Xm`wn)M?0a=JqnhLELccGo0I`Uio=vb-eC*qg;C<-~oCI*{>P^07$I`KJ38
zCrg0&X1p*L)MNNMX`VWWWXqDKaEia8)%U7?TIle?YtHGbO80vp40e;-cqbWfc~?&-
z{3Cu$0@iz0P6ywoJlNi@+cUt@mi)jLB|U!}uT%yZKaM)RxCBWTf9S@F*4aRc0McEW
z<Gxd_`&@i!Ki_z5YE|S83*nQ|n!g4lf>t5)&-XqQ5~v!FaL4U^Wo#e~KdZQT5o#7L
zPp@84%zdn2iu=OE*CFlaEN?tR(m!_5I^WnfRGf$7&byc*?d!^1?9L%xan-_q$NyA$
zTJ?pCeAv3ZuusRF1eg=-#;61QxRA5Hu(1Ed7oMnXK|3{iVf4X;*ssd`F1-w>Z@$}I
zLKhQSVh~;4|2o3a&e|uC!D6!Voea_?WEzvAtBV2JH}|f7oi%8zNy|o}IxM{jT<zy#
z$4VL#g&<j3G-*1zky(<8Fazn`Z3h}i^7<CH1tK`#4ST3IelPkq6?163sF*`dXo>P{
z<?)cG?7~xD27Tto--?o$+nt@9DCKv2SKXRC9Zji6Sj;%2y8G4dP&HMhTpLVVvFXnB
zqIB0vwfuUJ?)Jz?DK4M53a#v&by8<Td^>2&Vm$qnV2A%urdxQ*r|Mf0*Sf-GBeldS
za|2g$wrJMYRA4=}9H6W?jfE{by*0p7x5vpzFX=9;_>+36ih^O@>d|53MQ57#yY9K4
zP!posbc4?zI$8n;{<^iSroz=A#X1%`Tl-pC{ztCr=-$tu!%7&MuKQ}VX!=K)PsLbZ
z>dQdGY1XbZVFABdJ<U4BwWXl()06<0j3FCKol%N{H(tRK@$hTIo%p(^RA+~}UspCA
zs=26^ks~SDF~pR(W0CDP%qWqS7L+_a*>j}0-I>%KO~PD#0P1V~SkMRNF)^=?>uX%r
z?F_(0!J30ChL(sTo7=^<kH@yET!}Kzz+WY?;_%{8ODkOrsCAvTSy&1kZHd~f1J$aW
zxQx%>YBtogW#>KCto_ezwTqZ-st>M50dIt0^*PpisH;ueolhMzUQr<z6KZ=rUu0j{
zIRzrT$zu(R1va}|)1l3*_V#?Vr5dGr2_f$qte}mlT6(UWf*(H=88JF6?)J`L`xN&O
z?{zWN^3&vguQ#g}?+X+!-TAc>!((5C+z5qij^{nO63p@s2gR38YbYFJm$s9c``xC!
z*ISg=nEsJp?Cgsq35Q`jNYt7lc3Vj!MfZ`fPq&_gS!W4hVA#4!TZNm@(>k@O(kEMi
z;=P|g^>ZqM<T3Q|JeQkhA4*^BC&|gpHKNZgIm?}Mr!`M+HPv-;R5gk=)MFx_6zO}D
zgxb$Br*yC|Q!OjF*M<APqgCzYX&nru8|gBB&AAHs1^~RW|4cNm_`>jqS&_+g2VZO~
z=n;66VIoux?_+Cp1W3LZkHp*?T>OiNo~Z0403fg>wrJVeY6DT^kl|S|c?Ym`=>d8{
z7<h=t%nz=64YUNVLCZsiFC9xKUR3B_D}q2I1s^)NH~E(&-%lf%hj{tmWAsIf9>?qG
zUxsubM$8SBGxI}>Lw~o)ajo3y8mHFPPu{!~AIm!)Y%L5CYmhU3zaGwJ#L2D{QAqJ-
zjlp$+ZPj0On5x*e@?uUG7FZs?0)utDs4*M}DfXG^`(Ulfk)ZCuA>xW^6wQO)Bcqv5
zKqn&0oDq)rM!~bCp~+EzxwQ+VaoWS8BM$Mxj)7|c!iR92`;t<aWMppV!a|oYv}x`X
zUB9{!K}2fzg4ku6*yQH!qjd3GKxVOFi`3+g=O0TH)z}=(nVp$ZhU6>8mu_Ylc@J*H
zT{54X$z=dhKeLPZY4H`<+w$Z_C}76w-_q4R#%Kl&a4ENaHh;xRQpi805c(B~?yHlw
zyZTCOLm4(wWiiY5HsQ<yepuI1XT-CuGkJ?eYOxW<l2@x&@zm|!dAge6X(0J&yQ!yY
z2k|}GM?)<K4$rIhH#+CDA@i>^eUEY;1>bP%pEMj&OV=r+XguoE`K<Fio>h!BpBA;z
zo@#k{T%Y_rEwm1y5G(9`>TmX;?<v1b_uN@v4%GPMkgHuN@OGKw3W=E=RQdbX_}MhB
zh<{p;9!5rr>A^2=+E(KcD>rgcU<~3JP8^YG6qoIsbpWzjS5{>{xr-3r)!8^Z=DCmO
z;qWL?hV_V~I*SHEjRFHh%#Pj+MQ94#z{&P+AE_7A)j9?Mq_y?i`qTCFc>z({hOwXX
zjM`L=Y64YGiYL!sjgMmb3Z*8&vxRJ4OPQ)mb)H8xb>YNNyB*gRUdH;db@hkHsJxNK
zDg}WQON2h-vrm1gE0&*FAmv2_rX_m)uF1>;DvAnRm!{&6e50KP3f2O;Uw%_euXB*)
z(*$Yt5jli|A_g1%W|}Qn%Y;U^&LLP<Q_&oRY=&t|XgxRLsSMB<xr1%)?XD*ywD~10
z*2%QV;(}?>oEIAlm=IeQ=r#9Ax4pfHj<!INWu?*o)ZgCMq)y?iKVITma`f82Z+;^m
z0p-lBS+lLvZIqkYsUd>ocDV$#R95Fl1A`>IAVqKPVi_VYUp1XkPF<|fvp*x3_>py(
zat-wAG3H<&j<^fFs9uk7=6d1jgo600<jO&R2YHM<F+GTen&^ELN6j+0JSV@o34Pu*
zVt`8{cnFYI)EURzf{;cYa^V0$#yr5CBi(9jY@V^Bo2#UpvDOAb)7RljA3imoZEzJj
zAJg0Ncm~$d)l~@;TwS^_s%17IFT2ZHk$WtKf=)sjmV^rnIpH~t0a}g^F)4PrkZx}p
zVgSa6@gb5XjhFcn-zC?k1Awq}WJf5W!t5!qf{{}H60su^TMuC;S>qK@3Gm#XnCpE#
zc#T8$DznwhLL-AFz{vSfhKOXBq4x;2Gj&e>xL6LF)~o~L42JZ#CTOeQ!d8&VZ;BR_
zO@g+s>bX`9VS_gvK;&s<LwhEfvDe3i%JIo$=lRRqDw!7O{aF%zg-iM2%{aW`X1Rt3
zE@0^>n7BS<bBC7*Hg&)292Le6oNn+7v;+l%NJ>GrN5hmET&#u-C%-{@eFA1%CmCM(
z-hjFWn{W`xx#lDsim!#747SP6Zu8yyY$1npfV}7;4r{+`@$WB0gbIsqa}n+FY!{eJ
z$YB4d5KT+hP0jH2U4O!LK`DHsSJ1C_K_c4E>3Uuk@`TewAz~So?NhqW{Jn0{>Bw-#
z?pN7-+nJ%w*gZt6^*$UE;}cU>W+HcYT0iBYZ|r{Fn!?t8#jr%WZl~T^z@%VF<mDcM
zmPyQoWn43$?QL0!Hm;m$-y%?XIRqAApCul4sjG!b0~RNPDx!pSIGTk$o%8s-fTS(o
zyByl?Wt+gS7i)+1V*xb<eO6ye>J!PSr+>^Wy_WQsGB9AdcTHTrl~X=MV3_9AnPxq6
zsdi1diH&>(%S;e(S<!ups7ORG!j814g<YC9zU?2@k#tDElYXH~Lom(KKA$^ivnS)o
z0HvtbyDsfX$L7I|FS26u9`F1X^n9$beKC)1?6;;`pH5giS>PVF!_0Y;%gp4L3IS!Z
z8~vv5?#B+2?&E{utBin+d30*oEJVA{W=Pli?4hry<!M7?s*e(J3{1T<!&eqZ|Lh=N
zz$!y>?0lEX3V4h65j6&-jBov&RKZ1z(D~d3_vaN>bajygAt>7X`6XReOJ<)08Fd->
z*6)c1-EDlXXXg)ks6}?XRpO%Z%D?UEoWo~2-}Bk-&FRFY>3I^KdjIdLaVQ7)a^kw^
z(z6V!`JPd0{HVgj`C?iSXlkObHKgBMcgXE?P@AL59$&IIH7473d3{#yM9SOu`*R`_
zG*#S;kPA;ihAHr_V6{{`JKE5sjHUqMm0<$ZRgGbV)o+7y8ng088t<c^B5;J1(^iRN
zK#NKy${=tl1-YDdj=I}Hu9VD2zVg2x@8?qTC@ao0ovI8`>V4u0Xsv&9uJKUUb&q3M
z<Z>Io^7V+bE!SeGW$$(S>HO4GnuEzv%V>AONZde;q(h<}wV+MMw%t;U)#wQ2AtMW|
zER=M7e`fG^%FH3wQmy$x{Xt|P%M1^zVRpT^#N1VHk*9!4TaW(j1K{l5t1;8d6<!3}
zJKotDahUP_3Uh46J(a8TLEiqWK;4O!<&lg*g@>Io?l9`gUBb=jE8JHWRM&^02Tp?J
zMlCjzHlm6inQ4ip-EmElsw5Pa&KoWq7L)Kv>Ro6W)OV%^TWNPgKw>puD^RewP*^7a
zkO#P_8*x1(;djuYSbe&8ws4Bud+p|aOZSg{3#vv!M8JJ_UrqGD#2rfb1Or1&NXDo)
zHteA9MZ^ssv)^5z4S%-mdDbgm-(O8*ujE&J8P3+h=60RaJ-`Hwy?2M*=RmHyaBp#Q
zz>3SQ^Wv8+cjwlbx<o~<wU1R`ki7i$#o6quRSRpeX=4qqyRoTFKei}I?`!Ak1qs!N
zCWmh!)y>=%gTAcck*wESp(9I@`?4rjk?SdCKSe)i*ld$Kdse)C!<$}T-<Yj~(Yn6N
zffpmG62Jq!8>#ezT)jP9VC_1sdk{tPiVx-Yj#-nJoI};mHy}wSrRIRIjxdwb3``mq
z3zFq}RTJhRg8shZL+Y!$J`yf|TX+7#pOe!kRTo<*cW5i6IArT<qC?o?2S!N2u`bjP
z)%4=?5Khoid$AfDI&1U2+GEsGOF_#AqtpH_FQh;6g5b&4FZ)YDE<0U+<0ZJOshZal
zS<Rjq7H=gMD{9Zfx~u>X>%&{Bpm&oAnmB4sapDNoQJc>yrU;-_EaErj+HLkmn{^O8
zfwTF?f*>Rf|B^a&I5bGoSYLJF`T+PNAZz*%;u<eMj4r%^clFTk*%e`KI8`;r{cY=7
zrc<HUa<4OQv<kPeha#iijHi1u9fe^-`Jvq)rBF_pEf4SBrs0^p%EOX>=2ot6)`j_k
zt>28s-P{eym|U~>ZWV-Ni^HQXpJQPBq!bYeZg3}#vds-k7B|eL^QwHxbz7|lL6se(
zG6)0>@>92|udI%iPLm{gnjeWQKOU-^%_!n)^z5|vdv}-mAiafJ=)xQ40Hy(cfVTBG
zSdmqU8faM(1HH|uQ+rCNin54(*P+wy)oK9zyyh48tM&E-6<LX89}uj(C=m4Gn+^Ib
z3?$(fh=0(2RZ$o)j0vLJ6`Xka@$eVGoRN02e(L6_KCVB(E+5qk9jO^iY5{IRYU}hr
zh5f$g8s<Z*EzvO#+0&6f-x#v5|FwhU^Dne_7#JTONuwXMp+!sh|L+4%@N)E>N|;N_
zcu21LX375^6cpO=GeujcSS91!J0<Mti1iOvCrG<u-gOJ*-(tKqwCwm64BFC)ON67T
z*TO#mv~*2PweyP0ue1G>h5uXwDVZmrotjo+sbL2slQgpZ=g-copr^zS|KtS6_^<8y
zFAb;hDViy0K6TJ;s%u4YpZ_i3cXrP24JvES8OG!hJ0xE0IOlW{Q;H3%Fkuq_W$KRm
zr|9pSJ1=}WDzIzMoK>9zL8npZEBx(W7{^d4&UiNAMD&h7XXi8}&(d-Karo!`^CrN`
zaHoaQ)2Dwf@&8?$|E1Oc?E?Txp<9?Xff;qDlVnaR*cX2q8sjIkg3>{wtYOXXupWR`
zqh;?J3qmF7NAGO$kf?{_?O|hN@jC{Cgi?;BFNWu2<ApAud5cI?s8Xa&Kx2c(>)x`<
zt0T#$+;;l|O^>Mq+`h}c?zR7&e^mGnh?_h+n^e;Q7J$MX`{y3QO;l<jL0W%OwtcbY
zbrkzCsP+lHJ;BBBm5}%iVjvIG(qCb)p2!a;Ylv-Kd(>$W`lc$VcAYMWn1qu9%r9E7
zH{o*IEWV%fl&J3>G417X2TdhB=ojA&{Nn~voI_yJv4rn{aQZ8V$E{{XpQmfvzotmV
zsK)lROgwB9zVeGlQ8Vqmaf0ve+-b3Cpih2O(Ec)!1E-N{u>-OgWnh%4)9A!)vqP}b
zuH7PlvkMjd9@Ra;RiX{}7Mu9x`l#7guxfX(`I_lvUSG`9IQ4+Tdi~ORc$3)W_%|*I
zKgQOrGh*ufwlY8Z+f~AL@ZI4Ixfnh^d}2NA+1L|9RJ4p4hlm;#5x6N}{NhVrkij3b
z(+hj7)5C3hBPT)I@Au;~nyx=1Mw*pwQyd4z6PEmbZQHFc_!bH0u)?<ok8~;6g{s`;
zZjW7!IjCG`T3_VVzqcPu7%Mn|7`g)JEg4OjiBv|k7ZeXhUX=x1?jV})bw$;$Vo}5Q
z(4#%^-N}Z1G1@(`ph|JMd{HlVm*lQvZMy7>-=J2ck$W1~(aMQU#czq-d(W%j>ftli
zj*~6iC=Xjp7_^0<mwh{gIG~pc1}y6%7k8q9**!*EZ;PISjZ7hz$|4uN%0WzaAD}xf
za*ZDWfU-1)F)x#e2)PI`nM_gwrPv^$UAQ-+<!Q=;D#WF6?S6y19T)LTT+r@utfBcj
z?_jA<Q(cPbrTW)Uuc{QHdtu=4%+TPruwh?qV*KjFjH~87^D7mRk#xbDjAzdtORA+d
zpdY|ro$fe+KthEW4PR>Ph|LipI_2!on&1^LL4!Jh0t)bImx~J2=;`wup1qX1Tinbh
zu&zm8+Wbw!k<d+@Gfgu4cmVOTKA48lpZB)QSUV<f<&ppP?Z34E;8m&yxAp5Yf^i<^
z-ObBTPtOGO<M-1b)2huvi&<8Z$WJSnrsr)}hs4C!zu@hLQzM7v#m*y1;?QqbF*_Sf
zbhHu(>E_;ofM5riWlRV1m#a1F@J0uZ0O<{{awZ+C1LG!mO6q<mtBLgv$%4&Ka;}g$
zB@igMq!e1VfJW2jxdu%#wk_&}PrQKb_2y@@w@LuT8}Hu>m6u*n`zE)U{cq(;P)``5
zGvey-s0{pjx>BiYx{ixWgiOHfphfC5eP71G^GGCK`~67K^4)DKa(_EUfPj{^cemI%
zYc`<e@~v3|@%y|#-B9gQGSsg(inx#zGWll1RH2**biO-r6Z4$GgOcyAU^X=DHkFq?
z2~9w_RvI>bYb%Ytcj0Au_U_4SyX0+(Wa7E!0j)1!amJ?G<=S%m3uZxXoo*a2o2}af
z;t?&4BzKM0H$?`I;&9=AXw?(50*yaRn?S_Ky9ye-;*9#my%^M96AW^J*<Nm}(4a2E
zfzsD5*<7YglA7?Dn;n}L&kMeMilyt5{XF4LOyXq))<nE#MBIzeC5^+Cs=5k&V|8S9
zBr%wk03=Tgb=yq1+j)1sg;HOM=*~h2nDBzSKW1)#?ev!mu7n^Cx3&(+Ab_!y3DLT(
zg;(i%SyNtHz5ujnzZ?g&kXlgM9;tbeA?(o;iVIi4Dq3iBUImjs#DCUvD``?s)8*RT
zH`#8&^Mjnc!MnE};aj1r(>5`pymq^GmR;XAr!d|~ndSnwJ&)#nmKGXHe08S89kRRa
z+|DRHkkh23+db&pdU;q9J;~@*EQ#DXJx@7%aj>y6zREbO#`JQD7cC~hz~J~EVuNPP
z4(&c8!&YAWc%?&Z@63e^pG4k{it;>H0w7-)ZyOFVJ}Dxh4H&HU2)D}R+laP9fa^9v
zW6RZ+6D7ky@>u#yf5yh7h&GdN@x_GVR~y~Z;|#4W=hv{rYOF`5g=KsC=k!i+I9CBX
zEv>rNb^WsqbHYT<mzSRLh1~@t`81!+b`g?-^Mn$&8edeuJ$im`t8A(idc_$pnLVVr
z!2J*H7Ao>kgbaPMp*?@#^4>BeZJ~ax5qC_>sNGF}avH26a_m?9_H@QYHBGcX0x~qu
zw=<Lt(%V{5{6|8PL)T$v-6ja==j+7bT8}mFbgRy6l|Q}H-QvmRa=yF4(Atzz6G1~;
zC=q~5W#~zxBs#1U?`99P(mo35@(ooCH(G{~8Z@!q$>LkA{fOgvUZ_<vqAb+xA(rsH
zu#+8^9y~y{4e!H0Nn_$7(r-8<V<nnUJ&3Xp9ih54s!gDAqu{lkDo~qof%5V2X^h~-
zceDLUi!mOXijO=EEJTAIjNjR(fZ(mgaC(6g)*&7MJ(et-Qa{pj*<brPe*8y%{v74k
zqYxP;@)!^ZxR1AnGPX8QnAsGo4@wO?OBvE1@bQN)46(E}%j~UO2t!>)mCLuR?1T#*
z!pYZ)o0Fu4YwF{jmwNW#W4d0tCQTY+*MP_RAo$Vb69*f)<fioMEeJzOE~a#szs!@1
z1KVDF{F6&#`rV^tJi2Gjly+!~m%4hw3*4j(A^0JKOAaFOLMfo9O35HgRZ5XL7u6vL
zH$J6ERuXcDj4+h+XH6FOV#$5eEImD~AN<GCS)s%-ySsoYPP&#<kJF0;0g6(YjjLF?
zaL{hXN*sH>li%KCRUx*?G0^O~mA7!vu_gG4VoyZv-n*#1%DCPkD*c-8cr7=Wx)rDK
zIRv!kQ}wUhWLBd!K7Zr5_xKadAcHQ^wRcVaiYh`}8nD6%R{G)Z>Vi2l+?&o2?Vb1i
zTcIcx-y_U1MQ6Xy+WM)2-EVT5f5_6Wz1;1MT+-7lh@e@ko955QIz3q<nBaAbm|#ob
z&onJ6Oo<L_qM>1Fn&IQmw&D0HT{Z`ODCR&-x{q3(o{AhG-Xs+nWufg%5cSLMS~UtC
zq0mQ8uSjZ4-Y><Y;5g=%I;$3@zAm+~H>k+;)`tn2X-n+<)|Lb;GV}?|2}KYHQMg`+
z!L;}A?(L>xm5HeuBhU57gAdBz6ys-ScEj_dIcg2W(^!+dR5TEeMQu3mszf$66}TFJ
zyqfZR7VSt!ZE^hYI<mI6KTca%zf-^69WTzC@0bjqw=iDfSs&Xl^z<H-kv50uFp*TJ
zyvVLzs~9DFo@uPT4yTo6OiYwAg-zKoqpR;zkls+(Rto_zk@%rojFc3XfFbbQ+kf<_
zT&!VM`PjUe-8{=)|7yjHUG%bPhAo}=hou7iRz=c9kaB#59=!PX1;zN`dIe3ST?;->
z=4)7VD|&j9h<Ib#zH0LTU8wDp6_Jl?&O~GnDAz{DO|AavZhRajdf!ZU(oLnRG)mcJ
zEZl5r%gA$bcs1HEz8>k8NWeod2EM<WJ4fsZ9z~=I&&0OCa)~K2L_b7Hn|0!a*G(JH
z^3oFUX&ZblD()nbWlc#aSLGt$21G3lOlw4Oux<>%tsQdMxl(j}g!Pt5o3Hn;*6obW
z%ErIaDWmUsZYE3wa)2mltIh}!hz>o%dSzCcY>t1*KB#kk35+ZbmM#=9Mhera=kS;@
z1X`p-gLs-C9CQusMDV@cGx~TX*FO_34DW}v$AYjCg<$}oTHvclvqFDdpl!$6Tp24E
zbXAfGdsPkt>ttoUFVf}1N9n6U@z|2DGE*lD&|zA3kjROMT3KFD5up+RT&Dv|HnHmd
zZH(;!(MC6qee7%8LCF9yM$@=|Zf=GSmnh&b@y!$js}r!_we)`&yM;|kHO6}$7mC9U
zhF|V4Eu8P7PKTda7%0gXHLBB!eNadAMY(#qCGvK|!IHY1c<RQefysB5X|Yyi2g5xH
z)x9G?6a2tkWd7XV3$M3Z2txB}OGutrffwY*<ZMECQ&Vl#d=KG(SU4@d#p=2}(-ytp
zN{s=t@Z~vLPGoA!Jc^gG8%AHL@?;N*;AY`2jLZUKU2cIuRmVWD?-K-Bb&(luf48jY
z1ns$0!DI)Jb`O#7Xy*)89Vxovjvv_$q-||6TGP^^gSg`L@-dSv--Fo~i8xL=#a5wY
z(W9?<2r>$PMD5y*y+0S<>%YtPW4Rjc9D2r<GTcb9&AQP8ZZ#Rx7e80Tm3)S;aM!g|
z05xV|H`iMBZ({&h65?6PwwxkB2<&r#HopkXwMB_v{_t=f9tZMG)Ti6;+&n6sqg_GC
z*^2Uxv%UI1*an3H27ac8)nb2pvmZdrA2dfY`Fq89!~$2Vo6D4kcf~L*D_uL!vbdzU
zJ~I(oY7X@Dts+_L#*0_Tpz3-^j1+RI>Di-fokJ_Da4mf=NT?x=e#D%I5`%PAw`1pS
zSQ;<s9Su{QshyMkIk@ulW*NWB-2WzoRb0&*PH@Pp2L?`p=>(D1H}ar(mY34%<{I{Z
z?`<{blo^S>?)&B^d!GX~uVa>NM3$91%3S(rAZq3Mr!}`5V5cnl=^a<ez&i)$28E&C
z+x~FSbNynUjrrx<!}33oR&8*yf0SnpAum4ufWNG=5!pw##ro8m6l`a$X~ijl2RUW|
za_5Kmwu9=EDYznHce@WKG06q{da|Qb)?a#dsDI6-e#5u6Wzj(DQCUIm#gLV973@10
z4x(Ryh*`D_Igk$h#@q9=sA4bDCO;pr*r3K|xAP4H0J>8fz_q_0NAmZnW=S?78kyD8
zTHbjE?IfX$*-1kWTZ+Pe1;Hqp=@{El26tnIYDD=x#@O59?h%{WHM+X-!7Z1L>A`i*
zg+|1LngW(Z{7Qh#uHV9hyD0}tH#@VNxr21M@Un)REBT}OuOj;em(A=3?H+^79mAp<
zX@YXNzft{Z*SBz&nwmfgZrf4su2b<v$?Fm=F0ZFJ*=N^r%)Fufd3|{IlY3sn@@JF{
z{;ju^i-}iW&uZp9^MAR#ha0LrwQ;%`1p`XGj&3Ybr>s(T>l6#{B(=UPzL!d~R=wZ~
z4{E$MP`LG<ae&~Bc_OSxaMQBGN2%$WZt3zfFEp#!-MV+KxR;Q3Y4klfD?2DJ-Qxte
zHU)2Il;dh65mQ^|D^o?rnwOe$xtg(f(9KTVV~5bIWx|+jE%SMoQYLmH6GK5NwMUQ8
z<8xoBktsUgZ`Qaqhdy|mt63MiZNf44If$i-^Sm(WURY~j?nZ2S+E^d#a~jJ!-VHGg
zs`xSbW6EWNcR3~i>g;mXYIboS;bT}O;)706Up}VhhlS2-g@FOaTgns$rqA=WFq+bE
zbFbh~@yhN_aQ5pLF*gT_({R$Y#WmOwNtiFB+I)GbVr?$#Oukksemp|04OtAC6Fb2z
zc*UyfU+0_c`>T)e>+n4hDLT&?25Q>9bw%aCvQ}Ry`7aZ~s4cTjw)w#M7he2)8vLiy
zFfi!w{-Pg@sJH(@D{mg={ILn+|G)ttH1WYwEf?ITHbt+ZLw`^TzF$o`1~Mj3X{2ky
z(jt>*X$1d;MKIc=DmFdPz-7d47?eAQR7u$#tkB+^Iqm<8p^lG!{0AKK@n07HzNh*B
z5u^Mk?j=uE;!#|VG|+bDs0dPS`}04?xUyjuYC=0!7j6Y4<IQCj0JfmX(#EMWgAHv;
z|9#})-=k{9{(Ad4d1Yi^1XmsG3SlMw+YvBOg8d9`3^r~M)&?{Wqve}D^`-yYOjp@7
zDg7Dx-ci^O{$ApLptb%}hp-*^<^OxwrA8;vAP-{Kfqsu3`a{BCS4=r;>+lL$nF_*6
z8P*fCYA>Fcx)Sm5DU5M~QF?LL6#<mo>Ou@ZmYUGroW0=oa~y|#v^y!oz0|=10G@Zb
zV(}`?e)@!?=0*K$+@wRSyp4?Rzd?i~OaIWP5!IdMv&D92T+tcno|Ak3b7SLst}TG5
zTWquGAM@^?JC9}xk2t0qCsxFzij`0f<yUtmbPl(cT4`^>%ey^rk7yGIseYMEF$OkR
z_6pi)o|e|O0<2iq9atmFO~o%4d&J-~<0cV(i5VfesTOjY=a#wk4ZOVCl{XO)o%?$y
zL7CxAX4IqyMfTxK>^jE!{1&mER~d;d={4s~hA`9SHr5Zr8}QIecfm}_)<a^I()Q1u
zv9ARX&rHXzd0Mn%KM*NJX<2P;z&GK}oI!Ik*2+r@b8uwkP8{AsUJ}{nTeKI)mg6VB
zf^~`Lk%rXVx>X3GriDv8*gxWHGZ6J;#%`PQz_gk{PRZ>^ii-<Y_i^u#%WFTAyDmE~
zlS{nHy>9>ujp4N>w$fYzk(SG2h=#*7#0hrbD`n%0&(z8LZ1_}rCK)=}?N)GneYoyF
zi$Fj#Q0~%N`1$>ZjY)Nr2dnX1LBAx6t~O#MOQ}0PKDA2Q(T;x7uNNkJaj;f`GNdLT
zsrgQ9a@N#tH&&I<=a>Gc=BZL%v5hs_{RgPk?m^bv7yys(PWa~{1LYZv*70<wH(mI{
z86e*I{k+|2G*xF;VR?ZuHqwkiq<Er1uy;d&N+}m^W-qP_aqb%#1SIlW(^Cxnu05#v
zZM}*8^iQ&R`yAWKqQEsC%A%yCoKBR2=dtGF`IBWnye(;Q?~f6|KIFVkVO-fOTcd%M
zii<@leQnxryjG61pNXnj;gIYP;hzwt)E~jze!JPX_rBI_39Y9*J)IQyPg=-x=pBtF
z&g*kdB`>fJb|8nQ)=J35-Nf9x4!#wYWfv88*x2%(!~q8GCQIxfsH<PLNoKwB@L9aU
zB<(p@94l9Y-gz>O`7vGa>s}x=)<l0KW=DaphOu|ZQZDezUwGh_IlT`ai^*OupFV#U
z4{HMJCDnOtf=$h<u}i(v3M_21AGox>H0PqBB`7IJRoh>#XwF93Z{p+}$f{5*ja)B8
zjGG>D;j`?le|G3vf!&pC4(iuvHgn!B1dL&`t+haFe81>+alX)<ZExMSoeQoz`e(qQ
z8W%F(wg=FW;?MKEJVKn-<cTiGqlGJ_h0Pu&mj^4DA<HIjqyHdpBz7Hgc5@`nMc_Z6
zpyB^X6qJGG9c2fAy$2=-BZt`p0R*KMuQ<SUyUONGBKdw=PpCP$wzd<z+Lz<CE1q7Q
zY<1s6?ag}ARxt`!y^T|(_jlH)27{ib&DNkh*!7JPgT}M?BBhl|)Ggl-s9a(uba3jc
zA@oN0awX02e@THd{vQg&|ITT6LL1h@ayydQY~B@yV0^4~VAAk$?8RqL@Y)?U*J9kN
z(Av74DHrKvbhM$E#iCE!EL*9`jy2;+fa{IgqRD=~?NZEe1F-g{H!WCMrVHEurXW??
z!(GsnFlXb}QURN}mH3LE*L1I4V#^dY${lU+O{k~a(e}s0y+T4P19LYjbR+zRPM_wa
z9S)3K3jB)z>HQ@@n*Sz1Lqo|bH<tF_0s<E5|1hB1Y4XWefj6DsgeTic;0%PNV@_fT
z>_U$kG^+g7Wq+u?<R1tR$yM^c{7}!%Qu_8a&7QB0xWd;vWP!?2L|sjlMR@RF0*_Sx
zmBo4vxfuLxpZI7jjobPr*N!kRDSu$$Vsg`f{OE&C4A;;AGrmF)2aEQbBa&%V{gi~%
zp~SfC1Y?emD>-1+P%}N+cxX;kX4~)U*%i`z)O%4KzKu*Zj%HEw(`&mX10`Kazfh3;
zl!HUKCbM(tW1E+Xq;?+7ExWHtd`fkhxb*p~<wbRgZTz640XLzicEr`S0RO?_fE4XE
zCY-(b-f7-9mffN<**N*+@1nvDXsk$7i?uS+mM%Pk>9>pD41MY5)klt?EWxc>mdni!
zMOyNrb-XbLe6IVzan6_+&UlO7D0}Td+uMR(Mf`Bx@4Ut>;Nlk8^`Gd&`-?b!&b22k
zzxL%|^>ci*UfD-+Cf8UHmN5%|rmIOf_-JiO#JzeIO`ZF2Xbve(81z#RdeAqxETq*5
zh^yw(6isiBk9#X-7w#OqP3c?;Lo7r>6?kK}CUB;Rhxpv=eG!6dlWsodnT8(6Nd)*+
zTk%<9!UT0GyyfAl9UY3vV`^hXa9-YoIs#}vCnR8gBEL-9Bqhy&{-cf*jZSpoCqxvE
z>jp@EZR_B*nS4=kag!f=_e3sMZ|}lZjv9HP#<qr+Q~F77A(yzI#c-u?>AJVNsV-AQ
z66t(TSz?237aVhj#tqpwc8O>|vLV!$U%Z%MK%<^Vv}=gbOxBtM0xD)Awuy3L?s7Al
z=*yR8BVVNVcPGnD+S1Cy)fWx=Ul0i@a!>!6Y~M?B7)|<5B41$R_E6E#x)6^sXtp;t
zJaDkK7)g+ARewJ?N%@%U%V!&ghPIz2?8D^d8SjlX=?Gl0Jl4^f>WVdb@J<$X$uu5c
zd%Hf{Ar*eNLo`4($~84P)Z4Wb7x&G`Aw7MpCK>IvW8wpFkwin~``2si`;J8=8gzJ7
z_LIF?Z?NhTtoq;QL0&ceextVYIe+*YQq04edwr@RN#-rMu2Gz=pp#B~`Ddzc2$D#R
zw4iuk#7TZbBNP<u=fyR%w>JQo`G}3(3n+f+;{*Y3&tx|0lrm`+oR&9^5$|U<o%QX;
zr7*QEjgBbOKw_^?YqZY+^fUHn57P#ZN<IZ*6w4LHSU*u?vX1p|9g31nbeUge!F?89
zXOQ)w-$cNFFaj##@aCgukg*bT;=sW7ioUu}=z2TmnmWz7F7IC22>Fz0@jmX$$c&LV
zRW@(u__|Kv9#BBdz;jT<?aJY6vjNOM+>8uC`@au&@JSC3u*0=&a2V|#$*vLO+4m?6
zYqQ6{huCEjy{bzhlcLvwXz)hy^e-kV4J)dMvyISYsD6&oXwaeB9nmFFGalg}v^qc{
z3*56USLpxOSm)vu`fXf3Nhx2avoy#3J&`AToW3*L9r%oBWt?yYVK^PFESlQ9%hF*>
z@Zoidrg^bXW?v_{>gcS7(vr^6%-}>(#239!t0aI{4aowQ15arG&2^%w(Xt8jRKd!i
zQ7ljRk6v)b`n{asGtvoM4n2wt?H)pW(<H=V=lSAfNev;^c?4sp<lYXkc@IH0A+Y%y
z6S_~UF`2-_J<f1F%oWy_SoJz=c`m5?@gZ$rGWBE+@HeEc3uF5>uqWP{-ZLJN8S8om
z-YsYs+CS2nHuHXBlU#+3@Ys?cR*GmdPy^6w^=7u(zwT|VgQf%vJvn+U+8gKVc5n5S
zcCOD*nkUG`G<<8KJXIO&fs63%7ZvB7@!T?3&|hym6smYC=@F>0e;!KqR6>%5QE5hG
z5K(UKC|g*;KnMidS=2-_CHN4$qwVeNn^qlGP%Un0lK(f{DS}?-&1rp4c~rmiAuC9N
zkzvcdYEpA`g#w@ZRp23xmO*Zfr)!PZ->pWy8jBp!>-M6mq)~cIf6hSM^|92SD(tP>
zPzD0g&>^0$5;o;JYg3`xcCi<#5GGJM#Um3fYlBA`KBB29dtPf(bOZL-K#jG%^tWE!
z3{FzAHo|cyIyF}_seqS(eG9^}gF*Qyv%?8k`O8<_CC=?D1hm!9p7P`wU;A`lhxlf!
zys~*g?A0c|g~4{3UL9fI_L|2n)~2`p<Xbw8xqnOafsgab>QZ(gSL?!x3OL*UMuWqG
z3W-EWVbLZuK6=99d2eDcEN>Wwh8iTmSPVgtY;^!STmqfTtOP{^PrbAqM^(9A$z+ny
z^4LvU=>7ge4R@;dZu?4X_|g5~v+@|#dLEG%q_?pVod&V{P;z#NMP5Cw(#g0vpi%#{
zt~JWsIO7w}-B&e#=$eg-Lc{BK*Vih3F-yl8J9IR%Ki)rm7p_o@|M_Bc#tZyBHpZAe
zP`t823|4ikT$sU<dVV03e?Gvk6zG|~R0B!O7ZE?~s|Xr75U`u~rWVGJr(xrd6>IT>
zE%T!*{Zr7_|0e6<H(vkwzsGt+*UO4ZIR`5kLz7siouwXRJ-MWs=&8zaPF0tK-i}ht
zwn<Ve$B1T*6|sxAT##QVX2%E~F{)_XzwsJ~XY(jCeqYHV13-Vpv1F(#`~cHjLRSt0
zl{*a@G|MByS;%>&(ivz+&5kploez0B-<|Ebsc+(s17{2a{12OUp5)>9?X+=5Cc9+u
zD8519_-u`gV>U{<S))+bi~D8Na?jIwS1SF-F4Wptr-vxNbTI`;&<{q@oNjY>-=E!3
z@)88}aZn!x_Fd4Uj5{6cDOt|Qr{>#Sw^HkNMEwXLD{Xs;*F&X`3Zj9w*}4*x>yz)<
zjZ;Yd+GhgZg6J6k(2CzM5Pk;opLP}|>`}wP5$e@;+|28PsRCZ!UR8c@>T2@M)HI?n
z8%Mv=8UzbC1YK_64+R>En-w1~G@pn&y`TJZD^p8w3$SA9^OVh~+vqk$vm9XGn5=oA
zkOnk<%zZN3sNoWvAtYJcy}O|TD{PXGykhw~6~9X9Y}mXPiPArAB&Fn+L{%1??6xtb
zzjs~R8?g}&Q}LTA-gKG%qfI%!thMy{6Ix@u9l9a@mo5hb$@bqC)cm&<9{&kVhyiSM
zKDxC@-Cs5T70Dc{O^}~qsjg%u<Km}_4;$6C;xzq*Jg6tze<Uo3H$Xd83)z=FTQ1F7
zx`Al=kSyo?$MR1>f{&Rl-vFxwsvK3<!?6FQ3A)E!m41u<^?wu|{U;ppZ$2e``f+40
zvREL?`(S<NuO{iIWQb-$XG*^3h}{qx9xWZr5NnPwtZ8+pBkxB4;u5iEk0?*bcwRW5
zg*vIHQ48+>H&vnTNXIM8T{yF@3jiIQ8qiyhK-kefzQ#}hNNN3X@Cw$E&R26x@_$Zk
z^k25>ctVcw>OShg0X8|U)9~RB%EQ2jN~oQR@u-_dFXxv9WF$kck=;a$Sal~JyVa9w
z$d4#<M=4i@EN0zQKanT6pk3~{=_o&=Hoi<rA+L!L#nr=E{V^O(0S|3tt1C*-NBOo;
z(qv-cn-9e;u@XA7mNAH5_?BsZ*x&vtqe5g5BwscJLoZv&rFS~Qud(qJkGTw4MRqhD
zZFntRxp9q!i4#<<HHa&vklmD#knMcol0#egJA2mrSvMdDC)_(76mdEsz!5Zw*5c^-
zt<IgM)E~h7_$wM?)YJOA7pn7X*RcZ)P8Brf#d9w3E%NP|lpNqtRE_I<d1@ua_Ke{H
zhRQs(4{`H!s#WGrgA)NZTH|@9?%(jk7uM#~1lbMs0TFTmS_|J^1T=sl1mPec_TjyA
z*xNm56;W@lO}0&5gjbMf`LAP;=%443zn-I2LdpP4xgcdgI6SZ|ErVJJRyHK@Mo>Ub
zh6h^T1s9v{T@2oI0OC^2pIJ$-x<C&OHcrf4rY)XVX<R-a2S@U?IN+KOtS?$%_LdpO
z>b8jA9FQegTp(G)QT33lU=S!)(u;o9Z`g|_gu488J^oO>Q75h<?=3B@`Mwd|KljTo
zxFbFZiugo}RNsF%F2$r8tNnx1&<VCJZGUXRt(SKqT^~Oj$h;XopgbHUz<0$;d2rWj
zyQ9~xQYk89KC+`Q)R1NIMUrCE%N$k#*9s7bIoRr*g8!g4rUasl)ZZn&uBk&D%%XOP
zG50OCnHU3G*i5LJjv?`s^jg_%z_}lU?{ZuF;)D@jl;zotps3QM9s%@n3I0<W9NDsA
z(Ym#<M5a?Ew#Q9hEq)z4e+_FXB3WC<83|x39~AK4m)i=5fz<|o@mz4KyGV$CZ+R?-
zYvL>C6S}sxdao>Ix<e*zR_=k!)g&(0N~{BR8>->%o3YT)mT=7lS@tck&09tJ$d?AX
zESi!vNJ@S5v%W<bQygNY-E45A41N)De{L^yXY?T@d}w+rVM3ZtPS4M2FaA!H2YBl6
zIBifuEFU(-*%2cMh2XJ{_3j&ca0|DE>Kfj@*cUm|Ha$Nv=Cxs*C3HIE54!)2&+At>
z5`@lY)0-lae~^Bw?@^I$vVS=9tExHiRx$$&L$$cxVWy==+FU|f(esVslvEK9Eb2E+
zZ58}7fGCv@aH>A&qHpo`P7F@bIJ%8K1!)b1p%-{a3K$g9yky+kdt@GfDQ)C(#0?ko
z|C!2iuz1Brx<;=-OW^D%dS)0pSQDMaA}1Z#iCf_!=`I8v?Wl2*q|Ug>4L)y49#Ldw
z(j1%7iTXaI#6k=TUdk*j$OZIHGi`0n5Qg6@ZD@Sf_O7i80IlM)ss^1QMwe&#M?V{b
z5!`G;!VQ*-$(Vl@<uFjh>w#N=f$90cmhxptcdJ8CVD+tD@>|)I71hBifVs~WIM!lF
zJV55_OOMC1YQy4q8C(SMsQvLe1gGVzV{1rj>o;LPo6NytCUd=kw#TsM{ce&rAh9WW
z7G}Xdy~UF!$2>!I@3bs9`)%xb=Gi3q5y#%9E`GyFVk5z4P!Vb{oc|~bV!!CL<i(|u
zx>h`2<uH=&Uo|wz`@>Jc65Qpf4Ce01JHaH&i^4e*WKk5;rx9q?$aZDdgj4-mh~4BJ
zElazB^WXMYk@u>Z&UA_14=-GfZcGbOKy8TCdZughDNa`Y4&7p^9MtJM;3a<-%&KNB
zHi9agt*y(0H!|$_&ln75i33S)d)ET-M?<5iQOc}D1y0Q>2E2|_axyTJ@o5=Gooum_
zK8A6c;rVYw5t<QaxkU>7ECi5+3y;-7w~Ed1Zen;onf&1f<ry9^Nd)@cP;A5d0e80n
z$g`g;U$cD{qKND@V{K;f@rT|3azD2+NeHebT?9x{EwIJW8L!TpVn5DPIuZhe(hxY5
zaP-BH3AVxe-`#aWNUH<{g-z7*)m8$UqL}mnv4SZ$RCOQr8v{>wGv-gh_=MHiZv3pX
zZxLbaZXYb2npO4gk^S)|oX*LfQmD4j#t4Pka(hsbM8ItiZEU|8;TN=!OWfCkT!3aS
zr#&|!k&TE#CUaOhM+-HLD|;|4qLF@SBYQnUH)X|?IX-{++<oJ@o#E)FemyD5tTDSV
zMCJYOPq?&B6QkKt4$PLxH^L$s3ZC|NT^@gBFVN}EP0~w(o*zH(^^?*3F-n!2=N09{
zHkahqQwBR%vd=;(g-8ek0FYVg!geHCZc^M%W;*&D2u$oVRp96syxLpC_U47fNm&a+
zdyQ0zi1I^(3uuXdZxuKzCwY)&_yx3I*DuSryhsz3JdU9h4UV~{`3925d+zb2I65MS
zHAl9Pn7lVNzUfhe?i)b2fp>6GT7JZ76uH5;!pZl77!`_~ZsGhybkNFJKg!9T1X^It
z>Yv@ZqxQQbrFu6X^5ANC_~L9ubccvQdOO%en(GT6(M!PFh{x|(%ynO4(-xi4QWj76
zJ*Cum{X*LJ$jYmxg%=h}FAoEB6v2R|$WO~&Fk#U&BQeBb+Pop!-7wEXYj*tbeL8W7
z?&hYLJ@v^uqRpuIG>=5`ufj4_BB=eX3SI=TG^tL^v~(sR?}yIoc0S&B9Ou<lWw^a%
zU2%cv)q(Qo{oy2OUV>gHog2YlDr4%E59;zWl4dAd466Ort#dUfw%6Dp)cqo&P3c)}
zz`Sp<mFD3j78Zo0+1aK&iPw^Ae|5$vQzV@<0vwIK&Uwg0>)<!Wt(hV&_KCZi$5MU-
zo}6^-ZYo(C0~fvkKOqTe%9VJ2I=HL&8I(jmv`cMf=_V5jswjRRpYzoZn^S_Di;W8^
zrZaLa(&S6pl)AlE0cVYN1J*^^RVI=uojbHe&GnDIcT?+snI<_k^1W2qDB$WR_-x6)
z;D=eb9^g!FI7NPQEfmVy{eSWH)<JD`Z@X}vQXEQgD8X9XU0O(SEAA9`m*CWJE5$XX
zxTa`uiaQjy1b0c$1m~pB^Lx)9-^@4Xk8|F4X3sFdn(Vz~udMsJulu@yK!II@PwQ#{
zC?cSSzHxyi@Mj~d4<JV;|9Loh!~4KROWcj)-VMcC9VPRKQ=U=D7htH_UKOe0U9m)O
zO*OxU>wJR0)QtfqCooe|`nXbg@|>L0Wo?aNfrQR@$}IdEb!4arnWi7XJ*q9Cd>d%n
z+thoT8ZmP$`%WML9x1}`y-&Wdhlc;}$-`y(I_Kh3*L5Gxef@<GSdR^j0@-*3IXb4-
zoXIDx%8i;<Q_Z$<;&1#YrzN^zF@|NZ-{CpLZ}oGC<p(gl8M0i8hngat>GfC?)kh&a
zg~-Is1o%C<5Flcct&tEMG|UJ|j&Fk2m>1LYOKl=3(6=oCOSb}2aE*+5;E2N>@>TKq
z&F@C15Hy}{X^Hj&1#&=6f%0p@_)l5`+rBz;eJy?RdAy<FiAnYV5hCm)0Rizb1}fz|
z0Fj;jR7_^$eN$?XaNHiRYnKOt7XZl7Dr7Pb57#Rm`ZzgN8@I5`K;9Sv44(lv8qduL
zBQnQ#eCcqK!x`Nl>JZIc)hfiIM>;7NTS%aFI`1-TF5(O@Lvk)PF+}Gs#LPoNq|jmb
zuHHSbU+i-6Q&hiVcDRofD*I+{W<zJOe@It}HhxNY@C65+-ndnkV)0(qlvN%hY&C-K
z?5Ti7M6JWlE1O9u)MRv=qTxweWi*Vb?|Z+Zh<~FN;ezkE(Cf6L3!#&#2W~;1jQyLM
zuu|=xu|5WjAA!UaAF1fTcI-ce+n*3~%{;}t(sQsDj^hOIRGdIHh>Rz1Ft*jWha_Hb
zOHXmd!r64#fHLE0QvPF==1kQ;MTv}j+LK)2C;63f9-cr(!pef!?BjVV{f0B8-_o~r
zG)mUpmOHzqmqlp$v)xV32ql$B1%)!#r#t2yghURT+Z>uUy49*LraAw)MncV1tsPB*
zH63%BtBktS4XA$nlXbo|8E&wine9>rGFBohe<<}tTfBxsT&T&Q!}6TdtPb`*pH|rY
z&M0444T=Bs*Vz}SNEj`?5#pl5_?Qk3YWIm`WEPtZ`*|T&dx_&`m*(`TL41XoJf|LL
z>xe$UpZ3(Y#EiF@;A+DO&IAjN%weE%5^DFtX(@#~zmQQ!Pv14ITcNVeg@2C%!_)`|
z>a$IAG;N!wCQ)Xz^F1pJ4-#a5Z~Q9&RvptVADA1UqH4m`<a2s8!wbWU($vs;7RpMi
zUs|1&yJ}=@-tY$#U;~Kld8<64JRg|8*W$2^!f`fT(OZo+6xLg6svk)gyOLMUZt%-*
zON0L0?@3R9IvU5UMOKlpX|METcS<|P8O@`Tx_`eF9Ll1?3R2KM!-j5#KPOgA$#NGQ
zmHd7F$weT(4t18aFL8^3Kz<pk2Y#vT^YBT%$xBsPO2?($byQB;X^L}MD%d$5tanDR
z6WM9FyZ2XB$K8qrVwU7RaqZzc%R&tuK~c=AjPGh1W^<4wpjg>)WXVmZOnS*ja2Oi^
z+8?^Ojca-p?e&zlEx;98F`bwku=BfIBSdEJHA6wmmctM+5l;a=!kL}OZBdmI^SZ>R
z<R(OilTQ#9GMm`;=;7{))W@}8Ykogmh;fWMJc`Qo^AsQ{eMX|Xu04fEB!*6-v(EHp
zqgUVnIgQ=qzRk)+M&zjl)e$}JTL1;S6|^NVX}Ybch7MT$ZYpON2CUYHk*!#bd~(X4
zE7Ta=P5F6oTDy?k+Gw`p;6IXoGQiiH+=BTfv0QEyVOnf$`APG#4mv!4v^pNgOrz?K
z;9o7Tb86NiTQqJ$m#FT~9OcJ#DzB;DiknRxLo}HJv6M6SU(pkXg?b)N7#Y_%cgKMy
z3D}+3jHKtQe4+NRCVvW{eW!TcriiEo!zJOfiS2y4*u`dK`ulYo83y=X_Vl7iQi1!)
zu}23e12f9Mm!f@7;jFa9r`!>DL!g&Zs{0`=3T`Y{Qc`Nc=C`^N-E>!{8>!}LcTrea
zPb35GuaJP9#8njBoG}}#4T8cJ0ML*_URk2fo|XR5g`$t2O9|^`xLyzTzrG!0IdvIu
zI!jMcr-s^362VU+NOGgU{R7C@jXh7$Cuqq{ua;nVCC>Uvyo3VhoQtUDXpC(swsbif
z=6^0qrL!dIS1nB_hWE_P{}m5Od>@zj8)U{_ThsXF)%5gT<Scv9_aM=P-EnUNu79zX
ztCh%-yQi{?#pv}Ar-$Nmu-p_?gdzu@n={`@Lj>2X_+?Fa{8cM0>3h-^I~C`HC8HfM
zeIkuS{YKf;?~4`hIMIK=WS<_)bNx;A-20IxP$BV<?Oz<j?>|t?_J3mXA6WmXZKC~8
zZPWjQ2K-F?9?w>_N6U!+-u`1783dp@mikErd)QrVT$|xv`b+SA2*6mNUxJD+ndngt
zwx+`~`84UqbSeFRnK)993STy`M3htU)kXXl^@V`*FDD5T+&=vGFK-CG{zDYGC-EOX
z&*^{glK+kdKov^kGS(K&`25LY@cX~8=e>Ku1R^Y60^T*>(gduz8J<crY;ou$EwZ=d
zFI#HFpK>MsGZBBTCk?z}R5u(p$5LUiuc&A-QvLswOf9`6RUpmWSAC~r@kEH8pUunu
zKN!vEx5&I0NAaGJkN@1~|G}L6AE%w)##Yi5ad;&aq^_+w75#4qx0&oK@N}oN0$ULd
zfB{3^tvw1bB`fY(TY=!!{*hA?r>V*SR|$P_d~tQ~o475%GkpFa>oHURn?3Xvf^$oM
z0ui;CF{j#2NEFZMyzrHxH_{MSudxj3p$X+E;!~wvY`!uuvNy96;L;$Ut2;#SH!uD2
zPF^iEy)*4*xfQhAZKrm_sMK@S`fCMB+rgj{LeKFsM1p_B$ZL|f*k6Tq_Ums%r-cQB
zBRWGvC_U7g7|$ZW*;jf3b|;gP*2*NNCByTz`v(Ws6Ri|9W{Z<E7-;bK9n{*;PEd;+
zWj_%Uu2JngYQ!st^s81UK~LyH+U^$GmGnadqC3<(bYC!KNwj)SlbKR;j7jX-UmPbm
zs1`Wfb+LK9mI@}Ea=5^@f=h)ow@9@#*xnsEytCY+B;H-gE9!3!3c6`_2?{TMk!{}}
zjMch-u1m$)i0|9d785>M$rf}T&{j1y2nndO?C{_?hPJi^_|H#V^cSh#^6tV@F(+C1
zbvVX-BL4o9V8B@<HCA+BzW|~MGD3E&md}Y<66bAWnFkaeJ)_Q^&N{|RO_m<kcnT6v
zn(IBcRymqlXIm{s$|SutjE{DZb>P?j1)maD^kg&q%-4zsm|bKud^aa0uwzCgTE&Vr
z2z_IMPYOx-$O0wT7S52W_?p~}-!=VL2kxAT8!lH{1;{wCT8ORtzpMLMU9}$nh~R3S
zo#^cyg^WhK$<S1LyR;PhJzE&FVzh#1g;k&IkdiJlUTE@F78slCn1OuJmpB4<by;|r
zhaN7Oo9EjdqL9i6$Iq5BNXejED9mYW-ZF2E?P?8N%wC+2X8@STWHpWk<j4xABVTO)
z{-z#ak0>&Q@O**<uXx-}Nazk<2B3`z<a9DTP=79mw;=h+I=gu<5GKZQc;sXKvKp?(
za2~@|QYSJ;3KC}egEI~io2*xamNbiZ=Wuz7qlUKD%cFTi9fssq`1kPe6Z@?UGMZrL
zgRyn|FU@qZ4vkfN3n*tvLU5vHc@nwE<66p7^Cjo(XSY4E3KOyGhd|GplU4}Fo`~;F
zMpf0bPvJb=LM32XN4P&CGnrDx5Qm}{Q#<v{+4=6`_X-Zhg+N(El+F5yOm<vNJkeD4
zrPcc9!TFEvbf<$Rt*0e*$UP}lZ<|PBD8~|L+uS-xfI_Su8tmK`)k3p@JC%KHwcat9
z{vvQIjtsvnvNioZgV$k1x~QL)tub3v#rAQ$02OC<;fv&iN{0+puGVReKZ$=&MBlxg
z_3K1XstvP(dGLD4I8)ZmK~<MFtqDIZHM!*QN$d!rnvpdI<z2N-;e}tWCn~+)ogE%t
z(+c-_TImWpo8I}4XFbSQwO)O(c+_nt@nx^Bf~^g;7hCI3G9Fp;%m!>i5-PPcB5b{~
zAE#y;F)cY0XoDP;OxLR2ZHUuO2nu}LYT2$E(h{U+01X6`v>eX)M>*Hs?WTOnR<^pX
z%X0AUE!->>_6VE)@}%uLGetxR*d-!+N^p0Ragfp*3aaU{`h{69f8>Yhs3@x!%Z3}=
zH2X>R7GHNE7Mb-cCq6<=eSCqoI3%H6=0up$MzLQ=3=eVib?PYx+#=hW1zeW;Gwk<%
zO~dC6>@*-wCg)RISdou$KvG!AkP+qn&4}~Ndc*F|dh8`Ck%N=O*i#g*cf=jmX_s}{
zcm#i)e30S+yZLpljAKd7lCfH}US8g8Y^^HBJZP%3oB2E#D^h2<S#<yvh;Fcf(jp4j
ziEKy(xvSJ1lwzxoTvNC|qb`qKB(IOoiwEbJSl?Qj?|je)r-npQNsXA)ZOW&Q({oo<
zR}1q6U4@wjd*wy5m;*C0^=9?;tA&;kDY`fgJh}bXUWh6IIi#&&4bAwHW^zUia*!^#
z@dp4PJLCqG9w}y$D$sxDP4lNmIf)i(*WTE9@qp+x<RJ5E1YvQ+dgUB{)3Kh`>&=-7
z;x|?TO3(G1l5w<r(_r+rn_+$9?a_@UqlJcZX~D$F*dBQv@?l~xt`W{MZN2$)*g^V-
z@&k_4)eaa|N_xo8hkH^c85_cWtE<{4tyg(%a`U%wZH-#Ygz<vD!vu7W95{Yf$E$RO
zYR^g+p{{e6RLWgcCnh*#QJvXWzP-)5(v%N`EePkk<-FNY(#|r0CF|8&+NxQGzOIcm
zDubIh->n54JB0Qy@2B?YXB8>V`NVuDAG1<?T4|&GjbM1kU(A?4cavcFRNXnq=cBs5
z0ViRn!Cbl|s)P5h+L&(9GryxNWFbf9RF7;zvzL`o#7q2Ce*YsZ3mf*-n>ipTLfzNx
zU@W7#Jow}N(m}PBeB!UW8E(FxEo^mz>ljzOIn}NYP8TSNul#*yOfQ+Y`%2I_PG#g9
zQ+Q#k2(?cEyAicmI9{1IzeX1gxNU|OOoxNY%RiU6xWLIFHF(rKyuZIQt?oCeQlg|m
zV#z$Q0amVthVklI{>~@UYD?#~j(1R#v|8_p9r64(zyQRjo3N_dXb-fnsah(gu0f62
zpA9IG;+;9V8ljgQe%|4}HM1FTv*F-E;P!JUkFh*oDJmQr8Rz46`IT&8Fr2G}Fi=hj
z$UaDTq^KV@2T`SkuZ8%oU5dB|XpiS4ylYkua$ieh$FmS~y}q8oQuPTQ=$a<B>WDYi
z<?l)X!#&CqZHD|}E_@a}G|7g7nlhv>Qc<Sxaxti<poxhWncTAhR)K!2V=2)XiZtng
zW5xXAPmTlRpa4YFh9(R8$lasH9p6@>2AaF;XI_#lALxNZ7!|HC^vc$`qFs@v10HLQ
za}LLY<PRS<=)J6*?3;aq>isETG25uEq~Ft!y4v_adj?`$QL{JO{i$4KzC~i9?Cu0Y
zaO_=Id%Vl*I<H=8D27SGmj~zk3@QD>$#;R`Lw?1aq(0uoT04*Wq`tvK`<D8l;g3v^
zXNF~VdU-bRcjf^G8jjd%nI28}$<#zdHZz=mHnt4=-$B=^=YrZRRs)ZqF4lXZtZO7*
zvIo+B^Om%8o_p5$s^2s9hdi=BIipP+nO){Qd<LVWj6|SjrZWUBx38dw2JXqR<S8G$
zv&{j3X~yO+RAgD|Bw#<eh4HPN2i?vzONMJ;*WK~7)UMe*JBscpeO-%b<0eWz?|B=p
z*~RF=$!F2}zv7xOayA)nC!qKx!8xHA9%6%9q4yaG#|+-Yb)7Fpgx##8snoOiguU3F
z^-jLHECN*DmKrX<zmMdYODi6b@1L?uql%#XMAU>)GQ*f39o0D}4_!2W-4h8I+?`wy
z{X}$8bIkt|K<r<8RtZbjJui|dXXPw4S1B(~5141-Axybz4IZ8WRpGEEQohwKo!n)&
zkMI;pgO=vg((0UTz00&{gPH&UfDMK%v*-Y^uL^CV8S4D?)dHmo!X&0UM04#SQ~8C3
zI*I|(u)Im`_urcOLl^qz0*a`VfMxk<Ou6i=S~!dyDt~dQAMbB5ys`;_D1vM$MIddg
zvyycH>hRw5?D*$=`y6hlo*Y`h_RxTat#RxA^zWJ+nU9dN65?>-hWPh43}rbTAL+-Z
zv~=P>nc{#r1(^i+r1JNz1-3}nH=TFvf5xcP7xOC*j8$3(ecIe_xu0FTE!lcg;UMR7
zdwG>VcO0s6Ou8{8PUK)Y`-@1{Iqw6-xXzR~s_Jb-Lohn~7Vb~H!#ci-W?#78%deU|
z=;gwv($c4Y+Qo`%6&LlhET^3g<Tmj<`@(9k#{yavrA^uDY!SVk9mD(N**h85#QtvF
z*8+-3vNBWlpT5qgcAr=vC=3%#3rKvd@Q5NvpPVgxc<$bv>yfWsI{wu1WfDIw|M&O9
zErSEnDoK$x8&3#YO+41NT(*!zpkSxjb3!%}3d82$?tMHUP%BsCyB@1kK&*Dn?kda0
z`DOlh)xa3dTnl^gP-vA+1g5AMB3kQ;N^9c7ZjKdV<yhO3)HlmB$7awf5qLoKPYB1a
zcoMdWMSQ}*^=N(n`g+|_)@#1lA#HT7VUfcip}}q*ZNt$a*DU^{`W;*bcjDU@Jq8(>
z&;cJStE4wia4{U=DeVVDrQAH$dJY6qRDwJQBNu~AkE4y%f*(di$l<stuhz2lysnLo
zm-~Sw=eeY^nRg2ZM+rk2FUNbn+~O%Emc>WhSL)K$(Vg0Qms8N3P8Ke}%kB3nen*iP
zVxlzqiqAo+Zz&YRvY6%YSx;=n;krxy$;npnot%<TCcrDHN^)sul9be*BO-d}`I#oS
zV`o{wW}UXFb3<<RGs=^olzR^EH%F3`;u4pdL~^Q1=<D}b*|Z+;5QiwUTjS;7+A-3v
znUJsF$O+qUWa={;a<YuumXy{2%>k=yCA1TlgYuT<q5QiB0BoYl7qL1TR_|3K-Uxa<
zKK9jrXSp!&*86U+2Bb>E#gCM5ayRATA&Re1)-=4k_#|ENvbO3qw3hp+6Dg}9jYm#Z
z>2PfnX@!iazB^E~!Kj^eemIjya5+0S!;Ewq&xXogrTn*ip7}qqoNbvk!p>P4BSP}M
zhWgK<K5#zq3phCN);lCN+><mdj0`fLY?MZnQJ5?RxUP0K`LxNt!)x&~$_of=%-pW`
zq^a~?e2Zd_pnh<@q3pH0_%Q8rNE29Mki6ltK|}SlIF;IDfA1o^$?_MoagVqAW{sWA
zs>kjZS__)}o!{}_vRoxqWPn{My_pIV#1_P>2b=&vC_Uh9xfV7?M*)1dk{ct%1+Urt
z&|1Pt{cLyWS<bWe|KbARDENw3K2xINdx*T}A4@a<fy);&0Wi#7E-w5mKE#<!T;o!u
zAP0{j19#*%luYCKxqrswy7m#U>jcz$oTM<8;_wKNBf6vUS@wf48JB;o$LZM%zRz`^
zE1x=1kuOd!4gb(7rf<lJ-f)D&fzdxy8dHs46JiU@sKSbTl$D}~Iwn7IaoE;_vl)ML
z$$t;xELf3NP}#gl)u`q+g<_@ud0eZ}O`c9E06PNgo$iRgC42-JS?nMFCAcH2gE5U*
zTzqUgw3MkYwZc$c^9j^D{XK(6s3KFP=#;?8W|)v@YkAeoC_{H(PGmt?^q)&FTwg}B
zI#j^X_`O}_OK6RKN4g+pQ@d_+7)jdf`CBwt=>pa#nb<0qZ>$a;uKALI8_hUhVxOe*
z0hnxT9lh(^slFitiT5K2Zoh-Ap3l;y3`L;5R;x$B3Nx;o#wNR)OqkCA{fat2jA;(&
zc{x5I0|X{Z2KChNv1ABCUJ`W5y<?5nUGIyvk(4sYXDCtnQf9MWk06thOg!6Lh?)Ro
z=8FjBLf9xs?#6O&)`6cZKM@UnWA-}f5GX!aP@$f`38|QA6*h3+je19>V=$K%VXqW<
ztT-tuyD9e5AvK!xY;VG9bX1NHBUDjc7UQ7;E6z~tc@?15`+{2Hd4`CgoJZ(!>FB{7
zqHy77S7}69wTOQcKWcIS-qXn*5w7=eWmh+f>}x}WW(An*g`UOTqA|N(vS^HB)7pG-
z4c_2lKQ?Olc!W-6V9TgCcx!Joy%xFF#3@*Jx_v1!Q2%1SrW8c}FqzeNWu<Sxx4ve1
zgr#uusdFeUkp;|s`$s3T!sslDy(Bl6*>@%u&ctCtIlkHsAzG(y7M~;ORm(<B_GY-N
zl}oDs`5D4ky{zMIRRmSjN`&uZwQ+)I#|N{9MJsLAM694@b?os*oYPE<rpoT8b(OWv
zE~5H_oI&45W6N|W&n4)Lf^kG5bno7xTpUfH<JNjhA2eB;1J4VGo2KBcmlY{&azKn#
z!Kvd2&%jM_us;3YWdL%+dBJYG{wKPGx<S4m*l0~_N{hqbOhkYcgYFX9&=O8Fb;;}M
zYn$k3o9GWx8u)}lsZOTrF`@_5L{rvTFn5UzW$7n11Vv3dTs)!K?M|?-<NM8ddr%E`
z{(@GHup#O@jjKjOS8j6!yP?HA;<x)kA6(VwC}hga&JN&(CpBg73XcLi%Jcz}Qk&<M
zc?MC_S^k$)lV_cxA}3^M7P1pe&H)`|Z`Prh1(0rL()Qg+!=6D}YO}!rqHVk&pe_p!
z5f85t+pVgjxx#z1w1IhujTqS|%IvN6d`Tq6TW<Vw$1^5}?QJ?3GRX~c2KvU^)#unb
zFQVaQ=4b96;NH;J4;jrn()61Tr&z77Knkbl3wZ8Hc8y}lbJMU1h4h5@<amF!@{S+F
zzvrsw$ys{43&}QdMvR*W@M#9e)88qBH`3h>ucwq_at!;5L~<`16e!FYQLRKKjtV*>
z!)yvd<Jvu~IisT#Vts}^gbbjQ<Gkz1n(O^CjTo5>g#_3*0m};>9iq-o7-F<7x=Wr0
zbgUk04Cchgke!7~Uj_?V4ImBiotFY{V!N&yK(c7GkF7vTe3M_=^PbH4n#<+Z>I-HG
zIb~XBQ(x3RVu?6)ng-DHq;Y0Zvhi#=`C!Xp5R*@*k`jc4GfczuNI{H#$m~)pXD5c)
zbEm>uv(8S54Gdqtto}5Mr9#I)E_H6K`gW71O#j0#x)e9Z!PYYe0;E(@&e=Zi!7xHH
zl$|JEout~i*LPwh;j&4*!1%97)GfHk)82-`zonCWg(xaK&YKziJ#BIwqU{BKxP=dH
z3348(*S{p;<BwssKG+6XBnlc!84C^F=?A92)arFit>SiBj?|aQyd{EiI^r5nSBh}a
zRf5rr(RF=8n2&#>Rl<q<Kvn?K^9aq7bn*`n_N660X(P2DTy$}?U5N!_gb`avm!%$=
zdfRvB?CacsUA|zPp6=aKIfCfZe+_;)UA9*?W(EZXRSTJx276XdSRd%$d8FUf%n=C+
z|E=fyq42-KW#1c|`G3^0?%k6955TbLgy|cZTIJeOO&XX7#tfyZeYwGi0u^5scFx??
zY^7|W^uH{=yL+`d#<`jelwyMaV6$t5oEU7jxKCsETLz{F7(S)Sh=Oqp4Tq(53<a#_
zU!||Z|E;n0--(a^|6;K}3-D&1f8!1D6c{Za|J%EdZ8-l0ga1XzD^Kj7743?;J?R>_
z4RHJ0;NIP%=19*eOL7<nTTVpbT0Q&g3540J<bLt4;>xFu7gegH>gxVGz4z{D%F5zn
zdg}=Z|F-#`fY0MLafd6(P|jByDoIsU6b^syd+(3Zq!E?QYc{mA0T4))tV(e+Pr%y{
ze>*d2otJ3>+S$E;eg0|imQ~2j<1o&C!s$l>54x;m5~JqZX{S4IfkkHnpC6w6)4fx<
zKpH7nc5}Mm$ovy|%|w6v)dJi~t;v28e6;-gO@B43HkXRxP~?uAH%>1uehME@%h2y&
z!Pu~ltWJ-6E#GAHC%dG7_W;wC5wi<&Wo)ujS)Dnk!FlcAhk_D-I&bvH-;m~Gfn8ma
zbsFr|FE3NTz^LltFVD!uGwZj$8|UL>bqIJ?va$Lgc^~8FDn|N?$t|iBcI8*TuO=m}
zFuVec?Ac13RC1j=&q<!H{60<K0`%~V&$+JpJ62H@0f)HZM4PEreJ1_5B@-gG#&5x@
zeBaJR4z#iSGsPm(2Vkx&R!4VP0+|8}_mDS?))Wbn+6dle8ei40{Y`|}Hf|1i-hjbs
zKsPe<%*G~5g-|Iket?f;bvmO-xh(tk__$2ZZlXR`tn)cQ5P7%)r!ne9^ZS^G-#Bz}
zzIO->qY?_jiFUJuV#lA|{gKG{nJ)bb=C-dDf<CYGCI$c`(a>#vNcM#3ID*pqaL2ib
zou@5Qh#sS?^m|6A13fyzSiOhB*myR`jh@miOkGgiI{tmND09-tq^UA8w8wP0wvI80
z<}<TVb+Y8}@B}g0GYU<aUJv#gV{+n>pM@N7zxX4t*udUt_6-@HUpWog&X8@DMr?U_
zgC|d0+2<5JeScKMw%B5?fri^<t(6!=p_5FFW=<8D9!(=7lsQ6{2Y<qGKC31xy;!1c
zdaL(AB<Q;AkYxtKA?oIhOg~?rRE+8S%{<xG8$Hq<3;S|Ffo_%7b#=WSSkj#RO|Y8*
z(88)4G5pry@0HzB(2^zS<`hSx>!tdz_1VbHWuJgkU!sb!v4|Jyb^@y|-?~7z$jTbg
zGEb1cZo`3*TrWA{su1?Q^w9}&<FK$br=y)+o2m;!5qQN+T4%x2Ev5^@pzn<@Ez3gj
zz}8NToNc%3P?pJcQzO6quKvspVmt?P#9|BlNAZ0@uN&fK-oUF$i40BN6MH6<YPreo
z7zC<+xh2KEVDeghTFy!BaS(Tl?&ak_>osmNpmKjJDo7LR=}|7Vcz%l12|zcUd_4#Z
z%r6;&v!I-m6$f?VBSLiVM!vB4q(@=o%xkf6s*MA^9jpuIM(z?H`(x(nTx#kXG`f9v
z9nca;8DL@*8_6;~!SZKkF;XOq=)HwCu;x^UyDOp#*hS_n;UhftyF9;^UM@g&zfrf2
zMm$l|VQ;!b4M#~OXul+Dsg2H1G1QrU6Bja|%DxeCUN%%?{+4lt-%Vei67V+5t2)(Y
zqk`ki^F<LCjiDsk5tHP-T0Z2aqem+bT?(n$T;~TpP-SFZW#bI?0K79_=$MfodfMFt
z;<!5Oh*5TnqIc?mO})<W=DOppHF!y^g>CA5>veLVNEH`OWR`Q^Xfa;1)EcZ9Ty)P^
z!(BQjBA8__lz+I-DVp(8*Tu_@&D&7~@TleNI>XQ;8x?fV!*gj@+gB7rKXF}%rAygZ
zXyx{q-{oQO=bMp)HS-y)2_EEEwrl{FV)+P^so-bM;F`YNjKcSC?Ty@JsA2@UP+AS|
zSxgDi)T^$b8>TSgvpu1k8HI_ZqcOx{!*y7wai9KUPwsNzgv{a_wx;Kp;a-MZ$(1cj
z{8|)WiSZ)9C1j1l#7HC4UF(%R$@CcX?<ZxU!k(WW1urmteN>hCInJt1{6s4b^m#m|
zg!Rs>g`JHmxE`@2HQWA;gI#_|7bkgsb||2|S=%MI^r{+RiNisS!<$gU=yi6u_G$y$
zYOjiOBPy#rbHR&FXjsL_)_`{%y?&Z_E|!(qa_cE}Uj{e6;%A4~GF8-dv_3#(vtkNb
z`Z!{AlE~r-1y3#Q>edWc+y}85MQiN%OtV4@CsQR1gyjjc2#4TapV<rAbQeEr<RZc$
zjqtTHH?%=x>MANxxuK)v>`)J$<?y~rm9X%WQqIDZqq-LXBMlt-Pj0|;&o>wW?w&}A
zAE!R{Z$;Rki4hd5UC%Td5^r)RjHp-FT)ZV#EZ<5=877CTsYZ?p;O?)mk8Qkjk+*2X
zr<JG+$)tC8lrlH(DO@rQ_iuka`IX+>DbT6j^rR~Ck&vOMEoPYC@LkG%-So%)d>AhG
zm)*BYcLob2pYU#_#Y7tM6|XMb1=KPv$XsxUFuH~76w7Xa16iy2S`F)>>gv<^m^>JD
zIds>cVq})j^`qP7ZEB4k6W7Qf`wL+@8&GcO51ow0;$D^v#9Xwn`=2oIrLQvW)wCsm
z*e6D{l$-lI;Z%{fcCZr`ArZsTKEe(|-#GG}vwQrYlGz(S0Ao`T|EatwyvkkEV#?T$
z!cZ(SwYgaa0vX<4o(6QyRfGIZPr{Jf^je#`-}AHd6OiB9<?%2z*Z9Z=Ej=Tn+_7&3
z22Ay~4iR6+ulECbrUy%I56x6$YzXj~{2cG<x?bm1uUt&@H$Y}ZT?0`4iNp@b<WHIE
z=_zT0!m)0NQ%JiW#=d?<4~d&(!g-AJ*vR~>d>;qL^QZqL)zc@W0Q|_gdTzvO5TL3K
zP0i;u*ZGi~flVfKGQe3MTdfYwnY!zfZGrUt_&$|wca0QMR`EPsui*$T&zwNT3k*;R
ziNvLW8M+=t`0D#!Y*gBh%=AwU_H_fvf+ckA5;IDzl)q#R>6MtWTXo5LhoUPMBZruP
z(oTvngp2tqu_9Yi<7L^M*1R!!T8^Czs$8S^F~E4`s8}iPj^{JSXz99ssUQ+a8sN#l
zY2dw&+Mhk>3dc19NBNnRgdN>j*-jdKk9?;RlNHe2?MnsCn?<M72uu#jGq1P=L+v{`
z0D!l}I!AfmBB&(Dw&te>x1ottJ2W&#&sJ5F)8Ac+L@5-#FZD5=wpnUB>xRdFR_)YJ
zI`(S%9v{h+S6)8lU-kE!_fT0N*f!`TkJPdBn`yz>x9u-<mlUH_qJEv#Q(=4Qv&~cp
zTa#Z(Tef9~dJ*t|a_QNGxXp`z>N-V_zGF1jCcABWert{VVn)2}aSSlK+!4#auoU|J
zo<6?mB9gPK(3G#g)M_2UQLbnIbU3crKa|-4Eq0Y#O<tO99ESIc?}Zgjrtf}%;?jau
zI5~j0#=iUwap)tfDFy(&2bzO&z!I0phUivj=EGpqV{Q!_i%|LXZ84uTwYHAWV!C`T
z#>&m-{<8B0fmjR$xCCv;E!N~n`SLMA9^YsA&<dlXv(zbw|5juEl|hb<rVv){w|>31
z#^o>M$NFAzK0C#(X{HP=VARN<20OigbtW?q<L0?1JMj2k|G`IZy2#p3xsIrp7Bj`?
z5#7vS#_Hav2A}EE+0?(BGi(>qm4SF><hDN+Co`KbU^QvZ9|bW@G4y5OGv)B@nu&Hz
z<}jfAl{YAwq%lB3w8N`G?0nRf=Jz$dvTMH9Gm&q1!4P7z6K(WmNKY0)Y}s#_pDAI?
z8h#*teU_>Al*u>ExA`~u6#)Sru18JEE2Sx5*Pf>uej#rNy-XKb-V3{ka7eu`D;gV}
zXW>L+R7Os0Z;wYEC{}amfVAu>!r&y<uX3s~2dPvKO#BV4%+{v(%0^*ZPu?j~nCPdY
z-#oL4c8o5n|EYYkE_6z0Rc^41tGqX}6Y_JtG=(3CDSWmT#21wIHgdj644B%8n+~|^
z%(}!mr)_xHg=){j^T^dqP%C&Ya`Dxt3ZqmsFFL2`*4i`F-7){qHDEB%j~7Grv%c=f
z&qyBLTIs*?G#@voGTDY>R4`g!#8<R9jg~{g$?jK|J#KCb(d*{rRRy7B<Rd?IA!hG;
za3z|1*ie)+{acf_87XlbS(zIftm~O7Ba^?ZTSP%e77_CM$bI(MrZmkF^2-MQYM>?2
z_J<+Uf#H`UqjSSRHFXQ+A&%&@$<?YsDeBd0eyHkm3Lk~EjHw7JH6#B0<;(h%O4)3u
zGNA5>qBp|0_^6V#IZMZy-8#}UPBk59-WzLS%o*gnb!kJTW9%mIdbHk8T+NR3u)|&m
zD}vcV?sSLxC`K<>3RGOdEwqxCj%yTX*pKAO;z8936sst-4P#wYVybDKj)t2xlHO={
zPksIk?^kZYq&=NUES)?@`>`yX_AGN+>aLDy=z<f*Pc@~w`a9TD*+SApSe5*n!p&m0
zl4<95JH4MJCT2w~f_`+ISWxlsXoTqX4L4GlE;~86--)ecHu+`jN5V~w>?dqK8pA_{
z7sBH?$ChYeh%vsZn6x4QayRlz*mxid1i8t{1dv3^woZ?C_7nfRL+W}2#dzob6}D1n
zUTCiBLBJYM$VM%<NGFTB+)wTm{`ln7^lpyoSDXpllIC+SR|@Sd&*nh)x{{E7L%Gb}
z*8CamhRMwFV5(?+Q>74z@5n;`J6Ry(vAgGYW7cvrWemyvtfGAocG)~rx4Kta?B+(s
z3ZHKgDN8sVhy<DQLYN9Rf%TFotLTHiBD1usV5#KbJ$c@x!ijDAv_Ts(ZQGhSJMahg
zFx)JFWTlIy#(1_;^W>j8izcE8u}A5AK+g9|xXGLnpbK|cf3<;*nJp>IzHcyVUQCjl
zM}!V?uT)7$b!Msg^ZBaBi4g6uZGBVsz_5}ov4TPLJSZ3^va4YW=Kanz(^&L0Z>YQW
zpeCr(F@d#!X6ceQLJ-eh!2A$6951ow9i&^7G%ND8S>k7~oQTZ&B-hZ%d9kr3uc0#C
z!rd(|Fi7%KGMVc7ENahs?iYw6>g^Y19?ZEFb}_Z3_}0vl?1eCD4~6i8ex4>>6gISm
zwGS3wWQ1dOl;u0>lkFyLag7}_Vngw6r(ToUjOU=LyOWbs7VC3|ub*S~Ubs||w-rOc
zD{a<OI;1UkCm<ZL3JS8FV@UB|g4wMXf4Akd46<l*-wyv-9Hrz64&!FqeG7?t2dvz#
zn>~-aab3uDmX=6wGCUD)Z<_WWt)g_(lVFCI*BtAyEiY<PZt7f+k2l(uZ=F8#+U>NG
zccOAly&aF?`F~@e?AA@kQOr+FlxBT*jryl%?_==e|9-++T)|gs)wj*NY1;pmL84c+
zyIxcB{d%3Fk5Fi|U;l?Och0q}oma}-U}Mq4`}rlmnZ3&W*P8OWCoF9LFb2=VmY*}C
z87sXkdIWj?)k43%YY+MOPk;U=$Y}pxge0s;A=g15J+fqXfOUhf<Zqegy=A1C<trgU
z{%_&kF%&~jKmY0T#WeZ6${S*2?`(ceHt<hZY=f9KNCgyYYeVcT+&xI<`B+OzNZpGo
zKed|{{Us&cTc&HD{r!eMMMq0p$l8@e+QTYo9M+}BxO(eo_V@qy?w$jPY@E$ueLerB
zVE%u>nWVQz{4*`frp!5vR{9;G)xIg(qFx>|8frZX3k#vGyHfK@uoL~EJ6xS~fvqi&
z9r`jyHjqBYWIiwdMw;1~^?CMyqgonjAk0|CkE0>y#=mZQ-MD?r$!CmZefUf5=&zEt
z{bJJM5lQIfmzgIZB;j+ybsAX3#Ik~iZuao4=7c>Ts#%~Y7i>D)H$`!6TE6FY-fYTp
z>5uhwMAGP@Oz^0lBZcJ}H5|?J-bu#L_aY4Aso{RiVhBmz#?*Jbn!AitTi)}hJe!ig
zgr2$xKe&JIM?bNmMh|tC7r)pgI3YDcK3|h=IF{DKQ%721pgQ$#C(PQ(U0K=p!<BkB
zNzeB8Wc=-u4ecAVgi)zr$(DCODv!+_((@Txt|6r8WuYg0sdXiIvEm$yh!w(4C3L>Q
zr8@m2F7u`vEp>f9R~COO(ECD-@_K%AK}E7~j0t&ZrJKA}lSCyMRpqOLryPK4HP&Ts
zhIz4|X}JQEx4sfkS2n_KkkOQaHku_?aWj&7&E`9Dd{<&y`$od<vts@p;5lr}tXxCc
zm1Ym)A_vhLJClRNg5ptWU_bvS;J{nyI$gA&wOXII^wcnwov6@F0ygPZE{W58^U9D!
z%Y!>g$t_uF9wf$==Nt@W%jVhWRw=Cx2t(miCU4UidYBz$NOg%d*H{k^aj#uI<f=k1
zw-dSGWi`2<H3ZRl@;eR`ghW<7n{Kt4nO@`^b#&R&Kp!anio0}kM-5#x#Xdiyb3Th!
z4Mj+qUo;!jwL+VI!kc3TWgBLYvz#rVXD%Xk>%CE}h>436&d~ylGxE8bNCv2(LCNR4
zjn?9Xi5!U{7m!7)1{?GtLcS<`2_p*oex<#Akv{86<ziDlIaEI79RBSWG*)*>Uu2T&
zyg^`2JicxjR;8aS8d7_VkAQ&&gygCP&Z>(mvRjy4NLDz0ro%N2E>-3{{WkXRXDvK=
z6b7ZcM5WjNr7i|8pXuCAK(nvC0~VIOU1%Xpt4f@ZKnLZeU&|lB-(n?thE0Q8q%n+z
zXM!q+d-bl!9V?P6FMNFaDN*~)-SgG;EF8JBUGnF!g28&OII>Bux}8X_n`6{$pI~|O
zb>{*>;7M;PfF_>V`u$Zl*z~>0U7p+zWMa$Ing1`w%P_k@fPwGhy1mQQ)m&dZCBO8{
zwWVQd7*od##Htiwu{1}B5hf+FvmgWEY+vc`!;{+1xh}r~gS=HROsR{hGi1!}9Q|*u
zKP>!JcNi02>q*HPHd>#ylGCKotFNOHW4}hv%W4@O02YOB|FEpa6^F^|61J?K5lI+6
ze(d|C_CS0!Cf^1JVJbfZKllCy>M{%~K}dGkK&X&ZqFy!;Z)z#pf<?UEq&ziUdf6t}
zA~$kVd)q6$`-M;Xrog4G9uae!#qi+symv<Zsgc=c`>5&8R8CCrU|$aMKqYvblAEoh
zxp_TgF-vaf!Z}#_h(tGvP4&8wt=IlALlf~gNx8cJQ&N(+x{Z^^At4!sLw!A!L&JAf
zhfRJo=tLvY=q?F5+y1jPvo*yWwA3qPdl<=|r5@;U6}Fb!_~`K?zsI2cv+>?GxCYS}
zymJQ~<zR!mH`l0L`WwH~rYsIp;g61kb9mKY`=bgPPh%su#eYQYUuVmRpxKXikJW+&
zeBb!E4t~V%EPyn-ZkFC}eZK_%LnN{JixFUaTvha=-84(`WH_;%X1)eRu*Y-V0*Bhu
ziJE)aEeK^+V5cA6K1KVhy<>D{kTh;`>+Rr_JtN@WHEdd>nquga68^Ooo<`-&e`+9c
zEYx`W?Nv*i*~qqJPJ4S0(fc*2`HW-NFJXd#C+n*B--9z>lgg(x2aXN4EI?5xJbXu~
z57$^t#17e~3{NmMu8CJEY26a@2dzB&S%_c>EqBCCfd8ZL+uh7jTheR0u+4Nf8*{wQ
z1;5Df^D-wslgq=ep38+9XxdvZGnXlp9Z6fOdZ(|dQG<PE^{n0LZZ%6VtzB=)T5I4%
zt?9GQC4*MCnGz8iB|(*}n$z_3aCs84z_$xk#^H(K8$d08vkQWYhbc7TR3OC6jyIWP
zI%;ap9$*eMk7ssU8>p!Omzf+HC{?1S)B8zMj6eZqJFyStpj@;zL?<g<LP9ntKt^IW
z>A6Zebm|DqXW#y`WCd2KRuFr~U9q+*Q3#>df1X_F-99=~1I$w~;PE|P-Sg(+nDg_z
z<3iSrnB4A8l15Ov%~CbBMe>qhHMib)o|3iTVl;}!m)cCV#~j9vYhDxm7Z)JCT&$JG
zDcIsnOlf42kZ3CN?l?(T*XD8aZRf3wSWx=D-@!>gAJj_X;>2Ym4N@53*L}O;;!P|1
zD|jPwM0>$z*dXDj{|8<1^B}5=FTO?+(*2)&CsGO@j~HDn+~zK{ff3+J^ULOg3$)IF
zF99{VUf?b?0goqRRLbv_>X_9BArDEb4Jy7FvYMd1UU(aF?r2!J)B~)13usIa4`1oZ
z+#D~N($3YP5dqotvI(XHWu9F(g&7Xb`Cb~G#<i4q2OJMau<*Ak8MYpujIB{E?g6MV
zQtyR`waqf&?^?Hg735B<NwfA}4mry$3Dkamn}Lw>0V*--H0Kj<2m6;?&VPYv3jIAd
z%7%+J<WdNrFZ@+t)PeQ~!Zz?Eq-o&Y$BM1%vnKRS>rw8feWZ(;DQ4d*k;;q>ZYi-}
zuL>mN0?+ZPx}8qM3FhsE)AC)w8|@(n^C<`LHi(eTpCDI)iBf;G6@RmU<kk$xnoI2{
z^Y#Q4*f#XE;dZ0rCPci~?R2)YssaN9+APeprK#u#9tRA~SxGo}b6#4yRBqog=)Cva
zkmmJ$=k4w1`Z%ll2;cLYP^SA+q2P<-vW0b~1yEV$QjYZ<OO#;V&UR(n7=~d|69Z8>
z-wfSiTXKO_?c~1lzJsMmiW|Ej?LMn}Z%*t)Ifrsy9+l%;2V7Upc@QXt1y`;d#=|ot
zDPKy|El;^r{5YY&WYQG;C3Yq#c*M-_+^cgsthdGP!yk4HX=a|h_8Z7)5JbV=(boii
z`-(9w@ExY8oAC#$?C-9v?@w&hVos}@&W0F=k|ZjsL6Oh|%Cs~}1%0bi2$iOUNxGB-
z>truf8!SXNM82$_q5XqlJip6`9nW^*5+S#zymvGqD$=JXyCUg1elO*7r$1+DM7UWv
zmpi$*i&0AQ{fdIdJwribzI`dsZMYyU3ZHhx;)ODDpw|(Wr4yW!FkQ2U!*H!4JpHH5
z@GG9F`I3ubUdvaYPFCaNsFMVZ$j2J*Af`zlc<jfpEEfEP8y=zjJ=&v2gl5X5AjJJD
zcuZZc&nz_gzBJa9utCEwmoXNBE^#0GB1js^lUNpq#^crfEH{#IA=uy{I@rMQ7>DO9
z%va{Qjjpqjj|LaNX#iX8<jZ;&t)jx*Tz^-HzLE|kYpFLjAIrP@1_^x+-j&LsHCEkq
zO40_l(b7A|j%4S^Yz0B>x}#Om9CO55lP-Ex2RjnIN{=w9n!EFMy#$koV&o)y!l%^-
zhHd`UF5!hyQEFY`DSiuNU@5R4+R5E4*W_94b3R_^NS1i2d2TEO-&2>nOu^RjtCg3#
zIV!=w^PP3;O+i52+UzF*O_>4jwxu=?a3xN#QqbZ4dqX{S#cA)l;7rLw%KWOvf&zqE
zi~$QFQ73mm1R>Aa!Ts_tEsh&;<(Wy8>6mE@O`ym~qwE(R@xNAEnC3_$rdUT{Qto!E
zsj*Km>Q$6Fp^wV}n0*9L*46c@IoIzT=QVb}!8p{=-aJT5otppEKoZ0EkTax>zXy8J
z&`a&OK@Md4r!M1qWP2LHxkzJjxm~MMaw)LeOPhR_|LWjUm4@a+2a(NuiK)=cd>55n
z<5irV@%y(qvDF}q6QS47iLa{HAEa%9)sTPM6G9(7eU1Hkp5<B=CocxxxKg$A4ZTDI
zn_d#DUtptazA<{bVZ9`ALTs-&-NLgblu#@cAU+$<paEAL20)x;=KVy(>K}Qg9d48e
zn8tbb-f-Q&cbf%lU-U=@;$oYV`$M`b8G?K|1J}oc#47L>>Lv4P9}^K-SW6r)EVh|Y
zR3fD(ZCph4+<-vloK_Dg!8M2Xd0k)@i#OjguF(r1XxFU0HdE@uV3>DRqsSL4i4;6B
zpPWD&1`HK-;x4RyOQ+S0-kfpK0+38i-F&tCV`J(3JmZ=Jd9rgWm9G@ps!l{rRPd5m
zadoXq@9wY(oLW82Vc0a;W2_XkoO>7jH6!VXNe~`97XXe22j1u;lE?)(4>jOo{2)1~
zj;Z!G_ZT2|O?`92A?3<#ni}Xk-Yv@K>QMUDS1YoTdo<LuzxMmcFP}6%g_3CQRVVk2
zwX|}j@^JGn4;fRsvlMbCCK%+u@T71P8dz_4`b=4{3^Rc8az#ZA`T)Du_GLcr@1g-V
zj`m$e+V%irMWfFcaYw3|&}=t-SDzoke1diB*fz>#P8qS1B{#?xeq>X5FT_e0XOlzv
zAq^gdpO5bKQ4rM@_E|V=!K-G}@NTmdM`vHuH}_5d+<D05>;Mv+S-UHdm#__6{PI|w
z$kcWJ&}%UJ3&T1_sXu&J^n7@I<qJRz<UGOYz8cD&Wl(JIlT!92qxu{%V$H<qtO`Q6
ze4e!T%2j=tUuV{7eRIBm0L!NLI4^)|cR!Kwu*-Cv1ee7)a0SB(y*|k6!NJK~F2$xo
zHtRv{CV2jD)HXnFPeSJtmtLrlkChr)W_Z(xHM{-D)GbEDk~H}GPpb95!hIgCnm@jq
zW>h3zyQgPm+m<c(S*LKKD(L1)v=FfX{=ozohc_fK3qLv+Fe3Rd+vs5ncPm2vvW&)5
z77OK>g?#$#dk*IY#D_Py=t`vb6>6*BxKKKn+iPI*Fo#qei7@#-D~Z6CJ%35P!u!Y|
z^w`s-OZ)SmYjmn6nG60$-xY4XCI$?>?aPI)y3d7L_3y4W#5P1Npv#0pny@=!%*L+T
z>F{XU?px^?;v}k-E3xJ@`@H$JoY7%TI9cO(u~1yluX4fVkm<E~kLZSzNte&_Pt%r^
zV;7UH1oux4gEoEJ*y}Zm))In5&qfH&4#F6VxM*LiQ|X1&u7{H^pu8)TwNG<26nd9^
zJu<BdIa_&n=-Gs~;riakEMzDx@u|B)PyMZtEg!U_QxD-z30tYJ$~D%(L#gH~amZ9S
zToLm%OIlJ=@;J@tQvJd60nTid8oMhLoo;KT`@;+PH?AZF^0)a~)7=kbD~jTLrB$?R
zf2UKuLa6q=!o?+b^74{-L*j<6sIL6k)btTkIJ2u%GA|`?`UhT)Ez04duQfCwgYkC<
z9MN5UGuwj>=;~_kxlhO9EVx2(O-hNxqZG3fb%Cv1kVRYcNeN9;TWV!qW-UHKY@-F*
z`-oyfrfD?}y&$Ys(#v|Cg~tXDHfi!0WT7I{RoXWs@DD^7eldUrqe*)B-CenIXFzw^
zeC}oE+bcd{K`u3kgxDK$WX-~7^_@y5o1=JjLP;9qYFsM9o}+`ph((6|>@1AGyM>hd
z`z_POrlYMX!#HcoPy#CW_~9qe$lR>q#7?v_>0^pXiRG(Rki*p!as1{$m7OX4W)d8K
z<92VS^cvwjaDfq%pqZY$K;6HVWckGSwI!ZODfH#frvQY+?yK@?iM^6)uR5<<?|M*{
zmm#{V+zTg?<UYl~_n3WB;_sO!xAc=Le{_`=me3x)#^sy+BA^ik&ep9JNi}>mI$^OM
z|Lgtk6BxT^ZNq|+pR&IjJ=F@E%gY$5EgVjoR-;#JSu-$;MI0{aAolChC$00%Wy-Rm
zjiYg`$vHWvb7Ix$(0mdio(C&~Bz+J%lj+G0qasBGMa_8sT5teId0W9j>Ed`-%MHnJ
zT1ui@bk6zNEjeJ7RF^D}Ek&EWab5Q?2`i%Z%Dg*hjV1$?Z7dNuVN{!Ac-3BQ9rKj?
z%CupS6r(*G$pX*_m00u=gc`BDHqX>1!IHR7%H-I<>!;g2k>_r;IFZ?YwmTc;l~)(k
z6EGPWmLg4hs+YV>&-n_{r<}|dVM!5!O`&LZGobRqL?y25mp!>Hd$Y-WQ9e<^@wNef
z!)T@8#xa4DT5w{|qr08OvV@o`wKR0%lopCUpzqHR84N#At8j;!>ON6r<7H!6@?G8+
z4}%u+Tm9mY?R*v<KfgvsHV(};gQ)$*7*~aacCKsJElaBn>iCbCnjJ2-Es89%YPXGG
z&r?r|iZZPpO)J8!LB&CzoJy@B_2Cy_tJ70Y{V(_@AXVFI=}vBjKhTn+F>|l8Jn22>
z!62&5;|?RqTqj44A9|ble|k%&cH36*9Q4|HCz&J)N|ZDarm$-Jqc{tnQjfMr&EBuJ
zL%yQM?}(3BlP+uPwTvZz($%sLTb=lq4Yl8P9Po)Hb6q<(*TIjFlr1n0j-$KgjEf(9
zWSU~(qq4%MnH$WEfbN53kA@0U=hW%pcW;1s0cEeQKEmZnKF@miL!EBd9Ls*6B-~0p
z3LcvtK0GsG@;q^{tUnl-V++9)R`3G5w&#5XsxS`RuXsq+dol!#I|nYV*;u3puUied
z>&iuBfLgN0?lF*GjWHf`Tc2g-bgEGSQ|l152VjspB5!$FOfxV8`<*!v<Xb<O?#oXA
zh1%)c#pGy{ho)qk0~ggiYp@m*(H5hghT+~28m!t{|Gk9L3t%;Gpm8!A8{3+~72b@y
ztkWh3fuFF&B$o$Dz+?tFhomH@*^0Gz;Z5C{Wb@8M<Z_{7NjBKVFG%K(oZ$+_d*GHc
zKtJ0^0m!QD`<UlJD820HpxrgF$xmlqI+>^{K(cc?J+fBbI1#cQ@v3kcMG63{WazN0
zo$yK{-D1-9MafgneXG-&CWy5hJ!Cj!ZF$Adt8;+S>c5XQlmdS?$6XIdu8$T~i3tHt
z12U%kQ8HtF6BD81RRiTTS=9etWu74#9(;BiYTCE@k%Y6;Aii(!;8CTSA9YyvX=iNq
zd%}+UzBTRks05mX&+g`hw<W(+myC?jr4kh;Z@YY;H*tAZUY~l1rCs@jE3y&X)#%q?
zXVOsi{rB`lr+RWSTMeWPHr8&$J_+THzt(Onm}PW5I)1)UK)NHQ<=j5juE)q<#XZhU
z903gQEiNm0UB`X<-U|JZcds411vnN45O2?4pi+4+5=6V>=&V{+)SKlQ$C=;h>rXvu
z6<--km?@|(EtX66+d56E*T@e4Dyw?`rj=?!=Q|CV>GizQBu4fGPJg*ykyXe5YXX6u
z6B21BCcV~Yu*kKs`NV}S=Ejt=<scqn^uKs}>!7&0cH1`!0RjXF5Zobn@E{FIa1ZWu
zg1fskNwCI)I|O&9acJCK8mDo0cTV%Z?|16dt^L*h&c3&96@O5$YE`eb=3G7Jc*gS^
zBpr9MRI`w+ixttPiE925-Kkm|2Y((Kgl>}D4Dw9w9c0pSVA;t+BGip}mwX#@V{ER@
z3)H1ufdmILXklL_ozPkLNRC~V7_Deu_hdLjv`%;Dr^fm!w!_p;nsnw*hR87KsbH{$
zP{}Y)<uftXdi%453Ufe+b)T7Xqy9@rcXX4q*c$WwnL~X1ldsgfiCoSTRU9Z2kUr&;
z0Ha`lKw(YX4JJd0RPF9cg%DBAvLB*55X;qhOA)#@dE&1%r*U~lhQdI}B6Phxtwn&4
z3}|8yV$k5`jwTk_#Zi+4LLD~?pE7GEj=k;(%XvY%$$NXG6bil^_3#aRA(lP!8q3^r
z1Olx9&gV;9^oDWCk)9hD&n%Q*8N*U$vM4stl-qIf-@B^ZH?a<dZaEsA($V=lV%95O
z9s#?NUk~6erCnThK3#}jQvM1ZTFe&pU%#~>XQJR><XUg-%uDrT_gM4f#oCf^yiCg7
zab70Pi3LBuK6f0P;yRcVuGS-6;DtCW%mmSdhV0P#EijzEHo09!y!p=CNQCwplarFq
zE{_A(TBf;^-8tO=C}@p0uTP^>wGYR_>m@Zb0>00#7uGVEa#U`ZqaigUfBf@6KA9;C
zXF<X6iip0Vz8w!7NqreILt5en+iA&~Z^Xk&jMEutKs2B^bsNWgXKd2CGj@<tHEK<!
zviC>!<YWHmO_df>pQyWV7D>Ttw%ogn$;$gyZ6fjbbVwz#)AM3BH9TO8KweMyVG2Ys
zTlrbIkB2xAKP)h>J~8Wfp@+j1x4mzSg=yaL;4D&87T_^@l-enO?Q{e2?;$Xi#ALOY
zCel=>4$q+w-o6xSy7D;OF3tbQVzYImaTmA8PkMd2ZE#{irg(uA>Tx+TPa$u|zQR&`
zZB)@Z8N@6DmSbXicmUm@<wRV|%($Iz|MbPFcTG?hiqGHUvf3J7U+bcKfu3+b`!h1O
z7+7m#H<^EM<Fo~(9C7T9-5byqqU0(}f*clFXTRb<?P?6p*$Qt#Ga?>2a@I@f1oXdG
zZ2&Acdah)J$&rS<t==4$Imn`WWijiV3$)wXjMjq{ThcjCM5FhGie?#8&rRL#)!9g{
zIT~>x26Mx0s3EiafX1b3a*bn~d$4xtRreJdzTAN>0MR22ohu`(+pXuGC@R*Sr_)@V
zs0Xeb;|LAS+XEQR?^B^enuJNFdwciGhAHjF%OzC1WQ8eZyv4s*Yp-rD^mCZdnqq$^
zq+D-09j@b`j3S{Yk0d{RatLfMr)2i?`67(mH{?G)Len|bBf&~}W`(8X^+T;I2A1jt
zcUb0hCra6fP6~XdB{bVvyo?VbKXQ#7)BCuh3)Boy8Y>pJ7t!AJJrzJ~`y<240zTJo
z4HyMOhVO`CrY~*w2)1j6OCyk|2&D_|e?s;e%@~<A%RRpg-#(M;D%TzRW4P1Bg@+R^
z9D7fK`A}|l`Nv+Ln=F2l%XFT7J$6F6i?~;1hwt)Cv&!n1{Cx^=jCl4su_?~!Me%c5
z?f?x=55sXKNSS+=YXR*QG;dF9armJ+WE&V`^=`u6ir##6an`j3COJPa#lz*=<Qp@q
zMg$AMFVYq?1G=GXO}kVQR=Hij!l%G;JtHQz0bQ{QA6&}wSGKI|CH_W|fnO%xN2my)
zYo+S2d?+`cvKn2d|LmwvX<A^tevx>-6RaBY&a>cpo=%o9g8dwmOFVPp+gxu)J`K^j
z*VXJ8`zV|J@z&wkwdDOv<d{aM_qx=lSH~M{k|&_OrIX0<{;Yu-0xFJu7FB4123%J@
z$dqWENvqOQ72e@$r#hLR@?b2j7JT&PO`f5KEhgm)UoT%_Se*`kwP;wsH=nX6j(@Y^
z<*oH{(=2EH30_%<e2Jv}`i%&~!JyW-SK#6>;Z6eSK2HSa)`LnUVHjRL#+=Kz{=<P5
zCaH$4ovecIS2Lr7CAj^0f6Kh5jIYS)_EB!}F{F5?%k%~jfUeSe%jM0_JmF|^-ZB32
zq-byzRBPe{J%Ie$Xe>&owz^H+EtX%Q9%w=xcRwSj+T(LA)F$y@gG!ey1#RSbLCvh-
z`bh!e8wz7k?t3FWpWj*A3o#SgX|I4DT~?&(YTrhdy5_~7RTWO#y3IGti%MAv6J0d7
zNXLY2ZWgvFKM>@t<1pL2t1)Uk&Y{twJ?)E;E+leHu6ETl7xo)+J0f-s)jm{_IDo((
z@Jh{FN7u5@Kw5lm@?v>X1_m4R>pLMz{3=A#PZ8TLsTfxiPoqY*;tI9IWE~s(BFb-i
zVV%HRSG_YHOghkxz&($DU}cVf4jcp2TF_zYwO~&?)zq@u8ZnYK#M5kS>?3l`d5D|2
zCn@_C5x-Roh=WRew5oxpgFHYEGy7bo(_U@Xj06KkNGcJE93&P+f@WOSbV9sr-=wyx
zCwVT|I^<z9>2lYepAPo+%?Af8ubt;Iuc1;py6TxQE*LJt(Du^5vock<qNL=&R|W-9
zBz?2*&JS}!A#6YOY@5HcR%!zW-B|rWTD{5(+b2%qF*Hm+xMaQi9VbM|;<(X$&V2LW
za42^hxjMDub=yEIGFs;zlu*=#sK_2Vzd>8D%a{;q6KBAb&iG}NUt`&JZP{05#pkef
zy8x>hzK&C${VA>b_My&fEpDj7pzx=x_c^>cd3xYQJfgOL&-;v-2q=L$Ay6FiLX-Rc
zUE*DJrSW4Ww^^vQ?Y8SVs|S@D)G#1llLim$1kqB3Pi3vke|G<?sO;f#7NUdrBW$p4
zS}0#$nCT6q!s@&@pmzPkUjXGN5B2~2a`^q9BDKknzk3J%JpG5HgY*wchw%S-KnuT*
z5kN;0q);Z6b?-9q_>mBC&dLmqh`*#1XVQAZDL8j_qzu;rm&?m9nE&z&ET*Q{6w0U;
z4^KwJ3=a7{sK~KY-bZ(28Pa5}9cVo^lOQhZS4y!6P%XbGOC_@90PpW?t9#@nu}_cx
zeuDl_TL$O9=r~XQ!RI{x$BppcAK-Jq$tSP-8xb5`tm=_z_Sb3eNwI(C7B__iOywdz
z`I33%$?8kCmneMC5Tg0D*Wc`$uQzWQd}WxOdF=8ftw8?g!K=%hf3-zExwL+RBFgv7
z*3MQ_76~eB!lK6bJMPgqu_z=={dS`C=pE1BVdww(?fq}>|Gz!pYhv2fX~;>%<byf`
zV^Ig;U)RTp4TFVB8)gMLvCyR#;&Q~w>;5UoD7fP7&2bjSAZzsGVW6rPq4~Y3!B_vn
zVdu^GpjfPHD)#s^W)+jbt+8^Gw!x&=8V~Rz>Vh#NSDHtI)o}01G%?Dazf}sXYyY58
zSs`bSu-3*oBH`U0?b!OzPP&?F<#>;lA2T2>pB9@tvC%+P%W`di<atxQhSi8u%iz!s
zbduj2@fF!-%x`t%Bn(Qu_r3G?jL*-!D=<#3N~tTa4in563;~p$PfgEmU76)MW@LMJ
zI--?c4<8sh&J>3Sv0es0c>e0EZ{oOIj&sDR&T>dT6ec4YL1sZiT(y~S(E#Vp_NLRZ
zwYbQUX#lV!F3+|pKDKLL8}R-5=i-heL5Epcap))AC~T1X0c%hWOBmB4JmZ<;Zklk*
zg?%40(JATZ=-43@DT?8EV<~YcSRxwF4IqAZbgnE4x(R!_XIxm9;kE^IU299U%~I)-
zO2)QlJ;~C1A;uk&=yrXrzTJ4x^36x=>=uxC$v+w1FzMJo+mj*BGEK4bp(r*?P`J19
zc?A!#O!XGP{J8Zhm74`!=hD(9>ehQ#oTSWdaQu!Ju_Q*nL-66}I+p>uC>aNW9&Q!O
zd$SiJY97DK5m)&qW@1K$18abo-4{IQr{fZnSdeTTBTft~2c-Gn&p2(~4XAsmQ870O
z&{=GR8s1<l%I!~MZL;?OZ$s-h0*|FX>TPqH!w>BJ!?=57M0z*P!(EBZ_rEEeQ*$h7
zx){ObxXCW`vM7%g4MrI8u?xq)s;S<RZ>P;w=lOsyllVvIlhozqRWud3+97+vz?pmK
zIg{<45d7=`;>)v~lA`NXoB0@V3<;0`-RRk*8>XUr*28e$@WLv>>0a}@ZA$rHC!gL!
z6_WepU9|f(5GLk~ozc45z8fpa-343q9W7{a;|xgUCd{J_F{Kt)3I>K{xP}JSoPV{k
zPf$B-eYDrKM@Bed#q?mOeM|a%m<Tpdwe1^htW@W-8<2Y&L5XD0d@CL?)Oy_TY#W0+
zKWSJ;{310>da&rtJ56pAxZ$czDxb`9Hbq~kfsII1leO)IcZ?_K24n&-9KFJs#Xzvn
zGDYawZ4S|iIg9o6m7dxXxQjj1aVU%)b<y7|AXlY?dgYJXnoKw@x36O$@CqzE=Zk)k
z8&)|+vEfY+{YCuGZG5u=sirElzCLgBH8Qf>_}5wIYypA-oJDOX80flq?w8HicbE}D
zzK$N6uSwnm1h&4tn6>FFQz&W|(KdCkIZRQqMKKk{t;0jFM}%oLk7-LxL{o#cucxok
zXaum5<GGI-9B)Ju?+{1^9b>g*cjpx=@qz?yJZzxdgKD5=U&{pB)}VK<$DN%!607v9
z*|VFhVgGp7wZie%&K%*5v^xNEC3v$4vvEA-d!ovnt&*{ywH9dCL!@b@yUO)pD6!r8
zlBQ<dY4{ZGH`|2G9<87j)<sxNbWq&)CY*0+VTC<0Th@ZH#6g`SjCRofd_lH&bM?%Q
z^#w4+#(w7-Esc%W7qzo_Ca>eiLK~mDAW<7GUGkg_=f_n^r`qoFpVm-Yz^po5$sY7r
zghd{6!wJ3%xcgdN8SwWcuQc2H0a>zyE_|%Y_ZE+?be$>>TF~c_KYJ6Moiy)o+6`&%
z#}*q}fQ*$6-5@8RBKku(_b0~f<|c5$i#lD*8&AX^9aQ%UW?rZk>%Zv<Z#b2=Mn>#X
z)csYPoLD<CVYvgD;VVd&u5oAq;L1uLkxY=AM@Kw0l|Pc)wI;P!DQKXizE!C*sm^2n
zKqkKW+%g#o(C8s_akAPnX8Z;ou|Gp3lK|mh`i64%^VT5eiqnJ_5L43(Fw|o?hpZ&i
z9^sV6#y&cZ+taEBu$ztcPK&6#bvAm4Xf!3pqF1^AL9K3l4WjKoeRamSHJa<8+2NUY
zTVVW(<$9pXLigdsVts>PlgdbUdw3Cz<scr)y{o{YKRw(QfCju9TjLCUhyCiMNT$?W
zg%vFS_f75f{b$Q(1E{T4)=AYgpXDZE+7r0<*H_*ff=7yH8yv$1SvsRP;!0Mw3?yhS
ztY`}YE+cB{M;Lwv1=SBGYH3|YbUSi5k=85eZNnQjazIwC{pPbg1G6#83VXt=V-9oc
zR=gfJc``#)Wz`D3WLn(*JuZ|#e|Q#=J9?NH6lbX^(LKe&VjYrUH7b-Dc(~qsV*bsL
zf@!FGa6=cA!v1|SX<n_?Zza~F+O{vMha_$%h-c3|la><k!icLka&MTxx6dimW-CQ^
zcfRU>?))~ijpwy>2CD-ByZ*&biUAsx*%2pGtUs~#RFrA?v!ZvGEdxxAKe$=+ST1(u
z3nu+cs}s2$+d}ChH5rBw<qjBfU~e5U5oZ}w18&5zmr=;?e|Z6TI9CzlqPa_@k7Hn{
zfgRqkRnJxOdQs{a%|-9Ux?^zuPR6%)2+S1kG1AJUj9nzVNN<<%3dCX?c1FUZC!$~E
zQ84$tZ$(j<QVHRXe|Jj%u-dt&9Ni>8tB|o%-moinspQFTeslgj8>2LX+IBe?N0JS5
zf4#DdTOV;+wT;coBHeMA<{z`Xlar{%={)D<a^zX{%+8KHnZ0C^n}PkY)=x`{mv<$x
zs8+tT1-J7)A|m;51&{A&;>DHXA}VVIdAqw7#7m_3!|J8?mrynf{%<3NV%Na}9&05P
zVc2D_g+<E!{m<$82uu^LJLN2j+oE`Fyt%anoCHtNx~kkJqQ;BQz^Y}jtvG$6Rse6Y
zYgEZ(F$DKOlXO3Y@B5^+I9*<{B_*j?uZBC2r=rUk?!r`?S(E!L#nFoEXjaaN$<~vQ
zls~)|hRfiB-Efx{OQ&4GZ)FsoW{jguUAb3pW9KDK5$k9O1K-8Bv+tUd;Az`>Xs5+g
zG~QL%4>207QGbXuftFGQgmU++9;+=^HLs7Q<~XzE>g!XJr}KGg^2|W#mqCJRL&0I_
zyreXHHK!Hl=#^lLJtzjl%;876M66lK%6DRaGBR>l@dU!^zJ$RR#B!*tshvvH<UeJ~
z)!dWMW_~X~(wxiq-R3;KZjW?<G5j4|h=j3wvFKlfOm=FynA7zJrEr@UElf~qU?r*F
z{Nebq!|9&vkpLqq(D;2l5)0K=1Xti;Qa`X>=wgakk*k{i^wmshUE^8>wA8Q3Qaf`f
zJvOFqQKbS22dhMtenOAxxuxGKyT<g+%{PZ<v_r4SDVKS(6!UVd`@dqdvPRx<DKEZR
zG^8P?OiPZ;`rV@%9TRhGur_t?Kd=`7-casE9p#BBr;d$|QWGqqq*xUTPnfVCol^*U
zmzEk<O}*R+Bq7}H_o3z*dNu!S?u-Bd&8a&4@VY5NUPNSj)dwLgs!O}ui|Wd~JQ6#1
zdM3zD&n`C)tFDV!km`a2RG&jiH|tH4rL6%B`Z7c}TBTudfta!n)#FCxWT^>U6j`P?
zvDfI@v#$?7j3aDV3-`l`PWPRZuH0-zzo|Mq+a`4-L<(!2IjV)1E*2`EHod0{3!V?I
zgdeIy)WbvhR@xKVmI7R_I&jT&X&Bcm7@`D@M33m@r}^YUqbX7$rwIQ`7+B(Jo!Qi#
z%ghX$5HEo@HwC>w4vH0F4J$9J#{*t&N^<Mp#H*=rU=$oI85Rp9M`fOylT%av45%f2
zcrO%2^|<E$;Z^M=Vxn8>xiwviCbDX<QmS{{I*D9*o!!Y4eWa1cYgUejXkLOimF#GK
z_Ar(EqB-5?o#lt5QW4!ixz!&od(*lyD!rQD+kF>PYu2>7lohg5G8Zt!s+!B_j|!Ce
z85~-CIql?&&}zURmjfi??LAL^&g0{Zo~%mkPuqy8pH&9t9+ql{N`Tx4(ruqnD&pla
zOb%ZbLVbUzMfHItq}4QCN!0-)0KXJpqozV_F_HXB%M2*|yy5lL*lxbaebwU==^FaX
z&$-mnI8}a#-PxZL5J`T+EUXdKjKWc_R*dHP&i+B<^bV)}RWPx;EE#WM9*7IGaZ9j)
z2d^hKmfnR@EMLjhwQYM-60V2}R7fMY3|C!~)^F$IYtU3J{<DEI%O3yB!O=l?0TAnH
zKf+Uw1E>p49_b!YPVWFL@VU9OV_^Yxvlk`QlusrWE4R5Z$AxeR<JqS=StxGB{1hr+
zj=t@&eXB_fhO((W=Ba80iYWa-1%#p^*p`a#85fKl@e$MIk}mIV_*O~}v=Z{;8Kbi^
z2{(lL>Nwd41Ust?sGRpJwxOb2gD`upFSynkM}5z4jbyl9WtA>5{IFisdA_484}9lo
zc7E+|og%{&G{d<u?EB0zR{k0^50jE7fLzscj3g9nC}LXalnZHC!oDr;!cx{-$EmbH
zHx;?t3M!}3V2@DnDsPV|?@(%1@$T?95p0xjMGe(#x0olj5#`HJ>@sC>DdqQ-2WOU(
zeqLvj*clt-Mw@pqHT~Cj0?99J!-i5>`&UovUFu$KS*FEHsOLDQ`WCsZ(b0;D31C36
zo!BUsx<?~J?l(6w?qL3euo~>LP%y=EuR*lZRZ?N*s-->zBC4GBRW(ILOt}jN#_StZ
zj6A78BWDo;$Rd1(oFG%~SXRVR4OH6~mzVrp<{c#^0sY%(H7@MDxV1HQ0(m4ZZENAa
zMwRC)I9S!AGX=tw<=dB)4!CcQ5J%v`h#J;|VqsR_MQBxQo6;M8iD=G{x!eIBZ~pAW
zF>8o<L>yxM;_1c>!DF9`3_|m2#8yI(_LifsP{O+gX`pL7+lcO00k?>vbq%zVeLzDa
zz!DO8%;>Vr8|rSk9@gi94Q!8W&KEs+0`<eF+Fs5f#u~ES-ljuQku2MiN*OVI_ilWq
zsHxy5Q$Z9JWvG&piZv3I)%kpSWGpPDuJU|53)1E6vCUvGezcTkN{qrpvW-fhi)+tO
z<wLjJM^z$%uOh36x=W(%K(H*Of>aE8stc0cA<SPz-M^|lon?D1++NVTRx(E*URdj2
zLZyWl`MY0|=!&-q(0|myR*hi^Xb_UI+FXTgkL^d|ffi)^mjaLNduywOluuApI@`-a
zNu@o+`jg+{V%cgeQP^770z=t8aHRdp@l_f4_^gZe?3A6<50FP(G6=4T&z&EJFGbTZ
zye&u7m7e@#N5Cg2bUOI_<&gjuo8Ms7x`&yJ#Tsqx+$>`kGu)}<xTqbv<@jpeGa=q!
zu9m=^<J2@67Lxozr2QSNqB^rdyEY&s+4rxX+B^(KHm+Q=$*&u0Q6I9!Xg3EQA5wL}
zK>T{bqp{U8tXN50AiiSDc74rLsf1*NE2^}7RIfH+g8<fC*7XS(#IuT6($2`FdM2g1
zn%|iH3=+5(3oMR|a!q<TJUsY5N)e(<Xl7(ZV-#U%ngb(csbH?d*EBI@?Ux3*S#IRj
z3EwX0#x{?3#-;6+6XmE{OTFz}2s7LZo^JmIF3|dQCRAcC#1y7aeU@+~`5=|^%>3X}
z>`Itkila#!vXj#+E`f%N>Be{jvYdyR0Rx?3o?WlX_SIHS6_0af%C)Pgq`7$VZX6>|
zMO2lgm*$R{*4<A-NAxp9NgX~{V>><XH{S*GT%xGx1g-Ov86IQf1FbFHc7nMwnB@f<
zZ=_;2zsqRJyX&Zcv<>2d9XtdYPp7Jd+P_X~Rb3D=vpzUg@n8TX=Q%uGBf`E9dXIn6
z@#}?O+MOnAqceVqR2oO$K>>r?1@{E)ft5S40Kbd`-tu^So>Vy-6CT=6h)m#jN@`k>
zf$qj(w0sbb_jO*Tvl<G*TC|k(Yo>X%zFHMlXC;<e^^=lQox+MX8)5qRcH5pCOw?jp
zluPAQWSv~L)ukR;%XL4Q(dCl`b$@@KIIrg$TCggV{#N2Q$x}3CE|lk)!Pgqm<?LJ}
z5DhbGO<)^Dz_*PB1Jwv_W+@(9O>TE4X5>#4HB3VuJFEh<uS0>2net(u+|hI*aHG1_
zO-Y<fih&rw+Lc7s=L@&KAU*hg<c+KPPH+0qd<~sF5x>`IH#ze2&kExcHHEQsxdh%~
zRN0lM<-@)8L~d+~!*1)F@l*-Z(zX5d&ico?$t9jYo7aMV3TtT+DQ5!t3GT<UHVT2)
zNL<|G43Zd)@uaR?=|A+_1qGW}&#%j~WfQe3hWI!?c4n?LANX;WPAVCTcG8;P1d|<@
zH@`taARHw&*<I#t%Vc+U)_qB!c5I5K@a(R+j>ZNDP7*CxdfOtN73~)lvD?PY+gKvA
zml(1DCUvpdzOnilRx<pX7k3}4m3|blU(a=T-xR|ouv|Sxjqj6UR4p7a8=qTtJw3U0
zKIa@|k@9?_virfrCe@8eVNK7S6{m*tgnb~eA^s~DE_3NFuk|ke`PPk>Hn0AE&&Qzi
z3a{<m+Zn}f%>^Ag^wPd5h@HrTXdkPY7oX)P=>DL^W(vLZK`c8SU_FFD{a~wwEJo(q
zZSu-)2nBk6G-)iMUaiBbR>bdb1ZrfZ-iSsqPBWLb9*a6<>JnqVzxK0%Rh}fFPytTD
zZcD$3K*^w5xGcMzw_QsJVB2Rp(S=^lQ_RYnIAHSQmeLE&&uir%9lq+ePC^ylf;@Mz
zMYJJIIv2-#Ni+~}1r3bdFv`xv$3^Jp6Jy2!tOC{deJ{i9{H+RjoNjXAit0DYS@8kW
z(=U@Wo*SE^2=}fQQN@x<j99U4Y*=eS&(}h=&zAzwLZ`#j`6raFOSUj$;2OtcLy|?R
zCHp_DA0gtG8w_9Ha#bHsd@SUi<*0k%u!%jKhKF{E{Jz%H0Tz+V&Riiz(y;fk_JUQc
z=bh<F%KiDn9-@O)8`hJmN-DX6uI;JG{oywN1Deo^VwvD{<~}x=R)MF}RdsFOc_f@#
zgW>ex>`|X0us&DSx4e(0Nx}9ww((!B4<xF!rO{^*U@s+Nqc`w~ZEM44MZyzPu-sW$
z7@8zZR%X7pFP6<0iaaD-jbG4wI7cnT#aqn*xOoT(&^KyN*1Fc)a@2FNyV-ZXP2jIZ
z+qaxa*&m0s9g}%ETrN)yRCxFO5|cGE*S<j;N8IaAT&rfj$+{#VZD#+%!8=Wq0-i(p
z{?faL|L?Wn|7$gQk>pE-2)SbJTe6bJ4FUpc6Zs|U_bU-Df-8))T7-fu!~9S3-oq1L
zDGH^&o$c9igAZ*d9s@kdbgU9Aa*S&KK;xl_BINl6*7}s(`8|uy|BB}GwxJ^b>%{+7
zdH=V{?|-b_|JyT=d*qC`9{*ZhuC#+JQ>i?TZ$t_r;_@8NEM?loxCr_W1%PdP>pf_C
zsMroK^uoWMKD<X*LJ%_KIlVG!yym{us&eGqEyf-}PlxIM2E$_qI=om$oHXGz$bVS7
zSe5*7{5)y)@{@R<|9yqc>K_vR{|}Gv54Z3MVtyKzJd`P`Y6krchBu)uEFy{RmBQcC
zmP4d?7_p=_d{PrvJF$<FKky?Kbi1)q7IO-aA|I)6a6;LHQRF6vu$&0e<W`VbXt-Ps
z<$Bb17eDk`H`%;x7*aL+a^*7rC%UVG7kdVCUZ5y!9`2r(E;q|%x3o{qg@x7j%7;=1
zha<-io$m$2YKgL_v4B=(^nRj3PD@^AdR9DDD!t^kX=!v|>PuE=nS0_OmH5>puGc0>
z{+LsUwnvNc?E#MV!kNrT2ip#<mGl<hlD{B#I;PI!`ui4bT+?WDVq|X>9tvI_!-ndz
zDXn;Lu!haoy0xA@Z<&l_51i1`A^F+xp62#^0f;BBL#ojX6@R%sCG7v}U?WD0dlQhE
zm9r!+fZdzx{+*W?E1ZG()GhRSWiK!A_MGhb%#gaH_*pBIZ3d}RRW+Ly$>M6P(%o2&
zg|K=t7AGE;3>wFy_RiC;2SdZ(w9(^~fQ8ZEsGn*io0*O^{<h6P=zBMreT>k1P^$ek
zA<JFZh>%sNDh^he-@Ugxrj`B?shWCl)6L=5Kwz~s97jhB`LS+freaxT+)vD&)mf`S
zYU|N+?t`ssGMn~L?k#;mrsG2Hvak!1s|#jdTTLOUUOi}XFMbd8q3TT6xB;c!O!9zA
zdbSA_#DGElE9&;hjPwO^HFzmKo|QT(`QV1P8mDHP1|&D~GnZYMvlvVZ)$XI<Px`9S
z&iZFn&%;!#=i0kE0D#7OJITJ3)OvHAyp_--Odb<9SF!phtjHy*$vL2judZ9SsRU%?
zTqlNGD5fg-^ufi_JL{GLXYd06tJA^9LI{(~-b7^>=o)b~i>W!V8IF{AUISFDWc2z&
zCLSn6KI2x-Mm;;hhlRvg&V2ums7Sj+e*%ct!{VyNMCpJV;|n4cxfleuw*I)nWm={+
z^=suKq^?kRzC|n=r*3ES{=~MY7WbKOAJSfZF!8>UzvLXJ!F2fRQ1Ivl^FC;}e8?J(
zS(GEg=cPCM(;YK4>b)ouM$=D3HO0b$ft*EuXcOp6E5&#Ju|sGZ;ek4mkLJTDs*_8a
zn)@sx(!SP7I%jh{w>Q4aK3eVc`j*l}-I%BcNTD777F#jbC?o;nAP#ENb#{3;T!}Hn
z&*`GEyYzhLLP!D;-*aTj=J4nAFw+~$qK%+S41$egn>EtX;x5-glZmT>@D%RCJjb8N
z+f%5hMUdNV8Sk)0A-MELGwmm^J$%b^_p5L0ltFH(1B3}eW^3W&l}cTtp4=0{GVQoD
z$<wyi<7YmV9yAC?0IXrHIgME$xaQEX!kB~=v2t=(AmfN(6$DtGC)7)IrtRd*rhY_~
z0D0~#@;WOIAXz6Cst<c1?&sOSfu$Wcsh};7G;P`G4WhKW5b9Q<6ZSr%m^6&bif2J5
zmSQ<Y%m<&4^W1Ktm`T1w!4va5><~OEUj%ez_^<Wtz!X4~gZWLJ{bYunv@a41^Gq1=
zZ0prl9!iEBZC*epqEF+`MK%q~hB#}}A_qu6CoW*+OVY;ON1D>|i7&}cpqbJ!F%D4D
zgsxh+-9^}$F{`)%E(47!y2nk(&UAM1c?FO5imohkmkt1H+AO#l#@{&bSRDbDoU0Ax
z_IOk<0QfWqadw7#C-*yQS_vWXoOW|hgfQ(Xu)<?veuKy5!%99z8mtaCO9F#dF<~WF
zj%qG}F-oyRcggf8u%@DuYC1-Z=R<?ccNQ;Sv$+*F0e;=?5V85HISuK$99hNaM*iVu
zwtRaOD}Q^s673KQ_R;)8sY_bnxl<)BCacMtm>ak}xC<=j38A7i++H}Cw1oaHw8MC{
zy-zt9%wKD8myK`K#7KEC-@Eq0C}rSQ;JIgezcdM<N6Q-EWYQ1NYsf_8_R)5!z^g8)
z6HEA6+7GaDfIDnJ6W2~i4K9=``$yyR)OpBB6?J#sOoaMa=e!4T)@!yI$HeOWk?D@h
zkPY?S;p}K$X%B_*6=kk)CeY1zG?WAsM_+EekQeS>NlxkVaG~T)*6TC4fI%sCN6k|7
z3%n{B9;W=ol39?MqUr~oVoqmvx699r>PTfR1h;%#qYE_SthPMbI;s6N&dIVZCV8oM
z^1LV%Go&AKYPL;HPN}$&Z5$y=61ib0CBq!@o`dUPBG1UMwV1cQ#16fS^~!1`hCY)2
z!z8}-%!P!ki1vQ+nvxTo%Y@f;`n1D-CeDW}q5jb6r;a}mzp9vubFayyg$!Exp<w3e
z&gxiy)va##N`7R!vA=-CoBHb0NW~Fvc(!Fdd4Z5w&n}$j^#N^&Hm~PUNWP>ytn4#R
zU#k`cy_c}}V{7<r#W=_$d(!S?=Xp)U?X#43u!c|t$7&n4*U}=}#ID}o&0#W^OGI91
zj@#ZY%!zf5^|FL)i1s=H?<C&_1}<uLUmlcqr>0$QUno`KIeWP!d|YgiT|Pn+)fMOa
z{NJ|Y{`8E^PNBJq_Iua!daOCQI);YAlSH43fdEEszj^x#6c5@B?c1~d7Pb>Z<K~U0
z+OgW6b+qHop~@DUxqa=>4ne%2SDuhLTPBM!Z%fAE^KsU+{$9aE<?Spz`ymQ_om~EH
z=B-yYm`abp4{U&mxhEgPF{%m=PQEl8D#1s$u*?P7?RuCfKxo)hi^MCB#|^<)wP&vh
zd58O!2R7m$x%!mk%O^poyn;9VM~gnFF!sY)2u`*f3ExBY_q~1s(b2VeFTB7Vety);
z<IAYGTzM;GT~Vg4&WCI(ie#M(0jxn`0~;@C&j2Cne&501J~bYK>l5e3u70BVA=z#l
z(F^Mw=*(a<ZdVts8Sm_@5PvK~t;}cayv?gjcB%-8+y<GWZJd|fsrLe&J%uc?^Gw@Q
zGu&Hab>Y-J2z^^zd)>G1d(u#8Pm#xbp^k@^7gt(xb<Ibuq9R6Iw$~ZV(c6-~Lzv!w
z<W5xaXsXGS&*|)4zfUTOf|{DHqa4qN3Ode^2DV392l~^C&BN#$6BzbM1yj{D0-Ezv
zDn1-2n33{vB8CD2O=#!dx#Qv{%*aUf7Bzsu<-Vlrt+UsD8E@uxHdC7Tu;0WUbLyQh
z*Qw<Sr6*oXr8ZJY0#_W^1tOJ)M?_%4K^@!Es|!cY!1>^6^aKlQh(1~h;HmEy;o=&<
zTaxz7{|PJOQ!JFdBqm>(s{G2zC_2Wjb0G^Wc@Y6beAw@%vM8F`!pw$aQ(P1Zp1|=!
zP~>{3X8Wr<j|Lhnp8M_Lug0|0d9Grcc#FkDZ^EZ4eEq*4MtdN()^v33(Z}tYGl`7H
zb_`&i@@kyJaLI7n?W(4UXk}sIA;jvc{B^WY!$syV<JX>^4UPnqdZ%;G8#=sFSiRm}
ziA)USfk-|(7)gBz*Q8@$i-l~#GMZM8=cjTxA<$ceUx6czrw-V^m#15Jj?gO+m1u;8
z?fv(3Y3U%tImSsN4+S|=f_ehe$;wfNLJ9F?TfKp$!}f;TWmK+`h-f=*T&WagNn3&j
zNSJr#vGz949$N)H)`(VXQFC!t*gV;!wHQ4S*XZMSi6Hik=MoEzii-uIF?_lrza=@G
z&y9~mD?^E~TN!~C`oK21LbkSHYj7V{Gl$sW{ebo%NLH*<O{W%9FDdQHZPnRamv)}3
zdn)P2^j;Q@6LV>xfx+RL^^=Z8h#*TkilW`M7DZw2d<|*caEJBoY|kazEgCx&!&Ok9
zHW%>taJ2JGZNGg3pK&}|*q4>oMNC}n)}sDPIG(Tw@sUVoe{IuM^L`M@ma84jg~dmz
zLN`rOWfyf8acXFz(a6WASoA^4(dH%|F!+~d#$H2_%q+$t0nEabP*UNcFC0Ks7Ai`W
z+o}<`wY#q0t*Mg=rI(f@S8G<zs*Ol+d;q;tifZdo`}XFJG6}JmntXpmVR~laud`er
zaO0ci%*rKp5%~2&gP|v~cp8p96+0V;3IR}RMpj!JlFQD?p_eyU5%`YT5~0U?0jiI2
zaZyL{OjTkSqBg;~rOJa!D##p&UIIE2Ko4VWR9{o=X5xGRsZQ6R$*Kv%$TF!lNh2U0
zd>Lp*&;^Eway7*(eS?1}-JiCnkn9y>xuU>a&Pwql3<^LbZEn<b(RDfto_XY$;f|Ho
z1XHm|i%>_HM1IjY`mB16m`Xpq!e=lCN~qU)7GAwCwR4{Qt|T473YXk8){#$?n6=zQ
z<)Kv6ogFpaPmXn$N##O)gO!&qe_wv8iKM?^W&xEuJM|sOF)H!8bPHp~QqUOB=JjWJ
zYf|qqda+Zb>eib(08b8pX#-;2Y<42<ddw=2o*P%6bK+-{P9M*vimHU=r<aJVB1+3c
zl5%~n_e_qhki-6_WQ%v<B409<W1{oGm0&O<{f&7Zmsma(Lgt*gxUMo6?m1D*c@(|@
zs%Wk#Ks@Iqsgwlu0<kj-p9m2^3`G`Va+;~eG19YafWtSp0^g;XKX>2bU_()Gj$&g-
zrj^6c^b4-X!YB3;N|INraBNJ@Jg7W<l~Kf;j_O-}EcuK>%e*c&r69YvSigyhjw%&W
z#^brh(%h<5eGpq896!U`>_b5r5&oqG(Go+Mr`&AZZ749|fb|x}UYa%0q=XeFp4bVL
zjzMxdj(8JZ6{<{bV|ugFpH0h(<P@HwFac!jWt2b=M2=!K5o?|wUfG)WH1@LC99ZF1
z@<Z9MFMjTJwo4^ydZ@}GA`R?96vtDwt33YSC@Gs3M<Ok_hBRFq50>`!Obb+^fGs#f
zwsYnjzS`@Nmy{_lRGHn7FS#5_Rq%z@z%HRmYC?IrQh~B+$H8)K&3|B4XFBKx8d=0x
zwn+*3ZXEAyD-Q6I8~zf#b6AQ1O)E-j6d9qIn6fJp-?qN0bsy%(C6*!l89-83nz~#w
zGu3Ygi|KuD)biPF&d?5z%{3>#(x}-C<z&G_zrUl@RY9O4-G4C%-FLIr4;tAAkJqZn
zBU4Cj^OR2-T`tdJrW=Tec-ZcS*t{G93lL6D(28lor{$VyQtJtITkAM&-h}@t&dCU+
zJTf@Mq0!%6GQ72d<F>wwi~rg(*4n#H2pjL3tXw_!-ZZwKXvg>Q?J5mzLZ>MaQSvSP
zH95+an-sQwB77k5_014Yc=N(Upd!w4KFi16HVk>9YMxby%7t#TX7yp&P*ANS-LX-U
z)u$adgxe)8qkt<><*Sj=cm0dquz=#K;cn%eZT<AYKKk!6Au_{{gyKU)$eMA2dBS6H
z0#GMMa%3==-4!2uA=~IAGWoT&S1M@DEX7#;c^Bz(Pq;%pQHHT)_K@J<Py@sh(kx2q
zMI|~Z*()&U<#KuPVe7XTD>@fPH8w|2d8Lv$X6!WHJQ{OlCH^{%P-E4J@;n8o#JVo<
zKNG%zEk7*&<pltw2I8u_Bi9joy*()uZWAc2m@V$^Zk6WGi4m|_R-#hkrI)4|@{<Ax
z-Ho5GhmI==mAp6I%Z((lUo(mst=f|}*Rd=RDlIHd6BO1sP9)-Csh=&qnW{sigVOBl
z@@~id7(Z@p7`4M4GKq&I2$Y(W#DM$x9e13TtEqY>K?JGraV5=5@>^Y&l9dtLPg<US
z65rO85qXeN@riVmd&_x!Zvy6slU`Q0rXChHL1V}GK~U0ygH<zitc0X=D|Pu#BG0-=
zNj&9m%iMl$fywETcfpN2`sj5Y6EnNf{rz!uGYQIb{O+71dC8wg?xbf20|{r?u_Wo`
zr3aX2s*YzX?7Nmv+@8;)2jPSjHAd*&i2?wAtZ#P?JHqy<sU>9wfP!YvX8i_8<dbLZ
zxF(0|f!@Zc&pXpSXPfV|ynqIbgxmV8^zx0ipm{&>;)<q+>{>*Im*aYdOLQ5O<k3;u
z{E(!1vjs#L6KxSG5|rW6@S}p*(=99$>on=|U)ThUMJxLgXMIbI&K@U*&56)q`Q2Gh
zJ0VPS9gWjkq6-5n{f#hEg4J*2?*r=yW6zFXaOn@5v`5A0;%T}%3$u!$Y7P+t>_s@-
z>0@0ltYjR`X<lhJz57_11^Fy`4T)Tm*Kr%X&a(chFI*I{I-Ix_u11CWQEYc*rQqSq
zy}oQBcePQfqlrzhWY<qPy6Lx)oWa0gS=c#&(8A;o3hYt@0Dai-u;xlX5jHu1#t&N4
z%N%Wz4XX`ucil4Kt11-rZ(*L3@yQRqbRW4=L9g);RR9@@$*IcmmLL)n>sBVsvt=!<
zubB?nN8Q?DWr^=30g=mHYI5*^=)|itf=Zk3bg{-fJ1CZboge~A*l=1Cy0l1exOY9e
zbh}AyeNEE|y63Z4Bi(F`a2_0nSu=GGXbHZ@ezcck$N1U_Ow7cY__|GfauS#o<2)((
ze3#v+h<L<n<Tz+1RgP%5q@IJQ&bW8<hCPxt62Y-%Let@P9jUz9sF-sbNGAB!8PQxd
zLN{=>;#`<=ZoXMi;8JQdps8U@XGBzOv8xLSrO;pH_}=r!sJ9e%Wdoh0(qURM{vgU0
z_)=B(#6~i_njQV_`JUj+MG->YYZk&iX$^c!s6Eu6PtAV$<3`YP#iQGshy&RxgO}|=
z?dW)}Kk77HFTgRw?V9PxcLU~CORl&-Y<bpch4HXt(rHMRQnMI$2ZksC;6-G0+&u?O
zS6dsIss(D!r7bd#W64YGXL@dJbV=uT$aKmG%^%^|9~cnzW}#0#dl?lmBGIPtT-%G5
ztlf=XY*L*PL>H&k514dDlzPl{p_XSG!7KiPwj{gv2bWF&*Zx||*p7Mp$}f5dCHWFa
z9miv>i|(HtWhCLV9EJc`k^Wn0+pNiL1{yUy*P~-&J$CMpQ$-r{aH-aZ-({6TqK(IC
zrl_?t1GIV6rv=GtHNWSmiLaE-{6kaA)#0)jYA*TP<NW`^(fl8)*e?FVOjzKz3>{sJ
zFA<*zfgQ{IN>BYvK~}6u*rd3?no6lJ{BNMV(5E!T?(yTgYwo{A-xJx59<+#{vEGU9
z$2#Vd!vk6@@b>m>95}>`{c`?qw|Mgd`P{2lkN^Jf{p0^ugZ`hZ*stKG4k-=fwI7SL
zi!LSpWl2X|o{lFGPMLx%5{JOhq)k0S;EwzCg5;+<_1in4zrkv`o~Y4ZvSaFrcqgcN
zpu+BAcD987u;+QeK9nRsKO#>0m!&<n0QVnRJCy=E&}_;jnCL0u`wbE6_CGhI|HqFn
zcVO7#y7Ov!$BQXC8m9NSuSWpNQOwP|vdTwA`D1YuV1e;{bgaV@BNMm8Yh(2k{$UGE
zMA6|o>DUsdOvyUW>KtF08E5o0$fIoUB5UE1-g7VjS;}{y$BC@OFAplB6TS-S@|dh0
zS%mtW3-ieD=wDpu=I1^t&o%s#ciYekw`BZ#ffhsueCl3J$1M7l=QaL0S=NW9)phaN
zmq0vQi}ks#r%<`=gY2UJ(z?B9Z8PD$R<Y4urP)|~QlBE$^wDU(-I891?sm9K>@=+p
z!7lp|Rsb_faCCIwzpAE6zpQL8QR^T72=DLHcP>u(aQEr(EHhXSqOK-R&MJihZM=x>
zP>L1DJ3LVM$#*`Sws=#!7K84FX}V>4i52F<zOAc{A&ziHqBW+RXu91Uu2w(18wPde
z^XKE=hm3H4sLIzrZzaPK9&y*PY@iY|Q67R<1VHUcdXN`LfW(c4EnJchEx;PnNcO$v
zU3BCzOShqf2Alhw5NTn25D_uW1Nn`DcwrKU<3j}wU8(8C*3{FpkcGRf57+x`IXsLD
zO`h@&9mw>Lj`Vv$2=|zb2#3E6MS8_|{FJqIL}ce0R#&Wr{QD)}DiSv@4j6nwB8YVe
zWwus-y2&Rh(%tDroy;*lbY;Ib{T4ekj&ES*;%06sLzW#Uoc&tUfV3-tUp)%YBZJVi
zr>i3ex*FB<{!+EKeP8TMd5ta$8kICCHmzo;enB8tC+|;mgj$`V!!Agg{><xrmPdOU
zetX`rDAFfLbnR5cNN!hXOeO!$>2x?6<BWgn&MSj2HubP3uEOmczcceEaN}Y=Vybba
z6jlw=afjUHpOalZT2G#kDO>s(<-1z3Kyip;@@UhfyW+<Z_)V~|*sv?Iff!_3pbs<S
z^&#HB!IupM@QYcZK^IxgUA(HrOV13J#}~T7n$JF8-Ghg=ot1C%aQWvO7ApUn@$c9?
z=o(Jc-c;$Qo<a3wmAfai7l<73$idVpr^SUfIvT0)pWfDse{4yJ5>df@QykZm$pI0e
zLUKo8e5Gd&w@O)|!Ue@RbllEwaIkD^%aD1J1f2P~>Vr><NS;Gq5yGa|uQK!5>8Ufn
z4iIvYEU<Ykh3-7sR!CBuO%BVa+K^!fUca@O3RlMTHa~4GNg`8C`Ei7Xn9<NKOJ#U_
zUnB)eOEBgSLrkWMZgQWdtbfTbrvAJ-Is^m0UkcdluMF5Inq{5Yy}&T`iG^N~|GsYN
zoraS!bMJBKl^b4GwJG%Y2FDvW51TeVV}9A5^}uG<LKe^(Ge+woB;a<q9Vs9;R4ZG3
zwDN2_5NJBINToV(buUq-0uA8UJ1B<RZrHL|uPzB$Xnqai`$9?S+L>y8vDXx(-Tki4
zaaXW)?S9<%VglXmp{X$Bijls8>3XV1JND<mjw#OnVcBLy{r}Rkz4<ER?C;q<dO!8&
zUzY8n|A}S0&Gm72H=}Y>p@Wz)BU3qPQemMnC+&Qd#}Icm(^4@@+7M!%=Akxi34{Pa
zLrr-$w!%0_O~A`(Gdf9m<$Y!jn#WB^UmIVu_cHEnfLQO`?)6B)nk($3g|wau2d5NR
zhmk*Ai^(iS&sX5<HY8?EQs>G_6N%og;RxNi&?F<g#R#c9w#x!uw->GusX9oTpI*ap
z6T2(B0+xucySQ<jWu-1idj6}f9?Y>K$D#q<f}K?T2<&#Rw&VR7Z_FVy^ofk^MA07!
zXyZC`3;7;qN6_a-DyMz9oywA9+y490dvZ#Z<rK#XRo}Uxi3?0K923<yRh}yi%qVvG
zRn)LbTOKlTdf{NF`Sl`q2PZa=zkNUSj{J8_6`ruiQkG{yiRl$G1if;N{Xj?ix-Ipg
zYr(TqT%pnWIn=o7Ap1gBlIAJ)7xGgU(fpU;`R~DC@;}GI3Ax}O;B+uK$xG!=b-$iH
z#eVfdLPFxF&x=uac*K0Xt1fjK68907_kGDh7Y~K;U=pAnWH&JFK4@SkLLDOo_L-?c
z*9tZ9L~5EE(bA4_xa^YW&H-qXQG^EuTppi53#W9}7qXJWG%P=Bui~eQ;~t7+hG<n=
zouv`IbhC$sE(H2CN>>{azR(k)JQD8fn7OQxHk*{gf-zyC%rqoPb&hoI4}Re@-#1}}
zt>Q%;Uyx<X!^;l4#ysk)RR^`8rsw^j{%KqyC*TGckuWM8)U=SW{?Tk?msKrnuS54*
zZ-1zauS5;%4vCGQGH$&Qx)(?*NKYfnldpa?mTs>$MkMvEhUjSHM3%}8(d4@f7t*cZ
z7Mt0a=Y?A)0y66Fry{JmyLPs_)+VyOg|B>bXCFRAV<28~x0afMoMXbZS4&79DyH$D
zUYl<iT-ETQB7$4NjH6YqYda-5ULOlG0I|5Kw6;fw?*#Nmqv%<oLdDVQ9}Glk=I{!s
zIzu)O7-{tezPQPQPU11DW>#yyaPVwYv4+H-bauxdoY~={)vaDii+=HhK2ytl4Xp9#
z-#KVFT9DvZ{b10Mjd$2?oRv*zF{kC2P`TKlwvcivh0l9rh@Z|ulpaNK<?sb%NK@43
zg+z4Pya(><SP(5s2}{q>nga4lpKE9OM%<b--JtII{%)wuOZj&8*I0Qadsp;IeYtM^
z3D@W5Z3`NLRXH!6%^!|71G_K+Y<GF{#DAj*2lsnTbx(F7&GOs<@HoR#Ug#m*#;;dz
zdPmtZ#L-hACO^XBDtQKzCDy>|F$mI+>zU36>+TbMajy?qkffRh{S9nV2Dl*@{K7F{
z0*!GY?tFa;)7W3D^cM>oeVJeG`pk%sluHD}(|(<fEErg7WM&=7kOGeLXJo3G+nF|#
zRs-JD-8-0}2fRhy0&FO}&&q_Ek-b;KstvweZHzuab~>(hwsYJ&)EoLLdNje9C4d!+
z?f5}q!fVFfQ&=1D{FitmhuzmFxVRtelze@@i%4bV#owk_8@2xg%xbRFB-Lxgf@)7I
zj$Xp{+$zHlCo|4<_3Gt_9=`YlWn@TSPL*YN_ktd1n)0ovDaGNc%Mm*oG?<yLh*9B^
z0I_lHY<pq0nk^{CgoiVM+L{dCV)0~m&{q~F$3YIgwUPz;*O93QmFf!S*G17B5j;%X
z9*I!fAOYyAIb+!~RSL{W1(7p?<9K;~fh88t+#2)ZafJzfRf&1#<aKjUPAQ0p=<!%1
zvnhScEiT6E9w|8RC%VB7Zzej07#L;gNfs23j+3b-k~$Xu(jVY+IE#2gg@I{WP~)~Q
z=Zh2@o6>?3JS9Zg985v!`nCE~(DU#tgd$;>oui7@&Q~+LB^78US?b`7gMvbUlBa!8
z+J(M_RTE{6kA8KY;`QdHp-g}MjbR1t&u}DU{{%J>YP(a^((j5Vee4_)zr5~TG({_`
z5Ho-c^VA8KW+8X5r+cG~iO5}Cs~WA^2rRL_wA`*pP*R+abs4xTQ}l^47K4OIgEE58
zao+-Z;wGohD*m4Sy|G21WrF*3S8tT|ep<;z=R6aAQQ_JP@45u%ya_aF<;-~&gXD(B
zZD`*&l2*9-TRD+T>jpYg8xy*n&A815+a?yKSbLWI@hbP5CjnnUcdAcUuC;B1eKE}O
z-dW@bC4{&5R%79Wch3we*XU}tj(NYNLp-~~aW{r9C*?({52Pn_Sg!Rh#VJ?QZRqM8
zM2s<JKDULGp-G5Jd~VWnfm<`lTo$RJ;#z1~Z)?N%?~22S>~HI~{hIM4hN3h<J0ZOy
z&D=UCySuvXsmf6)5;eH8hxISxDB9yXPzO7Tu!sPPNG2;E0&YYmpSclba^|69FE(eR
zZmFj&!zQ2EczJegN=Z4Y_HO%P*k#|)J^asDZh(YddcGH#x>6Rsuw$A=?nrJx_wOph
zUSzF(3}G$x;ose4T$!D0iuTgx6Mzz3i!?VImSDMOlFEVCUwgV&?ffK$$2a#0<UJJ)
zRuu^*n4h4HOPJ7xOR*G?#i+NwL7{#{oy$e|6RZ-Kzr7)BnC~G{`u3C$(34f}cS0Zi
zEC;p;-XA~6o#10vU^oC~B9iY|Q_ofgnm;SSG0(~sBrb^(b1Vj^^W7-~;=2=?h?3ef
z%<(JW={Qzl&bHEF{ITZKwK@KAFG4i?h^)Nsmir;j$mSowy9`7zF@~u0Tc;2&!@ft`
ziU|cXSpu0ve+WWEw|o8SYq^F>e2(6jIRA}QK;}J;+6_+leSbDSe#Zikw0G``9sb+F
zWoyIOj-Z}YNnB{foK}vn{M$UFa}wPgn}=!c#5jI@V>)(WYtJNKe(vKzHT6oyMg?fP
z;W$TTuxeoHCBS>PUE>A;Ruva*vqqN;SCe+79K|y<!k-5O7QltQ!|C6OxOvKkq_ONC
zsc=O*W9LfcQ8M7yV?MzDI5|t12C$t)ah&2;DVn$L6UfH-%;Xb3W>$a^Os$i4FfOf~
zAE#roO6=sTOapLkezqpL-dhGkj`QMgZv*Ryb+c&MsVJMW6$f}g$!!t_*rTxR7nFYB
zaNb%?RJNB_#E^XRf!K8edj?kj8|gaVV>J8{6OV;B4)WFn3QEPuV!;y*)aWGKN;Al(
zby?yH>ObN{1qig4!Npp7@jAb+!vzi&%Hshyp$~53o<wyY*mwLs0udP&@gmpq78i){
z=_g*1c=w<h`ha+_1R;B2WJTPPb@JuzSobRXbFA<`tg`Y`UQ8!gz!aSDuTF@mL|1y=
zBJ5XXNwmt4_r3^MV$t<JO;k|uKvmQC6J?hbtB6naiNhKLnk(hcjoPjfWI}dDyVGYG
z7L$es@((c3`u43^3fLtj!*Axb*n;cAaU0zvDR1q0_y20|tE1X#`z`zStx?)yr9dfA
zyv3d3EiT2~OOOCT3IPHHso_uv4nc~$6I|Nj8r<DAxQ37k@ArLo-Fw%3ckZmYGi%nY
zSu6jX<gAlN&Uwx`d+*=gU5NYDVf!S!Mg~SM0;+WPRSCH1$s>_DxH#7@Otd_C>1JXY
zE2vHL--M?2Txa;<51#C;n3)Z1o!9pag|~A(f_)gUhU*GUe^Vel#&aT5yi1qg2zzSE
zL<m~m^#<k;qO6WbMgJsn@`%%Lb_et&H72TSD2G-=!9!^|L{0$|s?vyBU<N+*!9A`q
zw>3#88z+p?QxDgD{=UX%;DYPh!99(h*V&cEa>)BtxdVBiyFo!77y%ba8yCBV?{_{2
zl85LNyGiOeD|!zSn0g)b*qGYY8euPppHl|Bd6`+^>acSWeKhE&A~p>T2@EXTcZK|j
z1Qa1c;EjKMlEWgkC*lR)ljv$_wN2<5WC-A3vjx*kM%_gC4N#u>`Rm&II>g78um;Wg
z^`uE4Ann8GXpDghA^F%0Xk((Zy_~{)%MR2&_o}bH)HSSA4(^7k3aSpSRrj>tJLAsB
zOFQF7Ai&YQ30ph#ptG?W9i#6YkdI_>7PxmspH}nV=2dniLN$8aT54caXX0bQw%58E
zdV;K{R+FQ{@F($NdoGOG-+)h>l3TPPI;1lF_Vwp48d8jO)6B*#aS7(%z8ywQuWPkI
z@%8ca8-lYg+f20w0*Q*(t1YQ6EL^o!IW6BguUvRFg7(74FKfkp0Qw~Oy#9xX_3;u@
z*Sy(?JnC@Axl9Fj%TJGqi0EU1yYUB>Mj{n6@vK5G=m}6WIitybA7r%&FMjn-)2fg<
z!6-b5p^tWm*%*iT53X9{D^c?;qHES3GlB){Z62(SIdg?N<yw<^hOnsA0>Jt%rJrOe
ziIntVggEjp+kBZzPTNYqiQQaKnB1@!x`8Ooec_RSPw^Nc&KG-<4WT&-W@WCv;sC98
z8}-!~>)8YM<~=@c^BRt!4xgPp)QWDqF2y40<~@p9Tjfa~HoaUluno8c1#Y7+qugCK
z9h_D+ew7<_%pE0diGM9rja%I9chGC>@s^!eV|E%1Qxa(sjhqEtjyqOH5)s8g#QHvr
z4nDqdFIbq*Y`gxbTTlQ`!cDvU+R>09NT=ydWk`J^US3cBNMZNum+k|g5}#W8F%VIh
z#DFTbfW_LzTOf(+P#HLG^jcFQ@$gb!6|63^v^jExCd;Kb8c?XHzdx;{$RU#|Pk53f
zVu{M^N3n?S4P~u#*n?jlQt-P0Ai$%kB;J7Khu;2urk6vVr_UnudpC}R@N!CG4?;y5
z7<zY79GCRrD#po^bq^n>l%XWt=DrD_vW<Ks6|?zPimHG2QqZZ-nmh%h9t?{oPURsK
z6ncMklHhrsnMjcpky96XjeI~Q{cf5+ceow{NI6WcW)5YK_X}7Ox7w#9^Z#CQdoO7a
zGlUrC#TpK5rv$hJikgy(wAUXi9{2GiC{GhDOT;hGdbie6bKkZMu!%C=+qUY`F=~#^
zdrTn&&SjU91`M|7LJq5Te@E-DBL#O}Gdq)4xo^EXOG=IPy0}hn$vgEX^Ai0rDrHEk
zH1#BryPX}<5f^1*a@~fv83^eJr5*|nn-fAGv5tmf2HG4$PuQ<kTVi<UCY_8(_%Op{
zB8l7#ryIO8s>Jm`lt_I>F!ecCAf~PwQJWmKM>@6JPx4zI{s(?eGqqOTUW;XvEN8-*
zcG7u*Zd}7uz7Ok0=r??iXH@kyVqNQ-xRv+kd>GMl%v3Em@Cd+ex#qiE8=fLUP3r4_
zI@fO}Ir5G9!QNk=tf`*&@yQ9lxxy=nDip#J&j9%gG)CZ)uKL<eoWpW95&|JpLaWT3
z{E`Y^T?jdSZ(7bBWG}J4%=i`SoAML*sy-QRsMS_?es>}ysFEzs_k3|svA~R1pzqlG
zmEgAKI44v>*!{wPu?d^F{>|E4*XK$>Hk==Hxft{b*G5%89%C8Z4z7$ogK|-GoB;ka
z5ys%-E!EHYA<g}!33~Kpk9Wt%jJ3R0rPCAD5j10im`%lA?9()XlMdI^E0bRnRa=uS
z#`>{7r&?JrA(U?>3d#ubThFqH8dV%7U0wn<!F{ij9fYP<%nen#0@$`c-{iIKbAD}}
zWe+Z+;yPG{cveEja;|(1$1}zYs0;|;N2h41#76YK@12YtKJaDIpnZdME$}p1)U#=%
z(s;eAXU=Od=O9F+z3>DCt{>T%XcAdX1Llf)f9sBB@5#_IXAZ@)H5tUE3EZk|h-LeG
zmWjSH8}eMDE*)q2g3IxA`McAJ?BAVE$Upzh3gyF{zgwXY{jcxP_n_|~>^*QmtTyfD
zKW|+{x!g;ZWB@7lSbei1;3ebFk@-j9Yx29CwMuF$4rQC0IFRFFrAo_$n91i)YHt!>
zZe7nlrAr7%2tmx0zYc?w{f$AmCiorp>E_p4|2zBe&qm=}jegPJ8>w>kP4;ivaim(H
z1+Eig&OO<DR(IZ61DYA9%2&!=vgA2Pdafn>Z=ObO4IJV|A#wPgo~IzApkRh5eFYEY
zUlBF8t|=`52^tK@!d?f(W!w-w&XKwyXl{MNK1$FVYyEBhce>%fa*qC4|D=`t*D}_>
zbLv%R8W_)hF~4c~EiT0w4P11xF6aF9U82>J6m(m!C6gk_a>oWfr_3(qWGSn4<_pVL
zd9$s7Zf3y8W|+6p`}k&_JH;=3hJjG5JlkmZjLEh0*elLK)6J~c$AV2%XRE(%r?jF-
z1e?(5hDt{H8%oPhUQA=<G@PyU5$`g~%g(k3%qHTgcXt`3Ger<)BLTX$lv6x~^0v0C
zRL=ztV}Qc-ia~tLYt79(!4=PWynEQN{>V@@50~AV)p7TF>eMSPmRz>OuW^u$qbg*P
z{+rjOW=to#v0`Y9O=D$8<mw*8Qge*m0|F_l+*>iGsf-czDP6A)OMsY|&qF6q*9`?%
zdAmumW$vQ{<?A}VAjg)6+6u6FU&x`CVy%e{=>X{Gc9e)`Cw3@P?78XFi(m1k?9VuS
zo41!u73nLx0<eO6w);yIC6(IOS*jekQM_6<u*;g1wmE#?Aub&q>wT0w3Jxn4#Gi`Z
z1!Xs%9eu8#sEtXQk$yd-GxNQ^2DBM0WXceY=WBMys5?dMe(_V#i>U^#G-yN{NfMs-
z(rP?iN?>OMm3LJj)EQ{|qw%~YzG=^w6qJjt6#(tcSROSCQAKHJwDi2!F06aWdb-fm
zrr9hK|CYSQ>mOQxv}W+rmTvZBJE~;6UHfP)?If4OjiCfXm8Y1PF8fF3OQ`WQO||&&
z$$7DHqtm%v${}1Wo5+Yiqqu}^+l;q@z$~yh>0+_>qtgfhesf^Sm7&R<)T5SYM#`u+
zbO2@VfM(2Z-lFSnzgW=^KMMyB=VN!nFi`&+R!-F<q==7Xa0ag;XyYtiV%z!1d>oF@
zB`BUrG+_)hMmKVSY~>`Bf_}UXo@}xoMIBEEKpeK0cr(nw<HQ%iLo6xeIsM*p5_=b|
z&k};<Q(c(Sz5#bdcR>!TS*bxi&`pXsW@woP{3B1=k^}WJkK68qTb2Rg^hvz9)8Q=w
z+=07-rw=y2W4gNF&A|`R4LRDzQrh(ihV76DoWi8<4dOW26re<M`l4%>``6YUIq5df
z{;J=f*zYMQ=IB<3IT+=elTkHZ|3IZ#h-iPqbk5$H4Lc(p0YNwXs_Q_ay_#b43R|Dg
zI<k@p1oyj2bW(|kZ=dTziEE$GaBp<xKNhL4gfC6*#N2o@ov$M-th2M%t(12@$BTY%
z700YMO(QrgxgJidlr#!!A1OsDPn)Cw=!g|ne7QVzUyz8J`}y{kf7NBXU#vfjY*TyM
zxICWvJ;&<Vcre?Gsbi}1%K}=J-oD2qI=elqL9c*k!L-e98qWLflX#y{bP(8ITpS_{
zwLKGRfqHRH!<W_7L`13e;O?AhN0v*@gjw!`^**`bhbM|i>aTM?^#wUNM@vqXi`Dv;
z4h}2Qk%)u}-8gl6Q;LQ3ny7(e3U&3>7of?_(d(>KdlC3EvgFx42S5KGDwF7=y3{3J
z);1N|S*GvWyU7PV+Eue?H1k;m$-$_?{U<x3k%=kB>L9?p!+u1U`Inv6;~Lr^VsT%G
z*;MV@M3__5bVo9pW1jG-$D14-!rD-B32<OQp~In(6cc;lXbG}%Yk|ey;x|PtFzyek
zC&rgja44^-s;`pu8ucsW!r@YtR~hzvRHJ_gvE74&$fF%LKiiHw?Rg*NgIZq6r@ET$
z#s#P_>Xtrf`kEa^MdENhu=+UlWV%bwrruAiPoHiHzob0|UQKXX;Hw>KW4-<MG@zzn
zls-v$PqpuIW;j6bnh+kZpT^|p{T5E7nM%2$d)9=P7>aM$EaoOqR%2j?8ZO$~)~rXc
zi1K(JE<XBhJ#~z+H#v8pMvvC~wPK8;HY#n@i=N>|T}B5hToK-k?pE(Pi|gG3rPq6J
z2Dmn-)+L%2>%OVNqZG5(<0N=Z1RL>QP(xy-Rg7P3PwJmQdT-VjQFZoaXgltL3LCQ_
zcaDs#yj_+e_In0p9A}O*eRTJpir;@L!c7E|remTj-e1_7=V23@c84p-Q#PZvRUxgj
zvF-$3P3ElK^`+1wIYZu)LXUw@sKsJBe{#*{(lmOJsw#_adS9dc$snbRY%1B)EmXRa
zi0j5OBTPt?D2Ne2_YU6RdK9}IOXXQvE})fpeLCE2JSj@FS>firzdI(u`?!cs_Q?Tk
zJ&W3;)}iI@ZZh{6lTnjeZ;0Jj;eh+Dcre~GZR-b?Ic`3c0&AY!%L5z(@NmPUgFL$w
za^fHvX^WcLqv;D%8RORi+i%Ks$)?NWi?+!e6~~9n16rplX<jU40Rmy3F1tc5pTcF#
ztQ23X7HW4;qspPo$h2iRzFZ^Uz;xXK!RMb8cjy4E>C76C0^}6JdU!6x&sKB%)SlfD
zTWVt-iVG?Znt;Z3R=BZWu15CvYW&ijZ8{wuGEJv01}=nfCiQ8$T2I%Z;P;B(Fo)x!
zXgri3Qr=hU?qTs*kmp!#1*S^J-U-)ha9FH!WPV)Ta6S9mw8VO=E))Ye4Ug-sM;e{X
z1^YD?E}ybp?f?=Dn^h&YHyNrZ%DpBDl<Fr1l0Kb0+1$ymec_t1$WHb!eQ9|0kJ%P&
zEh21Rz2UW1bxMQtue13^VZE6BRj3GZ)c5Ys3E9d69p>ba0!G}K;C_kNR|F^DAA<|_
zqAx%H4ag7e?C&~sa(()!g_uY;)Bb2|ocBum5$w8s&xV+cAiUHjiU|=HE&QzcP{vkA
z>-Vm%zjP=i?Tj#lyXV8RA?V>#0v)x~5LP}g*lkb5s-Il2J7PY`>lMAwwT3z;&=AKD
z+$ol)XtMHf1j5ql52GgQAC?0&@!RVs{*L8)gqiFE1i{Iw7xz<B*y;(BZ8r2EElK|x
z&YyB<3a&VSu=1TB=6*d`6*V7(_8wlOS%nIqdQ{1-6#osD-<Nplrpu_g+!c;SwO%g|
zW;A%h#jWJMJyo_~&OE4W*)<8fm2EQs%2rWGwbfu^S^z_=pf(>UN?brf4pRk<Ta6Gr
zXhUZs&rjy6RjeEA#v=$Z(7Mm9#hl&(N0yx2sWd{qL#iG)H<#JKe$sVCVAI(wq2bzT
z*_p|7s!@!mP{Q`y!8Ni_VEdB&kbFhQSM0+;zH6ph7wYtP=hKHnBOB*vP9puBKuEJq
z#z$~vEHSL81)mlTGzmklNd6h$Afei}PrHZQA<Cws%Mr}cEy7fke~P*+uz1uWug#(v
z6R0cb!r;6$)pETqb)bNFm!?72#IR-;%hsS8PqB(U?$}hE7i^-K>hq^9rxJ#`A5O4C
z!wFF54LBjyRGp{cRxyrBF*Y*1o+8Da71Voq5BkoCb72u}fo*_vgGGm1!?>XHjrLrB
z8DXb|&b_f?*Ie{x#DneCjC_1$;?x7vJ{nc&+rR;^vl95VlmVh{Z4u1X9hd;7$8j7c
zCFAf!eeP&lYtRTJF<6xT3zdvCgWHiCA@5!Ptu5QnFB&g>YRWi?@EYEkDp~2U#8z&x
zC}YeJo9gQ<Z^jC7XdWK-(tbo$aKSoC%lf0oCPmWEKn(ruUUIs~`>yzvZwU1jrKOFm
zJaHIc;n(`);>_IGJ4z5iSVROYqWk0tbS8pYi|kjB``pCJcxzEgJO?wKiKc;G#<IfF
zn5&B~Yiwovce|Gl!ZKH6b@Kfp;ghSP+#H|HPyjl>?v&f<JPG8Y$(+J+;ge4lfX?~U
ze)lI6(58UpF@cxWMR_^#*O9iW$!Rq%p1V=LZrhi;HnpUr&;O)wAx#P@jtzW7kyrZ#
z9GH{dl%}7P1{NVA5(8XIJIqSW_`HFNtJ6GZS;Q}qHH`}hf2and<zR$EXb3H|CHQ1l
zNk@VwlcKei1e|dqtzEm^${$I8vv|pw(<Dlav&UTFo`-@ur`y0My+~?@pNW%tWm@zr
zKvJg_Hk<+6>WhU%T_s6Zbx*fGOqlkwwa0jh{}!k36Z@aW=`n(POa3jkB+Gzc54zp9
zk~mcoB3RRJwdR0!Fz0m0on%>MX<`y>4Ekpxi!wz%exGC*?i>F~c1`gKX9)S!?=Sw+
z*SWN_;bmpzR(YQ|`&bvcuIF@-;1~3DIp>lK2+LXnIsiGWx0j;^9LF8yS<P)0xMg1b
z>*IVs&4~o=3R9Vstxf`2RPpl*e-2cCz0K*Um$fOC)mVswBWGK=H2jhR<v&n+c}o^G
z#WIwOu=W7_G-Ovt4L(0-iN9+f<{zCMjQ*OZM%oCT3kY&UHlB~csZXsmy59&u9E^;^
zpYtO-v&xw|KEj~&9MsJ;A>9K3m(j9qIeA}9>^PazWHS~oC<Er6e_T;fO5x?&WdXTI
zR!B3zx^k;@!m0i$D7lLxMkONRDI1B@R>%o|SXAWmsJ3N?yPd`mD`1$5Pnqd33Cf%t
z!HvEog8nvvBL0~zN)i%LJrgJK!j}}LyiP-~yW7S5#EXHsOinGo#e8EGyi>e4ljpu?
zU$%xF`6%&-dx~$z^|AVPuh>n88V~Sxsw5#ChXsAL_^!qxo_Zjnnd$7+t=tA@Gioj$
zK9<c^BiuaU=f6jXM}$N0A^C0;F&Z*j9Bwq%&F^-fLQIqMa*}K=hd7Bq%M=SgnJnXs
z0~>_W!jQ?zvNa97_}Qr+>W<-DI9aFnc=EHoylJuJKLB8*yGq(yg;#(kgp~Ky2ym`*
zJx~v%)MHf=&EuREO1lIaIZ?W3sLRiXS+$EqDrRPmZ$7tDw%Fc!9|sN=%IB0NvJG}t
z(kFw!(P$oqq(Ih_owLOiE`nIxyGq*l$k{8+JZZ^d9rg%q5-{)fKvw-SieA_8eVKwt
zRNmI%`_eCgnTj#;E5p#P8I?2bu%7pn*-9nDFfEo}IyaI$>}~d|#*dmeGI%}<J!T+x
z%e?TxWDcy$@*XZG+%z$z6su>oOdF4jy{z{s_(Y<IUZ9nlu6pboqZK{&kYQgGyT5DU
zQ9Z<RhgirBN=w&}oWrWCj|1~Wkzzhn0}-&u3^H=ddJcN%W%Vhq?z-*~&Livv|A-aW
zVgFGqjrd=HzMM+2SdIO+)cD1rrSu99Vj*|WK#E@xUgBAbFNyi^U<#y<Wp2?yRB1^3
z&uzcfnz~DWbY~{O|Ekk5Zyf8xhpVc(^HsKogeYh>m160&`T5nK)4IF$`uWUs@1k5+
z(TwPl*r&|KC9v+Wb^(~`eP7MknoN>;n(pGoAbHb|Zu8mZq@whvThA@#uLkUPS1r0D
zBj7Kf({H7{e2lcVOecRPA}TA1N1u@jL=Tn<(3%NolPyQNxJuw#ayxYu>gtKKVK_BP
z)G76NNh<1mN%@>|inaG$PbBCd5^~*&s`fQrgRMK>kg4L_;0`Zhy>$m#6k`_|fTTYs
zQTq5e2G{V$tE9=R^5=$7vg$f)p>ifbiP92dcVH>gW?|`gz)&snS2>S@QZb((KQ{@H
z!k_p15?nxw{*)d$Zb+dDWUJ(_`~p@)(o3$w+VO!hv#?cx_L0f4&_?w{h}rgYSh&FM
zj6I1XDLCVJYHrV5i$rn{WD8n<1>_l>lp8}8ITh8sFh(tKaCEVWR$u}<zU|9}E3GU5
z+SK0l)zX6mW}fC4DVWU`PQWd7RUL&toHh){#1p5epSwNLomH@-Tdy+qdSaqlTrg0&
z&GXY&PEzusYZsiq)aY0Ejm@M@0~1-mV%_>+{AjxTyH|N#eokEZOQA!rra8n}2MA+C
z!=EHv801GGbuo3cJzi2b;?QYm>@EA<mv^&=KPLp~b8=DZ>P+INrkTh4fT8?h(y@sn
z0nsM)JS}&&@x5?-B@<{Go99UmnP7Zk`BZSefyxK1&wtL5qh5MiH15$Wd=WWy602U<
z8S6i5>U>c4Dj3NkXeK}0YZ54r+S-1H)^Heq@)(D&2Q~Pg5{MkPBw7kY$$GNl7o!Z~
z0OI?7DOChU<eiO}7k;UnFY0!%g&_N_LCk%ZBCm;>Ldv_^f1G}AgnrwbX|iu~8ZP_e
zS&ZOWNm#?KX!m$DQTM81+M%bNr~mKvwQB$|3{+oiBKO^1*w}8+%>{m$NQ`c3tiP(f
zK(7{;2hpM)Dv#AJ&-*}T9k1_K)a8@YHN6rkdcU?ieZ_hsC&9hgPSEVwy1GW)c*Asg
znRtTwy2%3EoT>$BUG-xUwT159A@JNC<*e@WWKTc1f7#XI-}{1U!!BJ#*bP-a<+~-P
zX+pDU!;vp9nw;p1z0Ge<Eo|d<_5rHUm9;^Fm!1O7=}jJ)G;Uiru8TH0jDP#;KaKjg
zwokciZS{_6TknUuV#|)0a7v`rLlO<1ELz7#QmcN#pc`wL9bTU)IZY9S!0R9(au2$9
zdvl<TbkdfuG3{%yh&{n3cr#)m0`4Z1SE=)oc>2`v4P><*Q-60dA?RduG-;+kt7V@|
z`~npQgrD0zhRyy6pEG`wXKn}q>)R{)=~!$o&O?TxM+@#<u!hpiKFAx7Z{s9*P#&#g
z(Z;Of`JED*&Z(r;JZZvPDnM2LCf}T-nE#INn7~!CCGvh;iiy~INE@g`5v_XlF@IhP
z++HUkaT&w4JLsWg;$e^Z-2G(O>M_+!AD?AQzA8c7Ljfu)pHoSw>v4WU&pc+sy$QQ7
z1E#mrC$9AupB`nipH75Gg!OwbNd1~}LoFJ8toWG^MSt?Auw;|UE_pGoPg8MO)JD?b
z-LzFIY<F5ISU+O?4o_x%c{t{C@-%;yvH)(%MeWHKi44Dp?bw+VX7ye<ik=OEJ2IA#
zeN+-X?ttqO;>tFUYA_26X@6Ri6&v1a$5>+(+q-Qc_rA+ts>iSW*pX_<kcuBaLaXhE
zyY+uXh=Y%|Q?Xu#Q}&C@*zL)N0FlGCb%~V9fP|_KKE4&c%HE~dW3gSSa*(8p6G{{L
zo7)6?-h17_QSM&r3LFkjPCn>}1Nfi4_^J70YpLW&muXDiP6~~1B_lNzg5_Fi?FP8I
zU>$Ly`K2QQ->cOoyI(V$nNUjbNm$KrwMUs!&b!4v?-#;l0#r;*FT{Y`i#<e~2tkZ)
zs}%<nJ4ZkDq(Tl#_m^9YNZ>P0lbP1+>H;w7k`?oF_ZPCG`L2c_V<#1d?$wdj%7<kk
zrp*e=IZxc|E`5Ml9lC;r2f9xBHm4_)x=TFHd`v}krwIa(kJd+!rI&!dKMfK(cIVwE
z%R#z1R(lgy;ltTirw3$0L`S9`W5$;w1kZ59TC+;e=FI!#PytZa;f<5TtxvI|t%r|h
zYX9;q`9Fdh^Ga4oG7M9=s5-p5X}~Qk0}k0I>`ELer%0P@>6PiT`4`1Ka3D{pC?G*e
z^Eodr$GmZy*k0etvdUlTZ<K(qpr8Dj*&2Yo+D>tK&ClxQV4tx6Vi)sYz)t)#<ollz
zAhZrT|7hf}SlZxCi*8-<{wrpJ;vHe)gkw+@TP>UM>&Twga%}kGUuyYE(ZBeOKVs*U
zyZZWGAv+6uW&e)s-%HTTe%i&$S^*!bp-9tj+58tPb*5PUvi*NpssHbwXa4;F3`VA1
zY}78}kFn?J=vFU~|JA`z+p+;8To6bTCZs|aiBrToXo4%6_J{IZ@pT%+my*-GbHd4a
z9JfT^)fkvD`&Aq5$GZoVR_xD5eJ@LCS>5JWt^u6NY0U?_N{)}WPS$?-q+(p)zF(Ma
zpT;#Vk8XbTY!u2p>y?o!K=nV1tF^g0e%CnnVq|+aTy^By7&x3f#nmtl{~F*>pW6(4
z;8f3i>;YE8^2_zyS;A3)aPi#n(7OQzp^dIa-E}fjp2|>ElzSsA_T*dnH_nbe<I?7z
zZ>2BOH%_**aX_*jc9JB=Vahx2P@$otPLtAqys_Ad*8*E-)muZgu7urUzUlNeH~X_h
z<!C0P%Z`+^&7>ea5`Ndd`;>op9)0n1GIT~!#UcHv4XZ<k@eIPHEs2x(S`k3YVTnxn
zQ#Y9ZiM>hufLP}eUjH}o1LyZds?rvn-^C4&8J0c7cH3y$kG-)4dM(~qmW`5R)kbjG
zuUVC*q%(rhRWqKBg)u7OyO&cT*tPE$hfxJSH5=T{?SxS7&EjIy`l~>u<CCt`q7=S-
z?O#azrs=4Ivj!9UmG;4-{&5+fGSlij$FqkT+<kkpJ3KBk1=M&Tol#$5Tz?ieM<Z7$
zz|6f4&JJTHVl~bn&zP5PyJv^_rsCMmaiouUsrxT$M-o|I^nSlRS!JJun5nu!8;SXR
z?cT;Z4(-GFS?2^DD*%ZV-N*We)!T5!B}<1X?vnY+ZxYlFe)`=hDCeTL_gX?+<`D-2
zq8yH#H8l^SpsQgxeO~iHdqAoR1zGkvRMi-Kus;?e(83%rS;`P?JO{2x?*o-I49(9=
zaD80pJwVo4(3}fhaC)gx|DILpYZ?yk9K<F7zZzxv<}r_@udn!gk9)FH^P}DNrXEUj
zch6)SlwC_=MKZX@?K`%*#%aaDtDeX=q(TCH$rMgsri!iIb32J9B;x+R9zAy!B-r9j
zPwy5QD<3YvC`nAa39xer*UyJIJl19XB5b*b-1Z4Z7Cyx(p5SkE5Ri6G-AT8-z0?^g
zl~!G5syC%a^0uCCGDSh&^}nQ;!tu&UhL`;r6wj|}U43=%q>rcT9cdt_dN1=gxE#}=
zZdH#9jjc8Yshm>)aelE;O`n1&rhx~rymwE)*lh+C<|}L3!=6h#c^(j&B<%I6<O?lo
zOBY{aLU;3x=hXY{4M*PwPs5C3l!(`<VN>n2TcLz|hJ2|V`gaew{W4L2@$QifG@ElW
zzO^d#=pgb}_9MKkI3L4$fkTZdl~p3Xt1yl&{`sA{tmidX%bUB~_2xmGp;Oq|%iLD4
ze!9}-Rw4R&5sBlj)gI(dkT!&TcHWPXZWa;E@OAo|%GwDDyYmD5>M0MplWf{o`=6z1
z4|^m~lLv;jR%!lGaHu~7YUzosdiIEjNSCM@v{xlH&J+AtQ4kAcYTS1QRvgjvn|OA=
zt+dyg_x@8HZJ~Iwrmlq0bW_$UG-=4+NI=YwB&P=2a(W41GgdeX1fCq3<rDi(R-e2D
z7<|^TSe-FD4;+`fFesCjri)XN`t6H$MrJuJ&f0x6#KG@BH49d;?*%OzCnKVwGf4wa
zc8J!PYS-uWdrWvuQU#bq2UKvD2e3e#idwYhvigw{Qee)Cc&NPueK}0!RLwZ|XX@TW
z@FB;}+|}UNdod6--w$X_K_G4W2&dgf=l3G^gu_l6GB39!jV7A_SYuuN#*hltrMrT~
z6IE$IP`vyAljCf|YMo^Oby4AC(!6F&rL(Sps`O={F^yOK3G%&EK_E=ZYsDikK(~1M
zBeEM}|9cg`t)WvO7woPUM<@g~_48MAvt5@1nHQ7sKH0t9cu~VoliIx&L<`fCmiC8>
zG$&)VM`8dK-|3;QW$Yo7bv_5#F6?4%@`cLiU$iDH{^WUb<0(@2&-F%|JHBW}RNvJ$
z7EkRW!qd)+i+n^!lX`1)wv{cq%~uSKo`vauF>MW`O^Nn8g`ZVl>Axg|NwY95^<<nC
ziZI$ztrd>M<h+<dIM223k@QNnP-XG^kyY=UFWQpehwrtlr<jy&sJX}@W?CdhingjP
zMO2?1NYj;VINSn)RoP9Q%4S-P-c4QAbdDCJKcqG&B4dd{8k2shyO)RyB#c{mI?7`I
zqIb{b_mq%6FQbeH0S7;Rn;e8~Hg=b14S^KoG&<TO+zX{w(rt^y$I%W=uDg+`J=5=f
zmXBN=Rq+aht`@6BBI8xS&s6Z^<bTV0H$xUz+#dgtq>k9z<Wz0;q%AQMM~r6xDvQM=
z8)b~z`yI&~dP}{1hT^8l*pjz2YrwN|A{CDx-}iSrc}84p;<;aN^TgnuSoz-v?lq3%
zeaQV8>5Ap2*NRGj=LO_+n6UX_1`cX!vtcG>Th7<6Y(A?YBZax&rb`|Lkqb)JxS{~D
zzt}R*R$fyV{tzeAwO(7>nS=BuaXUoQHVa*-$vR(UrJM9u;rIYNBN&fY-{D+8ofKr1
zxdK9Zqrne_lpz(B`6p_s51%(Kv^lH^rydfBi|M=33J(tqn!cB|kQYx@`(2?!MEi$E
zRu#Nt$<FICp{5}&#mNj;BJp2`-!GL11>Si_Oiq{?Dg@<z{S~z8d}8n=)|KF>y72&=
ztlux}%vUb|!TX-i{vxjf+x#?Obz~10U>iS*<_G!*%B$(tH(j07sB}M!OP8598O)w_
z(`#^j57qzddfH*A(M`Pku(qn-)f;b=Tj`!r&3Yrzc{?vHWcz&b+w*rTBj%_rvS}8a
z2oOGZRTCI!hO)9s6P_K|Ebz<lW@MCW_BNME7v>f!%dW>@dZvs#t%QNN1yf&8OBwO~
z=^=DWg1lCv{c!Yo*juJE>dtsqN(5a5;;d4KN19^{`S=Z{gW$D|{}VH>!?Zs=iaD<w
zjX33qVB;(5+S(n?_}vL_V<hPaIeGatyC{bEkIjc@`J|gpW-cNZk&~s;H&rFt-@ihI
zD-f^mpIYcY@qo5}q@f@ZdIa}jJ=yh!9dL%)a5B=#PIk8>gf#d>L9;QM2hH@jQ;lya
z56#-tG@*Fw7D29p^gAtfHTuP1qL4Oe#FvljkUFK*N3-OkrK?}xd|ZKmE`>)hKMlT}
z9OgB1DlPF|7hEg{$uB(eRB^E3u#_**85i|>B1^#ycDO?X`?-DMsmaUg&vVDVZ`ME)
z29z$%z<Jm@%sl~Q|5P(JW{=3wohJ}HWu*HoxB=?wRcwpYG0w`9C=?LeGP>K5=(@4R
zNGtn-dPv9VWG4CHV-8NSuO#GUzS5s4a4N?i4xgXhr&9{T856x%EqWH{`muUA=ILnU
zhfNd{F)<IZM(vzgIOP!iYm9JZOiGYKU9{Mb%ikx@+q1pppr`H03A(1Ly{mW1kE^0$
zqRB`UjFQ<BdauqaCFg3d?f1_>I2~@noBCJrtoIbQe~vw*D|d!O@w~3vvh5Sw%lL_>
ztS?;D*P#B2(0q#HmD)S$P??;F50k6Bb?E0oU+M3i%LjFq7nQ(YaVM1I<<s&smV{Mh
zHY6fSE9_4p%o;J7I1>cJ=FZ;Ng(Dkxi*?Kw3PC|NGlg(|9!JON%WXbb&%&7rBORS`
z28Jv9591b#g7jk2@C~z$t&(Kr!b8;PX!5GVtYSgrW%W_Cx|E!KL$7a*hgg8)UKcSD
z$lRvIIyl7THfH%`6*t8L(yB7nCRHa#^XAtKbdF@mQC<mX%^x5u^EQpJh*a%XSOqRf
zB?kN{z?2<tRAzIM|4dLvf968N<lpiMt^bZsFqWDlnTIb>WCb-8o0h%*O-Q7An`kqn
z-{I<_gJe^P(ZCyH%R=vf^J(Sg$c|?oGP&}+;3Fd1WPNl3wH7@qZ<HUf8Ifk-Rv&F9
zD9js*POBSW8?he2Ehy7Gt6$k60cq@P*77Ui&vCOT^;;}!aPuHe({?GJd^+OET>6)K
zk{<=dw4c8XWl)+3d7hE0t2=R<VugrauehG9;BJMqkt`NC!wy+GQr=8+l>U3G_af|b
zyiHP4?2pN+(W8?vnXq2ZA_J-0+$<zA-czKk%1@=w{H$c{%nYi9dpj+8{N;ZH+^$tC
z7{$+wRG_qK*HW<!TT7WDaYe)eNm*9^tkp_A#^{DTQM^=v`bdfxf`ts7EigMYfr0Wx
zqY=_fAkXjG{-=+kIl{u(cf~u|*e@HV(0*#nvGN&%`%}X-{o>FZ=FjWy!{yFR#iGG5
zh0IX3tYLiVzh2B#^I{452pHC69q&99x_9T*WMO`<X4z&&vUirW1~#Yw6D03zH5?KG
z*qfK%K?$P&3Cm#OZWvW#wwNN(lPQjDI#zL%)AU|y_h@FMpb<+w=~;`Buyn4nZ|B&c
zuwd?=s@{Z4usrtx$p<$Wbd$iUUh$$+Iy*;ot+{yozQ~u9<Z%-!1O}Gm=QTtHYAcee
z*G_n!WA7m}XS`jrQ=I*;r<e#sW!%+R)wjZyJ9>`XD?Yyy2h>p}Qq%?olLOf6AEyco
zT=!?)rAIiEsH04UO-W=Kv|k0%zB4Xb+%5(_;@1u<S$V!K&tWECQotCAJC%0<tiw;&
zV;@?Wp4luMRfKfWj_CVfo&0-;nL`Tiz4tYbDEWpn{TUx08&_f_RUEQOtSIu!_qK*!
z#2%65dro&47ao&O&f*e2UO!dTnY>6&SpI^#Xbv-raeE9d93FodT8S#Z(dDJ6uzS&e
z_>T#NHC!MSNq6x)%fg*8are%FD*LZSjHFqJ+jyebkKXL55Y{5emoW2cGP>W>9(B$!
zexk6SM>EU3QMB}oa-3Y<ZpN~w$Bw(e;{K8~T;_$4ZEoL(mE?7H2`}eeSQIEc$q4#!
z`hf&@OIDi<@QA^A|Co^X3+;uMV$53xYht=6mgf#mB(>1Xc&=7m%3jQG`Y$aa9(v@J
z!q=$s;|!dcJOer3)P2V|^WEDm4HJng$L~!@pQ9KXOKNl%ho@kccU;3-3(P;_Xo$c9
z>7qsXyel}wzdn4Vug9M@jYXVWUrAb0|9JJztZ6Nyii3UHQqMz5H__O8cdKA?!jPuI
zYoNDI?*&g!=`G~_CTl{M=j`SHv#HW$nbQQ`i!U!9NYgRvszyzXWbRzzNG$BY5^0DV
za1=7JL9XpHD=Z&{WH$a@r!!jT4HWSYl<r5(Ss^Yg>Er~VWPg2dhR`5@*<`7IA8B07
zgNKyUR)sb=VdYPWqW^4>02f+zN#cL0N<i{Fql3};V;La#$Jz{xpVA>%vpBQVL1(A0
zydX!AiVHfosrVib`N~TqVBY)Kud~*kEcNSn)HVy>PTiyZd02#+k25+c-`$axl{Q4T
zOiO!Qi<A%WZTrGrUrt=#cyw4vKjMXlxar;$dKuwU9G-e3><mrw+Pyg0)-|>jw8-xe
zYc98^aj3?4ru^8)1F>eIbqe*zKV#}q^In(TO&8c6)B>Q!M_8a%i|Di;n)XMy#5|S&
z226c`O+95?O~GYgGxTc1y^6G$%u$?3YXiACRFO3IxMS{JRTBR|ZhQ}i^8*jKfMc}8
zbf1hbX1wvfqG6+OdCbbMmLzZQ2~B2t^E!g#jD}&u@6W1i8T(k?H=B&kA+eJ{D&)@e
zN%C|juwi0H^S-ZW&gN0WpGui(@-?7w&g{DLNs)<}@nq3V;E&@93Ab0HpE;|G<|S3O
zL@a8ClV+y{CnY3ui|&%niZ+>@{b8J{4N5s6#FgNvG{?|8dyH*6oz>v{5Z>a0x;m@{
zg>ZBctam-DdaTgP$(jrTCDDk}&eM<4e7pZ++yvu1T{uqn-1kSSs9k68;OBm(txWTE
zjsi@M58vtuEM+Y{xOF)1;*3*`cP%Z-3PMm77i|<Q4tu#J1nHhpNS@X9n#)q^Vhr~n
z59$PtOa#p)_kqCuFTS%LQwaEOD$!3H%IEWBAlDg^nhe@`4<jPDDxhP8|D);vq8?(R
zAn$fnw6$%{7!xD+eR@@fjalep<4S;g>CnVX`6;Fya#a0{(s`JJIc99Gnu+Cb=czT4
zXK3L^6%#?RUHRB9(CfOpv;Pz^&hg?6VJdJ-aAmf7p2qG-dN`@GalHNrT?vi_InK&=
zBFIG{)`6jcdg{C->*N(b0|j~!6<v?3B^7ToHE}}%x4QjZ_Zlla9E;KCs-{#sILnD|
zh@G>s+?4Wj(h~Og!|OCdT4b|Ok*dUcy6GJHGLEku@|zM%X_L_4G+QXxe9d7n2Amsl
zdPhv>1phUQ;fvGhJNHC0_WjA)e>gC3n%-bYIyYM{U`M13DB*VWdDD)%j72y$HtZK+
zspKm+>pv=(hS%AUj>I9e)zzj?*YvD$a%T5nZpo<AH!tag;bfrKyjV)4_wmd@?l~CT
zf#gYv#}?eNcbeNx3Rd(3=ax_?NnVt>mar=gcs?<y@Y(<BcL%HPrEIfSw8RtEEjTh6
zP0MkHJY(Kbw(`op=33UDwpx`>Te~7~^of_S!xX}b*_*NMBu<meYfaYy!@n<h>8TrJ
zh;ZxuHJ)W%aPfCDSvbPNqy1-~&!6;{h=p4zx3$T9lbd<UWC4^@B}MhQ=iNcl{28_q
zg&AmU7|ups(rhPDAFX-f93J>&H@Vhu9S|kdp065SEYQ~%5z6AVUvt`1<wY}Xu3mG}
zOeb)(nlnz*gGVKhLw{qj@^e_Z(*0nGNubd<xqz@Itom!VxmJ-uHDZi(eI?sSMfrUJ
zVg30DoX=<LLkCtw(61~uW$|6`)|cOKyu5?)!~CZzW>TqeG5!%0rxB9-Ax?FmFXAiC
zh=*DO9*%TaNu7RH?#VFD;iOmz@5ONd0~(b{{e2@{fAJr<UgOFSZ|VTtw{(~P+A?_l
zUnlqf_jvL@Dhj0kUnT|q(aC?x8vOqqaJTSVxBf!{<Eq(hdyRDI<@e=tFW}l4Yq)y%
zFHb#UxbyzUgZppLz*$7syEhMDAp&u$Z;3&17jFs~;?zf|8%)Rd_`KJ-PH?MA=gXU_
zkWY`&Zwf~Kvm2$b!Lm#Sg~;Li>kO_0xz%WI&1Yq^9=j*c-tLjg>|8Bzva$Ex-wRIX
z;ys!}lS@Wdd~L~i2~RGJZ(w-6sm#Hcv(hN}h}%E?5v{aiF`IdYlea5aHz6T^^qFB%
zEO;$CNkik%N+S|{(uk4pdV?!>yfDa|6{Vtnew8$}A!T~f_EaQ}epe2?m@L56SSNsS
zse-y~-(!l6UBBGp{Embpx1IpU1lJ6hPlgQ>650-8iu!E9Ks41^0}Dk)vO~bl$STOF
LNEb_f`10QXTf}Xc

diff --git a/example/k3d/assets/traces_flow.mermaid b/example/k3d/assets/traces_flow.mermaid
deleted file mode 100644
index af096c16af03..000000000000
--- a/example/k3d/assets/traces_flow.mermaid
+++ /dev/null
@@ -1,8 +0,0 @@
-sequenceDiagram
-    Vulture ->>+ Agent: Emits traces
-    Agent ->>+ Tempo: Pushes traces (remote_write)
-    Vulture ->>+ Tempo: Checks that traces are valid
-    Vulture ->>+ Vulture: Exposes validate metrics (/metrics)
-    Agent ->>+ Vulture: Scrapes /metrics
-    Agent ->>+ Prometheus: Send validate metrics
-    Prometheus ->>+ Prometheus: Check alerts
diff --git a/example/k3d/assets/traces_flow.png b/example/k3d/assets/traces_flow.png
deleted file mode 100644
index f455afa9ffde22803f674c8d516bb23a91824d86..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 222160
zcmeFZXE>Z+)IK_X5d?`Ey@Uu+qDMpxCX68@L-a1uqDQZZUV>=Ri7-TTqPHMS^j=37
zy_eC)oSpam|G%DZ=i7O%%Y`xX?7i1od#(Gv*M5Y*R8zW5%s>o*KyE9;pa=+rumS?X
zcOd!?yuu(QWdy$6a)jx=2fsb|_k|a_Ub6s!+=D1X<upCgw`b4aGby`qovpFNo_@T%
z2MK_XG{%^f|4>09-g))9Y0DOkMfW9JuVsx!yS*6xV^NiAuc5EPQ&q2H$QSoK03Y_>
zt$R)u?0cWu=dTwiVq<APn@~u7*hA?Qy<ry?7N%HSJXkt^UtU&r51G3xcvRlwLN4#p
z@{$|rpX)!}q_gj{{|3d-M#6Mp)GBhpj7*TO$xllV_IO>Eq13|DNGft_Abu6=?e{I(
z;hv7i=SM^8ZayN+^KVX{%sbdgw=8C+O*c(RyEaB%Tb?}`-m78dqrd*7)JTDuBJ}c;
zh2|zu%A4TG+OK1<xXBnnqHP>=5BMENb?HCQQHC?ek<qkY&o>cl<7RnL*YihB|NGi6
z@P7Z#WC2*#OI$gtDfuK$^2>SHiGQW{&MYr8bih~{r5+<56hyxGR-!qTs>%B_wP35}
z@j@!5(93Ujv3N&^^NjDKxjP(-9&Twgu?w_)<DNELdQ05P?gonp*2rT!pTwce?`v9a
z&cqD1EmL5_>P+H`)X9hKxoSTL7kn_CtOp;kvW=}5cqh2%N3CE!Ez7Sbaq|na4HK%9
zxN=-gi}z^=#R<-+u;bcabQ^~?ip0wPzkNi#7MI4QSMR;JJMTMimzd4vXQq6E^{I__
z$>RDWsT0_)JB+Ex0;{q)m+3eE?CjpQM?-XbnwM|kViGGhJX$<1=Hw`?!>>hG;!s6q
z=%Rs^v8;8+o+buMG)s6@o)!gc<v+kxj-xuk$vA{!{r55ExILpAC%F67^q2l;zU8>n
zOCsr{-`DdF@dU=;^=K3@>)f47+`<+x{XZWl*@~Rt_AkwFd#4m${NdP^J<dn`{3kO=
z2{(6aj!9Q$3ygVV&#!0yUhsaL5~&f<oJvdXTAcLhk6kW8DNPBj;RDI7nz(4oHr`ug
zgW^jcHs+iUV<s0g-e<8vm>s-+OSESRUFp`#S`Q4|Wg1@Wh?Ys-_%ohso|5U^L2;>%
zn$6#}5Y-W<lOM*8w=$IB+)ME<{XKx)W9C?ZPxSu<L`%rOsGwj?FT<T)=>3Zq)V2CQ
zkNo=~1}pnh>IAp@V#n__3blP|G>L1^(v%fz(02cg+CA-LZV8k#k`%}C&$c9+`ztf6
zv-l>2&~E9dpE5-2bd@(Omq$H671*Afmq&>xm7cG^W*(}?cz4|^+^MshB~(By@0*U7
zn_}mVC-3i1J|=A@1!E<e;AAg=d9$cb{I_xcW^x*cZMpOW6IM3^bCUhTKwwO8>3<3@
z!?9wUCvob;m$Lu+*2||+SX^>~D`a4yA)L<Rd|&w6fH`FS(4zPR<!R!yzPyPFfZaK<
z7C+{?CtrG(b*l!X71ltbwXNMF28vrlzV@5m6_)IGGMXLvZ$Kd8`r>C<6YA^UB@QjV
z&wkI0kBDzh(>D?BB-=WHJoJAqabKnjMm6pEO)>BSE9BDyy#M*bhoc)p2k!V&OM=Oc
zf<NXLrwV5V7a}PsZZVxhWKmO*41`%>mwxqrE6Hl4J7mAmt|xjNAIQknj35ro{l<X`
zRQQg>ZLva3Z}Le^oy6_r9_2=(xC~ih4$f?4ug?bqapyAWSiFC~N)dc;zqbza5l6|e
zEFYk*=?G5QuA2AhVg}~SJ(L7jIMZPs4o@pk3p?7_6aFDgayZe{5`=5auh)e&aVadz
zSE{z~fMRZhd0K`e^xCDVdgowh=Psl%W%s@Guk+!p#$gHG@bTr$wLCvwGxkoln~tfD
z*9`a<1CTv@4a@nj4wa*x*d7kSmDTdkkM3|iJ~KSN-yho=11;skTj+CPf{Ksaz5|x1
zKXGJ027&B<Y(IbZY+d%oFC{WlC%Tu8Pdv)v=kIyWt7ca%rW5a1lM2Iu@gXuM>kQ!g
zvzm{Q;=k^Z(}cFVCf)bYFTDAoW-IxSoi#hg_ws*D4OzGmP$te)XgOB4Z1Xr>bUf-a
zZMtP3tAL?W_t4{OLcPuV`{fR@;GVCxd`=V}dp6{^|JtB{Ko*KN`-%5<#hIp9iTca}
ztd%e1b(jc-DkuCb*zF;#U;RSIl=sAiq6b@vJ{jP7pa;(&OxbJ7mcMcc*7!bX1RqU&
z7^J~#ydhipye;b3{2t$(d@di^ty+{%+sXm3|Jkz4+N0e%DYf^qWQ4}^-ngb^A(kv8
zDm&zs9rdq+tDKO_tMtH*D}Q(X^N&oI9-mOGm*(j$1Rt(NfG0O(IC1nt=S+>S1L)`Z
znW7XzP0q@Rq}MkEOltl+)4jm7UNY%@GpFCZa4KCsHlM)0Jw9Wpbw{yZC0`cbf%x4C
zy1UT0<(ew7G~@D3#W=kZqDIzleB&98eu0_(EBztO(;qQIhR~aRX(6^w9wJThDh&Of
zAPy=qTh{4~1g+UEggS$Pdo&B9Oz){k7HlOB>}5Oz^zONnLS*p8Gj61(?#>)Mq5ZV?
zO9*`nI5KEGkz?*C3$oAl>!YXbDV{Mf@V_fv=-b4K;4)<`S5U{I&f*W#3?Zjd0<!m)
zan~_UgLsXG%<b9JS(Yt4Uy>9$=ggh>$)4kS*6CSKJ8O?0y%zZ;eg6I&`ClX3u6@G=
zX|qh$&fO24qY|8L`G;bLb>`w05P~NrH+4&CA36D89>4Uy8!#gIE8KJ9Y-gaV<Nzb9
z%lfHRWQRgZoTY6^uy!tA7^xSUmH^GZaThZ8zyc8w4r7ofGSh-`1o_OPF{Za9Xp}lS
zydSZKoZMc>O<*6!2A!D0&uPckPFPsdwZCDV<}<R;H`E_0<L`?EH@IQdB<C=E&b%?A
ze_qS7-+;&(7t+qUstUyyQd7`}Y)cF}F5Jck)`7X3z+TR$wHet)kKG!_t)>w;x-t8j
zglSpdXM=vuV+&x@V4fOYTmAWG@i<W|LnB6bOSUM1_|eFC8OHW65!U+ym8q7h{O1It
zcSu(EM=Q(@VKMEx)H1y86CAdZPbgv$MFTGlxvKnbpdbq#%-H&9$qED!cUKzI6QBFU
zp?dzkM!jk^+A}A2-;1XcLT<c!_aouZyPvPoyqg@csaoqNcSBS^@L%|k?U}uH>#gnj
zTmM&lTb#d8u6=e!gpCRk=B24}>$(+A#D+{jFyx7nvOT!T=KPVxN`RRe-@=)xnopa1
zj98Uv>YfvBju7H<ApbEUk-SZilpC4whHh9CnIKPa<H?|RXr;s8`%pwKbzL+fBJs{=
zDj}!uMyZ_gg}>SG9UD)UmGGauQzqg@n!fza!F?<65h2@Ea;;hE7y@2yc9H{;+YBeo
zulw)UtAMoi?X1aQ1V<1UBFN;qJkf|KsRAA6Ex8c3@V2{}j$boK+m`k#gB1Q=<gVA-
z>ULKfpq%7yCA%Dp){8%HJ9j${TW2wKV#BB4MFxGn$7g@xA4HBIrs$p~A7)*2(yH<o
zXMVO{xsFMCM%`U#X@S(?c4Ml3G*Q7c@tXPE3#&Cy8$;+wDNi1Y=zbs<l6_;jO)wV`
zV(o>?Et#T#^ar$(Wa0~Pa8A5My^7wEh;}x7-a3^&$ty|icUR+7=OJXBX1CdM`OBZk
z$Sp2pLLQqq&kGG0ZU$fa?3LuK(Ny*D1QssD%S?TWsuKiLWTjEU(VIYuLPbN{mVQUz
z-x?7OCYKQEcOq?1$YbP4{c|F;)D$g7ZMt;>1l)`eVHD!8_#53HQ)RYjC+y6Zlcdw9
zjO^!>{X*m3{%8s}O&x>JpAo{9h&z?ESBY_|BVmg7hmz?d>E*OpswkQaXvP!O8wKRK
zfotu+qS4N_=vVwTc}v^;z2j~q<i&S?{c1GhHtH;VQIa4Z+OZQx5t(w}p$S(Ih$PN+
z?B5Vd`m!R%@S@OK5;z(udlH$FLQPTC8SI(w5!8Vfjq)qfs*cGYUDRh6pdYE|wd(zZ
z3Z|zZ`ot=i|9h(X#~5Faa{^+U@IaiJW+I7)(p(3Rpaa_57W0XUqWn%|LkXq)L!`?^
zQo^w4TTz=%sv#IY;Z&Leh~U3uUF5A(CGT$`C#w_2em?2}mX{A%y`ai2JENd@;3B<X
zK*@~i5TdOKfPLm@m4~rEhr&0U#(Pyc{(vxDyZ2LckkB?QJPnJ!(QAvguQb*FvLha$
zGw?#<r4AEB?b&*D7)I(>Z?|hxIYUWda+l}}?%PbJkiWqliOUaroUxlm98li0*PrEb
z+m~7+UFMlgoj#Zg#S+W^EaoG$Sb6>10&F4vSpJvK`1<ACFQUqm-kRx_jJX7e8w%=Z
z2v8?{mt(vsNSDD?vV5bc)FAQeV4czWD|-2d6L+E1QHl=_GoM`Kgp`SsZYIm%#XBdy
z)$PlBi;gB|X9%aWC<_d3UmCqHy!)VM>CLURNMp*kAIdzGxS{N3THVJsA0KLSC#Be-
zV-dBlMnrG7Fm9F}Hc~+Ybjjn%a}z2ap(|{Aobki0L@nr6V@(gn%{d}(qz7fKecPMg
zNb@L4PPCKc_~T@j$N!gy$kWr2-}TD|0!~qB962ABJXC#g<JzUl==I$%puUsJTMCkZ
z%@}kK*~pS1v#!VWkW>5SM*kq~W#v6EnmoK+kW>StyhqRfy5`<&Mts0qXXp7nhmSG(
z9yP_d@h!nQu`r>~dlX(SL-`zSC#6Xzix<>kdT$Q)!X7&trTa8`xt^bb#1y8$5W+$;
z%e)Mn|Ka;1J{C6vof%$aTS&I|VM$?7VbE56$(BUPZZDNc@a6-*Q8fdizEZlW(+9oV
z_1&(97ULRx^cD~K=BoTaT+UHn`jd+3eI!JcCpsT9OCw!$uK0dxL3U~fmY<>NjX@4T
zIWZw8$wX4}=wlHfmgA(|2bU>t#N8m#YZD{)t%=xRKiif#T))(AQPxFodAzN_u!Sra
zlC=mFQ&XMyC1$rT`2~(SnJLjSm_S-N&>S2aH{i;KxiIqB1UOH-6Ei#7=?YSZKoDR*
zRu2u&@{-A2Dh8E_r)xS2Z^?W}4%elKwN4!#ti%(HC1UpSId($T=G<JPBJ^jjR9%N4
zF4}a6lp|obx)4N*^(BZOk8$HuL(;EW!~c9W-kmU*c=1IPq~z?#=+L>MqZ*29p=s_9
zR3;}!e_+H4#DU1n4=T0MDnYNt99J_Ia<i%RzvNhcq~Smc-nNEw2U8baJ+%(RcvUJd
z=i&>Jb8=e91ti>)tEZ`^Mi5bkaLDn&C@NK=d!pM*RE#2MkJ}=cQLao%>X3)Gfs>Af
z59%J*y+Rd9)!w`#2=Vo!?Upo3VC5$d2>Kisv~jz|F|j9lr#{b=?uOeBblxgHs7GoK
zT@Y0AK^1>enj|~n<<<-#re6c-ekn8iTBF?_sB(lM_ctSNu?2~8@N#Mu1w8W>uiN%v
ziQ3kta#)GEOp)v5!&kP3S%+}SuUBS{%)R^|!V@-qK61mGFo!%M==hRM?!&<S>1)FM
zA&DVOL4UK0!Ne=5JWL@gJAjxc8~!ICc{1xI{wvN8csIwSbj#K5n>zepi32Nzd%i{8
zjhF8nk4+Yb(IkZkl3LTvH4+w6ie6+DYx;_6LjujlmEub>8JHyGiH1k;7!kyjz4c+;
zklQqOT4VsAjYmMCqxXYy3!e(|awDyip>aVRo8KKrPjG|p)Xg>UWL&ryI;ejP4ir&~
zY}{!ASOqy)lV{-nm4HnoM_}AFIwd8S$bLD)_Qc+08;_tZx3T<9Ze%^>#`(wB@9r2J
z`u$j(3^-CnMdyOKCFf;F-V>oZzsVZllzb7OOOzf1A#nZO%8pMTqS>7#NEzLJ;T+VI
zA_nR-Y}V*}ic8v}43$J8NSCeh2%qBTOFtfEWdz)U8#%h@*lE|8g$Ihv%a{UT1#XkM
z`FfLwvCZE*o{}wiI5_@CC2@{c@jr=-6yDI?PFAOx!+IQF{(z#?gH70n%=2=;HZ5ss
zX9khW6L1&#&NuklS<ONS9t2SvE^9;j>#hj{`K7+*sLI3GI7A9g81S!U9r^zg|LBLO
zdqSwYnWox`nDN`AsTbn4pplOwzqo*s8N9_cyANuyG2C%v4`^)d%^r~@#Ep1z*8AM>
zjE`W}J)lC($Nr-bo(frQ>OWbXiV_MneodxHPWbD_JU+jQ)pGEDhbQx&blwv2z}+b$
z^~SL$wDNR_^#eLS4wVz){GVK=>8%oqN?Cu^2S2Sh5W%Zx?ZtQd+GOPmZ#t4Xl-wJB
zaPRoVd-lW7=CEi*;-p^3Yo^K(5pP1ZwPW^+j<yzV7QX)=O2knm<PuQ<!Gpf?Y%t=2
zWX(aPHx`{K1p*mn-x7wSVheSWDEGd9U6QtWZS>syrXwF)*qbdH!!5$?+g_Y<xzyY%
zhF?yemf+VD20jCYZdm50u8YiuY`(gylG{CrUAORlOT4cwC)3wnhqq5OP?#v*;qc*W
zCl40yqs8ct{<O1&wv*M#hZp3n*pU94gHD8Jo{d_t&-cb}6b6!*I~d{b?Y*DUY(1yW
zJkG&I3k2PZ`|<i^qqIPWY{FFlkGMWwx~h_1P_(FLO=_d1ghcq@iy$R^f-&a6tf0zy
zeBnii8f@Ufc&3&-b%M>l0^YYhj{A#$CB%sV4igI-oaeyGa_Qp5{a#?&>iuptf&FPL
z@Vo^Mi}Qk3?QeY)B<Z-8n{=1>5HnOhHX&Uf=QI%Ve7^H&*-^qu&9GyVaFY6`9z^MA
zt@bUumeFwGdW7IQt5E!cIfKFnk-uS023chfypOEP6XtHAc!gPvl-|kMF^NG?CakU&
z#ubR}tUJ?N3+Fcko!(%OEnvenuM#!uvjruz&ZPbIUo76Efe>Wxed4uPs=iROQz54)
z|11v=&)JG%<GXX?=>4x?*_@wQ1mo;M)X;!j6MBwTm*=Sgj7F`3o8#V%*gk@@g(~Bb
zkj=AG={nD&iC0!dA^tf!M2GJU`=<|F{?;|W{~R$vOZH%Bt3%J+=*r~35>JR4Mf`+8
z@X{iml%M`sY59`hBerPWv+tNaY{mN3h)@Y4eV>N^m+r*-U&gX_<{1j=!DhA8_^6mP
zcY;P0vO|Gq(5?EQ@5L!2`4{89jXD0NTo)PtrN5dv3NXT#%`wt0XVN1g063xX>5!ip
z6#&XX_bf8%ynctrD3Cdh{zv`_x16gDgAtY5M6k#{2)la4U>C0yIVXUl%dn+RCKn!!
zU3kfwy`yNf-X(JQ7|-X!RRs5MXm^X%cp|wg{jgT{giNV@XwF?3{=n^WX4;AXn3vO2
z-^zy9zC=opU+BS1VtbF*M9TZR^d{&1>)9p<SR4YzPU*FuWW23RE_BO6)-Hc6Ap7#R
zAcO+GLTvddC?X#qUFxF`#kA24YDAIk&+5rCzJAi#Y8f}F%)~2NXfA!itfcM61#wwt
zC8NClNb^Ht8a^_3i$8lhhqZ3^a$#mo>4MuIs-i#bBZx2UVam%FZMqK0k5C{q@?LyQ
zJbZv3oV8Zc63EKxdUnIdr2b@huHjKlh^ZHe=S0JGt+ke)c!Bl+1odCK#^SHdd!AHs
z^Z|~+)U&Sk#*c=76H+iR_H*EOX??giik4Y)_Z*(*{*^MiiRT{OvVTXww`%^!&cKa3
zcTqdvSwOnU5=d_t_Wi_Gd2?ZHy}1T|S{ap!-xRqU<OC6SRbBM_K)BKHeqwn)QTUFL
zxJWJb&Pxvt4V0Pmq7LBA;_+Uq0gk1FwUNiG;9hvQC)ajs=<2s24u&lT#7y=|n?(YF
z-m8$k-;7L_;-ZUJ;ukZcdpf^f3;sff_$}VL`MTqv3a`;lI);bI#(~ks^8bh>;MTvM
z0=?uPH~-%&{XS9TKgH#LumAs#zz+YP8NsZ1?>0o7@$64lM2>MGHC1dvK-jT4JEc6)
zP_>O*Kv;6%&F|*t3wtbkL)SdJRZWW%&J&au`HO3pP1-T;td4cp1ioAl4|ILZyt&>_
znc^2pjKg(t8d84<bzQeKLaL1&9J3O=9+jPX?4OWBAaklMMpi9G?*_6$E(Z|Ahu#xj
z+&|YKYuew-iTHm@dU?s|%Z+ZDz~!I;DSB9CxqN@@#ZhS)p$FMX^If*wc~Q6Og1P*=
z*b+MNWB0RjvZ;mnolu<af(MA0#z$Daft+bLcRN?wf<X@g&IV(ELgCyN#4$TB;s0oO
zN{TLb2LgV0V+*^kz3~7;FYTek);JOJpUzy!hTTZ%p^T-~J3L7JhE~Tr(*!e4dYepf
zt4MtAj^BIIoV#|~`_F_(S}scy*jsLE@>o&2l5AHE$eV04Lw+?3R!+co+(jE2zPG9)
zsS$CAq68Hvf&oEnF}v{^YBhk@Pcd|z{Je02C)hosgsDSycweF-BA_{IKYsYnXDGCU
z-GW_CKCanCYxAeVL_RY;ZSUWDRcKz<1y$vI&BPNDwF<GODpnOz)6aV+=I4Blr2n`<
z=59#2`uk0#FWy(MtPlDEWV7yLrNmw*i{#bURD5@LvGM+CPkb`S|NbFjOBfc|z<ku>
z7GX-iZqRThz*xi{Kk<`<ctlDlmbzebP!)^6_xG2-axc6jI~SGsA}#ik31d!iEi1y!
zUP^IX>XY2KP`jRlxdVaZtFPnV!Ld?bTYiSH=uP(!y^6rR7`T^t_c$HPvKOufV|7+!
z19~jV%5Wv_3BNwE8M|3WcLR}wt6mclcHue1e(a8>K<(|HNjBvLhr{MW{+2X1(z5JT
z-88H_o{PtRk+nm8a*{?SwV`eTu6n9qc~7{8C##lUMLC2mEEn;+x1{ijF7BSM@PSBG
z@V-1cj~h$%8vXbK0uBd!CVJWO9dQOlPJ(lIkahRTv#0JHlQ8bvfyuh1c=SsUM?Pjn
zPBSDm1wg<KCI$T&6ukjcyetob?#W%TxjqWK^e-t4Q-<HCd%}a%j0k=SJi!qp?)3?*
zJe^0n<Q0)HX~yOdadaqPPTBHzU2<<L#NZ7#nbF86=Ot9w-G(@_ob`o$MkMFG(fWc+
zyBUW_4dGy)uzM~2m~=5o)jDyMq*I5)p@_}9olW+z$C9nlDiD#Y`8kRUMqc=m5&cDK
zg!%eT+Y;+(4W8xQwk613{B9UwhHD2$Q!jLQ4Pmxt&sW8j97_2M$;y68Llklzy4zii
z=m?~0k$LO>T46)V@aEV@1p%pyBl;3~NI$tW!Gm?F%cwY(^f}(h)ltR|@sADW$eH9M
zI9LoeVe~;5WuiDbJ2J@rotsTBGuDQreV>a5&-nkH^|4bIba*tt#Nwu$uW{paE&cE3
z3L;0ZwlO(fB4v)?!HsvVE7kiEsl;XuM2|_>0-d;3q1i*|;%xNZJx)KH+s_7Vi3?=i
z2K}7hS-r3%_P|M<JEk0*+Ac($)plpM4}2&S|8>cRB!w58alPv5E$NXj%N&;{R-oM*
z4(<*jH;NLG?GX-hX((YAcs~=9MFJEE5i1wPIwG}UFXf5XP#|z+3Aan+vixpNnX1O(
zy=n7S%5c5|al~f}l8wjPcuL+_5hcHl_V6OODeJnIVepic(<-H@T%0e#4CNI36$aJL
zz6<wk@>Z?81=$ChhEn#|M3&j_ydf&w4`M&Z<#KSkF?IY7VGHc9M9AIXcgd?Oi4NxH
z|K-_Q6m~N<)8rX9QuA|##d-+PY%}QigG61*HQbm&b&@UK5iqn5zF+sSrgAWHI{vLz
za753)1TX3N%|x0pdViovpXkEqzIXUvs82{6s#rO8ZcXc#<VRo+Z*t<VWkeHuoEf#l
z3}1iq{ZU~eYYIu3DkNq3TeqICFvULy;m6$$oGNz>GW6Q}Tlx~0CI6PD%JHr<`#4fh
zZD8tY{C^M%&%|5ddR4}*JtGV~@=)mEEDILp;utvNCMSOm1dT-P@A@4kl>KB}xnvMW
z{<0YP#8Q_hIyLhb<t=50hut?Xty%3{yU>@t%r#GA`H37?t4h9NIUJ_$V<daC0>QfD
z(SP3A9IwZJJ@WpcR`s0tbQr6*RIK-~_|-NOe-?Y=fST`pf<>1@vbyIx+Jemeoc|IQ
z8QY(h!fi}{Q#vhoz=tZ9AEludRjZXJ{5PO4O%1fM7M!S85(*mdJ<k>?mD*(OK{Tzr
z$N7dI%<$|ZOGoc;>7B2<VwAC4)$AMjIxlWQWc-Xm#48gJ7oJb9u}?D+mnm;?BkyI;
zosNeDzl*Hw_h$op6<ty|$dh46C%OQ-J@#kPf5$}-UR<<ne*}-kRhp9dLka^L(jrm}
zecLFY@^ES5c#Na6zuot!n~pLbZ(r)r!VVhzjnWnd&K?+O8|U+~BO-FCW5Ws@@(W%%
z*-7g?=ayy|W;DafVI0&Se&<=PiYUoJD?e|0=ZauOhy35O02pTkzEH?Ql^m?evgm8W
zA#gN6!oMylx@S3C=1Q~+v}oz~d+vB(?65!H7FWFWI;?jbe(RVe_On_mxdHq4@BFfz
z`W@Q1uz*{lE`)OPEcX79Pb3rBJn;7^7_T7XDPpPtP17nyD#KbIK1=4GN!wwovl{#v
z40hIi6sCAgkXM=q<0_8+<d6kllUd7?P>~Q3HO*3d^>M7uiABiZkr947PkW@VmCUaf
z|A}kJBXI%SKgX?XWp6(6V9Nc<Et_L-liME7Ei0@Rpzf-5KC<;8gyiF;5I%FP2_@8z
z4cf7tsC5w0Ong$&L8yCBP-Bbj#5PipGD(b((}4Qz@>!4jWGnXk<9%*b4S}x#Lthba
z_EJ5w-=dg=bfX}H&k4EjO<|w2FV7^39tCVHOlFa!Jxp$lcf|+@C`eIfP+pU=UHn!Y
zE=^mF;imeF8dg8ccKQ!boHjXJ`BrNlcd-9jRHJ-J#8v;#%onYUcN7krs>wlX$M7wJ
zaQ8O1^3NAdU)L<k>^h2+*1kI3fOyab3`xPcxw$E0<%v)SsaA{XW~|K{KP>Z3N7^4y
zaPQ4M65>WVh5Zp!mF|h=7n{kCjLc(Mur(cj5$J#BjX?wmjYPL!V`@Jm2sS9ZqUo_Z
zN*`S>%~J^~oei~Ha_!>gYxWFPR||ADY`vtZ3hqe43NE|0#qY#^p8NEcUxaa0d2RY!
zr<rw>UUvDPg$CqDEb3R57Ek)~?DSK59VIf9^GC{ce%dLwa=>6iR-zFdW_1Q76O83L
zwq9O5@m=doDfhBsVGrG0!+4GrHTjc{&KvE}3JMBSwwxJiO6(Nu)qI7B0$~lF#7~Mj
zeu{O?SNruu*T?s{BuAKh(R7ghFAHBX$vJeK3N)u@X801}@B$YJX-UbnJ`2q4rw%;*
zr&M-CE8(GH&(<z$OVC!LiOxvs5L1{nymau*OIaQ%oltTiJctKj<1r}(|5KPBUXYgZ
z0iqzGXXTDcXuS(@CA(S6&wCWH32|6%i5DYuEG*3)2WDcDqyB?9$*{!x%oGc=!(9W^
z)ZHX{ckN%)br}?n-2oRFS>f0ZJ9PbnTiP^<h)y#hU)>Bia_OKJ0q@q>ny;>c<)5;s
z_P!|8E!GMmPw9Or$`BvNli1y_);wg@xqRRvAtEfr5ZOUM=Qy%<J~DY#V=&F^+BqQe
zF9qF@eLBO-{x!josb<Pn#{Xc+;d&MKR7&b<yYjNeepXLU4;WgaWmxn!yR#v((lDZ9
ziS>Ga_GoS3==`d;xA)2X)!zO4?SK1ltFz-;@Tbwl_D+l;cjTR9vT*1YEV{kDy}^CY
zsKL$E&rc@4iwAk<4sl^&VF+8PQ4>Q9%1|5hpEjiqE-UXYCO{xfM2k_(4-B)>hQ`LY
zhL+0)%YjU8WQjrDVc(N^gBHJ8pyeYI;^r+0D^ZeLKbA0FO*(wzTdo#&V^B(pit$~!
z8#Uj0-_Ql<uGi5A=!10Q=yfdq#{`~fp>azNK~Ogbo%_RKG*FDg7~_m%Sfri#RLBap
z`3+&CKUh4DR*P{*E!Pw18VAOZp_WDu6!-Gawx?m?HyX{epL*yYoo)_&jK1&Y?v6Xp
z!kr&1qZk<(k;B>j*+4^kDoiTE5EUI0W8Ca>et~&c<1n9@n(AzrG?jL-a9n*MiYDeX
zqtq<c($Y324@V*k&COqNN9|<nfK|54qR}m0E1QYD+DTv7m(7K+hC&5KhFhm&BeG+A
zg#Fb2JXIb4_|oVFB{pBHxXG)kx~hsksuNN0x3@QVXo$jr>5FkxQdkiAiu3u#NIqEE
zk1?BaozV(D;5KIbe3SEW^qFgC%IgA6uaoVmxw*Oh{r%s+e~*s3NZD)iBpTRbQLL<;
z%jGF4B+JV=@S7SA-do3o#f`eKtJ_BJM^lQtUB&nC8f9lN$tj7;;!%3O-jcZG7&2C=
zv&<C6s0+)i*|e0p&uaPR<;mK68%?fBfgw5XFL@KYkJfrZLqoy1W@hXe{bwKjh<V^Q
z<5_M%en~E<YYeo?c9m{!4dgAq$lQ>yFV+%Bf`55iSE2yzv&eDLu@y~IrH<?ft(fwV
zV!N^lOmv>Aw)5xAEU{>6i1g%nghLavWGj&h(n)`r&WcNFEOc(kd$_?ZQm0i|TwIJj
z9#P-g+KN(?j>mMqC)txXf^+jGIv2R;6eQeMs4o$bk%?7Bs<~FqyQ#SlRx^YA@K?+^
zhDA0)k$q%j#N0dwUVte0+1S`vRh0<)jpE{b)H9A54>my(%zqu(macg%D0_4LJnJdo
zTj_E473zz;cO;gI3P-xFL?uK;rDSCtbo=D9KliNgBt{_Y1?@OJ^KFzlHZflOHAWAq
zX=rH$jITLjVbj&-pg#n9N4cV5VJV~vn_kV?63Zq0*T@8CCX}loH_}cYjXqylv7Glk
z4b9HZzC7I%8HgOrrLVY4p?%?{uojrP&-ip`iqY5WLrkQ<V<m0X%ZM#ZXY2L#+?-LB
zUinTQ`8T6dJBPKJnxhaQs_<m!FmDUp4}3;FG}_B2V23t9bwpf>&+l@lrlFxhyVNKO
z%3fJniGWRD0t6&1)5A#HBNKtkHp~szpJ^XPDc-iIwp*!Z3J=>?C8LU`!X3z7Z%$Vg
zMlXv;=Olnn9*x9vq0#8-WmQ$xnFe<UXJ<IKp~3ThaP_LD<sB%FtTk4tpNh>fU@bqi
z5@lOfn?8?7M3n5}ZI)ypx~oCoC!8G74P}>k`ZTl8!hXJ4T1KeE09hJghqfQxLQ6^t
z7&ShmzO#wZE6}{Y*eVs7Dw62C^~9HXOmj{Pmts@3IXzv->VLI(+JdWzU5p)&xl9jZ
zLb);P6N$ZGLk_xj27jKD?$J2&U}gDPZb=S^MSix3ZUa^cI?7{2qscEqdOz)jacY(T
z4T-+KKG^AFHXW{p{(fvt$&Q9KL*HqM3BdxR6wTe-+?<?*Vqqam!t5}4E=mNCMRtA<
z(VXVUb42n~^$tjZ85tRUeJ^?{HZk>En-6{71@sMW&Aoxf?YA%eo#2zT*=SY&A=lvo
z@z|568eZqjF)Ca;I-i|owov1Y4>2Vl8Xwo<PhzB}@3N@8CaL2Mo6YdMwuqU}z2w0k
z+p03K_kG7JD<d;!C3;ME<*1TFeG}O^^dBCi@rK-wT9(qBd|xX0U`EqfcV?FExkjh=
zett$EjTR<cUSPKLiu00P*UsmfydxtcOSULu6NKZtNXf{uOo&&i*UtyS<Bp{~o2;v7
z(mz26INMrH@&=#RyHga4Nac<Ot3RcDTshU-5lJh1xm|g#a@6Yj^R4cf4d(o4t)W2@
z*hf7}`UO(MeRpnL<X+I+4z<jOmh=2Ue~X^#h|u7SjGf}*7bqu&K7z~pZUOM{UcRPj
zE!Fyf2%;KuUoHOW>(f`~bT#zRq5sQ_OzuqZQ_F|BNHmp|l{IA;`(3!aGq2Pu-V`Zm
zzFjDJ(Pv@q;NbB7eWAxoa%iQ9$kEYJ*Bb<!KJvM1f=>RIcl87$B2(477iqD8>Zp<C
zHNFSU^Bz~jc0tt<(($jnaa6I(;&Rb%aB-1=&-$PrMEYZ>MMNeTF$VlKm6h=@4hstl
z_E;ECA^-?X%*=**dWSrco~2v0ss6mP7f)<$5)dU@n}y7?>l>Upili0-+Cy1$k7_N$
zEN(*<3<vR?*rlJdC>NAk248bgC@TZ#;$kZr-zVsu^T=?5nUN9LON7+i%E}6iV`}=b
zks`fYv`>f6?a<DXx9XiYL8ZD#DggxAn+vma{`{Gp{kC+&r>%<JuW;^MQ5Vz~-CJ_y
zI(%t;YA@9L1_lVXoD3(N(p@ABi?vv#y?&PeyIvJ*8LnK6U8r3?^m~`Re}Xc4@EY`a
z6)3sc-=+#v3W0900jk_^g0oe=!kM~~5^;O~)sS5X8Q|X#hk*r*9R7J#8=6vqGW_@U
z%=Yp0O?I9{IN>E>hnY}XU+1!uq4_iJ*QH}MVl{4uXn29Gn52+UtSSd6nbp-y3f*sn
zg`}h?W4Hnmli)}LeoOSp`nr|d!!)&g<gxsAz#rFiy{ciWQR9-5W<Sgi10H&W%*6pp
zM^r*Y#GI~k?mBaMvg-{`M*o}2DIHNbG<r+#i>rrD_u5g2=<4dKaEj_#Q;1SXFnMT4
z+*W<p8{xFRPf^jG-za))w0On>&C2zPb-#4<=2>%6hTDpPQR53VMH%k4rJXb^OJ1J0
zutGfU7adtOdXm)I?Zd>iANV9}2I^>=&&<uKArbZ5mA3CJE!V~hwUG#AS|`ei*T!9L
z>0V8*_>&?#0`-b_CAtOQNU=mh*%7H;7Clg5AqfeF7_LUr40y2tKkJu>D8<0L%G|0W
zs>rzZ`#Bpf5;RftA<EDdXU})<3IR^lP-gpXRQe?C1-c^q&!^-9O`A6!I!TfaVvLfK
zlDq;&OibIXEHvX26QLm?h^_>4$>nA90}uI$tm8Oh{dm!gLjj;7%LfgbIxP+qjJVkg
ztKLshtw2D*si4~+tR8}}XO9iD2AB{yMp*b8p~Gf<fL5ihxcEbA;xU^sH(Lu~?1K?7
zvBU_)9H?gL1WB-blM$CduG$y7i7i)@Q*J`n8)qLMDTXL9#wfjFtrE@SW7&g$L1!VH
zVk=fSkuv~~QoJAgiG+<ID#T6~&dnBNo!X^o<KiNk2v4zi$?)oFv_|0=aj+Q@VJ*r~
zZ{a1%@Pbog%GS-pL!2dss*5E&*|+4Sn%*6Xg-@ok*}66CMy|HwQ)JXKP?w0G6hcek
zI-Kz=4Ba6l5j@Ca!Gx%&s3Za7FYpIF6*gm=a@jhiPs0AVf<qVee%9=<$;ruo-U#Pe
zPgffPM7-jRL<}W$hL}QghEzF4BqUN*A2j(q)@Ej5vA4Aqj|O;vKWK2IjTcEe5{3c}
z^78OVNI5+{<w>k~`!wJoLzIQ^#!&fzCePc{5bC%vW>i&?A`<b4I%4dH{nts+`xjnP
z0D~f|*`DXTLeEZlo;$nlU<!v#Uy)<?+sR^K$4fKmTeT9t(3%thBR+?<qbfZG?kALq
z8!rD06i*+a7$5S9ywVJrpi%f5#FTTLLE#gFiNxWs4l@wW@%?9ZwA@I8l`n84s3&Hr
zDJh^L<XLYvPy_VOlL+==lU7WJ8Ne<Dn(*=;6I&hf<p%r{HjmNOiHH!>-~U4fq>A)k
zX^?44dr92;8M;RQZ)f+U{mh+v`H~y<8NtI4X;kZIYH!akDP>Ts<;+-DRaMoKB!F6W
zk~ZWl|M8l)4pY@MJL|&ZYU<_n#^d{|Qs2`(TytF=H!?Xb?eefkHYFottdQ&5%*C`Z
zcFg!SPonYlVG<w{5nfc!c@Yr_He#EX-rk_1wqWz;uYqAgk!F6pdfZ7yQpVS-X%4C*
zSC~?N!vZab`DS0t=2%Z;lKK7n&^J$t+ge+5lwz(?xJy~H@=4?C6=P7&G`On{m(Kk!
zw{Ti~G<)+c4zT6Lb|p}l?d^A0`xuS=&Q~Va|FpJVZ*Fb|63&+vm9Q`|)t01ny|J*g
zbTDWscUkFfTUz?F{@oNNC$H^u{&fBkq>)**7Y-99<qk_=Wa#9_K9E|3KUB^Ak=R|R
zU3z$a)z;QFI;zQ;Ha9ipdF?Z$6Cb=Jm-8wHwHzWEP-8Q?rO%kw(=)&#<xy7MtX29L
z%=Y;B@8F=L6iW>BTL|~sD!<=(q<{u(T*;D6U1NRy#qm_7QjA}(!wNGBV6Q1#FH_US
zYplQ*8C?ce)))>|&Ta=gEY=^l2kI&bNm6bCupfYG9cHm9l~dbGOH0_x)1)t7I5|1p
z+}-?-w&t(4TCRIGBNGGVvmIYf>I~S~+0M1#I<$>_A4^IW?s3DhPQl_&s;KcGbF#Ak
zskP$&nN2t(<X2XX2)d^M&zS#H(o=+A&KATLv|Qf{CtjQ!pWEH-?(PmGBr|IE0$xo(
z6uhyquvi5kLc7GM&ga}&R6-sa+}7$o?^{z>S3unm{SK`LNJv+9o;5!opAQx@VQy{?
zQrWwA?|OQAE-x>^p^5PDv?mU8wNA_6HsR$?$kFlD&UqYm9sr=aI$iF!GA+IyfCeyx
zu#IdS12-kLoH?6131##{&4t)tsNcpde%OW9z_o!a2Zy!7vD5@-505v%cHnlWyR!|B
zivbBm1APGxr6gnBJLNazKDZVCs?p9;-sE<0k^NF<`7;6YLP+}S%Xxzl3OnZZF@dMz
z53d%<{3j<THQ{4h7_)L6{-iC;#rF1gsUM~gc;BLO3P3s~z_GkfY+YSl{r!yz`%owp
zuzvH^VNY;yu#3ba<j>S7+JPk81@3ywrs@JSVXV~q2bfMwOpFPw%t56w60iNGWTwS`
z-f71Fe8L|DQJv#UYWYtwF-A>Zn8MO#KqH-nQ$*PVQi?2m0jzoZcBNsDrKs895e-TA
zYml4V+;&fP(g0T1H)ym?T~(98jVz;Z$7%CYR|lbp13}7g8j_Bc{DJEp|7(G2ySnOP
zriNFgO<w0V=NpmEb@eqhYvOJa83v7w`(xV1hE2|PK0ec`Q0hu^bf1Oq{hI5AR`-ES
z>7Eran<_6U7FI^aw5+Tax1H(yEI*0IkDo)Mmqi((R`S(xs}9#8$<61hX@EI%#dleW
z^5lL`fU9Ro>FVlstvJWW$NL}9`p4G!=+@czyPvkYlV!^IruM852L~*RheOSrZ7#YK
zc~AHJovcmSfRs}v9?ZV%HONJ=Q5T^0QjVmb{T~6204GmVQj|ZF&v{(IIO6&&P@SD1
z-1&N@r>FJw_0uvlSs0n$S};dik8agrFilOfLqoB3b)c>;PrCWN+v+%4gZ_@#n`x$+
zOLZ<d{(G=2pIug4=4kCV=gK62j=xLcJwfC3IpNetrOv?bWLr1;C0(}#7Z+zSedJvg
zZruWlobt*h?0zUKW%wEHq~)r#+m#vhbaEbdu-M+$cUvx@?~QwPP55_VQO!cFVvFSk
z6Wn49S(dbKb$xw(Wu->xljJE^Cav!3BE2RHMfMQu+>s3{(P6ms^Lgfl8|3)+8na`*
zVcbheY^&`WhODTG3D13+5e1*3qxp@D{#aCc2?sVcHTlT2_?H2+pD7yO#u#9;xBJ)s
zY%wN=Ro2MR_Z1&CGNJk|TC@MeZLVTF>>ptW`0jNCG_)!`yLa!8P@!c07aJR$7A1%R
z825{ItI<Mu9fBds3p-w{uc0xLXRXz}l1M9{rDe3eyPb<rmJScF)BW=Hb@y9zg=+iD
zlC&^X)6@)g{KV#F_C-YEmaGCtm@Wl4E*RAP@ISy0H^S6ip@q}_-A0#>Tw8eo%OLp=
z#(c`o+;zA*3v?x)!@pheT<Tg{S|=wbd_9!%lV6Yt@6cM6Q(-7GiN3}utG_kXnb_l>
znmj_008oHpky>R_j3^M@jI!d85EIk-2Oi|B5O!h=QHp>lJ!ZU(s^;oMg;waY|48T&
z$dvWJzB*s+ROCrKY*_d)^|NQC!VVqoG2^t2<keO(e`Udwct=}H3q;_>*+C9~4~jXa
zXfcY%3;@qeTZ#VD)ocL5NrZbE%VnLpzs$n!U@agraQV+f{NgFFpTSC)Z3DR|Tl?Gm
zPMCFa3vi6jP7>VY<wIKsha~s|>E9fb;i3$fzP`SES!`}RD*TVDVNZqd#!oxlDjQ6h
zPVb8IysXDps$Pt$7)Gzy#beS|l=7g~c@|XJ{1IzZHQC82i?mN|WkdWYE=81L&r00#
zWRyh?;?d5o{odY=?iZkTxm6!wY{qPW5iGJDO>|GrCZX&sSs7_UeLuIpgEF}cipj-B
z{#YWdq-4X3LOE!(9aZJlB*sgcG8|yy>FSlSBx@1|{K_1soS{Dsc8L*hk#BNLU-PUe
z<}}wd7?x@;m(vM#EEl|C=MF1O>;_~SXmK)rS8sfMfj4-x>!NcEYK#h}z9g!0By2@T
zM>B*hPM!d{0cb+PN7}~Na65gdli~aFDXZ<B-Da<IXHU;M7mqVc*0puzkhqkTfw8{#
z)!9%at$<Bcs#;g+#MYQiU-gcTRR8ZJ0e{LU#rF96^A_V_uA4SwNiBiQWHO@v+S-J@
z(A<E{pAx;4quYQTi-?Gf*}S#1boceej;PBfB6zen8e<f54nY2&ot*{g8dM(O5Q|D~
zBshQ`(>siDEO>01r@c1e#5CcW`=))LAe|v37N|R&id0=^{%1$B1Gyt){yt!e$9+$5
zsI@GA89*hMI!H!DvBIrzGS-nNovyBjCelXo#Jud|Z>ePJuDS&L4m$q+)#QxNOs0$J
z_y$xb+&&quthrgn-|0G1pgB1`70AwGaJzT!wtzs_;O$-R(IyyGS62r%y9ooNQ9U5{
zGsh%jdv+LXKvLjJ@1>FUu)4B2yNy^HDDxl@=t!9$Mn*KU46Zp+Q~>~laUhDdCjRHr
zC`f4j;BI)jUv|9I(Ov3~m3<;61_;ryt+ndU>JuAKr0jMc^EO{~y+v2sHs}^4xVyV&
zK9aqhaKKf)d}sjFS$lf`z(-xvL3T-;zo_xQtifO~I#M+1zehGmDHubFCcr5Lfq~v$
zpMwrs5)zUE%^x~^ARIj2zdvf&YvxVrc@KU%I%>HXD+Ra!iI@YDrsvUkUs{d*Tw`5r
zt+<Sg868KEi{Xm+9Mn$!$*ff=c#23Athy-SEfDp#E;uCY2A!CgwZ`vif-32Elr~>f
zTx?kDxcEQjOaEs+o5xuL0s;cG#KD?8cf+B8CLc%ej&(;S(jIu2x$X88YL`UEsDJ5M
z2_<7~_QGtU9a_N71TzCOHugCPwq{66ODinoRnL?H<O7t>jP&$RsAc&u7{{=cn3k4t
zZ+}0)sx6J+vw!};%5|=;FZX~go3SV8rY3B5>`?5`D~tZMBivaG?reKXggrGi6=>uP
zEG*+sMFAr4ygDmi76&3MDB#1vx3TMqr_yI!+m6R;hBz^Z41rR<#6zS(4{+*>5mDD4
zN>zHiG?75bI$LJNC4)>gwH-`COBo)dCQ+(YSZdrN_Tp%@FAd=NAuAU*x07L{O39Xt
z$Ns`ljuI~~?~v8;(SU3Vz&O^a08N2aO`*}3vwME-j*g$<$YW*!UngU3?JQ|;x2=<6
z+&=5IkBiGsy<*UJxT*o*JCy9-pfofzyK_z04%)1=JP?nVotk+XVnTI4FEhnYE}Zl+
zD83#&pqLLB<NQHbi-^28zU~sp%je38wL&8L>};hx4?TEW=)<A^L^?4sujS4t=M_Q8
z1kbbm#XtLh{4dmT=SKrA$(hY%7tS4`eKu8xMK9Covg%Jau;=G08!q)a;E3I!m4m}6
z(CU1f#%smht-WkgVSw&pcimgC8yo6TioVXyO9Qy80VO3RL#36Y^MClu?`pDo$GPr!
zCCL~F?~Ea%v4krxNESQj4W5Lhuj^A(+o6H<4B8FqSu%h~B$6);TyGEL<>!Zk!S=v5
z1Yi|(GeT{O#YCmj`z#D65)r@6@)FvdV8)|F;GvOsJ>N}Os@%(yS_ujM=j26b%#~Ld
zQ}m~NM1e}uDj8WMfU=+sg(wh@z8_|QOwZGJNCWi1P0U3w$w(4^Up|7nr=k(Q81P5^
zoKql4V}Ob)H;J#kwP@-hKaXBH57DIw(5xxW1c#a4IyeXiy%M0rC54TTj~{Qy#c+~D
z37fAdbs_uf4l1})Qi48HhzLtaxNVK^oS%CdRw4C@SDou7N{uIMs#2y>1_0m{mt~FY
z1YMeCF7;!&lCi`@Ky-zr;`-irug>3pK(#PS#Q~$N+|T<uTIX&kbZ`gb<@^4<M$%C~
zpqCo)mG3J-r17>q78XVnjyc!OfCLH>NoQwgE|90eJD0}_$D*Rr?errflVpJA7aaV2
z!ZkER_{*4qk)KiVYr~0gky-7+l`$}K;#z2E#~Wd%o#{k?@uNO{nyyalS^2~Y<idf8
zaiikW7SJIHgR)<TX=}kBP=>3^oc{$m9I){@*-1;SDla?C$`4Zpq%(JHm;gUN4RP?|
zA_dxQb#1NGK)2rct+kEKu;>e<=Kf9cHt<Y3tKj0m>isKG3JTGAzYAF9)C?N!jRkdJ
zqV!$W=FH6YY=isS>gu<l^~J@-k$iP91=`49T7k@b0CQHAlg{l$84BKPF3rqjNV<bX
zt03d-^gGNJyW&wHrap&VE5X4kr@OwXYWYvZoO?I_k(Bp!GuPLCReFzKw3FzI++qX!
zcX)UhJfYo*Lb*_Uu&6wrb@z8<T8k9$7ZMU$theV+8hPUMkJf@s0(=dkR{u*?MTOo&
z>WT63q@<)5BaHxHgB;LEU#w5zxIvrs%FdV!!qk%`JW{=*m{VO{eS$rm-`m|~2r1yI
zE10lBB0MoGJyB7&k)u~vS6o>>amto_J!YIJrypaRpveP>Y82y>xUS!S{`^^AU%$Ax
z087u3_2<X$>+hebdw&^^M21=0J2;SVXG(ci)Yo?xfovcmCbs#+#EXF0+{5Dxm@tXo
z5U2@x)>qf3Ev1?~(K%oft*%<^&D5o-a%yWEmz1`El=)hw<*9^(&*e#<MP+$qWkYoy
zx*kZSz4=*l4IWPXG?8~Bkx=3C`ipN0&laBl-?IQZQXU6Oo?>Y%tgI=?={g1mGxPJ_
zm`%*&<QZ@T7(xYFH&dS_f-2BFJY4AkjWv3D`lsTP+S@WdR*wV(xG1~Y+ZF!h)Nz0*
z<FovxCv}YV^y)p2R)HrtIrEs%p67>e56b>6WM$=T`{#)gLq<kcS_CmStn5j;VcB4~
z_}>ox0Il?J#wahDma6htkd^P>zptXA^2B~dkThjrEtq_(F8!@!$(A55n+}{(-k2oF
zfqe70^|aQzl@J`Z|8S~E<f|Un=vWadl5z}!ptZGiBwyCf&h9R8uwqVZ7|ISkJvB8o
zJ<X>Lj}3b&Dd~N%)S)TyT8eLzzzA+ihafUTd>fm3TX56>o--TzxviM9Q5$WB)QP<}
zB8uT~&9kNh4>3@L)5V6h79Dl#5{ZE)8ba8R<bQc4+-%X+1`|T0?Sd~XhIKb3^rh1J
z3|gG9b4}{9=YJ1JM-#|h939IV8`A-nJU9z3C>W3dy|D&&(A)xi`HfEb^z1CK(aQL^
zg+xZZ6E@YF?#HP+0c4M4>y0Bfa`16Sil(4;?8MiNLi^Stms_JVifXW@;6E;as0NxD
zl8KQqBQ1?PF(NIEv9M48q@kW|VMd^9dY*$7>j6}ho_@6yDF7-2a&3%>p_?HDM1gQp
zPsg$lsDsVtF|yZZK<EM8N6>`;Qjw8?fnZ-4!p6e`M&xyV__|zYW@^gFcp!>2W|Kk$
zq$nF3&~AEnl(fpliOL!Jj@SjNED-8iaMyBm20tcjyo97tv1%N#2sn3m&~h!JB0(Nb
z5yb!nr}SO&@E|g<UT|b7941N`4h5vla01hLK^Kyp02DM(D-3mYg-Ff){H}LrCEa&t
zfc6_=x;`=vTnh9LfYNU(@IUf3OU>J=&$Ip%74?YEpx$$<Gm%&2z#~q#uh$?sHS<$P
zPB?UFd?yVg^c0ZgQ0C=2F7Mv)rl{&^RT`C!ZH~D}bQIa5Be={eE0aKwi^$5#N=fkr
z!SY8ylCjZ^0>!zurY5OpWq9M$TU~$!WW*=cIjI0kJ^}SkO-+rHQW>eqLFr`pB=KT-
z&mVUQa&BNCRxyVnvLisR9<r}B`aiuPARJ6p=7&QO?jebX8vWF~NPa`TTJO^l{Th3+
z+hlt?yKyG%2?Z{PZN0}kk~O=&UIU^pq`UXaTxzSY>*v1vV)KpXTl{fg_W&l3=vL*7
z@3H`$Qjk}H5C#&;@4tW7*T1W2GBPmKzhCPIyB+j0R5+HvifuuM!`8#g3uwm9*4Ebc
z_V#9GZK8dEn4h0Vj@eY{@UgJa7)%t5{Q!cHfN}FDC_50hcIU9i{Tb*2&0$ejeJ<i)
zET|=bPC?n5e;#+Oub1sR@C$n@$iEmFmHw;A<GL~YH$(ql;XLZ%(gx}}$5P*F2B0w&
z6$t*M!ZDiyO$jMJuoLYZKwtly%l~i%VEW9yJKpVYzvYSkKArc+spF2(D=RC3fq{`n
zw5}I!yc<EvN_5F#;Z2jze}97B2M3%O_nqrh1L6yyZVyEy#LQAbCn&6AiI6ZDUi^ib
zfq|hL&dp8{ALgP}D?1S|sLe0I#oT&u1pYn12luZ^5+VImr`^L|R7T$a4`p8+6=l@D
ziwTI*f=VgkP(ybs4qXz`AvMI%rL;k#Akr=1fQW!}gAyVwEes(bB_-W(H{bWWcisEv
zo#k38i<x=fbI!Z>v!CbL=j^k$Sxis2R2e!LDe7^?!=i=h5;+s^0QGJi_e@1ig|>zE
z7WL{P|8}+9RKz26F|CXZmliGMKs~xV%*D#7-@!gBQ{Q+=_eY12spBp3mi+6QODad+
zg)t$_Xe%`2M_{9hN3K$=F)Yt-8qic3))|Mlnu`)}2HYkOv-b9`(a6=x8$7Oi<;FH>
z$G>H?Uq6rdV|Bh3-*2zxv4`5czFQp2^_K~C53+FkD;A7AA|i=kf<bPAh>u2l0Oau&
zOYg|14!`7k&ZJOBNJxm7c&Bf108;GH(b(2j%n}>pt(!MRg@1u1;8CFtSOQ`ixlv{M
zJrH1qjMdakK5Dbm(1>){vSCAX6{|{0j0yq3=u4)jCnY%uCZn1=K^n8Qwe|2oyIDZB
zbLGx-=-$Gwg`fZ4l3M7g;EF)QYP(BI$vEI20})aYv4PO@s%U`iB7}hx{2TDF!Ib2?
ziXtmV$65B7bt%*5ppRTzUj8fjsl2AfAYc2_U>NarAouJ9mwGP8+@zsPzQMpiPw!&H
ztHKBB65oh5)2EI*-JP9G(QWcD|CvDeMOlBC_$ZX0ZK)@E>0Ri|`W`TXSf$OZth=Eo
zW!CHAGF*lULozpZNMJB_VN7nl`93jGFe40<C&V<+C?aIdA&jU23dnH!2T-;K>Qne!
zue#NE(dBW|)f;(N@LoNFmb~8Re(n+>=W|h}31oapH@lTpRlz{BGWRCgwZt{_ne;B1
zN`I#XFMKc*2GnRyQuR7xF3KwawqCuufE{R@Zrr9BX3jzMFY=SMOc%K!>S}5rO%nw+
zPMl19`{sv;-qC-J@<Dr`f#nBpRF*oUA_Al^FHj!M%*<R|%s?xORU{1s^_`zTMG*_~
z9j2^$sTzzF>62rlqaO!9tv_?~7HcSe7xOOQtwwul>bPy0M&9F1ST4M<lBIJ;c=xgz
zuAn1Yrm3@Y=DE7mOcHJ~Fz6@}vd(cD8ycAKUCja$*R3u^Ebx%vIWRy{efR*Q0rh89
z)jen$FB!1|z~@p`TT#)pOdl6^5N^4Xl>NT6N>yXsoILEPxFE`!DOUB~JHk87fak!F
zw4K@_&txXs*_Iosa0hOOH}U-=r-y};kuC(-mk4L41iY2c4|HjNOOU>lp1;14>|H1l
z(P9RpDEd~5E%r>J+}PLR&COe1U0DIJYFPWs8AO>V`A00seD8fPD!aax9z$RaTAkg#
z;J9DI)xVKF?qfN)@_-c^LJ2-Mx%u9O$BR0PNF|(yu+|?XwbB*g2y?M-%45><<c<7y
z7u~>#w$ydoEN|r3ByMD^bFr8ZB;Q2kpv1tpef%_Uz5|%d*EW~Y)YR-k_dn(&4E-nc
zHTZd`g8I+E0qRl3C~7jtuJHG@@I1z94BEPz->m>DP(nn6kB=g<b^End??(U@CH0c~
ze+TncR#K0TK|x|dm5<oPbzspYK);Fe@_tUv{e4-F|5j?k4JmP?EF)QJoH_1P%KPaM
zZEMji;R$Wzy}M75p|N<Cnv^o?G1-b0UZ3M|0+!o-n>R6%_w{-(Jr5Jh+zlR2;+|$O
zDaN>!IW@_e;gkOmXzUSxhO+n*)-3(`G`&}zJ4&9Zk&K?cHIl(GuH#Tise_$8&wsxo
z(*J0NLA+<vcd|Aet`GvZNJO+Ec5a?J$?w&5cC6uW*Zk&)p{gF+$dbp&S8}T4u)8zr
z5k7h5{1hPsuP@*kIw2IqjsKz4C7fLq%!css5230@@VMHq_;SX-3BNY9v<-#}u*e;r
zEHB%UUPRwmu8x@Zj99v?f9skFhVXoT4DV8+h6CFQ)@XQ8Unp6!gx6r7C%A(hn$c--
z#W73Ockc$86+Pj-c@6DB%becBpv8tC`wF;1uR3GMN{d?{TW7rOvFMvS&%{`;l(el|
zU@t_oef*!77Tc__svK+VLQ50YNZrOr(oCG-chW}fz@I-BMY?AMC;+lt6=>(SXP)(f
zJmBW$=Huf7_Ne%d#5dni&CV&(8IO=uDwJXb=S!sKcXm9=^tZ)(2DErO9(A%VdKycn
zGtklH4=<JJgRY#so<D+MPVNFtT&ukdi7gWx51jW*d>yYSqUfB^B}+c|Xi)#~!SCUv
zZFri>%Jx^s|3c~p2DbB%U*dk5K5k;-lQss$FCmfd{`GUn^&&lw0%Qkb8gve8LC{ji
zed^!#P#d;BZa33r6^iY$=wB?gEL!-wn;ffX3CRHCou{2wP*`{jg45EEA0dlx6CRUZ
z%zkBL<Qv~J-!XgaQe}tp5KmA;e?$=pHSGn7Xjd7oo*W-$j}DSZ9RVygWQ%netK<PL
zPXyMom{`M?M=X@cj-6NcF(qS~dfK(+0-Z;E0#ABo<F9ZMfELg#BiwpJ&gfli4M&G!
zPCr0(KqmE*hG5juH%v)QE6`$tm<wPO1acyx%_>7})<Lowh2{8E<r~9j^x&VMWPNtU
zqTI0eWr8|C_ZV+ckwmuNWuoYrIZm2cyO$k+SMg3h77L41oNKfo`qk}^L$=#q<CF~l
zj?rb>0@N-zkI*VzBvrT!&I66k?zf4&*<Xl99U?NAHR^|cK~z>KK*kp;i|We0iSJmD
zpKtGA_lGy}&71A{o(4SwZ-$E}P+zvUD^}G$b^6j!vxMa0Dk$It>y-PG^2n#O!<*tA
z#Ua1kRP-^}&&mi;DzlEs+(`Gfz4DC<z0;Vbx4rJ_|7PuMFaEr^xacD(1)3TZY}KrD
z7fR?}Cc9{`4*&5=KKXe>=->BjM5)%`A-{btC1%`9KgA+m_a$_bQAZFE!ZVcJ{6ibF
ze*E6JF!`ED;>hl?em?!h7kb_(6p$K^SQ3o*!3^Lg^M$sx%sx1vOi-Ps7-=ajf~Fek
zoJo4%x1~DG#+j+5`=jM7Dk|qTJ}VzY{kooqF44;y1eY7>#fTZuI6yAPd5{K}dv_Ff
z&JD&{0@aSr>a`OrCC(HhQoXvy+D__tZJCS$|Hiu+;TAJzQ15{9tMomLXmjPu`LtA>
z7T=97aX!v;LMhS?ZprhMcs@c2C3neYWw^hmwBlV<M%d%D-SWE2?XemKRk4C?i}h=A
zWEW<IVPk>yuY(`N`Pf^Xrw4=-W2RL9xGs3r4O#OmzZN5K%j)G<67Tvs+B_}M1LBra
zPCu=K+E6=|PfgIqCC<`24QwhQdKh)nKVxA-+2M<;%DXMficxDqf46OG8Il&4!dj#y
z!B>9jm+@BU!4Zl->-t#820^qli9$}@$Vj3$K>4Hfhfz<gtgL*G>(+#Tch%O>QAs+=
z#{u`d4=iRqsSRVxhXjKcH#V~p(}@dUAD(mF!HZx(Qo>l!s=i3N<1LzMtefD-{}&!L
zaLpd<%|x=}<HP!f)egKSn(OwY5Os-@g`LLNSGNhyo3P%KM*D|8Yf#~1$Jq%gbIUK?
zCP-q`XZn2ki5{DJPu_JZq1aZH8%C@$7D3xdjn!<F#uW)auFlfo-03tw8@}ZJCZ68I
zfkeKJ{|>YnD1EtQ2s2!9V(dsh-%oIHnt6GR7Jt5fmzUV-MZhaN#*#@+GM;El=NLEH
zUc+0D^9JEHI~zN`lKN(QyZzg@jg5^Gs~&MKOS8#X#WF+A_zoD?gZ=q*W(4AUtCHdf
zDoj4~?T{%IP2iGE=6msyeXXM$AeX(i7P?c#pa5r~3ZFyYj`01Ukt?0S4Ix5O66~*7
zchZI15uvE<i!**)wXPw>?)s5(HXDk$^fpfe9)p>fI^|LACthN6R!f0ozq*M5eTdsY
zg(zbCs7-tT(~j5)f{Ur1qCqxSD=8u27Y-MWSr(13zx*!_tHIiOG)&?n^{?yaurf_+
zbRj}%9Qp0)dHeG`UD<1gelf2X<=6$>OGdUXm=y6YMyr>y8`9qz<cr%;dg~?=<3&dl
zqjpYM6#H4Lot;V!c<TB2`7&Z16*g>4acnVCsZ4NzNl@=rx&25v?*r3G$0WbIu`Y(g
zg30$~?<(_=4yx;l(MBhs948$wKj5n_WM*9Vl_EIL=RSW}zlPr#XDJeA$!<wTR$?jL
zqo3U8U#_7|YTfEQKSu?EsO0I<=HjA_tEQs|zQEyYRxFTFz-5gDy$G3Jwqw+8FGd;^
zVTEa_4&hdWjE3*<9vf(4>~UxvUKvzeao^(d3hwFYV*1HC48OCkxM+bi3f<HR76xnn
z7+%as6K_y&#?J>oU(ZoC)!ytVh9a;jm|@msgsb5QDt;R%w7k8&K@DgLUo)<Kw%)br
znC^Gd;=j*zy8G)_rCFb-HNP*Ti=EJGDeKf{Gz-@YxnRvpzWqjr!F;@h)qDCUQV9_a
zZQ66ItE*~K$6IqNxU<xoUtU!;VLgxo%+vgQpAA=g_*L_fxlg(7PmI3}+_V-<?u|uu
zUv$ji7XOerU6nubyYi*3_zCgLuOHGAHZ02YyO0Q#+I<%0y2o)T2_wZEJ)3=ruivI6
zu=pM<&On`?@TC%KHwpFFF4T<q6F+7*9on%E!@@6o)eB>sMokGOXD>aXeM;v1B_R>Q
z+r~!U#)d||G3;FlS!Tped+EJKZbGk>Xlgl9=0oEC3a+BRpD*3-AW@@zQyju0I%N%C
zzrt7(^=VMQOuxilY?N6Jt6>bOJ{AEQ$@bp*Ol~eK#jBtCV8~usS-DLB_8&=;FZRKW
z&53(*VL4k~Z=Zcbu#?fbXMCUx4-gT~XHMVfy^Qx<v#~j}b3uEOevq8swV+@ryMOUE
z0n9qs{@lO>@hs=cq~q$^8q`?mlAF|<*pHN<SNK?Q?I-JBz40gxc`flm<Wc{D6I2)d
zwggo&zR1=Y6CK^2#cu4U%>07v@_=-}7PQI<yMtcb@7q6P6|ov3|J=XESqf4MwDH()
zR?;5RNg_g(#PHmfQVe*f*0kC?EQ+fPUog?*ReWz!U-d{(?$fuwIgU(@X!)F{-G1fe
zd;NT^JYc71go#VYqhzzx&r*gy>0X5SkT4=BHB?<l9n;t|)?2ZApVsnABE6bOM6#l1
z=O-;T-;Flr-L*+(MhYJ8$pPe8C%PnJW@xGGPsRI>1doeFHIJfY2-)XS-x4Mz6Us;9
z(t75>i1Tl2v0vE9v2h)Mv!f$ds;X6qp5`;Qq#HjGn_Ow<ufBXg0yY!(Nyjj2ii3|@
z#Hg*#PPZc6gw#|$6B83XJ<mgrs1dK-lVdfhQwy=~coRQZp)Z$4r*Lt?y^@^5^r!a+
z8gx*Op0Thcfs^F)QR{+YyE@(4KaKb<wBvYnS$+M<@<@qnU47}EHfn8ct)@T>#FUxu
z*Gi20V)kL<8dMfr>=l`K_Q_qSA)$&~+D=NWdPD7=q(nrP*pfWwt}N^6Gs34N*5wA7
z3+j(-dPY8><ZGIzU><A^Y?%p<^K|BO&M)IGnyIX^>vkX8Jp*4*z{$$VWjR``*{#{x
z+t-;Gh<((8z)L|vQRQPSKecheDT6zBTT{85E;vxdU|T_@LA`L;xWTWkvQoZtcXje~
z#qo3sl)Uv~xy{n2Yuf1&hnv7~g6#tQ9$>1IOo!@o(e2>(Z^&~wz19h<KR#=(`}&_@
zLrh1EiI!rbL$en8vo>62xfYu`zXwprkja2_6p*<L`eI<BZ^X@Wazt*^r8U}DJZU+L
zkm1)4{YbmGZ25xaSBU;$v#wI%;TckfuDoyh_lR--5r!h2jVe5C9!&l#Yiqc230@8U
znwf+~lmC1t27oE#DLXsl`n2hQGRjBFTF`fr1l0_JQ2C5>AS(N9XhKKWjPP7bm-XcC
zu_D&R>C2=wzfZ%W9M}ZEeS1K<x9<ZW5*RA@0<XIIni@>w76AQW8$p_-CHN9(D!2>Z
zQX*0^LmMpC;m*5lp|8h{_fvt~zk(;{wTOa!$J|FwMariR*T}jg{IvLUSH^?_BRe?_
z0Y};?ibzP<tKx1Gz_&q=1CKtqsL>^WW7Fmn|N5_I%J%m(pIfiAQbL!sj1%)6);lW3
z<@7HC36`2l#|V%Y{YV7`RS#O%IByU#+7J2OautCap&MNy#+vl@GKkK0i~8h*%6*SG
z%My(_^qu&Q?0(~tUZ~tVV^qBt-G<8P^4+0+7zRmi2?(${!f*hV<kVhf6l&a3A)e7?
z`YXSGf9=!^lLv(XsNso;w54h&R$yGg^93SRO-&6rf+l@7j~b3EP92YrN1-c0NT>qb
z8Emt>?3S$BpA$l2a$m79J|OMZeXm)Y27O(^_}PMZ_p)^<Y>-oB9MNsiL8PprGExq{
zmgD&JlWEZi4O=@qJ0G917^2&ZeAz-}of8fIj*M~;gA{Y2ekm^AfaV$s_DFM$lwS>u
z^w*OIZsvpcwj6p6faPejh|x$?{$7mKBz|UU`fWL?4g`~f?K~{DMRE2Cl=FIgJUrcK
z*B4rf*#3#FPB$ByquD$Yplft=bRe_1R;AdB`IUg1aX-G{XciPBhjt}wEg;PcDpy{)
zKM%hrepm08PiOx6Q}LJqQI_})wADBm>`qVW8cy;Wy#D?6Go%j-N$_-bF6#YwSbqw7
z7Kjjj=H}y@wcvGw351Mb<N2SLg~h<8IJ#ia7IX$sbCZ(|_I<tuh=_AZh<Td>QiPX{
zji<SJiB=LfjrZyr1Cpx{^6BxnZ}paX(b1X+?x<yrYO#rrKQo#KpLE)p0Bnixz{kfg
z(;sxNvk=abFu}*e<NV^(-|@#!1cd_67$6a#gJ(P9(KB5%LJr_I8!0!+8w5)+*n)DP
z6t5~+@=Vjarx4l^tasz4RZzkjW$Y<Auh?VMx&YtiEt215#GeM+|Nd?N^=kn#oH!RY
z=96|Fco9L=${)romI_Hq3i9!dTl0fdMcX<t$ptO|FQAlMT%fPOHXmdzzoYe5u>9%9
zNk|&QLyQ=(6l{%f6w+_KlQJ1m(Q)~C)}pTOjcbIVo#$hnPWQWOyfw9&x9%h=qb)2f
z%rZ+Mjsg|EzP>I@=I!tA5BCGyKfn*?6reTPVwG){EBBuH6w>7%l*bgm6R4?K-Rk-=
zlAM|f1?ld=cJiAyU9qu)fRHF$hxN-Vo`T??4xn7T$JI!Ppfr~sONq(HlpU-(csdp?
zS3A&p4v&6lZ}m3+PGcS<#~kYd<SL{;M6?ZmGJ76-xKeltpKFz2S_p*fiCWK1P~=ac
zA7y4{1|Y|WM&UDVqkVP*9uCm=y0jjYjQBuK1|i|#z$;&yk0%(y3yf85?ed`?aBx5m
zY;Cz^KmmLuH>RSpvN?>VOP1EaYVM1uneJ!tk!-7tybIK4eem-SGsh=bl*fLmw={9T
z;Yr;Ik%gQO`nb^0a08g}3<Z;W<{|OK_RM#c^?z^-m(O?vW@u1lY-|>XP5cGeOJLp`
zpn1lzem~oA0yqVMo=C2%l(7f^Q@|P_e(WBPkEeo7B8gH7`wS-0*LP(FH{8iDCAB83
zny>8*aUuO=tCgCo9ydN-=R6~OWUD?TB358O!lo>*{;p$oZL$XVy!Cl2e{e}0fHOe{
znh_*@bXh1#cG#tk{x$g@wfZlwu1X&Kan=eZ!{g*eXg4c6dumc(xHoMfz&TFTf@-!8
zH4lIpelamznz2>i)=Q9zE&Lmf;K_y_l9rYhX;TZoleupXwtM_fY%!QauwNji0|PIS
zorSLS)1!H~36N3}6ZOchoNu!zh8dU~898oZIQddjBgDf)cG1hhK^1eR7Q<j1z}sPp
z;Yt0VOUrYZcF(JUdn$-L{JzShxng~`#*~rVZ+xK9VcElL-^b6QIjm_q`>K|1m*FGD
zOL)JhqgYZ6rtO@u7ed>wT_LmNJ*xx(7ay-j`WqS<9rvf7d?@qVT7b@hagaH|WODj1
zSSsc}zLlh|t<H(3>y;A5tk-qcLDj5ZBeKzM&Yb?Oo09NO*I;pN*$(~)-P+c$F+|DA
z%9dADoNnbv`R<NC1=F*ipBL0;hNJLPIoU7>D?RmILtDw|5}u+wJOCQN4IS@)x_kNz
z{18=g++uTg{#<kVi)y}lw@cr?*Lg5TSf%-cdtjSsW}6$yTt^pQmy3Ng(Z=s@a`g-l
zd@=#!MnN|!_^kb*k+5RY59oA9Aa5Xq0)bSvbBs<orYr0d<Z<pVX-T*q6(Rj+iUG}@
z&NWf<)Zg2CeyOm**ucOW?3JV!N$AC)wu4M_xaPkHi=zSh#uj?-;yhxCrv+vokS?#R
z)cGC)!-95k>D%=Uo4btqu!vtjsgLRIWPCA%WK5ffp#{V3V&bBZqw(>XZFh3=G_T>n
zW%YZl#$O0frzdNt5H2wJWr;Vq3AfQCQ&37cHXIMtJ^?Q7^yC=)XHcXRRaRQtzE5`Y
z1TDWevT~`zg14r|yWwbK37iW_Dh;}{98}?f(%<Z~KU0RjB`&>rLKHRBi0VZ=oZs%a
zG=HY@Y_@bVg_2kIHrVOK&3gt)n}UD=PnxAAR+j~gQhP)BxDmVV*R@>&!m%45p93WT
zEwrF1?oOV5sn7xc1t1ULgs>V#_BbGbu4IYy-kvbiMu=&!g1zecl}kOF9v)A@>?zmN
z@vFS66WmsigF!f*feIV=ZwRePD*n*4c-G}Y_gDinsIny6m>VM`AmO{TvjS53nWfm%
zQwB4FW1n~32kO1Dvb3yhC0hd<8rs&@rq%v%pYnM)D%0M2x-lf5jS)q;azPf>)ERr>
z3q<){f|oGZ5XmCnM8d!?U>h~X2)00^pKLJcm?r`}<mqW?YdZ&ZBM=jikwMf0;gaxt
zU2$=HXSU*#I%6Sr36<7&U2~uW*THOqp1-m<`%nFUdjVEb)BR7%daXG*Im3Ry#tYNa
znM3@%y!vb^;DW6#pecN38fU$`zsIrt>!{UT)7*Rpvo;LT)41NpW~e$_BW>O@<_Cq9
zT>y0cnkqayzQRS<%(QOzkv9XY#U>yi;J!4J52ao$41~MoHv56C<5R9^g|+2XBnO9s
z<Jz+{ArTSywNyn<ggQ@}#+!!6yzH7N`H)ZrG73z-%C}gSaK4Eh5kp-Ntqvi#58G~o
zVo_1C+e9J-95)e>5Cfz)=nTlvWy(w(83|^PVwwXo8X}~l;89dm6uRHU$O!c1BIFWa
zC~)o4)6tb7!yCiC)5$UVWI1~}zpgk(%+Pf2Y0<UaF5ag<(Pqj#6;v;k%zi4XZ`<~B
zFfsSp;owc+oh({AJez%h;%BozJj~HCF);yYJRQ;vctM(iNvzQ5&TD?+x^I|&DMuJ(
zQfna2tD0V}2-~de@`iqTs81mg*ZUr>g3V{5&Va(RzN93%V;1a7@S)w^(9H=&0w9gF
z_%j+DP(Jh%c{mmxO}B(=v2Fipvl_JJAaE0Rp-TOnPG1;%hpY%G7T?j?+3mN{X3jC{
z=Fqv*Hyx&7Yj3|Ym^TbYO+P>AESZQ2zBg@F^bCTqZCQCy(LOlN$ka0)fy57n@gaRM
z!IGJ2GyW0o1~%FA6k-^(y^aF_o%h7Yj|KmSgT1|4Pv=;@Z;lq5492=L_N!x(w*2~Y
zjgW;qg+ylrT4IQGFM4i7oIKDDh3Z@EY;5crj2#4%_T(;DfE*wxf(Yx&Wrw>-M`x)$
zXzT0jyx$7lqJQ%Wp}J|`tc6}V@WKTK8XO+R0%fI$&AjhXX;L2gn%xrHzZe>tySO+4
zoj|*orJgijqdWnqr@*#Q{dDbI6xckx4?Wf!Ajq1&+{S7w!sC#Yl?4d4*QfF()yLaE
z5%-Mv^?-&^!sP2>`4S<-9M4Fd^luG>r=M)}11G+BOd^%^Palz*n3m}IuUD>NzsnI^
zIgr6J-A(bF)SH{em?HkVQA7<@Yvk5@Ls5FT3saHWJq7?|sLNnPx%}7-t+{LCvGW}a
zK!5%WOi%ay{aXXL2UdS~PtWQ2<ncIs(Z3zY=Y=Nt51!bDg#Xxk*7o78ZrsW*hm1$M
zy1E2M@3r%f_hw809r+(`>ujQF&&KQcXmOr|L9+Jg?#aTBgr#cbbw*A0_S8_J2`y78
zDoZ?8%URd`nx|{vDQehTZK(n6P~Qjx4BIU_I;9v3Q@&zZEn3KtJcGsjJc%b~f{eYW
zzmi@Uhl-h=hp2r|57$wX)KR%s(jFKc&a9V(4JZ2Y%F|PDA94&5d!RF5_+(*0L`WNG
zyI>A(6DWWAj!flOzk}^${K4`XE7M36f{n?KN$sHq=bAXzHlRL;D=jf(fPWxtru*)U
z0A;17tem*UD<HC+e!6)IPyOamvSS<-wg3LUPQH7}L)XKd6`-^>U~sdt%zJ|dLvQ#V
zo;=eJ=JER6b8!L7p_aMLQexKf85JxxS4yvg_-7x~Zffrw?TeJ|q>9?`rMqaRN6dHW
z#h=Z<9JPiY7R8DqU~xDyIbDK8{VI{JbzOYz`<p6e@NN3+Ioa9<jT9rrs>7-CS&_=t
zLGMM6%un(z(Cv8Ishd&UCNGXjZL^@JqB=QQJE`Y423O2%B&?L9eOIy~4%nrlTe)YV
z#(%AY%incvV%$ek4TbIdv%LH!H+L~VKXvl-#2*y!ITug5i=ZvOp69Sk9<z_KSfL7U
z3nK>N0dczHc<Sfow!BoB4yLNpp3`-ySNAER>_MNLTOB|2-xTuS{5K^xGjne<3ES6v
zX6pp5%M;A@0C<leki%{n;2LD1T%Gji7Si$EoO>fuzVEZ%o7Ji~605ikgo*FY@)BGK
zN&OmMiFpkKmWKTep-6yoUS6X5U3cNf;d%#)he@G!24v2p^5SjhhR^!48GihRE)mTd
za;untcr^~DxneeyAqypNIzO%XX<NHzT>wa=q^54xD)SrUCqQcwJxvJ!$L*2+90#^-
zSmG{K%c2gs{LZ_p61Z}{L_4<Fq&lAX4r)7G*E|u4q?fRWfP_>7x2Wh`B`Z#0cC&>>
zXfEC7fPXfdgqZE_-K;YK!ZlF3w>Wj<<N+di^4Bjw$WV}=J$8DTBbT<luo^&j!7sKK
z)6T80_vNHZu3u=-N^&wBF1EkocsXXJa%KkG8kzo~?lpFK*l{A^4ayFemXP2B4>t(}
z@$MCG?0Ts7pZv)?&F7h)Z;}p95v`SoR1fQPGJXh@`BnV6sAyeH%J*HH#p+m<ka3ce
zM%p8cK*jzoob%@X^qZ={ob*!$Y~R4IU%DBOxYgHcc2|ouV0&zjD#IOdM;Kq#QV943
zORxd<xK@#M7Z;L0$q$iy2+$KMUv}7@z!s`2uslVpNmfA}II!g=8ht0zC*vO=zZq;_
zmw{00_f{hz%MHVrVyI9>M79^Bdmt0hq<>k7F#~`y33$mE!=HTe?SZ9*Tjyq9oMo#!
zO;>VEQ^{*M%wgFXhu^uVjNbWfm<2@JUw8}??c!iF3D|7g*3RuHT8%zOBh7N8P_yu<
zhX*h*o)dot{y^<a@3#d}ss`5G9YxQ?5gOMQRFk`oofGm_#dFe6Mmz-L(^FFqmlx+p
z?6Myr70m=RGK4o4qFWCS5Bp2_Mhv^1jkKxQJCv-lv#o$o&DY0Cf%=XE+7^7_uyCGj
zjP&pC2f87eK7@RH#NxO0`|hy9e%DuL4WN0TCBb<aN=>jz`EK<#MN0XBOqvxFmg!=@
zRQ*owRdg`^?^~EunsKXuF9A#EL{i(jxyG2Z6>|dvlNXg`<wT~)EuE69r$ghXlo77x
zJ3%8dPdq#XQ@axq`54IwHCP=zb}pBE8oI^Gb^Ldbz2q92GdVRat=|9iq`#*DVz9h7
zJ)f8=G^9-TGpApA@F*$4%}|ZiKt9w75nbmx?;vRcO_%Jk2ty%DTOV&@FBh}FJNaS}
zD{%-#7~WVHB*v!}wxv=7WK>zOJJ$s}36zYu89lXi`TI?dgkI9;*?jl7hD~G4gPwUJ
zA%{+>{pH*lFN6P35zdA}XJ+#+`uRxY7(ETcQ%%+@B^Jn5g;>RCh*^)@Z_zMR*d^<M
z-5tssv50*4w{3rhhQSR)Tsi~*82T@#T1gmyt{r<Lf-4WDjB1|`XYk!B(kLI=0*69f
zokXj%BDM_*ys9b@sei5Cl>lVIjHzHj#z^-2Qlq2lnTW+=f#vh6n-lI{`0)#1Ea)5I
zkY3(U$~`VcO=x)uwKxio-4HO`8^L6gnjbA??otinrM{~;N!i08uah%QDPpUt)YoaC
zb(wbfjts)=HYzkB1ku-w9tq?1H94%PqN?t$aT1VZKEa?3q16vi)EOza8exwECkC{(
zPxwln+{$;y>W`0(vc-4ADz-QZ#%dt^17b%fCo5uj!(WT{fCiqIx0cj}h9Y~`b;NEc
zh7ZRT5171tws`Fj7QU@ZACm)6@NhF=6Y$E)C@bd>i*9@UI>I_1z?*$XT5@v7{HAm<
z_+e^Gk&K{*x0v-h(_yv7KKcEIH@-SP22D+I_WjghW|<jK@Gkp4l4A^auhT_G1gtkl
z$oLwbkoo0FUkYSsNfu~P`@P3H^|K?z57qfch$gnZUPGMsol=fwoQ$bRO}Xn%@se))
z$9JtCjy<J6WR2T|{P^G);H#S7H#YiNFzJtHn!Om>`$h)4YmBO<0k4}`&6BVQFY%UP
zJ3+R=b{L@V-?Qy;0P*1(!^){Kq2)Em_>MJgolk=x*k-4_Ups^=1TOfG*yJup2Xy{}
zV0o5eK*SM|k~-b%S3CQkho9dA6j-Ie2Xee|a<*5A_O+w0OrsXOH~Skbd2hm&Qy&dE
z8w`Aht@&N{4J82qxxgkB>hH@Y?O={zp8)f@sw$cmGj&!VmqFtIXY}gw@}A$@9bULH
zWYcS60zM7JAgY2L>@y)t8^Po<#mB7O)X<HE!BG|@D8A+#l_Zvmzv@1<*EIM(6wKqf
z`j6M3x^^#yvm}s~n!3z!GQmAI4P%KXH|C|Krk)wdtC#7I{QC8Yme!i?1K%PPPRa<1
zxknU-^(J|PJG;9OzNS0g7RStcRv8K_Zfnq!fhG#GZd+!Hwry3KS#(PZ@R9mBd<#^v
zB^pe*J&=Oe!vgnsi=dp_^XOeB(qW<EUF?K5+Fh>G4X%z3CFpekXgSf?l?=3WuQdzS
zWyBCnAUAI+<nYDWCu2T_?D(DnUHiHXQwFNLBI__nlgg4N+y?Vxtg3MmOU}yr48||=
zZZOOC1W(8!)*3SJqnRgnm&$HYc-jmr;nH&KynnCPrUit2G$v{He&eMQ&4NYZ$~Zb+
z@1n@fTb^~eM>PGIV&AHdV8~TbJJBqy$IL&>Uo*))>(v3-f(PoszGu00;!mb!+1Jkx
z>Vq>ROC$fSyl5&tm_c*+J~y_pWohTFEHB6GwgX4mg^muf!|{%HFDyVqe-ToqQ~#`C
z3;fw+iHT{fRN>|J5rPb~w6)&51;&L|XS)l~Osc?AIire?fwDJKl$muAVGKL09v?UA
zAGYaLWaXNj-7qx)u-+N)e8>y9L0{jxS{<<UBOc4JmK7C|UG#&ebAF@B@Ef7rz>75@
zFnvMxOZ4>cD9~lmkCS1lpA`Q{yKLtO3kmi+&`ce(2!}@G-l8HmQMy>moZAFoQ}p!r
z_r@&2Xz%)Jx7($lMOTiGeTUtFJuVqRp3QaY3LV7-8-5yn4BEp8d<tMDn{}zuq7)&!
zQ}TrQuU53>ovgW9?m9EK?J$g_%Wj=NDL>3al!uX6tjpP&M{X|f=={B|_WWW%i>WX{
zcseW7?Y^?*Vlpa*%Z=02BkG5oq4=3V<XKu;`uc*}Dwe7`S><X4w0XIGzB>?efXe)j
z3s2X;5I>(T<$C~qLXzI15)y+q*^a-|%?T_=sZs#4I=+KE$+&k&dhk{!{GqW4`Pv^~
zzE1q1uO1-3l=s=&q)x%N4IY=Q$%_#h)sel$!+DM<-6J2vH(&Pd1Rb4R=&sy6A?%iK
zpsFF@@C-eC7|_x~9`+H>P<bIA?>Dcg?Bu<(jU?b@0`$?*{-&GgF>dl?=i4j%bxu)G
z9-5Yh9RUlaq$H)MgQM!Wfm&1z4{zZs#N3~gdB+r;V3)sGKlEbc1=kf10-hpE1I9k<
zi;R@^q`NOBk$79~8}-xG*Ax$rYll~azutQVTg6-oV8_QZlx<zCQRa=Zgm$+MFoAmh
zw^I#>%I#W^&!E2>S`9YD9f78CaPTuT<Bi=oXl?HGKaY36FR+R;MDN?=XsL*Pb7A9B
zd_ZV<Z_9FHt?P3PKF@lVv@$IxJCvCKYsR?2`B0Ql<9nzLpE*8$d{(jm`3f-C|4_w*
zbrxF(r6hD*Nc!yk17Cc0=Co%61`qFf7FpEopC}6`1Ah&~he_p?S?7oTDCeNKC-(_9
zfBqUAM56>d9SciIGfoS4!^P$sR6uOe%pHJIU2sSUdM53~vdqn)e)l=rTL+<n8KH>I
zQ-)7g3QKgYI)b0Tj%bb(hTv=!s`+DM|Cfu852Mm1QE+zI4`G9P`1o!jO#bohCy3S}
zW@aTw=~eDa+GqQ6Br%@3)1at`c>UU<L~q#r)$K=$ci_YE;)(ch<(B6sp%W3Bu};UV
z`4zE6z-uTYawyp?Lqmq9>ZdFF;46Hr|FdoN*Q($D90{eAbLtWk7eU@;)K+B0qF9PP
zrua-c8fZmanggcBru6(cSi-)&Iz;`cF0j;7PjzncVPcfO4)Vp`7m$tMu3Vcs%gw{B
zCmkOf4krDuQ_YsaboG96p%7c}dsE`u0hcC+0Hw*eDM2LGrR#bZC9M!c^08ouJVx3c
z&VzeSa?KR}f&ry1prG!ZJ4K=I7XQ%<k>4fs=YuB!&xw_Z%RbJMENVzJjS#`eh=xO_
zGG*X|ICv8S<=JoGIr(LZep1v!WtN332s?eHjZ^DQLMi`yu5JKh$w`OS4wGRbC?#OM
zr&wgkism7lK{eZ<UtY3og!gvi{r4jr0vfkO(1>XkD{(5sD@?u&DxlE`hU=>(`dzaM
ztzqsLuNzS#>JPd1iQo$_|M%WEDG<To3RxvcnP$c*7Z)<ZmtV!BM2?Vz8BWmmWXMTg
z5W$F5Ui|W9pb}1QVwcg69;zPUr%?$$R0Xfs*I;-i;1W`p(Y(%1z^rtBE=&0Ol$Lh>
z?LLzH`#HSd#bF);Zx?R0s#|iC-67MIli~T#ko=$fc1X};Rl=+s))VN(F=pN-K>ZjX
ztw1X2ml8xjNmjwbtF%ZEsp1LB<#S-1$$lBucCP|i;xC)``Rt%jpWFXk2O?$&GcyF@
zPJXC}A)1r16GXD6q?t^@S#7w0_7Fa3la8U(Q8fKa4a?IG4r_z=&MROT&9F#DMpH5~
zL55&8(mM!uV@Eip?)NKRb!R>b+Ux2tbk9kM|2wr$)pb)sLbSZ)@y?xxi}Jb=FLbtW
z0>{|lv;OB*DGR6I!M}B0yGgu!E&ku1T7xYZ{#B4>VL{7two2e-{Xc_Nv--pR>G$0t
z<Bevn|JjCJhs5^(-jQA4|JknH@c-SeUEt;Df0oX<dwFlN?*GrW?kNb1|E~|={$OFG
zvwHY>&*t4;*f}-)=h1xgw^U2-C>#m3KQ_5yoy~sr4H2nLgCJq(+uwb}c+}}`Cf)dB
z$+RA`@dYqkR^Rah;fR{C-$uRM@9~ANUr@bQA4mNoYlnmOSfM(o_1f=R+NF~lzyF38
zs?4nk-;aRxVyJO^P>^xJ|N1K4ZzMPxTCW=y3LoiCcT$nPv%cMvZ{>32gD_=$S56vB
z`u#-b+MImQJ-XAKJvVQ09WOth{O@ls_{ZypgfOjoO*6Yr-&QzGZ!)Inj@jD3VejUd
zxKwY`&2lqNCZQ?%El#xjq5iFS>PlqLo>6RbR<D2p1;%X9%2KnTLqhdc2j(9sF$Yek
z=cvt3u4GN!L5i@;ce(7=V}|6dS`|Y4>8Vq42G<QDlEBHsruUPTqm3dP=ggn)A*hZA
z3E|3fKDJ)@Wc;Z2<lw&e(jPB|iq+D2$&sHrecV#!a(9?N<Qm&1R8)#acn@W4PuVJU
zJ1sRcFlr1?nTMqhtzG~9uF<ZQhi<mG&x8AL66+M%`h=hj%SkBwj)C~#O`gg-PvcPh
zrYiBV_B1NU*3anXjS45?LUkLZ9?C8VtJ1w9vUI{-8-LPv=^MB1?j7n?FE|3{<wtkx
z!_>%}-5t&_NhuB7*Y|lP<g4pWdv6zu_t@z3IzEamW|*+nt=4F}@l$K2E3i5+@Ntu+
zTXzY34IJi*8?S%#GVqs0IL7qe_za7iA9Z(bL}KJNcG#dHYO2U&#fyqrykNolp3b`p
zf3M%ei2Bld>o0Gdqn$<_%Qj?%Po8eZR?^%ulo1#)a%cWA_2=d-IDW5oiqBu21dc|V
zSpV*{P{^5`mY-;N4o~ND_k&8w2>v+Y)6lfwM|60G)(aVUs)VZ9e6XmlzQIW?_<ln4
z)nBetEdG7NUGn_=+_PM{huZ%hQZRg)%oQ-~dh7JyapBBsr~avbhn^9a=RMtJqDDt;
zojA#owx<^!Kl1$1hrzo)aEob+=0(#zr$3*Dtw;ER+56QMaMzFJ>9it48&N^X(J9i_
zC7}qfhDfxqw{Q2$)oU#W?mCsbQm{G5lp8FsyQxtNu06vF)jfA`#46(V8+h9Pt-NgV
zCKvXaxBQ{F{!p@Ha=6j+<|FDrZ{M+XT7HK6!RI9IbjQ0o4`BLvk_b7(z7{zOl1Ril
z{fhi7X8RN=ypc0a*@U%@a*g@S{cFfar$qm+2*e6v0jJHYi+bIkeETZZY71L!Uh^H+
zrW~0GRj&LjX1FS6#llSA=)SS%G}f&VS-Z9>7cnZ~?t6W7tM;mGwT0ARNs}lx8S`Ap
z=IhPg`nTCN-NGr@nQgVE3Tl0iFa6b$r8+YLxUS#77#_E}Jsl9Pqp|t;+OqW9ddety
z`xKjDQ!b_<c51KiS>b1EIr>$hEB8%L?!sYALA{Q-o6l9LcZ={^JqBnMQXHHf)72P@
z<9)?`Un!9rPnVIy$BREN7*tj3lp!K_?9tO)kd$+F%xC+QQuk$hUokiTu!vo0VQmM*
z=<2}L?x^LboF1S5E>vmHY=|1yZEGHAJKfwi{Be=`+w=Bno!tKO!mO~VDRD`Yupf7>
zNvgB3l3b7Z{k+sSe&Ii_8e$|vqOJJk*Mg_qXoc3U*gFrAM+szDv_E5)FboMWs5o&t
z4~K~8-EiRG4`QZn<?+(ypUf4rP0jGj6D<fL@nwItT|9hIe?MhP`GWAfy_iLJ_trMI
z)d=dh_nT6)&DXj^mU@Gkl$&!(9+K-XmcDPOes{T$<5dPEkEWY{kxL=%ghh$C=?G@J
zLz=I8G#-57Zq3Ynun9&)D2Zsh^$Ut`YyT{N&K&gS48HShwKvdzAKPQR_J-sqxf4gq
zGPQ(f`;(@C@K5<COQbz5u?zh7BIlwM-EY5kJ0Qo8IULB6Jm7q5jqMLS`CA-XPO>yf
zK6Zj1@i29l<~e)zUA^s3hyr8J1&wpR85eZ4p6(Sk%C8qcY&!Q<CP?xM9w*V34xYqq
z16tL=jFz`kj7y&lJ-r0j*TuN6t`=OETzGL;YN~H(mxA6qfSSsF_8S+8)vKEL2fNGR
zmn~?XJ|4H1Xml>WloHw9H}z24=T^aGny*;Iia&{19KA65dC511C!Hw)L3H2SxYp=I
zj9&hpQfHzHtMDB=zL+&xL}y4ue<0Gh_LuCCo%YnVWz0P|jCYy=4rFwyChqys#65Ff
zG`U^S`oQn9$#{^Y!|<JZ9{(nincuuOS}}iWdaYOAnf7Q;CE$DAlSiZEzpb5!4ewiN
zj$BreV(QE?W|C-~uk%klq%^#_b?-j&frOMQ3te}ox;|C7nHoL>nv{(48gt^)t^C;6
zo7;_|gJgetm&{DOjasETQ&vPBjw8(E#=aacjlSdOil549so@JG@fOug7-2+_=lB@4
zH@S^$JLLb{6^vRR9~XVate9z%Zc)`SQ!gi+kwNr%`-Y=i*{vk9g14)m)KCL;Z+1*)
zpH96F-B<c(UN*@cK@}~%v@^VWQDlNRWxVjh1%+BFuCUH)`Y+m!hkc24Nxfox#R^k1
z{Ck40%(^wLOL0ld<y|0QhBMx-W|^mOAH`61o8bv(kfd%=1k?XCF=FwV&X#+1{;Le1
zPmiEQ#vMQ$10pZ*@tB3Sbk8yWUIe5~+(O3?vUMf=X?o<iXMs~uD3c3kf*8F`#}8o_
z<EvLq7y3q4IIc^!lqL*~`dH8lsnwQu-D8}qC|miNbdl>08r_00N;y>9R!H}#Dwo?<
zzFOdC?UmDQ6-*+(wA;{wY4jvBn;tS=W6YFE&`Zc_p$Q0j$!_=S7Kt)bpUCBY(IYNC
zX0G)B^^yGr<0RC8v;Fi$<X2WPW5&-+{X7a~{zY3fM-POkdZj-!3Cy7Mn`!T_Rt3=p
z@6eXYw!iW(>y<OQ=zMpf8^6m_=93kbKd<ye4jn#Maa}i@d^45Xtx2d;#@^bj6{{%8
zh_a9T8tgQH(cqoPPiQ(Xi+VtsKw~?%L{E|PuRvDx^6Z>oNFql^-?`RUEpE=rx0lPp
zhML<ZSg&McHB`SBR=0f<qFZ`V`E!h}HtxIoTpOOw@cT(eY(k=L09JsBf-Jub4j-M4
zmTy*GPir#>%5aaY@4Q<nn2LR<MnwE@>O&bC(V^Y>L4b_V#uRbyvlFYRa*W({RTp*{
z#%9LMG6J5wXMGO;GMZmVQYVzwAR7<q2=4+n!9<bz?6UqpCb*#t)NpO{!#?w0)T(5d
zUVZk6#)YxCHmkHfQ#j_=D8a2W|5Ub%?s8IsK`w>*mHRj%CP`TX29-kd0mnX8@eSt-
zf%`X@7(bK=n&ddy@XN_ImJ-bU<K`jbOP(~rQnC}4Qf=64e|k(uCbuTu%z<(nkYp02
z`*2s9@~Ixn>u0N@g}0&Z!1OY*k+I-cQXL#sCz~d~hJYG#l!T?kx=|WoxXb8u)>jH2
zT$$HRj@O=|P@U5C5rZnB^IzAU4Q?85%BNceZ7TH6hQyWz^)fL&c<=tc%sO0;RpW|I
z&I9GJP)h~Uz3hf}J1x`7lqN?iHwx9d)~D!Sr5zaKSNDWg%KhD!PGxW5c_#Ukc4Cpp
zd4P7RT!Ha}3~K2<(-Q<%H={`u&Uu^~NKndJ(<Hsvse(g?vnGWG6Ri-i6KA!Ez)`af
zZQU;v7%0f3NP9CC<WZ<Yzpr5&9n*JQ`8b0!^77n$^eVe+?TbWOn;M;n)$m^w#$b_3
ziPvp{YuWoNUjA<{z#Pv60d0W}4GFG-$ttuuR9@GL!2YRm=1Evth&<`rkRkm;zuQx0
z#CQa(=+>f__itSTizmg%bY(<-OtBp{GonDk`5bfaew1~FhR(Z3-jfJMriFi!@BdVB
zFPQTQzuu7Vv??RGbS^Yx?NDWsn!~QhQXQv=Sb&o)X~q6wN30L(9r%6n+luX6-^PY5
zi6zEp3p^>k-0J$l`@^5Br1$<hyC1z<625TLeBRY^Ra+oDSAz-dTX}_|p>zlgr1cCJ
zUs$qtXvATi-iQdoh!N<E%#at1F<ns-B8}DnX@-<E>f#IZhKvG6Ms6BuFJ<DqV|;Py
z$mxA(NHYRWMaMa6DM(mBc~94x(M&^qpHT5n!<L`rJ5wQ>z#s1)MBLQ2C7T@9SE}?;
z2YZV>t^kv}P<*3{#bhE%Mb0$vuAlQRZ~Q-JjWDEv9u@wJp``PZIn4!x$Ct0)u=5cn
zAM7AH9WHTHu-Kwd5O=ad+aIvo7%ZAO@yCe2N<Z)Qgo32c@4Z2|K`9j-OUwH0dOj=K
zu1h+GYh&8lu-$-t_}U@dVLfT6hDEfDMZq=`>czgAmL=se&NGTTic9}BI>>m6ao347
zQ@|!a6vgC_n^Drj<0ly)veQ>Tt=wqPzd*QR>TJ2{ATQ4<gVM)mY<$6M>P&aBIg^q-
z{Cao(i%$MD=yhPy2lFevl{Si!(_G+?o-DDWj^0B!az^sAuxb9Vm03Pb<}-nOz2E^a
z{ef4D)?dDNe&q2i2ngY~$rs=$Do)T1<`M4I$3L5mx7wZME#-r$9GsyIrle<U81~{B
zCc6WJxRgC<O~QBWYO;n|J9+m5VW-^-DyZ`OX$~P7ObK_61d@|qOIO@WT#xQt5aX*t
zQ{@k3JH94NwANQ_&N#l<VveOx1%1|PJCc1m<^F*h?e6xP>utNhQeXD_xf$#IRB545
zRc>ilobzel$+Kb^;hR*E=dW4lO=UhH>&v95xhpTe6{&sgcCFKQrjslgd{KfXY17+=
zhOLTK5%xvWC12eK?hYHUdKfB&I|z>K!V~RaOVt-AL#cCvgzx$^m-MNJ@w6?iMFH=a
z?OjXqL*2yR@87b-UJYkR(k7Q6TNzDex=h>@+#+%%{E+EGOczT3e6*CAnM$XHL3??u
zWs#`Q&8f2Q%5gH~GI5OQGWahX<77Vm%Z_SvPgK|SdE|Q>vD4_xpnbSkHN&^kTEdQ0
zrQA_PnO-O6Jq(jEU7z5(%3vt&=MdOZR-7R0+(pKbBySLAXE5T?FvyXQ8Az<%?6?9r
zQ_=exo5QKr-t*#L?)Hr69TkhQ<)`r>7J(*dADf1~QZB`Rb$wFcHFt31;^?l*<#$*u
z{y^G%Qi07@l(d-!zx&dqAR;(+j*bu&9MBTjc_P@@smN-{M#VZ?U7lPVixou&7dGd{
z5=0Uoy<pP6fxBMiaBU3^w<$tJTdOZ)R2Zx0*>~+OZ|USPBHNqo;VknlqVSTo=#cC{
zl${c*k_@gd(4=dMu+R2uGe1Ylb&5~i{uoC4Ic6>0lE<tas;V>h8kMY>E7_{K?u=6>
z{yShmMCnqAmBZJE?A245-XU}&?b?#zAyuvAKd9gvX2(~Pm&bomMWm4(Sz?dQ9^%FA
zEk!_*F@D$ow{1ot_0GmlWY^c*qLFS(*Z|6sVr9EWRRx20H_1nNq6ynXKvHv)>mg^b
zWaO(Jve1{=rA?75ks4prPN4dmCC5@LXVP1k9;!-9*m#}XG%j?pPz%E!^iF7=iB_aU
z<V|VF+!q01w&z(1ZN-$huu$68;?C4ZdAT)r&k09ghB_w5(yNnu>nmcv;Bi(v6J<>S
zbSEJ@cFWfA*Mkr!`&9SHFT!5qu4dn9^fgHnEFE4D1V(9FvW9mF#Ey(TFM3Own}H*0
zN}8hMK&m!NgKtEUwY5C!i?B#UvAwowlI$VIg!%aH4A?S05tz-6mfN@YlJ-8rCpsQv
zT?8&0mG~uU=tJ4X7Z)G=OuDJ@8QNw-P>C%y(&R?=mDjE7{Fs|O!wz^_P^O#>iEaW0
zaHvtSJ+|?3cs&7+bEOB<hybfhc~)(y6)s|J={C1zh%zy6Vu!w4Y$V$bdE>Md2U*;e
zNFS}$*q2{Ppy#*P-mIKMNiQyOlUwt7weO7=cIz{X0z72?1wD6&8e{{m^OfWy(Y&FC
z%66=?!g2Pj*dN6)mh7|#rn+&8ITEcl+ghVX_fVZwtodbxRHZBX6pEjHY{W(@{b@h=
z2R)0lDw7hpk`xy5Hh1v)#TTBiml>{{oa^?n8e;GHXwx*}@At5#Wk1G}!F<9%c0{rL
zYMBP@Zk`;R`b4WI7sE<+)2ail-KeM+S8gBM$rE3|wYbjav=b1*Lh!NoHeEtgHH%DK
zOF>7uJ^I1BhdmM4n&4WOjj%Tzwk8taIfCh@J`$fRu@BBI?zF&Ba_rlwC>f2g^qcO+
zqWA2j|Cm<CDLm$h617}aA1P)cqgwMhHeRHLprpj_`ykkzRN8sr0sizM;HN&uQA#%#
zT1#A5BcV87gjRM#SmTt=7P9hZCf~izDhh<QspUD|z?R3QA4PjjuANqMSQ}OTnI@D*
z@L(EZEcMDAcdqq5xUKI>+fCGyWGyIkg>On+n7X%2L7Bz|!N`NnYjOVN{`sF?Yig=Y
z&CW10(&1!L)Jgq>H%c#&j5>-`9f4dOEyu=;EHSp9Z(Luy<NPQFI|kE7&PaI3zJgI<
zLZ9an`HEg;pprT=c#v#9{-&AYV`drYqO8PNUa*2)vXRcc_799mKjY5hD3p?Er_rNd
zCeD;pk$3UJLe<w7E#Lv9m>EK(pgWK_M28t!-lWcLq~8kyvZytR5~_^swQ%bWje@*B
zn_1yH1br~lV0`eyLf+vmQF|6vdTp2Khy+|;3re}GH_vGya)*!U(^Mk1c#JKcD^q|c
z`U>^?B8`DKTC#__N6J^}s7TT&FZS7yhB^o)bozeIuZ?jrYGF&Mw10f-QR|zBUs-J@
zRryxG#QaUMUK@Kx@%vVkMZk{~y0{j`ux71?2ttO)0*6rh;GTJohb&ja59?(<EV&Pf
z8ph0d#>E%2DzaS}Hl&{!oMIuqse^h|Y5nQ}yYcXc&pR8#FSGoGHBAizYtHl8U<1p_
zL#%&HFB60_^hB-6PE)*Uv-{oofyQ01ZMwXRbyzWH1y%e~@4cJX+Kq^8*Qx*l8x>_r
zbOO`PMOnU7FyU~27XCOe16yYewX<|0jj2o-1Aa-ewuH$Lu_Ba;%uAL6?qDrSHXo07
zt<%y8Y^!@670x4Q5Z@_Vdm?vNIiF{=4k!;$QRIBAc9Z)a8Nw~oyTP({;x@^b@~L^v
z=PN2HDb9?FvFmdzIqpvD<MnYn-R9Vkn)8KD=gKr%$f$zZ9Uq;yr7gJ2sL6Vd_(k;4
z+_z^Ng#v<2dalIP)Cq*Fh=!Zmm3PQnAfGv39{MPYOGPo-4hTK0J#H9pHCQTF%XkpP
zysoY@rO$;xgg2dp<(hBQINqRkUMFF8wu_Fx+ArIMW*11&qYb9Zu`i(yE99~cbR{=g
zXLTOe85m@IEhtI`^qy|#dSA)2IqsVb*Oq9~n#5j36L7gpBb)WZBg$oaLwh{No#`B7
z#kTs_p6z&wbBdGYzr>WOV_tqbUL0Q2Xp`{2l-0=Bm@1d+yE<P@mmmKAFyU!oW{7`$
zVu%bA>ADQktP5$XOzTNOt&9oFRQrKLUX$_uw%xxedM~u6T%GQro$Jt(&+f*fW<|Z`
zb`J5SLofE9>qXqu0?X!4o4u?gAM~NRit5MY`;P317pb$Gnh$??9Hr&ehky6}<}4Zd
z%~vMfoaUZtsQi2P`;<F6<J7lGyQ`+UBXO(7mnsT!2u+=ZwS@hx$r&0~{6gMkd7?|0
z@f0wlzr@Xd5{?Rbzs|fk9~PPr0Qr=RPDrj$_;F^z#e+!_2d7&i$>g%m`$Y>WVSgK3
z4W-qmr|aYEM}ijEyxf`1T;{tX{inC*77DwKTj}yiZ9-2_o5i8?E%WCMFNR*C^$p;N
z{h?|mefaHhTxHpcjsk~q^Msdp{pY4jy?@6uJ)&5u0#uZ1{mYTJHr!|zg?EtQeQe4D
zqLVkyeVZz^PobZ<jp%zrf=SInMh4C-@et1p`H6!UPu0*SsBI&d1SxX)w(Yjo*o^Cn
zNuahE8%*VmcYD#DSB5W89C^vK9KwO(CA)?MWJM#Q;<l3(uDeI?PSS7vQwia&ru}GM
zAf?ZKokXaKFjx4x;8oYw&F|Ttp1~=`K`k;NDBX2|wDyJ9Z;SO3=_Ng0|1o>u@BT?S
zEsE*1|KQ8Yuq5qbqDbxSl$DUybqPn0Ca&k3O#@X;+Vk_cOn)@~T8SqHk6L!=7G2M8
zj~InePRqV_qeo%fev<!-z4wl%x{v?HUF9lCQN$r5uHulLoe`n3*CDc3$lhDY$gb>N
zM+o7vH_1vu96BM{9V6q|+x<G~`u={u$M28(kNe;I^Vj8yGv1%~=k<P#=TJ3xk>j|X
zMt_$)I%v!G=G-ocfhm(jDA_^g(5A_LMcDQ8p%E6B&hI?e%NCSlV~P$L3Oj#Y(nRkx
zeL;-s$M5YOOd6TDy=T8aEf09^xv@k(!71xRbc33L*|cr3z|>5FS|8mI4ajwbf~!sY
z+yqtk+p}dX3a6&f`VF2###Sq&Olb|cm=>Z~cCg-T!2Y~TRUk3>?83><S#-Rj%}$3e
zu72fWoqzl6IWJoW+V6IVjt2T`tga<v??E}uW79BJ8m0Eu$23a5k%#jw^D1d^n@2B`
z-)kyy3_Hs27G0B7+TX9(y?*bPZ2uu~IpwWT=AN@@LNqd38z}UP_D+v`vyJCJ<i&1}
zS!r{8k~O*aF1mpQ48eKv-=nTZTdkHgoPOx25HfeY_D)}4OQ75Z8tpCD;4`s``;H=E
z_WVyjjEmYdGr^48(U)a{w0T<N%cjgZ37-kWr`!K@+@FX`di5&2QqdwiPMab1WX0cF
z-FMZKLT$@hXnJp-@JPS%9q+KrV?&c|SSqF`-#%!<>hPgK;NF?AuVN|fkH*-mxo)`K
zdiHuF@480x&&gTw=MDb2mJ-GbZI?8a0<I~rM+ac8@u?5s;>SN%7)X_Wm3<QzF3cIW
zS#J@i`Sj5{!RKF7p0)n+&e75_Pm8@2@^9tjhr7`iK1`I;DtmnX%iUMEV01((!l~V{
z8W-v(r)b7rzj~M6Eu6+UMD>kl$jOJ_uCVAm3%cn}q(q%{k5QVw3nTpfu1;-fmY(7Z
z5yp^;2D+@vVn$B9T#})a7Up90rdRFPD@b0fSI@q8gv0M2T3!*WUNWY6-B3v~CPRVq
zF-Lbtj#zS3q_=&~+z~CjTsF;lx1+;qWTIk>p+ce`Uv8pOr7gb`-|rA!*r7^CzWVIL
zs|PVShCQS~vzZSwnaI1&!RhY{s<@*Mxmnpg7&V>0S{cUa=3FYm%Y$|5GO&Uw@AF*#
z3d$ql;@HIul`dlD8KP*gR$#<-i^bB>>JZDQ9g}Fnde~g}`Bq_;S%@V|VfDP@>%T<8
zUb8-}Wi+1OKUlh9ge}VoEc>$e%0nsEWkdnrY(yFg-L()C6`n!9&bJ?wb5O;v_g)vD
zqKRRDh0ZegR)d>)uA5g>ZMRCxz?4-JW3nQBbN?-WLD30LYyp=RPG!E;R!$J5_hhxG
z__E`(qQ1VHE(h{1qctr~V{e|_4=QIZ%tIyKb`z$eTRLHKzPCF%_QE*bg2>tGh1Eff
znrdJfr9-Xx#e1@0+AI<*QwPNg-xu;jRaRXqjNDJ1-*pV8J5{iG(tG#xxxz1+O@nR{
zclw?N=Ad=USrnA4=~qh~4Mmi^7t&l=SV*_JNpFOXe}tQJ`<e>RlCSu#@ivB>ZN6<F
zYsK}t9gD6@@>H6Vf~`abJux$<zf34&NoCfs#Nn?S(M{oYeYn%}FHD37IKD~uzVGfk
zO--};t0zN|lPht>yS4Qy$M@6B;n1NuP0LP6gB`z7qGQkb{+h=(PIugqk3J@5AMF@&
z@p7`PPiAOhZnWjR%0Je1_nmt0^nJ~Jv|XY<>3(`Q{FD7v1x(s1^X-#lUtFjQA5k#`
zu)e$3ZP07q`*b1xq6dcqjS45-?XAWwru^hD2?vBGe2bTB8$-#Hy1g-GN?zl;Y*Has
ze^=9;GXJ(gPjbHJBaBl;xEOTkRkYMZJ1s~Od8=ht7Q8pTi+DuaBd)egT6IL6;&PUU
zHDR7etDoHdD45{1xc`a*ghC$I9m0$@t<dqBX0K}6^l;F^@J{m+DSrCWGOUYV=NY4O
zi=KV2<a*9?U|>T0=X(FYnbiKjUAO;#W8DAykN+pjXPUWn8AkFpvTw%z0nV>PCZ*H_
zC~HXOjxCU_ZSMLNH!nMS-tkWVYdL?<ZI|JRzm)pE(%N)}>Sf32P%j4wqn$5Xm^FCf
z|Ne6?*}xKt=)LY2y$(LSS<{IN?1N_Us`LqqJ44aMi_a$7m-BH89!<_3k=0Y8qs6hl
zZ^k-)%DpriWUyNDAU;K0cQb>U_^%7P34<4Gm{>CynTnP?SXl7?d={VHoAbn-90nA^
z@ufmTz->ItH;Vq(tNtJ3QM_lb&fT0F9#Y>Jv>Bg&mfU7=Z;FckSnPG+zw1}Icly^3
z!xZ^TO0v+#wc97hB$}2VCoX!G?;TJvkh|B1HjmMXP7x8rwl=?4$7jSG(GwBhrTDIs
zH>l^mT-k9Wd3E5kNKta05{KZ<)7UXNj=WFK6P<5NV-^kHXg{L4rt$rZDf3@xV{Id1
z@=xQwSJsUlL}m5{D=I&E-~89xdyMtIFztuy{m4^5G>murd;c`Uk*FaLeQ#^_BaUv1
z^bON_4x_}q7>8slqKj;IRtr1gN3L?@P~sTnUhEg9k;<u0;tw`D-6oOv=8l-8BvsM7
z!}6%Xwi<(7Zc!O`xtYBUF008AwswllkycKwQRd^fBO<DIdIoT)AAk*^?*OepbuzO^
z8I4Mck2xB7zLE|Id0#fX-NnN4Vh%%<@w8r?3*8wraM-i}$tsSD?agc-#eu>m%QKZ^
z-7{)5!ivOS@b1^J^w%1P`uU6m*|5Fe`VTm@mw3)UE&6G?v%jEE_vdZ5@yq}Y@?0}l
z2Gwm~z8?4oxQBT^MuwxUhfT*Ha1(?zUHmvRo~0&k)+dzI?Z+?gf$)O}y>|v6Nri-k
z!QTiG5*EJNX4Y1al=n@P<V1T?jy2vqlS>QLaTaZnEfitVjn{D6v{`njd7zufWja}>
z{EN-$i)^LJgHMVSW1c1U1|fUS<j&gGy?B)w#ez|bV4r;fnt~5~C<3MguJJn|gqvY^
zLFQX!LsL_LtLwB#^zt75zCQOpqN=0>l#s5+lh(12sQfy5u<*j-`RKw1Xh^H5s!H@0
zXmRA{lQQ?u37CD}B7h7r)>Lw}MIc>~e?Rd~Vx4L6S9_xXSJG&UYi@{;3>?_ai9|2d
zhL{X2xOJ5lS!X&A(w698=Cd{95bo%*oqh`O!%wJ7vtdz`S$ew(+jWhYWWdT0uJ;cD
z2_LgNHomFSP6|vEfT>w&m&%Xdw!~Y-`@7TQz#7!y;<e9Vq*lo#+>2k+zcJ&)Ndobn
zAS%8-^e}UAX(_~{y0nxfh$PS$G^J64fbj=OKY(YBZGpHQNM1cXO>W-iEq*@d_8Sd$
zn`8#L7vgB8a0{s=&yFNsG6Sq#)d+xM0UgT5#<t;opc=5NDVh1O<h{g?y$9}$F}*M8
z<<T9&F@o8zX=B%J??vjkWBz&4>ea>*dVe;SF(9~MIQt;w&CQa`)*Gi}r+<GhqGeK3
zC!)u~syUgUDaeaR%gl`FFdN$%DrjCZ<phyXnbeYkg+xlHdDFGnZJ#`??`!oFj-Xiz
z=1+GoyNacQ|Irl^ee5XEkb&0?q<mVl=qXTJ14wUc59OlT_Duhau(AYZx5)wV-UatM
zkQ@hI9~c9H7IG~R4#6&^w*2dZR_#?K`fKVOi~$mc9e&F9_Dm5B<YQBmAB!$Iq^%ZS
zX4~A^y|ne`Gp`6;A#CiHRtv0k{uBt%rsR}#op`8AsjU9)om0ZKetykpwtBo@X_u1r
zS8X0`;j%89N8xQxuRQO5FsqZ2qh2e4AR{Q*6Xg0caL43PD>Lc>tf6>^>|b@_XnIxj
zqnd?U;Ie}PAzbjGr|?NOxV8d@+Ns>M*;X!``CRfRySw}5_k4>k=H43VxKmd?a?e)_
zf5hFR>Kjy=RZCTT%V^jA&nNaAp#V(N{#|4w$m4@~gMhMLH9zC&8|}b~%eEf&6yFqA
zC3(FdR%lC0{A5aGU@!H{!oa_&)N9jeAn>IE;uht<=qJ5?0P;IZ9%REb*v0I{(&4pg
zi^xM;fK3lO2|$O+7>&F*yOF2OuSV@Py%h`F-3(&TR+5>RlIfSJuGJ7u)_pB%s+RW}
z440>;r?<DONA1B5;tGlHSQD5KNJvDX?_$bb#R?b1((@K-fmb{ykZy?xk*4^<Iah11
zn~<MhHWVpV8ESHOaoEiu7f0bNr>5)B!;>1>i(9)wVimf!qfa7@GfiPlR}^1QOzjK1
zqb_@gIjl%f=Gl(#l1Q{Ii|S=~O!Z6z`)>Z7{0H#`X6A&4>s$nuq>Cbf&k`Xonb`!S
z3BukeDQPxkC>gTob_Vs~TnvP<MfX%b?P4sziOp<5PG|(AfK~zPPat5%Y5Qb&fR!$S
zjJ`vi>RM*6PQjpMnRSXKmE6G1?2*Mvy~1W=V_oeAL#CJx5OM3X0s%I_OD`_kVci6k
zV@ER6(yUV4ot@G70A&US2^chywSX;EW@hHrp5I6%tr`54J~zOY^|@)5@ygj>olp6W
z<^BcyDliY}T|=0qfbDx-L&Kt11{w*1F8bVnkOm>u+NHj}K1Y#A^hbei?}nlU&<ibE
z=zsb|ivz`-2=HGw117Rl2mVbXi{2Tz)^zE{d0M5M5gh9?&&}=pDTrgi-z*s{*gy@l
zg&9{5e^oH(-Jmid7=ilKYYCv!J6V0kyh$nmvi{5)2}B-PEP@Kdi+dhaa&XHmt$7h&
zl0o^%v;<-h(9mF?)PKiQi{U?c{Mn-07k)of7YpB8U~J^n$y(lOae$Ce01)xT6)Y1=
zwygxvtBU|I2kp_AHUL#q5GPoGez$3fm9Dl}y1PLYSX=J-g||htnHFl-Rad{oE`TQm
zNno?Fqq8#*H-M$lKE?O<x>l8nK^yP@kUuRWK?~i#saLd$0H@8*uLV=9f<Y}57)!$i
z%*X~q2mWNop0yocu+%U@udaC_l-cC6CxLTKmABWZN(rupa2o6$H0D@?HlCebAwkV^
zX2NkB^o+{NZV>$S;4?5rbj@b^FBz_itD*+=xpj)M*W(r7P7*Y1;w@F9!IyAr??5H@
zHu*)c|1;(tPlE#x4E&0*k1FUI6fpv0TcIr`V8Y^F2V$~}5ttr=2o{*_*d!~lhNJPG
zO1bPzj3mtPX+TaHKDkgTd@(iTM>-eTiT_Watx~LM6(w)s4QH|0YNifUms9s018r-9
zD-S5o?;SK2EtE2RvK69~d7H0rX$II3Vra6^7BC&m>_wpjl`$}aC|w$BI`RnE@<_07
zgB<7Jptx~&etmtwZIqWxP<c(fx6-b|2^@TCVH=8^kN1Q}6F34R?scO%k4M((f!O+G
z>i|4V0<wrk-Qe^Q#SI{W_<(w{6DqYo0nl?G_4IM18^|wGQEz!mjBVvTxz{ungPvVq
z*Fp{I70NTT)0(BL;J_jR4x{{h4IZkLsw*UxWyu!0fVlp(wFkynE(VD`>BFgCrV$}8
zx@JIaA4s?$w;l`bU%4K<2!e;5AAD)xhd7G7VGxUML4dv>h|>sk!^ttW|5F(B`w}cR
z_6`WTY2Ygf@}Rtk&o~#aoqiD5)NM1x1M?I#DCWSo4*VL$#C8e(7a&*A`e-B%t8nZ>
zx<4JO3dG<CAbWy&^B}OHcAU+pA^@Pn$5;Ke<E-po&z9NN+GuGCrCiPVJg%xYJ;MX~
zH^W&voI+YAKs;k-r^dEI`U#I&WQsOMA!9up=QW_4+V6gmxEc6&;8_c*Np=u~n~iTB
zbbzR^+b7FN<y_4UC-YwWa6k6I+#Fn-l}k@1*atK;z{|&?xw4SEGduz84?H{Ao}3ut
zCClTfS>7v8reGmCF;e-kjP_DrU6Eqc2ZoN<f%XbfPp`b9#;txwq0Y5{W5LSgWFS9Y
zw$xSS_UwOH09%CoYqg|a9B`~)KW6scQ5T>;4@Ys+?mP(HF0QS)aLlMo_l2WDMG5o?
zK<gC5Zk(N0!PpF3+9E4ewYD^QoUv{ZZIiBI7Lg3}^x#@z?%|PW;C?lCbJDd`n!<N`
zA{76FeYINA0r6-3JbegfTD=$l%>;I~_`8~O>mZu~RB>iu@RA3LmraF2wv0iIpt2?^
ze)s{#A31Lk3A#}8w`JP8%3WG`-*yTPDu<egAjp7dk|+MX^c_L{a0bF@m6~9c2?8F?
z;iuI_*Ap8BK)as|4$OE3aKG4X<k`#oA|yki>yy!G&PgCo;WyZ3u70H3RAS9q*!7jn
zz0vR1poUZv^pMQ#opCOoycWC{j+RYyHOSqZsk8$I3=rh<^I-*Ku0PP&{cMWb8R(r}
zUtb5$@{}A2&lO|I%m5GqG4k6Ogom=Xw|7ojhJsi?sHX<!MRnh$2Y3ds<v=45xNtvy
zNJ>a#cbpO67?MBE_v)LPiu31ztOc0;tv!KQSJG9!Q`h!FOg_3#ub(5*)yzy1{%-|;
zX9WoJOYX&3;FADbDr_H>t$`PhaRFOrc8=`rcz(^UQlOhas42O>F1|cI{%T}VEc*5i
z=!$`MkY%<8pE7t~fHb>*lWN!^yg(5UZv8+_MS#w!=O)N?^S}7J>$jq8WC@53*A;ak
zfZds`5w`mXlOLZ39>C5{PT=viaShh0%6^nz*+raDlNWT4;8Yb$kM;<8ap_BK5vcC{
zz91CQpP#!QEHm+=!6#nfS~!TFltbLk)0%zex=Ypkux!YtqPDU!K_wSlF|+!r;S{Bk
z1HLIgWp1D=htQU|1Beld1BZx)^zV5`89!^i!h|W2@=bONe1gRpX4{cXaUPNrHb0lV
zejFYi_VhsZ<7A+N1vzrXM```&^ysN-kYO@x8Uu|QTC!8H=?79QA;)1sgWODc;M*yY
zN;@5nOM1xo9(8RD&)1NS1^k~j$GF`sfX=V{>{QZppMQ1L75?f|6h52%augV%fmRz3
z&t-mio_^`wa7cc%LJmBBP!eBs-zx)t(CYNPf<ZJlvfFZv=?KrnB<}gjdKmb0QU@5R
z4ethCGDvIcMuAR6@REB3lwYvnIoioQN><4&9k~a*5usENOdGZL5M%f>1N`e9@MVNh
z{I6m0^>AmP7K7v`7-YiP8uFR~mXzQnG6qJ<F&z+T!9akJNO&n@%=rW(f~SCV-X3+?
z1koRu3FjnL1e~luso8?lItC5e<m%!Q^yjDS<iVi^<VUQ;;bi1bhD@iTLU3%0Ac_Ho
zDDFf1Af*g72<TjZFuKjWM7j#>^xmGHQ%|2P??LJdl&wm;M=A2xa0J^b&|u879`==F
zIv)z^dg6>Y=Ngb3MUVmQ2K4wqIdSj<d}T<sbg3^D0_PYqf%b3k>oFaXd^U?RG_X$;
zvRCWI4wk@6F9Qb$7i1EqB@ngp1kXimsDybqnS5;hbD#XFjzhC}vRk{EQ~P~HNaHe;
z#mPP#;ikIO@f;lwia#3YCb;2x(qkld?_!~tJ5Nros;X*1o}ka|0m>Oh`;#=~Ycj82
zS<}TU#>oEz0+SffFD!4p=EnIVLIUh~LGU|WWzNmU_GK?F6&w+6dVu;q!VCf<$REZl
zbRvY|h~|(vxK%pz&O+B!e~9cV<93b)I|m{+(4&QS_7{KhXOK?-84-)KR3nvn_k<f>
zSXzS58XQXm<(|Z@xZKp7Igy_Bc6ng=oe$NrV#*XqaU`v)8(o4UkCj)8-H4MKD6l{?
z-i|QZ2l=S<-LM#*Gf>Z#LkaL8#JgHEyNOdVS4gn*o>;egeMRlBe~OU`CHLPH;X$4?
zvsW{QMyyU&=MN`?XuIz?gIk+a7m287$oV=r5dGAE`frGLpm&g7k@ukLbK)hrK7lB`
zC{5k+qJ<C>waiD<*ZHVrkl`|-P$5V1%_B<@A2e_a+ZxZcPH|U-@yNpV1ri`^3%$ax
zjw0rfZer;HhqwTOsr)jqsK9^=tk59TKXKUqZe7voc~DJ%6_*xhnSw5;eWrFsv_d~O
z1NLhOpZue6SoR^?O|Up5NP<cR)1`jw#EV0MM|KLNdEfGhRcHnPp&ni}&q!3+8kqXZ
zU|(KabTe5AGFOP}JwK%>JTvYr8VM-Jc7?Y4q-c&gG6&geV(hDqX29=usO%w#VgWH7
zE=b1{yVU>fF<iXK6e{*-i5@fkMW}X}p6V->>2r_Ox<Ln_Z$XA+{vFtWpKEz_>Wb_p
zZQ{mgTz=QE-B9$?!+U3V4iZ-N^KZr6!6~NdcHI*H@jgiHY@B~nfVcO&2thY}3Iw_~
z_x$o-<_NLx`2OIH%vQX^-R(7XC+r~}|K>gl#ZfAx9P8{mZ=iBc0~QfZ42T+ieHYH%
z#=41;3p|08y>fBF@vg4W;&*{=sHZ`CPVJ-0X|z?UkX6-4R^Kzds;)i_IZ>`aj>L=E
z{~D@;x2)^hPh~lENLFE4O1B{GAv<+)q|$FJw?YEs);Qu{GPq6Ncq;H;lcgi*xO?&7
z*PL{6g>?$#Rs@-OkUx`a%I+Di0iE=2xH+BXGEOe_%BO>;e(^uZbrd3N@l?33Gxz3@
zx%^?}mzTkniSffJIiRDbNBq)sT{f)BItBC*r76_9RzYDLzQQ@x3<;mFb702i&M4u%
z4q`jtOj|HKbyDT?XVX;`v-2&_<=ePNf;$SZGrDT;LEz>Pq+O=KlkX7(dHOr*anMod
z#fjp;;<HFG`+K?2Pk2;t#Az-m<-U?eNGdH<6dHM9X0LH<5z^TuTcIpIs}y<i%Wq$Y
z>$}~MY=Gbl`7312tSjT=k5k^Lvc^Jw4CMf5@`REz9TI}-@UVh_36SOp*JCE8<MxMA
zJBI&6!eDc45luuJ$Qi(ge`X-`I)T~QH(U9WxrGShSPdCUF7o>o#<;H0_9;s`R6Sk#
zChLR1kE~Z^NR%<8!2}~I$?fr{P@8eYL+#KsR%PcSKsQu5x(pdM<i)_U9Iz9A@qsNT
z*x=NGqEGIZolj?|&USyzQ{4XT(Ex!IjpSE`MhqlR&NVQ*0o7Mvg!+%IiMJ<xH!<~}
zMogBm;iP*+abRKuMFx~{D!H(6(Vnysu@K(p-In$mO%OZ28DFR0BydJgsqt)sq!+9m
zccR5>Z|G0B3uDKOkH0$+(aOo=2H|z{zXjSb{Bp|g6lsgK6Ap6nq(gJ8`9CDMb@TUU
zN3;CmZ&$uruQmM6I_3K<`9<fsyZJrTGHO0}&nS1_pfm`xE6t~w-W3(WErHc0sKTtQ
zJWr@|HK@YO!PBA9;!3-{8Z0z3K$+Ij8Y81yFHV#HE5WXMChJ6p6OeF0VvLV2Du^OK
zzv$gNU(jfRgN!G!E4K644K-6TJKV>n1@!U|W?C0|MKgPG(8=UQKohTp_agRMyaE)V
zzLLe(blvq9y1&Wbh7E?jmSuQHBS{?)wE+S=YB2NQ*F)H?Qb#+zTbrAW+mjK{Gl9yj
z%oWrq8yY}91_Ckia^=+}>PofI-<@J2B8QWN{ZXZu^Op0g)>T6cm(gpc>6b}i#6pLg
zo>flN1x<!z=`)Dw>tW|aaOL@I!BbG%7b(hpU00xzYh2c3SpWK!TCP3B1TtzkZ?BNZ
zXZ1}?m}F~!Y;NMydrE=7Zn3CF(YZq{TWD;>pr|{<b(H#S51IzXysvtGM)ILh;7kIA
zhUD(-KV7BJ^8pzs*4Wn>Y~_Dh4DnNgujTrBxpo1Ny)go`X5f?+xwLoaDwdrgl&2Nm
z#?g_NtW=?wO#?-Qf+GqAt<(xth`ExP3$-d`vUV;|Cfba+Q^|p2%k=ac?E*WHg;jYW
z-qH5x+@DS2K!3affuyx4RD66-1fR!=L8q?TIoZPX$<5M<d*V|GVWJzP4-;v{aQaI(
z3>Axz;npcR){wTrK3;V9Y4`z;>9y+yST}m;V}WX2wniQ#K8~RMriO%0A*esWdC;CT
zB?2<wa5XNoW&HJJoYo8~OUjFMXOuxZCtZmZDjSkO|0bz)l`Q1T8#&M`L)W+_e6w%_
z1>fWT&%?-?qLGD-Q&0c8G^csS7Zz#WXZT0uBA8!8P72AZX~|s%^^g`5NYpCyWJvN!
zp{L;}0+thyGlPuQjB|1Z6Zl<1LIj#*@Yvxyn1E3~WDC)ZU@FDm4)-7nQo~NRO!(Lk
z@nT~s+mmo!4TjJe*nzU-B_<vn&_8pFj=-UWYvrHgbTg!Fq0!5>?{0p~(uVhOY3wm~
z*={65iM6y#s199lYEknme~0j^FQT=rri=Mg%H=cmgj)Xw$QD`NAbqB)q5@%6h%O3=
zq>+KOfGl29cMHOetHGAIYS9R-ltAz@p1F@aC8tl_d|MG;PQe2D|LS1DB7%cNfAf~I
z+3Yhs_m4Ce1FW@|su&N}4Ri@vV__BnolR(|QAu=}`i5hn%_5Y#A?_dsA}bki9>~1@
zvb+Ty1-~YczaCkH?+d*XPHKoxCHFt$)}SR?DNHz`qdUwDuyZW%M{u%%`D$Sy7e)ZA
zu0a|G+>C#&iQ;_i?3A%?$&cCW$wWo*W2`CD^*!mQey<YI82NDw<|$EOwWx#7AkGMe
z-q3i!2<*(1ru`~?^#FzHDxKdDE1X5HSq#OewsCY@pVTGqp{C2fnh-smSn%kRutvvA
z@CzuW&QxOU&6KLL8{s7zsdO^{J-H1(&^ic!9E^cMHz9ig>UHSh#4DU3bZa1$6-oth
z=KM3SGe(1Dp5*^aYeqvubF7O92|4T(1FWF(BLO-HD`->4<h`zrlcnt87P>Y1Dy&n4
z-`p)e+Qms7fkR(Z$CP^=B;E#CLKjsaUjpmapj`loE<BwgPyzvi9QIuTD5P046SvJk
zOAiG49!l+j%~c(UWm^fP^uoD!GaAfvBmA2(3D#z=RC1Mes)S|&sQ7{EpR0kx@eH6)
zJK~~?%`|_y3RD~%@!{x?ypbAtvWgxWM%%4}iB+VxyZ>vgJ~$q)aE0flm4{p{Y`n`X
z$mP+={S+EcP*qx(a(CKa=3h1ZmB$j%G1Z+%xfkYeg;26UUJCE`wkvdb558qqA2OT;
z>&Df!3YF=P<t;Epsv3!><(}yYM^ljo!wCatPtA{?EH-XnDh4Vfl9?Xhd65Q%MgC6+
z1Uc5Hq;L6ES=$Z_r8VgBz{m@VBmufM(~_~})6%@hJv<SdbYxmNFPYs4*jXH>6|lu%
zK~uXS=s^<(jhu7U<KCc^QzwWv73*_5*x7Yk-mu9~kuaS7o>zSKQlDnrvPh4ki1=~q
z@M-h-<mBY9Uy%mftM^j*+ChlF8?@xUS4(3P+rm5ks|bIOpSmMFj-GjNzSh$FYG2kR
zl3JUiX0IqXiXZEjoLbJ7jZgR#>2PmmP@3Z7HSU?avu-w3-P|_|f=s|5*8gxV^G18^
z=#nw-^P4ZO;ozy@gX!r8-^0jmoXdQIO8n0#`6&=LfTRnWlLjU4-sV^*SU@e<-L0(W
z3(B3|Dz_eJupjtJCZ1gJ3y{n#$X9qMy(e&NZd+*wx@7C#4HJ&DUW^iY&lzg-#8Rt^
zeEj_lIjIR+vBg-Z3lSj=hB12SyzNkjrRU`5LuQYoM4>>2G_%_hB26z2&O<kY8j1At
z-KXS!zymBoA1$BdiKUu9*@DQ@gib9%vksg(xD#W0x!&4}pLZh=vk8~fiB|YehqJiv
zyphn*5gZ?AyiLuoiRMTRQu93S64axS8{X-GqaXvgAhxK6DYq4Z;bLkx>)(@uHYltc
z=_}1VtvoFdYt`!0FUBfnU$poXX9U{>@A(c1ZR*#kYnSA}QV<Ft?Z`KcOj@MM@qIbg
z;2(oRJ*r4qsD<he>~?J12`$0|3vfw=*#I0=UqmPu%VwmkJHa&9`{>Ybp6$n+D}BeA
z7T$P;zTHd^7%qKxg#;vb>_*aDY}OcJ+VW_-AZ$Wv+6pQ=QcO|u0*v`$z2^Mo;W;?3
zN;}NBn*lT@VDu`^2%0L;KlY|^d-?hX^m0MQ7PLd52zRal&3KjE(3aOG2-mnBUzPZ&
z0k%<rZdWm7Ht0uL`BTY3Q=(`=L!&sK!w!VlpjjILx|&cTVI}w!SD&1QV0V1|DMo}<
zzlOo9LQ4w9!F^WKUW^eIuSzeSX$UrCry_+)W_=g-Z5DF)+qaK1&XIg_>Te^ea9%L@
zIrWs641{H25Ym>n<9i4~imsgQLlrPw${zruI6@UlMH*QGelvyI%9uAZNI~TXMn*?_
zO-Fl>3s>rKg-4=L;3fr+p<bcJ?L{z-1SvGSsK6^<+|vCkYHPvp9ht5wTN|;l3jJ0P
z@q`i@1STax;MlzmBy_MFO02QnmX9hx>>h3tlkbW&95?8<eO3^Pp~080=RR4aUC?x}
z=ulNz38sw0i<`#0YN!gsV$D!$Id!P&jCn<*q;ybjE-q!-1)v=XxnwGIf1$MmVFwP@
zv1M>|gbp;HVxe}H#79m;>;}lAR6&Ukz4%f4D(u2gC4>mjwmxp>Ln8*hN<Ro}Ln?l9
zz5*I6lF3SeS3ssc!J>~-FcpR`D#;=iczmgM$p2FnUN}y1f?e!&zyACQ9(LgC1FfNj
zu$MMFH!5mj%obS!mX2PGs0f_1=rDv`tc@TFb=)pJ7x-8qb#4)|1Q(ZBF^{u^X*4QW
zv)MVT&l4=3KYa?PV9D%--^U2#DZ${18(eJPVHdhBT}0?V-LD5F>xed2v2IZ~w;(2p
zGu}~uv*0b6nQJAI+WkqMJL1Nbfbq14{Io5+Fx4r!5BkW9TVQk2^<y%@LN{Rsd;o}{
z1Ex*|8amKNgALfGK71LMrk59|kPVM(gONF>ii=!{XWeKt`Yo)@929NGldtd9PG-D_
zRx>=*Duvphac7<4yrN|aDox;E=_vBcy^f!nhdKhXqE91vL*6y|Ifm1&`r&PJPl!=l
zT@i=?t$$tn{ZoRBBMtny5k{M04<q@SgN&2-fA8+?CkgLHP7z5l2lBNCdQIPaadX4Y
zhfZEyEVjq|Tvxx_ZHve=8Qa&T2fIll?$k;RKRz;|II5#No_-cTHH<lOFS(U8Z2#qQ
z-g0HpLXCb8FPXQKdl=ngm?uEbsOyujq=!MGzg!(Z8EkkIs)hH>mxSFYwQ)ta$x<tc
zaP*MvPcKHn?Vo9ynM)vq+BPgrQC)P|fm0>Sz5e>g{=B=g@9|}?YOQV9Z(E@>#1wqf
zB3$IsHLRr4K!iv6L4PsiE%CU8MC60x5h@H(hHT{@Dx{mgE%Dsfw<;fqm5_wCJQQC~
zI_n=W>h!$KvDWGCH|0Fk<U-J_UnAX}4EkWf&|n<*B;pxgd-Vsz!wcjmg;Mz*&O@K?
z3dy+^-ZFVWe}uGCwO2oDo0aO`A%=Q1)HsrHa1}Xi@;+_O_DhvtK#|S&&-2-($(^&2
z28Rxm56AW$H206Hf0i`xg&ZB6c#OS5eHgtGJl0-$A&oEi%<hpSA|h#OdvxiW8{Cl_
zkF*LzZ#=61uIXD$bcB7acRXheO&vJ9r@WXPIOQqlLLc0u7$A3#n=8y~@KoG{VTDV3
zk_iI)%Op>>NAc**+k+J7wQY#q%st>dxYXU!pR9w5r%Ml5IJ7Poz!jHCY#?)mX2xor
zCXrGWXH_G<2}^b4xAPbs<f;CF3DsX9bn}SD8K%-QD10&O!G`9M1_@X`RyCPFWw^ts
z<Dlr-RL^;iCeVd>$_c+J^^x#LaE*s*{Mb1DuY`N9%H~S4WQyqHABo<RhuRQ=si(sk
zRx7_NRAIj*NZwy2;CqOOe(-#{Ze&TR^lu_p`=$0Qj~iEi|JimEaS0(ks#i=rYwN6X
zZDK!_hNhCr3jGJ`Aw{To;8imll)B`ueozZyra5sv>-XQjCnw-Q;I&1WWv?PGMFwEx
z(_DJEv7@s84YTXn-&Vm3J@yE5X-7n`FryRuJg7>LeYf>_dy?`2u;Tcx@yzcRlOoIi
zy)datzaUAhHDtB3EQ1IEClb4Xy2wLL)5Pu$BljzRR%zRWFmNGye-m`!HeuRzRH64U
z%G>49!q?MGzMfO<;rVnh=6GQo=~TqqE_e0pr$0GPqZHu;Ct8VCX5C!F-5eR|UD)_(
z%$w5v^T5CA{wEsJ1PhBBb4m)>OGRhelWrycIiI#)|9Lw$^j(o?7k_tq)f_;cROq?6
zRWw#q976wka1bSjijT{2WVJ%6{QgdlnTTL<d0CS@*>`qL_t%{-6KfK!usZh4k}DHN
z(VR(lq9IQnEi1#UtvNRZfZ-=$8r#)oTJxM|UXL}LYIkkDw6~g~)L*~;9b2wn_&4<x
znm;qUMgmR%VHSCYnRtrcNtmeqq|7s3vMi*AK)Wc7j8bmTT%Iu9Iq(gK>3vy^^P`2H
zP$vI@x5XR^DSSmp@o*7|-Ux|4%7F-dbz(E|aF+HYG;(>q{`V&zKOi*88c#B}uF^RZ
zJzkd6_kS>BAyH*4L(=0#@mZobQ%Qc*e(Tq-{a^1S=p!GNjkiY`e&w9cBg2K~SOXBL
zJ;=DPARx)qV(Rw`65WG+KYlq*m8<>}%Z0v}fhD3*5~6YC3o^3m$RIV8GDaZ0?UI~H
zBu8@#uX*$oly-9iU_;5BxDd5Ftl$De9GEfZYOwbtJxd~?#ld|=>L0RCrA?88-wWa5
zl!0+Zq*ME)YvCW}T<5D*T3M7e`)Rr2HIhDXpXCdCwMaXK?^kM7AzC>gxge(w=llF#
zBO0mxaa!hd_=n(enP)I?AZ|7{&6Hbw=k=p#qn73=-m|n;3~VbZyem2j!fkBy)dzIk
zqmOqzyk!F6E#tzkgE~8;*X3@*iyjia>QwEh9AxD6KuwWDjjL~CK6SM%SwRbBj1u<_
zGq>(Nn&?z*EKT9qqlGe4GU2=!7;MrSWUS<5P&I0=%Gv{N6E*rU9{~|R?d?0YjW4wY
zq6)%4h~zp{jPp<)e^VmPQ1}GM$)6?&(P+%V2H?N$OqpDjY5zygME}w!;Sx_OxeI22
zPJhGZtG^Kbfi*VFPBjZTsbrCc;XkFdz#y0Q(uoyeX39t`&FhvnWXuZ=w2jLTv^RT3
zA4nr)WemR8{K{E1%e?ga?dm&V^S|#BTx#rmP1SQL_|6Lo&Wjgf-i~;3Qsa~+id&UP
z(ul_QYWKS?$|>=pG(~mL$crpgEa8G$>WC?pNg3V?ax!5^R+z_Jd_fU-Mn0f+S|Qar
zo7kN2D8lvp@t>{yIv*0_LM@KSGEnA=f9BHc*}8pQSql+?!0D@t=pb%ah!E{xS+6gI
zy|>pgH*g`*Vxrh`Xx~DUsz;D3{%fHU>qA}bJT1uhK)SfJR8Ij#<zI9AKiq*M13dii
ziOpnqTfRUtZEfjLHj>|dBPT(DJ@Q6-)4fKc_Q}ZCVWhBXTI^uKgi*nv$C!eok+N@*
zq&SuY+q2Au{)ue@-IjiC78Z7HZg$YOF)S9=vAJG=!VFxJ3qvErPqbI(JIks6nDF`?
za^CNe5rP0b5IhBKnB>TeugaKzokL8lemM_{N!$5dfVI6WH#muz8xZL33Q<uaX%;=u
zaqJP`idRWZh`&CqIB4UNUGw8@F}Ri5RKT|jZ%d2E0K3VQ<*P_AUppFU%5(YO-z!Pv
zdlKI4<B!P!dO7t=DD}8DYGQRNbptk>lDeoj6`T?sJTx36f#CkvPNiqPR+<{FMs<zQ
zKE3|nL6wx}df8=Rp;Ak}Y+ChJ=%?lw92)Vbu}7XQaxCI&w<3orTkp2dA7rf)JkgK&
z+P_&yjcuQmX?#u=Ct{(ys&l*-E(A9Gn!d`y9E5g+&jE85IV=WLckgq;cewoMQI*4}
z-}-Eeyq%nS{|zaa>q%2Il6?st4=hWRn@DRMVhO6={P_DDtzd#-a~NI>lzZ_^mP+0P
zA+LTF{fuwMg183(wzDKfNFJI-AMDiMkB=_PQiUODyoNx;>k835S!u0{GG8c#+eLLy
zf~kU!DpuRuyYIv>zAJXn${#d+ZEmra7uUlQTymxUsw|by+dFtMO)BX<lg`1Lf6fZn
z^|u0FNltbZaEd-eo;&?mINBu#8D6wt*$%q-P$_5^yn8oLRVf6`(tm4fO;Zwb=G0r!
z&x4z<2L!jy)HWvu)F4mcX4C(ir8?4t2*s!Hd^R+Zq5V=YJ87(<{RyIahBUfds}vA~
zO^pKc@<RBGg~i43UBRa8(BAEr*Hf>ic!5SLA)gq_@b+AiyO5HT7tTQ(Lp&AeG?R)H
zuiR%n4F9v&t{*?C$bAcw?B`N0aP%dO&-R`ra!9n$1$%lv<$@vo(c$`y<KrsFBHPUX
z&JR}fUB_msB9b0a%CsAD6Eesy_x71By)TA@vmLJEC`UxJ{QMaUIIkUUcSzM1Ip~7C
zs2b<b8??7ERLlso3ua0at7kb&JParGkzI|$f&bML_eo(t`m&`N^tnT}<&$OO#9W=h
zFQBYRMOyw3GfO+dEbV&QjUHmI6Z^`<+(8sdj(VrI2hHjK%OLa#K@8H9+xqI&`T0Qo
z3(U)3EqzT1>0FQba8x8<#R=CB#P4IhM~%r*0T4OiXe4RHDVj)iMD(pcU*iYwpOfF|
zke?by()@eH#usnHO@VJmuS2z2%Bv46=2;W|#F*#$r@s%j?dAWZ8%I@yaU#*<tu71J
zo_}pvkKdH2{@m|mE*-Y}JMxF5ZfX~>_J6wND=qBH-h^LUiDhjSo|z~fk8~2a{QKn|
z3zH8XXCac4X-&3hnb)E*2Y>Rz@zaDhDSRH9a;iVSTt!$yLWUMbu^%7ckMW|vCrWr>
z_+Nap#}akFe}ekr?eT~72!U*iCXkPno94$fnV;70e;&7!f#?Z;<Rin|%>DGg!n^9s
z?^iz(8UCX*_dYd{l>>fpWyz^0>DJ1h-nZ1LKg*{ciodoo&SM03Amr2^y}Xr>R}eM-
z=h_cCUadbrKhC5${?k7{u2BBY8vp$0FLRt({rTy=D#?E>0mA>;K0|n9{^ycnK3?xX
zKaaEhPF?@}_<!=I&o+yGFLu`%=8MISJ(R^AMlXsn5sG6zgBddsX=`m+zA=1FJ&22U
z^yx<)MawSXQp~uPZX6adIWIZPHDHa3+vfbbb@hCg`-kf0kva@cbMXeXp$-k?O>TSJ
zJ;f<&*c$R;vE7Z#(pKi8Of>fU(L&_>9s@o<$|&F`ja06pQOzM|<3?=bdiB^GsGt)O
zHD3R{YReVbe;HB9L9^qY{~Av?OR_|tkS%kRUhM;BS;Ckag_>y(%lattD<6*CS`MBE
zVnj7ZtqwH3Dj8k<WrvJTCi}CIC2cNEHsbitI*lKS8pR^QCMF$d%04(W7%H}H)r**g
z31}|Cg!cW$9bNiC(;ol9OZxThV}Mg{Fvu+F@8tHUzG(K0X~wO+eqH@j)e<iMMy*X{
zaqaD*CXMx?ZHMB_#f9Y-EbY!lz>6Zf9aLzw|L3udL&6ibt^NC!9gbaz&GI~fP_-`h
zmTUAs=%JMA(m@*5``hBb;e8@a<`$%QN%mAaUN(hiete|8%&h`#IMtrT1^uD6r`+B5
zi#gH_zkBWD<q;v}Rjr;yq_c?$X<bK#F1@Y23lAP8PpKdFAJqS}WeZ_o!U?wAC9|A+
z&HgIJ!Rr7w^MD5<$ir>e(MB`X6eT78tas4VGkx0&-($4v!Ro)HlRi4BZ{X6G=ufT2
zNZ4%-XO8#a<1Ib$!I$cBXk^$+yWL!0d<rSvbGOs<2@T4w3p@AF>$_~2ldmU>HUqut
z_agSl`1nG_tvn>my0n_pzgb$#S0;6L-Z0hC>g%WfghinYU~>?8@IBP$yr)7Y@`A0M
z=ewz$GdenzbY)6MpL4*JZF02rZINg~{kzHGWm3nU;(SgOdKM=h1GlfP8hD@h28E2f
z`@?O*u{vyw8?2j@N4aTHt#$!^K@Hn?S^cXz9G<p*)@Ry^xKF$Hh|yziVYTRiclNZ%
zTuQ%`1uxff0DB`7_1+s!iGRGT#I{<My9^rwo&BfBiX4<{X_`EKhiuQO-;ZN`F7n;F
zA502*a4ytc<B$tb-_Ela|Dx3Tijz8{)Izj0va^W2pDfT=D0Qb1d~T`a!qKy}fYj2=
zi}O_!|664`m!DEUlAp49Y4Y2ogAtul#~sFiWfY~);Ni@5JYPplwP%iENB#On+h3eZ
zqK(S?Z4Sy8hYHpl2S2ZL-C@An&58zz<B{R?9dlcIX=@;33q~w0)Mrus5y^9cFZ?F!
zzsV#!`dTLZP=N{L1v{e~)`~G7sPmJia=ivyxtF4vcK4_13~#z`7`%AaS6o{#RLWj!
zQ|4(4>ZDU5CW!gOX-#yt)e(P<A^m>;;#}wzNQ+kd#@q~)G2v}!69gVdso1+D$VLHM
zV*KXsK(vxU+VaJ16cox~xC@Bse7NGmV3g-7W=8;C!K5}Nr?XYuu)7u!5MhC;4YQ>C
zH8`w9tK*e{Js#7ywFNKl0fekz5Ju|&8PnzCF#WqH>{}eVJlk!?RyQ*B<1Xc3F~0AU
z_qXg4W8cgOpNNO<oYZrxI*+t0ZqXKd8t64#E`C0fI9M0)k8XLAk0HuCz;DKOlJRcZ
zJMp^KnvX;0TO5VJ#V*|sApQCIhr8IOMsQr4oShux-)trR#MNdI%wJcZ0!a4WRVwqV
z=}E#~U&AzCJz{8b5A)v*8@Zz1!A0FTbmcUyl)d<xver;U@bF68BetTqr(+!Ilm6lP
zF`;u$d{7OA;w)&68S50^3_iJIa;C*mGIPtj0q}QMNMNASHB;)$j%TmSXUsfQ)X~P2
zw+e-+f({gPDo5=B6$P9gKrFr0F5p@+G8}ruN(dL@rwJt$oIM#YOSZua8VqOzm9rwl
zO!3FvRX|f$=z+f$6zOHU7y*k#p?g99>d3kAYg3l^vxmJM-ttrU0w^rDSQul%jG;m=
z3SIt4MYeUmn6l-r);KryXYLFc^tYY-fBFM(Yc*3MaOcDs3-a~26Tu%oTLViba^csf
zX3q3Z&(9o2y7asczA9Vb<7gBkX|}wSjp;HUHmY4}bX~y<YY>SgD*=QBM)qJ54Q)6n
zz&o`4!}=+x?U8GyD!qi{<LoJ_vnVk2?r_05NUU!NlZ{@@z==jr0oomSH!zX36@q7w
zeClaTXytzR^10SxA73f_%0WIpLeX}@wB)*d{38`9e9*0>A-B=r44H?$@Pw5Cw7sN6
zn!FZaCQTs{Z8oxLC7?l-tylQdxyF;LChaIYChJ>io$#TsGNxRM1Nx%Jc7FIetGTtO
zSW#VA-^W-&2?^^haVg~WlnC^fVNfU~BJzsEKsVkRA-}6pHslNVBhZotC>V^C(IdsK
z%ECBLWh?ZdPNOhk`W)cvTi?(CAlKK(@Z~*lYv?om%my5Rs&9P{YFUY6mPHLsKXWgb
z>vGCQ!~~s(<pR40SS}bLgTFR-DEWeI4g{7?^NYDPNjF$o9K7-Qbeo<Eb)M0Rmj~)q
z#A`j>ru{EgOyj*&KDYNX4u!R--`IlgvbXoH(b0yH5m*fYW*R=Dc&}olETbQO=P#cM
z<}*fbuVDqa{6FFErVCM*SkeLcMTbeel{`HOmwm?5mpp9f)vL-;dytH$XJlk#Vgd}X
z)WMu8B*-RbX=d^rE^-#$GV<NqnA|G6|5aMjKd#L@&8B_kdYG0U{(fXhpVc~yL*c!#
zFfERrO3K**#K-*v6p{*!q>Jf*wh#b30g6~#bOf}Tda$Ld&x^je(4?v(gjZMiKC$X^
zrg52x3DAHb@ISn;A$hoMh7p)!jTzIypI=oxdPR5;_9=d!n?E$wso;)7d_j<jrJo1j
zHKW>ko^{H*?_iP}J+<Aa8l`RCUF}(+eyXnWgP6VbDnjlB&MUU_&De6)$RaWv<Q{B=
z%ya}kH2%Dg?-@{Rb9tD&)ET^&V9#pwIx{cWDHr1f_Iy(vF#wW=E<WJ+=I3p|)#=yd
z2O8=GeLahM#1>mSZDvchL(P0^q6(-KH*Sy`3RaDI17077AMkBKw0v}A1ZwUvZ%!|>
zXZQEcdtv*e65F>TvJ|xFjc({DD!v^05X56=bh|0Mm&5P$<m~KhXDl16609KsfdvTs
zE<-<(3ryco%Hh+ztpyf)wnGOs>oRQiTs5)T9>%_vLj{WVtp0V|)Vs}Y&@w9ntb}%f
z#Ykm-K0wXf3~WST;*|l=lIc#$-CtmD<pP@bFg(Cmiw?A@c2C}Gle&|i50iX&B5Lgc
z(d%cV9tT5E7_Av#XEbBC)0%!}auS}6<=+YSdmjaTcZmePOwWqTXAXo&0*?o<`dH;$
z3_QK5-OxxM>8j$%33b|^Ki`J$p7aX^Xm-nU{^Cb;VOOJ73T|@SXCjn*PqoT4&9#!3
zQVPT*6W}^vzcAj#(*z!7PV~8INKWmHPcN>@ta!RrM$%2S+^0{i7sEGjMQP4Z8DP4u
zy$JeL&|-?}w0(Vcb5bbGIL^r3lO|DatUMWwgmzL}1Pv_WsJ$=&dJKcbS$WeEL|lhW
z@|09W7l^SYywbUtJ~ox5{8?$geiDmxTGElwp(x(`8NIBqd2rv?Te@!rj19p9GA26O
zb|j}x&z@=7NVQmh@XpP~gGrafpw>J5jNBb{YaLR{VGbN0w?5&oO0wd6^?dhN9q~72
zpeqXzS_2Pv0~`Q+eSCbx(k=OEhwpEiB%XYB#JN1bjT4hRsx5*Ur$RQk5(QqV26~m4
zn3%XYCv^nm3)qeALbvV;0s>-t;!pO`WL_jYq{$i!?hY^~Mqlq;0|OzlQ(7GM2-u$a
z7P@IJ1gZH~&lCuNS673FiGl+#6_w1??2&5{Bzrpi25`}P{`(CuC&zAh-ag4rc6)5g
zZUoHf!dW<sbMt#;13z>BqcuM;Arh_c_o6cKY<T;^ZEJCu<o)y*&`EDEOG@c{^0zc^
zy2{AnW@jhho#(gqBKZj97hpmJ=jTUHeHl{MG&=?w+Gr1p3SK(X^4$47><Z=1IZ<L|
zV+!K@{QfMG{O?BZoa67AQV_2vTp>Z;f8zoG=&+!;A2N3Ub3$kYS}Q7WO{x3rr}Ssg
z0%s~Y=N{!{^4rB{;+|eXM9G8cB)A1IoDWUODSY=1kYyUa?7fNH#N8Kh`WaL>efN#m
z4=*~es8jWAuF8~k*#gl2n6+pf;!;EJ_U)Bl|KI4E?5;bx><?q+qpgK5(h8(sfQ`7e
zljc&i;0^Fd4?4fgF#bx*$beu7L8H$~cI#o&n3R-M?q2MYO-exf{e6x8MdmF|Dc03m
z9)Hq{syC<AW?cI+V3z$_?NzPqj;<qp=x`)Z@mhE%8LX#AW-#a7X^SzZZ=|bS50@GF
z@{v8B8u+uX^Ycv*!7{J4IP&tv(pB=p_W`hlUEqUR{SYv!7IQJ|%Fog$#Yiix61Q3=
zjZUT%xQZDdspdDl0qMJ(F7C6*nc5Aw5nXNHqRBF1*fJ~a1l%4>C;~de)fJuqd>Kxb
z`kESmT^$pB2X<gCDyJ?0rw=)~8-Rp*OF4VjkU`)M5A)<aEd`PZ0)BoO`iT?IYp=ni
z5C-bBA<c-aTmOzMo<H>z+ExqRuhjq>12!?dk+UcQdry)s3Py#w7`&em7JMCHP>Afy
zA`&ocQS7D#gZf+yP!lt7v?0=pAt^ccyo8(HMd(nqt<~FCjSvtc7d9Sz#I3=sGF#)G
zd|H@|D*@M?fjf8VDbN=ov|S+)P|kX_KRf%(<%fOM+`U`J7&+($!LxqgZ=_Du!aIHY
zMDH39;25g3IPC20VXzGxJzj(o0ci$wg95-*=y4@>xdw86ZP9BFZd}Hoqo?rIV*nms
zQ)0b60lbdHZb$PRsmxxx5x`<SZGKFB7EHc@D|erhH9;%8z}?A7`m$zB1OTQ>{;9x(
zRSBCEYcF36*XQBp29%<crzfbEgO$bbFmPAlmaOg6V;A~RuY7>F1hl^Vd1Kyx?R<n%
zty2<uao6J&%7%cu;x-EGJ^J%N(KF|V=KyBZ`rMc(=3=a;xIZ|(R*lT0VaNcFw-vHb
z3pBT577V}z+I~Tb0!W|6OX?i)+S=NyJL1={aSfk7`$=X3CTOG*5LUnkjp+dRPn-3P
z<jA5008jBE%JsNDwHjcv*-k^E2M3%az*7L~1UL(mkAVxwaNCi_>S}n%qNiqS4GXn_
z3<8iHbN+QCs3wsbeI*ZCdJgDv#u#9{RgGlhh{2-~Fts5jU!J3pDJr>e)<;hPB{Z`X
znAsloBb&#>#<)wn>v$>|tCWOp%Ys1;T>aQG#&2Oyl1uJ-5Zv|<6GVs;q&@(7L7@N<
z2skl7K_Wr`shi=So|fj=18MFtTL-`w78chMyGpu#ssQVCY#Cq<6OJDdVEzQ%M~%EM
zGU@B|frsa(oom3X5#V~@9s*F7ql2-dOET|@ivh9M8rilyve0Be$SGC~{^wE2AdjO+
z&H<!VH=rNj1ngY{<W!C|AQX8KYLnj=Hpp6D$@=go0~r2XMb`}f-}ebzS9UOdj*`zp
zhJ%w2+yo^I(A&~ga$&2DEZSEo&fo^VKjzovxJpy<lld46uJL)%i}CN$K^th7TiDq}
z@$1uxqMl(AM(q<PrNXIzokO5@77$3J%6j~9EORQkE(D^jtGPHl^$;NdY?TP(F!lC#
z&h2lLfEhaf%GuXfDgKuUVz^Sd84Y{O0=Ojry0WR5-;)%K&$<6yK$)X0JCvAe3z#5)
zNhuRRkO3#sZX`~+>wY~Pk_9LZj>Lz`P7jN*StM=(bZ&J9!>E$`?|`xC4JZp>;s89s
zs}15&DCN5Ehe|tTj7<gIOc^{G+6C$ZcSqj?dA8n0;EibsAdY~T322P!1V*2aBkbx{
zJPTRY`Lt%>_y-d!0A&d%k8Q#8@|%*;F~!$586|%kg$maNq!M=`Ku~gx^+=?3l1=e=
zPfjyDz%u!SCCHMLSbsCE^YZ~h*lhgDI>px<ZB1vVbU}QS9LOkC5twv{n6va;UFdo1
zq39+Uh<Hngo+5yR^Z=f)-3UQkT~>G>5VBPx8{#palI=!v<Sc?I0K5XElSsbdrYVv2
z;HME0XH%|Y-7Gj&gagWk$~hx4%&tj-G4a`dYR%>}B)wMOjM|@;z6CO<2#70<SuiTf
zkP3iIivaDwgSr5L*aCQsLhS`$jA>24iNc*2fqupq`vofvhGvm%bD~lEA)$67TA3=8
zvxL$IV3zA9uX}I$x#wUYlLY|AeNKCO`+jA`;Aw!oy4GoMs#pWN{-w@yl~Bg{q@0?@
z#vhCBke|FYCY%=|i=Ypgk^`vh)2hCFgx>o2x&NsexuoyEtCFwhQGf!t+cMx_!HCu@
zZH=H90M&P#FWhT6b-Jh!ib?Q#{8buWIR@OT<$#Sro$|<BoLAHS3=a_69%lMgHZ+XR
zxgyujwLJH}0(2qyET^Nx1AXp04R_2pcC7?<*D{X)Y&$u!Q0otfCZO^Vs5aNBNC(hQ
zPOL+jroM7Vf}TJHDg*SC5^GsS#Rgzy!HE`ZZ{Zmtyc1;2b`^RMcv%#cF~~|7T0sc{
zmWmngTw<z7;fO9;*z|4yJ_F!{J1yw|0uCf~%p4MkKfv0?3M@{vgbGvw0=A1R+B=?v
zd74BqyMJd#6jzU#i|jD7p=KV@RAY)Csd6|1ziZ&0MgQtE8QBCQX$U!+n?f4_TjDXK
zMKk)N)lO41P1|h%tp=a>7T)h;V+0Z|)ZfQ+w1I=$Ld<<`eqf74@O<>y;@)_*4QAQP
z>FEr$HV}9r?WzWFosPCPK>G;m001s+j`(d2H0Rgk(4{AEq5<!6Y|Hu-JlbVLZ~B+<
zp5NzOXIIrNgew9j(z@Cigzdk>lMX?eKlzJB6i}L-6DAkctfaf(rGBn?jZ^|ool(kP
ziESHduN&?39j^x^=j1Q~YdhkXoazW1I7CS4oerp8fIzWunw;^=A*~r^F7D?(5Mhql
zTbfLaC=}#~LaBnv;ODre)3h58WTvnD<L6t{0HSJ|6PY9_2{iQ~TmE(^QvqhYxq&sR
z(&O@4DlG`JPQm-!7ea(dJ*m#OOyiU97#$k}td=+<P>MiHpt90Zm)hbxfhGwS%P5o|
z;GF=fW_>pU2LS?zrv&TM>FFRo`D7p$l`@@Ij;=RcpNr-4c&iU=GbjgPn|L<>&kriv
zxw*XhzyZ4KQF}~yBcRzy0^uIgkOuoV5q!@<Km(|spMHu)^6g3jIRVlLxOY5&t!t{R
zl(#b>Yq1ibgYhTC!A<g(=NSTDZvS1Ym?)HToF-}h*WWWoP#I~z@PFPN2*)Mau$2$T
z-xYSLt47SN!^3ocqasUyi#rJ%J?PZ%wZnkeN`N%b*vDrNN*DU`p#$4D85NaTDQ#G!
z&oy5QzhcovGSufOmaffl$p8ylDz`1LaAK=w9v=N_m~;95HGL!Ci985FKerWP4`;bF
z6qYuvlXrFP4S(@ZqYRqZH>}ZY><%wEJL8bylf!3y#&pKFCf^qG^eO8(*Q<Tq(PAVI
zmOtrnQn$C}G;VJL)Is150Sfx1#G9|=L*;`uUg8;ePe2#~P#69MIN$|(g{K}A2=O%M
zT7ymWna~zMwO4L_WPW+(=hNm}(d7N#_^1Gid*Ux*RLk|KzFQ$@hEG~wW*&tc2@I?E
z4opkF!7&s`c2zxXXwLOz=bNsXz)o*o1SE(+)&nQrU(3rn1t@me;dY9irMp-Am$x!u
z$E-}Wz{CG~Dcd$IG71Qgj4@z+3(-xx0QI)~U-a$uRs{fQU>Aa0CTxWwo+=LB=lmBm
z0iY-1?*4Uo3vckOj{*rjizxY$`(Ts!?D~bZ?vv{h6eOQ5ZxH*{`|hmntl?l~lLS3+
zGvScq{VNLCUz05~q}00KDg&b^I!ff2gPyN)PY=7-MFrt+T^V27f$T7=@4Z61{a=A|
zZS|*EFA|QhjwwjMNM`Psi^`uAmJzF@II#x&<MCSoK)wYkU#6sAxCGnXS{V{{VzYAq
zIt5{ft0%ak>vN`irgFY5_X!jZ+QfHR=<lqo@Y0_Lerrs}(~g~Azkbcm-X*y}LJYUZ
zu<}-?T0KIYlRA3}GC@cb6tV-A=_23QasRt*aZ2pO!{>|9I=9W04O)Le#Nw1g;4YkN
zYHB)y0VO0R8R_YrPG5gk+<##l-NW*bzV7D7Z0XWi3thl7@9)zWD{mhhX8&;Hm<pnh
zA=&YN&8b4d97N%K`-$>>8w`nBh!VTs*r3g&i%Aq8CLG_p10KCi9C>n*YQTJuJ@Wd4
zgy8iMxG$X40NQjEDd#+!qoS)t;q<=Qm;z6t)_A4pUWY)dLfV*>K;!-@gy@T5LH~=m
z_kQH^|G$7sDx)NX?3E-GAxX$CWMpTr?7fnxY!b={NfJVcY#}Qv6%rA$lO&`Nb)T2|
zyubJT7u<gNeBLEq*L6Lw$2gC3&ZA{KM<)*n4E*&IVq%|`eQoIF#CwD_m@&IYlq0Y^
zkzjw;{n_x5P^heHvm~19P3|j@`x#hoD#oNBsF2PR9YdobbCfDvj$^OVBQYLwU5+!H
zOcb(r8sjsy5fs-p{2jJ6jbmYjQQgQMM#;NnG9)F$B3yzD@n<JZ{;bgvX);mlWO@fi
zYyZedV(@{k9Vc|$1ny7MMmA$|d<C!+_>`h4P;{<1cAdNnu@gb%iaZ}yiR_A_LwP)X
zwOuBXB9xPc%q)(u1?*z4N%Y%g-9qEiK}UAt&#W@0%}&G$YUibGL>|<{?ghq!rWaa0
z00mV;0wG#twJr-d5N?(0xYC*-C(cqo(Vd-*_LLN%vScIuFQ3~qZZDh_$CMbW?pD^9
zUh{VtT)2R$wsG`{7BBQ<pSm&>g`$mbraxBog`fo5xPtur$)!tmBS+jn3s!!jYgj-k
z5M~hBwN0PZ#D8^ic$j4@{K?hW$|LrdaiN6!4Ea1INl>HN#Erbysj7p`Uo0ZYHIAOk
zrY_<_S>9&3_$oDC*EQ#VT!54Px32wS=>s1bb)04n7ge}_T{P33def^TTa>mYt8nW{
zEoO!NZt){!e-in|sod(4@fT?y36{pA-=1}7<|SvDMZ~_jKH<wQSENVqQozhV%!rkp
z_=Q|g$*4=%bk%zYf0Pm93-tA~Ia=)m?ak>gH%+O*y+l{tGQP09>?t^6%DH(|Pyg?z
zx@$~2sP>>^tTdFAkdVtqefk}n56@+D24T!FzR+YYSlAc&kUXWw&{)xUx0gm-XHZo6
z$UHgwx_<zcX%Z8e-@6$_^2J6t;#d0=)Hg|e5W`v0ind>qc?woAzylw=&e#M9>bI4?
zQ#oT!lR%=qcq)e_Q|y}>V>JRnJ<rx4ql<pmj;exRezkHOTTcNJM?pSepYbiLOnvwb
zbig&kdVD%OH1}^ej6@m6+6aGM@WCqu+3)lc8nDhQAzP(Dk6l`oW&>c7(e()u;`=)|
z=C;P~YnJ%BZFxs9Wf(C|JmI-PaB^KA^)OhrS+@RltRlzuO2C3heTj0WpCWX8Wrg08
zLPNTD&a1^-kmt)Ix(Je31V~?BJNg#{0x?krSBEKwyPr@JAUI2*a7wR3D&z-F%BLzm
z4COR|(xo*g_o@@MyP#aFW+?yA^b$lTUe#B8eaQ}rEUHnCJL&5{EV=Ca=p;N3s3=0s
z4ko4?cJadlijUt{*mshC7s|uCC-u9JrM+ehx%Teetmn)5)zwRRy)r8+D4o!%5qg%x
z^t*tzD{*nS_g~1T{p^Bge3I#=pJa59H=ov*quT@P(UF;IKIr<iwpKMbCkcaukr638
z;`t{*PeRO+6YNpR5eL@ez2svL$~XCQ!(x0V^w?27^FL$13b91Te!t@35tL3TqvR}d
zb{<`TW=;?rja+YI(alqg9mUU#ojGD-mV&*BU@3!-EhhFzi#M=-OH_R%ky7@4iqNoK
z4WFUnU+`f{UyoJdid8Bx$cLH>0<gx$uO8x8Bw26Su|--4f4t~jJ+$h_Vx?QOZ|hQp
z=n)<Rf~tv+>+)%5F+@`te;=MmY8eF94~B2Q#JzWb5e&gg1A4EZsJByWuQ(`4CfrWQ
z2`B~TuAk=l?W&!faxQzwiO&C`;lWrXKgc0rMS%8dWFF2g=qypqAyJ4EwqRF5BtYPk
z3|G1zq>aRbB5c1z<vH1r7^Sc+lQaD_mP&t&JW_i#?d{PUE@BurFh{opQ>sguT@K}u
zN>Wij;UdN)6Z5a02LGQkR;hdtQ1p_Igv(A&V_CA=PkWyg0O)yiT#SjLdZ^&ptGU5)
z>Tu#*bp+Z89p#pC<aLVQ1Q!E*m(5X4W;C`KUQvfPSqimHy5U5E+6O-jm`xbuld)5B
zqxbpfe+9FVL=%7gLMWnSi`!X$e+z}sYo@=ZqQYl&F>_=-lye2O@+J5M)fl(%$z^n5
z+Q&}q2cA2}-G1JyYE0GvdX@Mb3Z%^%g7&yWt)4}5OiC_I!m2jk?Lxw<NQx>sj@v%y
z;-RWJmb8oaA_QgTd+xt?XgC8XkUW@3NczRNYpH>J=Gl?}p(N=I#r3c(+iTLM*ozH^
z80ZsjG@E~FFoCnzx$M9$Jrk3W;o;xk8uy@4L^ME+1m#Ci4CTWdCT8YS0L{_8AyuCF
z3408wKTA^1Beio2J}CR(W3rpz<zOMT?W8b1XM$CY?=qRPK>S&ZOacamhUAHE^vz<+
z`zoXqQZFf9u+xwYq06C-<S#IL826E+X+(a0>A_UwT$-W4PF-;C3wrGy`3=r^U`~gM
zDTFGyKU7RYVpp(C>$OAiXOW;_922WVLl&&Xdm!j}a-XoHXo@^XETP2${Ds&$>6RXQ
zP5R^a?`Rf2GL!5tp&|>u)i$BXdIdlTc77v#TIlPDG1UhAfn^3oL_3GT6mW7_trhgm
zt~gSX5FZ`y4}q`?9skFVTg><<YXSU7rqM0&^N76xH02_O;Yz8&Zrk5uZX}Wi+z6+C
zol>3lAR%~HRz6DF$HQ=fAu6JoBS>D(osC<@_wMdSIEKZKP<6;;I+kD6*Pc4rai2;|
zR<%ctT~g0C(}C>IG7cU@NbrmRMrkQD<5i7Uy32;`2@%UhVpjMveAwF{PDE>IS@!*j
z?CHi6=J&L(`|Sw2d?$-k7cWof;M)W;KmaeF!8TxQOy)&lHNmq9yNY2cbiMvQ)7IY8
zd!m0peS+8vzrv!eS4E{`pH);`RX;p6xNC)GKu}KM``VW;kF|JFw;Q^{o&m}d&`jke
z$m7P8xW-(>aPlEc!OS%}I=bup%k56NwhRplZ=cXPSet6M8cU}JokkT`-?1mLW<dYM
ze8qN|{&XWU_82LUnD-iT3d}#gYI@WM(3Z)@XWei)&~Q1{H(39yw9L#LlBw!_PWv!Y
zIx$i96hjnSw#<%FzK$7>7v@F1y}f8}(EfDU2&bNdBsrj+6#7BDj?mXA&?;g;wJ;WZ
zm*@)<jw<jmwsR<t*n%bk_eg&8ktj7#C4pf2<5h)b-4Cen@c5urdh|y!&H2ieE8gC^
zqNwK~lfoY+bww|SpQ-222(>}>K#85PH@aoSup6*Xr6C1_cljXDEx-f@`Jg?(K~Ahi
zPzU3hFJJhWC;-=p6`L*XAtnO&8>_^2$C&%0MXmp8hY80k#?Mlk=6F-57#y!^F_Q%s
zzjw&gJiYHcU#<#w;KiNuu~=t}`ka}Wx$U^p#O*No$P3#n540VpdVI-F!mgJi8*Xf1
zfwx(j^UD?GDJN2$AjI9;BmaxL>M`Ez+wEH;W7cEhZ+xNP(MLSL-9|&U{b8Km()A?G
zq+5M)i-KCmuy0<8E5=t4de@Au)zwuW2?5&3za|hlTD+;}LS@pO%E>K+EIml>x2`DU
zid+}@;B@>I3VDQ;Hgfqru@r!DVCJa6S0SS2r{FI<VV(Z4g)M3=?a%r&piTHPuC1-L
zx1R;0SRtcTl{PV6$U~=Ymx9{aZ=XrX+1XynECaDX&SANzuSb<AAB_M4-x_oifWA0X
zeQQ|aTw62VT-@CVgzKAXqx|LBcl=>*D{gj7-l`oiJsK9Pc%4{$*hUzSW(V=H;FD*s
z7=BeV4NQkQC`@7S1?`!qr$}N4=KoFltsmp$&+MI4V2s+a-k=l<upWc%8IRnHx%XUo
zUg2X5asfx3T{cJn$2tk#HApPL0{YkS+ij%2FF>1>*ZXbX%VH~irC9}S1>$(=<d*(+
zW9f6jx%Qp2;^zB2#hD+KplV7H=V=aixa%RlySn5CM<w2>_e_79JuTl<mh_XebKfR?
zYb>`%gdqxjAzKLEk@UF3+zrB=T{gt}hV7r6ulLOw85yBp!nCtrk73siv=CJYMxJri
z!n?NFe?f}r&C^X%*}=%@#zE<M{j{`65T#T3Nrotytu4dRB86oU5!=mc(;gnuP<A8!
zcqwsE%5Cy~v`+_dr8It|Pxw}JPf0@2Vp-_<Mhwi2$?K<=%(Of5g(}N>C+&FUuaIsY
zDZ2lT)I&FZn!_b`4%aDN2wA6#hN0|BxC@D<%z20lz0!+Mc<9)}y&JxE54j2p3P9R5
z$PeK&<<bYeW5$DQ+aZY#8B&XDUNZ|Y{^8K4?<G%Xfrjo=d`#6<EB$Zhm1D`R%~sxB
zA=p&NybWv|g{aa-4K$gbzl0nmC`s;bx!<Xh`{Ufcm4sxK-rMOu5BjrSPX~TKA{9*j
z8{<(lkzc;3tbNy>WY(2kJ7MYS*EhZZ6wX1EJYQeDN6@3YFsf)f{Q)k?MwXj`iSl9_
z{!$!IH5zCZm|M#*V+l*a2aU|Ioc-k?-u$RN1ujh$i<7*?`(FlA-my=6y%RH}mbhut
zAHQHTIMU)o971xLy?@`;?$0h_4(GS9_1T@}s#+sq+rpe8ydpp|=u{r5M2V`!E#pao
zeR9Zg7E|XIb=i`+WnZz=Wv8#$v3<&*bF+KHE0@`Eg<RrRe__L`H|9*8%O9D;JjC%`
z3*fx`T3>bVC<c<e==a2PtFvdOCMv={;obJqX}WYVwu|NhUdme;&fieTJ!Q1sdB4o?
z%0>Ada9BFFQe9+m?a=chyO*!KsjT}$e;(|2WU5r5=#FRReF2?Vz5ZF>B{MEUZn`A<
z-vj>mGboUX_txX{7wLBd)mh>ol$BKxzA&~JUl0=to|J#+!P6-HkOQ_NZ0b9RuBmXl
zLpW;G$13HIv5N*VTrnSZ*#L5I1M2f<qwdf2&tH&wI=p`H@PLRakIlDGnd$2t``Vd<
z4028?v+^XTp3Ni+mJwru$Qg%{kZ!ejTMu4iLGkSid!iAzGGWvot3>=xS6d?fEbDsq
z8|l<@2b<0g?%1Y)T8sTGk;P%P+ow5D0}zl~)>FP7{{9p#hb21HwR(Bzdr<LbHI80&
zW)N^tDtXg1`HpA}_Ld*}LOjUp$~q<&eI(F~w11)!7D9?$x^$x(Rw5whXb2>tO7l_9
z>lMdL^W@22<E(!^xmB7D>-NQq>^Y$keC{!|@V55H;<;|tnR#@q><0{Yw2WImR?|PQ
zZ;<7)xEx2jkHm|p3IFhy8|tYYqRTo3X77&}?k5#h@^BST#RXXiWQ$>nlA+Of^uDXI
zMTJPAbYxDbE_2J?AJ?DJ`R)C+zcs1;)wPnMjLE8kY|R`8QO4+&qTQg)29LVXzoww=
z2LFP;!>)Yr>HA$56y1c?U+R!_*_D192pybz;kEtV5k3p|d*NKmHlB5gze9@R%C{!e
z+OnrERxn5`em+7R+PHVuj?75bbC>kBsAG>n$C9oPIix#%Wg)11z?5zCXi)z<8qc;#
zdtUcv4wsW)*(1cEne!HO4-{DM$|OdTryU;Ys!z(Vs`-d&T%_`v!8FqPDXF)pN)BqW
zB$WrXX}oD?R`p&^iZaE%@<@5R{h}{NtopG+#|4sbxiQQYVwJ!<k!_MVal-cXp~Maz
z36etLh6@e?x^u;+hrL{8`UP&@sJL4T($K<}_fG+&E%?B&Pl6>{j^oK>0}DkP%SN!L
z0rxq+VFOVWo_S)W6Wx<;W{t8_VtLlacN0{&QR6p`BJJOl<4CY#W@W{Dj`tmJ*M|So
z_jfz3!;-O?KA~lNFL}WQyf2gw#h+;<zn%KwxXfW!Au4?3r5pF{1>c$&#q?K^m-HlL
zhGA-%r8aC({bhhQvF5Y$gQ)h6ZGzDmv44VG_^P=J3(vKfU$hD$f7Qb9VjM`?M8Tc}
zG@(z=^UzR*6Bk#GQ2JEGo}E})UEBEWBGyEGQ6Iz3Mqiky!FYCXZfs)<dy|K_{K_7d
z!=+oU-s$L!G`ih*Aa0J;lV{>q%<Or84aotwyd7QN9<7jF7W={SkniS*5!$gM`}+lo
z`^%aWo~<fT5$expq;bugLEMQ4{QtH(bqf@eb)}_*l&^{MA@<x=r3m?%vjdsw=7T|Q
zGhcrANKl%=O%+yPKY#u-sr6g^+<Vw^Cy0kIr4hQ_2I%CFQ*K`u&G9176G048AM0AZ
zhv8g|9s#q)&qd9d-!C;wW%mF`!ha92SPH-$7x2W#`fWyi7DakoR7IrkBP|};G8E@$
zw&;tJW~Xn-$g=I;$&YadC`-nL<%5oL7K$9PfU@3BK(`M=B7m2OxI<2nl>&ToFYeUh
z+0A&ER>qHViM=0RK%0cp+m>NMmrD+|7k@tM*1^$G)RSIXyyYRX2gZEx-N2~<#Sk_r
zmVI#@lWI~M9-=AidX1tcnqmrU;U!e|5sDW=8l_hh#)B#C8g7`;f3xBo*+yg|kT{6T
z`xv+foU^<7+FzUaEMCH)k@&-iTYP))!_QMbzfKpp*c7ga6S)9gsT<iGYr(y-{Y?4P
zId|0_Q})nnMk&8WViT_$QC6P&CLqs7`JA`g6E55USSv#kB`ZHM8xAU~RqWupq01YO
zkNBnj{$#!BH@q2LHkjXn0|Og~xXC7WIuc?8WPA}_+oIqgs_1v2_w3`Xvx~o|D{|(9
zcS*uY#>(tG+50i@>`<w{4*0zUHMZ}S6Eh@V71v|$%-?Ly(S4n0Vs`Iuldk^1xBD1d
zrmwp@YQfbFe-VE<Z3C-jWqbCbK0+~qn)e}_Rp+rR4W=Wv+lT{CH+kQ`ItqQWhd2t7
z#!;8cmoIpJ6cBgp<$P1YpSg0d<Y?njbXG53><}shkqXmJ(UjyYSfW<6x}NV5#x&(9
zy&SKg<`Z^7Ru&f2^8R&4XkR`o-WoIaaA@ClWp>AutZ+)p{zvI=+ICT<KXQBIM{-es
zN&}chx;j`bLjwbDVodPYLuDtFNj%EiZJlQeEEbOM7y$*#Z2j%cjy@c4#*mXP3H$PS
zo*Opz(C*C88{O%&{&tm|9c-s!MflicbRAX2MYG$$bPSl@j&g&1Fp>afwJdb+3yyR7
zVyvVl+^*d2xXm+9mM<(fEKt#@H0PsRB?2IB>|Lu85IKA#01T=21bGj><I>)#TYhPx
zWZ-6GWeaQUEPyKgX`E_8UkKl1{6m+A2Kf)%xD9T)q_kObFu(f*5bin`e{^eTYcZcz
z9XJLski2zB{8MU{ZI=yAMp4BX_fwxzTgKZ6{tam19t=5k93mkmLQ{<y=*T>%0B)5x
ze9QDKz#~q3-541~zyE}x8)yBGySYc)O~1a~O<&0#+C!Nn#1Q4u;39Tcg}c=uwwmNy
z7sjx1OXTcegAf@%c|keHArLuVW^2Sm>B(H%>$4d?4EI>M62eFfV?^eJWQUeXui>G9
zgot~0BD*%<L75M64GEOy5-hM}q)!_yk$<OHWBljK)7NMvK-uJoC5#Wv=$p;=b`SbU
zIF%Y`5<Q*yvbd&sBA7xTZ?4`@B1r|lA0SHc&{V<Yk^^cj4vNriuKjR}>Gs^nh?WEd
z3_CXXf51VKks=hmJPhG4Umhe_X>>b?g8MTey3SWBq0JS)Rys0|fugz$aw1{APW}op
zTOde@iz-2rg|a<WOD33V`RZHS#-lh%LP>IR3gv^RklUrC6noDK(j{jehItRlaiCq7
zCGMfSJb3#|+UtWspML%VJP#}Yunwk_?<7d!#B@XRDE%|{X^L(GOfle?a_ZE^SmY7>
z|9StP)qavkf>6A|TsOz@9gv4ogJ2iZL+8EZc#@{fzlI<UVOsF(z}mC7({OW8zS@4R
zG%8%Q@H|XrJBrsfB(3-7qb4do4@(h9T5ak|{AEkxcOQ%Y$h=J4D<MF$RO~>d8FIaz
zt;{`_U~7u*9P_;X)0i&c>$wi%pWv=-MJ$N$y>_Fq^#;K|r6@^2hDMP!=e59ty%cj^
z@Jf?ld5x(nKy!G3c{1CtfTaQ=y2#_H$~yKeTlBMX9M^(qzf;uwSoMRU4A=#amM*!t
zTy1jyxZpz=P~WakZt9(&NE)D8eb#!z$K9!l&fU?#>8PpHj+0w)@ZURt)#q^3quMC$
z_;c%C)1x467aG?@$Z;TB$?E240Z$TUiN=})G>6URZspQ-yHq|!rmK8*SH-!bT-=b+
zzl#!;ePXJZ-ij@bi#X*BlayHME4V(81%st(DFj3YDFQtjW#20_Bj?Uxf~3;pBAik1
z5i?bkba=s*>9^8E`nxQ9>Ao)s=D1ur^i_o$R}D{P)1!!Q2qhTJ;BsKfH0mOK6e`2m
zmhteGagzJe3FQuIN9i5P2kkB=F!c7avZ-CJF=i)z>u!^XCZL$Fe9$OI3-$HjoK6q>
z+u7E8?ZugtGjQpqk><(+^X$v_?=;0?T6GW?FZh7SnAe-zH%o6Ew+E;}*wy)EUmPvu
zH`sC!XpK+hIAS}kyU>cey189P!~+WmQ(l6XE;uHiv*A#zlXs`I-ZZ9Tk|UO+{aVB&
z;m$GX_r9S8=_(uv)HhxOoj;rT+59#`N!2$P;QZRa1T#~UbOUf0nphyEFak?ghr5!N
z3*g9Wuctv=Lgb(df0Q)!c}?HpsVcRuT8tFXZnUjYj9-7linhFb=SA<o{<`(`r?Y$N
z{kN1IhsUNFy%6_yRhUp$TIr*QF6OIvg^3k!JSxMmb$Fa$CJ3rV*>L5Mlg}!!QSX@M
z=Jlu;7+8;g6g&;mcf3TpdgE<LCJK!RAlOLy>O4Uyc8P%l+O)w_&5ESOVs;i|@?;)w
zrkCou{9Rp<j2?8sjUTfmpw^LI0Rbi?8ijqM@9_@*`J7kyO}rJ00DL5hhqFE?2Y$IJ
z*)CI<D^}p-P3rrCPzEh-oc`Z&dSExAp5*BCzPYf%P~dF|NTr*LJMP`RyAET3Jxujz
zzO;DL?J{qWBGhe;4#BMZ^ySO0Gm{udY38s6HW1KdrYHqh!!p(7%egsk76~PFlma;Y
z+oD^RFs?E$5=%V?dWF>Qg=jSS(wwphN}xnFn}dWd!U3j>TaljM^5@=#1=u+KT=mQ7
zdZfoE%CP(WJtZ!4`j8Wae0IhHXGyCCh)u$BF`#pHhHI15rA4_u)DGcVWXQg#;d-Jx
zY?aTvdm*oWa_=H+Mt=Vq`9l#**9-p>>%zW9rh1lpXEVXoJ;m}`*W`+Jj#d!mq}%F|
zfYlDH2Z)#;IHA(-f{;`^)%d~%WiBdEF+hVuCx%A|haY5F)_`?_58204Ej%D?VWxix
z)}SzHgrWuc5-g1%EopLOLG&R9m|{PfAIg+#mgyJfcnaJYw`kW6mkW6m<|+ko&6B-P
z7_d?SRF>6FXGBXhTCQ-IN$Es12L*HeQx~Vc2W|$~^`Ogul-+m~{^N%Qc829ix~@~l
zj&wieizD7=&yvPpw~vGvkR{Auw0Of<ZG{=q{1)5b8jV2&ALjUgAK-^G>&rz2j$gPO
z5o`VT-R1tcJF}RFf)0Y(AHDhZCq+ej!{rEJh#?9%VD%8jp3$&{B3WQ~3I-Qdc+>CS
zk|7wXJ#!R*jfzqNjL%5esASk;SyN=gQWt)0DA9gi_Klg+$fVXd+U*y`UOd%%Wb(Ti
zIkAFU&OHmQ1+~XaVQ=3QUdVq3YE1j25YqyNSxGAJ;HishHV2%mlLvCRLdL>h!+pNW
z1)m$Gz@(8FA@!JaYqQjRS@T(JYhnJ!aEj2zbJ^$H$3B13peEqTtv@OL%g|amY=7QI
z&_;Azqt{fHIrAKTeHj^?#J?KGBBXZ^+dm3Eu$MaB)*!F<x)V>F4=tDNeVU6ftMjeV
zq)pV|6>Y5WxH?8$H-he9(nB0^(?v|q0ww{G%@1gf=U<}n0XbBd!Ku8u%jW*6Nw@tB
z<&;G7dtqqyYXjU|bslM<cLLMg9kHhmHEep^nZ+nFyoBqRl|HzqeajeGIkFH5Y&+~w
zT+uhXJ6Hxx1ttm{1f--Hk0;bugZAt9zbSr<shz7U`cl}Z5nYq69#Y`*0jXF*f@aA#
zUY$R?2R$X8Hx{T^STxT6Y@9L7>phAw7ikJ>&kPNbFqJhVU!d-Czie*a?xAL=lUnL0
z35H8Ze}a7Ull3E-WwPm%#z*KWLZ7gwoLzfnH=8i4Zp=?f0*)2DMn_Yx>f~*w7EI=P
zt*E55=^ZMRAXih7>zk)q8du`#nR%vOmt=HlRVF=#66h?($u~y9mV=?%uMLV&3kjAC
zBG|IkU@gnLcRJ{miHRPag}eh*G7zI5+d>$$Ina!PQ;O7BL)f7amUTi>QYY>7jrhSi
zh38?PO9R|LrcmIYHAF0?g9ic%q^IXTZLiTz#T#nXL!zqG>4*L6OjMP0Tl^MI>`T0z
zSkiGMz?73~bF_$8@ue+}RIgo_Jf_o1PDrXKh+{<%vJ3@G3=NeIidpZr^M|D#XLQrE
zS6g)$e8Ek5^2hRmMOk*rW~RM-t$4FLXzkoSKsjOhsZ3ezyr*noUv*g-OjR)&MifSk
z!t};mVEDbTYuKHt0?r4-Zv0%za{P=Tv1c<S*T2bfX$dpzR=TG2NvAO@JviMo!;Jn-
zi`8Sf&2}5}We}soe4qD?I`j&6&Ux(&JPk0BC3@8R-PCGB<0vJ!4oLup@u>e`obA6a
zviV`mMfWKgO3Zs88H%MGLp6AqHj-ez5z>CmX3OIbE<+I=JG8G#hhw?{)Se;AxW*UE
z5f|pLz?ioS@>&9@^rBnF5!;aPkR<z-H_c1=rpycO9?^S}z873z)1!I<iN7{}+Xy#2
z)Jq6{clIDlWGN)pe|-V4Aj72)URsal`X9v%I|`!*h2I#0NgvEs6|<H^I$mP@JicHl
zbb@{tpy+puUL=;?+acytqAsEtJH@hx%mMti1)ufB$qwI|o6b4fYWy8C=4a3k%1>}4
z5>-|4ryriQbbR0AwoSon_u<{cmZ6OcD+?Bn){o|nM~1!A*VjkX^j{hcWmVwV8$@9x
zl!R3e#)UsW_vUrk1f`f$s{2!C+JKk>bA3t47Y{$$%6yV|3I9N9XO{lqyFS!!I0Xv_
z5bB`;LC)!z<fS3&7pbSY|H&Q(R*4;m-w!UaQL3A;YK+{CIlS}WqiXwHS(Eq`vqyCS
ze`>At)2{q@|NecFfy5S70F<#x6BrqO_mS{XmLA#_qucnE#@z1PUIPrA+W#bH%`B~A
zCd$5X<R+u)7y(UMWxxL)*~UbKk_2=Lr}A01%1smVz#XCPv`@FY3}9FQN+Dth#tL55
zl=rPZhJP1J$wGN1n;tVbS9|3b_?KztvXLxD=0V3PF~Qj^Dq4U8I0p?GMm>K={D-B3
z<MM-x#95-ftBo3uzA-55L;qkT(D(JLfDi{tKM!$?g)1T<)Bxsj7?=kDi-K8Xdi31@
z?;mgpTP1b`-^S}YKU`B?TPq+hY_D%#e5d*jyFjQ6JIw<c8R>RIeSO#JA>dpLQDe23
zmr#Yb-mtilPoPqcqgP4JTJ@_vn@QAiD#+krsr0^JHZaU3Sk$<vz%7HL;EV?#RLtm~
z+kYXxe+1Y)eCgdP_4q=Bqrn6q0bfJv`k{|s>13qIFmMOWP@RYEvacA^aFr*<U=2HW
z$L|l8MP7%R4V}qOwHk5m$or-iutVv!1F7VAvtD{Msyl`#l;LQVg2GzH?|9D~3F(Jf
zFSuiDfjE$0v}iQgDsk!?8S&GQ@#vAAKsvTd25cs{s5vOl6thlaI}np%B#<~Vk2mPa
z97tOb6<~OG*=_n2^9Nzt$fzmPlkDKt$fV;u5}e~v-3v<Ma$=PL$&;{ycTj2gqKDnv
zoU;6u5*M~rFjMR-o*&(>NWWL+^X^8a>>doru*RZ#C{MJg;L`Bqhf6iXev%^&qWm4#
zIYEA9=V5hn)gps70byQW+K2Yzae#PA;q|7uOPK=OAe{)8)6AhUS3_0&gY?^>d(09u
zpZ5OPg55*nsgz>~`ecL2S^FcKDI>1$76qc>A-?bh!>}8oPEp6H-i|2aE}>i!+8@;Y
zC`xPOpikbydVOVggA?h(yl}7A5aT<0LKkw8_<!k^Yyyrmo(LyC5@0XG@Xb=_o6!If
z&s%477f8JXm*nc|YLJS;NJ0-#qgApi9hm<aOo@6N<5OgQbnr-{ZR0#_Gt0iPQQg!K
z<Y<u%>#exMFdmM(Yir`>hdqoGhw4<gmk7r@R*8h&(tgyr2E8(GJjUpo8+1Uo%-D+0
zPaDbZP2ZheFxz_Vw3p~&CwocyDfKs)^2U8@l30;<qL=QG`wBAJ87?Zc0{CQZJb-C1
zm`hhji;GJMT#(qDS+;K2>8bM2;ODDy-^M5qvH?B5bKKM<BmG*GGHm5n#F(%ogzHgI
z<LIW(?-d+_?^V5ayF+D_5QxywfrUe(EO)I1su;+R)&a@E4(X1VSSmZDCbkbRvYo;m
zgD%O?&=7N0papYYg7?IZfvgOOMC?Xyu}75Iq_j0oF}g*R9Wi{d*RO9!`x@HFP9>Ao
zb7;zF*{MTg;Qf2tcYN~ObD@u;OM`-gDyS^)VJF|tvo<_521Z8mo!WOww_SS<-m=gL
zXKd@h0C*~m6vW9T)zv^-J&iD4TH&B^C+SgNJ()^DmS+BX+ZpCC8r0&gTzh43fnXAI
zQ-#Z<Uw!fgA=dF8c0|3N9$)a`p=tO+psCQqVKwR}Jpj4ylOX3sx8S*<AgCVl&zokx
za8{4XzwQqLO4yX5HBj%E3+i}KX|FkpE($X^Iy(b{ImBaO@mQUQKIB@jF%J!%*0a5|
zqFzT(*?Jnaw3F@#MB^Q%-y%R1Q9bq^wSq#~E?Pa&l%WqFnr>jE4W(1Q4lV^61f4v<
zbK2U1Q<z~E9n}j3mW-QwHgmyeS1P!mrjD4*ty0uS_0%Vt+NXO)>HQXMjr_2_mw@yS
zoBcNf($e>{vfBQ@kvIPOMV))rJ<*gQSJyma{@gz;ORlhbR+|>l3x^obIsPmjF81BQ
zF{}cmzBd<DY&Y+iNQ^9)St>n<fc2*8Yr*U~1jc};Co(<Yr*qltDvTjpPr7j5KFx&p
zJ%Ppe!vPwyHoI$>PqReJE(NcItw$+w6&Dv@|Izy9bLL0R#E$L19J#2jech2xxs5Th
z8Pz6MmkbSo$Q5?~ngRa-r7ah*5D9G+azyGmD0?18Awb{#Fz2=R8b_~+-ZMdaAR)$u
z8C8cY7XSxEHsf&#9e3fJ5Gj287!)VB%E#^P^r!UZ%~nId^v`)6jz5e2ZeG<1R%i4L
z?^QkuAAGU<(s$_Yslufn!`G1{*&A-i(Fc=MK3B0sDQHAck7t<(6h^!NyF!WUR;M-Y
zG*~uq&+bGnV?OIEK5TH64{ybS(T!)1_mb&jbYW3@Uo2yaD_0$?`YE>)h6hv6jaMR8
z2_%vyI~4ZGs{0Vg`l{{kp1jU$yiR!sW9}<-tz)Q`XO}r<7@vkKK$MCxi@u)(ONR(V
z1yATvtnb;g2a1Q<<^8(IFTpaW35?pKob)Q?gHglbmxN;)M@d2(0TrQ52Mfk=+sw`u
zgJ!?BX<<r|e%dW>*JaYdbD3ZyMZdHvYW{o2Rm10DLZN&&YnZ+`-Z!w8U;$v!X-!?c
zg3(q4x|aS~&7aobEEeg>5kG4gCk>XVkUZ<uuJF4xcC2jhy(n{{gxs6QbD{Zte^UO8
zILA3ElbF@~o__XY&irtJ4f8SqU7Yw8`mf;JE#E$NO?pcgYs|g$2esiT-Qx?02N>Ht
zc4<8N5vmyYd2_VVhYypukOa$|%La6NW?Dqp%H|F3nz)ZZVxu>*lt+5|JA9-PY*A=$
zrPCJ2qY~Tcefj}%-!%^I+gT{Y#!gzk5|NmJ>-da^fY+a7o{OGb=_`%rqwnqvtF)^i
z(|Z=&GlQjJ>U(07qgFh_23%-4{V?mhqkH80uMPY%5q?*qw-@$5H=hmrQmx{wt9T}j
zjz*pwZyZ6ds>#!FC{S!7X{72L+e3h0K!|_-0+<N6QBpGG75OR*pe=?~dzzB<eGl<*
zt<#yD9xfU1Kk+1N29&GB$ldRS%)g!j^(vw3Gl^0CGimGi*THw?W`4gIf@YUXx3V+v
zuwk#;%g2VJ{SWJX+BIYJlzsMYjgEh5aC#e>*uuU+Xff7T7M2^Gw!N1NqsDW=#4u$m
zPeZu-1mmuLQR!AvFB40*<JQNRC_2oaw3^>KertAX0en08k97k1xbZ>bSLDT==fk(2
zmX5fg-eU39s~QANaQq)=Saw%2tOePX0~Y|WTd0FE7PjF$+s3Z@Ma_Jl?ueNF%WU6c
zjK8!)Tpj(_84ilw<g=bv-)vX?DgTQyA0Nq!wRu+)J<Q9aQ9)t0t@L++_|~lXJO)lH
z)s!Qi3$!F5wY7rZo^dvhsWJrAg#F0pTn+J#m8GEwrIV5`Th<=&y=|PAf8};<henn4
zyJ2G6X>9v}F)ZprREfUJye!e2Rm2*+=8~^;qssW~Nt61yp9m18uH~wYzA|3hTM*Fc
zV}5arce|luKG}=WT<bjjrT%+h&XWrMbRB;QmHqtBI@vI?#SiI+2JdmlNoc>Wv-|$$
z+3ZfmdzBss^0M1{FL%20tGQPX<>nbgvEQnpk8VNDinWmI>wdxv@)=#Ih5#cga_pVq
z(cL{zTpB69yoY#7!%6B9s~O$IvSLGbP}X~4dq@2zWE8ez17Z7AS4R~~+X%$TdH#Qs
zI}&yds_+kW0VBnafeM26yf~?RX@cS4@5{lTxs92qxdz!Lh);<6bd2ska#IVd_da3a
zM}xq2bH`VVwOd`bbrG0w=<@$!HJhsjfy<)=`TErf!h|8i^{>$x;he5YRSm(n8l6r;
z0itS?{QGMs5rO={_1~u;ikI1oT`_>Qg{+K8*j0<=4BuVMJZM0*Ig<jCe4%YDR>|_p
z6{D=6Jf&%&movGst5cuGMK3Quc<!iA>-Qb!YGfV@wLslMR;2|Ki3&sox%v-5@mb>U
zdW|BSjqj|?45G#fiU}ZZ-)tH18LkO0`APnPL;Q&(75~MygGx7bGNtWb{hDDl8L;mt
zj_Hgl!Z;{L>ob8s4<=b&BxhO+m{&E%gHg1l^Oz;&J#swHsjkw4<TJj|U(8oGLhzF&
zxHq75P|nnJ+od70)m~-ayMVj*1~^RKY!SXdlAf^j4Q==NO%VFkKh!XYlEYG48}lrB
z1thLZpSo+RR~kFDtOI2DIu?Cvz&(>W!xBKvR`<XrH}{Zo-eUE3kGW<}1S*E8;o2)$
ztw30r`k}vH+9SN;+594PsX<uqfh%q7wLTQ52y%qhljMKvOG=rrt3B`Myuc2YN#Ek^
zAe2Ot=q_V==Ze&+aphA3t-lhQ=`&|n9e3^=k51F@JkL^B+dUISlwWEUZF*U{&vTQM
z7F**)kF8wSPZ=8ih(D6>LF@cbz&eYW@!OJxzK!nT!eupF-TKRaJ(&#2Uh{%)RRmq#
z)Ut0dB}fswpX&5z`Hz+T_UPwZ(yS@146h4}$WQPy6rLLKdz-E|;P9myB?xHb@!X1M
zd|xzA8qTv)YbPgO<Be%{Y@6Ba`Swfyg<Ns-f*!2x4*_`6Br&_6H`_LOM0IZC{r&bV
z^LvT>V6HPOSf@N)ImuR-V{GZ#@BERkf3ZGMVBewR)rJDLj}*-`9jaPmOGw{HC94^(
zeGnv9zU<mId@hwRAGmb!A2%LM%OI_T+6fmA*B$4xw&|BNh<o}cm63n>US4@^(fKEL
zcm-%UPptP9`%R9S4j8M(qzFoR1WYbFntheJ^lp<v=g;;pNKwiJRa8xlMrSD39&R=C
z>}8}V6uw!fovF%b*RZ1PO?O<ATDMWb;RvnLbg4&JUh<0O!Id%ZfE$u859-3ai!Pee
z?y|7!xb-yxtm6C+sKb*z#on}I_fzHDO_QfR{oV%D=HI*AyLvoeU69*uJ#3Dc{&`_h
zjfsfUpI1J$ClZL9-p(!~r4;t{5Jtx6`_o>Bt|ZPDeor{A<Dd1CAYNGy`^Pe65Ati&
z{3#$*NO$c1$YF;|J-N|(B<#K2^L#_?58cv9T8>L;e|TZeTh4cYjIQj?ba-Bw@8D;u
z4lg$UPqoTvV*WsU{}42Kpm0dDVa9+?4UI8%cu>!bR;~LC(Mtvb>Nw2)-yJIW&N=AN
zC1sc5Br4jm^kC20NS&CBM8fb`R%TAWP`zWTG}U0NGjmBEM{5AvLmua3YY;R4uIk)&
zO*%)5fg%(!Af*#~nACZQrz_F}=KrwT-C$uACR7GH|5XMg>~dipXY*7&gRk2@{aNcA
z;#zU9_wMc#*$)Y_8_WfNLN4akE~W%J#OF&K8n9i89uLiYP}h0zcSia!g%nDBxNSoI
z5_lSp;*g7T#6nMv<{T~OUN!n**6)90^96N-2>`|D-<KiAdxtWK@+IY=Vm>qdZmpep
z5Ac_&r2|7u#}Ba2i{~c($ad<8?(F{Jnc`8+v*;f>J6OOuEOPtz13rNQmYC)bE~Sqr
zqiNGPXxG0irUBms5=cO9-2rWq1)~wf*y$}Js#O*>5Go2=vdOcp+P=R0qty0i$tc&|
zZZqh{u+sdEftNxxv|QPPtdd>04dSRsRw?+ZthBY97gd)I{kdb<<2}Rr=ckq7vOwSK
z=1#LBZRhS+Deq49E;)6?f;OCGd$VQSu5@i;;kFz{rA9v@KTL=Hp3{k{LQi0ol+5j6
zWFteOtoNpAl`b5YS$XO2VQM{jlbf%TD&bVba@O{FD!0bU-)5s3#I>GrwTah!>88y$
zf7ATz-2he*mYp0c4x;CkugXvYm_Zd}T$uPFQ~lF34d)vzXnglZa(!@0vrP^e72YLl
z^R@xAn3$A*FT^toJzAzq30bzu6r5>CgAW9WBtA^w;w0oiT{HcJ@8O&$fpbakKfX(r
z#0*<;k^ulr?`nQy7aq9K5gBR6waBwqIkV@zp_9n%wu+&zeRP?kgqPxj>EA;-k$U<v
zv!h@98_1zC{vTg>(l?7aKVY~avXQ+A9ff*v%~%ivwaP4i|E00YlG|$8$K1u~DMFTg
z8^;TRWSX@qyB)CjSO<H?EYCmH7oysYeP4|(hOQl~MVARdPXFrP3U-*8vOkwpF!3ng
zlIJyHqn;pZQuY_)8l?tOP;v|o0zn_q&Dx5KPdhHe*IdkJ)CYV&qf7dJ#N!v??jA;T
z33rmttJ;K&Ccnz+)UiKGZ({h?_?egz_ie_MU~K%6PmfXKdJxjsVMj;E7Q2J~{aWq&
zKK3#;W6OW`HUQis@dvRU>lyy!5OV3n&=yJ89$_rQ*_A;kYGsS~ZebrUJKy@RQg=U5
z#_x)AI@v>Z1dz<-@#Bf^8EoeKWh*X=TNvXU_`mDoGfN)xd<1)xssh`!>*Q)Zo}H*D
zVM?&WFF@*y1s>?L!)#*mydPHv(+_<Vmdhbw7dG-H=`8*zK-bW{;7vM$EvBtfr$(B2
z&s`>j*~LKFzj<MvCP7cDlAm4HfIn3Br|%U&4Qa1``AOOl@_%i7U%lbdLmH#L|FvZ1
zPV{uS7e6GYyx<>w<C)kozPz&S8m7URspsV#F49A^{6sNS{PA%4u-<GI_hxvc|97IR
z;n1I8HISRIsUAn0jOh-h!&M8^A~Cp~)z_**?eyVE0XrH@WkHvZ?|^KA=8b2%ZE}Ha
zRm&{sYBO5ao+4=-Q?LZ!PBGS3mFHm39xYZ$pK&hmw13=uh7gX${`Uq2aSN|38I$iy
zSdQ}lR`nz6>o;FQ+ekx3%8q!nnd+TMgz<EsZ+JZ|dz}oN)gVp`d91{)NCu!$ZMlVC
z6R(o3nIy*n&X)Ot5+Ch1pSw#h<B!YPO=}T`nlY?Q|H8!2=NG=<{Yc1Z-N_Tr{m`0S
zfbI-IIaZ)(H<Dn5Fxw-%@NO^D*h)4qPv2*deRx_;ejU0T+@Qdl1hrGfs8){$JS&p2
z4)CSd{I+k_qag(09sfq~^Sj>J*AT@P@LbO#U0D0m+380V5h5IZem_!z+o^=>5;n<G
z4x)`FjB!04VocYh*<zJY9Qg1hm|P&NA|J4mqzX?yrjakYGqA{vUZyALKv3ot&Pe;Q
z!BZdKty|((1+9Pk-<{j`>@vV;bC7`FFjr~Sh^X2yJakb#%c!DGI6L`%x9JP&em}h~
z#kx{G?jp9U5#&Bxj}_s1s#6$K5L#&?w-cQ%Y?*cuyZAJx;N-5xbe!FwD;iVWxFt^9
z|JAiP<#+00AD&>MNbK0RYX>-L=+2wXQOqGl0DFNVVR|76_f<x(it<>0gQrm++YRys
z)th95`q+v7?+;phwI#S=^bNoA9qtFsy+4PJq_%w_+&yO!bIpkqg~cObgL5~V%|S%>
z_AXcFd8nDA$45&MO4wIENt^7${N9RG_37i)5iV7mzN)6xX+k7ko%vhTAREmw=AYhu
zt#o$mQPt}062f6UN%q^NRZ0MvE$y{^GS*gLe;)KX0JyM;d)2S1VBGnJRsF7lQRi4I
zQu}**3hECQkfx8ute?*$osFndUvHEr-0**uL+i=5XFCRFb5q1bb$NOC3BO!G={20X
ze>JlH#*R{OJ%kySkucL<106YVn2((}*WMuOiHa(96}LwRO@ghFfBc!QrV*0g`v^zQ
z-{oKMHIfh9ucjl?L!3#ByD_qRe;V93Y?JY<?Cq6%O5`|37ksRrCK05z&m{FfTCVd=
z9TAw3`9!-uT1LOmaUn)RK%nkNlawWXXlwM=|5eB6k51a<R%F=<B*Hxb>*?ut@LnJ}
zU?U&aY>?bH9Uky&W15ceeEvWGW`gm42qKH1H;Rc@9ptADn`{UUC=vo)0ONn{hRm>c
z+#476srCxW$D=BQdnEB+ZOJ}SW8FnsFwp2o;i}prkbRAir6z{{MM-=wYFx@JTQYg-
zoiWY)9mOZwH(3W?8>Bwtvk?9s)KR|e>BQMeX)ERO5u5*<InZg7WJUM}lsRX{lvBse
z1!9l6Z5FoK|F2(urDcjbkuNKU@SPJExBTDDm=K9<UnvfJ+d_y3-i+3NrFVpHlX>Qv
zyCU;s^Q;aFe)=m$!sl45wIEk6Y8%t4C;XGN{r~qmJnNHQ*6ID$ER+(-KCVT$fEaJO
zkVpSMK7Jwzva&6*fl9mmTSC)9vU*9nd~;$*xWGjQ?cIrds`Q)F>FWR58N#LI9c%JT
zbv7VewAA7MDo7G`^DZud=p!eGs61i_e>czfVS(_DZr-lVAIb7x|Mm9|TQC2E;s5)l
z`Mv*l0h@pLO!03d`TyaEyign3Lin69ho2OP+x=oCJoU}Xp#2xz)FOZEXeqVI=I?DP
ztYY}@uNgLvVCw}7LJA^m#1vM&;460zGqeQV>Zx~&CFL96eQ7U$*Kw?_J>yJN>wM^J
zIk)iEg+bpd*O%9bCj;L3ec_*E7+L>0a8lsqQ29OElMfd2PsJbnSnYiBm2-7Lf%u=b
zTEl>;<(844S-R<z#|5+VhcBM*t2@B!VtYiTr^&nS0&5||;PL&v^IjXrB?4y1{y5d~
z{Jn*E$ea0kRe-NurB5kO^puAN=WX*3-IsIHa=k0h+Fw}LuW9Jc!-uCPo=g%=|C9W~
zuz74X(r9IhEa50Wd(ayb#wL+g--cpgBf18v<O9OzZL;3*rIV+VE0dfjF(XS4ckYo%
zY|SdGH4)K?yi!@4T{b)_079!oopy=Qvj&kgW6uT=$IE%g3Y}k=TQoIfEQDw-GnTC;
zds38~h>WVUKF8mI^2hvrvdOdg!Ghbf(S}Pm_%^<3^Y7Jt?DD;1)J2_)a4bpKiT^%{
zVIt+zp5|u{ojq%y%$!>0?$FIXA>pb&|I|o*_-AeiDf@(H!D_<5v&@k9%|G(WD{}35
zo%x@)_3*E<8tUsM+=_ajzZj4p@|5rVO!yPNg^=<Mot}j;smXfzQEle^gEoUYVRK~W
zX1~m4*i4R@DDRO8Gg<$>X0@8{9n0D#YT{lhf8z2?1;6q1T9@%aL-Q&=yv_4&h1}O+
z>k(@-CQ{oYRcoe_wAFM#$-mpI!#|hhyU~1s&%eq;a8QTjz73(cK}2Ew`z|@}Y~t1)
z2qf1NKedpP=@a89s%HOn(vbIMPDI%pnP`sdf{L~y_KZ)qxiky>u+NG1v?cEy|4gb|
z*-_Xvkl@e7NOXFgcd5WC>FIk9>vJNVO}dX)%Y%IQZ{{`ReQ;B6QQe?v(T<+$9v;2u
z$@I9Au}`#b5xoscCNuiQ^Os69yPr7T%{0#|D9XDo>Cljud%Jxp(XQ~Deq?2~Ud{NJ
z5X$dQu~{p#y$8)*Upn^bwx|wwi4Nr6HgIfw@bGZUn^70j;FK&-$Gdnvo7>eU>2r0D
z?Xs{9aJ1kNkWy5>@<BO`$dlM*yY@rlHO9seN9Kr**E!<$=A-3NRi<wb^ZmHK`KHCB
zo!X2BG4t0|3*)MCd5@8@-|qxk4I4pLfXKTVvFZs0Jp3m@ZIeOG*i`kwvCTGl)4L4}
z8{>;PBo!-aDd%$e^+GaLDz*0O)@AQLS^GaOz|92g#jQ7mY(1DV#0-M}_g|cuIa1DR
z4=L+8ESYC(eebj7CF=h9^6qZMM*liO+iSmT$8Xc4l)H8qIh7CWDSE~|O{EpCzR$h4
zmM@}D*JwI7Aa|$sX~UXGy&uC@D<tlG4xpRVxYYDxD33#|X&>j2dABQxh5Li@Y7d_*
zDA>I`tD8?eC>k;lnHim4HJDze>UeeT{2*!Bw3TZ~;id0Q4PtrBm7mYV)d_%$=mZ#@
z=-SneNzK=AJ3~<>p2`q{(ZILrhO!5bJ20FC|BwY*5;yTwuo~yQjyPRGYeWd=_x`^2
zmriQUIcVI}YE}$w6ihvb`3BUzr3QZ?J*Jx&s=&n|Jq9c`-x}D6ZtmX&2W$Q(e@8^K
zIV73rLL(3L%4lrKOnhhXEhN$^BG=cjnnR80Qx(R|!0YpM2=$hSxJ(!%+f`Kzk<D-3
zH>+4)uy^zwd9Y2_^HnnU!wcFM<WAPDM%a?|&?Fq-z72oHs)~wF9^zRimV7=WsrX*L
zd@|OBd@iN%P8O<5+bY%BxH&Bmkj@=%I$sFvEh<jMKJy=>3A{I|3K&C*JZNcCo9}dH
z(#5vW8NIOMDC^vvfA+asyFm21{dRqUK<C~wRsp>%qY4#a@cBzQY^OHKKk+rzv9oo@
zqt{*9``>>iOC0CkGhl70v9&HMyZA_?W6W$*R^?#aM)Nr%5vR{gGgXqQ=V0XpirCZl
zIBzmxdVFw+0`tI18B**@L)=8vxbr{ZtcYE%jAov;IH;p8digpS<iJRY66h}wb`(m>
zzP)qDHy_G>ul&ft?v(fQKWE(`OMUttg#5tz=kPKZ13RB38f$OZ<w^~}dkI+n3=bn=
zRj7AQ-ELFT|1c$O(qw&WANg;c(o5#2%bs3|px(4)gLT{{#gMRrtptqun<0<G<=d8d
z)8@NHO+>DOv$P3hV5!`k7jqRSZ6xFZjV|eh{YqjdPhu1JhX2UX@131d*oLjtgql5>
zW|F@|gCh2B>T&PZ2Z8_whMZ)xzOVWbit44Dfs!hHb4IoAHb?0}bH)*5qNp);hScWQ
zMx;S5Z@Pd%c<*gj@78+dUau5yJ)V$_=8l1v9g#KaYSd?G!W{$U94o7w92u#~$OkyC
zCfv*LFDa>u9ML?^Sg>YO<o&rKM=i+lx`QKSV!TcI%j=&%l+TepYP?B~vuKe21Ed+~
zLcFT^gTN(*l(!fVMv4kI<lQiT!f>N;6t-ms38lrwL_dFaZ-woqPXeUpU`z<Bf<pv8
zu8GEL!!_l=e?jNK-=I@&(X}rxA`sn+(+3D&puunt2&jYqaP<%#OOnccKeQU~%UoJ@
ztNZ}=HAZpOLvVV4njX$NMSS*ROa$-kGTSiaU|qpPhRh``Q8&Rv!*|_r`9^Q4C(B_E
z#*~F6xF;nfAYBTUVZYr5VXrjXleaINEV^RssrPG39q}8pc@D<CFhl=AALyW4=0F_!
zUDw$OtyR;c8#z!3*BWD}+CUR>DkY#QQ(wyKHkN0DT$QCM)0ATp9a`OXIR@tNi`5F!
zfIJ2px3ih>dN~~o3m3xXbMW(G3iH=m5`W;);o7i57_=tfhOmpU6j~)XEkm{!`QY0F
zj!V5H%85l*`l3HevV2}N`)NOlnAT)1Q5W@eu*fu4<hfp$e=3qcZhA1p$nloAj`?Zh
z^0qh1J(u5(i=G)MTc7wH^|?!@uA<-V0!x+eksjeh>y5#its{HNsNeo*y*#=v3LI4U
znd$QGV{dX1TmO_1-L&3?z3-3{f}B+c|7ct-Z@kR!?sxAX^3phYV4g%DyO+!Z0{*~t
zs0UKrl#a=7e28d+H2-Qf$^TV5kBl|6E03u@1pvw$Us(5h4Ng{m3uE$iBcR6eRPm@O
zJW;3{QOne<D!`x-iXOtIod=X0@M~+axTHGk#`{xq@_VjZVp(MW%{+z&1LX8~_bPm_
z5$25tOP`dOsK$8DSS`wg(_HaiO;gq!&cC3OcR$oJKQ~8k<pEVLOu>A0U4i>H`HsL9
z?9Ih^3rl|p0tdU~r-lMx%{4#!l;yy1OM=fnT*J4BPI({b=zBbWL$H9a7&a)roU3o<
zzsdAXMO-QDgG?VTO;vT9R@{}9tD#csr)%cN_>NG_h`5)Fy|Rm*P%NwF%PslbT<1C6
z$gS6r)_cLQu-q<j#8zEVwx)D#DAO_FnEm-GtIKaW-LgtL3RW{;Ck{|)JJGtY`p-N&
zlDhqp_aIyU@VDoY+xx@y*B!5BXS{cS7X=Fo3r83H5MikImS1n}&V?mYSBQecq}krg
zd0F{w!tZDR*#EsrvitTo7jJ<{;~HEd>L3XbC!AJ;wYy;bMI;L(D))KnslvQNm;o>i
zP?Mv(f^I9>e_no+occJTQj6wkrgg{7{tsW1$Am)WnEP;0pKzUIq7bos|LzJ#Xi5GW
zpGu&q1qU1U&kzg1-fDyuD(@_80w*7l?bzD{QGn~4;wJlWwI0j3h%8do3sf`$*=oz*
z1|+)v=Nt|5F3lWaCJLCNC@56lrOyAM>>0orIkmpN4xfl*cvrlzeD7pg9aj2szVKD*
z+S7dUvK|L}Z9cIk$3DY2SI469$Ogf;db4gnes;ebc#<=1$LV-(&feN(;eG|5aUOX2
zB6Q4O%OY(O-Mf1akMAwJ)RyR_Ui&)zX0*dSKex#vWD-{*XQ|Wd&KBut)yszyNmQ1N
z$d}Q{O`H#$HL08bn=@Kp|Lt*GFR-a*+1bkFxWLN5`spPPkMA(7gP$R+AXR(dO3MZc
z01<BPORM5G%kDWZ0<|gWh8zbx6FzrPHbXX5Jp|H&`s>||F4aRQmiA?3z9V&Y1W5bs
zx((=jch4Q<^2ssEwG$EA|BW9Bw|2~}((>~CtkK#<vX!q8Tu_9*S#wR^)ZWU3Z6>Qs
zML49ikNFSCe65W8W;xsn4h?iII(hVDH2rUdM}PiOJ&(=J6^8~gX3a&9fy7ikIQ#SR
zG50CA{oq7QVu$673%y;<S*0Y9V2VWP4`=s;-?T8<x*H)KdB;#7?e1N86~mZE#kYJA
zyeXGOIE8}8<{_TQOQ8ONb8c6P;024CxHFg(W^|F*F3OPXVxaj!5U(HEL4BFa=HZ<>
zGgJB<v{X|RlI9LZ_cwBb_;s^rf&~w`)qkwMBXZ(oF*!Yg57#`=QNzd#kPm-tND4&$
z7;pdlNWdw{Cc+*v|4}cSY-s59Zs$fsz4X3&qxtHfenK#3g%AatM8Q<FfBdq|k|S-e
z<zz-|q<N8_9-N-a2j%CF($Tw@S{_h&U%UXytw7t+8+bAdQP7Zjh{rD-)=*^Wc$qa|
zVTtS7v=YV}F}qAgAm1Uu5fjDCPntf!Wx>V*vP$cxV5#zD?s)!yySCz|^kyf~`kMZ4
z59)1}<6YWo2WPr3Gd<a;3WOPEs=h9*-fFXi0uQ7s>!%nGl3a_4LBN0W=k;)^WV!2P
zUt?X(7ChZwXI--8G;g)sI{4$ulCngO*6%T`14lI5xU`d84OuRfdEI(Yv8}1LFsk--
zq^x1Nblb6eFOP9XPM<%2o{IFkw0Gcx*BfIW^d5r-DZ_5*MFJ~c`N#&iDU}*Pyn^Gx
z5C!&_9-sB#4@O19Q?P0vFnx!d;ByOhR+}Y0C8qD(VK#dz>2DE={^2DY<k{uq&a60i
zB*8O8Cf)Sq=x@P2kxV+1eMtC_)s4(^mU=UR(E~D$YR_A*3`~lJJAEV|C%|qJD}Cq3
zp+6)9Q>$>6bn;-zk(x#@%$Asf($e46Dft@s?SnUo19j@8z@?)%?ZfT`L*in%uT4z&
zh%t!Wq>fgEaSxTO(VpCp-EoZ`)k82x$S$-6T!-WVypka*SMSpQ`Dr^^_JoClfDX+-
z)ldN?2TOEeetyl|rKpy1-x_~>d3l8>6ZN#fY6OA4aa5gTFGc7yV+8sch*NGTaP|mq
zu4a$dM8RTQcrXZznIf#*+~l;Q%EB=`ziCoD9=jr|=2?#(07SN|U&e)@%*+5m!9=1V
z3-jIx><*hZ6HPJm+_{I1B^ood_&y6B7I{eUaUbbJAa~ic^OpV<^(Vgg8<}Rb`jr-i
z48bIoqhu&@sbSw0`-D$9%E5v(7X++tMt#tAB)^`<nrLB$irk_aNAc7bEwTET$l#Rc
zXd!{}#y9*fhxW09k=$b0AJ+$M*RrqC%S2iDfEMYM@F@?`_o;w9ziY?6X;@}?h}RSq
znGJeD>aqYPCH{=)njRm@6}L*JucwV3kTlU%wSu!+YS3K2xjz2D?KW(W2$yq79si!A
zod-5O=8#bk17a_5g%czORnt<gchkb~_328p-d+69<!`zd*h==*dcjRIz{TZBd3oQa
z_HgVYOgi^qQ!-#@2wbVcKU%{;JN_*DGXe)vk|W|59DA_pfQRUw3U`@fi+K@Z>Fa3}
zPw<9JzN>x4gdkMRi$A;FBAu5Ouya^tks3G4G0iT70^WFoeA*YLj4+;+X%2&7!1-SC
zr!`6mK<{BG20td~-9W^z9fH*0D7^&4I*{{g=0KY|y9^2-3Gvv157z!-V~L?al8U+4
z@8wI{GgZgF9ADWieW@R!8-b9*-%Ik-9#o-X4vHCqM#sTi=YS2UArv^i_~cOv8x!C0
zJ}G2`HIE0&m|0jHOH#=p-9X9bAc}7R&5f@h*8z`alLJeVxYw11nOP)7byu?mTUD2h
z1f01R7d1(WN=l&EYZyH`HM?=D%e+>E=j?;o<*F)hI-i!8LtpOl-1QtzMfo6s@mW6D
z8V6@^N}26BH^;#f1z);HcrO{W;abID=2OF^7yedmnhu#^hjp}z#&3)h*_0Z{knjcZ
z@$;j**WwNKr2C$ZAKTGE*wB*KYuKlqB-Zd1Yqg^kRC_RLbL<nF;iXml=zr;wJ`WAf
zN&-_sUDlIf^kTRyJQOY7m75id3#!O}))e;2NGpeVAb5tZv`8$$J!U%)02|>d96kCS
znlk_t@_Gm6M9p1aFHuI0zv1WSKXChuh)BQ{YbO3B2n-8m(Q${%!2>%cH!p1$JhPph
z=RbWSIdg@N7S7yYkkgQfFzl8%E%yW3&_WRh3mBqt#)b`i_hc_i&@`{#a-q!F(D37}
z=X?Gi(!Mm1%C!x5S3)R~DMX}5DkLOBnNt!WGDXP{p^#ZJ6Vjv*A#=z)lQ~I9_9B^+
zc_uUGTJ|@c^Y^SD-|pL+)>`lTyw7vr*L@AUzogx?**>O$rGo~sVGxtc5nJ3gh6z&7
zZEp6-`r+P*%L-?Mi3`}To8@thzn@<jS=*kHD-<5vnsCQ)<U`f}c#(nwYlS=7<sKY7
z>TGatzVSRJ1$9@CaG(xW^cz1&s)!l4Q|_CqP;TD#kcqj%&-C-hkCj!_V_^P*?@Hlq
ztA}NW>w+j4BIOJz2cySZ?7%mD`_T}Fxnb}u20I<Hy@NE?dinYp@N+|5)QhivvoPre
zSRdZ>K8C<2Fd_nf__6PyX*p%zu_BbNL`U-VU-eia1CCL~+F(<IuG4C_4%0EbAEe%j
z&onF`iJx6wgJ1wuh5Y>dtI2f1-Qv72qK1O&;^gBzZu-$^6Yw;+xZHDbbHfP8Qb8^G
zk~mwwC5yqG@C2GH{fx~z_ca9`I@TZ`wNK#TlE3nafjR2>Z;{P{Vis#wvO05jclWKf
zIBvXhPP~f$%6!Zik_FZv6oZfl=_jT_Vq2XQJj&MH*bkrblQbxC@aPW&{R<NloaLc@
z6f13!Q?Ql!A&-o5;Rr}v8mQ7V?^sz;yEbn{bL;NFS%Jg0&Ae?+9C$^iFqMqP&v&h6
z9I`-0q@=K6V<AFRL(CTN;iV?(=*Kbefo~V~9@zXo5ygT;7uH`x`TmwrgtEpVPk(5*
z#znuvfT_vtPd2P18?q2V37=|vYwNcO4FbJT=HZ@h>HgqyQ0TttCd3Rkf6PD2SG%U5
zpz-c9)(8qQ*3JW0*~)!oBoXR#D3doB4g$+ljC5Zt?t!Z?+?yaGIA-u7vOVvOA{Xqa
z=ZNN<85tLkDr}ilLX#YE>igcR6|$G?@IQ++dH<+)Z;B6ta_e-KpmMerUw65?JKojO
za`(`TQ`a({D_G*q^zY<Eygm51xUpd`UsjiFhkRJVWoa5AFnC~S{joFPAcfpV9JaM-
zDOO<nvvSk=V~4ml{P*7sf2T80RL}UrHrhfMUC)ftwYvS!dWS90%0rllV<p;s<BS`{
zZqgl*XG<(p`#AO4eHWXiPSJ34a&pE-cxH<3-P;l^vv4}KyeJ(J3=jwucl{ARNk;)9
zuu*0~W@ctd$vAb?lle2jagqhiuYoASIK$h@i`4+ef%u3@weWKLxeR3=v311l&Ar~(
zb0J7_7+>pd{uW$~m6K-)&wa>|;KYjKL{C>20R(LVL53RQVY#`v@$rYh+bo&<Qiy|@
zRtwaKdDZGN)l7eZ+;I{H9cxPhv9~t=ex44oOqV(@jA{2O>061^<|Fw8Wx;W&w{K+>
zF-#!5(bjCw0@Iu;omPUwOPFcipmcP!h=GdKRwnG*vwJ>;OD<(Mw4qyjIaUPME3_}r
zCF8YWsW>BKBR&%fo|pY?4f>#=Sc(oCdH&^8VMUjLR#p0T(FirA?-Gzk=@9^$h`kkf
z3r#d)TX-94e~>a;U6~PJ3sDt36kq-3;?W%*f2Di@=dQemQTj%T7`BN_GVVc?FnFHd
zTvkXMUds4be=DoF7<Kzz5u)%J&$@Zc&L;Bwl9G~Y<9$T@atRcB=uxA@9Uld1&Z)W%
zOD)%{e3#&3J-o2t8FtbD4)i2-=3;MBD%s!9wC7C}O|Gm!2wKrmv9>xmXk4hPX|k_F
z;;T9z!zpFB-ol%36k8IE(V>e-x?7j>^!gMebW5k0r!}-o9wpvns<jY?MLr&GD?uzl
zu-{)A7p6l1b|ui=&27?AAJpSwG01u2)!_1VZf4KlT>MqRf8N;_<8j#T@e%%dmEK;7
z8NuJ+6eS$taFgudtvaQTSOh&io4+HhU<>O2y>}bkX0cBCwU_($;?<?~uZ>&wrg^~C
z+<AajL{CPuTPE1SVMTuPCJcZN1yxEUwKuSzPO)6%?>_c>8~f+yZ9n0bzP2)!0d+&X
zT9Pqr67k4zq@?ei;#8D77-&fkMY5IqY9}PblT+OHA)eH6>K8b~Q@tpi=htDsU~1C<
zcnoV6Ci1%a`kaPe2JaD_=V8#jkDLTWM{`_|>(0F&`!0XTzr{s+p1FWOJcX^qSR0Z6
z<{%?B2C|N<_cspGk(0!>XdQWmHWMe>LL+1{Y*|ufOt;(j+zE#Xa_fjJ0deLIOVh_#
zGZncWNnBLz4W0rRJbg{P&c1lPQKSc=h#0fZJmfh9oSweHzZQJ@FFgX_u1D&+yV|{J
zryp1LeX#7*s{goKmmudsdig{YpCFK@hb&~<x7pr#EDtLWJfV+oPM++pINr8Ok6d&3
z0KpJ;06-k6#BXSv-8R<F1oXCD-`RhYEAe66N)4j{F%1fy`JEFd#`6NkvI%22>M&yN
zv=?QSL;?|9it;-*2!2vtHF>XJ8Yd4Na&hf1kkHo@Wz?d-5=J&j(HSl2G_Oclz>(%p
zcraC6I#Ps(5&l`hOaZ1;RZCE+6PNBd%ZvG>xmwZ~wa-qa8)(Ag9_$>LZf{nT_>049
zKos!Vo6BSk!fKzlG_eSa!yZVqjL|JCDUo%iWxh@nTGrVRZKiXrWA%G0^UV=NvN`Q5
z)oXO6ld5<4Xu-?a`=Uw($G#7O1cyp!b2)l*87l+!Md>uU(pn9wQd;0nq)#}lxGyIw
z%HlOIQ@vI3uBz^hky4)(w-ROL<db0qbPbb+m@BB|$@^4lD+~(yGL)aFfsSY^ayHm=
z?{Cf2(=Y?}tbmutk!P@8fqnuTED@#@6RV6ArATP`?a`s}m<#g(i0gvnTUck|<pkGr
zTwH9x4OxhWxLqnx8f;|BL1M2|T^r-@5iNMc62~bh4PP2##|4$z9f})#57b~)vqaxo
z27g&;iKs374&g3JZ5ixZE*DTY>*!Q%yzaV-E)2s2buBP(g9qRfWGa+yCYF*J+UgXQ
zV|g~B@m*`OET^y?H>&0i3o6oe6a%Aes)DZ(+Jp`vz8#iWEQ&_5%w$(B4+pr)LKOXt
z_@cGX!}U<?1A|fUb&1^=gVGHgijvU^o%IVQUJvce%#yG0P?7H7N>PIcSXp*9N*IYI
znS9aOq8W{X%NCtq2k)Wdd!e-7M}Ub6RWT%w(43ZXe3#cD|4}u=_hZ5y*3ME=z*_Sx
z0W0Ecz_SRY4KNz6S%@=i%4v*5S&eihh)TV`Erf9n_*dRN8gJQ|XL&P-<QOb5$#!%l
zZ3DiD9o*sm!{@ZgwlP=G0}?9_Y9_rpjv`6T5WY^ENZk|pMMVMoJQ9V&WgJk`W9+bH
z-c!2}YGPqU>2dBYVa!-?|ItCb;EYyZzw4fRXC5lk0a192=O$%^T8p~4xBxLxwaS_{
zg~;mnZv@zg;mlWgh;GToMwN#S-OgAMHdk!&_yC5soT29!U7%YcUd6UgQo$U5$3yN8
zmt@Y+C6raL)8E|9Ns%58syNcxn0!EumkOTN^n_bFw)Yg1fbKahz9aD#xz`Jx?hRYj
zF%p_Ay+B;PBD6PcaCS@8N%Q&|k+|pP8*6`hN3(4;mCEbnOSMz)%-!~tc9(A~WT0|G
zbNY{|MR#`;uM_MG+J8-_W)M>VGSGOHK|jz_=E`DoJnvRDsZaZQlbxQ$nF7G3PEK$J
z)TmrVG6#aSu;xc>1A<sXqfZ<^9-~h3+AY7+b@rD(O+U=$_nY#*D1xCZq6Z*_MXd#z
zx_$9034##(u3%Gq1Ex!FE`uA2U{I{o++6Q_{@x7Cj}^}bXP4+AOR>z1nVS7F4D@KW
z_ZXX)<X`zD#~J(_75}*%U)FR@mt8j4H~OaVW%~V1GYGKaSPo=tTKuCg#H>uPgt_8)
z52_T8uK^1S3n(S7@Blc5(*iCuy5V;vG~0baMuJ|hF6%uM$<EW_)CYcUE`@9s6c!%!
z`dInb@8-d=&P)mp{@kD$^QJi%a4W=xrjNmih-mHi0J=Xozn{n4I=iE~wPGD}2%_mH
z#08Cm_sAWgZoam#zPcC|7M8hq<fTM&**)YHnCCXHgFT1S^2jsnr09*XFkp#5Lyq1U
zhR2A6RDeV&Y2)L5NU)Nk(=}6Zg!D|^3CGipJ_~>W)#>gGYisK(X_}c|ZD8^peuP1q
z=J|j!EzwmXtK<FkuN8aJ`xk^XORcSGvO30b`6;{~y;5<%X$EZud^}7=Sz|9IUQaV(
zzxHdK*E~!O&1>|=d?G%1jbxIRC{A%4n-G&Yl<ySogJ#h|1DM+NG!)Lw7Q!~+u$jRp
z$<$I0x#Imj&l1oK5Ga_JwE1DLc5{nDi%%dxQH~}Z*Q`a=)AHVdx}$Uy@ZSfS6N8EL
zG2l#k1XUWK2@j3ABX>rgwVOG(yRPP7Jak9+`b-d$44^)B1gx?5TyOAhMdwmB{WLHT
z6{J>RuJi{E;f72|mO|k|G+&i#GU(+#NGu#$s9Cq3fvJh0Q!h4-7<iSu%8}!!eeg3P
z<--+!B#3sw(-}h&h&o}faK}1X9ql$qwXKcNKEqHH!ceA7x;asLyWOLqJbp^?&tYnO
z)KZ+yKu@m}7YL5YIS4Lcs)b3Vtr#Z2ts`$Y3iLBlW0@?@k2vZlw%X`1Ca<7QfWibS
zKM``_bafR9Z+aefg`8_VbRP&wPB+S&?i^>Lsy1pF95jkkb)VsUtkq26{qiM6{#{FW
zB6bE}I+C6+f(tcjp?LH_9qPU1nGmS}QPjA!(l}@4=CYA*>6ne$ergfQW+ypd)Cp!O
zZL)SEsjXhx*uS4P4Z%M)kGH0g-wXP18#IsJK@=HH=OYp@1P6Q|Kil%`kk`47u$eqy
z_Z}=X^OlN36{jD{wh1XeX6ejJGy8$PKKRsU`R~csj!$dRB@@QrFz#`7)HU@l^{Ibz
z0g(AIJ39**A66NHa0F_4V42f(H-ms-HXaNtnqs~2@_;{<^LD)(ZS4HBx)}tUTQG0x
zzV$Zvf+%b4*&Vusn$H!LcN9uRwg-x}nA*au7JAJ@&CTsk%_%GR#PxS>jFCNnZV{So
z$(7-_OVHwyVB={BJBfrFEXEHWiA4fRa??ksH|6|H;7|KO<Gn-a>?i)mK*BC3&Iku@
zO;-h8g_H`R`omUEjIKBq-NZ<-v!vY6&Q62eW8m@NKD+wlI*3(#s$za9UUk)+5PK+h
zNH-G5e;4%)kw<{W-(Ljc26QDZGcWH5QBDq(d4tpjx1DQ@wDoO3Wqy8lNo)JD6Zb?&
zDbA|6uZ}$orH}Qv9wG8{HPOFKLA<9dyg;Qox!oI)dR&Ey?eWh6zQa>wn&fKE5>&zq
za6D~Gi^)47I|>2T$&)7q!UHz?WjSqN21*p;KD%(Mnn^H7mh<(c1j1OG`RVcF{%4Hd
z&7}m2Gg19x488UBFuG|rhzW1R-%!5PABZGe7y;ruG0OD2^wWSZeNVVpl;~Z>^>j_<
zcZitdzjV}lsE^#>xb$$*U8bV3uT(M*A~9Jyy~D>?d&HJELK!lyhOA4cZiL^)2u?E<
z1?2s8Jbx%+K79r*n%bt8N*SI2#WXH86P5bpd&&6Q4ucUZ{Te?rE(b_;)~xP&!WT$r
z$kkZ!cdl)>gEW_mmWd1~{g0AtmK{IL%@Li3JDYo!XAfK<VLA1RP)kA9t@5F;uyD(=
z(b^bp0hsD`+9Tr<8uojI9Tu@2GTv!O`vLSAeqMvpyjkGHgy?1Lk^9a!H323x75dTM
zUf{a=2W#}(H#Nc6IhM|SaycI?Jdg8WgA(a+xo>ZO#Oq`2ySI&<Rrnt8DRCBD8@u4(
zPMUtMgoLj_5MINIpTb)XXO)+S)IW%1e%v`=>k#Ez%TZ#!mPqYh<Eg8o16wLQtk^*C
zHfw7o*VCM$fRN6d2rv~&`9qIXiabj_0<dSS*w9Y{=Q!TiEj*k`k2;{A9W`XQE+e6>
zaV~_`o-h9GoicS^Ln)1>x#ohb!b1OT_unTEOPcTLaz9Z(&%M<b@%+;l`Fd+#n^~!i
z=>I`7Y$_z}^<bTnQCfq(kb=WjkD6GjDv|@4OL-#jGVlXaY16AFjiYOzC)Y-76yCIm
zI_kx*d|#aHkVf4=re!g>xPfxj_60#^;Y(%V34n0>Sfmv`q~6mJw~^g+i1e3@Mda$q
zlW5a{ZL{vV7*9JIvASMHvwdO+##chh-wl!y$E7OEhC8Y@y^iD%IL{u9=O(EfPCbPF
z8oZc<z;hpSCSZjm|1N3F=lMM$W{zq22k<bR_ettk<?#CPj3#r|T2%e)VYj-P={%OD
zrmRijp1sMbTC8>ZI@Lcf*S_#m9$Q$csi{HI6OM0Kg<FR#(B7IXkj6j`m^EPx=?Me`
zSi?+Ji|@qAlR#cHe1ebdPGqS$^sK&GDlYAwiTimPHgMTNMsRj!QTa7HOM94rUu&E)
z>ZTo#dg>5vBpDNOC#!P;NaI`IU-R?o2gDY-W=cM^$L)E$nR_$*wkWHn4p!kd4wCMb
zx1TRqAHI>P&?N&0lfZ^N%Z98EH>UHRv2DSe{OZ9+R{_F1IPiFVjA<2Ww28z6h!<Kt
z|5;SDsO4anZZVr2>?zsvj3I99)qXTHZt<lvKRhA6gxhUUEo8=LIhx1elXF@bO~a4V
zm5bM}ns^bnnc?3z_%5Sg8M^ZN&8tM`lo2L&))1r-<f<hjS>n4-uW*XIuJ;J#e%8tT
zt#6IGyWdJ*`YDs&StF9mM;Vu(m?K~kq)XjHo@sWF#!r^BeJ4zLG0Y@s1<-z=k@8R{
zZ*%qcJm&kF9LzrYnBs|v(byldD}@cpkR#EhSTl7CJ%=gTh%J=YD8Y#C!>AZ_>@)%i
zx7APU5vogq<;jz0&o))brZw9Myy<TWHyjQ>a$5N-w_!%qHlNRfB{>HU&4ni*#A3^w
zbO6?aFzLCW$vBd2*%>vI{MzRG{nW#|U-ao`6z`pTLXcvcRAFly^k}i*<5=?j+}3sC
z=ZoLR94ZX9a5lG@{u+q4HYca1ZZ2Mq)U^mhBOx%1CIKdoS&%#XQk#b}P<S^F_fHjH
zqqc(t+@fC>dijPdcxPxT(>zZdtDX~|PqDgt*9}!zQZlT!&7;4d<3d?X5i~@EV5fS3
ze-Wy*m0NWQ2dGF<z7g|T;JU1yrfK8K*;#Yg%k_LF?*RLt{wr5fJ3S!vw)O)?wT1Fs
z<(nS{*sdJQDJh9;8WM;opH3mEv$@+-h8hCL7}l&e4fM09W*DRaVCMFs%z*o}c_)%|
z>)kho+=)>+=pZKSSx%Z*7zVsGNK=nt-xVm}pgyYcn6d2oOyva_E{z@?2$16mVP`Db
zJUp|q^6dJ9iU{iJ2+c&|s`2Y~{uiu5|1^M5=hm{u;xC)yXb9ab0){^g-UGl{IpNAN
zrSUZ0EPOPgO!CxZVyPs{*rupp7S2*+@^!rDt^8BhPhMfCmjUN7+4Z<$E9c-P+RalM
zFZL+XV>+|3f#68sdXQHo_~+S(zXL+~xD_ZVE~HZ_2w@nR9i%}7s@kcMjVb5#hj)Is
z_^d2^-MzlhcrpIDw4%YJFaKVfKN<m0{2}lHPK~IRu`$QNpd~2)6bShE$t4SY4K6>r
z5tKM!$v!g_GWvY^)aSA9+2_JXsO#D+F%<?{i0q}{;9zUEEqjrRN1kPB!F%=X8D<II
zR|}eVc67V2f1h&W+92Z_3YsX?y{wnNp(VbBZsMRsW4?u)9&bo#<k+v^>z`nT5f@v?
zK+yJ2!)-Uujjhkj%;1EnulFBv#8ejc`ox&*(-DohlgD0AOtx;8lzA#S+i=<GDKNq2
z8+RJ>TaCATULQke#Hr8Tigoy9IV6HSDHRw^8fr5z_@b0~_q=__DTctl(9XP|;}V$$
z;0s8HDC1;|S3_+r#B6x=3f-ea`xRu<HD$khs)w9^vvYxYv6Q6DHHYA?#K*_hdv&y%
zDUgVvwJ2BpgJsNcUor1z@n^ADsQ!Qe&$DOFU~&!`q@hJCKNSH_UwVRBrq-o74U;5M
z>fQ84lG@|c7X$`_Lf&54qTe}M#24h`{Mw`yQ285=QoswKyqy!mPYrBYbza6VuVk%r
zgj4j=yuaC?kSlNl7O3k}?o!M_A1dC`aI)^n$jHD+3-ls7IvVlu@J64Vp8n8cijgbu
z`oS;*3L@Q(_uU`%>rKz3$z4vqTPZq0B?I>dQ)Xrjp&l2B+2z#O7gj3GZ8-%AyQ-SK
zn?s#ZHlU=z9@=91?hobq;7Rwwva-A3zX7RyFy_2F?miiCotnn#dZa^VTkPHOBG@@<
zboGlCj$VhAd-_;^$*Re>Hre~=RkwP^llWTpBF7m5;aNI@_>+XEsvE)HG?(P#PP5S;
z3r~n~OYE@dFWtGZ#CC`6ADk~5cAi>1bZ#4S(LIIt6(-)L9Q;vRmIXvcX_<O+ni};s
zETzcE$lzise)g=4<zh{Z93R867fPZduWVkHS#ra>mI!ILgpSfQ-4Y~XxELM4BO7ZM
zb;%s?Az0yk(z09~ahKp+(xg1|u!gtJ2F2-fK^k%l`j8h=4rp~YLweZ?sbQk55P?w|
zX0F&Lm;so2*Quq9Db~_=*#FfS0kg%^M;xscnCAv?I92gu_JyJyZ3-e*u*SE>9zdLq
zk&Pz%-)WHJZTNF?*QaI4RB7_(EwGuocYiaq<#*|&4XvN<(OSY=hY#?E-T&YX(G*{w
zJnqbcsi$Qp$T6>?F$6|i3!bA*BzT=nq*)DH>iq;Wd|+m^+dpI6{d9I}Q0{wU%BFC_
zU&RoBJQV<ht|B{1fh68n4AP>(14Sp~@2YYgkFOSYmW<Blqs+#U0Cp%Y$~w#5BPpgp
zwt;4g7vIg-$soWB5}X;%P@We`a9^VT26w4B@k?ZJF$jbNY~<3`(xM8}65x1E1b0OZ
zGb+iz37NKcAIcYWl#*A}^vm~oaCL1~fG(l5JI4YpHjRyqm~7ub9<30wMyf_bmOk~*
z_|Jivhm%DzZmCjR7_w~!UGp<!0<5%naLAQ!_>=thV0p9m2|Sc4N=it&`F=3(x_?Jk
z*Lq8cn^(UT-}NN2kXJ0vR+mJ-ItWMX_O0T{#3ZIY{k|wG%o=a-qvKs)t?myZ$Gn=>
z-*1`pg{krRdXzLtBEYf0(A3F`?JI)$U+H#~Vc=Xb@2<0HzBuXr2pt5@kWR}s54OM>
zI9*DuO;=qyay3m8x=#Mv!5SpFrZWnO?=l~H)p@Ql>O4lZ*N}BZQj#qMu8b%ONz;a}
z7rL>nhwQI+fW&ENj(jZiv2zrozbqQM7T(}HcCeSJ8z6>y7Y&F)6oxjqtD{4JYG8O6
z30lcrciYwtsFN9^5;prubZ@rbp)3B762{+spnvoFX8zR&W2N2O=kpGoBO+Au-T%}r
z>wMMnyu%nopQZUdw+u2!=>k7HLT>JM6(M-0vJZGSNVPEXAPxus8Y4XpohC+zE;*m&
zHH;3sMzE*sUQu@z44~sD!@i0>2S?L@Xm|ofgxDIuh-C4ZdEmbI0C-{JfJ0K!IS8*|
z#|UbGjuYlth;VB&FVwZy6JZE+Ec-fUD&z#CGo#GmqDjQSAg9Xz{8FFw66_}GY;X|!
zRP_x-yGy>lgl80Zroc;Q8yk;bHiEA)fkV=T9$Cg=oAC5IOsflF`8Pab5DOJ}@f4xv
z??>i3icJy6BSRfOq*ER>>Atjb+k$u`0QB-Z4PP!LafHkbIc`v?e(lV`|EIm*b|&~7
zlG+Zsf49T+NU0llSNq{|OtCXhpdiQs77~!E;=X6Y_!Xe4Qt&#5#<`4y?=|B5HF1bo
zL*8PQp&kL9Ok(T#8$mk#bT^kt)`hncRZB}HgnTeZgPBemGw5dkGs828w4D1#jp5h?
z+h4PAxQOmDn$gdA0ANNTP@1-iABPeo+pwjQj{_!8ED)-yXak>vD{mC?8Sts~+wWXu
zzn#y@iL!nLig1ba8h8i5RCxUA24hI0H9n20IIR1kKJLte$CPFYc=32r(ZVqV7WASg
zic<)w9YCdmym;{FMc?%=d~atz9QWJU)wT3rykWo879tsm7#fV17GHw?hk{WdWkB*U
z4BHLfHG6S+N)5LLdHPqubd80-)=uu$-J$iNLXbB7gi9aP=DF9w;xaQsRMzrP^SXkL
z>s6OP?|Uqmb8^NmviyS=oj11bU*Np$B24RVVQI<XDf4D$-fu)spx&DMj@Ax&W`Oij
zdel4~0t(Jj9ySk#uwLpoJcTY^yvS4|cVT8^WCVjbH0k1O1iR9$(Fu|pd06+r_UqDa
zjP5WZ+T$y5(8b<<t1|+GCljoVyz>`Ic)-1-VKKe&&F2cwa}<a{h(-s1hVYaA1;F3P
zy@NR}>mKk7y6@)WubQ1jA0<b=kvG#l*1UoG;Sblmcm})y-@NItmsL8+MD^mtiLnKr
zAGYd*-8L@{xEJq8p$Tsmig9%=SWD)Nh4MoywGH%OOz6;9AuY0q&x;0C_p&W(4z95#
zU9+6$a|5O1F|i}>1#G6Ilt=e-M9K{n(-`qHA;^`IBeo^!Ic?_2Bf}aR^9zSOAMCo(
z&VH2pdKv&JHZ^3Y+CTRjH_6`b^B%PZ7cEjG!Dd=pLxt6mrw0(I7A;M(I!LX;R0Bws
z1|5sm|5d_B5wIhWyJZI`^1>{Hn0Xn%qy|L<i2$&c*$Q*UC<D5iPJ47Sx1SnC9ZJ1C
z?Okswka0p)8<=iHpgd=2{jGajuSY@WW(LjAOY4uF(H6an(V?Rw-0R_DRDY|#=q?Nq
zzz%<&h489i@Ol6ZV==;Bje-7AMel;q%uXa&@*+Eojg>X2VgfR2_!=*Z|DF*zpV7Ve
z*6hbEK{TFd0bs9%xWa$ju5}WPTq&C_MuaU5bRZHJFIZyL->McbVaUjc?925Rk?9R0
z9~KHzOK3GaY8<ZysruC7YKoR_>4|QKVPcW~?<#$Rb;JJVX*$dnKw_4PXhfgYFqrlH
z9(-$*;$f%Y;NTad_vIcyLE@C47I7$`?qq6J-{MJdsu`;}`f5iFS(~W|h6*zw?qEU?
z6Zb&WBiKQa;kMe@Bk8hqML7^7DNx_GX&fDdfB2S<9=b@)R6~kY4D5l1f-;|H$sr5I
zHx((M9~|d``!!77Hy%69S_jHL=8>;2`AEm0y()#wzA76hFn%jut=@+9*AzgS))AmO
zIbou~o{4j{%{@YmSX)NJTM`+hqU)b9z_c(ZegB)wP5fUF?@JtBa=c4tiQ?8J?EBG1
zUN|p))H{8o$S}p+qWUxM=kk&g7wl9t$OtteKX7w3X#oNlHKoox$TJYh5}rJ^0syRh
zW2{^(c)$^p0E9>Z^1U3d1{zFXVej*p&sCf6VG`=TPH=a{fZfk?Z%ynYdDp%LRpaqY
zluR-)&A@h%+vDqtFGoj#JS%axNWSl13({GLGrk*8-G((VS%8xQ)(=z!*_JGCW`P7&
z{RVPP+(5g<9#YcZpU1EjfO0`*K*$W6H;Rdmc@spl=viPsnPjdVa1xUl(>n8U=K#A#
z?Pe;eH7om34Cgl%-8UDTBv;{jgV=Ut{|3<Wk>dE(&lnO7eop&rfHFh*#UCK{2<%oo
zif4$3ID=W_K2yU8#u_MxM6dgORGJY99p<^%i(;;Pj6dA1#{Gy|EI1n{*^m8~9^rhb
zvq28T%QsiTylQ9{!cpbGKWGXQVT(>Uf~KqUf}g|B)SF!}%34?PnPzk#Q+cv{y|bLi
z7BG=o?Ep4R5jOo1JN{Ua=|k|B?jEE`YBP68fVnp8X{$QVzkB`<S%1tf_fYDqa!T2+
zW3wIn04-2AQv7Sr4KfM1vn?sX%(MpsDD>B_s=#H(el8O}dfPAhO3g#Dfw2dJA&=Y0
zPf4r%q|X{a(VeCl>WC)`+*>SWb*e-1bkeU9aPxsk88W@TbQ??>QC9PC%`{E!XS<I0
zsfu{WG8xcQc!Mk$F0+<K=eG&z394SSs(_MEHME&y!Q#@P&Od=xF{zA_&XXLw+c1*R
zVM592&~v{;ERQLorq>bn3@?;$mWZ+z-YxB#gn^^tQTezFe9TwP;?nQTIn59n3cR0u
zn|sIot8FdUSR3AvJyUT}ME5<l9WfkEde)JuIYH_owElE~HK@q3J>1Sd>IFW)tEx7k
z<3#(uRwObp2d%ZPZ=~*=``vC$`>etA%6U!;?Uw_hI1i1D<yOLf<~pkQ6_N5az`+)0
zPn$U^w6`;)VGJ7qbo9PETPGbXU|czT0v$Tmr3vc;zfm@qI6Pg#uK+<|<3ADRT&iE*
z13x>I=|<h<G3kbUb_WMfh7pI$t_ShfI|b1sMmNEp+S|j4HFk?yJiF||$AD88*Q|45
za$*9ynW7Vaj%pO9J->$&&-^qj7P=~=NYW;M=1ri7M#p;Zo*)wyjyKG4ib>RWi|AiX
z+Q3|^V5w(m`(pIfFTHpJY$!qUWS-l)OF>t7uW38|GT1>ps`2*Bb?j#t<qjQqGmAle
zAxNdDtFHEK8O`=uqtHXF4P0S?4qrO59-^ejF)W6*QQ~UJvtHO&&{rny7H-R)3z=B;
ztpf=V*!=c?u=&n~QBwMy5H}SStwi*!9f@dk!^49`VE#=0mYSbyrpy3<Tow0~)=Nh`
zujqK|8c7!V*Bf|wo?_>^`^o{+F161<tZru~&z|lZyIcEQAi)Nc-w^k;n+;jk(P^3u
zc6#&Ty_tO;eTFyg)FEo&o6OI|AxC&Rb4xA5@fi1e_|%B47(^Z4gwne14)oq=Qqd!{
zUG{-h9WqdtF`$Aw$C}nkwng&O8ClL5BnT1gq>$5DaU*H6c`khq`BR)>f^UklU!RRA
zEIM)NDx)-$Pt2Il5uv7M>0{>7oMYhA0<OxpT*XwEH>?4xn_TY8>IL=CosVkFb3x9>
z{)8N>)HWxOs4A81q?KC%A)>d?&se=V<9&V#b;zY7m|nsI7|#l-#XawZr|w~TL}V<U
zdHid&)w1msJk_^mYIuHe5^C9<I~Y7hk-bL#UO=sD#1`~k$>>eQBZ2-gdxdXTZ%m2?
zgC1cfcim0ug_7&qOdUqT*e)Q%l3yg(JpDl-o@V=TG4mwW1-_K>ojv3#unHNvSBP#5
zGhE#hzMVHSWgD-=jlKhL8(1Sxv`!5jNu}TZ?#o8@eT=4&*jN?gbjQ0$c0J>&?lc~b
ze;l(Bi2D(2+O*GpnYOSgonh@^3S2e#E$WK#Wkv?H4+tKrgTEZ{)yx}A2ENNy_7S)o
z#4+40|K)FwHaiV{|B5u8FGqokds_P|^DCEYo6x8wE0LgqSQMf%jFJO%COlu6o|Dq;
zX^m&!ejlaWfuTGnXVL2|T*lRka)MzrLopmT7-q~r=usWO@$&etQA(P&n4DWTZw?@c
z1m@C+lEZ8<N0!{9@cPeFMj5aV1z-YNFy{-Um{jKb$$%KDTs3*=>3>jgz|!+i0O(5H
z?d_j#XOCv6eTG7Bk1r~52yotK5@T-vn%K?Mi;)~|1@fkacJwgDq#0{tpMbUD^fb&j
zf&U_wJpuC5qMRJB&wIQG!2@rzZi2>&*w8Dj{e(S3Z5%JuWI2hL!CrS{gp7QD(}?34
zCQ2ffXJKtDVFid#xs^^D*5Ehzy-b_<=OOy_m;IJ(%iXzG8rG?KmH>l@;)T5MDS6%C
zNvr3t-+tO&A@JxPNdiC$d?gt5AhpHI$o(s*^7Xfn5lV3`{c0k@mtdy+1(uEWIe~u5
zigx(C@oETNj&2$t2N~acT}oA^hiDc?dtKDJ$eSj~up<3cQUz`xU<e^)ui2NzeUAYz
zzfEKbJmzEAd*?tMJfAVJ+8S@5rUdCeu!f&MIM$_A$P?i*E0?%vQIMl-fT47Hdh8{3
z>t&4pP|jUWyr!uM#;xl6jL$vm9PiD-kyHg5XYm8-HyoxzjM7PSk7(GZ0x%$K*P%To
z18kAJujoYZt4*WI!)R7P=p@elgr3zO98~xjlDm8UmxYDJ`?NIgsy?Y7S!s{V#t%RA
zaINluNpkSO!HR1pf4;ssD@{%$unN}xv1y+%r<KN79-&QRBvlI|wkw#5?;W+l+_k(%
zVdyOHLyJyLsome}P~!t>?dUjf1OomHYulkvwUio9Y-$gDdu5mMnT#d>IgUyGIgXWs
z>{1J_xj$zhCqc6f-ZEqYD64X>Gx5m33@H4nP7H+w*B$(o_mBTd)#9Vz0HfQYQ(l&y
zoTT}QHSXRm!J}UA7egDUJcx*s*8|Xaf;)&lM@OL2)Flk4A2M4rwJ;0vkiphabJ8s{
zI~!O<3j;JNs8;xy0CkdAhfcPQ*%9o(f**2RDkBfv+lQodR6JbIE>tHdKB4q}WXJ?t
z$JUV>XU{(_L%cmA2^t3ZjmKF^=u<Aq5i;^RWJxTvHBW?rJuG#$*fjsFTELZ00d-H2
zF6P*MqZ#UqEscv#zA(xZZf}~Xgprr@=wMNW%s5CZsq*mknZid`yclea6Ja=>)Kt}_
z&jv$r_>Z8uya$%kqkK>&6XVp7AC2BbGqumLkMe5rcQj|5p<1u%^$Kp_O8T<9!8RH3
z(C}wv2_j{4#2l%|m7i(2D428(TN|W4=iPpK8ZreBAcz61q<e)ffEQ{f&K-Ps3?Z~2
zLZQ^5yM#vvTVR?bf=7wM+DIFr24GtRyW<T?iLIhX3Yc30G5r*0%YdlojQS0*XmWC%
zqs;UtDZ8Syj9`~0cK0<KWbm|^gZ9{U7D%Q@Sp6+)mo*iWKA!m25n={0I(#t+3AxvB
zyK=x+r_lKXcuFn#R`_plifJ8%Y+xEZTvUeOkRW-D%`%h7$g}_E0x*9DF1sZJ0X4aI
zf1iebZX_6B7<eG7ww}wW&4!xLYM4vvv)Ao(c}UH>D?GLcK8CwAt-bhF<yKrNtQHWv
zvGUN1p^Uc`!*PU~D^yYI<zZr#1YSJuTHXY5=im3NwMwnG;@Ubu3}p8R^qI!nnNeQ6
z7yu@WIf0Y9LY6>)l{h4lF;~vnoY5x?&nqZP{mlZl8YaX|G^g`653~so>rvS$_J1k^
zPxBmy0R{DRFPAf+if<bbHwJg->VANH+U7{C^{q0^(md6mm;>VnA!hoy-McjSf}6z|
z0*TSOVT$4ceVupnK`%@wx6^yTN|ueuz7P{t$~c?<nUxCg7l~?@Hqh$;v{J)F00-N-
zgYXxEYy0(gd&m1%Ih9UP9eSZOF+L89q&{oEsNGbWWZOMJc$%<Rh})Zxf*2tzEpfIw
z#*~rogpf2E>8hL6Hw2HEpehrNfP4gtoS!u?UMR*OsQLD+nnRy;(v?qre!DnmI!v+)
z!InRMJgrw16LUT)*i&Jo1EirSaO#n|7_I+}R=M~4dOfAdS-)UP>3SMVl~<BqB<Sg)
zB3EpBfCy<ItXW<{L4rpZ>O{gAP7)gOgF1B)J4ih}21NZ{WIpX<AE^0a#m`jzL*_)7
z4B4JNR>Y}3DiRQWSY7yd4>HuLDN9Bh=<DAVjzFW?IZ>1zXt$l@=f++)Rvulp_AmQ_
z4i9r(NNnX9sI3Z=kHewR-jb<%BCe*}2I*~{@Avm*ls_=-JMDd%l<ya|15C(^u)Ad%
zzBgpT5k}m_<&GM|rP#MBeGKO1Kuwr~_`}lDw{5-|7`e$+LKur#!q9D?ad!bC9dGe7
zsV|)GQRVI5ROg}lJT!-+;RVJWUX-MaF-6M45m<rX2!YfH<wW9DKCh&??y&_5@9pXG
ztXP>ofx>St-`u^!WZxpf*T50J%Eyqo_STL0#v7^(W}(d+?&`W9Q7?B`a55+ioGJUf
znH@OnI_qAT!l<;?b1y<_brPlN@SC?YVK-t~l;Ko#cA<8MRXajD*Iy558y;ibb>=cZ
zlb{!kn$FTukN%ron+7}9rnVQEG4T4Vvl|o~4)~x-^SD>bI|7TeV?T2`(cnT{vr~`L
zzS=c*Zkq<TQTO=cNB1ntSh$^Fe=iVl{z+n-!eJWnB#&nAI-m1)?j75i)%hAKZ%0_I
zmGKhn_24GnYnYlwju~ven|tw9qk}Z(>Z@`+6Y@TP|2-3VU5`f1NmLY#u%HcWBbmd=
zFV#Xfwm*csC>?1lb(xV#6V-tI{X7LC^j=(1NxT-{o;2`rTit$D7B)^55(_WC9gpr&
zZ=ML{DL%J9SnP%9S00tkxNE^;gd~BA2iFYXRJO@{rN_0esIpLg*JH6es9oqe(V2;}
z6{iPUs%LV>+B?>qsoCAE7<_SWSZgJHu)<imQ>H=^Z=FHG*Oo|6X*S(o4maFChi)U-
zwGA*zlMD$dUtJ9G^n7XQLc=Joe|qEheu452)oTaXL@QGc=<B@}RiZSQRp_IEZ2kRh
zj^Azr$7ilr4Jh2dh&+%wnkHs~=jMw?v>dE1k;*Qtgcx3zYbLTm^{K5M*^gT};?+B+
z`|0~OQ@m$iOU=0KEp1Tm2_0?S430Ri`-iY;T)x3v5yHUXO%pECdOMwIp1V=rN<4}=
z;kLq~`sc`kz*T%Etr)Y5BPX>dd|m4M&@rD;1DTE6%Chc{Oa9!KE&ik3WBKlg*NI<k
zRzE8Dc~%r?j#2sU<M2AL%UDqLENxK{_hu<==@jbAE(;8JhpoOal6<;T-n{C*p{Pu5
z`8%Lq@y{v<^aDkAdFXNuY4X81VOva79NAA6cR`TtZ%}3~b$0K(x4wSNeb(|_!Ah79
z)F10F1Q@ti8gBSgV48^UbjkY75wEW#9ssCn%TN93B&}+5<1l5>Y1dfI*my!*#u;8j
z(a7HQ52l0-1%Uk$e7Aad#oRj^zXz?eo7^T67CdW-LrLPRTjbR?vfRdp&%a4=1P7Tg
z{%I^Lqo1g3FL<s-o@}NYewdSUWt;O{?V+t5nz%>1ce|E4x)_!>dRzZo)FvhJtfVX=
z8HjonB9I%DZm`>9S)^M%`ZU!J_UiT}>1U#4)tg7{tmd5EWJZYJV*Mfie}4SQ4~tfV
zBk7XPrD`rQlExf7o13dGw3wS3>?4*##FtZ#Lsb3~W9O*E-(?wuL_fmN=kkH8k5(=5
zW9!qnI$J*#yV$XyC&Xy3!C+p!o<CDJyyRJXg{YhK4cWRJ#H(jzt7o8Cw7cpfyLi)m
zy=y^Uaq_I}0?PZ&6bw0LcU)R3s#&)ja9=Qy!FO^u+#1s35)He0l6RJCBsi3cVB6B*
zeF4`=a*&d;EYH&V;~4Boy|4c|OVlFWES%=)>RsZevi|R<3c!^eJDzS?0{VWu+H#ot
za@dwVMPX5q6H2wVHjP#xe4;Qu*-^afyrdzKQ9^u8Nx5Gupot}nL60Nhx`GsA99s|(
z-^~X~%KHMAHW+v_QN=zOw9FkCSL48q>NEP!FVicxJ~6#H**RC@ZOXz918%W5!V!)2
zw_xH6cqy{}7DP7avcL$&-^N9|x9r0Gp5DS{yNVlI*DMg%Y!^p{8^IvbGt_EHV{=rP
zdGpXizm1o_*2u!1^k^0<9rb#(`Gl5o_Xk;7ThAmd-K6@-{52hZ2$YC!^B@S|d<#_s
z*%ub~knPkMiM{!w5}ev4nlY)}%Q%v{nQWD~;Ss)B``A5YsR_5I<t%aG?&6qUEp8U7
z?ZPUZu8kMRni83ticOa6S4o~}0+&6VFa~`wL|D#$sGbqSlrRv17mCNZj}NSPcQQ&-
zjO;q<ozN$_H=s%3(swD%wc`=EhkBJ*@nvL32O~^A`TK382+5g-fA^|B7*+cgU%1Sh
z#wBLEoT__`iAnbBA;&GdTwqfT4H!J7wDE3S=b^)Vd_c6%8s6QlLJYihr`I~)-6={R
zVODcku-fPDegq432<tl5D&~3b4+U@TjBcJ3vqx5&T(RXGXWS1Jp^`gQoG_wh9>wi-
z#2XBpX%o7=dzUX9)g#b@@E6QsvoOZD!51&vhN3UQ%sl+JW4Ec$Jw3)%>oSKKn0cW6
zfrGa*h?!vxuM=GDrou5vu=U{5Z566&-d)u!goEoH_d6P~|9%+GHQo&8?)N=Y)IK{@
z91@as3{TNCd!O)nqUJCcq4aZOwEVBK(jDNchpgr8)-}K8Ua(Ri68+(7beqYk#y5T~
z%@d1cTLR}RJT!UAr`}%d+tt`=SKYtT^Q)c)H|*1#IDKHMoAuGbkr6X=J*rF6cZ0YN
zWIDj!K%Eyn82}f+j@}HQ{9w3WX?T{2d?Y+s&$XpZI4XR@a`uE!j9KI{EZwb3$N8>*
z#a0Z}*%0GUt~|id;i6`$m@(<rc>9H(J-vMsZ?Elm&CAWrxpJS6v}Z1wCkp+7V_DOv
z^zgS<iKfWQC4JVv9Q9!yLE3nuxmlUR`<Rf+iz}I;t3aOa@@=XY{NTE}8$(q@9OD5R
za%7^t)@c^2EY~XJQf=1-A4?{xCm~YKfB0~*Gcvjg@0;LahbsEY<UJ{Reh<&j&yFw6
z?@Zi^*@cMP$un&AEgJOw7QcalZ7JfrCv(Kl6o(fJz1y(ln{>pTrVIayg||WbOL}@D
zu*QUN(}rU=$By)43UQf37g~jOY&%8s-A=}-lHN!-q$XD+Uz$i6=~t<pDSn?|=3_|C
zA>MQ+zY`+5E-Fi2N*%G(A2X;dn1j$|;w(m*?Pp!#hzp5vm!(N|=B1Ud=ylA!o6m7v
z@9pU|1OKEY`r+0y)pl8S?t$xQ(QijJ3Kget-%bAMn*Q)+1NUP*?mgVGo2MEV%Tvo&
z+`cYJ1qKP*DbKBmG^cmh#2)8jex$=mv$so}GQu*z@%BVCdtIcc(?<cWV3lM)^yG$5
zbh}7}lw0kTO{MpR$K3HrrsS}_YC4yz=dV4Jsug)Bhq#q-qOj+JPn=Q}KLUir-Y|qK
zCSDDnGz+H-=guK0se4V6Y+U_omBQvau9ZqzPfh`^D&WXDGn+$9LR44DyJY+Wo{yH!
zUh@#esSq3SdxgbEoiAMpy)eZO)$jAZG~1);%eJ3aZoSlsd^YeQZ6c9M!^a>Z{C8`z
zZTp^^fnS$1s>5r$9$-UvJBS+>`b1jsC`=fHBXTD`9k*%V&;4LYy1l5`tGP_MEW^l#
zLn~HV)}4d0tKa;(uKpMU!K>LMUHG-%jHwvYWAUa_%BSckwEE8RCygc0h0|3&Q#(jC
zQ~n?d_$Hk@U%JtxcR6tuH9HGhThi>lwW^qM{ewL57+s)f*W$YiEvtnEppHvN4%o4F
z=6S}vrK^nCW#zN(WUEIw{bqBG1`BMA_&GnaNC+Ii>s@vJm}w^mH#3Fzr59KF-n=DN
z7$+?`7#K6^`U6?+6<rlzcC4y+*Teqhb~c8s+UL*GQfVjLrI=XIVl5;^d2w!o=BL#9
zM7eSX0af|vKzIlZh7?}X9G!XKf)Nn`!G8>A@xORnS@%%(?TQ%*pLDF8^Aai63=`aB
zd`v7D&f}dG?E>Ri<wR^{N}az`cak|qC7MZ#h<aX-b(b;!(DdwEtG+v-$Ub*@o4Y*T
zS=VY!S>tqkZ<v0LZ=9j7+z=BrR8d*)p^W?I5Zpo)!<6CyNkC;!>KT5-t2sls?K$3=
zJ3f*0i^Sy0C7g}vH*vhdN#>pID=XE3m(se_VL~y2JQK>%*b=(a$vP-^riIf;4@(og
z6U;UWwq-6o=sF!XgImJoF15rWRmRU7OhMO~2hq)zwFF2Mz!}inU|hqx=jN2M<3dDs
zWO>twxtwOi<|FZP4`KIX&$-jf>J66v!u@E`!Lc5DOpT)HS=9V(w%@nk4eg3Ckn5Eu
z*CWJ#x792Dp+YRbF7K0WohOJ@<vQ}Yy^tlJu^f3u^B(7OQHT0y&?Y>@OC;&j$HX=)
znB+nG+@b~H6zlx)19Jr21R{B$@7%$+ll$rm=HJn&5l$<&Qpqs+@Y^aA(%0kSo<7jK
z_X_mW;jRkoEc(6`VKuj_k6p8(JIuM#sr_pArZA^_r^*QwMI6;*tv{BsiKhv(58Nrx
z1SYm(HiKAp#35l!1_ewO-+a2Cluf(NzV>@p$*Eq<_23|jeL#oD3<0BBmF(4PyWdF@
zdcK>VlbshioSFTaTjR3L!pt%aXfFPKiiP^okEDonb)WPxBychZrN4hq%%lRM39H^W
zmm%fv%p-!4Z$)d|t)hl@aSTP=H&+Yjxb)?=(eDc!#Hr$4@)$=o@{wK2rq|jA*Yb%q
z>;d9&ogO=#YA_zZlI^qjP$}rt2~-3~Yd4ucCu<v*ytHb0s5?ACjx!V`RMXsduO+Y-
zupRhTl`ZM;jmt@un>21t#;58zb}#8<C;WM|^}Wcqib^MTYkA_SA7(4Ij!d)ujrCQG
zuC}t3z<!`2)$m%+>pE(yS8mP*1LYXA%7PzzuPYu!X&@4@i^EQjJccs(74ZSxIsq1A
zGY^LPb?>Bn_Tbu%{)`8~n+xpp_>Ti0bdGFb;tL?<-E&;(yb15*>8S!=t4+bpQmu%(
zerfWfxWA^eqc6jIr<#cS<iRZf1b?!<nxxw)q+Dm?MT42UrDq@h-F(@9%e%s{_1>a%
z7-e&KnT5NA5UZzuh=zDV{q8bYB<?3C5mFvVBC5xCZ>cGX|DpRBAravb1)IX;)$z~O
zl$2XVPodhhz5kzjoJCg2-^}J$@6ud!!Qc_%A;*qA2>-<2<6I-f^7R9XDZi};5uXS%
zM86c3^G1`Kr|<(^H2<lX*M0ZiqxX(eV`VoyLVSZ(>pIJ=DxK45GnrL)Mto{TGZMdU
zyU!Xs{?@DeSdYYdP!lJOg63B<qJA!d*!^t1x<pgXdcXdEzKV?1F-6t;{TrD!6)wb*
z^~iq<=R|Ky;q_>>*P?tbFNxpU>OY@LVknwqQ6=<Fc&(lYmf79^T<>|em8(vwqTIv}
zyW_vbdvm9tjlCc7`(GnESp4fXO!}Yq+PVh+EUJILA7|0|e_t@-XK&d}T*&`<-KF{W
z4JQ7gt>?e5JMnj8S^nwUw!Sj1=D~k|YT|GI|Ged#)%suEa%!KamQYf-&kJv`^!{=0
z7irs&`qN!fZ!=cHT>jUthg=0y<F~V&oub)7gqUlBCz5WRweLR}sT6td#W9;(7ejL&
z-%dze^d7%E$#Rb7FOlB$0jiA2hvR>^G|J`Nrj9xXC~s$c;CMpaF6w^MA#&>cro2DX
zr>8c@jHvYpuD#oTY@e8Oo#+wSHFd_9I_HDm;_KI|Q5(~dB`Q)qLq|8KddvK;i*+xD
zZMWI!LGDE!EHnM)APwh}{A&eX<T-;=R-CqW<Tmx42Ak$RlYx<&+_eQu>#O;j)?S+#
z(Pd2EqO92bBFVaGr?RKI%e{RSlp<zx><xUU?zr!ba?}~0a4zGXy0h$hyKSy@$Ft?~
zJvTtP`JY$tW>baP%pjaL*tKHKM^4A`d~4#<uG*mZK-by7fVga${<-Dh>~@C9xV?<4
zA0=n{4A>KnFz)A3p&V!0dEVizFWa6wN9W{Twx|UUtZ8&lNdBy=%bXAwzZn(v<bla-
znSK|c@|!`}p6K=2z9_!nMR$RV=@&^j3+DEq*cVGbNFIBT!mGgRMnSBi-?=Gi-(4Kl
zHU~Ut&c8jxnZDY*_QW`JVE@UpFE>XDx=j+B>m>M_ZW&%HQ&H)j8<`hWr4wLDA2TXq
zc);^;kNDb4trb}nlWr5nlA*|x6HT0K-FvB}TISYWRo-1)neP17%J;fy)b;+L+0Se-
z*8lq@WomtW?SMnh%c&h#crW@hy_{NQU+^fMk#rnz4La#o@3!Nqli3|F4o-;!FyC0*
zD<7z$`(xXmLU+6C3@1N|EN0%mb=gXy8QJ4;t~!x(WJg|iXQ?xO=^k8OleFkE>S2%>
z+a@u)W16o+=en--uD!a7ReCNe3<{G)Ck)GOhtukM-1~j7u`9kh)r6NVxUF0)fUIn>
zdTsS*fns)de)v>XQPKTy=S=6QvKG>gx7Wo^S-8_Mjh8Ok-Ok*MvUD?`T(m4&tzF$<
z{LpEi=^VItVzN2@+SAn@t6Lnc_4be7JR_4ozwu*Z5Q4@3c`a@8Xzjl^9rfduD&2v)
zn1I_MH1u4(t|YG&?0Co@H4Pn_GMAR%9gmMZn`*7AE|}GGMURWwcQ*9J@sqA%xKWYN
zW|2SYnJQP|D@>YAFi?}=vuurP)K$8voOo55+_k^|QkHC|+TeR%9)qH{IaWDUY!W9Y
z3Y&)FZYH{FDP5BKpmuR6sF9(0<Er*bZ19VxG2<3%AxUB{k8G4tr$Zwi`T7v~qjMw#
zy8{GofzO@6GAxq?UL^+tv%Su6W7Y79l-)R5Q<HRX@%>2EcKs%&Q19gj?CLJgYNsut
zGc!8=NDN7f>&3z|=tO17Zt+vu1+DePp&!5HI$Zo9aG~4Sxq~UL_+zVzeM8gjQ$GaB
zjqRsC42f%faFt<iXLCxQc}zIP+QiFO8dkEJ9yfI%>%&O9hK|L)kIrBASw%VC?&-Uw
zEqnZp*8e<D_+v0TgXr<eouVCRSCBXHY!|(!v#91v!IxY|S@#?ZkS@$#{iH-4F<>?=
znLgyvtu`8Pc!_~sc_b=6Ewg&CpNUbMBTT@>n(@~&zT%<6Fnha^f%ZQVvb@fe@ulr#
z68sm5POxO{_S!EoIf~_(Z-KxlZ-U4uOXmXHM)4_E-d^f@%I$Z>+2H5=8ZP?K#G$~-
z8ecrwah3X6iI?i`o(C12ae$YmR{bZcT)#&hq={Cc)8!<$q93rPdr+^-Gg(w{;o;0@
z-9wY2!RJU+*CgpAS_e5e8RIHXeTkRRXAK`>8Lyjhu;|R=3Fxzam43+iFw3=HU4D9E
z$A5KA^qQI5_;eVI?8HZfG?eIv<|=8x$MDQ}zf|T3C-Ze7BR#?k<Na2z;t$M?i)QiZ
zd}x<xa;|Ny>_5j)uI+N(@z27yI}9FOB5WZC>MA6ka@D(vTs+U98RRy_k;`5S$_5qb
zC;4WRt_K1WJ1jTL-jRdq{y(oe>OGMRi-?Qp%+pEJ%<pUyLQ@@jhNIFvKwH9!4@U08
za2lYKYnfWit{&!0y!0}3{FmO}Pc>w-5NSJVB}ia&{v<n_p4Ao?XFF88y+5+y-L)(g
z1xlv9PL<|X5^*<uzo;p0kCR^b;$NrH@n%e7gf&Y>>&KDwn9|uxdpT~w<fwB3s^tlL
z_+7DbW2iDUWg@uWspFO)Y|uat7ivVzW?|uLMXpa0mskh&!Q+ir1JBg1ON$StaTt9a
zq?uk_XZsrZXH)WPXo`<^sH9_9kM8r-9$#OHLB>~iJ{9}(_{D-Ry-c!ryh6FX*^bp$
zUrAR?P`vWBp`Hs{u${nY`_2Wg=Kj)OdX1+e=w_azG4(o#|7}+abA~ay3r|5ThV-ca
zwP4JngU$MmrcR%GTTSP$%mrpEytFhIJMkd>ll<fTKA0lGPRLl>ZDk&j4?0Dy+|T@t
zwZS{qOohX8L?avvV2nd+WqY~3>+>Jqpwv~}>@c^c%a#523KpXsuqoS1O5{6S{??v{
zxK!uTD9g@vSEyS~MMwQj@>`d(m@{fm_8S-zOGd-+0-joK<tNFd#o2n=+n*S}<{f13
z){HXk`=4zKe_T56+1hVa0e0Ac4G5oM4H#+{rBi;HanT*;2*Z3fB?TcUOjM7W=(}H7
zKYbv<&_3k!>GVpxZ{)q67lu#C3R~oqOwH~DHZ9oJ&jlrRV7Gi=@>Ebe&|=}6LMx?s
z&GGu}t9kSCS^RRhE(aPI7yvqPE1wem3RV_UdwE}Q-gmV@rlf>KX>l=n;@6j?&!wcK
za9tRezKTIjD{`=Z&&=4QY2MdENC;Skek#cqt6WPLYyqbbLk1Y=#)1b(wtHYLLwhZ`
z?$Iap7qwZ##xIvCuF0b6nA4~9lB(-<ZqkK({Gn&sXrrr2H+)@!#x5rY6+3f~1w5*%
zU}|UcsN#m$n?0nS7EK*piyx_&e26p>1Oa9cc6h*rn8?T&ya!z1=7E8VZ;lC4$B&Z~
z*=n2RWbgjQBtz5P-Hiq~E$w(#ZwU!F*6;y55e7Cp*laujXcHBS__~w>^=8M*$X1p=
zM)HaAwQwVh`2HTRJ3Mp&vYgH3*?O@eC$2je-&aY5MNXHAHdb%t<W0MufvGauc3IOe
zwThnG@;R{l?C$>d<^;Jk<cir0`4iu+P41Y||9^K*3en>m5=p@j$33iaT3@kCZF?jb
zzA-AutffllDjA(V2FK;smmV=JF3mkPcC!9+$}wzko0eo~X_#>siTt&)_P0a!dDo@}
z^!9xC&Xl_5`jGzKl#RUG+iT-=na7>o4mUg>zjfYVszo70J`PT}j*iQ}8zVGR4+r$y
ziV?Lq7Q*}Fz^WfEazm>KaS)`K=p0=nL+*fSfTZ-ZgrRSf6<5238X+jLwY7D1RVD|-
z46uwS^D}&DY1?C${KwR+Uc6gK8M53h6wm}CapW+s4M~A^U+_i7plHhc9^?A+DV?`+
zgQ6T(XRN|#!bDG*2s2}|+q)h+url<+TAGBDqCb*NAxSJ)#_!;b2OsCcUCRBt|Fp_9
zP&{TiT?PYWqz+$Ci$Vf$gmPydC?S&T^Q~&hvNDyf*ObedZrV<Pz)8$m1e5foF|Z-{
z+`!N+dVSoa;>MHOH0yHOwK7xg$Fb2)&x;>dk?t0ETJcCfX=EnKs;{TFPBdmK)Mb#f
z0bnEcChMl5&MB$^u!5$iry*v}dXK}+UsgUY)I^Z++WpY?i{qMM+g`I9XuW&E7~Q{&
z9{_m;L;|>;zrF+)2)L}kkwEN?{=A4u^w=_eafVv53p|!FQU{ABtie#>1Gg~4HHx0*
zoBM6asiTvuhe%Ju32Sr|;DF)DFr~wCsxS3bq<#*yeTDAre_k^?b|%)8TI(_1-E%18
z-&}y}z4{r~-~zB9mizndFGec&3jfvh4GfaU#Ktw*7;Ze>IWidg`}_Tw9gO1VREpD!
zKXI12XRx`&`i^fH<XoCs$jMXx`B~q(r<HxU%~tF*F}@4Vj<7wLTh`Rngss0DY!LG-
z7gyIiJ9TJ&dOf+Fjll**>-1_Z&<3mpC}M<|y`CU9iivbBv|~)$oaxQ{e6yWis}Qaz
zv@!5Qf&j)=EZ1@sGWNhK_og!@CIg09As=PE$sbL-I+PnrCtufnb=Hs4YIDkMDna^F
z=k|zO-QUl$GaPqnf4!HaBI`XgzW46UViC*7^@;8|@^XS}eeIgwJAr3ddEo9OKe?P}
z+4*O_VxKCt%0T}<i3X+aprQEE6m?$k%CImnvex3`4aoW)#(w-&g7%3pi0dE-u;W;K
zRsSLXLuTLpAN|RJH8EWx_E~(R(-P{-83yH`RM3$aB11@{4dJsYVH=~Xs0E>gGec^*
z9>V5Dg5+-^#=1Bpigw!emGVWt(dMv6f+N<Ez6#1X)|OpD6=gLvSmzDd^O<f(9q#2j
z^FL=d8Ce}QV<f{S+xO1!6v>#&J9qB*Msm5Lx%OK_d(*Edne~f~hMNBMwAR%8cQ2Yf
zNMSL4kr-vLt7=yk?`0*Qrw=Z$hpAq0zRTU<a6z;5B7FrPPphoSrB`=?!h)acS6!w&
z8y_g9O+BN;lqSFsoJSpJnDy~KM-xnrTQcRkL<~P^tI{35@RZ9;I3hDrkhQbRc*UuS
zOkBM+2Ttekzp3mz|8lU!l*CfdP*E#PVEFB*MV{0}!r(UkL$m&|z5C>%c~*ec?R9<h
zQ8>{3Xa0OX4=sUyXE?9ZSv94~qDSX?6J|fg*<>e};qt>_91^BHODKpdpTvwiwbT?%
z@ojf}aIB?mM)d15V~SxpdZ{sY)O~*p>|bafFX5Lu30LUy^*^0f<?DHE=0^jvaEj;U
zCGb$#{aLi7KEk`;)Fq@$o+%<M41X?@L*o3L)czs8iA}R5f#SE1UaWT-EelEn>wc<i
zbrQ~RpqhbFblX!a|L%|c_^A_ryw5G}DGmKQd*T0Z_2%JJw(a|OL?lx}k}_miWJ<_9
zMInR`GNdS!B4g$ZnKDnAhs>3V%n3=7kR+8v#w2q>#Jexg``fnf^Q^z_?Y?W>YhCNQ
z&htEuW8Xjf*QuLVgnU}d4&}NBtK`72XJ27$0_QcjcP{3L6lcm*BP?m$O`d-LdHjDi
z=l$CXTaufb8)1cj$~#QemPGzV!aek7%LKs*2K|_gmRvc;Mw*eT$!;&4XUKPWpCPrO
zn4!Z@qe@e({Bp%x0l_8)^-r1EuHM{|6x?nK5N!9|@uF^H+>!3F;1!vSIO&cM-!h9&
zD@x}e!1&Ohl6f&U`gWh_rz2m=TA%bC*R#^m>LFVU-lxk*&U5(l6~T7a=vLhy$e>cw
zJ8vMC8K}cwOQD}OebDBI((c@N-IAY(*F!uOObGOp^eWaSQCQv7gG~2dtc3CjM%dHT
z&A<yM+2owMI!tmJ_<wqzGq30cALbI`xVv}0eAc91t6vO57Q~q)B~~mL=fKBcc2^@^
zhr>D7SuCY7BK^d!9Z^^0%qA|(WqTFabzVB!V7agh%Ek6dS9A8$ul{^ujWq0|3Hgw1
z`A4=q#o-(*J2D6AN~adX;shy3l^eKs3Nt6a6*9t(P<siDYq^8nE3w>RucBo|1Wg|G
z9Zr1H(V<;8;AVbSkFiI*f7-3Wl!;6^j(a5wDws(Z&E;LMrfOm8eUZ#^sj43`_L7n>
zl@AG;m`!jqRL32VW!^0t`YKVd{i)=((q+|(!P!=-3k{U*Y@468RmV?K{ahm28xS&K
zV*=eGk=)RtOL*!b&zz5?*0Ua=ENLAuui$``ql?QPY_U6t(%=Cx+u_kY%Q)`ZKt~4B
zIu;S0+6Lx9zTci&#Zd33|4V)wk@{_500ZW_I@wmIb>B?{DKD=9_tFzk6+Tsa+v>dg
zMbF*w9#uG5eR{M1Hlipo+1n8ab$Oi#YovZ4qx&^wg_J;_w#V1ipXotnvh<_%+$lXq
zlcZRUI2&n5=F2~;bE{ASc{JzPT6?~|Tv}4{`%{<qQvdz(%^rHXvYaiTCvf&9MXM8(
z`b1XWz`%f-O(`K9_155Q^S$k(R|OIQ_VDLm{B_5Q1sX5MC}y?Y)DIl`AG7Q@L><7?
zv4sjjpLmPBdOq=?wa%T?0)&Nl)mv2cW8=U8n>hj~WJf8j)iWxgq9Q*5+MJ!40YjEk
zH3@teXpP|YVanCVH#YBE`v<O7zTwjFyp+eQ^P=i&+vD{5aJ?Y~y4qim0Vco`<2w&c
z+w9fV^gf6~zxAMJvbr?l9JIZXX@-W0B@#mIwa=f!hWz*iB^l}6b0**zyFvR-3>JSq
zyBwmD^O7y$TW;|#$IA&)$EzR?L**vUT5oY$F9C8{6CjSkA^d#RNRRRD4q-{{Gd)i+
z+`d*t)2y_+<?~f|C}ZsAL}v@^;0CgIR5*ocCJh-W6qw#@V+(@qwKX+O+xWNRZLtZ%
zxDHjW+7Z@BI6<ZQ?)lIUZ&5$Y`;>Wc76r4U#D0sJZm{x}*F(-l$eUZMCvN=)fh8(<
z<j@swP`gB_8-7LeUC4iL&znYdvN^u3sJqBr#zA|k>r&5o!d-Rl#o$DQJcQ?-4q{9D
z`ym2(AO?1I1C@gD^tl90bom%AawOT@iv6|ZIRrFHg+m=&RtFAjVb<}JDP&<=|L1Gj
z=h`f4)`t-%`ul*37WUwPTd|E8AkU=MHg@Bo5&VwX`Zl60*7b$oFVjeZQOJ5*nbK;R
zG)0!byQordm&ypN1VofD<%1&m%pvh_wi2X0;t=8CF)i$QBDgDxfN2B<F-3*p<hjz+
z)D7LXNC~wbVpPLG1OoOr?yFX0Oq|?Uh?=d`^kU2(3+_5{=Ky#3@D|K6l)hmwdKIL}
zl9KmlSjAQ54npmUxpSf&xF;ng&}+y^{Q0nDW|ftf?-i#J0o?n;v>S|E9F!=T;<zEZ
zgaj1M4i}dXlP*d(u@m8c)Ar640@3s6Z+sM|S^FY-2Rh2KvbgrKm@{y%ecD}M#}(K+
zyNu?>gZpK~V4A{<IjbdbBp~2N&68G~Cmb%lJ1rMrGB_9w)bG^a@85HB3B*+<>~W7u
zefhz6-OhlB{h!ymQj?vNi17ge&og8M!x@fD2$LSV@Jr>Zf0w3kuV1SI{!FkP7i*|G
zXJ_!({8Zl~993A}yU1u0AM64<l~5}ALu0c98t@LF6XuO4=_QW?3KBZ~YgJ8VXH40i
zUc?<Xv4|UU6k1^bHb4%+YpZySui<4iz*IEffR(TTPud@^`h&JkYI=~4PGj{X=`Wh{
zd}tK7(+iK{OB=3O*p1-zmY=tMd!%_z_xbbZFo?u)<DmxYHzw01jsk4DN&Zsg=|HF#
z-*&fvKm5X$oH@INM?>F`=>fYZT8Y?yZ3ImGcAgh!h12WtdmxC#wZ$$!&#tw(ygvfm
zTRb%Pd&>lOahXuQDz;!DH71spyg$?keyDq2S7T|_%zs>la#~#5CA)vxG>Lq28DDM7
z4*_yJV+%6OIm>eiTUx{4p7kHu1ck6Nz4#8vy@iQMSnCK&z~i@E`_wpqe1VvuuxBYu
zpOF3PURaxl>HS`c+sb4Nk!ms-Mv}=<e7PfGK3-n^_QzcR30bA8^Dai75Kcx5;)$(R
z5|dM=PdCwaT4g#7!H&IzwsWZW2|?yS-D5Da#cMQ+LOy;&t<s@K?LXu>c-<IV%!K*E
zb8`tGwn6DQI18=uJGR$aN^#VtZ1z_?#yMUWOC2C9wPHcL!Q#>Knh#MkghMoa5ajuq
z`LL%-*<Q70?G2?#b$fHE{H|5Wndi|$`T6{H12fiQO$9qR54Vd+u;h5dVGZ4J=m{;>
z>Z?VC&{I?X(9B1GgHi+(u4<-o3}HBP^oSqP|8?LQ8*U!qWVk+KP91s?dkCL4)cLOh
z3FPR&Ojd<7bJ{wY_jRx0noqltD}%iGcpCO)J;^kz?2vu{DBpSjK<~TP-VNhqGv2Rs
z`HWj;Y3k)=yVM<~>1FFE;4^e^rohuc6+D*;Ll2}wgR}jWLhWLuB)YrL#^nLRTvi5h
zI&NJ@DU?U>?hFlaWOX&)2&uiO*HPViDI6A{|MMCNq1A~HA(5!fXRMJGdEEA;(1Wao
z!!fO+fP<3o$+rIw(83&)xXd`eZ!ENnV6&m*92%hH+%k~v&ytsMsSZY7fPp|oUENxF
z*1xMhJ_EDMfqbBAul*|TQep<(l4t_^Flz1KFx{%SG5_tGg+kU|wI@B3$oBBvSe-!4
zf$v)(;a^NlLlyB`ZAW9lBneec)u68z3KeJP?aBo86OZH1e*<$yVRdv5W9b6}0mKz;
zx;i-_+S0}(yVmwJeE%>%Wx?Ww)k&A|vi4{oGeqUMw5bKSQc4_i_t^j0IyeYrb@dqj
zaI3?KR8CHgI|$=rl^h@f8`frI+shydwoA=cMly_?41^Ja%tSl?e^4Dd<8M4`tsn2(
zO-ABkQDf$dh^~5zkYScl{=5h0C-C6nkV9lCLiR34n|e);k@FJ;UxYu2gZcg5jg?kK
z)W>=$(qH%cBmMxdsw()^mF&(?PUpx_NL*#v@wy4?yRKJB367AU0f4kb-}*t2lvY$U
z;?t*3D<OU>AppGCic`(>HjgP&(ePtWoYx-v=oG5tU3S{-0D>}F<L6x@mrgx*G>%m5
zbu`H6D9F(9k`lkvX~1aJx;rMZ5i&Lr-}#7v4D*Jr)2d<_I=IXLe06n+;65+xk<h*<
zlfl)&(JnT8)5~iO#xHCrV40y+#v)j`{|3`*8L6o9iV8ylBMxkEV7Ii8>vO1c+$s(#
zr;>;&ytW_UUueT0ZRh`cRT4Bk+$Z<}aM*$MY08G!_l4ruMig}h@psJXS_Zt=%-r0n
zWpW?or)XG&;Uly5^JCZ3W~uxzqNsCv`|mX$6-tKf9HHa|M%>yjZhfk+sewO6oiV@1
z&MexaM|>KvbeP<y-O^Hdo7TyEc|}D6dfKl_9;M!XP*u0?_}|EZTSxarji8T+Tod$D
zpyOt}P4a@3LMn#1kmc*!f$I-&wnuwLW+v^9?NTY{<Ix%eU32w__9DRL0UQbKWB2YI
zl3Xw9-TAF(MeDm%r=wI*61$`z+~IKez^Fw?ZWoP#2IrFxi|h?Myr+YMcHff7^OfPh
ze_4~e6LB6W6P*3^YfJy%*%{R}0rfjtWhkWwt{tiXViPW1lnc8%TQ<2Io234`v>jw2
zwz%YG2-X%_bOFGIV?8}3Qef2GbY3?u4^0)?5apk@N_K?ZKC_BTjv5h{95Geldd5n&
zsXKDhD>ZE5er$gLkSz>Ix(cRAuD-q-;LaQH=gGULlx5-PnQpv01_vQJHA_={u+Ke+
z+{vRwu1xe{LqH|2T?Z5M>cUvsvFoWFyq`3Z8n(|~HDPwS7Zii9aqRjxux|IL41KtB
zQg?F-pzp^_jPeJ`i=6sqm#tX9L6phBHOtfgeW`rszXu$Yus|9M!nuNT4CSJgwD$PN
zV?p#9aoL9~EG;SM)cIO7((d#G_=<Xm6r>gKz~63LLCmfEh&vAVE1uQ58#P)dPqGN~
z*lertDD062yh&R6mZF%@{?L&3#it5;-nFUl>F}kbTHd=4?lALDT^aTR2Z&B!Kwig>
zlAdX!&jQjSSS4x%zhIs|fAkS~o8|0ZIPSXl)=gTEzom3iZTJzgr%JxE5YJDT;M#Hf
zMxH1bUXCU*eV*_-ch*_PS*u5ok*cJml<8EQCHN7z>d3-SP*6a-zB%W+)X^6#dpI*`
znsp5glWf#Ij~I*fjpkmzYb=@=gdWTG?~>Iz)FfYvUVr!&bX~&mNLoRd9L+CfVPRo_
z{9Up1d3o(R%t^LmIEEhWA?jv->lOSqc)6UjVl)O6?$7rScHuW6@)(Ci*_dE21eGyP
zK<8*<N7gl}Kf?W$*ij!EHSgli>bmIpor(5r60#!gD}H!w|0*6SoLtNnalOdxU^6ut
zY3bC=uU}9T85#ntV<3P#XwYYQU~G)1W1gOO8m_#Yo{(1!2-^&4Mn!m$?l5rNa}(!9
zmENK&;8{P@`S8y?!n++!$?f<=2Ryh2d^{o$AC_A=F+DBhB^da&TozE1U1VLkxI*x@
z>+f++<`;*pB&Uflh!9Tt&qI`jJE)PpxPRI{^~8bFPe+dj{hy5r|2T3T(-}XCgh9sf
zM84vqE4UHQE0V^MW80OfM=zt~=c`vpw?~IcbWwsDKPvTw6DqHP(*g_xGB+|()Sd<c
zkOqGc?*Q6Abu2=eNh6LdYA2&%!(hYn=NmuoKY|vQXozhV1z1+mXKlI)&f;fu>&GcM
z=YG1HSM^Qdnz)}o&!h2orj8i4&^xu%D5=6HOi3ClV9e&P2>`Soo)H{~>MaW0x<r{c
zog2u_`yQ2+HliJ%A$8zf5;>>jdbQpdoll?@<@z4u3#aIVhzWSz_mBX0a+gY|L%(Aw
z3YnhC-`EY&{1i)3j~kWJ;b!>U-@mx_59VU3pf<A?8p+gVqd;w_>Jj4v&UwGLd2>Ct
z3MB_aSmVb2_Q)$rwfJzb<o~LheSW`h3hte&hg|C3P3XVqJF_oQ?Dp^N)33H-JM|g!
zjRi|es77{iZ-1RWP3}Ye?*^z~hD`0@7b)Ph7R~V2VM`D$(om)^>HW#RxpGpwhl3`G
zJFLXgB*I}OZRAvIiZm@})ZvvpB@T{I(%oV5WxPF4<WqMyF{u*Ai|w)MEH{SGc1Y2I
zB^OWcKVSab6HID&WWAPtE&(xhubU<EL;y$QtB|*o9xF8?M=3iHv}fsBn;OTh#<km^
zA&+*}#r*Nh;b;DZViYWf#?{%RLO;%aEt>j^yC8;0{wJ7(O*iu9s_F%~q|)cwu~u&T
zvr8s=C(3<bWh3otf4F28ACi1+)avB8w~~8+GBb~S7-bWV=#bS_R=#4MAmgX|vrm?^
z`K8zP>)UkSzE<ayjM?uzLGBAC@@<YSCKw7lB2^##H-G0{v=)u)87Ee@A{*nlb3Q!m
znmEPHpsuHs8^r@^H>FwvyV6ao)LCW4?f{2=V5}x7JR(NAU5@2sp?Jvh`Li!?-guW}
zp&FlV9Cwd6(k^g9uXysJaVKX&R0z%P-?JXKfIJ`!bEaIcFa^=&<NB{+j?+70pLv;v
z{?DU9L8TMX(2{GAE^5d{(<~(~k1le;S+#%lsL~7s$TtTQ6BDPW9VkmBw6Q5;0f8{y
zbpT#|;uM36TKu4*@3ZI6zg?BgdCRjH5abwaWauiH)}*)hV;fLZzkUhQQzGvLC=w?p
zk^%QE`l6^Tv)YrssixI0mD6BvhpAq>b`3q4)m7=M`x>=!?%z`K|L6f*WOy#<$T-f#
z$HyDpC%5M(M%9sc7&VH%EEDXn#DN<R%cH(?CMHiD_K$bw5=u(YbD-V%6XZ?m9dq5c
zzZ!b<jhfPv<?TT=htkOEsv*2^T(SPg5lI0v0+}T+$LG%NA|oBUv5(bwF8W<=E+743
zfHEE#Y)qoN{t#|{w~y1}MS>HD0r(e1&nX*+*1!=1RvLTrt9Osjo}kJh!m3ZS(hgH!
z;>F}LxxHy>-z0_O%u|3JaGRiui7SXiiGE4BuT4ia<8V@uJcbG-j}VRtWOBQ7)EVJq
zIyyQKUSV-XVNDfC+3Hkee%mf}ODBiw3v2;f@i!kWZ6-Foo}Z>CCE+=!&3mEELr#Y*
zchVI3tS<c{Po`^iMCsp5l!vJThO1Q&k8y}w9Xc1yq8O&`nSVL*uQmJuc3J>)xFEo%
z4*r0SMLWZa*{5HhDrqix1O4Uahfvl-JlllRn6Kjc<JSCBTskHCHTyWAKM<?J9yuSD
zPR0p0dRAs8fa6B(beGd2A|mh$p_A4l{^TYOaZ<W{uEn<INn=gtw_W54eek*Hwze+N
z&@BGfE{%lW-uM0}yi`DPzYz`v--42YrOQppV`zwUT?41)C&oC_1?Q%`6}s@XCMSNX
zwxmSA?>hZotfnV4)MXv6UPWcsFnFEiM85v5j{4FmTqEWPa#E6CV>mpM`N7_1$dqU>
zEv<V7<Km3;bePH^TQo@;e0FpDNe}ML^CnTv`|#_+!aQ)T&Uuq7FZ=!EZ>;|%B?Wc@
z;rawdGUdh-K>o5w7||S@GA_GOb0-Q1M!|hg|0LNgt@$wKF{#aCf&KG`d6J8M8U9at
zN|*``fV9`-K0?aKNFGi1MB3#aiZ14eC*0K&iuC_2{bBRlkEY-8ZC>QZqG5ZOi_Xqh
z$)Ps}9K**xYJR?zeOCZtsa(xrumd2o0b!WtePD0L6rh!mwLZ!Rhd;CgsKXN`Auoom
z7Ay~(`7i{cN5Qi=p}4uavVzcOWQcgyAEYG1$eqPmR2Hs2KR-XLAI{EusQUofL^P05
zv4QTTa{Xe;fNd}KGIy1f08aB`Z^Mcj&@$TUXpp5h{T%@`LGIwaJS(o)?6EZrn((3A
z>Vjh0tVzGi{kUO!UHK6)D+n^w7z?}tyz?@DaU7fc9k7Dd5Ugxu%Z^frb_D66``*b)
z2TZns7Pm{i%^#q8EJMc+Oa$Cn;%Xo|30}kT1;D?lTEqr?ISpu=CZms1=Ju}_2#mz`
zC$VVuUhFuQWD{FMiLDq0eyA3>_mXkOs>}KOg((>>f<*d&*7}=^1>LqvA-l$|ZXpQS
zp_9d2FR$stW}d~PX4-?&w-LkEW{tr$I+k?<1>sA&1Ss5nm+o8QG1#r5`+y<pJ=SVi
za6@4ZEvv7O<WS8qFwjO4M0So|1k=kW<+|>SU8IS#wbukPJpbIA*gq9LJdeinmCCff
zvHQnPh74GoO!~L#J%jR~zdsE<`bSF*NE^VT^4X!c%wa|BN-8haFt)H7GaUY7=nD1Q
z@JmIWu>G$3lI~X^hJF~cWd8%RB$SJdV`b@)AIcYvE^9m=x1Q(K0ailHyZtsec$Seo
zPtwDBB^q;C&(1*l3nmbtz!ZX?dMj)i8A&iUMJxO*B2L}{xI;?eIK1~wFv>`29;tnb
znBt;r?yvmLfVdrW4rwk$2e8E7;k?Hoz)AMSt@6BxIc14HmOu2z)y&A1{lhdBvO)?e
zQnKW-kI6*EcU;;^8bMH3j&4!6tvA>r*S|fhLGE?r3EzeWUBddGs)m97{zF0F$E?q|
zH%u+BsVm@!fp!E@J9|Yk4N2BSaw2M_n29rtElzBC$<P?wb_Tc@JrI<8$l;p%=sEyy
zYh@*{{KR^kkk)a*5-nw;`)dC#>yF*Ha%GBrbDkJgTy%B~TdQOm?g!DEg_$D&e_$Gn
z46^Gw>HAmOPWvKoXqTdUt5Xaqnq{~-fWcOjkqJ0n&#eK53nuY>4I9|R)LcxGKmc(3
zN!p%QBJj00w&KOwLtVnJnHkTIKfZVU&r_|a3q_w$(Zs_0+3z9ST)Cg)`3=uCP9hfw
zu|Jw~_+-bc?~dx^ud~DPv*N}>IXz@a(%2!HqJ^Obs&ja}^%!yaHFvArquKvsYU+v#
z<tKKP(2^3=Cx})7O7oo>g9;J`tmMSlXwgp@`m`-BLR9!jc&>H1NoW~o?yu!FjyK=K
zmBuaT-@Vm$m1MouFCj6;;haeu^$8%rtAd7^@7s+}VA#mWiS-@q<3J3JYRpOpXQ59x
zagStDMsP1~Jj~FjwsFyH<4SW&jG_(yh4W?f#puIF{7LVM4uU_$BF3b9Z^f#{3_&+B
zNr9*S4F%F62YEyaG<%thZ(qM6((1)rny4B=5Z>9I5xJq+S}u<amRR*hNwPn*F@vZ!
z5Pv1_yMDJ41A8<%u%~`Hfg~{rkDGtIARw}!yYw;hiPu{T)$YREAF%)7Gy+gihEAaU
zJ64miHx;GJYV!|o+;n$8me%o9b{ZS})k@ZmKaHZck*dQWR%}mp(}*Ki=1|R+WPOk*
zSsTK2ALpns;ik?J@n%SBARvl7{NV=oon|e3;{N_MKwI>Jm}%wE!p`-*d@VaVLl)t|
z+PGJ5TVarhAa`&=8X7iHHYI8Dn7(o&@(gJAdTI9<PwX>}@O@#b^Z&E}jr&#g7!3`T
zBSdaSzr74?i7hg>S(idj%4<DX7#4D53b}hA&tYo>rmorjL+y;XK#UG7Ec;Z7Aj7(E
zXz(vM2~&qf0LiKqwqn<RnWdivwpyx}L|!&!tsD?%&lmoguN>KM|09L1YXXh&J88Dn
z<2Q)tm<vzTzxgERnyBevhzbHJdfVgUyrzeOvcvsLr=Z1P%^O<7wieH2JP%xItiI_p
zkXPv7?!%Iiy-++N{YAOx<%J_Elmas6Sz|eZsM)VeawiR?m;bg=yQ{UMutoa6rdS(0
z8tvw1m6<9c#BnEu^d03<#ZE4eNZK>ndH*C(lHLjkz7S2(>g+=5vLv;$jR`Vwa7%B0
zcs#NFyz$Ti_0JfE0}5YmTOrH<c*$M01Hy0jaVRgXdSh?M*T-!XmP;wJ_xB!!b`Yk)
z9}r8y$svTKS#*ni-VJP(?E^>yG~%eytUW+_?nfxDh;^l7(Y96fV#m1#Fi~91OC)i&
zZ2<NQ2WGU9;K+oC1=X<>+n>kp4a%t-^8i4=_H?{FMKgcs>^-|w8xw^rI$sHT_lrU(
zU?8umF*{+WVDCtBX<sR&;{#^0TMM4Xnm=nu{8a<9WK()9Djf#Der@!=JuZaj8&488
z_P4Rce1YxN=_Ba4_K8men=x=LkQ>~u54_~&tgtCHZHseA5-(()xav6UWm=17vpF%g
z+v+-v1s%D1H!W2WSDpU~H?_M6CF%J0hrv|4$(v4Q^!WI)ckFvNalsTaHm<`M@a5fB
z)$>?;Fz;a<EgDk(*+mROHPFg>CiD8ISN<tDSv&wiQE!4KG<LUv!Bd@aaq$B3?4+I_
zZpiU!x!`!nY2xIuMp@ZK`~25$=v5FgY0&>6PWE6lRvNs(D&dYqU^EhP4J9&knqN?Q
z+W#&YxVE{m+@L5eZFMh|*UR`ts<{YTUp9p-z1L$x)BeDuro6&EMK-z|^r%bW!9F-R
z^GulV_xR2$>--uFMQ$DeK#u%O(m6{*vQvjWMXtYci{#mq<w51`@pDN=W>N}RoPcS%
zzo+YMf^KG<zHDLHXFiwt;`>f1cMK8n)jKZf_4?ayKKXr@MvHOjN&ufMgGWipu>6UC
zU*~HvNo~1bHaL6nm3;+%Ow3cwgmIqQ^umNBQ4_Q>V?i#(pwEqF%D3q%q_ljqja##&
zmOK8B*r%y!zKTXC!b|xxeR6Rg1r>6f^cD`&Qz}(z<yW5%k8c|tA1^4d>$Oj;+}<96
zWgIVc?&0pAaW$V(!XH6(%FT~uPk!Ibr^lJwNWxoz)IpMFbZfUE%Xn@mTPcG5!0Gn!
zIq>y}?U|Lt;~F$R*F;&!f+^l4E>zMdm1U68PzclUkf`aAO;Eb7<Gk>w?<jTPU(-hY
z!2Fb=9}Ipk-jZ3c)s{A!j}8w9&;u*ecnPPpcjvOxKz7H83QwJK#F_Uo^rZ75_CLDc
zM;IK}PBC(yVV%ukwUhl2M5bbDl7zG(LFVo30;0W}pI(D3qAvQuUcv>VwhODTzt)m%
zr&zw6%6m#s|CW%fT0;5uSj|A14~paagbwX!ltw~;DS5(yGQKb7eXeF9^jw`1mHvaX
z%SWTwe{CqGsH!FT44;!;_Yi;Ys!gx@Ab5mc>egxAGyRo2Z%zeA?u+NvpeK{+D=*+0
zem0X|_v_^ja<_c}Y%WJVr>ycPmkcW84@U3aR#Fl$up=dknOh^Et$M2Vu|Gvq_#W!e
zpMV1O?0j5d<;)4$WY5MSADdKOBQ|+d?=foSv&?UEtXQzBA%|0(6{-?!vI+a<$hJ3L
z(k48K(mQX;d|mm=wgxU!CHZEVbhosP!*6#bQ3Y%>lrZ%#We+s<zS1o;9(I|HP0x^N
zf8=wTAG{Y14Z50Fr_k-#ZY>ovht$Z7%f@r@(rVA^>uK(7B7~GWw-l{eihN5$!<HPf
zU$j?mre<a51RSRpzDKeAfbl!6z<(bc{0^fUxS@NSmdsW-d9C-6FL|=Xwo#5E{iL|S
z0dSi9Q?@@3;#bCeXzT`|Tw|w+dKmwK?MjT)GYDB$p&ad}e-DH<Xq~hn^LtKx)?J98
z2kTRc?KV5Sd6f=RwNYZ89haQpN@tD4>~~B4SyaXnq{l(OEkbpGoA3^0XhTB-J0)4R
zWIcxV%WF|1SeEc-5$NUWT7gXu;a81zsSY8A?Lc2*hw*LL9PijaR|rllBt3H)jZa^f
znGsoe0V7gq5%{e%vs*OyVubcRlZ3(^a#VrzlC)x#^f!?^Fa9CDOkLsyDM&(XOZ{EK
zTglQKvSWGG*&{yAEB`jOeDi?yT5c>P1Eh}<L_{U;SFNywZ<Br0i9?kkF670RDT#V#
zpn%>AEqx<-$VL@hv_w@=-4sfH6&)M-VWs1&>_x(9)m*zNZ(i{lmJ#L*AcXtg3RNGV
z3^+|sMif5^->l<*cbf8Pe@2v2(7cBrWiEGE95+<6YO%mEp7OkKp`~UwRk$#2Z8y8G
zHMC#$2yIKcGb1Hq_xrTL5X2IcmlAYrY`US{VU6UfSKcFFQ2v1M2DI<5uXbO>Tio8j
zaEhS2x-vg9xITVNP%WZ=Qr+&#k5_2ar~9Yd6k7$gqWMm}1FDK%dtkY=c+1Pm%4%yh
zk4e#(hTK}4*+>4DCgb>@dQ}a3&suU%H!^7p2`L8Up6xE>hooYiFkK1H1^CjFG;oGg
zhRMY|CM2*}<{#7Xg8RH;&o^EEa2T|9Q?0adD68Le4sp7{7X$zf68KjC`HuEdH=}DN
zDjcHr9#WHyjSX<*5t+48YEJ!EB%Eu*rRF5ne@_uM4-7r6-uqxY)?Qk#d3tEbpW)a_
zScw>a_x41>4+Ep3Qw^8RTiVhya^Bb^HF=*hVNjtY;Z#pr?H3j}{`nQu3locw;PpI3
z2<BBuaFGpi2`$BTra+4_M-0)lJv(TQl49(bhxZ>7CA0u6EfMYTE)d#)52H^70p<kp
z@>-R7ACUDJ>BqMz6}G)mhu%7-;}T{eatA{w{-QK^{`__jv%b?x^x<&87obf-&qr7(
zwh?Din15R#umibv;99x8QCD2e9oy8gJ+t?AI~|%DY3jUv`3o$5<)2lT(U5X^FzLc7
zFRs1#`}b3TY<2~>P-ZxPObB#KJU~7jmrH=p0x+Y+RfuWsC1{U=#01JD1So~c`9gjT
z^rX8(Ip}ZEtC*>naZz1A`BMhQ5&ByjU9L{DIfvZM-6b=q0@NwzS5@_XH)|78v`!!m
zAu0W4j;WYp#L)5@dQ)4OiVxf+>(+i8%PeAM5qu?Qey>HsoT~QtJcmXcqZ&wVKI<z_
zx+Wr2xxk3LBtl?$XDd#o{OQ{_Q1L@QwPc*Sc;fDr(kIU!7vwym_4d!KNB?xqC+{Yb
zs3i0_+biGt9BsCkoTQUA{(D%PBlad0jfBu-)cHX6rz>B+m}2$#zVUv{@$PVGru*cu
z;O<L)-8H#W>f^1pWXeh>sQTVrvO7~Ih--kE^tCD`;(#4%p8h=gbgK;*0PAc!#OvnX
zlUbfoINc-id8Z|-*MF~iY>FHxm%NlZ-Z0o_UoyV@GvAu6{uHB{b`J_1yj;x-g+g;}
zSzh7Lg&69=L8xJZIG+dCL{k{VCvfN9c{m~!-=>;mv*L0k6)PJ~nT}Fq#Z*e`vME~G
zV`RbHl%%%LaZ^-PoqcEogc;T&A9r_(9NVh?L>uY&Hr>C5^g$p^Hc_ynpc`MjX?iYN
z^Z^eW=kR=W*Mt|W2gL?|Q4~O%Zu!guB6SGnB2OgQ0PcqIYN)lHtO1|!TOVIT!^qYV
zAUati1Ij}5-g?MIwOsh1I8Zr_{u^H1wn38+6a$mnhVivnia7NM<}j#_F^EjE(JP5y
z@M9#sn6Bbl{Gg(0s#b~y15_;oxtCnN!A7j*G|p+)s)&PZG*4BqqhcC>b+O^==g&KX
zRS0)?dNIpn8S@8)H#2s<42+@8`FY7&m-H5%AY3p%d<Drg^E~C9oazQeCE@zHGhZ)-
zJZr!B+^|(P;MD8>ORCB)Y9|;KnY@SS$@S>@%@v$6#9%zNv&voXH-9*Mc;s-PUqJ9K
z0@>Oo$~k7_2llA#mQ;1jzkIRlxOKVgg;;a*prh_Ft;!Tz<{%6pzP<vBwqQ!e;Oz^!
zD{9{i*^z;PqaUVv=v&l#ua=n!H;0i|Wu>RXiVzsMU9``|w(}XU5KmJ}%@{3@+a&o4
zFm|X)d+q0T-C(0AegFiV;BLbcBhN_Ja?cmOKHBzsY~<#dZms<~>DgJ2?;(Jcs5u8}
zMQe>$RD;olgORFbWZu3)vr9u4d89+qS)8Jm$&H=l*OD&YJ5Xpn^zUJbKzfH&;PxKA
zkMS8k8dL#TMu=Sy&}qSzaC7@JT{UQgGRy?`3YKT+jC<@%&HWFO<kaVOeA{dOKX<a<
zQEcGnD0lt*utq5r{WHm8r^qbc2T_>C285%#5Dltphd~oVnC_(b&1BKs#}0L93r{V5
zcciQ+&Lu!eM^Cy)Klj-2_l_mI{y!KGhv0xyZDDB06471;*{5>i3+-Ifhc9FR($hai
z=XOUl2&?~#uRlprO|Z9~-YymCU*`Aw$L=EN?2zb548}g$^Aw#y@aoYs+IQT|v+e7|
zF*aHxha(T;eS(1kj-4ohlp>m)jQd=xIU^R!yx4tLthgEM#95(E3eOcRyR~d1_PS28
zBk21-t9uU!RO9S3-+t^5-*|F|lO_?*{iMrdCF20-2C>KCmwe0lE0O#JU&J>5!%s!4
zq8o2K)?mFge`SX>K|^0M%?BTE%uT2rW4oXjRW6cO&PO!mdlr(;SqHxozQ*Z%vzox5
z$1%ii-lrC(qwL7JpD&0$Yw%HtRaO^YdpL);<u5(M<ERDAgm;OtPEu_7yTE0%GIqN5
ziqwcv<G^pSJE9lfT9t6*`ka1Hw#o2Ho$RTU5zQ?t6C=cMkKGU*-a9d74XPZaiJ{?>
z;qY9J66Hr2>o&Eh_dLB(ldjGU6$l`e(|6km*|2`(5>P1f3>F_{sH3lRID6kvRiQ%?
z6$2LiaY4m8?@Ynh?~DGdzd0f0fFaDY(09lCT+#3sY**L4HG>E%QEr@~%LL)dSJNY?
zMcqgRTy#ii$_z?6YcVI5a*w}B=e`{4x)#T+VTf!M+thJuu`M-I69@Tca`$T_(UBaT
zr|w)h^K!(=Kmro>CC>xAv#?+wrj{z$R$McFpUdSZPSsL&|9d-n;dZQ_i-}8!Ykrg<
zpJNv7(2o-^id{$ZZA)4^6|{R$6evB-(J2t^6O3?Xw=lL>+WmEE2@CJ{Z0)Jera_FX
z0`Eg!fbFu^9&xZLlnQhq$0=hB4b9J;!~P^Hc?5a&(Bem8GNckJ*iP?)mc-m+>(2NW
zk;{O9=Mn-g2ACX`ngM_b>KS4#MU5H!fdJ1!(axZvurd?~g7sq7rkSCkZS77@RAzls
z%G-3zZHg9>GcX)B7DyB&GZyzRLTnyd%OHcIGY3$c=Lgc@_eUAR{G&oj7?%_$HFILs
zG-2~lN#8Zjm|ooO!Q3o$kefq{4Idwvc$C31G=I^%%<)-?ZZD&@-yi3wOphf}iVZpq
zq<@HOoA=Q)KNbYS_+xCk{#<yj?#6)!TpcH%iu}q$8DN)+b6m_O5>g<G3g^oEji{Q)
zu8B2b5ovIoXExRJ{4c@paMe1sEnhn-9PS80@rcaJiN*G~(d6~v<<54;r?Az<4MyiC
zmv-@y2bK&*+h@&q$e|#GGAho-&efGCUSp4nqf55YeN4A;z(y_@k{YSyFpD8lo__43
zq-OiT=hk!1YR!A;vmotMc%b5>gl<`L-u`B^{E+!uQi9n4KA^^XTk)S;V4q%l&L)J-
zV(M{-@<mgVvO*R*e2!;|jqZ!C;t}t-)KexH!oMu=Hh<>Rmv^!#yEWo$8FulrOFD0_
zSQ!{N(3y;;V#%J?61_Cn%QIoKo%tPtX<B>aLJz01aLn>v|Iq@M=fUVR=lC?@1lwig
z<PvOF??o%9*pXpq{pit_98QCq0gI66ty?+agR^)hq_}SlKUM#Ee!FRs+QqwnI^s#q
z<Ou#gWP{!bd}tQemL8v>sq@b2I+lW_TqiV9m~a*L#Bp=-1HWZpIPmo=cD|<e?-0#Y
z*VhM!FtH^e2%2;Ur*_xWyMQ7(HtOO3F$ScO6t)ZwdnLtisuC=Zve9;Rb_Ug`ZQCU<
z7j%$qyqj>JC87lpvLjOOY#>I!jRrLeA-t@rs<oB|Ml5)GiVe^uxZjKE4xS(gWbh~z
z*kOvN&W(mfu>mpy@$Y}2%EZrrY9Om?j|wYM*T}!Z4>|95(O+pe?v5s504jGd(DJr@
z;#;0lOhs%so7y0yad+QKNe0Ji=~VU=Tr!--S66Rx#d<*9M_@#Ah^5<FY&Thsv0#9M
zWjY33=~A5BEYzhBAA%%_fX*1tcl}7g+=9W9-fBb-h*7eDR<j=h+zcHwjPv!O%RGO7
zCueq{vR@!ut2qWMqrSq)f$gHxbpJ3<MT-g&aJDRm{u6^{eZdquNXIe|pl|7Uob&N8
z3#z%>R%ps^Ic<<)Qa5n>Pm+FBkw#I8J@R<SNVBz_p0pd#NN68T)C6)KZC5)Y;1$Wy
zE;4FHjYPZ90yfhZ_YWKaCPQvy!S;M`%{{4GO)KY?9s69zRZD*C2^|tk8m>O!;Z?{H
z9w2xs)>bN;j3JEd!dvl>3e%-uf=G{ZF~|5k$p)S``wG)y1I+6%&8ej*PsTDByviaw
zPEj%k0j*g8pYqtVbD}-6!YZ%7=JFv|Y!uLr0y}i1UzcGfj9-Ea9u~ZhXFcuxEP#Z6
z_8u1O`T4UXm*CQCe0EP)f1r=}sn$AYc8t}V@_OpnT5(Q8B5v-b^c1wPjH}hGB-S`2
z=YClHdDrplQ6}@ydE^S=u4;S+uN@|kT5zl$zfo!?9LS6@7qkeF{)Vx=`}pYs^j>JA
zjgG1UA||@-tC;?KFJ1QIT`zr)hk3~zm@uGjRtg*HwtYDRyU1g996K+Un>;ZNDrNg6
z9hC?%cC)Chp04|~DAhvRbSd+b&|!~;6#m)%Uv(Nq>!5%X`5g01K!a!m>~|uY3nEZ*
z3pknxOJsE^`fYr5N+-$?vK78dqe1Jtm^LUCwfJcB@1yg7@x&qW=bDKT$|*hx@f@Jv
z%!F~>A+s_`a_EPPx7WUjhhvL7a}~0;S;Tn!gBpg_9NUDY@9NlAAQin@ti3=^-fc-(
z(fyF%ho|C4FN7O8^JLo5kij;Y2_tAJdmrSLF%=jW{;Z{~W#%%e4wdu#O<DT|F2|cU
zO&%J_W^`f=3VMPMF>tN<ys};bq@r59+iz_<CzjADZNs8G>@IV_(2(;}&_5ScD>-Cj
z5T8pC6)Y-A@bhklD6W5B>{1NLLj@OLif#ikj|&cqHo+wF!ds6K(qm$}gSn;U=J4JI
zV{>!zk+6#FKRuX$-ds@COCT!CzqrUaRG3=&EcJf=yw5)7Lgbfer1}_W(Zu?Sv-Z0B
zNU?EUC!yG{-GihBmJ=~ywWWd1AvdJ4=nf3rO2qJ!*lJeXTz77DLa!h9K}fTg7c`p0
zU_(5IKbHU~-t?XyCU+%0LbUrqst&PiM6L(4ox4=tOYi;G(tlmm)JQL{os5-j^k;e;
zGr6*hxkp5UtLAPsz1Tz#LE615nDM9F!4BrI1_Bnk@6A@BGul1GjN3aHCOkAk^s&ox
zRIIV;97hg?U#J_{7?|~?;ETsV<H-{eKA)e}0f&!#f9>}8qVicLHRab$Q5PlC#ujf1
z%<t&(g;a2Dhx^_hpu4$Q0hUJp8e?yRVxrk-SNtBTV5}ct!(M>UB7<!ph8rPA5Z&~-
z#u8o-w0iQEwsCOwi9aMxg$~qyY`L&oXhf{`q?}iX(A_qHRy(1f7E3$o&|Da{FcZTL
zhWi8p`=C|&hma|h{}EIFhHHjXIT3$Ms$=)5GV%;7WJRyDQVLSw+J<EJOQkmDt>!w>
zV<d%b)Gt<|%P)&ia`sFb81@#P&O&S5=stoSN2EF~E#hV%&iG{MC0wY;Nb&L8Sj^!e
zf^o#>-`@&u4PazNS@1cvs<}0wb5OH&8i&vM#qk}Iy1&l~Gfe!~#<J2t0=xf($<H@|
z5YygsSIp`61(nxWl%%ThxXg(`OqJDzzPW<WUq;3>qL{o-yaT9q>K*QGZfvc$iqdb0
z-$pn$&HCiq!xV6>spLFHx*s;nEj1d*)0DbB;&_A9j!Oha1~L*0LZt(A<7m`DK`Y4o
zoz)4dc*r9cU;GvDmk;qgmZ*7aE>(+H)MZEH)Z%Kkd44HljajESI(3%!dxu!I`%$~F
zEN<ru!7#hB(nyfGyID<7D41IVij_o7<=7It)LcTa3bLV@XkW)XEz~cDzCfKDclKS+
z(fwEZcQ6qsNnN!OhOlKqIe!PC8c8;UY6<PdRc{2OLNU|%td#$7Nw5%V7wm`ys6BBT
z!g+c`%Z!dUV<Sww5!VMogxeqX?D%5%mhM41=UY@E0HCFHl$Msl`TVrs;rHC{-;6?#
zs?U2ogV4F60{CSZ+c5)}sWub7*jD7v8treJEYzyms-}2`>ETrEOP(P5WcofP%H5Pn
zuXv(H5N+ffIwcjr(P`do-g@(j_)Mp{Y=S>jJd($%h<&fCeGgHwZ@G!Ss~?xQM=lX0
zK^gz9N<s*P7V+n+P+Ko~%4;Q*PTB5z{s&D^an^1L2DMnRhXyuU%{%*auXBlhK;+Wp
z%M_{(XwZH?fwFmmoNqD+gF>8DtsieCf?qT-XR(KuP`{WgcHzA{rA&5-z+0<18c8X+
zC`X)2TbyuI5^4`1tJ5U_tA1Ye^+97!Ep7EL`(6|^1iQDZy?;s}tLQQ^GWmFSGPfPp
z4pA1UiJH!zXMrcne>+3k4Y-=Jy3W+i!4n7N6Wu?Z!i)WqV~>Q|1&Dh;+Ujro>!^Pi
ze@YhOnSVk>XceG*(c8=P%RPG@>+kFRdPh@?1$Pun8AdeAW}4Glw+zpF;BfHiYsy;A
zhym4!1eBR6Z@Gk?C-4-?{L3e4{I9`C)BL6%apWCT6Ef?=O)2kmdfJJ9=M|HWOG_0T
zl-Y|I7Rh96tc*lw$$K$Jo;c7-jQODC!~t3xo}rFQFk7cxf9_;{wntorvZ9DL=u@S3
zn4)db;_5mm0RWxjj0b&!jmgIEp3@hfe9D5dQZt`4vs;u}jPEk|9%z?;?(+S!zPe~8
z4DWT*zMP8*9ycb`B=8Ox_@j>nI!V4hCb|a?(2E`Sw(pm;y*8KjL*VTmaqWxdX9&A@
z^j&34|2i;$fbr3RIRAr9V!kxNDuBhuq54J;Yo^>y(l#N3X?TE;;E~*p<_~7!=5ndz
zt2~sXy*@Zo;~cNft(hM;A_e(qO#C7CZQt0AU);+oPj)h;YXV=Lm+}SjEzjKVEmB}T
ztN-wD2DDswQVk7Z!w?NF{2*<#k6ZBH!CW{ft)jOJDH43Y>?2w!|7=ko5CuE!*6%t1
z#S$W?6wdUx$<XO8=vSqvaa{dzGdN}B?WL%rYYO5+sl!q;SARBovDx4Fa(F^0dE?{l
z7FP`^wt>OHy)bUSopcHKerOa^y;Dlfa;(L)hK4Bfh1z9gWFX&Xku{{p`2{MS;q(BG
zY*s#78{?bj$4wrJQyK-4@SGl*Ux7PH@2Z<j2J-Do%wQJ?HDvwtx;i_{dPYf`rS)b)
z3^FiLF~@ag5&|w9aO<7pz}m%;VO5U>`j~oQ&n=4GoMdfxwRi)$YJ)hVCeJt~k?xA5
zE%%x0y0uGm|M@@s`JK;k@O#<H?kCv3&}ZovsnR6Q7ZOZQc1vPanU?n;kr(>bbpQvw
z<hvtM93AtuN^eNo?yMP1XC4!(4GK=Ofz6lLA%kJ!&)Pp6NqBtrKB*dsB(suTUydcu
zxz{Wq6{#o49J}7^#KtzR)Un-~9i~Uw#b17`N!Pgkmkl9K6wVX=k?`^$o#ck}8y@95
zT6RvhoXT+Ukm$PNw(=f?fdJ3M_&B1n-PkVU5tYfXPxbva>-hh)06Q!LlsNFfA_*_L
zHHiN4Q;051FX=Jr`RFB$sdC}dU`IG8?}<l^!w4doJ!;*ecYvdhbLZ%>F?nT<-yM3d
zZe*2lGaRA52#?IAZGWg(=L`hkUPW3kSOx<0wWYEw)I~ld57Q`8S!Q_fchHbzp}r)x
zuf0rF52nMSZyMu49sp>ZxQ9Ka`qRj#_Jxrky~hE}*q17&u_+*wLLd>-YTw|^**9<A
zG&SAgpxnw?dS{3u)5krP4#%nR4U`YPA~rPeT%bLODLtDs4jBYSm9a*scQo^1fgyws
zRXibk_x{2Xau~=utus}f_L=*^&SfZp)7iW6KYu>XE@OHo8py!|FPe9wo<~pRG}@+)
z;jJT>_G2?~Bg&<l?6<%5;${FDAL8%M0UUEtU9r(Z<MdNUhccFXXB2(Qg?UKI&<|nV
z%r7(2ZN#pdqD8yo)zzN``uv85JQ`d<^k-vuKtX~`qWd*Kck0}|x|FJwgug1B61z{M
zz<uj2kU}bp2laA!u@yD?0u`n}_lQyaMYUjK@}G1W*iN1n<PuOzVeUa6u!l+9VNaMU
zTza{zCq{D#*gsa{A{Kv!GKS}(QOM#m^hp_k0P0p5$O_`1x0Otjl2fKr;;4k`5#E<c
zO>tHvX^U2#AVJ$FbOR282gJx=jk)pVdaa?sIIJaY)(wLgY)kpxGCxg868MW4a)D|h
zaf8mw{m<7Eo|%4|lT5bRPZ+kj3ni!uWwsnF)SuT+l-gJLZP0F`ZIlqA@W!M>zqEK>
zEJB=BGne4R7aGj*@r1~1llJeY+u{!OA3a33`tN0m`uXzifo)Qqy~iH4mT^}lN*Hwg
ztHG@ZG0*zJK(p`_mf`iYtc!{IZ82wWe;uPRWmH>;ihG6>i~fZkttbpg48Hl+mYz#W
z)F~W$fXUz3cAkc+CuL<^&YvqCPIYT~H=^9i>S`}n=MWZ2c{bd}PTF=KzRv{x1%-qF
zUz5=@3N~XmOunfvTuaUhg8y{kTC*rs@Czt=pIvzP;1P$cNTTLKoouhY;f{5ie6keh
z<inFvI>?Mo)V$1oE9LB&`qg&kZN%45Yn1W&ekXrI1T*U6l!DKbF2kP<cj{g`6em?>
zYG#(OF$EnFA|ar#nasg)BOy0BKc7cq*u^~hemGA;N>)~Kwo!HI;d`yScI{#?KIMzd
zMTM;7*XMW(cm`t~p{UcK(?HnO#A1>Sq8$7-kz9uz&APnW2jnos`F3=5Au0);CzTuy
zSxZyX8*CGZHrnbSLlC7gmmj7g1D-f`=2*!@qLQ=Y(ixc!8=liw;)<YS>FVmjjJJ3f
z)3PG>F6PnurBmN(T~G1z#8*~bAJnP*r&(=wzn3UcB;t}UUp~2@-BuR-LFpK4B$T7g
zqKJ~Mc>H*%_8R6E9oKyq;S0dg84QU_<tBp6He|Ah6stjS-3$)*+C9w7%-FfOM`}wk
z8$nRs<HwHP#1|Zf@?AZy<|m?2BH4<UIUxAe326|zgxB`B5T`QlHCqq!8OQDhvcE_>
z#JorOG3;pgi<2(gzmlr)Z-_BhNP+fV`kDCQjBP5f`(A8f&zx&Qh^bz7tI&@v)RCrW
z6&MHz2?^o$xT(xTqV;Nce!pSrBQ)FC<ver+6JF>Vj*stUW`+WRML;`(jqj+U;^y4<
zX48iZCFiYjjEap8w8qx)L*3pvP?uU-b^1$f>0qs^?8LZ>`RV*$EiJ(YKiOvo>JBI0
z|9tfgQ@k<AQ?Ip3UB0|r62V_O*09=vBLdu120z;$(Y~%?x!s+qtEmwZ_F+LQ<E%m!
z+Uc?B)xYD~f8JYof^kH{N{a{@#L;}CpMWQSmOmEAYXjKUIRz2qsLju#KfL<kb-&o>
z&qCKnth;Mc1-X&Z+&c2)X*|eRc5`Rr(+)!c3;e0RIF52(>vF&Saw&5_gB~5aGpVug
zNV!fWJ+m7-boAIU_r-DTW>E-uy(MVNZ1PF+6Y{#S)_r_<PX9C(+nI0mV2t5Zj4W-o
zyl4N+`f!q1@Z6~pNrT4!1lTMM|E90A%X@Mk(7us~5W5Ofa}$$T%iU5kGT~V|R9bP0
zimv9#u0F))H7fR*eBSX_l|bj3n3^J;6gc_$uG%f34{!qOy5SU!V8>v<wk{Z+tDYnp
z>Gy^yLalAsruZ8Ic8j0rUl)#L-Mph|;l1?~I=0Y9WF0S|7S}$^NL7}7;rDnz`urXH
zuj(8*HNQQq%aPG2qo|0*&E{xWn$Mu6vGJVTb-9CHnV0+jz;H86lQ(tI%1Zf_fX(k}
zU4pukCR>ks1JYtUCl+xCV~9A#uZm?pQB$mvjUwv38ptq$M=a|tl8wK*n(qwep-9L$
z<(bxnuEWF#hyDep9&w(a5~KT0Cqydx(4FtKKXCA%rl2rMJa<jpf%~dg-hA+Qlqwis
z#Bhw8+ofFaRKOSO6#|LnvlID2HmL<|TBSk$_-nX>9)@b>a~<1n{Q;_SECcttV~nQo
zm^V<&;ig0`cYeaCr<jb8592}ryi1+0hS4fq(0`*^BKV!q#gq6MpZqWXBOQ7&93fE;
z*O}ie)HtTb8z0*=2k3*XICjpL!{8mv#6qBva$A^@3dRTYuzT$_1cf<o)R>`Hk|fJk
z9%dmHmC$Dk3m)#JUArRmioR++H@z>ze_86cxOTZdMrRV*4;77R?{QeZHayJKs?qN4
zjs<703hQ|sR=$D(|46*%l(*pZ&TCZ=ca6-f1P7Dbeb9(Y8N<T#&}e_;?S$QJ3ni=G
z7W_Pg{NyleA>HitEWK97Md9Q+zfE5pkDK2)vE5waX^6^IFSSOuMp`=dj-iG2&V;eb
z@CQE#Evh)%BP_dTQhn$gfibW3mFqy2)~T^)Ux*o$In)<gwTCMmuxqrB<;h#xf1DT}
z=N`{|^K$GFLqvO+dgi%e18(i4N6321H+W(U&2?%4PlG^1$oJY(Z;fw43xO(Sb~VvF
zRn?=Vcl0%dlgZx9n=`Neqi!$5=4o&PQwF2^OoMV;nlt4KPQ}JymJuG6=4lU<pjsc5
z>_VrcbP8W^#`?8LhWZultv2aGpw64+F@9`)&jzilz=6Lok1MmPtG+YQjKbucVW#PY
zdGu$$I})n6#{v(zzYzA62zyOJyz8qqpPR@pq@J<};h@ZuR%X2wzh8^zP`5RCjZ|fl
zIADCxD_T2;&aS=xd?1<C4=Jof2l5gOtYpffSl7Bwve$2JtYOhipe5t1U}5-KeC(oF
z@qFZQH#_Q>1(LRx@gV{S-n_5o+WFir^}VNHjq$U5@3S|$^c97a?;2QeFSAz}oRW{A
zeyf?uWB14`Wi-LZyZG`&-jp}VrY!r6Djd9invM3`=;=!H?-OK7Em(anlK)+gvBgzf
z?ABq~<h^H0`t!rkpl;<6jni#SKJt8#^Xzdkm(N<IC2u#*CGiY0S!zkE6laG$%3S~B
zZ{Vzcy5+-t(Sy-rK5<vyG0%67rMBC>VIL*0a5#63kNeSd4apU=`*3r&elzCJ=kGDF
z^J81``o}>%{nWuUwKPPN?hunnQc9ckuLK7cPsZTPiO3V*Y!@a`tO23T8+O_I9%05K
z_7r#4F1vj)%RPLvxufR{6i9CziN7qfwi;KC7}y(oPx3Pzd;0Q`@487$vY3M8XZ@GE
zuD+VhU0E4pN^q}8J+fAsv=@c=CS0iNvzr^Um_ffDNZwqD-dtJjLK1JXP<!0+V{gaN
zf-f}_JhI8B^PhQ*z3H#az+K7Dvl<p!*FEy+)$HNbxb%e&&K)zBzS11e#eQ~V#V@Fw
zx~{RVkX&u4U<7PO_y>`jLZccsr&jN(_vqXp?;h>v-!S1D)#l2I;Gi5$jO<^{|E{Uf
z-sYu7?34O!O!#dOBZ}SX@Qf4Nv5J3xAc^^4+rYcedy|#c*Y*~-*^>*rFJSL0cwR#O
zeBpLU-+sUv2I+9v=1qGuai%z-*k$R}pYT4~ZFB#^65^KJo{GLBwOsPDxc~V;<g44o
zHf3(b=}v6tirX5}#Fsi6(&9Ens*^sY>94QtYCIQu$v5ildex6n$=HGf;Z1GX@B}Ku
z21OZ#8R{LG`U3IVh5|KOlCG77qZYUBN7>CEZ5uk2xqE|lS)`|+O?PEzNQvR_P1PNI
zHf$2o?DAe7_HhlTKK+*L5?<^Rn_V5aCenLYU*EgCG|sR7SuzK0^<|3i`2He|#6LCr
z)ys?sjGh1DT%Kvk3zNS|mdk*}*W1#?pqzW`*$+w)Pnnxp-cy+)gQr$LHcKr>a(l&$
z+pO-*SEN1p&+*;<eFZrx9c6-iX*bOKb@pi%tDoA~f7YFC!0El_q`(trp?OAzfKxTA
z{W16Ak~f4J#>{T)9bIr3{VJkZx#A<WW>hnJF3vA<q7LF9ydw7>%llo>KmFWuN%N;_
zp2qms>x%9Z3(k|d$8y$pG^%-dq%HT3t!2q~t^_~-aqjujzkQqZb?Y*%*H_w?d0R!Y
z{uTGv&x;g$WTKN8g;#VmfI9+-af2z<&J#LVF0BpNwzfsHBQJ*)pL%SQmbMU><|>mL
zsFRo5Hi#`dQ6Gy>Go2!J^Bi(P!8C&00x{D#fjT=o&nM0PR)4h1<n#($>KIM|k5h6H
zvSpl-;v<qtiSO(`<!`)BA(rNT>df5x_xg-#I4OsFc1>U2Ha8M?wK-YhhD~n=AZh%?
z$qQN4-jf*ze=&(0erD{e@XGAFDv7O~x*1>*B&YhV%;o%ETNK#(yp9j)Uu<N@9YJ=P
z-`o(w&dMq$e*T32`PurCIXkca?Cl4g07fvVb$iGOGe^Ml>lAqNnG{LZ-`OxTYde9n
znr#m$O)9X3um3#TU}|XzWRO04*Zr+GZ(LFq+_+|&3i9U6Kpp(zd{e?n0L#@N@H6z1
z|KZ~w-vj=GEK>xoL14SMdf|zb;Wgix@aHS{)poWmQCs&0nLZqs(!s$7a%~HXsI=Ct
zb$IKIJF834MXf{)(*Ci{{?_k)(z7QR)fj4i*3Q(<Aj$JoKH}`-9Qr|a6lQOA*C~Al
zq-u%>%k4@BY#e676H@r$FgtU))+xVp>+_Z}U6^-26wcLNh8>hUA<VB;@!)muJ_^dA
zI_~9q2*`z#&uB_V-D9EK%<LE+D9a7}ZIrKHT-~3s_y7NmZX2(M>{;gK_Pgh2&#zO<
z=zsXo#^cs3+a7V}nso8|L00M<Yw{X8!>z|y;T3kMgHb16us!bNx9`gTc?b7Uyu+bb
zcea;WEmm#bavMiu_sv}tuSmMIu*bo~XuZ!vSzTdrP^e~*KKawjDt7ATn6%gho(oR@
z`2s>0=GjBZjtImignj;S$Dg{Ib@;UV!ib1voRX2sInVg#d=ncVX!wd4DTsf5Namu^
z4DP80?&h+UQ`X{*5{#RKM!M(-I^utAlz91cg^o|>RT$zp58XT^c+f)U8(qYG1AJHu
zjq-sRdwp5qv$Ct(Q_jT^|NJ(y!?^cjs;Ar}_weyhl!jR+hNK!4&+QpnJL-B|rDJ`V
zb}u{e&-qV<;Y+$*OAOC7WUDs4w6|0H8`CLTvBjp%4emz{&(;gp6PXSW|Kzsn&d?S=
z-HF>GXP!v)M0iZ(67==*K8)5AHcv)02+-B<UgI6C(qjy^Vj;UVyJp3bxt2s5(75=F
z5H8p*rtNHh&9u*z2zCiw6OM};IAlM5aY?egal-fGCB-nmHKF?v3VmnRxRd@Vq_64R
z^^p#3`Oh|gJG5m`UM6^cnMWUQu1A=3XW`FJDB#ndw~ceT@}*|>n<(|kd)<JEEqP{6
z@WeZPR-kTfIuAlfvnb5|DOxyZYxj5$CS#sfiLuRy)TGN7@xhfNOp5n{W*0)m8H*Pe
z#;ncTs?wL=9^6R!IQe;&%h#tWZkEJi*VY#=mBy|3>+7#y8EiX658qK4r1Ku6Q&FV!
z9$XIOpd=lnTYoZ3;md+hzbtv-`KkgtD;Cd8z9%b)g}OLzUGByfF|l|vti{zldYR*i
z2acb{a+!09{5RUmz<1^QwR7jY!lVkuvi?!a!VSUx(++$5G!EWe>*CFtYB*-*xAhTX
zR0V03iq+M=b3gx>P+(VEa7B|G4G(Ipd{upuOSSbDfa*rIemgHEMU-2j(GI)dK<DIn
z(HMQklmR16{3@+uU#v^zsE_X(qzyPPcd$KcOM)RvEfFS?FU#XA*NL1PP>hq?aYDqN
zC&<iWi1bmQipm~b*CB-C3SO_V&6D?)kzQPR-D0r0v*tg`R%4>FAnnkd*=SHD!Tn|b
zo4Pyyy(i0#df$e=DNRAdN`^GwnvFi0d5kS;N3&JKAUpMr<_)Dc`U(0Bm$Uk*Gp|lT
zZ~#4Yc<y({A8XH_X20CO7Qgd%F|BP1GpJX@T*n$<S=-0()WhvYG*1a<vL}n1RVLg{
z@(62p?lPAQJ=_`gV(W(4Rw{}o@IAvdk4$&R$D6RIUH6+EeR|;bMMYFS;(z27=e+%X
z-OQX_(+n=Kkxsc|^SQPZDVe4fsXF;1tp6W-U;a+j`iJeD=8jX2C`u`nkU7fiG$`$C
zGG$iE5E(LMrin5{Y(wTUhN8@~$`mrCk_=mhBpJ3@ruSZSzSsLFyg$7AhjVqEt5|!j
z^*qn#bARq(+omL(^x5(9e~~gtl_K>DoWSTr2pRUB*Z*!GP@`~<Vz9@y1>_BUlYnZo
zAn$;c$;QysYM~v$+h9uA<JzztLc2IIhc<$6(7T+df?f}-#Gs%<M}8TeDOhmIJ>IWV
zZnyG$=@wZ2@m+I1LM0;I(?A3^WQvMl2JNcv-8;FT`Kq%aON8m*`|lPkg{C`At7``S
z@}~&#9qARD(}goLurTfu%|zl1#%h+l{IHaX<O{1SOov<;^wY)(_&(d~UAAtVIItbU
z#v09ziDKMv%RFS6<+Vc-gG#Wv7yXg5b80X`Uj2J9fY2ozpKxFUXzl2T8Y+aaR=?_q
zRvu&I^Bsq_uk2WK`9WBtT#4LzExdJhQ3^=@sc+4+tjesn`_f?8(iTN&gyR|~`l%Mv
z>a)oz+%1{*CpAc{UV)hwb=e7#l9r5NGL*LC<|#YE;+XYX^;*#rl#ZTJX4>$bW8>{U
zrUDhx9t^)2qXSOw4`+j@{=w<q$w^F}@oGDlfcwAO>xo5s`cOlCJs;RrWL{q0iaN)t
zdrV51by^j-#8&TY`X0OvBsm_x6Xi{|;^-u`a+&YCb4E58x3IQa+qQ{qcZjm%?0poP
z7`$DMXJlLJp)^%eMU+Blulv|+2IK9z^+eaiy!IA}Hz52OldR;cv(&sMdujS|(D6oR
zj2w%buSP{h!4eWSFK`RCv3U=#y>bJ<pEL6qoZ_P4(bC<0$<&lPhTTDLrlW?Iq7aq3
zdP>|(y9*<V&GB#9H$)_XfYh$|{8_qY?$>YcO{;~;<=F}?!VhZ99W$Tkw1_6E3G>B7
zXT>b08L$M!+%w>6X?tHPEc*I+*E6B;F9B*fz*gIHeJgv2_*Oaob-Wnl>t{fZvWJZ=
zyM6fi^XD)uYR|=>1|P(>KrMw2j#tB5=S4SBDZU<6)~@5vR#(wj{Ap}C+{|)3@9oR2
zg;VUlWRnk3Y6n_wIFIi?p{mSOtB{v8$fFX71V9n{Q1x>@Zn?vGWc6zM!?bByo<hC1
zQhns1W1(YTFu%`*C7R7+o%J=+jqtX>$P;EoxG9ijAw_t85$*_3=;A#w%Ypd^#@m>V
z00gw0%+JDb(d10)|9wfOB-kEpFIRi=UR1B8i|x<YNz22`XK(N3PE<?a=2PK`u(M68
zP_xgR?(29grI^<{_|q^uI;uhOMiz_LKcjr<*TbDRlUov`i&at(fZLvDg||zKWVa&I
z)~Kz%SmwSsHxLV0Ylwa6D?3putw1Ne(n<|s;{QD~FFZ6AQq_z8tt3;D>JGB&HRXih
z?c}4;ZPk(S)S8#qM7J59>srinxN*(f*tV@KVW7?YlQmnLu^<btfB@*Z(A*IwUG9s8
z`UD};DF&9>ur+a-`1a<_iI<w7L4CNtX5|IeHK^#JYd96?6DLT2(*F3h`wG5?r%tEc
zPYO;N8aVpkK;-M?_jkfKHzm&N)GK(FIW06Ne3PSSS%ser%a;lvsi%DeAr)Rg%S*(4
z#!CPOAy_K-j#d^Ho%ou7O9?VBqJw)XWt08at}Yu5x|d>fi6Y)X2U)|Wx0#+5Kliqm
z(Yo#5vj_P0e<4Xm3dH6=l{Dg!P-+Oe_<_o|t75+3s!*eEsWfZtP+<%y5g1~DE@(}F
zUUd19oxVdr-`v7NG?LsnA=Q{=;X?2dMO*C?*DUJruhtiI?&idPQd1K0K90-h&Dq1V
z;>xz;&9=^J#%rvd4$RG(f2}Flkf6lbMDgq$U~5Wvt;=D~$`i|H?lhq$O1$`S7VROV
ze&FO_E<#A|IQ8RWOR^GZE!f2n<1CABiyD*F>vh!X-tda~Bu*}}@cd#`P^8Hp_6w~O
zr6%8=Oq?#DymTCYog%fUQ~jz@cI;GZ?T2HE^^v>0zKSU#TPuVF9AgP|eQ=B5PgpJ(
zoFf6)v`0>C^+mmI#DLA5ViPRSO-BBqogUV1!$qfw9_>I|lR^p~SIvgrt})+IT2QqB
zwLo6csnK%V)+a^jE<>N5<GkSyBQ)zo;<tmt3>uUc5kC0(Wwq5+fBbJD5ZCQ@<HEjl
zQxo+ble5<oN(!0_sPj9%eF>{*qy8%KnAf225(8<}I`(=i{C<qQa`W<#8@{mM3fhsO
zaIQsJf7j~69-9fk3oUU?u|QFT{8zc)2s@bnxRpqR#|}1V=X{0u#H%0%ximKy8^g*!
zyB_i)nC<3goddnfJ+c~}!9kM#2w5McmU#>`>?Sf9h`j}h%ra{7@pUWzqMK*m_6-jc
zN-F#Er*A|qmQX}G1nJL~lndg0hx7@PC^Y9@2G9neJ4|gIDjC|p`VU_@cx$r#`;(7i
zIlTEmFYQD`VS06WcakYsxn?<q`S~agB%&2d^k<|-Eh3tJ-=!-=UBb7RZ#%}V%yd?G
z&$1}}Nv9_3sKmrXbTadBTb*)S-o5A0>OCm6#X2kfsLrxgRzoDvRS-)Dhj_uWA*ftn
zKUbn3aDBC{?5^FreS=_ssu6V{XoQKCQNwE5PbU->Ye2Cq+IwmFpm*&2yK$mxYTxP#
z?k*xOL^nc(BuCBt7(h8HH1&Alc&mN2HCwe1`3QZvds$=l?>AEYa_P_-x|<H1;eK_W
z^Q9nSHqt6g$6g=ZJNljO_ZREjzkS1FwaIUn94Ei+r?D?(T86Z7&5b5T%3U65d!e(3
z<_1d+sLA$jRA_l;DD2<M;zirCg=zJBQrD2w=r#`5%U)zOxMo$d(L`k1%jJ?s^%eFI
z66$e_?tDNr)&BmFGxCH0#>KE8gjC{NzPc~GatJWBrn`LfXDQd{C*!5D-tBUM*(vg0
zXRnJ%VXQ49bAfQ-MMGCOQY3SF^*6ejJlekD`fl>`Le{PD2}ST{bF*?*8?@<Rby}fQ
zBU`rpzB1{g%3FsmbNLPwH1tL4q;mPhac#zA>W;kL=cL`0RKd3PNF~Pl1y%0E5;7)K
zpM%c0H}_^;EV&wK#Vi*%;8dbN`u+R&?ru0_LR<1fb@j)t763Rlf|Cv>;wRo|+InI!
z(@@;!1T%M{-S7fcY*YDp?!=)?3#JX|K%!3lP#({)l2Ni7>GfE5b|FMXWp9k@scCjE
zxV?8m*$s0)SUX8&Tu9>+5Rmkr$dg4lJ@Hv`$FkRG>d$&_<vJA^IFjWlBuXAEd~cU%
zO1YO)QT1i6=)D@-^)r+W@q%jJK|!`#On<!g-6GkL(HJw-(>8XFak{T6>*5sg^uRBd
zavJZ0&<`(^E`P@J=bgn)E!I(^g3+tR*DJ|0yjyh1VFwDV65a)>khY#=J{{=8K~^nH
z4^J`;hdh=?<;kz4`BN>2Qu31qNxpGeUzqix-S!dZNU%y_`n8DdUdNeg>~goWH}>0e
z2^*(#9_d8l+$J8OAva60J!_9+?)X!+@t{XY^ntCXr&05QxrG%S3(rIhxh}tS9PKKZ
z>2kp_g8k{P0gJ4_>V0tkiG4iETa78@e2TnEKbOjricd%Wuw(OY431N%rddbrmTO7V
zt=jc8{Afr`S5j+v)M8a%=#KgrCC^^U?HzjD%w7f^he`_y=00j%93C0*GH~pzdT?(m
zI~YrVEXv}NRu>|jN8|m<TWQ?k>#FyECe<6Z;5K+tOh*Ovc!fLu;{wnd*3|FyyS?|l
zePSe!_@Ui$lu>c3E%4_r7wj=<wcn3}X6$(xd6T#Kk(|VIr5(|SHgo}jY?R5V|7q^H
zpiZ4ZEe`7lL_^3dFHAsb43<=3;jg9nQCZhn!Pv&eZ?mgkd-f%kWqN+wKR^4-a~7<a
zJOeiysY%gdYgD2b|EiNUN|2(zBRDB#CCKLIwZCz~ybkJ8e~RMI1zx|Hg!coDc89jw
z+&HUXZ@u+h!J%EUmHlhJ8L<2+r4HY~eaA_&TCTxjjA1PZ)2_2)UptE&aO}V%aAb8F
zOQ*5srPy`Rn!B?FB?pDh2E?EDe1Zk!bAqf&QjJKr(_>8%_OreBMx9|TF_*DK9m2L}
z_a64$JA5lW7OFik@Aza-{#GB)^?s`F4+W)+L+#}swFI2FJfc%2yaO({9l4i&=w7Kh
z$4IQ(bsm3g7s50Y6ga6S5pDoHs+acJz7x|<q)*5eIgIK@dAIQVJ}ah(wGrA^H$HHT
zvtrw_U!FS8`{4KXe12+7>y(+UMkJz^<RMyW^ztiSQn<p_Q7~UXBgCRcwK&#&)yS#;
zYxzBzyyJT{UjFbYHLY6n{Z8Y&K>_c!l*P7Z2p5edjn1za9l`ewB_#&2s5@Ly?BL=G
z(~-fMlasSy>z-n~wt%`|&OXAr`tVlnTuD^Rk@UkW2ln6OW0U7qu3ro|p#!;=XMAAm
za10c0c<;fG!%J|wH@|)8Z?BUz5lWJJ?U@+gW@r6zy<D)tOjE76>)WwL8Oc{NAwfzO
zf+5~Ye7WJgir$BcOsf0tm48Js0`(_8a5Dn=5)b#1AlG(Z3?hmhM!Qg#Z{M-wTw;)E
zgqe-%tzWCV_RX|=nr!)*NzQT~oZ>%GWTPrSDKq^lJvP4Z`n<hMwBTl_ks${h%!Y@-
z3_jC09B$<9s{eLfZ1bD*ty5fnQdSU~+}``>r=Y~K4>8g&Qf^8*MGYwWU$l!*J;ZgV
zOZY4Lboh3|a5_gDlp1`%{=gW$&D<;^H#^%7^n<N3v;WpsKwW=H+J992a&h$i-v^=@
z4#f1NlnWzbx-kzN%H`$I6kwa#xbXEcbvX8hOLC`vUb7SoKd$BOTy)piDgSE`4(Yp{
z^b^#WxT!Pof}6{;0>>PAq`2qoRO?JR=Sv%<eNzU<ec#xLn(hj?LR&$2KyZhL2<k1U
ztw3{1Zb3X$%mB<|b@D8+Ioi6pxj{IMqi13clv4I8x#(}J&o=*0Y!ipC-nc0-mpF^w
zY5no;`LB<UT|M@t{xno!xk_K6E#XKhKA1f;6(3y^O`+tDx}d>vm@8$M3$%O`Sn(-P
znEqsKet#S1odHscpp(=9i9gF}Zty^(+#by3W)^9VKZ!VN2os2A`U;h30O4;VCFP2|
z8E6oTI;W)?i3VMdKMcm;Kty4gGtyCj!Lvz(aq-f?2j+7}pZqQtR&J+f%D82s8jDxV
zfK!*F$oQ76Tgu$Wr|NbHppJ`t{^{*5r_zD>RlLX5!#tvJZFRHZ0iAIxU^wM3(B)Z_
zKio8wr6#_*-Dgf3EhN<RdOJ8aXU~54qxw#}@Ya!em`lP%0^XOHo5G9|9-oB3fr1$&
z3%%hRlmo5yNN%y}$bXrgjfMqtKA0E{f!a_m_#rZfuV#(vKz-})i$3!JFX(Ol(cYNF
zRM}}I$>a?i?g2fY>b)XMAIJ5<j`{TK&od%?@9lM3;;e3)Cd!day+in_uRvP$b9A(3
zGLJAw+U2!S4Xh$1tHE;9V{!{B1OgLc@q*GL$gX<Z$Z>|X$M;eOX$BjPcM}K>?V)2v
z>$SXg>=7##9}X+f*XWFN<6q@Xna^N|!XI`m=L>97>m!dH+z#LAtg|yejRMaEy_8vf
zH`3`YTX&m9{Mh9kchzh`tJS_e_wVxTVYL*s)K6yp<F_o5(cUH=*26I#$0bZo<RD94
z;|;8_Bzs(utKYlv%P=Kb=@^8EEM5^w3V_d&HQ!14Z>#RfOjIGYPNA6R-5#QX8alpN
z9>>~ON2$=o4aea$cCZ_CK5Iegoe#cj>$G$T#@9(A1dEg!uuT;>;qQdk1f!DFkE!px
z&^|#<t(Z&^n)xtww!!OAWYgKI)mku}9@o!v&Z{`<V6T_K_d<gRp0Gv%e%>5QJO6-4
zgQxb2lI6{N{TBAB6#67^NEKKP?3!2R@p+?|ob~dhat8alTLR_Xm^Pn(E9rkFA}J}F
z`Gvf<PdZYo`X<1$KG+#rp?lf7T+o#|dZTF3-9wD+SE+zf!q6{#6Q?oDydkHUgpXbZ
z=%iO{K_;wFF@iII7=c_1?sMJ(mFCB5e@=zFG5p?U(N$g-tyesD@iX<gT2&3NK!#au
z_A|8twKm66Ye!%^)8*C)Z}zIaKbNl1A{CjkWq+bl%)dCioJ(4E2*iXZadYSLUgi$Z
zF$yQjVi9|_%;Uw5Ne`<Nc|i`<LX56Ppy-j^)o?&Y$8E3YU53%a3WAkns=Y1A6k~M-
z&MWQHKMTtGrwrtOZ(u*rmZU#!6P$^2)KDdv)@HtQ<!5h56FeUpp4l?^reWw8O*yR-
z(5jTx(>Ot&V;;6jmY=}ys2Q-a&gPTjDkX9%ka8*SX>cGKI@oX!+r`*;;7^}z8c}m6
z*s9S`IOy6r693D51yAfxcrm${`oJ$yzD$FbGy38R77x^38a+s`j~WYHB*5x#$qdub
znBF>F>iny(@>|w$w8k*yW#1P{*Y%U8+6-O>3_OWu6FJK>%S&bRLo>boB1Wa4D+B6z
zeQ9q%wdWy5U+_zB6zyJnYp77T-h#!;qMaB+TWMWD>4B6ZJMCH}!`Mu+6g>itjkLgD
z3?a4UE~X1`tUfJwHWYFj$*q64D>9SY727>kx=4ds$3kk7;HJN;-Z`UHI?oM7{Bx=f
zLCOkx>BzA5&g;iuAn@`Jb7eLpo9}(%#IP0&i_>q&Eq+(P48iE-*+bI^W8LgH&X0%9
z-WPEM=ziF`x`)uc<3L{%oHQ7b9z4FdcjKD<g5z@?8`u{Njf~u<s%kZqVizz(?&zEX
z{{AO*W=$eTBK|ItLc&9nhIo{3aqw{kT|H;Rm(>MI!!}s)!B;>|8KXhQ5V21Ga<JTb
z7<B9HJgQ6jCSzB>Vz<Bv^kxc7DO{W5xqQ@u6%#vMOVw&kGTYQ@{o`KQXMtcG-2j>2
z<QiF(K+eGIB(=$Un+RdS^x&XWN?$L}KL+=(?9!7=GsTi4`UYtl$;RcBJ3nZ#tc<@4
z^^3O%ut=Hdv;mVRqu5YH`e0#FwweTh88}6~xjZ~KVL~X?zkTxsuE{=GT`FM2eVjp_
zmj9D`PtOJK1?L~f+ccf4C|O;!1g9vkMtA!g_f{|d)kOk4REc<>o%Kvhm0D4c$$;f2
z>-Qm~8vCr$Q4?X9P&FtoKK*F9_1^wOyjPhvQZd~zJRAY+QEpPCN6$}-JIH3aoX<}A
zeKUp$+#({0)npQ(gTP?Uo2l68@w^`P^z<aWL9nouVqE7Y2U~YF#%?&Sig}Lk)Y*s8
z^hp9czlT;+hOXCgMAazhmask^qKw$wwp#tM3&VJg-d4=Cy|TaDuYlPN+OEzffIoVz
zFqZOqBB{u!!3DBj;s+G8ol$9BKN&QvKHZ0(U%|nv0WKOrTVr-N=qUWg!{|JA1JFh6
z$E&TbviB#x%cpRunY_+PYN)LWsU7%h>z<B_`dUkKvJ2&JCk*@F!GPMa?VV%FJF987
zwKY{^`THx0kw+cni4$9VWBOB8H_E3Y;;TjK%`!%SUd-Hs8v=qq_$fK~dF&6#R81)u
z?}$>-7Tffi-0675%6o~DB24Q$<rI~WR`%lT?^a}1XXVxbzc<C(o0KijnPaa<u^z_N
z;l<jL5zn=Pl-iM%rqiERL^-|_Ay0jCbzt+X<1J9B6{Md_E3{*Doj#Wp&G-A+_7h-O
zV)VKWVAm=p<vkG+yI9H`Z_b;)R+u8QI@zq(jcyHOYz$EPJH&%Mc@-vESwRd+zG-_m
z-Vxl0%HNQr>xr(&v~W*=^Wnsr<+tw~ndBlO{2P+jm&bESIK)X=vcw91d}h-Yc;vu;
zH-X`$*v*9RL2YA?IG39mV#iCL4)n$S{UK6(wm_XHEP%4j|M!_cOw23-Rg_ueloRmg
zJ+<22{vp`iwENjLTE~oM`+*}v=Sbyc_Pc(+U6O!7fGF1l=civ&erih5U3jLw@ZgcQ
z?_a82Z!-lxk2-`{Q$l|K?4r0b03p9W-S+@^{r+?QY229Ke{S7~=e7Fj-ibZ@_n&q5
zV;f!l+`NV*^83%%AK)4N{&V_2zsI!1Y!zF;@BjV(fB65Sx8++A3O2_u%$zaG{64>g
zTAO}-DNKNkBa);ISgQJ|=_u6rmP{793k)NzI=_CHuBoPe3#^M>wD2DbvgkVpI$L9Z
z+^~Rzc0o6a>X;owRf!{yQllAquw6;IuKi;8tYfMDR*z;akF>fOFs-1=9i2zrKrpSz
z6FN)GZ0yVZjW*4aKgKmy;INxRewu8r?D3-poM61veD&w>uziu9UMuDu7*Ya3wP~|v
z)03U=j4<4?M^2exEeUvVa$J?+V^%MN1;^spy2?OH8<#ev@xZpvb~hq@a}{J5Wjhbf
zmwj&xi=8@HExYr<k11#P#OG+2j!OEYU&t#g)aGL1moT3CHnrT|=zK#X%O&!Q`Lwp)
z5-+W*uyX{$h`e?%8q|0I-L={a$hOS7h?3_&4LPOPUHoU|MNj9$V{Q%Zi-bNFg)@eG
zk@e`6Q#4&IEz>dkP5U@EHz!u1;O;V>G2UpqA+*tLI#23t+i>qdgmau#r-_Z#fLDR_
z_^vZ^Sz6C$(@fHOlVzl(p%n)K`6G??GRYKVn!<FjtE)|Bo;M2H?|virfitMRBA`+K
zUfs+$Ct^a45IaJm2MS8PF<)H->0R$(@tk|JTVn<=6M}oHK-mJO2!-iLGI%yrxN!P*
z`cPPh%_C={e%%JQ&;#FIuWSSPY}l@@k^XGKP-C9Dyfl<iCL<vMK|Xv~XWSBl4Ont5
zP(Z^D5fc!P#a0j4DflM8N#=Aix>qx+e&T(bMOV;I6COsgaZ%=gp|reIp8JT{SOKMz
zb|<SX?`OTBU)z1B>1Q7e*Uyc&_)T0Chn{~b86y*zuc9c|<o%LclAR3)W8uKE@2(~p
z>MUNF<nc$n+@|D~zDJF2dPzY>ZB;Xiz>srtrpEh;yp(Ed_oazgpn5e{Tc3urEb5N?
z;ZXqXgA#*KUcroq+*0f^lin-l-}}}()<sFq-|2?2R4Ehf*{`3+^z8)0*jA_St(%Fj
zUppaHBVD#IUI)G%>c6kop9cF-&giwmtM_Q6JzFw$G`5IhD7bq=a80prmx7*Pe{@Gk
zp@?xbA5Ff2sd1z)?w!MrtyWpfvyC)alY2b^JF8<Pss-uq?0x84mX!s9MBVF4kAsEj
z%dMjfAIzJZOS_Z~#Jp`^`zdU~tqeW`yLZE>e=;qj)Ol{)2*g<}EiFyWw*wOcF<%Z=
z^;#Eo${@T&N{Wzu#c@R|Vl<8NZ1zI!hZkkKjaGjb^;#8w?};tC*LHCg@aQhYc7B~~
zU(^X>23e<ZLlcvMzCQR1>9rbZYhCChw6>t0f>}bpU+aK0^C_RaO=l_6y<vSp1B&<4
z{z`g7X{k_cX(FYdEI&(jTHwpN(yAJsU(u5Fy6~NVuj2`+E_0sXvhQo%h|VTj@yvEH
zb?}M6c*iG}l*qrVACkZ33FEf!<Id#hw?EY!h5sr2E^~?nrbjQ@%q^{~WbuXJGmMa*
z$a*wIl2JaL0yP<w(d|wGXj4Y{wdzI1jbe*aX|c%-hh;8`PAr9&C=0om?{HhiNn8IW
zp4^!e<(7H#2)}|y#~yZeh;-^QVRBHQi*cy1;K)3<rz>P&s9Y>m_B`jLWskX0CyMuO
zJTL@kpV7g~Kn$ouyz+uNXxGzIQc69SxF6;6p4$`lz>OLv|A7D<_*{JVTRBNIPV{J9
zY0nK&>7{9MgK2FVk=d@sW8cgZES$mjM$peCo!k-}`A5yWP6E*2ZRC1V{8Ng^v<i>1
ziy_@Jsc!V-&2>VA7=a`S((k9#1lJjvGGRmy;_jArf_^Z;7%F7D6BXa_^kE(1ZQQ7E
zZwk_?o3`PoX+3PI8rTwO8yNN~>ft->bVI}{<9%pvmz0vi_7gLJ#1+WgG9c}R=U!nt
zD4~kU@m#R3vALvD9B-<<Q1wt2MdF;rnii4%&Ja|NgkgpMek<`8v+3`yi_w>#*JrA>
z=0*7FdV=V&^Kazv4iWSNm6X{BVXn*{s7J+C$y6a=({z6cJg=iIj6ny%0&fBuNGQXL
zb90R&j5Au1A_S_$icUlEc^>Q9*S{gj<-WdzHgo^#D=9vqF@JkI02@YHBCI|Lf5`o@
zjRL&95H%pzsS|D^xx9yC33UlH$a2jXd7z`eQS?45kRVq0{3Ks+4z}M5iU{DLw2$Lb
zjk&|5#JFIyqmjoMK))kKD3<(TEyxM$PigKJq~CDo)-&NRS4H~XLcq$j8GM=8#%eOB
zG86D7@#@~*D}(y2_MP^f7`+x3N7eQB@KJ5(v|6%XUwW}3>isxq*Qd~bGpp@c`VasK
z_#4BZP-G|YGgS9DD@JF)-vOH>$rRe4^hZWo0AO1NE2=r$5sH2JC6~j_o|o2VYx?bB
z>;i2@r{x*t;KqS|;DIn)h)8mZaj>z0qAjbe3}@DXtdS{asNRxHM@C1B(jyg<K}+cA
zi5s0qjFWj@JBhp68lwcz?T(!W5=g(E_Iyj@gq>bk5xhPVkp`70WX&W)%&=}nr4;8^
zUM3t0B6Ru^gJ*EO&~U@csK@B{N7fTWn*!aHDD|iiCBDCRUi3J<S{?$EyiT4g^>8LW
zKb&GzYDHkuOUx{QW4_8AhD&x)5p2E~y$txnY}w9a$~8{>T69nQh%pwTVXO^*&bxC`
zxI;*oU~4}oskynjLLI#b;VVKIUe5OPTxRoii3zJWhM%pX60u_&c@;vvClM`3Z<NzW
zN)!gilJX(w0V!gcm}3kNJH-Hi?km7@WmpSR6G5@mT*0S0I&@b?{$|35I|;PkxkO(U
zq7adtjNic`F+ZxqyB%!(Zvz7dFXZxG6JyKOehvs4(|iC=HZ~kD^VvS*{lXPNC}o`W
zqup7&$M8by)Yt3zcpfDsokV~nGF>rSg{C9(nIJuYUf`&pAGkR?o3&4aa)6a&CCin_
zvyIXB(0&*1O5lD6*^v2WGa|g3I%r1>1OoyNZVxMg4y7R1rV{okqw|2>;5%ePFI)_p
zG$>n<Cw_N!&eh%2v?dp4&@6(eAy@G(Mi8NC#NsAa7Y)D*xEkk@n1#)^7k=Dacs)@J
zw<6q74b9u`1$z6w&g0SMXv1<47JaQ#K&kM_%R7{((^JGWo(@0}1N?A>Z{s^|8?Kb~
z*Xz-P<ljih(2A&_RPMEYke_7g-wTcf#6dMeU~<u)f@21T6fn*BRVPp;B_{T;SX9f&
zpnV#QROp=%ZwlEjKE2feiLNI}%7)#oGj7zGw2z1;0Cxw*anCQDJMA^U2#hcD@Jg=Z
zue-fs??-9)df2o{%icy>q?G(EayB~Q-$H{u+}&mPw>mBUnp$3@E}y-41EwMKnf;&f
z04+Q6tx<$*m0iHx2p-yCVxVA|!IB8Rdu*f<J3dD3a6<15kS)d8Z=@B*`;EKDdmKv`
zYbh@eW?~@k06ezpEIfE@j|iF4w1B*;DQ7pSJw@r)SWfHi;uy@5a?wo>;?)a$zf0Vg
zkZ)(U!#5zKbv46_g2#UD5Vp$?1gQWqO5oQH3_!P(ot+(AZ;W9C1VNxq>>D0n?1zy6
z`<^{jLX+3Uzzs%$f{F)*)m{c~b>w3d_5TXF|K#A(v>P>d_(B@y#(l0XC0&?k;5U_m
zz))U(a`0}Tk$lTw_Cn|@+-=ClvxvbvG5ZL+=w6VQw?m^^{-e?g^B4NrvZbjEBOlq)
z?wXfC{Chu*k4~wsC+gK#)FUhP>W7mAi%jHT^2m)M>|eqb!-a61x7X7MeHOeHxt!Q*
z2>X**kEMdX+?w?ko7h5B0IovX#Eo<&4%Jtf0?{T&YjRW&u29DgLv(!Eg!q%6T>RqX
zwNuLlQK1A!gsG&6fFI4a1?9ip)dLza!T%nOA<MvhTL!i>)u4zoasckb3ak!b_n2-o
zVVot!rJ8DY7{@dYfb;-l)EDx+8N43I6T9r<qO(Ot<|1mrvtUOSK90DO`b9@V;lOTO
zI%I5sX|md&kwjhw>-A8V^_aqpjh!c*=-b%qRy)Bt!!FC%np3y8OvMbt4NczKyHoHD
zMNANQA@k;N7$aLgkk9h@d0b@{4vFDZS!wBE9GP{e^zXx(W#@xnmE#Oz{`<+?Dqn4&
zAatS3-24f8hXx5HwpeAT{?3AfM|M7dra2b28PLX<o13$-vsaIDw0WCj>nw!SOH>li
zTq#xtX1+F`Y&1}JZ5o2<EL%bZ)7z$q6{_?rUgG&EGs$@wz;{q3<-n0*xYS~AAbg*p
z$;10)2YsEE`w{*xI2afYFMr+Y;W+&h=0=MA7r3Q&3BTYyca_x5|2oZ_`;SD6cJOOj
zr`*c~^w{2K@RfWGvZ<{Ka)G{lg}?@<3lu6}jkI>P5bR>ZeP>u15Cf)Sj229~k+SbQ
zSVx70Uo7)v=lUoJ=4iw)i^h<Bca+4fHA;hgmhpOuI_wplR(q8JC*jR};-zbwXr{HK
zfUF^%)QYG~DNIL*nUHwk{xAdJU+YXs-WPYWCI)D{4L--yJ7Jc2DTVDilN|K#{`>DN
zWYVWFb>pjJPqrz5bht!+xtx7z3?wU<F21GJr9BP~x+6r+>a;}F2$Y*7;K~yMg(gk-
zkxihHcnbnD|HzKY=T%AN6cx=h0Z^$D#^r-usj8QzX2%~s3u*o$(Q{zV+G(i~b1t+g
zI84U9AThEZhV|GM$9t-L<7-_Msy<^rCn}qq?z-S}bsM$y%nF71Ci@!V0jY6P3aop*
z{P@l-eYVWQGBpgZxKYHn_#siH25o99%&@RaX<T&6DJVeDbchNVTu|N(W~qRSb2fSs
z%putN4NPPv7$WPmVqFt<g7b5jQb;xG=<6fY&f1(usu9d%ILm!BtC>W;CS|XVS772#
zxi9Z<2pF&k7Z*dg>g<fbSWGEnVbq|<hD{dV3g00!A-Pvf<)URo5>pb4hPb;!pB)91
z`L^KQoya6Do)8cN0jM*@4;Atob<`Y`NanZc=-s!B9{`XR(@GoqTni9+SGB<Eg3XbJ
zNky7xcPfYd#|7X`fA$O|YkMxfD9*pgdgBFPu-Un}kTt-gmY5@{UU-g3WZ`NQvLbPi
ziOau&X@+fqZh`IvQjH9zdKs;|=+`Hi)~duIf`^pS+uLiIcUW~8^&>3v^*3Ywh-MQ?
zxE(?A|H`g(>u@oXjP|!^2YQP6xJW&!F@y!*S+?HSi0ubaP76JizKAOfp9L!KdE&UG
z&D)B?;&^xicMJpOQ2Dtn?CrIPPlI-B)#$2_ot63NyWCTymFD+f;`EDw?lXimTDI)Y
zB!^fUe2H-omiW$HlyP4`0+cmQ6qv+m>+2sSXSEC>v}F?S3}mz%od`*~h(HsEk&YVU
zEH48;l##u?*#AK`!xW#@%Nhv+djbyfZYhT?6=B-sI6H<Ynk?S5_F>5VQ+~oyaBFB-
zm{F~x$W9#Vipj|PeUX#X?-Zl39U5FMW>xaeqY%5SYI#SfWfuu2vFrgS1QE=~BEkgb
z$Te4|kp!fmjy)BL5=3tS=Zeg|CMjyrMjEgHn!pDog2lc}uY`(B5;sBPe}{qI@-TG?
zl_=Dum|H?3_|mZ>UfSNX*G{K2)%43HK}VdyIF5|WBvFQw4r(>4aSkPu<az6A4TV89
zBLuss2GfRq!Dho_rico1qWGc$r|m#Pbb#!Vqk+Mb=BrX3OA8bwnYOO3P!4<Xl$9R-
z;E_=S7ErpuB{0kRA?B}Q2CeoA(YAJT)QVYTVfs8JcEQlV;A@MLY)BCtZoV$gP$8QM
z3z4#D5B>V9?+<W&2St`~`x3OU)vZJs>$V~;8q~!SeSuP^>ozvy*pCVB0v>49I}~Id
zgbcmJ<yg$Iuq%|5Wpu5iL}*ToE?H4a7rS5I0jZ%;&=37G2<dpTyN+4DeGWJH_!X$?
zRlq;Xu}9Evk`CZK($s`n0%0KUMId92274J^5orfKyOAYa_#7Ms)RHSrkgOO?06~C8
z3jmisBB%&#(V!n*2A{8rB<wZ9$$C0~(ulNqAosEhW92plywNNqZf-jKhKI_u{3Q-o
z$~(V2ZN8MH^OPIrt@cn+;hsyP#jZCl7lh3;XoX0H(tZxFKAcZ?x)^&&BD^)vK7<@N
zoSHalB*q3yBdwo82o6~MB5VY)65Qwtbp7L=p63GHSu}iGz`2*|aryhjBSFSS4T|wN
zs`wS=8tUEjp;}vV$-hCMhe~5HA~mqfWt2Pd_TGnYHTi>iw>jfk!<_&oNaPl*L|zRA
zo`Mh+)E4+)pWPG2B<aI3*zK<*<un2XJJjIV>0LpHgY5v&8))e(-9(|7l2O!aO*{k!
z!XoYu`lpyqd%bWSDwTSSd}L2-82>yLJq!a(EzwULv+QsjEt!G;$bloXrK9ZZ?07k;
zGkCy>^9N-d3?hu7VZ%0^WIBFrbLO+54=yt9`YW*AV<6wUI*f<m9<YRJX$WLA;#@#W
zf^$(TM`iQj7-^RqXv5$hPq@(G&I+=;b$+yBYH$r9OO}=m)@*0(Maggg2j2v7PWGLI
zwbAJ)zg=GY{@$gsJ}x*Y^RKhzAu7UOcu&@&E62-lookq%vGs<;?vz;nZH7)NXI*;v
zZCdTY3$S)|m13dSetv;rEf5sWj)U8_mcuZV4J%Und481hiebE#v)VMb`o8zR(5AwR
z4l9yaY+!6m5aephj)#A;w%YeQne0+K)xjDU3|tq*F7~nG3~)h2U9^(q7AX~<-+%JY
zYbhW7vs}1MAPd1=FDNn6dN0jLbmwZMxl;6<37V&U&i66H;tJ;po}qQqs8bh2FpIOL
z$kB|bPx^T=bG%R9(e={!m$NlRY^NonL%rBiLc%6>le#^1IR>L>gfhPF@Z|{OC+8nJ
zsNuXb6dunF{4*T1p}Pi;NQpfz%r@K6JD~=}hq(UYQeFO{^utuikHd<bE0ctOF-HO>
zsiFu9#ivi>bH%*E@J_>Vjw^UZ#o7VQ9qt2e^SPt*LEd!<1S9{=o7)N!)y;7G35}tN
zB`fk<an<D8Imom8Ab1*Rx^YYJYePTTP-hYyPYG*@vJRn^Qn|&*zO43%H9!L-uFEg4
zw&$KI9A|=z{zRBE)4Jn(8yPp0MkJkmbC~whq8;t2o15PHkJY`_3~S$)BW=B(g}xjL
zU>k|Es&{HKCm^NH*S*0(9>QUTk4@zPVMTo*zI|;+Eww%^H+DtK<XJ}#{wbSW)cl~T
z^v>EH%8YWgp*zIS8VQ%Cyi@q7w$vN$8Xgf5zSa7ZwV~=32kQ;@-AwJ`TWw{F`>g+Z
zY-kd$xh3{uXRZ9+rtjqRLZvd-EeFelQ<IhxD`i=)i2SLvrWb&xW>l_{ZBOu-x&Uy=
z<qzCtAS7F4?Q@h)<6q<dZnt_e>l=~O92dqE+|ux_M71GR(*I-t`&IU<gUzSo1MB*~
zJ8g0kP=D3(w<;GC3?!h{LEcydILR(0dvbD`QWKI);e0n6ztKs#%kDQXmTratHBx@-
z)dnEv(k|0rs}E!6CyGSqn3rRsqRzYJ4iQQ#E31IbrSMAU_toV;v%AHn&?$ZWfhCy2
zs8;7yu*6r5fh9&=9C1Lmk!ztEkuoF^LTNI4n0W>gurC{Z59ZRkA5~xI4KDgRzjR6P
zaYj5yqG%l;N+^5Zp!!LnPTW{H9CXJOPbIh5?LNWlc;S7&)noP~&<Sa2H|!qnV|Uok
z3-4jSAG+_E)S>LH<4$X?D6~$Uj)xD-389gW!Jt?@h0i-;H@sD<ykk?v!lxq<uF#h)
z7OmrK{O@sb>Guy0QIc{^jhf-QKPvCk682s^;n>quQh7H`CcHAB$y~<G9@%q}Jn)f8
zJk#Iid(r4eAXXjGqov47Z@k@n^_0C3c5|S!)UK{1*QgSiWC8Y<Z_oTUkegv$xt&~-
z39RiZDSh+qPtITRJILsrQTofL2W~W9hNhV0p13o!7BqMk(7tS*+v6-01OBUdwKd=r
zB!}a_@D3HVf_04c{rA>UU?wRhpPU23Pb6nCsgQB5<T%4@Df?)1(nifKUg)AwCYa^a
zT9&K&REiHU`J$V~?g2m?O5x!fV9;aaFf$)~4X06ECf8?-0pOOA&D0kydD6Tco)-9I
zTSVGgvaAouX7a6cTr=NsWzBZqH@&-bUE3o|!@Bk>t^4>4Y**zriK1wwu-1c-^`Ha-
z8Z${BIJ(E9pIlV<NV2+Rc-EI@x>z82%2HM4z+2-iK>Egh1?iD>{k(NMx7@=EB((?5
z&1Qbe>LHdfmGI-1{yopkw;~3V9gll_K~X2XYP<}h&}K$Q%PBLh{ll~Q!>@Xl_;rG)
zLS1V}J~2lB9QAC@w7Sdl#ArSFNrI6Uu^|-|_0k?uZ$vLo$SzM{6eJujB`ce}nTa}M
zRDACEkIRSFlSQ)HbJ+Omd}i)8{S;r<<P+D_L4!_$dvkyl>2x3L=O{HB_n}vh#VUB#
zGKk%L2?26Avy<OXK;z`(<YaFTZahzjPZVp|z>(5e=!HSg{Qmu|brdYJ_`^&eoR`oW
zPwN+|+EvmU?&zB7(s20zdBcfH(X2MVLK4K(MDn{zsnju_2Fpl;IIc`yU!l_$M+{gR
zq}M$;)?!8X*4k$J*PVw26AS@mqGXiTQMM5#8cd!^<EE@i)4%p_7q?bg97JCV$?r!q
zJzZT~Bm$9v4{JwFV2t7uXO0*i*!zUMYU-S-UtWO`aE6X-z-0LP==t+3YyWtjbG7~G
z6*Mvkx72IJ`|(oq-M|EPP7zi9EArw*tRN!&E?g51N6$cR`F;i$f8h&&5MlZL4BydB
z^_S74AazqIUX2H5tJ~P?4NTV}lEm}=nRf1Ai;YZjdqLF6D-t|4b)=2Vxt413o>o5f
z*HPgr{Eq{So+qBDq@1_U87d4lDoC$miT7ctVkx=IavEvGm2$}~+*h8pnImwqE)#|E
z)YKGoU8sgQDcR?2?=)toWq<zG-=EkkhWwR?HcWboos37CMqH(39+NL-&-xTsOh)Yo
zT9(9JJ-|&^nIwJW9!w>3ZrgW?CnWBpuwE<kiSLE{yOeM5z0L+Lg3lXi2y-HZX|uG3
z${ykV<Z2#a>Ew&&9|trAuvLR42)GXbP@;-=*SC3@;avl|`hj~lqKW0CJlW^woJa-G
z+YaBnVYumIA$=MS4%p68RsQ?kzKmD<m9(5iE4p{k4Wo#XMSBcMsW*zq=Ps(exXOaF
zc>9U-@;l|45fGi94@xYe9D;dm8&)PXIQ@L$iecDcz*76h(nrSV5|2q$@BGQXY(VKU
z6i!Ly0nwI|g6(YWAACR0rd_VJQ!j3qaa(Ej5a5*d(MAsz*T9QmaqV0J-6Vba<E<D%
z0i!w5lFh#O{S1>YR4*8V>SyfmGDuO2^Z5ZyihhPkJI-Xpoa3|g_TCUu^Sk^3CxBXr
ze0DB@3(bw9rti87qzsf8qcebb2!XLP76}mRT%WqEeOGiPsvMaVcZIblykUqC@lbuF
z_?Pl~o(QZ{&P5=xZEav)L9LHpew+b?I50)$7?i4|AYJl=d{;%rXb|wQl*{<}0(^W<
zF|C$)ur6cq%HBn*X13kR$8|cnH;&5kIMlXW@cZ$N^?s=T@d2?6jh^=N(~T@oGmJev
zVr^H7UmqJsN3qEIr>;pC(ztyvr5QYoGc$cCY65c$7W(fOw0@5Ler9x#xzUY0Z!^E)
z=0+A}I?e!MB5*pm39rS0iisXFdHjTS<|oy3pcfLPUnwg9{7g<x!aD&jd6XJ1AC8j>
zEh4~+Oe56NIOhK~Ox)xd5=`0Yb$k=I+yL%jUth(HTdO^cAAc>%h(2vXc&pQKhNf!M
zx=^F&*jUvW2&zMkhDS$RL>!pp5U6To)DH(b^ht=A92<MlI@Ek>jz$xbE37xB2pwgi
z2T(njj3<X)=F?lWv}!zvP6HBbq(u{z?T>j_aKn6azG)szLRUN?k24_K2A*U-mHj3I
zW~ciO<V(3YxHs!|AEpXi6e8PNSdi5*JCT4V{F~iuY}XrHO7tb7r=>t#eJ_pf7=?db
zm;&b@_n#K<)Po!Kk2p9Bx0!F=XO^?mrDStdrSa!}R?Vo%WU8zn*%qzhg|xr#o%HEk
z)fJ%WOH{EtA`(e1jK?HAjtgio5Dkc3tA_jOik^K6cRBIu;>EShS9(`^06Mz0;JkFG
z=2{?A7<WbWPj_eM2#lD#?=sxJ+@YAf&1+xIbzVL`^)z*I3tZjcVhCxf-VDYsI1yw$
zmglK0ucpk8#+wD=TWjYAIv+K3<y~X6S;uri3Xn(^LVwPAc49>2-}}7~Wgpz_XXYmr
zwdYzgu^n+<Ilt3<8So<k@tPm46VKzlhBANNEg~6qQ83b&Lr;sEi+jQ1Xk@Mh3bW?9
zni_8dmTZLco_<+m(T>*t947^k4bCbg7yHBkaA-<6VxN4ze&cghZJv;;isCVOwc<vN
z6VRz)+cOk?(qrBtf?@+2MTHh!w(zj>R$7p?bJQ!#FnJ@tb;lVz-tW!ZZ)@QE5UC=u
zQcjuK*{9B_u0Jlg^MQV;tJ94erzzdaO!#gz$7cjGFea7Je6{JHW*X?s^WeN=3<-fZ
zt|w{&SUG>#@>lky*E4QB?8)WHtQO%nThyCG$owWGlbeXu24qo?UX+yu!uhaM7x-m_
zbb^Rm{b(O8bo!ty1Uvc}$9DeRKoGyP+OTH8GKs85&pdo%!<|3s-?a2&!dZDaF#UdU
ziy^O!!*AU>-N+&0a8kkoADVjV>m<l>K3G9E?v^DFJ(T0lvt#=z^MQ%9+WYJ^y>+TC
z6Y&2&PQDjNbV6~<qE>M5%%k4@A8QP4ut0wOinvVMyAj6*3QW!+E+4L_M9mg!wz|xx
zoAfN}t)uXs`j7^tm6@7vhZpFMple0L1V8}FTQw$3R-vc9+Q?Uj_|2eODY}dAGkK{q
zrZJF#W5<N~W9;$Jiy&4$z0o1)H(S8`lKD7{)3e%8LM6!Y;wW0N3(G8#?pn_;yJxHI
z;M&@=CR$O9v75`XPI(F$M|?xRF@KoL)DLFScjpCM@dXN83i{P}5>tO%6^XmjN(?73
zX4ZZV-%67#)^$Ue!ED6L1|9G8^ijQj$Hdtl?J(QwgUh5qY4!f5XN09RyzhQ?1yaWC
z&Ina~|6@(bt%f~vUyn1ec)`{mYjH8@Pv#}w7#%IUJK?K3Ub_57;#6`w75^!H$T{ZB
z-ydw<_D*7oHc!|WAr!i0(t$rL{>A5sVvP)aW%r$O|AbsPQe|kek!+~?n0uSTPS#LK
z203L;3h*HqXttSaheC*^%c_FVj#lnH>P()~q3f$meZo7vUIg>j$?Z1n4OcKmXfE(L
zU@6Ku+M@LFn!HP6_hb|HCkh$z6!<q@M9YJ@R~v6-he)SXYXrysUPv5a)eVx(z|olU
z_i8vX!Y$fYayv0egR9&4;X8wlo%cH4b}ZySJLp~AGikgzFr_SVn$iFbA0++Ymu?zZ
zfE#yNX{qtc3a#}O-lsS)dbSb&F@HflM<rzeSD?n!kG}z#z28eg`oY(0{`SV=?H#k@
zH1%0-_!Q=7$-fNv1xuU2ZG3IrVLv!J(?9yh+of$)k4ER?oA1k{neH6kS4mTQk#4G;
zsNyvJvklN1s<#Edm#t~WJ%?|vObh7fI&^?!bjJwO<E$lAR3W4Xry+^r`ZGxwTyr};
z1jM^QIDzu@rDpJuSt*dM)Ks`Yp#HCCE*(AW17~SdgLh^*n1^GFGe2s}maP3;xC#x0
zqlC;^vOR}?FY?S_X<cJ@!c^4a!G-RGHp3I!J_)y}sfz~6H_=O0zE<mbV)_MRsSWI|
zn2>{c0N3^_XtZ!a=Qj#P){oCg)pNGomF!O~Ob4c`k}`>j4uJZ*5CA?daOC-x6gmNe
z{2D`)K=I9=zkC5mZfD$O7h^hnzDo0@W`ZX_nt!03x(q=jG7Sj30j~p<T}7EnO2rk2
zIaQxKreYF-@^7ypUI9a4!bT|PJQs)_5)|yCPofL*^T(tDV(z~U4(FtzY=U(ldc+nq
z60q9gO2BrTYvB@erV)d{Ya%;A;_`{Z@PQB#0E)(uXUw<tUYC+vKd@;g3-Az5aljl^
zCKjfqAVt_+Kw!x3>L+LRN8wu_{yTlhE_ZNn<DxLg;vXgyM`3)6jRY?$)?D1ZW4^r;
zT>lX)AFiyL3h@jz9@)7XB>-m~W;wqWOX)q(6?27N?yxCPXlV&PgeNvb^(aF;^<?uI
z0$(5Aa_?kBH&o&MHsLal8VA7dxKV_d*ok5sMS8@TC>Wlmt|EUY9QGN9ab>w6;JOk3
z?GS;W0V)H)p^|b+`GaL1;QBJE(g8-;yum2kH7||}SvSBEHF;Hn^tqV88^i2=yD#z8
zKd795Tl7=2Vl^HNy?~_<HR{ovOnCnNP)bf8Lj!krHq2u#i~xOME+G*OJNddyCOLFM
z*?m_4=&JEde)LV&SjtEr0u#Z_twfE7m0)@7k#hX^Y{|l<1srYDs7azGpyXviR|#w_
zA%}mk9U~T&D<THS3WmYvL&fAlSCxkrEO^owl3Q3j(9R{dVA_D1#>uGwrO>=vq1mL=
z{;;~{mn~nLa^gRpADWVgp1|es#Cpfw7oJ=(3*22Du9%E3=JyhntXU4J#<7?r*E)qK
zfJ~@U9LJwbBbirk$7U+fP>5f!Uv?_TH^0rbNcDoRtDW-I8pwli5ao=V-&UApn!Q|C
zS0_>stH3$nRnfbx=YQ;47NUR8!+EQv1vLf2JjK`)Ik)*#a<5Ok`smYLKL?>*Uf{Ig
zn&O+0Y#6O*g1?Zgx^p|m7$KyC$U^Zs5gE5-1jqj3zBcpFPW~$S-mcWt_vdXBRi3<!
z{4|GN>ceX?P2yld%)nrwV&`r<Cfp13QWh3q-9aqH#RPH(LU5B?vTt847VH$HH&aEz
z6Bt<3QM^rqcD0sQXsDX%`t9_R_l6jUqXI?G);bitWFpKeAq%^yaD`ItZDAhroRkNr
z5zhc?IL2r+OqCHCy`mjzd_kndr@m38{@X>3{6K|4wV}Y->$GPe>ZtrnF}Zia^DQ&)
znV<0Q+_@_`aEv(C9~kmt%N_jZ1blq#CDfeJHyWD2>=7)e6B}DZ4u@<m0p*k2!b$OF
z;D~L6yOkP`+@fHR0Sn&w@fo5&Ii8{x<nX7o7xEdWoTC+|z!b93QHFf{T8=h)sX@o8
z&xXS2w<eFK(qV7G<Do5vJs9>?7Q+)+{j3z`;y7cJ61=XOF(HplP5=1rdf$||)YR<M
zeL0WM_j|gdr#9LzVyYOuCzyl{Y?e--Xm~@iGGq`>pWZb?Hrm>ccW}sFehEG;6mwhd
zVT1W#NZ!2@&)U{DON~c)?>T#}$$ORWB7~B-APU0m3?X5YLe}7)N6D00%^o+Zh@Zl1
ze$lI{2FE^DzMb0DHYCSIJ94_8@4@Li4ZGZqVtf03Ax;BI2b}nbmT`*}3Y9;A)@z;I
zU^03M6zMS%JJ*L%r(m6n8MxM8C)e#iu~9-nuXRug9F89f$?1%RJxnI5YrGYH3^xBM
z*JmTD=zK(Pox~9sdjEr~`Vh<!o7B`6fAogg+b5E@O69uf?EdPv5$E9#JILc@(B#Ht
z(wHLQ<^R25F+lchcoCcLU$_1{hfWgbkbXRa?zG~=0ybBnlL;RlWy<@Aa&LN2c1B%Y
z`=|9tmTh8VwzYVz^o(9MxmJhu3bfA7M+_Os>-t3+6#nM3nHiDNXT8yKOJIEqtvIGL
z-O-fgGzOoef#-Dj_cZhbs(6!JBggZ(BxB|`uA|xR@1w;+oj&cg>1yg%|JYlzCpXT$
zxV1-*SHEpGtg7*V+#G=a_WrX}yBD-WYsZ<LPa%V4kmG%Sq)sSh+)aD$WCPzhrlu^-
z1?ib@c?$Q-`Y-=(*E$XpYnMgm>5`+%P5CE+59|f}DFVjvKc`%82<e4ny~@1ksh@0g
z$lLrtKysJJ2C}bbmF#>{n}v5Sn}-p<O4uK1uF|E;*@uMLV*lzH@Q<LT({bl<%N`E!
zt^9LFvazq@>)R$LezUMcM`a!~hzD$4s-~W7_tv;oEkJhtF6n-gHmXfuF_50qac?%X
zKg1}b`jhQFSqHCPlOX-%UhVwii5{w_@_(-|YTZ|l9(o%th;pvIlK01#;YKd4BBy>%
zmA<G>bw<9DYeF45Z!SzH`+cgldsHHmIR8NBkuN88NltiEB8wWKtveagg2;Cs=2YA8
z$bUlHi){;?Ml5KJRq<VU>|#aa2LmU@jzxbi$g3=yX*e>Sw1L^7s>ilkGVj}gD+=l#
z3+nmZuPp4h4UpI_%jGedr0GiY*Ouzai%OI%8zL8#<jY#MH98Da_ph$FS5(4B$nkFz
z;c>$gFC1^)kj$y&;@zQe>h_y6o>`F!f--Fq$4cf)CPF9ACw=w(I@q2!7Mev1Ee`rs
z%6$iuSMBE*$3EH)BC(lGcy+-8feXPMbBWa1fdbZnf`B@W?W)~*uC0;!PV;k4^ODre
zSgU_L1|t2PN0`NxWsbQlg+4Dajik=TNREo!kX&{j*xqHcqjOH;_ti-gG6((Y!DZ_z
z?g3-JBk8VsgM!QMukT*E?RN6Dh>M0v)$-3+_uf+ru@1$)Yg%c|SG4<ZP2jNtQ{eUq
zs_TEM9<_bIPigIPiuhFQ%W|sw<ZQ#lMA+!7yoH|^XXqE4tmcn8yp3G{e#i2!^u=qx
zm(Z*`R2_6Sr=n~d?p|8pWHLGNLVjaI_#5$MXTOD^t=zf>d7eDx1_iPT$xF;MP01Tz
zwkE2?40syIr&&iNrI?~eu2?hhTL4Gbt%!H{=AR>x2G_OM(HaJ=8pQ2&Ro5@sE0hXu
zEfrJq|N2R`y@O6{0NFa2QWLghCVr+7r`>kiR5l#5_-a);`g@C{8|A<&_HRM{8<wr*
zTm)S>UUOV7;y*3`*JXw4At`=IWvoSK_2RiUue+lAPZam&*wN$0e#(CxEwW%)-m+z2
zv@&|}2#w!LPPs2?sYkNc_vvMu|Kue960(sGTNVHLVNpmL?m5PqcFF4M)__x|><>#_
zVCHLoSuQvUZj?oX)6qy#`d%x0DG#e}Nu&L&F+&U{4iD~9#by7Kom`J4#4DUE_Q|J2
zZX)$jLu|hAAJ0wOUq*K8D62bbc|Urba$Q~7(cC;r`vrb1Oaxef45y?P78Jn0uW?)K
zhFBeW)shkxs&UHc|8BruVsqo%vEw$kPc8Fn<_1=ii;e!&{0CYE`HLUwhkkOpCr&fB
z+5;zt3+<MB&o2ytVT~heXv(Hw;h03!Xx8kd*~r2#I}WRkEHIrE{@>N^AlB~MZGjAa
zo7C0U@;$H7JfO)WlrD(hP-`(+-!o*9>Qk$4MaEIxX*tu^*9Rt0hJFdCt>BP>u!fnz
z@`(TF{8zr_>C1(D?d^k&4mW(OB`yBD@|9a_9VN7nV;{#4a>1?;=NIkyNBuY)j%M+q
z)I}MGLlF=cMgrgmLa!WI54yxqp-0x0*)FFRwb>4(L`iDyce40zYYw_s(h$(ov6vhS
z>GAXC@_Pf|@uBsT4(7!78#C#3<GIGAFdf)U#U;W%Ksa2?A25pgrTw9cM@tvA;>4}z
z1}fL;R-8AI;{OjDqa)sXKkM}Cp0@mV@1Htw_fmEbr-=f80e7kYWlsj>1G<g4Sm79?
zDSi9+5#n|5Rsr>uQD>wA{-m|n?|-;xEZksBb>8EOGsa^{_1Nzf1qcA#)tkFcyx=O_
z&7X8t{l)!n{^8wGoA!yBC?9}<NgSrS&`h(l@4@6=B(fevuW$wP_G!1+qbK5PsZ$1S
zqs`)e_rBT627S|h+pF5=DE!|=?<L-|)7!ot<DMp)h?RwJ4|tUCbZ=uhMAvmY0}fGW
zjy507L8D{eP5f;7Ur=FQ-Tl^4%vYVg?1ALDS7r6vJS#uA2yvN+E&unhG6-#!-zLsD
z`TO^UUUU5&#?0eqT~!cw*Pz=8GJk1taT)l+NJ*KYtqT<egRUG_Eguy5=bu^0?3(D@
z-8Dlet$hEO7uBh%N1&D>)w)YYqnwe-`QOhM#M?Hu{ltAiKi$Th-2j_FGy%Lvq2LA3
zxK~}h=pHKsnJ3Fy5f#NsZrfd7qa^)p-Q8nq440<wjg{<WKd^ANackFPN`WR@<ALtz
zL!avf61f(>nX;Mqac@@o4#eqQf2Nm#>%IBk0x}N|Vh(d9%3AKLu7O|6=17H&Ri~Kb
z+z}MLh+lc;%ssG;h&0ElP|+N7c>M3($Z{njjwkia<>P#0t~1J~JV3&Wb(?MjE!V;M
z;b^+#IklyqN}Y3tJp!L4Z!TYZsTp<Hk9#uDP(^?#6ZQRQ$uc+)?#V72SHHE#$|UH@
z?M$`T;scw@23eD1PrV68%o#)wh7jL=H1jmrd-qbF8+VjYs?rmNg@%2gH9>BJalM0`
zBi$JPHrgllDy9aeDosvG>c`roa63JXjmJMK{=Tao%)~yssfu`SQ&V5y!Er>e4k#!y
zdmg40>-0pWrIKjJO7{716#U?1)^9lh$6)u!bq7!^#htmzLBIbWPrpqKP$?q>lQAMS
z#qT8-qYp>l?f(>b9{Y$b;<JVA=J<6-xf6OmJdb;ngort`L6Go2IsZtZD%40T7nJDK
zR6n8DYeV*&ckua{8|ooS0ItvVGd%8{*+@6a+hBD;_&&$$wF9~zMfjqRo=em%Q2S&b
zt^9J^Ha~0Y3F>cY;Z0d~9L|@btUYb399d2W-WN&Y*8Q4ylInT+E4XFXuB8zv3LiiA
z(`e1jSckN<rAz--!WByS=AKx#vNqv?s0pMd!lXI?G^!;Bmq&DCiasGvHx~49YA~gn
zlJJTcXGPt%b<TSA?)QLmA#vp;`I%eQJssd@`&#UZUs7d@DavLH1rrmU35hpY`cK--
z;I3HXcv&lS)ak@V_rqOB8pJV31px`;E9zI;AFqneZhWm-!E!~RV6O3Dw{peZjqzOF
zx=&NzuyR(cF5K>nO$6whKe%~^uHe47`*OF1lCE>+KYpu2P>0MSz9D#NLdpHQwG&9S
z4lp6SVI#ppe|zu!xcfe;8-G>&(cS)dS*;@MgBla(S`DTUq2n304Oe~G*8Rqm$HIs;
ze9W`Q&)V$NKh5<C$I8f$Eq@?qy9F}{EuOFow_jYyKo4=E^gMrv4&f^T=$}9zsvnti
znb2yi>2BsR9J|KWu@JYZck`9o-gu!NjoZJjbtt5)zHws?grQthRQ?<Bzy6fncvAF<
z@U;DGg?O)m_Xg$78X{zF=5s)XaZh$_Jp-@<D+~}ZCPi4@e_E@nbDIRjeU}vHr*oX4
zMONGRVaaoB_GC~{W=cQLz(4e;v@Uwpq3UMY5#rTuGR$KL?6&z3NnN^sq-t$q`()vp
zf^gybU@dNqKdA@`L1(q1p~!n`>naRxguR}2p6Zr>HFOo5UiV3?jmoOrZvEPjw?SFx
z_qn&aWVAPP@Gxko$*JQrpklrcf*?O3b@d)u*g&5<;8WQHzycDzUw7CS9=Dmpc@aDH
z=<qO@U6Oh0>HfXTpv)v(^_>=;+VxE7=CbkX&3U!Fn^-S*84Q><?Nd|#di$`?8<rja
zZ2PCTmMnJAL?ngwZ-u@J^Fd;orv*fkOIu&R0op?IqtS|h-pMU+cFSt}>0oULYjQ@9
z+nkn#RqMX|@8zK<ULJ+pXOt7THkXC(4tR5un@4qy%&U0LGV}As<Vzp&-{f;7OBST2
zf~W>=Aa+;TU(EqhjjBwTabt|?ajbeh-RRMVg19CR9kDCCjDDM(7j8`0%6-+m`rEu~
zsc>~U3>gixY~x^5K2R|%lD}{#j?2%xJ+C2bp?05AxgbJza<mhlFV*|g(Um5b#xU$S
zcBE%KB$8zPEBw;NRX=IE?u<Wiy@EJFp87Bf|Cswf?7fLU)_MEJZDv%I3JH~nWZy#B
zDMKMkE<zGXl4Rd=p&_!iShJTbQ5gG9vV~BtB-sf`5|W+gxXd)a`}rH5=X%|*`*lxq
zXZbFl&-ppe<9Hu?>C7Hvikvf#7vnPEyq2rcW}|3d^I_^`{D3Zn`VMEl;yt4j6t;D?
z(To3@pckvj#W1r)2tR{eqoQr3c7&(S;kNFn1DDw<LhGv&=j+@gDOR_9R^TZ<!e^uz
zG_X!HH~jBYs(%ZAm6J|ck*Y>Yzl8o?;$`pfxuNalR+>b6Hx@_iL{pxm>3`t?6svp5
zJ9XC%ZORb|-`Lg3q=qpu+w|I{%f!Nmf!=2I+bMb-bJku4y48wER-PWL=KlA)bp6Hq
zYazy;l$<7Cx?i6caz6MG{`-8R!;|sf$L=1!;eY>h%Y!@%`tQ?w7!Uq`|1`)-E>Qma
zEKvQ|Jiwp*|KF10e=e-|_L_%oB(gVb(Bs5Pw(GwaZP4RR^?H{C*QodV_vC-K!T9eb
zbQ`B)ANJmaTVobN`I}jYV|M0s<c)HL$ENWHy_Bk+%b)2Q)fzqUIsHfVjF#Z?@oDx=
zFi`s(vsq^5et%PD|Ln=wpYt2zR`xQs0~@w;m9_&HO7-I%!SA_<zGhiAc3|7P$*)kD
z<=v)Dv&6uZ`*_uv__;-|4rTj`U30Q!LS$|+nm|koN;X3prw=Yfn*@`;(DFpw-GxHW
zJt0RMOxp9d1XBhx>qw5Me_!0?uq?H)Ed0a!Q|l|KCpq*SmmQOWr{=6yzWaCi9(ve%
zwQ73X$w!uk(g|t&vkhiTjQz9IDv7D}`uOep&HsJ41``<lACE|)kxCwS)H8!l8KVvk
zqhVH5>(yf#I_KtlZ12y?#4M?4GhhxgU;3H&ZDfY+Z90e&XqMU9=JZU7Hgrrlp-H{j
zC}a)Jw{8A5-8;T0Grj6Y+!!~0T#1Pzg1rbCn;hyLeu^-7ojXT0<ZcXNk-YpapGR-6
zK^zE@3-c*i-^3oR_BnW_P{F&DlO`gL0&fC4gP~CL_)jG&I)8Sv5W=E_-&@B<{(DEg
zlyT55Rd@MDQ!!e8o7O>L#N*h)asu0x9E)LwYp1n&l&~lLkgB0HQy0np-gDAn<|DUF
z5#!MYNqw7v69a8h`s*P#q=Gma?SXqH3ms$<G;MF(fMBRNeyX_li|tWYjgdG-vJP-y
z$FECvaI_45KvtTqI1Vi@|1(A738D{F+H6w8@dlQlpy1p4vvFZIKX1B8OK_g?judX#
zxM@Knw@_264;KJDGfhp@X3x*^z@kCL4iq-xO<c`OMDLrsnpY_XC>*;IFGGtzMxq|n
zg$&BP4BOFPGi8Q6LYMEz?Z2%NE03Cf6{9UD@~FxNU&q>dpFf?#0msJ4GIZxrsY}Vp
zp%19dV0{C9X-J!x2Vxd$+Sce#ta5HUIVjoYBwZ-LACwG0H2iJk1Z`~wLE``!i^|c7
zFqw*yaa+~0X`<)1FTL|^anV;QSd}?~Y)sacCzZbT<yhCvt#;oSliX}}ejzhr9ZG#n
zIhhvh?7cs8jmMwXhDZ#m<G#MivNFUp>GHkZb67guHfbzT#=~)7Hth%T8{4}J{m2LS
zuK8<in|=x$9|pH5d)(Y$YOu(UA&)XLGh<su!<tf(d3LkPE>389mtn%g!*C^pzv<2W
zmnUOwFUJ3FOj9$GU+Z{uAdc_w=bR|>g9i^zef>(sj)@tAa+)Q`muN8!9N74>nD*`U
zkI|KCjWs;Njz<etOU%zh+Xs1RNG|4z<oO@c-JJ}<V4KEx9eOQTae9h?S|$6-&<!7*
zP1w_20Js!Tv^WX7xVl2vW}Zi$${jo-TM){Y@Y>k?;hBv|Npk*rQ&SW2ddA&x#1)N=
zzF<&seKt~J=X{G}-s15#_to?n9l?!57RgLGnqPwrnDcmsGcz-;bKVB=gGPx#RN35h
ztX;c~xm=1no*y;A<_CfdPO1vStg@>0OCBq7kUFq7XDlr)g(M?kmi=~S=1E$EC}-pw
zO`2>hfBuY_JmxVC2DFrz2nRI|yB@5!x@XEbzBbbJK$C7Q@wZB;_2u4F>@{u@|57(@
zxoVP^Gzjq#*MosROhmiy{Hd({QUvDy_&GR(Gx_%N=rG7g6fTGM%TupM{XSXx+b6fD
ze77H6e}EH^n(pL$nfZC$$~A7!mIRaK&~wa=abZVO$zX+rFJFSzrT2%jG*Z{z@3-wa
zuG|4#mUKdgQt61KLs){M*7j4Q^0!ST6EyGCvbWCOF)e`rAoWY|ou!|L_bOrn4@D+u
z0<*{xJPNOebb{CS!J6T^g$v2wOSSD?R;W0QogBw`ehep7_f6G2yrlSdkC$CGPkdWP
zYr3S_s*6PlOJa3*!xV#TG1vR`b!eDnxVamHUb4!0ftb#AGf{Rtc-xtzgdLL;CXIHI
z6(uE)254v%A?5)q-gR5Qd-0q4(2ZpuqUQ`-G|^(USI7&*#=!)?e|P$RDFz|3oMURL
z^5#6eX?IMSleBmG90C9}NL&Nqcd&&-xwdZ!5U14;?ywkLT{ODH_vBQ}?=3OiZk5i&
zo31uiKS0v+L^Ev5$rEq$F$M5&JyjMQ{%S@<dc8Se?(1xQvH0Z{OOua#x@QFM1<0Ry
zX3rNCrowscaPUfz<abT(sW#htr;8oW&-LC+M4JYqVBjv>F;F49V;dJd-JL)0^R1u_
zF0Z*<`t!1=%)&)SRU4v=WB!L(uM4Zv^weA&`|grtk9CP>TdrQ!#W{teVc)pPf<1rG
zsoWA;#i8a)BFn?U!Wee9r;}74--p)3sprkgL}vXo3mv~E+++QQP6{ObSGDhuL?AA;
zA@7=ETbkyW{zGu#+-lEA7y2WE7s-<k@~2-)_l>=?Go}$3JdV3hIF-G<219^X&tptL
zC(AH^ifhH5$rjP=L`&H(=yG83OPP?4L+n>HAhIV3v^c+H1o|8oy8T8RvnI@Fs27L5
zI*8fh?z&eV^EA83rm4rDP2nL8xy5VjnJKu#V9rG!NH(}jS0B0k-P8McTz8R197KF+
zmISwh%4lhbi)saOb`rSh1M6Q#l~z3T`cei9XYJ5^$3!&n-7sC2yBg5$PvT9jOB!C+
zOczVg^c+YRY&q{B-629VdgMO$>FT{E9Ff_-@02t#HYT{PVnRu?6+@YVKi+X^>BrpV
z0KeEXqs~|8sNZ@X>Cc~G!dnZgrb*{h@9<~n25C|qJTz`Z5_i{s^H=*-v9j$bG|C=x
zJ86*i>F@R9-CjRTH@<y5o?jryCuZbkB5)wI52D`aYMf(GCef3ZN<OpKb4D$B!Z|`P
z7(mp|u*FcZ@HyC56*eYf4Zg7aKRL@|*Tx+lIPN~%w6j|9FKVA#HWZEa*q)rE&z<YU
zm88KIj{}Oi<*2n*^r`;w*{|4Psuw<ggTdXNW&iPXN5zE?afyn#<%tHkixs~AmcB1!
z?p&U6fja28GP2GlV4Lad?{B-BZ^{fP7IyY27YxT>Qf{9kT(cpg(x(?z3ie+?(gDME
z6cTZ*gf~shaq3*K`XR7~ByJc$=$fy&1Pro&ExXxs0|6}OSkp8}!<C;z=jS}V$<_q;
zl}6kXEn{K5fZ|N?!3?{JYQwNo2qd~9%&)JCxs)rxg%s9u2TGy@O_*D;Izw>ab0|R*
zk+)H5M@ZtE+C<#rsEl{ca?veKTU16vL;?k=mgZG*tb4FaAT+Wp8`6B6;%7X~n*qtO
zma&eJybzP_a*<_~xl5W}z$6}G&(wZ#BjIpYX|V#MOzWNk4<~BuM1Yr(MzJ?-o+Cl3
z54u(>0(lss_R6v$WLDO09-W1A8M=T_9ZK~sWVnLw7JC)y_HmfKvG?rrXSdyY{;j+O
z<&<RG(vmy+kDdzn`JX@kTqe)53$)d1;`EAd^0F~ePP4p;kPdR3Z^K9~Ee8nL{E>uQ
zBOV5tT3tz<wK&H^+^rVbJvOe;71@2*{p3)jC@BVM6Ro4OfQI>}Wd>RIY+Koe|L9n$
z={J(SC3apeiEl!lT@EJ~WyM8Bw`s9iBfg6yzR7}1vph+Q3r$W!No(A#&438-S`nC`
zAS@#fM=K$>pr`&=%oAkP<;>EU_k2^LXw-#fP+aT#>xGwdRUSyl6=5C@>|CFX&dy+<
zkJZzRgh+p6F2+kbAQ5=6|G!cp{ty+u&8tXb4EC|HEh8m+Zi&dCEJ{upfy%OeEa&u-
ze<%$Mc4+nS1YxxN`U+<7_1^C+JY8IX0zxt#&DOH)1zX-AMcZ!+D_DP^S|aee$hcVd
z!0HW_2*UtwO#2){yf2CTZ7q}dqF*Xc<InOUYfP+bYss*0DO9RIuBuh;Gt>PWT2Lqs
z$U54*WFGNk`51Nb#g$A6i$RgqK8~jzU!5`7Pw_8CF7qAp-Lt4vAp5JnIUgi?wtY_b
zTx#;((jF&4U`giZflEOhr>kMpQ)GVLx8@et<mho|JkG#ZUe=c#Qg8VM&jg7T5M_0)
zCzks!`oW&B7QfGo%rE>yZE8Xes!Ck-vph=LSI+CDlOBgI+>~oB#5;{6!ITayah(3S
z{oRpxq%9^SbQdL%W8~AaC-Ltg!gvyaL~y>y;oL=N;;xBb4oTI?Ff7!|5r#F~p%h1d
zvjpz9cAtK1o0_@(t@bA#AVmepH}YaO|JvkyDwG5~3~8hZ^vc1=t;^%lbG5LkRyZ3e
z){~e@uvFFtgLzXYgO?ogMDY)rBdg-gatWFT8|^PfdsPD_FyX`}W)<t6?tSpbr6<Ui
zxLJvN&3X@2!CDcD?Z=Y@q3DUCT<aCEC?IPszqp)=FbIeYN{t}6H8wPa{>_2?yubPJ
z-zWxGw*Gs%u6V+u6Sc;SM<iBAT;rK8AG9Xs=E~<fZyY~!xJ=x;5^nEjCTm|-SL3&u
zS@$q1K1{P@hJOnc963iCz8@6*=I7DRg1A$c;RrMdZZkgg7K-PAo`4k#I%jeM12kXd
z38x^yLQbkJ%J@$e$9K}{q?~aq7r(Tg_WV8$nZO#!!H6y+qr+hC?jEBENdq#G>)+!`
zqa4Mn1x)?XA`qgGN4vHT`rrKgv11qCsLLg!UJ*V2tn;{p1X&(gS(%{1`C*b@Vzy`N
z7oH%j-~IjlFdMQLo5hadF(Q-kO*GFzDTIZm!fj@Fb+wl){$%V+{%ds69+&kW_j&a1
zPS=~$f*(R&6EOyDxB{}_p$1YX4MVPt4qlY`TZyvlGh!2H=#fvxq9FgsdFX)~*^VD~
zWmMSP9b#le8Vc_bX?XfQ1)%es95^gI7l-aZ8Q@<OtZyovfTs-!e$l=)FBUw@<UULp
z$rd(4vwwbxgWpwh{3gc(QJq4=wV4t4Ke)Ay7sIh&rXKLhzGBkF%5~vcaLXKEoC%sn
z?Tj4n=wqYa;MkR+>-Be4Zsi)8-=kx76AjbNALDaSNn+3R!i^rAqU>YGYNX&%#Hfl%
z5twY0(IO4v8W64qC7+Gkd68<VhsKndFh$*`p!*EZHu$LXH?iE4Zyk&)8AAT@P%NG6
zMLsu-W6!g)@Dj|psc+nUN^@sj85%FX9^l=Z+P&B3;83ZXwpg-I`h<hcw_l*UX_j;6
z%t=Sh(BN#J1Nc0sp2PVF+|3YbY^X3OW7+ohCKqYmGsE@p$Qc=g^$C@!n2m{l0Ab%v
z7Rvyxd0tM;^^A<1n4^$U?yMEj5DQ8Mvj7y5E20x+HqSagqFC?lmV(K1*Byp7(S~aR
z`kEz;eWklN=WmfHggr&@X6JXqfag&9nmONk1rPX5%}xJo#P1N>!?YZGFfGg}^VK5~
z7D9oR?X~y0kO`Y^n^GIn9-^b#Vka4~HWr(9J_-_SUfX%u9MS~B9msbRp^OL$h)^EN
z>xoT1C$&XOrvVSlrrn}0S}-yxR-G%Apn9$oPh;$<^gxF)<A|TjRa(BUb)RY2mY0;c
zEzOR?J`FAjOXFihJ89<veb_=T+wi@EE-ug2xSzW~p=$cxsVAr(rd-lV88;N7f&J`s
z)MB{Ya+NQ^##J<i(#wEPk3R4UCx^ut#xGB5Yng<rN-AVs<+y3&8Wd{|*Vt4^#8tBH
zI#tC6B+taVZ@ZUC83%i9!l}pHPcnQIYt&&lr_E4S{!--Y!b+ANzt_gA$6ni;rN-YK
z6ONlPKPcN8iSDoWOg)*YQBqQJKRT{2d*=aVZKwmqv<@nnc+Pi@jvlGJlihYn<Wh*A
z>C;TUHNCo|Wi1Rg1`h%p`m5G;QJ>-w--h30gKYdn3KB%5c;T>KzZ+;}4iDCX;gXDn
zfcJ%=f2k@7h5d_o#xo3x7(e1bDnhfFjxsY!$-DQMMmS@C$|F##VJc|i+%z!(*3vVu
z?gGdbzO-n}StXSvUhAM)wb&Qt#lID(hmNvclPpGH4$1Q7#uZU?2@o)ak;>78JD}`d
zFU0c+l@`YXxc<>QCP#(|WXhyVKCCpJkxkG9ubV!w&Uf4HAn5lDLUwDk%vycCgVjDu
z4-0eZ>pbsx%?Ue6GCI!Id!<JKIi0mb2)l`WAMM*2k=)#Tck#E5Qy-=r5=5QS&aaS3
zq<2T&&_99q2fLa4n}=c-OR%3!meD2~2%z%8FB3PgItIU7ZD;4+%J3r9JEx*=h{nVx
zB{{Zb99Tn#+uu|xqY90LLlmk?Cv{(~a8`LZ@sYg~DSO<VW?3I?;mbIX(9k2-j&x^P
zR#r9-$f~VYEagpTYVE}LSM_#x17?0aC#|U7AcaSrMDKIjYw&F}>Q(5f8%iwGbkCWE
zpa7dOprSiPr^5iYH6XEx@0@)#?~>WdukJ`VSzg;m&>)c$KpbJGA{7|toIWOO%6z@}
zHZ7!pQ0wbgFL!Q=_tP5oo{tbtqCD#diU1Z?V3=iDNeaJ}v4kAm-fQ_q;epCop=yIR
z-x547{hq&?P6=p^A#}{x7<$WyhK}L;1s_Jp{TnNY4bSqtA$tH|aKeNIn+K%zA-PH%
z@E${Qe>MLd*U2QLkROkWNpp8_P!!}3Ici7?TNwN(@QP@rTXvo{{7m>638{dQ5GqE%
zkAQQqJoxg8sH&CNmogk|rd&Lv6Ph`tH8okp;C8}8_wfZ}@5q7~WrXR)Njf!|-moz2
z<pNQ@Ixi1mPhT_;)wz&_JR&)J;Yv~<IoXSl*ni_Va%Z8n^AIhbMY)dv4kWxI;-k;T
zBavy~LTno*%Sax9P#pyaAp>8eeH^P6EoDJ+#@F;ToB_3Sx}d{-$`aq)Izde-7f(gL
zrEp#Alp<+<;N!<Ufk|-d@~q>Io;q)rrFY@{`NydTaY6iOVR#xG99&#{$Y-TaQcoom
zEOH)u5z=UuDgD?LJ_&eUfI4~dz0``%+wi^$=kSgwO)jz^q2|&Ft>0;Cd7@h&s>jJp
zZ~3c>%w22D*Kv}WD3~ktp?%&pg~#!tv9ZB>$;;Y&<|%|GUFnR>-nq&c863AA*J4JF
z#bu#w;ZXX~z*uwtGWvh7oh8R-*-xetK%^+kM$_?=gH*TfpZAWS*~b_R$#B!CgHsr;
zU^34STEE06uY$ixBIgGV*1etclqXMYR6YGO-mCsEn^`orm~60rps%t$;M&QL*rMKq
zQ@78-U(<OVaEsFdUw=NP+T4l;_Wa-T6g$@3yuDC?louXl4zd>f4`ttQBtn^iBwey2
zRo3l0h-SOC`jXc>x0%b5EQI6OZCK@r1{u0f|1<-vM>+whvP|%38&SeVY|YH%yA9j}
zJd$3^KX{!9j%|3Byk~+<-h_p{6IZ03hx-I}Fk@k=-#5`q;oMqYi?wV*f`VI40*bUk
z&KQRBoI`(q?A>j74p(CuoYC|e8{_huCi5T3o|7}@@kGPZBG<Kf5Ce1xdmw4<7C;F&
z1p$E+D_(3(=4Kmap>MZ;!kJ|p=QLDode54=tvM`GK@d+*@<Kz=sH;%m%ulC1*Vp<7
z$Y?ulhKx+ZXPxqEKS<cbfq$8CTP35u$l44t$?v=#@b8x9@9-NBEWo>>dv0p}CXQ~X
z)6l6JOR!W$yoe=oL$4i=BWo{-<ktXN_i3oEAtqO(8d$LI@tXf~4wbkMQ|4LW=oZ*U
z#%fm9<fl{_lu?K$B|#(E+?~33MZ8iml}GnvK1PpoNgG5*M;+}5&}h6@ioKs??em9O
zBN2q3{G_$#de5Mr@%3G6_gZRc3ErWs{e%a+GinWs5Qz(|Z{5Tl`&0r@EN1Ctb~<Dj
zsc_97qA9EVhTMCz_S={8V;r43UysgiOp`Vw3eyv8(w+N4I3B2{!PJSK`?T+F`KMjc
zPut@3N+Zg#hi6Q$C#_E;J@xZHnl@QBiD>8rG~pPPQXLNPl~<RQNz2Nny!U7@KmiBr
zB@T$66!U;=0@&zWCpc}F#P<X5(eW}f2>OB2+}xR*jpZBw+4^iq$$8*}C1|!BI3R@?
z7;*aF!PqU=yJ?o-)&Sk%@iW8`d^8*;0VW%feD@XoB9vje=MeieREw~ZMO1YtX~r&$
zT->KCrs&R5F1TRFl8%F<xzx^L!jDqu?D3K#@oLCYJ}KP?mDpC_8dN0mNvQVTakoj~
zjzH_Z3ix@Vf;T+G>I1U_8*2kIX|_Mdmd+cd&f)u@nfBvH!N9ammSb_xF%7t=T3XJ)
zh;uSdx)JQS*(D;!0|P_D;dq@;)rzC>eeci1mRrC4bzX?6NxT)`A07t5BT?qL1_uCe
zM?V2C4yGL0uaFJA0=dH1ZZYZIQRXPhujZ@z&K0x*=66lp=MV@Vkg94vBB~s6PaH23
ziu~(&b~Y#u%@+I20+o`_@_>>C_>7ymx!=+EHe_(d)93L)??$@x85>(BA*tFNsf2gA
z9(@s-w6k=OGpkco0s)*Vob&~2@cCxw0%7q3Pi)hb*D)WKW_Q$3&c_&ptLAj=_5lOl
zFluxqkyc{rC}v$JnGp}<m%D8boEm7OytW53hB%Pk%)}1s!RXx5sV9J`z5nthv-g~P
zQ!<a*rmi1}V~7catlsGrxjk(jI|ge|qP_b|{Ps&rQk^8RhNn{F*vwI*r<V~MnEM>w
zJs!Am9E3wt<{!Ytb<sIp%;~(2^D|8?*{OeeMovkRJeT=3CmlR^PJodNi89P`adRud
zDGqOMVb7EZjpfA}tObqs;18NIo1!|d#ZA~U?4aF@4gTD@eP$<VOR^^=ccm8SDx#<K
zE{y$IYQ_yiz0d>xCo9=-$5&U4&cTbNs9l)MvqW4+*fi)UyXTf<&*6N^6}=pyWgPCd
zA!;TN#Ie5~{KM*%zG-H&f?b~`CV0>J;JqeMNo8di0B_TonLSA!YQfov!GR^6_Vu%m
zlj+rr(L1~t89F|*%&`2^t=@&`M^Nk($F6%kPMf_6>oHEsfC_TbL!n~>cdUM2${eIO
zU|LB_C(pCOF7G5AIU!XUe)R<mR`b;@Xa0P4vROCUQL}#X-2=tbr}Muf@YGls3)E`-
z$EFPS(>B+Iazl5wkrq(u!Dy<#?Q;~!5is)OROWrHednM0oy6nOqw(e0Ov(?$93ip$
z-CMTk+DmCFqOxhCM7d4jR$t?ecjrPe=vhj%?(qpcMCGZFa_EA*Caurg97d6bVVMI-
z7W(HR)5uErEWIZKdrMkLd)~biZjbw_zTgQQrBnIEOf9gAMv>Q=)#02X77jB^aj_pQ
zVt(_U<DfD*X|?|gLN+n+V5(lM$1)D075=-qSq)aAdq;=whx|eDVqwdFliaf<aHGLk
z4NEkmB}p6-Dlkg$po#8@y$sWDmv|Ow;;eus+wR&o_AIy<5f5KB!ep_-8L_J*ao(m>
z3hgknu6Gg|&y;{-P0$3U(=wKUp<~<5S_62l$%#q{m8{iOl_rW?-{hUfR4WySKQSp8
z8NdiY;Om-%G(?F5>+_d+=~m&*ejuD#z>_sKsh0OeO&l-ZS<cH?Y#rAuKD_e6%-}|w
zg#0-Tsq)D(JQY#H5j$?f#zhhzFWNJ3=vWxr!GlfI=I(oWe4~E5$?VTCiU*P{-79kO
ztkhKg^h#cxk)|IBo-Mm1AA~WF65<PPei=Rz(Eg6ZA8|-WUZ|a3?$e`=151J!DrG80
z%h32@7$g#M`@1Y^PO?esiHEQ91FFMgH?!F!Lw3wK3zo#b;b<sH^Q^4m#~l2W&U}cy
zba}7@eZr|PHLx@XD*3qF>$5SE{~5q0DtGAdo$YCs@CCtilXLj3Ga7uPBy8AdVG6c5
zT!gOetr$BWU6`LBJQ`O!M)TPyp?>(j_Dd4ce~~;(szj@1bHodqbtxd8Zf<TcqfO4^
z7&d<sEtXI5BvD`S@fIlwa>x2j<}Fdh$P9@>eNr99F;S%9uP%2V_N!|1hE8^zN+V@h
z_vAhFOLM}x^@RJ;eIci(g72JCAe_UIRajWK7;8g0TBq=^rdj59zjnSju#lm0)6tP6
z-a6r=w)VDqV{IDdWr3Dt3yOlvoa6DC#iOew@ei-&<P<ku78}v!70P%1IOrtpd@(w4
z=bN89YaiXA{9(V3F}RD#@T-&bCa3|RI1?kIv%IC`5SUo$H*)Py;$bGeC&Yr}T#|!J
zoXZJK3)1ln+BDdmo4Uj`y5<!hpU4`X;dLgD>EPxIN0y4P&a907!P?7oj;q5RY}aIh
zC2FVs3g#)}y<S~fmH84k5m;O;E;H#KQ|2#a+I)LybnbCz{T<-#+5a%Wjl&cj$IilI
zB=N>@>I4X!7?e|WT0V4HN>1%g__CP9^z2OC)b;Ei0;lB{A2-JyqQVScJ_#A~5nmgV
zcD`!lgpU;KobI{EW*;7{-L-%BOsxa+_h@|?Ca|RCANAJh6}^VUgHXQQa{W(A;cDN8
z90=!x?a^SEiN@$M`0?pHjU5>t_Q6WT#b9+kmORaubw}gQT%gS+Sc%yTIYmH5Z76uS
zF84M#r|sO3PnUR<D@^%9nX~Xg*w+u;Tq7xAvFWqy^Xs+KEAQVC<JC37VrJ@cj|9IH
zvi~hNXXm46$Hd(dZ?FGVFwEJ{X<TjZevS5;lf<E*(&Ywc!z^@ZKfU=8BuO-)jtDPr
zoIlLO<~6Z3{P2q=Yw$Fzy0WoHG+lWaURu!}k4?85q%E+Jz(aORTmZ`rWmmdZ5;~;z
z`|+5<{s_HeJE~0u+u|OUHZb#citx*X)BJf}bkMkaDDts`X6;DEr%zkmN81lkk@wV3
zO?$GRqokMp@=fyYW~|}jA^>akI}{zJTbtb$o2kdYOP|kvc_szh!>1(}fiajKKICO#
z!QJicIa4zHWHB?qdz6vA?R072u&d7@`q*owX%kCy*RuN5$KFr%SXr5;{w~;NW}kJ;
z@+7AeBM2@yJ0PRTN+TsOg|;`%p{YAyAc&vIaJW3H!iVY4xnPUIjz1yXhly%o4M{|5
zsR$%OLwjL`xGzxQ#HCnr(5FyzKKk8+u9l;#i@ZXf*KwoSe*ag#^xZc~{aar5S8&^~
z_kdxEY!)U}Ev`M^%Kx_ZkWbpdZq$Wd)RMx+_(pGqyI4P!ca3&}W$c6#8QZ!#!nVN^
z<@r9ojH|Jsv`&`wK(PRSbc_9vzk!~EN$lFhC|^MDc27$sRvop{Y!Ac*)?E6&y5yMM
zaQE<;)QAzuuI!6FSW-tFaNb3q3Eih7r^gA+Xc-Qy|13s;Sf2F?m<7G%SrI|yFT<PU
z1siLn9JMq#8YiS|-#hoYeSSFIE;zLM!mTY~Tfw};;}*?y^h%wiM<dyBK0s<4y1e+{
zoxm0=DT!B&D9^UmaAcbo$9imz-`V6=bSB^)M*}yheKVPU<A>IU)55olte3Rf1m+4U
zH5-EKIga?)meIP;1wV`4IWof=<f?A+IUt%)$M*YKwaK~kd}uBv%W8)L*e+!0l21v!
zmF2b%6;(P?0#xoFqE~wm;csb}9fwD!k(;|^e00gixqEMrMA_g-np*;o+uN3Q{<_+)
zm%Bf-g|8DQa6E$_Gy8y=UR~Xt*FE4{Y_!^XIWBzb!w~^qLUOJjl>1fFjz%#1;)5V_
zlq2TnTf`2J6w`{r$+P&^uYRS1Buh4&>r*bihXN++1zV7G4!fAtqk~%8_R!s9J;RGk
zCWh_UK@v0_Z%8DyW75K)Y!nPuCMIF|T~~hW<G#rv+)$cj%3M*wt@Voj!Su?eWfXB^
zcMs0TnGN#mwEx(9xS%(=DmS+#SgT>=gZ%{+oB<-$(kvZ#x+k25{lgtfi6FY+;Bf06
z2f*yy<@#I!Qa7t453pK1Urp+5Z7r`^z;8iJu@9v_a`V!nwkh-MZApn@FwWb@aq5`v
zEd_44(OOJ)$ZMu>%<ZFit6Sw8x1e}oK^zpjoUMDtTpapqVc_N0x}N1Z0M}#%7q`g^
zJC-~BEU&e8>E%>V^4q&R_)B*maP%6O`(|6?$!*A6E8<Yv>-5E0T8_irYnNd8S&Sn`
z3*tIbkYXfjoBREV%7v(emeGTa4-{XG)>Bte98D5-JE~PFun{=$A$r|ZHAwgi=jnPh
zqp(z7tg1N5dav{mDDaEPKGQ42qrSF7R@`?-?2wmRmN-s_Y}HRMm%XaJU0l#=N6oqM
zw*1F)OwU&@{ZebNair>&_pP^sd5+E&UKcEC<f9Q^{pdSnSBb{h$+tWiAV*&ui%~B*
zTi!J(=e;hA7p~KnkV%@rIsXzU;5nFM%>ytJU3jIA-PU2hw0khQYXikm{pF+kL(vw(
z)(%`T`aUdA=Khe9+sF)@P5I;#Rb=g0)M7RrddkeoiXTqv$Xi!Jx1O%OJMz6Fn0VDq
zjxew=A|hd|5kX(bH}f)b=EgDZJ|%{(mv!yt%nd|&Z)6N$z=8Rl)B~;T(0xg4@`Qf*
zd-3{YH|nrt8&Mw9VRXrI4Ze%*_pdp}M;v#OZmk`xn#Rl*bQj9M2nb9VSUA{-=@3y=
zuw_<u8UzHCvi2-p&VkotF~e9b>6yBo#UI(+-_I&>Z;md@=$T4YtK?11Q)TvSYO92X
zKq*^0_id?x5qc+Sx1WTeSN=jud<6T>)E{=@WgCN4;YD7nBlkKcVrj+a(}2&Na$Yfg
z3XwUW5Yh?Bqsml0MNB*PQr5W1?!R~1l)0{@fnK}9iO=Liz?s_c47us+c^~71`MxXr
z7zs6c&KSLO1dX?-sNsP`QswD;tYBH7CqI3neGW#`$ue{l@FCWZYJsdol<zVGx*H>a
z$$5;-hR@GOwqHOadG-E(w;!WW*>)KzsioN#VTh8D`iQM57=H;{pPP~NX7({oo*2Vs
z_2T_>?DX~h!#G@wOtEltarucu-ytgKE~Zz2Gcf0Pm_G)HOLIqXl=<G^`a@KbehcIQ
zI~yx2{o5;|Q27~7qCbL+=TDbJJwtg7Yele3<{Cg^1^{w`X5*Y}mNQ=@eCA~?Q*giz
zT{(XD?8v8^Kv&@i-~M4}h@I`A>q|Ro^@=dgX=)QONhvA!<sTV@OkKVSiFyxnG8Y2p
z1%O#G&lO>=ATG@Y3s)g0!MP8;VC={cTO_rQ{D3i6-kI3o*073Yjks?F_!zADvaYW!
z;-Y;%nM;iXjvb-`x*v!_RCGA%0}!K`j@8BA>O5ogL!f&j{+PtMkOQuDmf$@Y?75&b
z#jw5U_`OBt^G!1&j1LxH)W-?(M;Mrh&m>cG@CGbaVynC;@hn0m-2`$J#TnMvG|sFq
zq5D<$(=3yp3YVLvPm7AOF{`|s%b6;!fhq!J7|-^XZ`eZpae1&=`PSUu;R7uIF-$-0
zqyA5q(Km~qv03)_0~&{y^?00p*UpUzFjf)h#@jjNf)1MRAwUWSgZF?%(luF{4FD>T
zsaHe;^WD5$>!U4%svPk=crE@CU+l&!gCt0IyjS_%=%%6{1oz5$qebv-kP1-vzBj`G
zFjdq!h=w8CZgPw_Irre`Vrppb<ODJ1ZQ8_fjdY#%IhMvDy>Hl9KmBd(pecK|ekAa!
z<{GBq-@YMD2W)Ps0m&G3lsQg#kh(3BW(*(Ur|iDr!1Fp`ul++6+iY!BrtRlYDqvFu
zqWg00px1ZQ{P^VOBUzD!EuCcfjqkhwBP#vXV(%4+o+7Y(Hbc7ObvKn7+~L&vv2XI0
zVZ6h#)jL<AnLalJE#7Psw^H3n?&)*H3e>6~e}bkyR7;j<oTP<dZF95&VmfzK$D0YK
zt-ikryEMDY-D7pU;7Uu0rpv|*+XhBCCOG-8ASVDCRrFWdMYMcig9znEFsA6fs?4`j
zE@*=SJj2qsFZ2`=fGjW+MQ$lhI2W??nElb)$HV7aGYB6X?iUpu<!@{P)!sm10{H~m
zPIH0$otBvrxieeKIdVg;_ev&xo#*0UPd&t|vRyUJ^5fm`cBU_d&Mi(=ujLB_&M19a
zscBM0j)UAy;zP9_LeL=^)ESq*@hjuR?K<rn8oINmNU%pJ60?`Lb6mmo6$8@;S!BO1
zY%7|=3yH=H2G`f+lN_Bx%+DKHx68b?NOX-HxG}RLC@*b%7iXX(&|%B_c!D5zC8y`0
z9XFd1*FKJ;&|HO+G?<<cHc9Nld7UQ+d|%u1j3$)m*b*Nrs{v~T%Qr+j8<h2(rz-RZ
z`rDyhzva#H@8Nr~X2uhW30LWax7X_UDI3h0dgp8E8*$A(7Fr?V_|vX%#FKy<PFDB!
zgKb&dgYh;~C=`YEJ;%7SD#{Kk^r>;N4lv)lKj-bx3CIxW_F#YFwLz-@+MhdrYO)Kq
z40};~#$1t%3#lLJ!E4agwyUe!?wpEHbPs|Tz}-qE5R>qLm6ie&^nP+41qZV~TqiOl
zDU-274{HbNFV{4cSoc7tYn+1(1g;U5T~c}NqYfDEYs=bHIM5Go!MXo8{p+azzjo(i
zEPA(kd`?QAD8hRrx(K_H;^RSbJZun?(x}|0{sV35pyg~zH82H7fs0>vvvFhJi>L)R
z^EMoCaH>Terudi)Q(p1P?}p}wm;tI(gISCHXp5WdSnzLA=9Q^6W5c)I9CBMf_30U(
zp1Emofqoz1VbtiAe5urHP)X!IT)5dcfzg-xsgar{OC`lKs!r<;XLwsfXC$c<vsA4d
zNZ)=IPJ!Ofx?84i>4rS|E|vW!cw2RPa3#A89Sb#O3lfRB!+)rbt<1cPTRlmcHIEiN
zE>SuOsvAs>0Nt{xTN>G-gxOHZDWYf$&DKBGd0s%PY*IUzj*)YuT4c-UsV6n_l1(~g
zvr-tk-C`5??@&-nhleG!F@DJ<QDyYR-)DJx%bX|CME(GF?#GYAM>xn;uH@ahafOYT
z;A6w1N8EqJZM5n%u{<;mVHojz)6ySurT_YQJ@k*qz1J;}s|3E4FyoHI`=hT!6MIH;
zMhw418pwJjM?UX$?n4ele!f_vy<1EjL`K)dq4uZ{zb2owf!-YG|58%W+bJQ*srPTw
z^NhmRnvT4a9Rku0sR--qRqvO<+{cq&fk>g3BA-YtO~<s{8)cw+FD3di86r2CDD~I9
zXf0ur-EUettaqu~_E$*l4@KKunq`-}mSl>an*C@QtxuO15#;*}-7?2<O`wKQ#T33r
z%UgW^jOEY{n)q3~4}ckgl8j=Z8UTGbXNOB?C09qSm}PSlTSgaUpI4+slrYfk_MMdI
z`t+$wsEUVPfp1B=;a()+{(H3y9#FGkZUW8(+Re2V6L}f=c~1obyQK!F3LW)hzx$vK
z+Hgg;KyyYCPo;(D=d{AIHtkk)mTTXhuo~Uw#mvW1lY`T0sLcDND-B?R4%rRe(=13j
zt<9k2GIwDTTvU4&GLW<uZISn}8%}TXBI1P^>|^9NCeBoqps1cefr32^xkea)0mk6f
z&M7Rq=Igx*(QwrtzeY;i8pT_09Pha%Zqrv5**?B@gq^bZ%no)Woqy}EEU&JvMn<gw
zW8hOGp@CAzJC2pWdv?;Y?7I+EAK44(5T0-kj~?eftfNBFkPk;Vz&mIlfE?i**`}R>
zu-H{RGA}e7{p$y6Myw;L@7!dC7=wYC9G^q)MydOTo|RmTIyub9H(EU8@M3V*8-9Tn
zY_(9%!-;0fjF1*cB=BvYbgw=|tUzw=kb6HyAtREq7g{aISv4ffF6YAc{W#+fb_yVu
z1AkONmg7`SAMgi>77(H73kVbLnq;wu><XyDp5v|=Cgm<u{gobIxW&f<B3LqaJ7747
zd6y|h=bMo;81kw?wclw|EaegUhdrY|yTt(Jh*~=qOoSPOF=0fZ-nf_YH?2nil0e?v
zK8_)2rSW*zO-Ytn3Yj}AcSoSxfUb&%!KT0BJP*UL6+Q8${`+LK3QSDoqfk0N(`d-q
zvRg^!Zf%Zy(w_BfYnf3sb5GA&k>`e$4}=*A84OHy_%T~u1n4sff_EDZx5q863j`^K
zT{(Xh(FIrY>n~f{PGf?~q<Br^ZurL!y+5w@cXwM#PlYrb_8!`!%AR5hDhx7_?wA@p
z>y#`-lE93|G5Hgk1xuM)7|?WHSIdCDPBVS!GIh0(Qh|X0t~;}T)%4u4F#LKul_B}^
z@Q52&g46{iPU&_NFR1B~+OeEsgog|i{EtX&`%S0C^sfIF6eK5u9g8Q(W}ph^M|Vwk
zd7wB^Eub{q3>v{xu_+jxeIluV)+_FGpUOR<<G-{3Hjq$alwwnSfSj5OLT6c>bxY!S
zUxj<Pj2spXOysllMuO}(hPmuHFyK-QP<;Htw9L9kb`S?kZ1L%&p;Y<Qh(bdRs+t{F
z>9rr9EkRX_jcX<PeBK*b_jj_P<wZq5$$WSZ5BxrmJMG=>_vzqbE@WWjF@V>PCv3;!
zS`qqUAh7rvmDTma%!uKGsBUqfPL#lz3$N7X>(x5$*i(d=SxF($!s0Y<{mA&JgS)G1
zbiUiJ1qh3h5b%Tib_Zb%T1sNn@U>%9zh}*V`(}gSsPQ@ME_mAT{-FASa)ruA^6#-j
z&a$j{BEK8n#g8J}3r<e9Ni}K`z}-zMZ`QX;5&wcG2d)u_eSmmU!llG<iZt=v!?)c9
z+bK%U75uzvsV}vKFX~0ToX$nX$n1}!;NlQ=I_PuQUTzUxz34TMqc+rT3bIM<1LYpV
zBV#GzJC-`$zjsN^i_$E=i_kkqPge^I4^P>BC@fsk`z8x59JSPjt{NG$7U@0H=ff>L
z&#R$$hWDa`=SV~L<hlZz*J4fnxYo9{-yVq5gb(aSOODFt1TPLTM^XhCgYoT&x0((k
zEiSwXYOI-hPOm>3Y%N>z@GJuWb~dMLMB$)s&7mNUb&__5?y%J#XnSk}IZ<Ao9Qv|4
z@mrMugaqhO$|sFC-F$~I+85=&(nnVZ?ScV{d#3jcN?<elfrV0*cofojil0>3Yp8+Q
znoh!<0W}h*(&_<nqZ(=g+5NB0ihBRXB7yi7C=^P}lOZQ44|6YVQRm7x5V#HMbr}{6
z(S0`YgMlCM(7TkkPW8*`2;Ba>umZ54RjWr>?^PphhY9Vu7q+<uy#oVKtg+~!4!xN_
z6Tio<jR%tiJIPOCz+hwTDK#21sOXx+OW9L|jb1(p?RnX)<Zg<#=(gwCliS%PXU2C>
z5I;%@MHA5IROhPQCQ8oWLhO3Hq@&<5{rElFhzhxye|H4eu->d5&yMU;Tgl{ASyn7W
zs7{2%r~l9rcl;Ym9(31q=cDRVdC&`pZkY)XXWL>j7a**Ng$a};EUEJ|PNsj6m^acl
zkFVs1qb)~x+ra8axNxB4PfQ=1p7o;FJ|5jyonKv~x93U<!A9OhGu?=HC+|*@xRHdu
zfO*7rnFO43r{<;e{kS>nr*j=j!NPngGQ37l*iT^GUXSpsjELaWmzPA|U~!p{)O>sv
zBBkD;wp4Nc>1UrLD<;dJIi~Ufjh5FOx3Ft+Chj=KGMHax!CX6HAWKubn5>O!1&ZBF
zfLrK416ht#_`&gLVwnt9ZnQ5M{5%{OI`Gt+#O99rW|~>AmZIdNIGr~0Q@`}9r1~qO
zp%4P<OoW8Dek?MheZa`CaKtV5plaZN(~OKT#cJh`B`ps6l=?4Imq*Jvwl^h_oXW6x
znlek>9l07$?6+qL=d85%UcK_WTcf=x<bS5jTTi|a{GiQX&+|Hz2Pf1s{sg|n>a<Zc
z+$_5tr+dAv&oiF(>V2uM#IkCy;gUD(Yh?gGc+WHU9Y)V@oY$-Pim`03>B~|PiyubG
zt%dAugbEt2iw2hA{jc|clNGGCs8U)bTlHs!B<Di0-GKOXBF+c5hgam;WTNkXpBR=0
zUUKnKKtNoH9}a#9>{{fx(K9w1TC(UD*SxQqHpJC8-M_TqcD|wJYo_2WChUWI4hR=D
zd9;;V$EJ-)&J-^e20znY+&g}8xXZ6G{0UDiDyw#)Km`M*EuVaGljTh0)&t+JXtAO*
zF#I85fnC110y^Kta^lVO@QiAz0(wPe!bk0=7Wq>5ip%$<8#rm`2oMpYP*n}rJ7>(*
zRn{~6{2#xYJ=U2bzOgsW=Th!hS_NT_@ohY*SM&E_`tK3h_+rG>jQDXWvG?GoGNJ0V
zuymisRd-9BEaz2$)vaUM?m}!P0*r~{TTZ^{5?rjTV^R)_z8>cNgD2N$YGCdT8^wCi
zqJ(kLtVfRKYOMqnM^m*W8tAX)7!%sA9iIz))hgL}y{%Pp{DPXz-a$_QNCvNy+oc0y
z*sbiODj81q$G>QBRr%?ZQ#TwfAGL7@sc{V#(gH_TxDQvm?XdqD9a0o-rI0Oa<`Bok
z_7GU5NBwyoPV5A&eudKAO=zc08<!p6*Lu)<beE~Stin>6(d!e{U-lZ6ayRD87$4DU
zYjzK47a1SnZwynf6gE~aDd?1w=VlsEa2o2%ySYo1o;p=US(?Uj4DxY%+S`Z^&(`5d
z)8P%Kq<$QzlC)9DXsbFqpkrv&ky1EjU_>QINqy2VoDi#0$K>_7b%FJW-fy91_77-t
zD%~fnDrc{AwJ+&cdh4}afi|;R^BeVL`&+iH5)8o}@`2_8-=v?#)#P;8ZF!{hk5Stz
zK+<!BLOdp%EB)n&2iKD_Nyd<EhWb9$%mbP&oZ?mOskt{qM}mvv0sd+Y_<8xcKwVEm
zSeRDxo@SOn`it~FjpOY5+`04LMpml*yg}^T_5ADBa`9K14LM9~c@FK7`rn^@t3B;x
z`Dy<^NnYWV`<^p9PXvCDSkf$Eb~mB%+xW6ec;Q~kp)k%PO?7Vq-W&1~R{N??S*9MF
z+54Ad6TJ`3pR?Iny$Va$3CZd5?oLD{V*6sHXVZH1z8~Bsq)#3<M)!^AFeKG}k`wl1
zq*%0>NvbN=s<|9MNhTeTKdax3_HQG_1zN0TNorm!eGpaix%m&_(Dd-`N&Ttzpx^_g
z%xpQmQ_u2V2A^JzS|N6}nZ(;wmlS&+d%h~|p=g^pcSftP{_SF<oy(|dc+6LQxs~Q}
zACtz&a?ei2VJ5lK2a#ewf7-7H-{B?q|JjdFv%7s;dC6Mu>S-p^wDSG7r0~nk`K999
zC7&*OP8c5<V2*AJBbnRQFUrdbR67iP>S+1H)?MLw@17XR7p}fJ3o~8AtJ^{i)`N2j
zs5N|so4MArxjIsgRaP;lPt5z%_x$cw{i}uOTH7q}r7NUgDB+&5``7vvVnV3*n&)EN
zYA5w%Wa<2w>MEyv@5VNx-mxy*2DdYLtGoNxk4^8<A~b3*nt1kYRJke=O*-O*t=OF|
z>#kaFF(IgNc(N1L`B#=AJ?y%jmM&DCv2BZMbaiV<ij52<p7GvJF=#~y3MgQR=IUng
zu}Tf3Pb%zC>h(XeCHkOX{;UMsw(tGFrV-P(s)gCtmYcp7=PGy)h*im1tgigrh`aet
zA<W4;e|%{2#+<FjjSYX9BrT^#cL~92+LqrO=x668qE#0rzfKS{=bRVgpF4RUKCuzk
zwp9OmIfu1b!7cGY;2*?0POH=AM;QjHmiI-Bh6b8Ca3mNE-cm?W476q6euw{8O@Pq4
zFCFTu(><CMl8H*<TPSP`2|t8~Umod@mC{rcI-@O4moPA1@gz`%R+U%1MdbIxrD{jB
z?P~Ut*#(=QLED<8w@1$PY^eNQAkDpt!cN;^?_Z;Wy?edn4`g>PHCNiw4zE7p^Z87?
zxK(+)baB>KXmREbeVYIC`QLKA^<FxNgF}?YtaMhyvYvlodxvxg{#oN2eRN7-!6PNB
zaDp_I&mpR|uH5@nbwfeRWjlVk-x0gF`#0D0Ypo+g%dNHv+<h%U5p#K5xzE}4`3Pz=
zLFI~6RZj?p;SHzt2EV*0_>V*IVs{d);(mYC6hGRVr44_{PM>1uFx|gZBKcZYG7pCa
zfxatPxcDTeikfMxzvce05$9CZ`)@#eFgp0}sgV53dks?3QJ?f@Z@=^67#(=<mdE47
zY_G<`DbqHdZ^M<K*4>*N#*o8sL&Z{H?z>xuk>knI4$dtd_9ff@how+)ra;ed2m6(L
z_n#YU)f*cv(Wk-hG;=hwoqqrGC${g{rjlM(P0m7Np;A@O+mIYLtMCHg`#zSE`cJ#?
zATIW!V!QOo(P{sF$QQKWD-Dw(6>q(hw3IB-X=B~@a_)y4$KhzK9=KqVqyH>Ykv+*?
ztSBL@gOj5pCGcIInGwFGnk9$eZBF(ALP0#+X`x-y3jZEh$X|Gx@*sEjFws<_!w{!C
z(5#Z$J=VU}-hp0v6+b4rOhc&JQ;nQSLev=y8TXS_PV*7?lII>cR;t(dMXYW-2&|1H
zb1VM+3?6(*SM<h^Kdaz9IRfTygV&AWL)|fvYTyU)hxoj;!+DH<^t!x>db((u=^kyP
zu;l3a;g$`~myaZk_WjRY=%;Rpv7tBAVX(~J#*O+!Rav{lK<T82H)8A58zFoXU}`~t
z@4~mWYbzgZN_CIZK-?w*xE6zwVjXG7@L52>Z3brMJI{VCi1-0tl>3psyY<G&)D*tw
zqbW>#wVM%1EYIDeTCd0?e7nrLYq{1iE79K3P?epA_lU)CixA_jXIuUcbMc~_U9;AY
z7HLHz6=til+}!MxmKuhWA~Y7)87Uu6-|<~vtU(B0hT(;0P{?LwbvBPC-=DZ*5p+L{
zN|4X)+@?(MmaD(K@QHUy9JzJ0mTNbwlrvr}{LvnV%6MR*y0LN##jS;|SzFF9L+ZUj
zO9CvRSF706d<mBP1FBNIzAE8w0&fLwjH#VE8>=E{A-m;)5({4M^g=Gecor{bKphZ6
zH{|h*u&W4obHA^kPk(QC`oZ>9JK5O8gu?t7#X`eLr<DVf2j)*%o9QtT==R>|Ij+H5
zqPs;QVDS2hO=!pTE>C&N!>MP#$nMi>7*@PLy;9jf`1$i^bgRLDTIn-^^;#jJk>FGC
z?&BeI|GyI3eMN#&I7wj{5ta{AcsU=Zq?k7_G!BpZCg6S!+BVh{>wO_gR`h-Qc~g$}
z$b<JO1@8^{D_OY5JCC_*wAEjxQ-0F@+O}Bwp5s0K&e_(uE~a3%fr`=#8BywD^Kz_v
zU%2kxyayFBQB!whcReY*d)l1YTkqXwZyf<tAhAtbA(L*<Gws*|4#5DL4lYanpxe`T
z_y~&EYiXkdQ{Tm|N-~Z=D^?oLGcdv~aw|vhZhfhSAJ?AtxSNK1P*_~c3J|B3PCCRM
z#u=c(o2pAod2>u~>vbfMHH1GHF(@zZnVc-V{7{QA(yU(N-xvLb%%8N>>{7J%l2xc4
z>nf%Aang@hH}I!E;UTDbwy$i*+a<?Nsmji2nZaP06{$zq^WZ*V|5je>OLQ_6i&rf*
zl!8>4{W<B?=r(Mg7cvrn=TTPrSdc=?piF0(m3l}pS;gugH9a9rT)kGr?>^oIWU*MT
zm3eN79v=+)_hv=Sg(<D?7SiT?Jnv3Qjv`<HidaFItXi*D4|tNFrm*+11@xRL;;M0K
zF@NRA+S2(wh`1u<Klw3DHC9oB?!iqtK209&-)?zRxd!iGPZ1BeO(^S@Mc)ycjM=AD
zs_YSmPUeK$2(d>HVxz!b=)J)e*Ukj*XJM8Vx@%Kq{+3niN4MA=`}gtQD!eZxf(y~c
zWZh)ieIIc_eul!451rSK;rN@Ag9a&Y>WlOfxL*hAb0z7hO|J>MH?_`OW2Jm7&J&rJ
zR~j+G%*pTox`KeZ+3CXqrPLG~6nE<b>m1%+=&Rls91VUlW~oEPo?4);6HegcAox(K
za?lf0NO?LL>c=lU)w_Nn?!x3Gx>9DIPpV4cBi*6d+;ESr<of3F{6a=K+-q|D?atcQ
zR}cz!CY7F!Tvyz(HR525Hf$1k6f?eiYhpDOjZO+l@A2m}LfZX0{z3Bp=ay}QC?hvV
z#xdShI1%FP_f*daDX6I`?(Yz%(Lqvrkx}-!W?T~IEC{prcYc9;GD|l&Qmx<lAV&v}
zrw{)>p1um1+xPt=W-Bh>c*i4JFm}w3vvQq{I;ZQ?s@DP&Toh*%>vnV`jGr|O*Hhy?
z!mu&*WMq17<2MT8;oFBaE9c#h1&L_Xio&KIsA8F=`?Qc=@qoX`&RYBU5Lgr{eq!2m
zvDz!&*eXRQM&zARhe$}Ip8Y!E)%4^bMU~Fx5<8f{E@^y-P9nrAD^SP&q~YgCzvD--
z%~K5QXI=ApQlT&0mAU8I=PkFUDcgO%j~{OLKFZi3l42bf6M{TwsESIB`nvloU8idk
ztYk(Vl<&Wtz9(y&9nrBoA5n5wq2%}f9tMBB?Hz`e8mkHvDfe64<vL;u^psKx8GKUe
z9w8o-*b)^}awv@O%2BZ{_<G{Fy3)gaxXwQB>lDu2K9uE$!g&4fAc7h-yFiaxdcuwO
zeIE=4dV0#e)*8kd^a{(O+DAzfA=V$O*y>fwOqmq}y7U)s*XdIKyP*#r<f3Qyr5zs`
z;;(KsyNX?^YKv@i%)=ap!0L#)S=QAUu5}|)ef2%cBV1zjvuqT%&Lo%w1S_O))Gc)x
zTCpQ*Ip#*1p`bpX;iV;og&>?2S61re921QZu<S6rpL|GCSkrw?M^(6(ThIH!R=0bb
zCF(6#8ZEzPkuMoIIM~~s(QcueIVd7VzPkK>JwHHEB~{^6GnvFotk<xzjs<1Dx4-J=
z&^`GIFHZ~WENIQ3%H|4pzH!Ib_M}o+Kmmb|<}iER<n96rBe`F9535QF@u0}(xrlgg
zQWvxBZ#eiHR4iYu_>?A{bXZ}-W!01mkF-*SN*b+?N=bHkVc}loOyiu3)m0wo?oTD)
zF+G}~NxjYx9M!Tiw{bZ2m@B=I!p)35S;LF&TlD|YsJcZ{Esdqi9JAC=qodXsCKCOt
zgQdvIn{U^$$Y(Nszlk#xi$A~T&CN`s`8*n3y*k>+=3SBd7X9i{V!!jn##}#IHRU>f
zHUWL=H1p!{hz{}AIhz@CHioDj{`~)JtraqE!=n`^R(lsJwJ0d;M!$!-8t$<?>10fu
z-L5UmFLYZnspgZE`fB7BiUC<HYjFDnT(i!Kbs@EIoXln6W2&gAncSTlpHs}cBo;lc
zP$<5^a=4>qFC9g{>p$14uXc}nthZG(=V)B8Ej?WsNL7Ou_A<?G5A#W3AgJ+<PHOs8
z@1*CUSd=!_y7MOQ%$uUAFNVtZ?O5Wb>xy?g-dP*qeMWEGaTs-43aD#nfvD`|?O2`s
zv1E4C<#&C`%__~!HNHLnT5^|MmQU0kK@RuEX>)KY2e;D|s6TMKVicd_xlnvsE#MKw
z;N+lsd{pr3BrSLJ>FxW>&t`9-3+x&l8Sfi<R()Vc2S*~KN%n=D8Gdmi-hY0Bi^+Q}
z1#jP1d|E8=^pYm|IaY2uC&X}sv0J_WWc<KL&JC)Q3>2#gDJhX>tQ6Hw#;RnkrU^tV
z+%MotEf_P&Ske({NtMJauD|`CpLL;b=ZJ~twp9YiQv-}M(zC|dmx{mYN(oB@#JNYC
zlJu=Dm$ro2Q!K^_dNT%o60}{f7&_xJ?ka0CajSsKxr$K9peUsOv2MEEuKs_pU~USZ
zbL>;6CVRIH%H7$`^dDKw=*TdC)z%Wx|0$3uUhMs)tlg{~vuXdQETypX`=75$af|=|
z1sgMB-@GcnO3v-ST=tuPp#T4djVb<r{96ug?-*FvMM1QEJ?-&-^tM4O`hmJrv;no}
z$Y|PsKiQO7CXF>XTKU<2+Aw+?0oVkUk6mEEjh-TbmLhA+>mm%T(B%rQC(7ST4hUdr
zgr@QCNX44FzD=oHdyc!hQbF%6E{-f!UJWIJ+Q9CHCxO*e0k7_-S@)Pet>w`*oHM2s
zOuDy`<hC|%K0ZR+JtF2ZV-S|iGmFrBPkAv#sz&>~?&sD$wo>D&w%(!Z-^ASQH^^T+
zg^6v;wDkWyAa>`BXbgl;C8<NhfCNrVs4=NQ*En6LRs?DT%&!=O<G*h``Gy=~p!uwG
zR`y;%X6KjnbuUrIjc4s~DG|vMBl=a!YD;@fbR2FQSshfa*doQMwQDz<D}-`GX=0sf
z$08k`s916E-sUQdWtlXWUGJ>Pc^^yit`!mLt6gMSu0k^%o}y=+v8`7L&1$K6#l>U<
z!AcG#slu;V!EClvNPeZhv0<e)UDwKUrdycxZSz!<#Yus6uYYQ{e;(Hz>8bWrF*I6I
z$6-+(n0CyB3mjw&jM)t;kak55)&$21J^FyBeKzoRkwd&im}%e6Pj(^V0V9NFu?}<g
z#pbhf_4~$i6cpM{Kh~996yzEK%izg)y9sTe;$zf<<$77>`R99bRqu0UP4M3tt-h`m
z#(jNMUM=I33y|>TeO?GXL1GF#1hkhyc?IN5Ej74&?bz<`!(B|ax@yYW;z{jGYLLLW
zvZQbFZYm=xw&%@$G3j-f&H8<M=l|ZFy1AD#k}k754E4O@!TnnB-dMos9!iQ$u!K=6
zN2=4st|Dt*^Cxc?VPHaz%0C|5wUvbnS&VdBPJV}5?CaE?H#d%4ySpH=?`8Jtcu#R!
zL`Q6j_@Xx4Q}9O4wNLM0f7V%8|MFh)_gGKC$f8tEcAg+z243FLC9wdB*p`vf`A<K?
zR~|(S=aj0S;!Q2Q%iX=16+~QJoWU6v-^%31BA{d}>90-l<CUmt<~}mrTNpNr#1tEI
zS`0g(Nkb+YFe6Z_ln<;4#kDqglsNdiudMb%_gtk#OsQzUcGf-V|5mG8{OoPwQWT;2
znpF>c`)1sT2va6o&X*_BVUvV#A-G;qP?eXAY5+AVMjcoL!4^op5G+BOh)+nc%))Jj
zL8*l>edT!tp(pI?vO($SaDx8J^9d(7Qz8^qIAVnvH)*^ERQr^NAU~@#*5L~ao8Dux
z`%$EYdcT7u?Q8DuQ|Yl<m>O9fkHe%yEraYF6XWmWb?UZTt`85VA%&M0cQ_yv5N!?I
zcCvjEDF`GI=|Zv1+86!mAXfn!o%0j=r6mXK>%5Pu-*G+of4ztj!?4^NEP;HfZknqL
zFd<k#u>~tw_Id!xpsjTzleQ(VM8jM@X>K--&>YD@XQ&taz1ID$W|df_)L6X054SUa
z1rlWY1a7Nn-hK8d*NDcpP|q;j^p%@JYJ|W2di&&x6~U1DWPB#ckMpBQh?|zsH`(@(
zMmm>xUf`*eA6UjlnS<>!ka%PA?uOXX3%5A_alxe&{*(x)svvO!41w(Gg!y#$%3N#`
zQ~JA!|A(&cjEXW_qGfc<BBDq}hM;5+0SRI=N(O-el+Yx}IW#$AA}0aKNkKq{B%uk?
zfP^MW77&33o6sVXbAHv%$lUkVdi=O+*4%;a?|kQ+s@k<{@6MDvqKUPRyI8_gH`@Ps
zlK1!*FiGH6O%x9E25kWNJ(x8?&e_}ox&;ibPl}-IpdCx_fGY;9)kCpBKu`HQBEtfv
z$z@oSjYTiG(gzAmht~75H5gLw04>p%I^Z4<EWzlL+xpr$eZ-5GYIi3B4d1>z+xTIV
z3Tf?|@t_@iC9Uy~lc=Vq-g(h1$SUMQM~xvu=H`W0pyZ-A<eEQ~sD0+kHvY*XSP@GB
z^Py*?{HNo#950P0igOQdNx)sgy;|IbE{s(-0eHyQ$bfPR?RX#z-L^@(PWXY*#3;g>
z2VGk)pw>Y_5-wA_=tVT}1M|0_RzW31MY-)|)s-@?te*qM5tCYRS0wCj?#m($aR2uO
zRgB^}8TkbC41h^VPjo!DCGuBMdTwA-3oHw0e;Q`?-cVBKKx=Ws8Sm|d#xrmL-*GEi
zGyMLWc{UQPYkC(qVHW?VU31|aNH+d-P62BUg^vtwhEC(H7J>@AKY$2b)t(}ofF4|y
zqzZjR^mGB|N(9g}C&{BgbavV?OW)q)W`NooH1l1xv&_+uyg`EedXX<fj)xL>6(w39
z8*flNz2Bd&!3AAd2Q`ACk$%`?^dP9r1UA+`f_MP4Qx|`anEcr*1{DCkAw3U@ZUeTC
zmY9mwYfrF7K(cTU`QcifM&JO-!~+N=u?hi(OY)O};O7U|0i4uLAi2Y+3|rIo59o!%
zUj>t_u>~Ltn#1u1Xey<fpi64N8S8FO+6eP|(5D`-0`JSLmvir77pdhg`M)r^?OoD(
z0{4rJ0-<0+K`tOe@6j(VfUARn4c)T%BHYPvZG4rAjTwfCY+#p907J<_kha{GD@)`F
z7|E7$=OGImKPS-#fz%gq_ntoq^5C2Mz@II4|LF|{53tNyLUhS``;+lzSJ6=qT4T_;
z<JRY<gtqceA}OXTN6qS%PMA!la!$WZ8nj-wy%#+6Z&JeCj<q%P+`sQW(GU~;@v&Mo
zz58}5{704*I{mW`IAYt(28ZaXydxAJ;CEXLPBQ^R%RG3~^=9JI`f=q%7@3KCW|OuX
zaoZ}|bZ*Zc2e<?wrKW$@L7YK$9)M67o9{5aFbalQAie{`8D)cQTHd#kfd~Qeidx(-
z;{v)Pku5+49_j|=G*D0azV0dYfSVGEF`sdQ)B#{qTU)^5jA${=dT=Xwn(ViwCrhio
zBle10`u}?`KiL(t7&d1ZZ>@j^Djau*ED!|OWjG*)8X^k`ksdiBURe#a5k(HCs!@2K
zoMdSM*E4+U4qGG+dduf~Ehvccqd&I<kTO<>z>ydz)vx~o3Vsk!AHm2LxVyD`D;;K~
zut-(y&t%`gIiZJRNFYuG{-mRq*pAdP0+>wH1OyWBY<~-gh5<^edT~oC>Gq$x!cLRT
z1t5hugmb2qW-|Y(AgutXkRWupT^$^VceDoFO{@3&D}5(-3Ur37(SO_OjD|K4LXM*l
zdNATlWJcB3-_=!a$hxN1{;4mVPS|&U&R`toT9P|2!PO~l)a@2pB=5jlfL?GGONYSp
zlOH<hAhISNdEC13hRp~JtpkB-V}1l=BHK1L%7J0Ra{%nqC2EmK+&QKUV#9Rr&#My9
zq4Y-l<g9yb`~VN$&3!al$ae#@&*(2Kj@S7)J2wTgWR-DqLAYAohEoFO@WA=xjA_I8
zpj6#ue^$#s)1b$BLFzWlcxeXMRz*X=H>q75Dc9qsgwb>u4u%*R<J7Oa4RZ?kc~<j`
zU<<L-T2P@10y2XJ+C5E^H=d!T%4IIjG6}Bi0joRSTT6U?+lsp9FKI^fl%!QdUUhCG
z^|qU?aR2;9nz+Xb481YZi;IhS3ejIc4`TMRFA_Su6f9+;cHn%y>{H<K99w`H3qtP?
z7^i~ab(o<(b9Y*SBep~_3lg$2?m2ugKFC`v71SIgz)tU{bV*N%x6EmB;YN^YxEeS<
zHl{axtVUbCYkdwb;cCCb14uc5@a`<8gfp;)dmfR#DIVFq(cB!cxcf7nKhNp)U{X3j
za$t+j#n(Auy1MCpuQ$0Fr50eApq%4@JN)+TEpTegmG=~uRe{T}><+XaQLe~ww*NN;
zc_L{Zp^(WQA~|s5ylf_U<oU}{wj(ewI|JxykwLe~&Ard=)Z!OZEVa*HihQtYwylHl
zz9w6YDKyR-*nweq|BE1`f&zlnDsW1P+Ab3l;7qYpOA}zI9e0sg7o5QNVJxariyN|S
zgh8d>VLha7kVN#@+yb#arT$GH{S0*la+r1yOM6D}6HJXXJI4h2TA8we^RByFTQKJk
z^~x~|W{^^WY&tLpmO7WIFiQtbfo)r#!4jqM#j4T4Q${!z6(hvyeDolMkaAnZ@1Cpe
zzu6PX)gWPXu)hm;qbLHgAs*?aDq<LE4({^Hpv+T=m^L_=HrP4_c4yvk?&2T>Ll;0E
z08VpYdKCm0&R~-L`9@G*1e%Ep7tHabcLOa6+<5VjJb)?l>8Dc@qI?+8DS`=yyhpV$
z6>Q!){}qxS9+DRoCt~<Rn7dcA`#D<haFw<QQU$I4xrSBJ`!P7-AReoL;&Ca~`h*11
zZe{Q;NaGAx0d3v!a0|3(K%WAr+F36nCY!7s9j^ruJb=t?-VH3V(&3c**{4pC!8HOx
zx^R(Rp9K9i2<vS?{62d(jnGL5y>T7}UwGqzUZbXPp{4Og!u{(YT_k=L1lZ~yy+XH}
z3M41f0mW);e4G$X*?0r5PQfU|cMZ5H;GYQ0U+Mt(G{uUl4Y0!c$tHatt(Gg8stm5&
zMR!;QP|Rl=9d1xVoJV+Xy&JGXN!)hxhY_)~MerVj(={?Lqx!O&;I|T!?$Fvr7p3;4
z9Mo-HU0ngTq7DGMp++8R%mc=Nu83r^16L2`+komi>Z=ZtPxBifso`3Uv~EG2^*<(D
zrN{vqpJJ&v@GsQJ6VD-Ay!O9E#8Q)6N#66EG>_coKTcPMK0B9P^+$3`cudSp+beP2
zjv2}eBjs>E5Lvn)bPsN4Kxc;OkU%m<VB!OC5AzA)AlE#;cu1Tz0vU}ji<=&PE8BZO
z?g!J_MHot$UH1e*6Bs!<@8judm6X~NnGR(9Zh{jpbrouIhd9w<JyZ^90QJddS&mhh
z;$oERApTB#fEG6;u=2<3?8Q>u(_pA4xlNE3oh)qc3r^hd#O)@!jW62Hkt|o?jX|dY
z+GymPcF<sx$uy*vDH?+5m#>aX>>(obFf6p36z3f<S?`2M2Yx=NLO^K){QT8z5VIO`
z0T$=Zj@V|_((+HGzNddooI8_7SauL2LpdGaCEo43BjXDT3ozMP0c=iCr5@RUFa%P>
zFH7``4rhexs+<TBaOvACO96!s-n?PL&#`qNDk65ivG_u#BV1+@Sm0nYZ1>k|VZ}!i
zdjE?F&=*T}Ec`GzYeSUhnQ^^P>o2fYsW6>k>L&~|GZ>6uJlq1>ynm=RtoQ8ftc4)H
z71Vb;e@>%<p*1jdR57LtY+wC_Cn5Y0Jb<(<S2j`rf@JW844s^eK?`OwQUW(NR%{y@
zvk8VW)aPNrVMt>06zaDi#;s>}4HTZiw&aXgggGN%4FWrM+A&y;Ep2K2E>;}}TTZ{o
ziS8qjY}PmuxtX|`o`adpoVZL))wRSRlc@@t4V$|urmKUMvHrrX*Esk3wrV9nJg}c*
zyp@ORr`j^eRNZ!47_IfW%^Ly=Qy`bvX(q5B@1_S#KmxF30nLD-T(x=((jE*w$a{be
z=uZKkOZPs_0ig^I7rScML3qvf#Hs&jIO<+Wd0S#)F35%vzt{C!o~d@kB&(M+o+n?N
z^FXD`KkFsH%4)fvA-=kT+QQHrq)K$6FV#|&WvxM4@Yx>|5#$A+LL(+3G64?TTH~8Q
zn-=ywb+^Y3WCuoBd7raWtnBW(0b#jAg*6K---#BUvsP%%tgr7a3nn!jt^|DbMzCEP
z<zgmHY<mw+Smm{82Oh(J_s5Dmq|v~jGz3eJmFMUBAwC1!FI*-R`&8W$kpfvaRQquv
zKO)%XfI>B%4xx7HjjvcLB>!n#WQ`8RT3fZ<XAl+bFzA4zux~=807(#-Yzun92B&?=
zCp)N@tvf3mA{BV!1<pTf8G(x#3~7E2Qs^iGc~dtsE#;!@%>%^$fOnerO17WlQbHqS
z8$_E)fi<P&aGmZ{{+ij1ByaaUp;PrRCFi22j{$>JxEl3eMh|7d6e)dcb9bxZK2Z77
z{re4}>gvFsVDcG{WWEw_ozu@7*Z>m<3X;~+QuIx1mkhCOB8TP|e<wE66u9JJ(QNxm
z?lVQVtnA#-RE{Tjz>F>=(Fif(4^V7%vC2}IHB)i2tJ1wt5_Xy`tFx(yXufbtJb$gk
z5k>_`o7tWS*!2r;SK_DiPS-b%!8D$!;eA9_@m9~4gL^VC+~IJEKUna%+Oh+c!1$u9
zYSW#?J?$qZ`{yt!{}WUOqR)G4$~>NY5I@v53O28%9j=Zy_VSimx7%N!FEZ<U-#p(4
z!z$VZwj;Xu`eKlH&9>Cv;Rf{y6n)ye8D{dv7huW}-=Q6c#;9VsbeiFwQj_T|nbncA
zYy};VmFYa#sIYRwA6J%wzqz0kN*FOPC%;>FxC;fmtE1yh+VIMm<e}5kOm<!9?Q^^#
zAbBl$SlJBE<unXaB0$#uS$acV6x$fNYb!zt_M|{Ay_Jl;vq-OHpt~jL%P{V!SfzU~
z6{FHOyGFbl06tk^-}gp9t_TIl0MU^K3YqzN+x++2wL}}Ue}6RZiI-y>;eHe!?<D0^
zr2yXQKR*CS6pSVYRo+bwa#v2oeH`ZVi3=SMG0%fRU&>H8K^l30Y<2lh3W-~a!VoA3
z?(v@&;OAHB7(fh^(1_#Y>knJ6-IaQiC1^83sm6W<?k0e`V7{fQ3Jgu|_g}oXgu6CG
zF+DlWO_Y3r*AK&OYVB|daT8~bCq;-7rO#qwE?<2DV<}R;mSndBw@|B<FF}<Il<FO;
z=ruc8QKxIGsz9^{)NDM=#A`|3-OTY@_OC7529Z15dza7=OHffPQvWiy4r-}3w<fb`
z5dft{#@-rN{142YPza*>sC(uiJXw4Puw4a}^t~WDi9`OW%X_$%BatOcXsTK;7NiA3
zE`jL`GG@HhOZO|CQ>9H0nX)Y@&z?xzf+&r&9&(`zZ-y%kuJ}yPnl7?ns=TS9JKex8
zhnYTjz~BxoxUMY(Zz{#OO>}l$?o6z-L_!wx7q1*LF1FJw*y3htSW7?D`;~>nVIY~z
zh4+^IWp7xsa3YEUhCpgo&T(>eZN_pa<Qf&b!`w4O0w7#h7T%^l5A$`9PIz!Ar^QE-
ziP|Zew;9nWrvNfj;{{P?1F{ep%~i<gJcOBkKsU!1`&W{FBb#WUI>R0n*1{&9_E075
zAxD<&2*d}lYydKBawqJft5>i3!U!B(%;%v9Uxf^wE&#Q=F%P|18`JGUT=J6MFA5fH
zDNSX1)Cza`-1{nBP$D)3BJ&~8i6Lgg<Q_N0S&$Ay(d#?(tzzsdyquj`vqs0prcDJV
zJM~j86JVz7p=iu>tf;8ajQddeyl0K?WHV_;Nf0R3cdrICzP^~D%X{kX3xzC5B_~Db
z>$}ZLVKNa;mvWAtuoA0BwpX#%M}kx1jg@U?;mV6=(&W1dE8=kry9Xe_ACPHSG$esQ
zcpU6`ROx;h9c?8jG1F*<w{Qqlw7aJfb`fMla2vzy2Mp1{*69%Jgg9ze3f7(}Qme&m
znhjIx^;|(K!!yRg-G9RD>gZ_x(A-`aCM}0p)Wf6)kiV&}Xn1yOE?odj$1Q)g?%5wp
zKIz?}@mWhDuON|j8G|upqN4(7<Gb-iNPQu!S%E}OJ#5U31pA3QrzBY2rGNRkz^=SJ
z66%9jYX@6gAnv1~y^R-LfPu8xoOCD^VIBhJ79McI-~dQs!sPYg9zh~Gd%KM-eQMRC
zdlf%y(our{rg5#O#6;XfWuzR?e(^<^eub;j&#w+y0QfV<wei;Ol@5c05?x-WPDRYh
z)T0~jOB0Ge+2U2YgGjiyKuy!m?aMsq+*QHCIKB~kpg^@U3+psLpDL5dPk-TO#-|nn
z&p}8(#Fl)7yt#Acjd#t2x#NnM$9MP9YK=S?!>THr^U#M;iNYn5m@{rqS8sTEPv{~h
z-`fFMK1)rlecKyng$AL=I%=ZPvO-q0?a1AWpr;Q!6F?0B!A^$<gxQVdPp%l#_xaQ<
zH_q2K)c1c&!K^Z;6RohBBQP+z8mk6N1*)<I&=2{kH~^?5=pt9^La*Y{4G`!H!j4P)
z?<&h}JZd`LTlUcp1_dFr1N|og<k8$A06_RTID8Q3Soa(&x9whyh=ddD>wS3O!^>(Z
zNGmSMaH{1nzQ$|Lj;@XJc5NPszO<^Fc3idX=D?jh=DcnBtXym!B3xW#qT3(ZoC?X<
z;`^-!O?K|Pb%%|N)pop($&h=+Nk+&1<ac@15}r2vVa2E&_3w8t{c+AeJX~)Y#n*X*
zJa=dg<}#p4g|-8XIKq$+R9@SSj0Zi7o1j-1&JS^umU8G4SCTPEk&W8%2_-9aj`?o<
zu*_5i!>cc2K9^g1!CeCOzaTfz{;O(y>~F~ReG(<4uA+4H^z^FT?01QV-($Am{{fn}
zZq=zV3vD3lTRx%)7)9cBQ){g{EfX1oJ7M#=rVnudzknq=L=rd~MAc6CI<v0TJ06m_
z_su<xrxu;X#(g$ZFMQGlSC9D(Jl-fNyGEagrXdaY04+imSaGZp!BG$)0~8Y~Nm^dM
znKYHZt>D@h<i7fJ7anNb@31DQY{Zr@3JQoYnC%A`KC3*8wL>0NiblJ5dU`rKUix11
z+~PJ`-Hxl_U$dkHSuCp^xi%8HGf?C!M19_OZ@C2|SVCK2cq?uR)<hc+pXfK^i|J`;
zL@`Ku`X<y~pv0ab;6&Eeif4-#-}&+|UFyqf^fvyuva(X-yPoIo?>~Ncut}WS-rNN_
zmqWh8={oP#PGJy5LFQ>s!QKMJXMo}tQ=N#)uFcILiZTe_8HQ(EJipu)6FXR_UW9qT
z_wS%Yr(<>`{`5gS0OWofJ^)6`Yu#``QQ{Ickce8XXJt)CB6haGKNIv)U{HQcxSEJ0
z1Iqv9%XiQxyl@8@b`GYXKm^9-RyaRWbRU-XaK3K8!oGG}M)EVvyuctD5+f}Y%_=G`
z{)u^p$qk3x{XUR)xR!p<52`$eMF#_QAsH61`Y;XMRRvIQ_AF8MBmHpI&kl`5p1))B
z1jHdNsuBQH^3k+RqBSmi=l=PP;p)r~8K@=9@dCg<;J06NxXuXU(GaPdH_`VM>c)!*
zWj0-aC4!U5g;U>a479bib#(emZdIC|{@3g35if;g4K`5>jyEWH!OVKy&UY>zJPMX%
z))@+Kh*D+O(VK`S51|i#PYVf#h^h5tQkU^uHwX>N7Jy2#rsfWVa%unU9!yXo>7*1R
z<n)WDKpC`uR!X(3ynF|OlbaX=VYI7jPEZL3j{FX`&5hp-+gMO&^{0aH9(<(k-{dCN
z1<wsx3ee}yodc^F7_0%)xiLE^S8BbNS9TX`?a`EF4?0?1Lo?p?T5$95fanFNLII)x
z!3H$_xjv0LEY_Gg-6jYQc^MiSy8QexG`wpa4O7#^p(N_n^&ta$dwU7*t-qxD1bslS
z8A`PJ`X>=@MQ_T1Hkl`U*t#dO@y@5L-ag^i_Y~bLQ1sxy@SXba0u4nsqn!TUZvDIg
z=Lg;Jk$^6s_V8k<P5|0M<!fgLN|-{l;ZdnUBTwG_%fX$I=I6e8vgQ*>UffyYEnT<k
zc4+71w90t!m63Q3eCvuDCBC=5cpohi0Rk7W&~;l>heogo0AYe)pd~L(fp=(>lG20`
zS<rQ~Mki6K!ep#`^tbB1Go(Y`TT>tr1?eq-ERuif=Ky*me~Hl7*a$NGMZHTmR&w|?
zjQhvzgq6nrke6Z&F|wW%ba{3+nzgN=p#cy$@J#^m>pV@q7}l|24>&>NQpNkwgLLju
z<oHA>-2BN34KqSTwL9NI#|>nTzpj2iwqtiKk`HEM0Skm@29+cWL&L8l_H`f{1l8ie
z4QC4J!7rdj3cm<Ca4>`2NjXGT7*CnvM2j8VTQJg#|A3_9Ritps3&4WR%j(kCM!31)
zuUXx7@_}wHfGwVj(0L7dzP52AEyu~u#btf2sO})SZkw(^8gbKs-R{)U?ZU$JozvgJ
z>hw$N8=8{cTwGj9lm$$B1YHVgfHDjXUqeL)krS|KP$Tt*M}@L$W+r=TxD&<#4HWxp
zATw-lZwJ&d$YR48CN)8L{sAZ48L|A?16H#yVrd!4&=^R1;q9@ddzZi%EWk_X9e{zI
z7PhtkfW-Lje}}z3GJoOZ@kKp~VGOg}DoB{X{lmsqvyMhLR=X9T>FAOb6+6OZ1VT8`
zNFT%3=o+6Dcx+ahAB&74i)w`1#BdtpTgTXfY8@JU=T0FFzYo~{&1QJ75N1JbkD!~S
z*1JiA?|_#XlHpkc8&N|;1JcLC8T$j^IRfYd@5HyRuBvL-3N1KjP&5Sj<@fa+5QY8v
z6_Tv}(`dUV5N)l{2oPF?;*@6|Iz9jyLFb?VEhcW6*?an~M;6Cds7K+W9lKy-0}}8K
zsdQs#S-Ai$ADxnx23ZH_?nB+Yu)hO~3Zf-o*&$miszzIMg^~T}tx&xd43zQeI8i?-
zGWgdIkWdCNXv2y21k9SkgMl(N@;fNTiL$!2pz?+OyejVg>gxj@!kEo1==K8c7z+L)
zVQ{y8`TV)(ksZk6?93GbQEQiIiUc7SByB-@A8v@jFHpb1oao>nVB#=-DfrYT>_Oi0
zShd?hXWjOQY-BA6kW9}F6~U!bJr?0)38KOfT>&yN7}tgW(bMzU_ap#O%e1<N)d-gJ
zDq_#XX|)RiBpMmYOq>qwJ{Xp$_HvsW$Q!EZ*GD6XkN)TdxJiP+lINY!AAu=5pwaZL
zmxY036)t@k5m$(QGiC=?-XKkeEHEp$gFq02T*XMi&>YeG6hc^EUtitf=HUU6AqGSM
zKno#>0g-rNVPPstN_b@utm^hF4mXHx5_o;Ecx5sk(X24h3^xt9g~26eWAj{r`#qL6
zJfL<BN*ib;QiqgkDS#Kjc17L(Jp2XNt}83kiev9UN@s2zi<J%^@>(>&xW6XfhP!KS
zh_n`}l#-H+V)wR=p1Hxw40}$Tz<+O$#pNwpEs&x;!a6t-dKG15&hQ2r8zl>(AW*_l
z7S)4DqNg|TcR$iWH_zU!T92F<SbDDuao4_k_YM?dp*sUPyVb4tGYD%|y*wBA)}X;2
z--u7Ts8=-9_$_Mi3j|Cn^uH+tz*!YAK<FyOT_`D4SY$7leD3|ykinsmv9Y>TQYU0z
zo&NqOjPv=My)1805v6`_yWJYc49~B74t~L6{mq=}y?Q%-$3F06a95Z30_zNm@aEkX
ztWMdb_i-D8oZn$*!`>sR0U!`|g0!B7e_Ho)b939+*+DtAFh6fOD*hY`y9v~0LpVl4
zLqp*lAocVh$v_U7f;RZM_(-VPX}v)q5aYI}|M?xX<;Lv5r3Eb9L<o=(Q0hO(D}q1w
z{r1pHzZ%x1+S-Upge2*2kE<pj_CL8j|30Q`b{WOyQiyviOlegBY6+oIP03Lj_sC9a
zggmn_7^XYvFtU|@?Gg(vtV@_BGD$GXS4AwfA6l)f@-Qmu^m@<^BCb~cc^;LH-$~pf
zF+o&(%*|QXmEMfZF3w*~PrH!uS&-^)uDni}OwMS=<ggTm<d9Trb*<#nEqoJaw~lfA
z?p?EqOc<FtuKv9Nx#W3++QJ{zHm4m}!i4nC9GU}@2dl&j<hdGoO#Z`OMW$lTk7Y?K
zg_AqMVC|&WCt(5V^JPIHl<vJRisRHcJ_)oTg3!&PLqwgYe&53f*5-3wFn&8=#RIX%
z7EA)6tu()$8p9s)eI1$fzOiu<a;u<ER<W+tSES2_=5j2p!h*R_HTneu0E`QT*qm-s
zWFo)qH&%P0G<Q*b++>Ra8L1;M%@rFG^i2blUXaY$`bBf<FE?w)7w24+qoovUT2Q(L
z8ZK?`PJx^`SPIY1=2Diy_lNsSBM*o=YGiCb5M$4fUV3wHEuO?fg;fI*JH0-d-l}6i
z-aosS=<aj;JjTQN1<yb5%j4~gs7|BPLLbTQs_=wgl7<_fOZJ}R$>PD@!l60r6B-wP
z+KEBx_t|lQBo!1Z{X)ifxYfM_uMOXJ>7p}Ub6H(OU;J<<G)*%Py^cnrlq<X(y}dII
z!)!(^;5L^*?R)ZfBQN9h-`>hR{PfNd`ptC@d4xb;z0vGE)=JQsw^8$YgV~VP#QRj)
z4Y`EDZD^Lj58jmnLz9|mxUhnae3wH>MJ0rm5Esr5QNUNw8U8yM^D)$D0!^JT_-VrN
zk>KzCvV)nTU9T5HUf%oOB}$qKq7e${m*e;4oCc|Awf`LYE2Su=OLQ^og|z-hzxaD{
z+9@aB2QGXRl*te&SJhp{iLebSd>x~yL0$7sS()LC8{zdUoZbFp7!x7Rk2%DfCzhN{
zy}-p$XYsil%e`_#gz$2Q=Ib4cgRM8%rPnO~f?1ENZd?*&;JB&ZrH*jB!*pLa;_HQ$
zlJ1g%j!?_<dJ1>9qaI#4-r^r9HODuL5q~j%?nKf`med>tEz2Oa^?j43?@r-up^qaF
zpqurNM?kQO?^u+ut}okk*zW9W0)8X0%rqq3bElbuQ)ZyCJhnkU;h;Gib8Ync^M6fP
zZ$w_7J{Boe##elj!}OJkUo76UE0s~LU{zE`Dxb7_<@L+ZAgvfvKf=0d6RkC7J(r5W
z!qVIG*>H0FtDKFPI8wPMZH0#IPM%yxSJ>2;fd#2L0{c?bbSik<^XN0&%z`ykBGc1$
zzg4MDhSC+hO3m@2Vjjo(*97s4b*J+b$@dRGll*FsPRh<LU=yf~=z8<Qxk{~l?eXsC
zD-q`dL}#V>im7<1<XZy$f8~!$ui0gu@G<21<o&Vu`8$q)xaRd0)rh2Id~ZSWUUzc(
zo=VFo^Dofw<LizorF0!<ubpEtS5wt&y*H8;Km7QW<da<FH!=&2RpAp*yU)g$d>nBn
zr<(q9`hi)OPvf67zxEG_$NkZu^O_63jN4zP@odHh{;Vhr+plLNNhwNcnNK-)$Q_Yx
z8OFh@tIM7LcY-Ry^?A3W#lfhs%!-Ja)Gr3*V|Rw`)spRD+^(bZu5Dk9tkK+u+yDK)
zK~x02EzPO`cTuVlWbz#$;hTPHI~$*mO&dPE`I@~dEU)(F^ux#UM_)g|qK`TOE3&m#
zwh;AkS(`H>OwX(@?;>T3H2E(d-am|*XmwKfZwYysJTVH`YCT4X`}2$n+3>V_TuLp8
z1JluCSfG}<)xAtcJ9<y7*58l~=sd6ewW|sgIauZU%fxZnPRdk0f%#|@y^ghz$U@30
zZtf$|U9$JH@a^adge&64nWOb$X2yB&PqK8d2nc1|DVM5rvb#b3Pnx7(1b1S;;DCPt
z8n??T4^}i@HTu!4%$HhFKat;91uQbp5Je7{1%xF4boRby+Iy9+aR2$|e@nQW#J5mG
z<}q%WWQBBVJy1R?Q_>)$QRoz6xO`EPF8~YVrF&YKVH+#0QR>SLcu09|Z3}uWp1ZxZ
z4$6?b+y?hBz|+u!tbg;v@m0{TeMO>lS@@>zJQUqfKG_w5PY)yG+#1LnSG*dUBRzS%
zEi{j!ahkR(PP|2zZB3QDc+jet!Z-|}y3)=$VD)gdWnEhgSdZMiykJQU;ja*Iq{2eT
zi2UgdQ6HZkeatd0NB+yKE7UbW4UJ}{y*%`;@?^cFmTvzCSyuUs#F?aihJy=Lgrt*K
z@nc_Igd}xWJ0%M}e@2Z@VU9i-g&-~sLQrs*mz9-aFc?Tz441*w3er%UTSB(F{cXTH
z&5p6I6vxCwk@5OJz43rE{nXKmmP^WJtBE0!I*1h)XbFOJX1<GZh>)6~#zM_dr4#te
z3DVBH0uqKr<<H`1s~{_YpwVmbAP;;)3hy!&Jm7>F5ArmeSID98f?kwj_}nqtFyM+5
z8Pp*lj7T~1XkS$$=GyvozC0fKRg~<Y*8_hOGMkZkD1e|00u8o-fdTm5AhmjIIhs%~
zmvWJ^F0M1e`tGlH{bx2bAE31l>g1BtoB|Z0!IPCgy=X0^?Mb~s`xt)PtTead+e)m0
zv|_3tEolLDA(K5h82frsQd0gs@OKc9l%OuXNJ%#E0BDRLkHXK5TigU?IH-A`{0Ac1
z+i6EYX*@l@%sK-wDWnA&?K%a6Q2+cR%?;|@keW6$+=C4|G>4+MUeX&^TV5o8-Q#h3
zaMJaUUpLL48SGY{=wQqCTIA>FTfEbm1hvs>{i0C0%w8=>2`x$etP7$qS`30bdj>ny
zQ%EW4vk$Sc2+hWC?*jytBuS9*D*evTyHtz`yu>Bu2mR@j&j8o+_QpUlQdj4f(0_~%
z*7pD))f6WbJ*+1zArX47^YeqACma|{%Uu1Uz$p~N=?7O7tDjdGI%<|MI$SxrFD@G2
z*9``z2k6^>wn9VgtWyvdfCX?4YUrR(b1tNzfy@)gMK4wp`kO^90nw5|u}c>8EoyHU
zcs!_U#Mzz~2uXouK}lU*k>N6wr;saynlSiBkVb*Bw~Lr|?i&0nsE+_P8>{hh^YOX!
zQm0pZ6aOLY>y^fw(|1?p(@!(f|H`LHq{68A0VO@$F*qa&7xGZ?G9y=6DdgZaQ-9(O
z2)jn6qY}x`9qpmlHNlIJW?50C05pLp_U78kNOl>}I_QK0ae|0D?X1m0lN*>FVf?hq
zAkO6p9;%uKJ}!`;XJutYwNHNa35b*z+>2xS^~V0_w-6*YxH%{U&S>{xMVZP99@d3g
zpZ>Zc&!>8UU*)V=;NRoeo7b@q)`-$b4?>EvqMUhr9i5%mK(rCo9?E$r(1B(2eQAlv
z%uPx80qHX3Hhd2_-2k2B4fOTi4MjOv<&0_^oxdP=6fXQ@|9hN#bPy=i_x_lTl0%7h
zd+vQdS3ege^evB~v`f~pQFi8~<N%f}ppO?)ZdHnc{CscFBLv71Kr`3{zC?R2iNihk
zCSbB~0MrE#?COFCUMDh%54H)g9aJg&J--<noUS;2bTublG#D)A4ZXX>fklUUj80=^
zZnm%$yiR$9$Tit+O(|9pZ2qS83O+HZ4~_{i!b*#aiy`x`tlR>c4*==#z~I9Odgimv
zpr=;{wse)1T17+X#~)kgE?uh=`fsoC8-)*?WlgFq5FHx)^4HrYQL3A{e6-wGwez(+
zrH69Yn?gGx^_=)~F_kmLb9~n$b*!Q62Fi*oP$2;2Um<`PV?XE}0)`94KGEh4_*xyr
ze+w+@1)v;-PFAYr$}#=W&!>B)^Z3{O`nZ&tbNUhv#vm(oR}{txMK<?rm*qXC7y0n?
z4a0+9pxC#$1^60t#PgU|H1fbGLLY2xVI7G`0|+&4LH!Oz=cGtlG2%Qz<iGc}s%#x(
zEmEm_&XiTg+wPC*1TuYPblSCTPa7lm?O>Ly2lp;|n<NS<NlPgP0`3V{9EbzK_9FsC
zL?<=jaqm?ky16WI&;qdQPgdp7U6GbJ^_IYhqp#0|^~7V>mgF1F;s`43l<5yVP1VMh
z6sg<H89gL$Ue>lm5T|t527(OKyAW-z%dgB=j3a#awu=1r=MH!M4*4R8;>ganwn|b#
zVdIGZo<K;WC6QZ$jBoJMh2e3g9^D9CDyK3@dJmIr`B-@w4Ut>3UO$YcAG>U$%P^HM
zn>X?wa29CH0dNEGBQOKD7Z3OABmm(hBC0OV&VYl(#l_)8u3z`vz4$BPctKi~8-x9T
zddrC@`|<qclKkuxOGg-~N%zjJz{xMhLlP?oE=DGD-8V{M?Kz?1u`PgYr4&5{V_|#5
z_YM3UWC0kPK&apqt7W$n`R}^GxYLjxSe-{U;s?J(jm{6tzBwP;&gLJ>Mv4)=)rHu1
z$*I%W;$|u-3Z6pIgIC|-Mn#=a^FRK0d)<fI5^(R2?~jf1@bX%{O(hqxCq4Sx%{}Z6
z#jfpZy0ebF8**yfRk?#P-(yvfX6?~m$07<U)vg|bJ)K6L%i+PkUBxcYQ8sq>VJ~_B
z%qI-CdeFFRkN<t?uCW0q854gl@@s!`w`mm#$*9O>bevro&3@FJbDzvGo^ibjCPB)|
z)|Ois4_EyTx{2&0YGZKEfU&j6$jDTu=UDs8CI6=BBthhvhjghDPI8`}PhOs@OHWJ}
z@@aD#Qs+ke19rhFB;r5zb^9ArQ{Z2}2zL>rSypJ8aWXpu?=NwH1OueG`1wyX;HT58
zrKJTGJ8l>5Zn&-?#EjWrUc7X4M>w^3rDx}ADD#;$wV+0c`bDl;Y7pn4FAP8Xz7kEH
zsB=f}`-WSJlYBHJE>X*WIf02cBtC`t`BJLR5K_Up(Aim#`g}uAX61>u|5lPDk8u9?
z9e6Up_$HHGp}*{>pqZdj(dPWuv7@~G(SnvWz+`90&j_i3yO%9SE%)0o!vl1!0Y>p?
zKYwH}z7Mv{UIg7@3-_dK=-fiz$ubEETx6(nLo<TjZQ0(l{j~y4oDZnuF&Ot~R%lHD
zt}<pfL|qE5cV%V3;4a)v#p^Na{5$CMVU)uxC^;pFRo)TI8^F1JZap6j7#$#~Xk@s}
z^2qa}<0@(zMw5FZja43&$yrQ38qNe{HSlAF_8eQJ_}^vaWDO35<m*{IpxB4N-+~^E
zTNe*EH>3+?Bl98=H14anj)K!8<tvK0@c9sIAphAPhjR_rycZ#*xe0hl=t0pOn(4|D
zN4IUlZKlN$(VY5a=yd@*#cy-W4K4!%*zbU61C6)?a;_Jg5jxL~zIfG44Wt{uT_Scy
z{6LlxU?}2|nIAuxC;HqC3_M))DIPp)_uH>C@_}ax+o2t?sx7Da3?r%NnSQ0KT;{ro
zv<lf-s+e4tw$N<N_;jJ!E9SapZz$Z|2jw2$mXFpia&vYr15&RF2+EK9?#@Gd4-yYX
zK*&Q4_V94Gs8YnH`;#&J+I|zDU>-{4WhV~6TuKnNF_xN;5@f+Jk6#lldWb9$$)S$r
zt<CS^L(J)g+i2@YIu+87fzvH?lc42!0F2YE{mt>i^&&r8H1cr8;GhG%_Jjf4gyB=3
z@soDfkDkVM218A5ycT)JV_3hm%{)lL`cKh4b(XH5knV<O4H0~fAzGsS>;OTgq<ce0
zoLe_7VL2G<M=8)Gt2SA)Nt;g<1ss%rW`KxyFfm4fn+}+NRlj?;1pVzj=o0UNu{dB8
zZ5Qhbj^0>Bj8L=JWJ(YfJmF=S+LxA(7J*J@SEvwkGj-<>uk@1wG_Ar0E^rSuFbiVD
zuEY?yHro$v!aDD5NAMnkFmkv>6#V7h+~XGVVtv4HRj7Guv{jMHpm@u-J#_ZVz19&V
zod#mIRD=M3;DBRuXWg0zNP4Y(>m{ZN@bzHlv4^BMy)Rc>JT`j&*U@^c(<+z7$cyhj
zIDhI@jeELzRA^982g@g>?k_}CD~7fA=I9vlW=Km(fzHIjj~^HSl_53*D~j_}evWKR
zsNtNGVhmMjYlp`ii(&+Y;u%IZC3PN_f28{N;6eUv$%2(k@t~cZ9dY`JXirMSFd=k$
z)?7XItvNxvy>;UFy<hb}Wlb1$vVUFwC(@JhN!f#6L_%y{`hOI<i6~DB`B`M9q<nkz
z65wWHcMVY8WeB&>YAMJBtjQZ9aouipUBBn(&8mjV`_$Ero^pDnm_`Z71TPbRTFl^m
zS09by{B4kGUiT#C*+gI+d<Nh+5f}U?4FUMBOV9|0R$L|YJ^)JX>w|VdjQH_8O8v!E
zgsoRcb+;W4i&4HiTUW3fUQferM9aAOL_^IcG@yvq;QO$#lyfqx2H-x0je>o*1!X3E
z3o|~2$mf7uZU<g#7=x-)K0Xs0LYS1mPRYt%<$R#LiQEA`7Vtdbn8WQ2z1st5FB0kJ
z%XsO!ar;}zP!8-uV*oP4Rp`!IxVWGJ7z~WQm$E+^9!7TI=#<5+GIxb;($1orsacxS
zAO0n(b5lNAIS1?oHeu0-ZEs*tLt6n7PUx*X_)FC?DWGrUmhf7}c2GQ%hW<x-GSgZ#
ze*2B7$vytK7fie!PhKu@7o1s0x&0H{9|npk_@b=9izX6t=;;9fKw3j#MMU7?>BPOa
z9H3}{${cEEVqNL`c8N&o@+8}G_-_%J`1Ez<iY`bRP_E=kAM))V%mS2&B2@OzLvhY{
z^=hrhDgauLruKsv#eQvby(HGQP4Y9X0<Y$Az6%8$F#`3CD>ro|F<U)v-a1FKCXL|c
z)`2xa`KL<%1NAYePygvym%^!9oS%28*0Y|6Y7eZ-03e4B%n~Hi!0oJnSTVQ0vXsX8
zyfvrk+j9NUH9ab$pW=oOM-K*Ru?&XrYumYeS7X6Zqq@ME_+Y6Ky1E?(M7e%X0y^UD
z@Z36dj-l$W8z+0c^rD@CGhBqwC#V$thJHN_ao<#~DGpUU6P3X}ZRsNbp^O-A!LGat
zZWpMr3ZDByB${>Z6AYhpx3rvv44AlEeooUD_qIb}BoYyNqP?YdB<k$!R?pEQ&OGjY
zfJ(mRR?VHR6NneTGrzd70AGzv#n&?<aY+5F2i080x5}3gJ&9$-&YC5=Z^r9YkqC5q
zd#h&|KBQ2#agAkrrb|?5pEuh+@S=A#>pz}xV3rG3f{<O!zyK|@(meUPs;tmoezu;V
zXU+(R1yUTpwO&~Wolu}ZTVXlT)2PEh7vEBFRN_~LhiMt39V)4ol`+C_3#z_(Jt267
z(1fh+u^Jt#tzI=FR4>-{f3j>-jQ`dEB~wsy<+Y+|2CHN#)lc)Tb-N4I(736$BX$BU
zK@wOd6Il@PdrPX5Dg}gKg)E~2NG+$Pq>e8mvvmXaVQLGaKRoM>6d@%}ruQZv&?1O5
zgk{}xm~XeiUlQOVuy%u9xv8nC6L61>jcsjhp|A$l4sAGe7`aUm?>ocJTr+y(@Y`eY
zWu1Uu5!Hcf_ED0I)Vc7`O@G51LYg{Z{AzgvLqmg%qjiVhdgG0zU~&K%tRp!ved+7n
z1P^cTy)n1(`Gp0mv#v?mN!dj3hP%+Z=S4*T766<8Y`@@u8V~kQ@1M5qV)wGACY`R!
z16J{OmYyK(Ldwtb$D*|w<hY3@P&NO6K~Ru^sObCm@EU;ba6X=!FP@xH{s~!;wd0~!
z;Mew}yv;86s~9_OxBd_L{!d8o{H36w3l4gKuN>3go9b8j-q{Q+dB`b8Bo4QUb>=GQ
z<ICg;`C~*ro4tLSk#|Q-Z0BHi5svt!mSVGbI%8;5Kru_OT1Js3S-;ZmNYJttBGv7$
zk^H7B+x3Z=lgYQhUmNDkpxcN<B6W3j!F&wDGW5&z^?}Pl>mQlH9svY7qA*IhOo7I^
z*q+eW^B0%-;yq}pPX6&yt;*%U*qJ)ifXD5A5;ZUAl$}_^h4Pmp^C0u&DMKQ+O;D)f
zpOob(KnBL_G#iIs_f^P*OX`su->(7BGy`Z<eM+=UqHOtkUi1qz0-T_Mab^4w|D}Sv
zpyaM!pdn;ec+TS8?KjWCfD@ENfl~qh0D%%ZZQ;R@1y}U<2%k%4r?CxQyn~Ev2;bZP
zEh+~KE>wh^+<HB-v)$ZlQQCNrnYlSM+@?SS<Yyu225np*N%;{CgNXGAq<}+eY_tr6
z6!vYC*ra+Ns4fnd7!Ml3w}4!K8|Vc~OMm5MzOfX$q@*1EM(c!hDMnJyku(%qPhbyU
zG}Mg<=T9OOicSt3Q&J>rbpO6G{Z&x*AlIqk)ETlX)}huLo*p#bJ^!uTizrNCW!vAm
zVS^`^{iVY#^z3>1YTmtj_4+%jJftXaBLYFMtX#g>6}0S-1-qMzhYM~$b$>S@rUpi{
zz}bfxBbY<*tO3x9hSKLQgPFi{Ec9sM-MtkrJfQ_RtYe&;sI}LR%<05wwb^OrNy+5i
z1pMum`6Cp!va{sk^795JmNPxHCjeiBi)^5e9r##dhX;`BLeyo3j;f48F0^&Qu@Xp2
zzMIwXDvS<XD5L?N=rmJT%nh5;_F9BfVl<6p$fCC8GxM*THs>R_#ZS&oo0=s)BcnYE
zcY}Q?C_Zz;Wg}gY<iR&9_a=0$iK#juI6#{cR07xmCY)i6476^6m)95#WiNPi^oXOv
zEv!v+C%;6So5u&DF(1tn-v_K@mSXVJY5$Y6k{H8f^b<_Vl*vTFJCxW1Yq6dFbj&7%
zcT0f3Emqvwm6@557o;`SxHm{gFaFB3puS^a*6#|)4a)#4J3y)c(u5&mVt)-fhQM{|
z2Q+DUxi~wJN;4z2Ub1UT$ou@GlSjX9(s1!*(lUeN2Y~fzff4|f2P_k@8cepYl_yfj
zthF8VaH2Wg;TdnW%rUw;^p*NYznuaD%P?6*#1n1-(~CkH-UHY@0^@5KkIxADwv{*y
z&3XEXFGtbj1%GqcRB+(lGO>3FJ$d+j&#fh3QaBMynb8`rA<=l&;7$FQmX0XY)5%KJ
zqpc^BxjcuznAGmYDBTM@8~B--F+&-KCkOtGA6m+O5_$xsPTc2jF1QQ`&dX8JoQDmv
zoB=ve4DurM&N8_eO;=hT{mF}b`YWs`8s+0d@7bAfdX)Eox`(L@cz4yY4drxnDF47?
zw_l5+7JZVk4V7C-<J-<mAmeqPO)^pN`k!CR+h+gZ{NI9{sh?Z<E0HB}!te?HV(Odc
zlQX}1b|il`1qqpNPb7^OTxkrw>yQf1A@`$NM9N$=S~;Iy`0TIEMj{!a{gvrD!u7Yd
z#%UIhX_nb3Wa=I#PVC0<U&RNBjCE*WA3N>Pg}ab`J2O*|@?GdiENJsuyz|;&RO{&L
zguRYh#?v#nl!^%aUfY<E@<6G+Q}$Oj{K3K&l@+yMsd7_hwWZ_AgZBOpq(^b}F*W~A
z-D*62gme6%JUhMcsHmpbKfnYDNu|=!3X;s6KKj}p=#SDGk_48c??B>oRPB;Hia1(T
zl8@v^PxDyxC`Bi^A^ZRN<H1F{q$HK(-Up{h>{5zt)h$ZBbI%B9uGNx|taeZxr1@;G
zkX!Y6lO*UB^CZ>WS@!q8LrOkF4quOk507={C%7z%B9FOOWLI!rKOA{E6Y0ZjOF=SW
z_0hK}(NsRdfW%B#@o;-osOQHc964pneKVD3)cyJT6K$+q27CesJ>NQqCol6dcb5>(
zw|yh@ka`_xw8vL!vCT*>th}sf+uaiMmM97(Pb`U1`a1sQq=$qvO?QfEh!;P0@np+O
zx~X};(*Dhvz|n@^2$@3Fi2=y8hE&Dcm!>zr$b^q%PWHE2j=^Zv$K%L4`LpAPD>5r)
zKb~UEr+j8-KOZnsBC#ERa7QEu#BF|0MET(^Z!EH6Z4o061GXKjMvjfoJaiB;8%>T^
z4m3>1{l55J__n2emyTD^wv@GNf0(U@%y*BPMXsl-VR3%GOI++;6`Q&DTQ&~=>fzKU
z0yp(o=E>5TTgN|87_T(Rwxi>aZ(av{_c8c*oaB+2c}w;xW%5jhX~%D`Y#h7X2Yogq
zSJ{+~SHSf+Dk%7&f^L^em}a~?dGZeS*k>$>9V4<_Cs_5(Z&;Oy{bd2?s^Np7ryUuZ
zf$v1@D87u&U2;?l@yq7(4o<}$q<)|}5VjVYio$*_w~w@SH;$D&?mL>kqTViCS{nbG
zH~Zf6S@JR)VI}q(X(~y0Nfw1n>lCj#3YnV73Gxwd*F~@0QoienSq)R%lLAV0!v6Dq
z;Xz>r#H|(56&~E7^BjvRJjbv%!x?UI6~U5Cef#s`T8BF}klWz3&TDtQ-xE%;F8c&!
zn<wh>M*Gi(5Uwv;(UuzT8pLate|~w(JnpieE=wb>iuO5n`9g}*k0c-VyT0qf(HuXh
z{cg>#%9_v2PGjh(7*bao-L8$NY=3?!+}pFjW9~6`lV#hv@$M;}Fp(XhW&hF>lDkf}
zxZwc4^p4-0c<r~gghtQ%8}eZeXiA&@I`pt9osn(S`Y|rwOusq4y_OJv*N(MgYv0Ci
z$37;kiZrXNAS|q$EoM+)wwB^c`kYbgi7GKTVIM6NhH@<W<WklwNj_$zyuX>7t{i=i
zWI`q}jq_?;)anJ>n;tZ}zq!_j;nW$!<|V2f0_?hV0>aOP!7U)*si~^`x5k*s0dtK>
z&|iVSxB%NunnF+Y#FJ-r-1an5iWS8qsvp55-=0kj-H*M&d-m#y`dZ#<46!%rYirwh
z`<H(E5dPOk^hZa54%sZD>+T#_6ZSc$sVe%q>;#9v;oFUI>Db*4<wv{eTxHbRpET~<
zI)$WKElNvyBbc&GpNs%>ZRTdTfV(!hx?$aTn_p27Q@O;=#cf2@{p}K+6>I1rL*e$b
zTOAe7xbimJd(m6-PQ7_Ed%pZ+m4Q3AI9hU=({zf9_@?&9gqu~(Tx|}m1x+VateifV
zf4JCyuY99eo;?|exKMSetXH#(D*OI{c?r!%&s0vS7h7BTu<5Of52eRxYSV|NpN@|^
zE^F}6`{LNCQqGKC{~`PFS>oL6>a$8-0`8mRLA|Ak-sE8G^10P8z60u*g_z1ebqvjH
zGCm(999QSO_?u>MC64s&dN3LJ?y*(NW-nd#yB8)XZ>S#z>%8(#!Ed?fZTaZ&l^<3$
zn?3E<Ac?<QF2YL~i*2PA2)J3;_Qt9PJ0jM-5zk?=Luj;7-eY!1NyAP%E-M`jrPv!v
z7<xA6OnkXgd)PSNUS^&WGkw#k@EWdKaq}{J+X=bchJeJ^!A%dBw^O}X_6bG<25p4a
z%9T2`BnjU$VM~oMSVpXlGL`Gez*Kpey5vRAT_;z8-j8>eX77A=8mw<_!NBdJc#d>h
z`t~_>JcVHGP{Z>>8vd9L@`SHv1QwWtTqR1Ja=dnxD-w6Zy@Mkq2s%Gz68h3w{TJ>@
zka_JPG1Cjx&VI)$eVXH0n$|h4huyE!rQ7MA)@yF-)k*TTa}2h;AS~b+IO6@IZ0Ry}
z4m~B~$VOP1C{^Cv%esq&s#T_qUJ!f)JlyKA#nu`1HNG-sg_Zm`YJRhCZ$+cAiNZaS
zY{$O#F7dg}oyQH!(6&h(L;N1I;7jfE$)w8NI9+I&%igTDp>elq;}kAdyZMi=nyz5Z
z^Whvn%D9QzKCrrlX;+9$bvr7jFSNF@cl?CmGS{tJr*{jp@6-f^vIk;1>drY0W^Q29
zBRRy8$odoQv6DWJ`VCIN9y-(NSi@w73DBjFdDPw;-@sAo6?jVAS7~b^Z2v&zP&J{~
zcdyCxxj~ala<Nb5{4w6Z@h+hxXRnyf!!TQt`K5*!4UxiEr<&bW>a{;E)XaqS*M_^i
zezpGQMAw~7!q(F&$ZM%)LKDe7t9r={wALge)7VT@dS>+5irVlyEoAf4U+*B8%u7eZ
z`MO)&?OhrsC2RYZ#LRZreZF<ob+}i$sFm6!ZGR3JvJ<&1{xRia=rY1OyQKMV2U6bM
z!&b4*grN_y)a_4Grf+mFUU2G+Or>8i315uu4XyQ*+^_iBhaX1$?Q9eMRmM)&m7twq
zZF5ObMz@mcPPQ@i)n(?4;RE~a!kHkxwRi0!1@yv|qoKMxi4_klxEgpkF5fCFXYDUf
zC$}#Z3d2Rnznnp)_B-+794Iy@c!S@G@Ul45HY|3FLQx|vl|r>Vye7S*UMnNBa*T60
zJ*tJz<B(!^jZ=gTcqXZ?%trHjQ<SOWs^_9m#xlYkO^S%huV;$`xkV5wFT$SFey$RJ
zMy2`Q!A@p`mxMVQZJ$vWwdzN+=UQmsyGIkx>U&G7f!oW<*Aq3=7#|@eCXmwIXI=T?
zp2?#yqn8sUpBarieT8u^18rOn+bza&@ahnn%tsULeDRagO|*>%9$wF}{FfI^M-wz<
zipbKZjpNSFckUhAODYO3&&7H1A#Mw{|3y0^Js87r^={Ssy<699YWPb7xdy|=P^<k|
z#&{-u!HvNHRL-lc0SA^QA@;?O`Ia{UkhQ*#n$ha-H(Bxx$9V}ZFk6d^x)%-Qd^Svw
z7*=^S%A#I^EwP}uQ)nHVe&EiBN0(I&@c*cxS`5(((~gi`<1=%uTHLF=u-YoK$t$6y
zz0o2?do{s9v#H0?cO@IaI6uNV>Dg*tvatNTG#Nk7<8ja3q9~x71|DxRrGL1ABY#sn
zzw7w{N$21R$Zhi1hO+C*jMCgi-FI9ypP?8qB1OxmtqZ6#slu~#la33&;Q92n%xsO2
zbE@4#*}qF-H{rvkKVQ*hsyZ5H2`%f?)#lHoyti*pXLDxHboS7yc3fJ`OVGCbXpwYJ
z1Rt2V_TK(?K3uTdm(=pt9j~1#NoTS-2CuFtvy%CZh`*Yud7~`Fn(?ar0XCtsb@+}q
zXPL6(Q1x({@Dr-|v8#qF3S4m;-?M4F3_?@Zv(7!lthk<!mxL2CRm0C5J*F3DnoDtS
zYWulc*A=oD<9-7Lr~6;+b<glI!*r{d1Fs9tYtcJthjsbc6M<%v*+~!I@%#$kT5O}!
zjIE@^@U^ddp0VgrIiWWWcOJd9@J(2(DcAI<^ZkBd8IZuh+1ZO(;_<8~d3@ie+0~TQ
z+|_4IbjcB65`v%fQTkq_XVJD8_jI(XM_yLH|468e*S1tM>fHVBbIN+GDl%=6f8ljq
zNlG;uc&^a?DQs3)<ZY0CFTFn09R;MyKB>(ll)f6<vnE*|a~u7%citHS1<Xs^r88qE
z?5qc{-Em}fw1l;I)3q0ZJJv}KG5r{>(Lb)*agg1yvPFmWzN<VVoN7?=I>U#~xIwfd
zVfE#`j+l9&8Y2h?tjiuI;@0&ieas7j*0a{%Q58mSklaIlPuTOZ&AS(x<@1APNIdKg
z7bM!HbXBZEds<suc^z@Ac0DR(58h6#%DOM>>mGO;H_bfDSf0cfU03ox6r?#HE$9MV
zEXz8+!7r@Kw3Kd$kyz{>HXbV5_}6aV{thB1-&hp!1US{TI3bVMuwZK6J(&4&OH_D3
zWXjrg>1-R7#cT3=uNG5QJ;r^Q)2Te&hwSaUl(r6b8=UVZy=Rp_^-NI7C&|hyHYJ5s
z9)FE%?jd3q@7arHze?T&=uGgWToFz>D%kk4^l+xx{dTVE^A(NQ3k!p0Y>i#PPP|Gr
zih4<6gp^GjlIN;vO;8tqnf*{EHPu?zEN|&E-=u8Z?PYvS)21g*lnvh`!rw*h=h`-?
z`1am{Y)AF>J?f4gzqI^Ozl8T?*|x!-f1EAo6>XNIZvh-JDwsK#nO`PjFM{;`>*SVH
zA#MH3R4Go(i1Ds3ezop|MEe7&ugMbL-W>X70<Xgzqh*z`)^?Rw%u@vR)#Kj`zv7eU
ztVwgiY0ov85DsWPJ2fKmVyM_xYTc!7c>Fnvv@QrYqLaQPeZB5?mnX4=&jmCM_=Mo*
zrqcW?Q7b-wU7xdZ4_9Y>RyMBE_vy+Yzb7~M`53b%9Twa-J@HR8b&kC2^7xv|nezpk
zmfuf3`{cnl7;3@h$l7RR;T<UME9A{MHhe(ZQR)}C_2VziEgch^s>quKDwZYhDydme
zHZ_}9g6|0na*JuM@K!#rYh*D$T*ZkNjcwL{*xc>9MhL_TNMXl$CZ$I!^}lRIR4#}R
zq{D;;L#YXSk6wKLT<Xak{o0(C+)sn<tR~xHyR})gqR`qa!)1|MI9Z(acrCq0LaEug
zRu4dQS>@NepatiY5rrxmSO`N8hENl9(-dTOUDv(0CQF$-!{k!3jlznfuJGeV1Y>>2
zMbj-zMycK6HVNTDok^{)ufKD+zjnPYU-8f*g?~TL67y~BiBVX8*rml9r`(`m<6!0*
zSL?~o&BejYjqE+84qc=tzi7!Pc@je6mu*^2YaWnZak}-GXMW^`!_2pmQhR%aXZw_K
zq8*6A>(~%2f=zS~|E>0$6d(Us#=RL7i+a%SpI@w9aPLbx*R(W77}33s+7{}2!Dd$=
zbgKlFBBZVQhT&PmS(B+2jmnpymm2WyI_7S-y(FmL?E5CM?#ND3HlCw;@6%|woUbWY
z>cxW*ma(CrG0xYI6O>T{3?bw)`TS^#-qej|>f%N(b;i?&w77NimPg$OJngG<k`*(f
z?<&buIO%aEpVhN2&E{&Otulh<xg9AfyIZ7N3Ff~ogUARQ@w0GQYVD;jmObvttQDd+
zce)62gQjkcP&yX9azFQ0iw=vzigGb;Cl*{L4T(GxN>#e*VA@rZh!G*Ek*BlfE`*Ad
zThb0$#ahMo9DmUp*5NzuQk?_sd3m)(mroZj+trsfBk4?sIpIh_lO%Oh`%5i43Vl6-
z>(&ah%rlByr>-nqP7)7-o^n&4MZ3QNpTekgEBo*dg0dHR+oI-%{@U*?S;*_3Mp`xS
z3I&uybmT4BPNICzp3FIW=HvuBAs#q7bcGJRHt*Cn*vYRFbMuSsW3d<yplHM^vs$Z2
z{aCuWojH6$yv;7|2I`i|8X{P0g&}iD5c8%h3y=LGa@#Lsze-K}aM;B1S{GFVo|!rN
z`vH2eDHb?>g0v64e49n;GJ;QsPR>*K>UM4WO3bET2Sh8EkD>34pq`Dv{O}d!r%IZf
zp;wYxgW}mkyuW?ZY2#%2PNVIc_n4d^re7JS?mr^YnCG6%@b_?yWJt}2#74a2omPk5
z2J?CY<BZR7WZ|m^jkHy2lRnXJ_Um7{iOHSPXKgQ;57F^;)Y5HQQS!|Rv*60?ALi)!
zY=dISaFcU44%>|Koj>O$7q)Oy{o^g8BE8(6T2r@qPm~9PU;3$N)`<MbA3gXo%>+$E
zonDcj*tgBggcSbf<|zJKC4*!_(O<8h`%+<TxUz-jAMT86)-rB_NleKVYU6M!Hd-1%
zjnKCgc6#S>Bv=fW#od$F(?uncjNTmnp`H_-);DE%-8ej`SFHWI3$E%xw4jod6z3H>
z>EXXps1>b)*m7^rv*qkdrBK6pqRn*aE$MG|IHo1{S0WGh!nyt*0ZiF1{VBi1d>~T^
zJgY2Iw~3>nGp#5OGUG4{4oTXd@kXVVNoaE3K7rQ22peJC4XC$2%#BfZWkF+7fH_uy
zURpnI+kilK_y}^4+moZ(^AyJS={1?@!nr5UohrXKXSJd}Q+)R##*Zl?_5V<Jp7B)w
z;ln><93vegBxJ8-B`fn}B?=+Q-ehl?l|9SeLWpE%kIZ8fl_J^1N%r2{m*4-spWjdJ
z2e((R--F-FIOlsl<N93J=X$^Q?)rKJKd$WanW5Go@~))BOnqLxK-+?A+GH7N#>+q3
zwBi5uwixf{pME(PhP~I~%wH8e%lo*tN7$XF_hB~wE5qiNxX?~@5*tb6UcC9Mu-c!t
z>=8U>+1jURM>8ykUQa1klT!2_3iW685aji~zeX2-kwREPm`5pTDW8z6>||e9E#qFZ
z*xH1#K)KGp9Ti=HOY8<?KKP}{d(vw9X<};%N8g?4AHCOp%KGL0*CT<g;|-?_tf=cw
zWe|Z`1_xJ|?)3`uJ3p6%6r;QZ2O^cttK8z%MaRQ_N&d5EldlgUVWquhi>XTP?>iw(
z6|(Qted<T8MbW%<YY>wltaj*^-B6v)W@&6|LtoF8=GAav!!S-OPV0`xunr`8!8rK+
zjhBd%llUF?q?60-vq_GpV$3<kDK`wsA}?7)M)o}39)E)E^fBvr^JVh3y>m&J81~kE
z+Ij5Sa`02*Xs@-B$hW#hM%4{^acr~tX$8`Ezqfr-cpYhWH9BNU0B${}M0fu>9<5Lb
z4d7<{m$9XHTS2}goF#oC?q&lWk;w*nOM;3Tlh_}dm}Zip(AE{^^>oXt`|sZs%DqRs
z3Rmv?a=R^QEGU#*D}L(dpsVi|rAB@u*7{+xSTcu==^dOrrv^!@tNzxvv*yh&|1P&{
za=-DD2UZ&;Z=YLFbTb;iPO|fxVuHIY(6{3+ez2+X;3h@dnScH$>Tujd9_974%O{zQ
zLoIrX@BDgs$(NAAJd!|fEixK!8RhRK9ud)bPzn-@c|WYT*6EWy|Iv~=AgHS>vvzoX
zZ{<pS=&Oheg5G&Vm;t>jbS!Hb<#l{_&b%AG2BahoD+nr<Nd}kK>8?fJ8t{>MCG1}0
zT11KM{hQkDbC)ui!;nxg+O^^JVEgQyB8i)6lb3?h*m+k6i%GBaVtC32ES~)Ojf&q$
zV{%{>RJ<h4LJ_^BH}{X$QK3XoV%lT3zf#AwGkPIS%*xHHm22}(Yw|36Va{W#_W@ID
zXLsQEyB6hXIOs4}rx$)5uC?@wk)ENxjMA^hH0b0_Bs#TCX0V4I<@_~fcFbSz^mU9O
z>Y$U@nWJhsTgX^<-)I?YGNOD;ZWbL5eTAlkcV+Gp*noHCnE7V1H(w5k^rpp+$$E0<
zBG00&`z6tKRM^W}-JOk`3ZJk}?^_;p5wKh`e=yZ<b^8<PAftV<^|R8)hE(hk@||Iw
z!+Ia$Bx$#Yeu#4pWKO&r;3wJoES`PdGD~Nc*VFCH9%IVdeOv9)P`)a2xZL|aL#$8M
z(;Tknf@xQ>z6?tT4>o)^-6ZBY%&=po6f!v(J*?!L9KHTEKpNB4P=9c-oK-5+j_UU7
z;*T{`Ygf&x(4XJRsV-yyqVI05SrS;L=`pWADuz;CS(OQOmA}0zOzt?d95cNcauICF
zVIHsDg{PORUAM>Vqb#NW@wfX3-79_Ab6hd1J7yZC6Dm3^FCwHtm2U$V$)d>Dn(k%p
zKQ1*PWpH|fj5Onz|NL-maMg1lX~S^Pk@c#QMpsH|Dc^#Ol9Xe?lCzZR{vau2ag(Eh
z7&?sd_yruKLqz&M6LQWq4|da5nzny^a@Y1wb9&C5$#I6AN}sDG41E<mREghAzBGl!
z=KfL~rsdXA6c@cR{&`NP`B}Wk#%N|u*K@6^>bG{HWK*R=78Z55Gt`rINC{TG>7Prz
zRbC8YeV-RCBtJjjl(T3*@tEX<n<_=H?+*V~?r_!X7_oZfL-L5cDt+&-kwNqFXZEXc
zobT!QayeyK8$};%UcZ*sjtI)1G~VdxI`tFvWwv2SUmxu`kGkHoA9u0AO6)}wqTNpW
z+mOA8(hM#h{62Ph;W^;5Msmd^`FDu#*`RYh{VT~Gc_n$VCC}itbOV2uKjL-zH(6(^
zs1(eqIj6T7*_zw`G>dX<OfE|CnW<2lh(K~wC*<mM$#E+TD}^{twSDKvm>x&&ZTf@K
zm*4s^mgY;bM4TaG=o9=<`nSuSR92#c_n+woXNS@_&$3@$>(UD^>5cyq9R}@DRvDb1
zgbnMc3K!ACiW*d@uVNClw<NJ+Di3!Y3>J9qh~S~cnr}#PEtJ^Z7ulw~y;7X&%TLRH
zmtwW=D}zIHOy<AP%C6^6Yzy{-v$iF$B_AK-G@_Ytv#*Wrys}{Jb&S3CsFh~z(eM+l
zw+~}ZTfKsZkL*0Nd|an{-ot<##D9kBSnM~H*FUA~C!wNUVfZH%tS5Au**f=xwZF?*
z;$4YYwxjx5=HBS9za4@jBqG||;{(nWr&WWc6%k=xW=akUf~K$+lr;A(4Bc)d;JEf#
zoXyUgbKnS0Qb$}AY9}uDv2VMT)9BX1R}CqylF{V0-iya)+msA(`qb~ZE)2`={lR1F
zq$x$I)WOrQyN2wJDn}gVtLeNShA*wuRS|E|bm3zw%TM_0<Zd;J-);WVm~p`H<_^Qx
zv9b7#;MPL^N6Uff%OP^v7LlPE=3Atj<xEpQ-)r!Ax#VE$b5iOEbnk^YP)zT;<Tq{P
znlvrbBs1vB%ikt`TpYPE^V@5ZzA{f>FKSRpa&XmqaLL{LWZo2`3XN&5Ki&2+c4pBx
zE!+K4;*`Er87%S--OPI+)NOHe$?Cd*cS~JZ*p_MaW}ToOXI8X7^KahZe$uXoalSG7
zB32m&8X}t~tzOUWE|#v($jYYlzn+({J`>NVqdx4uBg2}_@Oabc*IR>IOOLlCS$Shd
zfdL@dTJ2A*-|#CoHWzOs_iH(sLPGa)WV>3X*Q37Lp@H(Z9^*UI3fLykw3kKs*Yi-8
z5{+3ij`Oikmv{R#TO#M^#Q0fEKb|FL7cY3`dKcc|IVd+aF$k{u-QLIVXMn^uC=Wau
zSb(eI4V}taX&A;vvKi?K<<2YE&c-Ubl<pL+h;}6UlfCHB-Z-sU$t}gE+R5;nle87X
ze^DMRvrS(7Mg5O#ER94bMZZjl4p{m0|FM6Q#N#wT9a45pTBw4sEU6&Q+5s+}ACBVc
z4UW9xkyh*J=?%$rANVIXk+IW}xn+|Up`7!U*l6#%rM%ri)7|ufS3TD9C6`@K8LGU_
z1|00EzioNNUw#-qtL*mR$_+xExV?8(joFw+{pQT`n%T`OXG=t_zg}h7MhVU~Z#*Ws
zeMrJPC3b6O<hB%5*Y@oUvdp%sD5748$l#oglZ2kGD8j+3o8FGUx7BHyjK}AXssd7)
zIMed)_&7EV-mg$K6x>K68xo$6@bo922>a8^-7;QJ^38#NGPNR6I`s6`uDe6u9`;Ul
z*80USmV;kwGA^1}DrUX1coyv)e06gaYw|lRjK4t5vOOkkongJ>A*CnFdQQsk;fvQG
z4z>`!Zn`tQN-}R0O?j<!_HZ+HDdcz;YyRvlrDxJGHk7f?tM@jS$w5xHlXcsR^eu14
zAKPCGlE3Suzvj*kkJ&90R1irjAz}?v&f;WD;^NJmxGUH}cAeMdPK%?ceZ%%o`l)^%
z8B2LZg0qW*y{6?>o}Z#xdM+L;Zwc6M2JHK`dr2)^HR}v*BX>J+IykobgWY6iPrs8V
z!f4{GpV50NeWX3F)W#LzP8;Zw8I9grCf-_6ukx#Byf_(bH<msV5RnkE*`n|+@x({&
zp-75OY`Mty`6k0UfdT=ZksBhrbI~V;5@u+|SKOI}dgP9s5%SpVL+V1ugN0^-)7h&(
zBPUlfuBhz{DtVLUrB;lUYP9fgwnm51W~=<m2;-(V=;m1yJKWwc|GXLfC02}%a8J?K
zoK0vr;>&>R4u?SUNB{Vd=kLu2OjSo^zVs|=_#gLrq>tPm>ngXJ`lybq{!DB3;nw4C
zcD9k(m?gnUU9%4rufN4SR#p)-jruqv9X>lHB;9m-mtCNZ{cuojSoHdYk<YMZbQ49X
zZdl~i4euPzM2YO5wY>q3CK+RqO^As_xR&8eq{y~?SY1`vk#2E<B%f=hNzdPyXNb)q
zF<@~KkykVMsA_ajedSD9#Om<l-_eRPPPJswci93`!ef!Ng1;S;m$952*TwlH5D7#I
zS`ITBWpx%&VcZ`%?~u@-^GpQuM!cdb6qncI9eX^@7z_B%e)>lCT^0RPHQ2E|D&sdv
zBNj<_<=Y0f)9a>?QMTZrr>^}*6kXkn<$e-fZvcyl$y3!+rE9yvIW#2idG%XwTw6=^
zKO4%so0>CmeP>EB_A#r{r@IwVn^h@Ev%}XNF!%6Q`&u8wpXAi-<I_4ujS%!lD8H-E
zPUicpsTJ~2pR;Vmt~Dy*ax3#xbGm@kVvmahM_Z2?>ZUp4e#Irh6T`yjKiHCk1%7OX
zrCDU^a-C~<%Klr&Z;~v$F}0756O#fA=&tbZ>bB1-HB;RUUHe^F_FZkiN!0#X!)q_p
zi?30i>mH+h?fYWth^9il(_2(TXSN2$wy$LGtgG#oZ4E~Ek02xch<@K0r)zNvibKc#
zCgm5Fa(PDSzqTbQ)mR%qJ(MCUI&<VPRKWi)cQCX1SZyDMH$&9Iiv&lj7BRZ-8j!%w
zyAmL|uzZ$xa^P9%@B8&vzgI2a_}7dZPupeq>Ii(_{pufCq3{XJ3^^c=Q8tTJi}xp)
z$8#CCestw7hW#6V)0^d(vb~zoUsoO147xg<=ldFG?H$c?g0H@`ef+=g0Q_H7?Ejx$
z2l)T%mn-{DI3iM%CXWQ{qljFItGa0Y<gH@(0#?)9xv@=Qx=$mn^S8{tb*H{|S<oc7
zV<~l0F=Rw!>BSvOL#e>McgIJ~pB#sljDm+1v+Y&hw=7&c{#(c^+=OkaTC^8JOi$3Q
z=2@Q6FD}JcL|Ml}7p7I}*D=15L>-2dYpmFT{H^&ab|vbsRy2$^YOdB6No@>-!}&D+
z_u!%i{`C0`75z(aOJ4W33npan!ssxq)Nz<=Uh}cD(tOUXt9eg%CvQVfB%PU?RCh*j
zRi^7?Y)fc+-ps4yFV#9tgQreC7X&C}=uSlzc)u_6`;0D2(bn@mt}FRlHLQ7N^I_w3
zS;K6As1v+nIcI~D=`t8+3(pqpWcs}uk9}~smYHx~p@>Rz8-7kyvf7;)D}_$g1*D}0
zI2!JYhWboCY)T#3mF%B$dXmI`EB&qVE8VaUyXcjBIy!uNE!XZ_=E`bL#5J(TeLuld
zAlH7Z{W$oY>w~N#sVPcDXoN@3crzl@`?%PL#JAiEZUiy?(RXgIUza>HR3TcZEj@}T
z(Peq<yGAs3LA5KI1`n)6Urk;S@kbPP5Ol{sGPG!Q#~V2{k;0iaJ<cF5o(kQ&e$d9!
zKTFZOgrj|9=xVWUkR@rddD}sC2!4B<THUp)!`4oV_^7&|(Ei;Y!8ock4liyPk~?h7
zatJWvjZ~KJUZjZ+O!oJEynfJ#;+NX&zjX5b8XNq&nI*poBQLHtr7TRfy8PCc?43*4
z{N!d-EIyVIkrQM{+T}0j`|qpc7Ck#fxV+0i@MPa3j`u_2>(#XM2r-%<B!Z&vHo7Pe
zHG7*%+<%8AjwDKca|MlTyJr@KXp5x}oX%!?o6+A_cuIgSxcASL2NfLJ+^i`?{^R6C
z?27RC{u*+RYUa|Hpw?!@!Ir`QxeG9;)cv6MkwQ`zd)x?unaysOG~zb`5%s))d?47u
zdGG?7mf76)BDI%!-Jxj>Kb|N3RfMpbMU<vWFzVfoWfU<^U0y#edk`)HOMiJj0*w=f
z-QXT&Wn>EabnWD6xUBenqjzxu1}$;y&*fPT3_po;B7Qtd&hQb$$61SZkRV4p4G^K^
z@R`|uv>G4dt<P~{Y2+2*{j(hGe(E7@A;>UxC@v=TB?^0!U~I0qK`0%8VhVB@Fc`Uv
z7U<^6k3bW(z2xV@%-=7R-|Tq)ifM|K2`?u>Kv9gwWDN<I?%tu=Ys9f!+^jhc5_R;1
zf#t6F7PfewT7L!jw9(-+f1+)B_5w>3)f^?*#4vE<N&bEPO={NjkN;`gloOfTs0rD9
zbuETnE{#5;BJ<QrLGqb9<*yh-j#`;AyxAW{9!7F1A-m@3m!#WPXncoS7RLhEH_`Cw
zrJ0#trMyyCMkDY-T@8p1$Sj17jx5%TE&qksU^`vqa)lG)l-c6e;*2@t-iT243#Oc8
zjh)G*2#_GqMb~OO%*s3BT*>$U#H|OGb%>_7Y!F-=ex=No5T{Nihhz_;XfIrqar{A6
zTE}c%leNoEGlXN_z<fLwKsZIgQXa;PMh@Vd;oTxcKD&-{Jh+~2f4!wSJND1fOWw$P
zY-P`Fg6q~yL7kVy$xA|WRR!slHBC>&J|2Eqj^YxEv;~EW%y}KAg2Z`~K{B#~kkz0?
z)H%GP#QYOc%8_6ueer_K@V@F!K(kj(-SL^mpPNE^$;$prP3rvAFGyyT5RAgP6tc}<
z(rIbY6_;@6>_~`t+XSfpbq*@=E3;9A{}~HGz4*N@OA&MBV|J$tA3Y&<Ng%<EfZdT9
zFF(OH4Q6lCmS!DxM*W)Pe)@bvW%rHOP5EJ;;u474UcR?%r~T&6f#-BT2r;sALx(DO
z+TCrMzFq3Ubk|2zf~L`(izye5hFlA<i%ssY-W*>{pwQ0GFe9u-yg>)fA!V951EuEo
z-;H>6Q}l}7`ES&#TJr~TOEe@KH&Sz~KIay-eNteLx}))#B#kDJ+d_2pFD@!jUBTb5
zkH~#qcYjw>+V5_lfksXkLHl-_%vM?La<76W%K<Y=o{0SOb&6B{FUj)4zZ##-6s-ND
z4_G5_`T6rl`IpGH*rukJT(99Xcg!Z)okdK0XQ)OGWei7|SxEZ+*rxTC<W-N!CQ&z}
z<=9B{`tVQ))(p`LFJ-?vqc>E<>pG>^1{Di%JAx<M7BvXle2oIvx-1;`{p%69vP9}C
z1rZle@^d5?uCm3|l0T+SRyMrwd=k~}PIFNc7qd=67<xgV&=I3pR&KoF-Qvo^{Dw;v
zxqX-I`2$n2?K`SQ7mV)}VGl&#aHgT&a77)G_=v@(2hDrwljXlIg~2R@%a2w;BFUJT
zG71oK+n+v&4b)G!O*j%fwD98zaxzGERaa+~S4Lgvy7rZi=fC%eyDM*6Xhs`vFv5-}
ztY#9W-q(I0F+<CUcs|cJAdZ}(5&LX;XN9wYsQ*}p<zNQY*Tcmg(JoN5CHcJ1S;gir
zHxHhZzw}t3CMg42cDm?BAjyC@mXR}vD+0}R*|939eNP=9N6hc}SK~<ziN@Sov5h7t
z`P9!5?2gwfdHG&9F&gTMw9h2v3_n3Wzra@@%#ZEsD;hYFl_ZlTLNUoz5cz)OSY0x7
zx`{Nj`KKUtDSrVQ6Fq&zI4!+i?XhsR%&T?lxeG(0atnXPQ(L?={<t@J!J#c>ShDgd
z4Wik8bd=YDp=7P`68Q_Fd#B;Kd*;8~_+KW=!&YOZS}Sfk7h|-)kkb-`a6&SWDjQF^
zGp;Cb;j_2Jd{{q9JN<;e=*dfHwENiw|FyE=RXG<-aLVrX?Q9%^prhv<j$-6Yfvyjb
z?Fr?kd`{JJ>u=k#*9g&0%t)N)TY&|N$-$?fPv-L;du`zy{^wSp?dqqI+rnt(HiPyp
zJZ5<fF1&x2CBM&|I^1B!o9O5Y_RwJZb1Z@Q<aq;$ai>t>!eRb2ryn?-VM?x#Y^x`1
zAvy3q3DrdYLt}gH4#D*FoF0n}oYsHi5OP=>G{LEbT$fBnsZ-%2=Z|-&2@HLm(P5}@
zXGw&y{~jq$fIinJEy`GU<H{{J1&-M9%Abe2BA85)*|2C0+EO_*USe8#*adm*3c@fF
zoG3vw5-Nqvl2flUC=LnB6w7>@N@(x0InuXXhM@Y$!cj{q)Q@wVWQ{#RQy~ZKH0FU5
zD0Ji1eb>P`ra*2j4cfpm2_=J`v7;SMxmxkdzZS{ZoOHXGGsFg?ghFIq@HYoMnJW7e
z8ui~YN8YM;@gXI@0-_;hpT!v^`!${BSdg*p4idHekJzBgZ@`{97{z#hfejDIzHe@A
zH0>EnF=fqe9oSCE#GkR`xgOpVtOZN?3}+A4u=MY^3K6+jJ913GXlfKc;6dgclxW4<
z7c09hPuL6>@Sda`AIGV{V_=(-e)v6F;QSp7h~pisSC2W;Vx2z_(fRR>-}-R<?4>H=
zExkUA_fw)V_30*st97Uskxnf%`JZTKBzuTXXsPsB;<v=+_LOiDU$>&`Yr~l&DR_@B
z>_;!Omnor8Xs0$DB#E#``!zwH*G+ysm38u)bh01&6O?Xr$xFJCVt!<78D|ur^qtU5
zKVn@6DjX98324$!3JtrGeSESo^~O;+)AFy?nPdLZ1`D>+cARPqI6tCC(EgL|i1T~5
zeY`3o7%snABOvuWP*8Ey`w{Ve{AENS?5KnT_&6E!TY40W{5Kv6D0UE`>RyJ~%HzJV
zp$hyZg4H(;{o?7>4tw|J9Zn}&jGB(o*B;uASF4TgCN!4QPSX&lA-ICny9F*_GcM#O
z2&!-|e0OYacnEXGosVo{=VD?39=&WJB@35D8wxkz30c`J&R1J~1j3BU2e{L%rI(EG
z5R(J1SPD*=(MImaNXfxki%XbT7(TcDoAcDTv6L<?IQ`;lJI?@oU9;lG5wDUDj*eRw
zlWnG$*ijWx7@fi)0MwT*$>+U>zCvBzZgHfuiD0*jcX@=_JVQu_Nxo*PDo2P3TYR{=
zP|;EvYP=@%ThAYQmS^(X+S|AUMvL6-RhM4`JX*@uw_uN}4PHFltTqfmF?Gzm(Jb12
zCN<(7f7i_2o%^-&{c9K3^;%Yk%8pF^GF(?1VwM_8`?)P%D+g&1p!I(w1}Jf!uay)a
zvApo~u}Ld=L30p_89CfZ^t|njQE9@_2_u$qPx8_ST<*Nn6v>%-`e1I|6_tWG5|Vr2
z@)3xW&0nX{FHfIpMfC@(upBh24#u|W)rTfe(vo$XRZTctA~@OjRlP!V{|~X%oVv<o
z?Qg<rL)Bj6J?8`xs!xtT2m))%t?+J|;~;A6FA?}L%kxqX2}h$s67j}rF0#T)>riPw
zxG;Dyv4L$o&^0GbIQBPx3?ujAo9AMPpggSPpey|zh?6=l$t>?S)H+T*!)AJl42xE)
z5(G!Qqf{z;qGHoJ6|lcP11_QSrt%c%6gsm7=7$rrQhvScglN9}5Ec59`w4|_zUBdR
zoPpT}xERm{1&x!)yA7q#$p~&`W^)URTbTn+ZQMELdUVpaQmh*;?u^Nmno#tPb=8-4
z#$L6?+>kHQI)vW<jgEcwp7VVR0f!IHFhAcv(T$Rwd$ggbFR+gdw0PEE36d>qbBP!*
zI|C`#tU`>LO16$qoj3yRH`Ti(?)YEmNi9cCgfJGp<RKd3(p7#*Q^UI1@L(Q#O!D|!
zoEXNo^xM3rRh0wPXU0x(i8y48rdm$VfwL1W{x8)(b@wIj?-n@w`}73gWjW9+;7yf9
zzQHbVWw^>+(V*hN`&IMggN_WaBr`KP^JhU+<k$9COXH_5Z&Lp}v}lw9YXVT{*1|6a
z6_mw#_SBT!S{cRs{l)0%85oF|;la2WSVf7@?F1ZS0<1sk0VDIje^=}EsS#go{QeQO
zs2m^E$WULoz-~nJUnp=%_ikIU`g9<R>X77(EFB&TZEcp<J;%qs9O*>EBoz0(ScAwy
zJD|}Y8d=i|ii-Qpg^0#|?xy^C@Z`!HZW8IHsWo6alzg*(t65ZEFFxjBH@3KU)MdI6
z$<Mghko9Gua+G(0=yde3g)h)5l5^uHP1^LQsd~-(Q|q^qdTMX|e5KqH+GPEPOMkHH
z28hO_pKYJ_$fDPKI{`^@KS#ikHl)Bt?(uQ7nE>tb>MCH0ba|z3-b}w=XjVa+gNOHf
zB!nQL>_{FCMt?$;tZ_(bGW<F!Bs$%jUyJ|S^Qn>A(5J!6RxO!vvR32BATbyjDoQ9_
z8n0D<(=pTI&cI|eySNjft>Qb%z@ND!>K7lt<T%|2tEUNGyd&Q@3m*BY>=kqv6COMt
zDXGa(Zx<I|yJ$?Wx#ozw%xU18gx#Z;{sACp0}lu<H6_|yXw+JmVESq4RLx-t0)eSf
z$}_3ZJ#XRG(oRk7#cqis1ZhcOAOl{g*cK@9HOYmH3N5?&2eo@`J+xd0egCc6&yepw
zBlER}e#p0{q^Ga!fLEwlmlp(ND%?AwWrG(rk$~gR%F2S~J!sg2ZhP&Y446A>H`hH2
ziSnuVFY7--vAmdVd?3aXgfbnAf7X1sJUaA1`hYF-KJ>eis0|s?&fVq4|Fn51YG^gt
z{aF?k+KU62R3gEO5|8&2wzt$=|A>hoQVJfQ<0OAWqq38RTu*vJ<Lm+SZO6)-?k|^k
zul)XKExaH$P#ybW?Pg5XwbNJR_W#Y1KD?Xm$65F21EX9ns=gAmTA;5SJ<dMv%`Pn~
zYb>4f=EFAqv;#QgExL<Og;IM5!HeSK;W6xPfClF!^k-F7xf*S`ng2~zo^(Kexgzok
z&znJ~^W=tTH<yV0(=?IWx6_r`ChI-y!Q7RyHa}Ven(GfbQ&Us0xMyK661?=BYNm-+
zoLabUWReEX$#|t$Miakjz(7X{4$hS>NyN-Gl%g_F#!)llX2Ruh%9D!ci`PNkx{Kwp
zPg1aPSUv(_G>LvZ9tJ#QAVooQB446n2QxOyh#GtP$7<Dk*lT>Tdg<f8U&2_D;Gc;<
zt=V|QP*c*up?T;)3T9cSwqTUp9#_&F(S|DyItbg)(N^v~%$wX_BLx;3ifLV8*qq+9
z(xviwAC%h8q;t*$%(h#x44hpXz;9M}4QLApZ2A?nb0qTsw#*OA?fly#))Y7hRFVaJ
z9Ey2u^<iD65xFRI@lTZ^t<Uq7MOvHqOL0?M6s?b*Q_u@EyYD5gsPT2?RoGBJc(4>*
z)fKFO@sJ#$)K}*zU}f6RqmhN<4a}I^&($S9a^TC!{P3RkGH3pz%vNU5SkqA1UN2MF
zqAU54w|`5rzcML_+HtDoqsL+#);kELt#PqKxp0Wzs(iW?aZ2-fW-At%M29ouc3AXd
zxOM4$^Nq9VubQ8Yh>h4Snw@m8wMM?~zD{-JEwhtbW9)I)gmPku@kSbhC~&EK+r(5x
z-@&;;g(uTcPp`peZvb?o0>vXB9h|xb4Z@;y(Uw*9jg40$yGr%z(LFEDNT-b+bR_E^
z5Y*y+TDwH2?}T_0M6l5opojKbYu^&ZH%imX&L%ym?0h0tGqJP--JnHUF3aI&V+p8B
zK`0t37qKjyrv(0?;vy44SIO4VOvIB<QLRSa#VlTCfB#0Dkzu$x-b;6EjTNp+w6@gI
z-tT=M<2^s5;*b1qVq#{WdfDLPJi-fM^M5NsI=4CBZ)Fwz@}$}J<M_304$6Dlw-jym
z-|lwWilj&DeHdFrp(3}o-uL&1du5QfzhGBKwn@bXJ**ZdM7?lDbF<3lXl(?~<KjU8
zg=!N=%55;ComQO(<PiB($QgYE5}753khXd^G;=B>PsC0Yt+Rfs!?VBb+E2BjfV(eQ
zKWqpoLf|XIMO2H!=l|Bl55_V}`>=~ij8gvhyLlS1UAgz}-AgOzn%i)xhYo!}6IJ-*
zFd<RIkZqA|e}~Kec3(~q_XStzS-0C2D}gs2>8`7xG$^^)d*$`Y#)k*|l6R)b<~ffU
zIdQH3-V1gNyO8rj^9AP(JVf%w-Sfcywt&}>hEzGVZ+%S8(&6XNsv_|?^mt0LNU%k+
zzDDMQse^_XX2@j(lPp(0@k1@O{1jReTs%Iz7sPGi>S$V%89X1p;}^c=hx>`?PExos
zcc}O6<fKmWzZko;G&nOR)xEG<kG<G0%jQM3Fou0PD%`TKh(ON7Zmef#6YAV_S&UOQ
zloNYmfEN&KMBPnm#+!K`SiuGj)ghiF15$%k_9FsO->j>vsvZ_;m1D2&{X!!0AtmMS
zjQqFU#t79NYC|5>g9lS>icT>XWG>4%I5F2@h?t{z5YsLXkaCwp;=5l|?6UdZ3mkP9
zD8w;)r2B-h^|oYB1P&58dwmR#S(ZpZ<=2516B8l<^+w(aSxks0ut^+nfqd##9v(tp
zrlatoyRG2mdw#F8QRCT&oar05*;n2}ILoc#^!7~<F-mMV9`!H4EhnF~_~`hsgXAYc
zINtdLjg#RpvWeXb7T(r(L?SA5-7GBXwIuTswvSG#6!U)CS_q};3aj{q-_o6P2F>M&
z?YL`vuX&C@x^m}}50=e_c?rO)QstN%Y$bRT1V03nw6PlK)|AK;A?<LarF?<#Dt#KG
z+FuzH8*~4`eS#Clyg!jjv2JSV+1Z5&B6L=za~u>z^tV3Pq(Q#GV65io#4zvMn*<;r
zu~Xa~XkIl||DZ#UxtsqT@pZ*RY7kt~;pQyq{l#e#sk%VCn_7!iWbLn%jJ+N~5!v;9
zvD$<!_ghMFF~7gEW(fD|rZ&~^`GVHE77suMW@cnSORbk=k}3y$kNpF>=<Z${Ujcfr
z@t4yQ*M5qZF2yJg8w*(1f|bZ+;EEaCizqHG=CP~*#y%imS;z<K=fnzZ$Ov9K)ZS){
z#R=4m&|ptg0gG?Ad`d3j)r^yFkroGKzW^y3ysvsm^I~Moc#%6Z8}Yqwb>0JT0R$ZW
zWsfAK)M$wehV(%_zG;0${D#(R=JSJF%M<@c8Z>JUFDq!zB5?5v@woCA!2urqFHI4V
z`&zkOK(m)^xR5KSbV)DiCu8;POi-egF5w2|LRP0!fD|No&Ue1uLI^U({$7c(iE$Qy
zE-p<w*8#yx4+@9U3cRyK8DjyrV=k1F@UH=84rO?d32j5^LluG!lOnAe-s{wn<Y@4u
z+g~+$q^;c{P&sNhE<mN-c1VsLcRt2~r7G!`bH>(7%5Zs}#0Ys7Ec=@5%<1OB4e>JS
zW<59V*T-Lx1a1ajDF})GzF|@2&ew|ltH_e2%HDw?#(DA5ehgL#VBA1&_S9Nq>FreA
z70a<oUKQ@$qG?Y_>d4E)!EoZ?g5VD<ZYc?-v?fs|zk1Duz)>v7>$G+H#;8b(e(Y}H
zP!P&DY^j0P5W)ZurDnkLJ>x|C`wnb1si{{w1YSspfPm)yI4EuHL_#~5sWBb8p(95L
z-#5I*C2!xBmgqbTZ12enz2v5Lor*YXi2@S3OJWoEtpY&PQv{D?Ks--Hl5ud}CFJ#2
z;b=kpn-(MPYOdo;?u0Mftj$gFWk(<+v87eyNsN+rLnEcF%0_^chF(XTfaLdPLf(a6
zF;etogfHb<r$*fUoSg+<D+i)rF9&Dj$*GfAwf$9oNJ+(B4ObO`Er;78N`v_=Hs{a1
z|I#TR<&Xl3Cj~qRM3_7axPwfb1yfbvB&AvJ3tR;oJzhGCC<@3tf`Dmp5!mlxnCRf(
zgVE6p>?rWVPfRO1#ep7h-21@4vT1p+WjX`=9H$e26mt?g1}kW(L1Q;<2OHxfIgB%~
zCV3J!TaWwC{P+LLHBJEKJ>aM|0C3)W06s!%|AYwt>=r#KupMh_&RN;=ENS*;Rk}ci
z!nA@G#7*iPUKHSm&3sy850s7L&DOKZv6abY*JRCeEDe}%tE-(LfZGc=^p}XY5lIJD
z2!LtCBqaX1Nua~bg+A8Rd4c`{q-!5P-dl8A_;?}>S;uRanLDk;BqbzDb>0J+B`q`k
z7HOVg+1lz#G5a~4Jt^OYE}yhZJgNdBWZ<)TdV;1EOvSwY-`%CM2d#u)5Kt+!aqR*9
zfuEOmTDuL9EYPD4RxB8|7LSXI7hLKA-~((Dh!w9#<QCH*e%SsrI{6m>01fbTpnKra
z0=jYMS<ovtiRPLb4=^;ri$v#q{ht>4fU~^-8F&{SjqsWN*?z0f-RiS90bnPk4KH4;
zvAa2SkdJEWMWUGSF4;0i<i0D8=;nUd!lDmxvdF@_y|pP&CxPQQ!?nZ^*c}G-E&%di
zrH-sCeNraszm<OU(>4+H$rQvErCL058)9_PfGnGA^yH84g%t#j`9L}Z_9<<8YAWFN
z8vySJZSHIoCQ-vnAI~;qPP1L=E9>fdXu+G_Y&clS+pQ~<3gCQrjh_4l4GF4++sb(T
zwqm+}0d57DrbHDBF?zx7%F$(D_a|O|<S<@W0l)>Dv@-PkuXvUApTydNfA`Qx-|(*x
zz&_t<R4M#bFx!xY^|mJE3Sz<w)T9pl>8had?BvvO^{haP7YE^B4Tp&tCxDmjV*^gH
zfYInRubgl=$K6egjlp!uyl*9xDxdf5;Nal;qf+R~_q4EJr;gN6F&L2&6WgEXKl2x(
zJq25sw)P6V%K6IHGC(}mwY2!39J*tirGfVWcp=Lw?w}s*7X12azUytkvpjzYIdvb#
zR)FUN+TU}68PJT-$PNLZt)3rk=lc?)qc5tB&{;(T1rz{8fV&R`Ux{Ja36T2(R+lAD
z&V>~iXUV~iFgGu+eSkaqw*qlhYVaQWIVk8{DRFqHD4i`zdPn0O)_E+8DzXdgvTk7c
z(s>_^fzP4WvI>^EN2PWk_yL&(<I9^os{n{SBVYnC06&0dh?rqlA-<{R3T%BKt*x&M
zB=?`3+g?GFi2#fTFfC;K;G)KU-PnrDK;AcN>1?B^Url?Hu{tBerWJJrbXb1@((N##
ze+xVZIR8}(pE6fdUGk^KMF6HNKknwu`qb28b5jW9;oGaLgFf8xDzSJBjL=a#OQ9<X
zHjSmgf6S5zSQR6~9uI$bGUG~tK0G-EtpVgG04V$WciK|JP>0Bd!0H@7v?UL21)*NH
z8GCxxPS}Fv8e|o{ofIr`VX{Q3A9Q@yr{#DVkNR5=uMa@}Dec2Tp3<f3^Tf#4ss(h>
z1c>dUmowI4slULy1WU*52OeZ(WU%<qV{#HquvEo8mkWgYOgB;rY!FQM?o;%p%e~2Y
zPC`S{=AVTOpuj4<Txyuxr~|-}?avwOS6?jPGq9r#L5;g->b!@eBY^ZE3|2Hl1dh2!
zE1t}B5CUcmOaZIA4GG`Fr79R2zrAxENX_ju6~t*5R{Ig2+&>R`RcXj5=yUHqlhPV}
z^E*b<_VMt?rz4hDm%9`E1Il3uJU#%_3S(p!$F8|uw8oq$Eh+EQ60Rsz7-q0*nwCgv
zYKdEzovO{N*7$hAbK^SH#-LszkDQh(KAIKwMhuAWdA<MXd%V8^@AS0IA6&8-l!3jS
zE(VyIm0oj-Sf$IsJP{&{>4_?ffGz!IjYNc)cx8#Es;Umz)sBJG15r6zVn5bwcqyHg
zld@k}X|BTNT(|t7@L_^&$BfgN@frM_%15Z;apf~HEx&Lvcr+x8aWA#ApLd_wlCK4d
z%h<W=2#CV<`d6Y=?Yuw*31dl;agJ&UG=E-_F*Qx5Jn>nTMwgz-&QO=hv!u@6Yo$c*
zE9M#2HFk@88mvkHLCszy{bif%h<k?st(lptevuXcsfO3~?0s;9AhLU`1L9fwF=3?>
z|22TY%ygWyiVDQxPo+qvo4J}kpf#(pH)`<}f2~|sI_B_^QOXxMBw(NBOI|w9oK)~W
z1?lYAhpMV>C$S%_hmW`H?4mj0na4nUv(ylb#_`;r-AKW108F~-{OcvR;J-cw%tl>k
zz2H9$dJK`ip+MTcqhwTe(k<99;CT(!Ppv%}e*4o70z-88QvK_m75R2VV4Ja%lT&ro
z7Vy5Tx=hK_<rpv?^ghCLziKW=DiA$SO>N5MDqRArtCEo<3nE~X^O{&pUU6|Q7uu<x
zPLys3fMx&;<KyLxQe?$c5WbuN6Bs~nDq34b>B%@LuOilcIcgZf73!yxhxwMSl-xix
z6sr2@&N%MAKR#riGW#!e8NJ^hg^2lRqY_?Fp~X{CT@7nH4B(G?9tP<`v%krZpDf>N
z7X1K1)yN1SU~j3_+J|cP(RN&xaJz|z7^m)Lm`LVaK_E(fD|EN5WR4ySQ~Mq7M*{A8
zEBoxYd2bacypjR_J+%0^xIq}HF_4IuC2$i{qP;Ta7Jag?4W-!n7d}iuHZd`=vBM*x
z(8)Ntyllsoi{0|>w%*v@&XzeW1oj)`reU1}{TIY}9W(FrOP3`libibHiZyZ1Wj(pF
z0?OxGT$^v|uP89oL1L;%r(uE&CxxF1ydb6(zpRBL<hN&>ynKDD%LT4Q{|h0%z(m;(
zX}crBqqFUAG5}VEJzvye^4nO2)&IE*0NBszaiFtFOTg|g%@PF86m^yQX;xR@UuG>!
z9)MQlY1xPmHuD2uXxt=L8XW#((46gVl*Pte(pHO>&r=-#v?7!6ucU<cTs7J3cA&{d
z0g(rU9o9dtf?v&9-^#?<#Myac@N{{Qv;#u@hEiCCAz`&Okl6@GVxTCy#-fmRpZ!i4
zXe!0{APwzEAB5_oMY<)-pQm+h8ldE^6j(gwEaW_!k~t}Zr-jaO!VawD=d&A(5T3~8
zYmQEg+1I9jdq;+VeW18lKvB(g8`cwR;d3ArIHw@~0P!GTWasA2Ik;LQJAnBCE)M8>
z1r+b)e+TUM>f~f+O__s1rV$rP1rK8U8Y!?efw|>mNao}mKWHrsjA_U=>lA58pDYhm
z>D<ixQlQB_;0>9;(186=Ft@8Leg+nSOd}W_Ipgm_hI=*=1COBXH|$a2n7Ntxz%|=b
z;^P~J=ULhomYG{0vEHSTBg5^k21E3ojT6nyC*YD!=uh+-Pf1O+h^jATm5urgFYb9R
z*O;gSFE8)kG!W&1P?|XiY)x$dBD|C(^N4DGcx7xW_(j1}SnwBz3U{8J7zLb^eek%R
zs>1P*Xq}TTtj(#svDWA0_fGc7vK1sK>0^N`dv=f)3&GD6?5F)p$)I~V$h+38#0|j$
zaCe;>hx{wIbTxF@a^DvVRjka#&z<c(I;#SQHF2=d+Qbum{jay0r`BL`w`v?57@$il
z0I++rI+uQ<$A_skc8YEY|1^vK7@h4HO*QUK_Vx9F$*!2EW2St}PvquJ*R6#Q@F93f
zPQp`_^ak{+%+c}?gs?RY5O++AIn?VPKqO=B=$P%=Qd#M{_+5`DaRCk=I}k=RpGYwY
z2q}3wOl75}nnZCIqq%1?e8#uxLUm?hmVU?B->z8_#}&($*ZB2|?i!<1z~-NgEi7Rc
z_GJI$ni)p*{phpfedpStljEvEHP?(m3oEOw471OK%yssSVs|bRk`c8Th`Q+|GjD{3
zomUp8aLUNabSW`7yC(Nonb{a)|D%6py3}hG>4fAx$JV2fgFEW36V}4K{b||RAWZtX
z^Vds~2#ej%r^|Nro)Zp2EwAGux^*QPW4p|rChI&|v8?b)8^k(HHdQn?f8grt?d3Kj
z#ad<<DX8Ph`4qIuyT&wPa+Gq4i|h4wf#wUV09P6PE+GJI;a}d2)4}S*x#af42Zg+E
z4z)Dl@?g>QnV9^x)uF|b+Hd)=_s3dEc>g>UidJQd_P3F_t}@R1-^=nW9)llA?}HkL
zhfr$I;OEbSgG&ubgI0j=auVZBjNs(NynlaPH?5pQr(P3Q1_+2tmjHP-S?_9PVbSHB
zA<tqmwtL#vViO}d*wrIKcQH1GEL%qAugC2Q-Q~W->#z%QeZ4Iug&znIXPB#|8*UB`
z_fxG9zpk-L4o1qeB#-b<)w>d^8GxW3GV5bw54G~A)_`2C-{4j>;Q+^pu^L#4K~*&}
z!Ve=W$B)=-<_+7~!+nEmLFaX6L&_Y1L*H%szK%h{sn>8Oc|QUWMfg%30xwxR{Vj@c
zP}#vSfiZi(wlTm7B^u?%aZw(@%($mI6s4F4>}q(GfFS%!It(CHPtPl6z?=u=5tOuI
zx=go73ia2ITAPjdl7Fux*`&dWl)|rs!}MCYq^xWTbl<O)-6R;gf0>&~1^5e8Z~|bn
zf8M2Z3F<kpVFCVXWo5;4(i@68w{PCOnPjoDb`7{`nng{uwS~ptK|CBEr#B?~I?eOx
zOt^d}62Z(Q<-s0T7C9%j@Czil5GvVy{Qc=UNt?K+TGh}hlz}p{vYuttHZ(NU*W1t%
zVQRiro7+7u(y|2u9(ba`SPzcr%2d;eeRFK@>SSpy*S&j@q7HWFVE{#VMrJ0?CkTpW
zW|#x(AQ}5vm9e0uC*ix6guDCFKL|YS$0FLLPxq$|UrM8Nb@gFWsPo>k<fZmGl?-rk
ziSl;mh#!4s_0;q{eY3deUDD`xwA<GgQMxqYz)1~8ZpOS;NT+a75#PL7mCR=VNm3wH
zf;)Qn!x&iYa}%f|6%f^hvoJisvo%uYXjL`p(Rd@s3+jZElZL$1S4j_J%+eP?uL)vJ
z==8LQ{lU?w)ni4EFS*M8=+7TOmeE8O5*{4|efs^|RwOx-P9-XO?FAIGoefg>ZlP3=
z>|P%<crV|c0L|;@_;{1Y3M6WxpWQ(^yXaMO)GUdOuN`%=5b1SiAN3H{W{j!c^$+|n
z^V`6Tw?p4XPx^J|@4tU~dEb6bO?}XQ53)c>MkQ7aj57?sa-(p;nudmFi{JBMv2v(o
zz{pJ@c!v>41(P5YZ?c)o@>N_f#zWFK4dYPjAj(tKpvqW$?qDr;=+Y2)ANj60x0o0^
zzNN2kT%eQihT_sIRSr<FIZQMF-RfD6`Wvc&wDXe@;5-#H_zW7hAwrm_b7rLoSML)_
zrDv`N>j)#`u<b{XD*!0DrPL@GF6eZKwGJ>wD|XG=e9+UNN`g;+R8=DLZ2|`c92L-o
zLqM$rOe;hbmtW-F+dn<^uh3P6{pkENd9v2D6=Onso(|}x1;r<LCn9o9^&zJYTNO8T
zButC*Qx_cjU}zNBWNeuWaR-Tsi-Rcjr|r(4KVpe0GkKatZX)Rukk;4JgZxoME(qk|
zR0(HgOl&LEDC2wC#&2tBUoP~^EqV{-1@-QC#hT1P_O62+&%|;P4(AEs!XK35-gG}i
z=GeerNwNqgK%&Dy%U4_L33}9MMeyaFGZClYQP4$es({iK0orVc3BjBltvEcw&mDow
z<Yv&nAQX8o5@s)~k0B;?rHxHZkhgi^`ll2I(AI*QU0Rg<c2$)kFZG>{_;1z;s)t*L
zvm0JH>UD64hk1B^?z6ejNSV<!K->Yk9sW$BiXzKQ1MnvqVlkt3yMT^v1&5h*c5Ihv
z2AsL+F@Eb~Q~sb+ctCV;p7p7zDOhS~r$V2g2fH3zXjgmwNF+{$E$)#JV{HHYW^eBX
zJbht0{9{J^IpJ^pZhn5ih@Ncp*>jN2E*p7@Mk;6srJf60p?nDbUdW?dU$U$^I6i=E
z*3tA!8E?oTz<9B=v_vw8m~@&}SPO$c77)YWv~j7|m&ojPe9Dv903R3pG<+AlIbpgl
z^DeORY;A49e_>e*Ml;9vzAH}aHHQHf<R1bk%?FzRh1cbs^#_*i9-NTBxk_daUXK8i
zX|_xNVC3P|K<Wwx7Pp12qH)w>L%~v7WcR-;n#e9oE34XC$N!P**`|e<e09zM9BrGi
z031DE%E9?Xm<}rKL9al^cluXJrVqOX=~8zC1#P^rzc2r`o{W{@hh381|Fk8EaaJb_
zGnL!6dqhPbTkcE#>=QAw-55Ay;QXWgQ;R3D*L=Ns38wPluukFF+SPD*VOy~n3~f$=
z7vuCpll3`zg_}W|JZky=J^#&Si8gMr=e`%_LnSG~!F-yef{*yN;tp$L;h4tOKXcQ>
z>+^ce1bE<>hY*}EIq!$4I5|_;)Q`2;&)phXxY}7>pAY!1J4CxIqfMir26LGVv2Rvx
z#Dl(NzRtxQgkT9oFef172x)ySaaic0&!s*eJ}kJ5%D2Cv0*4_a$91k3*nnExa%*{i
zUu^wM+X=O6EnG4}_szPql6Uz=VksURw|lm=x4m6!QW}h$2Asv5n!km0%>h@oNQ;Lq
z8dsLZ1Pl&8mVQEr&vO})gcfSTYH)c0l=aZ=Oc4$-6YwBMM<4S(fuIr&Y31dCtP&gA
zszWex0eEX-f>Zb^8Z%dZumNvUk}>_f+Dq(;?<3TvwAf&nlKn(i9}0b5(%-BBAr6vs
zmjR5~&{`R%>=i?jujTlJFKB67)Zk*KSR;1qqzC?@{N_c}bAy>}m&-50_q-$_AV?%$
zc=rvChA<n|<3aVI2;qnr9HJ|9e+Xm3gP8FiQL(40F1XhFN+;hh<jzkk$R8?lllWkx
zCrq7b1pAAwKvYU@aayTKMYpip@&k0e1or$R<KyGy=P%UcHW;~L_RZSdzePaCC`^%c
z<$mpi4YXxroXg7-?-xSqjo&~IF0KgTBZ2}y+<-Q47*hcg??&Kh*`%HRm2q)+AC_3R
z^?>7@gdb-sVfde;K-9GNc-F6lo^Ab02rd&<4X*sO;(~{ZzS03JhaX|HCd@<=p%A&n
zwlEp7FmcYm(8&JE!xMiP(I53nmq1~l-~8;OIu~uobHO%&D9ftw8aCaBF^YL9k){eh
zkalK-k_ay1oAnO?IHKJI{5+Jj?-xQk5%ISn>-=8QCqCDKdW*;BDuVYW9mL%d<E&a#
z`J<BX@fO&CzsXC|A<dE_o`}*Iv3~h?=U_G5$;naIef*e@inv}sNwb*C&e=IfJ>{ox
zmoo?D7+nm(7oGR8MiIhQp2i6<)_+;Jk{{(NO?PqZgHG!d9Q4s)@EpfPb}b@E9$jY1
zxJ>HAw@-;ySAkqHFE#6V`3NxA7i9mt2c%&E<3Z;3)$s213vDD+z6)Pnl3ZotF_m?H
z2qXWyUw3hqrfcv>qN4ik(rd_s!k4nJ1U(sS9nCtiN^>1;>wo^h9fH@rZ<CW~D0_p7
zix4QXmWA;>@oD|KEXr+5)7KFf;OaYfln@=+Ptt)-BO5VnhELn?PdGu?`YfzzcEVDF
z+>LZ~mG&1Jy3|T1b;UeIT0*I+Jj7ddOU@>b=Vpw*+SD%X{9asi1}HD-9XyG9{guC0
zYHVVplHo)>;?AAZw*TPqRk&n8JkUt4kqoH<P>KP}6?{#bn<^|O&;ckOi<yI64nS;w
z{?r+keboEn-<qw;VLt{JQMiKp&4u8$loBffkq;Zrz?Ux<L+==jY#hLe4(blnk&yWU
zF9%3n-PtHKsPI|88w<SCdEZcqncHYHhC6S8PWo5F&XZH-6!_B-?Nq@wX~o6F9G$dZ
z21IF|hvMV^C`O<L<dA6YJSr-DL|DJYord$x&>K1Zf)WwTogjd5X23u#Mw}>_7UTS^
z*$~W!)RCc~P>Fj8)fV1lnBA6DHfbEp=KlUMr~%r`?X2>ha~iDV54G^arg0w;7XUYw
z3+ltB-<0JqAXdG9X$1wRI8DYvb^3t@B!a$Rt6qmGhN0T;TyNLq4H=%<HHU?tx1Wxb
zAPV-E2-}C__464^4I($=(^GpFH70f>hhWpqQ)bJxNt1mYKAkhd5~RR^PzkR-i&Jiq
zXeb>V_zcnf(~(keAZbS27>+2gg+*VPcGM33w`J911r3}qL_61z)(z_DE>l5mFkV^D
zn#0Bqi+fRV2%S}e-}FsfS%|s{$;acL=<0qtP7<Vs(qjcJM{ihhG1LRkZ_X*Q<=#{@
z7|CQ5qPH9X?C|n3_-Ld8PMdUjp{D8kG(oe;Q<Bjq3o7D}*c0$32y_y7iS_mhp;gfM
zS;|Fv%Y*h%OS^-1-WwK*6_2VR`^HjGKAj$&?eqtnPF>@M_JYey^q30X_hTzCA>AbG
z(;)NkoE9H_t9I#GLW39Cubr3~sxod!ZA;KaLtYi^=;vYT=<@h~U(3tm-@k9>_b=VN
zd7vv?%=LM2QCx}qneHkUZfUGr93)4p#`#YDPvuGA)(-6%1$w_(7w$?3+5B;-A054-
zuK=sKNhxfmFm56Ibg3Wj>x1&xofVNlWJxc6;HNgK7W4xBa|?$OYZ8?Hy6ihXbgMD5
zq$KGh){?@l<fO22TryN&H&M$CH1eS?8%4A{OM)ic@ON5$4Ee!mZUnozP-+mnJAws|
zx>&P;5op^nkht^0vrZ}LcZrAFr5jH~4I4ZZ6Sot7e7*!lTDUBx^WLCLH0?{3mXNcD
z4&3lF$<v_0g+1@1-s+xD#|&)Onnl%>ni|?&TjRavvtlv1Tn(jWDh$6{O*a`LyO_dc
zQl=hoP-<%jqhjVz=ygZLn*^9!?D4%oTXy4!_Dl1+E%NQ5ipC+s+f6$aaTmrtG`kn7
z#Q66wfgfK{R|?Mi2)@W8P_pmet8?HYxKKF>v&6FveEA6|+p%3QyIfg3k_WwSU*G3s
zef{_QcT-+!%q$i2o8sbv#VA1pihj!$2M@VpUq_{lkKn_TN`4Yot`hwIiW$uDklSr0
zZF(9h#XJcbBkr7(PbEbdFgn_>^%*<gu$$@>dMwFk6(t_?6iT&YExQUqu2Fot5hTp*
z?5au6+2Z)+nqH0PJj6f@H__+`THLQwtn1@LW))BbQrG_JEXj<=>>ogouNwRJul9>6
zi2-r{2jB3BBKzfxng8nM!lp>~Q}~O!fuzu9y<2KOg)e5W1c$yWrf%WGE3)M>bv1w?
z{on<G3S@)>SVK&VTl?YW)+?8}Ct|f`7i;F<6&J&kj=lFwGn@hYD{esClO7|C@tTR<
z{ZM0{*G=|9HUUOd(GR#}8Q=RSK`1i_W6Uk-dt2bvHQdZHs6h-5Q)8PzXq%a-#u4vO
z`>5=e#7gPhv(hE7mID*rttRw=<jG67%V#<N(<gHWiI{F{4aP_zo;NtEB)Um_^!J`{
zp8(9Yo3Go+Z}<L6_<MyzZGzIU1Z+vx>0-#AUw5cOh2Z}+eo5tYdpmb{?7>&@J@=`Z
zq>_}%(Jpy<M^A%6cY{G!Ib^V)f`;T^UXW%x*X10p5cP=ng)3qS-`kIUrL!BomxkdI
zqZ8?jzE_qKH>45{j#d3R*2MVCi1U|koqC*C1Q1t&68;RLchbWzmP0~cW*2**tjcMv
zXF9g)BnBQ2;J=UTU<dcUb>R7(6tG<0E!nrZUeJ|tH*}8z4WS`C4!uSYh12|FXeccl
zvZ*#I8Cjym6qK<P{KG$`$0zkGT_V6ti?HsuOOrWeB|k*WG@Oo`7uCl@tA{8B>A<h!
zv)K}cDD2;`%7%utFP3o2N?bJbLK6P2{;Ww_0i48P;Co0glq72qCzxug;XAc;RZHH~
zwHUb0Kg3?Vm^<i37K<?x@2#=NIM+?rp=YMAjgMMHIrAZ!wybtN9qMH+&>79nX02?$
z{USTT@`x||k3|7N|AXfW>smYz50*DHQ2Qr;(+?I@L|%TO-j0`nEj>SH6mAXLD6#(N
z$U)PK{xdE<jr_)4&3cKE!f@({F!ZC@_JW7OrIo4*T84p39UWTQ2KxFC3PExME{<H{
zKknFj$3>i$=#$l7A8PAHRTa9j;H4`T$mwenWt@d!Mhc;wRPM6n8a22r@}JJ~^BJ{}
z%B`?O#f$Zrn3=IM#==|r@p7)rSnnET3%vu>+auOt5lw?Te}K5QV+J!K9J@UoJ%R52
zZ4Lv8gVTe-fR=jiU{vd<0rGjra{<Pq*3IN@0cC&n|Dt_5B#G2JQKASrY(M{hIXMHp
zr5ztAd2?boqZK>o;MQ$_%?cD==I1TOyMm2ZI`jF))w|v}j(L2&Fu&IL4DMPpzSB6y
z*GB4-5S6YyBx+t0AE*!2;mP6lexo>p8>o)HveU2h=QshK(#}FIMHh|p90JCz?r5;W
zt8k-u@E{Wpd%hT1K5@*|xW^6hn+41TrR0XEFGAWynS*T7^8XiMUmX>7)U`WUgn)F1
z4Ba5z3PYE4qjYySN_TfD-AI>6cL_-M&?23Z_xQf+Ti;#l{&86@b&ZV7@0@*hJp0+_
zQLa{|Uu+-+iuP&FOn5GOZk$Ah9TP4>aZ+pfqf=9cU+vxRZyIucO2IVL0P!cakZ^m3
z!08*d6DN^4lz)bjATKU7`(GG!H8I(`JXi#koKy{hBx-XdaSU;=!P@jd9TGKa#yg+D
zkUas3_7XSl3OdZGrygTY=32NZ{|pk_apg;xM-><&z*H|*x+DnO&GZ7X2|!dA7cQwp
zdjP<*@#^AJq{1pKT{{bWBHe-OudAt5c;(#PUX)Dn=qm~ewez!H84UFU(*6df;Top#
z3vkUpbyMa398J(AQYYh6g-K$a<Q<Ph3~{w5e0-o#!Ua4)4Ap5^>ZYGt`;)LuFNEL-
z@L{B=luM|7*NCwbQUqd!Pc?N(UQe}4@n*hgoQL#lypiDBNeDC1GLoOd5l1ea>T)3+
zCR)6F_Vm{;{N(TFTS6N3A)RKHx6G)LpOpcqLNn>)R0~ipfE+rGO_<S#x^VA6<Jg?_
zh-2=bhz^{~X6DFaT<M2?f^-l>z?}7F{}s?6g}(sn*tERsL2|*8%teMC5-0Vn4Wp=K
z(8HXMOU*A;jwX4h`P!BDO3sPuSx!cVJQY?@*AghW>b04ZWKdKr>u(MZIbLs$ExQ5s
zw$e9|i+9o<O`9bDWnLQy1z~(dMfw_8`tA}nyC1|NfGf4>`vJ5*%*FBg?mf~c*H1yB
zU*FSx?5Ac)ZVLZ$fL}OFw-3k(pp#~HyVhyIh<BZWNTo?&e_Uv%>p$OI$`B4NfH8@Z
z%!@OT*PYEvM8Fs($|&6Pu)Plc+|z;mImGulWUYlPPewRJu|TDwySDQqMwG-q#KfM0
z7e9IfG`MSPIi~7P|9XQ+QZxxUPs+)FK|Lrt3$a-O3DE!PofIfbD<zg`R6d;39#xey
z8L@w6A8IyR1Tt?Pch^dwVwv3sz;mGmkpwhN4iL~z=Kfr?By(K~(vCck_8+<~0xU3R
z+-TZg8FV5+_t-{}Y4{f>bsXDgB19mp3l7569?%p3rK>8#Ac5G4-cQb_fp3cmo%Q-%
zNacF(x80nxw^$o~26y4zNh6)YG5>LnJ;YuIVnIGp6QBoTz{k~8)Wp?rDg4<>_Zj?w
zBfs~}VF$#rYV<7++ty`<6oCs*A6}B}vu5MT*RWy+kPMf<JwpQi4~J;M&mdh$PXwhm
zmA3*B44fcQ@XCUL38yhNwchk5i|7{t59XYknV``Q7){P=;Jj9-Td@%UZW0i2Dh$T<
z<j-n2m@6&qH3C>`bh?bU_ziVE`Iw2C6!h;x-~p+*@umkE#TN?(qeRFS$-S6A2IL)q
zNg~#`lS2(P#WS>4G)ln#;*@tG0T>#nxxIy}z&ze7oyPtR2QZ(4dJ~8wuYwa4Tz~OR
zA~Nn-n<9HfFCLyKn0^UTplR5cgM6{jev=m2Ysj0bp_J$@7!1Xg(P~^|##;pOj8pQj
zw{V&qU3fUz($vi7&Y7$LSGuXJEjsI*l{cztTv-al!Rx%2?t)J+;zFZwQN3e;PS?CO
zQ0M|>hZGF3msHgXOXZNp9YEqMG~Ro)>v8A~6l6wi8v|}p5+^}Z@t@wE3zs|xYTkP~
z0Ib;9+PVrX1C;7`0v`~QL>kgZ)oX#25l&DEL${P%078a=4|&p+GTTGIf9H%Pev)pn
z+9kd}yh1^ycsqOXx9e_6_meVEqyg$8->k59Ca3`=kwx;!te%>hWS$bBGuCSZ5#gyi
z@WcP38VGKB(l0Sc<Hs%+!i22zDgXtXt6RWSQx4}4;?Gh5+ts*u()5mANWcmRkO3tA
z#65E`GzG!oht~)nV1@Y_eAT4~dQQ0;_GQ!Dr~%5{)dv7PX>9yZHjP_Y9R9n7?5mtq
zl~~xO&FiI+mk*$BR%OZt&as<~duDdk>!=MBf{9y7zXcfZB8mdB5R9+pfi8?)y>^_G
zu_?`}bv9rdCJq-kHYX0|J2ZW_NC&mcKM|fRXZ|3|Bq>-<4(qw+vTwTvOUg+&6fXiH
z_GAuF$AM56P}k6?)XmDsdYb7Ep<?>DQKBIGQ4~S%%QuQZj2JJ<DH7Bdd2tq64Y_o4
zw)A(~p7Rc1*oexG4c^t>m9G3V4E793FJ@#E*RlBy@TkhB%cp<8d|6@59e`Wr+6v^m
z0FRFVG}afQu`iK=%2w*Qon)}kS?{i8`ZgSzb;q_Gfdow$>@zzz2|CE!sx>p^Xh6LM
z(1h{v#fIfQXB_dpD?~}jevoZ_eGfS5mHXLQSwcQH0OL|ss`Iv`Nt2NuFUJ#wAUIYR
z(QCGkU1a<HdZh>TXuWPpBk|1`<C-XD&cm^Siz2O>FUD};|L~bR8n7=s92v2$od=y~
zg@Q@IDEjN2tsHLT`|8yz#DE{Ubj`XfIpcXD($}aeeqDn+56y8AG|Z4E)K-B2uFwN|
zmFi`n%>aZ?l}koI`!N{c$orlkh4AyMQZD(z-{U}{CXVRzn-`Ea?|p%EGJsA~7?F=l
z?In>w00xMFW3wic>7r}1E(4w-(5k@>d$!}vNtB&Q@=w5uOc?MH69xm73rn9><o=8Y
zahwsQJ3AFXu1t8KEYqFs#lR=qXkpQ&0ofd(gkT(-s=NSmG95K9z3Mgd*A71XC*IOG
z&*z&^14PXKJ4N*@O4XNo!Q}%R4F=>(sWweQ*5J75n|W}KjCaB?c|eZ-`**1U!TRTr
zZhlaY|EG@*Qg*;r0*x2LYSUT|pd$mQN}yA0%^mTQV8JnnxIHuC+hdNC?V>`vNU>_^
zmZOWSt2$D=f|*O3I*SI5xSp1l5>9UeXfJF4&eS<j(E-5-2$c4^A*#4ghqpeW{|^`7
z^)qup+w#gvH7hPrtpe@an8)j14Oyd%8mQg7SGVKY2fl#bb^oxIRpI8WNBj2K&ScVC
zsK<WCcMw!G7^ZC-8-dVNb#-%HogfcSjHqMg?#s6XDt$)7BvG$&$X!~Ol}i%kXn?YG
zNcVaG;wwOV0u5p$3ed36-XSF=1(MZ|*VpE}Bny{MES2FW*FXxUYPQwy5imG2b8^fg
zaZ#Sn{u4|4rxOYEuJ>Ag)L$sPN$aWf=u6FIn1cqms{AAVRhG8oe)%@m-f}F+!pm0b
z&SJ*}gdPjtYXah?Gk=t&@bOEOX99}dssD%u@jNe{h}vU3W8w8Nx{BX->~}z>2GuL*
zsReYd0kt2nqJTSiB?z7?PKsco`Y+%Cf;kz$60-#gVCj9uaQ+8x(qr0*ASche5<v`{
zbccE@{N?WI4W!SwPHY5dAt4ZBTica07)`>Vvo`23`~^LG(*7*Q5&UfwS=nJ;d4Sph
zjxNyC@_v)H)anMv3S%|ppx5K~H^q++91R*3;*5;Hy6E?=LA;Gy&!5cQI!_?VwUmIN
z4&#>a`$?ZqMp(W+s%p<)XCqebH%5Q__ywmcHIFSwIhfsFxzGX!;@F%9^3{F^G9k}j
z`xk8L=INkC`A<d&4A7(%)&r5SY6laW1FUH5j<0douOL`;pJUfpez~%VredrYaDr3~
zT=HN*#luror+om7=ntSB0Rhr_8#5~_#xywq4uH}TtV;gu{y$x`^k{wuaU}-~5ZHu-
zm~l}+v-SBH9|f4yCyp+H(c6#d@ze=@O{|fk!i(wyBtev*zo1L3`1p9aQqLDnDLW<D
zF9bab6F@qCu>uQ^*Thoe$|JK{+^aaytIZObzkh1_*fHn5OPF!bHoYvMrYuce0><0u
z^<mOfNN@=V;kua!iQB7~k!P`M;`ymZMw}P}k&%(89m_H84>x>|r>vm$3j_ywfS{pK
zp@5t1W6a~pBj|2tgaYMa;wZ2-u9fEX3vK$3CmR<)sF`8h2@1g6+uezn58fxepnt&w
z*n%McXj%3KeM&dC9YB|KJM=E1@YHJY^)q#HIs;8M(0XGIceMS%BOn0OF)K#1ut&Wr
zH{QPQE6c``V~*`baQ7f-0gr*LeP77LwXUI7lI_i1c?nP?pfnh8`|8Kz!}`*nKZxW@
zP4?@Cjf)pMY6Y$Hy1?t6r*SOn+X0o<vZ@~oD=UDzEzl}(MJ_n!b2(zFRXc6?A*GwZ
z$VKXE&^fGz>F5Gf_;R)LD=RAxr)5>dqce!)-fu^CW@j228r%PFXS7}&`rXWvxBFe^
zF)rWSfFVUQetqTh;aHxIm_i)$2JPV@^_dwK{TAn~v4h1|hkmSGF|$12^nx$YIs(*<
z1#9jU#fnUAEgQ}ZeKUCXA?aNj<gQ%mx=Z?=g(CN+A-eM;5I?>Dk8tMf@FdVtd>9fq
zVq#)(Y0=y9W`AQiWG!LL@_|tBZoNp~&lI4mt*s!pPGQw=`UZr?Jv}dOkJ{UPc3hS4
z+>VxUzXCF$uiMq(LuZF+bG3RA(X#&0WWlgvw)Ikr574~dU({)QAr1(&s>xfx(HyR}
zY9!m5y4pHec)0qmY@;y;yv2F&pvVZD19$jK7+=t1x+>HNe$du`*qZ<@iTrVk)$icK
z)H-<!K%VndG!#kQ1<7Jq5J*Rcs512PcSW(#%uwGvtrw_DwbS}~LOy$wTe2yYVBYPv
zGvFvIA;%Y-GnZE{5P|FP`u-zs=WmG$=uQ@awO?8J5o-GLbO$-(WM6zSeruAzuHQkj
zc(O372`~qI&qjHGpS>{i)XB&I44%=MnX%@x9guw7CrwW`H)~<?``nCN>>q{w1X7wn
z!dDhkOH-369KO=_kHGqIyKJ`7$9|*luFEia3r9CL|D?_yj*bXX-EBa*7sizk|L()Q
zJKV?P{m6^0RzL6a*;W!}80o&3>CO7JfGjI^W^*z=?PWv+`O@|DL+9EsYy0=J<>m2*
z>%V#Z`%w~N3E_gk{FeTnk$->e{Cj3q>vRV6I>#h4%Uf&ixux1vAL$Jfho#ATg`22t
z8?+hA%J5nKNz_hO=rkURTxW*@RMx9)1sKk<*HyN)HK$_*^Y;bohVoJH>WEzXv?cI<
zz8BLP2d<0SXMg6ixAVh?yqeftqg4%QxO=Q?%cre@{GRV|CmM9cz2&5cwcXIDz13@$
z;H<lw+;;iLne`Q*XaB7=8@HtYQnLwK6tXE*g8#(zt_Sh`ZYGgOLB?TgE8OI_id?@y
z`T;6RH++^h-)!61-Yx<NRqH^m_GEKVqH1>4=km|kfdH_nOkt;Oc&}_k#7h7tX=9&`
zM?N6<TOii(LRcfPr6|R2@e<y04RNlxPujY$mg{+5udU<9wDW>5pY4%_-iQhX4SDjL
z<Sg4Gc)>8(-R1Vjwf(C0hi)^!yL)nB&{{fsc?PH=t@bDI%Q1!a+3}hs<fO5r7A?9F
zjL@ce%N%VjA+N(b_~a?r1t7cEE;#SLaOezL^mm<6AGmZ5Xo(f=mRl|q9}n7hJb*t)
zNm11M?(Jb}dwFt0DMJ16(u60CYuLWTYXBA7A$ccD|FNrJxc&b2aer9kesAVO`~BS+
z>*FlBFs>mpb)DnQ2tW$`&VaBxV5WPv{ZJKSf~>hvimEw$bX4GaffYB2jHxwhE(JL8
zE6c4{Kts2&tqoKZRk|KKLrG;7u8nj-p+Tq?N*}nR)XhvTM&_NYWMzvESML8gjNzhW
zR=pqY>ytr`2SBa33JBDJ4)p5E4?WZuptAy)LV<XADW^<FuD5;0u)^iTO1&mc-p1C(
zs~x+CyS3Yp)w{o}0Rf*wK}vLYcP9y$Y5+gdYjd?RFkl}h?h>RM7CjSM7%@fT)>3MD
zr<AM!H}1w1fYScjAJ_G|x|z8gE6VY?>5dUO0C{%-=rp8fW!27LC@JwnD-6a%ixD7e
zXg#!o28P|%b76@JGPI)B<@Mayj(rQJtv-i$3wDnWNB`8bMf}c2&49VIKOEC@0Hsxh
zA}31|Fk4ZUa~IOy=J?mKXlj0L?oES%wb<?#XCe&&=*)SGb<}SoinuSZm?BT^pt%@c
z>rnZkMbMBnZv-dA`)a4%x3#@dl4{iSY^m9a{PAY?2q=6H4VAK|IoW!6Y#luuHUi1<
ze_;sZfnd{Bl1=jBcrq#!io8zX1z;3-6X=I#<$U<^9=iDL#LYnWEt(w_B;0A`3!cnE
zsO?Lta9J%H_evEYC-?UmbOxo?%?4YkSg5;8f>*uVOkQRz*mP%G_~CkX)U=Fgxe<tS
zi}+m$FuzJR(Q2I*cJn;|lmFiV)nM|}vA)<e@{%}lEO8#`uRME~ZaB_Z9L*;BzF%}`
zXf4x`a|=F;?w!cP!=vEER?ZKg8an=uAL@NW$o}{5^>46F8js7gIl9f>1&cYDalHjw
z(^F<3j0o!cosK`=R4Fz#+|+W6HQxt(a#BuI=BMDcW+H@k``Sg<kIW$Ny+|uiVf4Fd
ze{{9@`>XxI@6i$9lzulwkCkCXL{Z<TZ9g=7Uaa14^Be)P#T^_<C^iP-4ai_uIWsCi
zvbDhj>}b)>u3q3EEiFyI%J1TLJ(!30x;o;6CYYR^y#(+3Q9plJ+tz+}QPuu<KK1yw
z)lZ$nYsEa1zy6fxaow)+gP)&=2j7wicONh9#2mighY;7qkNo~j=pC}_J<G+RJ%Z{K
zY|}Yu&V(wVX{M$(8ddrNb0Pz^-xv4wT3ruD(l`L-S=#gt(6d1r#G?ECdSWyq%Jd9~
z+b*uG00m5t9|9)MU=6^Zd5He*ahUNhSB}>Bwm%-W&MIbU^ZEILLR{F6vqmr{D?^~Y
z;qpK4w=y!yTg|cIUIcN!XsVj~cCSb>O2Wx#Ls~02OTo^?<pQt?frjw7t6NLk;nH2^
zVZOGe?j5*FVYo(DxPHl;JC`CWYEZtR>6`OLU&w)aV_ai;qg|DV7CBA;5S6W|IUN%?
z()GK#5zwdv{rY~PLV`?)dpE{to=pCf7YcPxXjr*{6>9C?l^F<KU~=zvEXgf7B{?Ii
zkk?RUiy!Cf$adS|$UMi6o$p;n??1iGX8m@%atk+pjg{tH;dG|qhQ@~UikY-pGZzJT
zrd5MB_i*5V>HJ;Sop^IoW8><c^COT@|F2$j#{9_02;e6I&eR65DiCLN4l0o@JUM17
z^>ws$^>tc#McPw$<gvh|#@u$CDajhP-tHW=t_Hpn3z?y<%PRsJRRDYgQ#qgn1sh+X
z9uegL4TiH28c0wBeMEPsFyTbkBH)1+zR&^EEEsTE-E$4oDjVJMFmkZi(`dg*GTpLW
zX{oQS1|lOxQ(F4ME`LwA+<<cF=@z5x@UXa2!@@GK?ubdC>|0rxZQIxiGe+I<m^p9-
z)&JRqB#+lUNPGIqL}At=AOS?=vHkPs&+fKD#uiZ@k4{BWQj)LV_S)Lp+N*7kA1y78
z2Mev_KF()dK@kV8k~TE=4<lfbB7HR3Dc<Do)vCzc;-Xc(_RE(MJL47q3@zYlRlw&a
zvR=!_QR!1Bioeotba+!g^iLq3AzY!=>ESM2*yUkKyJ(sE1X&rrknxy9U$_9^l%260
zY{!7k&iPt1fn}EJi8nlBN@df0PM4Y33oG+BZv5cLc>!@~C7fm3D`3sDm3p_=v*dsh
z1G+Cpyu+tKLA}I0!c4>PUqdoelKC(g2!caNZh)i&w8R_h>PTv1foN?(feJpW{@7XH
z>8WGUA|<!hil(l1%SqX*#Vp&ri59>$1Y<@@I0vr7<NZ}1{B}r1$XUZ{W{+}&+z#_H
z$a!=CkbMC{J(!)f=B{k>vN1Eex?A}BHz-J=R$5pu(t<O6c(_RT?wHc(&)wbU`ZRW}
zb`htoEVmlL)kUC>z6kC;*Z>>DZfa|Lxzv32?=jZ;qMUZd>KASFL^9K|e6DU>jO6!*
z09zbfR<RAX-9ehsl3#;mRbO9M_s`YssJfShhsS#yokf9B_5HD|#TfD`03vL92#d7a
z16u%2(*yhguF|j?op|{v{T6rZq$H?12SpB+jvtUvwK<F*dwh7fc9ORY_XlX!%D~|4
zJM~XIES3DwoeCE$x0`%B4%}jF-IvZ7f8npH6@o&iN@ui8FRxzB<X8*(v{ctOr|rxS
z{T>3N+G32#UOR=`42gh#3-0#-Db>Hp8>V5vOa?@#sp=ULl0Sq-0$JHL?d_mS0i~wT
zef8=QPlh~nVSfH$J%k*P+&%5>f7&*VXYwr{U8Q+|j2x(TgMXc|`SQ;OvNJM_3X6#M
zwX!QJv-g}mO|(Ece1CjQ!CqBa8Jzp&<jQI&cL`kGFuwv~;2h{`;~*9|!GNQ?ZCkm!
z`!hMI3veG^`?0^yQC0i+=jlHsl4e3=xSwA?EggCDr(Gig!mh&3JGZ>d9lWy*K%FV=
zQ-0%$(T7RGQVyd@FJ%#hTs0_F%*Nc#p9Az6auET7_hr*VHM&zWloWlM@#&&4*n-<u
zv%z-Fue)GlR1-pS5>#&Ph8)3p%?}^O-*|10qya#GRInJ2<g|@EER+|dF!#rRVv&8Y
ziI!lZT~WNWC_sSvf*s8&dk2u}0h9M}tNm^^$M;V9;t-U8?QPC`hIw%S^Aq&_egY<3
zKtBa6<j(hi)@9rAan{`~{p2mUxtZC1KRG!VjRRAS3Pp?i7j@xnp#r>gU}WQPwS9bK
zXS`~3Yz#|D2{rrR02I$cS|3=$!DJ|iNg%TaRp=gi&IFOwM<%S&_i1cD!6g`N%VvG{
zeuY!EJT;N!)VbQuO1CQ__(vSc3Y|J)Y-e%vUfbN+V24#qiD$GE;$ng|Geru8m;U}B
zv@sBbjy1=pmUG?SdI7@Z;-Wyny9vvBg)IK*J?BuVje{B{u+gC40%>|fqZ?oVW+q5b
z&T6*I?pxrJLp{N06DW_|+}y&7mu*>DSe#o)twukx%`GhW-Z&e9OMb@Bz@fRg<?tjN
z`QF_87o;NK1FIA%fJbatJoqOWPX4e?eh89AFqQEEG-BYr5rD)2JX^>&@Wf!mM4`3J
zLBakT9w^bl{NB{|jJgsIEZ(Fc4$K?_LKBb)2lFEo-Q9H^(&yfPINwYQp>wR^h*!5a
z_QNV%^QOnNnG;O@tRlk#L(To#mlg!)R-LH&2r{_dWX&lj=_b%qVdkb<)utatKI#Zf
z9Gw@$J{S~d=wy-bD{=J+E-v2#b$THA99q110LXof0;Eap99GUBq!>!~2rn;lY^=+V
z{#XNB(yjmm=n{n@o#fw-07<Yrn(ymN095>ggXPYTZ(%bagqfM%6e%!Yc<SZK1!gkV
zW5tAK@;L$5*QZ^E-&|V@-~>f5ngfVniw9#PBfH;y{rvm@2@o(R!Cd3KH9*<jTJ=mB
zh8@A{0weuK;(?&+a<uR5{bSymj3iNfJ=79KtaX{+X*;t164b3=FArQntq&@kyosM@
zygPtD50Xa&%ziBhCa!ojP@Vp-5PW0fP9{g+u4|@myNHO$tYy6_Dzek3wjxCyfUM;U
zRgjgpv15Wr1x9nh-T@!Dvjo5cU=83VBJkV8!zZ#FlPHB&KrNlxzX0AUFOGv4lRjLz
zM<eyim%&{dvuz$3LNuDoZw<u#H^zq_lEFn9LeN=r<5AO<y-g3>i`|>FzCGmE2sON^
zr~`1;Bvm}K=mL(r*9=hYLE2&GFVs*JEQh2)4KJspU-WlG=OvoRu#ijM*O(5;CM}<a
z`Es7fKQ}i*jSK7_Bp7=m3p3FY%Dw;7`R=QR6|-5IL1FICn6=di#*^Vz<8yLaKmL{&
zX+&Bfon*p_xA6n;sTmV7yqsqPa1kDhObo9iK@Hqi%i9HC#HVPiMwJpX4J4=Ku}*4L
z;&K#p%-lRVD}MGzMLA?3)dEHwfe#Fyg*$^86U;5#{;3^*IP-h(n<20IH_x;^nnCV+
zy$<4K`e<b6)m6lsO^yj)CRNc|1B<9$Ob)GKSibU)L+LP|a#tVKpk4)Ui<&xCl+V6N
zN?F}KFKVvY-{K*z*}slxXMknKQerVjmb_DnY{6xYmc)VE$YZMWLx<iFTmJHjVucMC
zXj9g2@B~L1>=?8C+!Zp~e(x4779~%P+t0oQ^5SlhhYb<m$NMWDyOq1^jTpcC{SUx7
z^W#%GarcGBGP)eh<DW3fHnxjkd=(roufHg}pj=RuKct9gCtG3B5`@C*xb{$mben=p
ze;_Krg_wVt!{{28uEXwr*or|b>11*lvPm$1deDg*DB+C!GB+L(o-Bk3N#XdHewfT=
zXzRM3C3|_?M@H}A7CjW8@t0%DeAm03NtQi0jjNfFx-DT`D3`WwCiJ}$4ixKl<a{Bt
zR2lJI)tWocXPpmSSyu(anNFp%IvKs=`?o3^ucW+8xn7oT%EQtRgfu;B*vwAaBbti8
z?1bg)NBtJ0h<MC=9fks_3SpB{z3}*4Uf!L=EK84KCWm30|9ePm_5*Hf%zl}Y@hiNs
z$j~8W@!}>FqL6AjgWKu`I+Pu6+xlD#QZi?j&Jh!7SeLchcl)t}1GLa{L4Kat8XO}_
zQDp*uEyN=G`yZ|ijd7)=I<e7-KT{y?PuV4=jx7dQ`gozyZKEGwr`L{CS!F@11>pIO
z6SdWf5>U||aV2XT+xv?uzrXiKeyi3EzPF33U@W>~7DS8#z!y5IReZc&&N@03{5OHT
zun?qQrD!}9ZzxAb^%M`&$XYY@WhXl(a#F#IRcmGeje_cM^92c`(D}rI#Z^|ARO2=k
z&!?zrnD8e#hC*<Yw|m~l8M4Ji;X1s`Xnb}kZd^csXm8@TP?mJ>89tFp_SW2E(U|(o
z9rYe@;t(fQ9EQ&s#<h6{$#e-8ycL)=q3H_W-y37Wlgb>Z2u$xLYsj)q_~JCJQmLgZ
zBq)zD#3>_RthvK&r8dl3goj)dhHC1P&z3;-9ExO;reP#rOh<ybR~zt&Tj;=smq|XX
zxVvlou%f}7D^`n`dg1c`Ym!BK+`v93K@YCVYOxW1rvo?Hrk$HR6;baw9Z!*{{Tp%~
z&uw0Ep3Z?UIXsuKmZ8W3%ku69g)ID09UB6{y#vLO{g3eb7`JhWX?-_8iCR7H{-(gU
zVK-k9*;GQu19WZaGzf#Dkivcix<sQmU0fY|`$?|ZKmcA-^~tlN^tTh2Iu&ChOB0dH
z07g=QGi2%=i=H_tA9L+hB=++n<mXxpdJKhZfq@7T{cK^B<v-qQIBaAPb&vJB&DI+x
zb$Bz6Q~hG2+Pv$}cPCu8e$azslp%s^ut{>67YJ5k^CAM%Ttr!N(`#0<F`x=)it-C0
zd-I=H149Q07A@V%N4a?#bA)d9BF5VRfK@kb30jgO-q*(fLI!CD$Rof&B)|#}Tr)Nl
zh*lBbV1|rUoW67S5rnm{n;4tSBl|=nB`9Vew)R&y#I0GD2*O4-VxB=D$1T!VDeg~E
zsJ~jHw&w}rTzokeWggq6v=qvm#~?H%$4wyD<z*f!imS0*bQ=>tVXQ>E&71r6s79t3
zRnUx*)P_V>zUiQ$&czC(^B^CwV8L=&3zzra+??L^5>Dp=lH$C7UMDuWCS~&VWixn0
zNb%t?5{Zo|Y5hib^r>oc6TFb@Unz-?&+Ck)JK(fbIKEEIrWLNFoe*y|-;YM@xte~@
zw@0OR?zT>g!gBGA@XPO2ULUGvs>gTdi6z2gzK`Z=PgRcWkNt0NKce>EVyucExfy=m
zo*O5QZmSe2^DW+#kUmZEA9M2j1nO%mvF{T~2O$jXUatye=4O5`yusW@e?N2<nSd7W
z5S947s;6q}H(moqsMiFDCtTApEMwAI>cmw&MK}YI>r6%$A}wo2mk}$2C=EZpO$-cv
z2>mVdJL`mxaj53wHj`2JCKb{6h2=&~!;gk^s*h4n*5oN!x-9$(mXR=n()=;wYMf2>
zhT@BVAPAz(=LM2B%JC~rg<HAtgW)Hp2zU{>-_6awABYYj4`(8e5em39Oki5_Zq&}#
z>Hg*d)b!&c=UnWnocZseHW*6$tj94S?|Cncv`j;rn5KJ;K8u8gcZp93j$i2U?v<fo
zCYen01W)(p>|BBKy#@>ArKpr3m+8yng_=8)PG|OT9C~?Pr1r}N+?+BE8}8W2CCiv@
zzB;i36ZEOlvg^Ii0wj%JmXk2RjeM6$lL|GZ(a{Od20pSqS%aBt=M#t#b$i%m<^=>y
z@-d(sU1BI5HO%_eqa_!FFLW_!zb;~;KY%K)zTnWZs=uZ8F{K)-S>kiEf8V1ZEwt9s
zgv*T2fD@Y%X(X-qh}mZer!RR!R&-bGRyy9#mlmVJaeh-M&Eb67`2{0~tkhHYDjhM!
z?IL=iHq3s+FIAVq!qpKf;{*R)Gww7z(!v|3y)mWFo@V0iv&6?0R)nwKdvMYGG}ZET
z#M5K`utN(|BO8->bxc9y)6?Nmij*+&0mGYyCQBl#)n12*su#6kd-GJ;74cD_FwQK5
z5C;uW*Ob_va7(LiJ?VQ4*1EaZ@x180pCqVD2%tSxEshzy{p?H#$H7<&<q;F6)_a{I
z3S(;1GQXAGD<oxFkm857C8EAhSTv61e7K#ivNhE@yFAbVmmLW6@_w7S^lW>H&$0yK
zK7btnog6@BzBZk*@v7!uKJH$wzsZOj6s<Qiah6wblHOA`)GB;es~~kAAZ0)Qk^U9%
z7_hpS7z9&$Wm&AMU{2~E=KAs<Cw;C|>0y@W^4KqwL)#eh8r^KX+M(=mTqLYi62r^?
zsh+oY0I;SBGGS}Z)8j+oYo1P@ba#dg-YqLVUde7z49Lefh8&8|m2sP*FfT%S^@5f1
zqgSoG3Gk}DUG2C+s4LiCbdX#|W5g}A)vK^uLZy3kPnG>oT6=?fri%uZ_m`DfJx-e^
zSIQmDrr6I;i1vPr*k^=>M*2!rPSZ#FBsMMu-EB;Bm0_$ucNWR`Xeh}d^d29JF7N~%
zh>DoC9G1}JSyB~#BQ@tnc2(x7qt8!HXjaJQERG=e>R;E(riW~v??YwCJWh}bHElVn
zhHSc=GG4xHeqZro9Op#1NCq~kd7afON`#lSNUvUCnLbGjid=yz<6u3r#rvB36H^D?
z!X9*r9&9uBBOj_-jDYpRT?B)O#*o%fUIJEW+|QEyJ;KPo#!NnbRNms}D~S6&%q`5b
zY&sS*c}o@JO0riO;kWHngLOriPWuIJ%e#7QFC%W6DZajukv|}R)BEA=0kEL8k0O@O
zz?CTu4i2WKh4a>kh@O!SQ&9;p3dww@&7KnUDxsJKr@G=oSGNUHYH11=ofdO+Ey8)H
z(y;u2+h_H34kiVDz3m_}KxoBC$)O6eb0tsNU05xrWuWSchD$GuZAOq;OtdU1JdIN4
zEtx%c1_%sh;>Va)IC7g6G+`tW?8c!srZr5nXwvY3Zxl2;<}M}|BKND07Hqt!IXU~|
z=b(bu$B6?YTeDId+6O44?auVttYV07kg@oUuCO4qK#{PLZm1@|CQ>M%>Sra?E_uFb
zBdzO)8D`ClIaGL5O5uljKJqpy1+*HzXnLXTn5sMUKU@HMt)4jcOf9v|R4RgH)xK%u
zdTdPkUiR8iP6cX|TQCIj!zbsp@}hjMMPA)15<`2BWT>)OhQ21X@jlNOvP$N1f|D{{
zK|8ImK-mOo=7|$w;Rq20{R@S_$a;OJt1*Yd&!O~zb0l~#)50RFwdmSe)QAYXHyJZ6
zlIjIHxbtyhTqN?2^sjzkt3?Z-OI$cpzqZ^uiT-+)Y5LC-5J{<9-N$rt9Ae|ZI_Z44
zQKLM=n|5U;C<ng=*C?J+^Q&XgipjPN(%qQk`uBz@>gw%OL!|1wLZ(mGyrl)1)|dJ`
zFqiCha3nibv}_Pwmi0WyY%KdXJ?qGjm{j=-M}*1culsJjm0lu$P^<n_bii*+@#~&W
z+QKE?w6?yc#`E_tnNta6oN9vfFo7k;#fWhpsd&xb@h@Km3;Er%+a&s#WY$p)H9RW3
ze0WA4ex%(dU$~GM@R|q$@kMxsZ@?wdbAPMN#u5Gw2c@YuDuW*nLy6?|lcWLoDvT<*
z$W<ZrUb9cm(mQew6BKj+DOZ_bKoTG6!II-3K{;bf$fo}ur$2h_fCpitU|_UrX2MMo
zqj^gcj%`OBTt$-mF1l4h)Z;G!r;N$BpXc*9X3Z;mq@{kngY`K~5lC_0sL<c|EMimz
z@2aN2bD#RmeU0PI^YPD4&)?VjPQRyCDwPo^iZe3yca&q@G&JxO^y6H03n)|U;n(^n
z_3Qejf7U)zb+YTp!R2`5HrsZn_Hg_e^+Y-Qy-us*aTs=dp%qfPBtccrF^nA``uGm_
z$z94t8i`R8Xwq2RW<jWiG|_zg@Iqg?QSr)+*c%d;vN-hVbR`X+=uS!cYIK)mEz_L!
zVQnL34l8{Qk<4AGssKqkj}K8|O2m`&f!pgY3Xxx#jGzoC;f1o(Ntujln<(`{F2`k1
zWR#2s2&5{D&7imh87I)6voq($#BkFNHH^2yBi2M>c5rACSNt8UbJRdQ|9op8)Y1TG
zF!xO)kg-aqAoJ1TSbkBN*XD@FjtgJg9R3u((6Vu(I~jNLAP?i@Y4Ig5<pP49ifYN~
ztcta<w4%rmh(8aGDY~yjbP@$8B?>0rj%0!0cw`AGofyk->ZcUCsJSSr2AQY>Vl*-1
zx|wJxtz@pRw28AE+9(5j8aPS)Dw6z0-oEQ}>PZDJkKnzuq;D&xUu^}sS4^ha<~)Ir
zNFY5*nT^h9@8r{EvgfvnaXv7~qEY6-Dl=a44d+IPrp&;-zfY!4EzRE~9?Iln90sE?
ztb}9AZkK+I@>!Opc_R(8N#jDnJ?PJ53>zRI4m`5NR7|;t*X|AG87TDnpl~-irz@@x
zUFiKHB{y;2$!BW2%Q7idC2+CfP)XJ@ik!iTx^)q~uPyeJ414`zW8yo!s%L>9LAKT+
zbaU+s0cssIecNba_$LEqB8z_CazS38ups}w6`^TI9fB5#|E%<}f2(IaBddJ~IbCIz
zx*{#1T{HB;Rv@Qx#6GqzK1sKTaLO==>``Lk3EzxMJa4NJdJXSpnO5!gt*fm&35t>a
zMe}Dw6{~P{u6hKB9g@S2OeC%g-a85xW$)+&ssIZ_tOIMx{6+Q90XFQ~h)##|{t}|s
z4($<s4h*gu8oZMsJ@Ho$8_#lDCCiXP6p6BYu-pcz+MFtGx^`)wgRI$<0`_&yYi>c4
z8bO6mpc;+Hs)vuBOT@hf`$IhHckQaKz)x(MqZy*kf^`j^{l9+4MUp0szIl_smmibA
z5uGi0mZ4Hp#KCg&1VTeGqG?s{)MNKOnqu{vnV?(;V-5(*;qI+965rPE!Za3A($CR%
zs3a;Z5H8lVatT>H2Ck4Po;Ky^7Ll`EikNN&ap8XAH9t=x&Kg);o%}2CoHo1^ZCzb;
zCIQAm@ME5+tA9H5<4yGQX?Q@Q6v?z?M3Fr7uQL&rm7uDp)V;cD31)X?mW;@&1kCen
z6_kHx@2P_zQY$56zaf7)R$P6x1c&qhFP?mQ=4LkvVc$H#XmFu^s`>GGeZ|I;@@?t-
zZ<?gsrjDBJ7nRbaD~4nSP!tv?Qei#MdKpbUH*qC?S{O|>UHOe=v|}4CPMNCgQX#Gy
zE2LvzQZ#OmQxN3!shrwslEg}h%|;?(4)GXEBs5xBMn=J>Nv$<FrbS7D)9u|OQA^KU
z-p*cruNL<bwc^8Uvicq1xocQX?xk~ai{YT9{9fWas)3lV*iI>orH=qtplgOuR1s{I
z9SzpyUTt4ybSmHYeeouV#YKZeHajtvm@xSlcfaDPckedrNl8kHgdGwm;;56y>1B^N
zH8f=OhNGnk7>=Zp=jq(VUzx&Rv*TEE!eD9&Z1l1yy*VYmsE{@HIUduj@$eV!GulyX
z!*32ljF-6xjPz_~f4`rZArkyWLKbEryYcKps4DM_rbZ*hLhO?u<!-{;H`y&JFgN#<
z-|aKbpB)}5Y*vXFMd1Ts#X;%cL-d9p7wGT=M)l1@!zz%uy6<El&68oVsg}ZHFeoR%
z^=)3GSdT?J%s>N8slI!XV628o-y;-gDq|V=uq~0VqLoewGF+5UQ;*S<*Mm0bJ#+=J
z&CUSt{aHE8hT<aN)&0swx0uQcwyb}c5f{d}fruRX^HGu^?ZW<7;?wYMClN@$i&Adg
zF9}@l2r1Qwc&p>#ijnCX=82zkYbr^-PJIT(JqQfz%lBN#1uszQ3ueD|(hu0El4puG
zd<45n<H{=ilh7+;sQ+DOC}u0Bd@d1wN3Qo5ZBOf4nB2RUuMICEL*^E}Tw#G)hC6Uw
zE+?r>u4&Vh&3HQDGDq$>S#LUrb++*BX+-H{s)CiLk}0dhE&U)L(x>>%B>jEa!KY4J
z)1^Azn*f9A*8&ApAu}81pj#Y8+R`YUkOspxMd`<ACL63({L1DzU;0)pSMfBlT{RL0
z5#(`*FnC|d$Hb}@%#2cPrP^i`Sn>m{QripeaArn*a`7T}L8r|_FtT)vf@rLGvL=gn
z=M2R$euA@fmtubH8Z|!*a`1HTD>FTngYXyyrV1B%j7FJTA(I|FWp>I+lp)2Jv(iMP
zDlw|q2hoFqNiSG{l=9BqJ5!#mUofhVV52nNN^O?^d|0U5OU@V(*>K>RvNI9#&)>bR
zsbQe--%jm}-N!9x{z1;5Eh?IPZ0S9HAZws1D<7vMeKoFW)ni7C@AHAQ!exMjj0u~9
zX&O#X#YL5qBo04T$I(_F2pq>%#8TW9cM>vdkr7Pyd=5GG46Ai3g$~FBRQ}-{A#sf^
zd!(M3l~)iqk!JVgmMC~3|GwA*w~dj?!-{*v!xTGdiIu!mhiZ&7*D0`cG@lDIC-j#<
z0>8uM)k~-)XU*E5h$#Z>59X2Mvc$K8o=DLyf&e(0QlcoKGp75BKwYpmjZi9$RI*Te
z)Q?$_%V#`<hgn)wrAABdRB!aA`GsHhxt?g7u+j%(=SnFl9K3LGuPhdpC5e}O98``F
zh44U4Rs1^6r0_5-X6ow7zRL9=wO=U;Ep6x4&R=Ce+ho>^V8qQ3ho0@KzTFvu;5YjB
zZ|3ISG6h^7m@OHwSDBvv%%*+T&8|Ju_~oNg)rf2VSbrWO^-`>Tj(3|^H)ZQ2Jyn!+
zc$~5&r?eoQFTGOM_Il;aVTHc`b{z$r>FicMBpJfFz&ac+<@WoVx=ciSKSi&g^Pi-|
zm}PDi^naf5CCTq!vVUd*;3P4Gr=G8F%U$T;+IWr!KQ}^^qs#_NiizN5r9?C?Fq&ym
zbIzZN#wWj8lxx$<-s8TE$yYd*(q4e_Nx92ef`gJFWnZQiOjMd{7Cs#yN&CB=n=BIw
z548;Prq7H`t)D9Qn6?s<blmP?)^~#c8Ygr?#1|2tJnB`{sGZ*ZWPofxmj)=fYf*;I
zoo|MOENtg_QJzH&Vv|*BVM@NJXHS0_)H#4!20v-JTf?&c)1!v|X(2d&lX75y2d9q(
zRTPq$O3+o3vB*b0yEmz^00}VYYG<pb=ts7`BO=EnuYaNBA?JqUrhV(Sev>_XjJ{&b
zy_p|<G%kId`K;RFZT2NYz0j`YNPnILX3<$#B!>8=CfQUlmk55nGgST2i&wL61!Xja
zfR#%(2AOBDHzq-yQ%IL(O;Z8dMj@7O7TW$^3Pa`PzcqdJwK#~KCaFCnhcxPY$QTAW
z`J1FyZI-_rEAix@lds<rHY)R*O0Zw*86NhY4{_Pt%*FLlIR#y7_3b@E{AcByJus9O
zM8)U?f2p8VbVPl%#ickfi>!tj;aDGa(r=tR)Q9}RtKiQ(U(QPr+{^lPYg8j=M3L}E
zmQ+}5!Kc9OX&WvCa#tg@F@E!8CpA^@;4WtO*r;%sLIOXy+ww#cp)5Wv7}ofuN-YJ4
zyr1q_M?`E-h?)-Z@EqC4;#Xfi>&i#9_g$iXEJf<@$mYE#+CwmujB`aAEF3-Ak&d#G
z)b0N1Ex64gm%Y_}({h8T$n~kNinvO(XW%YYK-a7Px@4;VV&P6OxAK<!-HoeK6=Vwe
z-?C78Hzmt&1P7l;O2lmMa!3jaSk@Yo&GgWclLe1)CldQO3tfFvM2kZ9=ZT7ohI{B=
zEcL%)og#JnwTs}gc)g3j9w`jJ>;FLeFWt<cEI4q8yMp;VNcXp{r$kDu8L=X7yn?XC
zeVq~F^b&#(7?BrwZbUt~(wx89tu4@Saej47GOlphOw%TNQh%YpKerL{BZ{`^jF$fu
z+#}X;*AhSx|JT>?B|;-Fr2Td55eft%!B=h<hz-!ij<Odge2_Jp=l8_!x1V%K{;xMc
zI&eU$_y2j}(-QpOcepdY6NdfIw{HBu{}1@d|NF&?>1$%vmn{X+N4Jl7`oFJ3AgNGL
z1pa?sh}9vHlS*&>9g3<Y<?tMGUGRFn%=hfK<0As3&rx^8zYw_)QTj(bQdq32-#vEl
zI>-fS?0b&U>cL-v!2^Bg-3#U6|4HGF2>FhpFSGi24!HMWOq<vQGmlMr$O;kfo%Ad5
zU&?-g?4}6EwQLJyozi@N4%aK6KvsBPM+D%DrP2i+uFU76<HN7ZyG}%A`U}!u?9#I-
zfK+jFVC8cVxFW#ebBKoY!cL$cQ%@v1lD|gh&qCA^GJFF}(=g1p6=*c_Y7$%ym84HP
zh=-rKVoH-$<XR+S7V+NZe2aME?;q(chRsSYeczgoSz~AZ=A;>d`LY^=eOiFk+NE<9
z!+jn#2qEEI)jU-433wh@ZpUWm(k=;)f8-^^AKxIp(>s$!IFd5{7#HCQq$+bqncydP
zCnwu)?5f_$HxE*fj<DdQ^=+rQ==`7OKbQ1Tu$Lv4tROVO33l$EA5cd33BXehmPnFz
zA2LHxhI<^Uc?CUxX|+|IndrWTO!db8b(G=F7g?vsiTy=Rh=$)qL?($qiun{$g-SN`
z_&P!S)I4deqOURRW<{oumyMcH+WaLXGqzeFHaaGKDqq6ft-m90KFfGFZo-Rq+s)q#
zt)mCkL_>f(TVj!)Yykezk!IfW)4eJ19O5lW>c7ceH~B)`4^X+@GD#w^g`=Vwm{a}7
zMyk-kHyZ|ztkTB*nEE40$%;qC|KwvLChavlvn`z;tJFV0Ipb|bdgvp$5T5%m-;JX8
zpJJ-+Mf%{Fm<x_*;a3nlA<2d+?WnTuXu)zcGB?M!u&*RtaeYnFwt1+eJ(73NIuac<
zZ;5W){>VbX*kx>QX9gr35rJ(;y4!(H4&wg-L$l<GN>|u9FaMx<^fjUX&d=5uUSL@0
zitE`VP6O|*xe(ZTq~Jeyv{FQeOM&^33{$YE+G!GIurl3koc}zxzM)HoBk;yMJooQY
zvdd<ZVC*09vCn|GM}0x~ytlU7esY4~c*mEut1j%oNer=!lo(F1YY^PdlrnVY{2EYt
zWQ&R7rCogEDM-5#gWgfsMJbZqw6skXp{DZ8*ntf>g!!#}yusaWa`4wz{`iOoQtM)U
z?!|Us0e!XdYj}g%AikzQZ)i4CTMWUq>&JzkA1a=J?rrEsV<xHHUDr3H4rGt)g9))k
zfkLx7*(to3@~^UWRaBB+McE)C#42;N2=5&x@3INfAgQU+Z}Lcf>yY`F_aLA}_hl%<
zq>S&j9UrFx@4rNPKkYa_%}mRQuH+B)wILXQukCzv&LsAD0bzS4V)r(b&C&6F6gF^3
z;~h@hSDOYV$dLCN;zR@MgUC6zi7Eq_^$*z`EqxV;Ye9S#KSD}gfDajoZ!Rpxnk1Hk
z0D+|%e*Uo&jYe@v_LTMm0;DQ1WvSz*ekW(g^dkT#d7qFuejwfJh>t7kOY9UqzFVSd
zv^DoD6dtC%JblX6_C3%SNpHRfB;3Fir%Au4+qq0?Pda|7tqK;(|HBi4ZOGcr*c*sG
zJ?)52<SHd(t^S`YQSFm)O4xTHK<IRaigDwXBDeN8Mu=q^+bO<T9lY|3GPO?s)161c
z1E~t1SjxQ<z5NJrALeafRz-}2A#vU@LsSA$#eKX#yE<sLihUhTcwI7m`}d51{IAzD
z2%Xq1!=!7#mz!R|JM^{fi*__0fPA+ftY{RFyp(39vfKB8tfh?VEJ-8SBT1HTWPjm$
z?fYWQ-th2UZr(y~ATzr3r9#gf@<8#1S(gd|M7dN|QP+>k<9d#p_nen#feje5F$tqI
zavX_XTP0o<$vrwmj+nBd@6p+~wYZg)PiQppl{>9`&y8yp9WV?G?R2-uoHY~3oiZPM
zJVnxIgEBa`TkczE4#F4A&RxC*ailMVV6!4ph-Hn|5Wn<M1WCAWe(=7V<M@OE4k}jg
z%m^*{<<Cus`*f!2lNVrNJH}B(4Iv$ih?&%o?}J}#6oAFrGj&HOKnJfihV7|7xeG2(
zK(L+WvLn06XB+w+B9OvDd+rQHsj$2^zeHp3(ZZkYBSY>4&Fx<Yrw-b&ClH8bmZNrU
zPQQS-bEK}Zsv;gfgBn~mCm1=8%8gumA-*;_#Z#)MT#db>quOhHc>S(##pr~%Bh$&E
zebbI&-+r8F8v8*!BpVIF7CgkjGEGS&DLZXOt?H;-VL;(43^)xR9p&y=FgHs3=tTkN
z#z2W={TXC@)W8EPN~0|ci9I9rU2hnHfja$?_;VCgN~nU&j!Vd_4;SS7!8e5%E7G(o
zt6*wp2t%C~FBTrAfhqSNk}&-2(0LL+pdIF5Pmr2PNr6S1uk7(NjV&k(1Jj|v2#Q6n
z6cLNv4;u+i8`zVlhDKgN1Zk~5=fDO6gC(MSzLt3+1H;8u(m}wJ!OuVU>R#zku0V?U
zP{;4c*5i&`81*%L(j_=uRNIZeP$AOb{@7|F8cRZG-E(Tres@Wt%=0NkA4QF)UvN`v
zV%h9X1NPH3n>BN*nbd0Oq+?6PAo6i7OZ|~`H$vAy1W5E$eGqKJJQsuec94l3n-Cgc
zvPfwF9X3wY9T_HT$+cgEN1tA!ls@X)`yueAfAbOVLbs=J>ER25zQyJB-+5ZY>#k3g
zuY_r*%GGDA#R5;&a=sYCjzA!L9-iS}vXvi@io^%SI_hEz4jl-Sa(~th$C%!pv)u0X
z$o69H<YNzZPI^~r1c9(dBUuQ3@g&Fodx#<?458eeqZ-5byPg>~XD;vt>gyh^!%_C+
z6U2YxCz4hI4j%<{!$=exR}V|9kBx)aC>3pC29vF}o_n~5?@e$Ng;8kgK%B#7;E-}?
z4<8h2gzCuv$$r`{kQrGh$MpxTglge1GM2z7^3$7#yMK$#K6tJc(pN*ZqpOuXLvlz$
z?$R)M{S?7{KkRHCo0@bIcOw-~36|+J#y8W%L8BICmRYD&Q`s2xxcRl6A&XI#rd!L#
zj6aeI@|_b#oXFmCn7^#HmroV{I*ELF#PX$1)wLypyS%$cbQF7EsMA=OlZiCE{={-r
z09^X=Qa+(~51dt_^q_@Ky(Br^)Hd3#;VqU(`QWH`KG~E8Z<3>?mpJ(AQu<;Ql_(9)
z(e?Q+rI#l35ZEvsZpGhzZVlAb(bWoVimf&9whOxCMh31RU&=5y(rXCzT_x%Bh;bxi
zxM*f-F!J8O#*5!`>Pl8m{js|*$h#U8v2rJya|sen);I1;?4(K~$sH(D=e11>YXt2L
zi9<5}uv0%-6Ax|eMJ=-$NixxD$z>XTe`_6oPdL^11F;a-6f3@lNnB>9XJLfMDw2?B
zc|)JQRB{dik%@QDzxdX48iK7RjU=AA%b(~}$uv~M6w3T7-$+SCh(my0kG@W^V7O+4
zjW|bRNwp1|*pTKVV=$!O+1eA~BhE%EGgmM+HXkiCSNK;hXpeyFptJ+DwOEmWQ!(tL
zf+7Fysu{r(*GdMzOtd1sEPhAGEBKqD7N#+nrYwXXr;2&(3J4W44d)W@YG`(Ana+J%
z)eyR1W?cEi3DHQ&s-9qFF|p`A%WJg$Z3l&nOINsm=GO(6Cg|<y?&%H&S8&aIla6?L
z_SFpJ(?-S_sfD&|!C}38Uu&o+*mE=T?#b9ODf)$P+4<^TL4r&AqGNM&&Le0}e~N46
zA)mu~!Wgrh3c@!;4O2O(kwiNvKSImg!lVb1w%!heX#!5vM7WXYCT9c+p`l~?^BULa
z_YBB9#Qyx+Lo<9y-_f3H>5?>0CYh}3Qb4T-w7GrX{pR{`#)<<1E%n+3FgMdPK}PUl
zm%o6`<8%B&QNtVML*T!+)@*#@{3;iFN4Jy7BYDfil$n@gyLU>Cx&=AR{6SqOxq&Xc
z#<}<HEn|}!#69fVX7A=H@v^ZV|IV*z!-_%2vfHW{VPuHP6AqK+L0O&TnP%mIB!vX*
z{Ji#*UbSBVAO%C(FmWI^2|@e$<GDxLU~k8QcEVPsi8b>bwPa_owdv`SahgLVjzeXl
zC<!7s^SnEOR9cV_@WzwSQ1avZ_+}H+BGP2+6Sdwtv<1N(CNaN@e`k=kkUNoD=NGC|
zwhpGFLU^wI*z9u>j}wA*X||*1Q<1+OB35JS!WVoaJY{jL=C!A+jiXFWZBPZNJx+e1
zC57Nz7(orUnQBKRXvWZ96gW}AX_9*<J|M6mb7={>I$L_x&upgIaGo+5aZAT&FnUEa
zyjT(Li#pikQ6TEp>Z>%6F-ueXMk&G`%`6Qo9*T;Tcv6@>F(5xlQD8|aU2lfI^~DE4
zhlV@9`JTgwXq0JqzQfalYQ&m(tJ#Lz3F`QxTiL9vY0ksKM}<#taf;#w(!#?w>aNoi
zA}$q}<)qe0W)x{)C7)+dYpvTW@B9J#sTPUcP<5H2HQjL3VHg?eQ0JGQLMj`H^aF4R
z)wRFipdarirb-*-d&336+DIL=jGexGWXXN#RAPsAPHQ@vgPdVGB0*kntCNxSZWT?%
z)4&H5|H0x5qX_|1RAQr=k<GM0C!-1qrT#L0LqjzPC+Bg4qxr}3RyrayDE!SCA*rgh
zqXOeBdmL{+46gF_u3Q7XgLr_w=K7cdi{U3mNpKls{ftpLdz!qVg*|UD{jglw^Z>^`
zj>B&ZjX2%FdOEY+s=f<NgJbgBXOO9|Sd28w@q(L{NCQKoNG_V;$of8lnwhx~HqUZ=
zK<Y^iRaGt<Ua~kLN0&)pPp&9<9YOB*ASRauk;8N$mFlBbEg6LCCiJGIm2XMdMwU#{
zD44x1xlih`P+agU8PBeFM&=+kwJNVp2Ag`!P~7G50b|ZQ^CPnvx2H~EkF@5WjIrpK
z-?Jjell;u1IcaK=IYo+x|Id1gRrU!ixV-iDgy{zaPm1I*F(=5Jlsk2@Oe$2)M^Nyh
zY>T7l_r$H+yOej|i?FCuOx|&EgPw6B<N2xU*8E!Yp=rX&+B-L2otyeloneMo&5;8_
zbsTc~X|GcYvwMIueOr}mpKL$e!+iH<1+b4b-6bRGOp2~#@+O_dH@f=S56jI+>boCc
zSmLouW@-Fhmv!7n>(0HM^N!Qjs_=dEsSWQ8zR4}v&-5TP*#G+z@o!t=jjk$9yPtbD
zXW7QxOu;QOO5Ml5Fs<QrJ)IsH@YW?~>(|#8Ug|MiK3R};@RX0yw5W4Vg?^uVijQ7-
zyRk-b#>t2z=WEu{kw-dsBo7PA)&ffkhMs`vSC=ER&M+>W{BMG3>+$vXd>809FaY}z
zf~DmtTUB=j9bTEW@)d{iF{LF82}*t%-ST;1*Gv=?r8&F{GUO^>ZST_()()LJ>7W0{
zcN@j-xzw{BSncXo?DSJ0UY>9BLxG!%Rhza?yrN#$5gjx2;|!mrQv0&SPS40#u<yZ_
ztaVZi@qEcrS2J{UmHmH-#61yT=usli)-So`fW?h+uh3=fTf|rY+V`riN;N-bnFoV|
z%Ott(%a%E}`c-d+{$-ioe`k6abM87&_hpXO)BiV?r^a02W2g|l5>k{qEAfDcQ103^
zpRRkEnbQ}F-At66|HoWUrio<|!=50OFCoW%c*M6P#Rz`xG(P>MBsk%eMU=3Azu`%y
zb@FriJ~b{p%3xrq$nE%JW~jjR=O(koH##n^k~?zLu=b45_G1hl^*jfbbi}Xh-h8Db
zO#h(0T^`@-1)cLjrSFj=d-fjekF=eqBf`v}mS*z(#SF8MdXKjKy>&0Nu6*Y+7WC}8
z;VZq>=CRY0&l|dzM8^VWI_H>p9+@F)B(u0%tI>#Ie~sIjSoI3UeqZf^8(sPg37gm!
zuC#08=a&-U^!#Ko>&C(>!b^FUS5LXP^AyL9oeVO*H@YU~98ZwDXCbGubAxm8qzTO4
zuT6nT?zx-p8aqb@1|~aC7sn8xrJX(Ny`5ToFEH%UIIbSr>FZ<M7;yF77xmz^s@94^
zW|w1(J#xSJwH!XTY1L*WCs1svhCJoEZ!EdLPj1cznXp?&C-!SFRAg6}zAQ8>Vk{`S
za#Zz+%ZVc_aZ%^{S|dF;Bt!h1?)c8LIQV#(&vOrNc|)<?j24Pgx|2C33M;z%98voc
zeRyJPPffATjRldwE|pKqsocr3WlMDWPDwKCF=!9%fAX+R>u~qUVCPcxFVYLY9OJp`
z;KIVN$7;v7_^)qI=#_>ZyC`!o`g}&-hl}Zx^C$7}C-*sbGbTI=JJ7ym*{z++Zn}NC
z!}B(KW!W@-*)k{be_PHaF)UEwuHX8xX?2p#;RPG_NC2BZPk2ln&q}K~_XB4!W(b?8
z$gQ8GF0^5zi%Uw~!^D4{`u9|3pSa?he|Xnj{a<zrAH1LLXgltba;8I#<ADCWjrC{T
z|Fl*+-{6d6WSAkL_UNI=^?jv@JXVJ8YTU=~=`+O1IO~M2ocPhlZ12%U_ZNQnGK&+q
z88J6)%Y!Fdcw1KL*yYZb1$KvKA8V1c2aY-cyG9QzEtD=floV=!M#v7_=5n*U0}{^X
zlb8ym7(TpmSW=ku0N7nc0tT)M_klfV1ZdC%<^=>7*psD-z@z`{qDy)Bq8D913o_i(
L)z4*}Q$iB}0mYO1

diff --git a/example/k3d/assets/trigger_change.png b/example/k3d/assets/trigger_change.png
deleted file mode 100644
index 42ce8db2eecfe85287237cfac839ebf3b5e0eced..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 57710
zcmbTebyOVPy6s&^Z~}o4+}+)R28SRC?(XhRV*!G@69~bAyL)gC?(Xh1&ewV0z4tk1
zpK;H*_xpp<gX*Gc)#|QV&u`B85c)}85)}y#2><|8X(=&90D$&|{J<eVL$(w_f$|_P
zFis-U$_NMui|Yz&kY90~#nqja>`a~A3>-}WGg~_w6GkT^M-vlUCv!XJQ<!!^03ZRR
z#XcyzXB@TaMQo^Np57gnR(;gT=h*(KTe8oYN7T3MzmK)lbf}D0GbN^1>Lh7UNNosa
zVnv&3g)TML%|Po!Zizt~KyK*}y?>R9wYOrJ_u7@STSq6vb0WvWyii}$MourL$-ucw
z31g*<GYzSL%OP>_Wa0z{{eu`>XV&o7;j;Hx1qc;Bpy#{3yG$qV(L0~RC-7=W@~|&h
zE&AE)mgZs7*LxmYf&?7_cEhT(-u8pf8w6Nrf8nKW-|He&;lH-y!z=3j*+z1Lm)rLD
zyPQ&g@7G`zb592OTWE(_l56q5_Ac`fm`)aWl*)`*q_izYr&3LOcfli4?jH4WmLp*h
z-NG2ZL)xIdNj~n2ExwGW&NFGwk7QK75T%CjPL`09t&<l!#w*BTNktXZ;#@LC)03iA
zX-|8I9}z^%No7W$({zp8Vwe}Z`0a(Xkvtloavf`#4Eh|&U0_;`5!8R_eK3&f6CPwf
z4Lf%EYy6B0d7fbL)8e<bJ4+-mF=$G?eqFRr#wzO)$-pqL_h6(fy|Ghg^yi|jtK9Ae
z<|WU-rT3Ksc&EYX6bmm=^u_A8qsI6eZ^lfQPv+`SEq11X>vUaFv|f~d{p)w598rq1
z_2kbTzlhH9&Ue!KHm~4??$s8jyjDGSOU;(spH~-iv?`IH)~*ijR*Jcx&wrUy_iWso
z89WF2NLX!oj$RnOpySr&J{H$O`McMa6t~&6gf6~3Mz`N@&9@SRc2!X{k=COrf&^T>
zkVk`c^0Z5ecArGuSdzXvg2vw2;-_iSZ($Jv=JIcE)U!eyJKg8(rgIfP`XajE?L=->
zd$}GP?5KM+s!+TGIcK!N1NKw}f(fP=!w7lMRyPj4@K3?k!DM{7g>T~&`=H-nsBcKh
ztd3N@HArvu%(myR0M;bjJbGj@W1Zxv@DOe6IyLHVSeESzEYaMw0pRRAlMvunO<jl<
z&b;!PM4dGmDQa-P<OdAUdqmX(lay_bla7sMmEDO0{>j7>`TonzW5N&-*U-G76~|?G
zyV`il6S`=?eCcl0b>~(n`fwQu(H9(~del-Kda1Azz`aK%wg7Su=_YLg`t?q+)`$58
zdn@z_;D<tY4}0BQGX9_GojoVN=DK8Vp5Fm;$C9zuX5UCi-N+0|bUu|?EE!(eQejhT
z%{w=mK|v;QGb1^_&i=uAj*kiZK;RHAP%@dHUy!{<o|4%`769022qZ)!LYANxe=kTX
z-icMuuy}IfWK$e_0YFo9&VKw*AfK^11OJ9Mlh<77$GiPf1`ZsS_ZjG$2E;*&!TChe
zLGc3$4xgp;t&5UK6T|jb%>*cLEGe`2QlC7RJ5z9Wp))`FOWHSjva#^4t)IUJI?kkI
zm20=TWnyfh876Dm@=<BJk*mw@LFWU^zUPP?UaQZ5Zs>iSHXUZ3GHv4N`{7Olw)o0!
zV;y)PKw!8)G@rrb!Uxk##7htfW*LeEK{ozlt-tBQTYLqoY6l}tYMarbi9?}B8eiYT
z!H}DB$Jh|=scZQ|(pBhyp=m?4woV77(Vc7M8^3s^0fJ<?%WN6RN&qNO&riibgIkN-
zzQ7%q+Txo*JxSAzi4udUy$BRp&G%;Dgp(X1KJz#u1|{TKj$aMDuPwL0*$LQ0RPE23
zbJ~CP9gK$g{F#>C6~&(Y84wgWlL*vd_-HaoY}&V?PRiW7c>Jh5adu2XUl8=;1j&qu
zy65R8u<7;M%E;D61DOf3PdtKHoFSJ1g5nsil!Gobl`36D*scC3{^6$cyXK+K;lvl>
z3@Jr<=Rw#FM5cDk`g8-MPAe@8t$<&A?tIy{$_UQpa9hf7?r^v0b}txf#hpzCj9h3v
z)@?yN)L|{0NaCPFJMGnEfax!#=uHu|;c;zZ6{0GCW^xvm_~?}L+(2EElU!v8<vpI8
zB8_)$J=D~xZ^s{xk{;=;$n`ZQ#`BDZS7vKEbg~Q$5$J#+)nlUElCxyilInKVM8iS`
zF2m<Jiq*mfZqWJpei_i2eBF<a&CB(8Rbijcw9sh&+(b1MP+>;KyYJ`D%c#~p8}Bj=
z#u9~V1bzkuu-OAwio6{=yitW}oFrYbgjMvELyVY!zO(j`>=-TqwwWg1`$A4IvcDfb
z95ah?lo$E@mSyV-=sKImD0vl|H_F0VJ#SvLw$#POh9KBg?^IFr>+iRIZ~%)cey#s2
zAkee5Ijd#N@LQ5qcJt`|G;*H+GH|7PDDI3PECfp7X*)p<z;Yb;{WBv~ni+`U2#waX
zRN#ghjurG04$oo+{FamHix2^rJkF(EZ=yZf)9$?~d1v?zYoYyl3*tck6L&D0x2GJ9
zf@go2GV(Mm)2D-0X916S^iBjxm*PIP2Q{A7^fx<s*ub!=Mw*XM5r=0>KU<39B%|S5
z>45B_z}Q#%QCG+|zZG&Xj_mU2F8Ll9U=EP$lxBaO5M#;1z4K$5{#8qXO{N)E`&<9z
zsiH5YT15rkZ_|)bS^A72Uw*N6HV75~G6rjB`k{U&=D&-+$Nl6fd?d#6BXxwZ_%#r5
zU=l>Xgx07Km8^z|+(qQC{);%}zNwy;C5?T=sYVHg2QAWn=l3E9N_6vV%{}62X3Cry
z?jYxJ016^@NAE#6`*;mnUnKQC65c^d+6@M^{CpJZ8c&@~;IZs;Pr-z3dapJAGMh8z
zBg!jA!|Y~LY>xY<WT6IkME)45)vk4ALOiFeo5UFlE~Z40R#5w@72RM5Y{UMY{D}j{
zw_c<9*K4;P#l2jSg~^0{b^aYte)>2_V9Fv#!?HO&#;h{=KB8o_Iw;@>M4QRqcIjbf
zdqT2R!!|<yYV&QDx8J7Oahu>v_tJ+C5y3v0r54VM$CQ|U1lQ7&vf+6c+<R6!DxWp0
z*G(eUF+?c#F0JK!Y0SD@_>P%_Z7kWf7<9P(OlSa`*iKlvX6sg=a5|+~xuu~`EEZzA
z*cg){!~3*#CNNQ$IDVoJ{I@f$N9RwxRw!ZK{+7@+mI39q-dr2$9gykN9g0+9t^A%6
z$}T|r&Bihx#`&o7t!L-PeWG%pbOBnAE7{BA+8QMno`){H_X)H0$tix($j1}MBdt@!
zsA-Y9*7!H^4k`>|rf+y#F9LrK2dgKco^L$s(tt@8HA$R{Wouh+aJ-hZSv1{YBn0Sb
zlqlIxL4$Xwlcm9t%D7)j-21PI<yR3VV`bB-@jO^dqZm2@QawE_5LF9kx}!CcP%E;f
z9DRjiFmf|t)*{WizpD-)JKAjlmFdOediTpV-DH95JHOSPXajvTQ`@j5Nlt=ioqEP$
z7af2;=KcP?DPXWm)&<U}j+P~u93Hq*BIJMWaPq;Aj&?vzO#6}g8qlu^X(E$NLglHH
zz+atNEd3x!M<XvK8=QQVcRwAnv5wW9>x>+j#Ut&N-%1phE$x+y%iU;&`x;oHST8oR
z8o3dU&E@K(#(chuO3f=Cbl}aBPikWF?GNt^$9W`3%1>p|^V6s??t{ZWv$_wB;+!am
zU`kU>vVj>kd_yjMQDrydmW&GE+$_<?@2g7A%GOt*)=nQzhoO>_P`E8)isH2Qsp50G
z7}9P#W$8hl(S%BeG}n%TskSK6T-^W=BS>uF8WrV*>BhdO2BJYmfdeA!o0qpZ%W7=!
z+ixOXtx>Rt8wBLjveanw-MkNE)FEy*C*~CRl4~)+#kqMmROYur4DBL!%-R)P%sKAJ
zGI2~5I;-D<v*EJsqN>-*SCjfpKu9jGnud!{27Ast?sCGGDg~YALisZX0932kr9qKW
zerc^)9JzH1LI{WQ%f{#Gxwk+8q`2Og=p-Yva@fcQ-I5$r&E6IAv?_k6Q$LSs{_IPr
zGzq8nyJp-5<z~bGXTxEh#c7%S8h(A&&r!J(%>Y&cC`_aY*kA+Zyk{1^xT)UT+z$C7
zwU<ns&Busz3X7yggO1<M@VXsqRyZ6{O|V(ACzTP9Ap|yyNTBGMe<@5CekG#on5R|4
zF+%ag2Z9ESZu=8y7CLlhgxTw$3HlnOFGLzsTBSOa55gst2}(6f_S@V&qu~I_S=5Zi
zU2*_0a(!j%)z}G(|AyQ^=$L9*HU=%`<`X^?5OKYpautk&0wCBi5alx^d$)E1095v;
z(jBrfn}l_9A3|?}Q<r%9=Q?{m<)!NhTV`qr7$X%6Ep8l?C+bqto^aMA*U4uARy>^g
zZPdkD)#@^JC{l9B9H!q?t@j(yZL~JT#~Q53(roE&Ld9zrX_n@SNP*sjt9xzXy0wBw
zwa!i!?SA3gwLh$Q>2)TL3F5Dgg0NJJwO{9bvAzR@^uFoS-7%!THN3lc7ZKvatCljN
zQ9ETwXGZly1mug{8=OCb^cqkPqqv(m7h$y2N?J)uR2s{B@+7FGqs3*_**Q;~#gLUh
zQbA%%$5w1!z8V-Js7TX7hw*P2?sB&29Wk5la-D3;iY00|%GMl`iAVCTY_>JcRmQVs
zW11#jW47vvosJDt$UVxQ1I3)CB+0>&(dsUxF~HDo;bS&)ao#SZ^9<yFK!2?m^aZ)M
zw_-IhF<h!PZCZu~Yh-rg7KuJe|5LK@szKd5u1JuU1)9&Lq0_hKz5Y!{@BCo2XcK@(
z0E0-`tUhNtmz;`LW;$HytNs`A@>E+F+)~}2Uvk~)CO*#8YG#X2DkYLvlzeW_ejKcC
zAJ$)lbK}Vji_v1@!FS#Ec3=}<_*~p0Au~MfzQ`uI96Vw2D|yIgWsNezxDZ21Jbb#l
zF=SWmtRpb(Q6Hr7O~9JF)B?rL>P}>+X+Yl|F3}nady{s*<CR&#@dU#GcgMbT;S$dq
ztg6R%wpqCM-+eg1IWq@X^U3JN*H?q|Q3%*j`ccDLzSV)Zf!kWA?Jv*o``Rm?gnAo<
zQYVjAUna+jd@l#om=~G4-~W#7!ziFqvwKgXE4t(rbkUZ?>suIl3lqHN$oZxmVE`*%
zj=U|qWD)#yaAo&gKdDs->whaD8sl0|Mo7N@^xp4Iqu1KhgrfCpk2m2CKRLP{Oi8Eo
zH52wMneCf`c%eN8A(Zn-)8$yRzjzUydGL^b7Z*Z~=wHjJ{|99Ja1j0nHM?~Jr?CIp
zyV-Q)y6qHn3NLiK<~7xP+Va$^HYSnv*wxp5du(Q&MgQ0FXEq{*?sJ4RpUfZI4PG9E
z?vJ=zUzQ%mUT*j6+a8#G&pLgdob4^2pKp#t|6<d_KF@=P#5;v2-~0BL`A6TrnYk&+
z+ne@ByVYmkrUHeR_C<E|zlTf6e6fP<yD4|OF~4iR_4hT@&T0GT_<D|oznl<zniD(x
zJqRPw>z)^$D{LWeaC{bhJ7K%F*B>JGzrC*xz2ESC49t4$$>M+L@qN6b)@yMN{QJ#?
z>bm=l6XG-9b)TDa-^X;NspG%+*${I^>-3@5i}<YNC2}(B<-WRp#p{$2@MF&M;i|Li
z;rQ#MZTTeyZL2rdN_MS?tGmwyr(=TmI)|$-dhOyczyCt?lF|AV-<Kyf8<;=jj=sw9
zTX5`uXZQd9K|lyW@8*o$L&P?@p;RPA-9oc}6TwF-h#}}ql1L@WSR-j$l7Q>wRkD>g
z#l2pt0W%Ckh6M*vQ02BHnQAAYp!efv(Ik^bGWXqfNPR6~o9wOPN{asV8ln>X6WHf%
zPJZO6VDgV4OLnO>swAg}OX8L?h>^!isXFYmRif4|@2Asi8%;#~{5pA$gPadJDbrE*
z;4Njq9ayokFEJ;WfjBRqJXgTK^0NVaf-(n2=-0%~M>SJ5o8o&Ut#<i^+T9U3NAB4e
zlPO^l5?!dnW0zN_&->B7SN^-LZYv<<Ht(DH3h+6zCwa}-7P7FX)bFgHO%^&&z5COb
zt%>FAf?abDAe<{dgk|uenK^hY86_&dZson@!~>d0`5-L!HlEeN+MT-p=Z}Ns-ruU(
z*$93dx)AoSy%rFx)?uEMfrYNbvnpctzP^K;MTp<Wv}<wo`sFNyAH1!w?b|XLNrmW3
zL3>oWsAbP}M7M3IB5+FF6j&*iaOqWNzxaDfleByf5O(@e(Ra_EfZW>!DyB-*Y;qEX
z`bhHhhIF(VC1|m?Vm8LH4+b9iuTY9P0tM)QQS4kTHXjCkCG9+#ahkvHfa;i2W^86J
z1QShd!2@T-zg9$hpgMj<M@@nOV03FLWFiCBh=V%ckZ-Z<+~UDqSX_e<Guac+$1ggl
z-~*KuRPsgS-|+Lj1^&Q(kdKh4P2-yNoQ+DZqZuq9e6(ZvS?e=|`Y;>v1{6V~vGq`$
zVU5c6%JODdPdntZS1bU!cG)}j+^U`)UI;!*RFk~pd-q=@fWb(G%%u^P9}-l$M{-eQ
zzf!}#N}q=?A~V!#Dnl)Kfel=)d-m)_zQVx}VQ1hz$>)*Cwffqi82uZ5r!VDrm4A}E
zrJ5Zc0z-9}6Z8(jKqe%v<`fFp6O77N*dZcakIswp_Jgfv=4Q0b`YAq14d@>dCZaew
zw^|0d{nV8-YTQ4D59%`idLE;tkFWV4MVDp%4)9Ye*=qHfH~uAvQIA@ynsF%rNW@S;
z&FrPALP7hh_otDMDJb~f9j;~`WJO72fi4cCy?V85$Gqx|=AfmR5<@3EIVrp2wuu_E
z28Q9r5pGzrb_R5L$$P&z7g|hC8S_Mvu*fl)#8sxG*r;2x;e%H`b&TlC9)0GLL9^0e
zrOKt8&;1$d=ee0`jFWa}EIZ8A`wSl)cXWqr<;~ZBgZ!%#q&<=Hvq1p{;IVx6+r3M$
zo?GtwoVn}qyzaa;Zy~VdA*i^gd))51iOXtCX!dH|U<4_|=XS}hX@WyzRI-Y1#h}<n
z7cDNKbS4~^_1(vJSo|6CdMz8h^(S}VG%vaW&8wii4`P}va`BMO@GhLZo%_pnxFPgN
z>x#9%+}{NNWuKgh?Tj~KTiu(cxNHD0M34br(L=^=YAKqPB6n*?V8F>Y(iXn$JvY2Z
zD0KDKMd>qX*S_|9gs_ANM8mq7K7LFz<|qSzAN``X`qu}slGJB0Yct32oK1?c%h*1h
zha>5*U60HxDQ3WY8>0AyR5?(pL*{nAplLfHg#l7y{+`jU$e^Peb&TL^5p_vlzFZ`i
z(pHnX+nUk|l_c{zVe(GTTb#e`{P2TEA0xHFZ8R2Y-Jv!uoCUuL(f>BM%61i;!L426
z`_Q`T%jJI0HlhKCy9NFI9nxS2)bEemK>99EzV5Uiill3QSpq}7EZ{fpP{}S}X0M&m
zN{;_+D(xXixC1qCoT|sj`U@Dv%Fy8lX%43JH}Ca!;u{>tx}pQXUb`fS4l%Q5YDP>x
zQvO)X4H&+O&-`}7ieo)>cXMel_GxrRg;1DTWm<oR8(cbXi}&yVy-nEviXQ!&_nxe$
zb$ojH>{M&XYRI%%o*O>rG%TP~R!@#AC`;ED-qaqYDHA3+XL9aH;M5SX3`@Tim;ITy
zTG^BPh6RX9my<r&1N1Gvy$1dP?)4G?@K16t4EM2fO?!eoh74LWVQ`u^Lo#bBZzr_B
z1er2vo$>%Icq#>-8+d}D0QqfAt1VzpMk!qK35BM(9h73EC?%ivmW<Q2C^VdzP|iY>
z4x_%`HqY#`I{F&3kpDreaPV<daLDg{?R|+(R(FMFJSWqyhrz%|6v$Go#Pw;_P3V@}
z_j-2~%8xnHH^%p7k#FSUa3#OPd{m;9;CKoc6*c<Kd&Py?wRysM@WCD2-7Po-(fuxc
zr5XS(MZH1E&7JQL8Nuir$5q#DtWUF3E|_4pw>8cHu*i{b${S?^<F6;+!-<gQ7&(UQ
z5d0J?P~LX)bDCoV4TrNp(^db5c0i&V=M<c=>W%FLl>z`asjO-9oKtcL?tA;(vj&kI
zHso3B{$lq;uL}--tAoyhiQoXQl51wpR|vt`_If|)#s*$LS`Nt8@ZJSsztxMl@emd|
z5h%DuHo^fqxJLE`79eyeuMecxOzqhqp?J&;vt6&J%8mGx($XcMEjbq1VeTG;vucZc
zh4snQ5W2H=Cn~y;O84-z#;FVcfw(89lk-k!D;$6BtFU+Vys%H!^NyJiVcYew8~-!0
z_gN0{bJ@Am6V}*SW2HL-jp>H0f{a;u+CD(&#jreDlA2!9fDfNq8ump=b1`6^gk*p)
z|A#SsvTSkFwx3>!aVqk0pF_&@F%JOR{Lb)hbZRoY_&B(lIu&i~VI~}>ILO+Inw)C0
zNFAgbp}K3zyin(Iy>Qcz8otAK_|}7|-Dl$&Ig}XyN>)aj4zprF3<6xCx?}!pN91<=
z<Z!hzx-nklW^Anb&k-NbD-B>U{DrkE2Exd_9<Qp$1fRBMeILRVRxY0Jz;-shxyL+y
zo5`TP93>bUH1<*i7SnWSBOXUUSZKO)6ODhi{`?ka_ERBk8gFXjW_H;WK@#e1(eme<
z^2J>4wYK}lyh9`G<MeALsWd7ZC9S;jdbnidPX368qUjl7UfU755UAd<HJ`?baYi%C
znI+nWaMS#gU*^G8l3n<{L4>slZ_&z01WR0!(`^0|mk$-!vrZhl#$Qg~4_#K|S>z94
z>%Zfs%VZ`5hNC9jDhcqLPD57WZ;CcP#@N=Ur?e;KfJ3-O1Yhz!98lWDt{~S!EWr3B
zS3pZGpy%itf!hu-&;Dhs>F!<wH*3&*+m&dig{dj)cD9aLu;4CkfOE4nG^3^n$;?L3
z>_eM>`!(B9!|VUx=+(OU&rKZ?@fpdk?44gaVhh54KmjSGo|7mDw4_IQ%eKAk^kV8L
z0LpR&?TmsEAY2tn<CRybZ@!R%bpByMj;UOjpq3O(AU2}^&Z0j3Cd4R~1QGb{JAtRz
zf@5UCeY}d9<L{u=w*ItXdX-rdOe7z1Yr#zzAt|c$aSX?j{5uQ-B9OwzKyb^X*171l
zk(uSnZoo<ua1uWw=ag9*n~z%d-GV+mcpf5a^il`i6)I9>6{-#ynvWhck9P(3eokJC
z9}q}#XvX!mSL^?}p8gS1$}Gyv_E2qrK4lGK`!(YB9-8putikrUx1tERF;c}9t0Mn;
zOb31^HX)I+Vj{9ZX4wGzMd!2|E8Oswl8u&vDHykYu{nKCPmt2G1g$TZyIUU+b~id_
zaoM+0qe(+xw_RwbKC;0lZ1g?H!W>X3jt&AKsKTjkw{<7*68&WNcoOdmx^H~y<%5)K
zcQ=bWc7k_DNwP4-Doi1YB6Z$=S<D42iQY-FNR{3mkh-ibgMO+2)%_!5zN0A_-4?iB
z-`d==bPe#!lZs;|WS;s_XR>dj!F#Q}AT;>7I4<tZqzO^TdTh$i6?L@tfd^d?l-)VF
zw7fcK?3v!W1MlovGvi)s+q*6>ndFV;8zt#hDsC01=#emA+P9?`e;SZ6rb}X!Jf3uI
zoi>}JBu^r5{B)7`Wg=EzYv(&{edM0_H_NPAEP;dsj078J{JV{TQYIegVsfl3sd>@L
zCz4eS?WvDfXL}Usa36T2urQc#@Vh{2s;W5awF{+XDJ^E)ACsp9(0vkGg>23!!oa|N
zp1I>X11ChEN&F}(5)l@3`z{0Z;hUz{#oaF)U3`eG5YIlJ&Y+!MrpTUXm?S70HsQ0h
z$CXy(metUhxAk+{keqVIvc)Df$5wQoZ9UxXxNU;$M`IN{aaJ9%*~h>;*HC159$&pk
zVG`BNzfkr-vbhZ#soM8qrFj+fAa{FlS<sIEllbK#p6{D$P)cXFOpqTL#UcJk5Sgn}
z?a$b|imy~<AefF{scGiBId>zyMlFVv3dB8=v-M+tK;Jka+)T^7l^MDc?(o{DFRNx-
zVWHj_$&mJB&9>v9Fb(Q0_BKuF%8Hcdn^k~?xi40<wm?IS1n+$D*c)upjsyh&zs5X+
z9p6Yp4nc)q4i;~Lw!hF7iwM_Z!a;kGVRCEP|4O-W7#-f2g^rPcTt5a8q^<Ar#za%}
zzvY4zY_|syx@Xg`B{KiESzCC@&7#QvM!L~|IjH|93d^y0-Mqw9`FJ*>Z<uF68qLhs
z@<h6ZMIX6z66Xz7{_1ZtHAetJ4;S_?9!n<v3UO^yW|e%VH$wQw3Nka6cXlo{IXf>~
z>^Zz$q{$$jghK*SS)u$NR(ij%wI$#A=vBD1IS7HaSzkluS5&H&CCl<Pe;91_gvk^E
z))13R=k)NtI_r^n{S?G`8~w7ro7JWqi2m_!CvzPi{$FflOD#Eb3~@g_YQEt@pTDn4
zy>B~wnFT%0v%5b~YE>hB5sG_zGk44g(M=K^D~mGgkCr>t$p-HPv>I$6_f3qNGw_}F
z^PG_n(cr61gLaj8nbOF(MFrBonTK;Zh{ugT#aID}y4!tDa=k9QP*QQ-IL`X(8<|(W
z<v&;-NP}UkwZ=>iVRk3rTG682fHlM9{T?`W5$Odmka7CR-+bOG;<5U(R+{N3N83n_
z$#h7mUf-FARH92T8hKQH(M9?_(XcD!MOY#~`EHsl2gbrmK(+0$LDO?p{ew`5evdXC
z4_!g^V4Q%+%>M~$w%c(B{+R{%&mQN00-TJU4;23wfa4+ogd5@*Db=DBD$BkI9+Gx`
zqQ6@T-O*mS<NKFQI+UtSJL+L!3Hj;;w{ALS3(7Tz2N4q%oI?G%V3QBRzk+n)i9hMl
zVhw(q*R>4iM*;laP)Pf6vW>f{A#~$e|A6Q&XGSl(2dk(;w?oaoSz?ZbvI&ZL%58@%
z@F4@Ty%_N>guowMd7WC7FaVazKs>&qL2-un`@<{KaA_7w*8Hi%y^-!76&mL_m|h9X
zA^8c6&ZtXW7Yy40{)iC0J<gyyR$&nC4Td5b5v644BL^=-8=>)b&8I1y_2JFjhE>p~
zSw_kcdcPocm+`i=K-bDnP2SFA>ctb?T9kshm~YY`9zd1BxLb-{mk2=bG?veumQhud
z`_)I?EjuAQY||e;8EgJs74&IuF(EqdU9@StFh~yo{tZsrRR+6NV89i+!*KSerj8EU
zu~k8B(y(OGtm!PU`@tw(y8}L60`LHW>u!+ZW8Atk)A2N&VpZXMZuF)Ag|h^A4+}tq
zaOX%%YNzNmFG5x~>G@NgC1#@qR<=Z0AM3m`F9C%|I_+3fcRGS~^eB8lc2JgISr)L@
zM7x_2<1EK>)e(jUFb7O-7&HdAIKxqT;`bxId9x(DY<Zw5ARt6ngG=*pWgx;B<&5eo
z_sT=(%h}V|%X7Ix`x(d{A8r}te_#=Xi>=70@NfIPftwq$R+7}UJ0MbY`!4+))HqhI
zUtYnSl|17y<DndhME~7ItE1v<9WVU0_u6kBG*LY%XgWcs-fs#QJ)N`A0S#PBk8R-u
zfAQbnK@&-eW5_fIfE<}1RI^6(aYZKBJT+zlFaz-0tJLJqC%R(jl#j5FfT<EmpRDzd
zt*AlQitmL3^o`_GxHtn9HS+L4%LBY%D^-FPL>(6|3bKU8rn$DAb2yKCG-Re}<G?n^
zP92)zgBW)b)BB=21Q4z)a4h9?1f25<dvZW<36KZQ2*gW#68MLgSY@p=a0rcIMDC^B
zj#usq8A^0suYAyMilqlt;g}bWzi<m+RdkAfLi~8E$N%uqF8Bn!(n=U;+uJJVKb{fE
z^M0WaDkG#<*lEuOFSu{nY9|?eMS!((j4i=x!37_K$uDv$`C`0*cTcc@^lzJNsM7SH
zDbx!WiOSP7y?2VCuhNF3?1n@yth3G}jlF)33!MoCFv7tD-%@z^o^&Y10V%X$HdhbD
zh2fkNHId%I@EH4EJQ+n@DvG~tb_{@uKFt?JrGFWJCtZ4sskDOB?PmcS;p2j6dwpYW
zwb;EZfS*rh;aHt@hXXWB!)KZ0e|mlubI04^uw|%HVcGTCivvv=Ej;$tG1%KeyX&}?
z=b~*5HJ>1foz&VXx1!dUzJ2U^lTnE!9y46zuvDJO_=)*^)Az!CL?7$ft#+vBXHr$3
z;!x|FgUmHGXh@@47wFHhaXg6r0|43#mfUE$y~gWGi)ZWlMv8Ophj@}#1sz_3y0HNu
zskWMF&VEIJa3GhrI2L>IpdXqcrLaKnJI`W_l7q$i$5bo+2w@T~Q^sqb-R4!w)#umX
zQ;emf_|wPjmjm3#BcaDfRmbDGC>Wk7y{joeq5$rTKy|iO#5@EAqX>ZC3NCApP*r8x
zC(oYV5mrB^-j2Wm9p-2*c``ND9m%ee1voy-D_}vP*Vg;@bKBt0zsI3~zd<0o+^lQs
z^(?Eq3xOQFe)P4`peB;@aUK_uM_sL{*Y5-AqfKYF@ppME8JPyT>D>fQ#+m8h3w~>h
zw0)#kI3?`r_LpPHuK`oZeQHAje8;<NHS==1HrRbCmLUS2y?98uf8#Q$htu^jiFIBd
z2GnR2&I*by-LX9AhXTHP+j>`jAOu)AmZ{3mACb^=(}5w5SRQh8tBM)V)q?iBd4;h%
zg?85UA>aGvUcHwm8%ExVX3_Nd`O8TPX^i-yfg>6n{T%7hkIkw2B5VCh;^P3sQ*X6^
z`;vfuGhxfUxr#-`00#uy&b>V>U<F9##S&a}n7V)0uwrcl);zSt^zc}U5_yv0#$Ha^
zav!7hk$u1bzQ5#h=DM@?PW-8iC15t|T0|tc&5Ut)Fp(M&QPOD_*#c(`a;H=fLQ|z;
z9GWedhk6u4n$wRN3?Vpd|4I(ORC6_rP}<VSTTy@aDsYQ^+EN2$r16Q;)BQKk0fskQ
zV;>u2XlN%$xUAkz`v737wcj)+wuE*Ne+SLN-R0gI0S}Y$9j81wd$+7d%yHWC!`X<Q
zRF+%Yf0Xv_p~x<nKZW~0>UM|a9Kww*UA_VQSev2iTOZlN?Wdafuf*6wGO}DJBZOM0
zO<`RVgGOX2)Jg^4L8m823VUN}oVJz=fIL}EuaD?&2SGRUw===nrK*htGKljRP@uM7
zy~-CFY_#1M+l-Ks&asRo9on+6M|o6MEa>t1T?DFJDHZ`x@mBgGZ!<`9s*a(Rk-i}F
zBYQ33KW(mXP9bCmxaknwk6$I(6&;(1O!@Cx;uzNq`6&q-){bg)24%jfG|6eUl09G;
z)@BOoIn>Op-Kof&eWwy?XiC}g7*=IMMI@zrx1q%XNhoEOwEZZ>E{Rh1CNn|nxe4?(
zt3-t$Q%<}!9_%`aid2KXHOhmIhK9kHS<Ct+!;8#i1|3DP@YUy==b5cjv2!Bf_P26G
zt6RgNmp!4EW5G}Ir2==}1}Ll6YSo&Ec|Yzn354_<a;K57=u(Ra{7oY7QMc9F=INgs
zRb<fnhxoO1@^1JSf_8Q6O;I>&ZA&JaerfY`+&x(SQMJ=|!9L(X-%GXUvER1%2;JOx
z?=Kn%aJM&{kmn)mmLu2lA=27@`ODZux!w;-NXQTk?LQUJ>EM6F4Xt|*Q%#`$c3#;3
zZ;YZ#&mv~8+gN_m`eyIRTU1Dz4^j`4rysvuh5cnSxJkG9*`YsoMdJktY(=ZVAxXg+
z!sseot3cvI{8^rkb?ZBq^x6L~9Tpk3O#e{{SAAP0_{%rg&~9Pw70(e%!k5fjT4$=x
z_eq{VB5F@<=rYXzbpMld=wkEhgNnNF$qpXYc=L)h4au9YsOnDjk#;Zh&+W)c*f02{
zzN@##hl%HVhhsk}x9#e`I5fwUUHN}+X^C+^Lm=+Cq(9P(bpNako1)V=gW7{;Ytz5`
zP8cdw*t+B1OXul%er;FiP~h9+<#sh+vhFWpX(X?s8whbV%QULD&Na*tMo|99SgrmO
zKbt}F5QhiSFoOhUcC)ovh;Fnv3#Xb`8=o+we8s+AGKk8#k&Y6g5da+!%^YIhzJ-Jb
zJt?r{sc^M%vz5=lba>UohEgoe*V=W0_Dsj~k7w@i0F!H~t~CpJLaq;5$FzXg@*l(S
zvsJwIoMdBfn)Yx~fo<oXqXqjw6!>p-hjGsQDaSHfSo9teqnxSc6g91{%$66roPFX<
zT&>NUUVpbr+cLVeo`bhU^D{OIfyO?w?wl|5)MlC*yTmf+RA!W$a>T>mg&|tvnv$Vg
zL}F;`(}KQ~xR@7czF~1HS$>Q_JS{^PLb#(@62!krJYa~LY3Yj}mm_McTeHt63vg~@
zCEpP$F&1zk_27p-7K;N|l0u1CidV0$4bX6^>BHbjgMZoNtQHObF#jMNz<1Grmt|~$
z@YaNAjjW%=l$-YG0oQWqm06c<F<ByCyqFX|ECs}qV5$CSHH#F-_Q0!qYTy?H)wm}K
z55OiD_n;J7J2;F&xMQ5*tBIPaw6I}ry4ZXgx?49KpWO5FWkHtD&HNCz3FRNLU$H1*
z(2a0sjU{zJ-LR?*2IwT(nIu(8V!LY#WzQBM=9J!$Ku@7cwuBj}q2<byHQkhGX<-T7
z|4Z?AB~DYU`^{;OHdLK}3`gb1ohcnWA|XhNFD4}=;GRH0c`><FaqAkBI4SbkEr>lj
zegpLIL8m@}qa1(;cj6D0uNQjYthQnG;L6npgup-W{@+XJOk#fLd<!C0z>+zBzAr(9
zEyuv$T=7rHuB*{Is)5;2U*$6N=yyIe!+wVx*j)f}=Ur6G!tKtr4~i4jss4PemaO|7
z%r?(6UAz^4oGth2mXI4tANu#<%BCWkP)Ht^7s*M5Sg{Edu(PS2tZHYMhGP#QzmnTM
zsN%#b!$ruVlsG&Wte#1s)xtz#pzPZ*>kqMqUSAb!fTRai4|`;M%{MX$*IB-C6$mxe
z!eA^lr)m?Z<yvRkVL)<z!&E3Anxq~cTSA!Gv13N%gx&*y8cowGoykU#zn40*sn$12
zDCvt-%YanV3Sko4)az;Rh+ErBe9B8C_mNrFGxqhSUZ&vF!MkBi*#DvE{x1fA3S~~b
zrc*om98D-K#3+++AFH5xN8K6@DZ1qtPyf6Azi&79pTcyj47G=3T<q>8MALBZfS(GU
zRDCQID6-tX=v4{E=VCAbjtZSM&rs0UB*)L9*9SqHnXdrPau?3Y*Akw0<}p<doFh<a
zo8Cs0DwY<n{S<!&SxQ430VfTRb*<tj4tT)%y3wjsto{B|LY4wqi%dS@68->{TD&fB
z`V8ubLo4WdN1n$ohgth9&_w=Gz#FUhDVLh6;3E9a6`HAZd_mb8J4m4Sf>f<uk^dwW
z@KlMLXX}IL_XCk-xG_<hjPfvq64z->$=44R_f=52kb?XlWj-}`iB#<;xi#p#l^&i8
zr_UVR>4%EKOn2i@YYp=Wxlylyq?vsH`rNZJ{~mPhd<JfJH|2lYD6VfmeCb4M$ZEOX
zR`4xbU9O=7bG?#qQf>YBavkI6n}3$;Y55??@>or=l@Q%K@&U|iLTbKXa`>bX#rcm|
z+c?R;%m8Lu6Y@Ztp$wByH*0(ZY&btwlt?e{xE3L|HCkz4xTcfq{>jSO@DQZiCd9i|
z!n{k-13Ucja~+djLz~^27ZKjt(q`SvVY_~GCo88-4(wMROt}a9CHEiYKc*-|<2ONI
z-o)NLms5wvkn+yYSwC44^;TbhyouJtH}lbcdy~)?nGWM~(>P8XiAIz5B@^)wo+8Ft
zEaDtA<{{?FI-8+Zw%z0h8(=`Ql>Borw2|DGQ%LLno~DV4B>8a<=peFsTCdV-{^F6b
z6+QbN#(yq@b9(mqs=htb^zGx3-OF91TaI<dWhLnTz!Vh*SW<ug?k&4RK6PHT+=#PZ
zlt7Y*n{ChgXO986#bptW)&}aGx!J<$h9@2+e4d**4vC$?u!9zR9BaV~YcPEwT)aGS
z*s&NWZ)z~zVMKuG{LBUWb2{doO*$XLyigPA@;PJWOgvd*mvVyjcASMuJ;7OcB15%u
z1va*T?aD3Q#sZDz+ZgWE5Stuu{ny!)5q1>lh?l!+=2h=gLhljc%R$-Ivtcm#-_?FB
z+kdO}%Le%cdpVUY2XhsI#)%GOdJN|MnC+evSniuzPklfHa}(E<L#H|4b6_ALR=I`z
zI*}#^d@8qwsLtX|^E4>05@ID)_g&9{l1jnfObSts&RyM4izsldp@%*R0*b1*dTl#I
z*p=t~)ur`Xfl=C@1~pi5iHvvO$K$M1A@<>=Vt+QaY}z-3L7BnTZo0S!H!OAG>{GG!
zwJd#29klz(Ig7DsRaQ%Lglc3Qe^pYAoG^C$eo|rxxe5yCViID6_zh2*c{y4@{Mrf+
z8KWG#PWG-q`&7v;%thYwo~b^pG=_fJ_?8$6*N*tiLsP%o>irY;m~H81v0DgNb@gt6
zbQ}ehO4a|n<bT+t{WaUdh^`yn0_;H=?l2Ynr(7o6Em*c)AdV6bpa6tlq^+dR4I}cF
zYkU<V;CgL5f+*jN_OsYiy>-OI;lli80$1K8RalIU!5&Mp={l*K6rT6mjeAK$Of8`;
z923K!SI(=^I3egHUPVH-ytyx^FD;F$As|0e^;qrwKazUs_(LcNL6)4@jT|BFzs;Qy
z1yh%da3QV(964*$$`Mhr2M#h}Qt|X#Hxqg!Nt+@rd^y+wkdv-AV%oVUZdx}~0fZ0?
zmYj&l?__H=--%wzL++p`y5db?<s}Hsq(z24){TE|8qzV3j;I`}?}~Fmv-%n7_qu`t
z&_AiLUt4V1L=Nm758C~Q*?_91*4j<H{FWi1M7bE3$c7-G0eR-|q3yv;=zfiH6LWKa
z_w2??_Xd7yx8P;}hO4+jbK8-I(s&5|_AUTUX~1kC7kwzXUZ4MHs8PgcfxGg5i^WCz
zwxLUw%E(B_CVO}XU9*gSzh^N*JU5q+kyj&#q|Q>SdZisvkPGvtu==QBk+-f;svGNr
zSgEOy#SBunK6|92bpI4j3}g%xqUEh@9Hy6Q<6(#>Gj!MMdz+dIXe>LYD3zNzZ5e1Y
zoIzq~MYSc)RTFt-jeS~O`~Q)@L$w>c-n8z0w*g-$0v*DhQ=E`Euxqut8BFA=oX5Q~
z@8H6G?JdnjOX(foeitH6G@6+!$gpzejU6nYZn?g`nTs=$fO$Ljdm%`+uwEo&^z-4g
zDP2<G`RyIuk63M*J4KOwsR~A?-wBHn&Q)8!fqq}crMXZ8>|^LCv{|@<pUO(C)dO4p
zOne3j(3|g|g&#tKe(C+EMM>|;eD)@~QRoE{erma<dVF@eoP4<$nqd~gUER+36EABZ
ztk5sIiHWtV_x~z9tX_V~C-~&Cd6mTQ0b=2(eLc+_vsF8Q==g43o<4uKFQGG!{{N;7
zFDr}Q)W5<{{ZtP^2J5n$G??0TLNkns&+xAa={aR8IpgL)Iv+lN5%w1SFWIJiyWd5K
znY%$bi;E?P*Ni^6f1sp(?(FXUhpI~16Nhc7r0uZ1*3Dmfhct$Ud2p6*NzlX9g@%6N
zpFZtJgWONOPTW@f#<G0w58D&HvX%pM5W0!saQvfdXJX%n^?p_(@)s@{ZaO%;pKQM!
zh}Ldb@+Eya!CgCTd)WDQ$}W9NE^QFK4AHF()M&Abu@?{i*I>~QMj&%9;k(Im7SVw5
z(qh2gAv;tj{?~&{;ir=b0Dw3ur^iE7m^ZNvHa}|(*Nrvq-6H0(dIHf!A+@lbN<JLs
zQcl>K)VZ})Q)(&1N^Y$>`@Zg_9NpYx<mShgm?k56<MX?mUzXSkl9pKif`j_N&&0!L
zGfTPet`7zD3KSvB=e*7q5ZbN^8F8$e!;|A)Tuh~Kb^nx143t#No`w65LyEf$Ym>?C
z71YJ6xDV?rc!vC2@8*JM1mgy&(_U4~b*Zzcd{nZTzX`&{sJ~LBq#mi7Ga9y4<k!bV
z3aRvXLx(JPMXXwt>B;ZGAIS-6G5IoO{G+7vrwUUYfMek6a;<|S4qHt>oY^u{hD9On
z2KYtsC*8(QxK%TV&zY9%(#R5R%4y?^<D?fE_iOSCEVidXmQYvELiZjQb!pZn`FrzX
z9W{HwK@3gu^dk8Q0iD10HId3Qya#KbAqHy>?8<Y%chIYbJsLCbxobqh_$`l$S7BR_
zQ8#{JqRbQ_X|pKdy*PSS13%yHGjF%wUGEp<j2GMsJ>SF^)Emu`{d<HcxbEL0L|Z0!
zAN13-2PuqLSr;qjjJev*Z%GITD7t<#Q3N@QBRhbZ;#yf^wN0Zx<wf9NR-@7<jB2+`
zb=PY&eTyU}pa_GZiVgL$0}X^!ZsfopHN;{W8MYy=Z(X4jGlDzDg7P;zQ?iib(k3$Y
z5D^9T4GI;`Kj+`Es7$8%j3NVKEUB2S66Ex~Uz8gq#n}hKBiNXd^0ux*;A0b@`3(8L
zLitS&5X-_pHAj>4k6k`u?B|W?35+VuX)!7chfN>@u%U-Cv{`SB4D-3JD2YOk8i}zz
zalo&ncrVvG{nc3m2QJmKA-zVROB#BKSFB2&KN#`rUG8Q2j9q_Kd;RDl9W<xMx0P;S
z3HyTrOOxfs1z;Le%;!tKZ1vul?!Z9zy5lIb?zOmCXyhOL`-6m&ZbC<yM7{Q;(c{W+
z0I>F}cA+aE>{LwjNn7!t(Ic~GZHML;q}_*)o<OWSZC|0=6#?+`f4l3U%a6BEfaMPf
zBCU?;4*n)UClX3_M}nk>Dl_lf9(2I<S$KM&ETP-_%DHv{$Sqp8>a&@I(oDqG|4O(N
zE5ToILNl+*@SZ0M3izw#M{6`m3&w|I;(cGw0mtIpT7$a4K1$8F)F~uR1h<deV8>ug
ziqdD3UMka=6Iml)o13wV(KFXiG+l05{0(w6uRcZ5%P$R=P1_|pLgR#hQt1F5?v4*P
zRzRh9|8yx<wAa0qT5%lzmF!rBvPLb;k{C<{FxJ#`QNnI^)eIwdj9a&&RO?@qN+E8r
z_DADaWXQa_iWM|hp|jB++r~d?)BY?6n0>Da=GnZo-g>*qLr<hD&Ok#?ao?$yqzjQ`
zb1xhU3iio;zAKxIY#TAtodyvRaaonV0U|Uxd(LEyUP+~OOZwCnq?7yn<}IvG+NO2&
zl$$mdQM$`(L^r9?!Vf$BMRRdNe0!x?wsi34KvJBE2#)@#k5SVSHu_NNkT#}6q-8TZ
z>n_F!vI20f4a?GKF5$+u>(6X9D~SvXOEo2xF0O}V|C!?``#9&$IGXo~R;95pQDq#Q
z`j1kd-h9Q<fSCM?kYMpnGbHZ**hK03*u&?0-$m@i@BKWf=k00MHFjcy6tQEyH8U=c
zy2j4|mnLdA$-;l4tF(*xPrz6hz=8My_!DD{&`w@7EO^y2YLlb8O`lL&w-@ARwzqo5
zjRL!=jKXfDCdY(0tg*#0E7WahqVc)m?~f!Rp3S|5<tB3ZbQ+CJ-F|HioTqH7YbP%3
zf~~ZGsAFL6wVw@)K94?%=q6DX#p#&NO9BPJ0Ld>A$k}yN5q6x9>@2^}FSALgK`*%7
zf*}yH0$;2260-(>M2P)9R?X=XVb*mizgbIE2i3tfI$4V50s}cU%!q&6#QTxnJjI{0
zr(iERaa@MhKwTxy>TDJdZ|ezy2k4Dvmau<Bn5cK6o~KKiZPI&>d_qn3sBUqQY|S~A
z(8XaI1-AZbQagP@FXT+yO|G<ow_b!>bOi_&;g*7y(Z#udxqRO13Y&SqO<1m%_oi?D
zavrW|AbrLoX{SD`fcxdX(BpFXH8UXiu+0p*Y;C{rTyDR;np|YH6}Khe?hY`d8okPO
zt}9G^{kyVHaZh}(in%E1<Mu*uM%c%|!?7j`Yv!2rrTqb$oC-`=`W>GcRpjGclcBZ^
z)Ml-(`H5QItrC4Q+kv}HBTtG~kCgi&|Ir*o_c2X$#a#l$GO>jOEb$t>xlz;k`7ns6
zmpQ8AJe7&(zjqxO+MI@3?uZ&(sBf!}RebY}mE{Tl(NDzfH155tdHoA2{o&zN0D`l|
z_>IS?meu8lDm|;^wL6X2S;_I>p<GDlyQAsA%J-Sl`|fBSd(t;cfDk6C{Ryt4)EQ*c
z2Sw0VAOHzg;C#bFzhS}IgY*v#|DoG0zz<Xevx^pUO)r{BM7)Vd$7wPl)b+>S*r>AZ
z2u-A8mn6nR|3M3&0)B>4-U~ro5JRCAiW{Y@c)&i*fCYya5cV*iP34-M^=fnO!kMQK
z*v|)mZKvkZn(?E24#>yY82EL+e!8V8H-7yeWK>rE+wMIUuoicSZ9rhw!{v}i=E~q>
zVK>1wrCQF-z%>^TvvdrJ&U#BidRME5V>zqSukNI(ot&4_3A(M7crwuDAzB#<V2{=X
zpyU?}8@>Vn1|1b=72dMb9lG-vY%7<Y9oR<cUybjn%~@jgl8gmJIoqvE?jJS(_E|>D
z+E~IE{!kGR=mIy(&zO-b0E@x^kl?1(NG|jom*b1)%*2Bp{i5R-Rv4MBT&#)2x#s+s
z-38?S?xvkVm4$rIx;#&PvZ69UcfE_J-d^{oe0IM0)(@A9cy2TQa#G}r-Kuk({UfP(
znU75a5dFy&3hYY%-+UA}+AxV@F$g-vbncDb93e}V4v8vII6-n$+#|PLUWO74?yS2=
z;+O`#_fhze$^ZNR0?0jpzqH!qkb~{$mOq=g5PS{u0xif@v&OD+y_W(1g3}o1f9w<}
z&SAjR^NUqfBc(7U`_Oxw-^zgfk?^Ff3Yf%+@<V)O0o_$WDeoYwgRd>FWx;|Abc`4E
zq@9EpfOn1z$r>$dNrqdAi4VJ2_fc7K0Q41gep#KSK@l`1ZL)X9OC0#&A!A0b9=!}B
zF4=A4ay4v2phPE`#}MhXxv9<1a&7K!dI-lVIE6&h?Aaq`KgRRuf9X3k!2xG%=x291
z)~0Rj?0jd8`0-)$=f|^wEux`@<p`k$dgJbJUPpHlx)V=}g=Tt!+umbpCk5YQ8a6GN
z<Obi0K=77TutHgt#oN>-L}ijK$}BXpKWQ#vWdCjK4<v1MC9~is%ejZG@b(sP`ICas
za{+VP6SdHl@9sP`vE3P*3unnc?V8uiedAZ5i2v4^^izRe<bMre-R>egOcmuCcRQ!{
z8MsqW6>&$>99(Nh$xzEk{;)atX1gj#+&xo-#-4=!@-pAtj^0<wVQ@R9NFF3+Yp#NZ
z!QP*(#@W5%CkMyLzU}W|qH+B?FImUy&YsbG6f}2cu=<l(hWjS+;fIgWY6H^(x5;gV
z#s+r&Ba>BoS5t}&s@;*WcD0yng}z}3txX46;IK38?;DQT{PpGvo#T6>=Ax$JrU~Bm
zbZ6zdvGMUN$z7@U3OtF)1orw@9C?Pa^3kf2wixTOouOzqT4<AtN;>J2GQ@O^4``IE
z8Fby}{@JyTg*Gm9TvzGQ?>}=ddpaj2`wg2?A)c$N4~r)o*z22H>hKQ9EwpKuI4W}J
zHHPTj<4b;5aTM1ROhYJCG?^JvuTxwoqUx5_s0cP~*GXI~dAZXwtE-q!(z51P`hNaF
zax@POj1_(sj1kbl?}^BmT$))(zi3l4tRJ&dUY{=*<zUFf3$jg3s+);w*LIp1ZvEMw
zE-%7R7u(-M$im|J%~dB8MOLd-wW}$8aMej&ATML|R8D;4@>IMlspR!ZL&E(AJx{}#
zE{AnOSeqD+R@4Ud3XkI&5aJf`W{YpXd<FDy?BrvxKf@>Va`$bq-nQlZDD-^0fEcov
zZ_@j2gBQCg-&GHfUV`cM2=M1e?=&YK55JtoXfQ^UQVmM;3khL>_*k+-Jaj!$(=(8^
zkg|2@n)2GhdJRO-kh4KMcg2SY7lh6yjb)hv&l@=h*vX%<jNe3%NcR%2Ta+qFW@9(v
zM38)IGmqg+yHmsPghD{uJ({lnv?t!SI4U$raZ#i%SeSC9(K_SW1hVLQ>bDvtw>3L`
zAE7Xmx>4K|fPX?2*j)b88n%&ZRNx|l1R;Q=AGs-$Hwqp01NxRr@DJty$Tn@xw?1$F
zY$(d!3;(l^+OemEp6z9qLw?ineSoYbb{|oGuNThyp+|*TT+I10TggwL)FFwp)Ps;8
zX6NwbjBGLZr`J7dl|<M=dnv!W4!Zj5pM=F@cFWAJRO$qAs8d_JMQRka(Z9^epRyr;
z7!BPbD;)0HkZ;vx4#Sr3_SRq!wK#Se6?8yq%q(mxnbs#?oX#N)*B(<YM!PLMRHD18
zXp6rXYc%AviX%Z-4>|t0dWfi|&#tyqI8!{0R?ogclXupG)?}byQAl_d#&U7bv-;3B
zHTH7q>k00S6*qnGJ+2{YAEqN+HNo*mtJ#T~K$9#tP+L)@pC8I_zVw#O%lqI?_X4%P
zouOKg-*S%=)JT?Ujjk5f_{DM~!OJF+iaBBCGNw^&@T9fop0vN%t!?k&cJlt^{%K<C
z#nuzl`BDMy!3xp+g&AiEWov@_+S8`7Ld8>Xo1qpjG{hs?3AY|aj&`@I>NSAE+zXxY
z|8e$~VRdZVwrCLogkVYVU?I4>TY%uM!QI{60s(?2xDz}CcXxMpnYg<<uUKoZeb3qF
z-gn>k{?1vmz8a&~9HY11TI*w8EQ0icW~(~s7G~?(HmI{8Ux7`vIjMt2kivSyiREs6
zJ!0K02a9!Vv~ZNUE{hB;<Tb9uTI{Go{*B~81vM)jywhg%1=d<bcU!(zE;MrJkQPH6
zWDk14T$l8memK9D^6kQLDYMnZ?v4vT3}D9cQP{QkEIQ0itu=K}Z%#D`fAfO@(L6`m
z$4-Rz=SlvBqyP>=D$DKA969i*WRJmCQAyA|#@^MnY@>AYGly6-(|b(x2I&RHXuXe(
z^Kc((dyGP_I7Lw3_un{}P6Wq4@zc1%0n5KquRrji`=+r?FSm?b2G8E7!hiC|kIl$@
z`Fg3a4gdn}V<ObF5bqYH;c)k>DQ`Rqxn8!^eC8196B<WdPbS6^XGofzv;g8%7TyV)
zl4SV1q3JMM+G(3!WVGS2?dN4WZK!Ocb+=;bPj~kAIVX1d*YkAo{q6|ZIVN|+!0ti!
zOZi+elKrCASEusp#XGmgG21{Gr{C+SrnP+a{$jlE9WMLy>T;j~6HQ0k<z&}n`L7xj
zhp@m5BxsQ;Y-^^gW>C*}(s67MQ5_u{vkf<0X*_7`48B43BgwiN7o_K`JXf2K_a)lJ
zW}4U2%_OXLq)b*@sFrxgM|pk{zq|<p>hNXOa<Q+92owzOB&^t|1Mo?d313O(Tjyqp
zewO?am>eD6)Fb+#sg0q~!9ky>Y0_{l?>7Q8AZ2x7lIH!6wr7&%>XT`eB>;qmaf=2f
zXmQX8>-BmpW|?;Hr@?I=cg<92_#~gDYz^VNeLW{*>Q(x2CQnS7(~md6L8<425HXdu
znQ3ms@fOKnFVAlNB``pg6J_q?DG~fRiw1iOHOSFSYt%_(iD{PQ$sh%*If7N~v@=(W
z(=ijMOzr!elA@;;`aREXm?mc}mB`d*F&(KcAuRBPE(HW@qd+5!#5XH4?&FFIqq=fx
zE>ua<6%7BY4e8LCx(xaFQG_5-c2dLs!X@@S%Vs-k?l$uYHW>alFLfDFSxPAlKgY>Q
zh5S^>_%*f??ZB=a>h5`{%vtsJU4IT4zAC8As=N99;nk}2@ElzixEOs~b~!cEltUbA
z4`cgr7mhQnmWe<Rib}As20K}S^|l=8SRzWfR`xDZnJS6$YF6h*fq34n4?=;Qy&Bfp
zg6&$P(O!WmmdGIE9{a&GG5;IA&Ii=YNn{Nw$S}pV+RSvXsB6r-Z(9kSq(RXO-Oc_V
zrrZ6E6E*a>`RY!t$N4-S7|qMy)b_da_in5gA^oz(Y|x0^niUs=9wSgAns+r#F0Rm?
zPt>q<Hdl|zx_Vf&BZ@y867O&)g)8hUvVx8muPr(uY}MTU^Q&K+Zu_j9L@Mbe<dpr|
zj<9u>Dnvaq%i&?Mf$?gKE}0e+FrHE<E%(;~0#Iy6da|h8S%LGrY+IZ`s}=ahL@EkT
z0Lv-K6ZkMCz&$EzY!-|JJc#pe+B<trSXnxu&YKA`xTd8QOiBU)SEIuDHy_XNQ>)}O
zT9K-?!qJ6i*ET$6zl5JGSzfrR5lB#M8Vte$nx?w|fSlL`SC?VpiF0eDt<K#SI!X*5
zkl}DA2$UDoJ;IV$fcB({%6ur`JVa<HZPW9!ee{q?vzFDRC7@|#GFlP{<9bMEM$?Jt
z#_`Sp6>CWF(jXfJ@UitB9;LOKR7Cwmx3Q=3mEhnHrtVH~hNIYE1$lP1bHHuO@CdM8
zfI({dx>|D0gCdmHCK=yETz&6Hz{b>^=AgxuEx``pVhS(yW}Q)!`F6D$(irx167|q3
zQ8*|t@ft~3KQdrw>Jn)=1rauJuz-Ffzfy+d_|=zBp>Q0rPN8QJSFgG|t@%|wE$xK(
z=n?z*nO^=D9N93U>$#ha%n9?eHdYjy8(cQ3_T1F+vD}^WAHrv+5xugx|24@WVWk;r
z%f(-ul5FG+{+VJ`jB@QO4zQ|GwVR@f7E{!WsO$Q3S<#qyUN<8SH<}#tSZ10~OROEb
z<l(2?F6WL5zKYFp3NLJ){X<2_pyV;5T(5Sgpt_{)5Y?uP&oYoz(>UnNrKbLKBd1EI
zA<YnbVP|OCPXXad>;<TM+@n88WvKwV;SqJLkm_hU*Evw+%vY1+SkVk8-c&@j4IZwr
zB#rK%u$lzCywLmETV?^wm$g(0Kf&O3zcP|TNb460SLiQmEi2f%XvZ6-)2Ni!AlIy5
zePy>pi{%N?aGi$Ne%xGF8Of)wemC<cKDf*b?8jh|gCx1GyTo>M7P2BDOh@)KqCTh<
ze^pL0Ub)G7)z>||XWaR@3IS(mO@eEFr9CN&>Ech&i;l5XQb;Xb+RE+=?fajlI~Y|3
zQRYSmnEF?gTXnzW2q=uEw#dw14|BK|?jsCcd+!RD!iGt**R$D6%#d9rHzkKxY2t1*
z+IJH)5}-L{xg(6-B3)JKjlS=;)f&Q#^yRnySViyrV{*tp>hy%%v-InVbiSqK?LxeO
zO=!AB^CvER(=eDAY_^k7&}`r2ufU9Cvzb2>=a8)BVuQzDw9vW4Ubo{GSJrgzd1S|Q
zr&fi;?nNwoeueZaW&awheFpt~s1^hk@YIIO?RH=7o8K|Q<Ef=K&jDLntYt;Oq@=^J
z+g^V9#<ZX1GS|zF94aQGV9nxQF+5yYR4bKj>+;CLStnH2V1MK%&17b3d&bT{Mz>$C
z5-_GXd8#~l+?Az&r3oLI@tdf9wrXid6>*EhwkmP4t$aHLe<Zi!o-p(mc`)}QhUC>x
zy*f{?@U3JXA>KXJ_e2!IA0wu3E5aBjn8#Nx%eHt4<{u81tVq&g#~jCdZH;H_s`3tc
zV+54NmEDQAlHAk=UI2((WzMsSMlGf^&EH`#mdPL_W%D%X&h}O)-N=(u2K!U=w-~+j
zQDFl06y0A(+0ve-g501~E+>=_#iBxxgJ)?h^3$BCb0KVJ2MbYfi*0M?FX$sPde)q6
z->lcw$ew3EZZ012J^0;r_aim^s&>by$2g`Z=HLhz;HgE@P+8SP>@4ci=dPuTNS$Ix
ziV4^WBhmB16qGA4=D}E{2k0HzGdNKEpn%@a_JvZBR75G95nkPx^qz9O-^kkRhsG3L
zsNZ3fLmS<;O6tOlA~rjbs`HprAzI}zW{q2j*`Jr%Wzp77L<I8BV7Dw3rt7**jj<*1
zJvFH;V;r5CvEw<<O4B9tqPcFbgJ{2?9S7x&P)f+5^~31x(fYX3aQBzU{R~`Eq1<$4
zKwDeAPaphja@)#kP5p(^P@tPY_mI~t;qX_@<~~cVA02;bL4W5D5QUC!=&71fuIe-m
z3gksEM^rDH;$*8Ynxgs=!?4F@s0{DAQIib0qk=ZwQxUzdN|=I?XnSis>z|HjYW4|h
zeqf!tV+Ci;D78wc@mQK6w(R0S2fBw5F(4-GYdq}48f)MZh*=b+>0-buuzkI})fjJv
z0d(?dVvb)Pxuq|1E?`?`7a=z2GA!$o2ZVfY3oa$AMrmf+H|r{k+fofCCYu(jni{p4
z)+B)Uk-HB_(^AO<quAGJHjFJz@*<x$_M)Jun-yB2zJmg8F$0XJD6bqPIw~)k*U!D3
z7evDnp<5zsk6Bue?L+NG>B|xwWBy3@$CgM6Lpfp;7`+&=x+8lNOtpR213ZdV@35Kh
z!wvoV>FJrXlgpuW$hXc84Vb?mtGA~w{pr6OB2u`Y5vQQb?J(ePNv|gA!VG2do&1^f
znO(tV)$d`d{rqyGUhqM<95bv4>q2CFxN2r`>|uf)11a}(>^dy7zfra5-=I(^Y0;D=
zDS^17vm`!*ww=GY{EJms?6Ad(ss&4058~>IikeDSA++F8mD3R8>&1UTK^Z=r5D*Hw
z8c!UhXBSrX_OsY~@0^E?L8QnCG3G_rSCO%>8l~%L>1vepP;5!jWJFBitnl`!HY~ij
z|8QQ6p}3SgLXpzFQN@sbH2L_MmTURfbdhm&P9TLvw!9hf$GkEhKJPV?iPKWKeiURx
zsls7TeshZ%a&*rin=0JS2-ZGXQ%B-nV;201G`4Zs-bHWnpcO^Ja1_MC7zs<6h(Pm=
zdt|Dhn|H`?5$^~r@_><It2iF9(i&7I=Io~Fl^P)>aBXm^j+RW&V<tCTTVwnFXME6Z
z^;eQ>vR;1B=|iP0wHCz$8&ELiC+qgu9s&U0`~dnpQa8w}+SH*m2&T8lbzIt7+I`vW
z4LYB#BT`L=UhHg;v=+D&LRZNB7=PoDL%rG=&%Cwb{?gTd2y#`~^!v$MTSGt!M1oov
z1MQ_oM4HcVvxxS-2?T{bm4-)#Y$F5FJ&sO~V7Co0i{sZCxEQeg_KXjUnf?<nA_-|f
zUsG!~&2(#*L=dj9XE=p9AnjnguS?q;n9d~0;xPG&SK&eSoceKDsr5e3?BXlIAg;r#
zhF)o+YO_t%i<kUO=zqh-H!lfKwwD>p*-f%*KD;VTS*jF8xAiq7FKk3k<X>gfN&WQk
ztfWSvaN7A@{`7%cn*|k((9_|dq2C7x&6XEr+IIe`n$K2l9p`v3s$2W<a4mw*+oN}!
z$6I99jKsavqM+v^yR@2{eQxW^qeh*!{QeQ^&GO<pWDp2f*$YFGjviKzmOL--w4dgS
z@t-y}BkmituWzQG&NBO@t8HGcz>Adv)n$lqja3>mlssufacW^5?G4?vq3QuS(e|pU
za6ka2KGe`bR`=Q9W_40XWL0YRdF$8o1N8D69{XFm%r>r5r=k+J1jE2(rj74E=@4(o
zk8*7LP1ZZ!B~XGTWCwHZ8`>2abRlYjMhNbUO>bF=B`ARXHyLja0a9yjF%eMt{%vN%
zw5xcz#tUCmrl3hL!UV1O6cb^81}9B4HV^7Bb>Upq<T>(Omg%V_8!d#i0FB`Ri<NZw
zIeFlBizd7MdFPCy*ut{P`@pXpi>Dxr4AE_#-|_K#P$o$$b|m9q(9mP(pJGB{#XT*g
zZs)J};8Qi07kYa->R^9PF;K25$wkGGHwDL9m4d<vl{yU1Gr3-Lq2kcKm1Dd2Yx<`|
z6pdubUa6R%S)m;*oy^f9me@~v=0U>5eJuW>gfk&XwmM(KP2*#C@M9&+v7)7S=R-si
z#2fX|#WB->I8D^wlq9XE%F;<+K|DJkLva+!=NVO{sSf9s;h`FPLa~K?wSs>0GH0^7
zUvsd+gqBil=l5G02h3Op$}ftqnNl=97ACT<ZO*iNWLS_#y++)-QB=l>Z2BE7sVc(Q
z&grqDW6y=Igt*XKOW(iG%6US6)TKBH3;3#^`6PY`005`6rV(72bp6g@HIZikm8`W8
zsm5bd)X9npFDQ99geVPybB|$n57T1GE(GHq6bYMBNnb97?G#mAX%Cx-@v3pX{wx><
z!fa|mYVKhb+lJbqk+$vx_j2{?7xBwR3*!*!5O-MFf^M!}Z;=9V?4NSMI}Lj8tO#jy
zh?#hU3IHFb^pa|gnz%icilj_9dd2sY-_3DHEs&uA`?F-h{EAxuP$Q&86Gr_)K*#$-
zT*S08K1Piv<npyS8Yp{|-OH0ii#yxV=q7F;6qD=@%e!yO`a#(_%e0>N39R#^(B1Mf
zxkWskE=4F?9eO`rl(Shseb>4jKWeV)!%<wPJc1#Ki>hb!Y0^BlQ%yCdB0&=MHVL!X
z$`%-Z32aYSk&X{Ig1|>*9zw(B%TXNXd+49z-Dwi}Qc$k$fzW4mnru-%6ai*innG<3
z=Y@|}|Cj0D7sIj0`q<%Mn?o-dIG^;YYS4g-hg(waAE3G?THx=J@pEVb4F|Z5@g3MY
zy#2kHFy5au*zg-~IM)Q_uCY_<lTB&p`W~iyh~UxwYyIS9`-%{Cuo=OK#0}?{Wf<pl
zF4N(t!O9YU8P#5disNJ@UC{=JqT=F9`ny|$h>UMY5ZTx&Cl-+KDDAl!Z-_AI8%B_)
zs!iks+ZkAbXsA%+4|!NS-KN$VXN8%4>*4lm*v9r-qnxQqs9$uL6TPQ@!zoDInV~jE
zmwUAmOsCq*+QT7^Q*K#rP3QYn%%}UOTc~Ba%_Hx#{9#(2(Pd^cf7nch-Xvr5JJ@4s
zSm;3`WvuPVxm?8RcSSx}D0b8bSXW=%zCkYwj86XtJYanZ{8BZVE&ZspJ9ajVjQ9>3
zYkK0nNs4~DB_(?cwqSdKqrrl-$BlHIle1X@f0Vtl-EVWu-G{X$ms4cqJMm%m{%&KX
zcqjRq*-5hgFlp}+ekS7IYb0bz=DG-Jt1oD{)kUlhb2D!&)8=*@CIYCPrGOTd*w&Oo
z4<7c5QBTl86m5W=GE^#Wx$*PG+VP&&TF;QQeXHh+NW&ifT+ff%#I0q_hv9L%Cwcy9
z(mXVlQ^e^`MHipntOqAE-8Q-28GGLmZTCGr-mDpi&+|RZU-?^mDLoW_xnG!EFpe!%
zVn8>X^k7^Zk;IAbX}?F{Hep(r4;C`V?RMqR76s=%sFyy?Z~}Goe&C0ZD%oKJ9&8}8
z?G=n5v`?jW=wg2IMda!#(J(YgoK<1=XNo`HVJ^npRC1Z8Gcb5N`z>_UX%-NsIS9IK
zdHE4xJrdk^<VGsyYHj3GZ^o+}^`tDa8D2Nj*oP5uak<mkge<*hW?b3F-`)GzQ$2VC
zVuy{J-iT!sf@*LZ@P1HvD!7@QhIn5!5`fl+Me2E2kWRzA_zO(944~<MF`;+!!~xDd
z@sjb6f~tvAtfoez`pb;wK;MY;d%oMRAe#6}@HA)fUvqbTC;(BaS~M<>6LOp2Zr9y<
zl6+JIHz88knXWs<x%-S0sM9p<nCPtV$#SR=L{e!AM|b;fJVM@N)og9&&tQqkp}88c
zyDR%6Wm^A4WKxy>E4@#{^uws8=a)xwv|xT%pyAd+_01qZT@Tq5)ck4gZy`Tt#l_8w
z39DnC2nB+YEeVOLG1->#&9y1^vT+q$4=E`&JS#f)hWPZHlsXSLrJgk$82%sTD;}em
z-g`*b{i8w>64nhJySVB9-~h33nf%Sv1z1|@6WRd1FKY~`3vq@>K#PU)`y95|?>Cx=
zLZzt}D&O0ImJy_oO>VH$A2BA1eR!rnRwC;!&o)XyJPbyhR{xG4kak((&Z5^^W4orF
z0HB^X;XWj57Ij6B*6wx>#elwsk$N@|yWnJV@*6H%#JE<0%^WW<ESUSeOP--QBpnNL
z3&oODpvbkEd7|>rHqk1z6wdH)<BUe~hu(tXw~zjcd5Uj5$IW^2+p6Thz%G?w9fNlk
z`mEbI6E%MptTEGOL9PJyMmp4INf~X!>MWzh-0J|yOr|#U5_VMf!ZyUSCBLUUlE{1t
zJ;smyC>F3btwPW2>3~p`;UgpIudEuZ_jguLms;Pc{64tTe=XnmbrY~?Rw?x=5^Y%p
z{60VZ)o^I+5x4e`oAR_i#VB7TWxNb!tT+Xf)Z*6<(?d7HsRZ6PlWCeoX%FiWY4?vZ
z!&dhfGTi5E-uHakno~7rC934t?@AqXq4_+Z+oQ`(<%5OF{0*_rIWHuO7`?8Ie_N0+
z8gb+H!^Y|An22*2L$}BdZ7uei6ya6{2sSFkU8RU@MwG?KYe@(7`uYf3i-Zol24l38
zfiMP@&~6qAuF;97o+LshMQz8+3@ao+!L=6(PFO~PvTId^)q-U{!=c;ELdGBVxj?%;
z+T1u>2Mj~_5=z5$@^3yHy+P?7Yh$#+!*Z*xw9ixR40OLK6uCLinW>9Q!Q?Sga{0Y}
z$QRvV^XE-BT)<Rcb`>U)esc!~>~R1=))8&QBOas<dSn(^qS95@#^mjitiYQ%k)y(m
zvdK{|V^$`y@7-;Bw481TQiW+7nsn+vCtK$dGkI9{C65z=nQIAbiZz<qF8UI*BytN>
z9Eg5~tl8*PZ1^Gqz{8@$JH67d&$Nd=Uq|;U_D&~Kus}&5Y|hu5!%siVw;FCdPt?87
z%F~{%FAH(3J&uydym#}`JPIC9+=kHoKR_I3%rZRE3h8Qczy(f;{Yc}>)Y>rLA1^No
zC6G7Cwu9KJ7wW<IYrU)u7@EHl`iou>(j2Bn0JG&+r<{VLn9mt>(fi=0=MU^AWzV0l
z`H}w*15>$&?O8jBvPYC~5rz8LNNi!?uF=yzvN{_?`yFw;%O6c>cr}73br2=L7D!Cm
zu_!Vi5C+R*8pGT97M>qo39OE`8cMIH$E^B(=x}n2Q~j<Q^^*S;pM|y_VWxtO9PThp
zP$8+)?!|5PH~N9JKZnH1qYbUbtwq+nJ(k`oh0}Z3k9M>li}eWbHD415JKOPq>2*HJ
zeOxJO$<G7Iy6{g;L_=KjU1NpKu1{NhPGf9K*PB73cZ=Nwo{zz(xP$;e&)!l~kH7ur
z)AgZSfge<&&wfn1&35&kl%>==Ek`A-iB_ncD~6b0<n`V6Ozb7NA<cdtdNj5|nj{8>
zVV+RJHjBMy-OD~dT|Zp;U!^^svT1AWB%~gH%Tn=CR}JvfQm3_uNtMZ$C=_1RU0T!V
zq7hW+t1T#i2HHbPfi0)8Ol-IQn}Zy$^luj5_>|BH38dIWdhO_kjTjCJI<nLV0R4Mg
zhF$0J8bgylY2Ir0k2rg8vEs;czYA<PSwI6|lKnO?!Nv*Y9)(g)#Ql@2sRAvPB>8rL
z^odtl4ixZa-%au_LIqnbKe@mEmc2PWV`d={PJzWLY!Yp<R(RNwHq=`-2x)w!Ko1)D
zhlzmE(VyptP@9<f6+zN!@r7|me43XL{^ViqJwTm`aR;MYB+H6d(s!j$d1DFx$xWd2
zcMC|`VDnTa66B_n{Y|pOt>|dyq1&N5MsB`Rmx_-1%#mp;*Shyi6_JkBKg`m2)YaC1
zuCAJdX}M1(P9_P&s7<8^2vgtQDf~wZ@C+%|SpFBJ(AlqJ&r{A-)o4Ib_^P2>Cf1Fk
z6uy}M>BE;d1*|1n0>xiA4@+8*V>~|6TtSg?^=|{aJ@d6~OD0t|5)cJZzF|di!Ke3y
zho-oEdFMMc+?nT(Ce>sc89VTH((e$n;|KT6E`QDrW`gt$P@qg2ZG~S%!Y}_4QR>WK
zSM24D6DOpH>0)}Q`Z4QqddvIXjozi<sn@z$qweAGz}{fX-S!y+U^hm87s~P#hgHby
zWk+wdG>UqWhas;=9J^qpg2?k8hv>i4Dnn9FO!Km)zn4{$h%Z|gxVJ{$7xDr=REd%I
zBR%4888q=+4tajmgha4J{@OgUb~Yg#U_B)3<HT9l1b_)QN>oRuU{i*VIek3U@!<rU
zRpT20y(d<Y>h>3jfwkvGY}4G=eU#I^ovgm24P619AD{t24vJR-AI8gI!{DHvX%7DF
zP7v5Wd_!TYWvXoD5TNT4#?NY(EKbHCDm7@b8moW?eBiU>`Q>RuK^i2BX+_bOj}a@P
zUJ%ED2?qtHO};68p1#>%hRHgPozA{^)YhiKT?4<h(DhSH3?ZPCe7%g%_B*HZd%UHO
zwz!ZcCjND&SbmID%$)_jsB*TVXA8^}IRLOmi^04iNqa}6SI2oyqVThwS>~?H*PdJA
zW_sHxlV`ROqw+ZPwafp7d{NxS+bVH$;SNOi^$1BhYdU%da3`%}d0g(#mLDx<SvT!-
z4)PbBYRUF-)aGARZaVR^E^-gQ0De4<yq~4bLKrMsIx=^!EF5Fcm#VH(np@m6duS>;
zjKzW7;kEv_6r{U1dS*}aSF$Z!jsh&#?m52)wcw+-b!zjJ)p)$RwgIiGq0;sF6n}Jg
z{$x0!4-%Wchqi%XTX5r0F!|%AebjeTCQxv?Bt~JBuj}H+&^j5D1_wzPto-%DeM55*
zmR>zVv41Buiq8pIeKuCw;4Q{c+?LTh+*Zx>b8JC6pv(WIadGluq*5bfI(pF~-Sh>}
zes=g(W5&wNvyp16@3jle)6Zociq7PMgesnim>e@&vz76IC6b{d(d*6{7L?y%w#Vom
z;ZCmkIlG>k6dQXyx!N^0xMdDPqji>p6>j1ZN94CY1}4DYI7oAD54@~!BR_H6xu$$3
zap8qFd7W^Tp(Eo|WsSc~wKg5w9qUZp!idjBvToq#AJZcoOo*5G-sPukd`6GQrH^RM
z8#kqAG%Y99u|U!85?!T$-)MaDPfJS(u+*#bYj)r@bfel`^t#nIst;X$xDs4ljpz6)
zK+OpDm@+=aheF%W<s1&hwg$$z;85Qnu9cjJGd#xU?U5epnVRfkQoyvle=!q_q%#Y|
z!uYHJFZ;)8xU~Ls=knfAz|*T4=R+*8M%@b{<pQQ$zPmWt57I3$cO96_$HH{Lh_D5C
zO4W-pty!?|blI-`^a?=p1uBwS2d(a06!a0L)ZHF#`kWEDmkme<VSs0b1dYBNY?x3f
zq4BMDdK;{s;3z09PjUa+1mAPuAj_saU&d>C`y393S<u(5G?Ka>wuA=3!u(vj#TL;d
zR@JFMG^XzSJ__28yWxDq0OmE0BF|{)_fgONPH-*q7{?``m>PM3OGfYGkE2G_=|6Te
zh00%4eI}%B-h4BP;(hY?bnU$abKRfjzDv+_`xW8w^bbLOqWe6yI=X_K@*vqb(qP5c
zAnt)XTCM0pX5p>5*xIh2DS7J!XXdtlIw2+Do*jPyhNV)4$*dzC))3d^DK)|P`J@tQ
z46h95E5^fh{YOQT9WMM@6#Q)78Tn1`@m(}jCDw!mH1(7HC7Z`UZ68lN78&c6T0Tbi
zIQHuH<9WhEUX-RdtFkca%+&9j_1%x0wF<wcPf?@<lq^*mBh?6d%nuuexlx+#uOZ@T
z%hszpJe5}W25a3@X{lP`oj^;OWs5ED@(suDW@{fvuimeDz^9ao87r&_3Ak-SZs?X!
zUe7e<%T01TUoR^N!)Mh?J}-5luK@VmkE}e3E^If?6P$kUK?inAwWlHjpBNEM6B2E&
zX%GPVeNn<HmWr<($D@XPVo~hW?32hWgAUgX)K$|dZ*c=OYn|2?IO=O#%Ak(LCP++A
zLuqtcO`?*&7FtNGB0Djc%~#E;s{|~WIbH2?)c(LA@n+*$Oz02|?yxAg=Cyv2nW@en
z2i6dNhF2BhkRGb)GRTTh9pw}@aXZuN*&?LL--l}IG5BV^vM{;KB_LwFT9@W-v*!(j
zn^;&!_SHS7iR9SdAG7MS{dJN1n$wT~Km4{L$}9?jtt5R1!?g@MH-6U&Y5AsdE*XQ@
zc}E{Z#V75t<)yGZvD@xz*A$IyPl)l<c<vNa&Bc)A>9Fw8UYuqweB)yIOr=jCp;#mq
z-s%4jfYZGcL(gpa>F%3S04KEpt-2{W24;A1WJ=c=ljW9Nxd?*ZH+}Lh)Hm%*{P{)P
zd{T(@iKY7+t{}3o^ROG`<k6YFM}z%jhtpthJG!_lo%Dv7qNNnA^IyQ>YPM*0(9j$Y
z$$9bOCxF#yeZAA!2@TA6wzsIJMSP@3RG(05Z_06u7_E539!{;QOUXy!u(iMC#~-Lx
zC65W`o!6(DbQ{JN4{8WZC+}K|_@*odj2PCgE$iFzNifiAy|y3ms?bq%kwb_Q_@hYq
zy-EKITJGUH0IRoz7E^)?unBOiRS8JG{fN^SEnd48@iu{`_F#Ec4uw1d+4+Nd9u>5;
z3Ze^E@XE)G621Lih3a9M`M|(LqsUYi6eyokf$eK6@5n;MT^?id%3hEx(dBvci4Pw1
zcG7i1NUJ~Z-Q6P{(Mk*9E_MIuk)cRQ>ane4zg}s()O0i$bCrBdw$@vY!*_oo!^0N(
zbSv{P2Adi<D9{@BJsSasy@DVhs-Dz`!gxFjEyMt!pMKkMH$lU2AqAUKJt!0#rMs-v
z5DP0&erOh;k3MsCW=y0CEL@Sbp4{-<`pJ=NksTeUpjY-`+1TB`OWDA&q-xVd#@T+~
ziXo-F)8u3G3Rowda^mzh=uo8Ea#j%=h_hjLiN4m6fWcyYJ>R5QA&Z<;r>4Y-;aygs
ze_Ovp+@XgPq_F@6ojGkfy>X-8QJ$2qy-4dGsb@=OWFqca+@5kEXHY0#P`{>^7uj&n
z7H&})pKm{_qSu(RkYW!#dl-9|8&GNjiu1axaghMvT%1$TO1Lw5*~c$cUV6(J(@}C5
z(grX&!2`x0Vjx)BN|pxItV0tz?aJje;?4zKm*<m7k@Ziq@7nVOa0#%~sN&|7BhH&-
zW&`VEJQf=hXz!#l$0OBwuG#{VDz*l<eV{XQDPmyQmW->9ZzKo`O)?eFN!n)Z(D*L9
z-mZKA!jU;Y^i<DlH$Gg>Z{6GvIzJvBdAZ$fsvqz7uBG1gcAF7M?fHD@+4y)ZsoD{e
ziJA9yz0wAZ-L&@oCZwq*IuWE1l3$<M6wHcF%WVs35p5mZef$e6WfU35!aQ>ct||Yh
z(f&;?kl#LE)1&kcoSJimu-Cm`*bLmM?+5pd!1VRQjRB{A;i~Q^!u@9|8dLIn37Ct=
ztXY9Aguq30Qi5WA<J7_{-bpz_{s4xQ`f=zQ!wRG>iv0IxuRy8Vzqp6o(-Co7P&2~S
z*iYS2Am;nw8$s1*7V(#e(~!J{%fLyu#z%UG)`CccUk4!{dO8QT?`Y*xuZ|i771*pn
zi6F|8-0k35_{!K|Oj_g9c#Jw*YyqF=&5j6&madg@*#&-#bG)LTzp$IfT#V<!V+F?)
zlZ5Vhl5M>Cc=ULe)9roNW4BA@Jq+=>Rlk8WRd^kvF3~kSoyRrboQfCU!OMsS!_>qW
zvTs*zv?+^m;1Xsl6M;o+TiUhQbcziP<tZqil};5OdoEKrM7I<pj^@P)I%ak1X8_P6
zGCnve%f2~Fos$wXy6^m4`<H7@dd5>ur?rbWVh#+na?)@8M?7a?fq|!AACZ~B!q_!|
zVn+C-&*@l>hH|{@2vW-GgMkz@@L}d6zGg+=bb+x#nIkTau8Pw5TdlxsxnV7t#$M@m
zz_8TX6n`;M9BGpO`o|=Or9F)RKhJFC9;Jz1%a;}`a?<ZMLc4@uiczaU&>(trDT0K3
zS)YQ;K4YzPdZXsNloIHQBQ!s_1w|i@WSwl9s0#v9M4Y_sDVKMKZE2LjD!gvZ94}jD
z9Bs$WQ;cj^w7#97P?qX)CM#J0AE0aXN}|4F)G7Y&P>t^BrI4xDn{^gO{q@-~zPsNS
zvs>D{yzf=wyq0Z$ddoiz8{bZAU-3O{kK=pYEzV;OG<q@o2P%2Pbc^txu%s_g;7z<T
zL|W|U_xK`Y4hlR+&4T^(G1=DguCP0~_@pgdwaiKIq%0wYNP_pO6d!Z)p@$pc-Z`Hf
zV!(rq<edUB+AP+*G78H1mtcTTg}ID!#<}qrM0$S~>_c{Hj6rS0@Mhoz>K~MQ<9<~8
z%Mk?04>95Hfs+MjL1MFshrhn}o+|!OM35(rCEt-`cVy;zyL>nTyExD#__ZY3dYcva
z4<QyaU)Xp<n4Q+9R_5BW%T<l%E2}~1KLv<Tz*+~~RSiE2jc|tr^u0XgZk<gXUUG%n
ztYYmjte=6B_#~W$PMEL%d>op5w!ECc^JG@qH02gq-5*ckct2(`U_GQwKJD%uxq7)E
zG+nQeOzi)^5esePovO`Mm28jF)m1EFZhsRCM-9X|XNX`XFQ>Nl-N^n`y!+tZ$e%$F
z)@>C*Oee-kgy4MUlxM$$BH-pQ(@lvna2^yH{R!BRMK9bN8K9TaA2Ia9v1-Jn3Js3_
zr)+PiOp!9?S?a~udg$8$S|WVv1x$A=(lJ}m5#0hW1|<v4p+9NUh7$1Vxh(PgK%JKw
zg#BS}sIB_$K8yQ;JuVx~zRU>Pr-<1RpsZNI=^L9Wf(1tCFgUyuuii?zI$b$m3Uf5K
z?_d5ggYGKCGpgxkZ{0G%tTy`t|10j)v8V;%P~b{WMpYG5UTMlR(TJPwq@?p6Gcg0M
zOV5i*^~_DiQId5d6vX3f;$-Oge1)akg4;c7>i?ekcR;Jpv-vnPVwtd(w|y#};@#lT
zY(syu#vh)Ix2EM5VFPGv-&;^cpkbx$ESlra&SH1E`Rd}vE-`cwFgY%EXi_5$BJhe@
zB0*Vz*|i1G|DweP@HI4Dz@wX7Q%JjyPQD=ms`5-R-E6Rp+r`+zaU#ykKb!rl`Y-;k
ztbS@2%cZ3kz@6$Hn;1H;rjIqW$>q{Uk)~N7gZJU^8!l(<6O#1Tj(^?siHl-ke>V!k
z!uik&>luIexbR=I`cNGV3+-}J_)3H#EZ+~)gEtU%H=|ajy`41hWP?q*5(jt|&gR<c
zl>eX&8je<lX2ta#a;y`;AtnrMxjiO9LYj5)?!L2_7_`kcmS6gFClMHl&{;`6b>$|E
zJP4)O<ts=k&KlS$Sag=V$DMUyf?dwakP4h=lat4%c{W6htfTF@5S#H<56_m}2}P7G
zTTM=`>yDG>G5LR3mxA17uJ<EsGTV~J?QHkcB?++LfdaSJn?{$vW<JZh%+9-bvU7y9
z>|BNg{@HZ)LAhF{HMCDtG4#<%B>K&E?eyPDqX^Eg&qAZcTzoYjRO2RR9^UagcKcgy
zzKM&k?Q1!@GH{?7C7?obko`Uu29*D0y_tVM_eqc42MHjST0OgU1^_`RCOlrckORkI
z7q_P4p7QMK#KlH8Y1%BIUWk;8BPoOLM|k%cwzTP~35W64l!Eww=ho`|QtF<rOEx}*
zrm!#BQAme_KY;{oyeD=4?GBD%x`KEALKN4@tKl15d|CU#6SeokkdF!NL$n7uxNvGu
zt_1kf7Ld^z7+zD4NK(uL{g7%purvKv`2nJyy%mq6JKme!6E<tP3jK3$_KWr;Z`b?D
zHHqIC0I+?K+F1m{jVKn`vCV9B*lW4m_U=fJ+=&H$t=Cg^3hXatl&$Ng9~2MilttT9
zjqqpxtDmsRP&?RH*Y1RVi(L(DE&x48R=_x+OK3kUE?8P);}NsZoSL@96_LoJ_J#;o
zkRjCv>k?V*B5&TYy~v2#-8B_#j*H7jkmcysQglOs=(Eo1vbCB~KbgWxC@SxxPZ9hq
zmXTjw5Q(%<7_aL#QF|&_<WOH6nhZ>?;duBR%@#`)!<bGq{Kh$datmGmuOdD;ma+xg
z<I<Y6Y%EMVe-0DAL_W%eII7pz9f~F~+2mcFCqFwjInVBo;;qYNDe>H$%%_B*K45`l
z0`@z&WFt+`sv6GMq4*|(ufw2fy~-~{gy$DG=fb!DNlgSoI4tkx)I{1fojr*G;S(G$
zw<WiTB-_W!P7nD~MRE8uD^{?^Y{`&+RDZrXm}E`UxTE5m%_h1#HEs+6{l_J#4{`^*
zH)Ih{JZn*OX>tpAxfdJ7bVr_<y5+LRBzik-u*e62E9*t@I(@Uu6rCSu+Ze&D!HtwH
zA<OLl&L^bq2>d%?9+`i;Mq<fdXd$EwXKo&T=|I+hh%wHg5lVWB^SrBD=AMaknOE9*
z1;%uEzz6z?1ff(Z`siks97qTuY?S2XD`o4SAmC*Er;DR$qPp?F<;1xf#n}qV)ODcI
z!<L<X&W<0SrZ|gf-AHi&9+`ccV#C49nZJ9&!YJ}hgny@o12!yNK+aSQ)48F{BKfCN
zc`xR-=sq^y66_XtwE=}j>d}WPVFx>VWF*c{>BIpF{_MQ;70R@gh0+(FWM-TGhg!$H
zROfE>B@{h984AzGSEq%SU#y!SE=~Krj~|=wGxrMfV6<7DF21Dk!Kl>T3=Kn?%LO1l
ze3`SXZ`S*CKs}FVl~(}5XHfA1WAv<>DMF7>k^IqlZJ-9aFq#(s;Rc*|%Bi2#Ha&ZY
z|EO#JGXefT^9k5YQvWk0U75IMKU*61ZV-UnK8CTSRy;j;Yf*=AJexo~atFaIc12=%
z-~saB^mL6|F9B&U<nuhqJB7&5Hk$pFoF^uZUR9nC^Nv9+o!8t~N8GRM#64Y{!~xYy
z9w<%TJ28UKtj6@ax}(2+B>%_E{ofC6#C?V+VZGFFGc}eJPNL%Gmu1D{c?k-4pb-F@
zZjg&<8LV!CldxWFaNNU|eDwKiLT2wL=dGJP=S~S4p6H&o-OSBezYKamOm4~Onr<8s
z-D}Hq?l<3G6-zwbY?MnBkv@;FLHMt^2A_`>;s5*N{W}(onRH!6x%gfxg;RWzHZ%D}
zh=1LbxO}s&4ujsByzguBE6lp~FPfNtVHZ=Q&k&Nnv&R%?lif{lrXN=L#G6OE`>mHA
zdu5jDr63I_Q)A_14|LvFz1?YiO%1L^Ho+Zmi5cl5&okGcY!u2(_fIe&++|qJm8b2-
z+IeX`7v9C*_Yj-;Clv4M)6MMZ(Wdiv;Go{DQ-bkRyEO*2)7EYpkMrXpSKbPXY4<Wu
zYwAPZmjxpdcX2F(OyO$)tN6<EG&UG%t>;mB?6@DFgS(gcdV<aaFYLLe=ZVN)UZDB)
zRT)i=rP{T&=G($K@1RPK4&kaZ9BC|vV6j<^d)wz>-muo{Kro-a9%1s;-)xASZu!Nj
zr!f?wp?vGe==!G5?MgxNSG=g~e{P37Et5SRhctVgo;*En_vg|z3Iy(_lU6(ED986x
zK|j-DTK@JT+R3*;#|YC=GLKi@huYHB&cTMN0G8Km=U+FPOmu`e?+hlfLDbyFOJ7P@
z|ClJu9d2?xb<v?&bd!0*EpbQSd3hbCUcCeW*PFd-tt5Ogq3LnYey1PPeFfVR59b7r
zqZd=#5WYJyvX;N!8i^tF+pwe7`g^`cuAAk*KZ|1qEH9+`TkWXRf7KTK_4A&;;4UZ>
zE7#q3vtt@4q(*t4XQIr{qw_rdl{Vlj^4B{NUgQk6+<r!|c>f^S15RP>SVL_`^uHqY
zPP6-OpH(s2|I*QMVWReVUN3X8j5A~ROo{|&Y>kPhzo<21*sQC7G&3S3A*f63D=OsA
zD1AY^2`A!ChwDsnYt$;{Th4Xn^Bq>?^HA+(?d@djOfhRrMUc&e`KnQ=wMb#4x6nJj
z8IvN-;KXxr+-_F+sOwwb6^I|)WdG*T#AhL&x#&wQ2}lWQX&Es8%UrdWpqv0&uLy*T
zh9@8hN&Sb_>S0x`7sY?{|BLjF{I>bmEF2!_1~ZxpqADJJfkuE-u11J~>@Q&I>ULF*
zm|Z#T%CW^99Ptvn@D0K%dCTbip#rhiPX)gi1ZHILo@%rpa<eua_OtFpn@B<&CZug`
zaMNzF-?8mAY5oV8Chk5QbY6P8aUW7=TXKU2BVLp1by_;toSM56=d<d!P(qkD?Q%vq
zomy32c|qCNX*)KS#DzraGJHkZC!$3$Cg%GnIy#72{&LQYB)_RZ-Xw4`ZvG)NSG2yk
z;_gkBn2-LAaiF*-ihO#dFQxY8zCXLrDzwyS(H&w?c?Mn6`M|={qBrFH+M3{|y`1lA
zLdNUr0u^EDHhs&O5B1vGOZ92>9TQ#(dKXC_g*<Iy>W3}jR@va$fg;u=ir<spu{Iiq
z{(<WZ2|Z4!QDAjqydDl`eyDWP#BLf?`%F!#D9lcUd$wd^u&{3Hi_y==NY;&2LIFLK
zGe$GroV|u6h=r9=bo*w40Ob#=SIRglbm`Mnc+M(1f#SSBWAFa<ZMAogffVPn>~0Se
z>HJ?_GcKKxJ?3Y6)C&6FH2|ycuB;)Z#w4VZx8;=FaG<PFZmDymzs7My!Q5X%2=7Ix
zGNVbfI`NV7c=%Ukh&X0+yScd;%R7`a{4GW+Y_NJ}xY3)9+X^c$A8)_vH#G5uzKZ~}
z-K%;W3hu5@oL9R()KvI?;~h(@l>;q;4I^<}Xx*dV4FAMvSjjcgTb0K*)guDRd;H{$
z&Ia?5sj}3RHqSannZiw`$|9b6e<*q<&3A0<v0b`4_?BJR0pg|-P`_R{uLxxx4J>+r
z(#I!1@rhA<S*^L~{@19l>(Uh((h5ugd#5|>z3q1)s$X)g%DmWu)C1&~`obdiYwwQp
zXzt}v>f$Vf{l#d@uyIlvE@PN*9iB<yX<Pt!RujMhX`3&u3~_)nzTYHA0DwDzO0b?Q
zKwn8oy4H{cay;4o{xDpqyjAU~R?$#f(I{$D>k%TeDa!NWH=f@-xbOAAMqBjzX$=}J
zqQT$NO_7J|(~EioQY?kf|GkZd3qy*pp7zRno9|?-7Le`1a}qm!&svmP8+n~c-}Wau
zd`JlqnM%CcAOtqwj*CgtS&0?mvrp?K1$`qVHLPTMvtWgoLp%QpQvyfL8JF!<bs$XP
zA3Qn(!<c+Bef7HbG&k~~)~Uu|<mZMbr%pnXNT8vX_~h#hflOFXlrmL<e5VDoi9uF0
z*H7dEIlF9`=c0qgP_8{*6nGs29-E$POt=LmYjXFO!g9P=vnU@{W~4I}BLv@;id(1J
z`~-|aArcBamJI(xkbV77^vpAXwzENd<ifGt_J!BO7Fv<a>Kg?a*wD#H!Sa;4T}S<y
z;w#Ks<?>^2n#&y;;)vjHX#wE5l)_t{Dr3k+I&}NO>b>9S4l<diZ+*N>Y%8i*2bngZ
za&~ABd8dOG1AO%xOod47Gz}iWhlLqw+=HW?riQD6f!c6wCsoLuV+_^@8>bV$m}p+~
zJC3G}5aVpLNk_T+*=lhiD3`F%%@49WopF7oPlPhYZ?ZmKTlJNT<7+0~2+LLlJ?cWJ
z`|Z4`?Jy90;UdEK{YD`s>*!kSa9M8Gk7gsgV#Gf8=+fQ^{@ujDgEG54-2ks7X|xJw
zPraG{A;>Ry;&o@+4+v7YX*=8Kk;Vj@l?qI!R-+7?t;D&Fge3&nGU_Ey7rbWr3f9zn
zIViGqmr96fdABV{>In^6i7>_ohO)>Q^w^FNq&{3ra@b|rkp7UoEp-zv*v<N2Wwku=
z0{Ae^wBf$A#&V$4>9TTM@Le}k(xF?06<{U0cXIe{XC=w&RCdyZpL2xl+~Kk_Lje|O
zgzkr+|Iq?uv(NW^8yhSSP{8em+TY_N=c4Lw6OcgeD!1FCi>TLb9@uS&e{idvt%h=_
zO&4m%$1p(uUin6bc`PAO5BgKH{EwRjO@d0Q{P*}y<s%c^gko5VW%Y^kgDPrZ^@bsm
z#J1c#d1kpw%k@h&)W8(cq<Gz|9P_C2nSU?Yy1b?ef*m!vCQ$NBlV%yIMURbf33@IY
zn*fY8D^vZY0w5XuVXME%F7(PO|3FR6;%&E8=#1dQ4Zi`^&Gku?IjD2Mdn#{Mw|Z%>
zMF+F^SaKnXo^5;GxnQmpsEmisp4(O)KPcdJdgN95=k>>Ke0)J@!`ubD7e1$=EUvL6
z>E<u~qNs-?{BywLXNoNkq#kr~BOywGfSM3|wupB6zl5Tdauk2N-p-B%TxSNllI$s6
zX=CLFdJ~a=y0HnU78d=?P-VMciXwY6g^F|hJG6lZDK{SUNNWPV<zFzWg%_tEt-KmI
zjH~H;f4DT~{jP)8xx6?rDvPlcTWAeGq^`2OT;AYvtWJ~D1&h<;hh{luD#%Ksb;yH=
z<IJ#{P9P1^6ix)X34c3eYfNANSf+KD<hVO7z(}q1q;nbx+pfGjnL}Wv2EZ1w&&+i)
z$Xv7fBvak>MJ|(VoUpX+z%AA?G%T|w1+AtUK}Wxq(oTf~k5);*tc)rgOWW7Ns_d(e
zlTzYyJz&^3&GB3Nk~g$eDrZ`9o8uo94ZU23pG&CH90Bz(%CdttWczj7{jBk6FU|Yb
z6S(fW)_j;w({_u6FqKP=V?CLhK!t;6HV@XMT%V>m92`!-Atip(71{e~729#l(z=C%
zRbWwCAeiq=#)SZ8pt%~830*G5rI!6K^gKKROFg(T)Ev3ux)G4wqNw=#%fOP<i~08t
zm^QdXSg~D;C-OYJ7xQV6U^&Ws3qk|`kJC@$;4QKb?@S*NOxMbEBS_Gu<kXh5mCNQc
zFzh>nxARviY&VuFNat`Z>8YarfSaiwtE&6!i+NfdZ)_gUTDucFZg`V#DYYNh;*Fcl
zuHPLolnu7C4Ykw(E(gn-{m?MRq7nw|EZp~X@c6L-n?m6>f7=H8z8F{8{CD+igmgK`
zwq3|P4v@r`&JQn=02clD7k;Ecbz7j?!to_gayyq*2^*lxVG;m1vbz(cj<zvLG|%u~
zy&L>Z-!)Q^Jx%63Vo|8S3`NF-tigm_ch-hQW{Ev1M%Wmx8<s(b=x8~$aqTkG$@o6u
z)RgUKeat}soolnhmCcNM8*KjzTt2xk;6WrS6L7=>iNwh_rvac^n=P4s8!hVe!cFCp
z8S{IS_S55Z^F7#V;%S-n@J#1eCSYmuyAP=bB@}6*e<n2^^a-M@`!D-f5G=*q<D``)
z%%~Ie{Yo2ookXa)fwHT22e|Q9u)B)!?g$OzzDJF1^U?9^KAc_i0Va4Qwbb3{-0119
zNL^bgH7zMHHJifN`&5o^L;6Dj(+ZrS1p<IXo><g(Rc7brURR-hX3-cEf&1F)>Mql1
zb)6#WqH{~zYe)Dn*r6ljdRK2Z9j*ZYWHE4PlfYBaHat=*RKhY0r5c$&30nR6Cf(e7
z$jb3;7IPD}Q*mH8ZtwkeKqj`#mdl(rx|u%jZV=DCga1;~I}2#N9|(8xc6yAAbd>K$
zmL!5EMLZMfA>z$KhCR|sMi|kWFBe`9;H5gS*fUtk|7QD&g=kDxJ*($DA-}*>TWraA
zIG<%@cE*<N|59%dGXJ2wvxM<Qg^H}3r(sdIdLECOjdS&TxX9~1s3~r1xA~*(SeF{D
zvNiOjd)#@dX;1a);hH;l7dk$Nh~`4G)Jg$^3KOh#J<J!W3j%tAk*xL5g1h%Z)_Q`o
zaU(kyBPNIAj_BiGe^N8O4|lsSy00_4$~0kP88*|uQP#hiD!grMg1BDv4>!_z+Bozz
z<A}z*XD?)>tY68M&8FTJ!7Y$OU5(58VLYMx;^fp%yuMDwd|QecrtQ+2(6CgtuWi7h
zHfA*eiU|HRR-IW$Zj{Rcu~b&m+qrLE+1JvbjQ&=QH_H0Ki_9eIq?OH%>w$B>Z*IL_
zvxO3P(=m7C=v$hoNSOFmEsZp@^AqpFFIys0xfjzpnBMk@<bCvd)$eXnm~T|9r!ATA
zx39rAG=SJBDV|~y@QHyrd#dy9i^bZ;T(HK^3Ayq?VA2uOrk-jc`db6>x^a2?X!Niy
z>1%`t`LhPNICISEj;Sv$<MuCs52gX8Y@_svCJ&M1EY%HxTpBAp4<nZONmL7jI#QA7
zW1KB-WUY7xtFR_-odyr;vc*^uaNp|yeE>ij^7AFU&RwE$Vbc#f8l+LlJB8AKp$^$F
zJ1@aq7=TF7PXmpu;DZCKc&?+FqYy~L1}<J!<iyj7<6i-d-ZAs;>p$=AE`N|+ehl{<
zPafV(V)dRmVjhQ`vv95>6R=_eK9$QCB?JUGp!5I15Q^&O56Z4g>k}_s_+>eja=vaZ
zS_y0DL=U<p2DH+~YYs>!7bL~HVf~1lx^#33{MsMsw<annTmPV-vbk221yJ|?8MVrW
z2Y&5CMR-~UX`*hzOdi4`%E#PHuGd?(4E`a%n%AK1`Xm<(Dl?*p6AXq_9e_{t?OxL@
z$VDOYJwsHi-aXHc2d$5HSzmp4uQhB8V`HOx^+BJ0#HhX>ClPB&?ntW-T|8HTu$#z{
zWdA&;;s+}Vn?;W4S&8?+7`c|$h=sv(h)CD36MOMCHI(Oceicd=yZ@L254ja#FYfQd
zA`h;r55W2%B<80)coyI;WZ}K>7B+w(2^$qEYp5rF5V4W8tg%L;zLun_rVVfCEl5=(
z%e3@jne2V{Hu$8qOjWYMv#|2|XeZE$OH*@28cO2EL+I!fE;;loYrQW%S2Qi=C1<v%
zYm)$n=Oh2zC-ucgxarc`9VOMcmn?-B-wz3ip?+DaNr=u`3TJD0)G$!_3=+uXW*&wK
z-YZzJr%2l^F8tZujS43!QkbpYGSJqx9v1UNIZytDn0r*TQ16+ao?4Y!eYsHc*n5gs
zxix{k7YFASgHjCP9Pz2oi9t;_AzD5Wnemd>jLbH(%~?GD{gGAlk31UGcRe9b|F_dD
zY9lYb(y^TitFV?%u>{;GF;_FNl`SbR<Y~3_lIJ^>(n2JCA$%CYaOWdG%wyiAK@8Eo
zn9@X5NIg$NMJ!pfKc;Cj7h+?6LOtE+8u`)W(7ayn=hG>v7XWV;#0)PHCs-^K!#~iW
z(4|Ap0{TT7Bm0}JvHdMs{PScL;a%=aN4-pXGJXVEKR_!}d?q7YzOu2^=3|aEC>=QZ
zbqEDGxZ$;gdlNX9O(tbb1)uFwt#s6A6~ZTo>RI}2g~cJ5TxDljvk+*;Z$RnTcJZag
z0u^Sr0yR5Vu5Cd&_3mQOI{8!!ijJ(#-#2d6dHPmM7cOBwByH*Cx1$0tbA}3w#TKLb
zE0feS&d`@uaVN!_ew}@eA}uRbX+TRTGAp_GE4mwCbQk}M?yP8Z;<2r*GKvHXA*$GZ
z6YJzacFv5GS!JgS1|S~C9c3TPj1!hfTH8yUKlRO`$w1fHO-ikJo|w*R$pp4#8CTEj
z?4(f5`4DgQw=?JM#JCJ!<Lv2h%F}KB<`N5n724AEXk}_Sa_$2{?w#}{FU-{;HRSi}
zqb6t1;rtZrfVZ7teBsDnb=ebLgkHgxi!|RXph|BA8?iHPXye%#7mprFz{kB=7{ObO
zpF8TWj2qCPytIKNWFE0=t~mbw`TubC)^Tw(Ti56if&@<>0YY$hcP9`Wf;)q|yA6=w
z5+HbR_rcu>5Zo<z2=1<f+~zsweD{0b`(F9oKc}a=tE;-J_S$Q&UE9N|_KlT0{!(xk
zgjP^F8Y%a-&UHAjix(eLc^;iwG5H~^lC`EDb*-J`AX_eZG=wS+#;V@Ava5R4=D7)*
z(%@oh*WakXy=KqI%@<0N+Bw8Qh`xG>e8~ON$~^uS*>AXg7Xwwl{K2iYoW;}?J@&6y
zet|Lu^H6{9F5x?c{ad+Fq7!QKfWNieJUaG(|Cu}ZR!Hf$!x>KgiAobhp$(LkP)%$2
z6MHC%YpZ(^&DbHCF9Cu%H9-p_n?6fUfJDcwYh4Md(`@%hWOkcOe_Rhm2VHq|A4Fh@
zAro?>ts|2LV)0o-OJA8Le`B0^Ery&;zQ;Py4jdk5{W_2P&%cTeSEj8~K0}n(QNbz;
z=vEXfLQ>&1c28%Fudl}Cj&e%RlbQK6IIg$IiMK#lqY+KBYCm3K+PMk6WdD$nF;KVi
zq5Df;2$mS^@YQI$5npF@nO{MDW}G-pjcB5&V3Ld;QQ)b<cJrfB)}WYUwi6nknMDw4
zE(8A?Mz=;fz7TE$H8#=c#Y2p(D9KFeK&-t_Aro9)XtU?r8JzF$6w)<sZ~AuKxgsy~
zo+dT?raaB^?=V+8oSZw1#rg9RYN|#GV0>;g<Ot!P-w{J*oq+zP@R@?E%_X$%cgOC^
zMr%^bj%ps86IvkzUff#Onk31FQ3TE`pOh2mgH(;09XepVrmiqZSvqTdi1D{kbxx4g
zxbT`I3sniRsusg2MXdARBjvu72~CLf3KGbQbuVfuvoGDr!7(!;TUAS{H^&(|Acnl%
zJ3rtI0?GR9T=t~kl+`o`JidmBSWj;RsWMbmUI!U}#m8_mcKanI_VIO)oIpL_>xd})
zs|x-8^ow=#`>C*rSzUYhSH5VVcPcCL1tH?d+3V1cS8Dl~<x(JO=$3r7{p$HP)IHFz
zMDS^k)uX48ATYg!#}2oUTvv&;T9*b--IPgd288^}o0SdaJWQ&UB94mRntLz11hhk=
zJg8_s6kE1ub423)z4X{Au*T|VAC>>9Lf@gM-Tm6@0_jEMR9SJ}UY<b&_?7IRK|a`^
z+MfvZAmFvH>pgkZFz;m3pMK6Oi>d7$wc#SW)1D3EHZJ{mzFOE$><XrF5yJO!Av1s~
zN;V?kqeafR`8mDrcHr3~e}0gh9iUm<SN)ITo)JT2RPZ*{g4H;<QtLMh$k~0WbLX(D
zG~ZM1jF$5_Vx|>N;SORrLb$+m*B#m7;`!<qB>C8_g1bhH16KIREvcL{Y)h)878;qd
zWurz+Bb2eFi`!EI{2W&1BELh51vY%x+DKlgvJ32=Y2x?WtIf&b(W01$7R{!DWb_v5
z^_yecJ5LGBBNH0#2}LJxw3v}irQtsBO+M6cMMr7nMGDWqKLL`^dDwiDY@2;d`t&4_
zvjZkguMSyTJsy873g52%)!SLj^p67N4v5grz_9826TFOvrBptvN4`r@Ey<UcF?qR;
za<d%pPQ|a~PlM`W(k`W%mX)I2vPFqVY%|n+Vlr^(e2{`$@UTR^CpKmbx4sy24oB&r
z*{nI1nc<U9n5ATsa&i3j`R%OSH@;xj*hG;O%rehIm}-N!Brsl|HRc=Ay`St(k9>oi
zb$>t%?LN!(-upC_f3f39IsM=!#W)f~+hIRz*RXhi;qKrv{cfRo%Uy$WOq-YYXzdWA
zW%<aUY2vk{i@;<GysquAq+k^S!#-KyxR;*ks*3sO=eA5o2>Bmvy|W)0eq*W-7!24~
z=Deu@CC^TeS1oa$PGSlt{w?6m_GW?K?4yAC-%1m5E~0(bTSW`4)}%2tG^=0I9!A5H
zj+radfb%D5rbR2wdQrSMa%+=C`&Ud~x8L0J*u|*7OT;q*<y3D*03O6aNy_}{cK*PD
zW79b~?B~~690`fzO4c4R*YgoIHOS7SeZ)9`iBeo`(7$2vtuzm|4-vON1nigU>_DHk
zRxuc!rlMD%jK?2!kv_fa4W8)2*fK8}G5cs~1xo2e{T3QR@LgG=x8Lc&Usoy-1mYm=
zn=?9MDWq_w#E*QJB#}PCM1x*Dn>CCPToj%%dT`16t+Jfjx`uA>0V64*_*HlT9lsP|
zc%J{n7K;jR6<kXF;?LaCqbt@kpDMCqFLvwP>6Av-^EIF^0EF^(ZvPyM6YGf1N@A{q
zo?6=UBbFWuZE(P*3h~pg0}s=zH;QGW$Hif9UkNbH>e5bg*0~-w7@vZ}+a}Z297==(
z$4_Tzff;eIzkkSEeEcN?JAUnAIl;TZo>R51>Yk)@N&m~+%PZ)w)AHciKo>INEvh(%
zS9MnnUMivBMw|_SH4}fEej`?*47<5mtC@=+hpFT9K<qBJ=-f}%)GAF_xFeNTD#b}o
zw{O;U-Emmsk`2G=lF9#^+#KImS*-W98ZA_bilI(C{f>FbvoM^ZFJlmK$^eRI@}%0v
zQ9}rr!gW%4@X{<vxcRN>ON_W~QNowX-{bV)Wid?`<iRjkj#@k>LDh9kjM@wDWzk<J
z6E;?HtEIe+O{>$-o`7-i=K~zbfBZW|QLGQzCmd1aY^Y1h>b3KB$76}7t@{c=5Vx<3
zt!>Vs_oLq<<398O&(;|C9QHT9QxTCpDWy6|?6DY{p+_D#J~3B(;C()LU07k$w0VZ)
zC;ZTr(HHR9ymq9Fev>WP>$O;){@erPH6Mqvn-7EcZ&8xKaUzee=2{|v?ZbFw1`fm$
z+sQJ#l6e04{{Qi(cF1G9AmaY5^VoZINTEWR&;9xZe`yU(+Wq7XciJzcia1pJjdH@{
zY^rDb8UVb%SV8*1zlwgd=B^nKi<t^Ljfz%1yRkBdW3B>ypxq)_!s-e-h=arn9!pO9
z{`Qkn{-FlD<%R7=z-njrX<U=b3%Tw!Rd_)K1@{h9iBXT+8yZ`yF%1E8Ef!tHRC7G&
zbV;pYKQ!d7;WefS_L;bx!M^r&kWg+|#d<!cw0XFFZ^W9o)*Pqxa+F#SLew&HQC=Im
z`)u$Rnk07}r*Af9+X@vj$gUaio<}0=gl1kt@iP5pW_eNb<atn<CyTe5{zrU$1=-!)
zR_veK+~gnkUa;|-@Gw8^;~ahl6`wT#)7zcYaaYpRaCt2YW`|p%X+6!g?ojr=)A!ir
zZuj|1dox40xfKG0(}}p6#GV_vC@#$Oy{k0#!0Tqop*gyy0uGKFb~$GJGn~QyMk&dV
ze~s>gRNT(#CDa~LI#tqfKhz=6F9kgRDR3IpdDlCMi|NBt+i5`bOVU6hW6kr(e{j%n
zJ5qo_aQ75DZ^rhmtX+4?TQjDF2n>~wcbbyZs2xwlg-?%?!agwJ2gP6AQ3$}L+?wY;
zBrX{Coh5l+<2<$0X0}o|Wu$2amDk6~_Iqvy=Q_;p<}>}`S{STZ9=$^dF~pDs_4!Oz
zi2^R~o6Nrjx2sUA3q3mC5n7IvOpUeQPc{K;tf0g8)d=Rw+E4=q)%1EKn{pPisgk8o
zYk|I0PxI1`uD$9avFwrqC5P0UNItbkKiTT~OeA2AP^%Rl$X=DvL<m1<WzKlIEu%ct
zfN%GP?g)OWJ^r#Kf!$?j&p+W|28{|FTz}(b_@t~?qIR}hT$=^*AKk;alRSWbs8prj
zj62L1X=E~c&}Kr7dR?kiF}oG_y;zJ8<bSG2{Yf53@QeA=2QpyYBpjQaE2q^vlN*H&
z<nxts<Cxgu(7g3+-+e!03IO`+bFQvRUod;C^c5uyJc7K0rBE81YrJT~ZuqD+yT%$z
z4l-#iGoQfqGkU=hZghK?{Rr*|#vO&&-3mSu3v0G&RjkGfHM>DPpNs`wUP$r0spNF7
z%9<mN9Fg$~zySF>1^pz_mI=9EF{qaN7Tj%j_sHedvfQuOF0_TQX&8Er{sy4Bso()I
zlS+h@?XR(FhM_3)ed}4dle3R=$-vdQzm(Z}5Y{Ek`X@T3Xg|<$r70AC#rV7SHj+O@
z0eq&@-29RPuH>Ij>q^3X3<4X)Q(#(cy#By%#&z*CU1u(+^q7fB*tZvazEcDpP!u;W
zeGi&GA7BF*s{kef<WrCK5;&<T=~TfjC)RlvYk$kSpM@_GKqa?gw$rApT|ezUW!Mo?
zq*xGAd?%1Wx;kie3ukG+8B8k5_e<nbjVA}DA?mW}YFwdL<{o=y3rzHj-}O<kIhgO*
zXl)d;e8p$@jJbDQHCOo!ad{yp8lGqdSg$NBf~`@G0}e`AqHK@*HnjwiqA44>nf=25
zwTZqJvG{i@*%F|RAwY03^Bg4w6ao&I!LHNIC2jV@!aNCo%RE!Bi@*Hw#ZAw6X6x-S
zm~6(c?T&cm{>jZ91(<U66Q-%#ME-?|es_w*QtoheZSI%dH65m01m!EOO~PG-s7PwO
zr3r-rx`-g;QtrQYRLmw4pw9^l`o!jsihlcg>k)o8#2pW?il^0HS>nUfBVfXcHatLP
z_^<!094@*qKDD+jfnpC1=V6r?Nn|qND@MjdOl`BcrYtGyxY)z~uQ#+I(K-mS5o~yj
zE-(@tTW!eEVp#;E6Lzf`^s*tZj8{Mu9}Uqej;$ez4G*n39rqXKZQBrK{^|w7GI<&@
zuy{r_548_nZh8v>i(CDZXUR21(O!CA*$O_Wq)GQb<V@B`fL%odBFK~!{Gx?=hiwYc
zjOCBJQp7Dlsn9L)g+@EGAqIHzunZn}$cCdAPDz)4EG_j&f|jeIOBofSw*za6Yre{e
z^VmRp`$|UK9nlW2D89m~UXwda{i9xSLd7cNa;ZWmY4u@#IS%YGaQ9<zZWT&w(TVgi
z<y)Xyhdl!hW=thT(%FCj$Uin(q9|*XK=$fmuKHT;X<6-ZIp26w&U_a1A^H?e7^AW$
zL|-vpbU;yJCyXS?BPd?B$+JtKL`S1__MMS2YP6FR|76MMzGsgQ_E$ww_~F8ANZ9>x
zzaqtZj-gS>V_kCYs2*|A<92C&3NT(vi4`4wmwS>8SIq}QERi&B8hJ~-RDJMkXy!be
zTVbz|SPyy|+ApCqTJIu_Pr2LGpU(ZRaiLY^zZ|2UzuJ%KgYDcEK7MzDX7uWI5Esf2
zdB-bkL${`)l+W){`BM9A)gr1UyP|n0!H<i?8L+n1r=wwFX5V9i2qa&RKrFA;HJ&la
zm<&(KKbUxzdCj$&!{V_>%14movlZ}z{qcj^zWs-7eA2+H*|-#lW#OvrYMw+z0S^0a
z5QI?FQzs<`?JhRt{R`k-LoV~oz{N3XbRXQXBqwf;zY)73Ba>d-cq`X1cUo7pUCrv)
z6T0C@qH;l>?ec`4-?Pz27UcWKRE>*vAGDy>!jz9<lU5#sEUcehTq^VBILPZ^2M?fB
z+PQ$=fbH)%y>dgmux(}EbNyqtLW^S;yM>l>!!ftYK5{oq?9m9oqIhOxzQR0m`WkzP
zX@ohl!PI<Za*gzc#jDKlYB|VEo+gpL&*DmOzb94lj9x4u=&zV5F5~bI^m(c66T~tZ
zsvXCc<*p^T=nk`V4|ZHaA@u;G<2#~R-fnhw!)^V{GWAB5!D{k}zm7kYy&B+Dx+iqQ
z7gJXqBi;Gj2ikTOX@265=3niEFfLFNYU^F%m2Hm+T60{a^HrUlMo%5r_Nj2R-t&XK
zkEWY7=<+*KX;&7uX`=B=NeLI9s)#Z{+Pnnx?j1ku#t(C3cIWE?Qk6cT;AAt<_3cPb
z7%m(N%GKDl#A3cZVI#i?{jYwt^}AKC%%>L2V@1np^M~+#xx-v)+ROK!{_gq%Tb(^~
zPj*i<qzBl=Sme_2L3ZzIJYz3^yBaaQkxAktNnXqHn;yi2T>^&bt#a6gSgFaUaVDk>
z!uR9c?;>i{a{HKqAz|uFfKHJ&bI5EjBww30Gff87dN3p~D#vBKOxP%c)Ix)0!*xmc
zJ`2xRPzllCe##N`7;|(M4s?KRA6#4u6Vr!JpCP<x8m_I%R86wloHr5Bv3ub^FHBg2
z8}P-2A72^Zr6t4ej8JvZ-iYxqk1AxqHwrgjLikGgcZjPnZM=@4rR(pVErL#bym{9%
z6(UnWAOn)FXt++JLH-OVJZK!Cmo#`YroKh-;*l56-bj&X1v3Iv&$Ysh9+%29ZO57!
znm2S^Q4@v#3Q5ond%oyI<$GQhh!t;87jF_C)aj8(jO3p`ls#9tux-4h%o-d$%1+c^
zoJE`{^8+<b3&;nZKw<dfs3rf9M;9SRMKmPL5z8Zr8Imhhg7rf#F?I1}Yw^hO+H83`
z+~{^Kp0wJ#pdaEsM{Bg@uUfo&GzWBxggh#^nkbR?#p#R&@4nWQ+JATFJHq<<CGYns
z(_Y#7CYdg7jW1&oLSN`ik%sm8K)>qRV^Ch1T}N~sJHV1yZ|aiq>DXqXZT|Tyg!{3$
zIwoA=ICDJ%vcrd9;{cX{A%Z}ivl$sJE(7emg-ab*M1{S1A^E*VT;G$S^%!-xFzYR4
zl`?=S_W2Kif`ehKOH`}#zoFoYp>}%rBzvd=Gjd@jXWIQnx3!}3S<szLOgh2>gm%rx
z;#&p|JFbU@$K<+H(AVCo2;bQZT4oCod^J-3gpz5TNsf)o<TTYr1N9dyu%Brk2gL8s
zQ3SbO*T#&vU6GaPnoKg~7kuq~pB#LTogFhQKf3&+U3JSWp>H|ra6PqrrJ7%Eu`iVT
z9C0dhqB_X5ug9pcYv7K}i8rF63UvxF`P5{<llPKo<89Gd@B4iR*4;d0kby(HktOn)
z?XT@g6x`o0c628q-ItvP-=cU&ijm>aTMqvgXZc`P&omd%4+Ub$$q|Vfm;i3EsZKCQ
zV2bheSU{cJIYU1Ui>a8NW_2rgrK4wPG*0|J|7^mbabbMw9c)2HFxIIuQPqeIUfrIi
zvuPVLP*RUYU~FsvtQAJX9#q?0zT9!Oi^f9~ed}*$EUE|yK;x%2uAjvJqXkF=r9;TL
zc0b>U^QbFH{bDs@eM16G|9F-?-D28F=+YW8((W)`ykR7&Kg)ZceHzi_MM703NEt9B
z__9~Zmy^-8k+N3CS2PTbw|HLtE<YV3SJ!3)adww!L9A~GC>PnXjQ7JwaFWG)opn@$
zq2BlWb>y{?3C<SwcMoYQdAC`+>5pnaQ5suv8>ZKrIO{aHXdWRbxMw4RkK?Y$jTwaI
zH6rMeD#ptFNk!%JV%&I<PPH-N6fY&r4dHcpie8chne|;aq?}Z}GH9K0^v)nywJA?3
zAfx}buKevOaN*K<m1yB^xLAkSx3x8C;)Ahl&gVA>qUs4U#lW5`uCX~6psZKB#Wwmy
zGMCLXChTGXRocj)%4!9bZ;B=e#Y{|cg+ci<guB5@Ov^rGeDtBuXT^E;o`tVZq`X#}
z>Jl;16RK_f%Q0gXH}AB6(wiT(xKfA{8)lQu0Nk-LW-viIqK$K=s%KjwH^5eKkPQu;
zRptxx@sT7C=T7yPn6T|qWjzKt>htj4P3^hgq3@me!~UYJ_QvVa;wqwE7R;7uprTGD
zYG~SX#G*@M^)xHv4h0=7H9KihrY6%z7<qEhGbo{bJUlqrwDGAgv(Q$d!wuwfX{Ype
zY7Qw<W{YJ|&G*vNO-`4ofK2s=s2tbBx%b|MPf?tQ)soESpB<<c<hfT~)!8B-pYJ5+
zbEQJCR0?&(=*Lh|)*b50u@0T^HjPA=oZ?3L^Z|j+KPXnDbPJU;wyJhd<X?<iRk4p&
z$()2C(|3j?#S<r?AHZnNhy_=Gj7>pTHy;~JJ5$*zjibzbt*pu!X7a5_6X?D!Z;p47
zw|1n&AitcNIRuAdjM+&pl8gztC$`=m85t|)@{X#i!K<l>s&Rtk)xJzOv@0LljSgwc
ze}Z^7x4+3o`fQooPO7#sO9oXhE<N0Jw~Poo5XSuhF&$|)B}b@Cu@5Ysn=h6`Q<t2&
z`_xwN<)KtodS%PahIYprJ!Q0KpBbiY!`)Vl%cS8$G|Q*QNDz`1DUkX5uyBRN;H9T;
z9n)uQTvLZ17B7zG{MpFuQqwT))QTUl)QVMS3-=hyE0s48xN#Nq=n_heb{~9v*F*<Y
z)F_%BX69_TL<?7y=(*I&Z7ddRZyB>ef+8Pn>uWtlV>qh29AkCq)bluDi*$dEb}Y0j
zRyxQ<zf%Npuz#W{ODuJXVog$zI<X$oBD4=XYt0h>pkU>uo~?I<G~gZ~&$s8&1Oln%
zuQ080s-a6&UuNJjauln|rj9-q4=O`1HFAqzNbezoZ0&_zbP!tczZzOhnn<7ITEAmb
z=JVfLY3tb8nK!)><UL7yRo+n(%1Mx3=Tu=$wvml8@h6Xjle5yP7`f&!uW8R{aMjnr
zvwxNXZ{fd1#*ZshP;O(#h898#W=u;qjlKEj)&o*)YPQrD?SZ_n_C1fF{oBwAlln#5
z?NMF`?x*=5e{M$UZ@BXXeQxxY0l%zHm*&+YGWS}EZhytE_Ch%OOCZQbkfLMjDjUy?
zDl@#6XNHiptV&<L@<zwDx=9aQ4it+Hv2%wj&2Kbk>!>nlx#p(eV{_9uUo!U{&C-9W
zte<0t3HjpDe^kGj{yIGk^3Sm>xfHdLQU0i?qkTx_&%zo!gIT0n{AI#wUl%I9gN6uy
zX(1?-5<5LkAXge<PV|9DRShABkTM2m=J7#+MLmvggH5dM7093#Z`L=LBf{rLZ4J?^
zA<p?ZW&`$uXXm8^eq_N+iPTqoman>{6$Q-j{9EHF^S6>|FO5^_%VtVZo#(|V@YdeO
zEw|_HNuq-cLU^;M7~x15WeoOklIc)`oOsz2;%p!PoGcX8qa<emPgEDDe0RtHh9;#z
zRYI2$1=}rpNOQn+PTk4|BCE=b8s58B+j3BlQn}z_vo8-4QB#Z6Y$!Y5+><MpqBE^O
zY~Av>CT=c=SBLZ0><FR?XB&634rwSphn0RsF=<$R85p&&#`xuGzP!2u(3C^Aj`}uJ
zlYJW0u=hn44{$(Oh=qQ`)pu3&V5Vs~rcv8`^oy*q^&RkX4sYfNx9wx)s$~Is?fj98
zV&IZ>3(~^<sSDqpZ*4X%T@otiROl*j!LUIm?9T~FQhxBjkr6T|eO}PW8mUY=R*r3(
zfe!=(RXVH<mLF4IFc(F!&T2O4dNkgTOLPv3wZC*z95*d^zWzAp-T5sHIw8P7zGdci
zE9EI)mR?cWwR;(jmSP#s#)6TQU?o+Tp6Au1j`WLFY9IOQ?<;HQIwPD6DSyT9d(w_6
zIRdmu*WbtW!nOSJa*C!D5%x}jE7F}f1PX<5X~xv6bqPa3Dc?6+-GIQdBu_L{X+wkf
z^u1=oM|!i_hNy+D#3Fqrx<n<repUJ<`-Zj=sw{wsWnh}M$)b^ww1G77O$B}cvp038
z4apFo)z0j?V%put`_2(JAHl2dJAJgruU4@>O7Ie*_YXjALBbFC!nLTkGTy_2Ubze_
zl|sR@#bB?CgOz`Cc&W1MlDuqKiclNPHzRQUKk&JAI^&n)v*rpAW#8)e{P3W%eeer-
zX<sxEMtv8_z|qv{+nZX-jm(VGQu%zoF<eu{78fOXi8reK1kzs9y+-w)4G#{(g`sK4
z5(IG3!auL#_F@^-BG|q4QK5o7KE_o%sTIlU1f5o5biBk@eKkz^>gl+Flq&nqjAnmn
zjalMTzL?eM4{WYBM3yfahJiKTJB8i;RG6Ge!N7i|e9PS0Kc7`0zrFA_9`FUoT_2A2
zg^W0-CPH!66?x~<DC*Ty6l?idHzcz5*`+}-s>I(D*jrvg2{lNNumhf^^1g{J<|7YT
z5tU>Vi3I;XVuHhvU<Q;QH@~_g<~;_#p9C#!8mJ%e{ZY6+`C6c+@||bkRxFHFkb&`C
zA$eGkx;%{`5kcMbO;2}+cYPCO$+?87%XDKuZhpGm3s<4<)j<L(yPa0JDU3`S=GvSP
z(xnTSz?yjF^18+TJGvGCTM$-KnM|FN+VgbBVtRd`4cei2c~8W2WPQm%cMg42(CO$H
zxpf(Qeb&P!<kTk^C6$hmmEHf_X!``Rw_BLGVspDa>i3}Le4K*7jbeYlv!Dke$u#YF
zWV=1Wbeg-`e=x@Tgwx_(Ulk!AHT^*naK`M0U;!Z)l^Wb1Mm+LPntdDej=S*{9Ai!-
zuFOdge+d&dylXl|7YrZwo#JIK;IUm@(Q=6i?fSg+qT786{Q59S!E`lMqg@zcI>oss
zd4Dam(BP3l65M5|Q^OF-hNnlAq%{04T8zJRnZzZ2V(;|#j8R^rB6u8!61OlS_0n1#
z7ReF|VD7$Ym}X^KO;NAvJC$Rlla0}1?;WYVwA6FQe@OaU3zw_Lf_J~L6(jMJ=<e^1
zioIoCn@z!Lt!p{uhmCo6tCSRO^o0-bKI;^wY<FM0oD~4vey^NAA0(e?S-@%jS7`Zv
z`OyE<&svNJi1&Yw;1an=%w)RW-$j_gyS_MDZg+hs)Tq#J3F;OE8W3CF`FwRq>a8B%
zoB3#Rnl0)L%Xk{J7noBSdU_zRzyEVsZRJ$W>{o97lq(KA2od$aoQM3IuDbn(*|D2>
z=R3Jol}k(n%iE*nUn5StzuH#X$I=A+S)OU*J}H3Y)7V&mf-eQx$LHWd)MG-%2e%t{
z=xGe_04KgDle8|tJ!pS^SK+hS(7yZ9A52T!ex8e&(He&Md;`fTz_5B=<%9hYOKyqv
zTk3LzVVhv#u@#uok)Vxx&@&~J-IB6BHH(}1CA#7r?*7nFLmnmyF@qn#qF2qo1(@#X
zgrjQadG8m#b-qf9V_|}5NI=V8FI)!O1*u^QnL-flRd_*an(p1H!b=L!QnT+mhN<sv
zZ%yIlUHh08xcdF^a;q==e){wC*tvKeS>K##fH|-0AANVNsr>&5og5xrminyaCxLl{
z?|z0A9xXrST^%iI2se8hbddq0937-Ef4!A(tO%YrY4X}%NLZ?apaH{)<#hniGXLLS
zFvoDaWWwm%k+uOXOnx-r#;~j*t#{+)n$#<ic<dPiO<SW4N~YP3Su`-*=@p}YLH9A4
z=vo3Rii}s9ME5OhfLNfO`Gx7Ff&){kbj4u8PZxoz&-NXmS$ewT>jse~##PDk6lSG*
zy5>McAC0iuKDx{6ajE9h$JJtNdg3RZhtY?M>5M5b-_sc?)p{}ZwcSu%rhc0fIyKJ%
z@iVDG?1mL0ny`&Mp$qJ%QCm=Z2kU0}fD*0TD^5eE%z&GQHq>=mh71bi#CpZIp~|4C
zI@12fBRLMf3SqbdkV!yQt|<TYIhKv>3ADJeKCtZzkmIgAiXOT}p9Y<8&!4;dos7C(
zl8_1d1b_F4Rg>-f?eZoQswu!Qh4Us`svQHA^^Xjov^Z0BQ^uDsL$?SXD<FF~h*S`$
z{bGLW2-0l+-~}m3P`A9!4=nvKw)?5?L*#c=Yafaj2KcpB9)3>@kU<z`TZU%lSM-1t
z|GpW%NE(yBRrhW|@`HO<Fin1A3biKnQOcYeHFOa20{$N#g^2H}rb@}uJ=@|yIloiI
zKE_sI9vvi5rD7|7!Q>ID=eNobHbc5h<+5BiY=mc59yqZRknCsz<ymfGTQNb?M$?3}
z7Nu}leBqO#HRT5^<R#&n&~Qw~ybw(S9A>IBHFOeQJqNj}GTzjp7l!8Pzj|$W=%qkL
zMrJf`@m!Tro%;%AL8KSrdnZd82||s^_kR{Hb@s7K*H8;q6bFy>TAG$Dmb87Yspq^$
z0e=9Pq0uO@$`Mr#1*4Hs%1s8z_P-^AfgK$q`QH;wyb5F4-Xv=(FlIY21&Qc{eyd_2
zXl~6*WNOk%G@YNBUR=qZ*d$P9Bh6eq#59*d0r{&p0s<6%{e_d#Pv)7S^3|%m_*<=y
z1G}CHTyJ!c<XBcBUSsMFiStzWv31dZGTv|SpU1`EGZcDv;q+a%o6nckV$Rm@jw>V|
z?=-rpDbfhtBg6#+nhA_H)v_xnU@Ew07^*(lNts3kaXsY&D9NmT`QbtKP5Qv5lf8l@
zFSUGGMo8~VqvC~?3e7ia<i^>cP7}imS)=?10&!Xmli2!$3r%EF7pZ2SqeXZSeW^2A
zd0APRz>N7pK=huD?KzJUr6^Wud{Gf%HjP?}a<?=A9AIdAG^JsasPdo~Gwh~poPDFo
zfe=}T)EKAJ+RsS-W_6V#u6b!kq$TmlRH!H*5r~_WVQM<I8@F|dX=Abat0ti&EN%L-
z3LbejVrkSjpkW2m55*vB>Ofa5XY2@{g3oiHy!+Ojb3in4?6}!TH&R%z8D0c3HHKsi
z6e*zhyi3U{q)}E&DFK)>N7cVwKDlrl5^yv)`2hu!9F0uB9`5D`Ld*O!CSQXV(@+5A
zQNdC5F?0dy4G;GE@_19?k|baY>6%8Rm|uiH=@EdbsiBLgsEtq0K7FBh#lq&&;Y*Ud
z8GxxjA5%=22LgOBxBJB)qO5E#oxL1|8H;S`eC>tLywF_BHafM9E8(}&%2Mpcfj?(w
zewXCbax10M#cYhmrm<Y|@z-_xr~b65e=x6OfJ?uq#8?*dtsB*z!I4l(8TmHGR~wu|
zlQQXVO9v0c45fCMU?mYj^yckOkE_1xy#C<j;soLLQ(pG_y)fyvR4u5xhN;kotZK`O
zz8Yp}WPM!WWk~9viIP<e(0dMo@SIq_bp2rk#A;BWvnr;%1RO}h@@v#2Evm{oDoDhe
z)<QMqIhIOjyL@$RtJ`sRy?b1+;z6G9DD*TjI8Zpv&(p!&pOdF-mYThe%HfX`<~5fm
z@k&meU`E0qVFcd#9}g$;&`+5|zBrr)9#m9<@^U6BA&=%^^ryNgg3~#5U*M<#%jZR5
zwH1FOi?$LP6p#f_|2uMI>5;edH=go4dKAz!ol$OP)j0GmAF8ox{@}uUKSEQM&wLDT
z$OEI|^}f|t<*c-omUr%&k14xvES%~0x!hZbC06`cT6>k0z%?E@!}~Mn;R*?S;{?Ts
zG>(~l{qhvqQiRrI`)#W5hI@)-z?Uiv*zy(Bz3>%pyO~o6FK`u}Md{Q&Q632N>^_hW
zc^=k&sgH6X(#h>deGl^2O?*$)5<v=bF}n`64e7wgk%r41F)ZN9$QdDCwJfFg@-X_z
zFJRG-0u3O~t~56&?#E39fhGmOFG8Z7e^{E06FVqJ2!L(V$-ps4pLiP5v!UIhV@;n}
zH8fRt#~O2YFDN@~%?rO^i6Q0w-$iK<b_hIHUS{?;Xegw6t_{tqoOwUd2u{2mEA9D@
zW<peuVSrPqe-P737}#8Xl<0!8dVOPoNHSGtDgeobH3Pwal5%V#?Zr4wftV8IpVPii
zuxwI*p>3CcTdEGh(roEd%B>T48y1(w9FI5EJ!#~~7i;1EeI`)VN$4QjTu%nd$BZmn
zK=`0<@qdagu6g#pF1$4B=jJG&7S#h}78VS33(gHfxDj~NJbnz)B~JNR-^>;fbfE%-
zQP`r2JZk~@5^G&QYO%cD{CPaL0&L}bq05UYMf>{ue^eDs?jv9S1r3-k1Yranr<*m9
zwn`_MI`sZ%#tCxF4`V|k59haFythbgy;`ugZ@X02NX=RgaRbXV?<;}x{MYSC0;6L7
z7dnmG93pNzza~C37C=6vOrNnUIaPU<TS%fsoktRxk2DQTG<9RVAPwZ|Jn&xHEh87g
ztr@7%g8ro5YCe7e040kj!z;m~l+F1bY+eF*V6iZU#X^#NuNAfZE}kwkkL)np+S(R7
zc38MXVcWv@^G|S~r^m%7m?6?v0B6`~0HO{6OkE&H*^Qj1^SfVNUbZa0JmmIK!4gw^
z!2omn@;>aGk#@AX+jjU-l}Tu__fJgVxly@m%#Rb2sOV4t1m)-ITnT=S2V$bA(+(V*
z^?pbbD7c?cMR>Zk?4B^HbpqMbHm8fI>rX<b@UUjTXZ4vH%6)3%^K(3WL|*7c5XAT;
z#q};?Ufig@c|jwo+KZYeX(Uf$Q^t@lL$k=f<rUB;rPL&dFwDB+Aq4mFZ$<m{uhsU`
zHrWYbugfOIRj@=F{#`(S{&CxBgZ;hQ1!hQQmzk^uw^Xch{!clp_N$W=5sID9x0>U`
zqtlFESh#;@WOO}am-qC$F~WGvv7-Ygdz}-3byI*;!o|c^`-)P?@2F|zN$83DzOSS4
zd>8C}>F#HK7F{=RvV;!$+hp$p!yJA1+wr)40$afKgJHJc_O0GaoCtSBWA6FCzfkn}
z5E-_Ir1ma?J!~V*qXYCQSvOmjJPHm1z_1_TV`0#*8Gu~T*%;`0Nwwy154Pv-Yngby
z^U783tx7y;*JAa7!ota~FF^l}oLqD(L*o_elU}SfCtq@tXC!CAfjHkNep44~H+lPv
zOQ4(a{gHflDDlc%?+4U5pCg_I-X&jAYd!)L5<WnVv$Rr+;?r2r4Mv$=TchmK!gaEo
zq43OBIKIcNSt}!f3k~~`t!gkW%{WXef?35yqc68n`d-AT`A@QumNS<U!p~8+-+%}t
zs$71keF3(LD%o+3d4BA7vli0ZaXWg@5d*#l!jl{ztd1?O-I_V`4jAUs{W$^gRtG=K
z@R;{1ADBWB)Ze1W^6y<3`aPQ*3d~;VZV(L%iDNXTSzUcyB_5@lJ$2}m0ZJ|hcPnKU
z$A;H(uaO<TZ4rwOB!|;s$3^ve==xoj$Grmr(P+>dWaqo|AEQ$ZO<V9B6f~^j^Rie}
z^gI~nwg>imG%CFZrQAv<no8zK)Uo<G2AXOm>ZN+Y(flJ^h?0b;Lcwq7mG>3%b-zn5
z`~)&7HRVVWOAd#b62)iwHEBRBTFE2afK-Is1_@d&_0@mt?2Hh^bKX0)pXm2^`fWBG
z?0du9K{DoZdf@xZU02FEY~w&oD}GOzGjmI#t@n`xo+JE+xM-Q|=Dc{l7_SxqoB<JG
zjnof|>d%SKC-oyYizeAN6b}jTSy`V=?39tr?kn?V$_-0{M9`aUNKF3TmZ;*QP7Smg
zIX1b){MZN@PRoO%=^ZkiF`2iafIdvArXbGsa-09PE1;#%Ds*}2pOGU~H?KPKxcg(e
zCrjUwLqt*uB%;*(?`|xrYh(&tFCP5Zzde4e0m^tm_$-*Xh50$~Z-b*cZnisaC@*}Q
zlPt!Fo+!xiG&+xoYLo94&)1k{juazH2aQ_F@%NOWqA3=Fs(8Pov|m^XRhm&ByH9X<
z5r$_Mf6Av2y63_}j3gPWV4Cfbz}KZp@keLYRaDz>Yl9XP)9tu%^xBt7FRYBe56`iX
zfhSVPDJh@{pR}<{(=1(oo_094>5wpU{fBj7kE1&R+^4Pey45+W^Q57n1?J;F+{<(|
z%){v6#mSk>bDZPolI$6_4N3&(-s2vP-g_xe^|l_w*S-t==~GI4riNBNa3Bk2gl{q`
z@D?=TGJ7swto-=>FR(_H1UcR!fN=7gZl9YBv{gEn^YOh|^c%MFyEgaxZm+@FeddJi
z0%-=fKcx={-$mSlcZ6V;jpsxBiodzjQ9v)N$_1pf7~-p0*mcUSf$ewv9S^N0`^#pR
z-&@4#C*&hOX9?-pr0=_^sZoXzzU6}xd7UqRtqzXwve4F(V}bt^V-3YqL-*H(2%6@(
zdC<J|r{MNue3oJCefNvuyu+7;&DW0p#8WFKd*M%|Zq@mF_;8t>D>%M4`~|2kyz!Q*
z)Fr;lUu^>THVXikN=W$r(Ef?)#P8AES=cW|&;EXBEESUJw<Wg^ZUf)no6itDIYCwf
z1hiAsl#UvjbR)my6sfN!2CG_sHbeRd2%4T1n)~(R`~q;)##vDEw8b2pn^?rpBO~!H
zHY_|w=4gn&_;?O5okx)bO*yK_zV!B{pySj9Oe>9S5*>Ww!fbA1dJl>Z@_BWTku?OA
zrs(otm0;XDH}ZZWv-Is1g~LLe`~4BlJ#WVJhsg(wfGCpCOC_a$GEewzT_y1Fe%YAG
zy^P@_H|An@fo-6kbs}%qv)8)v?C{RfY@q-i2*+4b=i0iiSqlCIQra}xm<Ak(<I8cS
zH0pX(!Bo<HeR>dJ1(A%;Q?}X5?fqa4!mu@h)mto~r(t$b*79xdH-e7oTEEc_SOn?;
zH~8Te+))8JZSXt4<v)J9ZRrsB9g3NmEIrI3%JiMeaMx+)vY5@{zvro7>Q^vrq4Hh#
zZuqzVle)nKy!^|ieu|q1<7^KRO!Ovo+S6Okx9$HS(?CVNMf}RYn}bFFUnMFwEshR?
z-04*cPQ~~g3@G<vy>_efP39`Cl%4rCaRgo;T>G|~@I3Q7F5M0GK8Tp!0j^~-MqgMK
zb=pbSWDX0VG(#=F-ORSp>-Cr0(Uj6^<v2MLHn4H+rYR~ANMuJEB=OxHpIQw0FhWuA
z;bMy5-BmNwJ$Ti}ZaL>kh~O@_<CYhMWggsqi`21u^Vi()_D*=r_nP0C*#6)U7V7+g
z745v@>8?WW+x0&Rmn39;@58!=6)&I;)VR={;?p(`=)UF2)ri?$riGbu`Lc*vx%0FF
zOH8uAz;u=WHsVRPy&G}i+wF1Sc1KM#DQT^_i+W4(FGa&W0L-)UjIw*Bac)ydZe#Ex
z1B#eGJ7%jZD@VU#j;;VCvN4`^OWX$b_KiD@sN1|YV|yAq>q4ppM@^*y@TJAorG{C1
z`<I{WQ__>$vnUm7fdGI%?sLDbpn7suzAUL(4>f&<P{2JwUhMjZlEGR~`M35lc>X%(
zN0TZOU+d!TTYzyQl>NQ87eh;#O(XlQ8)N-D>&kAU;Mli{sQfye_~oIdLo{}S>7n~T
zW+lCv!M*f9x?I4Nrw`ioFv@<k2mx56?i$Z4L22QqNz}0nUPwuU`Q{Z=`<7Z`h+8L@
zB=+K*xr4<(;Ngb~wOx|$4LITk;U;u1Nc^DEm`4Vga2^YlU2J(>NBDJ>ArB5wet6ht
z@jOi?9{j|B_4(x}=P)d>5S#M@?>kg;Z=t5ExHIaZYlSq=wap~WcfK+7+@P#&TIGk0
z-0O-}q3cO=46eysQFB+M2lA^gz7`Avf5qq$H9yamSEbwmU&uz``T$IVJ)J(~bTG_h
zYSUROGLLSouc<hQ>ff@Ae{zkisSrWkSxM(jHU++bNcn7_xOQA$cD@bUH)&*=&qwIB
zbW#IhZ&-EngV5|Kpp__3a1PtCQG*A4bwlLIoHC+N)50-(bJ{dp))DE)XSepyHO~iZ
z9`|>ICBY5cZyhKY|4QXH-iWX+l_myA?BJue0+}&!_STzOo=|!ccXq?8VE>yoG3hM!
zBIQ*B834OQ)i4Y8EM$4Gey^|s4eWk34mTZ{uahtau=*#ivG&QCr3aLryEEx2?lg0G
zliL&&hwD3UjSBcQp<4lgu=%+IRIeQw0UTO-3fn67Yx7^GOA{wjaf*S)MsZFzU*ilp
zdD_iTUbJ<yYbRsCUjE>i9|=SO8L@Rzbq(hm{kf0k{f`#lqS+V=P}Eo^DXVlDq04=I
z4Erp#MYX*L>d6x3klD=ba;VELWW2guv<)|C#U;;W$qen0WwWfVamyttLHUO#Nzi5J
zAL0uU=I~|J#Ow*QJtMbt*32RGlVgn%{|k5gc}=YS6~L9q+o+w}oP)z#Cw<~+@qw%q
zqZi*R>Q$NnMkKN7^JlgC6$}8H6%f`o?|Fs?db`_I9Qd(F5*g;v#2{pAYwRgEvG6Z4
zt-f))4y}rf%EK*D)}tGva>^N4(^hdKmo^ppt{Ib(QV@!YI>SiCFp1uz*L*APqK>ui
zs?<+)9=`cD1P&zfUqkBk2;iSbX7Y7%Hgw>`Jy)e<Sqhz+V=b^_iiyzocRkIj8R>)Z
z7Z|hc4;%jfP$D96XXj)r>Sl}RSK<FxtYT=)8944(XIn~tc94{L4BP0Ye`5v)$u|mA
z$T>|-m0L+Lyt?%fwRr);!*2!)V+{kVK!t5T4&1mxjn&7pX*V~t1tT)pn1mTvt45AX
z8RYsoy!Fr4&tlnpCpCt)%rRyuoiTpoPpI;AGn2t*MNtKpC8}EKZi@eoCfh8V$+QWp
zWG<+Fp>V|<bwK?&y?-!WU$O97O$A57k_!mBhXX6x{49_pd2xPl%id7_c+#eWgfsSf
zPB-}sW_IY-GIHdABq?c2>X*Z*S3!493f}IEDOp$&l3(^aH5wGoSk4pG5hOlM7<Owp
zT;eS}{z=1MQ|{Ix%RgYSm=ugD^-)Pxxo|3Cen8}%zeChscCkSnyVy?SLJmNA*Cv=k
z>0dluN%nPo9A25gaU{)@|MfMl>Ak5t3kXzAQyf2U_B-N1HsL)Uv|b^hM7yn-B}rcV
z>uY`1`NPEz%H=jhnkupHy%vmYp5k&WWz@v+pQEBAG}U!q^JoN{ax2w7e_1klhYSJ|
zd;`8L_$(_}{#WY5x`r8mDe*`B_qrm;*^I6L%?<(Ip;(7tdbInX?x$(&9@vc@)=nZ0
zcA`~t$w0$gK_L15GtM}Efwk&M#FQ#N$;L`Qq-Z7X|1mchgqNoO)SvaEfChfuL8~}e
zb+O>${~rZnK7jjg3IzG9$4-y!qX!?M>+uO`)o3S+8N2*<ksUcR_HI0Yh5YXvNJo9a
z7pI`fUDf_CfVAI*!AAdl={mo{=Q6*YK;vl_@giLa9aQOL?s<EJ0*bi<^q(T&W0mo#
zMfbZ4l;>R8(>#G-6*U$f2r2hW1t75ti<aM9+*OnVBXd6pDe}CY?vB;P4k~LkRjUEm
zeni_tzew{NM}JD83$GkBZQj@6TrY_H0uQNYD78x7nQPaLYscj+e+eBcqMpf@AjOtt
zu+d0|su91OJ#w73U{sX&OR<eg`Rk&xRx>S%;+?j9BL`_h8YXOAD@nO@6!mAUrQ|Cp
zZ>9pTScc{=Nuj0nBKpAe2*nKRd>>;6tDVQuJ?E-W$FJvov3YbFC=)w(qwRcc7$U{=
zE&OzVIjsCQT!<a3ZU=Kib@J{nkl2qI;V;nc2`ctct(~qae6QT@h%1gQPm>Mtln#y@
zx0tv*59{Vuy!N5xT%wYRKrbCktm;zPfZI8yCPHSSZ+4@({2m7X3j5kS3d4&Pc?Zsn
z(wx60QehU`N$zyam@s~(r5OPYDxi9IPKHGDr@QuS8*zDZm8#wJe2D4+7zfGMW~=Mv
zS{d^3n9q<wOm9Bvpyi^)Z}Kkpsp82+_$vC@np^YZJqus4#Jo{zm;s8zWt;^@r1mda
zs^9@jy(ACwmIoj=^`#Q<K>jGt`nap>W1{%!7RVJ0_&R@00t8=%B|=&Vb~T?xrki-f
z<XLZ-BC8LiY8#)(GnAf%qwL4)uhA5kK4ki`_nqHUUf)I9;ay0ou=5IWvqL7Vdk4^8
zi$$B9t7}m2ZiBtn=GhAsFR#j$+STZvHmq(7P(b7ESG~BI!qx};GmAA&Exr$h$NFu-
z-6F@B(6n!cI$Hq+b6=GIvQviG+dM>5KC4UMh%wJl4lxkBNq?lKb$1B@AgB&N9S=b@
zf|<H7>D#zXZ|c$3lQUTcRN?*v0+9?No*Jjz`y<#;gN7H<XxqU(UGd`|V%%dQhw+de
zmN$ykR<H0<75>(|jR-MK0c3Uqb3jtGy8F1W5$9!GiSB@6UmU6{$cQDri6svSh=DK&
zV}Sn2x~`j~J8X}4NLc4x-boH%jkWp~{W8{+Bn{V`dJJxf_|{Vo>wgQfv`&ZHsE*>$
zCQTVlbBp`Z#p2)qDu;imR(0T2aFxT<HLt={L%&lDig8EG3k-N2@Uh~)${%_U!m4HO
z^h|pfN0j(4mS|z=kaLQ)+qc}+?O)u9bO7TEL>4rsIJl%BWoxl|DGyD?y)Xs~#OwU0
zjy4#oCH?X>;v;_#!-ROhRdC>UlggpVyr57@(-JY;kT~8+*PR`H*l&1yu5&u1zw%xa
zOFgL<o9Rox3EC{|aP)`0M@J=GkLPz+T1y+<gVlqqOvNbSN~`sdwP;=y&>I*zn!ecn
zsac2pRF|^*`xq$b`2aDZTm@=5@82S{?1zOG8H)S~3pK(_Z&M71z*`xAoV!+N?~*!G
z%!NEo1f}n0%)C#W`OHK~yek;0_yUfsF5P)$Ugho2$*#E}?CanH2{Kler6r%t4nr?C
zF9%)|06`@jc_vbI`=y36GgTC*Cz)qH)+!s8v9pWkF+AWsI&RIx)~0CdrKF_A(T`ky
zQuEZgFE!FM-TT5E|Cf*NcV!>7$>AY4nz*>Gd1i$kHu}wyo}C}h+|vI3Ukhsts*LS6
zKR;*>k=vQT*!kjwjzHGL1mq)zXA3{SUi)V`DzZVvrESml8sV#ma@}taD*^f$-!Oqa
zj>=cM9D7YvI|O6ewD7O)+q-u&XHSld)F_O;$+)<5ZXfNPp@}EYuB<4iI3h8U2OnKa
z{va6Lx)o9+vHRoMk`l@xpCQyh3G8UzqPvpaII(+P+iveF(#;44H+cH~K0b1SiM=Xa
zTs7uz>?*igSy8`K&0O5Xm-$Vo(Lm3T|LOQl;MfOGCHAM_vx?l0piMk-zRQ{%LKLkS
z166PjvD6@VuZtP2WN1lTmcUMDRK^qM;Y&&tJFjjPjt%n9<^2f(t08<$CD`vcFfdbn
zdtnAySK0Ga&$Cd~4GpV~4ONgnSE3zCi4?c;Hg9nh+QC#{mZGJ7<iUD3G7^;w`6Ijb
zXuy#$w5^PaJ%t38t%9a=|Nb50XJI5Nli#!32j8``7}09uLQxw-J}B`-l%y4992R;u
z@u$;*qM0OL*~o<hXT*uinw4EYVj>yu8`WD+p?Z>EMzq1Eb>fJR3eHSyEGHC9`FTNM
zYiqRC{3)x<zKn$KWy(eN7G%$drATmQIC$UJvzMv{$YZR~DWah(M$po}|Bxc};Z$zE
zc>GV#SBg&`*LZ$FsWT!NO0#X$XStRMi11zJ<8>7bYs;<zfr><#F(1tr4fe`8_hz>;
zq>qEkuKuc_)|`<&S}wzs;{}xTm1rt#9%RvSsmRUw3Zd7LC>iODHPY(xE}C8Z5*eAo
zXZGW&_BlQ4ngic8WfWG*%ab&4CM_CXgx0w?w|Jz^7cuHf{F>IzIk?hM!ZF=uWYy*@
z<{j-xhQehV&s8O9qEDRiXL5cpHz^Yo%{HI=nOPq~pI}wFV8TT=P^qb#0aO5t%1x90
zp5HSobgRoHdvKJ}Gx25h9KO#ECbT`UX`+?roGBwA58@F-Dy)!M?O!dESA6uOYI8?8
z_jJ~Yu)Cel1e+>WId&i{5?{zDpSU4K2}7%M(u^duXC24(O{nh#+LUOMs8hXvkFmn+
z+8|v;J$LDC->=(eT2f;PkDY~hYEe#+hBBRq2A!g6wbjEgJ-tFh+wu+L%kGPx4&ghI
zc(S&&@*7TDp;&K!y}R}uX36yPY&pEY+W==U`jM?eG2(D2gX%aAo`x+mEU1fCQ)?-{
z&(Atsgy``Q^bMnSPbo7gikA)a5X}a+(ohYUG!S;|t1IDrYTG{HRf?~h4K{Xx-_940
zWu3KmpHGGUYCBX5m4XVb94kRt@z4%nD@{zX+r1RsoHzsp^&AfIp%E?Zszq7>UuOP%
zVgY@a@!c(*)U#SY<e*1BZHvZX4Q9UO8oE30xVL=;erVXt%@zB(wA->>`2&q=bavtB
zs_B3~vv)u|yb;Kd{RCC_>!hv~VC7@tZfq@Aj~FocW7D9Ueg%)2gr#C)RaqmR$5q>W
zq=|`Hu4=*|Ghzoe$2Mn4W^j{Cx?W+N%5G88PfP0G`@@KsxEz%obRs3!?JaQVHVWKE
zzCl;$x{JIqFO+4h-mN7?4lxcoHDk5ZqAg8XqrH#L?;W{n98mhilUvR~HEOgb$M7-o
zdyOW~XciTjHdY{I{mh}&U%5necX#&Qz*9Z$U9Avqybo7g<i2o!LS?Q6_L=II?Ixgd
zLVBd>`ikPJzxz#Aa8&O;Wi%8gW{ecjU*5@(<&0dqyld!^LR-1s)Lm8pcjo5L4Fuv5
z${*>z&nN3PY$@bt@k*M1=uxtKcYOi^N2UiOy-?)GoZHBOUlD5R+w~fEjH;GqeZMDM
zslrWpfvMeA-t{^uHV*e!P;uUr$M}`F_?bAE`LZ$X=<&!o9+Hl;E_OlV?3)+Z=@2l-
zi*-P1T2e73{GD1x@bo%%$hB{AH8<aejg=Ui4C$##DjIe-+;+4=sxK`rNzO{&;SKX~
z;ovzsJPYzLJI0oz4tDi;Avg=2yMKUtJoHQA**i8C6wG+U_$1x)6BF@D;GlHEDs&^>
zXHV|{<e+{(g$wpMjR+c+Xou0CXGok4Ns_bU+pZs{%?T~m7@7VRe!AOB$JoIvbL??U
zqX{o;8){hfg>_>Jf3U`-VXklUYcyV26uhX?pq=Hp6SFh>z3F*x`Azht|Fy>1f`%3j
zBCag7fArDP;mU>JWhU3`mW5Hz?rq>tF85PiC#w_VXnnG}k<o#5U$_ZWkfa;kB?NAT
zz<Rw!Pw*3?Y207cPM~T{2=itk@zRgSIs!OQ2cs02=Y>jX>6E@vtEzqm3PPdc*;c6l
ztAqRByo@mf(2XW3WDPklEc;6sxCKa*Fh`<8djSH)6HMZQKv_#M?Z8$`o52@?i1lsY
z-)sl<gpR}!);vqAz83?e(#v-ckNy9nu=9>;Dq9zLoD!8LC<uta5D}y!AZ>yy0YOSY
zAb`|}^sa<nL@$CA0V$y;NL2_BHHHWbO`0SWC3Fm(Km?+Iv|!*J=FOU!yYAfg{>oZ8
zXYK6$wf);C-}fEy3(Xa2o(%C?pO?Ed(GU@51~#)IBuZ3dT?9(t2ek%(2X_P(x-oas
z$1S0T_vh{(A0Y0)qFt2}65B*DOO6*3DFHcaQ=;#piC6D>(_&xvtxYvQZolAsO<<kD
zN-BNzCQ|f3>^xT*$Idh|_vtq1uBK61c&*ZvI*0mOSX`ww-v}jfH@RoGN=L7(F>EuU
z)D~gsXjrg9*ZaQb3f)RC|EbkkAl|AhG5wxpH<hL(qXP3sqy^6we`))Hvf8k;z9a7V
zP@R_c(}OcMn$cTJD{vp2Q^%-M0g7N#OZ*DeV(Z2O#($%usHL}B2JYzN<25T>koM?0
zToY2)6Fe~9n>UUu6Ys1{Z~bs)-7n=TVSF}vY{~)GCl8AQGmChW=RM!r%kQAw``=$O
zyeB;*nsDRz{eJA))YG&S4ssn=V_vyy(C#(F`Ynmalf(YR{1iKq1Wi)sVcSV5v-s@;
zF{ebH(P!z8K89m6mjXXN7!@_-;qmfCi`X>wMWvc&Y^Jvz6w`N#ust7!78xNbxdR_p
z^kkJ(xSx=YtL3WH$>Sae+&0AUcOg@`VDHEG^}IIX8Pj9Zb}^ywx5nT4-;7CgH_0!h
zMEHexMZMQneC1K)Hu9{vP<AQxDXQM{?k`5Jo`?C{WeSrMAFES1!I%!Wl8>$PBgLju
zR|T|LY>A++JyO(7Sy=p`Dj&kZ305ONaFyj%{_d8CdqRSeu`(W)T{aB&4i4WAhuV56
zu8=3D(opekW$$NxOlu^sv0tp#nr;mBH&@z9wRZc~OkNa1`GrPn*)Q&M5Tl~0v_0pT
zd;G+fr4zxd+<5nutm)wA6yXd%El0H^D*jxG9WOW<Q!7u@F2qNEr)JM>S1WC`@*CX~
z7WN&RKl6HfTL=t+)Zzz5YZJjyjHCN}7+b-@1db1lL#o7<9epQ(uR+1#V91m9m8Pw_
zu{(4yo(qR-7ZBQL&|+DBN}(a`J99QDrx;(MUs(G-7q?$#0?;(=n65MV>7EtaROmE&
z2LaL8xDzCZL`S#H=;mx`O}C%T9PSWb;!naqzOgyyBj<5N6v%OE-B<sUoZ>>Wy<v3`
ztN}Wzm#(s^rXO)yAOb4PU!L`b`y^Y*i1+kK{3`sCqF6=Q?tJSqbdsd@B2o4qAciY#
z`l6UhI?2*0=}B_Oc#@=T7?k^{AxVXW#dkwbXpdcTXFQ+OIX?b7CDr03mV;4n(rbwe
z=@V1q{)MNQu@rU-qa<yvN7s?~dDff_vXoLRc<P&0YEosEfUt1V`w?8hbXPzn7!OMY
zCvhEzuxIeboIf!jO4s8^oNe`lXPt!<um6PHsDI&3u*=9)8Xec(c>F~;zOe8DXXFze
zpgD~}@UnxA36-Evo%p0o_hWuO7qjza^y-C@z6E3FRlch4r+F$h4AQXp9&dT4&W|e{
zlXeY87N6uhFd3(9yL<-+q1}RlK4v$U$Ah01aUDLhan-PmLRls_t9X|{)4K*44Ejr?
zzTbNF$&~C%#(GH^k|Y_nMN~~pqVtgJg2~dGEsS{^9=YtBLDd|)oLB8m`($-Ej|-JE
zK4)7p)Xb?mEF>l6yMrfN%n<@T7j+>Q3$l`8{4_KSIPm+8Ndl|0u>deN)}`k5kzN<}
zm9z+gOb6NkE>PQ0^PyzM0PH8*+nb_g1h*c}^+TvS1=ya{&QxTO2G@{kiS4Hxbf757
zKA>CN=7;F4)v%(?Hp5SraJBkqssr@HiYWggG_OGfoWDa2+c$og!TTHaVP>WCGg;0?
zM(P30`1^vJhOza90ybtOhC98+R##)M%=iRQ0{BpCK)NYq$uI7OV%^&vrge||Abogo
zTvRegMs8Hz$E-e4R46WC$lHAfGUDyFNKfxxhhq{FuxbpaJ^_u|usnCgJc5x0$-<P^
zt%mS$l8Ci6=XL*Lxb0CFIH4!b%d-gOsf4-DJO3(i-OyQ%GhSC!M(jCv={PdX>*_Uq
z`}TX9p5^7@f;E$An=dPfTHx#9C1~79gED7Ma4fAI!<|99*y%~&ola^ap~*>`iH<@q
zu2i?R&RrG<?cUxm#~FoIrVuIBzjRRIqU**do>oHR+@pH~+3##P#J0By-pZz))5}7g
zwjCMltxUY(LjUYfolL9p3)y}X2*3`N>V=YgbPMAt20cyrDq_}%Ru)jVr^w|DP#ZQA
zeEtL{w^QV-vMl(MkOD)PUUgHqm-aVy^Q)TD;=SnRNUnmO+jG7(YyL$mmn?0?uV41@
zr4^XO6Z?Qh&ia9z@<rI;J4(5-+avvvQ>NsH2I<c)Tz(zeXs;357KnX5j~43x3-v^=
z(BJkq-+p=cqO^7hoC>fOK3^c^h`BQ36K-Hmn7Iit-Uf`D6gE+)PDO>>C5@VrLw%Up
z+aJ2;trbC0F9x*+8jSsj_CYe4W;QpTkDlS-Q&q}S`?+bY0!DcKTlV-(_!UB(&(`q9
zr@)2<v3|wNyaKaO;5F0Z_eCT`Ik_G+F`Bt?3qVro`NVrQzfQ^+r=Nr^?dWbztPT$8
z9?pzxmR3q0I0e=-!uBKIWWgk8E;_C@{P&GcaHxf$e{2)6s9<Wc&K&=Ca|!bB0fE@4
zy#No?@G?q}%{zroGX4+B6Dd9e73Bm&u7-Z$9=Lg@gL;NHabx`fQDJgEXm1bsWJ6O*
z&LrjhAiJCa_<Kd9Na&1@gdlsGft+x@qompO`1TO9(A(eSH~Rq;D{tEadcY#>agpHK
z(|xBjwbI;3u;brj{fQLqpj4-Uw4HtM4s@05siJ4Ak@$)W^tJeao~+Qk+o?l?OtXfk
zj+OtxV~$8H>o+GGE5~aELV2jT<;}cB#C_hT1H@tEN@xAyPRvv(?0k1(N!UbV)czV#
z`}^1SS0N8Ai~YCaK9PQ0id{Ci+HXi*;G`}+s`&zR>lQ6pAmCnK;*ig_OLxSa&VFu6
zy#7_{ru}&?Ri2b&4OlFmQemQ%5WVoxSZ@St?dBcE3*eb3<AY=>$TT*4zoC2BWk`v%
zQeOEqX4$2MaS@Vqydmb$hj<Lsf1*rb^>#r+VPARtH(E)l?wP@p7%5TVji6KLnPbO5
z_bs0`ztqKWfh%Ix^np6oA8tBx{~gSJ1~NR<$`pV<FYCpkkAXm>ns2#F(v~h{R5F2?
z?``F*g-&S6eS%}ixt28r?N8hJu(QYP;XJU5o{~WE?6~=VA)e5RtfBGd*OymT;EuKK
z01+07l~Zi;Ia<(mVyH@`m{B_q_c>frPD?{qL0!r+MQ>j1asT2efEHWsKH6`tVvAQ*
z8%YiZTQL<5_cpqcmy82Ui9j!6kjF?dojl~|GgQ;pXY?}!f|?~4@Q)x&Ad$fArzZc3
zsV>T15LaMft%>TlF&?O?uFX0fxPZNEDzU1v#to~Dj2fLEo1)<Z4%&ZH+(rzT2L5m#
zc;S|^f6F&3x;$Y$B%g)lHsi13cc*oU$OU{UCa}mYBOaK8t#AmE+4mC&q^@i99LKPj
zTsuo8El~Id>05ewaVaJ=*tH(_5RrXHg`3xG%{)GG0!iF=WiL{4E*GlV*nEh?HP^pv
zx^aKc(-q7QRLy}TpSd!nli$tEIY+v?AF8NFZg2wfQr}b@Q2t9ToOE`efrtMM1Te)w
zUFJU^_K_xugUT@LymR)o4%Ne>a4g#q!*;qxS&2ca8iv*#vG+XM7dm3%5zbYHz&P`l
z(9O)v;3|TR!kkZDA8A5n)IJO&5;t#;O1<xd2va?)V5(VPpSlbTtzI!mmx0Akk8qf{
zRrO92M)LA@u{CV$+5xVE^q}y3pn3CMu<*_4(1NOe75DWrL(pwW`D9|FuQcj)Gcyfv
zp>mVi)+RtlGs2H66f8q)%!#TyCeqwId`j#J5~G=UYH^?KCUX#){x<$sBP66A3j-1c
zg`6*JmX5v<gICqsTgtm*hJVfU4hddyV|HIb^?L;<YUgBgw*dDUgtneB_;V}Em8-uN
zBG+VVZq;6BK>;rJzhDj8ls67_O?p{#&(T@_tKPPbivs~8_htdH-jywn#02L|_!F0{
zC5mdFn&KoO(!Q=r0c;J%qe3#7<epxz)r#D<LW+>_q4vXXN8-rNppymq3$QZF?`)<W
z#+<}kqEwVJ_iWASwQs&}5=d;!a9t;~kWfL}QyD<iF4B3;q!Puqx4f^1&~3x$!08P5
zU79n-<Nws>zj@{#CQ$B?U;Uqlm(SaU*3zub6*-#~jw{j=w-9KSdBSt@r~@#*^0Of3
z=Yi465vQgEoSUkQ56&TAHavni)g$pn<g2yq;5DNli(9sm`p>arxSxIm<h5EF#5Bru
z_Sz4YwsbqFCG_`pAf#O125xQk_LjDE61}-9tjQE0f9wIiEQrY{uDb21jCcA4;#gBG
zjei}U*Wz*+PSKCh(A<lXiX|V}?7Vu=5a0i5T}_5B;YC$NgN{c%bDV?}`###^Ru%eH
zt_Vx|U~)9wg&DvDh4u;v^qyCFbMK}3%&*fHDYjB*Lxlm8{+=trXLSYhPXh9bKmWA(
zZ%UW9P*wFpMzdh+-CHKv0u|@@k4&Tc6@m$*aZiN(+Q+5?Z9*c{GD*HwRX$Zo+9PnA
z^b+5h=A$TaFUu4`Ew7uDYd|e&*8ny!y0R7Fh)POeOWfTkn7|^&ua0^J7fssv7S$*y
zl#wRy08^cA$Z)|3wud8we|FscT);k=ypWTo@2&*Dg+3n{!D0^AO%vc}M>5G~-5A{5
z(UExOmQls;TLA;FE7r6t``a`iMUeV=S~$>);NK(h|L5}74b1_l%2$h|PP=Frq3R{Z
zv;$$%Wy1$iayTqHoDb~7z!t|u4JroRJf(mI+Wxmtjn6tT+@1e4nW3*~Ur?(0D&cp3
z&;H%t%hyILO;CG{Bbv%*V#;}^Tn8r?e>RNyc$1*I!}h!HKn>o0!2<e6y0Fl9*rYSp
zbYKw-(L9P5u-Mk|U{9t}@aVZ<A0*yl7TuY%k~>^qzFJ8DiX>*LHPxf7nED6qei4Db
zH1xq@6_f04hq1RXedPtn#AE0fz{iteQ`QM=E@TeFLEyU@L%nP8<S$OMpJj76NgED7
zlppO`sR4h6Y`#ZfOnyP1w?TV&wZjA)1jtSUP3h7v|05OIdtsHv<%g;}FOLZV^I>I~
zAiC~OIXGV9Z)VcoZA11JOVjf>cz7(QZ+43pxx56zackrsj{J67gjDi1X2%h*L(t=Q
k&;j5Bc+T;+?Ubda!k7Uio-^wLE`bcMo9fl--2T`906S7!9RL6T

diff --git a/example/k3d/assets/trigger_logs_alerts.png b/example/k3d/assets/trigger_logs_alerts.png
deleted file mode 100644
index acccc0dac48b983cb0d80f65c62fee44f1b3fc6b..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 33552
zcmeFYWn3Ih_a+Pkf(D16!8N$M2WN11cM0wmG`PD24est5oCJ3#xVyj2b0_!n-*@-Z
ze%|@@FilTa)#+1p?7C_~<v?QZ;Ber;z`))~h>IwIfkA-4z`%K6-U3(HH2HGCz!0p=
zg@xrLgoO#^>}^fVt&G9I#6uHQq16-zF*7w|qoaR9z=*@Pktn<ohy4Z>tpkZm1WOu^
zh35aYjfT3>8Kv)Q`B%#N1QYP8k6{KUVNe*x+EaZ&Lut{z<qtzQV>hF1K4a;3vQ5lQ
zH(=R!ejj7DzG;AMg~8{+u6Knqn(rY@DEflo{RG3`{p`jB`;m?gM*zF^MSEr0cSf$9
z>to|H=Zo&AVEX7YFoAx-^ueUFb0V9!V5^;R;_zUE)R&2haHMcN&<5I62*?}LaOq{e
zE$AGIp;3r)q-2#u?Fha&3Bw5{Z?Zol?PCYFS`Fl$VH>D2>XN<{n1tN`%ZwflRzqn~
z^nNCVq6?lwT#zCRIs-HL?UFw4vpJ5pv14BoT**`cE)S0~Nb0s^{$gtW+_1GX2<<i3
zDTpCSf{K3EgR?S}fu7%~6w=a{!dUfHL-<j!S9Jy-ES@-CjP&D?ykTbey94M;BIj)f
z;T%G?AP(vD_h@AkrY51?9LPP({vZqtyI4XtU)LA`%+&AI^TZkP+2?^XCKB^B3D0<{
zTx+W92Yx*4Dft^dB<OZZkIAAj3{)5faJ?#lIq_H_tc1=n+vK7}R-zcN^Ne5E6x{rY
zy+4MaL2jJtk@2e}lf9FYn@`#retXeZ5A!J<3xiLMQ2MLf3^aG&CSos=Ll+%<Z|Roc
z2R|$6OFcSILGkZQE{9D5>FM7$?g*)1Kyu}MRI#lb3A{E$1MsT5w1n5u805t>8&pts
z4%ByNG!lYZu}q*=%3xgV!f<F^#2j$k0I;{wJu$H4et3iy2jvGr9r4WizVLa3xG=so
zlFW_7PI{sU6`|QMkKi$213@!TNF#6pL{mQ46Vw%BgqC{sc6y)aT;V?Rg+RESHhAhK
zxDIH-xk9k!__*$LcYQhg-SsW`<>p@Si2WVBMUFDgUA9=z?`$&0cr2lC!XT8R&m=rx
zH$A!QtT2e|>7fq@zt2W9Pvd`rTtyl|yM#-bl&KU?L_@!_-<$^*S;X9V(c0k-?1e&a
zK1bs-ZQeJc*!A;f6JUOT;q?%r)x>DXp$;c#d`awbkrg%;b0*8((%&MiUXJ?6ipRne
ztcG6q+|D<o#vHsq`XTl17ym=c{>3`)zL=C1iZcv%SVrfVp;#4HXJ=}qdnpEYL8oxb
z!C>bx&SfG4vMk*e%2N-4>b9c1M2cmdWzvD^ww9lsh2O?n6@^5B#Haagh_~?V_>c&Z
z$vYdpb`DMsZv@WD<)6LUA_!cA3Gd5R9WQ*KJ3ERxI$j3YwT;lgpj+3^Y;Ox{3?Z`1
z5IdXRW@>4CpIZM45B@A=)*WX8Bkf04`Q@$=oPG`3Uw|?MvWgHk&kwe8NT_i<Uk@%B
z{I|b>99-fTRz2Q1gnB=1J$eq9{Z4s1h;;DxUB-6!OMxwgXswXEYxuju$N>RAk+}>)
zl8I(QNH&5PV!%kzLq$=eSxDauiuQ)!rTC4ANya1$xEp;`2*eY>iAEc6%foMq;1Ow#
zW*?wH7cTlvXW_q)O(I7=B$WG;)R8AO0wfyt6KYqX7Oza?CcADI_LA5g|42YLrwyxf
ziqUHX&!ImV3pcE9qKZcP>u9%RB~vMCNf*w#L;F`Jz2!Nv^pMHVZ;ugN>>xA4FHQ$<
zX*^-uKdc7MZWNxD+zPiszer}Igu_Nc>OurF1Vzgv3sI8Cqc|fYqJes9rX*a&NKvms
z>qTr`F(*Sfd-r<DdLw$hdQA+t&lszcM2N9t@g$z})KHU@1gOc&NREhDW6GnsBnYOa
zrbnihrn;vlrh6?eriP}ROYl`&a;~MzqDnv2lRv~74tk!moHLy}+mqa(HpMN8{VJGK
zc%+hu#~ad;<jfDUPqmLaSJBp97FrhL)zQx56Km7*>bU2;3f?Cu;!=X9PUDKCE~Lvp
z&SO)wRa~7gW5Lxxrp-_h(3C96$;ji)_WGG^*=T0Ra*I>LO3h-yT5i@lL29XCS<OOW
zhH0K?{$ZjuZ@%o)O!Y4V%g=Qt=E`QQX3JCi(*>4MQ<2kSvpP9#nh&kl4*0Q=5uopg
zx~6_(Y#DJ}QF~a+v10`nyBB+ldxd)$%_7>G+L1PqHbuue%WTUZc=36W+R)pI+%epL
zTykA9df|FSdS^Z}J$<=nzvO?%jNOkzj#clfHd^_yX9X959fk=RD<12RxzXlyFj^nW
zBH6OByK?Nb9mQr#58alf&n)hjdG7IgbI()IMNkp~KgVMvqs5_Kx*pH6Yue|M&lRCX
z5{;p~Mj3+=aW;xxlZ2CalhXx1WLidcO~6fvYo<+POz5%P5im)j<i|Mrb{W~(q8O6W
zY*}rYPiiXb#OsqytHw9l$@*f=Q;eGys{5*c42@XSP9v09lyJ`&Sr*j&bT7M7Ke%D5
zXDecZx8AqPT*R5Pw+gc=u|ApqbqH}pzNoyQT|=?JeB^M%zM$(YfX{;;fQW&ZgeNaX
zFBY>Y`oo#RKQ1b6u4rPffO$G)TWeSA=<(;LRk8)+OsS0F5)>7Z39(YF&(6K7s<N{@
zvq$AFV*BCYc$~IIn*;1Nh&DV8a1EBnEH?}{^T$`m6}))7kRQ@`Y}_Vz#XRUPt<D}d
zwvWiJiqH1X>(9qdSJu4ZiiX1t>GU%%h;AVtMy@&cFMiDqH+0@)pJaKDc{h2tJY_~z
z<C9_4c}*Gm!26WHsJujii3*5zCi+GSTnO0c8L#CM4ikF+jLbHr@lZjuL^@Eew5(*g
zwLA5wr}rRl;e>>TMWTW=ho6R(LDVL=CmbQB;V$JWrC4J2ba!=tBqF9Z_|z*C2^;*Q
zXya1EU2H6z2jf$OWVi;w73Bhv2F@}E4n97o`}D2{;|$|Qa<dxpaHuwh2mctGjr~%L
ztAVGM=cmWXfEZY2)G_i2Gz#)#kY^HldM(YKO|^D4PZQZEW@9Z$<)MeE=&6Jvd_&Rj
z6wcoUsq(3mWqcX&nX&C8Z7x>3bF7BkKinceesD2tJ-RL09G7KCjb>k;6B!L%3Jqq0
z!7jpXVdir%Y)V*Kkp}$^8u{=cts(IymY`R6^aS-5UIi}G_|CL!#69yUtBtxv3X75k
z%{go?=PGBG6NNL)VP&WP_wmTlxYX!kQbl4`%qrmw%Fb6=8Kw*tCxw<?c?Fui<U?+^
z(X9{W@s7a=F%e1A?{~YS?p2yH9x3j6x_!I9b|Wb&6yT*6^D6VyIi>d0_DyDD1Y$ff
z;b)DdtuXa?_Ag;0nO2+FWCV^3rB5?0+F$$6XE=249HvU8q;cOgxRqb1j6GO-??3iK
zk;DI{aeY+0m7VUx>6_R{gMY%b(FveOrM1vJY<FGWs33cch0ia~H_p#WI!)BNb=w->
z=D(pI)mW$>v79g1?%m$lW><kMpQ}^wF#a|4qeQf#SbJ1WyZXL@6>T=1{(^F`HL+Ty
zy*`(xxz#&kx_SG6ui|}qhYpHXmF<_apg!Cc+b!GHYAQ3uQIojQ{4{=R6zirsR!>Xo
zd>P|;wvGC3YuScEEB*)gi=<+FQEo{W&v~kq`KpilvqjV=#l_40ElJ9`)93r;yqnir
zE4bAS?fp$A2YgRn`43&*chB#knGlyau$(HlkuT&%D`q-uIHdWt6vC!JB}YYQGfq>5
z(+%t*Y_%-+tRMI`?2UHhFLE({Tt?DzgE-sQTzwSf6>V$snjS>1Lx0esX&z_dIh-#P
z-6~oa=7O@g(VTy8sn5(8I6Ut}X5R3w+WEPCJI<NyTTmIF>FIELc5WOkDZ7rn$-f`w
zOTt|gt0U+@b=~frjxI4R|6H!!`oW>?N%TBIll{l?VPjv%)uZ#u(X0#H$>nl}LzG>`
zR{P9THFQ4`wNJx~mu|4?kE&oIBuxS`zUGJIo7-))`MB{6_{@pSL|$eOm8+$ryI<v%
z<-_#-?Yo{-Zu7I+kHOajxH|J~_gCZD{F)y9myYd;?Z-YfTV?Bu89r{0(-XL}4{O@b
zE$ugC1PJ_x_XCfv*NXdvre2DCaePTWRWB2_tosLT&yUaEu&P7&x9FW~0yWiOt~F?2
z8aQB%a}DzS)E-^ng7HrWU=S~`A0PU_&mgkjdUyPA>8VId13O$rT%;eUfc2Q>zyXus
z19NgAz@d&YZfc=w`d%qZ#It+i1Mk5$K@HYUb8>Q0a(MDm{q8Ni#}AXLYG`E`lxqY{
z4qc`T=B^GDW1oBNNd6T+VhE(u%_m)}+2~v|{=F-p{P=3DCSf8Y14a#;!+=48<A6Z{
zXW+n_4;=U3b5U?gus8p?4gm%hYz_wb=N_Pp`Oho*&;S2?zKIP2g9fgk0&mxBh`)D3
zfU@8GJqPD`Z6~NGEFl4WDjM1w8{0UT**Z$+)&~F=VC}@!9l*da$zI>!5(=cJfJ`&y
zN@|X3GSXazw$^m|Mz#jVbgtHRul<1WxN-rf*2a$dgs#?BHV#~_yu|;xg9|u+y-ZI`
z_@7%GEqRI6WaJ2iZS9Q-+2|PP7>N1c2nh*!?2Syg6huV-Gzb3UB{p+(wBw?ucX4r{
zb77{lwKt__<mBX}XJDddVxk4^pmlJwanyIEwQ(T%r<1?^h!{H<+MC-sn%mkCzV@qc
zVC&?_OHBMa(7&&L<TQ3Q|L;gP4u2jCctHBsZ|E8680i1)8)(Y&dX-Dg+|}4hUBuiP
z&>1iWA2TBx&wuX!-@f_pi2tLd+J9TJax(nSmjC0M|9?wm2V;9-TWerQN520~*Pq7!
z^UFUCdFWrC{C{ZTA2t8yDxhaRI3D_c=Zp_-QPJad+VRXqWR-wVV3Gajl?nW%1m3To
zz?=0G0jh-o@QETJBB<mFewYE>IMqAbkJKi4G9jM|<3G{z6+NG7TR1PwKO4Odg3=!@
zhZ2Su27;Q{|9c3ORR~;8d<To5JQr~LViG$SQJRc%4cX1_m50ooU!-v<gInw#^Dd@i
z=@QD#j(fvGB;croe-9WbLX1E~HPI0P2-3d?7dRY+H?p`d<e#IH47iY#ogDG^f-fXx
z`YraqeGq~t0T;CV4cPwMZ?@fr>AxNLLTaIA+u6f@o&RsAzTKf&e}w>gvXk)b9wehQ
z`5&?YLcIO&{r^vhzuN!5(*)cZHf1zPF#14>u)WbBaT1+&qG6%z;7X5}(Q1_;kz}9q
zN9AHAd#7?O1!5oXd7s1YR*Ma~W7>_#^7-Zpg^5BM_<iTU6BJFy2O{4<Z~qKMLz!MD
zcQ`I7kIiwr7*NJ$me`*v+Unh#Ja6bX9giWg`PwoR$8Aa8R4-@4dqUtt5G(wW?yMY{
z@^@9iL!g5&i<_!V5{?^Ih_8l{W}(8j>%E(-U%c;}pWIWbZZ&0+)9Z!}(q@_j-|S7_
z*86%uM-n6@=4Q@L+R!K~1l8FRoG$geJd#v+x6ASAR1s&VFMqnPHP81tT5x};F&;vX
z-VTny-LCr-W^}RY;V8)JvF7Xh(74NClTJ6~Z<CCA8s2g+onXSgLYdF<+0@hrpN~ej
zO#9<xhdK?#czV_F2KCX3sB+#;8N1{Hi}~f_dpe!?BHfBa_V)X%lJgOfKSpy#F0gJy
zyin}!ggy6&I2g;AOErDx*ui$rVsNab{`_FFBVE9aY~+>7!k8Z-z`=@r7S2+nrJmW=
z@<p$Aa7@(e^xKGL`_ge@W+IiBd&;vO0hM-Tv|%Rm&X`12k>d95pyGK~?ic^_I(%l)
z`s3yI@#UyP7*sTdTrM-B>-NQY(PAO(-%i>;^4mU>81c2Fu@0lhsCul}xJccDo}>-i
zhp#`NN&I7vol=0_Uw*Z17Nl+MT_52EhAC3$q37-7NmScBAQsYyHpkiRv#l$qT%2}B
z`@b9S8kkzi6^po^g6*A|v(e5kXOqMnV}M}M>qkhLXmOF7k?SrJdG=%~lO-6;<aCg0
zl7mIIY}4`4o;jJrrq=w~R=B_#oj5)8HlJjD6Qjf2-zoHnmpm2>HX1m5Up)s)^C^_O
z&rcGF)oe2al8@H9c)1Z<=?Lme5*%JP2Ne?qCZo~DpD(WHJL0Kyy)oh|R-Cq3*QaPH
zm#OrpvwVhRX0^~9x#R8J55Bc4d^4-cX0kzLaGJfp`(=MNLB>9R#Zz%<M(s2-&u_a|
zfInfoAT;a5Nb;ZY!C-sCzyjk$?adb1CN$CtYH$jEG4NjRWb(#RX}dR-o1tj0<xM_%
zmR_Ix%NotxtZK%+DL)E8!z-S&@Tc`^c0B(z&Of|QtC_Dd&orTh3tqDjl);@he5+bE
zc<x^DU>%4oT7>z09;UP7Hrmw+YO21E&z^MD<F+og2^&??-i{^Pih%wA<4z}9!8f(g
zDu^q?<#XmAPphT2FjGv%$!h9e!h1GGb7wz_V_Cg<Wmt9~-m-vUbuzA9FDU9$JN3WJ
zE0qpM{!BqrVx%XC$*jB2O7rGuQe-HAaOY&>?tHNH`H3|5x1v$~sK;|6B7Foa1ysf&
zEJecJpo{77&P&V2B~Q6WLv~TaWGab!29dBb%2TpT8rOq!@2M|~R;RhwPfgoFS<IIl
zOyv>_#N8wRbCNCzj;q<ncCP6P0=c&zpWLO>DREtn5XI@!xf@0fZ=$ocO*Fr^Ey^9?
zFKZO}HyK^~vI*w;V%6<4IA>bTJIq-tkBI#-q0c1I8-a>~qrdJZiN1XCy-s7(PPAD-
zkB<z<Y+#MmX@Dw^Y{~QbHtYHr8a*iw>fZCwY>*tEC5PgHkKC8FAkkMTx$4#9^muNK
z(aOE7V>)Yp2)A@%TE7_Ima(4B%8=PxmI9mx^=@LEoqLnz`yyQ;yG!Vj%X`@@6eVcX
z%*KPU?4lnLEzXjKs^oLOT_j6Y+mm@FitFo#7}7GgD|&tyk31TmKlPtJ8-bjdGX8jD
z10v-2>r+QXpjbwSAhiV|Q&2_%Hi=2Uk{C<ih3Pn5gX+6X%(NQElud>E;@SAv!8Ug&
zUc{13hPE9eP`7#S(#@Cdck#5Ibssc3HD-5__+y#L*QdVOXuIVZhxu9|e{Oh3KqQ9e
zS-vI<_1Tb>Vx2`j4X)JUEEJ9`odG9_On7Yv+}hqEst$kV!0N@TKGHG^1?SJwCMEYn
zr%%uEi^4Fuc>Ae6eN}=Z(0&MUmapX(eSn17{YXvZCtFH+EnOnh(KXU^hPq%XzM3wd
z{r15)<D>ec-$t2n|5&L&HQ?XS3p^OzAxw9yQkX;S;ppR;lfs(|4dn*yAO=7j+U=g|
z3{RNmj&@h4-Y!dYFs0`8GA%BHyqo=LaS&rt7z6YU1a72+@7{yDiv$A?w(`rhznmMQ
z?@dmZY%jjUb%efD^Vfc>JO=qEg*YYhYlJCOz>pG8eaYb#dx(5rhZ0VEQ2$Ajr+mBE
z(p$JextNqao`$OLeCsp*;-G}<_x^d<LZ8|M^Q&OKqG}OOyq`HuONtdb0!>cb^->M6
zXm2J)-rLzlk%EzTvy9;U)Gen~`>7?<$tf}=DpTpz@j1@3-lERBwa6Eu^-pT!M=DN8
z*G&c6-e4Wa7|1H1DTry^nqwA#b{+kNU!gV;xf|B{qxSb~>1iQUBPSH)r&zYH*Q3o&
zOm|`Q#x3={@BU^?vGCw<g)i>a>sJ^?N<Sj|9kp2S@gnRLG|NRUc;Y1}*8@xwX6v=w
z82xEgk-07W>&JB(Z&kjhiT*JT2|vI|%}BwVa(vPxOX3<DSTD|vYq9J0Fd*nCe}_Bp
zGF?QHLi=$C9r}P#$qdp`N9WJX`DVe&ahSI;pS5Qy<T~zUdv}Kn%BHaoSG2ec$Dq9o
zK#fL0CsHgbPqcjA%zmU2<S0rCntY_4)vb6^6)d(qECm--=EGZmnKJGU$kt2w&BH_S
zPtxX>CqUQ-Pf>_rQqo}ci$vSdyknZ!sa$3ID80upqd07*xY@1*V%kG3%DgTR93u>4
znk0jLwi|QKx~W=3)9vOo%~n0^JoS$i#iGBi)KsN%nsKLA?(9j1iK)Z+9muqs1#ExC
zvHey4T@{Y?^+3Dou+7?&UHP^r!FP}J-xNYOnA&8svKQAyNBrUDNVkSkmB}v;iHs}g
z@a*1y&ay!IK+G}mC*2?{LKQ#jE?T5zms%~5d2??&ywav2otp#!tcuZMr5MxWV?EHs
zcn>TReZb_h#@1;tZA?#9mS%2Y@Nku4q5nci0Jr5-G?Dc&T(jxyv-Co|R+XpQmvfu>
z8r8+QSsh5g!{vk@Pf>jz!5@!^=M{^D%nz0th^C9k+&*-B*a`eN{_rQmMy7`VJoT0N
zf=KhKy%d;iuZqR#mZJY!yfa(7m`jm%xz<lw?sfgKtw6hC^@7^gg_^=U#{0WDS-u39
z_6IsjeAo(eKJ8Pf>QwEAi~_O;PzLp|&#G0KP)9#pAES0N<no(Iv_e_vd~UKSN^P~b
z_1~$;E_Nnrtd?EWbaX1UF1X>B)aHtKCjVpvge#B=t#<q0p`!4<L&elCgkA6_-Xzl1
zksp){zOA#sj*o<V6=yflZs^-5))$l8$=^SAcYd(?G1>Ja+!<Ty$^GhQUm_&2&dJP;
z)_z#;sP&v0$i@hsOKu#GFA_u<XD*PUh;v^qyyL-`UHta!qO{0<lBh3RGF<s%<Ia8{
zJ$Ml=)0R#8s?KN6i<WOn-hpZSuV{iWd9Le9M+=rl6HhnLUHy`kvMOb<1Z>u^lcwX6
z>q~BVpSN-IzGBKO4ITyrb5^|XhP~?eRoI|Jhq6R>YcZ-@CA5mTy%c!SeBmrL>b6LA
z=&$(j!|9|TiM0cM>}9Heg<tDA&WgWMSD{dntnXrbwg9}ul0@XLOx?I^D1pgyY$@BZ
zFhH=(!jkyPeR1)GR-2xFOxMICD)i56u93a2-3fCN9IPrqPvVC9i#0*2V(UHwz*&Dg
zcOy%;ndydToy)Irm!8{9JzCrf+92~k=d62ix9(d?L*m1VU$ur1+0Dq+jn)oEY@#Lp
zCt1O$8SQYKMBHPy{`SA5OTbJ)EP<{Lq<pMPFxZ14tb$v)H5uRx>w49cgW2?IO@+oi
ztPSPW7hQiZabjo7tj|YO2U_@4^fyS1i$;`AH#Iw_ULz>Gsy)1&$gxmgq=8p?E{M>f
zt!n!r^4IsqzNSR))8>R=rl~DoK9zB;#j_dD`rJEm=0Wv@8^viUuauxrOhxf-t$6MV
zQhl>tJ22X*E#j{AS^Z@wUq|o_>3AA%ugqKQTP8cmK_RP#=G?rlc{|M93$<}Up11Jj
zGVr{oAAdhq?9Yhe46ixqw;<R3<-Dq;eA?;pL{0|*XuaaShX`D#kJHYUlQN)>qe2mL
z*+TSzX!~N9$DnunQtz!HY2%E!<1u_5iO}BD#=hfr7G3t{$rV3dvd?0>R}w=@Q2{j~
zap(1Q+=Jj<@A_4BhxyXLa$bJJy}Y!K7EA2BW#8?_Y(g<vKO(c-njTjTpdZ2eJFnnC
z)eEn5%cHGY8&Y2;$tICRUWN&I5n#3Ol!WIJ5^6+s95#%wFjQ~gb|L<&)eS1wi2Ir#
zx&x7bZ9#?DhcAWQEc$a9s2i3)0qKX*!sQw(6ufx*;XIjU!N`3*HN{wZVh19AB0e-?
za!tRZ4#SSJLbIGrTjZz@!Ni6@Mo1AKCix#{s|F*-(I-S7npmdRnmn?*$o~CmG}Dc(
z03|0IF6D38J{S%bsEB$ZcL=XqBb}1naBK494&+0ga$Kl5K(HKlX{OlKDWiDHod`QL
z@;A<k`vD1ftZU)>krYKfd?t=v+7HQ0pS)Kd#eim_mN|PWGCV2o9?tdCF#o0%(Z0-p
zW=z>6HV{1{5+gi8YqLi6`5J3u-jfAsahDfx8qx*kNIb~3OvgZUH=aAZ@jqww`&+%P
z!2zN0BTeifHXB}le~-!+tkl+BcrU}{!v)E%=I!C(%`#1>vPR*iA1j$ux)qwHW&X4O
zA`|4mG9ky3xT>{UFELhmd5#<v`zaMJuJ1TBHghyb$E)KdL&s@lVWk>m{-;eeDi8q4
z;&e_XYeOAp{S`$m=Elo==Blc#SD(ehnE3ysN_iYW&x3ixjHxVnquLYA?oP9|0Rjn8
z?N^DV^YzP4*e0ZZrXpV2x0@>E%A0pIYL9U=s>ru~VQi3L=yJKDV@L{~FXo9+<l4D7
zYwz#)TCd~xWcKYU-Vq00wcVT_#I!LFs>{&e{}h=3Drw^?%*{QZY92fty_5XA^k@ME
z+ul_>|HV`Mj6{G@v7N|u1OMu=QxlMQ<=pt_U*!yj0Q1kZFWnCJ=b@r~8-U4e-5y@}
z<4t`bV^IL@8%?EnV*KqI+!hefZ8)j!PsRWSOG@&pi|@>L)c<z90>C%tiS(9#f<HK_
zxajM$kvBb8{uiNXB@<ZRqSc)N{RNVu!+}*xmOHjp@>=Qr=Wvw*P#(?p(!bfWI3YGl
zww<JCM#_XvzH|yxETf_5QysldD<v+QRmew(ii0RiL&MTir6Pq`R?C^nI;)jdbx;-`
zKAWzP$v`yGmv~yu8P~1nrw8NlOy2&wSqe^v-%|viw+2uu2rwG%YmA4<0aPQVq@rEJ
zE|bg2g46r4am@N^e;W0mWos-$(_*?fe>RKX$GdI$;rb}9<N037`|(VS({WdBX(bRN
zMnDJ+kk4$xQ)daL^>!mnp;V2rt=;GOPORDG<U>QVe9Y|CkGd*G6*iznky@3(oJOYW
z2JC#bvDBO=YznyUv*C|O)(>}QKM00P)oa2nD?sPl!xV4cA|Qu=uo|=Rk!`$LLwFuD
zluA@&6!ImF7e|JZ=;3=Or-~FwFy)}&G2_QFxTUs-5}X)KZhWPZ=mzOK9*J!`o}B&R
zv|8#JA|P{!fZY5YYvLIcctv2u?9~IrhEGJc-Pcz34_=q@O?w4t5OC${HKL-Cc-Yau
zlfvw`hhP`d$)qq<Ww_kV^IA{4;j7Ij$yM)cThBz@PP?GV9Da|KpJ#D7Ns>z^XNR$<
zLM4YndI|wEM}gmEA_D5P)ZcV^is`6wA)`zuHs!WnU}@SfE`fl{<aPmZIqj2T)t$v{
zkEW@LM&RVj4yP<SZS=z4J)Cr0<p~ACLA4<joG=Wzu62StRApZrl(&E~-S>;K<!Pkv
z^cT<-{gSH{CsT_d>~I(j0v_)VDyT!nP)~UQgIIMz!QB=4XLQg>0@hv%lW}aV`Q%&P
zW|=g$iCS|-k_<(sw{R&e=CPegKdg|6dEGA=DDE~M*MkWX_oqv6t^J}<3WgHtb#3z2
z^Grrl@0HT-+Pt6dOx^bKlOWDh=+_L{Oh&M@v5GF2fdpC8wvEhkwp>}F`FpY4H-E>Y
z1?8{kR0erHH+wN+A7W}u$8pSgh`{-QC35a?QfW;D>q=|YTF$>Ue79xtBN9K~csNni
zk}@3u-N5(@cb4aQ=tw%}g(Nvax_<ml-K<U=i}}QE8K=*4D*_J70G4?*8w!c+?O~x*
z5~w3E@I4aGsc&wFVi+dvR;I@>W3itZ4x3f7fXD)N0bDQ=0o|uCOjetYi!ttMy)KB&
zR0`5HQ^0V&kMZkiN&i_2!JeF1OSNC$01g-b4UzrBQNuyxPw~K>i=8YVy7zQijj@B!
zrdJ2ENqk=SShSx>jv1EcTHPFSM|wliwp&ixnaf8hk}a4kECMLu*sp?$ctbuKcRXFE
z@l6+&yOI8%ADlcePL_)}$V9KXPP@ff^qt+UPMt-<XKNRTLKlwMk7?X4<s)hAvf4Oe
z9R9Lde9LNr4GudXuZ7V8<PFG4AB!Qxk4KdYNQj#(sHfb(tascXFYbu{GwYG`zjJZX
zL45n+lxYU|y!Ol%A;|D{<f^|}Bm?)@ZrQ0GHp1v3K^Ha%?RpWo>}=KD<FMUfq7dE`
zfNQ$>VDNzV&kU`e^?5pe=^hlzKrvRdX}eNsIswpviEjnVO5_KZEAdo{TL%>#Dh(02
zPD9q$hx6yZ#0ao&gfnVwmNmE>clC@uGxwPq{f31lB?jE7NI=#UK?Inu+xgb7&2GK#
z_=1!ukMuL&d)EA^d?BFVc1sfF2vk<oGGq)<*mP!3rW)pJOp`YH!r<|2s-zcBP~zLr
zL28+ZVnz-|<}?vvx?%>Q7+}n?Y@%uJv)*HDIRQ(_{&21;q(tbEJOtHP*Xt_b!;*sb
zBEHA<AyotpE0awZ!602`oRj3qDEsQvQ){?C5h#__vY?_;QGH38sJN9UR=@yo;gZt#
z5~uSanqPFksx5@iF*w(IJvgh^Tcvnj&zquf4<*v5E3C!ozoQ9prT?f>8jZyNC|7U2
zSisMQv%Y2gq?Y*9k86u1zDDzSK1_cwd%C^5+|r=sFv{BR)rtl|ZlKOlpL3eqr^(Uv
zty!nd-CsW1vZ8I~I^pGZ6UobQ6L0~uPzBcHiUus*d*6aT#1<=;;M56J5+TM+#@_z;
z;2~WZ&zCN!XSLkSs>P;ybJBc3*X2Vk4Vga1f4lbPiC-1tF$p$Hs<c><u@Kp^ShvGF
zG6(+~jE>tjhC~)$o6Z~WN<HNad|ZZJI9_9Blac5^`1i%b(PA7kE_)Mw17A9J5<aTp
z%mOys@fy%9$8RgO>nvw6A5oofv9S!mV*Hl9V*sNhJ*=m?J@2GfgozXnjGMhOT;&NN
zG@h$BxZM49pQ#s;o15rT^04oExhwx9<#DpoMm@;>!xfI=FqF-1O@K<by|v_KvGH>*
z9S=$XWBe!T^hyl`Z~mdmo0YY$FT!7E0}zoliWJDOnT$d#3_8!6b~52ZqR{Oo*K@2F
z>-}HiX|<b``lARc=-xykCphg-F;1-bym)o_IAfLpB`_0c-AF9i+?y0w)IW62^wW^B
zkUA7lz&TKRDwH{LgBCmBa}ZwixR0`oy~({9H>L7zSKIqpL>t@oTgwTKYS2KZ@BA)G
z@9S*6kuEqPpf=!tjjf607@W>6yTk<*b=gVv9_@!F*$L4QS$#4<EH%5~vBW80BC-&Y
zc@ZT}?>rx*$U?ZqGjw|I&l6M~fC<9Nu$rs<W*yi5bgjvITW};3EaLgB<8`Ghn5}3G
z1QS@Cwr&_zAigSNdI_68W~dhqDhG)NqCK~tA%t)ota1g$<qYMn0(r<?Td?O(zQ^3K
zZ{7%ZAHNU`<$Mae)NKd6-AwS+dYn>&jds)B@3c4VyX$Fw`J<pkxojPdQUehoZ2wDI
zomMqq0p~olt`Vqv3L0P_iXazs0nu(-lEY2A!=fg`uG<W@9n9ruA)kI{rPZxw3{Fw`
zHwWkUH@OM}rmQqKW2vkqteiOqcHI+2)vmA<2kkbyx|g)iikkLo7hlYIPMM;{^!Io~
zu`@=>?EKAoV6yKVeme{6S!q~O+%p(Q{30^8Q7J8I{T3O;|J=x@V4k$&^YW0z^YVD%
z+#pmSxTUw9s$SXpaNNS=^X%ECRiaY1b=-2ow%@t>QN-u_UX6GFnh5T7bq%Pe1X_WE
z3YF(R1E|DSJqDnUY7j4MXFZeGknDetU@y*erCiOMX1zn!_@*+V=7ldu-@cYEDn6wI
z?@1S*3{Qs8TCOWt2}i*(*<EPybbr-69x^Qk*|9~09<R^t&T*_kTLfPS<UUZn*Wl1F
zM0Qoo(%W5y13X;*^mez6^C`INkVHY_+4DaT#(z)}V6ur=o}nhr>}V$Kr=5sZZ>?$}
z?#y%;=M{A(s!5pE%PBfiXKAhn@cGlDW4__Q4va&?E_jG|72Ulz_(+iFeXo;zkZ#1f
z3ZHr(oM;reY-VXO42O_W0-g4PxG)};CuacD!4v?4Z8<#^XQ-?P=pLSCb)gq7TYUeD
z@eyuC7&`}Ks2n>T+id5rs|a|!@LBs!0jn#qhrPlq1Tl}?oEOj%Od;T3bZwfpF>@)|
z%KE-XPNK)hFph+(cEg6j64I3^)+XEc?Pe?w7$q0rG@w9$!Se`V3&9cA3UD}(q(?*Z
zqmBq+c}Jb<w`@johl|N^U{ktoH~<lq?}U(_1xfe!5D}g~Y&TUpQHMID-q#@-R3*1?
zNW!etR6lxnmD4qN;&}B8(~JPXU!*OXVSpNg&5@;p=dcskd)#zV;!fZSBuTDl6`hJn
zM3r+;V5{KXc%BKvl#C-m8dd1DbzjpD37Q#l@*$w)Gr}3(G{I1$6DAX;$LpsedxLD=
z(|)&i{-Jg^H(fNbCa?@REnmBLx0+o!U)0`xdwbk=v*K&cJq248mGI4(B+Gdm0YHbz
zLPEA(R@_WG9T>WyR{5n>T@GeOzbAGN3Ur}m0XfSA*Y`!m3{u12AD_8@UCyT{ni}_q
zr2ImUXbPVtLFKgHVps^F&xoUt#hLvEI_-nzC!Op10_`MdG-?~c6VC8f4Gw>d;ZyMP
zY(lmjDoAJ6)}}DS?rYL`*c~UV+lLZ{&Z&{c&zs@oEl0ZOyQ>`?Q^m@|lwp<u?<zF_
zz_W-``WKacWcBIn7h7c>8Wld9h3v=0Q|zc<!FXaq6UrS27+mfc3$OM#JAb);B$^O@
z<L^i%Amv8?0+}?xI5>F7sesARaFOQ-{m_c)@u_d}6kY-9!~vCUX3f*)ky;6tLMGLS
z<B(kCshE~SBM?o5+&RL<{wsUZ)qz`ScQ#ONoR2V%V^zGDc+q(J%piFQtRGybA~cHi
zfM3)c@@W~(9YCD(RnshvG>fV_54~>smG}kb%NN(iXyjzk9*Z8k+<511*mlEHQ);!!
z>|fI1ERp!!Dp{F|q3EEmkWmt^7BFLo4hp46KMg~V>>OhF8qk?yGtw&YJ<jgD+1r7;
ztQ*#wQjIDpo>oO)E?*L3IZ2!`B+sYJ+a6g^P2Pl+d;N07<77{<2ZlczVX{w_|H-je
zP+i%r#jw=#aQ~9}U2d(bPfZ80sNa+llgd<zS8=`7e9le-odrX~I1qLgF!+N`8?q6u
zI-6E;$g;X6P&OEgfQoCvy;P|W75qg{WHR&?+HAPlheSh6kuQ-cq$)25UQ81SLW)ke
zeaY#wbXV6m+>-vaFJHd7S>hs_t8)f$!Qvk9x7y$ZE0ZjTo4tBg_(;HHmHmE~(T%vp
z4FS3(#C*2tPy=W(NZ<K0ERqj)#fTV4)Tw--39>BX;ROf<wTy5^nOr?)sE`p0l2HE8
zx$?IjDsO$LA2T@1cxtaJs0$-c7r%_7i|UsBuJ<Y1c9nq$l>sW?Di6X?-j^U;o9IMZ
z&98S!t!b*_q1{vquG}h_Sak{zQ|{wOtSUG90dxvs%2;Y0Y9uKAfFyvLNxak&OxPS+
zi5=WacYw*fy0aP9e51K>^0_wz#s4R<Ne|yw7}lJ}V!LrVxdLj#Bi)2Zf>=8vq&lt{
z>z86KAl>ai266@|+1plpESc_DgPIx}QW;Qaw}f>QDlA1ys}A?eBCle8A2mX$ZYeBL
zy3*pPSa>-C7K1>y^{N5g=5HQgjc1}*X40rv?}D354~d3<=+Z^-fLOr3Mh?(T)o}I0
zi150<tkOm|IMSU8rVXeR+XM<d6V<jD(RHKjH3?J_f%W)aE*i$vFmt2;)Jk0A?kQ+u
z{!Iea$03%*t65!J8sS1arnu0<^zJ=f9nkP}83_pF$cXU{dfQb)0U0zW1VsWGsw{p7
z!4^*>4Hgi=WJMPqLs6n0i1wKBQ+7^<FkPM_kfis)`?Z#z%{-HDL6*nr;7HI<zzSMB
zBVapsV&cCgRDaQrGV1M-c^Eyhx%&KdHUw?s=sV2b@10Nfh|s#XsUj9ta9`AJTb>M@
zP(gG1&>mYU4Qiij=(S114Ytt+YjQ@z)bvBJ-}c1QUU&5%Wyl5nqAJx;R_q0xEu!Z5
z2-n5kh!Zltf(LJ}NUx=Pm6_;io$t48y=d9Hdk&Os0axQ~S`iR;hYjlm_?eKv4ku;&
z`t>UKXETa)hVIaTwPa_ZEoWmpR58*EyWvCSXFI@k29)s6JRmQHWaM2Jh8cBrSL*kK
z%bPr^?JqUesHx78iM;d=`EE-9U^r#^h73!}bg&x7oUn{KDdM<E*EWlCuq%@qaT!f4
z2S1EaGKK7iHZz0iiiHT0z_^tDj-61HAF#UTBw~?M?Af9pD^n3jNQM&Ww5d0LM5!h*
z;y=-)BZHyS#M7!(3aq&8;5%WThhQ1eYSc2EBYfaddw#r--Nd1Q{nY`Ev;_rw>kD`e
zB(AP;nNE6VtAJvw<E17h+Z7(CJy(&u-zm(dIEV$H?ziAfj7<55!35qgb3r2cno)a`
zg|j5VC5_CX${kJG=pYlEmrPBuFH6_-k|gJj%gs&^0AOy-&T8e=&%WwOQql3;ERQ(p
zWTz4oSIczxrom#G+6nuLkthI-@1W9QXYA7wC;+mHn$y_kCR^D1Ak$ebutC4)t#X2Q
zZS_r#&zlbe@TjM+C@F!Xe^we8v~6jpe9&4vi~-hIX@_G*z&l9HeMQFXHKng@`{^6~
z-*+??6V$FsuGhrZjS9|AIPWn$rm1wX8=k^2w6WxsG_O0^p*^OFR+6Vnbyo;{9;-%D
zSw9kLwz*$jDu1I!3BzG9-f?~)R33A`RN&A@+ojWP7GLiUy!vsx(x&;Msor3dQHLEl
zJM)A*Tds|JDm+k??Q963ME<-)3G>#+8OTp1nd2m|w}F6mb=|uQj|S4%E864LS&>Ri
zDql1xzwkp9tRl<Fro>ftd4-$l8%be{!ZTPP4>4H#CMyh~)_709g`@aHd>WGdb-GxY
z8Fl%Rp3S$<+hRziRP7tIrP3@=o~{QxhR7jh;Tg|aIdAla?lTqV0vX6jz*@Y8h%zhU
zN7b%Ln=P4bMgsYj)<Gr+d17R<#&cIb(e0@ZKHu2XubX{FPkJ0sPu~D~<-hcgS_DIZ
z%!0W>qD=kj6OsY3sGkQWl~py4<tY=dXhEs}h9B-$k+O$>B3Cq`dN~QfEtTDtE`!Ty
zA{V8^nat#=co~RAB5NoyM~tHdG+Hm+wr@AI`tXG~15oU~TAiqH%*)KLI|Nw^<*))4
z#fs<K<Ym(hn|xt71s8ce1QdVdc8`1xzr!WrI5r%@LvF|<;~6G|BUn6^J48ubg&_C<
z^l2+D^3;JD`70O^Z2Y?F$<3+{Jpfw7wt3v_Pg2~SZ=;Fe2bpzGLHHl66X;=damH5)
z@<|UT=VBOMA@*X6LY*Q!+KXzBrn1H@)LFu_q4qId*rmbbj_S--G_G-~b>-3MtivdI
z>EOeoQzA2Ln0g~ZWTuLluWbh9@2Lp;<YuLha2<Vl?h9&>N~B@j@2OSz^7h?U{h|##
zOb4=!`(T-!(4riFfq#Pj3yX*eQXLOJ(e3x^?<6Xa23h>vVMcy$hc<1|^sz>WXe*oT
zo*(b3O-6AzT~D*0v1n>LDQymB%H9ZZWLI>Wy*xiTkN%o$J=FaXeEt@e6!o?IhscWm
z5T?7Y7HISwJiFw5F@QS3i0_N?=2oN;g^kkiNk}*~?wdD9>-GNhF#A<*nS?TjdSPFB
zW3Xfvlkr#2r>ogW_0#<DU-+dH;l0R#IFr@;!^`DXq}{OFXY-|6P1W+#09asrzBSli
zcSTBctCkh2CiM=Nt(N>?cJAdJV<ItQh;AvJ(yz|t#J~z7Oxw9YKZe<L<CoN||1KmU
zRI@kFD8UZp8ta==Mvt+5{IzqTD>8T#4!ko|+!wq~k-z9lqcxiB^H25*?d&l@yZjvP
zo5L*t@><L-{9#%2Tci@lHh`EC_%X^tb&n&GXgViibr0eY3@*_Xx~lx<ao$N*5N1%m
zAa8fRQ^GOOCNe9YL@ydDjMTZRD9!>fJb(kI=(rR?HG?itI7O;(%a5>NdyeV5TrSM=
zrcQqL1?ptEw}{);3$-YvsWmvB@|9O_M6gF}uM{}~0eP5j^8^D7_h(xP!EWO97myTd
zvDCYE4LHJ-IKH)~*|w__R4F+bioj3GtF@Wd^&*4J-gJYn{Rpr}{t@-IS3i~4qrNV*
zyn-l|AtSO;MeSDK6dDolr%&>lE$xKBH=WB0ZQK-5h)`f3A{FBv#V=Dsb57#Wo|`w%
zNNNU=_<Ki*U&S820$K6TEI-|<<nk_WSDWh&`v;zi1DD0f_;e(%FnU`&{asy8^B*-?
zaa_8mekX)hK+(%Z@I;LG@=@t~^qB4)W;YVb<ID5I3CGm)2@J^tI~}EZ=r|DS?n;H{
z@czZ*UtZw}+to_re-U^-Aog$7AnH5(i?=_%V(A@TJ&7@Y(e+z^0E!#u3K%8&hpPZb
zJ*5Y9{&M|J^Y2Ci(lzGSisk^BE%;v|p#unbkBjV9*#FW7|4*R*qlP33j9=-6Mfa_N
z7}8(AOUj!iB@=1PYn=e@q1xxg8^B;Cq6CT*@<}acO7(Hu-7ZWxz3v_7JiUkH^2AXF
z6Fw&W$~#(Y7_Kt>5pJ0YP$Hx>fCCBG&M3_UKxsZ~20h<3DfoKhVN7gp=hBl;;(cE+
zjCX&26V?3-8vJJnuzR#8oUvD);mHAqE{ou}5R?J@^uqchQ0*1wNhS=LO@z_6Q+`w}
zXDN3Rf*_5q1ZEgD(WTmbAvcPTntj<(v6H*(UrL|>9<a+R@xvntn{F!GmDcm0!blPT
zw(h?s#{os84*^R`2}lXqm(lux4Z!-lYLn&xPJ#jmGO++xkrwCW1X|xJIS!FBjE%D^
z)^4f4Je*f#G99xT4(cAngh!Jg?0U`Ru=clZvL)ikC4gk+jm{weF;C=*MftLHXalRi
zOw7Pmwm>?C6tI3lj5_m4(Ns2Ti@XQ7VmibA@QF4L7xSOle!p~D(BLSzsijH$0$y`r
zyVAJjI4<WyN?Of&1lI~#zB>_<v2=jt_~(&AT#l-|MW3kC*C;}Yn*5>Q-*(Q`n#Vof
z?PN^=FgHoYe@bCgadf~WLj8H&cvxgoSzb}{SH9)y{rz^5?$*UPe-iwAy4!mws&vm~
z-p|(QtAS|g?L=Pz9GLLdL&14(g3RsZ>1MkJi9eoPCRMz_W_gPCn;nzfX#gZDkZCC9
z=<Nuj#Q`S<6S8xr5852Y1JQz+9><(i8nxfSe|P%5Ve)=-y?eS@y<(AORp7vO1;T15
z2yjEcT72J$n*qYX%J7_J?zpT&GTmM5Bmv;PPBpNF7f^l@m14obU>wCeGjz~fxXfr@
z`d3$ygF6=z0HA~M(Y0td>Jow+e#iwaDB{j%8-0SEl<EG_41SQP39q7U?DQ-n3k-Y#
zP-<}i=idJLO}N_SWF<L=pCaB)i1dKR?R-}^#8p;Ag&zoqkAO04bhwLo^psj%KR3Ca
z<q#5cx!z493t)IMOh9CPuoHy5aTU#$rS7IuA^>(iR0H%|ARNX7NqNsK+~dvBA_ait
zAx`71kocj?0uR{d1Gxn5dRX=2l^D`zM#5#2uD4mnVawv|*&2+yqL<A(T53`ZLcq>h
z?N>ol1L*)sj_<%=2+9?p?SXVo2gql_Z-)SchNu=9*%~sCPN&V4izOmT8SH$U{dm1-
zEBY))VRu@lSQy!!*Xnt94t^xcS?jgg9|7nORlV7<h|W%E+O!?oCz*Z4wMX2a`FWVW
zqg3~cGJxrBr&^XX9&f6{h~EP}4eR<m8Rw<RRt_N?DZRbkeZ&5?1Fup(=mv+?BEGqn
zR|pcAc#UG!3Obl`Gt)T*BY*-t2Ozq@!}l%KGc0h00>rmVJ@c*lJwf(Y)2h&3d@;EG
zxLKn>NzYP1K<Ov@8v~Y<0GR8+LV8{=H2OCP0L{5PXKDq2|4e2-37ekp54Hgo5eb=N
z<~<KU8HHmpcH8CDt^9D>8Ozv?<UX!!+2%R|@UWRaP$LA^5jKZicKk<GIxUqazQk1F
z+s0)VgwNiD{_$lxZ5pCcA822BQJ{91i<$nFE4E!!m^mS~ucYo|HB*}M%5-T<k}i(d
zT1-n4N++}dnCpG9q?0vo5d5LpC{h)>es@4fU}Mt<fLUUJdrwF61sZ8a?5;eID~pJH
zF`3a2GD{KIF3^bqJdmo|DGj7w06=lb2Uu$|bfb<%67bVuv3|yJlcZdSd_k|B$3bS%
zdSFZlqGx8GR0JTE$lhD~8d19jJ^-t&1J4!S=M(iJ2c>_fyP}r}$7!xw?+Jzu=><qD
zj%#5cZOjLVfP1s7v}WZGo^H85xyu2ZAG-IN56a<TFtQgg2T^iU0b<vZ^iz22S#t50
zH}}lrJS4C9*1nU2{q>=`8^C@DKXZImM7oF;uqOr#C*6Ir$HniWID@h?UMgQQA)G=C
zP46ey1|$JI4-#$)G2K+TcFW~GBYq&te@F~q+gQO71Cze#td2(+`bQO-HB4`}+z-Y8
ziSo0scB<|wBnCjA`<rbEM0?hDAC_HK_q<8Iqv`6rl5arn!l~zI22>R1-SG5k1h|gY
z0QQH+cmyGO@q09GG>u*A{&H`7M$`5kOlrsw19iSy>PImx!af+?)0-6!+s<M-2OTHG
z4pM2{;yGc9Jh^3d0-}8#kE1#;A_U!3fF^{6#J|V24kFM5YCtExVx6fk&0XxN)}9+g
z=_6UP7al;}{z4=I71a-1_<3`ysT`#2q3eB@|9HC@)x3&7w{e2&qnSL!3||WH6R-vQ
zubV4gQ<Mz~B65hcXM=8ft#FnupS>?ge3jOV+AhmvK$K%YULS4;n1^!wZ<|MWI%OKH
zZd);8;n#rKie?Ep;OKY4ye%LaC9%L__4kE01|TG=_*gQjq5G?Y?F3aFluBmY<f#(X
zaq(0xr(#dQX8P;6%xB9pj-?990i!6P4^y3W77HhQhsDs@2=$B2<ydQT!E>VCTC>Y%
zXssupNZ78LIfNtJKKV}1aX7S48=snXB}-P>Ht$C-Iw(Yx&t{3ECu<KN+95KLMV#OI
zMN!#>=TP^UVepx<0GSvH@cR=u1LC#5_me^Ia4&rtg;^1FTTM)_u$fH;x&z^bF&K|u
zsjdoG#KWP=yR-MYp5N%KqX6C!ac=Si$Z47I+N|NtLV*X9_n$13Jy6th_Ewm=>D|SD
zj4oBl5rNg-Epp^2Hw>VR=RNIw1MX3*FVejihK0B}ryw#9=+Z2_yNKlg1!b?ranFF%
z@Dec$hM1L}FDs@V{0>c#LmwS!BmqEvJ={g?ovdA~roP9t|Eg?$A9|8T-9rLPs`~0p
z>P*pg+gfi8x+Q6)*8`ZOk&35X2HsmVk7-0H%k`e;`%;m?kk!TU7F-fiGr(aE$swkZ
zmQbODL+Ckd$!(VcyXnTW_;p=&>pd_<5l0l0SG^y~o~2t_f4@sxm-Yq%A2%pMe-EJP
zJ8Ww4y*1Q+?HD0jenl$S9nswY8Aq?uoHIbd^0$c7e#nxQW;Gx)p$W2sKb`&BZ;(-3
z6M4&fw-u-Fm55B9qgV(Mb(k&Fq*(R5i1<8;hAKV?`Ah%?_VVJ&ry&6RY%k*V$5BVx
zuydG`4}6qH66W#?syW0`^>U#@m_zgrnPiX3^#ifUs4>LGC6CQQ6Q9zqiE}6ez1xk#
z;^Se+7CRp7esiC+GGC0fo^W1xUwGd*Xs_Ok0n2eL<$=aw+#&NK{RoHM=COft+x`rH
zCoIEdo{9p!{_#G|wSILsePZDHw`r!E=pj&8&acp&JOF7#A6b$XDrbblIIpVX{?uU8
zNus6=3Xpd>j`iT}ZodFp=?#3ZL+K6V6rGwb3+5Dz_FLjrPuGjXuDYIQfsL=5Gfw2+
zrvWv)P0JCR6Lo($HVLrnVl7>abI#+Wt&b#%XJhG=EjruHjpEu7gr3!Q$>7-ko|{ey
zY;Hg<QLS(uTZRT6s|JhJLP^q&&9#v9^aOUlT{swVEdRAC@_fGA8Ef*EtI**+>wJU6
zAqXfM<GV0_5wN4dVGpR)-vcOjn8OE02CF%Ss+~-aA<9*sm$u!NHV-++aZB=rLep->
zx6X%i@>-r}eV|ArzT0fIM!RngnR{!En~`X$TAu^atZz@(4FK84IFUlYP(p$_ok>AL
z(HyYy3L%q#J@+ZAYGV{*@SpXf<p7&pn2udmy(r3?ey7Uaq>zFh4r`(s0a7f(Q`dcu
z%&&vN{&$Kg+#^*Jpr<~HEYBR!r1x?!Ea_J3#Tc5;OU6TkY>mk%<hkmry9`Ov^;XX)
zcyvBqQU}7;G;GfWy=MIgC%Y4vzg!^*KShggv9M@okS#+iR1sjp`hYy^#OMX!$wL6G
zDL!6K%7U<7g@%a&3!P*u6;GE${Hy`&SZD+Su5jI2@CSEsfVhzA?~_`q9;SnL%97Y{
z{3!?>3h0OXP6(b2V2gKncGvRaK(Py~7|`?$fJ${U3Z9xn712v4P#vHSD|-+(fVhm=
za#$VKs-UD4pOY||y9%rsgGJ~hgnIzD?aNQnp?<{xdB4UOq89q-jU;ebH!M3tIL&;Q
zCn?ks$n1~A|H!KP^IYM-lH#ybP@HZId^+7wYnt+~AW3rUS@P&b5es259tsHE$K3%)
zNMry%u0L_=fF~~yx-4o2whk#Qxo$>y&*ul2J{Yh{q$BcP{)|6wKOg#N05GCd+n3y&
zzmpAn0dbGD##o>>$w35OmobgNE}irT2i~8Bh-XYtD1ilHNk9nG=DC_ugrGMRk1vwo
z#h32#^AyDOXAzuRvTih=EXdJnvOj0DNUzQ+e&g$OFq5D`!CF_gZ!lRPqoCOcq+eC8
zX9j1RQT)YHk7N)cozUQ@6a;!$c!=Prg-RRfh^!}S@}X$8iudT@F2(D@f}Ox-hrJ~*
zO<H7<|F60C4yXG6<A=ks_c4o*?9{R1B<oZ*M>30S8BtCldy``%n+VA!WUtJFP}$kx
z7-bwGo5SyQKI?n`e_!`?|326C`R8@Lo%j2-pU=m5_Ru1pG$_|*APW&ou^&jzCFG3V
zoAvikyi+ji0~NGaVhN-+Fpg0JyNY$-^`p!6j_LXt0BU6@fB(muRqN2I$OG(pELZ}}
zCbdrtYPXXq7>H=W>uG7YR8#{n!v2^QaI9*I54|$;E_^W;8nGgqd+50kErYR+kxzoI
zOg=7SQRVinq6tod4!iP@ra~Or$#9=9$9!QP{o|#8jxS~06*UcSb?S@B(Pk9P2`zMH
ze{(yHjc-6s9&o`{AOS)QdPGwsXh6Vnv#n0^wuk1oUqafm0QjGgoYN)1iKm<cpiXJl
zKCf18XboFB(r&krbBBWy!HA0--ysDz6!&sS^*fj+-@?_-QjKfW<8my@OPxw9__^|?
z>;|5bJ?yJFQ5)t%-LrKX%0a{DLzpn&7evKK*98X@2&b-t+X7qW{GBW*9wn^)1;+`j
z<QqS6{+X^7AWYIs`$0v01{5TGft!)PYfus&P`8>rQdd>>YJYeYAAmh$8w<2ZLPz_*
ze>2nbIZjqNe5;>r``FEOrL_6T@ux&yh?zg$?U4MktzysjFm0XwJI4?%7ysDE)=y-c
zy(&%&f(EZHzL?gvIAVrS>3KG+QLxzcCJ19ez-*8YmP0NVSOxcHA<sx!F_G$-RO%N{
z?bPH7F$s6>8{}_L9&?bRf(E6h<%AZV&U^~mP#{_)e{xycY5euagYv{8vri37u=uOV
z5ytnz<3)6u{hXnK_|&^UdAjr8y1!}7CV%Kk{Nd%F6p92D!UR}<;P6@Ig9_IE&INb4
zZWM>iH#U~nm+_r3Fqi8e7Ll5Q7n&&_d0wK!hGc_f@0*PXCaXwrc|;|chM3>Z?r)Lb
z8^28m$LlY2W<3-%oj|&!+Gir?|F|-+p@z8Wk@oY~ZuhKDRPw(w{7LBCdC<8b(_^xX
z8BC<`lV~Oyn_U(p;8|Jw<@eKJ7aC^hlU6c)_a<J==m4%8Vwfb{<L=qqp!iGX8rHSz
zyj^(ZH(5<q(l`9$HxNnz2?A6K0YEJR>j*w=d-3`Sc_KQesH!*V>J<>><2=FyQN3R;
z2DV>chi!K6aOQ3E=t{L&{;`nbeXS3AANSxnf6lZzA5sk7rHP0==ke+LC;!HGok=3&
z4@iSXRU*{pIK%pR{2b9TrRJVXiLX?sP$!VBtgrWoztYvPZpGJy$EO(=CAt~w=0h}h
z<^v?->*V7)ZV2T`N}{JSA~3?<*pNb->U&UkSK}M!Ra~RZnPW~ZhaPeAzP2H}-_)Bw
zYaP5lK)W`xt!fJ7+}Gx42CfohIV9wCu0fyFSbezL$m5{)Wm%n6P@lmLV`Ii^qAM-G
zvLiXQlg2)w7zGz;E2==`-DA~ymFQ0WCF4f-4+H86O~3w>X(WnR0RZKjf$wTRrR&9j
zfj!)mk;PIn6q>(|W|GPth`N;}9!ibYIwm#z@W6oPyu_V0n8L~C?ZGm0#h>ZqV1HZ&
z`{T{y+15(IM0kClJlLYlCY(wn&i4Roe~-rYU13mk{Iw^)=Zz89En3gb;-{L1XeB$@
z1W^rhLDU$al@aCE!#Nl>`*?aPps<*#uVHR-JJzpx4oHY~^@*d&4M#mG<xH$$a_rgG
zZ|*vfs;5^7B8>;b6QecCZ?^)$kZ*OiF@oZ1;>H@~a79W+E&~xS4+PC*f>40~0aa2(
zf1)1==Y`c_?Q+XNmG-M3=U_+?*o>=l25_oqV;5U>#k|ru5T9az3RWb)&w?|0RM|ND
z1H^n~vuVBhDrpUR(1_QP#4P8f;(>5b<!6HALhE7m(^)eRe(UgGsXoVJPY5*Ho9M87
z$br2B=bu5eR>?5)4TC%VV*8OC7ZjW{CEZr_Cj<g$r8o&^eNG`zR}$k$`-}H@X?T$}
zQ~5t{ce1Axqu^EA<txLrCPd8##sOq*AQRtq7!aI$lSPPEmV4{YISZvHdpX!xhXmed
z41@-sL+hanBjQY6yW=K%3QJ5i;64W~;?`X>{e0Vq^t%kco}cX6Oal>qk>y@AQ<?fj
z`aN!AiunzDn2VQ6sDt5XCbJ4LGNW(T3{tnYL!ylmqAd~Z@8&oEgf4cG<uL7;rO=fC
zbl{6@IDFzs=IX?s-LxyHTlK+{4IKXX8z@@e7t3E#y~JYBN`)!`m_mIc|GJm8c&lDE
zRQqr+gwy|I>wIAA@~4!d)<}$wQig@pC!i!eQdXxVN3=>Md9T9w<J_Tws9QBaPs;Ye
zr1rZ84@6E~@$_Ip*wPXS&dtltk6mdq$9xBt+fGXg3WPf8qA|k9g|eZN(g_=Y4vAP+
zfB5G}`55AWt+`_MORVId^{BX5$tHmcqSXc>A`D30SM6n7jpwd&{AjgggQ{4xjDS4I
zL2sxIW!-O*Reit8K6d9~^^+Odez;j6ib=2*$J)#M-80wd(9($xHtnd%CQm2UwsUbk
zzdVRKn`1K`zJyE<5YEGaf&tLFQL37@`{fpaDPopEt>U2+41t8B<KEWXePNYzH4^33
zfs9f#*_Opiwq-1=yjoM12Irkr!8%J;oTer48-Z_%%U1-ia~VS0-wADoU6OB#>8K`h
zdMmWW6HsWZ72K{TH~rjVl?BJ-9$sH{=%LYX8m{EW$b;&Ioql->Zf9O42nc-C7>N0h
zltrSfiT^cyhJmKT&dhqIf1cqXro08Na71EfHuS%yLuJs^av=HQ@897ezQco{cn#+-
zs4&+5UsDTcT4M8GMiSlyo(Z7fqW~v0#DFzY<G-dwHqdl}?Vm>f^9(~E<dPCLA*<I)
z_kT?%yr9YaB=zRszXLk(ng@&+RR6xH$p4zmLDP1m;&Va5yTCI_5NHTk@IfMx${-^8
zr)fJ9H2H1WZT#C1t`x+;gVMNb`?27EP5<`{mZ3uAWEO(t<J6NzThUv(y0HXBahC^5
z#eTA?aNP3cMVlm(8Yf1ehE`9X;OM#1bHG6qfHuCJWz`uWf#dc&XnVk=uHmsi^MVb4
zBQGLOK!6hgHr2NqKZ(GKu;QQyZ3VHh0N^<@#5b<iPV*X;nx=}Ir88!DE}wt7<9oQ2
zj0G~)C`s?jp8V(iFP{@*T%gbghdTk54oJ8?@RXePg8r&Hao3F<8Ge8+GcpNi-6cdF
zK^Sy24>Pg4A1WRmT4bdnVoNdYI;@R-eVb0*bCq8+DI6FL@<S49n85vQxG<QRj1iW7
zl)Fs_R)nE<+*UvA*_RpmK#=-Buy~-647Pg&Kupa~K+56eQYb5c5-}KkJK7Nkw<R@M
zX)FW*ayAelIne*e)nps|Xss%kuIEO_tU@0b)uPLjk|GWvK>WIZPe|ASz&qcyPdh^i
z<wNebu=<mZaz}sS;L6=mFYGDOy*KI!=`)f79Z#YxO0M3j$jXzVZUdQiCZ}xLn|w@=
zt;P<E<Z!5^Qx!_%<fzf{7fm&_i#FOo2YwXk5T9=GwokY71|;SQzIBbWAIuJIvIStV
z6`&lkAd8?#yMySuj1u|mc>U-uA5vvr)ECV^-}#WDYu@kb70QF-#J3=j<O6G7ANn}g
zCJ~J(v>8>!YQ%@I$)NSHZ&;|cAlqSJ8UM)A(dyzuq6>@S?%xH2_FWUY*$=w~w)maf
zV255X%N3VK>p7IT1@}As>7*t11#(^1#*K#J141U<uXrZ<_K)(eOS<|3B<2^u%a}H^
zn*8uy9|2vv1)f-rf(|Jky7hk{B(OfO(wWX=h|&&<C9Ha6Hzz>o&grA&@lwX1r6~RA
zDF7Bphs=Ru;9#}5>|WB?Q;=?DKbdK$FavP_|H7~RF!@*S{W_9z`MN7d{d$vOusr~^
ztxU7JMQmAuKep-!qrK6_$cCzzICVScG#|5du2@36+0y3+(EVa&G2`g%<i%5EY)-8h
zm#RwZP9(=$Laxd7@}hf6!M)rFJJ03=EVVeu?8P01a_)we_+cnv{eV}A1j;5Vnx+QP
z2UThy6h#uG*<LPP*6h<Y0E{Il(AR5c{Tx=>6~A?J`-_6>>GBVsKiXS>6?mj2DHKF`
z@{*QAphtL{sOQ&ke$1B&&>!Lr0XoH#&4iz=l1*D(99V!!gloxajXeb+4Clfl<|6=g
zGlCmRhtj0kr`}^{P<4r##hGef=;=hA9mor<fJO=n-rC`ig?ZQ#7>ah;T26b)I_@PD
zKkfPRZS0g!IxgR7q9PmI;@QB9kqw+5!nk|#95rf)**9>MRTnN3?B8_e7b0rb01ILJ
ztV(%g|GMo2q*+%^_gl^ie+9PWO({x5a-3Pex}oywDZm7DCM$`H2@3QtZ*LlXM?46j
zAyQv4=R=+siAxS<6x+fY-r#f_(ai=qoK^BecU?qa3jsPJ&<PTBJ7$;_fOar%rmruh
zY4kHAi2;7^CjWV#-Q2=MSjJ%pBlF6S2(|+NaAN|>>E)7R&2->BKU{KOa<K8m?*z8+
zMvIoS)5c$8W#+#=ojHxbDB3^*wa$!t`{GAz&J^Xr{<&i&LNqz;yFZf+VEv6gD*)5R
z$>lyAAl}w(d9Zim;-qWV1*7A_`;~chyWdT6S!HP0H`T8LiFlyjvLKtOOCTI1V)$z>
zsZ<-=yYC8o96XJ+Gd(aWxQlp|YKHG#n*a;hm&n}Gvb&aV7X}q9yI^N*57BC>i=ALp
z<-AndxFLI3%_jTDnNb|xPI_xVAblecuuGSS&CxeE>a4p;vL2q7^C%y2Ayp1*xL{&X
zcae&0Cirp61xz2$>dt$OG05o?pUozZq_^&q>b48V$HO{`>L=p-tb8@AW7_FKz2|5{
zW;LODv_=oz5}(SCm&}5rY<40<w%`OYwwZedY!Qbl=y>>qy&^!HlleY*c&akmGybms
z$z}eG8|;nI(?DfT{0orRBv?Nh*`n2(XP=dDc<#JcCWPa6GKJ=stBGd_5(}73-!=a$
zD1teTi)g)-HShsGq-PPNeB|!ZgiPChs>ZoDl8j^jmiJ<<c8Iq{AT2}+`SjCn(ue@!
zd8oHI+&Y4GWv$5Tbub8WWy}9G?&E``AAK*mf6q4BE|3QgcE9vhUoC1n02VXNY6S{x
z?zfXS`?6j$6~Z4`YzAAbZeW;nm;u^juklgLnfz;J=6H#@42t;sc)=ckm>7-BJaf+p
z50Wn4(ss58HW@)fwZ;&C7Wt*ujJjv9{1&q;|6RWrr|I)P8~6~sQlN@+0VL_i6<Zy7
z$=tq-_&%Fs#C$1WA(*v!S6_g*uY$hg2?L(3|78ujQ0}dTFF@&taTra&Ch>tXI`Pja
z-(0PF&JXUr(pD}%ziprbJ%m1)wywlq#=|$eyMB4KkTc#gZ<CTycwqUGY8voAaEGIS
zXToh&Gl0Y!E&N&b^>iuK@>L)o@&>W-<Wrd~tiqo!lBA~ztzj$RX$Ei!>mr0(*ne%Z
z6h6MQ0jw6YuqVD2h?m{Io3ChKJ!V14SMv&Yc2r++3Og4yVLMb-f$q}f+Pi6jFX^dg
z(@=K;G1;#ID`J0`k44K4aD;fXlDk_1(~nyzVv1;r*S^0A^9bNzOfKD#G{oKl`vJ7X
zB~{ib*kSVm4@N}*9y!EVH2S%n3`@|Te~pG8^2dkl>3#BY+X7Gud{0YELB*f^(l+$9
zrPig}k?$aSReecU_42_<5#8Zj<1ZKf!*Ar^QN>xqF=dyG{kk|F$Ir8HAQbo^C5}tp
zD}1!rsCYQRd<uVsU-GsfA2KXJ^g~YyyT@-}Y+|;a0nQY|(r*;)%v>?Brp;S|R8=<z
z_&m@G<#R_vxtjc2+Y!a>leJGXE9}_F&{I!a9zH}KhCXDXDM$?Y82K!}1$eF;e&-BP
z96u)Zmr)Sgz(fkFDLJ`WFW6=J8iH%R^ABs<?wSCyJa*VwBuhC62Z7Ajl@k761QAWr
zq=;LopYvE5hkxSJgxR=T>31Iu<H#R8ilWpYV0{Gl2U6Z2T)qbh4P26sq6ne4o#~4#
z2dqsc{{8yKp7jO)*BJmF9tspzlPu=7Y`GnU(g=`WZPj$zhn2}ar@f5oWof(T*Mer-
z2Uz1z_7LkLWo|zFTqx0v4Ltxu@>z7x^KS%_nro&I(?Cl$T6f+ZId+arDYHG~+bpKW
z1_}uWyN`=l8n9J~A%c!A;Dve2n=H|70>i!=QrdHwv<fLdbc=uA&C6Pm{ky042d^g%
zzzauH2c!@SIW|AvzF-A}?Y;badZf{b*H9y{yk|RQ&*jg`yUPcIKAG#Q-#SJ;cG@Ib
z$j9C7r<dUYS6H)bBDbcb-8a{7!E{<of@wJJe#^?UZ2WEN$U-=Uf`S-nhC_PL6{4s}
z$Lfk%R|ihKChPR3A~fGQz|5!n(CX(y366F$%a*0FSxhB<yYfa};{qgc`1b>a7GoAq
zr3oc1ixvizEX$xlUWhv#kEmJpLNFVRltF3~ODtW~=trmuW!^%$sX5z0Y@1XNv`)Qs
zXkQGAR8)J5OU_tfGdK1Ti$<?#?zVUDh^#Xc*7u|U^03q#CZ`?7{|?{!WI5tWsSB6)
zzj%243du00=h1O@rJZDRD6S<%V6?kZXn{jP4q<VroaxhgMc?AbQ&=HB660WUH4aX>
zB6sa`o&MAHqmSr7BOO@p7T|$?vAdHoD*9RkUZgYB31!?*zUDJsmn_|pOt~(Y(6lq8
zN$hWldFz(~b9m7pu-VVbZT}^qO`PVA<xiV??IUH**o5Cl*U|Y#57g}yK}^jC5b72^
zAJJtcb4=fOSc(90B1v59SankR_~|tq_cF8bz<bD&D{QWZ-<N42U&Lg@9E@*xEIg45
z8^U5`{EkUw+Fie4{$s;gRxn*$*y5_(=Wx?b-Ik4=t!Dwh<Atn_I@w4w3CMYA)oo9F
zv(S6F$eT}6*k1niC2rPMM{<-n@?m*nnjjVz4Ujdjg(PMU#Jx%2V-g(3%Ovk{=OLe|
z&teYF=S7*J)Y5C-4P|+LN?5{~DcMqWr2p>C{ZT9@F_X6Dc0kdy_*q<!Ycq;^VZ6Y~
zYHqieNzVmPaI6QDA+!`u;nV#T3yZ)5)HBuLm|kvrLGy8k8XyllJK4<F?{r3Tl2l(a
z&Mwa1@4Zs?nZLn{v&GtDE;QMd-)yD$v0sb8=2(mI`#Gkt@q@%E{ePxf@kA?BFc;t2
zr>G!0GE(m4H|}Ox%{fgfYSsj|wG4=0+LfWh+7#gzCY<)nUmVjvfIwO7Ffa1C_YYFF
zQ&IG2y_(Nk3g`eZzb~PuiNG+Mu<WlIv*2b5&`P6;_OL`UtWAR-fZi?FhOT6o<8P4^
zDV%HCpk@mDMDmU(N<`qO>?>RCsoW+l=}jfY5;0oHdsOw?!S5eTcBgK0Pw^o^B*oP$
zaQei`It?CL$`=#vhwr=W_zeNBg4@OoOk(1j#0dL%i_7m}-qAs#=wU_sR2Pea#{)sD
zJP}<zhIm$D)R4Ik!h`%Fwc{CLKlN9O*P-)c(fJUT2Np9dVPk(RcgH|t1G_lj^^l&b
z5|Qpy?JxII`$Rpx$%G0WFLRBCme4&m&3p42t+=K0%B|aePLt@RqYeJ@aUJb?A_^~*
z&CPNfNdq>hbie(Ck9caUqKQvCR4{E<6T73MN9A~y5sjN|<*VW@+qPEx%!Gs^HuNZJ
zp?<`;;dmW|RB88vPSv`<&%!3@V;Gu=0m%l<chzEt5)m<xz-lfH;@6axUPZfYkzc;6
zNO_F?=5Emw25;lIk+lBkGLUD*Ld1JN5jIO^`N34lY#lm2`lwUFc}CMW;m8OzZ`RSb
zR^PC(pBA#WVB{WReMLaazpe3l-u6!J*{TBkQ75yWvAA}+6S#)rzn*f)pehDi+P`}z
zc<>>02dt*0AX+p{n@q(1mo(ZP&Dxvmb_4l)i<tI{Xv+-THgFW#z{1#{)>lS(;^yO|
zRSiOoDU9&!Zkpy4#q+1oNu89RN}MIlkAbTWj;k8Jw`b6C-ARgIcEXCi2m4hTOmNqu
zv+9{s=lsl%6_rr{ZQyrl!f`{MUG$ilGPAhRyiv(dVdtwv^`>ZmJc&m&b)#w8@0Qjv
z>e<iaub!m`mvt_3gM-PPu%_z|QhV|g7Mk;OYBQa-0^&`44un#HT5@Nk>|3zkjN2(N
z)kdHex(<H?CAXZ;lhY<kTq&P9)fGy^k3}mpE4rm<7^K--v(C4i;mdRtk<Bd74pL}7
zyVA8qQSd$UX{07uLOoJyg&x2Uoyf6UwA5pXW+IcKDY7)2wpe3ZkI#ju4D+xyi~zFB
z*1u9H!)@2KLjD_z|Kj84bJY)9YS4PkYcf;rjC;*-Km6JiUf$&DBG>A-6rqPM1)n4P
zbwt$(G*Hw|X;{H=FA5U|#GKyhdS$;mMG$T;M$UQ9yw>h_)`!HqtPgi^ujZtQO*HEH
z2`6sP!+5!v5T#NQ7){ge*XO`4#8<ohS)Za{@fZ*rcc?YfU2dnm9YTCAw+)yaBK0d(
zs%zRS>S)bPQhPbmN4eCRp>y!SAczGu5Uw0+x}|C+O>Q=|`#25WRxXpd%aME4hN(8E
zmRpW#)%egQ_#)4q67}T<71`cbM8+<}L%DnRgENJEUz~gKWBeH<garFTZPNW%HADKi
ztPyYhk<Q)h^P(%W_tZO6s*bErt8wEkYUu;pLiaDfUTck{HQut#wgECVVhFF=z<D4u
zy;5GGqRxzksCtfnlvA5Nw*FxJk=Itw1pgyL-kS=3$snjq&nK6RvN_!HOECr8$);(Q
zGn3_h5(MEe_W&#i+BA|f+)=f5dVr3?8r$Ji0vPJebs(gM4rnQDwudeA4*Mk;6dSVK
z4x@?PpPL1llMtYGf2P~X4&Vge<u(Jal)Q{C(8biS1L;wGdYa9|le5p`kIs~jfPx<i
zo`=)rTEq<8uY6Rf*KfYBFC5jZ8ngGK?>d?=7nPIe*;xZk$;|*VZbB4$HwdOtQt$_A
zA0+!?L)5|_68Emz9-I(bg9u;l1oGuw#E*nxk^~Z4f->Y&M8Yzj^-4M!4Lgtg1@D=F
zGB}Nj@yBewDdA=?FQ<Ra3*d~Nm5D}F`WYOT@0tuv(Pwa6dGb+0o6;T54w58m)tvTG
zn4wVi!(YuA1UjYGUKb^SZ$PCg_%^VMTixk(Hp7qOc!t0n1%i`3XBO0W2&Da%7*KVK
zWFHV$g;@#aB~LJ6v#qL>=}lIauafyb`p3dONBKJLF|?{gA1UY_DZ@)f^3yEdSGnUJ
z$VbS9b&)x`!%*~52kn5Y%t!%3mnQOIn}eW|M&~Kg*Li?}qsk#ayIQUq5W<fvcWZ5S
zWY_=c^k*wb&alkvYKzTQI(ya>AxM?ubO5@&had;<EIyE++0&6_Y){~7?%gC;)b|J@
zAo>Lxv3_74(yKOEXn8}Qd7zz7oavjS*T7{JBKz@vi<#RK3DFfC`J})&r?9t*Mer%T
z1PN__S2PE|sf+TtF~~((R~PBCE>ipF^QLU>(w3wS2<u#@92f2*355)?w?6>rSMNp7
zhoGb&l}od3K(c}0?Qndf<ueI)+)*X5p8cpevdp9w>1ShQ8kT2POWpa2kifONK6=gf
z0SpxBs6d%I1VG+`2BY<@;{W0NN<y2YD?j^G#zZd>y@tBlus<Cu)Kkqn9|}i|M!^JZ
zW#;b-U1g|2^4v!RjY=BR8Utr_zx{^Yz-8NKmKGfTQzT_ykD?>t6D8)Ku8zZzUdKcN
z8!V-=NQ5u-nAjdD$)MN5KZ3fOVMb}O>I+gchh%W9+dOJK<E7WSVZ|7eoLRzivNbr~
z_~NO$S?sIKzrOYmOzTC66MfU?0z&Z#cf?uybE>S1bC2ov$d#3qw`Dl6In7V9mIg<A
z9!P()9AJLSv@%QL>Q|5hkWKS_{{H6-N;xr0eF!U#GdP)<$u0*Q>K1;yXf~@s2K9kq
zlHR2?Y#iiL+JkbW^TDU2LsBm`rnBq=#~R$$1YUu(pcP&h{?!4*GHZ|D+ZW?6|ArsI
zw%b%MslC4NoRO8U{7UfmCjg^D45mL;Uj?uUvU;nPo(K#^FPnnmobvsvID`3v&^H$y
z=g~}pR3)zif03o@N+EfWufde}6)HX?y$W+WekpwJ;K_Xe3Q<w*QuBTXq{5A*mph*z
z{T23uyr~K!)2SHgQxt8J^r{RJ8{$==+mgDfIJOo#<QG8lA9-NtN3cC<rHCP(Oe9eI
zmFoiMaUvY#fAW+h>5lE2=iQA`F)HBbL+zR`hTbQNddd?d_SS{EN@v{uybX(98a#&g
zFX%@X6q2w;oV)UM?k-);c`-~U8#N8JrJ&92xo77N5wy`wS!RarO!bQ|VNwNkvDczz
z5gQiVTR>o;%60ddu&R2a%*Ijm?n#Nc$>&E%wmsy4Pu6cMM)GyYV2g$7imi3(jm|IP
zVq9(CD}YvX2njv3i8p#z<san?aL6RLfRE=ZiP&$>NSmd`?!MBEJ7z=2zj!O2@E;k$
zL+k)3gj_`Xx&KIo016MlA1+2y-~Nvr09*h83%$Tc^B2eP7w#V(AOm=eA9Z5?zyFw0
zAwLqh*tAGGY+3<KXfJUiPx(LcBjFriEJO{6(eeBisiOZ78G&*D__d(~$_vd_iTnTd
z-1ANVrU!b!hfE5vt@xLx*bYAj{&Z74U6iQL=HCHXWCYR+&AE8^ed45^e>t1am%(@>
zwF;stAfoaAk|D2E39k>-0dF%F(ER7Ccw)eq-zUxlZ!6bI`e!bbxByj90Rd8s|5qPM
z9Sy&3KcGZVe4QT@5fOocQ~Db_>>CBx@+>#k%Y(l>1CRt3M5O5d*ajQ5kOP}@LjB30
za?Dk_8;cCO_0Md#K*|*fv^a((52`gpL3M|WpY<Mwm9UVlZV@F)t#nM!y<C<Hs0Lik
z)E%Jtl+1SPyILC#R^6j0HoFj@I_tXROAut%0rYm^%MUd(^{!cpbLXL#6waUP9k%sx
z+6CN()Z_18Dj^5q=M{YF_;fQEsd&m6x-y9i$lk|*31a?+#i*r6eEhtxdx^%BkF4!O
z_yJ@gKBkx;O9CioW<ZUw8bO1ETKiBN0kC#Cp$ArFEbRyJ#+z4Jz!yTx36uGicj6X%
zof=Khm5jgt{Ac>}SAPYm6{kRmjRAUQzSZv^t^hU1f@$zF0csNZ?9h0N-9J478%S6b
z_ihVGVf9N*>k|TzZQuW)KHNm$20xW7cX$9DMA|MWj$I(p$_UcszN`|(0HDnGqD1R&
z$mqF5m-{ne{eX<VR;@)q9QE3PZcGPcUgI}l2_(?`TZKK?pFAj$uJ&KL?-&IYUB1ch
zn+_K03I3G$e{dr{5|<PdT8-(R0HWh0{N4oN3XlUx?5h4L7Yf5TbgE9;45}hwffm6q
zpY)F=R$t6uMUKF(gieq^1uH$4;~re1Cye3MU@!>QYmPvItqeSeZwY}T3>2ZjrY~3!
z7%VUvRZL{gBfxgCn$FgXxD=xpdQVk1GZ-T*Vs&W&&`c1KF#AwBmsoa)3=ftmD&|8m
z`x#Ppg-`I1P#LL#$A$P*eqg}|2raPyct)wJpLl{FL6@bAas$Rhb53GL1)D(m?x2)y
zyH(kWVft0Lj+jDCshQv5QZ~3gklXNCKuA0{dqYR%c_OU6TcCIa9seq<%^E5gY_Xi8
z|93y4|L%tfT2H(pRPK~n(RM|a7geD@%ZIEdF{ySmSaI+G%0m`^{BH6A&^?kSNuF(X
z(8ogirCi$7&8r<p?*OYxCqe25VipW=mR=C1FZ-;<mJt_w4YJhb3d!h5;7essDVpUG
zjgQjd#0gR~nwEAV(#v_D{{FPj>S+4|-29!ONE4}_c6i~=pX;ZX!Io+GZ=fj}8in{g
zZ@VeiHGGR1oD|g>*o2GaV(jwxo#9TvCkhnl7h+RC1L@AC<m)<bq|{G<Og;m(qtp^e
z-E3olnFMj##~JsjmD+G1g+_x!2Hmf4EXpr8Oj+aZ0B$1tnTG0dusMf@IxE%z;%59M
zRZ_JHNZyG_w64Wn5pNYyOV9)LWqdJ4=DxW|694(}O@PO`Vdv`0bL7;VMxNgFtH%ac
z5qKA+AD3Fm*h3jD-lr>`0!S1KfQ2s}Cet`U>%fXAi%2+8CV}8Ul1Mv_e6DmQXf;5c
z8V0cEBd1%Oa=3pUSXcUkln;pooc=Shmuuk!h9YAOC=gBEMhyr&!#B4mH)94d#}T0|
zAYp@ps;FRh7qY6SXOno3=&GUtiACwbNq6~IRE+$dvC6ZB>n;~P<^r*KX-~Fyv~zz(
z8z>T-zg&ynQDwjj;DrXRm4mK9n5cQPDV-dMEZ%c*uE33~T(D@th{$UVpL?EvNfEbd
z525_#IY5-o(cbee4#-52S{ZUcc!{4Znyree3NYP5+%v<e_O<T=<er-u6s?IJduQ83
zfW#NDw-hFIECQd^*$2ZDVdiFgu(!X+Ss3qd!QA1~G?#0J_8k?aySS(Dj{#(u#HVI?
z2!<C;&gG%R38a=-ATDMDnWI7SJwMASvY&Yai)<0#$S+cd=G(Wn=TjU0Z~{fCVxLR{
zZ_f@}u&|sWir$ovrM!VIrT70<2x+{yf7sdS%9&(p1oR=W2s^m`#P}0l0s|syWOeSt
z4}h2(JR`Q*_;&L*0eA#pcqwz72S_X;ftbbfhgGGYyyS_Dn32!xs78Fq%$gV#p#A&^
znnSzzHJ*~7QiS9Y;6glA5G|n{nh&!aI;5)Oz$c>tfAbKG5tcNnd09|;3y~o`{Gyhd
zV?l=#-xmqD%xnuJA=em#`nkQ_1iD%t<(n6oWhlqMB{vF1>v>qbGXurwx=HohG%WJP
z2m+gVpmF1oXXv0?0dingAja4BWVBc?vyV9;Guv+s-P!Ei2Q~q9XQ-4>9h)?5iq-9-
zqcNstV+0kDAj=puRhciw%*-av@rytHE-DTb^WDqDE8O1eA01Y#AGovz5UqY!YY_+!
zJPqom-Uf14rj!R%P_2gu=a@oTwSncHnl+h%bb(D2=mP=O9PHx`F&L=kiB3iDfIYR|
z>Tn(ABQ_JQI6gENOuayow*|uK_#yv}9a!4R+Cf%k3YR~2)!Yn2X?=N<P!>$eSx7`A
z&icBce#Wz2VPS2m2f~;ukW1j?iR44h2g?7;SWp(t0E<@v$gs5hrvaKRe203Hz6ECG
zJ4bv-gy4|(s`9{9kKG$G5Inf`8xWZqM<9k_E-&1Mj;qbMbkKg|Pv9^g@LSr_;5K(A
zkSg&i<0MR&ImNTXnAYz%G{|T#@cr;Rc6M7mT-!UM@h%6a$)IE@?r8VR&a4vC!7rR(
zI8Q_0JEkEXtYstq*V2n*@paF;huS&ZchaX1vgj9XlROZGwdwx=TQWVHlzP>?W_WDt
zqxdOiv}GDYIk^Ik#y+org?sxim#&YQUPhM`U3O}d1nxk$H^0omsRsCRW-eoPW*Pf|
z*7|v%Fm<bvLT0U<d-caP>fKBrV_EVq61Gwp2pyoXvO19x-{U>(kS5F^pE&I`_;MVO
zc%N&`1GcDXN-Ar%C8U2_5b3LTx$$?yK|iy=Hjn#NxW36kPiyho6(ov|KlM4A3QpW>
zYag~0(U<|Gb8sq#7HdQ3+kU%{mN5gW0UL1zVpi19s%HGb{kF$7J+~)58NPe>#lb(T
zAm3QEKzC6#XFP#)7dExhxFsY1Pfs5l5&SAl)Ucahm%pY_J2iiR?8TG^i~c>SN18MD
zSowMHGr<I01#B5!3Cl9%YXu#635G-%|IRtWZv;{ozZLt*#g`I9>=}R~f#^LI%XXh~
z;Nc376H#<ZR1%T+kksL;BexY&0QBox+#B>tBN8)$mmi;L&BZL<Wwp&DwMI74;PVtd
z5;GpZDy-;0QeSaA!MNj(mLgpU6WJ|=ig=H=5D_fGWpU`$kp#+H8jIU<Zgi2u>`Rbe
zMs!@b6>=<G=(pCu6srF4I&Q1)*&<)*{A(UPtuIlsCU{VWOS1m{3nSyS8}W?uS5L1Q
z<#N&kF;Bdnyw!cV<)K83diwN5y~InsPY2j+@5&08X|0k*`6y{gOpFz5TUZbl@sjY#
z<-l?e^ecL^a|Il=4<^<W*gsk2MnJW?>yuYIV!i-&Cp%kBhSG9>>RJBmdsX_CmtE?j
zm_W*tSXx7$`700AUz7EGco%f_g4iC@)b3g`tX+HVeJud?glGT0U{iUK^>e|euE2OB
z8#6!J;sgW%yL;ANCx|1|E(`|r8ZvI=0yUu+2aa~2*q62aQe`?>EdItr+%uO$K(vGw
zt>9ui^y=4PgEM*gB+Z|r27s$6U_qeg9%S~nSRaez1~nU@QM`GZPXXWBt8X)a+})rx
z-8%8x6VT1*yeQ*@Z}>gj|GzI&?e1OtD2%n?;GS9`(ffo4hr+YM$^v|!cKT+lH>i$r
z=$Q9h*hIZ08E_)Bf71>I7ma5a3ABUQLD+BT!?_Mf*rG;I)Mo?E-8Ce^PtEqb<*d1Z
zb9D?NuB5Ud9GO+9!@ex@WZF2X|0xxp{=DR!2-$LPemi1re5c(T_);U@!}1aD7iLsN
zbPR4MF!zU_R*Yi(h{4F|k^oXSgFpFM62_Y_uT)Mqr!(HaH)LH$Y+irI_pMO2#6?1U
zG{u2G(MuXX2IR>)Iv1^}=wNmwlL66W1j+%JO!e%Rv<CFwE4V0oZn^#AohVWxCix1C
zLvNpRa(exGcgsBE6hsGVF`dG(KFD&{3uZ%!9=T<uhxj)b^GsPx0`WBToYBL(Y%aI6
zj`~gx|0s_WboTMP#rbOr(t$cPIKeNGV4}ODlMA2gVS1u<*gITyX(o2ehgaT<PSj+I
zEgAK%o>qe}3PV{O_VG=<6aeRQAH;x6%PZt=518bY^KC8nfO!~_w5}QpILPdTiHkC`
zm>!(fxeyAB8r!%}poK8yLW5FgXIb>o=<o~fH2chn=7Wk$$c=5)8~cwH2g(~R>Z_=;
zp+0)8f{K1rz8oNg)CVtj3J1727|MZHw>8Z!go3dDLp)rWgmsed06!3Y<9&`2c8C5!
zJ^N$qQUptoM&&+`Y~_?hAn1&@C<JpDM8jJ(l$!J<(O-{fd($w&1`CXYn<ndY$&DMl
zK?KE+4?jvygBM;kipZ?m;fw|Gz+-6sW@~#hSt+EcO3U~MeSd3tE((SSLsUK^VUQ}H
z;;ft2qnyu_mCwuU;*o!Z3a7NXoBrlC$2gZuE0F|+S>VSPS<f^B{u10b&_UffNT+tM
zP%r%HhbVv!#bu+0`hJt>b<GhzLXz+ivZs04q^~ti0eo3lhg1j2m6+EZaEv3JZU<e}
zPMA}U2K)nCRk3>t8`DtL4VQW}Q&VhXe(lI}+oMi_6rONh3`Bh3&rKlC&vA~Y>QL~?
z^gAk)3)Q>5-klHmOIE)+vOfmSu18I{AWEMKXGP0NJ5C&VjpLEK3c};?Vem2C$P433
zC=nHrsXZq5qHCo<a-?sX&xh<ZW|!whQPB%JIRI1Y#x#TBALw#t$erE5E4>;F`$aN<
zh#=?oDWCp<U{UBTl6BL$M!5Jh6r(ieY4pzfuWhin?o;yAx_F^|YbDS)Fb%U1g_LIf
z2Q@-Ca%ltz`QtkO43951;vtsFeb@Cc!fZZH`?F#zB)8KR=!as80i;KS^AEwOU$Q&^
zIy26!&Gkt6sDwM>@DXyF7BC{C<fVX^D56<45~QM##C5AL#REpfYVMo)Y`Y}^+IH7t
zXmQ!cA9-@_7XSPS)_gw*)RYrN3~YvUC+X$-jY>`L|M)qk@O<m?qTly8*C!G1rJ$I`
zGp|GS%C`!unB@Z|yE9&t$cE*A<3Vl*80ke;h={awL}%E?)Et1AK6`IgoftA3Nx1^9
z*!7&dGC)!EH9<Mzk`!+T?wk{|YoYG@u-0A){)ub-M*FJx>j;`@&kR)8d2C7Lx45<e
z(Y9}t#6iVUx}elA3#j*#JdZfT7R+XyfFtj*bVp4l!RerMOmWN<Zhrjb#W7|3wdBWn
z;qe^YWu(-8OCxL&JV;PMU^ox3IWa!YuM|;xK<hKItauBX^IGgg6PRJ{)^@J~>wFIz
zGOuxFPudSAkn^726i&aeav_A~0ttxF%7bX!R;!IJ4jJ`*>e$E)mHPOTHIFwzsgfjG
zg;^YY@u8)cy17^BUfR$;0|xp+%fvPgzA95dBd~eca(1jZSY&WTFii~Cji2_zF=0e9
zaowIm9pri8Ooow`Mf$riEn4fx{0HZ$p)bxldv!|ADJy>ObU*ssw|ubh#7??PClsJz
zw{B5D^Q}aqxMJa<!AyEQDO9@II<$pi`>-l55U{WSdp+vf;inXaHhC99xklv88#3OU
zoG+$P&)%E3Ie--MS!b&3nEw_(HMg2Z`HFx$F+J4&i-l9M83p?|Y_bMj{-BN3wao7;
z*f+y^-8`C(FT8!0ZYOXAm2-$MWWZP14iC_jKGQX#pc0I_c-($3hsy3|;d{OU-{net
z!FKBDb>;NC*VY*c1)B52$1S{oe(qcS7^2Y~2kFgP1ojRV;5yLH7jCH;uDx-JnE<3q
zL>evF?W`&>YU%B5l+YbugQsSo<UeS~M99M0lKJ*Dg7L&^VQ*xqyu?>X*z$gfMMD$F
z*SWIrx}|h?=@Pa^jm&pN?!DP}DN(urN<92Nbsmt|Ssm5<kq`ai9?=gGziT_-538Fa
zMuF0reLQvi0SO>WIz^_#b)zm^*Wj`{VpGMFCAL8nJZ=Q46**Wg%6RSA2eKrXfuK1*
zoS-p9lE43e2%60Iwtbk6>n=VKXx9RU7Hh*2xzJB<XPaM{;blJS7UOpQSzY<q3<Op`
zDs=GuEnXx+NSUI!5B-OmfJBFwWPNOV<_!zHLM&QnKzuXK^UpH6P%ppNJIk!>L3L4q
zNo^^gHmJwVtVVzF#&8jTP9eQ%xh^qdtNT?@?lac21X#?APPfv9Q~@!im-KWY_vK0;
zA%N%2!?&MO!j$+^hSIJ-PC5zZ7LmIRrkzxOO|1n4sUk&RIPOp_Z9=CGyq74QGiKeX
z%v83`916syb~(rufaOu``8TSH$U?^Jw&)rP9CK4KAtY{fsYSk(g@*B9Lnx%DVv1hE
z{k5Tj35}q>@U26(jvJr(O)azNi?_%w3;~v$x^84(20(8zk0gDk7GiLxq)nIjkY{rN
zXMZ0PB7E3ILvK5hk<Iyz&ZzT}a!*O$0fxw>*CJna<hmvWxp1Hgg|v*Nnbt-iplB_J
zzESScT0&}&>{-DOn7Wf<fG_<g44%d-UF#Z+(?VIY^2OVY#MUm=H0GgCC#%#iMA}t|
z>uzm5ZuDDdC10d@@CrDl4g970t*dn4uA~!m!wRwCU-uU7tMvuup_vQ?iT&r8m8G9d
z3yC?u>2V);bX3y~l4Z?#ZE!vSuuG+VlM$^al7+xficbMYLA1>1h|20rr=3`Hmq>ng
zHt!+Fa_1sf-N=}Hm7L?K9*V9|6`|)^D1PR7*k<oF>$~q}zAe{H&AOsPkS#S(MFq1L
zH0_u-9c+=7QB&}R+vo#+2sKaAzsGY2;Y>DpuS%zGbiioAb_h<S^O~3gC+PSvHT>xt
z_&Y7*g23jfEJW~K<&aN&t2|L<;%O`0;-};5=2T8l!B7a;NYF5_k?s+Fy_3$sQRMD%
z<GaDO2#dX}m@oP98=y|<n=6M2lm${#N`c@FiLbUFyk)y^a?PYht3lZq5D`qQ%jaOD
zpfFXhuwu?{evc#o>h$c4eK7gS!p|>y&FXdBN)1yjj<%HK52*gz@IFko)}RH24PIJv
z8Fc~r^IUn!&rr@VY$z?|l)`R^Qx&&7zV4MXgJ8nNn%6v(Dfjjzxm%@9r|X}00?XF0
zVcR1wKaQ2|>!;(Z=2VjZ>jM=Uem+dV`kAo<nGQCEEAT2wGrOfK)=VQ^{M~EDP5www
zfwF+-PmnfL|D>KO4`*Q<<tol|do4gX7{D*G+pG1aefQ!vVjBIN<!;g}4L%a<46X^1
zW-_c~tdVn4Y*TwTo9!>0e5sY2n>TN@&HZR~1w^Q!11-$b{JY80$Rx+G|1Ti#|I4uX
ztPyCwoYl9If5`%dzz~A9Vj#l$<Nult0N5YF{d`&NKca$<8Mrh;3^^mU|7*ekf3Mz2
zilpkl48<LucLWbe71r44e@%XXVZe5$-}sk@0Cp0BcjO&Qx7Gg~CR>*`&*}`?xgOO`
RFP;PcsVgJzl-{xk`agdh^ilu-

diff --git a/example/k3d/environment/main.jsonnet b/example/k3d/environment/main.jsonnet
deleted file mode 100644
index 6868a2632576..000000000000
--- a/example/k3d/environment/main.jsonnet
+++ /dev/null
@@ -1,165 +0,0 @@
-local collector = import 'collector/main.libsonnet';
-local default = import 'default/main.libsonnet';
-local etcd = import 'grafana-agent/smoke/etcd/main.libsonnet';
-local agent_cluster = import 'grafana-agent/scraping-svc/main.libsonnet';
-local k = import 'ksonnet-util/kausal.libsonnet';
-local load_generator = import 'load-generator/main.libsonnet';
-
-local loki_config = import 'default/loki_config.libsonnet';
-local grafana_agent = import 'grafana-agent/v1/main.libsonnet';
-
-local containerPort = k.core.v1.containerPort;
-local ingress = k.networking.v1beta1.ingress;
-local path = k.networking.v1beta1.httpIngressPath;
-local rule = k.networking.v1beta1.ingressRule;
-local service = k.core.v1.service;
-
-local images = {
-  agent: 'grafana/agent:latest',
-  agentctl: 'grafana/agentctl:latest',
-};
-
-{
-  default: default.new(namespace='default') {
-    grafana+: {
-      ingress+:
-        ingress.new('grafana-ingress') +
-        ingress.mixin.spec.withRules([
-          rule.withHost('grafana.k3d.localhost') +
-          rule.http.withPaths([
-            path.withPath('/')
-            + path.backend.withServiceName('grafana')
-            + path.backend.withServicePort(80),
-          ]),
-        ]),
-    },
-  },
-
-  agent:
-    local cluster_label = 'k3d-agent/daemonset';
-
-    grafana_agent.new('grafana-agent', 'default') +
-    grafana_agent.withImages(images) +
-    grafana_agent.withMetricsConfig({
-      wal_directory: '/var/lib/agent/data',
-      global: {
-        scrape_interval: '1m',
-        external_labels: {
-          cluster: cluster_label,
-        },
-      },
-    }) +
-    grafana_agent.withMetricsInstances(grafana_agent.scrapeInstanceKubernetes {
-      // We want our cluster and label to remain static for this deployment, so
-      // if they are overwritten by a metric we will change them to the values
-      // set by external_labels.
-      scrape_configs: std.map(function(config) config {
-        relabel_configs+: [{
-          target_label: 'cluster',
-          replacement: cluster_label,
-        }],
-      }, super.scrape_configs),
-    }) +
-    grafana_agent.withRemoteWrite([{
-      url: 'http://cortex.default.svc.cluster.local/api/prom/push',
-    }]) +
-    grafana_agent.withLogsConfig(loki_config) +
-    grafana_agent.withLogsClients(grafana_agent.newLogsClient({
-      scheme: 'http',
-      hostname: 'loki.default.svc.cluster.local',
-      external_labels: { cluster: cluster_label },
-    })) +
-    grafana_agent.withTracesConfig({
-      receivers: {
-        jaeger: {
-          protocols: {
-            thrift_http: null,
-          },
-        },
-      },
-      batch: {
-        timeout: '5s',
-        send_batch_size: 1000,
-      },
-    }) +
-    grafana_agent.withPortsMixin([
-      containerPort.new('thrift-http', 14268) + containerPort.withProtocol('TCP'),
-      containerPort.new('otlp-lb', 4318) + containerPort.withProtocol('TCP'),
-    ]) +
-    grafana_agent.withTracesRemoteWrite([
-      {
-        endpoint: 'collector.default.svc.cluster.local:4317',
-        insecure: true,
-      },
-    ]) +
-    grafana_agent.withTracesTailSamplingConfig({
-      policies: [{
-        type: 'always_sample',
-      }],
-    }) +
-    grafana_agent.withTracesLoadBalancingConfig({
-      exporter: {
-        insecure: true,
-      },
-      resolver: {
-        dns: {
-          hostname: 'grafana-agent.default.svc.cluster.local',
-          port: 4318,
-        },
-      },
-    }),
-
-  // Need to run ETCD for agent_cluster
-  etcd: etcd.new('default'),
-
-  collector: collector.new('default'),
-
-  load_generator: load_generator.new('default'),
-
-  agent_cluster:
-    agent_cluster.new('default', 'kube-system') +
-    agent_cluster.withImagesMixin(images) +
-    agent_cluster.withConfigMixin({
-      local kvstore = {
-        store: 'etcd',
-        etcd: {
-          endpoints: ['etcd.default.svc.cluster.local:2379'],
-        },
-      },
-
-      agent_remote_write: [{
-        url: 'http://cortex.default.svc.cluster.local/api/prom/push',
-      }],
-
-      agent_ring_kvstore: kvstore { prefix: 'agent/ring/' },
-      agent_config_kvstore: kvstore { prefix: 'agent/configs/' },
-
-      local cluster_label = 'k3d-agent/cluster',
-      agent_config+: {
-        metrics+: {
-          global+: {
-            external_labels+: {
-              cluster: cluster_label,
-            },
-          },
-
-          scraping_service+: {
-            dangerous_allow_reading_files: true,
-          },
-        },
-      },
-
-      kubernetes_scrape_configs:
-        (grafana_agent.scrapeInstanceKubernetes {
-           // We want our cluster and label to remain static for this deployment, so
-           // if they are overwritten by a metric we will change them to the values
-           // set by external_labels.
-           scrape_configs: std.map(function(config) config {
-             relabel_configs+: [{
-               target_label: 'cluster',
-               replacement: cluster_label,
-             }],
-           }, super.scrape_configs),
-         }).scrape_configs,
-    }),
-}
diff --git a/example/k3d/environment/spec.json b/example/k3d/environment/spec.json
deleted file mode 100644
index 8c90817a7a99..000000000000
--- a/example/k3d/environment/spec.json
+++ /dev/null
@@ -1,11 +0,0 @@
-{
-  "apiVersion": "tanka.dev/v1alpha1",
-  "kind": "Environment",
-  "metadata": {
-    "name": "default"
-  },
-  "spec": {
-    "apiServer": "https://0.0.0.0:50443",
-    "namespace": "default"
-  }
-}
diff --git a/example/k3d/jsonnetfile.json b/example/k3d/jsonnetfile.json
deleted file mode 100644
index ca6b50fc713d..000000000000
--- a/example/k3d/jsonnetfile.json
+++ /dev/null
@@ -1,76 +0,0 @@
-{
-  "version": 1,
-  "dependencies": [
-    {
-      "source": {
-        "git": {
-          "remote": "https://github.com/grafana/cortex-jsonnet.git",
-          "subdir": "cortex-mixin"
-        }
-      },
-      "version": "master"
-    },
-    {
-      "source": {
-        "git": {
-          "remote": "https://github.com/grafana/jsonnet-libs.git",
-          "subdir": "ksonnet-util"
-        }
-      },
-      "version": "master"
-    },
-    {
-      "source": {
-        "git": {
-          "remote": "https://github.com/grafana/loki.git",
-          "subdir": "production/ksonnet/loki-canary"
-        }
-      },
-      "version": "main"
-    },
-    {
-      "source": {
-        "git": {
-          "remote": "https://github.com/grafana/tempo.git",
-          "subdir": "operations/jsonnet/microservices"
-        }
-      },
-      "version": "main"
-    },
-    {
-      "source": {
-        "git": {
-          "remote": "https://github.com/grafana/tempo.git",
-          "subdir": "operations/jsonnet/single-binary"
-        }
-      },
-      "version": "main"
-    },
-    {
-      "source": {
-        "git": {
-          "remote": "https://github.com/jsonnet-libs/k8s-alpha.git",
-          "subdir": "1.14"
-        }
-      },
-      "version": "master"
-    },
-    {
-      "source": {
-        "local": {
-          "directory": "../../production/tanka/grafana-agent"
-        }
-      },
-      "version": ""
-    },
-    {
-      "source": {
-        "local": {
-          "directory": "../../production/grafana-agent-mixin"
-        }
-      },
-      "version": ""
-    }
-  ],
-  "legacyImports": true
-}
diff --git a/example/k3d/jsonnetfile.lock.json b/example/k3d/jsonnetfile.lock.json
deleted file mode 100644
index 9f5a71c12e44..000000000000
--- a/example/k3d/jsonnetfile.lock.json
+++ /dev/null
@@ -1,112 +0,0 @@
-{
-  "version": 1,
-  "dependencies": [
-    {
-      "source": {
-        "git": {
-          "remote": "https://github.com/grafana/cortex-jsonnet.git",
-          "subdir": "cortex-mixin"
-        }
-      },
-      "version": "56cb5e3d73950b977ba2e4bfd7e46e2acb0b77b2",
-      "sum": "CcTh9gpP5UlOs0f8xrqT8f677c4GbkM5AGvl1yWcnyc="
-    },
-    {
-      "source": {
-        "git": {
-          "remote": "https://github.com/grafana/grafonnet-lib.git",
-          "subdir": "grafonnet"
-        }
-      },
-      "version": "3626fc4dc2326931c530861ac5bebe39444f6cbf",
-      "sum": "gF8foHByYcB25jcUOBqP6jxk0OPifQMjPvKY0HaCk6w="
-    },
-    {
-      "source": {
-        "git": {
-          "remote": "https://github.com/grafana/jsonnet-libs.git",
-          "subdir": "grafana-builder"
-        }
-      },
-      "version": "b9cc0f3529833096c043084c04bc7b3562a134c4",
-      "sum": "slxrtftVDiTlQK22ertdfrg4Epnq97gdrLI63ftUfaE="
-    },
-    {
-      "source": {
-        "git": {
-          "remote": "https://github.com/grafana/jsonnet-libs.git",
-          "subdir": "ksonnet-util"
-        }
-      },
-      "version": "f62b65014b2c443b234af31e4e1754278e66cef9",
-      "sum": "A9MKQ++75leyWJR3rxL2mduAr6S9pByQZYmX0OICu2E="
-    },
-    {
-      "source": {
-        "git": {
-          "remote": "https://github.com/grafana/jsonnet-libs.git",
-          "subdir": "mixin-utils"
-        }
-      },
-      "version": "b9cc0f3529833096c043084c04bc7b3562a134c4",
-      "sum": "mtTAh8vSa4Eb8ojviyZ9zE2pPq5OgwhK75qsEWkifhI="
-    },
-    {
-      "source": {
-        "git": {
-          "remote": "https://github.com/grafana/loki.git",
-          "subdir": "production/ksonnet/loki-canary"
-        }
-      },
-      "version": "74c8cf03ba4fb2abd979a9af05bb945813a4505c",
-      "sum": "EIFf6m9IvdJbfGMXkzWYofoFSnHo8f+tVeUh3x/v+u0="
-    },
-    {
-      "source": {
-        "git": {
-          "remote": "https://github.com/grafana/tempo.git",
-          "subdir": "operations/jsonnet/microservices"
-        }
-      },
-      "version": "1bf54e94e74e94cd6f68c5c01b9a19eea7ec43bf",
-      "sum": "gOPXxIkGZH5Vm+fSnQP/qeJU1rIkIN5ZI7CSLXFFf/k="
-    },
-    {
-      "source": {
-        "git": {
-          "remote": "https://github.com/grafana/tempo.git",
-          "subdir": "operations/jsonnet/single-binary"
-        }
-      },
-      "version": "07e9ef2f1c25a63ac6061307a3a8453b81b5e417",
-      "sum": "0f7vj8dSS9a9CRPf8O9LowMHqieUm9bqgfq6uHJGIF4="
-    },
-    {
-      "source": {
-        "git": {
-          "remote": "https://github.com/jsonnet-libs/k8s-alpha.git",
-          "subdir": "1.14"
-        }
-      },
-      "version": "5e7ef40fd1366a02e25f3216a6711848b3f92e07",
-      "sum": "PAkcO1sAnVTYotl1GoSOfYNyuU3PtUO/5hgzz2wDotc="
-    },
-    {
-      "source": {
-        "local": {
-          "directory": "../../production/tanka/grafana-agent"
-        }
-      },
-      "version": ""
-    },
-    {
-      "source": {
-        "local": {
-          "directory": "../../production/grafana-agent-mixin"
-        }
-      },
-      "version": ""
-    }
-  ],
-  "legacyImports": false
-}
diff --git a/example/k3d/lib/collector/collector-config.libsonnet b/example/k3d/lib/collector/collector-config.libsonnet
deleted file mode 100644
index 70b833a418f3..000000000000
--- a/example/k3d/lib/collector/collector-config.libsonnet
+++ /dev/null
@@ -1,28 +0,0 @@
-{
-  receivers: {
-    otlp: {
-      protocols: {
-        grpc: null,
-      },
-    },
-  },
-
-  exporters: {
-    logging: {
-      loglevel: 'info',
-    },
-  },
-
-  service: {
-    pipelines: {
-      traces: {
-        receivers: [
-          'otlp',
-        ],
-        exporters: [
-          'logging',
-        ],
-      },
-    },
-  },
-}
diff --git a/example/k3d/lib/collector/main.libsonnet b/example/k3d/lib/collector/main.libsonnet
deleted file mode 100644
index f384ecc71cfe..000000000000
--- a/example/k3d/lib/collector/main.libsonnet
+++ /dev/null
@@ -1,47 +0,0 @@
-local k = import 'ksonnet-util/kausal.libsonnet';
-
-local configMap = k.core.v1.configMap;
-local container = k.core.v1.container;
-local containerPort = k.core.v1.containerPort;
-local deployment = k.apps.v1.deployment;
-local pvc = k.core.v1.persistentVolumeClaim;
-local service = k.core.v1.service;
-local volumeMount = k.core.v1.volumeMount;
-local volume = k.core.v1.volume;
-
-{
-  new(namespace=''):: {
-    local this = self,
-
-    _images:: {
-      collector: 'otel/opentelemetry-collector:0.9.0',
-    },
-    _config:: (import './collector-config.libsonnet'),
-
-    configMap:
-      configMap.new('collector') +
-      configMap.mixin.metadata.withNamespace(namespace) +
-      configMap.withData({
-        'config.yaml': k.util.manifestYaml(this._config),
-      }),
-
-    container::
-      container.new('collector', this._images.collector) +
-      container.withPorts([
-        containerPort.newNamed(name='grpc', containerPort=55680),
-      ]) +
-      container.withArgsMixin(
-        '--config=/etc/collector/config.yaml',
-      ),
-
-    deployment:
-      deployment.new('collector', 1, [self.container]) +
-      deployment.mixin.metadata.withNamespace(namespace) +
-      k.util.configMapVolumeMount(this.configMap, '/etc/collector'),
-
-
-    service:
-      k.util.serviceFor(self.deployment) +
-      service.mixin.metadata.withNamespace(namespace),
-  },
-}
diff --git a/example/k3d/lib/cortex/cortex-config.libsonnet b/example/k3d/lib/cortex/cortex-config.libsonnet
deleted file mode 100644
index a7bf55b8d016..000000000000
--- a/example/k3d/lib/cortex/cortex-config.libsonnet
+++ /dev/null
@@ -1,91 +0,0 @@
-{
-  auth_enabled: false,
-
-  server: {
-    http_listen_port: 80,
-    grpc_listen_port: 9095,
-
-    // Configure the server to allow messages up to 100MB.
-    grpc_server_max_recv_msg_size: 104857600,
-    grpc_server_max_send_msg_size: 104857600,
-    grpc_server_max_concurrent_streams: 1000,
-  },
-
-  distributor: {
-    shard_by_all_labels: true,
-    pool: {
-      health_check_ingesters: true,
-    },
-  },
-
-  ingester_client: {
-    grpc_client_config: {
-      max_recv_msg_size: 104857600,
-      max_send_msg_size: 104857600,
-      grpc_compression: 'gzip',
-    },
-  },
-
-  ingester: {
-    lifecycler: {
-      join_after: 0,
-      min_ready_duration: '0s',
-      final_sleep: '0s',
-      num_tokens: 512,
-
-      ring: {
-        kvstore: {
-          store: 'inmemory',
-        },
-        replication_factor: 1,
-      },
-    },
-  },
-
-  storage: {
-    engine: 'blocks',
-  },
-
-  blocks_storage: {
-    tsdb: {
-      dir: '/tmp/cortex/tsdb',
-    },
-    bucket_store: {
-      sync_dir: '/tmp/cortex/tsdb-sync',
-    },
-
-    backend: 'filesystem',
-    filesystem: {
-      dir: '/tmp/cortex/blocks',
-    },
-  },
-
-  compactor: {
-    data_dir: '/tmp/cortex/compactor',
-    sharding_ring: {
-      kvstore: {
-        store: 'inmemory',
-      },
-    },
-  },
-
-  frontend_worker: {
-    match_max_concurrent: true,
-  },
-
-  ruler: {
-    enable_api: true,
-    enable_sharding: false,
-    storage: {
-      type: 'local',
-      'local': {
-        directory: '/tmp/cortex/rules',
-      },
-    },
-  },
-
-  limits: {
-    ingestion_rate: 250000,
-    ingestion_burst_size: 500000,
-  },
-}
diff --git a/example/k3d/lib/cortex/main.libsonnet b/example/k3d/lib/cortex/main.libsonnet
deleted file mode 100644
index 600f031a3347..000000000000
--- a/example/k3d/lib/cortex/main.libsonnet
+++ /dev/null
@@ -1,64 +0,0 @@
-local k = import 'ksonnet-util/kausal.libsonnet';
-
-local configMap = k.core.v1.configMap;
-local container = k.core.v1.container;
-local containerPort = k.core.v1.containerPort;
-local deployment = k.apps.v1.deployment;
-local pvc = k.core.v1.persistentVolumeClaim;
-local service = k.core.v1.service;
-local volumeMount = k.core.v1.volumeMount;
-local volume = k.core.v1.volume;
-
-{
-  new(namespace=''):: {
-    local this = self,
-
-    _images:: {
-      cortex: 'cortexproject/cortex:v1.8.1',
-    },
-    _config:: (import './cortex-config.libsonnet'),
-
-    configMap:
-      configMap.new('cortex-config') +
-      configMap.mixin.metadata.withNamespace(namespace) +
-      configMap.withData({
-        'config.yaml': k.util.manifestYaml(this._config),
-      }),
-
-    container::
-      container.new('cortex', this._images.cortex) +
-      container.withPorts([
-        containerPort.newNamed(name='http-metrics', containerPort=80),
-        containerPort.newNamed(name='grpc', containerPort=9095),
-      ]) +
-      container.withVolumeMountsMixin(
-        volumeMount.new('cortex-data', '/tmp/cortex'),
-      ) +
-      container.withArgsMixin(
-        k.util.mapToFlags({
-          'config.file': '/etc/cortex/config.yaml',
-        }),
-      ),
-
-    pvc:
-      { apiVersion: 'v1', kind: 'PersistentVolumeClaim' } +
-      pvc.new() +
-      pvc.mixin.metadata.withName('cortex-data') +
-      pvc.mixin.metadata.withNamespace(namespace) +
-      pvc.mixin.spec.withAccessModes('ReadWriteOnce') +
-      pvc.mixin.spec.resources.withRequests({ storage: '10Gi' }),
-
-    deployment:
-      deployment.new('cortex', 1, [this.container]) +
-      deployment.mixin.metadata.withNamespace(namespace) +
-      deployment.mixin.spec.template.spec.withVolumesMixin([
-        volume.fromPersistentVolumeClaim('cortex-data', 'cortex-data'),
-      ]) +
-      k.util.configMapVolumeMount(this.configMap, '/etc/cortex') +
-      deployment.mixin.spec.template.spec.withTerminationGracePeriodSeconds(4800),
-
-    service:
-      k.util.serviceFor(this.deployment) +
-      service.mixin.metadata.withNamespace(namespace),
-  },
-}
diff --git a/example/k3d/lib/default/loki_config.libsonnet b/example/k3d/lib/default/loki_config.libsonnet
deleted file mode 100644
index b201e0830257..000000000000
--- a/example/k3d/lib/default/loki_config.libsonnet
+++ /dev/null
@@ -1,41 +0,0 @@
-local grafana_agent = import 'grafana-agent/v1/main.libsonnet';
-
-grafana_agent.scrapeKubernetesLogs {
-  local pipeline_stages = [
-    // k3d uses cri for logging
-    { cri: {} },
-
-    // Bad words metrics, used in Agent dashboard
-    {
-      regex: {
-        expression: '(?i)(?P<bad_words>panic:|core_dumped|failure|error|attack| bad |illegal |denied|refused|unauthorized|fatal|failed|Segmentation Fault|Corrupted)',
-      },
-    },
-    {
-      metrics: {
-        panic_total: {
-          type: 'Counter',
-          description: 'total count of panic: found in log lines',
-          source: 'panic',
-          config: {
-            action: 'inc',
-          },
-        },
-        bad_words_total: {
-          type: 'Counter',
-          description: 'total count of bad words found in log lines',
-          source: 'bad_words',
-          config: {
-            action: 'inc',
-          },
-        },
-      },
-    },
-  ],
-
-  scrape_configs: [
-    x { pipeline_stages: pipeline_stages }
-    for x
-    in super.scrape_configs
-  ],
-}
diff --git a/example/k3d/lib/default/main.libsonnet b/example/k3d/lib/default/main.libsonnet
deleted file mode 100644
index 189c3d1f36d5..000000000000
--- a/example/k3d/lib/default/main.libsonnet
+++ /dev/null
@@ -1,26 +0,0 @@
-local cortex = import 'cortex/main.libsonnet';
-local datasource = import 'grafana/datasource.libsonnet';
-local grafana = import 'grafana/main.libsonnet';
-local k = import 'ksonnet-util/kausal.libsonnet';
-local loki = import 'loki/main.libsonnet';
-local metrics = import 'metrics-server/main.libsonnet';
-
-local mixins = import './mixins.libsonnet';
-
-{
-  new(namespace=''):: {
-    ns: k.core.v1.namespace.new(namespace),
-
-    grafana:
-      grafana.new(namespace=namespace) +
-      grafana.withDashboards(mixins.grafanaDashboards) +
-      grafana.withDataSources([
-        datasource.new('Cortex', 'http://cortex.default.svc.cluster.local/api/prom'),
-        datasource.new('Loki', 'http://loki.default.svc.cluster.local', type='loki'),
-      ]),
-
-    loki: loki.new(namespace),
-
-    cortex: cortex.new(namespace),
-  },
-}
diff --git a/example/k3d/lib/default/mixins.libsonnet b/example/k3d/lib/default/mixins.libsonnet
deleted file mode 100644
index 4da82b233071..000000000000
--- a/example/k3d/lib/default/mixins.libsonnet
+++ /dev/null
@@ -1,30 +0,0 @@
-local cortex_mixin = import 'cortex-mixin/mixin.libsonnet';
-local agent_debugging_mixin = import 'grafana-agent-mixin/debugging.libsonnet';
-local agent_mixin = import 'grafana-agent-mixin/mixin.libsonnet';
-
-// TODO(rfratto): bit of a hack here to be compatible with the "old" Jsonnet
-// writing style.
-local fix = {
-  dashboards+:: {},
-  grafana_dashboards+:: {},
-  grafanaDashboards+:: $.dashboards + $.grafana_dashboards,
-};
-
-fix +
-cortex_mixin +
-agent_debugging_mixin +
-agent_mixin {
-  _config+: {
-    // We run a single-node cortex so replace the job names to all
-    // be the monolith.
-    job_names+: {
-      ingester: 'cortex',
-      distributor: 'cortex',
-      querier: 'cortex',
-      query_frontend: 'cortex',
-      table_manager: 'cortex',
-      store_gateway: 'cortex',
-      gateway: 'cortex',
-    },
-  },
-}
diff --git a/example/k3d/lib/grafana/config.libsonnet b/example/k3d/lib/grafana/config.libsonnet
deleted file mode 100644
index 79f7d36743d9..000000000000
--- a/example/k3d/lib/grafana/config.libsonnet
+++ /dev/null
@@ -1,36 +0,0 @@
-{
-  _images: {
-    grafana: 'grafana/grafana:8.0.3',
-  },
-
-  _config: {
-    // Optionally shard dashboards into multiple config maps.
-    // Set to the number of desired config maps.  0 to disable.
-    dashboard_config_maps: 8,
-
-    provisioning_dir: '/etc/grafana/provisioning',
-    grafana_root_url: 'http://grafana.default.svc.cluster.local/',
-
-    grafana_ini: {
-      sections: {
-        'auth.anonymous': {
-          enabled: true,
-          org_role: 'Admin',
-        },
-        server: {
-          http_port: 80,
-          root_url: $._config.grafana_root_url,
-        },
-        analytics: {
-          reporting_enabled: false,
-        },
-        users: {
-          default_theme: 'dark',
-        },
-        explore+: {
-          enabled: true,
-        },
-      },
-    },
-  },
-}
diff --git a/example/k3d/lib/grafana/datasource.libsonnet b/example/k3d/lib/grafana/datasource.libsonnet
deleted file mode 100644
index 27ff98ce7314..000000000000
--- a/example/k3d/lib/grafana/datasource.libsonnet
+++ /dev/null
@@ -1,25 +0,0 @@
-{
-  new(name, url, default=false, method='GET', type='prometheus'):: {
-    apiVersion: 1,
-    datasources: [{
-      name: name,
-      type: type,
-      access: 'proxy',
-      url: url,
-      isDefault: default,
-      version: 1,
-      editable: false,
-      jsonData: {
-        httpMethod: method,
-      },
-    }],
-  },
-
-  withBasicAuth(username, password):: {
-    datasources: std.map(function(ds) ds {
-      basicAuth: true,
-      basicAuthUser: username,
-      basicAuthPassword: password,
-    }, super.datasources),
-  },
-}
diff --git a/example/k3d/lib/grafana/main.libsonnet b/example/k3d/lib/grafana/main.libsonnet
deleted file mode 100644
index 3c2d5f9014ac..000000000000
--- a/example/k3d/lib/grafana/main.libsonnet
+++ /dev/null
@@ -1,132 +0,0 @@
-local config = import 'config.libsonnet';
-local k = import 'ksonnet-util/kausal.libsonnet';
-
-local configMap = k.core.v1.configMap;
-local container = k.core.v1.container;
-local containerPort = k.core.v1.containerPort;
-local deployment = k.apps.v1.deployment;
-local service = k.core.v1.service;
-
-{
-  new(dashboards={}, datasources=[], namespace='default'):: {
-    _images:: config._images,
-    _config:: config._config { namespace: namespace },
-    _dashboards:: {},
-    _datasources:: datasources,
-
-    local _images = self._images,
-    local _config = self._config,
-    local _dashboards = self._dashboards,
-    local _datasources = self._datasources,
-
-    grafana_cm:
-      configMap.new('grafana-config') +
-      configMap.mixin.metadata.withNamespace(namespace) +
-      configMap.withData({
-        'grafana.ini': std.manifestIni(_config.grafana_ini),
-      }),
-
-    grafana_dashboard_cm:
-      if _config.dashboard_config_maps > 0
-      then {}
-      else
-        configMap.new('dashboards') +
-        configMap.mixin.metadata.withNamespace(namespace) +
-        configMap.withDataMixin({
-          [name]: std.toString(
-            $.dashboards[name]
-            { uid: std.substr(std.md5(std.toString($.dashboards[name])), 0, 9) }
-          )
-          for name in std.objectFields($.dashboards)
-        }),
-
-    grafana_dashboard_cms: {
-      ['dashboard-%d' % shard]:
-        configMap.new('dashboards-%d' % shard) +
-        configMap.mixin.metadata.withNamespace(namespace) +
-        configMap.withDataMixin({
-          [name]: std.toString(
-            _dashboards[name]
-            { uid: std.substr(std.md5(std.toString(_dashboards[name])), 0, 9) }
-          )
-          for name in std.objectFields(_dashboards)
-          if std.codepoint(std.md5(name)[1]) % _config.dashboard_config_maps == shard
-        })
-      for shard in std.range(0, _config.dashboard_config_maps - 1)
-    },
-
-    grafana_datasource_cm:
-      configMap.new('grafana-datasources') +
-      configMap.mixin.metadata.withNamespace(namespace) +
-      configMap.withDataMixin(std.foldl(function(acc, obj) acc {
-        ['%s.yml' % obj.datasources[0].name]: k.util.manifestYaml(obj),
-      }, self._datasources, {})),
-
-    grafana_dashboard_provisioning_cm:
-      configMap.new('grafana-dashboard-provisioning') +
-      configMap.mixin.metadata.withNamespace(namespace) +
-      configMap.withData({
-        'dashboards.yml': k.util.manifestYaml({
-          apiVersion: 1,
-          providers: [{
-            name: 'dashboards',
-            orgId: 1,
-            folder: '',
-            folderUid: '',
-            type: 'file',
-            disableDeletion: true,
-            editable: false,
-            updateIntervalSeconds: 10,
-            allowUiUpdates: false,
-            options: {
-              path: '/grafana/dashboards',
-            },
-          }],
-        }),
-      }),
-
-    container::
-      container.new('grafana', _images.grafana) +
-      container.withPorts(containerPort.new('grafana', 80)) +
-      container.withCommand([
-        '/usr/share/grafana/bin/grafana-server',
-        '--homepath=/usr/share/grafana',
-        '--config=/etc/grafana-config/grafana.ini',
-      ]) +
-      k.util.resourcesRequests('10m', '40Mi'),
-
-    deployment:
-      deployment.new('grafana', 1, [self.container]) +
-      deployment.mixin.metadata.withNamespace(namespace) +
-      deployment.mixin.spec.template.spec.securityContext.withRunAsUser(0) +
-      k.util.configMapVolumeMount(self.grafana_cm, '/etc/grafana-config') +
-      k.util.configMapVolumeMount(self.grafana_datasource_cm, '%(provisioning_dir)s/datasources' % _config) +
-      k.util.configMapVolumeMount(self.grafana_dashboard_provisioning_cm, '%(provisioning_dir)s/dashboards' % _config) +
-      (
-        if self._config.dashboard_config_maps == 0
-        then k.util.configMapVolumeMount(self.grafana_dashboard_config_map, '/grafana/dashboards')
-        else
-          std.foldr(
-            function(m, acc) m + acc,
-            [
-              k.util.configVolumeMount('dashboards-%d' % shard, '/grafana/dashboards/%d' % shard)
-              for shard in std.range(0, self._config.dashboard_config_maps - 1)
-            ],
-            {}
-          )
-      ) +
-      k.util.podPriority('critical'),
-
-    service:
-      k.util.serviceFor(self.deployment) +
-      service.mixin.metadata.withNamespace(namespace),
-  },
-
-  // withDashboards sets the list of dashboards. Dashboards is an object where the
-  // key should be the filename.
-  withDashboards(dashboards={}):: { _dashboards:: dashboards },
-
-  // withDataSources sets the list of datasources. Datasources can be created
-  // using datasources.libsonnet.
-  withDataSources(datasources=[]):: { _datasources:: datasources },
-}
diff --git a/example/k3d/lib/k.libsonnet b/example/k3d/lib/k.libsonnet
deleted file mode 100644
index 193e217fe5b9..000000000000
--- a/example/k3d/lib/k.libsonnet
+++ /dev/null
@@ -1,2 +0,0 @@
-(import 'github.com/jsonnet-libs/k8s-alpha/1.14/main.libsonnet')
-+ (import 'github.com/jsonnet-libs/k8s-alpha/1.14/extensions/kausal-shim.libsonnet')
diff --git a/example/k3d/lib/kube-state-metrics/main.libsonnet b/example/k3d/lib/kube-state-metrics/main.libsonnet
deleted file mode 100644
index 48788c8384f9..000000000000
--- a/example/k3d/lib/kube-state-metrics/main.libsonnet
+++ /dev/null
@@ -1,135 +0,0 @@
-local k = import 'ksonnet-util/kausal.libsonnet';
-
-local container = k.core.v1.container;
-local containerPort = k.core.v1.containerPort;
-local deployment = k.apps.v1.deployment;
-local service = k.core.v1.service;
-local serviceAccount = k.core.v1.serviceAccount;
-local policyRule = k.rbac.v1.policyRule;
-
-{
-  new(namespace=''):: {
-    local k = (import 'ksonnet-util/kausal.libsonnet') { _config+:: { namespace: namespace } },
-
-    container::
-      container.new('kube-state-metrics', 'k8s.gcr.io/kube-state-metrics/kube-state-metrics:v2.1.0') +
-      container.withPorts([
-        containerPort.newNamed(name='http-metrics', containerPort=8080),
-        containerPort.newNamed(name='self-metrics', containerPort=8081),
-      ]) +
-      container.withArgs([
-        '--port=8080',
-        '--telemetry-host=0.0.0.0',
-        '--telemetry-port=8081',
-      ]),
-
-    rbac:
-      k.util.rbac('kube-state-metrics', [
-        policyRule.withApiGroups(['']) +
-        policyRule.withResources([
-          'configmaps',
-          'secrets',
-          'nodes',
-          'pods',
-          'services',
-          'resourcequotas',
-          'replicationcontrollers',
-          'limitranges',
-          'persistentvolumeclaims',
-          'persistentvolumes',
-          'namespaces',
-          'endpoints',
-        ]) +
-        policyRule.withVerbs(['list', 'watch']),
-
-        policyRule.withApiGroups(['extensions']) +
-        policyRule.withResources([
-          'daemonsets',
-          'deployments',
-          'replicasets',
-          'ingresses',
-        ]) +
-        policyRule.withVerbs(['list', 'watch']),
-
-        policyRule.withApiGroups(['apps']) +
-        policyRule.withResources([
-          'daemonsets',
-          'deployments',
-          'replicasets',
-          'statefulsets',
-        ]) +
-        policyRule.withVerbs(['list', 'watch']),
-
-        policyRule.withApiGroups(['batch']) +
-        policyRule.withResources([
-          'cronjobs',
-          'jobs',
-        ]) +
-        policyRule.withVerbs(['list', 'watch']),
-
-        policyRule.withApiGroups(['autoscaling']) +
-        policyRule.withResources([
-          'horizontalpodautoscalers',
-        ]) +
-        policyRule.withVerbs(['list', 'watch']),
-
-        policyRule.withApiGroups(['authorization.k8s.io']) +
-        policyRule.withResources(['subjectaccessreviews']) +
-        policyRule.withVerbs(['create']),
-
-        policyRule.withApiGroups(['ingresses']) +
-        policyRule.withResources(['ingress']) +
-        policyRule.withVerbs(['list', 'watch']),
-
-        policyRule.withApiGroups(['policy']) +
-        policyRule.withResources(['poddisruptionbudgets']) +
-        policyRule.withVerbs(['list', 'watch']),
-
-        policyRule.withApiGroups(['certificates.k8s.io']) +
-        policyRule.withResources(['certificatesigningrequests']) +
-        policyRule.withVerbs(['list', 'watch']),
-
-        policyRule.withApiGroups(['storage.k8s.io']) +
-        policyRule.withResources([
-          'storageclasses',
-          'volumeattachments',
-        ]) +
-        policyRule.withVerbs(['list', 'watch']),
-
-        policyRule.withApiGroups(['admissionregistration.k8s.io']) +
-        policyRule.withResources([
-          'mutatingwebhookconfigurations',
-          'validatingwebhookconfigurations',
-        ]) +
-        policyRule.withVerbs(['list', 'watch']),
-
-        policyRule.withApiGroups(['networking.k8s.io']) +
-        policyRule.withResources([
-          'networkpolicies',
-          'ingresses',
-        ]) +
-        policyRule.withVerbs(['list', 'watch']),
-
-        policyRule.withApiGroups(['coordination.k8s.io']) +
-        policyRule.withResources(['leases']) +
-        policyRule.withVerbs(['list', 'watch']),
-      ]) {
-        service_account+:
-          serviceAccount.mixin.metadata.withNamespace(namespace),
-      },
-
-    deployment:
-      deployment.new('kube-state-metrics', 1, [self.container]) +
-      deployment.mixin.metadata.withNamespace(namespace) +
-      deployment.mixin.spec.template.metadata.withAnnotationsMixin({ 'prometheus.io.scrape': 'false' }) +
-      deployment.mixin.spec.template.spec.withServiceAccount('kube-state-metrics') +
-      deployment.mixin.spec.template.spec.securityContext.withRunAsUser(65534) +
-      deployment.mixin.spec.template.spec.securityContext.withRunAsGroup(65534) +
-      deployment.mixin.spec.template.spec.securityContext.withFsGroup(0) +
-      k.util.podPriority('critical'),
-
-    service:
-      k.util.serviceFor(self.deployment) +
-      service.mixin.metadata.withNamespace(namespace),
-  },
-}
diff --git a/example/k3d/lib/load-generator/load-generator-config.json b/example/k3d/lib/load-generator/load-generator-config.json
deleted file mode 100644
index 8c87e16c9350..000000000000
--- a/example/k3d/lib/load-generator/load-generator-config.json
+++ /dev/null
@@ -1,630 +0,0 @@
-{
-  "topology": {
-    "services": [
-      {
-        "serviceName": "frontend",
-        "tagSets": [
-          {
-            "weight": 1,
-            "tags": {
-              "version": "v127",
-              "region": "us-east-1"
-            },
-            "tagGenerators": [],
-            "inherit": [],
-            "maxLatency": 100
-          },
-          {
-            "weight": 1,
-            "tags": {
-              "version": "v125",
-              "region": "us-east-1"
-            },
-            "tagGenerators": [],
-            "inherit": [],
-            "maxLatency": 100
-          },
-          {
-            "weight": 2,
-            "tags": {
-              "version": "v125",
-              "region": "us-west-1"
-            },
-            "tagGenerators": [],
-            "inherit": [],
-            "maxLatency": 100
-          }
-        ],
-        "routes": [
-          {
-            "route": "/product",
-            "downstreamCalls": {
-              "productcatalogservice": "/GetProducts",
-              "recommendationservice": "/GetRecommendations",
-              "adservice": "/AdRequest"
-            },
-            "tagSets": [
-              {
-                "weight": 1,
-                "tags": {
-                  "starter": "charmander"
-                },
-                "tagGenerators": [
-                  {
-                    "rand": {
-                      "seed": 179867746078676,
-                      "nextNextGaussian": 0,
-                      "haveNextNextGaussian": false
-                    },
-                    "tagGen": {},
-                    "valLength": 16,
-                    "numTags": 50,
-                    "numVals": 3000
-                  }
-                ],
-                "inherit": []
-              },
-              {
-                "weight": 1,
-                "tags": {
-                  "starter": "squirtle"
-                },
-                "tagGenerators": [],
-                "inherit": []
-              },
-              {
-                "weight": 1,
-                "tags": {
-                  "starter": "bulbasaur"
-                },
-                "tagGenerators": [],
-                "inherit": []
-              }
-            ]
-          },
-          {
-            "route": "/cart",
-            "downstreamCalls": {
-              "cartservice": "/GetCart",
-              "recommendationservice": "/GetRecommendations"
-            },
-            "tagSets": []
-          },
-          {
-            "route": "/checkout",
-            "downstreamCalls": {
-              "checkoutservice": "/PlaceOrder"
-            },
-            "tagSets": [
-              {
-                "tags": {},
-                "tagGenerators": [],
-                "inherit": [],
-                "maxLatency": 800
-              }
-            ]
-          },
-          {
-            "route": "/shipping",
-            "downstreamCalls": {
-              "shippingservice": "/GetQuote"
-            },
-            "tagSets": [
-              {
-                "tags": {},
-                "tagGenerators": [],
-                "inherit": [],
-                "maxLatency": 50
-              }
-            ]
-          },
-          {
-            "route": "/currency",
-            "downstreamCalls": {
-              "currencyservice": "/GetConversion"
-            },
-            "tagSets": [
-              {
-                "tags": {},
-                "tagGenerators": [],
-                "inherit": [],
-                "maxLatency": 50
-              }
-            ]
-          }
-        ],
-        "instances": [
-          "frontend-6b654dbf57-zq8dt",
-          "frontend-d847fdcf5-j6s2f",
-          "frontend-79d8c8d6c8-9sbff"
-        ],
-        "mergedTagSets": {},
-        "random": {
-          "seed": 187004238864083,
-          "nextNextGaussian": 0,
-          "haveNextNextGaussian": false
-        }
-      },
-      {
-        "serviceName": "productcatalogservice",
-        "tagSets": [
-          {
-            "tags": {
-              "version": "v52"
-            },
-            "tagGenerators": [],
-            "inherit": [
-              "region"
-            ]
-          }
-        ],
-        "routes": [
-          {
-            "route": "/GetProducts",
-            "downstreamCalls": {},
-            "tagSets": [
-              {
-                "tags": {},
-                "tagGenerators": [],
-                "inherit": [
-                  "starter"
-                ],
-                "maxLatency": 100
-              }
-            ]
-          },
-          {
-            "route": "/SearchProducts",
-            "downstreamCalls": {},
-            "tagSets": [
-              {
-                "weight": 15,
-                "tags": {
-                  "error": true,
-                  "http.status_code": 503
-                },
-                "tagGenerators": [],
-                "inherit": [],
-                "maxLatency": 400
-              },
-              {
-                "weight": 85,
-                "tags": {},
-                "tagGenerators": [],
-                "inherit": [],
-                "maxLatency": 400
-              }
-            ]
-          }
-        ],
-        "instances": [
-          "productcatalogservice-6b654dbf57-zq8dt",
-          "productcatalogservice-d847fdcf5-j6s2f"
-        ],
-        "mergedTagSets": {},
-        "random": {
-          "seed": 238238032670139,
-          "nextNextGaussian": 0,
-          "haveNextNextGaussian": false
-        }
-      },
-      {
-        "serviceName": "recommendationservice",
-        "tagSets": [
-          {
-            "tags": {
-              "version": "v234",
-              "region": "us-east-1"
-            },
-            "tagGenerators": [],
-            "inherit": []
-          }
-        ],
-        "routes": [
-          {
-            "route": "/GetRecommendations",
-            "downstreamCalls": {
-              "productcatalogservice": "/GetProducts"
-            },
-            "tagSets": [
-              {
-                "tags": {},
-                "tagGenerators": [],
-                "inherit": [],
-                "maxLatency": 200
-              }
-            ]
-          }
-        ],
-        "instances": [
-          "recommendationservice-6b654dbf57-zq8dt",
-          "recommendationservice-d847fdcf5-j6s2f"
-        ],
-        "mergedTagSets": {},
-        "random": {
-          "seed": 66295214032801,
-          "nextNextGaussian": 0,
-          "haveNextNextGaussian": false
-        }
-      },
-      {
-        "serviceName": "cartservice",
-        "tagSets": [
-          {
-            "tags": {
-              "version": "v5",
-              "region": "us-east-1"
-            },
-            "tagGenerators": [],
-            "inherit": []
-          }
-        ],
-        "routes": [
-          {
-            "route": "/GetCart",
-            "downstreamCalls": {},
-            "tagSets": [
-              {
-                "tags": {},
-                "tagGenerators": [],
-                "inherit": [],
-                "maxLatency": 200
-              }
-            ]
-          }
-        ],
-        "instances": [
-          "cartservice-6b654dbf57-zq8dt",
-          "cartservice-d847fdcf5-j6s2f"
-        ],
-        "mergedTagSets": {},
-        "random": {
-          "seed": 234194353561392,
-          "nextNextGaussian": 0,
-          "haveNextNextGaussian": false
-        }
-      },
-      {
-        "serviceName": "checkoutservice",
-        "tagSets": [
-          {
-            "tags": {
-              "version": "v37",
-              "region": "us-east-1"
-            },
-            "tagGenerators": [],
-            "inherit": [],
-            "maxLatency": 500
-          }
-        ],
-        "routes": [
-          {
-            "route": "/PlaceOrder",
-            "downstreamCalls": {
-              "paymentservice": "/CreditCardInfo",
-              "shippingservice": "/Address",
-              "currencyservice": "/GetConversion",
-              "cartservice": "/GetCart",
-              "emailservice": "/SendOrderConfirmation"
-            },
-            "tagSets": [
-              {
-                "weight": 25,
-                "tags": {
-                  "error": true,
-                  "http.status_code": 503
-                },
-                "tagGenerators": [],
-                "inherit": []
-              },
-              {
-                "weight": 85,
-                "tags": {},
-                "tagGenerators": [],
-                "inherit": []
-              }
-            ]
-          }
-        ],
-        "instances": [
-          "checkoutservice-6b654dbf57-zq8dt",
-          "checkoutservice-d847fdcf5-j6s2f"
-        ],
-        "mergedTagSets": {},
-        "random": {
-          "seed": 60782549660568,
-          "nextNextGaussian": 0,
-          "haveNextNextGaussian": false
-        }
-      },
-      {
-        "serviceName": "paymentservice",
-        "tagSets": [
-          {
-            "tags": {
-              "version": "v177",
-              "region": "us-east-1"
-            },
-            "tagGenerators": [],
-            "inherit": []
-          }
-        ],
-        "routes": [
-          {
-            "route": "/ChargeRequest",
-            "downstreamCalls": {
-              "paymentservice": "/CreditCardInfo"
-            },
-            "tagSets": [
-              {
-                "tags": {},
-                "tagGenerators": [],
-                "inherit": [],
-                "maxLatency": 700
-              }
-            ]
-          },
-          {
-            "route": "/CreditCardInfo",
-            "downstreamCalls": {},
-            "tagSets": [
-              {
-                "tags": {},
-                "tagGenerators": [],
-                "inherit": [],
-                "maxLatency": 50
-              }
-            ]
-          }
-        ],
-        "instances": [
-          "paymentservice-6b654dbf57-zq8dt",
-          "paymentservice-d847fdcf5-j6s2f"
-        ],
-        "mergedTagSets": {},
-        "random": {
-          "seed": 174850031049111,
-          "nextNextGaussian": 0,
-          "haveNextNextGaussian": false
-        }
-      },
-      {
-        "serviceName": "shippingservice",
-        "tagSets": [
-          {
-            "tags": {
-              "version": "v127",
-              "region": "us-east-1"
-            },
-            "tagGenerators": [],
-            "inherit": []
-          }
-        ],
-        "routes": [
-          {
-            "route": "/GetQuote",
-            "downstreamCalls": {
-              "shippingservice": "/Address"
-            },
-            "tagSets": [
-              {
-                "tags": {},
-                "tagGenerators": [],
-                "inherit": [],
-                "maxLatency": 250
-              }
-            ]
-          },
-          {
-            "route": "/ShipOrder",
-            "downstreamCalls": {
-              "shippingservice": "/Address"
-            },
-            "tagSets": [
-              {
-                "tags": {},
-                "tagGenerators": [],
-                "inherit": [],
-                "maxLatency": 500
-              }
-            ]
-          },
-          {
-            "route": "/Address",
-            "downstreamCalls": {},
-            "tagSets": [
-              {
-                "tags": {},
-                "tagGenerators": [],
-                "inherit": [],
-                "maxLatency": 100
-              }
-            ]
-          }
-        ],
-        "instances": [
-          "shippingservice-6b654dbf57-zq8dt",
-          "shippingservice-d847fdcf5-j6s2f"
-        ],
-        "mergedTagSets": {},
-        "random": {
-          "seed": 107892261530518,
-          "nextNextGaussian": 0,
-          "haveNextNextGaussian": false
-        }
-      },
-      {
-        "serviceName": "emailservice",
-        "tagSets": [
-          {
-            "tags": {
-              "version": "v27",
-              "region": "us-east-1"
-            },
-            "tagGenerators": [],
-            "inherit": [],
-            "maxLatency": 500
-          }
-        ],
-        "routes": [
-          {
-            "route": "/SendOrderConfirmation",
-            "downstreamCalls": {
-              "emailservice": "/OrderResult"
-            },
-            "tagSets": [
-              {
-                "weight": 15,
-                "tags": {
-                  "error": true,
-                  "http.status_code": 503
-                },
-                "tagGenerators": [],
-                "inherit": []
-              },
-              {
-                "weight": 85,
-                "tags": {},
-                "tagGenerators": [],
-                "inherit": []
-              }
-            ]
-          },
-          {
-            "route": "/OrderResult",
-            "downstreamCalls": {},
-            "tagSets": [
-              {
-                "tags": {},
-                "tagGenerators": [],
-                "inherit": [],
-                "maxLatency": 100
-              }
-            ]
-          }
-        ],
-        "instances": [
-          "emailservice-6b654dbf57-zq8dt",
-          "emailservice-d847fdcf5-j6s2f"
-        ],
-        "mergedTagSets": {},
-        "random": {
-          "seed": 61175057559946,
-          "nextNextGaussian": 0,
-          "haveNextNextGaussian": false
-        }
-      },
-      {
-        "serviceName": "currencyservice",
-        "tagSets": [
-          {
-            "tags": {
-              "version": "v27",
-              "region": "us-east-1"
-            },
-            "tagGenerators": [],
-            "inherit": []
-          }
-        ],
-        "routes": [
-          {
-            "route": "/GetConversion",
-            "downstreamCalls": {
-              "currencyservice": "/Money"
-            },
-            "tagSets": [
-              {
-                "tags": {},
-                "tagGenerators": [],
-                "inherit": [],
-                "maxLatency": 100
-              }
-            ]
-          },
-          {
-            "route": "/Money",
-            "downstreamCalls": {},
-            "tagSets": [
-              {
-                "tags": {},
-                "tagGenerators": [],
-                "inherit": [],
-                "maxLatency": 100
-              }
-            ]
-          }
-        ],
-        "instances": [
-          "currencyservice-6b654dbf57-zq8dt",
-          "currencyservice-d847fdcf5-j6s2f"
-        ],
-        "mergedTagSets": {},
-        "random": {
-          "seed": 66219471499700,
-          "nextNextGaussian": 0,
-          "haveNextNextGaussian": false
-        }
-      },
-      {
-        "serviceName": "adservice",
-        "tagSets": [
-          {
-            "tags": {},
-            "tagGenerators": [],
-            "inherit": [],
-            "maxLatency": 500
-          }
-        ],
-        "routes": [
-          {
-            "route": "/AdRequest",
-            "downstreamCalls": {},
-            "tagSets": []
-          },
-          {
-            "route": "/Ad",
-            "downstreamCalls": {},
-            "tagSets": []
-          }
-        ],
-        "instances": [
-          "adservice-6b654dbf57-zq8dt",
-          "adservice-d847fdcf5-j6s2f"
-        ],
-        "mergedTagSets": {},
-        "random": {
-          "seed": 22694143111805,
-          "nextNextGaussian": 0,
-          "haveNextNextGaussian": false
-        }
-      }
-    ]
-  },
-  "rootRoutes": [
-    {
-      "service": "frontend",
-      "route": "/product",
-      "tracesPerHour": 288
-    },
-    {
-      "service": "frontend",
-      "route": "/cart",
-      "tracesPerHour": 1440
-    },
-    {
-      "service": "frontend",
-      "route": "/shipping",
-      "tracesPerHour": 48
-    },
-    {
-      "service": "frontend",
-      "route": "/currency",
-      "tracesPerHour": 20
-    },
-    {
-      "service": "frontend",
-      "route": "/checkout",
-      "tracesPerHour": 48
-    }
-  ]
-}
\ No newline at end of file
diff --git a/example/k3d/lib/load-generator/main.libsonnet b/example/k3d/lib/load-generator/main.libsonnet
deleted file mode 100644
index 5b0d15a7ad14..000000000000
--- a/example/k3d/lib/load-generator/main.libsonnet
+++ /dev/null
@@ -1,54 +0,0 @@
-local k = import 'ksonnet-util/kausal.libsonnet';
-
-local configMap = k.core.v1.configMap;
-local container = k.core.v1.container;
-local containerPort = k.core.v1.containerPort;
-local deployment = k.apps.v1.deployment;
-local pvc = k.core.v1.persistentVolumeClaim;
-local service = k.core.v1.service;
-local volumeMount = k.core.v1.volumeMount;
-local volume = k.core.v1.volume;
-
-{
-  new(namespace=''):: {
-    local this = self,
-
-    _images:: {
-      load_generator: 'omnition/synthetic-load-generator:1.0.25',
-    },
-    _config:: (import './load-generator-config.json'),
-
-    configMap:
-      configMap.new('load-generator') +
-      configMap.mixin.metadata.withNamespace(namespace) +
-      configMap.withData({
-        'config.json': std.toString(this._config),
-      }),
-
-    container::
-      container.new('load-generator', this._images.load_generator) +
-      container.withPorts([
-        containerPort.newNamed(name='grpc', containerPort=55680),
-      ]) +
-      container.withEnvMixin([
-        {
-          name: 'TOPOLOGY_FILE',
-          value: '/etc/load-generator/config.json',
-        },
-        {
-          name: 'JAEGER_COLLECTOR_URL',
-          value: 'http://grafana-agent.default.svc.cluster.local:14268',
-        },
-      ]),
-
-    deployment:
-      deployment.new('load-generator', 1, [self.container]) +
-      deployment.mixin.metadata.withNamespace(namespace) +
-      k.util.configMapVolumeMount(this.configMap, '/etc/load-generator'),
-
-
-    service:
-      k.util.serviceFor(self.deployment) +
-      service.mixin.metadata.withNamespace(namespace),
-  },
-}
diff --git a/example/k3d/lib/loki/loki-config.libsonnet b/example/k3d/lib/loki/loki-config.libsonnet
deleted file mode 100644
index 22e757cb4d4b..000000000000
--- a/example/k3d/lib/loki/loki-config.libsonnet
+++ /dev/null
@@ -1,61 +0,0 @@
-{
-  auth_enabled: false,
-
-  server: {
-    graceful_shutdown_timeout: '5s',
-    http_server_idle_timeout: '120s',
-    grpc_server_max_recv_msg_size: 1024 * 1024 * 64,
-  },
-
-  limits_config: {
-    enforce_metric_name: false,
-    reject_old_samples: true,
-    reject_old_samples_max_age: '24h',
-  },
-
-  ingester: {
-    chunk_idle_period: '5m',
-    chunk_retain_period: '30s',
-    max_transfer_retries: 1,
-    lifecycler: {
-      address: '127.0.0.1',
-      final_sleep: '0s',
-      ring: {
-        kvstore: { store: 'inmemory' },
-        replication_factor: 1,
-      },
-    },
-  },
-
-  schema_config: {
-    configs: [{
-      from: '2020-05-25',
-      store: 'boltdb',
-      object_store: 'filesystem',
-      schema: 'v11',
-      index: {
-        prefix: 'index_',
-        period: '24h',
-      },
-    }],
-  },
-
-  storage_config: {
-    boltdb: {
-      directory: '/tmp/loki/index',
-    },
-
-    filesystem: {
-      directory: '/tmp/loki/chunks',
-    },
-  },
-
-  chunk_store_config: {
-    max_look_back_period: 0,
-  },
-
-  table_manager: {
-    retention_deletes_enabled: true,
-    retention_period: '48h',
-  },
-}
diff --git a/example/k3d/lib/loki/main.libsonnet b/example/k3d/lib/loki/main.libsonnet
deleted file mode 100644
index 6fbd6bf49e98..000000000000
--- a/example/k3d/lib/loki/main.libsonnet
+++ /dev/null
@@ -1,64 +0,0 @@
-local k = import 'ksonnet-util/kausal.libsonnet';
-
-local configMap = k.core.v1.configMap;
-local container = k.core.v1.container;
-local containerPort = k.core.v1.containerPort;
-local deployment = k.apps.v1.deployment;
-local pvc = k.core.v1.persistentVolumeClaim;
-local service = k.core.v1.service;
-local volumeMount = k.core.v1.volumeMount;
-local volume = k.core.v1.volume;
-
-{
-  new(namespace=''):: {
-    local this = self,
-
-    _images:: {
-      loki: 'grafana/loki:1.4.1',
-    },
-    _config:: (import './loki-config.libsonnet'),
-
-    configMap:
-      configMap.new('loki-config') +
-      configMap.mixin.metadata.withNamespace(namespace) +
-      configMap.withData({
-        'config.yaml': k.util.manifestYaml(this._config),
-      }),
-
-    container::
-      container.new('loki', this._images.loki) +
-      container.withPorts([
-        containerPort.newNamed(name='http-metrics', containerPort=80),
-        containerPort.newNamed(name='grpc', containerPort=9095),
-      ]) +
-      container.withVolumeMountsMixin(
-        volumeMount.new('loki-data', '/tmp/loki'),
-      ) +
-      container.withArgsMixin(
-        k.util.mapToFlags({
-          'config.file': '/etc/loki/config.yaml',
-        }),
-      ),
-
-    pvc:
-      { apiVersion: 'v1', kind: 'PersistentVolumeClaim' } +
-      pvc.new() +
-      pvc.mixin.metadata.withName('loki-data') +
-      pvc.mixin.metadata.withNamespace(namespace) +
-      pvc.mixin.spec.withAccessModes('ReadWriteOnce') +
-      pvc.mixin.spec.resources.withRequests({ storage: '10Gi' }),
-
-    deployment:
-      deployment.new('loki', 1, [this.container]) +
-      deployment.mixin.metadata.withNamespace(namespace) +
-      deployment.mixin.spec.template.spec.withVolumesMixin([
-        volume.fromPersistentVolumeClaim('loki-data', 'loki-data'),
-      ]) +
-      k.util.configMapVolumeMount(this.configMap, '/etc/loki') +
-      deployment.mixin.spec.template.spec.withTerminationGracePeriodSeconds(4800),
-
-    service:
-      k.util.serviceFor(this.deployment) +
-      service.mixin.metadata.withNamespace(namespace),
-  },
-}
diff --git a/example/k3d/lib/node-exporter/main.libsonnet b/example/k3d/lib/node-exporter/main.libsonnet
deleted file mode 100644
index 5f57f9926928..000000000000
--- a/example/k3d/lib/node-exporter/main.libsonnet
+++ /dev/null
@@ -1,35 +0,0 @@
-local k = import 'ksonnet-util/kausal.libsonnet';
-
-local container = k.core.v1.container;
-local containerPort = k.core.v1.containerPort;
-local daemonSet = k.apps.v1.daemonSet;
-local service = k.core.v1.service;
-
-{
-  new(namespace=''):: {
-    container::
-      container.new('node-exporter', 'quay.io/prometheus/node-exporter:v1.1.2') +
-      container.withPorts([
-        containerPort.newNamed(name='http-metrics', containerPort=9100),
-      ]) +
-      container.withArgsMixin([
-        '--path.rootfs=/host/root',
-        '--path.procfs=/host/proc',
-        '--path.sysfs=/host/sys',
-        '--collector.netdev.device-exclude=^veth.+$',
-      ]) +
-      container.mixin.securityContext.withPrivileged(true) +
-      container.mixin.securityContext.withRunAsUser(0),
-
-    daemonSet:
-      daemonSet.new('node-exporter', [self.container]) +
-      daemonSet.mixin.metadata.withNamespace(namespace) +
-      daemonSet.mixin.spec.template.metadata.withAnnotationsMixin({ 'prometheus.io.scrape': 'false' }) +
-      daemonSet.mixin.spec.template.spec.withHostPid(true) +
-      daemonSet.mixin.spec.template.spec.withHostNetwork(true) +
-      k.util.hostVolumeMount('proc', '/proc', '/host/proc') +
-      k.util.hostVolumeMount('sys', '/sys', '/host/sys') +
-      k.util.hostVolumeMount('root', '/', '/host/root') +
-      k.util.podPriority('critical'),
-  },
-}
diff --git a/example/k3d/lib/prometheus/main.libsonnet b/example/k3d/lib/prometheus/main.libsonnet
deleted file mode 100644
index 74c9cf6b98b1..000000000000
--- a/example/k3d/lib/prometheus/main.libsonnet
+++ /dev/null
@@ -1,90 +0,0 @@
-local k = import 'ksonnet-util/kausal.libsonnet';
-
-local configMap = k.core.v1.configMap;
-local container = k.core.v1.container;
-local containerPort = k.core.v1.containerPort;
-local deployment = k.apps.v1.deployment;
-local statefulSet = k.apps.v1.statefulSet;
-local pvc = k.core.v1.persistentVolumeClaim;
-local service = k.core.v1.service;
-local volumeMount = k.core.v1.volumeMount;
-local volume = k.core.v1.volume;
-local serviceAccount = k.core.v1.serviceAccount;
-local policyRule = k.rbac.v1.policyRule;
-
-{
-  new(namespace=''):: {
-    local k = (import 'ksonnet-util/kausal.libsonnet') { _config+:: { namespace: namespace } },
-    local this = self,
-
-    _images:: {
-      prom: 'prom/prometheus:v2.28.0',
-    },
-
-    _config:: {
-      rule_files: ['/etc/prometheus/rules.yaml'],
-    },
-    _rules:: {},
-
-    rbac:
-      k.util.rbac('prometheus', [
-        policyRule.withApiGroups(['']) +
-        policyRule.withResources(['nodes', 'nodes/proxy', 'services', 'endpoints', 'pods']) +
-        policyRule.withVerbs(['get', 'list', 'watch']),
-
-        policyRule.withNonResourceUrls('/metrics') +
-        policyRule.withVerbs(['get']),
-      ]) {
-        service_account+:
-          serviceAccount.mixin.metadata.withNamespace(namespace),
-      },
-
-    configMap:
-      configMap.new('prometheus') +
-      configMap.mixin.metadata.withNamespace(namespace) +
-      configMap.withData({
-        'prometheus.yaml': k.util.manifestYaml(this._config),
-        'rules.yaml': k.util.manifestYaml(this._rules),
-      }),
-
-    container::
-      container.new('prometheus', this._images.prom) +
-      container.withPorts([
-        containerPort.newNamed(name='http-metrics', containerPort=9090),
-      ]) +
-      container.withVolumeMountsMixin(
-        volumeMount.new('prometheus-data', '/data'),
-      ) +
-      container.withArgsMixin([
-        '--config.file=/etc/prometheus/prometheus.yaml',
-        '--storage.tsdb.path=/data',
-      ]),
-
-    pvc::
-      { apiVersion: 'v1', kind: 'PersistentVolumeClaim' } +
-      pvc.new() +
-      pvc.mixin.metadata.withName('prometheus-data') +
-      pvc.mixin.metadata.withNamespace(namespace) +
-      pvc.mixin.spec.withAccessModes('ReadWriteOnce') +
-      pvc.mixin.spec.resources.withRequests({ storage: '10Gi' }),
-
-    statefulSet:
-      statefulSet.new(
-        name='prometheus',
-        replicas=1,
-        containers=[this.container],
-        volumeClaims=[this.pvc]
-      ) +
-      statefulSet.mixin.spec.withServiceName('prometheus') +
-      k.util.configMapVolumeMount(this.configMap, '/etc/prometheus') +
-      statefulSet.mixin.spec.template.spec.withServiceAccountName('prometheus') +
-      statefulSet.mixin.metadata.withNamespace(namespace),
-
-    service:
-      k.util.serviceFor(this.statefulSet) +
-      service.mixin.metadata.withNamespace(namespace),
-  },
-
-  withConfigMixin(config={}):: { _config+:: config },
-  withRulesMixin(rules={}):: { _rules+:: rules },
-}
diff --git a/example/k3d/scripts/create.bash b/example/k3d/scripts/create.bash
deleted file mode 100755
index 24ec71361835..000000000000
--- a/example/k3d/scripts/create.bash
+++ /dev/null
@@ -1,20 +0,0 @@
-#!/usr/bin/env bash
-
-EXTRA_MOUNTS=""
-
-if [ -f /etc/machine-id ]; then
-  EXTRA_MOUNTS="$EXTRA_MOUNTS -v /etc/machine-id:/etc/machine-id"
-fi
-
-if [ -d /dev/mapper ]; then
-  EXTRA_MOUNTS="$EXTRA_MOUNTS -v /dev/mapper:/dev/mapper"
-fi
-
-k3d cluster create agent-k3d \
-  --port 30080:80@loadbalancer \
-  --api-port 50443 \
-  -v /var/lib/k3d/agent-k3d/storage/:/var/lib/rancher/k3s/storage/ \
-  $EXTRA_MOUNTS \
-  --kubeconfig-update-default=true \
-  --kubeconfig-switch-context=true \
-  --wait
diff --git a/example/k3d/scripts/smoke-test.bash b/example/k3d/scripts/smoke-test.bash
deleted file mode 100755
index 4ed75ae223c2..000000000000
--- a/example/k3d/scripts/smoke-test.bash
+++ /dev/null
@@ -1,142 +0,0 @@
-#!/usr/bin/env bash
-#
-# Usage:
-#   smoke-test.bash [-i] [-d] [-s] [-t <duration>]
-#
-# Dependencies:
-#   k3d >=3.0
-#   Tanka
-#   jq
-#
-# smoke-test.bash performs smoke tests that can be used to validate a release.
-# It only validates correctness, and does not attempt to do significant load
-# testing or performance benchmarks.
-#
-# It works by deploying a k3d cluster with two pairs of Agent deployments: one
-# using the scraping service, and one using host filtering. Each Agent deployment
-# monitors a unique set of correctness tools (Loki Canary, Tempo Vulture,
-# Cortex text-exporter). These tools expose correctness metrics, generated by
-# by querying the backends that the Grafana Agents are configured to send
-# telemetry data to.
-#
-# Grafana and Prometheus are deployed to the cluster and are responsible for
-# internal monitoring. Prometheus is configured with a set of alert rules that serve
-# as test cases for the smoke tests; alerts generated within the span of the testing
-# period are treated as failures.
-#
-# After the smoke-test duration period (defaulting to 3h), alerts will
-# be checked, and the script will end.
-#
-# The k3d cluster is kept alive after the test for analysis. To clean up assets created
-# by the script, re-run the script with the -d flag.
-
-set -euo pipefail
-
-# Constants
-ROOT=$(git rev-parse --show-toplevel)
-K3D_CLUSTER_NAME="agent-smoke-test"
-SKIP_CREATE=""
-
-# Variables
-
-# Which function will be called
-ENTRYPOINT="run"
-TEST_DURATION="10800"
-IMPORT_IMAGES=""
-
-while getopts "dt:ish" opt; do
-  case $opt in
-    d) ENTRYPOINT="cleanup" ;;
-    t) TEST_DURATION=$OPTARG ;;
-    i) IMPORT_IMAGES="yes" ;;
-    s) SKIP_CREATE="yes" ;;
-    h)
-      echo "Usage: $0 [-i] [-d] [-s] [-t <duration>]"
-      exit 0
-      ;;
-    *)
-      echo "Usage: $0 [-i] [-d] [-s] [-t <duration>]"
-      exit 1
-      ;;
-  esac
-done
-
-# Run runs the smoke test for $TEST_DURATION.
-run() {
-  if [[ -z "$SKIP_CREATE" ]]; then
-    echo "--- Creating k3d cluster $K3D_CLUSTER_NAME"
-    k3d cluster create $K3D_CLUSTER_NAME \
-      --port 50080:80@loadbalancer \
-      --api-port 50443 \
-      --kubeconfig-update-default=true \
-      --kubeconfig-switch-context=true \
-      --wait >/dev/null
-  fi
-
-  # Give the cluster a little bit of time to settle before
-  # applying the environment
-  echo "--- Waiting for cluster to warm up"
-  sleep 10
-
-  if [[ ! -z "$IMPORT_IMAGES" ]]; then
-    echo "--- Importing local images"
-
-    k3d image import -c $K3D_CLUSTER_NAME \
-      grafana/agent:main \
-      grafana/agentctl:main \
-      us.gcr.io/kubernetes-dev/grafana/agent-crow:main \
-      us.gcr.io/kubernetes-dev/grafana/agent-smoke:main
-  fi
-
-  (cd $ROOT/example/k3d && jb install)
-  tk apply $ROOT/example/k3d/smoke --dangerous-auto-approve
-
-  # Immediately create a job to sync configs so our two Agent deployments
-  # are synced up as closely as possible.
-  kubectl --context=k3d-$K3D_CLUSTER_NAME --namespace=smoke \
-    create job --from=cronjob/grafana-agent-syncer \
-    grafana-agent-syncer-startup
-
-  echo "Your environment is now running for the next $TEST_DURATION seconds."
-  echo "Grafana URL: http://grafana.k3d.localhost:50080"
-  echo "Prometheus URL: http://prometheus.k3d.localhost:50080"
-  echo "Check smoke test logs: "
-  echo "  kubectl logs --namespace=smoke -f deployment/smoke-test"
-  sleep $TEST_DURATION
-
-  kubectl scale -n smoke --replicas=0 deployment/smoke-test
-
-  echo "Smoke tests complete!"
-  echo "Grafana URL: http://grafana.k3d.localhost:50080"
-  echo "Prometheus URL: http://prometheus.k3d.localhost:50080"
-  echo ""
-  echo "Getting results..."
-
-  get_results
-}
-
-get_results() {
-  NUM_ALERTS=$(curl -s -G \
-    -H "Host: prometheus.k3d.localhost"    \
-    -d "query=count_over_time(ALERTS{alertstate=\"firing\"}[$TEST_DURATION])" \
-    'http://localhost:50080/api/v1/query'  \
-      | jq '.data.result | length'         \
-  )
-  if test $NUM_ALERTS -ne 0; then
-    echo "FAIL: $NUM_ALERTS alerts found over the last $TEST_DURATION seconds."
-    echo "More information: http://prometheus.k3d.localhost:50080/graph?g0.expr=count_over_time(ALERTS{alertstate%3D%22firing%22}[$TEST_DURATION])"
-
-    exit 1
-  else
-    echo "PASS: 0 alerts found over the last $TEST_DURATION seconds. You're good to go!"
-
-    exit 0
-  fi
-}
-
-cleanup() {
-  echo "--- Deleting k3d cluster $K3D_CLUSTER_NAME"
-  k3d cluster delete $K3D_CLUSTER_NAME >/dev/null
-}
-
-$ENTRYPOINT
diff --git a/example/k3d/smoke/main.jsonnet b/example/k3d/smoke/main.jsonnet
deleted file mode 100644
index 553c554927e6..000000000000
--- a/example/k3d/smoke/main.jsonnet
+++ /dev/null
@@ -1,512 +0,0 @@
-local monitoring = import './monitoring/main.jsonnet';
-local cortex = import 'cortex/main.libsonnet';
-local canary = import 'github.com/grafana/loki/production/ksonnet/loki-canary/loki-canary.libsonnet';
-local vulture = import 'github.com/grafana/tempo/operations/jsonnet/microservices/vulture.libsonnet';
-local tempo = import 'github.com/grafana/tempo/operations/jsonnet/single-binary/tempo.libsonnet';
-local avalanche = import 'grafana-agent/smoke/avalanche/main.libsonnet';
-local crow = import 'grafana-agent/smoke/crow/main.libsonnet';
-local etcd = import 'grafana-agent/smoke/etcd/main.libsonnet';
-local smoke = import 'grafana-agent/smoke/main.libsonnet';
-local gragent = import 'grafana-agent/v2/main.libsonnet';
-local k = import 'ksonnet-util/kausal.libsonnet';
-local loki = import 'loki/main.libsonnet';
-
-local namespace = k.core.v1.namespace;
-local pvc = k.core.v1.persistentVolumeClaim;
-local volumeMount = k.core.v1.volumeMount;
-local containerPort = k.core.v1.containerPort;
-local statefulset = k.apps.v1.statefulSet;
-local service = k.core.v1.service;
-local configMap = k.core.v1.configMap;
-local deployment = k.apps.v1.deployment;
-local daemonSet = k.apps.v1.daemonSet;
-
-local images = {
-  agent: 'grafana/agent:main',
-  agentctl: 'grafana/agentctl:main',
-};
-
-local new_crow(name, selector) =
-  crow.new(name, namespace='smoke', config={
-    args+: {
-      'crow.prometheus-addr': 'http://cortex/api/prom',
-      'crow.extra-selectors': selector,
-    },
-  });
-
-local new_smoke(name) = smoke.new(name, namespace='smoke', config={
-  mutationFrequency: '5m',
-  chaosFrequency: '30m',
-});
-
-
-local smoke = {
-  ns: namespace.new('smoke'),
-
-  cortex: cortex.new('smoke'),
-
-  tempo: tempo {
-    _config+:: {
-      namespace: 'smoke',
-      tempo: {
-        port: 3200,
-        replicas: 1,
-        headless_service_name: 'localhost',
-      },
-      pvc_size: '30Gi',
-      pvc_storage_class: 'local-path',
-      receivers: {
-        jaeger: {
-          protocols: {
-            thrift_http: null,
-          },
-        },
-        otlp: {
-          protocols: {
-            grpc: {
-              endpoint: '0.0.0.0:4317',
-            },
-          },
-        },
-      },
-    },
-    tempo_config+: {
-      querier: {
-        frontend_worker: {
-          frontend_address: 'localhost:9095',
-        },
-      },
-    },
-    tempo_statefulset+:
-      statefulset.mixin.metadata.withNamespace('smoke'),
-    tempo_service+:
-      service.mixin.metadata.withNamespace('smoke'),
-    tempo_headless_service+:
-      service.mixin.metadata.withNamespace('smoke'),
-    tempo_query_configmap+:
-      configMap.mixin.metadata.withNamespace('smoke'),
-    tempo_configmap+:
-      configMap.mixin.metadata.withNamespace('smoke'),
-  },
-
-  loki: loki.new(namespace='smoke'),
-
-  // https://grafana.com/docs/loki/latest/operations/loki-canary/
-  canary: canary {
-    loki_canary_args+:: {
-      addr: 'loki:80',
-      port: '80',
-      tls: false,
-      labelname: 'instance',
-      labelvalue: '$(POD_NAME)',
-      interval: '1s',
-      'metric-test-interval': '30m',
-      'metric-test-range': '2h',
-      size: 1024,
-      wait: '3m',
-    },
-    _config+:: {
-      namespace: 'smoke',
-    },
-    loki_canary_daemonset+:
-      daemonSet.mixin.metadata.withNamespace('smoke'),
-  },
-
-  // Needed to run agent cluster
-  etcd: etcd.new('smoke'),
-
-  avalanche: avalanche.new(replicas=3, namespace='smoke', config={
-    // We're going to be running a lot of these and we're not trying to test
-    // for load, so reduce the cardinality and churn rate.
-    metric_count: 1000,
-    series_interval: 300,
-    metric_interval: 600,
-  }),
-
-  smoke_test: new_smoke('smoke-test'),
-
-  crows: [
-    new_crow('crow-single', 'cluster="grafana-agent"'),
-    new_crow('crow-cluster', 'cluster="grafana-agent-cluster"'),
-  ],
-
-  vulture: vulture {
-    _images+:: {
-      tempo_vulture: 'grafana/tempo-vulture:latest',
-    },
-    _config+:: {
-      vulture: {
-        replicas: 1,
-        tempoPushUrl: 'http://grafana-agent',
-        tempoQueryUrl: 'http://tempo:3200',
-        tempoOrgId: '',
-        tempoRetentionDuration: '336h',
-        tempoSearchBackoffDuration: '0s',
-        tempoReadBackoffDuration: '10s',
-        tempoWriteBackoffDuration: '10s',
-      },
-    },
-    tempo_vulture_deployment+:
-      deployment.mixin.metadata.withNamespace('smoke'),
-  },
-
-  local metric_instances(crow_name) = [{
-    name: 'crow',
-    remote_write: [
-      {
-        url: 'http://cortex/api/prom/push',
-        write_relabel_configs: [
-          {
-            source_labels: ['__name__'],
-            regex: 'avalanche_.*',
-            action: 'drop',
-          },
-        ],
-      },
-      {
-        url: 'http://smoke-test:19090/api/prom/push',
-        write_relabel_configs: [
-          {
-            source_labels: ['__name__'],
-            regex: 'avalanche_.*',
-            action: 'keep',
-          },
-        ],
-      },
-    ],
-    scrape_configs: [
-      {
-        job_name: 'crow',
-        metrics_path: '/validate',
-
-        kubernetes_sd_configs: [{ role: 'pod' }],
-        tls_config: {
-          ca_file: '/var/run/secrets/kubernetes.io/serviceaccount/ca.crt',
-        },
-        bearer_token_file: '/var/run/secrets/kubernetes.io/serviceaccount/token',
-
-        relabel_configs: [{
-          source_labels: ['__meta_kubernetes_namespace'],
-          regex: 'smoke',
-          action: 'keep',
-        }, {
-          source_labels: ['__meta_kubernetes_pod_container_name'],
-          regex: crow_name,
-          action: 'keep',
-        }],
-      },
-    ],
-  }, {
-    name: 'avalanche',
-    remote_write: [
-      {
-        url: 'http://cortex/api/prom/push',
-        write_relabel_configs: [
-          {
-            source_labels: ['__name__'],
-            regex: 'avalanche_.*',
-            action: 'drop',
-          },
-        ],
-      },
-      {
-        url: 'http://smoke-test:19090/api/prom/push',
-        write_relabel_configs: [
-          {
-            source_labels: ['__name__'],
-            regex: 'avalanche_.*',
-            action: 'keep',
-          },
-        ],
-      },
-    ],
-    scrape_configs: [
-      {
-        job_name: 'avalanche',
-        kubernetes_sd_configs: [{ role: 'pod' }],
-        tls_config: {
-          ca_file: '/var/run/secrets/kubernetes.io/serviceaccount/ca.crt',
-        },
-        bearer_token_file: '/var/run/secrets/kubernetes.io/serviceaccount/token',
-
-        relabel_configs: [{
-          source_labels: ['__meta_kubernetes_namespace'],
-          regex: 'smoke',
-          action: 'keep',
-        }, {
-          source_labels: ['__meta_kubernetes_pod_container_name'],
-          regex: 'avalanche',
-          action: 'keep',
-        }],
-      },
-    ],
-  }, {
-    name: 'vulture',
-    remote_write: [
-      {
-        url: 'http://cortex/api/prom/push',
-        write_relabel_configs: [
-          {
-            source_labels: ['__name__'],
-            regex: 'avalanche_.*',
-            action: 'drop',
-          },
-        ],
-      },
-      {
-        url: 'http://smoke-test:19090/api/prom/push',
-        write_relabel_configs: [
-          {
-            source_labels: ['__name__'],
-            regex: 'avalanche_.*',
-            action: 'keep',
-          },
-        ],
-      },
-    ],
-    scrape_configs: [
-      {
-        job_name: 'vulture',
-        kubernetes_sd_configs: [{ role: 'pod' }],
-        tls_config: {
-          ca_file: '/var/run/secrets/kubernetes.io/serviceaccount/ca.crt',
-        },
-        bearer_token_file: '/var/run/secrets/kubernetes.io/serviceaccount/token',
-
-        relabel_configs: [{
-          source_labels: ['__meta_kubernetes_namespace'],
-          regex: 'smoke',
-          action: 'keep',
-        }, {
-          source_labels: ['__meta_kubernetes_pod_container_name'],
-          regex: 'avalanche',
-          action: 'keep',
-        }],
-      },
-    ],
-  }, {
-    name: 'canary',
-    remote_write: [
-      {
-        url: 'http://cortex/api/prom/push',
-        write_relabel_configs: [
-          {
-            source_labels: ['__name__'],
-            regex: 'avalanche_.*',
-            action: 'drop',
-          },
-        ],
-      },
-      {
-        url: 'http://smoke-test:19090/api/prom/push',
-        write_relabel_configs: [
-          {
-            source_labels: ['__name__'],
-            regex: 'avalanche_.*',
-            action: 'keep',
-          },
-        ],
-      },
-    ],
-    scrape_configs: [
-      {
-        job_name: 'canary',
-        kubernetes_sd_configs: [{ role: 'pod' }],
-        tls_config: {
-          ca_file: '/var/run/secrets/kubernetes.io/serviceaccount/ca.crt',
-        },
-        bearer_token_file: '/var/run/secrets/kubernetes.io/serviceaccount/token',
-
-        relabel_configs: [
-          {
-            source_labels: ['__meta_kubernetes_namespace'],
-            regex: 'smoke',
-            action: 'keep',
-          },
-          {
-            source_labels: ['__meta_kubernetes_pod_container_name'],
-            regex: 'canary',
-            action: 'keep',
-          },
-        ],
-      },
-    ],
-  }],
-
-  local logs_instances() = [{
-    name: 'write-loki',
-    clients: [{
-      url: 'http://loki/loki/api/v1/push',
-      basic_auth: {
-        username: '104334',
-        password: 'noauth',
-      },
-      external_labels: {
-        cluster: 'grafana-agent',
-      },
-
-    }],
-    scrape_configs: [{
-      job_name: 'write-canary-output',
-      kubernetes_sd_configs: [{ role: 'pod' }],
-      pipeline_stages: [
-        { cri: {} },
-      ],
-      relabel_configs: [
-        {
-          source_labels: ['__meta_kubernetes_namespace'],
-          regex: 'smoke',
-          action: 'keep',
-        },
-        {
-          source_labels: ['__meta_kubernetes_pod_container_name'],
-          regex: 'loki-canary',
-          action: 'keep',
-        },
-        {
-          action: 'replace',
-          source_labels: ['__meta_kubernetes_pod_uid', '__meta_kubernetes_pod_container_name'],
-          target_label: '__path__',
-          separator: '/',
-          replacement: '/var/log/pods/*$1/*.log',
-        },
-        {
-          action: 'replace',
-          source_labels: ['__meta_kubernetes_pod_name'],
-          target_label: 'pod',
-        },
-        {
-          action: 'replace',
-          source_labels: ['__meta_kubernetes_pod_name'],
-          target_label: 'instance',
-        },
-      ],
-    }],
-  }],
-
-  normal_agent:
-    gragent.new(name='grafana-agent', namespace='smoke') +
-    gragent.withImagesMixin(images) +
-    gragent.withStatefulSetController(
-      replicas=1,
-      volumeClaims=[
-        pvc.new() +
-        pvc.mixin.metadata.withName('agent-wal') +
-        pvc.mixin.metadata.withNamespace('smoke') +
-        pvc.mixin.spec.withAccessModes('ReadWriteOnce') +
-        pvc.mixin.spec.resources.withRequests({ storage: '5Gi' }),
-      ],
-    ) +
-    gragent.withVolumeMountsMixin([volumeMount.new('agent-wal', '/var/lib/agent')]) +
-    gragent.withService() +
-    gragent.withPortsMixin([
-      containerPort.new('thrift-grpc', 14250) + containerPort.withProtocol('TCP'),
-    ]) +
-    gragent.withLogVolumeMounts() +
-    gragent.withAgentConfig({
-      server: { log_level: 'debug' },
-      logs: {
-        positions_directory: '/var/lib/agent/logs-positions',
-        configs: logs_instances(),
-      },
-
-      prometheus: {
-        global: {
-          scrape_interval: '1m',
-          external_labels: {
-            cluster: 'grafana-agent',
-          },
-        },
-        wal_directory: '/var/lib/agent/data',
-        configs: metric_instances('crow-single'),
-      },
-      traces: {
-        configs: [
-          {
-            name: 'vulture',
-            receivers: {
-              jaeger: {
-                protocols: {
-                  grpc: null,
-                },
-              },
-            },
-            remote_write: [
-              {
-                endpoint: 'tempo:4317',
-                insecure: true,
-              },
-            ],
-            batch: {
-              timeout: '5s',
-              send_batch_size: 100,
-            },
-          },
-        ],
-      },
-    }),
-
-  cluster_agent:
-    gragent.new(name='grafana-agent-cluster', namespace='smoke') +
-    gragent.withImagesMixin(images) +
-    gragent.withStatefulSetController(
-      replicas=3,
-      volumeClaims=[
-        pvc.new() +
-        pvc.mixin.metadata.withName('agent-cluster-wal') +
-        pvc.mixin.metadata.withNamespace('smoke') +
-        pvc.mixin.spec.withAccessModes('ReadWriteOnce') +
-        pvc.mixin.spec.resources.withRequests({ storage: '5Gi' }),
-      ],
-    ) +
-    gragent.withVolumeMountsMixin([volumeMount.new('agent-cluster-wal', '/var/lib/agent')]) +
-    gragent.withService() +
-    gragent.withLogVolumeMounts() +
-    gragent.withAgentConfig({
-      server: { log_level: 'debug' },
-
-      prometheus: {
-        global: {
-          scrape_interval: '1m',
-          external_labels: {
-            cluster: 'grafana-agent-cluster',
-          },
-        },
-        wal_directory: '/var/lib/agent/data',
-
-        scraping_service: {
-          enabled: true,
-          dangerous_allow_reading_files: true,
-          kvstore: {
-            store: 'etcd',
-            etcd: { endpoints: ['etcd:2379'] },
-          },
-          lifecycler: {
-            ring: {
-              kvstore: {
-                store: 'etcd',
-                etcd: { endpoints: ['etcd:2379'] },
-              },
-            },
-          },
-        },
-      },
-    }),
-
-  // Spawn a syncer so our cluster gets the same scrape jobs as our
-  // normal agent.
-  sycner: gragent.newSyncer(
-    name='grafana-agent-syncer',
-    namespace='smoke',
-    config={
-      image: images.agentctl,
-      api: 'http://grafana-agent-cluster.smoke.svc.cluster.local',
-      configs: metric_instances('crow-cluster'),
-    }
-  ),
-};
-
-{
-  monitoring: monitoring,
-  smoke: smoke,
-}
diff --git a/example/k3d/smoke/monitoring/main.jsonnet b/example/k3d/smoke/monitoring/main.jsonnet
deleted file mode 100644
index 4e6a7738ec97..000000000000
--- a/example/k3d/smoke/monitoring/main.jsonnet
+++ /dev/null
@@ -1,61 +0,0 @@
-local grafana_mixins = import 'default/mixins.libsonnet';
-local datasource = import 'grafana/datasource.libsonnet';
-local grafana = import 'grafana/main.libsonnet';
-local k = import 'ksonnet-util/kausal.libsonnet';
-local kube_state_metrics = import 'kube-state-metrics/main.libsonnet';
-local node_exporter = import 'node-exporter/main.libsonnet';
-local prometheus = import 'prometheus/main.libsonnet';
-
-local namespace = k.core.v1.namespace;
-local ingress = k.networking.v1beta1.ingress;
-local rule = k.networking.v1beta1.ingressRule;
-local path = k.networking.v1beta1.httpIngressPath;
-
-
-local prometheus_monitoring = import './prometheus_monitoring.libsonnet';
-
-{
-  ns: namespace.new('monitoring'),
-
-  grafana:
-    grafana.new(namespace='monitoring') +
-    grafana.withDashboards(grafana_mixins.grafanaDashboards) +
-    grafana.withDataSources([
-      datasource.new('Prometheus', 'http://prometheus.monitoring.svc.cluster.local:9090', default='true'),
-      datasource.new('Cortex', 'http://cortex.smoke.svc.cluster.local/api/prom'),
-    ]),
-
-  prometheus:
-    prometheus.new(namespace='monitoring') +
-    prometheus.withConfigMixin(prometheus_monitoring.config) +
-    prometheus.withRulesMixin(prometheus_monitoring.rules),
-
-  node_exporter: node_exporter.new(namespace='monitoring'),
-  kube_state_metrics: kube_state_metrics.new(namespace='monitoring'),
-
-  ingresses: {
-    prometheus:
-      ingress.new('prometheus') +
-      ingress.mixin.metadata.withNamespace('monitoring') +
-      ingress.mixin.spec.withRules([
-        rule.withHost('prometheus.k3d.localhost') +
-        rule.http.withPaths([
-          path.withPath('/') +
-          path.backend.withServiceName('prometheus') +
-          path.backend.withServicePort(9090),
-        ]),
-      ]),
-
-    grafana:
-      ingress.new('grafana') +
-      ingress.mixin.metadata.withNamespace('monitoring') +
-      ingress.mixin.spec.withRules([
-        rule.withHost('grafana.k3d.localhost') +
-        rule.http.withPaths([
-          path.withPath('/') +
-          path.backend.withServiceName('grafana') +
-          path.backend.withServicePort(80),
-        ]),
-      ]),
-  },
-}
diff --git a/example/k3d/smoke/monitoring/prometheus_monitoring.libsonnet b/example/k3d/smoke/monitoring/prometheus_monitoring.libsonnet
deleted file mode 100644
index 0f793508c2f7..000000000000
--- a/example/k3d/smoke/monitoring/prometheus_monitoring.libsonnet
+++ /dev/null
@@ -1,282 +0,0 @@
-local agent_prometheus = import 'grafana-agent/v1/lib/metrics.libsonnet';
-
-{
-  config: {
-    global: {
-      scrape_interval: '1m',
-    },
-    scrape_configs: agent_prometheus.scrapeInstanceKubernetes.scrape_configs,
-  },
-
-  rules: {
-    groups: [
-      {
-        name: 'GrafanaAgentChecks',
-        rules: [
-          // Basic sanity checks: ensure that Agents exist, are up,
-          // and haven't been flapping.
-          {
-            alert: 'GrafanaAgentMissing',
-            expr: |||
-              absent(up{ namespace="smoke", pod="grafana-agent-0" })         == 1 or
-              absent(up{ namespace="smoke", pod="grafana-agent-cluster-0" }) == 1 or
-              absent(up{ namespace="smoke", pod="grafana-agent-cluster-1" }) == 1 or
-              absent(up{ namespace="smoke", pod="grafana-agent-cluster-2" }) == 1
-            |||,
-            'for': '5m',
-            annotations: {
-              summary: '{{ $labels.pod }} is not running.',
-            },
-          },
-          {
-            alert: 'GrafanaAgentDown',
-            expr: |||
-              up{
-                namespace="smoke",
-                pod=~"grafana-agent-(0|cluster-0|cluster-1|cluster-2)",
-              } == 0
-            |||,
-            'for': '5m',
-            annotations: {
-              summary: '{{ $labels.job }} is down',
-            },
-          },
-          {
-            alert: 'GrafanaAgentFlapping',
-            expr: |||
-              avg_over_time(up{
-                namespace="smoke",
-                pod=~"grafana-agent-(0|cluster-0|cluster-1|cluster-2)",
-              }[5m]) < 1
-            |||,
-            'for': '15m',
-            annotations: {
-              summary: '{{ $labels.job }} is flapping',
-            },
-          },
-
-          // Checks that the CPU usage doesn't go too high. This was generated
-          // from main where the CPU usage hovered around 2-3% per pod.
-          //
-          // TODO: something less guessworky here.
-          {
-            alert: 'GrafanaAgentCPUHigh',
-            expr: |||
-              rate(container_cpu_usage_seconds_total{namespace="smoke", pod=~"grafana-agent-.*"}[1m]) > 0.05
-            |||,
-            'for': '5m',
-            annotations: {
-              summary: '{{ $labels.pod }} is using more than 5% CPU over the last 5 minutes',
-            },
-          },
-
-          // We assume roughly ~8KB per series. Check that each deployment
-          // doesn't go too far above this.
-          //
-          // We aggregate the memory of the scraping service together since an individual
-          // node with a really small number of active series will throw this metric off.
-          {
-            alert: 'GrafanaAgentMemHigh',
-            expr: |||
-              sum without (pod, instance) (go_memstats_heap_inuse_bytes{job=~"smoke/grafana-agent.*"}) /
-              sum without (pod, instance, instance_group_name) (agent_wal_storage_active_series{job=~"smoke/grafana-agent.*"}) / 1e3 > 10
-            |||,
-            'for': '5m',
-            annotations: {
-              summary: '{{ $labels.job }} has used more than 10KB per series for more than 5 minutes',
-            },
-          },
-        ],
-      },
-      {
-        name: 'CrowChecks',
-        rules: [
-          {
-            alert: 'CrowMissing',
-            expr: |||
-              absent(up{container="crow-single"})  == 1 or
-              absent(up{container="crow-cluster"}) == 1
-            |||,
-            'for': '5m',
-            annotations: {
-              summary: '{{ $labels.container }} is not running.',
-            },
-          },
-          {
-            alert: 'CrowDown',
-            expr: |||
-              up{job=~"smoke/crow-.*"} == 0
-            |||,
-            'for': '5m',
-            annotations: {
-              summary: 'Crow {{ $labels.job }} is down.',
-            },
-          },
-          {
-            alert: 'CrowFlapping',
-            expr: |||
-              avg_over_time(up{job=~"smoke/crow-.*"}[5m]) < 1
-            |||,
-            'for': '15m',
-            annotations: {
-              summary: 'Crow {{ $labels.job }} is flapping.',
-            },
-          },
-          {
-            alert: 'CrowNotScraped',
-            expr: |||
-              rate(crow_test_samples_total[1m]) == 0
-            |||,
-            'for': '5m',
-            annotations: {
-              summary: 'Crow {{ $labels.job }} is not being scraped.',
-            },
-          },
-          {
-            alert: 'CrowFailures',
-            expr: |||
-              (
-                rate(crow_test_sample_results_total{result="success"}[1m])
-                / ignoring(result) rate(crow_test_samples_total[1m])
-              ) < 1
-            |||,
-            'for': '5m',
-            annotations: {
-              summary: 'Crow {{ $labels.job }} has had failures for at least 5m',
-            },
-          },
-        ],
-      },
-      {
-        name: 'VultureChecks',
-        rules: [
-          {
-            alert: 'VultureMissing',
-            expr: |||
-              absent(up{container="vulture"})  == 1
-            |||,
-            'for': '5m',
-            annotations: {
-              summary: '{{ $labels.container }} is not running.',
-            },
-          },
-          {
-            alert: 'VultureDown',
-            expr: |||
-              up{job=~"smoke/vulture"} == 0
-            |||,
-            'for': '5m',
-            annotations: {
-              summary: 'Vulture {{ $labels.job }} is down.',
-            },
-          },
-          {
-            alert: 'VultureFlapping',
-            expr: |||
-              avg_over_time(up{job=~"smoke/vulture"}[5m]) < 1
-            |||,
-            'for': '15m',
-            annotations: {
-              summary: 'Vulture {{ $labels.job }} is flapping.',
-            },
-          },
-          {
-            alert: 'VultureNotScraped',
-            expr: |||
-              rate(tempo_vulture_trace_total[1m]) == 0
-            |||,
-            'for': '5m',
-            annotations: {
-              summary: 'Vulture {{ $labels.job }} is not being scraped.',
-            },
-          },
-          {
-            alert: 'VultureFailures',
-            expr: |||
-              (rate(tempo_vulture_error_total[5m]) / rate(tempo_vulture_trace_total[5m])) > 0.3 
-            |||,
-            'for': '5m',
-            annotations: {
-              summary: 'Vulture {{ $labels.job }} has had failures for at least 5m',
-            },
-          },
-        ],
-      },
-      {
-        name: 'CanaryChecks',
-        rules: [
-          {
-            alert: 'CanaryMissing',
-            expr: |||
-              absent(up{container="loki-canary"})  == 1
-            |||,
-            'for': '5m',
-            annotations: {
-              summary: '{{ $labels.container }} is not running.',
-            },
-          },
-          {
-            alert: 'CanaryDown',
-            expr: |||
-              up{job=~"smoke/loki-canary"} == 0
-            |||,
-            'for': '5m',
-            annotations: {
-              summary: ' Canary is down.',
-            },
-          },
-          {
-            alert: 'CanaryNotScraped',
-            expr: |||
-              rate(loki_canary_entries_total[1m]) == 0
-            |||,
-            'for': '5m',
-            annotations: {
-              summary: 'Canary is not being scraped.',
-            },
-          },
-          {
-            alert: 'CanaryMissingEntries',
-            expr: |||
-              (rate(loki_canary_missing_entries_total[2m])) > 0 
-            |||,
-            'for': '2m',
-            annotations: {
-              summary: 'Canary has had missing entries for at least 2m',
-            },
-          },
-          {
-            alert: 'CanarySpotChecksMissingEntries',
-            expr: |||
-              (rate(loki_canary_spot_check_missing_entries_total[2m])) > 0 
-            |||,
-            'for': '2m',
-            annotations: {
-              summary: 'Canary has had missing spot check entries for at least 2m',
-            },
-          },
-          {
-            alert: 'CanaryWebsocketMissingEntries',
-            expr: |||
-              (rate(loki_canary_websocket_missing_entries_total[2m])) > 0 
-            |||,
-            'for': '2m',
-            annotations: {
-              summary: 'Canary has had missing websocket entries for at least 2m',
-            },
-          },
-          {
-            alert: 'CanaryUnexpectedEntries',
-            expr: |||
-              (rate(loki_canary_unexpected_entries_total[2m])) > 0 
-            |||,
-            'for': '2m',
-            annotations: {
-              summary: 'Canary has had unexpected entries for at least 2m',
-            },
-          },
-        ],
-      },
-    ],
-  },
-}
diff --git a/example/k3d/smoke/spec.json b/example/k3d/smoke/spec.json
deleted file mode 100644
index 8c90817a7a99..000000000000
--- a/example/k3d/smoke/spec.json
+++ /dev/null
@@ -1,11 +0,0 @@
-{
-  "apiVersion": "tanka.dev/v1alpha1",
-  "kind": "Environment",
-  "metadata": {
-    "name": "default"
-  },
-  "spec": {
-    "apiServer": "https://0.0.0.0:50443",
-    "namespace": "default"
-  }
-}

From 951d490caae69c232a1eb3e96c4cdbba1f3ebdec Mon Sep 17 00:00:00 2001
From: Robert Fratto <robertfratto@gmail.com>
Date: Thu, 11 Jan 2024 11:42:48 -0500
Subject: [PATCH 56/68] tools: remove unused smoke testing utilities (#6118)

This commit removes the unused smoke testing utilities (tools/crow,
tools/smoke) as they have not been maintained or used in ages.
---
 .drone/drone.yml                   |  94 +--------------
 .drone/pipelines/publish.jsonnet   |   8 +-
 Makefile                           |  46 +-------
 tools/crow/.gitignore              |   1 -
 tools/crow/Dockerfile              |  39 -------
 tools/crow/README.md               |   5 -
 tools/crow/main.go                 |  82 --------------
 tools/smoke/.gitignore             |   1 -
 tools/smoke/Dockerfile             |  39 -------
 tools/smoke/internal/smoke.go      | 176 -----------------------------
 tools/smoke/internal/tasks.go      | 101 -----------------
 tools/smoke/internal/tasks_test.go | 144 -----------------------
 tools/smoke/main.go                |  48 --------
 13 files changed, 11 insertions(+), 773 deletions(-)
 delete mode 100644 tools/crow/.gitignore
 delete mode 100644 tools/crow/Dockerfile
 delete mode 100644 tools/crow/README.md
 delete mode 100644 tools/crow/main.go
 delete mode 100644 tools/smoke/.gitignore
 delete mode 100644 tools/smoke/Dockerfile
 delete mode 100644 tools/smoke/internal/smoke.go
 delete mode 100644 tools/smoke/internal/tasks.go
 delete mode 100644 tools/smoke/internal/tasks_test.go
 delete mode 100644 tools/smoke/main.go

diff --git a/.drone/drone.yml b/.drone/drone.yml
index b65be33159f8..b234441b6770 100644
--- a/.drone/drone.yml
+++ b/.drone/drone.yml
@@ -1037,94 +1037,6 @@ volumes:
   name: docker
 ---
 kind: pipeline
-name: Publish Linux smoke container
-platform:
-  arch: amd64
-  os: linux
-steps:
-- commands:
-  - docker run --rm --privileged multiarch/qemu-user-static --reset -p yes
-  failure: ignore
-  image: grafana/agent-build-image:0.30.4
-  name: Configure QEMU
-  volumes:
-  - name: docker
-    path: /var/run/docker.sock
-- commands:
-  - mkdir -p $HOME/.docker
-  - printenv GCR_CREDS > $HOME/.docker/config.json
-  - docker login -u $DOCKER_LOGIN -p $DOCKER_PASSWORD
-  - docker buildx create --name multiarch-agent-smoke-${DRONE_COMMIT_SHA} --driver
-    docker-container --use
-  - ./tools/ci/docker-containers smoke
-  - docker buildx rm multiarch-agent-smoke-${DRONE_COMMIT_SHA}
-  environment:
-    DOCKER_LOGIN:
-      from_secret: docker_login
-    DOCKER_PASSWORD:
-      from_secret: docker_password
-    GCR_CREDS:
-      from_secret: gcr_admin
-  image: grafana/agent-build-image:0.30.4
-  name: Publish container
-  volumes:
-  - name: docker
-    path: /var/run/docker.sock
-trigger:
-  ref:
-  - refs/heads/main
-  - refs/tags/v*
-type: docker
-volumes:
-- host:
-    path: /var/run/docker.sock
-  name: docker
----
-kind: pipeline
-name: Publish Linux crow container
-platform:
-  arch: amd64
-  os: linux
-steps:
-- commands:
-  - docker run --rm --privileged multiarch/qemu-user-static --reset -p yes
-  failure: ignore
-  image: grafana/agent-build-image:0.30.4
-  name: Configure QEMU
-  volumes:
-  - name: docker
-    path: /var/run/docker.sock
-- commands:
-  - mkdir -p $HOME/.docker
-  - printenv GCR_CREDS > $HOME/.docker/config.json
-  - docker login -u $DOCKER_LOGIN -p $DOCKER_PASSWORD
-  - docker buildx create --name multiarch-agent-crow-${DRONE_COMMIT_SHA} --driver
-    docker-container --use
-  - ./tools/ci/docker-containers crow
-  - docker buildx rm multiarch-agent-crow-${DRONE_COMMIT_SHA}
-  environment:
-    DOCKER_LOGIN:
-      from_secret: docker_login
-    DOCKER_PASSWORD:
-      from_secret: docker_password
-    GCR_CREDS:
-      from_secret: gcr_admin
-  image: grafana/agent-build-image:0.30.4
-  name: Publish container
-  volumes:
-  - name: docker
-    path: /var/run/docker.sock
-trigger:
-  ref:
-  - refs/heads/main
-  - refs/tags/v*
-type: docker
-volumes:
-- host:
-    path: /var/run/docker.sock
-  name: docker
----
-kind: pipeline
 name: Publish Windows agent container
 platform:
   arch: amd64
@@ -1187,8 +1099,6 @@ depends_on:
 - Publish Linux agent-boringcrypto container
 - Publish Linux agentctl container
 - Publish Linux agent-operator container
-- Publish Linux smoke container
-- Publish Linux crow container
 image_pull_secrets:
 - dockerconfigjson
 kind: pipeline
@@ -1248,8 +1158,6 @@ depends_on:
 - Publish Linux agent-boringcrypto container
 - Publish Linux agentctl container
 - Publish Linux agent-operator container
-- Publish Linux smoke container
-- Publish Linux crow container
 - Publish Windows agent container
 - Publish Windows agentctl container
 image_pull_secrets:
@@ -1409,6 +1317,6 @@ kind: secret
 name: updater_private_key
 ---
 kind: signature
-hmac: c6d9dd05507a2967a2ba394ee5e411e9dff9135335d31881d0d3ee262c7ea63a
+hmac: b4b3bb3578124bba1758f323695216281365054c623738d38e51cc37125277ae
 
 ...
diff --git a/.drone/pipelines/publish.jsonnet b/.drone/pipelines/publish.jsonnet
index 030fd9891001..6f8c4c2b202b 100644
--- a/.drone/pipelines/publish.jsonnet
+++ b/.drone/pipelines/publish.jsonnet
@@ -6,7 +6,7 @@ local ghTokenFilename = '/drone/src/gh-token.txt';
 // job_names gets the list of job names for use in depends_on.
 local job_names = function(jobs) std.map(function(job) job.name, jobs);
 
-local linux_containers = ['agent','agent-boringcrypto', 'agentctl', 'agent-operator', 'smoke', 'crow'];
+local linux_containers = ['agent', 'agent-boringcrypto', 'agentctl', 'agent-operator'];
 local linux_containers_jobs = std.map(function(container) (
   pipelines.linux('Publish Linux %s container' % container) {
     trigger: {
@@ -163,8 +163,8 @@ linux_containers_jobs + windows_containers_jobs + [
           GITHUB_APP_PRIVATE_KEY: secrets.updater_private_key.fromSecret,
         },
         commands: [
-          '/usr/bin/github-app-external-token > %s' % ghTokenFilename
-        ]
+          '/usr/bin/github-app-external-token > %s' % ghTokenFilename,
+        ],
       },
       {
         name: 'Publish release',
@@ -188,7 +188,7 @@ linux_containers_jobs + windows_containers_jobs + [
             VERSION=${DRONE_TAG} RELEASE_DOC_TAG=$(echo ${DRONE_TAG} | awk -F '.' '{print $1"."$2}') ./tools/release
           |||,
         ],
-      }
+      },
     ],
     volumes: [{
       name: 'docker',
diff --git a/Makefile b/Makefile
index 7b86fcae9080..7bdd7fdee77f 100644
--- a/Makefile
+++ b/Makefile
@@ -28,8 +28,6 @@
 ##   agent-service           Compiles cmd/grafana-agent-service to $(SERVICE_BINARY)
 ##   agentctl                Compiles cmd/grafana-agentctl to $(AGENTCTL_BINARY)
 ##   operator                Compiles cmd/grafana-agent-operator to $(OPERATOR_BINARY)
-##   crow                    Compiles tools/crow to $(CROW_BINARY)
-##   smoke                   Compiles tools/smoke to $(SMOKE_BINARY)
 ##
 ## Targets for building Docker images:
 ##
@@ -38,8 +36,6 @@
 ##   agent-boringcrypto-image Builds agent Docker image with boringcrypto.
 ##   agentctl-image           Builds agentctl Docker image.
 ##   operator-image           Builds operator Docker image.
-##   crow-image               Builds crow Docker image.
-##   smoke-image              Builds smoke test Docker image.
 ##
 ## Targets for packaging:
 ##
@@ -77,8 +73,6 @@
 ##   AGENT_IMAGE                Image name:tag built by `make agent-image`
 ##   AGENTCTL_IMAGE             Image name:tag built by `make agentctl-image`
 ##   OPERATOR_IMAGE             Image name:tag built by `make operator-image`
-##   CROW_IMAGE                 Image name:tag built by `make crow-image`
-##   SMOKE_IMAGE                Image name:tag built by `make smoke-image`
 ##   BUILD_IMAGE                Image name:tag used by USE_CONTAINER=1
 ##   AGENT_BINARY               Output path of `make agent` (default build/grafana-agent)
 ##   AGENT_BORINGCRYPTO_BINARY  Output path of `make agent-boringcrypto` (default build/grafana-agent-boringcrypto)
@@ -86,8 +80,6 @@
 ##   SERVICE_BINARY             Output path of `make agent-service` (default build/grafana-agent-service)
 ##   AGENTCTL_BINARY            Output path of `make agentctl` (default build/grafana-agentctl)
 ##   OPERATOR_BINARY            Output path of `make operator` (default build/grafana-agent-operator)
-##   CROW_BINARY                Output path of `make crow` (default build/grafana-agent-crow)
-##   SMOKE_BINARY               Output path of `make smoke` (default build/grafana-agent-smoke)
 ##   GOOS                       Override OS to build binaries for
 ##   GOARCH                     Override target architecture to build binaries for
 ##   GOARM                      Override ARM version (6 or 7) when GOARCH=arm
@@ -104,16 +96,12 @@ AGENT_IMAGE                             ?= grafana/agent:latest
 AGENT_BORINGCRYPTO_IMAGE                ?= grafana/agent-boringcrypto:latest
 AGENTCTL_IMAGE                          ?= grafana/agentctl:latest
 OPERATOR_IMAGE                          ?= grafana/agent-operator:latest
-CROW_IMAGE                              ?= us.gcr.io/kubernetes-dev/grafana/agent-crow:latest
-SMOKE_IMAGE                             ?= us.gcr.io/kubernetes-dev/grafana/agent-smoke:latest
 AGENT_BINARY                            ?= build/grafana-agent
 AGENT_BORINGCRYPTO_BINARY               ?= build/grafana-agent-boringcrypto
 FLOW_BINARY                             ?= build/grafana-agent-flow
 SERVICE_BINARY                          ?= build/grafana-agent-service
 AGENTCTL_BINARY                         ?= build/grafana-agentctl
 OPERATOR_BINARY                         ?= build/grafana-agent-operator
-CROW_BINARY                             ?= build/agent-crow
-SMOKE_BINARY                            ?= build/agent-smoke
 AGENTLINT_BINARY                        ?= build/agentlint
 GOOS                                    ?= $(shell go env GOOS)
 GOARCH                                  ?= $(shell go env GOARCH)
@@ -125,10 +113,10 @@ GOEXPERIMENT                            ?= $(shell go env GOEXPERIMENT)
 # List of all environment variables which will propagate to the build
 # container. USE_CONTAINER must _not_ be included to avoid infinite recursion.
 PROPAGATE_VARS := \
-    AGENT_IMAGE AGENTCTL_IMAGE OPERATOR_IMAGE CROW_IMAGE SMOKE_IMAGE \
+    AGENT_IMAGE AGENTCTL_IMAGE OPERATOR_IMAGE \
     BUILD_IMAGE GOOS GOARCH GOARM CGO_ENABLED RELEASE_BUILD \
     AGENT_BINARY AGENT_BORINGCRYPTO_BINARY FLOW_BINARY AGENTCTL_BINARY OPERATOR_BINARY \
-    CROW_BINARY SMOKE_BINARY VERSION GO_TAGS GOEXPERIMENT
+    VERSION GO_TAGS GOEXPERIMENT
 
 #
 # Constants for targets
@@ -187,8 +175,8 @@ integration-test:
 # Targets for building binaries
 #
 
-.PHONY: binaries agent agent-boringcrypto agent-flow agentctl operator crow smoke
-binaries: agent agent-boringcrypto agent-flow agentctl operator crow smoke
+.PHONY: binaries agent agent-boringcrypto agent-flow agentctl operator
+binaries: agent agent-boringcrypto agent-flow agentctl operator
 
 agent:
 ifeq ($(USE_CONTAINER),1)
@@ -234,20 +222,6 @@ else
 	$(GO_ENV) go build $(GO_FLAGS) -o $(OPERATOR_BINARY) ./cmd/grafana-agent-operator
 endif
 
-crow:
-ifeq ($(USE_CONTAINER),1)
-	$(RERUN_IN_CONTAINER)
-else
-	$(GO_ENV) go build $(GO_FLAGS) -o $(CROW_BINARY) ./tools/crow
-endif
-
-smoke:
-ifeq ($(USE_CONTAINER),1)
-	$(RERUN_IN_CONTAINER)
-else
-	$(GO_ENV) go build $(GO_FLAGS) -o $(SMOKE_BINARY) ./tools/smoke
-endif
-
 agentlint:
 ifeq ($(USE_CONTAINER),1)
 	$(RERUN_IN_CONTAINER)
@@ -265,8 +239,8 @@ ifneq ($(DOCKER_PLATFORM),)
 DOCKER_FLAGS += --platform=$(DOCKER_PLATFORM)
 endif
 
-.PHONY: images agent-image agentctl-image operator-image crow-image smoke-image
-images: agent-image agentctl-image operator-image crow-image smoke-image
+.PHONY: images agent-image agentctl-image operator-image
+images: agent-image agentctl-image operator-image
 
 agent-image:
 	DOCKER_BUILDKIT=1 docker build $(DOCKER_FLAGS) -t $(AGENT_IMAGE) -f cmd/grafana-agent/Dockerfile .
@@ -276,10 +250,6 @@ agent-boringcrypto-image:
 	DOCKER_BUILDKIT=1 docker build $(DOCKER_FLAGS) --build-arg GOEXPERIMENT=boringcrypto -t $(AGENT_BORINGCRYPTO_IMAGE) -f cmd/grafana-agent/Dockerfile .
 operator-image:
 	DOCKER_BUILDKIT=1 docker build $(DOCKER_FLAGS) -t $(OPERATOR_IMAGE) -f cmd/grafana-agent-operator/Dockerfile .
-crow-image:
-	DOCKER_BUILDKIT=1 docker build $(DOCKER_FLAGS) -t $(CROW_IMAGE) -f tools/crow/Dockerfile .
-smoke-image:
-	DOCKER_BUILDKIT=1 docker build $(DOCKER_FLAGS) -t $(SMOKE_IMAGE) -f tools/smoke/Dockerfile .
 
 #
 # Targets for generating assets
@@ -373,14 +343,10 @@ info:
 	@printf "AGENT_IMAGE     = $(AGENT_IMAGE)\n"
 	@printf "AGENTCTL_IMAGE  = $(AGENTCTL_IMAGE)\n"
 	@printf "OPERATOR_IMAGE  = $(OPERATOR_IMAGE)\n"
-	@printf "CROW_IMAGE      = $(CROW_IMAGE)\n"
-	@printf "SMOKE_IMAGE     = $(SMOKE_IMAGE)\n"
 	@printf "BUILD_IMAGE     = $(BUILD_IMAGE)\n"
 	@printf "AGENT_BINARY    = $(AGENT_BINARY)\n"
 	@printf "AGENTCTL_BINARY = $(AGENTCTL_BINARY)\n"
 	@printf "OPERATOR_BINARY = $(OPERATOR_BINARY)\n"
-	@printf "CROW_BINARY     = $(CROW_BINARY)\n"
-	@printf "SMOKE_BINARY    = $(SMOKE_BINARY)\n"
 	@printf "GOOS            = $(GOOS)\n"
 	@printf "GOARCH          = $(GOARCH)\n"
 	@printf "GOARM           = $(GOARM)\n"
diff --git a/tools/crow/.gitignore b/tools/crow/.gitignore
deleted file mode 100644
index 4abc650571dc..000000000000
--- a/tools/crow/.gitignore
+++ /dev/null
@@ -1 +0,0 @@
-grafana-agent-crow
diff --git a/tools/crow/Dockerfile b/tools/crow/Dockerfile
deleted file mode 100644
index 7decaf84fdd0..000000000000
--- a/tools/crow/Dockerfile
+++ /dev/null
@@ -1,39 +0,0 @@
-# syntax=docker/dockerfile:1.4
-
-# NOTE: This Dockerfile can only be built using BuildKit. BuildKit is used by
-# default when running `docker buildx build` or when DOCKER_BUILDKIT=1 is set
-# in environment variables.
-
-FROM --platform=$BUILDPLATFORM grafana/agent-build-image:0.30.4 as build
-ARG BUILDPLATFORM
-ARG TARGETPLATFORM
-ARG TARGETOS
-ARG TARGETARCH
-ARG TARGETVARIANT
-ARG RELEASE_BUILD=1
-ARG VERSION
-
-COPY . /src/agent
-WORKDIR /src/agent
-
-RUN --mount=type=cache,target=/root/.cache/go-build \
-    --mount=type=cache,target=/go/pkg/mod \
-    GOOS=$TARGETOS GOARCH=$TARGETARCH GOARM=${TARGETVARIANT#v} \
-    RELEASE_BUILD=${RELEASE_BUILD} VERSION=${VERSION} \
-    make crow
-
-FROM ubuntu:lunar
-
-LABEL org.opencontainers.image.source="https://github.com/grafana/agent"
-
-# Install dependencies needed at runtime.
-RUN <<EOF
-  apt-get update
-  apt-get install -qy libsystemd-dev tzdata ca-certificates
-
-  rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/*
-EOF
-
-COPY --from=build /src/agent/build/agent-crow /bin/grafana-agent-crow
-
-ENTRYPOINT ["/bin/grafana-agent-crow"]
diff --git a/tools/crow/README.md b/tools/crow/README.md
deleted file mode 100644
index b4040d83bc67..000000000000
--- a/tools/crow/README.md
+++ /dev/null
@@ -1,5 +0,0 @@
-# Crow
-
-Crow is a tool similar to Tempo Vulture and Loki Canary that is used to smoke test Grafana Agent. Crow works by generating metrics, then validating them against Prometheus. Crow uses two endpoints; the traditional `/metrics` and then `/validate` that generates the results of Crow checking for successful samples.
-
-Note: The `/validate` endpoint should only be checked by the Grafana Agent instance that is configured to remote_write. 
\ No newline at end of file
diff --git a/tools/crow/main.go b/tools/crow/main.go
deleted file mode 100644
index cd1fa9ddf8a4..000000000000
--- a/tools/crow/main.go
+++ /dev/null
@@ -1,82 +0,0 @@
-// Command grafana-agent-crow is a correctness checker tool that validates that
-// scraped metrics are delivered to a remote_write endpoint. Inspired by Loki
-// Canary and Cortex test-exporter.
-package main
-
-import (
-	"context"
-	"flag"
-	"fmt"
-	"os"
-
-	"github.com/go-kit/log/level"
-	"github.com/grafana/agent/pkg/build"
-	"github.com/grafana/agent/pkg/crow"
-	"github.com/grafana/agent/pkg/server"
-	"github.com/prometheus/client_golang/prometheus"
-	"github.com/prometheus/client_golang/prometheus/promhttp"
-)
-
-func init() {
-	prometheus.MustRegister(build.NewCollector("grafana_agent_crow"))
-}
-
-func main() {
-	var (
-		fs = flag.NewFlagSet(os.Args[0], flag.ExitOnError)
-
-		serverCfg   = server.DefaultConfig()
-		serverFlags = server.DefaultFlags
-
-		crowCfg     = crow.DefaultConfig
-		showVersion bool
-	)
-
-	serverFlags.RegisterFlags(fs)
-	crowCfg.RegisterFlagsWithPrefix(fs, "crow.")
-	fs.BoolVar(&showVersion, "version", false, "show version")
-
-	if err := fs.Parse(os.Args[1:]); err != nil {
-		fmt.Fprintln(os.Stderr, "failed to parse flags", err)
-		os.Exit(1)
-	}
-	if showVersion {
-		fmt.Println(build.Print(os.Args[0]))
-		os.Exit(0)
-	}
-
-	l := server.NewLogger(&serverCfg)
-	crowCfg.Log = l
-
-	s, err := server.New(l, prometheus.DefaultRegisterer, prometheus.DefaultGatherer, serverCfg, serverFlags)
-	if err != nil {
-		level.Error(l).Log("msg", "failed to initialize server", "err", err)
-		os.Exit(1)
-	}
-
-	c, err := crow.New(crowCfg)
-	if err != nil {
-		level.Error(l).Log("msg", "failed to initialize crow", "err", err)
-		os.Exit(1)
-	}
-	defer c.Stop()
-
-	// The server comes with a /metrics endpoint by default using s.Registerer.
-	// Create a /validate endpoint to handle our validation metrics.
-	validator := prometheus.NewRegistry()
-	s.HTTP.Handle("/validate", promhttp.HandlerFor(validator, promhttp.HandlerOpts{
-		EnableOpenMetrics: true,
-	}))
-
-	// Register crow's metrics to /metrics and /validate respectively.
-	prometheus.DefaultRegisterer.MustRegister(c.StateMetrics())
-	validator.MustRegister(c.TestMetrics())
-
-	ctx, cancel := server.SignalContext(context.Background(), l)
-	defer cancel()
-
-	if err := s.Run(ctx); err != nil {
-		level.Error(l).Log("msg", "server exited with error", "err", err)
-		os.Exit(1)
-	}
-}
diff --git a/tools/smoke/.gitignore b/tools/smoke/.gitignore
deleted file mode 100644
index a85290032261..000000000000
--- a/tools/smoke/.gitignore
+++ /dev/null
@@ -1 +0,0 @@
-grafana-agent-smoke
diff --git a/tools/smoke/Dockerfile b/tools/smoke/Dockerfile
deleted file mode 100644
index 779536c296dd..000000000000
--- a/tools/smoke/Dockerfile
+++ /dev/null
@@ -1,39 +0,0 @@
-# syntax=docker/dockerfile:1.4
-
-# NOTE: This Dockerfile can only be built using BuildKit. BuildKit is used by
-# default when running `docker buildx build` or when DOCKER_BUILDKIT=1 is set
-# in environment variables.
-
-FROM --platform=$BUILDPLATFORM grafana/agent-build-image:0.30.4 as build
-ARG BUILDPLATFORM
-ARG TARGETPLATFORM
-ARG TARGETOS
-ARG TARGETARCH
-ARG TARGETVARIANT
-ARG RELEASE_BUILD=1
-ARG VERSION
-
-COPY . /src/agent
-WORKDIR /src/agent
-
-RUN --mount=type=cache,target=/root/.cache/go-build \
-    --mount=type=cache,target=/go/pkg/mod \
-    GOOS=$TARGETOS GOARCH=$TARGETARCH GOARM=${TARGETVARIANT#v} \
-    RELEASE_BUILD=${RELEASE_BUILD} VERSION=${VERSION} \
-    make smoke
-
-FROM ubuntu:lunar
-
-LABEL org.opencontainers.image.source="https://github.com/grafana/agent"
-
-# Install dependencies needed at runtime.
-RUN <<EOF
-  apt-get update
-  apt-get install -qy libsystemd-dev tzdata ca-certificates
-
-  rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/*
-EOF
-
-COPY --from=build /src/agent/build/agent-smoke /bin/grafana-agent-smoke
-
-ENTRYPOINT ["/bin/grafana-agent-smoke"]
diff --git a/tools/smoke/internal/smoke.go b/tools/smoke/internal/smoke.go
deleted file mode 100644
index 3003643a8efe..000000000000
--- a/tools/smoke/internal/smoke.go
+++ /dev/null
@@ -1,176 +0,0 @@
-package smoke
-
-import (
-	"context"
-	"flag"
-	"fmt"
-	"math/rand"
-	"net/http"
-	"time"
-
-	"github.com/go-kit/log"
-	"github.com/go-kit/log/level"
-	"github.com/oklog/run"
-	"k8s.io/client-go/kubernetes"
-	"k8s.io/client-go/tools/clientcmd"
-)
-
-// Smoke is the top level object for a smoke test.
-type Smoke struct {
-	cfg    *Config
-	logger log.Logger
-	tasks  []repeatingTask
-
-	fakeRemoteWriteHandler http.HandlerFunc
-}
-
-// Config struct to pass configuration to the Smoke constructor.
-type Config struct {
-	Kubeconfig        string
-	Namespace         string
-	PodPrefix         string
-	FakeRemoteWrite   bool
-	SimulateErrors    bool
-	ErrorPercentage   float64
-	ChaosFrequency    time.Duration
-	MutationFrequency time.Duration
-}
-
-// RegisterFlags registers flags for the config to the given FlagSet.
-func (c *Config) RegisterFlags(f *flag.FlagSet) {
-	f.StringVar(&c.Namespace, "namespace", DefaultConfig.Namespace, "namespace smoke test should run in")
-	f.StringVar(&c.Kubeconfig, "kubeconfig", DefaultConfig.Kubeconfig, "absolute path to the kubeconfig file")
-	f.StringVar(&c.PodPrefix, "pod-prefix", DefaultConfig.PodPrefix, "prefix for grafana agent pods")
-	f.BoolVar(&c.FakeRemoteWrite, "fake-remote-write", DefaultConfig.FakeRemoteWrite, "remote write endpoint for series which are discarded, useful for testing and not storing metrics")
-	f.BoolVar(&c.SimulateErrors, "simulate-errors", DefaultConfig.SimulateErrors, "remote write endpoint will return a 500 error response randomly")
-	f.Float64Var(&c.ErrorPercentage, "simulate-errors-percentage", DefaultConfig.ErrorPercentage, "percentage chance a request will result in an error")
-	f.DurationVar(&c.ChaosFrequency, "chaos-frequency", DefaultConfig.ChaosFrequency, "chaos frequency duration")
-	f.DurationVar(&c.MutationFrequency, "mutation-frequency", DefaultConfig.MutationFrequency, "mutation frequency duration")
-}
-
-// DefaultConfig holds defaults for Smoke settings.
-var DefaultConfig = Config{
-	Kubeconfig:        "",
-	Namespace:         "default",
-	PodPrefix:         "grafana-agent",
-	FakeRemoteWrite:   false,
-	SimulateErrors:    false,
-	ErrorPercentage:   0.01,
-	ChaosFrequency:    30 * time.Minute,
-	MutationFrequency: 5 * time.Minute,
-}
-
-// New is the constructor for a Smoke object.
-func New(logger log.Logger, cfg Config) (*Smoke, error) {
-	s := &Smoke{
-		cfg:    &cfg,
-		logger: logger,
-	}
-	if s.logger == nil {
-		s.logger = log.NewNopLogger()
-	}
-
-	// use the current context in kubeconfig. this falls back to in-cluster config if kubeconfig is empty
-	config, err := clientcmd.BuildConfigFromFlags("", cfg.Kubeconfig)
-	if err != nil {
-		return nil, err
-	}
-	// creates the clientset
-	clientset, err := kubernetes.NewForConfig(config)
-	if err != nil {
-		return nil, err
-	}
-
-	if cfg.FakeRemoteWrite {
-		s.fakeRemoteWriteHandler = func(w http.ResponseWriter, _ *http.Request) {
-			w.WriteHeader(http.StatusOK)
-		}
-		if cfg.SimulateErrors {
-			rand.Seed(time.Now().UnixNano()) //nolint:staticcheck
-			s.fakeRemoteWriteHandler = func(w http.ResponseWriter, _ *http.Request) {
-				if rnd := rand.Float64(); cfg.ErrorPercentage > rnd {
-					w.WriteHeader(http.StatusInternalServerError)
-					return
-				}
-				w.WriteHeader(http.StatusOK)
-			}
-		}
-	}
-
-	// add default tasks
-	s.tasks = append(s.tasks,
-		repeatingTask{
-			Task: &deletePodTask{
-				logger:    log.With(s.logger, "task", "delete_pod", "pod", "grafana-agent-0"),
-				clientset: clientset,
-				namespace: cfg.Namespace,
-				pod:       fmt.Sprintf("%s-0", cfg.PodPrefix),
-			},
-			frequency: cfg.ChaosFrequency,
-		},
-		repeatingTask{
-			Task: &deletePodBySelectorTask{
-				logger:    log.With(s.logger, "task", "delete_pod_by_selector"),
-				clientset: clientset,
-				namespace: cfg.Namespace,
-				selector:  fmt.Sprintf("name=%s-cluster", cfg.PodPrefix),
-			},
-			frequency: cfg.ChaosFrequency,
-		},
-		repeatingTask{
-			Task: &scaleDeploymentTask{
-				logger:      log.With(s.logger, "task", "scale_deployment", "deployment", "avalanche"),
-				clientset:   clientset,
-				namespace:   cfg.Namespace,
-				deployment:  "avalanche",
-				maxReplicas: 11,
-				minReplicas: 2,
-			},
-			frequency: cfg.MutationFrequency,
-		})
-
-	return s, nil
-}
-
-func (s *Smoke) ServeHTTP(w http.ResponseWriter, r *http.Request) {
-	s.fakeRemoteWriteHandler(w, r)
-}
-
-// Run starts the smoke test and runs the tasks concurrently.
-func (s *Smoke) Run(ctx context.Context) error {
-	var g run.Group
-	ctx, cancel := context.WithCancel(ctx)
-	defer cancel()
-	taskFn := func(t repeatingTask) func() error {
-		return func() error {
-			tick := time.NewTicker(t.frequency)
-			defer tick.Stop()
-			for {
-				select {
-				case <-tick.C:
-					if err := t.Run(ctx); err != nil {
-						return err
-					}
-				case <-ctx.Done():
-					return nil
-				}
-			}
-		}
-	}
-	for _, task := range s.tasks {
-		g.Add(taskFn(task), func(_ error) {
-			cancel()
-		})
-	}
-
-	if s.cfg.FakeRemoteWrite && s.fakeRemoteWriteHandler != nil {
-		level.Info(s.logger).Log("msg", "serving fake remote-write endpoint on :19090")
-		g.Add(func() error {
-			return http.ListenAndServe(":19090", s)
-		}, func(_ error) {
-			cancel()
-		})
-	}
-
-	return g.Run()
-}
diff --git a/tools/smoke/internal/tasks.go b/tools/smoke/internal/tasks.go
deleted file mode 100644
index a2243f512a4a..000000000000
--- a/tools/smoke/internal/tasks.go
+++ /dev/null
@@ -1,101 +0,0 @@
-package smoke
-
-import (
-	"context"
-	"math/rand"
-	"time"
-
-	"github.com/go-kit/log"
-	"github.com/go-kit/log/level"
-	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
-	"k8s.io/client-go/kubernetes"
-	"k8s.io/utils/ptr"
-)
-
-// The Task interface represents some unit of work performed concurrently.
-type Task interface {
-	Run(context.Context) error
-}
-
-type repeatingTask struct {
-	Task
-	frequency time.Duration
-}
-
-type deletePodTask struct {
-	logger    log.Logger
-	clientset kubernetes.Interface
-	namespace string
-	pod       string
-}
-
-func (t *deletePodTask) Run(ctx context.Context) error {
-	level.Debug(t.logger).Log("msg", "deleting pod")
-	if err := t.clientset.CoreV1().Pods(t.namespace).Delete(ctx, t.pod, metav1.DeleteOptions{
-		GracePeriodSeconds: ptr.To(int64(0)),
-	}); err != nil {
-		level.Error(t.logger).Log("msg", "failed to delete pod", "err", err)
-	}
-	return nil
-}
-
-type scaleDeploymentTask struct {
-	logger      log.Logger
-	clientset   kubernetes.Interface
-	namespace   string
-	deployment  string
-	maxReplicas int
-	minReplicas int
-}
-
-func (t *scaleDeploymentTask) Run(ctx context.Context) error {
-	newReplicas := rand.Intn(t.maxReplicas-t.minReplicas) + t.minReplicas
-	level.Debug(t.logger).Log("msg", "scaling replicas", "replicas", newReplicas)
-
-	scale, err := t.clientset.AppsV1().Deployments(t.namespace).
-		GetScale(ctx, t.deployment, metav1.GetOptions{})
-	if err != nil {
-		level.Error(t.logger).Log("msg", "failed to get autoscalingv1.Scale object", "err", err)
-		return nil
-	}
-
-	sc := *scale
-	sc.Spec.Replicas = int32(newReplicas)
-	_, err = t.clientset.AppsV1().Deployments(t.namespace).
-		UpdateScale(ctx, t.deployment, &sc, metav1.UpdateOptions{})
-	if err != nil {
-		level.Error(t.logger).Log("msg", "failed to scale deployment", "err", err)
-	}
-	return nil
-}
-
-type deletePodBySelectorTask struct {
-	logger    log.Logger
-	clientset kubernetes.Interface
-	namespace string
-	selector  string
-}
-
-func (t *deletePodBySelectorTask) Run(ctx context.Context) error {
-	list, err := t.clientset.CoreV1().Pods(t.namespace).List(ctx, metav1.ListOptions{
-		LabelSelector: t.selector,
-	})
-	if err != nil {
-		level.Error(t.logger).Log("msg", "failed to list pods", "err", err)
-		return nil
-	}
-
-	l := len(list.Items)
-	if l > 0 {
-		i := rand.Intn(l)
-		pod := list.Items[i].Name
-		level.Debug(t.logger).Log("msg", "deleting pod", "pod", pod)
-		if err := t.clientset.CoreV1().Pods(t.namespace).Delete(ctx, pod, metav1.DeleteOptions{
-			GracePeriodSeconds: ptr.To(int64(0)),
-		}); err != nil {
-			level.Error(t.logger).Log("msg", "failed to delete pod", "pod", pod, "err", err)
-		}
-	}
-
-	return nil
-}
diff --git a/tools/smoke/internal/tasks_test.go b/tools/smoke/internal/tasks_test.go
deleted file mode 100644
index 76fb1cbd2789..000000000000
--- a/tools/smoke/internal/tasks_test.go
+++ /dev/null
@@ -1,144 +0,0 @@
-package smoke
-
-import (
-	"context"
-	"testing"
-
-	"github.com/go-kit/log"
-	"k8s.io/client-go/kubernetes"
-	"k8s.io/client-go/kubernetes/fake"
-)
-
-// Note: these tests are mostly worthless at this point
-// but would allow easy debugging of tasks as they become more
-// complex. Using https://pkg.go.dev/k8s.io/client-go/testing#ObjectTracker
-// to mock responses from the fake client is also possible.
-
-func Test_deletePodBySelectorTask_Run(t1 *testing.T) {
-	type fields struct {
-		logger    log.Logger
-		clientset kubernetes.Interface
-		namespace string
-		selector  string
-	}
-	type args struct {
-		ctx context.Context
-	}
-	tests := []struct {
-		name    string
-		fields  fields
-		args    args
-		wantErr bool
-	}{
-		{
-			name: "deletePodBySelectorTask",
-			fields: fields{
-				logger:    log.NewNopLogger(),
-				clientset: fake.NewSimpleClientset(),
-				namespace: "foo",
-				selector:  "foo=bar",
-			},
-		},
-	}
-	for _, tt := range tests {
-		t1.Run(tt.name, func(t1 *testing.T) {
-			t := &deletePodBySelectorTask{
-				logger:    tt.fields.logger,
-				clientset: tt.fields.clientset,
-				namespace: tt.fields.namespace,
-				selector:  tt.fields.selector,
-			}
-			if err := t.Run(tt.args.ctx); (err != nil) != tt.wantErr {
-				t1.Errorf("Run() error = %v, wantErr %v", err, tt.wantErr)
-			}
-		})
-	}
-}
-
-func Test_deletePodTask_Run(t1 *testing.T) {
-	type fields struct {
-		logger    log.Logger
-		clientset kubernetes.Interface
-		namespace string
-		pod       string
-	}
-	type args struct {
-		ctx context.Context
-	}
-	tests := []struct {
-		name    string
-		fields  fields
-		args    args
-		wantErr bool
-	}{
-		{
-			name: "deletePodTask",
-			fields: fields{
-				logger:    log.NewNopLogger(),
-				clientset: fake.NewSimpleClientset(),
-				namespace: "foo",
-				pod:       "bar",
-			},
-		},
-	}
-	for _, tt := range tests {
-		t1.Run(tt.name, func(t1 *testing.T) {
-			t := &deletePodTask{
-				logger:    tt.fields.logger,
-				clientset: tt.fields.clientset,
-				namespace: tt.fields.namespace,
-				pod:       tt.fields.pod,
-			}
-			if err := t.Run(tt.args.ctx); (err != nil) != tt.wantErr {
-				t1.Errorf("Run() error = %v, wantErr %v", err, tt.wantErr)
-			}
-		})
-	}
-}
-
-func Test_scaleDeploymentTask_Run(t1 *testing.T) {
-	type fields struct {
-		logger      log.Logger
-		clientset   kubernetes.Interface
-		namespace   string
-		deployment  string
-		maxReplicas int
-		minReplicas int
-	}
-	type args struct {
-		ctx context.Context
-	}
-	tests := []struct {
-		name    string
-		fields  fields
-		args    args
-		wantErr bool
-	}{
-		{
-			name: "scaleDeploymentTask",
-			fields: fields{
-				logger:      log.NewNopLogger(),
-				clientset:   fake.NewSimpleClientset(),
-				namespace:   "foo",
-				deployment:  "bar",
-				maxReplicas: 11,
-				minReplicas: 2,
-			},
-		},
-	}
-	for _, tt := range tests {
-		t1.Run(tt.name, func(t1 *testing.T) {
-			t := &scaleDeploymentTask{
-				logger:      tt.fields.logger,
-				clientset:   tt.fields.clientset,
-				namespace:   tt.fields.namespace,
-				deployment:  tt.fields.deployment,
-				maxReplicas: tt.fields.maxReplicas,
-				minReplicas: tt.fields.minReplicas,
-			}
-			if err := t.Run(tt.args.ctx); (err != nil) != tt.wantErr {
-				t1.Errorf("Run() error = %v, wantErr %v", err, tt.wantErr)
-			}
-		})
-	}
-}
diff --git a/tools/smoke/main.go b/tools/smoke/main.go
deleted file mode 100644
index 422bf64f2d2a..000000000000
--- a/tools/smoke/main.go
+++ /dev/null
@@ -1,48 +0,0 @@
-package main
-
-import (
-	"context"
-	"flag"
-	"os"
-	"time"
-
-	"github.com/go-kit/log/level"
-	"github.com/grafana/agent/pkg/server"
-	smoke "github.com/grafana/agent/tools/smoke/internal"
-	"github.com/grafana/dskit/log"
-)
-
-func main() {
-	var (
-		cfg         smoke.Config
-		logLevel    log.Level
-		logFormat   string
-		withTimeout time.Duration
-	)
-
-	cfg.RegisterFlags(flag.CommandLine)
-	logLevel.RegisterFlags(flag.CommandLine)
-	flag.DurationVar(&withTimeout, "duration", time.Duration(0), "test duration")
-	flag.Parse()
-
-	logger := server.NewLoggerFromLevel(logLevel, logFormat)
-
-	ctx := context.Background()
-	if withTimeout > 0 {
-		var cancel context.CancelFunc
-		ctx, cancel = context.WithTimeout(ctx, withTimeout)
-		defer cancel()
-		level.Debug(logger).Log("msg", "running with duration", "duration", withTimeout.String())
-	}
-
-	level.Info(logger).Log("msg", "starting smoke test")
-	smokeTest, err := smoke.New(logger, cfg)
-	if err != nil {
-		level.Error(logger).Log("msg", "error constructing smoke test", "err", err)
-		os.Exit(1)
-	}
-	if err := smokeTest.Run(ctx); err != nil {
-		level.Error(logger).Log("msg", "smoke test run failure", "err", err)
-		os.Exit(1)
-	}
-}

From 6b32f7b48ab23ee2444616663e1d580571a9d42c Mon Sep 17 00:00:00 2001
From: Robert Fratto <robertfratto@gmail.com>
Date: Thu, 11 Jan 2024 12:00:23 -0500
Subject: [PATCH 57/68] misc: remove more unused code for smoke and crow
 (#6121)

Follow up on #6118, I missed some extra bits of smoke/crow-related code.
---
 .../agent-static-mixin/alerts.libsonnet       | 136 +------
 pkg/crow/crow.go                              | 362 ------------------
 pkg/crow/metrics.go                           |  62 ---
 pkg/crow/samples.go                           |  85 ----
 pkg/crow/samples_test.go                      | 101 -----
 tools/ci/docker-containers                    |  26 +-
 6 files changed, 6 insertions(+), 766 deletions(-)
 delete mode 100644 pkg/crow/crow.go
 delete mode 100644 pkg/crow/metrics.go
 delete mode 100644 pkg/crow/samples.go
 delete mode 100644 pkg/crow/samples_test.go

diff --git a/operations/agent-static-mixin/alerts.libsonnet b/operations/agent-static-mixin/alerts.libsonnet
index 51fe81e0e539..653be89ce471 100644
--- a/operations/agent-static-mixin/alerts.libsonnet
+++ b/operations/agent-static-mixin/alerts.libsonnet
@@ -65,132 +65,6 @@ local _config = config._config;
           },
         ],
       },
-      {
-        name: 'GrafanaAgentSmokeChecks',
-        rules: [
-          {
-            alert: 'GrafanaAgentDown',
-            expr: |||
-              up{
-                namespace="agent-smoke-test",
-                pod=~"grafana-agent-smoke-test-(0|cluster-0|cluster-1|cluster-2)",
-              } == 0
-            |||,
-            'for': '5m',
-            annotations: {
-              summary: '{{ $labels.job }} is down',
-            },
-          },
-          {
-            alert: 'GrafanaAgentFlapping',
-            expr: |||
-              avg_over_time(up{
-                namespace="agent-smoke-test",
-                pod=~"grafana-agent-smoke-test-(0|cluster-0|cluster-1|cluster-2)",
-              }[5m]) < 1
-            |||,
-            'for': '15m',
-            annotations: {
-              summary: '{{ $labels.job }} is flapping',
-            },
-          },
-
-          // Checks that the CPU usage doesn't go too high. This was generated from internal usage where
-          // every 1,000 active series used roughly 0.0013441% of CPU. This alert only fires if there is a
-          // minimum load threshold of at least 1000 active series.
-          {
-            alert: 'GrafanaAgentCPUHigh',
-            expr: |||
-              (sum by (pod) (rate(container_cpu_usage_seconds_total{cluster=~".+", namespace=~"agent-smoke-test", container=~".+", pod="grafana-agent-smoke-test-cluster-2"}[5m]))
-              /
-              (sum by (pod) (agent_wal_storage_active_series{cluster=~".+", namespace=~"agent-smoke-test", container=~".+", pod="grafana-agent-smoke-test-cluster-2"}) / 1000)
-              > 0.0013441)
-              and
-              sum by (pod) (agent_wal_storage_active_series{cluster=~".+", namespace=~"agent-smoke-test", container=~".+", pod="grafana-agent-smoke-test-cluster-2"}) > 1000
-            |||,
-            'for': '1h',
-            annotations: {
-              summary: '{{ $labels.pod }} is using more than 0.0013441 CPU per 1000 series over the last 5 minutes',
-            },
-          },
-
-          // We assume roughly ~8KB per series. Check that each deployment
-          // doesn't go too far above this.
-          //
-          // We aggregate the memory of the scraping service together since an individual
-          // node with a really small number of active series will throw this metric off.
-          {
-            alert: 'GrafanaAgentMemHigh',
-            expr: |||
-              sum without (pod, instance) (go_memstats_heap_inuse_bytes{job=~"agent-smoke-test/grafana-agent-smoke-test.*"}) /
-              sum without (pod, instance, instance_group_name) (agent_wal_storage_active_series{job=~"agent-smoke-test/grafana-agent-smoke-test.*"}) / 1e3 > 10
-            |||,
-            'for': '1h',
-            annotations: {
-              summary: '{{ $labels.job }} has used more than 10KB per series for more than 5 minutes',
-            },
-          },
-          {
-            alert: 'GrafanaAgentContainerRestarts',
-            expr: |||
-              sum by (pod) (rate(kube_pod_container_status_restarts_total{namespace="agent-smoke-test"}[10m])) > 0
-            |||,
-            annotations: {
-              summary: '{{ $labels.pod }} has a high rate of container restarts',
-            },
-          },
-        ],
-      },
-      {
-        name: 'GrafanaAgentCrowChecks',
-        rules: [
-          {
-            alert: 'CrowDown',
-            expr: |||
-              up{job=~"agent-smoke-test/crow-.*"} == 0
-            |||,
-            'for': '5m',
-            annotations: {
-              summary: 'Crow {{ $labels.job }} is down.',
-            },
-          },
-          {
-            alert: 'CrowFlapping',
-            expr: |||
-              avg_over_time(up{job=~"agent-smoke-test/crow-.*"}[5m]) < 1
-            |||,
-            'for': '15m',
-            annotations: {
-              summary: 'Crow {{ $labels.job }} is flapping.',
-            },
-          },
-          {
-            alert: 'CrowNotScraped',
-            expr: |||
-              rate(crow_test_samples_total[5m]) == 0
-            |||,
-            'for': '15m',
-            annotations: {
-              summary: 'Crow {{ $labels.job }} is not being scraped.',
-            },
-          },
-          {
-            alert: 'CrowFailures',
-            expr: |||
-              (
-                  rate(crow_test_sample_results_total{result="success"}[5m])
-                  /
-                  ignoring(result) sum without (result) (rate(crow_test_sample_results_total[5m]))
-              )
-              < 1
-            |||,
-            'for': '15m',
-            annotations: {
-              summary: 'Crow {{ $labels.job }} has had failures for at least 5m',
-            },
-          },
-        ],
-      },
       {
         name: 'VultureChecks',
         rules: [
@@ -358,7 +232,7 @@ local _config = config._config;
             },
             annotations: {
               message: |||
-                 Instance {{ $labels.instance }} failed to successfully reload the config.
+                Instance {{ $labels.instance }} failed to successfully reload the config.
               |||,
             },
           },
@@ -373,7 +247,7 @@ local _config = config._config;
             },
             annotations: {
               message: |||
-                 Instance {{ $labels.instance }} failed to successfully reload the config.
+                Instance {{ $labels.instance }} failed to successfully reload the config.
               |||,
             },
           },
@@ -388,7 +262,7 @@ local _config = config._config;
             },
             annotations: {
               message: |||
-                 Instance {{ $labels.instance }} fell back to empty configuration.
+                Instance {{ $labels.instance }} fell back to empty configuration.
               |||,
             },
           },
@@ -403,12 +277,12 @@ local _config = config._config;
             },
             annotations: {
               message: |||
-                 Instance {{ $labels.instance }} fell back to empty configuration.
+                Instance {{ $labels.instance }} fell back to empty configuration.
               |||,
             },
           },
         ],
-      },      
+      },
     ],
   },
 }
diff --git a/pkg/crow/crow.go b/pkg/crow/crow.go
deleted file mode 100644
index 236a53b133cd..000000000000
--- a/pkg/crow/crow.go
+++ /dev/null
@@ -1,362 +0,0 @@
-// Package crow implements a correctness checker tool similar to Loki Canary.
-// Inspired by Cortex test-exporter.
-package crow
-
-import (
-	"context"
-	"errors"
-	"flag"
-	"fmt"
-	"math"
-	"math/rand"
-	"net/http"
-	"strings"
-	"sync"
-	"time"
-
-	"github.com/go-kit/log"
-	"github.com/go-kit/log/level"
-	"github.com/grafana/dskit/user"
-	"github.com/opentracing-contrib/go-stdlib/nethttp"
-	"github.com/prometheus/client_golang/api"
-	promapi "github.com/prometheus/client_golang/api/prometheus/v1"
-	"github.com/prometheus/client_golang/prometheus"
-	"github.com/prometheus/client_golang/prometheus/promhttp"
-	commonCfg "github.com/prometheus/common/config"
-	"github.com/prometheus/common/model"
-)
-
-// Config for the Crow metrics checker.
-type Config struct {
-	PrometheusAddr string // Base URL of Prometheus server
-	NumSamples     int    // Number of samples to generate
-	UserID         string // User ID to use for auth when querying.
-	PasswordFile   string // Password File for auth when querying.
-	ExtraSelectors string // Extra selectors for queries, i.e., cluster="prod"
-	OrgID          string // Org ID to inject in X-Org-ScopeID header when querying.
-
-	// Querying Params
-
-	QueryTimeout  time.Duration // Timeout for querying
-	QueryDuration time.Duration // Time before and after sample to search
-	QueryStep     time.Duration // Step between samples in search
-
-	// Validation Params
-
-	MaxValidations    int           // Maximum amount of times to search for a sample
-	MaxTimestampDelta time.Duration // Maximum timestamp delta to use for validating.
-	ValueEpsilon      float64       // Maximum epsilon to use for validating.
-
-	// Logger to use. If nil, logs will be discarded.
-	Log log.Logger
-}
-
-// RegisterFlags registers flags for the config to the given FlagSet.
-func (c *Config) RegisterFlags(f *flag.FlagSet) {
-	c.RegisterFlagsWithPrefix(f, "")
-}
-
-// RegisterFlagsWithPrefix registers flags for the config to the given FlagSet and
-// prefixing each flag with the given prefix. prefix, if non-empty, should end
-// in `.`.
-func (c *Config) RegisterFlagsWithPrefix(f *flag.FlagSet, prefix string) {
-	f.StringVar(&c.PrometheusAddr, prefix+"prometheus-addr", DefaultConfig.PrometheusAddr, "Root URL of the Prometheus API to query against")
-	f.IntVar(&c.NumSamples, prefix+"generate-samples", DefaultConfig.NumSamples, "Number of samples to generate when being scraped")
-	f.StringVar(&c.UserID, prefix+"user-id", DefaultConfig.UserID, "UserID to use with basic auth.")
-	f.StringVar(&c.PasswordFile, prefix+"password-file", DefaultConfig.PasswordFile, "Password file to use with basic auth.")
-	f.StringVar(&c.ExtraSelectors, prefix+"extra-selectors", DefaultConfig.ExtraSelectors, "Extra selectors to include in queries, useful for identifying different instances of this job.")
-	f.StringVar(&c.OrgID, prefix+"org-id", DefaultConfig.OrgID, "Org ID to inject in X-Org-ScopeID header when querying. Useful for querying multi-tenated Cortex directly.")
-
-	f.DurationVar(&c.QueryTimeout, prefix+"query-timeout", DefaultConfig.QueryTimeout, "timeout for querying")
-	f.DurationVar(&c.QueryDuration, prefix+"query-duration", DefaultConfig.QueryDuration, "time before and after sample to search")
-	f.DurationVar(&c.QueryStep, prefix+"query-step", DefaultConfig.QueryStep, "step between samples when searching")
-
-	f.IntVar(&c.MaxValidations, prefix+"max-validations", DefaultConfig.MaxValidations, "Maximum number of times to try validating a sample")
-	f.DurationVar(&c.MaxTimestampDelta, prefix+"max-timestamp-delta", DefaultConfig.MaxTimestampDelta, "maximum difference from the stored timestamp from the validating sample to allow")
-	f.Float64Var(&c.ValueEpsilon, prefix+"sample-epsilon", DefaultConfig.ValueEpsilon, "maximum difference from the stored value from the validating sample to allow")
-}
-
-// DefaultConfig holds defaults for Crow settings.
-var DefaultConfig = Config{
-	MaxValidations: 5,
-	NumSamples:     10,
-
-	QueryTimeout:  150 * time.Millisecond,
-	QueryDuration: 2 * time.Second,
-	QueryStep:     100 * time.Millisecond,
-
-	// MaxTimestampDelta is set to 750ms to allow some buffer for a slow network
-	// before the scrape goes through.
-	MaxTimestampDelta: 750 * time.Millisecond,
-	ValueEpsilon:      0.0001,
-}
-
-// Crow is a correctness checker that validates scraped metrics reach a
-// Prometheus-compatible server with the same values and roughly the same
-// timestamp.
-//
-// Crow exposes two sets of metrics:
-//
-// 1. Test metrics, where each scrape generates a validation job.
-// 2. State metrics, exposing state of the Crow checker itself.
-//
-// These two metrics should be exposed via different endpoints, and only state
-// metrics are safe to be manually collected from.
-//
-// Collecting from the set of test metrics generates a validation job, where
-// Crow will query the Prometheus API to ensure the metrics that were scraped
-// were written with (approximately) the same timestamp as the scrape time
-// and with (approximately) the same floating point values exposed in the
-// scrape.
-//
-// If a set of test metrics were not found and retries have been exhausted,
-// or if the metrics were found but the values did not match, the error
-// counter will increase.
-type Crow struct {
-	cfg Config
-	m   *metrics
-
-	promClient promapi.API
-
-	wg   sync.WaitGroup
-	quit chan struct{}
-
-	pendingMtx sync.Mutex
-	pending    []*sample
-	sampleCh   chan []*sample
-}
-
-// New creates a new Crow.
-func New(cfg Config) (*Crow, error) {
-	c, err := newCrow(cfg)
-	if err != nil {
-		return nil, err
-	}
-
-	c.wg.Add(1)
-	go c.runLoop()
-	return c, nil
-}
-
-func newCrow(cfg Config) (*Crow, error) {
-	if cfg.Log == nil {
-		cfg.Log = log.NewNopLogger()
-	}
-
-	if cfg.PrometheusAddr == "" {
-		return nil, fmt.Errorf("Crow must be configured with a URL to use for querying Prometheus")
-	}
-
-	apiCfg := api.Config{
-		Address:      cfg.PrometheusAddr,
-		RoundTripper: api.DefaultRoundTripper,
-	}
-	if cfg.UserID != "" && cfg.PasswordFile != "" {
-		apiCfg.RoundTripper = commonCfg.NewBasicAuthRoundTripper(cfg.UserID, "", "", cfg.PasswordFile, api.DefaultRoundTripper)
-	}
-	if cfg.OrgID != "" {
-		apiCfg.RoundTripper = &nethttp.Transport{
-			RoundTripper: promhttp.RoundTripperFunc(func(req *http.Request) (*http.Response, error) {
-				_ = user.InjectOrgIDIntoHTTPRequest(user.InjectOrgID(context.Background(), cfg.OrgID), req)
-				return apiCfg.RoundTripper.RoundTrip(req)
-			}),
-		}
-	}
-
-	cli, err := api.NewClient(apiCfg)
-	if err != nil {
-		return nil, fmt.Errorf("failed to create prometheus client: %w", err)
-	}
-
-	c := &Crow{
-		cfg:        cfg,
-		m:          newMetrics(),
-		promClient: promapi.NewAPI(cli),
-
-		quit: make(chan struct{}),
-
-		sampleCh: make(chan []*sample),
-	}
-	return c, nil
-}
-
-func (c *Crow) runLoop() {
-	defer c.wg.Done()
-
-	ticker := time.NewTicker(250 * time.Millisecond)
-	defer ticker.Stop()
-
-	for {
-		select {
-		case <-c.quit:
-			return
-		case samples := <-c.sampleCh:
-			c.m.totalScrapes.Inc()
-			c.m.totalSamples.Add(float64(len(samples)))
-
-			c.appendSamples(samples)
-		case <-ticker.C:
-			c.checkPending()
-		}
-	}
-}
-
-// appendSamples queues samples to be checked.
-func (c *Crow) appendSamples(samples []*sample) {
-	c.pendingMtx.Lock()
-	defer c.pendingMtx.Unlock()
-	c.pending = append(c.pending, samples...)
-	c.m.pendingSets.Set(float64(len(c.pending)))
-}
-
-// checkPending iterates over all pending samples. Samples that are ready
-// are immediately validated. Samples are requeued if they're not ready or
-// not found during validation.
-func (c *Crow) checkPending() {
-	c.pendingMtx.Lock()
-	defer c.pendingMtx.Unlock()
-
-	now := time.Now().UTC()
-
-	requeued := []*sample{}
-	for _, s := range c.pending {
-		if !s.Ready(now) {
-			requeued = append(requeued, s)
-			continue
-		}
-
-		err := c.validate(s)
-		if err == nil {
-			c.m.totalResults.WithLabelValues("success").Inc()
-			continue
-		}
-
-		s.ValidationAttempt++
-		if s.ValidationAttempt < c.cfg.MaxValidations {
-			requeued = append(requeued, s)
-			continue
-		}
-
-		var vf errValidationFailed
-		if errors.As(err, &vf) {
-			switch {
-			case vf.mismatch:
-				c.m.totalResults.WithLabelValues("mismatch").Inc()
-			case vf.missing:
-				c.m.totalResults.WithLabelValues("missing").Inc()
-			default:
-				c.m.totalResults.WithLabelValues("unknown").Inc()
-			}
-		}
-	}
-	c.pending = requeued
-	c.m.pendingSets.Set(float64(len(c.pending)))
-}
-
-type errValidationFailed struct {
-	missing  bool
-	mismatch bool
-}
-
-func (e errValidationFailed) Error() string {
-	switch {
-	case e.missing:
-		return "validation failed: sample missing"
-	case e.mismatch:
-		return "validation failed: sample does not match"
-	default:
-		return "validation failed"
-	}
-}
-
-// validate validates a sample. If the sample should be requeued (i.e.,
-// couldn't be found), returns true.
-func (c *Crow) validate(b *sample) error {
-	ctx, cancel := context.WithTimeout(context.Background(), c.cfg.QueryTimeout)
-	defer cancel()
-
-	labels := make([]string, 0, len(b.Labels))
-	for k, v := range b.Labels {
-		labels = append(labels, fmt.Sprintf(`%s="%s"`, k, v))
-	}
-	if c.cfg.ExtraSelectors != "" {
-		labels = append(labels, c.cfg.ExtraSelectors)
-	}
-
-	query := fmt.Sprintf("%s{%s}", validationSampleName, strings.Join(labels, ","))
-	level.Debug(c.cfg.Log).Log("msg", "querying for sample", "query", query)
-
-	val, _, err := c.promClient.QueryRange(ctx, query, promapi.Range{
-		Start: b.ScrapeTime.UTC().Add(-c.cfg.QueryDuration),
-		End:   b.ScrapeTime.UTC().Add(+c.cfg.QueryDuration),
-		Step:  c.cfg.QueryStep,
-	})
-
-	if err != nil {
-		level.Error(c.cfg.Log).Log("msg", "failed to query for sample", "query", query, "err", err)
-	} else if m, ok := val.(model.Matrix); ok {
-		return c.validateInMatrix(query, b, m)
-	}
-
-	return errValidationFailed{missing: true}
-}
-
-func (c *Crow) validateInMatrix(query string, b *sample, m model.Matrix) error {
-	var found, matches bool
-
-	for _, ss := range m {
-		for _, sp := range ss.Values {
-			ts := time.Unix(0, sp.Timestamp.UnixNano())
-			dist := b.ScrapeTime.Sub(ts)
-			if dist < 0 {
-				dist = -dist
-			}
-
-			if dist <= c.cfg.MaxTimestampDelta {
-				found = true
-				matches = math.Abs(float64(sp.Value)-b.Value) <= c.cfg.ValueEpsilon
-			}
-
-			level.Debug(c.cfg.Log).Log(
-				"msg", "compared query to stored sample",
-				"query", query,
-				"sample", ss.Metric,
-				"ts", sp.Timestamp, "expect_ts", b.ScrapeTime,
-				"value", sp.Value, "expect_value", b.Value,
-			)
-
-			if found && matches {
-				break
-			}
-		}
-	}
-
-	if !found || !matches {
-		return errValidationFailed{
-			missing:  !found,
-			mismatch: found && !matches,
-		}
-	}
-	return nil
-}
-
-// TestMetrics exposes a collector of test metrics. Each collection will
-// schedule a validation job.
-func (c *Crow) TestMetrics() prometheus.Collector {
-	return &sampleGenerator{
-		numSamples: c.cfg.NumSamples,
-		sendCh:     c.sampleCh,
-
-		r: rand.New(rand.NewSource(time.Now().Unix())),
-	}
-}
-
-// StateMetrics exposes metrics of Crow itself. These metrics are not validated
-// for presence in the remote system.
-func (c *Crow) StateMetrics() prometheus.Collector { return c.m }
-
-// Stop stops crow. Panics if Stop is called more than once.
-func (c *Crow) Stop() {
-	close(c.quit)
-	c.wg.Wait()
-}
diff --git a/pkg/crow/metrics.go b/pkg/crow/metrics.go
deleted file mode 100644
index 6550cc74c596..000000000000
--- a/pkg/crow/metrics.go
+++ /dev/null
@@ -1,62 +0,0 @@
-package crow
-
-import "github.com/prometheus/client_golang/prometheus"
-
-type metrics struct {
-	totalScrapes prometheus.Counter
-	totalSamples prometheus.Counter
-	totalResults *prometheus.CounterVec
-	pendingSets  prometheus.Gauge
-
-	cachedCollectors []prometheus.Collector
-}
-
-func newMetrics() *metrics {
-	var m metrics
-
-	m.totalScrapes = prometheus.NewCounter(prometheus.CounterOpts{
-		Name: "crow_test_scrapes_total",
-		Help: "Total number of generated test sample sets",
-	})
-
-	m.totalSamples = prometheus.NewCounter(prometheus.CounterOpts{
-		Name: "crow_test_samples_total",
-		Help: "Total number of generated test samples",
-	})
-
-	m.totalResults = prometheus.NewCounterVec(prometheus.CounterOpts{
-		Name: "crow_test_sample_results_total",
-		Help: "Total validation results of test samples",
-	}, []string{"result"}) // result is either "success", "missing", "mismatch", or "unknown"
-
-	m.pendingSets = prometheus.NewGauge(prometheus.GaugeOpts{
-		Name: "crow_test_pending_validations",
-		Help: "Total number of pending validations to perform",
-	})
-
-	return &m
-}
-
-func (m *metrics) collectors() []prometheus.Collector {
-	if m.cachedCollectors == nil {
-		m.cachedCollectors = []prometheus.Collector{
-			m.totalScrapes,
-			m.totalSamples,
-			m.totalResults,
-			m.pendingSets,
-		}
-	}
-	return m.cachedCollectors
-}
-
-func (m *metrics) Describe(ch chan<- *prometheus.Desc) {
-	for _, c := range m.collectors() {
-		c.Describe(ch)
-	}
-}
-
-func (m *metrics) Collect(ch chan<- prometheus.Metric) {
-	for _, c := range m.collectors() {
-		c.Collect(ch)
-	}
-}
diff --git a/pkg/crow/samples.go b/pkg/crow/samples.go
deleted file mode 100644
index 066b21008af4..000000000000
--- a/pkg/crow/samples.go
+++ /dev/null
@@ -1,85 +0,0 @@
-package crow
-
-import (
-	"fmt"
-	"math/rand"
-	"time"
-
-	"github.com/prometheus/client_golang/prometheus"
-)
-
-type sample struct {
-	ScrapeTime time.Time
-	Labels     prometheus.Labels
-	Value      float64
-
-	// How many times this sample has attempted to be validated. Starts at 0.
-	ValidationAttempt int
-}
-
-// Ready checks if this sample is ready to be validated.
-func (s *sample) Ready(now time.Time) bool {
-	backoff := sampleBackoff(s.ValidationAttempt)
-	return now.After(s.ScrapeTime.Add(backoff))
-}
-
-func sampleBackoff(attempt int) time.Duration {
-	// Exponential backoff from 1s up to 1s + (250ms * 2^attempt).
-	return time.Second + (250 * time.Millisecond * 1 << attempt)
-}
-
-type sampleGenerator struct {
-	numSamples int
-	sendCh     chan<- []*sample
-	r          *rand.Rand
-}
-
-const validationSampleName = "crow_validation_sample"
-
-func (sg *sampleGenerator) Describe(ch chan<- *prometheus.Desc) {
-	ch <- prometheus.NewDesc(
-		validationSampleName, "Sample to validate",
-		[]string{"sample_num"},
-		prometheus.Labels{},
-	)
-}
-
-func (sg *sampleGenerator) Collect(ch chan<- prometheus.Metric) {
-	var (
-		scrapeTime = time.Now()
-
-		sampleLabel = "sample_num"
-		desc        = prometheus.NewDesc(
-			validationSampleName, "Sample to validate",
-			[]string{sampleLabel},
-			prometheus.Labels{},
-		)
-
-		usedLabels = map[string]struct{}{}
-		samples    = make([]*sample, sg.numSamples)
-	)
-
-	for s := 0; s < sg.numSamples; s++ {
-	GenLabel:
-		labelSuffix := make([]byte, 1)
-		_, _ = sg.r.Read(labelSuffix)
-		label := fmt.Sprintf("sample_%x", labelSuffix)
-		if _, exist := usedLabels[label]; exist {
-			goto GenLabel
-		}
-		usedLabels[label] = struct{}{}
-
-		samples[s] = &sample{
-			ScrapeTime: scrapeTime,
-			Labels:     prometheus.Labels{sampleLabel: label},
-			Value:      float64(sg.r.Int63n(1_000_000)),
-		}
-		ch <- prometheus.MustNewConstMetric(
-			desc,
-			prometheus.GaugeValue,
-			samples[s].Value, samples[s].Labels[sampleLabel],
-		)
-	}
-
-	sg.sendCh <- samples
-}
diff --git a/pkg/crow/samples_test.go b/pkg/crow/samples_test.go
deleted file mode 100644
index 523c4c2a8cda..000000000000
--- a/pkg/crow/samples_test.go
+++ /dev/null
@@ -1,101 +0,0 @@
-package crow
-
-import (
-	"fmt"
-	"math/rand"
-	"strings"
-	"testing"
-	"time"
-
-	"github.com/prometheus/client_golang/prometheus"
-	"github.com/prometheus/common/expfmt"
-	"github.com/stretchr/testify/require"
-)
-
-func Test_sample_Ready(t *testing.T) {
-	tt := []struct {
-		sample sample
-		now    time.Time
-		expect bool
-	}{
-		{
-			sample: sample{
-				ScrapeTime:        time.Unix(100, 0).UTC(),
-				ValidationAttempt: 0,
-			},
-			now:    time.Unix(100, 0).UTC(),
-			expect: false,
-		},
-		{
-			sample: sample{
-				ScrapeTime:        time.Unix(100, 0).UTC(),
-				ValidationAttempt: 0,
-			},
-			now:    time.Unix(500, 0).UTC(),
-			expect: true,
-		},
-	}
-
-	for _, tc := range tt {
-		ready := tc.sample.Ready(tc.now)
-		require.Equal(t, tc.expect, ready)
-	}
-}
-
-func Test_sampleBackoff(t *testing.T) {
-	tt := []struct {
-		attempt int
-		expect  time.Duration
-	}{
-		{attempt: 0, expect: 1250 * time.Millisecond},
-		{attempt: 1, expect: 1500 * time.Millisecond},
-		{attempt: 2, expect: 2000 * time.Millisecond},
-		{attempt: 3, expect: 3000 * time.Millisecond},
-		{attempt: 4, expect: 5000 * time.Millisecond},
-		{attempt: 5, expect: 9000 * time.Millisecond},
-	}
-
-	for _, tc := range tt {
-		t.Run(fmt.Sprintf("%d", tc.attempt), func(t *testing.T) {
-			actual := sampleBackoff(tc.attempt)
-			require.Equal(t, tc.expect, actual)
-		})
-	}
-}
-
-func Test_sampleGenerator(t *testing.T) {
-	var (
-		reg = prometheus.NewRegistry()
-	)
-
-	gen := sampleGenerator{
-		numSamples: 10,
-		sendCh:     make(chan<- []*sample, 10),
-		r:          rand.New(rand.NewSource(0)),
-	}
-	reg.MustRegister(&gen)
-
-	mfs, err := reg.Gather()
-	require.NoError(t, err)
-
-	var sb strings.Builder
-	enc := expfmt.NewEncoder(&sb, expfmt.FmtText)
-	for _, mf := range mfs {
-		require.NoError(t, enc.Encode(mf))
-	}
-
-	expect := `# HELP crow_validation_sample Sample to validate
-# TYPE crow_validation_sample gauge
-crow_validation_sample{sample_num="sample_01"} 393152
-crow_validation_sample{sample_num="sample_14"} 943416
-crow_validation_sample{sample_num="sample_2f"} 980153
-crow_validation_sample{sample_num="sample_51"} 637646
-crow_validation_sample{sample_num="sample_55"} 976708
-crow_validation_sample{sample_num="sample_94"} 995827
-crow_validation_sample{sample_num="sample_c2"} 376202
-crow_validation_sample{sample_num="sample_fa"} 126063
-crow_validation_sample{sample_num="sample_fc"} 422456
-crow_validation_sample{sample_num="sample_fd"} 197794
-`
-	require.Equal(t, expect, sb.String())
-}
diff --git a/tools/ci/docker-containers b/tools/ci/docker-containers
index f42c6211415a..ee01a0905137 100755
--- a/tools/ci/docker-containers
+++ b/tools/ci/docker-containers
@@ -21,8 +21,6 @@ export AGENT_IMAGE=grafana/agent
 export AGENT_BORINGCRYPTO_IMAGE=grafana/agent-boringcrypto
 export AGENTCTL_IMAGE=grafana/agentctl
 export OPERATOR_IMAGE=grafana/agent-operator
-export SMOKE_IMAGE=us.gcr.io/kubernetes-dev/grafana/agent-smoke
-export CROW_IMAGE=us.gcr.io/kubernetes-dev/grafana/agent-crow
 
 # We need to determine what version to assign to built binaries. If containers
 # are being built from a Drone tag trigger, we force the version to come from the
@@ -106,30 +104,8 @@ case "$TARGET_CONTAINER" in
       .
     ;;
 
-  smoke)
-    docker buildx build --push       \
-      --platform $BUILD_PLATFORMS    \
-      --build-arg RELEASE_BUILD=1    \
-      --build-arg VERSION="$VERSION" \
-      -t "$SMOKE_IMAGE:$VERSION"     \
-      -t "$SMOKE_IMAGE:$BRANCH_TAG"  \
-      -f tools/smoke/Dockerfile      \
-      .
-    ;;
-
-  crow)
-    docker buildx build --push       \
-      --platform $BUILD_PLATFORMS    \
-      --build-arg RELEASE_BUILD=1    \
-      --build-arg VERSION="$VERSION" \
-      -t "$CROW_IMAGE:$VERSION"      \
-      -t "$CROW_IMAGE:$BRANCH_TAG"   \
-      -f tools/crow/Dockerfile       \
-      .
-    ;;
-
   *)
-    echo "Usage: $0 agent|agent-boringcrypto|agentctl|agent-operator|smoke|crow"
+    echo "Usage: $0 agent|agent-boringcrypto|agentctl|agent-operator"
     exit 1
     ;;
 esac

From 7517b3ce9e1839c340ec0dbe99e4d6d13330df41 Mon Sep 17 00:00:00 2001
From: Piotr <17101802+thampiotr@users.noreply.github.com>
Date: Thu, 11 Jan 2024 17:39:20 +0000
Subject: [PATCH 58/68] docs: fix double note docs formatting (#6119)

---
 .../sources/flow/reference/compatibility/_index.md | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/docs/sources/flow/reference/compatibility/_index.md b/docs/sources/flow/reference/compatibility/_index.md
index 96539228f434..88121838f571 100644
--- a/docs/sources/flow/reference/compatibility/_index.md
+++ b/docs/sources/flow/reference/compatibility/_index.md
@@ -20,13 +20,13 @@ that can export or consume it.
 
 {{% admonition type="note" %}}
 
-> The type of export may not be the only requirement for chaining components together.
-> The value of an attribute may matter as well as its type.
-> Please refer to each component's documentation for more details on what values are acceptable.
->
-> For example:
-> * A Prometheus component may always expect an `"__address__"` label inside a list of targets.
-> * A `string` argument may only accept certain values like "traceID" or "spanID".
+The type of export may not be the only requirement for chaining components together.
+The value of an attribute may matter as well as its type.
+Please refer to each component's documentation for more details on what values are acceptable.
+
+For example:
+* A Prometheus component may always expect an `"__address__"` label inside a list of targets.
+* A `string` argument may only accept certain values like "traceID" or "spanID".
 
 {{% /admonition %}}
 

From 47365712fc8fcb02e0053bd4406ab6e2688cb49c Mon Sep 17 00:00:00 2001
From: Mischa Thompson <mischabear@gmail.com>
Date: Thu, 11 Jan 2024 11:43:06 -0800
Subject: [PATCH 59/68] loki.source.file -> loki.source.docker (#6125)

---
 docs/sources/flow/reference/components/loki.source.docker.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/sources/flow/reference/components/loki.source.docker.md b/docs/sources/flow/reference/components/loki.source.docker.md
index 3dd327f70a80..02bf03175b20 100644
--- a/docs/sources/flow/reference/components/loki.source.docker.md
+++ b/docs/sources/flow/reference/components/loki.source.docker.md
@@ -33,7 +33,7 @@ loki.source.docker "LABEL" {
 The component starts a new reader for each of the given `targets` and fans out
 log entries to the list of receivers passed in `forward_to`.
 
-`loki.source.file` supports the following arguments:
+`loki.source.docker` supports the following arguments:
 
 Name            | Type                 | Description          | Default | Required
 --------------- | -------------------- | -------------------- | ------- | --------

From 6965ae2f09ace8856372e199f3e3b702c3a8fc3e Mon Sep 17 00:00:00 2001
From: Paschalis Tsilias <tpaschalis@users.noreply.github.com>
Date: Fri, 12 Jan 2024 11:35:14 +0200
Subject: [PATCH 60/68] pkg/metrics: fix a panic when accepting network remote
 write requests (#6113)

Signed-off-by: Paschalis Tsilias <paschalis.tsilias@grafana.com>
---
 CHANGELOG.md                          |  3 +++
 pkg/metrics/agent_test.go             |  5 +++++
 pkg/metrics/http.go                   |  4 +---
 pkg/metrics/instance/instance.go      | 14 ++++++++++++--
 pkg/metrics/instance/instance_test.go |  1 +
 pkg/metrics/instance/manager.go       |  2 ++
 pkg/metrics/instance/manager_test.go  |  9 +++++++++
 pkg/metrics/instance/noop.go          |  6 ++++++
 8 files changed, 39 insertions(+), 5 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 3253b1909844..e2d7b39c0767 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -28,6 +28,9 @@ Main (unreleased)
 
 - Utilize the `instance` Argument of `prometheus.exporter.kafka` when set. (@akhmatov-s)
 
+- Fix a duplicate metrics registration panic when sending metrics to an static
+  mode metric instance's write handler. (@tpaschalis)
+
 ### Other changes
 
 - Removed support for Windows 2012 in line with Microsoft end of life. (@mattdurham)
diff --git a/pkg/metrics/agent_test.go b/pkg/metrics/agent_test.go
index 0d003d96474c..05f547c55310 100644
--- a/pkg/metrics/agent_test.go
+++ b/pkg/metrics/agent_test.go
@@ -4,6 +4,7 @@ import (
 	"context"
 	"errors"
 	"fmt"
+	"net/http"
 	"sync"
 	"testing"
 	"time"
@@ -285,6 +286,10 @@ func (i *fakeInstance) StorageDirectory() string {
 	return ""
 }
 
+func (i *fakeInstance) WriteHandler() http.Handler {
+	return nil
+}
+
 func (i *fakeInstance) Appender(ctx context.Context) storage.Appender {
 	return nil
 }
diff --git a/pkg/metrics/http.go b/pkg/metrics/http.go
index 6f7f673066ad..01d185f968d8 100644
--- a/pkg/metrics/http.go
+++ b/pkg/metrics/http.go
@@ -13,7 +13,6 @@ import (
 	"github.com/prometheus/common/model"
 	"github.com/prometheus/prometheus/model/labels"
 	"github.com/prometheus/prometheus/scrape"
-	"github.com/prometheus/prometheus/storage/remote"
 )
 
 // WireAPI adds API routes to the provided mux router.
@@ -151,8 +150,7 @@ func (a *Agent) PushMetricsHandler(w http.ResponseWriter, r *http.Request) {
 		return
 	}
 
-	handler := remote.NewWriteHandler(a.logger, a.reg, managedInstance)
-	handler.ServeHTTP(w, r)
+	managedInstance.WriteHandler().ServeHTTP(w, r)
 }
 
 // getInstanceName uses gorilla/mux's route variables to extract the
diff --git a/pkg/metrics/instance/instance.go b/pkg/metrics/instance/instance.go
index eae93936be2f..c81c8e620622 100644
--- a/pkg/metrics/instance/instance.go
+++ b/pkg/metrics/instance/instance.go
@@ -10,6 +10,7 @@ import (
 	"errors"
 	"fmt"
 	"math"
+	"net/http"
 	"os"
 	"path/filepath"
 	"sync"
@@ -243,8 +244,9 @@ type Instance struct {
 
 	logger log.Logger
 
-	reg    prometheus.Registerer
-	newWal walStorageFactory
+	reg          prometheus.Registerer
+	newWal       walStorageFactory
+	writeHandler http.Handler
 }
 
 // New creates a new Instance with a directory for storing the WAL. The instance
@@ -407,6 +409,8 @@ func (i *Instance) initialize(ctx context.Context, reg prometheus.Registerer, cf
 		return fmt.Errorf("error creating WAL: %w", err)
 	}
 
+	i.writeHandler = remote.NewWriteHandler(i.logger, i.reg, i.wal)
+
 	i.discovery, err = i.newDiscoveryManager(ctx, cfg)
 	if err != nil {
 		return fmt.Errorf("error creating discovery manager: %w", err)
@@ -582,6 +586,12 @@ func (i *Instance) StorageDirectory() string {
 	return i.wal.Directory()
 }
 
+// WriteHandler returns an HTTP handler for pushing metrics directly into the
+// instance's WAL.
+func (i *Instance) WriteHandler() http.Handler {
+	return i.writeHandler
+}
+
 // Appender returns a storage.Appender from the instance's WAL
 func (i *Instance) Appender(ctx context.Context) storage.Appender {
 	return i.wal.Appender(ctx)
diff --git a/pkg/metrics/instance/instance_test.go b/pkg/metrics/instance/instance_test.go
index e82117e797df..5b9ee503abb7 100644
--- a/pkg/metrics/instance/instance_test.go
+++ b/pkg/metrics/instance/instance_test.go
@@ -416,5 +416,6 @@ func runInstance(t *testing.T, i *Instance) {
 	t.Cleanup(func() { cancel() })
 	go require.NotPanics(t, func() {
 		_ = i.Run(ctx)
+		require.NotNil(t, i.WriteHandler())
 	})
 }
diff --git a/pkg/metrics/instance/manager.go b/pkg/metrics/instance/manager.go
index d3351d4d006f..6bb90324fdd6 100644
--- a/pkg/metrics/instance/manager.go
+++ b/pkg/metrics/instance/manager.go
@@ -4,6 +4,7 @@ import (
 	"context"
 	"errors"
 	"fmt"
+	"net/http"
 	"sync"
 	"time"
 
@@ -66,6 +67,7 @@ type ManagedInstance interface {
 	TargetsActive() map[string][]*scrape.Target
 	StorageDirectory() string
 	Appender(ctx context.Context) storage.Appender
+	WriteHandler() http.Handler
 }
 
 // BasicManagerConfig controls the operations of a BasicManager.
diff --git a/pkg/metrics/instance/manager_test.go b/pkg/metrics/instance/manager_test.go
index e524592e02fe..6afed2673218 100644
--- a/pkg/metrics/instance/manager_test.go
+++ b/pkg/metrics/instance/manager_test.go
@@ -3,6 +3,7 @@ package instance
 import (
 	"context"
 	"fmt"
+	"net/http"
 	"os"
 	"testing"
 
@@ -104,6 +105,7 @@ type mockInstance struct {
 	TargetsActiveFunc    func() map[string][]*scrape.Target
 	StorageDirectoryFunc func() string
 	AppenderFunc         func() storage.Appender
+	WriteHandlerFunc     func() http.Handler
 }
 
 func (m mockInstance) Run(ctx context.Context) error {
@@ -141,6 +143,13 @@ func (m mockInstance) StorageDirectory() string {
 	panic("StorageDirectoryFunc not provided")
 }
 
+func (m mockInstance) WriteHandler() http.Handler {
+	if m.WriteHandlerFunc != nil {
+		return m.WriteHandlerFunc()
+	}
+	panic("GetWriteHandlerFunc not provided")
+}
+
 func (m mockInstance) Appender(_ context.Context) storage.Appender {
 	if m.AppenderFunc != nil {
 		return m.AppenderFunc()
diff --git a/pkg/metrics/instance/noop.go b/pkg/metrics/instance/noop.go
index 76d459e19507..f9f86b871320 100644
--- a/pkg/metrics/instance/noop.go
+++ b/pkg/metrics/instance/noop.go
@@ -2,6 +2,7 @@ package instance
 
 import (
 	"context"
+	"net/http"
 
 	"github.com/prometheus/prometheus/scrape"
 	"github.com/prometheus/prometheus/storage"
@@ -37,6 +38,11 @@ func (NoOpInstance) StorageDirectory() string {
 	return ""
 }
 
+// WriteHandler implements Instance.
+func (NoOpInstance) WriteHandler() http.Handler {
+	return nil
+}
+
 // Appender implements Instance
 func (NoOpInstance) Appender(_ context.Context) storage.Appender {
 	return nil

From b76b620b078b60d6773fc15659c35284e0040d32 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=C4=90=E1=BB=97=20Tr=E1=BB=8Dng=20H=E1=BA=A3i?=
 <41283691+hainenber@users.noreply.github.com>
Date: Fri, 12 Jan 2024 17:12:49 +0700
Subject: [PATCH 61/68] build(deps): bump hashicorp/go-discover to latest
 (#6120)

Signed-off-by: hainenber <dotronghai96@gmail.com>
---
 go.mod |  2 +-
 go.sum | 28 ++--------------------------
 2 files changed, 3 insertions(+), 27 deletions(-)

diff --git a/go.mod b/go.mod
index 5ab46601a9bf..b92153524021 100644
--- a/go.mod
+++ b/go.mod
@@ -68,7 +68,7 @@ require (
 	github.com/grpc-ecosystem/go-grpc-middleware v1.4.0
 	github.com/hashicorp/consul/api v1.25.1
 	github.com/hashicorp/go-cleanhttp v0.5.2
-	github.com/hashicorp/go-discover v0.0.0-20220105235006-b95dfa40aaed
+	github.com/hashicorp/go-discover v0.0.0-20230724184603-e89ebd1b2f65
 	github.com/hashicorp/go-multierror v1.1.1
 	github.com/hashicorp/golang-lru v1.0.2
 	github.com/hashicorp/golang-lru/v2 v2.0.5
diff --git a/go.sum b/go.sum
index 32c147bb135b..ff55bf0ec35e 100644
--- a/go.sum
+++ b/go.sum
@@ -123,7 +123,6 @@ github.com/Azure/go-autorest v14.2.0+incompatible h1:V5VMDjClD3GiElqLWO7mz2MxNAK
 github.com/Azure/go-autorest v14.2.0+incompatible/go.mod h1:r+4oMnoxhatjLLJ6zxSWATqVooLgysK6ZNox3g/xq24=
 github.com/Azure/go-autorest/autorest v0.9.0/go.mod h1:xyHB1BMZT0cuDHU7I0+g046+BFDTQ8rEZB0s4Yfa6bI=
 github.com/Azure/go-autorest/autorest v0.9.3/go.mod h1:GsRuLYvwzLjjjRoWEIyMUaYq8GNUx2nRB378IPt/1p0=
-github.com/Azure/go-autorest/autorest v0.11.0/go.mod h1:JFgpikqFJ/MleTTxwepExTKnFUKKszPS8UavbQYUMuw=
 github.com/Azure/go-autorest/autorest v0.11.12/go.mod h1:eipySxLmqSyC5s5k1CLupqet0PSENBEDP93LQ9a8QYw=
 github.com/Azure/go-autorest/autorest v0.11.24/go.mod h1:G6kyRlFnTuSbEYkQGawPfsCswgme4iYf6rfSKUDzbCc=
 github.com/Azure/go-autorest/autorest v0.11.29 h1:I4+HL/JDvErx2LjyzaVxllw2lRDB5/BT2Bm4g20iqYw=
@@ -131,7 +130,6 @@ github.com/Azure/go-autorest/autorest v0.11.29/go.mod h1:ZtEzC4Jy2JDrZLxvWs8LrBW
 github.com/Azure/go-autorest/autorest/adal v0.5.0/go.mod h1:8Z9fGy2MpX0PvDjB1pEgQTmVqjGhiHBW7RJJEciWzS0=
 github.com/Azure/go-autorest/autorest/adal v0.8.0/go.mod h1:Z6vX6WXXuyieHAXwMj0S6HY6e6wcHn37qQMBQlvY3lc=
 github.com/Azure/go-autorest/autorest/adal v0.8.1/go.mod h1:ZjhuQClTqx435SRJ2iMlOxPYt3d2C/T/7TiQCVZSn3Q=
-github.com/Azure/go-autorest/autorest/adal v0.9.0/go.mod h1:/c022QCutn2P7uY+/oQWWNcK9YU+MH96NgK+jErpbcg=
 github.com/Azure/go-autorest/autorest/adal v0.9.5/go.mod h1:B7KF7jKIeC9Mct5spmyCB/A8CG/sEz1vwIRGv/bbw7A=
 github.com/Azure/go-autorest/autorest/adal v0.9.13/go.mod h1:W/MM4U6nLxnIskrw4UwWzlHfGjwUS50aOsc/I3yuU8M=
 github.com/Azure/go-autorest/autorest/adal v0.9.18/go.mod h1:XVVeme+LZwABT8K5Lc3hA4nAe8LDBVle26gTrguhhPQ=
@@ -139,11 +137,9 @@ github.com/Azure/go-autorest/autorest/adal v0.9.22/go.mod h1:XuAbAEUv2Tta//+voMI
 github.com/Azure/go-autorest/autorest/adal v0.9.23 h1:Yepx8CvFxwNKpH6ja7RZ+sKX+DWYNldbLiALMC3BTz8=
 github.com/Azure/go-autorest/autorest/adal v0.9.23/go.mod h1:5pcMqFkdPhviJdlEy3kC/v1ZLnQl0MH6XA5YCcMhy4c=
 github.com/Azure/go-autorest/autorest/azure/auth v0.4.2/go.mod h1:90gmfKdlmKgfjUpnCEpOJzsUEjrWDSLwHIG73tSXddM=
-github.com/Azure/go-autorest/autorest/azure/auth v0.5.0/go.mod h1:QRTvSZQpxqm8mSErhnbI+tANIBAKP7B+UIE2z4ypUO0=
 github.com/Azure/go-autorest/autorest/azure/auth v0.5.12 h1:wkAZRgT/pn8HhFyzfe9UnqOjJYqlembgCTi72Bm/xKk=
 github.com/Azure/go-autorest/autorest/azure/auth v0.5.12/go.mod h1:84w/uV8E37feW2NCJ08uT9VBfjfUHpgLVnG2InYD6cg=
 github.com/Azure/go-autorest/autorest/azure/cli v0.3.1/go.mod h1:ZG5p860J94/0kI9mNJVoIoLgXcirM2gF5i2kWloofxw=
-github.com/Azure/go-autorest/autorest/azure/cli v0.4.0/go.mod h1:JljT387FplPzBA31vUcvsetLKF3pec5bdAxjVU4kI2s=
 github.com/Azure/go-autorest/autorest/azure/cli v0.4.5/go.mod h1:ADQAXrkgm7acgWVUNamOgh8YNrv4p27l3Wc55oVfpzg=
 github.com/Azure/go-autorest/autorest/azure/cli v0.4.6 h1:w77/uPk80ZET2F+AfQExZyEWtn+0Rk/uw17m9fv5Ajc=
 github.com/Azure/go-autorest/autorest/azure/cli v0.4.6/go.mod h1:piCfgPho7BiIDdEQ1+g4VmKyD5y+p/XtSNqE6Hc4QD0=
@@ -154,7 +150,6 @@ github.com/Azure/go-autorest/autorest/date v0.3.0/go.mod h1:BI0uouVdmngYNUzGWeSY
 github.com/Azure/go-autorest/autorest/mocks v0.1.0/go.mod h1:OTyCOPRA2IgIlWxVYxBee2F5Gr4kF2zd2J5cFRaIDN0=
 github.com/Azure/go-autorest/autorest/mocks v0.2.0/go.mod h1:OTyCOPRA2IgIlWxVYxBee2F5Gr4kF2zd2J5cFRaIDN0=
 github.com/Azure/go-autorest/autorest/mocks v0.3.0/go.mod h1:a8FDP3DYzQ4RYfVAxAN3SVSiiO77gL2j2ronKKP0syM=
-github.com/Azure/go-autorest/autorest/mocks v0.4.0/go.mod h1:LTp+uSrOhSkaKrUy935gNZuuIPPVsHlr9DSOxSayd+k=
 github.com/Azure/go-autorest/autorest/mocks v0.4.1/go.mod h1:LTp+uSrOhSkaKrUy935gNZuuIPPVsHlr9DSOxSayd+k=
 github.com/Azure/go-autorest/autorest/mocks v0.4.2 h1:PGN4EDXnuQbojHbU0UWoNvmu9AGVwYHG9/fkDYhtAfw=
 github.com/Azure/go-autorest/autorest/mocks v0.4.2/go.mod h1:Vy7OitM9Kei0i1Oj+LvyAWMXJHeKH1MVlzFugfVrmyU=
@@ -162,7 +157,6 @@ github.com/Azure/go-autorest/autorest/to v0.3.0/go.mod h1:MgwOyqaIuKdG4TL/2ywSsI
 github.com/Azure/go-autorest/autorest/to v0.4.0 h1:oXVqrxakqqV1UZdSazDOPOLvOIz+XA683u8EctwboHk=
 github.com/Azure/go-autorest/autorest/to v0.4.0/go.mod h1:fE8iZBn7LQR7zH/9XU2NcPR4o9jEImooCeWJcYV/zLE=
 github.com/Azure/go-autorest/autorest/validation v0.2.0/go.mod h1:3EEqHnBxQGHXRYq3HT1WyXAvT7LLY3tl70hw6tQIbjI=
-github.com/Azure/go-autorest/autorest/validation v0.3.0/go.mod h1:yhLgjC0Wda5DYXl6JAsWyUe4KVNffhoDhG0zVzUMo3E=
 github.com/Azure/go-autorest/autorest/validation v0.3.1 h1:AgyqjAd94fwNAoTjl/WQXg4VvFeRFpO+UhNyRXqF1ac=
 github.com/Azure/go-autorest/autorest/validation v0.3.1/go.mod h1:yhLgjC0Wda5DYXl6JAsWyUe4KVNffhoDhG0zVzUMo3E=
 github.com/Azure/go-autorest/logger v0.1.0/go.mod h1:oExouG+K6PryycPJfVSxi/koC6LSNgds39diKLz7Vrc=
@@ -308,7 +302,6 @@ github.com/avvmoto/buf-readerat v0.0.0-20171115124131-a17c8cb89270 h1:JIxGEMs4E5
 github.com/avvmoto/buf-readerat v0.0.0-20171115124131-a17c8cb89270/go.mod h1:2XtVRGCw/HthOLxU0Qw6o6jSJrcEoOb2OCCl8gQYvGw=
 github.com/aws/aws-lambda-go v1.13.3/go.mod h1:4UKl9IzQMoD+QF79YdCuzCwp8VbmG4VAQwij/eHl5CU=
 github.com/aws/aws-sdk-go v1.15.24/go.mod h1:mFuSZ37Z9YOHbQEwBWztmVzqXrEkub65tZoCYDt7FT0=
-github.com/aws/aws-sdk-go v1.25.41/go.mod h1:KmX6BPdI08NWTb3/sm4ZGu5ShLoqVDhKgpiN924inxo=
 github.com/aws/aws-sdk-go v1.27.0/go.mod h1:KmX6BPdI08NWTb3/sm4ZGu5ShLoqVDhKgpiN924inxo=
 github.com/aws/aws-sdk-go v1.30.27/go.mod h1:5zCpMtNQVjRREroY7sYe8lOMRSxkhG6MZveU8YkpAk0=
 github.com/aws/aws-sdk-go v1.34.34/go.mod h1:H7NKnBqNVzoTJpGfLrQkkD+ytBA93eiDYi/+8rV9s48=
@@ -571,14 +564,12 @@ github.com/dgrijalva/jwt-go/v4 v4.0.0-preview1/go.mod h1:+hnT3ywWDTAFrW5aE+u2Sa/
 github.com/dgryski/go-rendezvous v0.0.0-20200823014737-9f7001d12a5f h1:lO4WD4F/rVNCu3HqELle0jiPLLBs70cWOduZpkS1E78=
 github.com/dgryski/go-rendezvous v0.0.0-20200823014737-9f7001d12a5f/go.mod h1:cuUVRXasLTGF7a8hSLbxyZXjz+1KgoB3wDUb6vlszIc=
 github.com/digitalocean/godo v1.1.1/go.mod h1:h6faOIcZ8lWIwNQ+DN7b3CgX4Kwby5T+nbpNqkUIozU=
-github.com/digitalocean/godo v1.7.5/go.mod h1:h6faOIcZ8lWIwNQ+DN7b3CgX4Kwby5T+nbpNqkUIozU=
 github.com/digitalocean/godo v1.10.0/go.mod h1:h6faOIcZ8lWIwNQ+DN7b3CgX4Kwby5T+nbpNqkUIozU=
 github.com/digitalocean/godo v1.104.1 h1:SZNxjAsskM/su0YW9P8Wx3gU0W1Z13b6tZlYNpl5BnA=
 github.com/digitalocean/godo v1.104.1/go.mod h1:VAI/L5YDzMuPRU01lEEUSQ/sp5Z//1HnnFv/RBTEdbg=
 github.com/dimchansky/utfbom v1.1.0/go.mod h1:rO41eb7gLfo8SF1jd9F8HplJm1Fewwi4mQvIirEdv+8=
 github.com/dimchansky/utfbom v1.1.1 h1:vV6w1AhK4VMnhBno/TPVCoK9U/LP0PkLCS9tbxHdi/U=
 github.com/dimchansky/utfbom v1.1.1/go.mod h1:SxdoEBH5qIqFocHMyGOXVAybYJdr71b1Q/j0mACtrfE=
-github.com/dnaeon/go-vcr v1.0.1/go.mod h1:aBB1+wY4s93YsC3HHjMBMrwTj2R9FHDzUr9KyGc8n1E=
 github.com/dnaeon/go-vcr v1.2.0 h1:zHCHvJYTMh1N7xnV7zf1m1GPBF9Ad0Jk/whtQ1663qI=
 github.com/dnaeon/go-vcr v1.2.0/go.mod h1:R4UdLID7HZT3taECzJs4YgbbH6PIGXB6W/sc5OLb6RQ=
 github.com/docker/cli v20.10.11+incompatible/go.mod h1:JLrzqnKDaYBop7H2jaqPtU4hHvMKP+vjCwu2uszcLI8=
@@ -875,7 +866,6 @@ github.com/gogo/protobuf v1.1.1/go.mod h1:r8qH/GZQm5c6nD/R0oafs1akxWv10x8SbQlK7a
 github.com/gogo/protobuf v1.2.0/go.mod h1:r8qH/GZQm5c6nD/R0oafs1akxWv10x8SbQlK7atdtwQ=
 github.com/gogo/protobuf v1.2.1/go.mod h1:hp+jE20tsWTFYpLwKvXlhS1hjn+gTNwPg2I6zVXpSg4=
 github.com/gogo/protobuf v1.2.2-0.20190723190241-65acae22fc9d/go.mod h1:SlYgWuQ5SjCEi6WLHjHCa1yvBfUnHcTbrrZtXPKa29o=
-github.com/gogo/protobuf v1.3.1/go.mod h1:SlYgWuQ5SjCEi6WLHjHCa1yvBfUnHcTbrrZtXPKa29o=
 github.com/gogo/protobuf v1.3.2 h1:Ov1cvc58UF3b5XjBnZv7+opcTcQFZebYjWzi34vdm4Q=
 github.com/gogo/protobuf v1.3.2/go.mod h1:P1XiOD3dCwIKUDQYPy72D8LYyHL2YPYrpS2s69NZV8Q=
 github.com/gogo/status v1.1.1 h1:DuHXlSFHNKqTQ+/ACf5Vs6r4X/dH2EgIzR9Vr+H65kg=
@@ -1023,13 +1013,11 @@ github.com/googleapis/gax-go/v2 v2.1.0/go.mod h1:Q3nei7sK6ybPYH7twZdmQpAd1MKb7pf
 github.com/googleapis/gax-go/v2 v2.12.0 h1:A+gCJKdRfqXkr+BIRGtZLibNXf0m1f9E4HG56etFpas=
 github.com/googleapis/gax-go/v2 v2.12.0/go.mod h1:y+aIqrI5eb1YGMVJfuV3185Ts/D7qKpsEkdD5+I6QGU=
 github.com/googleapis/gnostic v0.0.0-20170729233727-0c5108395e2d/go.mod h1:sJBsCZ4ayReDTBIg8b9dl28c5xFWyhBTVRp3pOg5EKY=
-github.com/googleapis/gnostic v0.1.0/go.mod h1:sJBsCZ4ayReDTBIg8b9dl28c5xFWyhBTVRp3pOg5EKY=
 github.com/googleapis/gnostic v0.2.0/go.mod h1:sJBsCZ4ayReDTBIg8b9dl28c5xFWyhBTVRp3pOg5EKY=
 github.com/googleapis/gnostic v0.4.1/go.mod h1:LRhVm6pbyptWbWbuZ38d1eyptfvIytN3ir6b65WBswg=
 github.com/googleapis/google-cloud-go-testing v0.0.0-20200911160855-bcd43fbb19e8/go.mod h1:dvDLG8qkwmyD9a/MJJN3XJcT3xFxOKAvTZGvuZmac9g=
 github.com/gopcua/opcua v0.1.12/go.mod h1:a6QH4F9XeODklCmWuvaOdL8v9H0d73CEKUHWVZLQyE8=
 github.com/gophercloud/gophercloud v0.0.0-20180828235145-f29afc2cceca/go.mod h1:3WdhXV3rUYy9p6AUW8d94kr+HS62Y4VL9mBnFxsD8q4=
-github.com/gophercloud/gophercloud v0.1.0/go.mod h1:vxM41WHh5uqHVBMZHzuwNOHh8XEoIEcSTewFxm1c5g8=
 github.com/gophercloud/gophercloud v1.7.0 h1:fyJGKh0LBvIZKLvBWvQdIgkaV5yTM3Jh9EYUh+UNCAs=
 github.com/gophercloud/gophercloud v1.7.0/go.mod h1:aAVqcocTSXh2vYFZ1JTvx4EQmfgzxRcNupUfxZbBNDM=
 github.com/gopherjs/gopherjs v0.0.0-20180825215210-0210a2f0f73c/go.mod h1:wJfORRmW1u3UXTncJ5qlYoELFm8eSnnEO6hX4iZ3EWY=
@@ -1143,8 +1131,8 @@ github.com/hashicorp/go-cleanhttp v0.5.1/go.mod h1:JpRdi6/HCYpAwUzNwuwqhbovhLtng
 github.com/hashicorp/go-cleanhttp v0.5.2 h1:035FKYIWjmULyFRBKPs8TBQoi0x6d9G4xc9neXJWAZQ=
 github.com/hashicorp/go-cleanhttp v0.5.2/go.mod h1:kO/YDlP8L1346E6Sodw+PrpBSV4/SoxCXGY6BqNFT48=
 github.com/hashicorp/go-discover v0.0.0-20190403160810-22221edb15cd/go.mod h1:ueUgD9BeIocT7QNuvxSyJyPAM9dfifBcaWmeybb67OY=
-github.com/hashicorp/go-discover v0.0.0-20220105235006-b95dfa40aaed h1:TOX8g4kKKZ1tkDRZo7hiqHwUSJTNK5li8pU6GmpVQD0=
-github.com/hashicorp/go-discover v0.0.0-20220105235006-b95dfa40aaed/go.mod h1:3/4dzY4lR1Hzt9bBqMhBzG7lngZ0GKx/nL6G/ad62wE=
+github.com/hashicorp/go-discover v0.0.0-20230724184603-e89ebd1b2f65 h1:+ZwaKkFuVWS7FZoiltT+7XW/MEFckY9Wxe+xIEErLcM=
+github.com/hashicorp/go-discover v0.0.0-20230724184603-e89ebd1b2f65/go.mod h1:RH2Jr1/cCsZ1nRLmAOC65hp/gRehf55SsUIYV2+NAxI=
 github.com/hashicorp/go-envparse v0.1.0 h1:bE++6bhIsNCPLvgDZkYqo3nA+/PFI51pkrHdmPSDFPY=
 github.com/hashicorp/go-envparse v0.1.0/go.mod h1:OHheN1GoygLlAkTlXLXvAdnXdZxy8JUweQ1rAXx1xnc=
 github.com/hashicorp/go-hclog v0.0.0-20180402200405-69ff559dc25f/go.mod h1:9bjs9uLqI8l75knNv3lV1kA55veR+WUPSiKIWcQHudI=
@@ -1502,7 +1490,6 @@ github.com/lightstep/go-expohisto v1.0.0 h1:UPtTS1rGdtehbbAF7o/dhkWLTDI73UifG8Lb
 github.com/lightstep/go-expohisto v1.0.0/go.mod h1:xDXD0++Mu2FOaItXtdDfksfgxfV0z1TMPa+e/EUd0cs=
 github.com/lightstep/lightstep-tracer-common/golang/gogo v0.0.0-20190605223551-bc2310a04743/go.mod h1:qklhhLq1aX+mtWk9cPHPzaBjWImj5ULL6C7HFJtXQMM=
 github.com/lightstep/lightstep-tracer-go v0.18.1/go.mod h1:jlF1pusYV4pidLvZ+XD0UBX0ZE6WURAspgAczcDHrL4=
-github.com/linode/linodego v0.7.1/go.mod h1:ga11n3ivecUrPCHN0rANxKmfWBJVkOXfLMZinAbj2sY=
 github.com/linode/linodego v1.23.0 h1:s0ReCZtuN9Z1IoUN9w1RLeYO1dMZUGPwOQ/IBFsBHtU=
 github.com/linode/linodego v1.23.0/go.mod h1:0U7wj/UQOqBNbKv1FYTXiBUXueR8DY4HvIotwE0ENgg=
 github.com/lufia/iostat v1.2.1 h1:tnCdZBIglgxD47RyD55kfWQcJMGzO+1QBziSQfesf2k=
@@ -2470,7 +2457,6 @@ go4.org/netipx v0.0.0-20230125063823-8449b0a6169f h1:ketMxHg+vWm3yccyYiq+uK8D3fR
 go4.org/netipx v0.0.0-20230125063823-8449b0a6169f/go.mod h1:tgPU4N2u9RByaTN3NC2p9xOzyFpte4jYwsIIRF7XlSc=
 golang.org/x/crypto v0.0.0-20180904163835-0709b304e793/go.mod h1:6SG95UA2DQfeDnfUPMdvaQW0Q7yPrPDi9nlGo2tz2b4=
 golang.org/x/crypto v0.0.0-20181029021203-45a5f77698d3/go.mod h1:6SG95UA2DQfeDnfUPMdvaQW0Q7yPrPDi9nlGo2tz2b4=
-golang.org/x/crypto v0.0.0-20190211182817-74369b46fc67/go.mod h1:6SG95UA2DQfeDnfUPMdvaQW0Q7yPrPDi9nlGo2tz2b4=
 golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
 golang.org/x/crypto v0.0.0-20190325154230-a5d413f7728c/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
 golang.org/x/crypto v0.0.0-20190411191339-88737f569e3a/go.mod h1:WFFai1msRO1wXaEeE5yQxYXgSfI8pQAWXbQop6sCtWE=
@@ -2487,7 +2473,6 @@ golang.org/x/crypto v0.0.0-20191002192127-34f69633bfdc/go.mod h1:yigFU9vqHzYiE8U
 golang.org/x/crypto v0.0.0-20191011191535-87dc89f01550/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI=
 golang.org/x/crypto v0.0.0-20191206172530-e9b2fee46413/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto=
 golang.org/x/crypto v0.0.0-20200204104054-c9f3fb736b72/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto=
-golang.org/x/crypto v0.0.0-20200220183623-bac4c82f6975/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto=
 golang.org/x/crypto v0.0.0-20200302210943-78000ba7a073/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto=
 golang.org/x/crypto v0.0.0-20200323165209-0ec3e9974c59/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto=
 golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto=
@@ -2681,7 +2666,6 @@ golang.org/x/sys v0.0.0-20181122145206-62eef0e2fa9b/go.mod h1:STP8DvDyc/dI5b8T5h
 golang.org/x/sys v0.0.0-20190129075346-302c3dd5f1cc/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20190130150945-aca44879d564/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20190204203706-41f3e6584952/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
-golang.org/x/sys v0.0.0-20190209173611-3b5209105503/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20190222072716-a9d3bda3a223/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20190312061237-fead79001313/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
@@ -2707,7 +2691,6 @@ golang.org/x/sys v0.0.0-20191001151750-bb3f8db39f24/go.mod h1:h1NjWce9XRLGQEsW7w
 golang.org/x/sys v0.0.0-20191003212358-c178f38b412c/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20191005200804-aed5e4c7ecf9/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20191008105621-543471e840be/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
-golang.org/x/sys v0.0.0-20191022100944-742c48ecaeb7/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20191026070338-33540a1f6037/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20191112214154-59a1497f0cea/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20191115151921-52ab43148777/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
@@ -3175,7 +3158,6 @@ howett.net/plist v1.0.0 h1:7CrbWYbPPO/PyNy38b2EB/+gYbjCe2DXBxgtOOZbSQM=
 howett.net/plist v1.0.0/go.mod h1:lqaXoTrLY4hg8tnEzNru53gicrbv7rrk+2xJA/7hw9g=
 k8s.io/api v0.0.0-20180806132203-61b11ee65332/go.mod h1:iuAfoD4hCxJ8Onx9kaTIt30j7jUFS00AXQi6QMi99vA=
 k8s.io/api v0.0.0-20190325185214-7544f9db76f6/go.mod h1:iuAfoD4hCxJ8Onx9kaTIt30j7jUFS00AXQi6QMi99vA=
-k8s.io/api v0.18.2/go.mod h1:SJCWI7OLzhZSvbY7U8zwNl9UA4o1fizoug34OV/2r78=
 k8s.io/api v0.21.1/go.mod h1:FstGROTmsSHBarKc8bylzXih8BLNYTiS3TZcsoEDg2s=
 k8s.io/api v0.28.3 h1:Gj1HtbSdB4P08C8rs9AR94MfSGpRhJgsS+GF9V26xMM=
 k8s.io/api v0.28.3/go.mod h1:MRCV/jr1dW87/qJnZ57U5Pak65LGmQVkKTzf3AtKFHc=
@@ -3184,11 +3166,9 @@ k8s.io/apiextensions-apiserver v0.28.0/go.mod h1:uRdYiwIuu0SyqJKriKmqEN2jThIJPhV
 k8s.io/apimachinery v0.0.0-20180821005732-488889b0007f/go.mod h1:ccL7Eh7zubPUSh9A3USN90/OzHNSVN6zxzde07TDCL0=
 k8s.io/apimachinery v0.0.0-20190223001710-c182ff3b9841/go.mod h1:ccL7Eh7zubPUSh9A3USN90/OzHNSVN6zxzde07TDCL0=
 k8s.io/apimachinery v0.17.1/go.mod h1:b9qmWdKlLuU9EBh+06BtLcSf/Mu89rWL33naRxs1uZg=
-k8s.io/apimachinery v0.18.2/go.mod h1:9SnR/e11v5IbyPCGbvJViimtJ0SwHG4nfZFjU77ftcA=
 k8s.io/apimachinery v0.21.1/go.mod h1:jbreFvJo3ov9rj7eWT7+sYiRx+qZuCYXwWT1bcDswPY=
 k8s.io/apimachinery v0.28.3 h1:B1wYx8txOaCQG0HmYF6nbpU8dg6HvA06x5tEffvOe7A=
 k8s.io/apimachinery v0.28.3/go.mod h1:uQTKmIqs+rAYaq+DFaoD2X7pcjLOqbQX2AOiO0nIpb8=
-k8s.io/client-go v0.18.2/go.mod h1:Xcm5wVGXX9HAA2JJ2sSBUn3tCJ+4SVlCbl2MNNv+CIU=
 k8s.io/client-go v0.21.1/go.mod h1:/kEw4RgW+3xnBGzvp9IWxKSNA+lXn3A7AuH3gdOAzLs=
 k8s.io/client-go v0.28.3 h1:2OqNb72ZuTZPKCl+4gTKvqao0AMOl9f3o2ijbAj3LI4=
 k8s.io/client-go v0.28.3/go.mod h1:LTykbBp9gsA7SwqirlCXBWtK0guzfhpoW4qSm7i9dxo=
@@ -3199,11 +3179,9 @@ k8s.io/gengo v0.0.0-20190128074634-0689ccc1d7d6/go.mod h1:ezvh/TsK7cY6rbqRK0oQQ8
 k8s.io/gengo v0.0.0-20200413195148-3a45101e95ac/go.mod h1:ezvh/TsK7cY6rbqRK0oQQ8IAqLxYwwyPxAX1Pzy0ii0=
 k8s.io/gengo v0.0.0-20201214224949-b6c5ce23f027/go.mod h1:FiNAH4ZV3gBg2Kwh89tzAEV2be7d5xI0vBa/VySYy3E=
 k8s.io/kube-openapi v0.0.0-20191107075043-30be4d16710a/go.mod h1:1TqjTSzOxsLGIKfj0lK8EeCP7K1iUG65v09OM0/WG5E=
-k8s.io/kube-openapi v0.0.0-20200121204235-bf4fb3bd569c/go.mod h1:GRQhZsXIAJ1xR0C9bd8UpWHZ5plfAS9fzPjJuQ6JL3E=
 k8s.io/kube-openapi v0.0.0-20210305001622-591a79e4bda7/go.mod h1:wXW5VT87nVfh/iLV8FpR2uDvrFyomxbtb1KivDbvPTE=
 k8s.io/kube-openapi v0.0.0-20231010175941-2dd684a91f00 h1:aVUu9fTY98ivBPKR9Y5w/AuzbMm96cd3YHRTU83I780=
 k8s.io/kube-openapi v0.0.0-20231010175941-2dd684a91f00/go.mod h1:AsvuZPBlUDVuCdzJ87iajxtXuR9oktsTctW/R9wwouA=
-k8s.io/utils v0.0.0-20200324210504-a9aa75ae1b89/go.mod h1:sZAwmy6armz5eXlNoLmJcl4F1QuKu7sr+mFQ0byX7Ew=
 k8s.io/utils v0.0.0-20201110183641-67b214c5f920/go.mod h1:jPW/WVKK9YHAvNhRxK0md/EJ228hCsBRufyofKtW8HA=
 k8s.io/utils v0.0.0-20230726121419-3b25d923346b h1:sgn3ZU783SCgtaSJjpcVVlRqd6GSnlTLKgpAAttJvpI=
 k8s.io/utils v0.0.0-20230726121419-3b25d923346b/go.mod h1:OLgZIPagt7ERELqWJFomSt595RzquPNLL48iOWgYOg0=
@@ -3222,8 +3200,6 @@ sigs.k8s.io/controller-runtime v0.16.2/go.mod h1:vpMu3LpI5sYWtujJOa2uPK61nB5rbwl
 sigs.k8s.io/json v0.0.0-20221116044647-bc3834ca7abd h1:EDPBXCAspyGV4jQlpZSudPeMmr1bNJefnuqLsRAsHZo=
 sigs.k8s.io/json v0.0.0-20221116044647-bc3834ca7abd/go.mod h1:B8JuhiUyNFVKdsE8h686QcCxMaH6HrOAZj4vswFpcB0=
 sigs.k8s.io/structured-merge-diff v0.0.0-20190525122527-15d366b2352e/go.mod h1:wWxsB5ozmmv/SG7nM11ayaAW51xMvak/t1r0CSlcokI=
-sigs.k8s.io/structured-merge-diff/v3 v3.0.0-20200116222232-67a7b8c61874/go.mod h1:PlARxl6Hbt/+BC80dRLi1qAmnMqwqDg62YvvVkZjemw=
-sigs.k8s.io/structured-merge-diff/v3 v3.0.0/go.mod h1:PlARxl6Hbt/+BC80dRLi1qAmnMqwqDg62YvvVkZjemw=
 sigs.k8s.io/structured-merge-diff/v4 v4.0.2/go.mod h1:bJZC9H9iH24zzfZ/41RGcq60oK1F7G282QMXDPYydCw=
 sigs.k8s.io/structured-merge-diff/v4 v4.1.0/go.mod h1:bJZC9H9iH24zzfZ/41RGcq60oK1F7G282QMXDPYydCw=
 sigs.k8s.io/structured-merge-diff/v4 v4.3.0 h1:UZbZAZfX0wV2zr7YZorDz6GXROfDFj6LvqCRm4VUVKk=

From eae8c035184848052a1b6fff023c9242666cfe10 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=C4=90=E1=BB=97=20Tr=E1=BB=8Dng=20H=E1=BA=A3i?=
 <41283691+hainenber@users.noreply.github.com>
Date: Fri, 12 Jan 2024 18:29:35 +0700
Subject: [PATCH 62/68] feat(pkg/operator): sort endpoints in reconciler for
 better perf (#5943)

Signed-off-by: hainenber <dotronghai96@gmail.com>
Co-authored-by: Paschalis Tsilias <tpaschalis@users.noreply.github.com>
---
 CHANGELOG.md            | 2 ++
 pkg/operator/kubelet.go | 7 +++++++
 2 files changed, 9 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index e2d7b39c0767..43636a26ed2f 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -21,6 +21,8 @@ Main (unreleased)
 
 - Add an option to the windows static mode installer for expanding environment vars in the yaml config. (@erikbaranowski)
 
+- Sort kubelet endpoint to reduce pressure on K8s's API server and watcher endpoints. (@hainenber)
+
 ### Bugfixes
 
 - Fix an issue in `remote.s3` where the exported content of an object would be an empty string if `remote.s3` failed to fully retrieve
diff --git a/pkg/operator/kubelet.go b/pkg/operator/kubelet.go
index c04c6887f746..9ecff4f9bc8a 100644
--- a/pkg/operator/kubelet.go
+++ b/pkg/operator/kubelet.go
@@ -3,6 +3,7 @@ package operator
 import (
 	"context"
 	"fmt"
+	"sort"
 
 	"github.com/go-kit/log"
 	"github.com/go-kit/log/level"
@@ -126,6 +127,12 @@ func getNodeAddrs(l log.Logger, nodes *core_v1.NodeList) (addrs []core_v1.Endpoi
 	if failed {
 		return nil, fmt.Errorf("failed to get the address from one or more nodes")
 	}
+
+	// Sort endpoints to reduce performance cost on endpoint watchers
+	sort.SliceStable(addrs, func(i, j int) bool {
+		return addrs[i].IP < addrs[j].IP
+	})
+
 	return
 }
 

From e23aa30696a628f1f812046fff466c32526e6605 Mon Sep 17 00:00:00 2001
From: Simon Berz <simon@berz.me>
Date: Fri, 12 Jan 2024 16:25:30 +0100
Subject: [PATCH 63/68] feat(loki.source.awsfirehose): add authentication
 support (#6114)

Add an optional `access_key` attribute to enforce authentication for AWS
Firehose requests.

Signed-off-by: Simon Berz <simon@berz.me>
Co-authored-by: mattdurham <mattdurham@ppog.org>
---
 CHANGELOG.md                                  |  1 +
 .../loki/source/aws_firehose/component.go     |  8 ++-
 .../source/aws_firehose/internal/handler.go   | 15 +++-
 .../aws_firehose/internal/handler_test.go     | 68 ++++++++++++++++++-
 .../components/loki.source.awsfirehose.md     |  9 +--
 5 files changed, 94 insertions(+), 7 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 43636a26ed2f..4519cef6f6d0 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -20,6 +20,7 @@ Main (unreleased)
 ### Enhancements
 
 - Add an option to the windows static mode installer for expanding environment vars in the yaml config. (@erikbaranowski)
+- Add authentication support to `loki.source.awsfirehose` (@sberz)
 
 - Sort kubelet endpoint to reduce pressure on K8s's API server and watcher endpoints. (@hainenber)
 
diff --git a/component/loki/source/aws_firehose/component.go b/component/loki/source/aws_firehose/component.go
index 639f8e6c7c16..12552b2f604e 100644
--- a/component/loki/source/aws_firehose/component.go
+++ b/component/loki/source/aws_firehose/component.go
@@ -17,6 +17,7 @@ import (
 	flow_relabel "github.com/grafana/agent/component/common/relabel"
 	"github.com/grafana/agent/component/loki/source/aws_firehose/internal"
 	"github.com/grafana/agent/pkg/util"
+	"github.com/grafana/river/rivertypes"
 )
 
 func init() {
@@ -32,6 +33,7 @@ func init() {
 
 type Arguments struct {
 	Server               *fnet.ServerConfig  `river:",squash"`
+	AccessKey            rivertypes.Secret   `river:"access_key,attr,optional"`
 	UseIncomingTimestamp bool                `river:"use_incoming_timestamp,attr,optional"`
 	ForwardTo            []loki.LogsReceiver `river:"forward_to,attr"`
 	RelabelRules         flow_relabel.Rules  `river:"relabel_rules,attr,optional"`
@@ -131,6 +133,10 @@ func (c *Component) Update(args component.Arguments) error {
 		handlerNeedsUpdate = true
 	}
 
+	if c.args.AccessKey != newArgs.AccessKey {
+		handlerNeedsUpdate = true
+	}
+
 	// Since the handler is created ad-hoc for the server, and the handler depends on the relabels
 	// consider this as a cause for server restart as well. Much simpler than adding a lock on the
 	// handler and doing the relabel rules change on the fly
@@ -159,7 +165,7 @@ func (c *Component) Update(args component.Arguments) error {
 
 	if err = c.server.MountAndRun(func(router *mux.Router) {
 		// re-create handler when server is re-computed
-		handler := internal.NewHandler(c, c.logger, c.handlerMetrics, c.rbs, newArgs.UseIncomingTimestamp)
+		handler := internal.NewHandler(c, c.logger, c.handlerMetrics, c.rbs, newArgs.UseIncomingTimestamp, string(newArgs.AccessKey))
 		router.Path("/awsfirehose/api/v1/push").Methods("POST").Handler(handler)
 	}); err != nil {
 		return err
diff --git a/component/loki/source/aws_firehose/internal/handler.go b/component/loki/source/aws_firehose/internal/handler.go
index 8313f1a63e7a..6a59ec0ee73b 100644
--- a/component/loki/source/aws_firehose/internal/handler.go
+++ b/component/loki/source/aws_firehose/internal/handler.go
@@ -5,6 +5,7 @@ import (
 	"bytes"
 	"compress/gzip"
 	"context"
+	"crypto/subtle"
 	"encoding/base64"
 	"encoding/json"
 	"fmt"
@@ -57,16 +58,18 @@ type Handler struct {
 	sender        Sender
 	relabelRules  []*relabel.Config
 	useIncomingTs bool
+	accessKey     string
 }
 
 // NewHandler creates a new handler.
-func NewHandler(sender Sender, logger log.Logger, metrics *Metrics, rbs []*relabel.Config, useIncomingTs bool) *Handler {
+func NewHandler(sender Sender, logger log.Logger, metrics *Metrics, rbs []*relabel.Config, useIncomingTs bool, accessKey string) *Handler {
 	return &Handler{
 		metrics:       metrics,
 		logger:        logger,
 		sender:        sender,
 		relabelRules:  rbs,
 		useIncomingTs: useIncomingTs,
+		accessKey:     accessKey,
 	}
 }
 
@@ -76,6 +79,16 @@ func (h *Handler) ServeHTTP(w http.ResponseWriter, req *http.Request) {
 	defer req.Body.Close()
 	level.Info(h.logger).Log("msg", "handling request")
 
+	// authenticate request if the component has an access key configured
+	if len(h.accessKey) > 0 {
+		apiHeader := req.Header.Get("X-Amz-Firehose-Access-Key")
+
+		if subtle.ConstantTimeCompare([]byte(apiHeader), []byte(h.accessKey)) != 1 {
+			http.Error(w, "access key not provided or incorrect", http.StatusUnauthorized)
+			return
+		}
+	}
+
 	var bodyReader io.Reader = req.Body
 	// firehose allows the user to configure gzip content-encoding, in that case
 	// decompress in the reader during unmarshalling
diff --git a/component/loki/source/aws_firehose/internal/handler_test.go b/component/loki/source/aws_firehose/internal/handler_test.go
index 89a4ebecc0e2..c926dbc34bd6 100644
--- a/component/loki/source/aws_firehose/internal/handler_test.go
+++ b/component/loki/source/aws_firehose/internal/handler_test.go
@@ -313,7 +313,8 @@ func TestHandler(t *testing.T) {
 
 				testReceiver := &receiver{entries: make([]loki.Entry, 0)}
 				registry := prometheus.NewRegistry()
-				handler := NewHandler(testReceiver, logger, NewMetrics(registry), tc.Relabels, tc.UseIncomingTs)
+				accessKey := ""
+				handler := NewHandler(testReceiver, logger, NewMetrics(registry), tc.Relabels, tc.UseIncomingTs, accessKey)
 
 				bs := bytes.NewBuffer(nil)
 				var bodyReader io.Reader = strings.NewReader(tc.Body)
@@ -360,6 +361,71 @@ func TestHandler(t *testing.T) {
 	}
 }
 
+func TestHandlerAuth(t *testing.T) {
+	type testcase struct {
+		// AccessKey configures the key required by the handler to accept requests
+		AccessKey string
+
+		// ReqAccessKey configures the key sent in the request
+		ReqAccessKey string
+
+		// ExpectedCode is the expected HTTP status code
+		ExpectedCode int
+	}
+
+	tests := map[string]testcase{
+		"auth disabled": {
+			AccessKey:    "",
+			ReqAccessKey: "",
+			ExpectedCode: 200,
+		},
+		"auth enabled, valid key": {
+			AccessKey:    "fakekey",
+			ReqAccessKey: "fakekey",
+			ExpectedCode: 200,
+		},
+		"auth enabled, invalid key": {
+			AccessKey:    "fakekey",
+			ReqAccessKey: "badkey",
+			ExpectedCode: 401,
+		},
+		"auth enabled, no key": {
+			AccessKey:    "fakekey",
+			ReqAccessKey: "",
+			ExpectedCode: 401,
+		},
+	}
+
+	for name, tc := range tests {
+		t.Run(name, func(t *testing.T) {
+			w := log.NewSyncWriter(os.Stderr)
+			logger := log.NewLogfmtLogger(w)
+
+			testReceiver := &receiver{entries: make([]loki.Entry, 0)}
+			registry := prometheus.NewRegistry()
+			relabeling := []*relabel.Config{}
+			incommingTs := false
+			handler := NewHandler(testReceiver, logger, NewMetrics(registry), relabeling, incommingTs, tc.AccessKey)
+
+			body := strings.NewReader(readTestData(t, "testdata/direct_put.json"))
+			req, err := http.NewRequest("POST", "http://test", body)
+			req.Header.Set("X-Amz-Firehose-Request-Id", testRequestID)
+			req.Header.Set("X-Amz-Firehose-Source-Arn", testSourceARN)
+			req.Header.Set("X-Amz-Firehose-Protocol-Version", "1.0")
+			req.Header.Set("User-Agent", "Amazon Kinesis Data Firehose Agent/1.0")
+			if tc.ReqAccessKey != "" {
+				req.Header.Set("X-Amz-Firehose-Access-Key", tc.ReqAccessKey)
+			}
+			require.NoError(t, err)
+
+			recorder := httptest.NewRecorder()
+			handler.ServeHTTP(recorder, req)
+
+			require.Equal(t, tc.ExpectedCode, recorder.Code)
+		})
+	}
+}
+
 const cwLambdaControlMessage = `CWL CONTROL MESSAGE: Checking health of destination Firehose.`
 
 var cwLambdaLogMessages = []string{
diff --git a/docs/sources/flow/reference/components/loki.source.awsfirehose.md b/docs/sources/flow/reference/components/loki.source.awsfirehose.md
index 86bf634e395a..9b1d2c6d75c5 100644
--- a/docs/sources/flow/reference/components/loki.source.awsfirehose.md
+++ b/docs/sources/flow/reference/components/loki.source.awsfirehose.md
@@ -75,11 +75,12 @@ The component will start an HTTP server on the configured port and address with
 
 `loki.source.awsfirehose` supports the following arguments:
 
-| Name                     | Type                 | Description                                                | Default | Required |
- |--------------------------|----------------------|------------------------------------------------------------|---------|----------|
-| `forward_to`             | `list(LogsReceiver)` | List of receivers to send log entries to.                  |         | yes      |
+| Name                     | Type                 | Description                                                    | Default | Required |
+| ------------------------ | -------------------- | -------------------------------------------------------------- | ------- | -------- |
+| `forward_to`             | `list(LogsReceiver)` | List of receivers to send log entries to.                      |         | yes      |
 | `use_incoming_timestamp` | `bool`               | Whether or not to use the timestamp received from the request. | `false` | no       |
-| `relabel_rules`          | `RelabelRules`       | Relabeling rules to apply on log entries.                  | `{}`    | no       |
+| `relabel_rules`          | `RelabelRules`       | Relabeling rules to apply on log entries.                      | `{}`    | no       |
+| `access_key`             | `secret`             | If set, require AWS Firehose to provide a matching key.        | `""`    | no       |
 
 The `relabel_rules` field can make use of the `rules` export value from a
 [`loki.relabel`][loki.relabel] component to apply one or more relabeling rules to log entries before they're forwarded

From fdb3ad71b3bdfbf393a5a5571ab2527649fe0dda Mon Sep 17 00:00:00 2001
From: Tristan <tburgessdev@gmail.com>
Date: Fri, 12 Jan 2024 11:27:18 -0500
Subject: [PATCH 64/68] agent-flow-mixin: add aggregated remote write panel
 (#6116)

---
 CHANGELOG.md                                  |  2 ++
 .../prometheus.remote_write.libsonnet         | 33 ++++++++++++++++---
 2 files changed, 30 insertions(+), 5 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 4519cef6f6d0..2a6bfa0bccea 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -38,6 +38,8 @@ Main (unreleased)
 
 - Removed support for Windows 2012 in line with Microsoft end of life. (@mattdurham)
 
+- Split instance ID and component groupings into separate panels for `remote write active series by component` in the Flow mixin. (@tristanburgess)
+
 v0.39.0 (2024-01-09)
 --------------------
 
diff --git a/operations/agent-flow-mixin/dashboards/prometheus.remote_write.libsonnet b/operations/agent-flow-mixin/dashboards/prometheus.remote_write.libsonnet
index 32fe51506047..d9e0d8d170b4 100644
--- a/operations/agent-flow-mixin/dashboards/prometheus.remote_write.libsonnet
+++ b/operations/agent-flow-mixin/dashboards/prometheus.remote_write.libsonnet
@@ -290,7 +290,7 @@ local stackedPanelMixin = {
           received a sample for. Active series are garbage collected whenever a
           truncation of the WAL occurs.
         |||) +
-        panel.withPosition({ x: 0, y: 20, w: 12, h: 10 }) +
+        panel.withPosition({ x: 0, y: 20, w: 8, h: 10 }) +
         panel.withQueries([
           panel.newQuery(
             expr=|||
@@ -301,25 +301,48 @@ local stackedPanelMixin = {
         ])
       ),
 
+      // Active series (by instance/component)
+      (
+        panel.new(title='Active series (by instance/component)', type='timeseries') +
+        panel.withUnit('short') +
+        panel.withDescription(|||
+          Total number of active series which are currently being tracked by
+          prometheus.remote_write components, with separate lines for each agent instance.
+
+          An "active series" is a series that prometheus.remote_write recently
+          received a sample for. Active series are garbage collected whenever a
+          truncation of the WAL occurs.
+        |||) +
+        panel.withPosition({ x: 8, y: 20, w: 8, h: 10 }) +
+        panel.withQueries([
+          panel.newQuery(
+            expr=|||
+              agent_wal_storage_active_series{cluster="$cluster", namespace="$namespace", instance=~"$instance", component_id!="", component_id=~"$component", url=~"$url"}
+            |||,
+            legendFormat='{{instance}} / {{component_id}}',
+          ),
+        ])
+      ),
+
       // Active series (by component)
       (
         panel.new(title='Active series (by component)', type='timeseries') +
         panel.withUnit('short') +
         panel.withDescription(|||
           Total number of active series which are currently being tracked by
-          prometheus.remote_write components.
+          prometheus.remote_write components, aggregated across all instances.
 
           An "active series" is a series that prometheus.remote_write recently
           received a sample for. Active series are garbage collected whenever a
           truncation of the WAL occurs.
         |||) +
-        panel.withPosition({ x: 12, y: 20, w: 12, h: 10 }) +
+        panel.withPosition({ x: 16, y: 20, w: 8, h: 10 }) +
         panel.withQueries([
           panel.newQuery(
             expr=|||
-              agent_wal_storage_active_series{cluster="$cluster", namespace="$namespace", instance=~"$instance", component_id=~"$component", url=~"$url"}
+              sum by (component_id) (agent_wal_storage_active_series{cluster="$cluster", namespace="$namespace", instance=~"$instance", component_id!="", component_id=~"$component", url=~"$url"})
             |||,
-            legendFormat='{{instance}} / {{component_id}}',
+            legendFormat='{{component_id}}',
           ),
         ])
       ),

From 28846b29f3e244f0c70030e9643a55f7521e3aeb Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=C4=90=E1=BB=97=20Tr=E1=BB=8Dng=20H=E1=BA=A3i?=
 <41283691+hainenber@users.noreply.github.com>
Date: Sat, 13 Jan 2024 01:50:17 +0700
Subject: [PATCH 65/68] chore(doc): correct placement for merged changelog
 entry (#6132)

Signed-off-by: hainenber <dotronghai96@gmail.com>
---
 CHANGELOG.md | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 2a6bfa0bccea..4766beaa99f7 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -24,6 +24,9 @@ Main (unreleased)
 
 - Sort kubelet endpoint to reduce pressure on K8s's API server and watcher endpoints. (@hainenber)
 
+- Expose `physical_disk` collector from `windows_exporter` v0.24.0 to 
+  Flow configuration. (@hainenber)
+
 ### Bugfixes
 
 - Fix an issue in `remote.s3` where the exported content of an object would be an empty string if `remote.s3` failed to fully retrieve
@@ -121,9 +124,6 @@ v0.39.0 (2024-01-09)
 - `discovery.lightsail` now supports additional parameters for configuring HTTP client settings. (@ptodev)
 - Add `sample_age_limit` to remote_write config to drop samples older than a specified duration. (@marctc)
 
-- Expose `physical_disk` collector from `windows_exporter` v0.24.0 to 
-  Flow configuration. (@hainenber)
-
 - Handle paths in the Kubelet URL for `discovery.kubelet`. (@petewall)
 
 - `loki.source.docker` now deduplicates targets which report the same container

From af497c8e77dfebe7ee411c53c0ca24c5960ae6f7 Mon Sep 17 00:00:00 2001
From: Mischa Thompson <mischabear@gmail.com>
Date: Sun, 14 Jan 2024 23:39:57 -0800
Subject: [PATCH 66/68] docs: fix typo in loki.source.file (#6135)

* Fix typo

* Fix spacing for table
---
 docs/sources/flow/reference/components/loki.source.file.md | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/docs/sources/flow/reference/components/loki.source.file.md b/docs/sources/flow/reference/components/loki.source.file.md
index 4583018d90a6..edb407593c1f 100644
--- a/docs/sources/flow/reference/components/loki.source.file.md
+++ b/docs/sources/flow/reference/components/loki.source.file.md
@@ -56,13 +56,13 @@ The following blocks are supported inside the definition of `loki.source.file`:
 
 | Hierarchy      | Name               | Description                                                       | Required |
 | -------------- | ------------------ | ----------------------------------------------------------------- | -------- |
-| decompresssion | [decompresssion][] | Configure reading logs from compressed files.                     | no       |
+| decompression  | [decompression][] | Configure reading logs from compressed files.                     | no       |
 | file_watch     | [file_watch][]     | Configure how often files should be polled from disk for changes. | no       |
 
-[decompresssion]: #decompresssion-block
+[decompression]: #decompression-block
 [file_watch]: #file_watch-block
 
-### decompresssion block
+### decompression block
 
 The `decompression` block contains configuration for reading logs from
 compressed files. The following arguments are supported:

From f080a774a925311ddfb025210aeff0184f619013 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=C5=A0tefan=20Baebler?= <stefan.baebler@gmail.com>
Date: Mon, 15 Jan 2024 08:55:43 +0100
Subject: [PATCH 67/68] Bump grafana/pyroscope-go to v0.1.6 to support Go 1.22
 (#6139)

* Bump grafana/pyroscope-go to v0.1.6 to support Go 1.22

Support for Go 1.22 was added in https://github.com/grafana/pyroscope-go/pull/55

* Update CHANGELOG.md
---
 CHANGELOG.md | 2 ++
 go.mod       | 2 +-
 go.sum       | 4 ++--
 3 files changed, 5 insertions(+), 3 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 4766beaa99f7..a7c4c7020881 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -43,6 +43,8 @@ Main (unreleased)
 
 - Split instance ID and component groupings into separate panels for `remote write active series by component` in the Flow mixin. (@tristanburgess)
 
+- Updated dependency to add support for Go 1.22 (@stefanb)
+
 v0.39.0 (2024-01-09)
 --------------------
 
diff --git a/go.mod b/go.mod
index b92153524021..28d39fe89315 100644
--- a/go.mod
+++ b/go.mod
@@ -57,7 +57,7 @@ require (
 	github.com/grafana/go-gelf/v2 v2.0.1
 	// Loki main commit where the Prometheus dependency matches ours. TODO(@tpaschalis) Update to kXYZ branch once it's available
 	github.com/grafana/loki v1.6.2-0.20231004111112-07cbef92268a
-	github.com/grafana/pyroscope-go/godeltaprof v0.1.3
+	github.com/grafana/pyroscope-go/godeltaprof v0.1.6
 	github.com/grafana/pyroscope/api v0.2.0
 	github.com/grafana/pyroscope/ebpf v0.4.1
 	github.com/grafana/regexp v0.0.0-20221123153739-15dc172cd2db
diff --git a/go.sum b/go.sum
index ff55bf0ec35e..ffd56ef22914 100644
--- a/go.sum
+++ b/go.sum
@@ -1069,8 +1069,8 @@ github.com/grafana/postgres_exporter v0.8.1-0.20210722175051-db35d7c2f520 h1:HnF
 github.com/grafana/postgres_exporter v0.8.1-0.20210722175051-db35d7c2f520/go.mod h1:+HPXgiOV0InDHcZ2jNijL1SOKvo0eEPege5fQA0+ICI=
 github.com/grafana/prometheus v1.8.2-0.20240105105355-3e2c486167d2 h1:eJD8U9G91ID/pKsLjJnjqve8yv1NiE/l6dGYnwchPVM=
 github.com/grafana/prometheus v1.8.2-0.20240105105355-3e2c486167d2/go.mod h1:SRw624aMAxTfryAcP8rOjg4S/sHHaetx2lyJJ2nM83g=
-github.com/grafana/pyroscope-go/godeltaprof v0.1.3 h1:eunWpv1B3Z7ZK9o4499EmQGlY+CsDmSZ4FbxjRx37uk=
-github.com/grafana/pyroscope-go/godeltaprof v0.1.3/go.mod h1:1HSPtjU8vLG0jE9JrTdzjgFqdJ/VgN7fvxBNq3luJko=
+github.com/grafana/pyroscope-go/godeltaprof v0.1.6 h1:nEdZ8louGAplSvIJi1HVp7kWvFvdiiYg3COLlTwJiFo=
+github.com/grafana/pyroscope-go/godeltaprof v0.1.6/go.mod h1:Tk376Nbldo4Cha9RgiU7ik8WKFkNpfds98aUzS8omLE=
 github.com/grafana/pyroscope/api v0.2.0 h1:TzOxL0s6SiaLEy944ZAKgHcx/JDRJXu4O8ObwkqR6p4=
 github.com/grafana/pyroscope/api v0.2.0/go.mod h1:nhH+xai9cYFgs6lMy/+L0pKj0d5yCMwji/QAiQFCP+U=
 github.com/grafana/pyroscope/ebpf v0.4.1 h1:iqQoOsfKen5KpTRe6MfGeBZfgK1s7ROH+Cs/vZs1B3A=

From c054f30750d0b9e68e785483ea0da0caae0687f2 Mon Sep 17 00:00:00 2001
From: Paschalis Tsilias <tpaschalis@users.noreply.github.com>
Date: Mon, 15 Jan 2024 14:03:33 +0200
Subject: [PATCH 68/68] pyroscope.*: bump proto API version (#6141)

Signed-off-by: Paschalis Tsilias <paschalis.tsilias@grafana.com>
---
 component/pyroscope/write/write.go      |  2 +-
 component/pyroscope/write/write_test.go |  2 +-
 go.mod                                  | 23 +++++++------
 go.sum                                  | 44 ++++++++++++-------------
 4 files changed, 35 insertions(+), 36 deletions(-)

diff --git a/component/pyroscope/write/write.go b/component/pyroscope/write/write.go
index 4c20797a611c..23cdbe263e2f 100644
--- a/component/pyroscope/write/write.go
+++ b/component/pyroscope/write/write.go
@@ -6,7 +6,7 @@ import (
 	"strings"
 	"time"
 
-	"github.com/bufbuild/connect-go"
+	"connectrpc.com/connect"
 	"github.com/grafana/agent/component/pyroscope"
 	"github.com/grafana/agent/internal/agentseed"
 	"github.com/grafana/agent/internal/useragent"
diff --git a/component/pyroscope/write/write_test.go b/component/pyroscope/write/write_test.go
index ddb26862f54b..d0c91d50e3f6 100644
--- a/component/pyroscope/write/write_test.go
+++ b/component/pyroscope/write/write_test.go
@@ -9,7 +9,7 @@ import (
 	"testing"
 	"time"
 
-	"github.com/bufbuild/connect-go"
+	"connectrpc.com/connect"
 	"github.com/grafana/agent/component"
 	"github.com/grafana/agent/component/pyroscope"
 	"github.com/grafana/agent/pkg/util"
diff --git a/go.mod b/go.mod
index 28d39fe89315..8da98c5aad41 100644
--- a/go.mod
+++ b/go.mod
@@ -18,7 +18,6 @@ require (
 	github.com/aws/aws-sdk-go-v2/config v1.26.2
 	github.com/aws/aws-sdk-go-v2/service/s3 v1.34.1
 	github.com/bmatcuk/doublestar v1.3.4
-	github.com/bufbuild/connect-go v1.10.0
 	github.com/buger/jsonparser v1.1.1
 	github.com/burningalchemist/sql_exporter v0.0.0-20240103092044-466b38b6abc4
 	github.com/cespare/xxhash/v2 v2.2.0
@@ -58,7 +57,7 @@ require (
 	// Loki main commit where the Prometheus dependency matches ours. TODO(@tpaschalis) Update to kXYZ branch once it's available
 	github.com/grafana/loki v1.6.2-0.20231004111112-07cbef92268a
 	github.com/grafana/pyroscope-go/godeltaprof v0.1.6
-	github.com/grafana/pyroscope/api v0.2.0
+	github.com/grafana/pyroscope/api v0.4.0
 	github.com/grafana/pyroscope/ebpf v0.4.1
 	github.com/grafana/regexp v0.0.0-20221123153739-15dc172cd2db
 	github.com/grafana/river v0.3.0
@@ -126,7 +125,7 @@ require (
 	github.com/open-telemetry/opentelemetry-collector-contrib/receiver/opencensusreceiver v0.87.0
 	github.com/open-telemetry/opentelemetry-collector-contrib/receiver/zipkinreceiver v0.87.0
 	github.com/opentracing-contrib/go-grpc v0.0.0-20210225150812-73cb765af46e
-	github.com/opentracing-contrib/go-stdlib v1.0.0
+	github.com/opentracing-contrib/go-stdlib v1.0.0 // indirect
 	github.com/opentracing/opentracing-go v1.2.0
 	github.com/ory/dockertest/v3 v3.8.1
 	github.com/oschwald/geoip2-golang v1.9.0
@@ -219,7 +218,7 @@ require (
 	golang.org/x/sys v0.15.0
 	golang.org/x/text v0.14.0
 	golang.org/x/time v0.3.0
-	google.golang.org/api v0.147.0
+	google.golang.org/api v0.149.0
 	google.golang.org/grpc v1.59.0
 	google.golang.org/protobuf v1.32.0
 	gopkg.in/yaml.v2 v2.4.0
@@ -236,10 +235,10 @@ require (
 )
 
 require (
-	cloud.google.com/go v0.110.8 // indirect
-	cloud.google.com/go/compute v1.23.0 // indirect
+	cloud.google.com/go v0.110.10 // indirect
+	cloud.google.com/go/compute v1.23.3 // indirect
 	cloud.google.com/go/compute/metadata v0.2.4-0.20230617002413-005d2dfb6b68 // indirect
-	cloud.google.com/go/iam v1.1.2 // indirect
+	cloud.google.com/go/iam v1.1.5 // indirect
 	contrib.go.opencensus.io/exporter/prometheus v0.4.2 // indirect
 	github.com/99designs/go-keychain v0.0.0-20191008050251-8e49817e8af4 // indirect
 	github.com/99designs/keyring v1.2.2 // indirect
@@ -345,7 +344,6 @@ require (
 	github.com/envoyproxy/go-control-plane v0.11.1 // indirect
 	github.com/envoyproxy/protoc-gen-validate v1.0.2 // indirect
 	github.com/euank/go-kmsg-parser v2.0.0+incompatible // indirect
-	github.com/evanphx/json-patch v5.6.0+incompatible // indirect
 	github.com/evanphx/json-patch/v5 v5.6.0 // indirect
 	github.com/facette/natsort v0.0.0-20181210072756-2cd4dd1e2dcb // indirect
 	github.com/fatih/camelcase v1.0.0 // indirect
@@ -388,7 +386,7 @@ require (
 	github.com/google/gofuzz v1.2.0 // indirect
 	github.com/google/s2a-go v0.1.7 // indirect
 	github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510 // indirect
-	github.com/googleapis/enterprise-certificate-proxy v0.3.1 // indirect
+	github.com/googleapis/enterprise-certificate-proxy v0.3.2 // indirect
 	github.com/googleapis/gax-go/v2 v2.12.0 // indirect
 	github.com/gophercloud/gophercloud v1.7.0 // indirect
 	github.com/gorilla/websocket v1.5.0 // indirect
@@ -588,9 +586,9 @@ require (
 	gomodules.xyz/jsonpatch/v2 v2.4.0 // indirect
 	gonum.org/v1/gonum v0.14.0 // indirect
 	google.golang.org/appengine v1.6.8 // indirect
-	google.golang.org/genproto v0.0.0-20231012201019-e917dd12ba7a // indirect
-	google.golang.org/genproto/googleapis/api v0.0.0-20231012201019-e917dd12ba7a // indirect
-	google.golang.org/genproto/googleapis/rpc v0.0.0-20231016165738-49dd2c1f3d0b // indirect
+	google.golang.org/genproto v0.0.0-20231106174013-bbf56f31fb17 // indirect
+	google.golang.org/genproto/googleapis/api v0.0.0-20231106174013-bbf56f31fb17 // indirect
+	google.golang.org/genproto/googleapis/rpc v0.0.0-20231120223509-83a465c0220f // indirect
 	gopkg.in/alecthomas/kingpin.v2 v2.2.6 // indirect
 	gopkg.in/fsnotify/fsnotify.v1 v1.4.7 // indirect
 	gopkg.in/inf.v0 v0.9.1 // indirect
@@ -606,6 +604,7 @@ require (
 require github.com/ianlancetaylor/demangle v0.0.0-20230524184225-eabc099b10ab
 
 require (
+	connectrpc.com/connect v1.14.0
 	github.com/githubexporter/github-exporter v0.0.0-20231025122338-656e7dc33fe7
 	github.com/natefinch/atomic v1.0.1
 	github.com/open-telemetry/opentelemetry-collector-contrib/exporter/prometheusremotewriteexporter v0.87.0
diff --git a/go.sum b/go.sum
index ffd56ef22914..3223f47d7f2b 100644
--- a/go.sum
+++ b/go.sum
@@ -28,24 +28,24 @@ cloud.google.com/go v0.90.0/go.mod h1:kRX0mNRHe0e2rC6oNakvwQqzyDmg57xJ+SZU1eT2aD
 cloud.google.com/go v0.93.3/go.mod h1:8utlLll2EF5XMAV15woO4lSbWQlk8rer9aLOfLh7+YI=
 cloud.google.com/go v0.94.1/go.mod h1:qAlAugsXlC+JWO+Bke5vCtc9ONxjQT3drlTTnAplMW4=
 cloud.google.com/go v0.97.0/go.mod h1:GF7l59pYBVlXQIBLx3a761cZ41F9bBH3JUlihCt2Udc=
-cloud.google.com/go v0.110.8 h1:tyNdfIxjzaWctIiLYOTalaLKZ17SI44SKFW26QbOhME=
-cloud.google.com/go v0.110.8/go.mod h1:Iz8AkXJf1qmxC3Oxoep8R1T36w8B92yU29PcBhHO5fk=
+cloud.google.com/go v0.110.10 h1:LXy9GEO+timppncPIAZoOj3l58LIU9k+kn48AN7IO3Y=
+cloud.google.com/go v0.110.10/go.mod h1:v1OoFqYxiBkUrruItNM3eT4lLByNjxmJSV/xDKJNnic=
 cloud.google.com/go/bigquery v1.0.1/go.mod h1:i/xbL2UlR5RvWAURpBYZTtm/cXjCha9lbfbpx4poX+o=
 cloud.google.com/go/bigquery v1.3.0/go.mod h1:PjpwJnslEMmckchkHFfq+HTD2DmtT67aNFKH1/VBDHE=
 cloud.google.com/go/bigquery v1.4.0/go.mod h1:S8dzgnTigyfTmLBfrtrhyYhwRxG72rYxvftPBK2Dvzc=
 cloud.google.com/go/bigquery v1.5.0/go.mod h1:snEHRnqQbz117VIFhE8bmtwIDY80NLUZUMb4Nv6dBIg=
 cloud.google.com/go/bigquery v1.7.0/go.mod h1://okPTzCYNXSlb24MZs83e2Do+h+VXtc4gLoIoXIAPc=
 cloud.google.com/go/bigquery v1.8.0/go.mod h1:J5hqkt3O0uAFnINi6JXValWIb1v0goeZM77hZzJN/fQ=
-cloud.google.com/go/compute v1.23.0 h1:tP41Zoavr8ptEqaW6j+LQOnyBBhO7OkOMAGrgLopTwY=
-cloud.google.com/go/compute v1.23.0/go.mod h1:4tCnrn48xsqlwSAiLf1HXMQk8CONslYbdiEZc9FEIbM=
+cloud.google.com/go/compute v1.23.3 h1:6sVlXXBmbd7jNX0Ipq0trII3e4n1/MsADLK6a+aiVlk=
+cloud.google.com/go/compute v1.23.3/go.mod h1:VCgBUoMnIVIR0CscqQiPJLAG25E3ZRZMzcFZeQ+h8CI=
 cloud.google.com/go/compute/metadata v0.2.4-0.20230617002413-005d2dfb6b68 h1:aRVqY1p2IJaBGStWMsQMpkAa83cPkCDLl80eOj0Rbz4=
 cloud.google.com/go/compute/metadata v0.2.4-0.20230617002413-005d2dfb6b68/go.mod h1:1a3eRNYX12fs5UABBIXS8HXVvQbX9hRB/RkEBPORpe8=
 cloud.google.com/go/datastore v1.0.0/go.mod h1:LXYbyblFSglQ5pkeyhO+Qmw7ukd3C+pD7TKLgZqpHYE=
 cloud.google.com/go/datastore v1.1.0/go.mod h1:umbIZjpQpHh4hmRpGhH4tLFup+FVzqBi1b3c64qFpCk=
-cloud.google.com/go/iam v1.1.2 h1:gacbrBdWcoVmGLozRuStX45YKvJtzIjJdAolzUs1sm4=
-cloud.google.com/go/iam v1.1.2/go.mod h1:A5avdyVL2tCppe4unb0951eI9jreack+RJ0/d+KUZOU=
-cloud.google.com/go/kms v1.15.2 h1:lh6qra6oC4AyWe5fUUUBe/S27k12OHAleOOOw6KakdE=
-cloud.google.com/go/kms v1.15.2/go.mod h1:3hopT4+7ooWRCjc2DxgnpESFxhIraaI2IpAVUEhbT/w=
+cloud.google.com/go/iam v1.1.5 h1:1jTsCu4bcsNsE4iiqNT5SHwrDRCfRmIaaaVFhRveTJI=
+cloud.google.com/go/iam v1.1.5/go.mod h1:rB6P/Ic3mykPbFio+vo7403drjlgvoWfYpJhMXEbzv8=
+cloud.google.com/go/kms v1.15.5 h1:pj1sRfut2eRbD9pFRjNnPNg/CzJPuQAzUujMIM1vVeM=
+cloud.google.com/go/kms v1.15.5/go.mod h1:cU2H5jnp6G2TDpUGZyqTCoy1n16fbubHZjmVXSMtwDI=
 cloud.google.com/go/pubsub v1.0.1/go.mod h1:R0Gpsv3s54REJCy4fxDixWD93lHJMoZTyQ2kNxGRt3I=
 cloud.google.com/go/pubsub v1.1.0/go.mod h1:EwwdRX2sKPjnvnqCa270oGRyludottCI76h+R3AArQw=
 cloud.google.com/go/pubsub v1.2.0/go.mod h1:jhfEVHT8odbXTkndysNHCcx0awwzvfOlguIAii9o8iA=
@@ -60,6 +60,8 @@ cloud.google.com/go/storage v1.10.0/go.mod h1:FLPqc6j+Ki4BU591ie1oL6qBQGu2Bl/tZ9
 cloud.google.com/go/storage v1.14.0/go.mod h1:GrKmX003DSIwi9o29oFT7YDnHYwZoctc3fOKtUw0Xmo=
 code.cloudfoundry.org/clock v1.0.0/go.mod h1:QD9Lzhd/ux6eNQVUDVRJX/RKTigpewimNYBi7ivZKY8=
 collectd.org v0.3.0/go.mod h1:A/8DzQBkF6abtvrT2j/AU/4tiBgJWYyh0y/oB/4MlWE=
+connectrpc.com/connect v1.14.0 h1:PDS+J7uoz5Oui2VEOMcfz6Qft7opQM9hPiKvtGC01pA=
+connectrpc.com/connect v1.14.0/go.mod h1:uoAq5bmhhn43TwhaKdGKN/bZcGtzPW1v+ngDTn5u+8s=
 contrib.go.opencensus.io/exporter/prometheus v0.4.2 h1:sqfsYl5GIY/L570iT+l93ehxaWJs2/OwXtiWwew3oAg=
 contrib.go.opencensus.io/exporter/prometheus v0.4.2/go.mod h1:dvEHbiKmgvbr5pjaF9fpw1KeYcjrnC1J8B+JKjsZyRQ=
 dario.cat/mergo v1.0.0 h1:AGCNq9Evsj31mOgNPcLyXc+4PNABt905YmuqPYYpBWk=
@@ -425,8 +427,6 @@ github.com/bmizerany/assert v0.0.0-20160611221934-b7ed37b82869/go.mod h1:Ekp36dR
 github.com/boltdb/bolt v1.3.1/go.mod h1:clJnj/oiGkjum5o1McbSZDSLxVThjynRyGBgiAx27Ps=
 github.com/boynux/squid-exporter v1.10.5-0.20230618153315-c1fae094e18e h1:C1vYe728vM2FpXaICJuDRt5zgGyRdMmUGYnVfM7WcLY=
 github.com/boynux/squid-exporter v1.10.5-0.20230618153315-c1fae094e18e/go.mod h1:8NpZERGK+R9DGuZqqsKfnf2qI/rh7yBT8End29IvgNA=
-github.com/bufbuild/connect-go v1.10.0 h1:QAJ3G9A1OYQW2Jbk3DeoJbkCxuKArrvZgDt47mjdTbg=
-github.com/bufbuild/connect-go v1.10.0/go.mod h1:CAIePUgkDR5pAFaylSMtNK45ANQjp9JvpluG20rhpV8=
 github.com/buger/jsonparser v1.1.1 h1:2PnMjfWD7wBILjqQbt530v576A/cAbQvEW9gGIpYMUs=
 github.com/buger/jsonparser v1.1.1/go.mod h1:6RYKKt7H4d4+iWqouImQ9R2FZql3VbhNgx27UK13J/0=
 github.com/burningalchemist/sql_exporter v0.0.0-20240103092044-466b38b6abc4 h1:dgjwrjeVe90AeMhrx04TmDKjZe7xqKKEUxT3QKNx9RU=
@@ -1005,8 +1005,8 @@ github.com/google/uuid v1.1.2/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+
 github.com/google/uuid v1.2.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
 github.com/google/uuid v1.4.0 h1:MtMxsa51/r9yyhkyLsVeVt0B+BGQZzpQiTQ4eHZ8bc4=
 github.com/google/uuid v1.4.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
-github.com/googleapis/enterprise-certificate-proxy v0.3.1 h1:SBWmZhjUDRorQxrN0nwzf+AHBxnbFjViHQS4P0yVpmQ=
-github.com/googleapis/enterprise-certificate-proxy v0.3.1/go.mod h1:VLSiSSBs/ksPL8kq3OBOQ6WRI2QnaFynd1DCjZ62+V0=
+github.com/googleapis/enterprise-certificate-proxy v0.3.2 h1:Vie5ybvEvT75RniqhfFxPRy3Bf7vr3h0cechB90XaQs=
+github.com/googleapis/enterprise-certificate-proxy v0.3.2/go.mod h1:VLSiSSBs/ksPL8kq3OBOQ6WRI2QnaFynd1DCjZ62+V0=
 github.com/googleapis/gax-go/v2 v2.0.4/go.mod h1:0Wqv26UfaUD9n4G6kQubkQ+KchISgw+vpHVxEJEs9eg=
 github.com/googleapis/gax-go/v2 v2.0.5/go.mod h1:DWXyrwAJ9X0FpwwEdw+IPEYBICEFu5mhpdKc/us6bOk=
 github.com/googleapis/gax-go/v2 v2.1.0/go.mod h1:Q3nei7sK6ybPYH7twZdmQpAd1MKb7pfu6SK+H1/DsU0=
@@ -1071,8 +1071,8 @@ github.com/grafana/prometheus v1.8.2-0.20240105105355-3e2c486167d2 h1:eJD8U9G91I
 github.com/grafana/prometheus v1.8.2-0.20240105105355-3e2c486167d2/go.mod h1:SRw624aMAxTfryAcP8rOjg4S/sHHaetx2lyJJ2nM83g=
 github.com/grafana/pyroscope-go/godeltaprof v0.1.6 h1:nEdZ8louGAplSvIJi1HVp7kWvFvdiiYg3COLlTwJiFo=
 github.com/grafana/pyroscope-go/godeltaprof v0.1.6/go.mod h1:Tk376Nbldo4Cha9RgiU7ik8WKFkNpfds98aUzS8omLE=
-github.com/grafana/pyroscope/api v0.2.0 h1:TzOxL0s6SiaLEy944ZAKgHcx/JDRJXu4O8ObwkqR6p4=
-github.com/grafana/pyroscope/api v0.2.0/go.mod h1:nhH+xai9cYFgs6lMy/+L0pKj0d5yCMwji/QAiQFCP+U=
+github.com/grafana/pyroscope/api v0.4.0 h1:J86DxoNeLOvtJhB1Cn65JMZkXe682D+RqeoIUiYc/eo=
+github.com/grafana/pyroscope/api v0.4.0/go.mod h1:MFnZNeUM4RDsDOnbgKW3GWoLSBpLzMMT9nkvhHHo81o=
 github.com/grafana/pyroscope/ebpf v0.4.1 h1:iqQoOsfKen5KpTRe6MfGeBZfgK1s7ROH+Cs/vZs1B3A=
 github.com/grafana/pyroscope/ebpf v0.4.1/go.mod h1:W99Mq+yJGP5nZUQWNv+jVytiWWgWXwHjIRmi9k3xHzA=
 github.com/grafana/regexp v0.0.0-20221123153739-15dc172cd2db h1:7aN5cccjIqCLTzedH7MZzRZt5/lsAHch6Z3L2ZGn5FA=
@@ -2949,8 +2949,8 @@ google.golang.org/api v0.51.0/go.mod h1:t4HdrdoNgyN5cbEfm7Lum0lcLDLiise1F8qDKX00
 google.golang.org/api v0.54.0/go.mod h1:7C4bFFOvVDGXjfDTAsgGwDgAxRDeQ4X8NvUedIt6z3k=
 google.golang.org/api v0.55.0/go.mod h1:38yMfeP1kfjsl8isn0tliTjIb1rJXcQi4UXlbqivdVE=
 google.golang.org/api v0.57.0/go.mod h1:dVPlbZyBo2/OjBpmvNdpn2GRm6rPy75jyU7bmhdrMgI=
-google.golang.org/api v0.147.0 h1:Can3FaQo9LlVqxJCodNmeZW/ib3/qKAY3rFeXiHo5gc=
-google.golang.org/api v0.147.0/go.mod h1:pQ/9j83DcmPd/5C9e2nFOdjjNkDZ1G+zkbK2uvdkJMs=
+google.golang.org/api v0.149.0 h1:b2CqT6kG+zqJIVKRQ3ELJVLN1PwHZ6DJ3dW8yl82rgY=
+google.golang.org/api v0.149.0/go.mod h1:Mwn1B7JTXrzXtnvmzQE2BD6bYZQ8DShKZDZbeN9I7qI=
 google.golang.org/appengine v1.1.0/go.mod h1:EbEs0AVv82hx2wNQdGPgUI5lhzA/G0D9YwlJXL52JkM=
 google.golang.org/appengine v1.2.0/go.mod h1:xpcJRLb0r/rnEns0DIKYYv+WjYCduHsrkT7/EB5XEv4=
 google.golang.org/appengine v1.4.0/go.mod h1:xpcJRLb0r/rnEns0DIKYYv+WjYCduHsrkT7/EB5XEv4=
@@ -3024,12 +3024,12 @@ google.golang.org/genproto v0.0.0-20210828152312-66f60bf46e71/go.mod h1:eFjDcFEc
 google.golang.org/genproto v0.0.0-20210831024726-fe130286e0e2/go.mod h1:eFjDcFEctNawg4eG61bRv87N7iHBWyVhJu7u1kqDUXY=
 google.golang.org/genproto v0.0.0-20210903162649-d08c68adba83/go.mod h1:eFjDcFEctNawg4eG61bRv87N7iHBWyVhJu7u1kqDUXY=
 google.golang.org/genproto v0.0.0-20210924002016-3dee208752a0/go.mod h1:5CzLGKJ67TSI2B9POpiiyGha0AjJvZIUgRMt1dSmuhc=
-google.golang.org/genproto v0.0.0-20231012201019-e917dd12ba7a h1:fwgW9j3vHirt4ObdHoYNwuO24BEZjSzbh+zPaNWoiY8=
-google.golang.org/genproto v0.0.0-20231012201019-e917dd12ba7a/go.mod h1:EMfReVxb80Dq1hhioy0sOsY9jCE46YDgHlJ7fWVUWRE=
-google.golang.org/genproto/googleapis/api v0.0.0-20231012201019-e917dd12ba7a h1:myvhA4is3vrit1a6NZCWBIwN0kNEnX21DJOJX/NvIfI=
-google.golang.org/genproto/googleapis/api v0.0.0-20231012201019-e917dd12ba7a/go.mod h1:SUBoKXbI1Efip18FClrQVGjWcyd0QZd8KkvdP34t7ww=
-google.golang.org/genproto/googleapis/rpc v0.0.0-20231016165738-49dd2c1f3d0b h1:ZlWIi1wSK56/8hn4QcBp/j9M7Gt3U/3hZw3mC7vDICo=
-google.golang.org/genproto/googleapis/rpc v0.0.0-20231016165738-49dd2c1f3d0b/go.mod h1:swOH3j0KzcDDgGUWr+SNpyTen5YrXjS3eyPzFYKc6lc=
+google.golang.org/genproto v0.0.0-20231106174013-bbf56f31fb17 h1:wpZ8pe2x1Q3f2KyT5f8oP/fa9rHAKgFPr/HZdNuS+PQ=
+google.golang.org/genproto v0.0.0-20231106174013-bbf56f31fb17/go.mod h1:J7XzRzVy1+IPwWHZUzoD0IccYZIrXILAQpc+Qy9CMhY=
+google.golang.org/genproto/googleapis/api v0.0.0-20231106174013-bbf56f31fb17 h1:JpwMPBpFN3uKhdaekDpiNlImDdkUAyiJ6ez/uxGaUSo=
+google.golang.org/genproto/googleapis/api v0.0.0-20231106174013-bbf56f31fb17/go.mod h1:0xJLfVdJqpAPl8tDg1ujOCGzx6LFLttXT5NhllGOXY4=
+google.golang.org/genproto/googleapis/rpc v0.0.0-20231120223509-83a465c0220f h1:ultW7fxlIvee4HYrtnaRPon9HpEgFk5zYpmfMgtKB5I=
+google.golang.org/genproto/googleapis/rpc v0.0.0-20231120223509-83a465c0220f/go.mod h1:L9KNLi232K1/xB6f7AlSX692koaRnKaWSR0stBki0Yc=
 google.golang.org/grpc v0.0.0-20180920234847-8997b5fa0873/go.mod h1:0JHn/cJsOMiMfNA9+DeHDlAU7KAAB5GDlYFpa9MZMio=
 google.golang.org/grpc v1.8.0/go.mod h1:yo6s7OP7yaDglbqo1J04qKzAhqBH6lvTonzMVmEdcZw=
 google.golang.org/grpc v1.12.0/go.mod h1:yo6s7OP7yaDglbqo1J04qKzAhqBH6lvTonzMVmEdcZw=