From 7611308b0ef9d525bbce84426ae04e5d1a93476b Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Sun, 9 Oct 2016 16:53:41 -0700
Subject: [PATCH 001/652] Sphinx quickstart

---
 .gitignore |   1 +
 Makefile   | 230 ++++++++++++++++++++++++++++++++++++++++++
 conf.py    | 286 +++++++++++++++++++++++++++++++++++++++++++++++++++++
 index.rst  |  22 +++++
 4 files changed, 539 insertions(+)
 create mode 100644 .gitignore
 create mode 100644 Makefile
 create mode 100644 conf.py
 create mode 100644 index.rst

diff --git a/.gitignore b/.gitignore
new file mode 100644
index 000000000..e35d8850c
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1 @@
+_build
diff --git a/Makefile b/Makefile
new file mode 100644
index 000000000..b739a52ff
--- /dev/null
+++ b/Makefile
@@ -0,0 +1,230 @@
+# Makefile for Sphinx documentation
+#
+
+# You can set these variables from the command line.
+SPHINXOPTS    =
+SPHINXBUILD   = sphinx-build
+PAPER         =
+BUILDDIR      = _build
+
+# User-friendly check for sphinx-build
+ifeq ($(shell which $(SPHINXBUILD) >/dev/null 2>&1; echo $$?), 1)
+	$(error The '$(SPHINXBUILD)' command was not found. Make sure you have Sphinx installed, then set the SPHINXBUILD environment variable to point to the full path of the '$(SPHINXBUILD)' executable. Alternatively you can add the directory with the executable to your PATH. If you don\'t have Sphinx installed, grab it from http://sphinx-doc.org/)
+endif
+
+# Internal variables.
+PAPEROPT_a4     = -D latex_paper_size=a4
+PAPEROPT_letter = -D latex_paper_size=letter
+ALLSPHINXOPTS   = -d $(BUILDDIR)/doctrees $(PAPEROPT_$(PAPER)) $(SPHINXOPTS) .
+# the i18n builder cannot share the environment and doctrees with the others
+I18NSPHINXOPTS  = $(PAPEROPT_$(PAPER)) $(SPHINXOPTS) .
+
+.PHONY: help
+help:
+	@echo "Please use \`make <target>' where <target> is one of"
+	@echo "  html       to make standalone HTML files"
+	@echo "  dirhtml    to make HTML files named index.html in directories"
+	@echo "  singlehtml to make a single large HTML file"
+	@echo "  pickle     to make pickle files"
+	@echo "  json       to make JSON files"
+	@echo "  htmlhelp   to make HTML files and a HTML help project"
+	@echo "  qthelp     to make HTML files and a qthelp project"
+	@echo "  applehelp  to make an Apple Help Book"
+	@echo "  devhelp    to make HTML files and a Devhelp project"
+	@echo "  epub       to make an epub"
+	@echo "  epub3      to make an epub3"
+	@echo "  latex      to make LaTeX files, you can set PAPER=a4 or PAPER=letter"
+	@echo "  latexpdf   to make LaTeX files and run them through pdflatex"
+	@echo "  latexpdfja to make LaTeX files and run them through platex/dvipdfmx"
+	@echo "  text       to make text files"
+	@echo "  man        to make manual pages"
+	@echo "  texinfo    to make Texinfo files"
+	@echo "  info       to make Texinfo files and run them through makeinfo"
+	@echo "  gettext    to make PO message catalogs"
+	@echo "  changes    to make an overview of all changed/added/deprecated items"
+	@echo "  xml        to make Docutils-native XML files"
+	@echo "  pseudoxml  to make pseudoxml-XML files for display purposes"
+	@echo "  linkcheck  to check all external links for integrity"
+	@echo "  doctest    to run all doctests embedded in the documentation (if enabled)"
+	@echo "  coverage   to run coverage check of the documentation (if enabled)"
+	@echo "  dummy      to check syntax errors of document sources"
+
+.PHONY: clean
+clean:
+	rm -rf $(BUILDDIR)/*
+
+.PHONY: html
+html:
+	$(SPHINXBUILD) -b html $(ALLSPHINXOPTS) $(BUILDDIR)/html
+	@echo
+	@echo "Build finished. The HTML pages are in $(BUILDDIR)/html."
+
+.PHONY: dirhtml
+dirhtml:
+	$(SPHINXBUILD) -b dirhtml $(ALLSPHINXOPTS) $(BUILDDIR)/dirhtml
+	@echo
+	@echo "Build finished. The HTML pages are in $(BUILDDIR)/dirhtml."
+
+.PHONY: singlehtml
+singlehtml:
+	$(SPHINXBUILD) -b singlehtml $(ALLSPHINXOPTS) $(BUILDDIR)/singlehtml
+	@echo
+	@echo "Build finished. The HTML page is in $(BUILDDIR)/singlehtml."
+
+.PHONY: pickle
+pickle:
+	$(SPHINXBUILD) -b pickle $(ALLSPHINXOPTS) $(BUILDDIR)/pickle
+	@echo
+	@echo "Build finished; now you can process the pickle files."
+
+.PHONY: json
+json:
+	$(SPHINXBUILD) -b json $(ALLSPHINXOPTS) $(BUILDDIR)/json
+	@echo
+	@echo "Build finished; now you can process the JSON files."
+
+.PHONY: htmlhelp
+htmlhelp:
+	$(SPHINXBUILD) -b htmlhelp $(ALLSPHINXOPTS) $(BUILDDIR)/htmlhelp
+	@echo
+	@echo "Build finished; now you can run HTML Help Workshop with the" \
+	      ".hhp project file in $(BUILDDIR)/htmlhelp."
+
+.PHONY: qthelp
+qthelp:
+	$(SPHINXBUILD) -b qthelp $(ALLSPHINXOPTS) $(BUILDDIR)/qthelp
+	@echo
+	@echo "Build finished; now you can run "qcollectiongenerator" with the" \
+	      ".qhcp project file in $(BUILDDIR)/qthelp, like this:"
+	@echo "# qcollectiongenerator $(BUILDDIR)/qthelp/PostgREST.qhcp"
+	@echo "To view the help file:"
+	@echo "# assistant -collectionFile $(BUILDDIR)/qthelp/PostgREST.qhc"
+
+.PHONY: applehelp
+applehelp:
+	$(SPHINXBUILD) -b applehelp $(ALLSPHINXOPTS) $(BUILDDIR)/applehelp
+	@echo
+	@echo "Build finished. The help book is in $(BUILDDIR)/applehelp."
+	@echo "N.B. You won't be able to view it unless you put it in" \
+	      "~/Library/Documentation/Help or install it in your application" \
+	      "bundle."
+
+.PHONY: devhelp
+devhelp:
+	$(SPHINXBUILD) -b devhelp $(ALLSPHINXOPTS) $(BUILDDIR)/devhelp
+	@echo
+	@echo "Build finished."
+	@echo "To view the help file:"
+	@echo "# mkdir -p $$HOME/.local/share/devhelp/PostgREST"
+	@echo "# ln -s $(BUILDDIR)/devhelp $$HOME/.local/share/devhelp/PostgREST"
+	@echo "# devhelp"
+
+.PHONY: epub
+epub:
+	$(SPHINXBUILD) -b epub $(ALLSPHINXOPTS) $(BUILDDIR)/epub
+	@echo
+	@echo "Build finished. The epub file is in $(BUILDDIR)/epub."
+
+.PHONY: epub3
+epub3:
+	$(SPHINXBUILD) -b epub3 $(ALLSPHINXOPTS) $(BUILDDIR)/epub3
+	@echo
+	@echo "Build finished. The epub3 file is in $(BUILDDIR)/epub3."
+
+.PHONY: latex
+latex:
+	$(SPHINXBUILD) -b latex $(ALLSPHINXOPTS) $(BUILDDIR)/latex
+	@echo
+	@echo "Build finished; the LaTeX files are in $(BUILDDIR)/latex."
+	@echo "Run \`make' in that directory to run these through (pdf)latex" \
+	      "(use \`make latexpdf' here to do that automatically)."
+
+.PHONY: latexpdf
+latexpdf:
+	$(SPHINXBUILD) -b latex $(ALLSPHINXOPTS) $(BUILDDIR)/latex
+	@echo "Running LaTeX files through pdflatex..."
+	$(MAKE) -C $(BUILDDIR)/latex all-pdf
+	@echo "pdflatex finished; the PDF files are in $(BUILDDIR)/latex."
+
+.PHONY: latexpdfja
+latexpdfja:
+	$(SPHINXBUILD) -b latex $(ALLSPHINXOPTS) $(BUILDDIR)/latex
+	@echo "Running LaTeX files through platex and dvipdfmx..."
+	$(MAKE) -C $(BUILDDIR)/latex all-pdf-ja
+	@echo "pdflatex finished; the PDF files are in $(BUILDDIR)/latex."
+
+.PHONY: text
+text:
+	$(SPHINXBUILD) -b text $(ALLSPHINXOPTS) $(BUILDDIR)/text
+	@echo
+	@echo "Build finished. The text files are in $(BUILDDIR)/text."
+
+.PHONY: man
+man:
+	$(SPHINXBUILD) -b man $(ALLSPHINXOPTS) $(BUILDDIR)/man
+	@echo
+	@echo "Build finished. The manual pages are in $(BUILDDIR)/man."
+
+.PHONY: texinfo
+texinfo:
+	$(SPHINXBUILD) -b texinfo $(ALLSPHINXOPTS) $(BUILDDIR)/texinfo
+	@echo
+	@echo "Build finished. The Texinfo files are in $(BUILDDIR)/texinfo."
+	@echo "Run \`make' in that directory to run these through makeinfo" \
+	      "(use \`make info' here to do that automatically)."
+
+.PHONY: info
+info:
+	$(SPHINXBUILD) -b texinfo $(ALLSPHINXOPTS) $(BUILDDIR)/texinfo
+	@echo "Running Texinfo files through makeinfo..."
+	make -C $(BUILDDIR)/texinfo info
+	@echo "makeinfo finished; the Info files are in $(BUILDDIR)/texinfo."
+
+.PHONY: gettext
+gettext:
+	$(SPHINXBUILD) -b gettext $(I18NSPHINXOPTS) $(BUILDDIR)/locale
+	@echo
+	@echo "Build finished. The message catalogs are in $(BUILDDIR)/locale."
+
+.PHONY: changes
+changes:
+	$(SPHINXBUILD) -b changes $(ALLSPHINXOPTS) $(BUILDDIR)/changes
+	@echo
+	@echo "The overview file is in $(BUILDDIR)/changes."
+
+.PHONY: linkcheck
+linkcheck:
+	$(SPHINXBUILD) -b linkcheck $(ALLSPHINXOPTS) $(BUILDDIR)/linkcheck
+	@echo
+	@echo "Link check complete; look for any errors in the above output " \
+	      "or in $(BUILDDIR)/linkcheck/output.txt."
+
+.PHONY: doctest
+doctest:
+	$(SPHINXBUILD) -b doctest $(ALLSPHINXOPTS) $(BUILDDIR)/doctest
+	@echo "Testing of doctests in the sources finished, look at the " \
+	      "results in $(BUILDDIR)/doctest/output.txt."
+
+.PHONY: coverage
+coverage:
+	$(SPHINXBUILD) -b coverage $(ALLSPHINXOPTS) $(BUILDDIR)/coverage
+	@echo "Testing of coverage in the sources finished, look at the " \
+	      "results in $(BUILDDIR)/coverage/python.txt."
+
+.PHONY: xml
+xml:
+	$(SPHINXBUILD) -b xml $(ALLSPHINXOPTS) $(BUILDDIR)/xml
+	@echo
+	@echo "Build finished. The XML files are in $(BUILDDIR)/xml."
+
+.PHONY: pseudoxml
+pseudoxml:
+	$(SPHINXBUILD) -b pseudoxml $(ALLSPHINXOPTS) $(BUILDDIR)/pseudoxml
+	@echo
+	@echo "Build finished. The pseudo-XML files are in $(BUILDDIR)/pseudoxml."
+
+.PHONY: dummy
+dummy:
+	$(SPHINXBUILD) -b dummy $(ALLSPHINXOPTS) $(BUILDDIR)/dummy
+	@echo
+	@echo "Build finished. Dummy builder generates no files."
diff --git a/conf.py b/conf.py
new file mode 100644
index 000000000..8c6802b3f
--- /dev/null
+++ b/conf.py
@@ -0,0 +1,286 @@
+# -*- coding: utf-8 -*-
+#
+# PostgREST documentation build configuration file, created by
+# sphinx-quickstart on Sun Oct  9 16:53:00 2016.
+#
+# This file is execfile()d with the current directory set to its
+# containing dir.
+#
+# Note that not all possible configuration values are present in this
+# autogenerated file.
+#
+# All configuration values have a default; values that are commented out
+# serve to show the default.
+
+import sys
+import os
+
+# If extensions (or modules to document with autodoc) are in another directory,
+# add these directories to sys.path here. If the directory is relative to the
+# documentation root, use os.path.abspath to make it absolute, like shown here.
+#sys.path.insert(0, os.path.abspath('.'))
+
+# -- General configuration ------------------------------------------------
+
+# If your documentation needs a minimal Sphinx version, state it here.
+#needs_sphinx = '1.0'
+
+# Add any Sphinx extension module names here, as strings. They can be
+# extensions coming with Sphinx (named 'sphinx.ext.*') or your custom
+# ones.
+extensions = []
+
+# Add any paths that contain templates here, relative to this directory.
+templates_path = ['_templates']
+
+# The suffix(es) of source filenames.
+# You can specify multiple suffix as a list of string:
+# source_suffix = ['.rst', '.md']
+source_suffix = '.rst'
+
+# The encoding of source files.
+#source_encoding = 'utf-8-sig'
+
+# The master toctree document.
+master_doc = 'index'
+
+# General information about the project.
+project = u'PostgREST'
+copyright = u'2016, Joe Nelson'
+author = u'Joe Nelson'
+
+# The version info for the project you're documenting, acts as replacement for
+# |version| and |release|, also used in various other places throughout the
+# built documents.
+#
+# The short X.Y version.
+version = u'0.4'
+# The full version, including alpha/beta/rc tags.
+release = u'0.4.0.0'
+
+# The language for content autogenerated by Sphinx. Refer to documentation
+# for a list of supported languages.
+#
+# This is also used if you do content translation via gettext catalogs.
+# Usually you set "language" from the command line for these cases.
+language = None
+
+# There are two options for replacing |today|: either, you set today to some
+# non-false value, then it is used:
+#today = ''
+# Else, today_fmt is used as the format for a strftime call.
+#today_fmt = '%B %d, %Y'
+
+# List of patterns, relative to source directory, that match files and
+# directories to ignore when looking for source files.
+# This patterns also effect to html_static_path and html_extra_path
+exclude_patterns = ['_build', 'Thumbs.db', '.DS_Store']
+
+# The reST default role (used for this markup: `text`) to use for all
+# documents.
+#default_role = None
+
+# If true, '()' will be appended to :func: etc. cross-reference text.
+#add_function_parentheses = True
+
+# If true, the current module name will be prepended to all description
+# unit titles (such as .. function::).
+#add_module_names = True
+
+# If true, sectionauthor and moduleauthor directives will be shown in the
+# output. They are ignored by default.
+#show_authors = False
+
+# The name of the Pygments (syntax highlighting) style to use.
+pygments_style = 'sphinx'
+
+# A list of ignored prefixes for module index sorting.
+#modindex_common_prefix = []
+
+# If true, keep warnings as "system message" paragraphs in the built documents.
+#keep_warnings = False
+
+# If true, `todo` and `todoList` produce output, else they produce nothing.
+todo_include_todos = False
+
+
+# -- Options for HTML output ----------------------------------------------
+
+# The theme to use for HTML and HTML Help pages.  See the documentation for
+# a list of builtin themes.
+html_theme = 'alabaster'
+
+# Theme options are theme-specific and customize the look and feel of a theme
+# further.  For a list of options available for each theme, see the
+# documentation.
+#html_theme_options = {}
+
+# Add any paths that contain custom themes here, relative to this directory.
+#html_theme_path = []
+
+# The name for this set of Sphinx documents.
+# "<project> v<release> documentation" by default.
+#html_title = u'PostgREST v0.4.0.0'
+
+# A shorter title for the navigation bar.  Default is the same as html_title.
+#html_short_title = None
+
+# The name of an image file (relative to this directory) to place at the top
+# of the sidebar.
+#html_logo = None
+
+# The name of an image file (relative to this directory) to use as a favicon of
+# the docs.  This file should be a Windows icon file (.ico) being 16x16 or 32x32
+# pixels large.
+#html_favicon = None
+
+# Add any paths that contain custom static files (such as style sheets) here,
+# relative to this directory. They are copied after the builtin static files,
+# so a file named "default.css" will overwrite the builtin "default.css".
+html_static_path = ['_static']
+
+# Add any extra paths that contain custom files (such as robots.txt or
+# .htaccess) here, relative to this directory. These files are copied
+# directly to the root of the documentation.
+#html_extra_path = []
+
+# If not None, a 'Last updated on:' timestamp is inserted at every page
+# bottom, using the given strftime format.
+# The empty string is equivalent to '%b %d, %Y'.
+#html_last_updated_fmt = None
+
+# If true, SmartyPants will be used to convert quotes and dashes to
+# typographically correct entities.
+#html_use_smartypants = True
+
+# Custom sidebar templates, maps document names to template names.
+#html_sidebars = {}
+
+# Additional templates that should be rendered to pages, maps page names to
+# template names.
+#html_additional_pages = {}
+
+# If false, no module index is generated.
+#html_domain_indices = True
+
+# If false, no index is generated.
+#html_use_index = True
+
+# If true, the index is split into individual pages for each letter.
+#html_split_index = False
+
+# If true, links to the reST sources are added to the pages.
+#html_show_sourcelink = True
+
+# If true, "Created using Sphinx" is shown in the HTML footer. Default is True.
+#html_show_sphinx = True
+
+# If true, "(C) Copyright ..." is shown in the HTML footer. Default is True.
+#html_show_copyright = True
+
+# If true, an OpenSearch description file will be output, and all pages will
+# contain a <link> tag referring to it.  The value of this option must be the
+# base URL from which the finished HTML is served.
+#html_use_opensearch = ''
+
+# This is the file name suffix for HTML files (e.g. ".xhtml").
+#html_file_suffix = None
+
+# Language to be used for generating the HTML full-text search index.
+# Sphinx supports the following languages:
+#   'da', 'de', 'en', 'es', 'fi', 'fr', 'hu', 'it', 'ja'
+#   'nl', 'no', 'pt', 'ro', 'ru', 'sv', 'tr', 'zh'
+#html_search_language = 'en'
+
+# A dictionary with options for the search language support, empty by default.
+# 'ja' uses this config value.
+# 'zh' user can custom change `jieba` dictionary path.
+#html_search_options = {'type': 'default'}
+
+# The name of a javascript file (relative to the configuration directory) that
+# implements a search results scorer. If empty, the default will be used.
+#html_search_scorer = 'scorer.js'
+
+# Output file base name for HTML help builder.
+htmlhelp_basename = 'PostgRESTdoc'
+
+# -- Options for LaTeX output ---------------------------------------------
+
+latex_elements = {
+# The paper size ('letterpaper' or 'a4paper').
+#'papersize': 'letterpaper',
+
+# The font size ('10pt', '11pt' or '12pt').
+#'pointsize': '10pt',
+
+# Additional stuff for the LaTeX preamble.
+#'preamble': '',
+
+# Latex figure (float) alignment
+#'figure_align': 'htbp',
+}
+
+# Grouping the document tree into LaTeX files. List of tuples
+# (source start file, target name, title,
+#  author, documentclass [howto, manual, or own class]).
+latex_documents = [
+    (master_doc, 'PostgREST.tex', u'PostgREST Documentation',
+     u'Joe Nelson', 'manual'),
+]
+
+# The name of an image file (relative to this directory) to place at the top of
+# the title page.
+#latex_logo = None
+
+# For "manual" documents, if this is true, then toplevel headings are parts,
+# not chapters.
+#latex_use_parts = False
+
+# If true, show page references after internal links.
+#latex_show_pagerefs = False
+
+# If true, show URL addresses after external links.
+#latex_show_urls = False
+
+# Documents to append as an appendix to all manuals.
+#latex_appendices = []
+
+# If false, no module index is generated.
+#latex_domain_indices = True
+
+
+# -- Options for manual page output ---------------------------------------
+
+# One entry per manual page. List of tuples
+# (source start file, name, description, authors, manual section).
+man_pages = [
+    (master_doc, 'postgrest', u'PostgREST Documentation',
+     [author], 1)
+]
+
+# If true, show URL addresses after external links.
+#man_show_urls = False
+
+
+# -- Options for Texinfo output -------------------------------------------
+
+# Grouping the document tree into Texinfo files. List of tuples
+# (source start file, target name, title, author,
+#  dir menu entry, description, category)
+texinfo_documents = [
+    (master_doc, 'PostgREST', u'PostgREST Documentation',
+     author, 'PostgREST', 'One line description of project.',
+     'Miscellaneous'),
+]
+
+# Documents to append as an appendix to all manuals.
+#texinfo_appendices = []
+
+# If false, no module index is generated.
+#texinfo_domain_indices = True
+
+# How to display URL addresses: 'footnote', 'no', or 'inline'.
+#texinfo_show_urls = 'footnote'
+
+# If true, do not generate a @detailmenu in the "Top" node's menu.
+#texinfo_no_detailmenu = False
diff --git a/index.rst b/index.rst
new file mode 100644
index 000000000..8c055322d
--- /dev/null
+++ b/index.rst
@@ -0,0 +1,22 @@
+.. PostgREST documentation master file, created by
+   sphinx-quickstart on Sun Oct  9 16:53:00 2016.
+   You can adapt this file completely to your liking, but it should at least
+   contain the root `toctree` directive.
+
+Welcome to PostgREST's documentation!
+=====================================
+
+Contents:
+
+.. toctree::
+   :maxdepth: 2
+
+
+
+Indices and tables
+==================
+
+* :ref:`genindex`
+* :ref:`modindex`
+* :ref:`search`
+

From debf4dc7153f302911e70b0c8e5affbcc8ed7e46 Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Sun, 9 Oct 2016 22:16:13 -0700
Subject: [PATCH 002/652] Adjustment

---
 index.rst | 10 ----------
 1 file changed, 10 deletions(-)

diff --git a/index.rst b/index.rst
index 8c055322d..23b0de321 100644
--- a/index.rst
+++ b/index.rst
@@ -10,13 +10,3 @@ Contents:
 
 .. toctree::
    :maxdepth: 2
-
-
-
-Indices and tables
-==================
-
-* :ref:`genindex`
-* :ref:`modindex`
-* :ref:`search`
-

From 577cf29f64aa68c5a1c89e1b8d84528ed6a1cd37 Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Mon, 10 Oct 2016 01:15:33 -0700
Subject: [PATCH 003/652] Intro section

---
 _static/logo.png | Bin 0 -> 8149 bytes
 index.rst        |  55 +++++++++++++++++++++++-----
 intro.rst        |  92 +++++++++++++++++++++++++++++++++++++++++++++++
 3 files changed, 138 insertions(+), 9 deletions(-)
 create mode 100644 _static/logo.png
 create mode 100644 intro.rst

diff --git a/_static/logo.png b/_static/logo.png
new file mode 100644
index 0000000000000000000000000000000000000000..030673cfbaa40c2bc994436ff1aa67cab3a01d0e
GIT binary patch
literal 8149
zcmeAS@N?(olHy`uVBq!ia0y~yVAf|~VA#mP%)r3#tGs9p0|R4TfKQ04dx1|+PY(kF
z!@Ya=7#JA#?%n(0!v_Wi1~xXfZ{NP%ym|A?nKO?cKmPXZ+wR@FKY_uwZ{NOt{rc+F
zs~0a`eE9I;_3PJPzkdDv`SX`AUp{~S{O;Ymw{PFR2ZJwPzI^)h>HGKZT3IuG{`~Rl
z=TAuyvERRcYh+HBk&t9yVEFd!n|j9dFJHd={rmUBr!Ok$)84&%_wnN=M+b-encH8z
zdeyLGzn-?vrAwESlasGKc(H%q{(a}~%$hk%K~^p<HrCR@BDigJS!t<B;oQuO3=R&C
z+qZA~`1r*2tUrACuv^_yb!C;QQ>Q+A_RQGGNI!3uedVImNt+|WBdV&Z?mm0#=IVC;
z{{5z=riyvHw{P1P6cn^}&Dy@czRjC9y?pnnAitnz&C#>Bo;-g1c=__>r%#=F{ObLx
zLsza}zrK6-?)kgUb#``cJ$ZB9ym`lu9k(o<f9~A**4Ea=ix$<^)=t}UN<ctx;)dgg
zFF!bW{ZV6GeSJeiNqObV3mWqo7#I{wg8YIRgqc0q>|z)>zuM>pzf{=0{{6ke%y|_T
z4qiWA*V;4r?D?Ysk3KRm$bR*7aSW-5OHyF$X$myp`cZL%qdCxk%Z<_8nwgndT)#oq
z`jxL#&m)6<C21*~=EsiCj@@gk^K}c$?t?cBgaoYSa2U*;;H%qN?4ZUr{i>w>zK>3i
zdAF!U?|Jcg_bc&=Pw%UJY#45brRh%IAl?wSre!a~jk<)jk>z)|9rPLGmhTmBh-0W?
ze8IW^%!sVdc*IySWrsM!7p4m!6?>tK*=lkPy4rVPTm~@1TW$6daR%xCo5dSy8E=R)
zytDnnv_YTYPUwAohToISJsH0|nq|#$ft$g+QlDYd_Y2$y{!29Eys713_^q_*_3uhU
zZKmIwCLW4AvcKZ;+Pyz=gqZJa`KB~?*}t&8eX}JR;_fVb_4D)UO>XbQU$K5kTDo4`
zGV8U*ni#)tTWa^1NHoM1T~?S?|MI%_=WW;2yqg(cJk_~jDRJ9BKCZ53%hya#1BSgP
zmaGa-yja-vQ0Kz3{Z0lC_T~qv+h3adGV|`{@7(u8+IM$0G44&dbhFzhE6VQ2#qU+-
zb-~RuJK1-<)_i;P#O77otRA;rmMD+<^~A?VX@Pk5;UyDd*l&H=f7|bW*`=$WY|<IN
zr3#+p4~-Y^>I=8GUH58tqeMe(q>ER(l&|)BnfEGtI=*ahF-V9Po4nX|E$=bg+xPTq
z9(b^QOSPQo_RCDCs_gwS`AmaiUz-c3r+I3AU+xy4FTL%q#PoBI`%)b2?(RLYVD;G#
zM;?28oBqV*$@%S1j{ISs{qo(>KS}TR%oh&d#<FK+R`A<v?{0@gORqXIF<|?JQ~^h}
z97eN)3Y!`gB{py#Yv}!aBmdv;w`|FZE}wqvd%ah=wmggNO8d6@3+2&wYkx5;pYd$s
z&7A$4U5yg1Gc)|UkbA&s&E^t2IlIbbA?@PNRn@tp%%d5zYkt1`eB#nl8_{JKUj556
zIyuMre$+X=Z{B_h&%VsBxqYKPI#Hk3cH-hWXTPO(HQOwAvk_Nq{G!HNySqTq$lf^N
z*GE^bhXJo|Br5-yqui74`os1|(VtY^zB_@de&yEPcT)JDD$Q@u%{yml4&S|H&E-#m
z{8bySeViV<qU+j^Pr=FikG`Asyt~)nw94+^u|4`nKKNRwrR!FFRXuv!?D34BN^jhA
zOs+WYIv4oD!dd^rwi9;F>Xo+(L)LzL`n+xLp`v5vd&Pg8w3vLrOQ7!lK8v*PJC^gm
z|C~Cf{DS$;j^~L#YW#kbeGKrp`NGw%{-V~0v`<H+;u~U5>a$yT*Dn0<^SP~L`u8`l
zpKsXE=KtYn;Eni$KTb~G<lFnvbC&+RzrIs4?o^&~v@3aX^Sv>{8xgi62aXo@sbBy6
z`14cwk~6n|JpOp;YC}TX*Nydtjrw!<Uj0${^KE2v{}eqzzb{_|3j<#twT^H-&idi@
z?;z0|q6SG1H1m~ZdK2Gq|NnA&o2%~f{8dL=C-1w=kYVfd<K?G?bFV)9G9mt;^1nH+
zlc(ti2_6q?`k4Fw?Zl&w{n2{tTDH?FS=T)Yo$~kPJdXW4_0L`HRjBFyaGBM9#_ytI
zMza&of3~^1RkX+V(9t7q6%kpJmhH2cIbZ0s_{Y`Ns)lPO{1xY&|5^K(VXQ~s>UKu<
z3{{y^`$8T}uD#gsmvis${cqoK^Su19>(@8&^J&idGmeX&7I*uS)>ARN|40AYqbG~=
zUVM6d<6zQ;?!+(qG^#F$EZxCA|4nz>i^ne~Y}l>uG<989Z+M%dz0=$1j4d^Wj2oEp
zWz#d8HnG`DmY<67J;da_uchgr_gni<YO-gQoIWmA=3(Ieu=>ZLck(wq8a8a!*S(}T
zpX<P@YwEvNR2|ER*f&Gyp~&%FOF7m@3w<?+?GfH}*uW}&hx2bCg|D}?oL;#8nqcri
z>J4wq{x1E1t_cl~udUnXP%p-x{bu$Dvvzl*?fTR73r;><aXCG@rJp75(2tK^Dc628
z9eaJRnss3gzg?KK!Rog44;SytU_4%X;rFJa>zj&WwcjdVVn02-{-5=u)A4_;lihCY
zkWSZrtUOn5<>$RR&vq&8IW5kn#o2P<Me@EYA%1@UtoCut`~LIN{9j6IGxL^utnyx!
zk`}KMe?atTzv<u0681OO?=Z|VIFR%G=#8K+hmO}c?q8?BHnui#Npkx(mb3$v&puYv
z=o<e{`l+<Ua9?Rvhu*HM8wKj#Fdg1=UHqGyn}*E~m-rq=x#z#H9q;>gy@j()hV8WY
z=7ZNPWQuH`<ZyooeJ)?9qx+{pKR{D?$+sK+-&|)GT6Czszgw?p`>y3__sfR8I()}p
z9_nvX4$3<AVIj*I{vVIl7JGQs?bE+iRh0LKFFs?&+YF7Sr`>|5#ZO!@6koF1iTjD3
zR%FaOhR@FXL^}1SuPJNXDjX3Z$@5K<A-b0Ff>QbSqmfTvmZWs+AM^clGI)L@-`1Lq
zHH<F>9<N?1Q`&y~r|e=C1N$f5%g!l&ot3(5Lr?aE9D%0lxJ1q7iK$Bt`c5{xmZ$Y7
zh9yv>RqdmyMo`O69jA1uTUV6IKc(6%y#1SJ^KSh!um4*s@t@aCyS=gYwD{(UeGi47
z&&(C9`!uKK$abdB$@_TjaHM{}@iKd(`KtC*mkEbECr7b4bQi0-yOu{dvY5W<D|^h7
zE8_q9>#k@=ubqA$_#4`smS5EKcb=NF^X?ZWWi$81Z97cw7tMLJeD%rqA6e%q+xP}P
zQy08{v@*U$^issWKZmbO|8I2jr+D?`!>;cQwwGM<<a$_e{G3#SY)ztmXiMDwip=)`
zZZho}U*fmkC^>k0i>B9YlPRC(x=0;;p<L<wn6tl#e?{coU7K$BzK}YialBQf;;U<m
z=!Qo>CGYn6+v?8|_pZFQ`TQQC6@D^TBtBhNc~mLE{>x8{;mnKfr`-j$3kp|BJ^NK+
zYASj7E3-1Me$IDS8yAkb9bZBZ_j*iGYUkW^YU1@*wQO;vo)gTj%I@8}YnRoI@98gh
z3ko{yS$?oYfm2w>{D8wVm)IBX4+Wn4y{h>*rHAF1v;VzgpSL}JezbE>?%~4!4`-h~
zR~xV8o-<R{>zu5sP5NVp?!>dtyPtMXInZ6;xoh!S<x5$Qr`o8!jjnBM>zPpF8FeIY
znzH`i@Pl4zlXvFbnJ&7>@izBn-Jq6$y*DSaSUZ;7t(n?sP`>2s?UO0Hv?gUsc6pR!
zYO93x#j!q~>7#x#w_Py&o$imM(@(<-Qk2VoseHP?K388_Vc(g=qnB=!+noGpoO#0D
z{paJ&h4BoNe<uA@GV{A<F{N<L#Z|XTKBUWvs=xE^nUiMLug|dN3Wst_hM}5AT4vt=
zrKj!cZMv4foErV>%2BmWxqn=lv+9H1oa*onX<%gdT~gb_y5Q_1-K%Hn-zLTXo>=9w
zASw29>jCKvfk9Ub<-hEEa?QEsB12dPtKK=TiON>T&MdL)nqzByFlJxGXYsJZb;8GD
zHb1@ibJFeoNBZ~1M|`{cS^W9}vCxyH-@j<C>X=Y;Bk~VV@k=+4brZEGxE<lxotJ0l
z<dM7K^y`xXDruVECD+O)#4gtgn(&PKy}_rfGb%<`uC}k7XTSdOp8by=G;c2PTRQWC
zVq4bC?=OS?>c*d8z0IAxM7-_%^t_GM%xBzI=xe;W9$d1z<5iJo?~Y)BPx__Irjmtq
z`UZz=ol0w!zijIGt)=%{X{%++t+?71uUQn&iYv8F47q1Ed-Ls8++P!asQ<S14r1D=
z^JTt%jo>B4xB8p%qvCbqU&M9=u6-YQ=XU<jLXU)Pznp3wOjDeGB_Mxawq)G7F2;|n
zik2sg4s|N33-5V){P;GOs`v!`o(a`I52zhE&ArcJmG1HvSN><Rp4cI9@}t?InJaGB
zSK2deP}p*=o%PcFn!RT~wbs~wy8p*K+3bN;_tew-wk3K_s_fp8d;cBx!3Et~zjsT{
zDAQIh(O-8#c%k6LLKhtgow={y&YNd8{kZtHg=g#*u=|znvj~^FDDvy@pD!s+40eyY
zuO(;CSneElaL><^)AV^%QrEDUChiM}Uu69=$S&s5mW|JuW^C2=*qaira#}&8$S^0^
z@l^Qqe}WxbZ{K`cBk^%s^i;27ajV(ldl-zDneWIwQFlRn?S4-G&8-JMJ>^gP+Inuq
z##wLVKYxC{ai6@n>y3lcqkrG(`ccp{!8-4aOU=UxyO}pHnVF%h$CNQYYNEZGYv(k{
zh>0wFkBaL`_H60i{hO)f?8#Is%QYX5_8eN_GUL)}gFh+-U7M%I*8JRM=kcYuq-oQq
z;>cY!Vmz03_E~@Vs&%8gJgxhvTl|4gmlN-eem&wU-2H>;dF3pD&BcEWHF!DiCnT2|
z*@ZG~{>^mjN0MLSlh->9wiOzQ?M|_O!o8zQMto||+i&Zdo@7`3wVD;WOq-?am0t_r
z<%3;E)_qWI+_5d?O?=n8C)~OB=giOX`M=yz`uAqpx!H`@ek8f+bsFs5X|T^nOx{TT
z^U-MaeI3Wxs+}u?7nYaHbDdswD6qq{-BFNd-xa}f4MR4Q__7uD)A--KIlY}T|M#QY
z0)bCo@`*-#77zZ-WXhVJ?<H7g*7&pQDq~Gf4QH-&yadDU7i+&rz5JbFyIQN`@snu%
zH5GE*@BZ1OJ?WhH&*;adpFh`Lh>}+L@#E%C<1W*EfBGY9H=4_J8Z@pn*x7B{l5hWn
zTRCUe{*2q23<oxqg{Mu}lXbd;)iG+``|X0Oq<=U1F};0ux?r{bvB#%x{W;R{^mLE?
zpS_*6j4Q>u9_}<qsrw_VZT>+p{z2X2UlOj{!w)rG;Ze@&yeFP`WUbb`gYQ!RtL!s4
z*R)P%4dX@U+w;#F*Ke$0RIUz8>JI8Nd-FVG#vRv~ql)6(r}rG5zPtCg{-o=#r%s#o
zz|S>f%M<R~Aro&Id@EkM=lJyEW_{`T_kXM^4zApEv*yI7r|UcQm;L!SeO=GS-&*&w
zzD7UV&Y_!obN`_qR|Lex%fByGzZ`6!ZRRd$CAuI?=hu2(PrbY&uCWU~v$7@ba@Zy_
zOLNiPnnvzdr$3j)Z{f5*d+AQQ@6#Fm(aSy_{p6~3?2C=vF$1q^X8zU?yV4ll8yxBD
z1dc5^_~Ea<_3uYqg&Ngo_2O+^j<8(2=Q5{g`<)lQ1u-X9e{U6hsh)Lu-<_53KdNru
zzghpnCyNz=su9t4%_T|m{urJX|9I_f*>v%L1rq6#*Dkkt|A2EdbI|0!jXfJ<uC<G?
zZ&<C*Qxe+Z<gIz)(A+MI{oEO1s^uDb?{7*Un;uyw?bInPCdM=~O5*JcZtHof8{X{O
z@9!qils?tqK+FU;yY;FuQTt{%NKEfr(sj6cX;bfYacTY7q8&CD+Py$k{yhO(-^fUt
z?MkJa*Qe{JFYb@6&o=K!T%P}V`p+lsGMXGyXA5zE*k$%$7kBZ^59{{%beA65R#T_D
z`2W@)?kV?oPI<upM(6&eXP4{dJng=z_Ggm(>XgVciI)#oN0l4OoZ7H~;WJ;n#Exan
z4u6BJ#dm&pY6)-?x^U55G1ok5IYYr@ha(GD>VN6EvG&BJYu7)YDB3Od-Kfm^^(vFU
zTI%=T?ub8GxA^eU=vwdD`WreYIXp^hm;T{dx?g{TLA&U$<XPwUN5tIx^tAr$^tpdJ
z_%qf$HL{%lc?!qnM%n9=dpUY_Iwv}_Pygt(RA^6jaQ&3YH-FaVPuWvA|6Yaa24R)!
z4-VM=eKg~ziu}pNaZ4`=t~Aisa?eg~@r#R#Ta?OL_;6izc>FTy389Jayx(Oo@62?+
zus%pXr$#SGw(tD!DW5-XkeV4+>M~FA*eBM1m*?!;us!0O&CRe0)kXJ`VtNku|2ouh
zHnLX2)O$f`?1kHWcFa>(IK4S3c6)i|Ax{nO`)<|-=gSn|KgrqVlkW2%OC<EjS;wN?
z$2+WlF)h84RQs>@%==$2EvK(Ej4yJZY?E3v<+oAsih^?y`vlIs<n~Z}lYeo!p|U%F
z$c&==r6LoaS-fMNarVxZuV0TlnQ}gpP4T<i5$#gA|LWz2C9_+C_b;=TRS2%u+!g8?
z_@pSKM3*sR-vloY>DQmdJsj*DYERbRbW6M@$nkvN%fhs-Fx$fqPx!88e8D)qz2=fs
zyboi=>57n3x5Ew!CtfmKV|GL|%E4Gf>)ydI+4b(O+j}@R?fxh9g()M~=Z{_#-|3D;
zyG~!+-MC=uw_B-~7O8wou-p6b*!s!WPsSZ(W!U^DWxq%I^H!%s4WrjPH3a50HU@3o
z(7XI+EPql$gvZktRS$VSz0wGh{Vr)B_0z%bXF{)j8iP?@P1G!%PN#+cpPie-D{6l!
zU4ywP>`n#qfu`&UIYN_|^>y?u7%waKPI<6E`PFsdBV3s)c~ykIZZlXmRd@MQ#vNw0
zngKI-GXxKnN$?i1eQQtO_n719jq<XOYxNn{{AWx%AQc}|`e*O{9|`{2mzM^u{3GZu
zf2qdlgW%%qggTiU5%cGp1@)}GELLPH+<!T8zo9t8-9z(t73gs+DsEGFk+a?4Wlem>
zW0%z*%<3N&ALqaC^|#Lc!`p=h8$a4T=Xf05`O~IlqRw^R)g?Iru3q92-REWF|MeP5
zeq&y9Onyu5sY30061DmB=a{jrZCHQn)iHy+MgMIcaIN*YBjTTSe3m^o_vBwp<}&Zt
zKK=2T{y1pQ+6R&=?qxU%Jal2T+rDT)&xM5?zq(KAJgTei*VTz%qU5)wCOG~_&4Z|8
z5<8v$B}pXqoDPrFxxe9z`a;#bQ@(!-XYRG~J@kjS&XD`G_y+w?-pXRx=h!6Nw}u`&
z_0l1wVItezN6N<{cK&hg{yRld|MnC?uJXNaY}T{wIeTPJ-p~0G+^5AAXI?XO+VN)Y
zxr86f8=GFgY&LoN;DL$Y;T?M<ZhbwJ-qWzfVSkj*^(x6j4~%4kGS$+LU3zMM;FGIX
zGV@C@UEwDSS`*Da&e&4lbpL^D>hhb6Hw_fEFJJ%kGJkP*tLZ+I{d$4Nyxz}Trs@`T
z-;l31_PG4z`Nfl)rr4BZUp+hVk=>ilX?oN2=NH%A->3e#<-3ymYa5=Bm@k_)OgsOp
z_vnw*Dv?#fUHUIi?>J#Jzx!x?K>WWsKa%VgNFTmGH{HzYK+Mq(5C0!8joQGh>?P8;
z?@x(N{J)EP_IapF$ouR!d3oli?Bn&>ts6INs9E?l>_hV8x}`@iwqEc5xX^Uwwhc9r
z{5*#)bN%J3Gg@{?gk2{&G4banwjI;bS&#qxbK|RR+h)^=H_ucr|NpsQ!I}H}*DC3J
z`}*zD2hO*j_&-h*<!&&Yt{d;ec}DAtc+Q`c7d9P<OW9{Xjx|4ME56w{NK@d2Fnctk
zQ+&da1OJM<HP5d0`I6@@S@Cwq?Fln9XF9h1(M@A(-oY(lcrQ^S>FvK)?c2T`J-0@=
z_wL)tQnBI^vVu+Fk{fCal`n*BnDeGOqw=3hdw1LoiC9a`>B7@D6u*C5V<%dfwNd<w
z&7Sj`wo5<#WMA>@^JLF|Hze0zzdScQ-e}?V_wJMU4u2P7zUN%7bn%^|S|L;L#=HOC
z_5Wa+yTUrq{tolst3CzoH9-Zg-Nl9rie9$vY*PN-V7giV|B)F{5=*ar^3^j+)p>vL
z*^B?l*L&vQKC;o`-|{;v`jho~CQTHP+T7A8z}Kg<Lsw=8n}+U=W2FhXlYNbL{{N@)
zX35*TCFRTP(>@=Q^YnlJyW-Oe;{^xXwnm@Hc4*LiwlE@aLzAJ?9zi>kQ?C9uzfa50
zdlw(CxAf`k{_EGjpZfXq`0vmDFD`$5`}Fr~Yt{MFsx6QC?{RqTI*)t7tcmvDO@!38
z6+F(}^l+n%P@~hw7fz3welQ3wxVX9}?n{VB)0NA==G+wFGv&5)@?FHt^dNQ($Hjeh
z0-v3#B95LoU1u6#Q2r%RqEhg>?G&S|DaTJf&#nKx`g2o4Y1x<W@1D%t|Kz`IyM5nL
z=I9ef3K`tH3mT=07YFyU9bUCU^#8$kR}35Xtz`=Tl2BP$_vhvI=*-GWU2lf?I9=7w
z(@S^X-{%qZdQNEZB~y{-Y=QEXC-=&pW;_ycOYLo=_}$HIuCgy)2YEGTT`;_IaMgzA
z-HPAbBQtJ%oYN%z!gXr!tx}enxJ3_+y4^Sz^yd7kMXW1$cdv-f)mr3L9mclK=Kj>%
zQtR2Q)g4YJzWDxN-CKo6d)B0dPH>v<``GeJ^u*@Rmv{?36?xwzwlbct6#Xr~v{gKA
z-cHAS*}tFdwd$*XHazrqdajcd#Ii2aJZ<T!nbS*EzQsJ6v1*=ZtXP8FQWLl5H(8GT
zK0V!Ee*L>APiJ4AeY^O}>7%!A$BVQyd}cDZcy5kSkBQUjHFh7Eu9V%;ST;v|bKY4E
zn-7~l=~NqfZd$=3yMD!un0XO1-x{9vI}`Qd)}qdtdf)Fz8_HhGQC5(wTzSa#*@VzX
zA~VAtZ@n(5`TS^R#<@48W^en`b-G{MaPzF6ShCHGrBT4@<gIOI0&YsSi3i)yzNPx)
zpk8svo_SfVC&NCa+`Vzq>D%PB3!PWp?0www;n3;N20tcx=9ZPD{C%v!{r}5-gNk*A
z#fs7=SD8lm+vFdT-1IE>(!*1CeBR{T*_|?Jwx@R0>G1II>G2}}Y|2Ut3!5+geR+HJ
z(?)TX_vdONP2J-TxyQxi&%PCRs&eBQo!N&Q#m}sqqShJaoHsQ{%Cf{rwxBL;LBcI>
zr3K%(v(Mg~|By9be2w?suNCi3%$VtFx8F_c>{_<l^ZXggrs)Y@4hb}jmC0Yu%Xc=*
z=%UH2XtxuoNs-no7Hi0aKi>K2Oc7&7v{g>ywP||(Hx_8D+_#NqrHIsxjg_|z|F%wl
zp2+og;lnG>{y+S`^|<|vw)`2v#bS>uW)*(!e6GRqDrehgwZxRvnah_pG>Ak_-PpOs
ze*c{KJ&&LNJ^hr^_TjI|ySuy37d%)hSy{O6sjHUm`7diG{kC0Pa`FF%AO^0Av@G{T
zYu&!DoBu?pIC6;1ii|XVF;j8-Ngm<jCuj02>j#D}6L1rqsJ14cYBI0s^P|&a_1%ip
zD>la1CG4qdzhY=yy)mfyr%<6%X^iisQ#KxpVxP^J)_-ly)Watf_hnjzF+4orBcH!q
z?)-+ThfgCV%(mDYe7?ST@n(77Tbc`+19=jcTvU2_)nLi02dtW}eY!O-noR#~;B@H_
z*NL(xtVeb}J^gg<ndm~6<LWP-{Jpw=|6^BU=c|=ZSU)^?T6I{?Kt5RVU%$AD>9v?Q
zp;kZp#8W+P@%}!={iJhQtFrz)ULl6UMZYRiO@+9uS5GXz<`txDeB@~3bd$}&ar>E$
zeAf!}%rl+fHt|+8Tct#0=F@4m6C6Gy>Gs`Dc`#?UEw{j;x@Q*@K2|by&1>HK!D;W}
z`CIQ-zvSGdxFM2#@AD^>o!|F3oL?i<kpF4V$I1y?5(|Hp)bE`3UN3*i)79nc<Lmzv
z)K>le_4c<g%k$~|=aVaPd5x!C%`*A)sLF6!=i{ZTGADhMIJnAIpYwUEsEtxr8T09<
zw)(u!UB&m<Y^bq)x+kLXj?ua9*}l9E%KD;Wx#u3mitOAmr(DNA&R15pe2tdPx$cT9
zhZv)u@9w?w{PUS*izc1XPSOq%zcwL#&D7m1_ZA8-7x_N@?UpR9ZHJ~#KfjDo=Tm6N
z!_MWVm7Wh;r$0~dTK#{`SO02;=YCJ#a3t*QI>Rt|p}?LMw=Gx}^onIZ?Ra*sh9hTs
z_k%xQ;(q=4$2NEW<Fa25-+g%$zkNRA!R42;9WI@k>2cxM#cj7&rNjp4-3ZZkm=Hd>
zP-oKd$J@epEo3u4=jtJ2smgl&<kQ~8@~_XiJ-T<TtZ7GcXRKG|p2H2RmxwxX$oEVX
zKb75Y?!bJOGlXM%U_)jct8uonc_{CKvZyC7HWY11Y}%n&o62@<)`fF(SPQjw7EXB_
z)6HDnJZo)Ymg=*spSqtdu#Vc}xMI8V=8A_;XG)x~&laj#+Sm4bx`>Gim;5JvD-#A4
zmB#`C2N%e&v}d|XIQ?LDHTbpv)rzi%n%9GmZTvp>xo3kbZ_<ZcnSevP{o}0sx&Fj5
zF)T__4CZ8FiCF58C3Gv2%l|94(@Tl1`aX=Tjho_mJC-Utxz4W-VLIgA@?!y`%&JrM
zH@7BFWouGkI2_2LtfAf^u<l|aAGdYx6a}+NR_oO_j(uP6`a$4`fu%>+lYQ$WckE3|
ztY3E1BIoUfxD$0}zgAB)bUEe_S$Fp5<D{AY|4+2{F8O@@=;zz3_CMM$z4uS?ldtY)
zZ0o|8iGRur-Cut4>G9vEpF8)=joWd)C#bAE_Sn3O+%H(aFjZwPV%y?A`y104xBCzQ
z#=Q-34*Hu{FrIx;4Ph@3zrg)sX|EKR2I&C_=PhP4x%@sZZxLHe-hS~5+!LCs7(b_O
z3e<Oaw@%z3{y<IUBDR?MGV}eGg{KEH>Ydwv<j9c&2M%c{pX?Ox0Zq=bh`LD3ydfzu
zBf?@w<VVOft-OPb&VxUPjvPAFC=XVoaI>{>?%d8!R(lE7#R(z|$BrC1$H4aHjZeiv
j4GGr84RdAZ#4@O^wUb${QZt2tfq}u()z4*}Q$iB}o>xQ$

literal 0
HcmV?d00001

diff --git a/index.rst b/index.rst
index 23b0de321..c3fbe2bcb 100644
--- a/index.rst
+++ b/index.rst
@@ -1,12 +1,49 @@
-.. PostgREST documentation master file, created by
-   sphinx-quickstart on Sun Oct  9 16:53:00 2016.
-   You can adapt this file completely to your liking, but it should at least
-   contain the root `toctree` directive.
-
-Welcome to PostgREST's documentation!
-=====================================
-
-Contents:
+.. image:: _static/logo.png
 
 .. toctree::
    :maxdepth: 2
+
+.. toctree::
+   :caption: What is PostgREST?
+
+   intro.rst
+
+.. Installation
+..   Binary Release
+..   Build from Source
+..   Docker
+.. API
+..   Tables and Views
+..     Filtering
+..     Ordering
+..     Limits and Pagination
+..     Counting
+..     Response Format
+..     Singular or Plural
+..   OpenAPI Support
+..   Resource Embedding
+..   Query Limitations
+..   Stored Procedures
+..   Insertions / Updates
+..     Getting Results
+..     Bulk Insert
+..   Deletions
+.. Authentication
+..   Overview of Role System
+..   JSON Web Tokens
+..     Internal Generation
+..     External Generation
+..   SSL
+..   Custom Validation
+..   Schema Isolation
+..   User Management
+..     Logins
+..     Password Reset
+.. Administration
+..   Block full-table operations
+..   Alternate URL structure
+..   API Versioning
+..   HTTP Caching
+..   Database Caching
+..   Debugging
+..     (viewing db logs)
diff --git a/intro.rst b/intro.rst
new file mode 100644
index 000000000..4d070f6fc
--- /dev/null
+++ b/intro.rst
@@ -0,0 +1,92 @@
+Motivation
+##########
+
+PostgREST is a standalone web server that turns your PostgreSQL database directly into a RESTful API. The structural constraints and permissions in the database determine the API endpoints and operations.
+
+Using PostgREST is an alternative to manual CRUD programming. Custom API servers suffer problems. Writing business logic often duplicates, ignores or hobbles database structure. Object-relational mapping is a leaky abstraction leading to slow imperative code. The PostgREST philosophy establishes a single declarative source of truth: the data itself.
+
+Declarative Programming
+-----------------------
+
+It's easier to ask PostgreSQL to join data for you and let its query planner figure out the details than to loop through rows yourself. It's easier to assign permissions to db objects than to add guards in controllers. (This is especially true for cascading permissions in data dependencies.) It's easier set constraints than to litter code with sanity checks.
+
+Leakproof Abstraction
+---------------------
+
+There is no ORM involved. Creating new views happens in SQL with known performance implications. A database administrator can now create an API from scratch with no custom programming.
+
+Embracing the Relational Model
+------------------------------
+
+In 1970 E. F. Codd criticized the then-dominant hierarchical model of databases in his article A Relational Model of Data for Large Shared Data Banks. Reading the article reveals a striking similarity between hierarchical databases and nested http routes. With PostgREST we attempt to use flexible filtering and embedding rather than nested routes.
+
+One Thing Well
+--------------
+
+PostgREST has a focused scope. It works well with other tools like Nginx. This forces you to cleanly separate the data-centric CRUD operations from other concerns. Use a collection of sharp tools rather than building a big ball of mud.
+
+Shared Improvements
+-------------------
+
+As with any open source project, we all gain from features and fixes in the tool. It's more beneficial than improvements locked inextricably within custom codebases.
+
+Ecosystem
+#########
+
+PostgREST has a growing ecosystem of examples, and libraries, experiments, and users. Here is a selection.
+
+Client-Side Libraries
+---------------------
+
+* `hugomrdias/postgrest-url <https://github.com/hugomrdias/postgrest-url>`_ - JS, just for generating query URLs
+* `john-kelly/elm-postgrest <https://github.com/john-kelly/elm-postgrest>`_ - Elm
+* `mithril.postgrest <https://github.com/catarse/mithril.postgrest>`_ - JS, Mithril
+* `thejettdurham/postgrest-sharp-client <https://github.com/thejettdurham/postgrest-sharp-client>`_ - C#, RestSharp
+* `lewisjared/postgrest-request <https://github.com/lewisjared/postgrest-request>`_ - JS, SuperAgent
+* `JarvusInnovations/jarvus-postgrest-apikit <https://github.com/JarvusInnovations/jarvus-postgrest-apikit>`_ - JS, Sencha framework
+* `davidthewatson/postgrest_python_requests_client <https://github.com/davidthewatson/postgrest_python_requests_client>`_ - Python
+* `calebmer/postgrest-client <https://github.com/calebmer/postgrest-client>`_ - JS
+
+Extensions
+----------
+
+* `diogob/postgrest-ws <https://github.com/diogob/postgrest-ws>`_ - expose web sockets for PostgreSQL's LISTEN/NOTIFY
+* `srid/spas <https://github.com/srid/spas>`_ - allow file uploads and basic auth
+* `svmnotn/postgrest-auth <https://github.com/svmnotn/postgrest-auth>`_ - OAuth2-inspired external auth server
+* `nblumoe/postgrest-oauth <https://github.com/nblumoe/postgrest-oauth>`_ - OAuth2 WAI middleware
+
+Example Apps
+------------
+
+* `CodeforAustralia/heritage-near-me <https://github.com/CodeforAustralia/heritage-near-me>`_ - Elm and PostgREST with PostGIS
+* `timwis/handsontable-postgrest <https://github.com/timwis/handsontable-postgrest>`_ - An excel-like database table editor
+* `Recmo/PostgrestSkeleton <https://github.com/Recmo/PostgrestSkeleton>`_ - Docker Compose, PostgREST, Nginx and Auth0
+* `benoror/ember-postgrest-dynamic-ui <https://github.com/benoror/ember-postgrest-dynamic-ui>`_ - generating Ember forms to edit data
+* `ruslantalpa/blogdemo <https://github.com/ruslantalpa/blogdemo>`_ - blog api demo in a vagrant image
+* `timwis/ext-postgrest-crud <https://github.com/timwis/ext-postgrest-crud>`_ - browser-based spreadsheet
+* `srid/chronicle <https://github.com/srid/chronicle>`_ - tracking a tree of personal memories
+* `diogob/elm-workshop <https://github.com/diogob/elm-workshop>`_ - building a simple database query UI
+* `marmelab/ng-admin-postgrest <https://github.com/marmelab/ng-admin-postgrest>`_ - automatic database admin panel
+* `myfreeweb/moneylog <https://github.com/myfreeweb/moneylog>`_ - accounting web app in Polymer + PostgREST
+* `tyrchen/goodfilm <https://github.com/tyrchen/goodfilm>`_ - example film api
+* `begriffs/postgrest-example <https://github.com/begriffs/postgrest-example>`_ - sqitch versioning for API
+
+In Production
+-------------
+
+* `Catarse <https://www.catarse.me/>`_
+* `iAdvize <http://iadvize.com/>`_
+* `Redsmin <https://www.redsmin.com/>`_
+* `Image-charts <https://image-charts.com/>`_
+* `Drip Depot <https://www.dripdepot.com/>`_
+
+Commercial PaaS
+---------------
+
+* `Sub0 <http://graphqlapi.com/>`_ - Automated GraphQL & REST API with built-in caching (powered by PostgREST)
+
+
+Getting Support
+################
+
+The project has a friendly and growing community. Join our `chat room <https://gitter.im/begriffs/postgrest>`_ for discussion and help. You can also report or search for bugs/features on the Github `issues <https://github.com/begriffs/postgrest/issues>`_ page.

From 0060e8906db0e1608767a447485c86883410a6c2 Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Mon, 10 Oct 2016 01:22:52 -0700
Subject: [PATCH 004/652] Allow RTD to use its nicer theme

---
 conf.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/conf.py b/conf.py
index 8c6802b3f..bcc453897 100644
--- a/conf.py
+++ b/conf.py
@@ -108,7 +108,7 @@ todo_include_todos = False
 
 # The theme to use for HTML and HTML Help pages.  See the documentation for
 # a list of builtin themes.
-html_theme = 'alabaster'
+html_theme = 'default'
 
 # Theme options are theme-specific and customize the look and feel of a theme
 # further.  For a list of options available for each theme, see the

From 6e82a55d68bf2657ff44aca34801ded8f695a1c5 Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Mon, 10 Oct 2016 09:53:43 -0700
Subject: [PATCH 005/652] Installation page

---
 index.rst   |  5 ++++
 install.rst | 78 +++++++++++++++++++++++++++++++++++++++++++++++++++++
 2 files changed, 83 insertions(+)
 create mode 100644 install.rst

diff --git a/index.rst b/index.rst
index c3fbe2bcb..7614a96d4 100644
--- a/index.rst
+++ b/index.rst
@@ -8,6 +8,11 @@
 
    intro.rst
 
+.. toctree::
+   :caption: Installation
+
+   install.rst
+
 .. Installation
 ..   Binary Release
 ..   Build from Source
diff --git a/install.rst b/install.rst
new file mode 100644
index 000000000..11fcfe2ac
--- /dev/null
+++ b/install.rst
@@ -0,0 +1,78 @@
+Binary Release
+==============
+
+The `release page <https://github.com/begriffs/postgrest/releases/latest>`_ has precompiled binaries for Mac OS X, Windows, and several Linux distros. Extract the tarball and run the binary inside with the :code:`--help` flag to see usage instructions:
+
+.. code-block:: bash
+
+  # Untar the release (available at https://github.com/begriffs/postgrest/releases/latest)
+
+  $ tar zxf postgrest-[version]-[platform].tar.xz
+
+  # Try running it
+  $ ./postgrest --help
+
+  # You should see a usage help message
+
+Build from Source
+=================
+
+When a prebuilt binary does not exist for your system you can build the project from source. You'll also need to do this if you want to help with development. `Stack <https://github.com/commercialhaskell/stack>`_ makes it easy. It will install any necessary Haskell dependencies on your system.
+
+* `Install Stack <http://docs.haskellstack.org/en/stable/README.html#how-to-install>`_ for your platform
+* Install Library Dependencies
+
+  =====================  ============================
+  Operating System       Dependencies
+  =====================  ============================
+  Ubuntu/Debian          libpq-dev
+  CentOS/Fedora/Red Hat  postgresql-devel, zlib-devel
+  BSD                    postgresql95-server
+  =====================  ============================
+
+* Build and install binary
+
+  .. code-block:: bash
+
+    git clone https://github.com/begriffs/postgrest.git
+    cd postgrest
+    stack build --install-ghc
+    sudo stack install --allow-different-user --local-bin-path /usr/local/bin
+
+* Check that the server is installed: :code:`postgrest --help`.
+
+If you want to run the test suite, stack can do that too: :code:`stack test`.
+
+PostgreSQL dependency
+=====================
+
+To use PostgREST you will need an underlying database (PostgreSQL version 9.3 or greater is required). You can use something like Amazon `RDS <https://aws.amazon.com/rds/>`_ but installing your own locally is cheaper and more convenient for development.
+
+* `Instructions for OS X <http://exponential.io/blog/2015/02/21/install-postgresql-on-mac-os-x-via-brew/>`_
+* `Instructions for Ubuntu 14.04 <https://www.digitalocean.com/community/tutorials/how-to-install-and-use-postgresql-on-ubuntu-14-04>`_
+* `Installer for Windows <http://www.enterprisedb.com/products-services-training/pgdownload#windows>`_
+
+Homebrew
+========
+
+You can use the Homebrew package manager to install PostgREST on Mac
+
+.. code-block:: bash
+
+  # Ensure brew is up to date
+  brew update
+
+  # Check for any problems with brew's setup
+  brew doctor
+
+  # Install the postgrest package
+  brew install postgrest
+
+This will automatically install PostgreSQL as a dependency. The process tends to take up to 15 minutes to install the package and its dependencies.
+
+After installation completes, the tool is added to your $PATH and can be used from anywhere with:
+
+.. code-block:: bash
+
+  postgrest --help
+

From c0791a5f212b764622cacb0bf3681f0fd796b0ce Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Mon, 10 Oct 2016 10:30:31 -0700
Subject: [PATCH 006/652] WIP: api page

---
 api.rst   | 149 ++++++++++++++++++++++++++++++++++++++++++++++++++++++
 index.rst |  25 ++-------
 2 files changed, 154 insertions(+), 20 deletions(-)
 create mode 100644 api.rst

diff --git a/api.rst b/api.rst
new file mode 100644
index 000000000..1e3afb42b
--- /dev/null
+++ b/api.rst
@@ -0,0 +1,149 @@
+Tables and Views
+================
+
+All views and tables in the active schema and accessible by the active database role for a request are available for querying. They are exposed in one-level deep routes. For instance the full contents of a table `people` is returned at
+
+.. code-block:: HTTP
+
+  GET /people
+
+There are no deeply/nested/routes. Each route provides OPTIONS, GET, POST, PATCH, and DELETE verbs depending entirely on database permissions.
+
+.. note::
+
+  Why not provide nested routes? Many APIs allow nesting to retrieve related information, such as :code:`/films/1/director`. We offer a more flexible mechanism (inspired by GraphQL) to embed related information. It can handle one-to-many and many-to-many relationships. This is covered in the section about Embedding.
+
+Filtering
+---------
+
+You can filter result rows by adding conditions on columns, each condition a query string parameter. For instance, to return people aged under 13 years old:
+
+.. code-block:: http
+
+  GET /people?age=lt.13
+
+Adding multiple parameters conjoins the conditions:
+
+.. code-block:: http
+
+  GET /people?age=gte.18&student=is.true
+
+These operators are available:
+
+============  =============================================
+abbreviation  meaning
+============  =============================================
+eq            equals
+gte           greater than or equal
+gt            greater than
+lte           less than or equal
+lt            less than
+neq           not equal
+like          LIKE operator (use * in place of %)
+ilike         ILIKE operator (use * in place of %)
+in            one of a list of values e.g. :code:`?a=in.1,2,3`
+is            checking for exact equality (null,true,false)
+@@            full-text search using to_tsquery
+@>            contains e.g. :code:`?tags=@>.{example, new}`
+<@            contained in e.g. :code:`?values=<@{1,2,3}`
+not           negates another operator, see below
+============  =============================================
+
+
+To negate any operator, prefix it with :code:`not` like :code:`?a=not.eq.2`.
+
+For more complicated filters (such as those involving condition 1 OR condition 2) you will have to create a new view in the database.
+
+.. _computed_cols:
+
+Computed Columns
+~~~~~~~~~~~~~~~~
+
+Filters may be applied to computed columns as well as actual table/view columns, even though the computed columns will not appear in the output. For example, to search first and last names at once we can create a computed column that will not appear in the output but can be used in a filter:
+
+.. code-block:: sql
+
+  CREATE TABLE people (
+    fname text,
+    lname text
+  );
+
+  CREATE FUNCTION full_name(people) RETURNS text AS $$
+    SELECT $1.fname || ' ' || $1.lname;
+  $$ LANGUAGE SQL;
+
+  # (optional) add an index to speed up anticipated query
+  CREATE INDEX people_full_name_idx ON people
+    USING GIN (to_tsvector('english', fname || ' ' || lname));
+
+A full-text search on the computed column:
+
+.. code-block:: http
+
+  GET /people?full_name=@@.Beckett
+
+Ordering
+--------
+
+The reserved word :code:`order` reorders the response rows. It uses a comma-separated list of columns and directions:
+
+.. code-block:: http
+
+  GET /people?order=age.desc,height.asc
+
+If no direction is specified it defaults to ascending order:
+
+.. code-block:: http
+
+  GET /people?order=age
+
+If you care where nulls are sorted, add nullsfirst or nullslast:
+
+.. code-block:: http
+
+  GET /people?order=age.nullsfirst
+  GET /people?order=age.desc.nullslast
+
+To order the embedded items, you need to specify the tree path for the order param like so.
+
+.. code-block:: http
+
+  GET /projects?select=id,name,tasks{id,name}&order=id.asc&tasks.order=name.asc
+
+You can also use :ref:`computed_cols` to order the results, even though the computed columns will not appear in the output.
+
+Limits and Pagination
+---------------------
+
+Counting
+--------
+
+Response Format
+---------------
+
+Singular or Plural
+------------------
+
+OpenAPI Support
+===============
+
+Resource Embedding
+==================
+
+Query Limitations
+=================
+
+Stored Procedures
+=================
+
+Insertions / Updates
+====================
+
+Getting Results
+---------------
+
+Bulk Insert
+-----------
+
+Deletions
+=========
diff --git a/index.rst b/index.rst
index 7614a96d4..4e6582abf 100644
--- a/index.rst
+++ b/index.rst
@@ -13,26 +13,11 @@
 
    install.rst
 
-.. Installation
-..   Binary Release
-..   Build from Source
-..   Docker
-.. API
-..   Tables and Views
-..     Filtering
-..     Ordering
-..     Limits and Pagination
-..     Counting
-..     Response Format
-..     Singular or Plural
-..   OpenAPI Support
-..   Resource Embedding
-..   Query Limitations
-..   Stored Procedures
-..   Insertions / Updates
-..     Getting Results
-..     Bulk Insert
-..   Deletions
+.. toctree::
+   :caption: API
+
+   api.rst
+
 .. Authentication
 ..   Overview of Role System
 ..   JSON Web Tokens

From 5cd719bdfffa4e792036701c9207407b9a5d1fc7 Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Mon, 10 Oct 2016 11:14:11 -0700
Subject: [PATCH 007/652] Limits and offsets

---
 api.rst | 52 ++++++++++++++++++++++++++++++++++++++++++++++++++--
 1 file changed, 50 insertions(+), 2 deletions(-)

diff --git a/api.rst b/api.rst
index 1e3afb42b..706370322 100644
--- a/api.rst
+++ b/api.rst
@@ -115,8 +115,56 @@ You can also use :ref:`computed_cols` to order the results, even though the comp
 Limits and Pagination
 ---------------------
 
-Counting
---------
+PostgREST uses HTTP range headers to describe the size of results. Every response contains the current range and, if requested, the total number of results:
+
+.. code-block:: http
+
+  Range-Unit: items
+  Content-Range: 0-14/*
+
+Here items zero through fourteen are returned. This information is available in every response and can help you render pagination controls on the client. This is an RFC7233-compliant solution that keeps the response JSON cleaner.
+
+There are two ways to apply a limit and offset rows: through request headers or query params. When using headers you specify the range of rows desired. This request gets the first twenty people.
+
+.. code-block:: http
+
+  GET /people
+  Range-Unit: items
+  Range: 0-19
+
+Note that the server may respond with fewer if unable to meet your request:
+
+.. code-block:: http
+
+  Range-Unit: items
+  Content-Range: 0-17/*
+
+You may also request open-ended ranges for an offset with no limit, e.g. :code:`Range: 10-`.
+
+The other way to request a limit or offset is with query pamameters. For example
+
+.. code-block:: http
+
+  GET /people?limit=15&offset=30
+
+This method is also useful for embedded resources, which we will cover in another section. The server always responds with range headers even if you use query parameters to limit the query.
+
+In order to obtain the total size of the table or view (such as when rendering the last page link in a pagination control), specify your preference in a request header:
+
+
+.. code-block:: http
+
+  GET /bigtable
+  Range-Unit: items
+  Range: 0-24
+  Prefer: count=exact
+
+Note that the larger the table the slower this query runs in the database. The server will respond with the selected range and total
+
+.. code-block:: http
+
+  Range-Unit: items
+  Content-Range: 0-24/3573458
 
 Response Format
 ---------------

From 3025e18b3a278fadd456284a2a106e259702ba09 Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Fri, 14 Oct 2016 13:37:51 -0700
Subject: [PATCH 008/652] Alpine linux warning

---
 install.rst | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/install.rst b/install.rst
index 11fcfe2ac..5edde5e55 100644
--- a/install.rst
+++ b/install.rst
@@ -17,6 +17,10 @@ The `release page <https://github.com/begriffs/postgrest/releases/latest>`_ has
 Build from Source
 =================
 
+.. note::
+
+  We discourage building and using PostgREST on **Alpine Linux** because of a reported GHC memory leak on that platform.
+
 When a prebuilt binary does not exist for your system you can build the project from source. You'll also need to do this if you want to help with development. `Stack <https://github.com/commercialhaskell/stack>`_ makes it easy. It will install any necessary Haskell dependencies on your system.
 
 * `Install Stack <http://docs.haskellstack.org/en/stable/README.html#how-to-install>`_ for your platform

From 98a776f2dc6760dfcc2356805147cfc4e68d9faf Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Sat, 15 Oct 2016 16:54:36 -0700
Subject: [PATCH 009/652] Overview of role system

---
 _static/security-anon-choice.png | Bin 0 -> 31513 bytes
 _static/security-roles.png       | Bin 0 -> 46364 bytes
 auth.rst                         |  61 +++++++++++++++++++++++++++++++
 index.rst                        |   5 +++
 4 files changed, 66 insertions(+)
 create mode 100644 _static/security-anon-choice.png
 create mode 100644 _static/security-roles.png
 create mode 100644 auth.rst

diff --git a/_static/security-anon-choice.png b/_static/security-anon-choice.png
new file mode 100644
index 0000000000000000000000000000000000000000..ea02a237e6f61dc9430e96e2dff6567322059266
GIT binary patch
literal 31513
zcmeAS@N?(olHy`uVBq!ia0y~yV0_5Hz{tnJ#=yX^FJgTp1A~N4rn7T^r?ay{Kv8~L
zW=<*tLqzM;N=}Q=``7>5eZO<^>8$6GX-4N&KHHpk*1B$U+0=F71fHoW9*V6lU2efn
zZBtTC1$2oxtqf`NspMbv{{7#5|DXT2dtW!N_T2Mzd%xY9zxDgA>iebo3^Hq$OqjqR
zqRY_en3$5yoEzt^o*s9{!hu=u0K*GL)04I)E~hVD5>a@1{`darOBES%_r`nV-265F
z?f?5u&mT&@;$ukZOfc^c`0l`RpPAw8J2@vlW`@h%Cw?j)cG~uVsY&uAha<y=AG&Y$
zHd}7raGP)1y=xn{UUS@_$55dq)cJ;&;p?>8dmQEYNBBxPF1g7+c_`hoLQSb+{ciq~
z%naYmT++)E5<ZB{bKlT$yZ*+<fB9y2|J_oVxaa>P+4ybTao5dFR2oFS*3aqtzn6ur
z<-cUIc+kq46K&U`?UX-<J(JJb)VfmOj=+<&yvBqo7W<E1Z(O^7NZIaTTiO1v&+j;w
zPOxM?!?2)%-Saxj!4olyW*q+ec1vAyq)_E<{YCvo-+7HU{q4Pb;^4LYZx<^yF`e<P
zzwP<$qsgyk{mQmiH~(Dx`01*-lYvm?it3AY+xV<)0&@lTeS5~S%&j1Q#s1!t@AoBN
zw6l6vUvlE%wdgsl0(%~~UfX`}Vq+w;^Zy^L-n%AmJD%jaA#Fzg+J}DeH!d1qx%h>j
zo!>upuPon&_VfvN^YaXZVsBmB|68q<CF0+;cKu2=iHP@SjBB(_4n6a~|Ia|>K-n|K
zy7%rz+wMH%*Kci!y!EcYd2yrW1;$+s;w{Qod0Ck4AKbPLH*T-Fm3fg}#ewbK0b!3n
z)Be1CxZ$o)i%qVB$&Vfde}P}y=YK0(t={4AM7n;dwLj;Bt#_q1-aRZ|<4~Y5OLnjL
z+BP%Sd9ysGx@s>D{rBbZ(x1j!Vf?GRO^>`vcK!dUz&(OpVJc6}e|aO}CvQ6|wjWh}
z(a-<?#^IU+UlQ*nvl%{~5q?0<ColTv+R_W=^Zw{R+jD@YNBP>9`s(LxH|G3Z+$`o4
zp}k=1#aA5lE!MLn&+@5U_|%~umBD+&oYm#me4fMqi+-o;{kOd*_WJ*q=iBE*^+Y{1
z=ia_wd-3P+*Z0Fp{w4R>OxS*Mzv;u2A9{Bf?VIKw;w|8P&^r4;)DG^t9j*V}4m~MT
z`6GF@YW8gVq~qWF`$}5Btoicmzr@@xvl%O^_d3pa{&2%u-i5+4LayJwe&c+6)yXf#
zKW?!?`N_L`HeE96V#t~M-un1){?~7drIX(Mba!()m!BHRz;WyUiKdCg3yh>WUvvLI
z(K2E0$z@CjWV62)6dmc~+57bX1JeS>GB)W4Y=0bBK6;92Fqtmk{L)~!fnnPLP8o-^
zyX-7VYm^TL7RabHniPnoG<Po$5NS3l5Wd4`x`5G!ssEty1#Y&3*(zqs4yYUOPdgyR
z;%L#qVd#(}z^}s5>AY!z(H8Mb%|43RCpe2*_bgP<kg?)Yb;!J6`9i6LRjWPEx%7ha
z3(YI+dz<b#ZoW{SA<DXVML>^+-V^~ZuBAPfoMtY_3H%*+Z-w)Uj1Z+)JX+$RExQ_5
zx!F3|I`b|%7C1kk+n_-+F>MC_w1%mPvNxE@+V&<G$#5?}WLY2>!+Bjf`!ADR`|}5)
zCSqqBp1FD}e9Y|F=Dd3`|H9;p%P)vuOns46BK?c?mu!{XUvB3k1xZH?S4k-MC?As+
z?({tLB*Dw@yW!gt_huf_N!%Ebw#Fcg^X6>72>UmJZ!~ilw{hL>d3)F|LA=mHM%qti
zdEe#(6AKb|sN7+_!y6;KPTsurcjxjWpC6=t{8f=&BVZ>tzj=RO{*mvGmw(I_*&@;;
zvPwiuL{217<fVwJ$X5|tkzkQ*7ON%$$GHjKACzU(p9pDjzHKpYk)JYU%5IHNjkOxJ
znvXS#HS+`Q7S_1$baM4qbzAEE)JfE@wC$BtsPR?pRq`%MfgLM6OVru~&kLOHTzkau
zk$)CjmS>i77XPc{E0tHSUio_^K0_meC38y#-vyV;PcGb9`f}mS#Y-26F1or<_2RKh
z&n{lO$ah)qlHrAu7a}jPUYfgTx8L_Ed2Mp;`Y!9;-#gCti1)egWq**t_=E8agB`{y
z22%{S82cC|Nw!M%O8k|$ERk<iW_-^0qVY-No5r$fr;@8qn4IG=<~EczWH(rDd_Pex
zDK7P4(#52YDV~WdQ(mS=raeu#n({TpH+5~2Y)WkE<J8N^pVLn#tWK0pb>G~*F?yr>
zrud}%^!bkyo&-EDc<%9Z$6>=mosUEwZ+T{ODDuqBqdQL=J)3$!^iXNz>Z#d%vu8$6
zzTI!#y?bKywD!hy{eFFaF@NFn?r~~yy7w6F#oRNyS83;G=e)0ApLWgNn(W;z<u~7U
z-4ETGJ!SrZ^=IB6oqzQHA$$D;$_Z)(Aq$)mTqZaLL|$<JuqUDY!KMitCNy90Tqw0r
zGBGSs`C-OGu7~DIE`q!hot0dbm={F^rUuquWV#q<IAuoDjQ)su5&afkF@bl&_c-jy
zH&5Gs>fM67uDjb+SEy`JQBu)Tx#wx*J<IEu_cf2Yi9!>Krk$GbYQitowF<Hdu}XiV
z+TxBysKqUdd$xPcj5WJ+=Dlf<3G|D9HzQ{49rMb<O8=kUpY%l~M9zr#X>HNS(a_SI
zB&sc%K9yxk%+ya)+onoR)t&0EX&-oSMaF8G;LL!?z|auh;Ju4~h59<3jeooA))~2n
zw)3jJzWJ<pAEdrAK2ZMt>D|{$-#^{^SgJ-!rB|u<`>a2+<Yq0MbvbHLR9%$$mVFuC
z*^{@v&(?pv;?<ECCa(|eV%xQH*WIcwRb^G;Uypq$e_8!H{Ka``4G9^;46`E=vn0|a
z_@oOZcS=u{J}a#)d0b-q%z&9UX2h6O=4+*SnXNT<o+&vyb=F=(aT9){^&1()+{9*z
zEuMC0TDy*XMB-YVwV&45MVyY1-}-Jt;s(o%;=5@l!)}}1{kC;(N9>N+Zrk3y-L*Ua
zZfah4*s{IQUGuoa@pQj8e*65kp0h}=ejfDvXl>Q+P2YWYYV1(i$@5nHUVX*?%gk@s
znfPpMJc=ijd|0P_?CQa<yIxzJYzlFSDlslPT|T?~dZGRMe<z(UE1yoj7JT>foabAn
z@49ZeUNXP*z0dnddEWUl^DX0L?|1LJ|A*%<*WYP>b^omYna^gy62kh3IhOf#(~IUm
z&9|C%HuJN8Z|!JTY3-2@vYk?!F)znSkGIw7d;7IEL#6oAU58u``M2!vz9BtP{G;(D
zyHD>DcO7<Y-@WL_qM${~7Jps5Ud~az(Ed`<l=m+_E`Fc1C28Fer;T|Vb&vn(SCyOH
zW!#}{?Pu|>{!itel0Q3tw6e6f{Bl`$WXF+CVK#NGNh>Cw@I0)3)lW=q@#NacyMvzu
z=`H!=_0{98&t$*Tp3(MC>sEc<a^~fo%d^w>oGV$by)53U+g7@yOv71u@f(@DJ6{wF
z&rF+nHF8hn%1G{;?3?F5JMmm(p86bqd;59Wv!bgV9~`>L{aU<MkMCLL^U$Zo&z3*Y
z7q1Zc5`Sq=NaTso8DTrBZhrrCTAM9=Rd-8QQP;+!f=A`O-gsNB(~8&CPu2I;zPm%L
zBzMo5U2E3Htlaa*>iO3%Tp_L%N8j*Hm)>h$ntv_KD<p1Z(mJo*ta+{Xe^uQ6`t5@3
zWNY2>sqe$?3GbO+KmTD}mT8D=sBQe?VB@&gA-BWRW3C6S53B#*_@p_Tw}!Wpf2Q0r
zb0H~VY4h2OW{b^sp7mU=(tcKk<&96fu5K({aCX(&-FKJ#J(>LX_*&U0SzrGv^G$3*
zYoo5Oyc7A^=VN5)bf@copL3mmU#?vi{$1nim2a!QT>Jj^W%irvFY3QIeLwn`adBgM
z^Rwn!=Q3yg_Sm-L@l|`~REmChb=%{}iCeFCn9nd@xp>QB%j7x9uKBL_!+N#*>}!_)
zUiW(M+27ZN-wDrGb5_5;T*zL){)x|LpXujMoHIG|>ioC5JKqam1)o^Hb?1`vCG$V;
z@2J`NJ@j+-^*xXOTrvN&{p|bYbsPTf*ru@m!lsO!7TZL2Y}q#F*W|b9H@iN09ba|$
z)t9IzR(ZDN&LxZgO+UHbe0JmP*@`MgnZH*v^n^^AF3xa&J)=VjQv>74#~fFze_nsj
z<Q$#J&hTx5$`{V7Z0ZYg4Q53o%2>~v+SI<lFVpX-zm0dSyRo~v<NK2VXDklt91}Wv
z>xkdshX*1LeQi$X&sVx%TxZ3Yeekl=d6$M2b7oBc@$>Fnq0>Q1m%@w+H;EQCb7{Cr
zF8zCIrPkF|@4pFLo%(%O){=~S*QypbUk|-feBC}fAlo91XC}uCsTn_KE|0#mxhC`L
z<+ht)=gu9nyYO&J^3u!3&&z*5i=Fm;y)4T*7NOa*TXs)t-}>B9-#>p+fA4!a`?&fO
z^)?GMKNJNxZSe1Ss+ek&uVMEk`$j-TvP)#jvxhfUG-NDSc5}a)JS9oAf8~)(S@X_v
zj}JaP)`d!%uTwlf-JSC6%DOEJgY*6U=l`7Z@9&$WW0!UwJ#%!;Rhci9%kJD2=h55s
zT=w*N-4%PTg#38(>A=*9i#|TOIjJ@1hg9&)h@Ia`r+1x@jx>KC@-4J>w{N-oyLD&x
zUih89`gHcIZ27BOubJCdTqyXT7@AxeTv&W?@tbK^t}V{3du!G&Y8_!6Hm}G2?aP`!
zYqq|=__^)fs(E+rU9g*5m-N3|yplPtnag>`!iNtxO&45m;=Vyy)}uyq&rG?q62a25
zE2^tva{pZ3edzl&;SVlXm)w1FD&$)GUHMtd)-G31_dDZt)~`<Iw}^?l`Su?>Uv>Wu
z-?jexbKU3mHP*l8KK=bz{w23#_Yzfol|Hrb+vY0f=G(8&m*3U;sX6tb<d<9@nQMZ}
z`=&1tP~!-Gw`h{us-WnLJ1!r)Bzno*=#0@tBkj!-A|~H_x3Rx4sOV(j`^TM+_a3^w
z<+bVmMG8v=`ZqLnOkA-#VoJrccejONCmCPLkhHsLTXgPIB3EXYs#oc$^P%@v>%BR+
zs`$;+iw2i@E_hwvxAgMr-;wh92U0b%m!#*UKgyFzDZ62FP3hpLme5J1n|xQj)!ZHO
z+ofH@U0yvp{cf$4-ml+t`Ca7Bl<jrRDtuj%|9!{%neR)F+&<`jYx=43bL+3~w_9Li
zps!(TVb@Y~qIHerDdAmWW)gMAN}8A6Zit&wvgLr_y2Uw$J{z|j-*9}|qkHo2d-l(r
zFjt~7seaN&&$}s?MS@;^+_HMP+<ZCf&#JW_-xM8tv{QcO=g9e+pBL?$^S`q3+aj;H
zfVxb_?@K!m-8>x}eot(#);sOWqOBXZJd8@e`TTW_=<oa|_iI9rR-FD*W>i$Q_RjP*
z-&UMl{dWCvn+f?AKR&o5X9hbLKVJM=H$6J}meTFVa?8s_Y&7etR(?LS`Gel<=R$X1
zyqh@BdT(ZJ-QO_%FKl1f*0$YgI~=dJ&&pEh^R3st=QMu5xD#>r_T<NX?^W(SzF$8h
zW3J8&t1phlv$CoZmQ{Sa;eOv=uGnrq^Zu3^-kJPA-TujaRL)W?x>$ZPVP@LTcm8|l
zpAVZ8Znys1y5QWNob~%HGMarBOxN(2;9kD?=tbKZ8EZt!#L7kAJ1e?wbb7HwXGxbz
zRPgCb0he_y?pu_-Oh5fZN>Adav~6jD>7uF0Nzv)^AHH~=^JLW%y=NyMpM7}x*3@(J
zRRk10gf0m`6aA-oNi|ACOe=54Y=0(ILv2f)uP(ddp6$w67c*zi>ZUHGu#N7T(KiEI
zeV<OvYMgakF0ypZuN(KWdP{uebz^fCWusyj{C3Wdsz33dF|lvr@{J2V?(kf<vQ_fj
znyWSk51p8F_0!_e#ih%7``6Bry_k3A-?GDj?#b$E%eS9P{oOS2cYW&r!_0;3r7<7Z
z)h?+qum5f<7b2%T@A@9TO6}_PzfFD~`<eNR`Tw(q$BkBwFBW`zAgmarXwM%yVeSO$
z-8N^GaujXMll+fFq})kdcbI>1%;K4g-TOjhd^-wzL_1@xu1QU=yki|_?x-{ID@&@7
zN0f!-#6LDmwZ4W(y`1tV^UlkO#@jCipZ}FEF=w&;cZ=fqXE9+V+rs+3{d~gxqkCoL
zWY(PNDcqrYt78H+CTWRjKHPmO%&WXNz%9_P*=5o%-s`i~we!RF?$}!A{$$<fy~W>u
zXGvtwef8;eyR-qnt2FPdJG1(2cU`%3<JY#_&xY~s=Y-!cUv8CeFa7G)3$eF1uUGHO
zf7ANrz{`XBht2d~yZwku@Aulfv`*Y|rkU{9n}2>^>biRE*ZV(w+e0^al+EgVGV|N=
ziB{YWZoHGy?HC$b85&dt8KOlStRguB*rqakvj6z~U&DkW!u?O?oM~Y1V5(HPY{GiZ
z<5`Ww5(UYpycalr9c16YchPy#1hq->ZBEN4)@+cS<>07cH^uA}bE(kDPrm|J8`$Tt
zxgSpbU?9~W=E}aP`{H_oFA~Bk%GpPqB7AdXwz0M!lze>dQQV`S9~ggFamlnYyGkC_
zI@nXty1^&YFVd}bS<&JwRW706j`$V1E2Ss+s5gsUkXtl&N%5lB3$HJ)Ke6CUz}Xe2
zZk$RvYjRNLTvO`FMA4+RsmAHE6aAk}csS#M&Xc0YV$c7b{5->a_W9)LHuls0Z#@uu
zuw)@aqOf3L;G!3MZY=oGe0RD^l4|UdkR_5!pQp|{9XH*3;`cy<uqh!)LAOHwtub15
zYyGvI%VYQE=C`|Tf7WrW=i4N`3x}1S%iI&lcS-a~J(O`OT`fN^PcUU>>eU3>RPQa5
zx0e@n6z+L*<(bV}r=9V?8vY(!yiRpV-uC%&O!Lg*)b~i&g#9h~qtCL2WheW0`Ah2N
zEhpQ<UA<)X$?kpbk?-@t@Z64tKi0Th7WP)(98|V^+x$;9ho}5AdtCV}<6D~Ed)KKo
zm%Z8b-9=;dBzLL>*8OZNdHUn6_IJK30oOv!-sB7AKg_&dA9Tg_s`91nCKC*GKCOCx
zcIo!#_rKQ{%#Ho&^Z)Cy@(l`mmu%XzbJDJ;-DVs9B`p3Ceq!0BZ$BAx|37o!w`dTU
zz$$fsXGepB0Jo6?=L%-q1g;#1GZREocq$z^0|dWtRP{S8ZV6nbVf0FAmFQQ|XDz-D
z78i)xbf&pSFTQ-?tpvy7KFg-chREYt3Bnuv3%6LP-wC}_zDLYX_<y5QuhQhCz6Jej
zep)S6erl^CtQO2G5ZW<)rRGZhVE@Y&7fUX`x@>m&?b7T;*B8D|*^nsVYIHetSxK7V
zvvi&Ih?$YAZ?3svx52$oz|zaY)KYz?(T?8A6_sw4??27G`SkR9-2+-5JU=YF5Sgei
zm>cM5SXKBZuZJaWQdC#mEI&5=%}UnF<~sLRe(?A>F=+Xx?5Xdwu2e6%y7t?ztd`74
zTWhw+mhzN@etGhBDlZQYztmBwc*B<lbIqS`xUl()`@1bVvp;XUSr++iy6h~O{g&Eq
zx{E988h$6t$nKZkzk9m-w&%6$^WJ;TH?>cz-^p<MK*xgagJ%`xPwFiEl_>b|x{@2;
zWw)8G%jGL2l|`hBa~|y|XUa`V4~j4{dzvEkE98@8-<NAWKYWho%>A4te&y2@t`IKQ
z^$WV?rn^ijim8rx7k02DdCR81Vdv)_{cU9G{(7G21(R21lcT+Er&({AfA8g_m*?Kg
zzKxgoVP^8TC@JOH*+bDUWD}bTy%KH}n5Fx@%zo8>>1o5%cUzBqz1G_ruYLP<zf+mL
z>;pET1pN(6aSCit8lo3)*R*IT6rSKwa^4wW{6+9+&n4H^g<gTm2C_LU>W9vLV2k3F
z?Oo@-K6#75${C4kG`?AsiEI}SZ#n+B`6IK4mIy10$iaRCkCom(8@yUy30|D^qtR+!
zTmQ0|*ILUu-|6gS`CHtk;HH!;Ioa&8^fL{yylHvYjC1nd+>%L}(=#VKX7Qb^HqR@V
zfBKYre%{QLz#7J~pR-o<pW-G(H(k9A(ZPp8jr>+Q><W9<`i8%<j8*w)#nLcQtx)l;
z(XT9??9N(zP4BHwY}#Hg=5%GN$99*ypB<c5c5RcHa@o0Wv3+fR`rj&d{;`?xfNP@D
z9X8u3HlO!u*7W@r{L{^Rw#m_h*V3ZLdXK4*&8f#Hrr(&fW5r|VkFPsd2>(#IHM!{I
zLQUq(vgK*#Rpw7UQ!#bsoVC+F>u&$^sIkWB;8v%lr}?{0x@NC`HLYw~<TU<}8~0wU
zy|RAQZr!5ie{BE!o$>1HttnLt+4u54o-HyvJ^Isa9l6EUayGoRYWGZU)~>w1asEfw
z{|Ub~d^~-2qIABFTl&4W{`@`t^IMibS{`W3DSvT(-`U!qi~gHt?R#+h<@<;BCG|S`
zG4UqxHG7|I-m*nzqs{NjPt(tLo%1@XRcM;Bwca;TxBTtxT^Fk^{<_un_So6@5BkUB
z&CM42?mqiE`nCKkRrTGqwGJV-7!r<|nb&hLHdwPCa69(wS=7a6&)f_r<?LZxV43iI
z|J=8`+r%3FY>!?MoMZ6r{{M}C#94lvZT<AX(T0J6ac*WvL`j6Nk5zJhu3lnFep0Gl
zMQ#BD2-s9uRpb`rrj{fsROII56<bx<DuGp4<rQ0jg!Ppaz)DK8ZIvQ?0~DO|i&7O#
z^-S~(l<c?^6clWVQqrt~T->1Ai&D~Tl`=|73as??%gf94%8m8%i_-NCEiEne4UF`S
zjC6}q(sYX}^GXscbn}XpA%?)raY-#sF3Kz@$;{7F0GXSZlwVq6tE2?7NC5^Q?o6%7
zMA(#94E0uWey%=9M&D4+Kp$>4$as*bRX}D%YEFbpW^QU;ab|v=or#5^4Ol&f48lem
zgw9BWP9t*zWSvMdP@OjVAP*pU2ohRg(I6K$J1!f2aJYiP*pBP?$Mj|f1_uUD7srqa
z#<#WHHK9kh{+s^%B=aHTJt}(~JzW^HO{ay`H05$em?mky+PWwxXX(@X(Wi2kZu#&1
zF+OmO>#q&pw3cdJd#zfrdWA-W$ye4N92zVvO`kZ}IGz-K`m;X&+srw0C#!q<`AypV
zZ2H{2=kIM!KVM^9y>IWeHIc#}|NVX+etw1_vy=#<tAk(wiwL9Zf?C0jocqULUPcHV
zP+FjpGx5S+r3D-sOkE917tV2LaBeq#@XG?GX;j593J;g<&p%&Uo~kgD-)0|sWOUK3
z&li8K5l~8aU3-3>&XYGBiEdvmb~Pw1;3zR*x#cJ{uh&$6f9u@c-;>TdYj0?}E&O_8
z`E$QLThb&iSxG2t-8{MR>+SDJ@9({hFg#nIdhe5I#8!jD^-3x3XYTu*ydSqFepcg`
z*81aqmiKno+P-?CS1Ne#mge;(a%KDWEz^5v96rP9*6#1hd;YFlva?#f%uCjE+s)@@
z5jCF0yI0@4ZXfNxPioK3r{ZEZ8*e6TDu3^{X2#7=C0Xx$=C+%jU-v25Ds!f0_+E?a
zcSO!Km#m4{%+{@TGyTeazqePn-MXIl{q5&7+fMCXwwR+Ngr&**(51?~TZ%a^xvL!(
ze%id?()RBa23oel_4RKz?rOQvcwthGm%)FZbz-)=Wx3b+x@Q%|w4Ydd{G@`-JPVOq
zbJThdJvEixGWqNm=}QyOBzf3Yuq{_K-dgr8J>KfzO6B*OA*x<SH2Rm^{BcZVl92Qv
zMcM2p&Z;M`?LPALoj9+@+v98x!_}6>%y{H|y;;*-H}kG>(Da1gpSdU0-Shb2E%iL%
z>EV5){1%sYU;g<0ZT5tTc7lJae!l0;S^iHuw>TtzH~%-|+iK5ebtzrgD9EwO%Ifp)
znG&f#PIu4Y&HlK&U0m7w%EZje&k`^4KjW}eKWJQHG)>p%_?Fb0vH~k@Z~QtJRw2y2
zvATcqUKOD!Ec#w^g%$t3FSWIIH#oCDdC`hLwi1=CCk{pbnPP5RJ4HK9NbR1&_31y>
z#~1k77vHV^pj%UZa`p@xJ;~OiHdFhjcz!PUE$WnW&t^^BHldxIO^q?$ULH>W+OuO{
z?&6<3@rgt09^UT4mv^qd>vpvEi_W+`=QGFo9Vcg~w`)iLI&#l;j{gR(E76bZlJZ_M
zpZj9BGFE<_Mc(_hxBcEu-FEAG?)QWBY0*z(F9)(%88JDkKJ<3`Y4y!k+93DcBPp4p
zYwM4!`C3_#`JJmr$W!y_q0>*I%FdQ9NlQ3czTUCx<x%d5yPsz2)ZQt*D=#crEdKD*
zXE#Mpub>(8o0p60uJ_dZJgw5hPeAHtf$Fuq!n-XcXZ}4@J+RPx<1bD1yJvQOe(<wE
zxafFll3x`U7r#~J+TX{c3cggm=2J+1mb2uCm4p8$))}?l{7?233kfgpaZ7yH9kJIg
zVNP|B+Ot5d$<Nn(u{}Pwdz*b+-<&^{Gv?^b@Y~}sX}iko&Q9l<h5B6Ftv0OJ178OH
zoArA0M5_au5%;XuE4iPrKHeJs>*n^yWs@WI?^W02o{fDL!u<bI{>~%qQ^kKC|DE{l
z&dn3CTW`gi+s8DW4hrTuDEjQV*IwPVJJTlloITRyZCg=z)icG;gjtib^~B8|CezFt
zAJ5S|$IxEx&)3&=Wd0-1gI}J`jM%y0+i|DOw~if5IkVg8fXTsT?!1}3a`$4^*uAh0
zed#)H%TiVTyE;EVABe6IS#P`9V8L3;LgQz82Tg@*pXyHeq{pGLK2!VTiRuE?P0Mr-
ztm^4(@?E&axpViC`^zq;#Wkqhe>{2pjP{$#pEpLmI&#;qcKX>q`8}K0+lc?o`S(xZ
z=j3f~_%bi2DHnfY{j|^XlxUoc?H|Ewx{;B=@?W?8J|1rV=giE{2G4^|rf=C|aqx-n
z!IZ75Z5Pf=Eqxx?FWR`S%i+lH_xs~*laKW*n38|<v$gA6&AHa9E9(EtiLp<(k|P;C
z*N(wrN4D%U{X(mgXO`9<pEUDLLst8tSZRauS9fOhF@}`>&t-JGDR<Isz0Q#~_O!%z
zt0tPN%->$8sJHj{eNO$z?ZTUnpA`O<o_HknbE;0M?X^3B<t0}6e}g~N)h_!PaAH@w
zqMFSX9;cOC4>dB!@klCViat-cw)66zpOYi{_inu|u&DfcRL|U98?M#nes(_gv}~Qj
zEE~J;J6m@|b)?;!Z<frs^xC1dGfe+gsoNWeCqBQV`GKR+=2wMco_MBY(Vl`gR}EI&
zczx;R`n{DlV!Nz;PG%gtG(9D!bjr^3eRq;q?p<iKL|@D%e`WXcwraP8ck@_-^0#~M
zy}B|n<^RXHGf~H`$WDFjaxHghPT0~|%}Tkqr;BU(%~w6X*|ubxoej5TxJ}#5occVS
zGqsXuv!p+7_dC#)&7AdT!Iqh>2hOP*%`tm*ZocR3?zR2@S*~BtkTlx(tW<K6q)b5E
zWxwZM)@RF#w!|3hD-+rC^QVJRspPr<O_$&K;)#YSckbD3e^w+X))&!tyH<WnWYfn#
zU-!&t3)NqDaEf80e#e%nyr&Dl-kGX)j;nKWpuddAzfE;^a-Zj)I`V99>FvL5)z6Zj
zFrRbZ@_**bPiI2E+7~}wyrb$|(B#)W&!(6z;GHG?b-vOCRzZ$eGd}Fn-N~1t)O)5b
z!?tYScFFqsB++Sq3bskI$L&oJTQ}cybz6gBIq$Scrf<)ZUmx?mvCG}XoYOOT*@KPG
z-~Nb`y7uR&|AC*oH*NG>v$i+OOp7zPZo?UgixsY|ClbD&)0Y(f`nBL&O%a1)#a^G2
z-MQ=koG#a|f1Y@Io6M7LscS4hH=MY+QS`NWercV0&!Mw<$_j?}W@fZ#=x>_O!^Zgg
zli-HvovHoJ%{|=l(_Y2QsdZiT^2*-!@`RV0au!B$2B}Z~`Dyk{yGt*>bQf=2r)#x;
zarK1F+Tw9SQ(FGm?mTgGTC4cA)9#0FRhqKQ*`K|7<#s1wea@HVcb*$B`LucyFJt$S
z%&e6Ae9spj^xSst|IPdJ-*|LRt&I4dU?%o|{rbE~mkgdyyLB=5?(MyMU*$>v+<AM#
z?s$)j;-8lIL>GU0<DafC&oL!zd!5Ep({!5|7R7z%JG6c6j!e5MutD?vv9%g0F5524
zuRmmDUH1MCPrqWq#0}+76w>!!{w6rJ=gd*<h9;YwyHmrPSBKA=y*YRG7N6V4YCBK7
zXZ5!Ub8d^fXp(blMz2l$ZCTT&d7tl`X_s56n2=Ss>1plhk9+gg>dQ|VOJ{uFxrnQL
z!)N>Alb^TFpZT`#ndtV%OWTc9Z8^_st`-jdugw%I*SKI(!M9DB5j!v5&#bIkn(%0e
z=8V68RU`DLt-c)}-S27|cHC*r_GQus_Wry%!|a<<jQw-7nEI(6Y3D6d-g(aLb9K_m
zT-4<EJ(II|-mL!aW#<m%n)@HV;VM0c>+_O_pJtVuU&B{?UH{mPjmd^@pWUtzYTauu
z{dxWDHu3M4wjS?-xeedWzMlN^(ejDOR_6Sd@&yD>il?3TD(7(Qcv~;GJ^gm#{~y^F
zuavi%%+D%&RjK*xV5R&X&Fa9&*&AK>gIwpHEa+U(D#>MkGs=6Cxq9>m{pzbVKC^#0
zKbh69pdYvUd6v)aJiAZg=NzM&CO^1#Jl%6|Z2qg<KQE@9Fy7Fmc(wfI$Ln7%7ft9s
zy7+j~n~uyKzDw4(Ia?X+f2DoA&o|<1$Le`*>-6t_nLVdOdf)zcqSGF~IvrPRad>v~
zd*8iM*U!hsX)E16{bT*fpD#DrzVX=lq34jQ)4H7HGExbdo8;#`n^J!6tAu^o!u4lW
z5?}HE%{}IMqkD~Oa^Xw!<%zdaAAfvd*4|;;96WJnvSpg@-#FfNuiq6Fe6_tgbv^5e
zIZyT|v|77x7hk-(Blnz6Ox3%jCo{Jl+-4<zS-<qdr+23&8TlO6sl31J<ZrY1wk`=9
z<|i{RDZR@5-YB2FsC9<l+UAx+xvS3_r_W6HJG`v<oVD?*SGQGd%QKd&d6!YOhNC2r
zWl?kNwx`8<M?ZOP-uP(R%NYiN$6i$ZJQ6T*@1(Y655KjSDW!h+>Q*}^$25J>q~zyQ
zGF3wQl7plqRilMGbmV!z8E#n7FkSD|C-H|X?<YR3j8hSRcg!mAr0%c!f8J-U7VY{b
zce(cT42|8}daSlr>Lhu-IUu3VoxNE+p>svU<REo#_01tmwwCxzFHCLQ^F~}c<bKhb
zwe78kk4$^FOF=yQy7Ap<ZC7uU6$l2U@KjuBIXUS>$daEO3CFdweHZ2DO`Yg-GXIoI
zANO;`tIM^{-rRI9CVzIla`vRo#}D})7-etOk&nEtUpT$cGA!@ZflZo5X<nNSt~UMt
zZ10y9&MS<J=IdsfNaSr~(RXXm-!vz4Q)=SnzIZOaBnFGLO+Oo=Z$(IbRkb@gE3R|n
z?3nX~#|yWL&pTJ?z9eL2by(({2)%xvk6VK+XTP7><=Sm5+uOo(MqJE8<)?z@q{8fH
zSJ>YF<6XqGZGXdcyOW3C3eS;P`m7{2=I_Q@_sdIkXB~Fhv*XO#*2vzc{U_M7iWKkt
zdCm1??<R5mZ+-_)mWL_j2C-do>pSMMalOav3+vT9pU-qUQF^P^SEP8tyoq6pTYp?G
zt^3WdRCZf=_MC?T7x%>|$sgZVHd`<IZTbs+*9F>23Gr(mOv^o;b!PfmP9xiA?K5ZC
zrD|O|zG1S^%jf4@J$@UU&;O#*7Wp~o_4!K=5-%x=T3+81vhZrxwC1PXYqo?;cgS|l
zebD~4L~2LO`<GXfOtyJ=oK+UO@MY(LTg~RmXTLNlG1~6ibgx<=r1<;#X)``PixNzk
zv#V5vXU|VZIit2dr%xM-C)$OF?5=6>c(Q)hMyHJ;VpG4~J(IuwV1&WvBKdcV{?!{S
z4-32X%iY)goyL)D)%oe6>x-_%vftzSzCLREm0ufumL*s^F4-f0+UAS=^<6slE`NXj
zy%}-qSlF$t#p#^4E5E7Q@v_XHTX=lW0Upc!)#}nh>pYKV@c#*9c5DADE@izb>~fr8
z*R3Gyq-)LGf8|@PKNUXST%LUDyx0NZQ0se=|2I|DcphKw@?HJo!NA474~~1Ty&#sl
zcItwE0W4PXOb3JAyNf%{mhdTNJ)c#m-|WwK&2C4;m8_(Uq|mE!%ax0!gelE_JL#iA
zU+2zkYj1Bmwc~bJ&TotJ{Y4>f{m#b~c#D0D3HTl@rgVFG(QJ!SPO&==jCF)N^)H+_
zIiG*xtQvXYf5n#?Mdy|L|03T#_4O*#dhvF3-jZkkW<>lx#drCoVx`J6AKBD(BJXa#
zdSBz3`gTSA@5E2MM)ordpENJqw&?2A1Zmk@mS^uJMPFXm5^G!XHfrtP)1~dN3*;`<
zt_mogq!s@CS@+COSI<<HNUuw|_2Yu%$!RX#N9!IOzV+79{nn<;%lYpOl6U3)dEqwM
z`*ZDsbrnAiQ+y<z3T)`vEiQN7{ayRb6Zb;>|C-ENbYoJa(6`?E*SqdTKbw8sYN5Rd
zqw4`B0UM!d>K3cQCi<kT3aC{yzyEbpex<N`t^Hn0@6<h^$BtxeYqf~b(%<AW-=Z>R
z-{#u<EsJ-REcaO*^-)eWZgE^x-Ns%ut9w$Ghh6%zC(A7?n^k{nM)sv|Ju~}!jw^XD
zyYi>sx|s2}(L38Z7Pp=idwb`<3w!!A|KtoC+2A9N&cBvUzY-MxD|tuXwf(Oqtnqj@
z`M71*$(X?I--ol_7|8R=1={|)^2~DmPkr{68t+%+*96<~U1FYBcv50DlkI288<O73
zf3LZg+7q~@*}Z4o-m~?mR!XZZd3a3zld$ic+#Ao?m*!e@?pGIDz!?~)GxuHI`O6zV
z9Bp1?IWg1s)5TEtqAiu#FYj4>6!@CIAos|k(%T#VReqfH?NPUp|9wYA{pzg=W@3-^
zcW{LJ&u_hdvcUE5!m{1lKYn}i)Ve+J?~!+h=Y4&fDskvhY}V2*4I00K1v$c5n%oar
zU;D|^kaF&oDEEfSvs{K^iR>pPwB77J`t>ny-xM|Bnp7E6?rJ`39h+CTLhZC8)xS+j
zf2rtk?3`N1bOp)eQ&q>)8Ff^Q^Ly`aP)+{GG$T`2iTzzgdZ2HWX84^5=a`w^M@tvY
zG=9D0?xp|po?P6TcQ)?RqU0}+JdKJcD~j#X-*tR-_R+k9{J-~3G7;o{W+h_we&O!3
zUsR<2y{SxJt9?-?=Wc%fgv&-pRioD|y8AFRF!FcvgRPZY|EEvr3;Sgk;?Z_`-iPba
zx9%J-*nR%eIqhlhBGbRrC|=XtS2kt8>46#NJT<Z}TFrM9GB8Z;n-f$0ELZtf^F>~s
zi6&F-uJQl#w&beS^u!xWR4d*bH)5MTtL;m1)fKt)JdKT2=hXX)ZaL2NetrM5^sc`Z
zz5kojrFxgo>EE=cDJgx1Q=Z<Pr@tJ8!xyi%kX_p-aN}L>mN}vMzf^vy_{6`eN?YaQ
zx%=>R|BVkbgkM+x4!En$6wA=~VB&@n-OY6qLqAWQKS{66+;0BG>hJ50Pl`TLWzoga
z_2pBCaecu%X6Yy5%{>csr>_6nFLVFs=A#?h4r=?^KeJP1_dk1dm#p8JDPL~)%4hwu
zh$}qpBFz7$NA;e2W!NXL=|8t5_3FOVot<gVGG|5O|Jgxx$7b4`Zf~uaxX3?q|Ek)h
z5{y4nrQWOG)ct-*WQOL?xnHmIKHA-Nu=(VrjhFI2H)ZZS7qrZKuV+k5V(d2mUypY-
z?OOG0&GRF|GkW#E?-wiBzgJ{OKG*yMKepC&yMAH2f86oZlG{t`wkLm%R+{;@Vv~Q+
zspE_7OK&-?{Vny|Fqcp5m&*P-Y`mwJ<k=N^y_VFHyX6v;U3PmzP-+O*vrd+se}AU(
zK0kJBtD)TdZeF{qd6#zZET6l{*WU1U<cXHt|NPh54&J-+;a<{vkEx3if9>1S{OeCk
zx908l^NNpsw{1RJyW%V3zX>+ix5Upp^!4q1h3z*g!*1zjrz|_<UGehk+Z)<;C+2SN
zy>4Ur`H^(qceDN4A78ZDd_HUwT+^Rl7h7}8UO)I!O;W+P`Qq$13T{-tewQ2hI_{!z
zm&0`@g$@-Rhqd$jKYq9An$uiYv})!O?df}u9~G*&_;tqr9p@E19`(m=5!;!jw6uhg
zv+sS9)4cu3%ymUm_aBbZxZHd#uQ;x1S>|zR?(Zio-neeA;10WIBR~7i9{0}4Dlab<
zdTh)8SM)IO{$I6ie?E(uS=xPH{{P&!$<s^1GsBnM-o5dM=l`v1AE~bJZT9h>`F}R=
zIho+{LqYSl{;%75zUfB2Vs*0LS@wW?*Q!F!Iz?FS%li24{;d~(ZqEvt-RSRohmG%9
zT$$~rny=3Uw@=r!n_RK2)&2cWj?>I*rgML0ex;#sx98+JnGCPr(oB1jb}rVdJ9e#i
z$D2K7i+|=O|Gj*vO@`_Dmyb&lmG<ruE|WifMJ~N+#{VaORwi$Zvg`2S%2}Rsd5_NL
z2j(_^CPz)X@Jz2S^}2Xh?(H)|nU}sdrW&b;9dCRUzti6P*+1PHFS{)>=Dq*>pm^`2
zwb@@6c|T<iY;*pXKg~aBT2ZIs{S^nD_6HrmDV?IXbLV<_y_v6Twp`2ozSY$6%%@j7
zrzaWOzpGgPL(YF<B+s@rv;SGhZ)W2CKTAhD`04_Vl3bRiSB9(2N|Ho%`z$6^f3%La
zn!+D`x~Oey@{anYr@zeY+_xjzHT2elFCrV4%+viWJ6YvyjpycV)n4&kMt_sOS*V{=
zE1dgcan1L~=RR2QN?vyBvOZ?(^y1%@OGh_fk$N1d#s2xYpSAPWtm4fI7U$;XsH{Bn
zI6C`Ip4s<ze8T6iNuO+WOV*RQZQ6e}M>=zIOV#!h;oe%jYoaDO7f!V*Uo_F^_L6%+
zms2}bqm3q|@kmIYo493q^pd?QC!()ARG$<mpQHK7F{C2K=C<wBs|7)y*8I9vdsq66
z@zc3a+P?*#S<dF_Ah?3Ru}tORFS+}s=TgtbHcY8oZ1CGUxTniDf3Z%4L3-(RjXBet
zAVdEO85}O`x=%NFS}<?_?{RGJq8e7Q<~3Wr4kQNujtT&e^+z>36dZ4fp1j$wIN$CQ
zcghj}W83!_$(y|XU$@?ucas$_&#XYOLXk#eHwV>+#%($u+H%h9%E)=(`FAa3`d|Tv
zNoRxCAz!B@g0MM;#s>-uRAgjgOhX}>8C@56vP@~2-QuCF0h)0DO*|ZQbnvvW*pamg
zJoc=?)a5XlLxa<tbD|q~-U2jz(bU{9si2_XYKSOwI-^ldFhD3zNU0ZO09YRjJEQ8u
z2M<=Q)PkAotF%Dnj*5$vBP0+U1UdMaybc{a7#bW3nhyb)JIlqvbBAY#NfT@aL_mgR
zN=tL|>Se2tyfmp`vOp#a%mWG*92%VL?BTwlFmp467*!vtDPH0LI|Sr`0)YS_KE8Fc
zR>91@pu$8>z$jQ*oP>vqEN3IfNuQQK-BaoV0|h<0x}Dx1$tdaXb;{WivtpfFWvHmv
zsZ{|1F`bW(ihc+SS-fhO^3+AIpSpVPczt!{G!L+An;AOA?H={^^*H=rBC&+e%jMPs
zIf*N~rG*|R^J-2H4>=Sa*LYbqPDE_#qa``*{!<=2R$h9-I<WE6sjQ+cn>DxPb~Q{Y
zn0;tvrzR+rFBl3aFuHeKkro&3H2nM6@aG&mi+mTOD)mxlpPrJxQ)*gky1n*lXsr_x
zS~saUw8KR-Non;(ZN42J)@0OJ9&P@6T>HbthejgPCiR4x<eioZ6Uy^8G1Uc!v=swW
zh~@E)uF4GtFU^mAKYsK%kJI@j?>hRrmL%x7Xf25j>l0d^vouvhOi52~ny*Tt-1HM|
ztGK?rm1}SOTlH}DbM?gU&(%Mqd~=ks3tg!7%4|)t>O(V@;K@Ot$XB?+QE<onqHt%o
z+ZUH-O9CZkO=9v7(swyt?w*n&vg(v~U|5OJQuX~43?C$kRG%*J;`mWgsM*!h((UEt
zs<6)Gecne26_z{pJH@NMc{r_?>(sD`ZArgp-8MPS-B$M1rn1)O+MMOBQCEz>$y|YB
zLWAwaiEdy2%w4UfP<cYbMV(iG)i@xkh%0pIQKv(yE5uAoN^*22?NUFW{k(75)RPqj
zD?JXTDyeZZmiHfbP`v-IwrWvzlFg~pr(5TE8*Fgrar@SH;G6T+6(L7%voNYYG;0hL
z4g~w`3x`X`rplE4EH!_%pDPv~@DQ28p#Cjw@rnn<Aro3$x%z~d*Up$BapY*FfV6aP
z%L=V8A3`2}{$r%f_}$m*z=9|DUZ}Io5qR$y8OhowKJQTG`f!zJN<1DboaPv~2Ufl~
zeOt6>fyy1xtiaQdyr=MBV&Q|%!&P0T#iDjK?|EIO&3Bl8&vwEcbGeHXKPo+$ws?=v
zm5ZuJHEe5TmUDacmX^eXhzKpxo;X9GU$Obu!u(GRM~)v`@S;SqZ@xw6pQgtas*^T_
ztGwU}3{~&kwR?xsp$Kp74{MzrJa?4-czG9`$4WR@G76^N(UmH^di2KLTJE4AwxpV0
z(=X;<a5z%#Eg%_rtWaA!;GwP{lb*}RmBJcUg-osSHI0*x`zLwCZ|v&pbSiOCO`7~m
z>6CE)WcSa7Pa+y8Y&bG?WAYKzMNV&)3olx&YP)R3!mS({oZH15_r`<rP9tBF!}%7E
z<dUgZY{kUm3R&5f@Q5Clxpa2&!qgNCrBy<PfrTC4R1`L*`+t!Q>H732SVK?8#j|ju
zz!o28EuDiao0^kOTxD1H6MgtXT*>fqhWDI`BOR}1U7nq^xMhOr7EUIwL%B?g)fRzD
z9)}l#0`3tVT`Sx+dF=mtL_=H4EUv@ct7olBzLBn{&ZYp_$h32=A*X(JdAO8yH@F{b
zukKp4YttT{z1@Dw`So^u@+XgWK8`;j^GIk)Xh^5jE~$y4qDEgez2*u2+Eg}GMuW3_
z>Z~h8pt9<Qa)4HznxJ5(TrInT(KcxTVf{64UO!9K3D?>Dq-aZlVPuGzrMTj?3s)ze
zvkQ7Ac$`b|`@6{<&hzDkr+)S9R2ACd^3;j>s?oJGnSQG}@^&v<rgEn&BFhULQ7t@-
zT)W+mPINnZAj0K%sk2K@&PF3Koh8{!C$|O7Dd_kjtr)ld#Rg}c?L8$q-<&Q8H1$sT
z!D*zcX=ZjwqA2i{D&ypiURAO0Qnz?OiM%;T7?ORraLmzId8F}jV3Lh!Z^sK31*<@n
zhY{+*Q<_}8#C|RH$X=4<a`Z&pHjaf&99}y_oo-Du>XT`;_^2(b-4=CpX_4N7h+Qk3
z85Gw3Sm`afjmc(jC^(AyS{P0i-aZ&KM?-X8ugE7+B{QLo9!HZhRh8Ddn<>UlEbDF2
zIik(pHm7%mcVYN8j+x#vy2<+|I-QuZVW(k1ylT*vjHRYq1VJ&$vP5k$hX&JJ_Qoxq
zS5M4fTT(ht$6R}POmt(|nV;%@oQYfuyQ*$_98%)7UUFLRzQ**__X6we6Swa<o!s}w
zs=7$;vKnW2*Tk^Ot=8-8S#7O~SwduMpUrqF+tr{Xz{Da~{g*?Hzwc0+YpvmT&3d-5
zJrz8X$*Z2!7_t4&k-y}^EiJL9nl1TFsG-N~=r&XPA3k$@e<azkJV{;t;8JAla&47B
zF%gjt!z~d`#dD@VJ|J|)@aly-JaZ?7O5WaUxJ>wwtL)wV@#TdN1e+%>-)r&1b!A~_
z<}}+i1@AT$mfkO7+2waS+mfwnIcT<+i6t-kiuCRI79E=1k0<;LF<&#)CSAu~m!*cQ
z^`<kA;r=ZW8h6UXuI&@%>{pHQH{CP8gDdRBvxD-SjN)p^U-N}06wB;*(iVKe<NRT7
z@AikUTw`5!3H#Yr{E*N(-6bF^tZn0cX{v+Mx<{`(?i4Feo-}3klm5%ocUZDTPidU|
zyTtiYrKVB;4vu&k>&EN$XO1s?#8I(VRAW)8>CR~9)u4ugY0E6oy!IAurs$*%CAIN7
zv#0f|zJ9c^tje^mGI!sGy!tb9RkOl3HGRo&x9>Q5DfR0UjjddNRiYm5v(Slq+H+)W
z?JD+3aeWR&N|H;nCm8Uq|0ZwQy6Mp2q=!0>4_&o8F6Cx4?Xj1n!MY{$UsRolSf+e2
zYnPWtWLv9iVXR_c_d`K-dD}<I8}<iWlNT#353HP0RAB47Ms@j=mguHg_dp3n(J|qz
z?OnrCCq=b>>$bPIwI{T^JMpWMX;W^V%MS0EHB#BfTsoP#v{$)4*gF4s^3y(zl=uDz
zrf^o?*uC5O)3+nZ$FEuF?APM7{Ps_8lYP-98TZfM6auFitXa2A%%LfN-iAPbX(h3h
zHzsYg_*kH`thGhka;oPwo@r}?<`jp7b_nx-G_PH?g=^{3sTvx+0{5@PK5jnBsJ7+*
zRRirUKVDxJWpsVOBe>)3I>r<3hLa|pny`Bx|FiYq)el_sKYyWS$#VH)M>ySUq6OXh
zOCFusyT(2&|4n;MzG~1hnWIx?vTvw+U$|z+(fMxa_KytmGk5Ad*pO_#>a;)Ool`sP
zb)zR*ywaHFJ1tyEQ2OhZ#fz4C%@W$+ysz*38n4Jl8=TDgIOVM(6}2@(AA4-P<QBb6
z&~>x!#VcDx7+n>9aCEr*zNI(wf7HyL`*(w*l|Fam>A&BZC}EhiBm4Dhfzm8fG2L}X
zx{HMhFYf$n_-OXwjh}Y@`|yaxDDSP;z6q;&XYTu3r?;x5X7x@^!EkQQ@Nf>naFLT?
zIzLYCI%IOoC@XVfoomptE77Xi?2~J>Pw#O$uyj-9M)mzN>fWmh1D+{NFZ#OV!S$jW
zHjbVaIjf?$S8<f6vPdmt>^l6l<%@Jz!Easmg6}c+kIEkS#L5}5-TlnU$)_jAowuF)
zQA9QIR^;BVCk-q7WsFqbcpU6giHVjf^Vs2ath@JCWQ}|HiCqUp;}q`)Mc#4Tc1Y=>
z#gp)dn}a7>Xa#LBT=A~wK*<H0*E0&(*Gin7rnG=#3j?F%tv7{nlGAkir?fuzyfS4<
zYP>-2&+|tXe-Kmndz|&hZ%faLw~sk`=7se1Og#Fb?#6NZb$6PMmu-oD5%73L5BK{!
zGrK#5&l~!g^YCqHSQffvV~?KsrS-~;-MhV4&1-Eqox1Yyr=Xi&U1xS3-rYat@d3|-
z_=OdZ7BQB(Yv-t+@1InlzTV;NJ|%%^90grH1)d2D1m;ZnWoZ=5ysl#M$5)f`W_+E!
z`HaoO&dYvDi!5Fze0V3{FyH5WRjguX#bfK87W$<dBGqqbOgw9%Vx+ltf$LwLb?dWK
z5}fxOZL85`6c?@hnCWP0rx{?n<#N=mfA#PQ;cfnr!6Bfg&w^$phyF<AYQ~?{N)vRm
zUapf^l+t%`MI+~r$NlOH<BReiPrdX}`fTOFA{XwAjdkl5eBHca{%LQSm)E0fqEr&~
z_bm5+{9qx|pY0DmUweL0!%SPh)OCqd^s;r|e~L%he0>R8A;l?h;-=8Wr^{4X51re1
z`>^_+AJ4DZ`0Td{47sGlecCh1u~=%7;UOWWWe-KKo)=X;x~Oj2-WPL}ld2AAU!K;r
zcgu`*xqrld$o#!)#WJNOx_$mVaNo(H-K8NYf1}UQTRYww>@!*?UsX1pRp!Z@x$H5X
z+8Of|#f~>-c7%q?>b@3GU+A&qf$;H9trJ!YW{VX~aFtC-WS_L7ZJVou=Z@TuSFVUO
z>h&MEveI?O2dA0IS_>nd_iWp>Z@Rwt-U<PxpPOPlO49FTPHf|U@af}ULEUa<>!1x5
zj|7;?mMK=c-kLgfO42TGy`+L)Pdr6rZuMW96cl7u_2pIXy?YW<#OJupl*rc<+@71N
z$+=y3-mF<l7oH04`1LC3%nZfLu_jxj8u$NEU3oRrWa@#=MP7g2?~Yg4xtsm@993`W
zQ+pE5u`YWk=4pQDGVjDqT0t{cEcKVSZ#ksj*Hxdf{=#}6)xIwGocRkSrrnU`wB?#G
ze}4aDr%O}6tXdjW7<|F}b=7o*hjo8{b$*?H-ZXl1*V>7P1R2X@+WF=AjxS<gdM0|?
zk;iMdKWdt^P3@K$M?kBL^z?=sPl^jP@>C`*K6P>Ns|72jwWhSXtUluC?&7l5$6HH?
z>70AuL(Rg_ldiHdTZ;pI>_aMkomv(A@xu}IuIZapWNfRh<ft0et#P^YtLl}I%Ac3Z
z=g-pLe(mr=&5~4>7iacGn@8S>ab7L(<Bjq1+X{^9V{UE^&3t+GpreA3kx*b@poh2j
z;puui7}9y=dgSg32MWbEHFh#T)I2@?>cqa;tWsJn4c&gzPHZ}Sv7<xizwegAT^%l=
zIZR$Q&MARC^Ey_pG1E5sDBIQF@BaPW-Lvd(KR!Mls+E^2TE;2#O#J4`;78J-%}N(I
zm^wQ<y$<z0SUlazo@q+W&aW>ovxmo3s-Cm`9`ohJ#lwcHgjT;0UYe@m_o{Ip^P|Af
zTX%PC)X~=xIn?LUBav{l({1C2ADmO%RTiu|Uhy$UGs;c!U;o#or?<?MyRVwp&L?|l
zqO!Zp*R89TM_*~!#lpFL#gnSZ;BIX!52M%q<YPStzr4I`m~+Fx#ofL8)Xm5l3!RQN
z@{5ZsOfQiPsyeFZbxmsBDxvI*`B%;;?ya~eQd!08bmqj$A5TK`D~i6KjM((}?v6ue
zG}jpjm93B4dtrBZ{+GA6#ZR6*d1G^WzohoF%_egsnY<3Aw@p752F~S&6%$k+6h1!o
z@R)S|k%U0|$uXJii6@Pn>ZYHTdGIG#P(!cZ%{<VuyF({>O2&LwQCZpcAC8MJB>&No
z`Kb2b$L?rB^~VQP!m>M#J}y!$7BcIcQJq&<Soq_~Wd9FG#p7obCdq2&)d>d*<=KTv
z1%um#e4Pxc4>l$rmtvAL&6;v@@l>y!>Wan_WKJ)tT4<wp^G9#r3LSTs9MMJ9-yQ$#
zoPMDATC0ZU>O%|p?OYa0WSWXtuy|<Be&U_1>%D7t`TJuVlaKRcnwPAfx4ySwQbDfG
zm+9aDoy*ra&$jx}rqg<dPfS#P_^~2OB|%%UIKR_K?OOARdyfSq=XZ5%Vsdd)?UJgR
zFtJVh$n=tb8_!QD|BxWtIW6<Xfh}G~cd{={kjlOo(0%FChlhvH{xDc>c=P$q>XLYS
zCa*(ZA1_J=kD$B|;g}#}$yf93X1esrDM9*6<INd2D})*KsdBm>S5i{soS3AU+teT5
z-Q9iQrrPqO$zj2bFC&%IBrgYaf9_`Il~VDGNm1kojMf%3Z(SrY-(1!;8Pu1kRye@d
zEi1lPs8Hs7*{nA{EAy88>JMV?zZ>LP{ls_vMMJ>^>jzU5y%xwUUTSixEZKaU=I)PD
z&HH(O9&33j^LWGAi?@DmK5v&j$wqR1<9CDDWtqp@GB>z#XRTUlY61$Y%MzJ9t_mwS
zHYjUrX&GH&?$2HRvTlWHte54R4;rNfHhnE?6l(+%b}RhklQ1~2g>{?!JY~+wGP;_Z
zeOV`MkT#9e*U@1)ULsxOo7s7N@AHkd%l>*inJ0Fcm6g@>e2Kkxf41@hl^ALMze_o`
zNHe`TV6lJh?A@DlbeMaN`}Jqp_x&x@=}XD++_ka#Yt(h;1CtDnx8zDEY2MtXBN)B%
z#w3H=y{1<-6;|e6Ul-eE@!GlbW#Q(JcME6O-B!7*!dQI1-^J_2*}&}Gm${B7t3E7P
zQ>t5hLNH;ud%p7)qg3`XwZ^%M?-Ql&OzwEe>C^ecC*X}#p=X84gO(N+<0*-^8&ng$
z59BRcqIUGyW{sMEKcC;&o<Bb`cv{X|(|_BfFDGu;|90Nn3t6c<()VSU`U<7VlylT<
z`yFK=r_I@(yf%BLa~FfPk&r>?g>Avvo^3aF29|o5Dm4ogdI!9@^SwZ3ntb9EhfMzm
zY8Kmcw+Ys*`8cCG?zydsr`%_&-W7I#J{-2n%J80dXSez6b-!gUZ+mH!%l2&bzJ$xA
z@x{+?*V@VSO>H^6aN5=$SvJP9gb@4f(;9LcZ!FySdFc^H&K9AGZ66#Po}9K)?+lbG
zojg<3``ylo8lDqWyuA<P*vr@dG4z{b5vaT|sz|l#+l^(Z_3ZCvZd0w)7K~0_d%!TQ
zTrStwaPO~kw_nFru2;D;H9P$DwS@u+?#_pnJUQjJb}iH8rxJ#pb7keN(|8{?GQ6H`
z#+c);l32dMC6jZDozSv&?Ok)8m`dv#@K(>OuFiRUySVIp`lJ^-(;xgWzP-%)Mt0t%
zQu*DF+YWEsxAtMc>8N9TjSSZELa7PqH^pWq-+J@LB0o61D~sF3+Fk0;10})9B9b~Y
zH`+#QDi&5*nsD!MMNYeX?U#v}<~@fW?CU@N?cRaCz3Jcg<ayqE*7(ve-)zVE-TiOB
z7Tne5-0paGb7Hh8|K!cQljknVy_5Sv!gtYR<pX|QDl%&h_)Tq#3-P~IxHG}l`|?`}
zj)1S;L8*5)-{1J;STftYo9s9D_MXpX=aX@$tJ|mOAGiJcjo)u<^O)AXpW{3K?QNkw
zw#V=DoSA-hw&lYASpoq<>lzn5W&aW~dDg6`%O5u~ZZf{Jr*gC8|6=oZ)9hW}zd6IP
zfj2^3=Aah){DbFa%#LQ_y!P4T?gixo{koH+IVXJ0?>zU-^3HB^E^d{iI-VfjvvsG0
zmRZa7SKiC>xi5Ep`}5M>AFY@#KiK>x|5>O#-|KCXst<R~FsX5q+P$S{n_l|oqfd6t
zEx%hDel}de+HuyO{r~^{ZfnVHdi4B+%&FH&{x9u(1QOguEX>4u7Hw8mxv9;`&V09T
zy4vg6Wo&mQe_`^RVY%(esbsHZf6l)2*m7a}_nnUo<Zf%PzuCM0?(;VrZQuXP{d}-k
zC3d#icOI`JY;CjZy$+cMm=r0*7r(g4EMdj6>67V($H@<-+~2PC{3Wln*_o1>8qOa<
zAGjyTD%RgVW-ikCV4L{zLW!js&6f(5SCp^x&SB0GKgjpy#}C03iZ%iZme$6_$^H8N
zK0aAB*E{dG?7N$K5*Zq<haK)Y|7MIU&hL4w7UF&A-QM3;{cn$z9j`F^VAJe7|G3R@
zyNh)?A7XZ}t3Esy)nFp_Gl#iKh4K1%hJCfn1yRSoi0PGe+_?JS&dD2YY0|SyEKi)V
zxzlL)L+#w5Xp1)Xjl#PNy*h93#)#XOl?NQu(z4$3t-^1^r}Z!ANixlOygT_g-{W1A
zx-A0kzTwN^=h@~Pz_oN*U)V*Pbk0l1ls!M$n0v4KX8!%#uDiF3|C~+uZd0~A_ww^f
z-mQWGLhE|n-^M5X>YuW?VfTBMbvsWfCLfzoZT;c(@5VjnvyPYl-NbSx_-@MF9v+@!
zyb?|S1PdiPD&{n++zFrCe7#Uay|pXU@h#JOZn;guMIg5=di$ek>b_;SHwq-owyOG~
zaj))o?&W=MJraq_bPT7zY1a8UQAg6_R!rIiXEC04-wtiL({lUDMr*r%=GzwMZ+_l$
zjGrOz-M)({N@xCSa++Ub_@!#i^5^VIhxPLWWH$@{{<NNPcNufPo!;7AOYVu>xUi$M
zyViL}d6LO5w~7Z7?{DJcJLjyg)8XM-St=TLNHNssdiSDvAuJ+|#{?911|~f{<-Wyo
zK~>e88yk<6Z=U@|=jJD?$G7kM+?JbMvi3{%_pgG53O{e%uaSFPeBLCt%I29R-^G^|
z1$S?i{OP`GyFR_cVWy9f_-jY!eV0124jo`T(0iTn@uda}|Ghyvp%*@#ZQtj#dwT+l
zn%ft#pV$ANbyi->Az0sk>c)n)4-N<JYO<|9QsY)_qaN||dP#H}184u`-c6e~e>|nV
zUgEH}*Y3tk8s`o5Iwv0Vowg-X;U`;O&-;57cZJs5p1(hB$6Mpd-fP!Y;%*(E&|-Q8
z)VkMG`)BN)YI}ygj(yMeSdN>4_h)pgJehd7QT4y#t5*ll?b!HVFMbNg5jU44wYHhP
zm)0*WG;BSv@RiV-LwYq0!dk5C3D-sICrR9P=E_+AyyU3Wt23#aQoKCBPxiMv$gRJp
zp;y}c(T9hJk11T3q{lhw;IZv3(jEs?0=!q5_5Gfs8vp&?vE>KF@2&{?n!9($R`=WQ
z*L;00e%30RvuS3&*^Q>h2M+HqU$a<!-h1_!swT<lTs7a*7W8`@V^j>=_ivw`TZFNz
z;$2;*nytUqeg3^!B=m>=n}cdHjWxk+cW(Zg|Lyc-&5x>?C$y%=FS~ZKqn1;;YFF>;
zy2{tx*`5caI#}%PKYQ!5#Ps)>wo`%ec2<veew)D3kzH-GT=~)J$|8XW*2fF)^V|J6
zu!i5J<VC=erAsBbv#d+c?h6iEw6)rN<)<BrOxs$dCFWnA_hyIj-$3IzCwIS_qOj+m
zHs|iw)@~i9abf>DL{91GmR-5HsLF8Cht02LR+{hZcRu2@X;Xrl!B?#*VXlpn{j+4Y
zgoY@+O3~aGJ5MQil2?q;hBG;nX5@#;AHM%V^HZ;u71Kq*M=iFiX0KSUT(~Rf+O)NL
z;*mR_E{lrUoAT?+%QR8pI!^oVcZ%I=pXh1zTdqyKwI#EyV|)JnKHcbTSGo>OZ~x52
z&MU<d71t+YdC8;LXL5Fb-LIF+(`GTpyGVO59B$)fe(v|#b@{;)+j4K8NnLiF^~6l`
z*CqGvUB59eId%)f(p6{wt~vJZWybZ0vfqh9XZCzlK3=8C^{m+BZC^LTed|1xFs~&w
z<weEC7uUzzUnuB)Z+!iCYV^j!pK*~&+p6akPhP9~<iOs)4a--}X7Ty7)Z|Qw38?M0
zL3%OE%&wBBz7C7t*w+OA*;T6(Jn2dHI+tU)@inXxhB80S^`^;0*u9rAk~3qGm$h%z
z@A6Z&TQ>c|ih}Y&O}@SRco+M3Es1<9&;D@D1OI@Iql;SXgcM)rcP$KaN|E_>bWSUG
zbq(*{<X;bGD)&F?{-o@5M0ft{o4d>N?^M6vD`Aw<p?Gl3nl)AN9Q!7Gzgs?E@wKRS
z*cHXZvS*r_nh_fk7}xE5CROZX^zaLt(Cfe7@8@@1eA_kA#W?X0%b#cF`wd%uo{s;w
zsjcPbC4LD52Aku2jr%2MEW7(-w!XeKyY!FH|Ih9JOTORp*>AaO;<QlD8`oC6yUoq`
zTkfOtw+9ECk2Q32+kJU?`FKss<>QR?pJSg}XWX|n7u<bv21}0T^vp>WJJo*{{h5Az
z+Kt<*d*=SN^g8rT>dkznn7_G!`ut4G?()f4GVJ;9ukbwnz{0%;g#DSH&wssQp(g9^
zL;LU5^7Gek;r{;bg?q>MBM+4WnQeDHQvCDli@+CyEpJ@@@Eom>`lQ4WI9K+&>XNeA
z9qYgBk$SE&r@dlgi+@N><9YAz$<7Dw2gbZCXG@xY`C9ewrfbvJsh*jt9scN1x4xOa
zR=f$D*RA-!ufh$hzGU2~d_K40>(%hrsy}~Sddhu9Q?zEIE@$z1lbs(J&fnJ0thPVC
z^F_jfjel<KkS#sWr+1;!+u)OzZ;RKVgAUt1FU!0yy?c9$XLr^%(QV#!3PtDd=Q!uA
z=h@T#Ud7WgfN9&4GZtpKyWj80*jj&XYK!i(DW}@{SbuRb1}mj0_q=E0kzrd>FKe;K
z|5$r!+=t`KRpxoD6iiwns{P?)ZL5>e>rK}lpH2=o^f?wUSNr9>MTLU@J_+`d9r-;u
z6IXO}9X;6c&qDiUl8%Q&*TTZZ7xlmCsJNB8$E57(k#z4$k!jBUmG)@9dYpr2YT)XS
zOWPuR-%3|yK6<LGY-=kktnO!`uNrzV``Q{q{U@r^W0FEng=D9uq|BHav0_o4)(2O+
zq9+{x9^3yrT=6ck#@lb^%$YL`liL(;x69Yv=t;l%#pBMG4~M7kGiI;L*|2!=7J;4v
zUvAF4)jvDI#`*G_KO8$eC%+Hba4Y$_`>I;61u8iOVuyOYMM^h&>{N;C<GehjEBVNs
zT_<H8Ix4&PYdwk9TlF$lX=zw3%N*6`u1(t04JVxEd-iamyWBy6!25Z(J_xl{uP)SC
z6q0hEOJ?F1rRrYi{>|$ShtB)=!R6%UET64^L}lftDqQ-=`a<}!{BiBRPA{vHC5H`_
zS54jdJWE^USn2DOn3zM+`FmUU)&71Yeg6mBv3_}esXCMPmY<)3xB8s+mG(HKQnSo?
z(z6I5&i_xR$8QVVb!Og^6PwspU)~(#JDt&odl5$qBa_#mH7Q<ur!=(B(JgM0ZfGf7
zlr(3pOP~3vijQsfomszRJl1y!O>F!B(?2kl`{I!h?u`nJ-@Dz{#0nn$pwe^ne9$`Q
zMd=+A%cQfyr?lA`x!LH{@!09!6)h41b*Cpb?YzasyU}A3Pl$T{-Cd&L@wHneA3y!E
zu5Fp%26>r30+}An7fZBwk1KFqHs1hR`tZVr!{mU)+~o|plY<SJtO|L4ELVQ1n94KZ
zO7xz&>K4bs8~HnXnbqPHlaJ<~wsqR$s@~d>nzYA1HcBt(ot;Rh{F)%1Uit2N=|A-o
zWUM1t-s~#q=2g}@!m)b8B8K_Z{0Y$yrEdi9*&Nyy*?2SeWWErab?H0LebX9digC6)
zcE0m@SKBj1hc$0*L`Qoc4!e5R>N035bS^t%ZE|F|lUkd{b`H+^4XhGspX-nNOxfEb
z$S<L#r|o)a@h+>dB|OKzc8Ra`3iR#&yU8d1){7nMo>ayQ+>U$9J4?8?O=Za<_mcdX
zRV6_wk5!CiJC8)`B=0jhV)f?i;pM9G$>|r%-e}xX+t1ITINu?ZBlMyU8|Pu)4ULnc
zALK`u-8JuHFkITTf34??Cw|)Dyr2QgodN+u+rGL6+3E`EZa;ri=-1on0v9*SFFGgH
zyrNj&@ypN2g4PzIS5s9rem~I-*|VQ>>h61vQw274*XL%X`A6NWvXXXf_cmDgeCduI
z*F#^(Pj8z1H2%Tf;MpI}eGK3D`^xVhYf|)2t$K0D`T5nWOdERZW6EP$<?8=jHuL*>
zX3}D}`u}w&BrJ|_ygl<SS7V#R=10qB?}^y>$e`*=hDO-!`TjmvzTNt^BCG3RTf?LR
zW>Y!EC36Zsnf#h6dw522<&R75?FIi1e6)xyV#=4dYxv$Te`vYW4c639rLSf(pOU)^
z_gqihV_e1muj-z`7pY6k>fC$_e%zhA;zp@}=sl*8X$7LH`&I51WK}KQtgNst(qmew
zW7=7!u(esUFP$jKuX&rj=|s4-kU?==h)U~4P$aH(a`3#tK3^mLsD_r@-9?iOE=+FP
z*eRSM-T&}odU8WLN7b<tK|HOTN?+BId@k*OSad!$?a#OV`MS=Ip>=;nv{oHIr61pU
zYV{Guj)?H-Wv_c5Uo>1HXCfAQn2qW9a?9ZP-?}GWKUdyxzNm3>yv4m;tDMp$@2(QN
z+L&MW?PiALA#vtCd;%|?C@4KD&h%gV|HrRCpIvm~?nv+d75aP6Ic_nT<9jL}9dT<0
zjrdD7eyhxmo_qFzngf$x&#S)AyJLG!SEWDL^G=*gkYCX0UFMpp*|xE7CL}FR4vc$x
zG=1rOC9h+7$wyc1yrVI>R(92d^)p1Bb!N+`%gYtMxmeAxs^?<Q`3ahS=e~+6$yxIK
zxHL6MVjBOOshR%o_bAQwIj=dPa{F3^M+Xe=Mx|yv<NrRRz&QV6##xt!<Q*k`PVOpe
zIZci{+M;fHB8#`HYQ2&GXpEcpo1lci?561RzZBKJ&WYL|@_N<ct}Ok3rH@4S%=vHL
zvqEIk)UA!%A6lGJnq#=>Rfgs9tsU<DOrPx7=T&n2_}9Eh|IO>!&2PMPf*uv+Z7Sq3
zidnNxU)X%+CBywc_doi-DfN=U$;)>&%~f(g+N_<obNiCq$DhibxfyT#&e6P+a`#59
z*}iwOhqo_TqVo9m^`v`3F&RCsLe~~>urM>;HfK@J^}X!q;CbUgK(BHt`^NPt=6df6
zm!5gLR({&6S6UMryaVEXD4w(0B3Qrrmr$F_k;nC`?GMZOYqIsp_1&xeov_-%M_*+A
zr5*35C;95~-_V}7O^NU1#tFGg^VbzR>uy*Sv*dX#!*^W{700OiMGIN{q8G-efB&LX
zK538J_0keaPy5S<+xd^*+gp9MR)xdrp@Lv>oc3L}TMqnTtgNhRvBwra*Rh+fuQT7b
z{&J1k+~c>WhP>Ik>$~!WsLUDiQP<wDw-2=qVv%9FBVTS)mS1*j;a`sO<6D1xoV!i_
z>KpbSez%Kz4kz=jbze}oEwgslTrE~9SJCjf$KE~a@7aBVrBL;xXs?Cu3ZEtSf{jvN
zWZZmi5w(f^q^f&i;6b^bFI~yJU&NMA5qu#l+y3w5-;_Bya&BE;c0cN`KhS;r=;P4;
zbt~Q}>KU~23$F}QxVbI5Ch)y*ZJB=LAr03(xhG?uSj_C!d3;2z;ML_u|Au5GTkePR
zJs)sia@Hx{k#h6QOyjd!t|cqZx$;XXCF(KltNfg{dDE%s`@X0?X8$Gs|3`b^<hbg$
zTid2smYw|SxzlAPuZ=sqoJ!%O4{vU6=Dm3-``V3-$sgC|*PixxRPy2D!*=;ww@c(3
z7_1HJwtPrly3fx*p=$2@vU7!VxvP|P1UIOhKJ<Bpp61<kak`B~{z0j~6ZaqNx7-!{
z)H3f|oZsTdyU+b=e)-|?ZM)`=74xmnZeZEV%e7YJ4f8}jrE*TrVpipcp_w_Gcp{#1
zT261)Jsy8VZ|33X&?<@jD<t$b*Zy84%`rDwc9uqR_4N2c%XRx7Rvl4SIZ-?H#;*xC
z>KPamK7-Bz`1WIdVTe@L&YVqF%{fAUbv%FU3~#)CpOvkj?c8sz2~`t&c;~CWGi>ef
z@7#D=I&x8;*!CHpgywoaI6Y<7tgfZr)1|~G)MOSF6`eVBk9X<es}tr`K9hX>vuo0a
z*z&unF@cjLb_fZ_8whE}dQ7^I`{4AB;^%%jx3+KwFY_^crz>Cc!BN@pvvb4uNeet*
z#5nmnALiJgoRhg>ZkqS|>%VugF-<ekO}vyX)vl3Ie4u>dEX{rQnc4YFwAC*@)iF)2
z317*YT(eDe-}`q5>{{O2{^tBub6>ys^$q!&FBjd@B!jaK?~q{mEw}CQuS*5XmmmMC
zyg=p6p{End?c@GEii`|0kd&WSCm!v;x6%2L&Eh?~c>b<VE;MdSoFq`tq?mBO_t4bm
zr<a`PuB*|m`u3u;V}-|()2p1zkGVWzRD2R;w&ZX-)Acy!NaG8J`>L{=e=HSSS#hP(
z>BQuehaK<sZA|#+U)$EG&lJBR<y`$l2hJ(pY?t_pog4La@B07yb$$P_@B6;n&Z&O4
z)8hA=&1X-02tAEDVE_N;`PUwsYhM0L`uBVP|J{Z<k7gZ-nLXqDGId?ABmQ<jRp!<G
z%5*-%Ya4&w`n1_L5q9mVTfWroUH@76fZ2iXGa6M+o9=(v{`b%4^T#cp&q==LJxPai
zT5ZeJ7|Hv!XYMyP9y#@pPp|w$s{hVeQcIKU`ngvX{4HF!;Ml&lC{wRvd(<bKVZMCz
zK4?&;>|vo(jJsWBgj&8=vu$i-$0e`Gx`n%9T5f2>v^nlDP1<3(ZL{)A$=4iS0hI>>
zczh-n1}Y|)9eDS#@W-(mCN|%W2F`hNRru<>i07J@JPhMFzN>$3to|Q7&CBLhgk!$=
zs(V|{evGaSTC?P(#S<Rp{ZW?tPM4OiwEE{TE%?um$Nkb@&m0k-5x*;DMx$2xzCAUa
zJ3E+;w{6eAe=k9*Ms9!KPPvb5ywW`)=hkP>d#v<GrCg}gc~wEQ&9lZMXI&NleQ39r
zxT<sAmUp^CXo)woweu>TXl38+Uv5^#zYu(|`|vOIlSO;qzh1Zd+?uLm{e|8wW#{kQ
zO5UBH$0;#idcM1o`prH`<6}ChRe!%;f4ud2oU!~}nOjNw9Uj?TPB$^vk2Rb(X~XKU
zy-6jdD|F76x>W?0T+ZC2^<lfAO!LHyI%B5e6H~XaNVm4x-t96t@;F@kSl7{F`<suh
z*|m3M1_#)N^lVx3an=NtOYcm>yLWpl#_rS;^E1-lapLA23Ef}*n{Mx|-Y&WNsbS|9
z%SL@(&)Grxp5~5A$|otszdLs60k`MYFU#lGW$o*VuY4-{xoDC^h5Y5zInP+^`oHi0
z`D}LEmT2qT<(B7pN@bFqnetv%7<~4>Q(=F#;nv62U2eDk|ExKFgDr2@OEsN{4Gb|J
zN4<7`eY$Mxkr(^!%LOm>^_9pC4D0+pbN|1u>)nE$No?*7j*t5?N1jnN(O#^y&t;u!
zx#8YlcIS?@3f5+E%n*Dj{wsLSvG*T1(@xk;$Wv-rFyU*{hOH72cR%JQHK^7tf0})1
zLSYk+!2Msc3g3etY(0Bv_O=|YN!EwoT#;7xEx+@t@269+R$2ewYvTGJ=BOqM6?rq;
zOX(<XHR(N9B>(XdJKxp6M`rEVZgOKwM&r4D^*k-n?ILH-mCN7eKVJ3x%*^C4<IPKs
z+umkt{%s+ln(}K(&(24;{Odjmf0ncVdL=mR%*^MYnVPF>%w&yulD`Q4er|2R74F8f
z#+2{Ov$^W4RsOnvEqmjnsO74(&fLSj`>H>qez)PYnvK_3ypAfjGnaE&^2<M)J}F!2
zg=4r=gRGJ%%byDi47pADZSu~xcOPw+H&7|{Q{0?+IigKyQro(2hT9_c4_36v+0|6&
zuDmQ{;Qii?PfbcC+3V4i6YadxVa9&4XVS~2ZkgI5z0xzvVfn)46C0FcKK7jyYCRt&
ze?Uy8wWPds$%9!drWEmYK40xF&tCRkaO&pkJ5_kYN;>+S`vnhYFM92G-J#)#N0X{#
zQJ?AYW1bVHM6AqOeypkRmez*FsxLoPsw7XcnScDOUH|pltDW;!7iC)UDj)c@WXa5l
z6BFB%rTT8#g?k(dX}#R=`dW0pseD`R&11Khi!7|{dc`eu@Gp18NB1X-%D1wMyMCD}
zn8?1aK2-j2)|;jMYuw&_i(O>0=P&bvlj%pYuf;m;vz1*r<B5;v%<DC)7B3UNEFmk%
zI7xb`kk@XN__7IiD*CF++}^r2)QEjPcy<-n+Yq&~TX!ttj`z-8)^@I);kM9L`SiJ^
z(`HUTUzPS?-t{-{4?O;+p?O=xo=2|oiJ<Wvr)XB*UgZTUcR1{pr#$(dD|7hnr+UAy
z8E1|d1lmo1==kP{oFsc*nTCk@lzzL1J2uWKVx6#AxZ**1Utw6MM1Urzx%8<%v58Ag
zZ?r7yQn3@#-`*#1gVVVFj>HYi$rE%1H#a}22~vIB7Z9C3jeXlzPGPkfzcw$)etl!^
zq}d&n_x|3l&3RuqKl{~=eXn!8=d7!^=qf%lQn;*Yif{b)Qqbsix93^OzQ09@ZO%r#
zF9i(`RLz}sVbPp_0crocYJ!E=pJZMo=Nj7K{!gXP>Yl**$VaYP?-wkdm*>1SW%ADp
z9JyT#S5L{@R^<$S^!7#L++|ZQ%`DGT$?(fmw9I}X!?8gwGJlIl+6I*z&xzG+s~aDd
zeoxaoWnVr2@7cY-V``6^<?i18{nm~<!Ka=0YhGVpzuxti*}8X-DZ~D%`a&(C&L15;
zti`8<+#Bbny>odUac5)l@hr7f!9tHL64v(3)OULqm(ZV+sx<RQ+>|Q$73$VDOjBGe
z?w#88eob<`4)bk|rQ+Z3T;k)en~^@@ZSU7(J9p*jvUN_BUcdRjWx<1nje-et4mPu2
z|Iwr#cx$bphVI2%B{$b!Jk}^bZ%V<-BhA%p<yBiQEdL$#Y+_~M^Nkyyx4t%2eVBI5
z#xp!^-z?n^VpU6%l($@Bk=B*g;w{W^Hv8_eeEGu9$_K2LemT8%v(SdMtk32jiwW@!
zZn}8kqhP|^jl4xwLce9%gydwO7VNX#d-dYlHL_w4=N(opS?0X|)Al<>-HK0sg&g&{
zzU<`h8^>M>zTS9T?(pmN`{R^zCPY-)+rBBB_rZMsPhVrVvkUp|op+7BF>eOj`OFLn
zM%U$uIkRe8yHzeYPqp4)80_^Z&iT62fwHVS<*g1^)vPm1EpJ$6O@7-a|A(24$KWq_
z{bldF@9Y0pKmO3Rdj8oNhKB`omxg++|NrN?{l|B^-#^;E|L@vBVg1NWM}G7ypI_m<
zOUJhVW_sabZLeiJi=KKpf0B8<_sb>kUKT&5WfL6FSD75Dde|y{#wM|kb#l$mK=(`O
zyDwd^VDdWD`}p#j)j1irZp>m0o!;THa`9?`4QmCq#asQ}a7(5-?z=2Mqt_u7|2!4%
zs<qYMB0pB@cbi_w)qVZ3zy6Q%zvuP;j_cej`1y4D<9pTbO(%VNU-#X5^QK$=^}m9h
z&y|#(oO<C-WA1Fdf|u2GXJ?tZJ^FX+`o1>(`k$xMZb{ESUUsN3{#XC=DLdAz(Q&?J
zGk@N^ye08<3^G<FC+2REyAIk2VY}dkrt1PjmK&a>Wu_$wKYt`HTv)7dV4HiB^23ey
zJepLZCe8mkV_U{WC1uh4J3B7!m~=-)dtTwI3+L;;8Lx@mea++Wl!Bcvn8TemUo!BV
zyN!?E<^#jL>UWks(&pz@%+kF3@2P&h;gbJT*Vi0fVp{mf<+Gy0Rpa9gE18xbsXfRl
zKBF*U-J>N7GeH|Uj(H?&Fl`mskX*FYuk4e2>_(rht5if!NN74cA6K5Rb?LRKe&3s2
zJm;TP@tdS49`|s^>e~!mr$vkAl)bvLGVSHT=kx33w8PdIaNE@UeI0L}yfcPXGax8+
zR)}*k=cW9b$I@=8e~(G$&nP{<e$OYbf`e>c2SUt0S5DirbNN=Y;~hUIp33eyyeBI|
zhEet5v5yy5cR9$i+}K#M_1x0Wp5LxU>@SwTwCAs3b`8^;rnxV>{gcn?9zC&Zx%{*B
z=~qLOuYOiHPz?>!`rImd@7{@Dx%_9QvtG7JPPo0;)VkSp0+$ZE=fvw8y1_<Emz?@~
zOup_%;+xys&;OXcEW{`Cs?bW`=6CAP&(F{A_;=A=-t_U=^82;s>-K)TB_)5g@%smJ
zbFVXJ<oka%UbuQsxH~ZV-PKgT=tV0tHJQ2`ek)BVVbPxV;rva1Gvl;Bm#)wH{*9Ay
zx?;LBmzcg(+tYfPo|t?_qq-WF{<FFF*KB)w+2Y;l1kZEtUR%36EeW2MU;8@x$Ho4-
zlrY=HhN8!7Gjl{GEZlsqnjN2FdA9TM@%w+@mGd(0UV8t)?>G70Cwf*d%w!Q+y3FvB
z1ZYTzQP7}9o9)%f$$g1O&+L-)iH~Uc68C7qyN~~7n3+fIIpUV^bdyAkZJoxal(ipD
zZl8W-?@Hl0iVr7+NP1Mfvkg7CrEL4Th&2~A&KnoJ`O#<n&Oj^6&-&K>`u&#g{~iC5
z`L^cEi@-mBp4%S}4UbJ-ru@<7`LyC|?8g^omY#iXko(=e!T0pDv;VHu{^eL<wW}`X
z%NnH%3QXU;_iL9L&E2GPsrqT!Qik~R&d1JoefSdGd7}L4tyJ-%Dxdr{v5%}W`II+i
z`YWaNuW?xRCr-Lzr|_R`Y!POwRUG*=3w%G;|9LE*mZ#4-Bl-B0GRxdft(V2;ZN+7T
zpGkatc6Rp1OWyhq&so1WS(Ux)Xh}tUT%6pBCcF20KJ#3hTx0+1g>v!v-|zS5bIf{t
zVX=F^+2bQ7mo|Ow(^b5^_w3?#uiYIycfefxrbeSP;^m@)9dlnW9p|%F7OdWLamSbK
z%p1NRZ{PUH-?{L%oc#;A{)n3D<ibn!tDc=muDR#h!N2F6<Qirk?~<7Lv-+%7q@6o?
z(y+MVrrp~)v3}``W>wzUkhtSvo3ugZC6ztjZe>@zUc3FwoTPJ>+vKP3Q8zXguKo4J
zaFQPHjva0vw&mXD`B_wF&^ha4WpB#9f`?AYCtQ<tZujNfvr<3wc6zqz!*7S9=3j9Y
zP+*KMO%T@%dam2%eyl$HsB(6dlF>Si14@NTiOzZRWR_2R9Ah~#)&JMG!egOjrdE%o
z?5Ew)xf%G^CqGQ(kZtw18JXVOcBpv!SuQ$i%sjX1!l$3dr1MRJ^zXhcT5LE?_V817
z$?%Ltw`OJ*trB`1AhqrMwwIG9Y|p=+CsX=CX1QbJV;yPt@8Cv-g<VysU;v91Bh%;Q
z-ww9iWuIW@8K%>mY`LejzDGv>;1~5t8@{AnXA+%!$}n|_&WcU@!<UD+-hQQ^SoiPe
zbGNxZnp0h(=a;pm_%=OtGd0s)y*AoYNIN$8nz%;nWlna_IY;hXXji}dT;k*Uy06;C
z(`wF|UYB5(Z)}OZZ~R53hWm+@5O`NYNfyhZ4S!~)7+zR(<avbma~<ykZJL}jj9xOB
zt+(dRp5Nnmr*i2G+s_-;v|W>p<S+4yzo}yDy-lY5=_4MQ<xBN5g$$R*dpD@~uUaJ8
z{<*^P`t;;OU)X&+r@p-Ku)X(v9#e>WaIEk3DO0*~H?*AF;`!<fb8JY^(zEw{im$JW
zHPy<lo)1b+st<n^Ufc}IktYRCL|x&%zC=9vRKWiw{X3_BJ)EpR@4%D7`H2TD;v2hC
z=Y8;+sh;ypuzZu#uT7_2&2x7A{dT+Xe(iV3%&T78RGcQMa88o$*R7m%#B-WTx>Rwb
z)ApA)Z6B+ut2g)Azf#VO+unHmoB8q8maV6J@0iVd_gZOzN{qO$EokMrtXv~UjBQoL
z+?Yuv+3g&6%tD`OF8%h(NN%&ovMCjwJyXJV-gHP>8geUQ1B<Wc43#?*7K@p0G@BMz
zdwq?yulJd+M=utGcGlez0-ZAWT6u$W&*rips@u=SBnU|_7buju7G=79iOpBf?Yf@o
zALN#u{&_g&@{OoM_G1_C*RlMmlKyXL3*Ob?AoyYd$AlXm1)!!?pm6lctt<EH3aMUg
z<JpumXWBc@LsPEoTxNCkfs~Z{g3}&{cq8AL#?|ay#i7BJ-sMoU=dsu)c6*D)oyC9c
zW}Y{Z?d6|YE!}=|Gy5Dtk+5BV*8l&dZ)`sO(ubK7WUpRSDfH7%%J80Q$T@@Md}e^p
zcb`wCZVDv}PsBF0WLhi$Z5g~J-Z*1Mmf?rY`{}PP&vBKu(ED>zeZGXc)cybezR&h8
zlli}Nx2K-viJwPRJiTA#HtJq}er4I4H#w8dKCfI@$g+!t(>%@v?7G~}1I+wiCVfql
zHvgA-`gvy5R>1`=p0CrS5(+1>>goQty1s7fv72shZ)~kEl$j}H@_z9Zug5x3{@bUT
z_`H4t>KTHj>wM*IYu&xI^hMPEDJ{FhYO^v$8W$)B#N09EnbX7<GC|HEX>)PSPMe4M
zb)TglpMABcThA!_$ERJY_Pf)=R;ca!|L^z5CzJhWiB75LJzNoU&cL8x&yTm;?;lg0
z9&>4hi?`BqH_>uON5&mr9)i01)!x6>Ub|qz<aNk5d5Ix-JLd}nj)+f79twAUKgceB
zq=}XL3={A3ImLY++gyuOErYK5xXV61-f!M#KCj{tXYo94;{r#vUz6Y6-CfR`dE4oe
z-7^3F$P!o2t(#P1%r{=<nsr)s-_K{Wf4u+yFMrSHbJlJ~%V+J@Rn3{be%+36p?6(d
zSEUBAh&1Z;GI&mUyuKv*B&%fDng~X#4>xv|YJ>XIKJ#oOZL7bTuy}h;fA!jTwwdIn
zrPZENX}Xb{j#xZe;h&URqxZ>yJ7<z%=zWzKsTf(Sk`q5B-P@iof3Nm?tnslkszU$2
zuCJe&K55BJd(%@{al%&uKR<i8WFy?S&FWqYV&0qE+RAEbYPQ9!lzKL)_3^P@<8?YO
z&onRb=$!5?6<7UstAs_tf{%*6nlrE8xwKYSW$Ba5%ge4-?0dxJnLfXEn`HgJXXg7m
zyY=_ou<3sptb48`Z|~PI<-*|DxcFISxp#jH1_*siUg!=fnWR`eN@7GigI<4mdAT=h
zW{S_tsX>~a6Qnt3vv_`=W}JS`<oS+w2I55zUU~9PR6RerW9JQK=K5%7y{NFuJF=gj
zn|n<B>qKRDhfs^<-WPw(YFWFm6116?U%huJcwbq&Q^S+fN2OK>EqgU%lBR0VuN+Wg
zFY}uCvPRLX*Hn^LEw`N8+2ZqQtI($10W#m0GKzoaQHeA6{A}YnjV+@7|L^-}BaFq{
z9?Uvq|LbD^hyMCMhXppQT6A}XS)Gh&`MW#u1qahW^G=|-l)3DTla!aUOf<3NJ7YUt
zR>rn!i{X?-Q;j?)r+6P)CUW||ipRfaUS1~ilsYG^@Vqg<?$^qV^VAZH*UTu?Rh<0c
zrQYZB_5Y0P{{Ox|`-{gbc78b%dFJ?kpQdljxoI?6?Q;3#^5>3Q{}!)Ox$|$vYhm!h
z)(m47jh}vVEG~K+G}-a!l)K5Xs`q=pe|XfbFLhi}Mtxb=j6Rb-IoqyYY4b<>Q}!8f
zPC0V6SSDVrGe|>Oa(?~4pT`uspZJs-FW0#!^!wv+dGjMaU(G@<gm`~eZdl@PYH{^W
z*_mBuxo)-!cTFhOSe<@m#>Lj|6|TYHg~{1U4n<FYyxG40Z|<K*;`<FQ>0W1$Gs}@M
z>ohf4E^)DGR*<Id9QPiH#7D(C(_4J5np{_0_T@}zv*$ja$tqsm&u8cFyBXm;dBOdP
z$GnTX)K1pFj=q0LG(0Bp*nCaT__CX+YVXqL*QR;w$X+BnC+MZfQuuafffANAUbBQW
zmh)Uxs=B@|_E>_pvGL^y=k?Ls`EGB|H^21e;o<h|r=5EB`#;Zp|KQi__2w<RKz*WH
zDrH{VKrQRDLG2;2lh;_PcKO+8Fc#msG&MY~Q#X2>#L6h%O<4zTuaRHXmnY^U<q2L7
z-Pg&`IYTScYlX~o)r~=S=S-fQyiB6@ZFan|*g2W!OIuDCrg-h1v#I29ulb{GxATmJ
zKCK8`%(HUR5zlo#)1^aiPbu5~u{S^A+#JgpMyXwjm8*7J-tD|RN3P-l<AeuS9gol4
zE;zO2yo~W)XRvjAjSQZXv{L(S@B8=bb(@0a^y!mc)qcO5J|_#bmSM;9dDT6EqRUM#
z9u}?jxV-w>48!D}T{Dvp`Mhr8)-w>&J>DQJB-A7N^~6NwvwI$c#vFbgjafE9>{5v1
zWu@P(;&BGuo)<oNA8$IpCsKoRzGYffyAmk<%Ca#E$*-MpbRWC^{y#<@vtlkZUT)nH
z=<6$L^qk}JNj7HPl`D&$6}5foNL?D|b$m)k<=j=NeafF@*3SJY6XiAeNaf#4-uk9t
z7emU6Yi2H4`|yllfRJ7BnJ;{h9nL&VVN%O(d##IeY1Z=EaXq$t?#7H|fui-npOzZ)
zdYx1W|F_JT&ziOKr9p%fpN_)giCa7mnS7A4tJ$$}%CZvQ%scnwE9U>pgLi#ETii-2
zSTvRfMJ;6%>zwgUQ*-5|PIlEqy$24=TC3J(+MYeI(nTf7`%#E`@t^6F^q1ap2vX&|
z{A=d(movMQk5AcRS+^$npl-gB*CE~Ge(xchYMd1ul2ke;3CyqmSGjqTVCSUZo)wFh
z8D2A(xy?n?WND(+^97H2tM(~ney$U;Jo#na?stdQL~eeyV*1Vy#pjB}cV>Ldko9es
zSE>Ix;p(Tf1$o-heRJ=vgcL@O2dWM&lJ=JJo@kQkbF?sFb(vaXkf^VIRPyn@qpjj`
z8Da5{UU^i1dt*55+?09D%cUl6@%->*k*m;hL5bxC6R)i7x^|%mw2=m3q|*VfrC+L2
zub#92agd+q;H{pZS5MtOsVw~V{{DTRNTrLH7}>)k9+j4FcxPxC+L?Ulyv^sH!gmX^
zGR(bnt;2-!B=f2utMO&|7$>P8FV<xJ|I)wSNNz)hOX<DJ=T{{XZu&$!YadH}uvg{k
zFO}$d&x1Orw9T)6XQ`YS9JNk=op1d2v!Kn&l@^&gka%WgQgM@t*$ZmXf4iA}cFu#I
z9v<gId7RUqc-LPj$v)}eIU_6WoFpI5p8iV)m;c<p|1V7?z0Yy?W$r!h_2&GHst*yh
zk_pEIg_X0Ob-90;cl6^Uhm}*i%_p>2KA#?BxHqHlVEf<S->>gjwT1PWsZ`>{3Ei(U
zyl$I3xpbk5MdawU<Q1CW&FB{v3M^=uHDgA`ok-Bsh}mlCi5{NY%qC1(nYQhq*X|I@
z-H$K+=<2q%`F0~YO^{uvKw;r+lal&p94L81j?rs>i1+1BKkfg2w(oV<T{S0n!O<@Z
z9Gl<xZ(e@dTPiJ5b9#!8__QevmSQ=oZ=%d!_J=7hP`RV^<4YPOSoD~tL|Crv=+*@-
z?|Se>Ra>xll~8O<)XHf~&c5{g`|GQ5^4^}~u9BdUNt=&Hgx!|<ChN$u=iUBwjWaH{
zd-<|u&_vYG;yKk=_14+h=Cf=5erUI62@hK|#l}abVnR>9taaLw_;a$`io14h`{2xP
zo6@se!|}C6LBXm}q~jtkBnl`97Hc}6la1Sy(m65bCHt&Z>AQBQL<Y0^YR-7Lbb8z&
z(D04T-!GS+%@Qj3uqsIP;e*80n%dw~5EKOzP8QirPkerE?vDTee)B5MFFt4K7JK$}
zi1+1evCwN@+P3=F_)Xrk^W(0z2MPj;r{hD<&oETBSeXqw@<Nu4an;h5QOk}RAFuJ;
zu-tF1(K>BQH6Q+{Ih&4H>~VV;!D+GM>hehi1s|_o0oQXc3^*nPcy3b(pQI~W@IfX#
z<dLPH|Dq#jdiR^M$TO-we2~1xAAEYo0%t{sM@x<QS1rg~@RU#M=dOz!|29r4_+WTV
z9g-Ln1p^N8)^1&~Pw`9X0!y$S2SJWtmMJZVw>;W<1KcXnU|Q(z;At_cU^E;?)5B=K
eAg+A)XJ5dgv#oTW&ld&;1_n=8KbLh*2~7YFW7e$z

literal 0
HcmV?d00001

diff --git a/_static/security-roles.png b/_static/security-roles.png
new file mode 100644
index 0000000000000000000000000000000000000000..f45ba8e9e11d0c19889513b0afc9f52bbed967ec
GIT binary patch
literal 46364
zcmeAS@N?(olHy`uVBq!ia0y~yV7$w~z{tnJ#=yXEX8PIp3=9%Fna<7up3cq+0Y&*~
znK`Kp3=yqUD>*Gf?_d9K_x;Yvr?Z|%rWu`A`D}CES?jvZWmDIQ6L_Ykcqq2Ibh!mP
zwM|Jm70@N(v@)d4r;>lw`}cqM{eS-7?tR_7+H=p>?frIZ{?_les_&QTGsvu2GGPLP
zh%Q5;V`54+b8eiwdV1U)3kPPs0}L-1O;6gIxSYOpNkrl4`QQ7eFI8m7-5c+bbMx2y
zxBu@uJ%1?qijN_sGr_z+;JX9MeP)KU@8q2Lm>Dj2pZKYK*lF7brY6ag9F7bde(1j0
z+ibag!)?B4_pWW+dd+cz9z%teQ0E(7hOg6V?{SppAK@$Ixa21P<e_xS3N@vQ^}G2`
zGBbQLb4f2xNcbQ&&wWG3?fM%Z|K*$A{dY@c;-3GHWaGDS$6Yr!QE3qQT0f`n|6Ufh
zmj9B;;z28GPPAQ%wp0Eb_Dnu!Q|n5BI|5JA@){GWSnNN3y>adSA!WOVZDsqvKELB!
zI>D0p48wv3cF*f92T#N-nsNB=+bwm;kwTTb^%wOUedjga^tbo!iG$bnzg?`<#B|2D
z{<i10k0!sG^()(6-TZU$<EN|UP6k4mE2=NrZR4}H3CtDT_w5<SGPi>K75jTnzTcO8
z(a!2weaVT3*P`dJ3ha5{dTsl?i;a=Y&i{X~dheRN?Rb*whO`;|YajZ>-?(Ue<>D89
zc7FfZy|R28+S4c8&CfFsioJDh|8KQcmWY4X+Vv~hBqH9QF|N@zIrPl`{yzhi17*(`
z>)yK?ZM*Z3U%#~_^47Zo=f#bh7Z`Unh_@(T<z->Ee{kD2+_=5wR^~-^6$iF^2ZTNT
zO#Acl;fA|HEjGChCO>)<`~`k(pZ~3FwR(rc6Y2V;*8ZFiw%(Q6c=xb;jYEOLEZM!{
zYun6R=gsn%>Z-js^xv1qOMe<`h4HWMHa+qx+4cXY0`~}Zg{eF>|K*K@pS<m?*nU*?
zML+-l8;5HSd`Y~Q%x3s_M)(0apS<XwYfCSf&-<hQY|jCn9_4Fa>Z_l(-I()takH3H
zg!Y217hiGIw^+}TJj<tY;ZuitR0i)6b5@sM^LY;cFZ!LX_uuxO*z5mao^PKM)f4s5
zoO}Cz?ZuzNU*8Wa`Ip>hGhzG5{iY97e(2p{v~QY!h_`_ELF?=XQ9HQncC`L?JM^SX
z<&Wgqs@b#cla7Dy?<;BjvgXUL{}OY*%x0{t-s?Ey`NIusc^3-H2)Tay`i=APRVTj`
z|G32p<tOj%*>uUMiy>$3d+X!J`Cq>+mQH&2)7{PKTz+aK1IMlZCz>V}FEEnke9is;
zM9YM|CzmlDkj?&HP;{h^XYbbo3``3g%h;qJu>Emh`RFO8!DPCC^Gk!_28L}1IAt8t
z?y|Eetx-N0SRkX)Xi^}S(%ij3K&08IK==-$=>kR@rv8J*7r5CDW~-PjJD_gBKka}N
zi=#ychoM7`0KW=Hr}L%>Mq9)$HTx)LpWrNN-Lp_ZL&l0r)gkkO<qM?}R;~6t=h6$x
zFEp>P?`^v0xcNePhA8Xe6#+dOdQ$|vxR&-@a+<jyC-8URy%o+YGD4JI@o0&Mw(M$L
z<!0+->&(08Sm6ACZi5ER#Izaw(;B8G%HCiqYulS(B*VS@kY#~j4Ci&_?7vKM?av>G
znuwikc;@P@@G-MvoAd6){0oyWF25jtG4(}OiS#elU$Rwlf4QBH6eJxnTqU90qkK$S
zxYP5{lLRlr?}l$r+?#nwCvjs$+8To}&YQFSBJAG?zR}EK+{Sgg=j~y?1o1)(8EHS6
z<$aqEOe{#;p>l`y4sVR`I(hTf-<`{ke14Gn@mEE9jewop{O0|A`A5D#Uj8v#WQ$0X
z$SM&r5jl}Sk(VN>B40&pMS?}LS*)529Oou@e^8cDe<GyC`L@NpMSjYZDZ4d7HP&j>
zYChH|*31vITUg`1)5+Ce)orQsQzucs(zaJpp~hFWSIN651$M0PEKzF{JTGv%bL|ns
zNB&uCS)N(SS^Te(uT);Sdgbqx_zaB<mdq^~d>33UKe=#c>C1&P7cX5Py6Eac)r-e2
zJ-c}ABHv}bONJLtUWmNFdTH*W-G1Mv<h9AU>$|LXfA2WoBi`q}m;FHo;}6C!40af+
z7)&wPV(ep>B-tw2EAdz2vP8a7nejQ}i^eC7ZyL*{ol34cVRDYgnA=d=klkRp@%==(
zq`1_FNf(norg$c<OnI3enf5f{YRcCX-_*59vMI5tk5exve@;K0usTsX)qQjK#^{ai
zo8pu5)8{`<coOiq;JL@s9fu7Mbv_b#yycnAp~y2gkM2Bi^la(@(L<$;tEXo7&7K)O
z`F6i`_wI?+)7l%;_51bx#r%cOyT_@;>E2_w7jw_-UZtI%o%6neecCm5YqEE@l;3>Y
zbw6}#_LTVt)}MKQbpFx%hwSwaC?}{Dge-7MaGBr~5P8A<!=8lp2b(5rn9zK|bD`8i
z$;7Zk<%by$xgMG;xd`%3bXIazVqO#xm>O7rk?CTb;glIoGx{UuMf6*E#RT37-{Y_+
z-#l&msdo$Ry6$dQU7@l?MM*_V<({XJ_bjht-q$?pCJId`ns#c!s|mkU*DA;=#47!b
zYKuD-p%%9+?%D1&GuG_RnfInaCeSbb-He#Ecg!mbEB$|Zf6^C~5IG~_r?o{RM?*_<
zlBl+5`c#%FF;hQHZJR1NRd=etrhVYS6&b5#f-?gm14Bc2gZD1}73%ABHva9dTW91R
z+Rm%?`sTCZeUSRf_(1vlr*~g3egAatW2qV`m0qRZ@3a2QlAE=3*5#;0QFT$~TlQsm
zXHVYxK3o6widRQon7lr;i*47+U3aU#RFzeUe?9i4{AKm)@E7N$H6&yVGt7=i%#uix
z;FB(t+$lX(`mD6J<Z+4ZGXrMcm=R-AnXi@RWwzGbd8Xv-)LDBC#ZCB))^B7Ga}%2>
zws_j1Y3(}l5s7Pc)_z)J7jZg5e(Sppi5o04itnbK47+W1_uJOF9kDxNyKQ^-cGvFw
zyQz8IVaxVHcg^Dx$J71Z`0exCdd?!f`gzdvqqSAPH+}crsj)+4C(m2)d-WCnFEhVk
zXX3N5@hF~9@?o9!v8xBa?s{!?vMIzRs>HbHbouP^>xK63|DANctb988TJYV^bDnRR
zzU#W>ddd9K_df3<<$34J%(sk}z2Cj>{vV#dTz{wi)%~;nXFi(+O9<;D=2+&}O)r}N
zG~a64+04)Wy|trVrL{*s$aYF?#=IOSJ>FKQ@9o#x43*+bcO7y)<lnNt`-b#H@sGxr
z>^{9q+;!NoefOdxi-Hy{Tl{tLdO1h=Li<ZaQ{KP$xcGh2mZWt@oHpid)II*AUsY~)
zmvM)-wV%bi`ahL>O8)Hp(aO@^^2=r2ksU`mh1t}#Casu!!t=2DRX;Jc#gl6%?+$(v
zq_^ac*H@3XK9l`Udq&$oty}eZ%bAyVF3(QibFO5$_Of`ZZd>V+G7V?t#cyQp?tD=!
zJTq<P)yO@OD<ipYvTvUM?8I}CdFpfc?d|7f&x)>gd~oO{_iOQ5J-%m|&qJRUKU@Ap
zU%W!(OZ=rhA(1CSXN2vjy7~RnX>GRfRoyLJMO_<@3LcgBdgE=iPAgtlKULpX`|b|0
zlH5IKcCA?(vvSWLtLI<8aD}*59DTz(U3#y1Y5uh^uaLNvN$b3Jv*xwl|5b7O>$eNC
zldW~jr@jxnC%k8R{rrb@S*9Vfp|<glgN@@}hujWNkGUSSKCJ$K<CErW-WuLY{+V*i
z%!Q<crOjtAnk_cldDe5eO8Z$EmN!1_y1KD+!P!-7ci&y|_hj<l<7;K3WPSaw%r~(K
zt&O_A@=oMupO2BH)19vWea?0MeYtj7_;-!3SH7+Ka_#%um)UQwzo`G>^!?~##>I{4
z&Ci-^oy(l{+hf~~$5-u{Qz`o4)oqU>CvLsoVLror<>D=iEtBUYyXL#z59`(Lv#(kH
zd)@23XMbN8ekVL%%~}2Wav^&G`zJo1eWss3an9t-tMlLL?tCwN6?|g()}2evm(2gX
zzoTa7_t4MT*Y`aBbH)7A_OtJo*KPQ_W1GVM3!5@_T5J>9v1QwwUz6Xa-|YJ2b$r#~
zS6`x@SmoK4JC`i}H~r*#^VyBFXDg~0W&U2x&=WFcx;VrA^^6WBObv`DA9Gx>{(1d9
zlXG+?JHxjLDqlFSvZ*h~HJBBVC}TZuYE%0Hzf8ZU{x;sR?#Axwj_*$foUu5lb4=*y
zts{PiA0CK2^tCyiKVRv7ah(-o_QA_e=Up0B%$YI$$IrWSg-!=4T?#WQ+$37m%%$Nf
zx%BU;m0DL<z5ga~b?WzBSxYkRU8`E$d_D9^@pb#`fNYC2o|zmoq-Ok_xjg#L=9<i}
zm)mZJojZ5P?!v<@$xAOAKQI6NEOy%W^|CDMScGQJZrMGped}{aegFJP{k`wy?BnWB
z)Y~l3{7@9&w86jQsbZ>8zJ}eG>>B|U$u5y8&mP`b(U7rR+0FfG@{}ae{*^~EWz9Rw
zJwEvGSQjd3zE1J{ba%?LE9<r_49@rWpZ{~tzrSyij$PV$^vuyUS7p9bF1vGAoJVih
zbJ^49byw`U67u8Crvp<bF8cWB=A_o3A5y_HBX)i(o!)gqI@0`o$hXki-M;1S@7A5&
zd*OHb>eJb;vgNOCy=HD-aiQRUVrX(@aAEPm#c!rvxwbgB?yXtBsC9&O*t{P5w=Zk{
ztl9ed;^($^tLELgcfoFMUDE$<@k-{nW-jL$3m-n*G+l7LiTeg+S&tgcJu~IbN(4*K
zuBfhx$^CPA_o46Cgg>}kU2^xysgP^!cjad-Tf1C6-S3RoS-(1+-y$aJ=G%YleAWFs
zeAoK#&vl>M*I56W`}Fr?`Ip>|-Ah#URr=JzZ=0)_n{U59Uw&8Xr{>g$l3#LtWUdJ=
z@0-3rK#e2#-J(fqtAe60?znvHlISIKqccVqjkGsUh?soy-NydHprVt7?;m$Q-h1f!
zme;2L7bz?i=-<%PF>%G}h$$7%-rW|8on(9|L(=Z1ZPB?;iCmdos$Qk1&WGMxt@q~O
zs^T|OFB)9tx!`qu-_pyge@DvaA4t{6UXq@Z{wPl>rR;{yHKl`}T0$q4Zt`9AR&#gA
zZ<lrrcX{>b^t-iEdcS_p<#&-gQ?}PNtMGM6{`Vd4XTC2za{HkBt?8%A&#k|{-)@18
zfxd>Vg<VU{iPkler-XNjnMu?cD`{SOyCH5$$(93x>lWu2`fS{Ce8cf+kM7C8@7X_h
z!d!{Ur20u8J@2Mm772Rwam(uEa`WY^KdaV$d{cDn(N6i9pCjjQeqOY1&i~5BZ;QO*
z0_rjyzc1}Pbn|p@_&u?`TJN+gi?(ju@-Qm>=JVGzqQCQ>+^-2eT5<YMnNd;I+B?(N
zd|PpH_1pEwZ6@Sf{P^IKoEhv~{CM$e-Sp_>TS~Vd%PlV#vC*unTKW0R<_~(ap9|f6
z@owTg>%Ez^b$`S3zp#B_TibT0?Qp!>J}XP1&$nLpp40gK;!ecf+mj#ny;r&S_<sG2
zjJY~9tiCuF&&sMwSXS}vhWmYgxnjHd%==qvcxUqebo(dwQ8`Po=wkWFgqdkS-}&#I
ze?DwZxZV11>w<H8a@Oy+$Y}OiFkQo6f_wSmqZe&wWULV>6Dt>e@2u#$(doq!oh4l=
zQNgD#1zgs-xNlMRGX3-uDLsjw(zc}qri-Q~Cq<{vfB52g&XZM7^q!r3eD>k#TT{=?
zR}oP35V|D%O!S}TCDkYmF|E8Ev;CP=4Ye(GzPjv+d$ucQUCf+4tDCx%!Zx~VM&Ar<
z^?f=ut8vzGxyaHrzi!;i>Mik=*Nx3pl#PmA@Y^{*s{X`-#>Bpf%Qr6gxWjYZ%2vs9
zYp&WHJal5x)lZ8<7nd&U?O!`f_F~?df6ERBx+klvE#H1F^>@?6-}R~g4>K3Cm&SZt
zSG%Ofy#BkbT!@_Vyz6`TDz&TE|2Fw~>}TdL=Ks$c9yeM!zF6?>fv{qfqCJ1;gt-%}
zciWs%%2Bj2Px3z!k#Z+--C_R4F^gv|cJB+3@$D$=5$%k%x+XQf@{V<!xued+uPmuT
z9#IyS6aUyO)%qGD^>WIe%sVe98gIW8eEwIu#GJ+U-z|#cpT&fgYzyoA_VWq%kM5O~
zlUZ}7r*Mbrt&R!Qn4~49`Ed8CFt7670JlKDW|v97c(2b^*Uk^yyJKse`;&E__ZENu
zoh6Yy_tmG@?a~JPuF|}-?#$}9-F4;CjbGbxKO4rkpA&w+e7RM=z4WVFFT~#7yk5O8
z|4r+g11}HiA2!o}?e-%sz29r^(mHX=nP$RYZ~pmxsq5;sU+@3$Z4cexQ8ugd$;@xd
zCt7hkxbaR(w_|8%WoS?pWQZ1Ru!`giV4KSD$^PT_e+?6k2=_mkbEbj4gQ-&GvI*-s
zk7qR!OB5uZ@?PNhb&!1n-$my|6VxWjw>d4JShGQPmV={)-4wG^%%wsnKm7_^ZD60n
z=6*Q!gMn0km@E6D?u+XUzDNkGC}$saitx>m*~Z#_Q1bD)M{$pSeqj7z#U<0q>?(Ow
z>tIho>js}pzeu;%Wkrj#RJnwLJK|U5u9TkOquwlbL2l99CB=(gFTB3I{=|Ya0cTg7
zx^XJytjR%{b4{ry6GfBOrW&WuPV|2^;o*!2I!}roi#`8$^79Py+2@m|+t^S0zx6=u
z!IFgxiNb<~fs0=3xv}6!^WEtxNvg3+LY7D_eV#h+bli0BiQfYa!lr~I1>Fkyx5jAM
zt@YP-E|1-to8RuX{aMGgo^O-%E*w^RE^|*H-zCu}^-#vCbhZ4vJi(NisaF$hQ@yuL
z-d<kRQMl*Lm1j0@op#3mYWRC_@jBHddE4j9G0iiJQ{N+96ZW^{k3P#9mYwY1<u9q5
zx14MbclDClC%gB#N50Po!*e?p{#fI3S=d{Bb5PmxZSz0b9G>#e>~ZC@jBjar?_H<X
zT=r(ycNdM-liaBmSogE7<mr#M+TZ!E1Y8R>dy_Ae|1k4<eb5!xtIC(Qn@lj&`Lyc&
z*`?c`-~V1;FgNz6&;PH-$~P$NU9xG<&PltXcAIVZm$3Lp_=#ngzWrp({r}8?-=aZa
z0;|*ko*fMi0^CLpoGX}Z6S#65&P)(V;i+`w3=sUnQPuCXxFv9zhS4jfRia--pSAct
zSX>}#)0yTTz4-Elw-OwS`z)I(8zPTqB?xcuFWh3Gekb%!`5rMl;s1?Jy-Jgl`WE!B
z`DwLO`Khgnuv##$KxoJGm6|L0gZ(dCTr9c#>ayA8w@b4ZU0?V<WkaHbtI_4qWhH5b
z&(d|;BW6afzPaXx-3IqU0ZT6nQ%m)oMmu^dS5&%HzW+4$=F`*bbq{EL@cgjwLS&-8
zU~ZtJVO8OuydIXgNl{&Kv;5ffH!E2yo9o<P`N8Ak#GvJ$vZub!x>CL5>e_F=vRX1H
zZLQfNTgp=s`sK;jsk}Tq{8C4y;tgLK%r$?$;lk!G?(eqf%>KOXW?AI7>9VtA_FHPd
z=`OCUYxtcoBfDRE|L*DT+n(31&wKAV-_$;>eka52104&x51v(&KdH0uSEAs<>q>5X
zm)&N%E|;&AR2Gpg&Uv(>oGCXcJt)G+>}iVBuaHlYeP6Ei{O~!RGxu|r_?1srxI(yG
z*DvUno9;5DD5g5%UD&~r<Sm>2hMk{#^tX|z`|Ek87ffE6O^)`uoo2md{=JuzUY>g|
z`!-(UhndOWqNJ2(XAecckWFkV^h&r@V3zLpGW%8krKb&3-)%ke^;&Ohy!P$a{Z3`}
zvJcpV67)AP#VN2oX^39HUDKkWP<Vnz$$4jh@fX3PJ(pZt7kULM8_4Fcs2@7}fh~$x
zws)QT`s6JJD`zCG(fDRjCbC^Tyyf`g=8w!GS|Y40A_w~oJXU)DZ18G*C3tbtk4CF`
zZT-t;UTZDue5bRQ<!^DDf}2vZ<YcqU($6%+@}}ioGtS9-b4w;^PS2d|n8kOt+B~md
z{^?Wh`FS%}0&5t{e$HCae~OzF-E{RfL<b)VHS$~Kuq*6Y>l^;cGFIiI6-&cJwL-<W
zM!&LnvO8<>HNCe!v1xm~nA4T59@|~+es*wL*|kk(%4O%i#rC!N>3^%-`Nw9$1Fnfq
zci3#F*nHlrS=0Ah@J~1M*(OI1UQ3G}>piAMHm4q+n0{l@junrcKfdl<A^bz-*5sm-
z3pJTD%a*5|SD8QcOvTihbJkA#th@csqsAJigIk@Jp62g1>6*R%)wHr{k<<7?ZrppZ
z_R9KIyLF46|FQk^cgCx)x29ArWZ%pGc(%yw^yp8wb>tRX%h~YOs@*faS-bN3#`zyz
z|0n#~@bUE7iPHHxZt3^h`t$en&u>}&XnCM9r~JkFeP?TbF8XhpweP|0m+v3im(=U%
z$Hbe&*X(_=dCL}=jW)k8KTSX1b<XRkR-tLi)_UJW-SW4$cU`Qy`0G~N+hb?rKj<Hi
zH#b}8yZh|x=-2YERMmIa);fgTVn{e<W?s+1*kH|m!0p(xXHgfQJ##ahl(UC%fn~z;
z{d3>$ZWC+xvpsr6aE`&d`~Nro5oh^vw)N8kM;itP#<`gx5hW46K32*3xq68y`AMmI
z6}bfrAYfBrRgqhen_7~nP?4LHS8P>bs{~eIl~-&964qBz04piUwpEJo4N!2-FG^J~
z)icpEP_pAvP*AWbN=dT{a&d!dFG@+XRmvzSDX`MlFE20GD>v55FG|-pw6wI;H!#vS
zGSV$dNz*N^%qvN((9J7Wh8O}f$0fBmxhS)sBr`ux0c37sQhsTPt&$SRA_W+LxHGjP
z6Jb+cG1Obh`MLTa8GS=N1AVyJAmc%zRsoq6sW}lYnYpQX#hLkeb|&WLHemG_G6)-O
z5IQ3fI*rT?kaZ%-Ky}*agFJxbAxLO}MT1=2?6_?7!Ql!DV>>Q>D}`hR1_uUD7srqa
z#y5Mp=Ufk+`~UyE-v$Q?WLa2uRy7(rpNTmmwDpLNLA0v5Q|#rg4WiTI|Eq3GTG^X=
zTW3v&+|wwpDUsVa(~`22vis7MmMUva5Bb1!xU_9&&GTRN_UE5}{&y~YUk!U&+suc*
z|DLlfcvfTgyx8vfC%fmr>*jv{z32STlwNuJeXe^xi+q5?7lm9Y-zzxxG59kgpgSY~
zt~!MZE*ShG#A@^6o6y2q!+A_FC|B}V0?8Ovu8Iq9Rh@n(*|5Uli(iHhG-2?9x5$SD
zx4m1w9fg@%!BuhLYx03$7+f%2<ALM$=^SsnKf;~&VZrO;4a;HBK|k<7bDqB7E%C>2
zb00Wf??*VjF>X-<``tLDE&9jc<{oHXC(jIX_B^J&E{y!U_PS)m_rT3<V2`zDgFBnG
zs*_2sq`LFMJ_$sS@b9YQK{$Mv1xVwadm8D#*4zwoa%A6jdYAgC>ct-MZnFXwd^vQ}
zsIbH1=(o2)-xkSBXI{$PHwzS!u}d8Iy>@+0dHa6eG~MX(6Su6xPI>*YeVuxIn(n6)
zw?u<(9p(CdE_-w8-)FL$l8>iFTCU!DgmwG+saLzxx4V70bhV4!{50Rv$6`xkgZ>{%
ztNe3tt5Lp}xK_zSuA6Hr-`}{kZEfs{m6O+>nf&#9-o&rpS(20AHt)}Ie(jfb?ctN9
z+t*IjwSIA1_R|U3Vyi#*E(&dv6+e0W+{JtEe{H^}`TEG#^{=OV%&+2FqQzRpR<c}Y
zg8Md|$uEVymnf*`R0T_jiJVySviQmL{<~8z9aw!e<oUlHUHUugH|y-m+U29E$s>KK
z+i~4B=a&%+rh2{V?n*r~<>jU~|J+j?m#+?$_!8)s9c?|=RXi@D=)aPttdOShw&1$`
z`?w`bKTVyzeumiltDe)(O@2AI#@?`UQ{hC5GNJn~&;6dK_u6Iqdh5)mpFfFsuyTFj
zcyaFM9hsR=eq{QbGG8;XReqj=u-|Nj&3SucPi+g|RVLmuS5aF`UjOuKO`*K$zUOl$
zeR_T><@L7(J&*n|IviQDZaJ52+P;mk(kbs+B8|T9+F7{2;G~vjwd#VEB0iHW@2c#T
z-E4Gxrh?!3>t-ifIIZl|;?-XF8J|zyXP4S}W`+dguSG#SQ~!N@8T06EM^E<+L+wkk
zoP9FO?@rzPv^eE=)jl8X+wJq1W_mQrMPA;UaEZfx^^I@5M%n)^S=>E!ef^}Juggy<
zM~9zMnR@5gobru!+THfkH8-c;RJYei?n>;Ly6J7_{L`OyE1!=JKK16O_mfGR)jc<E
zTd-+SOx->gM%x;@=f7Bkf|k5)Ilq3=?|B`2mK2@cb6ZcK^0jAVasGs=bAMQaKKyaJ
z`K`~g=<^rDpq<($UN^SC6AqIw->YHt`&Ok<o7PHg4a@LnvGyL@Y>PdXowf1R+HR|p
zeNBChYn+9<*c|g?Q#Whrs8{^9_<t<vmYeQs-`S^9?(XG3{Y(6s_sVURM?`Yx-x1eb
z5hA9uH}afp?3zNuo16c7M(#=SeNy>*`qIr}C(ee?d7YutTm59?*6vi_*_$fEKgZkn
zpPOajr0Vgh-cc@Mp>X53%~LONKR>x-BBP`Bcln?yy$LtIUE8O%H|+FY4Gr_K&F=I5
z9G&=d+x2{R?ecTa)3`z=%*qYgSKl+GPj5n|{NBivuZPUG&RzG{HrHcgh};bkdG%=x
zMc!FjDOc})SCtnpm*2D`sN5mt-leHUhFkL2O!;)YUT?d)G=K237d!S_NPM4_cRSd<
z@AtP`(z46H9G&yinCW+Ch3+Epshcvt&Z@XS<=iaw;<P!dp9a~#-MxM5`)OOh#a=3`
z|1OmootFLY_#5-@yEP`xy&t9eI!$-d)y)^JLSE(P&Hhsp`TG5KQ}_C(niDETPDt6;
z)p(biXCG~jPB|x%x@whC%;*2LVbjzaF4@FN?=4z#VqLi0gx1qc4Kp_XnZD`Gt+1=}
zude(wmDlM1r=NvxiYwOD@A6Qye3!Y>BxltW-urX3KZpDGH2*sHwfpI!=xD}_o6ONE
z_pG<XtzSEtQ(S+_%kJx^Z~4n=zI+o?zy8R&9oKw$uHD@gac*aFt47PV!u9**CI|ap
z-IH}H^<CuVsMpI^zN@NgKcjK++5V#WKKp74XMf*SwE0ou(&sO^GH+i$`GkK9Ylp)A
zpr22leKqpU6!JCxyY1?xUz@p1mOa{jNVMeLpEIeOWEl1qEX~=OzK!`z>2|+qtqZ%#
zkN)jHJ*QYGT6a_KVXd7x|K2+KZ4Nte`TiVb)y|*V%CXyX*6HlAPBc0cy{m1{(|MMK
zqWKdhdRz#%PW^g#b?UR1opV<|wX0elQ}(%N`kuda*|+acD;Mw!ms(qDvZ^L;>Y4wq
zc_OQAYvVPu?QBA)y?S!$&Z+yk6K{GPd1$fm$4l?hJs<oon?=^#n!73C_{7Iahu3na
zez_j*wQ`@H?<?Vq;E#8tEdRfcR$tT|_IlERGoE2CHa)rbHO%WCxS6lJm7iZS$8SRG
zrl7JrhSu}kH+A!F_nYwZwRh^%!`Z22LRO!xqrNX)x#`0_%TE>7Z)g8Fn{a85-)F94
zr@!!hz5V94{KTo@zLO$cTRl4UY+bc)geYeJ`&biMb!3U&tP}CoTuba(t6cW}IUszS
z>6A#%#LDtD({<0=>FwW>zEx*;?!4&Zv70m2#n^_=EaKQ<RKIqO!GYe;6U*GqPb~}J
zjjj3Rv-9=ARK=y<sc-wE7`H!~YIJkOwF`c8rw8j8|IchaP?Xf`Sj2sJda3P}+?vkG
zE8ec$w|vr)e^a0T`@YhE|6Td1;`39zU43WxsS7>T&ztnMKc7pfOYLOo^|tdIA|cB(
zA58MUdA?7+;N;5MaIMRsQIRX%LKyV&&aaMc=3aX|)}yTN<?)p0$eB}Y_ZwF%E8X|9
zz5m3V2k$!ebHA&!;@h#YD|b_&^UNG;0S#aEvoQ*<r#q#-?XKr$G+!1JbJOi+#5Ug~
zhTc<?H`}kz{^kB;jo@$XDRs9WeNm}@vGbky_mi90-*++VeN642cJkbWca!z@YUcg8
zQn!Dr--bSoU%zHAy>d}QZT7X5AzO16YrGB**D=nEzMxh)H{1EO#in*uvxbtIt6Por
zwyi9YF8BH!v9wQI)_yAE&m~XhSZ;cBNP$&Bj{Q!-o$33<^!EGAQ7r$Px77PaUG?I}
zA(Qj&Ydu~6cFNqs{l42;_b*;>gln&OY}1c8nSzUNro4Q=_Rgh`*1t@is>y%fqW>ed
zmG{yV*|*ytw0CXeIM932Z)@20Z(e?#X9CwYl+R<D>DMU7cz2WN=9H_86`RAk#CRl?
zFYC?G{A{<~=i2)lO0(so^}Qd39Xz!spW{aHnngZozIO5J_Wg9*`HML?_2Yk*2eAfE
zy&{cVZ|+$&Wx2J3u;%{qg>&kE#_asKE7GX)WZQ!ITwYHnRqUJldROl2>8GBYoSb^C
z)cn}ey$bC{kw3m~e)2G!S#9&%dq<649}YkL*1KNsDW3pW$}dyzN3CaPTidQX^yll{
zk1z6eYRs^>9eFpYQo3U5o_7&yo0qqAL`Uka&Wn3`D(chE)6SkwsvWP@PN!O(oLT+U
z)#&y9Q%v`kzus@I8v8$1<$A1yz|KWEQ+@3I8|^Io7qj!tos*mNVyyM{zOrh)6SVx$
z@(rJ=pPyQ@)BIF#vHs+f_jR~$-HMnHbN1(>w?$vu^}8<@KVR(4T=gzqEqsw|VED>Q
z3Qy1Nty~wgB&wx%H`6WuU2m2tt8u;k9v#5@d-t2g3&mWQ{*m8Rw=-6*TJ=Qvnbz=K
zCuc2v8*$^@jt-A3zt;w#nd=^>zj|WrJVAfLCG8noe5R{jUvZ@;*!0_-f;;DTRjgW5
zrS#*ih|e5N?Zv`YzExMg?c3p%7F#nhM&$eSlih`tMrzX2?`mw{AE6Z<XL3wbx;k~P
zPwo6$953GIPWyLH?A0aybqP;ImVVxN`?-++ORxP$Q|?YWS#+^IJ+pTCsk!G{g?lef
zc|CWzLt3!H_T{t6f1edU`F2;?_D{dGpU%l#YNVF8GD_iSviH=7`4bHnuP=M`V3L5b
z%T>SW_qVw`v*0vQn>zJ`(u#XsOH0yL?lG`(i3xqF7cXSEd*}Dvn_j({F(o8#Dtn0S
zt|zbO=7joOUAui<q5f2R#*70Zw|6lu4l(5EHhKMI-zL{hZ!Q@I*`&4^bwAxT$trf;
zmD0pJ=Qg$9HswiLn-kEWucup|^n3fs+SezyYy0tDldE-@c7M-}t2}LXxj7D3y42rg
zF5aXaZyRoQ?xvFQaj_LgjbHEQeCL$wFR?W}zfmV@k5ALP6;qt6OZEy)P5EzFwA0I}
zF=X}Rg|Dxle&!vT6nc1bd;P{3-o>Ycjch-e`T1XMb2$HUvv+gR?6On*%CEv(OLl&&
zmQFqWY38bx63XH)mc05t?XKY8G=8DOtVYUnW?aw@klaz7;JkCy+vS?4R&0B;EhzH)
z+T`ojhR-XkA3Z)4bR^~QcJW)iZTctVj{XpO`@M;2Ys37aojsada?|ftmfpxe`1kGg
zyPBJ~>rFPy3bcE=$MVzfguDgKPi{Om30knGBB6MJ+VvBks{gy@@m&3T|L-NI%8C~f
zmS4_j#m3LqT`KH9IWtQ>u<BgLkJqISLw~>J7AjeKKPk&*`-giKfuC-iwtl*-xQVl4
z>g``w;w!mQ#8`Q}s+NWNuXwuY*MXH2kLMOYIW=?o=`WWV&ohN4>rM;`tvuE{<;sMt
zMz1X=@4P7dwRjERydwdfTRlVcw(A?Rm8&Fd^SpJ=H@xmm_LURaolSX-MsKyBul{*S
zZz_Xq(#ou#??T^BF>%lP`O0W}+#R*Xb@FoDB@^eYOY<%FTImy#R@1%eb@SHTr%yy@
z-@2f3PG>c<rc%^3zvZv5luz1mGu)@=wA<3nc|{LOT#P~;`(}o!o&LYuC-lbU*k6w>
zPEN6kyL#6<tIX@Bf8KQIa2GW<_moKjiK}kQghdM9iT`f#(k8Ok`cnSo>DmV}_w6v8
zt{0?xaM1&`Pust&igwwzbncDlyo_wejVruvxvu^dd;FKg?7v&odT)5RD@~5k`>}A{
z$^FVF7Chpd+Mqo7%BHWPpEmx^pExr<Muk-|c2dg4jVsoDiQe%inN?-YyQnSvwyZ{z
znC`BRyOt~2pYQm0r|P~k(SUU^?|xqknpwS5%6rDEoePc_md-x$zQ*->Ma1*YAHL^v
zC;6VwpY%NL*3DatmM6cTVk>@nEycF(Ym3*kg|CWlJw2Ur(R3kK@YN^X^E1|$OcgkM
z(%Hl{HFfpXY!kbWyJD0VoZq#3`l;05>8G|$s91VkZ}RSS+pnk=GSAypwRoNF<(GY4
z0dIG5dEZ;|`oQ_^Z@Y{3F1J6m)&7Q8=(n{yjVcd0MSjoN`G)6u&B^TxGJ4MZxKgk7
zrM_B~?c>L<LAuvh3DhUAc<0}DzvSPeXWq)ni#_l6|1#L!ba7X!ZcO&u8qV0t<bWG$
zS6`?|@_+OU7T+{)ZT8Xb5~B|1)|!8%3m-<$xPI#XUDeI!XNoYayR`dL!@93_>$CqY
z+-2)?ZQ%m--)o&kKXlr#Ug}}G%fHL3!J%|j_S{{fDl>13J%97-OQ-tWTfHS4KRw;G
zZ~1GR!u=6tS2Yh`eaq9%x8jd*(Y+?+YjqoZ?k;?NwCdD_xAo~KO%87>3V8Uj;9Z6D
zt!F<EyB{unetG>A%SP6ztE%c{{cE4Ju8a1+TD$U%Z|{$l;oG9N$o=%IHq3sqNmSZ-
zg4P7d`SJ2v$F{G|va3ixa)jf-juk;OO|(>8m})CxzP<RSU_Z4X?$7#+_!nQr<)+Q>
zGTZ1Zs?~dL;?*jN<B$7e)&1|;c<Ws<z0WE9Y?rPfW5%npIjgPqIc={^cMW(rM{w6a
z`Iuw>UwzYlZME%T$*Gm4+io)E1Y0wF>)!rx`?~JS??3%)WQobR6d!zhpWd7LEt769
zvyJll?sGj?o3TFk=8??H!js|^l%1{?Ka%kCsCe@BYx&9gq{Lq905$WtJgEf=UMUmh
zqJ#sA({D;GJ(@DJ>fO(xn^TLQ?w+kA9PKT~KY9E5<G*y{*6sfwazclz#Qw#;9}QF5
zdjv!8J<bk4HHW+R<MdbiTy4ERN?psm`f}FW+FhS^{(alv>%S|jRQmA5)bFpiwY|*R
zRD8}va$$D$>v^1vj#qbbU)v_7e>QHH#+G}%C%ez<bUrtKcB%j9)y2irv=v@jJ^Q$;
zY0~9eDS_MGB;MrwtfRrl(_P~G>0yV~df!L$cI^D^7AY*Xs6+1ChxOleE(D!=dU8J-
z&lZR84eNSkVs|Ed-JY^*UTM$mZ%3F9x_)^teE!rt0iLw_^1Wxe?Pu%mk6FwU9eVrn
zviXZQW?8PibZN%M%P9x5P92$ga@G75OV?G$Kex%+c{?zC-!IQt)nlTkr=Gt4YE{XL
zWjd4G?L_arjQYp?HcQ}5>$ZnXwdOCra^0M;CjOfKluca^=03_ao~w9%^X+dtI+{8!
zr%u!@fAMXFYIw`zZMlMuw^|A(s(3nGdAlpzqC;zM*ylcf6R*^-@AJ5NFKC7O?$>*`
zck!JpS#$llf?L9`*H52kz5VQ@=4#_jY4JZ#9bP*#c6U%%{OzCLzJ~1I8g>R!1n-hB
znfmbj-|eLzOLrPxPCwoC;mlK6>uaYsy}r83oLy-Z>*McDwbMWE->EpotYr1cBHQF2
ztq*!0Rz7FR4wBhqD1W%S`uS;QeKrQ$v|qmOWYW(m#Z~^@vLL)9R+zb0yo@a=&hcbP
z<ofgG*>&3MOds%1Qv2t-ZbP1L>ZS8DxW!kzsws96-RWhvPoit;ESqnenEYR7-z`c_
z-9G*1r~UDA;l|TrD!Q!?S6n??e#*~X>#9YK*Y`(ue|OmIt?bsBC215E@<98PixWfM
z+3Maq`}8K<Te>4;TJF_-1%EdN@%L~9<yL1*T~k@OGUtxmx1(oVH>G~Q{OO0h+39KQ
zq6RVl!%iHF&-f=>w))9AUdA_KJ@fRkx86Dae?fY={SF12yFQA4_fMB&RC0fBzE#n}
zKlJUZq}!*Ltev!VYm$A<3Y#4lPu{V)%eVE}`rS>x=NN8!;3#Wf<@SYd>zBTF<=cwZ
z=J&~nul;#D^wE^}$KJO-j^jO&x6A$X&%=*5Ri3VzDe1LHG>c#GuDy?4*t(~Zyy5>Y
zPc2lo=s7&CU|HFnOSU%ozgFGdbT;yCGQ;+;av>X~{*3)^BkXp6jct8vn0V}XUi|f6
zx>4_6e7$%}-1qr<Th>ccnQR$$d2vmZTXwH%`IPrrtc!oBMb^q#FPOH=dtIKbjpJqi
zxT5(v+~&q&BCP2=&R4p`%}?xi;cJOlbG!6iwO+!xCnqD1?C?rm)qQ^c>viF=+XEOC
zb)x5sXV=MG2^4!LzwVCkzV|_|<?p7?5=i!c^pL+^G;eF6VU}-grbg|{znA83wY$A!
zxq9jL+rPpTDtB%@v1I0b_3eKTF!=Fa5nFR5B>Tyt{rh9hTC>lwswN-#Rvor)Q=pjE
zTA3?3_a(iy%~2Cg*_U@Qb<>Y`n;ep^e!aiI{>#jD|ECsPxK%tjafn}My3y_MsF+39
zUL0+lva~JayRK#Y_T?&Tb9PV6eipCd{Xac8L3HiYzQF9#>$`Wgmp<kfJ9Wq9^`qpk
zx7Tn#a;usx_bYMt(`hg3J|;9R+V<(P{zc(c&t6U2Uhrt4sYcnf@3+cs3$K%!C9v%2
ziNcFv!k406l-(4K4SRU-?&qhkQeQusy!g?@EK9%Uspn+aChZWbUQ@Vhx!Metn--pF
zDx%#}Pp_%pZWOxSplp)Qqa!*?Q)j+AUKZ8WBv|BFVUy;5>-x(&Zd1jzTR7Ke_5HQB
zc_b_UP;)|>$cu@>D{ozLSUc_OgKi<)F#g?F=AK`F@%-<tzJhx<EC2A={j$(@(>mK@
zYp0$2T(W<m+_mM$ZP$5PyfZu#xZU|owfls$#d7uOJw{P+&)0dUep}NSv~a$LPB2?e
z-mg#YDY~mHQ!}{L&u5jdp0M=&+YKexWM(d82wQnvJg@rMzHgbcmL!!eQG1_vX)%9v
zw5%u3Ty?%nCwu)SmE{I$zge<UNnhr5(D5^0tL7w5{H80sr8?KCaLxB!zkimjZSRZC
zy?*Za*B6Jr9b2^O*5uyqb61YZ?mTgEvQ^^ElJC2ol)Uq4ll8FvU1fVO#C}>}rGtOp
z?((~V_g-ZD4qAG@?~=&>6TuHyf)|K8d}rCdfxUbF;x_YSw-sKWgb$wdm-$j~@oaY0
z2ABC;p(ExFR>2D9bG7S}UfV_I{YsC`Kf{^5kS*kU<pJA`v5&mJgNN@u3c0?VnU&XN
zzN>mwxT5IqQeNNd%ac|K#e9E1|7{ubs&^}wpFav6q*n;lcyRUf%1grg<UqsAAS~(6
zsQ)spM*KHh6?7hA2^Xu)i)CK^KdN8@@hLW}HZMli4Bqf53SO!NiPDpr7cN~=dgghs
zbkXTkrzWlNuX*?0meqzesF_KwBzUoWjjj#rqXW0@+|l{5Y?<2gx3dHesP<SLFtfJ4
z-I(X+*Y{xO_SY{yzo`CqEBHY0g72CS9JhbZeCPc|q$Bu%N`#YxnOL`HZ0uYU6O$v1
z=7K4Y^|u!%DsaDe_UxILqhq6pn3z{w+`Q>+w-?Ur|0eQ67c^U?>-D?HhE+&|;R4gT
zh8$ntUgj9)hb>Fy?lNUyKl1wZ>!sVaU2D{3hzSW%`TOhZ<UfCE)OpLblIPzDJ`nt1
zhvoyv?>jtS7=I9XA;UT$hVk&>c7E#vPv!U{zO@)Dus_h&){foT@UDT8c@9g?s+aRL
zZa;si`9Sl+G$y%{+m{aCujKk7!O9TUz`s)L{*4<IM}Fn>i>{ND{t?7KxoKk6#})Gf
z-K(F2G;9|6u;BLQFJE_7a~<iOAMjZzQ|alqDIvE5i-PSI#D|7HUGnzd-{00J#YIiB
z58eC9%axKH{`^^rXWzHVzIzwG`ku8in{_3@UsS*M&&PGqpn!`$`O^5aNQO7#0p69L
z9vp1;+x67ys?4SD3!U3#e(*^e9g&QyeBiq^?p0MS!=*!aawG$0C^LWBywsz%@!s?2
zX`XfstCyP=BsfoFVc@=Crt#uc{mR^oX}5l*t-QEl)4Ir2Uw5rs`?2P__BHqWUl!ax
zEGs`X!$$daV$$-6Zz~EXW_^Eu|NWIy7dK8w3N4*vKJBuos3_BiMMd9UJqvlgwC^gr
zt?Ry~R}&V=NZzs!XZs!;KSkS_{YiGrJdy9GC;w~R88l=0?NcHXXO|{%^qHBkMPHdv
zG`r-Dnbxjr*UY_Aa~I15?SEg;{L5|Sio8jGO|vrZzgYU9@2kh{5Ky=;zPnrF@Rrv{
z3_hk-%k}!R#J$tiGwj*-eEsEaCI-D%DJmyI0@TY}s(Qjh&Urj-VP@z1a^SY$p`{*D
zORgt!ZBk}?cGB}`rBPA9!XCLO6?I;{DUGf_CoT78*O7m+B4hT{sc+SyJhu9Bt;?7w
zz2!XPy(-?<(o(9+8fH(wuEF|>UDWi{iN>8lve{GaPUYS7I-z+_?A0er?$2o2!YBLQ
z%A?VacUNG*mTafb27bHMwp2Uq?z7vTopHX@NSrlnvy|$V!#r<hm0W!NqWa{guZ1g}
z8Gp^ob!ZS@b^F^fr&m{Y<od2K&feQ&sWV5i-R$43WnaqGXECig$rrNq<H_bvPp2IG
zS@i0Il4Sg)csD-HNsA6KX$EM2ZEC7Hc|JRKb$hv~#sxEt4Q5+SRt800J;}9=Z3i#!
zLDNfmuXn$bf8%r9c^=cZ4#ri>&SeYgy7660^A4@;X1?!Ss=KPs@7#Akles}F|Jbqb
zI>x{m8K2Cc#;tpf;hMv=bDM3}DDx@=9+zxZ;>*{vy4U$Eb=vBSdvxSKJ+Mt%`fTy{
zY1^m1KYV2&!{5$X*FsLM4BmY1YRkvYDd!@XD>(Oh%W@@rY5DcziXy8~Ud6&Wc0~*3
zL>UFJ@oHRI+UTSivf!-m1~+!ThmI?HC#J}rh<f1={#c}7V##C0N$Z&tr`GBAw%xp>
zqRuZMX{{2!z9{7G9i4o+Rnxa?Nq>z}pBwk}&bx$@6&G4LXR&)Esy*9jUSRsc_yO}1
zi<9kJb!YI&ar;}xH0X+LyV_*iUvY_fQXuElYMGzX7nD2|I1kPVbPNj*-@SKo#5N^a
zS&M=Lkvne{-&-2Tc3{fUmrh~R(mUSvy^pJPu)nzd_qVsjwRcyyes@ST$T+6FpY@p4
z<6FChy%|+*JMMC`uB&LAW4LL*kLA(`H-32y=B{6!6Pt49d2KlvBU8W_$Ud(jbG4Nv
zL!?Sf$Z5wLav#i0O<zS7Z2oe26Wf<?xs^g+ZwT%zYLkk7dn;V|X@1D**Q@H>K7D=X
z!KLzkq4MRWu{=B%W+-H5RXFH#Z870;V_MKBVd&)6C!@L8t+(j<;dcIVHq~Z!{<7@o
z<4my<!j+5-$C(@_SFG%Rd-KTx7UtL`OYZJ2KfNw?cgpcT*-fRd!z$lyy)I*MS?v^4
z31j?$`4>+4?e06ZfQxyD&kT;2%S+0)G~VYvaQa8m8rkfe<<+x;cm9iz?U#*G2=;rY
zpFZCzqH$eB7yAmS$b-}VWuBLOa4hr$+bX^W<)F2bi*7TmXU-6pXDFHcX-y34okdMH
zk~j9pzvvdJ`8vf|)Zkcu)`UQ3{uA@Jy`3t4f7N7Wxr+W5(|VX=lSLYIf>ab0+BZx7
z)?7YEDSck$vN>h9GK~@sv9NDxX5;Ph-lBGvDa~Ut+mcSjN-5z@6Lut9)+toHa+YMU
z{<>_Q*r6SaDH3v%F3-;2r+MD~|DGvRr=E=e_eq@ng2#z1f}FFhsz2C@J*|Fc`M{-q
z;lTy`#wQKMW{P}@PT2H3_I(gT=%)hH30AMC{3|+l!?Ebu3q_-p30e1)61o#Z!ur1T
zeiB_*D)6d4c75ndkp(%dF_ZH|V?r<WuI{<bddHx5S?;wxpEgC6td%&R8}wM`D$}=c
z<+Y40u0b>As~?`aoLBBfe9_i(XV2z)|GfP*Nb+@T)zYfW$j8U~&r9$zW=J+Wn4Y#x
z=*W6A_kGRsn3|7AKfNp8AAPJ(R{QADqkgexj2%upOcq#{`F-Vu#w+a0`U<%fdY=5g
z;LLw=ece~>o14@7vzPm7FvMHmuoHcCFZ>n51Er@%Cr`T^|MAHD@Dr1%b<#6EUT4hS
z;9(bf-S@n7yv}n!39aQ*c*0(WIr^&G->hVv6ud(0+0VZ!-s?AS4s9#)e$TaoYr@%H
ztpbxHOB9zKa*ti>$8q(w%3iau`&>H&AMjo|byDRnLqV}<!SC;<%M-e%beC{{SbXc<
zdZF^f#C_9NW@VqPKmX6G^4nDNC!OKnPH+30qu;e{RepRr&kLpv+gzC+uzDQtl~xar
zuiY9`eAcw+)yn0^uDc{kdCY1l%e}<;oo$!cvO@w3^(t<0GAy3ecJhAd_1I5~<^Ouz
ztNWdM{6iq)Aqn4CzOB2`t7KpBf7_n6Xo~b(>tiCP^;-V;?Rg!^wZPBr?~=Nrhf5TV
zN)HuC+AWDNjpEwjdUTR`!Hy^2<li`$OJ4}BTc)(ODYw~c3D-8R9lDAy%uHW|uYSen
zU3)fh<yyNnQj$3ySEem7Q#0JY?)I*}*(?0qq{@WywlS{r+QE<)xbO>m&TrQ2U9G#;
z&0d_nXUTfI7~QL;TR){8Rs4DR+TBlY{PwO3`FC~m6R+8Kic6IL>|g4edwZpZLrV%b
z2jjBGB02f{ex^n4tJzue!dbp3d#lHmz{kqLA15tsTpt@f!>i}$E04XtXOCNb{`q|V
zdzA_aJFN^gxr$2)bC(23FUVeIsphoe=fo1p_L*-ow9l=7`>jS_`Qf~U4b_n^4J^wq
zc^W1C5O`@{vEz%jr2b#GxoUsie5U+yR9`tIT7*Hb_VSwLbGN<_n%dUL-Xdypw{~+v
z%h8Gbm9I8`wctq)4!Zu}+haH06+9K4%mt#qQyZGHH%d*~)F#ugj%mHu&Nb@dE21P_
za<80BZ~kR9wIo}lMEcd&&r^DTP3)ajl^(LREbN{p>m|98L>7;240=BKudb}zlylQ)
z=f7XCmo8bN!e@8w_DP2hi)4*&cbuyAuR6VIXOA&ts6JnPPg#9#$t2?)Mk~A1e}v?F
zue!L+_-o=B!*3GJwFeci8aI9w-Zk%a?t#KBtET8%7H{y{p;~n5#N;LQCsziQoJ!HO
z`pI)r+s?Dm%sgUs=+(m5uZk;IS}9ze`g_T{4~m_k;VZ3ny3GpNdS}t!tCx5xlo;6+
z<}5uhXZa-USC4+N{k;{MyO&8n?Cir^`575k*Sr_gaNySnI$*lNb!kt_>PdO_tV!Sg
zGwt|l_3w2OuO9!B=d*5EO)dLcJayNdpydyuMKAB&Q<r<4ch(m3B~33ApD-FbwAP%~
z-F|}I{)eOb)k6{t!4AhAwmz@Z+B<(UqrNJ?w3(0H$4>tpANs7{O-P?#drdN0QF3vX
z`j>Upng?z;A3k7}r`EULCF`PFUAo7&WuBfskKgytXUgHU`aMNyrcv4k9{ZOmk``56
zB7HW#n|||8wF(ss-}iM>$ou=cTc`dOP2u-Qew(;G@Aj2|({3?O%Ns9d7`!|;*=DNC
zO|O<^`u?gJOYVrV#+f=?Tder`NkQqhkTC5BZfmB@F4fOpIPa{DLd@aRzhaA5{<C^m
zq?P(qv$B%0e(m+it6zm&j#$3G*-cjYN0qF)#~xlObA|1ZY~menuJuP`3fA6RYWm_3
zOOC!abI;b>k(<-D8unO4@uv$(7$0=FYg7F#M_ey%PsFLyr{{hYJs;8jd0n+8!wV*d
zTE>FjqAgQ9*{ZKehTkjIXWj72wlrhk9OJwVJyuUcB+XvNPO?qud9!}aq`%SswAk;}
zg=&?*pYn=%_tJg87MNVUZndyU(==iA|Hq1^r!W2a^ksW|K*W-`Ubm~y76*hLl9_k#
zIG@P<)E)B-N*8#AJmOV}RSWaj!5n(Xlsh$D=cv`Xb$2(_o&L5UjrH9OuZ;|OxpUu%
zt?bsku_|P(sG{71-mAw|qSvlqf2Q5=JoO|a|E@{b7My;N@K@-#*#haj9S0fvx-Zxt
zPii|}mG^T=@QIwVV?C0eTJ>uj#dM=os=vQ0J;2cX#b;A>wa`?f$@_d{+}#(8yggRk
zylQda%Ix!OuQh{%{p2)+kM~bje0+W)^TwQ;f6vILoX?Ja@?f^LO4!!;#;uY3%M;2c
zFs<_1z#&sL$%sdPUtRWt?swZg8`rbNS2{38?$=uqlr=H$<HIMbl(t%2d#|AJA?@@&
zue*O2UOQenE8kEnRsC+8Tkyh`*M7U03Q7-2Ixk)05WQILfa_A88)lggd$~^Z&T?D5
zByMSztzA(A)BDC<>n^HJzULKvq4na&!|q$zXVkn&mM@NOlxR4{vUpO?ms?f_QsR5J
zJ%1@N%j##B_PT=T?tS03uD3kN@>o2d;c~4l*X6`Nh96&NpS$vE+qT=+Z`}`m8@gt4
zU{%|vNMSdxe-nbAT%BwE^lYyFiG8u_J%VGm{=TRCdWCZv@5F=7?A{aeWRo6Ep1hiE
zatPOg;KNJZSZ}b+<+--`%R(p5*sbf<YAI}r4^O<gauNTlsDi1V&MF-c=?q&M@Yk*>
z<aMH$gfFk`4S%+k`qyl?yZ&X@cz>aoA;fg<;@1ai6b`Pvy6V@B#<kO!A3WOWzIV>r
z$&Bgi*ZkQLcD<MJUfrs7d_Qvh0}X6H`DS0(x_5_jJKxm)`ah3zRV<m~Ubh{oezdso
zVs^E9tTUV0EBl_4b-!=lKefzv_8hkZe;vNIKfC)e_`umOzZXo&o|3$&`|IlK^CVpR
z>~&6^zo^grveBmM(dE9i(JAL&M~Al79H_11pZcyNQ2peKkIPSWOm;sx;i2==`AvCq
z{&h?_FlSZKYymfsoa9}mEBtDE-@WJGlPA84tLAN@>6S~J%HIsO?y8@@Sf)Gl(b_=I
z-zm1|f2zc`=<0<X(7krvhEGPTGRObYVe_P2Z83+diZt%dYKdOk(7pa*kztTqYwxU`
z`&8Xug?tHJEft#H?R7D$<m&flD|6Z0qnh<5v7O;R9ow^lVfMQchQjjaH|KuM*4KY^
zrhlUC)SS7y-fp`+M@q!)<<h&~R$SXz!N6YiEtLK6vcD29E3ey%NL<l(cl&aF()Rlm
zp;>(4JGTb-Eq=BBfz`hr&!S&9(@%OXpYw+A7)MyXruc@Vtgll4K7E}TP^DMBZ&lw{
z17XwnvY@ohUI!XJJalG%`r)8+(T@X)D=%$$6);t1-Idy{SGRJ#<NEdY>xXWcsXkwm
zzwTNZKC75pb$i73M`HaU4`fv?y>F=FSR533s=Y*My~66Cyi#9<r%byHr`Ao)T%|fa
zDm>d(Dk{V(EOUFH?(B`zuJJ2rz9`e5&v$FSUHxUD5=LhR@nh{)Uzz29Gz4#U(JkTC
z@ojo~Z{6DJMTHk%zbM}AcU<7)w<d1Ag5?E&|9#)zZ|u3)*J_()=qsKFUtF(lx_IB=
z`n%eSKOzzV3*_hN2RNIym-%L~h`#BRD?j$q=xfvd$%@KeTLf6wtSESBU_PN}>cN-A
z2f|Z*S)&6F98P~(+SfJXZ&z`sm7IdAdjAx+yM7^SA4Kl_zu<E_Ux?S*CiQ|7VGFbF
zx`k9{Y)^S>t<t<&`pJ_!jlVSaKb#b65>dp?Gx=6*mDrxiIlLvIo34G0`S$8nUqWcQ
zcK$J&DCvo-U%j8vq_-;b8^`z3>Dv}?KTvvFWO8@s^LejTcDopKHsySo<>$|G^T_j=
z1_m=)Hne~L`@VkvpZov+#@Fyp+NOR<OZe99*|`iQlJ&J$KUQzNpHQ;tcKFM}J#W)&
zx62<`A@g$rllYA(i}&A8-1Yrm&&uZ~CQNp-WZ-5n7u>;cOXC64E{1ijRcqN(EL7LW
zE&6{p)JDc6X9bUxk;klKa~Dn8>a|<zV^NQCyx^)}hIOk}P5WE@_09L~R~oz-MHys`
za(1xY-1XI+zx5)s0Z+xmf}j8L7C)1{Y#M*+_4507j^5}tO_#~NlKRl@{Ux!Ii6w=T
z)qIQMSs%5}=TLcjH`-=l<JzOCmpU5Me7r2mrC#Uxt!WBO%6S%hU6bL4(#xASURL?N
z{Htbip!$OCzdD!RGqcnkPX1CqlvB5F-Q#&iQEok!p@K7X>!ns65O>J?U~Un!(e{FA
z=JYMEqD9I?`41*<|FEjD>!8+#C#Mc1{k3^;fHA6Ov!7aNj`jyLt^T!E5vuF=|C;vZ
z&d+UozWtdzDY~jJ%K3HGhPpfdHZ-k^)Y*N%C2VovW6|xR2`AleFFGC5XP*6glcx3x
zGu7{r)2H2;e$M3Tr^xiVPp@ePZ)HzBqb_wJ^1a>fH=AW&7)5s0Jx~mNIqlR}rVNSZ
z+Pj9^7P3y>A#8i>@?L$Xh!SB-2JsACDT{!%UMts6+`p|iuolQxOj6+68+hPp)b^Jz
z(w{Dkylj;@J=-Yc{DiA7!X8}xQe_m%aNyMPFNNL99#8PNcT{gl#Qrpsk6SMCS;W`Y
z_UFY`-ON4RbCvz|4vzzW#00kd^wfB^i<9}<sTC`W8DrP#2U)ilElAq7>$U6rk}pZO
zEUj*)-I%QIZ+FN-Lz3A;%>D4>qw2?0Cub}wEXz%tvf#;7oqrL97oT6uKK(nQ@Y|eE
zKf?+#Ggtl=ocVF))5nL;1v2b1`e*avP)hUt#OE3>g15UfJ~*M!>8#tu#xuq7aH(uK
z?<AFI)mR&$^|8?s{g+F!66Y*^`SIOeovEwuTyNJ2DYTkxeABe2dV&Q1gID%WDp_0F
zUvXdA^mEF^!>KnWI9cvUpZ@Oq-RE|54s26YNj`8ZW<vA5kJgT7*Ys^mQGTTLAnRJ~
zy`{1*q%Jd;7>Y>Q*X^;scgCSjZfiF8;=+q^`R^-D=6&f@m?M#XUbko3#2MG-sd`KI
zX20L1{eE+8$9uNd$93=QTF1__IO)36vA9PPFQfck{uMK65W6R9&sx$MA|)W~eBpH1
z1??Bh*&}!Yx)a&g2|h60(A#8K$XDaMq4YqugEVjSK{JMX0tFNE9yf41XgzRi*uGzG
zieXYq-L;Lb_Hi55J8hS`y5oMsyvm0y83#<>nW`USt6}SDoqkcSeC_wzyP5e*=09%t
zYu}{WX55~;UP@M$RXa+ocXKwg?7Oo!H^2BD6J3)O*ZIEmNoD%|g*n>yolYNqHB(}K
z1pho|`H(X;0uR@2zxOF<mf*&2MU$h|%i|}1UT|CYaD(ZkTWq$QBU+t9Hop6Dtf_8N
zyh%WyZ{rourHT$sd3=X7qK+?=?*6q%(r;lD-_?^{rRTOXyzra4Mo}xS#_U&uLxl65
zgG$-^KiI{w>0C|M=9jbx*l%F6z@cpK!gRaWa$jpgE=Gx_n=dWh5ViBwMA=g1pt;?b
zqu*bdp(ESLknza9SL!KGtAqlZ)0X4wbbF2!p4}ZWe^FMim+lhw1rrun`c2G!#B*cO
zPuItbu0QGTK6bP8gUX8eM_oVn+b!?Aa#l@Z$>Csin{$tJ*1z~ImY%sGDQ!|x<*nlC
z<L$D`9ZJrW{8@X(`=mtDoT}@#A}jh{im%R!PLWu4bl1O`YZLPv1GQhQin`I5Aak$5
zbb`-b=9sHi7TTJu-mHGUK4!o6Rn0jZ+7O_Bs5O@1>Vd0I7oL0|sry0NL6ku)Bz}p!
zjmD+RtNB)^ZjPRR^%cX8!VOPjPZh2!O_Dm2IZx{RjF+$V-a1^bd-3N+<Z74FS8SZd
zy0RJ;%py+S=M~@n{{FsPUb_BquQ_OJ$M4nS%{g;&TA4E@&N<#Asl0q{*(~PLQxY~6
z8>+>&PT01oLci*)t)7(lUcPzT?3UMAs4>h@uKn=9@%u`PS4Y)<tuQ`+qPbaj1^0uK
z?XN!0ITjic@}$8c%T-Eua)n*7N0f|PhMThZ!~Z2+OxM!qR%tp5S6_I$uW#*|>`8Y+
z&;E)&dzt@&w!hP<E2dE@cXilzH0a$+@Y9!lpvBMm{pmJ~3s;{PZn&Dxu-I#xE?*Aw
z%c*-};~KU)r@s4Y%YKbfzx05&Y|O2k?^_o!*(wPg|9QsaIpgutz>oG9cf8n|Cg*>7
zy8b1xl9wh2*bj6v`6Q(?8Pxy2egDbI<@1F2Iu!1#OrNFnQts@;_b->v*AtH|nRsS~
zq4T}3>&h)Bm}_2kIPLVQD=zxp$wzNy?mgV{VCnR@N%ntV`md`yZ~J}Do?olxc`d%b
z_{rZDi`UMnw66M+aj>ZR*O!+?_bQ*CoS8oFr5aD?mJOeH7i={7Iw@+(qPhG1-b_CC
z{K5SXA{LXFJa*-WnVmecu=0|B@BBOZ@w^Lvl;tJxq%K&^AlYsmq*?H)uzT0ZFxH6H
zM7hTSnzOYc8O^<G8TM!iwmW!9c<g4-JHX9R%)5Z;Wz||6_I;Dqa_?YmjWYl1;pFUG
zFriIby`p(a;qlThb`=FFK7U&6N+wQQz@716!W{+$HW!hc9d1@GUf}Av@<Ai}oreNb
zr%vTN;<M=J29AQ(&QG0YD&ChEt}xsKjfPczJSv|0_t)2=pHHWscDMT^SiURx%YyGm
ziiD5*eX0B+Da7=2&$nCIoAT~jRX&;Mp7QzG*{UPA6xq9$JdJ(Twf*t889Fzr_jvz4
zXYrV)oZ(oz-4{jnBW8jRYi-^t^WXBelPg(l`*6K2XkzG1VeRf!j&b%=l+$_6haU(Q
zFgak#ow8=4Y=TsS=7w2WmMxYA#uxOMcU1{9-q?2i38PbcT&3%WBoBT$VewxL@=vWE
zOkH*DJnO_Y%6*m$`_}K?!W4Ued4p041A|i8v<*iEA59dwz9v%n`@QP*yWO0gD)9QP
zpJh?FXmXUH&Z7?;pO{L%zq$E%pX2W*ll^y1IDCL{MeglwC;97tI6E@^eWGsva^Fqv
z2cP4@WxgukSD#nm6t+H2x8L^LjM)ki(gEy?uh~7HQ+(&&t;zm&mj6yVsWJQTO}H0d
z@sRbqs-nu1>G5?pJx^Zg*XQ||8@qabtH<sO+A~@1PA&UU4%&&dYdTYV*6h^V``jcA
z1MGh?A7JX>%Lp`P-tj8X^!QT`hwxT`?c&pSv8*`u{J%_wGGn@{O7!<QrVDKgq?ERv
zp1neB!tDR&UdxwSYQ6pR@z;vQE}zBfpX~jVS9_zZdE(M{(TP!wda=v~jC&-k8E1GD
zSTKt%IS?LK>ALUt-S<|UQ>z^~G$+{Z4gGbr_xJn#_Zekhy)57JSk|xgPkH_Kay@^Q
zTlGKM>nCj5Wc2f;f4x@y-`DYv<+*=+p8x+11Apd}^-_$#zG*sY-w$>BFVRpmzk>IL
z;@x|N$7MhMshq#Z!t&K&`F|TG#~kmIT`ktkd^bv8m}y@xcLehx@wkeG)oefV?(7JZ
ztN&A2`D|wTlegRNPXmoV^P1mzFmLku%1=(0QjHwvF8aEu>h}fET-=dBhRpA0oq0cf
znkO^!PRBx_NvoP<9HhPWMykEtmG$a<#MM*h8ngU1@!o$pfv0^2+olgpJj<O_N*Q=&
zs8tmy>qTtl{Wodqsu`gQ4|Gyv7~a1#`Z?dAkvZY-Vx8mOyS!FzVTnD!^ueLGi{*5J
zfk2}78UDHt%s<cO*F6qdTa()UHG-#;!E}k!HUFP?WSKb*{5t7h_vo7I`rYrWw!58r
z>FaTHdQ4Gg&Hvx`r_29+;a>QF^+Nc%n3o6S3f!ue{BaTQ-JGq)-S7-F68rPl_5JVE
z*jF4}$u6WJuRg=Re&1^SN#?7PuPuxZT{*Y<Ug{*q2cRe_6K-1>y!_Nr@%T4O3e|*H
zT-yKhY`)c2>-pc5_fGBq!hN?Vth4mnciF`a7dI!bG`60)-1YnS_ldE$?^Xs(KhF1h
zd*)R8Evs4{mU`^c%CKnG(v7a<x|QtL(6xHf++7wiQAQ4>I;VbwNZeYRc6jMw5Ao&o
zU(`B^1*?Qx-W}j+u+A}C7%M#Wi=D`n0NwWIsV({6&no0PiXYgz)q5A8gL4ye&cq-4
zeqCK}^-^pBV-BO4jL_TK?|0St?f-086TADG=d9gjZ;OtF?)km%`(FRNy<fwYx3N`(
zuZeiL#Luq3{i?Bo=P&*GpQrsU?R&Lq^`qCP)GVVsDlcZQSt4KcLh<MN|G)Iv|6G~r
z$-F9y;s5-9FXzuu`S&)z{<i1M2!qddU)9g1PLF+d<+jK329sQ-kcl@Y?pp3U``NyQ
zzt`s1dQa1jf464C&l`<fWxexFSe|r#UzaUnP*wK!?U}06mlvh~GF}$Xx8kC*SaCE%
z?5PX(4D+Ms^QzuAkYd(QKe(%9$wu~=9kUm=EHM@L%`cQX*2+~Yw~3cI{IOEm`RI31
z|BuYKywLi*!c+X$64e($g*`JF1ZHOnCt0+<nqC^z(>>wU8_V|(5`@+~t$QRqUw~n9
zX_Sh~mCY*(BIA!Pc)3{q?}{^Xt*__G?)q}cd#=f!sq1TwuAQw^x@qh4?)X28dZf+$
z&e{L3nZACiYevH9t)4sl?f-5G)>PINcK;iw$o!&a-h{1B-q$?0URQJFk<IdTQ|$Ba
z*=*nEy*rcn=d9&A2WA(Xnxd)4Zx{Ff^ZfsJJU`?#E9rhQD7AT7echBx;_vQnWzY5;
zo$+bGZR5WuUxs}BYIrhp-Bl*12PPuMm6syD1MB`cnuk2QQ8|$*j=951{+dDuf8L#~
z-t7)8yxmzpO*R?ErPtnYkL~mF_&?1r*Zq=9l1uCvD_yt1KR<Y%+;BR)OXJeQMxnQx
zpT`LEdq}=GJIC^Jq`I=<rf@M))9hU}eEbt03-E2@-)P$Y*0yGC`_{w*;w!(uTD`un
zS@P#&jl(hw?H`4YMeP6gb^YA0hC%9CkN*GY|6jlsEK#F4H%XvX+P-d2bT`|J{2dS3
z*w0-NSDSv~%UT_$d5mjv6rEyyZExN_ZM@BE;ihGJ9;X7YZoYc8{rEBlVWne^@$+{W
zT)SXqsF%wlH@nKt)m?+(yM+C!2tAAMJSXK#HW`Ub%?mwMTGIDfY_7%bzdL2TSH0f;
z?5nn8%=TlEyE0}}$lhyz=J(6UC;0#B@PDnpW^Guu%kSsoI?I9;w;XNT(=wKR*`A;t
z%z8;@)svj32P=R6QvBWK_H^~vpt~!Y0_WC=2`pZ3_vTX2rBnq5sXsT)8cHyV7awC;
zlpwwL*-p>)mIj&ED<y(#e>`Z;%Pl!QP50AM{aVj?wcl>;Sn~7d`TBcnzi;a05ZG+9
z=FX7`MujW(F=o6v`%v0rz4_ge$=S@4ELY{Jl&+a}|MR@>Crq!$JYEuiV5U(*fo$Qm
zynBvbecL1_sLEZx&bU~4OOC$pqb1AtmdunpAMyIdjx!}uCFQ@9dUcCdtO|RTttI-0
zN1;?Vl(Bp5_H#-%MY$xHHf8xdbqK%AH0Pb{I?pxtJ}&%l>)lS?*gum>9{LL0=xtj6
z@AOsvM|`rY;%z4hojjj>(~tjTK=kBUvu3=p4pH9Ce{6}+Lz$N{2G{;fD5~5Z*uOj{
z<JIj3?$k?MC5!^hg3PhZlH8dgS0eYc+IW}sru00|w(&SGp;7z3`u=2h`Pz_oJD<yK
zH%&j-#CmSikKp;grc4gH>1C34$AW#yMWe;nr?k2o9e*_QYXr~Md%y2}-^Fb8@3Z~?
z;JQDL<*i@N?H5|$_V31VyJsrV!L06|U!N%5^zEbEWD(}r**qmG_VbrbWx8;!InROr
zMZ)8iQ=R^;vesx=5)mppC&2tlqvo|Bu80RK-|k(iz#Q%%uATN=c|rDhXU=PX-w88D
zFd91C5=eObUFx;m%lQVLiH`GntV?(F*rs;W{h#jXFj=bF)T>AM|2Me_;bn4Drr%pN
zUF)3OrSe&!%kM0Zzma=s*Y($T7Bp5m$d_lb?)oydv30G#6i0MMW<uXIvzw*Wg?soH
z6bp$ubS~)(=`IvwI62F(J!M0?Sb~|_nd*~su6DomU2%9~0i%7$<@-O5nLkOl|2^|G
z^GmS+_MZN)g6%0!w}_`d{cOV}<~IA=z0V)t1~V-9C=_Q<`L!gYevZuh$%j{+S{tAs
zeLqHi-7BrGox;m}UbkM!U|8KDwrc9cs^~dSvd=3ea_n21AX_QM{#YQ#c?oYyOoRD^
z683NU1z}fxcRjmvMPPCoYwWosxtKft$NB?4*xu0yt^TUJHg57Y&aXwyVe9>t#%$QV
ze)ksE*d-3p+m{M6+83AQCZ^B3ZN28{zRz>tmxP^K^Eqk8kwlT4;|p`H6`oz8DcK--
zW1{?Z1N8$k{0}zqa%yLN+UK%et@a^ze8IKjX@62HZ~YF_&tCjA|9i_ti`{+u&ToC1
z{L}sZ_v^BY9ZEi3+GuWMELxJll$5Mx99{V+Dm3)A!tU>Klb-E5JSjLrMq#1n&SURn
zx+DwOCat@@{q>UMV9UjIeAiMRCuBd6=0B<Nin)&I!mRf6BYT@PgYt?e*By!LZ^;P@
zd3xvhzrUYSGydn?+&0}vv}9sY=w6-&*Ivw8SFZJEiL@Y(&Z5_ow;X)5`1;95@4q}P
zft>}g=xy%%oktG`1ek6<%6?L;-AnSp(OWm|rcCI0>GF8d^)*X3nQ~4wdSG4sEvI|}
zyLzhRgCM^zb6=RAFF4-SZMQx9yaMwr+4u1;B<FsR&98g;%WgsU_jTzS2kP!_{~qd@
z{MBx1Qt9gnpI2=UJsCdBDgS!QFB^uKU}NT*zz4hs%=z{#e0B4qb+EJbgr&9(xd*~4
z<$f^ic>Mj`0k8R)H||8NKe~GB)^#7Bz1+3lk9kR8=;^OoPd_ELSh3!b%55so<k)pB
zlWkYtftHCEv%Nvh7;ewY_e{?xtebLpd&d56Ti0{WKYloafjc?maLq~%@37N{o$i^6
z_bTfii)7GKcQ4#=Y*py$JIA>fHAvSUU&p!FF7n^WM{jDYpB;X;km2zneP+Jg@524>
zB)#80E!x3%;p*lGq9xHX3)&i9GnnmRtNFUm^|07ftLTH08(3>ZGfL-fzdA|sfoZ;w
zk-$n0>0b@!3tk6YZ*62XW{_@J!yM&sy=L;X#w)AOmv(PF%^4RNzy9^!tUsZ57d(IX
zy>NBv>*rf$FEdi$;YqAfJ1Xe5J~JUHCVhT%q=C4~MgRI=m;G#cD*k=!uP@O`+V*6I
z>V~KJN48o?eAu{MTsyTdZ_meL(yebD=44DgvFGIRdmFP)Ic!Q>&Goc=%bAqYu50Jx
z%X^u6I*-)7j`Dl?Q!MxS_vf+a0~fgM&)8pmKXIkihU<*k+B>99WN|!jbG+esm_d(0
zhG9K(OnO3Uf;WfJA|bYdo!bOHT#eq#U&FEK4)cbO6<1ClVNKl3Et(Lz$#%_rjgkke
z7u;U)>Zug#ol{loqsm&Y+GlQE#w{Qzp(?dmAfF-m`m|{i)_-QGdb2S#n~%Y*O2y||
zWaRv#8C?0tRi%<!4<>LNWfYS(%PDA&V5nixSng8Dqx?1Vykvor;^(VMeD@d*Sf*-y
zv^^klzAoiex67HCr$LKaz8?v;@7Xh9k7Z2r+Mv!a22n1rQ@(T@`}ulZV8cenvoHJi
zy|8)lt!Dk|3mVn@VJD^Y-%b-;et7+q*xkY_g&2H(M$1?*`cF>rJyiNYnknzgt);w-
z*JGt0WJ!FwWpTo)fwxh-Ayqm+f~{focd78u%R1Gom@b6otra^RnRW8b_2R{gRo6P0
zM-|q6VM}W{>2Pdba^atL`#%R|%MQ+qR`Gq5FpFVEZT7UohBwqtv$Njt=3em8u=?BX
zAi3x&3y;S?pU*FspT*8$>DaYcHSy4nBUKU?7%$1ZK4E!bPFw3KtH`KtpY!hSx+?2`
z^0?TCHOij_nI&v~28zEr^D>yhPQK*8i|&)on{0IX47UGr$$Yuq+Mn?lU)YNbxnGMm
zd%DNxROfH|+3;>}<=eBhpU&;_I;klk(6H_{v-Gt?4^<R0C#`DK5Ylky-m-cjbM$UL
zh8>|#bKcJg5N>-?$#TPuQM}-(-G?>z!$P)s9DT^JXQqivnCABcpX(LPEAFYpo|-nb
zY(e${#t#x7oMIpG#&9r7Tod`BrYEGSZpgUJV~?8eBtC^F7r0J$3#4^@;rPL{WyLhc
z=mwzz<_Qz0ot(c|dSV=7uteda#XPH}qkC>FKHV7^7XFG!f%$=q@X6=@EZQb5R+?Dg
zJ5`3&=aeg#nyuK?IrB;n^P2ClJ>sLZ=<9|eq1R8}_xCgPOy0L9uJ_$fJ3Fsm+xy)b
znN58^y^3aE`tU>C$&=a_mS{cI^3QxcXUT1@Js!*XGGuSKHJUR-&tq*kQ#&JUX;6V+
zT<fhH2d;gbyCX!pA$#+u`Dwkz2TH&H@|(KOaermN^n(Y=&T?yhpWwBVVSV{p5fAGN
zTUSZXkXRs?f4#+{RpxQWQbWaQhmN?%evwl!ZvS%V_?!6pzop+pl^A9l&$JX_&Q4QF
zI53CtWcsg&`$u<Ka+OV+ewFhi!v-^Vn|Zp<5l)+HIRu_g(SB8><9@T^K>6Z2P0og6
zXJ?t7_I%%P=;EA<?=v$0Z2qRn@Ym;7ci-G^_fO1G-(s8PKhaXxd+#)cl=bh|O*#Dg
zyT`)?LTeM4URX_g_Q2>teqrZzhETx^o_p@B4(~L-aaj7EFnc`D-e7g@_)cjL#glE9
zbQE6i`E*LmbPm^n=>ptO({3)$$-cg@;kcIC?$VgP+Al$Qw+p9kTabO$;KK$1g=WrA
zo;K%9-R9QVXgPdx=6af<^(l5!N@sNU)=!n^c4;$6lpYCI-xKRTf3kSGP4NS^>V}^;
zn7;a)QUB#vecj`5gzM(5oSxJ5xi^O8YQ0Z+x_$ce{`VHFGg2HM?_=9_E${c)(m6?X
zsp*;rw#~k~D>vi%?CO*kD<@BxFSF9OxKe9>piAh77XH?So*Vgcm?xArWGnETFUo96
zRaaMRZ@A61uF-}2z#=!c1m**w8$$OzerLM>)r>m!h|tsRrc1QmoV>fdp<8fjd9LP!
zvIX1?Dprpev=6ZNXH8R<nP2rvvwZ%Wxkqen?S39RL#yG$tykIW_de@cm0)u$XJVJ8
z{l+;jY9E<~ouB{nO!}ND-CJ&pZs@%xxz%#jv-+RY>nBF%?L3<6en^9-^Lot|zKi95
zORsAjkZ?H5_4YScE@RY^m|O2+-v=ys6yURM-@b6K`;n?UTU`?uvZX27m(&EVcNWNH
zjhmb?G48Nw>?Mg0S`LdN?1B!d)-r5rbXk2ptMiRbP#(vQ7MZ$(R`0TZGuBL;v1%&g
zo#s-lf|jjc9kp36@s&icmWz?x?0oA9Gm}S;$AoQiS?7iCzdmEz!}cI)uJ~fD13a9^
z8^jpi`dBWh4Yl_<A7zkmZ)W-J)#jA}^4He>{~G^4wC+Q*yoGjV&zgvCH>R{n38|Hu
zOKrW%Y~~p@ev~?vUwd+)>%zD9zVfktd%3YIx?Fa`uT@+p&q`lCH%qV7v52?PT<PsL
zDIZM+?f!zSv<C45r6)y81f{MVcJ?`y%X-^kk?X2b^#IEStQDp4>yB-lU$K1ERQ{_k
zH_c;u$7nj|R`hJ$uXXWxml!9NEtt(Ac86IdXaB)T)BCS0TMDr!E11lm!j!n=sdvV_
z?=!DXHh;aNriZ~h^;*YbpW}YZtfKy1On-9zmO;8<GK*{N*#xaw=hm&Y>->JDF}+2t
z)X*^Dt;B@XM;|ZG|97Q!+64YP?%zeC<Lus8u`aM>NQvS<7P-v&R?hMHX;sm|OKYzh
z&h^<Jswukr`-vL|4<F8&x#YC&W4<q2E-;8T^fs)C-v4yomW3^=x!1An$a@>MG&)$B
zT|t^jZ<4M8_XD9-XL~$%Ry%1<cQ!Pbb1QiATfV~_+OL{fxR%Jii2Cb$YD;wky8}y3
zLR|xY!^vw3J#!gMnd6;iu=fe%FF5+$k)2OQ<Ja88L~cO_wuHU!Yu^{o|Kfb8cir?!
z?YU1M?o#giv_k#$&fDAb%WpTXQ2u#g-3nuetrqu|@*NR&dwn)8$!?m%J)7ef!#=Uz
z`2S_Oy``0azui4qdDcabm+dwYJ08AxUhVB;^UN2$inLOH)~9$W`ghiorTarqy!d!^
z(&W?XzHh&CUwFh2w2nEnP~qz~rW}R4pKLn1KRc;E)ViSba8nxh4y#VF38o8J6QpHs
zFzt9&8P|LC)55fy@r&bKgAUY2GhUZ(ajf6+{t{Qo&x?;G4c07{oN&oTr!KzgrRvWI
z?DiUukN5Y>uk8>Nx!qKe_x?td&VttTSUyw51l9*kH)QM%9)E4w&@^)|qwLe-^VTts
zt+;pXN&dOvdfBHZCqHsBp6`3QCg##j)5I(8pBZLk%AdJ(EAPGQWpFkB@j_&-`*km?
zjroRYlisr0Z`}Gydg*(+D+>C5a_8?^|EeL%ke^p^y6I(Q$LpTk`C6PWm~P$7{Dfi7
z?R5_~m1V!)s`%j;V|e5A&yxi?<~;9t`amkKsr2i-RbuQr@<TWGy<R)D-&E-`S4n1%
zXMsmv*(#Asim$WM=ax?UU2^Zm#l?>oa5ylZV^CIPKDxy707w1<?-?9!d*;7L*u*en
zr^b)y7<Z>ri~h_jyQa3p@I`~M)whzHGw1DR6#SbZJj*B7IJs?O{$tJH+cUe~uDY~X
zbo<^w&FZr76DzeOWKK?HGU)Z%(-`8N&6Cl*)NFZFnNZ$_w%cjH`<ZV$95U^^wsP{^
zmgx5fwy$(-3}5=N>hGot3!|nMT}^n^D^PIt#;x7S0Sa#&uGf87k<1wDFwtVN&rUN1
z;{z-{x_XkfI{x!+TA#cWDbwIR@0rh~t-B&>R<-*0_$YO6v%LChrr+1bKC{ftg%kX~
zzW0g!$?IxrGq>{ka$7sD4ev|CU3>TJNM1k3C~b+{l*TSeaaYTAj5iGIL?j+~`zfjM
z95mx#W>neNChfJ|w`HNp?KKSCC)nabPam;<=z3n`!q#WC?Xy$LOXs}_KfE%-cSU3Q
zNzDsgGAHLRkI~tj%O>dN=&_qk?#zMyXF7K;UQ(%^#?!)kME873=A@^kiylYZce{18
z(sTRos>3P{(feNPn-i?Aerra?=?PX_UrU=-dWW8=zqv79&*u389tkTS>A4)mY&(9b
zFzu*X{C{J}wdZT@Ch4&LXp6Gn-X=Y<;O?)rP1+37KNw0}i&U)F&o{Ypb;Xp`w~pRY
zTe<c+bDfmTlJC8KFWSPEO}%TcknX_VQ1ax-vd0T2^4>XOvxcwp<H{QUXp6n4)U;mS
zXbV}ke(lWVMY8?N^L$JUjlR4)64<cTQvdCmN!RaR@c+BA%6yd?pUQQHn7I=(Wnw~S
zUERWv<1G^rC_g(tc5$xuRW^s)5%QP)zpru&+}}Id{DaELx8^R>14B-QmX_!GY*(nf
zp2@Xj=@RaQkdTlQ()oKHs%*a(R>_#q*)XT#{>ynU4vMdke%(7qocD#&RtIPPJ$Kzp
z95_7%ex)sXY~J?$-H|{B?Pu4uUOhRl|9*1kWB*Be>Z~}qTJI`c*zd7fPr>b{h>&hj
zUQKp@##1-`eI3jN88c<37cj=~)m{Ajg1vXroka_S_NVVY60+-P*34fO*DJY}OkLvr
zna5y4$xZ#!3nd!58a>L}PkNlXC95FDdMkw8;L526J*|MniJP|l+_5fDVe-}W*UX&W
z`{}TL3o||SOqTuXf~@&otJj=VI;o|fG@Ji>)!kiB)g$U{i(dPu^oIRpe7&`IA$!Wi
zoY}8lJ8_0HmVeNE<$vwB)Jn?@?)^16mz)hsCf?kw7pU-7CAP=%1B2ZB*N-ok&k-tJ
zV|sU8fI8Qzi{AsYXFE<hx_$b!dGk+9*tM~g>w@c7mcK!@lM0kxUcI`>aD(%$qqA%$
z&)Isqf2Q#L)f<nA-Tald^-pScE04UHN71LBp9E%^zk23!$3fyk$2K9oOL{@;7&kX=
zZj&i{xa95$sddLvQ=fYuRJhA&l(EF*n%uNg+si#dQ>S|ETH7#t@>QkEI=yQv8z+W6
zdE|aRNBY8n!aI+d`E4HT<6zlPvfba!(}A1eu#m;nMzg5$S3Op87mhCE`pRSCwea1}
zw3s57jAa+6aq1=?+kIuh0cm!rB{`?-Zia6>@42$kwQxsy*w%swx$RNXvqPl4w)jml
z&AfJKhRLdw+Y-V3Evp&k%r$r5YWJPOG_{EFPV??<Cl1=?uYM>ZwJ*%-iKe#Rsa}^Y
zcAvuE1}Lm`m~M99f=`h1q8l3$o2_5mU&1}Fe7gS<$p@`b(o@Z{qL^c~^$lxR-3iWr
zbtZ)|{fqb1U#VWUKD@VYo3Yt?+TTi%KlkEfQO!Ns<qXH2?EY6NyuB7KA2uPEd(B5(
zyIcmb1YQTR$18TQXOzBP`cuqS-?IDw$II}dSyFzz6C#%SU5l>|<lFOinUvp3uHB(0
zN=46|zIgfTucuorw=a0C`*ODC<-A{63%HFFVyE)U{P|x0fBT&BdzI&QU0U*B-V472
zuS5R^Fv^QQxHZQx^3}91KC8qMwzUiT+3(JKt;(#a)_B2ou59kXq?`TIue?4Q`&;_S
z$4|^gnJM*>m6sBhOmyJjFs)nV-Y4yUQ%q6(*!7w~?ah2LE2d41+sxgin(xrb9Bp#-
zYV|+0_Iv+khsfS|&UdK8Ylqv!HFucq?kkzplciU{#Oa-{#t<nbzip|*twz18?UD}|
z?fy9P+dkRnS$#D$ymYtJnI(~@j!L|onLcmgr%y$BkNe&#T~Qa6{rdcJv;O`+n|=o_
zQ1iLEYnjqtt7vt#IEJaUF-lf-R<o~n`klA<81%05UF(yl%5U?2Mfc7L+!wB=e<eBY
z_sv`D7O74<#aF_3@52?%YekWlO)sz(%oNG`wB`?E7N@NXWBHC%Q@fY!i|RjncX#lr
zZ~HV&+ZhATx?ff;?yWpJ>2m#?p11Sg|KPr5vZXQN<MQ82j3cXeE9>bxUSDErHML*p
zz=LUev9IhZ3O=1wFQ2{Yu!P#v1dF5JE8p*Wt@r)wJdKaRUo&i8ojn-~npL?|e!n)4
zZPqE_77gFaU!^V_{cxh;`mumrTieSF96zV)F3&r^w=`h-^?y|!UTn`!?3~P&UC+wS
zF3Y(~B0%$pmVH5W8RM-vH78##Z;N1MF4evuV0uDof!4FEsd?odU;k}i@=L&4HYEBo
z-wmg!&(_qeJT0r#`_p;JekD#Rd$r6t><xc8CfBk|E&0p)CFK0`7uQSvtzB;PzOyEg
z&13tvWmOMb#dp0nzh85?_Qr$Q_f^w>7dVzrJ=>7@;m^12`={#HzV!YyegB`OXL<OJ
z9l74CxBpMk@tl?MS{AQ*S3Ni1|FgH|ZFc<R>+$t>dFu`wV9r1PT_8wFcx%brx5n$(
zd8MAL*;qX<YG2E`fQH&l?O#GxWc}Uce{w>j(SjB8pM3baPv`F4g*KD+?mX-FDpWTn
zY+lOqRc?HuMHdaqFSyoi<kI-tZY^5;=D}>OyZh8ae}8$?JS*$2(2`4=s>QFk7V%}h
zc=yHM_>XG(gb)#*3Af%fzEez|$EohrA$k8``ww21>5q3^y5>`*o~s%=gXwo_VEUQ4
z*5P4mqn<K6n-c6dQ96Im#ah`8#)j8g0!9%L?0=8y*D2or^URzz!T*@c#BJ7#Hl;E=
znrJui+ReC26Te#-KggM2eA(r#-`<TeX&0Q0Yr<b%oLTkd>y{o{HFGmdAM+{$vz7bH
zS9&w5oKE~@y5-K~V<*=&ZM?K!A->IQuOjm-eviC`b@zh%bFK*U%;AdMR60AMY~JL8
zuTH(|uQaUMcIoG@S<FJKEhTD1+<Zf4wJtT<>rhu<)WRvG_-WVjok6p$L$W@5t3>mk
zKX9<R;Dh+=4T?YALeI(7lz#7695n0i!eB;ztC{aF?t5<gzHt86-}C?fl;8RJob}w6
z?-%>)uGE%x_`P4nEK~oXS^mWK{eN?p8+n=~tl<9LV$GGZrhHBO{(Fpi^A(>+@3{NY
zASvPRH_*WJn#j$^E@m8R;q<%v*m1kHX6=_fGkgqhr{{7%@KrzFB5*+Ui{4j_1Mg>a
z{#)WXd5*kw*_z)fFBK13WOY2*{>S&zEK!%QJt-$Id2aic+`D~e=UbPmH_3}v)y)2y
zo&0L{tPttLQR|<*?3;1P#4j@4;<n%C*Trlep$9c;{g-CXy>R&dgX2Bb!afrJ)qWmo
z7i5Xx^4Wgh*;?gAQOT_)y}6$3i+|O=-Fp4WwCKEv>ho(Zc`md6b+P}+%jNT@tqfky
zb$|6-(3*jopMHAA6*D?{g&ep#B|~-OzP|qP@$ucy_WwTi7oE5LzQbsNL377J=b0B9
z54XRw*4h|k)+|(N%3za!Z;zh$9-bmKrizf65gPX2ZY291db&mLR_VK)&v*UF)Hiv|
z{yO%30E1`CM;H4UA{VSx<>NK4%-(qKV&{{OQ=i>`r@{I_*14TeRPAE=oWi!p**>?{
z&X0;JTC%ZVOA5b)3iGUgYNn#=z5hOJuDUg)Y0c)KwAxV9xSy4~=B;iEzv+7E#+q9a
z(;Q3Qnrg2$oOk`=t1D|>y?%8kF=+7u?)!^t_VgCM;*38ke7^kDL)$-M6RLjhvz&Y}
z#p%q&Q)j27XP$0k<hK(4aCp%VW%-{SHGdw<Pq%)z<M7!P3_g$Ad8MD(G*9Nga`__<
z0~_<)a|akYX6iCs%CS|7XJcj0Ul6Azn^1jJG~6RIbLE}d?|1zUr3nP^JKSQsf02zX
zHK<*C{hmvIGXgq;-z}XUSH+TXc!lSDj%Q{YI9Dn={J!L^e{z}c>?b$V=a*Jbvov8z
zSbpw(-S^#dQ+(~r0u|%mSIuMUQU2A?9P)zy_3nB4J725bkoY=z^Sa9$cHdv({~-SH
zvEIoiC#zfEV~jVxcVLGRL$dBR#pUyPq>8ukNLc#4;(r?``pHrK?xLV`k62bZ>CC;V
z=Vn^@b?dLrkgt_HD}{nZw`{rc;-SRb{L<4wS4)!r8LZTsrEzvAa|v%`anQex%@YdG
z|7dJ~SeW70vAI*@!R_#+_qMRaGAlc@_^~ET{IYK6Gb#0#jCRWIeI?V1cbC5}JK(u|
z|Np=5#d+55V5^x}<7u9BgyXo(%!v;rO?bGjY<Y6t;o;rX)6*>3yee00mHg76@%qF!
z<^tt68ucrzpDH!hecL>LDrok%$xtHo6VLJfjN^T>=c1&THP$fBjJcuU_V#Q};rn}g
z{j8o#+Ml?%*nM|-;)f^hdpnYKZ`E;x9SdCbLcUa)b%Av<*ISQO&3ehr_t_rb?Vp?{
z!*YD0=--3yB{rlUI&WITf4pLoA?ts}FRQX&Jze`uYNkcfgm1|Uzerm-ZRg|-S|869
zv~|-gjo008&h~otF=<p@yw6)TC&j0=zb01vTzGH%+lNx7D^>+h-6ECJ`t|%JBd+$o
ziEW9`z1}WtoOD+t!rM6POfdT^mIJfe&82@BaW3^?k-c(O?Q4|vp+!bk9^Mz0x=W;#
z$j#+7*!$yAH{S_^Rfi7EIM}IjBIi_y?DDx~vveXh9N=ZU*Z<2!jd?Q5odTXI`gI?>
zL3_k@IUcIw>iZt}^@GjF+UX1C+J}A5yu9q>&*$^?&)fg6i8-__{KWK6E36lI)y{BG
zxLIVup6fF8j6(XOh9&hEUBxY<7&cvCJ2`*z%9G9V4Hr+J`jB`&xM3e#N#w2$qm%RW
zcYaolh@GiXQJ$pf5dY$wkor~dL{|3p50bx*9h>MmEiAYqpw@Zup3qRu>Tl0ay?E%c
zrLp*OWv$-LRcw9&DVt60)WdnLLz&K9e9pS6PA@=Vo$iXV1Gg9aY1ildDs33}Nquj;
z)~c?h{~o+P^`Gg%a+X)E{hu7WojDrBA3sd}ptwi!wc>*XyiNXJS*LGX;QjnkA&;Mx
zkoVp1`@ZijI>;(+@qu-L-o776+w*p1U)P)7RvKru-9`6b#d)@l){A`UZ(AJsBNp1(
z{rz$|w$f}uMSFIgz>}+y$A6zO0Ig^F2^z_HRyr?G@8@K;l``25*ZL+-n91|!iMoAZ
z*wrNq>vEzWxu0NIZkIl<a#_s_XZcC}wQrL3&RyGdTjWW8)f}d4)79QyvS0aPh5CN=
zV^QJ9inX?B#=bt1KkqYJ#5=3sZ#Ji1SrJ&cn`g2L=gZ|9A1<}u34gPCQuzHdffr;i
zstQf;uS?wb<dtB5tCZQxixXH?m!E#H*<LCC^vO-n|IaJ>(^+zbG0v4kf78a~$8*vv
zt~`Eov$dRYpU3_lQ#GLs?u)k+f6iKPd1=@3liqXPyG61j=5j7hSn&5<`Tk;AGry~A
zHm98}lJ#EBbf{%V?(J=yV&_V9n2*glE3;Vf(wlbsKZ)t895({_&If)?VrWfnm|J=+
zGWXLan|{$CyJnGubXm(N`FmR#eWh%2RaNGh#`Nu5Vz;HYG+HHDrS4Um;F&)^KR>-1
z9zS)ib@{IHAByVJ3fEZudVbfL@r9qgVO!8u!)*z5bv<)#$UWMAnnk{mQITmjzgo_p
ze=nsg{5DOn*z-8B{q>WxwX5XvGHh3E^IjVyHuHM@1|G}LNs?dh%~t(>g*&8aT~Q?C
zqKXzqr&k>Ph8LFVeMn_dVwhIJFm0)6g`DF1jb^=JLjPFjtM-)}-(0$OiTCmg6H81K
zx>$|1uD`sz{4~4W2gdI=_k&im{rfrp|4l~zODexZZ@M+l`Z>v4uTbGy-1ABAw_cBX
zeXmtAP^`IQYs{71JUkMj_Faz)pJcy!mHgEC=Zfi(>}h*v-c$*)p3L*f@o3*Fwy9rx
zB#l#!c8R`oKf!;k`Q649w>O_>jQPdD#**w~>i+jaTZ+|TZ_{1wubDMAmT~hdx4b`)
zETRABTQ9q6+qLu-#tWvW9AhPKM_*N1%<k&_;zw!Nwog3=7ca?pQzBXLYw0BGl0|#g
zPOdQN@Zl*i>swnlCBO9H&a3TTV=fsSd*Hez_%fTfcZN-uAxFRS4#UiudyGyl-MYj(
z{oo0S86^VC^*8D@WQlqwUn^!@c)sSDah{v&@y&I=?!K?Po~zHarqlb`$=Nq07V!Qs
z^6+SvYO%?^U~qZ!!OOwS%|*NgH_iXNSlqu$QYAOttmd5MbBpAa_WysL_gnPqc>N!D
zbHSTC3Ky@QbaBP<*EfUTo^PpHXnUq@<E*T{U6Rf|TX%h(`io(QgqLBY+tM?i#P&x&
zHh$asCHBf;^#`qA&sJ{QZx$~VZKWB$a>C5u2p!ktbCVS>+vzo*pQ+rce6GNZQ|EHx
z><MQA*^4h`KY9?a_A$u(mecJE{}>)H=<Vlzx6xnHJa3M$i^SxaFD}WI<hHq_Cxzx1
zZ=7kIZnahScVc8Ycp0OW)Pkc7nLj^04GIe@Yk49ldw_>U#WO^nN5saSM<p{vrL%eU
zUPd9-uiq}o=+67j_-p>ZFU#}p8yxVzd8POAc8LSC&GW?^zHd6MSFBaaARaZL@1}C;
z_jgBv6ha%%&PZ@S{<(8$(zB_2Hx7gcXl{;4-KKJ^nB%21_fEerZlbdnq(6P)IhSY3
zEHRh6eSg1g{=%}lNiaC&!IYau6}Ms}3y!g?g!gy0Y+s~$#KCyx=E7vf%thDlNPpP0
z&b!XyhxUSOZ+$bqK+9y8Q|p8(qL=O5VqI++$$nwswV56}-&Y*Bz9Ypv=~Xko-3tfy
z%&GaOHpzAEYL1k4U{zR{m&R~o!8W54=C33?&Nx_dvUSe<yW!2ot=|`CzMW;G!M}2L
zq(+Z<p+nTIBNNIi+ZoR{%6shOsd;pgT~j7m^ATtb$!?<wuMF4xdKJE3YyB##j*>Hr
zX3hZ@{`(hpIv$<l)wl8BEScn^yYDS!_|x93H{-<N?Kzs<a)~vEoK{CZ+I!S^-;Jij
zEOR-3o|x?J{c%BJ(2UjXAtrLydbjLK7rUJLRrjMl-^*R==bfBmoUun_&Z7D5a|=4Z
zNLM#LdAak<o0CU37B@ZBIj3V0b#qF+4*!EmZ8Z<J#~iNy_`%BNJVSKGVcY%U%vssl
zR_(I0nU)rCuWf$eu;zZ<|KIm_`!zK#s7kHZZI8ULbN=r;&*yyAf1luZylj?!%|mWI
zIfG@zj2>1q&iR#0Iq0B}f9Zh3M2*V!Y-y90Z*y$Sb8aYrHeT1fufAXWYGz8M`ZQOm
zPfyv8G|Gb(o7{0}teBzl+77(<NW9b`>-Y!m?&IQd6^`3-Za#YDTq}9u-rNc<gSw!N
z`axUc)b|~)+QxQ4wp43>s!9xV%xiw9J&aRgw})$2$keod`LH5qYFRYb*Jifnt2c^2
z%$yWz;-$Oz%Z*6eU548A6H>(cr|t=S?)mTtzt?}wdVOZKcum&DCFX8*uP^TWpkR{r
z)^lfP>B5}ii`m_a`vOCaKZeDt#6>qfEN8Oa@aWhx)yZltnffm;C04LWuS&LJ&yEZB
zRrtASZpQ0tYY$bPS<yAIAn>9Q!-NTpE5IvZW#*n)GvCiYWrEp?Nb6%<vyRr?d&=G%
zX@8!#fH8U=^OkOL{j&DhJ*y_Ee{~A7n{}(jCWBj;@tf%9NV|8P%h!5rn#119#nzpp
z#<!(=%ai|q-`C%lZRYfy@QpF^-sg8mf(}UV3GWLj`jd8{O{MR9$f{(uYpiyM#T>p}
zSDxuq&m472`tMnzvJdXXK7VE|*{nP1^8>~&2c6qI_czWe|37h3s6|L)c}vRoaLuv{
zEGH$yR>^zMP^(l;fBAXRgJcd)Rs~Dtr<2}aoO5-(vSLlou17gaiMg8%Gn{z#bbsXh
z@p<>g68F{KtL(k2FSH)u@!P{FtoA}e{9@#pITlkpb<KF3)=V?3W6}xyIm^YXy=anX
z_JIf|V~H0P4wC(hjLiL?=Z3G3dux}H|9(?!XSw7Y2CHe8R%`_=*RwWQ9`~emR-3NP
z74`yigA|32G7FaVgvV7Lt=%rZK~G=5oVl;jtD2#FpX?dUupIth-|PRErw7*l{d%2S
zJ|Ll}vDA1~{*suqezOU|wFYTbe_uFD`>(tbcC1}qeeZ4M58`EZ8~U=-86+42g_&cR
z4Oh>-tIj=9K~U|1`3KG)vU}DsFx$nh=XEHblEP~ddOrP{@vPsP7hbu)-fD1qpD%}f
zlep2w_Up1|U0*xzdQrP6yN>(GN#k3&?=R%-Zdd;#v(H^-zwE0i@AQ<#e!b9O;F;if
zw8v3&RhWvGRnD;<$-K9dO9R<{yt%n~?iGo<RficC1Y6b#2K?Q)ZsI39HokA7ifjrE
zU8|0=DJpJuJn(CxyIi4=PT`p|5(YeaPBMja*w0pJH=MNMv*$W6!-mnvF2o_OVKcAQ
zz2&_Prta>a-p0)<EHhq}eXTT8ICBQW2fg<dZnL87{eQL8d7B=WSQ_VkdEb(#xtI6a
zWr$ty>kVHkTJn5*_PoNRKTD0@ZuvgL<sd(&?)h_1oTEN9O+WPcLA33|4CQ2g_W5S)
z2b6R^%AB`dm3HOKOoly@jJrz2n0dS{mV{r+nrLzM)eOGBUzXdy<?Ck%5Z8@*axRl?
z$xji5AT8!@zO)SwC*&ATOM0)(EG|BG?oN)s&Q&(4$*;~Q%IrBTrCqx5k4JvyO8Eo7
z?-ZZkDXHleyQkS|=1i?p!wt)F>ZUwC)>|xgV~&BVjC#=B((AE&9hO(S7(MOY_`0n<
zYyB;G+pb?9js!6zI7@k&9^bJ%&gase*Ros*3wszvPum|8?+K5%adVc0$3bpiE0ztr
znD%&_{xCUt<y7nF<43++xq0Q7kH{Ix51(c?iht&bT4;5A!Rpl}oBsHx%n*F_RD&^5
z?#zV%!_9F_61RLfS6;f7Wchu@bB}#{KCfE0ovG~NxhJ>Sj21E`Zn0S>`J~3_gLnL|
zNi~mz=NDw}nZtKf=VDsX#qtx~R!XLuYhSKhKCei~Oh~`^%&P<at$QMk<8~A*G(MK}
zU~TN~Ym(s;=S^O2a7jrw=)HdZPw(mG>bnhAD%{&G?9cd1q%D!>*^%ojwz6G0J40q+
zxve*2-SjsV4_<^_D_Xq3BVOh6vFb^-n=Kk9d0O-RbHDe2QSJWRm*GEzXPHlXFhR%q
z(Hg!M*_Er8s;{kl)v-PO*zO1CuXLs_VQqOh`Q<AkwvyZjmn?ZitXfNBulX_R&0~&O
zQCk1^b^PwFj6G{UEODNC#yG9)$;H6qJUvD~6qvGCt>}&LcRb}5d*(sv0+nJj2jTgF
z;h$9X?U;Z3|9Ag?aoCL`$sw&#GlQce=BM4AURKyY)y%=qs>kF+bM|{b8`g+!r_U2t
zooU+05&T(r>pXdFpMN(~4~QwYG_5e6m!P<(Is0?xcQJpC7n}B8s1RDfE&oF2#Ub{M
z{s*%p-R~VQx>!~6^j3x59;x)o0^iw;aWa2;vK!1}V~;hgE9IE$y4;{(!#mff-M4zq
zIXz{XuyNg~U7FWzjz3`VocdUpF@Q}vNag*E?SB@_@=i{A%Xr}F=B72)1{odcvNOIW
z`1LF4zbZ9xx7>65_n(Xa+r+77_C>42&inr=eE+2C_j|8P`h843WK{L&Nas7rtkj;P
zGfXb%P5#gywygfzXORW>8KXk}^_))bZJxJ2@RQIA@mX?p%4VLv^DZ5i(`RLHE{oVO
z?{vN#`(NR`j5-Tr)t7bNTkOeLGSlMVaf=kDc~@qps;RYSyfm2i>I}=pSAuKPzgYeH
zlkwJ6F5{&qx5DS!iuOMgzHhnOFw5lS6C=J7MZ0F!OmVk%lZ<rf%ZWTLk8YmtRyC46
z&d$!@e`#USGvmrLPLd50o)>R+_8mNE-SBAb_Is}y`YcWzC_dZY{l{QKQra;GuV)_o
z7nr8Z+1aJ_Q#<}=*B;Pd-SW!;{J+x-u1i!G8n8_=<q=x&bc@!N(+0i_GbhySwJsD{
zu%EXeP+MKvU431d`!t{0#5{vc{ypxOmRl$Nn5)e5AvXVq^CII7nfx2xRBjSbaN5fw
z@3@y|eKOO%z&MAQ4Q5%XEUhVhMU!`?eD&<{&I$f9FMH2Nr&Algccwd?$Uk|ionPtZ
z^2Mh$E-Yn!VPeJh>>y`IgL;rov#i@8h7`3E2blI4R3t4}n8dcGqHWi-a)$UdO*`2p
zFh<Us+-Fjg(ZH-F!NXHw^PsE!B-5WIhclQi90}x~AyxUYIpJ(;q-HdG-tM<%%k}0h
zymoC)jca6s`CG@Lv;}`3iSIA?%J?EM*f8^e0MAt8w+j9$)u5_2u)%Ke|Cw8sKC;TI
zp3-<QF#i~T^40#u-!!gnt*D!wvGGFO$LL<GV?NdM>K@K)?R<HHeZi3v9Qzpj8`}fe
z{@$3#Y4N99)sSa}hWaaw^|tBf7nOF$sjn{oQu$?;(VBf1zdzWxOmmU$9d)Ty+rsyU
zbmyCjdvBdpy3wwLBY}0tA)5`Ko`z_pO+V%!@x`O_O(W}!n_fqzH&4@vd~_}|?ZTyx
z4JMP+UxF60U%$w(%24&xk5AM0%Y@5Lk~_b<V%}p(n>kj@8Abm8R%{8>U)XfaSbOV1
zH|a(8LiZNNY-3hjn!JIPBUp?r@(pJilcUvvJGXAS3jMm?*Ua?4zWO<Hba?I4pO=+v
zQVO`YF>TC9c9JzzaoXD67v0jXwM^T`YO=ut9@)cNICVR@98;U7m2S%l@LFZ2x4Y2$
zV~LdUZqBz8wn+z1T;X-8)hg9PykPdNXsP!bKCUa=GV!vK&I;=@Ql(|*pWiEgGk^X2
z&((f&p8U16f4T4e|N8sIb<h9&yZd{ADHCIrp|F44IqT*{=RL!2op<SbEcxTA+M;v8
zpPB6+Pv*2)9XQ3;;@V+Dep!PX-)0mU-9B`-EpLZ!nWFrmPwB52YfkO{yYSG`H8s97
z%t|KLo7Efj*%{PLNKJcS`zwjf-l9oSxHZXGb!Ca7fJ<W9k=4#~?tf}$ce9vc<TX7v
zep|A_r_bl@<<AQJY?u3|)A+w^%hY90n*|k2*wPvu%ii1&e7d}62`9TCGplnX4_C6v
z=5%Qp9u7T^jf<X6RSbJS#c}SM8}lol&0L{-W>IExME)k<clOpC4)H%2=WXts$$5Np
z@Z+1>qW9Xi&oH?lFQWhW<d17VUw_%i?q0TUg07nIp^g2wMFKM(KQo+Xbo-EQUqQ-&
zm<-prvXr*3ynQv>b52e+xi-zfW~Sbk_PkFKb;ks2IUY}(Y;z>>K!4~S?YkU(pZ_x#
zDsZ(VXRqJA+xk}oTh|neLp#@=aaZk=vz40LxvA>u|B9dA7fz3>(%dC+^!d$0_Mv>O
zym{KMbH2~WO%B_fBYC&%cJ9Rmt%{kS=h;>->Q6K{A#uUX(c*UQr%%gUSep3koNsQj
zIug&-R=1!;@I;TK+8hq6J7!{M^jiPTduyklf1rP^UV*XQ!MSaVHD!a{(kAn7zxm8f
z@nM_Y3C366+U7U?MRet_IG&qeZ{k@mk)C%+<#KD{Grr3$d8Z8RYm*M8*R5{ecR^iD
zL1J=w%WS1>TQbY+ES5aAmQGYHUzV-FXw>4&p=2^6wkYw`6rqnf7Z;W6T$|p~{9;aT
zL3O|Vn)V$zf2Ek`dq27;cI*7vC-eV2QU7$(zb>d^{|vheafjq;zg+Zqu=&*2%`uDr
z-P|t7bD^zRb=x1on9M_u-fVwz=SspJ5Brzq$=w?h9zVLXWzml8hkESCV`S6~XC7}k
z#ah0P{|m?ENA3I*V`X9$Z}0F=68@M|#62%HdS-ab42!7QliqInpyBu-`Q;kj%(t5?
zHm7?#%h;p}TYGn(WtnjN)WWwP7Hd9Q5Ls!tIdM|>Gh>gCqT8q2SQ`!%7znjIY8J}T
z{M;o_XtT%vbeYli8ND;+Z2okRGw=UL-js7KKNqmQKfP$n%`9$TyOz`Hz7flIChFy>
zeQxKi$(~u9$fn2BvEljr_Kx(V16nL;rN;j`9M}!g7ctM@aQJ}3@$<<}3IDS7<_Nu1
zZu@tsz98Wf`}>WnQx47DaQW%?LoeUn%;fB1`I(q}qrmIdmAs1Cw<~mJ^Ts~#T+CT!
zC#*EZME;}WygBPQZ%@ftKXs;$@G|dRxoa-68z+eT;$-));6GYz)n?Xu?1ezvT;6g|
z?bwbZulN}mlRw^c32QUhdv@86e}?n(o`@>Vm?mAnMr~*8iEl<eCv`q-_*X0U{=}k+
z@E32BwpD4`t4!JHEN$*@$E@I)Fr)u;@RtAUcE9Vox3f9$!{?`(_soy=AKE%IaTCw?
z^RkQu?BT(y&a5~%hkd)|t)0_jq%04#A1`p^EZ%l($0J9<&jxlq?{j^ourV#a&V6jf
zUUTj`iOKxWj`2-x+_^Emx+nbLoGKr))~CT`88<d2Og)`?X+w^8a_Q{*Z*Cr%To|_Q
z=~2GJPTQ9n{#(SK=F|3QyH!W}Ch@kpobw}h1~$%|Z>*`Wqh2z7&84N2c`7;%9j=rX
zUtYo6@&Bf&>QPB<`GpUHdo&{Q7>j>)=^rz2xUnel>S?dZvk&b_I`VzCpvkfdLAx;V
zo&#^X+aq<o=B$<bx28c?wI$H5&C#X0;{UYbv~4{J3=++63+#FhE?8(2|MXdNMwOKG
z7qbTvA0C`~>}4jq*+Aru&x2<1HbaJZqhmQb0&M?pIq%x6ctK-(0Pl<q90&Y@cV)gc
z+h<~@+Pl;Fwpw$Wt(lSL?1gn@CnI_!?&_?)+Ijy@TC~*W!)7Vm+?OLP#nLJ_95$%n
znxj*D!hBl0-J#?!lfQ(u9ZjCE*&q4$bKtbC+V;E&E4weW8EAw}QJJ6eB)GHYm!NA`
z<A$08i?(hJomcbeWQO&u&4L{nEQ@(W%x_=(qpm-F=8T)4`yKwAmAiexpf*ECKT#uE
zFZZLDkob-wNe<uYoeX8q=a&2Bbx!Ut_@_TTe2zzZ(sKU9+MTDq|EOqCt`M+zQ;;zG
zHruS5eb?^@7^t2((t1*lO>XN{1G7V$?);ec&&bhj-ht|#$cmh88?$XBZta-N|FqFM
zHJIP*lt%Q;oRgob1h_jl=q%oHHT|E-?Mp2`FCRLzXPQ~`jH9!KROhx{6#vz-W@}Z?
z`ZqRKI@dq7CEonNae2v3fAjdLNY(WvjNOiXk6JJ8m{RiL!NH8((+VEV?EUN|sGWGJ
za9wwR!J$cNoK{^^zSj$0kv7Zen4;JtFZC&a&ui{`_0Ruj{*-w2RK7jnP5GU|<4X#h
z9?D(I&Aa6ppP`*QKi6%xf9=wF$Jlh4C0VnzBc=C<<(I8|T&VY(eVIgb=fT5f^BzPW
zQ?TjjWti(5IOlZP{N7y?Sl5&oE-NWiPvuTrXvouRfBDY`v(%<UJ(-29@)sW*D_U`9
z#pP3ccQX^O*>xZ0n{QwjzT;|Y>P3FJ)9I;__h-n@KFPWxEqGUA)SWPQ2|MY3n~%1p
zo;f<V_J5+@Qjv-%Hls6qjW_%r?hV_wCyB@1;{UIM-zO(VuoUY#&s<YixqSNj70Woe
z4^;@x+b^`me$}~9J)eV1*|zPN$<g9f8gYMdvZ<eZhPs#d?Xx~C2Lyj9Jvlg8()NAI
z=A~`(3tr@$I>7ex%p{u>JAnqd1Rmc5cgn;gI5%%*iCrKl|1`nL)8?i3QH4FZMTvXF
zZteJ7dEnv(p3BYJbx#=ijdXoI8`Y18$pqfiYnhrE@%VhIPXEm%=H(gDmWdMYQhuda
z{hH+CUO!=Fm{{eD)w&aO_D(HTD>Hj@Zi&z7XfZEwhTLhK7c2Ou*GoMLRpR+L=YG+>
z>Yq=iyK`C2pE-HzX?2;)Q{+q6Uhoc&*>`Aef8)&=0v{s1wjDU>E^(+M`b<uy@`QjL
zUpmcp%yepKY-dPfKh$DbV&<CdRc6QjBIND6S=>w)81A*Hy|LS{IoZUS(U`4M*>|J#
z6ou85Ilm@<YiLgtI<~x3F#qL7=cV4VCwfh8GMqbkI=D^u=?uf|H(T2CJ`1P$N8QLN
zTyi`@D(7?b|HTbw`2QMOW>tP@-*o-Z+BF9IcWSEFaPa@#aemoJf8jZ2#pW#Dq}Ug`
z%8BE1Am_b{u8ocg9LIZ8!`7W)stmM|XKwVdRJ$Df{H*zXnX9w)6$96u>G=6&NpAgR
zw_B&mr~hPEIrR5ah|t@L4@xT{O$(JLOWK~A&iH1Tg+PMNqKwG5Mr@S<$Bz0rr!YPi
zn{7AilF8GgL@~Kvo0o1Z$eE&7IU(8R%H%1QN0fh0$k&KBZuy*WX4?*v+n1K#40GGI
zW6O^eiGLgX!^9qb;oL9z=h}UPo)0^1rhSjOk-E5qQTWk~X*%-z9*8RGg&*8tp!s}@
zc1h}~c9Tz`y9^j^Pc!hG<*4ZVr-qkn`u^9>D}&6QUOE=LyUg`|S6XRy?F{doKd;62
zygbm^$$4rT`_b9Gaz}6MFUmD8akbp=D|OS!i4GetU7fOSZAos<<@pzS@6R*1bLWO<
z`3rZu0QXy2(+dy&&og#22%Gj%ypEgy?ULJnrrBrC_p_-qNQ`vL=2pI!5+}j7?aTE?
zp2?H>?wnNjs*tNc<@M5uV~Uh^9LK5FCG+OZ%P?gTRFwIzafIC@LQ&9cw&J{^ie8SR
zbJGIu?L5W#x$s-g>WEK<kDuSZILBGJp<}yb@r?B`cOUc{q*+fgUKMn+Pba)e?e|%U
zgq(xFHMqm}-aHm%l&|=6qU|;%<DHD}+w%ULRPXUG7EXJ3LnC(eaS;)V2FY&b-8QK|
zI}Ya_yOXy3X!O0CZ#L}NQWBPDbnXx@`y*%P`8sDl38i_N`$VsJw<&0s0OK?F!i6<~
z8S#H#g)h$6o4vv9;YQUnN7Xsxjq+YB(~+3@y=s2#x0@$&&p61m{aL1Sc*ll07kuUZ
zh`G(K``8`tBL8K<+ATNrS|)D0!#hK%=cdu;tGSuQ%v;iw&V2MX)QUT{Wv!iaYf@g$
zuMB@9o3s8=r_;^2uD>$0WJ)(sbbVO#B&k%O?{-eHJLBd*5&w+09<DmPN$1Y5DLK=Z
zZdFsdT*+ZRXHun3uHuc<<t2$Ox6|4JINr3&RcY)J<T=Rkc(M4mhuq3?KhNa)Ff!La
z)s8<|^~|O6yzTdxB^Hw_HI*aNP6%kkY@53OL#w{a^U2rJ-V_+LR-QV^JC7srMf)S(
zkGkqIr`E3T;XWoiIpA3MMu{g~y|EQj+rQ1e{imh%;X->J{?Czd8#cU6ePzs?mUDjd
z)|^xU_k9=oY#b|$^di&k>a>-kZ{>VU+^?&jIk8sFob&jFa5?YxvrQUrvZrits9UBH
ztiWp}ezw6O$8dAjkq?%x`;yOysj?{Bt-R55;F{f^^?N>fZ8_DtBeSg_?b)7Zhi4{V
zQaQb);*+6=m6g?^{a+5Bx75>)z4c7(p6i1(`n=)Cmv0etSRnOwbMHbY*M@IK^ERIC
zy+1Ey#!~Lw)AF}=OpMeh3){79&H+ZrBTqHew5BwlOl{9x#52?8n%`>cobXxJ^Gm|Q
zXUwm;aI@#=L;k6H4`&4EMMY(=UfL-ncEJCpS3yUMQnIz=qYqpcx9|V^HsfiE%j{me
zB@azSl2>invZS#v;MJVvPn>Hm&0h5H-}n9UQ~jmi&M{v*uZWwuc-!f&pGm$uFXq_&
z&VJk_s=s<ilA#9o6TY|RI~%QQE*;|Z=JtQa%pSb!igWE7wvSx`lPfMI7u`&prQxjR
zA0eNY9e#=L@ubRUkNjU7zg-x=kh5@Ujq%B{h#x<<oeq2Hq#+@4^z<~I+f)2)KDvC_
zswI8G^O0KT(cJV)XQuHTb97wbQTW^_XKE4OnX_4+3NlaGf3=V`eZjo!A;au>hiaGh
zF>HA*V?Up}zqNridH%Ld#?H4Va~(W1scc0>!R-4v+U&DM^H!8_I<IS8&mq`$GHrRH
z>#dzOiMKzUP0!u*B{6=j?~$1sOKx~d${c&>r+xaArF_{<t=I!?5gMjb)OoDe#Mj)~
zS-kwqw{L#)gwujow0yP___<l~Qh;84)Y<7P59tb=PJVh=g2&4)@aEO4qI35Ln909Q
z2ugUV6TkBok5a*>;yXo88&=kB)(+7TfAJu)Y`4XsMRyk_87!TU*8XzSPTl#MvC&VB
z+;)g3?ap~}JY_R)WcT(hKi2YX=Cr=vzg0hH`qqPo4w*dTyPco-{IXv5Qtl518tF^d
zs6{&d{qx*@`f>Ss8>{uH1qV`Qm@GX$|Mq8fj?BVo?TrPOea&6p|5LmC(0tj#ynR!S
z?q~n|Y5M-2Lo<1PSmv?(f6~txRZ#qxV?jjM!<hMIn~t8ApL*lCUCx{5$;$1QF3l8b
z5sr9z%S+sTeZ<C7TjyGz_Lq4F&L1!QSKoeRdi&Hof9th5w?t3*zIMNHZv*eig3t5)
zcfXmc_h7MvrEzNL$(||yH`Kn_czh9~kWr3@2FH1?E&KM>g)Kduy4E!NnoDWR&qC?q
z12Ox5U0uIu_Juv4y)AM-7T-}x`q=(?;Y4Y729_Bu3oE)07O+40@$vCQr6+bxz5jRK
zI?-*=uc;oqOGo96vqX-5vPXW|i#{e}d$GL4MB6ZTiD@~`FXpedUK_Le@~KT_iO~{f
z$3zOBaMtO>3Y6TNyRO7o#o=SozV1mWVZXjy_CMVxYrW{Lq;-4ahJ}j!_hbETo2kh@
z{4<ehehJU#S<-C_-W)u5(Bt8!DnX|sqIn&kO3W(^CGJ`<DKO~Y_@PtclA%6*mc;u#
z`zEh{<Qwd<&}idFfptYUgPyJbt)qWqMw8dB%YUZv-@X&Jy!EV@+_IC$b5qrGS1acv
zYuF$DGEGg=&EnXnqx(L8e_bCq`Ji0Wfh`(w9A_JDES(?cQfT+%LG#7?pITiufBAD*
zK>N}bW4B8+Pn6|5w{;xeb4)}d;@_e7-SK~tzNE96ur58{>{M<n%ox7Q*iiGiz%ilS
zfju{qB#hTM+)R2lk8RV^Wy{ni@!!nw_&-TaGOg~EOWVgRf%Khg))<P-FIoPR)7Z6r
zZprNVMwN$5#LVKiP3?WN#VAw$*dNc?JC>|D%74wKH6i9DTS$Y2f!_1o5+dvWZv6ZA
z`+fOZrAfM}%35a4ZR^7e#d4xAhN*ny<>fVQVLan<Q-A-TqAzs@+A%ZOThAXpu+eIb
z&h})M87ms*OS>NsNO*HV{OE#`Ozrete<n+`l@;r^yk}b?c}d;ZsOO`D#3t^;(~O=U
zpJ9;u!tdD3`6f2YK1_ONQZJE~tC(XacdB_^nAqDRGwioKp7FBQt#8&LU6Gluysm3Z
z-KZ!qefpUXS*L>iZAA@@y1pNi&YzQ#*TJ!P^R1`<^CcY&95dGKd^W2i)2Ye$#gBK!
zx3BLx>^)Z_y53a7C2!enmV;*`_%+j6dh{i#A6jUK_+;p>z7QT?YkEs6eR_|%;snN%
z-_)OWe%0hzZu7}7GTrF>@6$KZ4sE%4$m6hcq^C8H@%E*he-kBJZYMu1-g^1eG9I68
zo7U8~DQ^;8+8e8JY-%2ts=|!D>zZflD(+i<ru6^r_xqyl{(bECE-fu}@pxqaWg)*S
z&-^_Pm^a@4|L?myGm~0k_LSWD?`z*zPgF|Z<}EcvH~Q4RL%xb`0x8V~97W5O4OXgj
zadK7M)C*gvF!N4)<<qGbU$>rUxiDi9=i!3(hZ>?Of~lXju1l#AnQ%h5EpS@z`U~ft
zZmU_cxqZWjjUO)XJx(v4eEiYcy*I?#a-X(++;LEFW|Rll^s=3oSX)Jy7y5j3vY9b6
zylMx-LCZJkcAq69_f!;4nOv{tl(}e5A`=gDgRZik>p>BXn190Ccki~|CHwbv{C}$?
zjyUc|J~OONJXW)2GP|&8`G*-rE(;=lHkB>Tv3z_qt@T$Ue~m+hsNl_sQ`ps_our~A
zK6TACE4w)9c+9kWm(>0)yK(8w7K2j{70=0Wb00puVae@JXVWg%-?ruXe7WvZq(q*#
zyUb6n(1(}o!gnp0aMZ!Z`f+Oq56`{o-`BS9Qw5#Tey8}n?WUrqUOT^B@_xGMwBGDL
z^S!kDM0L)5xRt&BWcj|&vJW@+{khD3+mlD@(OcU)PZ%~E-I?cffbCXD$8MQM3C4=W
z5xmwZce32}707izddeR@W5VVjZ>cH1mlW&+wq+LHJmj>r_4cuFJF`rkxleijCPo;o
zy*m4}-?PK{$36+Q^*lY;z&u0r5!dxwb&dZLe}{eEVJpnoaYE-32j|3{vM0Kx>!!<v
zZQN6T{D7geUD*CJaX*(U{1cv@{fCF=TwVm@gjW{#85pEqdAc};EH0>R&F(mxXM92;
zA|anS=bMaNv>u1SwHZf@<`sx9Zrne!=kv>Oxw5kcYUP)HxytdFee{e>`WU$AOn<B5
z@q*7YZs%|t*Uyq|n`wPUysh=Cz&x?^OsCmun_n<8bF1r57Ww^|Erl`SCcC@G`QVJ`
zQ;NLzO0R~7pPggYs(Ht@lYzxOvxtrP;^CR9J`+RO9y%Q0HC|8<d(+Qp)^_F^L9d!r
z^~$n&<%;t*s0cdT{ID`KtS$4@${SX_haCK3>V7^AijJ0!-Smi$bMlWZ|7JRQb#LA`
znJqcf`RMd#+cub3^LX#N{O9H&4u1JtV!vMU*FM`=AZDSHQsMKksIAwgjlY8H?wLEg
zHNJ?=KmN^7B4Ccdw9j!<^!ZPT3k%7#ZEUwWbEI;{*2o`~Z@R+Ya!e6nS{CB9Fjzz4
z-GmKI$&*gH>+P6uk~jVC%sG3Qg}#Z-oRr2R9=vVYjZHsSTKgE!w(l|C4v9RQn|zPn
zF7%%!H`~)Z`h&)e3;jxN>%>02GF#HCeOI8@=8gf=sjDIen+-b7tvM~xlGO2h<6Ff~
zJ2stVPVj%kVZkKG<nt`@=*H4tv+w^=+r{7XDRxUn;FoVKo7y>RXBnot&DnX@%yQ~8
z{>NuzZ!Mht=f`1#;`YMC8#xcJ&AZ^XZqw$YEJx&?tiAigO)$C3_2H$k@LdZEq|`$8
zl|6GXG~g+m5pXgpLgb-+UxV@kjwhWBn(<-#_k2B&HNF4Shl0yD-?h)^;hY*~_bxzl
z*-l-ZvwVjq<$b=)c4y)JTd5DzqIcZX2p7>dJ0;%Q{V8>;x5dvj_bU%o-kZGhlC85)
zOV?MP?oV$l1vWI!P@d^-&7|7Nu-fjNQSQ^z(SjPWQ}pxwZ<ycC{hIw)b-Jw9VUz8x
zOK;vhbf}>CGT)ttlXGStjf_&0`68X#J<0XvqK1!?mr3+$-%VN)CAod)jkK+)K3ea8
zMLIDYZTa+YqjCK2^LhWa&kmP(TY4mhYsMz0qvF5L&fVgxsCM|{?a9;BdNx~KKBTi=
zGkW*hoYk?1x^M2dq?`6?YUJ(Mhtnhv?%i!Em~iyCw%eM9pZ7NH?K_d1E|*s#eC(*d
zh(Y@Ng@=r{-_$sG^NyJOt($ieEvK~^+*x@4P{1;qHF=d0H#be~IUD@u)U}S6Ue_lS
z+!icgk!e(NWjLC8>g2x<4f=OCKH7SH<&C;$pG3K4bk8l@d09_!=BLBwo|&c2OiSlh
zwyE*i*=9DGy*lFNt)IGyOBdzzZjE^<C6s5))YqUKz{Ih@;AYp;hu@5~6Mk24bj_H$
ze(#|S?S$&nheQfEnl%$Q`|fP(vJ6?ZP`Wkq`KE16zPB{OypvyQE)MC{z8kc3&G*xS
z1uUoJ7)2JZm0@gFmI~XEV>)}0@8`uexvDuo-&7o*vi_!qSMUK1?>`HBop}F>`OmO@
z>Y@?8>#56Ip%>cB_PJ(pOtGK!=BP1!Xx41Gtg|R*(?Xftr8BQ(7HlyTdz6(pt-Z)#
zS&puZs#k>3okw@SeJ`2I-o?VmW^0^(ZpjSI-GwYXj1|qfLFVaw4ccdnj~j$@?z?oh
zb;5CR9;Tf3LTTZH4~_|P2s(WHw4;!POO`QwSF4|5{(TiDy$JP%1?|cYI7Bp=-s@c|
ztKKZj=zahkz>Ay@OwGGE@r?8v4hwKNt>M^lNjL0N<!-2wE<VQaU9Rp%`5TlUfRs3F
zRC?gGJwo&O+cFjzkSQ8gEHN*|WKZrn2u}JIOh>yKwC^S@owFSrg^cbCUI-K{jV@97
z%m$8$2OJ{WOzTRzrxxAIBhC>T3@oc&NiW^F&#Zr1i09)jx0R=qQ#I8!otEC#+Fe%>
zz$a&;VJ)AblX|P-{y9@7?d>P*o~~|Y|9)!OYybV9uARNTwAR;+LpM^tdh40m{#={C
zOwT8Lj=5sHw$F0Q*~#bFnRqY#WPW;4zQohntC075iR-3~ukUTSF@+~xYRjV7ZzVaC
zb<544>t#Nay1A)x_M4Y^=jU!~2^N`qDR;+rwUs*+mU-j`uYO{@Un}uf<@INRjlJ5h
zRsS{b@XFkk`!;iG&xPpyiyU9+MNc^yFF3uD?_Z@}^xe-t*Owc=w$Pnnb6HYBU}KOQ
zTblMWr=14TS8Up@pZfMYU|aI0-`=~6r~j_n{>IKqZPSj(ZMT=0l&_oQ9hl;^-7CsI
zN?b6pX@5v<e)F2x$Rd-Ed~?NFqLzMq<u&n4{MWF!+d8_-FZNwmQ(F}Ceot{$)jOXb
zUk?2IdUi$i4)3u4rL*sRy1A}$b%vYl=dexUQ}me(+n>(<^=9en*y8ynd%{ECbyqKa
z{`JqRmp3<thi>sWEc<=x+oqK}{@q$%H}^`h!iTW^Z|s6}Ux#1wdc1a5Zh3;&iYx1G
zs#)7@_3`_Y6R_&vj=(Ijj9>TtPrSGwSoxz^)@ahh-edl`6MI*i?lX#O^4Vjm)c$W<
z>@L2;LP~3+%TM0QR!?~_^}grducsefJ#}OU&)<^%oICfFx6Z$%*S|heFJI=a?(1#e
zQoN>G{1HC=^hm$e)8nDpTX`lXum9&a?fP|3*3Fl<yFa~fZv9D*$F-aOwN=cuGqh9s
z{oi?a$$p9Jy4TlFT~{6Mc~>cvX~y>BOa8lCr+zlCR?fe&t!m;t-`6SM3q(``_rG5^
z{qg<k2s8Ve`kOYmZmUn7tFwQR*1GW4e=ic&+uXTl+37gva=qh%hxf!*23G%>`nTxG
zB(coMAmz2YT+3g~?n*uO<j~*z|3BA1`Di`eb>-_Yd%fy>i3#lTlD&UKr@!2m@I5Ya
zo5ix1KW<ET^Ygp((sYa9ACtmv{wtVm5@YE4d7u2dDZ2hgOwJ#@zRB%pq1)ZRpFEbY
zyTM+aa`*Y;sV8{$$p_#2J?+!HkAI)}W&ZY<8=`ljr+fSHr$@Xc=lQRGd^vi`e5s|e
z+t1Hlx32SeXW#aTjn0?;{aoj9;M%13>!d8r7Ce4XCChH4_}BlA{_O9!GR`DCxb{bR
zLc7e0y?bNjc5cp`rE_Qfrh-Z8`_^pwP@7!z=B!lajwsd-M^?P~dFSw^EmL*h6jml)
zpYkVrXZh|myDN8wNd8|D^Y-ug_(|uOC8PG=Q`X<JD=aMbuEOj5^^<h{(^KyK`MxK?
zTW8hOyw|z%eQaNEY>a#P^OvCNc8{Zz?5AF94gL`pAEi50bn2!zY@sVeg^kL*f@1>|
zO~cK-k6*i{k$8A->?YmADUX-CrIh42Y2Ay~UTyY%+PA464eLuwmxhF_3UYtA>Vagn
z_w(sdd3U?MZt|U(n&J>{v@1XS@(rbjnQpW5bi*=g_uCq(6iS|2asB117}4hvym0}_
zy8Jo)BJYkwCmYF$Mr*JAzs+{u&#U=U_D0`MYPGi0QdT#;+@zJcV{2?#Zr}B|t5>fE
zZCntwN}uyr?aXh{uh;IIk-Jpu=C@woOB*6Y*IlzVve6RWvUQ(pS&ikf1g+(}53K&W
z_#;ckhl1%PcGWseOSk=8zby9GiQeDVLT?X9ELl}!a4|nLc1gi;e@)#I)7X{&zQ*5`
zyIiyIUht3IUpF3VeWo5Fpm|pM`j*#wTW9Pp`dsRDcls5Ntz7m$1e!n1e)Ky~GIZX$
z6+!ocUAfb@=G<Ev{rI#}t96-@v7Xow8~J?pWmgt*Z7+Urmg)BJUtP@Yb$^5H*6huj
z`sSbiTfw@k)Azam3_b3+q#)C?_0K{1q}`UgIi5^o{&3_R@7almcvBNspK{uLJs@`F
zrh<!`A|75!nA%+Qa@8587dzg__f-d${w}*&lI^^tK>1(e{*ZOsY%Uo3y1oA&X|wND
z{yyV#5o!Bfmy}2^eQG80sAbQeX6LN;)0EW((nB|Cy%qTXR`BJY%~vmNE9=dv(283d
z6LUCfSz!2yk78dh7|U)-d&?GieOuJ7{!L0NCp`1FweY>r$N&A5?)J44w^@gsp4V6r
zwk_jg(8R{rOUL;hv7QPkv)h=m)+BCWVm`m;`OCqZe|&uCys64}_Lj95LmgEbOTC}H
zkc+H!pS>pXuIA#L%&<M~7OZ!E%oKBU>D#|6J}+{!pIJ@R?f))!{>>77z05FwnTGG$
zXLE0K)vurOs{6{<--0hMRGHV5&0TZvmNe)8uJ5K(-fr{jxL{IVo5t??a@+fcV{dFl
zF2CG+I`wc@rlzvL*&X+9c@w|hm+ra5^LBUqwKey}-e~!FyuUv6UiMV6?A@wS|Kq;M
zt-N++E&n#x)o(U7&YSV<b*Xnnb-u~UHG6mF{xT~U+vm6T_t_0^c{jb(3sX~4K7a80
z>y){lO5S@qMO@u}O4r=L&ZTPmeWl#jj|(prTEwjke=S)WC42Szy2+`6hxxpY&(~bP
z?)tylGXEo&MZ-<Jf4@DrmiyMf>)TJXt&Lvt`Q*xvf}yYM(-|9MiWYdi+pYYp^WWat
z>Zysxi!Us5iZa{cpMCjAXI$p)r(!oZ{q?@|`{2@xOc{TkTu|wc-}%Be@K@l|^&Rz7
z_Vc+K{YuJ=Fg(hxe13jMYT(yLo2IzBZr&TS)lJ`b<Kv~#(#OBti(7n8Pgb(Zng40_
zl4osKr7mf2%<B4?;<CLl@a&9<&)ZY}_{BCpTKRv2&N0JvPD-0&y$jAi|9)bXeBPv4
z-Qu0ALQDfwFKu6~{ORN6-}dfHb#L82X0G=8f1$^$YgbNw5{tEc_jby&{W)DC&u$#(
zU+N#6k~L-D`?5)nzVmtJ&6#jZRZ0KNmTvatF5<T?KHX4ma{SYd!lI1hSEl{!;On^8
z|9<i_ZM|u?zHeMOxqYX@<rggrYVXHo{*G@p`f!N5=)Z38?bnr40?a(4>;>O1@OiQB
zxb>cY3pn`qt}EHK$Vuvd(%usf-|gAB!>Bm><sokI%y|(TU24idb(F|-sONtAHKAwk
zT9fz<9#Yd^EY&_Y>FS^O(1Ww(vidFal};@+S#xnQr{J^l8Eb0R7G{>Z&s;QLYo|rh
zOTm|QCiga}?RY$q&+?zTs8Pv}346Z9|9Wz2>6YD*QTAIyro{znmwxr(Ugoo@Z&_;h
z;u8mJ=UOotr&Vl!^UpnWhjz)*y&k7e`*66&znbX0K6}=6N!h$}oJ^ZfGVYDsA96lL
zIe6)ps*b;XoHHXPDBd_^CCfcyhWPJ)3ze<(URdAJ=l%X-M?mqb`Aku1o37TZiTxIL
zTdld7`O~5M_x0!MtEojCKAuvNH1*1>CB<1&T#imX>VHw=ZmI6+<ff1-r<V1-z1+Du
zVdj=s)AH*p><s1!76hI;!y9xbUn@9qzKxxw^WpA@?y2{!)sz=qC=~5WD+#_nXX4%e
zNBUDkrskb}R2ADBa&o?z(d=YZyV7Hg_BmX)PfpyalB~Waqq^wPlrOyg{T0n`b3>V?
z)mG(Px-RdlVf8L|n$}&eReP5iR)yW&9LUCBa%$On|E}XH$Be$bZe5xESh=-JwQBVy
zWgDFfxeu~uEeYMFy5z;n1{1@1W}&Mlcs*_Yt{`#s%9Yn<@o&!jlQx?C>2XQlnR&ji
zq#s597ry*6x<vi>xvAOt`IGnmT(T|kpw3g3MQZ;{pPhJo-d}u;^Lpcd%f3G=&%bp=
zF|echd7lHTu-U|a4_`*EUS$zyG})QY#`vf$ue|q8vl$Oh@7TgwsVuT`rq-e8OMm@K
zUU2Pj?w4A%q-dht*^g@?RHcuzE!~`Z`N|TX(C_bW+`atCxayWvj96Kr#@*KJrJ7NU
zekUGuGhYs?ni_uf^d?u)p#4R2Ph6hMc+u$@cawf6Yv|Eb(~D-GMC4;N#M5W!c%NG!
zQ2g!0#PHioLeFo`yIHeeC+(VrnZj;1ow|2rTLM<Cn6|6cYC(i(iqBKmj|>mXgFdp|
zZqHZAJKp!@?UdhNc7D1wdr7M6Vx8S(l_hzbbDl<JhAypM=5^#&=$o>)v!+$BKYbhc
z^8ZoJ%I9}y%Kd%ay6H!MXrOEQhu*4og&7ymH&ut(EPHZ$i^}9JS1$ZpZnea{G<?sy
zs|@GfitkaZJ>`G(<0NP1&(F_gite?P`*^k|?aFqq-)p_UGToeg>BP->X;Su<8nv~@
zpZr*mw^=`XdhYgXzS>$}LR@Mh6}v5eNzRk<?bh38;Ul)wnbB7H67wgQ2ZzqMXwTcA
zYOK3{w%x^<p?os$PET1XzIfZKr{}t-w9Tl$xb>}QmAgwn^MhX%%vN0|KN>4p%kT6r
z3yae<Uz>B0KTT)yQ|~Wp_GitM)7;|q{z>a)*N^MEweDSh@=WHf#+w(50(PA(KYn|g
z@GjTwnXj*u<+J40?tXLms^`&1YLUB_1c%t2&0}+OHD9`P*{V3RHCNtlWiI^GR{ib_
z$Nf&rv-@`O^Q^d(J1JFr)}ki2dH2P051zT#k+X6A%cXi3y+f+}YW=&v<ebl$@cQYh
zWvUx@&8-M#cTuqnz3}(slm*$l4F!5;)x{szS}F1VdhwI9mkK3BqqSr0Z)lckoydND
zb++(|oLrr?AGV$0JN3eUcgp9*jY(JY%<MJ<Z+pr6^Op424CkqNes`8TPJS=5FTQW?
ztO-_2^Ly=T{ckPgkZ+7!zxs0FO1oRqoclA6o`2=JGWxyfoQmC{({v+rR)5))P@lGX
z_gCTEOEs}edtyIzxnvb3d0eZnx~#&#{k~|veEO2&fb5v#A17PQ3fZ9d|1+=E%dH!4
zDwN-onE!C^XFsp#rl32P;Vi#WT>9-^l?Yy{Ss%CVPtKmF(o;7jO*U~aa{B((Pxkua
zEiy$8anpo%osC{T`Oht_T4fbw?x){!iwc_0eYz(%Wg+wB<1U-Fnx3{><5)QBYyaEe
z$cTmJmv4XZ<(})1<ui5P_I>W<%#VMY%)H}0Ev+o}nOgSbQt{RMIi{?O3;E??)6mZM
zerD(A19Fz%!Zz>I4_i5XK~&0vCudYHJ6EOr?_Qnq_p9lpKL_kYS1^CNZ6Bk<d;N&<
zk%jWMqH}ru^>mh{&wFXTA)d{A#idw>Df{@ooV_{o3RlOMv}49k<t87W|8lZg>JKSd
zhuvS4PF;|$SNPgnwK(K*-~K9(U2R{dWx8E3y>nN0?seJe-Rq;)HLK~V3KcTDha7m7
zuqtQ5-QBxW5;8)xO1by+nfc9`5Es6~@Ka39={XDKFMd9=<mK;nXQORJdqXt)vO@#+
z&fzZS+F>wn_w|22l{dZa|6;mz{nA|R+nSL%<#pdX?#;O#`iysWN`Cofo`3RtS0&s&
zsQ!CNwZ-|X$JUhgpV&9Q@5HA5t6rCxcQ57Mw?1TF|GCM>pB}&eWBsKs<=0>J{<nJh
z=a$&Z-^)28|6NpDdHTcEB?Z3MKAQhd{j$K1Z%X+0x9dXVey`Q}x8R+?fel()$_qI^
z$Tbui$8)@?+2x-aK6&5Hi#pZcOi!)&^ps_CX7$kzR|Ibg%5Hr+iMjUD|H~I&yxHrS
z`tY16bJ45s-An%Min!Oeuf$-r&YSve@y9}EhP`-OW?cLKZ;RGlE8F*>|90g$oX^z`
zEj!xXC~R+?bh2d9vh546n*YoCzoptDnA7Wa>g>$c+ox4mr)ZX3oxOuSINzqv<GkSA
z$-%*&52o$3+5FS$?-Q-!zS%cVzrMN4@0&~eZ_%Lg*kredekU#z-`#X^O4_qET3QyL
zC*L{L+x$EAzV}Do^PLa(y}Z3mGxf;q!?)yOH_rO0`&?Sm_}dq;o1a4F_hd)(?mK;L
z$$Fj8xCOhft^anadH(CJAla%V-oHvqRm5Mc4!r&{H$}8Znb|q;eDcKm`tdg^J>0(9
z>`Iy#*S5n^opq1=s^}HJ_y1|#lu~loe2etIv+avdo^f&8*jhL-`o3mOrA6ATUt)VZ
zX9}0!Rr>c*P}FSJ?CV#)=<NM@>E)jE(jz9<KiB<uP|%)J=M>*~xn^qjPL&he%x>?g
zQv3cs=c~l_WV3zeLd)MTmQLx{iVLYd^1Vt&>DR3Df_JaIyEe7p`n`W0?O9)Bs;{m+
zyQ;vot?yV(=*EJ~EoUtj_qG1w+mI*S_u`Jyv#k*i{a#qceP8A~(=;IJHZSM)=UoSG
zF#dh>=-$2;Msn-lU(vaEcSg@4S!p|^=xceW--JAw#=Q6Tb<gdeTK3&pY@JZm86c|1
zRala+KWEe2Z6=n>{uKSuUHUVrRyxJ=4)eJZ{=fVwiD%-~cDwa|JK?4lFS+@j{v*}1
zAE$qd42Zn>e%Gs2tN+DEezkb>#>w`@{xEx%5Bk48c8dR2-+twg%Fi9<cH6?^zpb0{
zZ|<(OLUGSdsTW@}`897D*Zou7U)0`e=V+ewInjPhdR0kwfc{|>{g8+(wxGGo9wzhD
zGJkw><k1~FTb56UVp$jV{11C+R(fuxe=hI!*H5>1mrOEUv%2Bo&Zk>HWfxzy)xKZ+
zQ}z1{kJXF6RXyF>{owfJ{M}y<zWpPx;p5sf(?b0MCM`X!$8J<|KG5%mmUW$^?H$e6
zK8}+a{za{_X?bI{W|Q`rCE<SMvRAgde33{#{i=7S=gloFs_!-PmsYnu$*s-k&hvj&
z#-+_xd%XB_u5_(vW!sFZGWP?58e%N7QlHz|y)s_JRpK1Sbw%XsiALQ`ihJfn=)}%z
zFWXlwcS_^3lGKxB(zBCVS95%MZJiS=t&z&rSq>U@JH^o$_j8h*XUD!{KOY?aS@UvT
zsN9wA&YEN2y;D~eB=&KyTD5B1G{Na-lEdAf?*IFK`_tI`c~g|{-_^SR<KoIno!i|-
zpwYbr9|S9kA4L8<yIX&vxu4wR#mD{5-FwhFHK_KW=FQJ9>Zcs6pJ$t?dHmP6BF*6I
zzn_5y2pg0G0yutrD{`E8So$$k;1p<3G4)l|eej530SgxwWB4vsSHAon=%Ave@&m8!
zQ&zsNEe2V8Ku|*iG^i+IxyKMXsJOJJLHlmdvUT6jf`%;_-4`qX4Jrma`EU$8Z25p=
ziV@Sg67QM2?wLae6`Pz6OwAj01dB`~RYKyQ{qgs6EVyp@y=P!xVDNPHb6Mw<&;$Ss
C6r%qC

literal 0
HcmV?d00001

diff --git a/auth.rst b/auth.rst
new file mode 100644
index 000000000..9ddbc23a6
--- /dev/null
+++ b/auth.rst
@@ -0,0 +1,61 @@
+Overview of Role System
+=======================
+
+PostgREST is designed to keep the database at the center of API security. All authorization happens through database roles and permissions. It is PostgREST's job to authenticate requests -- i.e. verify that a client is who they say they are -- and then let the database authorize client actions.
+
+There are three *types* of roles used by PostgREST, the **authenticator**, **anonymous** and **user** roles. The database administrator creates these roles and configures PostgREST to use them.
+
+.. image:: _static/security-roles.png
+
+The authenticator should be configured in the db to have very limited access. It is a chameleon whose job is to "become" other users to service authenticated HTTP requests. The picture below shows how the server handles authentication. If auth succeeds, it switches into the user role specified by the request, otherwise it switches into the anonymous role.
+
+.. image:: _static/security-anon-choice.png
+
+Here are the technical details. We use `JSON Web Tokens <http://jwt.io/>`_ to authenticate API requests. As you'll recall a JWT contains a list of cryptographically signed claims. All claims are allowed but PostgREST cares specifically about a claim called role.
+
+.. code:: json
+
+  {
+    "role": "user123"
+  }
+
+When a request contains a valid JWT with a role claim PostgREST will switch to the database role with that name for the duration of the HTTP request.
+
+.. code:: sql
+
+  SET LOCAL ROLE user123;
+
+Note that the database administrator must allow the authenticator role to switch into this user by previously executing
+
+.. code:: sql
+
+  GRANT user123 TO authenticator;
+
+If the client included no JWT (or one without a role claim) then PostgREST switches into the anonymous role whos actual database-specific name, like that of with the authenticator role, is specified in the PostgREST server configuration file.
+
+JSON Web Tokens
+===============
+
+Internal Generation
+-------------------
+
+External Generation
+-------------------
+
+SSL
+===
+
+Custom Validation
+=================
+
+Schema Isolation
+================
+
+User Management
+===============
+
+Logins
+------
+
+Password Reset
+--------------
diff --git a/index.rst b/index.rst
index 4e6582abf..39bf27b4c 100644
--- a/index.rst
+++ b/index.rst
@@ -18,6 +18,11 @@
 
    api.rst
 
+.. toctree::
+   :caption: Authentication
+
+   auth.rst
+
 .. Authentication
 ..   Overview of Role System
 ..   JSON Web Tokens

From d00bb026b6e3bcf13cdb4746d4877f19cace0f01 Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Sat, 15 Oct 2016 18:14:50 -0700
Subject: [PATCH 010/652] pre-request function docs

---
 auth.rst | 52 +++++++++++++++++++++++++++++++++++++++++++++-------
 1 file changed, 45 insertions(+), 7 deletions(-)

diff --git a/auth.rst b/auth.rst
index 9ddbc23a6..cce349238 100644
--- a/auth.rst
+++ b/auth.rst
@@ -3,11 +3,11 @@ Overview of Role System
 
 PostgREST is designed to keep the database at the center of API security. All authorization happens through database roles and permissions. It is PostgREST's job to authenticate requests -- i.e. verify that a client is who they say they are -- and then let the database authorize client actions.
 
-There are three *types* of roles used by PostgREST, the **authenticator**, **anonymous** and **user** roles. The database administrator creates these roles and configures PostgREST to use them.
+There are three types of roles used by PostgREST, the **authenticator**, **anonymous** and **user** roles. The database administrator creates these roles and configures PostgREST to use them.
 
 .. image:: _static/security-roles.png
 
-The authenticator should be configured in the db to have very limited access. It is a chameleon whose job is to "become" other users to service authenticated HTTP requests. The picture below shows how the server handles authentication. If auth succeeds, it switches into the user role specified by the request, otherwise it switches into the anonymous role.
+The authenticator should be configured in the database to have very limited access. It is a chameleon whose job is to "become" other users to service authenticated HTTP requests. The picture below shows how the server handles authentication. If auth succeeds, it switches into the user role specified by the request, otherwise it switches into the anonymous role.
 
 .. image:: _static/security-anon-choice.png
 
@@ -31,17 +31,55 @@ Note that the database administrator must allow the authenticator role to switch
 
   GRANT user123 TO authenticator;
 
-If the client included no JWT (or one without a role claim) then PostgREST switches into the anonymous role whos actual database-specific name, like that of with the authenticator role, is specified in the PostgREST server configuration file.
+If the client included no JWT (or one without a role claim) then PostgREST switches into the anonymous role whos actual database-specific name, like that of with the authenticator role, is specified in the PostgREST server configuration file. The database administrator must set anonymous role permissions correctly to prevent anonymous users from seeing or changing things they shouldn't.
+
+Custom Authentication
+---------------------
+
+PostgREST honors the `exp` claim for token expiration, rejecting expired tokens. However it does not enforce any extra constraints. An example of an extra constraint would be to immediately revoke access for a certain user. The configuration file paramter `pre-request` specifies a stored procedure to call immediately after the authenticator switches into a new role and before the main query itself runs.
+
+Here's an example. In the config file specify a stored procedure:
+
+.. code::
+
+  pre-request = "public.check_user"
+
+In the function you can run arbitrary code to check the request and raise an exception to block it if desired.
+
+.. code:: sql
+
+  CREATE OR REPLACE FUNCTION check_user() RETURNS void
+    LANGUAGE plpgsql
+    AS $$
+  BEGIN
+    IF current_role = 'evil_user' THEN
+      RAISE EXCEPTION 'No, you are evil'
+        USING HINT = 'Stop being so evil and maybe you can log in';
+    END IF;
+  END
+  $$;
+
+Client Auth
+===========
+
+To make an authenticated request the client must include an `Authorization` HTTP header with the value `Bearer <jwt>`. For instance:
+
+.. code:: http
+
+  GET /foo
+  Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJyb2xlIjoiamRvZSIsImV4cCI6MTQ3NTUxNjI1MH0.GYDZV3yM0gqvuEtJmfpplLBXSGYnke_Pvnl0tbKAjB4
+
+JWT Generation
+==============
 
-JSON Web Tokens
-===============
 
-Internal Generation
--------------------
 
 External Generation
 -------------------
 
+Internal Generation
+-------------------
+
 SSL
 ===
 

From be869d3f54faa7c94073edfb00d1fb489b1a4a40 Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Sun, 16 Oct 2016 13:13:44 -0700
Subject: [PATCH 011/652] JWT generation

---
 auth.rst | 39 +++++++++++++++++++++++++++++++++++----
 1 file changed, 35 insertions(+), 4 deletions(-)

diff --git a/auth.rst b/auth.rst
index cce349238..e77dad5ae 100644
--- a/auth.rst
+++ b/auth.rst
@@ -72,13 +72,44 @@ To make an authenticated request the client must include an `Authorization` HTTP
 JWT Generation
 ==============
 
+You can create a valid JWT either from inside your database or via an external service. Each token is cryptographically signed with a secret passphrase -- the signer and verifier share the secret. Hence any service that shares a passphrase with a PostgREST server can create valid JWT. (PostgREST currently supports only the HMAC-SHA256 signing algorithm.)
 
+From SQL
+--------
 
-External Generation
--------------------
+You can create JWT tokens in SQL using the `pgjwt extension <https://github.com/michelp/pgjwt>`_. It's simple and requires only pgcrypto. If you're on an environment like Amazon RDS which doesn't support installing new extensions, you can still manually run the SQL inside pgjwt which creates the functions you will need.
 
-Internal Generation
--------------------
+Next write a stored procedure that returns the token. The one below returns a token with a hard-coded role, which expires five minutes after it was issued. Note this function has a hard-coded secret as well.
+
+.. code:: sql
+
+  CREATE TYPE jwt_token AS (
+    token text
+  );
+
+  CREATE FUNCTION jwt_test() RETURNS public.jwt_token
+      LANGUAGE sql
+      AS $$
+    SELECT jwt.sign(
+      row_to_json(r), 'mysecret'
+    ) AS token
+    FROM (
+      SELECT
+        'my_role'::text as role,
+        extract(epoch from now())::integer + 300 AS exp
+    ) r;
+  $$;
+
+PostgREST exposes this function to clients via a POST request to `/rpc/jwt_token`.
+
+Using Auth0
+-----------
+
+An external service like `Auth0 <https://auth0.com/>`_ can do the hard work transforming Github, Twitter, Google etc OAuth into a JWT suitable for PostgREST. Auth0 can also handle email signup and password reset flows.
+
+To adapt Auth0 to our uses we need to save the database role in `user metadata <https://auth0.com/docs/rules/metadata-in-rules>`_ and include the metadata in `private claims <https://auth0.com/docs/jwt#payload>`_ of the generated JWT.
+
+**TODO: add details**
 
 SSL
 ===

From 6e7349d76c666e9ab26dc4974ea5892e6fea0a14 Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Sun, 16 Oct 2016 13:54:05 -0700
Subject: [PATCH 012/652] SSL

---
 auth.rst | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/auth.rst b/auth.rst
index e77dad5ae..d02f6affb 100644
--- a/auth.rst
+++ b/auth.rst
@@ -114,8 +114,7 @@ To adapt Auth0 to our uses we need to save the database role in `user metadata <
 SSL
 ===
 
-Custom Validation
-=================
+PostgREST aims to do one thing well: add an HTTP interface to a PostgreSQL database. To keep the code small and focused we do not implement SSL. Use a reverse proxy such as NGINX to add this, `here's how <https://nginx.org/en/docs/http/configuring_https_servers.html>`_. Note that some Platforms as a Service like Heroku also add SSL automatically in their load balancer.
 
 Schema Isolation
 ================

From f8829540190c2e5a53b14e810a653c52c2b3f026 Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Mon, 24 Oct 2016 14:23:44 -0700
Subject: [PATCH 013/652] SQL user management section

---
 auth.rst  | 406 +++++++++++++++++++++++++++++++++++++++++++++++++++---
 intro.rst |   2 +-
 2 files changed, 390 insertions(+), 18 deletions(-)

diff --git a/auth.rst b/auth.rst
index d02f6affb..9622b5e75 100644
--- a/auth.rst
+++ b/auth.rst
@@ -7,7 +7,7 @@ There are three types of roles used by PostgREST, the **authenticator**, **anony
 
 .. image:: _static/security-roles.png
 
-The authenticator should be configured in the database to have very limited access. It is a chameleon whose job is to "become" other users to service authenticated HTTP requests. The picture below shows how the server handles authentication. If auth succeeds, it switches into the user role specified by the request, otherwise it switches into the anonymous role.
+The authenticator should be created `NOINHERIT` and configured in the database to have very limited access. It is a chameleon whose job is to "become" other users to service authenticated HTTP requests. The picture below shows how the server handles authentication. If auth succeeds, it switches into the user role specified by the request, otherwise it switches into the anonymous role.
 
 .. image:: _static/security-anon-choice.png
 
@@ -31,10 +31,10 @@ Note that the database administrator must allow the authenticator role to switch
 
   GRANT user123 TO authenticator;
 
-If the client included no JWT (or one without a role claim) then PostgREST switches into the anonymous role whos actual database-specific name, like that of with the authenticator role, is specified in the PostgREST server configuration file. The database administrator must set anonymous role permissions correctly to prevent anonymous users from seeing or changing things they shouldn't.
+If the client included no JWT (or one without a role claim) then PostgREST switches into the anonymous role whose actual database-specific name, like that of with the authenticator role, is specified in the PostgREST server configuration file. The database administrator must set anonymous role permissions correctly to prevent anonymous users from seeing or changing things they shouldn't.
 
-Custom Authentication
----------------------
+Custom Validation
+-----------------
 
 PostgREST honors the `exp` claim for token expiration, rejecting expired tokens. However it does not enforce any extra constraints. An example of an extra constraint would be to immediately revoke access for a certain user. The configuration file paramter `pre-request` specifies a stored procedure to call immediately after the authenticator switches into a new role and before the main query itself runs.
 
@@ -70,12 +70,12 @@ To make an authenticated request the client must include an `Authorization` HTTP
   Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJyb2xlIjoiamRvZSIsImV4cCI6MTQ3NTUxNjI1MH0.GYDZV3yM0gqvuEtJmfpplLBXSGYnke_Pvnl0tbKAjB4
 
 JWT Generation
-==============
+--------------
 
 You can create a valid JWT either from inside your database or via an external service. Each token is cryptographically signed with a secret passphrase -- the signer and verifier share the secret. Hence any service that shares a passphrase with a PostgREST server can create valid JWT. (PostgREST currently supports only the HMAC-SHA256 signing algorithm.)
 
-From SQL
---------
+JWT from SQL
+~~~~~~~~~~~~
 
 You can create JWT tokens in SQL using the `pgjwt extension <https://github.com/michelp/pgjwt>`_. It's simple and requires only pgcrypto. If you're on an environment like Amazon RDS which doesn't support installing new extensions, you can still manually run the SQL inside pgjwt which creates the functions you will need.
 
@@ -102,28 +102,400 @@ Next write a stored procedure that returns the token. The one below returns a to
 
 PostgREST exposes this function to clients via a POST request to `/rpc/jwt_token`.
 
-Using Auth0
------------
+JWT from Auth0
+~~~~~~~~~~~~~~
 
-An external service like `Auth0 <https://auth0.com/>`_ can do the hard work transforming Github, Twitter, Google etc OAuth into a JWT suitable for PostgREST. Auth0 can also handle email signup and password reset flows.
+An external service like `Auth0 <https://auth0.com/>`_ can do the hard work transforming OAuth from Github, Twitter, Google etc into a JWT suitable for PostgREST. Auth0 can also handle email signup and password reset flows.
 
 To adapt Auth0 to our uses we need to save the database role in `user metadata <https://auth0.com/docs/rules/metadata-in-rules>`_ and include the metadata in `private claims <https://auth0.com/docs/jwt#payload>`_ of the generated JWT.
 
 **TODO: add details**
 
 SSL
-===
+---
 
 PostgREST aims to do one thing well: add an HTTP interface to a PostgreSQL database. To keep the code small and focused we do not implement SSL. Use a reverse proxy such as NGINX to add this, `here's how <https://nginx.org/en/docs/http/configuring_https_servers.html>`_. Note that some Platforms as a Service like Heroku also add SSL automatically in their load balancer.
 
 Schema Isolation
 ================
 
-User Management
-===============
+A PostgREST instance is configured to expose all the tables, views, and stored procedures of a single schema specified in a server configuration file. Objects
 
-Logins
-------
 
-Password Reset
---------------
+SQL User Management
+===================
+
+Storing Users and Passwords
+---------------------------
+
+As mentioned, an external service can provide user management and coordinate with the PostgREST server using JWT. It's also possible to support logins entirely through SQL. It's a fair bit of work, so get ready.
+
+The following table, functions, and triggers will live in a `basic_auth` schema that you shouldn't expose publicly in the API. The public views and functions will live in a different schema which internally references this internal information.
+
+First we'll need a table to keep track of our users:
+
+.. code:: sql
+
+  -- We put things inside the basic_auth schema to hide
+  -- them from public view. Certain public procs/views will
+  -- refer to helpers and tables inside.
+  create schema if not exists basic_auth;
+
+  create table if not exists
+  basic_auth.users (
+    email    text primary key check ( email ~* '^.+@.+\..+$' ),
+    pass     text not null check (length(pass) < 512),
+    role     name not null check (length(role) < 512),
+    verified boolean not null default false
+    -- If you like add more columns, or a json column
+  );
+
+We would like the role to be a foreign key to actual database roles, however PostgreSQL does not support these constraints against the `pg_roles` table. We'll use a trigger to manually enforce it.
+
+.. code:: sql
+
+  create or replace function
+  basic_auth.check_role_exists() returns trigger
+    language plpgsql
+    as $$
+  begin
+    if not exists (select 1 from pg_roles as r where r.rolname = new.role) then
+      raise foreign_key_violation using message =
+        'unknown database role: ' || new.role;
+      return null;
+    end if;
+    return new;
+  end
+  $$;
+
+  drop trigger if exists ensure_user_role_exists on basic_auth.users;
+  create constraint trigger ensure_user_role_exists
+    after insert or update on basic_auth.users
+    for each row
+    execute procedure basic_auth.check_role_exists();
+
+Next we'll use the pgcrypto extension and a trigger to keep passwords safe in the `users` table.
+
+.. code:: sql
+
+  create extension if not exists pgcrypto;
+
+  create or replace function
+  basic_auth.encrypt_pass() returns trigger
+    language plpgsql
+    as $$
+  begin
+    if tg_op = 'INSERT' or new.pass <> old.pass then
+      new.pass = crypt(new.pass, gen_salt('bf'));
+    end if;
+    return new;
+  end
+  $$;
+
+  drop trigger if exists encrypt_pass on basic_auth.users;
+  create trigger encrypt_pass
+    before insert or update on basic_auth.users
+    for each row
+    execute procedure basic_auth.encrypt_pass();
+
+With the table in place we can make a helper to check a password against the encrypted column. It returns the database role for a user if the email and password are correct.
+
+.. code:: sql
+
+  create or replace function
+  basic_auth.user_role(email text, pass text) returns name
+    language plpgsql
+    as $$
+  begin
+    return (
+    select role from basic_auth.users
+     where users.email = user_role.email
+       and users.pass = crypt(user_role.pass, users.pass)
+    );
+  end;
+  $$;
+
+Finally we want a helper function to check whether the database user for the current API request has access to see or change a given role. This will become useful in the next section.
+
+.. code:: sql
+
+  create or replace function
+  basic_auth.clearance_for_role(u name) returns void as
+  $$
+  declare
+    ok boolean;
+  begin
+    select exists (
+      select rolname
+        from pg_authid
+       where pg_has_role(current_user, oid, 'member')
+         and rolname = u
+    ) into ok;
+    if not ok then
+      raise invalid_password using message =
+        'current user not member of role ' || u;
+    end if;
+  end
+  $$ LANGUAGE plpgsql;
+
+Public User Interface
+---------------------
+
+In the previous section we created an internal place to store user information. Here we create views and functions in a public schema that clients will access through the HTTP API. These public relations allow users view or edit their own information, log in, sign up, etc.
+
+Logins and Signup
+~~~~~~~~~~~~~~~~~
+
+As described in `JWT from SQL`_, we'll create a JWT inside our login function. Note that you'll need to adjust the secret key which is hardcoded in this example to a secure secret of your choosing.
+
+.. code:: sql
+
+  create or replace function
+  login(email text, pass text) returns basic_auth.jwt_token
+    language plpgsql
+    as $$
+  declare
+    _role name;
+    _verified boolean;
+    _email text;
+    result basic_auth.jwt_claims;
+  begin
+    -- check email and password
+    select basic_auth.user_role(email, pass) into _role;
+    if _role is null then
+      raise invalid_password using message = 'invalid user or password';
+    end if;
+    -- check verified flag whether users
+    -- have validated their emails
+    _email := email;
+    select verified from basic_auth.users as u where u.email=_email limit 1 into _verified;
+    if not _verified then
+      raise invalid_authorization_specification using message = 'user is not verified';
+    end if;
+
+    select jwt.sign(
+        row_to_json(r), 'mysecret'
+      ) as token
+      from (
+        select _role as role, login.email as email,
+           extract(epoch from now())::integer + 60*60 as exp
+      ) r
+      into result;
+    return result;
+  end;
+  $$;
+
+An API request to call this function would look like:
+
+.. code:: http
+
+  POST /rpc/login
+
+  { "email": "foo@bar.com", "pass": "foobar" }
+
+The response would look like the snippet below. Try decoding the token at `jwt.io <https://jwt.io/>`_. (It was encoded with a secret of `mysecret` as specified in the SQL code above. You'll want to change this secret in your app!)
+
+.. code:: json
+
+  {
+    "token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJlbWFpbCI6ImZvb0BiYXIuY29tIiwicm9sZSI6ImF1dGhvciJ9.fpf3_ERi5qbWOE5NPzvauJgvulm0zkIG9xSm2w5zmdw"
+  }
+
+Editing User Info
+~~~~~~~~~~~~~~~~~
+
+Here is a redacted view for users. It hides passwords and shows only those users whose roles the currently logged in user has database permission to access.
+
+.. code:: sql
+
+  create or replace view users as
+  select actual.role as role,
+         '***'::text as pass,
+         actual.email as email,
+         actual.verified as verified
+  from basic_auth.users as actual,
+       (select rolname
+          from pg_authid
+         where pg_has_role(current_user, oid, 'member')
+       ) as member_of
+  where actual.role = member_of.rolname;
+    -- can also add restriction that current_setting('request.jwt.claim.email')
+    -- is equal to email so that user can only see themselves
+
+Using this view a client can see their role and any other users to whose roles the client belongs. This view does not yet support inserts or updates because not all the columns refer directly to underlying columns. Nor do we want it to be auto-updatable because it would allow an escalation of privileges. Someone could update their own row and change their role to become more powerful. We'll handle updates with a trigger:
+
+.. code:: sql
+
+  create or replace function
+  update_users() returns trigger
+  language plpgsql
+  AS $$
+  begin
+    if tg_op = 'INSERT' then
+      perform basic_auth.clearance_for_role(new.role);
+
+      insert into basic_auth.users
+        (role, pass, email, verified)
+      values (
+        new.role, new.pass, new.email,
+        coalesce(new.verified, false));
+      return new;
+    elsif tg_op = 'UPDATE' then
+      -- no need to check clearance for old.role because
+      -- an ineligible row would not have been available to update (http 404)
+      perform basic_auth.clearance_for_role(new.role);
+
+      update basic_auth.users set
+        email  = new.email,
+        role   = new.role,
+        pass   = new.pass,
+        verified = coalesce(new.verified, old.verified, false)
+        where email = old.email;
+      return new;
+    elsif tg_op = 'DELETE' then
+      -- no need to check clearance for old.role (see previous case)
+
+      delete from basic_auth.users
+       where basic_auth.email = old.email;
+      return null;
+    end if;
+  end
+  $$;
+
+  drop trigger if exists update_users on users;
+  create trigger update_users
+    instead of insert or update or delete on
+      users for each row execute procedure update_users();
+
+Permissions
+~~~~~~~~~~~
+
+Your database roles need access to the schema, tables, views and functions in order to service HTTP requests. Recall from the `Overview of Role System`_ that PostgREST uses special roles to process requests, namely the authenticator and anonymous roles. Below is an example of permissions that allow anonymous users to create accounts and attempt to log in.
+
+.. code:: sql
+
+  -- the names "anon" and "authenticator" are configurable and not
+  -- sacred, we simply choose them for clarity
+  create role anon;
+  create role authenticator noinherit;
+  grant anon to authenticator;
+
+  grant usage on schema public, basic_auth to anon;
+
+  -- anon can create new logins
+  grant insert on table basic_auth.users, basic_auth.tokens to anon;
+  grant select on table pg_authid, basic_auth.users to anon;
+  grant execute on function
+    login(text,text),
+    signup(text, text)
+    to anon;
+
+You may be worried from the above that anonymous users can read everything from the `basic_auth.users` table. However this table is not available for direct queries because it lives in a separate schema. The anonymous role needs access because the public `users` view reads the underlying table with the permissions of the calling user. But we have made sure the view properly restricts access to sensitive information.
+
+Interacting with Email
+----------------------
+
+External actions like sending an email or calling 3rd-party services are possible in PostgREST but must be handled with care. Even if there are PostgreSQL extensions to make network requests it is bad practice to do this in SQL. Blocking on the outside world is unhealthy in a database and holds open long-running transactions. The proper approach is for the database to signal an external program to perform the required action and then not block on the result.
+
+One way to do this is using a table to implement a job queue for external programs. However this approach is `dangerous <https://brandur.org/postgres-queues>`_ because of its potential interactions with unrelated long-running queries. However things are improving with PostgreSQL 9.5 which introduces SKIP LOCKED to build reliable work queues, see `this article <http://blog.2ndquadrant.com/what-is-select-skip-locked-for-in-postgresql-9-5/>`_.
+
+Another way to queue and tasks for external processing is by bridging PostgreSQL's `LISTEN <https://www.postgresql.org/docs/9.6/static/sql-listen.html>`_/`NOTIFY <https://www.postgresql.org/docs/9.6/static/sql-notify.html>`_ pubsub with a dedicated external queue system. Two programs to listen for database events and queue them are
+
+* `aweber/pgsql-listen-exchange <https://github.com/aweber/pgsql-listen-exchange>`_ for RabbitMQ
+* `SpiderOak/skeeter <https://github.com/SpiderOak/skeeter>`_ for ZeroMQ
+
+For experimentation purposes you can also have external programs LISTEN directly for PostgreSQL events. It's less robust than a queuing system but an example Node program might look like this:
+
+.. code:: js
+
+  var PS = require('pg-pubsub');
+
+  if(process.argv.length !== 3) {
+    console.log("USAGE: DB_URL");
+    process.exit(2);
+  }
+  var url  = process.argv[2],
+      ps   = new PS(url);
+
+  // password reset request events
+  ps.addChannel('reset', console.log);
+  // email validation required event
+  ps.addChannel('validate', console.log);
+
+  // modify me to send emails
+
+To use this LISTEN/NOTIFY approach (with or without a real queue hooked up) we can make our SQL functions issue a NOTIFY to perform external actions. Two such such functions are those to confirm an email address or send a password reset token. Both will use nonces and need a place to store them, so we'll start there.
+
+.. code:: sql
+
+  create type token_type_enum as enum ('validation', 'reset');
+
+  create table if not exists
+  basic_auth.tokens (
+    token       uuid primary key,
+    token_type  token_type_enum not null,
+    email       text not null references basic_auth.users (email)
+                  on delete cascade on update cascade,
+    created_at  timestamptz not null default current_date
+  );
+
+Here is a password reset function to make public for API requests. The function takes a user email address.
+
+.. code:: sql
+
+  create or replace function
+  request_password_reset(email text) returns void
+    language plpgsql
+    as $$
+  declare
+    tok uuid;
+  begin
+    delete from basic_auth.tokens
+     where token_type = 'reset'
+       and tokens.email = request_password_reset.email;
+
+    select gen_random_uuid() into tok;
+    insert into basic_auth.tokens (token, token_type, email)
+           values (tok, 'reset', request_password_reset.email);
+    perform pg_notify('reset',
+      json_build_object(
+        'email', request_password_reset.email,
+        'token', tok,
+        'token_type', 'reset'
+      )::text
+    );
+  end;
+  $$;
+
+Notice the use of `pg_notify` above. It notifies a channel called `reset` with a JSON object containing details of the email address and token. A worker process would directly LISTEN for this event or would pull it off a queue and do the work to send an email with a friendly human readable message.
+
+Similar to the password reset request, an email validation function creates a token and then defers to external processing. This one won't be publicly accessible, but rather can be triggered on user account creation.
+
+.. code:: sql
+
+  create or replace function
+  basic_auth.send_validation() returns trigger
+    language plpgsql
+    as $$
+  declare
+    tok uuid;
+  begin
+    select gen_random_uuid() into tok;
+    insert into basic_auth.tokens (token, token_type, email)
+           values (tok, 'validation', new.email);
+    perform pg_notify('validate',
+      json_build_object(
+        'email', new.email,
+        'token', tok,
+        'token_type', 'validation'
+      )::text
+    );
+    return new;
+  end
+  $$;
+
+  drop trigger if exists send_validation on basic_auth.users;
+  create trigger send_validation
+    after insert on basic_auth.users
+    for each row
+    execute procedure basic_auth.send_validation();
diff --git a/intro.rst b/intro.rst
index 4d070f6fc..0baee6619 100644
--- a/intro.rst
+++ b/intro.rst
@@ -83,7 +83,7 @@ In Production
 Commercial PaaS
 ---------------
 
-* `Sub0 <http://graphqlapi.com/>`_ - Automated GraphQL & REST API with built-in caching (powered by PostgREST)
+* `Sub0 <http://graphqlapi.com/>`_ - Automated GraphQL & REST API with built-in caching (powered by PostgREST, not affiliated)
 
 
 Getting Support

From d1526890380cd7d27c912a3252f85da469edbabb Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Mon, 24 Oct 2016 14:50:22 -0700
Subject: [PATCH 014/652] More about schema isolation

---
 auth.rst | 7 +++----
 1 file changed, 3 insertions(+), 4 deletions(-)

diff --git a/auth.rst b/auth.rst
index 9622b5e75..89324bdd7 100644
--- a/auth.rst
+++ b/auth.rst
@@ -119,8 +119,7 @@ PostgREST aims to do one thing well: add an HTTP interface to a PostgreSQL datab
 Schema Isolation
 ================
 
-A PostgREST instance is configured to expose all the tables, views, and stored procedures of a single schema specified in a server configuration file. Objects
-
+A PostgREST instance is configured to expose all the tables, views, and stored procedures of a single schema specified in a server configuration file. This means private data or implementation details can go inside a private schema and be invisible to HTTP clients. You can then expose views and stored procedures which insulate the internal details from the outside world. It keeps you code easier to refactor, and provides a natural way to do API `versioning`_. For an example of wrapping a private table with a public view see the `Editing User Info`_ section below.
 
 SQL User Management
 ===================
@@ -304,7 +303,7 @@ The response would look like the snippet below. Try decoding the token at `jwt.i
 Editing User Info
 ~~~~~~~~~~~~~~~~~
 
-Here is a redacted view for users. It hides passwords and shows only those users whose roles the currently logged in user has database permission to access.
+By creating a public wrapper around the internal users table we can allow people to safely edit it through the same auto-generated API that apply to other tables and views. The following view redacts sensitive information. It hides passwords and shows only those users whose roles the currently logged in user has database permission to access.
 
 .. code:: sql
 
@@ -399,7 +398,7 @@ External actions like sending an email or calling 3rd-party services are possibl
 
 One way to do this is using a table to implement a job queue for external programs. However this approach is `dangerous <https://brandur.org/postgres-queues>`_ because of its potential interactions with unrelated long-running queries. However things are improving with PostgreSQL 9.5 which introduces SKIP LOCKED to build reliable work queues, see `this article <http://blog.2ndquadrant.com/what-is-select-skip-locked-for-in-postgresql-9-5/>`_.
 
-Another way to queue and tasks for external processing is by bridging PostgreSQL's `LISTEN <https://www.postgresql.org/docs/9.6/static/sql-listen.html>`_/`NOTIFY <https://www.postgresql.org/docs/9.6/static/sql-notify.html>`_ pubsub with a dedicated external queue system. Two programs to listen for database events and queue them are
+Another way to queue tasks for external processing is by bridging PostgreSQL's `LISTEN <https://www.postgresql.org/docs/9.6/static/sql-listen.html>`_/`NOTIFY <https://www.postgresql.org/docs/9.6/static/sql-notify.html>`_ pubsub with a dedicated external queue system. Two programs to listen for database events and queue them are
 
 * `aweber/pgsql-listen-exchange <https://github.com/aweber/pgsql-listen-exchange>`_ for RabbitMQ
 * `SpiderOak/skeeter <https://github.com/SpiderOak/skeeter>`_ for ZeroMQ

From fda3e586199205e548cefd5590533ccb5be91179 Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Mon, 24 Oct 2016 15:23:44 -0700
Subject: [PATCH 015/652] Fix code block lexing

---
 api.rst  | 36 +++++++++++++++++++++---------------
 auth.rst | 34 +++++++++++++++++-----------------
 2 files changed, 38 insertions(+), 32 deletions(-)

diff --git a/api.rst b/api.rst
index 706370322..0e9aa142e 100644
--- a/api.rst
+++ b/api.rst
@@ -3,9 +3,9 @@ Tables and Views
 
 All views and tables in the active schema and accessible by the active database role for a request are available for querying. They are exposed in one-level deep routes. For instance the full contents of a table `people` is returned at
 
-.. code-block:: HTTP
+.. code-block:: http
 
-  GET /people
+  GET /people HTTP/1.1
 
 There are no deeply/nested/routes. Each route provides OPTIONS, GET, POST, PATCH, and DELETE verbs depending entirely on database permissions.
 
@@ -20,13 +20,13 @@ You can filter result rows by adding conditions on columns, each condition a que
 
 .. code-block:: http
 
-  GET /people?age=lt.13
+  GET /people?age=lt.13 HTTP/1.1
 
 Adding multiple parameters conjoins the conditions:
 
 .. code-block:: http
 
-  GET /people?age=gte.18&student=is.true
+  GET /people?age=gte.18&student=is.true HTTP/1.1
 
 These operators are available:
 
@@ -61,7 +61,7 @@ Computed Columns
 
 Filters may be applied to computed columns as well as actual table/view columns, even though the computed columns will not appear in the output. For example, to search first and last names at once we can create a computed column that will not appear in the output but can be used in a filter:
 
-.. code-block:: sql
+.. code-block:: postgres
 
   CREATE TABLE people (
     fname text,
@@ -72,7 +72,7 @@ Filters may be applied to computed columns as well as actual table/view columns,
     SELECT $1.fname || ' ' || $1.lname;
   $$ LANGUAGE SQL;
 
-  # (optional) add an index to speed up anticipated query
+  -- (optional) add an index to speed up anticipated query
   CREATE INDEX people_full_name_idx ON people
     USING GIN (to_tsvector('english', fname || ' ' || lname));
 
@@ -80,7 +80,7 @@ A full-text search on the computed column:
 
 .. code-block:: http
 
-  GET /people?full_name=@@.Beckett
+  GET /people?full_name=@@.Beckett HTTP/1.1
 
 Ordering
 --------
@@ -89,26 +89,29 @@ The reserved word :code:`order` reorders the response rows. It uses a comma-sepa
 
 .. code-block:: http
 
-  GET /people?order=age.desc,height.asc
+  GET /people?order=age.desc,height.asc HTTP/1.1
 
 If no direction is specified it defaults to ascending order:
 
 .. code-block:: http
 
-  GET /people?order=age
+  GET /people?order=age HTTP/1.1
 
 If you care where nulls are sorted, add nullsfirst or nullslast:
 
 .. code-block:: http
 
-  GET /people?order=age.nullsfirst
-  GET /people?order=age.desc.nullslast
+  GET /people?order=age.nullsfirst HTTP/1.1
+
+.. code-block:: http
+
+  GET /people?order=age.desc.nullslast HTTP/1.1
 
 To order the embedded items, you need to specify the tree path for the order param like so.
 
 .. code-block:: http
 
-  GET /projects?select=id,name,tasks{id,name}&order=id.asc&tasks.order=name.asc
+  GET /projects?select=id,name,tasks{id,name}&order=id.asc&tasks.order=name.asc HTTP/1.1
 
 You can also use :ref:`computed_cols` to order the results, even though the computed columns will not appear in the output.
 
@@ -119,6 +122,7 @@ PostgREST uses HTTP range headers to describe the size of results. Every respons
 
 .. code-block:: http
 
+  HTTP/1.1 200 OK
   Range-Unit: items
   Content-Range: 0-14/*
 
@@ -128,7 +132,7 @@ There are two ways to apply a limit and offset rows: through request headers or
 
 .. code-block:: http
 
-  GET /people
+  GET /people HTTP/1.1
   Range-Unit: items
   Range: 0-19
 
@@ -136,6 +140,7 @@ Note that the server may respond with fewer if unable to meet your request:
 
 .. code-block:: http
 
+  HTTP/1.1 200 OK
   Range-Unit: items
   Content-Range: 0-17/*
 
@@ -145,7 +150,7 @@ The other way to request a limit or offset is with query pamameters. For example
 
 .. code-block:: http
 
-  GET /people?limit=15&offset=30
+  GET /people?limit=15&offset=30 HTTP/1.1
 
 This method is also useful for embedded resources, which we will cover in another section. The server always responds with range headers even if you use query parameters to limit the query.
 
@@ -154,7 +159,7 @@ In order to obtain the total size of the table or view (such as when rendering t
 
 .. code-block:: http
 
-  GET /bigtable
+  GET /bigtable HTTP/1.1
   Range-Unit: items
   Range: 0-24
   Prefer: count=exact
@@ -163,6 +168,7 @@ Note that the larger the table the slower this query runs in the database. The s
 
 .. code-block:: http
 
+  HTTP/1.1 206 Partial Content
   Range-Unit: items
   Content-Range: 0-24/3573458
 
diff --git a/auth.rst b/auth.rst
index 89324bdd7..c5a44e7a7 100644
--- a/auth.rst
+++ b/auth.rst
@@ -21,13 +21,13 @@ Here are the technical details. We use `JSON Web Tokens <http://jwt.io/>`_ to au
 
 When a request contains a valid JWT with a role claim PostgREST will switch to the database role with that name for the duration of the HTTP request.
 
-.. code:: sql
+.. code:: postgres
 
   SET LOCAL ROLE user123;
 
 Note that the database administrator must allow the authenticator role to switch into this user by previously executing
 
-.. code:: sql
+.. code:: postgres
 
   GRANT user123 TO authenticator;
 
@@ -40,13 +40,13 @@ PostgREST honors the `exp` claim for token expiration, rejecting expired tokens.
 
 Here's an example. In the config file specify a stored procedure:
 
-.. code::
+.. code:: ini
 
   pre-request = "public.check_user"
 
 In the function you can run arbitrary code to check the request and raise an exception to block it if desired.
 
-.. code:: sql
+.. code:: postgres
 
   CREATE OR REPLACE FUNCTION check_user() RETURNS void
     LANGUAGE plpgsql
@@ -81,7 +81,7 @@ You can create JWT tokens in SQL using the `pgjwt extension <https://github.com/
 
 Next write a stored procedure that returns the token. The one below returns a token with a hard-coded role, which expires five minutes after it was issued. Note this function has a hard-coded secret as well.
 
-.. code:: sql
+.. code:: postgres
 
   CREATE TYPE jwt_token AS (
     token text
@@ -133,7 +133,7 @@ The following table, functions, and triggers will live in a `basic_auth` schema
 
 First we'll need a table to keep track of our users:
 
-.. code:: sql
+.. code:: postgres
 
   -- We put things inside the basic_auth schema to hide
   -- them from public view. Certain public procs/views will
@@ -151,7 +151,7 @@ First we'll need a table to keep track of our users:
 
 We would like the role to be a foreign key to actual database roles, however PostgreSQL does not support these constraints against the `pg_roles` table. We'll use a trigger to manually enforce it.
 
-.. code:: sql
+.. code:: postgres
 
   create or replace function
   basic_auth.check_role_exists() returns trigger
@@ -175,7 +175,7 @@ We would like the role to be a foreign key to actual database roles, however Pos
 
 Next we'll use the pgcrypto extension and a trigger to keep passwords safe in the `users` table.
 
-.. code:: sql
+.. code:: postgres
 
   create extension if not exists pgcrypto;
 
@@ -199,7 +199,7 @@ Next we'll use the pgcrypto extension and a trigger to keep passwords safe in th
 
 With the table in place we can make a helper to check a password against the encrypted column. It returns the database role for a user if the email and password are correct.
 
-.. code:: sql
+.. code:: postgres
 
   create or replace function
   basic_auth.user_role(email text, pass text) returns name
@@ -216,7 +216,7 @@ With the table in place we can make a helper to check a password against the enc
 
 Finally we want a helper function to check whether the database user for the current API request has access to see or change a given role. This will become useful in the next section.
 
-.. code:: sql
+.. code:: postgres
 
   create or replace function
   basic_auth.clearance_for_role(u name) returns void as
@@ -247,7 +247,7 @@ Logins and Signup
 
 As described in `JWT from SQL`_, we'll create a JWT inside our login function. Note that you'll need to adjust the secret key which is hardcoded in this example to a secure secret of your choosing.
 
-.. code:: sql
+.. code:: postgres
 
   create or replace function
   login(email text, pass text) returns basic_auth.jwt_token
@@ -305,7 +305,7 @@ Editing User Info
 
 By creating a public wrapper around the internal users table we can allow people to safely edit it through the same auto-generated API that apply to other tables and views. The following view redacts sensitive information. It hides passwords and shows only those users whose roles the currently logged in user has database permission to access.
 
-.. code:: sql
+.. code:: postgres
 
   create or replace view users as
   select actual.role as role,
@@ -323,7 +323,7 @@ By creating a public wrapper around the internal users table we can allow people
 
 Using this view a client can see their role and any other users to whose roles the client belongs. This view does not yet support inserts or updates because not all the columns refer directly to underlying columns. Nor do we want it to be auto-updatable because it would allow an escalation of privileges. Someone could update their own row and change their role to become more powerful. We'll handle updates with a trigger:
 
-.. code:: sql
+.. code:: postgres
 
   create or replace function
   update_users() returns trigger
@@ -371,7 +371,7 @@ Permissions
 
 Your database roles need access to the schema, tables, views and functions in order to service HTTP requests. Recall from the `Overview of Role System`_ that PostgREST uses special roles to process requests, namely the authenticator and anonymous roles. Below is an example of permissions that allow anonymous users to create accounts and attempt to log in.
 
-.. code:: sql
+.. code:: postgres
 
   -- the names "anon" and "authenticator" are configurable and not
   -- sacred, we simply choose them for clarity
@@ -425,7 +425,7 @@ For experimentation purposes you can also have external programs LISTEN directly
 
 To use this LISTEN/NOTIFY approach (with or without a real queue hooked up) we can make our SQL functions issue a NOTIFY to perform external actions. Two such such functions are those to confirm an email address or send a password reset token. Both will use nonces and need a place to store them, so we'll start there.
 
-.. code:: sql
+.. code:: postgres
 
   create type token_type_enum as enum ('validation', 'reset');
 
@@ -440,7 +440,7 @@ To use this LISTEN/NOTIFY approach (with or without a real queue hooked up) we c
 
 Here is a password reset function to make public for API requests. The function takes a user email address.
 
-.. code:: sql
+.. code:: postgres
 
   create or replace function
   request_password_reset(email text) returns void
@@ -470,7 +470,7 @@ Notice the use of `pg_notify` above. It notifies a channel called `reset` with a
 
 Similar to the password reset request, an email validation function creates a token and then defers to external processing. This one won't be publicly accessible, but rather can be triggered on user account creation.
 
-.. code:: sql
+.. code:: postgres
 
   create or replace function
   basic_auth.send_validation() returns trigger

From 267c482cfec4a654b0cbab352bbf2a80f4dc8fc0 Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Mon, 24 Oct 2016 15:26:40 -0700
Subject: [PATCH 016/652] Use plpgsql language type when applicable

---
 auth.rst | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/auth.rst b/auth.rst
index c5a44e7a7..005112755 100644
--- a/auth.rst
+++ b/auth.rst
@@ -46,7 +46,7 @@ Here's an example. In the config file specify a stored procedure:
 
 In the function you can run arbitrary code to check the request and raise an exception to block it if desired.
 
-.. code:: postgres
+.. code:: plpgsql
 
   CREATE OR REPLACE FUNCTION check_user() RETURNS void
     LANGUAGE plpgsql
@@ -151,7 +151,7 @@ First we'll need a table to keep track of our users:
 
 We would like the role to be a foreign key to actual database roles, however PostgreSQL does not support these constraints against the `pg_roles` table. We'll use a trigger to manually enforce it.
 
-.. code:: postgres
+.. code:: plpgsql
 
   create or replace function
   basic_auth.check_role_exists() returns trigger
@@ -175,7 +175,7 @@ We would like the role to be a foreign key to actual database roles, however Pos
 
 Next we'll use the pgcrypto extension and a trigger to keep passwords safe in the `users` table.
 
-.. code:: postgres
+.. code:: plpgsql
 
   create extension if not exists pgcrypto;
 
@@ -199,7 +199,7 @@ Next we'll use the pgcrypto extension and a trigger to keep passwords safe in th
 
 With the table in place we can make a helper to check a password against the encrypted column. It returns the database role for a user if the email and password are correct.
 
-.. code:: postgres
+.. code:: plpgsql
 
   create or replace function
   basic_auth.user_role(email text, pass text) returns name
@@ -247,7 +247,7 @@ Logins and Signup
 
 As described in `JWT from SQL`_, we'll create a JWT inside our login function. Note that you'll need to adjust the secret key which is hardcoded in this example to a secure secret of your choosing.
 
-.. code:: postgres
+.. code:: plpgsql
 
   create or replace function
   login(email text, pass text) returns basic_auth.jwt_token
@@ -323,7 +323,7 @@ By creating a public wrapper around the internal users table we can allow people
 
 Using this view a client can see their role and any other users to whose roles the client belongs. This view does not yet support inserts or updates because not all the columns refer directly to underlying columns. Nor do we want it to be auto-updatable because it would allow an escalation of privileges. Someone could update their own row and change their role to become more powerful. We'll handle updates with a trigger:
 
-.. code:: postgres
+.. code:: plpgsql
 
   create or replace function
   update_users() returns trigger
@@ -440,7 +440,7 @@ To use this LISTEN/NOTIFY approach (with or without a real queue hooked up) we c
 
 Here is a password reset function to make public for API requests. The function takes a user email address.
 
-.. code:: postgres
+.. code:: plpgsql
 
   create or replace function
   request_password_reset(email text) returns void
@@ -470,7 +470,7 @@ Notice the use of `pg_notify` above. It notifies a channel called `reset` with a
 
 Similar to the password reset request, an email validation function creates a token and then defers to external processing. This one won't be publicly accessible, but rather can be triggered on user account creation.
 
-.. code:: postgres
+.. code:: plpgsql
 
   create or replace function
   basic_auth.send_validation() returns trigger

From 8a606f72237f49536d69b2700df60a8edda505c5 Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Fri, 28 Oct 2016 17:18:41 -0700
Subject: [PATCH 017/652] Discuss group/user roles

---
 auth.rst | 88 +++++++++++++++++++++++++++++++++++++++++++++++++++++++-
 1 file changed, 87 insertions(+), 1 deletion(-)

diff --git a/auth.rst b/auth.rst
index 005112755..2c00ae42d 100644
--- a/auth.rst
+++ b/auth.rst
@@ -1,7 +1,10 @@
 Overview of Role System
 =======================
 
-PostgREST is designed to keep the database at the center of API security. All authorization happens through database roles and permissions. It is PostgREST's job to authenticate requests -- i.e. verify that a client is who they say they are -- and then let the database authorize client actions.
+PostgREST is designed to keep the database at the center of API security. All authorization happens through database roles and permissions. It is PostgREST's job to **authenticate** requests -- i.e. verify that a client is who they say they are -- and then let the database **authorize** client actions.
+
+Authentication Sequence
+-----------------------
 
 There are three types of roles used by PostgREST, the **authenticator**, **anonymous** and **user** roles. The database administrator creates these roles and configures PostgREST to use them.
 
@@ -33,6 +36,89 @@ Note that the database administrator must allow the authenticator role to switch
 
 If the client included no JWT (or one without a role claim) then PostgREST switches into the anonymous role whose actual database-specific name, like that of with the authenticator role, is specified in the PostgREST server configuration file. The database administrator must set anonymous role permissions correctly to prevent anonymous users from seeing or changing things they shouldn't.
 
+Users and Groups
+----------------
+
+PostgreSQL manages database access permissions using the concept of roles. A role can be thought of as either a database user, or a group of database users, depending on how the role is set up.
+
+Roles for Each Web User
+~~~~~~~~~~~~~~~~~~~~~~~
+
+PostgREST can accommodate either viewpoint. If you treat a role as a single user then the the JWT-based role switching described above does most of what you need. When an authenticated user makes a request PostgREST will switch into the role for that user, which in addition to restricting queries, is available to SQL through the `current_user` variable.
+
+You can use row-level security to flexibly restrict visibility and access for the current user. Here is an `example <http://blog.2ndquadrant.com/application-users-vs-row-level-security/>`_ from Tomas Vondra, a chat table storing messages sent between users. Users can insert rows into it to send messages to other users, and query it to see messages sent to them by other users.
+
+.. code:: postgres
+
+  CREATE TABLE chat (
+    message_uuid    UUID PRIMARY KEY DEFAULT uuid_generate_v4(),
+    message_time    TIMESTAMP NOT NULL DEFAULT now(),
+    message_from    NAME      NOT NULL DEFAULT current_user,
+    message_to      NAME      NOT NULL,
+    message_subject VARCHAR(64) NOT NULL,
+    message_body    TEXT
+  );
+
+We want to enforce a policy that ensures a user can see only those messages sent by him or intended for him. Also we want to prevent a user from forging the message_from column with anyone else's name.
+
+PostgreSQL (9.5 and later) allows us to set this policy with row-level security:
+
+.. code:: postgres
+
+  CREATE POLICY chat_policy ON chat
+    USING ((message_to = current_user) OR (message_from = current_user))
+    WITH CHECK (message_from = current_user)
+
+Anyone accessing the generated API endpoint for the chat table will see exactly the rows they should, without our needing custom imperative server-side coding.
+
+Web Users Sharing Role
+~~~~~~~~~~~~~~~~~~~~~~
+
+Alternately database roles can represent groups instead of (or in addition to) individual users. You may choose that all signed-in users for a web app share the role webuser. You can distinguish individual users by including extra claims in the JWT such as email.
+
+.. code:: json
+
+  {
+    "role": "webuser",
+    "email": "john@doe.com"
+  }
+
+SQL code can access claims through GUC variables set by PostgREST per request. For instance to get the email claim, call this function:
+
+.. code:: postgres
+
+  current_setting('request.jwt.claim.email')
+
+This allows JWT generation services to include extra information and your database code to react to it. For instance the RLS example could be modified to use this current_setting rather than current_user.
+
+.. note::
+
+  The current_setting function raises an exception if the setting in question is not present, as when a claim is missing from the JWT. Your SQL functions can either catch the exception, or you can set a default value for the database like this.
+
+  .. code:: postgres
+
+    -- Prevent current_setting('postgrest.claims.email') from raising
+    -- an exception if the setting is not present. Default it to ''.
+    ALTER DATABASE your_db_name SET request.claim.email TO '';
+
+Hybrid User-Group Roles
+~~~~~~~~~~~~~~~~~~~~~~~
+
+There is no performance penalty for having many database roles, although roles are namespaced per-cluster rather than per-database so may be prone to collision within the database. You are free to assign a new role for every user in a web application if desired. You can mix the group and individual role policies. For instance we could still have a webuser role and individual users which inherit from it:
+
+.. code:: postgres
+
+  CREATE ROLE webuser NOLOGIN;
+  -- grant this role access to certain tables etc
+
+  CREATE ROLE user000 NOLOGIN;
+  GRANT webuser TO user000;
+  -- now user000 can do whatever webuser can
+
+  GRANT user000 TO authenticator;
+  -- allow authenticator to switch into user000 role
+  -- (the role itself has nologin)
+
 Custom Validation
 -----------------
 

From 2c53cb4fae0bc7ae3c35e2d24ed7e7f2174f5f9a Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Fri, 28 Oct 2016 17:54:32 -0700
Subject: [PATCH 018/652] Fix highlighting, typo in current_user

---
 auth.rst | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/auth.rst b/auth.rst
index 2c00ae42d..cc1aecbbe 100644
--- a/auth.rst
+++ b/auth.rst
@@ -132,13 +132,13 @@ Here's an example. In the config file specify a stored procedure:
 
 In the function you can run arbitrary code to check the request and raise an exception to block it if desired.
 
-.. code:: plpgsql
+.. code:: postgres
 
   CREATE OR REPLACE FUNCTION check_user() RETURNS void
     LANGUAGE plpgsql
     AS $$
   BEGIN
-    IF current_role = 'evil_user' THEN
+    IF current_user = 'evil_user' THEN
       RAISE EXCEPTION 'No, you are evil'
         USING HINT = 'Stop being so evil and maybe you can log in';
     END IF;
@@ -152,7 +152,7 @@ To make an authenticated request the client must include an `Authorization` HTTP
 
 .. code:: http
 
-  GET /foo
+  GET /foo HTTP/1.1
   Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJyb2xlIjoiamRvZSIsImV4cCI6MTQ3NTUxNjI1MH0.GYDZV3yM0gqvuEtJmfpplLBXSGYnke_Pvnl0tbKAjB4
 
 JWT Generation
@@ -374,7 +374,7 @@ An API request to call this function would look like:
 
 .. code:: http
 
-  POST /rpc/login
+  POST /rpc/login HTTP/1.1
 
   { "email": "foo@bar.com", "pass": "foobar" }
 

From 5919a371972c2f2aadabadc5946c384257536987 Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Mon, 31 Oct 2016 22:43:41 -0700
Subject: [PATCH 019/652] Remove signups and user editing

Too complicated for this section
---
 auth.rst | 222 +------------------------------------------------------
 1 file changed, 4 insertions(+), 218 deletions(-)

diff --git a/auth.rst b/auth.rst
index cc1aecbbe..17ef0d913 100644
--- a/auth.rst
+++ b/auth.rst
@@ -231,8 +231,6 @@ First we'll need a table to keep track of our users:
     email    text primary key check ( email ~* '^.+@.+\..+$' ),
     pass     text not null check (length(pass) < 512),
     role     name not null check (length(role) < 512),
-    verified boolean not null default false
-    -- If you like add more columns, or a json column
   );
 
 We would like the role to be a foreign key to actual database roles, however PostgreSQL does not support these constraints against the `pg_roles` table. We'll use a trigger to manually enforce it.
@@ -300,36 +298,13 @@ With the table in place we can make a helper to check a password against the enc
   end;
   $$;
 
-Finally we want a helper function to check whether the database user for the current API request has access to see or change a given role. This will become useful in the next section.
-
-.. code:: postgres
-
-  create or replace function
-  basic_auth.clearance_for_role(u name) returns void as
-  $$
-  declare
-    ok boolean;
-  begin
-    select exists (
-      select rolname
-        from pg_authid
-       where pg_has_role(current_user, oid, 'member')
-         and rolname = u
-    ) into ok;
-    if not ok then
-      raise invalid_password using message =
-        'current user not member of role ' || u;
-    end if;
-  end
-  $$ LANGUAGE plpgsql;
-
 Public User Interface
 ---------------------
 
-In the previous section we created an internal place to store user information. Here we create views and functions in a public schema that clients will access through the HTTP API. These public relations allow users view or edit their own information, log in, sign up, etc.
+In the previous section we created an internal table to store user information. Here we create a login function which takes an email address and password and returns JWT if the credentials match a user in the internal table.
 
-Logins and Signup
-~~~~~~~~~~~~~~~~~
+Logins
+~~~~~~
 
 As described in `JWT from SQL`_, we'll create a JWT inside our login function. Note that you'll need to adjust the secret key which is hardcoded in this example to a secure secret of your choosing.
 
@@ -341,8 +316,6 @@ As described in `JWT from SQL`_, we'll create a JWT inside our login function. N
     as $$
   declare
     _role name;
-    _verified boolean;
-    _email text;
     result basic_auth.jwt_claims;
   begin
     -- check email and password
@@ -350,13 +323,6 @@ As described in `JWT from SQL`_, we'll create a JWT inside our login function. N
     if _role is null then
       raise invalid_password using message = 'invalid user or password';
     end if;
-    -- check verified flag whether users
-    -- have validated their emails
-    _email := email;
-    select verified from basic_auth.users as u where u.email=_email limit 1 into _verified;
-    if not _verified then
-      raise invalid_authorization_specification using message = 'user is not verified';
-    end if;
 
     select jwt.sign(
         row_to_json(r), 'mysecret'
@@ -386,72 +352,6 @@ The response would look like the snippet below. Try decoding the token at `jwt.i
     "token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJlbWFpbCI6ImZvb0BiYXIuY29tIiwicm9sZSI6ImF1dGhvciJ9.fpf3_ERi5qbWOE5NPzvauJgvulm0zkIG9xSm2w5zmdw"
   }
 
-Editing User Info
-~~~~~~~~~~~~~~~~~
-
-By creating a public wrapper around the internal users table we can allow people to safely edit it through the same auto-generated API that apply to other tables and views. The following view redacts sensitive information. It hides passwords and shows only those users whose roles the currently logged in user has database permission to access.
-
-.. code:: postgres
-
-  create or replace view users as
-  select actual.role as role,
-         '***'::text as pass,
-         actual.email as email,
-         actual.verified as verified
-  from basic_auth.users as actual,
-       (select rolname
-          from pg_authid
-         where pg_has_role(current_user, oid, 'member')
-       ) as member_of
-  where actual.role = member_of.rolname;
-    -- can also add restriction that current_setting('request.jwt.claim.email')
-    -- is equal to email so that user can only see themselves
-
-Using this view a client can see their role and any other users to whose roles the client belongs. This view does not yet support inserts or updates because not all the columns refer directly to underlying columns. Nor do we want it to be auto-updatable because it would allow an escalation of privileges. Someone could update their own row and change their role to become more powerful. We'll handle updates with a trigger:
-
-.. code:: plpgsql
-
-  create or replace function
-  update_users() returns trigger
-  language plpgsql
-  AS $$
-  begin
-    if tg_op = 'INSERT' then
-      perform basic_auth.clearance_for_role(new.role);
-
-      insert into basic_auth.users
-        (role, pass, email, verified)
-      values (
-        new.role, new.pass, new.email,
-        coalesce(new.verified, false));
-      return new;
-    elsif tg_op = 'UPDATE' then
-      -- no need to check clearance for old.role because
-      -- an ineligible row would not have been available to update (http 404)
-      perform basic_auth.clearance_for_role(new.role);
-
-      update basic_auth.users set
-        email  = new.email,
-        role   = new.role,
-        pass   = new.pass,
-        verified = coalesce(new.verified, old.verified, false)
-        where email = old.email;
-      return new;
-    elsif tg_op = 'DELETE' then
-      -- no need to check clearance for old.role (see previous case)
-
-      delete from basic_auth.users
-       where basic_auth.email = old.email;
-      return null;
-    end if;
-  end
-  $$;
-
-  drop trigger if exists update_users on users;
-  create trigger update_users
-    instead of insert or update or delete on
-      users for each row execute procedure update_users();
-
 Permissions
 ~~~~~~~~~~~
 
@@ -466,121 +366,7 @@ Your database roles need access to the schema, tables, views and functions in or
   grant anon to authenticator;
 
   grant usage on schema public, basic_auth to anon;
-
-  -- anon can create new logins
-  grant insert on table basic_auth.users, basic_auth.tokens to anon;
   grant select on table pg_authid, basic_auth.users to anon;
-  grant execute on function
-    login(text,text),
-    signup(text, text)
-    to anon;
+  grant execute on function login(text,text) to anon;
 
 You may be worried from the above that anonymous users can read everything from the `basic_auth.users` table. However this table is not available for direct queries because it lives in a separate schema. The anonymous role needs access because the public `users` view reads the underlying table with the permissions of the calling user. But we have made sure the view properly restricts access to sensitive information.
-
-Interacting with Email
-----------------------
-
-External actions like sending an email or calling 3rd-party services are possible in PostgREST but must be handled with care. Even if there are PostgreSQL extensions to make network requests it is bad practice to do this in SQL. Blocking on the outside world is unhealthy in a database and holds open long-running transactions. The proper approach is for the database to signal an external program to perform the required action and then not block on the result.
-
-One way to do this is using a table to implement a job queue for external programs. However this approach is `dangerous <https://brandur.org/postgres-queues>`_ because of its potential interactions with unrelated long-running queries. However things are improving with PostgreSQL 9.5 which introduces SKIP LOCKED to build reliable work queues, see `this article <http://blog.2ndquadrant.com/what-is-select-skip-locked-for-in-postgresql-9-5/>`_.
-
-Another way to queue tasks for external processing is by bridging PostgreSQL's `LISTEN <https://www.postgresql.org/docs/9.6/static/sql-listen.html>`_/`NOTIFY <https://www.postgresql.org/docs/9.6/static/sql-notify.html>`_ pubsub with a dedicated external queue system. Two programs to listen for database events and queue them are
-
-* `aweber/pgsql-listen-exchange <https://github.com/aweber/pgsql-listen-exchange>`_ for RabbitMQ
-* `SpiderOak/skeeter <https://github.com/SpiderOak/skeeter>`_ for ZeroMQ
-
-For experimentation purposes you can also have external programs LISTEN directly for PostgreSQL events. It's less robust than a queuing system but an example Node program might look like this:
-
-.. code:: js
-
-  var PS = require('pg-pubsub');
-
-  if(process.argv.length !== 3) {
-    console.log("USAGE: DB_URL");
-    process.exit(2);
-  }
-  var url  = process.argv[2],
-      ps   = new PS(url);
-
-  // password reset request events
-  ps.addChannel('reset', console.log);
-  // email validation required event
-  ps.addChannel('validate', console.log);
-
-  // modify me to send emails
-
-To use this LISTEN/NOTIFY approach (with or without a real queue hooked up) we can make our SQL functions issue a NOTIFY to perform external actions. Two such such functions are those to confirm an email address or send a password reset token. Both will use nonces and need a place to store them, so we'll start there.
-
-.. code:: postgres
-
-  create type token_type_enum as enum ('validation', 'reset');
-
-  create table if not exists
-  basic_auth.tokens (
-    token       uuid primary key,
-    token_type  token_type_enum not null,
-    email       text not null references basic_auth.users (email)
-                  on delete cascade on update cascade,
-    created_at  timestamptz not null default current_date
-  );
-
-Here is a password reset function to make public for API requests. The function takes a user email address.
-
-.. code:: plpgsql
-
-  create or replace function
-  request_password_reset(email text) returns void
-    language plpgsql
-    as $$
-  declare
-    tok uuid;
-  begin
-    delete from basic_auth.tokens
-     where token_type = 'reset'
-       and tokens.email = request_password_reset.email;
-
-    select gen_random_uuid() into tok;
-    insert into basic_auth.tokens (token, token_type, email)
-           values (tok, 'reset', request_password_reset.email);
-    perform pg_notify('reset',
-      json_build_object(
-        'email', request_password_reset.email,
-        'token', tok,
-        'token_type', 'reset'
-      )::text
-    );
-  end;
-  $$;
-
-Notice the use of `pg_notify` above. It notifies a channel called `reset` with a JSON object containing details of the email address and token. A worker process would directly LISTEN for this event or would pull it off a queue and do the work to send an email with a friendly human readable message.
-
-Similar to the password reset request, an email validation function creates a token and then defers to external processing. This one won't be publicly accessible, but rather can be triggered on user account creation.
-
-.. code:: plpgsql
-
-  create or replace function
-  basic_auth.send_validation() returns trigger
-    language plpgsql
-    as $$
-  declare
-    tok uuid;
-  begin
-    select gen_random_uuid() into tok;
-    insert into basic_auth.tokens (token, token_type, email)
-           values (tok, 'validation', new.email);
-    perform pg_notify('validate',
-      json_build_object(
-        'email', new.email,
-        'token', tok,
-        'token_type', 'validation'
-      )::text
-    );
-    return new;
-  end
-  $$;
-
-  drop trigger if exists send_validation on basic_auth.users;
-  create trigger send_validation
-    after insert on basic_auth.users
-    for each row
-    execute procedure basic_auth.send_validation();

From d38bfc8cf35020c72836b90e33e748a7caa93312 Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Mon, 31 Oct 2016 22:50:38 -0700
Subject: [PATCH 020/652] Notes for future admin section

---
 index.rst | 20 +++++++-------------
 1 file changed, 7 insertions(+), 13 deletions(-)

diff --git a/index.rst b/index.rst
index 39bf27b4c..840f8e27a 100644
--- a/index.rst
+++ b/index.rst
@@ -23,22 +23,16 @@
 
    auth.rst
 
-.. Authentication
-..   Overview of Role System
-..   JSON Web Tokens
-..     Internal Generation
-..     External Generation
-..   SSL
-..   Custom Validation
-..   Schema Isolation
-..   User Management
-..     Logins
-..     Password Reset
 .. Administration
-..   Block full-table operations
+..   Hardening PostgREST
+..     Block full-table operation
+..     Count header DoS
+..     HTTPS
+..     Rate limiting
 ..   Alternate URL structure
 ..   API Versioning
+..   Schema Reloading
 ..   HTTP Caching
-..   Database Caching
+..   Upgrading
 ..   Debugging
 ..     (viewing db logs)

From e5d46975073640344e9d6c4da33fec166294193d Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Wed, 2 Nov 2016 20:46:10 -0700
Subject: [PATCH 021/652] Config section in admin page

---
 admin.rst | 148 ++++++++++++++++++++++++++++++++++++++++++++++++++++++
 auth.rst  |   4 ++
 index.rst |  17 ++-----
 3 files changed, 156 insertions(+), 13 deletions(-)
 create mode 100644 admin.rst

diff --git a/admin.rst b/admin.rst
new file mode 100644
index 000000000..68f1aafec
--- /dev/null
+++ b/admin.rst
@@ -0,0 +1,148 @@
+Configuration
+=============
+
+The PostgREST server reads a configuration file to determine information about the database and how to serve client requests. There is no predefined location for this file, you must specify it with the `-c` option when starting the server:
+
+.. code:: bash
+
+  postgrest -c /path/to/postgrest.conf
+
+The file must contain a set of key value pairs. At minimum you must include these keys:
+
+.. code::
+
+  # postgrest.conf
+
+  # The standard connection URI format, documented at
+  # https://www.postgresql.org/docs/current/static/libpq-connect.html#AEN45347
+  db-uri       = "postgres://user:pass@host:5432/dbname"
+
+  # The name of which database schema to expose to REST clients
+  db-schema    = "api"
+
+  # The database role to use when no client authentication is provided.
+  # Can (and probably should) differ from user in db-uri
+  db-anon-role = "anon"
+
+The user specified in the db-uri is also known as the authenticator role. For more information about the anonymous vs authenticator roles see the :ref:`roles`.
+
+Here is the full list of configuration parameters.
+
+================  ======  =======  ========
+Name              Type    Default  Required
+================  ======  =======  ========
+db-uri            String           Y
+db-schema         String           Y
+db-anon-role      String           Y
+db-pool           Int     10
+server-host       String  \*4
+server-port       Int     3000
+server-proxy-url  String
+jwt-secret        String
+max-rows          Int     ∞
+pre-request       String
+================  ======  =======  ========
+
+db-uri
+  The standard connection PostgreSQL `URI format <https://www.postgresql.org/docs/current/static/libpq-connect.html#AEN45347>`_. Also allows connections over Unix sockets for higher performance.
+db-schema
+  The database schema to expose to REST clients. Tables, views and stored procedures in this schema will get API endpoints.
+db-anon-role
+  The database role to use when executing commands on behalf of unauthenticated clients.
+db-pool
+  Number of connections to keep open in PostgREST's database pool. Having enough here for the maximum expected simultaneous client connections can improve performance. Note it's pointless to set this higher than the `max_connections` GUC in your database.
+server-host
+  Where to bind the PostgREST web server.
+server-port
+  The port to bind the web server.
+server-proxy-url
+  Overrides the base URL used within the OpenAPI self-documentation hosted at the API root path.
+jwt-secret
+  The secret used to decode JWT tokens clients provide for authentication. If this parameter is not specified then PostgREST refuses authentication requests. Choosing a value for this parameter beginning with the at sign such as `@filename` loads the secret out of an external file which is useful for non-UTF-8 binary secrets.
+max-rows
+  A hard limit to the number of rows PostgREST will fetch from a view, table, or stored procedure. Limits payload size for accidental or malicious requests.
+pre-request
+  A schema-qualified stored procedure name to call right after switching roles for a client request. This provides an opportunity to modify SQL variables or raise an exception to prevent the request from completing.
+
+Hardening PostgREST
+===================
+
+PostgREST is a fast way to construct a RESTful API. Its default behavior is great for scaffolding in development. When it's time to go to production it works great too, as long as you take precautions. PostgREST is a small sharp tool that focuses on performing the API-to-database mapping. We rely on a reverse proxy like Nginx for additional safeguards.
+
+The first step is to create an Nginx configuration file that proxies requests to an underlying PostgREST server.
+
+.. code::
+
+  Nginx code goes here.
+
+Block Full-Table Operations
+---------------------------
+
+Each table in the admin-selected schema gets exposed as a top level route. Client requests are executed by certain database roles depending on their authentication. All HTTP verbs are supported that correspond to actions permitted to the role. For instance if the active role can drop rows of the table then the DELETE verb is allowed for clients. Here's an API request to delete old rows from a hypothetical logs table:
+
+.. code:: http
+
+  DELETE /logs?time=lt.1991-08-06 HTTP/1.1
+
+However it's very easy to delete the **entire table** by omitting the query parameter!
+
+.. code:: http
+
+  DELETE /logs HTTP/1.1
+
+This can happen accidentally even just by switching a request from a GET to a DELETE. To protect against accidental operations we can add an Nginx rule to prevent DELETE or PATCH requests which lack a query parameter.
+
+.. code::
+
+  Nginx stuff goes here
+
+This does not protect against malicious actions, since someone can add a url parameter that does not affect the resultset. To prevent this you must turn to database permissions, forbidding the wrong people from deleting rows, and using `row-level security <https://www.postgresql.org/docs/current/static/ddl-rowsecurity.html>`_ if finer access control is required.
+
+Count-Header DoS
+----------------
+
+For convenience to client-side pagination controls PostgREST supports counting and reporting total table size in its response. As described in :ref:`Limits and Pagination`_, responses ordinarily include a range and unspecified total like
+
+.. code-block:: http
+
+  HTTP/1.1 200 OK
+  Range-Unit: items
+  Content-Range: 0-14/*
+
+However including the request header `Prefer: count=exact` calculates and includes the full count:
+
+.. code-block:: http
+
+  HTTP/1.1 206 Partial Content
+  Range-Unit: items
+  Content-Range: 0-14/3573458
+
+This is fine in small tables, but count performance degrades in big tables due to the MVCC architecture of PostgreSQL. For very large tables it can take a very long time to retrieve the results which allows a denial of service attack. The solution is to strip this header from all requests:
+
+.. code::
+
+  Nginx stuff. Remove any prefer header which contains the word count
+
+.. note::
+
+  In future versions we will support `Prefer: count=estimated` to leverage the PostgreSQL statistics tables for a fast (and fairly accurate) result.
+
+.. _hardening_https:
+
+HTTPS
+-----
+
+See the :ref:`ssl` section of the authentication guide.
+
+Rate Limiting
+-------------
+
+
+.. Administration
+..   Alternate URL structure
+..   API Versioning
+..   Schema Reloading
+..   HTTP Caching
+..   Upgrading
+..   Debugging
+..     (viewing db logs)
diff --git a/auth.rst b/auth.rst
index 17ef0d913..5ea384e7b 100644
--- a/auth.rst
+++ b/auth.rst
@@ -1,3 +1,5 @@
+.. _roles:
+
 Overview of Role System
 =======================
 
@@ -197,6 +199,8 @@ To adapt Auth0 to our uses we need to save the database role in `user metadata <
 
 **TODO: add details**
 
+.. _ssl:
+
 SSL
 ---
 
diff --git a/index.rst b/index.rst
index 840f8e27a..d42418d55 100644
--- a/index.rst
+++ b/index.rst
@@ -23,16 +23,7 @@
 
    auth.rst
 
-.. Administration
-..   Hardening PostgREST
-..     Block full-table operation
-..     Count header DoS
-..     HTTPS
-..     Rate limiting
-..   Alternate URL structure
-..   API Versioning
-..   Schema Reloading
-..   HTTP Caching
-..   Upgrading
-..   Debugging
-..     (viewing db logs)
+.. toctree::
+   :caption: Administration
+
+   admin.rst

From 0ae281f15f278fe3562a5ac77eca4ba234846e70 Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Sun, 13 Nov 2016 17:19:13 -0800
Subject: [PATCH 022/652] Debugging steps (sql logging, ngrep)

---
 admin.rst | 38 ++++++++++++++++++++++++++++++++++++--
 1 file changed, 36 insertions(+), 2 deletions(-)

diff --git a/admin.rst b/admin.rst
index 68f1aafec..5b1ae7319 100644
--- a/admin.rst
+++ b/admin.rst
@@ -137,6 +137,42 @@ See the :ref:`ssl` section of the authentication guide.
 Rate Limiting
 -------------
 
+Foo
+
+Debugging
+=========
+
+The PostgREST server logs basic request information to stdout, including the requester's IP address and user agent, the URL requested, and HTTP response status. However this provides limited information for debugging server errors. It's helpful to get full information about both client requests and the corresponding SQL commands executed against the underlying database.
+
+A great way to inspect incoming HTTP requests including headers and query params is to sniff the network traffic on the port where PostgREST is running. For instance on a development server bound to port 3000 on localhost, run this:
+
+.. code:: bash
+
+  # sudo access is necessary for watching the network
+  sudo ngrep -d lo0 port 3000
+
+The options to ngrep vary depending on the address and host on which you've bound the server. The binding is described in the `Configuration`_ section. The ngrep output isn't particularly pretty, but it's legible. Note the `Server` response header as well which identifies the version of server. This is important when submitting bug reports.
+
+Once you've verified that requests are as you expect, you can get more information about the server operations by watching the database logs. By default PostgreSQL does not keep these logs, so you'll need to make the configuration changes below. Find `postgresql.conf` inside your PostgreSQL data directory (to find that, issue the command `show data_directory;`). Either find the settings scattered throughout the file and change them to the following values, or append this block of code to the end of the configuration file.
+
+.. code:: sql
+
+  # send logs where the collector can access them
+  log_destination = 'stderr'
+
+  # collect stderr output to log files
+  logging_collector = on
+
+  # save logs in pg_log/ under the pg data directory
+  log_directory = 'pg_log'
+
+  # (optional) new log file per day
+  log_filename = 'postgresql-%Y-%m-%d.log'
+
+  # log every kind of SQL statement
+  log_statement = 'all'
+
+Restart the database and watch the log file in real-time to understand how HTTP requests are being translated into SQL commands.
 
 .. Administration
 ..   Alternate URL structure
@@ -144,5 +180,3 @@ Rate Limiting
 ..   Schema Reloading
 ..   HTTP Caching
 ..   Upgrading
-..   Debugging
-..     (viewing db logs)

From 8258631b03e32f2651ae1e74a16a37cabc8d5ab7 Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Sun, 13 Nov 2016 18:11:50 -0800
Subject: [PATCH 023/652] Schema reloading

---
 admin.rst | 14 +++++++++++++-
 1 file changed, 13 insertions(+), 1 deletion(-)

diff --git a/admin.rst b/admin.rst
index 5b1ae7319..b586e99da 100644
--- a/admin.rst
+++ b/admin.rst
@@ -174,9 +174,21 @@ Once you've verified that requests are as you expect, you can get more informati
 
 Restart the database and watch the log file in real-time to understand how HTTP requests are being translated into SQL commands.
 
+Schema Reloading
+----------------
+
+PostgREST's database schema cache is a common source of confusion. Detecting the foreign key relationships between tables (including how those relationships pass through views) is an involved query. To speed up regular API requests the server caches the database schema on startup. However if the schema changes while the server is running it results in a stale cache and failures for :ref:`Resource Embedding`_ in API requests.
+
+To refresh the cache without restarting the PostgREST server, send its process a SIGHUP signal:
+
+.. code:: bash
+
+  killall -HUP postgrest
+
+For the future we're investigating ways to keep the cache updated without an intrusive setup procedure or system resource usage.
+
 .. Administration
 ..   Alternate URL structure
 ..   API Versioning
-..   Schema Reloading
 ..   HTTP Caching
 ..   Upgrading

From aed5618d285ea2efc0c1789f77f1667746e8dc15 Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Sun, 13 Nov 2016 22:44:18 -0800
Subject: [PATCH 024/652] Suggest pg-safeupdate rather than nginx

---
 admin.rst | 6 +-----
 1 file changed, 1 insertion(+), 5 deletions(-)

diff --git a/admin.rst b/admin.rst
index b586e99da..6835aa9c1 100644
--- a/admin.rst
+++ b/admin.rst
@@ -90,11 +90,7 @@ However it's very easy to delete the **entire table** by omitting the query para
 
   DELETE /logs HTTP/1.1
 
-This can happen accidentally even just by switching a request from a GET to a DELETE. To protect against accidental operations we can add an Nginx rule to prevent DELETE or PATCH requests which lack a query parameter.
-
-.. code::
-
-  Nginx stuff goes here
+This can happen accidentally such as by switching a request from a GET to a DELETE. To protect against accidental operations use the `pg-safeupdate <https://bitbucket.org/eradman/pg-safeupdate/>`_ PostgreSQL extension. It raises an error if UPDATE or DELETE are executed without specifying conditions.
 
 This does not protect against malicious actions, since someone can add a url parameter that does not affect the resultset. To prevent this you must turn to database permissions, forbidding the wrong people from deleting rows, and using `row-level security <https://www.postgresql.org/docs/current/static/ddl-rowsecurity.html>`_ if finer access control is required.
 

From 954252ed164efc2a2de4839691d7a58b02dc2e5a Mon Sep 17 00:00:00 2001
From: Raphael Schmitt <schmittr@users.noreply.github.com>
Date: Fri, 18 Nov 2016 18:22:51 +0100
Subject: [PATCH 025/652] corrected url (#24)

---
 auth.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/auth.rst b/auth.rst
index 5ea384e7b..d98fbc8bb 100644
--- a/auth.rst
+++ b/auth.rst
@@ -188,7 +188,7 @@ Next write a stored procedure that returns the token. The one below returns a to
     ) r;
   $$;
 
-PostgREST exposes this function to clients via a POST request to `/rpc/jwt_token`.
+PostgREST exposes this function to clients via a POST request to `/rpc/jwt_test`.
 
 JWT from Auth0
 ~~~~~~~~~~~~~~

From d1d6001a6db3f357f75c30020444459e4ad02297 Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Sun, 13 Nov 2016 23:04:54 -0800
Subject: [PATCH 026/652] Alternate url structure

---
 admin.rst | 16 ++++++++++++++++
 api.rst   |  2 +-
 2 files changed, 17 insertions(+), 1 deletion(-)

diff --git a/admin.rst b/admin.rst
index 6835aa9c1..0151c09af 100644
--- a/admin.rst
+++ b/admin.rst
@@ -183,6 +183,22 @@ To refresh the cache without restarting the PostgREST server, send its process a
 
 For the future we're investigating ways to keep the cache updated without an intrusive setup procedure or system resource usage.
 
+Alternate URL Structure
+=======================
+
+As discussed in `Singular or Plural`_, there are no special URL forms for singular resources in PostgREST, only operators for filtering. Thus there are no URLs like `/people/1`. It would be specified instead as
+
+.. code:: http
+
+  GET /people?id=eq.1
+  Prefer: plurality=singular
+
+This allows compound primary keys and makes the intent for singular response independent of a URL convention. However for any table which uses a simple primary key you can use Nginx to simulate the familiar URL convention.
+
+.. code:: nginx
+
+  nginx code here
+
 .. Administration
 ..   Alternate URL structure
 ..   API Versioning
diff --git a/api.rst b/api.rst
index 0e9aa142e..e45952bf8 100644
--- a/api.rst
+++ b/api.rst
@@ -11,7 +11,7 @@ There are no deeply/nested/routes. Each route provides OPTIONS, GET, POST, PATCH
 
 .. note::
 
-  Why not provide nested routes? Many APIs allow nesting to retrieve related information, such as :code:`/films/1/director`. We offer a more flexible mechanism (inspired by GraphQL) to embed related information. It can handle one-to-many and many-to-many relationships. This is covered in the section about Embedding.
+  Why not provide nested routes? Many APIs allow nesting to retrieve related information, such as :code:`/films/1/director`. We offer a more flexible mechanism (inspired by GraphQL) to embed related information. It can handle one-to-many and many-to-many relationships. This is covered in the section about `Resource Embedding`_.
 
 Filtering
 ---------

From 79de60db581f2656f933f7143b5e4b5db1f66296 Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Sun, 20 Nov 2016 11:18:29 -0800
Subject: [PATCH 027/652] The -c param is no more

---
 admin.rst | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/admin.rst b/admin.rst
index 0151c09af..bb81338ed 100644
--- a/admin.rst
+++ b/admin.rst
@@ -1,11 +1,11 @@
 Configuration
 =============
 
-The PostgREST server reads a configuration file to determine information about the database and how to serve client requests. There is no predefined location for this file, you must specify it with the `-c` option when starting the server:
+The PostgREST server reads a configuration file to determine information about the database and how to serve client requests. There is no predefined location for this file, you must specify the file path as the one and only argument to the server:
 
 .. code:: bash
 
-  postgrest -c /path/to/postgrest.conf
+  postgrest /path/to/postgrest.conf
 
 The file must contain a set of key value pairs. At minimum you must include these keys:
 

From 684a9f95666541cdc7e33c874f56d8ecc50568d0 Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Sun, 20 Nov 2016 14:22:46 -0800
Subject: [PATCH 028/652] Spell check, WIP Circle CI for sphinx

---
 admin.rst      |  4 +--
 api.rst        |  2 +-
 auth.rst       |  4 +--
 circle.yml     |  8 +++++
 install.rst    |  2 +-
 intro.rst      |  6 ++--
 postgrest.dict | 85 ++++++++++++++++++++++++++++++++++++++++++++++++++
 7 files changed, 102 insertions(+), 9 deletions(-)
 create mode 100644 circle.yml
 create mode 100644 postgrest.dict

diff --git a/admin.rst b/admin.rst
index bb81338ed..5ba5d4097 100644
--- a/admin.rst
+++ b/admin.rst
@@ -92,7 +92,7 @@ However it's very easy to delete the **entire table** by omitting the query para
 
 This can happen accidentally such as by switching a request from a GET to a DELETE. To protect against accidental operations use the `pg-safeupdate <https://bitbucket.org/eradman/pg-safeupdate/>`_ PostgreSQL extension. It raises an error if UPDATE or DELETE are executed without specifying conditions.
 
-This does not protect against malicious actions, since someone can add a url parameter that does not affect the resultset. To prevent this you must turn to database permissions, forbidding the wrong people from deleting rows, and using `row-level security <https://www.postgresql.org/docs/current/static/ddl-rowsecurity.html>`_ if finer access control is required.
+This does not protect against malicious actions, since someone can add a url parameter that does not affect the result set. To prevent this you must turn to database permissions, forbidding the wrong people from deleting rows, and using `row-level security <https://www.postgresql.org/docs/current/static/ddl-rowsecurity.html>`_ if finer access control is required.
 
 Count-Header DoS
 ----------------
@@ -138,7 +138,7 @@ Foo
 Debugging
 =========
 
-The PostgREST server logs basic request information to stdout, including the requester's IP address and user agent, the URL requested, and HTTP response status. However this provides limited information for debugging server errors. It's helpful to get full information about both client requests and the corresponding SQL commands executed against the underlying database.
+The PostgREST server logs basic request information to stdout, including the requesting IP address and user agent, the URL requested, and HTTP response status. However this provides limited information for debugging server errors. It's helpful to get full information about both client requests and the corresponding SQL commands executed against the underlying database.
 
 A great way to inspect incoming HTTP requests including headers and query params is to sniff the network traffic on the port where PostgREST is running. For instance on a development server bound to port 3000 on localhost, run this:
 
diff --git a/api.rst b/api.rst
index e45952bf8..73fa46cea 100644
--- a/api.rst
+++ b/api.rst
@@ -146,7 +146,7 @@ Note that the server may respond with fewer if unable to meet your request:
 
 You may also request open-ended ranges for an offset with no limit, e.g. :code:`Range: 10-`.
 
-The other way to request a limit or offset is with query pamameters. For example
+The other way to request a limit or offset is with query parameters. For example
 
 .. code-block:: http
 
diff --git a/auth.rst b/auth.rst
index d98fbc8bb..f94533646 100644
--- a/auth.rst
+++ b/auth.rst
@@ -61,7 +61,7 @@ You can use row-level security to flexibly restrict visibility and access for th
     message_body    TEXT
   );
 
-We want to enforce a policy that ensures a user can see only those messages sent by him or intended for him. Also we want to prevent a user from forging the message_from column with anyone else's name.
+We want to enforce a policy that ensures a user can see only those messages sent by him or intended for him. Also we want to prevent a user from forging the message_from column with another person's name.
 
 PostgreSQL (9.5 and later) allows us to set this policy with row-level security:
 
@@ -310,7 +310,7 @@ In the previous section we created an internal table to store user information.
 Logins
 ~~~~~~
 
-As described in `JWT from SQL`_, we'll create a JWT inside our login function. Note that you'll need to adjust the secret key which is hardcoded in this example to a secure secret of your choosing.
+As described in `JWT from SQL`_, we'll create a JWT inside our login function. Note that you'll need to adjust the secret key which is hard-coded in this example to a secure secret of your choosing.
 
 .. code:: plpgsql
 
diff --git a/circle.yml b/circle.yml
new file mode 100644
index 000000000..ae7ac312b
--- /dev/null
+++ b/circle.yml
@@ -0,0 +1,8 @@
+dependencies:
+  pre:
+    - sudo apt-get install aspell
+
+test:
+  override:
+    - cat *.rst | grep -v '^\(\.\.\|  \)' | sed 's/`.*`//g' |aspell -d en_US -p ./postgrest.dict list | tee misspellings
+    - test ! -s misspellings
diff --git a/install.rst b/install.rst
index 5edde5e55..430161bcf 100644
--- a/install.rst
+++ b/install.rst
@@ -21,7 +21,7 @@ Build from Source
 
   We discourage building and using PostgREST on **Alpine Linux** because of a reported GHC memory leak on that platform.
 
-When a prebuilt binary does not exist for your system you can build the project from source. You'll also need to do this if you want to help with development. `Stack <https://github.com/commercialhaskell/stack>`_ makes it easy. It will install any necessary Haskell dependencies on your system.
+When a pre-built binary does not exist for your system you can build the project from source. You'll also need to do this if you want to help with development. `Stack <https://github.com/commercialhaskell/stack>`_ makes it easy. It will install any necessary Haskell dependencies on your system.
 
 * `Install Stack <http://docs.haskellstack.org/en/stable/README.html#how-to-install>`_ for your platform
 * Install Library Dependencies
diff --git a/intro.rst b/intro.rst
index 0baee6619..e90839bfa 100644
--- a/intro.rst
+++ b/intro.rst
@@ -10,8 +10,8 @@ Declarative Programming
 
 It's easier to ask PostgreSQL to join data for you and let its query planner figure out the details than to loop through rows yourself. It's easier to assign permissions to db objects than to add guards in controllers. (This is especially true for cascading permissions in data dependencies.) It's easier set constraints than to litter code with sanity checks.
 
-Leakproof Abstraction
----------------------
+Leak-proof Abstraction
+----------------------
 
 There is no ORM involved. Creating new views happens in SQL with known performance implications. A database administrator can now create an API from scratch with no custom programming.
 
@@ -28,7 +28,7 @@ PostgREST has a focused scope. It works well with other tools like Nginx. This f
 Shared Improvements
 -------------------
 
-As with any open source project, we all gain from features and fixes in the tool. It's more beneficial than improvements locked inextricably within custom codebases.
+As with any open source project, we all gain from features and fixes in the tool. It's more beneficial than improvements locked inextricably within custom code-bases.
 
 Ecosystem
 #########
diff --git a/postgrest.dict b/postgrest.dict
new file mode 100644
index 000000000..5966273cb
--- /dev/null
+++ b/postgrest.dict
@@ -0,0 +1,85 @@
+personal_ws-1.1 en 0 utf-8
+Auth
+Codd
+DoS
+GUC
+Github
+Google
+GraphQL
+HMAC
+HTTPS
+Haskell
+Heroku
+Homebrew
+ILIKE
+IP
+JS
+JSON
+JWT
+Logins
+MVCC
+Mithril
+NGINX
+Nginx
+OAuth
+ORM
+OpenAPI
+PaaS
+PostGIS
+PostgREST
+PostgREST's
+PostgreSQL
+PostgreSQL's
+RDS
+RESTful
+RLS
+RestSharp
+SHA
+SIGHUP
+SQL
+SSL
+Sencha
+SuperAgent
+UI
+Vondra
+WAI
+api
+auth
+authenticator
+balancer
+centric
+config
+cryptographically
+eq
+gte
+http
+ilike
+jwt
+localhost
+login
+logins
+lt
+lte
+middleware
+namespaced
+neq
+ngrep
+nullsfirst
+nullslast
+param
+params
+passphrase
+pgcrypto
+pgjwt
+pre
+refactor
+signup
+sqitch
+startup
+stdout
+tsquery
+uri
+url
+verifier
+versioning
+webuser

From 2a77ff5714aa19a07fe0e6bccd0aa8e8ecd8af8b Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Sun, 20 Nov 2016 16:37:18 -0800
Subject: [PATCH 029/652] Schema cache rewrite

---
 admin.rst | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/admin.rst b/admin.rst
index 5ba5d4097..a7d145d7f 100644
--- a/admin.rst
+++ b/admin.rst
@@ -173,15 +173,15 @@ Restart the database and watch the log file in real-time to understand how HTTP
 Schema Reloading
 ----------------
 
-PostgREST's database schema cache is a common source of confusion. Detecting the foreign key relationships between tables (including how those relationships pass through views) is an involved query. To speed up regular API requests the server caches the database schema on startup. However if the schema changes while the server is running it results in a stale cache and failures for :ref:`Resource Embedding`_ in API requests.
+Users are often confused by PostgREST's database schema cache. It is present because detecting foreign key relationships between tables (including how those relationships pass through views) is necessary, but costly. API requests consult the schema cache as part of :ref:`Resource Embedding`_. However if the schema changes while the server is running it results in a stale cache and leads to errors claiming that no relations are detected between tables.
 
-To refresh the cache without restarting the PostgREST server, send its process a SIGHUP signal:
+To refresh the cache without restarting the PostgREST server, send the server process a SIGHUP signal:
 
 .. code:: bash
 
   killall -HUP postgrest
 
-For the future we're investigating ways to keep the cache updated without an intrusive setup procedure or system resource usage.
+In the future we're investigating ways to keep the cache updated without manual intervention.
 
 Alternate URL Structure
 =======================

From 216550e9590e8c55d94b49e3018f0728dfcaaa26 Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Sun, 20 Nov 2016 21:39:35 -0800
Subject: [PATCH 030/652] Content negotiation

---
 api.rst | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)

diff --git a/api.rst b/api.rst
index 73fa46cea..1cceabdf1 100644
--- a/api.rst
+++ b/api.rst
@@ -175,6 +175,24 @@ Note that the larger the table the slower this query runs in the database. The s
 Response Format
 ---------------
 
+PostgREST uses proper HTTP content negotiation (`RFC7231 <https://tools.ietf.org/html/rfc7231#section-5.3>`_) to deliver the desired representation of a resource. That is to say the same API endpoint can respond respond in different formats like JSON or CSV depending on the client request.
+
+Use the Accept request header to specify the acceptable format (or formats) for the response:
+
+.. code-block:: http
+
+  GET /people HTTP/1.1
+  Accept: application/json
+
+The current possibilities are
+
+* \*/\*
+* text/csv
+* application/json
+* application/openapi+json
+
+The server will default to JSON for API endpoints and OpenAPI on the root.
+
 Singular or Plural
 ------------------
 

From dacf39404e598049e3e1050486d76700b52f17e0 Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Sun, 20 Nov 2016 22:03:04 -0800
Subject: [PATCH 031/652] Singular or plural

---
 api.rst | 27 +++++++++++++++++++++++++++
 1 file changed, 27 insertions(+)

diff --git a/api.rst b/api.rst
index 1cceabdf1..d9e6e7398 100644
--- a/api.rst
+++ b/api.rst
@@ -196,6 +196,33 @@ The server will default to JSON for API endpoints and OpenAPI on the root.
 Singular or Plural
 ------------------
 
+By default PostgREST returns all JSON results in an array, even when there is only one item. For example, requesting `/items?id=eq.1` returns
+
+.. code:: json
+
+  [
+    { "id": 1 }
+  ]
+
+This can be inconvenient for client code. To return the first result as an object unenclosed by an array, Include a Prefer request header
+
+.. code:: http
+
+  GET /items?id=eq.1 HTTP/1.1
+  Prefer: plurality=singular
+
+This returns
+
+.. code:: json
+
+  { "id": 1 }
+
+.. note::
+
+  Many APIs distinguish plural and singular resources using a special nested URL convention e.g. `/stories` vs `/stories/1`. Why do we use `/stories?id=eq.1`? It is because a singlular resource is (for us) a row determined by a primary key, and primary keys can be compound (meaning defined across more than one column). The more familiar nested urls consider only a degenerate case of simple and overwhelmingly numeric primary keys. These so-called artificial keys are often introduced automatically by Object Relational Mapping libraries.
+
+  Admittedly PostgREST could detect when there is an equality condition holding on all columns constituting the primary key and automatically convert to singular. However this could lead to a surprising change of format that breaks unwary client code just by filtering on an extra column. Instead we allow manually specifying singular vs plural to decouple that choice from the URL format.
+
 OpenAPI Support
 ===============
 

From 455dc5c8bc631a874d89e490239aa30fba975b56 Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Sun, 20 Nov 2016 22:41:05 -0800
Subject: [PATCH 032/652] OpenAPI overview

---
 api.rst | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/api.rst b/api.rst
index d9e6e7398..e7bc52398 100644
--- a/api.rst
+++ b/api.rst
@@ -226,6 +226,10 @@ This returns
 OpenAPI Support
 ===============
 
+Every API hosted by PostgREST automatically serves a full `OpenAPI <https://www.openapis.org/>`_ description on the root path. This provides a list of all endpoints, along with supported HTTP verbs and example payloads.
+
+You can use a tool like `Swagger UI <http://swagger.io/swagger-ui/>`_ to create beautiful documentation from the description and host an interactive web-based dahsboard. The dashboard allows developers to make requests against a live PostgREST server, provides guidance with request headers and example request bodies.
+
 Resource Embedding
 ==================
 

From b35ffd4931212b7dc19082c38642657fd4b56993 Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Mon, 21 Nov 2016 23:04:06 -0800
Subject: [PATCH 033/652] First draft of resource embedding

---
 _static/film.png | Bin 0 -> 51752 bytes
 api.rst          |  85 ++++++++++++++++++++++++++++++++++++++++++-----
 erd/film.er      |  40 ++++++++++++++++++++++
 3 files changed, 116 insertions(+), 9 deletions(-)
 create mode 100644 _static/film.png
 create mode 100644 erd/film.er

diff --git a/_static/film.png b/_static/film.png
new file mode 100644
index 0000000000000000000000000000000000000000..99843b8709145b1f89bf14ea93b2134a9f2b4a2f
GIT binary patch
literal 51752
zcmeAS@N?(olHy`uVBq!ia0y~yV4Basz!by5#=yX^f693w1_lPUByV>YhW{YAVDIwD
z3=9eko-U3d6?5L)t*qet{_p?CbfL&jj){w$l6+k*+*sW;ZJXC+IZ^9Cm*^|u;eLVM
zn#*<ly!>Ua?hScVU9}=V)4MB3MN=_IW#hGJ7ZkRgu-b2L^10YsKyasOrR}=c`_@&b
z*%^PH_hRavUq8>(96M&f!z?H$C^&I<{?4^qwFN-TPtFg6U0hsTym}5T@9600m?F{Y
z4^pFP$TeR{Nl7UvNyN_8#l>aG5sjLzj*bqG&cGicAdNzcKWKs!s4i>T$}J$cQ?{L7
zUQJEy*satPrCC>2I3DklT^rlhF@?#jYVWd+DQbUze^0-;DfOD3^Sa=LPOO_YZCVrC
z)^X?emnvUD&Df%%A`U*jV+K66?<V?JR9M`+dGp#oe`gmjPNJPtY3J(lZ_?bkzAi2;
zJ7ZRd=~|V)%h}uH;&Mu%)n9Pp{xz|?r!_LO&pI8tI!x8lQnI@Gx3%53mzS4E?yIq6
z*qVJ^O+({FU%#eOkW}W4SeGaI-qUn8M%WcU<FWtq!Fi+1?-v&r_sH4Ky13X~SWGNT
z=eUTVW-lmk8oa0LZA?1aRr7j1{}LsoqI8otdP+=dVs=jQp03AuVO^~CqD6}gc$!03
zhZTN&<f;|AD&#@k^K)~P-`?7K<ml1DcXurJ?A=@WX5(=V4i1CcM~)raRQtQEyVfl4
zj>p=ltr<5qEIj(_{l4FQcXyW;zqp|I>gsBD2L}d6N5>sIcSg=BKRr!X#;!)9L4AIW
zkhr+GlCpB-{yN+D`+l#xnRj`auZx>o(T4|)T48HCwr@AD{q^PG@#D|?>eG~zT$4IF
zrYIdec+jn&pkSl?_UiBN*b*3yg~!*X+WdIX{Or^8_`1jkcG6}!23gnF<!;;k?ehNm
zdSz?t+Xg&`Gp?_TZOnD+l}eS%zP&Bi?e4Bp?ws)Takk28YR4YkVP@ko*zWG;CS_-5
z$Cj{T*Dk5HM2VX>Z@TTT`^#lBZ|&N(hPA)GB>leG+TJext5`{?Rb*jexuE8EzqwXN
zZ*9$HEGQ^=uyXmlNBQ-?XYbs*VBz;>cK%N{lKTta+%ROw$;l}wDKXhz|M{%B&rBoM
zhTre^&;R{?|NT49-n{YITlMwBhYt)7E-Z8|d3B{z*}ae9!ILK~>(}e^@$o&|DOdL+
zu}{u6D&epGz8^~Me6pJ&zMr#xzai(Q(SujPzxP&uH>-{;E-tQoy>@%V_Pp4{dKV?7
zqizp_T~6)o=-}A2c{AgSYip(R^76zU7T?`fI>)N?RMPxTVf9HfXL33`KR4I1@DYo;
z|Gbn#Eu3ky&)faxY54#5{{N@D-|sWNzCHi`JZ5%2gWOvtpCcqCB^hkK-AJBeRob<;
z`un6wlbnwC$ufHQ`=?)8;>mh#{)`zOr>E)8G)m?A|L3_qBL_df`S$!fJ0?CoJ$>?w
z87IEHynObncKEtIbLA&@cx=32J6|d2UG3km*Pne)pI<B1@ayYqVF7^y@9yqCdGe&9
zjm@0taaEi<ZWaHy|Nr0hJI@#Q+bweIm0~zE!?3xfg+(uZA5YBOq?J`)Uzyu{pQ;_M
z)AUF>e^2A;)!Gc9t3n=L4UbQ~yv&zDCwAAAqut`qXa8Cmx;iZ9))r26b@k%8y}i9Z
zYv0`1*wWT^X=Aecv3~jUA08fN)TzpHb@A$|vU6P$b9;ZiePCc9L&%DN#^v+tZr!=I
zI$Zzr?@LR)&%Qt2FK=G0B`YhNd1b}KooCOT>&xH&cba_Nk4E{r9}kxu6khi&>e;hr
zOyTX1txH}cY}{M?{M?P3HyOj#584+zaM+hz^7`6Yr3xmS?{|uyeK*a%c42k6zKyMI
z=FLs2-D0|ju3ej!b#>L<EoOofcRPaOa%;Bp(z$bG@9rvHoO*iNmYkcD*6;gu>dv;@
z+h)c;p5A@VS#ZDhdt!F<m-wZcnwrnPTa~_g!aXrBFYiwI{aV&-=P&Old|dO|$=O-b
zuEs)C>(75iy~73_{r%~;wq*YJ{d;ri>uXBab(MlbxaKPbt&9C_5a{N{W?lBiz@D97
zZcD~&@sQ7LHyHiq*?9W-^||hztnOd*<wanhoNd-U?<(c5udkc$S65Rj`t>EV`)xa)
z?4u){!mQiQ7uP1R7L=BzetdLv$&w`>em<XXT=2jl>)M*kJp1BjJo@{7Jo3#J7ThT<
zV&}T#PFH8AqM@N6Lv(bslzHBq_r<vhr@7~szPe)ge)pMEr#8(vY^<uvs;{sA>dH#z
zgan1Q#5-Hq^7HdQ%lRKR=;-O$a-;6;rro=D9}WI&zA68{T^pb5sS698Ik~x&Ra9Em
z@BcUJ@$vrI{s)+!{avG^r0U5p)9JCZG<SXabiG)vIaL~ZdVSB%&SnmGzS}2j&B4Qy
za-e~+=HpTE16O}*KR-LWee-7H_j|w3lYGI(E0xlAC0m~1*8Y0?j~_o)R8~HG_Uzc}
z_5067=kH}buzLNzuI6Uuv$IT-e}8+s=jXH8&+78`d~7>fn71VB>Z-KdZQHhO$-O=8
z-QC^E5^Q>UdN*#|NRVK&v$K2lcZrgcsw*gK=skV%B;pGbsLVf5c6OHO;<&w4&x+y_
z<{G7PiE4+jB%GgTYxD2NW1Bx84zG#Y%EjRC@9)+xm;3Jd>(|-a{y*-w2NlrGPeG1Z
zzh0j~-EYo=o9XkHCLV74^7{IDnYR2}TQnaZ>(#!pwX&+psOX8ugIAM(+E#rzaPnlQ
z*HkS*5s{Q{$Hcx>C@CHF1SP?xrLV8e<bNNsBH-Yoliyz3em-OT?0f3zX%lD9?(XmB
z-~acU^x0Xar?2mG?G|%!cfY*Ak-2#8=FP^z%l(cXJ*paCEiNvel$0c4l;W{3*UZd}
zN7}4s#flY7@89m3xM73Av3~jddHTl2lfQf^VX(2Wsrdi*yQFcN&%%CnrJ$Icp6I(1
zRFsPNPrhE*)6ub^NHtut?chXZ_m2L4b#wFSVQZrTSBI^Y-gf@fsYmDS|3A63)H`H#
z7;kxbdG}j!y%+^MyL&a;ckkc7ztTS=aLLl86DLeKFj3ikMZiL)(pOgwo<G0-fIv)$
zprGKFx3|Af`@X%agW+`P`Q;raWH)Twc<}aZ>HPfnPFuHc-@d(~<7L&lb?dg|-=FvG
z?QL=I+Pu8HEt!|w%yMsuoc`$I@@`7oUHpv@Q0YvSR!m`Gp^A!1LUMBQ+aMR0B^;n^
z6tXgYzunHAJHNcSdHL4T6Y)aA!ax80eh+Tm2!V3<s*p7i6UB6+49efdWKUPB@9gLZ
z_#raU>9Q>mZK%|9r>1Imc697W-MwRn#i2uoEULfdaE7QVDJ}S*sg!!5N78tPLE<6Z
z+qw7l%q)C-Y~q|bF-)PI9UK{}R0TDgkM&48S5@uWdRjnmB9lf<m&Z(DA)%zVLM|>(
z*gy@D)N?mBCRe`O`CRAP(IZC$WMn|q<BMBcwYkM~4jAxghiWJV)vbIU>~d<(+UV_*
zX3fgd%fGRqQO>sN!ILL0>*Mxr*t#|K)02}SD}#=9g?4pJ@dx?%S+BG?pS!#Jw*32j
z+qauDtl#@hN;hiDhP*^2rKc0x?z%4VxxFn{dUx5|q$?`|(>}0d+}NPl%+9|p4y0hp
zq2(P@GJk)2%dD|s`sMrg_b)juD5&`z6xKf0#m{&c%F4=qZnLzsoLXY3r1W$iSh<~@
z9YfBY9ftR}9d75JUSO)Ev<MVFQLDq&ZrHy4`Sbbp+al)AoqP7uQt!1PQ#(9<E(J-?
znm%28v3q~o_jh-B<n89jT9*k(OMAb+x7X9#dvjT(lG4*Ykm;41)6c7!m`w4v|2t)x
zZnThu#EGNb;y)iW^RJ1W)#0&oaiyK>k~5v1of{*{N=i~LE^_smXEXEe?()aapQqpB
zw#vAmkUd31DJV}96a#{yqDS{se(u`xeof@&GY(oxO6C0^TO{r5?0O^&7kT`ys;Cet
zHdRsz5@_`o)HJrSwS9SO>uPW$&c49x4r*8vZh7NO^s`dpT)d_xAMe{({M>KPo;_<~
zyZ)%!+TOjT+To$OXdbkI|LUj6#Gs{RZ*N^$7dyM7g9Dm!7v$gHcTEq}^!|#Y#gE(G
zEKiqHOKhvZZAd!GwQ19)8AhpG7cX9Xb8qi#MrO7LZ{Fm*{p8|uO7|-$kcwYj(Tv)f
zb@WK5FsKDyP^x!IP}yz5v}s{F&u?r><u*<`qoAs~G@?&kDJTw{us^?EzkkxadFR$d
zZtm#sXJ6pnFL!2^DR+4I^(4#V%Y0|gu&Fds_n)UT?Qv(v6mh9C@rg#y-`w2Hz{18h
z>-DaZmrm35V%LOD>gf0bt`3&@%rI!I{QQj3AoG$+8=oxKfk#KXU*6lhThixvpX})m
z4-Z?Gy^&b#-oLEs>nnzsokgvh!OH^n*VW3%%4Xi!pm^T?zm2$FjKO)sq9-0=dNCXa
zHY6UFur7O(dsRY8>eLLwWQ)Q_EX-^?3-a#ny0Sige&XS_!k3qp*1R>(xpCmd#l@Ld
zRtUz$#eI2ye|{^s_@v2`lMByGm>}@&{r&SDg32F0eR?#}UGCxQ_50Zp-rd=`CFiD)
zzrX*k^7np0L6eSJo||iZd_~~mj9XhYO|z~n2wxw!CT{PqZR@;UmKa?5tf`dhwKi(&
zhc91P4xB#Sy{q&!(}W2V4)ELmad2~EV*nL%>gtylyYoMK^yp07rNG5*AD>Q-H>&uM
zAXo8#kx$0rz;XHdGw<&1zPTxto1s_ARLRb6-r;us%PRtvrA#skqD|l3**V$%|DVaC
z+F=hKKX%?<_qU^~>(S=(cFMZCy`bi5+U>8euU}ppZGPv@9SMU3201x7P#;V@zGfn*
zE&p!!`&q|r%HBx4zP5I;*Ho>NmzP>Ud?+x>xpCmqQt!y!WxD=$KUGR!Uwiud{r=_I
z*VoBdm2gByNB7BEyB+V7wXFSR;@rk_@a)-M`T9Q-m(Q!}vMhdPkauT?^>24U!JX3-
zm4doh*x98I9z1BC`}w5$e2IpQnU~dy?`E&xo5pbL<YaZ;!v;NmbFCyBKK^*zFJ1lp
zohi>@gLN@GlWyF;E$!&&D0ZBio7<Q{SyAy|jCu999A<;0<mCL{Qc+v8QW=i@`1rW@
z&YhUU20Y5@>c=^FcuelxxubKdt*uR}udnae&CTg&OJBZx>2`LODQ|rI{hH%*43pb-
z=6!v2l`X--+B*7*oRCmbp)E5zp9w?q?QOYfvwM1Y9#3?aGnA2$>A7;{%IrA*ii#Zz
z?bVfnJOn|hx#;cN?e~vezb<}2=GeUriOd@}ZcLkPn0&0@<0IEs*Vo7AJTEOPOM7)?
z<&7IR7!tCxz1#U@J-odi-`JR(wmUqovUSD`iB%yhlh&O+b7qOxRINGo_4gjlC@U-5
z^Y7Q|XGNc%on@?eGSNK))BxXC{QTU3t1nlan`3$S(o*ltySq$tZ*McbZDC;{ASLCM
zmZo;U?sx9S*zFx1pwj-%s<^#YYooWDO^=O<0cHEiYQ9Pa1_Ji>_Pa`69-8cLck*$+
zec#-<u^Z>!zI<6&U0uDq^xeC63^98uF2+26{n|S#ORM<VnZ(!E*2>t`%viES<=lLG
z|FuzDb-t|+T`dOcxE0;|xITY+x$MlDGgVYn5+vBf_2ZW0-`^+p_S2!ajm+%to&>qN
z=&S%$WxDR}$7^1z`OP`;@9*!KHkC$tdU`rBJ0{Gtt$y_Wy?;?r(Z;#I(}eFzw<Xrq
zzu)_PMeJ^~{QZB;A|oS9-rkye-v0j_K3S_Lx7Q~f?P8TXf9>0`{jY+9gBw@db5~ba
zcl&S6x+-B&pz!bCzt+7vf)k^IK+T$XBV*&8H9w8+-Mi;A-)`>9%gZOvnRDjMOykH6
z35=hgpHF{wW~OS``IncM&ooG6y1F`CT~qU9Qs1RVt3VA=29ul{7ix^`{Qdm+#Pwnh
z96h=;;+(1y)2p8%f`)(pd_KQp_wLVU&F{~6opohJ;yw47=Dxw6mPJoEKn;^uS5GTd
z$k|p+nQL7xcG^<PB*WqBtE)dh9+y9P>eQwiX4%(t?%ciG+1IBxt+=zJ0W{RJ(z%_l
zqN>WM_E(8n&JBmCD5=}q^Uaq_y}G!#{iazy*K*fxF+pMB;_z3QcXk*~)e2Rzv6&OP
zI&9*UDMy~quRqt!Z|Cv!)YP37AC)*cIm=7<*xA|B&dxge^Ye2_lMDgtvNs9;|NT8P
z)3{yIIPJpP=<Q7HKU`h9ybixpQmQX3EloW+NwuY=C1MZn$&)8LXBwwRwVcnpyX)e*
zSZljqFO<K%yL<ZA*Vpg8Z0Fbg(mdS8tE{2H(Xc9XwNd^(8?CT49v&VXzO&8FUQe#v
z-Nr9}?&<02m5+PPJ32ZT7C5zX^+*^t%`{G*<^QC+Lxf%W@h$7yt}gEiYkz%VG;qFj
zx8Uce)JKmV{dnAO|KY=j1(}zZJv;LCx^>|rmUZja9sPFhN7IsJ%Y>w*z0b}v&Ahav
zQ<5z>IM}lK+nZefqIzXe<JZh=TDQ2qkbpqL^y%RXzjb$Xfa=W`=Q}$@4i$ka&Y0sz
zkG7V*y>)S2?C$7oXJ;SFxUwR!)#}@WgUy-u_x;Vi8oV~jbXVEis0Y75{nBe2^NwA;
zI<;NCZpRH!jR$HMOiU_xYw-8%l{Jx{^}>~uit>YhhzM%39XxpOnx3P}l8_6R-(fZs
zLYFRGx-spnl#!9qn%J(6jwuXxKWi$56~4TrYL<KJNdEr6ZL3#n^V@u2FwMHMp)68K
zsc1T=(b9S9<jKUx$9i*aZ{u}$cbBXGQ^>^3ym9m9&1IQNN<mDZ#@P`Sb@k2V@8kUD
zSU4{Co11ZY8Sl4m->&I-ySR8wIJCUuPU&+0`OoD4|6u?B>-v5UUS3rloi!(p?<#pI
z<mu_T=hG?eqY(@5bRIe4l098PX=w*oOFO@O+KCB@XJ#5d@9QspaDZ{rq)9W(^WzLd
z)RdG|ef@WLdu%k~X>Mlck6M#`cbDnDefy3U{Yg7JOHf9pCsE?p9p(8SK72^}xm|SP
zCs4<}%Qq-Us9Q|;(dza49$i@(d`-{Y#pRtNr~tJt`|=`CNm<#l=7+)8S67ptoS0Zq
zRTZ^cM^JDlJ17t)E?u(Z!)g8fAAY~zAH3X8c3$;6%U9RdX20F!;_^gp*#}J}*P?H4
zBE|G#Jl@{g%E`%j@c8lLw^TbjJTyU#b=ODl-uY!@Xl%{8x~WW4Nhzr7MWeEyrV*>Z
zpy19}uK7wu&TWYiyIYhZ_g0yno~FCGOj1cHh@sVA@T9u2@#M3!%|CxUE<btl<Y1lS
zHr3yB7{b@ZXij^4_ss71`%b@JzrXH!-~QCoVrge)IC^=VinVU<@Q7SmZRdJq%G9Z@
zK0Z9N&GXgF&8M@=*KCNWvcJA2^00V(4da0>QSFSoyG(7Xzb$d=l`5~v$-c2AQ+Tqv
z|FZP+^FX5+pdeZj0vgyYDk{3Mvshi)JWs{ecJ6@#4xqs@t*|u_I>+DN+iQJyclq^z
z9UUDRH)5CUu`YWfAz$}Hadr6mW9QHJ|NlAv|HA6;?~aPuycd-=%Srh1;-X2`6%KuU
z{a@eTpFh;ft(&L4qv$DD@G_r;b$@?ZSXo`#kmx+G{$HhD%#MU@l9oj(+~RsH2{$$*
z_Q+a)+xCismpApy48u7Vg-wjiYysQzVqaZfe||&a;T<I}FXdjJQ%-zq=^tpk^~#Ds
zliXWVq)f9etPa-?TOU^&eO*;4DB{&m5zXg!?%etC@#Dhe<9(o>&aJ0+L|<QDzdU+-
z-j1C+4HFK4`p*%&%XC3QhV1-uPwtlAXHB@WBCzJ?)9E~NHZ$1eDjJyC`96F+F2A|@
zd)~I3n@kRi-FiFv`=5V!c-SQCN(URS)SWP0>+*L`&fEV_Ioc)q<HwH+>*MVgEn4*B
z&F1r<irW7F&-1xg=aioTHQn>>TCECM32L))@bjl1ZsP@wyKT+B{^`kN|Df%8vHSl2
ztKL=i_S8b>_6=LNKE1Iqx#Z1_iI<oA8>gHQxO3;ukB`UYD_^Z#KEpVj4>TyTte#bH
z;(iGwrKKJP1seoqWNI#(&9y2u0uAlzwPSC!#2+@`d3<WBcH7>)dqJZYg=;o!Fkm(i
z5)wL7x;g#48H2K!*|%-4^RKR&$|&*pc)xj3aWSY>HD`{DvVp;cg5u)cYiF&uf7T;u
ze5Q1D_<A#j!#8i<T=Z?i1cC0?k`@IE7$t6R%Qe28l9D3PZ}X|+;e!VWOO`FW_i5Il
z!-skQS_)2d>bkIDcgK{<^?N>X85$aj+3ub>b7siOpw`dN&oj?(zA0^%qhMxsEyq0V
zjD%j?9*@7jzILybOHWT<<~O&ix0jb;+qP{bFD^80*<#WsYaRAt*80@+^z@G{^%$)k
zhBr4iw;QLQ+fec{C~AA2@9k~5XU+Kd_*&Z9Ce56Aa{K+d=$z}iN=#B^;+mf)O`dF7
z{EWwUmdVC4&9KKf+AsNjQ{F#%bZClZ@C=hop~l9>A3uLyT<R@8ujZ2{sDOR*=1tdH
zIe&luIdkUdT-&*OH*>+qM@OBm*Q|}&ngt3Az2~z3e{HM0K5^zuPbVj)wnR`<@7K4t
z*%$TnAIMo0Jn+*Cby1Q3TGKTpaOKLCf1ca_e|Z1@KlA;6zs=rydgH3^_p1AEZO#7t
z?RNg;sZ(9AuZ#Wp=kxiO7Zx_V?(P&;-&Fs<PR)N_Pj@#rx47Pt^z-w6{Qf<8&YYN>
zuNKzU_X}o!ynZFDb*<(3UO9oyTlaok|MSX~5C$1p*^S$`Z~qapI;^*mnf=lG_whGQ
z3khn9fSh6Y{QUg%$H#h)96J`YH7m60`@7h6)wcfg?asDv3a^OUYvt+bxntL^S+~>9
z&B?4gf9A}SPft%*R973<{wi7KKi{vY$jCVTT*|>F)-&_%?=SkhH{kQ!RpIO97<i@4
zOy>8TpFDZ;;Z|<(g2F=0ZJ#?k8mjDEPxYLhuD?0&uGO>i^UweL`}^g^#q5jSdJo;d
ze}B*R4K`LtZKNZzkT%k+)As-W7{7b>uIBSu^JlxHOtWTu4}7+F;mf#HKmANIE;PKl
zy883ue)~yNr>1Vqy|yND$L`(2va+!`&xHjUTm2^*C0}0``{vfx?!3FZ49ng`L~YBd
zysUWr)1t!1$3j+xbbk0y5VkhTH7H1Ee*Hg7e!CwEQ?<jNJv!R0qM~wPp)<RUt?f*^
zS}RcE)z$5NdwcurVBW7UE*`c?ySuBDF=9)GprN5**y^8tmKGKU+1GT=&9^_lz_Izp
z#$@*2-`}U7n_~$Yv(LM`>u$k}c$XzBOy1}Pxoye2J1cB$RAPR9{@b8;n(NlBtNHbE
zIghki&w>RC46DM{p4wCSc}2uVB}GL=P&v3}jm|WkNGA^uj@Vr#hTqGJijtn4nJM;g
zbM*GSE!o%m`t5#o?5+O3sqSyp>Z>)&aksLjy^bpu+-aS|vsfbTj*e20)2}ZtnG@KS
z9`f?_RW&o4Hp?{o(h^T$<B+AxmVv6z;!QtJPuCX~7e6jv|EICNo!xh~+0o0FHy=oz
zXHm!$9v<Gk@Z+P98?(AWG2PMI`}EP#ZWb1n2Tz}dzNl4JQhITFyFPfzXhY1y;3ZQ|
zoIR_mt<CN3?w&n8Db$sBe);7Ufs47W=6!f@a7+IEe|q7;pG53jpP1=f-?00H?KuOU
zZ*OiM{`K|s%HZXFmOR?u`?A|#<}XV-JF9%Bkl@7X`G=ODuzmC3VDp;j?R~=Peh=Qi
zU*B&3E)dr4x)Sh1WG6c)CC#t@H`BSDFK~UFEvOp%I;*q8W9EVnnnnGf3jX57i$8w+
zFi1MW0V-nOPI7T^>FNcUeeC>s{`mO#&u@*Dl$26C!9w76L`O%*9n-46ov?}6i9%E6
z%{#ZN^tDCZpB-Dh1qB5+a`Eo&p3-pUjL){byQi+Ljo!F<^W%TN-#`EN`~7xMV@^qR
zT}aD$P-n05^Rvj^Jw;ESPLEG}cW37{y~S5fpFElP{M_6%@%!hUIpcF{OXgu`e%qGG
zlP7QW*53N&&6|jAIWzBB*7dIpSQzrhQgC9m!^$7Ipb58ITeFXAuiumOHt1CA&f@1q
zZ*CZ7PY+xr*><o`*80YdLgkk)U#7h%DJ$Dnmbvuan#j#BuCAWG_4I_-S5^cb29G)g
zY8_H<m_B{_J*6P0Y5MVbZ-u;UrKP2XgoH9~Y*3tQU4HE9)vLEur%K+tcdw$lI(j#c
zprGcWAYnUKui5|p{?5*baB+EJRdp-&iC*9b5kbL|{tttfbokA)=}eRWjaIpU+b=tP
zH8nMLqPO+b|Nnho#-iZBt*4+lZLO#8=AD0hynl1y<73i!>qAyf`Wg53(G07U<9)Jk
zZg1yrxVAR>@`l92)^^Jxj_)jf4r(54+_<r#q5?Et+RVngCU#m!hsVmGcZZ($$y!TT
z6g<$q9l9!{bHfIMHeTs6_vg`@QaUZ;pS8=^t@sehHP^m=UVQ!Esc&y@4_@jeI<M|m
z<}B0fWz|-$E-qaQ?zEmiw5#Hy(&2Xg=clG>_egy|qcIb<7Qpn>t*0GRL4!^F_J0J@
z)6=WIym0*d?Ci#^SMO>mDJi*zt~<PZ`gC#mnh%XT=ggf8YV6Lh`P5mde}8uVKF^E{
z4N!|*D|pR`lP5dt{{9MF?kD@^&6_o`eIO5nuRFYa^=j?&HlKa=ef78fD#FOf$gpJT
z(vA7|?TRJW-TVFhZu$L<)!*~@WUXBGR(<8*;84)e;4nAeetXr!2M3$~e7Wp@<ml1B
zrCy?+eJ$kV<XE@e-;yajapFW7n~DitqS}w%zV)4NSNq}P$DM0Gdp&%auC1gLRCB8I
z#~wj@d;2$U-kdmjl5s-?e|boVNbT=$Pftu#{`qZn_<FgA4<ByHy1FXhIVU&w<M;Ld
ztzW);DfZgd))q9<uG=?x^5nw{9GfGy<wWj#44VG&nQJxm<Yaa6S9?HRplgd}U*{5#
zl+0v1e`{;@Y<^BztC9}CxmGg|UOst}Gd@0EMn<M#_1+o$_J0iA`{njNwVb9Cd1y!B
z<1-IlK75$ib|-kbAE;uk`~B8@^Iz-tdy?7CM{UizxVt=m^SV2CV(wMF*1fhiI$UOY
ze4a$x!T0<BpIbh^&MPcz+Sb#8f`Xdjr%HeL`1w71Iz8UZezAN1vrhGS2JMgL&Y3gA
zIKA&?-J>I&DJdxoA3*chudZl*dw18{%Zp3ax{O7^)^@JvWVO3r_Dt80f7WY$&tUrh
zuj}gz|NJQQn`3dX_`EH9Oznf0^Z)-@epAiH=FXpeg^%5)>BsveB`IBA?r(m5eay~H
zE9|?9jv9cAwf+CT>i_#Z|Nn!B4;{<OwrxEv1a{un4Zmj^r|U4?+nSS``xDeM{PD28
zakal~yfnl8ipRV$v9XLRf|hcv-}g&vwplJy!plobb>jB?XyeyBdhA%yqa&OQfBych
z{CHFxG%=s>>dH#cG~SbE&pzG%|8IJ?xPH*eAl2^7+GBmP-WeGhvesoOe|~)Ak++j!
zaCbj${j+ciH#@&v3TU?6qL8V+zW&$O*X~=hu0k@_&cJomc8qV{zCC+>E2F--`Sila
z$7VXe=<Mu#^6VMYgEwz{+WBO4`Y!J*PXC<w;?0{kv-kZ})6_iqXWpDSKHXxvXZ!;K
zCRpzL`}Fj5%Zd*Q4L6m!Hl&@Es`~n>b@_62-RNzg0s9-bZfUvPJu=fc9n{?Z@#(aF
zVQJ~pqvG)@78Viq#)5(qg~HYyPM@sid*aL)6MIQX$s<RO1T6QHeUQbUdT&FSmsi)$
z__<c4I&w}-1;xdW_x*lnJbis`{oW@}Qa)E_Wohj$d%NjJN?O{i+xoG)SR67kG!D1(
zZ?AYgDN*9c@#Dt1w@m*0{d;p)X?9>8&(o&vZtipE&Vj}${{8(O{U^G!qr>B*=Jki4
ztG<2vwk7N8sYTNZzrVZ7aAke`{g~-9W}J9=dAaU4+maU(ET`1f{(gORZS?g&b}1(W
zgoK6je`H=<#9B}qwc=>E_~c2G4uJ+}4m2{ajNH7ea*lEOxfzGQPl~@+Gk0tD^=+Vz
zsnXM^o%^1Dc3a1*k(rsvP*Gj|_|>aZt=!@UJk2Lgc>MbMI(=JrPmjs|-Me=e|Nr~_
z{)ZpE(&lFS|Nr~_-X!C~0hv$d&z(y<+9fK{#uzg<x#<4B+B5TPrFTfhEcc!5=HbE7
zmM9=7n0O6TloS;enMm#eRc)I^?6@bGmkK4=vF2uHgF3W0CwJ}g_k29&d;hnrfI!3k
z{r3C+|FgcmJwN@)iHSXu#%*)v$lR;{U%T(;GwIE-1qBA7tHYjl>+dsoopF1c?%mzx
z#|?O5Vq!qEj0QY4H8rPlKkTXasN~)+cl7-E^S73Ebab5X)u<6$kacy{v+tYJ&nHQ+
znVFgG`SofwsE<|q`&;3oBb@VUzum0)ZI*j$O5x*Ucfb7j_U#*}vj>`Ge)A?rOh4|-
zqodurw|4B<u_5E4(t}q^J}bNTffCx2XU{GzcITIok=d|$^X3@~{)Ii)?Y?yR^3Si=
z<2$>$4qd%E)vZ@*>TL!+C8Z##7xT_D#aQdin>FiH`utk97~U2`Lqi@(BbEDhh#B1)
zeq~V=1A_@GR%po8d^lKh8#Hm!Cu^N?ecjxhdOA8iA0Hoo{OA#rLt5Ihqby(F@BeR?
ze5_~ZUT)o^M#jcB_f#4uCMLeQv9Z~2uGPm!-TGP;T^${F9_RGzna%w^5i}~Mprmx@
z)YL!qps_9Z#IEK0=WjvH=Z_yhf|hJFG%#dcT~&H`TV`gaii%3XlM{kkAuAl_T9tnI
z{Mpz!vv7xa{k=-)5W?&0>p^20X1TXMTyW+W)%wug(a~{L_xgrv!JWHyUD{V$eQSGu
z{qf_gqPMR*D*VCx@v~=cv(0idE-yPPJAb=LSAYNWcKNymzO&6rUR+oh;k+G`f@-<u
z2d!dZVF_3tw^!-A5y;5Wm-GBJLvwO-MQvPNT)Yfh{dYcp;+wAuYFhQT-F-R_RFs<K
z-RYP+SGM-|x2<KCN=iya;u<wwSLfQ*&f=9e0}uA>F3Xjx{SufxT}4Srsl4;h@`$tO
z4S}Bh`}c#((}}x19tN*TdVOu}n&|C(<>lq`YQII!GRZ8u96qV5qr>Cof)AQuh5!G4
zzq~o!f0lWE-`chFs)YpwHT6a8j%tCHTFkX71+9MT=$K*vn*R&slehEn@#%rKn40@!
zt)q7H2x_v5*e$*B^vRPA$;bI@Y-~P!{J62qGU(W!zwhg@tfia6wCko{mv3I49%$P2
zU=!<~ACLQ&ELjq<TSc=OZGqj6I6g(C)-bIqyM9^gW9Q~tfBf`mQ<>&dr>rb3-KZ@)
z*4FaL*_`mV|LfxA#pOH8WMTI8bvt(NzQ2^q)x~AW7A?_-!S7<(`D7G~j3!N1_XiEC
z7Zey=T@|_++z2h|*AjiWxeRG)F-Y&r%gf6z<d(m?(>Zyvu(EsK5>SJCqZX+8<o0s?
zF{S#t@p+r(xpU`&W<dof201+pe&-SQ;mnB>36GEUzPYn=a=Tnr$F|(t_sTT>zFa=v
z!`GMf!1e3X+2tw@B>mo5{5)cFTJO<a>hmg`zEA4{t!(3(Uv%7Wu9fTVvbPnV&zeh`
z<w(5W_gnA%p3i)sMN?}TZY^|XzgPP`cA5YDzS*;-FJ1%<Se>}@?%6Z9$H#gltx7a3
zEiG$)JZukH8T2$SX3~^m_dXd#E2~`rxwB0&oA&Rw2c>c|GqHwqbFGCXBsdO$n#0@k
z<r&sSZ(o*pxUGD72FxdUd3xvVe(NwYGWJLqGBreQP7B;$R|}e=cyn_zckP-kQEj8#
zTPA7e=lMoONu9U(%o7+GxMSBYriA2V(9)dR-``Zt&8MH6Ykj}hTPX2x8!wNn)s}!<
zb^m#1zP!Br^L_pQ(|>+`X8iHo{(olMc~$Repw$Qrc7HxNgOb?yQ*UhMOPlAV+}e_<
z6SqgA;p*ye@N~lM{eM1rgW5KaN^5_;T<+rLc5hQ`N{Whn-H$}hkdpMepHIcj^6&X%
zWUSbE?%cV)2@?dwbRrHc^`4&hdj_wR$%Bo@<&xju+sh+q#B$g`XIuE{FkjnwN=iyg
zLuS7D8M7rr5HwFJsuhxOX^AHTXmQw%!er2Z;K|AAoSd8wzg~|AP420Ng$D%*ftti;
z&F??C=q|rE^Y+T%<wXw<vAXrk#X4OTJ-hvW9k+vnL&MQu%Y0`Sy}YCvwm#0cpx{HU
z>}ID{E>Nrg+S=&NNk_TT&dfOY<mBYDZ?|pRcH`ExoB#7CRr}1fDxG1Ne2jOydG<A)
z2JyIxM)i3WOgpSZ^p%uYwTmBKHsDD+JInR*GT+Xgo+FnpPd;<TC$8$HYO#dQ`?z(W
zY9Ir&#OBN_)9&T-s$MO7yJ_?0n;Vnao7s4^7M|+L`~UAR!_Q@rpT2xyQ7|;z=yANX
zygdDAmndjai)Qe$4+og}FKkXfZ>=4+gagzUe{irl|E8X;?cCz$=NQA~5A2?rdwW~q
zmluHypmJ!=oH-HO^JJs9<tz+c9cJ_E#o`^iK`WbPo8=~*o~9eKr(z-~C48u#WuAM>
zB_&0LonLNA($TJp>gvnO{pI&Q3v+p=nW|T#rlL~t<3r*ypP5N)3heCcYCba(wrvdi
zk#k`|qpPgBki7i)r>CcT@7cG=!_)KNxpSadobIoBdU_0VY$`XMIG%TFi)MVyN7lX7
z-_tHEaQrFfAhdHjsOcy6y~Zr>&W~kppP!q1`qR_XjG#tU#m}eH&wk(vSnS4I_V(7%
zDVo6%I|>%=tb2B5W{<4(v<({!ievr!_&`DSVea?*eLvNLm-}s%uoV#8xXj43?B}o7
z>u2w6)ec*e@Z-ZnhCjdW|6f-9{oNe<dbu4^cG*`}IL@^yWstC|u{hku3rce~|Nndj
z`FLZp`!wC?wnT|N|Ns5ol6zZ>pPyf@`i&u<yj{$aU!Wyic2g#&pPr`s<@NP`HeRU<
zJB!oB^kOo$7Q~25)e6-rsP*&XEBMO)V(yEptHp)Y{Y>N?b`?B4BrEIxq%1WxweZoA
zPA2=x{lV|9fM)f}-_1GtM&RVhlP3B1=CpE)C*|koU;Nk1Z<p};+S+HIP`VGF4=#iD
zA6DOatfv$-!AR6jR#tXr!9%8P+qT(!x#0ZFpt_>MqOh<qWL=EpVS|p&PQ&Kdv@|vE
zX*!9Qm-&Lyk8?ZU!`H7*KRY`cw2<e;t*zR|>F17|Ki_|>S9){V+o)r`(&e|erlzHR
zI;lQC;!Dn%`S$bu=2~sczOGmG<;B6;?{`5f1!kCLi-CMA`n|WZvU1|&$&>SE80xEt
z9XAC{SAr6C8^1#59bZsm>-+us`o{U0mzRm2wge5jKRnzHn%V>f&2@Ekb>pln8ka6z
zy0N2h@zKejw8PdI>~C*xpMBpv@6L%&PfvUL_@w;$^77fQsoLRU-fNYV%2)aD?mj=m
zuo*N}ujV^zL&8C(2e1Br{r~ND{xfDfPEO7xOP9`kSbTk5Y)VQ>!Mi(_+j4KWf!5eL
zIy$b2+S;`$boHb;b9xppR-UdGd+6%btsZ;xE1#dVe!t9jwuE_}Ofx%w+Qmh#&o-1E
zZsVP4S*$kKs#HrfpYPM>&&&^ATwDxlw8s2@KEIynsIXmbPR@^Cuh(bZ-lnS^wnjlw
z@!`CB0q-YeJW?hdpoJ0!IX4VI!;^WlZ7Pk<ojV6w4+xUe3|_`i@a;|H=3dOTuK9fo
zmR45Njx6oyxDzy!Ykv5;n8fSrV#WB`-`w3jom*V*!nWLKh5vu&Rh|Y7oHwW6+xX_q
zn;G`?`+j=gK6sF^y1Kgf-pSh&%jfN}a_f`n+`iphzV^$+qkkvaR)0%*c4p?%q!Y61
z?rr+;?RGwB9ZXcq`M0;XUtZ+eeS4q#Wdk0)_<eKoYoDH)8o4ovHTU+m)c5!Hmd9-O
zNDN&cH@A_QU2MnOhwbuu(~2u9D`(!%zPc*4uDq;l+m6zsXV0GfGjHnD)Vlh2JD*p4
zy&BFKu{n)5``Vg=$Bwbp*Vls@H*pmYSyzRw4%6A%)p2K~k*HnyyE~p?Vbdf(DAeER
z>FPRk>{#2iwb8S0zkU1m<<-^Gk8XVQ=n<%KdQ|`4jvW?8#>SZ!7ah&LE+#A6yLPRv
zZuB-4HMO?d-`@;NUxmz>J6HGC)3e=?QHRodrA#G^(|F$R{VoSu+;Qw!n|AoR4Ov&U
z_WgV|yCzs^@5f`(b1aLG&8h$T>*-{5|Dr!X3fIN#Y??fI^3i?0(&lL=C#kZqvQ9m7
zw3Ffc{d)V)&(7{%{d~u^=bzl}Gj>P&t-C8GC3R|^ZS{{w-TEiaoin?A?D%nEdHM5y
zet!PB|Nn1$P@{A^Xm<6&sVlbgS#4KL7XJlW@1bX&b>+mIB{o)8v!0!u9lb~XPrv;?
z1yxnh6z|<nKeh))Pge6?0UBAV`_%ML;LWYA+y|5#?!UfQ{oc0f+Z)e-00GbvfL~u;
z`phypx##&e(7LsxtE)nvF?(Lu`~Uv`KmEVIzpLBY&RwuT;oAE6`T76lY^y-AegA8=
z(9Y|z(sr@2v5|W!3^g@1YySOw&Ld-SA?ep<<MeYM9(C(SE%p(dSaT}me0oWV$+>gq
zOmc5si4hkSb$xuScV)~@BS}d~&~SC#-(QRqrcHBma&p=if6AO|rYrCK%IBa$rD64Z
zr}n1jOg$YP3*368#10pHx005Y1~o_g{P^ns{Zt1H4e{PScI3!}sZ&$$ov(UZ^#0!7
zmv?u6*FFFJ+3fsT_RbSO<=x*``z$->^|iI9w`5-C;N(1Lz@wz3bmo5f?(+9)>gvlw
z?s)4drAE)>njaV#$il`JwD8c?(_a4m>EGYoefGtB<Hn6*hd&t_8cMWH)c0|7b!Gfn
zEx&m2;+5g+<>ch#wugq_tNheA{rl<vzu2em`}Zq*(V|6OZ#Qh3JNK?{v-*?yvtGId
zo8I-hC$moJX=vQ}^sB2ve?IEgZ&;oGKMQNuP{hXd$-IEHw!7!&SRVfO_qQ%na!!uU
z&6_uW%IWR8STyg&iwqlE+q29489_tv_x4tI+dQdzTlw$X_Wg{YHT>7s$NM`uF>Ovi
z|7`2^IA*Ww6Lxn*xX1nY^5sj)lM@pUT)k;q_2ot5<jKOI6%-m8C-(Sn(Fi`$*>Q(A
zRjuaOks}O0-+$jz7F$wc(%08#l7H_`%(|GJn~ny*v$V9#xxddg{=}cR+wXI|QPu5v
z@ggH8Cg#j-Myv97XIeOgJ$!tgOmvq!c>VhHsoLS6F1pJ<-OVOAF`AQ`JNeI#kI!Zw
zH8M8#^!H~!aQJZZ_xttp4U>;WY<3Y8oZK78mG<V{<>mYZU+Ye6dU9f-@}Gad-~agi
zJNnC}sOZSQmEJcO{I|>3dH?T|vU^{^LMPT&S5`L9pFdyH>;1Hj4vt^n-mVsR=<rC?
z(f|6rM$W$O&K~#8OWxeyKYxDxzn|0I=H%o^*ws|*d)c;bd+qPCZTa`}Hl90vyq#UH
z;z8dlk%^y<o;}-ZmU}DXi;K&<%%yfUYU=8r5A)kkd0~0^(xo#yzvLY|cdl=K-LI7%
z&tKfwxEQovrDKZaQoEXMIX5S{c8f)VhKB_OHCv26AD9RlEx+>{v=he#&o(8Tix!tA
zP5S9QT@SRb1vbPz*SZ`uHJv?O5!8zeSjjOT)YZ|{>;#XgPbqpF_I|NAsN>QVBxpC=
zG}~=++S!hdjt!s=)O@?zHL*=6c#j@EI&s2;hTh&@(7^pfB@NMs!7eKPe}8>FdG_qm
z^z-ws>AC)!G-Jkz@AvET-x|3rnG)~=v>r3*XxEmEi%mO=pGWN$`RVQA(sF2dhsdnF
zH^L~pt`Ocy*ZlBu`FtTs$;#7Z6DLjtbyrjaK!M_MQKRPGp(a-DA73u}uPytxWQhuB
z4(Gi6|C-a=f|vU}ecW%a*SN~%U9NWcI-M(5ataFzTUuKSzrDFBw8G29#o^)SWqR@Z
z&g>|B465j_W^LHGG4a}(NFE7;2k_=^?(J>53s1Sci#1L=lW?eob9>JA%Fk)XdZpcq
zii$YFtC&|#^Vzv`=g)huHrM_xD=I3=lYGH-Yx@q9j0+0_>Rlc`ehg|^<lfq{Q@gZd
zidyoq9!1bn)zpp-55`j|=bzu&nqB#F>2%mSNB{YDtbFdEhC|8wdvmj{u6p?7iAzF)
zLiY7_tO-Xt1i`(l`oFK^_x$;ETI~0+qenk}x$GajI!t%YoH-d67qM!Gt=W)aoOVXS
z$=TVm<b^=;@xG&{Pj{a=bLRH0X%`o}&n|reTJ!k#*Vo04&1@y_?#yiE78jD0<z4VW
zlc}Yp<-;Lv{RmL{({z~0JwGuq5wwE`G%)_<)z$8U&Fq_#kMp_p$#_;&?6{ft@6S)r
zR9f(IKf|mm8uKb1aXxzVh=Y&s*_oNfJ9h7$Ja1m#;>F6byGk~`_#3mMKyhu<RwYx@
zsng@CI>X~@r*2L^|7rXFzh~!U+%(|X_v@ARx3{;CH}l(_0IgKLv(uQ5kFRy#v@>UX
z?0!BGJ~!7oJ+OSa-`pEpv&C(zzC76X`(5&t6@j2Gi`P`Gi%UEwC;iaunv$1%yzlAG
z=kqp4hzkol7ZiY&!Yt0dzD_4%1H)m1H6aT-Jbs2QYrA`XzWw<no|7f4N;Kxzew(>-
zU+U>;ptY(~rid_rdWCUyKU1r|zdJig)qBI{&CCy`hQ}q|+fxZ@?||l=J32T(OG%%d
zpPw(6{rTD1Jzp+)^T=9F0Zq+3EBM{O$eeL+k0rO54rm?ko7>y_KR-Xex%73|p+kox
zOfm%W^76Kq+U_oUtE8-a_|4fnTQY?oAL~v2@Zg|M)Rq%Gn|P(oK+U3(S65E%5u5l4
zROc*NwrtjEX|o)VffkmQ7gvYt=j7&smj8vW3fY)6RY~b-@Jz1x1*IqMo<Dy+#*C-g
zw)z{xgV(RQV`NX26%{>t+;6{)BfFW6_t4FoGiRA*PntC8kbM20gU07=k_-O?E_O@I
z&p!`p-WSeKcW_`ZGc)`1^Z9&+X9hn`OjMS%tty$gPW8P+<=%D5?tMpY-=5uX_v^$W
z_O0pX=bf2j8SMN{$=o3Cj)jb@?9F|(*7xq+W7zZUR`!;Ri-&f#c5<}y%Rd86d{|mq
zUej~sT3Pn?R{58%$3~`a;&v9L&N9h#a&ci{X6IYt+|GApP2}Y5_v@skrKO{`=be3b
zcXwxh|ML9%`*!Tw74=45LgK`knZ}?>6SUh(?C{&d!a~p@?1j$lL3^u8yK8w5E0~*K
zf8*KN*LUpLu{KaU|7X>r#fvv?-MTdO^t2;Kj%)z!_TiCi+PrzQ>u%6K#%nw8f4&}H
zpL%wdsf=Zji}Q>k|69l_{99Hlvq2a5GsXOk-kx*QD0{kMYsr@vfzQs)E_Xk!5o|lZ
z`1v{TUV>F2oqe*_msSR=$5p>IUFI{>$<2-J-Me=>F*^hl;`^U{<*I5>e_wabuJ+fH
z?Ek0r_cMHW(9F*yAS&9retrJF302mM7B9}cw1ji2R%p`MS*8qI^6%Tl?~dJF#u$-0
zOSQVX8Z?0w5(4Vo9lCyfx|;8-2XEijUQc5X*eQ#;?_i>|#+f^Nl4_y*RQmb?(+)k~
zSNr?N@B9DH3H#d|>=M=9uyG^fgY)+PRTLEu^7JhCo2ymuf6EpVyMI5DZ*9-_Z|9Tk
z=;~S&wKWUW&B!VK^(B+R$jIo^TX``tHi!Lne?hCB3JVLj&zb!>?b4-79v&VB^0Q8?
z-o2pM-NgmeTi&y0Pgl*pMOl}Z@#fyz@({E@==?leP)@pE_nTK-TwKaL?~Jg&P2=Ll
z$(`3#Cp|wi)0lzv9{<}XPeLv|?dX_NovK#jH`i+FnKM3OIuQwM{tesj*Udh2#%D9T
z@%w(?djX~MHYOkc^!0kYu)KVKqQsFSN1nV+J@fjcb^X6RM}M`nu<ZN&&idE4x83vS
z%irFXtE{d4y07hEa#E53&*3*`&-^}I`S1{HcUgS>UsF)ajg?jOXUx%qSFcXh4qpdq
zQU3l0N@NdjY)sz%wdB9Q{ofQjl}E2%pJwK_N!a-J&d%aA{(^a+5ts7v@7DVnG&k4O
z)G&Z%j_ZHlzOS=Q)~@CTmuP3ll>F4R7?XUbm;QD?TbkMVHx)hg0!^QS%033Iur(*9
zYKNb(w*yr+e}8=iP0%Ykw|xMuTrYg&^5@T=6DLk6=<4=9KHd*%Pt16JLVDGFvs|g@
zZ8;A??R6!kCcn8>51&3g>Mmc)B4U$Lzk8j%Tio5t%Y2jn{`#t-qGC|}EeDh)4_G<B
ztMr>|)jEH^eEpw~?4T8>Mn;qB|2&re^78WWNA)auOP$;KK;;%AGuwrw-r_>S!n)gb
z@7#HDM`1E(A#9JN@ruaJ%jShmi_W^bO7z>eZ$IM#XCrM;u}qu71lfH1!T0u`Pp9?W
zo}QY@dw_wbyuAGJ-tYH}&2n$0gsciV$<PzL+)uJCQKI<yIny_9-kjO?{cidEj|bW1
zBV^9szI~gar;S%SYEAv`x7*MD{bUE)dK(lReAW!akdc+`?dj=JivN7s-#&N8jvW$_
zk&(}KaSE$N%-J5hyX@HZ`*qn2$8K%S?ygz)TJ+iTx$5fb$17eeYzM6xDUK~G+ZMPz
zFBa6GG{0MZexB{IOG~|bZ`_D@{ORfGXI1R%?92v#{`~3r{QUg$+xf?OB#(W0d6~P?
zH0YYhv;F78)<#L%+1Wk&w4?Ab&jAUuoEaNyf0rd6?~^?ScFykI(hVEa&(GT(TQ*Zn
zPA+fCBzyHD{!8`tOT7*MRJ%@@nfSd=*1G7y0mh`{<dw0z&Gzlvm$v@)Lg#i5Z*ODy
zf0aL<P6w?U++Fr|k=Il$lZ*=r_dgUQB`F>6lRbR+@ZqGtOFSoo)}fl2P3scX77`Gc
zu>O1Q$w{g@k(-|Mt$Y4!yDB57dK8bVXuMzlU$(x!{?)a$+zD5gpQ(q8d!AVpy829M
zSy@?2ON&AJIT<zoc|J$GM7i%=zj;&gu)z;dpD}E0RBL}fe_dVOmDS<>R;8~#T=us&
zOgSO2@9($hZn-O2S65A(I<@rrdf!uhH#esjzr3UhDmv``ehCH-_SyY-z-;?bFNjOV
zs-(We@fB<>K*!qX?P5F59zELn>+9>_{dKi5F)^QV<M-FuZrr$$0n{=%aNxl1sMU9(
zR`SokU;AD5a2xODGD-8PbLYlBXm(=V85p45bL5E2s<5?DPyTj4x}CqDb=|q*s<kNN
zrv;6_tE#IXzkTcL=Em09*$G+(2ikTEYI|Jr)}J_I#)&Rb?HPv2Y?Iaf&AxBmy7lVh
zFGazi#dxRt`ucRDwsf4FtPWcA_~*}`Gu4jlyizH>LatBDKuMZM*6Pc$Tp3x}%7?Au
zGwf=urfP?qUH|`m|9{hXvCrr0|9zgvIe)qT{Is8+o*uYbX}tFD8#hm_uMdqiG)~O9
z@i%Vjj2Rhz?Ip&2eSJ&c+3)-N`#W>M<}}~#uk+^3WBB>*wob?5#mbC~j4UiH6Q)i*
zIz7IwbNO=h)6;Z84H}=H^>6N0$DAwwf8b-d)$|Y{Bh7Zbg=ZpXJbq$evOV*h)JeC@
zH0is>#iu0pKil%qZ1&+?jcvQnPMaB=RvghGGfBqitmeXEuiE<h9l!7CwVs>)sm@N$
zRxWn_`{%!E?%iL#dR_Vb_s<QA)pVn`Evf(iZ)rW#q9DtnCmtKG&!25yzi-wAE=8?*
zzrVlVT=FtVNlEF)*X!}#C5FpwV)j;r-fdat-Y+Nm?(=>Xt(s4ff*B@KCQ`lY4r>UT
z=ihUQkGH?Sp><ER{Pp$m`a#ugZEZ7V%rL0<kic+lef;?c2b)2uzW(3O^rf}3t}j=_
z@3#Xj@w`?nFQ25`Qen4q*Dj;<b21D?#l@h;^}~k`K@C&}&>{`c#6az@5{7$~&t*aD
zv>Yxk^DPzLazW|ja*c_rLRX7L%-il8_4d|Q?<@ZnI5vagtg*3?N5&%HZl#v4Zm+0z
z*ow~Dy;WbmuJo^v$-1`2^ZY#9QrR|vMLaie-FkLg<JsTu_tg~?8qR|@zU%M*GYPbi
zMOj(d$jE3%`Fptqd&9mRY-Ydu^ctv`J#*&Fjm_!&zrVdret4)g>TUe4l1|XdnH4KE
z)~s2RaebZa`aPe#8vk#(x4XPQc6S+QXWicF?*%0#OTyR3MIF8jTFqVdX2!MRZ}0E>
z&$TKoC@Q+7_5b5>dCSsQBGdKbmpL}G?bx;J(Zh$0OP4MU+wW>QpP8L+L;86+z1UqX
zJ9k?4_4R?)lRPc|zP#j_-PE;<&g>IY4WDwo`bdW$*MgL^w5+NBf4yGMwV>wv-E!A=
z`zt>`i|Q{fE}qKB%%;&`RPewd_3En7Q-@l)r_Qhc7YQCjN_}=_=BZClPfxwOyIlMF
zx>)U^`b9|-_p_gupSf1YYmveG`K7O~t<>K8<;BIt2dv89-3bi$W}G5l_rozz#C4`g
z=A@`?DJO-t{`>Io@YPSY)!#I}zP=vLaP-h2r`2~=y{Bm`Tej?H*e=lQzL22c!ccP?
zo0yf++w=DAYB0*VVes@|Gkez}jjq|VqZ>=r{N}9KR{G;Z;?aW#7apkMl`=VTy*%;U
z^MlRopq<>@Ih(zvYPCjrE;C8neR>UVppx$_6Gpkd*vgQ57I!Y~IJ$88^5e&Pr3=f-
zK-(jidQVSEOFNdme($j<n!z8weLHsYWM}YlzmMzd|8_6+o?i6q%uJ#0+ARW$9&OmR
zZCT~#XRjXbvE*zuOgscSUSQ7pKezMugIa*Eq8^!MT?sH>y|eVS*xlXb&p{z^c=h7F
zRbQ3t?Bptb-2D22uYR_9e%iA$GZ{c#2M~T`7#tidWs<QV&U0_gPovn~Wlv8{)jn{T
zw`k7XxmOkQrt8Hn@}92u)2@1csU2wFNc6TG#sz+Jt$5^YBKBUIHGB4H_4zf2-re2J
z{dLyV7M1ynT=wkUYiMTntl$3M1ugrsHxjy0TQojN___vq`1_v^k6RmM>g4RaamyAJ
zE2}8o>z6MdzISily}i}Om7h|M^~?KjPCGl#LdJnZ(dB9A>M-4}ztvUKSS{=S*{qG;
z4syCq<R+GeFJDTQ`ORH*4Ky@c|NpP~^>wkq+xPkT`i8#tpKmvJ%^IBt4=4FuUl;rM
z*Vor9EG#Q>*Tn7?YskI5?c?Kq`&Cb6tx6s|I@*0^o^5olc7BJ$`nbJ2N?(gzym;}>
zp32GR=2|oJn_vI=<8eQCtsTR`g9l%I2Q3nPeQoU=`}#OpXYLP&`Rzr1m1^rre%AC_
zQug-NkDos`W?WQq>zC`DH&1Tn%$Yg&_su;!+x&U7Q0A*EEAQ+qZa2-oCi3IQudlEF
z{QZ7EB`xjQ?eg7)kB`;-e!Ja&u3*G+KiOATRtBF+*K843v`F*Rq#97W^*|$Y)O_oS
z6DP*(F5_)TJ39*$?+iUXJ)o%v&{V0p`E=0EKoxcM&-4HPaj$)MYO3~COa8{j#v@0L
ztPl?q5)!&ndYpUG%$X~vs`$;d66NORW>~Xk4QS`OWx)dm2GIQ1*;%F%Qc`xGYZ%s=
zZvOlC@5hfH7ZyK1=QG=kH$Ok0VeRUzsjid!1Cv0fJ{&l}z|YTL_4U=!udg9N6yu%y
z``cTP7w628`SSJaR=MYEk4~F75ws2!<hGah_U^v+`S;h?$M5Vc_7=(a^W%%J`>Fcv
z+qVo8sX24zbZueZE8x`e{PNAs=~v&&?_K*>=iR$^KZUm5xDoO7x3qcQg+;F1Yag?*
zv8AM@PMkOI+{44|SGA`eJ9aFp{O^~qU$2^O<bM3;=jSKSo-y&~A1{A(#q)K=_Po0n
zu7f64+S&Q#Kx@3`%$+;G(vBhdSkJ@1-|w?0fEFs=*vM>aYdgy{`<Qh8o`cr!_cZtR
z`Yue?)$_D-?R@$2<;H}AOhrXSJ8FM#yO!I3+||Wp!rZyN`}WoCJKoIBA2vOrY8Gfo
zZ}j#&QR{nm?!?^MlIdJhVsd+1?%@+BIC|ZjC#(4u6cwHNF24li!T74GT~@cHH7;ps
z^h%qb3om<ojQ8vBBS&0>goWq-__Jr@%nu)~)q9#b?X3K~>=&p;_@p{<+O%m`R)u=+
z)vEsd>}<`+bjRn+4<0{0d~<U;=u8@ZIU5E!zH;l@UnbBxA5<-Y)_2_aDBh+rf6<i}
zuV34ner);UZ7f=zlXg$(+tI{~43Fb|vM+CJR6cp~<Q(hrzRl_9H|5?o`||Z`=Jj>5
z@7}#TnitQZ=<+jqZ`IaacekuunK|)apLoesgM9AnhKq~c?F(yE7pN6|DEJX^@9tjr
z)1O}5xOp=%;lq<Js}m2mz54$A{QUFfv;Td1dOGXT&x*gx=khnSwz6hlTa)<kP%9{B
z#O^NJSpGh))c2ir`8$KeLo9xCEIuCj;pN=wVYhhEqK?kai&Co<PF<V)FMCzas?gPL
zyUX5!s;<n;%sJNOet8GE6<t_2r=OQw<~w_tot#ZY!M;+1?pGJjA2d!scVR`KvMGP%
zhX;%c7cR`&^!nk$#)S(NZ{EC_lAd1t=7!;|t=a50dyF#k^FccUO|!0C@RH$v^x{QF
zYb&d!rlv;Mp?S8|5>_QEuI+rbaoaY%FCUtUpPvJzg$IdAw$<Nq_UzdcAksQvg22{(
z(4e39Jn!gM5741L9(j4|a@I%q)%|+8oaz7MRd3FmJ)3!V*H`1$PoF(Ib?=jvh`jvy
zPGR*8+qYjY)p)f3)3k+xi)`lD)y^`%Un5*GgGJ7=$VGeM>get3tg`p0#KgvCURxuX
zer^t^7uX|jFK2IWUsO~CZX%oI-&=F-^Or9vKR!HM6Te@s!eU#|$45tJ%$l_+<DydO
z<Eays-B&s9mfO3a?BO9+zxj5(d-vK-n>GzJnpyMdr22uwtY3P2dO#ya$NOX-FYdPs
znr~kE>WWkRjMZ^_cS*%h)e6nHzt6Vz_czx-kuzt`T)2GMIZy<&D|T6@ddP$)m+#z}
zBc>Y#Ixyw6)f923ds3;368``DzW?OOlM6F1FEh!#H6`ons+U$OiY*n1cXpL_gBsrz
zYy9R~y}7-8eMs3WLlcvf!)?5v`B-*-InesT($r}-X=!O|;`T~4%rs61CCW>eE?HE6
z)7e}7{o1PN&1t@+`sEDi>FH<Ap7r$he!PDFKhWy0PGR*=Pp8L!`uF?&=FH1#ppD#H
zv#(b??lu2(^!cMlhn}3A%w20|ntctlhH_2Z-dT6<#QggDx_#nA!C$|AMg4aWTYC1<
zDuI*B1<p_Y_V#x1von&QaY6n4f1390wFRx#@tmv{5gq;7YLC}?(BAX4(bFeP5QuG8
z`lqd;(xT|x_QHziW7DQ>+m;0{_XBOq<B_!r$zGG@xi#x*m$G{wXhS@ooXv{THNLaW
za_;O1+-n=Zzpl1V&i2#<MdyyLu1l+KFLLE}a(3RDWNd1hdTmYQnK_om_kUeWOG|Tc
zae46i_31WV=`DRPU%oU<J0meoKmOm5jdT4smAnjEvvzIdz8cGyFJHdewd6wq<KKn`
zhChG)bX`d+e4$y%EH*E>a{BeBhnLlycpYoOFK6@M(o*j^w$;;S%#biLGFlP7UM~4q
z&%}=>Q$6m@KR<uZlg&&ub2^>}xK{oLEt<Z(+&?)Xp<(sv*TUDQgo(JWoxOe6sms^q
zpF4N%*|)d1mn>bHn4CQMy^@=k7uRzC`C;G7@~^F#x$9kep{lB?ps?`asoLQN1_le_
z_Ewo>UScse-kff?U8F89`su0V0!LF45*pkVJ1)LBVe(|>m>8MzcXuWp3Fc7LQe<au
zcZv<YdinC<ix&mm-H$tM&CbZ^m^=5baDQ|}#0Aj6TkO9Rmo5d(%~{PosfH_%3sijF
z*znL;Ju5XmJvkvkfpe9BQ-}C8mHAFn7VoY84%#R&XYO3k=G(r$KBM9|4#gwfPg}k0
zw&&b*Dl0Qv?ACj!RO1or)lI41JUl!deSObPOjM4Dh*&Xss*H?`ilDB0^|v<<@9Zpo
z_2zQ^zMpLD?Cf#1UqfZx!}f7i-|OEW=fn{hqkly`HXuL%G}W^1u*S4zc77oVi4|Ml
zPFqotb#2W_&`CG*=gSML`z`UEZ3YV9udlBQi-;WATm8L6_7QjTwKb77U$2HAIBYv-
z@7}#PcbDhyJpS>hc>IU6=J%&m?+@7Wx$etXA*YT>6$>Yw?|O5fk@?IFL+86p-XS%n
z+1Hk2Utb40gu!#N+Qps4&xPKfP~>`ku$f)PzHZL9x3`)3)j7`0x1ay;aQpOZnU^nL
zg3jFd`}_O!?ERH+F9=Qjw5|Hym;YU6D;F<1rt5X?*fBO~>DkM#fr`|fJ9lpSo33e5
z`^yBB;C#-z^-2i}2m~yv729HbZDaEB6DLnrW(9>$v(6Izwnx5xZ;QYp6|JjN&reqO
zzqC2sf6baT2FAvVYkz-xb7P}&{9fbqa|T&gG(hWuq)ajn>?nNvDVJYdPOfkLdVQ&0
zw(9EYHeTstt3p>_(cSdv$M4^uUUf~4&Axs6Zrr*hwzD_=sBPV!im<g&tOssvO#b-&
zdwBod-R1qA!s?G6J#u<`Yb$8$bYfy+YhPf9%*BfrL3`GHXPXs%dg5thY+NcE)LQW2
zfnyt=tk+_<-WS)_O0N!E3p$&JC1A2<e0=<|Ug_m_$IqYVmzS5<i{IC?f4}{=Z{J=e
zo#Eu<1Z_QA<jS3soBQ#@hX>c=>vcE0U+mt0X?uQrPEL-2p&@9Y5op@Fq44psm9^_4
zHa2~~SM6UL7ZM_}e*Zr!(2+hzj=01w_*LlNz1cv{{{5kSpd=(T_1UTPii#b--0$7K
zJ$uO#70^JUjg8HX{q^>;)@3Ymbp<8w@5yRwYrFMG9PAWU|MBbfdQV^9)YH>+89<va
z%FD}jbag?8XqjeRNw~f)7L+1DN9q+kblQ4<#R`qQJ3Aa9r%NmfT^;6{wb-CA+eFH5
zzMXGOjEq!on_I6GBmee;Z|>|g=H%q;k+YTZ_VzA&cjsgSBQpmVSJ3toRY5(Al0Zjx
z)c*daYGpM`zW$G(t*tF+oBU)o-;6su3Kxp8*Im?!-#14ycp0ch{`K|s@m^{385V^~
ze0+Q%Yon$v^PN3u>eQpx<LiC@|NGn6Uas)(@B8}8dn${q%HDVc1qtQv`N-zx<^~$H
zHNRgoIqT{w!-@|H@9ytEzb*InhYue>ZMc&6_hMJS2hEO5kFT5ADXd=f>51o|Lx(<m
z`2sp#DIz+0^2CXa8#fx>-CZ8OzHVLAR<8Q`deH8hC7zQ#{QS}`FZ2ELSpNTm<@4(n
z#qX~>--8qrNnWfEUcOveQB`I4vBJ-<@6)H#`r6Z`P4mjhSra8EE4%i^%a@wUZao1a
zu7S6<WG-enwI*`&mU;Kr#abV|bt|g&&Ev<5C8VXb%irG%J#A!UBw}rCee~wd$k#h#
zcbA1SEG>V3&#R=QWa2H2oI72MG`Pid0vJ?{jDmEf4U<}!G}`&)!%n}uzkmIg7Z;rk
zjf{do?L?`^lWksq727p^-n?~lEDD`&ZpoZ%RQ@g|_1l}9t-o%Dv9;FL|NC}3-)pK?
zsEEG4{?mVde`o#t^768%1L#1UMH*e7p3kq>YWQ?BeZFSbB8~L(^FkS1<KyE&)B01Y
zzrO<s78VwIeSLLxYM-pN*2|YKv#J9F1GyITNSS)+-rirof6@B&>v<%NTq-|2XpH)I
zull`a!>8Zx_iJ}8()jx7YVe&qcdk5U=aUKG;o$)-_13hsw2Z0+g;njZFM+4$iKHjm
z*4=BZ-OD8;BeN!CLcj1wnMvRMj|Oqsub<#mc-t1T1Qs+B@O70!!{*J#r>E&&-W3|M
z)N5)@@*L3o%-!APo&Ejn38$uLy12L`q^2&tcJkDzL#Ix4J$dqkDS3u<x!$>R=UzQN
zv?XxL4*Bxu=VZ-tZ@Jvwmb>*>x1^-x!^e-E!@|Vw*Z=<;oGc<bedS6`{r!K84!7|>
zKFn{Qa$$kvjoY_hTdjG1>c_{&g(W2^Pftya3TOVj?#t7^bx-dGo%?Njs@kURPen~_
z?N!eN&>Gm2Cr_@4*(nqp9K6*wJUqOow|8gB%SlnsUcc_{?BtBE{VMwF*RQOfpzS#?
z7WZ%1y!r97v$Owvy&fO6|GBWb-;oO!CivU`4auGZ+D=qeRdr`yZM1H6(45w<KPtt)
zflK^VBHQok$LwIR`NRCz!rtC~?Q#9RUxbbwI~J8%$(fXurS-w!r?-!fiiSpqb331)
zxVU>xj?T%GCt2T}&&tmB2KoLJ*JZcBM|CkiK0IBECd`@zYJF_!d#bu!TtBWRt7lP>
zftlH{qeq|4{QB<h?&V+42c(J#3Le~9{CtLK_O!4?922HZW6MyVAG#`JVd?8@uaa$T
zZPU)rTWk0H+uPeMt*wc<xo7uOe*W}z`s~@>Ute8iv?zTg0_vE&xv}x*xA?rPtEO7L
zd3s#Fp5@>4Kd!E>g|Dt?s`<>AkRP*ck;ao}&$9mh;p*C~A!qx3(H>Ay7&P_KsdOhN
zrVj=iYs89+KdZ|H|Fgbbb8(UDm9^2+cNRYfolbgwo^9mzJXz5Cv=5d2>YH107i$#S
z>lqpbzP)|nLcr_O$BwlLD!W}+6S;Z$F^xEx&dyGq$W1N!`~OV(@S))A-tfq$zBjZp
z^q)*t_h-5lZZ+F1*X!!4P)3WQCmiR_or~gpur7A@iF4=N7GHewyVlsm<jGm{`zbFj
zEMx%nwHSD0EIzC>w6p639hk-T;H>%mGvVL2->+j1IKIwa^W36}FMGN_RdFi1c!qXq
z&+qH&J8;<kSfxBerCH7mhrB$!{Jmep7T)sm@K8`t039osl$^YEU5rS{(ZwpcQ&iru
z@k)Wt+B|ZsS9)vT(<e_ROq!%59ME#=)~#6^laCiYJ0l4?zNezX;@Y)q875M*Otahe
z?yX%K_2~7rwb2ZB_Sf6r-#B4{K-Tqjpbmhir{|F)M-0-=NH7=~8+Uefo!b5`_1@ce
z6P4XRowI(QA$$7F85LvW;Jt6>UjP1h(xgd0UaemL;=)4axmKl*PE1t3apT4c=e$q<
z6g4!SE%lzxw4z=ek)2yKxNqLPdEoHFtVch~|NZ$Xv^`LB5~!?B%F3FRKONM~{B$ik
z{~>7C>66c=rfNTV_RJ{bg2LJ*A75Qv4LXz{YHQZiC~4Ks-GPhUZrr-Hsrb3yrp=oT
zO-w@i&(61>FKL`s@ZbPrT;<cLPII@fxC7eFzqjfus0my9>&wIS`~N9fSw-D_wmEpY
z-;Uk8Ut66Cnrwc~NLAH!b<N{ry)u?XEd2cZ4<5d)bPc?+x=P(|j)Jwd^?luEdp=I@
zk2m!5@mZ33dYXlm)v9oHUmu@_|997&d;I?W`D4A(pu>^676}LnE-YPYxW51R@u|m;
z9Qp9L-`*(YgupD5%uiP=xL<$#toP=%s!L=?cQ<pw$45tZ@w!Zz?NxYtZ`j%>P)lpY
z3JuU8F{stw#w#shmLtK&#`bevh>b63QCZYht%C;-g1W~yZbV#L8|{9)Pj+S4TB(&Q
zR~|WXWQv!xYbR)3BWRtuu%KY$#EF8RpPyH^w46Cn*&VcMPcLSNLqLE)V`Jlv-Mj4z
zXEao7eEIU_!v_x>=G)bRPV#zutaq_%x7aSe)ggZ$%l~Ic`1a-|Xu5623<=Nzbawd~
zh9~o5zWjKy`1s^q2b<ZG6A}*0GR?lRx7s{>U5uiM$&_<*ttZc&yLPK>THO7{#zv6l
zySvMctG;BI<=i;%<>h724D$E)_tiBuJNN(pH#@%WC+m;<xxYYjG#?%~{`>V>-^s}d
zwA}XFw{L4=b_Ts&yySJB-M>Gemd_Mcb#?Uz4=<SitopaVskzzvpYwTp=6^qfXDkhs
zv#D6X!os5Q>(?)?1q@wt=gt)p5?XXE^YSv^eM={axCZ|FdA?q&0o25I4HQvTQE^!r
zwRP1kKTsw1_4Re_+uL%3&zwCg%FN9C6<qngy0&)q`m=|&1<u$Z>Kd4Lf8W|2J9la}
zTv{7#zP0A&rqr&^&dy&k%*@PB=a%0KoE}*f)#I<^t=oD0?yger?3ePfT5o<ED=0Yp
z-OC_iZf*`bQ7fDw_4>Nlu0<NBUa#N3ZpO@+nm2FW1aUt+JS>`=oV<2v+b0%wcI{=$
zmPPH)UhLi<rWdzo#`<^9=hv_MY8|^eOgHuBrqrlX8Ch9Thr*(wpwrLJ&0Q^OynsjE
zF6Q<3pOJ-P#~weAy>b1uXUa;MK%r0nRz`RwuT-^l{rO&J_Vb8)41Xp}n2>(W*V|iJ
zORFmjypSj4%~}p&VPVh;{B!5}mif+J_4uKXu<*|6@9VBz@>qJ&E%EWbvbR!VVq#I-
zKL-Z|b@cS8n3{@)hhG=!KdW`>wXW9wJ9lElbfa44&65KygUr0t!p19=p{p1&uj|vl
zJw;Es($CFV7`Zv^)!pVv9)5n$Zfs0WNlUx5r}Fc1KQSL~@5fJ0PL7C-ytpE8an1hA
zH*elNa{PGkVmIEk_n*%;&li%E?A*E2a^1RhPj@*v7RIliFhQV=N79M)hlSvI#mfI7
zI!ix%z7?f;tj6xtojZFDNX~XmO-^<`KhKt1r~aDUouiqHHx!C*xiY!6l{I!(iDrn8
zlSt@Pt<Z|!Z?{{PzmrKnKkw=7{QXCd9BFCem0ol)BjeJNlf}F5?`dv!Ua2y-a#iT+
zWm~&1UY;>~cJ^7n`Z)_1Dt>)^{d{=b>M-43UtR_;*`cJQ6tTPPt?_HnfMCweP3r$1
z2i#geUBF3X$tBhKP92xhQ&U@K&jy`dtfHzaC@XvR=H_%xUf!oKE-tR9u6}KGM10oL
zrKt-iB_$^(&yC$E=G0*`sfJ6j>&T@`LB1}*K|!C+P7r(Qzxd*Uiy0-dZ30drUQ1`Z
z)oZ!H%gx=*)ZS#HrKs5W<;$0%E)R}C$-f^C^S4SpmlYK~dTFWm&g$=ZmM*GY-s@_(
z6i;30leO;X?mm3+;zZE;j5lxQ<lpvGY^j)a;DCdWurT)>#y5eWwdkOOYQopYMMOtW
z4=!1>LglB3)0CBvv-DKY&9goI?(S|*Ztlb9&hhoSIe&h3_Nwj0R)I&Jf558&E|f|v
zn&R<EvqdAgt*y-@@6L>4z0#BC&OLjyTfDQc@7afkhyQ#$F7GqfDm1%YPqC$9&h+Wi
z*EtI;^_b+Z=(5w$#N^1$o0942>7bF-($~{e<~enwfBODiT~*aJ+jC<_2Zxwm%!!T3
z$1^T0U}R?J3%Pz-?7X?BU8{iA!u9L>=gytG?y!JU2tzxctdgN&V6BXtoZtSszXpbe
zi5C_)f(|l~G)|lHdKu56A7GEomNw4=t$*KD`g+;xfEEGK8&6J72F+01*qCf#WySR2
zAiF$hg!wL;8rRZ8D)Za<WUHR(m<L+%$y$YI?RMdusII8kc;4=J59C}v<&(<=7Tw^J
zw>xukvieNB+Fi3Mm@F(UL95aJeO+JwQqLk#LsaSKmoHzglyc}#;ghvGk*((y8WSV4
z*u7s(Lu18}+@(vG3Q9|#o}wA-rDzl=b#A`>`qu(SxS!nFS<Jv1_cZ6)n#js_<*tQ?
zROV0O;S4O?ntOZNnl)>JGG9MB+6_9*yyD}dpiF;`z>Rly7PBunur|rp$LEx_Od!vu
z!xIG-Ic474V>xf$JdG};`12>j3ko)@yD#>LHE4fbEyK6>_vgQlh>3}@bXV?jp5(9C
zBH$Dvk$Y>)!3!5A?5+NuHPyc2Lxb;ZvzHoLfg+%E+9I&%(1z{Xk6*t&J$Sj_!?$nG
zetdkqv!^HJ!-In=s;V!oYyvr;>YPC5vf0_$fzAMdo}Dpq)~r*TQcsu2&eCY%GJNR4
zq1YmzzpkT$W9{){$Bu!9;y{)9t1FtbOfnbsvC3K&EzxrlaaB0ET)>G#abC1())kFw
zpFvy7($35XJaw_-5?pF~{{3sE9E+x$oB>K#JF36yG0dDf)9U5_cKJF56_qC|OAj47
zbYoMhx23B}i-5kGr(J7y(d09*wEzOCdB^)?_xygh8?=XNQ`%XnygNGr)BeiZR7^N<
zz#;G6o|V&B+1P{x1U_7`;uhC?a+u#<XY-C00jCqW<%%wrpffXSe}B{6zPgK@PbT45
zk0fX*U)0tt#s|-zySup^3x3U^*rHJl3Y$2NxVX4oe2yH7EJe3tIRa1i$lK2gT^+_~
zQ1&L`&)>g{AHIK2KQqJ7e{JxD>hJFi3m>_}#KeHk&}(MnRnpN}({tX5Ls3f~lnbVI
zxh+0;?wsG>eSwSJ7-XzUJnnM;@+_4TmzVcHJx%xKhD7GrT_uTUW*8nhdK7fd(lnjO
zAii|v7J;e#cgn<_LbT*-J}_EZTFO|JbTl+DL~Y3kTw}$+$jEr)=+VL-9};hE&*wkz
z=H}*?x3}wqmhpUfaWQ0l++Lsa%Z)(m)4CSfeEcDuzsGT^mj6C8rSt1=oELYxC+ox!
z*kE1$ZbRl}wOiYASF6oqaC39}@#6<*5yAKS_3ICFv<fUrnxs7+q;SRz2@zLCQ`4!6
z&TSd8-hO^;py{|>9BU6r+f;0@`OjLnPXH8dE{sCL!j0|K9@0`$S+biqZcIGVA!w3)
z%}0D;sMPoO_tXFX`wMC}hR0R5etUa+@%r`gOU&y2ehvSc{`AcopVQNHxAxuNUEVKi
zU6wKR>&wgR+1alrvFbDID16NJ{M_8d(cANm<|&(*i80vP?hWelvUv|GGCG({GA=MM
zsH>}+<=t6Ps-v#nK4l7M2)slvYH7jiYr3Gbpk6HQm#{9=0VRyf{`ODX<?A$pm~O2M
zRtJ?{b1aKDY}o=jmda)E#TCbOb#+0bj`@4Pih;I2{(L$;A~JI7QO&&pLPA16-fTV}
zu`!9&&dyHN3$&AovEu#S?_TN_fy+QE<j>pxk6B~}byn6D(0QF@@9ub(m2JCr_59Dz
z&yACh@qi8&)n316(P0g3@ZKoM@dJ|Pc`_e9nC9Ntpm=$?fBL~D*4Dh!ckax&xjB7v
z!a=4<lO};qTy*b~Ie6$0Q$>a8+R)WuJd#E&ckbK~QuTaP|LD;p3EL_YM@L81Jni@8
zuRou+*Ds7-^rp3?Ws1emDV*+39bU%|9%O_zNCVecxw*N4Mi-wvNpb6wIr;JNanPnL
zM@L5%Ha5^XZp;1Vo_eREwef!4?_SW_AbENDtv>Pb^7{IqL)N)3UAokDCvCA?FKEly
z#fukv<ZP|(=j2FBOYeLX*>!7MZujQRo7Wu{5S^kjA7u62yRzoy=3(n%PF`6V+#P%T
z_U+lJr>B7?crWcL&7L!74hIKE!kHO{IX5@C9$O(Ad{2vU-MV#APxbWlmMmQ=nk`t*
z%*?zk=cd!)HeOC%UR48wfY%jMwL(*V$}7$j2Ite4H*VZ0cyU2-UF_~<_v&i@yh?K{
zJ#_f+=dGrhmsCJUSSTqgd;0nwy?Rx&y85?~efz05hg!KAUOD}*%(}LQ(?%vZOy=6P
zYoI-v3!T~1&du>WJx%xJ{r&YPn?#+aSp75);0VmTx-!_^SI0Z(_@P5hda=7c+{#|>
z`6!Yr@7|uyef#X(+}xs`RtoP}7r#I5&9>N>n27y#whYSdeL7`I+ASK^pls5j5gxia
zOm~Bgx;lHqt*zP9SNwHsW;3k)RZ_|n<mKhnc}v)7iXN!&aGIiBU0n^TdF%i03#*Kq
zbYn~AWufne>E~qFcqBd?;q+Ma$g=vI4rr=>bNYEU&>GDruh;KaQ&x69KCyGrq$j}~
ziY_~|E-m3?2wxv}Rcn9kZ?gcalgsDLlan^jJ96{p%nKI+rs>5-Ju+*32b%OT%e`e#
z`>SMI-d!%6m`~|<b`+|ps!sKiXXlqwF))}g+dO}oSM{TlpajklxDLzWfeTS8`wT=}
z6>V*8<14pjUFG2AJ$mWVq!%w<2p!cadEIaSPeEC^`RC{7;8miaVa7i{KhL*J+r0sl
zEqWx4y-c1(i1ew<cj8by75etp){mb*CtqCT`s(cm(4jy1_s?CAuV1@W<<gav!B<;f
z%nvF1`>XWdzu);r#>St&Ufofc3|e#+nYNPW&faSA1qZJ0T?0B_a%$AIz18JROiTvm
z=K7!ixxSoq-%YVa;A!5)MXq1o-<Rj-=bxq@e{POt@sA&m`?pTwZg_ipJ7~RrsnMm!
zskgV~Cg0eQn39t6;NioA`)YrG`g(PJy#2FtbEBU<|Dpui1`8TgVpzCv;hM<JZPMm>
zQ#|7t85zMFjr;BY&Deggin{@HC&TvqcvHi#-@k*B|BoM_0jZ5!w}#$6apnwYF}F$1
z4T0q3<T-QZfEvVC3y(cM-VfTt!_XsZEmmLuU+L(J$B&!m&zHZxE;jkchldsx78f=o
zIv?wkjef9<^WnpXKYsmMbTMPY_U-96HYBcz+UoVX_TA&h&C{ogi|fTC+}Tlh<M!>#
zi{1H4ci#t{@p^4-bnxah-(TO}dgtWi?5lfsclYrlox+8Mg$v8x-r|umSrPI2#Wb_X
z=ip>?`SRuDgH5bYo;)e|{Vg}^>Z;HL=zSntzg5?7$@%c$Adj5QkC}gKzg%>`v#WIV
zl}Gg#zrMXaeP8YGO{u4+8NFZaH`nTw)CSO){JRuGLqpICxmQQFqKt80`sJSX=tyVI
zjSY=~i`_16O7+%@+jAm3zV_(K;N=z-9~7i|+b%En7Zw+9cU!zLaIu?f*T*BB!gu!7
z&c1LV0JK;0!a`@zxv<&S*Qsi1cD~>D+i&ge{QGuy?%v(FWeaEm_R5OD=Gfh3pv4(_
zvAd2OYURFa_W1GRn|rIx!@|Nq+bSMBNH}!(@Xalm!n@1fKH7Rc?(o5bjiA%6=Gj&k
z{rr^rRja<H#%8W{xtgM4<Hg19$(fla&&{=#G)MqlOXD-oX6Fz4DU*U)1Qs!U{PHEl
z#ul_ftiq+BV1tsp`l20NpZ|gO`ieSO7CdN(`gV|AUZbJt@2^tVK#`@{*Vl0^`10;<
zbZ1{**z44^G_AI_wyyT}_ORLB)Ad3bRMphn0!3USHzYJNX-u3r(bcZqEccd118DQS
zs=0Z1por_qlP3eCwq`Ajh>FU(`t{?-z@FaTsk_VHuS%7almzw0AH8`qXZ_g&2OPHQ
z=;-(`iUbD-o94L&f(D@176*#BO5z;Q?yi~F6{NNQy&|Z<RcsNMdhE{5;;rB2p5HxH
zR!+_@C1pv}yXVi{v$C{!rOkAv*7^GS&NR)Qw(D))RISh#S5^vxhO~|!U;TBN&rBy5
z7nZQFu&l_iFtM<(Fco$6?5!);uRjkuM9Qx2=hNwoFD@=_zjkC#-rZe{{L>dR?I?cE
zH`^?CQSR++Tk`M6txZo!Y3c9hkBp3bWww2n!uGqZ0-|0aAtHu`hMU&!5>S$lj*bSk
zZbH-2(vF>(X?)f2C}?uH`ujW3z5`GgXM4DNURe_<EG#U%)+jqWn;|GT_^MHQdb*IX
zFeew+qYDe2j~qQJC@t+>RAf~8>dM8cy17=RTgsSDXaE0LRr!3v)TyjCGLsf)aIIXq
z5;VrXIxnuN`s1UcN%ONkJwIu-tO$@Y%K<Gkcysfw3}{`H{r^9pT9GL^`7zV!<^J=}
zU0CQ0S{jm=2+FTrqS|2#E@s@=Utix@ezmDR+-|;0Wy<7c*KV<oC)MXC<mC8VUl;rG
z=4SQF%l*|gG&)XC*Uz?n?`iyV{?;nzq$H&eAHEuxm|U?+OHMxAA*h^jZOzT#+Zx`W
zYDY_?xVSiKOU6Oa2*&GxBlWE<EgqjV=S4?GMlM;t{PBwyC+1idgHFpd&%2XwZ%-v?
zn>%PqsPgl(sopxAoSZByETB`hb8^;PlUlk|(z%(9m!Y7jC@B5-bI|=ds;aEU#+!p)
zuV0aJ2HYReTD!OUds1%h*=J{GU)^+TYxe47&Ck=awD>{eQ|9K=9h=!QRp*7Tk9&Hg
zQ+Vk$|HW>-pvxAXpPQSKo}Mi`+rHlJ+O=z-EhbB^#Rr0dQ^2XiYjyB)KhXXU%i?DO
za&mq_K|;s-WP_(my}G_$zF}9(<yTi%cXo7WOpcH;&-1yuDwLCtFYWiYx1f$#-d!uu
zWYyNJs~*0-s%mP>j{KF7lr*gWS2JnyWYCJz<Nfl_54Cc$u(AqDNObJpZ4DZxZZ+1D
z+xb?n1!Vc@Lx-C3_x}~s*Vo@w{(jxG*)wJs<lnO~{aI38e*Em&-l^K*Lb9^4587Cl
z3Z6E<Uvn5V&H3R2!-A@>uRygyadGjUJ$niY3s07B-DI(6?_N)T|MXW^R<^XXFeD@-
zfM!%@nCH*)Q_p>++27YB>eTW4&g}esoD2RLitZ8@5;`<N(Ro6@aG=c7um3##{nfR!
zy7vG3)h%V3_2AK?MS5}nS7cvbmzbCsm{omDT*c6E;)xR;Z{EDgxV2^FEDkj_wW9Cu
z?kedQ{WsCn)O2xkn>1@y*Xq^U-@biQ%~}te<_Gm%Y>kbL@7%dlP+VM{wRcZykDA|{
zh!th-y;832e6n34-MziMw$<NsHrzROY?(){Z8vm0=c<{v*CcQ+wd1%=RrkNlH*emY
zvY2$r9VS>&RrSiM#mhTwH#ev++ffASpF4qiUgqF5Iu*3<;oMy7V$eMS$M@{n^WyGq
zbI`J>2lw_?`^>Qr6c-oIy1wr00>@?!Ztm0H_k8$JP*YobF~j7>?c2sVHw-|>PWt)v
zh1u5E*YDZ8x3j<h`1R}J(b2azS$ZnAtT+H_xrAt)J9iGW<1^>(uF%zgPEFO$xv_yU
zJ3AY+j-bDPdFttDpz232b{A;q9n`QkNMP`urV}`Sd;Wd9s&8*jPScGBIqdPV-p8-5
zt_Drm*8lrFKdRQn)%D|X`FhZ?wqa``9QRgzJ@s@>tH2_qiBEz#0#}00nFr0K=HA|x
zIko=#-ExK=8B3vth6aX5j~;>60fUZy`1j{0=mdDs$(p&hOy1qu$$a41+1Z8$2B1zC
zC_jRh+Ejnfd-LYajeWJ%`~D>-C2iQeS=q{JR`T(_sUL50DY_g51?!?9Lv!=zpwp<`
z`{h*i^!#-1?<&<c&APIn{QW)90zlu{W*4{RM&H_=zy6w`k<p>!$J^Je(b@O^Uo`_#
z@w|7<8l5$3)_C~&=^3=`EPnpz&6^lAb&VDQ(K$L>Ra#b*fO-%6|NqV3mV5gcyL`=o
ztE<C7^)GaqYzA`Y(bimlA?PTo4<F3xl9H4h9UVd4+8sMAl9H1>{rtkj7uQW$yH*#p
zsq*(^5vL9=P-=2n`uWxB^+CJKa!r5U*_JEawFq>k<b#J|WemrT9g~of%Cfx<pENRN
z5Yvr1qCUT-Y2!x2*xhBIou)qX?dC36pa41|V10ga@?#@AYelW;EiEh!LixWnPPx0e
zxpm&20E(fPFJ8YkE_nfJ5}&%dI{fCYQf*#ovyklvvM(%PWbpIz11$!6z0=ata><e<
z32A9=PEJgWjEpyK-4c?PUcL4D=RK95PrYwx5m+Pyj`6&_J39`ZoUC40P@wVIa3bh{
zEXd}Imc#A*#>LNkzDA%Hda-}!*w@<`r=59lppkjTj2RPV&py4tv3ZNo`PJd;iyj@}
z1U0*sJy$r=t&s1zX?6JeR~ABn5{in7KijlLr}|h3IZfHw(!z4D{y*rJj+xfwde-Id
zLayJ^(Ow(9{n*W$k+Ei(UtU~%WvHyI{OtUE|DqxzW%s@(KR!N=*-_BAV1WV?Gjm~i
z`SRf9exR|!RiUeeWMs~KdwaXHw>S0fuF{e>HztC%bIh9M<>TWsb6&fEQ;1p7(_oIk
zXMD0&Eh|@Qet&;|xm&N)p3mp3B_yW&oj)HmS@rR_{N>f*`me69UtfCW_U+k_6~SH}
z9vlp8Y-~N!=6#i)pDkRzyuG!R^?uD~UeKP@!-ttc$Ix!B_?UF&?Aec>J{>xGwDrxK
zH%9j2iY+U2KpA<;%qdeu%HH2Qdvdb+)xv3fe0)#MG?!;yUdFKJ@3-5ma`R0xh4S})
z6`MG5;*w>{9=&=sEB{jS^5yEbRbLd0jD)PMt!J6#cFmh7$8dL7>Em~IcW2%G@ZrNI
zOF_k!6)s>4I$vL34?1B4bYjhh#KWMC2KVmWdn$GKdVKv^Z~eVX;<oC5RwBmkDyht}
zHZwE(^5*8|14Yu(vxSapwg~78dD^uKq%I0u8wJ`OE2bNjkdWXI78bVit8M;08&JRH
z(4j-1Qyq8Sc_i+{5oqyAJdz_&4K!6Y+bp-_()U+aSA!Od+}TmsBX1w4ZU`zWXMlUu
zptCbUgH(ZChYlSAt&MnbVc{-5*C|YqS)Lq$I$euACaJe*h=Ybaz+++G_~mRo5)u^5
z^Y7_wwmb44JSe<r&q<fp*Vl({UnSzy(e>&8czsgy>+9=ZTTKyfx>F|ZBogK3#`f^x
zLl+m9fZb)e$NFToH}7o~a1!Z^`6=RLGkKB59Gl8X`ulz~ffjSFkGHR>saX-dJ#XRd
z6Vd#}#>Si191?Nb<8bKk;g4Uxx-Pz$ke?4a!aQPYmMCbU!B-<=W6*geywYYzZrqSi
zS69DR_d7QzD2PGAzRqTK*jlE9H#au^`2Aa4lTTh={?DI3JIdZl9d748e(+#p8?Urc
z*_#N^P=x6A{(k<rxHwQUE_{3}F+bnGU(Ob^!HxlR1TpA5s<gASzP!CX{l<+OHGl75
zTXp1WwSALPxLvD&f9d~!wb$0gdOJBWy}i91bUu@7oJ!sCK3UM(&4vpX0&Z=~_5T0w
z@5<QSWsxm9Ei0aUdwaWm_ipQH)24y0S&}l%+K_!+Pt9ir=%6UjAwW^(Bz9^*Z6bV~
znsp}%=UWsu{rFK)_WoY))TyF(cbBVMSj_nFp#XHx!MfPp6>qm*2i+q1e11LXp!=A8
zH8ZtB<>G>S`ump`KR*ZB>{s<ALq}Kl=FVbuW;PxL4Gqvvrs;?L7qW;bwp6s;ulw!m
z>EUsqR06b}V)^prk6yl9`P$%!a#M4&=uZp5qoFgt`(IxdJ9Ss->s9@=H8mp1$;nSa
z*(lP@tt}}%eYu6T_3G4_GiP=!T)6Pj!-os6-n+EaThyVmvolb{HBd|^VgZ9!N=nMa
z$N86+^)hK(UgjHIR9r0T8aQRn9GRt|tHZjME?pXS_t3Gq*V7Ub7DS1Oi7jL3TDfwi
z)b>RhUDKyezqV7OYf+Dcp%dej!|nX5Q@_8zA71t4#X<>5NzKmAPFK70HcLPJmIKG?
z`71k%(_`BgfR5HX(kc9N+d+|ClP6AG2pY^!J2geqXO;=4wzl?G9c^uHZEfvIlO|o+
zv?ux|DDAtsUD}lD4O*uO+VgSb$dZsphLCliudeL|Ew2b(?gv`5_v1%JX-81vW3~&|
zuV0__@c*aN`pg#=yYrh!^+w%W8*L8SymWJO`o#<r^!nErQvdF){{HFj_xr|qcXk9>
zet!h2loVS8M7uU`Hty`~WMO43d~reX(W6Hly}hcImNTtNU#<9h=FFKHmc?rF^?wZ4
zMr~c>Iav+Vg}okE-Ft6uHE57k>*JL*k;d^#*}1vA4p~`Q6Cbm!2wu+T=H~Y5@t$w;
z>!+9VRqj4<^vDt9eoRr35repXoX)qM)7U_T7-%>}TU-0<{%_AC@9rvH8NFRkQBiRh
zpX;A+4-b!h{FaKRE-iBH{_$k8zk!+Avh3^YzP!0P`Q_#1pyiTJPfy?a%5T2i+=b5V
zp!2jrh2GXIQSGob4vQ~tsQ>>jNU}OFE9=*h<gP^`+IhvrpP6o-mcIT|rSkNBNonci
zjEohfXW(`G=H=T0uc`bLdBi$x>eQo+%<L8=F9bkq^wzCgw~Nn{LvbEx4z8hrAtyJt
zv$yx?p+io#X8HGQ*6t$E)v>u>Jg<F+_aet;HU<kz%axlSe|`d9!_hQzX5`AR;WC@9
zOcKyvF=K`VsCDP!!g6<4>Eg`G%OIA%L|P-k@(!{_!fExpdwZ)lZrhgj`Ptd5$hWt)
zUfnpQ()+;F_C-fxg?gn-LHBabwJx7DckbHKoPU3QMnp${em=i`T2%c}#goeg^k>}O
zp8xrM{r}l#XPZBM@StJ-e0k80u$8^FLQWl<uIwmGUKO_1tDwN(_V#>rGqY)>udiL)
znCuQ(g`btBWoT%~Q1a?Z=Pc7~(0;f>hYx#tc|E$ZG5J-H^WR@znGYZagcp9^;eF`D
ziH@J2pHH4M=gf(T%9eG1EI`L$YG`yEIN)&S?%kJHRt9U%3H*36w_Gt!0d$iCXpPCu
zn-3p9J`Ac0Ur%TeSmdFjqx0k0?0nF0yPTXHL&*BLxktOjlk@WWrcW2w)6+{yPft!v
zJh=USUHA0q;-H0ow?VUk_x4m~eR}!s9q1rJ?eKLfR#vlWe}8*v@@~?nZ{O5xZRf5G
zUcTz_V_qH}3G+Oe&(F?Y{`sTM_UXlm8=N}4-hRJde;l&H{l%Yt|H8dLpUq}4dicU}
zlKDdqJ3p5~k?(&e&zRwnlA=;pR%ViWE9CF&X)|V=xVyW2t5~-`dPmCX>@3sITPxq*
zGS$)1*^<{iecPfVu|ddPrtFnEf#F>H--Fjh>rV)et8~4t$f4-6a>K@r3)9cfW1V*U
z#*K`rGiT0x`0QER?Af=2Z=Z=imhtFFXKPpDl@)=YJs%SU|LgBNbSySVOiZlg<)x(|
zw{>_yogf#*KOYYB-`QUuzxR_?%Zfd6dtLvVl$DjG%6L9iIk{Y5s)wH+ALvApYh}W&
z#UCCxetUNpbY14wtgB241_l$39C7iqYpq~}_O*N``73I5a*OMME_QkF=1t54UD?12
z#3Wd}uif82e^R796<ah|K})j_s;a7P1l@8o&!*FDF=*x3F20pPpFVxMRLbGR5vX~>
zYQ9rQz|EUCTiV+<*ZeGc^!Tx)VG_&XcK-11!gUjWqAmMfbsR_C&ww_qcGc{7kL2R3
z{gAE1F}urpA0BRh{NRDZ;Wl1L>oT3p%*?3L#fuh!PRIEA`ug*)*W=Uw{`&gn-d<^c
zfB#Zz8^x9i!4p&c6}1-3m?3fK(4iA&&OEsq9=|kpciAS7Kgx?1EdtFX{r&Y7wBRCa
zZ4@KukOzFjf)_JP=GfKF+OfmJM5=e!o0AKj+drvxg04LUEud>_3)){-3%U|^qOyC$
z?lN6ZPfyS$Nrpe)Zs&h_dt2Pt*!b6%m(Bb3*@3o3uZ^Bw{QTU<pU>w{|D_YI*isSa
z`AO4-b;`VXet&;`1&!&1t`56eYH@z)j2RMD-{1Kb6d0U4ca9<F-X2M2W@f#(Jsnf0
ziZWbY<_kKP1+?&}m0SGNL3a5GlP4cu=-kf1!Lh)#Tg?Bhx}IKN=H+FeVT~_ezMMFF
zc4_YIZEtRFW^cH2C+5%Jzo6Ol7Z(@5^3wvHlbd^Mi{{~Q2M)z~{zbQAJGfS)o}LEU
z?J9IWeTH@Ux>*%WJ~NG4J32T_KeC*FFWOA{nwXV!YE9(kE3J!Ghpcp3?l;%N%L{Zz
z-iZ?)e)DWj-p=2@R&5@`x^?S#B#oBLNLOnS5S<QcF@|_;17B4ew))J?n=_9bacOF5
z0+ru|g@s3s9h)>~&Kf<v*bvj~Ye$Y8aapaCe<wF9OG{iojz#X>>pwfv&dw5D?XRe{
zcy09dS5_>6pi@Ki3Z*C2aDAL}>g?I2UZOiK17nUIJNEMwzJ6fLnmQj}-}x0jfg<nj
z?d1-5Fyq`FPd}$UC*HhyV_;w~!L&qs!miTS(_Z`pn+zJH`Ty_lk|j${$UhF6GGT&)
zg9GSdl_STFWxc&?lYeiI(d+9MFA6r;|NGI*$jp`@+uhTnv$?Kyg@#r6JD;+$ZR-vT
zJoV69&GB*0iIXQmC&}x??wV5k{M<?1n?YqyPl*;47fYICObB~a`Sn$(-yDm;w7<J{
z>;R1jt&82g<&=Kxt|Ra6?moRH9-3~B6hHX%^z@(C@&A*~&$Hc<agixLKHk&LJCg9y
zG=>$z&0*`~d|g~zI)Bx^Tspnt``vO-Sr6(dfvzpPxheI_+uPfZJXdKE5S<9>1GIxC
z2F}g3?gZWIcXMXq;kJ`XA5)Kj#=`dfY}=T8{L#aQj1FI4U5(sRVfgIXGtlkDj~;<`
zX}o*)ZpY4@8;hQLEn2+z=Jx#f&R=mG5*Wk6!gL}xwS0YjJsC1kxna|$q;qpDLso~a
zHSr7NP}E|vbqy4WWmi1X{c8RGe~;Q%^YKoBtp$*;Ti`$6&cf32rPUlR#eA6@4-b!x
z^FWt{Bg*$!B~3%aiJ(F6?o-U5?U>x$+-q-tQ7!%cF7~T@kLP5ykC*-JMXNVm{;UMq
z6Qm%o?$qIQLo3{_^}@ocudg1yeyzRv*6E3`p{_q4C0`zmt$P_LDJl8o#YJXwb8|8M
zxHW3?GBY#Z+}ZhgX7>$lMVD02$cvR)XZq8$tSm23knF3m^z`%utv1+Q{(e*0+bB@4
z@7kKk#jgcg1s27Chc#1kE-&*1-BtoRq^|V!wZyzUztv%DZ|tkJj@?yqv9!X8BXFI{
zPmx7E8eL8yAtKBD<|h64@UW=$GizFA=E?N=wa3!u*SZA-35kh`eX0|1+Oq+qng_Ib
zwWYPS@b9lu&~8URzdjXdrivLIT#84!eJ1%UdIiEecc6aR?fm_|YooT7$W9Y*;`n%H
z!js^Rpb4{Qd#9wRRDXNp7#~0XdVKxdXJ==xKK%o<G~|(@r(LTCtEZ<Y$lcp=Z(rJ3
zoZi#ZQzAPFWI)U$kO2v~xo4~2?`_|>apO8?LC`XhY)~!ZrSefnJ~K1($gyKasi#Ch
zo3md3`S}^#qisC#ZI)99*U_6dXU>=*5!<fF1&y4jM_c3HynTD|^5x0;Keawh-@CUq
zb5G~#qi=6-zqu_}dgjcTyZD~AUf)w$Y-4L1DB`+r-sJTU9wfx>*KH9H_2|ssef;?G
z&-bd|UtH+ieyPKKj{={p)saU>yGvz{8Q<MsKmYIV@5N6}2<GJGdU|^wK61q6dLk#N
z{T;Tl=VwWA@!`vtH=E27((icw_uHIB8gp!`r-3%>uUP}ST`=?dy16<c`Yi%ZQzrOW
z2t6{qzCJ$vc%N*{-m0n3&dvsnf1EjcwiFz;ftntlG><5QjtbwBDSYkPHPCp)m36Vv
z*A+qbP3=;d?_}c?A1|MupRc2<d-3w*yPcr%=SylQmkac7+_VW?6)U<d4Sja<`OnYK
zEvvq0FjQ4lRa8|aB}~|Vdu{agNpt7&9+;r$eBt_a{nr<`Qt$7pb#ZfJy0A9d95grd
zxI?Zg?y=CLN&zu3x1u5==XSoUr5a8gigLlvPCh?3*BZ1rM_ye`?a}k+)7Q`2zTI3?
zQxmj$TEN(N^CrHv0ia73Hq`tqVgM~zS?3w&<ir%cJ&zT1*K0*Zg^hS&XbNce+Jl45
zJ9g{{*jrT^+pc`-#GzL1ofRJ!fu?sq%4mJR{cdyG*`y;Kf}q81<<~{eU0ogi@#|Ms
z&<R#iCzosNnlVG7?&nkSOP4Nf*t&HpXga&)LSvD?ov^U*OxtQR?`b-k@7HyMR(&q?
zpKr$iYS|sX_~-m*sq3F#oSSP6nqUMSpWEx!Jbn7~p4TEy9Ev3_>cV|tYa$M|a0+LD
zw!X|Set*xl?$1YezqwXNpPrtcd0_!)=|M$BMM7rg%Fyp09v+U_TP4~M9$zaeEG!Hf
zZ#vk_{<HquJKJ@~fB%>N@%XOg)N?C4PHBp6-XLIPJX`YitjivXJu@Vw?Q)*|cxYWb
z>*k!aXYHEpTP4#xi`Fe^ndo6D?)oz3ecXQgJNK?H_jW!0z53IR`+4tgul@eID(?F0
z(%7rJ)7M}BS`{m6U3Nq|e-C4EaWRKt!J8X~b8ISwZr;54;^t=cs_*Y~t;6Et<m7Ct
zSRS0boELI#o^5yb^>vI4RbO5(8XFsf_9DLD|G#bGM8Q3K_g(~zA)Z$?G7>U0Gz6W=
zv}Wzvi(9k9OI}^!Ja+6@kWWsIPEt}*%5!-^LC}G$TXJr0I#d?=yz1(cm_AwSwhbE$
zR8&<Do;bnL*ViXuQ(-V?&YV-d;mZ#lass*Pc)xu6%$bsIJra%2&d$!>6}dzav|Q!f
zTx&rosjfYHY)W2V<Gpw9o`iMTnv(vXH#R1NRtQFJPJ8(Iy#4V`Vf6)z7c=MQ=dX#|
zyX#EV`i~z!f;NUEB`0587i<0F$BzYtkB@;4g}$~fmfPFg`^V3p3zsZmiQb+!_3iGI
zlR}`qR1Y6Myj1&PYG!iiE4FzxVxZfRLAM?>v-4lrnjPLFY0UP1&u72b*es<*>B6Qg
z4lJy!p*#NWe!owcfrSAS6bl11SQsv@kGGGU)7jZ6GJW!7<=bVyzGPlp6KR}T{c`%|
z&6_*=`lcP_moo9V_3!g}dv0T6<C}Kdwrx`~H4W{Nx8HZ>qniIb9qViA^J|oHqjwf9
z4T-C|-z#m-1zK`)T*|Iy$D4?qJ9j3XnPK>JUi-Ff+h&;M&Jwu|x>e{g6EpMto9kZ1
ztbaAfyRdMhgjGq#&eDv`%+8;mpNIc2R%{V)baY%KR`+LK=Id)~lTJ=jRWdRP(wKV6
zYHjzG^a~3dlP)Z9Jm2&2+cz=aStb+j$=lULWMpS^b8~YWW?oV;EPogC@aa=kh7SFG
zKb*Q=-`Kdgprk~kSK3_c?yged%gg=6@7=q{)bQcs$B9=31qBtQOfnSKtXb2te*O9n
z-@l6=J9g~Q(W9;m0_J&l1e`b?zIvq<6BBc4OW~In7nvF~G&EKONv{t2es;Eb>*B?W
z4UCM0gw=cmjMLAFtl#%*)rCu!gtWuftT+@}Z&v!pPB?I{;F@bsicd|^JaqoNe^vd5
z2acNS7CkZ6)bxDu`nC6M9v+^S?(XgjmoHB~#ly?Hls{VW$;sstCr+Gl$98T5lfbTB
zyHY1DpRDfhb$pf2r<JP?-@3Ky%*V3#_jKQG&bzzIsB^*GxpUXN`F_7%+==7k!*=<u
zW4+R+&t1HEGZJ*y=FGRN&V5~VZs(c#_VHTVw{I6`X6F;pjovopXnR{**pK3cefD9Q
znVG5oCN30@FP(ILWAbsX+S=NWA09fd)X~@Xzj5>CNuk4ivesM-NymC57cE)h!lBp_
zv{FP)PVUf^D<NIMT2miQ4UZFi_UxIGrDdd6e}Dh<y6dZE)r4*94P9CN<HJLy28-HX
zTSUSG0u-vgzEb`2<%>&I)i2}q$*G1vRTgP+g#B(_HC-oCiC5o$u9c|Q(oZu#ZcaZx
zt!?V>FE5+7Y%z)1Rl>P)<;oZL_F6ZnJ3o%E`<c4)w|V|OnUg0^o;Z8<=$o6Hmwu}L
z{!Y=rKw##~nH?P+4yUK-F3nX`R1CFJUmDc;;X}carArlUZDY+o|GBa<_|kPpN5@Oo
zL1%QVi{0I3UH&fN&ySC(kILWPYPJ9O!&&S7rKQ{;naa=4Y&Ywg?v1-@IlZHU<ISC&
z!r|*;4*vQ1dFdz6Hm#YtYqPIiyY_!psIbRo&`pFdUS!<dyRWsi)xg-;IV^0N&b12{
z1d5-Zn<{6tVChm;eSQ6uw6sT{Juvg`h!wxPV_Ea(<ME7ZYi4fAzr8KjFy+JqtK8(&
z*XK^0IPmT5?Tage)hnv1yq;E7Re{DCxVX7Drk|gewRLL83biZqYHr=U`OyCVPksi_
zlv%{~yx7)_KY#w*q>}#Y%S!`8L&gs&iXSpBFY~;;E&smWTH&Z!>(}egGR<bQwYBY$
zvyIyJcJ=ywO$!$)f=bc&`1qB79v*HFwNkgYxBv3yrZ7W7Qc}~wW_It}K|w)F)~ox^
z>$$tT{PB7F|3^SmwG1cDoH_FK_4TDQwrts=bu~6BH)j2*dEPIV|M!_^Bf0<YH)%PW
ziUvvJv<Khb-riCB+YGdf=xwp$DqlT4J<!tKO{u313LZF=ytyIB$H%v$<Ymyz2x)0)
z2?>c4r$Sa2r=+JdH<a|3RDNH(d*{xpnbO+P<xWmaEdnRbojW!`(K%&(eBDpiG94wQ
z(xB>3oHjrC?_azq$N)OLEA!Er%b?SuCruJ!@UK$dvu97r?dorDH1D>=$Hc_EV_(_a
z-27$h-o1OjY+bl;;hUXzm#ROUGJT4z_w8-Dsqek72k%P%zW4jR=GCjU{pQ>C?yLR1
zsPgkO19S7^2b<Yfhs3*PJ+2D<7UR|{rCMA2-~i)~A3qKpJH{q!RdV3h*VhY|E>-od
zSfQ<{sTt%ia&fax>@E@CStbXYSh)j2LR#+atxo>@>}+bCdxQFZYf(Wbh9CFsS3LdO
zW1ny0uBxoOI4XBd&fS+UUotS%*4Dmw_3BjIv}w~o=j?73PE}eo>%xhga%N^`kg3gV
zyiQeByK+`++j8Yf$jjHud}mL4*=t~G>blsix8V6XS<QP#kGhHl?`mJSXno`Vzk!<h
zw?Et1R_{^TUH0~nyL@fSqen?A&m23(rW?KONT;y+s*v<bh~JL&$#&QO`^mol&!_GZ
zJ135q9R-Y_>#AQ}UH$R-{Cd#wJEoRPi&9fl6-`V;o}ZuJzI?g*ER)Qj*QEh}3;+MC
zJu}A=)Zp{*@tNYr%#d(#k?U2fWv}Lgb`>tD|Nn1O?ke^El^P;kFXtb+BqSuX>gusm
z*WSK)!^4nqb5rWfncuvY3iZp|Kg-p0St2O)@+V6}BQyJ<+qb0|KK%WDUs+#&y^qh!
z)Iv}!|Nj2|^tSl@b+KMc=Jl=bT%|UD>cp8dHN9<~pPk*lI()s7sj2AWW4)`VT3xB!
z>*M3Iq42TWl4Z-1K0iAPx?|wYn>S0|N=i!3Fi3RT+8-~sG^i7Fy1?04rl3(2yB`mj
zLA}JV*9(5BtE#f9s;Yvj4b@Wf{Cl9)&|CXnzI(?fD=XX5)^_UD<Vll23o|2UE?%rW
zY4YS$Wi4_2xFc6rhpz^C@9rX3?uh8<#}5uRr@9r3>BsRD7Z<y@x`uu{)7g>bmwZzF
z!;_5@qN1WSw6rFDWm{!oW#uJ*#EGM&we{q->2>*ed40!vrLX5UXFvGz^719ive(ym
zi=UmDIBEas>H62bWMA!yo30;!?8HQ6!=fi1YofMt{rmUt#;#KBy!-olWv$CR3ZI{!
zzy6EBlg}!us)=uJZROzRcAl;m`{AVee9)<`E2kz0|Gl=WG+RPiT3JJbqx$<h*Q6vR
zv;2EK>tc5=N<7?l;@r7uU!B6-9v|!d_;UIDM{jO!mar^R;ghjwc)#!Wx;yo4p#Dfi
zM8`yB_eY>X(;bD%pgG!`8qT4&B5v;b`sK@pijPStsi_CAUl&h5Kkw+()!`d+ZW@6O
z1kK;~Gi~Q~SpmVTroBA7S8vI`F9(`)-jL|L^Y+#)TRt2Wk54!^$C9BT^YSuBe}DeB
zx3)U_`0%8iouzuzZ@%5$YgIb07d_uxQdIl;n(mY5&z;@f+1vSK56v>oUXm-y`#*kf
zm8iI0Oha?CbF1^?SG(fG#KbPOu<GjSR#a6j%D=x)z-fVFGh2X$h=9|9lP6c6IdtPH
z=u#mWs}hd9yu1%zzpnkVmeJ+F<hWnHv&|B}ytsHtIZIbZXG79aE(uA=gZJ;tzkByC
zbl>&rlao{pjExVUnyUTrwEljN?}4*s&P@FG=O^e2#0K^K?aTe<9{Tq7Ht38*le{|;
z%5FUq`U2;gg>8G+(7^EI*|VfyUtV(X@v$+yc<}<XRyblyM&R6<Yl4Ed;lAS8PNLU;
z)<k7xt;)EuVPQ_~iA&kW&z?N-;8qX+QdC|pURhar$!_WOpLaGUw};G|KVN^UdBz2Y
zYki{HVIH@S^++mD4NseUUN?H%iN39=r^Pa7XC=Pcvc=?P<*XSqIEssl866^`qP(6m
zv-3^qn>>5A_S)Smt8DWp{(Kd)e$~8g0jC~mbH6elTU*=2j0_F!=)F~?Gv9Cb3cbc!
z^W(!p4==A(Av#y<r$#>CY{M^SBd~Dc!bgW%xi3l0TlMM4kt0%DHI<c}e^p&t;(6%e
z#f?5bQBkuxdV8l{jg`(_<8wDMGEzxN$?47Q?f%=2<>x-Mn(q?A`YQhU=S(v*Gtj0_
ztvmM?I5NAqyB|J(e*GD<R;R{`i`|utj5eKlGOJ!XJ3Bk)?k>@=urP*(<Nfl=>gw$K
z_U!{*swpBaCDpZLi3-F2===>@lbNoRf_6W)N*bqm<ZA2aOnG;E>!wYIKx6fulhv-S
z;1e}A-dun5vDM3?X_=Xw_x4sFK6}>p+T--h%uX@gsF0Ttm6eq*E-mG@`~Ak4;eT|O
zrn)*iJHMRE?{9BUze&!`?fv%lw*BVq8;x?;_}x`gQ+si7F*|6J<xMUH7nfNJ1QuPf
z$S>tv5TKx;;jv9FCARX<4@13}9SXLq@0>mBTUPw9`@zS@$1SSA>2!5>UtH=v-Ai?v
ztE+3phX;&BMMVjjnVNq$uJnm5t=(&6Yz#Voe99D&7cX9bZn)35yzFf8d2I^|3FkH*
z$I$veTwGiNf`W}Zc36NqCiCXa3zfR{|M&a-OI0&sVq!kLTD|_%Hv6hC9PE5D6Q=I{
z`|bABea}L^hs-x!m6+oD^7?vtJ~<l>dwYA(rj&{w9~A5U{Y*b{?AW6Njm$4DE_UC$
zX1C4NzqM+Mre8W|C10kl<zL$NGAKB>b@JrNH#Q_T@2LO34|EHI%l^8*E`^1KOZz9z
zovZuo%uHnlj^N<ni4!I$+>Q$hQc6lna=E=Nw{`XE)g1i%_0J46SH_pN-_5?g*uDSA
zmzS51u3o=SON6V{z|2g{w(5&OVq)UgUGF{>+?d<3O5sQAtDj4LEna1-3M!z#eQRrN
zZT)h?Z)s5Hv$M04UtCyt=}7OXOV_WvCnhT1+LGCP;=~Cf+e6)Ax=x;+Cynzt70>?I
z{-tKxw3#zGg@uJPGFSfhQ}eyH_Ru_krBzLHrS?CcyuzqY&bI6E@&4pDH#P>%+_uf^
z&)>fvL3NS3`f{)1*%ueFf(F68r|TUAB~5u>Z*T9L#@jmQ9ldfTB>CigwbyD&tN7}Y
zE^;THpJ&T(%I@FgyLV+REiFNdAgA^%U%a?k*1Bv#<>zOh>l6;Pa;Jg{y&vpzJ33bI
zeORx(S0Kc{S@W-m>VuP6oChYWTZK;Dxzp0g$tfWxr)T~Ce^Q`RBF{>DxwyETKk{U9
z9LLI)D=%ET);4e6yfrbVtN*>byZfruy4|~XZ%Np<etrJdNfAm)N~>(t=6`WAFf-HJ
z9`p5wUv%{CEcx5VkF#%1Kkt^7rUojyZR-B)xOH4fNoi4f@+VJy7It=ajj3KDA|fYF
zg?27ly*j(M&%XX&&6oH0_aEZ)aB*=7u{QaYQ@-dF=#XQE2hYyV-n9IpO~nTWhqIIY
zTb&x$MsGiK`LeL0qN0a~$AKfA!r3K0tE6w;x&^xQc)s^P{l$w9+pD{TSpM0vK-|f}
zfk8|sqCr^Q@5H3@GiFGDDuuOCTUUMA*dlP^>{;F5dm9p+TUuHUT)r$kT`zXk)Ux2W
z(R(TkYiept?($T5`R3IsE}G6g*}qEh#;sdPmzH=&>?+ax^XJck0F4Rr=lAce{{HBC
zeEn42Zj;(yB`GN>pgYK(PP@CeT6}x{eYd*0x|!*Bw&&fI0-c`Lz{q^1EHA{gudlD5
zq~uD8aYx6BSu<)baVNjLwDiKoiw7GRnJ+B&mj_KD$JhN-wXv~DDFjubZf<N-yq12s
zQyv;wP+)LvO=R<)JvKZN1`Pjyp0EG#>-GB6-`-zeFArKLu<f&wl2X-7gP%*p+ng32
zn562xAVllqgM-W_Syxuv+415<hKQ)BXJ`6LqvGPvUbb9i*VaUOczdtjx=mP6@S^b6
zPdVk@-rf>YQrE&}zfhepeR}(sFD2)+)RmN~c7C||&c(&WWr^KZqc{H!^V^4HX-xJ|
zg%lJQLB8qmID6x>CrC}!;U|+p_bps$JE<-xC@8p+cd|d|0@fgDwfR|~-Bc~DtyeAF
zVzq8h+pxi4P2^@bUR_Wc`PFnXUH8|&-|shOURH~YOiEH>Vqz-z@!=uY<5S%ir>xqN
z`tHt7P^lml<?7<%@|AV+`KU>=XLoA`FH=xbatd1)paE(i@JO4jIkaPWvdPL#xte-<
z$8K&;fB5p{%4O381qB0Z7i>J9J#ESq2k+NEcjl))Hqlj6WAj?N$;as0B3JG+b1Xm4
zEc8Ea<2(2IgUZ~%odpk>ii(Rr-pXFTa$zVaea5daU2R?bjOW+4x1jMA2?>b<hYvF^
zT(~gx(WA$YKi;c;fAHQtIW{)7jQjg+ot&If3>g_2L3@rsCyDmk|C8wJ>jU*g%ii2z
zRAd2d!>FjLI&|t3SM9GajzvYAa{f0mvx5dLIyyQIY)Cwuke=RtZEf`9+4=i4FN2PW
zO}@0m6J++9wQE5;;Xs4em%bS$9|KkO4D)n${J)t#-}APb-yDtH)f($cd_vbBd~$N~
z#7UEy1eM)Db6=o468`-C8yFDq;mmti*HhW2Pfk`hEO`+Cnjo>Q{&wWn)@(shQC0>Y
zyUvb|6<$}S)vSx#D>c`;+$}0fiiw%|<G0)S%64{gpbmtaTbs!CvbRy7e%Q;GFTo2N
za&MW~)cg<tZOQxg_BK0%hK|mWZMnBW<8mc0FR@-<AK%{H&D|$&-xs*pZDINQd!Vb#
zLFMYTwb9BZCL+Phd?vmE-8A;@?(U7Lr^R?=twh+^*nYfN+z(2Upibd&`T8kI{PK1^
zX1TW#{{Q>?;_`C-HeTtr88ak6Ipg8OhYSqG#l=saK6Q+bmtVjC->xgGBO@X@=GXn=
z?3c4$W$^Chj8$>XhuirNA3n_7+S>Z#K{J0sLPCRX^tObbpPq*Plbd>d+SS$Jhi~7O
zetvGQ^ZvTOpc8*s*w~UjK00b(X4bZPb@tTPib_h0rq5WR$e^U5@nWW-prD{rbaXV2
zq>+n=xVZPz`L*9>GAQ)P+v~LmfEE-uxx2gfNE*9oO!d;#v$KoS5a9v^CbwcsM^~2+
zL(9~uQ+JfSoFsC6e|<fp189Qr$@AyjiY+J3ofG3~b^7w^s&^MR7ncx2%iOu3sl-WF
z7cX6^YGZ5LD&VA|t_~W)y0|qveB$ic+TF|wZaor;Q%!Skg_OLz6Ipg|RoTD$|Nq9f
z7Wy9#`6?9=5z#SYhJ@z3D=UMU8fI7)r@7wm<FdUwZLxblm#(hv!}ss?xwyEN?6|o(
zotxp%?c2Lgm9AK^kKM(^<x3D}nD_bTM>>TQ6A~JDrOh0oqocLHfBkxNP2}c;^mKLx
z4j!JCb?fy0{l5SI)Vso*+uL+SxLD<EDi|0pO?W>^)%(GtM@mPZK7Z~U9WA{&e0|%#
zeRd2E{{H;CcI`4SG@SS-<oEi>&1`;tew(VmM^Qa=W;n2XeqGm^H9CKOJnlCzF`07o
z<?GkVnwp#p6K2iok~YtqBH0vnb@3}sU42N@K0Q7C@ZrPGUBPq9Uw#X_b~zWcbx=lD
z_T%GzdnbQ?|E}uqcgq<IPR#A-=vcMxoVv_h`+7N0AN9q>#i^VM3>6g>9-YB8H8$tw
z+xK${s~xy?D@shg#lh2)^URqu3^tyVN=i!~K7Op+-QC~s{`}nB#O!QsZEYPLP%Ccf
zrWGqRA|fId#P6?5y)}FG?C!L)vmPF7W(S>jb>{5ZjTsjg8G#Oy+pu8+0|RKr!C~e}
zx4^)_3zsfAwe!hp^=QimU(H^ycyaUh`}Of+<xfwEGOV~(Q1Nn`i@Q7MQ1uzs<#{t*
z%+%G{8Ng-hs$Ev^fByM=-kx!R&!jIVSNHZbv-9h1e*5C$VuprwvAdZnCaLWGbV}R6
z+<bac-klwdSFV7Q#kTjCg_EavsU{^QUD%!<ADJ)5aA#jFXpZQ^w{LD485&((T^Ck`
zYQK2(YFZ_)oQ;HYJD=|MzDuRMckMcK<Hn9dJ1!Ys-O09W*|JSLx`ZB{(zrW~nVpY;
zVOPn^AhmaQb{1b<*WA(35tmnb@AJ%Q)57v9)6&$;a&9!}#qK(A`ZV|V_xITwiqbRJ
zM{VU|FerHukdl_Bq^QU!tmZS}sEszGPVBlUr4=QQRtd?-@F=o?lC<qZ&|>w+$NQ&)
zl8~~!eZ1EnC1vGANbCB<IekS%#>H;ElTOX+tF~IU>iUD1Wh>8JzjjTGkB={Po9*e#
zxq-F!Pi1=-6clWIrJ$swwCeLbe`aQ8hX2y5LTB1k8l|0?p~xG%`d$8+Q>P{!RaH@W
z&~N__JWI69SK7th-I*g$?PSfh3)?quHeR!4&64j2{tMYoy}dmjwDIf1r%z3*SFgS@
zZ~5a(moHyj6{-y?khofzoH$(E-4_Qh_uFI<Y90Dk6Piw!pAX&op}Mr~@O-;vukPJB
z-Y<Xp(YCz1T_;X>@a+^96b#&YrSj9ygY5DQ3}SjQ9UndvfO?d5b#*s3rE;g8p9i`j
ziQ&in4S)7jelGa*#PiOMLgs@94}SRet*yDadCQ-Ro2x8xb8;@Mi8NjbTC+D@FILO=
z%-R5r4aLv>*2L|V`v2!Me^YZasN68gxglU({*L8Cifn+atZdGm9fIwAvQA!JTux3-
z7xq?{gIW*$$8|I`9MaO%K;r`Y|NZg~^M6@3P5gU_kMH_}t=!@hrcV!ltN8uW@sQg4
z&(6+n|L~zeMMWjy<RsM}e?Fgw<+zp0K0giYTsm!<e!Sk6ty@_c7#&Qqu6WdZzgwRA
zNK7X};pmFE!)?66FJHb4I#d0Auey|3j)s?)*OE<-9wjBFq^N+l&)@ub=+Ge+hK)5p
zi&n15y}fNw?C!EhpU>NiM@2;i*~acJ6XoRO-1N7(si|e*!i6G>7cW-+^XJczt=ZR8
z3j6x{m>M!}Zd$r#F0Yh{fUB#k=&`Bd!FRJ2S_EESTPw`ql97>NdA~JXd%do4`nf4v
z7Z*Q22U<pOb=_hUy{+J4kSmNs(ZzRCc&k(6f&~kT)K5;CHhFS$@$+*B&z#}WjoPAN
zeA8Xk)Kqli#*GF>Mozc4<u1K>cdMehI{UI^%Op&*L_is#r-x^bWigxYY_qAlH$$Sr
z!o-r2l0dD?vbVPu7Ct_fn$*?R1=^t<5g9pk=EeBAJ9h113!OS?Qd76M{vlAua&=7b
z!Gi}Sj8ZtVemr(}adFX~Hn-Hu#$~cIY%Rb;4J|FM?Rj@6fzBG|pRONY_io?LojWaR
zeiW?T_I!T*zs8`IpaT2bo14no|DVsVpSOGet9?PGD^Hs4sQQ|<^joNg2nPp8#k<Xq
zlarDJgoTy0H*emoU2bLrYErqrGWprl-F<kbar&!GU0R*}{p=r7)XHD}Hh#VM%o!gM
zadCTdzv$@bZ*zXF0-bmZDX=D4`Pv=tm2NM5eC%qfXsD2cL<c*+9H>kCZ3*aJW~HEh
ztN7=i?>}jmue(qp3~EotWo1=vvj(*&1rI=5m>rlcOcziq)y&7Pb48f%Tq{wo)+YUZ
zS$~(VUfrF1yf5>Y`<#xf7fYkEIy+w7TN}L{bjv5`T#w7X3#-yTJUF<c`un<NvmISb
zL$psmpQamK@axOVTNWaFRo2DqT=Y^cK(?r$;J^aMW|O--N=m=PS519Ve1Bi<jqUmI
zxiVcKN50w^wez{Lh6aZd$G#t{zG!P`tT3zl($UfJg7q*bD0W<yfE?G+(czJ6aeHou
ziJqDo8)z`==jZ2%DJd=A-rjzEH9X$6TTFMs(xd+;dUNyhgAP4oSde~x-iHq#R!pw#
z=y=67*<b0>j4fMCKrNE*@9sX$`~K+@=#bxp<mAQAre$9H`}_OG;^%%04wKb<4H6D8
zWZur-|F`Yx>TqU;uyrw-s*|qXZ13<8o>3z-(e2Lea{l#uK5<>TbV;knvhWd$Rq3l1
z`+q-}*YEk%B^A9q(mem(kt3bLj0}6LzD`n|v~?%H;6$|*wm*A1Iu1-!cE7NrFc~y$
z`1|{N_p~%MyI(JqHPcQ{)7`LryZifld#~Qw<~!RAbe<0A^xAon;$mWLr>E<C%YShR
zDGgrkH&w_#H#Zk_ZTgGr>*aZPc|j*xf@UROzI+K9MP=iaY5|QVTUq_7ul)1lBWT+%
zBg49N>q@ur3kJppzE=PF>+9=}ACJp}2JJw7CkD`R_>8-|woa+Jx3^mS-@kvLF@!6#
zYSh%!loS*gHm9Af%KKzl{w~I*?$3;q>Vc-Mt*sA1UAcSt_xH&*v-3~8w|n<)P}^{>
zRVmYlC*O@#R6y4%O-YiotpW$l^YinMe|>%Z;hQ%-+j4Iw9cW-QFg2ZewfxtY%sYE3
zg&95^lg>YI-~a<?4DsY-b<lFtJs*!r8<?B73owB$9yvK#ed64?z4L6Vr~L$_oC9xf
zZ)arq`}=!)V<Y3C!-oaM#Mso;)xW&F%zp0Nxu^5WgMx%Wi(-x(KYsYk8J_ifze(*X
zea)t=t*xnMW+rB6Xt?QfPe(_?-o3U_+j2Vh?6I+_`oh5w5D*aXw$^L)sjW8E-*nc+
z?q*{E4JVyBa|Sf5v;Y4;X*V}FP+h-1Ztp4E|H;Su6m@iXJUu-PjEtHVFIHybm*Y`a
zUtaXMbHzL%$Yijs`MM=bTr8}txXR1RC(fFs)grKH!2$=JxIGavHWdL~+?<?(3`fq*
zwa&h^Ma$F2N2FU^UrbytrXnpSFmPhVg$0cg=6Q2wMTOb3va)tY{rI@JexYMCTc=|)
zo2~J)$NlzV3@i*EU#(srCShLpr{dz?>T(d?SoSt*<)1GvFE5JRoOa33YyX_Nb6rbH
zN@kj^-1h&^=ktd^Ti^TFu3hWl>nr;Bc)xz}o|BW+PxoEjUtgaYT~M%L!=_D>j!H{O
zb;;NLSa@b9=&UXYDXD3e`+9qO*X*5ZU9R_i4-+$UtAJC@r<3YIH&0E~UcJ}9bbac}
z>@9_l-4gTj<J0y(JluZzo2H(g7`P$Cr>m=LSpV-2S3R58>NoeLm41bDhut>0)Y8JD
zqOJ})cyWpv|BII|6Q7-#`Qq~Oei3m{#|pIP;L24K28V7jU4!ChK09{qv^9QrsFnM~
z*|VY5zdK${ZfRk8`C8GrEkxq`<9_=`FD@>&sQRJ-x(|lo04UYHecKDVV6CCCkufGF
zX2J61><>KOC-uwOE}3_3x$i6!P$#Ep+qP{X%Xa-Qd3$T?g{xPm9tG{CvnYKPvh%o<
zX_knbO@)H?>C>m36A}~-9X`BtQ||3;iKnJ$o;ZD)nIR%F^5B633<oBAhJ%)jpPOUJ
z%#d+shoO{tp3d9sj0}$S^z_L0FD|dz%pdSM`zL5L|J+>b4coR&i`@<~=lnd|OTR$}
zXM@IN7!KUKC&$dr=W=?QE+d1gsw!yvET62^mowXh0{<?Y_T+Q7{=Np#J-!MmDlCkQ
zj0_E>udgl4zrXLqsZ*1Z7B5<qke%JV%y%{u1L$mmsxKL!IbG07ei>O=P|A37V<WQ@
zN6qiI+dq8y(lT|bC}=G0$&)8pTS0d+OBkp1ta<a~<YWn}5{;-W8IAL7tCQZ|+A8JU
z*ZFF)cKAAv_|<jSwX?syxq0bA;e5N=3Dc&vc~93<G&Kcn7h(UP!WeS**5@tH&dyf0
zw3OVrbLR}(>TMx)@9){Nu(2r_8-wm#3@T!=`FTgn-_enATh7g<c7FLscXk$M+}^f!
z%iGWA?b%@i^FcrP?f*2~-k$&X++1r=6M#X%+FDvWd>sn|=vdwQKOfsg?l1Kg2Q9|?
z{Os)N53@qj<rh4=9<(w<$;L(|Gc(h}-+%hqMf!6$Os`uM>Egmt_U=xncKEu4e}8@k
z{d~Xw|36r$2FJ(C_siS2O`9gRtMs*6tph77tD>Eq9Ivz)3j>FufUK;pYFTS*>y2%>
z(x8Pada=76{QCO3ps?`Z$H&J(XFq*;cUKxT$~oIC_rk8y?3T8+q*GHgL-XPj6BX-z
zy;OfWPlF+1Z<Xnuy?YDa-Ld@g`Z|BFl&Moff`XWS98Yp`^1UtoA--Nqh05RGn|d!g
zIy$`S{+~ZJkxIt3ze;Azn8Cns=FAz;1*w_0zrDR37!nflOk&@@eHqu*NPhY9#h~g-
z#?5W(_x<8(Yik2-a{t0_%wSXVW5b<qHUEA-moQ9X0UhDKF4lTY#73uEW#8UJK6&;`
z$;?cw{M{W!h8;V1CLU_xym0w)^Uj@?&(6)&UYq>ucK&`vYwO*Yt}j}a^*HL+&!3=W
z=nM?P!ooLecdxn^!VsV#a_RbHb^l|a+LE1L4s-?*X!;q{*xgzD{MxmZf*1GCiBgl%
zjoBf<&M()pdbKuqFQ|W8)VVp9%CqlGo-m=|%o!iepEl+1WVpDvKD@Z7Jjbq9N>5LZ
zp@ET^E#dvWy&E=cIIy?+`-1iB`{&G&nK5GqXuLi&Z~iK|(7m9#VTxujX!qut`2BHG
zO<6ZLsfy`FvE=9H-<%*T7&>p;HnTTx-!ApEUb%AR)O+7gP1V-W)MWgSl5z9&Y42@&
z)6dTX4c!K<bSW$}To=1rtu}9kg@uJj{O#Mfz2l{&qz+xX7FHEswaB-!Q@p|GYjtI%
zV|;x4E8jh3Z>5BUg_pkl{_d{x?{9BYe}g6kHf#{sxpSw7mzUG-vbS3M7`Co3TbKHB
zUYtXn?NqO&U%svgT)ZUZ+kr-Ai-HFXB3!I@?%etCuw6ds&ySBAwrp8*^|SJ#di||m
zYMwoR{`k($;!O)*c~94S`0?@a4`04aIW<r2QrO=3O(~skob~PP<!{}(1xip~zJ6u2
z*;yYF9v=Sd{9dh)uPbgD<=wHcu(Emt8u=0OX8<k7O?|7p=#{4JlG?w&zH&Vl5*7xv
z8$fHUG&MChxopk6yzEl#WUXb(mStR7G4ad3Jx8{c=*PImGyA(GY28}(=*0_->imQR
zh27tctgWTLzq>p6-ty(k!EOvsOkB9dR$YDhovK$(xiP1grymMWd2?eU2M5Ol-KnZA
z2U@wsK|9)a?A#ez5w9zF)jrG9?(w5X0U;q@&bSCOC@Cv14A5BeG<4CTMGIE1=9ZV2
zzxnae<Hr|w7N<w*yVlg$aB*{={-PD)77`+|Wy_We3!T}a9s3WTKQ}L2xKPLMYkT8K
z^}w@R^6p0c`ZYbiZsONTD@DY_K(p9!ad96$eLA!<c=?4rmBpFAr)q~6{Qp;b)9(8E
z_~~ss7*9OPUbN^*@YU+oMepy~s;H`ZzMpNH-IjKCmgoDwfBqCaJvEgp{_4*^tMp3a
zyoH5@K^?u7D_7pwQ)%4BFVAOfZJk-|=EkPxGb7;bW8sV4uDU1FD?68IJp?U=TC*l}
zb(n#%@#K5^F~<{r?ko*iTDxxDI?$QBjm+!}HaiplXFfkSmzg0_$k!$G`$_fr9^2P}
zRtm<~|J}M~xgbN>nh3?a(yP|5@2~s&>)^$Ufl_w`oD_6)e75<&{Qm6OvrTa)b_G;T
z;%AVttBLq^>%s+rva+&GF25fg?FL=c3To?2(~UlK@+2o{oGvCt=Fy`^r_O9y@BM1m
zG@KLKx@Q~M8$LfjKmE5q2PpP-J~!6V0+llb<>k{)DJd&o+*O*Lxhc@mk@4JI>-L4t
z?Mw_t;JLDZXZs&^O*->RZT_mNkj;Lf{xO>Qiq9TANVsw9)~R=r%8OPN7Z)F%VVJxj
z@2(ZYfkm#}1)rXHf;ReIxP1BW!^7>Vo9CyWou#Vk6<_m__1T%3%nUQka;3g}`Ep@h
zto4y2M-r~BiM(WYdAa}k4aYaF(y}_&Z~u>@wzhW9_j}bIo}LqZFL82kG&n7ExV<eG
zv~8waTwh5|jqUNV-or~gCxgcO-)_I})%|vR?rpJVHeRjZ`&U<o7d|}1YGGkvQ#@n$
zs^1xznJb@0MMXqB041wepcPg3_th%4I5e~IE(p+2Xla-{S@``@^(xO5sy};rdRp4s
z+e`NQ$HmE=n{Tf_+gD0jT3dQne_vmlz#<>erQw_la^5G0goG@;wzYcJD!Hp4L*(oH
z{bO$JD%Dm}R{pssh1a6~pADb99Z!0Cx`nm%;gcshd8JG)lx$wn20DiG^mKh?B_$>X
z0XaFnXz5_kLe+`7UyXBbndIExCku+ixz^>NLS@>`<9F}wjna+}S+eNJ>07s?w8Pd+
zI9tR%?~BN)X@!@rUOhTZH~PWLmz|FuC4mw(Xk759dBz2X*VorizqfnGjsqu7a9CPe
zf_fFVw&ivoIN-1*a`Uo7W?|{_r7_;p($YQB=6tWOuXp$K<oxyZHM^~?ZANys_v?8~
zE3Up57yP^X>dy_Jtg$X`ua>u1a&mHDOiWCggq();%@up({G_F&Z`OuHMn>)^c^R~|
z{f_tb&)|_8)NznYvub6E!tJG{r9pR&y}P>`bQSM3z1Xg=udjo~zr)wZP4&I8K)ikF
zQdK^AyB<~VX$MZ6SaGH-I5-$IK=R{pzx|S@9S!Q8Q6(iNfByVA^=5H^2B^ApadVqC
z(;-;=+Pc{8?f0s@&0_9tOm?4RS?pHkzpK5S9h9)QW?wft{^G_)<#Y3FwRcZF0a;?U
z_L6<%)tm0I*Nd*M3Y}q?+;(N#p+inLn||M~`>m_yJ1b<dRmTg~pv&nh4=wwxf4^S8
zpM_y#@^QYEIY+xhnHnsLpY?>8)%++}xPCoo*tkW&36x$zt3E(${<=U7W;ZvtM|aEb
zPrWKACZ@*F@$~fc@ST6(@BKax)FS{bS~-<=ZjNU4pXlf3<{q7ATg}2CC?ys3)M~|=
zS9Wom7c6jy*<I$_($>~h`ubYu`u+c+z7@O73ZHpA+s=1oNSAi_x{lc0Wu3XVw{>n#
zKi_rd&YkD)rca%!>Nn3ub6f6hHNUx5s+%@#T6O!4m-gR^v!G#a#g>XMFD7zua|>_J
zyIb|{-^r6FLH8tx)c^fDeMjx@Z^p^o+}ua!T9>;dB`rE};>3!O->WwF3%uGntzXVo
zXyU|)N){FoZ*Fb|hwzgpPeQ8xKmWT|agn&w2B(hY?>?<pY6Xo9DcpQ?=&Pfb7nfe#
z9u9MJ^GJQ|t9=h1B!Kq(oKczlTvJ2C!NrB;(W6Hf)<&D}*tyd&K7RitTVv1)!%LSh
zGulWltND60JoUD`ZIz0zRdD6+x7$-E-+OU0WIpS`g9oMZJnsgqHRfS(@0Xi8kHw{Q
z{l0&D6{}9ZS#!DCj+u$+%C8e!9zA+gq|P;U`JTjmr$C3PeF@<Yn!ja>Ny)oAlAF`c
z9(r+c@yD~~_aE&4|Mz`y{V`DbVdItZ_}(+mqLAtH^YiU1SFYT0sHtn^O3kS4dA$>r
z-JMp3B%PgQdg&E6XjZJabXLv3FPHs)yj(v2)h4c)pjP#1MceLu`|Q;D_9l3Fd4aMo
z=u9FB<1`+IgpZGof^O*njbEyIPn)uPz5tV)oZODOzgB*8EE@Ohv5}CL26g6V&Ybz;
z{(gH<%j)csFb$CpA3lHvVgrJL4%HiVbaZ6Rj7r<R+Iw}_+LXN!A@wr0RU*gx<)^n<
zH>zt3|M>ko`R1ln(8`ZfZ_kElh=BTCA8uu@cjRdN{rx@Yu=)*Kx3(@^sJJd>CzHLs
zJt!*87T>&dY11KhtxKoR-oGDTC9-t#<jHN(&Msdbtqeb@el@=O+Z)D!Z;_YYy?b}!
z<jI5o{{CKSDx|$AKqDbJnORy|IwB%MK}UyYu2rd%hX?4~*N*l3etC6Wy>w~P*$rwz
zn)#NXA!nO^rAx&RU0of{=<v<M?!ieTp97Pl^;Vrab&9L{`@7bS8x8mU`;`qk)h9Ix
zR0D;s4oiH0Z|{zZk4m3De_nmDN=Zp6DDk}dUV)(C;Du|~^4i+kM()hI>u@z$V)d!J
zcV+kg`NYk}C&LjRf8R)WLQYN&s0FX0s;a1_#ugP71?tSrnKS3XlP91#`IiqlK?9mK
ze^z_yvm_@!E;=20zDaNIg7VOxKYk>9dvh~lM}Z<}KL4d=)Pc$K!b0=2{rvbQO`cr%
z_!uv!GI#HnJNo<m{{C-oZ-?*B15JwYf@aMvEG!&WhAdjJfZ^A#UqL%x8Ln8jZk?&s
zzdt`egE|av?(P<^tE&Tz=bSzQS_F0WEN@<39s{WTyw%3Fy`y7=-9y{?Uz{>7FXM%*
z2KdCzFUPQ=^3%!yjSZ!*!*=Z00qQfZ4qIFG&JHvQ;j+W#_4W0~zrDQ;T6}e9XYuk=
z-LHfN1+SX>*u88O5D)+@i=1Oo=oBU=EZhuoZf2*hB1=(m@#!h%IX46p6%`FkO^+`1
zo}P8**`!HAnPvYrCLiBW_qS?I#73t5f4@mTdh}?*%$bpotw7TnCLmKmy;IN0YKbo|
zEe(2~SXXBU+G;w#?w98_ol9R{US8Vz;<Wbe>hF4a_xHuVJM;D0+UVrl+j6&VIx`8>
zH7j}9lz6x;@mP-}Xv;3>x=Wk7KN9u-eyZ2~`}thzx}%HBmqjb5R@=4nNH!@tw_Q25
zutRH0$;%+n@~#67jG(E{clY*o>+k;~Bqt}gX~*8`?@G$b%w9`{Zr!@IY14xT32P!Z
zvsG4BN*E+C{QErr|AVjB<EOv9zdqhxCt|~bu-ogFE@iE*uD)^m_TuR6c^X<;N$1rC
z1@}%7S=45}P*a5K%j@g?{$h)?b{0M50)^PxYK5s@s-X3`ZoN`dciUQ9OS`(d8kn2c
zr``O#Wa(1R*Bx0-F)=cW7A<=4<_!-!JG+IImECu_%k|CcVs|U)>G4gQHf>fO*Hz=~
zd3O(ezhB?qDXgBgOVcH!);fFX^ULSY^Eb2euj_Tb=&fX7A@Td$+tt_h-MV#4RBfKa
z&(lVsTS6{x&M^AOGEb)|KR>@8)SdY8@$rR=7ab?7`7SYalQz%O`T9mkP;jrtjw?bJ
z_lHbY^S!XdQ<%ZODla%FXu^~!EjMmNw6wP$K7O42?X9hs3$#xMZMC+rhyV=&yDba=
z&GlVAtFTBa>67OdCId6GX=@E<&6^ju_FjyVl9F#SNOaYizf)dcU*EoSr{$cvb05BW
z6SMSpY$s%7c2Skb%8)}>uZmt@AAdZ){;#U<wxGNEubw<PGA~$3=@N(9e3!2iwrw-p
zRr<Ou@9r+p1`SY`D=0{4(xgcre!t&;_{tTL`8A(9m(BKcanWB`HMQp5y}i<HZEY3L
z=a!q?6<Ji@yZpL@u8z)?A5x3=|Nm#r#l<ymx0hQ@jm@FMhaWzFe*89DN5`wqs;M>S
zW*W2iN|}Ou!c$dMb$+g)jJSCFjT;e}9s4{dt8Lx2=JKId?uql}{k!wz^N){@XBee&
z{rd6}w1Q*BycOXm)djEeadUG=L_{d)>G8Su$vC$2$zIrB|3Aw5-xANs6Q)lO&pxiK
zv`CzNvcHlRXrDi5eF4LRhlks*Rta6*{NwlU>#sg`bi6paF!Z`8XmK|qBjb+J*J7Z<
zveI_EKQU1mbbn6N)+|<bcJ`Vt7r~o^r+6(DF)n)(0Xl7>{N0^{8xjv+SQBY%l7A0$
z;<THe-#O#g_qS$??<#-a2kMp|eJOag`q{H*8#ZiMaW&a*o{c1E25_pYyL<A51&#$}
zWp3~9?FFs3x?Xk3+r?#8_;cI&A3uHsT{R23GwsKZ3ebG-ZO|U<XS4GUUAZE1xQ(}Y
z>QqrDXJ^m}h$^b84`=7^WBl;s-)7J(g^CJ`pPwISKuJki`QzvF_R7Y_!n@1g>urCx
zV1WYYfXVRnaWf2)-D2l!UF3d$Z*TREnx95h-`+$n|2oI2l<VcomzRDkyZ3=6hz$%3
z8v6VBw`|$+;c9sN!82#p_}zANad`!DBg2FV6Bw+mtw94`hK7bgKiBX7$0aK(3mP6;
z9lrk9_4xW;=XSn>=g#p}e}6Ys7BoNwTC`a8MdRQ5|Nr>g`Q_W%+u08tI&^An@$GH7
zpe4(o!7<R_ep_2xX;q(#{w7de`1!nj`{vEYb-&-5Z@q4xdP?NQ>(|O^YHZSGIR|!?
zz7`M_ZQZiPWb5|Uj*eH;q9*w>L~KX^4Lzo$1~2z>Eh*WurhM^+4FYLtX`nH?qf$~*
zN$>9L4A2l^n5QHE`03NuGiQA6>?-vZ+nst^474dJ|Ng!oZ@1rHuzr2Kd%A0gy^6Z}
z;q&MHl_xiV7R?twKL^^6(bv}(RC#)uu3^#<j;-6<!FH?3L`Fx0=225m#m2-;m^ZI4
z_4KrdS5^jl`1!ddB`Iy%v?(D!U%z|n#*K}Qjg4!3wtn#{E87+#CNAC%T5qys35yfQ
zi<d929+VWkst>BB6B8G@z1mmv(}-a~?eA}?+g8p?^>=ak+8$M9r~RrjW>*R5Anztt
zZm|U`R&eaC{(kJ)+1a2AKh(ZO9)7k|T@|$01(aOo&zJx9_ICT*+uN`IVd+?LE+r*}
z!C~j?4!ghnpz`#G$+jz({{H@MSp3W<B05^x&`?lKP3_V)*KV=U-#b9d|EK9jPnbBd
zvG(^jPwtTD$jGa1n>$xbv$V8iWKdF4`f!k4{=_y_b@l88t}ZSi)321Be||YAC@3H(
zh)G^vKJroJ=V!i0jvfvDy@OZUti@?z!_uXypl$^yelPpmukBS64wMD8{7XtpL5E^T
zRu&c-y6bgxyi)8{oxe7Ed)vm1hD}XP8_M6usi>)embiniwU9E)>3H)dM@2>D%8I^;
z%I=G*zrVY&uh#n8`}^_Uy6TH=J$dk;p;K7>(Vw56IXE~D+}xZlC@tOH$jqMgNAin{
zOUQ4NX*IKE%t*Mr%ons2sDY6gw4%Ugwi$1?nC_uAUg-rPS`Xj7i(70Z!o>>Ow-y^4
z3%VJyU*3M*(rdzjxlx-^I6+$qK(k2B?R+0Td~hf$GXq^A=4;;D(UBE7_x|U~CnqLy
zZReFT;n-XC)hQ=O=gpfp4_>{}(p`FGbGkn$iVjRxpFbu2-kwU(*@0jFJv!Q*niLZo
zYiia#z2nsPFYmYP+h=!eeSAM?#PRw0`R=pLa+g#)*4EaVUUX4XTBR&izis!@rK(lm
z-^J$bT)K2ATa=4S>C<m-Z+G<c)a1p0wgo09r>5?$`ua$?zoX+7W3T#rmoM)ZNM)Wl
ze}4UDt9N&Ix9|V=YjxD`vNty-o>UhMv<1y#f^L5S?Z9Mcm@q*Aw8`-OzTbK|xw+X}
z=kdu}CH(#Mb!(N6l2X-1gP$r&U*6spul@b)XrHXL$z2g8rB%;O%x;60uyn-PftPD_
zc;wEg5fT&>oOlbQUP(!5YvL!=MS07@rbR_<Okyp2dn;7BebMwIXJ?z6-eplzQo7V2
zr9OXt?KjE1ySqZAa~DqUXl`cSRq}Gt%d`O56DLnPCM79>?kIk_EWkD-BxK1;HGx3h
zs}?_F_SID8ZfWj#)tP;LouZ+kpmx}r3njrT<h=a+u9XOPtZ4huqO7zk6tw1kciCG3
z8JRU8BNhi}T-cQA?Q7oLk<}sG2bw%3?0PIq3gHvJ;5k)f?{Ag1F4Ix-oz()`q;+FM
zB4}iJmU(_3XxX>Ay1Q8QlM{lV^AguaZEb39W(G}Mu8G|(=Cw4a%%;A+9@Mf;KGxIN
z+{|3{^;PTI=<Q4l)AZx}_++gP96QDax<)i9DQTveZPgc!#>U2i^78hzYjtaCYCwne
z?Aj~f;-ar;cYAKf6+JyYK7KhH2M-U9IdkTKmbtjNxjlM5zaF$sw(R{qUIq?+{^Ov1
zQNh8%Jkn-7VPRpQGof2Jg+Z;A{Cz*&tU#01pzR?uX3l*0^?JN}K!8A>jAhf?+uK27
z2JiQL<^$c6RQvlIXhj{UC$(kEyg&bIUtiNLc^~P_Gn0XVbE>C{W5_+(@9*!o&z~>v
z<Lg`a;eq3q_xI&bPt!d-MKjo>Y;8x!D_KXEkZv|!DHS$esV`?{;Mu$<ZC$qJ!u9Lo
z{PK2FPJR0H3A8G$ps-N0cuy<0xL4}$@9)JKKr1giJUk|x`uq1UD?{YX4-XHsG8F#$
zlDTrtf&~ts6>TqGzU=(+<x5r!=c-%=mw<o?;OTeaGl}I&mpGiAozKj*7UybZVpy;g
zWeZ%x%HZWnR#sAJX=#`05PRm{RNT6C3pCri<U43en_)rt`nZg%tEPtB+nnytaKQfm
zA7+LVCr~!X6{2pCi?S(JS~Oj{{cfj+a!yW8LPCOqwz0W6I|FD>8AA-7I_LKFd-vq3
zs;VwkU)?yr@A9>4Y#&rQSsPkfSU40X%$?h-=-hT9DU|cw*6iz9CF@*VzSzI{siM?t
zU}CbSV734g!-kTVL7)poxy5uG0s{rBzQ5}|JKOy5>C>yvfX+;RD(77qpY9485&-q5
zKy!L~b#!$NYkm}f2BN=h>F9W230i{t-|PGP`^V4BG)~OT?LBhDWyXvd9=Aa|53;{n
zSX(nQL~YB_Jlhu@s5Q0X&ksW>lZ=4uuY!Vm-$3+gYHDg|YBu)w_v?JzQ~6o#(W6IM
zYv+mSMjg0yOA542Auw=a&h1A>yA$*B`c|x15w*I%<3;N6CzCt=O^w=~$D5p-%)-hF
z>aBYC_#An5b~bEj(aoDTJv=;C6xvo*RYmNnFx<3h(}UNqyEmtwfAs3=>WFPQlAsk%
z=J#th-$|@fQd%X)w_Et){z;vkoMySVS}rbjPd?DV$iTqO%?;{{fu^m$e{bKtyL#rm
zQ?EEUI6xPVE%Tob8d+gz=<DM<)*}fz64=xDQ)kDDXCh9e>Gpzwx}Y7|3?7~_zDt)c
z2i=lTR#sL}S~^we;Fm8YpjtvVYRihLRScjBnU3CG*RnFRTibHE+1cBptj(^@aa!mQ
z5HR73v73wjlDThwsw}EE_4fAu^6u{LJ4N2!r=!-MK5~S`w(84@tI0xw6J_52Q~|Af
z#wdbGD#So#_(S2ojul}?j~`bC-P_{4+-l;C87siWFK82N)YUze#Z#tCd2qM<{?(G;
z74srDCb7!M%9`HgQCg*_Hs2*=bx%*vg?+WvI`R8rK%Jblqg|pGu3o)bV%)K!tpe2D
zLtUkfyGRAO2E9f>_D;}h%i?DXs=vSU@bc2yeD?l*dC-X|UESS`4E=Jppt-?2ckd=<
zXM^TM-rV26|4bcd`}>hjVbD@J3k!<}i~H>k-P)SHFhnc0aI(6;n}Y*G-rZfTox<ve
zZr$3I=QpXNL+i+s$sJct9X-l=ykGwKxw+P<Pc=0)K?~x}oISg6@#5y_?RgKchR1_O
zgFy$&^+=g=ojiFGG?D~b`|=ia7b|EZ<?%k*iq~tmgU+u7t=SM(^Epue@3VZQ?8lEE
zEeap8fVu|qbw3z=XPbqdwiFh;_#afKZmoL1_d96cMC|Uelc&l-rT2%gUs)N>%&`<c
zdGaI&H}_%C9PiO?@yB0YUIraOkalK9V^0qc!vValcirH6Cnu&iZ{8HVyrg>M$dM}_
zZwd)sybM~Q69u~8v6<iQz)a)x33KM?OnrZ6r*K$U7|8XY7USF7+d(a2(2QCVXy&x+
zO@xS;7-+Q`15z;=6qA^!c;?KR2~($r=1Gg`L@<bpPv2$fsH9Y-ChKe7&=F_1Z{NNj
z_5a`hPrSY^_Q#*k=L<hS^L24^Q!+3R*tKhyhlfXl0MpHzHzkZxI&$Jeoj`|wG5EKA
zynOjGXdfP^XLIu8Ne>?%m#{FgH*epbzLJ}p+v_*i>gr!lA;G|%paLfAJ7{IhwQFHg
zRiGYRivXxk!k}PlE6cE8{d)e`*w~w=FI^Hk+|J)Vd$u$~!plobGcGOR1a0J4v`7gw
zB|Y0bzis;T@SUZvU%y`ckf*a_g%YS7-Fo@jwPP0+I&aLnss)Np>+*LlpP!w*xYS#m
z0d(Oe!-CY)({Ai4U7ZuZG^q1<zdY!Ks2%nH?b6Q8;mpp?R#8(sbmWLjSM-*QiNE|h
zIy$s^ZRfiz5!|<LpMX=s(^FGH7X*VApyq<M>#SM37F2tRh>D*42HG=n=ImKPQPI{Z
zQ$(grnR4LxarbEz_x4nRZVAY;7KiMWaakfLYgN+F-QB$<XVU!n^SAi=`}22;>$`=8
ziPhBB7JhpZ32JeGD&s?~+#f+5(bK27iD;K+yb|f`SRo@*rmocc@$1*4)8p$p?P`A=
zIC;`@o34Ta18B*DU9DA9b2B4@m6a7}2o^M<-0H+AEG(RJYYXRM_x@uIjLZxSVq#*T
zds}*XdLF!g&tG2t-DvM}7ndcLK6afR$uY69j12Pie+qZrw*UD=xJSlP=>Pt?)^33k
z9ZUv)SfW>lD8)H!*eW8pUf?6cBi}s@OCNA<+rDk{8A+WrxtG$d6CJ0q-kqNMcb^f@
z!=;jSZ3dyCuCdn*<@%E?Wa=V=r=^~G{&~eJtzUoZdfXPjD6tY0G@O0*QQ7Xh*XQ{y
zzyDK!q0Xm<X|1IUpP>ZLyXDjRzf|p=;kW$$zU3NS5jtZ0^Tl01ewo9tr|$>LrQGee
zcf_qPw2@2Re%p0>wl-6Rcv+3Y-Man#yVfP|jXR#UIkQ@ZL8#MT;qKF-%xV^fs7I?*
z85k~g_~RgUWN}vP{QOhq^wUjm4H<qkA5s4hlp49smg)bMtgT%qQ!agzI564D_p(VY
qKO@6|=pP@>t1~cU9wAKFF(z14s?7VK^^t*rfx*+&&t;ucLK6TOKBBV#

literal 0
HcmV?d00001

diff --git a/api.rst b/api.rst
index e7bc52398..02817aeb4 100644
--- a/api.rst
+++ b/api.rst
@@ -13,8 +13,8 @@ There are no deeply/nested/routes. Each route provides OPTIONS, GET, POST, PATCH
 
   Why not provide nested routes? Many APIs allow nesting to retrieve related information, such as :code:`/films/1/director`. We offer a more flexible mechanism (inspired by GraphQL) to embed related information. It can handle one-to-many and many-to-many relationships. This is covered in the section about `Resource Embedding`_.
 
-Filtering
----------
+Horizontal Filtering (Rows)
+---------------------------
 
 You can filter result rows by adding conditions on columns, each condition a query string parameter. For instance, to return people aged under 13 years old:
 
@@ -54,6 +54,17 @@ To negate any operator, prefix it with :code:`not` like :code:`?a=not.eq.2`.
 
 For more complicated filters (such as those involving condition 1 OR condition 2) you will have to create a new view in the database.
 
+Vertical Filtering (Columns)
+----------------------------
+
+When certain columns are wide (such as those holding binary data), it is more efficient for the server to withold them in a response. The client can specify which columns are required using the `select` parameter.
+
+.. code-block:: http
+
+  GET /people?select=fname,age
+
+The default is `*`, meaning all columns. This value will become more important below in :ref:`Resource Embedding`_.
+
 .. _computed_cols:
 
 Computed Columns
@@ -107,12 +118,6 @@ If you care where nulls are sorted, add nullsfirst or nullslast:
 
   GET /people?order=age.desc.nullslast HTTP/1.1
 
-To order the embedded items, you need to specify the tree path for the order param like so.
-
-.. code-block:: http
-
-  GET /projects?select=id,name,tasks{id,name}&order=id.asc&tasks.order=name.asc HTTP/1.1
-
 You can also use :ref:`computed_cols` to order the results, even though the computed columns will not appear in the output.
 
 Limits and Pagination
@@ -219,7 +224,7 @@ This returns
 
 .. note::
 
-  Many APIs distinguish plural and singular resources using a special nested URL convention e.g. `/stories` vs `/stories/1`. Why do we use `/stories?id=eq.1`? It is because a singlular resource is (for us) a row determined by a primary key, and primary keys can be compound (meaning defined across more than one column). The more familiar nested urls consider only a degenerate case of simple and overwhelmingly numeric primary keys. These so-called artificial keys are often introduced automatically by Object Relational Mapping libraries.
+  Many APIs distinguish plural and singular resources using a special nested URL convention e.g. `/stories` vs `/stories/1`. Why do we use `/stories?id=eq.1`? The answer is because a singlular resource is (for us) a row determined by a primary key, and primary keys can be compound (meaning defined across more than one column). The more familiar nested urls consider only a degenerate case of simple and overwhelmingly numeric primary keys. These so-called artificial keys are often introduced automatically by Object Relational Mapping libraries.
 
   Admittedly PostgREST could detect when there is an equality condition holding on all columns constituting the primary key and automatically convert to singular. However this could lead to a surprising change of format that breaks unwary client code just by filtering on an extra column. Instead we allow manually specifying singular vs plural to decouple that choice from the URL format.
 
@@ -233,6 +238,68 @@ You can use a tool like `Swagger UI <http://swagger.io/swagger-ui/>`_ to create
 Resource Embedding
 ==================
 
+In addition to providing RESTful routes for each table and view, PostgREST allows related resources to be included together in a single API call. This reduces the need for multiple API requests. The server uses foreign keys to determine which tables and views can be returned together. For example, consider a database of films and their awards:
+
+.. image:: _static/film.png
+
+As seen above in `vertical_filtering`_ we can request the titles of all films like this:
+
+.. code-block:: http
+
+  GET /films?select=title HTTP/1.1
+
+This might return something like
+
+.. code-block:: json
+
+  [
+    { "title": "Workers Leaving The Lumière Factory In Lyon" },
+    { "title": "The Dickson Experimental Sound Film" },
+    { "title": "The Haunted Castle" }
+  ]
+
+However because a foreign key constraint exists between Films and Directors, we can request this information be included:
+
+.. code-block:: http
+
+  GET /films?select=title,directors{last_name} HTTP/1.1
+
+Which would return
+
+.. code-block:: json
+
+  [
+    { "title": "Workers Leaving The Lumière Factory In Lyon",
+      "directors": {
+        "last_name": "Lumière"
+      }
+    },
+    { "title": "The Dickson Experimental Sound Film",
+      "directors": {
+        "last_name": "Dickson"
+      }
+    },
+    { "title": "The Haunted Castle",
+      "directors": {
+        "last_name": "Méliès"
+      }
+    }
+  ]
+
+PostgREST can also detect relations going through join tables. Thus you can request the Actors for Films (which in this case finds the information through Roles). You can also reverse the direction of inclusion, asking for all Directories with each including the list of their Films.
+
+To order the embedded items, you need to specify the tree path in the order parameter. For instance
+
+.. code-block:: http
+
+  GET /films?select=*,actors{*}&actors.order=last_name,first_name HTTP/1.1
+
+Note this does not change the order of the Films, but of the list of Actors in each Film.
+
+.. note::
+
+  Whenever foreign key relations change in the database schema you must refresh PostgREST's schema cache to allow resource embedding to work properly. See the section :ref:`Schema Reloading`_.
+
 Query Limitations
 =================
 
diff --git a/erd/film.er b/erd/film.er
new file mode 100644
index 000000000..d19fdf61b
--- /dev/null
+++ b/erd/film.er
@@ -0,0 +1,40 @@
+[Films]
+*id
++director_id
+title
+year
+rating
+language
+
+[Directors]
+*id
+first_name
+last_name
+
+[Actors]
+*id
+first_name
+last_name
+
+[Roles]
+*+film_id
+*+actor_id
+character
+
+[Competitions]
+*id
+name
+year
+
+[Nominations]
+*+competition_id
+*+film_id
+rank
+
+Roles *--1 Actors
+Roles *--1 Films
+
+Nominations *--1 Competitions
+Nominations *--1 Films
+
+Films *--1 Directors

From 6a2ba25414a975e90f070418008f16ce33cd132d Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Fri, 25 Nov 2016 15:01:52 -0800
Subject: [PATCH 034/652] Custom CSS

---
 _static/css/custom.css | 3 +++
 conf.py                | 5 +++++
 2 files changed, 8 insertions(+)
 create mode 100644 _static/css/custom.css

diff --git a/_static/css/custom.css b/_static/css/custom.css
new file mode 100644
index 000000000..ee869c6da
--- /dev/null
+++ b/_static/css/custom.css
@@ -0,0 +1,3 @@
+div.wy-menu.rst-pro {
+  display: none !important;
+}
diff --git a/conf.py b/conf.py
index bcc453897..8479fd301 100644
--- a/conf.py
+++ b/conf.py
@@ -284,3 +284,8 @@ texinfo_documents = [
 
 # If true, do not generate a @detailmenu in the "Top" node's menu.
 #texinfo_no_detailmenu = False
+
+# -- Custom setup ---------------------------------------------------------
+
+def setup(app):
+    app.add_stylesheet('css/custom.css')

From 5a31320a8b7906ebfbcbf75d1adcb2519b0903c5 Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Fri, 25 Nov 2016 15:02:00 -0800
Subject: [PATCH 035/652] TeX description

---
 conf.py | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/conf.py b/conf.py
index 8479fd301..489726976 100644
--- a/conf.py
+++ b/conf.py
@@ -269,8 +269,8 @@ man_pages = [
 #  dir menu entry, description, category)
 texinfo_documents = [
     (master_doc, 'PostgREST', u'PostgREST Documentation',
-     author, 'PostgREST', 'One line description of project.',
-     'Miscellaneous'),
+     author, 'PostgREST', 'REST API for any PostgreSQL database',
+     'Web'),
 ]
 
 # Documents to append as an appendix to all manuals.

From 5b95d22e2ad44343cf9b6eb5cd47b8137ea3cdc1 Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Sun, 27 Nov 2016 12:28:10 -0800
Subject: [PATCH 036/652] Base nginx conf from Ruslan

---
 admin.rst | 25 +++++++++++++++++++++++--
 1 file changed, 23 insertions(+), 2 deletions(-)

diff --git a/admin.rst b/admin.rst
index a7d145d7f..b5bcb3521 100644
--- a/admin.rst
+++ b/admin.rst
@@ -71,9 +71,30 @@ PostgREST is a fast way to construct a RESTful API. Its default behavior is grea
 
 The first step is to create an Nginx configuration file that proxies requests to an underlying PostgREST server.
 
-.. code::
+.. code:: nginx
 
-  Nginx code goes here.
+  http {
+    ...
+    # upstream configuration
+    upstream postgrest {
+      server localhost:3000;
+      keepalive 64;
+    }
+    ...
+    server {
+      ...
+      # expose to the outside world
+      location /api {
+        default_type  application/json;
+        proxy_hide_header Content-Location;
+        add_header Content-Location  /api$upstream_http_content_location;
+        proxy_set_header  Connection "";
+        proxy_http_version 1.1;
+        proxy_pass http://postgrest/;
+      }
+      ...
+    }
+  }
 
 Block Full-Table Operations
 ---------------------------

From 8c2a95b98e3d3bf7202ae0b39b12898bb4dbd577 Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Wed, 30 Nov 2016 21:21:57 -0800
Subject: [PATCH 037/652] Test suite instructions from @dsimunic

---
 install.rst | 143 ++++++++++++++++++++++++++++++++++++++++++++--------
 1 file changed, 122 insertions(+), 21 deletions(-)

diff --git a/install.rst b/install.rst
index 430161bcf..4bf888f48 100644
--- a/install.rst
+++ b/install.rst
@@ -14,6 +14,39 @@ The `release page <https://github.com/begriffs/postgrest/releases/latest>`_ has
 
   # You should see a usage help message
 
+Homebrew
+========
+
+You can use the Homebrew package manager to install PostgREST on Mac
+
+.. code-block:: bash
+
+  # Ensure brew is up to date
+  brew update
+
+  # Check for any problems with brew's setup
+  brew doctor
+
+  # Install the postgrest package
+  brew install postgrest
+
+This will automatically install PostgreSQL as a dependency. The process tends to take up to 15 minutes to install the package and its dependencies.
+
+After installation completes, the tool is added to your $PATH and can be used from anywhere with:
+
+.. code-block:: bash
+
+  postgrest --help
+
+PostgreSQL dependency
+=====================
+
+To use PostgREST you will need an underlying database (PostgreSQL version 9.3 or greater is required). You can use something like Amazon `RDS <https://aws.amazon.com/rds/>`_ but installing your own locally is cheaper and more convenient for development.
+
+* `Instructions for OS X <http://exponential.io/blog/2015/02/21/install-postgresql-on-mac-os-x-via-brew/>`_
+* `Instructions for Ubuntu 14.04 <https://www.digitalocean.com/community/tutorials/how-to-install-and-use-postgresql-on-ubuntu-14-04>`_
+* `Installer for Windows <http://www.enterprisedb.com/products-services-training/pgdownload#windows>`_
+
 Build from Source
 =================
 
@@ -45,38 +78,106 @@ When a pre-built binary does not exist for your system you can build the project
 
 * Check that the server is installed: :code:`postgrest --help`.
 
-If you want to run the test suite, stack can do that too: :code:`stack test`.
+PostgREST Test Suite
+--------------------
 
-PostgreSQL dependency
-=====================
+Creating the Test Database
+~~~~~~~~~~~~~~~~~~~~~~~~~~
 
-To use PostgREST you will need an underlying database (PostgreSQL version 9.3 or greater is required). You can use something like Amazon `RDS <https://aws.amazon.com/rds/>`_ but installing your own locally is cheaper and more convenient for development.
+To properly run postgrest tests one needs to create a database. To do so, use the test creation script `create_test_database` in the `test/` folder.
 
-* `Instructions for OS X <http://exponential.io/blog/2015/02/21/install-postgresql-on-mac-os-x-via-brew/>`_
-* `Instructions for Ubuntu 14.04 <https://www.digitalocean.com/community/tutorials/how-to-install-and-use-postgresql-on-ubuntu-14-04>`_
-* `Installer for Windows <http://www.enterprisedb.com/products-services-training/pgdownload#windows>`_
+The script expects the following parameters:
 
-Homebrew
-========
+.. code:: bash
 
-You can use the Homebrew package manager to install PostgREST on Mac
+  test/create_test_db connection_uri database_name [test_db_user] [test_db_user_password]
 
-.. code-block:: bash
+Use the `connection URI <https://www.postgresql.org/docs/current/static/libpq-connect.html#AEN45347>`_ to specify the user, password, host, and port. Do not provide the database in the connection URI. The Postgres role you are using to connect must be capable of creating new databases.
 
-  # Ensure brew is up to date
-  brew update
+The `database_name` is the name of the database that `stack test` will connect to. If the database of the same name already exists on the server, the script will first drop it and then re-create it.
 
-  # Check for any problems with brew's setup
-  brew doctor
+Optionally, specify the database user `stack test` will use. The user will be given necessary permissions to reset the database after every test run.
 
-  # Install the postgrest package
-  brew install postgrest
+If the user is not specified, the script will generate the role name `postgrest_test_` suffixed by the chosen database name, and will generate a random password for it.
 
-This will automatically install PostgreSQL as a dependency. The process tends to take up to 15 minutes to install the package and its dependencies.
+Optionally, if specifying an existing user to be used for the test connection, one can specify the password the user has.
 
-After installation completes, the tool is added to your $PATH and can be used from anywhere with:
+The script will return the db uri to use in the tests--this uri corresponds to the `db-uri` parameter in the configuration file that one would use in production.
 
-.. code-block:: bash
+Generating the user and the password allows one to create the database and run the tests against any postgres server without any modifications to the server. (Such as allowing accounts without a passoword or setting up trust authentication, or requiring the server to be on the same localhost the tests are run from).
 
-  postgrest --help
+Running the Tests
+~~~~~~~~~~~~~~~~~
 
+To run the tests, one must supply the database uri in the environment variable `POSTGREST_TEST_CONNECTION`.
+
+Typically, one would create the database and run the test in the same command line, using the `postgres` superuser:
+
+.. code:: bash
+
+  POSTGREST_TEST_CONNECTION=$(test/create_test_db "postgres://postgres:pwd@database-host" test_db) stack test
+
+For repeated runs on the same database, one should export the connection variable:
+
+.. code:: bash
+
+  export POSTGREST_TEST_CONNECTION=$(test/create_test_db "postgres://postgres:pwd@database-host" test_db)
+  stack test
+  stack test
+  ...
+
+If the environment variable is empty or not specified, then the test runner will default to connection uri
+
+.. code:: bash
+
+  postgres://postgrest_test@localhost/postgrest_test
+
+This connection assumes the test server on the `localhost` with the user `postgrest_test` without the password and the database of the same name.
+
+Destroying the Database
+~~~~~~~~~~~~~~~~~~~~~~~
+
+The test database will remain after the test, together with four new roles created on the postgres server. To permanently erase the created database and the roles, run the script `test/delete_test_database`, using the same superuser role used for creating the database:
+
+.. code:: bash
+
+  test/destroy_test_db connection_uri database_name
+
+Testing with Docker
+~~~~~~~~~~~~~~~~~~~
+
+The ability to connect to non-local PostgreSQL simplifies the test setup. One elegant way of testing is to use a disposable PostgreSQL in docker.
+
+For example, if local development is on a mac with Docker for Mac installed:
+
+.. code:: bash
+
+  $ docker run --name db-scripting-test -e POSTGRES_PASSWORD=pwd -p 5434:5432 -d postgres
+  $ POSTGREST_TEST_CONNECTION=$(test/create_test_db "postgres://postgres:pwd@localhost:5434" test_db) stack test
+
+Additionally, if one creates a docker container to run stack test (this is necessary on MacOS Sierra with GHC below 8.0.1, where `stack test` fails), one can run PostgreSQL in a separate linked container, or use the locally installed Postgres.app.
+
+Build the test container with `test/Dockerfile.test`:
+
+.. code:: bash
+
+  $ docker build -t pgst-test - < text/Dockerfile.test
+  $ mkdir .stack-work-docker ~/.stack-linux
+
+The first run of the test container will take a long time while the dependencies get cached. Creating the `~/.stack-linux` folder and mapping it as a volume into the container ensures that we can run the container in disposable mode and not worry about subsequent runs being slow. `.stack-work-docker` is also mapped into the container and must be specified when using stack from Linux, not to interfere with the `.stack-work` for local development. (On Sierra, `stack build` works, while `stack test` fails with GHC 8.0.1).
+
+Linked containers:
+
+.. code:: bash
+
+  $ docker run --name pg -e POSTGRES_PASSWORD=pwd  -d postgres
+  $ docker run --rm -it -v `pwd`:`pwd` -v ~/.stack-linux:/root/.stack --link pg:pg -w="`pwd`" -v `pwd`/.stack-work-docker:`pwd`/.stack-work pgst-test bash -c "POSTGREST_TEST_CONNECTION=$(test/create_test_db "postgres://postgres:pwd@pg" test_db) stack test"
+
+Stack test in Docker for Mac, Postgres.app on mac:
+
+.. code:: bash
+
+  $ host_ip=$(ifconfig en0 | grep 'inet ' | cut -f 2 -d' ')
+  $ export POSTGREST_TEST_CONNECTION=$(test/create_test_db "postgres://postgres@$HOST" test_db)
+  $ docker run --rm -it -v `pwd`:`pwd` -v ~/.stack-linux:/root/.stack -v `pwd`/.stack-work-docker:`pwd`/.stack-work -e "HOST=$host_ip" -e "POSTGREST_TEST_CONNECTION=$POSTGREST_TEST_CONNECTION" -w="`pwd`" pgst-test bash -c "stack test"
+  $ test/destroy_test_db "postgres://postgres@localhost" test_db

From 1f12dedce6b0d3fe10e95c5ba91351d87d22f382 Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Fri, 2 Dec 2016 10:15:12 -0800
Subject: [PATCH 038/652] Include Ruslan's env_var helper function in note

---
 auth.rst | 22 ++++++++++++++++++++++
 1 file changed, 22 insertions(+)

diff --git a/auth.rst b/auth.rst
index f94533646..2430a5009 100644
--- a/auth.rst
+++ b/auth.rst
@@ -103,6 +103,28 @@ This allows JWT generation services to include extra information and your databa
     -- an exception if the setting is not present. Default it to ''.
     ALTER DATABASE your_db_name SET request.claim.email TO '';
 
+  If you are unable to issue an ALTER DATABASE statement (for instance on Amazon RDS), you can create a helper function to read environment variables and swallow exceptions.
+
+  .. code:: plpgsql
+
+    create function env_var(v text) returns text as $$
+      declare
+        result text;
+      begin
+        begin
+          select current_setting(v) into result;
+        exception 
+          when undefined_object then
+            return null;
+        end;
+
+        return result;
+      end;
+    $$ stable language plpgsql;
+
+    -- now you can call call for instance
+    -- SELECT env_var('request.claim.email')
+
 Hybrid User-Group Roles
 ~~~~~~~~~~~~~~~~~~~~~~~
 

From 2c1eb9ab13324ebdea285cbad71387de5ebc720e Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Fri, 2 Dec 2016 15:50:02 -0800
Subject: [PATCH 039/652] Add queueing bridges to docs

---
 intro.rst | 21 +++++++++++++++------
 1 file changed, 15 insertions(+), 6 deletions(-)

diff --git a/intro.rst b/intro.rst
index e90839bfa..575b99fe7 100644
--- a/intro.rst
+++ b/intro.rst
@@ -47,13 +47,14 @@ Client-Side Libraries
 * `davidthewatson/postgrest_python_requests_client <https://github.com/davidthewatson/postgrest_python_requests_client>`_ - Python
 * `calebmer/postgrest-client <https://github.com/calebmer/postgrest-client>`_ - JS
 
-Extensions
-----------
+External Notification
+---------------------
 
-* `diogob/postgrest-ws <https://github.com/diogob/postgrest-ws>`_ - expose web sockets for PostgreSQL's LISTEN/NOTIFY
-* `srid/spas <https://github.com/srid/spas>`_ - allow file uploads and basic auth
-* `svmnotn/postgrest-auth <https://github.com/svmnotn/postgrest-auth>`_ - OAuth2-inspired external auth server
-* `nblumoe/postgrest-oauth <https://github.com/nblumoe/postgrest-oauth>`_ - OAuth2 WAI middleware
+These are PostgreSQL bridges that propagate LISTEN/NOTIFY to external queues for further processing. This allows stored procedures to initiate actions outside the database such as sending emails.
+
+* `matthewmueller/pg-sns-bridge <https://github.com/matthewmueller/pg-sns-bridge>`_ - Amazon SNS
+* `aweber/pgsql-listen-exchange <https://github.com/aweber/pgsql-listen-exchange>`_ - RabbitMQ
+* `SpiderOak/skeeter <https://github.com/SpiderOak/skeeter>`_ - ZeroMQ
 
 Example Apps
 ------------
@@ -80,6 +81,14 @@ In Production
 * `Image-charts <https://image-charts.com/>`_
 * `Drip Depot <https://www.dripdepot.com/>`_
 
+Extensions
+----------
+
+* `diogob/postgrest-ws <https://github.com/diogob/postgrest-ws>`_ - expose web sockets for PostgreSQL's LISTEN/NOTIFY
+* `srid/spas <https://github.com/srid/spas>`_ - allow file uploads and basic auth
+* `svmnotn/postgrest-auth <https://github.com/svmnotn/postgrest-auth>`_ - OAuth2-inspired external auth server
+* `nblumoe/postgrest-oauth <https://github.com/nblumoe/postgrest-oauth>`_ - OAuth2 WAI middleware
+
 Commercial PaaS
 ---------------
 

From 564c51fe7999eaf89145c2b54ec2c7c547c68c6b Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Sun, 4 Dec 2016 13:34:33 -0800
Subject: [PATCH 040/652] Stored procs

---
 api.rst | 50 +++++++++++++++++++++++++++++++++++++++++++++++---
 1 file changed, 47 insertions(+), 3 deletions(-)

diff --git a/api.rst b/api.rst
index 02817aeb4..748053997 100644
--- a/api.rst
+++ b/api.rst
@@ -233,7 +233,11 @@ OpenAPI Support
 
 Every API hosted by PostgREST automatically serves a full `OpenAPI <https://www.openapis.org/>`_ description on the root path. This provides a list of all endpoints, along with supported HTTP verbs and example payloads.
 
-You can use a tool like `Swagger UI <http://swagger.io/swagger-ui/>`_ to create beautiful documentation from the description and host an interactive web-based dahsboard. The dashboard allows developers to make requests against a live PostgREST server, provides guidance with request headers and example request bodies.
+You can use a tool like `Swagger UI <http://swagger.io/swagger-ui/>`_ to create beautiful documentation from the description and to host an interactive web-based dahsboard. The dashboard allows developers to make requests against a live PostgREST server, provides guidance with request headers and example request bodies.
+
+.. note::
+
+  The OpenAPI information can go out of date as the schema changes under a running server. To learn how to refresh the cache see :ref:`Schema Reloading`_.
 
 Resource Embedding
 ==================
@@ -300,12 +304,52 @@ Note this does not change the order of the Films, but of the list of Actors in e
 
   Whenever foreign key relations change in the database schema you must refresh PostgREST's schema cache to allow resource embedding to work properly. See the section :ref:`Schema Reloading`_.
 
-Query Limitations
-=================
+Custom Queries
+==============
+
+The PostgREST url grammar limits the kinds of queries clients can perform. It prevents arbitrary, potentially poorly constructed and slow client queries. It's good for quality of service, but means database administrators must create custom views and stored procedures to provide richer endpoints. The most common causes for custom endpoints are
+
+* Table unions and OR-conditions in the where clause
+* More complicated joins than those provided by `Resource Embedding`_
+* Geospatial queries that require an argument, like "points near (lat,lon)"
+* More sophisticated full-text search than a simple use of the `@@` filter
 
 Stored Procedures
 =================
 
+Every stored procedure in the API-exposed database schema is accessible under the `/rpc` prefix. The API endpoint supports only POST which executes the function.
+
+.. code:: http
+
+  POST /rpc/function_name HTTP/1.1
+
+Procedures must used `named arguments <https://www.postgresql.org/docs/current/static/sql-syntax-calling-funcs.html#SQL-SYNTAX-CALLING-FUNCS-NAMED>`_. To supply arguments in an API call, include a JSON object in the request payload and each key/value of the object will become an argument.
+
+For instance, assume we have created this function in the database.
+
+.. code:: plpgsql
+
+  CREATE FUNCTION add_them(a integer, b integer)
+  RETURNS integer AS $$
+   SELECT $1 + $2;
+  $$ LANGUAGE SQL IMMUTABLE STRICT;
+
+The client can call it by posting an object like
+
+.. code:: http
+
+  POST /rpc/add_them HTTP/1.1
+  { "a": 1, "b": 2}
+
+The keys of the object match the parameter names. Note that PostgreSQL converts parameter names to lowercase unless you quote them like `CREATE FUNCTION foo("mixedCase" text) ...`.
+
+.. note::
+
+  Why the `/rpc` prefix? One reason is to avoid name collisions between views and procedures. It also helps emphasize to API consumers that these functions are not normal restful things. The functions can have arbitrary and surprising behavior, not the standard "post creates a resource" thing that users expect from the other routes.
+
+  We are considering allowing GET requests for functions that are marked non-volatile. Allowing GET is important for HTTP caching. However we still must decide how to pass function parameters since request bodies are not allowed. Also some query string arguments are already reserved for shaping/filtering the output.
+
+
 Insertions / Updates
 ====================
 

From 6b255e98065d01b5c47e0e8627fc50e5f4610379 Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Sun, 4 Dec 2016 13:59:24 -0800
Subject: [PATCH 041/652] Mark inline code as code, not italics

---
 admin.rst   | 16 ++++++++--------
 api.rst     | 20 ++++++++++++--------
 auth.rst    | 18 +++++++++---------
 install.rst | 22 +++++++++++-----------
 4 files changed, 40 insertions(+), 36 deletions(-)

diff --git a/admin.rst b/admin.rst
index b5bcb3521..794647150 100644
--- a/admin.rst
+++ b/admin.rst
@@ -50,7 +50,7 @@ db-schema
 db-anon-role
   The database role to use when executing commands on behalf of unauthenticated clients.
 db-pool
-  Number of connections to keep open in PostgREST's database pool. Having enough here for the maximum expected simultaneous client connections can improve performance. Note it's pointless to set this higher than the `max_connections` GUC in your database.
+  Number of connections to keep open in PostgREST's database pool. Having enough here for the maximum expected simultaneous client connections can improve performance. Note it's pointless to set this higher than the :code:`max_connections` GUC in your database.
 server-host
   Where to bind the PostgREST web server.
 server-port
@@ -58,7 +58,7 @@ server-port
 server-proxy-url
   Overrides the base URL used within the OpenAPI self-documentation hosted at the API root path.
 jwt-secret
-  The secret used to decode JWT tokens clients provide for authentication. If this parameter is not specified then PostgREST refuses authentication requests. Choosing a value for this parameter beginning with the at sign such as `@filename` loads the secret out of an external file which is useful for non-UTF-8 binary secrets.
+  The secret used to decode JWT tokens clients provide for authentication. If this parameter is not specified then PostgREST refuses authentication requests. Choosing a value for this parameter beginning with the at sign such as :code:`@filename` loads the secret out of an external file which is useful for non-UTF-8 binary secrets.
 max-rows
   A hard limit to the number of rows PostgREST will fetch from a view, table, or stored procedure. Limits payload size for accidental or malicious requests.
 pre-request
@@ -118,7 +118,7 @@ This does not protect against malicious actions, since someone can add a url par
 Count-Header DoS
 ----------------
 
-For convenience to client-side pagination controls PostgREST supports counting and reporting total table size in its response. As described in :ref:`Limits and Pagination`_, responses ordinarily include a range and unspecified total like
+For convenience to client-side pagination controls PostgREST supports counting and reporting total table size in its response. As described in :ref:`Limits and Pagination`_, responses ordinarily include a range but leave the total unspecified like
 
 .. code-block:: http
 
@@ -126,7 +126,7 @@ For convenience to client-side pagination controls PostgREST supports counting a
   Range-Unit: items
   Content-Range: 0-14/*
 
-However including the request header `Prefer: count=exact` calculates and includes the full count:
+However including the request header :code:`Prefer: count=exact` calculates and includes the full count:
 
 .. code-block:: http
 
@@ -142,7 +142,7 @@ This is fine in small tables, but count performance degrades in big tables due t
 
 .. note::
 
-  In future versions we will support `Prefer: count=estimated` to leverage the PostgreSQL statistics tables for a fast (and fairly accurate) result.
+  In future versions we will support :code:`Prefer: count=estimated` to leverage the PostgreSQL statistics tables for a fast (and fairly accurate) result.
 
 .. _hardening_https:
 
@@ -168,9 +168,9 @@ A great way to inspect incoming HTTP requests including headers and query params
   # sudo access is necessary for watching the network
   sudo ngrep -d lo0 port 3000
 
-The options to ngrep vary depending on the address and host on which you've bound the server. The binding is described in the `Configuration`_ section. The ngrep output isn't particularly pretty, but it's legible. Note the `Server` response header as well which identifies the version of server. This is important when submitting bug reports.
+The options to ngrep vary depending on the address and host on which you've bound the server. The binding is described in the `Configuration`_ section. The ngrep output isn't particularly pretty, but it's legible. Note the :code:`Server` response header as well which identifies the version of server. This is important when submitting bug reports.
 
-Once you've verified that requests are as you expect, you can get more information about the server operations by watching the database logs. By default PostgreSQL does not keep these logs, so you'll need to make the configuration changes below. Find `postgresql.conf` inside your PostgreSQL data directory (to find that, issue the command `show data_directory;`). Either find the settings scattered throughout the file and change them to the following values, or append this block of code to the end of the configuration file.
+Once you've verified that requests are as you expect, you can get more information about the server operations by watching the database logs. By default PostgreSQL does not keep these logs, so you'll need to make the configuration changes below. Find :code:`postgresql.conf` inside your PostgreSQL data directory (to find that, issue the command :code:`show data_directory;`). Either find the settings scattered throughout the file and change them to the following values, or append this block of code to the end of the configuration file.
 
 .. code:: sql
 
@@ -207,7 +207,7 @@ In the future we're investigating ways to keep the cache updated without manual
 Alternate URL Structure
 =======================
 
-As discussed in `Singular or Plural`_, there are no special URL forms for singular resources in PostgREST, only operators for filtering. Thus there are no URLs like `/people/1`. It would be specified instead as
+As discussed in `Singular or Plural`_, there are no special URL forms for singular resources in PostgREST, only operators for filtering. Thus there are no URLs like :code:`/people/1`. It would be specified instead as
 
 .. code:: http
 
diff --git a/api.rst b/api.rst
index 748053997..bb5aa845f 100644
--- a/api.rst
+++ b/api.rst
@@ -1,3 +1,6 @@
+.. role:: sql(code)
+   :language: sql
+
 Tables and Views
 ================
 
@@ -57,13 +60,13 @@ For more complicated filters (such as those involving condition 1 OR condition 2
 Vertical Filtering (Columns)
 ----------------------------
 
-When certain columns are wide (such as those holding binary data), it is more efficient for the server to withold them in a response. The client can specify which columns are required using the `select` parameter.
+When certain columns are wide (such as those holding binary data), it is more efficient for the server to withold them in a response. The client can specify which columns are required using the :sql:`select` parameter.
 
 .. code-block:: http
 
-  GET /people?select=fname,age
+  GET /people?select=fname,age HTTP/1.1
 
-The default is `*`, meaning all columns. This value will become more important below in :ref:`Resource Embedding`_.
+The default is :sql:`*`, meaning all columns. This value will become more important below in :ref:`Resource Embedding`_.
 
 .. _computed_cols:
 
@@ -96,7 +99,7 @@ A full-text search on the computed column:
 Ordering
 --------
 
-The reserved word :code:`order` reorders the response rows. It uses a comma-separated list of columns and directions:
+The reserved word :sql:`order` reorders the response rows. It uses a comma-separated list of columns and directions:
 
 .. code-block:: http
 
@@ -201,7 +204,7 @@ The server will default to JSON for API endpoints and OpenAPI on the root.
 Singular or Plural
 ------------------
 
-By default PostgREST returns all JSON results in an array, even when there is only one item. For example, requesting `/items?id=eq.1` returns
+By default PostgREST returns all JSON results in an array, even when there is only one item. For example, requesting :code:`/items?id=eq.1` returns
 
 .. code:: json
 
@@ -312,12 +315,12 @@ The PostgREST url grammar limits the kinds of queries clients can perform. It pr
 * Table unions and OR-conditions in the where clause
 * More complicated joins than those provided by `Resource Embedding`_
 * Geospatial queries that require an argument, like "points near (lat,lon)"
-* More sophisticated full-text search than a simple use of the `@@` filter
+* More sophisticated full-text search than a simple use of the :sql:`@@` filter
 
 Stored Procedures
 =================
 
-Every stored procedure in the API-exposed database schema is accessible under the `/rpc` prefix. The API endpoint supports only POST which executes the function.
+Every stored procedure in the API-exposed database schema is accessible under the :code:`/rpc` prefix. The API endpoint supports only POST which executes the function.
 
 .. code:: http
 
@@ -339,9 +342,10 @@ The client can call it by posting an object like
 .. code:: http
 
   POST /rpc/add_them HTTP/1.1
+
   { "a": 1, "b": 2}
 
-The keys of the object match the parameter names. Note that PostgreSQL converts parameter names to lowercase unless you quote them like `CREATE FUNCTION foo("mixedCase" text) ...`.
+The keys of the object match the parameter names. Note that PostgreSQL converts parameter names to lowercase unless you quote them like :sql:`CREATE FUNCTION foo("mixedCase" text) ...`.
 
 .. note::
 
diff --git a/auth.rst b/auth.rst
index 2430a5009..7a8ce2316 100644
--- a/auth.rst
+++ b/auth.rst
@@ -12,7 +12,7 @@ There are three types of roles used by PostgREST, the **authenticator**, **anony
 
 .. image:: _static/security-roles.png
 
-The authenticator should be created `NOINHERIT` and configured in the database to have very limited access. It is a chameleon whose job is to "become" other users to service authenticated HTTP requests. The picture below shows how the server handles authentication. If auth succeeds, it switches into the user role specified by the request, otherwise it switches into the anonymous role.
+The authenticator should be created :code:`NOINHERIT` and configured in the database to have very limited access. It is a chameleon whose job is to "become" other users to service authenticated HTTP requests. The picture below shows how the server handles authentication. If auth succeeds, it switches into the user role specified by the request, otherwise it switches into the anonymous role.
 
 .. image:: _static/security-anon-choice.png
 
@@ -46,7 +46,7 @@ PostgreSQL manages database access permissions using the concept of roles. A rol
 Roles for Each Web User
 ~~~~~~~~~~~~~~~~~~~~~~~
 
-PostgREST can accommodate either viewpoint. If you treat a role as a single user then the the JWT-based role switching described above does most of what you need. When an authenticated user makes a request PostgREST will switch into the role for that user, which in addition to restricting queries, is available to SQL through the `current_user` variable.
+PostgREST can accommodate either viewpoint. If you treat a role as a single user then the the JWT-based role switching described above does most of what you need. When an authenticated user makes a request PostgREST will switch into the role for that user, which in addition to restricting queries, is available to SQL through the :code:`current_user` variable.
 
 You can use row-level security to flexibly restrict visibility and access for the current user. Here is an `example <http://blog.2ndquadrant.com/application-users-vs-row-level-security/>`_ from Tomas Vondra, a chat table storing messages sent between users. Users can insert rows into it to send messages to other users, and query it to see messages sent to them by other users.
 
@@ -146,7 +146,7 @@ There is no performance penalty for having many database roles, although roles a
 Custom Validation
 -----------------
 
-PostgREST honors the `exp` claim for token expiration, rejecting expired tokens. However it does not enforce any extra constraints. An example of an extra constraint would be to immediately revoke access for a certain user. The configuration file paramter `pre-request` specifies a stored procedure to call immediately after the authenticator switches into a new role and before the main query itself runs.
+PostgREST honors the :code:`exp` claim for token expiration, rejecting expired tokens. However it does not enforce any extra constraints. An example of an extra constraint would be to immediately revoke access for a certain user. The configuration file paramter :code:`pre-request` specifies a stored procedure to call immediately after the authenticator switches into a new role and before the main query itself runs.
 
 Here's an example. In the config file specify a stored procedure:
 
@@ -172,7 +172,7 @@ In the function you can run arbitrary code to check the request and raise an exc
 Client Auth
 ===========
 
-To make an authenticated request the client must include an `Authorization` HTTP header with the value `Bearer <jwt>`. For instance:
+To make an authenticated request the client must include an :code:`Authorization` HTTP header with the value :code:`Bearer <jwt>`. For instance:
 
 .. code:: http
 
@@ -241,7 +241,7 @@ Storing Users and Passwords
 
 As mentioned, an external service can provide user management and coordinate with the PostgREST server using JWT. It's also possible to support logins entirely through SQL. It's a fair bit of work, so get ready.
 
-The following table, functions, and triggers will live in a `basic_auth` schema that you shouldn't expose publicly in the API. The public views and functions will live in a different schema which internally references this internal information.
+The following table, functions, and triggers will live in a :code:`basic_auth` schema that you shouldn't expose publicly in the API. The public views and functions will live in a different schema which internally references this internal information.
 
 First we'll need a table to keep track of our users:
 
@@ -259,7 +259,7 @@ First we'll need a table to keep track of our users:
     role     name not null check (length(role) < 512),
   );
 
-We would like the role to be a foreign key to actual database roles, however PostgreSQL does not support these constraints against the `pg_roles` table. We'll use a trigger to manually enforce it.
+We would like the role to be a foreign key to actual database roles, however PostgreSQL does not support these constraints against the :code:`pg_roles` table. We'll use a trigger to manually enforce it.
 
 .. code:: plpgsql
 
@@ -283,7 +283,7 @@ We would like the role to be a foreign key to actual database roles, however Pos
     for each row
     execute procedure basic_auth.check_role_exists();
 
-Next we'll use the pgcrypto extension and a trigger to keep passwords safe in the `users` table.
+Next we'll use the pgcrypto extension and a trigger to keep passwords safe in the :code:`users` table.
 
 .. code:: plpgsql
 
@@ -370,7 +370,7 @@ An API request to call this function would look like:
 
   { "email": "foo@bar.com", "pass": "foobar" }
 
-The response would look like the snippet below. Try decoding the token at `jwt.io <https://jwt.io/>`_. (It was encoded with a secret of `mysecret` as specified in the SQL code above. You'll want to change this secret in your app!)
+The response would look like the snippet below. Try decoding the token at `jwt.io <https://jwt.io/>`_. (It was encoded with a secret of :code:`mysecret` as specified in the SQL code above. You'll want to change this secret in your app!)
 
 .. code:: json
 
@@ -395,4 +395,4 @@ Your database roles need access to the schema, tables, views and functions in or
   grant select on table pg_authid, basic_auth.users to anon;
   grant execute on function login(text,text) to anon;
 
-You may be worried from the above that anonymous users can read everything from the `basic_auth.users` table. However this table is not available for direct queries because it lives in a separate schema. The anonymous role needs access because the public `users` view reads the underlying table with the permissions of the calling user. But we have made sure the view properly restricts access to sensitive information.
+You may be worried from the above that anonymous users can read everything from the :code:`basic_auth.users` table. However this table is not available for direct queries because it lives in a separate schema. The anonymous role needs access because the public :code:`users` view reads the underlying table with the permissions of the calling user. But we have made sure the view properly restricts access to sensitive information.
diff --git a/install.rst b/install.rst
index 4bf888f48..b300cfd5c 100644
--- a/install.rst
+++ b/install.rst
@@ -84,7 +84,7 @@ PostgREST Test Suite
 Creating the Test Database
 ~~~~~~~~~~~~~~~~~~~~~~~~~~
 
-To properly run postgrest tests one needs to create a database. To do so, use the test creation script `create_test_database` in the `test/` folder.
+To properly run postgrest tests one needs to create a database. To do so, use the test creation script :code:`create_test_database` in the :code:`test/` folder.
 
 The script expects the following parameters:
 
@@ -94,22 +94,22 @@ The script expects the following parameters:
 
 Use the `connection URI <https://www.postgresql.org/docs/current/static/libpq-connect.html#AEN45347>`_ to specify the user, password, host, and port. Do not provide the database in the connection URI. The Postgres role you are using to connect must be capable of creating new databases.
 
-The `database_name` is the name of the database that `stack test` will connect to. If the database of the same name already exists on the server, the script will first drop it and then re-create it.
+The :code:`database_name` is the name of the database that :code:`stack test` will connect to. If the database of the same name already exists on the server, the script will first drop it and then re-create it.
 
-Optionally, specify the database user `stack test` will use. The user will be given necessary permissions to reset the database after every test run.
+Optionally, specify the database user :code:`stack test` will use. The user will be given necessary permissions to reset the database after every test run.
 
-If the user is not specified, the script will generate the role name `postgrest_test_` suffixed by the chosen database name, and will generate a random password for it.
+If the user is not specified, the script will generate the role name :code:`postgrest_test_` suffixed by the chosen database name, and will generate a random password for it.
 
 Optionally, if specifying an existing user to be used for the test connection, one can specify the password the user has.
 
-The script will return the db uri to use in the tests--this uri corresponds to the `db-uri` parameter in the configuration file that one would use in production.
+The script will return the db uri to use in the tests--this uri corresponds to the :code:`db-uri` parameter in the configuration file that one would use in production.
 
 Generating the user and the password allows one to create the database and run the tests against any postgres server without any modifications to the server. (Such as allowing accounts without a passoword or setting up trust authentication, or requiring the server to be on the same localhost the tests are run from).
 
 Running the Tests
 ~~~~~~~~~~~~~~~~~
 
-To run the tests, one must supply the database uri in the environment variable `POSTGREST_TEST_CONNECTION`.
+To run the tests, one must supply the database uri in the environment variable :code:`POSTGREST_TEST_CONNECTION`.
 
 Typically, one would create the database and run the test in the same command line, using the `postgres` superuser:
 
@@ -132,12 +132,12 @@ If the environment variable is empty or not specified, then the test runner will
 
   postgres://postgrest_test@localhost/postgrest_test
 
-This connection assumes the test server on the `localhost` with the user `postgrest_test` without the password and the database of the same name.
+This connection assumes the test server on the :code:`localhost:code:` with the user `postgrest_test` without the password and the database of the same name.
 
 Destroying the Database
 ~~~~~~~~~~~~~~~~~~~~~~~
 
-The test database will remain after the test, together with four new roles created on the postgres server. To permanently erase the created database and the roles, run the script `test/delete_test_database`, using the same superuser role used for creating the database:
+The test database will remain after the test, together with four new roles created on the postgres server. To permanently erase the created database and the roles, run the script :code:`test/delete_test_database`, using the same superuser role used for creating the database:
 
 .. code:: bash
 
@@ -155,16 +155,16 @@ For example, if local development is on a mac with Docker for Mac installed:
   $ docker run --name db-scripting-test -e POSTGRES_PASSWORD=pwd -p 5434:5432 -d postgres
   $ POSTGREST_TEST_CONNECTION=$(test/create_test_db "postgres://postgres:pwd@localhost:5434" test_db) stack test
 
-Additionally, if one creates a docker container to run stack test (this is necessary on MacOS Sierra with GHC below 8.0.1, where `stack test` fails), one can run PostgreSQL in a separate linked container, or use the locally installed Postgres.app.
+Additionally, if one creates a docker container to run stack test (this is necessary on MacOS Sierra with GHC below 8.0.1, where :code:`stack test` fails), one can run PostgreSQL in a separate linked container, or use the locally installed Postgres.app.
 
-Build the test container with `test/Dockerfile.test`:
+Build the test container with :code:`test/Dockerfile.test`:
 
 .. code:: bash
 
   $ docker build -t pgst-test - < text/Dockerfile.test
   $ mkdir .stack-work-docker ~/.stack-linux
 
-The first run of the test container will take a long time while the dependencies get cached. Creating the `~/.stack-linux` folder and mapping it as a volume into the container ensures that we can run the container in disposable mode and not worry about subsequent runs being slow. `.stack-work-docker` is also mapped into the container and must be specified when using stack from Linux, not to interfere with the `.stack-work` for local development. (On Sierra, `stack build` works, while `stack test` fails with GHC 8.0.1).
+The first run of the test container will take a long time while the dependencies get cached. Creating the :code:`~/.stack-linux` folder and mapping it as a volume into the container ensures that we can run the container in disposable mode and not worry about subsequent runs being slow. :code:`.stack-work-docker` is also mapped into the container and must be specified when using stack from Linux, not to interfere with the :code:`.stack-work` for local development. (On Sierra, :code:`stack build` works, while :code:`stack test` fails with GHC 8.0.1).
 
 Linked containers:
 

From e84b4cbcfe530dccd849b750c3aaabdc51a7ac10 Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Sun, 4 Dec 2016 18:34:35 -0800
Subject: [PATCH 042/652] Fill out the API ops

---
 api.rst | 88 +++++++++++++++++++++++++++++++++++++++++++++++++++++++--
 1 file changed, 85 insertions(+), 3 deletions(-)

diff --git a/api.rst b/api.rst
index bb5aa845f..380a09f1c 100644
--- a/api.rst
+++ b/api.rst
@@ -96,6 +96,12 @@ A full-text search on the computed column:
 
   GET /people?full_name=@@.Beckett HTTP/1.1
 
+As mentioned, computed columns do not appear in the output by default. However you can include them by listing them in the vertical filtering :code:`select` param:
+
+.. code-block:: HTTP
+
+  GET /people?select=*,full_name HTTP/1.1
+
 Ordering
 --------
 
@@ -310,7 +316,7 @@ Note this does not change the order of the Films, but of the list of Actors in e
 Custom Queries
 ==============
 
-The PostgREST url grammar limits the kinds of queries clients can perform. It prevents arbitrary, potentially poorly constructed and slow client queries. It's good for quality of service, but means database administrators must create custom views and stored procedures to provide richer endpoints. The most common causes for custom endpoints are
+The PostgREST URL grammar limits the kinds of queries clients can perform. It prevents arbitrary, potentially poorly constructed and slow client queries. It's good for quality of service, but means database administrators must create custom views and stored procedures to provide richer endpoints. The most common causes for custom endpoints are
 
 * Table unions and OR-conditions in the where clause
 * More complicated joins than those provided by `Resource Embedding`_
@@ -357,11 +363,87 @@ The keys of the object match the parameter names. Note that PostgreSQL converts
 Insertions / Updates
 ====================
 
-Getting Results
----------------
+All tables and `auto-updatable views <https://www.postgresql.org/docs/current/static/sql-createview.html#SQL-CREATEVIEW-UPDATABLE-VIEWS>`_ can be modified through the API, subject to permissions of the requester's database role.
+
+To create a row in a database table post a JSON object whose keys are the names of the columns you would like to create. Missing properties will be set to default values when applicable.
+
+.. code:: HTTP
+
+  POST /table_name HTTP/1.1
+
+  { "col1": "value1", "col2": "value2" }
+
+The response will include a :code:`Location` header describing where to find the new object. If the table is write-only then constructing the Location header will cause a permissions error. To successfully insert an item to a write-only table you will need to suppress the Location response header by including the request header :code:`Prefer: return=minimal`.
+
+On the other end of the spectrum you can get the full created object back in the response to your request by including the header :code:`Prefer: return=representation`. That way you won't have to make another HTTP call to discover properties that may have been filled in on the server side. You can also apply the standard `Vertical Filtering (Columns)`_ to these results.
+
+.. note::
+
+  When inserting a row you must post a JSON object, not quoted JSON.
+
+  .. code::
+
+    Yes
+    { "a": 1, "b": 2 }
+
+    No
+    "{ \"a\": 1, \"b\": 2 }"
+
+  Some javascript libraries will post the data incorrectly if you're not careful. For best results try one of the :ref:`Client-Side Libraries`_ built for PostgREST.
+
+To update a row or rows in a table, use the PATCH verb. Use :ref:`Horizontal Filtering (Rows)`_ to specify which record(s) to update. Here is an exmaple query setting the :code:`category` column to child for all people below a certain age.
+
+.. code:: HTTP
+
+  PATCH /people?age=lt.13 HTTP/1.1
+
+  { "category": "child" }
+
+Updates also support :code:`Prefer: return=representation` plus `Vertical Filtering (Columns)`_.
+
+.. note::
+
+  Beware of accidentally updating every row in a table. To learn to prevent that see :ref:`Block Full-Table Operations`_.
 
 Bulk Insert
 -----------
 
+Bulk insert works exactly like single row insert except that you provide either a JSON array of objects having uniform keys, or lines in CSV format. This not only minimizes the HTTP requests required but uses a single INSERT statement on the backend for efficiency. Note that using CSV requires less parsing on the server and is much faster.
+
+To bulk insert CSV simply post to a table route with :code:`Content-Type: text/csv` and include the names of the columns as the first row. For instance
+
+.. code:: HTTP
+
+  POST /people HTTP/1.1
+  Content-Type: text/csv
+
+  name,age,height
+  J Doe,62,70
+  Jonas,10,55
+
+An empty field (:code:`,,`) is coerced to an empty string and the reserved word :code:`NULL` is mapped to the SQL null value. Note that there should be no spaces between the column names and commas.
+
+To bulk insert JSON post an array of objects having all-matching keys
+
+.. code:: HTTP
+
+  POST /people HTTP/1.1
+  Content-Type: application/json
+
+  [
+    { "name": "J Doe", "age": 62, "height": 70 },
+    { "name": "Janus", "age": 10, "height": 55 }
+  ]
+
 Deletions
 =========
+
+To delete rows in a table, use the DELETE verb plus :ref:`Horizontal Filtering (Rows)`_. For instance deleting inactive users:
+
+.. code-block:: HTTP
+
+  DELETE /user?active=is.false HTTP/1.1
+
+.. note::
+
+  Beware of accidentally delting all rows in a table. To learn to prevent that see :ref:`Block Full-Table Operations`_.

From adb852227662a83274b61cd59124fec16ded94a0 Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Mon, 5 Dec 2016 16:14:28 -0800
Subject: [PATCH 043/652] Sorting embedded resources

---
 admin.rst |  2 +-
 api.rst   | 18 ++++++++++++++----
 2 files changed, 15 insertions(+), 5 deletions(-)

diff --git a/admin.rst b/admin.rst
index 794647150..4de4615fb 100644
--- a/admin.rst
+++ b/admin.rst
@@ -220,8 +220,8 @@ This allows compound primary keys and makes the intent for singular response ind
 
   nginx code here
 
+.. TODO
 .. Administration
-..   Alternate URL structure
 ..   API Versioning
 ..   HTTP Caching
 ..   Upgrading
diff --git a/api.rst b/api.rst
index 380a09f1c..5f5f12378 100644
--- a/api.rst
+++ b/api.rst
@@ -301,17 +301,27 @@ Which would return
 
 PostgREST can also detect relations going through join tables. Thus you can request the Actors for Films (which in this case finds the information through Roles). You can also reverse the direction of inclusion, asking for all Directories with each including the list of their Films.
 
-To order the embedded items, you need to specify the tree path in the order parameter. For instance
+.. note::
+
+  Whenever foreign key relations change in the database schema you must refresh PostgREST's schema cache to allow resource embedding to work properly. See the section :ref:`Schema Reloading`_.
+
+Embedded Filters and Order
+--------------------------
+
+Embedded tables can be filtered and ordered similarly to their top-level counterparts. To to do so prefix the query parameters with the name of the embedded table. For instance to order the actors in each film:
 
 .. code-block:: http
 
   GET /films?select=*,actors{*}&actors.order=last_name,first_name HTTP/1.1
 
-Note this does not change the order of the Films, but of the list of Actors in each Film.
+This sorts the list of actors in each film but does *not* change the order of the films themselves. To filter the roles returned with each film:
 
-.. note::
+.. code-block:: http
+
+  GET /films?select=*,roles{*}&roles.character=in.Chico,Harpo,Groucho HTTP/1.1
+
+Once again, this restricts the roles included to certain characters but does not filter the films in any way. Films without any of those characters would be included along with empty character lists.
 
-  Whenever foreign key relations change in the database schema you must refresh PostgREST's schema cache to allow resource embedding to work properly. See the section :ref:`Schema Reloading`_.
 
 Custom Queries
 ==============

From 349726cdc0e0720d56cbfefbb105724df2bfd438 Mon Sep 17 00:00:00 2001
From: Trevor Basinger <trevor.basinger@gmail.com>
Date: Sun, 11 Dec 2016 10:56:39 -0600
Subject: [PATCH 044/652] Documentation b64 option #772 (#25)

---
 admin.rst |  5 ++++-
 auth.rst  | 28 ++++++++++++++++++++++++++--
 2 files changed, 30 insertions(+), 3 deletions(-)

diff --git a/admin.rst b/admin.rst
index 4de4615fb..51b91acda 100644
--- a/admin.rst
+++ b/admin.rst
@@ -39,6 +39,7 @@ server-host       String  \*4
 server-port       Int     3000
 server-proxy-url  String
 jwt-secret        String
+secret-is-base64  Bool    False
 max-rows          Int     ∞
 pre-request       String
 ================  ======  =======  ========
@@ -58,7 +59,9 @@ server-port
 server-proxy-url
   Overrides the base URL used within the OpenAPI self-documentation hosted at the API root path.
 jwt-secret
-  The secret used to decode JWT tokens clients provide for authentication. If this parameter is not specified then PostgREST refuses authentication requests. Choosing a value for this parameter beginning with the at sign such as :code:`@filename` loads the secret out of an external file which is useful for non-UTF-8 binary secrets.
+  The secret used to decode JWT tokens clients provide for authentication. If this parameter is not specified then PostgREST refuses authentication requests. Choosing a value for this parameter beginning with the at sign such as :code:`@filename` loads the secret out of an external file. This is useful for automating deployments. Note that any binary secrets must be base64 encoded.
+secret-is-base64
+  When this is set to :code:`true`, the value derived from :code:`jwt-secret` will be treated as a base64 encoded secret.
 max-rows
   A hard limit to the number of rows PostgREST will fetch from a view, table, or stored procedure. Limits payload size for accidental or malicious requests.
 pre-request
diff --git a/auth.rst b/auth.rst
index 7a8ce2316..db8259b66 100644
--- a/auth.rst
+++ b/auth.rst
@@ -217,9 +217,33 @@ JWT from Auth0
 
 An external service like `Auth0 <https://auth0.com/>`_ can do the hard work transforming OAuth from Github, Twitter, Google etc into a JWT suitable for PostgREST. Auth0 can also handle email signup and password reset flows.
 
-To adapt Auth0 to our uses we need to save the database role in `user metadata <https://auth0.com/docs/rules/metadata-in-rules>`_ and include the metadata in `private claims <https://auth0.com/docs/jwt#payload>`_ of the generated JWT.
+By default, Auth0 generates binary base64URL encoded secrets. You can find the secret in the client settings of the Auth0 management console. Copy the client secret into your PostgREST configuration file as the :code:`jwt-secret`. Then set :code:`secret-is-base64` to :code:`true`.
+
+To adapt Auth0 to our uses we need to save the database role in `user metadata <https://auth0.com/docs/rules/metadata-in-rules>`_. Then, you will need to write a rule that will extract the role from the user metadata and include a :code:`role` claim in the payload of our user object. Afterwards, in your Auth0Lock code, include the :code:`role` claim in your `scope param <https://auth0.com/docs/libraries/lock/v10/sending-authentication-parameters#scope-string->`_.
+
+
+.. code:: javascript
+
+  // Example Auth0 rule
+  function (user, context, callback) {
+    var role = user.user_metadata.role;
+    user.role = role;
+    callback(null, user, context);
+  }
+
+
+.. code:: javascript
+
+  // Example using Auth0Lock with role claim in scope
+  new Auth0Lock ( AUTH0_CLIENTID, AUTH0_DOMAIN, {
+    container: 'lock-container',
+    auth: {
+      params: { scope: 'openid role' },
+      redirectUrl: FQDN + '/login', // Replace with your redirect url
+      responseType: 'token'
+    }
+  })
 
-**TODO: add details**
 
 .. _ssl:
 

From 4d8272fa0d79519b0182637c2c690b173a7293c3 Mon Sep 17 00:00:00 2001
From: J Phani Mahesh <github@phanimahesh.me>
Date: Sat, 17 Dec 2016 22:46:03 +0530
Subject: [PATCH 045/652] fix typo in install.rst: s/text/text/ (#27)

---
 install.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install.rst b/install.rst
index b300cfd5c..20d41f90d 100644
--- a/install.rst
+++ b/install.rst
@@ -161,7 +161,7 @@ Build the test container with :code:`test/Dockerfile.test`:
 
 .. code:: bash
 
-  $ docker build -t pgst-test - < text/Dockerfile.test
+  $ docker build -t pgst-test - < test/Dockerfile.test
   $ mkdir .stack-work-docker ~/.stack-linux
 
 The first run of the test container will take a long time while the dependencies get cached. Creating the :code:`~/.stack-linux` folder and mapping it as a volume into the container ensures that we can run the container in disposable mode and not worry about subsequent runs being slow. :code:`.stack-work-docker` is also mapped into the container and must be specified when using stack from Linux, not to interfere with the :code:`.stack-work` for local development. (On Sierra, :code:`stack build` works, while :code:`stack test` fails with GHC 8.0.1).

From b3fb9ff21578f7a391167a0dd15919dcc1568762 Mon Sep 17 00:00:00 2001
From: Nikolay <github2@samokhvalov.com>
Date: Tue, 20 Dec 2016 21:14:05 -0800
Subject: [PATCH 046/652] more about stored procedures (#26)

---
 api.rst | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/api.rst b/api.rst
index 5f5f12378..4e7b43923 100644
--- a/api.rst
+++ b/api.rst
@@ -336,7 +336,7 @@ The PostgREST URL grammar limits the kinds of queries clients can perform. It pr
 Stored Procedures
 =================
 
-Every stored procedure in the API-exposed database schema is accessible under the :code:`/rpc` prefix. The API endpoint supports only POST which executes the function.
+Every stored procedure in the API-exposed database schema is accessible under the :code:`/rpc` prefix. The API endpoint supports only POST which executes the function. Such function can perform any operations allowed by PostgreSQL (read data, modify data, and even DDL operations).
 
 .. code:: http
 
@@ -363,6 +363,10 @@ The client can call it by posting an object like
 
 The keys of the object match the parameter names. Note that PostgreSQL converts parameter names to lowercase unless you quote them like :sql:`CREATE FUNCTION foo("mixedCase" text) ...`.
 
+PostgreSQL has four procedural languages that are part of the core distribution: PL/pgSQL, PL/Tcl, PL/Perl, and PL/Python. There are many other procedural languages distributed as additional extensions. Also, plain SQL can be used to write functions (as shown in the example above).
+
+By default, a function is to be executed with the privileges of the user that calls it. This means, that the user has to have all permissions to do all operations the procedure performs. But if the function was defined with :code:`SECURITY DEFINER` options, only one permission check will take place – the permission to call the function. See `PostgreSQL documentation <https://www.postgresql.org/docs/current/static/sql-createfunction.html>`_ for more details.
+
 .. note::
 
   Why the `/rpc` prefix? One reason is to avoid name collisions between views and procedures. It also helps emphasize to API consumers that these functions are not normal restful things. The functions can have arbitrary and surprising behavior, not the standard "post creates a resource" thing that users expect from the other routes.

From f52fb70e3d10d540d5aa4601ef1d7950f5c55290 Mon Sep 17 00:00:00 2001
From: Jeffrey <jeffreymealo@gmail.com>
Date: Mon, 26 Dec 2016 12:40:23 -0500
Subject: [PATCH 047/652] Suggest swap file on systems with under 1GB of ram
 (#30)

---
 install.rst | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/install.rst b/install.rst
index 20d41f90d..22b9fbdde 100644
--- a/install.rst
+++ b/install.rst
@@ -75,6 +75,10 @@ When a pre-built binary does not exist for your system you can build the project
     cd postgrest
     stack build --install-ghc
     sudo stack install --allow-different-user --local-bin-path /usr/local/bin
+    
+.. note::
+
+   If building fails and your system has less than 1GB of memory, try adding a swap file.
 
 * Check that the server is installed: :code:`postgrest --help`.
 

From 8706779b42cc704009f6741f5682083b456c3543 Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Mon, 16 Jan 2017 20:34:39 -0800
Subject: [PATCH 048/652] Document SSH session termination precautions

---
 admin.rst | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/admin.rst b/admin.rst
index 51b91acda..239c4d1a6 100644
--- a/admin.rst
+++ b/admin.rst
@@ -67,6 +67,20 @@ max-rows
 pre-request
   A schema-qualified stored procedure name to call right after switching roles for a client request. This provides an opportunity to modify SQL variables or raise an exception to prevent the request from completing.
 
+Running the Server
+------------------
+
+PostgREST outputs basic request logging to stdout. When running it in an SSH session you must detach it from stdout or it will be terminated when the session closes. The easiest technique is redirecting the output to a logfile or to the syslog:
+
+.. code-block:: bash
+
+  ssh foo@example.com \
+    'postgrest foo.conf </dev/null >/var/log/postgrest.log 2>&1 &'
+
+  # another option is to pipe the output into "logger -t postgrest"
+
+(Avoid :code:`nohup postgrest` because the HUP signal is used for manual `Schema Reloading`_.)
+
 Hardening PostgREST
 ===================
 

From 360c90afe312be4e781a30869e34ced8f81a685f Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Mon, 16 Jan 2017 20:35:01 -0800
Subject: [PATCH 049/652] Auth0 no longer base64 encodes secrets

---
 auth.rst | 21 +++++++++++++++++----
 1 file changed, 17 insertions(+), 4 deletions(-)

diff --git a/auth.rst b/auth.rst
index db8259b66..f9c4f0267 100644
--- a/auth.rst
+++ b/auth.rst
@@ -212,15 +212,29 @@ Next write a stored procedure that returns the token. The one below returns a to
 
 PostgREST exposes this function to clients via a POST request to `/rpc/jwt_test`.
 
+.. note::
+
+  To avoid hard-coding the secret in stored procedures, save it as a property of the database.
+
+  .. code-block:: postgres
+
+    -- run this once
+    ALTER DATABASE mydb SET "app.jwt_secret" TO '!!secret!!';
+
+    -- then all functions can refer to app.jwt_secret
+    SELECT jwt.sign(
+      row_to_json(r), current_setting('app.jwt_secret')
+    ) AS token
+    FROM ...
+
 JWT from Auth0
 ~~~~~~~~~~~~~~
 
 An external service like `Auth0 <https://auth0.com/>`_ can do the hard work transforming OAuth from Github, Twitter, Google etc into a JWT suitable for PostgREST. Auth0 can also handle email signup and password reset flows.
 
-By default, Auth0 generates binary base64URL encoded secrets. You can find the secret in the client settings of the Auth0 management console. Copy the client secret into your PostgREST configuration file as the :code:`jwt-secret`. Then set :code:`secret-is-base64` to :code:`true`.
-
-To adapt Auth0 to our uses we need to save the database role in `user metadata <https://auth0.com/docs/rules/metadata-in-rules>`_. Then, you will need to write a rule that will extract the role from the user metadata and include a :code:`role` claim in the payload of our user object. Afterwards, in your Auth0Lock code, include the :code:`role` claim in your `scope param <https://auth0.com/docs/libraries/lock/v10/sending-authentication-parameters#scope-string->`_.
+To use Auth0, copy its client secret into your PostgREST configuration file as the :code:`jwt-secret`. (Old-style Auth0 secrets are Base64 encoded. For these secrets set :code:`secret-is-base64` to :code:`true`, or just refresh the Auth0 secret.) You can find the secret in the client settings of the Auth0 management console.
 
+Our code requires a database role in the JWT. To add it you need to save the database role in Auth0 `user metadata <https://auth0.com/docs/rules/metadata-in-rules>`_. Then, you will need to write a rule that will extract the role from the user metadata and include a :code:`role` claim in the payload of our user object. Afterwards, in your Auth0Lock code, include the :code:`role` claim in your `scope param <https://auth0.com/docs/libraries/lock/v10/sending-authentication-parameters#scope-string->`_.
 
 .. code:: javascript
 
@@ -244,7 +258,6 @@ To adapt Auth0 to our uses we need to save the database role in `user metadata <
     }
   })
 
-
 .. _ssl:
 
 SSL

From b3dfde5ecfa4f7e2cf0c36d40a57dbe554a893c3 Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Mon, 16 Jan 2017 20:35:17 -0800
Subject: [PATCH 050/652] Move admin section higher in TOC

---
 index.rst | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/index.rst b/index.rst
index d42418d55..f8bb6e414 100644
--- a/index.rst
+++ b/index.rst
@@ -13,6 +13,11 @@
 
    install.rst
 
+.. toctree::
+   :caption: Administration
+
+   admin.rst
+
 .. toctree::
    :caption: API
 
@@ -22,8 +27,3 @@
    :caption: Authentication
 
    auth.rst
-
-.. toctree::
-   :caption: Administration
-
-   admin.rst

From e0e604aa9f7e90f9b30ecb042707705c88ec4c36 Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Mon, 16 Jan 2017 20:35:42 -0800
Subject: [PATCH 051/652] Fix install problems reported by @tnhu

---
 install.rst | 18 ++++++++++--------
 1 file changed, 10 insertions(+), 8 deletions(-)

diff --git a/install.rst b/install.rst
index 22b9fbdde..34d0ae7ec 100644
--- a/install.rst
+++ b/install.rst
@@ -59,13 +59,14 @@ When a pre-built binary does not exist for your system you can build the project
 * `Install Stack <http://docs.haskellstack.org/en/stable/README.html#how-to-install>`_ for your platform
 * Install Library Dependencies
 
-  =====================  ============================
+  =====================  =======================================
   Operating System       Dependencies
-  =====================  ============================
-  Ubuntu/Debian          libpq-dev
-  CentOS/Fedora/Red Hat  postgresql-devel, zlib-devel
+  =====================  =======================================
+  Ubuntu/Debian          libpq-dev, libgmp-dev
+  CentOS/Fedora/Red Hat  postgresql-devel, zlib-devel, gmp-devel
   BSD                    postgresql95-server
-  =====================  ============================
+  OS X                   postgresql, gmp
+  =====================  =======================================
 
 * Build and install binary
 
@@ -73,9 +74,10 @@ When a pre-built binary does not exist for your system you can build the project
 
     git clone https://github.com/begriffs/postgrest.git
     cd postgrest
-    stack build --install-ghc
-    sudo stack install --allow-different-user --local-bin-path /usr/local/bin
-    
+
+    # adjust local-bin-path to taste
+    stack build --install-ghc --copy-bins --local-bin-path /usr/local/bin
+
 .. note::
 
    If building fails and your system has less than 1GB of memory, try adding a swap file.

From 58503af43277d1be92ee11ec891e114f3acca164 Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Mon, 16 Jan 2017 20:47:01 -0800
Subject: [PATCH 052/652] English and RST adjustments

---
 admin.rst | 2 +-
 api.rst   | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/admin.rst b/admin.rst
index 239c4d1a6..9f36dc4b9 100644
--- a/admin.rst
+++ b/admin.rst
@@ -135,7 +135,7 @@ This does not protect against malicious actions, since someone can add a url par
 Count-Header DoS
 ----------------
 
-For convenience to client-side pagination controls PostgREST supports counting and reporting total table size in its response. As described in :ref:`Limits and Pagination`_, responses ordinarily include a range but leave the total unspecified like
+For convenience to client-side pagination controls PostgREST supports counting and reporting total table size in its response. As described in `Limits and Pagination`_, responses ordinarily include a range but leave the total unspecified like
 
 .. code-block:: http
 
diff --git a/api.rst b/api.rst
index 4e7b43923..779e85bcf 100644
--- a/api.rst
+++ b/api.rst
@@ -365,7 +365,7 @@ The keys of the object match the parameter names. Note that PostgreSQL converts
 
 PostgreSQL has four procedural languages that are part of the core distribution: PL/pgSQL, PL/Tcl, PL/Perl, and PL/Python. There are many other procedural languages distributed as additional extensions. Also, plain SQL can be used to write functions (as shown in the example above).
 
-By default, a function is to be executed with the privileges of the user that calls it. This means, that the user has to have all permissions to do all operations the procedure performs. But if the function was defined with :code:`SECURITY DEFINER` options, only one permission check will take place – the permission to call the function. See `PostgreSQL documentation <https://www.postgresql.org/docs/current/static/sql-createfunction.html>`_ for more details.
+By default, a function is executed with the privileges of the user who calls it. This means that the user has to have all permissions to do the operations the procedure performs. Another option is to define the function with with the :code:`SECURITY DEFINER` option. Then only one permission check will take place, the permission to call the function, and the operations in the function will have the authority of the user who owns the function itself. See `PostgreSQL documentation <https://www.postgresql.org/docs/current/static/sql-createfunction.html>`_ for more details.
 
 .. note::
 

From e37a2a569c79dd4b5d17bb3d4dcb17e87dd17c52 Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Sat, 21 Jan 2017 20:16:21 -0800
Subject: [PATCH 053/652] Document rate limiting via nginx

---
 admin.rst | 21 ++++++++++++++++++++-
 auth.rst  |  2 ++
 2 files changed, 22 insertions(+), 1 deletion(-)

diff --git a/admin.rst b/admin.rst
index 9f36dc4b9..e2fadd380 100644
--- a/admin.rst
+++ b/admin.rst
@@ -171,7 +171,26 @@ See the :ref:`ssl` section of the authentication guide.
 Rate Limiting
 -------------
 
-Foo
+Nginx supports "leaky bucket" rate limiting (see `official docs <https://nginx.org/en/docs/http/ngx_http_limit_req_module.html>`_). Using standard Nginx configuration, routes can be grouped into *request zones* for rate limiting. For instance we can define a zone for login attempts:
+
+.. code-block:: nginx
+
+  limit_req_zone $binary_remote_addr zone=login:10m rate=1r/s;
+
+This creates a shared memory zone called "login" to store a log of IP addresses that access the rate limited urls. The space reserved, 10 MB (:code:`10m`) will give us enough space to store a history of 160k requests. We have chosen to allow only allow one request per second (:code:`1r/s`).
+
+Next we apply the zone to certain routes, like a hypothetical stored procedure called :code:`login`.
+
+.. code-block:: nginx
+
+  location /rpc/login/ {
+    # apply rate limiting
+    limit_req zone=login burst=5;
+  }
+
+The burst argument tells Nginx to start dropping requests if more than five queue up from a specific IP.
+
+Nginx rate limiting is general and indescriminate. To rate limit each authenticated request individually you will need to add logic in a :ref:`Custom Validation <custom_validation>` function.
 
 Debugging
 =========
diff --git a/auth.rst b/auth.rst
index f9c4f0267..3c42c9113 100644
--- a/auth.rst
+++ b/auth.rst
@@ -143,6 +143,8 @@ There is no performance penalty for having many database roles, although roles a
   -- allow authenticator to switch into user000 role
   -- (the role itself has nologin)
 
+.. _custom_validation:
+
 Custom Validation
 -----------------
 

From e1e1ee2d31efaefd7869eb9d31d4eb489d4a82ba Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Sat, 21 Jan 2017 23:00:13 -0800
Subject: [PATCH 054/652] pg-sns-bridge rename

---
 intro.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/intro.rst b/intro.rst
index 575b99fe7..ffec7d75c 100644
--- a/intro.rst
+++ b/intro.rst
@@ -52,7 +52,7 @@ External Notification
 
 These are PostgreSQL bridges that propagate LISTEN/NOTIFY to external queues for further processing. This allows stored procedures to initiate actions outside the database such as sending emails.
 
-* `matthewmueller/pg-sns-bridge <https://github.com/matthewmueller/pg-sns-bridge>`_ - Amazon SNS
+* `matthewmueller/pg-bridge <https://github.com/matthewmueller/pg-bridge>`_ - Amazon SNS
 * `aweber/pgsql-listen-exchange <https://github.com/aweber/pgsql-listen-exchange>`_ - RabbitMQ
 * `SpiderOak/skeeter <https://github.com/SpiderOak/skeeter>`_ - ZeroMQ
 

From 71816e64f835c5b02a4fcbae167d1a989155ff65 Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Sun, 22 Jan 2017 17:32:38 -0800
Subject: [PATCH 055/652] Fix typos in auth section

Fixes #29
---
 auth.rst | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/auth.rst b/auth.rst
index 3c42c9113..6ae84a0aa 100644
--- a/auth.rst
+++ b/auth.rst
@@ -99,9 +99,9 @@ This allows JWT generation services to include extra information and your databa
 
   .. code:: postgres
 
-    -- Prevent current_setting('postgrest.claims.email') from raising
+    -- Prevent current_setting('request.jwt.claim.email') from raising
     -- an exception if the setting is not present. Default it to ''.
-    ALTER DATABASE your_db_name SET request.claim.email TO '';
+    ALTER DATABASE your_db_name SET request.jwt.claim.email TO '';
 
   If you are unable to issue an ALTER DATABASE statement (for instance on Amazon RDS), you can create a helper function to read environment variables and swallow exceptions.
 
@@ -123,7 +123,7 @@ This allows JWT generation services to include extra information and your databa
     $$ stable language plpgsql;
 
     -- now you can call call for instance
-    -- SELECT env_var('request.claim.email')
+    -- SELECT env_var('request.jwt.claim.email')
 
 Hybrid User-Group Roles
 ~~~~~~~~~~~~~~~~~~~~~~~
@@ -381,7 +381,7 @@ As described in `JWT from SQL`_, we'll create a JWT inside our login function. N
     as $$
   declare
     _role name;
-    result basic_auth.jwt_claims;
+    result basic_auth.jwt_token;
   begin
     -- check email and password
     select basic_auth.user_role(email, pass) into _role;

From 19768064dde76c92bbeff43b5cf99533f182c04d Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Sun, 22 Jan 2017 20:16:57 -0800
Subject: [PATCH 056/652] More prominent link to downloads

---
 install.rst | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/install.rst b/install.rst
index 34d0ae7ec..50c6ba815 100644
--- a/install.rst
+++ b/install.rst
@@ -1,7 +1,9 @@
 Binary Release
 ==============
 
-The `release page <https://github.com/begriffs/postgrest/releases/latest>`_ has precompiled binaries for Mac OS X, Windows, and several Linux distros. Extract the tarball and run the binary inside with the :code:`--help` flag to see usage instructions:
+[ `Download from release page <https://github.com/begriffs/postgrest/releases/latest>`_ ]
+
+The release page has precompiled binaries for Mac OS X, Windows, and several Linux distros. Extract the tarball and run the binary inside with the :code:`--help` flag to see usage instructions:
 
 .. code-block:: bash
 

From e56ffe7b5e88532e70c711ff20a5f761faf59c1c Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Sun, 22 Jan 2017 20:36:27 -0800
Subject: [PATCH 057/652] Note json array vs native array args

---
 api.rst | 18 +++++++++++++++++-
 1 file changed, 17 insertions(+), 1 deletion(-)

diff --git a/api.rst b/api.rst
index 779e85bcf..f0f3af22a 100644
--- a/api.rst
+++ b/api.rst
@@ -359,10 +359,26 @@ The client can call it by posting an object like
 
   POST /rpc/add_them HTTP/1.1
 
-  { "a": 1, "b": 2}
+  { "a": 1, "b": 2 }
 
 The keys of the object match the parameter names. Note that PostgreSQL converts parameter names to lowercase unless you quote them like :sql:`CREATE FUNCTION foo("mixedCase" text) ...`.
 
+.. note::
+
+  We recommend using function arguments of type json to accept arrays from the client. To pass a PostgreSQL native array you'll need to quote it as a string:
+
+  .. code:: http
+
+    POST /rpc/native_array_func HTTP/1.1
+
+    { "arg": "{1,2,3}" }
+
+  .. code:: http
+
+    POST /rpc/json_array_func HTTP/1.1
+
+    { "arg": [1,2,3] }
+
 PostgreSQL has four procedural languages that are part of the core distribution: PL/pgSQL, PL/Tcl, PL/Perl, and PL/Python. There are many other procedural languages distributed as additional extensions. Also, plain SQL can be used to write functions (as shown in the example above).
 
 By default, a function is executed with the privileges of the user who calls it. This means that the user has to have all permissions to do the operations the procedure performs. Another option is to define the function with with the :code:`SECURITY DEFINER` option. Then only one permission check will take place, the permission to call the function, and the operations in the function will have the authority of the user who owns the function itself. See `PostgreSQL documentation <https://www.postgresql.org/docs/current/static/sql-createfunction.html>`_ for more details.

From 3262607b5b9fddb5c3ce4681a6895cfb8b3b0b5b Mon Sep 17 00:00:00 2001
From: Leon du Toit <dutoit.leon@gmail.com>
Date: Mon, 23 Jan 2017 17:34:39 +0100
Subject: [PATCH 058/652] Document connect strings for older versions of libpq
 (#11) (#31)

---
 admin.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/admin.rst b/admin.rst
index e2fadd380..751830018 100644
--- a/admin.rst
+++ b/admin.rst
@@ -45,7 +45,7 @@ pre-request       String
 ================  ======  =======  ========
 
 db-uri
-  The standard connection PostgreSQL `URI format <https://www.postgresql.org/docs/current/static/libpq-connect.html#AEN45347>`_. Also allows connections over Unix sockets for higher performance.
+  The standard connection PostgreSQL `URI format <https://www.postgresql.org/docs/current/static/libpq-connect.html#AEN45347>`_. On older systems like Centos 6, with older versions of libpq, a different db-uri syntax has to be used. In this case the URI is a string of space separated key-value pairs (key=value), so the example above would be :code:`"host=host user=user port=5432 dbname=dbname password=pass"`. Also allows connections over Unix sockets for higher performance.
 db-schema
   The database schema to expose to REST clients. Tables, views and stored procedures in this schema will get API endpoints.
 db-anon-role

From 404fcb6b2795d76c00eb69b500417c3b765e2c05 Mon Sep 17 00:00:00 2001
From: phil <uniphil@gmail.com>
Date: Thu, 26 Jan 2017 10:32:27 -0500
Subject: [PATCH 059/652] Fix the plurality header docs for v0.4 (#32)

---
 admin.rst | 2 +-
 api.rst   | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/admin.rst b/admin.rst
index 751830018..aec3d6c39 100644
--- a/admin.rst
+++ b/admin.rst
@@ -248,7 +248,7 @@ As discussed in `Singular or Plural`_, there are no special URL forms for singul
 .. code:: http
 
   GET /people?id=eq.1
-  Prefer: plurality=singular
+  Accept: application/vnd.pgrst.object+json
 
 This allows compound primary keys and makes the intent for singular response independent of a URL convention. However for any table which uses a simple primary key you can use Nginx to simulate the familiar URL convention.
 
diff --git a/api.rst b/api.rst
index f0f3af22a..6ec65039f 100644
--- a/api.rst
+++ b/api.rst
@@ -218,12 +218,12 @@ By default PostgREST returns all JSON results in an array, even when there is on
     { "id": 1 }
   ]
 
-This can be inconvenient for client code. To return the first result as an object unenclosed by an array, Include a Prefer request header
+This can be inconvenient for client code. To return the first result as an object unenclosed by an array, specify :code:`vnd.pgrst.object` as part of the :code:`Accept` header
 
 .. code:: http
 
   GET /items?id=eq.1 HTTP/1.1
-  Prefer: plurality=singular
+  Accept: application/vnd.pgrst.object+json
 
 This returns
 

From 892f4a8491224616f778beae49a427d15cbbd5e7 Mon Sep 17 00:00:00 2001
From: Lucas Desgouilles <ldesgoui@gmail.com>
Date: Thu, 2 Feb 2017 17:02:43 +0100
Subject: [PATCH 060/652] Override document title for index.rst (#34)

The index page has `<no-title> -- PostgREST 0.4.0.0 Documentation` for HTML title, using the `title` directive, we can force it to something nicer.
I'm not sure if this fixes it at the top of the page.

http://docutils.sourceforge.net/docs/ref/rst/directives.html#metadata-document-title
http://www.sphinx-doc.org/en/stable/rest.html#directives
---
 index.rst | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/index.rst b/index.rst
index f8bb6e414..85935f068 100644
--- a/index.rst
+++ b/index.rst
@@ -1,3 +1,5 @@
+.. title:: PostgREST Documentation
+
 .. image:: _static/logo.png
 
 .. toctree::

From e508f071b4c3ba58e4b19b2dca430324619f156f Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Fri, 3 Feb 2017 16:11:19 -0800
Subject: [PATCH 061/652] Bump copyright year

---
 conf.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/conf.py b/conf.py
index 489726976..479232894 100644
--- a/conf.py
+++ b/conf.py
@@ -46,7 +46,7 @@ master_doc = 'index'
 
 # General information about the project.
 project = u'PostgREST'
-copyright = u'2016, Joe Nelson'
+copyright = u'2017, Joe Nelson'
 author = u'Joe Nelson'
 
 # The version info for the project you're documenting, acts as replacement for

From 588b0bc7e1c1a7c7cb38b916f65ec80d190c3197 Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Fri, 3 Feb 2017 16:37:24 -0800
Subject: [PATCH 062/652] Fix internal links

---
 admin.rst | 10 +++++++---
 api.rst   | 30 +++++++++++++++++++-----------
 intro.rst |  2 ++
 3 files changed, 28 insertions(+), 14 deletions(-)

diff --git a/admin.rst b/admin.rst
index aec3d6c39..24ce3df23 100644
--- a/admin.rst
+++ b/admin.rst
@@ -79,7 +79,7 @@ PostgREST outputs basic request logging to stdout. When running it in an SSH ses
 
   # another option is to pipe the output into "logger -t postgrest"
 
-(Avoid :code:`nohup postgrest` because the HUP signal is used for manual `Schema Reloading`_.)
+(Avoid :code:`nohup postgrest` because the HUP signal is used for manual :ref:`schema_reloading`.)
 
 Hardening PostgREST
 ===================
@@ -113,6 +113,8 @@ The first step is to create an Nginx configuration file that proxies requests to
     }
   }
 
+.. _block_fulltable:
+
 Block Full-Table Operations
 ---------------------------
 
@@ -135,7 +137,7 @@ This does not protect against malicious actions, since someone can add a url par
 Count-Header DoS
 ----------------
 
-For convenience to client-side pagination controls PostgREST supports counting and reporting total table size in its response. As described in `Limits and Pagination`_, responses ordinarily include a range but leave the total unspecified like
+For convenience to client-side pagination controls PostgREST supports counting and reporting total table size in its response. As described in :ref:`limits`, responses ordinarily include a range but leave the total unspecified like
 
 .. code-block:: http
 
@@ -227,10 +229,12 @@ Once you've verified that requests are as you expect, you can get more informati
 
 Restart the database and watch the log file in real-time to understand how HTTP requests are being translated into SQL commands.
 
+.. _schema_reloading:
+
 Schema Reloading
 ----------------
 
-Users are often confused by PostgREST's database schema cache. It is present because detecting foreign key relationships between tables (including how those relationships pass through views) is necessary, but costly. API requests consult the schema cache as part of :ref:`Resource Embedding`_. However if the schema changes while the server is running it results in a stale cache and leads to errors claiming that no relations are detected between tables.
+Users are often confused by PostgREST's database schema cache. It is present because detecting foreign key relationships between tables (including how those relationships pass through views) is necessary, but costly. API requests consult the schema cache as part of :ref:`resource_embedding`. However if the schema changes while the server is running it results in a stale cache and leads to errors claiming that no relations are detected between tables.
 
 To refresh the cache without restarting the PostgREST server, send the server process a SIGHUP signal:
 
diff --git a/api.rst b/api.rst
index 6ec65039f..edf2b8f4f 100644
--- a/api.rst
+++ b/api.rst
@@ -14,7 +14,9 @@ There are no deeply/nested/routes. Each route provides OPTIONS, GET, POST, PATCH
 
 .. note::
 
-  Why not provide nested routes? Many APIs allow nesting to retrieve related information, such as :code:`/films/1/director`. We offer a more flexible mechanism (inspired by GraphQL) to embed related information. It can handle one-to-many and many-to-many relationships. This is covered in the section about `Resource Embedding`_.
+  Why not provide nested routes? Many APIs allow nesting to retrieve related information, such as :code:`/films/1/director`. We offer a more flexible mechanism (inspired by GraphQL) to embed related information. It can handle one-to-many and many-to-many relationships. This is covered in the section about :ref:`resource_embedding`.
+
+.. _h_filter:
 
 Horizontal Filtering (Rows)
 ---------------------------
@@ -57,6 +59,8 @@ To negate any operator, prefix it with :code:`not` like :code:`?a=not.eq.2`.
 
 For more complicated filters (such as those involving condition 1 OR condition 2) you will have to create a new view in the database.
 
+.. _v_filter:
+
 Vertical Filtering (Columns)
 ----------------------------
 
@@ -66,7 +70,7 @@ When certain columns are wide (such as those holding binary data), it is more ef
 
   GET /people?select=fname,age HTTP/1.1
 
-The default is :sql:`*`, meaning all columns. This value will become more important below in :ref:`Resource Embedding`_.
+The default is :sql:`*`, meaning all columns. This value will become more important below in :ref:`resource_embedding`.
 
 .. _computed_cols:
 
@@ -129,6 +133,8 @@ If you care where nulls are sorted, add nullsfirst or nullslast:
 
 You can also use :ref:`computed_cols` to order the results, even though the computed columns will not appear in the output.
 
+.. _limits:
+
 Limits and Pagination
 ---------------------
 
@@ -246,7 +252,9 @@ You can use a tool like `Swagger UI <http://swagger.io/swagger-ui/>`_ to create
 
 .. note::
 
-  The OpenAPI information can go out of date as the schema changes under a running server. To learn how to refresh the cache see :ref:`Schema Reloading`_.
+  The OpenAPI information can go out of date as the schema changes under a running server. To learn how to refresh the cache see :ref:`schema_reloading`.
+
+.. _resource_embedding:
 
 Resource Embedding
 ==================
@@ -303,7 +311,7 @@ PostgREST can also detect relations going through join tables. Thus you can requ
 
 .. note::
 
-  Whenever foreign key relations change in the database schema you must refresh PostgREST's schema cache to allow resource embedding to work properly. See the section :ref:`Schema Reloading`_.
+  Whenever foreign key relations change in the database schema you must refresh PostgREST's schema cache to allow resource embedding to work properly. See the section :ref:`schema_reloading`.
 
 Embedded Filters and Order
 --------------------------
@@ -405,7 +413,7 @@ To create a row in a database table post a JSON object whose keys are the names
 
 The response will include a :code:`Location` header describing where to find the new object. If the table is write-only then constructing the Location header will cause a permissions error. To successfully insert an item to a write-only table you will need to suppress the Location response header by including the request header :code:`Prefer: return=minimal`.
 
-On the other end of the spectrum you can get the full created object back in the response to your request by including the header :code:`Prefer: return=representation`. That way you won't have to make another HTTP call to discover properties that may have been filled in on the server side. You can also apply the standard `Vertical Filtering (Columns)`_ to these results.
+On the other end of the spectrum you can get the full created object back in the response to your request by including the header :code:`Prefer: return=representation`. That way you won't have to make another HTTP call to discover properties that may have been filled in on the server side. You can also apply the standard :ref:`v_filter` to these results.
 
 .. note::
 
@@ -419,9 +427,9 @@ On the other end of the spectrum you can get the full created object back in the
     No
     "{ \"a\": 1, \"b\": 2 }"
 
-  Some javascript libraries will post the data incorrectly if you're not careful. For best results try one of the :ref:`Client-Side Libraries`_ built for PostgREST.
+  Some javascript libraries will post the data incorrectly if you're not careful. For best results try one of the :ref:`clientside_libraries` built for PostgREST.
 
-To update a row or rows in a table, use the PATCH verb. Use :ref:`Horizontal Filtering (Rows)`_ to specify which record(s) to update. Here is an exmaple query setting the :code:`category` column to child for all people below a certain age.
+To update a row or rows in a table, use the PATCH verb. Use :ref:`h_filter` to specify which record(s) to update. Here is an exmaple query setting the :code:`category` column to child for all people below a certain age.
 
 .. code:: HTTP
 
@@ -429,11 +437,11 @@ To update a row or rows in a table, use the PATCH verb. Use :ref:`Horizontal Fil
 
   { "category": "child" }
 
-Updates also support :code:`Prefer: return=representation` plus `Vertical Filtering (Columns)`_.
+Updates also support :code:`Prefer: return=representation` plus :ref:`v_filter`.
 
 .. note::
 
-  Beware of accidentally updating every row in a table. To learn to prevent that see :ref:`Block Full-Table Operations`_.
+  Beware of accidentally updating every row in a table. To learn to prevent that see :ref:`block_fulltable`.
 
 Bulk Insert
 -----------
@@ -468,7 +476,7 @@ To bulk insert JSON post an array of objects having all-matching keys
 Deletions
 =========
 
-To delete rows in a table, use the DELETE verb plus :ref:`Horizontal Filtering (Rows)`_. For instance deleting inactive users:
+To delete rows in a table, use the DELETE verb plus :ref:`h_filter`. For instance deleting inactive users:
 
 .. code-block:: HTTP
 
@@ -476,4 +484,4 @@ To delete rows in a table, use the DELETE verb plus :ref:`Horizontal Filtering (
 
 .. note::
 
-  Beware of accidentally delting all rows in a table. To learn to prevent that see :ref:`Block Full-Table Operations`_.
+  Beware of accidentally delting all rows in a table. To learn to prevent that see :ref:`block_fulltable`.
diff --git a/intro.rst b/intro.rst
index ffec7d75c..9ed102b53 100644
--- a/intro.rst
+++ b/intro.rst
@@ -35,6 +35,8 @@ Ecosystem
 
 PostgREST has a growing ecosystem of examples, and libraries, experiments, and users. Here is a selection.
 
+.. _clientside_libraries:
+
 Client-Side Libraries
 ---------------------
 

From 07777ea76b8e68d61022b42db335af8b49b3bbb1 Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Fri, 3 Feb 2017 16:56:25 -0800
Subject: [PATCH 063/652] Note websockets postgres integration

From https://github.com/begriffs/postgrest/issues/278
---
 intro.rst | 1 +
 1 file changed, 1 insertion(+)

diff --git a/intro.rst b/intro.rst
index 9ed102b53..3c7c9d7b7 100644
--- a/intro.rst
+++ b/intro.rst
@@ -54,6 +54,7 @@ External Notification
 
 These are PostgreSQL bridges that propagate LISTEN/NOTIFY to external queues for further processing. This allows stored procedures to initiate actions outside the database such as sending emails.
 
+* `frafra/postgresql2websocket <https://github.com/frafra/postgresql2websocket>`_ - Websockets
 * `matthewmueller/pg-bridge <https://github.com/matthewmueller/pg-bridge>`_ - Amazon SNS
 * `aweber/pgsql-listen-exchange <https://github.com/aweber/pgsql-listen-exchange>`_ - RabbitMQ
 * `SpiderOak/skeeter <https://github.com/SpiderOak/skeeter>`_ - ZeroMQ

From b237a4943c3d319d452f89d60d54b5e40903f3d0 Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Mon, 6 Feb 2017 10:29:45 -0800
Subject: [PATCH 064/652] More client side libs

---
 intro.rst | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/intro.rst b/intro.rst
index 3c7c9d7b7..6d94d44da 100644
--- a/intro.rst
+++ b/intro.rst
@@ -40,6 +40,8 @@ PostgREST has a growing ecosystem of examples, and libraries, experiments, and u
 Client-Side Libraries
 ---------------------
 
+* `PierreRochard/angular2-postgrest <https://github.com/PierreRochard/angular2-postgrest>`_ - JS, Angular 2
+* `tomberek/aor-postgrest-client <https://github.com/tomberek/aor-postgrest-client>`_ - JS, admin-on-rest
 * `hugomrdias/postgrest-url <https://github.com/hugomrdias/postgrest-url>`_ - JS, just for generating query URLs
 * `john-kelly/elm-postgrest <https://github.com/john-kelly/elm-postgrest>`_ - Elm
 * `mithril.postgrest <https://github.com/catarse/mithril.postgrest>`_ - JS, Mithril

From 7742891c26f14919b51a1c041b652bd75ab3008e Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Mon, 6 Feb 2017 10:56:41 -0800
Subject: [PATCH 065/652] safeupdate via PGXN

---
 admin.rst | 9 ++++++++-
 intro.rst | 1 +
 2 files changed, 9 insertions(+), 1 deletion(-)

diff --git a/admin.rst b/admin.rst
index 24ce3df23..d157fc4d9 100644
--- a/admin.rst
+++ b/admin.rst
@@ -130,7 +130,14 @@ However it's very easy to delete the **entire table** by omitting the query para
 
   DELETE /logs HTTP/1.1
 
-This can happen accidentally such as by switching a request from a GET to a DELETE. To protect against accidental operations use the `pg-safeupdate <https://bitbucket.org/eradman/pg-safeupdate/>`_ PostgreSQL extension. It raises an error if UPDATE or DELETE are executed without specifying conditions.
+This can happen accidentally such as by switching a request from a GET to a DELETE. To protect against accidental operations use the `pg-safeupdate <https://bitbucket.org/eradman/pg-safeupdate/>`_ PostgreSQL extension. It raises an error if UPDATE or DELETE are executed without specifying conditions. To install it you can use the `PGXN <http://pgxn.org/>`_ network:
+
+.. code-block:: bash
+
+  sudo -E pgxn install safeupdate
+
+  # then add this to postgresql.conf:
+  # shared_preload_libraries='safeupdate';
 
 This does not protect against malicious actions, since someone can add a url parameter that does not affect the result set. To prevent this you must turn to database permissions, forbidding the wrong people from deleting rows, and using `row-level security <https://www.postgresql.org/docs/current/static/ddl-rowsecurity.html>`_ if finer access control is required.
 
diff --git a/intro.rst b/intro.rst
index 6d94d44da..b87681d72 100644
--- a/intro.rst
+++ b/intro.rst
@@ -93,6 +93,7 @@ Extensions
 * `srid/spas <https://github.com/srid/spas>`_ - allow file uploads and basic auth
 * `svmnotn/postgrest-auth <https://github.com/svmnotn/postgrest-auth>`_ - OAuth2-inspired external auth server
 * `nblumoe/postgrest-oauth <https://github.com/nblumoe/postgrest-oauth>`_ - OAuth2 WAI middleware
+* `pg-safeupdate <https://bitbucket.org/eradman/pg-safeupdate/>`_ - Prevent full-table updates or deletes
 
 Commercial PaaS
 ---------------

From 01def809373bd4a87894050600f8742e7b1669d0 Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Mon, 6 Feb 2017 11:05:45 -0800
Subject: [PATCH 066/652] Google translate example

---
 intro.rst | 1 +
 1 file changed, 1 insertion(+)

diff --git a/intro.rst b/intro.rst
index b87681d72..813b99446 100644
--- a/intro.rst
+++ b/intro.rst
@@ -64,6 +64,7 @@ These are PostgreSQL bridges that propagate LISTEN/NOTIFY to external queues for
 Example Apps
 ------------
 
+* `NikolayS/postgrest-google-translate <https://github.com/NikolayS/postgrest-google-translate>`_ - Calling to external translation service
 * `CodeforAustralia/heritage-near-me <https://github.com/CodeforAustralia/heritage-near-me>`_ - Elm and PostgREST with PostGIS
 * `timwis/handsontable-postgrest <https://github.com/timwis/handsontable-postgrest>`_ - An excel-like database table editor
 * `Recmo/PostgrestSkeleton <https://github.com/Recmo/PostgrestSkeleton>`_ - Docker Compose, PostgREST, Nginx and Auth0

From 6e1e8f02de9532ae0f443b4a086b844df169b19a Mon Sep 17 00:00:00 2001
From: Hugo Dias <mail@hugodias.me>
Date: Fri, 10 Feb 2017 17:49:56 +0000
Subject: [PATCH 067/652] fix: fix server-proxy-uri config (#35)

---
 admin.rst | 23 ++++++++++++++++++++---
 1 file changed, 20 insertions(+), 3 deletions(-)

diff --git a/admin.rst b/admin.rst
index d157fc4d9..95fd11b68 100644
--- a/admin.rst
+++ b/admin.rst
@@ -37,7 +37,7 @@ db-anon-role      String           Y
 db-pool           Int     10
 server-host       String  \*4
 server-port       Int     3000
-server-proxy-url  String
+server-proxy-uri  String
 jwt-secret        String
 secret-is-base64  Bool    False
 max-rows          Int     ∞
@@ -56,8 +56,25 @@ server-host
   Where to bind the PostgREST web server.
 server-port
   The port to bind the web server.
-server-proxy-url
-  Overrides the base URL used within the OpenAPI self-documentation hosted at the API root path.
+server-proxy-uri
+  Overrides the base URL used within the OpenAPI self-documentation hosted at the API root path. Use a complete URI syntax :code:`scheme:[//[user:password@]host[:port]][/]path[?query][#fragment]`. Ex. :code:`https://postgrest.com`
+
+.. code:: json
+
+  {
+    "swagger": "2.0",
+    "info": {
+      "version": "0.4.0.0",
+      "title": "PostgREST API",
+      "description": "This is a dynamic API generated by PostgREST"
+    },
+    "host": "postgrest.com:443",
+    "basePath": "/",
+    "schemes": [
+      "https"
+    ]
+  }
+
 jwt-secret
   The secret used to decode JWT tokens clients provide for authentication. If this parameter is not specified then PostgREST refuses authentication requests. Choosing a value for this parameter beginning with the at sign such as :code:`@filename` loads the secret out of an external file. This is useful for automating deployments. Note that any binary secrets must be base64 encoded.
 secret-is-base64

From 022e1101e78abde563ef8cfb36feb7e8e8c8fe38 Mon Sep 17 00:00:00 2001
From: Tony Adams <tony@atoms.net>
Date: Tue, 14 Feb 2017 23:35:05 -0600
Subject: [PATCH 068/652] fix a missing infinitive (typo) in intro.rst (#36)

---
 intro.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/intro.rst b/intro.rst
index 813b99446..352838f3a 100644
--- a/intro.rst
+++ b/intro.rst
@@ -8,7 +8,7 @@ Using PostgREST is an alternative to manual CRUD programming. Custom API servers
 Declarative Programming
 -----------------------
 
-It's easier to ask PostgreSQL to join data for you and let its query planner figure out the details than to loop through rows yourself. It's easier to assign permissions to db objects than to add guards in controllers. (This is especially true for cascading permissions in data dependencies.) It's easier set constraints than to litter code with sanity checks.
+It's easier to ask PostgreSQL to join data for you and let its query planner figure out the details than to loop through rows yourself. It's easier to assign permissions to db objects than to add guards in controllers. (This is especially true for cascading permissions in data dependencies.) It's easier to set constraints than to litter code with sanity checks.
 
 Leak-proof Abstraction
 ----------------------

From d461e3387f7366f57fca50c2f207ac754c18235b Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Sun, 19 Feb 2017 18:11:40 -0800
Subject: [PATCH 069/652] Note the need for percent encoding in passwords

---
 admin.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/admin.rst b/admin.rst
index 95fd11b68..f70cf4d66 100644
--- a/admin.rst
+++ b/admin.rst
@@ -45,7 +45,7 @@ pre-request       String
 ================  ======  =======  ========
 
 db-uri
-  The standard connection PostgreSQL `URI format <https://www.postgresql.org/docs/current/static/libpq-connect.html#AEN45347>`_. On older systems like Centos 6, with older versions of libpq, a different db-uri syntax has to be used. In this case the URI is a string of space separated key-value pairs (key=value), so the example above would be :code:`"host=host user=user port=5432 dbname=dbname password=pass"`. Also allows connections over Unix sockets for higher performance.
+  The standard connection PostgreSQL `URI format <https://www.postgresql.org/docs/current/static/libpq-connect.html#AEN45347>`_. Symbols and unusual characters in the password or other fields should be percent encoded to avoid a parse error. On older systems like Centos 6, with older versions of libpq, a different db-uri syntax has to be used. In this case the URI is a string of space separated key-value pairs (key=value), so the example above would be :code:`"host=host user=user port=5432 dbname=dbname password=pass"`. Also allows connections over Unix sockets for higher performance.
 db-schema
   The database schema to expose to REST clients. Tables, views and stored procedures in this schema will get API endpoints.
 db-anon-role

From ecbf49ad7f3d8634d6ff3ffb93564183acf7a27a Mon Sep 17 00:00:00 2001
From: Peter <ppkrauss@gmail.com>
Date: Mon, 20 Feb 2017 19:33:37 -0300
Subject: [PATCH 070/652] replace code:postgres by code:sql (#43)

Code blocks with code:postgres are not highlighted (see site navigation), not works. Replaced by code:sql that works "fine"
---
 auth.rst | 24 ++++++++++++------------
 1 file changed, 12 insertions(+), 12 deletions(-)

diff --git a/auth.rst b/auth.rst
index 6ae84a0aa..0d1f84214 100644
--- a/auth.rst
+++ b/auth.rst
@@ -26,13 +26,13 @@ Here are the technical details. We use `JSON Web Tokens <http://jwt.io/>`_ to au
 
 When a request contains a valid JWT with a role claim PostgREST will switch to the database role with that name for the duration of the HTTP request.
 
-.. code:: postgres
+.. code:: sql
 
   SET LOCAL ROLE user123;
 
 Note that the database administrator must allow the authenticator role to switch into this user by previously executing
 
-.. code:: postgres
+.. code:: sql
 
   GRANT user123 TO authenticator;
 
@@ -50,7 +50,7 @@ PostgREST can accommodate either viewpoint. If you treat a role as a single user
 
 You can use row-level security to flexibly restrict visibility and access for the current user. Here is an `example <http://blog.2ndquadrant.com/application-users-vs-row-level-security/>`_ from Tomas Vondra, a chat table storing messages sent between users. Users can insert rows into it to send messages to other users, and query it to see messages sent to them by other users.
 
-.. code:: postgres
+.. code:: sql
 
   CREATE TABLE chat (
     message_uuid    UUID PRIMARY KEY DEFAULT uuid_generate_v4(),
@@ -65,7 +65,7 @@ We want to enforce a policy that ensures a user can see only those messages sent
 
 PostgreSQL (9.5 and later) allows us to set this policy with row-level security:
 
-.. code:: postgres
+.. code:: sql
 
   CREATE POLICY chat_policy ON chat
     USING ((message_to = current_user) OR (message_from = current_user))
@@ -87,7 +87,7 @@ Alternately database roles can represent groups instead of (or in addition to) i
 
 SQL code can access claims through GUC variables set by PostgREST per request. For instance to get the email claim, call this function:
 
-.. code:: postgres
+.. code:: sql
 
   current_setting('request.jwt.claim.email')
 
@@ -97,7 +97,7 @@ This allows JWT generation services to include extra information and your databa
 
   The current_setting function raises an exception if the setting in question is not present, as when a claim is missing from the JWT. Your SQL functions can either catch the exception, or you can set a default value for the database like this.
 
-  .. code:: postgres
+  .. code:: sql
 
     -- Prevent current_setting('request.jwt.claim.email') from raising
     -- an exception if the setting is not present. Default it to ''.
@@ -105,7 +105,7 @@ This allows JWT generation services to include extra information and your databa
 
   If you are unable to issue an ALTER DATABASE statement (for instance on Amazon RDS), you can create a helper function to read environment variables and swallow exceptions.
 
-  .. code:: plpgsql
+  .. code:: sql
 
     create function env_var(v text) returns text as $$
       declare
@@ -130,7 +130,7 @@ Hybrid User-Group Roles
 
 There is no performance penalty for having many database roles, although roles are namespaced per-cluster rather than per-database so may be prone to collision within the database. You are free to assign a new role for every user in a web application if desired. You can mix the group and individual role policies. For instance we could still have a webuser role and individual users which inherit from it:
 
-.. code:: postgres
+.. code:: sql
 
   CREATE ROLE webuser NOLOGIN;
   -- grant this role access to certain tables etc
@@ -158,7 +158,7 @@ Here's an example. In the config file specify a stored procedure:
 
 In the function you can run arbitrary code to check the request and raise an exception to block it if desired.
 
-.. code:: postgres
+.. code:: sql
 
   CREATE OR REPLACE FUNCTION check_user() RETURNS void
     LANGUAGE plpgsql
@@ -193,7 +193,7 @@ You can create JWT tokens in SQL using the `pgjwt extension <https://github.com/
 
 Next write a stored procedure that returns the token. The one below returns a token with a hard-coded role, which expires five minutes after it was issued. Note this function has a hard-coded secret as well.
 
-.. code:: postgres
+.. code:: sql
 
   CREATE TYPE jwt_token AS (
     token text
@@ -284,7 +284,7 @@ The following table, functions, and triggers will live in a :code:`basic_auth` s
 
 First we'll need a table to keep track of our users:
 
-.. code:: postgres
+.. code:: sql
 
   -- We put things inside the basic_auth schema to hide
   -- them from public view. Certain public procs/views will
@@ -422,7 +422,7 @@ Permissions
 
 Your database roles need access to the schema, tables, views and functions in order to service HTTP requests. Recall from the `Overview of Role System`_ that PostgREST uses special roles to process requests, namely the authenticator and anonymous roles. Below is an example of permissions that allow anonymous users to create accounts and attempt to log in.
 
-.. code:: postgres
+.. code:: sql
 
   -- the names "anon" and "authenticator" are configurable and not
   -- sacred, we simply choose them for clarity

From f1181cce7380573b62fcfd9873acfde4d2311daa Mon Sep 17 00:00:00 2001
From: Sushant Bajracharya <sussyoung9@gmail.com>
Date: Sun, 26 Feb 2017 22:23:26 +0545
Subject: [PATCH 071/652] Added a / after location /api (#44)

---
 admin.rst | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/admin.rst b/admin.rst
index f70cf4d66..6b290105e 100644
--- a/admin.rst
+++ b/admin.rst
@@ -118,10 +118,10 @@ The first step is to create an Nginx configuration file that proxies requests to
     server {
       ...
       # expose to the outside world
-      location /api {
+      location /api/ {
         default_type  application/json;
         proxy_hide_header Content-Location;
-        add_header Content-Location  /api$upstream_http_content_location;
+        add_header Content-Location  /api/$upstream_http_content_location;
         proxy_set_header  Connection "";
         proxy_http_version 1.1;
         proxy_pass http://postgrest/;

From b8f2ffc0a306be9ec283566f817d2aa03ccb952a Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Mon, 27 Feb 2017 09:38:21 -0800
Subject: [PATCH 072/652] Instructions for building docs locally

---
 README.md | 20 ++++++++++++++++++++
 1 file changed, 20 insertions(+)
 create mode 100644 README.md

diff --git a/README.md b/README.md
new file mode 100644
index 000000000..bb9afe28e
--- /dev/null
+++ b/README.md
@@ -0,0 +1,20 @@
+#### Sphinx source files for PostgREST documentation
+
+To generate HTML version:
+
+1. Install Sphinx from the [sphinx website](http://sphinx-doc.org/latest/install.html)
+2. Clone this repository
+4. Generate HTML
+    ```bash
+    cd postgrest-docs
+    sphinx-build -b html -a -n . _build
+
+    # open _build/index.html in your browser
+    ```
+
+---
+
+**Sphinx Installation Notes:**
+
+* If you're on OSX you might want to install the Python from homebrew - then a simple `pip install sphinx` does the trick.
+* For an easier time refreshing your local preview of docs as you change it, try [sphinx-autobuild](https://github.com/GaretJax/sphinx-autobuild).

From 8b170afe4948e74b725547ce11e01384ad506c6f Mon Sep 17 00:00:00 2001
From: Joe Nelson <begriffs@users.noreply.github.com>
Date: Mon, 13 Mar 2017 09:51:12 -0700
Subject: [PATCH 073/652] More extensions, example apps, client side libs (#45)

---
 intro.rst | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/intro.rst b/intro.rst
index 352838f3a..644bd20a3 100644
--- a/intro.rst
+++ b/intro.rst
@@ -50,6 +50,7 @@ Client-Side Libraries
 * `JarvusInnovations/jarvus-postgrest-apikit <https://github.com/JarvusInnovations/jarvus-postgrest-apikit>`_ - JS, Sencha framework
 * `davidthewatson/postgrest_python_requests_client <https://github.com/davidthewatson/postgrest_python_requests_client>`_ - Python
 * `calebmer/postgrest-client <https://github.com/calebmer/postgrest-client>`_ - JS
+* `clesiemo3/postgrestR <https://github.com/clesiemo3/postgrestR>`_ - R
 
 External Notification
 ---------------------
@@ -77,6 +78,7 @@ Example Apps
 * `myfreeweb/moneylog <https://github.com/myfreeweb/moneylog>`_ - accounting web app in Polymer + PostgREST
 * `tyrchen/goodfilm <https://github.com/tyrchen/goodfilm>`_ - example film api
 * `begriffs/postgrest-example <https://github.com/begriffs/postgrest-example>`_ - sqitch versioning for API
+* `SMRxT/postgrest-demo <https://github.com/SMRxT/postgrest-demo>`_ - multi-tenant logging system
 
 In Production
 -------------
@@ -90,11 +92,12 @@ In Production
 Extensions
 ----------
 
+* `ppKrauss/PostgREST-writeAPI <https://github.com/ppKrauss/PostgREST-writeAPI>`_ - generate Nginx rewrite rules to fit an OpenAPI spec
 * `diogob/postgrest-ws <https://github.com/diogob/postgrest-ws>`_ - expose web sockets for PostgreSQL's LISTEN/NOTIFY
+* `pg-safeupdate <https://bitbucket.org/eradman/pg-safeupdate/>`_ - Prevent full-table updates or deletes
 * `srid/spas <https://github.com/srid/spas>`_ - allow file uploads and basic auth
 * `svmnotn/postgrest-auth <https://github.com/svmnotn/postgrest-auth>`_ - OAuth2-inspired external auth server
 * `nblumoe/postgrest-oauth <https://github.com/nblumoe/postgrest-oauth>`_ - OAuth2 WAI middleware
-* `pg-safeupdate <https://bitbucket.org/eradman/pg-safeupdate/>`_ - Prevent full-table updates or deletes
 
 Commercial PaaS
 ---------------

From 708e0cd0b6eee10dbcfceea18af5a6dfa89b019a Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Thu, 16 Mar 2017 00:33:32 -0700
Subject: [PATCH 074/652] Another site in production

---
 intro.rst | 1 +
 1 file changed, 1 insertion(+)

diff --git a/intro.rst b/intro.rst
index 644bd20a3..50bbaacb8 100644
--- a/intro.rst
+++ b/intro.rst
@@ -88,6 +88,7 @@ In Production
 * `Redsmin <https://www.redsmin.com/>`_
 * `Image-charts <https://image-charts.com/>`_
 * `Drip Depot <https://www.dripdepot.com/>`_
+* `OpenBooking <http://openbooking.ch>`_
 
 Extensions
 ----------

From 8e6410e55d95aa905b35dfb3ed9c17bf42ec19d1 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Steve=20Ch=C3=A1vez?= <stevechavezast@gmail.com>
Date: Fri, 24 Mar 2017 16:14:03 -0500
Subject: [PATCH 075/652] Add section for binary output (#46)

---
 api.rst | 28 ++++++++++++++++++++++------
 1 file changed, 22 insertions(+), 6 deletions(-)

diff --git a/api.rst b/api.rst
index edf2b8f4f..46b9411ee 100644
--- a/api.rst
+++ b/api.rst
@@ -210,6 +210,7 @@ The current possibilities are
 * text/csv
 * application/json
 * application/openapi+json
+* application/octet-stream
 
 The server will default to JSON for API endpoints and OpenAPI on the root.
 
@@ -243,16 +244,20 @@ This returns
 
   Admittedly PostgREST could detect when there is an equality condition holding on all columns constituting the primary key and automatically convert to singular. However this could lead to a surprising change of format that breaks unwary client code just by filtering on an extra column. Instead we allow manually specifying singular vs plural to decouple that choice from the URL format.
 
-OpenAPI Support
-===============
+Binary output
+-------------
 
-Every API hosted by PostgREST automatically serves a full `OpenAPI <https://www.openapis.org/>`_ description on the root path. This provides a list of all endpoints, along with supported HTTP verbs and example payloads.
+If you want to return raw binary data from a :code:`bytea` column, you must specify :code:`application/octet-stream` as part of the :code:`Accept` header
+and select a single column :code:`?select=bin_data`.
 
-You can use a tool like `Swagger UI <http://swagger.io/swagger-ui/>`_ to create beautiful documentation from the description and to host an interactive web-based dahsboard. The dashboard allows developers to make requests against a live PostgREST server, provides guidance with request headers and example request bodies.
+.. code:: http
+
+  GET /items?select=bin_data&id=eq.1 HTTP/1.1
+  Accept: application/octet-stream
 
 .. note::
 
-  The OpenAPI information can go out of date as the schema changes under a running server. To learn how to refresh the cache see :ref:`schema_reloading`.
+  If more than one row would be returned the binary results will be concatenated with no delimiter.
 
 .. _resource_embedding:
 
@@ -350,7 +355,7 @@ Every stored procedure in the API-exposed database schema is accessible under th
 
   POST /rpc/function_name HTTP/1.1
 
-Procedures must used `named arguments <https://www.postgresql.org/docs/current/static/sql-syntax-calling-funcs.html#SQL-SYNTAX-CALLING-FUNCS-NAMED>`_. To supply arguments in an API call, include a JSON object in the request payload and each key/value of the object will become an argument.
+Procedures must be used with `named arguments <https://www.postgresql.org/docs/current/static/sql-syntax-calling-funcs.html#SQL-SYNTAX-CALLING-FUNCS-NAMED>`_. To supply arguments in an API call, include a JSON object in the request payload and each key/value of the object will become an argument.
 
 For instance, assume we have created this function in the database.
 
@@ -485,3 +490,14 @@ To delete rows in a table, use the DELETE verb plus :ref:`h_filter`. For instanc
 .. note::
 
   Beware of accidentally delting all rows in a table. To learn to prevent that see :ref:`block_fulltable`.
+
+OpenAPI Support
+===============
+
+Every API hosted by PostgREST automatically serves a full `OpenAPI <https://www.openapis.org/>`_ description on the root path. This provides a list of all endpoints, along with supported HTTP verbs and example payloads.
+
+You can use a tool like `Swagger UI <http://swagger.io/swagger-ui/>`_ to create beautiful documentation from the description and to host an interactive web-based dahsboard. The dashboard allows developers to make requests against a live PostgREST server, provides guidance with request headers and example request bodies.
+
+.. note::
+
+  The OpenAPI information can go out of date as the schema changes under a running server. To learn how to refresh the cache see :ref:`schema_reloading`.

From e54fb2a2643621cf572c8453f4890f6a287baa9e Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Sat, 25 Mar 2017 10:58:30 -0700
Subject: [PATCH 076/652] Misc improvements

How to pass a single json object to stored proc

List HTTP codes for db errors

Point out 404 semantics of singular responses

OR query workaround

Include nginx example for singular rewrite
---
 admin.rst | 15 ++++++++--
 api.rst   | 88 +++++++++++++++++++++++++++++++++++++++++++++++++++++--
 2 files changed, 99 insertions(+), 4 deletions(-)

diff --git a/admin.rst b/admin.rst
index 6b290105e..e3cd25168 100644
--- a/admin.rst
+++ b/admin.rst
@@ -278,11 +278,22 @@ As discussed in `Singular or Plural`_, there are no special URL forms for singul
   GET /people?id=eq.1
   Accept: application/vnd.pgrst.object+json
 
-This allows compound primary keys and makes the intent for singular response independent of a URL convention. However for any table which uses a simple primary key you can use Nginx to simulate the familiar URL convention.
+This allows compound primary keys and makes the intent for singular response independent of a URL convention.
+
+Nginx rewrite rules allow you to simulate the familiar URL convention. The following example adds a rewrite rule for all table endpoints, but you'll want to restrict it to those tables that have a numeric simple primary key named "id."
 
 .. code:: nginx
 
-  nginx code here
+  # support /endpoint/:id url style
+  location ~ ^/([a-z_]+)/([0-9]+) {
+
+    # make the response singular
+    proxy_set_header Accept 'application/vnd.pgrst.object+json';
+
+    # assuming an upstream named "postgrest"
+    proxy_pass http://postgrest/$1?id=eq.$2;
+
+  }
 
 .. TODO
 .. Administration
diff --git a/api.rst b/api.rst
index 46b9411ee..7595c33fa 100644
--- a/api.rst
+++ b/api.rst
@@ -57,7 +57,26 @@ not           negates another operator, see below
 
 To negate any operator, prefix it with :code:`not` like :code:`?a=not.eq.2`.
 
-For more complicated filters (such as those involving condition 1 OR condition 2) you will have to create a new view in the database.
+For more complicated filters (such as those involving disjunctions) you will have to create a new view in the database, or use a stored procedure. For instance, here's a view to show "today's stories" including possibly older pinned stories:
+
+.. code-block:: postgresql
+
+  CREATE VIEW fresh_stories AS
+  SELECT *
+    FROM stories
+   WHERE pinned = true
+      OR published > now() - interval '1 day'
+  ORDER BY pinned DESC, published DESC;
+
+The view will provide a new endpoint:
+
+.. code-block:: http
+
+  GET /fresh_stories HTTP/1.1
+
+.. note::
+
+  We're working to extend the PostgREST query grammar to allow more complicated boolean logic, while continuing to prevent performance problems from arbitrary client queries.
 
 .. _v_filter:
 
@@ -238,6 +257,8 @@ This returns
 
   { "id": 1 }
 
+When a singular response is requested but no entries are found, the server responds with an empty body and 404 status code rather than the usual empty array and 200 status.
+
 .. note::
 
   Many APIs distinguish plural and singular resources using a special nested URL convention e.g. `/stories` vs `/stories/1`. Why do we use `/stories?id=eq.1`? The answer is because a singlular resource is (for us) a row determined by a primary key, and primary keys can be compound (meaning defined across more than one column). The more familiar nested urls consider only a degenerate case of simple and overwhelmingly numeric primary keys. These so-called artificial keys are often introduced automatically by Object Relational Mapping libraries.
@@ -374,7 +395,7 @@ The client can call it by posting an object like
 
   { "a": 1, "b": 2 }
 
-The keys of the object match the parameter names. Note that PostgreSQL converts parameter names to lowercase unless you quote them like :sql:`CREATE FUNCTION foo("mixedCase" text) ...`.
+The keys of the object match the parameter names. Note that PostgreSQL converts parameter names to lowercase unless you quote them like :sql:`CREATE FUNCTION foo("mixedCase" text) ...`. You can also call a function that takes a single parameter of type json by sending the header :code:`Prefer: params=single-object` with your request. That way the JSON request body will be used as the single argument.
 
 .. note::
 
@@ -501,3 +522,66 @@ You can use a tool like `Swagger UI <http://swagger.io/swagger-ui/>`_ to create
 .. note::
 
   The OpenAPI information can go out of date as the schema changes under a running server. To learn how to refresh the cache see :ref:`schema_reloading`.
+
+HTTP Status Codes
+=================
+
+PostgREST translates `PostgreSQL error codes <https://www.postgresql.org/docs/current/static/errcodes-appendix.html>`_ into HTTP status as follows:
+
++--------------------------+-------------------------+---------------------------------+
+| PostgreSQL error code(s) | HTTP status             | Error description               |
++==========================+=========================+=================================+
+| 08*                      | 503                     | pg connection err               |
++--------------------------+-------------------------+---------------------------------+
+| 09*                      | 500                     | triggered action exception      |
++--------------------------+-------------------------+---------------------------------+
+| 0L*                      | 403                     | invalid grantor                 |
++--------------------------+-------------------------+---------------------------------+
+| 0P*                      | 403                     | invalid role specification      |
++--------------------------+-------------------------+---------------------------------+
+| 23503                    | 409                     | foreign key violation           |
++--------------------------+-------------------------+---------------------------------+
+| 23505                    | 409                     | uniqueness violation            |
++--------------------------+-------------------------+---------------------------------+
+| 25*                      | 500                     | invalid transaction state       |
++--------------------------+-------------------------+---------------------------------+
+| 28*                      | 403                     | invalid auth specification      |
++--------------------------+-------------------------+---------------------------------+
+| 2D*                      | 500                     | invalid transaction termination |
++--------------------------+-------------------------+---------------------------------+
+| 38*                      | 500                     | external routine exception      |
++--------------------------+-------------------------+---------------------------------+
+| 39*                      | 500                     | external routine invocation     |
++--------------------------+-------------------------+---------------------------------+
+| 3B*                      | 500                     | savepoint exception             |
++--------------------------+-------------------------+---------------------------------+
+| 40*                      | 500                     | transaction rollback            |
++--------------------------+-------------------------+---------------------------------+
+| 53*                      | 503                     | insufficient resources          |
++--------------------------+-------------------------+---------------------------------+
+| 54*                      | 413                     | too complex                     |
++--------------------------+-------------------------+---------------------------------+
+| 55*                      | 500                     | obj not in prereq state         |
++--------------------------+-------------------------+---------------------------------+
+| 57*                      | 500                     | operator intervention           |
++--------------------------+-------------------------+---------------------------------+
+| 58*                      | 500                     | system error                    |
++--------------------------+-------------------------+---------------------------------+
+| F0*                      | 500                     | conf file error                 |
++--------------------------+-------------------------+---------------------------------+
+| HV*                      | 500                     | foreign data wrapper error      |
++--------------------------+-------------------------+---------------------------------+
+| P0001                    | 400                     | default code for "raise"        |
++--------------------------+-------------------------+---------------------------------+
+| P0*                      | 500                     | PL/pgSQL error                  |
++--------------------------+-------------------------+---------------------------------+
+| XX*                      | 500                     | internal error                  |
++--------------------------+-------------------------+---------------------------------+
+| 42883                    | 404                     | undefined function              |
++--------------------------+-------------------------+---------------------------------+
+| 42P01                    | 404                     | undefined table                 |
++--------------------------+-------------------------+---------------------------------+
+| 42501                    | if authed 403, else 401 | insufficient privileges         |
++--------------------------+-------------------------+---------------------------------+
+| other                    | 500                     |                                 |
++--------------------------+-------------------------+---------------------------------+

From 0f871373878751f3cf10e323a6298671726bafa1 Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Sun, 26 Mar 2017 00:16:25 -0700
Subject: [PATCH 077/652] More improvements

When to use RAISE in procs

Fix broken links
---
 admin.rst |  2 +-
 api.rst   | 35 ++++++++++++++++++++++++++++++++++-
 auth.rst  |  4 +++-
 3 files changed, 38 insertions(+), 3 deletions(-)

diff --git a/admin.rst b/admin.rst
index e3cd25168..a1abf9cc9 100644
--- a/admin.rst
+++ b/admin.rst
@@ -271,7 +271,7 @@ In the future we're investigating ways to keep the cache updated without manual
 Alternate URL Structure
 =======================
 
-As discussed in `Singular or Plural`_, there are no special URL forms for singular resources in PostgREST, only operators for filtering. Thus there are no URLs like :code:`/people/1`. It would be specified instead as
+As discussed in :ref:`singular_plural`, there are no special URL forms for singular resources in PostgREST, only operators for filtering. Thus there are no URLs like :code:`/people/1`. It would be specified instead as
 
 .. code:: http
 
diff --git a/api.rst b/api.rst
index 7595c33fa..29fc3e111 100644
--- a/api.rst
+++ b/api.rst
@@ -233,6 +233,8 @@ The current possibilities are
 
 The server will default to JSON for API endpoints and OpenAPI on the root.
 
+.. _singular_plural:
+
 Singular or Plural
 ------------------
 
@@ -289,7 +291,7 @@ In addition to providing RESTful routes for each table and view, PostgREST allow
 
 .. image:: _static/film.png
 
-As seen above in `vertical_filtering`_ we can request the titles of all films like this:
+As seen above in :ref:`v_filter` we can request the titles of all films like this:
 
 .. code-block:: http
 
@@ -423,6 +425,35 @@ By default, a function is executed with the privileges of the user who calls it.
 
   We are considering allowing GET requests for functions that are marked non-volatile. Allowing GET is important for HTTP caching. However we still must decide how to pass function parameters since request bodies are not allowed. Also some query string arguments are already reserved for shaping/filtering the output.
 
+Raising Errors
+--------------
+
+Stored procedures can return non-200 HTTP status codes by raising SQL exceptions. For instance, here's a saucy function that always errors:
+
+.. code-block:: postgresql
+
+  CREATE OR REPLACE FUNCTION just_fail() RETURNS void
+    LANGUAGE plpgsql
+    AS $$
+  BEGIN
+    RAISE EXCEPTION 'I refuse!'
+      USING DETAIL = 'Pretty simple',
+            HINT = 'There is nothing you can do.';
+  END
+  $$;
+
+Calling the function returns HTTP 400 with the body
+
+.. code-block:: json
+
+  {
+    "message":"I refuse!",
+    "details":"Pretty simple",
+    "hint":"There is nothing you can do.",
+    "code":"P0001"
+  }
+
+You can customize the HTTP status code by raising particular exceptions according to the PostgREST :ref:`error to status code mapping <status_codes>`. For example, :code:`RAISE insufficient_privilege` will respond with HTTP 401/403 as appropriate.
 
 Insertions / Updates
 ====================
@@ -523,6 +554,8 @@ You can use a tool like `Swagger UI <http://swagger.io/swagger-ui/>`_ to create
 
   The OpenAPI information can go out of date as the schema changes under a running server. To learn how to refresh the cache see :ref:`schema_reloading`.
 
+.. _status_codes:
+
 HTTP Status Codes
 =================
 
diff --git a/auth.rst b/auth.rst
index 0d1f84214..f9abc431d 100644
--- a/auth.rst
+++ b/auth.rst
@@ -270,7 +270,7 @@ PostgREST aims to do one thing well: add an HTTP interface to a PostgreSQL datab
 Schema Isolation
 ================
 
-A PostgREST instance is configured to expose all the tables, views, and stored procedures of a single schema specified in a server configuration file. This means private data or implementation details can go inside a private schema and be invisible to HTTP clients. You can then expose views and stored procedures which insulate the internal details from the outside world. It keeps you code easier to refactor, and provides a natural way to do API `versioning`_. For an example of wrapping a private table with a public view see the `Editing User Info`_ section below.
+A PostgREST instance is configured to expose all the tables, views, and stored procedures of a single schema specified in a server configuration file. This means private data or implementation details can go inside a private schema and be invisible to HTTP clients. You can then expose views and stored procedures which insulate the internal details from the outside world. It keeps you code easier to refactor, and provides a natural way to do API versioning. For an example of wrapping a private table with a public view see the :ref:`public_ui` section below.
 
 SQL User Management
 ===================
@@ -363,6 +363,8 @@ With the table in place we can make a helper to check a password against the enc
   end;
   $$;
 
+.. _public_ui:
+
 Public User Interface
 ---------------------
 

From 27bcd8074ff4a5cd1e273d54f28e4e1afa16f9ca Mon Sep 17 00:00:00 2001
From: Dan Kamenov <dan.kamenov@gmail.com>
Date: Sun, 26 Mar 2017 21:26:14 -0600
Subject: [PATCH 078/652] Fix duplicate wording (#48)

---
 api.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/api.rst b/api.rst
index 29fc3e111..56c97991b 100644
--- a/api.rst
+++ b/api.rst
@@ -214,7 +214,7 @@ Note that the larger the table the slower this query runs in the database. The s
 Response Format
 ---------------
 
-PostgREST uses proper HTTP content negotiation (`RFC7231 <https://tools.ietf.org/html/rfc7231#section-5.3>`_) to deliver the desired representation of a resource. That is to say the same API endpoint can respond respond in different formats like JSON or CSV depending on the client request.
+PostgREST uses proper HTTP content negotiation (`RFC7231 <https://tools.ietf.org/html/rfc7231#section-5.3>`_) to deliver the desired representation of a resource. That is to say the same API endpoint can respond in different formats like JSON or CSV depending on the client request.
 
 Use the Accept request header to specify the acceptable format (or formats) for the response:
 

From 1cab8cf82d292663d4468b83778782e38b42c648 Mon Sep 17 00:00:00 2001
From: Dan Kamenov <dan.kamenov@gmail.com>
Date: Wed, 29 Mar 2017 20:48:36 -0600
Subject: [PATCH 079/652] Fix Bad SQL coding practices in "Computed Columns"
 example (#51)

---
 api.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/api.rst b/api.rst
index 56c97991b..c66ac8060 100644
--- a/api.rst
+++ b/api.rst
@@ -111,7 +111,7 @@ Filters may be applied to computed columns as well as actual table/view columns,
 
   -- (optional) add an index to speed up anticipated query
   CREATE INDEX people_full_name_idx ON people
-    USING GIN (to_tsvector('english', fname || ' ' || lname));
+    USING GIN (to_tsvector('english', full_name(people)));
 
 A full-text search on the computed column:
 

From 8a6b429c167b4819ff38ded1e11f7a66535c79be Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Steve=20Ch=C3=A1vez?= <stevechavezast@gmail.com>
Date: Tue, 4 Apr 2017 23:24:57 -0500
Subject: [PATCH 080/652] Add example for complex boolean logic (#52)

---
 api.rst | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)

diff --git a/api.rst b/api.rst
index c66ac8060..e24963da1 100644
--- a/api.rst
+++ b/api.rst
@@ -425,6 +425,25 @@ By default, a function is executed with the privileges of the user who calls it.
 
   We are considering allowing GET requests for functions that are marked non-volatile. Allowing GET is important for HTTP caching. However we still must decide how to pass function parameters since request bodies are not allowed. Also some query string arguments are already reserved for shaping/filtering the output.
 
+Complex boolean logic
+---------------------
+
+For complex boolean logic you can use stored procedures, an example:
+
+.. code-block:: postgresql
+
+  CREATE FUNCTION key_customers(country TEXT, company TEXT, salary FLOAT) RETURNS SETOF customers AS $$
+    SELECT * FROM customers WHERE (country = $1 AND company = $2) OR salary = $3;
+  $$ LANGUAGE SQL;
+
+Then you can query by doing:
+
+.. code-block:: http
+
+  POST /rpc/key_customers HTTP/1.1
+
+  { "country": "Germany", "company": "Volkswagen", salary": 120000.00 }
+
 Raising Errors
 --------------
 

From 42dd4ab607daf31ff62c6045a67aa18bacfa6f54 Mon Sep 17 00:00:00 2001
From: Ruslan Talpa <ruslan.talpa@gmail.com>
Date: Thu, 6 Apr 2017 06:57:48 +0300
Subject: [PATCH 081/652] subzero domain change (#47)

---
 intro.rst | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/intro.rst b/intro.rst
index 50bbaacb8..dfa30970e 100644
--- a/intro.rst
+++ b/intro.rst
@@ -100,10 +100,10 @@ Extensions
 * `svmnotn/postgrest-auth <https://github.com/svmnotn/postgrest-auth>`_ - OAuth2-inspired external auth server
 * `nblumoe/postgrest-oauth <https://github.com/nblumoe/postgrest-oauth>`_ - OAuth2 WAI middleware
 
-Commercial PaaS
+Commercial
 ---------------
 
-* `Sub0 <http://graphqlapi.com/>`_ - Automated GraphQL & REST API with built-in caching (powered by PostgREST, not affiliated)
+* `subZero <https://subzero.cloud/>`_ - Automated GraphQL & REST API with built-in caching (powered by PostgREST, not affiliated)
 
 
 Getting Support

From 625f2ce8d77d85c9f8e6dbbff628c3d3a6e4fc49 Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Wed, 5 Apr 2017 23:07:30 -0500
Subject: [PATCH 082/652] Update subzero message

---
 intro.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/intro.rst b/intro.rst
index dfa30970e..b74107156 100644
--- a/intro.rst
+++ b/intro.rst
@@ -103,7 +103,7 @@ Extensions
 Commercial
 ---------------
 
-* `subZero <https://subzero.cloud/>`_ - Automated GraphQL & REST API with built-in caching (powered by PostgREST, not affiliated)
+* `subZero <https://subzero.cloud/>`_ - Automated GraphQL & REST API with built-in caching (powered in part by PostgREST)
 
 
 Getting Support

From f52829d16536ce6212b70dc2a14c592e0195abaa Mon Sep 17 00:00:00 2001
From: Will O'Brien <will.obrien@dibit.co>
Date: Fri, 21 Apr 2017 17:46:15 -0400
Subject: [PATCH 083/652] App metadata instead of user metadata (#55)

From the [docs](https://auth0.com/docs/metadata):
> An authenticated user can modify data in their profile's user_metadata, but not in their app_metadata.

Seems role-type information should be stored in `app_metadata`.
---
 auth.rst | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/auth.rst b/auth.rst
index f9abc431d..ab271a11c 100644
--- a/auth.rst
+++ b/auth.rst
@@ -236,14 +236,14 @@ An external service like `Auth0 <https://auth0.com/>`_ can do the hard work tran
 
 To use Auth0, copy its client secret into your PostgREST configuration file as the :code:`jwt-secret`. (Old-style Auth0 secrets are Base64 encoded. For these secrets set :code:`secret-is-base64` to :code:`true`, or just refresh the Auth0 secret.) You can find the secret in the client settings of the Auth0 management console.
 
-Our code requires a database role in the JWT. To add it you need to save the database role in Auth0 `user metadata <https://auth0.com/docs/rules/metadata-in-rules>`_. Then, you will need to write a rule that will extract the role from the user metadata and include a :code:`role` claim in the payload of our user object. Afterwards, in your Auth0Lock code, include the :code:`role` claim in your `scope param <https://auth0.com/docs/libraries/lock/v10/sending-authentication-parameters#scope-string->`_.
+Our code requires a database role in the JWT. To add it you need to save the database role in Auth0 `app metadata <https://auth0.com/docs/rules/metadata-in-rules>`_. Then, you will need to write a rule that will extract the role from the user metadata and include a :code:`role` claim in the payload of our user object. Afterwards, in your Auth0Lock code, include the :code:`role` claim in your `scope param <https://auth0.com/docs/libraries/lock/v10/sending-authentication-parameters#scope-string->`_.
 
 .. code:: javascript
 
   // Example Auth0 rule
   function (user, context, callback) {
-    var role = user.user_metadata.role;
-    user.role = role;
+    user.app_metadata = user.app_metadata || {};
+    user.role = user.app_metadata.role;
     callback(null, user, context);
   }
 

From bfe6bd1165dc8506e8fee39949bb575a563b0820 Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Sun, 23 Apr 2017 20:10:42 -0500
Subject: [PATCH 084/652] Confirmed more production users

---
 intro.rst | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/intro.rst b/intro.rst
index b74107156..a1dfc3f4f 100644
--- a/intro.rst
+++ b/intro.rst
@@ -89,6 +89,8 @@ In Production
 * `Image-charts <https://image-charts.com/>`_
 * `Drip Depot <https://www.dripdepot.com/>`_
 * `OpenBooking <http://openbooking.ch>`_
+* `Convene <https://info.convene.thomsonreuters.com/en.html>`_ by Thomson-Reuters
+* `eGull <http://www.egull.co>`_
 
 Extensions
 ----------

From 2ce053b69eaae38fb07fd649218c9909e467e119 Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Sun, 23 Apr 2017 20:25:44 -0500
Subject: [PATCH 085/652] Add some things people have said

---
 intro.rst | 22 ++++++++++++++++++++++
 1 file changed, 22 insertions(+)

diff --git a/intro.rst b/intro.rst
index a1dfc3f4f..74e8d622f 100644
--- a/intro.rst
+++ b/intro.rst
@@ -107,6 +107,28 @@ Commercial
 
 * `subZero <https://subzero.cloud/>`_ - Automated GraphQL & REST API with built-in caching (powered in part by PostgREST)
 
+Testimonials
+############
+
+  "It's so fast to develop, it feels like cheating!"
+
+  -- François-G. Ribreau
+
+  "I just have to say that, the CPU/Memory usage compared to our
+  Node.js/Waterline ORM based API is ridiculous.  It's hard to even push
+  it over 60/70 MB while our current API constantly hits 1GB running on 6
+  instances (dynos)."
+
+  -- Louis Brauer
+
+  "I really enjoyed the fact that all of a sudden I was writing
+  microservices in SQL DDL (and v8 javascript functions). I dodged so
+  much boilerplate. The next thing I knew, we pulled out a full rewrite
+  of a Spring+MySQL legacy app in 6 months. Literally 10x faster, and
+  code was super concise. The old one took 3 years and a team of 4
+  people to develop."
+
+  -- Simone Scarduzio
 
 Getting Support
 ################

From 8f5a3f50c25ab826e380f9a56669a2ada686cb2d Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Sun, 23 Apr 2017 21:45:47 -0500
Subject: [PATCH 086/652] Another queue bridge

---
 intro.rst | 1 +
 1 file changed, 1 insertion(+)

diff --git a/intro.rst b/intro.rst
index 74e8d622f..860b59197 100644
--- a/intro.rst
+++ b/intro.rst
@@ -61,6 +61,7 @@ These are PostgreSQL bridges that propagate LISTEN/NOTIFY to external queues for
 * `matthewmueller/pg-bridge <https://github.com/matthewmueller/pg-bridge>`_ - Amazon SNS
 * `aweber/pgsql-listen-exchange <https://github.com/aweber/pgsql-listen-exchange>`_ - RabbitMQ
 * `SpiderOak/skeeter <https://github.com/SpiderOak/skeeter>`_ - ZeroMQ
+* `FGRibreau/postgresql-to-amqp <https://github.com/FGRibreau/postgresql-to-amqp>`_ - AMQP
 
 Example Apps
 ------------

From f2f392b0f42b8b2cf07f0bcd83997ccaae5c9c7c Mon Sep 17 00:00:00 2001
From: Steve Phillips <steve@tryingtobeawesome.com>
Date: Mon, 10 Apr 2017 08:47:18 -0500
Subject: [PATCH 087/652] api.rst typo: dahsboard -> dashboard (#53)

---
 api.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/api.rst b/api.rst
index e24963da1..6c01c9358 100644
--- a/api.rst
+++ b/api.rst
@@ -567,7 +567,7 @@ OpenAPI Support
 
 Every API hosted by PostgREST automatically serves a full `OpenAPI <https://www.openapis.org/>`_ description on the root path. This provides a list of all endpoints, along with supported HTTP verbs and example payloads.
 
-You can use a tool like `Swagger UI <http://swagger.io/swagger-ui/>`_ to create beautiful documentation from the description and to host an interactive web-based dahsboard. The dashboard allows developers to make requests against a live PostgREST server, provides guidance with request headers and example request bodies.
+You can use a tool like `Swagger UI <http://swagger.io/swagger-ui/>`_ to create beautiful documentation from the description and to host an interactive web-based dashboard. The dashboard allows developers to make requests against a live PostgREST server, provides guidance with request headers and example request bodies.
 
 .. note::
 

From fc65694c0a4c1386bcdeeec5f5469f5160fb0213 Mon Sep 17 00:00:00 2001
From: Steve Phillips <steve@tryingtobeawesome.com>
Date: Mon, 10 Apr 2017 08:47:59 -0500
Subject: [PATCH 088/652] api.rst typo: delting -> deleting (#54)

---
 api.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/api.rst b/api.rst
index 6c01c9358..bed486362 100644
--- a/api.rst
+++ b/api.rst
@@ -560,7 +560,7 @@ To delete rows in a table, use the DELETE verb plus :ref:`h_filter`. For instanc
 
 .. note::
 
-  Beware of accidentally delting all rows in a table. To learn to prevent that see :ref:`block_fulltable`.
+  Beware of accidentally deleting all rows in a table. To learn to prevent that see :ref:`block_fulltable`.
 
 OpenAPI Support
 ===============

From 1a5cadb8550992f928f0623b23c5677f4c79d095 Mon Sep 17 00:00:00 2001
From: Matt Bretl <mattbretl@users.noreply.github.com>
Date: Wed, 17 May 2017 04:01:28 +0100
Subject: [PATCH 089/652] auth.rst: minor fixes to example scripts (#68)

---
 auth.rst | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/auth.rst b/auth.rst
index ab271a11c..6b490b2db 100644
--- a/auth.rst
+++ b/auth.rst
@@ -202,7 +202,7 @@ Next write a stored procedure that returns the token. The one below returns a to
   CREATE FUNCTION jwt_test() RETURNS public.jwt_token
       LANGUAGE sql
       AS $$
-    SELECT jwt.sign(
+    SELECT sign(
       row_to_json(r), 'mysecret'
     ) AS token
     FROM (
@@ -224,7 +224,7 @@ PostgREST exposes this function to clients via a POST request to `/rpc/jwt_test`
     ALTER DATABASE mydb SET "app.jwt_secret" TO '!!secret!!';
 
     -- then all functions can refer to app.jwt_secret
-    SELECT jwt.sign(
+    SELECT sign(
       row_to_json(r), current_setting('app.jwt_secret')
     ) AS token
     FROM ...
@@ -295,7 +295,7 @@ First we'll need a table to keep track of our users:
   basic_auth.users (
     email    text primary key check ( email ~* '^.+@.+\..+$' ),
     pass     text not null check (length(pass) < 512),
-    role     name not null check (length(role) < 512),
+    role     name not null check (length(role) < 512)
   );
 
 We would like the role to be a foreign key to actual database roles, however PostgreSQL does not support these constraints against the :code:`pg_roles` table. We'll use a trigger to manually enforce it.
@@ -391,7 +391,7 @@ As described in `JWT from SQL`_, we'll create a JWT inside our login function. N
       raise invalid_password using message = 'invalid user or password';
     end if;
 
-    select jwt.sign(
+    select sign(
         row_to_json(r), 'mysecret'
       ) as token
       from (

From 3cb2c0f297ac02373fe3ef7ea0e84007ed278963 Mon Sep 17 00:00:00 2001
From: James Dalton <tarpdalton@users.noreply.github.com>
Date: Wed, 24 May 2017 20:51:27 -0700
Subject: [PATCH 090/652] switch tar command for xz instead of gzip (#73)

---
 install.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install.rst b/install.rst
index 50c6ba815..f1bb74f77 100644
--- a/install.rst
+++ b/install.rst
@@ -9,7 +9,7 @@ The release page has precompiled binaries for Mac OS X, Windows, and several Lin
 
   # Untar the release (available at https://github.com/begriffs/postgrest/releases/latest)
 
-  $ tar zxf postgrest-[version]-[platform].tar.xz
+  $ tar Jxf postgrest-[version]-[platform].tar.xz
 
   # Try running it
   $ ./postgrest --help

From 6bb81b5d4b1a4e4a431baebea59d1f2870c3f0a4 Mon Sep 17 00:00:00 2001
From: Steve Phillips <steve@tryingtobeawesome.com>
Date: Sat, 27 May 2017 08:22:35 -0700
Subject: [PATCH 091/652] api.rst typo: Directories -> Directors (#74)

---
 api.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/api.rst b/api.rst
index bed486362..ed30a7239 100644
--- a/api.rst
+++ b/api.rst
@@ -335,7 +335,7 @@ Which would return
     }
   ]
 
-PostgREST can also detect relations going through join tables. Thus you can request the Actors for Films (which in this case finds the information through Roles). You can also reverse the direction of inclusion, asking for all Directories with each including the list of their Films.
+PostgREST can also detect relations going through join tables. Thus you can request the Actors for Films (which in this case finds the information through Roles). You can also reverse the direction of inclusion, asking for all Directors with each including the list of their Films.
 
 .. note::
 

From e35f2d28c771e53f1a88617099cdff114f92dc6c Mon Sep 17 00:00:00 2001
From: Michel Pelletier <michelp@users.noreply.github.com>
Date: Wed, 24 May 2017 20:55:31 -0700
Subject: [PATCH 092/652] Use current_setting optional param to suppress raise
 (#70)

---
 auth.rst | 36 ++----------------------------------
 1 file changed, 2 insertions(+), 34 deletions(-)

diff --git a/auth.rst b/auth.rst
index 6b490b2db..f953d5aa6 100644
--- a/auth.rst
+++ b/auth.rst
@@ -89,41 +89,9 @@ SQL code can access claims through GUC variables set by PostgREST per request. F
 
 .. code:: sql
 
-  current_setting('request.jwt.claim.email')
+  current_setting('request.jwt.claim.email', true)
 
-This allows JWT generation services to include extra information and your database code to react to it. For instance the RLS example could be modified to use this current_setting rather than current_user.
-
-.. note::
-
-  The current_setting function raises an exception if the setting in question is not present, as when a claim is missing from the JWT. Your SQL functions can either catch the exception, or you can set a default value for the database like this.
-
-  .. code:: sql
-
-    -- Prevent current_setting('request.jwt.claim.email') from raising
-    -- an exception if the setting is not present. Default it to ''.
-    ALTER DATABASE your_db_name SET request.jwt.claim.email TO '';
-
-  If you are unable to issue an ALTER DATABASE statement (for instance on Amazon RDS), you can create a helper function to read environment variables and swallow exceptions.
-
-  .. code:: sql
-
-    create function env_var(v text) returns text as $$
-      declare
-        result text;
-      begin
-        begin
-          select current_setting(v) into result;
-        exception 
-          when undefined_object then
-            return null;
-        end;
-
-        return result;
-      end;
-    $$ stable language plpgsql;
-
-    -- now you can call call for instance
-    -- SELECT env_var('request.jwt.claim.email')
+This allows JWT generation services to include extra information and your database code to react to it. For instance the RLS example could be modified to use this current_setting rather than current_user.  The second 'true' argument tells current_setting to return NULL if the setting is missing from the current configuration.
 
 Hybrid User-Group Roles
 ~~~~~~~~~~~~~~~~~~~~~~~

From 49af7dcbc2d47037ca1d69519dd5bc160812d321 Mon Sep 17 00:00:00 2001
From: Steve Phillips <steve@tryingtobeawesome.com>
Date: Mon, 29 May 2017 08:17:21 -0700
Subject: [PATCH 093/652] api.rst: Added example alluded to in docs (#77)

---
 api.rst | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/api.rst b/api.rst
index ed30a7239..461afae7a 100644
--- a/api.rst
+++ b/api.rst
@@ -335,7 +335,11 @@ Which would return
     }
   ]
 
-PostgREST can also detect relations going through join tables. Thus you can request the Actors for Films (which in this case finds the information through Roles). You can also reverse the direction of inclusion, asking for all Directors with each including the list of their Films.
+PostgREST can also detect relations going through join tables. Thus you can request the Actors for Films (which in this case finds the information through Roles). You can also reverse the direction of inclusion, asking for all Directors with each including the list of their Films:
+
+.. code-block:: http
+
+  GET /directors?select=films{title,year} HTTP/1.1
 
 .. note::
 

From cb90e3e5577140b27af14afe5bd1f0436a2450ae Mon Sep 17 00:00:00 2001
From: Steve Phillips <steve@tryingtobeawesome.com>
Date: Mon, 29 May 2017 09:46:12 -0700
Subject: [PATCH 094/652] api.rst: de-duped a word, added commas (#78)

---
 api.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/api.rst b/api.rst
index 461afae7a..2df2c91ed 100644
--- a/api.rst
+++ b/api.rst
@@ -348,7 +348,7 @@ PostgREST can also detect relations going through join tables. Thus you can requ
 Embedded Filters and Order
 --------------------------
 
-Embedded tables can be filtered and ordered similarly to their top-level counterparts. To to do so prefix the query parameters with the name of the embedded table. For instance to order the actors in each film:
+Embedded tables can be filtered and ordered similarly to their top-level counterparts. To do so, prefix the query parameters with the name of the embedded table. For instance, to order the actors in each film:
 
 .. code-block:: http
 

From 174ccadb15590f5c4163ff1c851c44d362eb9f71 Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Mon, 29 May 2017 18:08:38 -0500
Subject: [PATCH 095/652] Update ecosystem

---
 intro.rst | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/intro.rst b/intro.rst
index 860b59197..2f3b0e0df 100644
--- a/intro.rst
+++ b/intro.rst
@@ -40,17 +40,17 @@ PostgREST has a growing ecosystem of examples, and libraries, experiments, and u
 Client-Side Libraries
 ---------------------
 
-* `PierreRochard/angular2-postgrest <https://github.com/PierreRochard/angular2-postgrest>`_ - JS, Angular 2
 * `tomberek/aor-postgrest-client <https://github.com/tomberek/aor-postgrest-client>`_ - JS, admin-on-rest
 * `hugomrdias/postgrest-url <https://github.com/hugomrdias/postgrest-url>`_ - JS, just for generating query URLs
 * `john-kelly/elm-postgrest <https://github.com/john-kelly/elm-postgrest>`_ - Elm
 * `mithril.postgrest <https://github.com/catarse/mithril.postgrest>`_ - JS, Mithril
-* `thejettdurham/postgrest-sharp-client <https://github.com/thejettdurham/postgrest-sharp-client>`_ - C#, RestSharp
 * `lewisjared/postgrest-request <https://github.com/lewisjared/postgrest-request>`_ - JS, SuperAgent
 * `JarvusInnovations/jarvus-postgrest-apikit <https://github.com/JarvusInnovations/jarvus-postgrest-apikit>`_ - JS, Sencha framework
 * `davidthewatson/postgrest_python_requests_client <https://github.com/davidthewatson/postgrest_python_requests_client>`_ - Python
 * `calebmer/postgrest-client <https://github.com/calebmer/postgrest-client>`_ - JS
 * `clesiemo3/postgrestR <https://github.com/clesiemo3/postgrestR>`_ - R
+* `PierreRochard/postgrest-angular <https://github.com/PierreRochard/postgrest-angular>`_ - TypeScript, generate UI from API description
+* `thejettdurham/postgrest-sharp-client <https://github.com/thejettdurham/postgrest-sharp-client>`_ (needs maintainer) - C#, RestSharp
 
 External Notification
 ---------------------
@@ -66,6 +66,7 @@ These are PostgreSQL bridges that propagate LISTEN/NOTIFY to external queues for
 Example Apps
 ------------
 
+* `https://github.com/subzerocloud/postgrest-starter-kit <subzerocloud/postgrest-starter-kit>`_ - Boilerplate for new project
 * `NikolayS/postgrest-google-translate <https://github.com/NikolayS/postgrest-google-translate>`_ - Calling to external translation service
 * `CodeforAustralia/heritage-near-me <https://github.com/CodeforAustralia/heritage-near-me>`_ - Elm and PostgREST with PostGIS
 * `timwis/handsontable-postgrest <https://github.com/timwis/handsontable-postgrest>`_ - An excel-like database table editor
@@ -80,6 +81,7 @@ Example Apps
 * `tyrchen/goodfilm <https://github.com/tyrchen/goodfilm>`_ - example film api
 * `begriffs/postgrest-example <https://github.com/begriffs/postgrest-example>`_ - sqitch versioning for API
 * `SMRxT/postgrest-demo <https://github.com/SMRxT/postgrest-demo>`_ - multi-tenant logging system
+* `PierreRochard/postgrest-boilerplate <https://github.com/PierreRochard/postgrest-boilerplate>`_ - example auth backend
 
 In Production
 -------------

From f4c6a99adbe3457adb3a3dc84a58462599a80284 Mon Sep 17 00:00:00 2001
From: Leon du Toit <dutoit.leon@gmail.com>
Date: Thu, 8 Jun 2017 08:55:42 +0200
Subject: [PATCH 096/652] Address JWT security in docs, related to postgrest
 issue #842 (#79)

---
 auth.rst | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/auth.rst b/auth.rst
index f953d5aa6..d76ddcfe8 100644
--- a/auth.rst
+++ b/auth.rst
@@ -228,6 +228,19 @@ Our code requires a database role in the JWT. To add it you need to save the dat
     }
   })
 
+JWT security
+~~~~~~~~~~~~
+
+There are at least three types of common critiques against using JWT: 1) against the standard itself, 2) against using libraries with known security vulnerabilities, and 3) against using JWT for web sessions. We'll briefly explain each critique, how PostgREST deals with it, and give recommendations for appropriate user action.
+
+The critique against the `JWT standard <https://tools.ietf.org/html/rfc7519>`_ is voiced in detail `elsewhere on the web <https://paragonie.com/blog/2017/03/jwt-json-web-tokens-is-bad-standard-that-everyone-should-avoid>`_. The most relevant part for PostgREST is the so-called :code:`alg=none` issue. Some servers implementing JWT allow clients to choose the algorithm used to sign the JWT. In this case, an attacker could set the algorithm to :code:`none`, remove the need for any signature at all and gain unauthorized access. The current implementation of PostgREST, however, does not allow clients to set the signature algorithm in the HTTP request, making this attack irrelevant. The critique against the standard is that it requires the implementation of the :code:`alg=none` at all.
+
+Critiques against JWT libraries are only relevant to PostgREST via the library it uses. As mentioned above, not allowing clients to choose the signature algorithm in HTTP requests removes the greatest risk. Another more subtle attack is possible where servers use asymmetric algorithms like RSA for signatures. Once again this is not relevant to PostgREST since it is not supported. Curious readers can find more information in `this article <https://auth0.com/blog/critical-vulnerabilities-in-json-web-token-libraries/>`_. Recommendations about high quality libraries for usage in API clients can be found on `jwt.io <https://jwt.io/>`_.
+
+The last type of critique focuses on the misuse of JWT for maintaining web sessions. The basic recommendation is to `stop using JWT for sessions <http://cryto.net/~joepie91/blog/2016/06/13/stop-using-jwt-for-sessions/>`_ because most, if not all, solutions to the problems that arise when you do, `do not work <http://cryto.net/~joepie91/blog/2016/06/19/stop-using-jwt-for-sessions-part-2-why-your-solution-doesnt-work/>`_. The linked articles discuss the problems in depth but the essence of the problem is that JWT is not designed to be secure and stateful units for client-side storage and therefore not suited to session management.
+
+PostgREST uses JWT mainly for authentication and authorization purposes and encourages users to do the same. For web sessions, using cookies over HTTPS is good enough and well catered for by standard web frameworks.
+
 .. _ssl:
 
 SSL

From 83e4ad41fe02c0630e4f28e46c4bc351947de5db Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Sun, 18 Jun 2017 11:49:08 -0500
Subject: [PATCH 097/652] Deprecate {} for resource embedding

---
 api.rst | 12 ++++++++----
 1 file changed, 8 insertions(+), 4 deletions(-)

diff --git a/api.rst b/api.rst
index 2df2c91ed..0128e0b22 100644
--- a/api.rst
+++ b/api.rst
@@ -311,7 +311,7 @@ However because a foreign key constraint exists between Films and Directors, we
 
 .. code-block:: http
 
-  GET /films?select=title,directors{last_name} HTTP/1.1
+  GET /films?select=title,directors(last_name) HTTP/1.1
 
 Which would return
 
@@ -335,11 +335,15 @@ Which would return
     }
   ]
 
+.. note::
+
+  As of PostgREST v4.1, parens :code:`()` are used rather than brackets :code:`{}` for the list of embedded columns. Brackets are still supported, but are deprecated and will be removed in v5.
+
 PostgREST can also detect relations going through join tables. Thus you can request the Actors for Films (which in this case finds the information through Roles). You can also reverse the direction of inclusion, asking for all Directors with each including the list of their Films:
 
 .. code-block:: http
 
-  GET /directors?select=films{title,year} HTTP/1.1
+  GET /directors?select=films(title,year) HTTP/1.1
 
 .. note::
 
@@ -352,13 +356,13 @@ Embedded tables can be filtered and ordered similarly to their top-level counter
 
 .. code-block:: http
 
-  GET /films?select=*,actors{*}&actors.order=last_name,first_name HTTP/1.1
+  GET /films?select=*,actors(*)&actors.order=last_name,first_name HTTP/1.1
 
 This sorts the list of actors in each film but does *not* change the order of the films themselves. To filter the roles returned with each film:
 
 .. code-block:: http
 
-  GET /films?select=*,roles{*}&roles.character=in.Chico,Harpo,Groucho HTTP/1.1
+  GET /films?select=*,roles(*)&roles.character=in.Chico,Harpo,Groucho HTTP/1.1
 
 Once again, this restricts the roles included to certain characters but does not filter the films in any way. Films without any of those characters would be included along with empty character lists.
 

From 127fbb41d5d31a2eef87fdfb0e37c5edafe9c790 Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Sun, 18 Jun 2017 12:06:21 -0500
Subject: [PATCH 098/652] Note function volatility in RPC

Fixes #64
---
 api.rst | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/api.rst b/api.rst
index 0128e0b22..52b0e714b 100644
--- a/api.rst
+++ b/api.rst
@@ -380,12 +380,14 @@ The PostgREST URL grammar limits the kinds of queries clients can perform. It pr
 Stored Procedures
 =================
 
-Every stored procedure in the API-exposed database schema is accessible under the :code:`/rpc` prefix. The API endpoint supports only POST which executes the function. Such function can perform any operations allowed by PostgreSQL (read data, modify data, and even DDL operations).
+Every stored procedure in the API-exposed database schema is accessible under the :code:`/rpc` prefix. The API endpoint supports only POST which executes the function.
 
 .. code:: http
 
   POST /rpc/function_name HTTP/1.1
 
+Such functions can perform any operations allowed by PostgreSQL (read data, modify data, and even DDL operations). However procedures in PostgreSQL marked with :code:`stable` or :code:`immutable` `volatility <https://www.postgresql.org/docs/current/static/xfunc-volatility.html>`_ can only read, not modify, the database and PostgREST executes them in a read-only transaction compatible for read-replicas.
+
 Procedures must be used with `named arguments <https://www.postgresql.org/docs/current/static/sql-syntax-calling-funcs.html#SQL-SYNTAX-CALLING-FUNCS-NAMED>`_. To supply arguments in an API call, include a JSON object in the request payload and each key/value of the object will become an argument.
 
 For instance, assume we have created this function in the database.

From e8cdd4463b8fc74811d25cd3aa3472eb5b777a02 Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Sun, 18 Jun 2017 21:52:53 -0500
Subject: [PATCH 099/652] Example of quoted comma in IN operator

---
 api.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/api.rst b/api.rst
index 52b0e714b..51716b41f 100644
--- a/api.rst
+++ b/api.rst
@@ -46,7 +46,7 @@ lt            less than
 neq           not equal
 like          LIKE operator (use * in place of %)
 ilike         ILIKE operator (use * in place of %)
-in            one of a list of values e.g. :code:`?a=in.1,2,3`
+in            one of a list of values e.g. :code:`?a=in.1,2,3` – also supports commas in quoted strings like :code:`?a=in."hi,there","yes,you"`
 is            checking for exact equality (null,true,false)
 @@            full-text search using to_tsquery
 @>            contains e.g. :code:`?tags=@>.{example, new}`

From cee92cac05fa5f70b627b4c0c292448a53f868d5 Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Sun, 18 Jun 2017 22:19:46 -0500
Subject: [PATCH 100/652] How to read headers/cookies from a proc

---
 api.rst | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/api.rst b/api.rst
index 51716b41f..cd10a588e 100644
--- a/api.rst
+++ b/api.rst
@@ -435,6 +435,15 @@ By default, a function is executed with the privileges of the user who calls it.
 
   We are considering allowing GET requests for functions that are marked non-volatile. Allowing GET is important for HTTP caching. However we still must decide how to pass function parameters since request bodies are not allowed. Also some query string arguments are already reserved for shaping/filtering the output.
 
+Accessing Request Headers/Cookies
+---------------------------------
+
+Stored procedures can access request headers and cookies by reading GUC variables set by PostgREST per request. They are named :code:`request.header.XYZ` and :code:`request.cookie.XYZ`. For example, to read the value of the Origin request header:
+
+.. code-block:: postgresql
+
+  SELECT current_setting('request.header.origin', true);
+
 Complex boolean logic
 ---------------------
 

From 6382b597fad39f4bff404260e0659accefffb92a Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Sun, 2 Jul 2017 21:17:49 -0500
Subject: [PATCH 101/652] Zeroeth tutorial

---
 _static/tuts/tut0-request-flow.png | Bin 0 -> 16696 bytes
 admin.rst                          |   2 +
 conf.py                            |   4 +-
 index.rst                          |   5 +
 install.rst                        |   2 +
 tutorials/tut0.rst                 | 214 +++++++++++++++++++++++++++++
 6 files changed, 225 insertions(+), 2 deletions(-)
 create mode 100644 _static/tuts/tut0-request-flow.png
 create mode 100644 tutorials/tut0.rst

diff --git a/_static/tuts/tut0-request-flow.png b/_static/tuts/tut0-request-flow.png
new file mode 100644
index 0000000000000000000000000000000000000000..24f2986e81ae431f8e0ab1366ca65d6266ffcad9
GIT binary patch
literal 16696
zcmeAS@N?(olHy`uVBq!ia0y~yVANq?U?|{VV_;xd;^yniz`($g?&#~tz_78O`%fY(
z0|SFXvPY0F14ES>14Ba#1H&%{28M<g3=E|P3=FRl7#OT(FffQ0%-I!a!@$76mgMd3
z!tfsi7wla=nSp_UGvCdvn1O*okb!|gieXXjTx|vh2KEw9Usv{r>`eS79NRs-o`BSq
z6*#6dFfhh3Ffg(+oL;1Sih;pF$kW9!q~g}wx#e?0kN*6BzxdqFzj^vO3%@J*I<V>_
zbc<R`^-4`%vGK^P8`5DW_m9liRa=(flhonXd&5*qtcOdZ>r3C8O?&Uvo%-`{#^yJA
zi*!yO3VQeZ=+k?)-|tvnK9@dkrt#+<1>ae3pRn8iV9ek5Q*Ce6SFN)rPg(|E|5~^$
z*Zf%0#+z~L%jadz`l#G*GwHZ|{hr;6XQ}zls+HALwY0Qc+<frCn*;+1&Nins1pyyc
zrpD5}RbPMY&%C_s>$`Ur%Whg<+-=R2`AuitzF%4IcE8`Jn3|f}uQK^$v+<@)_vI`K
z9!!>-|9^4Yv15~5Y|64sq|VBlW?iYCIdkU8RjXFL>nobImt*a2<q2u$lO7ysT(ofE
zLkofSuNqo)o1fRQ$L;&ppq-vOr|Rx|Te<W80+0TlI(5qU)G4!nITsc<&WqbyRa!pf
z@*CGBx@$~syE;2JKcAg%_UFu&Hy3Sxf2mJ+dt?5(@<+b)oEe`wE}dMyUwYk-ti<Bt
z&w{?ay_2u4iQK$p#fprpg6=X0ugBNly&LGiS$x8_4VQAnRaI46oE}b@GReba($uCI
z7h0EbpUdcSeQ&rtZli^@_3JXuy3?ELE?>A%@MX%%;G+}W<!&PB-v96G`lrX`>))(h
zyVBBZs*l*WyofJuTizdOb+T%|5!C0MVP)I)_Ir5p<sxml{`m>Zg4lK9_toT8R#v7a
zCnuM?+n<&5ivqc0`P?$8`L*9}F59(h*S(DyPa-ZCerijdao(kf&D`>mCC`%<HuW9L
zEFwRa6g#gK?myn&e>|zy%iG(YyZ!Lj($dnqb6ZTR4KfdUZH~41{bn<djD<nsi(iu}
zlniaedgb!nXA4Q%{{DZHCr#Yr_RNkc$<kFlQIa_^-}BW4Ur+Bj?q}+2ygvQ>Jo)dh
zuj}thJlyuq&uy0Nlr0HMZ{}TF8|@xiS{m!=d2*FU@#lkQ&z^1Hn0fQoo50}toy$`A
zV^5sim5`M1;mFd3y`TSGy>i1sL9kyw|Ms?PyUXAIUmB!oeAm|JvgD<vsmp@z)c^l`
z<nhN(AzD{udfn<L_$=kSaQ*E6{FDz5{~z4=-JB&kXq)X3IjgUtKcBu{&)J`!r6l&-
zvADSS=7ojM;?JHv3yO=oclV^n=JttVYfR=o+W-HrevsGA#qRw}SB7{US#)u7(8`qk
z7fxCJH*A;vsd~xMNt|cew9q$m3x4VRZ}Sg3o_sNR*6dk)D^{<LHZ6N|<LazsC%+uI
zWOCa%YQv?HS-W;wefsq2&7?__o|cxD?iKp@<Kw{|o&5dxT>r26F8bx-#K$UM{3A5|
zpH299J}pe&*LCs5$4hek-8%Fief-gO>sD0SnHd-FdU|edSJ(y0DmBae=6c!4$#1Ut
z`Dy=hpUov7E+mRym;Ke9dNJcqd|Sc_&CcI8$Iirs&bQz6?60_9c2>>~ONkHXUtV2(
z{pqY_YvXnlB$lfyo(<da=ox$Dj59|~RHU+aH93|_y*vKxz3zSP7UdHqI&uHM`tLIF
z%RK0HSv98ktm&;cH#gTug@t|le@Jqs{1YCT%Dm4rjMtasJa_Y5Fnf~kGLi79b*8WH
zo-*~8?=rdOd;Y|U8Kwyb8sgJZQ$zQCy%v3UZcFVn=KMLW=2MS+@(34TadHUaGMb!G
zIR8tQ$9k8li4_7)?n(k2;Tu$h*cEjJG+R74-Mw``dKB+?sleF6bu&3r#dPvk@2(X!
zPj|fSTYd5F%&BSb6P})$>Zc)6b@BP<xp(edG1-~E=Gz9V!{7Cfcm2JfeuTj}U=8O_
zhtEeouRptD@AqZP+HN@n2VZ`fnwt95xs7M%X8-wi7r(x~US4kWO_FclpUgKKni*Pp
zgf+K*41HC1;Zw^5+a*h;i{G?<xH!ULVT+8wO^!ni@{Noc>ryN^f)tV*l!MGX60h@Z
zUNNPq_dpfrQ>l>GL1vO|iTpB=Cl5^YUu0<|f3H5S{qfvw8!nYds?RMES{=T2SIOC1
zTlvMmXw<1$eth$KlBDhY51f8EFHL7S)x7)s>%8yZzgg;eQU51wGu1Fxf4=I`qetr1
z-{0xZumAV+o!_yzvr}IGYgsAj!MjAa)VG64^N7F_8SWlNHpZn6W&#X*tP3pJJs1KP
za7D1|Fp4Qes+gqLI^77I|Cn{*$B(to^NbH{Nm%;QXqoTqW4lUUv#pKTn6xc5vUK5^
zIg>Y^n^oy}$msp$)(Z?W6Z(|re`a@@KI{L^+@R#rtHRq--HMBg*W3O7^Ev+am&^Wd
zEsLL(lm~sYQoHv<WR|jlX`{Q<%pfB-u0DYR4Fi!AsmG73T<kHWp_W;P;U441g;#n?
z4;kh@d?69l@jZRsuB-CP=L;=+X*5kg-cLttbIxh2bC17%mAbS4KDTu7akH0F=`Uw}
zXpovTwS&>{^d~Vs+5a&s(kj>Nv@DW2(L8(h?B`RbPOU9IXZhS9|K6T=e&^y2KY2Yr
z<gl+(O4f<w25G?<<p&lE>;=-Sw>o%r9uKfDeDX|jRi8q@p$LW^raq=+TrWkM)?Acb
zeC^VrP3NBo-!v%yw!LnS*cy}AQ&(07*LJ3S^0{2bmj3M7-iT0>dml4D-4Q#;bb+N!
z;7$I^e-+E}Y^7Gm%<nq3=yKA<jQR6ytLt{9oSd}l)~#Fb{7%IkTp~TsX>#8LCu#mW
ze1C*27)~q^z8AG*io~vC3ohCCStW2Rt&|KgclBJd=A7F_?kNoI4HhhCFE)hsJ@b6R
zW7W5+Re!s+<=eP4c{O!)_SpBg%vNvQ7<eqnaEWrT++l->MXPhyGya>B`FGEn=L^+S
zzDfOXk2m<^q#|UQ^!L}-?feo33*6J!&7D5|xZ!b`%e<C5tBWr9*1I=6eDN#uKzzgJ
zhCk<8RF_uipF8`Y=j7p?Pi7SIXq|l8!r8p@!-~Hr&vHEQc<ERBLWIr0?a*HZIRT5>
zqN?icRY9|AMNV&Gv*_C_A8S7CWzFBO*IB3K@=xg4`Y~nI9*vwiLf$i@Wu-5&9!)r3
zuq-ZU=HEYO&0QxPJv;G)<ox=7m9`(mRyn>cxHIWwim!>(UlD`d*7@b^OV)9}j8Iqj
z$$KHw{&$eqCZ{?+iI7uQ0&73Ml9JcC=MbxMZYF#Gg82R%Cp-SI3;upL{3~OPHBaB1
zmzNZM=m4unQ&>=3?E~KPA+=VY-<*wK#+ogE?EQE7RhhR+`yRhoaqxod(aAn)-8siU
ze$~*c-C20%<+N1m<F9Ak$g&k~;A;-*JaXpE<#&HQFCOo|zcc6NCHK{<R_R?W{k!~N
z!Un0YQ&uWxL`Ft(GdCV^b*L?W{`Or%-qK$T<`+FTP6~STU8?6r?18{!wt!i)4^Ge4
z{+Si4x|e&i#mfVVSKJ@%`FS*}tLV_2;u{`aMTcs(E$T7f7vY;*yl1oSLcTeCkBT2S
zUb*b1pd0bqgqe+JhHU?F`>nav?YcUOEng~Z+SkWyeRcg~MbcKixAtai)nAO(TnU)}
z?e0NthvFwc+9KXeYwHY;c^3b<`?c==|K~ks#>d3`N#B3}|D4AbvQoP~RM?zdmbvV%
z!xn|7Ay-0L-@0)){$C{1Cv&&|Vr}(?eXAy>Ki50<{$s(R7RM(o%xB_5&&}$pYWsRB
zeZO7nn)O*Jxv93xWlTgk&;0t3ZFS%I2=^xy+0UK{n}xS-NqBo$qAhUs>#DbWJ=P4X
ziqg~4*siaMG}fExabnJ%Kl|JL_v}(qUHiXXZQIRV+@{IDRE#hF@%`7ie~12`d%@qs
zLqhI^#l@MKs;iezyZ$;>imP>-B)cNZvYGFA^W07~c3f+hz1_T!)9tI~lLd;lhPty~
zEt3##|FXzLzd3aFtBU-KR#hqOmbsS<x{43g?5R=qHVY}fFk#*m*GD<4`rmX!Yz=ti
z7jpM3%WJ-sRw`BxR=6**TEJO)qwLm=maI74J5%R5ZChOP<)XW_%&~*)@@HB&g^v`U
zw=J)#t^K?5pF_dI>lglASn=Fv>axl;dREu8FR;}4TBVz}R{j6HU}5t-ucblD!$QM+
zHs=0b=ge>W<&*mSnoYZQf6n$-mh^vduR;D|=RuXrWfj>ErS`4NO$wPWm%_3q<cj-@
z-6hPDjPk*5-&Egx-;|Tgo49}aLDfo*1$)-boNgC;?ozL*wM_lp<PHamJ9?k)YDXMa
z@nM&di0Ann{@}Pm_$!eJDM=0+j~tn#8&?v8&pIjnO7!?$7XIX&4|jOE($Xh)%kSH+
zSh(<E6}zCm=G&jMyB4qi{PN?Et8$Kh?uR$3a;|)R{^{(kPv`5$nXO&9v9M#^>#1?;
zzbDT>fBj<N8k5|NHLFyYuVCoEe|_bB_sMFX!>4U7@KtTo(>TFZc<ac*9_fHXU7w=j
zewA1rwM?{WI~V?X^^e=t@fT(M6K|F+ciANCByj4S+WK_Q-G}e0M{M^l{TgNSL&9Kx
zQ**cX%qzyt3y(^QJpXa>gJeYx`)*CoJw{%>k;2)hif79Af3#DJXWf+1bzd*hEo#fI
z=1yVtN8f)}>&5T;)0T4T&HM8wcG=s#T2kI|w0<S$xAz$<Z%k^@JSyMy^+oMQb9wuP
z%a;9$GoIST!qoU$&1Z(e?nR4~Zr;tjE9`0Fo@vBW)Wv<l%COdzfur%QMZ`9hiJMk*
zt7P=3a{SyYV_U|+xc*>u_qC6|p08fff5g1}Z21%iw;5~XSS9X#OWOUK^>y0HU)6yn
zdwNc2B>Y+-H>biwo=xt`<Od6EPVhS&VBQt**?y9lWiO}KHFKj^-M(`^JY+LFd;3JY
zv~*<~%lqu|6CKG+-<PyzhZ|OYN|8CvsTaBF$);z|P88m>+?n70savl5=~wGh**B-Z
zT$Fs;W=Yg4<J;04cO+}ynooYUYSlYG)yaYDuUGf3d#&%PB>3~!>-FX3Mc+M^OgSPo
z`y$WWGkau8{GaESE3#beHB77hU|KvqXMu{ou%>G2*0WQtn(e$SvFpJ<;id$)8FMZr
z+1T0l<!=97b)D;4?y1^Vp9#q=mf1C$;`8n12p;D@_F_Ksz4sX`P7Zktzn&gQtTi|%
z=eeHWyx`mZea}9WU;p%emz&&UyJ>~pExRu-+Pc~D-;c+dy1JtI`~QB+?CtHHp0R7=
z5(WGJ?@p}@7da8~DQdmiCTpQSmLR@(iMaQ3@73RrxFOJe|K*J^1AYDX#|kWLcJJF~
zryFM7F=bLlt#V(c;JLHMq~F|`A+};;>gBSC(7^Mrx_+JgoM578W&M1W?5^X^8tSvp
z{IRjI(_edTThz_crqab;^L#Gq+xN%MHR{={FXw*kg_6Ox<b8VuE-3RX=Wp-at5NkW
zyYAof^O8G%guPQdx%-aJ+r1YqeOh=eE|g(z9P>p{4^2TQgQ6!V4rga&<!w?u`R7p6
z?d$SIXN~%2R^3?M$tiob);*|w+5cT1%k4FbZSEZ}^}W4*!GZ@1R|YTtSN-kHO+RO6
z=W?~u@PL*mjyrpT*DEOs_9o60YwQvDSHRJKzWIXH_6x4Ux^bI#F(_W(Wv<t7(NO1(
z*XUSRzg_38)WKcHWY=$!xU{-qcfDO>rue)5?Fw6x4^B%vkjkFGbLQy=_Gdu`<+j^T
zux#Gxc<aoa)h??Aez0%g`N97|bHi!z+jA=(b#f?5*jAPN=an|QGs#D-x^+|0dw$un
zdvj*Y-F54NMda%TMf&VAhcDcJk$QFC-hJ*TU3*JSm#3ts?>Dab@xfh7TU+^eLj+?C
zI}dvt>pkW$ChOci=eFr2^`2ewh;t94{k;bH{`1{wFJdpxeXZfNAXBRCdb7U75qYkM
zoIft|GAm9oKk&Y4$DV8!ZSIcCyTcjF<7_8Rt~cXTUfeAcSy5_HXV9{jXa8T@cRw>^
zIVB(RuA4sTclpYUw`W?P$W58Q$hkqDDV}LP!}`T8In#N(u3x(r6cQq$r>(tPPtM=x
z+?i8#RujTM1=Oy1{!#Au&KU8M6`YeAUY>Au+@GHIX>la`5#_Vj*_a!B_f~z~_4=&&
z{X28bbnmQN>Ns}+!w<$&$&QjA3|INsGng@yJ#YSJrpvieceaa(pVq`9AF4i7?3IY)
z-*w#Ka%syoQ|9Nh*T3dFlD(_%-N%F<dn*3c@yr)L{6V3F_pSBXz27G9EZdh5tFP!5
zmS=YTUyh9W|D6Bpgjb81Ft&efmF7#laaJ=g`UmgRjGCR7FJJRAE6_JcQEz?Uem0op
z(1DcirJ^4cPyMRm?#T6DVE^}}|H{>?4;OB;P1u!rS#8s%O-?6W9(8$`RQYMl`RVCc
zxc>Lr!|N?fME&n5v+R`JyH44&lJ{|Zr)9lX_PP}_G?z}kzTAJmd%w-675=}!ylhU*
ztzUn=P)6tUqpjEDUZ1M5=fANneCIjiGqu+n;ttF_@KVFQ{5?~>duPOSer65^&TW|w
zZ}6oVwWhsz(bl(4I-{*`SvH4ncI~I_S2t>Hym@x_EJhuHSquvozI?UxHQTP^4(2u)
zZH?<*bHo;(4_>&XA}a5?-HEgRbJL!4PjmRrW|4a<pswVh#U9DIvxPSKnlQS5ZO@mQ
zX`p;4bavK`Y4Inm>h^lC(cz9bd`>$46ocF1W1FHfSgtLOdL}V9qxb)x=l0vztjjOt
z_%%1C<f7}Z=={B<UPh^L;v8+Ket&ygdw!W_xU`Yn-bmpuuQT+#6;z)p-IcD0nxZ@V
z%7qIB0d;Zr_6RDw{ds$@`u)o_u8ItrEeUsa6zW85Sg`ujUap8cp^dq%LJKOolMTP`
zn%$sw>&(o1kz1zBEm7H)sw~^NLDs}KXIov%veo-d&u%?%r#$?^70XvwKkang(2`Lb
z&bv5ev&%^{p{qqRt}z!)=i3#p?`Tkw!mqb4LuTjEhjV9tl#}(7?z7uJXY#x*qvKgm
zGIyl~zTeit@PE7T;rE;}FXPe$KiHkx^lO%^#Azw(vNs)tkB`mus#d%swQ1eDbMc{}
zrAo8roj7r7XX4o>@j3>NHnQ6mJosk98I<&T);G6|ck+(|7sf8jj>^l+%PV+#YN~jj
zwE4M(lVc4um&zEWoH*{(vHiuabyu?AWv71(pR)Zt%LbVW_6p`7bMhn>v)tLZ_*+=t
z6on-v_cK3#@Y`{1dUos9jmM@qUi*6N&^b{ZZhtqv%l^{mW)!Mg%f+~#;6G%!_{7iq
z=5w}NoU@KmGXL~L&YnS@G0&klT(|uHy~JzlVy$m&S~K6e@A3U>JEx_#>fZkLO+%~l
z*NM#ZJs&5f&R^(V*>&yUQghuK0Z%_x#7~?0`g?X(#*KKZvZAxIOl?bJ|NrD$mnpJy
z=g!~!(q?Za|NQ*?z2-fsYs~(Ojw#zaMuzTQ)Oc6VYPI$Kc~dq#F6m9M)mfO<eZ#WB
z^Z(zff=isuAFIk2=3oA(T98t&rnCAHhxM-0Yu3#5WX_tiYIUXRL=T;fI@!@*9YjP#
z=G?w=<;&({ZMzPhxBa@Cai@K4&APcgd*6C2%UqP~&!#$I)7;cbyXweOi|@brT*>X#
z)h!>pG3n^#*a>2RK|z;pY|p>HZ0-bq>+b)~rHs2vSDl)7q>uX=&&sMhf;JT=+$S`u
zbb78;pRL*cHTA@TJ+ZS_Y!L60^El>x+A=S;X?lQp%`9C5p2eQmzqZOsK9Ms{JM(L)
z_w=C9(67R`3+tl){$LFkjs13I>&c1`t4Wisw4&tt1BK^)-XfTpA+ek@aOV8^_Sr|f
zL_e3C=<52<+~Rjm_mx`NrX5|jdl!~%^Euqdc}-VnQU=Gj(>hPu{}#=dBCepHCKMlj
z-bhiR#6!O6UtYvUi)9>b;v4?&%3>>67jxkLw;y?l(}ROAe-!<CdYbNPDVvH9whe*N
z(bWqxBmb}e_1%8A(fdd0>wMK7%~G~>6uv#@mg44`W8(K~{?0t^rCR-Z*0u%9mOWd&
z&ZGOW#hR$CUHAWe+kSV(;@y&2{tmNkOW(6OP7M&wHosh{xzn$yx$oe{$6h=B&I#<X
z-6LOBC-6wEChp)5)zA|c=YBf3_wf_<L?1!b{Iy9_Lj9)On%xSYX__rIJ*LR>>59O`
z@8WiqWIkKwJNukT?(>Jc)a&Y8kNMY?Pt8<Yy0Q1&LI$P_8ETLC6m*Ywu8Y{Hw0A?L
z`o!27(Q>&xGx}2Vw<naQf7UCw?r3Im{d(Sw8|Q-EpTAAlUts+3K-`_`^MXD9k2bzo
z+`Yg=nC;oYFM<V!6+0gFyz|@=-oEhXkIhUx%k{0q-@Uw6_}!@TQ_8U(N$1MS%AXq&
z53hTFaq)3`Q{UN>Hmz|Fs^70P;nT16W)D@P>;5NKlt1&mb>}W?is&=`vsx#<X8w}9
z>g&ezaar0cvuR&FRfQvS_rI?3@-gZ%+WBPC$2a9y8rH67|011L7gB!FSXlS8d;K1k
zKedi`G#`eoTo%3LX5PHIUzuWhF(*DfJ$?Gu*VpC2iH-;DOMR_%r2OsP{Jt&fSo80-
ztnZ%W`r~&LIggmX_f=?F_xfMm-(RJtl+$MACg1i8Gq4U$5qq|<y2tj>$;neDRU`|S
zrq13Fly>3u_wB3Y@9RgL_cHY>-Q03}$*089)j5TN#z{_^!Sx0Kz7cn2HF+EhXM9{J
zl;@>l8R_=Yn|GHOOWrNvuKe#QS67AR+}e_ve1BhU{;AWaXS4crss#P_pI<uH|3~xn
zB?86U)S`r3nls;C&%dLnw0wbq7*E?V5m8ZI`<F{5@3Qu+R=xPkZOLPSb0?LSuMnu$
z*ie}lvi-`xwJ%(5YYI=xyc81aoEvGGrqrk}p|CzZbNA=%dJ*M2n6^q7IUTsovFhVR
zhmNYIDGx>2l8=c7M+m&>n^NBM&(h$tM%Djk66<z9VVEa%e}3e`puD0-JWFMIqc1JG
zD%m0+Q~Tv&NJvP|oBR9!f32*n+`Ob@nVGq{eTGeS^Ol-_+LN4Wp5!P-F&PAx{Xca0
zoZpkQ^#A-R@7vni3bU`RdHGJ|?NpPiR|NCJlCSLxXn3=T$>>w@N4A;_>$|6Jg#B1o
z;I$!G?cy)CEc0oXBVwE98eO!N+r-6vQb!}>`|5Aa@3x<uw)e<H!J3Mfw{;}vRvI}w
z$5ly5C2AH1nSC{!{BY^ain8bL3J)-|e{XB9UhE!}vUbhW1J}chzWrP(^L=Xn@i#2`
zMVosr@!0GM=H8Ghm^)oB?X90&<r6{BP~M-PpHKh(`nr7Yl%Q)@ug||45dS~m<LT}H
z7ybEhTYqZWr-uzGUZ)-QFzjiQ_|+@?%3J4GjnPc2;=^sc!S20MU$0kwex|DCGvmVD
zlegk{rf9tX^3-_lK{MT1tFos4o>m~>dz~|_^<z8pjFTd1N}Z`uZ_T=Yd`p_K&YkJf
zrVY8=#`6>;yOWm&%{EWGYQuKZwY8;a(*(cYYjQ=`ST8yC%_8n)s#Big<?q@luWls$
z;yJ4vGpkeVQ<L&SL&nszSxwL8Io;q+?oM=3ym$Cl(S^nHFaDqU^h>{6WsA<Mop)oe
zJXw%(v`w}o@Ui1tc5}w3sSo)brrR94A3MXg+U&f|XCC9UGaB!2Zhp=i<h6X?zJGJN
zR=slPir@SC)TiY9y_Yrw`&Ud9jxGvne-xrr=wz_}3ID;0N2f!S%1V?bT9h4X;nXiH
zud?c3`@+b_dTg=S-uzeZJZi<$PAyruXjV^COp~NydGGu_eTf6oA0FS}+m@Oe$Fla?
z{f=*|i=UL8DHC7&UYC1~<D(mVmx8Wu@D<jcdT5(Z=~=UiKX#kAxH+CbYq+p)>*Os$
zYl2mlFnIPSsEPZ%I@-Uyf5H7J`!Z}dD{Pp0l0Q1qW3T&zt5dIr&T>rbo1gvvqv*V6
zR&v3o&s^Nlv7t-NP)>9E{pL&#2@W5YWlWC)7A;+Tr)|w$&y$lJ=EUY4j4izydS-@U
zbL#17pg!ir>C?BX33blc81bf~?bfdL-~0bxxZ1gR{VwH+9=1y?&jm1YG)~;~HhFUJ
z`ieu}`{V!FWkvZ<nL73Fmk)>e>(9UbYPRR&G3nh#oU*PAwhhdUj~g@{>aTnY<}WFK
zvaNNhQRbR82Yb{x(o!FNtTtc&^KvXd?~hs!&53=@C0C|>)=g5(_;}^R+w?uB7A}rT
z?|7`iFL3B)jBx0TZ9+Q74;IR7+xCBYo&<}L@re_sk4p1wiB#FU_2~KJ29;Xw;u(ea
zGM2@g@cln<=Y4o6WA&HAFY7D|9xJA(<?7Yv>#~coe0(WY<=b<rx3XqZ$0w~`ou^?h
zOA@>d^$mD`7@k_Bb>~qvr_C9$$q#l-$a)ZTCF*eOvB~~+CqFzqd^q`7&&;^6uy2oD
zlnNbAnLIv_Rj-j#@#o({$!mM+!>hjSH<~zwU;2b1(}%32dfllO+5sWIdNOCro0yx+
z?@K(~W_;f2^&0zgGmVdXs#tCJ^gBP#R?@!C=Ks(0^}Dn>ZysROm>=4{_zpYktr~d-
zy@hA@RmPrSKad_PIH5!)$yYF_Q{`WPK)prB!>^ahPBjZKEqon4Kke2c!`b<*Vu{R|
z^|x=f8)fXfzevz&LAA{fXGNx&l0Tdd=H^XHELhxP!P;thX2&OobNk*f^sLF%YrSjz
zVlL};S+{RH7h7yHVA;hcD)=LV`S|`VJ;wVqo;zBf{Cr1e^6i4%ISc2!+S~TZNQPlc
z?1U!^{)Dc*<>}dZY3J-?%(Az2lC)1edh}@0)z#tgV!dwl(|l%b+_Ps-cvZ{c^H)N`
z|LYq(5(u1Ts&Ok|qU?#&*X=kezN{8nRy(~>W;ypC&C^!Va&=c%KNQdVwcka@Y}=|`
zzh0T&uPJVQY%zZmvz+vvxcoWmHvjc*2yPT^xU{xLzF`0T$lcqoU36_?eb>>RDxBXp
zsZ0ICkD3Z5I~%+8pT7O9?fbp0Dq`1vt9f^wE??kf?mypcE^t7aLu38&UH|5Wg+}uT
zN$iuUtNEs}?7er=Rj2zoU$YW3?0nw!mV3n?JO8JH{a#Gxaj#G1>n57*|9h^dB;Z|c
z_@bD$9yULgKG&W69~sUsh&pqZZU23HU$08R+m`a@3uQ7Rr){qK`buury8aJ8nBr5|
z4jC66lm8oedBI{Yqq9#sdzaPjn7N_o5L1gu_TP+n&)7BFaxC4L4=W$3xb1T%py1Qh
z>yi34KX(7R_3E~`e%v4R)0@I7_r@u1yKmlUz_a+yrZw4tV(H-<Sat}d%KE#OvLC;k
z<#?SjeSyrow>)LHv>1+0Tr$a1=dw!b7K<Ck1~$2KzHj}p{*}+?jW^Hsyw1F0FlBq-
z_1!BUe%!&wR4VYOTINTt<%@UeU;e57dGh@6$M@MuUt=pwOwX16PMl(<vZL;u)U-#h
z3%tc$D?9&4RIr#nsI$5KlD8z>pyI=WS1Cq6mp-<*y_7%bl%TYEp3OBA-$Rm;|4*Jf
zy<f5L3vcJEkWW%c7mayeycDmftxLVf{Zhbit~}R-S<%X-je0WaRa>Y14NUYrIX_q1
zbmO*NzkUR0Oo<N(`Lae}QKI$a#jQ>YO-pLGTXzbrQ`HDJI2@?g+wZ#5A}=jHUumOo
zfOFuxD@@04+Puh{J?-@t|NCzm@;6sxCUL)Cyl#8o#bf%@USILQ{8cwj>x|g(x{hmk
zkJI>FWeXoX=Ph`}*(|wZwXN10&K~W?&+f)4nWE3HUi~O~>f)_$0epYBD<<CkAb2!9
zzV<8Q?aZ%pi_cl!E5BFyT#nN{_34v6mv)!G&kpn1apt}Ek^1+7k34+0*j3)^V#}*k
zG0vM6K3%@x<DWUZs_SO@%xIl9Q(~Hj$~3vkClmYaem<GJ@@;2yS((}1>hJevMv5^%
z+r9q&;y-WR|Csk?xAdg5%pdr&G`uc5cr-41xnSqHpSLQ6LhpHg4ST<Mw(Znyf;-PX
zEWZ~#?V9o#LH6&*Zp5aqE?1w`pv=DD?e*rv7hh~<c3gU+^0CbB9`$(@O{(70eDd=8
z=A>8rJ#AFPoflVmK)*)L`s)Vwj^tZiq3!|=jLNdcrSVy}WKUkQ`}=;{tib5#=<3_M
z-|wrwX?R@bvAkVPMf>6GjEo0Mr^nq2y&2dq75_>oy=%Ae+@c5S+tX84KhCgq;(0rF
z>tn{ZYem`<T@?3zFxayD@uj<WiqG55<CQj>lQApJLf!nkKd*aC__~=NZ`aJSShSgU
zp4tVQSr&HFI_v|Czi#>&Idf+C&Ayx!>(=e7{rKqU^fo8O`no#1@R&l^a&`N&c@59Z
zIezXs7=LwMlYjdo1ILBI8y+uwdov|1jV)<oME&JWT3TkgRknvGOs<_}kyd?ICBKtx
z)`X%co7B5AY`!krDJdx#ZawMOtXZ>ehpmk&-I*v6dEWNB%=GxW%JTGs^Nz(`&%Y!j
zb}{9a<Lh$ekm~_&I?}uMvh*jWuroC-+}Y~-?Ll+D;iJCdMaw$p$nr~;eE22%oGItL
z?#j*Y{%Gvq@kJ~8#cJh=FV<en__94RGLjk8iaKXop8jsv*6SN@+rGG|*W#hzvU{P(
zTCG!E`BJ;B({}4G<25xD>f3x-js2aW%c8)u+hmoMm7D)ux>u!?n*Tka$)$Iv)jRJ~
z*Om*)IeL`O;jZob*YSMG?R|VHX>+AHTJ3$820g!a<%*4M(vgnC)(`6Kdb{nFw|HhG
z^~dhdQk%qEn)>wZva$?O!GG4@rPs*b-jMQssTrI1>Xk=QQp=Ao-L0vqxv|zRf77lc
zVQu^Q*=cMxp|U^cvgCLgsYZ%#e>!{Ol)p~JhpG%GZHVhx@<x0TpZtuzJ5M}xoCPlA
zJU{a+<IVM-&uwEYb6#9{ZER$G{i?Z%&#ILxcWQ`rzkPD{(KoqIRbtawjE%pXvsv&i
zuYd8j%%JeFdEwuEBX3V-l~~E5zh}>!V1L<T6Ar#y$$S6NV%`s-s`8IF>;fg8knr&9
zre<b(eoN1Ao?GSm#m;HZeTAQrP47#LQoMzhr8piii1XrneAQ=t@YGeS{8fcD7iLNw
z>}e=*dYEAJa7xA@JG0D4cj+d<ZOZ1$&Metkclem#*|QUydI~CH0|PI{zkdDt^4~^2
zW#*Z!J1zR0wZ!gg-p(tvbV`Ue;}xBHWVW(gz1xnvQL@b<@pW<MCfCn6-*bEUgVT3B
zt&QJzu36Q*UvEiHuyXz5#=ZYPe%+RlljD<?lCmbV&&BVIzJ`s;JI+0+M<=hgG04g`
zZ&J?OCfI*t*T>x_y33;&t*wkE%>5j!o0>M!Yau6Z{DJ<qJ1dr-vHZI6Nqkp*$@j~g
z!91TUpFF?iz5U(&3jyVe8=k#+^Co_7?YEox`#v6%e!0(qJ#*c<$unCkpNNTH3W@gL
zWV!2h_q3TF7eZp4w=A5P5T;hS^lj`RiHsSY67@fihrbCIc(TTu|A0rgn9lk}_Gg!V
zyo-`Mn8Fv%%wJZ%X4mw{&1sR-<EmcHnW`NgC*wa$y;W@A7x~-=SGF&C+#?YEX2xTO
zpo~X`@yS>J{@UFycjwNXn$$Zc$K4lg^wI2`owh3O@)n09ug`9ib-%H#c<HiE*K^v&
z@mG`1`m+~zSB0CH*l5VEjt@(Fc6PCQZ{5So{`RHM&dj`g_vVJ<0xPp!zE_;kIib4S
z-L5mBp(2<?J9TIAiSms#xmO>ru*#S%cG06Hqn3H43)A}h{$+vuOfzS`J!f9waNz8w
zU7H$j%l{L3B|N9@p~WBOBI|h~m)lmYxV19Pe~!|`4GNFWtz6f6Fg^9do9k=lZ|*z(
zxUjCjUFG}xb8my5Yv}1M+qZ9CUzNMXj|a^&4H6Ii=Q;di$Ig|7K^cFa3%^M`{^z3C
zk-m@I8{<z`3K_`mbo%`3|B}6*Pc)W({o4Q2X5O3vjW1dM|NVXb>+iqPZZX}cd&~Xj
z@7c3w&%v!*w;p|cZSC#*+un9co9FGh`}pHL8AENRiykQ+1`-t&`~QCX{do2Iy{~HS
z|LdH!%rM~qL!b3K3%RNn3*Vi)b(iUQVaBSJ?#3mDZq7WV>}24eHBUj(J7MOvXPon5
z<9F{rf3^GdVmGfdDU(8M{1#a{Y0Y%75?X)XJulPnUjavTw^8_~qW%W!r?Y&w#(dvh
zx#riVNuSS2`0aQ8tyGns7u%vD;CpaYR7I`mGj-{Wd6rWSv;=+A2r{$z$@(o@d*v0@
z&Q}s!vtP}Ozj);Hk(u4|kCgp7aw}QDiADDK%adg}-?t?kWb*Rz3cGUcn(Xa}=<mtD
z|JujCm|ybFxUb~hg<BPM1tojWWyB;u{usZ4^WyduD_-n;_3Bl-m`=onmQ{Ag7P)py
zHJ&etHMfyFU(L$Oy13!Bww4xOm)oq9=g!56aJAm6{eHK+dSh?3*Uwa;vvvFT_uRe0
zoKgPZhM8~ZR*Pw_8tUA4lOLStc*xDVF<2~2tM%%mJ^W_+PGMpZ>aX_R__R1<u9m)|
z7yIc=8+?R~XCClT*{I8{sXA+!;0d0|R~JukICgFR+AU#MSOijnm(2TpzvuHk@!2!%
z7ERDh?tWpbGQS{`P3cM4@ivw<*$3jHd>@O?j@Y?p+Vy13PyBCAx+ZshtSWodvvkSQ
zPY15EMmu|5S@7%e=b76xn9CJbI$dh;O$}t+$aV6Y)rZ@QJKPo@uikracS-E`{Ns<(
zZ(g|~QYI7aGE1sYYei&rlERb!+0Ml|UEu{K-Wr!CR+z}%eSTTy_Od;DYP1aWBzW?!
z-kvmN(yw1tl6>vmf9mX)Wis*P<>b^TN$`|q+|iooaVCCe(bLuysm7TxGPf7*TsJYq
z##6&uI9{V+*=vb9{kHRqukqgE+m@@G%YHmFvUShW-I5pIz5PA$ROI~E8~m-bYL0K(
zpv!%HoB8k4LbKYgzgM3!*;m7w`|$6(a{W=Puj3e}d!0}gJoTh`mG7C=SqtvZDeXD;
z&DiA0!Yhj>DmpI9k(xDWO|MFXSC_t_=HcTLrcW<EVaP1Gx4!VW@#V5R&$cluZQmw0
z@1Kyme#eiG5-vM7&zlpoZ%xDh*{9o%irO65yeD(cav4=GPEpQpSsR%&G&Li$C5}Z0
zoq8*^RmADUuV23sN=v_PJnP%LUu*8?50{>GPQRPFRH)X*iAS*Eokiuz9=oc>^Pi2J
zWL|%)F#7fNwfXgJZ@KpEKXtmPiK$$1|C<kTZ9!f$Jyh&gtX+HexqM%asHW%9$q{L?
z_d4Y3H5$xcgx76oai}OUan3K^b!QJpmGN7fvmO)pE=}`zs36O@?drQKp{JZpX7{|!
zt-lI0oi+II<1dTRA(lgmJoEV%X5P=fyY)TSAHTUGw((B#j}A<_#Ncg~=d%9$1LwmB
zm~?_%JXzZw94S@cFxgP^Q0?EB_MdlZkB4mPvNniT%RJ2OJt6ybVV_ikol5-AxcuFE
zx~a~oEYIqg&+9##U4G5L+T3COlB4{365Z<N8{WRoS^8#1IN$eLkDt4<cbxD1Af?`%
zx=`fxzP-^aq9S&cy!><O)G5~NYik5|-7B1Is;=%HS8$N^-?C-PqJ=t-=$lWO`d{nE
z!}<Dsem3vTHIMJSuYJPM<l=p!$-&yQlg|IH`8PS|w%t9Gv#ja!Yrma&d3pJ5US8hV
zX?&Wh2NNbtRCc#=b#=WvckOQ7Q}**h?rxaksU&p#@%Kj`HRVHREnJ-Y((0M@?QSvi
zQ@0CiuW#*n`0>%l-yhhRD{AaY4m(`la`xf2{KdE8AN+oQCS0ZF-M?k2AqN&-U0*CT
z<0ac?ZB8r8oj31%du$j}^3;)Ke|})83F~=1w|~!)pRHS){_X;kTAyapjR!WHxSb^8
zWG~J+5_#VvDNr>vKJ?SaV{U1Q9~GPCsaoDKsAX9mZ!qmc2h&sCEy^Y;557+Q(9Wte
zd-uHGYc)1s@OabP{Ob0jDZzfA(E|51Q4!m6Btt_(Z6}?4BK*-MscYfu>(ZCk&3URX
zQPQ4wdpf6q&&lZz8{Yp}^IiT_<o2|;#w$|}efwE6-G9Da?YBd%+^Os1_U<yV-5Akx
z_lkPW_JFE8yvD7|V(&kC=DK(F^|b5yxi#T0+xFd@INxenO-!!Xy1qL~ho)Lwtg=08
zU|?qb;q!_QvHZ*5K32JP+&?3`<-v#ja}Cq}K6|j+q&;r}gYBlxJ3hT&jQOxQP{dcG
zbx*^qPnH@BqXN0l>nr|ye{|2@Rc+NB8wL1XD<lO!7->9M7;yc=5}jGfnr1gN#U>{`
z?Fcl{jbq+tp;FrA<akap{!ssN-qaTl{~G*yUUS=tIdy61@dw?$A3hbmx*vDeI{S6S
z6qRDb4Li#33$K=aI{*J4b^AXL`6X?uz6ffEud6vzHs{WwOL69`e*1oYUG?nA+_ncX
zz6lw#%&ZR|cl~vn|8K_MU8UP+uMF|EklAM?!nHRhAV9(X|DVsGWoxImvA({2{ObLx
z)&AOh|L%M%^D{F_`gv`1NAJC3o%6FJSALGJN#FYO_TM#ITP_y)Dqd4K^05AXW>e|v
z-3Dh=bpFWP)o+*Y(@Q#Zq2^QZp9*2IZ@buL?O&7d^HNk?*U`#pyKf#?t5CvGrBG#D
zU}$9}b@m1`|KZ5(f;#L^L$j7OxT`GUO5x&XQ{L<}$3~@J*-gwaqd+e5XyP8m{$IY%
zOzE-A8&yL?^j0PPYhz2Z*8CUE6FQsc#Q`?q%ze$T*YBU#)#ZEZ_xt*SwA9qA`6h=u
zT8)kBb^P~LyJ}6H@$%}?ew7=$-0Mp?O!;d*|B}~Vv1ZL4&6yro*qRT{R`;1<P<^<K
zcVp$}XA|eny?giM&DSq_5^C2UUCi0CY`gtEMfSSfz0=<LHC;WlR;W_F<MqkIhZzog
zclxVmSkCaAEah`;!Xh4iv8HQ(|G%5~Dl_$V#8syLT6dHD=@McQXDc`Zn)?4G%DdjQ
z+w@0n&$MP)PoaE|pk&pbY~5RJ9Bj8Q-p0Q}Q8&!`)Q5+MH8nL2!`4I;hUVtJjm`LV
z{b;ML-fF8yZC?)=zW@62kqwLHVS{&aZdc={ov-^dW!9`&vsqjI+TBlXZEfv0H!+zK
z8WvUtT9>)YYs0Nw9$|TX)(R2t?njApUpqJRS><#G56-%*y=+@0<332AdX#xhVO`@F
z#@~$TTLgP&Zx41z<5=@sHDgK3v0V$Mm)@*9@o{zRd|mgS>C+vA6RH}bue`rh!s|Uv
zM^S(y;_>nR|EKp<ey$1&504LujsCoQQThAbTRxqL&iA@m`10zJ{@l~M5*N<Pe=?`$
zuCVI=+N5CT(4%Lb9sBj#M(%va!DjaVi#Ba4N-kfndiLG<bF-(v^W*eb*t2Brv9Ift
zYp=Xx4pfN!T&~M4rlX*(y;{%M`13js6{W=+Z!Dc^YBTNcG1>hq>=Tdq_RVxqI4{1f
zIQf$Bx_|p;>(@V8_4?hcODa!8r=>pKB>ijmeeWBuqn_2?(~O<9ZejlYeJsrfZ#{bS
zXt&X!hsP&(9yu{<)~xp8`#aKO*8BYJQ%PE;T<I@dQ+57tzwF(Bcxzn&jy3vvdi(Mp
zAL~uMEBk-1pyIb5oLkNYo%;4~!!B#L%x`@EK26_mkbloc=kzLR)2u5!hYmFzUz*In
za`nnz-e1>99{&|yW3XAn`17Mjto7b`tJdrYxAN<Mv*u0vF@K5w*Y1|zzkB!MeQ!Z|
zM%ho1-`2*Lm0uB^&*8qMc+O1ldel!(Pp@3JZryy7%uBg5XU@DHwQ@@E#+85eJ@b#>
z6H)!w?*FgQ)9W&_GGwMsoocGBZ~oqYb@=+Sx-X06OUt)>4?0q#SkYx$a9oYkd+CFI
z%}H;!Ro(V&G4U-o$h@TDb2%h?->w-B3I`q>Y~H&4e%<euWy_ZBp0x7HfdGvdx!gRx
zizT^^g@qq~E)2+6d;IasP1#(EAFB4&{P}o%w~=&tbeI1g(b!W=zR&#>w|qABWwH7-
zWy9Yimty}+3Aj9s!}oXSrT4XaHAE-%`@Y|9>07<Pc!o)A>$1$5yVgC=`@inPZMCUh
zAHQCYzr5UkzU#8gb1~cV?)I!&waW2e!UY+diVwH#=ASQ<S)MN*Z<ZDrX8O{xhQVxa
zjkvA<j-^o<cUaai*71FLzl|ez_pGCh+Xe2-pE~ucXROU7zcp53F0=Mdle4XwlRWF0
zXpq<3xfPSS6;rgPYW2D;{@IooAt@>OddZa7y^Fi2&7Ar3D`<YN>T$36w=V~u=`B6K
zCHi9N*#Z_}6W`yR7q%pu`fA_ZDHe9RM(g6au3N8s%6+@JV}Cmd-@2?2f5qmX)?tA^
zZ+kA@_wv4V=vI5@(WLH07hlYmJ$_S^cRI7jWs{YwS6_bd>sZi@ZLw*$zs=jb^{QXO
zU+?ah<*z)vjraT)p7wL;g`>ei1&bP#8xA@=>x)Y^memgxzQJ;a`KQsO^1VCf^{%Y)
zR+{|hZ4dMIUyDKOFI^U2TrYF{=c?V0FNUV1q)eE6S@pKcyVwr#h|}C(W)?BJ#oeFr
z^hR;-g8#;oK7DsG5K~lR{LReVXfx&iRN1@$m)ZX(&TtTJGJ25xK$vlUL&U?cZBoA4
zZIT-cTqf1etvz9O$Y-+JS-ZoI_P=;dRW9l_PT`ZAe|^HP6M|0fHBAgXE^j&Lbop2I
ztQV>#YXdHC;aQl;xG=NM_xc_u;WmL;Y9_uJyVP1QELp}G{bHA<$;2xy(*$OTT`gG~
zmk~8nAZhP~EupiPt-VlMyH;&w&KdoVw%M-?OqdmA=KX)UP`0Z&YQv=^H^VD`IkuhM
zC^(HJb^+&vT?bZv<66vK=Pb@xV!MJ{SH(nEp+t8<=B)FgI(yGbOuJ%|$QkR+>Fb^4
z)XnMJo!KTPyi1H(_nqO!CGpIP1}3r#xi{6a`Nv%_T$rV(8<BZw38SXuzs>3&Jh?A#
z6trtxxI0+5<yu|fr!;fpXue(Bef$f~o8NhVQNXS-?KO||mHv2n;|;rmXRG<nGReHO
z#B(xr8E@`x`D&5HAg9oH>yzh#ITzI#Pum`UE$3h79#Qw*`g!#_@g=37xjS!l=k(v6
zS*CyV`M#)*i&5WVd*@&K#j@(2%ANC4tLEkGG_Jh8ONh;=f#bp(Iqn6o47OZ*s9V3?
zd~@o)$Q4F!@@gFTR`qP(#u`0M`u#E8N3Y8-Z`jGV?XKx^mK`!bOapkQF!3{-XVhQB
z_5b;Ss0UBi#+b1D5&9v$;g_}2JkB#qLOG(p9sVu;A%0gn^BLyGS?@bP?>o}pxHwQr
zA;A3S<^#8D%9Xd6Rx!68`1Ah9J%)8GZrgWG6aT>wTHn?1JK*cVvU=r4d#3-)eeCBP
zIwv#lVY1=>!(nlRSDVFT$NvAaA0o@s-{~!oDE)7hw~KXy%n#;OedQwh27+66`@ZEn
zmMK#pxHh^|x8U*Ro~)8{>}m^7U3bYmoBeKQIHUaHSF9J}Hq2^NJYX;-p|{*#p8HH0
z^L!?qtk1U@R)v}bPED_$GNbkG<LGVY>deo$H>BoC1UE=G9Cg?^`=p}znQhbNurIx0
z_+5rwwPM@sh_kg@V=h1cr{?zh?6pfwk$Hb?4lK?4b#2GPmOJ0?E=;|3m514k$$xic
zDMNwr2Bxb4xslIwTkd?<Se4V~eAk9Mu=4J<H&LfDSw4try*Irg7JPki-iD|Ih63$?
z>(8uSH|#s0AE2~_BQ(9fGppbpn_c<iTE-6wtFFdfzAL%A`-H>O+izD?TL|wE^H|uz
z6Y{tH+t=I8yUe3cZDqN-;Evbogw}x6o7?V0OU;`0I4<h+&9cYEvR)-|uDOb3+yR__
zm_z#>2Rsew%Q~>G;Bf8Hzq?~^ZWUeQ7Lt0C|A&C8-G4T>MNxZnra0&@{aUbQt&+K8
zy;E*i27~yn_g@bzKJZJ|$dplsb=r>l=mRC@#g8>i<zCgzYYn>Yc;IN>vd~@E|FC}$
zeqet<Yl;`Y`_@B~8;S$WuX9aVbUSYj`(l<Hu?tVqA_P=tOb*oT?%VX^-_digh2HjA
ztoRi5;NM;;3*pdnR$Bi*1x`CHAJ}_t=7Erqne{AtS~oR(3aE@|%@R4JVc5gazwlG3
z?%J;jx~qDkUxl#zXv&XfJGx?a_GIaMSyy<2nuWHMu8>|Try9q5ckasFGdNCd%00Qg
zP$Td=Q~E+4mVoa+>;t}ka$WH$i>a<(=#Sxnn;M3elBqkdEoymrUt{9zHlgj)1HM1-
z53JmOkypKK*ZS-RuJ3cA@7({!*5||-)vdbkTJLeo1JzrklxJsZNARs$<i}Lh_-}<?
zqI^j9jMkvt99{>t8>|D?zTEn5BZF7KJh#r1sRw$un7=j-5Zx@Z^q6u$+P|s?LLuB$
z=3X`H81^}?{OdM_A?}&jq0btPnTF!kyN}1S*0KJP4NY9{P%0Yb^44lfMla*PE}@s<
zcX!NrnYQBHGVL?_!XLUXVsU3+UwCS_P%7(s*Uqyh-`~&Fm|UmkrLb)AtBdUp{8JX(
zZ9Vl{Jg}+U;Dd!$zrX9$?TxF_eOK(7&?z<Phwj>G4$2=kNMF-F@K?hy=E=Xk+kB;>
zjum`)ckWDVkIU1$8#M|~mf73)3az>v_+95f?usJW=2Pn>R}{&23Qd@*@w%MpRosk5
zp~>z6sUj}C@^{*Hx#v5W2K;xu`+NE#lZW~%itL$7*YD-s({IG%^W7?UCjXr0aj&DD
zU83Lp`J=kZNUmd3OW2|_-#YUai7jGz?r>$sft?zK(w$P9S2(SFpB2Ko_vYCx+x{lJ
zY|Guv8P_VL(J7?B{X=n;=-bC}tJlvCe0}Fby<hhB4Y@nSPFcNvFLoqg!GYS^2g|;z
zJrE92UGH9+ysE({<oo0Bci;6dTFuz4Zzy(E>h=n^l}iu4Y?ca->Xy20!xg$sI$+t~
z<trXGa7{U}-R8*4UZLq*HM&a`-m>3HKCn>Z^ed+j%ap~Zo+eKTXxy}8@rrk6n^%02
z>|Qmye?i`y^4->-cS&{{>G(N4%@#3L`yt~M@UK1V2;;Lw@7A`i__X`l-+#_iF1QCa
zm6^PX`!5ulC%@x8(~S0A{l^yY^yCMK6=<INbc!La;IM4>raSK#<~enSdt2mY{;Xd8
z_+~U$Sog^~u2tHi?vb(A7ihgL&P$q<=VZP>>w8Spaj7|G;?tsIB6d9dFMHK!UvHM_
za;EjWpX-$xuUPtfCzI+lUCxc$cetHS@Bh91*|AhPFA4F*E$ODOp55lRkg;G>t<m+L
zJS$-B34tj;t%Y~Yx@Ne$wzYl{3uBb-W4kT-$ETe)oFc*NXlnL-(XoYdbkAjPEZL@W
zeEZ$ke}z+R{|oH6Y`grP?LCj`KF7{`i&uErbMIicn6xD!b4B$Jt&r)Fo4!^refv{>
z$MZhdQpw|sb`@{=SsU%W_3iU1zw;Kno6ox9SeBrdauwt9h3}S5zk5AW!}0G4-fWFi
z4iXRk)hev|9=d(2MgGql7EM7X4`<e{+9Y%JQEQ->pX{kC`YxT0VyjxW+)cjRP`9G)
zz0tndhhNM({|Q}Xis{Wte7^I&c0f{b&+p$$HHx>%d-;40Oq%6T8r{a=zF=4B=}g%>
zu{=FR#!m%8;{OVV+_!x)@BNOMTkY32Z};EXI`QN_SMS;lnWEYO%sWz7oVv~)%GSGr
zt5o=uQ>{>FW^q8}t@+oMhuAya<#@j6)x;&WwksS<|MxkY#__F+lkIzTYRjHqi`INK
zZk)d`>Z^0$VXpY?o$C|szvkPv;Nq_-8{VG%$C>4kqLXD%Ewt))sokpCcG9N*ZZu!h
z^lA>cc9HQw;(^Y0JNee~`#ZdJGJQ2Ks%Mw~@x@YeKdx}gG08fS#<ePZt5oXT*nX|g
z$^o(0R|mEQim0|MzLV|GxGZOFfbJB{?`wW9W?ALE^+xZWUZF*rE4Z$4R~+jt@egtR
z&FB>%w{&kpWx&*T!cotY*Eodcv70v7@sv9ElnH<7tlsM!cz43IeQ&u}ygTlhw``4D
zZ}VUAt4VX(vPyNQxNeuaT55Z<c7E%tV=q?J{Y%f2S++Q&j_=f~+tb<ZRxfVJd?|L^
zH^g#l#Il(y@@^zunQ%Z-gFBlsOGBaWmDiDg<lf)A?{7C@`tNpis_2R;=2d4(LjL}c
z3Ux~kOs!_f(pk!xIyKj+cl(@<U7YvaO3kC^C8REty7@hGE7LbtrWNmQ{9a*{aoYUd
z_vMRUec!#JdIei(nET>WpZZr6z3dd)DjxX#Ri}otqV(0!_0D(OKL<SBBW7`sSG{A`
z^RR_-t7MvXE$4USHU7&NIxT*o%S)aqfg4Zqs!LyOe%-o?`S;~0_I<4nZpXUL&5usD
zTJ`DYHj8D8S^WRc+i*1O(5Eey>W9zX*(R~#+RuV1ts-Upzwh$g+7$YA=f~`7pW?%O
z+bq@Y6h~hY&lCQ(&n<d&dbY$0o3A;AHZ7;FZ+rTxv_G~x%a;4@dH!A34Stl(&8qZS
zckx%pp0}%W_kP(?cyrUd2mkIR+;_fUW%4PuC1Y;eB`5ElRkvj>2UON^WW{V}Np<<d
ze$^wRX7{=+Q%+v{qRd<xpR1c!7owcJW4`<1Q&%6{E=}lv?C`+6#`^N*H+39Wc3jC`
zp?BOqaH`?idCvM*ChrTsd)>5TalxN@CSi-`={F83F)%QwmbgZgq$HN4S|t~yCYGc!
z7#SFv>l&Er8W@Ebnp&9}Ss7U98kkxc7<|35=PQba-29Zxv`X9>S~^)g85kHCJYD@<
J);T3K0RUG}=RE)b

literal 0
HcmV?d00001

diff --git a/admin.rst b/admin.rst
index a1abf9cc9..ae7b1ab20 100644
--- a/admin.rst
+++ b/admin.rst
@@ -1,3 +1,5 @@
+.. _configuration:
+
 Configuration
 =============
 
diff --git a/conf.py b/conf.py
index 479232894..415ce36c2 100644
--- a/conf.py
+++ b/conf.py
@@ -54,9 +54,9 @@ author = u'Joe Nelson'
 # built documents.
 #
 # The short X.Y version.
-version = u'0.4'
+version = u'4.1'
 # The full version, including alpha/beta/rc tags.
-release = u'0.4.0.0'
+release = u'4.1.0'
 
 # The language for content autogenerated by Sphinx. Refer to documentation
 # for a list of supported languages.
diff --git a/index.rst b/index.rst
index 85935f068..28fa94a09 100644
--- a/index.rst
+++ b/index.rst
@@ -10,6 +10,11 @@
 
    intro.rst
 
+.. toctree::
+   :caption: Tutorials
+
+   tutorials/tut0.rst
+
 .. toctree::
    :caption: Installation
 
diff --git a/install.rst b/install.rst
index f1bb74f77..100496314 100644
--- a/install.rst
+++ b/install.rst
@@ -49,6 +49,8 @@ To use PostgREST you will need an underlying database (PostgreSQL version 9.3 or
 * `Instructions for Ubuntu 14.04 <https://www.digitalocean.com/community/tutorials/how-to-install-and-use-postgresql-on-ubuntu-14-04>`_
 * `Installer for Windows <http://www.enterprisedb.com/products-services-training/pgdownload#windows>`_
 
+.. _build_source:
+
 Build from Source
 =================
 
diff --git a/tutorials/tut0.rst b/tutorials/tut0.rst
new file mode 100644
index 000000000..305095355
--- /dev/null
+++ b/tutorials/tut0.rst
@@ -0,0 +1,214 @@
+Tutorial 0 - Get it Running
+===========================
+
+Welcome to PostgREST! In this pre-tutorial we're going to get things running so you can create your first simple API.
+
+PostgREST is a standalone web server which turns a PostgreSQL database into a RESTful API. It serves an API that is customized based on the structure of the underlying database.
+
+.. image:: ../_static/tuts/tut0-request-flow.png
+
+To make an API we'll simply be building a database. All the endpoints and permissions come from database objects like tables, views, roles, and stored procedures. These tutorials will cover a number of common scenarios and how to model them in the database.
+
+By the end of this tutorial you'll have a working database, PostgREST server, and a simple single-user todo list API.
+
+Step 1. Relax, we'll help
+-------------------------
+
+As you begin the tutorial, pop open the project `chat room <https://gitter.im/begriffs/postgrest>`_ in another tab.  There are a nice group of people active in the project and we'll help you out if you get stuck.
+
+Step 2. Install PostgreSQL
+--------------------------
+
+You'll need a modern copy of the database running on your system, either natively or in a Docker instance. We require PostgreSQL 9.3 or greater, but recommend at least 9.5 for row-level security features that we'll use in future tutorials.
+
+If you're already familiar with using PostgreSQL and have it installed on your system you can use the existing installation. For this tutorial we'll describe how to use the database in Docker because database configuration is otherwise too complicated for a simple tutorial.
+
+If Docker is not installed, you can get it `here <https://www.docker.com/community-edition#download>`_. Next, let's pull and start the database image:
+
+.. code-block:: bash
+
+  sudo docker run --name tutorial -p 5432:5432 \
+                  -e POSTGRES_PASSWORD=mysecretpassword \
+                  -d postgres
+
+This will run the Docker instance as a daemon and expose port 5432 to the host system so that it looks like an ordinary PostgreSQL server to the rest of the system.
+
+Step 3. Install PostgREST
+-------------------------
+
+PostgREST is distributed as a single binary, with versions compiled for major distributions of Linux/BSD/Windows. Visit the `latest release <https://github.com/begriffs/postgrest/releases/latest>`_ for a list of downloads. In the event that your platform is not among those already pre-built, see :ref:`build_source` for instructions how to build it yourself. Also let us know to add your platform in the next release.
+
+The pre-built binaries for download are :code:`.tar.xz` compressed files (except Windows which is a zip file). To extract the binary, go into the terminal and run
+
+.. code-block:: bash
+
+  # download from https://github.com/begriffs/postgrest/releases/latest
+
+  tar xfJ postgrest-<version>-<platform>.tar.xz
+
+The result will be a file named simply :code:`postgrest` (or :code:`postgrest.exe` on Windows). At this point try running it with
+
+.. code-block:: bash
+
+  ./postgrest
+
+If everything is working correctly it will print out its version and information about configuration. You can continue to run this binary from where you downloaded it, or copy it to a system directory like :code:`/usr/local/bin` on Linux so that you will be able to run it from any directory.
+
+.. note::
+
+  PostgREST requires libpq, the PostgreSQL C library, to be installed on your system. Without the library you'll get an error like "error while loading shared libraries: libpq.so.5." Here's how to fix it:
+
+  .. raw:: html
+
+    <p>
+    <details>
+      <summary>Ubuntu or Debian</summary>
+      <div class="highlight-bash"><div class="highlight">
+        <pre>sudo apt-get install libpq-dev</pre>
+      </div></div>
+    </details>
+    <details>
+      <summary>Fedora, CentOS, or Red Hat</summary>
+      <div class="highlight-bash"><div class="highlight">
+        <pre>sudo yum install postgresql-libs</pre>
+      </div></div>
+    </details>
+    <details>
+      <summary>OS X</summary>
+      <div class="highlight-bash"><div class="highlight">
+        <pre>brew install postgresql</pre>
+      </div></div>
+    </details>
+    <details>
+      <summary>Windows</summary>
+      <p>It isn't fun. Learn more <a href="https://stackoverflow.com/questions/38341725/how-to-install-libpq-dev-package-for-windows">here</a>.</p>
+      <p>It might be easier to execute PostgREST in its own Docker image as well.</p>
+    </details>
+    </p>
+
+Step 4. Create Database for API
+-------------------------------
+
+Connect to to SQL console (psql) inside the container. To do so, run this from your command line:
+
+.. code-block:: bash
+
+  sudo docker exec -it tutorial psql -U postgres
+
+You should see the psql command prompt:
+
+::
+
+  psql (9.6.3)
+  Type "help" for help.
+
+  postgres=#
+
+The first thing we'll do is create a `named schema <https://www.postgresql.org/docs/current/static/ddl-schemas.html>`_ for the database objects which will be exposed in the API. We can choose any name we like, so how about "api." Execute this and the other SQL statements inside the psql prompt you started.
+
+.. code-block:: postgres
+
+  create schema api;
+
+Our API will have one endpoint, :code:`/todos`, which will come from a table.
+
+.. code-block:: postgres
+
+  create table api.todos (
+    id serial primary key,
+    done boolean not null default false,
+    task text not null,
+    due timestamptz
+  );
+
+  insert into api.todos (task) values
+    ('finish tutorial 0'), ('pat self on back');
+
+Next make a role to use for anonymous web requests. When a request comes in, PostgREST will switch into this role in the database to run queries.
+
+.. code-block:: postgres
+
+  create role web_anon nologin;
+  grant web_anon to postgres;
+
+  grant usage on schema api to web_anon;
+  grant select on api.todos to web_anon;
+
+The :code:`web_anon` role has permission to access things in the :code:`api` schema, and to read rows in the :code:`todos` table.
+
+Now quit out of psql; it's time to start the API!
+
+.. code-block:: psql
+
+  \q
+
+Step 5. Run PostgREST
+---------------------
+
+PostgREST uses a configuration file to tell it how to connect to the database. Create a file :code:`tutorial.conf` with this inside:
+
+.. code-block:: ini
+
+  db-uri = "postgres://postgres:mysecretpassword@localhost/postgres"
+  db-schema = "api"
+  db-anon-role = "web_anon"
+
+The configuration file has other :ref:`options <configuration>`, but this is all we need. Now run the server:
+
+.. code-block:: bash
+
+  ./postgrest tutorial.conf
+
+You should see
+
+.. code-block:: text
+
+  Listening on port 3000
+  Attempting to connect to the database...
+  Connection successful
+
+It's now ready to serve web requests. There are many nice graphical API exploration tools you can use, but for this tutorial we'll use :code:`curl` because it's likely to be installed on your system already. Open a new terminal (leaving the one open that PostgREST is running inside). Try doing an HTTP request for the todos.
+
+.. code-block:: bash
+
+  curl http://localhost:3000/todos
+
+The API replies:
+
+.. code-block:: json
+
+  [
+    {
+      "id": 1,
+      "done": false,
+      "task": "finish tutorial 0",
+      "due": null
+    },
+    {
+      "id": 2,
+      "done": false,
+      "task": "pat self on back",
+      "due": null
+    }
+  ]
+
+With the current role permissions, anonymous requests have read-only access to the :code:`todos` table. If we try to add a new todo we are not able.
+
+.. code-block:: bash
+
+  curl http://localhost:3000/todos -X POST \
+       -H "Content-Type: application/json" \
+       -d '{"task": "do bad thing"}'
+
+Response is 401 Unauthorized:
+
+.. code-block:: json
+
+  {
+    "hint": null,
+    "details": null,
+    "code": "42501",
+    "message": "permission denied for relation todos"
+  }
+
+There we have it, a basic API on top of the database! In the next tutorials we will see how to extend the example with more sophisticated user access controls, and more tables and queries.

From 71da89fdcc057fe6a62591419c3b27b789e2df49 Mon Sep 17 00:00:00 2001
From: Richard Fox <richard.fox@ahref.co.uk>
Date: Wed, 5 Jul 2017 00:48:54 +0200
Subject: [PATCH 102/652] intro.rst: Correct first example app link (#87)

---
 intro.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/intro.rst b/intro.rst
index 2f3b0e0df..dbafcfab7 100644
--- a/intro.rst
+++ b/intro.rst
@@ -66,7 +66,7 @@ These are PostgreSQL bridges that propagate LISTEN/NOTIFY to external queues for
 Example Apps
 ------------
 
-* `https://github.com/subzerocloud/postgrest-starter-kit <subzerocloud/postgrest-starter-kit>`_ - Boilerplate for new project
+* `subzerocloud/postgrest-starter-kit <https://github.com/subzerocloud/postgrest-starter-kit>`_ - Boilerplate for new project
 * `NikolayS/postgrest-google-translate <https://github.com/NikolayS/postgrest-google-translate>`_ - Calling to external translation service
 * `CodeforAustralia/heritage-near-me <https://github.com/CodeforAustralia/heritage-near-me>`_ - Elm and PostgREST with PostGIS
 * `timwis/handsontable-postgrest <https://github.com/timwis/handsontable-postgrest>`_ - An excel-like database table editor

From cb4c54074a6915e33207c4fa6daca1554949912b Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Tue, 4 Jul 2017 22:25:16 -0500
Subject: [PATCH 103/652] Tutorial 1

---
 _static/tuts/tut1-jwt-io.png | Bin 0 -> 60572 bytes
 index.rst                    |   1 +
 tutorials/tut0.rst           |   2 +
 tutorials/tut1.rst           | 245 +++++++++++++++++++++++++++++++++++
 4 files changed, 248 insertions(+)
 create mode 100644 _static/tuts/tut1-jwt-io.png
 create mode 100644 tutorials/tut1.rst

diff --git a/_static/tuts/tut1-jwt-io.png b/_static/tuts/tut1-jwt-io.png
new file mode 100644
index 0000000000000000000000000000000000000000..488b87f1034660f5325c69c1d657427416c50b49
GIT binary patch
literal 60572
zcmeAS@N?(olHy`uVBq!ia0y~yV3uTHV4Tgt#=yX^f+d!ffq}6m)7d$|)7e=epeR2r
zGbfdSL1SWaLV}j3j>d_^#Ds(sXSFrCipqmJI(mW<_8&fQ_P}9<BMC<p=FNzSc_1P1
z;BbR*&F*6dI2P%@ZaU-j`A_BLWm{|hiJ7gRSrn#fwc~3eW4TvWp%F8)GW&$NbAsl~
z;ZAwZaMS7}tE;NRHy(xP?R%Cm9I<0e=@wy><w&{Dxbd>$8-9f{p&4h7Fog*VJ>g05
zX1K}ZDX@*LV=iA}bi<94lAW3k+t^R&bx0p*xO~|4;GF|O*C#gY_GH^>xzxbgVd2rq
zv&5x%ir58C8&nwVFwiiVVJu+~Vf4btV%n0hDGef4&&5N;QkSJq(Xe20HVZvyX}^8J
z7L~0Y?gx$aBmLbEo;YxUVF{l|y1-(4_D0`y5$k?|)A1(`B&<Ah;J}?`0q<GI4s599
zXKp^C*)rpl4I5isHd|Znb1tE7p@)3we~vkI#Lr2~VM+XKVQ8@7-tYhaH%l=y|5jmZ
z+b{h8|Np%&{{P?K-T009@f!y|29@&62R+$B{0t0CESVt@B@w<pR>}FfdWk9dNvV1j
zxdjX$U{hgLkz0_PT9T+xk(-lOY*k^a1Xf{{S8N3m)>l#hD=EpgRf_NpP;kyKN>wn`
zGto0pvg1-vP_QXVNwW%aaf50vN=dU-$|xx*u+rBrFE7_CH`dE9O4m2Ew6xSWFw!?N
z(k)6!(=D#dD@m--%_~-h7y>iLCAB!YD6^m>Ge1uOWNu<oerbuVk`l-w1sH(1GqoZU
zVN+f))LY5<x%wa(eM3D1eQerFGShHq1Ia+Nf&B%s%?4zcRX}D%YEGm}W^QU;ab|v=
zor$5L4cHnC8H7WTbVeX_np+wp>qL@4(g|{jm48uYYF<eqC@Aa<ZS*n3pz3Y(LE(fH
zZeYhlM1x%1?6_?7!O;hbN;@u@<$6903=RyQE{-7;jBobxS4_D&)BMluGc#HeN(8c;
zatyAN2rqEh@W!=;f0o8wmkRDi@3^KdLVsRKZM$pwZhqI>xajYD?}=@>9{uRuwqskx
zS+q^}d@*7Smki6=v?Jk%nJFW;N_LLh3dI1!#S{M&t9|}^?sNLHnJ0~Beo*HqlAm$r
z^PJ-O#qT~>pPN&B|M|Z2l`@WO9s(>ZjE)Wh$kYQP#R&y7Pfbk1kZ};WARwUXY}KTo
zz`?=P)PSI3!dTXEt1jNZT9kJlTS;u#i;%>>8M!$Q&fV`fP1j-Nf+&tj<@i#*@Z#fx
z5j;O**Y<ue*%Ft^D^>=!XGaCdgu|~_Iy~Gf`r_68iUm2v-?lIMvd$^Qq$+o^Y7oSY
z4?Z_L?7!Z;``upg-s$y5jmy92-HE<<VyQMK*f}+J0uqiVU%2}gGRg3@|5acA>y{+X
z<jIWgVn4orVw*PmsL<umpF&^@1z31klFrLl9!<Rw6Wf06wBCw%&JSNV*6FzYd7{%k
z%V(X7@)AC9(5&NNS|^xocx?C6ew#&{mlLDpYa$~bM(-4Yh20vCmS_FPCuGNbFW>s$
z<=fkZDfi24{BHSH`zIt9t}~q;!wvC&jh}!-<jH{E5}o7EPI;X$`CwW3=n@aa4iTnX
ze>Pes{adl-)53*$#$4BJI*-4f%Xa_X<r^_`>XusUT2jRm`*PB$4d-pjRBvBb-w5_^
zk1f;3sXU)9te@lJF2($NZ${1+#q|pPDRx^-OcoqnZRUJ=uEu@|)}48`r<H77;d^=Q
znTb5*MOH<hKTS+`eytj-{PNesw%KA+_Uy4q*_mwk#5vnpIcir#)+XtfOWt2U^Xc1{
ztj)2`%9RPqlke`-(9`V5-1x0fbY0+L)%`DDJ~_C2XV1;)Ik!_fML<FEV3$+EjXwtq
zcP=O~{$<hEKYJUSzn-RZ=6d$ZK<1TJ8x9}dxaah7&W_4Y-QE+#56|_8^swR8T@t!v
zPI=MiiSwtM=G^*JS!!i!z4LD5oZ?Rtrl;E5uWY|^^-{;NF#TUIg=Wv2$7*g~cbrT7
zkbcb_hkG|T^lwi)vs1tO^F7m-wqo2oo#G&8I4CZNJC-j0t4Uw4oF(%l$Gi>d97n&+
zy|FCrh4`H<Z)YY5?!UVA>t~N#_l~gr7P2*NQ)OM3-?iUl?sNOP;GLip|LrU7cAZJs
z@ZM!@?%$}Lt7K~*F7lMU^E+Z9FaPG|trJ_$T#;RKH^qJR_Tr!0DmWrvPt68Lq1}6q
zh-dvBh31>?o;|N~{n!KdZ}a**ECP3*Ov`cmuyOCj<lOiT|7MnM+u~87b3;&TYDx5$
zU5lR2UF7?94(}qT`<)M#Ejm$oW>$Xm6&b^-y5@rsTcUoRj+Z&-Es|ZN4a#r_wl*E$
zklt_kBy*vB?Aq8DuQt_Pv6^7|!aJaU{r!g8&GHBDJ>x6+{`H~DU$Nd7FV$_fgw0qe
zUz#d;W5evvhd$|M*xmJYUCzJU-{kSkQoaM(^VS~hZC)CGXz}l+8Glc7zj*QP@(aH!
z`Iot>_7rGkMfpa#{gj$$pUe8~<EM?{_piKq|N7mr&S!fodS>~TWUSRZy4U~R;WwqX
zFI*H4IVENl@hwN@V3(xy!>uV9Yjh5D9gi%!m|U@Wv2<-t^!Jy-H+H`@<enM>D+)N6
zDpj9KRXTT@Pg%QvE8FF;g5zw@Csp-r&&qlCdc|?8AREu`tE{>W4@L*~9pb(H^4jjc
z&*w4&A}<_!b}QXO_6?V;-=$SA<nHpSw48opw{ZH-_aB|6T-(z2>Um1jsXv()+W&|b
zHWmBF$8R@t&)q!JN3SJ5K6&XqGk3wbn$InE(@W;NeZH4_VVUOXDQSrwdaR&QaEF;-
z$68)V?ZC2YY|o7aSL@cQ$1OS5kZ^I?Ucry6axP0<%Fz>@yY6a+;cv-X>}~Du1n$Po
zU6*m&VAs26>0h>#Ry(s^u{VqEuGYzN^${%Db7JZ`4sSR24}w?MwfG)9@pW^;hmyC+
zQI^s7Om<ku%FkJQF)IA%nJj;n>nqE;RS&bc>;pSPfobvP6qet!N?(88b?d^Njo$_D
zR>jKOI!Y8Df1`Vr?a(occN$!?4sR9xweLg9qW<r5n4LaP@Vt?GW&Q_`6R!$)-P^Dz
zV(lxn+IG9^k-CzLpMNhYm^{n-$Htk<zU<uOp(Ckw<x_2|fW`mc59;MA-*bhkU5&|O
zvHSaD?t}V2&#e#o>z5y#zH(3Co0Btoef9IMn7wNii`-G}xINZID=by@XyC_%G7Br7
zK3;Wb+Nz*;8zkh;tQE`J-^LX^Pean}`8n;Q#;)~^yyvek*t%=Ro{P6G6-`+kGCLq~
zbK{2lN$wZ9Le=N2=+0O9oLbeJadl2xrT_l;_{YIgp3bYqMSoVl_+FWLdqL?FbI}u*
zf|UNZ=$cIYc=#Qg)rTNo+o}gG+Nna%^z@w0vB>^2JI^QMt9xV>tK`BQ=DF@0j~7eq
zW0)|@lK;EtvPEU?wpDY_ye~TVUfzKrQzI_AqtABtg=@^yWE>PUrI#-4o*<;<xqriI
zXaAQ+8)J80xW}!M`Sh2dM2TYh%i4f9GGDJeny{U{bB(!awp>_EEt|;oy>HnIEDYFN
zEm!WbW<KBd*F$#?fAL@66*up@rJXpNzz{4xJ;{!5@wXpqHDaxt*H6-rsaPsmJWa3Z
z)Y{g2W)*zafiW|3k1g1Hulc~9q$d`KZ)^-$;uG5w+L~$cBS`o5+xE*-n^qQ!CkLKm
z;hAG&vF6{Ql@~KwR!!h`bP(8~C1CKJOW(#nm~VNi(^*ko#b}mvnW)vF7LPI=>si15
zFFfBSbv*t57tSZQebln@+r)Z4)_wCg=ezx#v0Tn9U-QsD_xaE6b)UT>eK58)F7$lP
zm3*CRpQHcH3U;-4#q=Xo|5LD}{OaQ$GEe2y?|3pJeA><<Wi~0trg#Q#O!%mjqVh3q
zfvo;p%hpGspD&0MuL*B)INlh0<NQel!;`Gj@Ao%4FibA$+Gw%%uF*a1Qy(PeSv;C?
zTiVbs{d{x}>rLSh#uvGt7d*?*l8e~dP|Wpw;Vjz%echuv$w4pdesO)9Kf5pVGh6#v
z-kgv#J3Y1M)VH0l6pNc7*En(J$xpU6_8(W)bLI+j2ikb&GfN9Tdi&(y^bPZc4VT;H
z_MMLo=#Z2QEI#j`9=E!d_uf25i(uo8U-l*KuueV`DYcgU{Wlhi?bZ{`Y6Yhi25p=D
zJ>jzYGppG-^OtHVi~Nzj@$rw{4)Jx@7Dp^!e$DwG)11%36Hos9{@VD`mMs%+$<11Q
z^G@HdSc|&XNjh^A6Rs4Cn6Ce^;f&IBms9+!eiYPuZ9SNg6mR`4SkB7XGWF0D8xhfS
z4wL3byvt1SWBYb_Nl#_Ou7s{#$sZO!eo$xf(`ZA|OC8^|i;r&>FG^kgC`abjQ^#AE
zrk*gAyUw7yy!w{$##gT=R?Plu{%1|>j48JKuH2ixS|vS7e_5?qsj9i`&D5I*_vL?C
z>Y%{deQljn(&XCzMN88TRKBXT`7ib1!S%zRCf~ew{#W$$BKJp!CbmwxbgARAW75R$
z*}_eR8;&b{`Wdx#N=Y%(4i78&yDKJ4$kWi5d2#h`QQn#Ez<H*-;&W9(62C9jxU)9i
z?SHBC`+Whk&xM}wmiIj=wes)$gK|8}&N;q3HS>e)?e<%9e@}?qC!+ahqIqTY59ds$
z?@g%}>ZdV_9O6$5y2u<cRq((`Kl>QZl@U?9#LmroT(NH(v-kD;?B=2qM6N6Jee*r=
z=#rApBYxkNQh|r1>hsG=XXGqPxOXXZ#`7-^r{=C#$UPc$=BdJaAJ0P<r>`pDF#hQ9
zlj+mV-d}UAKmO6yv)N(7-WYe(*gaTFqIy-9p+PZcm*wKGGM^Pq(+#Jcoy+n{qCjn#
z!h^T1@2^N#JiQ^pXOqSDaq;o%hxbntkYHG>bjX3<FxZz%<4w_qteY_stwx*pZEIJC
zY?^kk_MJplR()^hO#Vc#^B;aGb4`^7<-RI`2W%NnA4P>E=)?qeT^Gx1y1jAPguH;V
zgA%iU*Gj2wden2a@a3=nv8z=hwYSUbmR7HLqVw1-fA^`ykMvsN^R=&(Y_`caVRgTn
zy!Yy}NfM6}Ukdp=skm8JVgD`XcH`04*Og``zusAF8`IQfdu{g7^mEZ&?9Z$VYtDbp
zn7>P8_43_<1<MjXR2Uzxe%+BPdDva1n0Z>^tV3$YGs}-T&zNY`uuM&#t$I$y?rO$o
zJ{||pyzIR3^Ae*^{Pqr}+n#%>RtOtk*L(V-zU0Q8f-g&R4WFy6)!kM+?_jsA+pfOU
zLjuL;c)rYQ-v0Kw#k94z9Ewiwxq4Xi;GCp$ONARZzir>xE-~+^OkV7hphG`y_Bh#W
z(O{mde*T~@XU+w&{dso#Z9kmXIka8eXQ^A6Q2zGJ$qQM}f7oMwIIYj;iPDn0n|aKO
z7}z!2duH#y6~J-EYWjjXhkiMfOFx|wwdYY(_tF?2nU!xB?wr-?KX-O>t##bdlXJGt
zc=YM<0q^z+M&-FJF^f*~fBSoqZ*e)l*<s7MdA&Cu7pzEIuI9aF&M(Gue13-}Ej2d0
zVcl^=B-risG41njU6xz3dv_NriSR6)!#8>DkJBIKes(?4*JU4nzM<-X*q+0G!`J?M
z7N9t9`m4kLW<~9>(quke#MYCZ)-HclL%LFR+MBD_)_h;OGiOrOtIjv`bCtiWXI;9w
za9Nf*-<cDK7WMo{s@=ig^Y^O8x0DH-&T9L0-t=r+BlxnS>O>KH?>U=7uZtfS`<siO
zc(|<U?)~Z2I#=wtUoYQf60X1I|01t#sYhl`X;LZsxkd7_VPC9!={)0he&);F8w?&Z
z@44t^8q3Y-JMEh`=k2Lon!!_EJ#^w?{jXB4<oa7>iJEHWcdvxyD*c?dYP$r}MUrc7
zUKd>E>7^L&nWv(e?W(oD^1W2X;fI@rH&&^N^0>a5)o^I5>y;V(i-PY?zIO96<N0e*
zKc25$AbKpuae?a*+fJ{Ek6KeV?q_G)p=4BRWml0b-k0fHVz@gfK*_me&S|GdD)pLr
zSJS4g=DK>z)=zp#@TH;&CqJ3AwrF1b>V8eBys1H<V5`D~pzxI&C;4e_lH4LVJuGwA
zCbyoG&wj|P(dLajcGhP4r@3>s`kY?pC&ANhVE@qK_iF94>mMcks92#SY}l8a9CV81
zj7ChWYWa`C4-W0ewnTA;A1qsQJ?M*l)*Zi~$2#os=}D{1`mzt}ZnmBq_E5Emr{DJ3
ztIv~#mIYr*Q#8IPv3&RJ3(w~FrE;q;ddVBLPg3nnRNG67zS_4Tlj3fkuPn?wu`2P?
zdck9}XM2bgpOa=(UYqmSf6X7pbg81Wv<JP<;}>39%C4QC^)Eys?Tp5e?bGixZu@mu
zB>S*q<ac(qD`)1n^k_={S>2xTr|LFepvS!SsUZd;uhvb`oMGI4>KMo8xRUuDKXrPo
zriwnR&|j<B7OEDr+-|zM?}>x8IfqxORdpKl+$g(hf2JrnJ@ICV{kON-%a0$nlPN!Y
zL@2lLqRNBs9Dh&pDKFhqTg&#*YgU8xvVw(13q(YgFN^T;nA@;ri;0iN)r&dROT}z2
zPk*p5wDp9+qeG^*Plm0^Z`a(iIv~9NVtwTH+rF84s=Swtj~_grZe>)rYR<z?r#$u_
z581BQtvT~}ih9}qSq+bVZeO(a<J}c)HQ%<Yy;m+ulC5%Ak#S9`%41wvws_e>(WN^p
z4U1b|NWFcLu`@vWc)Gas@w3Yo&yZFx+kZxx(eTczMbUbP#HKy@q9b)Uv+Q|Wndlc$
zowr3d=6~6fbnNXj!CkRW%(ac?PM&l~Ev6`?=*V25rt>nce;X(NSTI*su~;#-HABhf
zUiTjMWl6^@_3u@z<@_hJwQF+IB2n&-uW!k&urd(*JYDbb8k1y;pvS>32{r4*t+(a1
z77Luv)9Q_|3`{$rcH2sc>!EMR!I*`fp1$0>jWeJ8Q4F5@yP=DzKHlQ%H|YawTQ%k{
zo*gXOX?(IX_;-1NcB%T3CmHLaV^%X>5?g3;wmsL{=0s)2#IUF%^65fV{#TP<e^cA!
z^x2^POKq*6&Xu}9Zc^O5EJ1-k4rryUo|*qZ#72%kW}oqo19N+8QX4m}j1Qiqq%|2_
zDFksGnPq>a?WLvkx6Iia&8MZkeDlHLI+N)%`KKEn^>~`E5i8p>>+z3wuiU;A2Wnii
zurZR=6)(BWXrA;u^`+_)vHy~iH_j#BSZ!Ey;(ADzfwlON{B_%QR&QS}I>+ZwYDV~$
z2Njmfm%6*&zB?;9^+<)qoB|>7<-fj!&Rub2#YQ`=tM9IPE`1zQ%e&3|BJZ@DQ?v8r
zjW#wMQSRTFHOKC7<$DIz|7CNW+RXg6zs+=(3g2#=Hplst^jC|Q=O3=x&fOiRd*s^l
z@&{LTSbsPW)E(VFb)`jdu-mDO=QaoA7T@^!cg^o>J6BJrd}n#3!s^3?BvXCu#`21S
zr5AfsKg62;Zk^IONA+|;(Q~<wP}u{rpI>&FbeotJPn)#xZl*~m5BImva#e4iok*Oi
ztW;&aXU_Cur#&~XzI?>Bck}aD--Wv-Y)jXP>O8a7`oo`<g>%+VZ)-`J+&J;qWLdW~
zyQfn>y4_~bjS+tEeQ$5^+~XT--Hm^}xMw<d(|M&=iEo#)J$$|9cv)24FSf}B`8R84
zEdI&6D(Fqh>VTJK;@|#mpS*Yf&V6#}%<>D~ifov0$o;{S59wmZ^p6!^&XW08?NjtE
z>3`qaFZrAbrqMgwwONggT)wZLa>hhO?tg=e<;0fxA7!KE?0XE(9X~JQ`tY3gfudt?
z?*+8YYGUi#`p$qgcIB$d5|7MC#@JNeU0+jIoX&Ug%&Xwayb;s*_DpEV#QYgM?wrtm
zdZy$_X3mqi{#~E`1k7Ap^K!D;#E(k@79Oxw6?NrXbAKP()HSOY9kAN;eeuFgGV|`7
zy~VxgPUOy6PM^N~71hvP$Nl@?r0Zu{i%o*}FMSdqS|;wd%O*9&=cueDw}GlI>%Vi%
z7DsK_<getUr#}j~B7WfGJl9*VdbM-eyiTVtSpJxy?8-HT)W23-*UFY|YF?I-Sem)<
zVV0=p<M%mzk?tx_KkSZsy6(t}0(Hp;1*_KIE?DFG>`ZIHwyVk44_>)YH;KXYSI^Jy
zi8EhrKK18T*Les1Njri}|KBLS@iEHy(vC%<f>(}AG@P#&xY_CA@wl5yeKSrSk(|3s
zaHm=#+u0poe_I9ah`WFPVsdc(3WuEnEG&)MeFrxDY_1lT%KBln@2h|Io*c^`Ek|Xi
zzrUcN&s32V;+iUHBg!iHr%HNNz`K*J>Bf(D&QDT4{?YXJwd7=9J1u3Fa(SDpaw(eO
z@s~0m+rFH);`H%nlQuNmKl<s~3RZ0{jb|d0r>=f=r`_~vsK$pW?N93Bvt_-W=X5-1
z_laTHAE^<hnjhb|>eFS7^XAWG<zJaiOFAs5HY+f2tIM5RJyQi=KI8o!60=U=gM0t$
zyC1H|Ts!)@B3ZBY!d;Oamp2s!n5g!CKIv&v&bMfJw5IN<k6Zh>6YtJg^sHx!<c#vy
zid&vOao=&>MZc-n#60%Gob=|vJ%5_#h@=M;*!q2+a{b=CldOi_Jjtvv#qrzRKHQqx
zwtjsrN2~4IJIOoQ=S^YXaDZ)p+__3y+uFdHz0tEP{deZxJU8*1YR1OSl`9LrwY3H<
zkDWWk|BI|*mE+<(>*?y^XHOqkxy{<?x6GO~JvZj(7-*e)7Nn@Fe|!G=<088jWd1G-
z5?{FIPQ->cb{(tc{x)2`M?k`S;=9LLijyWeAJ4A%=OFxSidJa^|KZftp*3xRpE#b%
zJhfcZn)o;T=%v@qwN}Po`Oaw1ayl)4v%7u%-QvsH65q-jej7ZyyS*!~<?y6Kf`NZe
zzkhvojc;Pp>c?7&deR5)uF%kQ^t`fsM}@Ju&+)UeN*oi_o-fRLpWI{LWO`X`K}xad
zE1S|4w_@0iw`4~A&s{&Sy<{re-LA~X0fC{-Z2r7vV%7mG&WZU{@PwvTF8uWQw6<w#
z!uPh_4>WG}%$k*z$5j5}IBQl&UibCs(o3iAzmz1eJE!MSm)55Pz8Rr+Bwj3d_V>lN
z58V^*u&%h}!rEqW$Fy;>)Xx>`)?BEljq&AL%$rquZ*J$DH#xos18&~4yV2HjXlumw
zJXw4G#G^jueDWE|UGjTp*(;dW`p<3dlxe9}o)Y`I*KT5qXro74(se;k^EY~_T1Io0
z2h^{zo^s`6Z%F!1bEWqE<+&I9=XO0}4_AKq)^^3h)?+*q(@KrQ{?FU`$<C+Zdv3+~
z!o^`JLhl#VzYuFmY;I8UcR6;2wIbo6%9Ub!&l5GWiPyGIQJfBHN2Llr*kP%=o<}q_
zRb#b=vuB~4%wx6JTy0jzw(gwGp5wxmS(!TZR^is)a=I;xcQBcj%3Zk{vQX!I<H}YW
zHQO)OcBM=S+rMh-^OvTVCoDf!drs9fbavpI84cCf^UaR^NtqJ*vc!MgjAgyw=dtmx
zGMkoA^l)+1zbHMwnWrP(H5uhRoX}q@ZD6^OCDhb(#hM37eT6PnCJl?9U+*<~9PypE
z-1pg?@YY$cyrxXJE^6Z!%dIASajMIGerbN?=Z%fV$2Yw0-8^IF{NyKF&PiTu?R{rg
zRMI!6Fsc9NlhZT1A}w#8xF*80VE0dhsw?|ga_>dAe-bq=oR)WZmbz|aVdUQw-)n2$
z_8OZXo%i`s;*xMN>;3cAJvLxGeeGQPcZ2ZDx~B^kYW7@{_CKq*<lG$ThrA2E>1pW2
zth{+5ar^tFO$(h&>NJCY-m#J{+!Fmf@+8Y#*|{Rgq8tD2Sw8cB=r4_CZRN>z&*E0q
zR0Wh;MLypcF!#>pgJ-X;y!^aHWMAOcyKC$>b<fzi@O{MJlVXeSm0hu^7r3ciA+oh_
zLic>`>1tM4rdMWK@SU1@$FhQN?(;7qYi}3$2U^@X8D?XVc1hu0-X)oXrk9>Q^V_jJ
z?Zd36E??ta7l=h07Z**KyH;C5OHZ$E<Gk6Ya)dKB$jJFz$oX}B_i=wkP2D0L*|-B!
z`z04jf8bsI^Hk0r{@-Qq<<8AauDJ5yW8l<-Q(sOm{^|DKpw>!s%H^*+HMC>;@AiLA
zRulawD?L?p;X%9Z64@o%>US?oU&~PM)VTDtf3L^VB_>4|+fO+>ep#iZ*jiEb{c+6P
zOWd_7w`Xgd&po*1XKzWjk@lkQ;5^M=eoGeb*&=Xz{<9-rw@h^FK5o1|&u!+@AN_xN
zdsmd_KdF4<|Jd`>Le|o@>R8J?PcH|iYnsP2pPgDd=Xs~R`*~j%!|+FECz$2y3DsY8
zxm>7r@9t*i+&iZySlnn|vZi%L-ru<q>@i)h&N1GN)tZ>i_o`&&R+~aEW%-SKsq@UT
zxBY(RR{ZYZjjhS*tN8j4?_jt-TWIr!q_tL@F05B?U!8FL;I^8r+b(8JFP5CP?Bber
zJH01L|C*ns8`u5k!im+NCf0rRvH6}Yzq41oCw|INTL)`j)oeqr{p)sTtX!y4ddx_q
zYX0GM*R2AqN-O@xhp$!;VqtWAz@;QG&%PkVdY+xox?LGRm3JKqJRrR2(8Y(VpTvZG
zpX*R(8UB5{y{~txrN#MU$>($2Tq_G_nC+FQ&AOxCE%SZq@5{#P!`l2OpHhltf9d6s
zF8luK?*3JkR-s2`AGsWOu}JFOrlhFd<;l&4Ggo{!y&96TFzHq7#F}`9{qLH%&ei74
zTeSSyKHg(@%%yMNTjQ9Q&H8Q?x4G`Ksc$Phwu=?ZJ!rb7z`D57TW-N@4)<)Y_vc(x
z>tZ81=Ex;I=iB|e<@lcuGgeO*5@I{)6I{%{Y`wu$`A<{KrmJ(<^{dGhEXs{~`p513
z$^wI1zvp~9X!>l*jN;23#rHPdkeIo(cSiijoP&+k{O@MFcOTK*TRN-z^yiX7PnCbo
zeko_8olZ{|3OT%R^Gne;kMEr>>};0sIrS(lF-mw(S@AWVHM&;qvexyD%L*S)d2bLq
zIX&rZ$lXiww(o6sD7?`Vou|CnSv2|~k9%73%QI?M^6VS(SD*d1MQN&3shr=_b%9Yq
zLdMUNb<J14R*btn-+A(6BaXXErt&P>P~>KFBH(P)tgq*)Y-JX^T>1RPOFp!NA+`G(
zV^r=Y?t_~zeR%az?wxY!rB{o0dl#Auis{cjez>r%k#F0=e(iqa>5+FgvlrfQ+g2nh
zy0CZJ(p6<zT2po&n7ry**6NkJrU<>;ueSV%QdEPapnWZ8$&KRQzd|-2=y+cc9~3(;
zH!Av+?dFn&T^ILT@xOEWJJV-Pyp`&rIjbKYTiAE#uaD%zeQaAF>dln?zsAeK#Q$&B
z|HB$DLiTYl+<Hly?M(2}MX#^FKgsOBOlkX_FUi)nx6*f?h_J8sVdUFz>)7sYoySEf
z!P;!KjI-E%KR<k`5poJVv#KD+bZm$HF2m`?on=J{b3V>Y&6>UEao_h8J(t&g5gOem
zzp;L}ecsvC<J{!Smfw%+1PHk~J(x9TcEz7R49_nw3G{ozy!RBZn{0)VkdXNNvNMbC
zZ2i2kPu*~4V#9K6))g!ILg%L08t!-R7JOOtBF)Y(cSpa5Poz%8qbnOK=4wpKS^7)3
zShD@Ji%5l|dAP{_d&xKAKI`rEn)cCV<7)kyZ(hf)ws#h&fToy`=5#rjrZ+hJv6Y-2
zup>p31v+O6qZ(iHGX@&1+n=tdD~2X_OoTDe=$J^HW(;J?7CyVY<DY<l>f>M4&n_i_
zC(K}GF*+vr2nwhs`#hX_2s{A-4l}T}QER9kXyI!vv9qy#IA{Gnp`gG(tn&zTaysTP
zhl-loqto&Kj3!N*q?fIo@^8nQ0<T2yJabGbM^D<n0v5?P7XR<QuWQ$@``BHu`)=7u
zA$3TqDVVBI@a&9a?wT?SnE?6S3CE(_|IC{wS5j8?NIU*#SM0RzzR5oyFIqUc2V$Nu
z$B!DjKM(oqB?|v_ywqE&Be5tUM)-W>49HCKB0&l6?5$_y#s6BUECw$#xX!}l<=$al
ze<Z|cU8fk=WUw*Fix3K~Dk^v#3;piVqKKBd9^7(sn9`H|`zPmjG+hTm+Z!|_!|y5!
zwjmNDB;jRCgVOig=jwN$;RClTT$ai3{^Y`|g<3qE(0P46ffwz|cQLZ29`!Jbx_tjt
zBRi|cNmePX(}6dcc06p>-z#G}+jm#pl_^t|Yl}^}F8NCAS)sGqfqP|WU(+R{DPqqh
zpGIA(i9Mma`p_|<mKS$lvTEFqXuA_Q=hD4rHyanPY>n8eaCnWx+plsg&qS5gRYh9Q
zEna`H_(pd_m)D#Q*VEG!)0^zhmdT|`^UrlsnCQ9krbb*~hsjiv3yssWUR`8XkMW#r
zuziKc>C1up*_Xf5IJD<L;+q@y`O=ewV)X3)Ff;B@JA3ffQOz}{J0Bf-Bfy+Euc~lC
znt0XoH7<pISsHt{|22J+<#lM)CD#obeC4bjuKar7ws3;2WW=sAO`|oJ7%T5=T`afP
z@6!v=gj<62<$yIWm>%xwJm-=kG<p4bkL0<w79YHfpXtQ19CiGDF?_@FyS<mD7GL;s
zNpH*723<ad2~&E5J{2$fr@F;g$K~T1POJTUa|7Qd&n|oGRINW@$;Suo2^U)D*zXpe
z`~Rn$*m~WziNeR@Rvx_h^0dMIn?1As=B_!>ImPp4M9dZjVWz}Akqkl0^p34Mv{JF>
ziIac;i=I5wwZtc%rfR7|BaDM-8^@Q$tCw>B^)a5x^QHV?&&yBG7O&bR^R8~LlFQ|%
z2WP##9XKVtv8l^u?~^+DT@~@Mfem%j9<J0mwqut1h49#>6y>#DnLa70IxF|Lev$T^
z&mZs2t0oe%c>PkHGwrhb|M8hrR%;lUFRVVeX@Y|Ff$|=ntXnPfR{nnBeWUn9t1ADR
z<5NV$&&gPKl-*yj%)n(C>xHoY*;n#DC%kn&>LHtAxw2TJ=6uWh8+BLS-DyAbX{p2;
z%Vz!=_L;wIrq~(C+aCYEU|X%$we|D*91d{u$hG%3?J|w1eD(Ha^Y;W{wj!>D`?Cre
zeA(~2#>X!+?Jm1}`Cg0hO74KTDt4>ednLquCr;^Hx-|RY8_T}u+149M{?-<3eyh1I
z@6FGnazE1b9Dg=xO1#KZ{=c>2=vFcB;y*7w1}Z1K$gAVD=4bZax3^)B!0COQ5iwCM
zo{X#tq746dVe<!n1=2DEnFHT?AKbHawZZw9hqZ6VIo|5pI>Y<z(V3H)9`FCl|HiUF
z=(U({<NnQZ`E$IE-dd_DVe`y6%g-?ET=C-@|D@j3lnR~VX74EH3)7wL%@b)astj7&
zV_?S7vHQx62U<&^D+rD_D9mK4_o%#(ai)4H&kobwEpEw*Su57Ky?uFEV`UwauGfEq
zrrBS#RMeL*PD$p@s`X!RZnbOX`>G(<h}XvV|35i*`f!o&RmMH0qANCutxCWCZ=R*k
z%Ze&Nv9y{7^IIhgBfS^QIsf17#nFY%&kc&-8u=a!n3!oSmT)jcRo8vFs^anj)1o=c
z3%>NkpMLM-weZ8+q<J|itFG4ChOIv^wPlKmc+kon7McR;lHa?IoD{9fE@;hT&$zKu
zRCsR4gdVGcWt_6>q9+;}3i|YNbZT~nWZ5Om;g-C4)1XIROiDZ`XwrlyekrpjPdH_M
zWcBZR+nisNoImWPC84DP8eH~%cVOkR#e0<ZPr2`ZscGZq4cywN!jrnTtvP9CoY)lR
z))m%wO1fZ~VtN|ey^4RLs}!pWq6ESWJwr4mO}gWev^zMs@@#eJlQmPlA6V^^&t<l~
z@!v~&nZEX=HR@4vU!4-exzc>jw-h_%@0^^vL_=m~e4@6afB?%eHpZW&y}av!R)Ndp
zrUqRmk>Angi<ca6c0KH#c%!#2O2f<l%gZZ1r}bAl?h@BnzuM7L>}6)-iX2VH*ea`C
zX6cEGmvdiLeYtJvbFt-zA1@Z0G_U8{*UJGx?xBn9<)_Z;J(1eCZkE;+mFK}5SGfHX
zo;qvO<hVV8OHW-g)VWYsxJSH_-{)vgaonDdQNn*LyG;(7O`4K*(8AovRQLcx-@a}9
zZ*$JItl6nC=jhY2WvLmNX?k3rr_}b(Qw-cD+&tI!!=7u6^MaS}_!K80G{HCPcD{P+
zpWv@IcJ1vHvbsBGMZ%Y_mKy^!rS{H!@nvbk$3-e{tZ%fjYNtQA@z89^*=U~Ujejj%
zV>6pB)%QGjE$MRLyV<<klbhP7opqGH+iR7+&f%fRUACl4lDGVSO#9VjotyL`E_R1n
z>V-!i^+Z`$aqK<vMqooht>xU+XAT%i?oWOlX2E{*&!QlaAj!|{Yz43Hgr2bZE|X;=
zTamGGRdo2FGjo1zU)SV%%=h4?Lnd!-Y-4`BiEHDz4_}LdURzzRVPHSUcHv?fmn8S+
zl@Cf@?Z~zDxd9ovb~iQNl(SQqg{86E)nQ6cx2xYLXu%gF!?aU+=k-M)n<G{*{d##R
zBzcE>V<zu3ld1Qv2K3(jf3IuPCboMy$G@$M37K|bsh6r7>skrjb@DsUn<OV!#<92-
zIdXp56t&@4blZYkEQcn%@w+~ym&57a59`^5U3I_ZujDM>ETZ~oA4A`Fou*6Di<}qq
z=Q()&d&*V$tY>GzcbUaco3Aknt=<x+t2-yVq04bnVr9Xu%@b^2@_gGryYp-7&BR3$
z*J(^yo^odS?el8{u5Ju3)2wyg+@P{E*ibdy>dx2ok5clr?!7BXez}QfmyhIBshxl3
zvIm^rE1P|Ke{Y}d`NunBLrSXV%!n6>|5SEK?UM8MH60FnR($#(uWO_k8DXK`V7_f{
z3+Mf~%r~DEntS47rS3T=K9g5DVm$3``{PjSkGF0cue7*nn>g9(ll9b7@os<hQglyo
zst34xD)LFr+%oBmwv*Ia#}|@)(H6}yoJ>szp1L^PS*oW#D`*-dPaIHHSn%7?^_ED@
zikmN7i`TPXy?S-UH<rNofYx1MbFZzET~RAm{BIe<(n>eZiL9A5n&m6+{NXa09=>?T
zuF&UGf1CGQQmUw*9oB$0O!dGm$++do*N{6C9TThW2j;%5b#h}{mg3VC9NppX>Zevv
z@!!x`{ClMQk%h&1XXZNQx<)F#*f;sC?=5a)zlW8(e)rh5NOYVrGFUOyvzqmpZ~3FE
z&*PV#z8(|hk>NOV3ezj~g$6f#T~Ewix%6z*HwInKxgU6!-PqwXGjfX9;`S*kElqe#
z9z|@=ER;Clcs_B7-~7e-I_fX4M0#(m+Sgreo>dT}d^z)Nn8nv?J_j~!{ru4OkJ-7K
zH+s(Odb@A&p5s$yHD5Usd14v&jAaQkW-j79Tk%tjg{ARySHs=+e>R0Fv_cao2a~dL
zLKgF%cbD!i-K6pDd-~MH>*g#Eyf}B|A(cc&R#EAR;Ws-roqZ`bT|<A;&XvEv{Ot9(
zuEo9Ed*S`lmzQR3*r{^HHLg;2>cqkonjA{o*D=g%a?3H9D(q@@p>OeXHMcqErkLe}
z2QCsV+rv8I-qioIG_kzeRm*p6T`c$gby9y8t?K;EI_DNw{j)u(QLUEV-i2w``9f^n
z8Ep&?^q$w8u|LW5P<rUgnzIpMT=`e|_FS9Dy7jbTRa4)>pcgZ@?zeJ%e>3>S$NLM9
z`ph(EKlhm3Fn!*>e5OXZIj`OvoWr@xQcX3Tanr1<z^z*)A2Zb!q@Hz7%(5<fW6|+x
zE4NOn^z<-B+f+8M?sJL9&&59|cx54WxBbYOpAow~w))(UT=-=s=jLgNTPIf=*L@V4
zHdVYhzvZ3Y(zo^xUj}7g7n^kI(yl9!JM!bKv;1eC>JI$g5r4-2p3c%2scef*8QeYd
zLT~9@y{TIzmd2l#+nC}h0xBV#4+y4gIQ{EdbpFG0*6+7?PqKhCpBq<mG#aO$%a}b!
zmXH0)alIKIuPN?tS68Xrd+)T}wfO6w+55}iE{zUVGFNlg=CrAw#>EzXeP-F#*2a5r
zdHekKyy(5ayw~>3{8N9zqffWUJ30tRXtO-({d)M=fsIKnr{FzGyYCz;g1d9R<z&1~
zi^^KF<-CMMY0%}RElXzf?wb;%x?VwnBjz;6iFrNQKVNdb$7sNJfEw@*odu_1G~gvc
z4fv<a)%RdD;1!t`rNp%IyG971bzRq`vaHKgRlae*(;-_ur~mk)V98fm?hBU6I$!@J
zEOd{x(a_1EPCl7sjR<%>CZw~x<Jgp*vLC|N4!^fuZ@X*ZEO`ZsyTZXIIjXiPR6Oq&
z*iwCZ(#H?&d-4y}zc-Iu_p65eU)#6t7h-d({>^$=seEexcXtknJ?>#b*7Yi}DZiOb
z?Js@Y@%{aS_=D&7K8fFY_<^%`|D%(7dYk$_#P0dz>*afMb*0$9T_?V=znZ7yAN|ux
z#duEp|3JI_8deAP{aw8FzK-p$-$9?*_sacvE^yiMNo1}4IkRmgZXv=6@|Q1(e0#Mx
zLs}_Q$;jny#@}St&o{p8zxc`i$|<`)KfXt@{hq#b{qfWGv+lc#?4A~FXMFVgVpBn{
zngv}ocXqd)kNFz<?Wl$h6EBzk)OGC>Z{@E%v!mzDf32bwPgAEIuL_CPj>r>_m;4jS
zx=&z1?|RXS_j}KGF|G`UjRWkc64-I9Z^PdyCq5=~1)a1h%Kyf3{N2iuulE8^d(T;O
zfxR|A>4mpFbJsquJ@feAR5R}Q&G{q#K2!KX@ij{d*X6U-+3=p|dUW)9$`t$Vr=LGR
z;pV7&xtpVA2e04uttTXYu2s2Jn(|w=vRwIx_NR3}?$t4WSUvTCl~%$|Hu=9IzkY|x
zd4JG!RnR&&DQ9m_c-@6^rbhSqNq5~Uqs1dPZ+>S#Y5QW1s;<VQ$6JHfE}1JEyTA7L
z<E!$KH$Uw5J}dtux}ori@}pgHeC7I0=ijlst6~1P{U7T(o39L-7vBBWop3Ha-o!I~
z!Tc|ac^3ZLUZW_J|5R9g@qgK*pFi_@+Ul2{U=5c`?LG2gdAaMCuRDI8y?<QeXRpd>
zheOFfC1(B4mx!w67y7inA>n$yz@P5P2d?FRY>k-wP(P{fZOuPc$qV=I6v!Q1E*kgW
zd3XQye<yxjnfuE8kHr4^(EAtW)~LOH*Ou(f)>Qua`_|n;jSJtq?wycb;h8MDc+IMR
z=L615t}cu9+4<^E38*Qpz`?<EU7so3<s`?JJ)H@!*+uj=O$;zNYcPL~`+|vw0<Y;<
zTt41D??AwH&Pz;v0<jt=|2aJk%?p;}GCpa3c;f$1t`D7JQC#i1B5ix$a_mx9UYL+~
zqQ*Gn@A@UPS&!dyFI~7KLF~`G_LUhG1}0y0oAV~<h40_`aDHUy-mFyXpKKOgnh%x-
zU)bE@aMtXeZ}QK!3x~~q3TM==v}BwTY|uOTe$bS+sZQ@=Jx;JT{hY6~;V!fLOY=o7
zt2LIgi+q~5bi%iexH)ZGH?5iQKOn%%^InX_${9zs?QdLV*|MQFKk(+x%|;<EKMrY>
zpETpDv+sD+8&Y^netq3uxvw=p-t1k@_+7;A|4pg)TDo!n6hzl4=5xt#9cG*6=vZ6v
zf2L2&`-_$OaVJ7Qzi0aYgRL!V|G|GBH9v1$bbKFY_{+Deyk-mR{?Bt&;_v!ziF^O-
z$@x*f>Ho$*58|fDzyJB|^Y%p|J@dm4MA}^!cyd_h$XR){tLvt?X04cb`a{U9IXm-q
zNpJe2_f2tWf@zSYZ~vdaDo^T#oloCqc((t*{nO<JUv|8D|HpRf#(ZN7xp_|iR&dxH
zHvhB9e&Kws6M1#}cX|BIWqq{e{=cb3t5R%vOe-o5{@ec6k#~Q>b6$>=oX79yo?5t!
zW!4ns`uZQ%`)1Er^H9vJl<(?RmAU`6Oq!_v+1@_Q;(XpWMa5m6*+LWdmrYjsQ@ir#
zVb$2#;h&7IXMf(wc^zE1_J}oBbbBVRNzwQ&!R71Uep7alfY6mNDSM}aeVdfl9Gf7t
z!er8CiCZ6(xs+nQ%3orgTHv=^+wb%5vLubx)iXD1UXWXOft^cA(YsNoXy>LiG0W0E
zf8yxoz3SgsEzkODel+Xnj|KaFinRU8H~aDNB5SkL)4XS<r>=kc9+bJ@g2@xx17?4s
zXKbARpJCRg1xGjhxx41~^ZQ#lu5UlQ@oU<;XO|8woYEusxxKr$T=dQIMGKmu9)=#8
zBgQ89hyU7t)6e&Q_&qP5?kAsfqwB%nDYF(Gjy@mc!L42Q?Wwlnysn7Nr)*ZNk8+<b
zyleS}DCd)Ft|+ZF%uV^@H1p-VwCi?L&;8pv?{BuXzVrEdqxt{+m2_M;e&WA+aqc_E
zZ-)y)1OK|Keu)awEJ*)&?TPzR4V&_RY>g%Bmi%6^K}2WM72BZyh9dh`{F}aEx>rW{
zk{?pt{~aEmUNdLLv(4wPUkPwpCKN9dwn(&E>&U6~%RjAO#t<Or|1h6F<ci%MZ*Q)u
zf3An!cT0Zz9k}t&UYpHwjdyPwY-y^E|Le!MmjCPbmZqd#u79;fOYH2wEnj$zIV!O4
z4^LhHzQ0jwx9w}pTz4H>G)eZQjCn{#;(WQKlRn<F|G@d*?fkNTtCrvWZY7^BB-+29
zh3RI9#*O`F;t$`H|MXG*@!x|5^CH5h&$18ODWne>##7*k;pTX;>90hg)s+KNZ!M4f
z@iG0OR2Abo{{MaEF@|AG>MxuY#&k@XbRpH?!Q)kHghJx}r+EYz1|`)5dM*fRd|aZR
zdGFXK?FxU_#eLJ5bZ5L=v;QZnicI|3h->l7UoBVI)E}?7aE{Y@A-T!wiU-$ri#YSf
z%nbdr$Mw7BwD%@I*IzsBe?s@_ZPPD0t#eOos#wnM{WGeiZ2c5@)g}E(``s!H>u;0^
zhi8|C{;!{N;m?b?OYIGRn9t|E-1W|_$@SodwBFja1>3mg8Bf2I+FZ(2@PD(2h4M?i
zt$z>dty>h#&{C8ie189T_C1!qubZm&E#}x#lj-<X{+oaL^YV(*{~mYViDr5)Z}?>K
z)m3fRq^`=#8L~ugHCq4c!n^CH;j(L%IMi~t<}rV-`0E}Vu;t%^!i9f51HxKtF7MTl
z$*;b8RJ8hP|NB3jAD3?0y+p{Flj}J*XWqBT!XL7^*w!-bwdd3JoMkP#)_QLA*Zb$A
zS55x>{W0fz%fco14?nk_DKVk{>1xyMnw!hoXYbEnI;Y~xeeVMG`PbhlSwt)qo6=OK
z`8Isrgx`E0%Cn~&PcKnCczuPo#L25$+5<9YJX^Tv5K~RtCBsbN{2QWn375AN_=OwH
z=~;eJId8|6KZV)?OprDmqvHcDw*;T5JqfE7*HlXHyg7Y#hP39Cl?6|1bHCn*T+mY2
zCbjFX0n4knNAc^HTxzc_X?)!$5;Y~eUF^;lJ`vaFb6DKhtus-1a&PVO>Zt`{njiSK
z<}G!7lE@+?=knlQe3nzi1ii3Te_HnFXS7<~*}QVaABH|5uCv#DE{M+ZC|mq^N9Xnl
zO{)&=`{sDKOL*qvMelzdKOFc?H_hJj>7+x;gmm<S3wGpR_pX{UyYuxumjmXKeoN0x
zllWNpdZCcX@A`n7mw)$f6I%Dn|A?Jfl-0g38f|$$<<{DTG;RMUJLlQINl&a_XoWc{
z#)K~tw)#J3=E@}@um4uQ`Q88OaLMx^FNWK57icn;Yz>;$9LRc=KO^<jkBM$?7ff2V
z)3o)|s{7ZSRF<e`8FE%?SDrtu_b82b+3vZs^O~<!6vUrQ4sqD`Kl<Oi3a&eoeQJ92
z>I6;1>nAUW5t$lPDQ-SHyg2xu?kfI%yE*ml%Vih&{km6I$M@RH?St;S)d`n$yLSj2
zcz@4o?mLsrkR6%x{>i?7zw}vu_`W6ZmT9;#)Aa0p+cOszxf``iT)xxghfb{ZmG4$u
zvL#*|S(Y#CzG&b3|J9r0g1pTSh3Pz7eHT|1p4znF^30>|+{deGRC+zLf4<uuvwG@f
zWf32ZfNZYLiPI+Ro^<F|aKWFDtBF?@XIxf(?Q`O(*XC6I&ZSQtPLDmj_{$6rR&}wf
z8Mo!N_lwo5d=uPXWw*=9_Mh$9sXY7ZmAp>KY<zN2^^)o7g@2x1&HDa#>aM4b534Ml
zKAA-6&r6!WNNDG$bdhO0SJs^i4l&bnfB4X7iop9TA{@t-)*n>zP`~u*z+Y{*dJm6y
zmxZ%TtV_KoZu7Da`oHm|eAed51Ljexjb05!;#``HN3AX|Gm_6cv|?RT@3(0U9rwel
zQUV?2W7*!@d)j4)-ulP%{kTih{D1;}W0Ry6=M4BoF8n{i1FF;iTi*$Z=nLL>I=Ruk
z<7k*%(*mb^FT@zxG9m&KKTI!~Xk_Q8CEyh(bs=cS`$zeeADO<clC!G#D}4E%SNYPQ
zlg~X(5`?6_T#Q$K+P`dSH9U)aZaE;KB^h%tZrz>0E61{SJ$>_c=D(ZAUi%(hc-1HU
zWb=}TTIF1<v0FcGYq`duTOhn@lTMCZ(w)zzzq|jvwaTO=I61zxB}&V7x92xgE%Ps%
z%4&MKj>PZD*)e^Grp~3NNp>e6r7gK*c&|60gvm5Ib7H61F`uPJR!!LOr*u#Kh2+Bc
zpUSL8pElgO^Cxdp&h+{(Z_8)AHQv89De`~Tqw|+*4ml~Y8eaYPbjt~eQ1+~O4_1cn
zv2>ZfSf}>rEf22Ro73gJ`l=VcDxbFUxs3LWt@b|BtLvUVe!u*6w9`@kFH`@V<Kmiq
zO1582*t=uueJ7(ss)kP-nfR7E{Fza+%J&W1*8uH)f8QT<FXG<%2DXbSl+3#1@z>o}
z{*v7Z;d44$+0AOi4<4GX{3z-3`cw8<3;#OkYj)S(5K4L;eoC*tSpFaPROM}N-@QL5
zpU9f{Q&7zQ+uhn}O*_{seb9(i+Is(om{#?kJ)h%sD*`maf2&-{OwyiNXcqg?$;)fc
zxBhki)t~4!W#8_9c<YnKYolAq5qfLq+=}fF{>ATnt4!`hT3y|#*ZcY3AM}V{qb+;)
zsFl!4?=Lp5-v2IV-oN~jAlLkY|J}PbYRD-+<$pSv8y=s<9Sxe<eV&(vxb__^()_aa
z`EH>-uZ~vQoWK7`j(u&=IydXORZ|4pj=#A4_L}}yTWS0BKi}(__CM$NY<6(}vvi*&
z)h9GsIrgeV>B=ovy7*P@&umSOl?iJ~)TR`Rnl#z3J7wpY-6eSCSm@cgE>FYler7HH
z@OORi&5N8{zB`*tGM{I+^lkl(%7*J*;jxll8h_O|HJ^NrWoiujwO6~lkt<bXkA&Mf
z|NVa~-i9y#&r(rzZNj!9-`4@nk6Pu=%Jv)z{O5GdDSYbLkdiIm>=&+DDzIk#7rw23
zg5q0`g=;SOnq{M9$9(MAhl;1KTYJCh&;Pu>M>NgZQ)cJiJIccAYfBCu{A+(WK(uf<
zlhhldmK^7sUDNBg%$Z$s?$g&jOR6VsTi(9T#3t7>c*53yOMkKdULN$Q>qc1J(bx8z
zsjKSu^ey!IT61My|MC*=^J2B<-EIDrmMebxyyDgUn)V})&zyf?aOd}<r`J2K?qf3-
zedB9?DSvtN{jH8iAD^(}3Dpia*>xq?EaTJJf15Ag5MKN(;Nq&yo)3lBKG`U5zosCm
zLgi9u){}3?-~W%A`KrZ;f9l?^uLWa@rX1(}yr7jMb#}--D+?LEC!uCpk!S3;KY1OV
z{%=-(R%QQkx4nz^KVP)<+L8z5TK`ucUvg+~h(|?!+sCJSRz2R<`}aWPv;1^REtUK0
z>a*+JPvkG0<c&xR?G4#F(N9ijEjz!f|M={G(oMHD=dAu9Va_x?B1TQ(sm2ejaE6)x
z3icfpZC!o;X-)dkYLPk9{v3(uU0!h5RxnYqi76-}HALI?Q~z)7J<ng&zV_R7DL^6U
zVfdGo=4NKE--+#&m~}2$-}m3Ok8@e0!(M6s%?f_4xJ&wM`akvFKl&T%4y)Ts)LLB;
z%wu?_maw%ydBse1eZ%@g(RWPN-1`4z|HdM&-1d1*rwj5sr`yN<R`&ZJn7jM-ftTST
zY@6={NUv^QAN(`mJ^zn=N(mKz-3uhWq9$;)%B|q2?d+N)S@(~5MewFaQ}ZWf-@n*2
zS4{F}&77tDhwJT6n>p?Ic6{~ygWoLU9?j$2`tX;2k5m00Ulj@W6~|7m-|KvI-TxWY
zJX@49?;72H7Iuy2+tjJnU&{@5R8G1aZFB6a-=pkr{qxtkH(j*f;(Jl~i@dv4y?pzR
z-wy;gI66CA{k43fx~AO!sQ<OEZQsTU9$YTE`Az(Kd)CjgIv+nd|E>*C4D*UFVw)ph
z$KDwIqHJ5^v?;mw6P9e^*>GlVk1=oH{-pocfARnRTJ`O#(z{5bA6IYvPTuykPETvf
zhZcQi^U_CQ0)PIB+&TE^kYe2L$6xD1FHM;K{#k^Rwx{6nw(FH51&yJH_^&UG{kpoX
z%~{Cv^1qo}hvGl+?E1a6_{D<-N`<c{8T9Td3J(82LofK`eWo?c&vN&C58nCWuVTTu
z6O%q^KiGEV;?w>mldR$C<a29-@`;4&Dy84vKDBvn;}I@Yu=TRx8l!id5&oRZx}^)g
zPkVK!R>U_zw)|#2v(TiscPkg2$jwi_zJBuRWV_~*k8@v#i=48*bMVW<Kexlob&TTv
z9yW?lTIcdx_iF6quAA52!_ESjo~FL<#`EHpz5A~GE7tt${IPE3-^=U%HqLq<@bj6q
zUd53u-yS*MzP~>99CyF;%D>YW|3CiN<975!mJk0oe2^185SJx5^LC?j`_iC`3#vu_
zC+~?(J9hkZe()1k_qmqEZETu(Tb3Vnt9{cXnJ@dPx~l5I*DC$j5$j*=yYsm{wpzsx
zGC1>Kv#Y|ri2T?Y(!qYRA_0q>7aTn-TDPvC=+m*n&#{shLr$sBI<$A^EE}835W}*s
z(Z<Ju6@*qK#CUat|My6Z@BG#u@_*}uH2ttx%X9i$|HpX!4_LeB%D>F+DN#S}yL)$Q
z-GBByd-iiBW%sQAPhb51c*AQ`pnzRX_wnnOnglJ*Je`<T&FVb$byD2!#*!^RAAeMP
z3GR$?Ff|?6+R<?LPQ}w(4{g1;+5T?juQh*isQ9VY^jR#7jtMR-n?6-0P2RUZ#bwv|
z%tim5wIsGAs9aq7$~%7F2e-Jaf86T>ix5-y{7my#PI{>G(Cx*f)$BYET?7PJ4slp;
z?|AvZif_B#vwu8wdS)?M|GL+P!)8o4n8KNvlB;%Ixq89jA!rT^b)0dX4rnYfa?esT
zSkeJ6A7FHRP~6|3AvyoIyAH1i`Y0oLdO(g)U;a}pR*tdqb9mBx!+OuNPo+2b?Pq4W
zD*1hn-;5LD4WC`^thOxq+jl2c&F=9-Y5l)h$2=>9QS9GQCMXfCy7)Q6hmZCjQ>)eo
zpWIM+b86Guz44!NcZFIt^i_s<{1cop$I8m#{Ct)g{^*R;D^nu;?!KuKeeqB5^?9}4
zg&i!nSN8m2I1!n2^7v_gjX(2~BJ)03S+cF4XsPu6miPys+Sx_QD^_rnYS-!3%&X_G
z_%A<Wdd<oSJ2-bFPpn(}@7E8f4eR8CCO(?^cLw7fmzq3dk(Cucj(MABOTJ({x6jeG
z_r3R-KC4Z|OMbaezQ3gNtL*2W!mI!9n|=P({|V~*)*a-L-{e2{C+F8K@t-R$TAY9B
zG;e=o-Iwp~AxXP`9DA<V`d`<<=;QpVbd#xnYhTyb_GI352xR*F@v{AqO+Pee6fkT3
zFOjjnqpo3hkYm}(3S$wUlwaX9&ppWg%aW?zzG3$D&9QtT{?hGxP98gd?acWtdUcy5
zVvP>AZnD(e!@OtzUx{FQFNg2f^IC4NOkxWxULc>%CTkHpqpL*M@91$39sB-2S8Lv?
zJ>fh2EBK1(m&BtAKaDmmUtRWT*Mn;=A!mZZm0RmV_S$u<YGE-EnPA^*(s0cD{Nr_>
z1OL?C>E7gK-&K5U;g@gHJx+(eYS)BbFbKG=r=BI&d%fagX-!jCdE1unwOX^pm#Zwi
zlF>8${BzDb4Ow4xdJ@Fbm))$bo?RXA>9|73?X3r%N6fLC_3idlwZd;4bKDPnj%M1;
z@p0Fh+PY5Y*!vG10fQw|H?F*uxaY}j!Nos<MZ~IKH%M#j=vB@=|5#+zyXRj|i+oFd
zveB*oIrpZ0H39Xv-@U&c*wR(C@<*@8scOw1?B9)h^WW}$n7`0Bi1X#Opf9geqQr$(
zJmHzVv~BXOV|NaGueHcI)vJ*9P)dw#eqB_h-=@7M*n%{Cev8gOvf!@3n!n34SN`-~
zHhI1DfA!m+%tLOyOSZo8ELu{Q|9-{GIxX=yEra<&(xNi;OY3LXKfWrjzdzD%&3nQ5
z_8W_YrXT$8{j}Yy?PrW#RpZjY8}j*XN3`aA6#w)mxBKDempaL(Y(wh)$A9|ht;JO%
z_df98&bt9$az0B=jNESZQR)8lx347+vDt6PbYj{x<C)*pdO@$3H;(_-HCI=d?v%Cv
z)NzaQRf-$u+4XaV7&ts#^e>G4l~udJ^S5y&cdCRpY2?oQY3^H~G{2&vmT}Gh#qv}C
zSIX)BKVP9M`%keVvfy6Df~US(5_|4Vn<^52P(gduALUoG_q59~=zo3S@J^Sr;$v{^
zMvr|58?S9<v^iz-bJ>C1Nw@0M7n}SI&iQdzU{yc=f+Q>H4|VqMlIF+MZ8mP&ueUxv
zSSZS`HY?Cb=7dt7zSg~-2|gdfG?wPgaSk^4!1!@-lcBXC<Jn;03%};cXZ!ITIQyx4
z<%*Txw(_j}KC`{K|LN9@_ZIxekM8?)_;;Xy`;B{>QvS|tdfJ=zrYm;Y5*KBG6~E+~
z_FeVR=<}Nh?F==pmTWW(H9FJAUu612Wx8au$h!Px2i}A+Jz`kP9%3*hA$#4t`cLO$
z?kp9!e%i$Kaq>PnF4^rxPa{$TA38_LoGbo%rAK-tqxn5Q$I0^cQ+vxb&fMS8G>vcX
zj0^WaFOTH6*IHud;oTHDQEus9+rMJ0x}V;sJc~YYx;IVgXU+c^b;XDGJ}F!@Q{d;{
ze~etG=Ns6r`eZD!Aaur#*l?){{Cm6`>p$e*aMKd9?RER*|Fy)v^>+D+lp3G9kl%}&
zg?^pas8hRq>tNaJgJSh+d>ee{3q6*e|MctOBPY)!)YJ<s|5x$z?4xs&?%Q2kI)&N%
zcEx5dg|d(H>b2GeJ+C{F?iY1-*OB*(+w>pGuT0s%@iitSTK#h}+gBU=ntn0)Q2#m4
z*XvlwPq^l5C0}?w<)!5t<zvNfjHayL@_*?@zCX622lnQ0&sPtdZF=mV-@aO#)}&>Z
zl{PerHBPe5chQ^L{31X`dEZxl#@;QDvscav3N-j=Gq29NVOKd@;6&+bE4<&y$ZMIu
z|8RW9=Rk(F&kt`^QQus<|MfwcZRN6SHB#$^&UGJ9i0Z5Dy4I*rbUC)*JL?1Ka^_D)
zhfU7p3CEn6d-PjN5Zi@c@1I<s+R(NB#&eE|QsVDko~+oonm_xWLC2<-ekNO9zFj+K
zb#zjRk-e1th4p=3*i5op{}~r4=AY|5v03bwTz$%2=Nms#|GM9~wQ&0Lg-czYp4?q4
zaIgNo`_q$-z9%=NU0vVFZ0L2}N~8Ys`|pcdy<Cc#lwEH5t1A8NK6zr7r|k)aT^3@Z
zf|t3vO<mO0*8jiTzwYCaPumQptvYi|j-9LMc<ZSt-4g{Y`X6kbqkb=D2~Qnpu{Njz
zU8l(6HtC{%v~iW@0WC&h`Jl!J;s0OHIibnE<gb_bowHq26xKCaF69qQ`17QYt8{jQ
zedLneCUX-by$n4!32yp&=kR|%i9pBFgH>xECUf<iTB<E_V)oUotN%)i967mtli7l~
zhwN`p{I==doX@dmyq9W-oVvL#zxCag?tr>yufv}j%y=uE@r3uY#_ATyeI7njgqF5s
zoU)GE+jfTedP<a`#M9+T4KKb;{&6=cS5d~iI^<YEN9+DgEWXLnAukesFPh4u+xT(g
zD|z34_y6x)ClN8f{=UZi|GFYS&QI)&yLxYZK|Q}{kAnVj<G5D2Bzc8;^W5tng9_8@
zJ?40t&-0oknPmH)KmO|czsJ=S_lN%fQ^G&Na-z7F^8DF1Q~lnjOD#V0{P^iW)~!kF
zTI>FW@_%z;y4yMBsuOoi?R_WJ!=ES0i*j(Uo5guV!#vw&=i-DltGvuM{k&(}f5}g2
z`iq_dUZ(}}v+IpJj`LcTY<_HbX4%rEM;E2cIH_E_T}JM}VwDy1P4z<Fdwi+7#j7#b
ztiv=X_~7fk7KiwDJni;;_)SacpTw#Vo3##dS^~VMW=&jK$9nN$@RbW$3vWdjoMiF2
zsL~R%F{<8r!Pe59)24=TEbVZ$=l9z5dqu&@2XDVTUYGaQ=+Swxa0bz~Nefl(*V@*Z
z$oyrAoo_Y4ek#`q-CazV98?Q??K|wWB!6vQu=|#w{k330?q_Zyn&yUr0q1Y6DmkVy
zg$2^qYFy3JsJ+QzO3+&F%`-(7g#LKJ`}g;>+nNVv3CXlR+3a;|;q8m!Jv*Ys0vrCQ
zv3eexzhuGBe}{dRtEv=>tUgi2`|-bDTI6Mo34SZDWv*pf^66zbmmAm5d2WtnU61B}
zPtPvB_3=sk)6n@UT)UT5Pnzcyq&j7i-OI>J0W+?Dn%&9llih!&cwV7bnT)*A)DQDa
zo`>w=I&xxtyz8IP-=_a=2N+zLH>u}JN6L{y_q~>OhhCF-TqW{V+iUlqeQvP_J^rNc
z{TsjR)8Y?r&2%h2&fA}@^l-rh`yJuWpC;S!tA6oM*uyp1>?8lr-w(Ewt<F^OI#^&d
zFQu^g=blNczo!34jp_=q@IPuS5;39MT=u_1_5uFh2)o6nCC&cV&tLFt{}=zS^>f+x
z&O4Nt!J+FV5%%yfgVdJp6ZZT1*)N{=4?kWxMKiUj%X6J;#lF+h7w*iP_5X^{Nu^zV
zuegqNN1o*PchmR9>}OZLg{Q>6Sn=UsWt4x3w&#)t`IF1v-hJ{hW8ciY$W_U~KlH-$
zf~P%LY?>th-aAco(UkkM|1Y>=GrJ&*A$vvgo(lJrx}_{CtM_W~J~w<j=c4!4Zx?%e
zzr4KYx^jzStmo;!muH*Ah?pJRsizaZWlPqSyNM+YpX+kcBo`<Jp71rzKF4aX^`(uJ
z-)i<3PMon@rrcV8|MRCW%OlROPqZ=eYm#NU(;XOml7(;Gu4!rRDuvMgLbxW=trF{N
zdsO`{W(TbE_L7iabVxw<*2{BCTpBv-mvWb;{mPZr$T+v)LHM%um;4tnNNQ@$oHG4K
zuCm3qcPTSNvV5*9FAZ7p!Op{6|L_Z=q@~PRlJlHit&M37Pqa~;711zXT}}NxTitrQ
z`gPOoGbhe_ue{4+uXkM3N)L&oN%Io^gue7zv$NA_&)sETFFueDTu^9y>(|>)t9I=B
z{-gb^|L)-B1%W?3|BFs-Ir?kw*Zeil?f*Fj3Fgc1|Ft5=;)cABtdHhGF8{6T-C0vJ
z10Jf`Ee>S=TC;CWu(tQaSM#TM9&YqH^IrUd)hB7KBh^3t+!R;7ba;w*?bWNt&tAQ=
zeWBe{d0xl2+yRQ^tMtB{xBOwaitqb^9Vgf4GW1W|{;q1b{9~!#hCk;rlm&C-?Yn$$
z)`ug3smnRp=U+R=GDYHD@X76J8SmWxCQb^B;a&8r<y9?Tt?_S-BA3Z4d_Sgj<VeRZ
zJ-6xjWvhu(r<~yZ9O72>;#{gw`@X*)_IPK`KNae^Oj~4iY=GzK#obq=wr%}+PUVV`
zWlH2Fjw!dK^)DPfb>QET*p<iBs-8*C@7Sg3XL8<P$`(mK5yM@NWMvONS!tfY{ocIl
zYiQH8$yR<x7oL6n@zvgYm#YPB4mqm4e#X5`F7Eva&)?t;0z0GxHu$^`Z<B40%2?u%
zt9Nd7)YO2rVSlDh$SF?>$m%?Jd+)B<Qwz&o_g(1>58J33$hqN3sY&95)vvrxZ0j;q
zRBg1l<Irf9!LjA>%8sRls<nU2zfKC3+d66e8hbykgLTtNnMDmm^8%XI`M${B*4fjw
z>9Bp5N=fy?ukA)s;<J`2toobv-}#H-VP)I@oIk4)pRaJx5X_zPP%HIX>F4{OUa_t_
z^*uoFuX>Vi&lK%@sl49<Di?3nYCf-=@OH=am6N>Y-3uw-{x37~%wKV}|C5g`Hay;W
z{03w6?}kgWzs?IeBfMnI!g)@4_hafl1q-D7vpE~9?z3_FOZ5!h8@}7;&H8S~t6H*h
zn@bNv%w7JaeeV{n-YNfD^Zx!BlWPj4=k2tNo_oMF`r|?0SD|agc>C7{nR-2x;t2?R
z;2F6jIIHaO?>4bzd7&1z4b?MqPmB9*SFyGFGF^KA?)N)6D@zu4g&4ee<-(f(#DVqM
zfd$XF!mM>w4>>JyYtxz4bH-Nu<o4d<Zdso0ze>G1Lc^wPIxnO6E|&T4ir{N<^JJdM
z?R4_wRs6uZ!_3xo|5kH>JqBmZLz-fs{qLGG4wnvz@TOjd)>PFUvx}}&|Bo(TxpU&`
zBimhf{?w?uBDnr}-I4B`x^I`Pmjxc><Dd0os)bG5QJ1ciZzg3M{kS+Bxz<hLb#mm~
zwBSO$vxeLL4Xf=vIgh**Ydw{-Wum!fq{S+pxviPoeV%FAwic`wTKw++ljSx=-|GvL
zt$qe7MqZ3K<a;E~Ms$O}{PJl2k5Za0kL`uldP)2KRi2iZYtL!@^3#=%VHWOtp3isj
z$=lId^o)OI`+f7z_oOa~zxIkLH@tnm<%;UHkiWl@=I@W3bn8bhSKBF5-3+y!Pu5$4
z<hv&dvS@6rtT7gyaH=UpMCFy~^Uob2*&g#<9{v)m%iFYGq5I{|&q5nJXI|S<XuN5n
zWvz_<j!W`EIu%`0b2sQula8v`@<x8=N6V|JmS0b9Ymt~})AnsekSyc*M<QoWZFs2i
z^YY>c)}j~urdG8rPtTn<qhW8n#{sKLVWn-Ns#CX56qC8i?WH^WVdx&oE64Kxa@<$+
zJ$d2wdET2@dnC7PnZM3A_DXzOzduLi^DY0v_1``HT-jFbx@fJ+-#Z!a7JRyFm2k}^
z)#;^u=dqVzdwkB9W?t+4WL|oGOV^#0$q|r~$v_*r&zpi)j{JC`9+PQzcCr1>wMUqX
zRsa2+TT;64(F2X;mmL2qe@(Le8n`9u!IQu3zblVU{jGUB^QA`Ozx@vrZQXWR`M#{>
zS~GY5W3J6Y|01sa-t*3cCHJe5)zrGMND+xEUiHft^(%M0zEX1c)`IxCb!|oVudRN1
z&;5Udy;M~*?(fR-S3l4H%m1|C*7>3}Oj%N=10SA=pX~psWLob31{1+Xi8;6YV_QvL
zEm36;f46w*MwVavzCWvDKfY9toBQOdRMNxzrJa?wUB8l_&YiM;`JBMF%U|F4opanh
zM1uY2nvjm)e@cy({PF*L=;PT98}d~GS3jsfmfhGDHp?||?~UjAcFL3g+ke_wzv5TW
z+H=*LF0K>chYeD<ExOWLW)+yNFV!<WVauMwm%A$N7oFM^B|q`-vu8E-QnTzGpT3Sc
zx!hs@oUoofvz1<MQBG4{tn~iRD>F$^%U93kTyD<Zbvs1t?&1&)>kpiJmj8ZG`8hbc
zT<2){>-x$0UlsqaeXsp*=gpl**T0>vq4w<X<*kd{|2)oqdz|ajHcjP;)yg~C8^feU
zPu&mt!+PP;QFTZ06-Dn<HUGWp)p(W}BzlK=&+gmuVLf&>{Y6@g{TG}jtb5A$|K!;V
zr*EGq&o7z#&i!%y#aD-(^uGKh)Ohcof>-ai>#`Tj*XKXcjMiFFK1D;jJ1F5(aQlT@
z2e++0pZWKvYH{<QoMqGG{<X~bviRwC8_n*wl`Za1+L+Eq)iqTe&6}!vbET}RjMwDu
zKm`N2zS5G}tLy{~%lecSPk<E&$2g8eE#9M(qbkKT|FMes?|aL|XF4eUEZf?2-r$4u
zU+V~0##!>l8G8DwHLnCKgr4Iu|1ZDp%IE4o_X7hh4*cbk)?AafytV02){&Qful^+p
z6&?M(Z2C_BSzE46Ud;B-ZM)Wr=^r1K)#)7M>yX}m<}dSqk9(ST=2tqZ?`!;CKI6~v
zmGO~`XZ}3@W>mjTDE!CF71NjAnP{|XWysWt=YM~-*vfw7tW`*LXn?-VpO&wy_jn#j
z^x7x3_OIbb)8tLx0wg2day;rk`|n&J#a?eb|5uq><oiR{m9NS#+jM^YH;W~IjW_=G
zwu`@7$JQEuE$Oe-z0cQI-k9c^BmDcgh4<~VCSTvidHnfNGikqQ=2oezpVQ+z`JS~E
z9Q}X9_sQSFZH-@7FZeP4)blLqU%!<X?XCZiExqXM2~(T39<8OqKZ5r97?(YH|8H}h
z$iIp2t2`EX2eJ7l|LQWbcWH~rew-IBa`&zIqqFDwf9i4VVz~Hp#f<N=SLQ9>^k-%M
z@iJ+npM2BJjtEbl^d+>~&F)m0t(4!BmmxLRS^Ps@Eq`?BmhhG(FQ%W|QuD-*Z_zK6
z%Tt6B<tnSAjb2p>g(*($xR#gXa`4YYeHSyO?`BK~gO}`)|Lk#V_KG`uR_AA}H$1)J
zn%noKeZ@KQzRI^No2GKjUePl{|BLs$Q{O)KyjdB-boQIQGwYI)Re74P9?41CvKT%;
zvi#UqtJ?0jvwdboA6u;0t?&JXFY%UP?8k_CPODGLycT|F?Q?~#KrS)H+VohzPROR1
z8;TFsRB-)Ubw6Q6z0{nrjJF-Cuz~DVj-UmtkDsmGe(%uS@_U)nO9Bg-V+6w$Uuw-w
zx6fIk;HmoL*>%kyw?C}-c)nt`%HG7nf2$@hcB^WfqZQw|K>6a4l}SgQoR_M<TKDyh
zvg<LyNV(ES)%CvJH!R=9-;}#2V)yFIVwI3TyY(La?B6s?+k4r)iH?f4@BMj>w*FTB
zbdPI+jke^|Yvq|SD&cEu(vO?0UcWHV@8Vg#if0#93YR(^=&yS>*~4!c>*1snj!^jp
zOoxOQJxF@L#hYKSub}W>@R!deYo09W)=g;H<UX<F*%`?lck|9JTDB&u>|oD!zMr-s
zoA$)LPnCTgdUtyDzYW>_M>wII(6(_Lk$!#L>DlJokD)7L0t#x@_w`A}w8#W#Up3BP
z>|E#?qxJve6!y@%o>jRY_gpyP{q(=n>+WU!*Z*bwx_GDlhuGcIaSuLQ`>gi;dP7s9
zYx>3q^(MJ8!BYD?^Z3Fa9!yT0|1f&f>Wos0LtNY$tvh5C%jNp(_R6rvW=Z;qPx8II
zAU4uZi*5QU=?_b*H=W31Uk7tp%zBO(L)FJwEENx&cf|*KguV+sm;Y%mH-F#S1y!a=
z1-hS~Jpasnp=qMa^fmeyxB4DpRVujM`{MCy_SaS~?5-Z)%ej(s#cV^qNM+6^;t{PA
zxFH?}%?*6*JW#qeWyR#~qWFDw@_(K$yt-ZQ*~H_2Ja$yDOv?9me3^S^Pt8YH4?o8T
zs~i+wd{%t1%v+}4+q<BDiRN#C7nk_$3znq2%zKn`c~ZjvN|vds=dKs$dpar2Sy(^o
z%bug!FE3qcuX%oxP452%dpXXes@*0As@oM5IF7hBSPQ8_i!lzS>t;;Ornd#&WF5bt
ztDnK%b|lO9!tZDn^BhNm$JG*9mh#;?BJw$RJ$GG}(E7t@KEHjD{);4w{O1qj|0}cf
zd}@oze(;<#N{c0H$3@$Rv;Wkv|C?r?Rd{fn+K=ZeEb6rQTW*<OIaDLH*6VlO4jb2c
z{l{`&BVxpAC8|D^@~r$8qIKMZ6Wsmj(Pg^6RW&(h;nYjucCrA=Itiv_OdlRc3SR3}
zj8_kT7d&CYx@bk2$nOV2tNYcqxaTk7{PurhmkXCn*3|jZm0LnBLi3FL#kGH|lFQG$
z5b#<s%74>CANi9-hj_~NlwN!y#I<G32eTKok_Ug=w<f<}RVmrq>2Pc@#}_;A))kX>
zzx>a-&SqX<!TWN<kUya+A6zFKJa(U{eO{CC|Fmrr)y1{;{q9fDc$|Kq@YwS-m#8=q
z`5gIA#!jZETfv(rl3N=zB$Hd$Oo1-1E;uUSq4B@i*YJSb=2MRAo)j;ReQn}4$3dao
zc24v=!<Kgs#d;P_TPv|^@^Nmx<p=i7KE7!0R~?~GD>9y}PpjLvUOC@u$$`Gl5>cOp
zA0*D}j9d4rL$>X6+6AqJ@xeT2_H?cHo0sjkec6}Y6FwwvyQX&h{d}fPcdP<;d7gfs
zqNQ$a%Tck?N96w6oer$8;vQJu<gPsTDgTAoHjZ;mw|V#7^|(=DE-JXI?%^kycL@(&
zAZN%*v^8i*9#)vh0Ue{r=4Cv-LHS6AV8q{YhdeWxzv?@7?dNr#{jT%lI$kZF*DDkL
z)M>{=c5>wW>pOb(#D)wW;WNh%U;We6s%MsTxKcUyQzlD(B>(=Z#g7G}ytdtAbq~{&
zX}4SY^iiT*rr*+M-|ZWMUy4QUda8KAA$9RmkIhL2(;7c+p1Sps#_6h=Vf;}B6*HK(
z&2M}Bu$AN7e@3SD`Hia|a7&dQGU(Zo@lzSJ?C-z~1qH8TGY)9ALbuk{JmWA4;H>z>
z&7n8nCG21Qw{y&P>mJ?uZ!a4Cy341#M|06pqqCbD71)`KCPXZ0sL)qYQsH;}@tiYA
zK);d0qmavS$-<B+pB$DnT#{2_brEvdqQG>+=&aF%2(yIs2NP}<MV{39e}CuZ@aR30
z%0kzCvzC8<Z+G$Xy7aYkjh~-6!;rrDNkM==>*2|B7$5D5xc56jtf`vQxp?BX&(ZTP
zUB2t1?PYs+X@;z)_74f8UG{D3)OPvF7WOW;xS`l`*LT0m`I&2dihb8xN4ROO)tD!;
zF#D?Ni_ElNVb}h)u70UyDr&30r)Qm2l-nUMH;YYrN(xL$8^Sp<9)6EIXyeoR!J+?|
zc=@7AW&UpydTbcyC1mWGeeIL#JLU7ysvQRkggEy0%zM2|;qAKY36WJ*kLEaUQK(4L
zb9ue<*g>(V@&(Tqp4F>pD36|e(e?VWhm+p@lD@Ea#kJ@gb0^j-ZC-j?EOynd=!!=_
zAGs~r`?XiYn@7BV`DLL?Sxbx4*Ur8nR=n5f^zpYbs~unFJu*#KxW0m~g#Et9DW%7$
ztIP!j7zI5h9as@<6m>n%{ipZc2Z?9r-KoqF^ZKN8{8DS&&BiX%*dKD|c{abC&HkJ{
zpyGr>y~*L3yiX5Z?(eSrRd}y1IG{4=hf7My!j~UqBep2>O5dN^dCI+f@xfCGdy9T@
zZR~U0mvg`GYWkTr)5EX!|5>VcC*^o$aNfz8O`C-O{P|HMd;9qFy>G2&y|rG`|E<+3
z@Y124w2Mi0+oiAamn^WdmE~<U-g{s4op+PlwfxSj`7d>z@Dv<~IDI)+<KCranbqd6
z=i8g|E=`H9sA$<A{xa7(@YapaML#bG6wUZ6;hwVotNiPLb5<-#zm$XeUCMR+^AA6a
zzP#}%&!>+OB@4bi6wrIq@qu&iv40Q0pMF38_6_@`5C3uI-soj5i-?U7tGc6HJK4nE
zzIn&$@crhE$HmV(9Q?QDLEqdJ6?=qzgDc~XzBGP(eaW$<*W3jK8tXV&UZ{QTUHf9=
z-RWZQ4zHN=@H^WZnIrO_)2EkwTz;YQWBbIq+w2nx(=B&>+k5J$>G!4Qzt6UoSKF_a
zykO3r=OF?{UF)9r1)aV)_h0(<<}0${#n$&^U+j8f<~Flw9{0}2S879S-bM7CnY4Jq
zz9h-=%Spd=n)7R#u5quEJ-M50?*2sUOE0aqPUyZW|Gs`N#|QmglkPfjpIpC4L}I;L
zl`x~AK%=6dM67Bv^H0kV1F@ojt)D)Wn5=(&r1kafiF^Iox}I&y%75!{@Ri=0M+`sK
z$=KEJmG%yA|L|iAkGY0)&}DXyJ@pJvgUb_M&fXn(?I`o9oC&+u$}Y`4V02AiU0e2O
z@uk2Se#w>P=I5R#{C)KDrN(nL<+XD&KU{mZu{Q3n@#PN>7D{sLJNJ#XTzSgO#!tx>
z5nG?jJXn_`S1voD?U`=Q{aFHXb7nOj+R16s;viMD_STcc;4oFo-Gx6_-(69;aPH4Q
z!wTIN)iw7k!}hbB)D7Lzva9lt@$n0y>?sNtZZ@~A)%m})?9Lu;z5NAG6hx(inP$h`
zlwF<jX6wJliG|u$A8oHaw7F&+X}FYs?%j-s2bx}+uT%&+_~38u&d5Ig@BM2k=5fg_
zzFS?u7G++(^Pl2>qg_%geDgc!Iq&{)`hM%J{p|sd3;U<c)7kIQb;Ejn9nY$`>j&R|
zHrcXn@uuX`X$!T)rr32JSio_{!Ht#umS|z;X7362Vui#rt})GP{`g+LNPN}Y7qjZl
z%ANntQ;==+jmKZDCG-8$MISdTc^-SJRP3E|8tY;04Bv-R0{?bZOsc%T{!sbG>0fHD
zi~U~x;y5ecgLjeJ!j?2APV}63W6DH-TV4In&AJ@@Eie68TpU>1nh$VjNzTp4%yZXf
zzu?Fh$NW28so(f5@9gRc^#x*|p7}X`j^cZu@pVq;`G=<eH}GxwW7@LntL(f<7gLxE
z+SbQf-RAwYyG*gdp8c;3hxuE3*|pD(U7FW+$mYJ$h1Lh%iYDd7AKtg;-fmr%AobbL
z{qn548L1N+YnLxLuwCo|>&llu?`Gt^cZ~B>+f-h<u=JM5liNN2YWl9sf9v%1vtr0R
z0f*18{MOr<9xrt3>F4t2JO5*I-1CibuI(%VB@rx{!n%rK|9jIftvaCn$x0yUx8BVQ
z4>cuw^;_nDkCJsd5N~a9fq!ATp8HX?y<d}y&Mh%^d(Tt;&5-eq<egUT__q!(4J9)a
z^e3;HJjcE;sAk2+DLO@|qMzM0`@gQfcdNBXU%mRZOY)84gsXm^Qai4T#kJq6UwHjS
zeRQ>efvc{LS;2Wri-tQl1$9?`ZH=`!E??o!|E0X;!j5gymE6nPbw$_xZ+`gi^Jkt9
z$2Wi7X{NJ?sqCXnl-51De-CS~YU-KGovK?L#JJ`2@9TZL*3Q-VTtCNnjhtY1+x+w=
zRt)>^{k#47_tWQv)|J<1h`#!|fl2hPoBgD9N(xNM-VJ$fw$JOkvZXWD?rr8?mnkY?
z+o>UO@`~aoaT6hHN!G(j-)9_6XD(mXrE+yHM@It(4|n5<j*5s)-KSFA*-u?7e`sf)
z(QWUQa$uUkwt$lblkUBKb@@+;^}5stmG_wW{=9s(s~~Jyuz`+FvXs~No4xM?GdCVA
zTd`Ky+w#?4o4fHooE&?1a2LP4w<$+nOHOS5r9D;VV!2O!yKA|)?{-%CoP6L@_Vll8
z+{}Ay@(-=_=1gr<D?T|(`apAb#@Pj57bey5Yt1~rsn%$3WTCzG`%^bd*V}E$aB2Da
ze8II>@A*&V-aarX*?Qvk!~f<K*Rl#%p07TBnNj5Z;a>$0a(}W$?AN;XUd#Tn?z>|j
zH~!Yth`i9qy^=%JZiDdZ4CDPXx#pyoKD?arV~5P)_p?_9e3-T?%;iS^)oJ=`&Ax8g
zVlu<@vB3WKI=3GDUZ3i$KCR`ph~|XU)S#0er}lh{)u^8uw#afz-qu0`xmJrWzw&f$
zUU1f)u{oq6Tf-}QMaGZ6;^($}jkgXsRI#9S(X*6z#i!2OG8IKT6hyuK?>%yuZ+_9M
zzk0%xYMcFy`{JjqtrgA4&5RIt(*56EasTiNGquP~i#i)PcqTejy?f~qU-?U*ShD`)
z<zlv?<x=&zLA|aHEXUXyUp##B;aZ1fF_WbEb3f;w|4eS%U2SC-Kkt@!yKKot*Hx`t
zEw<Yo!y1_1-D3MZl|TF-TU_G8=^;HVi|n4yF_7-hzul(l7-g4My0DLn&FJO%x~|zL
zzYDcJo^P(rytSKI=QP`gynE_DdV&q|PV?@#nfvSc^UJkr+qd)V(rsNU*~<U++ZrKl
z%j|hu4CdRuvd_2T(qaB}|N5sOuj|V)PCjIi3|Z9U|E=5a;Eu^(wI9COz4pDq_tg>$
zk0w9;mFqV#>GtU}xmr4&A0I00e)0bH9+B^@?AxWq-EZCS%ATy*byeNR^_z3Zskq)?
zqZ`K#ev7|%a<g(b@BLeykCs~%ny-~w>fWZyoA$FR$vk%Jr46lNi+}Ae&OVm$QAc4*
zi%aXxTAR<RAvQi?^JL78Evv1v(k9-O4&ji$(W@|3^ZchR7G8oMgT8&gX1>31f4ts(
z?Vt6jD<c=)m{*<t^?^)qmnx`zrN9It4f;60@GW;=#A_x!-?p{+S?#5bJ>M;he~9UA
zEKfLb^MB2*7c-hR78Q!Ud(?3Hd#L|1Ki1``56z^P+<cU&7E$Z<h;{SSm>B63j~eW>
zFULx5zZ#tN;@zX&=ikili)oAATb-IG_U`G7>umGqi6)o5pPaapvtX}V&jww!F!ud*
zM<4!T<@0f``!VzAN7bm0ubxWP&ET0IbneCUjs1B%(_@d9D*9#IG!U1IVkp}D!tU6=
zXxD6~)$to*+i%qCX-DPw9DLAz)jO><cK(Tkw|Y9Mq3>*`CGI=Eae2g!kd^!N>(%@`
z4YP%=&!2H)(f30i$~UKa&ry25=*!Q0;`aOh|N2{3_^^)i?gJmaWrt=;zhf3(R1Rv-
z2{3|4iTNyUAtyT&3imy`Bcr*o;Nkaao70r%TfaG?Au%VCU(HWYbXM!34+^}EJYQbA
z&0g>(!FqG2qQJM#{!??83BKF*L@9Jx($Nhzho&{oc=Mu8<c`nVG&i-bp9}K5bB;EZ
zOx>hfv(tFTvZHJV3cq$sK8QXRQ?s{0&z)OW?rz?y*|o(JY)vFP_}O==pL6+m(m1g2
zS&5B@?$e@mp&zdBT-$nW)%A<6t`n?HE7$qjX4L3zJ0}tJzcBFo;d4pF;y=HAo4>Q`
z;-gd{o;>%rlXnN4@Bf~AxA)f6kEfc%*Ph>A-Orow)$YLElJ%=&pXWzrdhx`by)mV_
ze{SEY%V`T=z0tXICT5z=bM465G|8_E^6NZn_up8y=kQ$9)h)ZLQq_N*bD6p<T2P?z
z2uoE|^iTEa)^=Mj@!0fS5>A>oXTpoLf1P!TlQgrIyn6PwK=hH)#|c|wl|V@?x!d84
zK-rd6Y25qoiY<=GKDd91-^LkDHdSxeJX&<4W6{NPrHpG-%Of8}+?ae}*V}s!u1lx1
z?+TcCh{5pqo+Jz5`_={h+qGIwf6%{@7$gwo8gcS>#Q%GLUj7UI@4`_WUchJ(-uL|N
z$34uw*X;OiZC-ij$*gk!{a<hQ?n=M2ruy&A%eLAVp1yYGaPvK~{8&5p{l)tP*RC(A
z-0gMu&{u(}zn4C~$9$>KaCOMpwXus+HU3`z^Tcn?VZ*<=G2THn9#>54uJ2^|@zE=4
z;;R>SVYjdKs%cNT-+#+&d)m_Ne07`be(9J0UwOhhRVy#0i92)Y$Nm0m&s<iSK3mA*
zVU_gfE3Z0E+h=Nf>Fi&!FMf?vgZ0d{wpCnRD^lF|X+P9@sl=o-L8S5Bt=kubYi368
z`lpq4;O^Bk8<rG#$gEuc)7&OMNqN`wxc+w`&*T?vdc8WYZpyk_(icv;cEpBWUpRT+
zrdZQIIpO+yB<FVT@O`T^ud|SE`-ZLAze=|)nP9AHb8^qL=nL02<@p|79rLsFaww?5
z!{)7!<zab4hi&?~e|FDgpSZmhwYjahW1=;y?a8^*CE^Zl=JNT}zva2DM%InKWu-BP
zKNRfV&hcxV^5NHfJJv1C;jOpZA-3>i&bspt7W|ERcjw9m!>lQ9pFX+Me`x#O=`p+H
zXHK!(Bde>k|KZBJ^G@?^mSlTqw%a}GpRGpam8bW=JmH&jc;@Hx#i^wYUTvEve6T!S
z{<iq-e(gPKispNE9JtzV{Imb~we?fAkDpJkGnX@&+I>1xa^qL!DVsze&iuFJM@ezJ
znsrVddzSpuUo2{|X4-SVKAx%Ic<%PaxyyU9CA%`-YDAd`KMncwZrRtPY=@oS?!Wfz
z?L5(AI_9jKckPT8<(JwrUDj;I(XBS==iEXc=3Mz0<*x0`TB!H<T|nvb%U^q+&K61v
zIw^ns!LisC)jHGqt521m|8PjR^ZD+78nt&mo_u(1ui8`pob;KBCKsJHO>xy<{CdWB
z*&D|;i1+Z8&wX_Lja`(}n}B`GO4FD=FV(LLiJSDV?xOFj4<XkYf26+FVp6)`eIT4+
zU!l`_#vQw-vVW32%=|9u-ixg+GnOjfQhFGzu`6@q2I1|yo1~Mb3hBrDtr7WjrgMjU
z`x5@g-T~Y1Ro&)Yt1|DW#epIxo7<1yUA<F$d)wE=j|8k(B(?LOzMeg&adzJp_WDD@
z2d69V-LCg%ajLaT<>sJiGhINDe~gW>o~zs?>+)}NgE`e-((@ZE^4YHKyV-Ww@@t)S
zxrfotiS28@%KbRzdNz7np8LaJc{)a^O+~j41_#=lUv;;$P5tgqUTy!P*9KgEbGv5m
zl)ilFd3oV?t^W;H`jVR#bC)}E$e0PQHs79jaQ0n`Kau|yemnY7?%(ny>o_;DKRbKG
z?b`k+>5)Hv##^?x|0q<~@#lM3tk<IdsCa*^*gWgQp$Z3{ua5uz`uMlo3b*H7zLa=-
z?X@-h+Kk6rKhHjXcf*d!mx8ny&stjv%5?be_&$BlliovXGw$q(S3BjuMD1Yg+^mi#
zr<jxWD^-4u*rt2udDO>0ieKgH^$$;D2|glLC~gq{h<|VK!)syp3cGK|C05JF?-%yY
z(B1U@yi=5sURvDE#BR5;oU42P)zvVYb1m2u;6Hu6((3=xHWMbOYv^%&|6dvNAV~P0
zg@Q|8_YL#CPOncX&67-eHYK+G;?|Y+bv;wBd_R3lM8EKBU;Uc%N(xNXLLU0RS^i(X
z_$T_IeRTV~^?zFAe{6rMZSPwCEoRBxKZ#%7{JwvnOJ2#?e)hC}`;Q8{(kEPt?VG2{
z6YskJ)aRTD`x$KS-Z?gH<z;TWGv#tc)9W>sJ1<iGdHBb-HPIz@f!}Z54AEPWaD!=U
z@I1%!YJLYrHs$DZ{nvZ`K}}%m-rNSRP)>VxF_+Xu(cpSbn&ncJM(3(cNk_SK;`Ufv
zT>Oy#^&_bUfxF2}TM~Ahe7eJEMZ*Uf?&vMHN{2ojWd4#9eKY8tlIRn&tzR!%hw$#a
zQ1I6{^8dbD$2ArvaHQV3`>Jf(^Z63*MBjegc>la$*8hOp=C}TuU-{Kv@=Nf4U2h5V
zl>ZUx8!|7er4%>Jnl|m(UZJbk=goBae=<Ki+u7Uu^oIXy@2}o3-zjxl`kJHo;@1<8
zHNXF3zxS^1_C>!Zz1+exWx?-T{fnOW<ST8?kU#cY<kGu6ypl4{%VUpz_?+jK_K<O}
z<=4_=`vrYD@rG=C?^o@UvSm%1yWmps)ys2y7hT%WIjv_|*pj<ndp~&Iv5q+Y^v{`X
zDs!$%?T|SNs^}XZsu*0j|I6j`io=n0MU|-+YBSv8x!O_>&TpR>WU%LrWySWn%PoR)
z^Bm^fkW1sde*gc}+sfs34;JP#o?CNW#OGi$d!emYScpphd5KViHM17qtq)vr?1}Er
zo;TmKeYQnS6>2neP{>jIdUtBX;xB*rFC-Pp@0u09@VQ!)dKVwp^<us4&OG<$Id!)^
zUuRMv%(gnAr1)Ujo+UF?AMfk^;u?EMeo=abzp6WztBqQ%7^9$sI?J)PNrqtwg}LsA
z{}+VInRGG#x_LREV$Pq>$4`YPMZ7i?+ZTWMmO`o;)8ht*31W>Js>~J)FZt&%$b8m)
zaIODqltshW7aN5WcJeKH{%vhcbK#4IUhgX3V{(>-2fuyszL>f>>PEvn?G+IPx=B&z
z0`=15rp`|dDG_^TpQ3$I&Q;q1RDygHV$_tpxL|XI#{HL@15=hadb=d-;C%7h^p4Ba
z`5ZhB4X-8lo%t&IyQo~P-d$~(hyD`N=1E~PTc;h=VGEBvT=D-b<Nx28A3Ln~T=o|H
z`|MiEmn&=g`FuXrF<z3hFpgQDz2Z$wZ;#CX^5au@uUSv$a(|du=+$;xMD?VTh%d+i
zZc`6v_}%Q!+8w$B)UWF}prSA#@Qh=P`T0o>DF;i!|K?Zxda6F*-EMcub}>Dkc*)4!
zh6b}FPsIFO-MILxpz`7mLDyafUDK}eJsx=C&AzisHFk7$pIa=vc~A9zLD>b>;H+|)
zWl2iU%XfiKUBI4h^HcCTxZ<x$m0gj*rLuW)sj3TF4~SLHj=mZf$831RRMt6tkqk&_
zLJFtHNr}jPr(!`)bxGh6JfZPZFhD4N;mQ+xW{UB5LY%xo@WQN~MCX+~AU$9kAdH@d
zDLl3O5H_4_o7ym?C-LaYGZ2xs_5*AsSJxlfARldFGc_1IV5-2xEHGh`A%lXg7^Dfy
z%k-Q1Z0L)1F{V<jt9?LT5@=KunlQ=GrNK)N)Fe|f5Mo)Tw0KVU#`@1&)<`NhhF5kq
zaC98t5S}o}@KD3ly%2{gaJE>n%?vmRvD$6+fhWO6VK!Vhyus}{C4+68EPRh%-sWGh
z`<rH@@v$=hm1Ur=#Rm4qlgm^7{F&XbR|UjZU`n2IphQb@%_Cvy;}y1{wh$LpFin1K
zV0XUj<BsHn@7@00&liG9O(g}U<W`3lsSm!DEAIWxd@H|p&6mzsiXc~e3eAX_)|0{Q
z_N8{x21s&nNzfPK@L?76yV=dUN&{l<LnVXCDLon5Z5N{*yW6g%@m&Az@v{Tuy$!-I
zR_ztlh*Ho#wqbH;8^~=2pIFrTCrvz2G*Khx$;{O(5F;2l*EsvXj`Y}Hc(TDz)DaS!
zZv<z^c)9HnJ^Y?M(zr%w7dXTulnW$`PIsjol}O&Z=oQEohfOSM?UOFfKe}jt`pKXW
z8?cGscmbC?aZJMTCtsZIdZ;|X^sxHE)!>kBfRa4ijh*XLRFYSEsGZyJAWRM9LP&Q_
zfl0~WBd1S}YO;cM+x`8U(tfCvh{8<;4^j%xxZ&ldCDs-4h);625y&#Qd}F6~!Xquo
zlTn6$_D#iNZRdd_p+;=UGbMaxDLxEOLUHnp3Kq3xlP0bbJ^Vf#?r)fbI}R-1^zl(m
z))4DlxJ0(ZTw@{BC!mmM;P8=Q681kSu}1Xp`(SK(IectXlPz=v4^KS4V3%_zB%MLY
zgg?SFBD{_Ttd*#%KQ-&&<O`wTXn^IHAT@)HQ+gh5ao|ah(=6{6f>;P85ByM_U|F|%
z-hyZL|B{;ytXR;*yvXjuwvW9x&i_&YB_%|_8l*4@pPpoxB6A96GR*!JEK5>&rY^YD
z4fiaVaYSH7#JeCv-^=XaU~0Umv?1we*F~+Ur=SGUz|q6V6l8SFL45@m$P$B#96E7(
zDi)b~z7+&VM~9NZg_KEmmM%(o8HVB^mxLD}3+FB@LWw#?!44$_Rb{TWJXcf)w)r`D
z9lIc@1#t%0Y>>uA4W=NYMF}s6Hhh6@&SIGIge9CU7Xm^XS1k)mNq@d@%Nm~6%A0Wu
z7e0%ca^>lQb&Dp<cV4kRqHoUAsVDe%SZy`Cx?tB*0Z~`QE7zD+k5;~O{IPfCHm0Rh
zeNUX_T(F?TQp@X8@;vkF(-!M3XA*6-eE4C-E(4YI8(5Yub^S2^n94W%E$ff|ziQWE
zmSUhH{9Arr|I+31-7o(Y$6dejU+Vmss4i|l+m88Vj~?Ft%cuXIWs{Nd#hW)f*Y)|F
zslU%&_{uS|uyC=_#kHU$*Hg^2DW&H#U&vQbFeU5}<k<FP;jT8W!=IEwbTu4<Pi$SV
z@R#zA-@Cj_w%tnC;!?GY2yx3jG+AMq{wmkNKt21`3nDz~Mf?{-ruJV-5R{tzDlk00
zdC##Rk?SVy^KUI>y((VEe|_5ZgQxBO99i$}TPoVMX|{p+VwsC87a0|7m(6`K!&F{X
zJidkd-{aUB`(6tEdGw8arB}<+V%>RJnTKbew`<jnyHGOc(?0Hkz>~WT*XFACX+8Su
z`uwqomc$L^b@MwxBb!PF|3Ed!|JoH|pp<;TLdoH&!UW#Uu`HWD2NuOOXfZF{${4!#
zd&1)`C7t!9hyT3!Q*@{M`=Vu*Ezf2dJ-9b3Zgtzzeh*_UyXdC2Pfn}U)NX35Tjl)i
z_-g?k_pIC%X}`8ccrIN!?dMmn*N>JyG~K_0NxJ@S*Qr}#c6n}<g}tkz^Ha(vPn_AS
z6J@yUyp@Qz{tlkcyRSXixb^M5!@mADj53>f-dklD%SAp8>0k5m^2Dh}O(Z2}n09~v
zlat5N`RJJF(tdEN&jWd5d+hQqQ06&Mp>ja6b^`O?UsYE^#2!0MspxVp&K2!C{c_cm
z_@+JDtE#6qFM1`qBHDnLTgodSa?0c#2Nw!_vYY!}Q*R=NrG~{m#&Zt@onljsy)s!(
z>g&0draG%c-H9!$V_d6}_WFdYYiVIbW@op^XG3B3xAPmfZR2a(_Hd<mnbQ9$hYR0$
zwkJD34u0{b_x9E5=Xt-nrNu+#!HGmh=)$a?!W)^ZHi1)6Hd9RZ#M!gGTNkm}il$BG
zSoG}E?u#Xbno>Vsew%lD;_WRmPk+{kojCq!_Vk4tHvDI-FLu7L*{ULpli!bHVdz8u
zgKRNH_wVl5vE_<(_SLtJCZXbAqg?mA_$MtYrq1}JAlE&qGgM;78K!M6i;E9??YVTd
z@$A;^k2M2c-niN-e#`GT=jLx`RHyE!UKZ8?c26y+9I2CE38|+VISK^iPq;e9#jT&Z
zVCzOU-|cJMY9r@eKR0Vt(39y`7O&ZNq+6InMdFP+JL{)_Nx@yWmL*M@mE^>E$@bMM
z?b8<zSM-{O?nwQrH|6P0m(Zo68VkL{YFBRV`I2_^R?8+=(-pTO-aWl|OX|_1FZY(m
z&G_!NT|M5+Hoo6I?)<Tx&(9s&T)y_8qqqK{ouB81ZG5>g>d(iArWOxtKmUEP_j<a#
zw_RSo(p_kpRVZIscqMYxDzGo=ner~YyUo2Pc8QksPT`QaC7Cx{Bji>v_6qyu+;uq<
zVc+n~TWsNq9TKiTU1O3Nr(7%i>v~k?yzHti8oaKiJ8uMqp7?Th#X4Ol&xnH?cs6r;
zPb|*leXD-PB%+h)S#XTYX}3(>Q)Xs|Zr5mCX*u+F_4k;`6DPLLU2oGAoxfMq{&%G5
zzfU?J?)~4zz+SqyC;i?X{^c#AJlfB5m(OWgxqi)&UmfSCurj~ZJW{Ip1>81z+~*L*
zuNt^Ed`(2-(Qa||DwDdyTznmCs~<~mod4AmRAwJjZ1kONR(Q--Ix{o#o_3({o0*<p
z=KtBY&1}n-Ej+*P|GN11?}FJO8Uo9ws3<KmfYcKU1tebN@70lXUbuP-D32&GCHFLl
z^cY@KT-C?XaX>{?K{a_&*`8UtDD{)FtAp1ukBOoCAX=cLfhVWO$r(#z*QbH<7r0si
zhrNg3gh_@$DO1;jf*vFSmhuT=3Nlj5JihuSR6C?eVGsmr=88l<)kd*#@{|U@Kl5N_
zAMg;`@b@xw+<5ZzhABNKZ-39)2{OM&qLH(F#_NuWLB~Mm8rX62n9NiuU-|Lo`c+#&
z3g8ati3BC(oa-x+KnfwYgBmn;pi*M~-(^v#zL)_DiZf-sT52c`dpx;eO3%le`J;xD
z6D)2Iw(e)n-`d>@j+p}$N(!pUHeaW`(gGPax#vJzJk#wkrpU<2YaV8;1F7jLW}5kU
z&%agsK%9;PENUBGZ$I$nKC`h}f%H`qP@106!IE-vM#tV&W}V=42956n8lbL5*N4z8
zV4V*4S>krHzj*LCvuNro=}GfIst!niqPVB5XO$}0`ne9zxrAnL`^<f#aHS4pv_v~7
zZ65Xuo(e9hjRY*-aEBO}F-33Pd?n>Y-qt`CmxLxzVn1jVau(9C0yTa>?cj@Q3aZIl
zsvVv}64e(^g%5FgiKk_kS^e%=$PP(>$rBr<^lZGLy=pSpi4E=v_nsaox%bjQ=0jWy
z>?{DgT16KJ7MFw?kUjf;d2a=^w;Mk?KIkfL6z%8pj^+O?QLvzFhLqT}Q{dsXZ(@v^
zlGWW?PJtZMc+w@|=;H&T&p(^ioH~|rX!$l!^YB20x`Jx*p6?4@=`$%Ec-wxDX<ofl
z#m~xw=ijb$l$0~-+cB?sR<}}i;gw5T-wv=W$>BNUVF-2wlhBDd4Y@&+)ubEe$vwEg
zx=}ogY5hNGix&nDX1E@>c$~lY$aFhKlR`5y$)Az7AGTGVJR-BZ@Y-IUnm>0BNXBIT
zJ}S=}bAGlRyG@yVz|qj1?m7|{{}Ph-e6<Rw65DXU@j&kP<Ig@FxO;$qKUYqKy!5^w
zbA5_MKlB~C@!^Gk`CYa<pQRJd7Ki8^s$P<o!oV)is1wOm^U3?b6bt#e`>!zB?>zXl
zD4Dn5P3J{Rw|DhlnICMof2#9Oym1k~>ml{ebJyqS#4*K`@oxCBC2{G+d&iDGv<X-|
zdHMIZ#@b)k=>F~7P-m5_Cvg39b&AE6PdbO+>J)Rm&RO-=j#+evJ8u&6wtbu_@7T|D
z@XB5FKYVjvU~UJOIHRD1NaGjBr9n!9651?Q<;>SFB>rAx+#r3b@%DcHJ3k^H?6=VP
zE5>dV>wIJKv9#my{JSQ)XNbEq{oUhpQL@M8r$E6w&I4=j%lW)IxZE=&&)?kLRwi|;
zy5;Qq+m3$RXeZ(MGHve~`Fl$?3F?*y2=01kw2q^$nfWI_)AWFqKl+0n{1DzL_CWr?
zRGB;f|E_x>^6uWRSJt8jeE-zhxW7Isn9pukp!h-Y+13xT2bP65Mrm=(U$ANG%dI!Q
z>^^b)RnmH|y7OnaCV7-?*=e!6Os&dl=i!>v<QaEYm|bUF`$vEG#*X;Mjso|7vFv_x
z`b|;Y)O$Ry=lo4IzVb=uz3=_Sf_=X}vi-Z+HSK}-%J<8@9^08yFZ8ufFMY}T-&yxP
zrmy}3o=IhlG&<&Hze228HQ`#D`#WYo8_^#e+ZS4XP<YU2&shJ*^h5jYjMxXy|1bJv
zDDv~1ti!)a3!hvlkDBdRU#l!SGq?7*WT*P!z<25UxMF@;KA52Fwy5pz^UUV|(fb}Q
zYkXgEBy#<t;2B3BX3u~2+Sq|n^xVwN%KrO{SOfl7C;Z=jG3hh&1Cc1*MXAc}webrM
zeYDX{p1x1|$6foKdoP}OA@S~?>aMiAmE59t{NMicQDheWFtzvLrkobj?lVbc+vBbN
zS4S2!T<gu<Gjo^z{Fz4^9_9!7pE=PPA;4!dyWZ|c*0cGODsG<ozbH1ivG#j+)ua_R
z)o1p^KMq%}E))u5y>|MMe`UDJ{k5+fbeB3*?X`Ysb9?(Kl@*(p-tyyayQ=$kg@;_{
zE%C1=&&ssFCf@&)Jgt3ZU1iT#vD<U~X6!9Zn34Z+rtS1;lMDRBrX4J?eq^bd5%2Tx
z7pU4=$hpM-#kG}%!m}HGp0}@&FL*KWK>2$Xzu0FnOaA?~TJR@(-P`>=vz26cm3Ei$
z?7b4uW&CL6I`0>&+tQY1EN4}pC}VMcr{~e#B9Sqh?Q))JoLi@?c)s9PrMbJo`-dHu
z?mT|<v{u#O-p4i8`<1i9T<7ikGAG!;XgP!ZzG{Eg!%63CMOOSXHt7Gk&r|#4`#L$#
z_xI=iv|Ik*&zso}A42Uzt{)WmFtt}P%Iw?zDOJks``QE6e@SKkdNlkTOWdN;!#X0-
zKc~KY(y(J@;`+;78yc^d%1C_YV*m7U(>w2;@Pj|Lh^+Zp{UmeIr#G3_`@h|`n|nv|
zsbzR@p=DpGUct|8oAnM#-}yT&f8)6==OU*5TJ<@5f6DKO^$(W6`1svOw5jgVu9)Qe
z<$I27o7lTtf8&DiKh;K2&Z)0?UtLI(tlD{TDfgzo|DQcKKk-<#=;QxQdry6e|HbfG
z>GAdVol^ww?>ixUx3hu6hmGl*xu+7-<H-$c4{mV$;5mow%q+3nZBBel>4jNqd-qQ}
z7@jo0_sR12aojZ%^vrXkch)_yepi>NSKuf2A@tmW+Xrq;*N=0%zV3hF{4<}DUWWZU
zTz~2!zdLVu?F{Bjzd*gSOP992{c|xq>GOsg+XEJE+LE8cP#666-Trfde(^>DJE!Fx
zO%A!D$8gS0$l`OsgXGo&m-~-A`|)@^llWz>4SmX@@p0LO@3NQ6^X&Owv0wu8x6>>B
z+&uK^p-A-d#7TSS?^dh&ZxR_>XKP?>{ppLiOysOT$B+71md^iHWA6UbzwTn|^+}m~
zo}63W+S7Bk^<A`#rdOL^LdPk$uxZimiPtM;o?ic%Y2UN6j}(4{&-wa1T>1TOnLGbm
zezVjl8AbH@Z%>w;f8W3Pg}>zY?^kB-KlA0GNA1+<u6Mt@U|;cDZH0TyKjVn`K5V}N
zH$P+g962pgwdm*l?0?7aY;GxC7Ifj*`e!oRvj4rkQu#gg?~L$6J3g}hp8wO-+_PAG
zi6Q@FS;y(u8P^=X`1OFv@BCw*qHg}1`J_PQ^$b6~v=&p(>h7nLR~nv6o?F|QKVN>`
zYL1QrPZSdB@2e;o*m2%y_`6qzL%;U_yszhHILR~pd$R1~^WtlBZ0Glfbnw>2$9kL3
zIc=fwpZ&F4>Txke^H1VG=iUD}eK&i=xtETUmHQUPADKPp<NYI=H)Q@f>G$w-{J+T%
zG9{?<)f0vP%rc%I!vD>zXWIWqas8a5|F6kT+!1ZI+bI7pU%_?#7rzfUer1$d`$hHd
z)a=Z-nt7*uIo-uB-;H9A=1$bhoWHjtJMKo`;l47<{D|jbzQ3pSy}jMw|F=C_Iq_}X
z?~il3YIzN=FFk#a`%jbd`a9ddhpxVI==tQSC*S8S-E=_krjg%5wut)~mLFqF7C+XG
z%30fXvfBR1y1#qpA2dt(;J@VS#I?U~d~djMW9k3Hrt;;*AFY>{%l{GnJ?pQ@1d$_8
z4FmqD%-^qjvf|^#9G}ef52qb<K6xSBtnFm4*4mz386mZ0cMmt({+FJ4=1KTXwi|!q
zZ?4}{xVC$8o!H{S4R=?IewnCs`MT7vihKDRp8DTBJAJ<I{L*LP_y511Cim`y-Q%jA
z$M$~o&rq7_s8^h~M5s{fKezGynIT#=H$Un|nQfbVTQkJu(93Fx^j{n6cw#{fssn-#
z^jEmB9Mf!^e4gRWRF9lvRnPezv`l^>VQU=N^W^Zq5Bp_O?%yu|6MTR3b3aS{^=w)H
zj%n^sj@fnH^2WXe4X4=HZ|#fuWG~Yp&u;To<AYycoZZ<>XW`&^Ie{B>1NKdA{=Iln
z-QKf7pKj0p{8gCmj{W;bzu(vY<o$3~>cN-qKNUOI*G|3tX;Jt7fAKLcvFGM4TlX*{
zr;Gdd!Rd|h|8K~yd!{Y<ai{d+-t`Pi!<ka!J8ZVzU1jI1`e1$igQTo$^%h62o!Hag
zbtt~>wb-xv*+1pB-&i|0vZ8DEF>TppJU_dSKbJKu(DgYuqq-ybf!UTfD^q4{UHr)U
zj^nBs@2ajBs;^$^{C^#9%<7ZE$vdX-@^vguJ?6gB-0sYT{=o7jh3nGwzFvO8QI_AF
z-uL0J{0W&T+i!^%jy+e(w$O=k%Jfh4bvwi(@nh5KrvE$6TN&SbW|qG2=Gp3O_xXi?
z&n#MJY_UD@(#h#ND?jS@sjt<(BQ<T$@e?oJhnQ$d{0aV^b1gikGJmg&s`8wB^L}K;
z>g)xzQyre<uZZY4a6}>DwS3O=1@_l>&HRzQy6xV&{e|0h*`K^u@2`5e%<7XUk9YQK
z@xG`BV#2exCf{fNeePqN7WX#Q)lUW2CPZ}oKfdknyv^U|l`8n1w0L`$SzDrZx>V&R
z`Sjas=X~k$m=T%mbJ9TDJw9pkU$xb<?_8}ncm2S=|9Oega_jcsb^jT4MVD`0|9(N~
zbI)C~Om|J6YB;&;=_c+5{{Q7ibhSKO&)1usZtL+pA#?4fPVnt0VfQ!}J^3FUw=)jh
zxn@@${HTIU)|jPeg>c?~mi^1FuJgM2^<BF`h4|F|{M{SYx|X>9lDRwK-137TjQ_kp
zA^DfLX3Dp~x@UVD@)JF-Xw>_<Nj(=%`yy@_n8cktD>J<?;k=P~Vco+3zIVdcW`5*b
z(zm;_^sd;y^{HVqTM8xL>BepUb9mB0lWh;Gtxj+HHnUr7MM0$8O`Y=3-%oVZclkWz
zyz=4Hr=lP6=dNYsJa#uYcl$>qc-o>?@Pm5Ruc~zgf)e&DZ_c#5ub-K1U@^l+so$FW
zFN;OZzYDMPtp%RWy-;rV?3IYVd$Ed;z9qZ0>f^J%f3+p`i*{X^e*E97`>yM@C0{!h
ze)oWR)!xRPJiP5UoPK4n9{#i?cDK)(ceN+2S3ddkC;EUef8pN~nI)gCrh750Pm6qU
z`q7o}xRWi*mtTJS^6<M<?#J_MFYWzz^T6xiyz-6g|4wW*tbhKZ<IUSSypv-Ucdadb
zd(-W^$+z0cyt<m5V$*l4Z@E;Eb^X`N|5+KaiM3)n-{!xt5@9<0Krc1VzOv>h2m5LF
zyXR(BN69R@p8q6Z;fC-%XOgGi(vI9{D!I)pQKRTacxLR5d6pa2-Rm!rFTJ<Dq25bq
z%G4FLw}0GEcy6`a<;xyd*EY7}wGrX_*GP!3FR1*OyFqsICgCaNDwSTKeu%=nhABN2
zO22IWaojji{`2X9$^8X?kLJwlKj1k3Y{GH=DeSk6Zl`M8(wgXFw|Ud#&Z!oCvKkph
zx6i)2b^Z6bZ6|i|bYH%2)wA!Dhlt$%ZwI<3Pt!=tnW0%?|Ey%g+ZSI?+@EtO(W^aD
z^xUH_A4TIItw{6Bnf35j%DTXPzvtwx&c1!&)~-p@rr%-ulYR2iwvDFQUF9<lY0FqX
z`xd`zXZX!3$>{6J_Z#;eS)&ww_dssGrEOkb-bZ#ex8>P2%D*mexSM}#3+K(7H`ip%
z`tCJlqpk7FPOHmHd!?1PY}u0V@zKN3o-oj;Pq>bENN?leHpiV3J0?W1D$o2;ZS8kv
zfqhKHmLQXW+DDJ&oW5_^rxF-hdlWJasp9S6<+f>wNPdn`#msls^Z)s8x42&O#s2fx
ziP9&QIVspI@K*KAkNNM@zFK={@ioc42dnS!Ob-&A|1scI-sT_oR}}8fw*9&xy7|)u
z+XHv^Kl(Q#WM0ng8~c{bs{Q`sZ-XXF<<E%`{}Ssnx5WG?I$AlWYnf0&^x0dtIx05i
zX4wDIeDFH_SYG1nY7_s$dZvmk^SUx3YgXMj|Gj8$d+tH&{}$6GivHI5clqWVrtLqr
zaoj2UF=>fkg1)Bs%5Wb|P^>zzusJKd3a>UeIn|BDZQ_BvU)C|-3zsLv9B+InUT<P1
z(z8&>@`=av!~3sanEr5uZTxxrvy)f7<V)e6e0-8g!GZek`Z2vZW%tXXjana?_r4L2
zDhspoORtEE|0Q($Xy)1Cb6kS5%hz75oh6&f`tnV|x^#bgDOuxh_hO#;EL!U&e(6!_
zr*8Rz)Z7zy)vL^pJ~Ov3^*>`YsVC-h?smQt=gw_t{Ws|e$Bd#xu?_P73(s%$Ewub`
zZN`p-S`qNPheR`IwBVp$;M7Sf3DLW5`FXrw6n$)`ysX7UU9R}OP0QVEtqbn#6+OIN
z>dmtS*QOhvE7Y_4zu@%5wXz*zvm5_wrN5AWT&gi?#hryu(lc|VuS?sXK4?F6LB>qG
zySe(=)}gFS7yXmo|DAkTK6&@zqv0w=D+_)mEw7k;BT^-L`;Ol)zOVCpcR(~usIRw(
zbyIF;f9#X8nZHzGcig)nG56Hn+ux6zQ;+<;=yuqRODf9wvyaDaU01q$*4^K~Q-XZn
zS!imAPnMn%r4Jejc|7@m#B46v`2wM@1C=fukt~{gRz@T4r(^m27k{<w7wZ43JFq{l
z;JK;HjKg;uf&xtTRen7XJ$YLF+~(_(g{I!CzY%zR$Mf%(dtWH*`XN&E&Az|+L9u?3
zp4)t@`R%VSMr}U7?|{~>pI1V5?uz-h^xtRM7nzHS*u9J|eEwd~vg7^#jKD{?S~k7j
z(U;1&eQo4%;cfNDbqjVh?CPj}lHWO7LqFQ$-(;`6($kT-)+?(|-n4nq&-~YV)!eJg
zemwG6)qVQzwnM8|WK0WsSYa;8wmBx^-!{I-j9NDT^U`kAJUHa<cIoEbqG#oIm&VBW
zrM^fmagVN96<wU1mvwgaoyLxBl?ObRGn(I#nq9WQUwp&cuOS9u#`2y?Oec4_ZY}0}
zD5#h7?0Q1lqd6krAuA<=Hqhwd;kk=f@j5JcSty?P)%dUboAbKM{!e+ga;Gk@O4*_B
z2}ibV)75x#tCej*S68!aSh}@h?Z4YHv2V{Ge!uVhX3axyxBT&cxZp={{IidT-ES;E
z=zXY&U$Uld+9k2L_^+nxChrjZ5fqsdmmXO8>yCNy;Yao}Cl%P<U7fd2?nm_8>PQ)D
zkqc#9-F6Y@V~*B2q&|6WUg&-Q_MG3rC3TINeu2iR>UA4;ZruHK{hiL9J-KU7FxQvq
z+wa|37F%NJ|3~e4h&lfT+4W~i*MG6K;hA(z#Iwa=)2Y_^O5M9uza9+_yR^W?HXdAO
zDH-hJSW>ur;yjnoZ)NO~&t%<&rfv>D{K)^d?83Qm-?C<h+&H4}fi3;l?iW&D&9o%;
zX;0pICZ_RPLD-#ZsyD7}a+kN?^Y-oPI}4|5`l`EYiLLu<*0qe=j^@4lb7jh+xwq$@
zo;o)rud99UFX=bZi%UaT;v-L2$UJ!-5NYIRoX&fPEBeOXf2s5SJD$EK66Kh4aHp=6
ze7e!H^66foJ3G?+v)w+kH#TR^Fv@OQd-BC&b#1Gu??A0g2bOP4jg2L&kw)K~)K_o_
zN=!Jw$gbL#wE4q(4WB<b7EZsl$~7uyXJ7YR&TrTLQpRst(YiK6tAz*l2I*d%BD7iV
zrnk`^mbOJPN3N=L@=kdi^kOl1xb8p(Xqmz-+XbIMwj?MCZMeIrO{-+)ET_3&ukNl0
zIr-E1tj|l3oCC`@HAcV3o{%!mB_T)1<9`3_HHEQlVLN)x{tH|Sl31Y6v?=9_tJ^~*
z@W}LH?}lunTk{`Gns<E5;VUo7TD-(T!-`ipPfVI<WxNzJ%y=W3<%OOqXq=BxP@*1G
z`s}w01}$HANeB|SQNe$qxND8X<VBmWdI$<Ma=JTs9cy_VWa<H$JWyj`+~svM?^yAE
z1IAm6)WE}`Dk=+1B`0sVd^JT-fKgE5Gs}+6S0>6!f8H9x3h~A-1qE+6`2-OiP$8jY
zu#Mw|!oH1H<yZBB0_2OkgO^)<$rm4x@gN^TCW;kOnSzXh+?KIG`~@ff3Qm}GQC`*-
zw6zIbd_uhBF|%Px&y<OpjUXdIu7Zr|I)Hrl#ohfp!eFrRL23%B%Bd+{;4p)mt#m=2
zQB(5o#f!!uk3b9tk&RP0Jx+Q^&P1K2Z{QdjPET1j$B7f_{{#jm?XWcx3T<+rc6$Sd
zPYP&qrRe>tTu>kwc(I7-$JuzPu8sf)K;vG=gas#6c6z_<jSG+jsep%<K_`dD$r&zl
z*DeDM3_}7Nv`FQif`V#ten1!<RQEY}%W7rMPR?kVm3=r-cZHU&TV|%FS9f<n<n==p
z6E}S7k}}!;>t@JeyNvIOCLvQ7S!nrs$Es${IwZJP!*|7s73pU(I2UbOB;xAos<CcG
z>rp<_>kDtCzH;R;ySiw`d0oH2%+QdVp(}b%?w8zJx-mCvovwRobGYNPt4*hpuCM#_
zsc75!8DG~r3Y=ZBs%veyx9sP<ZL`$!%$s;q9)Hr(({hXT&RM;u>os`g*D(ghxswgq
ztQ<qZ3Ch!1!JNO>y`UjBsB=!iVrgydiM#i7F8-s&^7(XNY}|=zzIn`z1re-Sr?@Yi
za{NE%kkp$jEmw_*_Gb!HS<-}ZG#yHPB{v<;WLl^c;v3($=$+R3o?n}ep3uF|`RtnZ
z*{!J=I%}M2Q}vn-Ds1|xBEq$3on?nn+O1n5tvi=8=H#q#=M&y$X1ZXdY0I8B3{Gpm
z?kFg<{Zw{M`Tl8>mSqY7mu6RUuhRb`w{N=vf2!{q@uI-E=yrz{g08K-Aq}e{!p-{M
zu3ew$7+IO`v~9KA!8=A_%ckml%Q2Vk{_`noig;SPV5MkB$^vUpDw0rUNjWK@EW0oZ
zlr0ZDQJB#F^nUIl)rQ46!hBn_Ed}(?eYI1xw!R(A#uQ@k=i%nonJLeoKi(5p-SYp6
z+v}V2CS91VHlhDlbyQ%~WuMnByys5VF{JuQ7qs567Ht#T=TlTvv?n{iQD^bGEpq&3
z(<-^zY|ot2cS+3KamK;$UDX1XZmz7V?8jLzHf83nV0#zaJvH@f;_8;m(;Zk<56p^+
zxjf%TX>G}T-6PYFyiJR>k@I<({zx6NUgwwqqo!o?3gZw_kWXgtuzd196}WlNz3i+B
z?;I<q9(}m5l;P}j9Vf%Pja^+@FMXb<L`3)AirN(-I(>0MW#ScsJM)SI?!|Npo#*Y$
zbkg(n3pDk5-FI+HvebrMn=Y`r?R`G=>Y^nZWinqL4XJ1f^gpycMC;R`$A8tP#fQfB
z?kd<Lu$E_M>(Yp`HeK1#5v?6b4r@6}r=Hc&J>^<gsJTj8TB)-AwHW7y-7SrAQ(E4p
zMNZdQwp;Y>$*%7OjNNA==Yw*6f(hq|*esKmt8>79=wT`13KZ0G3|=A7J9U9~px+Fp
zyA$&wJG(ahk<e;9l=S4e*~3HAg1(46KWg*Y?#acYt2T*Pn#H}Bea{}S=g;wou!sw*
zb&jZ=apS!1JS9MJ#T+y7t*gryT4*_~SUE9UE#v6}?deaaZ!xRL*6I2j8++DR`~DOj
zE#<8{L$4Sg+QzeP=8h-(b{866@3=6LdvzZFqLsTe-h>@pkg@R4gxq}*7llr|-8xSt
z$DDg#s;jQ9@xxDxF29Nc)eOf37$c321*EUg0+mAsmK-brA(1Vvm!B<|$1Rj}rEQ1d
z_KybN7wl;&+9iK=L5E&IwbzZ88g{vVp1){WraFV=Q^1#>CM<{L4>xLPa4+1l>*Vhl
zzU8at+=*GYu)zQA-PF0gn~q6c(TVK(Rp62AE1I|PP*CvU53{OrDmQS58gk!VZ1gay
z_fUdp)%Et`pOvwp+Mf=qP1$#A@AB@@C2_kzwNc|nCkL-%5idEfI)fanCfNAqPg2au
zZ_`AdyKl96q!$`9Mc&-P{IsL&T7K>XIWM)pF9qs)_FdE6az)==>UF@WPufo93rzN;
z9X@~g)T*q~!c(WcC)%&=>GJD4ZMG|A-TxJ}f6}xRmf4sr-nETGHBt4TQu^h!TF-;@
zO8A$*F%7Pm&#bX_z0=n_Ci&%S{%o;4v2ImQ=q?HUWp|(HZC!C-=ai@7U)TNou=zT8
zDcUiv#w~JQi%zYH*vQl^uJ8B7BM}s^3QWlz2bTHH-gEQcmMtbXv?u;}c(MM|?OV4l
zT)JfRrvA11t@rL7TrTmayp*mra~Z3)a<zbG507y-HvYSIdXiyWRnS*xzebcvd0j%p
z>Lm$1UiVi82nsY#R8~+;esV)A9h4G5<si5MpD~4HNs7;@yzs@4)&eNef@UtCaCn@Q
zu-tYk5)_(HK?fE!RYpz8$(wFp%|J0k!jdV-$gOW}kr>!asNs#Co(^8emb@u5jY2WR
zt<T}viB#LRV!pR5aaDXXj94w6WF#CrV;B<|3MsDT8E@M|HUKFZRC4ynsxEG37c^ZD
zn((}_SK8u5z=8)k3D4F%d_C9xkN$_~eQ`g<FWi+q`F%xl!|Hu}bAGJzxKXk9_bv6t
z_IHf`zULoEbnm?$#*@Fd{zK}6{QvAVzpo#-?f=61efV{z@HyOj77P41#Q&?$TyEZ;
zKQ<riRS#7DXRZ13>SI9i)xsvh3yJH5*EnC50r|K?+2BITr5gc8P3wya%H=jB*5-Uo
zf6rXAO(^2q!5be!?BCvEtXVvV`K*;fxB9Amk4wyNyji#?QLOhE+k?sf4_ehQ{#dUa
ze73gak^N7B4_p12kIJ~j{o3gvdu!#I-1~eHw^jNaqP0I%3A}jIBe0S2$7%h5mpM-q
zBQD2Qs85aV-d^ghaxde~*Q?uCUOAe7x-WO-lAsunyC5MhA;z?Leael57e(jf@@rUs
zTu60z_&fHn+z;gszoQ$aSIC@s{-*fdZT9;Q-iKJQKJNH=;Celu%tZ0o(|KRn6*GRA
zEZz9nk4bF4)bARdx>p&`8!D6+I6iq$m3}(y`1<AQlj`F13XUHxnLk^WQ@Yps>)VWg
z@R^WgtE9km*dyVKc-{KAmm)p<F&^Lf_&((}<gY(}*QI>r(gxlg^C}WP`2PEz^<dt8
zEAC_b|28adO0=9`!}g)>Tuymu;KqeQm!|LeCv{=p>h;U3+iu_L&wFNhYm;s3&79Sr
z1CHvrUu^#V;?JbB_0`fBwwYQzJ#pWE=Bf9`nI7bR{-uBV*7Tk)M-^snVLocu_pMfj
z({o$@pG}jWK0FS|ZJ^|va7b99R&{abJ1sTV^j+Csen&pv>F+F=^Ka6=uiO4TYM##U
zd#|q5_Zz>p_Z_jA{%&XALADpCPdAjybIzH~uXC1F&uVVh`R0u;!~ZewnBjGC{(A<w
zKa-39Tm9CEO5<Zbm8oht-5|bh$DGu?%qy0E64qaKWXc}l9~z?an?I>c(!cbm`0@W8
z>h({om`|TR)j#d7>;e88%eeg*&!ye%&N#aBp>fEPMKNuEe!Px*Hfst$^ZUfw>Cc$t
zAKscGU)!3UJma{-r)#g*{gJO1jo8h$Vb|W@8RhSn`>NJQn-}ZphNsIPtcjTaU7kJS
z-o;b1H2bbSdms0Dy1>qL6=!UJKmD$pc(MHazst7&!#8uAp1VGE*YDofvGQTD@}7yQ
z5s}|y_q??R&wuf)O^n~GWVrbE>jv+0Y<~7PzAnCcUq^j<eM4o9`K0niyBmLfdsuzv
z`{Of*?|%Py_eqKH-KS+2T=gU)510DOTlVHP{#m!KT62=pO*<)`eh*D>xeP84W~i_j
zx$m8uzK7r9n@a*C`-hL4CNaBBzI?v$`oTT_yP1O~U+%iIb^UkC-`1}^zkJ?)k3lcl
zDq6efR&|W6`8sB~o%}mKIrsRVKFw~q!pv~{Qq%K{W*&8&sq+ei?(VnavpMXTo6O8!
z+Im1=zG(B4?r9ABe+la9?0@)R{!f?F_W#(n6nxnJ#=hZ<=0$&{@9r{(9beBr@XYtX
zKg*Qu0yE~yR_2v&i+jBEdE=kp9c-=4FYEuv{<u6>@7&iw<`4B|45CZ(_8yuk!*c%S
z`Kv#t+duir`5-!E)}zm5J9m@^N97#cvNnImq*GUBuV*gie|j!9`0nSBPyf&QH_YD8
zAhWX}X2$g^IuA~=JrEBOF=ubo|9j(U<~3dI%OZ0s3{}t0%YB_3+q%;!^1cNB>E}0&
zhUlymnR%m1?Db*h=R41T%S(-@Gy73LtLsisUA%ZOXU?Aaf4^I6+1rLV<#!%gzf*F>
zKQ@EhU61W@r3$XU?fI|pLFsed?Sm6{biVubIy!hx-51kmg#uIE>$a!8Wu6g~`cwLO
z{3p}ev_&zoH(rUJ)4ed|-Rx}Tw|-0egPvY2&;0_fO~BcO36xzP2b|k<`}7eud$R|X
zwawBo|K8?3H@bSi&mrzm-MzS<+p9B}?}t2ne!qn4*wgF9ZM$tI-Ab!Heeb;FxAoSn
z8dU+ieo02LS_u3ph*a5kw&(i4E0OH`PGujAbojO}??P60&-a<aoz?cYbCR0h?0Yil
z|HDIHA2%$QW4(8BkKNgspDGMlUzUdm@!8$6&0HE(BqwSq9rHVBTGy%bR@awBzh~~V
zx>o;a4a@$&mf~*359)6|SAJM~_iuA^UUB~KugZBJvOfl${lDG5xcT!dd)H4p-bfw)
zRo52#SJ!U-#c<w9+}poeEL$^U>B6aR)-Mg3;4=?AQ{~3`LL$6xr&er$!_$Y29y`-G
zf8Nixc0J4XXBoq+8KS56>7Vq7uif4G^l#7o<2&0K?Dv~r(@MX_`g-*%={ctp7ZuH`
z?-JX}zf=AG|GmL8-UhF#ee!%R55N7ob?}06a-YMm8Ciwu?0cWeKl2L+FI;HGe%m<x
z($N;?F9*ARcD=vFxnyZ!Syf)v&KcEb?(SzYGP0PlN5|}KqWi^5ALbwMd-ngq{KxZT
zWmhNMxa?nlbn8*JQ_sFlp6FS=AnEz8lz003ZkX-s59GX2UjIOZ??$_lc)VnwfzJFl
ze|Ow_@OFzyz)u6#BTw$#w@_X6WPh?KPxZI|S`8(2w*L-EzE62-98#83c6WNn=j~Ok
zWfv!HK6d_K?EWvxdG@FGy;vk<6;;H!fAYSj#8QK!pEROkqV9J^gw(mKo@9GFy<Txq
zLd2ap%`2}27|L|b*pxnP`sVZ9p$0nV{bODi?fbsH)7wDY@b(Rb-oKfzC!HyJ;k~N%
z$#U<ucKPsdSRK~r>E5vTuAxfs3%SpCtr?07qmD*a6tn*PVfkg|^PJDsD{Gc$nK|da
zvws$qV)yzY^Ml4uQU5muGxa@uQ?Dd0a{J?{BWt8C7MZZm`<Uc)^x@~m^!a7YRh#wZ
z9Cn=lc3$eVZvL1jK{KWvoU-V9{0T<8sk0Y){Nan5cAb%(F)g#w*u(W1!}EQQr+>T=
z|9AI^t9Odb_IX`jeC=QCGM(1Brb6+{cC!DR<nu3m?rBrqkSx2e^AAYADc}5KPL0)h
zAImd)|Lk#lT=k`}dRo@0!=JTJ77JI(oha4N-(``O+BIF+uan>N?dJV$DHpB3`<NG-
z8T9wWML)k*H{<nuef<q}rTa^`Hr77>B=*z)j_FmqPr>Sk5BINz@9{XWMA=~56rRl%
zdp_TN_to%QtEOal!Lj>k9qfx!BFblJPt%l?j@lvm&WZbFbXNYtc)Rp&`=Zv*hquq*
z{w*Q%>_YC*l+&-@z1lBd)KV{AJ$L%+DLrfF{4`U2d}H#Rt1<J=WF>J;c&}A@u0828
z-?PcQRgaJUa67&Ff7$%J-Ii7*=YP-5W!9EtZ;5SQ6uf-a{+)WVK6Ul`gnzt_eV6+4
zsVx7LOF|Fw^JQY){?x{IKYjdo>95MLZwEAUq|+ul_ZMA%Q6BuNO=+3K44s%q>ps3;
z_8~$h+E{RHiizz*o#e6=skV2Q*nJROr)jA>$qM9mH4MN1@;WxxzU-Zk>h$-V_qT1j
z+uyu7?c6?f<JtSt`SP}}2>oBO+wtr26r1lV0bf<iFYQ>ne}-eY?qqYbUD<zrcc0%i
z;l)=8u}c>P<uBK6GZj?(C&js2|54B1^ZR*iYV^y?tmdx^sxS7sXxRPs<pq_vg&tF8
zpKX{O6U#ZLq;0qVm%0OYToy97FP*hNvc_wDk^XJgmn+>Xs(!}LDJr{r{N<~|j-MQs
zZ_4N3KgPZ;Hp?*RVP<ysqoX>>&J!iKoSM1k;8!o>7vIG6%MNY#{Bx)%`fy^l!L@a4
z>ok{YD^1;ME%$8EuLg11mER_MKmB+9*LU#tpa$?*nu83ZRc8ODKlk6}73}{P->IFn
zTm0sO%kp2;`>vM1m|1eraOdV-|BdzD{af0-{fSPw?Gul3Q*URb%6FRLuk@q7KmPNY
z^}k-xR>$Z2XYV{Pd-KEJZ=^Zn%NloYZ)QImdg@w*NUg!AnkDc5nEk8n4L+8$*7M8j
zpUWAumw%M+Su$zAZqB~fX7Ap)JUw(o<WRRA>z^rHH;&uCHe>w|yYA22)n~Tq#6`7P
z%;-O_KlS{xO({bAmmN7Y>+su6zYligD{gL9etb0M+qP|1*B#<BKRmvX7cuQyNnCEb
z$!*Qo%R{tkJ(u?XF+uX|0R|Sg_>&g@T*6(gqZQ)bJ?2^SmSM|-mK%-hcvt0E``xz^
zn6LM1^UtsQr#Dv?&)l?GL1?L=xn?wXg4coL>&sT=ewbRlCHls1pX8E0nF|~JwEsO6
znO}ZcN>Eo@^83>C#m;wbO0H+O<gSm(*}?m-Z}HVf^JOe%O-kPU^yIGApT@6ummhyN
z^OSn@_k^D}w(Y$5JRm}@|Jr964!%$Fk4ra9^7^-J#m{Bg4bgcwHk(9m$$PZEccX5)
z@5K#YSuQ@W%ZXtBGdC~nWXJjSn~i7QIC-@4c#!z}aQlwl{A(L#t-7({pWV;W?svD#
zH?H?N^GZ~I*^*gvz6X}Sef{@U{;s>beIDlJ6>SW9xp?0v$h=@j11JF;5tMi$QW~S@
z{4?YB;#+<}_A5)GYi}J2i{Ac$;qW}p^NVi3ynpf2U9MgBwntbW-hbMdvaKSSVdpEi
zJn`QWqRq!Gt^eumV*8lN9sX8_H98^hT}Ybd&rAGwn=($HD+~K|CVYpgM(qvz;|Fi6
zM?AaTzx;kRcfxba8<hg{6Yf4fKfz#i>(T$`y<;SObuOPfa$?@*=aw>IeYv5(Wkl6(
zGhI6u|KWPojm`g#h(*o5Vb#~n_q3{&e@ARjOh(cBZ5%)Dbl=g7nr}5fy{_g?WK>Tl
zZ&&Zhr}18T>s>YmoxCriXMOo`C)+y}*L7tAk4tuO+_Y5w|68{_?O5c|bt2aGPiC~f
z*{(kKQH9y-yyw&Je6OE#*1jP-W}E6N-<%n9kA7rgzjc3EQt*k$e@mYqvy(rw{QJ}i
zPv1Hm-uvfWz|Sq8W6u<QxM1s$5cSDY?bYq?2K(>-n-Xnpe<-(Hf0@y#O*zTTn{#f=
zRNJO}vvvNP{XEtu|2&@0T=yeX?o0&VopbMFv}&)^zpH}G7l8*}_kt4VhPlmkM-D#x
zq<tsh`nKM$N6WN-$xQA4cP;2g;qTqI7QKqM_cEWD|6#+P+jkPKuq{zD%dUB}(k7>O
z^ZAd=HPJ2qeEFpEcT8%&m>pYFy*={Fi{>9n{yXlzUFsLPYFX0b-_M>G6qNt{euvNH
zV&U6+Y$wd?FP=SdyTLwk<5mUMR-5Gu5AK}(bf0ah>fuwr{%pU?@b%k!Yt=J{eEck%
zciYt7+<9xqgoAsRPx?Q-{*7Pw_So%jo}T`f|M+2(`EJ==e>SZDe@C|C$NBb5&PS)8
z#Gbyh=<n(C#q)nxn?F4#HvRVZ2V18-3^ZD^=l%c2=gVt)Z!`bDb~XE2&UWW($L-GM
z=0w_CCln~WT%EtV?zpMw{Dn;a#PjC*96dTcS^OhQMcw+v=c7N)KN_DK++01gU-rrm
z?r%HSHhM1YfAsk>(vX9PgTmVONeVLBVQUUNI@&F4D>c)gxH|Itr0SbKTi;$t*7Hsa
zl<?zxTVnTl{k9#BKLzJp{C2nCm)7xf>o*9m%?<lC;qcu`&VPp@?R$5M*S<@Z*%GLz
z`Mc@1;i)@o(#}83`RJsj_LoQR{Nv))*XPfFZ9gwQ?8{X#rt;FAto!%P_WklX<^5UK
zGuNEAY~6MAx%=fT<2jSO{yob}`<tAtcg8FE57TAg>&I^8v+JEp-hacVRx4?FbAD3Q
z?atF>@ltt)*KO`!J$-J~kNWqI7xsk+=`9bM+4JS<_A-G7v(oSU=iPkbXujP9pL?B;
zmRxf0yri9Tg(C;DYG97B=jXUit)%lli~c{^zIE%urAt$9{J-}8>-~Ng-mn><tln{;
zLrCI9{@)kTMt`2&ev~Br;dZvlQMT33l#<q`92McZ{ZVsj?EEuTMOx|W*oBJAH#WX=
zos;;^U+|^2y!G!Siz8_V?+04QSgM{=p8Ci4pl8_0jo<jEIf}*3cqIN#eO+zQ!v4GN
zr%%Y=aqPYJeP2`J%J~%+o)+eCbydf|HCmdqL!|q~w56BaFTO0%XHuG=)L3@K_Gagz
z$>|OI^@Kp}vl$au+HU$7C`$JFEY5kjD|dGGI@7eBKR>9uEt7e=>pRDdDuLpIzutY#
zdmX!Z%8hHM>wlRhq)(JFyf168<9pVUNiGR7f*Ey1(plHac35qH@A8xRw&0<>D|Q=r
zubvgV*V@*;ec>0+fA_h(A1}Tg@YTtpw>9^6XV?CG=UegH7ruD-_Q8J#|ETyoeM)VS
z6-Os;nG_^6{kiR<na0)uU%qd<_a%dWVcXXYUo!bGFl|wm>3=%4?eo_3t#yAR-yc)I
zz2`^i`U^q#wXd;hNp891eegx=B5Ba<numkev5eAJzA+8eH>-Dgi^WdS+g+8Cw#<EX
z?&Pg8n@eK-Sd%}itt-}eS|z>f&)(-5+fUrmQL|swJ;&cLQgY>8(41A@(dhDa<q!Lo
z8oxPv`uFMht?aTI%fG*Rd-vgob+Id!?kl+ZdZNqL|0z%Atb9><z9gg|HfEuwN>BK$
zOTC|xmoI+4X61={mpWI8ublBERL+}g-RncOI?D@{?*?j~)wU`)dBx|Mwe;%rFAIK1
zE??2o6wAS8G~<2A8!e6nKQ63{`?KtLdE&`+COMX+R$cs^MN&6p4qXb6TIIh)H55Gk
zD?G#DO8h>~JE!(u+`?M2f7i$Q%5z6<Pu6}Lq$QbOWRTT;E4c8mmtOf%DP5+r35#{t
zZHqnn=15iXOe67?Kh=58$>wdjwXn!FVGBn|JNLI^-|}QRbF6x9=UlhF$?JFe!JdLC
z7pkIIjV>1yx{J@+$z3Klb%NBg^_J&ua&Y<2>$<gl#*WLHT)Meew4SjB6lPiJib!%4
z-4qd;db~zz+XsKE%`0oSGP@QpFLeLB@`lmbr?YeS&)N4;MVt3~>#l&^N-cB#E?-b!
zHveMR&ON=>MW6TA-z`=Y(V5Y<=cZ)b+URR#5BFFGryTu|@xqtIB|!-^w;Qu}_x;;J
zw->%Bi853Xp4{-(uI!WKJ5$5x6=9tRP6#~EzZClV<+LNyPio~q=8w`{p?>Gk$G<<L
zs|v0&X09mizxah~t+2bl^TE}-1KiD*b~*2GXStm6d+TgLhkHEV7ru))R=bZm^R;z>
z_c@U%a}7ifwmdcb7ri_1=FC1fE#;&9rB!;tH-EFwN!n1z{w&BcGScAgX$zO_E4!Ir
zo;b;LDn85o<~x%qve%r=^`q=}T@ILYua&jedgD{u&3md^S3DPayL^7!b?qu~M!^{;
zSf1#aPOJ{k1&?okbZKDzFuRyJW07~zWyzTq`ftQU7j0FnkFydBYSg%4&bxMAqS6yh
z>FIm6a8KPL6(e0Xlk1}EsrdHBb$nZb5;r(oJKtmsF}xppJbjVnj@xVhzF55H!Rpv8
zGfEae>h!zQE@zTkHccS<ec+cI@pp6Vd4HyDT#zDfENr^`yvsvQ<BJ6b0e`KGpYCTc
zU96?|M$e{FDlb`1_jXK8HUG!W;Bf;rD@IL8;l1rw?LftaL_do~K>xG@jh8QMDN)<B
zvZA7`r*!U)POsy)SR+@&OlV9kiOk~kanuyPdb5h#>+)m8Gm*}!kG~2mv)#sgc8e9u
zv$TaXjvZTOcHjS0_bW}dcX{Sgam$}Rd7v3lcP7NfquF(;?z3gwA+E{l*JD@$iX_Zm
zb9f7j&zo-l*hgD8dZ$bZSL`09XV0$oww>Lx<vm+?vZ8}`yMEf)380qM0T*?J*>7Fm
zCvNozjZGgDY|N2f@_Uk8>3LI;Z|9GMxtZj@IQE?XjFa9}w!Dk(;Y(#RBF-=F>O1f7
zakFB~y+e)lX;x<Q9CaICUSqpm@FV%$oDCBm@*Zas_><25O(UPZeDk8&!DkIG+k9Vk
zNO|{$FO^Yd^IjhF)ycfMS~2AE+-%X$H%g!RJdr;<|Kjo&ZK5Ve)q0;6I+~weZMlWJ
zIBdtKJevfrPlvqR^8BRM#qO3C4M_kWhhQ*~vuEz%A8JOaTfrmcZW9{#9(yxvpR4B=
znYebzcf-Rw9BR&gxX01FKXZAdl6Ky`b9`Q=y~@j^-mdtQZOtWid1}`G8SKsa(VC#)
z{sa*Yo)U@qcb2*>3=UZWsf0L$Z#W;^@X2C@zl0r6X=k{>o=1;FdAQFw9o;CYk$>yy
zoqcT!Gg85aDkM*IxU=PS#F|B~RKRNs6qtlN4(yT4m}TC0Yw<ErFgq|YZAwvTSfl_-
z5s*P@5ZQPTlv69pyfmTupo1e58XBhbump&}jDrdrR4@e@v7Pq=yBWNKzy(YS2~3zY
zk)f*z!h@4+{tjNp9^BMi3h_{eV8(lgg2mQ1tGBG0P_#4b`E{o?<s3E(YTk35&a2g)
zx%k-b3tyg;y)P+Qosd!d`@^-bYs<F0^Vs`wVR+esZ8!NWCG%c7z0kG3IJaifO7X{S
z6<yV@qisCnl$ew*=z~@)Ji6!%_Fm&g4}~oYWsB!OWvFP;60b?L?)txr_o@H;F5QLM
z;#v}MyU(%Bw2}SOn459y;i8sndG0TTt&<<S*H_I|uU-E#VXt+-XZ?7`TfMv5ay^pg
z{j9mUb((q;|Mr$^Ta(Wf*UhYbe(%>EKAkM)qVx!vYsIeCv)TlUE_1(KQKwp}s$7s@
zC3SuK;>6-tnZNVa+P-ws-MQt%?~or~4tV)omilyKkF=_PVBj13WLwcjPf!Rg`On1x
z?ql>gGri1=TN=H6tMU%Zybn2vTO^J|b34sG+a+K>;mwyvZs(KQ<8lt)3Ev&K)1qP3
zpG?C7Df#=ovn7OHy?a>Azy4x>wZNCJ%;(D5-(2~an^u?@yXJ;-+Ja|iBzIh%<kPt%
zJN0Y6oe8&Zy080r$;*L78uC$9vm>`}I})AqD>q(-d-FVly;nc)c@ba3U9UPXkYlQJ
z!_?(xTohvVGF)caWp&YO-o>6h$MYvX&n~plz3)=E_FS6bgP$$amg}!g5q`43R%tFr
z?&70MPZwryt)9FlbHy3o!<W)0$=urh-s$RL>q$W@d+hGaZM#%E*`m>Q&0~>Gf_BQ`
z2amkh_20hmT(F0*efSE{N{qn&SJjJ*ubM%kveSJ5yQ}}!#Tl*~OB1`D3sl!K_P$+F
zwUYVryZdd^K1l3%*_k_I+al(vt8ZuOW;kC+cypum)BblZnrpd><!(3b3eVYayK~o9
z+Z`2QR<km4Gj0e-ZfU=kdwfz~iOmlFsXZ?W3z;^gWzPI|f$xcVo6Tw0BbS#~_cyLL
zk1$=T*}UFow^6<Kc`MP)wM);pP58gUczT5Fn%dMgo42mdoGt1nzWjLX?^6=yYZY^%
zDzn+U<dkM#RXme8+bQwrvD3{DMHAijmR2tnHcwrqe1CIN#J<dVP8(Jfs-HUCBXxLM
z%d_Ptf3D;UkvQM>cAf9~w+>RD*Q#vi@L#ZX=h>?>)dV+BN~!)@AU4PHeEEVB*53!W
zOT2yIV0ilU{`-Zix!tzxI52VMjvbr1_kP`~^-XoA?TY@Z48J>OHeNa!dBWDH;S+0Q
z?U7EF=lWa=66E}I?Nud3oB!Upc=@+%&yz*gf-_`5(~W&~VcOvGhe>Dw_t}}7FNREL
zynX+U@6pD~XN-+D{JOy~O@Ch3?H}CX+s{pDxtnpvEBoNV;6PXJL$8`GxqY85{<-t+
zk2nS9Ql98)hJt_I%O=ifW!f=!`!l00Q<zJhFA_fV$@FeS<tv{jku93%CM9jJ^_G&l
zXDn@7^Yr{XYcZq7)ln-v{!DHD^1J-Yx^@QkKczYGe^<^taWnH2=iSW_?bgrzzaI)e
z@9F$_^%{+}EK6nf<fmAczUO=}txxYt!M8n?zT!;9%NES5d}B4^>sJwFzIQW^_of6E
zKQp;wExMxOTqL{G?y3zrQExUJIQFt!Hd}1Q%?MlB4^w)|v}E&{_~q<*O}&>rIMtVT
zWv?4I%hX9z-Thskb~3J6qO{HCO;DQG?YZ1BbHj^r?wzWd@%!3O*~}Y1)=93gHe<e@
z{D13=sSP?ltNe@Zc-=q8^=s0^PNy*aEB7x6MH!r#tNZ_;-<{+8bRN|HoLs1vUsrd}
zl)3Tdm8u!rHOrY#@m!uDVYvGL3EgEa8{Y_hI~}UKd(ZD@8{U~GNOmbO3AZ@>*#DU&
zvv(G_a91+;$#KTxcx8w|leN)=y^Ez)Wj0KIH~C$p_NP6OpEWhKUp)EM#J6PcEk|uv
zwpD*Uvwww5wSC}LKY#wLV~v}N8>4onsC|-5FTHJcrTClO?wyB=Cu`MYvY!bE`0QnU
zch({12Osn^JCbiE=-2Yyi1aIa|NKPn*+zHkzc&{AoVIxR!Z!u$H^sTEKE5e)V&j^n
zAMb3oIH7l<koDPIo72G+Il3pbmM9<ZHWqE&?6hL}p@dYCx9=aZEpyd$J@fch0{g7P
zQ+2({yQV%rBwEJ)X%m-r%+8w+t8S=zv9FBsovy-`y1C=chTk(H-9N>9yX#Gz9Mf<3
zIc?S-=EGk<?5t+}vY_eOtgw6Wp5N@II9RRK{9Pp&RDXI_SJ&gq0e-Hlr<@A8`Z0Kd
zZG+Q<Dn;hyC(fQebS&34L#e+la;C<4PxrF*tr-u#bSW|kH#%II-`#mZW-Ig<picq?
z%$Yea4&9yOdVcQ3#$D!B8~*&bsbR0m{qs+2ar4izD>hd<n^euL{f;hJdwO=|ceXQ^
zjrT_Wniafk(US>2ziwVWb+BaXywK$B+gDgmxZ3;XuknW;2j_fMiwTw~vh`-W+i5W)
zFCzQeBtH|Dm;1J^m-eZy6);Zt?)2l?t3B<zufF@>aKAt8y6vUn1*aZZt<U=qvm`5`
z?7@N(9p~-Eb6;^Syd{=*`R-}9|I_zBy0f=w?V1di^n+*FS@)EMpI=`3U_wWc@RupA
zFT7NCrSF!Eas1p98KuR4-sNCp@P$2n(<cATIBAiq#<g?G(Ms)|Te(aB8)*lsN3B>8
z8MR$cxp$iC>1M8Ljx!$~eO7ZLUA8LW?2GsnH_q}ZsH>k1{!#R{?!L$GU;fhHOFrwF
z?2}l_cg*(v`^P;xPa<yq(M$DTtlIVcT3#oIj~Y{8J+FH3=Br_llKP`xf+G7H)e_I0
z{k%JM%?~jC2oaIL(06$LQ>WJS##SEv%^P($1z0R+ZnxjUdpaj8H_NK)dEmkmClAf#
zzbVC=pUBL9FL<JV{oF}^c&-$MFWtg>rukh+Z~Jb>q;;vTna_UpU1$uRIM<L>^>{Ha
z<8{ZFt@j>Xs(n49quT$^f=kz&d>+5qrLODay!zBS<IOgy4{GYxJ<ArAkK1`)B;?)c
z#+oTX4EYPKUvIMzUK+D};xSX{XMS5Jma?V4&o0^#vG?NE$EPf3{@=gXxUqkg&G-Mt
zk!r#UiA)-a{2CHss&1MAYd3MOSesP6dds${_g0%lt&P}v^xL&x>)(oQ@4s_9ZfVx~
zi`Tkh|1H`cc7*kUQlKG=>){}UH;$1`PA5|K?|;6hc!sL+<lI9(YWu%`o;kDl-e<k@
zzilU<{B3>y^StC<e>RJ!7t0^)J@{jaE1%PhlA}NW?5SGQ>`-ty&$uzp)b8r1jvapf
z)86DpaP$Y=j52ZAbgaeoM(bf|)$F}5{jX1yk<giBtrTgq^j7@btMO)sR-63Gv^%u$
z*(1M%^7p2^c593OCBEF0Sid!;@@D)^?lZ?F7?X}=onqUQ-1y_Iz+}_hj~q)BeR9?a
zwld~!NnXxV{&QB9$lu<VI~-1&E%n+q-+h(r-OU=DCDlxQX-fhYYv}1s`}5~dK>G}L
zCKU%J6#;h^J~<nWyzS94eC=PkQfJ9se)4~Ed}yd@YHDiW|F!l@|JxTlSJs|zzuqaY
zcgyDd0_7DBosKJfUr%e_sLQ1jwm(+$^xe!&Pv$i2Sa!|VidD7i%C@@9O%+amZkBPi
zo!9eFc*n8jTlD(tB{Mu4SU_k&wNS?Ern_bRe5+LTSljqidU6934Bs*>-*GCtw)_0;
zvum@pR*0`yBVoCNfk9)rr;B6A0?nCBi?cs$3Ke=G#KbfGmC%};DPXf2SavBkrcBp4
zCcEm9?oPKa6DJ9NOcQ;p$SBm|(lD>bqokq-st#mx1B=IkyDS<;w|aX-p?rvw8d#JB
z7o6yDX+Mr8e9N~%Y4P0?5sj#(C<rlj5jH%@Z^1UdQ~WcQM;^a3ZJX2rv-h75<n>oX
z*__?Iwzp)1%&&D8i_VK=>Y93;WIw*Rn)|l0#AegH*C#vHN?v&NvCDbuJ@uW}Prv%!
z=k2=MG@^mULqUv1!zjsdZtWxn&It^hC0z~d{(IzFmV3-j4=Z1_a>CTp_O^PTKbX8~
zmA}R!m%nDB>xuYntL1)v-SlRym*z?{R~zg8(@o#~Sf+iy|9efGSnkT^yQM)p?uvPQ
z-BeS$^lQjFn=PyTpU1VS`?_0KmR<F_rndY1hqd83tELsN{!sE^n@y;7jWMJ9sROGH
zNR_|!3}a-ywUxQ7LTYznpZZkm*($Gd-*aY!TkH5Rsa&|qqG7aamceaxMj-`8p$@x7
zmCr1nyG})E+KZS}UbBg@<o_mC!M9Re@kdrwbLh53x1L9R$XPqdv3hn&;XdzaPnNRZ
zh}*I*PR^lk`AW(6XMcRLzoYYXo85}F;{Lj~)`awP=UmKd|2plE<ld*1YbU*09nSb!
zUUr_Es&TdF=c9X5{uRhv`IR-fPxVH!aAA$3&Xww>Us=zm{`>#YwBFx9xnJj={-(qt
z`Hl0ZJZ${CDE08CEx)rx&I?vYA8)IDUwP8f+<Dr0kExdX6sxyOEpf7yanH%P_lD!~
z>J>Rc=Eo9mPp@6)EqA;#uJAzlzo?SKJVFYMGXy^TKiS#I_y(3Vt=twwK3lhb>dvEb
zkq^FFOv!IBU$7!<TF&apU(B_ao>{Hwb#L{QFORGuW1_h89j8voZog`}so*JRWW(w=
zk=d(Lf6C2$V|L=x-LplpZj+`QxV@ojfBvI2{&VL=O;=g{%PEEBY<Kh9aDVS#v$9TV
ze~OsbeO7&|Z!q`!ZqvlDi&J{SyXqFzuH~QoEU|{$?wiLw`!iRowmKePK95m0-gD`<
z9)abhX*H}GuOr^>-BiCM>e)KR*+Km&i9T}cH*CD+@J~s9@#Jl9GbgYIO;UNkM4Wk^
z)Q$HSHr@N@bCWHS@x6ByXGLAo_v;#`uQ@Nt`S$5nIP*OL0kauVqN)E@hE3a7=(Ne}
zbphW)*;@%VZVS)P&#&RWzkc$2Cxe?x&POyqZ*rOT?(1Cj|8YBfnN$R<nM5QvCZC_@
z3C@jHt_q%AX(?VOr=(OqE3j4DvSZd=>qxKTyPw>vS#Hz&zu<KF%O{)Ty7~@A8(h)!
ze&DGgJ4;2+=a+f@s_FkrR3B?q=ijWHbt3e32<MEGAB=BYnXvHXj0NlMmV}?QEqXsq
z?Ph_a{K?SS!M*CP=7-hW*UX!%dA8zdYMZ{QrqcH5jvi~)h#jAOb>CNk86WhI{|Jkj
zpmb9`WKO~*e(8DktEW$mpY?RYqP+$p;s3-Hj=W^}71_7E)IRRIMk`0)tvyQvV<J~>
zV#>Y3)4F$>fm4OptsU|@T<J?rulAehI@{;M%;n1>pDkhc<=(Jc%U(FuI92qNnAYNB
zYA5Y%UHJ}N-ds_$DW>zE*Q&Wj_Qw^=-<wVTyXdWN(cMhHlYGWG=dW4q)YOcemHzNg
zVvV+4``%YSIZOX#Wv2=r3%3$3J5zLWamHnPpL4bfobwhX2nsJtPMgfYImd|UM`p4T
zI2S53=J_lrpA^H{7#KHK=iMu{nf;u<oA!BL3;h!F`c>^J5uZ#4o%*>J1xJ7H>Pd;5
z^-NaZDVOV>QTV_5Hzf(5vYZx}`Mg!G)Ci6W)znrny0gP+ePYn%ZK2&(TwLF;D6Qe#
zoacM*{}Q>F9{b9ta&ON#+UEr;J&0X@=(qnQ+lc<ZKVFn*O1$h|7-aoy$>F6BeV?7O
z%{jcJ-fP=SgYuv@)ru0`6K<ZL{9ep8(mkxKtst?be<!m~WcaT68cx#X)32XQTfeb*
z@*d%mw{{AzPCVId+#{&9OKwHRl%pqC1{JPw6q{o1;g}!4d!3=*PWg3<MXmi$7?teH
z*tGGMbxTA4rp0HC1fQSv+8dmj7{uJ-WaM<jX^#DeLRD4Ib*+aLZ{Ew=$EImeqqD=6
z>7(<4qw}-=%y9FD)&~kgjK&kE{q6lU$>Krfipfvso1fmBo_^}k$;?UZ{|nNL;<Z~}
zOQ)O)`Ksk05n_7kQ|*kMuj&uPX<iHcb?D>{A$uLxM2ina3iUIeUR|+WOk($?4SWd>
zo7PCr%4vPMqTs|v8%e%G#gg=|etWC#E37^(xbN!u)fQLYG;r=t%P=zA&ar(JzhPir
zp#4c9-P5|ak8n-Ya=E|mpl8JU3n@;^rEE8ai03KaIn5iKcPrV3`>CkGmF1C7E*{j&
zzT<t~Yhvc%nn%m-L}e%Gh#Fkoax*I9(O0&E&5BpQ8p$SHbq<;^{gL{TOG^?qIP2YQ
zE7hwFR=F-#bgQE_S^NErqJ<)6a))>E+P0Z0OEFEAefKAmBQkihh^*tyV{DpEk^h%G
zTIXsNq%AtNY`JcqQ8SCj0}+7_zfEme_ip3{mHVKgU#PKj#)k99@6L#GuJ(Vv!{DZC
z&A-g8MxT;(LViS~D1G7<xT`!#?eeBqDNkm3&0Kuw&`g!jZ4Ln`%TIpJF6nLCx`9zR
zfBBPxx`y`pk<%XXx%K_cV15|lsvJ9Q$BB!}CYUAHwm&afzN65!{@=|~BmUP4dH2_*
z3hpyK_xi5G&Ihl5>=ILwUFa32<t$qfnw7RBGU<WV8~vl%%6#{(*@udKZ*KS~%$lTI
z(w_TMa}&dB6Pbw3iX6+W7-p;TF7&?{u_i9%SYdQnm#LlPgDLL!8^5zX4i>YF@Lr^S
z?)mepr<vAFFL+}nlykM>&QebInC0r;+qhVA(z63qL}R+QUp?_iS4sNf{lE(CkeW3`
zrY98gcV}%rDmjnu`wfwqoA<}PlfCP`Iy&<+`&6TED{j{Dn#HvXtUKhHxhaePT5iQn
zd;43eH%}&>i;vo+Bir-u+U$>+-mJ?kU+;Zl+_C#$<K>xWqq9<TYP(G0MP|GY@13pU
zz!d9q;9`%+s{Tihl1`pK&tKY632Ns#FcrEycyO@!QQ7XJ4+|pJ2P}JO==;z9XJ}|>
zP*|AQ*ZaSMfBk0;-?p|w^*`rM(@W>}J)E?gYs!`t=650w2iSv}Xd8dM^@@DwH(B-h
z3h70D)7E`CF{OLsG8NWZwe80i1)eesIelVrM0R7TUar?xi~7vD0!$Hi-bLJ3aZgYG
zQ5hnYA}Ka?I)C{|CvTChCxyh67=<#_8?V*9{yK|K7}S~pHE8^qPR>}c&FuTz3nwmQ
z#BlM*`bgYfbRg*#t6$;N>s8|OljpWu>4hBMs%7xt;ZFvp$Hi-sE%)~_Ik#VuY+T6w
zuv_}+(T^|dn4G0^r`c4PacLNcunBV>>2XlklRt7Mt;`49<aJ<Dxgg3isqnbQorR}V
zT4H^>OQP2}Fc+yOp7l-$6MwJxC3{-FZRdL9mik`qsqeK9>Ix||u2XmLce`$!#t#Wh
zD0yKqM?lJ#6_?K*gtW*efZJsg9Igu|><EFWzVMmjPEG5Hul7PG_iyk%78f3_Ze2Fb
zQ`c^06&vI7%bMvuX9WMIC@~6k)H8`leys1yPy~fXi9OTN*DiVcxRjE!rg!wd6_9A&
zym@K<{cY<dU(^X?ZnSSqKCY#kIJ5ei#Q&VU$qbxFG#T5xkG||&7zuLS1Ob+ujSJ`X
zKB{-g^>}r1!GR8`b9omh%*(G@x9jN2MH5vL1Q)0`$G03&`EYKvk~@EQ%*VCo`rpr!
z{(5m&Zuaw&qDsu|Th{7$tI9P#uDJ4PPqE9sip~@I^E~!^EKPIScH@Q8dAD?*<XCVf
zZ+s!VKwbHl&&{MYoF)$!27dn^@PvPVXP@fvzK)u<^ao+`;vcWL)V0=aOMP8dvw^LN
zWAf$yl{>y}(h)q)Qowxv@xAw+GSQO3mvc4>rk;26Iez3Eq%9C7ut0q=t58}=Hq-IG
zu0OxzCMvhP{QA=SE<o<*Vh_1Tr*|t|eR%QEeA$KxE8lcoyQ#)`M4mA^=fY;e`sZz8
z6B#%sIEZjum@LTJk)y=N@#in=#QYeAqMH^I_v>~uH#^O^a788PIcMPl*~qB<w)ZB@
zdi8B;c(BQn<+`4>Zd*UR*`k^`JM?&z{>mP{gV{^w$Ii98eZB1W)oBGfw~Os|Rr%cA
zSR0*FqJG|Osk_<x$FXa7J-*&+2C8$dm_#I(_nB6|%3@+>@Af(L*64imjgHb=;cB1s
z;|(7A@7~sV=U3>&naZxq9)EqCspOjfQ|HgkuWEa|i{t9fUAg^X-TNJRw!i1Qx%i$J
zoLSp;LiT>fPQNE7(wDtU-Y;--r>o2Dy(wF6UNdu2jm<CmE5pHE5g?{~<jtv0rOj@M
zv5xaj%%9H_>ip!W(?t1N>9RSRM$D=Et-VuD`n#UmwoT{%_4_jo401mUP5J+cMR2P>
zYghfP@U&ZdGBi%j(KX85u`&C#`@SIlJA$*$>gSvOJaxieGuf6st9fq8obO@>#0>T@
zCC{0sT=dpe>HXSG-ZRc`+fc)r^zGM9C2@Xd`^hd>_O0qVP`2ZG8Pi-r>E5qF`_3zi
zPUUU<EBjGFKF;a?l?e5x)dAaX{kOiMAh&k)aXyx9!Hs`EIe*<Jw(9lLHEaBi<*jzF
zFV+41W$F_#P*(Vo!K7(h^+l%Uk-&~OQWb_DE-ev0a{Acpw-I}<Kh}DFZ?4k&eR`k%
zBr7dX{<P-XTj#ioSw1WFD+m2(JFy~W&x6{FuCLnpx_C~ANp^SEExR4DF8oVqz?#D?
zl{{)MuHRAkRJn7e$o*gXO7^uODetZ>%TZSIy!G7PUUcW%*GlaN6E74@3`wux+WlX1
z(^`@3QhSB&*d1?5<zV|d?FGx<iSs*TZs>k${$2C6{<rqT<<lj0um3qukXwGec;vU1
z6R-8V{uHkDxUUoZul0VH&9C=L={>Ez8;;LZ`*bjiV_Cd({!!Zpi#*l;ZLhid#r|(m
zkFe6?2X=zlLiLiT4o{n7xNNTYe9_AKttWQIZ&?);H`jE1LJ_}zr{1^!=W^BJ?@!(P
z=|t;{3rijc2X2s0-c_*e#E;Jg`(jsom#S!dIQP4=PE7u(ZO1kV+?oEb-NUWzgsVWN
z)wa-j;hzGJ`=>0MBla?*y`T3@!r8hN%hzWt|8veHqq}!oTVUwC39PO^-aXF#$Mepj
z^nb!~ommeios|ze74auBc6v(<N7Jm#+9RR8o3f>su>AjNW_IP|WlOzC12)msuT$i1
z9f+TnbL92QIVzD8BK1#)Uq2C=QROGR&+V^t%E`)?LHq71bAMdE)amEFM{XzIKA+N5
z{A2wV<K=ToJsVhrCNtDa3V+^H6cX#`u)gE9i&@Mr2I1=u*!y#}#AenjtG(JU;OS*%
zD*tceiTHoV@0<&EJyu?y!E)qReZnMr;W+*&TQ8s9Z_f1iQ?`P}KknRwV@o{uDznBP
zy!v@}fvT+V=P&ov;_u(D4Nf^#GV%GngDN}L>)YR%=C?w--$`T5VJk78S*BCp8_G==
zpC|P5)OHuQd8wb`e>Hp5`%IZ%$^3{_INMtH&n`iK>5Io)1=wc&`=avZRqM$g|9`!?
z(7su;Ci02zle=FhY>b{M=TOhBAi(wS?v<<GyD#=}t(;mfy7Ob+#Fd*Tbo&3du3fp@
znYB$jc8SRCdBQi`=Fhs8{3r6S>#?V^|1Os^VS2o5e$um@7oNQQy{=wrw%l*koc$tA
z1s(4rG^U+;=DDTxmqJBqoRB2f`zgx~3v}K;Y?;`_*J#$od;XzYrJGFA18>QoiZ?AH
zvc(EK?^<+hc<z>$?eaODBk(<nqpg;A(spqtCGAizwTHhqz22d7C!RlA(I}|rr1$yr
zQ#Ajc*~Wf+{VM0(;@^e7EA}s`57OtBzO4Fu4o_rXa`AWdlap57dmmNeb|%aNG$gT*
zqat00(^QSGjb&Hcf!8wv?7mn0xUMcBa`0tIg<9Uu>*@wyey~oT5p>)8Z2FS&y|<_M
zEqEXCMpz=M?np)jy8+|+gG+v`ogTey!J=ilOo!L~{99ea<otP)Ak&w(@(MLe7@HDy
zYA(GuGkd@OrWX?(8W+0nH#j@Rvg$<5tKC(6U-Dv7qiZU6m7cHfw&B@$spItFSzG2T
zyCn2EbHD#CiS8f&n<l7r2>Ch}xwOq!{B)8{aI5QN*|4&&UzK=g806KQf3n&<oBh{Z
zBj+QHp3B#<2R2Tbqw}eB%2$8ob4QlGTHiTmh1orh|H->#&lKGZI_!FMp{~J}nE#C*
zrrcQ??X!GBLv~8rlr-y<gR`eTis;{<zWn|DTazwH&HOHRXjYKR9pAH$4u<F5V|bGx
zb&*|Z;r5%yuHRv0oc~-@LM{0I?9_|5vS#jI8kkr7sG3E6z8e3nBuF={!{@;7Z0Vf>
z{gW6t8xEYW>z&bAd}#57faMRCBq^wx8icEVm}N3YGiX!(T<esUe51GVan2<sxo!=|
zpWZjP{j2Voh48s2r!#A_zqCwCJ@=_E)Va?j^TyS!+h^p)nymf1irvYUvA+7=li&N#
z?>VG%Xg{m)k8b^=E%j>G&cvt~Nj$zdeeRc;LjJZb0vk+~?(Y$JZ4>a`rp9kh&nNNQ
zOV2E?sxmRjzFZ}2wDh6pDfhj)Qf*85t7qHDCPwC0pFVFiUrKCQQ>Kj5@~W?#Il<rG
zY<v~*Cs<=zw4IUamiZ4-+6!5q7w`Yea!W!l^ke2!k!#CNblt37QscaoM{DiWXZot$
z+_rkBjOTTJnyY@Kv}#qzl<Oyat6wciP}yc4esb^eNvS7O)|)GNSnSYQ`)GoyvC$FT
zubV2fo1avea+W>adh6M@{!UX+(p<nUxZuPKNA=mxZ&euQo|)IkSyMe}@3uv@rEfM>
zm(N&RyZgb(9oNp~{;XW2W$=EBK$7|fmk0CO5`M-{+}^+HxkK<#!Ott-zc#Fl{}$bn
zviIR`<|`Lu)+jeB-2BnFeoo%qzZ$n>Q&~=&5*Pf|GJV;d&4N;_`Uke?&#vV?TE%m`
z?teUod-YuoK2h0P1-7(vhpQ%5*Sxj~nXux-g$bH_=YBY*w553G34<?-x&L=7TA8ez
z`)X@I;^LEHURp6us?k4Wd4=j0M!cHE=ga(HCx_o(fBtivcl3YR6xe%Jv-8V|Y`@LB
zy!UWbYgSl)X4bde(qW=bXHT6vrDAVyA2OBixv03f_rJ5nR$=>lA05iOW2@wP=k=?j
zAKmu)v@C!0^P<4vOg~MTdm53iwS6~=wAem;J<(XxcV6A<Fd1#%f4epZUi0&8>))$=
z_)_ZOe_1C#P20OEe3Oneb3Z%Rj<zKy`cGd_?~9#2RjGCI9;c@%sd<owZ$QciYX_!S
z&jZ#QUk8ZqHTE_A+Gg`3=ZD&xQjv$=E_RD1`_=lnZ#e!`qUo0DO{OQ4`Oh-FENRKF
zeV^CjaZuZkX|vu}o)>dhG`YGN)y0Y3$%~7A@b!YJ&@PYP$y+{8t~Xv7@Vxfq7eleh
zcm8XbB>HLzlsx=7YyWJ4<+j#mZn5jGoW~UVd|}cfC!Zwk{-4(l&gtJ4_UG!F(-*$#
z3ZMJj+Vk~WmA;*Q!Y}T+`@c4x{21Ra7<262`?-nRzVOAR`)(;dyS!@t3@f(<b00lQ
zQQvzx^`g!mzqA>=<$3a%=Xg&|F^M!_ULRGl_0pezf4{y{J)O=v-FMoalQTJHa811M
z{LxLn$TjzP{+Bt4q(WLPAxxgOr4MAxIgi*f&b{;cY6b7ti(f@|l^yuMbbF)ju_Lka
z4mV~lQA&RPY?|&3;rzG3lh>WiaGAgTpZ(^7sMbc=DiN8qCFSi^A2S6-#b=cmty>u8
zzenp+ez}DHiCa^j-N?E#^`+|ij!T7p|GPdm?P1V&jW>5XdhO@Dy9*VgwbaZUSM1q;
z>&o?7U#YI8ih=d<X@_=Pd7ZdCF@1)vsQki7ZSk3xOy$?Aew~%^%fKc2ww>YeANR_b
zwDhh_{(9rI-N75*Zpms(iY7MfKf7Yf<&BCPz`i<S&DhmbVeh;}{};=bg;`6F?kHXT
z{Z;9g>WupCZO0eO9lTc-bpFtlna>id4wi4d6n*<%yXS9ad#9HZu1CEMyY=noA>qcS
zUlgm)|G(BDQ$4p)ujg8d{w}lXiXcmtqqhb4|9RRfXWf3h|I>NX+wcB8yDX-$`k(lD
z&c+V`{+;!&So>S=X?j`iF!4A#yCk+vuj2pbU^kH)*@<tyN>^1!`hH`oz8f}iqVcVk
zx>}ZxkLHIg5#6u7=w6@qzGw9+U$(WSXI7=RTAHVw&$0h5UEM!_tzbv%j*PQva?nv~
zsm3WQwjOEoSg>2*#y`z>OeK<ej$K>1_3Q7Ht(M<&+Q&utYQzt3oBD@;JXD?JFS8z-
zb+3lAdr^DxT*h_J()mSq%1-|B{rZgbuot&FHecL!@1SQs|L@Gs6QTDHD!t#hEHC|D
z_}-@0x8^gx@@kdDMR4(-Dr>R2+t&KzvG3_!7b<_g|5($n`mE2_s_;KYdGRG1>lTmi
zrE6Q-DxUftOL}*8$K)&h8@E03s<5qE{O7mQ{^}Dp;ZE11Gk$$C-`Mr-|Kk7Bh1xgg
z&v>5r=6>si<@S#&C4Zld-SWqI=ROPRsR{|Fz9;^<9_bsAUsb+*V)BEjH?#8evv03u
zFTHz`|3TwV#b3KVNAFO5r}WvTuQpXe`^Xf%L;D5Gwx#l(U3y)jaWiAm({tGyU&#I5
z#qs}W`dOul`e@z5Kg1jsEKUq$>@8>q&ygtH;|xeS@>_CI?MG*a{LWiZm!g-Jsl1G8
z(7b$Rv)Z&f&8y$d&{=&#Vp6l`&($*;>h&*ZFGzIRzTnQEroJ!NHl0gqF}qu?Ew^I(
z9hu<sr=Es)-)T6xW3EZh%UiP_K5Ss9JTZHH`2VkA+v9(Se|Fd({*UE+^W_%nzkdur
zm*m!}b?keygnQZhYLTV~I+GX6b=-b`__N8o<8O1Dj~NTs-ut;A_Hqp$%j&=ttDisq
z!_C~E`C>{J&sPRkb>8_^A0#KnJ6hP*Y=6I^E#aqq$N6%VKi7mf7E~*oy0$MbE~+Sl
z@6bVoYx`dE-sg(noi5k8X@^I#)zcdry<Xln-<<yGP2=KgpWhy-OjlwQdLhRmv*WVI
zi3sl3?-T;}J@)wS;H2%T(8gkSKmVF7Ps@P~&MU6S@b+JN?)&CO&u+cMAk&B3jpw(%
zSaFg&?LpX<56{-vHeAq%DZU_J6zgC3j77P~X=`<Y`Ker^<6GxcalTo?fBdwZ+zY`A
zX5XjH6j1+q>4~37VnCVf?_hD??A^EaSBVrUsJ!{gUp6zN=9Tc-uPa|v9bcKKd{*}G
zoOOL$*W8=;cK!_34_dSSoR2&n^(J8Lj(xjBrW|eMUBT!7{ocOKK3^uUOcw}9w9HE3
zYjrzsaaShQT;am3um$RirRTWJy3x!r$IRkOLaEaF#K4Ojy<B&jPs-MA>)5BX)KP%z
z7uVEdb1oZg*UimZyYKIVnLAdb{>^y4V!?&w4Y&Q7-uwLC6|hIQ`>6G0_wu#3T^}7f
zwlI9l@p-1l?mblp_4Xz>%mGctZ5DPa236w<iX1QQE`m-TR_QSAw`i9;-M|dVunLf2
zZAPIECC08EjYBEHDi_{z)ck+GqxQ}FGgUo#={CH6HcVeP{o4CDXkrC3x5UMVztSQL
zS12m1U;Z}7_M(dGajDxTIiIqG)x?w<cPKkd6f9rf!Zz`MrpkiyvRQRUHQ!8#o#>##
zv~tqxoJni8uT~cAx}BUmmuG+f$*)U~s_)8?IWN0n`pWmAr|aKm?$r4As#pC<n}61>
zHSf2X{b9+8-XUq8nBn{?D=ycd(bc1Y#mb>UX)*JKh*ofJS&+?<GXM3Y<F>t<9yvT&
zeP?(1`)OZaUq9W(EA6+>Eboqns;cS^$>__TkH2K?j5Gc2|L};zlGU#dzHP}`ymxY9
zuJVtpeRtQ@{ZhBSZ|}do`R%W#eNj7KUY6SVXN$<rCG`(BdE0(_-pu>y<3|U%gSoHj
zcKmZP>~gzVkh_Pg|NKM+v4w9^<v1re{1N2%!`fy4J3|l>0sTr3rc_4CY2JudFJ@ob
zF1z#Iw(=`00(JYc_w8fjl~Q?pO>X+$d1@=0;&xUgtlDE>82d%*|JfNWuSM*Pk1FQ-
zzS2#uQjHA%KL1v@zU0Xrn>T8E+U;aG-{4rZX3Z3zC!vdaPu5Oeno;zALhg&HKi$hD
z&o^G%csi=LrBZsss#8`*>$bo2SHJT4Vdja3*ihcHpKk0Z*;y8_>gxUNcI!6g92U-b
zvh{QIX^|U7toOS7`^}>s?@n$Bma{vp>YaF8{H|sZ&)4nFF)weJthA`eNMD;eeX8I?
zT@hv3`;#ryPdQFL8@yN5{^qNV6{~XPecmR2T`4ClYI5rHCC0YBT#GDUulC=zu*anJ
z)%yBX&U#hyk5}i#3PkpP=w$&-WnY*KNgtq*rSobJ<R+-hyLCYO=RudO?ChnxcI`Uq
z{rT%nNvlNtqb#MiYI|QR@RT{`WL#SPr@Yr^@~N3KjYN{1)bCj_hBq#JS{64Y(f7jE
zeRJ2H^PBqY=FCrCb^6-cA<|X{|L^|3V_K-;rKnp)iSm{vwufhVWY_1*<!#8RE~?q(
z(;84wR=@Y^k@e-*BPUmFjm-TiU|jpvYehp)_11V%i&wli*z;y9*l2C2m2}#a<9~AP
zQn}UdTJwxI_NPRz_?THKYM=F9{+!=*ds&lhcloVz<^?Bg?h<?(%-YuH|F-&Tz+P3A
zx_{@RE*hPB{!4MCx-ZAo`;Rl+TPNMUfAY{B1xBG4W-KpGzA#(f)dm{&bnsUch)mFE
zJ$B6PwWyEF=dY5Rr}KGiRNM4?y>(ut4p-Yub=TG5kJD$od3D;a>S+ArDt42%do2$C
z+H!v%mwt!Z-d*c7L!_@YmhHP4$F_ITdZx!QJAAI3Hez|STu3-a)N$6dC%c}+n_rEH
zn`+6?xGQ_f%rmPOY}l(9<#%|i$x4rlAG0H_#GiVt+keb!Oa0*sA(7D+GdhJuO{3I8
zxJ>Ot)wBAIUOa!gp!90n=POs6zuc;HYgt+Dd_1K;KW2W)O@_oJiw=re)+$E45m{w#
zE4RviH=n&{1IwfN47QT+!PqYvO!G9>cwZBk<7J`z<<<YYi!b?gaq-^Y`TmT_>#SW>
zdh?Ek{?vKDB+^!D*0Y)ypBY-1<X80uJdHXXe7<>~*Tc#goF5Y^bsntzA+j*)ACrSE
zL;r!`Md4q|4_7a|$7G%(H!01A`;}zC`=)Cb_sE*2$!LXaiD9)Xz4SjYbn+X=+OykF
zw`|&I`}p#vvgq=>j}hHxLreCsAAD@TZz9L-poa^-Wd|KhTpsXu<=s~+FCH<KG}Ek`
z<nUcd;FpoxcPZwzs^DVMLxD+kzUk>Z2PgiwwUpVX{qUc&zn9l08_8nBhyM((arGSE
z#WVLp-_c#{zTf)`PwH~WRz3a9roHC5d2;Nh+6v2kb_T9$2VXB#bleq|yro>Xx&HRI
zvK3~>z7(AjH<);xbMv>A!cUR~EGAw$v3>QLeOHPXGC3YzaOLo#IJU0>H?qa{O_{25
zJ)!q-MFooq%bVqkC%GQ~?#{8Y^S#{mT>-OA{aL5>y*F%$SUF<{XL9iS=DxtmT#fYy
zW+%Rnp6Qss@R)eWlPBw9!+r-dZoafT&ZY9!wwFJ)*o(?<-l*pM^F<VQbxoP{zvnJ*
zuYKf=4NhI_Z+TPE+@pbI7cV3Gom2ZxbJnGai;H{L)$NPtGlz^WKbqK}S5mh7?jqs$
z1(Wlw@BdfdziO4&sZ*yG{foZ8^1r<Ms-qkCdG?(<Cs59E<Ncn`eM^=u^(@-NdG+EV
zt7C`T`A<JNIa$^Cvd@RNTSfoPWBeMC(Q!pmK&Z^4|JwDfEbb2@Kj^Ri8ftT6VNjG`
z@D8&tulBa-t}H*ox8KOL=6#vu+xWL1-k;y*`1?*<a+&nQU)?7A3d&ZeAIQ6&9{M1x
zpng~W_04a$zuk74?R$FvQN881H&S!oPt0wf`@Y`qP2HB950#u-rd6vrFl|)0a4X-|
z)lKId*KZX@A%#W_ArF~}f%>QKtq{C^BhDz_BgNk>HFfEm`}_AF-PQB&@9)zG8krAw
zt<^|M4+c#ZTv*JxMa@X*f7kbn5*ZtC9dKZ!>IALN=|A6DiLA{38gk=am&a4+Vj2ZA
zmK`6g&F<XP2CIb3c`$IQ=rDHmwAgNykw6hX(#GKGma}7XIC!Q2oDdZlg*+mdL?k(@
zvn&lzggbZ{yLxUEq^}3L$^kZAGhqXZhLO;>D@6$?!UEEubpsF2#X({d)K~zGNF{Ox
zq^P`E`Sbu(0KBNcL%|HRcINQhy`Uls=Hv+uhlCcK@VF6tx)C&2fDq2%2uL~7W?c=*
zIM7x`V~eW8#EBc0Ph(bwc>^TVctc>pi4NZKZ(cC>f*sE3-JqnL=&#G}h9bOC(P5&X
z^t(4x!Sz4HZ4E3!(->Uc4$X_=LtU<v<lLa7Odz0-v^89QIi;(s>qZGIBzDbd_;>7e
ze(jPeLN68ip+0k{=IoI)cH5SBSIfHWO-6p`G)NQb1sh99!i)UcB`y;MJNclhx6E$%
z_j#s4qSNlz8=1h->F`J(VMoZLIo^FOC@z20#Ng@{Glxye5yhLGAeR@OQ+0Pj5iWFW
zP*T?OW9|h796S&kk0?4!oM`cUlCmOP43vy_C^$?M6kp!x1{q#}k`9jq7M$>yQ+#qF
zQ~(lf4l$r;=)UZrj2iES904gR=XO5vKo!;l#qiP01%fC^YJvqzkP`3H2M3!c@_mM+
zV+R=l35$Y+_BAiAub)3<>eSK|dfKocRbdizZM*%pFJwCU!ZD8ptc@K?haVPfS#f{|
zC5eM(#9bPcl!avFP?8a&P=-09-k&^kqcD`f0WW34p}ec7OgWhq)%Zpa77Zh%iw_Oa
zgv*2%oXEgxc=_}$tSjH<VK-f=%4pW?*~(X+qS?SGl;PMguSd*d25M4Jxgg1u=-PJq
z<r|;fYrMh9;Q}wmhwb~M=cvr`0P*imXkb<hR7_s<>eZ_!KR!ObTi{_b6O_uT#2V}V
z{wl3F@GIJX;l;$7HDKi`0&NZv69t#qY(~lWpuDftxZz=tVD?7^aGHfA3^3UO%64o#
z=sK+28k80%--+l3*@j3U3OtNmJq8Igd_k^5B#;Y+Od^u9kB>zmguq!nk>ij2**V(}
VyfAReV_;xl@O1TaS?83{1OR|zTu1-_

literal 0
HcmV?d00001

diff --git a/index.rst b/index.rst
index 28fa94a09..b3ab8b26f 100644
--- a/index.rst
+++ b/index.rst
@@ -14,6 +14,7 @@
    :caption: Tutorials
 
    tutorials/tut0.rst
+   tutorials/tut1.rst
 
 .. toctree::
    :caption: Installation
diff --git a/tutorials/tut0.rst b/tutorials/tut0.rst
index 305095355..a762bc7d1 100644
--- a/tutorials/tut0.rst
+++ b/tutorials/tut0.rst
@@ -1,3 +1,5 @@
+.. _tut0:
+
 Tutorial 0 - Get it Running
 ===========================
 
diff --git a/tutorials/tut1.rst b/tutorials/tut1.rst
new file mode 100644
index 000000000..91c8976e1
--- /dev/null
+++ b/tutorials/tut1.rst
@@ -0,0 +1,245 @@
+.. _tut1:
+
+Tutorial 1 - The Golden Key
+===========================
+
+In :ref:`tut0` we created a read-only API with a single endpoint to list todos. There are many directions we can go to make this API more interesting, but one good place to start would be allowing some users to change data in addition to reading it.
+
+Step 1. Add a Trusted User
+--------------------------
+
+The previous tutorial created a :code:`web_anon` role in the database with which to execute anonymous web requests. Let's make a role called :code:`todo_user` for users who authenticate with the API. This role will have the authority to do anything to the todo list.
+
+.. code-block:: postgres
+
+  -- run this in psql using the database created
+  -- in the previous tutorial
+
+  create role todo_user nologin;
+  grant todo_user to postgres;
+
+  grant usage on schema api to todo_user;
+  grant all on api.todos to todo_user;
+  grant usage, select on sequence api.todos_id_seq to todo_user;
+
+Step 2. Make a Secret
+---------------------
+
+Clients authenticate with the API using JSON Web Tokens. These are JSON objects which are cryptographically signed using a password known to only us and the server. Because clients do not know the password, they cannot tamper with the contents of their tokens. PostgREST will detect counterfeit tokens and will reject them.
+
+Let's create a password and provide it to PostgREST. Think of a nice long one, or use a tool to generate it.
+
+.. note::
+
+  The `OpenSSL toolkit <https://www.openssl.org/>`_ provides an easy way to generate a secure password. If you have it installed, run
+
+  .. code-block:: bash
+
+    openssl rand -base64 32
+
+Open the :code:`postgrest.conf` (created in the previous tutorial) and add a line with the password:
+
+.. code-block:: ini
+
+  # add this line to postgrest.conf
+
+  jwt-secret = "<the password you created>"
+
+If the PostgREST server is still running from the previous tutorial, restart it to load the updated configuration file.
+
+Step 3. Sign a Token
+--------------------
+
+Ordinarily your own code in the database or in another server will create and sign authentication tokens, but for this tutorial we will make one "by hand." Go to `jwt.io <https://jwt.io/#debugger-io>`_ and fill in the fields like this:
+
+.. figure:: ../_static/tuts/tut1-jwt-io.png
+   :alt: jwt.io interface
+
+   How to create a token at https://jwt.io
+
+Remember to fill in the password you generated rather than the word :code:`secret`. After you have filled in the password and payload, the encoded data on the left will update. Copy the encoded token.
+
+.. note::
+
+  While the token may look well obscured, it's easy to reverse engineer the payload. The token is merely signed, not encrypted, so don't put things inside that you don't want a determined client to see.
+
+Step 4. Make a Request
+----------------------
+
+Back in the terminal, let's use :code:`curl` to add a todo. The request will include an HTTP header containing the authentication token.
+
+.. code-block:: bash
+
+  export TOKEN="<paste token here>"
+
+  curl http://localhost:3000/todos -X POST \
+       -H "Authorization: Bearer $TOKEN"   \
+       -H "Content-Type: application/json" \
+       -d '{"task": "learn how to auth"}'
+
+And now we have completed all three items in our todo list, so let's set :code:`done` to true for them all with a :code:`PATCH` request.
+
+.. code-block:: bash
+
+  curl http://localhost:3000/todos -X PATCH \
+       -H "Authorization: Bearer $TOKEN"    \
+       -H "Content-Type: application/json"  \
+       -d '{"done": true}'
+
+A request for the todos shows three of them, and all completed.
+
+.. code-block:: bash
+
+  curl http://localhost:3000/todos
+
+.. code-block:: json
+
+  [
+    {
+      "id": 1,
+      "done": true,
+      "task": "finish tutorial 0",
+      "due": null
+    },
+    {
+      "id": 2,
+      "done": true,
+      "task": "pat self on back",
+      "due": null
+    },
+    {
+      "id": 3,
+      "done": true,
+      "task": "learn how to auth",
+      "due": null
+    }
+  ]
+
+Step 4. Add Expiration
+----------------------
+
+Currently our authentication token is valid for all eternity. As long as the server continues using the same password to verify the JWT signature it will honor this token and use the :code:`todo_user` role to perform requests including it.
+
+It's better policy to include an expiration timestamp for tokens using the :code:`exp` claim. This is one of two JWT claims that PostgREST treats specially.
+
++--------------+----------------------------------------------------------------+
+| Claim        | Interpretation                                                 |
++==============+================================================================+
+| :code:`role` | The database role under which to execute SQL for API request   |
++--------------+----------------------------------------------------------------+
+| :code:`exp`  | Expiration timestamp for token, expressed in "Unix epoch time" |
++--------------+----------------------------------------------------------------+
+
+.. note::
+
+  Epoch time is defined as the number of seconds that have elapsed since 00:00:00 Coordinated Universal Time (UTC), January 1st 1970, minus the number of leap seconds that have taken place since then.
+
+To observe expiration in action, we'll add an :code:`exp` claim of five minutes in the future to our previous token. First find the epoch value of five minutes from now. In psql run this:
+
+.. code-block:: postgres
+
+  select extract(epoch from now() + '5 minutes'::interval) :: integer;
+
+Go back to jwt.io and change the payload to
+
+.. code-block:: json
+
+  {
+    "role": "todo_user",
+    "exp": "<computed epoch value>"
+  }
+
+Copy the updated token as before, and save it as a new environment variable.
+
+.. code-block:: bash
+
+  export NEW_TOKEN="<paste new token>"
+
+Try issuing this request in curl before and after the expiration time:
+
+.. code-block:: bash
+
+  curl http://localhost:3000/todos \
+       -H "Authorization: Bearer $NEW_TOKEN"
+
+After expiration, the API returns HTTP 401 Unauthorized:
+
+.. code-block:: json
+
+  {"message":"JWT expired"}
+
+Bonus Topic: Immediate Revocation
+---------------------------------
+
+Even with token expiration there are times when you may want to immediately revoke access for a specific token. For instance, suppose you learn that a disgruntled employee is up to no good and his token is still valid.
+
+To revoke a specific token we need a way to tell it apart from others. Let's add a custom :code:`email` claim that matches the email of the client issued the token.
+
+Go ahead and make a new token with the payload
+
+.. code-block:: json
+
+  {
+    "role": "todo_user",
+    "email": "disgruntled@mycompany.com"
+  }
+
+Save it to an environment variable:
+
+.. code-block:: bash
+
+  export WAYWARD_TOKEN="<paste new token>"
+
+PostgREST allows us to specify a stored procedure to run during attempted authentication. The function can do whatever it likes, including raising an exception to terminate the request.
+
+First make a new schema and add the function:
+
+.. code-block:: plpgsql
+
+  create schema auth;
+  grant usage on schema auth to web_anon, todo_user;
+
+  create or replace function auth.check_token() returns void
+    language plpgsql
+    as $$
+  begin
+    if current_setting('request.jwt.claim.email', true) =
+       'disgruntled@mycompany.com' then
+      raise insufficient_privilege
+        using hint = 'Nope, we are on to you';
+    end if;
+  end
+  $$;
+
+Next update :code:`tutorial.conf` and specify the new function:
+
+.. code-block:: ini
+
+  # add this line to postgrest.conf
+
+  pre-request = "auth.check_token"
+
+Restart PostgREST for the change to take effect. Next try making a request with our original token and then with the revoked one.
+
+.. code-block:: bash
+
+  # this request still works
+
+  curl http://localhost:3000/todos \
+       -H "Authorization: Bearer $TOKEN"
+
+  # this one is rejected
+
+  curl http://localhost:3000/todos \
+       -H "Authorization: Bearer $WAYWARD_TOKEN"
+
+The server responds with 403 Forbidden:
+
+.. code-block:: json
+
+  {
+    "hint": "Nope, we are on to you",
+    "details": null,
+    "code": "42501",
+    "message": "insufficient_privilege"
+  }

From aa6e3afc0e49dcf87aa538a23dcbca8aaf6aa4ef Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Tue, 4 Jul 2017 22:46:03 -0500
Subject: [PATCH 104/652] Small edit and correct config file name

---
 tutorials/tut1.rst | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/tutorials/tut1.rst b/tutorials/tut1.rst
index 91c8976e1..6ea26786c 100644
--- a/tutorials/tut1.rst
+++ b/tutorials/tut1.rst
@@ -37,11 +37,11 @@ Let's create a password and provide it to PostgREST. Think of a nice long one, o
 
     openssl rand -base64 32
 
-Open the :code:`postgrest.conf` (created in the previous tutorial) and add a line with the password:
+Open the :code:`tutorial.conf` (created in the previous tutorial) and add a line with the password:
 
 .. code-block:: ini
 
-  # add this line to postgrest.conf
+  # add this line to tutorial.conf
 
   jwt-secret = "<the password you created>"
 
@@ -118,7 +118,7 @@ A request for the todos shows three of them, and all completed.
 Step 4. Add Expiration
 ----------------------
 
-Currently our authentication token is valid for all eternity. As long as the server continues using the same password to verify the JWT signature it will honor this token and use the :code:`todo_user` role to perform requests including it.
+Currently our authentication token is valid for all eternity. The server, as long as it continues using the same JWT password, will honor the token.
 
 It's better policy to include an expiration timestamp for tokens using the :code:`exp` claim. This is one of two JWT claims that PostgREST treats specially.
 
@@ -215,7 +215,7 @@ Next update :code:`tutorial.conf` and specify the new function:
 
 .. code-block:: ini
 
-  # add this line to postgrest.conf
+  # add this line to tutorial.conf
 
   pre-request = "auth.check_token"
 

From 49a62772c077b61aa8f804cc4c24cde67ac70319 Mon Sep 17 00:00:00 2001
From: Chris Stryczynski <chris@soundshare.co.uk>
Date: Sat, 8 Jul 2017 06:14:30 +0100
Subject: [PATCH 105/652] Single quotes give an error (#88)

of postgrest: ParseError "postgrest.config" "endOfInput"
---
 admin.rst | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/admin.rst b/admin.rst
index ae7b1ab20..2e3e7ba23 100644
--- a/admin.rst
+++ b/admin.rst
@@ -239,19 +239,19 @@ Once you've verified that requests are as you expect, you can get more informati
 .. code:: sql
 
   # send logs where the collector can access them
-  log_destination = 'stderr'
+  log_destination = "stderr"
 
   # collect stderr output to log files
   logging_collector = on
 
   # save logs in pg_log/ under the pg data directory
-  log_directory = 'pg_log'
+  log_directory = "pg_log"
 
   # (optional) new log file per day
-  log_filename = 'postgresql-%Y-%m-%d.log'
+  log_filename = "postgresql-%Y-%m-%d.log"
 
   # log every kind of SQL statement
-  log_statement = 'all'
+  log_statement = "all"
 
 Restart the database and watch the log file in real-time to understand how HTTP requests are being translated into SQL commands.
 

From cdf5dece651a057f91134a2584b7020db2cb9c12 Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Tue, 18 Jul 2017 22:32:13 -0500
Subject: [PATCH 106/652] Include link to next tutorial

---
 tutorials/tut0.rst | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/tutorials/tut0.rst b/tutorials/tut0.rst
index a762bc7d1..6348f8e18 100644
--- a/tutorials/tut0.rst
+++ b/tutorials/tut0.rst
@@ -214,3 +214,5 @@ Response is 401 Unauthorized:
   }
 
 There we have it, a basic API on top of the database! In the next tutorials we will see how to extend the example with more sophisticated user access controls, and more tables and queries.
+
+Now that you have PostgREST running, try the next tutorial, :ref:`tut1`

From 4be05649f4ca45954ca28f04d8c96b8d4be5455c Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Steve=20Ch=C3=A1vez?= <stevechavezast@gmail.com>
Date: Thu, 20 Jul 2017 00:06:57 -0500
Subject: [PATCH 107/652] Add documentation for binary output in rpc, Fix #84
 (#92)

---
 api.rst | 23 +++++++++++++++++++++++
 1 file changed, 23 insertions(+)

diff --git a/api.rst b/api.rst
index cd10a588e..b785dc59f 100644
--- a/api.rst
+++ b/api.rst
@@ -278,6 +278,29 @@ and select a single column :code:`?select=bin_data`.
   GET /items?select=bin_data&id=eq.1 HTTP/1.1
   Accept: application/octet-stream
 
+You can also request binary output when calling stored procedures and since they can return a scalar value you are not forced to use :code:`select`
+for this case.
+
+.. code:: sql
+
+  CREATE FUNCTION closest_point(..) RETURNS bytea ..
+
+.. code:: http
+
+  POST /rpc/closest_point HTTP/1.1
+  Accept: application/octet-stream
+
+If the stored procedure returns non-scalar values, you need to do a :code:`select` in the same way as for GET binary output.
+
+.. code:: sql
+
+  CREATE FUNCTION overlapping_regions(..) RETURNS SETOF TABLE(geom_twkb bytea, ..) ..
+
+.. code:: http
+
+  POST /rpc/overlapping_regions?select=geom_twkb HTTP/1.1
+  Accept: application/octet-stream
+
 .. note::
 
   If more than one row would be returned the binary results will be concatenated with no delimiter.

From 84bfa2d9ca04b29b3019aa47b09348928f8881ba Mon Sep 17 00:00:00 2001
From: Priyank Purohit <priyank-purohit@users.noreply.github.com>
Date: Sat, 5 Aug 2017 21:42:31 -0400
Subject: [PATCH 108/652] Updated docs for complex logic API capability (#94)

---
 api.rst | 43 ++++++++++++++++---------------------------
 1 file changed, 16 insertions(+), 27 deletions(-)

diff --git a/api.rst b/api.rst
index b785dc59f..6033ba46c 100644
--- a/api.rst
+++ b/api.rst
@@ -27,12 +27,24 @@ You can filter result rows by adding conditions on columns, each condition a que
 
   GET /people?age=lt.13 HTTP/1.1
 
-Adding multiple parameters conjoins the conditions:
+Multiple parameters can be logically conjoined by:
 
 .. code-block:: http
 
   GET /people?age=gte.18&student=is.true HTTP/1.1
 
+Multiple parameters can be logically disjoined by:
+
+.. code-block:: http
+
+  GET /people?or=(age.gte.14,age.lte.18) HTTP/1.1
+
+Complex logic can also be applied:
+
+.. code-block:: http
+
+  GET /people?and=(grade.gte.90,student.is.true,or(age.gte.14,age.is.null)) HTTP/1.1
+ 
 These operators are available:
 
 ============  =============================================
@@ -55,9 +67,9 @@ not           negates another operator, see below
 ============  =============================================
 
 
-To negate any operator, prefix it with :code:`not` like :code:`?a=not.eq.2`.
+To negate any operator, prefix it with :code:`not` like :code:`?a=not.eq.2` or :code:`?not.and=(a.gte.0,a.lte.100)` .
 
-For more complicated filters (such as those involving disjunctions) you will have to create a new view in the database, or use a stored procedure. For instance, here's a view to show "today's stories" including possibly older pinned stories:
+For more complicated filters you will have to create a new view in the database, or use a stored procedure. For instance, here's a view to show "today's stories" including possibly older pinned stories:
 
 .. code-block:: postgresql
 
@@ -74,10 +86,6 @@ The view will provide a new endpoint:
 
   GET /fresh_stories HTTP/1.1
 
-.. note::
-
-  We're working to extend the PostgREST query grammar to allow more complicated boolean logic, while continuing to prevent performance problems from arbitrary client queries.
-
 .. _v_filter:
 
 Vertical Filtering (Columns)
@@ -395,7 +403,7 @@ Custom Queries
 
 The PostgREST URL grammar limits the kinds of queries clients can perform. It prevents arbitrary, potentially poorly constructed and slow client queries. It's good for quality of service, but means database administrators must create custom views and stored procedures to provide richer endpoints. The most common causes for custom endpoints are
 
-* Table unions and OR-conditions in the where clause
+* Table unions
 * More complicated joins than those provided by `Resource Embedding`_
 * Geospatial queries that require an argument, like "points near (lat,lon)"
 * More sophisticated full-text search than a simple use of the :sql:`@@` filter
@@ -467,25 +475,6 @@ Stored procedures can access request headers and cookies by reading GUC variable
 
   SELECT current_setting('request.header.origin', true);
 
-Complex boolean logic
----------------------
-
-For complex boolean logic you can use stored procedures, an example:
-
-.. code-block:: postgresql
-
-  CREATE FUNCTION key_customers(country TEXT, company TEXT, salary FLOAT) RETURNS SETOF customers AS $$
-    SELECT * FROM customers WHERE (country = $1 AND company = $2) OR salary = $3;
-  $$ LANGUAGE SQL;
-
-Then you can query by doing:
-
-.. code-block:: http
-
-  POST /rpc/key_customers HTTP/1.1
-
-  { "country": "Germany", "company": "Volkswagen", salary": 120000.00 }
-
 Raising Errors
 --------------
 

From aedaca129045015e0519544fa3e2d9204018eb1c Mon Sep 17 00:00:00 2001
From: Russell Davies <russell@zeroflux.net>
Date: Sun, 13 Aug 2017 17:39:18 +0100
Subject: [PATCH 109/652] Clarify resource embedding constraints (#97)

---
 api.rst | 20 +++++++++++++++++++-
 1 file changed, 19 insertions(+), 1 deletion(-)

diff --git a/api.rst b/api.rst
index 6033ba46c..6c59acab2 100644
--- a/api.rst
+++ b/api.rst
@@ -342,7 +342,7 @@ However because a foreign key constraint exists between Films and Directors, we
 
 .. code-block:: http
 
-  GET /films?select=title,directors(last_name) HTTP/1.1
+  GET /films?select=title,directors(id,last_name) HTTP/1.1
 
 Which would return
 
@@ -351,21 +351,36 @@ Which would return
   [
     { "title": "Workers Leaving The Lumière Factory In Lyon",
       "directors": {
+        "id": 2,
         "last_name": "Lumière"
       }
     },
     { "title": "The Dickson Experimental Sound Film",
       "directors": {
+        "id": 1,
         "last_name": "Dickson"
       }
     },
     { "title": "The Haunted Castle",
       "directors": {
+        "id": 3,
         "last_name": "Méliès"
       }
     }
   ]
 
+The primary key of the table of the resource being embedded must be specified,
+either explicitly, like in the example above, or implicitly through a wildcard.
+
+In this example, since the relationship is a forward relationship, there is
+only one director associated with a film. As the table name is plural it might
+be preferable for it to be singular instead. An table name alias can accomplish
+this:
+
+.. code-block:: http
+
+  GET /films?select=title,director:directors(id,last_name) HTTP/1.1
+
 .. note::
 
   As of PostgREST v4.1, parens :code:`()` are used rather than brackets :code:`{}` for the list of embedded columns. Brackets are still supported, but are deprecated and will be removed in v5.
@@ -376,6 +391,9 @@ PostgREST can also detect relations going through join tables. Thus you can requ
 
   GET /directors?select=films(title,year) HTTP/1.1
 
+Here it is not necessary to specify the table's primary key of the embedded
+resource.
+
 .. note::
 
   Whenever foreign key relations change in the database schema you must refresh PostgREST's schema cache to allow resource embedding to work properly. See the section :ref:`schema_reloading`.

From 66ce8e8b183292b4ea344da943da9beb34b77836 Mon Sep 17 00:00:00 2001
From: Joe Nelson <begriffs@users.noreply.github.com>
Date: Sun, 20 Aug 2017 14:15:59 -0500
Subject: [PATCH 110/652] Exp claim must be an int, not a string

Pointed out by @nileshtrivedi
---
 tutorials/tut1.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tutorials/tut1.rst b/tutorials/tut1.rst
index 6ea26786c..983ac150f 100644
--- a/tutorials/tut1.rst
+++ b/tutorials/tut1.rst
@@ -146,7 +146,7 @@ Go back to jwt.io and change the payload to
 
   {
     "role": "todo_user",
-    "exp": "<computed epoch value>"
+    "exp": <computed epoch value>
   }
 
 Copy the updated token as before, and save it as a new environment variable.

From 3fdf6acc45ed9eb3c44eebc3dba3a1d46aa5d43c Mon Sep 17 00:00:00 2001
From: Russell Davies <russell@zeroflux.net>
Date: Sun, 20 Aug 2017 20:49:27 +0100
Subject: [PATCH 111/652] Range operators and deprecation of symbol operators
 (#98)

---
 api.rst | 58 ++++++++++++++++++++++++++++++++++++---------------------
 1 file changed, 37 insertions(+), 21 deletions(-)

diff --git a/api.rst b/api.rst
index 6c59acab2..5b45ab3c8 100644
--- a/api.rst
+++ b/api.rst
@@ -47,25 +47,41 @@ Complex logic can also be applied:
  
 These operators are available:
 
-============  =============================================
-abbreviation  meaning
-============  =============================================
-eq            equals
-gte           greater than or equal
-gt            greater than
-lte           less than or equal
-lt            less than
-neq           not equal
-like          LIKE operator (use * in place of %)
-ilike         ILIKE operator (use * in place of %)
-in            one of a list of values e.g. :code:`?a=in.1,2,3` – also supports commas in quoted strings like :code:`?a=in."hi,there","yes,you"`
-is            checking for exact equality (null,true,false)
-@@            full-text search using to_tsquery
-@>            contains e.g. :code:`?tags=@>.{example, new}`
-<@            contained in e.g. :code:`?values=<@{1,2,3}`
-not           negates another operator, see below
-============  =============================================
+============  ===============================================  ===================
+Abbreviation  Meaning                                          Postgres Equivalent
+============  ===============================================  ===================
+eq            equals                                           :code:`=`
+gt            greater than                                     :code:`>`
+gte           greater than or equal                            :code:`>=`
+lt            less than                                        :code:`<`
+lte           less than or equal                               :code:`<=`
+neq           not equal                                        :code:`<>` or :code:`!=`
+like          LIKE operator (use * in place of %)              :code:`LIKE`
+ilike         ILIKE operator (use * in place of %)             :code:`ILIKE`
+in            one of a list of values e.g.                     :code:`IN`
+              :code:`?a=in.1,2,3` – also supports commas
+              in quoted strings like
+              :code:`?a=in."hi,there","yes,you"`
+is            checking for exact equality (null,true,false)    :code:`IS`
+fts           full-text search using to_tsquery                :code:`@@`
+cs            contains e.g. :code:`?tags=cs.{example, new}`    :code:`@>`
+cd            contained in e.g. :code:`?values=cd.{1,2,3}`     :code:`<@`
+ov            overlap (have points in common),                 :code:`&&`
+              e.g. :code:`?period=ov.[2017-01-01,2017-06-30]`
+sl            strictly left of, e.g. :code:`?range=sl.(1,10)`  :code:`<<`
+sr            strictly right of                                :code:`>>`
+nxr           does not extend to the right of,                 :code:`&<`
+              e.g. :code:`?range=nxr.(1,10)`
+nxl           does not extend to the left of                   :code:`&>`
+adj           is adjacent to, e.g. :code:`?range=adj.(1,10)`   :code:`-|-`
+not           negates another operator, see below              :code:`NOT`
+============  ===============================================  ===================
 
+.. note::
+
+  As of PostgREST v0.4.3.0, the symbol operators :code:`@@, @>, <@` have been
+  deprecated in lieu of their mnemonic equivalents. They are still supported
+  but will be removed in v0.5.0.0.
 
 To negate any operator, prefix it with :code:`not` like :code:`?a=not.eq.2` or :code:`?not.and=(a.gte.0,a.lte.100)` .
 
@@ -125,7 +141,7 @@ A full-text search on the computed column:
 
 .. code-block:: http
 
-  GET /people?full_name=@@.Beckett HTTP/1.1
+  GET /people?full_name=fts.Beckett HTTP/1.1
 
 As mentioned, computed columns do not appear in the output by default. However you can include them by listing them in the vertical filtering :code:`select` param:
 
@@ -383,7 +399,7 @@ this:
 
 .. note::
 
-  As of PostgREST v4.1, parens :code:`()` are used rather than brackets :code:`{}` for the list of embedded columns. Brackets are still supported, but are deprecated and will be removed in v5.
+  As of PostgREST v0.4.1.0, parens :code:`()` are used rather than brackets :code:`{}` for the list of embedded columns. Brackets are still supported, but are deprecated and will be removed in v0.5.0.0.
 
 PostgREST can also detect relations going through join tables. Thus you can request the Actors for Films (which in this case finds the information through Roles). You can also reverse the direction of inclusion, asking for all Directors with each including the list of their Films:
 
@@ -424,7 +440,7 @@ The PostgREST URL grammar limits the kinds of queries clients can perform. It pr
 * Table unions
 * More complicated joins than those provided by `Resource Embedding`_
 * Geospatial queries that require an argument, like "points near (lat,lon)"
-* More sophisticated full-text search than a simple use of the :sql:`@@` filter
+* More sophisticated full-text search than a simple use of the :sql:`fts` filter
 
 Stored Procedures
 =================

From 4b1e594270670bb2ebc292b05a33a7b0c0592fe8 Mon Sep 17 00:00:00 2001
From: Will O'Brien <will.obrien@dibit.co>
Date: Tue, 5 Sep 2017 23:25:43 -0400
Subject: [PATCH 112/652] Add notice about reverting OIDC default (#99)

---
 auth.rst | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/auth.rst b/auth.rst
index d76ddcfe8..52e490db3 100644
--- a/auth.rst
+++ b/auth.rst
@@ -204,6 +204,16 @@ An external service like `Auth0 <https://auth0.com/>`_ can do the hard work tran
 
 To use Auth0, copy its client secret into your PostgREST configuration file as the :code:`jwt-secret`. (Old-style Auth0 secrets are Base64 encoded. For these secrets set :code:`secret-is-base64` to :code:`true`, or just refresh the Auth0 secret.) You can find the secret in the client settings of the Auth0 management console.
 
+.. note::
+
+  Make sure OIDC-conformant is toggled off.
+
+  A recent Auth0 change sets it on by default. Turn it `off` here:
+
+  Clients > `Your App` > Settings > Show Advanced Settings > OAuth > OIDC Conformant
+
+  Ensure also that your client application does not pass in any `audience` configuration.
+
 Our code requires a database role in the JWT. To add it you need to save the database role in Auth0 `app metadata <https://auth0.com/docs/rules/metadata-in-rules>`_. Then, you will need to write a rule that will extract the role from the user metadata and include a :code:`role` claim in the payload of our user object. Afterwards, in your Auth0Lock code, include the :code:`role` claim in your `scope param <https://auth0.com/docs/libraries/lock/v10/sending-authentication-parameters#scope-string->`_.
 
 .. code:: javascript

From 973e7cb90ee4014778a15396b5b210d8804a7b55 Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Sat, 9 Sep 2017 15:40:49 -0500
Subject: [PATCH 113/652] How to use docker

---
 install.rst | 100 +++++++++++++++++++++++++++++++++++++++-------------
 1 file changed, 76 insertions(+), 24 deletions(-)

diff --git a/install.rst b/install.rst
index 100496314..ebd7beb02 100644
--- a/install.rst
+++ b/install.rst
@@ -16,30 +16,6 @@ The release page has precompiled binaries for Mac OS X, Windows, and several Lin
 
   # You should see a usage help message
 
-Homebrew
-========
-
-You can use the Homebrew package manager to install PostgREST on Mac
-
-.. code-block:: bash
-
-  # Ensure brew is up to date
-  brew update
-
-  # Check for any problems with brew's setup
-  brew doctor
-
-  # Install the postgrest package
-  brew install postgrest
-
-This will automatically install PostgreSQL as a dependency. The process tends to take up to 15 minutes to install the package and its dependencies.
-
-After installation completes, the tool is added to your $PATH and can be used from anywhere with:
-
-.. code-block:: bash
-
-  postgrest --help
-
 PostgreSQL dependency
 =====================
 
@@ -49,6 +25,82 @@ To use PostgREST you will need an underlying database (PostgreSQL version 9.3 or
 * `Instructions for Ubuntu 14.04 <https://www.digitalocean.com/community/tutorials/how-to-install-and-use-postgresql-on-ubuntu-14-04>`_
 * `Installer for Windows <http://www.enterprisedb.com/products-services-training/pgdownload#windows>`_
 
+Docker
+======
+
+The official PostgREST Docker image consults an internal :code:`/etc/postgrest.conf` file. To customize this file you can either mount a replacement configuration file into the container, or use environment variables. The environment variables will be interpolated into the default config file.
+
+These variables match the options shown in our :ref:`configuration` section, except they are capitalized, have a prefix, and use underscores. To get a list of the available environment variables, run this:
+
+.. code-block:: bash
+
+  docker inspect -f "{{.Config.Env}}" postgrest/postgrest
+
+There are two ways to run the PostgREST container: with an existing external database, or through docker-compose.
+
+Containerized PostgREST with native PostgreSQL
+----------------------------------------------
+
+The first way to run PostgREST in Docker is to connect it to an existing native database on the host.
+
+.. code-block:: bash
+
+  # Pull the official image
+  docker pull postgrest/postgrest
+
+  # Run the server
+  docker run --rm --net=host -p 3000:3000 \
+    -e PGRST_DB_URI="postgres://postgres@localhost/postgres" \
+    -e PGRST_DB_ANON_ROLE="postgres" \
+    postgrest/postgrest
+
+The database connection string above is just an example. Adjust the role and password as necessary. You may need to edit PostgreSQL's :code:`pg_hba.conf` to grant the user local login access.
+
+.. note::
+
+  Docker on Mac does not support the :code:`--net=host` flag. Instead you'll need to create an IP address alias to the host. Requests for the IP address from inside the container are unable to resolve and fall back to resolution by the host.
+
+  .. code-block:: bash
+
+    sudo ifconfig lo0 10.0.0.10 alias
+
+  You should then use 10.0.0.10 as the host in your database connection string. Also remember to include the IP address in the :code:`listen_address` within postgresql.conf. For instance:
+
+  .. code-block:: bash
+
+    listen_addresses = 'localhost,10.0.0.10'
+
+Containerized PostgREST *and* db with docker-compose
+----------------------------------------------------
+
+To avoid having to install the database at all, you can run both it and the server in containers and link them together with docker-compose. Use this configuration:
+
+.. code-block:: yaml
+
+  # docker-compose.yml
+
+  server:
+    image: postgrest/postgrest
+    ports:
+      - "3000:3000"
+    links:
+      - db:db
+    environment:
+      PGRST_DB_URI: postgres://app_user:password@db:5432/app_db
+      PGRST_DB_SCHEMA: public
+      PGRST_DB_ANON_ROLE: app_user
+
+  db:
+    image: postgres
+    ports:
+      - "5432:5432"
+    environment:
+      POSTGRES_DB: app_db
+      POSTGRES_USER: app_user
+      POSTGRES_PASSWORD: password
+
+Go into the directory where you saved this file and run :code:`docker-compose up`. You will see the logs of both the database and PostgREST, and be able to access the latter on port 3000.
+
 .. _build_source:
 
 Build from Source

From 5fc48057f8c4d01f520bb4009051f8aa267cda15 Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Sat, 9 Sep 2017 15:41:05 -0500
Subject: [PATCH 114/652] Actually pg 9.5 is needed, not 9.3

---
 install.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install.rst b/install.rst
index ebd7beb02..b3a4ca428 100644
--- a/install.rst
+++ b/install.rst
@@ -19,7 +19,7 @@ The release page has precompiled binaries for Mac OS X, Windows, and several Lin
 PostgreSQL dependency
 =====================
 
-To use PostgREST you will need an underlying database (PostgreSQL version 9.3 or greater is required). You can use something like Amazon `RDS <https://aws.amazon.com/rds/>`_ but installing your own locally is cheaper and more convenient for development.
+To use PostgREST you will need an underlying database (PostgreSQL version 9.5 or greater is required). You can use something like Amazon `RDS <https://aws.amazon.com/rds/>`_ but installing your own locally is cheaper and more convenient for development.
 
 * `Instructions for OS X <http://exponential.io/blog/2015/02/21/install-postgresql-on-mac-os-x-via-brew/>`_
 * `Instructions for Ubuntu 14.04 <https://www.digitalocean.com/community/tutorials/how-to-install-and-use-postgresql-on-ubuntu-14-04>`_

From e4741d43e488e5c8d96750671f7c55d8f6b4dc59 Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Sat, 9 Sep 2017 19:27:51 -0500
Subject: [PATCH 115/652] Note for windows users

---
 _static/win-err-dialog.png | Bin 0 -> 27093 bytes
 install.rst                |   9 +++++++++
 2 files changed, 9 insertions(+)
 create mode 100644 _static/win-err-dialog.png

diff --git a/_static/win-err-dialog.png b/_static/win-err-dialog.png
new file mode 100644
index 0000000000000000000000000000000000000000..e60a71c4507e157076b36b550c7e83f0242249f2
GIT binary patch
literal 27093
zcmeAS@N?(olHy`uVBq!ia0y~yV9a7*U})fAVqjocE41Ya0|Ns~x}&cn1H;CC?mvmF
z3=9kk$sR$z3=CCj3=9n|3=F?O>R&K0lo~KFyh>nTu$sZZAYL$MSD+080|Q%<x4R3&
ze-K=-cll%n1_sUokH}&M2EM}}%y>M1MG6B01AB?5uPggQPEI~iRq@{estgPnM?75|
zLn>~)tu5c9;wt!m`>N`+^7wsocAhB|w0L*IT||(TQPj05i9t|AG{nJEt4YGaRfU~Z
z<vEX#ZIQ*J!sAb6;_q!wT(<kw_v3HgRhP>+*0KNkz4QM0d%I`e<h0#;_v+QFq4yVs
zU9A#z?(tP*6XE#yUykL%C$s&>Ew3a;Giv?!Efakp=f33lT9yTJ)7{^%T6F5Ev}{fN
z1@^fCuA=`7r&P6Y%sAO;EVOpcU$^S)c_yw;I&8U_*i!|a1GGh^-rAOTL)qi>-zf_c
z`+tAGvw-(J`xHl}iVP0k1FQjplNzH6__9vj{Z{KBZMWk2>8WzZMe=VPuNL#1{Qs!M
zH^n1WuMY}xItDj1x@{1ga&oCeLCRFy$;zf$E*%F2xI_+Vsf6XE%xN{Z6A;@lY4gUS
zl*cADy&Kwd(-T)PKHR%hQshsg(y}fsyRZpPGg_v)^g1vasw5O;9lX~eetmoS`nt#J
zt9W&)*{6x-?=>s9GsWO8w;hvp*al^X7S0Wx%l-52B}ZJ9t7n{4#Q0<H>1i?A3hV+)
z*t{OdoN#nr!MJ?k7s0l~TMizo{hw^#U4DF9PBx@BJ$<3u8g^F!2d4>&U7~WQS{g!*
zI&eO*>F8h#)o9^l=oE_RF}~Lj5plA)MWtuz+)gKtwG#Z!Pn-|bJm?NN>Mr^}QDe$N
z7nVeRffmos6V0Mh1q(OlzRceI%Xb#j0j_p8-s|7wtm?Ry8qW`r{M%N0vVO+8um7c%
zw5$C6|A}?=kN6h1ouR9*HA^&zHa3PX>2~#9`oN{tbD@}k((-_efPEW|$4_bh(rd!{
zOW-qK?e)y4cRBJ|UzV2p#yyFB{-IhVusUYj!_X`To+AwmiVhANYj(0qd~o0~3Si@K
z31Bc3Xb_p@^I;NqvV$WV!xcuhBNzB<wy$~>c(k5*$DLFO7KJu00S*ZT=hj8#QzEpk
zsBL4KIwPVbVTO*Q;}QcVZw8Jh!k^uC&R1XXsaa#DA)`yfw13mi-C&qC!@ep)RJ5U~
z=6urY-{;~)9vms*)Vdk8;&)`!&KV*Bt4^%UTda}!^cxGiM#4gtP>x2X32LItQ#jog
zhG^|zouuiVwCIBi%MuY4hKY#|-p}Udd23Bn+z=F0o4Qf`{iIDU3O^T=uV2*F&ukk#
zmuby{C7(GQHn`kcYoqO)`({%1nsip16DvPPy*fBg=;DHT4gqY&9_A)BDjK(gLmlNp
zgjAP4-1%EaQ~b;nwlrTxxz1_MTt^tLL?`_W*t`7pGDp>!OILO7Q3w*9z!cWPdFqaH
z$VIkQ+?5e+0udaijxcD3_UN}bFis89J><|L*_SZo!PSTgrj<=R9+RZBP8uavw6;z%
z;80k8BxKSwpCw+>QaO`mP38aiDKuo`%!NuWp2bV@m{k`nWt_plrvA;PVb4OBnhB|_
zB4G@wj58b**wdJ#^;U9uO%?6+ZT2+P(3JCR4AH!~Ft2vOn%a;&RfQD>Ga0hHp4V`2
zsESWNC(huqWL1MAgO-*+s#@rZDO-4znzT6X-ePYKiQLn`slsID<Ds)S;J^wl?dmos
zOEo@*302FJPEJ~psBbVYp+iDzLCQYiNt+ZKneJ7WifqV8nCZ1yJxD`Sb84u-+CLSc
zAs;=PZ!mqhXBfQHzccGVSje8Nq8(TEudFUSEXBars4Qf*bZMww@8qZN{yDCVV*KiN
zBSLgTW5yzmgyh^-1_=%IMcfPzLL(m?kofoEue#;QDf8!M$hSo(vII_TU~bqeet794
zN0yLH;Zs<(I5jKX&3ss9GqUJiys|{4AvvgxB|+rm%HquY+>C?^tSM7&teiB#cZnFs
zk<LSEs;-A8NKNJn{3!7;p>4;La*f;0D|Dh)Kf9{+kGbI7$}9nvbC%g_D-3gZ6z88$
zza+V0+FQmcE1tV~F&(Npu&Kf3!DKQ1uXD~k4&_KO%eved6DXi=t8(#eBJ=Dwj0$aC
z!79Hdltg=KXw4M#e#if6>**V84K6JwvXd%)DonZF!Fgrvy93oqt^FDt)=^>W&%f?a
zbYA4LW<`41qIW05KM7S{jpCYie(rQRtAwMwt{H^O*e80k=X<+}GEGroV>h&%kjBLA
z^t|ip=Ic6AcDd?J>m60*7;*(Qa!g$26T}@R+7`O$r+Hj;o#Qs`EeF3{-uC+T>gg*4
z45uE^o~}Oo<mV-;>OwwxIx#XmFS_Z>XZhsN{y(XwH$Hx}Bcqq~VY~gWdp9m7_y51g
zuhN$@p=r^RC$9UhoM-IgFnH22<)M(Vit01pS1XsU@G|0GF~e)?k|cx1r0M$~e`Dvi
zbZ61`Qb_Yw{k~?>8v)NV>(q8iGaQiEw*E}j$DiqG#>NjOdG=4!^W@Rc=}OtYsqx68
zi+8Vvm>Nc{QfF)0A5-w};{CsI;tx8L4ono>#PT?iWljylxyr_c_y50H!!BQ+^zV~s
z{ysBlhc!F_0aZP$vrjbK*!4C0{jTqFTQlBA{JwOip0%?-{J@czP1k2VdCJq#A|Tzc
zv-07j<oy*VO3m-r{JvYhJ~uD$fUvftzgr^bvDKjljkXcqv*gsTt$wxq*UugHEJgQB
zO-$w%KAU;}=ecq*ojLL>nn|B8PxkL}>HB|=KV;8F#R)ulPaM6T_<9;dusZ4{h;CEq
z+miE1K<QbMp^$FMrP2mvuA<nvT&vcuWe(YT;oiNl;K_Np(Z7G+kFiL7WVZM?pNUVb
z>`jHae1{vZG~YNXbX+fZ@~bx){oOy~_Rc<0U^n}`=%(6VX7@^e-;G`SxBNyWlZRk4
zQ&ZC4UthOwHBGci=J4TB=!%uNv2B{zhRmESpSJA4-nq;Py@olVdpACO73$s9^j0nJ
z@0-W}e|?!}Jc;}9iBi|X+*q~3ZLAkAUd)t!#rWmim9FymJEiFi9j3woX49|VxNdUg
zhsOPT*8*2$%fy6l|MRpmd`|Vn8Mfb~Z3{1b6khHjH^=a3&OY9C^|5;oaU>+%vfkYL
zwe-}9Rm&U#4eu5A?>)cs*DIHEo#CsadKS&{iQ4mC>q++OS2b^}HvL?-tV&?DhTx~2
zHOrm}e?GYKQN7f(wdHlw=a$<(58waun)$xs*SgzdYCgtWTYnb+|8+f=!^{q$?Ocjt
z4kxvQ;`vPXTRqlEi!!YL)*z^Sd8Noot({C3u3xVGHJ?{`sq^~YO<(xaV=r2SsQ2Fe
zwUAr?-^)Vx_^RJ)v;QoR4Br0d@lSi(pXtwaq5~_Q?))vk|M$&$-P+{#+HW<F<+uO+
z@VfoZ=A5tj`qj^7&%gD#-~PuRN%4CZGJpAc?*07svfiFoZO?!4zKTE3z5n;z{C{tk
z?LM;Qe&yNwakEUftH$m={AHzD*t;3^S5>di`8mBiZq|1{oxT6cp52^(EB6flxu345
zCm8Mwe;)Jmv3$(`50_0ZmrLFY$yUzSVL!%lOd{xrOm@yq`-1<uDaU2^9G)Qk&$M{I
z?YEdumz0;wRR4(8*ZuueGW^Q*W6}A>uRiG4KfZc=zTNLTljWli#@{UdC44>3_-SzP
zyV}aD%;9z$j@M0=-}U+Xarx?Jy5IM2_#1aQI?eXm^ZS1uUN5&ZDtIs>GJJmh<6!+W
z`S~+Mmg!l%oWbc{^Y!CzdF$WW@jKsq%TC|cW0&zfP<(#H5mobhRR@>y+Z9~?JOAI8
zo|0TO2ClQk`FsCO>a#mMFMeCytrv{b=hd9*+`q&4dHDItFS~^6%f4=Ub4&KvI-5t`
z_jf(m6uCLgZr5kW-FE+O7~9)?Su#DoD*HY2Hzw}M>^Fop8z);zhx(Xb_5ZqA(vB<j
zaG?ypykX6+Z<pQrqzuc>tnk*`yXApxBhTam6E)BN;&oh9akq)JdHXG{kT@To6wjCc
z^SbBl`}r$6eNOeMsrA3!1b@H#>Di|@k^d`R?oyB6_kLgXy{ZRoQ}y?md|o(n|K2D1
z>Hj}XnOtA??aAGJpHFN}=f7~RIIrU6y2$hMiq2g5^JqFx^3P9w&HVS@x8J|<{>kGy
z-&;0`vmajn|94*dyBRZ2rpVR4c$hEqt@$wj|A&G1f1ivzE}K?!ammlM%kS@a;=li9
z<*|3~&%`|s-@EVp^5wE+hmJOHzx6U(_*GrapX(c+zT2CXt+(?@K7)qNx|k1lW-g!e
zar6AYb(zJhxdm1<#$Vf3_3?-8Ho5)RpNQE%S(|1O_?COUuI;xc@^_1Gd;YI_v%R?1
zCSUHYQQEP~`sdE+RixdW^Yn^{)wY`!Mj`kAo!aERuHwb1`g{LR><#aGe?5J5>~i0G
z)#lgNowxsU#@ye!wEyq6{lESsS6^j|ja@B!?f<Xs;{Sf;e?MRI>gLk*vHO3$HNRzL
z5_<XjPWS(D>DKZUzdZRTG&CQ~U(27r@AJXw@9QNrblyblKl|@;{g=JT)Ab@YeV%vw
z?<;lndH)tim;HXUJ$-M<(XzkS?$n<T{pm6L6<d78)15gBR!v~=S{kbMly~pFRV$J{
zJGk^1GQ8XOdtEcXoyF|8F$VwVZZXtawCczbY3s^qW#(P!p8IrfD)0Vu)Yks%%abp!
zY}#k~b!*wZUC+KWB=+t#a!5NAwwQa_kK^6?d)~~lez*Vm$9(zkTN}C-YHlk_IqrAI
zYK`ocuRBg2X8%6f?~2)1*-clse05N`k-0ioO5I=LSF3KB<V};3l>O^#|6X|PZ)dC)
z{oI<NB8_3);?xrx4koMn%Iti)<Zqco-mNG;yO-<L|2&M@vTvRztMGEa>>P>N^Gr<H
zf(jDX_Q{#rY~qz-6Wn69A(wkvT=CP?clV}7UthQH<IHF0eeafD;IJ+|=69L>yQazd
ztTm_Cygkz=VfWAYw>(e6i4BUeb9GZx^Fx|8Xs&r1wPlh2e!Im+rLhicegA(|PoI^T
zTz(^Qy5nB=lCpIl&1SP%J<JL&3}2^v^}_1=GZGn=<?Sx5`+I7`zVq9R`4|jJJ!<#8
zxW@2x&C$M4>vy|eyIzmsVkl_jW%rX}USQ~9?kDx0vE<~EwQ5W^5?}o=UwZfWma8pq
z4+OkT@^WSnatfSy%Yb1=mzEj7)~3f-g8g$dGk5;|c01kf=aKFE|GquF{^#!*g35C~
zKik`UBd2of(mf>}o-Q+(rg&br{eH>Y-2UgCN7iDu>!RQ6d%IvY_vXC4PbN9Vp7qXt
z{CL@$JKG+t>}1|v@nfgu*;c3Ee?Oz&%bR}<{=I%~@kQC`C3?I~N4<CX$X?sFHaoNL
zH<R*l{>*sU_aBaaWDU;gzs~>ey1mDB`>iP#8;%uRd%Jy|cHO%>+Ie@2&Td#=mwMV_
zh41Yz2L%6yr@#IB{NKm->GGuy^Zj3c-F=@&&QkBLQTmf}^WS>Sc4)MCV_op-df!dW
zN?~=bW4Zh`8}I7Pw|**KZ+P*MX8+l`cOPe$Ta@hH{@k|yvGf0!uZN-%KK1!F*KPas
zb9LUHJ%v$Ue(l*Nc-t>C@@|aIvzTeu*G8LEY}c&0{fJv{cgB|~bC>zb*uG!O%6{&~
z<5s5~Nna1``gKw}{Moze+>29^!n3_M?n^5PcCNT8Uw_x4_SEI|DfQ)l>{jdTU15Bi
zZ$a+cUB|xdVN5!rcK6e{&E@fx=bu|QpW!dR6?HAOJ9{(3t*GL<*mlNkH@7{!xBB0W
zX)o)~=brZeb$Q|X{Sh%ct4tY`!o!%hzBwFhmKCn*Av&AC^UaTs{q=LsKiA*;<&s8M
z+1=Xy_`k2h@BcWqU2oqD{mE)Q<#tKSe79K^-<p{&aVfO;{yY1k9?zu=0tcI!7m0qp
zU-@>e<?7A%MBn<?6$Q=rIs5Ihd(7|e`*mZtJ`>;nue7#JfA@n^)8|*e<ZhSW_Wa9R
z*W2=ypQcLge!uy&-tE7SPknCx{`#w5^t0~vchWP?bxz*?>UREtzUp@s{~w>fQ~BNA
z+WMOL(nH$+N=kQy-+wPtey8PNb6nNisbMGm?_|BMb3EH(TmH^I<Hc3+c(eL%x4Exx
z$=iK)OLO0i{iS!S&VBiNY$1Dm@zMG3>mRwAm0izWen9fL+4JO26F;_1O>!;{U;Fb<
z`hJV7BNKMD#T`D@yKLP#w$k-yYO_;Aw&y+l6+idm;aR`VwZE&`v~b&b<@5IcF3<m4
z^ku=lqkCpsq|W~Lwf6Uyb3L=|YVX{*X#V%_J=S9Jw_ASm1*`e&_;kx!s%okI{`2RO
zkLSmp_<UM_|Gw9L)=Q**``yaBwQu+PlIObD&sKeXD(wIN=n2NHN1Y0f{P0X><Jb9B
z@gz*RjaOD?mG{E3pQpZs$Jb{b-7{6#y<g5C<;Ds@Ww#td1tB@(#6t@fGH<_|eEjBS
z@%vSu54X#f-N>_kAFA=}*Y`ZB{a-Z%^DUMf+1$$z!6cY_#3aa7bT;GJvu8J_pZ|9@
zzizSCnK!jINl#uVI=AaZZprwx#8YV=udqd+evQo9*bNyU!lD}+7Jb+Hs9k<9<i(2*
ztF*KpeZIH))fwwNyLT53n>2=tS6<}$^lH&5Kf^BXXur=JSG{WfZ&CiedH>BIt6M^z
zZ@71H?&#%z5?i=fdE<^C&MV=3zaoxgt~s|lLq*DUVt?`7`^WUUCN0;mcoE+&TjH@(
zMf>xnivPBKI(mBIcaGZ5zxuRFETegn#mk+`A3c_Pdh*!Q_VBzHCaVhrm1@lw?WnnO
zH1NB1rrD`!r{pWuA06qon0jONkyUXaM^|=*1s;9Y?6K0d^8McLt5!XFwBkza++rm^
zldwR2tyQf#$Gx}TUl`|VI&)9PA?78W&#P|w1zo?AexXC~ZP$UdXA2e^YCbpZo6DHP
zVKk+GZuopN5jMwjuB&3Vw$=ST96Z1F*V8q=u@$e^N*-|Ecta{FHTs16k<QzixA$l)
zFjZ?gQW>wXj&te)J<*EyO3xRx&1gB;#{9hdh+$x^Vi{ZI;hde<Hk+TAoU*{p`SC+%
zhesSTtJf}-aI=wE7M|5DsBAS?O5VKS7|Y6qkKNat+sfbRoXWZ5*iMc$OTt7OO<g~B
z*fN@>xY)7h_ij(Q$)cyl)R%j#n_p*TmSG<w@7gH7+9#c+39pm%k43Vr`MT<-#U?Md
zpAD~FuG~CvV@mP7lZPdkxC)QlN)<>u6s2y+*~2L`+2WvMb4wg&NK(=YE&0$KH<gca
zo%=J7@?K_hyjab~l)OcRW&6r(?t9CxoZt0(9p~?wW7n=4woFM<Qtq3Y;3LK%%4pft
z&Jw`pC@GkrAePEy^fA&|@s<<AK69Q=4qnAxnWAPYPLY?`)EM{_SgR*6a<DomrAVa6
zCRo{AJ^Fybpdf&sbI(Hw4@VEx&In}*)j*3&4J`*=c`_X4@_N)fSMYVCPIJRAB>^j?
z7292#w`f@Ci5)U{%kie@OqgX4qwwJh*Hs)z85)5;0bZ<Ji<+7iDpoR9pJ!xX?se?!
z-W{}tC5*duLwJNTLuY`G)U%E(7L^WNjtzVadwlo2Sg>^JSD`}2sZ8%>7*?<zbmU07
z!gO_~x2U{vh{LPI6(ZRWMHNgveQK{<{rT*0e_r_m$5TtEiU;(UN~(G-a(ehM<isXc
z4_%J~eu9&lCU7S<1}s!iOgwO96?;~4s)Ew{U=f!&Od4w&iVj}6t{@Z<<js_*!O5w)
z)aIbp##P%57fw6qcyjw4rYF5ho!#zBmN>L|G|q77x*)8>?9_I0a{tK)iE9$aCPyr?
zQs^_;#?jfG@Rg%mDKjWQLgOGqO0dT6Uasb=lZ`YQnmQHd7;r@hJM$h4FyF{9MaO}M
zJy2pb%Zh?E3d)?G0>-QX)78Yxrnr1uw52Pl=20(mD_6%==3~N=Obd0ay&Bzv%<}#(
zza1v}-}uLYZDC^a3y$0r@lZOo(5v%uM{7o>$IR0k7ct1J)a{+2qQGWzu$uFzzyl@=
zF<~yj)l#7W9R5#4%?uA1Om&Yj@CuaQ=)Q&{h{^fh<a8Dlw_c@}jw!5JLUR0R3TXza
zpC&d2nZ$jvJLb67=!iC}8!vO#iPf7GCbztnlwiH#e6_(Q@S=i=*D0P&vob;#Dz^H&
zw0`{1bwk3-X$mh36Vu@iCy8k`Q%+9g6krzgc`#GLX9?S)1OY}l0rxkKVOJeE<O~{F
z0)o^ucfRHpvQJnblXxQZX5i6!(NnxzjOH+LU7h60!eqp$$Yyic@z9dc>MIgj?K3Ae
z$+#p5@B}ff_?k2Iz$3*cGdQIb+LlQ^@ocrx=9p4a{+cn&KV`zo4x1+C$c8mmszTeA
zTsxqiyeq^)vU-(&)FSgB15K7wPeQK<Sf;sV2yEz>B-jwS(#0hpYJ*w_GwYHyx0;(*
z$oyj8lq#jD8Y-}oq2P?0rAOEvM~y(`8%sDkyH`w5oHApQjj%J1f`M1VE|(yV#-kZQ
z{{>d)p6+f*I55SgWQCT~svr4|tzOHkzfE#krnbxd5#J%X2CEK<15>X2X;D0*E@HmQ
zYvIy{(5VaL+>!#$ZPwT*njhkNNsfhabw!2arOuG8B2nrAOg-*rIyl!T1SU3EC?1=z
z<bUSLz-tG0cs*k2on&3<wWY>TO1x91l}9k8Tg1`!cZ6kF7taxH&X7)FF~cz7Ra=u5
zGI|`CxJi4Gc#**(HYTnqJ?R~Rs*^?9EtEowxIVdT=(EUwAj1^seQ!gU#gRSAT1FB+
zQWI`n*j(yn@_3?R$Aoakm0F8jzLW-UEdBlM=c?<OqW^6-bY9c<S<vFxFPS79I`e4L
z0!9fQZ-bUgF^vgAX>x3WOaYkzCMT~eGI$&Ks215Tcq5nZU?Aq>a?(sN!Epftqr(Fi
zWupZ=9bS`#yl&WX7;wfb9B!GK{GcUy%C1Z)&Ya69wP%?GuTq=XHBCECc$w4ptG08>
zrROm!2FwsyAynnF&BR+vQ<6vJ*CfZ(e=N&fvbClzJ5(+(!|UUU>O)6aSeYAH1sGg3
zTc%dAd2J28B(!poZdl;adO2Hl{n--Nyk1qToc=Xrc4qT`Ge)QF^Y(r``F<ncmW#>v
ze$Vl(*?UoW#qovnR1a3i{LA~W?EFGsxfg++(l%Ai!sg$;FY0~2VP)02MP2{nLhjsL
ztyL%*8uIad<Nx>hfv%#VfASY;*{xc!sH?wY)sGd6y0q++Ry|tWrM2ou$BM3gtyL=?
zDHBwX^trRY=t*?vQQO27AGicpFv~nx@;rR1|94ZSii-D*5}q-;y(aOm|B}n|<7^D0
z=L<cPrXx=;*k-KEcu`lCDXztJ(MWmr?<aRlkFGw%sJD`fe?|C@qP-qYrFS<++!ej^
z`2zd%nhE~jjy@`?w0Tf%!l^5+c5?A6(V(9TC*9X%b72hR|G3n=*z>gWA&aF?=kxP@
zcq%?QD5vt}q)+xLnF8KlZ#-_9C%P=^l==Dq&rkZ(W_7*4Stp~=;2l-+((Tsbf4hGl
z-d(4A_kqJsp)E1G>-NY_U+r!8aX!y%eHQP@9Dh{KI%}@foBHX(glUUzhECeCr6`6y
zG;2kR+`*(fbBz|=nKI+RmY*8MUM5nU&kyXj3Kn{{t1#hio1o^No2NcKOk@Z+WZ2S@
zc~oG^!k}luF9Pp;umAns^8IA~qzAp`E1o+tO*)VlqBO%x({`&+s>>7)|A0#zle+@6
z%q4v-g1t0v347^iEfw`JGHVhlbUY%!=s9VtP3E4ENk(3rhkJ!=0@9uwI;L}tC0=QQ
z@~sE1D}uhvI~aJYHsx{rvfZlFF7GLd+z@0L`ltQZNpownWR~UH;e47N0Vm^QJC&6E
zjuoxq2sy;&lFp+c!IJObbY^P4C&M+Bp4`u!{QNh9W-B;%{?V=t{ki|s;UL!=Q|=4@
zpLj;QrKLtAa|dT4m!_a)BUjTqkGs9=Z(rGa@44aBKeF=$d?ICinO0WY?b>wLx8BJ%
zsQb%{SxbEzAGQQCs%7TinVYxsOWad=qd>zQCATj*O!}}tAoBf`7KbjcTdkU>%{(71
z3>137kTY}NDj%)wFAw<ZUf=LV<5F95;C36&Aiv_5KC42)T@RIcU+|Zh?O#*ylzmwX
zcTV#zr=9CKTtt^DB|g<mjs0?RJ&WQ51}4QvpSHT$J(=<A{ekc$+XZHG8M>cm|5}ld
zIoUqp#=jqm3I{e!V++w;Dr-K4XYTu1{rlYSd|*EpZC|-N!oTw3=4s|Xe0PQRm&dxz
z+A_Dry{VeT(fg;(tB=mp)-N-X5BXWJ$uVHEhm4lIikF*Au-3x29}DhnSXcdmb@l}{
zt>8s@x+{O*>6MC~6g$Di`;Oq#kk7MtR!80P+w#Z%Tlno9{_ce22v3vMD%IsXt%Pi)
zSyGuUvrT;6x$IK%E_Wq4k;c<XN7ZjF)t|pl^7q;=Gj6J}zWev_)b3q@)xO6TY!bU<
z+f|zs5O|<bi`VU;Ba>>7pN`x7oJKQo7Ow!mGr~`&?QAU6ym)`-p0ff?4K50z-c9~i
zOSra#h<C;*B)r{rUQ;1;vscoh;QM=L*G&EMW?#;~3oV8_wyfRPt}<!Uy91)mZrf+(
zKbG0x>73>uk{WmFQg`spvY?+HGZ`m@R2#f0Yp%ZcYx41DQ$m-%n)2?tr^OMLSDrSW
zXGDZ6m0tc+_$iRk=)joB|4H?fz2;I4ho!H~^Y7m{;N*JuxAcwr(_b1zjgG&Y_EG-D
zO0R$;4U^h6JcDw4Jw#5=$^EatX!+DFcXD_2wmP^@na=UN#MyMorB*Mo{!LF8t7x9`
zxg4h{s1udt^J<}=cCNSVmFZp!Lc-j<gy&Dv<Y$l!dGmbMhrg@zBcoT|X6gRK;rwac
z^*cvAA|?heZDsaIEm<__-b2Qq8FKM6<>o$`{O_gt?I%ao-c&7mx-in~q~6v`3qma$
zjAlp(Ec$ead!p9_iS;b1*HRWt(U~l{<jF~iiXerDv1amn7uX&U(7Gtjd~(OR&X4Aj
zi#=9esoC{Be(E!yB^QpU`OH`OpOIwK!XY!6wMURSNcH1{?}l?%Wlg%cxai5<qyIiU
z|8nPs&x0p*tJVa(vpoDFQy^f4_@+5i7?$4LpcX93+T*k^ZmPtZlO=7nN(C(ppIF!q
zH~Y5ETj?Y=UBXi+czMGOZ9^MJ7PpQ_o5>wgsb&I==@Lae%>Ho-3!^wR_eijI99_Y+
zaTOPXV5(P~k)Xq^T*ftf<QS3y6P*sl`89CdaJZ`7lHfA+26Gte8NPsyz)uZAtn$^|
zZyL|4+1;>qm?|j{n3|-tJ5XQ$ZB;0{nG4UOmN|Q-XtHr_Fyv}lQK5BH^@zddpou(_
zCBE9OIs1RQ{`#IJ8#sNHr%wOwrNFR=bLC1w4#&=jg{uxNiR1aGZhOPn!&HHhDRlx@
z3!~6unS)9On>t^4?%MTz-pt8vr}tzYH9o03?L@2ZslHS3IbocO4jtj@ut;-WWhglP
zcKXaOdK2?_KHf86e&XrrIB&{P#%ViJdQzHxbcxOn(OJ1dNK&oU$WZbtmnauYLMh`)
z4$kN)XD7uu^t6cY-jZ{eMNuh8_iUb5wj(ER`pG@(j)X|ru^!P<a&db&Q&LK8<y{G#
zMGX>Zu7}Q^b>Z2t%1B3KsqxGkQ&{IlY0NmfdWK7fa**$vrzeFjt9PB<QIPE*5Sn`0
z;hO8|X=md%C;7hK^|f`~p2W*nF5Ix#k@@37V)HM4CFasqi`s<VGR@Md+hC;-u;N(C
z4ePHH!xz6gxIv~sM`}~vx*B!0Z->^bx!1i=<!DGM)1BON*M;U=GfH*yv$#A7U1KQl
zw}p4*yuFPRj8DBev004w5`*xX##NtBIi;9u1-hoFyu4EVO59da>CB&hLJJqoQ)yE3
z+^{EdLBXnfGq!Ya?J*VYPH<IHo6IaKSQg+sary*ZV@{VDE=N?9;)Gt;J~6#8!$ag)
zwY0@m1wDaCQ^rP@E1o_%J&Es=pSMUfZWZVaSt!J?ag(^wE5(hs7;-$03dr<mZMN|5
z(@aQJa(?1Cv5AK%P{`sV>!Sm=9FDHka&eW7R%SZPQ?x2zYS27)fyOJ-E$SF63eRz}
zixhaQI_G|D$zEmEps>Is->K8%->B!a-0b1ruCqw(!L^v{uk-iV)xVqbt0b*p{k~{E
zxf6~nl#bTy+gbbdaB-aX((L6qd*9x;_?T%!`KgmP<}Y#einu4r!u|1>)Z{JF%nX_e
zsX2^lTP-(<u4uZkX`>v6u<c5dR-NoAvvibK23EYc6&7B8qd~BG{sbp(&Du>Xg<0;c
zP~EVKB_|<E!Ea`WhDcLu^TP6%@+@AP1dKL+uM4h?WAqJ~WYO2G!0_VkDOSPGj_>!P
zy1$1d+A($P<*3Y0w2?mSk*&F3VCwSkPp(R`3bLAc<V=-JV|X-mX0KL9ONYo3J}oDf
zQpX8eYd2P%m2jHCxFBxsq^)KvIrWo#v~Gr}D{&m2bb!mD@#YKD-tQBooSBk?PClJ8
zBUpF(A9t54hgq&I;A{ANZkB+DPgUdhS!b?>hMFe%O~2pdwU$rdV~+2Ml}i$>p0C|{
zjcwJu11IlJVab|Pp7Y5kbK=<_%{3Y`E}yfx%(VLXxtHcuCheN9%tQiju7B0Mvs!qv
zVDv2G^mp3l&+u4TeVb{J8MMo6Ysu2t=KAKpd*9sIZv6Iat?aTs3F969?{98S*N@z{
zCVc<Dt)`L{OH(?hEohipb0+7;j+pCz`S1R@A?&Xcz2n)&ndeQ*Q`uWyvgYsUO>_=g
zwJc=Sr!O1bweNojF!BrgX8Ka}WZm^$&vxeTmHhUy_PBCCkDSE{HPKaC3Q>MSD;ty-
zE}At(HBG7N)xqPN!hU~ympq4S;Q<bp&J~-)HYe8KUNUWqBjZ;0hi0{buAv?&+9FvZ
zu4b{>)7QuTI=8FN`B$3hrVabnK0X^hpSwLrP#`jNt&P)^89j!o%nFmI_sXqm@c5+E
zrE+~`hrwmHtFPx6ACpLSxgzl{ll|t4-g|$WY|q{NuryS3$*p5C**wCcQBmRhzy9h{
zbpF-+>Ex=GL&BasrcOaqmd8~r`@ca~Y_I9}Wv~BT%>S`r*)cZxYVRizp$Q8P%{5#j
zE-m%>1@m_so6oHeA8%Xbe{)^w>Hk$<pY~<9@yj0Z>9_rJp}F7IJn7GlT?Qw%uiNux
zl6LZBDYF~{>8eK)+uv2cIeBrin&_=-_X`jAp11w~Nqh6Xyx84ZR~~ID&E@_3+gbI=
zpVjO4J@Q$#ah=~@gOx_^8`e0@N{;?~VDERk4;O-8M^DS&`t-;3`0Dl!aou^=_4hVC
zJlxK}x?q9b;bZ&%9g{xlbm2<KY9=Ljk#4t~VC^uSeb3%s-)H!HuHs>L(<{q%Sy{)=
zH%))Az$*Eza=(r5nc6CItLIG$30!;ndp6E~!7tC+r4ku*GnSvBQMmBI<BYdWuAoV;
zEi=R7IvAQ~p11$}EL-3AUeb-eXrBDKNAais6=r`t_xlpRoz;h#;_SBHoeJ(V=Z4??
z{cZlb*v}6x-~J|hYyGx=3)$sjwr1%@28C+ybU02}$MK4x_wTK(+|TtZULScs|I?Z7
z_gi*9niRSI&)4J2%NZ3zdu~rjIDBXdU#4b$aOVC!-KSJf-;4aP`m%q2&7O5zm%iA`
z)zNvvsOd;)L#NGw%<A*G<!9%7)@s<cb?wb05yk*BAEs}5o_}|CP70YLaat+oFw?Z(
z7mkGsn$3t7D7_z*m^ky`GL9{F|8Gnd|M$s^Vcrd+TjA&afA#OrKkFW}Z`Bo{8AUq}
zg@(r+)pAjBYMXib(v~kC5^3H?&eXguy}mAD-x-N}D^@V9+1f3pyYJ;P>E1+9&C<HJ
zb=@v(ssT42uvYKM{I0LkDQ(mk8Kx8Y^}DtlYt!}nvnsDihBq*ltU4AT5UFr(wYs!j
z*<s!Ob2V89cZJs5zUO}}zRu?1llkV|o39<<Z0r?EI{!qrRWmtm|MPY2d3!z`j9fpj
z=-yO;n8H(@++n(Z&)uB9e{;dxKgZYAe|Rr$|LfOn^*O)I9rXYI+_?7i^V<L6)9rR!
zY|nV+%pX(x@ACRRm5(f^AJ>bs``??oI{f~(^E1u={GH|ge&@gb`n{7HCorTu-}Cv}
ze7${<jF<El#6Fzsq|xy5$J<PI`yUq$XJ21a|L^B=>!Q{F{~WKk`SRhipSATZs|O1;
z1O%g*E{Xqpy6E@2+I1<1Q~66aUS$0oZ};rQ;%RzuUyjW#t}lA^-fEZF*7ccoFI)CY
zyna{xLcf0ZFSbvL6L^`5&+ql$`{R#HcJMv%DwC=HNlKp=ZsFH_EkAYY<`m02#hSNG
z1#N$R(tbTn|8DA&9kaHJr@!A79#<V_HT$5_BbmZA6J7OG=4a)-obmhDBlCGH8|Cdw
zXCJ>;Q+VKj;@7QP{akKHvp?FRs+xEzW!vmsx0iqa`R7jk+8rNO6)(@TT$TEAwzt??
zx!u>_X<u8PmGwq+htkVgmHE0+H|OQQx|}hwb%NXL@U=6n(<^7MU%A%1H86ei#Y1n7
zYCjHHrnn@g&T{sxsm0-LH)}40T;G#)uzT~pKZgX}&&)7tZ7Ml+WaqZj&tmJ&37NC~
z+}eF_&fYys7jMgJc=&l={jsc9+s~E>Z=Y+maijnI1`jLov-7uWWC!<tEsg4Ud}q_P
zYuC!7KFwVAOQee>x}!@kPM9Te8;AIAgBLwY>o>lQ*`D<8Px-aN39DB79?#W&ws+?a
zQ~9e`uNpVsTFfMB{n#M5=hNJyddVG&A5Hpp&6NB4(;eZ-vtshDO6Tij#XWp8q3z0{
z*3DMePj9>J7k7K(vT*0%JC{CQvzMRoW9oWdj@x2qqIcDlM(@A3HRn@9^p8W2m(Tq=
zyRQ1p_2u!kvTI{)@;@$G^Zs&3{>1Q&Ehl!Sc8lq~cyZzyOVuOJ^lRUw?MqH+Y|s1l
z=jZ7#j_+A37T?*m?%Fe_J5}eI%j2rgF5X>}X1|W#XpyU$_fFGpF}=9^?=H=36DeI6
zXI6jm*1D2ahI5OKem#2a&YNxDq$W?_w$63+=EU_@r}SrkK4v{v$jodB@7lL9+w<OC
zdbW%0{|#sVn3}6s*=thYe+#WUD*gG}o$Tor3Fo&4WWA5b58^cyS$p<!Zuy<cOA~LO
zsjB^V=-0;QbAK|Q+4Xzs*Q0im)xRd`JuA*$v|{72b+I=2KTnyxy!(DqbiVbE)$RYE
z+;+GB`XP7i&o`&DZ|PaRZ?ZG3csccX{OtWH`}Jk(E|u^5c|*DUY0=yDx^czt<n`ZO
z)wX@zy8K>*LH&E?{Y96)@B97YuX)e?s&;*uq8Ib3-|Z_){g!?IkKp?G;w5WeZGF4$
zv{e-Q)l@a#J3nu#r#%(Sx2&4cp?=ok(FAVs_^O|uN_oX&3f{$4zuom*E;!in+eP)~
zJnzl_1^<3$RdqVBFHv)Q(!)8b+T69j%<X<1dGnF^n9rTO4^67vo4?j}T-MzG>(FHX
zc{LBp{r-RC|Ni?++)nrR^=U_=7pMEo|Ng<c^sjq-)%CUEu{DAJ>v{|AvYU=RpZ~2p
zG+XNU*%@~PJbu427uSn_Zq%D7(IM8uRJcj+0gKN2b7Gq^Ya-r0cD`w6_SZ&<$)&Y3
zTsQWf&HuHz$9g`Vx9_gsdu8js)>%?M$E|{<`(Ayz*y+@9mQ8ano@$%5=;5)cxo7`Z
z1azhST3%N9v~#)r@1M;Hk)~>Vjz>;tONMrp?#+Lnk((dCPepF~)XkDr#pmAKd_K?o
z_rK%)mLIF{|9<wcJf`$+@pt>JliF%tUNJ74X|;tveet8N+5hU!YH$9moqgP<>Zqpu
z|BHs+$+_9aFJA3<+8CX;=kdqgdiyJ%JlJ>sO#Smc_OZKC1FkR4wtBd4%lC5qpQmpg
z{rB3>>f!U^=_30-ZPk~rKeGJY&UbC<&(=nor+k|K{a)F*)&2H&^>)AC^>t15c}c_M
z^>gj&uSDLrs{A`^>D*rCb2i_<PY!;|Ui<g<VYT;0@8j3YmYor_xA_>sB&HKn_x0=a
zzyHFI+tuA&d)+2KfA^aQ-uX4V-%ki!T-5*X@wb`h*KQC0^YMAz%iGKUJ(Ie8;m7HC
z8T*n$B~BH`-}3MKbEJF!?l*5{zuWhB?ec5$N<Rh8|NUwov)Z|e*YWu^pI5X0f6x;=
zuky{T-}2|}w=4boy!80(d&=>(?@krh8~t9lbhDq;<3ERw`JNMBvQ6#po7nREm5=XF
z_qZ$GXPf)ob~%sZpAWs)*T?Pnw#Yta<K6uI<#$t`$Cf<byz)##Gyk36Kji042+n-)
zCN@0&^K<F=TUoa~cjv8KEpAhObm@PI&0oWKwcqW1*S39r-0O3{E_a&h{=B@u_SubG
z_Vbm`r-pjJo&Ue&>dgKB`c`;0&fD>O-Tgl=Cpq0+@cEq0)^%d{|NUF3{b)nE?%$`I
zil?v7w0(No{%+ZS&E4-e9-n`HN70qC;QFdt=5qVLEi#Xf4w2b*_T>Kms=Ar>|Cb2g
z&wKylmN|dbx5jYsy&sRc*8jQOXZ_aCv{rBbr;R%b&vqWKd3{n{e#hs&-F5X3Ra>_0
z<lbayzo78Li%|YMn~v`I%Xl;GQ_K82|6lCgJT3nJVdwJ}pC=vew@cX@U;62M{n?q0
z_buM-D7m%Fn3sW#N9M~DWB**^(rAZeJ@UU#D1YylurUY?=TEq@fzjXg=M}Ty?cWcy
z=(^kfIbeIZjc-ln8{Pzm|90!o&o!?6BIccDd*{xsswY2=Jw5;E<IMH8d;WdTj<0@k
zB>wLw@830PKC!nSl|M`9pR42=C0M|+rt;U$%KN_#-fR%tl$#SXBU9_gw>n;4{`lIv
z&FgI{|FurPU+~rTdVJ-|Z}Ok6uRgzaYEAImxblxvx7&UD!dkyuX^m%c?%Q9cGn4tP
z61H};-%9xH@4F-AoAyzQxUa{~?*FarxBtcYt%(xlWvpLopY8wq$@{#${C>Iq`GzUK
zH!9Z^yzz`Y`}LLeJM;ba`CmTR@tuqCp0YzRr;hu7`>Z`vO!_tjd;hfh8X!>lpjAA6
zhE+|<-8VPC+_}6~TkO>q&*bwzT^}p9uX%Ig*SVM%oh?Ogce;M%4X*ppyz=<p1-4fM
zq!aJSet#LwUDf(hJbiB#WAvvl0gd4ufh<0byH;ebzs9go@cPAxwx8z||NHoxJMCWa
zNv9|NKMu!++%|8%roH}OHDkvkr&WnZ^mfZmSoyU(UH4k*>BlQ{rS`pLF27rJ;mEIc
zx&1qJO($7Z|Nr@GzwH0h@;24?eV)|%TFrJo*!s6k@z3G@`hABFy4zZRJ}56&91(Ci
z{n2v%b(uWr_9oe<bIWZ%yk?*KrThK6-G5tlY^@E@FaOE=-IV9n-+437|NZdeZ~p#|
ziqmr=Pk&t=Uv{zi`oE{G*6(9jw{*?7C^IQ_&ENNHk+#|MTiyBltg>%fug|s2yYfMD
z{(I9M`_EO^{>=8b|MTtAEZyaIs!!iv=67S8z;TD&##>#dGg%3yC0%LNyFat|{_n%_
z|0=(K?S8kfO7hQzzxzyU66|OF|CGJ?`L-L4Z&{1qeVzXA<DvL7H9vmlsC)CSUT6I}
zy!_{iv;^k=U%OUc=Tf@yxbD~Lz2$empVL0a7q+(Q$+q-&weNQBesA@9>vOsK!pPZD
zY(d8JYo0G?=HK;&|GDhXx$(Zg-(1(<^<dFmb$+=$pVQlVWhO^`dNw=XcBk3Z-Rtfj
z(O&oWc5D6LyLG?o{`x<!+240<<<mcJuIpL<@7kPS{p8*5yjzK{c68VOZrA0vc=Pi3
z`(M}WlHc!td#ZI?_<qLA|7#AeXXBTen<Z2HH8g#z&g`GRz2#*ss$P9EpI`IhoAvo0
zclWZ_Jbt1+@5goX{bg4;)#sKSusc5Y>*nIaKH<gp<o`|moBsE88H2x#_4g0TeWnZ-
z=Df{0ofdq8NAp+6T>gfP%<$iR^KU*rao*4N<%h$|-fq0y7tLq!`H69T(c`=P_liG@
zr}?bU?AKv*SR=D*m(M{)yRZqDMT&(Q9?UhmvckN9E5`6##-tb#B}q2MFPGM|G9TwT
z!|-!QuI|^rx0mkU_36layI&8wxp-dA)hpSuo!L=f+TL$I`kMq8IUK!aHk2$edwMwJ
z&F?Ge>FXk@Ui#|a|N3I{_q%nkKOAFhF1@K5{wLLM-@9|s>!fFzDee(|e8?wdZ7{2V
zbm6@$mz>2u`*!YFC*0t9Gv|s?+Mnh2zk4s&|9Sj*->02>&slz+KL7u#oBg)`-pmU=
zZd3HxmM6MJ-=M{-aP^wmkqtE#x83_Qrz{XzzQ|>xht!vA(fLu^YCoH{s>i*G+H)q~
zKK0JZ`@P5eUVVO>%qIW4_gT*7w_VrDkHqq>e7L;ky8pdvJ#+WG^}HW@=}GRw+H-fm
zf90w;_-SdY)4VMrJd0J||9w(8kw2M>!{F$mob89tG3&I1@#jD3D}5bYt9H)fPxXEK
zw@<pyS#9I=V6Bbc`G0ABOzGwD{okhwPHvlgo|WVK&F`lfeqD`Tu+?&!?YA594)1?0
zIACVB&&|`Zl}EsR(=vmq)wwndOVaJXJvka4_j&7kIjg$cp6i0GZ(EzlGM`v*Y{m}b
zbG$FCc@At?__xaZ%ez;bCU2Lz?x4X|=kWemObe69vf@t{W?84Ni=1%t*9+U<cmCF_
z+g_Qzn{jQt?YmjF-+%s^p2qWj!&i5?@<SivZ+!HQw|esK`SfMY3@6+aCa+?BrMr4F
z?@^`v%~x;KeSImh&40d+cl7Ct%l{Vtj@?)C;ND}lD^G7H-_83j+3<Gis@K5=v$Qj!
zK5bgIcHMiw_#giYkI%0-EWgiwLSo~$t*;;4N>T{FaBS8+#R=;+I=l6~(Q%VhxVCGv
z{_opIcAd+Y-}IgPt+v?Ci^s$pxA)n-+@xtOQ}Q8h^6{2)Zh22Ws4b}c_$$=)3iF0n
ztRWeZk_P;lUQZbn<d4ekZR2AxsQPh0LAb=_<AjHg8=V#|PX6>j(Bbtg)9h_C_S~*>
zulxI5e9o7<f44_(&w1F8d6|JhR{Peh&1Sp`&I=Q-S9|<fxw7_O)ydLG<IE2~Ha0LZ
zN^8q7&N=rbdixq)5B;d^D-thk$UW8<{pHr1&dcggqrzB{+P=RHWofz<_3qQpBu0ny
z;?q|)28-|6EWt5NKia73M@D$ZBPT(J)4!(Ws`<{eFV}0hdU|@UW!f5Tu}wd98n!)K
z_t3eGsr4CC*{wu(hIJ7)a?eZlIwbq5UD+ma!qrzs%-CV$Vuk~r3^|5H9>1>E-{Vo3
zyUKH^M8V1p>yMb`<OHNo+rG`@+E+782ELB06MMgW+OuL``O58<Hyq#2yd}zSYn@#n
zz*O<{<<#gUzf-cB>Z0qv&UxHt@w~l#|J-g(pQT%6BX$~zYi2cwU3;^@k(sea#`q+g
zDT9wtIadRV%=ZmPYbQNQcJ>V7N@$ESlbd1x{q4iQzkXj&-@fMjvsRPo%<YCvdi@jQ
z|Noki+&}a7rKmNl=a)R{e|6k{#^qZw-`<PgUZ8zDk1KZW`n~5)heb^L*)86{?0Kf(
zX@{EvL+Z6{YrfoKRhV|=(9zSP8oLfzuU>rdZ=0`l%DlQS4}Y$X64#5Hm9pjSo2>Zz
zdrDHH>pt#Dzj{UDtj(Y6pV#kxxNr8n=&hH()NbFf_WS?OtA79c_&xjor+(e#{vNF_
zMPKiB$|yVg=<CZfaqcozFK62S{e0DY&zDoPV|VsF>aygvUbOxBez!T^*T3)m{j7cZ
zcDI`~b-uH2=Kemp{@?3k*6a5?>leRkU3W;Vx0iRd`1%9|x5S^bmTD>}H09qf{k~Uk
z?~nP+Z8_V|+cmG>`#N5D`+e_E+KZ;HKc1U?KjP9Jo9R(Ib1F}7+U{F>Uv;gklh}!z
z{Z}t+Q`Ns$^Ov=L_shn0)21eEsJOT);K5#<99@>cb;(EXIKBQ<`FZ-<?8$7Jc7@+l
zzuznPn1616(VZuSe}65Xz9w!upW9o@l`mH=e;2)BRprN~P)P=jl&ZyRlkd8k+azp%
zkuSBouKpftz2)z9IegVUFXMZ<yz<VynSSlrW-s2t>a>)zudMSd$}cueyY_6|w{1%|
zPhXRlnL1l{P0VJw7sgBWz3;mD{m%CTn`KQVgjW0Bt@`pqF#XSmC((I3YHPjoex;XH
ze!IoJe(%F`_WvLM^t}Dv(qVIVxGn>mVpsV37)G8syWaNvdh;pryuEF@>ptE5egB@$
ztt&lsaeDmU@8Qq4@x8gaBkkT?<M})HZeG2xvXtFt!)rVC_<zUm`$<J#zY*{{iT{iA
z)%E4ExsHn~eoeW!dH$ZquTJY#SNfG5+t8T)|IeEFu~iS{>na`BElX^lTmIv0d0oxZ
z-tB85HkYmb*qrzO_tWL`>+9|<<+o0GAL<>q>(8mvdV8O}J1@K8|CEc&`G0>;-T&vX
z>f4F7UnVr)7Ta5US9E%8$yeR#nza9#$!+(GADiyC`v1xA<eNQTTYl!Bsd_oHHQB9)
zp<&0nPU&@f|E$~XxBK5W&tUb|1Czw0%+_4L^!2k{^#Svko(rp*`fMNmxc;y7x~IM6
z*HzN*cK=w^eS4Q!S;?C7zxw!2?%%wp_`K(Bo)wYx=Q{0oe`~wF+2d^9+v0DM>E_$c
z*uUOme2sHX>WnMq`@i=_>)E`2zx__($$bCazn_Y>*Z)k|vVH%i6_uy`-<Le%bg%o}
zp&S=|wI?Kg!S@rhzNx>rE&n>}+FiS?=g)@Et9smP9#{H$^5gP*j1C%RPXoWTT{&x4
z`?G+1yJ*P1V9~1$E7tB!ecGhTZ1i>K?)<omJGUK_s49LpY5Q~j+l9wNb}dt$oqH=!
z>rlcEzT3~Y-QQSwvy1cb_Nbrh>+k-4``Ac3tT5!v)-CD3_+M;)Yj$?$n-zkKT@NZO
z+VtLlQ}ObZ>H}fI$FD8xb<KKk;$pLU&r0sszj6%gRu@LU+yDH<^!Zge@9v0Rx?+%d
zXoo}Uk7<9em2Wv)SN(QjyUd2KQ{Ki^Jy=-R{CnTNtiK22e_#71ygmNIoxMl><`>r;
zx{}#0Tcz-5$M=rF<m0|l7jIZ3-C1$c+V8t;cAD*fzq1P%=ikhC+qgFM*_^HIazziW
zT>N{?XU?vKm$UxumD+wc&FSukkMn04WhUg;et4+9?ETjN*Y|ySsqyZGeaV?AAEVP|
z{Nk53OZ#(#$8*8HjqhJ9?EP!E{kPdxXJgIDH~$8+o0{>+UAF&!WU{~S&EMYhZ>FFB
z`Z<38_kS~!m;2a$`*6NRsC+@%jRSU)XYD@zT6EI-+>b|gyLn`T?px$^e-u`~7L_M+
zBmLI5>Ymrvtv;VTuKup_!I!;u)@%0V{pn~dex@gHQT8YBzAe+F*X9}BhL4xa?zlaz
z_}-kKhh~4?-SkWIwx3_7-PH+MZ;U@}t>m`bdcCar?bfrCzuR7)Ci$V;xGqLmte2Ci
z#P0u<y~gvSH~p<^m)-Gt+hg{W`?LOkdyqN*e)_8i>hhHZch>!W^X(<`ukTq>CP^<|
z=(h8|z1*Mjb5c&;qb+ZZ_Z?U{>!r0{?eCxA)7EFbwof~~_uH?WT^D|x5MKYL@P**~
zxgS^h+_B0!a>6j0*L&&ZT6dm%Nq59*f9Gs`8|M4J=E=UJ*^A<wkIQVie{b#S_?pjO
zElZoX-ON7T*{BzBWzPIfm+vLF^W7<0oj6C%BK=@@yWFPZ2bMKzeTccdzx?fLfBRdB
zRqyw`?x`!)Ew}skN%Hx>rQ32d_ct<^*}OQtRcdBb&BxX4`~M#K+#R-7)}ZP}y4~*g
zt6Wb{Gk;$H>+^gwvxMK7!udO1F4V98yW;M0|C>dpT1>UC>qOozJ9XawWo-23$6q?H
z-!FN7&|PNd@xI$V^KB~so?3c3Z0o$DUz)s$OU`|LZJYC_MYkbI?P~R#8-n@g>+(L7
z?Uw!iRsVU>(c5yB&l>)weR+L#`O5nbI)&XfpL9PobJsuiH~VjY*59|IBJuTsf3;;d
zE4PQ_zCF@;n4K^8m37UXB@>g&=Gnd2xm-T_u2AmQuY6k%yXBc@Ua8yNSC#kej^pF)
za#K$Ju&^!Y&Ry1*S@mMs?MGJ{=Kp&*{qQf-AQ4_!vy>w@CPw?-*>*C;`B|c~oAH~L
ziCa&H?Vsw+`~Q<-{HbmGKmXXAFZb(g{+q3*S@h4XYE(CvqOc*Puls+3>chh`{Z>Ax
z^)h_@&RYG==KhtdpHFJ{Jz47NxFjUe?t&1jm(bo7E?Y`IF50QT$7s*O@_$Y7&mP-U
z2ZvuUl|6g#-0k;Ozt&sNlDeL9J-uburn=Jf<J%s$t*d=?RJzY{UH$Q0#||h>n^QH<
zEO+|+xrWyFOCN~y>8)zhSkK@zX+@)pbCFbJi$aOhs{<iL=_i=Jo|JyBDCw`j&c{%~
zxb=YlxBq{>ys!U%`u96#hKTZ$t<%@k?|z?I|5vX;uW&2RfvQ$ThDS9izKf0=$WGDF
z30<atXi3$zJi~KKn`Wh0zpkAdc)-bPU7zQa<;)T}3>MS3PjZxC))FeK{`TcVZm3`q
zzoA~z?7Hp8!oN)@aPgS)S4rW8;fx~}6mAMvJmF10b+t)EhWkM0OdBSK76zFsUUGB7
zbcL2qo_(~?kb@_I+d;}Tp;=si#WL?Z!WvAPg@QFFmOZL}vFJwI(hc2y&tI)&U0~<F
zjICkCiUVIh9O_zZp)vox$+i@RzD9<E+|}=QKYth=6?OjCL4K1iftI(c_U`!cjJrR!
z>i6pOIdx9^qqvvICMYtLYrW!Rm?NSy{ndq?d$vk42zI%3wMl!~ujB~n*{ET;*CKe;
z{NDXdpFO{{Ry8&>&Eu;6JYR3emdM}#KOM<uu2f)Nai~(_+Yy;YudUB(rkie^divA7
zbRV82<{2#en3p*+bcsyk>M)L3CCMMEel1Ao+&fjXHpa)v8w!tbu`uj<^zGJyjaOWb
zvY$!if2(3r{g`3V_i1uWLHxmL3Lm*9%sS$%`07>7=ZEgwtv@I{<$qs#tGT)1lr7J+
zPqDE}X63#<QJ(U;H?uXx_>O~V_P?Ju-e&LH{<z<thmAiXN<-xH#~+H#VfNqd<f{Lv
z@Nh2<P?jyc;<8ep?qruM$BJU#ZC|n{wo3_cdwuff>SJb3c2)Yi?^xO%F~R6$-zBAw
zWL6ui&3|ZO@>o;j$hkw$r(_*2xYLt4^WNTBjcrce6Uvy~eb+5?J91*N>V{H3O`++D
zue;8*Y&3n7v^-8=!i)p%eRFpO1Wi+jeBN_w%c`iZpvKaP$D}3}W=<AT?A+}$qfbQ1
z&YA5<1Ba+;*|bZUoS);2)Yv9`*Zk(HEh}@y)nj$Hjy8KHBa>#=*_6F3L0d$)uXb#F
zvS@;<rcQ-#bYHTCNT-$aWd$LNuWR~jn54TLbtWn41-T{5R~_&15pdFJxZ%1{$yt%}
z(-hX8t&$I=!bDFUiR(GNxzl2We#PN)OAk8*I_Vd3q+75!n#?z2@fDw=?0PC{gXxC2
ztGi_mMxTn{<Ju@*n&~#z*OK+8U-IDy<*61+L{2<&xw?Cbenj(uYe!v|b4fqBn(~RS
z(MsUpEbIK8k1o2$S-;-&TIoO(lgZ&Fuheq)|IT0jM!0?33u|AI!hreaDN6(TH>}9w
zXv?+hTXQI)(f8=Y_9|hq1CoUWcImnsPab)2!cx01VWy?1rb!=D*|CVH21SCIA~Sey
zRD@1UIuLeKO!eEUYlhmlFUb6!`*>pB8D+jJfijZ9LhNF%dfl>CL^K%bOkUf&XS>T1
zfr&l|dy8a_^RO(Od}Foe@nwCFHI@kYEU<8%A}q4kTlrK3GvD3`!t<4qZ;00@PKaU-
z{AS6!bHPf3aA6i#b(Obmxu;S@9(6b-E%4lMrd?ECUP|7pW{MNvmLqRMq&PWQD&Egg
z3fB-(exA#5;K{D2*~K?QTl*fZc{Azg(SOcetPh>GE#15J^~2{EFV5r)nBLF4ByxwK
z+KU%jPKzTHHh4JsO!}_F>7A_05uoqm<D>K>_-H_P!B#E<%fk+`dsrK9T;DK>?eCQC
zNBe3&Njm7<%igv9fb5r@%?v9p^O$nl2yEzNIVYuk%J3<3vZs@(g-C8f2eav_7b$Ae
zDJ=)QR5B0z+;GApdb*Jav(n0290ng66$Ll^IFJ$7tibWWmL*f7fXg9DcB8l#^UEp9
zGp0m|b~tuQ>Ko+v&iJs*q9K=|B529lK!pSrHyfr&4ar7fsvV{t&XJr+J}gTVL<CqH
zvu0ksP{Mk|%{bt|50RyuQ(9V$E14VCwwbyxD$36gnduN9Y#{lV(=Z{#`I(dj|3U==
zL)A6Wf-6}Mvbn5KO%z}<;z|>FIJY%4I+&$ZM3~iUnu2M^m1Qvj?*mLGC~Qz*ytL+8
zgrY={&_sRN+FR56*j(o5TP$9AWUff&S2Ni|MH43)trQW_EJ~4RIv^p$zkzcNE5rMT
z%?CC~w6e-Xrst@we8C_UvD&~>r{2M7p(qPes=^k&S>IA*R6>kAxR1IXnbzcRVBvv@
z?#Wud0TzN!w-`Fk)bEv1REidkP!{0kzajKEG@;{xW1Eizi$KH4g3LEOhk^<Wn8L0s
zn6T|yU~jWj(BqQ_G@Lbkq?y0Tv2Dm?T|UR?xIvDkgI1@50+WFD0)r_x?CqA^KHh$8
zf2P%1oj)0wg-2MXDQ-1=IY%+W=jOR}N3&;5H+^39_2zH!<+C%R*Pq(9EITW~SUYT;
z<fp0r{=cs!uASGsXl?lEC2SHi^44fCQ1f6kkh9(CTD`&fsE=NFhYM4alS4t*BBlm&
zg?0tAC2kU~L9LsV`OPMZD<t&o{ne-UzFX;DXJBHQ!0NVuCauH9!c9x6JOv#(=0s=+
z9%j;<ek8w2Lm<0xqVBU@E*G|?`MU3W!1y>Jl;z$=cJ;#GGxJWer0}x7mCe0*Rd;S*
zh{BSs4F@V1P9BnC^itGzQZW@25^(V8<X&nb7+MyfW>TTFm0_c^l^a7*k46iN(vl+`
z4IZ5e44umFg?sx{l+NE<A;pw)XvZ=&#emR=O9wa@jwC2;4VWgiLU)pg!zsoNNufik
zU+UL*&Pa4PG*57{aY5MDBNLZ?FyK++eCW)W^oi4ZS|CS|VNZHP7Zcl*iTw*beQFIS
zImu`rcRA*<?8w%oZW8lkyEm{oH3+t;b2|8RblP^D-d65xFwe&0gkk1`g$*jb`?l2G
zxO>5CaoD4-wFwgfRdRd`8Ctg*G%|BfVG&~q3Tk9;WfPNWt~ELk6(A+hCUL%iMR9Ax
z)F62_?lnwWOuaX>_mpONiChq2b~3!OvBB$){F0EQ9YqQJ+(uqLT-P{41X_A7I5nC~
z@H`QrtHEH*^T6@wSwGdU3;)`g*|~5o_TIJa*u)mzt!8r<uG_XPR69Iv^V+}0)&CwX
zc@tN?FG|Np+Hk@9N3JvWFNsf>zrORhZ1I(C_wA}?a(20720dTYrr4a|yUUK(FD+fQ
z&ysm-hf9n~+{)9tuPN`Z`O~%3vcT}#2@CPA&XZcvot=BdI}|?6i_KvX5?s1Px1($Q
zeuMR^wbM)9n)m%VcgXcE&-+>tW~S#?GIKoFY%o%BQ1CLe)R&W5wduRlz26p3O<THt
z?dj;>+b+iRBfs|R57F*Nuh;K;baHx}52IOMY}}r71tC#+?m6krSGA{|o4J=`L%)5&
zd*ADK7+E%^Y!NtGXtzj$=i@!@qlQOT3UMSY;8~pN#@I0}vr<)UvBySrwGL539u_eV
zo?x~<ljjSY8XoliYMHO?wpM|`mBpQ7N=K;gqL~`boC4i?%}f)7xI{c0ZCHdRY-UO0
zILx`4f5DM8PEwjos{9)cH61v)#PVmnWX{!wMumknMg~t<w>e~{CUrXX?zm!}^XT3j
z9xpkDE=`e3DwRu;_|`CFEnpO!@rfreWscEgrb7Np4uTt|q`y%~67Gumq#!uK`2g3o
z84TfFPs@8a8k$7~Rx6isSu7Dv2@OtQ|8z`x=>g*f29FY3ri3cIn#sb#sMsW!ufVcc
zYJ~wqSEGeskV?uHAKf+~;b~4bO6OS&EF%;fc#@hrRt9fl?9%i#IU>=R-pZIXK_i+m
zIIxF3t5>3X#siTz-V1-TZ1pr**W|rz)7f1`zXg@^rY?BEvEubrm9|4AH%?!Cv~}*f
z)d9u}%1&h-cirt9zj<5j^plfk&HwfMaC`mg%o_#2{$@U&rKZDIx%+Z`i1Uo{lcBW^
zZ_i!zm9SnPxMQJtgHpDZA)hb@)7LiV!wemd%e1Z>xXO4_L6)i0g;j8N124mqq?9!a
zTf8-%y5vr~^m6|EnuDU(|8CjlXL^2XqP|4S2PtJffmsVgE=V8WFy%;-ieopIVvD0t
zX{L~rq}pu9q*52#6ko0RT~>cTE}z4Cq;maCp9F7FuLrj_wVG7@I$1rxZp!)npKdVk
zuhMAnm|(;v8EkaMYQ_bL1!wqY7r3ZQsqWO=vSdP`>%GYhQ$rh>JeaPml2VLbG{@kW
zRa>B{bA!Z@Ba8_TWG4qo?`UyX<=(iUhvAG|gZnIpo*R?3n1nYQPTW*D&4J_SBnCAx
zrtAkNITksHJW)KxaEQ-g#Wb&$#xTuJ{<Macx$VXr&Wft*RW@$q*(SyON=SQalZosG
zH-|F|O&9qr;W)u;sKT&X{i{doA(f7`78^>%M5>jW6fRs~bTQy$WVa5JUlq!=hgG0G
z;FDs<fm0##<g}-zKMe^i?^Ut#y!3f30~?c)p^F0Z$Bro{JQ6~a`?^zlmNCzGvc338
zL(^0dl@>+Spe{}(&Q?vee9yH)QzX?|F9^<Q>}5EoEu-i=No!M-&}&`}7gqMKBFiFr
z*?EM*FL7LRG*WrO6LLjDgXh$?OP5x)E3?SAzkPiFqFvRw*^@ZTr`mnpJC}17=gziW
zH47hHUFz2VV(aI1pBF!RvT^aFcKQ9^Up%fBwJ!blrqteg`^My_AL43r=O;$X{(0&%
z_v48&Ub#(I8QV+NWk}zyXJAlOW1nPWqSet*WFA{~PA)k8&x0xPYaEUh1V}T!p7-xl
z__z6Hf4leFd@pMLW*)ca^?~!UA7?iA&E1{idEwJFPxt!l{=fY@|8|!5q&hv@b$_ni
z>z~$q_Wy3Ai?4eZdi(Xf?z;WYznpv?SGt&6U|rSg-|98#{eS!Sy?$sez+&mnQ-4`B
zz5eR~eVM{Hnw3-4<$fLCY5)84$@cov_4+a&f30%*{b&2XFU`(=R-dn1zp1&hnBR_r
z?^^J>g?6>S_5Jt$n!i4c=WhMq_4a%Jnz`3~U-R|om)h|8<yRQve>^L%w@yE~>Gb*^
zk9*5w%AQT#zxVOQ>FaDBUz>1Se&^>oE3Mz|e82C0?XR8Usyg#(ZmoPi=U4aM?YDm&
z*>5+2ePg%H5(kC%f})JQl9d(xN-b;D3@`9V1hAbDn4zh-*}Ef!cczP@Un7rT)1?<@
zdKTPX-Db2v#H)mvQ+U3j!HI|&3=NEd9t&K)>#9mCoc35WmsgopDIlWnl-U%WM8RgC
zMJ`1vV-z+xdOS$!PxMjJKgn<`L`uo<a7zQ@K?x;4_1o8i4j7zC$t?<Jo;~Au4<ma|
z%0Jg>r$S1m>}mGArOV9LmXN@Z7NTK#qM_-?CAX!q>jZ?Gm=3TlSn%6*62D~28AcxA
zLIys^X_J&x`ZxFRoKQP&)cMVojmMe8Th!&jq$gYq&JG*}857MmC@gUh<JqRb-NN>g
zK~1yGv&oG|$46?~fej4pEZ!k{E}3T@o?5W&=0`zw{Z4ZZZU&zj7MZ@)w>SL#p3ke>
z{&17|{mLKP>+c$0oig|5pZk743Uj@qt)^xfI2yb@n_ge^>_ckym$|Lw^L}n_%Mo8W
z^<r{&bGt#t8?nO-EnE{cjPCt5IlcD!y?;k8zs}$F{+zMD^}dr9g=c$tfBgLZ-|E}t
z_B|hNTwNW%^W(YY|0*y4&40Jy>=Wzvds6Ov_?RyDJz48XT1{H}>ii$Kca_RI+!pWq
zb*S(5+v0mKpZiOiKJ5LOzrb$KuU*{#%T7MEJCyHdxqS2L((V3lKW&%Ji@19yNLZr5
zZtMTX`SuC-Z=SdRe8aeZ-Pz;U<EpM_KL1<v+&1k_=}A?`jj#W_mcL)N{`|k6Zx-k6
z`eE*UVS=yu)#AK=(eD>n{Qovn|6bYsL)rOzf0sX>cVkMCvEA>RfB9~eU-SN7ll<?t
zyG-$+#^16(y7OhXXI#BhdHVX(`w{<l+utpHy4HNo*UQZMw%=Py4<z^RyKC(eTYSBh
zKfd<#pQ(DA62zB_oRiq#$>Ya%Y}MD0XIeU6tAiu=uI-s^>v8aO)51TC3!jECJiX_>
zG%euYHWl|3HEX7XEjhl{+jo<S;;Ce_(qij?e!=CF%$s(u30JdZKc&>{nC5I9-dVEa
zi(AM`2G8Ys;<Ks@7EE3_;rC^>_cJ^;Y<l7C^;dCiyY$qRH7hnTc|O==q1a@2S2UtZ
z+b?Uz#n^i(ePKz?k9kkr+dV&xgYoMY#%W&_nWmq7eEQPDknpE>d7ZYKZ~ZIZSy^fB
z)xzt;C2L!?rQ^kxx9zphigR5hZ#=z~xBK}=VgG%<+3mA3@-sc!^|V$T+oran_Tkmz
z`)jW}cCX!ez4$zz;mfTn+dSLlf2Kvh-e9PlBeAMK(&3G)!V!nUYnSuiY`NXY%=YzV
zY`SsKgbBO5USv$3`~5f1b#s{w_xn~~`(4X#!*g%$_jdcWS=sNhPP(R8-41_imm5->
zdrH~wtL&6@FKyEt=JWhnpu6qQp^NUl66Q5d|8;jgTeNergr(lL^|un2>t?^oYFKl6
zYuuOR^=E36FJ4%-V42-!yK^<4U%Ox9m)(8)optp6ed~7Cw*T$>bLZXdcLt>gP8{Sd
z4%>R8<oy)=f@FgY>mF|vkC)$g){%MJjiiL&oYJ$d;&(rMo6Y^pT<ntX%pG-CF8Ig>
zWM7)|?s`DPwL9q#e&n|E+{rxl;;kBA#Ga(9FDCA;`B)q;X;yONn)5H0(@{=KG(4V%
zC^Jkun6zM_(#A#qj(cofz2Z^qkB&!+XNNjmkua{kwdHyEnj3FlEdK33|DKR&b@b<R
zi}{yDhnokjS?9p$dhBVl#fsj?=5aC~UcG*N_{!~d7C(06Ki@v{&byS|x!W3_9du%`
z$bKkecwxg?xy5mnk7jN4zP5GCY_r=p<~&yDZEL)^ruv=6w&UeCd+IJNa5Ucbvi=EY
zeD$ZNt@(RD-dZ5|HCWBp>iP5KwZC8F&-9t$9<Tp*R~NVVx*E&Z&FjKmWyR~C*tXU6
zC6CnamfLx|ALpO5`8p%HkE@wMV_k&h_m9u#S-<w*FKJ#8k{!Kz+0UQi?;Srcs+Rke
zekDKVzvJQS`^%n3e-^j-vHqFs*^7S7vo^gBE6aQzGbj3{Wy1Ei+v7g`;q?|fn}7b<
zbDiAE2P?(T{ra1~obUdorE_;%WaL(}W_)f9DfIPD>&cA$d`8<_-0ok+zuwS~KNM@P
zuZ_Gk=PX03>djQ;!)Lxe|NHJ$b^hBFqc~wT!!V{fvu<z{hSr6AjBoz0{nj~j=1oiU
zk{1_r-FvHY@1FAi|LghI-}SF#OA~Id2vHW|2<n?1bHV<2?Ug<s)0K}S8*e_kGPz2&
z=)>#o@Haa@`!Q6r9w-QKKBDJ4>+`<}&i#@*Q{Rg7{kWrlZs!hduk$w&lXQMw*8B1F
zcK^NomzVR++x6bjxNKJ8)7Jg=9~K;T<Cif=em-}9{kNU{wqFm)-Ig!8Q(ku~RAb2n
z?JcFh-|hdcx!)%L-J+$t-<xSp=Hg`DemnE^I)>$c-%USn|MAL~m-GMKGql%yqP#-V
zF6~Uu-m<@U<k-a|qx&T0O_C9m{kv6o+TP6%cHg(%vU<Zle_1`N?|(l3t9Z)qZ@ryy
z=iF`5$9g4f3!}7bGv3E8d%N-V2WS3&hx+S(&9?iy{m%Ez>@pj^--`{b%XuI7+xK=_
z>*;wvpWFLMnq{0e{Cg?d@6SQc`!?US-Tyv3fBpZLbaB%K*}q@%E~}T4*z@<wNmJjB
zSVNWBde2X5s&+5<@4$9hYgI*kjmGk?<^D6Pj4r75l)8NR)O}tr(y0E_2Hk76e-CxJ
z&x^A9EIIr9)u?q}GXz!%Pj)?MZu;$J@v#Zc`)^pKytwUs{q5%KakcDUx=fRl7K=H#
zHZvTGb7YfJ53>oWslNLC%%ulg5>`HXH1~_%x;L8QdsZ#==|6p%v)06`r)=r<Mu$*=
z+3$8g?9%?X=iAm}^J9N}O)0;~%|HL!Zg2g4Pq(o#6vPItc^Y-Zu*pHdecueT(%GvL
z8}lZtyimDObbW5?E*(}$*2=`wo<)L83KI_rP1dNK?lWs@t!l%jE-gE|oVw*-c`r_m
zU%%y&=Ebth<ykMTmVbMl|7E^G=66ZsTjKf|@f$M!-ud}jO#i%*DUalx@;@gUh1JWx
zzWSZyZFaf!eEqlLt-UXs+!Qu#U^vPa_OSElfhvY;mLCPQbC^U-<O@!@Xl&R%$=q$v
z%KklUdPzrQS`?zEG_7Lsi1g?1uq^O9q1iqwJYpMT=MR}1RV^Y<r}Au+YFjLFxZ{0~
zji`W0>$b)q?GsEdI=Xos9YWsw#;(5XP&+FjC-+IQVrRGR?V3|pesVNf80qCQX?3Z;
zG@9~A;qe2LB(o!{I(j`_nMCuqCTOgU5&xZ(uxFvq!Ic}m9`zXebWS&Ho^!~02~$C5
z`}Quaf7TxaxAvDiD}Hck<C?qE{P~`rzxJ5Fex1#B<$IQqCVx=T#M5h+CA@vLb?@un
zK2qkHt1lj2DA3#LXy6vv$fT(J$dYrGP_vCn3yVR=$?6#l21437Ni)8&I5jeQNOc^X
z=*&CCXH$c-fRaE&w?dzQfWV4yuNcMdH_T64&WEr}W0<6OJh5d1n`^vI)ybBZ2LyXK
zL?17z3J*T)nIXc!u`+8?_FRX!1N$803^M%#T&`IuELPBUk&%#i%-V5KfNSy=fv9hv
z7(}fE(;lql5U5fMn@}Z?q}0fNV2;2Z&<Q;9+ID$wAKz6-OtiQdQhRpG%iH<JrLR@B
z!}TL~7Ug-*)_%h5mRx&RY;XG;tHkB|{z@@A>|JG~T6S<!)%>7}wnift0dA%?R%cD6
zfE8^E=j{!g{ee@OQG;QlK!?uCDEEXT$2tuc3UMb0g}ZIl_<7U1;=soAhNVvqEzpr$
zvS7lIWgJ?XlZ|+uC#+SUFqvn$iD=akH<>G4f=TXDD}-5i_{B7qpE%NBex{2dkU@#7
zC5Y!?3fEH2r4bKB7@60|B~4LqG39dCTC=c$MR2vMX%<h%q|@fXReQBo-O#zwQyDj5
z1+!e>iWE}`+ngUS5)Yf(xi7dUtmJSq;y{+>w&fzBZ#oxxH7pD`aA>InlQv7E)F%Ul
zbfI=>fdrNg&ajg|1m0Y!VA9?*N!OAsgNtFJ{~c~!83qrpwM<K6k^&kf40)Ow!#A{x
zrfRc%I#k#b^59?q^OP6`57AW|Gq@NSH5Cn1LM#qUj5@M}g=JnsYiDx)0Vyper%8JJ
zPF`*vGbbdy-@8@NLM5@IL3RxzN77Y?m2W1*hT5<CvHn1su>2{nE|HZ7xF$*|se1$&
zFf83+&TJqp(LLdcv%(p{gHsMEvG6E&iuX8bK98RCr(Ijd%~7+QyIJIk);XIwF09he
z6~makT@_z*sGSU5t)R@bp2Jg8A^%`VN`)g=)<PaJ|5aRJik~iA$k1H6(7DUjSo~ny
zRV|_NG|ma1SeTWzMtyqvoh8}yqbdKSE%(I?SAOMSow#s@NrTaYsj6+J0o>=$9mvp7
zQ?L+f^HyvPS{56kvuee;xK%&aA58P{3RMyDv~67aMC#<3LykQPZVoBF9Z9#eHLVi4
zL=HulF$gF}&iKOTr|GBUJyl6JGLc23S=NWA!u5cVir^}yPX<fWMA!~SJ2<b-6gb>^
zA;s{RVrO)S(S{{F`3s^HI+_F|bdSz$+AULLI8lM&NX9&mxuT+6$<h+?fjXyDPEOJ~
z$gWZ#P^x*LBB)J0b%NIM9;GW8nrB-}mvOHObJ9>3^gr}LVRgzR4z0(vN+zsa%n@Se
zS21}dxwN`e@6rkjJX$X``~0_wM}jptI?v|{9Y~!l(6LFrluN<;gv#6lMhzh+*Edek
zc%|}GI;>`m_q<bg&vY)mXwLajV|T{%FB3M+OY*Tic7f^SXRX9LJYGVFmz{E-WStU}
z;M;WFgvB#y>O-N!vkgO{zdchspeAeSl4*LiWV&VG4vD1#{0wJ2rhDg~TAJ#Yq&=zT
zwSb;=WwgM-rX?i{-iXFswO;jO{h_oiwJMn>t4%%xZQo{F=KHDiLM_Xc$6l-Mu(RBd
zoA)d2@a}15nTLOWxwH0&RF1^v3%XTjcJFuRSF(EKRp9>fXHM0<{d)pmeztXq7Mi~8
z;9JYem!B@12R`uf@c91G>(8lUq0z3Q|9Mwr9SRKzJnHTeS`!lJDk?7+`Vn*-M2!pR
zgy+zZkAi`s@<b|dtqHM}TD@XXS3SSzv%6Z%`J$mA8yU@nxb8;I+w#R%Q_APQb5%&`
zB&}6H<{xdl8!x;pfhlx{m!;)C#pY$x{%db84GEnLl5CjvFRL?5#`cJ#kWt(}zrfBN
zrpE$Y15_*}0>tdNRM&b<&|39Fp7Cplgixo$)5V@uCySWUS2MWOzFD*`C&#(y+#%I7
zjSUSQN3=XcnO83A`p+wHSo=!gjDn9^HZx9aW?!i|`Rpnc&LhHpyoXaF_I!U7>2gKe
z(19~jT(h~x^Aji>{>M8rhOTc&U+=YQk&1w-;VC!Kd%wB7#lzQW2;U7*?ewmcpSl-x
zD#ri(DVNp<zszr4+O=X1-<~a>CZ#AkRc=2n<x{#S$W=77gqvwm&@ADQYq46l+(khl
zxxarE$^jcUOzbXnfJ6DCq0`r7BNZ)&05*{cpAKc5tn4;x{~C09C688J!h1JR3>`hr
z8p_+m(9jXm_eDhGy_nwnQWuSr(Hd*y4oz@a`674ufk~^A#jE-xemd+~yx~M9yIMsX
zv&+JU6<rOYciy`1TA7~tNP|ns!DS&wQ^U=iAn}`PEb~BdX0+#fZ*Q;py^6<ob{1EE
ze<$l2cr-HDWrpR;y=QckR{h%N?$IJMrN`THga1)RSGCozobIQ@E{G{eRB?L4E6CY0
zX>~~G!BpL*8KEJe9bQgLKCS6$XEQu}JZFc-u}z%1XJ?x~-#q{Kn|<?dtzT=L{f3Rp
z9qOIrGq<*8_uG6r5xCgx>F1v=Vk)vzJA{0fC@J6j&(R_h#}lH{&27<_sI<f>=-Q$c
zM$5Spf>vIXF)8z?oE*3!aG^@P;*m+=s=DVbtL#=E7i8|7DsXsNbHd$Mq3ZL0UH<m1
zEcwjt_zj@5O&&dNTD9zQreJ1X9^c^$mg-6_ArrYz9&5K;l*3%Av+p#U&px#-j+q(;
zmU=DwGE_to5BpiZV_6;5<Y3)-B2YCX>~nyc+MfTL54<`VaBpJEO7ZwAPnV#TSJZkf
zz?nu~yhCGS)s^el&(Ai0|7!L6c~+%a8zau7ZRX|WT{SDm;`y#!yUZ$GTqgBexP^zW
zD-WI(v(PsDj0xYAMW>%ez5aD&Rq@etHNJ-v^ww!V*}U!ihDDDxZr@sOCn~!5oYTgQ
z8>bhy#^}XgzoM=s*1a>wIe2pS;~KmB7cK<oh<*N96C4~Y;@ax8aN)v>qMzr+-u&n6
z?(ybWkBpwuC%I*p!AY)P(B;Wq{-%UyXJ)#~RX%Cq6y|DWs+yr&-S_`}VT;JUUs3rF
zeACtV6cYQo4N|7sig$E1Zr`{hamGUrn?}cD+Jc6HE4_qFSHGIc@!)&46@&csYghOF
zx;E$AwQWutXUy4ta{Fq~Q87OxCVufxTeo&CZ<E5y6=(KLY-B$0TW%v${NhU1wY;-}
zRxuyi<977x%SI8i8|$`C+p=ugKFhX^`}m*NE?lj!kd60Vx9a&EmxWK99Yp0)?){Eb
zNMaM*^Sw}Hd6u!yd&&1<u{+i->gwlKU9J9L@A|cCeU}EEoW*T+#m=t6x#JL@q2JuJ
zH(e#W9+y9l+jF_6mj6!q`Pb|AEH=Dbes<N)`<Bm2qPN7JJ-xr?N@4%LFMhi=&Uf26
zAt@;EE6aH<c5Q<%`_4D5s>tur73)5lG*P2-#Z})^6IOi#6^-Ir$-51gEnckLwdjac
zP~^eC1pxw^cko@-R(P8(7E}IFmj6uW`pRct|Gn+@vwN0a{;ga6tx3VhrqYb#@AZFN
zWo(zR%>8Z~ZCxxW_HE<y0LC^A1&*l)Ufok~h&#P{=gN>>+qQ-6nG&BOtRB9#Uu)Hm
z8;VL(ThG@Amoab_PR|#b&M3KNbN_w&&(G8UyJW2_->(>NpK*J6e0|AANrNSJ<rjbM
zmoO?k_AvfV|1K-t&c{<WYbvsu6iOt2UGwknNpr1TovSL|ciwyd1ez99=Lb&QwQHB}
zF25R!4tJ}kkGK4|c4)$e!XF!|&K+@hVpMzSXN{S*Z~mTtKTdCs|8?s6zR-;KUY_R;
zR3>*DbpBq^B+~X!@{{BFMJ<0U`X1NVg>UQ3iRu7X8#Qk{)btBw9xJ;YG*Eu-q$QQh
z74_)r>g!Lp+||02Vtu(b@b>++vn)#cGo#=C>JIjweCyVlx3Ml6OC~r87AP3l9Ij@O
zlUFz-;&o)zEU%^6Sy^+-4^+R>hU7A3tuHYyDQj!LZ<jvHXI9GMqBBRit>S`%aqfFt
zz5jPblW%NI6aV|@({Xj5A8#D;^4=BQ|9|r2tk|lD^Z#ACA+Vx9(vvlSJ5}p$#7k$J
z*o7ynioefUEoBt$DmvdlOIx2ID?7W_(Dv^&#tx51;otVThwR~q)@D`Sr|c(R_op-Z
z%BQ%?+yC7;c>m7p6UzL5UODb8dwF%a+uA?>w(qaYd}jZC@6%`Zcugk;FBCb!q?4e}
z)yY`-e|fg$F8#8?eGv_6oANI=E!y=d$W>Hcd{XH&myVRpH<LDUD13~*uW>15vE*4c
z_l^aJW_8vo%4+<y3j6aX+}>*2=hZn`QqpWsHqAZEmRo-G>2B+@GZ(yje?2Z<<H_z_
zMaKj}wB9UMZFBVH%l-AzMS!(A#B{FL)wC=T&zLjIbk$%1mze1y!r~~vvTBxxz?X=d
zYaiJ5bxhc5)?#s3GC(INW6kU3YO>z#yb}8+I{QkN2?+)I`t}y<iADqph&)J%yY%?n
zuXV~((;aK4u)I{)-tqo(8N^_5p_PhCg)-k?U0ofZu_k7xQI}G7?k2TUXXMkI_f&kk
z#`0>$#kAgTS<a<bEF4ozQUlf31)tpLTlv1nu=Ar+Xs_Y9okz}ZEjs+&^3k63uN%9c
zpPQ>)Xp{CuBlKvs&i$~X?xLYJF&=H@f}YDSXJ21udTh_1Pp1<l(u`*2n9Z)(R9;e|
zB0YER++#Ct-MaPdTUmCludi=<`tq%2!INL+ykFw*`t`4}El+X-R;)FA`!=gtA-KP<
zPtW<~tdeD`H(zCQ+_empsX3ZTtnOaCIMHkAq+SD_%P&jZ-Kzy!X8J5ETC#Vqt)_p!
zvh2$PSIo_HVm3TDbGg3mz3q2{V$)|!yR_^wRg9<a+O<nOzNT>b+%lnwg34|xRgOtP
zZ(kms=aYW#aR;O2`?U*s0@Y8f_Mg1b&#HIpE9Mna-{M5Byqz33vue-vx#n9HUD_Vb
z{l0kHtRJ7W*YCWsG-&1bqEcvas;IR8_ucn<zPCCZjCwuiwdBL7#5)c<&*zscIUer$
zCMSupltHA;L)7pfgIGZW)3e&8hud#3MA&vHnNIUfj`fX>j((K){~fe&j&N`}xAWoQ
z_VtmQmu=j*aS_Lt6t+L+3wXT3e1u#NOcgpbwPKR6UeH~cbrLM{lNH?+n>}LZ*X?EF
zlaV<7ad&qts5$s?W5dkdyLNrMSN;C)_xtuU*XA72`jzj*z^pofnInslzvu!3g9ckf
zqS=#(`z;PX4}@Ihidf;G6v3=knls`2^P-(HpO49{?)>qh(0SFe6>AoCon=ls_q3?h
z$uV^A_iIst3%_r3*>`>}1AD}ZKs|<r6pncsO>A6jM;SDA6ht|lo_?5?R}}n#eOY0^
zfk{^HuP*aE_+e4sOdi(v`_8ES;&=3P^jb1SCy1LNLpA&xJJ(vRRV$K|S7c~S?OJ?8
z>hPJi$PUH}`z;R#1YB|!b<+&#^PHl>$}}-}Ygg1$C6Shf2a{KyI=OcD(e{Ry&K>;B
zicV)zrg$8cU{?Ae$M=3|rbr|||0ce~i<2S*C*CkPu#i20HN|0_mL=$jw1$U!9v`p>
zP3j9hdBL4)rnk@XfC>Rdu{8?*2@O+O1OysIZ0|T%cl6Ku{xhM%;Dm<93{f#Hw}m|J
zUOHl2yh2M4RaJDDiWnut7%mmzWbm~9<T5cZO#T!*+t08-SJC&3@3m+D7munbnya7B
z?Nuzy#-fo|amek*ca~`ltpY15f>bw55>54vjZ#?{keJlS?6irkp=s|ekDOUKJgFSc
z49BI6TPAkd8~HnmhK5}1{jdI|!ueF^bB+aE%&Cncu>uB~D_2N0F)p}v$mwC?gi|hw
zT1lPG-&!slG(5@{rZ8=_*;TDoKjIsj)>N!kV)0+&qUFVQ&YCkKqDE~hcdnCk(n3L>
zTgvnEqo+IV?X;1YCQ!xY*q126v}%^$>J^Xb8ND_rty#rmz;TA@6Nirb%^NIltTsO>
zVpy;tfnC$&>$+Hz-@J#--g>%7ZeUWiVAGsZ6Iu}xc=SJqhvv)QPAp2w3d?;|*34UY
z?(5p@hW<pRE)zbbhTM~^OOjNkZVI2xq;hqpw`k}e{|1J{hFy`oTXR;Jrp|mIs<ol*
z(<)6ymOj&o5?%rgTc7i;-n6(&>tA@n6p0Q=rU}zp*c_tHP1AOnmeBa0xhaC}!OXiE
za~T*IR7+eVN>UO_QmvAUQWHy38H@}J&2<edbqy>-3@xpU46TgKbq!3d3=E{1AFfBy
dkei>9nO2EgLsnd*FarYvgQu&X%Q~loCIEBbDf$2a

literal 0
HcmV?d00001

diff --git a/install.rst b/install.rst
index b3a4ca428..7594ebc30 100644
--- a/install.rst
+++ b/install.rst
@@ -16,6 +16,15 @@ The release page has precompiled binaries for Mac OS X, Windows, and several Lin
 
   # You should see a usage help message
 
+.. note::
+
+  If you see a dialog box like this on Windows, it may be that the :code:`pg_config` program is not in your system path.
+
+  .. image:: _static/win-err-dialog.png
+
+  It usually lives in :code:`C:\Program Files\PostgreSQL\<version>\bin`. See this `article <https://www.howtogeek.com/118594/how-to-edit-your-system-path-for-easy-command-line-access/>`_ about how to modify the system path.
+
+
 PostgreSQL dependency
 =====================
 

From 0da8cb230fd5b62dcc26334ace3251c7e7decb62 Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Sat, 9 Sep 2017 19:49:42 -0500
Subject: [PATCH 116/652] Proper error code for failed content negotiation

Fixes #95
---
 api.rst | 11 +++++++++--
 1 file changed, 9 insertions(+), 2 deletions(-)

diff --git a/api.rst b/api.rst
index 5b45ab3c8..9b800d016 100644
--- a/api.rst
+++ b/api.rst
@@ -283,11 +283,18 @@ This returns
 
   { "id": 1 }
 
-When a singular response is requested but no entries are found, the server responds with an empty body and 404 status code rather than the usual empty array and 200 status.
+When a singular response is requested but no entries are found, the server responds with an error message and 406 Not Acceptable status code rather than the usual empty array and 200 status:
+
+.. code-block:: json
+
+  {
+    "message": "JSON object requested, multiple (or no) rows returned",
+    "details": "Results contain 0 rows, application/vnd.pgrst.object+json requires 1 row"
+  }
 
 .. note::
 
-  Many APIs distinguish plural and singular resources using a special nested URL convention e.g. `/stories` vs `/stories/1`. Why do we use `/stories?id=eq.1`? The answer is because a singlular resource is (for us) a row determined by a primary key, and primary keys can be compound (meaning defined across more than one column). The more familiar nested urls consider only a degenerate case of simple and overwhelmingly numeric primary keys. These so-called artificial keys are often introduced automatically by Object Relational Mapping libraries.
+  Many APIs distinguish plural and singular resources using a special nested URL convention e.g. `/stories` vs `/stories/1`. Why do we use `/stories?id=eq.1`? The answer is because a singular resource is (for us) a row determined by a primary key, and primary keys can be compound (meaning defined across more than one column). The more familiar nested urls consider only a degenerate case of simple and overwhelmingly numeric primary keys. These so-called artificial keys are often introduced automatically by Object Relational Mapping libraries.
 
   Admittedly PostgREST could detect when there is an equality condition holding on all columns constituting the primary key and automatically convert to singular. However this could lead to a surprising change of format that breaks unwary client code just by filtering on an extra column. Instead we allow manually specifying singular vs plural to decouple that choice from the URL format.
 

From 5185a9279824122883d21775bb157ae81a668043 Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Sat, 9 Sep 2017 20:21:46 -0500
Subject: [PATCH 117/652] Move config section to install page

Document special host binding addresses

Fixes #83
---
 admin.rst   | 102 ------------------------------------------------
 conf.py     |   4 +-
 install.rst | 110 ++++++++++++++++++++++++++++++++++++++++++++++++++++
 3 files changed, 112 insertions(+), 104 deletions(-)

diff --git a/admin.rst b/admin.rst
index 2e3e7ba23..f4b291bd1 100644
--- a/admin.rst
+++ b/admin.rst
@@ -1,105 +1,3 @@
-.. _configuration:
-
-Configuration
-=============
-
-The PostgREST server reads a configuration file to determine information about the database and how to serve client requests. There is no predefined location for this file, you must specify the file path as the one and only argument to the server:
-
-.. code:: bash
-
-  postgrest /path/to/postgrest.conf
-
-The file must contain a set of key value pairs. At minimum you must include these keys:
-
-.. code::
-
-  # postgrest.conf
-
-  # The standard connection URI format, documented at
-  # https://www.postgresql.org/docs/current/static/libpq-connect.html#AEN45347
-  db-uri       = "postgres://user:pass@host:5432/dbname"
-
-  # The name of which database schema to expose to REST clients
-  db-schema    = "api"
-
-  # The database role to use when no client authentication is provided.
-  # Can (and probably should) differ from user in db-uri
-  db-anon-role = "anon"
-
-The user specified in the db-uri is also known as the authenticator role. For more information about the anonymous vs authenticator roles see the :ref:`roles`.
-
-Here is the full list of configuration parameters.
-
-================  ======  =======  ========
-Name              Type    Default  Required
-================  ======  =======  ========
-db-uri            String           Y
-db-schema         String           Y
-db-anon-role      String           Y
-db-pool           Int     10
-server-host       String  \*4
-server-port       Int     3000
-server-proxy-uri  String
-jwt-secret        String
-secret-is-base64  Bool    False
-max-rows          Int     ∞
-pre-request       String
-================  ======  =======  ========
-
-db-uri
-  The standard connection PostgreSQL `URI format <https://www.postgresql.org/docs/current/static/libpq-connect.html#AEN45347>`_. Symbols and unusual characters in the password or other fields should be percent encoded to avoid a parse error. On older systems like Centos 6, with older versions of libpq, a different db-uri syntax has to be used. In this case the URI is a string of space separated key-value pairs (key=value), so the example above would be :code:`"host=host user=user port=5432 dbname=dbname password=pass"`. Also allows connections over Unix sockets for higher performance.
-db-schema
-  The database schema to expose to REST clients. Tables, views and stored procedures in this schema will get API endpoints.
-db-anon-role
-  The database role to use when executing commands on behalf of unauthenticated clients.
-db-pool
-  Number of connections to keep open in PostgREST's database pool. Having enough here for the maximum expected simultaneous client connections can improve performance. Note it's pointless to set this higher than the :code:`max_connections` GUC in your database.
-server-host
-  Where to bind the PostgREST web server.
-server-port
-  The port to bind the web server.
-server-proxy-uri
-  Overrides the base URL used within the OpenAPI self-documentation hosted at the API root path. Use a complete URI syntax :code:`scheme:[//[user:password@]host[:port]][/]path[?query][#fragment]`. Ex. :code:`https://postgrest.com`
-
-.. code:: json
-
-  {
-    "swagger": "2.0",
-    "info": {
-      "version": "0.4.0.0",
-      "title": "PostgREST API",
-      "description": "This is a dynamic API generated by PostgREST"
-    },
-    "host": "postgrest.com:443",
-    "basePath": "/",
-    "schemes": [
-      "https"
-    ]
-  }
-
-jwt-secret
-  The secret used to decode JWT tokens clients provide for authentication. If this parameter is not specified then PostgREST refuses authentication requests. Choosing a value for this parameter beginning with the at sign such as :code:`@filename` loads the secret out of an external file. This is useful for automating deployments. Note that any binary secrets must be base64 encoded.
-secret-is-base64
-  When this is set to :code:`true`, the value derived from :code:`jwt-secret` will be treated as a base64 encoded secret.
-max-rows
-  A hard limit to the number of rows PostgREST will fetch from a view, table, or stored procedure. Limits payload size for accidental or malicious requests.
-pre-request
-  A schema-qualified stored procedure name to call right after switching roles for a client request. This provides an opportunity to modify SQL variables or raise an exception to prevent the request from completing.
-
-Running the Server
-------------------
-
-PostgREST outputs basic request logging to stdout. When running it in an SSH session you must detach it from stdout or it will be terminated when the session closes. The easiest technique is redirecting the output to a logfile or to the syslog:
-
-.. code-block:: bash
-
-  ssh foo@example.com \
-    'postgrest foo.conf </dev/null >/var/log/postgrest.log 2>&1 &'
-
-  # another option is to pipe the output into "logger -t postgrest"
-
-(Avoid :code:`nohup postgrest` because the HUP signal is used for manual :ref:`schema_reloading`.)
-
 Hardening PostgREST
 ===================
 
diff --git a/conf.py b/conf.py
index 415ce36c2..394a14584 100644
--- a/conf.py
+++ b/conf.py
@@ -54,9 +54,9 @@ author = u'Joe Nelson'
 # built documents.
 #
 # The short X.Y version.
-version = u'4.1'
+version = u'4.3'
 # The full version, including alpha/beta/rc tags.
-release = u'4.1.0'
+release = u'4.3.0'
 
 # The language for content autogenerated by Sphinx. Refer to documentation
 # for a list of supported languages.
diff --git a/install.rst b/install.rst
index 7594ebc30..979dc3c1e 100644
--- a/install.rst
+++ b/install.rst
@@ -34,6 +34,116 @@ To use PostgREST you will need an underlying database (PostgreSQL version 9.5 or
 * `Instructions for Ubuntu 14.04 <https://www.digitalocean.com/community/tutorials/how-to-install-and-use-postgresql-on-ubuntu-14-04>`_
 * `Installer for Windows <http://www.enterprisedb.com/products-services-training/pgdownload#windows>`_
 
+.. _configuration:
+
+Configuration
+=============
+
+The PostgREST server reads a configuration file to determine information about the database and how to serve client requests. There is no predefined location for this file, you must specify the file path as the one and only argument to the server:
+
+.. code:: bash
+
+  postgrest /path/to/postgrest.conf
+
+The file must contain a set of key value pairs. At minimum you must include these keys:
+
+.. code::
+
+  # postgrest.conf
+
+  # The standard connection URI format, documented at
+  # https://www.postgresql.org/docs/current/static/libpq-connect.html#AEN45347
+  db-uri       = "postgres://user:pass@host:5432/dbname"
+
+  # The name of which database schema to expose to REST clients
+  db-schema    = "api"
+
+  # The database role to use when no client authentication is provided.
+  # Can (and probably should) differ from user in db-uri
+  db-anon-role = "anon"
+
+The user specified in the db-uri is also known as the authenticator role. For more information about the anonymous vs authenticator roles see the :ref:`roles`.
+
+Here is the full list of configuration parameters.
+
+================  ======  =======  ========
+Name              Type    Default  Required
+================  ======  =======  ========
+db-uri            String           Y
+db-schema         String           Y
+db-anon-role      String           Y
+db-pool           Int     10
+server-host       String  \*4
+server-port       Int     3000
+server-proxy-uri  String
+jwt-secret        String
+secret-is-base64  Bool    False
+max-rows          Int     ∞
+pre-request       String
+================  ======  =======  ========
+
+db-uri
+  The standard connection PostgreSQL `URI format <https://www.postgresql.org/docs/current/static/libpq-connect.html#AEN45347>`_. Symbols and unusual characters in the password or other fields should be percent encoded to avoid a parse error. On older systems like Centos 6, with older versions of libpq, a different db-uri syntax has to be used. In this case the URI is a string of space separated key-value pairs (key=value), so the example above would be :code:`"host=host user=user port=5432 dbname=dbname password=pass"`. Also allows connections over Unix sockets for higher performance.
+db-schema
+  The database schema to expose to REST clients. Tables, views and stored procedures in this schema will get API endpoints.
+db-anon-role
+  The database role to use when executing commands on behalf of unauthenticated clients.
+db-pool
+  Number of connections to keep open in PostgREST's database pool. Having enough here for the maximum expected simultaneous client connections can improve performance. Note it's pointless to set this higher than the :code:`max_connections` GUC in your database.
+server-host
+  Where to bind the PostgREST web server. In addition to the usual address options, PostgREST interprets these reserved addresses with special meanings:
+
+  * :code:`*` - any IPv4 or IPv6 hostname
+  * :code:`*4` - any IPv4 or IPv6 hostname, IPv4 preferred
+  * :code:`!4` - any IPv4 hostname
+  * :code:`*6` - any IPv4 or IPv6 hostname, IPv6 preferred
+  * :code:`!6` - any IPv6 hostname
+
+server-port
+  The port to bind the web server.
+server-proxy-uri
+  Overrides the base URL used within the OpenAPI self-documentation hosted at the API root path. Use a complete URI syntax :code:`scheme:[//[user:password@]host[:port]][/]path[?query][#fragment]`. Ex. :code:`https://postgrest.com`
+
+.. code:: json
+
+  {
+    "swagger": "2.0",
+    "info": {
+      "version": "0.4.3.0",
+      "title": "PostgREST API",
+      "description": "This is a dynamic API generated by PostgREST"
+    },
+    "host": "postgrest.com:443",
+    "basePath": "/",
+    "schemes": [
+      "https"
+    ]
+  }
+
+jwt-secret
+  The secret used to decode JWT tokens clients provide for authentication. If this parameter is not specified then PostgREST refuses authentication requests. Choosing a value for this parameter beginning with the at sign such as :code:`@filename` loads the secret out of an external file. This is useful for automating deployments. Note that any binary secrets must be base64 encoded.
+secret-is-base64
+  When this is set to :code:`true`, the value derived from :code:`jwt-secret` will be treated as a base64 encoded secret.
+max-rows
+  A hard limit to the number of rows PostgREST will fetch from a view, table, or stored procedure. Limits payload size for accidental or malicious requests.
+pre-request
+  A schema-qualified stored procedure name to call right after switching roles for a client request. This provides an opportunity to modify SQL variables or raise an exception to prevent the request from completing.
+
+Running the Server
+------------------
+
+PostgREST outputs basic request logging to stdout. When running it in an SSH session you must detach it from stdout or it will be terminated when the session closes. The easiest technique is redirecting the output to a logfile or to the syslog:
+
+.. code-block:: bash
+
+  ssh foo@example.com \
+    'postgrest foo.conf </dev/null >/var/log/postgrest.log 2>&1 &'
+
+  # another option is to pipe the output into "logger -t postgrest"
+
+(Avoid :code:`nohup postgrest` because the HUP signal is used for manual :ref:`schema_reloading`.)
+
+
 Docker
 ======
 

From 45ddafc2a8372ceaf90962242854b34ded33be94 Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Sat, 9 Sep 2017 20:32:59 -0500
Subject: [PATCH 118/652] How to determine server version

Fixes #63
---
 admin.rst | 13 ++++++++++++-
 1 file changed, 12 insertions(+), 1 deletion(-)

diff --git a/admin.rst b/admin.rst
index f4b291bd1..fdb075f2c 100644
--- a/admin.rst
+++ b/admin.rst
@@ -121,6 +121,14 @@ Nginx rate limiting is general and indescriminate. To rate limit each authentica
 Debugging
 =========
 
+Server Version
+--------------
+
+When debugging a problem it's important to verify the PostgREST version. At any time you can make a request to the running server and determine exactly which version is deployed. Look for the :code:`Server` HTTP response header, which contains the version number.
+
+HTTP Requests
+-------------
+
 The PostgREST server logs basic request information to stdout, including the requesting IP address and user agent, the URL requested, and HTTP response status. However this provides limited information for debugging server errors. It's helpful to get full information about both client requests and the corresponding SQL commands executed against the underlying database.
 
 A great way to inspect incoming HTTP requests including headers and query params is to sniff the network traffic on the port where PostgREST is running. For instance on a development server bound to port 3000 on localhost, run this:
@@ -130,7 +138,10 @@ A great way to inspect incoming HTTP requests including headers and query params
   # sudo access is necessary for watching the network
   sudo ngrep -d lo0 port 3000
 
-The options to ngrep vary depending on the address and host on which you've bound the server. The binding is described in the `Configuration`_ section. The ngrep output isn't particularly pretty, but it's legible. Note the :code:`Server` response header as well which identifies the version of server. This is important when submitting bug reports.
+The options to ngrep vary depending on the address and host on which you've bound the server. The binding is described in the :ref:`configuration` section. The ngrep output isn't particularly pretty, but it's legible.
+
+Database Logs
+-------------
 
 Once you've verified that requests are as you expect, you can get more information about the server operations by watching the database logs. By default PostgreSQL does not keep these logs, so you'll need to make the configuration changes below. Find :code:`postgresql.conf` inside your PostgreSQL data directory (to find that, issue the command :code:`show data_directory;`). Either find the settings scattered throughout the file and change them to the following values, or append this block of code to the end of the configuration file.
 

From a93ddbee5af8f016b4bcd7337176632aebcab1aa Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Sat, 9 Sep 2017 20:52:12 -0500
Subject: [PATCH 119/652] Unicode

Fixes #62
---
 api.rst | 17 +++++++++++++++++
 1 file changed, 17 insertions(+)

diff --git a/api.rst b/api.rst
index 9b800d016..7ba158dbb 100644
--- a/api.rst
+++ b/api.rst
@@ -336,6 +336,23 @@ If the stored procedure returns non-scalar values, you need to do a :code:`selec
 
   If more than one row would be returned the binary results will be concatenated with no delimiter.
 
+Unicode Support
+===============
+
+PostgREST supports unicode in schemas, tables, columns and values. To access a table with unicode name, use percent encoding.
+
+To request this:
+
+.. code-block:: html
+
+  http://localhost:3000/موارد
+
+Do this:
+
+.. code-block:: html
+
+  http://localhost:3000/%D9%85%D9%88%D8%A7%D8%B1%D8%AF
+
 .. _resource_embedding:
 
 Resource Embedding

From edefd3040c95accdbebcb273216785179e770bcb Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Sat, 9 Sep 2017 21:27:36 -0500
Subject: [PATCH 120/652] Section about new FTS features

Fixes #61
---
 api.rst | 26 +++++++++++++++++++++++++-
 1 file changed, 25 insertions(+), 1 deletion(-)

diff --git a/api.rst b/api.rst
index 7ba158dbb..74e55f585 100644
--- a/api.rst
+++ b/api.rst
@@ -63,7 +63,7 @@ in            one of a list of values e.g.                     :code:`IN`
               in quoted strings like
               :code:`?a=in."hi,there","yes,you"`
 is            checking for exact equality (null,true,false)    :code:`IS`
-fts           full-text search using to_tsquery                :code:`@@`
+fts           :ref:`fts` using to_tsquery                      :code:`@@`
 cs            contains e.g. :code:`?tags=cs.{example, new}`    :code:`@>`
 cd            contained in e.g. :code:`?values=cd.{1,2,3}`     :code:`<@`
 ov            overlap (have points in common),                 :code:`&&`
@@ -102,6 +102,30 @@ The view will provide a new endpoint:
 
   GET /fresh_stories HTTP/1.1
 
+.. _fts:
+
+Full-Text Search
+~~~~~~~~~~~~~~~~
+
+The :code:`fts` filter mentioned above has a number of options to support flexible textual queries, namely the choice of plain vs phrase search and the language used for stemming. Suppose that :code:`tsearch` is a table with column :code:`ts_vector`, unsurprisingly of type `tsvector <https://www.postgresql.org/docs/current/static/datatype-textsearch.html>`_. The follow examples illustrate the possibilities.
+
+.. code-block:: http
+
+  # Use language in fts query
+  GET /tsearch?ts_vector=french.fts.amusant
+
+  # Use plainto_tsquery and phraseto_tsquery
+  GET /tsearch?ts_vector=plain.fts.The%20Fat%20Cats
+  GET /tsearch?ts_vector=phrase.fts.The%20Fat%20Rats
+
+  # Combine both
+  GET /tsearch?ts_vector=phrase.english.fts.The%20Fat%20Cats
+
+  # "not" also working
+  GET /tsearch?ts_vector=not.phrase.english.fts.The%20Fat%20Cats
+
+Using phrase search mode requires PostgreSQL of version at least 9.6 and will raise an error in earlier versions of the database.
+
 .. _v_filter:
 
 Vertical Filtering (Columns)

From 922ae0e0c984113be05cceb2bd58e24d3e0945bf Mon Sep 17 00:00:00 2001
From: Russell Davies <russell@zeroflux.net>
Date: Fri, 29 Sep 2017 06:53:03 +0100
Subject: [PATCH 121/652] Update JWT configuration section for JWK and aud
 (#106)

---
 install.rst | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/install.rst b/install.rst
index 979dc3c1e..7b7e45edf 100644
--- a/install.rst
+++ b/install.rst
@@ -77,6 +77,7 @@ server-host       String  \*4
 server-port       Int     3000
 server-proxy-uri  String
 jwt-secret        String
+jwt-aud           String
 secret-is-base64  Bool    False
 max-rows          Int     ∞
 pre-request       String
@@ -121,7 +122,9 @@ server-proxy-uri
   }
 
 jwt-secret
-  The secret used to decode JWT tokens clients provide for authentication. If this parameter is not specified then PostgREST refuses authentication requests. Choosing a value for this parameter beginning with the at sign such as :code:`@filename` loads the secret out of an external file. This is useful for automating deployments. Note that any binary secrets must be base64 encoded.
+  The secret or `JSON Web Key (JWK) <https://tools.ietf.org/html/rfc7517>`_ used to decode JWT tokens clients provide for authentication. If this parameter is not specified then PostgREST refuses authentication requests. Choosing a value for this parameter beginning with the at sign such as :code:`@filename` loads the secret out of an external file. This is useful for automating deployments. Note that any binary secrets must be base64 encoded.
+jwt-aud
+  Specifies the `JWT audience claim <https://tools.ietf.org/html/rfc7519#section-4.1.3>`_. If this claim is present in the client provided JWT then you must set this to the same value as in the JWT, otherwise verifying the JWT will fail.
 secret-is-base64
   When this is set to :code:`true`, the value derived from :code:`jwt-secret` will be treated as a base64 encoded secret.
 max-rows

From e7ddea0acfe29f05071353f41edfa3ae1f4692df Mon Sep 17 00:00:00 2001
From: Joe Nelson <begriffs@users.noreply.github.com>
Date: Sat, 7 Oct 2017 13:03:30 -0500
Subject: [PATCH 122/652] Document long jwt secrets as required (#109)

* Use long jwt secrets as required

* Fix spelling and adjust custom dictionary
---
 admin.rst      |  2 +-
 api.rst        | 21 +++++++++++----------
 auth.rst       | 12 ++++++------
 install.rst    | 16 ++++++++--------
 intro.rst      |  2 +-
 postgrest.dict | 40 ++++++++++++++++++++++++++++++++++++++++
 6 files changed, 67 insertions(+), 26 deletions(-)

diff --git a/admin.rst b/admin.rst
index fdb075f2c..d6408aa9f 100644
--- a/admin.rst
+++ b/admin.rst
@@ -116,7 +116,7 @@ Next we apply the zone to certain routes, like a hypothetical stored procedure c
 
 The burst argument tells Nginx to start dropping requests if more than five queue up from a specific IP.
 
-Nginx rate limiting is general and indescriminate. To rate limit each authenticated request individually you will need to add logic in a :ref:`Custom Validation <custom_validation>` function.
+Nginx rate limiting is general and indiscriminate. To rate limit each authenticated request individually you will need to add logic in a :ref:`Custom Validation <custom_validation>` function.
 
 Debugging
 =========
diff --git a/api.rst b/api.rst
index 74e55f585..c05547b07 100644
--- a/api.rst
+++ b/api.rst
@@ -47,9 +47,9 @@ Complex logic can also be applied:
  
 These operators are available:
 
-============  ===============================================  ===================
-Abbreviation  Meaning                                          Postgres Equivalent
-============  ===============================================  ===================
+============  ===============================================  =====================
+Abbreviation  Meaning                                          PostgreSQL Equivalent
+============  ===============================================  =====================
 eq            equals                                           :code:`=`
 gt            greater than                                     :code:`>`
 gte           greater than or equal                            :code:`>=`
@@ -75,7 +75,7 @@ nxr           does not extend to the right of,                 :code:`&<`
 nxl           does not extend to the left of                   :code:`&>`
 adj           is adjacent to, e.g. :code:`?range=adj.(1,10)`   :code:`-|-`
 not           negates another operator, see below              :code:`NOT`
-============  ===============================================  ===================
+============  ===============================================  =====================
 
 .. note::
 
@@ -131,7 +131,7 @@ Using phrase search mode requires PostgreSQL of version at least 9.6 and will ra
 Vertical Filtering (Columns)
 ----------------------------
 
-When certain columns are wide (such as those holding binary data), it is more efficient for the server to withold them in a response. The client can specify which columns are required using the :sql:`select` parameter.
+When certain columns are wide (such as those holding binary data), it is more efficient for the server to withhold them in a response. The client can specify which columns are required using the :sql:`select` parameter.
 
 .. code-block:: http
 
@@ -434,7 +434,7 @@ Which would return
   ]
 
 The primary key of the table of the resource being embedded must be specified,
-either explicitly, like in the example above, or implicitly through a wildcard.
+either explicitly, like in the example above, or implicitly through a wild card.
 
 In this example, since the relationship is a forward relationship, there is
 only one director associated with a film. As the table name is plural it might
@@ -487,7 +487,7 @@ The PostgREST URL grammar limits the kinds of queries clients can perform. It pr
 
 * Table unions
 * More complicated joins than those provided by `Resource Embedding`_
-* Geospatial queries that require an argument, like "points near (lat,lon)"
+* Geo-spatial queries that require an argument, like "points near (lat,lon)"
 * More sophisticated full-text search than a simple use of the :sql:`fts` filter
 
 Stored Procedures
@@ -635,7 +635,7 @@ Updates also support :code:`Prefer: return=representation` plus :ref:`v_filter`.
 Bulk Insert
 -----------
 
-Bulk insert works exactly like single row insert except that you provide either a JSON array of objects having uniform keys, or lines in CSV format. This not only minimizes the HTTP requests required but uses a single INSERT statement on the backend for efficiency. Note that using CSV requires less parsing on the server and is much faster.
+Bulk insert works exactly like single row insert except that you provide either a JSON array of objects having uniform keys, or lines in CSV format. This not only minimizes the HTTP requests required but uses a single INSERT statement on the back-end for efficiency. Note that using CSV requires less parsing on the server and is much faster.
 
 To bulk insert CSV simply post to a table route with :code:`Content-Type: text/csv` and include the names of the columns as the first row. For instance
 
@@ -726,7 +726,7 @@ PostgREST translates `PostgreSQL error codes <https://www.postgresql.org/docs/cu
 +--------------------------+-------------------------+---------------------------------+
 | 54*                      | 413                     | too complex                     |
 +--------------------------+-------------------------+---------------------------------+
-| 55*                      | 500                     | obj not in prereq state         |
+| 55*                      | 500                     | obj not in prerequisite state   |
 +--------------------------+-------------------------+---------------------------------+
 | 57*                      | 500                     | operator intervention           |
 +--------------------------+-------------------------+---------------------------------+
@@ -746,7 +746,8 @@ PostgREST translates `PostgreSQL error codes <https://www.postgresql.org/docs/cu
 +--------------------------+-------------------------+---------------------------------+
 | 42P01                    | 404                     | undefined table                 |
 +--------------------------+-------------------------+---------------------------------+
-| 42501                    | if authed 403, else 401 | insufficient privileges         |
+| 42501                    | | if authenticated 403, | insufficient privileges         |
+|                          | | else 401              |                                 |
 +--------------------------+-------------------------+---------------------------------+
 | other                    | 500                     |                                 |
 +--------------------------+-------------------------+---------------------------------+
diff --git a/auth.rst b/auth.rst
index 52e490db3..9468a4efd 100644
--- a/auth.rst
+++ b/auth.rst
@@ -171,7 +171,7 @@ Next write a stored procedure that returns the token. The one below returns a to
       LANGUAGE sql
       AS $$
     SELECT sign(
-      row_to_json(r), 'mysecret'
+      row_to_json(r), 'reallyreallyreallyreallyverysafe'
     ) AS token
     FROM (
       SELECT
@@ -189,7 +189,7 @@ PostgREST exposes this function to clients via a POST request to `/rpc/jwt_test`
   .. code-block:: postgres
 
     -- run this once
-    ALTER DATABASE mydb SET "app.jwt_secret" TO '!!secret!!';
+    ALTER DATABASE mydb SET "app.jwt_secret" TO 'reallyreallyreallyreallyverysafe';
 
     -- then all functions can refer to app.jwt_secret
     SELECT sign(
@@ -364,7 +364,7 @@ In the previous section we created an internal table to store user information.
 Logins
 ~~~~~~
 
-As described in `JWT from SQL`_, we'll create a JWT inside our login function. Note that you'll need to adjust the secret key which is hard-coded in this example to a secure secret of your choosing.
+As described in `JWT from SQL`_, we'll create a JWT inside our login function. Note that you'll need to adjust the secret key which is hard-coded in this example to a secure (at least thirty-two character) secret of your choosing.
 
 .. code:: plpgsql
 
@@ -383,7 +383,7 @@ As described in `JWT from SQL`_, we'll create a JWT inside our login function. N
     end if;
 
     select sign(
-        row_to_json(r), 'mysecret'
+        row_to_json(r), 'reallyreallyreallyreallyverysafe'
       ) as token
       from (
         select _role as role, login.email as email,
@@ -402,12 +402,12 @@ An API request to call this function would look like:
 
   { "email": "foo@bar.com", "pass": "foobar" }
 
-The response would look like the snippet below. Try decoding the token at `jwt.io <https://jwt.io/>`_. (It was encoded with a secret of :code:`mysecret` as specified in the SQL code above. You'll want to change this secret in your app!)
+The response would look like the snippet below. Try decoding the token at `jwt.io <https://jwt.io/>`_. (It was encoded with a secret of :code:`reallyreallyreallyreallyverysafe` as specified in the SQL code above. You'll want to change this secret in your app!)
 
 .. code:: json
 
   {
-    "token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJlbWFpbCI6ImZvb0BiYXIuY29tIiwicm9sZSI6ImF1dGhvciJ9.fpf3_ERi5qbWOE5NPzvauJgvulm0zkIG9xSm2w5zmdw"
+    "token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJlbWFpbCI6ImZvb0BiYXIuY29tIiwicGFzcyI6ImZvb2JhciJ9.37066TTRlh-1hXhnA9oO9Pj6lgL6zFuJU0iCHhuCFno"
   }
 
 Permissions
diff --git a/install.rst b/install.rst
index 7b7e45edf..7030616cb 100644
--- a/install.rst
+++ b/install.rst
@@ -3,7 +3,7 @@ Binary Release
 
 [ `Download from release page <https://github.com/begriffs/postgrest/releases/latest>`_ ]
 
-The release page has precompiled binaries for Mac OS X, Windows, and several Linux distros. Extract the tarball and run the binary inside with the :code:`--help` flag to see usage instructions:
+The release page has pre-compiled binaries for Mac OS X, Windows, and several Linux distributions. Extract the tarball and run the binary inside with the :code:`--help` flag to see usage instructions:
 
 .. code-block:: bash
 
@@ -122,7 +122,7 @@ server-proxy-uri
   }
 
 jwt-secret
-  The secret or `JSON Web Key (JWK) <https://tools.ietf.org/html/rfc7517>`_ used to decode JWT tokens clients provide for authentication. If this parameter is not specified then PostgREST refuses authentication requests. Choosing a value for this parameter beginning with the at sign such as :code:`@filename` loads the secret out of an external file. This is useful for automating deployments. Note that any binary secrets must be base64 encoded.
+  The secret or `JSON Web Key (JWK) <https://tools.ietf.org/html/rfc7517>`_ used to decode JWT tokens clients provide for authentication. For security the key must be at least thirty-two characters long. If this parameter is not specified then PostgREST refuses authentication requests. Choosing a value for this parameter beginning with the at sign such as :code:`@filename` loads the secret out of an external file. This is useful for automating deployments. Note that any binary secrets must be base64 encoded.
 jwt-aud
   Specifies the `JWT audience claim <https://tools.ietf.org/html/rfc7519#section-4.1.3>`_. If this claim is present in the client provided JWT then you must set this to the same value as in the JWT, otherwise verifying the JWT will fail.
 secret-is-base64
@@ -135,7 +135,7 @@ pre-request
 Running the Server
 ------------------
 
-PostgREST outputs basic request logging to stdout. When running it in an SSH session you must detach it from stdout or it will be terminated when the session closes. The easiest technique is redirecting the output to a logfile or to the syslog:
+PostgREST outputs basic request logging to stdout. When running it in an SSH session you must detach it from stdout or it will be terminated when the session closes. The easiest technique is redirecting the output to a log file or to the syslog:
 
 .. code-block:: bash
 
@@ -276,7 +276,7 @@ The script expects the following parameters:
 
   test/create_test_db connection_uri database_name [test_db_user] [test_db_user_password]
 
-Use the `connection URI <https://www.postgresql.org/docs/current/static/libpq-connect.html#AEN45347>`_ to specify the user, password, host, and port. Do not provide the database in the connection URI. The Postgres role you are using to connect must be capable of creating new databases.
+Use the `connection URI <https://www.postgresql.org/docs/current/static/libpq-connect.html#AEN45347>`_ to specify the user, password, host, and port. Do not provide the database in the connection URI. The PostgreSQL role you are using to connect must be capable of creating new databases.
 
 The :code:`database_name` is the name of the database that :code:`stack test` will connect to. If the database of the same name already exists on the server, the script will first drop it and then re-create it.
 
@@ -288,7 +288,7 @@ Optionally, if specifying an existing user to be used for the test connection, o
 
 The script will return the db uri to use in the tests--this uri corresponds to the :code:`db-uri` parameter in the configuration file that one would use in production.
 
-Generating the user and the password allows one to create the database and run the tests against any postgres server without any modifications to the server. (Such as allowing accounts without a passoword or setting up trust authentication, or requiring the server to be on the same localhost the tests are run from).
+Generating the user and the password allows one to create the database and run the tests against any PostgreSQL server without any modifications to the server. (Such as allowing accounts without a password or setting up trust authentication, or requiring the server to be on the same localhost the tests are run from).
 
 Running the Tests
 ~~~~~~~~~~~~~~~~~
@@ -321,7 +321,7 @@ This connection assumes the test server on the :code:`localhost:code:` with the
 Destroying the Database
 ~~~~~~~~~~~~~~~~~~~~~~~
 
-The test database will remain after the test, together with four new roles created on the postgres server. To permanently erase the created database and the roles, run the script :code:`test/delete_test_database`, using the same superuser role used for creating the database:
+The test database will remain after the test, together with four new roles created on the PostgreSQL server. To permanently erase the created database and the roles, run the script :code:`test/delete_test_database`, using the same superuser role used for creating the database:
 
 .. code:: bash
 
@@ -339,7 +339,7 @@ For example, if local development is on a mac with Docker for Mac installed:
   $ docker run --name db-scripting-test -e POSTGRES_PASSWORD=pwd -p 5434:5432 -d postgres
   $ POSTGREST_TEST_CONNECTION=$(test/create_test_db "postgres://postgres:pwd@localhost:5434" test_db) stack test
 
-Additionally, if one creates a docker container to run stack test (this is necessary on MacOS Sierra with GHC below 8.0.1, where :code:`stack test` fails), one can run PostgreSQL in a separate linked container, or use the locally installed Postgres.app.
+Additionally, if one creates a docker container to run stack test (this is necessary on Mac OS Sierra with GHC below 8.0.1, where :code:`stack test` fails), one can run PostgreSQL in a separate linked container, or use the locally installed PostgreSQL app.
 
 Build the test container with :code:`test/Dockerfile.test`:
 
@@ -357,7 +357,7 @@ Linked containers:
   $ docker run --name pg -e POSTGRES_PASSWORD=pwd  -d postgres
   $ docker run --rm -it -v `pwd`:`pwd` -v ~/.stack-linux:/root/.stack --link pg:pg -w="`pwd`" -v `pwd`/.stack-work-docker:`pwd`/.stack-work pgst-test bash -c "POSTGREST_TEST_CONNECTION=$(test/create_test_db "postgres://postgres:pwd@pg" test_db) stack test"
 
-Stack test in Docker for Mac, Postgres.app on mac:
+Stack test in Docker for Mac, PostgreSQL app on mac:
 
 .. code:: bash
 
diff --git a/intro.rst b/intro.rst
index dbafcfab7..272c8d9ef 100644
--- a/intro.rst
+++ b/intro.rst
@@ -81,7 +81,7 @@ Example Apps
 * `tyrchen/goodfilm <https://github.com/tyrchen/goodfilm>`_ - example film api
 * `begriffs/postgrest-example <https://github.com/begriffs/postgrest-example>`_ - sqitch versioning for API
 * `SMRxT/postgrest-demo <https://github.com/SMRxT/postgrest-demo>`_ - multi-tenant logging system
-* `PierreRochard/postgrest-boilerplate <https://github.com/PierreRochard/postgrest-boilerplate>`_ - example auth backend
+* `PierreRochard/postgrest-boilerplate <https://github.com/PierreRochard/postgrest-boilerplate>`_ - example auth back-end
 
 In Production
 -------------
diff --git a/postgrest.dict b/postgrest.dict
index 5966273cb..1143d7ca7 100644
--- a/postgrest.dict
+++ b/postgrest.dict
@@ -1,13 +1,19 @@
 personal_ws-1.1 en 0 utf-8
+AMQP
 Auth
+Bool
+CSV
 Codd
+DDL
 DoS
+GHC
 GUC
 Github
 Google
 GraphQL
 HMAC
 HTTPS
+HV
 Haskell
 Heroku
 Homebrew
@@ -33,53 +39,87 @@ PostgreSQL's
 RDS
 RESTful
 RLS
+RSA
+RabbitMQ
 RestSharp
 SHA
 SIGHUP
+SNS
 SQL
 SSL
 Sencha
 SuperAgent
+Tcl
+TypeScript
 UI
 Vondra
 WAI
+Websockets
+ZeroMQ
 api
+aud
 auth
 authenticator
 balancer
+cd
 centric
+conf
 config
 cryptographically
+csv
+disjoined
 eq
+fts
+grantor
 gte
 http
 ilike
+json
 jwt
 localhost
 login
 logins
+lon
 lt
 lte
 middleware
+multi
 namespaced
 neq
 ngrep
 nullsfirst
 nullslast
+nxl
+nxr
+openapi
+ov
 param
 params
 passphrase
+postgrest
+pgSQL
 pgcrypto
 pgjwt
 pre
 refactor
+requester's
+savepoint
+schemas
 signup
+sl
 sqitch
+sql
+sr
 startup
+stateful
 stdout
+syslog
 tsquery
+unicode
 uri
 url
+urls
 verifier
 versioning
 webuser
+wildcard

From 9598e3948d8eaf08903ebef96e933cea13d4895e Mon Sep 17 00:00:00 2001
From: Joe Nelson <begriffs@users.noreply.github.com>
Date: Sat, 7 Oct 2017 19:59:30 -0500
Subject: [PATCH 123/652] Show how to use a JWK literal in the config file
 (#110)

---
 auth.rst       | 40 +++++++++++++++++++++++++++++++++++++++-
 install.rst    |  2 +-
 postgrest.dict |  3 +++
 3 files changed, 43 insertions(+), 2 deletions(-)

diff --git a/auth.rst b/auth.rst
index 9468a4efd..7957cb9b8 100644
--- a/auth.rst
+++ b/auth.rst
@@ -152,7 +152,7 @@ To make an authenticated request the client must include an :code:`Authorization
 JWT Generation
 --------------
 
-You can create a valid JWT either from inside your database or via an external service. Each token is cryptographically signed with a secret passphrase -- the signer and verifier share the secret. Hence any service that shares a passphrase with a PostgREST server can create valid JWT. (PostgREST currently supports only the HMAC-SHA256 signing algorithm.)
+You can create a valid JWT either from inside your database or via an external service. Each token is cryptographically signed with a secret key. In the case of symmetric cryptography the signer and verifier share the same secret passphrase. In asymmetric cryptography the signer uses the private key and the verifier the public key. PostgREST supports both symmetric and asymmetric cryptography.
 
 JWT from SQL
 ~~~~~~~~~~~~
@@ -238,6 +238,44 @@ Our code requires a database role in the JWT. To add it you need to save the dat
     }
   })
 
+.. _asym_keys:
+
+Asymmetric Keys
+~~~~~~~~~~~~~~~
+
+As described in the :ref:`configuration` section, PostgREST accepts a ``jwt-secret`` config file parameter. If it is set to a simple string value like "reallyreallyreallyreallyverysafe" then PostgREST interprets it as an HMAC-SHA256 passphrase. However you can also specify a literal JWT key JSON value. For example, you can use an RSA-256 public key such as:
+
+.. code-block:: json
+
+  {
+    "alg":"RS256",
+    "e":"AQAB",
+    "key_ops":["verify"],
+    "kty":"RSA",
+    "n":"9zKNYTaYGfGm1tBMpRT6FxOYrM720GhXdettc02uyakYSEHU2IJz90G_MLlEl4-WWWYoS_QKFupw3s7aPYlaAjamG22rAnvWu-rRkP5sSSkKvud_IgKL4iE6Y2WJx2Bkl1XUFkdZ8wlEUR6O1ft3TS4uA-qKifSZ43CahzAJyUezOH9shI--tirC028lNg767ldEki3WnVr3zokSujC9YJ_9XXjw2hFBfmJUrNb0-wldvxQbFU8RPXip-GQ_JPTrCTZhrzGFeWPvhA6Rqmc3b1PhM9jY7Dur1sjYWYVyXlFNCK3c-6feo5WlRfe1aCWmwZQh6O18eTmLeT4nWYkDzQ"
+  }
+
+Just pass it in as a single line string, escaping the quotes:
+
+.. code-block:: ini
+
+  jwt-secret = "{ \"alg\":\"RS256\", … }"
+
+To generate such a public/private key pair use a utility like `latchset/jose <https://github.com/latchset/jose>`_.
+
+.. code-block:: bash
+
+  jose jwk gen -i '{"alg": "RS256"}' -o rsa.jwk
+  jose jwk pub -i rsa.jwk -o rsa.jwk.pub
+
+  # now rsa.jwk.pub contains the desired JSON object
+
+You can specify the literal value as we saw earlier, or reference a filename to load the JWK from a file:
+
+.. code-block:: ini
+
+  jwt-secret = "@rsa.jwk.pub"
+
 JWT security
 ~~~~~~~~~~~~
 
diff --git a/install.rst b/install.rst
index 7030616cb..a7ab1bd4e 100644
--- a/install.rst
+++ b/install.rst
@@ -122,7 +122,7 @@ server-proxy-uri
   }
 
 jwt-secret
-  The secret or `JSON Web Key (JWK) <https://tools.ietf.org/html/rfc7517>`_ used to decode JWT tokens clients provide for authentication. For security the key must be at least thirty-two characters long. If this parameter is not specified then PostgREST refuses authentication requests. Choosing a value for this parameter beginning with the at sign such as :code:`@filename` loads the secret out of an external file. This is useful for automating deployments. Note that any binary secrets must be base64 encoded.
+  The secret or `JSON Web Key (JWK) <https://tools.ietf.org/html/rfc7517>`_ used to decode JWT tokens clients provide for authentication. For security the key must be at least thirty-two characters long. If this parameter is not specified then PostgREST refuses authentication requests. Choosing a value for this parameter beginning with the at sign such as :code:`@filename` loads the secret out of an external file. This is useful for automating deployments. Note that any binary secrets must be base64 encoded. Both symmetric and asymmetric cryptography are supported. For more info see :ref:`asym_keys`.
 jwt-aud
   Specifies the `JWT audience claim <https://tools.ietf.org/html/rfc7519#section-4.1.3>`_. If this claim is present in the client provided JWT then you must set this to the same value as in the JWT, otherwise verifying the JWT will fail.
 secret-is-base64
diff --git a/postgrest.dict b/postgrest.dict
index 1143d7ca7..65b3387f7 100644
--- a/postgrest.dict
+++ b/postgrest.dict
@@ -21,6 +21,7 @@ ILIKE
 IP
 JS
 JSON
+JWK
 JWT
 Logins
 MVCC
@@ -69,6 +70,7 @@ cryptographically
 csv
 disjoined
 eq
+filename
 fts
 grantor
 gte
@@ -101,6 +103,7 @@ pgSQL
 pgcrypto
 pgjwt
 pre
+reallyreallyreallyreallyverysafe
 refactor
 requester's
 savepoint

From a3d87edda35c585b82c2d1a65ed2d5cf2f51b093 Mon Sep 17 00:00:00 2001
From: Joe Nelson <begriffs@users.noreply.github.com>
Date: Sun, 8 Oct 2017 12:38:46 -0500
Subject: [PATCH 124/652] Explain how sql comments appear in the openapi output
 (#111)

---
 api.rst | 14 ++++++++++++--
 1 file changed, 12 insertions(+), 2 deletions(-)

diff --git a/api.rst b/api.rst
index c05547b07..2a4480f93 100644
--- a/api.rst
+++ b/api.rst
@@ -678,9 +678,19 @@ To delete rows in a table, use the DELETE verb plus :ref:`h_filter`. For instanc
 OpenAPI Support
 ===============
 
-Every API hosted by PostgREST automatically serves a full `OpenAPI <https://www.openapis.org/>`_ description on the root path. This provides a list of all endpoints, along with supported HTTP verbs and example payloads.
+Every API hosted by PostgREST automatically serves a full `OpenAPI <https://www.openapis.org/>`_ description on the root path. This provides a list of all endpoints, along with supported HTTP verbs and example payloads. For extra customization, the OpenAPI output contains a "description" field for every `SQL comment <https://www.postgresql.org/docs/current/static/sql-comment.html>`_ on a table, column, or function. For instance,
 
-You can use a tool like `Swagger UI <http://swagger.io/swagger-ui/>`_ to create beautiful documentation from the description and to host an interactive web-based dashboard. The dashboard allows developers to make requests against a live PostgREST server, provides guidance with request headers and example request bodies.
+.. code-block:: sql
+
+  COMMENT ON TABLE monotremes IS
+    'Freakish mammals lay the best eggs for breakfast';
+
+  COMMENT ON COLUMN monotremes.has_venomous_claw IS
+    'Sometimes breakfast is not worth it';
+
+These unsavory comments will appear in the generated JSON as the fields ``definitions.monotremes.description`` and ``definitions.monotremes.properties.has_venomous_claw.description``.
+
+You can use a tool like `Swagger UI <http://swagger.io/swagger-ui/>`_ to create beautiful documentation from the description and to host an interactive web-based dashboard. The dashboard allows developers to make requests against a live PostgREST server, and provides guidance with request headers and example request bodies.
 
 .. note::
 

From 59ab74b86139a7c00ea16ac5dc4a829059547584 Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Sun, 8 Oct 2017 13:35:35 -0500
Subject: [PATCH 125/652] Add items to ecosystem

---
 intro.rst | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/intro.rst b/intro.rst
index 272c8d9ef..c6509574b 100644
--- a/intro.rst
+++ b/intro.rst
@@ -62,6 +62,7 @@ These are PostgreSQL bridges that propagate LISTEN/NOTIFY to external queues for
 * `aweber/pgsql-listen-exchange <https://github.com/aweber/pgsql-listen-exchange>`_ - RabbitMQ
 * `SpiderOak/skeeter <https://github.com/SpiderOak/skeeter>`_ - ZeroMQ
 * `FGRibreau/postgresql-to-amqp <https://github.com/FGRibreau/postgresql-to-amqp>`_ - AMQP
+* `daurnimator/pg-kinesis-bridge <https://github.com/daurnimator/pg-kinesis-bridge>`_ - Amazon Kinesis
 
 Example Apps
 ------------
@@ -86,6 +87,7 @@ Example Apps
 In Production
 -------------
 
+* `Moat <https://moat.com/>`_
 * `Catarse <https://www.catarse.me/>`_
 * `iAdvize <http://iadvize.com/>`_
 * `Redsmin <https://www.redsmin.com/>`_
@@ -98,12 +100,13 @@ In Production
 Extensions
 ----------
 
-* `ppKrauss/PostgREST-writeAPI <https://github.com/ppKrauss/PostgREST-writeAPI>`_ - generate Nginx rewrite rules to fit an OpenAPI spec
 * `diogob/postgrest-ws <https://github.com/diogob/postgrest-ws>`_ - expose web sockets for PostgreSQL's LISTEN/NOTIFY
 * `pg-safeupdate <https://bitbucket.org/eradman/pg-safeupdate/>`_ - Prevent full-table updates or deletes
 * `srid/spas <https://github.com/srid/spas>`_ - allow file uploads and basic auth
 * `svmnotn/postgrest-auth <https://github.com/svmnotn/postgrest-auth>`_ - OAuth2-inspired external auth server
 * `nblumoe/postgrest-oauth <https://github.com/nblumoe/postgrest-oauth>`_ - OAuth2 WAI middleware
+* `criles25/postgrest-auth <https://github.com/criles25/postgrest-auth>`_ - email based auth/signup
+* `ppKrauss/PostgREST-writeAPI <https://github.com/ppKrauss/PostgREST-writeAPI>`_ - generate Nginx rewrite rules to fit an OpenAPI spec
 
 Commercial
 ---------------

From 82d2d781be33aefce997fa6764cd785e77422f75 Mon Sep 17 00:00:00 2001
From: Brian Thorne <brian@thorne.link>
Date: Sat, 4 Nov 2017 16:59:04 +1100
Subject: [PATCH 126/652] Fix typo in api.rst (#113)

---
 api.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/api.rst b/api.rst
index 2a4480f93..11453fe51 100644
--- a/api.rst
+++ b/api.rst
@@ -618,7 +618,7 @@ On the other end of the spectrum you can get the full created object back in the
 
   Some javascript libraries will post the data incorrectly if you're not careful. For best results try one of the :ref:`clientside_libraries` built for PostgREST.
 
-To update a row or rows in a table, use the PATCH verb. Use :ref:`h_filter` to specify which record(s) to update. Here is an exmaple query setting the :code:`category` column to child for all people below a certain age.
+To update a row or rows in a table, use the PATCH verb. Use :ref:`h_filter` to specify which record(s) to update. Here is an example query setting the :code:`category` column to child for all people below a certain age.
 
 .. code:: HTTP
 

From e48a206075cb7379732652d80b1fc182e8a852c0 Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Sat, 4 Nov 2017 23:17:39 -0500
Subject: [PATCH 127/652] Use parens for IN operator

Paren-free is deprecated
---
 api.rst | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/api.rst b/api.rst
index 11453fe51..14775ac4a 100644
--- a/api.rst
+++ b/api.rst
@@ -59,9 +59,9 @@ neq           not equal                                        :code:`<>` or :co
 like          LIKE operator (use * in place of %)              :code:`LIKE`
 ilike         ILIKE operator (use * in place of %)             :code:`ILIKE`
 in            one of a list of values e.g.                     :code:`IN`
-              :code:`?a=in.1,2,3` – also supports commas
+              :code:`?a=in.(1,2,3)` – also supports commas
               in quoted strings like
-              :code:`?a=in."hi,there","yes,you"`
+              :code:`?a=in.("hi,there","yes,you")`
 is            checking for exact equality (null,true,false)    :code:`IS`
 fts           :ref:`fts` using to_tsquery                      :code:`@@`
 cs            contains e.g. :code:`?tags=cs.{example, new}`    :code:`@>`
@@ -475,7 +475,7 @@ This sorts the list of actors in each film but does *not* change the order of th
 
 .. code-block:: http
 
-  GET /films?select=*,roles(*)&roles.character=in.Chico,Harpo,Groucho HTTP/1.1
+  GET /films?select=*,roles(*)&roles.character=in.(Chico,Harpo,Groucho) HTTP/1.1
 
 Once again, this restricts the roles included to certain characters but does not filter the films in any way. Films without any of those characters would be included along with empty character lists.
 

From f93e2723e31dbc8363b88ddefe35ff0dad75ce85 Mon Sep 17 00:00:00 2001
From: Joe Nelson <begriffs@users.noreply.github.com>
Date: Sat, 25 Nov 2017 22:00:55 -0600
Subject: [PATCH 128/652] Add note that windows people need postgres on path
 (#117)

---
 install.rst | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/install.rst b/install.rst
index a7ab1bd4e..90e612bbb 100644
--- a/install.rst
+++ b/install.rst
@@ -34,6 +34,8 @@ To use PostgREST you will need an underlying database (PostgreSQL version 9.5 or
 * `Instructions for Ubuntu 14.04 <https://www.digitalocean.com/community/tutorials/how-to-install-and-use-postgresql-on-ubuntu-14-04>`_
 * `Installer for Windows <http://www.enterprisedb.com/products-services-training/pgdownload#windows>`_
 
+On Windows, PostgREST will fail to run unless the PostgreSQL binaries are on the system path. To test whether this is the case, run ``pg_config`` from the command line. You should see it output a list of paths.
+
 .. _configuration:
 
 Configuration

From d9e7620160a69e14e12a6b2ffe4fe1b097124ed3 Mon Sep 17 00:00:00 2001
From: Captain Justin <just1689@gmail.com>
Date: Wed, 29 Nov 2017 07:48:31 +0200
Subject: [PATCH 129/652] Update intro.rst (#118)

---
 intro.rst | 1 +
 1 file changed, 1 insertion(+)

diff --git a/intro.rst b/intro.rst
index c6509574b..9754d528b 100644
--- a/intro.rst
+++ b/intro.rst
@@ -51,6 +51,7 @@ Client-Side Libraries
 * `clesiemo3/postgrestR <https://github.com/clesiemo3/postgrestR>`_ - R
 * `PierreRochard/postgrest-angular <https://github.com/PierreRochard/postgrest-angular>`_ - TypeScript, generate UI from API description
 * `thejettdurham/postgrest-sharp-client <https://github.com/thejettdurham/postgrest-sharp-client>`_ (needs maintainer) - C#, RestSharp
+* `team142/ng-postgrest <https://github.com/team142/ng-postgrest>`_ - Angular app for browsing, editing data exposed over Postgrest.
 
 External Notification
 ---------------------

From f0bf51efc2b4b5854deecd815b6f6b5d5ba4e913 Mon Sep 17 00:00:00 2001
From: Damien Bry <damien.bry@gmail.com>
Date: Thu, 28 Dec 2017 04:56:04 +0100
Subject: [PATCH 130/652] Added Elyios as using PostgREST in production (#119)

---
 intro.rst | 1 +
 1 file changed, 1 insertion(+)

diff --git a/intro.rst b/intro.rst
index 9754d528b..426c625cf 100644
--- a/intro.rst
+++ b/intro.rst
@@ -97,6 +97,7 @@ In Production
 * `OpenBooking <http://openbooking.ch>`_
 * `Convene <https://info.convene.thomsonreuters.com/en.html>`_ by Thomson-Reuters
 * `eGull <http://www.egull.co>`_
+* `Elyios <https://elyios.com>`_
 
 Extensions
 ----------

From e10599d0659f5b89028de82964600800f7a34b9d Mon Sep 17 00:00:00 2001
From: Joe Nelson <begriffs@users.noreply.github.com>
Date: Thu, 18 Jan 2018 10:48:34 -0600
Subject: [PATCH 131/652] Changes in 4.4 release (#121)

* Updated full-text search

* Calling RPC with GET

* Customizing HTTP status codes and headers

* Move the admin section to bottom of TOC

* Revise JWT signing section of tutorial

* Selecting pkeys in embedding no longer required
---
 api.rst            | 74 +++++++++++++++++++++++++++++++++-------------
 index.rst          | 10 +++----
 postgrest.dict     |  5 +++-
 tutorials/tut1.rst | 17 +++++++----
 4 files changed, 73 insertions(+), 33 deletions(-)

diff --git a/api.rst b/api.rst
index 14775ac4a..78d51da1a 100644
--- a/api.rst
+++ b/api.rst
@@ -64,6 +64,8 @@ in            one of a list of values e.g.                     :code:`IN`
               :code:`?a=in.("hi,there","yes,you")`
 is            checking for exact equality (null,true,false)    :code:`IS`
 fts           :ref:`fts` using to_tsquery                      :code:`@@`
+plfts         :ref:`fts` using plainto_tsquery                 :code:`@@`
+phfts         :ref:`fts` using phraseto_tsquery                :code:`@@`
 cs            contains e.g. :code:`?tags=cs.{example, new}`    :code:`@>`
 cd            contained in e.g. :code:`?values=cd.{1,2,3}`     :code:`<@`
 ov            overlap (have points in common),                 :code:`&&`
@@ -107,22 +109,22 @@ The view will provide a new endpoint:
 Full-Text Search
 ~~~~~~~~~~~~~~~~
 
-The :code:`fts` filter mentioned above has a number of options to support flexible textual queries, namely the choice of plain vs phrase search and the language used for stemming. Suppose that :code:`tsearch` is a table with column :code:`ts_vector`, unsurprisingly of type `tsvector <https://www.postgresql.org/docs/current/static/datatype-textsearch.html>`_. The follow examples illustrate the possibilities.
+The :code:`fts` filter mentioned above has a number of options to support flexible textual queries, namely the choice of plain vs phrase search and the language used for stemming. Suppose that :code:`tsearch` is a table with column :code:`my_tsv`, of type `tsvector <https://www.postgresql.org/docs/current/static/datatype-textsearch.html>`_. The follow examples illustrate the possibilities.
 
 .. code-block:: http
 
   # Use language in fts query
-  GET /tsearch?ts_vector=french.fts.amusant
+  GET /tsearch?my_tsv=fts(french).amusant
 
   # Use plainto_tsquery and phraseto_tsquery
-  GET /tsearch?ts_vector=plain.fts.The%20Fat%20Cats
-  GET /tsearch?ts_vector=phrase.fts.The%20Fat%20Rats
+  GET /tsearch?my_tsv=plfts.The%20Fat%20Cats
+  GET /tsearch?my_tsv=phfts.The%20Fat%20Rats
 
   # Combine both
-  GET /tsearch?ts_vector=phrase.english.fts.The%20Fat%20Cats
+  GET /tsearch?my_tsv=phfts(english).The%20Fat%20Cats
 
   # "not" also working
-  GET /tsearch?ts_vector=not.phrase.english.fts.The%20Fat%20Cats
+  GET /tsearch?my_tsv=not.phfts(english).The%20Fat%20Cats
 
 Using phrase search mode requires PostgreSQL of version at least 9.6 and will raise an error in earlier versions of the database.
 
@@ -433,9 +435,6 @@ Which would return
     }
   ]
 
-The primary key of the table of the resource being embedded must be specified,
-either explicitly, like in the example above, or implicitly through a wild card.
-
 In this example, since the relationship is a forward relationship, there is
 only one director associated with a film. As the table name is plural it might
 be preferable for it to be singular instead. An table name alias can accomplish
@@ -455,9 +454,6 @@ PostgREST can also detect relations going through join tables. Thus you can requ
 
   GET /directors?select=films(title,year) HTTP/1.1
 
-Here it is not necessary to specify the table's primary key of the embedded
-resource.
-
 .. note::
 
   Whenever foreign key relations change in the database schema you must refresh PostgREST's schema cache to allow resource embedding to work properly. See the section :ref:`schema_reloading`.
@@ -493,13 +489,13 @@ The PostgREST URL grammar limits the kinds of queries clients can perform. It pr
 Stored Procedures
 =================
 
-Every stored procedure in the API-exposed database schema is accessible under the :code:`/rpc` prefix. The API endpoint supports only POST which executes the function.
+Every stored procedure in the API-exposed database schema is accessible under the :code:`/rpc` prefix. The API endpoint supports POST (and in some cases GET) to execute the function.
 
 .. code:: http
 
   POST /rpc/function_name HTTP/1.1
 
-Such functions can perform any operations allowed by PostgreSQL (read data, modify data, and even DDL operations). However procedures in PostgreSQL marked with :code:`stable` or :code:`immutable` `volatility <https://www.postgresql.org/docs/current/static/xfunc-volatility.html>`_ can only read, not modify, the database and PostgREST executes them in a read-only transaction compatible for read-replicas.
+Such functions can perform any operations allowed by PostgreSQL (read data, modify data, and even DDL operations). However procedures in PostgreSQL marked with :code:`stable` or :code:`immutable` `volatility <https://www.postgresql.org/docs/current/static/xfunc-volatility.html>`_ can only read, not modify, the database and PostgREST executes them in a read-only transaction compatible for read-replicas. Stable and immutable functions can be called with the HTTP GET verb if desired.
 
 Procedures must be used with `named arguments <https://www.postgresql.org/docs/current/static/sql-syntax-calling-funcs.html#SQL-SYNTAX-CALLING-FUNCS-NAMED>`_. To supply arguments in an API call, include a JSON object in the request payload and each key/value of the object will become an argument.
 
@@ -520,7 +516,13 @@ The client can call it by posting an object like
 
   { "a": 1, "b": 2 }
 
-The keys of the object match the parameter names. Note that PostgreSQL converts parameter names to lowercase unless you quote them like :sql:`CREATE FUNCTION foo("mixedCase" text) ...`. You can also call a function that takes a single parameter of type json by sending the header :code:`Prefer: params=single-object` with your request. That way the JSON request body will be used as the single argument.
+Because ``add_them`` is declared IMMUTABLE, we can alternately call the function with a GET request:
+
+.. code:: http
+
+  GET /rpc/add_them?a=1&b=2 HTTP/1.1
+
+For POST and GET the keys of the object match the parameter names. Note that PostgreSQL converts parameter names to lowercase unless you quote them like :sql:`CREATE FUNCTION foo("mixedCase" text) ...`. You can also call a function that takes a single parameter of type json by sending the header :code:`Prefer: params=single-object` with your request. That way the JSON request body will be used as the single argument.
 
 .. note::
 
@@ -546,8 +548,6 @@ By default, a function is executed with the privileges of the user who calls it.
 
   Why the `/rpc` prefix? One reason is to avoid name collisions between views and procedures. It also helps emphasize to API consumers that these functions are not normal restful things. The functions can have arbitrary and surprising behavior, not the standard "post creates a resource" thing that users expect from the other routes.
 
-  We are considering allowing GET requests for functions that are marked non-volatile. Allowing GET is important for HTTP caching. However we still must decide how to pass function parameters since request bodies are not allowed. Also some query string arguments are already reserved for shaping/filtering the output.
-
 Accessing Request Headers/Cookies
 ---------------------------------
 
@@ -557,10 +557,10 @@ Stored procedures can access request headers and cookies by reading GUC variable
 
   SELECT current_setting('request.header.origin', true);
 
-Raising Errors
---------------
+Errors and HTTP Status Codes
+----------------------------
 
-Stored procedures can return non-200 HTTP status codes by raising SQL exceptions. For instance, here's a saucy function that always errors:
+Stored procedures can return non-200 HTTP status codes by raising SQL exceptions. For instance, here's a saucy function that always responds with an error:
 
 .. code-block:: postgresql
 
@@ -585,7 +585,39 @@ Calling the function returns HTTP 400 with the body
     "code":"P0001"
   }
 
-You can customize the HTTP status code by raising particular exceptions according to the PostgREST :ref:`error to status code mapping <status_codes>`. For example, :code:`RAISE insufficient_privilege` will respond with HTTP 401/403 as appropriate.
+One way to customize the HTTP status code is by raising particular exceptions according to the PostgREST :ref:`error to status code mapping <status_codes>`. For example, :code:`RAISE insufficient_privilege` will respond with HTTP 401/403 as appropriate.
+
+For even greater control of the HTTP status code, raise an exception of the ``PTxyz`` type. For instance to respond with HTTP 402, raise 'PT402':
+
+.. code-block:: sql
+
+  RAISE sqlstate 'PT402' using
+    message = 'Payment Required',
+    detail = 'Quota exceeded',
+    hint = 'Upgrade your plan';
+
+Returns:
+
+.. code-block:: http
+
+  HTTP/1.1 402 Payment Required
+  Content-Type: application/json; charset=utf-8
+
+  {"hint":"Upgrade your plan","details":"Quota exceeded"}
+
+Setting Response Headers
+------------------------
+
+PostgREST reads the ``response.headers`` SQL variable to add extra headers to the HTTP response. Stored procedures can modify this variable. For instance, this statement would add caching headers to the response:
+
+.. code-block:: sql
+
+  -- tell client to cache response for two days
+
+  SET LOCAL "response.headers" =
+    '[{"Cache-Control": "public"}, {"Cache-Control": "max-age=259200"}]';
+
+Notice that the variable should be set to an *array* of single-key objects rather than a single multiple-key object. This is because headers such as ``Cache-Control`` or ``Set-Cookie`` need to be repeated when setting multiple values and an object would not allow the repeated key.
 
 Insertions / Updates
 ====================
diff --git a/index.rst b/index.rst
index b3ab8b26f..c59042d72 100644
--- a/index.rst
+++ b/index.rst
@@ -21,11 +21,6 @@
 
    install.rst
 
-.. toctree::
-   :caption: Administration
-
-   admin.rst
-
 .. toctree::
    :caption: API
 
@@ -35,3 +30,8 @@
    :caption: Authentication
 
    auth.rst
+
+.. toctree::
+   :caption: Administration
+
+   admin.rst
diff --git a/postgrest.dict b/postgrest.dict
index 65b3387f7..bab9af1ef 100644
--- a/postgrest.dict
+++ b/postgrest.dict
@@ -23,6 +23,7 @@ JS
 JSON
 JWK
 JWT
+Kinesis
 Logins
 MVCC
 Mithril
@@ -98,10 +99,12 @@ ov
 param
 params
 passphrase
-postgrest
 pgSQL
 pgcrypto
 pgjwt
+phfts
+plfts
+postgrest
 pre
 reallyreallyreallyreallyverysafe
 refactor
diff --git a/tutorials/tut1.rst b/tutorials/tut1.rst
index 983ac150f..84e357a38 100644
--- a/tutorials/tut1.rst
+++ b/tutorials/tut1.rst
@@ -27,23 +27,28 @@ Step 2. Make a Secret
 
 Clients authenticate with the API using JSON Web Tokens. These are JSON objects which are cryptographically signed using a password known to only us and the server. Because clients do not know the password, they cannot tamper with the contents of their tokens. PostgREST will detect counterfeit tokens and will reject them.
 
-Let's create a password and provide it to PostgREST. Think of a nice long one, or use a tool to generate it.
+Let's create a password and provide it to PostgREST. Think of a nice long one, or use a tool to generate it. **Your password must be at least 32 characters long.**
 
 .. note::
 
-  The `OpenSSL toolkit <https://www.openssl.org/>`_ provides an easy way to generate a secure password. If you have it installed, run
+  Unix tools can generate a nice password for you:
 
   .. code-block:: bash
 
-    openssl rand -base64 32
+    # Allow "tr" to process non-utf8 byte sequences
+    export LC_CTYPE=C
+
+    # read random bytes and keep only alphanumerics
+    < /dev/urandom tr -dc A-Za-z0-9 | head -c32
 
 Open the :code:`tutorial.conf` (created in the previous tutorial) and add a line with the password:
 
 .. code-block:: ini
 
-  # add this line to tutorial.conf
+  # PASSWORD MUST BE AT LEAST 32 CHARS LONG
+  # add this line to tutorial.conf:
 
-  jwt-secret = "<the password you created>"
+  jwt-secret = "<the password you made>"
 
 If the PostgREST server is still running from the previous tutorial, restart it to load the updated configuration file.
 
@@ -57,7 +62,7 @@ Ordinarily your own code in the database or in another server will create and si
 
    How to create a token at https://jwt.io
 
-Remember to fill in the password you generated rather than the word :code:`secret`. After you have filled in the password and payload, the encoded data on the left will update. Copy the encoded token.
+**Remember to fill in the password you generated rather than the word "secret".** After you have filled in the password and payload, the encoded data on the left will update. Copy the encoded token.
 
 .. note::
 

From 362ee5a4ed47040dea9ff705463a98b8d607476c Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Thu, 18 Jan 2018 10:53:51 -0600
Subject: [PATCH 132/652] Bump version

---
 conf.py | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/conf.py b/conf.py
index 394a14584..2a9c6b857 100644
--- a/conf.py
+++ b/conf.py
@@ -54,9 +54,9 @@ author = u'Joe Nelson'
 # built documents.
 #
 # The short X.Y version.
-version = u'4.3'
+version = u'4.4'
 # The full version, including alpha/beta/rc tags.
-release = u'4.3.0'
+release = u'4.4.0'
 
 # The language for content autogenerated by Sphinx. Refer to documentation
 # for a list of supported languages.

From 7dbd5f799e5897ea717808a1e15c29466a849951 Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Fri, 2 Feb 2018 19:57:24 -0800
Subject: [PATCH 133/652] Update name of diogob's websocket adapter

---
 intro.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/intro.rst b/intro.rst
index 426c625cf..78178b6f1 100644
--- a/intro.rst
+++ b/intro.rst
@@ -58,6 +58,7 @@ External Notification
 
 These are PostgreSQL bridges that propagate LISTEN/NOTIFY to external queues for further processing. This allows stored procedures to initiate actions outside the database such as sending emails.
 
+* `diogob/postgres-websockets <https://github.com/diogob/postgres-websockets>`_ - expose web sockets for PostgreSQL's LISTEN/NOTIFY
 * `frafra/postgresql2websocket <https://github.com/frafra/postgresql2websocket>`_ - Websockets
 * `matthewmueller/pg-bridge <https://github.com/matthewmueller/pg-bridge>`_ - Amazon SNS
 * `aweber/pgsql-listen-exchange <https://github.com/aweber/pgsql-listen-exchange>`_ - RabbitMQ
@@ -102,7 +103,6 @@ In Production
 Extensions
 ----------
 
-* `diogob/postgrest-ws <https://github.com/diogob/postgrest-ws>`_ - expose web sockets for PostgreSQL's LISTEN/NOTIFY
 * `pg-safeupdate <https://bitbucket.org/eradman/pg-safeupdate/>`_ - Prevent full-table updates or deletes
 * `srid/spas <https://github.com/srid/spas>`_ - allow file uploads and basic auth
 * `svmnotn/postgrest-auth <https://github.com/svmnotn/postgrest-auth>`_ - OAuth2-inspired external auth server

From 911417471e99b893232fa824241b438f28e8d15a Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Sat, 3 Feb 2018 13:55:32 -0800
Subject: [PATCH 134/652] Add Eric's testimonial

---
 intro.rst | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/intro.rst b/intro.rst
index 78178b6f1..317c5faaf 100644
--- a/intro.rst
+++ b/intro.rst
@@ -138,6 +138,15 @@ Testimonials
 
   -- Simone Scarduzio
 
+  "I like the fact that PostgREST does one thing, and one thing well.
+  While PostgREST takes care of bridging the gap between our HTTP server
+  and PostgreSQL database, we can focus on the development of our API in
+  a single language: SQL. This puts the database in the center of our
+  architecture, and pushed us to improve our skills in SQL programming
+  and database design."
+
+  -- Eric Bréchemier, Data Engineer, eGull SAS
+
 Getting Support
 ################
 

From 7151e624995ce95733d21147c2fa59bcafcce05e Mon Sep 17 00:00:00 2001
From: Camille Roussel <camille@rousselfamily.com>
Date: Sun, 4 Feb 2018 00:52:51 -0500
Subject: [PATCH 135/652] Update tut0.rst with improved instructions for
 windows installs (#120)

---
 tutorials/tut0.rst | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/tutorials/tut0.rst b/tutorials/tut0.rst
index 6348f8e18..1979de812 100644
--- a/tutorials/tut0.rst
+++ b/tutorials/tut0.rst
@@ -83,8 +83,11 @@ If everything is working correctly it will print out its version and information
     </details>
     <details>
       <summary>Windows</summary>
-      <p>It isn't fun. Learn more <a href="https://stackoverflow.com/questions/38341725/how-to-install-libpq-dev-package-for-windows">here</a>.</p>
-      <p>It might be easier to execute PostgREST in its own Docker image as well.</p>
+        <p>All of the DLL files that are required to run PostgREST are available in the windows installation of PostgreSQL server. 
+        Once installed they are found in the BIN folder, e.g: C:\Program Files\PostgreSQL\10\bin. Add this directory to your PATH 
+        variable. Run the following from an administrative command prompt (adjusting the actual BIN path as necessary of course)
+          <pre>setx /m PATH "%PATH%;C:\Program Files\PostgreSQL\10\bin"</pre>
+        </p>
     </details>
     </p>
 

From 16cf1ef45c32d309691c014085392118a2b29d31 Mon Sep 17 00:00:00 2001
From: Christopher Bowman <cbowman0@gmail.com>
Date: Fri, 9 Mar 2018 20:42:01 -0500
Subject: [PATCH 136/652] Replace 'to to ' with 'to the ' (#122)

---
 tutorials/tut0.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tutorials/tut0.rst b/tutorials/tut0.rst
index 1979de812..dc3d6b101 100644
--- a/tutorials/tut0.rst
+++ b/tutorials/tut0.rst
@@ -94,7 +94,7 @@ If everything is working correctly it will print out its version and information
 Step 4. Create Database for API
 -------------------------------
 
-Connect to to SQL console (psql) inside the container. To do so, run this from your command line:
+Connect to the SQL console (psql) inside the container. To do so, run this from your command line:
 
 .. code-block:: bash
 

From 7b2ab948bebc30cb3c6eff4aeb4943340c496a84 Mon Sep 17 00:00:00 2001
From: Joe Nelson <begriffs@users.noreply.github.com>
Date: Sun, 11 Mar 2018 12:26:16 -0500
Subject: [PATCH 137/652] Schema auto-reload instructions (#124)

---
 admin.rst | 24 +++++++++++++++++++++++-
 1 file changed, 23 insertions(+), 1 deletion(-)

diff --git a/admin.rst b/admin.rst
index d6408aa9f..b47e93853 100644
--- a/admin.rst
+++ b/admin.rst
@@ -177,7 +177,29 @@ To refresh the cache without restarting the PostgREST server, send the server pr
 
   killall -HUP postgrest
 
-In the future we're investigating ways to keep the cache updated without manual intervention.
+The above is the manual way to do it. To automate the schema reloads, use a database trigger like this:
+
+.. code-block:: postgresql
+
+  CREATE OR REPLACE FUNCTION public.notify_ddl_postgrest()
+    RETURNS event_trigger
+   LANGUAGE plpgsql
+    AS $$
+  BEGIN
+    NOTIFY ddl_command_end;
+  END;
+  $$;
+
+  CREATE EVENT TRIGGER ddl_postgrest ON ddl_command_end
+     EXECUTE PROCEDURE public.notify_ddl_postgrest();
+
+Then run the `pg_listen <https://github.com/begriffs/pg_listen>`_ utility to monitor for that event and send a SIGHUP when it occurs:
+
+.. code-block:: bash
+
+  pg_listen <db-uri> ddl_command_end "killall -HUP postgrest"
+
+Now, whenever the structure of the database schema changes, PostgreSQL will notify the ``ddl_command_end`` channel, which will cause ``pg_listen`` to send PostgREST the signal to reload its cache.
 
 Alternate URL Structure
 =======================

From 0bae76f05ecfa2a1befb7c2728cc75337577112d Mon Sep 17 00:00:00 2001
From: Thomas <thomas.pocreau@iadvize.com>
Date: Wed, 14 Mar 2018 18:12:03 +0100
Subject: [PATCH 138/652] Remove iAdvize from In Production list (#125)

---
 intro.rst | 1 -
 1 file changed, 1 deletion(-)

diff --git a/intro.rst b/intro.rst
index 317c5faaf..a8e78ed55 100644
--- a/intro.rst
+++ b/intro.rst
@@ -91,7 +91,6 @@ In Production
 
 * `Moat <https://moat.com/>`_
 * `Catarse <https://www.catarse.me/>`_
-* `iAdvize <http://iadvize.com/>`_
 * `Redsmin <https://www.redsmin.com/>`_
 * `Image-charts <https://image-charts.com/>`_
 * `Drip Depot <https://www.dripdepot.com/>`_

From 1fb9e34c9cd9091531a922b76bc9237b619f93b3 Mon Sep 17 00:00:00 2001
From: Joe Nelson <cred+github@begriffs.com>
Date: Thu, 29 Mar 2018 00:40:54 -0500
Subject: [PATCH 139/652] Add new oauth server

---
 intro.rst | 1 +
 1 file changed, 1 insertion(+)

diff --git a/intro.rst b/intro.rst
index a8e78ed55..0e2307b5b 100644
--- a/intro.rst
+++ b/intro.rst
@@ -105,6 +105,7 @@ Extensions
 * `pg-safeupdate <https://bitbucket.org/eradman/pg-safeupdate/>`_ - Prevent full-table updates or deletes
 * `srid/spas <https://github.com/srid/spas>`_ - allow file uploads and basic auth
 * `svmnotn/postgrest-auth <https://github.com/svmnotn/postgrest-auth>`_ - OAuth2-inspired external auth server
+* `wildsurfer/postgrest-oauth-server <https://github.com/wildsurfer/postgrest-oauth-server>`_ - OAuth2 server
 * `nblumoe/postgrest-oauth <https://github.com/nblumoe/postgrest-oauth>`_ - OAuth2 WAI middleware
 * `criles25/postgrest-auth <https://github.com/criles25/postgrest-auth>`_ - email based auth/signup
 * `ppKrauss/PostgREST-writeAPI <https://github.com/ppKrauss/PostgREST-writeAPI>`_ - generate Nginx rewrite rules to fit an OpenAPI spec

From 88e3c8c4b6291fb6f3c9ad522234f7b4d88bb158 Mon Sep 17 00:00:00 2001
From: Hasan Pekdemir <hasan.pekdemir@de-cix.net>
Date: Fri, 4 May 2018 16:15:02 +0200
Subject: [PATCH 140/652] add triggerfs to production apps in examples

---
 intro.rst | 1 +
 1 file changed, 1 insertion(+)

diff --git a/intro.rst b/intro.rst
index 0e2307b5b..ac0da6e35 100644
--- a/intro.rst
+++ b/intro.rst
@@ -89,6 +89,7 @@ Example Apps
 In Production
 -------------
 
+* `triggerFS - A realtime messaging and distributed trigger system <https://triggerfs.io/>`_
 * `Moat <https://moat.com/>`_
 * `Catarse <https://www.catarse.me/>`_
 * `Redsmin <https://www.redsmin.com/>`_

From 28c39e976c1d792d6c7d4f8353ba5d557fea1b1f Mon Sep 17 00:00:00 2001
From: Ken Fehling <kenfehling@gmail.com>
Date: Mon, 21 May 2018 05:04:20 -0400
Subject: [PATCH 141/652] Update docker-compose example to version 3

Adds "depends_on"
---
 install.rst | 41 ++++++++++++++++++++++-------------------
 1 file changed, 22 insertions(+), 19 deletions(-)

diff --git a/install.rst b/install.rst
index 90e612bbb..95152e191 100644
--- a/install.rst
+++ b/install.rst
@@ -203,25 +203,28 @@ To avoid having to install the database at all, you can run both it and the serv
 
   # docker-compose.yml
 
-  server:
-    image: postgrest/postgrest
-    ports:
-      - "3000:3000"
-    links:
-      - db:db
-    environment:
-      PGRST_DB_URI: postgres://app_user:password@db:5432/app_db
-      PGRST_DB_SCHEMA: public
-      PGRST_DB_ANON_ROLE: app_user
-
-  db:
-    image: postgres
-    ports:
-      - "5432:5432"
-    environment:
-      POSTGRES_DB: app_db
-      POSTGRES_USER: app_user
-      POSTGRES_PASSWORD: password
+  version: '3'
+  services:
+    server:
+      image: postgrest/postgrest
+      ports:
+        - "3000:3000"
+      links:
+        - db:db
+      environment:
+        PGRST_DB_URI: postgres://app_user:password@db:5432/app_db
+        PGRST_DB_SCHEMA: public
+        PGRST_DB_ANON_ROLE: app_user
+      depends_on:
+        - db
+    db:
+      image: postgres
+      ports:
+        - "5432:5432"
+      environment:
+        POSTGRES_DB: app_db
+        POSTGRES_USER: app_user
+        POSTGRES_PASSWORD: password
 
 Go into the directory where you saved this file and run :code:`docker-compose up`. You will see the logs of both the database and PostgREST, and be able to access the latter on port 3000.
 

From e0e4d68185dd56880b36c2349570f6874e33f66f Mon Sep 17 00:00:00 2001
From: agent3bood <abdullahalsagr@icloud.com>
Date: Wed, 23 May 2018 17:43:28 +0400
Subject: [PATCH 142/652] update PGRST_DB_ANON_ROLE in docker-compose

anon should not be the default db user
---
 install.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install.rst b/install.rst
index 95152e191..2cb7186ff 100644
--- a/install.rst
+++ b/install.rst
@@ -214,7 +214,7 @@ To avoid having to install the database at all, you can run both it and the serv
       environment:
         PGRST_DB_URI: postgres://app_user:password@db:5432/app_db
         PGRST_DB_SCHEMA: public
-        PGRST_DB_ANON_ROLE: app_user
+        PGRST_DB_ANON_ROLE: app_user #In production this role should not be the same as the one used for the connection
       depends_on:
         - db
     db:

From b32ba7a409a984d1ea3e614dc7ae958b47d7a8c7 Mon Sep 17 00:00:00 2001
From: agent3bood <abdullahalsagr@icloud.com>
Date: Wed, 23 May 2018 17:46:13 +0400
Subject: [PATCH 143/652] Add volume to docker-compose

---
 install.rst | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/install.rst b/install.rst
index 2cb7186ff..c54ebdd17 100644
--- a/install.rst
+++ b/install.rst
@@ -225,6 +225,9 @@ To avoid having to install the database at all, you can run both it and the serv
         POSTGRES_DB: app_db
         POSTGRES_USER: app_user
         POSTGRES_PASSWORD: password
+    # Uncomment this if you want to persist the data.
+    # volumes:
+    #   - "./pgdata:/var/lib/postgresql/data"
 
 Go into the directory where you saved this file and run :code:`docker-compose up`. You will see the logs of both the database and PostgREST, and be able to access the latter on port 3000.
 

From 736a5020b034b29bf2fd30c5423789bcd2fb8302 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Wed, 23 May 2018 13:00:00 -0500
Subject: [PATCH 144/652] Add app.settings.* config value feature

---
 install.rst | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/install.rst b/install.rst
index c54ebdd17..c5c81e17a 100644
--- a/install.rst
+++ b/install.rst
@@ -83,6 +83,7 @@ jwt-aud           String
 secret-is-base64  Bool    False
 max-rows          Int     ∞
 pre-request       String
+app.settings.*    String
 ================  ======  =======  ========
 
 db-uri
@@ -133,6 +134,8 @@ max-rows
   A hard limit to the number of rows PostgREST will fetch from a view, table, or stored procedure. Limits payload size for accidental or malicious requests.
 pre-request
   A schema-qualified stored procedure name to call right after switching roles for a client request. This provides an opportunity to modify SQL variables or raise an exception to prevent the request from completing.
+app.settings.*
+  Arbitrary settings that will become database session settings. This can be used to pass in secret keys directly as strings, or via OS environment variables. For instance: :code:`app.settings.jwt_secret = "$(MYAPP_JWT_SECRET)"` will take :code:`MYAPP_JWT_SECRET` from the environment and make it available to postgresql functions as :code:`current_setting('app.settings.jwt_secret')`.
 
 Running the Server
 ------------------

From e56313196ba147a2fee858489c6ab1709f9a19e0 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Wed, 23 May 2018 13:49:06 -0500
Subject: [PATCH 145/652] Add role-claim-key feature

---
 install.rst | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/install.rst b/install.rst
index c5c81e17a..f8cae8bb8 100644
--- a/install.rst
+++ b/install.rst
@@ -84,6 +84,7 @@ secret-is-base64  Bool    False
 max-rows          Int     ∞
 pre-request       String
 app.settings.*    String
+role-claim-key    String  .role
 ================  ======  =======  ========
 
 db-uri
@@ -136,6 +137,18 @@ pre-request
   A schema-qualified stored procedure name to call right after switching roles for a client request. This provides an opportunity to modify SQL variables or raise an exception to prevent the request from completing.
 app.settings.*
   Arbitrary settings that will become database session settings. This can be used to pass in secret keys directly as strings, or via OS environment variables. For instance: :code:`app.settings.jwt_secret = "$(MYAPP_JWT_SECRET)"` will take :code:`MYAPP_JWT_SECRET` from the environment and make it available to postgresql functions as :code:`current_setting('app.settings.jwt_secret')`.
+role-claim-key
+  A JSPath DSL that specifies the location of the :code:`role` key in the JWT claims. This can be used to consume a JWT provided by a third party service like Auth0, Okta or Keycloak. Some examples:
+
+.. code:: bash
+
+  # {"postgrest":{"roles": ["other", "author"]}}
+  # the DSL accepts characters that are alphanumerical or one of "_$@" as keys
+  role-claim-key = ".postgrest.roles[1]"
+
+  # {"https://www.example.com/role": { "key": "author }}
+  # non-alphanumerical characters can go inside quotes(escaped in config value)
+  role-claim-key = ".\"https://www.example.com/role\".key"
 
 Running the Server
 ------------------

From 6f0a25520a42296417142b71ccaadf479a8daa2c Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Thu, 24 May 2018 10:12:23 -0500
Subject: [PATCH 146/652] Add UPSERT feature

---
 api.rst | 32 ++++++++++++++++++++++++++++++++
 1 file changed, 32 insertions(+)

diff --git a/api.rst b/api.rst
index 78d51da1a..778c0d44f 100644
--- a/api.rst
+++ b/api.rst
@@ -694,6 +694,38 @@ To bulk insert JSON post an array of objects having all-matching keys
     { "name": "Janus", "age": 10, "height": 55 }
   ]
 
+Upsert
+------
+
+You can make an UPSERT with :code:`POST` and the :code:`Prefer: resolution=merge-duplicates` header:
+
+.. code:: HTTP
+
+  POST /employees HTTP/1.1
+  Prefer: resolution=merge-duplicates
+
+  [
+    { "id": 1, "name": "Old employee 1", "salary": 30000 },
+    { "id": 2, "name": "Old employee 2" , "salary": 42000 },
+    { "id": 3, "name": "New employee 3" , "salary": 50000 }
+  ]
+
+UPSERT merging operates based on the primary key columns, you must specify all of them. You can also choose to ignore the duplicates with :code:`Prefer: resolution=ignore-duplicates`.
+
+A single row UPSERT can be done by using :code:`PUT` and filtering the primary key columns with :code:`eq`:
+
+.. code:: HTTP
+
+  PUT /employees?id=eq.4 HTTP/1.1
+
+  { "id": 4, "name": "Sara B.", "salary": 60000 }
+
+All the columns must be specified in the request body, including the primary key columns.
+
+.. note::
+
+  This feature is only available starting from PostgreSQL 9.5 since it uses the `ON CONFLICT clause <https://www.postgresql.org/docs/9.5/static/sql-insert.html#SQL-ON-CONFLICT>`_.
+
 Deletions
 =========
 

From 2f699fa115abb32d3c911fb28b16661d623bad15 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Thu, 24 May 2018 11:37:00 -0500
Subject: [PATCH 147/652] Add foreign tables in OpenAPI feature

---
 api.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/api.rst b/api.rst
index 778c0d44f..736722734 100644
--- a/api.rst
+++ b/api.rst
@@ -742,7 +742,7 @@ To delete rows in a table, use the DELETE verb plus :ref:`h_filter`. For instanc
 OpenAPI Support
 ===============
 
-Every API hosted by PostgREST automatically serves a full `OpenAPI <https://www.openapis.org/>`_ description on the root path. This provides a list of all endpoints, along with supported HTTP verbs and example payloads. For extra customization, the OpenAPI output contains a "description" field for every `SQL comment <https://www.postgresql.org/docs/current/static/sql-comment.html>`_ on a table, column, or function. For instance,
+Every API hosted by PostgREST automatically serves a full `OpenAPI <https://www.openapis.org/>`_ description on the root path. This provides a list of all endpoints(tables, foreign tables, views, functions), along with supported HTTP verbs and example payloads. For extra customization, the OpenAPI output contains a "description" field for every `SQL comment <https://www.postgresql.org/docs/current/static/sql-comment.html>`_ on a table, column, or function. For instance,
 
 .. code-block:: sql
 

From dbec5e08aa29c43eafb608f54ec2768defabd9d4 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Thu, 24 May 2018 12:06:00 -0500
Subject: [PATCH 148/652] Fix #131, SCHEMA comment and summary/description

---
 api.rst | 18 ++++++++++++++++--
 1 file changed, 16 insertions(+), 2 deletions(-)

diff --git a/api.rst b/api.rst
index 736722734..952f87340 100644
--- a/api.rst
+++ b/api.rst
@@ -742,17 +742,31 @@ To delete rows in a table, use the DELETE verb plus :ref:`h_filter`. For instanc
 OpenAPI Support
 ===============
 
-Every API hosted by PostgREST automatically serves a full `OpenAPI <https://www.openapis.org/>`_ description on the root path. This provides a list of all endpoints(tables, foreign tables, views, functions), along with supported HTTP verbs and example payloads. For extra customization, the OpenAPI output contains a "description" field for every `SQL comment <https://www.postgresql.org/docs/current/static/sql-comment.html>`_ on a table, column, or function. For instance,
+Every API hosted by PostgREST automatically serves a full `OpenAPI <https://www.openapis.org/>`_ description on the root path. This provides a list of all endpoints(tables, foreign tables, views, functions), along with supported HTTP verbs and example payloads. For extra customization, the OpenAPI output contains a "description" field for every `SQL comment <https://www.postgresql.org/docs/current/static/sql-comment.html>`_ on any database object. For instance,
 
 .. code-block:: sql
 
+  COMMENT ON SCHEMA mammals IS
+    'A warm-blooded vertebrate animal of a class that is distinguished by the secretion of milk by females for the nourishment of the young';
+
   COMMENT ON TABLE monotremes IS
     'Freakish mammals lay the best eggs for breakfast';
 
   COMMENT ON COLUMN monotremes.has_venomous_claw IS
     'Sometimes breakfast is not worth it';
 
-These unsavory comments will appear in the generated JSON as the fields ``definitions.monotremes.description`` and ``definitions.monotremes.properties.has_venomous_claw.description``.
+These unsavory comments will appear in the generated JSON as the fields, ``info.description``, ``definitions.monotremes.description`` and ``definitions.monotremes.properties.has_venomous_claw.description``.
+
+Also if you wish to generate a ``summary`` field you can do it by having a multiple line comment, the ``summary`` will be the first line and the ``description`` the lines that follow it:
+
+.. code-block:: sql
+
+  COMMENT ON TABLE entities IS
+    $$Entities summary
+
+    Entities description that
+    spans
+    multiple lines$$;
 
 You can use a tool like `Swagger UI <http://swagger.io/swagger-ui/>`_ to create beautiful documentation from the description and to host an interactive web-based dashboard. The dashboard allows developers to make requests against a live PostgREST server, and provides guidance with request headers and example request bodies.
 

From c0f8e64bbb404886221385bc63482701ccd2fa28 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Thu, 24 May 2018 12:47:52 -0500
Subject: [PATCH 149/652] Add limit/offset and and/or to embedded resources

---
 api.rst | 17 ++++++++++++++---
 1 file changed, 14 insertions(+), 3 deletions(-)

diff --git a/api.rst b/api.rst
index 952f87340..c42d7a7ef 100644
--- a/api.rst
+++ b/api.rst
@@ -458,10 +458,10 @@ PostgREST can also detect relations going through join tables. Thus you can requ
 
   Whenever foreign key relations change in the database schema you must refresh PostgREST's schema cache to allow resource embedding to work properly. See the section :ref:`schema_reloading`.
 
-Embedded Filters and Order
---------------------------
+Operations on Embedded Resources
+--------------------------------
 
-Embedded tables can be filtered and ordered similarly to their top-level counterparts. To do so, prefix the query parameters with the name of the embedded table. For instance, to order the actors in each film:
+Embedded resources rows can be shaped similarly to their top-level counterparts. To do so, prefix the query parameters with the name of the embedded resource. For instance, to order the actors in each film:
 
 .. code-block:: http
 
@@ -475,6 +475,17 @@ This sorts the list of actors in each film but does *not* change the order of th
 
 Once again, this restricts the roles included to certain characters but does not filter the films in any way. Films without any of those characters would be included along with empty character lists.
 
+An ``or`` filter  can also be used for a similar operation:
+
+.. code-block:: http
+
+  GET /films?select=*,roles(*)&roles.or=(character.eq.Gummo,character.eq.Zeppo) HTTP/1.1
+
+Limit and offset operations are also possible:
+
+.. code-block:: http
+
+  GET /films?select=*,actors(*)&actors.limit=10&actors.offset=2 HTTP/1.1
 
 Custom Queries
 ==============

From 1108aede5bd73597562fe4b2b6071401c04fd124 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Thu, 24 May 2018 12:51:00 -0500
Subject: [PATCH 150/652] Install only necessary deps for BSD and OSX

---
 install.rst | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/install.rst b/install.rst
index f8cae8bb8..1e3a58ebd 100644
--- a/install.rst
+++ b/install.rst
@@ -266,8 +266,8 @@ When a pre-built binary does not exist for your system you can build the project
   =====================  =======================================
   Ubuntu/Debian          libpq-dev, libgmp-dev
   CentOS/Fedora/Red Hat  postgresql-devel, zlib-devel, gmp-devel
-  BSD                    postgresql95-server
-  OS X                   postgresql, gmp
+  BSD                    postgresql95-client
+  OS X                   libpq, gmp
   =====================  =======================================
 
 * Build and install binary

From 79487307708f8559b4fab007f4627567ba096eb9 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Thu, 24 May 2018 13:10:17 -0500
Subject: [PATCH 151/652] Add embeds alias feature

---
 api.rst | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/api.rst b/api.rst
index c42d7a7ef..861af8dcf 100644
--- a/api.rst
+++ b/api.rst
@@ -487,6 +487,12 @@ Limit and offset operations are also possible:
 
   GET /films?select=*,actors(*)&actors.limit=10&actors.offset=2 HTTP/1.1
 
+You can also alias the embedded resources and apply filters on the aliases:
+
+.. code-block:: http
+
+  GET /films?select=*,90_comps:competitions(name),91_comps:competitions(name)&90_comps.year=eq.1990&91_comps.year=eq.1991 HTTP/1.1
+
 Custom Queries
 ==============
 

From 5e856a22a85f3e8b7721a205fdfd0045d0fe5d5a Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Fri, 25 May 2018 11:36:45 -0500
Subject: [PATCH 152/652] Fix #132, remove deprecation notices

---
 api.rst | 10 ----------
 1 file changed, 10 deletions(-)

diff --git a/api.rst b/api.rst
index 861af8dcf..752b7c7de 100644
--- a/api.rst
+++ b/api.rst
@@ -79,12 +79,6 @@ adj           is adjacent to, e.g. :code:`?range=adj.(1,10)`   :code:`-|-`
 not           negates another operator, see below              :code:`NOT`
 ============  ===============================================  =====================
 
-.. note::
-
-  As of PostgREST v0.4.3.0, the symbol operators :code:`@@, @>, <@` have been
-  deprecated in lieu of their mnemonic equivalents. They are still supported
-  but will be removed in v0.5.0.0.
-
 To negate any operator, prefix it with :code:`not` like :code:`?a=not.eq.2` or :code:`?not.and=(a.gte.0,a.lte.100)` .
 
 For more complicated filters you will have to create a new view in the database, or use a stored procedure. For instance, here's a view to show "today's stories" including possibly older pinned stories:
@@ -444,10 +438,6 @@ this:
 
   GET /films?select=title,director:directors(id,last_name) HTTP/1.1
 
-.. note::
-
-  As of PostgREST v0.4.1.0, parens :code:`()` are used rather than brackets :code:`{}` for the list of embedded columns. Brackets are still supported, but are deprecated and will be removed in v0.5.0.0.
-
 PostgREST can also detect relations going through join tables. Thus you can request the Actors for Films (which in this case finds the information through Roles). You can also reverse the direction of inclusion, asking for all Directors with each including the list of their Films:
 
 .. code-block:: http

From 6e7a2ca26ceef686a0897b0f7ec0315833846723 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Fri, 25 May 2018 12:02:23 -0500
Subject: [PATCH 153/652] Fix #135, clarify usage of GET/POST RPC

---
 api.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/api.rst b/api.rst
index 752b7c7de..979874e56 100644
--- a/api.rst
+++ b/api.rst
@@ -529,7 +529,7 @@ Because ``add_them`` is declared IMMUTABLE, we can alternately call the function
 
   GET /rpc/add_them?a=1&b=2 HTTP/1.1
 
-For POST and GET the keys of the object match the parameter names. Note that PostgreSQL converts parameter names to lowercase unless you quote them like :sql:`CREATE FUNCTION foo("mixedCase" text) ...`. You can also call a function that takes a single parameter of type json by sending the header :code:`Prefer: params=single-object` with your request. That way the JSON request body will be used as the single argument.
+The function parameter names match the JSON object keys in the POST case, for the GET case they match the query parameters ``?a=1&b=2``. Note that PostgreSQL converts parameter names to lowercase unless you quote them like :sql:`CREATE FUNCTION foo("mixedCase" text) ...`. You can also call a function that takes a single parameter of type json by sending the header :code:`Prefer: params=single-object` with your request. That way the JSON request body will be used as the single argument.
 
 .. note::
 

From 7255f026108c242e5c8ebe0cbda3d8bbc6295462 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Fri, 25 May 2018 12:18:32 -0500
Subject: [PATCH 154/652] Fix #126, update note about arrays

---
 api.rst | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/api.rst b/api.rst
index 979874e56..270ccfd0f 100644
--- a/api.rst
+++ b/api.rst
@@ -533,7 +533,7 @@ The function parameter names match the JSON object keys in the POST case, for th
 
 .. note::
 
-  We recommend using function arguments of type json to accept arrays from the client. To pass a PostgreSQL native array you'll need to quote it as a string:
+  For versions prior to PostgreSQL 10, to pass a PostgreSQL native array you'll need to quote it as a string:
 
   .. code:: http
 
@@ -541,12 +541,16 @@ The function parameter names match the JSON object keys in the POST case, for th
 
     { "arg": "{1,2,3}" }
 
+  In these versions we recommend using function arguments of type json to accept arrays from the client:
+
   .. code:: http
 
     POST /rpc/json_array_func HTTP/1.1
 
     { "arg": [1,2,3] }
 
+  Starting from PostgreSQL 10, a json array from the client gets mapped normally to a PostgreSQL native array.
+
 PostgreSQL has four procedural languages that are part of the core distribution: PL/pgSQL, PL/Tcl, PL/Perl, and PL/Python. There are many other procedural languages distributed as additional extensions. Also, plain SQL can be used to write functions (as shown in the example above).
 
 By default, a function is executed with the privileges of the user who calls it. This means that the user has to have all permissions to do the operations the procedure performs. Another option is to define the function with with the :code:`SECURITY DEFINER` option. Then only one permission check will take place, the permission to call the function, and the operations in the function will have the authority of the user who owns the function itself. See `PostgreSQL documentation <https://www.postgresql.org/docs/current/static/sql-createfunction.html>`_ for more details.

From 121f192b9321c37e6865358a7e343fafa53c7449 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Fri, 25 May 2018 13:27:33 -0500
Subject: [PATCH 155/652] Fix #127, RPC cache dependency

---
 api.rst | 22 ++++++++++++++++++++++
 1 file changed, 22 insertions(+)

diff --git a/api.rst b/api.rst
index 270ccfd0f..0130d4c48 100644
--- a/api.rst
+++ b/api.rst
@@ -551,6 +551,28 @@ The function parameter names match the JSON object keys in the POST case, for th
 
   Starting from PostgreSQL 10, a json array from the client gets mapped normally to a PostgreSQL native array.
 
+PostgREST will detect if the function is scalar or table-valued and will shape the response format accordingly:
+
+.. code:: http
+
+  GET /rpc/add_them?a=1&b=2 HTTP/1.1
+
+  3
+
+.. code:: http
+
+  GET /rpc/best_films_2017 HTTP/1.1
+
+  [
+    { "title": "Okja", "rating": 7.4},
+    { "title": "Call me by your name", "rating": 8},
+    { "title": "Blade Runner 2049", "rating": 8.1}
+  ]
+
+.. note::
+
+  Whenever the function definition changes you must refresh PostgREST's schema for this to work properly. See the section :ref:`schema_reloading`.
+
 PostgreSQL has four procedural languages that are part of the core distribution: PL/pgSQL, PL/Tcl, PL/Perl, and PL/Python. There are many other procedural languages distributed as additional extensions. Also, plain SQL can be used to write functions (as shown in the example above).
 
 By default, a function is executed with the privileges of the user who calls it. This means that the user has to have all permissions to do the operations the procedure performs. Another option is to define the function with with the :code:`SECURITY DEFINER` option. Then only one permission check will take place, the permission to call the function, and the operations in the function will have the authority of the user who owns the function itself. See `PostgreSQL documentation <https://www.postgresql.org/docs/current/static/sql-createfunction.html>`_ for more details.

From ed028234ccff257d1e2b5ffd73a82beaa13eb3dc Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Fri, 25 May 2018 13:39:01 -0500
Subject: [PATCH 156/652] Add example of filtering function response

---
 api.rst | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/api.rst b/api.rst
index 0130d4c48..0bf4153e5 100644
--- a/api.rst
+++ b/api.rst
@@ -573,6 +573,12 @@ PostgREST will detect if the function is scalar or table-valued and will shape t
 
   Whenever the function definition changes you must refresh PostgREST's schema for this to work properly. See the section :ref:`schema_reloading`.
 
+A function response can be shaped using the same filters as the ones used for tables and views:
+
+.. code:: http
+
+  GET /rpc/top_rated_films?select=title,director:directors(*)&year=eq.1990&order=title.desc HTTP/1.1
+
 PostgreSQL has four procedural languages that are part of the core distribution: PL/pgSQL, PL/Tcl, PL/Perl, and PL/Python. There are many other procedural languages distributed as additional extensions. Also, plain SQL can be used to write functions (as shown in the example above).
 
 By default, a function is executed with the privileges of the user who calls it. This means that the user has to have all permissions to do the operations the procedure performs. Another option is to define the function with with the :code:`SECURITY DEFINER` option. Then only one permission check will take place, the permission to call the function, and the operations in the function will have the authority of the user who owns the function itself. See `PostgreSQL documentation <https://www.postgresql.org/docs/current/static/sql-createfunction.html>`_ for more details.

From 036cc1c5d74ba6a6732b2105cc1ef30b7126c089 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Fri, 25 May 2018 14:10:54 -0500
Subject: [PATCH 157/652] Fix #107, Alias column with `:`

---
 api.rst | 19 +++++++++++++++++--
 1 file changed, 17 insertions(+), 2 deletions(-)

diff --git a/api.rst b/api.rst
index 0bf4153e5..9fff46ea5 100644
--- a/api.rst
+++ b/api.rst
@@ -44,7 +44,7 @@ Complex logic can also be applied:
 .. code-block:: http
 
   GET /people?and=(grade.gte.90,student.is.true,or(age.gte.14,age.is.null)) HTTP/1.1
- 
+
 These operators are available:
 
 ============  ===============================================  =====================
@@ -131,10 +131,25 @@ When certain columns are wide (such as those holding binary data), it is more ef
 
 .. code-block:: http
 
-  GET /people?select=fname,age HTTP/1.1
+  GET /people?select=first_name,age HTTP/1.1
+
+  [
+    {"first_name": "John", "age": 30},
+    {"first_name": "Jane", "age": 20}
+  ]
 
 The default is :sql:`*`, meaning all columns. This value will become more important below in :ref:`resource_embedding`.
 
+You can rename the columns by prefixing them with an alias followed by the colon ``:`` operator.
+
+.. code-block:: http
+
+  GET /people?select=fullName:full_name,birthDate:birth_date HTTP/1.1
+  [
+    {"fullName": "John Doe", "birthDate": "04/25/1988"},
+    {"fullName": "Jane Doe", "birthDate": "01/12/1998"}
+  ]
+
 .. _computed_cols:
 
 Computed Columns

From 338e8a1ae39fe8197b9329473b6114c898c8c58f Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Fri, 25 May 2018 14:25:01 -0500
Subject: [PATCH 158/652] Add casting example

---
 api.rst | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/api.rst b/api.rst
index 9fff46ea5..9afb86a87 100644
--- a/api.rst
+++ b/api.rst
@@ -150,6 +150,16 @@ You can rename the columns by prefixing them with an alias followed by the colon
     {"fullName": "Jane Doe", "birthDate": "01/12/1998"}
   ]
 
+Casting the columns is possible by suffixing them with the double colon ``::`` plus the desired type.
+
+.. code-block:: http
+
+  GET /people?select=full_name,salary::text HTTP/1.1
+  [
+    {"fullName": "John Doe", "salary": "90000.00"},
+    {"fullName": "Jane Doe", "salary": "120000.00"}
+  ]
+
 .. _computed_cols:
 
 Computed Columns

From 625a0b2393e22efccbc049e300092699f03b955a Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Fri, 25 May 2018 17:31:28 -0500
Subject: [PATCH 159/652] Fix #136, sslmode on db-uri

---
 install.rst | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/install.rst b/install.rst
index 1e3a58ebd..5355d3b8c 100644
--- a/install.rst
+++ b/install.rst
@@ -88,7 +88,9 @@ role-claim-key    String  .role
 ================  ======  =======  ========
 
 db-uri
-  The standard connection PostgreSQL `URI format <https://www.postgresql.org/docs/current/static/libpq-connect.html#AEN45347>`_. Symbols and unusual characters in the password or other fields should be percent encoded to avoid a parse error. On older systems like Centos 6, with older versions of libpq, a different db-uri syntax has to be used. In this case the URI is a string of space separated key-value pairs (key=value), so the example above would be :code:`"host=host user=user port=5432 dbname=dbname password=pass"`. Also allows connections over Unix sockets for higher performance.
+  The standard connection PostgreSQL `URI format <https://www.postgresql.org/docs/current/static/libpq-connect.html#AEN45347>`_. Symbols and unusual characters in the password or other fields should be percent encoded to avoid a parse error. If enforcing an SSL connection to the database is required you can use `sslmode <https://www.postgresql.org/docs/9.1/static/libpq-ssl.html#LIBPQ-SSL-SSLMODE-STATEMENTS>`_ in the URI, for example ``postgres://user:pass@host:5432/dbname?sslmode=require``.
+
+  On older systems like Centos 6, with older versions of libpq, a different db-uri syntax has to be used. In this case the URI is a string of space separated key-value pairs (key=value), so the example above would be :code:`"host=host user=user port=5432 dbname=dbname password=pass"`.
 db-schema
   The database schema to expose to REST clients. Tables, views and stored procedures in this schema will get API endpoints.
 db-anon-role

From b11f9ef38666e9d257f75ac92b28883a962d219a Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Fri, 25 May 2018 17:54:45 -0500
Subject: [PATCH 160/652] Fix #137, unix socket connection

---
 api.rst     | 2 ++
 install.rst | 2 ++
 2 files changed, 4 insertions(+)

diff --git a/api.rst b/api.rst
index 9afb86a87..3422e194d 100644
--- a/api.rst
+++ b/api.rst
@@ -145,6 +145,7 @@ You can rename the columns by prefixing them with an alias followed by the colon
 .. code-block:: http
 
   GET /people?select=fullName:full_name,birthDate:birth_date HTTP/1.1
+
   [
     {"fullName": "John Doe", "birthDate": "04/25/1988"},
     {"fullName": "Jane Doe", "birthDate": "01/12/1998"}
@@ -155,6 +156,7 @@ Casting the columns is possible by suffixing them with the double colon ``::`` p
 .. code-block:: http
 
   GET /people?select=full_name,salary::text HTTP/1.1
+
   [
     {"fullName": "John Doe", "salary": "90000.00"},
     {"fullName": "Jane Doe", "salary": "120000.00"}
diff --git a/install.rst b/install.rst
index 5355d3b8c..d50e7286a 100644
--- a/install.rst
+++ b/install.rst
@@ -90,6 +90,8 @@ role-claim-key    String  .role
 db-uri
   The standard connection PostgreSQL `URI format <https://www.postgresql.org/docs/current/static/libpq-connect.html#AEN45347>`_. Symbols and unusual characters in the password or other fields should be percent encoded to avoid a parse error. If enforcing an SSL connection to the database is required you can use `sslmode <https://www.postgresql.org/docs/9.1/static/libpq-ssl.html#LIBPQ-SSL-SSLMODE-STATEMENTS>`_ in the URI, for example ``postgres://user:pass@host:5432/dbname?sslmode=require``.
 
+  When running PostgREST on the same machine as PostgreSQL, it is also possible to connect to the database using a `Unix socket <https://en.wikipedia.org/wiki/Unix_domain_socket>`_ and the `Peer Authentication method <http://www.postgresql.org/docs/current/static/auth-methods.html#AUTH-PEER>`_ as an alternative to TCP/IP communication and authentication with a password, this also grants higher performance.  According to the documentation on the `libpq connection string <https://www.postgresql.org/docs/10/static/libpq-connect.html#LIBPQ-CONNSTRING>`_ the empty host resolves to the Unix socket and the password can be omitted in this case, so the ``db-uri`` would be reduced to ``postgres://user@/dbname``.
+
   On older systems like Centos 6, with older versions of libpq, a different db-uri syntax has to be used. In this case the URI is a string of space separated key-value pairs (key=value), so the example above would be :code:`"host=host user=user port=5432 dbname=dbname password=pass"`.
 db-schema
   The database schema to expose to REST clients. Tables, views and stored procedures in this schema will get API endpoints.

From c71bbba979082240c7ab9cfacb52e43173d3681d Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Mon, 28 May 2018 17:25:21 -0500
Subject: [PATCH 161/652] Some corrections and better wording

---
 api.rst     | 24 ++++++++++++------------
 install.rst |  6 +++---
 2 files changed, 15 insertions(+), 15 deletions(-)

diff --git a/api.rst b/api.rst
index 3422e194d..827eddd73 100644
--- a/api.rst
+++ b/api.rst
@@ -158,8 +158,8 @@ Casting the columns is possible by suffixing them with the double colon ``::`` p
   GET /people?select=full_name,salary::text HTTP/1.1
 
   [
-    {"fullName": "John Doe", "salary": "90000.00"},
-    {"fullName": "Jane Doe", "salary": "120000.00"}
+    {"full_name": "John Doe", "salary": "90000.00"},
+    {"full_name": "Jane Doe", "salary": "120000.00"}
   ]
 
 .. _computed_cols:
@@ -475,10 +475,10 @@ PostgREST can also detect relations going through join tables. Thus you can requ
 
   Whenever foreign key relations change in the database schema you must refresh PostgREST's schema cache to allow resource embedding to work properly. See the section :ref:`schema_reloading`.
 
-Operations on Embedded Resources
---------------------------------
+Embedded Operations
+-------------------
 
-Embedded resources rows can be shaped similarly to their top-level counterparts. To do so, prefix the query parameters with the name of the embedded resource. For instance, to order the actors in each film:
+Embedded resources can be shaped similarly to their top-level counterparts. To do so, prefix the query parameters with the name of the embedded resource. For instance, to order the actors in each film:
 
 .. code-block:: http
 
@@ -492,19 +492,19 @@ This sorts the list of actors in each film but does *not* change the order of th
 
 Once again, this restricts the roles included to certain characters but does not filter the films in any way. Films without any of those characters would be included along with empty character lists.
 
-An ``or`` filter  can also be used for a similar operation:
+An ``or`` filter  can be used for a similar operation:
 
 .. code-block:: http
 
   GET /films?select=*,roles(*)&roles.or=(character.eq.Gummo,character.eq.Zeppo) HTTP/1.1
 
-Limit and offset operations are also possible:
+Limit and offset operations are possible:
 
 .. code-block:: http
 
   GET /films?select=*,actors(*)&actors.limit=10&actors.offset=2 HTTP/1.1
 
-You can also alias the embedded resources and apply filters on the aliases:
+Embedded resources can be aliased and filters can be applied on these aliases:
 
 .. code-block:: http
 
@@ -560,7 +560,7 @@ The function parameter names match the JSON object keys in the POST case, for th
 
 .. note::
 
-  For versions prior to PostgreSQL 10, to pass a PostgreSQL native array you'll need to quote it as a string:
+  For versions prior to PostgreSQL 10, to pass a PostgreSQL native array you need to quote it as a string:
 
   .. code:: http
 
@@ -772,11 +772,11 @@ You can make an UPSERT with :code:`POST` and the :code:`Prefer: resolution=merge
 
   [
     { "id": 1, "name": "Old employee 1", "salary": 30000 },
-    { "id": 2, "name": "Old employee 2" , "salary": 42000 },
-    { "id": 3, "name": "New employee 3" , "salary": 50000 }
+    { "id": 2, "name": "Old employee 2", "salary": 42000 },
+    { "id": 3, "name": "New employee 3", "salary": 50000 }
   ]
 
-UPSERT merging operates based on the primary key columns, you must specify all of them. You can also choose to ignore the duplicates with :code:`Prefer: resolution=ignore-duplicates`.
+UPSERT operates based on the primary key columns, you must specify all of them. You can also choose to ignore the duplicates with :code:`Prefer: resolution=ignore-duplicates`.
 
 A single row UPSERT can be done by using :code:`PUT` and filtering the primary key columns with :code:`eq`:
 
diff --git a/install.rst b/install.rst
index d50e7286a..36ad6fb9f 100644
--- a/install.rst
+++ b/install.rst
@@ -90,7 +90,7 @@ role-claim-key    String  .role
 db-uri
   The standard connection PostgreSQL `URI format <https://www.postgresql.org/docs/current/static/libpq-connect.html#AEN45347>`_. Symbols and unusual characters in the password or other fields should be percent encoded to avoid a parse error. If enforcing an SSL connection to the database is required you can use `sslmode <https://www.postgresql.org/docs/9.1/static/libpq-ssl.html#LIBPQ-SSL-SSLMODE-STATEMENTS>`_ in the URI, for example ``postgres://user:pass@host:5432/dbname?sslmode=require``.
 
-  When running PostgREST on the same machine as PostgreSQL, it is also possible to connect to the database using a `Unix socket <https://en.wikipedia.org/wiki/Unix_domain_socket>`_ and the `Peer Authentication method <http://www.postgresql.org/docs/current/static/auth-methods.html#AUTH-PEER>`_ as an alternative to TCP/IP communication and authentication with a password, this also grants higher performance.  According to the documentation on the `libpq connection string <https://www.postgresql.org/docs/10/static/libpq-connect.html#LIBPQ-CONNSTRING>`_ the empty host resolves to the Unix socket and the password can be omitted in this case, so the ``db-uri`` would be reduced to ``postgres://user@/dbname``.
+  When running PostgREST on the same machine as PostgreSQL, it is also possible to connect to the database using a `Unix socket <https://en.wikipedia.org/wiki/Unix_domain_socket>`_ and the `Peer Authentication method <http://www.postgresql.org/docs/current/static/auth-methods.html#AUTH-PEER>`_ as an alternative to TCP/IP communication and authentication with a password, this also grants higher performance.  To do this you can omit the host and the password, e.g. ``postgres://user@/dbname``, see the `libpq connection string <https://www.postgresql.org/docs/10/static/libpq-connect.html#LIBPQ-CONNSTRING>`_ documentation for more details.
 
   On older systems like Centos 6, with older versions of libpq, a different db-uri syntax has to be used. In this case the URI is a string of space separated key-value pairs (key=value), so the example above would be :code:`"host=host user=user port=5432 dbname=dbname password=pass"`.
 db-schema
@@ -142,7 +142,7 @@ pre-request
 app.settings.*
   Arbitrary settings that will become database session settings. This can be used to pass in secret keys directly as strings, or via OS environment variables. For instance: :code:`app.settings.jwt_secret = "$(MYAPP_JWT_SECRET)"` will take :code:`MYAPP_JWT_SECRET` from the environment and make it available to postgresql functions as :code:`current_setting('app.settings.jwt_secret')`.
 role-claim-key
-  A JSPath DSL that specifies the location of the :code:`role` key in the JWT claims. This can be used to consume a JWT provided by a third party service like Auth0, Okta or Keycloak. Some examples:
+  A JSPath DSL that specifies the location of the :code:`role` key in the JWT claims. This can be used to consume a JWT provided by a third party service like Auth0, Okta or Keycloak. Usage examples:
 
 .. code:: bash
 
@@ -151,7 +151,7 @@ role-claim-key
   role-claim-key = ".postgrest.roles[1]"
 
   # {"https://www.example.com/role": { "key": "author }}
-  # non-alphanumerical characters can go inside quotes(escaped in config value)
+  # non-alphanumerical characters can go inside quotes(escaped in the config value)
   role-claim-key = ".\"https://www.example.com/role\".key"
 
 Running the Server

From d03770d352a748941cacf3fe84efe7b4c10385d7 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Mon, 28 May 2018 17:37:11 -0500
Subject: [PATCH 162/652] Bump version to v5.0.0

---
 conf.py | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/conf.py b/conf.py
index 2a9c6b857..05837e17d 100644
--- a/conf.py
+++ b/conf.py
@@ -54,9 +54,9 @@ author = u'Joe Nelson'
 # built documents.
 #
 # The short X.Y version.
-version = u'4.4'
+version = u'5.0'
 # The full version, including alpha/beta/rc tags.
-release = u'4.4.0'
+release = u'5.0.0'
 
 # The language for content autogenerated by Sphinx. Refer to documentation
 # for a list of supported languages.

From f84b79ce4132389814f285ff6f1939b29fe7d12b Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Thu, 31 May 2018 09:03:24 -0500
Subject: [PATCH 163/652] Add stored function explicit qualification

---
 api.rst | 18 ++++++++++++++++--
 1 file changed, 16 insertions(+), 2 deletions(-)

diff --git a/api.rst b/api.rst
index 827eddd73..d10908140 100644
--- a/api.rst
+++ b/api.rst
@@ -608,12 +608,26 @@ A function response can be shaped using the same filters as the ones used for ta
 
 PostgreSQL has four procedural languages that are part of the core distribution: PL/pgSQL, PL/Tcl, PL/Perl, and PL/Python. There are many other procedural languages distributed as additional extensions. Also, plain SQL can be used to write functions (as shown in the example above).
 
-By default, a function is executed with the privileges of the user who calls it. This means that the user has to have all permissions to do the operations the procedure performs. Another option is to define the function with with the :code:`SECURITY DEFINER` option. Then only one permission check will take place, the permission to call the function, and the operations in the function will have the authority of the user who owns the function itself. See `PostgreSQL documentation <https://www.postgresql.org/docs/current/static/sql-createfunction.html>`_ for more details.
+By default, a function is executed with the privileges of the user who calls it. This means that the user has to have all permissions to do the operations the procedure performs. Another option is to define the function with the :code:`SECURITY DEFINER` option. Then only one permission check will take place, the permission to call the function, and the operations in the function will have the authority of the user who owns the function itself. See `PostgreSQL documentation <https://www.postgresql.org/docs/current/static/sql-createfunction.html>`_ for more details.
 
 .. note::
 
   Why the `/rpc` prefix? One reason is to avoid name collisions between views and procedures. It also helps emphasize to API consumers that these functions are not normal restful things. The functions can have arbitrary and surprising behavior, not the standard "post creates a resource" thing that users expect from the other routes.
 
+Explicit Qualification
+----------------------
+
+As of ``v5.0``, PostgREST executes a ``SET SCHEMA <db-schema>`` on each request, this overrides the `search_path <https://www.postgresql.org/docs/10/static/ddl-schemas.html#DDL-SCHEMAS-PATH>`_ and it means that for functions to work properly, explicit qualification is needed for any database object that is not in the ``<db-schema>``. However, this can be cumbersome when working with extensions such as PostGIS, to avoid it, you can add a search path to the function:
+
+.. code-block:: plpgsql
+
+  CREATE FUNCTION api.line() RETURNS json AS $$
+    SELECT ST_AsGeoJSON('LINESTRING(1 2 3, 4 5 6)')::json;
+  $$ LANGUAGE sql SET search_path = public;
+
+  -- existing functions can be altered to add a search_path
+  ALTER FUNCTION api.make_point() SET search_path = public;
+
 Accessing Request Headers/Cookies
 ---------------------------------
 
@@ -825,7 +839,7 @@ These unsavory comments will appear in the generated JSON as the fields, ``info.
 
 Also if you wish to generate a ``summary`` field you can do it by having a multiple line comment, the ``summary`` will be the first line and the ``description`` the lines that follow it:
 
-.. code-block:: sql
+.. code-block:: plpgsql
 
   COMMENT ON TABLE entities IS
     $$Entities summary

From 92cc815e9de626798348303075162b41cc791610 Mon Sep 17 00:00:00 2001
From: Francois-Guillaume Ribreau <github@fgribreau.com>
Date: Sat, 9 Jun 2018 10:49:29 +0200
Subject: [PATCH 164/652] Add MotionDynamic (PostgREST + SubZero)

---
 intro.rst | 1 +
 1 file changed, 1 insertion(+)

diff --git a/intro.rst b/intro.rst
index ac0da6e35..20ac02739 100644
--- a/intro.rst
+++ b/intro.rst
@@ -94,6 +94,7 @@ In Production
 * `Catarse <https://www.catarse.me/>`_
 * `Redsmin <https://www.redsmin.com/>`_
 * `Image-charts <https://image-charts.com/>`_
+* `MotionDynamic - Fast highly dynamic video generation at scale <https://api.motiondynamic.tech/>`_
 * `Drip Depot <https://www.dripdepot.com/>`_
 * `OpenBooking <http://openbooking.ch>`_
 * `Convene <https://info.convene.thomsonreuters.com/en.html>`_ by Thomson-Reuters

From 0e16f34eef97c62fad64fcd22c7d1ff9dbf9e585 Mon Sep 17 00:00:00 2001
From: ASVBPREAUBV <ASVBPREAUBV@users.noreply.github.com>
Date: Thu, 14 Jun 2018 16:09:13 +0200
Subject: [PATCH 165/652] Make swagger-gui an optional step in installation

---
 install.rst | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

diff --git a/install.rst b/install.rst
index 36ad6fb9f..58341baee 100644
--- a/install.rst
+++ b/install.rst
@@ -251,6 +251,21 @@ To avoid having to install the database at all, you can run both it and the serv
 
 Go into the directory where you saved this file and run :code:`docker-compose up`. You will see the logs of both the database and PostgREST, and be able to access the latter on port 3000.
 
+If you want to have a visual overview of your API in your browser you can add swagger-ui to your :code:`docker-compose.yml`:
+
+.. code-block:: yaml
+
+  swagger:
+    image: swaggerapi/swagger-ui
+    ports:
+      - "8080:8080"
+    expose:
+      - "8080"
+    environment:
+      API_URL: http://localhost:3000/
+
+With this you can see the swagger-ui in your browser on port 8080.
+
 .. _build_source:
 
 Build from Source

From c7c6ee40e4fcada5a1b7376b83a9d3baff9583bb Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Thu, 14 Jun 2018 09:29:12 -0500
Subject: [PATCH 166/652] Add entries to the dict

---
 postgrest.dict | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/postgrest.dict b/postgrest.dict
index bab9af1ef..83af75b11 100644
--- a/postgrest.dict
+++ b/postgrest.dict
@@ -129,3 +129,6 @@ verifier
 versioning
 webuser
 wildcard
+Upsert
+UPSERT
+ui

From be039152f2b6a73fe4ffa1e71fafb45d0c111af6 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Fri, 15 Jun 2018 11:03:59 -0500
Subject: [PATCH 167/652] Improve explicit qualification section

---
 api.rst | 25 ++++++++++++++++++++-----
 1 file changed, 20 insertions(+), 5 deletions(-)

diff --git a/api.rst b/api.rst
index d10908140..ab0c16ffc 100644
--- a/api.rst
+++ b/api.rst
@@ -617,16 +617,31 @@ By default, a function is executed with the privileges of the user who calls it.
 Explicit Qualification
 ----------------------
 
-As of ``v5.0``, PostgREST executes a ``SET SCHEMA <db-schema>`` on each request, this overrides the `search_path <https://www.postgresql.org/docs/10/static/ddl-schemas.html#DDL-SCHEMAS-PATH>`_ and it means that for functions to work properly, explicit qualification is needed for any database object that is not in the ``<db-schema>``. However, this can be cumbersome when working with extensions such as PostGIS, to avoid it, you can add a search path to the function:
+As of ``v5.0``, PostgREST executes a ``SET SCHEMA <your-exposed-schema>`` on each request, since this overrides the `search_path <https://www.postgresql.org/docs/10/static/ddl-schemas.html#DDL-SCHEMAS-PATH>`_, function bodies need qualified schema names for any database object that is not in your exposed schema.
 
 .. code-block:: plpgsql
 
-  CREATE FUNCTION api.line() RETURNS json AS $$
-    SELECT ST_AsGeoJSON('LINESTRING(1 2 3, 4 5 6)')::json;
-  $$ LANGUAGE sql SET search_path = public;
+  -- Assuming that:
+  -- exposed schema is "api"
+  -- ST_AsGeoJSON is in the "public" schema
+  -- streets is in the "api" schema
+  CREATE FUNCTION api.sample() RETURNS json AS $$
+    SELECT public.ST_AsGeoJSON(geom)::json FROM streets LIMIT 1;
+    -- Notice streets doesn't need the schema prefix while ST_AsGeoJSON does
+  $$ LANGUAGE sql;
+
+To avoid having to qualify many database objects, you can add a ``search_path`` to the function:
+
+.. code-block:: plpgsql
+
+  CREATE FUNCTION api.sample_distance() RETURNS float8 AS $$
+    SELECT ST_MakePoint(1, 1) <-> ST_MakePoint(10, 10);
+    -- If the search_path is not specified, this would have to be:
+    -- SELECT public.ST_MakePoint(1, 1) operator(public.<->) public.ST_MakePoint(10, 10);
+  $$ LANGUAGE sql SET search_path = public, api;
 
   -- existing functions can be altered to add a search_path
-  ALTER FUNCTION api.make_point() SET search_path = public;
+  ALTER FUNCTION api.make_point(float8, float8) SET search_path = public, api;
 
 Accessing Request Headers/Cookies
 ---------------------------------

From cfaf588bba9a4d3ee6909042a5d5d669567e2cd9 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Tue, 19 Jun 2018 12:33:49 -0500
Subject: [PATCH 168/652] Add json operators to vertical filtering section

---
 api.rst | 20 ++++++++++++++++++++
 1 file changed, 20 insertions(+)

diff --git a/api.rst b/api.rst
index ab0c16ffc..11ac6ae51 100644
--- a/api.rst
+++ b/api.rst
@@ -162,6 +162,26 @@ Casting the columns is possible by suffixing them with the double colon ``::`` p
     {"full_name": "Jane Doe", "salary": "120000.00"}
   ]
 
+You can specify a json path for a ``json`` or ``jsonb`` column using the arrow operators(``->`` or ``->>``) as per the `PostgreSQL docs <https://www.postgresql.org/docs/9.5/static/functions-json.html>`_.
+
+.. code-block:: http
+
+  GET /people?select=id,json_data->>blood_type,json_data->phones HTTP/1.1
+
+  [
+    { "id": 1, "blood_type": "A+", "phones": [{"country_code": "61", "number": "917-929-5745"}] },
+    { "id": 2, "blood_type": "O+", "phones": [{"country_code": "43", "number": "512-446-4988"}, {"country_code": "43", "number": "213-891-5979"}] }
+  ]
+
+.. code-block:: http
+
+  GET /people?select=id,json_data->phones->0->>number HTTP/1.1
+
+  [
+    { "id": 1, "number": "917-929-5745"},
+    { "id": 2, "number": "512-446-4988"}
+  ]
+
 .. _computed_cols:
 
 Computed Columns

From a7fd694f19a853021c08303debafae18cb1f3bff Mon Sep 17 00:00:00 2001
From: PJLindsay <PJLindsay@users.noreply.github.com>
Date: Fri, 13 Jul 2018 12:06:04 -0600
Subject: [PATCH 169/652] Update tut0.rst (#159)

* Update tut0.rst

Add hint about port mapping for users with pre-existing PostgreSQL DB
---
 tutorials/tut0.rst | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/tutorials/tut0.rst b/tutorials/tut0.rst
index dc3d6b101..8ff68e6e5 100644
--- a/tutorials/tut0.rst
+++ b/tutorials/tut0.rst
@@ -35,6 +35,16 @@ If Docker is not installed, you can get it `here <https://www.docker.com/communi
 
 This will run the Docker instance as a daemon and expose port 5432 to the host system so that it looks like an ordinary PostgreSQL server to the rest of the system.
 
+.. note::
+
+  If you have a pre-existing PostgreSQL database running on port 5432, you'll get an error like "bind: address already in use". Here's how to fix it:
+
+  .. code-block:: bash
+
+    sudo docker run --name tutorial -p 5433:5432 \
+                    -e POSTGRES_PASSWORD=mysecretpassword \
+                    -d postgres
+
 Step 3. Install PostgREST
 -------------------------
 

From 7845bdce8cc1a4181b36640077d256d3e4db3816 Mon Sep 17 00:00:00 2001
From: Steve Phillips <steve@tryingtobeawesome.com>
Date: Sun, 5 Aug 2018 08:24:05 -0700
Subject: [PATCH 170/652] auth.rst typo: paramter -> parameter

---
 auth.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/auth.rst b/auth.rst
index 7957cb9b8..203d046c3 100644
--- a/auth.rst
+++ b/auth.rst
@@ -116,7 +116,7 @@ There is no performance penalty for having many database roles, although roles a
 Custom Validation
 -----------------
 
-PostgREST honors the :code:`exp` claim for token expiration, rejecting expired tokens. However it does not enforce any extra constraints. An example of an extra constraint would be to immediately revoke access for a certain user. The configuration file paramter :code:`pre-request` specifies a stored procedure to call immediately after the authenticator switches into a new role and before the main query itself runs.
+PostgREST honors the :code:`exp` claim for token expiration, rejecting expired tokens. However it does not enforce any extra constraints. An example of an extra constraint would be to immediately revoke access for a certain user. The configuration file parameter :code:`pre-request` specifies a stored procedure to call immediately after the authenticator switches into a new role and before the main query itself runs.
 
 Here's an example. In the config file specify a stored procedure:
 

From 02f7cba3d2586f0e309af0b213634496825d6d1b Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Thu, 6 Sep 2018 13:24:42 -0500
Subject: [PATCH 171/652] Fix install broken link and add rst cheatsheet

---
 README.md | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/README.md b/README.md
index bb9afe28e..4a2bb4f58 100644
--- a/README.md
+++ b/README.md
@@ -1,10 +1,12 @@
-#### Sphinx source files for PostgREST documentation
+# PostgREST documentation
+
+PostgREST docs use the reStructuredText format, check this [cheatsheet](https://github.com/ralsina/rst-cheatsheet/blob/master/rst-cheatsheet.rst) to get acquainted with it.
 
 To generate HTML version:
 
-1. Install Sphinx from the [sphinx website](http://sphinx-doc.org/latest/install.html)
+1. Install Sphinx from the [sphinx website](http://www.sphinx-doc.org/en/stable/install.html)
 2. Clone this repository
-4. Generate HTML
+3. Generate HTML
     ```bash
     cd postgrest-docs
     sphinx-build -b html -a -n . _build

From 512862918f510c751514e9c9c8fa1dbc18739237 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Mon, 10 Sep 2018 09:55:45 -0500
Subject: [PATCH 172/652] Change default theme to readthedocs

---
 conf.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/conf.py b/conf.py
index 05837e17d..f1f263a9e 100644
--- a/conf.py
+++ b/conf.py
@@ -108,7 +108,7 @@ todo_include_todos = False
 
 # The theme to use for HTML and HTML Help pages.  See the documentation for
 # a list of builtin themes.
-html_theme = 'default'
+html_theme = 'sphinx_rtd_theme'
 
 # Theme options are theme-specific and customize the look and feel of a theme
 # further.  For a list of options available for each theme, see the

From bba1d35ade3577d318761fce57875e5853eb0380 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Mon, 10 Sep 2018 10:46:38 -0500
Subject: [PATCH 173/652] Fix #178, Add livereload script

---
 README.md      | 1 -
 reload_docs.py | 6 ++++++
 2 files changed, 6 insertions(+), 1 deletion(-)
 create mode 100755 reload_docs.py

diff --git a/README.md b/README.md
index 4a2bb4f58..30be737cc 100644
--- a/README.md
+++ b/README.md
@@ -19,4 +19,3 @@ To generate HTML version:
 **Sphinx Installation Notes:**
 
 * If you're on OSX you might want to install the Python from homebrew - then a simple `pip install sphinx` does the trick.
-* For an easier time refreshing your local preview of docs as you change it, try [sphinx-autobuild](https://github.com/GaretJax/sphinx-autobuild).
diff --git a/reload_docs.py b/reload_docs.py
new file mode 100755
index 000000000..4ec06803f
--- /dev/null
+++ b/reload_docs.py
@@ -0,0 +1,6 @@
+#!/usr/bin/env python
+from livereload import Server, shell
+server = Server()
+server.watch('*.rst', shell('sphinx-build -b html -a -n . _build'))
+server.watch('tutorials/*.rst', shell('sphinx-build -b html -a -n . _build'))
+server.serve(root='_build/')

From 54436e2dc6cf742182629d6ab201e5d1a02c7c1d Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Mon, 10 Sep 2018 10:47:03 -0500
Subject: [PATCH 174/652] Add default.nix and udpate README

---
 README.md   |  8 ++++++++
 default.nix | 14 ++++++++++++++
 2 files changed, 22 insertions(+)
 create mode 100644 default.nix

diff --git a/README.md b/README.md
index 30be737cc..c8c5fb53d 100644
--- a/README.md
+++ b/README.md
@@ -14,6 +14,14 @@ To generate HTML version:
     # open _build/index.html in your browser
     ```
 
+If you use [nix](https://nixos.org/nix/), you can just run:
+
+```
+  nix-shell
+```
+
+This will build the docs and start a livereload server on `http://localhost:5500`.
+
 ---
 
 **Sphinx Installation Notes:**
diff --git a/default.nix b/default.nix
new file mode 100644
index 000000000..6d32f9609
--- /dev/null
+++ b/default.nix
@@ -0,0 +1,14 @@
+with import <nixpkgs> {};
+
+stdenv.mkDerivation {
+  name = "postgrest-docs";
+  buildInputs = [
+    python36Full
+    python36Packages.sphinx
+    python36Packages.sphinx_rtd_theme
+    python36Packages.livereload ];
+  shellHook = ''
+    sphinx-build -b html -a -n . _build
+    python reload_docs.py && exit
+  '';
+}

From c4e926af2d065a5744c87dd6f1b14f5b047bb755 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Mon, 10 Sep 2018 11:05:05 -0500
Subject: [PATCH 175/652] Update postgrest repo links

---
 install.rst        | 6 +++---
 tutorials/tut0.rst | 4 ++--
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/install.rst b/install.rst
index 58341baee..278d94a14 100644
--- a/install.rst
+++ b/install.rst
@@ -1,13 +1,13 @@
 Binary Release
 ==============
 
-[ `Download from release page <https://github.com/begriffs/postgrest/releases/latest>`_ ]
+[ `Download from release page <https://github.com/PostgREST/postgrest/releases/latest>`_ ]
 
 The release page has pre-compiled binaries for Mac OS X, Windows, and several Linux distributions. Extract the tarball and run the binary inside with the :code:`--help` flag to see usage instructions:
 
 .. code-block:: bash
 
-  # Untar the release (available at https://github.com/begriffs/postgrest/releases/latest)
+  # Untar the release (available at https://github.com/PostgREST/postgrest/releases/latest)
 
   $ tar Jxf postgrest-[version]-[platform].tar.xz
 
@@ -293,7 +293,7 @@ When a pre-built binary does not exist for your system you can build the project
 
   .. code-block:: bash
 
-    git clone https://github.com/begriffs/postgrest.git
+    git clone https://github.com/PostgREST/postgrest.git
     cd postgrest
 
     # adjust local-bin-path to taste
diff --git a/tutorials/tut0.rst b/tutorials/tut0.rst
index 8ff68e6e5..dea41538c 100644
--- a/tutorials/tut0.rst
+++ b/tutorials/tut0.rst
@@ -48,13 +48,13 @@ This will run the Docker instance as a daemon and expose port 5432 to the host s
 Step 3. Install PostgREST
 -------------------------
 
-PostgREST is distributed as a single binary, with versions compiled for major distributions of Linux/BSD/Windows. Visit the `latest release <https://github.com/begriffs/postgrest/releases/latest>`_ for a list of downloads. In the event that your platform is not among those already pre-built, see :ref:`build_source` for instructions how to build it yourself. Also let us know to add your platform in the next release.
+PostgREST is distributed as a single binary, with versions compiled for major distributions of Linux/BSD/Windows. Visit the `latest release <https://github.com/PostgREST/postgrest/releases/latest>`_ for a list of downloads. In the event that your platform is not among those already pre-built, see :ref:`build_source` for instructions how to build it yourself. Also let us know to add your platform in the next release.
 
 The pre-built binaries for download are :code:`.tar.xz` compressed files (except Windows which is a zip file). To extract the binary, go into the terminal and run
 
 .. code-block:: bash
 
-  # download from https://github.com/begriffs/postgrest/releases/latest
+  # download from https://github.com/PostgREST/postgrest/releases/latest
 
   tar xfJ postgrest-<version>-<platform>.tar.xz
 

From 24f796a329caf3a2be5dea81a89cf4d7fd0efd4b Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Mon, 10 Sep 2018 11:27:57 -0500
Subject: [PATCH 176/652] Remove app.settings mention of being session scoped

---
 install.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install.rst b/install.rst
index 278d94a14..c62d85d8b 100644
--- a/install.rst
+++ b/install.rst
@@ -140,7 +140,7 @@ max-rows
 pre-request
   A schema-qualified stored procedure name to call right after switching roles for a client request. This provides an opportunity to modify SQL variables or raise an exception to prevent the request from completing.
 app.settings.*
-  Arbitrary settings that will become database session settings. This can be used to pass in secret keys directly as strings, or via OS environment variables. For instance: :code:`app.settings.jwt_secret = "$(MYAPP_JWT_SECRET)"` will take :code:`MYAPP_JWT_SECRET` from the environment and make it available to postgresql functions as :code:`current_setting('app.settings.jwt_secret')`.
+  Arbitrary settings that can be used to pass in secret keys directly as strings, or via OS environment variables. For instance: :code:`app.settings.jwt_secret = "$(MYAPP_JWT_SECRET)"` will take :code:`MYAPP_JWT_SECRET` from the environment and make it available to postgresql functions as :code:`current_setting('app.settings.jwt_secret')`.
 role-claim-key
   A JSPath DSL that specifies the location of the :code:`role` key in the JWT claims. This can be used to consume a JWT provided by a third party service like Auth0, Okta or Keycloak. Usage examples:
 

From 48ab4e91be292c09ee18bbdbf16fe94ca040a9cc Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Mon, 10 Sep 2018 11:40:55 -0500
Subject: [PATCH 177/652] Add header for JSON select feature

---
 api.rst | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/api.rst b/api.rst
index 11ac6ae51..ea919b4be 100644
--- a/api.rst
+++ b/api.rst
@@ -162,7 +162,10 @@ Casting the columns is possible by suffixing them with the double colon ``::`` p
     {"full_name": "Jane Doe", "salary": "120000.00"}
   ]
 
-You can specify a json path for a ``json`` or ``jsonb`` column using the arrow operators(``->`` or ``->>``) as per the `PostgreSQL docs <https://www.postgresql.org/docs/9.5/static/functions-json.html>`_.
+JSON Columns
+~~~~~~~~~~~~
+
+You can specify a path for a ``json`` or ``jsonb`` column using the arrow operators(``->`` or ``->>``) as per the `PostgreSQL docs <https://www.postgresql.org/docs/9.5/static/functions-json.html>`_.
 
 .. code-block:: http
 

From 99d878b13edc58aa6ecfcfe87ec6d0bc9c25cb6f Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Mon, 10 Sep 2018 12:09:06 -0500
Subject: [PATCH 178/652] Fix #175, add important note for computed column

---
 api.rst | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/api.rst b/api.rst
index ea919b4be..0d438a933 100644
--- a/api.rst
+++ b/api.rst
@@ -4,7 +4,7 @@
 Tables and Views
 ================
 
-All views and tables in the active schema and accessible by the active database role for a request are available for querying. They are exposed in one-level deep routes. For instance the full contents of a table `people` is returned at
+All views and tables in the exposed schema and accessible by the active database role for a request are available for querying. They are exposed in one-level deep routes. For instance the full contents of a table `people` is returned at
 
 .. code-block:: http
 
@@ -219,6 +219,10 @@ As mentioned, computed columns do not appear in the output by default. However y
 
   GET /people?select=*,full_name HTTP/1.1
 
+.. important::
+
+  Computed columns must be created under the exposed schema to be used in this way.
+
 Ordering
 --------
 

From 38610e0349f6d2ff23b32da5ec9f958ceb7f62f6 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Mon, 10 Sep 2018 12:11:49 -0500
Subject: [PATCH 179/652] Change type of notes for reloading and
 deleting/updating

---
 api.rst | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/api.rst b/api.rst
index 0d438a933..7180ad8b7 100644
--- a/api.rst
+++ b/api.rst
@@ -498,7 +498,7 @@ PostgREST can also detect relations going through join tables. Thus you can requ
 
   GET /directors?select=films(title,year) HTTP/1.1
 
-.. note::
+.. important::
 
   Whenever foreign key relations change in the database schema you must refresh PostgREST's schema cache to allow resource embedding to work properly. See the section :ref:`schema_reloading`.
 
@@ -623,7 +623,7 @@ PostgREST will detect if the function is scalar or table-valued and will shape t
     { "title": "Blade Runner 2049", "rating": 8.1}
   ]
 
-.. note::
+.. important::
 
   Whenever the function definition changes you must refresh PostgREST's schema for this to work properly. See the section :ref:`schema_reloading`.
 
@@ -782,7 +782,7 @@ To update a row or rows in a table, use the PATCH verb. Use :ref:`h_filter` to s
 
 Updates also support :code:`Prefer: return=representation` plus :ref:`v_filter`.
 
-.. note::
+.. warning::
 
   Beware of accidentally updating every row in a table. To learn to prevent that see :ref:`block_fulltable`.
 
@@ -857,7 +857,7 @@ To delete rows in a table, use the DELETE verb plus :ref:`h_filter`. For instanc
 
   DELETE /user?active=is.false HTTP/1.1
 
-.. note::
+.. warning::
 
   Beware of accidentally deleting all rows in a table. To learn to prevent that see :ref:`block_fulltable`.
 
@@ -892,7 +892,7 @@ Also if you wish to generate a ``summary`` field you can do it by having a multi
 
 You can use a tool like `Swagger UI <http://swagger.io/swagger-ui/>`_ to create beautiful documentation from the description and to host an interactive web-based dashboard. The dashboard allows developers to make requests against a live PostgREST server, and provides guidance with request headers and example request bodies.
 
-.. note::
+.. important::
 
   The OpenAPI information can go out of date as the schema changes under a running server. To learn how to refresh the cache see :ref:`schema_reloading`.
 

From c9816f166133b1b650f1772bb40aa6ff94138ff1 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Mon, 10 Sep 2018 13:49:22 -0500
Subject: [PATCH 180/652] Hyperlink config settings

---
 install.rst | 67 +++++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 67 insertions(+)

diff --git a/install.rst b/install.rst
index c62d85d8b..b0df82b49 100644
--- a/install.rst
+++ b/install.rst
@@ -87,19 +87,43 @@ app.settings.*    String
 role-claim-key    String  .role
 ================  ======  =======  ========
 
+.. _db-uri:
+
 db-uri
+------
+
   The standard connection PostgreSQL `URI format <https://www.postgresql.org/docs/current/static/libpq-connect.html#AEN45347>`_. Symbols and unusual characters in the password or other fields should be percent encoded to avoid a parse error. If enforcing an SSL connection to the database is required you can use `sslmode <https://www.postgresql.org/docs/9.1/static/libpq-ssl.html#LIBPQ-SSL-SSLMODE-STATEMENTS>`_ in the URI, for example ``postgres://user:pass@host:5432/dbname?sslmode=require``.
 
   When running PostgREST on the same machine as PostgreSQL, it is also possible to connect to the database using a `Unix socket <https://en.wikipedia.org/wiki/Unix_domain_socket>`_ and the `Peer Authentication method <http://www.postgresql.org/docs/current/static/auth-methods.html#AUTH-PEER>`_ as an alternative to TCP/IP communication and authentication with a password, this also grants higher performance.  To do this you can omit the host and the password, e.g. ``postgres://user@/dbname``, see the `libpq connection string <https://www.postgresql.org/docs/10/static/libpq-connect.html#LIBPQ-CONNSTRING>`_ documentation for more details.
 
   On older systems like Centos 6, with older versions of libpq, a different db-uri syntax has to be used. In this case the URI is a string of space separated key-value pairs (key=value), so the example above would be :code:`"host=host user=user port=5432 dbname=dbname password=pass"`.
+
+.. _db-schema:
+
 db-schema
+---------
+
   The database schema to expose to REST clients. Tables, views and stored procedures in this schema will get API endpoints.
+
+.. _db-anon-role:
+
 db-anon-role
+------------
+
   The database role to use when executing commands on behalf of unauthenticated clients.
+
+.. _db-pool:
+
 db-pool
+-------
+
   Number of connections to keep open in PostgREST's database pool. Having enough here for the maximum expected simultaneous client connections can improve performance. Note it's pointless to set this higher than the :code:`max_connections` GUC in your database.
+
+.. _server-host:
+
 server-host
+-----------
+
   Where to bind the PostgREST web server. In addition to the usual address options, PostgREST interprets these reserved addresses with special meanings:
 
   * :code:`*` - any IPv4 or IPv6 hostname
@@ -108,9 +132,18 @@ server-host
   * :code:`*6` - any IPv4 or IPv6 hostname, IPv6 preferred
   * :code:`!6` - any IPv6 hostname
 
+.. _server-port:
+
 server-port
+-----------
+
   The port to bind the web server.
+
+.. _server-proxy-uri:
+
 server-proxy-uri
+----------------
+
   Overrides the base URL used within the OpenAPI self-documentation hosted at the API root path. Use a complete URI syntax :code:`scheme:[//[user:password@]host[:port]][/]path[?query][#fragment]`. Ex. :code:`https://postgrest.com`
 
 .. code:: json
@@ -129,19 +162,53 @@ server-proxy-uri
     ]
   }
 
+.. _jwt-secret:
+
 jwt-secret
+----------
+
   The secret or `JSON Web Key (JWK) <https://tools.ietf.org/html/rfc7517>`_ used to decode JWT tokens clients provide for authentication. For security the key must be at least thirty-two characters long. If this parameter is not specified then PostgREST refuses authentication requests. Choosing a value for this parameter beginning with the at sign such as :code:`@filename` loads the secret out of an external file. This is useful for automating deployments. Note that any binary secrets must be base64 encoded. Both symmetric and asymmetric cryptography are supported. For more info see :ref:`asym_keys`.
+
+.. _jwt-aud:
+
 jwt-aud
+-------
+
   Specifies the `JWT audience claim <https://tools.ietf.org/html/rfc7519#section-4.1.3>`_. If this claim is present in the client provided JWT then you must set this to the same value as in the JWT, otherwise verifying the JWT will fail.
+
+.. _secret-is-base64:
+
 secret-is-base64
+----------------
+
   When this is set to :code:`true`, the value derived from :code:`jwt-secret` will be treated as a base64 encoded secret.
+
+.. _max-rows:
+
 max-rows
+--------
+
   A hard limit to the number of rows PostgREST will fetch from a view, table, or stored procedure. Limits payload size for accidental or malicious requests.
+
+.. _pre-request:
+
 pre-request
+-----------
+
   A schema-qualified stored procedure name to call right after switching roles for a client request. This provides an opportunity to modify SQL variables or raise an exception to prevent the request from completing.
+
+.. _app.settings.*:
+
 app.settings.*
+--------------
+
   Arbitrary settings that can be used to pass in secret keys directly as strings, or via OS environment variables. For instance: :code:`app.settings.jwt_secret = "$(MYAPP_JWT_SECRET)"` will take :code:`MYAPP_JWT_SECRET` from the environment and make it available to postgresql functions as :code:`current_setting('app.settings.jwt_secret')`.
+
+.. _role-claim-key:
+
 role-claim-key
+--------------
+
   A JSPath DSL that specifies the location of the :code:`role` key in the JWT claims. This can be used to consume a JWT provided by a third party service like Auth0, Okta or Keycloak. Usage examples:
 
 .. code:: bash

From a924c4b12f0b676c3aa51df65115f1120d3c670c Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Mon, 10 Sep 2018 13:59:51 -0500
Subject: [PATCH 181/652] Fix #173, add ref for jwt claim access

---
 api.rst | 15 ++++++++++++---
 1 file changed, 12 insertions(+), 3 deletions(-)

diff --git a/api.rst b/api.rst
index 7180ad8b7..d9344c790 100644
--- a/api.rst
+++ b/api.rst
@@ -670,14 +670,23 @@ To avoid having to qualify many database objects, you can add a ``search_path``
   -- existing functions can be altered to add a search_path
   ALTER FUNCTION api.make_point(float8, float8) SET search_path = public, api;
 
-Accessing Request Headers/Cookies
----------------------------------
+Accessing Request Headers, Cookies and JWT claims
+-------------------------------------------------
 
-Stored procedures can access request headers and cookies by reading GUC variables set by PostgREST per request. They are named :code:`request.header.XYZ` and :code:`request.cookie.XYZ`. For example, to read the value of the Origin request header:
+Stored procedures can access request headers, cookies and jwt claims by reading GUC variables set by PostgREST per request. They are named :code:`request.header.XYZ`, :code:`request.cookie.XYZ` and :code:`request.jwt.claim.XYZ`.
 
 .. code-block:: postgresql
 
+  -- To read the value of the Origin request header:
   SELECT current_setting('request.header.origin', true);
+  -- To read the value of sessionId in a cookie:
+  SELECT current_setting('request.cookie.sessionId', true);
+  -- To read the value of the email claim in a jwt:
+  SELECT current_setting('request.jwt.claim.email', true);
+
+.. note::
+
+  ``request.jwt.claim.role`` defaults to the value of :ref:`db-anon-role`.
 
 Errors and HTTP Status Codes
 ----------------------------

From bca1ddf0d613fc6bf31fed0ecc0814b4c7928984 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Tue, 11 Sep 2018 09:51:24 -0500
Subject: [PATCH 182/652] Fix #168, Rename SSL to HTTPS

---
 auth.rst | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/auth.rst b/auth.rst
index 203d046c3..a8c012dd9 100644
--- a/auth.rst
+++ b/auth.rst
@@ -289,12 +289,12 @@ The last type of critique focuses on the misuse of JWT for maintaining web sessi
 
 PostgREST uses JWT mainly for authentication and authorization purposes and encourages users to do the same. For web sessions, using cookies over HTTPS is good enough and well catered for by standard web frameworks.
 
-.. _ssl:
+.. _https:
 
-SSL
----
+HTTPS
+-----
 
-PostgREST aims to do one thing well: add an HTTP interface to a PostgreSQL database. To keep the code small and focused we do not implement SSL. Use a reverse proxy such as NGINX to add this, `here's how <https://nginx.org/en/docs/http/configuring_https_servers.html>`_. Note that some Platforms as a Service like Heroku also add SSL automatically in their load balancer.
+PostgREST aims to do one thing well: add an HTTP interface to a PostgreSQL database. To keep the code small and focused we do not implement HTTPS. Use a reverse proxy such as NGINX to add this, `here's how <https://nginx.org/en/docs/http/configuring_https_servers.html>`_. Note that some Platforms as a Service like Heroku also add SSL automatically in their load balancer.
 
 Schema Isolation
 ================

From 5e2f3b8d596819a2086fef1f607a5f3efc865997 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Tue, 11 Sep 2018 10:13:41 -0500
Subject: [PATCH 183/652] Fix #166, reorder docker instructions

---
 install.rst | 13 ++++++++-----
 1 file changed, 8 insertions(+), 5 deletions(-)

diff --git a/install.rst b/install.rst
index b0df82b49..ea6ab76f1 100644
--- a/install.rst
+++ b/install.rst
@@ -239,9 +239,15 @@ PostgREST outputs basic request logging to stdout. When running it in an SSH ses
 Docker
 ======
 
-The official PostgREST Docker image consults an internal :code:`/etc/postgrest.conf` file. To customize this file you can either mount a replacement configuration file into the container, or use environment variables. The environment variables will be interpolated into the default config file.
+You can get the `official PostgREST Docker image <https://hub.docker.com/r/postgrest/postgrest>`_ with:
 
-These variables match the options shown in our :ref:`configuration` section, except they are capitalized, have a prefix, and use underscores. To get a list of the available environment variables, run this:
+.. code-block:: bash
+
+  docker pull postgrest/postgrest
+
+The image consults an internal ``/etc/postgrest.conf`` file. To customize this file you can either mount a replacement configuration file into the container, or use environment variables. The environment variables will be interpolated into the default config file.
+
+These variables match the options shown in our :ref:`configuration` section, except they are capitalized, have a ``PGRST_`` prefix, and use underscores. To get a list of the available environment variables, run this:
 
 .. code-block:: bash
 
@@ -256,9 +262,6 @@ The first way to run PostgREST in Docker is to connect it to an existing native
 
 .. code-block:: bash
 
-  # Pull the official image
-  docker pull postgrest/postgrest
-
   # Run the server
   docker run --rm --net=host -p 3000:3000 \
     -e PGRST_DB_URI="postgres://postgres@localhost/postgres" \

From d78862996ff3405d6fd91c4c7c53b3a470dffe90 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Tue, 11 Sep 2018 11:20:46 -0500
Subject: [PATCH 184/652] Fix #165, add schemas for sign/login

---
 auth.rst | 47 +++++++++++++++++++----------------------------
 1 file changed, 19 insertions(+), 28 deletions(-)

diff --git a/auth.rst b/auth.rst
index a8c012dd9..ee254594a 100644
--- a/auth.rst
+++ b/auth.rst
@@ -126,18 +126,16 @@ Here's an example. In the config file specify a stored procedure:
 
 In the function you can run arbitrary code to check the request and raise an exception to block it if desired.
 
-.. code:: sql
+.. code-block:: postgres
 
-  CREATE OR REPLACE FUNCTION check_user() RETURNS void
-    LANGUAGE plpgsql
-    AS $$
+  CREATE OR REPLACE FUNCTION check_user() RETURNS void AS $$
   BEGIN
     IF current_user = 'evil_user' THEN
       RAISE EXCEPTION 'No, you are evil'
         USING HINT = 'Stop being so evil and maybe you can log in';
     END IF;
   END
-  $$;
+  $$ LANGUAGE plpgsql;
 
 Client Auth
 ===========
@@ -157,20 +155,18 @@ You can create a valid JWT either from inside your database or via an external s
 JWT from SQL
 ~~~~~~~~~~~~
 
-You can create JWT tokens in SQL using the `pgjwt extension <https://github.com/michelp/pgjwt>`_. It's simple and requires only pgcrypto. If you're on an environment like Amazon RDS which doesn't support installing new extensions, you can still manually run the SQL inside pgjwt which creates the functions you will need.
+You can create JWT tokens in SQL using the `pgjwt extension <https://github.com/michelp/pgjwt>`_. It's simple and requires only pgcrypto. If you're on an environment like Amazon RDS which doesn't support installing new extensions, you can still manually run the `SQL inside pgjwt <https://github.com/michelp/pgjwt/blob/master/pgjwt--0.0.1.sql>`_ (you'll need to replace ``@extschema@`` with another schema or just delete it) which creates the functions you will need.
 
 Next write a stored procedure that returns the token. The one below returns a token with a hard-coded role, which expires five minutes after it was issued. Note this function has a hard-coded secret as well.
 
-.. code:: sql
+.. code-block:: postgres
 
   CREATE TYPE jwt_token AS (
     token text
   );
 
-  CREATE FUNCTION jwt_test() RETURNS public.jwt_token
-      LANGUAGE sql
-      AS $$
-    SELECT sign(
+  CREATE FUNCTION jwt_test() RETURNS public.jwt_token AS $$
+    SELECT public.sign(
       row_to_json(r), 'reallyreallyreallyreallyverysafe'
     ) AS token
     FROM (
@@ -178,7 +174,7 @@ Next write a stored procedure that returns the token. The one below returns a to
         'my_role'::text as role,
         extract(epoch from now())::integer + 300 AS exp
     ) r;
-  $$;
+  $$ LANGUAGE sql;
 
 PostgREST exposes this function to clients via a POST request to `/rpc/jwt_test`.
 
@@ -329,12 +325,10 @@ First we'll need a table to keep track of our users:
 
 We would like the role to be a foreign key to actual database roles, however PostgreSQL does not support these constraints against the :code:`pg_roles` table. We'll use a trigger to manually enforce it.
 
-.. code:: plpgsql
+.. code-block:: plpgsql
 
   create or replace function
-  basic_auth.check_role_exists() returns trigger
-    language plpgsql
-    as $$
+  basic_auth.check_role_exists() returns trigger as $$
   begin
     if not exists (select 1 from pg_roles as r where r.rolname = new.role) then
       raise foreign_key_violation using message =
@@ -343,7 +337,7 @@ We would like the role to be a foreign key to actual database roles, however Pos
     end if;
     return new;
   end
-  $$;
+  $$ language plpgsql;
 
   drop trigger if exists ensure_user_role_exists on basic_auth.users;
   create constraint trigger ensure_user_role_exists
@@ -353,21 +347,19 @@ We would like the role to be a foreign key to actual database roles, however Pos
 
 Next we'll use the pgcrypto extension and a trigger to keep passwords safe in the :code:`users` table.
 
-.. code:: plpgsql
+.. code-block:: plpgsql
 
   create extension if not exists pgcrypto;
 
   create or replace function
-  basic_auth.encrypt_pass() returns trigger
-    language plpgsql
-    as $$
+  basic_auth.encrypt_pass() returns trigger as $$
   begin
     if tg_op = 'INSERT' or new.pass <> old.pass then
       new.pass = crypt(new.pass, gen_salt('bf'));
     end if;
     return new;
   end
-  $$;
+  $$ language plpgsql;
 
   drop trigger if exists encrypt_pass on basic_auth.users;
   create trigger encrypt_pass
@@ -377,7 +369,7 @@ Next we'll use the pgcrypto extension and a trigger to keep passwords safe in th
 
 With the table in place we can make a helper to check a password against the encrypted column. It returns the database role for a user if the email and password are correct.
 
-.. code:: plpgsql
+.. code-block:: plpgsql
 
   create or replace function
   basic_auth.user_role(email text, pass text) returns name
@@ -404,12 +396,11 @@ Logins
 
 As described in `JWT from SQL`_, we'll create a JWT inside our login function. Note that you'll need to adjust the secret key which is hard-coded in this example to a secure (at least thirty-two character) secret of your choosing.
 
-.. code:: plpgsql
+.. code-block:: postgres
 
+  -- login should be on your exposed schema
   create or replace function
-  login(email text, pass text) returns basic_auth.jwt_token
-    language plpgsql
-    as $$
+  login(email text, pass text) returns basic_auth.jwt_token as $$
   declare
     _role name;
     result basic_auth.jwt_token;
@@ -430,7 +421,7 @@ As described in `JWT from SQL`_, we'll create a JWT inside our login function. N
       into result;
     return result;
   end;
-  $$;
+  $$ language plpgsql;
 
 An API request to call this function would look like:
 

From 9337f63823d9277cf76d389b4998e4f9bded5f3b Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Tue, 11 Sep 2018 13:11:01 -0500
Subject: [PATCH 185/652] Fix #153, add systemd service file

---
 admin.rst | 62 +++++++++++++++++++++++++++++++++++++++++++++++--------
 1 file changed, 53 insertions(+), 9 deletions(-)

diff --git a/admin.rst b/admin.rst
index b47e93853..934f2d5d3 100644
--- a/admin.rst
+++ b/admin.rst
@@ -5,18 +5,18 @@ PostgREST is a fast way to construct a RESTful API. Its default behavior is grea
 
 The first step is to create an Nginx configuration file that proxies requests to an underlying PostgREST server.
 
-.. code:: nginx
+.. code-block:: nginx
 
   http {
-    ...
+    # ...
     # upstream configuration
     upstream postgrest {
       server localhost:3000;
       keepalive 64;
     }
-    ...
+    # ...
     server {
-      ...
+      # ...
       # expose to the outside world
       location /api/ {
         default_type  application/json;
@@ -26,7 +26,7 @@ The first step is to create an Nginx configuration file that proxies requests to
         proxy_http_version 1.1;
         proxy_pass http://postgrest/;
       }
-      ...
+      # ...
     }
   }
 
@@ -37,13 +37,13 @@ Block Full-Table Operations
 
 Each table in the admin-selected schema gets exposed as a top level route. Client requests are executed by certain database roles depending on their authentication. All HTTP verbs are supported that correspond to actions permitted to the role. For instance if the active role can drop rows of the table then the DELETE verb is allowed for clients. Here's an API request to delete old rows from a hypothetical logs table:
 
-.. code:: http
+.. code-block:: http
 
   DELETE /logs?time=lt.1991-08-06 HTTP/1.1
 
 However it's very easy to delete the **entire table** by omitting the query parameter!
 
-.. code:: http
+.. code-block:: http
 
   DELETE /logs HTTP/1.1
 
@@ -92,7 +92,7 @@ This is fine in small tables, but count performance degrades in big tables due t
 HTTPS
 -----
 
-See the :ref:`ssl` section of the authentication guide.
+See the :ref:`https` section of the authentication guide.
 
 Rate Limiting
 -------------
@@ -201,6 +201,50 @@ Then run the `pg_listen <https://github.com/begriffs/pg_listen>`_ utility to mon
 
 Now, whenever the structure of the database schema changes, PostgreSQL will notify the ``ddl_command_end`` channel, which will cause ``pg_listen`` to send PostgREST the signal to reload its cache.
 
+Daemonizing
+===========
+
+For linux distros that use **systemd** (ubuntu, debian, archlinux) you can create a daemon in the following way.
+
+First, create postgrest configuration in ``/etc/postgrest/config``
+
+.. code-block:: ini
+
+  db-uri = "postgres://<your_user>:<your_password>@localhost:5432/<your_db>"
+  db-schema = "<your_exposed_schema>"
+  db-anon-role = "<your_anon_role>"
+  db-pool = 10
+
+  server-host = "127.0.0.1"
+  server-port = 3000
+
+  jwt-secret = "<your_secret>"
+
+Then create the systemd service file in ``/etc/systemd/system/postgrest.service``
+
+.. code-block:: ini
+
+  [Unit]
+  Description=REST API for any Postgres database
+  After=postgresql.service
+
+  [Service]
+  ExecStart=/bin/postgrest /etc/postgrest/config
+  ExecReload=/bin/kill -HUP $MAINPID
+
+  [Install]
+  WantedBy=multi-user.target
+
+After that, you can enable the service at boot time and start it with:
+
+.. code-block:: bash
+
+  systemctl enable postgrest
+  systemctl start postgrest
+
+  ## For reloading the service
+  ## systemctl restart postgrest
+
 Alternate URL Structure
 =======================
 
@@ -215,7 +259,7 @@ This allows compound primary keys and makes the intent for singular response ind
 
 Nginx rewrite rules allow you to simulate the familiar URL convention. The following example adds a rewrite rule for all table endpoints, but you'll want to restrict it to those tables that have a numeric simple primary key named "id."
 
-.. code:: nginx
+.. code-block:: nginx
 
   # support /endpoint/:id url style
   location ~ ^/([a-z_]+)/([0-9]+) {

From 8670ce6ffea246f6fa165feee748e57bda20a279 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Tue, 11 Sep 2018 13:17:45 -0500
Subject: [PATCH 186/652] Highlight 32 chars long and fix indentation

---
 install.rst | 44 ++++++++++++++++++++++----------------------
 1 file changed, 22 insertions(+), 22 deletions(-)

diff --git a/install.rst b/install.rst
index ea6ab76f1..a2805432e 100644
--- a/install.rst
+++ b/install.rst
@@ -146,28 +146,28 @@ server-proxy-uri
 
   Overrides the base URL used within the OpenAPI self-documentation hosted at the API root path. Use a complete URI syntax :code:`scheme:[//[user:password@]host[:port]][/]path[?query][#fragment]`. Ex. :code:`https://postgrest.com`
 
-.. code:: json
+  .. code:: json
 
-  {
-    "swagger": "2.0",
-    "info": {
-      "version": "0.4.3.0",
-      "title": "PostgREST API",
-      "description": "This is a dynamic API generated by PostgREST"
-    },
-    "host": "postgrest.com:443",
-    "basePath": "/",
-    "schemes": [
-      "https"
-    ]
-  }
+    {
+      "swagger": "2.0",
+      "info": {
+        "version": "0.4.3.0",
+        "title": "PostgREST API",
+        "description": "This is a dynamic API generated by PostgREST"
+      },
+      "host": "postgrest.com:443",
+      "basePath": "/",
+      "schemes": [
+        "https"
+      ]
+    }
 
 .. _jwt-secret:
 
 jwt-secret
 ----------
 
-  The secret or `JSON Web Key (JWK) <https://tools.ietf.org/html/rfc7517>`_ used to decode JWT tokens clients provide for authentication. For security the key must be at least thirty-two characters long. If this parameter is not specified then PostgREST refuses authentication requests. Choosing a value for this parameter beginning with the at sign such as :code:`@filename` loads the secret out of an external file. This is useful for automating deployments. Note that any binary secrets must be base64 encoded. Both symmetric and asymmetric cryptography are supported. For more info see :ref:`asym_keys`.
+  The secret or `JSON Web Key (JWK) <https://tools.ietf.org/html/rfc7517>`_ used to decode JWT tokens clients provide for authentication. For security the key must be **at least 32 characters long**. If this parameter is not specified then PostgREST refuses authentication requests. Choosing a value for this parameter beginning with the at sign such as :code:`@filename` loads the secret out of an external file. This is useful for automating deployments. Note that any binary secrets must be base64 encoded. Both symmetric and asymmetric cryptography are supported. For more info see :ref:`asym_keys`.
 
 .. _jwt-aud:
 
@@ -211,15 +211,15 @@ role-claim-key
 
   A JSPath DSL that specifies the location of the :code:`role` key in the JWT claims. This can be used to consume a JWT provided by a third party service like Auth0, Okta or Keycloak. Usage examples:
 
-.. code:: bash
+  .. code:: bash
 
-  # {"postgrest":{"roles": ["other", "author"]}}
-  # the DSL accepts characters that are alphanumerical or one of "_$@" as keys
-  role-claim-key = ".postgrest.roles[1]"
+    # {"postgrest":{"roles": ["other", "author"]}}
+    # the DSL accepts characters that are alphanumerical or one of "_$@" as keys
+    role-claim-key = ".postgrest.roles[1]"
 
-  # {"https://www.example.com/role": { "key": "author }}
-  # non-alphanumerical characters can go inside quotes(escaped in the config value)
-  role-claim-key = ".\"https://www.example.com/role\".key"
+    # {"https://www.example.com/role": { "key": "author }}
+    # non-alphanumerical characters can go inside quotes(escaped in the config value)
+    role-claim-key = ".\"https://www.example.com/role\".key"
 
 Running the Server
 ------------------

From 0ec963b295415390f0aa30666753265ddcef7221 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Tue, 11 Sep 2018 13:28:04 -0500
Subject: [PATCH 187/652] Fix #105, correct command for running postgrest

---
 install.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install.rst b/install.rst
index a2805432e..36905b5cb 100644
--- a/install.rst
+++ b/install.rst
@@ -45,7 +45,7 @@ The PostgREST server reads a configuration file to determine information about t
 
 .. code:: bash
 
-  postgrest /path/to/postgrest.conf
+  ./postgrest /path/to/postgrest.conf
 
 The file must contain a set of key value pairs. At minimum you must include these keys:
 

From 83183ec8c6e7f9b2eed50025dd106adcfaf77486 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Tue, 11 Sep 2018 14:01:44 -0500
Subject: [PATCH 188/652] Fix #171, postgres logging in docker

---
 admin.rst | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)

diff --git a/admin.rst b/admin.rst
index 934f2d5d3..7c5a4978a 100644
--- a/admin.rst
+++ b/admin.rst
@@ -164,6 +164,22 @@ Once you've verified that requests are as you expect, you can get more informati
 
 Restart the database and watch the log file in real-time to understand how HTTP requests are being translated into SQL commands.
 
+.. note::
+
+  On Docker you can enable the logs by using a custom ``init.sh``:
+
+  .. code:: bash
+
+    #!/bin/sh
+    echo "log_statement = 'all'" >> /var/lib/postgresql/data/postgresql.conf
+
+  After that you can start the container and check the logs with ``docker logs``.
+
+  .. code:: bash
+
+    docker run -v "$(pwd)/init.sh":"/docker-entrypoint-initdb.d/init.sh" -d postgres
+    docker logs -f <container-id>
+
 .. _schema_reloading:
 
 Schema Reloading

From cf220c5a91128d1f94684ff020dd885571176234 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Wed, 12 Sep 2018 14:35:18 -0500
Subject: [PATCH 189/652] Fix #164, overloaded functions/named parameters

---
 api.rst | 41 +++++++++++++++++++++++++++++++++++------
 1 file changed, 35 insertions(+), 6 deletions(-)

diff --git a/api.rst b/api.rst
index d9344c790..f20a15c75 100644
--- a/api.rst
+++ b/api.rst
@@ -552,26 +552,36 @@ Stored Procedures
 
 Every stored procedure in the API-exposed database schema is accessible under the :code:`/rpc` prefix. The API endpoint supports POST (and in some cases GET) to execute the function.
 
-.. code:: http
+.. code-block:: http
 
   POST /rpc/function_name HTTP/1.1
 
 Such functions can perform any operations allowed by PostgreSQL (read data, modify data, and even DDL operations). However procedures in PostgreSQL marked with :code:`stable` or :code:`immutable` `volatility <https://www.postgresql.org/docs/current/static/xfunc-volatility.html>`_ can only read, not modify, the database and PostgREST executes them in a read-only transaction compatible for read-replicas. Stable and immutable functions can be called with the HTTP GET verb if desired.
 
-Procedures must be used with `named arguments <https://www.postgresql.org/docs/current/static/sql-syntax-calling-funcs.html#SQL-SYNTAX-CALLING-FUNCS-NAMED>`_. To supply arguments in an API call, include a JSON object in the request payload and each key/value of the object will become an argument.
+To supply arguments in an API call, include a JSON object in the request payload and each key/value of the object will become an argument.
 
 For instance, assume we have created this function in the database.
 
-.. code:: plpgsql
+.. code-block:: plpgsql
 
   CREATE FUNCTION add_them(a integer, b integer)
   RETURNS integer AS $$
-   SELECT $1 + $2;
+   SELECT a + b;
   $$ LANGUAGE SQL IMMUTABLE STRICT;
 
+.. note::
+
+  Procedures must be declared with named parameters, procedures declared like:
+
+  .. code-block:: plpgsql
+
+    CREATE FUNCTION non_named_args(integer, text, integer) ...
+
+  Can not be called with PostgREST, since we use `named notation <https://www.postgresql.org/docs/current/static/sql-syntax-calling-funcs.html#SQL-SYNTAX-CALLING-FUNCS-NAMED>`_ internally.
+
 The client can call it by posting an object like
 
-.. code:: http
+.. code-block:: http
 
   POST /rpc/add_them HTTP/1.1
 
@@ -579,7 +589,7 @@ The client can call it by posting an object like
 
 Because ``add_them`` is declared IMMUTABLE, we can alternately call the function with a GET request:
 
-.. code:: http
+.. code-block:: http
 
   GET /rpc/add_them?a=1&b=2 HTTP/1.1
 
@@ -641,6 +651,25 @@ By default, a function is executed with the privileges of the user who calls it.
 
   Why the `/rpc` prefix? One reason is to avoid name collisions between views and procedures. It also helps emphasize to API consumers that these functions are not normal restful things. The functions can have arbitrary and surprising behavior, not the standard "post creates a resource" thing that users expect from the other routes.
 
+Overloaded functions
+--------------------
+
+You can call overloaded functions with different number of arguments.
+
+.. code-block:: postgres
+
+  CREATE FUNCTION rental_duration(customer_id integer) ..
+
+  CREATE FUNCTION rental_duration(customer_id integer, from_date date) ..
+
+.. code-block:: http
+
+  GET /rpc/rental_duration?customer_id=232 HTTP/1.1
+
+.. code-block:: http
+
+  GET /rpc/rental_duration?customer_id=232&from_date=2018-07-01 HTTP/1.1
+
 Explicit Qualification
 ----------------------
 

From 7052446abfc2c89f2bb427f225f4a2a2182c0eaf Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Thu, 13 Sep 2018 11:47:50 -0500
Subject: [PATCH 190/652] Fix #160, reorder reloading note for functions

---
 api.rst | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/api.rst b/api.rst
index f20a15c75..b00821e6f 100644
--- a/api.rst
+++ b/api.rst
@@ -569,6 +569,10 @@ For instance, assume we have created this function in the database.
    SELECT a + b;
   $$ LANGUAGE SQL IMMUTABLE STRICT;
 
+.. important::
+
+  Whenever you create or change a function you must refresh PostgREST's schema. See the section :ref:`schema_reloading`.
+
 .. note::
 
   Procedures must be declared with named parameters, procedures declared like:
@@ -633,10 +637,6 @@ PostgREST will detect if the function is scalar or table-valued and will shape t
     { "title": "Blade Runner 2049", "rating": 8.1}
   ]
 
-.. important::
-
-  Whenever the function definition changes you must refresh PostgREST's schema for this to work properly. See the section :ref:`schema_reloading`.
-
 A function response can be shaped using the same filters as the ones used for tables and views:
 
 .. code:: http

From efb39e5e122e5402f8e6dfd23397d243d8dade77 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Thu, 13 Sep 2018 12:32:06 -0500
Subject: [PATCH 191/652] Add SIGHUP deprecation notice

---
 admin.rst      | 14 +++++++++-----
 postgrest.dict |  1 +
 2 files changed, 10 insertions(+), 5 deletions(-)

diff --git a/admin.rst b/admin.rst
index 7c5a4978a..79585a395 100644
--- a/admin.rst
+++ b/admin.rst
@@ -187,11 +187,11 @@ Schema Reloading
 
 Users are often confused by PostgREST's database schema cache. It is present because detecting foreign key relationships between tables (including how those relationships pass through views) is necessary, but costly. API requests consult the schema cache as part of :ref:`resource_embedding`. However if the schema changes while the server is running it results in a stale cache and leads to errors claiming that no relations are detected between tables.
 
-To refresh the cache without restarting the PostgREST server, send the server process a SIGHUP signal:
+To refresh the cache without restarting the PostgREST server, send the server process a SIGUSR1 signal:
 
 .. code:: bash
 
-  killall -HUP postgrest
+  killall -SIGUSR1 postgrest
 
 The above is the manual way to do it. To automate the schema reloads, use a database trigger like this:
 
@@ -209,14 +209,18 @@ The above is the manual way to do it. To automate the schema reloads, use a data
   CREATE EVENT TRIGGER ddl_postgrest ON ddl_command_end
      EXECUTE PROCEDURE public.notify_ddl_postgrest();
 
-Then run the `pg_listen <https://github.com/begriffs/pg_listen>`_ utility to monitor for that event and send a SIGHUP when it occurs:
+Then run the `pg_listen <https://github.com/begriffs/pg_listen>`_ utility to monitor for that event and send a SIGUSR1 when it occurs:
 
 .. code-block:: bash
 
-  pg_listen <db-uri> ddl_command_end "killall -HUP postgrest"
+  pg_listen <db-uri> ddl_command_end "killall -SIGUSR1 postgrest"
 
 Now, whenever the structure of the database schema changes, PostgreSQL will notify the ``ddl_command_end`` channel, which will cause ``pg_listen`` to send PostgREST the signal to reload its cache.
 
+.. important::
+
+  As of PostgREST v5.1 reloading with SIGHUP is deprecated, it's still supported but will be removed in v6.0
+
 Daemonizing
 ===========
 
@@ -246,7 +250,7 @@ Then create the systemd service file in ``/etc/systemd/system/postgrest.service`
 
   [Service]
   ExecStart=/bin/postgrest /etc/postgrest/config
-  ExecReload=/bin/kill -HUP $MAINPID
+  ExecReload=/bin/kill -SIGUSR1 $MAINPID
 
   [Install]
   WantedBy=multi-user.target
diff --git a/postgrest.dict b/postgrest.dict
index 83af75b11..563e11994 100644
--- a/postgrest.dict
+++ b/postgrest.dict
@@ -46,6 +46,7 @@ RabbitMQ
 RestSharp
 SHA
 SIGHUP
+SIGUSR1
 SNS
 SQL
 SSL

From d0c0312e35df809c28f4a1b0f3def87a4e4fa791 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Thu, 13 Sep 2018 12:41:55 -0500
Subject: [PATCH 192/652] Change server-host default

---
 install.rst | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/install.rst b/install.rst
index 36905b5cb..7e09df3f3 100644
--- a/install.rst
+++ b/install.rst
@@ -68,14 +68,14 @@ The user specified in the db-uri is also known as the authenticator role. For mo
 
 Here is the full list of configuration parameters.
 
-================  ======  =======  ========
-Name              Type    Default  Required
-================  ======  =======  ========
-db-uri            String           Y
-db-schema         String           Y
-db-anon-role      String           Y
+================  ======  =========  ========
+Name              Type    Default    Required
+================  ======  =========  ========
+db-uri            String             Y
+db-schema         String             Y
+db-anon-role      String             Y
 db-pool           Int     10
-server-host       String  \*4
+server-host       String  127.0.0.1
 server-port       Int     3000
 server-proxy-uri  String
 jwt-secret        String
@@ -85,7 +85,7 @@ max-rows          Int     ∞
 pre-request       String
 app.settings.*    String
 role-claim-key    String  .role
-================  ======  =======  ========
+================  ======  =========  ========
 
 .. _db-uri:
 

From d5365b6ead2ffabf0b8ed98fb7d730317999474f Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Sat, 15 Sep 2018 13:24:33 -0500
Subject: [PATCH 193/652] Reorder stored procedures section

---
 api.rst | 94 ++++++++++++++++++++++++++++++++++++++++++---------------
 1 file changed, 70 insertions(+), 24 deletions(-)

diff --git a/api.rst b/api.rst
index b00821e6f..9099dcc30 100644
--- a/api.rst
+++ b/api.rst
@@ -556,7 +556,7 @@ Every stored procedure in the API-exposed database schema is accessible under th
 
   POST /rpc/function_name HTTP/1.1
 
-Such functions can perform any operations allowed by PostgreSQL (read data, modify data, and even DDL operations). However procedures in PostgreSQL marked with :code:`stable` or :code:`immutable` `volatility <https://www.postgresql.org/docs/current/static/xfunc-volatility.html>`_ can only read, not modify, the database and PostgREST executes them in a read-only transaction compatible for read-replicas. Stable and immutable functions can be called with the HTTP GET verb if desired.
+Such functions can perform any operations allowed by PostgreSQL (read data, modify data, and even DDL operations).
 
 To supply arguments in an API call, include a JSON object in the request payload and each key/value of the object will become an argument.
 
@@ -573,16 +573,6 @@ For instance, assume we have created this function in the database.
 
   Whenever you create or change a function you must refresh PostgREST's schema. See the section :ref:`schema_reloading`.
 
-.. note::
-
-  Procedures must be declared with named parameters, procedures declared like:
-
-  .. code-block:: plpgsql
-
-    CREATE FUNCTION non_named_args(integer, text, integer) ...
-
-  Can not be called with PostgREST, since we use `named notation <https://www.postgresql.org/docs/current/static/sql-syntax-calling-funcs.html#SQL-SYNTAX-CALLING-FUNCS-NAMED>`_ internally.
-
 The client can call it by posting an object like
 
 .. code-block:: http
@@ -591,13 +581,41 @@ The client can call it by posting an object like
 
   { "a": 1, "b": 2 }
 
-Because ``add_them`` is declared IMMUTABLE, we can alternately call the function with a GET request:
+  3
+
+You can also call a function that takes a single parameter of type json by sending the header :code:`Prefer: params=single-object` with your request. That way the JSON request body will be used as the single argument.
+
+.. code-block:: plpgsql
+
+  CREATE FUNCTION mult_them(param json) RETURNS int AS $$
+    SELECT (param->>'x')::int * (param->>'y')::int
+  $$ LANGUAGE SQL;
 
 .. code-block:: http
 
-  GET /rpc/add_them?a=1&b=2 HTTP/1.1
+  POST /rpc/mult_them HTTP/1.1
+  Prefer: params=single-object
 
-The function parameter names match the JSON object keys in the POST case, for the GET case they match the query parameters ``?a=1&b=2``. Note that PostgreSQL converts parameter names to lowercase unless you quote them like :sql:`CREATE FUNCTION foo("mixedCase" text) ...`. You can also call a function that takes a single parameter of type json by sending the header :code:`Prefer: params=single-object` with your request. That way the JSON request body will be used as the single argument.
+  { "x": 4, "y": 2 }
+
+  8
+
+
+Procedures must be declared with named parameters, procedures declared like:
+
+.. code-block:: plpgsql
+
+  CREATE FUNCTION non_named_args(integer, text, integer) ...
+
+Can not be called with PostgREST, since we use `named notation <https://www.postgresql.org/docs/current/static/sql-syntax-calling-funcs.html#SQL-SYNTAX-CALLING-FUNCS-NAMED>`_ internally.
+
+Note that PostgreSQL converts identifier names to lowercase unless you quote them like:
+
+.. code-block:: postgres
+
+  CREATE FUNCTION "someFunc"("someParam" text) ...
+
+PostgreSQL has four procedural languages that are part of the core distribution: PL/pgSQL, PL/Tcl, PL/Perl, and PL/Python. There are many other procedural languages distributed as additional extensions. Also, plain SQL can be used to write functions (as shown in the example above).
 
 .. note::
 
@@ -619,15 +637,35 @@ The function parameter names match the JSON object keys in the POST case, for th
 
   Starting from PostgreSQL 10, a json array from the client gets mapped normally to a PostgreSQL native array.
 
+.. note::
+
+  Why the `/rpc` prefix? One reason is to avoid name collisions between views and procedures. It also helps emphasize to API consumers that these functions are not normal restful things. The functions can have arbitrary and surprising behavior, not the standard "post creates a resource" thing that users expect from the other routes.
+
+Immutable and stable functions
+------------------------------
+
+Procedures in PostgreSQL marked with :code:`stable` or :code:`immutable` `volatility <https://www.postgresql.org/docs/current/static/xfunc-volatility.html>`_ can only read, not modify, the database and PostgREST executes them in a read-only transaction compatible for read-replicas. Stable and immutable functions can be called with the HTTP GET verb if desired.
+
+Because ``add_them`` is declared IMMUTABLE, we can alternately call the function with a GET request:
+
+.. code-block:: http
+
+  GET /rpc/add_them?a=1&b=2 HTTP/1.1
+
+The function parameter names match the JSON object keys in the POST case, for the GET case they match the query parameters ``?a=1&b=2``.
+
+Scalar functions
+----------------
+
 PostgREST will detect if the function is scalar or table-valued and will shape the response format accordingly:
 
-.. code:: http
+.. code-block:: http
 
   GET /rpc/add_them?a=1&b=2 HTTP/1.1
 
   3
 
-.. code:: http
+.. code-block:: http
 
   GET /rpc/best_films_2017 HTTP/1.1
 
@@ -637,20 +675,28 @@ PostgREST will detect if the function is scalar or table-valued and will shape t
     { "title": "Blade Runner 2049", "rating": 8.1}
   ]
 
-A function response can be shaped using the same filters as the ones used for tables and views:
+Function filters
+----------------
 
-.. code:: http
+A function that returns a table type response can be shaped using the same filters as the ones used for tables and views:
 
-  GET /rpc/top_rated_films?select=title,director:directors(*)&year=eq.1990&order=title.desc HTTP/1.1
+.. code-block:: postgres
 
-PostgreSQL has four procedural languages that are part of the core distribution: PL/pgSQL, PL/Tcl, PL/Perl, and PL/Python. There are many other procedural languages distributed as additional extensions. Also, plain SQL can be used to write functions (as shown in the example above).
+  CREATE FUNCTION best_films_2017() RETURNS SETOF films ..
+
+.. code-block:: http
+
+  GET /rpc/best_films_2017?select=title,director:directors(*) HTTP/1.1
+
+.. code-block:: http
+
+  GET /rpc/best_films_2017?rating=gt.8&order=title.desc HTTP/1.1
+
+Function privileges
+-------------------
 
 By default, a function is executed with the privileges of the user who calls it. This means that the user has to have all permissions to do the operations the procedure performs. Another option is to define the function with the :code:`SECURITY DEFINER` option. Then only one permission check will take place, the permission to call the function, and the operations in the function will have the authority of the user who owns the function itself. See `PostgreSQL documentation <https://www.postgresql.org/docs/current/static/sql-createfunction.html>`_ for more details.
 
-.. note::
-
-  Why the `/rpc` prefix? One reason is to avoid name collisions between views and procedures. It also helps emphasize to API consumers that these functions are not normal restful things. The functions can have arbitrary and surprising behavior, not the standard "post creates a resource" thing that users expect from the other routes.
-
 Overloaded functions
 --------------------
 

From 7cff51c002854263a71b83ffba476895000b85fb Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Sat, 15 Sep 2018 14:17:28 -0500
Subject: [PATCH 194/652] Fix some code highlighting and add computed col ref

---
 api.rst | 30 +++++++++++++++---------------
 1 file changed, 15 insertions(+), 15 deletions(-)

diff --git a/api.rst b/api.rst
index 9099dcc30..705cfc31e 100644
--- a/api.rst
+++ b/api.rst
@@ -221,7 +221,7 @@ As mentioned, computed columns do not appear in the output by default. However y
 
 .. important::
 
-  Computed columns must be created under the exposed schema to be used in this way.
+  Computed columns must be created under the :ref:`exposed schema <db-schema>` to be used in this way.
 
 Ordering
 --------
@@ -378,30 +378,30 @@ Binary output
 If you want to return raw binary data from a :code:`bytea` column, you must specify :code:`application/octet-stream` as part of the :code:`Accept` header
 and select a single column :code:`?select=bin_data`.
 
-.. code:: http
+.. code-block:: http
 
   GET /items?select=bin_data&id=eq.1 HTTP/1.1
   Accept: application/octet-stream
 
-You can also request binary output when calling stored procedures and since they can return a scalar value you are not forced to use :code:`select`
+You can also request binary output when calling `Stored Procedures`_ and since they can return a scalar value you are not forced to use :code:`select`
 for this case.
 
-.. code:: sql
+.. code-block:: postgres
 
   CREATE FUNCTION closest_point(..) RETURNS bytea ..
 
-.. code:: http
+.. code-block:: http
 
   POST /rpc/closest_point HTTP/1.1
   Accept: application/octet-stream
 
 If the stored procedure returns non-scalar values, you need to do a :code:`select` in the same way as for GET binary output.
 
-.. code:: sql
+.. code-block:: sql
 
   CREATE FUNCTION overlapping_regions(..) RETURNS SETOF TABLE(geom_twkb bytea, ..) ..
 
-.. code:: http
+.. code-block:: http
 
   POST /rpc/overlapping_regions?select=geom_twkb HTTP/1.1
   Accept: application/octet-stream
@@ -502,8 +502,8 @@ PostgREST can also detect relations going through join tables. Thus you can requ
 
   Whenever foreign key relations change in the database schema you must refresh PostgREST's schema cache to allow resource embedding to work properly. See the section :ref:`schema_reloading`.
 
-Embedded Operations
--------------------
+Embedded Filters
+----------------
 
 Embedded resources can be shaped similarly to their top-level counterparts. To do so, prefix the query parameters with the name of the embedded resource. For instance, to order the actors in each film:
 
@@ -832,7 +832,7 @@ All tables and `auto-updatable views <https://www.postgresql.org/docs/current/st
 
 To create a row in a database table post a JSON object whose keys are the names of the columns you would like to create. Missing properties will be set to default values when applicable.
 
-.. code:: HTTP
+.. code-block:: HTTP
 
   POST /table_name HTTP/1.1
 
@@ -858,7 +858,7 @@ On the other end of the spectrum you can get the full created object back in the
 
 To update a row or rows in a table, use the PATCH verb. Use :ref:`h_filter` to specify which record(s) to update. Here is an example query setting the :code:`category` column to child for all people below a certain age.
 
-.. code:: HTTP
+.. code-block:: http
 
   PATCH /people?age=lt.13 HTTP/1.1
 
@@ -877,7 +877,7 @@ Bulk insert works exactly like single row insert except that you provide either
 
 To bulk insert CSV simply post to a table route with :code:`Content-Type: text/csv` and include the names of the columns as the first row. For instance
 
-.. code:: HTTP
+.. code-block:: http
 
   POST /people HTTP/1.1
   Content-Type: text/csv
@@ -890,7 +890,7 @@ An empty field (:code:`,,`) is coerced to an empty string and the reserved word
 
 To bulk insert JSON post an array of objects having all-matching keys
 
-.. code:: HTTP
+.. code-block:: http
 
   POST /people HTTP/1.1
   Content-Type: application/json
@@ -905,7 +905,7 @@ Upsert
 
 You can make an UPSERT with :code:`POST` and the :code:`Prefer: resolution=merge-duplicates` header:
 
-.. code:: HTTP
+.. code-block:: http
 
   POST /employees HTTP/1.1
   Prefer: resolution=merge-duplicates
@@ -920,7 +920,7 @@ UPSERT operates based on the primary key columns, you must specify all of them.
 
 A single row UPSERT can be done by using :code:`PUT` and filtering the primary key columns with :code:`eq`:
 
-.. code:: HTTP
+.. code-block:: http
 
   PUT /employees?id=eq.4 HTTP/1.1
 

From 4b37af8f736822e572affee0d50fa7c881509ae8 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Tue, 18 Sep 2018 13:28:25 -0500
Subject: [PATCH 195/652] Fix #104, default privileges on functions

---
 api.rst | 21 ++++++++++++++++++++-
 1 file changed, 20 insertions(+), 1 deletion(-)

diff --git a/api.rst b/api.rst
index 705cfc31e..3c941b20a 100644
--- a/api.rst
+++ b/api.rst
@@ -695,7 +695,26 @@ A function that returns a table type response can be shaped using the same filte
 Function privileges
 -------------------
 
-By default, a function is executed with the privileges of the user who calls it. This means that the user has to have all permissions to do the operations the procedure performs. Another option is to define the function with the :code:`SECURITY DEFINER` option. Then only one permission check will take place, the permission to call the function, and the operations in the function will have the authority of the user who owns the function itself. See `PostgreSQL documentation <https://www.postgresql.org/docs/current/static/sql-createfunction.html>`_ for more details.
+By default, a function is executed with the privileges of the user who calls it. This means that the user has to have all permissions to do the operations the procedure performs.
+
+Another option is to define the function with the :code:`SECURITY DEFINER` option. Then only one permission check will take place, the permission to call the function, and the operations in the function will have the authority of the user who owns the function itself. See `PostgreSQL documentation <https://www.postgresql.org/docs/current/static/sql-createfunction.html#SQL-CREATEFUNCTION-SECURITY>`_ for more details.
+
+.. warning::
+
+  Unlike tables/views, functions privileges work as a blacklist, so they're executable for all the roles by default. You can workaround this by revoking the PUBLIC privileges of the function and then granting privileges to specific roles:
+
+  .. code-block:: postgres
+
+    REVOKE ALL PRIVILEGES ON FUNCTION private_func() FROM PUBLIC;
+    GRANT EXECUTE ON FUNCTION private_func() TO a_role;
+
+  Also to avoid doing ``REVOKE`` on every function you can enable this behavior by default with:
+
+  .. code-block:: postgres
+
+    ALTER DEFAULT PRIVILEGES REVOKE EXECUTE ON FUNCTIONS FROM PUBLIC;
+
+  See `PostgreSQL alter default privileges <https://www.postgresql.org/docs/current/static/sql-alterdefaultprivileges.html>`_ for more details.
 
 Overloaded functions
 --------------------

From a1d4b3ed3475ba40c50fe8f112a0eb9d2178a0e3 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Wed, 19 Sep 2018 13:34:28 -0500
Subject: [PATCH 196/652] Add #fff background for snippets

---
 _static/css/custom.css | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/_static/css/custom.css b/_static/css/custom.css
index ee869c6da..75207887c 100644
--- a/_static/css/custom.css
+++ b/_static/css/custom.css
@@ -1,3 +1,7 @@
 div.wy-menu.rst-pro {
   display: none !important;
 }
+
+div.highlight {
+  background: #fff !important;
+}

From 518b465ffafea319e09eaac327d69b364f5d19f7 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Thu, 20 Sep 2018 10:24:22 -0500
Subject: [PATCH 197/652] Fix highlighting and move running the server header

---
 api.rst     | 23 ++++++++++-------------
 install.rst |  2 +-
 2 files changed, 11 insertions(+), 14 deletions(-)

diff --git a/api.rst b/api.rst
index 3c941b20a..dac2e18b5 100644
--- a/api.rst
+++ b/api.rst
@@ -103,22 +103,19 @@ The view will provide a new endpoint:
 Full-Text Search
 ~~~~~~~~~~~~~~~~
 
-The :code:`fts` filter mentioned above has a number of options to support flexible textual queries, namely the choice of plain vs phrase search and the language used for stemming. Suppose that :code:`tsearch` is a table with column :code:`my_tsv`, of type `tsvector <https://www.postgresql.org/docs/current/static/datatype-textsearch.html>`_. The follow examples illustrate the possibilities.
+The :code:`fts` filter mentioned above has a number of options to support flexible textual queries, namely the choice of plain vs phrase search and the language used for stemming. Suppose that :code:`tsearch` is a table with column :code:`my_tsv`, of type `tsvector <https://www.postgresql.org/docs/current/static/datatype-textsearch.html>`_. The following examples illustrate the possibilities.
 
 .. code-block:: http
 
-  # Use language in fts query
-  GET /tsearch?my_tsv=fts(french).amusant
+  GET /tsearch?my_tsv=fts(french).amusant HTTP/1.1
 
-  # Use plainto_tsquery and phraseto_tsquery
-  GET /tsearch?my_tsv=plfts.The%20Fat%20Cats
-  GET /tsearch?my_tsv=phfts.The%20Fat%20Rats
+.. code-block:: http
 
-  # Combine both
-  GET /tsearch?my_tsv=phfts(english).The%20Fat%20Cats
+  GET /tsearch?my_tsv=plfts.The%20Fat%20Cats HTTP/1.1
 
-  # "not" also working
-  GET /tsearch?my_tsv=not.phfts(english).The%20Fat%20Cats
+.. code-block:: http
+
+  GET /tsearch?my_tsv=not.phfts(english).The%20Fat%20Cats HTTP/1.1
 
 Using phrase search mode requires PostgreSQL of version at least 9.6 and will raise an error in earlier versions of the database.
 
@@ -346,7 +343,7 @@ By default PostgREST returns all JSON results in an array, even when there is on
 
 This can be inconvenient for client code. To return the first result as an object unenclosed by an array, specify :code:`vnd.pgrst.object` as part of the :code:`Accept` header
 
-.. code:: http
+.. code-block:: http
 
   GET /items?id=eq.1 HTTP/1.1
   Accept: application/vnd.pgrst.object+json
@@ -621,7 +618,7 @@ PostgreSQL has four procedural languages that are part of the core distribution:
 
   For versions prior to PostgreSQL 10, to pass a PostgreSQL native array you need to quote it as a string:
 
-  .. code:: http
+  .. code-block:: http
 
     POST /rpc/native_array_func HTTP/1.1
 
@@ -629,7 +626,7 @@ PostgreSQL has four procedural languages that are part of the core distribution:
 
   In these versions we recommend using function arguments of type json to accept arrays from the client:
 
-  .. code:: http
+  .. code-block:: http
 
     POST /rpc/json_array_func HTTP/1.1
 
diff --git a/install.rst b/install.rst
index 7e09df3f3..3b7a23fd0 100644
--- a/install.rst
+++ b/install.rst
@@ -222,7 +222,7 @@ role-claim-key
     role-claim-key = ".\"https://www.example.com/role\".key"
 
 Running the Server
-------------------
+==================
 
 PostgREST outputs basic request logging to stdout. When running it in an SSH session you must detach it from stdout or it will be terminated when the session closes. The easiest technique is redirecting the output to a log file or to the syslog:
 

From 73e59a1643a7962c67aefbb23b2153c3f89c8381 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Fri, 21 Sep 2018 13:46:53 -0500
Subject: [PATCH 198/652] Add pipenv instructions

---
 .gitignore                           |  1 +
 Pipfile                              | 14 ++++++++++++++
 README.md                            | 29 +++++++++-------------------
 default.nix                          |  3 +--
 reload_docs.py => livereload_docs.py |  3 +++
 5 files changed, 28 insertions(+), 22 deletions(-)
 create mode 100644 Pipfile
 rename reload_docs.py => livereload_docs.py (68%)

diff --git a/.gitignore b/.gitignore
index e35d8850c..bf70826ea 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1 +1,2 @@
 _build
+Pipfile.lock
diff --git a/Pipfile b/Pipfile
new file mode 100644
index 000000000..52ea333a4
--- /dev/null
+++ b/Pipfile
@@ -0,0 +1,14 @@
+[[source]]
+url = "https://pypi.org/simple"
+verify_ssl = true
+name = "pypi"
+
+[packages]
+sphinx = "*"
+sphinx-rtd-theme = "*"
+livereload = "*"
+
+[dev-packages]
+
+[requires]
+python_version = "3.6"
diff --git a/README.md b/README.md
index c8c5fb53d..5e705d82b 100644
--- a/README.md
+++ b/README.md
@@ -2,28 +2,17 @@
 
 PostgREST docs use the reStructuredText format, check this [cheatsheet](https://github.com/ralsina/rst-cheatsheet/blob/master/rst-cheatsheet.rst) to get acquainted with it.
 
-To generate HTML version:
-
-1. Install Sphinx from the [sphinx website](http://www.sphinx-doc.org/en/stable/install.html)
-2. Clone this repository
-3. Generate HTML
-    ```bash
-    cd postgrest-docs
-    sphinx-build -b html -a -n . _build
-
-    # open _build/index.html in your browser
-    ```
-
-If you use [nix](https://nixos.org/nix/), you can just run:
+You can use [pipenv](https://pipenv.readthedocs.io) to build the docs locally:
 
+```bash
+  pipenv install
+  pipenv run python livereload_docs.py
 ```
+
+Or if you use [nix](https://nixos.org/nix/), you can just run:
+
+```bash
   nix-shell
 ```
 
-This will build the docs and start a livereload server on `http://localhost:5500`.
-
----
-
-**Sphinx Installation Notes:**
-
-* If you're on OSX you might want to install the Python from homebrew - then a simple `pip install sphinx` does the trick.
+Both of these options will build the docs and start a livereload server on `http://localhost:5500`.
diff --git a/default.nix b/default.nix
index 6d32f9609..c70878de8 100644
--- a/default.nix
+++ b/default.nix
@@ -8,7 +8,6 @@ stdenv.mkDerivation {
     python36Packages.sphinx_rtd_theme
     python36Packages.livereload ];
   shellHook = ''
-    sphinx-build -b html -a -n . _build
-    python reload_docs.py && exit
+    python livereload_docs.py && exit
   '';
 }
diff --git a/reload_docs.py b/livereload_docs.py
similarity index 68%
rename from reload_docs.py
rename to livereload_docs.py
index 4ec06803f..9983589aa 100755
--- a/reload_docs.py
+++ b/livereload_docs.py
@@ -1,5 +1,8 @@
 #!/usr/bin/env python
 from livereload import Server, shell
+from subprocess import call
+## Build docs at startup
+call(['sphinx-build', '-b', 'html', '-a', '-n', '.', '_build'])
 server = Server()
 server.watch('*.rst', shell('sphinx-build -b html -a -n . _build'))
 server.watch('tutorials/*.rst', shell('sphinx-build -b html -a -n . _build'))

From dc9a2858252cc94dc04007cd93edbbfec0951951 Mon Sep 17 00:00:00 2001
From: Kyle Johnson <1007162+kyle-johnson@users.noreply.github.com>
Date: Sun, 23 Sep 2018 03:08:24 -0700
Subject: [PATCH 199/652] Note Postgres' (current) RLS limitations for views

---
 api.rst | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/api.rst b/api.rst
index dac2e18b5..d0acc499f 100644
--- a/api.rst
+++ b/api.rst
@@ -98,6 +98,10 @@ The view will provide a new endpoint:
 
   GET /fresh_stories HTTP/1.1
 
+.. important::
+
+  Views bypass all row-level security features and are invoked as the role which created the view, much like stored procedures with the "SECURITY DEFINER" option.
+
 .. _fts:
 
 Full-Text Search

From 87520699343a927a6d8619cb8b2d40fa415d236f Mon Sep 17 00:00:00 2001
From: Kyle Johnson <1007162+kyle-johnson@users.noreply.github.com>
Date: Sun, 23 Sep 2018 11:38:34 -0700
Subject: [PATCH 200/652] Tweak view RLS warning

---
 api.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/api.rst b/api.rst
index d0acc499f..08110d422 100644
--- a/api.rst
+++ b/api.rst
@@ -100,7 +100,7 @@ The view will provide a new endpoint:
 
 .. important::
 
-  Views bypass all row-level security features and are invoked as the role which created the view, much like stored procedures with the "SECURITY DEFINER" option.
+  Views are invoked with the privileges of the view owner, much like stored procedures with the "SECURITY DEFINER" option. When created by a SUPERUSER role, all row-level security will be bypassed unless a different owner is specified.
 
 .. _fts:
 

From f2e81062a0166728d07aba29032122e9fc72b8c4 Mon Sep 17 00:00:00 2001
From: Kyle Johnson <1007162+kyle-johnson@users.noreply.github.com>
Date: Sun, 23 Sep 2018 11:42:38 -0700
Subject: [PATCH 201/652] Further clarify view RLS interaction

---
 api.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/api.rst b/api.rst
index 08110d422..cac1eea1e 100644
--- a/api.rst
+++ b/api.rst
@@ -100,7 +100,7 @@ The view will provide a new endpoint:
 
 .. important::
 
-  Views are invoked with the privileges of the view owner, much like stored procedures with the "SECURITY DEFINER" option. When created by a SUPERUSER role, all row-level security will be bypassed unless a different owner is specified.
+  Views are invoked with the privileges of the view owner, much like stored procedures with the "SECURITY DEFINER" option. When created by a SUPERUSER role, all row-level security will be bypassed unless a different, non-SUPERUSER owner is specified.
 
 .. _fts:
 

From 89c62aa7e38481004dfd5c8a9a0a5e2457e5ef05 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Mon, 24 Sep 2018 09:09:24 -0500
Subject: [PATCH 202/652] Add a workaround for RLS in views

---
 api.rst | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/api.rst b/api.rst
index cac1eea1e..6d27c0b86 100644
--- a/api.rst
+++ b/api.rst
@@ -100,7 +100,15 @@ The view will provide a new endpoint:
 
 .. important::
 
-  Views are invoked with the privileges of the view owner, much like stored procedures with the "SECURITY DEFINER" option. When created by a SUPERUSER role, all row-level security will be bypassed unless a different, non-SUPERUSER owner is specified.
+  Views are invoked with the privileges of the view owner, much like stored procedures with the ``SECURITY DEFINER`` option. When created by a SUPERUSER role, all `row-level security <https://www.postgresql.org/docs/current/static/ddl-rowsecurity.html>`_ will be bypassed unless a different, non-SUPERUSER owner is specified.
+
+  .. code-block:: postgres
+
+    -- Workaround:
+    -- non-SUPERUSER role to be used as the owner of the views
+    CREATE ROLE api_views_owner;
+    -- alter the view owner so RLS can work normally
+    ALTER VIEW sample_view OWNER TO api_views_owner;
 
 .. _fts:
 

From 215bc80ff128caa091ad3b1007e59483fd5efddf Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Steve=20Ch=C3=A1vez?= <stevechavezast@gmail.com>
Date: Sun, 21 Oct 2018 17:54:21 -0500
Subject: [PATCH 203/652] Move intro to index and add shields (#184)

* Add supporting development section
---
 _static/css/custom.css |   4 +
 index.rst              | 196 +++++++++++++++++++++++++++++++++++++++--
 intro.rst              | 155 --------------------------------
 3 files changed, 194 insertions(+), 161 deletions(-)
 delete mode 100644 intro.rst

diff --git a/_static/css/custom.css b/_static/css/custom.css
index 75207887c..588d99d4c 100644
--- a/_static/css/custom.css
+++ b/_static/css/custom.css
@@ -5,3 +5,7 @@ div.wy-menu.rst-pro {
 div.highlight {
   background: #fff !important;
 }
+
+div.line-block {
+  margin-bottom: 0px !important;
+}
diff --git a/index.rst b/index.rst
index c59042d72..32e5a4224 100644
--- a/index.rst
+++ b/index.rst
@@ -1,37 +1,221 @@
 .. title:: PostgREST Documentation
 
-.. image:: _static/logo.png
+.. figure:: _static/logo.png
 
-.. toctree::
-   :maxdepth: 2
+.. image:: https://img.shields.io/github/stars/postgrest/postgrest.svg?style=social
+  :target: https://github.com/PostgREST/postgrest
 
-.. toctree::
-   :caption: What is PostgREST?
+.. image:: https://img.shields.io/github/release/PostgREST/postgrest.svg
+  :target: https://github.com/PostgREST/postgrest/releases
 
-   intro.rst
+.. image:: https://img.shields.io/docker/pulls/postgrest/postgrest.svg
+  :target: https://hub.docker.com/r/postgrest/postgrest/
+
+.. image:: https://img.shields.io/badge/gitter-join%20chat%20%E2%86%92-brightgreen.svg
+  :target: https://gitter.im/begriffs/postgrest
+
+.. image:: https://img.shields.io/badge/Donate-Patreon-orange.svg?colorB=F96854
+  :target: https://www.patreon.com/postgrest
+
+.. image:: https://img.shields.io/badge/Donate-PayPal-green.svg
+  :target: https://www.paypal.me/postgrest
+
+|
+PostgREST is a standalone web server that turns your PostgreSQL database directly into a RESTful API. The structural constraints and permissions in the database determine the API endpoints and operations.
+
+Motivation
+----------
+
+Using PostgREST is an alternative to manual CRUD programming. Custom API servers suffer problems. Writing business logic often duplicates, ignores or hobbles database structure. Object-relational mapping is a leaky abstraction leading to slow imperative code. The PostgREST philosophy establishes a single declarative source of truth: the data itself.
+
+Declarative Programming
+-----------------------
+
+It's easier to ask PostgreSQL to join data for you and let its query planner figure out the details than to loop through rows yourself. It's easier to assign permissions to db objects than to add guards in controllers. (This is especially true for cascading permissions in data dependencies.) It's easier to set constraints than to litter code with sanity checks.
+
+Leak-proof Abstraction
+----------------------
+
+There is no ORM involved. Creating new views happens in SQL with known performance implications. A database administrator can now create an API from scratch with no custom programming.
+
+Embracing the Relational Model
+------------------------------
+
+In 1970 E. F. Codd criticized the then-dominant hierarchical model of databases in his article A Relational Model of Data for Large Shared Data Banks. Reading the article reveals a striking similarity between hierarchical databases and nested http routes. With PostgREST we attempt to use flexible filtering and embedding rather than nested routes.
+
+One Thing Well
+--------------
+
+PostgREST has a focused scope. It works well with other tools like Nginx. This forces you to cleanly separate the data-centric CRUD operations from other concerns. Use a collection of sharp tools rather than building a big ball of mud.
+
+Shared Improvements
+-------------------
+
+As with any open source project, we all gain from features and fixes in the tool. It's more beneficial than improvements locked inextricably within custom code-bases.
+
+Getting Support
+----------------
+
+The project has a friendly and growing community. Join our `chat room <https://gitter.im/begriffs/postgrest>`_ for discussion and help. You can also report or search for bugs/features on the Github `issues <https://github.com/begriffs/postgrest/issues>`_ page.
+
+Supporting development
+----------------------
+
+You can help PostgREST ongoing maintenance and development by:
+
+- Making a regular donation through `Patreon <https://www.patreon.com/postgrest>`_
+
+- Alternatively, you can make a one-time donation via `Paypal <https://www.paypal.me/postgrest>`_
+
+Every donation will be spent on making PostgREST better for the whole community.
 
 .. toctree::
    :caption: Tutorials
+   :titlesonly:
 
    tutorials/tut0.rst
    tutorials/tut1.rst
 
 .. toctree::
    :caption: Installation
+   :titlesonly:
 
    install.rst
 
 .. toctree::
    :caption: API
+   :titlesonly:
 
    api.rst
 
 .. toctree::
    :caption: Authentication
+   :titlesonly:
 
    auth.rst
 
 .. toctree::
    :caption: Administration
+   :titlesonly:
 
    admin.rst
+
+Ecosystem
+---------
+
+PostgREST has a growing ecosystem of examples, and libraries, experiments, and users. Here is a selection.
+
+Example Apps
+------------
+
+* `subzerocloud/postgrest-starter-kit <https://github.com/subzerocloud/postgrest-starter-kit>`_ - Boilerplate for new project
+* `NikolayS/postgrest-google-translate <https://github.com/NikolayS/postgrest-google-translate>`_ - Calling to external translation service
+* `CodeforAustralia/heritage-near-me <https://github.com/CodeforAustralia/heritage-near-me>`_ - Elm and PostgREST with PostGIS
+* `timwis/handsontable-postgrest <https://github.com/timwis/handsontable-postgrest>`_ - An excel-like database table editor
+* `Recmo/PostgrestSkeleton <https://github.com/Recmo/PostgrestSkeleton>`_ - Docker Compose, PostgREST, Nginx and Auth0
+* `benoror/ember-postgrest-dynamic-ui <https://github.com/benoror/ember-postgrest-dynamic-ui>`_ - generating Ember forms to edit data
+* `ruslantalpa/blogdemo <https://github.com/ruslantalpa/blogdemo>`_ - blog api demo in a vagrant image
+* `timwis/ext-postgrest-crud <https://github.com/timwis/ext-postgrest-crud>`_ - browser-based spreadsheet
+* `srid/chronicle <https://github.com/srid/chronicle>`_ - tracking a tree of personal memories
+* `diogob/elm-workshop <https://github.com/diogob/elm-workshop>`_ - building a simple database query UI
+* `marmelab/ng-admin-postgrest <https://github.com/marmelab/ng-admin-postgrest>`_ - automatic database admin panel
+* `myfreeweb/moneylog <https://github.com/myfreeweb/moneylog>`_ - accounting web app in Polymer + PostgREST
+* `tyrchen/goodfilm <https://github.com/tyrchen/goodfilm>`_ - example film api
+* `begriffs/postgrest-example <https://github.com/begriffs/postgrest-example>`_ - sqitch versioning for API
+* `SMRxT/postgrest-demo <https://github.com/SMRxT/postgrest-demo>`_ - multi-tenant logging system
+* `PierreRochard/postgrest-boilerplate <https://github.com/PierreRochard/postgrest-boilerplate>`_ - example auth back-end
+
+
+.. _clientside_libraries:
+
+Client-Side Libraries
+---------------------
+
+* `tomberek/aor-postgrest-client <https://github.com/tomberek/aor-postgrest-client>`_ - JS, admin-on-rest
+* `hugomrdias/postgrest-url <https://github.com/hugomrdias/postgrest-url>`_ - JS, just for generating query URLs
+* `john-kelly/elm-postgrest <https://github.com/john-kelly/elm-postgrest>`_ - Elm
+* `mithril.postgrest <https://github.com/catarse/mithril.postgrest>`_ - JS, Mithril
+* `lewisjared/postgrest-request <https://github.com/lewisjared/postgrest-request>`_ - JS, SuperAgent
+* `JarvusInnovations/jarvus-postgrest-apikit <https://github.com/JarvusInnovations/jarvus-postgrest-apikit>`_ - JS, Sencha framework
+* `davidthewatson/postgrest_python_requests_client <https://github.com/davidthewatson/postgrest_python_requests_client>`_ - Python
+* `calebmer/postgrest-client <https://github.com/calebmer/postgrest-client>`_ - JS
+* `clesiemo3/postgrestR <https://github.com/clesiemo3/postgrestR>`_ - R
+* `PierreRochard/postgrest-angular <https://github.com/PierreRochard/postgrest-angular>`_ - TypeScript, generate UI from API description
+* `thejettdurham/postgrest-sharp-client <https://github.com/thejettdurham/postgrest-sharp-client>`_ (needs maintainer) - C#, RestSharp
+* `team142/ng-postgrest <https://github.com/team142/ng-postgrest>`_ - Angular app for browsing, editing data exposed over Postgrest.
+
+External Notification
+---------------------
+
+These are PostgreSQL bridges that propagate LISTEN/NOTIFY to external queues for further processing. This allows stored procedures to initiate actions outside the database such as sending emails.
+
+* `diogob/postgres-websockets <https://github.com/diogob/postgres-websockets>`_ - expose web sockets for PostgreSQL's LISTEN/NOTIFY
+* `frafra/postgresql2websocket <https://github.com/frafra/postgresql2websocket>`_ - Websockets
+* `matthewmueller/pg-bridge <https://github.com/matthewmueller/pg-bridge>`_ - Amazon SNS
+* `aweber/pgsql-listen-exchange <https://github.com/aweber/pgsql-listen-exchange>`_ - RabbitMQ
+* `SpiderOak/skeeter <https://github.com/SpiderOak/skeeter>`_ - ZeroMQ
+* `FGRibreau/postgresql-to-amqp <https://github.com/FGRibreau/postgresql-to-amqp>`_ - AMQP
+* `daurnimator/pg-kinesis-bridge <https://github.com/daurnimator/pg-kinesis-bridge>`_ - Amazon Kinesis
+
+Extensions
+----------
+
+* `pg-safeupdate <https://bitbucket.org/eradman/pg-safeupdate/>`_ - Prevent full-table updates or deletes
+* `srid/spas <https://github.com/srid/spas>`_ - allow file uploads and basic auth
+* `svmnotn/postgrest-auth <https://github.com/svmnotn/postgrest-auth>`_ - OAuth2-inspired external auth server
+* `wildsurfer/postgrest-oauth-server <https://github.com/wildsurfer/postgrest-oauth-server>`_ - OAuth2 server
+* `nblumoe/postgrest-oauth <https://github.com/nblumoe/postgrest-oauth>`_ - OAuth2 WAI middleware
+* `criles25/postgrest-auth <https://github.com/criles25/postgrest-auth>`_ - email based auth/signup
+* `ppKrauss/PostgREST-writeAPI <https://github.com/ppKrauss/PostgREST-writeAPI>`_ - generate Nginx rewrite rules to fit an OpenAPI spec
+
+Commercial
+---------------
+
+* `subZero <https://subzero.cloud/>`_ - Automated GraphQL & REST API with built-in caching (powered in part by PostgREST)
+
+In Production
+-------------
+
+* `triggerFS - A realtime messaging and distributed trigger system <https://triggerfs.io/>`_
+* `Moat <https://moat.com/>`_
+* `Catarse <https://www.catarse.me/>`_
+* `Redsmin <https://www.redsmin.com/>`_
+* `Image-charts <https://image-charts.com/>`_
+* `MotionDynamic - Fast highly dynamic video generation at scale <https://api.motiondynamic.tech/>`_
+* `Drip Depot <https://www.dripdepot.com/>`_
+* `OpenBooking <http://openbooking.ch>`_
+* `Convene <https://info.convene.thomsonreuters.com/en.html>`_ by Thomson-Reuters
+* `eGull <http://www.egull.co>`_
+* `Elyios <https://elyios.com>`_
+
+Testimonials
+------------
+
+  "It's so fast to develop, it feels like cheating!"
+
+  -- François-G. Ribreau
+
+  "I just have to say that, the CPU/Memory usage compared to our
+  Node.js/Waterline ORM based API is ridiculous.  It's hard to even push
+  it over 60/70 MB while our current API constantly hits 1GB running on 6
+  instances (dynos)."
+
+  -- Louis Brauer
+
+  "I really enjoyed the fact that all of a sudden I was writing
+  microservices in SQL DDL (and v8 javascript functions). I dodged so
+  much boilerplate. The next thing I knew, we pulled out a full rewrite
+  of a Spring+MySQL legacy app in 6 months. Literally 10x faster, and
+  code was super concise. The old one took 3 years and a team of 4
+  people to develop."
+
+  -- Simone Scarduzio
+
+  "I like the fact that PostgREST does one thing, and one thing well.
+  While PostgREST takes care of bridging the gap between our HTTP server
+  and PostgreSQL database, we can focus on the development of our API in
+  a single language: SQL. This puts the database in the center of our
+  architecture, and pushed us to improve our skills in SQL programming
+  and database design."
+
+  -- Eric Bréchemier, Data Engineer, eGull SAS
diff --git a/intro.rst b/intro.rst
deleted file mode 100644
index 20ac02739..000000000
--- a/intro.rst
+++ /dev/null
@@ -1,155 +0,0 @@
-Motivation
-##########
-
-PostgREST is a standalone web server that turns your PostgreSQL database directly into a RESTful API. The structural constraints and permissions in the database determine the API endpoints and operations.
-
-Using PostgREST is an alternative to manual CRUD programming. Custom API servers suffer problems. Writing business logic often duplicates, ignores or hobbles database structure. Object-relational mapping is a leaky abstraction leading to slow imperative code. The PostgREST philosophy establishes a single declarative source of truth: the data itself.
-
-Declarative Programming
------------------------
-
-It's easier to ask PostgreSQL to join data for you and let its query planner figure out the details than to loop through rows yourself. It's easier to assign permissions to db objects than to add guards in controllers. (This is especially true for cascading permissions in data dependencies.) It's easier to set constraints than to litter code with sanity checks.
-
-Leak-proof Abstraction
-----------------------
-
-There is no ORM involved. Creating new views happens in SQL with known performance implications. A database administrator can now create an API from scratch with no custom programming.
-
-Embracing the Relational Model
-------------------------------
-
-In 1970 E. F. Codd criticized the then-dominant hierarchical model of databases in his article A Relational Model of Data for Large Shared Data Banks. Reading the article reveals a striking similarity between hierarchical databases and nested http routes. With PostgREST we attempt to use flexible filtering and embedding rather than nested routes.
-
-One Thing Well
---------------
-
-PostgREST has a focused scope. It works well with other tools like Nginx. This forces you to cleanly separate the data-centric CRUD operations from other concerns. Use a collection of sharp tools rather than building a big ball of mud.
-
-Shared Improvements
--------------------
-
-As with any open source project, we all gain from features and fixes in the tool. It's more beneficial than improvements locked inextricably within custom code-bases.
-
-Ecosystem
-#########
-
-PostgREST has a growing ecosystem of examples, and libraries, experiments, and users. Here is a selection.
-
-.. _clientside_libraries:
-
-Client-Side Libraries
----------------------
-
-* `tomberek/aor-postgrest-client <https://github.com/tomberek/aor-postgrest-client>`_ - JS, admin-on-rest
-* `hugomrdias/postgrest-url <https://github.com/hugomrdias/postgrest-url>`_ - JS, just for generating query URLs
-* `john-kelly/elm-postgrest <https://github.com/john-kelly/elm-postgrest>`_ - Elm
-* `mithril.postgrest <https://github.com/catarse/mithril.postgrest>`_ - JS, Mithril
-* `lewisjared/postgrest-request <https://github.com/lewisjared/postgrest-request>`_ - JS, SuperAgent
-* `JarvusInnovations/jarvus-postgrest-apikit <https://github.com/JarvusInnovations/jarvus-postgrest-apikit>`_ - JS, Sencha framework
-* `davidthewatson/postgrest_python_requests_client <https://github.com/davidthewatson/postgrest_python_requests_client>`_ - Python
-* `calebmer/postgrest-client <https://github.com/calebmer/postgrest-client>`_ - JS
-* `clesiemo3/postgrestR <https://github.com/clesiemo3/postgrestR>`_ - R
-* `PierreRochard/postgrest-angular <https://github.com/PierreRochard/postgrest-angular>`_ - TypeScript, generate UI from API description
-* `thejettdurham/postgrest-sharp-client <https://github.com/thejettdurham/postgrest-sharp-client>`_ (needs maintainer) - C#, RestSharp
-* `team142/ng-postgrest <https://github.com/team142/ng-postgrest>`_ - Angular app for browsing, editing data exposed over Postgrest.
-
-External Notification
----------------------
-
-These are PostgreSQL bridges that propagate LISTEN/NOTIFY to external queues for further processing. This allows stored procedures to initiate actions outside the database such as sending emails.
-
-* `diogob/postgres-websockets <https://github.com/diogob/postgres-websockets>`_ - expose web sockets for PostgreSQL's LISTEN/NOTIFY
-* `frafra/postgresql2websocket <https://github.com/frafra/postgresql2websocket>`_ - Websockets
-* `matthewmueller/pg-bridge <https://github.com/matthewmueller/pg-bridge>`_ - Amazon SNS
-* `aweber/pgsql-listen-exchange <https://github.com/aweber/pgsql-listen-exchange>`_ - RabbitMQ
-* `SpiderOak/skeeter <https://github.com/SpiderOak/skeeter>`_ - ZeroMQ
-* `FGRibreau/postgresql-to-amqp <https://github.com/FGRibreau/postgresql-to-amqp>`_ - AMQP
-* `daurnimator/pg-kinesis-bridge <https://github.com/daurnimator/pg-kinesis-bridge>`_ - Amazon Kinesis
-
-Example Apps
-------------
-
-* `subzerocloud/postgrest-starter-kit <https://github.com/subzerocloud/postgrest-starter-kit>`_ - Boilerplate for new project
-* `NikolayS/postgrest-google-translate <https://github.com/NikolayS/postgrest-google-translate>`_ - Calling to external translation service
-* `CodeforAustralia/heritage-near-me <https://github.com/CodeforAustralia/heritage-near-me>`_ - Elm and PostgREST with PostGIS
-* `timwis/handsontable-postgrest <https://github.com/timwis/handsontable-postgrest>`_ - An excel-like database table editor
-* `Recmo/PostgrestSkeleton <https://github.com/Recmo/PostgrestSkeleton>`_ - Docker Compose, PostgREST, Nginx and Auth0
-* `benoror/ember-postgrest-dynamic-ui <https://github.com/benoror/ember-postgrest-dynamic-ui>`_ - generating Ember forms to edit data
-* `ruslantalpa/blogdemo <https://github.com/ruslantalpa/blogdemo>`_ - blog api demo in a vagrant image
-* `timwis/ext-postgrest-crud <https://github.com/timwis/ext-postgrest-crud>`_ - browser-based spreadsheet
-* `srid/chronicle <https://github.com/srid/chronicle>`_ - tracking a tree of personal memories
-* `diogob/elm-workshop <https://github.com/diogob/elm-workshop>`_ - building a simple database query UI
-* `marmelab/ng-admin-postgrest <https://github.com/marmelab/ng-admin-postgrest>`_ - automatic database admin panel
-* `myfreeweb/moneylog <https://github.com/myfreeweb/moneylog>`_ - accounting web app in Polymer + PostgREST
-* `tyrchen/goodfilm <https://github.com/tyrchen/goodfilm>`_ - example film api
-* `begriffs/postgrest-example <https://github.com/begriffs/postgrest-example>`_ - sqitch versioning for API
-* `SMRxT/postgrest-demo <https://github.com/SMRxT/postgrest-demo>`_ - multi-tenant logging system
-* `PierreRochard/postgrest-boilerplate <https://github.com/PierreRochard/postgrest-boilerplate>`_ - example auth back-end
-
-In Production
--------------
-
-* `triggerFS - A realtime messaging and distributed trigger system <https://triggerfs.io/>`_
-* `Moat <https://moat.com/>`_
-* `Catarse <https://www.catarse.me/>`_
-* `Redsmin <https://www.redsmin.com/>`_
-* `Image-charts <https://image-charts.com/>`_
-* `MotionDynamic - Fast highly dynamic video generation at scale <https://api.motiondynamic.tech/>`_
-* `Drip Depot <https://www.dripdepot.com/>`_
-* `OpenBooking <http://openbooking.ch>`_
-* `Convene <https://info.convene.thomsonreuters.com/en.html>`_ by Thomson-Reuters
-* `eGull <http://www.egull.co>`_
-* `Elyios <https://elyios.com>`_
-
-Extensions
-----------
-
-* `pg-safeupdate <https://bitbucket.org/eradman/pg-safeupdate/>`_ - Prevent full-table updates or deletes
-* `srid/spas <https://github.com/srid/spas>`_ - allow file uploads and basic auth
-* `svmnotn/postgrest-auth <https://github.com/svmnotn/postgrest-auth>`_ - OAuth2-inspired external auth server
-* `wildsurfer/postgrest-oauth-server <https://github.com/wildsurfer/postgrest-oauth-server>`_ - OAuth2 server
-* `nblumoe/postgrest-oauth <https://github.com/nblumoe/postgrest-oauth>`_ - OAuth2 WAI middleware
-* `criles25/postgrest-auth <https://github.com/criles25/postgrest-auth>`_ - email based auth/signup
-* `ppKrauss/PostgREST-writeAPI <https://github.com/ppKrauss/PostgREST-writeAPI>`_ - generate Nginx rewrite rules to fit an OpenAPI spec
-
-Commercial
----------------
-
-* `subZero <https://subzero.cloud/>`_ - Automated GraphQL & REST API with built-in caching (powered in part by PostgREST)
-
-Testimonials
-############
-
-  "It's so fast to develop, it feels like cheating!"
-
-  -- François-G. Ribreau
-
-  "I just have to say that, the CPU/Memory usage compared to our
-  Node.js/Waterline ORM based API is ridiculous.  It's hard to even push
-  it over 60/70 MB while our current API constantly hits 1GB running on 6
-  instances (dynos)."
-
-  -- Louis Brauer
-
-  "I really enjoyed the fact that all of a sudden I was writing
-  microservices in SQL DDL (and v8 javascript functions). I dodged so
-  much boilerplate. The next thing I knew, we pulled out a full rewrite
-  of a Spring+MySQL legacy app in 6 months. Literally 10x faster, and
-  code was super concise. The old one took 3 years and a team of 4
-  people to develop."
-
-  -- Simone Scarduzio
-
-  "I like the fact that PostgREST does one thing, and one thing well.
-  While PostgREST takes care of bridging the gap between our HTTP server
-  and PostgreSQL database, we can focus on the development of our API in
-  a single language: SQL. This puts the database in the center of our
-  architecture, and pushed us to improve our skills in SQL programming
-  and database design."
-
-  -- Eric Bréchemier, Data Engineer, eGull SAS
-
-Getting Support
-################
-
-The project has a friendly and growing community. Join our `chat room <https://gitter.im/begriffs/postgrest>`_ for discussion and help. You can also report or search for bugs/features on the Github `issues <https://github.com/begriffs/postgrest/issues>`_ page.

From 9475f53fd73da8e1c1a4816292e0308ad273e6c0 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Thu, 8 Nov 2018 10:42:51 -0500
Subject: [PATCH 204/652] Clarify important note about SIGHUP

---
 admin.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/admin.rst b/admin.rst
index 79585a395..f8bfd1a95 100644
--- a/admin.rst
+++ b/admin.rst
@@ -219,7 +219,7 @@ Now, whenever the structure of the database schema changes, PostgreSQL will noti
 
 .. important::
 
-  As of PostgREST v5.1 reloading with SIGHUP is deprecated, it's still supported but will be removed in v6.0
+  As of PostgREST v5.1 reloading with SIGHUP is deprecated, it's still supported but will be removed in v6.0. SIGUSR1 should be used instead.
 
 Daemonizing
 ===========

From 6d1adaaa54c47029624f5d3a707eef5d4dd4c960 Mon Sep 17 00:00:00 2001
From: Russell Davies <russell@zeroflux.net>
Date: Wed, 14 Nov 2018 13:09:16 +0000
Subject: [PATCH 205/652] Clarify config and auth sections on JWKS.

See PostgREST/postgrest#1205.
---
 auth.rst    | 6 +++++-
 install.rst | 2 +-
 2 files changed, 6 insertions(+), 2 deletions(-)

diff --git a/auth.rst b/auth.rst
index ee254594a..a0ddc2ee5 100644
--- a/auth.rst
+++ b/auth.rst
@@ -239,7 +239,7 @@ Our code requires a database role in the JWT. To add it you need to save the dat
 Asymmetric Keys
 ~~~~~~~~~~~~~~~
 
-As described in the :ref:`configuration` section, PostgREST accepts a ``jwt-secret`` config file parameter. If it is set to a simple string value like "reallyreallyreallyreallyverysafe" then PostgREST interprets it as an HMAC-SHA256 passphrase. However you can also specify a literal JWT key JSON value. For example, you can use an RSA-256 public key such as:
+As described in the :ref:`configuration` section, PostgREST accepts a ``jwt-secret`` config file parameter. If it is set to a simple string value like "reallyreallyreallyreallyverysafe" then PostgREST interprets it as an HMAC-SHA256 passphrase. However you can also specify a literal JSON Web Key (JWK) or set. For example, you can use an RSA-256 public key encoded as a JWK:
 
 .. code-block:: json
 
@@ -251,6 +251,10 @@ As described in the :ref:`configuration` section, PostgREST accepts a ``jwt-secr
     "n":"9zKNYTaYGfGm1tBMpRT6FxOYrM720GhXdettc02uyakYSEHU2IJz90G_MLlEl4-WWWYoS_QKFupw3s7aPYlaAjamG22rAnvWu-rRkP5sSSkKvud_IgKL4iE6Y2WJx2Bkl1XUFkdZ8wlEUR6O1ft3TS4uA-qKifSZ43CahzAJyUezOH9shI--tirC028lNg767ldEki3WnVr3zokSujC9YJ_9XXjw2hFBfmJUrNb0-wldvxQbFU8RPXip-GQ_JPTrCTZhrzGFeWPvhA6Rqmc3b1PhM9jY7Dur1sjYWYVyXlFNCK3c-6feo5WlRfe1aCWmwZQh6O18eTmLeT4nWYkDzQ"
   }
 
+.. note::
+
+  This could also be a JSON Web Key Set (JWKS) if it was contained within an array assigned to a `keys` member, e.g. ``{ keys: [jwk1, jwk2] }``.
+
 Just pass it in as a single line string, escaping the quotes:
 
 .. code-block:: ini
diff --git a/install.rst b/install.rst
index 3b7a23fd0..e641340f4 100644
--- a/install.rst
+++ b/install.rst
@@ -167,7 +167,7 @@ server-proxy-uri
 jwt-secret
 ----------
 
-  The secret or `JSON Web Key (JWK) <https://tools.ietf.org/html/rfc7517>`_ used to decode JWT tokens clients provide for authentication. For security the key must be **at least 32 characters long**. If this parameter is not specified then PostgREST refuses authentication requests. Choosing a value for this parameter beginning with the at sign such as :code:`@filename` loads the secret out of an external file. This is useful for automating deployments. Note that any binary secrets must be base64 encoded. Both symmetric and asymmetric cryptography are supported. For more info see :ref:`asym_keys`.
+  The secret or `JSON Web Key (JWK) (or set) <https://tools.ietf.org/html/rfc7517>`_ used to decode JWT tokens clients provide for authentication. For security the key must be **at least 32 characters long**. If this parameter is not specified then PostgREST refuses authentication requests. Choosing a value for this parameter beginning with the at sign such as :code:`@filename` loads the secret out of an external file. This is useful for automating deployments. Note that any binary secrets must be base64 encoded. Both symmetric and asymmetric cryptography are supported. For more info see :ref:`asym_keys`.
 
 .. _jwt-aud:
 

From eb81bbc464b14fb0a71bd6b12ece3884a1a4136d Mon Sep 17 00:00:00 2001
From: Lee Johnson <lee@flightoffice.com>
Date: Fri, 16 Nov 2018 21:50:39 -0500
Subject: [PATCH 206/652] Update to include Heroku deploy steps

---
 install.rst | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/install.rst b/install.rst
index e641340f4..ee1c05f89 100644
--- a/install.rst
+++ b/install.rst
@@ -336,6 +336,19 @@ If you want to have a visual overview of your API in your browser you can add sw
 
 With this you can see the swagger-ui in your browser on port 8080.
 
+Deploying to Heroku
+===================
+Assuming your making modifications locally and then pushing to GitHub, it's easy to deploy to Heroku.
+ 
+1. Create a new app on Heroku
+2. In Settings add the following buildpack :code:`https://github.com/PostgREST/postgrest-heroku`
+3. Add the require Config Vars in Heroku (see above)
+4. Modify your postgres.conf file as required to match your Config Vars in Heroku
+5. Create your :code:`Procfile` and add :code:`./env-to-config ./postgrest postgres.conf`
+6. Push your changes to GitHub
+7. Set Heroku to automatically deploy from Master and then manually deploy the branch for the first build
+
+
 .. _build_source:
 
 Build from Source

From fed4c8c9af4aed652f94e8e7c7fea6cb808d2154 Mon Sep 17 00:00:00 2001
From: Lee Johnson <lee@flightoffice.com>
Date: Thu, 22 Nov 2018 14:19:34 -0500
Subject: [PATCH 207/652] Added link to variables settings

---
 install.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install.rst b/install.rst
index ee1c05f89..56545bda0 100644
--- a/install.rst
+++ b/install.rst
@@ -342,7 +342,7 @@ Assuming your making modifications locally and then pushing to GitHub, it's easy
  
 1. Create a new app on Heroku
 2. In Settings add the following buildpack :code:`https://github.com/PostgREST/postgrest-heroku`
-3. Add the require Config Vars in Heroku (see above)
+3. Add the require Config Vars in Heroku (see https://github.com/PostgREST/postgrest/blob/master/app.json#L7-L57 for more details)
 4. Modify your postgres.conf file as required to match your Config Vars in Heroku
 5. Create your :code:`Procfile` and add :code:`./env-to-config ./postgrest postgres.conf`
 6. Push your changes to GitHub

From 3220373803c68c85dd702f04af46db2d9cf3cbcf Mon Sep 17 00:00:00 2001
From: Lee Johnson <lee@flightoffice.com>
Date: Thu, 22 Nov 2018 14:34:47 -0500
Subject: [PATCH 208/652] renamed to postgrest.conf

---
 install.rst | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/install.rst b/install.rst
index 56545bda0..64bd48885 100644
--- a/install.rst
+++ b/install.rst
@@ -343,8 +343,8 @@ Assuming your making modifications locally and then pushing to GitHub, it's easy
 1. Create a new app on Heroku
 2. In Settings add the following buildpack :code:`https://github.com/PostgREST/postgrest-heroku`
 3. Add the require Config Vars in Heroku (see https://github.com/PostgREST/postgrest/blob/master/app.json#L7-L57 for more details)
-4. Modify your postgres.conf file as required to match your Config Vars in Heroku
-5. Create your :code:`Procfile` and add :code:`./env-to-config ./postgrest postgres.conf`
+4. Modify your postgrest.conf file as required to match your Config Vars in Heroku
+5. Create your :code:`Procfile` and add :code:`./env-to-config ./postgrest postgrest.conf`
 6. Push your changes to GitHub
 7. Set Heroku to automatically deploy from Master and then manually deploy the branch for the first build
 

From 93c3c59134b3b597e33c02dfc85dcde13bf3ab34 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Mon, 31 Dec 2018 21:46:25 -0500
Subject: [PATCH 209/652] Fix #190, Add option for db-uri from file

---
 install.rst | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/install.rst b/install.rst
index 64bd48885..aab99d31a 100644
--- a/install.rst
+++ b/install.rst
@@ -98,6 +98,8 @@ db-uri
 
   On older systems like Centos 6, with older versions of libpq, a different db-uri syntax has to be used. In this case the URI is a string of space separated key-value pairs (key=value), so the example above would be :code:`"host=host user=user port=5432 dbname=dbname password=pass"`.
 
+  Choosing a value for this parameter beginning with the at sign such as ``@filename`` (e.g. ``@./configs/my-config``) loads the secret out of an external file.
+
 .. _db-schema:
 
 db-schema

From 702e055d435bd443eb78b45cf1e23d99caa371e9 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Tue, 1 Jan 2019 01:38:20 -0500
Subject: [PATCH 210/652] Fix #191, Add db-extra-search-path config

---
 install.rst | 48 +++++++++++++++++++++++++++++-------------------
 1 file changed, 29 insertions(+), 19 deletions(-)

diff --git a/install.rst b/install.rst
index aab99d31a..41ef57876 100644
--- a/install.rst
+++ b/install.rst
@@ -68,24 +68,25 @@ The user specified in the db-uri is also known as the authenticator role. For mo
 
 Here is the full list of configuration parameters.
 
-================  ======  =========  ========
-Name              Type    Default    Required
-================  ======  =========  ========
-db-uri            String             Y
-db-schema         String             Y
-db-anon-role      String             Y
-db-pool           Int     10
-server-host       String  127.0.0.1
-server-port       Int     3000
-server-proxy-uri  String
-jwt-secret        String
-jwt-aud           String
-secret-is-base64  Bool    False
-max-rows          Int     ∞
-pre-request       String
-app.settings.*    String
-role-claim-key    String  .role
-================  ======  =========  ========
+====================  ======  =========  ========
+Name                  Type    Default    Required
+====================  ======  =========  ========
+db-uri                String             Y
+db-schema             String             Y
+db-anon-role          String             Y
+db-pool               Int     10
+db-extra-search-path  String  public
+server-host           String  127.0.0.1
+server-port           Int     3000
+server-proxy-uri      String
+jwt-secret            String
+jwt-aud               String
+secret-is-base64      Bool    False
+max-rows              Int     ∞
+pre-request           String
+app.settings.*        String
+role-claim-key        String  .role
+====================  ======  =========  ========
 
 .. _db-uri:
 
@@ -107,6 +108,8 @@ db-schema
 
   The database schema to expose to REST clients. Tables, views and stored procedures in this schema will get API endpoints.
 
+  This schema gets added to the `search_path <https://www.postgresql.org/docs/11/ddl-schemas.html#DDL-SCHEMAS-PATH>`_ of every request.
+
 .. _db-anon-role:
 
 db-anon-role
@@ -121,6 +124,13 @@ db-pool
 
   Number of connections to keep open in PostgREST's database pool. Having enough here for the maximum expected simultaneous client connections can improve performance. Note it's pointless to set this higher than the :code:`max_connections` GUC in your database.
 
+db-extra-search-path
+--------------------
+
+  Extra schemas to add to the `search_path <https://www.postgresql.org/docs/11/ddl-schemas.html#DDL-SCHEMAS-PATH>`_ of every request.
+
+  Multiple schemas can be added in a comma-separated string, e.g. ``public, extensions``.
+
 .. _server-host:
 
 server-host
@@ -341,7 +351,7 @@ With this you can see the swagger-ui in your browser on port 8080.
 Deploying to Heroku
 ===================
 Assuming your making modifications locally and then pushing to GitHub, it's easy to deploy to Heroku.
- 
+
 1. Create a new app on Heroku
 2. In Settings add the following buildpack :code:`https://github.com/PostgREST/postgrest-heroku`
 3. Add the require Config Vars in Heroku (see https://github.com/PostgREST/postgrest/blob/master/app.json#L7-L57 for more details)

From a163828c6ca2eaa53b09ad5e3b691daf7577d2af Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Tue, 1 Jan 2019 17:20:01 -0500
Subject: [PATCH 211/652] Fix #192, Add section for quoting filters.

Also reorder the Unicode Support section.
---
 api.rst | 52 +++++++++++++++++++++++++++++++++++-----------------
 1 file changed, 35 insertions(+), 17 deletions(-)

diff --git a/api.rst b/api.rst
index 6d27c0b86..566552f15 100644
--- a/api.rst
+++ b/api.rst
@@ -232,6 +232,41 @@ As mentioned, computed columns do not appear in the output by default. However y
 
   Computed columns must be created under the :ref:`exposed schema <db-schema>` to be used in this way.
 
+Unicode support
+---------------
+
+PostgREST supports unicode in schemas, tables, columns and values. To access a table with unicode name, use percent encoding.
+
+To request this:
+
+.. code-block:: http
+
+  GET /موارد HTTP/1.1
+
+Do this:
+
+.. code-block:: http
+
+  GET /%D9%85%D9%88%D8%A7%D8%B1%D8%AF HTTP/1.1
+
+Reserved characters
+~~~~~~~~~~~~~~~~~~~
+
+If filters include PostgREST reserved characters(``,``, ``.``, ``:``, ``()``) you'll have to surround them in percent encoded double quotes ``%22`` for correct processing.
+
+Here ``Hebdon,John`` and ``Williams,Mary`` are values.
+
+.. code-block:: http
+
+  GET /employees?name=in.(%22Hebdon,John%22,%22Williams,Mary%22) HTTP/1.1
+
+Here ``information.cpe`` is a column name.
+
+.. code-block:: http
+
+  GET /vulnerabilities?%22information.cpe%22=like.*MS* HTTP/1.1
+
+
 Ordering
 --------
 
@@ -419,23 +454,6 @@ If the stored procedure returns non-scalar values, you need to do a :code:`selec
 
   If more than one row would be returned the binary results will be concatenated with no delimiter.
 
-Unicode Support
-===============
-
-PostgREST supports unicode in schemas, tables, columns and values. To access a table with unicode name, use percent encoding.
-
-To request this:
-
-.. code-block:: html
-
-  http://localhost:3000/موارد
-
-Do this:
-
-.. code-block:: html
-
-  http://localhost:3000/%D9%85%D9%88%D8%A7%D8%B1%D8%AF
-
 .. _resource_embedding:
 
 Resource Embedding

From ff74567473b723bae2bbdac26670c666b6dc4640 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Wed, 2 Jan 2019 13:17:31 -0500
Subject: [PATCH 212/652] Fix #145, add authenticator role to tutorials

---
 tutorials/tut0.rst | 15 +++++++++++----
 tutorials/tut1.rst |  2 +-
 2 files changed, 12 insertions(+), 5 deletions(-)

diff --git a/tutorials/tut0.rst b/tutorials/tut0.rst
index dea41538c..c42a396fd 100644
--- a/tutorials/tut0.rst
+++ b/tutorials/tut0.rst
@@ -93,8 +93,8 @@ If everything is working correctly it will print out its version and information
     </details>
     <details>
       <summary>Windows</summary>
-        <p>All of the DLL files that are required to run PostgREST are available in the windows installation of PostgreSQL server. 
-        Once installed they are found in the BIN folder, e.g: C:\Program Files\PostgreSQL\10\bin. Add this directory to your PATH 
+        <p>All of the DLL files that are required to run PostgREST are available in the windows installation of PostgreSQL server.
+        Once installed they are found in the BIN folder, e.g: C:\Program Files\PostgreSQL\10\bin. Add this directory to your PATH
         variable. Run the following from an administrative command prompt (adjusting the actual BIN path as necessary of course)
           <pre>setx /m PATH "%PATH%;C:\Program Files\PostgreSQL\10\bin"</pre>
         </p>
@@ -144,13 +144,20 @@ Next make a role to use for anonymous web requests. When a request comes in, Pos
 .. code-block:: postgres
 
   create role web_anon nologin;
-  grant web_anon to postgres;
 
   grant usage on schema api to web_anon;
   grant select on api.todos to web_anon;
 
 The :code:`web_anon` role has permission to access things in the :code:`api` schema, and to read rows in the :code:`todos` table.
 
+It's a good practice to create a dedicated role for connecting to the database, instead of using the highly privileged ``postgres`` role. So we'll do that, name the role ``authenticator`` and also grant him the ability to switch to the ``web_anon`` role :
+
+.. code-block:: postgres
+
+  create role authenticator noinherit login password 'mysecretpassword';
+  grant web_anon to authenticator;
+
+
 Now quit out of psql; it's time to start the API!
 
 .. code-block:: psql
@@ -164,7 +171,7 @@ PostgREST uses a configuration file to tell it how to connect to the database. C
 
 .. code-block:: ini
 
-  db-uri = "postgres://postgres:mysecretpassword@localhost/postgres"
+  db-uri = "postgres://authenticator:mysecretpassword@localhost/postgres"
   db-schema = "api"
   db-anon-role = "web_anon"
 
diff --git a/tutorials/tut1.rst b/tutorials/tut1.rst
index 84e357a38..6abe84698 100644
--- a/tutorials/tut1.rst
+++ b/tutorials/tut1.rst
@@ -16,7 +16,7 @@ The previous tutorial created a :code:`web_anon` role in the database with which
   -- in the previous tutorial
 
   create role todo_user nologin;
-  grant todo_user to postgres;
+  grant todo_user to authenticator;
 
   grant usage on schema api to todo_user;
   grant all on api.todos to todo_user;

From 14cb86d14798f33ac46ea96328c8202c7432181b Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Wed, 2 Jan 2019 13:29:20 -0500
Subject: [PATCH 213/652] Fix #182, change default port of tutorials to 5433

---
 tutorials/tut0.rst | 16 +++-------------
 1 file changed, 3 insertions(+), 13 deletions(-)

diff --git a/tutorials/tut0.rst b/tutorials/tut0.rst
index c42a396fd..e061b4761 100644
--- a/tutorials/tut0.rst
+++ b/tutorials/tut0.rst
@@ -29,21 +29,11 @@ If Docker is not installed, you can get it `here <https://www.docker.com/communi
 
 .. code-block:: bash
 
-  sudo docker run --name tutorial -p 5432:5432 \
+  sudo docker run --name tutorial -p 5433:5432 \
                   -e POSTGRES_PASSWORD=mysecretpassword \
                   -d postgres
 
-This will run the Docker instance as a daemon and expose port 5432 to the host system so that it looks like an ordinary PostgreSQL server to the rest of the system.
-
-.. note::
-
-  If you have a pre-existing PostgreSQL database running on port 5432, you'll get an error like "bind: address already in use". Here's how to fix it:
-
-  .. code-block:: bash
-
-    sudo docker run --name tutorial -p 5433:5432 \
-                    -e POSTGRES_PASSWORD=mysecretpassword \
-                    -d postgres
+This will run the Docker instance as a daemon and expose port 5433 to the host system so that it looks like an ordinary PostgreSQL server to the rest of the system.
 
 Step 3. Install PostgREST
 -------------------------
@@ -171,7 +161,7 @@ PostgREST uses a configuration file to tell it how to connect to the database. C
 
 .. code-block:: ini
 
-  db-uri = "postgres://authenticator:mysecretpassword@localhost/postgres"
+  db-uri = "postgres://authenticator:mysecretpassword@localhost:5433/postgres"
   db-schema = "api"
   db-anon-role = "web_anon"
 

From 24a5a27977ce8b574aa097d90927c2dee832339a Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Thu, 3 Jan 2019 12:17:53 -0500
Subject: [PATCH 214/652] Fix #183, change immediate revocation request to
 PATCH

---
 tutorials/tut1.rst | 12 ++++++++----
 1 file changed, 8 insertions(+), 4 deletions(-)

diff --git a/tutorials/tut1.rst b/tutorials/tut1.rst
index 6abe84698..bcef5e632 100644
--- a/tutorials/tut1.rst
+++ b/tutorials/tut1.rst
@@ -230,13 +230,17 @@ Restart PostgREST for the change to take effect. Next try making a request with
 
   # this request still works
 
-  curl http://localhost:3000/todos \
-       -H "Authorization: Bearer $TOKEN"
+  curl http://localhost:3000/todos -X PATCH \
+       -H "Authorization: Bearer $TOKEN"    \
+       -H "Content-Type: application/json"  \
+       -d '{"done": true}'
 
   # this one is rejected
 
-  curl http://localhost:3000/todos \
-       -H "Authorization: Bearer $WAYWARD_TOKEN"
+  curl http://localhost:3000/todos -X PATCH      \
+       -H "Authorization: Bearer $WAYWARD_TOKEN" \
+       -H "Content-Type: application/json"       \
+       -d '{"task": "AAAHHHH!", "done": false}'
 
 The server responds with 403 Forbidden:
 

From 9e9f913c9eb22c4465d919cbd2bd77b5fd2e4b6e Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Thu, 3 Jan 2019 13:08:57 -0500
Subject: [PATCH 215/652] Fix #150, add example for url encoded payload

---
 api.rst | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/api.rst b/api.rst
index 566552f15..10c82e4dd 100644
--- a/api.rst
+++ b/api.rst
@@ -888,6 +888,15 @@ The response will include a :code:`Location` header describing where to find the
 
 On the other end of the spectrum you can get the full created object back in the response to your request by including the header :code:`Prefer: return=representation`. That way you won't have to make another HTTP call to discover properties that may have been filled in on the server side. You can also apply the standard :ref:`v_filter` to these results.
 
+URL encoded payloads can be posted with ``Content-Type: application/x-www-form-urlencoded``.
+
+.. code-block:: http
+
+  POST /people HTTP/1.1
+  Content-Type: application/x-www-form-urlencoded
+
+  name=John+Doe&age=50&weight=80
+
 .. note::
 
   When inserting a row you must post a JSON object, not quoted JSON.

From 474b8e6426c42952efebeceac44dbb72bee31184 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Thu, 3 Jan 2019 13:36:28 -0500
Subject: [PATCH 216/652] Add chinese translation link

---
 index.rst | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/index.rst b/index.rst
index 32e5a4224..9b4afc945 100644
--- a/index.rst
+++ b/index.rst
@@ -69,6 +69,11 @@ You can help PostgREST ongoing maintenance and development by:
 
 Every donation will be spent on making PostgREST better for the whole community.
 
+Translations
+------------
+
+* `Chinese <http://postgrest.org/zh/latest/>`_ (latest version ``v0.4.2.0``)
+
 .. toctree::
    :caption: Tutorials
    :titlesonly:

From 2dcb5ee746b9180ebde2e86fca957c233e8e6ad2 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Thu, 3 Jan 2019 17:22:23 -0500
Subject: [PATCH 217/652] Fix #180, note about volatility marker

---
 api.rst | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/api.rst b/api.rst
index 10c82e4dd..7d58bea72 100644
--- a/api.rst
+++ b/api.rst
@@ -673,7 +673,11 @@ Immutable and stable functions
 
 Procedures in PostgreSQL marked with :code:`stable` or :code:`immutable` `volatility <https://www.postgresql.org/docs/current/static/xfunc-volatility.html>`_ can only read, not modify, the database and PostgREST executes them in a read-only transaction compatible for read-replicas. Stable and immutable functions can be called with the HTTP GET verb if desired.
 
-Because ``add_them`` is declared IMMUTABLE, we can alternately call the function with a GET request:
+.. note::
+
+  The volatility marker is a promise about the behavior of the function.  PostgreSQL will let you mark a function that modifies the database as ``immutable/stable`` without failure.  However the function will fail when called through PostgREST since it executes it in a read-only transaction.
+
+Because ``add_them`` was declared IMMUTABLE, we can alternately call the function with a GET request:
 
 .. code-block:: http
 

From 4119538ab76b3c991efabb3a16d250e8430dc7bf Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Sun, 6 Jan 2019 18:49:10 -0500
Subject: [PATCH 218/652] Add section for table/columns with spaces

---
 api.rst | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/api.rst b/api.rst
index 7d58bea72..722c79000 100644
--- a/api.rst
+++ b/api.rst
@@ -249,6 +249,19 @@ Do this:
 
   GET /%D9%85%D9%88%D8%A7%D8%B1%D8%AF HTTP/1.1
 
+.. _tabs-cols-w-spaces:
+
+Table / Columns with spaces
+~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+You can request table/columns with spaces in them by percent encoding the spaces with ``%20``:
+
+.. code-block:: http
+
+  GET /Order%20Items?Unit%20Price=lt.200 HTTP/1.1
+
+.. _reserved-chars:
+
 Reserved characters
 ~~~~~~~~~~~~~~~~~~~
 

From 367b259bd46b6fd9978a2c1c7b3308c2eab86889 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Sun, 6 Jan 2019 20:02:32 -0500
Subject: [PATCH 219/652] Further clarify db-extra-search-path

---
 install.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install.rst b/install.rst
index 41ef57876..32a7af31f 100644
--- a/install.rst
+++ b/install.rst
@@ -127,7 +127,7 @@ db-pool
 db-extra-search-path
 --------------------
 
-  Extra schemas to add to the `search_path <https://www.postgresql.org/docs/11/ddl-schemas.html#DDL-SCHEMAS-PATH>`_ of every request.
+  Extra schemas to add to the `search_path <https://www.postgresql.org/docs/11/ddl-schemas.html#DDL-SCHEMAS-PATH>`_ of every request. These schemas tables, views and stored procedures don't get API endpoints, they can only be referred from the database objects exposed in your :ref:`db-schema`.
 
   Multiple schemas can be added in a comma-separated string, e.g. ``public, extensions``.
 

From a106edc5d0396ebffe292aae5f1117fe07380073 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Fri, 4 Jan 2019 00:37:31 -0500
Subject: [PATCH 220/652] Add release notes

---
 index.rst         | 10 +++++++++-
 install.rst       |  2 ++
 release_notes.rst | 32 ++++++++++++++++++++++++++++++++
 3 files changed, 43 insertions(+), 1 deletion(-)
 create mode 100644 release_notes.rst

diff --git a/index.rst b/index.rst
index 9b4afc945..febf87223 100644
--- a/index.rst
+++ b/index.rst
@@ -58,6 +58,8 @@ Getting Support
 
 The project has a friendly and growing community. Join our `chat room <https://gitter.im/begriffs/postgrest>`_ for discussion and help. You can also report or search for bugs/features on the Github `issues <https://github.com/begriffs/postgrest/issues>`_ page.
 
+.. _supporting-dev:
+
 Supporting development
 ----------------------
 
@@ -70,10 +72,16 @@ You can help PostgREST ongoing maintenance and development by:
 Every donation will be spent on making PostgREST better for the whole community.
 
 Translations
-------------
+~~~~~~~~~~~~
 
 * `Chinese <http://postgrest.org/zh/latest/>`_ (latest version ``v0.4.2.0``)
 
+.. toctree::
+   :caption: Release Notes
+   :titlesonly:
+
+   release_notes.rst
+
 .. toctree::
    :caption: Tutorials
    :titlesonly:
diff --git a/install.rst b/install.rst
index 32a7af31f..de4bf4187 100644
--- a/install.rst
+++ b/install.rst
@@ -124,6 +124,8 @@ db-pool
 
   Number of connections to keep open in PostgREST's database pool. Having enough here for the maximum expected simultaneous client connections can improve performance. Note it's pointless to set this higher than the :code:`max_connections` GUC in your database.
 
+.. _db-extra-search-path:
+
 db-extra-search-path
 --------------------
 
diff --git a/release_notes.rst b/release_notes.rst
new file mode 100644
index 000000000..c4aa0b7c2
--- /dev/null
+++ b/release_notes.rst
@@ -0,0 +1,32 @@
+Release Notes
+=============
+
+Here we'll include the most relevant changes so you can migrate to newer versions easily.
+You can see the full changelog of each release in the `PostgREST repository <https://github.com/PostgREST/postgrest/releases>`_.
+
+v5.2.0
+======
+
+* `Explicit qualification <http://postgrest.org/en/v5.0/api.html#explicit-qualification>`_ introduced in ``v5.0`` is no longer necessary, this section will not be included from this version onwards.  A :ref:`db-extra-search-path` configuration parameter was introduced to avoid the need to explictly qualify database objects. If you install PostgreSQL extensions on the ``public`` schema, they'll work normally from now on.
+
+* Now you can filter :ref:`tabs-cols-w-spaces`.
+
+* Included the ability to quote columns that have :ref:`reserved-chars`.
+
+* Thanks to `Zhou Feng <https://github.com/zhoufeng1989>`_, now is possible to reference an external file in :ref:`db-uri`.
+
+* Thanks to `Russell Davies <https://github.com/russelldavies>`_, Json Web Key Sets are now accepted by :ref:`jwt-secret`.
+
+Thanks
+------
+
+This release was made possible thanks to:
+
+* `Daniel Babiak <https://github.com/d-babiak>`_
+* `Michel Pelletier <https://github.com/michelp>`_
+* Tsingson Qin
+* Jay Hannah
+* Victor Adossi
+* Petr Beles
+
+If you like to join them please consider :ref:`supporting PostgREST development <supporting-dev>`.

From 44b825b93900fd8714572d0f11a7e2f0c83fbb1d Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Thu, 24 Jan 2019 19:07:54 -0500
Subject: [PATCH 221/652] Add Simply Connected Systems

---
 index.rst | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/index.rst b/index.rst
index febf87223..faec2ae8f 100644
--- a/index.rst
+++ b/index.rst
@@ -189,7 +189,6 @@ Commercial
 In Production
 -------------
 
-* `triggerFS - A realtime messaging and distributed trigger system <https://triggerfs.io/>`_
 * `Moat <https://moat.com/>`_
 * `Catarse <https://www.catarse.me/>`_
 * `Redsmin <https://www.redsmin.com/>`_
@@ -200,6 +199,8 @@ In Production
 * `Convene <https://info.convene.thomsonreuters.com/en.html>`_ by Thomson-Reuters
 * `eGull <http://www.egull.co>`_
 * `Elyios <https://elyios.com>`_
+* `Simply Connected Systems <https://www.simplyconnectedsystems.com/>`_
+* `triggerFS - A realtime messaging and distributed trigger system <https://triggerfs.io/>`_
 
 Testimonials
 ------------

From 1c357179fd8639cd2cd1658205963a7a87106be5 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Steve=20Ch=C3=A1vez?= <stevechavezast@gmail.com>
Date: Fri, 1 Mar 2019 16:18:20 -0500
Subject: [PATCH 222/652] Add TimescaleDB tutorial (#201)

* Add TimescaleDB sponsorship
---
 _static/timescaledb.png      | Bin 0 -> 91295 bytes
 api.rst                      |   9 +
 index.rst                    |  16 ++
 integrations/timescaledb.rst | 327 +++++++++++++++++++++++++++++++++++
 4 files changed, 352 insertions(+)
 create mode 100644 _static/timescaledb.png
 create mode 100644 integrations/timescaledb.rst

diff --git a/_static/timescaledb.png b/_static/timescaledb.png
new file mode 100644
index 0000000000000000000000000000000000000000..d6403efa4c91d87c9e6a3236438748662ea7a135
GIT binary patch
literal 91295
zcmeAS@N?(olHy`uVBq!ia0y~yV7<e@z^Ko`#=yW3U&DNWfq_A?#5JNMI6tkVJh3R1
z!7(L2DOJHUH!(dmC^a#qvhZZ84Fh9}qo<2wNX4x;ci9_4p6)gK@O;WjYwO#;_4ayB
zR8#tPFRAMKl-W;?#pK_bo|ZSuywmfF%CgxjE*|+Z`-p^~AS*Y=B|(9gvfDQ9^|SnH
z{oZ<a$EmPw8$SG*^!VMGcXKS?SD)kgFz5fDex^lwKJzTp_GF(w)!nnK>h|u)2fCN{
z9Q`6Te|yjOX+rrMfA6fi8XdJKwRiiEy+=Pz)5^d3lK;ouudm~8n*aaAFY`D~K?w>L
zO>}xFGH0(^kG$xe&E-#*x&=E=D=(h5z30<3qx_Sfr=9%75IE(aUELkM`Ukt_D*n;S
z@2o!Ueeco(em1l9aeH5WI2vBRV_NmZ4jAwg=ecv9>G82?zrMY#e`&LL<-?dIT9@@d
zPP=$7sA7`C-x52uIPr74*WG?r8~IN6>Ag+I<#}xOXI(vZcY56Ki7MZ%1Yv;Jl<i&m
z48z6VTbSA7XC;`J&U=1$&z0zB6{qi*v%F5fRcCM5VIF(^?%UeC5BS-_)<tbCe7y8}
z-IGu`Nf#I}xgoKmzhJ3qt3^r0SxdLz$JTph8}GHPTDff1PubsLmfhbsb3BZ_{(Jpn
zi?#Q@pa0R^I6bbW@b4|{{69CU<Sb#vxR_j!*wJqw%UHee;*}qH9b9Fs;@PXBDh~a7
zVrRRvkKtbH;~gs*>_lqHesX8e+w*Ige@I~!EJQk9gc#0|W$fbqJms+a^)tq^X07{L
zcC)=CR{H+N_aW~N*9kN3QPw+?b^9CR```6HoDaI5x8Gj%xHNzN)u&$sV4)EhZ@9+R
zS5)lDgN&cMxO<l^>#yGZk}dYS%j_BF8s`4aP1sqX+mOF0_jmrkfDiZ2+i(BX`ubj-
zc6vM98C9(Z-)5@V+e^FmubZv!ROT9(_vL3TYe6jU$^~=V`kF(2+)J1>jpzRS*lk%y
zqwm#9r?<iN?mBXycE;0ZX$u!6{bgCa@+EWEqC3w%|NbPgX?~d1;qS>^{`DVjE?xca
z@3iv!+j=iM!2>QIr18nKw3VWwukYoXZLhiV{Ch0tby3FM$7Wity}9nS)UwRnFYV3y
zE6ZN4I)4AtyW5ZEh(Xh)l9G_b4*rF6-uO%jUpG6!#Pt3ujUNsQ0vai%zdN2(t(Q5y
z@h;nsFZO!XRY#TctM8|m6-2>Zd@hgYPP;=`n#k0vuh*N-j<yrzV7YfuaMR{le|sue
zHMb>Odmc6k|9yC&JV^Vd?R(!F&k=`NylArk^LNK7Gbi?)T2;Dz*4ef4e63B-ck|pj
zpVGHTV_NQQ>sa64Hz%o{{{Q72f8D)jTj0?&*H&T&f76+slBJun?&hWyzy9CibkJ#f
zZt^*`JogWAZ(rTA^_~~?Z+3b8htGV=TVc+9apw4e+6I@)mtAhp&{@3lsdm?*8UtM!
zt+Lqb=Vw}W$H#OfMQn?Gp7F}rU%&2Q<M%tCTD{J3!P3UXnca=Q89J6NUm1Gb?9YMp
z8QYoicD;6bzUIP5@tKQeOv^R5p7rbZaxvTgZ@<_6=r%;w+1~hD^Tmp+|5I+>`L%UR
z!HOfLv21UzeC_rP)H%IPTgG?y^OdgW|30gg|EHvma4yfG1AFB!9dZl_&##z&^HQ0=
zifs&wIOFwFOT#O>#pf<k(LKFxQ|Q;~?)f$E9`e^b@tz|B4_jjf=I?edIBu;sioUf^
zw6o=Tbvdi#mf-#IH7g&~cCTGkt{1f<=i^!V-&_a_Ggy)z+~Z!Dz;N~I>*F)l=HBmh
zQ-0s3-CQ=+*qQl2por=+w!f$U{k!gZf7jE;+w-4Kfk#NM56_)y0gfMm(YrrZJ6``Q
z5|gsY-<tOncVJ-7=}oVET`OOlY&~E1ep>&1x#w#T+H`pC?0)e5cfp#fzf;4qe>Y3c
zyl8a2@Xs7ksW0M7R!J>Od}k(7^Rn~!yvT1CqxYZlRD}6YN>O6R{>J;y4{uC<y*MoU
zx4x0l;`fcOmu>X7<~0ltyjphjef6jH^>u%~_1AsMcDGc8=auF5Z12<sLf>vZZnnpI
z$*S*%OK;k>wS7OjQe#?X)YZ18-SaBm%#7cBYc4$1d^vXD?&3_Ttku_D&wl%%d^1w=
zx@Dj6vo#l9I)z@f`15OX{m;ky?Z3*;|K%o{-h$9pa*h4ntaXdmRo%5#vb)c`?seMc
zRdfALi?3RAV_9aXO6>D>$Nzu*@>hQU+i0YSyL={6ddKQjU9(n|3U0RjcKObnHT)KR
z!Ve!hC_mWIyR+{8Bl~~v=F9&+?|=W|IZ1ecSk-2vKVEP&vTfHaUSs2?#^+84A3R<6
zx~)Rvg2w~d)pkb<)y~_zzf<0)r)lxw$RqJ@g<&w4cKGq9$F}ZXq_M(!+rQ|G4i8TE
zJ$9+&xX@wK7kbo`XS3nM9sKtHUQAm5|M~Lw8!WWpL3#M~8m>FptFF1N`F3Rgr%#*p
zOLNpu-1S%fb#!&dgIM2PcK0{eSNwSY|NZ3oKh0L(?Sxs_b}{mD(6V(^e|yesxzM(y
zpkUYI9shzOr~8L5WG~5B#dN!@QY3JH$L82oK4*XL=PR5Tf3)z}`B~<lXI(n9XRp6r
zWL<-?H_R0#Hs`ty>|K`iw%zFRq5lOr>gP)rek-@#waVdosLs8BzUaCwLZM$dV@!8T
z+`C&K!}k74yZF3iCxpJXZBuc1B*&Mv;deDp<?$_#cI*sZ-n0AV=lCBj^)-<nySwMd
z9rRR#C%B~ang?;gTfa4~*|KH5<+iznTCYF8mg>85^uyD3vxni`<qP*6J+SStZ$(zJ
z<uUPP$!}KpSWG*s+_g*9@7#|+Qd+N*e|)>Y?crzsyaUVrew`6Ar*YCHo*QoV{fgH^
zOJez#vNCa}owY7c@{Bw8m<K7Wu1VfLy!X`!Z$;yI5m7Ny>i6Z|{+p+$yy{kH{?E6@
z)rI#T-CdDum~d-b4(p>`AL`gr+?gs)SE~Mar)w<8^TNP~?fsW$;<NM@D9UaB@OpXK
z<HqIR6{nd@G?BeIYlVh&Pk*c_-~8&|mP$75i57qBO0`yH?Xau8dYJ#uTjBqITdnyE
zzair7m}KO`xY&JFS#fS9wJJjMURm_ryZ`lviRja>g*C6PXMemd+J50m-l2(qt%E!>
zj*B0eWL7rS{PE1Qp&BPRl0N;AvEaG8vibh<Q_ZOlUoGD8_Frklrj?hh({wEOo}84q
z=&?*SFX{0;t2K8+yE~6w3|?DyUF5o~?e9M`%|)I+4biEqI;!`M6&53l4wfHdeRuWg
z>iiSE%j~mmmvz40^>>w^SmUnq%acx?p8Dg6epvGJi()gTHLqKjula7fjCiRor%wG=
zHuu$0g*SVgSeT^rS5=8!Hof>c{_r;D-W`7@PA|M4ygTszq$z*@9W}gGdC2W$gwOj3
z%b44JqW26%zPy`Ztb5;jLrh`fm3{U*%in0Pn{EAe&PVaOcmHemWafB2oVI-0x+i|{
zOey7(9`YcrGUY1!C!@vtx93`~-~U=bF|+#6A@hG*MD725FEiOTa}!hKOT}I9{}kF}
zCZ|^#Ps>~Bq_QCK*A$x_%b1V7OYeVNdrLZL$LsmGKi;j+nS8t@b?3dpB`2OPIX*#Y
z_sIp8c}Y+Eq~2KGY0*v-QJV6sIrrP*qdnV=Vy_!3Eqsu=`Po^Qy0T;5-V(cnVHFwg
zEMv8T^){Pc?fbK)C;vv+fBn8!*F)b}Txy#AKDIN|I%|SK(B50WCl#N{D!=WTTg;^Y
zcFob%>{10Euhh7>WSq+SZanM8_kRs)zt`XYe?_k5>%_AWdsnmNa&oUL7g^bLX?5v|
ztn$+b*L@PR`R^rqYSZBv2Ab^Kw$J-lAgjJ)=eyS8XXmA6&!4-oW1%(7Nf#ejC^LQk
z)T~_}IAQWn&)b_W|1#y=)Y{Y5KK<?C<?rMBUmat~Vc*N;;lJ#2V&UOq|4y0NY}_aF
z^ChE?wK~7R)puv^p0`-!zuUreb4s%6zE8iWe|+&uIU~zBsP@+Hic4yxJe@`53zk_n
zir&snIHD6%6K5!Lx%F~C^NG^f_Z;QR&s)}Cd$H%t7gvA%=%aJp;AP8!DHHd6bmw2g
z5z+aiIW^Vw{bpV38}my$#Efzax#Me}q}p69H1zhB-I4k7jN4}Ax){UF0`b+~OQwjr
zCmdNTXntSGLQMSU6x-uh%}ut5GZy-PR#Q7{si-4n?yA&#<!+zxr*keHkKM0^?5SG8
z`Tbut`@Gvxs?{5B-`nx4`p~n|;A@7tjIl?fpHF|(E<d-~;|RNQ;`i5AU*~3Dy7uL`
z+>ZDC^MC(&TYmkc?gUubn(?6L#(}>t8buF2+A~LW-RroF+uQcrzy6TPRTjGC(dzme
zExy%K348$_RYpoCUo*A3ik*JkiC+G|IlQ+y*>cn0GcR4{<V;w&>sq0v|HrM1&wK8%
z?5w@I_LI`QM~~(mpC$C^`_UUN+;jhi<{CBFy=;88R#{)U;bW^{Wn<*VK92+KH-$H)
zuAaLmgTd1E<pg<Mf#OS&=d6|X_~|YeF3fZMp1opS_v3v>cYnNbOF1LQI7NF#qfO#v
z&ycO%!Ls5$Cy&O;&+J_}xhP?a#9!XKzR{Pb-T&V0ZufEN`oAwU?z6#5BDP~4Ja?=Q
zeOs=3de@QNE5D^*u!}u<X>I6_SMTH9N}ZKNGx$E`l!Wb0U-HwiK8Ww#zZWu7M3(VJ
zZ{5w&mTIwP<;sLumgl90GOIEVpZ+a<LCAQ+<~^*UUzK9~PaW@Yh}@9#yi{?=kGPOB
zZCji9Gs?FoE4gsUe^`0EUaje$$A$Kt!bKA#za@G_in!iP?9uL7kW-?TaAT!FT*!p|
z4}Z45VZB`FcqQe~vG?<Dx8K*j-G8dhg6H(K#vciC&YPz8eE)xPspOAe)yp5Zoj!Ib
zqw9Ni?5btArY+n1;dQ*tr^2>(u;k~$oP31!-EygI-CSk9!5>b$?*6b@y=<Xw;;9Ga
z8tP6@mMJCZo#lP}Ie%_b^tyQr*EjXI-)weedo%apF7s!}rEhN(ZjrR+Gf(_Guj<X(
zEZ6KiQyj}KZAtAGzw8(Ku)OWII@_t0k;U=WQ+CaE`QCe9<6ikY&hN|jg<3mRd<<>*
zyeKIyIMk)d%1wMpVpOKuvi@@inu<RKgiK>p$&D0!UvXQ*kBLWZ|BI$~XAc`kYZcy~
zT)p9G0yEF$%FBCrzHL<Yi+GaCQuz9-@W-Fu&o|sn`||n;vvWDT_--^^#Pt1eb^M3v
zVoz;zXI@Kvk$yw3>B;-Qk3;{Y9%Vc-`P+gm|6lZmOx)g`aijm`V&lT|^=FPPF^n|0
zb(ZnA_9m(5>kP3|U)z+ek<I>gCF$?Gs+>FV{jb_~@Lb_N?RaRz)9*>UMM~ICc=cQU
zdT^FEsPPZyc2|b?-^DJTw|Q{+$(^$@vm1X-{$x<^rKi?^&MSAv_I}-bpK}bcbHhT9
zimbX(xrOz+-9F~?d21&fpP13QnD6jM<=?xk`IHpx?MjYD-1+#gcwzRcHJjdlzF~59
zlgZcC-*w-9_t*cFw%2<etpqFC0{{2UIIveaCq8NBwWlxKZ|E_d+_s~W|Nj@&n|iJ+
z%T^ivIqbicGjPIu$s^12=d|3uXC>)&>D~8VM`n~<T;{4Xt$XQgtq*^+uNIvN{aPro
zt+(aj5~k$iZ*$J;HNU$2H{peayJGW?bHdC@75u+Uf0`<<IbCLQ{jBD()XUrgC;6B?
zx%*PT?+)K*p?F!w_+$I?Z>RlTI(}~6Qz^Sn*mS*hnal}cf%h>1ZM**`n_Y6+cV*+{
z<G#r+{9q~2#9+(B4HMbR?Vrns&iOwjH7b08eBy2n_oJ+~_J0ppt+^Yk{=0s@UgGW*
zoBCTyYF>QWxZ~+2Lyn)OU$z=V^BjF|>-YJ!hnkMf&V@4HZTAVs|2~|i^KIY#J^KYk
zzZ%}uQ@a>AQ&&#;nZwH%w*!S2A}jT`Z7;rk)RWn8nOXiF-nDHx-J5G}8~#cC>1eb0
zpT?}czl)5TPUv<y6$kg`{JK=@`iA@BBQ<lWBO9N!m`~^ZWa+x~?}qd3=Hk;HCmf%s
zwx?(X=X3uvj%8&W+cJt5e@X3Gx5`n{w*255Ny&#7xKGcEzkF)D8$3bovtC<#tw5vW
z?d<tHJ$kw^Ip2(P#BC3J583i)T6Orz?&wq9i}^n9aJeV#AGJyKl=}L)4YT#7yZ7`k
zTxzPCf2eH!GAGUqrP8Cx`m)E0qgQ==)F*XQNp0E&0rQ-je5o7spH*5F`mbmZ|81wc
z;Iy#RWA4Q}>ii7X&5Lc>_;^#}493e_s!i`Fy>ju8H`aNxHs`3n{QbuIwU$jAw!ix~
zM?o^<(G0P_-_~1f7qI_%BxcG~m&7eI|E?-A4}H2b{?C(#{(sKP+OK_ZTN$46?$7yV
zxF-AU@97tBedGJ0oFg83V)nPIkAuIjJv?#Ow~){;2L0||yu=yT?s)KY`5sksDF>A&
zlQnDdtNP^gB^R%}QMo{{-)6h~>M}X!+~T0H)AM^3tILnfIrSknH0AWvEe&m+s)02>
zx(X|9|1ol4dB*AeZT<VgcY8}ax|f-4le|&0L2!S>7H<Ew`tEsY0qgF|J}d0vondPy
zeZS^EPmIxe7PsI{^B3;^^+Uhz(}lDDi;w&J$~nRkp3C0ysO?j3?*DvK-j!)zf5rV*
zwY6*fgEwS2xANT1o+W&t%`(S4H~gFL{)c;lY(BjFS@HXikw{wWgX>#EH0~UJ?7DTE
z+=YoIIXW@rBKLniPWzK~QtsyLy}Jw*-;0OdSXAq`%9n>fZ{g;@Jql6hw;a=*a{c&+
zN8gfv{66J;qj(AD;?I{S#7|;8TejQw<;9!kb~0D?9&agpy0dkLof>yEzsZ6<iftR>
z<*yZTiQX&AvA)qVDMMhg+Vex-j@`cg&1lyupBd#3@7TQG`u$4r>FXci<A6%9mR>e1
z5KsJlW78u4+uLMcyiT@0{7v6xi=c1rvkh?%g1%*%%S?INR`|a@z9D-3Yz5}H!inea
zvAk9C_}X3)a{c(n&#k*ZoVCwC_~@(Xjqs~lhm$Y*$E2RPr#<&!^{S=)y}PEVl!b0d
zxcIAR&8?u;H(MBvi7s=#9%{KhR`B5N2>+@R?Zu~z3J%W^dS7iHma~51+E|y>^B+ph
z{}Jz7EOWcxWU<NO`3rYH&f2x=%#8Afm8=sR@;Q-;?0c5F%-{Fkp8xa0j*F`IO?{2;
zTtD8m;qS>_(I1Zv&%PjJoSOQhz;hO#Q=RPp+Q%w?zD)jXuvLe7;sQPGi`9AdiyXeT
zUr2iS<Jo(&2iEm>yGpBH1>BXGo|{?l=g>l%j^A3PAFp2d6S=K>+Kx`;t%f?cgF2sY
zzn=JLhtQO#t_iclw!bcXs?HUXvYg$ZK1gq!)ph~**S9wA-s3v&iDaL!?OgGxYjZsl
zjz1Kea`J*Ld)XbAcs{Y~g|&8}mf!cV7T-15zwgseQKY_ARnaZhch%eNKX3b(?DgK9
z*Z9`;<7I7c<0~?RXWi~iT%99+^`cTvyn!nJ{=aXS?o`BezPYOR$#41bC3k<T)(dn!
zYu@`-^NQ_H<39y!+mv;=WRBOZoi+FPy9R;ZOE$mSYsc3T)%PH{v;C>Mz?4NR8{T~{
z%iuq_dpk>wmRIrN9Z7DAY9g*1)5>LM?MV(;lWuWLMf+~_qZ@@gBo`Yw&#+i|f8p;p
zmE6zNiWa?mJ<aaB5WfVxsLGoY*7*Bfu7Cebi*0Y@mnDjQ`?^snCw|XLq4=7N$vjqH
z6S;1uhE@k0e*1n_*Z;khV#iK=GrYT9qcT^(QDYbXwQWlcrr+VsK5q0v_o+uPkIg+J
z(ac$;w`3iXLbko`<>#6cr?=AK#}}nz6Q27&n7lK(VC62>jn3;2+}q34wai)DZn<*B
z`(ILvHtpYSz9QpBd*))}!k1fWu9&HRIJHpir)Kv;yPuzTUHE%Kv-RD=1h-=?d#%5}
zsj0d6nf=E!PgoYevh}iB!Tr5&U(WG-d}^9>o8`Lo{i3#;U2ptry`Sgu*r4^TQh})W
z(>eB*{QLi&VTv)|EfFcW|IN#{-==KMuG6ryf3tV>gqRZbH?rOjO~M$$gzWM)D)&j4
z9q$gvbz7kMZbIMbGSP^8iAg(Fs=oU%p`>(+b=^*jbzK`9)kI#rJ#kI=uAb#Rp{qPw
zZZKZCm8c?fH+uQIwf>XiT_yCJ@-sV}D=*(}D|RaVQFoHdGVQp@gKbw2T5hrw-SfNY
zg4@{^o1+hI+?8YBwQ7-ub&L0M(WDqhmh5j!R^4s>x3G5S-i?=Hzm?3Nz-*oPJ+nym
z@QGO#xtDq-tlR(VQ1|QpPq~v}&Gi>g+V)<skl;yp{p<MO$;bMmQY4;jt*za|aeMln
zn8x$=7Bz{x6Rip!Jd%Dtx353ORPN@)hB*<-moJIExZp?4hW<TF#fSf&EV$mg-KlL?
z*RNf7x2#($@!s-B-jbDKRhJp}+4}^pe5WfG@^i0*bLV=|rT@Zu_)V0&`;*-^uq|Rd
z{ltNpX_Y4P-G=SHd*_yluPlhR>tFp~g{13VQMWr6H<$)?h@I}gdr~GuTJXwkMHUh1
zU5`$<eom`2@U!UHDE8~t$Nfk3AH~kxeKGBK-0y{tPdtg@On1<o$yj@@dSU-;{_8#^
zA$#W6Jej*Ti|6#gYtFnoeqVeWvE!G<r_D~z_sZjC+Lq-$UR2Cg@V@@s(IppW8r(W-
zxA&K6Z26=Eo2uXM{QtPT=6(3on%63@gkQD!@}kY{+3$BB&&d2O^eduJziOub-Iz{L
z5z4#v*o1h6P?!BmIrC%0j(*RZ*ZNugxq{G_gPZ2gTYgu*Wp+mE&PR?ntmn7S&SBPJ
z4%j;R&$jL~>yGsyF}=%YA6Hz$=aVfdXfk`#E*sHx^M%(OUy{JA#`?<8GNN5_Vbsq%
zc1I^J-1V+jeu|>?p4(<2@3&PSiuv-iA=v8q`RcmUp-;aX9%nxuI-#Ic@`U+q#+)9}
z#CRq4>PeCJCN(d16G_aMt}$xazL)u!?a|s9w<cv@;(zpTWA}s&U;BRF`_b+9ip8^v
zZ%ZNfgWW%p12%c@?ag~v_IJ_qeK(GL+Ew-^^{C>XoQr;yXIhw}&d;xraCr2j-=e(W
z>>8&(KkUytd)7%!GF<KdaR0N*XIoy|6}*rAUjMDWzCixIExgZkFX0CB_qoyYcjf+h
zF-d;sy4lyJAJ3fC<b3sQ#d%xpf+c2Z)jRlAFHX8^kh>@QphnH#+RKJo`o3+e{rvad
zDxGisQtQlF?!??b>T{-P<-30DTM+xQ%>Av`vj@la%1^j@@2}+AiYXjBCi}hGxr{a2
z(0r{>@!_i$<`K<2wv79elvh-BCsoDkO4{v~jaFcK^!Psi3&t06|Lv}_sft#1zs(ib
z&Drx-G&je^dN!A`?CWIL8&7njlUi4pC?998*!Z?q_14XvkLC}jr=EXMldtFU;=bz4
z3A>dl+h&Dw)jsq6aCZOE-M9VTIxn4_Rc<(KN$b+tt3T|m-_tbLJ$k}ixes#IB`bGZ
zn7MwayE`Z8&R_ZBfNAsDly7dgyj)YI^U&h{&iBvje>@D|U#frK5guTE25W5ZY|oD}
z`8((2<9|8PWn29DLmEEKlCb--In*NLvfY#16rI~s*E+rXbwa1+;oIjY>h3yizqvBQ
z`w{n{mDVhuXU;!xYm-3U>5U<$C&?Wub2OPDcyQB-UvanNw6xDuJGWe06uygNl50a<
z;1ZenC+>FTi>*DxzB&Hr)R*mrc`Mjd|AnPwcvdEc3C475ikiOhbN};JuKyr=^19&H
zZ)^I_b+7Jve{@?%*T0hd+nc`bxN}bO-nY1ix!<cdl|A_Ng0XV{(=3aGl!IURGB<9!
zw`HE-YjMZFPcJI(&@G>A?*32CEZ9@GkJtPf%knJsIbGokUAPyB`ZZ=B+g+)5;QeKT
zjViL-YR?z%Gwm$3&Ym#une?W|VKquFGK<->Z%r`BiLqWCaqsyT#V_Tu$Hh;bn6a_^
z_`R;y?)mjo^B2NOc$f8((+=1^`2KKeDYx-*KiU0PJfxP^R<2p0WUkAe|Nmgoo3%Nz
zpEks@ynWcvx4-76(4Nvb%}a;vZtPu|b-l*m+CSE3#`bN&o8NC;^)2q(mkEt)A0=$r
zFL{1jult#Ar9T5c?)FqKO$-*i6fbVuaQjo-F>~(lhsSzqE%akrjq1C3Zn)0SO)7oP
z`|#JxL$%HV`nPXtY~y)w)HTAr^6?B|JGJ9q&#k$8;_Bl~TK^K<f9Uyzyohaizo@i#
z$Aj1YUeguVM6QqBuvLBT!QE3^E(h@a{-CyCuUyv4oCD$>U(4)Io)g@;ZP^NqQ(O<5
zG%GnOk6*kzTWjz7S#Q4Ei3H6*#85WHe6eoYqpqE*1-i@q=SLLyC>tf-Iughj8oNK~
zYFl!Rv?{Dr^OBr);O;irJLUK1_Dg;I(X`LTFJ;oQr;qIGw~D>~e&r<hGConsq}gU_
z)7?J42-iP)hx6uz(yi?q{%&1W_W0!cgZK7{<gGFMs=W36ZN1fZOof%~<L($Oe9W|J
zz2M#p(Q_N#oUKd!VqiCazg)b24d-<?{)Dt0Y(MvvEy-N@O<O%|{bLiZ8`azO<Kz!?
zPiB*>5^}xw!)5EguNVJTxL=cd^3w2UXT#l2n-%w#%)Qa&-tt;9ifMaF{_)$!-%IX$
zE!)i;wB$u+m_?}d1DU%#rn`Bv9xl1UIaRMud843YqWrn}Q@Sty%#7Hzlxx}BL+km^
ze$>%_mSuG#{BGBVbr1JQwifi*#fTq}F21l_d`|txO4n6yZ8m>e>g&00st~Lv!yEiy
zU+&>U`e{p--)#$NyOZ6P3hu=eN3Tv@`Yzz;5v5@Bz0d28|1tXW%vd}j#&Or1y?1N5
zC3(BfvlpKhHkkfb#_y|Mq#&;^`>)8eI`jNmj=BCTySabQsjd^(G#Byj%xDjKl6^S+
zlli0DN3}opor#?xYS+dTzkAI+v5!@+jFvACXZ`I^;Gf|r9HNu*%2TAeSn<&J*GAtS
z-+JMgKQAYzS6nge^`=L$fBszwkbS3D>3DAS<@=T|*OYD7-QgQr(6^82=<V~jUfh&@
zo9;59_EXmP1^$Q66h_XlRO6QZZnj{PqTcGe?N3_Y@2yMnlwL2F=i(7;m>y*(v-$hq
zJF&+D|L!u&`{(+6XJ+F8?(^#-j+Y0+QjXPY-pU96UbVGeUgkghhx_eK&b75`GFmq#
z#><AiU*USd++_AW$!-6y^G^Qoc6Rzg17nWUWmPjm<zuw@l3(uKU}nd)ed{*m8Ma@!
z(h6rehOB)4qVUh&!dZJbUhUbUbti6vSiELTGi#=(#M6AYU1=vO_8O<i_h^*~7Pf~(
zZ>tat{XDmO|Ksd*0lO*pB=)7B+-7`s#{96(?P+gZJJ*Z;o*e1nbX=VK+QTM~);ERq
zuO?qC{CT}Xcuv>bf^2?g-MNgay0@(xCdF=>aWPa>xO?#oLo4Cx)zKSYXBaCv%C|iV
zTD56aTyWvXEj4Fm&f&iO;x=nY?D30-XU+`%_U=aYlg{OFH_mNGgvD*%$On4Aw(Z~Z
zEB;o`%gOOCvhRQMTePb7)(W2-%Nq^N$8SB5ej+Bb?d_>)hWB@-s@c^(PDxq%GqFs1
zTltm=D{WhzJT5<Ax#Qo~xVOv_Hr;{UWtu<tN!ZQa&nSPYPIU9(tDo%twv-t*-_&wD
z^26|Y`}64I3Bh|Ltc5CX%sVmt^fnj9ZxS~@R7Wf7W!wsVq4!SI_SxkvDojc%!skBD
zjb~dV^#8~<<IGu#_KXI$A>FHu_)c}Njhj~|vCg_d^#5G-&@(J^el-`I+J2II)hpG@
z52bQnthy8%v!f&=PAaYcv|Da4)9do<r?Q!O)IM_ZZrpkOtmZ-SdzQSrX75_R-o^g=
z$6)m-nSGn<p1zu%{bQOJtPoD$tjK-G_5Qc}cmDsKFTL?c^sn7~g5hq5>tZZa<=4yQ
z9h$gnMozDx#_iWTKKu-+d0cD!;bgYDlJ1Jbn|5=mh>CW-YyWvlNy7gw>-K*eG#KA;
z+-8q+*lMU7(fzT}?WWVyuUFsvogcqH>2zuLs?y*%moHCV3)^0Ny~bc)bgAaNjCn27
zZ=K$-DR)XtT#jsOcoM6Gc+R0M0lGTh&lW2%S08WRZ|ZaWy4Jd5^HTJ-9sis%TSl<)
z`Hx2(uL|?6@AP%gn-^tpPjX*(VW+U@qDyy|TQvta>N}O^-`}l!{DI6(rWu79!upJB
zSp2TFd$hf~_n&KXlSO_~-<@Ss*IzsF&FIvE8Y9LG?+A->AG5kYA1yUb@g3YWr_OIp
z_lEoN7XK$zCLY}+wl3zc(fv?Zwf|y`X-eboX{P;q)zy_h#lF8CtatZpC!4`i6XtHS
zDav^_nB{hLZ?JuG`NN0jdPkz4Pgi<!eb;`ARjW>JxLffqe8aWBta;IU%j5r7Z~fjD
zv6-X4a8GXcrT3*B-F<DQ%#NX7EcFj`ZMzt8%Svu?6EBD6HP7a}i`M%tay|V1_4%S(
zKJJ$;rZnhHGrP^c(Ob{kzA5vd)eLpcJ9qm&+-~f$zkdF}u855_d4f0eGiP?}H}yN5
z%p1JXdSZ8S7)$1=&Y=3$+k2ONzq4}f_TPf;<zeT_!!GjQ;|mHBmdS4m-pHI+EV|{R
z__Dt4$zMv}+w3Y*ay%n7o%gKtlTEsz9PI3NCFVNptdWW}@74wvJiQ|{qjqP)D^H8Q
z#cZ{|o_yAyCC&f4Haote(Dr^LBDhRmH10mXJo)je`m{5%Y`+@b-t>trY3?GW9SX)R
zpVgiuojfgS<PgH9apxV+ZTVksm|`q93)IE7UXHz?_iO9yLKXSnY-{eGZcLfICtu@>
zx`Ei#myTDRjzqht{(e@$I4^5v$Ng((kJ(-of3$I#X2j*VHpzuiF=CcHtGi#{>N@au
z#?-d?GP@ZP&rV_d-Pzr-^(brf`c65QOK*3%S2?<8&)IL{Grd21Gjqn4<`o~W#U?IG
z4mY}fd!CR^-n<TX>GKm8)-0BF3-Mm0a)BZKc-{7e^V;;+_lX&Y37y+`w_w$GC+)dv
zx6gEJGgg29`rRr2!ZQ++RqOw}nf8j2_wLbOM<4!~R=M=YCHC{JNw*5v7bNaUw%%8e
z7It#q+-h^Xk5{;-)?~wK`9+&AE?|Gx_xQm-_PP%Zg5B|U6JCdgE-*3gv3$Jg<B8Ag
z558wEm+|b{VEbb2^X>B^8?@6!PyOEYHhb;Q2PQI&8$aAG;M+fERZQ5{%X#YE6JkR)
zc58iH^7wG^+T>JialsA$H)pQOVf>t>BtJFHYStS8uCHZxA~(gbeTv;0bI~g5)SqSV
zY<Awe9{l9II*W9nbBVoBEZe(B-(@7vbl;D>9;bC(bz8ViT#cxBYwq^H86UQ-zSNVD
zZ^ZsONws2As*;$w@5I{z7kPR<nje0jyIx!SzW?SAu`TcVw&&j4_$cIk+oU*#wHaIq
zM|Sbtz3gmPsTgYb_k6DGjtjPlRyz`k^xpmb5%Xlp&)@gGo~5iWy?jQ_Jhf(5(rxbe
zsLeN@-qwcI^mB9BY-R85cs2k1snb3G)_-4Xcj2{IWU6PL#NwjMAAamw%<<!w{T$)L
z-&R-g+!np*bZq6V&L@Z7AF$mfeSGyyf8|B;yEzuSp7@t@+Tzc)Jid2UWrFiECHuc_
z6p}G9x|qT~v7lr}Kx*i&9VcFX_l`U8C15Vk?%hgydAHu!eq+p^tImDLHNsBuLdW)$
zH?P$S{6k;5n+X5B_u1~U)xFzcv3B3Knm(*x&=(V4$*}Jp*W(p}N4L4`lQ}=xcXB{_
zYhU~Oq~AK>vUj!_)>=h`T1IW(DV6uuZpB2IjMU8!)OPQhv8wya2KncG=cG1Vu+6-s
zagOit>Gw0bxYI-q_(U*UyIl`GeDFZaPx1NU{28xiiE5jFkevn_Cpf3oEViRN%;<Ie
zpXy_Gc3%E(8n8CS&uz=3nK42~SKQ(Fx9^jI(!qVte<|gNi+<w&YL;`|B%(U(P{k*|
zo3o>*-PT_2zCruY%K~@P-}6%V>LQEn-r1HhikbQ!I=#^;@~9qD_C+l>`#8^gg$5Pz
z&)u~Os}D*^9xAtdE->}ERa}<-(WLyni(JpXuIIbCJvQV-y+!%z?d#@6zi}~j&O5zm
zTBk>SaKry!rSl^g<%?@Gwj9zh4}Q4YV&jHAxji|_#+Fwacx?G@ho)Zrz2Uv0>ecM~
zx$E0w_no!=u*a}}w?e7m)yV~h1q*jSmOZ~~`{Mgs6GZ;Kjtyo^PKY|W=VfKk+SIOZ
z@9ykQyg2D;j;=GjVw>v7eaBUMCcE68*LBKb`;#`XKfE03qv7X%sc1vZZNnw3Rr0&K
zFBrb~`>%QX+2dC?cU!%Ct(g<g`uL^%q1?5vUtG8Qlen8>!DSQSWs4uaoc3|Y>Q_lN
zA@<VQx4jE*oN$=^c>2Q4{)H(4e~;;w#jpn6Jz&lqo>;O#a@p<Dt@|q0Je9RtH2;^e
zuJApP9o&z07Jad>oA%vE=w5O8ZvH){U8O0RoH;rAZhK{?J$}i%HTjKEO?l0|Wapwi
z(#c0Fc2(MZQ{5E!EZ;G5gX6z#Px(GC7qId_b7b~|D{rPwUfCPXFyo`%Gd0m&=OyN<
z>aV$V|H59|%*Tt0KYd&r{an#GhUG>XTW&{R=Chu;MtTC5zP4(I<v!W11J6gMY`O*U
z{~y^udz$WA-{hE~T5MD|zbi6%vqI95>1Efxt=il3`0u7n>mUEx(;wQ3_fBg}TYvc5
zH@5tge~I@S7nOEpEEX!S`BD2<r)K%9Ae);ufnn9%|DKh(tNuRe^vy5n$f8|;|9GhG
z3)!&l_N#AKd>p=&-JgHv%e?GMp3LPRb7ocvnWxH3nEGyS=3Av>ir2noJPuh>egFH^
z6<5R`?w0VM{dT(T{c@G!jeBxUwjJ%-Q#xyg(5lIzzouFD?EU8YLeEZgV$VU#ZSLo$
znI$qNl*sPt=3Y6^TFv{OnEKR1wH7Nyyl;JKxiWYAobJrz&53Gj56aGez3Qc9<>PN}
z??ms+IQeO9&1^)$d$eJB->hYcXSwSypPz4E+?gA7)Y(#^aN)_7i;XrU`rGnd-*R|;
zdF<IYI~rcz_;Kua+5_Qm|AtkXcU#_SiJWE6e(xo5{*Q*}w(NZm?-t66zTKK8!GHDq
z!Mj(*lQK_N$atik%qlzjd*`|@>za42$UFZ@_2bs2P>I{lrPWzx4{Y5T{7w9iO{-Y=
zM)d!((yH@w7E0}~OSa#%Wk>n$-=$r;qT;r`mvwTo^qpemSKYb);>b4RMO%H>&Q#Oi
zwrkg3p4Z7oPh5UHL#Mf%C;7v=B~9N`tmh>EesYs3_Ydpcws$iV_w$_VH$A$sEPO7{
z!|GXzx5cij1$=DuKKAIaxlhyF4eco<eW@(R{p9B7s!uw7ea-z_N47`7`w!AQ6}L2;
zUf;JX`JUeU?S^|>m4T9ee_M@3eUV<A<&BQTrG_tV&2GMT&g<LxJ0_Cz>t9=P{4%xh
zGoSi)6<hXkV}ogbW%8o`ZfJYE$SOLdzI)$`{wwE?@UPN8ws~!Gp}|Z|eT!A)7mb!J
z-`dA*@~H38)V;5^>s^yAul-cH9n{*JWiHfM9pe3{t>^EF%gLKA?K6M<wYz(x6{F2v
zlcT#2PyFo_vQGQ&y!BU3a(?{78x}Bcg22JwZ4rh=Us=@HUq9Uzb@<ZbzbzN`R^|6E
z+&!cB%@+l=sV;#xC5}&H?)Bg<D|d_vuWNezNwRgv=f%YW*Gw-a*JiXm+dEI`VZy~f
z-p?ZKTr0o1Zkq;Mv9oCNfd;mBvzBSDp8wz5)6wtQ{XMfEK9mY^bQ366f0pp_nU=|M
zpNv<p7l#P0i#J})asU4b8JDJ6doo^~>@+j7TC;a`g3jLZ2<_WPIS#Gjod4><!CO0b
zY<?wVbJ<9ay_ZKqo#kz<>Y|?|x}E*cat{CTVC{(usp-!3+-0{WSASyd9e=SM-MXAw
zX6JaXKbR8`yI$*L>eSueXI%UzCh{XH<$dYL6<WqkZq_$;x~Dv?tAD0{HBU`+&wKB*
z<hk4bRts6qkjQYzTo8F~vGtRU)%Tss4L>b<Bj8o!R8d*ato7>gr<RK+k7@tf=C9TF
z=w1K0V=b37d=AT9nrOLg?ef&8B5&?*EkC_T^>qJ-w}^VDgjs4w_o|QWa{GQiFT1p(
zz=B;>>+Wac=1qIgJn9uS&=GW7-V}2D_roiJGb=tAiz}E5HKcyOu(|gBtG;<}dk>3k
z>t6NV<m`mKC-z6xiHe!}Pnvq`WH86A+;GQ3Ul-owQ&=?XhwIItNWr_a4@BC;Zx%gZ
zFSUHpoih_|e^^%gV6FO+s2v7DeJ>YA-MqEbT%?lez=56s-e=20AI*BfxW~A7yN%?8
zXSvH?oUOZXVp`}+FZc7`_EqRsgkMN#-Jm_Qd+WxaBeM2st^Fs>Y>!RYKC?3U#kw--
zUEE76GbN^qA3L^}cSXMGy(@Mnzx4e)(;>e-&RX#Oo*bSv2jAVk$9mkz$lYH?nrFo;
zVeR-^Pd?~QhgZfa%+qwb?!8?-@9*V1hwkJQE)2O}!0*%YZt<r}2FWF2a?!;WrSrF^
zENB04{C~ONF>&`4jhm{jt$XWvdsOXZwwW0%s`Z(bweVKggY2o{j~?E-d1KxQ_d6F;
zLo4H(%Rb(I)U;yJ@#=uBg{8j~YmCZ`_r>fGbNzQMZfmXJk<Vr~9sg`iY+GYvpZQ{~
z#wV9Xo^#4mYxy=Zcj-2NkFo6&%D=6~Dpgn)rFw7DMtSqpcT;n-T;zW?yQ%5CHwb(9
zZRMxEo6qmgPz}y?+n^byqW$e?)$+Ei#NDgr@TYQo|CYV*_q>o7cJFEq^gQn6Ej_Yv
z?P{)LVoOfH`u2QV*vaE%^FoB|%lB@KwcRWcU;m%y$KKM?yGEH4DupG_o|WHQfBs&V
ztN%x)Rj^9BBu#q5f!L7k_J4L)|2yv|CG0o-VCSF0k~*oP%gqrx_QiZF|NnID=Yoq{
zY9!Li6L+&MPm}Lyz29~_?Dg46^(VH+ZV3|<eN>-6r!PM|wktGu@r8u;6w}K1)w^`V
zUAu)HE?q5%e4>$e`gY50?rSHwXLSiwPuaiJzi|i0s_3^2VrKqMdqrO*Rf|XpPiKuP
zh%MRw{Z7^WKK1t(7j?z9+)EOC+?U1n>8r#smRW|%A>G-F*bCQg&l5b?o%Pk(Z5hv9
z|FFXQPuIPZ@W1o%;f9%wrEizsn0?~lodVNOU&?-JHYnO8^|!yvd&{VCP-Dx+=gghk
zuKZOO__=e3-NBYcEB;(Lc3D4MN$Aqkid#Zz%ci6~a+jaqylD@I&t<t|;)$=ARxMWV
z<(|3m$EH&0xXkCb_29MlN;aK>_?>V3%|)N4{^vK~xjyer+aiq_F_RiMvI?G=JEM2D
zzU*b+^JPC7EPO)^=KbKi)27@YCvoeo?ZQ=m|4)tY{+~TV?e=jFC69M+pL7XI<*k}!
z8=rrCZRPBbUl(1i2!Ey*S*Yjqx+ATEz2WxjGX3NHQb%3aiXK~^{rpry%*!N|T}jDV
zEBLOv@+(|Ce&Fxf$CbJb;_;XLIPRynuP!Y8qL8-y>WOK_>(xFzdH?&DLHu0tS-D%B
zZ_GS%wC$Tv<U)J%wNBsWZ{IER{D3^;BZ(5>wf8=T^O;65Y|ZdmwfD?yr*iR!3;H@;
z15LI|M{HfpRyV(G&KCx|>dPWA`xo#$GuS$*QuelMl}b#}LDkPvBFE$QW_>+f^Bi8G
z8&9fRr7f^FWnTTO@?S@%&-<^eEEeu}+;JIeY0ZO67d=j`Dsv5cJb%inLt7^qh}~mc
zUUq*%`&*>|amDxc(&rBz{<?XC?mYeKwZEs_3)d*$)+?y^>rR2_z1drZ#ohWAIpj}&
z8+nAMqfB#=u5W$kT%A?Vvd@~Ny#A<HcYJE?#qwjtd!?E0@3Ox7Np-6(>%KCPpSKJQ
zFLaz%YTu|ov9;dB_voQxo<;vInFgO*d%L@^bEnzf((Z3YPu;A_REs{&{KMO^%JZit
zBdhbpS+1V7rw&=O^-kqi7C1L);cn^t%HS7yH~CH#9saTYwR+<1iE264S6XK4%Xag}
znG1$pYI{A8P2a(_<d|p6rcIykS(k-;OnN_WZp~{%*j&^M-_iZy*Z2A#7u$Qb-B9<x
z?$~uEaLavxzw73%6Y>ZQ%~4C#*~fkE;8*8+Zf;v92#P!Y_4~T?NABI6H~wj-y*}OB
z*8h^{mTUGD%gn1k<{z5=A--~Uq2m&#Z9N}X_VG-Tz4`Xfm2=%4+jJKR{rR`c@{`lD
zSi!#+jlZbaP1}9*_O^qw&!0P0F1YIXi^3jWlZSf(MA!Amxw&jFxNu^U=ugM1udbeO
zRj;m0jIizqf5dukQh(t+tK;mipLn(?TCTowvw!bSsl066E0<md9Gbbv{<LRYvqNAW
z$4f=|N1W34cUG!#88>fe+dTD*=ds5TZueGjCeJFpUi)yV>Fl5HykVtI`kY{{JFca_
zKP{JcEQ~w1_}<w!mn#=2O?bEKR(Rv0RR&@I8NXdq-_!W=zy(tQ$AFC~w`ZJ}-^=G6
zef;EtaF!2y?=oGSZTsv;Kl|JHr*8LDKJ*g#k+exEI%M~5W)r!k$$H;aH-DVo_L5_D
z>~<YN#~mC8?$6)rZFfTUiDjvEQ~AeGmcMh~rs?&`O#R-)y|`;9$BMG`$26VFKmLAn
zXwB^8)=ypsJ}W;pkjcGpe9|orSGg^D#jFXlE*y)WFzb(b$j#kF(V{&k`yX6-`Sa82
zT+8M6yDyY&>DhDWL!)hVxZTbaSK0e@@ZlGqVz0*PRlEKk-+tTk@n7XCF%i*k^PX;)
zX3t@<ZI7*p3y03Cb@TIPHt2`ND6d|bd-M06^2C)HuP;6OWoUS#!MZE#(X~5gKPjzX
zt<w4WnQ=v0{pFBSmLJl|t`(<lze_NGxV7TlimV5(zBHe>BD`r=-3kj?+xxEbe;L(t
zKU)_1c+!c$o8ECbyKe~XzjSlTve~sumh8F`K3g!SSNv4>(Kv~f4f`JpGoKQWnf++S
zl<UF)dy<nMxi&~vUoPvO?Ah4&@9ng=^OmhQe*a?QnLC$0E>4>D+V1<MsIZ-|waOP~
zF1_EldzDtjzm@mXr#yMy_3GONkGTwjp1)sxSKRi&uX3T+idz$G)^l8SojpDN`kBN1
z*?I>SrilGnb$7K#)RC2j$J-~QJ=A8+-jk}U=dpT%=-WdHEN|x?iOPMy;pWT}M<>ZK
zl?zs+XL{~Y&gM7Tx{&vd{~flCE~d`gT4zeHJ2vNnq0Ht>8*JkmCS-lRv2FS0TYHc4
zB}6Y`a6hYYj`Qlm6W9A%UQ5rqaM$a^g;@TjhwaO@l^g5nbNt!$_>gql;~mStzCOD(
z*VcHy!S@IAYG==n+4M-`eiI_@F1;^_Y^m=5^YWhlP0q)<%4J`=%o+PSb?bME|6FUG
zknLPNF~qkp!Afdhe63+!yuI+&u&DLFyQSBuIp3ST=yzfHN$wqLRRXF1!X!8Fr(L+`
z`SwQJ){RMPGNgMOF2%N5r!3I*W9!)WYLU|Z_vfFVviq2Lb^?2Lef0(FO=j_q)8-wR
zk|6tRiR|RJd2zl^7M|oQtA4cLalpibdtPkT_cMFrnU?IdLGUrt*G+TJ2eiD4S|pi!
zR(Hk8dChm`Xy}}7GkO$Pyy=wf>XMk5i!IJgUVT09;cf$X9cK7TbVv8AZ>imKL8rMs
z{p%Hsy8DjzpmclJZTXu$$IY%iST?69GVvWxQH$oS86DjDbqoJQ*<3W?%)R&hU)+`n
zf{7bfWa)p|`uN-=(H{}-!hE=|IR(o~Htcr3QM~W&?X<wVdQlHbw!cl9?R0O>x!#b(
zUE9|#67`+`ZQ}MeG4+Oevw6+?P0vhF7diH0_QZ$XjwZ#PtUqd{x8K<RD3JA@P1n5d
zo1Kmaq%Tc$Hwxd@8Tjy9!JQo&_CB|ra%RfG>V?~NFCV&kZyzVmEjfYcDa)chIc>dv
z%T!eVTI!=?maP|Dw@a2k+50W#c9`+!?xyx{@8W+ynIw9(MjEzVWRbD!ex~xkyZ_ql
z@BVhQ&aBBe(ig+{Z{H_@x-UQcLT=6cq_iO1h41iki)OL7*98Sv&K!`PIz8F*b46vN
zf9y+3!>uvCaS~r`BdrVFA8N(StK*1_I<(vW{pW36AD3pgt+DC<x>&aB$KM^_EduZU
z%d&}IxBhi}Sjy9Xe+pF7T37#;*}>hn`q9%0LC`2q+{bzOk*_UsIz>;;pDVm-`qcN2
z%5}c%o4@P!#Wc5^+ZOf4&z6NM`u8W6M$eq{+<|}Z-K%}IVTo=V)hG4_?hEtb4Og`D
zSXh1H_B<)=p56ViJ@qC&#~NRmt+?0y;nC;Q4^-9&{<t+c^xaI=<kM23$Ls3OS|R7)
zh37d}tjMdcdf5DG#iFMA3iD$3M+;nEzy5T~!tUc~(+<^Kja6ODCw-2@*x#G9(Vy)m
zvoFi#_8y;_UoXB!T#lPH>rY(ETO|guhd<1_!yjI|Gu_bgM!}w1pZJbbzdF(uUE_Mp
z&-?t*&ubfZ*!(THzxv$Xo!vL>_FOQNvKFem%l__B(c*jWr~ishc|CjI`D`r_@!S}>
zb#u87OK+ZWIJPrpP5;z{$kP$|`%@QRx!!asfLSD8r#3VC^3620@czWK9c;!<TZ{f$
zPp<R`@0IIUoVcz#?t}hu?!DrZx>z4ATGPkJlkn!<=WnxbT(8fb(HDPZj(&Xow9JKj
z?AkajGiMkWvWFdNGCEXsddIf4sbV7Rd~fgW|8!DS`_<1dA9!umRLAme)u(p*yVaZL
zn&ioLGK(EdIaKf=et%?pc)y9#gUcy4T20}BPwyqP7KDBY*uQGyZY8IehuzwEZg1}>
z2rKLl_bhk)6Y?cX{(b%t|I^bRwY{i|yn65YH^W6y(IH#pO*VaWxGQrfxK=SPM_M;}
z?;h>q^7+mM8}BZ9{!?B$?bL^TzbCVCx$yp562QE!U+%-P%io119|<!Ux*y-PZKJ{7
z^^cA;{zz%K;m<yKrqP%9n`T_IlaHRbCOku8&GgO5Ulad#x*08M|GgxEIjt@0Nv;0Y
z>8F10$~K&Q>W=8m=KohK=9ypT)AO-6N?5pi$A)z`?3Hr<f859_5c|fJTi!SH!i}^C
z5ydi})l-z!jX92&x!>WwxV2}`q>ZU-yOQ@G&?<)yRtSHw3@wWlzyIr#y8O3&(|WcX
z)RO&Q`DEwcii(?dEPsE!u2a)m`CX-W!eVs;`y!FT<K?F|uH?AgFCqEk&BfOnEaO@h
zT>5-8(DiBQp>Gd=y{Nkr{Y~dtOTXihH?=FX-si|F`zh7ze<frSVC}xG@n(KX_3wa#
zm6@SC!ouc$-+Jh->t@*__R`B2UHpA3_Q5&@(X{mJ!ae5I>_YcyzE#ezd@Zh<v+dZY
zRMXuO;m=upTqX1mz2(yGy4x9((;@nBYQ@4m5?S%h-_PCq>-sP3%$H}@tE3}t$8lW_
z-TgLreaRWm)xrn9Rm|I7FRSBW|25g2<!{m&{jL3nWJ9MfJjbQHCQ7z=Qr7E`s{)hH
z7e2icv}0NC#B1m7Zq2pbyx_vBwX5Pj-8ht<Tw@I{fhMl=S3SOJl}5Mx?*B^13)B0r
zFuq@zadhwhdyMnHJ^NrKI_KBN%d;vkh_K6_sS`b0_WyTL_t#D_)%n&{x@Jd%607}P
zQun^KeH_kp{Q-02Z9}ySI{MRY-8KkixtMtMh@o-Q{Hte<KYI4@6Vv>+_pDq>cl?-{
z5om08f#deu-zT0dXN)<au*=-VwXSz6+ZSU#vHnXB6jn*9$2Lo>XY&sG+Z|@iJ~{Hn
zg}9c=%+R8LF0-f4cspHPtg3j?;jhO+-((-If1c;E@m^c}m2;n;=`+uaT6Ef9Ohfi|
zM5^lt;rw$)>;Cue>CG@$Y#Z0|^~r1RS|+C&p@*+U!%u9mJ$pM}eVylZ5fxo_?(0*N
z@3qA2dAq96!%WRBEL(Et#&dt#+LnE<ynpBT_GEC%s#2~$r{QvLuib6aTgNNR-K)K?
zL?7#_FRJ#w5q;$E%UGK|7o+*gYT{q&?%uo9?_+yh=iBIX)xNyPEW&~p8(s%LcxSP$
z`tR*^yY6P>U3S0a;JQuy*Vg*S=Vu3APf~bcUzwnzbYQWYi2Z6yd1I&J2Bs1H*XlyF
zyAQ;LtgPSq$1A5tRPjpphS)Fi{43S=MeY!Kf96*2idinv`tzgz^i`}`q4dA@ug;&H
zb+gv25l>wEqFL_MiaxQ0n>dPHcTf4}^5D~ChIM^^Pp*0V`b{U#s;O5#e=U`BHQmQC
zTb=z?s`o5|GkV)jzs)dToRIGRVc*8R9OAC0KF05qHq^V)AZA>$XVTu?xu$!ci_GWy
z;qa|2@?)L<)z%vV+HU*q-Fy1j+WEVevF!Kj=Z@ZR5Z3dyZ(!5D^!!3>$foxl&mZ-j
zI=$h%bi2g=lRrvCpOzZ_%<PpE-ehQ{&pR!#f5r8sSMP~cKCixC^!H!0`~M%GfB(C4
zYI_PO#9wKfN;p1in(c0Va@+OT4$r{St845p-Pu-LDV?5~@*#D)V(qi9m*=MZR(by{
zC4c6!<*DL7i@cQA<#q<xD%J6>yb$~Hgh|yejnYMrSN{mf-Mr(itTb<w!Ctipv&Awi
z1?swA@#l8FjlDf@#f@{ajxH|Cms~%%b46bKmlx~RXX(DZ-gl(YitodbUqx$fgk4U(
zanCcvw|m~}c+LG%_ByqElbLvHv-T=6U0d?_@LSRFq|)e>JbS8@uE_`b-iiLDv#$4@
z{k{FW%^A1;h!w2sj(hg~`kABGT<lKumP7{1+j&N4>mAY5OSv_ltK4$>y|As8|0b{d
z-RmMCS6(9H^+YMW|NF~D%bIQ%KD^R-knMebpjp-#6PK+i(~Gs9*<BFa^ZvuU&kYk>
z-`>0aJ?-70-<!8p7pGR=mYZ<<s_e$OkIL73*=zXMbjZE(jyks3BmcEoiFj_p5!Q<L
zYj&~pnePvG;a_x->-&$Ixkq+<Q!D=P^_2FLZ{_C4SC*M^U3<Uwxcu~YhyT|V$%!c2
zEs8pA(bjn>F!`D9Op|X`@1HHM@dlM0i?09uYd4|o40nFp<ed30?uvM823<XCc`xYN
zN9%nK2Y=*TH;cc|9TX@UU)H%WUDUkv&gDnCO1`4?C+|JgecJWxcH%X;oc!BgmDH;x
zer)odX!p78<h_4;&+N90_dYH6`n=}Z@?7o1yLG3PeC)4$|J<VWbqcHhk6Cknm8S`1
zSqLBW=(9*W@-cAvimJV0U12Ql=VMm?a`wLceciojYi^vJ>*C^4d+jx7MCtyIzU(}+
zS+|*#3m5q2vhDl-Jv>FbZ{Cu+!$*%r814%zRQ+f6?f#~uyYE~h)|72w{#o{PX~Y#9
z&Rws*{J74<Ep_bI?2mIFiSDo|ipX=wZ+dxd)wi<a{kygF4qaaRIQ6&i!quxXF7mmx
zH`}a@{TBXy^*OJirTiP$&Dd^c-C(o#eeSNieU^I-*2?tv)r+h@_W5JPWs#f={b>)k
zNIXBeZK-j^_88Xe+g=;ZC-#c2UHoC@pWYd-&lYw|zT9{#HfQ^d>7Oraeds+j)yScK
zSt=7(?b_JBxSa0Q8aHILr_7(E@p=1+tnXsC@4wyL`L*-ZH!0(u-K)e-Ojb{-v6Z!c
zRN*HfHf>K#XSP}BgG0sK6LZWBlB`Zw6sK-Ae|rB*-|KaEw?2Qc*na=}^EKh1IJN3t
z`Om;ef0ybbmD|s&&7W6pPiN&iCcbOi)Yg#D%_|DTrk-mQ{y*`t%I$(p4q+FWIi~s8
ze$<<Ir>t$w+kh)>@nMC{^I~`1-~D&hqMz4hZe@>8WU#NOxvA<gzw+_bdv^Omyid=1
zd0tcc_1pVO@7;ICw!dcnt1pvZ+sAu-<5BxASC09$P8{{Ui(bhGH@|duUYx#v$uH;n
z?EAZ`><^bKDZN@7$NFy7s)UF3bxUXJzTMuth4GZxMZJRa$+rUo<=vw;ls}hvl73ml
zeVfqFq@Sig;!YN|h%P>Dcduxk%Z*pHe^bxe{Mr0*PKf?HIqj9EpjD#ci{~9&6R?%%
z*4(&|dEH;T9Lh?oCF_cE_VH9i=h`#fZP}9No?6u``^sp-`#QfEm6-W!_IxWXR=j9_
zZZXGRSN$5nxbNHlSb6(DIQ8YQg?>!y>C62I`AXdX^JeuNJuCe5#HFp1+221(+B_@i
z^fjyQJ@;*M(jNScwEl2$&e|frqbIxG`N^HAUAV%+JfvHG%ASUcjcPVA=FxF8wyr*Y
z^6`P$^G)9_-Ld(XP|flT%dVQYn=b7?y}zVte|(<H$JMtgBQ6;oyxm{6KKkO1QqgMd
z=#RUXRvVTl@zvaWeYMEVZ|?5o8D1|}7(SnGp8m_{{j;!ry8QDWtSI(AocwIxQA6S6
zJ+nQ}ooL`*+4$kxw(#k;nO9^pErQuZXI8oH(%=0>?7jS{MW;6GwvTDL_hb8(J%64g
zt$unV@~)Fs?X_O{E0;E@9V`s_^4I@Z$1CoCYcl^Xe(KjWcZXl-u|MDIVgpO-?d4W!
zuG+OI^Xq@x_q(<gZ#y?X<NCy%517Mu_SLQ|zx+(_>c{KxuD%wX+fsG)_3xZ``9k)p
zywkJR?J3qLzeR`CSClPCIFxeTjC+s#)5E2gtHbZ!IeI>pecjhxe#V(|^N$~wpUL&~
zsNtOj8m|oF!wP%ng(}_Zv049OpQ+o~gI(Y5YVTa^*QmeR<<C#^Th+NWcYYgxNUDGL
z;^I9!y>I_?c=lHQ*E;;|(_4;*#xW|!U$(5ttg3padawHK?yCvEv@?ap{%oy%|0;db
z)ZIIr+aoIe{8W5z`b+M(kDu&;`sFEA_2#uZa(@@!?z!bW=SkzA-S57vUj9nb)qF?a
zRLh8Z`w#!_oXENP;|KrRZ*5-ZeklC4{kf-n-ufTT*DLDzem4qU^-0{Jn;-Rg`_sK%
z^F>_``o7=wj&1Qy-TEcHL4SlZULR!p^Yv&m2m9}9RdFvnu20|EbJV;$T*=qbeCpYi
z|JP(mxBkvLKlyFc7dfX)!EOED%pXo)Jn!I~0#%{Dd$|kldxqq7cm2M9<?K=US7}N0
zM#6PhUv4_vb>rEL$J1|@B$vqNox7>G`s~`eEmH(vXKZM$T~Sc}v^BVYR^S=u|M%IC
zem)i(+ZX%g+I+D!2j3K!-kZFYyWh<3rD4VQ({i7<wjJRru$bBCyV0q}uwHgqOV)*y
z*4?#vg1fp)=LxSl9L{y^l)(SSU6yyl-gMs=RQI1|*6-YSug$tU{Dd%H>|7tg{r~^p
z{LN>f*=PLwdS=nBIX6;I>R56JD5yAaxK5d%6B$-CA?Ih#U)}WIGUv+Ef1XQ^F1NFM
zIcM=C)hTNew3S?h6ed1q+MRRn<igMUSEWxBcys1lP7?d8kJ)K#RaLw8ty=f%)z$F#
z+(Ns9_SVl*xvqc0GJ1yHe6^V#d$#SB?VnIq_gQpuqF4}9=xevHCu8Rx3{7bH{c<kH
z&r{m6rN;TjPj1Ax&Ees6Iry|*u`uCql+{A}V6If{wcl@KFT0bM^+{)mGMjN(?~*^+
zN!D@86r0mcgLBqP?DydbxzFG{`Pb(alRWEB#r$4gJ@MM2)EDn{s{eg8mf32&&*PY)
z`+hh5IF)rro!3ub{Jlo?PNyh~``a(vKCyq9W_QfZ5Vu=(y!q`DS>-#w)qFHA?(4GH
zy!!1_VYSKIOeXHpw=#{Y?U21~qUmqya@xaLZ!^b_z~JeV&#$iH_))v<li_*Ix9$JL
z?tiYbUcJ+XZLP`0eO<y!u5P<@@v^6^`4Z1>!mle-{9-J;_5?HC%XONkx~n^_@ZTxb
zJ(suNwN1Pj{INFwU!2{x*{myggjw=mdKvlu>{C3R%~m)sNqOH&<HCZ=<|nJa#qdA-
zvmob;O7zi|dZW^%Su6f9-+Q>(^?v2Q?;Xv8@0?B3SI)C(FRyr~_;^!yq_X}6g)MhD
z%45wJ92bh$vtaKlJ7d#dU;QIiV^yLn)AOh0in43}{MRy5I<S1xq=z!;iy}Wp3Yio-
zZ|ZpX=K8aMbnb`sS@9cAd|NW{_MF?-gxCJPd+lh2rjeNJlfA~?TdaIdR!K2UtLT65
zZBp)xcNy+`ZF2-~xY^4{d)ZuO*^oBx{-XV+5_uwf`C?}*xW4GAL@sx7+h*D8Y-Nux
z1~AX-?_o}#RluFK{=45>@k_GPbbPxX9hFUuE>QiM7qZ#;ywXPJ*WG$DA)bbJg7+Pq
zG`n&^vEEOalNs*29xR&l`JY$aYPYUQWn1JN&)$4}bIP3c%Bef`HgLaJ^U~%0RWoVr
zrEPcRJRfc>b>H}Dj?|Q@w->G)n)yHb<BY$v_+tz2{d0Cd{r>;Y`7<{c&vH-`ZCZI!
z&*<S6!)%_3y`eWfdCtxaOuZDkZu#9C#Txq``)L1X$a$tVxniOHeRH9O{-Sg1Z!<3}
z<(Eqge8)V)<%-E4?v>q({#no3H8*nNmUQ23vv)m9m}YVD<rCja>Rx9AB+n?{3fS^P
z>|ns7@(*U$uZmq<r@7c&gz<M>$RCYI6Z;>z9FK7?JshMN@Hcbijx<?y5B?Kx*~?YG
ztxFZ1#dsv_!?|5w%KWy}p9qVxKYAr-vAf;Ld8uMP%J--KkhmCY(#9P!@3i&a@EynX
z|D@LZ-?cpA$nOh>Ov~ivEMB(OXwpQ(Yf2{;^d-LHJu>~5ti(gR8~fII)W&|YO8LjQ
z({8G;@QkhPmyQRk6jgN0oq2xtbCc$OSJfZ-El$5~^W`yTTcV!U7NM+Vo$A+2lir@=
zyK(g2i>b_;=jQ&1I2oqRWGTGStMlR%y@&4>YZrQa`>uK2>11gCf(QR@JvY35carc;
zzxVgft+Y@Oe?0G5_lL4Yr@E${bJ=$J{sO^=!f)>GSX{z=?z_xEi|PwnjH-RVHy`oX
z@6Guqc4bgUOkVhcgQvgPeOu!7tLMl0*9X<xb2w~|RG+w|X>j*y<J5c3KY|Oit{u;M
zplY@(NLT&7rmvLu>!REmky|F_eG~sZzBZ}6qxUjP<+l4v%GPdlEeOA<CKJR|p=rf7
zHBxBhB_sBeGGEGLjo0kjp|fFnP1$^*R)5a2TY2mF-W<FaVpw;}P<(2T&T?7)_kYFC
zCm+72_vh8l+8?)aiw~?^*~DpTEW%p)^>Lbiw#4=+H8nH7o?o8t!`huA|LIv>+ca<c
z)2Hv>PhT59ndR~YFB#Kdy~i%M^A9|k|BLnipVzB86!n*EDtuF!_V<>+*G`>B`?p*6
zK5@8s$^TB0_R7CIR%Ty5Q5^Bfj?=n{GvczszpPD@Cd*9i3%vZi&}P4n)~d>zadzJr
zcm6%F?#Mm!$ft7iv-i4hxt+IRYTwM<td(5OeSLqd&K0`l2)-}c<5MCYf0A`o+9$pH
zZ{L07{;$68{n_hJrrEAx<Y9Ele_3-ee4B?qU)==8m-T=CS+3UO&5!!rcd63i*qYda
z&t7KNjOr4O{5n=E^ln+^qf@W-_j_`>a%Da3;Cs3$>%o4x`<#u>e_dS_v!_cxbRVbs
z@+g<$^?u3xs#W=~le{<IKCE3EF}Jz-azXyp`-bN)c2snoYSfVbU~ADgW0rcm!oKg)
zQ!MH<&Dg$go6}xCIkn(J)q1N}nMzSxw%oCg{baUI|6b$AZwp+XEmO^AWAm~o&ptP2
z@p|2j6XbZy^EiGT67KxIahrmhsJp@GyIs!@J^r}4Z|AhQ+KCh1Y`wSQ?+Tgo{I|sy
zxPE>xduo0}knPEN997zf*Q~qrG}3!hYn_@f^9q}O!y2LcI+gSO{5SfeY$ul*lvXtR
z-#Njf`JN2EB_)fmiM=bG*m`SQOwZ$Ai()HG&7|B#_2)>YG*y+lu<%`6(j~rq+k;uI
zb7zEzH)v(EemZdJ$;yM9yu)Hk9@@XX^Z$c?-AD0juEqui1}U>YynZF#<MKq&;LzUq
zf-62hCGK4>OiM_RcopYeq_E+`;m@7@e@ml3u3&AGS*>%zBVGGb?6c1M_LHY%TD|n1
zcFXH^yxQlM-@?DI$=b|*9l;fH(D?JErF$~=Uk<ZN+qrU{r%Sc|<APZg^18da-HRJv
zW$wBBeMk18L%)TpuWviK_V*2EdyfSd-}VJw4wEiQ`ZK}iQp&!3ZTWg_mzRZ~KIWzs
zvaz)tbP78(*KND~ujT*6t`vN^=A=C%Z&pQG^5&^NmoiW1uRZWa(na%Q<+|OL$~XP)
zvUx37&*^_CzA5-uPtNiq##31SZGM%xrbyoPQat~?c;<6y_4ToRR)rV&UK?0RDS9Z$
z=$Xs$n?KmC`~2Yop%WgjE>|y1`RJ1_Z5O{$?sJUpiYbf4cFxvKOt;&h^tRGgKRZat
za?M1eBIoTtJl6Xtf7hI7*L>=kN8)Kd{>fF9Di)HAj&`cI=ISwA@TlF@@L~12$Z2;@
zKi9r@L}Q=y#1^Kw2?xS`R4#v1D&W(fsbO(&YEPTwYZmd`!<KDL>rLLdf6ucnQ#mbI
zFhk7!ezf(%UvEub{o8+A?7_ZU;#F6R?d2Tp4`0oD>-8h+vysJur%&evWzM{NR?y~0
zmh!)+eZ>b(Mk%`PEM9!PXKwAgKQo2vKXvbalX};fnVH#nTA{yZpT5=qZATYwm-{n&
zVprxFrJaZE^GyrId#n$9wAswYeE34sspBkSwMX3k+^l|cm3RBhS$7gNcB(k&w)EY2
zz^iK6Exc56-pS|l^Y!JwtM7b!ptkex>vMWe2jdy<uQ}aqdGTLp^v@ZqeN9ajb<4}t
zgx)Sc_vO-&>YPO{H2>`h38`K8Wc?4vipR<R#+Paf6hyE42-K!}e+luCT4i-b_@LGO
zGpDDyY%z_VdQLg#x)?L_;RikawO{S7-z)ejq$(sG9dS6$YS-WW^Y2XEo@dRfnyYTH
ztHAu~E4Q-FiHp1LcUdiWSvkek=;#Ksq!l}=JK4>3{s{CevXU^<PbhERtaS72cfBkv
zP6y8>|FULo)5q@q?~chw9ecRqRr~btD%F70;0=>D+>838_fDf$TKH{j*qhor5;mG?
ztAf{0C^FNu<A`}D_-+bEeo(DM-(9<si;cGq>1ymaQqC~h!?tg8`Qzzxiv<+7efao^
zJtgXe^-A?sf6vDT3p}3lW4q<s6*H}*PcG_w@J6nv>F_L_2JwTIH3nDb{W3J2<NxZ_
z?cX6a9~U0Zc-wb4^>ysJ_HCM?O!NABjxXu+tJ#*cSk<(66SvpWRGB?pQ=i<6@4x!!
z<p&lK&Yj+eFWi;soYHo^d|Tr8dxyG<)Wv4px+=M+XHQ~_H7Lfz=D9a7F8h^!=6d~q
zwx1G7Vkc$$0)yA9>n|>NX6(qrv;6v2VHFYm-O2mbrhM5yYu26%6Bh3?p4ehq+WTDP
zdCaBlJ=>>VJ+FLpxB15WyWci1?8^+PzPPCWj>?bI|4)Vl7x#u-sVftByZl_0uk&;t
z%QD9IUwXft-(8kd@i^H&ZOLziGw+}N@Vac0#`o5E&7nBMheaLROrJbXOe+QDYKO2x
zcU1xwf4tfnrXh9r-<xG=Z*uz%Oe`<4PXAbEVwg5_#)%c{{WwFa-hGc2kCJ*2GTC;s
z?B)8kv*NpV+h1Zh_nbXP?t{rg_x_NR>}}b7?HU{pSo!S#oUZz_B+|iUd!&&0GtKX_
zr-f*WPyP{gH7e#ouFF~x*QPt)11{VSdAuj|Yed!apEssVdiS6$f8z|jh6@%ovqHXZ
zeky(O!HXmR%g!7=R<Sj7{c?-$C-*dN{w;Z)!Es#eQFXYU`^yzl8XH}1ojU&dgi89&
zISuWbPpNj==&cL5FlEET)%))<oi#A_k_deJqa*Kl^TCx74=meut`l1w=WiEnT5;v(
z;T;<**yB3;&RI8V?Oh)0+ba2V-O=QAtJm$$xp$Ab{o`eJxfELyQ2b3hxpyLmzHU^J
zcj$|??M`l8C;Of;{oj+l@_i|PcV2pe#3MN^-);BPv{(M!r0BkU&PSD;sK<BDcW&da
zR-12sFwE@Ra<AWw_f@{_FHM`oVX~_BS*q%sl>eI^=<dDg;kx>~-=e=)Hr@;g{<`P#
ze_f+{Q`*e`eYGxnUAL_Mj{lBhbAn&3nZ5H;Nb2=~>$B%^=&9vaB}POSN4&K;)N}s8
z0fU5;IXMBAGu{7H%+HwhjJMVF$X@xodSA5zS9KQ0p51Yx+(7we-J&UHHcu=JGbweu
zzxw&sh3ER;-!WtVH_7OQiTf-W_A4R_G&ARZ5av4=a6sCq?#G9;KR<RlcVsp#y;*0J
z>Gd+(Yny*@=_B#Q^N)UYwGPxgCMd78>2JkNOTGHptCltRnSMX<!|`MF#5jcyAGFqS
zy*c`QRs6B7uDdU;wXC|k)8T#Zwb#PCd20Tix4u}ohS#j~My&0^KAxmf=hr{iI7|%|
zs1!EWlWaa8V<;ILXt{d6XXoF&MTT|P?ASS-&n!56KJw4Mq;lar?VD|US0_*ZXRG?>
zv2EbH>TjivTe?|4|GD&J<=5onzOh>puH{^_1y!eCj=o<}=Ki+F`h>;NEhmawlCOM`
zeDLFC!WseQ!xzpTXX(_AD?47EyR`Ja@sl4@Hoq)f{Bxeg$;!UXWw+`pmaY9!e*FjQ
zHsiHDQ*!j9YCb1b`yQUZbkVEbysB|$cU_sBwm)lAOZhMR=kvG!O8?eXIQ5L$-`wn{
z&nJJ|)^O?@&)?0fcfAo6)_dp@&AHiznfY*ng0%A4*z(I$yH93EDvEZvZMWaPQnGrM
zQl+~0(kaVkhkrOfH9w_P@<nAxSgV@X+icnSYI93(vEKRqu{a?5S=*u&FIRlyS@7LQ
z-1^_|&e$IxCszyjo_L|_abMxOuUhbq3)`6gNAG0owsqI_Ezq7+b0VgFi_ICstCP(O
z{T6St4h@f+__3MQYgh2?Gv(&doq_MQs<^9++}^F6?l^aO&8{xfe7R%h|90@sz3X`+
zHfjB>H^&#gRO_-atEqWf5mTI}YjtR4Pq)w%3-c3y_sFc?Uh>#hQl)8yO@M<(Qt3sx
zGiCD5m(KWaI(MmP`=UGijl~_UkC~RIrmB^eu}$Cn?&p>Uvn@(#ZHlf9Wna(m@HCqm
zNq2s5?>@JC=al6_89cSWtD;`besc7n&Ow7CA0{2H4EyFaB`5w@=lh#p?)Q^Vd|b78
zQirem?&+Twz5P6IrFPxxc{?he%?vU*7~Zz%sQk~47rMXgl_g^{U(ITs_*OElHtW)9
z>%a1!&+mR$|MuzQS2KM-H5Z?WxskmrCg()wr-!SIZ3UyA&Mtgu8I&oznt_e2jZr!I
z#cEY`;ZD&hb9iK51$Q<6{v~+V&(nXRaly*}3TeA;t<m^+Z^E=mjCGd^`DUf)?}=P=
zyHt6t*uS;X%ahM73DQ{kChC^W@jyrEKTo$h|F}47ZpXyW)t476zkaoZdH%i{u6J|p
zHW<z>Q>ytPVNw2Z!tLpkuIsL1Kk8(({=J<4i>h6B3=elnJvZpfKR8{jI>5T#a^Ghs
zfwonVo1E2!UM)Hhsq*V_zTC#BWBcn;#I(BROc1qw{CD*dyH}@ef83eMd*imu(T9B!
zcgi+~8_o4P-BM~T$M1Wr=)IuNwsM7w+zb6Y%e7jIvp??sk#w2M;>ew?H~QUo?%%eU
zclY<w#7i3TAxjO)jI%z@czo*W^mF(2t{1fb|I~TSbh&eOA)DmIV*be&?FsPSJxj18
zd(*;Y$7Zjp;j~!y-ZkN}&7s?K>L0sAb6@J_P)<7|8q;VyN1=4nwPOYqd-|jbuAGZF
zn_KrNeL}Kl+Qc&-<`<uh`1B{X=MAGekF&**$rGRTH(kEnV?1}^<BFqKu9}~>vVUZ8
zGcN3Zq;sF;`7)(zS3;IQ(2IMqVy;-{``G9YPX%jIYd$`T-ltJ@`n}nc3g3IT=bg7Z
zKWoxEruU!Le>=b5k0Zb0%ju%ujepPR?R5MUen$0pWtGt(-thROEU%4wiw?0i?S4_Z
z^|MFQRVHTU!wqWx_ww<keE9P@e_wn-kx_{K@2hWf!&25?o>tGWu-CXC{AJn_9>c>E
zJkz;k;`;gy&bqL~uJpF%%bit;vU!nad{Oe9+B@e3{G7gh`=faI8up7zxOSIhNow5m
z>pvfVwV^)hYD3a~=934mEAIWPaV7VBLve*+$T|MKTD>{feeKS_pE<!-u-A(rc<$T)
zzxD+?79KV*kti(=EPWWe<Fc_-Qlas?=*`Trfvj=ME4W^+d!=@5&()To`ONqC*7B*$
zQ_nqfBI16D`QfIMsXtD=TKVJ4`RmcUbu08H&)eO2cV&>x1xxPl*KOOEl&#_sSo(eL
zoUYb)YG(?!CiKT-)t>wLP^|JzcITs;y}mPS3e9{h0|n{~r%shL&O5Z_v)I|0Uq8p&
zZJAnn`EdJ_h1>gA-aTH&>b!XFd5=l|uFEV=pZ|WvOrz^pp4f4gpL=KJq_%B;z%BlF
z2TpXUJ-2iWn%d{gm7UAeY_;(E)bkRZC)U4AKJ#XxWZx~x@`>xt9@QzlwP4n+U$5VV
z*YD*_w-L^^ot_>V?|;lZ`Xj6Se?R`4?~($~r^qFgo31*z%vvdWey+}!OC0w$EqZj+
z{QvG3`u{gf>=HNJWZS>b!MAA7>H4Yl|6VQ5y!3a$nKzSU!%C`45Bs*wk+5G=%jy0*
z?`@c}WaXTiTPL!b8XFT8PKZ1_cemp8tD{~PL2(+a3-20)PWbt<xH>`jQ-9uamrrL^
z-zV(ZEA1J4rXuashUm_q)Zm8R%bV|Acu{2j@29fy<tJ;?()N~nos-Y%efW9*t(Ix;
zRATnN$eZu6?f-sl=?A5r0V%vrcXdAOGdd8<_4R9fWAV>U!xqQw>(h!jvikN2RqQK&
z|75qxMD21bi#>8@%?nR)-I#Wdb#ID^O<RwDtdZPPJL!K<_1`bpsm*!c^OB)ZZ;AT1
zf0wn}1Kw<V$ZdX(VSYeDiU!kK>Dd|&KK(S^QTjgO&y$z7D|E`fX}LS+dVKx<Urx4p
zKil$z(u;bhx2f+I4mp(Gv{>3)?ClZpS>XpXpE>TBY$ocrq9Qrn+U}B+<ILl1zQ$Y+
z61PR&UUIJQo#+!@<vZ<yQA_SBxM#WWg&kciB%?oR`I`5ZT<TuCE|r?h%er?`&4eeN
zeeL2U$3*6qe?E2Lm-{t|q8{BBUzq;iS-sNXb$jHdE0^y^@ZK`t+`7=1x9Nm<{D+UX
zbDk!@OG~M)I(OoB45#j;k8?jn^Y356Hk*5QmFCU5duQzh{)%pwTDjxIiEn?>FD;w(
zq%!<L*!?|Mi%MQ^{y#J8-o>MDCP{9av}@y}{Y4Y!b=_#&ZNG50dCg|Mc#(U5j-+jU
zz2ab2b7SMe{U<D51}I;A&9zct3d`MV5=WNR#tO9jv3{DQ*m{0S?zWCE_u4(Zq_`_=
zOgOEBmqwoa_BhDs{*MbKA=7s(_~ux2NtX4kqU8L)N8R4!_eBM%?2Y|wakK7w;ilND
zmls~$#dR*8HS^=!4Y9wT$~E(BlWNJFxZho5)(?~Yh3&smOfs{)?YG=#zh_W&;#(Vc
zVtgh4k4se!o(`8wve^&vKEM8W_x3YRzMaA!udJM8IAu$pN{G#eKX!k9w*D2k`)!T$
zKBsljPqsZ=EZ%o~&PUY_)vZ0xZ&%3Xu9D_2^LLDyeqlC4??vIK`|e!t=-$(A<RzQR
zwD<qpUPYVF*91T4WxBNLq&xSoIkUyuzRdRZQprnyIrJx-yLo19vAJ)bu*<T^=L)VJ
zFbT16Kfmkp6_I7W^BDVf&6HP_^;DG*uGn?(*E8dFZmuHnA39aHeKNccj;t%r+v-)n
zTyy51>zMLew<kw_f;xAwCreIh^51Qns?<U+T^EV#i_M+&>&xYf^9AC$zOC|HZF$nJ
z?J5g1^I?Yz+7JD{-adIcwKYUQ>;A{t)A`bT^KS0;o-*zGj(r*GUM(%I1!-2By~`i$
z`}VWo)6A!dFW!4I^<V9NRd94qV8G;?%9AovtpA=f|G$HE{kx3K9bbZ%xK=r>`hS1w
zWZg}7%je|SZxm@`JNL5L<UgB-c%9fXE#>^=FPYl2rc6C=?e%xZx9ZieB=0R*DRwi@
zY0e&*ZKCs8pRaAuJbv$Y{w@J0)6eT;Bii%tS{zn-koxwDn8Rnr64%r}PiERyWJhzW
ztlxWHW!2^5A`iL4{VUh!rfuS`WiVG?_2KrpnIF13<8-rKci!Gz82qv92yb+p+JfAT
zwsQ_;-@eTl*&d<bSJc1e%nsG=XV*66&1!6XsMFqKr#dfV(fSXM4m_Hj_PNZw`+*(j
zKFjb+FTR~uFn{|^Z$ZMf<&qM9+AQS^N1xYkITmO4&Ca>+s==naO1G7xmONg)@GJlS
z`BFK0FYd}TZPy9d^W)inp}$k7<V=^idGCIjW7@?<vWxb=ntrnR^?&2S0_EFJC$paW
zWqGvkmgH%l(6af{q!r%A^tX%sSQc*+u9X-Z$i~+8ui1WU{lgE-<Lm3^WX@vUx=6fB
ztD?v`_}<ANO_@Dy*52DwRE#gTY;0(64leNd_(gGL(xNN*$EUBGn^k-9%)RN+N8aZD
zFJ$Q7SIHuGeC5T{Y?h7d>hJ7WBKJMUcB%NLzegsUdV9Ies$^Z_y8VDpn_)y>zSW`m
zn<v#4{p|`eZ#Um{*F+~eBIUPhdGqJcLm`ir-)L5wztrmWb=`G`udkb(RU77iDbwHk
z--jE;I!(W?y>Y5`=PBDgVPjtA+`!1i-p@iFU*kT$NLeTSi@&R%`}TK7f**2b1Tlrl
zH3sV*k9_W1T$ZqIwQBd1z-Om!-xWC~{eFvMK}YLH2T<FztfWLg?XC$k^Wn(8`+?@m
z-zWN)?s)aQ=EfBfb>o|!lfPfwtjBWP{L5Pr!T6&ue=}S9CWj>_oH%;d?9I7bGs`85
zO3ajR>u!p@t|ZIfa?Sov!>zj^7dDkOEpN%%_TPag<X+a2q@JAj<(m~AckT9=-2Zmh
z_TN+g|E{X|EX=;u!+Nu~m`CHOsX+^}7G}=bw{XUfAhT79=e@rLu5pu)koeVo??&dk
zW&LsGqFg7kFO>?{-@n$C;dJu#GTpajpT2X&E1x=AAy#z9C7}Glf2;Jvx6>De$j#qV
zVe@MBp2(#seUsnL{#O35x<7Bb(p~>=$$ji@`m^IY*Wa~}wM!S<^w%OIWP3t;$vbxi
z-Cd$-Yl<&ST5-wa_2Mphr+b3$)Pk0^)D{W;G~ijXd+Na}4Dp7Hmp1Lz**W*#iEobs
zN}0_j9+zEmZ{MCOsYRY|r*M3GtX7j8ZvF3jXKdKxlVZAlOH;e{n%&uzqqFSFuZclM
z*QM_!ItnkcyJ9Q)jwkTlCdH&4-4=fFw+>F{{lnTO{qKESX!E_yn72}Y279#k5wGyr
z>XV21?{Ay+^$HIUPx@Pzx#bn|4CkLO_?qRK5-T53a#`cvyR>cA7kj*36+c<(zf-nP
zeCxaG_1~F;!$Z?d+1lO+#4zd^{Qu=zrSwD7ZCiAT^%jrg`OdH9e;$-{*!H_y{QjR@
zw{842Jj-`G1o__nue|H+&iCs4`EM^gc1)YDQ_we0_tt9l__PxrCtbd^J|ghl!R|em
z!_Q6Vl6-#dz<~?)AC~uVFI(BRSX|tTQ74iwsO$dTA_hLq`bdxd1rIJSoxQeY-pqCW
zPXpvQ{T$n$ox1h*^6wcDZx82ct2+d55`Jv5%1ST$$F2AG-P}FeZg?*Wm%8aEy#C(r
zk2_cBm3{TyHvhqw!gop@+<8p~iGmZl5)IgNq%w79C+%P7QqEDb!mmjBu!82|><2ZX
z8`kcSj`7s>vAmc5b0tsDb<Kyt(|ryc*O%&lH>2iM_zJnIt}6!*ua`eIKi-n#;QJF=
zy3R`*(yoX<44&@iU@@=qo!)^BVkQ6N*1AuQxspA_T6EXK+|tJ7lDy~6_3UJ;%AYPH
zw5cz*_ijdJr-KN$bMAo&qIG|ccnVL~oB2FB)|8p~@J)_$&m1!D#`nGYc!4|R({=U6
zWT~u;o9oVL`E4@R{Vw+-ZT+lMo!gFDS~|)6PkQxY_t_&8e1h5<7q0(z%*3PK_;>rV
zbyMa%on|3-)9>WB`oP`&+eC{pS^PUg_WXF}-{E?-++b6!13!oA?b*S;)^?KjwmfT(
zTBCiY=aTsnho>@{0k!8|_T<&C=Q2H-x_(y8!WWup#h`Mn?jiFT>8X={zGeQ-wJcLl
zX9`om&%U+2jybj$as|69Ek%wv&U%^S-n^K(O6={o1@De9&)xj+;nX$X6$O6RzCLWM
zlPRIhE$n@=OzLml|I5`I68**R^aY;`UiJHJS=W#G*3S|TX~>IM&UZY%Md_|(zGRMg
z4cDCICc5Uv6FlqvUH0|;o49q((!1vrSKdCzzx4jH$wfiBzg@RC%G-(u1X<Qkz2>>`
zdSCUroDE;TTUSqPTF9*|D=4|Y?j^%Fxfe}OPWaRWAG(_<UU+eh)*SP#G9N>pSqWG&
z?+!|>u<)L;JL!W&I`<>3|8XrP?s44miw-PYsoeN=x79(>DQkLyCVMPfwqYHp%E@6l
z?(Jc=@9h(dhwcwrWhSjDOli`nzvkgKV~r30oW<$&Jr*67KGSq9XZ}xlBE;;>SF90!
z;NkrGyQNh&71z8^7BsOeef{F~Lf-zG;J0?SLN0uLrRjF@QGbkzSZMu0kE1bb?BA$g
zN~!i<Rry@}@a*{&4*lirGXjew*QXzhyIZhU@%ZuHj=I(@^}*NkE=`{3xuy(Mur*J<
z8T@XWwOx%|<ySE;MibeJvSi~gHq6U47oIFuvkToOx#?v3jBS%%PySzRa$|z&uDNmD
zLbJG~Pi?3v3k@s!^TYI;iTj7k>E90B<^Ji}8Kq_TxtHJf_#(+CRUhl#<ZR=p7p^&L
z;vs&A(^yn`#q$K$Q28m{Iz<-mKXPSy&PqF)?pne>wb;4zcIz)of%I6;6)X1$9lvDE
zoAmo*Xk5*|Rct=1J}T<f7ihM<UirFQ%6UiqS-lTtim!!OR6ib{^!je;O&5)-XR=&L
z{!@N?Uo^CsrFd$tUKz^~5wYsNMQ&YAXOllRtNG`?@_Mv1SGS}zBSYMlZF~2s{^LTM
zBf`%fI8ZR{+^vJwf4`lWwwzC*^MiNFr|Zj|6IQL<b>PtKX`jlrmu!nZZ~mLhe5P)E
zyUe7eMSFHE{@r_jZ|YCpo|L477l)skdBuD!-j|nkD)PR2@uJ%1g=+7^c5}_nS$<Nn
zTdX#vD<tIedpE7HqrVRRJMYd~{@`xN=X2JFW?!>eb9~nf-=f^+##Nn5{>ElV&B|SJ
zXR_jP?OJ2~y$)J(smZ2C4jh=E?>Dny#lsV-two=YpFF?Z+~oOOovA{7kKa0W@42$+
zL~+S0J(~-b>dRkz(~mQrdgk?}$tSOrbE=2@dF}jOL2vbPm#5Kl41aF-P7i;)P4w|X
zRdxmCS^Ff8ob*;S(_z=ioXW^!apaNUEECbcw=;cJGfgHl8@O0+<rR%tz;%grK8rd>
zrtR+<ea9TP{$lm%4_9CJZ%vfA;CCz1uUsQzR-gFxtq*Qq=Xd^c%lOl;5U~?#oDn7~
z&vcdar>*qgHDP18-m%FGPZn^mj9csS^8dzf0@JFc1uqxNf6v@KIaGFcU)#kSB8>`M
ztRH)_J7;|F%GR6rZ)5cO)V-jxERs{oR&)D1*5jY~8^nLfobZip&3<DUpKvlbbIYAM
z(j8~BCU|cO34gHf$-?cCn?l&y>>TEa&aVGgs{N&6L*A2#n^LwpHs{Z=d;Q?8p7#37
z0e{8vi}Nlhy)8dhzVA=o!O2XMHs1&|efil<%dGmy<hN?EFE+@of6iC*M(z0h6Cc0N
zd+b`YM)kO2k;==;IZsY#3#{J%U3CZZ?5Y#r(!WGZKUmchb39vnSM65C<IDS&#2S|b
zUJNvzs^%|yI;*p>Q8B(lUPgIMU`FM_J2p=pSL%H|xJ}|s(7P6E-6br{(|>+XpZ8#r
zGh_etq{SCk?R@zB>6z<77CJLR+E^!hFHF0bw|rl>SKhCgy}lKR-rRS}HeN4w3$OTa
zHaaab@ZBoA1BJH~?r*PF(A~%DcG)cZg2KFvf5QLfZTc2|b;_hKp20^LcS<C`NnFwV
z_Wg__@A&MOSYB^fKa0osV*N~;U56X=9>kdL7rQNec*pybu^QiMCfr%3QdJ#sY<=9F
z{?BP)hm^T47+smV>eULp(udogKK^j%wr-@H8}r>+!usy+kCj#5PdNWfGsu0`!NpNs
zkCg5!+6d*G&=%;oQ}&%(xM#;!*7BIE4x5km{Yj4rGf2Gj#PGCU#Dm{o-^+Jz(3{=Z
z`0$N$)d8OTx=+0K-)MjP%y-`MrYAFBmC_c24Ihq4KJ4w^>#4Rr{b|d6^Vdc5ez3)}
zs6P?9d+*lXZ~Xof%zs^&Sj@wd?$MtjwRGJt%lTIi<u0!@=TN=w`k}1c`sW8e%f1Hj
zzLf`)dl&ZhM+)jq+VAvfZgJ^WO?9o4$Fquh)ZLpiGnyRB{}<Klub(}APW#q~@9NId
zayOTi$!Wf@S{h_@FH<`#^W%edH<g=yoMk8da^5X?_$b@*;y&%lFLRF_Y2@AVE>kRM
zm&9G)?oW*`?F1GaX0-g%H|ylocb?DB8%%xT;v6hC`TD`!{mZr%?AE)w=X3Ey-)yrD
zC%*kj&|dr9+x2Sqmy{cpi&9o)EQqzSxNQ7(5o_D5TWibAH=jyMNH`%WpHNf(_jCPp
zpUZP1HO&2mW9>Gtyy+D-OFw2$*X*wC&Sot<mqU#<OkVhFy6om(J$c&&)6aJ0nV+#s
z+HP6WGU><1%exa_r~XS9+{@IyKHi)+d39~TqvkEXlO;OzrTGhwi3Z&Jqic~a_^H=u
z`Qdpv9Tpnw36Fo9OD;W`{<4p;PDAOAr|pNOixuY;*ZNPo(b(v9@JEc0UD-v8HTQ2f
z@>cJDpg#ZX<eX364(9#&_Oo`!?_Vz;EGk;Bx_D2A?<0eJC(f`ls}8NceR~bdTFI_P
z<|4ssuGxhf|0^h|yKcN3%Vg%~+`L$LbL`t2GqoC-cd|a|Tq3)rE$GIU?Xu-F9<QCl
zyUg;?=R-?N@3^Z9d9Hf=Pwe$3NePK_VJCE}gYMkX{?8CMgDJK+RaU5UYI*P6@0}NR
zv2UN$zj5=$xO0ZjV?1;W1$Vk`|8H7Z5Nw{E%ENP0(c<riv%9y&^|L>pCztfic2X_>
zOYZoP=HuJi&Fr>K|HGboaF=Bt|Le{Pt4d_NzRzxQIcaq6ib!{fs=KA7mTLXejQ^J5
zy4NR9{M-|=#>W29U8UR6TPnV*JHM8{7xf}#cZdzwzn$UdCwjfwm$+onJwfLk`~5em
zTVC9!R{3S_bs=`M3%l%2a3*!%x~mf1ZMXB>TPtbB?Q$BbkCR&$FH4+LeQDCoWs~+C
zxiF=e-DltOli!vH9WSf1-IRH@taswu%EJ?q!)Lbb%TRgNqVSjfy^LvYY0mF%{jXn4
zd3bnuY8`9duYdgGg?j$Hr7ce1oOV>-5)EGTcP8&yfln!ST+bchNuRy6S@zo7y>ZdZ
z{k@%9Z#<?QQeGi>XYITf-#Sw*wl94DqRjQ`#|PQH)9QYoy!dv?_a#=h!}Zr3oywiH
z@ECib@I<$r-DVxe>l?OxH=S{j&-?Wrc|AR+HfGV9f0s<Q{E=zPP@gY)_g%9^s;Wi1
zcv@1yr%M+)zHXc<SM%-^+nvJy(P2u_|5(y{PD!>t(vqwGtf4nEI9YZ3*(+=zR~<@M
zN^g(1;H$rXEo<xCdv`c@&A7Ox;zLEnB-b7C{$alvFC7&y@alSybiZy*fA~Sotev`v
z1)06S7SH9}vh7G<;2X8?sbYs7$NBTEdVG$foQ<t*v(&`x^M5TazxH(g6WMv1mM%Nv
zr7ga<RUe)$cR!maAZVRHqSndv1!nH^jm!JQdmr4gzvn;4>++}R5)u+d_WEVpFGt#^
zcgkhTKYQ^_ZqePB)p6WgZJd5>m3<;#HmOc;(H8kLMy>%9ZFWp7oAz+t;iTiKh2k%j
zoBcW8J>vXl89pyrqce2bI$g6T`xf2P<jk4)c0R}2`X@h~)NgB6%)b17#k@a-rgzNh
zTqeA=b=m#ki@cxd-ru*6H1bM&+|3W&HM=kK;kCN>F#nc`Hd|Is-t#uZn*V*kEj}CH
zTgQ{Xy=s$u=lQ(0<In%8f0gcCPWdgoa@yVRE@t+H9TVUFJRE5rT+lOX-=&bJk0##y
z7#aBPwC&}vGe%QFHcO?<v1UG;(EoAI;p=A$=Tx$ZYI*(t#qfG{+hK05WnLL71=%9M
zqZbw2Xt7x}>7A)@Ve!YZBVW(_JhEcl@8-Lgt9;{r{<EF2fs<)p!PzNy7TrE<RQKym
zoQ2B5>(;9^iXM4i54veo{2}?kNr!{1ZjQ5Rd7p^av7CE){<EORZI>6%=LTL^P3^Ey
zVgEI?Wb6842gLiEEPiXvIC(HwcHt*Wvx&zqy%gQ?vdQqr$H}_`Bj5aBIPU2AeeZFl
zA9wHbKiEBg7Q5fY%`Q7X&oEvm(Y<_1;^lpMJE|s&DBbs)sZ_SiYomH-PgS&pk=>2B
zj89jT3|numGuu&lbkf|DrPmpzp0X61vN6w}<NBQUi>2IK4Maa2OYS_GqmY!4U~zk*
z)wbQYjZ=SaE~q#@aiVH=L(9t5ao2aS%5&}gdV&8%_<1$!pJ{PsGliG7o=}X`vZ(WY
z^x&AS#3mMF9-j0|b8cvuUA;2(u<x0oMUNLu<hd_@@6VCoDy1#<(kJHy8=A0oGE4Ur
zEPC4^_x_*t&p$m9EB17Jk)3~0>1}eg`d!^kwn-{Y<?Yw(Kdre{x#Pj=V6AnH>91P7
zw^V#McG+)R{e+DFrB5#0)?a;anfaA~*9*R%UBcV=<#&nDmvxse{#bWuTm9O#MSt$c
zBtO5u^7yXwrzza8>tts=`1D_`GUfJnrP*@!OI)oZ<uA@JiwM~qpe1J-@84!1q<p9P
z7ti*^X}6ws*1o>B@?hFF<-W#5gX0x(P8oll<y+UOo?DO<*>~z>&;3JAJFCwc=-B4i
z`9E)%Co2#X@ho@Cq8rt315RFCYW*RoglCD)C(V%L+M2EW+{>pr`=(C&x?$06Q(6AK
z7dy5EaMgWh@2u1Ec3ylt-)g^H@~XW7LCzC4cV|uF68iD6`@sIM)ib(!VzyRjaL$=F
z`6GXa&UIft!^79!FIg=q!Fu3jyTMnX0>AqUT(`@!Po4I0caGS@e~+e#ZE2abVg7^#
z)74J<o|1~YeX(!v@7;zA)rzO=UM96dv+&_D)vpz~)z#};tXX@D?3Y!1EU8f17xI(s
zN!%3X45r&r(Gt&h^*>x&(W^Rf3b)Ipb5T}{Z|vDEd40_c2IF;oKlXS;DfOLRziUO_
z?Y_O=?*A?9J=3NFDpw@;T&}kN=wt74?CY+5Zuz!?e@Y(Qk*<@z_od?UO_8VXWUSv8
zKRJ5OyglzyOSSz27wM^U5?ZX8o#hRJ49yE=p7Y&TiCGZ%)<65<w*MTt6(w&SI==;1
zHJE(#yPx-bR_<-fi~9~*e?4@2tH*D3JC9w_DZ7(Yn(p)M{d!_?I@8U(UUjqZt;JWi
z)CV2TJ-WQq$)S1q96R64+ut9bSh)TAii69xX00fVSkzQ?;=9|<-2dk-4sN?=n)grr
zi^~tcU{5Z|+(~^|=97Kj{|m^w^^tk$;{bK#+rKU2uAgn$n|0~x5qC-Jpp)MoxAd)C
zef{;x6ZsR)i61y{z#yYpu>Z+HU;l?ZJav{c3u7ZW%zbw!N!9-O^v#UJsZMtD0m&K9
z?by`Ur|vQ9mAEIf-pONox=MS$_ko%pf2vkTei6NUPjuqP&CkCbdTr(D)fUF|@_=;K
z-yb(rg%@i7njqEpeTsv`{uw+HKR-^J@_<+BTixWRU#hh-^WM(7-St4;=KOtz_uB0i
zxvFPEN<RFxUn1_3*2DK;-D!2DNfx26+(jy7a=IUt>&r4c7ct(&^~K7sy~8rO+i=~f
z*@lYi9M;@jYPr!au6K&!SE;@0r1q$GmNb4ZIIrZ^$8Te4xN=rlNZlUm6xTidKTgio
zNlrR^Wmoq!{W&MxltJ+=J8}Dbn;ezHuTMN#e|~D1k>#4A-r4nf>ZuVAZJ8g=uFSOL
zd7BmV%Wk`U(ViXJKc3CsHlyv>mJ|tzU!N4`)*ZBee@k=OBpI=vfqq+NwoUqxUGP@^
zJ?HxRlnW=n1^@E)bu77EoSkg_@1v+@z~A+I&Wd{FXKw|q*XF1*-tuo^yvE$#beGzw
zi*JLc#V<SBEZ)bksdn$Jn-$(q-Y(xa)nd!buMd@O`?tvPPx|<^b9?jp|NmaET=w?A
zN<~-yH?6yA6W{)eSXKIc`=aRiKkFVnaC6(nzeHB-s?UTj_qq8}s|+r^zdGUZ(t9t(
z*H7qLHFwQ32?@5!Gt=MPGrm-A_3xSZ|KIvkmt{^9JJoyn#N)HScOUq?)0(5?gviPJ
z*V)R_eWrPxzvLrV|7O;_iBq;qvHZOGseyU*^efJ<op;AByY+Uxyj!$Esh7(>Rc~d^
zA5V@72RN;B7hcXc*V(y7eD`gyd0f6{-!m$d6&BoTm^LS4${)k4&h4uYY6+A!D2Dhl
zzSmWsE<5WeSCsk`jr|2~OI0~1Pq6=CZF0(X-lD*Fxi>bi=Uz1BX1qa(@K;f}n9U2s
z1f^o<9lht<#V`GM@q-sjWiPP`%vVUBwU}8hZkt$VQQZqxMqNe8YQ8Pa(_1F~-w=Ji
zCq}eiedZb-&@gj<$Y;F*oB#74w8%_aSY&YJN_cO|k<x89j$4-fGktJ$QcMlULD3(1
zj}EZ4W^Ok&c=Evh)?K~pH;SJHCRLq?wV&56mU&;`-iH_AliJPRPruF2<1LwaQ|b1+
zx9{rymVZB1_V4lOJ!d7C7xO9$?y=wUZ=$@mZ0||qWp=si3eVkoSw6wYd-+qg6)N0k
z4WDWMZ@zW2BE8~qGXJWD(=P84_3m$<V6nkY<nFgS`jgzZ)%tu8S^t~i<vg|9(ZOr0
z?c_l_Wwv^-cbCYWsED<e{kE#}x>Qlkt&YAt`-Sxi-~R-Ddef7>_4t7U6D~(o|2aE%
z{?4~^oOWhPN%)-nmJxJzclNf=Qs+L)oK;dk{BXvj%_&w#c#dpvy~Azu%wNa#!21nK
z(>E(lyYyjqy-dUP%B%)S)d%WVD+-SuvRdJpE0Gn$5N;+`V=8&Q=T6=EMb^H8>`#)k
zAHH!|AbI6ov&$zbD+_<amdxn~LfXSJT`p%Zh3eZ?A5HO=dy%4j;VxhMZQ&oUZz(^x
zv#n?6o03Zv-haw;W(P7ZkKH1)@f(|WnA_I}PhVtwiaU8D%>DMtH9nh{_RrULndh7y
zacp<H^Os}XOIK@k9~VlFoPPGefddRK+iW%;^>8gyYJcLiY}TyT@gElcOli`X^Rn#Y
zxg9fpnax*R`mXr5*zxYzgQfL#TsG%#l(DtNBuMEw`})fEWn}nm*gAXHulGf_8<`Ks
z`FN+L?VXc#^K<sf6~Ch0lzz;<@XP(b_sa~M<f256qo#Y(Pi>kSrDXDci_7-tz_)R(
zZ>@gaeQ?XZMs?4}jpbJYPM>%vm9gdbGgE!l{+!=y9_U5o`@Xr9Qoa1nuJ@}a`exUy
zbhVzmCRjouM>JV`$)mv2KF+#59fh-OOa*5>n7QkZjb^~n%~B}|2`{+cmx_34*lZ5S
zoAqk@|JrEnH%WEH?p|W&%eJOn*}d#t8y92t<E>#Vg=y-FzESt~)yVYNZMmI#^}yrT
zeF@M1<#kv1ul!Y=qNDoi?W6{4y;%tp*Dtf=ndG|6ac)EhulHxAm7zxExuLd}>d)Wo
z-8fUMus)?B>Vx_;)^iL$eieHxmWVnu_uACMdI>MLaK%_`7U~p!b$8NSL!T{elPa>3
zg}<4zDSFQQ%v|u~{0%RDG1DnZQxnTswuZWFPp)3Yvyx}m_mYo`VtO9OoHtbYq;Mzm
zUE{Tmu3UGeC(UsJPLWYcda=8*j?Rd-+tc;+7HD3<Ht4K%Cd-TdlMVNlPn)%JWkG-Z
z56R%*b3Zi7zwclTZxCO;;C#x;u#(^YLcgyck1Vlfc0N}yA^A?ge~#X~@WX4ZldS*!
zd-GCfjokZdyZ?PW;P3oe{%_l*!WEBulo;Nu%SwNHCNxFQ;!jTXtQ`JTvF`h1ZhpE_
zuf~^?A?ca&`}bG*MN59CY3VEf(k}1%_vvua>wUKm&zAeWSnOqjr9E46-Q2F&B&lCJ
zTLtd^i~Ag!y2`qqHNQA?6F91h_t-wHbrg6fb7{%bZO0PUS=v`G3)|pvPj%knfHP-`
zjCLJ-*!n@@#*a5fhF4Yf&g5%sR+_e1YQ`L!wR#Qj@7PJN7QdcYvsC=9;n7Pa%a`Q(
zt`uH<Vt@7~GaI%gOZJ^*oH*%9rH|3dm2>x4B@|8bn(y-EpvRo7rp-GQLVVfOJtX@6
zaIIRkc+-v6+j=tX5iyQV7X_3`B~{vQYeuE~`Sfz?g-KCi+a0g-^k|hPU)>Yfk>(qf
z^=QSL!^<js-6CfyDYmZc<GbN;``lHgFroOnM;`X6Jc<qUICO%)YKhgm$;<s#?|QOG
zmG4?EXc^xHjqmC64T2_4vs)}|sa^T%=s(u$QzvsilFa6R|7EIz@OS+ukN6ArbUfI#
z|IZ{>P^rnf>TaC*m&vwvnJR}~Kb^LB`PZK&lLC)?-#atNici*hvR0ths<!k`msq2e
zD(-D?-@g3hH@~f~U)Z;s+kF!@t<bTWl<VsG{lhcU+0FU?K0ZFUwSJfFo|hlfw|KOl
z+tt)~IMDj+%M~-rCayg7uW47I)KfWry^lVzX8v3u8@o~x5>9jpA5P+S3vvr9*>hP!
z>2K^mze7d-$|ak>zrUy%wf)_JUoKmx?l5Ye&#>F~z|rDtop1NgybE>^ve20s)>y1Q
z^-)GRlkZ$knT+1V_+plJ>!b*)y_dT3!Y94@AUWYNW4z^$Nl`O4>UpQB{odiEeEFxG
z=gh{R`=%5u_q6-@SX=$?x2BV|JN7<!op$-{r^8Q`52Zae%=R&yc6QY!mEN>|-GfuC
z?A5OR2#9^-qH4K^k27jotHfQed0L6@b_iXWvU6=Lf0F)Aj!T=2;{GT{^?%;e>mhYX
z^KGa?X>fLT!W`R<w4<|27rtP=E>=;}7JQ@DpkwFdy&<pDj#!&NIjP@&RJdf(_UWZ}
zK^e?C$oF=t|6$hs?RP()PjNYMYRT+buL}HQN~$aVF8)5LKmCbW#rKw0Vc*G%FS69O
zCl~yQ7y5lai|xQ75lM+6cHXKFyocYr9Q<rOb7y<Tr}x_0WmnGbaN*uw-9ELzfAZT+
zw@SY(f7o09cd3-kGSQ~JUn0zfeqY;rH0s=gLt!zyU9@EPy7;pMdI-J?3l2+NU;O2b
zcd~U{U26@`=3Ag>vUqlBe_hdi^B38%igygoYF6z~?kk9CyghMu58K;gtCvU|vu=`n
zYF@%|W1g0~&-R1bDSjL(olIfp*EcQv<{NZr<{YPUi;d($m}_!+`JbPECdj+=f|TE)
zGwJQqq|)jayN9{0n9ch2?(>s-Hoxb1esIE+g@JEP3SR|Y?YGQ0+OXwLrsSKv4_AXd
zkMiD6YIS?HY1N5N`Px4+M}oADg;WH@zF~5|t#q~Qx{vp#75b$Lljj77zBzK~rRcOL
z6RuZg?NiEnJt6P-xe(2g;0-m8Ca?E?z0|`aY1d}i_9qNECweWGpKN>S*Ij#DX@>Rg
z1eF(ECk(lI3epo25<I>?<$JGxLZMFlYS=kDhGLVT_rd>Ium4rq^z-DBg(~MPq9uwR
zWzRV~wV7{?>#sY<JIgN1Bw1RqwHfmq-l{suYO{}g^@^U^U490pUr#;k%X_Xed*zmQ
zznxQF8-HJYFj;GL=VtM~TbUce{r24OIGV-Xn`8ejIP>F!tMgW#mQ(q6MO!&gsI###
zvE|Iw7xDA|-BCZrzgXDRK>eV>hQxSv6~q1KW~w>NeVyaDY)7*9{<{x8W~G?Ci4n7u
zEc(I9%DXS(n8(k1?{9DEC|6zT=o!E%#3;O~_QTF4c9Ylfak@zV`1H|I-ES%HQuD~k
zHIBlyL6a&1+QN2=*PMJY=d^)_a8*#K-|U7+VXuOFJziI)?6_1a9lqd%Rmk4_O@Aw_
z^}bpf^v9?xrcYmxdHs%sin!yerLmXHBDB<W4%uctTmJZ-;IxgOGiGdIT^aCewa^mI
zayAfXI&m$1S5L^3OrxK#i&sxyxpL_{PVVr+Nq6g(-8^XhcM*g7t#v9(-&~&lw4$*1
z#oG4r8EvN)-IkR2RQkA`UFO%B!v`+Nd$?XLdq3r=H;-zd-5%ZJEcwOz7rEa0@5?Lq
zI>EHC>~L6+wX2qFEu&=nPAA>wm8V4ec11q#z89oce(J!134+s%7q>Wl=6>3iS#)ac
z@7)KVD?Z5c%>Tf4uGHMw_~)AEdxd0q4V#xNU&?&`^^EscYzI9epA^<Fe3{8KZy(=(
z4#&;=tS()AIBU}6>#LjGcI-aLpAfNS(g`UhsizDrjcUH4IS>9$eG)43&&=b^@)J>2
zA6<-pZB1|zEsXIK41UG*p>nQR=6&fEE&c(;3DKMOTyIra_4u8zh)+q$;bTwdF-*Od
z>|<EC#n?|v)#=qTg=eNFhia8xZ<CaekhtU_TRZ*R{qK#!zpjNTH*Z+D%r0L=d7JTB
zzIPwF-!thyRVYnV_5NFzbbq$yG@Yr9iBJ5#zxXm`X5t6MU#GHUN{z!W9qB)8`Toh=
zd&*wN57v9i-K%Q3dgvza@f9mKg!=3_<#BWwe`1OC)Jn;yvyqR2XU?jbJ+H?vZ7V3)
zIFCneYdX2fhx4ec`{6L7OM8B~d^#$*&P*cm%k7nM-vX~rcQtF>>~Xfc=Jx{kCW&t@
z#?4WmnJn@p6Ur5*H;5h;xZv|fdBK0-knSDkl_eSP7(Fjv@H9&Q-mrclH(Tp&**VV?
zR($fF5u_*Z`&%CWs*Cql?)>1lscFx7nUnFF#|-YtwPZcn7uf2>=_;fplsi|zb)SM%
zuFX7+)VpTP%*=;>cjQ#(t)JMn$Bk{O-S!u=SJ~XOe}C(9<?LXa;8XACZfjEW-aFZX
zeW%NI^VVzje{3ZEByOKOU{Lf>>3oT;@!<!~{;scmeIpI#6i4`NIXdOqU;Y+z+kdkz
zRn7=K6v<cpw8bd;<cp)r7V@2aw14aDLtniwy^A|4u$n`{t7uL7tJddUjb43Mb(oo*
z^DWM8I;$~7dYUNn@2EwUu2GkRnUlDZ-zaJ;?Jy4r<X<&)?&+=5cJVpB%yUb8UuLqF
zmHA$L@4iKQGG=Bj*_y`1{LgomiK*Y@`Xc5%<&G@RKQN{}e8*w#%cmM6@_8xq1Yga=
z%vnlVH#X>p&be0j{%oaL<qucM$!}r<KCMu0G`WASr88D`iB-$Q_v$ZBT7<=ITl47f
z_4sFLvF4zi8B(@^@9fX3p1OM_WQY3v`spjP&lxZM^NzE79lL(7)BJg?Gh22u?eBOW
zE8V<sbKBtq20?$54}a*~_bGMV$LB`LJW5L(MBisd*xe17wC~|+pG)s=-Id<zaa%t$
z``wv>ZHGOM>Y4H8ehhHk{@E;DW83em>`$ld^)FnM>rw1@VXo3T!{T+SxqGI818RM3
z(D~OtnhFk_n18I#Vp37vth**&6^m>+*zZ?=5P$owwE6fom!(U;&bt|*_9{1V3Wwo~
zgUKeJQy8l^Pbm;TV7WKa^Y!DvmnMm?98wcrY+bWtWtX^w!xEdl@kR|zpTjS$*w(a`
zsdvkYpuMusS42-Rnk#viFUof9EOz#lebxF!?j?dJPoG|~xqY*j+T2U?Ecq7B=y6{A
z(B!w>p@qv+eCFDnE<Kv+t!e-Qd)i-E*H>TlaMk>L?>Lv0?>woPXY;GCW*BMe{wS(m
z9_R75;rvsHyYo2K*FX8Lvukc+;*#@$JaHxBzNOcE<<IvRRtVIlPCa*V^E95>b9hv5
z%gzg1y7^<{lZoZGB6tlfvX-&DxyrlR$Cr;MbhhvvSN$ck%HLdCEbITV?D{-K-gDmS
z{;`kd)f~(@8Gll1Mq}ec5fPDxe#{%Uo0d7BnJn`pF=5kU;izdpB~<P2drpatdcXJE
z{U;MDWV>yAJu=mLmgSn<uBxjwvdmH9pC_+)@kkSkUVtyx^xiFIx`*~=HWV2hcT~P3
z+~(0^cpy9Q&|I%aGnUui^C?gDS`yc~XItzCgQ+S<-Ze|8mMrw~ipbq?Jxgg@S4P<z
zzo|~IT*KPb{B#8;&3N=;gVNLDz1+9>CVy11y1kpLslY$K-dFT^5~rB!fddB)6fjM4
zzvo#X^F5(2@SR@yVOI0`oPqD&d3vWcO<$(G{6*RS_{Y`vGny7|PFcyr^Y_b<w%l{e
zSDH3m{(pYm#^(mB`GvlOY&m!3iR)oib?4^AQ@%B?Z!x$1)^e$^Bb0$TC-p0LZfdgF
z>|ItW*Oxc4Y>ZuRmw)8&$B@f?%0;L5^=^^nQ}qcg+i~p7-p2ABrz3fd4GiX7(*L?=
zn#iHEmsn4I3((THKj<~%)XW)=-ki`-Z=UyMxph!#<k#DoUw)Sq$=+4C-?8OzPkZq<
zTiu{Ap$n1|*RnE4AK;vQoNe}O89qU?PxX%qPFDrUmWK!OZPK~3K$ovLB<z@oK#=VN
z%i@II#2JfkuY6{;R(<x|E7OCU&Stltec$k8lcH4k!WC>wVmh;TSt|)PRps#4lqG0o
zhOau9Ug6>E!XwS6$>@D+`F68+4@!GBxe5wQzTl(xJep%Uj|^w#6X$~`e(vI4x<4r)
zAwj~=<^Ipx&Td+_?kt}?rLXA!iu!k<jZXbV=1+c1KcVsBRq-FS<d}-Ti~qa+k#pN-
zZ16?i#Kg){XMc(m-@TW+4_ZH-R4wt+uE3*Ft3qnpRSB<6Sv%C;?zww+mFq3Jpxv`3
ztznapF%3@8mfwD9Lh@DTt!2kOzpY)VeB12RNrNftlmm9pp7)F;Gh=JdrNDQq?@ZR8
zac<EaNeKzRwja&a`$G(Ff91J+U|pSx&r*|T8PO`<heG&rS4k`0Wt=~ua`s%0b8{YN
zHTr1=6zTt(s4H;n9DB*y^>sItlCHmhd7%H=8z<KTok{(?kF)m_cq(O`j#;5uxai9B
z4ILHT7nggQywtYj`4lHTsbS4N&+IJ2T>*}zN7$7Wny#^4m0T`lx^<hu&TR&dZr%LY
zQQAFmS>Wq0wy`{cB_>;41bZ|yxYaJ+kaIU#`Y5BC>8_z<@iEcI@3NOQy_&nCN`B(^
zISj^<t@k#u$4Lj|^Cvp*;p)4Wb8IHZ>oS=s%uCd&*6Yt|K5%lSgsN**neq$EtFAte
zFG>bBgsA(R<2)zx(fV!oiNLeF^4Qqe+W3_!pUf@$zU1>iuHC=ojP~8$-1l!*)Vp~#
z|57i?*8gXovLvYE=~tgvyLrO7(<fc}^48<Sqv(%&^K;k_aFl}<pMDb!EaExsC40Bk
zdEUqR&*yfyC<(8ZSLMsS79skj_|SXpa*Nl`eXbtLmFVLrmkQO{{-$nbkGH<jYvX_$
zr(P|;aq5`PRbj_G503I(CzLJcJ(Qid_xOL$f{K3!J1>cyNIM&_tvYzB?USET(`<GW
z?v={x-FPc4A)zAw&)-AW?To!RS-Bsjt>yS$p!HsF*12_RH+EM)y5Y}yb#I+{Bwy!g
zzaT3X(XZPClG=J}JX`m@FYOSX9?)*E`S3;Od+Y9B?$rNVWqfU7_^t$p|9jV+;oYsV
zV9|+2qy4gs(`BDBvb#;S3Vc+$r1Qt4$(<Emhh{tb9GU+lR@$ad<DcWiDGL{bdrC6-
zZQtORmUP!4*qi0xj;3wzMEJG@PKtG__Bgij9m^t4(bzyq-Gd^JHgyH~v^wnje(YSC
zMXu7j9W_CGOLlWA-(p+)S7Fa2`Q)5~J-=Rmi5G5bF}vFA!^c%?wr5H0C5`WgSIIZb
z+bp;%Rc>Mj-}cGPcAr!~W-eMD1S<ax=2*p9?6GG&exK>`ikGY3n_qcyy(i_1;1bU*
zP0i_-CiTx&d;Z>9y=STNpZGZ$&wYK<ZU#w8{Nk5dxo5J>VYRsq&m!{tw)|b4{_B+I
zqV<oyM=g1K^~l1rYt%k%UA$0qc2?G_4<}E0$a-C$s6O>ub75L7TXiXOZ{GfM6OwtI
zXX%ulfBkyuxntiKsSC54AFC)&*c%d3yl~}e=j{O=^Ryqu-&wSLQU4_W=*V7U0|S}%
z6)jDntwo#LG8b*s&GW2&a_8ry&akZ_t`ldtgxH53)|NfUD--r7Qq^w-Urn!w?ZY$^
z3HNObvn~~jZr;A{yX~gGr}y7&>ixYd;ML~nCmOc9wUwgRw_7KP75bfa|KBh4fpL28
z9;?82+YkHS3!n7eglnGA$0-xm>lH3MQ_Upk&+pp4M)D_bvgM6QafX>5%|<pso|4*y
ztE3#7H)lsApMBxf{zBmL5i8Xjooi?Hxe9ij&fs2Fut7IX@U?8Bq;D*z%j8v|?q6yx
z)+snXds)`GeVy~yTPsZjYW-hNS!BHI0ce@7&#z8zbti)rHGcZ6PfomFu4E8ZelQ^Q
z$6Kyrx19rY{(cQvueNYo|AcS1*H-Dsmj6}RTi#srjic-8HB&9$$&ZgQ&U-%5M@8^G
z&!O=5?RK9e%Xdu+JOjz5!Gg8Vf2y6|GF7^A_vR)Gk;tuwd_v`(&#r#@=*715c!Mb+
zj)E8GwWaa}Uth<5e|w+w@$TP;XUkO|H8BB|sysZLOE|wTJ^XX=lgRDGlO89((>yKq
z;^RAY*7%=~qjuybZ~B-Uro6K`E7nJT9+&Y!&P#0f9@fsAIk)jpoax46VNv@-{M+6*
zi{91S(H-Y)`u4^eSF3x!(|7)5m^1Na|1E9xHP;?5jC9`lAVuS(mH**Os)9dvzKvSa
z`}SC3Lc#_I^<-9MO=r(@%5w{U%n3Sof8n02sk+k)t7bT<|1WpYJGJ7z-~X$}q-Q+O
zs{C&?MW(+rdWmMZ;Y*RsX_HTW<9%ZKVB_B9t$w?!wRcIqbXg_;A?@TI^JzW{Hro0g
zd2P#6JF8=R^m=vSkD_(z&-^sh{=aL;dvYS_^5volhZnX~*Gy1J)yOCc(3*INza@9M
zx$={B)_M~@2e0ZgFE39h50+TCqpPn#D?RCMqVU5_>HlrnS02y%^tW2R^7^H!{iRn^
zBo;ndxl}}D#@)FWzOQY~EO&lVGR51FrDe%fhOOIM<>#sSshZu^7EhkGdg>L!`k>Hd
zs;OQ_UEE$Sxi_CbNqnZ;8}&fbph-W|*lT}eM_fM(YIJB#YTtgyy7uY!gPh`ruI!17
zW$<lHKeb8U<zC$<(@z^0EE2dod3ubi+lGrroKGr7W<3c17`whL@^wOjghGYgIcuBS
zy(uDxMK%A*ov=CW;kvwNQu3<wQ=huOR($7PwEvNz?wwtRH+QsN^^JcPEF`+*TwCh7
z^PSsv+}ZX0>XU_M9n&h=R{vd^r0wH8+q&iA+m82jZ(T3RZ<+H*T=wR!=nqqKr*y4K
z=MCKycKUWe>W*XQ_IKVnzB!78Jz}k~fk8k3+eM8IYtzPQ@2*s<l%8w0`<b*><fNC=
zGSfS@C(2T_mItMG@6q>m-p)7CFZ%8$l{eva(rK^$zWDw)<#*fOxj#<jZ;x0~J<<J?
z<;M)GO0DbKg7UscF5Zx{ZSBziZdv%4b@9ie{J!n;P9z#EH1~XWpGS7{q~&SGd$Ks1
z)in<<6}QOPvh7H=!Ea$p|6G4IQ{xJrngwh-dFD;=zIRpR;NAT<8qTd~;@BAIbWKM(
zILKB$$yQq9rQg%Ef3G*nuFxw@JlYf(P+exUC!JxkkJPTdLmBt@&OO^yBy3^HyErG&
zWToAW>WR$@brmzaUR;~I_ZoBVeLF`-+055kMfGkgVw1QoNL@7S)o<x*a95g_U<>ZQ
zu(@pCzvY~9>Cv=%?_!)}_!VzQtUB&|x@L2@Z)aY0-sFYLxSa0axw~PC+n&0K!bf5j
z-QIm@wp{&;AC|`o)T7c9EG{Rg9P%o8y;(Z;v3S-pweIE5)pQ=!@~K-st5_aaF;VR8
zpWQE3S9o)8|EpYC!5tm(Iydg+`iAsRtc=c{Ue5oLU#6^Vzfy2p+v~SuS`FKc)#|@x
zu1?lBGCgV@vj3pxx4%z*#;<p^^81+lWZT~j;l97x*XDc)UAB&IuFSNlHe0LrRbQG^
zS*2Cx(7k2zsq};se;F73iF?u`(|po!rNSJW85Vcs-1p6SQ0O@`C&aK<EAP^tCG$;;
z%@`UNU+=7$z;!kBMf)}8&IO`db8;72H|G5Rl)vr4TAP#K)=X6`uub{HzE;5hrNxAf
z2PeO}e{8*ac}?|+m*0JO)7Ctm@_KGowbVns$Zm0F*0uaqYqxF;jF7$2TBO-G;oX`4
zw@NlD+?zWs{U!626vN2FudQ!y%&iyq>WV42QL*FAH^t1=Q?@LRdVl}N-P>WVYb>^Z
ztGzT=FYm~%h416DGyfMq;orL6Js>ds<$CrDv;SGG{o10pFtpV9#nG@WwYw{?Zd#uB
z?BkRRHB4SI9c34m6iK`c+E-=N_*DD6{=TxiV%L-X_nepk8Xsz#?2sz9=W^H|kvRtK
zJ)ifz$!j=Ny-a7n;-;r7%TFE;QJiw#_-9jP%9~l7mtQ1r*u3cW{EqikO9gczwU`ed
zc%D=wv+?fwtvjWsy)!o5`S8oV9>1DHCt~hBo8$d!cbe|4pVMCG#`^zxvt4KB%)`+^
zYmQx-@Mr3x>@$|7uMAXtwoY2Q?cL4!R=?hrrB$+VMc<sko%8f@*o%)3E^OIfvgyk6
ziuQ7MH@yQ7YbOdXnfv6<Cq=(`r*<FH-J!Pcd2fBj#Ij>Mj18XrdLtpV$5`*DywNso
z*0?Fm7vJjtedJ;`%_t|C`{}!%btMzNXdiVldfn0!H`T2m*t4(ax?|L=V-}rrmQ8&7
z>YBQu-X2z&LYK@ZKX=`I`{UdE?Yvqy=UtsBWbs0#zi&g+T=v};4XhY^Uu#R*o;@Y~
za9YWw3;S~HJ&HrK+|NGwkX9q|@8=Dpnnfkr=f29hMU+1O$X!z2I4Mr&L~DU~N3K$#
z&F-C&b@LaeUrged>-#I=qYP+;_*wfL)!ah|j&5GPc3YxQv~+Cmg|a;i=iYgqmpt+C
zLG_aaqZjLgqwG?<GQwk*?COd8zVw1C_r&YEKP82C=H6QTRm${@#j@W49J6D;gm4+B
zo#&0Ie#+&x12iX*!ch2a-Z!7viwAGd-M7Y%qqoSvCGXSOxYGKP+r_<YR-Y`jocro0
zZr@$pnP+}@w%q>vQ7_UizUAR*HWn|g*i|w6^?5g?Klz9Cv@gF_xvO+9yJB|n*7RFl
zS7r2bt}psOfA9N-{?%5S?brLw4}3o@W#@^#r)6^vG^}J}()1RZ^mp>vcgrTsd$TNk
zvagfJiAnc7l=oh!-gq#fV0&tGk^Ux?)!vuW<Nn_Nts*U*-Ia4T;;CF6zxQJE?{~}J
zm*3ub-!}fb+{NGxv;S0@Xa0{isgLHLdRywaOI!Pww^whj(D$2Cvh=k}^QAhKQ&HT_
zYjb8LXs_DY*mL{n%uV)wWiE%=<Ewjb#2zY5d~#!3-l~s!&!*{~Ecp<kduQ{t(A`CS
za@_k4?71T;acS<I*9GSz{$BJs>6gkMQ)~b5pPI%)J1rZA42O%#xd#<leU^Ir+?&+&
zalZSM`L+G`H$=w0JNYX70gumuNk-}3moMze(Asj>-(gO*u%@r1q3hxG@fJ<t(pG^F
zrW*Tgn?IA`v&^C=H~&{G=8T^;DW8?aH;H3f;Ov8XGX(7|!sAXAg`9nOS$d(W#FgA1
z)$dEP7e7{ZjV{>xeuJowX&%?g*^+k^I@%Mrm@!TAsq@Qa*S#B<ll7wE_Pn{m8?N}R
zjPd>ZG0x`0jk*}y?LB9Hx?Z?joBO|N#>2dzcR$14y_nWN`Er04^E|Z)c8iv|onCf+
zgL<Cwkz*^TTiafAY`)VKlf^VwIaRXjSm7$`JM|(7N4_VT^c(6*a2bDVX>4p%WL$K-
z+{JeDwLgM$K4i|AW&2WMrRLIilHqryZv6bwZ*ZvJa_6$Ovrcq=5>>gr(z*Hbqty?O
z@$NQ^S|Thd;dZ!6=TSe)>-m+JEHh7v`|9fTPpJufbhjsZp+?%rP07=$ugxl-IKRJO
zPr!Os>+f9e{>+up&%69*xu4tYSI48bUaXKidUGYm=4Rm~ch@X62sqIyoPNS}^7L2N
zR(|ne^*(!3%64aZv{BLQQ>QGnp4;h6_u1#m|NZQ#4byjDx6J%_>%~UdXpebJXSgIJ
zF3pKQa=b}jwLI>P(5Xew`r6h6Kl)XXo^j%@^4_~g)#L1ge)bA~yz=Wwi1O?zh1tz1
zXI^Bt?)%Mo;Mtav1L@&UzdSeYW}or$@uEW6*Wb4+{}!?R&Y8ysex^)|bX|8APq37|
zy6OI<IC;GQqljmvIh|7;?vGk`q~GebfMH67N9@wjoLyYad}~%UrC6&@bE^zF+NW&W
zq4{fqSx(#HFdIJ3tFCzkO8k=_Czi-<G|RAPe=ozlF!hb-qiK82EO?*j`SFCs(jA_g
zns00Qp7pzQ(sR<egvuq8jGQ{AsH*o&o7a;T!omz1Uvy&mzW0Z-vfL{_%fd~2?o`{q
znp>W1r+?G^i}lXs>wg)jpQ_9}BX#h0?EPmd*2i@k8xt+Wk0iG6@2QF@c>Y&8JI>WP
z);MTx`KuYi{Qj2~H%3?9{ONlBO?KUjnYCZf+ZM0;J+Jy%=>KOkYu`G#Kb84yvC_<I
z$Mm$9k?JS5c5fA7i_X-2a%k4=6E-PXY<q8e)_=K`JZt}6&8vGaPX1aw<(qQ#iZ_92
z)Bnrxn10i*(lMAC$;iyioEqTno36kq?)Kx8=ZXAZg&zL*J_fDq6EfsEE5P<PWaai9
zQU5Joo^0N5n(1C)q^R1|ss++F=XP8QW|&)RILGGZ^e8jeZpZwa%zhqcqrK)d8d(~!
z2${z|HcotQvSo!_&Fd>gHJfuS`;HV()LvG}WhmElvD7B>!u2}KnG*BvTuYjG|0av-
z4|S0p9~QnoY2z%C=<@4a#rE&7m-63uaA28R9@nBdRr}q2I8T-r`J9exPpXtTK3VCB
zd+>f&b58Au@1Tb6gp|U{oa%N-etYk#pHt#qFIyI}J3VgegvoD}%bs5it*%_RGQ0eM
zNzk*2kB=rd%J#1{FP%EKO{&mfrp%p;^^UPGxv$xOHul@p-*s7;nWbi?9PgT^x##+;
z)8aqZ&$}7^|A_JPUGclp<9=2a#d_PV-rzsOHf(jzE4OK>`xf}FdU((4%_E6yRi15|
zUM}7C$TNJxPuF8AF%~DUiCXV#uG+p@GqZV{bI7|Fk$zKl8U20NCZt{JySrxU3*AkI
z-U$g3_ZO_0U%e$I>_NNVk4p*5g>^k=9=X4C-nEmLEp)vnS2QJl+2T<7_xpy}TK*za
zS^3?CQg(m3bu|iZZ+iCP+~o2lD(^2_M}5q{ew}I8w1g6&6HhKTT-@?o=8^eN8LeW!
zBs0J5PlDv$%<E1&+Ps^){9)F6K^Bu}CryP{NAr&~U6@_w6ji`|rlP6bl>JGHl=Xv6
zspmCkz1wP$!xZMDf8<Q2YrtWto@cffUd?BEe&XQGC6-&YmoHf0!=-BL>X3cFs&nFj
z!*k~yD)_8*>Zw4V_7lk%DH~?b5XJL6ug!Xt&g$Gsf7%EFia+-pc(+qtrruieOK^o)
zK}w^<&nbeuc?$bm-BOO*Cx7jI66<wh_mWu~FC?twZ~3-&i2=7nrP|4lNpq{8P1WnE
zTX=4}nbPHuMRy-M&+hB_>SdCoXuRkD)V1?0v+Eaq-By>OlCg7nH{(mmS2yF1-=0%C
z@8<PO{rv*FZC0?}D(}8`==zEC>sQq-|COZvy=SV{;=lWiAL}--`Q+M*bk4o8vMKRS
z^P0=~CZ(l$$9}c{OIYbYsnYKjW7WyM{sm1x>OMUUohj4gW6E}YO6vP=nLA&Wh`qRR
zeobRz;-93DlSV%dznY-xxMF+$M3J`m?Yy71*VR8TyXt$%*RNas>S4RLPxpNe>@Z%p
ztSWU!VWH)||1IKo|IJvse%{oTcKj`mt>)dk*HvGATc^9_8C!K`Y~#gk@@@Nh=iHsU
ziDl*Y(%!Y_m5$CmaYm-A>f-Ask^byz4`)ouW@X=NJH5}JO{vY|MD>K}z26+|KS?c7
zeZR%z?)mtuj0<OU&2_KR*(tl-wp#98q3iK0Mf!FHXH$%JK2Q9z)uHyW;tZAZbN<Fy
z&b)k8X^Fy#mAc1$I1|sh-aEU6<6E&N+ks=*Cq$Do=esR1<a27{U7ob0HsfJkwA@1X
zmh<xt2WqF?1@}mbSibMuaNYLvDf5b(g{m)aPd@k4$2aon-1^5?68>(s<~222#Ksi<
z_NhVXTji96bNb4w^AnCQu4mQH(201}(aaL}XHNRJt;y$4&wX5Cd*ye|j|<E6d)m89
zN==3Ce7^Jj&gHPR*PQPfy9>XpdnSADO6`1?y4go=$6Ob@ougEHLQMC<zgbg)fA!qD
zzRSL>=zYYBO+D*>S_TG9IrmuoQEq#rzxlaD?YXZuPQA8H@pIRlo}06Ct}D04)yKWG
zyEyk<`J&_HCEf4#gddqR>1c}I#G4ORF1#0cZsqCeFE>7L)V**p>7;={PjHXap}Puq
zuWbA#py%?#$@`J1k7u0J4&%^WX<AH|yPit4e0s#6P=CDk#MfJe=X)=IxEP<~SSPmk
zj_KJ03$HO)Svj59-raoS)`w{#-P@jPD)3rLp8h>6Jn(teR;Hp$MGuU=m@#=?KbUPH
za{B1>sPM-THsa;a-X3&`mj6}q`zNcPIo~b*!x^~@^P?Tr|36=*{^13e+s7y0-kdr)
z=kZ;;%_3R;46p8`FOa><bMBq1lIM&NGq+rmMcyw$?r2PLT9Vh|c=<wmfmGwYm6P%m
zWP%$4tTne>I-;&D0RnEKi;izQX#Dxq?*p8t6SC$l`7GnxSbgoPJlC75SIQ+jBt73h
zoL6|XXj4OM!rO%9GuD1QH^;vH+ukeZvg%!$uFQ|j=6R%I`08T4SIQlaOo@#GOt<Bi
z?m8J?;urJ9JGi_5)8zI$nN0g8-N;bQFTVS3X7O9yS^M9*o(%uB;#T=8yK6RCo#kFt
zRYw0rE{9k;W+mU1X^t_eoVvE+)TuLU-e>O$=ib^I{du|lo#VIp4jCqXJ6sfa_V$+*
z^=@K&?&SB#-1)La>_x)crpClSel_mgJ}ir7eq49$k_MY@>VXS&=M(<k5Yt%ypK;UW
zX6e_b0)rnpTC7Vwn>nNE^6^kv|2<_)O-K0c7WS|%kgt-RGh^NwiLcA%Dg4}c=W5T6
ziIJ7zR&Q=r$lA_gzW+9&DSu0BTkb=nA1ynU{;bP8<}xEhy!QL!=d6lbWw!DPAHUU9
zk(zIvGiidV_FMi-QL|njxO?4?RfPA}#<dr={o|eU#N%V^tW3MqUs`SDRSu`Smd_UT
z5=nm70?I>&E!<Zm{_S?NxiaIEhCJ^)sdu&0)8Cc4?lCD!agW`q{j%*>dXV?Yh<k52
z-qgHlf57_8_t=Eo3oj#UV)ky#%vgAgx1a0Xp5JZ<U!G80>!$H@o%^q_k7nPm+Z12_
zcg6bsuJcuCv9WpUXIM(bcX(N(CM&w6?nzpsEpdOtRG+6$4!wGPa?fI&;)6kNJ7jA9
zChA_WOyOLg@%diW(#JRC{7!5zj@v)|_tbNmr=NAtb4ruo;dv~wSSx7J1jWp0DRQ@;
zIVg&HFT7HBw<JJOd@A3?Z?^4!9x2rn-Q}6`eD{NX4Gx!(Zl3c`rkJdI`GQO91^4Rb
z?=^xY#hhE~5}I9iEw|<fiY;8f;6dLVH<z<-WV#ky(ojl&Bwu^^L+iDx6+6~noAh<z
zC$nca-!E=iIR6IY-TP(pj_+GF`-NJnW9i%Eu4xx9uUnNDQTm2odxcKPqq)=lkF2?+
zq@gagaNjTO83*+y*;{tbE!<EjRdmF|%W_7~p0?E8HlTDbaZF6feY@0>_W!yTim5I|
zQg_Z6|DIJoYnNS;MEUnKtJMk?)rekF?5X&8^uj&y?}sn=hJEJYiELOWwQ#TgpMZkr
zwg%fgzBh^{*?-*Evwi3Or!#kdQ@_V*e&3GE^LtLN!?%g6r<!(s<lUL_sV4g4l+!O)
z?(Es>bMl_3?Y6g}XYY&2zAAsbobQF#_s(?7xK}4jB4=dj95*ffX?5`7*~DoF4;a`T
zl-OqC(7eoV%g@9aFGa-DUv?gk|7EyiS#HJgP~(F8zr`QCem}2$_H-YI)JEyX4P6N#
z&5L;N|7kxpBf$UHB$?f=pYCs2(sZWr{-Ri~=G|p-&6}Q{&&=39|Ep=yO-o+y7~L6f
zUpUx!FR|to&?>aL*D>Ys>9wmrbgyIWm?dPh=hL!3T*nW;uw%^qEYEQJ=W<nXzf*^|
z-`ma*dNgm#_oF(Ua~~?LF}=It)kgCr5tB?`d;G0?8e9Bf@9x(H-@h6!ES>9=bJ#y|
z&KmaT9y+SUyL#?E*{k)$L29`sIPfJdxvxk(Jin)6hwjsJ#rvoKww<>#yH@$=>AM}R
zcD~Q_zm=qE@3~v5AK9^)D?Q;v-0zn9+lLQ+IOscH{7z-PT=kOb|F`lQD)x77-&y}=
zZu#H6?;^9G-9D9Wz-%G@rNw=Q=;0r&Yb&^({8<&<Tal5~*1UAzf!ns?GFNBRd@uA9
z_^x<)(f+@2@3vbm*O{wb#WkbRz@W#uV-3fpH@Dkw?3}e%Hz59p{f@lfR(TPz-O^tq
z`sTfGKFn#qP4?xnbBk>=ay~u&uu@@8nIK=}js*U?SEl}Zcdm~Q>H8iN*(@zSty$Re
zNb;}Q$+G^dqIw-~J3Twp_|1{IT&<Z;&NYbTyGZWQyXtujIxi$I7ulyfsGMJrQos4t
z(ehi<7rB0Xu<lRQnUZab`;S>IjJuh#Y5n_ZxkEkKiXzt|7$^8l-h6NGvNO%+_vMPE
zh5Y#N`|I%!pYD~hBum}-#%)~dbtAaH@>l-8>upaje==CFCT_gCD8SrO-c;CQ=dCve
zyQ~H39xlJYzt8E^t;u1LmnX9rYCGr@pGi&t&7a!2^yR%Q^^5x>k#f9#(nk+JtNRzH
z2%UeE9oE91QzMi0XA;}j0^itoPhD<XUz)kTXitUBj@K)F4NTP34<DFt)pZi%|7-Ov
z7Ja|h6rb8OLGIPgY7@3V-{eO3U&kX9^NZ_mS%2SkdaJ{8=DN#&lJ{(#c=NzZrlfN<
zkEMz}KH-W!dF5)=4);?l=A4<RD}80&<hkOr+}<2nr+0Dg{=hGyS7+{;b}_apxL0)7
zGM#ua+l{|@b#I8KhaEa#u<roJcat=}DIB(P=NZpWG@YZl<hyQPyPsOZ#pm)3C1=$S
zKA*B^*^ykqP3C$l9h`&Zzs>!S{QP3x8_SFB=6od!tp(cesvXc<>b@^{{WpzB?&;4g
zKfJqYx}&(%RL%EPvsg&NkzVuTmfl)N8tR^uX7HYG+`QDCVZL$11;;6u3wobx+?#p3
zVgGmE=IftK&hxFf<8?&f<L7rjEml2wpxhe0@l>^p<6So22?;FL3-|p}_%Yk=zW!Y!
z0f*4QlGQr-QDL2~lRtmF9^U_W;q?CG^B?0XWRzUy`Tyj*5~;rIRltd-o4i-dp44wC
zT)c6~HilxYVuQ_A;tN>ne41Br8vJ=1aQ#1r)zxX+cV3$GZlS4&nM!u@L2ZMd&Y*>6
zZ4X)V%k3SWF~4uh6j7glDB_^Jed-aX^NnpgceWIqk11w9S?rhfw@gasYI%IY`QjXg
z)Px-(3zqzzw*Ruis_z!d*YV8u`eENw;UZUk<hNx0chx<IKMUVKR64cpL1RUBa*HJ6
z;fl7k6-G}Et%~lc$jDQ>ZL5A$dQrQ1e&BDv*aE4I*W7MsrTuf(TeDB~^1<M>mQ$sw
z`{lUp-0HFurh#J4U=>ICtI#<UEt9(Zrs;jY6?*-`uB3JKljCpims8Vsiuz%;AdT}(
zhrG?t+dZpf&diw7Z>_if(7fcm6}9#1QvPfk)~`JOsqQ`Bv4@+wC%E3*^?$9!+pBeV
z57n*zHd}1!WX2BnJ^FR;B+M6R=g-M%+4NBT@0p*hd`%&*jvQS5qvYf3j3C<z%ZOel
z!#P_GW*en9Xzkc9Fr#B~m$-b;_J?8j>nvDh1$+Ozz2KIS|A+I@sqYiLE*Dlc`n`2q
zE-lRJcc=I?&zYGs+S{+mA6-0q_QU=aAFP%-<}d|#&RRHwE%JfEZY%L(^=C<ixr}Lk
z9}?42`R@GmJ9Wf4m`6gfb&J~W(kh3$Ke#ij<=?9RyL`>nd|^}74(|_374Dqnxv_s~
zS@x?n?kS*rxtPOrjs3HE`+kXTir6cfR+MWI96Y`H*_ye+x4s`rbMB27>My*0<!MU9
zCA%}6L00$P9(=HF`M)!qi`@1d)|%b;Q0TxL^}EVdNB&FtZIUfLzvI#2suk&{W_&FR
zPma6y@Ml~8L#y@jKdhARN**)Ld1@TH?b6EWuNTJow>?dfdnkLa+b&Ef|K9fKPgCCr
z*18%S+2$+M9_9IdMYQx_#g0JkvW<)1@bEn5Slm(YoK4lOeYrr;dezJW=N6{V<T2aB
zko!K^;CGaQ<bTeMX_`EyS(S0kF;jfz$4+j)xs|n}UF3@V>!W?jcW+!5Igs5eJM9V2
zRD;4BEZsHBpBCI&{Wm_$_sHBQvy4&?thW7j?ZAS+=goiLTCnerv4pJq0n0WuRbvUY
z6O1)GQ<Uozj(k{CFXVEsq51NrM{o54^v&X&lh-i(zgxuWccgZQcD=cl=e%Db!mqB`
zGv9Oa=)T8ie5rf$-bWcTKijlxKbxLd7RvX`@62K4*|Rqk#<SNP+2+!?z2xiSuC&Un
z{#u2}FSj^#$HY6l%J3`Y`{cD(>}1{wwnzUW{--f(CQH4%lX06r^>OnB{x$E_Z&xOE
zi1ke=b$&n5pk~SLrRVusE6dn_DvGb%%K=)%DB-58)NX#*w)X1x6Ah)hK4)i_<XjM`
zc((3u|ATqy<(JpTb^Y0uzBbaE?NVe)%%kAmls%WfCls77t_wTOGhLvhDoy%*tAl6x
zrF;z;eY*qReQwXMJpF$@MCrZ3Bf%ce{BqM{pZU%&ui?Hvv+nXAw?9|@ee~INIh8fq
zqbFEm;{&PS@bHuyyKMz5H$COu`uvIO{Iu?^X0M7qE_uH6&ZpJBv8PXG+|)4Kk)^-e
zxF+Ru70d2fGqxHS^vL%}9h$3tdTr;?Jn!b}6^{x|o+$Eq5O%W8$ofH$?@GOblm{mt
zJZQLhi{a_c-wjXSHyhOQDp)h9CY?N_5u#-3m-dROeb>v@6|-Y|A{6?<zinOoFy+9c
z`8Nx<h_grkxo~oI%=QguK4tCSxsGX$MMwB=hd#wy3BRHjuK6#x<?!qvws$_+2NYgj
z`V{{xZ)3-Ish#}(tZI(~bi{Wi>1f}3_eIh#ZmUYfzWW=Gd@B2Yz3Fbmt1L%_Tijot
z#y3o!E07gFk!LcK@x41+%{&^l4Mkb)tnI2^m#mo+*%5D7&B4FFPAK-Eh1%4rH4dw{
zirSr-J)>Fla`%MzC(H6a8Hmb$y!T?}rfvTeOTG8L+}iehVct*UFUirrO>bNNW4d?R
zC-R%0qvJxEmU#}hI+iIGJQH{|xxKxA@fqJ!Cxe-O%q->ut<Q{bUGZ_M`JKz*S0}r^
zHk#pS@@dV3m9^We(qjMiKG-*%Z$?yEs{7pFX@UB`&lfb!sWN!#%2ICs*V#{?^x0jz
zPnMENG3=GIv){0WJ+ZudWeW3}uHT81c5bgfeShBd#sAjsNxA=MR^id!WkNfX-Uz-I
zd#U%4@BH%G?rW0&a(|Tlx$^Hq$LW+Z2lF{GXMP=*fAYw4&)SkxUzhOfoQ_%UbZy7F
zJK>9um%Z61VL7vSSMKiLhDPN(xK~w1E=x`QQgA->+^nO;Upn@C@|PJdPE3$cmk6C?
zbcOq-$yvp-(ko)z+Fv!zwZG52+g?@pXb{KBNlS~g#7)l&dfc<_cdY#PUtybkqs8~C
z52?n9$C}c=95Y?@+Hga}6jizFIx`!xr+s|!mMi)6!Mr!tH{0hW$h_ZKB$T!MiL<i3
zbm7}Sm8+i?>N@A&V=ld%&t7tS@8O+MPFDm1-A=vjUb;T1aW!xKi+P=27iMKMH&1#P
zIrD1aF3~ez_4gVVhMYWloNN07t@nlsH=2H2{_ezA>Ks#`t?9FT>&`;66>`>woH{e2
zI^IvIG+b`QfBaT+gwa}t(#f9;8*A7aH<#R;n(*h%$4&A}>@p>#ZGA7iny+wuvVq6n
zqH}Y&XFD@+dVbmbej#H@Y!XXtSNVmTC3CKLuTNv2|L#~<<*X&kIXR$(_u&qiI_7to
z)BjKT^8IsSmS?Bnrh>BSXLmn*dvNdhe&@QgtIT$#e=`j}v0#hB*7Dt|>Yqb4{JZ&>
zq1(caYr&xl`()SDSIKX3XG-IoleyxeT-ed{uZmZ0@BKH^&QD-}dd5ff%9H=<u7A0j
z?W<~3o+J2vxo7$N^gZ0yzp`wb{r$Lq?~1+Rs@~@pb}ukW`}vrE+oYAnIjNVYy*fCr
zXKS|KrppW;^j|GpH~H|?v^6XD1%DCA5wUeGT?QHjX%l*U@=vyGWxH?HhVEWb9-hZ6
z$#I8c%`IhuYi4A=Z<?2ow_d`j%cNqCLS{_KjZ()p$#+|us-<Mv70>JubNcG^;pbI@
z#|w>*Shu?FbN^L;zVP&pvP{->v2mQrs~W^vkNi%0-k(0reD7SJUyB0D?Rav(KMq?E
za&GGUiN88#H<eaB_%_Gw%*O4H_4gWosM)|~t*k0$=woha#LLK*v#0az#GsmerJ{YS
z?e5IG-EioJCd>8zB55nQAFbK?z&q<@$_$Y=v!CoN-KDVXP^S3D_pg^tOkLoY#<Rrp
zNa+g0+=SxiYjxeWb(GCoSCygsrA^#JGXItOy4an61;g4ovcd&p-B!P9oAAV>&Gppf
z-NHHlKFsNypt#W0bKbcHlN*fvLG9%PiPIdiH-2zLeyN=&{PyzXZ@;IxhrMS9&C}@Y
z$gkCz9rw;n=ZogOXJyOxU1rHIuA4nshHdU|gPsbBWean8P1oE%-j(#HVV(`=ySiTt
z>K*fquiQ}Hld}JwY3<jb;LaG^vX1iZlIg6=U3bZIzN`AQG2(NF;b*%q-p!WAe`F*>
zR!&Ncanzf|V!6LaR&x9D^bkL{ZS#9%svehaeSc+xZbY&!?}n+q^+9?o_Br?eTAp(7
z^k2So-@DFLOWvp2-Z<OS-k2zp5F+?)RbAqyf@7KQON%$W6nr2yMdY+4-`iQ-O6w;d
z(F<~qQ@Jnhn$aHDdT$H2)7z&4S<@U>#IfvKuxq}^HP5<|zdmi5AN(@@zSsLON7eE3
zvx;MpnNcbm#9HgV@V;m_cf9*oB{H<UsaQNlfOC%Cis$xsC(Ouszje>u@Lm3oJdNUV
zdHfIji)eJ+6YT%RCurxD*|**16+4|hXnuRzV-Fkl_oweS@BCBv<>J}i;NOZq(RbsI
zwVI|pT0g00b^4ODjGskEwpmEUm@S!OZgJ`HE19+CpHvpF7yZ@w_L^Ipo8IO6Q<sh|
z|LWxRXiwoSA!C!BOD4I>q&qE~_i~r+%Jf|x?~04GCi$|hSQ|8R#zG%)i^~lOQ(2E!
zxqucc8up!7c>VCYTc`h>`gkaP;-ST-uS_XAzeoC73;*7K=CR%BPk+oR{xr$SZ_4$H
zn*Ogi8!8lbJl{DtEJ3s_km=mXQwcRm4Hfmx!b{9~bmI<te=A*=x%$<KThFy-xLtgq
zeqZ;}UYC;R^@juZeyCVe8UNQK(rI${DT~x?Zwu$RT#HaWbLqHv&eCA@Tc?)CE@rP@
z;=|_s)aABv)8WnOJ0|ySe|KN^>9n_kwynWF%A3zMwF!ORnXMl$nSF0}D1Vu;Y&ct6
zVMCzvj?4dc@48@{@@~dGIkP86vQ5u9Og(%5z2%%7-{Ui11kIgr;_t~#4xGX3C5|q5
zqWW`De0jtYjjIyN<=)<Ur@lbGhV{^tPywyyP3PA$g&PRYSwCZsasJEZ*===doUhdz
zYvy;|y1ZbHitpmb24BuCHi-Hjm12FhyWQp5g%IyMXZBn-s%4rwW8o#0@T$J#ovT^(
zTUO~ls;ylh<=Z80r)Z{<`;nVb^?RnB+?#p*i$B`j34U_m>AS}ra<>?s9x3CPJk5E<
zO6GW*t5%^5{*Lv!yi+z#wO)AthDF?)>xt^~gKtVKUVoI!YW4gz?S)CwKiAw;x@DQZ
z?(3Tw2bJ?Up0lo9nyOS><+VG|r}2hclBR^$jolTjsYMzK+pSseGFZlnXY&3zVrRq0
znOga+ajqsCD9ShXooEcNe>kh`CcEXuxJjo@-|c9(&phJP&o{wLvOWFW*7Av*esQl9
z?y0dXf4}d+yX7|*O>ImRX|&qMQf^y1MR>_?UejkLS8sf6GEQ&JzO_npnb6GKBg)?{
zdhdx|@>}PUdF{D4yT^YwPHX$YaYE$nZsR(Z6IVha_13K0G}Xs#&sziIFNF*{SFjcR
zYl%J~ljyjtd8u1}{{02tw(wNfv_zcVw;{&lqpRlfoZifgduPh{Q~Z{?y}z{hVEf5@
z-ZM=S636V^{4a!Da=bdFf^GUw4~wTS`MGW``LRLf>;?A1X^X!9_)+1-$@l7LZP3@G
zNo%J+Y4rYKBX#2Q?zP?ztGfFv&zfE}+i#q|era*uUe>Eo+jr{bXM6ukeQ!MN3um~E
zWKACHjyXmJW##)-&fMhok7B#XaAt<Q+j&okx9w|AzsX}_**HIAzld-~5R;<wwvMmT
zwe4#Zmig~id#L&9queZp{dvvd9qCv4qtw27tbEIR&}&Y>o*xkx)9y^%EpKMr7I66U
z1^!%>R2$x!iz)?`OL}ZwAH00lzWs#K^|dFPq}nClyik9*+dm>T=kM)GkrYJ+zp{z%
zzs{FgFv(1ImUR8QnTan?c;AVft$f5UL*b@$ZTrR<Q(Vso2>YHDG<4k(J;|u~w)xs3
z>Gi_VzB-G&KRdmBFXGwG=H$EjoW~))-93L|^6MLJ240d?kUj4XP7RKNc3V~+H7q>X
z-SniwT9RXlh{`FZ?`urCoq46>jJNKXce2J(U4P;EYJ2q)E1xglb3<fJ{Wn1|(59o3
zq=t&+(rNY2Szf+xlZrm!{f%{9=4!E-SvhtyJNmso&8<4=RVjMiQcZ7{?X^oE+65=5
z+V7loGIZv}@7F|bbS<~ony_6a-+GM!xBTx7{xjxgYtP;m#Q*h{@yok<JBqfs_vhVT
z`)zAlT4H9oz27sT_sv<?QhyyWe|dY^4mJI~MiShz7oG1Grn&O)Buke#I+t_Zoo=NZ
zGU@Q7`yP){v*Q}JoBj3bf9Fx;{=ZoJDZ{PMa3}ucUoSO}_G)g+li=K8*KJ{%^5^`@
zsbZSv=ey1edbB@)=dsrLLZ1mt&tIJkesuTUHjmQ9x%OwKRh_;)<Fi;}@vj4wT<2At
zHGj&zY?gevRmE?GxwZPKlq<!FDkqu(7FjMi{ow=Gz1jQOSKsliI1=A2&Md5}G-n$3
z-I^02ewngX6}-o%$kePXHT7E=w?{c&K5LHci%`oKOKQFf-~MI#{w{0D1lF3R>4NVJ
zy|vnOeyy!nv^;RJmuJ=ecOUj<Mr>jHIHjQc(e=B<x`$%zx(k-az215xZrwK-Z!J-0
z^Mn;`)tg^!yd-_+U&ZO>{SjRP!4HJ*9FAO4H|2)H-5U~4+6Of*=P$1n<2E}CS}$ps
zy!7l}T_e7G9?wMfg{X9u|MQ*C^|m_G`d2Ea5!?AWTeD9%*vx#=>1~?F$@jkb;9dXk
zn`WgXNc@#hxWB!)Y0KO%mirB+yl^@=bMpz)x0_s-NzHeE_G0tN^lcX%_eICOvuwKj
z{eRBW%kw+7oBYx*Y+JG2FaBBl?8T2=4J*GFeY$O!b~Rbv&7?v#bGNqfo4b84Honz=
zwea0!$!rDn?{h?KTi0{XJM`0FOOMqODKDOPFIT_sk-7cNq;k3PnJx*5V`drcMH6DU
z^-A3`9Ih0^G@mxBkarJVxw<PxVimvM)JGYCww|oXE5Zv~C0u4dTGn)}S?`TT=bcqm
zx~pQncl>F7`f$&st37QI`<Cwf`|Q3&H%o4h_<~#4-0zhOT$<-KBj8hv)P#`GLk7u?
zGh&Yy%1yLW&`i$U(jTxwjX!jHpcbpH|7X*A$v?8+^PIjtmo04Rt*3l?#c`P?Zx`ep
z-uu?O&|qFWzsQ>dMM36__xPNPzFe2kOm3cHSmpPq=YsuOcJCmzzq4gea&Q;f*Phoq
z+sLF?bWV+1b-(r#hBWJ2x}R)MZkh8Wc+-+{mlvG5r!`k-Ogq%f_J8R&-@Ui3Un~=x
zzK>by?)@Tbl_}3Gg{pT<u2$*X;?USGblL6DJU-QkS&`tS0tF8_<ZtY_9$I~q&u>et
zpH-EjWapyx>h;CvcO(_9D0JStQd9Eg!qRIx%TmsUU;dI8-c&vRKeu`Z+h@?tJ=P13
zR3|(a{&M{768#%_Ss&*|KH05ZK5=zfs{K#CGc60PPdrx+`&@hAbZuX8(p}$=(~h<4
z6_%ZFV$Y4N3X|NqtXc3~vRu(amz!ZmmAaDKyN!Oz_-)(X&cAnG;M?4jH&${=J-88O
z^;S@G|EDx%u@&cPK3uuydakqk*{g?kub!Uk>1<4V^I*@7h?2nKlY5&}JP-8Gw`tH$
z6HhLhnO<<S@Y4IK&u*?|n9iqJYs%?WV!rxbos!8xp@~BCjs~4j`YgP3P4p#`dsA-R
z2)UNrBy-?igkk|-WtNj+<rVj?!pYwirj&>nYP`&TD{^A-tyhnhakz>bp1s$)e%jui
z-h-SKSK_;;J6*L9IlFn!#iu;1VOu9|$-Mh_ak*6Ak>ZapA6+l({k~#rqmX%P-P&*5
zI>}Zd!Ag5)-eA4@Y`NK&uz<{kHkwT<61`*2nq+8gY}Y&M`p@1X(l2*%p28FEiH?tX
zFPOYo$)vsGy@1!GtR1&Kt4|f*6w2DsE!6*P9f#GgqzH@E99{uCuPm|FRXMf+v@aos
z<q&&(bMdRL{DM6J?9Sd*mnQ10aDCr2`#s0I>P&mtYsM4h&)<2SK4IfhzGVlO&$`LU
zci;G6tiS9b4eNPF4;+|a=M!5wxkfx!>}Q_VM%O3bS@#&Hx2-Na>ZB|;Gg~Y0{0ZfI
zy87R14!+!dHO%bo!iv}byr&Dty?Lnm+tBvW`9Ex|$EVKR<z?<VFG<X1TcY;txODCL
zbvxzWoZJ%oxA*bSaO1yr7av<+>$X&tR*f$#U1t7?S5<4*^7V1zmfPN@+Fm&;QO?G8
zVe<BKdzTnrbpIY*@cZ5`PSrbaryF^1I+1*Mo>|Rr`Rc$q$)LIWFD#b~uW;8nHFDP~
zs=lq8ThtN4<>v87+W+fq^_$g+KZLV4uTJ^9-86`6V%FZ-o$BFV-hZBxTcKpYnlAiK
z%rcwfhNR}U6Hhsod^F8e3qLYp4R5#TyR<Xq+mb_9aGw8_{UIkoXqKq|F{ag*c9nl%
zE1SIOf5>O4njIP1_a@$Ms4?tXQ1@`Q<dxlf!^;!gx3H8wywf-{N_y(qnHt|G{<<b$
znA@3qTI9mQT^Cnd1}L$zo9Z8a@=$QfKZgCyEWS&hN}0NTdEuumP;iUcu5yO6*uzh!
z!hT!T-@6lEuK&)e)jr>*aei%$<SMSa0ZOlyD&AeY@1S1Q9ld1_&w+~Ni5)VxzAVaq
zb;@~8#%y=12tCeDC)-W;9?vU0>VNomeBLr6<HP$HdRgt0J@+h?sc~)jw)aD>pMdYP
zyXOuV_+1l>l4+FfzbwD~V)vKGC!24S#BI_q_KV$kDCBXmuk-v|t-#796W;%gd-v2h
zCV1M}p6&1Mm#_S^@Yn4xCpPB3E&7;}vgp0t_IV+*V**08#r>Nuox5UmOzX*^tgPGF
zy%8B+ZMSDT-rAO;J-bl${fApdS-Z1*3?B>5^r_%ssBz=oQ14edd2`jn^<M+tv)P`R
z5+r%dvVw788?Su(!glwcvsv!_VpP4;KPmg@(i6N_bMN1ObG-h4o_bPO-{iRym(-e_
z|2QM;-O<;-txwjzEPWRev@En#Ifut@%`9fytgTPfZLOwHa9JYtCS;acrn|3Rr}>5h
z7u$9y9#EVkZ85b<ZGOlej+fgmKT>_1f5_+F9IyEoeEVkCvTwLm%fvl*`3I*0r8urI
zWrtJ8bTvFp&+BKzC{J$=zqoAIhpX34uc@l=zZZ9AOSzKEr{oxhYM=WHgG(QMEogOJ
zHQ(C$!9?{|gY!52>ilY~=Iv9jeSY|(%%rwiAJ(qy;hCy^O8jsK&m-OQlg(dTexous
z<}_RT1}TSi(M{_wH19~87tUo8QK++Q;ZEzO=Ve<S{Qq~aVf`Ib{<z&7s>{;nmWaP8
zyYl|dz3=Cb$8~I&*xA_F`0$Z{-3P5X!C`;qJ#Ni3FmW$Za$WgFH>NyvMWQV)lf@dJ
z?VFdaYnuFI^-B}2rxoYCtC_9m-(WhBV0z+!ft{hl0rO9j)?N&F%s<PkWa5KUD?#yp
zBjmBRuk-wzxT2Gie9P8Nf4%WR)Th&`%6Clbt(|_y=jqNch`wm*dM;<L#)hdrb62%i
zWli~}>^^g8pYIK?<>9xq)7D&TwvB1KJ;U?XM{Aj@pWhewMV(3iv9%<)_twjkvvPC_
zcvWY;p11GUtBBM4a;tWzA6e6tXw$sP540pRQ|H`UP2q|MlSH&$&S4f5z5nBN+#9=l
z-7?F2w(ZO4de5M`vy7+o_QXlEbXQ4>1{DM(O|4pbzNjQ(-myNF>=QHe9`2abtz<Z5
z!h)suu83}9sByZZ<bS_PT(#WX{nW-QS93D!`@;kDbG=Nu=k)F7E_-NoKhfrjv9vz>
z>JM%^?r6>SVF@e!G)wjE=g;d{EksTquNTQXp88Jh^s*H;XD-aU?%%Y#lC{veCHBI3
z559}v7n>PeznSNGU1f{!IhP9)I%A)HnLke=XPKj(wPv@GB}eC<>{rbK?^GTuCe2@~
z=~q0*_`>8ny9C@9-et7lI(YP}<87JVwGaBgTt9l>Z0?37bM0zAm)ua1n>FpOU0{L5
z$4kZQzx?@p@wp^8#~bi~a{PqsS6%&ui`E*g)OOhKe$6(e@rTQg1KM{Fztns=v-)rK
zNr$i*2GdSNDl6p|*R*f9OgwVa;J^Wcdx<NiRMhwU+tE8c=QfY;&(4)D>qY16yl%Bz
zFWU20=PqxrJ<_w>KTSQedFoZAdsPo6O%>L+woaJk`{ejZ$+!o>vi~IAbUe%h>W}G^
zym8dqu;=!BgQSP8ks0ABh3B5m$m*$Dkp7Z)^Of)kn~bl#m|LauCH&LvytGK3$I@yR
zC!d*Jtw>n2SF+znex~Q8sek|6bgszpHnu4{8PsKQPtxzzPQS-3K_?{-%gp+2{8i_^
zytak<f~Pwx4c8`2v2@Z|8Nb!--5ohiPt9tl&PPAbZTq~${zd+j8MS%_7cYsWE2Mgz
zTH(K4v44u~)$speH@$y&Tnsx?S`r~-Vi+v*Y?%-9Z7H$9e?c3#=4bC@s(&*#Gk4n#
z&6&0>j$x{%QF`njPd+j)nEHH%YsG73^-r2J=c>CIUcJY8)x&AWWc6Pse+U1bA|&w6
z<ZMllo$=e)C38DCFL%xm^3$^Ocq#NwC3gLiBqzR;^KH+6Dzo2z_9KU@>6Wi<iQBtB
zw1?V!_`zuN<&oeAvx`<sCq13YJx5PH+X8eJ?BSLVjlFZ-Z2puRF?yd|FngBK{p}fd
zYy39x-@bFvuyEq>D^tr=WgeW9oN{DZz~Nu%zP_oGHQ3nNiqku$)ZG84(NsOJ+HAw)
zi~bY#J!;-4ynDYw#V7NLcH9P=>$mNQ4_mhBmTBtFze3{v);qtYJ)LWMRa-nncY1eL
z&Ka%aa&M*<bG;QcUT<`DNAuKUuG>US<DRZs8LhdaC^bxqhbLLM<Y0-#ZT_XZ-k#6N
zKgvJ<Mm}rK7Au*ez@UC_rw4^k_Fu9&K4D8lM%I)KcO*48rkD%eb)CHAlTznWSDy@(
z*1Z=GiO3z9<63cTXVlu?_h+$vT~ucq;&>^caNjw$uT1=}%zTPV9&#_0{`hqh?~jCo
zeA*1UUt8pNeXlIK@M-(!S)v|av)4|4*w|+!6JB#dbn#36Nou@Xvl6E6=De>H-ydDf
z7a^@>SQNPTYv#8+i%Qj%F}zckE`0C%*6W!ttIyL1iZ4S>*Ir{gnqcPV&$4B8-jCAi
zTUI~RDjAo@x;6H%VHA4#VA2ugLfP2H9j@zkzhSC!=GyoFMxD*qC}EaM(|*3G;tia;
zOzc{cgoK1dTcJ@#@m>DD*S@wZA0-?)EN`ClFj2XG&*!{|)1KR+j5L-?_^e4-Y0vkj
zV$JC*p<$UkJUpC<D-6B%z2|vT@kJU`rS+J;-8aAdsmyu1mwA;n)x4@!AA_c`AMbuU
zC*}U^-tX_HPhA=Na>bm@Qz9Qp<V0V*Fm>5F9l6TJF89Ppt-u}W>ni6zI5qo#S94=x
z&$^9I=G+OsS)-u(mTw!|$E)_&qh0R3+&61dJ$p1$$1x%HWlQDWZC+Kh@TK$QjRtHs
zcP0x?RN9%{x0!j@LG>AW2S0_}6Ir*R<5tRqN@nl5x*abrDO5hZuxzK!+FZ9?`%5+N
z%12C{b~|;RTFu@X=6xZX1mB;$-K=ETq<1!Pu9U>OhkN6%$2vP~fBdgc^~e0+>50)h
z&RD&iu&&KUbmBsm-zC-J`$9ho-HYFF+w1aC?FgqF2lJ&%&M%+$HRPR!N9QM&^Gm8e
z<SF(^NvqyD|9#r~?~}Ga*0`GQzlga$?jA4mPCZG}qjJBz5BdC3=JG3RRpgjs>R)c{
zGUo-)<L>$!t>#kJio2fXc<l_H*6KPf5i}F**215gWj6JO^peZ|FD>)3UVVKhxmvw&
zQO(8J{fny<PaOJdfAYbkTgmgpnHRQwt$)JenQnUQz<~+Zq%J7klfNl_<KGMQB=zrg
zF$GU^cCgHQ7grP;bSRd0%kjm>x640UqGK`ld;S?ek-e_lPq~_&;W#evq)BUfOw8uC
zGt8eNGkN@@FCMn-mbv;_jC)<ow&sHdL5iD{b`*U0UjO^}*_*F}Em)ML_We12H*7<Q
zr%idSDyNNK)Fva&eg6MuhrDS!Y_`Q}x!k+<N0lB+PP#6SWy(*Ow>ei}{g=&ZxlewF
zWbgJao_Fz;oQ|%bRo2_P8q=AdSDMdPi<JND@9TM|KRh6E`T{*?LzX-9Zg*5`#~pg^
z6?gcoCHq>V#X>r}ENha5rhXT+6z>0#{qf{8(~3D)c>kU`_A+zg^)GT#9NRp29@n3`
z{+PMd+HmR>`>pC;$JCj==DiPyy&<L7+#D`s*IhSH{aAqNcPH5t=MFDbRvp=jc&Er&
zj<;ENnjY6p&YC%!t<-CRr<|gc$yRNqz>3c|^)9jXZ)N{zU%&GByT5ZM$OLWk_^z;X
zSEM#LrtDh2?`OJv<vqLpk>I|{Sxs|xMc>brdgdzM_)Tv|rk(oDunFzlE8U_FKCHId
z@c5z_sF`}eASB??-u%n*@|~vde>Xfh_uE$e=2ab`_tWPTT>o`TAnQ)SjOns-BO^~|
za;0m}Et|Qx=$uMgZ8H0|O_HVGI5)2|xoV-^^YGQ|DH=A$>-TvUJl*Ka(>9Sy%QJ05
z(hh?U^MBmgzFAGvnRBPSO(nzs8&_DS|E*D)RJBt+mpkf6)gjL2#00OE?8gM2d3*`;
zx+K^CT;)rQ*vaR{Z(>(oR*H|8U*je5;M14SEBby<ohRJv(J-S!N@?CV|Fp2#Sqw^L
z4zGP5l<YCzFURjwAttYVE2nZlH}gTa_Uu(YsZBC-y52q%x>Ni~>d&rhxvJ9LqCZS>
z4;`AIW4VxDJWuuKohBpADJBMbTNmctO%#0BY4SHy@`A(q$xq^TwA@(m$z;lo_m|&T
zh@6%ddg#}C^R>XkbA?Wq&+B{c`nWWk&F`zrLw-$_{dX+ug)8OOzj=G$`o9g*y0VHM
zdXkYATO9Y^p1FhvGzDv*TvYM-^fIBlj#WRN$URA6xZt$6eCP7DIuBa9AK&TC_%Jzh
zV%(mNg2!$0g-u76`SI}Zh_eKDFD}0<&)@!i|EGmFI%DlmbZsxUk9nfC@5+1q8@9f4
zGOBI0rFs9xy}Rs^f3f=Mq0Tcujxjv>qvf$PHM=Kb#jKMjdGbLSC)|3~vvZ;`JJ;Aq
zxG7~E$uHaWg{g2B@0lIPSLl4KDEaJJ^Zz5;lb!7G3j&2|^MmCl9Zg&^$;4Q@)|qdP
zSN?KF|DP-^DzzyyMO>CX@n7}WZ|}Nz&QM3cU2;#?ESRHxSN;6tsS7nPf9XF~yg@l?
z)|4ITFWB#H;oxBjTk7(y{8aoFrqy~S^PD24ujTDYlze~UsaQx!Heb!YQqz5xxA9aj
za{a*daf?dYi|>z@W#n#)d6&1T<oV=VDm!n5m`hD!@mX4A#G1rXEc5nBx@MyCyGt=Q
z#QoPW*T?Nr*<N-e;F;M$(JB0|9{SymQn{k9uI%-k``(8q@6A5_T=sYFk7x1U9;8%r
zY;rzh@=}iNGx%UJiGSxx|DV2c`mg(glL@o4{FZ7Swd}rMwl`DlqOUij``0ERzbW|&
z_RD;lA1{6T?`?mMQR!6QACeLhdJ@Z|n!#%U8^iZ&?D{NsYSMJ;x7(AZ|GK-?A>IAU
zk#oK`Z)GSvZn+$0_4aMws-2r>KJBf$aVkCJwsv~(`?7gck9{~4u!wbD<n=o`J3if6
zV<O?EAQHwR-gj9x&28@;&BE<}3;6eaTK;Rvz1MA-3mz`9&lGU`wY}1`(xB%{XO?z>
z7H@@=w%4l1e($4Q_g<R(Vn^`FnX(gwKCPe7GOgY9gnrr91uk53-5*@Ovhw-o`0BI+
zx(2^}#Z5M3otOX`N;xl<zlmvT-GT&lwVPGC{y!dat$8K$!R&wNcbl4pPr3HUtl7j-
zXzAN2xy#XE@7>AfHo}Ur$NojgHMQw3tlOPdbV4+F#@iQL?$vK7QEKa0+;yI7->keC
zhFdjUIaXQS9(K8vM>5Xm`-d=T30z&1aLlP`<y4h|j%>DnUrurU`Ek+hb^1-Ul(v%X
zVy@rhw%@Ltv=uzu{m}i(iD~IRs<VEH1n!^y`}p0h+I!{{B+l7g{?GS&!KSlQXMHd_
zc)IWX$4!%WUNJN<;Nj-cmFtwb_h<i{l<c#I9%raWmaV)W`PN#L-*nx5r(c&H!sLD|
zoBq4rtMaK2bA^cWsr4;WqN`R5a-U7S_jYEccGZsOW$sV!+-%ZrpUQsNgZXxfblaiR
z5)b`6ch6hUbpC&y`Yfx%0+V;F4;I?+&qe>`)yXFcKG^8Zj^qiImRjuI`RTfo@T5sk
zgz^)%em}C{$g|ns3oVxJ+Grk?adLu+^FD#2QTGK;YyVrjQe#=i^yaA<VK$lUFH$Ou
zH)yGDnZ6^cApdChkD{Ayf4uM6c^_(J3%jakv|&{$_ngF&dva9FKF^%C`or~ml43XC
zKf9W^QrFwhtvIQA$(2tX{xj4nCkB0r3zm%yyKrxN)2WjeW-xudsN^lA{<mSJT37Mh
z8PSvZHJbB(6)ag>#`?(Of>49bC(hHS-2S;SZ}|6htMHGf!R!KoB^{SOd_UcEx2?9i
z%ynKx7PIh&)P#hD6AVth(tnmM{LgGN|C029D^p(XJGx!}VM@EfmFE_#p6x#I{k@Zw
z+^0P^<m^725?;1$(*biH9-hNYwpV%`{%-bNr2T$+<cFf=fA4f$FcN<=Pk2to?K!%C
ztE4_V>&+^eoPRMl`^llKw2H+deXA;eemiwD+sE`>($a~N5?))*82^5?G$?Q95m4Lf
z%>xtdu=yL=3l7xwn>=`0D_d}4<@J>1yB5EA*Q=`H^Kx01??&#p>leQ4UKw-NP?cT%
z@xB(8?F_P;-^~5M;WcTCZ})}THS5h<YuMR4|NPB5A9#9qok7V<zduXM)naTO^S9eH
zDnFH$nlO3i#d41C;WqiKVS5|@_`L3~+9NIg^1a{Qqna=445sz#&y8x8FV%C}{A#1k
zIsK|b-j|k1n@c-SEl|0b|NTSP(~Iw)Jm&mz+xJTb-<w{sr4uZz#I-U7cFIX-owiLe
znv?L@<H1GYuH^X1@|&jQ2zU7$$zihkmGtABz4V6<+3E)-Z#&1onZ4yf!NZ-)uWkST
zGT*;7k{dL;e}ZSx@ooQlbXMICzUQ%5Jb9tN#K#j8zH;v2&fC{IIk)m<#ddDL_kaK8
z^1DZF2w`JuOKe@&rtH4m=D6p!9FNf64n805l5Iz3mDx@={rl@*;i4G5IX^hvpWZ1-
zD_JbOgzx&SS(|25ZcpE_R%4>IZf^}6Tbp6?WuJm*HKFOLjP><vIqj=HF%->tnR|_M
z$>y6i3oc)3_p^vJ@VVl<Y?G1m?YZiACF1y}H~TASJI|k?ePqLptFtDkEdL(xa*{aH
zRZq^?Un~>vY&>wY&+DeWN7b^Y8~;qHH*#uo2}+84CvL*1pelYP)qD2;_)p&+9iMtW
zqA_&(?%8W^?Ywbdl?gBVdZh(7KQ#AQ)vWzmv`0{@-8*3NDPh(85;dh|Ewvk+wrJR$
z_G8;xJlTDrgreCMw;a2|-<hFzGkQdqti7LibJ@y8M@}CO4Px=V%r5;o@daDd?!_;@
z9M_3lu_SYnOQyn;dkdO=%V!?xj*eECbichkD(!{d^v&IowxI2k&jhj}>JN3an@?y|
zSn9qrb4B>htZ<*lEnoUgEmu7YT7SHM$;-QPeDCl7koKDbI>7FL!I}#zrvF~IylKyy
z6K**R1PfK--{$tROUK>vxVKX|n}2J^kq=rIqrWI>Zm$XP685lEE%1#F)%exLeJt8~
z;wN>Br-xo;`}pc6>~%{^T=lWF?-grl)8vz<3=DciBbw*UnY_7lhp-r{+-&LHAC9({
z9n2KItY)kEb;o{72D^g=K9?6hxxXp1Rf6k&-plo~ZQ?jX)jqO3^SGt9?yH=v3){0d
zHU$}%V{V9QdU{No*XAAY;oTlv4t^n<Q1$=z5~mL<*KVD*hU2iS&n$MP)t7iD^NZ#k
zt`$8W{a>$a8=rSV=&P50oZt3;^*wH@zW(6jf0|;2dC#{f3jYdO*H*QCJ%89i-%qn&
z{4SZiEQT*>=IYD~e=a}2e75aa#J;cZGGA|>E%Par)wsK(_xY5ACg+}qWJq(fiOS^g
z&e?c<ONYqpgrkW+F3FcCpI?~gp(lCg!&}v_lU^%qE(6Vm^Z4_nK4*TgW8al-XV#tG
z_x?Ewr`>ut=^pFrR~9$T<d@BCs@S;aw*1HZzv=RkFE)E6CL~Dw+js66*W`T~(#59*
zi>-n;RPz-s`V+A&C6(<MSESy|qUr13Z7U7RySZYs@Xm~&%zLkP|G#eizAfKMU4O06
z-qy#<dT(f_>2D4{xARWO<28p*81Sfaou89^U$278D>Bo-pl4zw+u!^B`~RPIe$l_c
z&Ze`-A={s2{_nSZC2UC#+8;d2nsBiG_(i#bnj+cnqQ+bcGn`Lv^1D_Redy`5f9B>d
zF7<W2c^UD}YNk{8-Igq_AHnC(EOD_^eU>|??RL?3<@lb6{qv)L{C)XnTXo-3?{j<Z
z=*xxF+vl8^k@)_QxVL$f)cg1PH+rM0zt23dO5Db=l~H{C0>!Wn|M`2k_{+{aFMrqM
z?@`a>q}z~pQKsYh<D&<TEGaV5^E>EM&EEB7foSuCKV=CEiW43mw`9q!ta4g%K{>fB
zl`m7I+1#(rVgKKNY=&)$uQpc82uaQQ_2K^h`<=&<_f9ymx$WeZmFz*rn~Om4az?4B
z<h9wR9rsKPQdA|cSY$k$SH5GJ&UsJu3a!X3!SBDFU!r#VrGtu6&4a7#7J+Fw*38V#
z%N$CTjNiWXRsZd){IqqeL%RQ(mH#6BHl^kZH&pF(Z%z&R*RuZit9xekCKKN^S)bPw
z_xrQr*4>irF(Jj}@4BqzKj`kty;-4fcj+FkxKE<@6Hd-Cu$;MOi?HpL;>C-TuGt)X
znf&zN0Ry%K-3q%eAJ_B0c5%4sTl0MW?+srI%yTYX;PC4%u)oCY>bd9GVwQhjx@5X<
zNOSeOzkho<_lD3q4~Y*`Cf!S&7GC&yflB&++YKE>uXOLPv<wz{YFQ(be?E6h$G^|_
zrq}!~u;K6jcJ+|1#u=q{#^ubbgVw+Qd9LhE{70F6LEpIEDU>=eufFtPxwurs)VlVp
zcb6NM$LH;pxt|%`_V*%Fh3DO+;(xAfu{mSfyj|$>*@MN7pTm_}bu(prr?a2cwvD~G
zsNzG`4xuu;zY#@Ud?LT!%&@)4?CiTCQ}x4(561)Q_lTPnX5`K|cl-tC^sm*oK5n&t
z=aya0Vl;Kiu8K=@t9BS4n%mgesCby;ZMERCL>q>A{mW#oh8&%~`-|*rpC!{eKI-n;
z+A;ZU_yLn(IqSzRFM0n@tAAr+dNjfG&;bLhgN1t@%-WT-b#2P4O@gyr)pxEk`ops;
zQ$j*hf6cdTN?Ym=yIq|6JH%}79d?iJl0pAk-v4@a&n($w!n-Ez>7RA?e2tg6%Kgsl
z>I_kqu+Qapa<pfDT9AJ+x4dhg((j18{ogn@tKD4vY+cH|w>O&?y0D(Vv-LXnyBd9M
zUbeQ2{hKA9<{qB7AV>Jag|@{%&T_jy*cRW=!!G&#ub^n}*;-HA$1AU|Rn<0TiJe*Z
zK8f!<Th^L}Wu5PYEScY*yFWXqZHasNgTntIH-cFFmlmmPe{L4x@-`vv-IdqBuHP-b
zxNz5{X{?DJr>6*9QthtUf2>%9-=~6azV6MI*L&M_dB5H3=2+v!nYZiWr`_*v{)jm}
z^@hNjO-s5|id5~T4@Q>ly>hi@_vi8`Y4hf%ji-30dO5z{=Tc;JWpaJ~8iBQ4>_R<T
zPP-UAT5<021oMqdt5)&e@_W&{c5k4JooI^+Uu@n)uS*xqcJ158d;j-mIdAs3ZQSC4
zGfkdv<C}i^;t`$Mpg8;7A$R|uMP!P+`>MB>>h!;#-=U`edC8|D^F@xU?!NQPZqmB>
z{%NZCY!O3)o}dC5{_}ITt}Y7S_k8<4)$RW;gc+s2>WJ1}VQ79bBezZ7S^c(h*G7{^
z6Tf9#epjESTk$ILF{>o|x(T1u|6B+!zg?o4{zNOCW1Y;o-351Lzje)=fBo=Y)^wXa
zE5(bB*!SM}tiR`T-j7AamnNOs_~NbJ(@=*`Q}1LPak@OSyt?dmhuo{m>5G%D=^Q+`
z=Z>U=oAtT0OJ(snNt;eQ-nv)z$F2FV6DRA(7|$+yIa^AY-EZk?{a?$a#iu%7ZGZN|
z#kM`3J2WEhSm&i>OTIf@*L=e9@iWIK^UpWrzkGSP@79ueXT#!7{#U<URp@=LuKSN|
z{w3$2#X`#aU(Gtd<&Lr8N|mSHdvCe=9iLlS{oyXB{sUpx*@aV|SJ-Rjvxdq3a%sxi
zc-dj;Yv-%e*8PsJN>}oFb$#w4zR;v*)+Cm4@i&J=-#valx8}w4$$^IFZ}utOoFCxV
z#^zl+_l8lg@PvJHc-oEHn_7k6H0+kTqwwqPmb<QpxcIiREXX*<dVXU{qkD|$hu^%%
zKWsk!U3u9|fur2rQ;*!vxv@Y0{mS(D^`^&kW`U!U<85tY)z1H2JY1T;V}nE0p6S#c
zPn|R8#^pnHiDi81r~Z4jw_lmN?}D7&j?BH8E2LI)vb9}oXWUdfv-;hw^($@9PTlh+
z=0SAP@&7lxmhEsmqjcllL)oj`Sw5!k&XtsVt(!J6#6HWP+o|{U_O5ex!Z*KqdM{sw
zc}ewC|C-YLXgeX#@`F>E-ye#8SKu?FdcE8`+jzgF^GnK4xK93OUH)|U{`b)(uP<$M
z+ckOH#Ps#E%6-Ldu^*1!$*nr;{mkmSMw;vI90N7LOCIz5R(<|Mud86W+}h)}oPS(t
zzAf1K()m)Z{rbs<K5N$Jv(I-q)#McxW4Br2lE72F7gL&qrp{J=>Y0+-V58V(Ixjh(
z_XvyP*TQ?kx`$SKGH?7=Z5mwkZQY-$)5f=K)(iP~$N$UUYrMfcY>J6)8~5>-2Uh)b
zV)-tTe~e#i{?YxSZ;m)U*X(9lp0d;O30q3ku6Lj{I@_LV{aI4H@T;-y*$F;b9rLnQ
zOkw_!@i8pqWZmnV>HpFu?7zvh<7T-);oXS=e#=6?CIs(D@+dOW%8X8Bm0L3>j>TB)
zaKgg?)<)-If05h$Uk)h7?+CZ5t=@e`dD)8}U%TBuOrPEtk+QFVac=XAl9m4U{|;@u
z|NmuS+6mA!LZs7|AARwYj+TW-v3Tix(Nvc6eDUaAbjj`A7B}b3=i8}lv4{W1_CK~h
z{qKzp40`keHr=&-eoOM*&g}P>ndfRd)Gg1QIeqTy8t->Mde&AHz4JJ+{K1)%-}QF<
z%#&JSaF}D#>mMGg)i1@%cg|b$Ur_zjMDGNZDJAi$q9K28g_qwh4f4~p4?5*q@YL&G
z>-IZOS1d`X_78PBul(s}!;v#<w@q5fUnPF`li$T)i!_zAo`?@ppXxr(EdQ<g(j`%2
z;_jY^9bKYq%!gkbn|bi<bNfGUw{^b|7U;|T@y-5QVtnv@R?mPrmk&-pdSlz+yB#i9
zTI!B}`FzR7`k7zBL5ZfxzcV9e-Y-AzDY0QvQ<d|6<9z)oDusJB7J7N!VYhlU>C~w?
z--_mEy*^m|>9y{q@(tg!uFu)AzE)HEx)G08+4sz{DV>frdvloIt*&5vfBHUXsn-!6
z!NTMhDx2HGb)tXf9S^G6St`1%?ev<<Tp{x^3T8i8qj8jbPVSF{gMD?o<rlnQ{Uj^(
zq_lJQ%~R)p_FmiK=Vju;ePPj$OVcKA+_!r5ic`}AgRL2>l#V-Is=Hma_(s(R?r+@+
zch-Ja(SNdqJL7fdqkHvc4{qk_3aBtTzgO(>n|`};N~Auh&Hqi{*6*4N9qscKgeOlq
z{@%wq`sJ)mIb!N_<TG#EC5rjz{$n)KSn~MpJ!#7=FT-^rw3rXSILvS}?%~YpyZ>J`
zo_m_EpXKAb@#Ch?-uss3|L<Cx@@a|pEdNXXmRis6ENQR4mR9xf=trl9FX`@XQL&M6
z?|Ak1s_ZJ7e`eS8-wcfjF3iD8n_k_o5Wn+BGTrxXi}%a7etU1tojgrM;P&4oi;LcU
z{~92)>96klh3<bYzg6A3|I@ks4?mxqbyRfG@`RA>$(q~m=!u8K=4NFXzP_r*>rroc
zJI*wH>4Og^*O*91xaptM>9YGVas8G;nd_yFof8_LmFvqMjyIdva9NGd`&h`?1J9U4
z!qN(|`uw<G+(|e)$0_63g_P74=0CR;X#Uw%8}MlMGGE({*K?K|oW7X)GLzqG-=&&K
zN_Ql69h0{-)Tn<<Il5ubozg$m2l=LWJD#@wcV~;w>v_|gu2!tc*Q%K|hu2w6(D<lv
zW9a_ae?t4BzH#N9woG8vmd#2CjSBxO^^R@c2mfQ~(d&;~Zaf(#RpuwXMQ^37m8IzG
zBECme_Z3@8Pwv_u(Dk6G{BlDmj}hl1-Z>$AE9@);^AxA;o6~c0p+{d*p=751&#49_
zxf?8%OU@qY>@)ByYh628Mcg(~LGp`*s!3_v$NT(m5B-W=u5fGVLRE&_n$s_DoFAzR
ziv4Mpf;TJmC1rjEm0it}*?IcjS4AEr$;Z)OwmqGbGvDvm=P8F*J^1ivVgBd)RWr-2
znGa{Y)~VQ$9v^Jxux-6`&l;HzCI45ffA{UZ^{VIk)4MmF-+ehkSfxL_@>$I9csH9l
z52u>(>)yC3oo{==RA}{?043Rt*N(AQwlDuKH0hmd(7%@aXX|R-|J~=hJy!GSl$5()
zeF~l(*qsm?`!4nU-)(!7u9<%g@IN=fEa{hL`SKW>r`#&NzxQ(IuarK!WcT8tbE)4}
z{S3e4u#so_irh*2PFlZj`_3`1DF`&PxL7<t^|Bd{C8N;+o9&N9-c_gEcdgzw|MJNR
zhW|h2o}ISGRVl#eLszSCyNJcrS#Kt;4ljSu`oQJ%<k}C_78g<<-fi72aOtTEYerPn
z2m5zXEbdajUjIxIk=MReG%xS_%Pkt5zwdrqY9Vr7dQu3-;ns&G387LmO4h#T*cbiL
z=HKcsrgvW0=FDw)aXFXMJce!VhJzbyZkM}uef&82`UCU3#cLnzDq&7FaPbv9nj|5w
zbEnbBvc=-$ah09o*C#x07rrTb^2@>qyEwiuRokT>!!({;<J>8<Ze8iY5cd4lOpy{L
zW$qiECQQG&udVo)xB265^LZY8)IEDZfN4e0-*3&mzh}*h|NqM|Z6m1QzUlhqN8jUR
zQukZ_9jN!@WY@h@J-Ik2R#e?1y^X*6sL!jr|Lz-{y<)v~Ps53aXZJsFnd#dgA>k(M
z@%#Ikea9ZpEdOi%)!}*dq={4iF4_I~*qy2G|HhuXw7uRzZ{8HskJ*>D2W<LVbbgI#
z{B<VT$uHF$-R2+no^`1-r~b)_XM#7E2kL*n=UZPB`_|@Pc9hxlQ)N1t(;SZ9UUKM_
zeWm!FKdjG>xK8)9RF#}QbD_)b&CAx!xp8E_^{Quo-Ck$^4)0FcHzAn+TJ@2IKX2!6
zpYHp=xBQ`QzPK&xV!!6-Q@W2`@-O<j>4ePvnEZX2r}=?LOYAu&Y1?qEQ#j5owdtXl
z=PxzeJG;-s*(FbV@L`joTIBBF$Aw`6i{+Qd9e=`iKl<*)m21wtb@puV^8a)FeVLL(
zVEfd9>%7AH@8348Qk|ByFzCYPRmFyD54A6T>)8Fre|2osYB#z1S2H_r*YpMy+Wkzg
z)H!@0^_{TB)I%K7j}|;p{@df#X(PYl*fkHyXBJjMr!E8t#kcj9TC#t*zVGFVezE9#
z=ksgdaUN}7zb&p$KEy7$^5|=|^HB+Hj{f2-r8l{ne%;$swdSkL!S_|q9~^ZMeWk4W
zLE5a_<N0NYgq6Mlyx;ZCHs)_xd!R6Ae);qFhj`qVf9=`MmT}c{)#V)9it0ROxfc;V
zPuHdSZ1}n;ymWqg@s}sA%by)O7O+&++?jdHGV3Rw+nQb}iD#vqZ&=1-r}uFQuX(Ba
zhp1%rIcA9wrz0-&hKTRpkWpmUdv8{q`qPq!C*9}g|9b1(zv18%Py_EY$J<K2zEzdq
zizdC*l4!F&nqsM6{&Q}*OJC03>3;n$()S%LzcS%qj^@w2Q;w~|OT&NP`*FH1J0dM1
zLBh19J^kBOv-5ji+b?Ffx<8xGGhNC`b+Xz=v+L)J#qRI3+3|d*{i}-yvb}y!?0L~y
z+{EMl)u#W!sof`yv(Fyi>TrCK&*Znv`M1t;Ub;3hrgn+kpM!h#|7`eht3Ph#uiMXK
zjdCv=-+MPTeslO4JHhOGpI4ulsJp&!&kpamx$gph-)egsI3;8IR3FWW-Rk;fSJ%~i
z|DXQehT*Zsx$Xbo#N}Ik&GVdA{r<*|M1vd4reAPkQdu&2LQDT7hm3`-CjVL-oZ2ra
zvgNGOJa*$ok@>sWX;*ibEMHxHd*957J{r3w`&~OZ$##FrM!#LT#+x^9KELPpo~#Si
zov-p8*Uz!;F8kiI?O9)yTlmxc-dA_e?=g{C74+vU^P{3|qCOIdy0dJYznUsOEc15T
ztbZxu+oDI=x13j}GKlmi`RUKfFIYO4)7SS$N|zd|j_2facKR`Ut9f6_+din--5#p6
zL99pGZ=EIQ0SBWrF-57R1yB39VkcHi=v;O%%%)T(<Y@h#xwo#flux$KtUU7gZ5^|E
zxBij^Tkf&D>qnlfDSf?FSMiO`_oSGKyMyPK?W)&06JHu-m{<F+d&i$;EBCUAo+$U8
zsbRL=tvAWfoaN)>FS<Ln=b3$e+4sxA>(?FjS80#FJ~B`GwJ$jFdS=Ii?>AL<{Q6M&
z=5x5~9p!6A^M7=G@VV^r$EujwY1fIjslQ(7d7ZkoIO?H7X-V?6s2cT3{(1RQ{r-QN
zH`>oRHEDK~>(1!CJ7Ys4jIJ&Bv<*6~81>wEZfJn#?a3vFr{7+XYj{-RQ0BVBH$+bz
zQ2MUeGWFcsz7?rw7kU`o`^@JUB(u%=jNdV-gI^YjC{%Np_;1+!QL$w2UB9&QrR;gt
z@7;C<yk7n$Mf#Y?j?8b@DykCZAI^MUW+cPcUfjbmJzskx@4P+11~dGal9oKo=r7to
ziD%Y)KG|C#t5+L|2IL9l>Xnxtt8Kbiv_GS4MU=_`?zx908936UWt5-Yn5;Ihw)xVv
zg6KU=vF%6C@CT*Em+pJCwt83Y?M?iwjuETdZZS=4TkL<=`EBx=R$<n~%BgObu5jxq
z|GjwrWMR}Vx198UZ+V+8?%8!eTXteX<c_rWwad0Nsc+e!|1_fOo$SSTtsxcuC*}N3
zo!?{<vvaRXz^=sg2?p;bN3V(!&9A*P+w8_&gLK~F$-gfJWZzp+xa97<b!>a5YtOS{
zw!VMQ=6Tu0yNM^|>e}~K+*)zrp}t(s?L8^6_2PGZHFp}Qq|RI3`uFi~rCqTlJFc^u
z=j<|$*|@iG!I#Q+ll9_~y-v&fuABUj^LqL1#dq|#JnO59`)V3=aqj(+eK&iQ6n|a2
z^xh-hTU~{R`Naj-i?4Ln*Z$om9kTyQ&7tdy)s!oLrSebu{lC!s=LgfNe{LR+zx8eJ
z>2nJ=JKvqPadGUK3o+uyM3-#f_<V2wbFPZTOJpXu`M9Wb`R~4{kZ|!y%$;wKuKn2N
zEB~hC!O3NwKaMX*{ZMM;d2-JkR$lSt?+yz4P8RGDeCo&g+xMW%nlIu>eT$oZHkbdi
z@T_K%RkvRCaqpG66<u%c|KwGSe<N`B|5b~rs^?>7lytnEeYyOE&c;=YmTvZWrz3ke
zJF$Pfe=YFGinS7{L0sNBSz=f8mNb9+raUQi>wbp)D@q=JdvkTh{E#*i=NH-AoJ=OZ
z4)EsAI~mt}@tRwj>F2ZC+-|!%m?uUXbjvs!ZB~D!H)&CFK%Z=Sk9WIXsov#a>zQf(
z64KvHH+HVMCzrl*$qu%qw++`ANX}YwZ1bzcO*v23PCERsppSQ-to)%Ui-++|CyfMW
zrS(?6pS<+p%FX-Ay?l>uyRLil@Fmv8FLi2u_nz{Tv+Y^B@KW#VFBbU%GJMY^wAjSh
z?_AdVweV6<ZMi>tpX|kVnu~7MCBJ&3UC(my!<<KJV=r%ed)W3#<cA4TS=`5!_my|N
z3E81*wsUjWq-Aji!Q5M8mu|Vnlk8M2-}$!0zH9%^kX3i%uf3mN9kuGhu5VBKgVJLD
z%`vomUS$<o<?~YDUa0CM&e;E*ntMN}ue4O=<8V9O74Y<%?7>UCQ=deKlrHB|5mk)3
z_%ChBg^&8ZQeKMPy*gjcuF1*1cf#g)$Ij%h9vSPFxg66pN!qu)^;`a2=FKy99+_pI
zru6e{ZSL&pf2MEgOsLOg-`2$Wa@(SlpF`s(FXdl!Tk-0f-wiRddzn|B?>3S9cW6%B
z4%aQJyzSF|JnT|qHJYS0*H-^hMMihjUTc<f+t(Qfxm{*^v~Y5Dyy?&Wso_eiJu(vS
z-+BD;%)W07C1=m)Pu^eubLZ{S*!N|NuZHk)t37{k|NVBu#y#eNp|bDuS00-i?$Z%y
z`h;&**3q7cFK_JFFUe*o7cI%Sx`uVd<hedyt}Q<CQZtFe{;krf*dLebYps^?uS<*W
z605x<cXi#v>ocWiuI2H4koCXqzqM$1=A(1=*Ult*h8@58O7KF(q*wde{N@DIR!!R5
zca!yOVOT<Ex=Pq@_JvVp2bEU%RP>8x`n7-6Yi^m<!F@e^Ze#Xk^T(^Uyp>4FOBUAL
za`z&~myqNR)f`^enKw3eXq`HAvf{L{l3sm%TIv#SiHUEIJeb(L(B+9nRC~u^-a4K8
zaqP>tmaA7}%wx5_`Rv0Ul^c`SOt4w_?kLL!7Qbg&yYKFrz1@wk{jg=*_rqOp-``~O
z*AsVnTyTWz^`eQjivLSziPT)Ref#MB#KuUoT|Rm14<~s4TAhA(wM|X;VM&AY$CX51
z=mr1P-Tt-B;&{vV0BKRr_2OsyUI(Yg@8nvv(B<QmcX_wJIg0+Y?PXfBe)i?-8=K=_
zwr7MW*LJJT)LE%kUgmXa3%C1=pn`SlG}SfNno8DcZIRcMYhI~)siGqF!-HLnfpeG0
z-LA2=|CxU5Q2hCcd%p(vM^33$|2~E9W35D`o<y3Tev4^3%U|xZZ(VBBRwQ_{R_uJd
zvHM=Zo0OC9GlWgt4`}#ya>RGNk-hzP_2Y2nwTIXIOrCe)>WLEtSKp~C`=++fX!W%}
zG-VF6a}Zl^-uubB#C5iD{eLI=`lPARf?az9ZmLZ%`!TWh#h2DMxfAR<imodiTy3Jc
zVM@)dlleBsMe7=*BW2!8?60#=*!#L@Q%Q8e^6WFxvs>Hm-{juBal5sQY^iSI8>=@5
zZ%Ax2`m&*ZV}^y@?T?m|a+X<a^K;8v)$6+c{<OWjF1sxIVtwV<<403$E9TVbizuI(
z%k}bhb7aNNRGzw7A6aiDMOAa2S@-PRob!dLH!C?N)n3kcvA*8fed(KHd$(@>_+UZ*
z#MCVRRVQCY-x6Lu>!!+yo$r`u%rB8xzoqA>dv5bbR|9ELLG#%i3%`o5KE7n%yDMJL
z9v;iIP+9umR*$bl{`&MLi>-=_gv}Oel(}rtz3~1*%9_`IDhs4{&kt5|niaY*_~6XN
zCvF(8<%nAS{C4vhmfI&!tm=D|!>-2Tmv}RJ_wC>gF=M_rx1+ZuJ!R87RA3=<&hW_g
z+Q{y;1&3Z6%*t0|-ZUfM>D4Tw%V7qEtJbyb*YCJ1F{ATX+k=I@@44MJd$o%4wO>9j
z=+a#L=B4;<^|`<Om#$S@yq$Fy-^aObyU#8S{Iarm-LfR>UXkU2XG2n!W-aYd&fMM*
zv+2piRD+lGo2Fiy^`G-iQ$<gghmB8P?Ma7KVZMA*TeH9ay*6dm|2<;g#J@{l{HuM)
zx&4QqJ@5O7M^XPHWVcIYm_`@5{kvzEa_q;2hiB`*<i%}TXy5s6+oQ~|=!;J(SFN|)
z+COROzSIr7w(%Z$=byK(BKo96&C-nGxwpgv-z_=Izx`SNT)$fv>@Mk_dQf1&+?L<#
z;PY-t>c@Ky%Xq!p4^NX&oN@Ei8r^n7H>WV=pXc6OoO!~(cnkZHvhv#*-?zoxG2&Xg
zYHH`Ki~D9KW%L()KPqrBa*DO)C3mUihJxQ_GyS@5b*?Y9X|3G#w48T8=6+cF_Tu|B
zpTr;h+jZ0Dz;=#5zOR$bI8;rY{@xAsJ<@+^-+|<2y92$EuMMt89=sQ@fHQEbM37On
zlET+?ffAjMe8+pQE`MzM-oUIg`K^-IJh$zaQ+9>CSpHUPUgCshCnTmlKC))z(F;ur
z{n%$8Q!X?5J^SWt)xEaoCW-P^W}5lP&f>DY^w%tBi*@b$eP18;rO&IMZ0-OmK903$
zZQJW1_h(lKM@gj9r#J6ym1g8lK6zkGw>4LHUj4n`Per!kw=L%|HYgmj{PyK$r_k;F
zSDm+Xzt2pW={0Th$xq6g?zl{oK2f9`S?4>g`(%+(<R(+iiZd?X)=!zZ=tuN6kFCG?
z`IoGkI$Qf<)Tc{QJGcG{yZCBN@9TrJE-y{HlxG-RKFzfL4fi`u@tDklWy`+Ietu^|
z{WLxIw6C5eyD!R2%Hm(6`uBK)&kZ4)EgK_OS#Ov%$9;$YD>p8M%uhS*4R#rQ`q_Hq
zA&<^JOR0<T6~9bp-B4ZkW`o<}hRWnkLZ9qdHc!17(z{`ao2cZ=I^8tE@cCgq9gB|c
z<zJt6FzNh@6=t&Ti|*)q-fXtn%%A16GuXX5>+s*w%?U3LeV)(thRGym?l#`^o%~8G
zW?8LN(5ib?vAL8*E^o#$*Y9y{RU3n?6{EuM`ueUe<9MHTDXwnPKh}9VHPd~M1>Bau
zWz-b)Cc%z*W$|o{<Z2D!{j2SG&zt!t2-_{w5H=}!)T&l|SLVb)u6RZ77q{NNb{C(J
zGsST6iMA_>&I+dk-=z4wEi;nOS=Y9Cy88Kym0e4gYkHI`XkT_+_i~5OGPyE~x3??2
zpB7lmN$$_Tz3J~RkslJVs-}zP%~HJoC9l(TQ6Q(>tuLz*Hfii>v7A%Kw{zRv<Y)ec
z{#M`D?Gw1o{)Tzm$spD3VfKPHJIW5oTKDeCi~W2lY3bHy|6NuGKU-A&KHfQNLFo?D
z{4>QTFYhZh^bM(6W4Lp3qSsmb@as<=wY*<r8~JM1fqS9S%Dt(~-=((S5a({H*pPpV
z$9taD?McQ-T^Xex{iYw5^r$_0{kOer_}?GjS1E9)7Ji-mq+a}-Mn|y6>wnj>qYp*w
zT`iczQ(wmXvg6$BdHmBjP3QgV=F{;o+;hvwYE|r+iTRgYre9BA=WfxqmOD27n(Lm&
zl70NQ+iJ8GUu{3{mk_4B|Fqsgo^;WgSx=*nCpc6e`M6(d`NN6FR>qXP@BJ-yYw_8a
z(%dGeYVs|bIbZSx#kc9LN$hhFUR`zaSL88<)%)AI?2b*%v^KbN>yS&ir}2?H_Pt%}
zr_28EKV1=W$}^C)T<UJ!4&_~UMbb;GeWyju$vbE{`O*UIu%gPE-)CGd?NEt4x@}X~
z8;$P=l3v|qxzF`dyeRmsMP`N7-hhRr--U9&=da&(d(G~OZct>^75z84EvM2fl%Jn_
zKEXTcrDkR3ay@S;{aC)`_VIt1<}7~RU+i!9{=HZ9VH>?|?%L{sp?`E&EA_Tt=erUd
z@b_%i=~?3QgKf5+FT7}L$iHZo5^L`}o!y3-pJ&MTtu1(zar=Sh=C2-)n72i4x^nC9
z`|QO33maovC$?RB+qJ&X*u{B%jEv5y+EbO!XH7B+{=s_WA&<<F{QjjZ2cMMHO5C?~
zJ}_nBN&{)$PD?Mx<J{VO2NU}C)vh|qf40ytThg_6{r$yE4-OV^iEZ!u753?p@&(->
z#cxedY9*3$Qx;WSX?OpW`|C<Y_}Q3g5ysQD`uyI;Dl%*D4*Pu8w#ZqLN@w%)gOhJp
zZYk7?T(-d1wD{uQ<H<5}ucl6Zbl|eD@W;uYHW#M9jj_3JBNyFdsbjhJwnFL4lXWb!
zBBri0J{s4~{%P9deRuo|13$%06Pc>EZ|R|$^Z@I{DVyfIu5*@fd=>lZN%h-p?n>Lf
zDD2vM_li*yCo5mi3=<izh*w{#udG|S=v@DIv(UqNFaKuGxOI}}T-l^-<K}Y=CHspv
z&DeU0`8VI1sLh?fw-;N;_}MGQY^<HV&gF&6i;LV(7BL>&bhiHK#kVqk_3}2s8~<*p
z`99_IyYO35eh-tXd-BevSn6yKu@|!mFj{cl`K!74wl$S6(~bszw-LWvE&S<8{-)JY
z2R@f%pY--`JGEWz@?yhXn-dF`#xL;vcd~Yh&elu&Uti{(c#LuFcIAj&j1!L?mhVoB
z4!-~8pw6k<M%DBi85dtYnl9LG9B_<f?p@Zny0VW!M<yChFFU(4v#dwg$FE~8kMFcy
zS>d))QBHyHna^x%`t$Z#_pu{$b$)pqx_n$}`2x?4M|+C4cNyiKi#x6+xy$OhmL=!+
zt7r4Jw{}+EX7!$7dFj>}m+vOYD}p~x?Rt0R|Lm$G!4KzFwcU1UU2fL5dR^%ZR^F?E
z;&LlyceYC{Yo2vd=ey{`YqNqs-d@G}!#tCHbxo_zuRW_zPFjC$VZ5oL!!+Ybr#_@S
ztlnXpZu;}5z@=VCv5$VO#SgXbUq4Z&ZuzPp_nBH)f0Vk}cCk;t%ie!8EUez{-PN#A
z^T5;KNeiq$EzAxqS~G!r`Ic+#S9eP%Z2wZH$7Z!~>hvsUM?ayEoxgweTzr>P^}9D!
z)!%OS4D%Si_QNmLx8&B&Z+m9T6*#5u*Ss8)>DAZv{FtfdZPV0n_~rKIbhT~iJD1O?
zZ@+Y{f=~Q*vdGkfDytL!-!8g*pf~To)~fXvFK>EwRC?!&d)>J%CKrohpWWQ?WB$ap
zO%FEO$yGl*q7(gb%g!p5IX}2(t9qOA-AGw^-z9I|pBY~|cV~QXh+p8@_-2Ww_?+CL
z^jklt9(l;ab0q(Jv(>)xvuBq!DaiD#X1-uj^ZW@@n*2l#71zVT@^9NuN@$;oJ@Dn>
zONsa?XZGBG{ObS7Am!a3LN2@PSmYvj`Mt!+`sce(74%ixGp(}xbynnU-2MFReFucj
zbEvH-+gfkcHuLeClunDuJVHu_F5lgymp@FLHpi4xZ=$;7YrZXaR%Gn8p40a~dq&^!
zS!xr_78_?vMz#3`9(xzS_AkVm+g{IJdj2mq<K6Rr+?semr+&rT3*|xI9;|HoUQm0j
z>Wtb~uiFj&+5T(1j+W2je=uvyT8(XH<*$DGsb{^IE%N$r<&%i62R+8SWLNbRHqV)1
zSj%$7L16A#my0PY<L0+)t(Ly{V(N+K_hhp*m&AMcZ%Rli)av20dU@gO>q)ieci7u1
zm-6QCl;LZ?yq_cdZB=Zz(v{s`R<PAJU99QPC@f-aKm2liz{c7uEB(G-;eHo(ORE0R
z(Qgr{s!qJW&3=^E{c%ZXaNk}(mG9zTwWHDBn=(o@VoL0#N;<YJ={<Ofce|Su-&DER
zpnR55^84qkC+`=htXvkb<X=GNqwG)e{97e;V(%+leHZO~%qVF7n+>+7{uUKqyAZhO
z>PdZdzH|nKGP`X_w(qJx@|`$0ZyLKhlTwPN$*J0pv$%d7_PWARCZ@UW<&Tq1i4z`+
z{OhmSx&N9~o2!WQA{Vo4*@<t>)7QK1J9@n3az;S5q|}z0^0zWIf@j_Z?MeN3I_0sw
z$L+S)MrMW&?PtC4Ykkx%?RUsF<#zR<mv`cpo&I%oCWoKvm)qHX2aC@NPsrriwCT^Q
z@(dSC-S0V*<t^3Zt3NMrZ@$d;aPB@qN8wd=Mj4WIZvW;ctWNLr(R{w^yYXwu^*Qgq
z)N*cKkyLNds~T$B{n2&%=~WFi%e!0`zj5%gGuir?Q+}3CX?ZKV_q9-^n~AT!ZdX-_
zJlt_dMQ6qgW?PN&-!d+nB~zEOdxcNWS@&e^^urGeeu?MCPf%R6%BC_T@ZF+?nlbyn
z`o>PKyu#3aS^oGrHEkK?=aF|V>;36{l>0+d{Pyk_mwcvG?cDjw|KKIw>i+G;!L_|>
zbyvsl3H*4?UOP%QQE%6GmMqoe+iKgx;@7i9ZU5e`yh(iilMSN&vzNLb>I~1%+!Rt>
z)LH+%%XebirN_^AZMXQR&5<;J?gTZ~t~<ec7ANPJoj9>xlP{g&i{Qn730_4<pFVbI
zPq?|#?2P2(tACet6y95s@##wc_A3WcI`o<@aopX!>{((;osjVT$9LT~XC01z<)1e3
z&Bk-4=bs#2dvo<|<;%Noq;+Q<ooiYgsJ%Oa>C6mfsZFI?C;k~F3r8n)z6%RHczfQ%
z9SdLaJhRPvw5U2HW7EY|9o*$t<{X-IQ%!o`ToJd|8r82Z{%@aSYN1}q-|g}Km(r!1
zE$nyOfAn5+_<MWhhk4$&PRkdC89)5{X-e!5zf*QGQ+GB0++TjJ?nR1kfaylgrb!NV
z-p_9R4dW5JYq#=3-{xn13g*wwsrP3HJ@Rlldd<1hbK0u%812Kwu@Z4}-1t`hetY>v
zLEHVh$IWy7Z9d1}tFV;eTP`oO?%vl$>s+F$Z5X!hnwJ&(*C}ASYTOKUv6>B54h9yN
zV@?|D?G5~BcIWibZ+i2Zd6#XF`ev_UK7D`rowyxu7ybU)wf$e>#a9`R7FE~yyN2Xk
zZ<?2V+ic&)wmbH}j|OHY{+B7@pLgB;;@gfZ@_zy*H!VFLeAZ3s^ft|X%Sr`!Ym4)R
zT{0#<5M3g}{_%C!;g|niW=md<um8B#RD6#0{)vC)Tzo6Nan-|3H(M*}gG1MMm#?W;
zG+!+qKILJPWOLG;a}M8hA8mi$d+7ZCt#)aPuIA^<pK<@~oNstd<$3b7#jAq#OP`7R
z|Eu0tZEu$;-D4i@?zZ)}MbYnDLZ^<^e%)M9elA_-l5JRuP4AZWbq~WOrEf+&i|-A7
z7^-{!Q}*)X2|}iCc+wN1HH3p@uLcU2%zF`FI9Kh6Y+B~QI?b=Q>(#%mn|SaTOEh!d
zxu|Ye&!rimbM6aW*#Ff)=|x9|5}#|(0}*8pW46dcp;7!L``V+<T<{c;WIOSsIytwu
zBIAPl61&_2$wM4j&-@nOekm;`-E3L0uF__+co)0W-Fc4#3J+F@=QOuDd}_1q)iIai
zy%GQP;O-|?zAl?Wvh=6UO*;G}F|&ki;cwx>9ESWG)8|e6#R(}S?K6Kr+8dUAZ$_%Y
zto2RHj*4fhN;N(FwDvrwns*ELJ9UYs7aN}SZBl&K<IVhY4r^?<QsT;g4-N!rl%DnN
z`(0D8*0$`cR8QA3kMlpv>pnSbDEV7hyKdEb!wZ|99lgKw+`dg`UYyz!IGM@$M~csM
zaUs#$+p`_t>+hAmr!i6Lm;0uG<e+I6r%c)%aQ#V>-A+H9Z)*2%`EQf+zxZ~_gM+08
zOP}d(759%{;rVZmU1p$H$~M*VCn-no$1H38`$y<;!7szPb_#*=-%qdG<=9!VZLe3|
zzIDGJdorr`pK;i9xF=xAclDnu61G?QGkcvdN)B-gnP0|i*=M}`S)xmw5Z~3Gi5-Wh
z&#IgJEA#)>cPT#7pV)rixfy3N%}ms1POSVH=gB$Ag6A%7^W6T??X(AvQRT<~M%RrO
zhFx7Oe_in6-(6>VbtK<#>pm`sC^Fs{_y7J|X|_*iFUO|tP^;B;n){=n_}0R>7p-FY
z-YH(TcQT!#S6|56?DV>E+INv?-FGK`$`nsJbwSH|SIxc!+w8XRh5h3G=yEwlWTvgp
z1^K+(M8Pj5O)Y*$R5~wBKUCYX#`(U_f-vJP`>eK35)3iXF57d<ify;^%QN@f-aos{
zSN*ujZM*o5!fSH`FF4JOzIdUAT`=_Mt-ZcKDzasR<~)njFV<X?7%`9g^UAqC9xwOt
z9e$I-_bw)OQ>r#38Ps!zzppzGW$@3&(PY{2&GRx!b@OBY{z+_jUTc5QfRpXA>B`S_
zTLjem9{9;gxXgc)U$rXn<=<ZBmj}Ljtk8<t`}+8_Gm7W4Ce<75`1J4XDN_kk-_AYn
z?*BZw_W14_|DGCWMJq>z@Ba~T>dpJ<Qg<!CzbLBMwa(>0>-T*7sTWyRHl5t%`PKaY
zwcUvyrB=#!p8dAyWOA;vpH=8r)31(qFK#l}m%Cw?ne22cXYaFKs+%+0GYX$Lde<!2
zt;YIbUe&{+6Mr?&_fD*5-ha(v&Oh%f9V)LL=M`Dr@7eNmU3Yr(Nk3sRzjH@ttBRi4
zv}n7bL___az5JVxr8$OP)rkG|f6<-#UoUp;sD1kK*KOy>imj<U>-=svZV<EmWq$uo
zTlD7Z51y^MJVQgvrLt^EllI=}wpT4UTbG&5nZHSY)r|j78`{<_&Hmy0j1ANwS)V7y
z=cO6%J<00Cn`9=t`lPq7GTG0}QlCEM@7E=J)~%0Xh|SnOVPUD+`Ov=CMrKAE_qx8b
z+BEm7dgL|sPX+aNb8>jo487$&&5ayuw`>*6JZ4bjQ)hPa&^lgciRWtX-REg+=4{Bg
zz4Yt9nd=$WPxv-Hk*h2^XSquVV`UkuxW7m1+5`=id=0OX-5r;1neExTZ<4Ra*Kbq3
z)Zec7dijRqNevC3wl|#R`-79pjLzrRzFB#_;xM@P=yO~Az1)Tr-kS<HCW}w%+h4uj
ztCOuodz-D=j5VwD+A9_36`Ys-#eXH>Hm4bfsHpCn`u0C23s}lcUpSslKcC}o{q=bG
z4CC(qE43#Ym$)*C-?Lt|H8!XI@c!(dXAd^Nj`Ckp9DYmc!meja`zNc-*&1#T`Ob8?
z_}ta5OqzRg|M>d~_?Sh0yta2a+um}P@9XbfoPVS&IY^D?+?CCyng;9q-=y#?3s|!8
zjq%a@B{6a82b;6^9$V6L{>@=OJJ<e}oZ15aMyU@q$LCl+(YzVGe~$akVvE1iBP12S
z9$mj@uhqSS3)j8;@o&$;3qmT4m!GVh&1afizjV6mCimulZ{Mt}oMEFP+9h>=qd~Uh
zr~B=%(l;!bnx?pGgFow~?mN|muCMgOB;~7jTm6|Ox&7LluBW-piRLF_=j-2O7X6di
zbk_c9ZI|aZE0z;=D-yhG57*Dw$15zmRYy@{dH1F(E7$fk8BaR3;Y4hg+R<aLzU_I!
zT%qtic+M@~jj;~9pPs%~U?sQ0TJm<&%o7G|Gp72e{haRCF~w_T#Ow2i>!aN!y+4z(
z=nq%D;GFnM=Y_^EqJ@4RT3NBGQph^aS?0Q+ani-qGjdtSSwFi?lHPdh<%aEhYhT|8
zeRy=1ZErzT_5QaWU2TtY)cs_q`=&GQsuy#AlX59|+GnxT4+|{*${$SmD_xoJew%(z
zg30^bzklrIUl&C@TzcHnG2@uS*LBxLOx9Oq#qX&4el+NAW4LSg;nVRxiAlRxX-*9P
zyL;Myvx<b=ubmNWUEAe!SI=9Ub9>Jd_OA6G`7XY?<#dX5Pp!emy^h?K^51f!%XoL*
ze>>sT@9Di=do#SY<(}~T{MEzbP4_2(+;_hJV&|{xzcO8J`&PeS$CfrJynDZSUF4_P
zcP{HiB^0Gw{?MIv_~r3h=PT<1uNR*DzCN7Au|xk%h=4(Mh+139ZlP)3swyjg9Jj7c
zH0UziRdygt?Bj85H3R*Z^X|yltYWQSJHN3*&#gD+y4Al=zt;%)Y`tz^Xd~w4m^|^?
z_v>d5S=HNZmVLR&d8yokl(|388QDbsu=6XOy7|d!;WuA@Wd0JX5RvXzf1!3|vi)6&
zq<=pa=lcF|{AG4${&uFL)55lBeaq{7yM<3%Iq%QnhblVXc^%t6z7BlB<h^K>!TE|=
zU#978mJ!`yoG!Y_r*Xx_w<b>Ws=n@jD0%cq)vh?3=>ZXf0Z)PopPqc_@Xtacu%@tA
zP4Mek#XWoXarxSHs!F~4>e#R>ImJ;Zt>>%?bJIKf<RI&rpEfz~zMgmE8*Bbr8NPO7
zhIgy4R)@Xls+qtWzRTFhWQM$$uAg1b!vZ$0SxwhM&u^{tiu;$hWaS^bi*IfeD|N4G
zI;b(x?mg@Ob^i5|HXF7*bIF(6wA?R0_VXj<ptJY1pIp18?z;N*hfd8s!M8=2PyEeo
z7yESY)!iS@dV}u%s}sMN>vO8%;LM_ZYOKq?c$VzWSk&oie^qJWrN=wJdEVa<{&9N^
zW8j<3PgZ6fDBfzhxS}WH;VkR+%kiC-t8eCMKdw-I*RJn+)L)FJd5y}l{TEAQ-{-A5
z*7$1MjKFtSG?Jg4;CZH~d-7xFyOPykUSu*|J-T*rV(-QBAjdhkI{ujETXyNnrD+RQ
z-?lonMC8x1PdqssPmB_`oi0}M_Aob`{~?|GexlRw^+x8$eD<AsDbsr8K!G>6_VL@B
z?bAIyYXc`uuiNY!uyL>2qeITT>JLpX>22z<%P?GK{o)B%Z`J?GV`4tVVGDe>mb_cp
zS7!g?d`;__G7U{Hp?fc`vwW?aUU;e_<;*NgF0a}BPeWe3k<pm#9lfEXRy9cGS)4rI
z>RD|f%URX?PdF6KYW~7}cmKB@zUB2N>+fq<e)$+);S4Hg85_z^-(K=K{GXqk(eAz?
z@uSxYuJ&Co@$LLD>2U#@n2CG9=jHzYOfSX!biVi~N>#%56sPJcE+v=EYa6E=j<4N4
z?Y~mRf+L5cU5{@T?JbM{d1l|Xv)*-5>uy%hy%Y6&Vn*rJ`4WeIPj{-G`zXKCFlO`f
z>U+KUcDh$(Urcw;mN!y9X_oTqWtGa5E9%pGkKTK9|L4b99)BIbR^+iRv1hP6uDa-C
z)cx?^S5)e!Ro`+|pLv=4%!2}pzmwKoiTZo?`n}&V0xdf(WnOOS5kDu<qEel-uJ+k+
z-Rz1NZ*2``B)RXrtns^gzj@=$w2Z1ht<I*W_g_DM;9UUQ=7P?n9?`=8rfg^OGrY7^
zAW!A?st%RM=2N*hC{8%;Qoc}{Sx9POuAu0hsk^x@=bGAXnq>LNzOKgP!H@Gx??$;D
zvxsJ{E_S%Y6RYl_`g_4Q<B**H)rU)LZklkeYzsJ3nxV40_sw(nm(hi;zs$CrI_KBF
zHTJ~yjmlFx-KCZrW-rR%tXTZc`=Wtj@Ns|t^X!wl7p$D?|7eB}+ZD6+4Lg>|%yUpt
zy!h56@l(eh6`dJ#xNSAc?JE}D^-GJ6syZcf&$QS==G+0tRX2a{T6f}VtfuxN)0g+x
zuAawT@V<;Mz2T5f+Pnz)bvHMAtkSQI*s`OH+fBHyJa8)4@g?_f39P&I)%yRsr`y^2
zr+n~Rv-!E8ziw2x-RHd9&s4b&n^xyfi_W&U*w<Q~C7;Zz(Kv1DlUX}XZvWe?ebP41
zy<YV8O;w$r&tGmb*_=P=PTfqM($k!m{@Dlr)!nV|Ezn_!!lYk3alX@-?)@&X_&a&V
zUdF9cf1VTFALyI+ocm+mja2i8b25JhY-Oq3d0FFo@6{WHD@>PVc>H&Ho4d}kR^y3W
z#OZ*>EumW<-Me)&<MJ5;j;blQJ$FyAz8!f`>HN#@8BXUSYC=oyOPokmT79GUAcyE@
z+pej1)VIn_o$K^XY0~4(TwYf`zr5ZYx21aSWljO9*mX+(W=qBDFOf`kTmFAN?^fw!
zZ+MqK{4eE~lvKUTP@>p(>J`Dy-~I1(zcw~s;JeZNuU+q~e5LyOg_Sbbey}T^6zI$L
zST&(+T24^GzZQ|68Ag1Y?%&VcRw?ySZ}RKHtLv)v1O_#Vq`!CH9(?vrj!D9)3n4u6
z)A&>`)po~S%(<q`H~nqg{=#a}_p>Zz_|hLdxVy=OC$w^^O^RE6s=vtLho@xwxz$!5
z@$NY+d0>T6RJg75rzv}CnnQNKXAk<jaOt9(frT+#tKJ5_y}C=wUiilTU)5`~<7)Ia
z>~GoLsP{tP-u(RAd%oyga;wv?eq|@3yKdEE=ZgIP4Dp_6VizAptZl8~|FNyUBJB05
z=W$cAzJGtMY`*K#TD9_TnY)%f`F8ecGMD?TQ})4s&Yo3w+RZPg@zJaFx4mG`vxNCu
z-9qPOos=`1yTx_hh5o}Y+e=o41WkPR_W!>BLO;#dU2j<7c+8Z$O(mzP|5WFdUC;Wa
zZ<|=lVc56$@9FFFY-OA`%`H?9u-(*qp1Ju$#p5UX-|tHL>`{$h_V2;;rEk(UUXSJ6
z6;h(#uktv2YWIhU>vt$CF28s7vCt!Z<Fg(7x4S-8z0P>Ux!m~TO+~jyeJkwDdbie2
zYN(of{iGjgVsYv;!yAI9Ix>G2hx}G4bxi%4yU=Ian{O|lb;fqT{jxq~Z|ghf9hTX;
zn>Sos<g-ua<Cpr)r7Ur3&nG2v9SL3kW%nwb<fw&`;kq)8-;z^>Q|CG^zODVLrXumE
z;<W1rCN!LA+ps1nWuEkNKWP{J3p*w)m6Fx$mEZICqI$p0H>3A6L2=ojc=cU%Q23K+
zE4~M>etq~_=y|h`FUt6y|8NLb%82~=#m)bux427`R=sZ2ocWw?-is3~_>}J5Zv9qu
zDZW-<-M!l8`s>T>x!y$APPkrGb7G#<mYQ#0igRaA*PHa}TdaQdt9gRD>&`Bj`-6Sn
zkGdmP#{$=~MA`9$zun=y>gM(fyI-EIUOH><!Nvl%ZHqL8bDYz4E+{Xw)6~EC?w-hv
zy*07*eLvopzCDmrJ=bK4ZS7Wj-%p2YFC7h^dFSTMJ;xsw{F0A7*An>g-5>Au)(f`e
z#;;!W>rGyN@QMFwe0~Re1SKPOZ|CGJSeI~di)yv>#;S7WwBB<)FGc6RF?f88+wJi#
zb+cpk&tCnQ-nBM4$JgR^tw7@03zf@{yOax-KdIr{pLIy+JjV<d(`7AQuHO#}ny*_O
z(X#(pZIkP}Ahm|md*7V*JNnq|Xy5Hsey*)=j@dj<oHMUP!g%h~6Q(~W<bT_^qDIPb
z{ny1NYeJ?h<DRRtU^2_nAT7IZyvIImQwqvExkD{i``M)82?;N*CQ9E`zk4sMp7C=|
z{4?1@lja@U^Rl$#HE4a+?loK2_}Ff&xqY%c{3q9kjK?8r^Q3Qtgvu~ShPpQf9~Ct&
zdLU=TG|BwV&wVV6iLOUi#qvh%Tg#W{p0wz;=Hrv4^`CC|taw<l=(g_)9s4b%-|sok
z|Cl%P@WTQ&xqD~5wTz6|){DIH6rU`8=sLS+6UWM|>xWHt&E<Y~eEG2h-3n@K499a9
zC8+JG|8?Zj6wC1ai#;3VJJW6}d7taheDb|@my~40a=+HH#XB8&e{XA%=HDxqsZnjV
z;eGMFrhcKFTW4{-@AlQK?2Z*auXX9rKW(1ADU#2=99p<b>$&sgm|be$4{tl96X?O8
z&M~o`|J1!*bE8(|dOmPC`8w$Ay++kvJ1!*_sGL{6{$j&EuW4H5Q|ni`9#X&J61rsP
zrwy8G6S@;N^|r5@`D@YnAm({HpY<G?xTH30;;*N&eC?O#|GJmgE5xhB<M(@h==%CH
z8|md@de`ThbFD64ukwB6J^60#x3xU)Dofd?-K*2$ar#nOwClI`bCJZG;-(eFxvX!}
zlIQ%sBpBwqV}F?%mv62_`ug;X59d0%hIeZ`K3_TCX!V4tjZ8OMZah-n>b~&y?v1}n
zwrGXTnO)T28ub0hV%w<5!1bTbF3gdccK3wB?Rx@e4nP0LlrsCT#pT#8<JhGd+qNiN
zf6{(gAaUaL<64@l57=BbHM@`*BD11HB~jY)+jbk}4d><`S5tmrc&TOiY-dXgjinnN
zzw7nv`nH|N<k@?_`)m~p^2Ey8FHLmbCZDbJsN;rR=a$~to32kX3vz#TN$&9W*u&=n
z)c%FpGlv!lO?td-662Z)h5uO0^(=~wMD`2a-F8eR>G;7kn{7GvK5mAJhi`T)TBvck
z(|Gw4Cxgk`lr`_(>%aJL(!H85t>@+cefQ?w6aB2jZk~x0%i^Po8L|FPIMljr70qS+
zo<Ges;9QdT=I*a`CzF(?YJM;>j`W;4^P+3D+Wm#=rTAuS^Lh0>zv*HPU&-B%Tkp?)
zyE{6}&bd~C&E=9w5ntaojk|ikRk`0YMp#evNNg!|O1;pN9HH64cxhSR>y}27g;}T5
z{Vz8Dp8RA}g;C|VsY~Q9=xuw_BjNtfY|<CbZ*|)HChLV6NTgo6I&Ed*{dWbA7jEBq
zVV=Z{5BnaSJpAPNZ(q&I0$-crE-}72i3Q8%<@jlzP|t0Rnw#Q$x!?`U4}I4%`Jdap
zzFnKDb?=w%qMP5M9vrxJH|Xp<#>j8q5{<d%EcV+Q@X=Jtvwq5lznx~~2X+^Jlv<g$
zze;KA#{>JW8tmL0znOP-VV@l5^Dlw_vwi24K7G1rd0z33s`6}msn?UXr4@ej-Pgcq
zSyp6VJ@KEtn%K!lE$7-RY!^mn>Gc-X*PlFo`kX~>8uL#}<32&PWjwygoFd-Ye>rzv
z%h+2Vc&*F)`n1Pg!QFxrt=?Z=Id#vntR0^>aYk(4&Ux03v&~}uPgY0Jx}>+J#UEWR
z{?^G%GijV&RT0g@C3oV#$o_RP9li%;(%OYK8?p3qzS+NiW`EHpd8wVYC*CCgwz$<%
zysNb#?WpwH#ShH3++KdEWnRh0)oC`@O&I@YN}XTy+P`?3;l+vxJ9}MAzNcRKJu%~3
zN1DURDNW2NnjiU-4t?)SFq_n)Xu<Q}+rXPOZ++6yp!XbiW<)aeXIY<Gt~6KGAXo8r
z%p=Lp{n!27Cuh0OGQ6R?v6e}5`|YBz$0FAiH}R&2_}5kSZQa!U^WbHUUpbTY^Ry*>
z0}WCqG|1~nFx{QTsoPb)`=Ek?NLWP5?`O?tJ^VMRr3v`1ThG}Xyy3%=nv6z|@8_4<
zM!veYWy_QDis@%MZ|&Q&)%W44xAIwCAvaR%)3?13U|yTM=gO}(kKoFP>s$LzHtavm
z@|tb)UYE&C3x)Tck@7Ov{5S2%x<&I{CQo(i|HXEy(sS!?b560_-Am&2{~SyBt9dXb
zl-;XjcgW^)P8a9t=H8A1<t|?ftphKVn#OD`p1N-3+rx@}>iy1({JDS6@}DBC_B~T;
z-+pbWweQu=@7&b!<!5+j+HD{2ZyS_iLybIUd)h90RK5FvU;U>E^QArRhIo|z-p<K(
zIl3tMrqus?p?j`=JG!H<^Sytrnth(x(r1TFANt%1dp6<xa!Hw$&1W)yzFe|*$;9({
zn|25(ADa9w+QewJ1e2)N-lmM4uv@QAr{@1vyOd|oC!=vwCG@@IkEeHI0!3`LEcBUt
zxK`=Jq>VqMbcOB}Ic>|$|C_b2==kSdO8zf4*P2be?D73cU)de|W4n6WSDQpuxnG|W
za_@1e)v@(T$$#qX4W?y%uVmevd(yl))8eiy%dukbOMLf4KmK~(Q?BlPE%cH2|2Y2O
zCMLd>8|Kf>JG#k!USCMNW!j=JtIjWOo|fyXYm)CYRUglt*|}O={ryq-;;=($6K3v^
z<IUm?c6^((OLN!a<lmF>4lspF*3I6@_&De58NO#3i_X4GVeDOI_x!+9gYLQRa>0V;
z3nT><Pb+K|zwddk-Etk5$n5CIlJZ51?yWrGd%9Cjc<Y{(T`C)sYq#fWZ0?<?cu4cq
z8{LL;S<~dsm$;k8$#0r*W$(h{!pvKGTtD5ZF__dOKKuCNo6k6XT();@+<Rib*0%fe
zHcNeuSsL5**6!+|oUDIA<weuYOy}M^aH2SOpKedJo=nSU{b+`h!mqxpiB#F^dF0dD
z(jPw;zrOfra)Q~{f2AI_59gW**VTWN`19w{#wQhr?yh6Km~!RyEL;D-Z}t2Cev$9r
zccMC#ul?}D0*g71y(1hxz0vl+wB&&2qMK&dC)w)E?|lC@DNAeXLa!Md|Lq&^-d5aT
z?lS9C_Q~f$jwb7-&OUwp=l3;Fre5hcSjyLweQ1&5lD$4E^6isTdoE6#mFac5d{WtC
zrTKGH4C|l9TRpx$Rl-Gn$BIpUta|p5D|~%sUkbagR{eVQiRZp4mJYX`Z+p;KYWnb1
z>>ecx&?@~B=LvcIQ(PP?(m(ERn_GD6%-db-j(_FS^$oH5zpcM;#ku(x%)RO=ehJ*E
zf2tyuDgD)krA+U~L1)#7P1}UZvj0reEqT2v@4$NF>yMAEDSg7H@8;Wel8sk((Qkci
zu_SK;_O!rWtz&YH|4i3N8y>mSHG9)_!}(uD4DTo#&U|-z{mhRAk3B1P)M-uPnW%St
zVc^#i*;ktXuCDmbR4i>&t@-Nj>Wgo-)U41wBUNu_mnGfw_F&GAp2QnBo;2Khy73Zc
zBl{=2qlcC_b9_0V*Za;{Eq%A;gl2cC<r|U<CKef$39b=ce<Lr+GsyLu+d=v4=bKnI
z-1VLG`{`GgeR-FZethgvxl{aBGr+~%Wb5Znnaw8~ZcS78_u){O&GtPakteUU?BNxe
z5~4F_PILXgA~vJBX&PSU&38^5oDppFO1}EX$N0aG%)jeAi!}mAt<1TP-t9l$U08C!
z<Wr$U<gu=_-yYuI0@~MUc|IxjI&Pe0bn7$oh55Uy9=Gt>^xu#&G@Pn)<<$yT?%#VR
zF8fsVsj^)`>iX%kPhbD74m-6+jZN&?7AA}1`dcQJ1^d|Xy~>dP5^t61ET8xJM36x0
zSF24^CbjP4y6ZBHYm-SwT6E@z2ft<&T=k1PAOl)yQTiy%yY%Y=>xpLnEkCaNp601q
z_p{>BqB|=)GEBQGz8>3YQ5j<Od2*j?XfVg~JDX*A<v87(|12^Tje2SKKk|d%xia~L
zMcF#CleyNmFHMOF-^sB1(9E3JjnYo5mq<SpQT?Nt&$@5&p7z>4ajh5Ayz^q>$^>7D
zxKCI5bp6y<?ZEe}Y5ID8H@kP9;}VICnwZP8VMV!A@A@)haD@7H^;S;5obm1Z9_NpR
zw-eN=tdDwJ$@rFW+(Y>My!ZF|-MQ@=!h7!<wQ~Kx`XnN6?YwsLXm{n)PhN*fFZgPA
z?_R_0&Eb!)ENM18TK0;Y|I=U9c@KB2O_RH2qFw!1QSR^Ty6Igvi%%4MIw;?F^ufnq
z1^11U7Ip@e1|E2Hp8s)r|GM<+?K2uA*DGIqyFJE+&3<=<%#v#X+tshREEfE__Fnn_
zZ_|(O`+h-Lzkpi+nrnr5F6KCYTBGe-rDD)hBhy@VJ6P&w&dZ9pvrfBr+>#8j(O35_
zK7M{`O6HP&sgwmfgY(vL{3u`lp!Lkd0t*?w<^G-CdzS{jJAE(m-}9fJ({wI<{W0Z!
z@$%=77jFN)V2zz&;JcF9iIIozuFpOGDB7>_rpA$;C%PxLJZ@aA{#gBg%<+BV?+pV3
zLzT7f2AIz8JRz?3-r2ydDOjpCHsj-i_}0@Op5K~Taou`~YiGIWT_5EIZ`oL99!rRk
zyB|M|`_|;8d7P=q{uXPKtv{|=Z)`0-VQJ{rM+e&`e>mT^Qs?BWmFEu6c(cNN-^p&D
zV1u+P)}pglUho&5IL-6qnfbN83i9%m?Frci?0(4-e$UR{ldF|~Z^&k9Y{pVts4=N4
zC;89G;FpH#-HB&PLLM>)na3{N#3?2i{ATNq*fP)SN!GdgPiEXxzrAmH9$!?5wD$Fi
z=CjIOeFybe_eTY^JUS_?Sjik%oGa0*R3?*mP*`5BVO8c5J|51KX>R?Qw>Fr}vER)x
zE57S>l#$ikf9CS_nUdnSEkQ~AVS%5|77q?x?Rg85e%|YA1(mKceCZC!9nVjP%&2>L
zwOsq%p0BrxOJmP>XS*+A*nYRA+&uK_3G2PPuWVs?xJlBmI3z7czkCzVd2gq=>OH;e
zv#LcZ{kJcC!B+E3|3FT<=qF!0jgEb?TCXm-to|G$s?oh<fs>z;i}|shlI2YAETWnJ
zP1wukc=t*(*R=?hugzbL1J+wS+NS^W*0vM7t~@%bljXCg{=PMjc8#mgn`IO4g=B1<
zy#F@ur|FZK)6%4!Cr`Ll;NW#M{mJisbKhg}uhNrz7ceLm`JFuWVS3<u+g8rIPZ(D4
zp3yvanB#b4*q4gfBo@zO9Cn$~Jn~yFcLs%(1T|j!6ccWlcT)4<oh6%QB<(&Sv@t8f
z_uThouYRuR-EpGunEtlYQobdtA06KuRQOc&vO;@rhuLbE+ne<@9<S`@d-QZ_sz;fM
znzZfK{G!`ucf8t?bjCVUK#6hZ?<Q-@vgWfJe?8dOTwhcCQr+>MY%!>|fP^uqv}3bs
z+YxTiaVYkCjC_dd&qWp2WoON9DK`r__;|Xo@Y8!A?|=O*Re0=(%#$TI7Ptzk^#3Wl
zcO$1}-)_dIUm0igeC&P~qBGr;+3ve|!lu1q&1W{cmcP2^XL~2pDP(`z!FvT(!k2pI
zcI*ymD(f(+o3&5$@f%(pt3B$iL0U^6`ET8PqpmehD_v_z@W;8omexPhKP0_Yd8VyT
zN6oT&^G>PXeyJ*)(M>xmE*lH|&zRAtF137tSK-0LfCTmDWhTN5_ia`v+%y+GtnYD?
zJ68O0owCF7-bsJ%ua4SqD*nW|_p@``qMlzUvbkQ%@crr9gvp9)yKI-;@VkBDT7cNU
zID6*k=9?a7UWMInbKZGeFZdT>{jcJvMaMduj7>62eYq~2sI1wrQmVeDlwHS-`E>LI
zjuoYs_Y_9%__xS#19yn?`+qY#)h35rzwqN#bbjrRd$+zuSLQ>C2~fa-gIV&!k+lzk
zd_O(WOfKiuJGFmKjZc4e`l5!E-IDKfd}5|p+uDV)m&xQEb=}OB_$JBz%KpDsHr|Zb
zwQ!Ov%l9WcUf4y4Xm{Uu*Z0D&H9^Z`{wu9?B`aTvTT5<4ihQ~LT~Fcqlf$)@^B2Zy
z^}oNd;)e8vGZhO{WxU<8M6ce<cZlz-x-aW@eD}SF5fAhGtJY7RTd^tANN&aalZ$q*
zl(;W_@y*<8j0aA2=sD}g^=vUaZtLjyy7ktc3%_b^8#i%2Jrw@W?dTtoqCfY2Z?;w!
zg>RaF+r;}yv8B?seD2go_ikB6Tr=C^e$C;`_SjIv<Ov<O_2rxA1SSi9bl*P7a3;@<
z;D-nAuFrGNoGZ`Qt*CfiO7!;T$+<s%&OBWB>B*fPi*NhB+j4gOpXXn9=kI+je|C@d
zGf)8w54ndj{6}Ojt<AI&oA*8V?2}FRFHe>Y(*M4(^<<89XUge?Vm7}&GOF1fYhruy
zY}xkTJFV9&n_*_Mae-1%r3&Z%H8Dq6!e)Ij4wDMix)(J6<LqLug8X}2Y66#Eyj*{5
zL9~mgy7j6VyuItb`z*=}&8@g@+!MK1Ws-8-`<2H8W{FD6t(o69KXgtjf9=r%iIg(F
zXBI*Wzp?z9#$X%&YO>$t72m$tbe)x(^GK`x%EOcXe{bDxt>Lemy^*o}$(po#zZ&~8
z{`u+a6zN>qUT2-j{r&2>W1F@qo{8S49?ZLHRpN^1qwB?a4$a6+R@nM;arav{<~@xZ
zagmi0^WSGBnE7>T6pOv}UpF;!u~DJm*S!4h^SfhBW-4vHDmq`rB4lHK`C&+@2~J?(
zmMH5+ckNE5Y4saEi8=~IJ&L`aBT)GMySmcEs_JT;9S!#S_gZt?qY}-IcbVmjN1nIV
zl;3Zat?_%!_YXI2xt5o=znFJ)o6PC?bGz0%UhQ#R=UlPwMedwOYZ^iW1TXTw$v1O6
z#(MJi%ni3E8+A;0byw(2(!}RqZv5ifwLZmJ;^i@g%|`?md_P&&+Sl>#>%o{Qu0ho$
z=f0e65h;4J*&{ZfdzNx%?(*B&ACBKS|6%o+-Z#8lQSKMNq&gq3^Je<FV}F^MU50em
z9J#KySCnm!u6gu)`P1ZwhgMFwJw-yvzW31ekME9Y+5CBTujS{qV3kN`$6d1GXHK*q
zO>B}m&+6NE@kPn|`sZi)@Bg^%eEw713`D^O3ZCLS7nBdqbz45a?p(j=<kKG$_Ph>?
z%scnO=Zx%ZPFLSK0^W;rQ#bv6EqA}cZN13lsJ5)uRm&b7``lId&hzJ!^tH!@3`HyX
z-6s|19#yJ&qMi0AL+9e$f2vEQ15>^|IC-eN(DjvHisWCNU$!R&j+vzMdY_T1Kf0~^
ze13)7#J3)`DwXopJpm6x*G9aO<lC)rbgy0Q<O9B^vNx@jQwwbE{!<fpO74$kzNOes
z{zJ~&)*joDvqD#3?uN*FW)kM1a~u0_bye$a%Weq0QgF1#<j;panioR2OV)lqQM;=&
ztAEQ=2V=R)a{13e=4vOlb<UH&`$;o-bHTfltQY=F+;Ps&WagAxvsRfdO`RJ5K@UA#
zY%V4jr%OGpJJsWPo15+Fzn+>cM>nrqmOaBrMOJ^U)s@E?pWa=%A?D^iyXCU_vm;yf
zB<#Dz#x3T1>gcXoUyG3U?H3ikt;soYZC0pt*bgqlGq<`9rs)eOC3mh1IkI%$yL1&<
zw>CqL{<NbZ?z-o^tT;T)kJSr2NjbeFB`y6@^vNK0rX=@IAyM;8DpxJLY$ftY$Lg>5
z`ENg$*yWwpb8ORWFuN*M?9H}mn%lSE8`n$Judw57S26!wdA&MG+1WKW_Gr1<j)MPJ
zCnpx9D=N7z+LpLE(519kfPc?M?)SN?oMxS#wZT)&Gt6+Afuwni30w1~*p3s0TlAmZ
zoww`#)aP-#pHH)vU-cx`08!e2%AV&HPH$dznVkB2#kl^3>CQLxef7DF&P8)}<dg{t
zzZdFmm>wo~?Dgu?GxwLiDZZ3o#8L4>{j$MM3(<uh=lgqqO>H+7t_$ADkiVrbL21KI
z?)XBj4{avQdVV*X)4A^-<iEV_;QE=>1;?!Ztm5>xQJxW@KPRDg7T4LOK}OTI^Coh}
zK5pF?J0X+n(Y!n73yQx*1?e-b-XC$z;>+1K1I^dr(Qc2|%?b{XEIgRo@x>!&d49|V
zj<2kT&+K^nDA6F5w@rl0RrGddO7)Bwcm2Asw&(V`u3=rhYv*%>gtni}IdC($*s$13
z?ny$;#kWl-HLhL_)3+_zv8$zgKYD4x`!OTTOoAuktLMr2td15E?|02w_jsH4al^s@
z?}QoFy%o!@Np1i0ocoQ9&)++{Jr;RQTcpE2@7L9nCww={UTtCc`iU>w?a%&K#vej1
zt6VvCPLDM~>q1cBb-hz((%fD<ZVK7OcK7|V1U>IPRY!#XRkUA|ox5d0;4{awJ!cQ*
zOuHjutKq18ldCu4yT-K{sqU^7THCg-3bVOw!?=I-yz@uCsi<u`&cE3_$kgY&YVNm5
z7f(o<b51%hZtAI3d%4B!uzqZOEBo{}i4)&;e&Js<@6%=Xln1+)i#hWjtL!t`b$8~T
zzi*Ge|Ns0vzunpDcu1!J769i8j|XzTTea%Zl-BUW;2P&^Y?<=AU+*e1IL|%5`R@6;
zhqvnU9a4h@mg%iYTCx4l0w4B&A17y?@ZKyx^@ZQs6rH9n(3XFG)8&sAOgUuN9qTbQ
z#A4c4IqQE02mc*<QX4U)M4(w$E`pU+@$89h)q8&K40eoBN?kgs__Wzi!?SU{-IKm2
zEnCbrDecWgv#)(`kL{^oncMm4%C6`6UyVQPesy_<uE5-omn(1h-QP50#?r^jK6e|I
z-IDN__ae#qukGA`sJ*Kh>#J(jnG##~E}W>L;_BRXyUROGG@&3+ODU-4dTWA_+pDbA
z(`Bt<_D(O~3-dQ56y`h@JRF#RAmKpf=4J1sY_@zb3JtsTIJW-K1Ccd1FE<?i$|!N<
zh+Cq0#UYD;%WbZ~pJzNTU2~vH>m>ha-$N5*#4Y!!RWKQCe)ob?XW`NXiSwuQo&U=^
zBV)b$D#as5Zo0V4yR1=}6>oexvh)3tH%B?Lxz{W@^d>dKWSjq12gP)c(mRb(-|LPf
z&-IJl!6PUVxo1Yo>f`>G_aESmd|eQD%kRldCXScOTIMKw_jzsGV>hFJ|CRFxv~`mw
zrtvIZep%A}$T!ZJR(bm?B%bNc;9Ke2SNZ0OQfB>D@$dWgHOD$@>J=YS3!ZV7_vih}
z%byDWx+W)dXk2)-+F-`rm9yik-fjJzxAXBrw|ifUK-C7K66tgAiz-+ick%qb57Wwi
zX<p`k{yeo_yfAA=mz(g4Wr>BJtSPSjGjDv!5OiT|e|2l}!gF#{Z`S>}c&=M-R^P))
zPl-vdoled>7AJUjwutq;PdyIvPPWHvmd|TGqO@7KV4F`u|Abbz9r{JnAL)E|d@}pb
znWQ$i^vfJo^Rt>3tXz}B*7RfDB&&t`G7_E>pHBQFot=B&<~!ycs=HaPr{x^U$QI6a
zX1sdnROpMZL03I(U!B?XocVpgpMAef*6=^s{A7jg-SFi}yUm3z8{f+jy7+?k@xi6l
zA5X11>`@#k6!mV>qNGa?Ozu>@wBR{as3g>>9;lVDDbi`4+55%s_kMqQ>8fgU#d*-O
zD5P{^srNF}HYl90M(!hP+VS1<G&m{>Ugp_ss1WbA@mIOBudVCP`Tu2NVm>DmSucbx
z**#I_@+Mu=9sgGPuE^#+oMg2tdCA0^Az%Il{tEkJlWbh%TURB*DRl2YyXc?XrbBz4
znzMZRFt40r8hh8njZYS@J9=K|VbK2Sz&G)itiS$PZe}0ialYX8gv`qZN?UlJFQ1+m
z7^G>b&+2&f%qf$J7d*KdWxTh(IV3&r;u*KLZFA>Eo!BxzdiM=GyXLO9&V{cINyc`)
zExDwwva;gI-r663i=!vZOmbCP?!7{G^5v`}yyAVw*6Yi%@AU0@UBkMVabCcW#rAjq
zehB^l{RH>dJ-440prj3%^<QQ=d9F?Mn{S<49hY})>XXHq_r5OY^F7=ie`V1@=`^OA
zMGIyxyIr5}ZF-E?>tKgto|vg@?|Qdg{HfoJct6OwF0pQ{te>2ktROzSd8b6qN2Qwz
z2Q^RWJWOA-;G1d4lw}j&?_6d!=bhg1RP|J)^mDEgnjDLKn1sV?6<axXTv3j(aJywK
zx+!z7M#{!ny*d-$9yz#j$FCm29bZet*KydlFFKLPlIR>^Y?wW>Wvk>C|F8?@Oc`_k
zZmm<3%b&%wdxgR4d2-j?+i%$EIUkoT?0Eadcf#{&(;ux1-+nmNSoKTQ!mkS^{GDs4
z$-X_tiqE9a?%LN&H(684mRH5sz1zC~-@|q7*FWfiwk#k8OR>%6>?Z52(<-0+G|zs&
z@A-e;P~}fYcJRB17_8Hf%wM~<WtG~ED7Or8Ui<r(8!D4GPnewadfN*-mD{aXcS}Fu
zJ*gwL=lF34u~*CEL_H5x-&=U$q@(DJ+Yd}!el56_X|k8WvfSv+^goi1yJB}dnR0N3
zoeHnnWX3wr#K1pa?su$l6cIEnOwV_I-FR((hQNfU+d!+D{pQbTzO5(S|5{JB`=oQw
z1D|sa7O5hKs>2v&dF^cyx*m4HF3@pp!@WG&#^@}+!_N}<f_QDeXD^o#ynX!AiErIq
zg|`+>-Ys(brK!{Hlh&_S7d$_GTX0%vgwP+ijy0=vrXTz&-g9im!<QW`Q+Fi2WS#7o
z`?2EQuNRBYzmMBmHJJ@ky2A6&bBkr+wiY~W%^MQ#_4MwvoEbj3|69fN^ZuI;Kc2qv
zWkT^G*0^1N8<r#-{Z@5GW@_V|5^LeA#f2^<%b7k*kWs((c4fQy61mbv*T0>}6kPq6
z^@q}wUc+r_Pb6zOJ(vBuI$1E7{b12E-wTsBEo@WG=<13I`nTNY<l(E!dE6Y^m<2;s
zpZh4UGEGZ#T0B=+@T;GCc7}@e);`a&8G$oi9{3_C`QzrHhdaLi7T!?sE+J*&eRn6L
zkjT_jWvgJt2$=xBwd%)}l>&`Tw$#lEwf+}k&;9-C*4?TX%?10|)+$%k$1H2OtuNK{
zGd*ZyY@g<~;Mwv~|4y4-eQ@o6j^kW)miDVNHmIx=`L(V2blNff^HP29=UL8)Jb9$s
zQgi8-r|I$gA1|~2^VZ;fo+UiE+CgRUaqGQWJAxm6dHH|O!`;8{NvoO)MT-1qYq+`C
zcw<_=@+oO1cipsd)~$~+zPfM73THky*N)?4S@3qHyDMMVDW30pJGJi0ww4(ZRVG#X
zw!Ttt?=7%+5URVwA~pZfpA)6L8>|v%RhsrBi!n^%cVF`-vSjC)O+}KH7OdjuBzrC&
zOF5*`6=2=-j#)PFz5ANVKDJk<{k~@!N>7-bb^JzCN{rER4)b^uHha5r5jXK&3s*{s
zXl<$A8uw!33>|@B?giD^3$MRb*1b7p!lOk^)s;tjk4r5#(3U$L7;$2Q(Xz>6OZfb>
z3?5JGc2EA-baKKTubho@r))l`k@U2$>d&{6yel%e4yKwPJ7Zh0<-$q+S??dz6vf^t
z`&rSkBz8sNyYnfA-f{ci-%LFnX16)(tJ=NW=oMIXRqWNJaqrU4&EL6nfyRHO&_JWd
zvGD?|K6-wKXJ>0GYGxf$zPmEQ&-NyN$o9l*GkjET`s!3>n7oKzArLubdfUy#mp0br
zGtc@fs1_i1cOzFpr(lhFsrj*+(veA5TNFABMEn|`p1JSHUv(k!Ud*%k>oP7VX<eGE
zqx0(TrJ1Z6CrT8Qw!81Td{VSNqSN}-+-Z~7yjmk;d?!pK)pBO)nXk|LkG<EI?w_ol
zqTG9hajV|K;{u@}%cdq2I{0X}?0O#TFzvve{HncsGUjrxm~{7y*Ru?ka;r>-?WMO2
zr2l>U8#u!#+epP<BkgA3#<|-rzD-^G<8<`y4R!ItL35t9biFOPd_}$P)C7?`H76rP
zp6n1%%vIFWmb}EjrESS1P}%;L|Ic4d{`XmE2~M49uilPe#cwCm#k14(XY4jqxBjd3
zNjrJZ?Gq)@iKfyYZuYUMRjA#uo%1H4zEt|ut3P*z?rN@Drg%8_V5IP+4g2kSKC#(v
zc72(7W&1gna?brHZ*`<NTNq9=vbwoSTlQJ&fBq)jnKkdCZ0v--`rS8^xGMP7uHHw?
z`<moCf%`9yaP)?~e|6{Od|5GJ&|x_HG+6EJizU|WPY}_IwP0#pX?9{0TWHW@k5it?
zch@cvm0l<p!F({o&*Srk4y`B=>1kDMhc7x?OS&?jQ7U*>VJ^3$N~p`Nzvao-qjQ%0
z49d~ZKRQ=G|L~>KsVBU)sfOgFANS%jo4e(0{CsPn^mDpxSJaOFWoy4V_fhT3nb+U#
zf4Z(c>{H$}P)<bT%i=`|9#`7t*L>S=T7JL!ae%2%r*)&2s7QK`&+%)U!qi&SZ$-7`
z&E=Y165qb^g`F9<=eBjO<-eY*OlMB_JLl+{%rNz<U5ipwf8TVjcap~h@=nGvciudy
z@?efDGmmrHA)Dt?3U|b=+wJSAntprnJ^y(Vn%~biWBIu<?2|cTs4t_7i0-NepVO!E
z3?D6;*<A2HRQO{z_wj_7Las?C-YYpu&bq}cI&)uW!Zyc}CC<9B&gV`ZKeusvbbIU+
z!D~Jh8&h@GB-MC2zl>bD%I%!+kAH7s{yb)1JaI}i$4U7P&28MWNx#n(@xQC8w7wS?
z-#JIby4qP`;sqNvx5*vv&rA2*pJy*s<<WOrJ<dQv#6S9W_WYVnzurxqpZ{d94!FpI
z2h{Tx#l)uFCsU3@E<Yb-xI*E3P-tNAquBXwmh;W@q~-J1x;BTu622JwLg4P{tlO^T
z+s|G}-C`>GR98*#`MDGAQhZ7Au^j&<$dnfa&iYr>v{!EWvUh255BKu*=9Q-%*z<yo
z!$j+kM$2vG!1q_;Yrjk|IU_x_ajLa+K-~NGix+mT<reL_%V%6?v0q~IvS-SVCZ8}f
z39CC4I8QtyW%os{();NGJ=0oZRCH(YzGkZYu)<8D<=xb|*An*zKM*T;`zPkkr)J3u
zIwvO_eyFE>yLXB1JB{xpF5AMtblzB3u2MYL-cWjbeL2%48MSE!=5c4<J&Dz~{rxM~
z{NAtYQumIcl|_CkM_h6vriuE@t?exT{A{i{XOqI$6zRNn&ielsujEDU`4X0R;mMTu
z`Rk7H`sX?MW^=eXUoSG)8XTA+YhF`s^{?!#NY5Gnq)x-#(p!A@rwMvg-pp21*NR+q
zkfrbfi^K`0(05zUdNE3_{%(?Rv@dGfACs(`T})DY6K%d;bZj|P^uF@*WsUM~=3@)h
zoqcp!OqO2n?%Opzc=r6lZO8hy^Y7Z&cTI1b|GDiC{O?OQ$Hx|1i5zvf)!7qaY?yTX
z$faY<XLr1wx=;A_O;c~aswWEOb(PONp8Tu-_RiX&>(e{tALX~EX;<$pI)0HqV2Qb_
zAWKfhhVVCr2jhf$D^1;!JKcH(15GAgpY%dHdA&x0qsY-VRsq2a))p2Ie!YG7=G+<U
z^P9^#*q)q<d%RCx=6&A#vQx&Je;+Te`(6EMk|3Yy{`kG`44bY_75yK*tI#;zQ&kB9
z7Uj9;zUJ+jRdC4IE$L9OZsocY634%tKM-on=6E?|i}N!Lc9(pPyXkkgi)eeVPJB@<
zr)DX+Lh|6m#oPw(Fa0$vOyK&{rlihs*O+xzQgTDSw$Ae2s_nmn6MJkW{WfrY%nDc5
z+GrlyX7GLM)ekRj$@LkO*@fq?I9lAjulZqjvgrODjT0uY)qeR{aOT$!{`tFqT;-^e
z3ay@VCT!aT!TD7eWPEO`vwojz&eJYuC6pE_oAdkm>Z8*3M?YQ@pIz{fS^m+|rK)em
zx49=53(c|KD$ge~v){w_^Y3k^!;B7oDBgar=Dw}@y(0Vjv7H?du;O;+=L4}@rv3b~
z`04bDntP?XmHRmK_2<O(Bp?6Y!n{0|&Gku-T<lS6ZL`N~s;8YWGk)~kmUV)XxT&((
zucz!EPF!t&FsJ#`#MzIgihi)4KC>&n^T6H+mUp=qcgJ2_uuR<Pw7krAt^&br?LN|<
z?e8{Rx4+A=KmGjF`;RU&MXz?=@w|2Fjfgn*!@|q6{<Ue9uT9VhiSK&xS@`-xVcS=(
z^52>K&z@&{_sCgd(OJK^O>L2rKYu)untY+Yz`jL0YqrTerHJ~&vZuY}quSQ*TR%m3
z`Zo6)dh7hxFMPPAv$o*e#G@V8X6jZgl|0!v^}OBJOLw>beVWMa0t0sgX0yLrwDnBK
z-~QE6`)aP{i@0){egCQSL-^|U@_DvQi+`oQ*|@yQrm|G@{?x0F&Q#x<JUP7UO>nN$
z&Gj>Et~|f^p}m;@z?<T>6K1lDsw{sQUwy}!B~oiUb;IM>hk9kVUbkQS-*Dr5p@f|w
zTi|z_JwI={{rT5<e!`WWtWv>U>+i?3Ys<y8ohlG%TX^iP#ndN08MVil!YtM~XE-}<
z%1YX>{!Z<|8~;sPdPCnX`h8)Al6{_aD#N<n30ykyQfGc$kh}f7qwej(j@ISk_5In;
zYMV-DXQx^({r1D9o#Tt^>)DHsi9FbT{5|t=TXkK|pQVRatY5jRBIWTi-8rgLA+g`l
zu}gRBUNe)DH$C;zo}K*LpX^lnf4P)(bG@yY>&;HzoXbM;yXJUoWo!SN$awE(k+9F{
zyh|+Wlw$g41j^Vf)BpGRc5}g%8FC)}pH3XFuR8DGGb8H3%C?131&`t$=AHHo+Pd%Y
zLzlB*YdxPFdvxP)Aou$Em@e&q8+n#xnrAyj3)*$p{mHKlY?GG%DKb0T_vcH-ty?EQ
zvJw-iXUKYgu|VnJj(GNIix0h?H~-%~E|>BbkM&mHy8Ay>MbaX(Mo(^c2~VFz&XgR*
z<VgGY7rK2BJ+ZzTUB~Z7bw~2+9NqQFibd#48RzY%Dl6Z8wJ5wV6I1)g?!&Lr%FQco
zt`|JqaV_#%@b<elzt{c$`FL+lIHCyf&R)-3Y0H)-WB9Un&z?7vbxxnkIcXI%*+%1(
z*O8|4r&C-vtkQUE?2)xb{P*e8UK1uinyj1b!de}y)u?;gO(F1j;N$KI(_S3Bb$08D
z)#izAvXVyKrV?GPA3K-M5c;vsSIsx{GS>skCrS!2x8FSPQWSf<CbR3!m7s09Ez|9E
z4nD1qZ=01Ma!)K|g?Zb%`D<4n=qjBmanam)n~CR*IL-TqKEL|d9qFD}`)kh}6|urS
zb|yz1r@lR0y|wj*0Pha_+n*$OzRU1wdK|dw{{84wV|N8bMbU@5Y`@!2fBed>JlR!X
zb9`K@^uM2$dv;x0^f8C?=SjiShZY<PiK)IM&~r!q_Ffw$-50mlEix1O`=T%U`JZ>w
zte@pQi`Ei^g3|Q2VmrDYRGxG8zomX=#x@Oo{of|1H`SbtZ9lQSyL!n9t_Mfsrz^i&
z7o55LLTt;qi5<=1_V*Z^gAH~VuyWp8wlzr5aqA3&;)?%1GL}mGqM}nZR(CDXlWBaL
z;c;n^h2`UHo=^D`r(P*kW;-*Pp?3bt3ta6-)x>iT6?S<h9rb0aJo8TCdfTF+qARJZ
zw?CS;eE)&?_z2F};MpcK-@NPitj6>_bm`R}=c`{o{GN5f=c}^R)~Ao%4*z;ux5NAK
zlGW7_ngW~$_5Snuxvs1(J)WNwwlPasE39SHhr(Dhn+_%In+LuKM*g^c^LNsh9S04v
z7j0Tq>py+TErV^3Zsgbg@;+0SIknnX`s}YI4%wZvSuNjH#Fu?hI5Xo8|HD%W-ErRY
zrcCkmxB2w`_4<A9&biiD!;{rJzwGzC_x@j){Pg(w8EI*0OMD%<qi%K7T~_{`y2wuC
z=<)k`lXY!xX%_dhE`6sIb-Kgu$#0RRN~RZ;4_{tZ!q6GIySm`U4?BrDsR^->rdhu1
zUR&hUm#uf1xLhi1&h9@N^ITpy^R-X98hz%)&g1*nbGv{1${(t+o-gt7HU+!L&Aj^c
zF<raoM|bX?7vK1G_Nxg`u7CgWlIiBUBV~2lLVJGna$Iv3l-94`!ubFDJFD{Di96r!
zn$UVHz$L69e<j!HkG_5%PJG_~TU4tkC}Mey?wd>cjCY0i7v^~Ux!%eYA@r*GW9_65
zyCrK2UamYmal(x)tIB>h6(2vmO{Qi?)#^1_^{?iBJ>m6n>+N1;$1|N1roB0s-*;C$
zUEWk+;;Mx1IG0%q+g~>wtQOaaD7t@W`}9wDr*uHUF59Jx&EB|#?a#S(P4?oVxn<v@
zLhR?)-)FB#%<SYTziqgF%ER@N8v|k{G)4Q#_kC<Oddjl;qMF|et?&02D~t3zcsPCf
z<F7~KA70y%9=K%s;h--+=87F}6FSlMe#^~w*L5cTc>m2mG*o7CZ~OE5ZtwS%@?MiR
z?mfOkBKzW}qnD3#l@;0@Dc%&k=f}Q1aeh;7i6|}LpE+&Ks{XIL`h8!_d|+B|ZpywL
z#n&V<-r2p|HnsoJyZN$?UrztzurIfr(sJd;-hek6i)M+xPcWJGWL}fBpH$0|2L80U
zoy*R++`ci(y(a3xQGV}&$NQ%(PRX9TC-L!?`%_pprSCo-P<U@k-HwlICU&qX>&{XM
zHU5%uqAYIDU;oYL_r3hazUoJq7pxk)!YKN#>BaN9H(#9NPM$q&wQT9%JFXrUxe<2L
z)~`RZ>r<3u<+ku=dfSwvR!s?S{c!5|(i6U)7pI3!%IUrovglT9@pZ$z{Y*ac(;DA=
z;O}60&0zR&`3jftM*%POn7$t=kzk+qee>HCsr;~-ee0OSZGQ;<>6D8+I`75hyUCYQ
zZ``|5rmmzQo@`uO!uZdmSmIgzHo?%+w8``InKA`mb^rUZD7ODb-K6sq%$dEmUt6qj
zwOz6HQmXZoyE(C8Tdf~jx!Bjrb-j3bFN*iMljo_Xi`gn|=PZOTFY9X(>pkIFINM0;
z(T*egg}zHX+p~%5y4|mpYmEFqy~;SgCidQi4^^RaOn2(%S=CzPl*{Yv{#mW?Yuk0#
zwW;+x{~px-UvYcR`=4g;a1yz!*tnZx_WSw2*Izh!T>fL3U)i(HX{oAPQfzmvOZv5f
z>E^c--$>ux-wsS`ex7%J%G&_1z{vbX^>qxIopL`bg1g#MZ%<vpn;)dL;r+va&uoWQ
z-sEY?YRtItmwR{V!QH=OOc#sy2p&Ii@7ZqUTl=QutUNxo{=dZisaH>Ny_hCo?&wng
z`>@-W19P~KDcK+H7u<V!V?w3ms#nUlt2b^>ne+N^;2MpU$9_EWd9qafjh%*A?d|5!
z4f|%@H(=A<qn7epw!HrD$qS#pH$J~`I?=~MdYZmySZ(Z^U{T*Y<){BX_TP8A>%Q$b
zNx7<0QzNE(W&6WiQ+L1Gcgx>;g?XNR^^!e5j;M1+9hy8T=-ZP$%k%gAnRQ$IgDyOm
zy>O3m&#U>?{QpkPCr|fjOO~_o71!sK9nKZ3>eBky{Qc}f>G@L=y?rbC_a1%h+j3&o
zs#A5J-mkmSv(NJ637(47)@_%Mgvs_LpXMr2-OAqcw~t}c=Ehq^3R%ar?j3#qw9xeV
zjUx{vE_As$ysuxdyRP{9@AvD1zIgvXK0Euvck^osx+gO(T6Ao<`~IRqX@#BKo&=ea
z*ol*GiKVF~mF)M~^ZRSsl`HN~XKYy#zq7(Gb#ABW?5x5gCu%BecT2_>HY-IiSO0A<
zc%`iv{OnoJ%oz{E*xoW`SpH2p@or|7<`f4xfpxd#j=cZ4D<DaDaoCmFn_AC2<<~vD
z{C=);TG#r!@#&9*86Vv@`F`imzbAhuOnNfWyesNUTjGna2Mb<o+b&l7;lb?gd(W*k
zpf#Z2MZPV4_Zn~V+k8AKpTAG*s?pg(htp|1zF%I?uu&23-luVRo7CpJ&gB~|FS?}`
zyK?yJ#c9hOJa9<l$DXLktM94`K8q5&vL{L6a39+wqvV6TGuV~u#izc`E4sREmGjwm
z+_eXe#In6hGEKUF?`M{Ao#}7p%Eb$ICe>aOeX{Il!K0SA9dCOCKU9R=G+O%cyX#I*
zi!2{TyI*D8T3O1Q{CDSUUSyKr;~KbohC}F@;{S@4pO_i`*PeN&D!Zm-Ym(xegivAT
z?`;e2{*68=-Z1Sh`>~eI4`!CBPPxO_AUSF8!`Xip35C9W_v^@$&E+<~MeF|GNG}Q(
zzP+>6=kbrz-@FfhE;w$vIN-rNZsUxtEB;Sf_WIGc^Y`EX`rLdyw)}DY&v%}%a_Nh(
ztlW;@HF0w+l5gF<8Ts<D&gplzCzW<wu&{mb_QHi&zGcfC!b5f9HcE0&pMFxzc;?Bt
zo9uTp{jO*=l?v{8&fjAAB|~9?F!vqjs}mk>$T4r8&wuaeGamgdc8?c+mDzV%?p;z(
zSni5rNBL_y0*+*b&7K@_fiLo8e2m0_QgyzAYZkLRmdc9=&wE#5@$P)4r`#Nyh2m#c
z^j?+DPWig~$3Dx0yMNqXkeT?kO^WB$#2!Xg&7!;3f}-yxD!h4b-yZz2dC$uYzYRAf
zcRy>KG=*{P@qGqrbGXk>>0a<e?08ez>X(kc`$FF?I(wn@-44B|eJh=#PMFMFEPMEy
zoMorM>&3dfw{yR*ivBSDw)~D)zh=K*{V-Y`o_y+Ge>h+(wYA{>9Q8H9{+7S4zB#i+
za$0KomK58$swLvHO<cBCr*izSDxZ61uj|&`;o(mo`xSf5as7}N9Z<}EK*EMKt6y;w
z*X@;eALY6CZk<z@q#IB+HA-8lK!2Xbe17X)m){?`kyG^j<Fe)Z4n)W2OcI{*F0;m!
zTm0g;Xc?yi`3p4EIhXss>5V=w(f5#fa{`<4Zd<#H#j#uNTV_Pe%i-L-Qb{NJNXPNR
zfz|EL-`X{Z*Du<+Uu5zIz4+)(=ewm#)vC+qxrEwSO0|Xl5}mUtbko{%^=pszO+BW4
z&qd?p%?rQ!n$thEe(<qi_i|GdFq|#ArQ5g5AvWae`a1!w*7JUHUAL85o#lV)@Q!U$
zk8P-Zb;0INW!~#UWv-!b7v$ELeU~j>zw_U--}|23R)dGxI?cJ6>0$L>tJd$^%XP1F
z#>7L@);Y7xPkMCz^1n?I+2&WvJW>ml1(mu_eLUF87*l;nz(-<=s(Pqs|7}0+S=||I
zBISjvP7C}jvRjjXuPt~dV_&5FY?08G550TuxvnpX7wT!Q=dJzGGgr-5v|iEZ)%Wme
z$<JcDQ|13`*gb#Iqnhx`v${gNyvo)uJoNnHgqd#+>mL()Fr{<v#JRIMR_ks0?del~
zaPjI#>sYQ$4SSrgzwQY8{V9tVsVN;_RcK#lWz%bJbfmcUU2*Va8;h3*lwzLsWiP2~
zFSFz|S2@%A{qV0xqUFg+c5%x;_AxG~PI9bPkiK=`<OOy)Ce!Wma}s<vJAIQ~Z(gW(
zTC1tz^Jb$zKWDCg@>N~ymvtA<?Yo~1Q#0h=S(LMI6;F<q*>?K#)LFmYF6Or_JUH`t
z{CBqdMzG#~N16Z29P2H=R$uRbcYF1Ni5-%j`7f=?c<%1c=D2J9$-%Wj=hm7zCJQ;j
z<*g+mSK2L6sYsdse%h0Fo38J8*jqY1a<9ZiQSOBG|6RUi-j~~Vy3>AgqR%ddUmN1z
zi0t4_+AUg|s1v(YbpD!~ZJ|p;i_UzRe`kTfZgr<`h0L1`R=6`HcN+)Z(f0j!j4S#q
z*R6W5FMGpXSu2hllAfP;V0pIIhqG;2HLvv^cI^E-=j1z!clX6oR2P){86D$2abO1H
z%o8U)n<Ay}?cBBBupqu5UZ=qP&&CO{Ebsp@T$#gop<RY=@A-)Dg@<L=2RMJN|GZA%
z=S$A-`x8z~n!NDdzcbS#cGL(9?UAy1G?_=XWNqi?ixD^F`ZvU0-m06(Zf<Mvdt>$b
zJ>SmP99Myi1Su)~lJrWyv(hwvzv1Tc^MBZtCwA;#`g+2`-^Zfn6rQh+*uK**?2ndg
z#TKOo(aEi9zj^1_ua!S%UBfVG@2oX4`IQ-KPh5x)JXpAa?PC7@=B>~EM*PrQwml?N
z;<10b-LsIJ*Z(Yc$yg)3N<!!2YFC>LzvqfiUa;%;%M-KN%VL;QBloV$-dHQ}dy&@v
z+SD%ITYfo(+w*t+-gvq&xHR%>{<;0!-}p~AI*46avv1SZzI*jdQ<nHxq{Xh8bvN^8
zV8?6?`zhBSc9vgz`0jc532D(f|KnvDLXNv1@h#)Hoo|^eQT1%QUQT%FTD3(huK)k4
zU;KXOH#WaX@RrgRb+7ch8%?$E?O9x&c&~LW=Uvy(l3I(d%kQiFxA_-JF`evFak{u6
zbFqRk<Mh8t3VrwYb9mM{zl(l-Zi!U3<>J>HKh%Cry7AhssQ%lb;v4zNipAv$T6eU~
z6+T@I4*1OGtUr%M)zUcZr@nL9?$FiZ=0z^=f4YmWIl5PW?UA<Jud=u7mQCF8GvURm
zH!JIp-&B68ecNR1wU)OBI~M)>yS{#Awc+71STrqK7HIYP+}hZ!56;P1&YW)5clpsw
z^`kCx4+e-Bzpvy!9hN_J>d94?KDO&do$2`ScaG-Yg6BUMC$udpv|0V?Titu5gt9}W
z4U0+^ua0Vc^l^84-dlr>IW-kFQuqFpFfWVy$hGMclTkyt)sF(#h5KKuuYc5{bf@x~
zN9C`hrS~3P?^!leFtql^z1?#AKFoUk{@HF7Sb-HNymD^k^D1%qqNx+7{Al`}+kM&j
zqSvwamp>kPDqQephf+m}uidqaCcYEjrmT8(=12QOrG&n=hb`I3Q}5o@%*nT?tDNlk
zWo>`*je93v$2nJR;`d^2f17lBTB@?`$>#3m{6})rdHUUN$n~yx#r^%>*AJ;Yx8eDG
z*79KXcbs+d*J^ja3psp2eBsoEyJ!6Pd@sKD(9Frd6i%++p0(+GMbNHjiF;RfPVaqj
z_`bfqq~PgyJMI=7*~`Md^JQI(#a@a1mbEMXn7F?_T$bwSd_(TxNi|rYXU+4I-Ep1W
z`GswP*N^tzr|vJ>{)t5i?uzbHX1-)U*HXrOj!{V4vPDb1-H*Lf%Kly%64x5rrQDpm
ze&NE!dUAz#yO!=yU@f0x%OyVFL?o?rN2vKkmm6|dueg5yUwW_ddQ5$}=6PdyP<}4$
z+_HVef0fNC$v+>i<-O|~TA-5ju*b9Z!-J#AffFXa;A>!7uG|!Su{=81a8rESjE|GT
zlf;$mrY_k1e4VnMwBQ!)cl!;QjS9}|yFc8(X`2{!W&1nd1&TTIYtJh`k14%7SJmb)
ztl8qCdpY&gYS$P05-(3vE{UxdU(0#-u4~9Hf5}PR>g#4TTs->nLZ~a-%(uQdhNm{{
zjqTj9$8_?uuG1<fmoJQu`@MaNAnO}D=ffA1xj*!KA5Tsx6g#u3VD&P)Fw?7DS+AnM
z-?x4r)Akl_+uF-Zf6Wy6W^1u$Va@BrwY+y*JDx7s;m*(>Z^yV_BAjFX#mZm1%%{Hy
zyf2}$S@n;e-lw*Wf{B&B22EX2o1gCee77`X71RFk+^3>9dVH-mp89sCL43bm4MW=h
zDxRVs;e<A&LXO*8T|w5)(O$pzF?*aQlHE_GI>f)tl;{e7p||R^@LsET^G(^pWsNx)
z_p4vKzL)#yyNN5Br!Ku35gOFmwadUMEyu%Ue&IyT^5cJEWw!I&yc%&LPP!){IF-YD
zzvl6?|G%^56^bjLyu2!R%XQOB7Uv!A&q;|Xe<bkd-Iqk859Z2Yuj76oCDTWK@4KvZ
zoxV@n`d)6{^qJpgJ-+c+=X73Sm6lrY*2R2!mQ@07-_IXu<=1hIbmf?qyL}JWF3G6L
zx4Z6cmXXe{+b6ic_KENui-qE9{AZ7@*!S|pd7p;x>kmvrDoR4xju`DKWk}cG-I2Up
zv#j}GA-{>tMnN;(E4xqs`ee0d*BTMfcy#LO?TY4i`?>pNE~v6O%5-yFKhAUFh^}#a
z^880WGfW?btq;F?rDN&K_ckB4S3Wn&QHSM#F8RHy-&HuiXKuEy`TlK7hK9}d4F>OB
zw6lIj?b4gLx2x-6A+zzvYx9>SUSsy&_~UiamG;F(A9A#n6u!OE{Xe0R<D&2$sXm#|
zhWqyaEaQHsFvtB_;S#p>{dH^6;P$7<IfZI%-~HN`X%<Dd?Mr5mxBj&*<l_AaYfpDN
zFFbNg;mthjjV`+EqFWR9yq>pPRr}P&58XyNH=^G6P1NhRR({~v&ttE~d$QDj$JMUS
zYHGfrw{$k=+sHSv@cUUT;4tr8RTkSADVz7zT`a_xH+t5;GtHaj_dfZQ{clfeej_}2
zd|X`qbgupz<G?Au=j}}V`{>o1FH_>90#Dzb_0@HenNY2j-2Nn{cXf5FY5Vthg?S#Y
zT5`PnzU$VV9F6Y$Cz^7%+UycNSnSo*n7B9S<J)6V6}>k!V?%?Q^{=m=F!fiaXPk_I
z2KVA$=?V7_h48$d%oobaqbqixd%clES>2uOZTVJf1Y&Of+b@5(bffXI>b@f>OOrNA
zF@5_UHYNGytF`YwhCSL`Dq4_pq|ZBi!o)w1RTJH0m#9^3j9+hZ<KnbZWg*?TNq^hs
zm~7Qm+avniAtw9pXQmxV#}s6W3-Tila`;@-TCp{8x7Oir$Dg08{IkcqzF7MHU+ADy
zN5><d`_g<$`!fz5mEIS>CT;oBIeD&Y9kQ>fMxTk`TW66bz$ZPifA#a)p7YnkPH|Oi
z<z00*TKZO3W!zEUrsVJXhkE_%`clqz%#H93Nz8s%K5NatdH-L!?b);@B&_lEtS-*x
zO$G}T8XVsl?J(f|`)P90)Z43+>esLII&5|2#@RO6N#)O%8`cyDRX$yAuVwxJTx|H2
zZBJRYDFyWJieDTUJx}~%_uuZXp%H;WtyAqo5`X^ks@b{DDQrV`?bVRbZ%^)v3Z_)^
z@*cIFG;z*Uj?G3l7JU?J*E;5wbGh@eJM$BDzB`Y<SDW}qPV1iSFW<Ijj>?SEw3ut_
zS7q&8`nnht9G|?`?P`5r15XOM4)>$^RQ5k_;Xds(P3Ihs%K42t+DlDecWs@q(Qt!7
zLw#JS!n>+>**3dAShM(MSF;wSD>}ssUh=!6p1yr;;t`fba<LQFrby|=?qz+yUTgZn
zGM$!igB|HwRcUHT362bvFY827)e{}+jQ+&&MjcjJ^60|$_76Wc?(MpC<WqK_;=aee
zY#ZMm>&$XBt+U8_+<vxH<EEI)%V}0M@9Xw&+QN1}f928g)U8G);*I5xCry2n{i*D-
zu&u;Zedc#=j||>@v}xa%t!00<|1<yV{>bC+n0MPTU5<_No+BR`tgY+2|L;S~{`<!^
z%!Nh&inlMSFCTm&_U8ZkO_Nlo&TM?ru6z1a{@Y(J5;|JT@@+~bmi4}9yl?l(aNqr)
z_JAF^tL{d7v7Bd}S;wR4b#zwmRwIV{!WZ4xZk_92do!Z>>e8!4O@V>|x3^idy$hds
zSv*x$QT?j^?JYcS1RKt;K6(GQjTW2evIFl8zeRl1y|#0wQA_^aw;f+Q#Oz+1Uthe(
zN+rKwjmAos8zl-{pRcwx#Pe*nu>1J8?``5N?=7sScq$4XOpvh<+#Ni}+%m>%4gdcg
zk9=Z^|Ll{nvar?@Ud+|CN=b&RK3=->-iP_i<7Sm#oLc|LS`J>lN?-cEjro-BjsI6S
zO;QauW<I&zx^Hs+?QOSaeeIlZqbKUdehcCC_Y5S9<KugO$HiT};C;t2{ls0@=$R_>
z8y_G0ex%o5_x`=GWjm!-A1nX*=F=(xv(Pq$SO4w*q@C`MO-V`Jb$Q7;qofs6+8FjK
zW=}h~OG*5qpKJN_ZIa3x&+glK^2K%Y#Yf+!Jo0RLn>3%xSlHloN75YAy%GX@Z#_0J
zTqTnox>eTs|Fezm^Y(pfI{oj5%>7rei0ZgCZ=bnbNZ!GJ@zba3X!fx==RbLp(z{7_
z^;N@lGnQO_ezowZVRPY&j+#4Pu899gcq-PSH0@8V`?i@Ab5r+7@!c{PugI#Lo#Pxf
z`*@$ou4`M@v0r4j(|&MtiQ>+Wnd;3qdS^_VyZXk~NwZ!YRCF%>xLf#}qhsBJ<Ey^?
zXn8Am{DS!Z<ad*w#}(X^zy2w=59X>BwJWM$H$D}66CZz}{u85UY3b(>-_^axtz0+g
z-dgbHvN5aw-)9bYs-77<S@JU_zr=c;@7`#K5O48R^@RV8H#hy7SEq98<dbDT3vZmL
zu~>F>RcWV<jYQvqlI(!K%FFBL-cY*r_sw-}-eP^J?%(=S?SFcX?D&#3{r57B3nscR
zB!1cdH~fC`<YtL&!mv2rs$H6If8foY!u_jO@y98s_4Qo0a@Cd;%$jet(fr=dQmJz`
zOZbIq+tx7U=e?6#KWE>@wP!Xy=9b*?Kc(iV%j!pJo_>y9f0j6{jx*?LDmda+IhEti
zRkioc9M3;r{=4JTjDs`kFDuTlP!UhF*map@)7phAx{_y2?8^Q6b^E#MA1gPf#eQ?2
zR|Bg&7nLn5Yi~YtM)q?=XzdGy(BRV{p&K7<jT6l2p78tG%)=W$JX>jzkRT?sr)qL@
zx!|PmD{YT1^|^)ISFbXaG2M0Gu6pdc*-39xih^q`s!A5VnJB04CG0nA2b+t-{8=dv
zb}&~ZJ)FPnQP<<|Q-zPr64b8yt+Xz)KmDk%|K5_IvUfLT*Oi{^wfP7y-DDl!>aow7
zYW=KxRYJyrX=|r)hlcVV&E8uSbhV@P&>EIMzh`w;yy^P8@&5sxn`v%0Vn3|g@qbaE
z^lGnFt_f1hYXyb-vn(>51P`T62{%tNSNdcuWRO}Rx5lFFj{W|#5eoAkTrPNE7g_P|
zJNx7O={@d~?l(vtzYxE#!PJze|M^$<{~zB=?%(x;KmS7yJjP08_U@KhabmA=@v$o!
zT}HX5m+}8sfABRf^>&#;+-vdLL%z2UF*a{XdGPOu^=pIYQ$scGM(IaSF!7uAGkBHM
z{+nU0KjzO#cyOip_k)Gz`&#$Uj=wXl+HX^Et;NFzr4@0yd3!HC{rcq1FT+AR*9&$_
z(zWy~S4p(@ykJz%I=sg8aa9hlZi<%kGUMkvkI&ovZV&hR=es3gsVR{C^6uM=-CfVm
zyt!zes~P{z>A>rs+mo&L-Z|b=u{Qooxp<o2tKQ4%-wr*_H`lG`7r&^zCq0Zwjpy94
zO;@A0hu<o9f28IyZ-!2(i=9AUaOv*qcS?cmSHB8sWIZ<hntWkj{&|rYqgsV!J+Byd
z)T{s6a(wn8t-uPK)$?i|{ak%+_k&;8f0((!qVI}j$!U`?mq#~uCfl#)oUN>_wOT$n
zbgSOI+XA(_Tz}{_eLuQgzH7Fhd|RAl=ZDIxZ*A`#t&1qk+orebPOz};jt?D4k{`;$
zlVq6QS@=lKYQOU*WyZ%@b3z!i4hOEe8NnPIDjjwFg~UyLS^jfU-Qsx`EWvG05A(Pt
zx;?&s=-A${=C13X?>zoIPwqHU1yX!*_v^;!X{}$@1e(rTH-GoioR{66Z66mrws`qY
z=(?eyw9|WIwXX+#$}2xE7W(skcJ_yh+oKhgzOUcEUd%ZASZ=k_3GvXki+`sl6r5++
zcRPaJIegc{pQRU+@3sr`>o7HaTx%r0ICDp`j@okBYwEn>{_-7}ix%C@n%z~l)7N#Q
z(!`9+8=ZH4-Laov|6oq!|HI|_@XY7u_Wm7ng6rZFr(}P}{9MK_?wbAj`O+n9%PhCe
z6?p%4#>I#abyrp}`N&^oeqR^cmp-kgf5VIu#^-F)TrSpZx_=<D{mbF}=e11E@8gz7
z-YNM|Wy14%a^t_hMu}mpk9QQEkd~O-_T<5n&b<a%_hoK;ooL2=i`6yMx$AhuhcEl%
ze_oxrf6ull`O&cGbD2B&km8St$CDS-Ty{VHGxRH?g<sa5)pyHPs@8TdHIrz)zW7~{
z(79_D?w01S;Ys{d`g!BpTP@2<=LhTN<-NIX&Fddmt56hNQ<$xO*&|fs#V)SXvH5$V
zncjYR6fz}4Md)sZ){eKW>2dr2pZQ#WTwD{Lh}D-Banz;E5==?$|K~q9_3PSIt16uW
zuUakbO|uYnT+7jRTPbJyYw^8zgn44h4+*p=g>AQNUsPW0)x;j${#4Oi-|}5z^<y)i
za-Z7<Ipt5bKL7gX^ULSY-cO%qIVsT^ZjJbX1Ao=ec(7!?JiMBl&BsnV<F@gt?5zF4
zAxCpozqRzcz4rQZ@T`X$|A{;IE~VwGI~5pOzP%azi|Ok`z3u-WMQzr3y*k09>ds_;
zoBC&<(3`a03m%*68XJG-wH#Ipy41G!=HmNH_9?pVbPk-VyXdHUxD{LE+qo+qA5!k#
z?fO9P(6=`t^5<q;k^Z^UGdJk&y|5!oR;=?qxT5s=W_=xr$&(BpeVzF{_OQ4T!s&+&
z)bhK0m^a(_+4n?O+2H8t|4SBWIF`Q@@?1B^Cgi$7Vu08(zO%PqJC|Slo9+>)mFD+~
zTl+@pyWSh`zJ{#-Wpm!{`=vu0H6@kTS-+igpXKK%Wth8PRY~kHcdRvNd2(RF)>dY<
zvplO`1#aE?^}SY?P}b^y?>?s7=DRe>X2-K1wGRzVwmg)XFRPVhsd38dkn3f3r|%iL
zRx>mA?6~fKW7C`dL)(fU{r~%Vsj#2z>sMcEw!+*mSQ^W7XZFH%acu9otHk{6Zd}>A
z`PHlD*P=_`{@Q)KxnpjqtK)yUlNQBA@-502_rBZHan151CtIE2Isx|HcZ|k&cJ>Fx
z7*ETse;;QdzW2+k=*N>Tx9_cabu;`kE28u{swvYnjax-M$@ymc{;rU#F|%hpc>mC%
z?_T8h&~VWyp=||M&T?;Dw??jQU-_J>LSx4}Ar=V%V)OR=a=00`Y;)N5ZcBzm(?YYd
zZ@pc=XGg-hPUH0tx?wGejtu=n2W<J6PIkUJ<|}_UX~x9QjOsTFFT8B}eoW!lTz&J$
zPpt1bZo1EW{BGbx-|lV3kLLf_w>eh8@38BtRj2&oU9IP{tnX9Y8*H#A+=@?rYJXy_
zQG(l=bKjMMr+8f1v?|B9_Q_On@qZ7G%nZNsIn)`JDYtx2d?2T;*{G7E^V{I=nl<~P
z0;dH3sf*wD*upLSw!d$1LNwpBHFuhLZ@=1D7OZO*x0zS8G_fW)NLl-#YqywSNw-7X
zhVmKNSIg$?h;QiK`{C&HWA8&%ziqw|wdwwW7yo8@_!@xLgV=5s+L#|G#Z@%f<#X9i
z|0Maxd-K=YnYngGOxt?&;@0-~+NW#T`>mf|3fdP050h_kJa=w8WO;4cl=%2k<iu68
zvj5b@uX}7EWfi%<=3<v?CdbyRZzu29x)CIMXw{^woYlO^U)!W2MgM>059M&viI~<~
zIy*ZsOt5L$zlxVP&SpGR+J5yzh~T>P<yD3X_6p3O--zh{dZu>xLMV?8hl1_R_D6Dz
z6*f{bAKCfJc1b=cId{&mFGDstGHmAJ?Ctx1or*5*vwj*hdp#E{aWC2{&-~qN$~36}
z^C`6zbxSr?ExZ0)w%1Q$&-+(R0a8vM-x}^&^yb6gbM-Oun?8Kp9-Zp(uh_-x-Ng`*
zRCOietL$$CE}3uJG_f~VN=_`k{LfDA4R;T2%sCzRkndQ0e0A!@<l}Q{JX_W?!7Y5(
z+*obx;mzA|GIY7?s#WK|R_!&GYAVmox3mk*yp^i5`EwiB*S*h0Rh++VknGg?sPg0g
zpJUni`wPExiho=LAJur(Cb47t;xlJVrcBd&n;#Z7cfH1`lWoUO<Z|4vl-ng%c>X|<
zO#193iT-o-Z{JqB&n<WuE+d9;M6Y8$`^hst!QS4}=ZUObWq0|5#N>w-i`2W1O?-L9
z<wTyF(#6zyEcfS_Ki98&cj9pxtECPs!MUgy6ueK^xavFq@0nAls%v){o&F#Z8N2X$
zwYid-%~sjtH<w8Kx&zYq?Zo4>+JlLTaBJr$J-FBT<XOst_DM@0pFMS|_)c(f%erh!
z-sc?;tA7hA?tZ*#gU;)Cx&7~Nn%|Gu^WsBt-Pwr<?RS$N-19VTdH>tI<$e3>UDJ9a
zKCJt&=jhza8#=tcojNw5_F<E1H{ai*KV@WLRw`u)v2Bla=-(q#`j`KGznQl7@}229
z%a*OG{gC|OT=5Mfqm=TS+up7z-Cuv|@%Ozu3Jy+6z1(Ma{@DisSlJX<Y`Era5?9re
zq`SYq7oR=V_4tlFf6@5|EWV+|<red8mhZkMvElHxxl-SMU$?EhKRaKy>i<&B%jfT&
zc!+TNwIqw%N5ATv3BJCzzJ5Yvq~YPeg)4T;EYa{XJHL_VM)G|NKV6pt?>_JQe$HCH
zuHZvrdhG%2c6dH|)Z6$wZdrIB|J&VL-+wjM)^>9YIl!!ZCw0jpjq1;p<z+wY9$B2z
z`u^HoZvOYXN4ux%T4&snjQ?~>0TvL8wjDdLSNg@}-3NY@ovmJc=2Y(Qo%Y{Kr!(JO
zdLp){Ug${qx9meVU$#d){T2N#=#k$2ikf?^-QxPur5CmsAF_E3kNqq6BzBZ1|NSlc
zbARODcaCXKx0!rDp7`$4<yfw}s;6VStPkpSo%D9C|2p-ZP|5V~cT#5`fBv`R<fQ)V
r@&zYe&aM=L4}GuL{G*<cjo~N5%^UH5mjy8}Ffe$!`njxgN@xNAqxh_y

literal 0
HcmV?d00001

diff --git a/api.rst b/api.rst
index 722c79000..398c37b96 100644
--- a/api.rst
+++ b/api.rst
@@ -366,6 +366,8 @@ Note that the larger the table the slower this query runs in the database. The s
   Range-Unit: items
   Content-Range: 0-24/3573458
 
+.. _res_format:
+
 Response Format
 ---------------
 
@@ -577,6 +579,9 @@ Embedded resources can be aliased and filters can be applied on these aliases:
 
   GET /films?select=*,90_comps:competitions(name),91_comps:competitions(name)&90_comps.year=eq.1990&91_comps.year=eq.1991 HTTP/1.1
 
+
+.. _custom_queries:
+
 Custom Queries
 ==============
 
@@ -587,6 +592,8 @@ The PostgREST URL grammar limits the kinds of queries clients can perform. It pr
 * Geo-spatial queries that require an argument, like "points near (lat,lon)"
 * More sophisticated full-text search than a simple use of the :sql:`fts` filter
 
+.. _s_procs:
+
 Stored Procedures
 =================
 
@@ -942,6 +949,8 @@ Updates also support :code:`Prefer: return=representation` plus :ref:`v_filter`.
 
   Beware of accidentally updating every row in a table. To learn to prevent that see :ref:`block_fulltable`.
 
+.. _bulk_insert:
+
 Bulk Insert
 -----------
 
diff --git a/index.rst b/index.rst
index faec2ae8f..ee17eb075 100644
--- a/index.rst
+++ b/index.rst
@@ -23,6 +23,16 @@
 |
 PostgREST is a standalone web server that turns your PostgreSQL database directly into a RESTful API. The structural constraints and permissions in the database determine the API endpoints and operations.
 
+Sponsors
+--------
+
+.. image:: _static/timescaledb.png
+  :target: https://www.timescale.com?utm_campaign=postgrest&utm_source=sponsor&utm_medium=referral&utm_content=docs
+  :width:  222px
+  :align:  center
+
+`TimescaleDB <https://www.timescale.com?utm_campaign=postgrest&utm_source=sponsor&utm_medium=referral&utm_content=docs>`_ is an scalable time-series database packaged as a PostgreSQL extension. See our tutorial for using `TimescaleDB with PostgREST <integrations/timescaledb.html>`_.
+
 Motivation
 ----------
 
@@ -89,6 +99,12 @@ Translations
    tutorials/tut0.rst
    tutorials/tut1.rst
 
+.. toctree::
+   :caption: Integrations
+   :titlesonly:
+
+   integrations/timescaledb.rst
+
 .. toctree::
    :caption: Installation
    :titlesonly:
diff --git a/integrations/timescaledb.rst b/integrations/timescaledb.rst
new file mode 100644
index 000000000..ea372a507
--- /dev/null
+++ b/integrations/timescaledb.rst
@@ -0,0 +1,327 @@
+TimescaleDB for Time-Series Data
+================================
+
+`TimescaleDB <https://www.timescale.com?utm_campaign=postgrest&utm_source=sponsor&utm_medium=referral&utm_content=tutorial>`_ is an open-source database designed to make SQL scalable for time-series data. It is engineered up from PostgreSQL, providing automatic partitioning across time and space, while retaining the standard PostgreSQL interface.
+
+PostgREST turns your PostgreSQL database directly into a RESTful API, since TimescaleDB is packaged as a PostgreSQL extension it works with PostgREST as well.
+
+In this tutorial we'll explore some of TimescaleDB features through PostgREST.
+
+Install Docker
+--------------
+
+For an easier setup we're going to use `Docker <https://www.docker.com/get-started>`_, make sure you have it installed.
+
+Run TimescaleDB
+---------------
+
+First, let’s pull and start the `TimescaleDB container image <http://bit.ly/2SpxiYJ>`_:
+
+.. code-block:: bash
+
+  docker run --name tsdb_tut \
+    -e POSTGRES_PASSWORD=mysecretpassword \
+    -p 5433:5432 \
+    -d timescale/timescaledb:latest-pg11
+
+This will run the container as a daemon and expose port ``5433`` to the host system so that it doesn't conflict with another PostgreSQL installation.
+
+Set up TimescaleDB
+------------------
+
+Now, we'll create the ``timescaledb`` extension in our database.
+
+Run ``psql`` in the container we created in the previous step.
+
+.. code-block:: bash
+
+  docker exec -it tsdb_tut psql -U postgres
+  ## Run all the following commands inside psql
+
+And create the extension:
+
+.. code-block:: postgres
+
+  create extension if not exists timescaledb cascade;
+
+Create an Hypertable
+--------------------
+
+`Hypertables <https://docs.timescale.com/latest/using-timescaledb/hypertables?utm_campaign=postgrest&utm_source=sponsor&utm_medium=referral&utm_content=hypertables>`_ are the core abstraction TimescaleDB offers for dealing with time-series data.
+
+To create an ``hypertable``, first we need to create standard PostgreSQL tables:
+
+.. code-block:: postgres
+
+  create table if not exists locations(
+    device_id    text  primary key
+  , location     text
+  , environment  text
+  );
+
+  create table if not exists conditions(
+    time         timestamp with time zone  not null
+  , device_id    text                      references locations(device_id)
+  , temperature  numeric
+  , humidity     numeric
+  );
+
+Now, we'll convert ``conditions`` into an hypertable with `create_hypertable <http://docs.timescale.com/latest/api?utm_campaign=postgrest&utm_source=sponsor&utm_medium=referral&utm_content=create-hypertable#create_hypertable>`_:
+
+.. code-block:: postgres
+
+  SELECT create_hypertable('conditions', 'time', chunk_time_interval => interval '1 day');
+  -- This also implicitly creates an index: CREATE INDEX ON "conditions"(time DESC);
+
+  -- Exit psql
+  exit
+
+
+Load sample data
+----------------
+
+To have some data to play with, we'll download the ``weather_small`` data set from `TimescaleDB's sample datasets <https://docs.timescale.com/latest/tutorials/other-sample-datasets?utm_campaign=postgrest&utm_source=sponsor&utm_medium=referral&utm_content=datasets>`_.
+
+.. code-block:: bash
+
+  ## Run bash inside the database container
+  docker exec -it tsdb_tut bash
+
+  ## Download and uncompress the data
+  wget -qO- https://timescaledata.blob.core.windows.net/datasets/weather_small.tar.gz | tar xvz
+
+  ## Copy data into the database
+  psql -U postgres <<EOF
+    \COPY locations  FROM weather_small_locations.csv  CSV
+    \COPY conditions FROM weather_small_conditions.csv CSV
+  EOF
+
+  ## Exit bash
+  exit
+
+Run PostgREST
+-------------
+
+For the last step in the setup, pull and start the official `PostgREST image <https://hub.docker.com/r/postgrest/postgrest/>`_:
+
+.. code-block:: bash
+
+  docker run --rm -p 3000:3000 \
+    --name tsdb_pgrst \
+    --link tsdb_tut \
+    -e PGRST_DB_URI="postgres://postgres:mysecretpassword@tsdb_tut/postgres" \
+    -e PGRST_DB_ANON_ROLE="postgres" \
+    -d postgrest/postgrest:latest
+
+PostgREST on Hypertables
+------------------------
+
+We'll now see how to read data from hypertables through PostgREST.
+
+Since hypertables can be queried using standard `SELECT statements <https://docs.timescale.com/v1.2/using-timescaledb/reading-data?utm_campaign=postgrest&utm_source=sponsor&utm_medium=referral&utm_content=reading-data>`_, we can query them through PostgREST normally.
+
+Suppose we want to run this query on ``conditions``:
+
+.. code-block:: postgres
+
+  select
+    time,
+    device_id,
+    humidity
+  from conditions
+  where
+    humidity > 90           and
+    time     < '2016-11-16'
+  order by time desc
+  limit 10;
+
+Using PostgREST :ref:`horizontal <h_filter>`/:ref:`vertical <v_filter>` filtering, this query can be expressed as:
+
+.. code-block:: bash
+
+  curl -G "localhost:3000/conditions" \
+    -d select=time,device_id,humidity \
+    -d humidity=gt.90 \
+    -d time=lt.2016-11-16 \
+    -d order=time.desc \
+    -d limit=10
+  ## This command is equivalent to:
+  ## curl "localhost:3000/conditions?select=time,device_id,humidity&humidity=gt.90&time=lt.2016-11-16&order=time.desc&limit=10"
+  ## Here we used -G and -d to make the command more readable
+
+The response will be:
+
+.. code-block:: json
+
+  [{"time":"2016-11-15T23:58:00+00:00","device_id":"weather-pro-000982","humidity":90.90000000000006},
+   {"time":"2016-11-15T23:58:00+00:00","device_id":"weather-pro-000968","humidity":92.3},
+   {"time":"2016-11-15T23:58:00+00:00","device_id":"weather-pro-000963","humidity":96.29999999999993},
+   {"time":"2016-11-15T23:58:00+00:00","device_id":"weather-pro-000951","humidity":94.39999999999998},
+   {"time":"2016-11-15T23:58:00+00:00","device_id":"weather-pro-000950","humidity":93.69999999999982},
+   {"time":"2016-11-15T23:58:00+00:00","device_id":"weather-pro-000915","humidity":94.69999999999997},
+   {"time":"2016-11-15T23:58:00+00:00","device_id":"weather-pro-000911","humidity":93.2000000000001},
+   {"time":"2016-11-15T23:58:00+00:00","device_id":"weather-pro-000910","humidity":91.30000000000017},
+   {"time":"2016-11-15T23:58:00+00:00","device_id":"weather-pro-000901","humidity":92.30000000000005},
+   {"time":"2016-11-15T23:58:00+00:00","device_id":"weather-pro-000895","humidity":91.00000000000014}]
+
+JOINs with relational tables
+----------------------------
+
+Hypertables support all standard `PostgreSQL constraints <https://docs.timescale.com/latest/using-timescaledb/schema-management?utm_campaign=postgrest&utm_source=sponsor&utm_medium=referral&utm_content=constraints#constraints>`_ . We can make use of the foreign key defined on ``locations`` to make a JOIN through PostgREST. A query such as:
+
+.. code-block:: postgres
+
+  select
+    c.time,
+    c.temperature,
+    l.location,
+    l.environment
+  from conditions c
+  left join locations l on
+    c.device_id = l.device_id
+  order by time desc
+  limit 10;
+
+Can be expressed in PostgREST by using :ref:`resource_embedding`.
+
+.. code-block:: bash
+
+  curl -G localhost:3000/conditions \
+    -d select="time,temperature,device:locations(location,environment)" \
+    -d order=time.desc \
+    -d limit=10
+
+.. code-block:: json
+
+  [{"time":"2016-11-16T21:18:00+00:00","temperature":69.49999999999991,"device":{"location":"office-000202","environment":"inside"}},
+   {"time":"2016-11-16T21:18:00+00:00","temperature":90,"device":{"location":"field-000205","environment":"outside"}},
+   {"time":"2016-11-16T21:18:00+00:00","temperature":60.499999999999986,"device":{"location":"door-00085","environment":"doorway"}},
+   {"time":"2016-11-16T21:18:00+00:00","temperature":91,"device":{"location":"swamp-000188","environment":"outside"}},
+   {"time":"2016-11-16T21:18:00+00:00","temperature":42,"device":{"location":"arctic-000219","environment":"outside"}},
+   {"time":"2016-11-16T21:18:00+00:00","temperature":70.80000000000003,"device":{"location":"office-000201","environment":"inside"}},
+   {"time":"2016-11-16T21:18:00+00:00","temperature":62.699999999999974,"device":{"location":"door-00084","environment":"doorway"}},
+   {"time":"2016-11-16T21:18:00+00:00","temperature":85.49999999999918,"device":{"location":"field-000204","environment":"outside"}},
+   {"time":"2016-11-16T21:18:00+00:00","temperature":42,"device":{"location":"arctic-000218","environment":"outside"}},
+   {"time":"2016-11-16T21:18:00+00:00","temperature":42,"device":{"location":"arctic-000217","environment":"outside"}}]
+
+Time-Oriented Analytics
+-----------------------
+
+TimescaleDB includes new aggregate functions for time-oriented `analytics <https://docs.timescale.com/latest/api?utm_campaign=postgrest&utm_source=sponsor&utm_medium=referral&utm_content=analytics#analytics>`_.
+
+For using aggregate queries with PostgREST you must create VIEWs or :ref:`s_procs`. Here's an example for using `time_bucket <https://docs.timescale.com/latest/api?utm_campaign=postgrest&utm_source=sponsor&utm_medium=referral&utm_content=time-bucket#time_bucket>`_:
+
+.. code-block:: postgres
+
+  -- Run psql in the database container
+  docker exec -it tsdb_tut psql -U postgres
+
+  -- Create the function
+  create or replace function temperature_summaries(gap interval default '1 hour', prefix text default 'field')
+  returns table(hour text, avg_temp numeric, min_temp numeric, max_temp numeric) as $$
+    select
+      time_bucket(gap, time)::text as hour,
+      trunc(avg(temperature), 2),
+      trunc(min(temperature), 2),
+      trunc(max(temperature), 2)
+    from conditions c
+    where c.device_id in (
+      select device_id from locations
+      where location like prefix || '-%')
+    group by hour
+  $$ language sql stable;
+
+  -- Exit psql
+  exit
+
+Every time the schema is changed you must reload PostgREST :ref:`schema cache <schema_reloading>` so it can pick up the function parameters correctly. To reload, run:
+
+.. code-block:: bash
+
+  docker kill --signal=USR1 tsdb_pgrst
+
+
+Now, since the function is ``stable``, we can call it with ``GET`` as:
+
+.. code-block:: bash
+
+  curl -G "localhost:3000/rpc/temperature_summaries" \
+    -d gap=2minutes \
+    -d order=hour.asc \
+    -d limit=10 \
+    -H "Accept: text/csv"
+  ## time_bucket accepts an interval type as it's argument
+  ## so you can pass gap=5minutes or gap=5hours
+
+.. code-block:: sql
+
+  hour,avg_temp,min_temp,max_temp
+  "2016-11-15 12:00:00+00",72.97,68.00,78.00
+  "2016-11-15 12:02:00+00",73.01,68.00,78.00
+  "2016-11-15 12:04:00+00",73.05,68.00,78.10
+  "2016-11-15 12:06:00+00",73.07,68.00,78.10
+  "2016-11-15 12:08:00+00",73.11,68.00,78.10
+  "2016-11-15 12:10:00+00",73.14,68.00,78.10
+  "2016-11-15 12:12:00+00",73.17,68.00,78.19
+  "2016-11-15 12:14:00+00",73.21,68.10,78.19
+  "2016-11-15 12:16:00+00",73.24,68.10,78.29
+  "2016-11-15 12:18:00+00",73.27,68.10,78.39
+
+Note you can use PostgREST standard filtering on function results. Here we also changed the :ref:`res_format` to CSV.
+
+Fast Ingestion with Bulk Insert
+-------------------------------
+
+You can use PostgREST :ref:`bulk_insert` to leverage TimescaleDB `fast ingestion <https://docs.timescale.com/latest/introduction/timescaledb-vs-postgres?utm_campaign=postgrest&utm_source=sponsor&utm_medium=referral&utm_content=fast-ingest>`_.
+
+Let's do an insert of three rows:
+
+.. code-block:: bash
+
+  curl "localhost:3000/conditions" \
+    -H "Content-Type: application/json" \
+    -H "Prefer: return=representation" \
+    -d @- << EOF
+    [
+      {"time": "2019-02-21 01:00:01-05", "device_id": "weather-pro-000000", "temperature": 40.0, "humidity": 59.9},
+      {"time": "2019-02-21 01:00:02-05", "device_id": "weather-pro-000000", "temperature": 42.0, "humidity": 69.9},
+      {"time": "2019-02-21 01:00:03-05", "device_id": "weather-pro-000000", "temperature": 44.0, "humidity": 79.9}
+    ]
+  EOF
+
+By using the ``Prefer: return=representation`` header we can see the successfully inserted rows:
+
+.. code-block:: json
+
+  [{"time":"2019-02-21T06:00:01+00:00","device_id":"weather-pro-000000","temperature":40.0,"humidity":59.9},
+   {"time":"2019-02-21T06:00:02+00:00","device_id":"weather-pro-000000","temperature":42.0,"humidity":69.9},
+   {"time":"2019-02-21T06:00:03+00:00","device_id":"weather-pro-000000","temperature":44.0,"humidity":79.9}]
+
+Let's now insert a thousand rows, we'll use `jq <https://stedolan.github.io/jq/>`_ for constructing the array.
+
+.. code-block:: bash
+
+  yes "{\"time\": \"$(date +'%F %T')\", \"device_id\": \"weather-pro-000001\", \"temperature\": 50, \"humidity\": 60}" | \
+  head -n 1000 | jq -s '.' | \
+  curl -i -d @- "http://localhost:3000/conditions" \
+    -H "Content-Type: application/json" \
+    -H "Prefer: count=exact"
+
+With ``Prefer: count=exact`` we can know how many rows were inserted. Check out the response:
+
+.. code-block:: haskell
+
+  HTTP/1.1 201 Created
+  Transfer-Encoding: chunked
+  Date: Fri, 22 Feb 2019 16:47:05 GMT
+  Server: postgrest/5.2.0 (9969262)
+  Content-Range: */1000
+
+You can see in ``Content-Range`` that the total number of inserted rows is ``1000``.
+
+Summing it up
+-------------
+
+There you have it, with PostgREST you can get an instant and performant RESTful API for a TimescaleDB database.
+
+For a more in depth exploration of TimescaleDB capabilities, check their `docs <https://docs.timescale.com?utm_campaign=postgrest&utm_source=sponsor&utm_medium=referral&utm_content=docs-tutorial>`_.

From a8d209cd1c22f7c91480076d2cb473204c3e6f0b Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Tue, 5 Mar 2019 10:33:05 -0500
Subject: [PATCH 223/652] Add translations section

---
 README.md | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/README.md b/README.md
index 5e705d82b..f82cffcf5 100644
--- a/README.md
+++ b/README.md
@@ -16,3 +16,14 @@ Or if you use [nix](https://nixos.org/nix/), you can just run:
 ```
 
 Both of these options will build the docs and start a livereload server on `http://localhost:5500`.
+
+## Translations
+
+Translations are maintained in separate repositories forked from this one. Once you finish translating in your fork you can upload the project
+to https://readthedocs.org and we'll link to it in the official documentation site https://postgrest.org.
+
+See more details in the chinese translation [PR](https://github.com/PostgREST/postgrest-docs/issues/66#issuecomment-297431688).
+
+### Available translations
+
+- Chinese - https://github.com/Lellansin/postgrest-docs (latest version `v0.4.2.0`)

From c0fe0a5ce10c77534aaf2bd2b6896140fb1af7bf Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Tue, 5 Mar 2019 11:35:19 -0500
Subject: [PATCH 224/652] Add repo in default.nix

---
 default.nix | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/default.nix b/default.nix
index c70878de8..9bc5b1c42 100644
--- a/default.nix
+++ b/default.nix
@@ -1,4 +1,8 @@
-with import <nixpkgs> {};
+with import (builtins.fetchGit {
+  url = https://github.com/NixOS/nixpkgs-channels;
+  ref = "nixos-18.09-small";
+  rev = "95fed28ac372c61eb83c87ad97c24b0f957827bf";
+}) {};
 
 stdenv.mkDerivation {
   name = "postgrest-docs";

From f32c9c7967babffc89466cf4ec1495bf172bc19d Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Wed, 6 Mar 2019 10:30:41 -0500
Subject: [PATCH 225/652] Remove Explicit Qualification section

---
 api.rst | 29 -----------------------------
 1 file changed, 29 deletions(-)

diff --git a/api.rst b/api.rst
index 398c37b96..32e5d1a44 100644
--- a/api.rst
+++ b/api.rst
@@ -786,35 +786,6 @@ You can call overloaded functions with different number of arguments.
 
   GET /rpc/rental_duration?customer_id=232&from_date=2018-07-01 HTTP/1.1
 
-Explicit Qualification
-----------------------
-
-As of ``v5.0``, PostgREST executes a ``SET SCHEMA <your-exposed-schema>`` on each request, since this overrides the `search_path <https://www.postgresql.org/docs/10/static/ddl-schemas.html#DDL-SCHEMAS-PATH>`_, function bodies need qualified schema names for any database object that is not in your exposed schema.
-
-.. code-block:: plpgsql
-
-  -- Assuming that:
-  -- exposed schema is "api"
-  -- ST_AsGeoJSON is in the "public" schema
-  -- streets is in the "api" schema
-  CREATE FUNCTION api.sample() RETURNS json AS $$
-    SELECT public.ST_AsGeoJSON(geom)::json FROM streets LIMIT 1;
-    -- Notice streets doesn't need the schema prefix while ST_AsGeoJSON does
-  $$ LANGUAGE sql;
-
-To avoid having to qualify many database objects, you can add a ``search_path`` to the function:
-
-.. code-block:: plpgsql
-
-  CREATE FUNCTION api.sample_distance() RETURNS float8 AS $$
-    SELECT ST_MakePoint(1, 1) <-> ST_MakePoint(10, 10);
-    -- If the search_path is not specified, this would have to be:
-    -- SELECT public.ST_MakePoint(1, 1) operator(public.<->) public.ST_MakePoint(10, 10);
-  $$ LANGUAGE sql SET search_path = public, api;
-
-  -- existing functions can be altered to add a search_path
-  ALTER FUNCTION api.make_point(float8, float8) SET search_path = public, api;
-
 Accessing Request Headers, Cookies and JWT claims
 -------------------------------------------------
 

From 3d734c44cf2ef4437a3596fab891dc0db31d94ca Mon Sep 17 00:00:00 2001
From: Paulo Vieira <paulovieira@gmail.com>
Date: Sat, 9 Mar 2019 22:25:05 +0000
Subject: [PATCH 226/652] clarify the usage of upsert when the table uses a
 surrogate key

---
 api.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/api.rst b/api.rst
index 32e5d1a44..41b7f75e2 100644
--- a/api.rst
+++ b/api.rst
@@ -968,7 +968,7 @@ You can make an UPSERT with :code:`POST` and the :code:`Prefer: resolution=merge
     { "id": 3, "name": "New employee 3", "salary": 50000 }
   ]
 
-UPSERT operates based on the primary key columns, you must specify all of them. You can also choose to ignore the duplicates with :code:`Prefer: resolution=ignore-duplicates`.
+UPSERT operates based on the primary key columns, you must specify all of them. You can also choose to ignore the duplicates with :code:`Prefer: resolution=ignore-duplicates`. UPSERT works best when the primary key is natural, but it's also possible to use it if the primary key is surrogate (example: "id serial primary key"). For more details read `this issue <https://github.com/PostgREST/postgrest/issues/1118>`_.
 
 A single row UPSERT can be done by using :code:`PUT` and filtering the primary key columns with :code:`eq`:
 

From b77149d48e164ed19980272ed79530d30c34b53a Mon Sep 17 00:00:00 2001
From: Hao Wu <wuhaoecho@gmail.com>
Date: Fri, 15 Mar 2019 21:52:38 +0800
Subject: [PATCH 227/652] update doc based on postgrest/issues/1253 (#206)

---
 api.rst | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/api.rst b/api.rst
index 41b7f75e2..20c411365 100644
--- a/api.rst
+++ b/api.rst
@@ -970,6 +970,10 @@ You can make an UPSERT with :code:`POST` and the :code:`Prefer: resolution=merge
 
 UPSERT operates based on the primary key columns, you must specify all of them. You can also choose to ignore the duplicates with :code:`Prefer: resolution=ignore-duplicates`. UPSERT works best when the primary key is natural, but it's also possible to use it if the primary key is surrogate (example: "id serial primary key"). For more details read `this issue <https://github.com/PostgREST/postgrest/issues/1118>`_.
 
+.. important::
+  After creating a table or changing its primary key, you must refresh PostgREST schema cache for UPSERT to work properly. To learn how to refresh the cache see :ref:`schema_reloading`.
+   
+
 A single row UPSERT can be done by using :code:`PUT` and filtering the primary key columns with :code:`eq`:
 
 .. code-block:: http

From 3b8ec49fba9700d0718a8addf8091bac5b7472c6 Mon Sep 17 00:00:00 2001
From: kraserge <kraser@gmail.com>
Date: Sun, 14 Apr 2019 19:08:48 +0300
Subject: [PATCH 228/652] SQL inside pgjwt (#207)

Correct url https://github.com/michelp/pgjwt/blob/master/pgjwt--0.1.0.sql
---
 auth.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/auth.rst b/auth.rst
index a0ddc2ee5..0800a0810 100644
--- a/auth.rst
+++ b/auth.rst
@@ -155,7 +155,7 @@ You can create a valid JWT either from inside your database or via an external s
 JWT from SQL
 ~~~~~~~~~~~~
 
-You can create JWT tokens in SQL using the `pgjwt extension <https://github.com/michelp/pgjwt>`_. It's simple and requires only pgcrypto. If you're on an environment like Amazon RDS which doesn't support installing new extensions, you can still manually run the `SQL inside pgjwt <https://github.com/michelp/pgjwt/blob/master/pgjwt--0.0.1.sql>`_ (you'll need to replace ``@extschema@`` with another schema or just delete it) which creates the functions you will need.
+You can create JWT tokens in SQL using the `pgjwt extension <https://github.com/michelp/pgjwt>`_. It's simple and requires only pgcrypto. If you're on an environment like Amazon RDS which doesn't support installing new extensions, you can still manually run the `SQL inside pgjwt <https://github.com/michelp/pgjwt/blob/master/pgjwt--0.1.0.sql>`_ (you'll need to replace ``@extschema@`` with another schema or just delete it) which creates the functions you will need.
 
 Next write a stored procedure that returns the token. The one below returns a token with a hard-coded role, which expires five minutes after it was issued. Note this function has a hard-coded secret as well.
 

From 7d8bceea1003676c1a68dd6e33d38c5365da8124 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Steve=20Ch=C3=A1vez?= <stevechavezast@gmail.com>
Date: Thu, 23 May 2019 17:55:07 -0500
Subject: [PATCH 229/652] Update README.md

---
 README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/README.md b/README.md
index f82cffcf5..f60577cdc 100644
--- a/README.md
+++ b/README.md
@@ -1,4 +1,4 @@
-# PostgREST documentation
+# PostgREST documentation http://postgrest.org/
 
 PostgREST docs use the reStructuredText format, check this [cheatsheet](https://github.com/ralsina/rst-cheatsheet/blob/master/rst-cheatsheet.rst) to get acquainted with it.
 

From 3dde972d31519d3afc319015bce1dc0f73adeb8e Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Mon, 27 May 2019 11:28:19 -0500
Subject: [PATCH 230/652] Add Nimbus - In Production

---
 index.rst | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/index.rst b/index.rst
index ee17eb075..07bd59d3b 100644
--- a/index.rst
+++ b/index.rst
@@ -216,6 +216,10 @@ In Production
 * `eGull <http://www.egull.co>`_
 * `Elyios <https://elyios.com>`_
 * `Simply Connected Systems <https://www.simplyconnectedsystems.com/>`_
+* `Nimbus <https://nimbusforwork.com/>`_
+
+  - See how Nimbus uses PostgREST in `Paul Copplestone's blog post <https://paul.copplest.one/blog/nimbus-tech-2019-04.html#products>`_.
+
 * `triggerFS - A realtime messaging and distributed trigger system <https://triggerfs.io/>`_
 
 Testimonials

From 93e457cd89a1cf2b7394b59dea32aab4ceab9f27 Mon Sep 17 00:00:00 2001
From: Anupam Garg <1021183+angarg@users.noreply.github.com>
Date: Thu, 30 May 2019 11:57:34 -1000
Subject: [PATCH 231/652] add Datrium client library and testimonial

we've been using PostgREST in internal production
infrastructure at Datrium for a few years now.
so, we're giving thanks in the form of a testimonial,
and providing a link to a python-based postgrest client
we developed and use.
---
 index.rst | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/index.rst b/index.rst
index 07bd59d3b..3d72f2994 100644
--- a/index.rst
+++ b/index.rst
@@ -167,6 +167,7 @@ Client-Side Libraries
 * `lewisjared/postgrest-request <https://github.com/lewisjared/postgrest-request>`_ - JS, SuperAgent
 * `JarvusInnovations/jarvus-postgrest-apikit <https://github.com/JarvusInnovations/jarvus-postgrest-apikit>`_ - JS, Sencha framework
 * `davidthewatson/postgrest_python_requests_client <https://github.com/davidthewatson/postgrest_python_requests_client>`_ - Python
+* `datrium/postgrest-pyclient <https://github.com/datrium/postgrest-pyclient>`_ - Python
 * `calebmer/postgrest-client <https://github.com/calebmer/postgrest-client>`_ - JS
 * `clesiemo3/postgrestR <https://github.com/clesiemo3/postgrestR>`_ - R
 * `PierreRochard/postgrest-angular <https://github.com/PierreRochard/postgrest-angular>`_ - TypeScript, generate UI from API description
@@ -221,6 +222,8 @@ In Production
   - See how Nimbus uses PostgREST in `Paul Copplestone's blog post <https://paul.copplest.one/blog/nimbus-tech-2019-04.html#products>`_.
 
 * `triggerFS - A realtime messaging and distributed trigger system <https://triggerfs.io/>`_
+* `Datrium <https://www.datrium.com>`_
+
 
 Testimonials
 ------------
@@ -253,3 +256,11 @@ Testimonials
   and database design."
 
   -- Eric Bréchemier, Data Engineer, eGull SAS
+
+  "PostgREST is performant, stable, and transparent. It allows us to
+  bootstrap projects really fast, and to focus on our data and application
+  instead of building out the ORM layer. In our k8s cluster, we run a few
+  pods per schema we want exposed, and we scale up/down depending on demand.
+  Couldn't be happier."
+
+  -- Anupam Garg, Datrium, Inc.

From 2cc48151dd9d7fc6c539110ffbfabe86c16feabe Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Sat, 15 Jun 2019 18:10:37 -0500
Subject: [PATCH 232/652] Add 2ndQuadrant as Sponsor

---
 _static/2ndquadrant.png | Bin 0 -> 90540 bytes
 _static/css/custom.css  |   8 ++++++++
 _static/logo.png        | Bin 8149 -> 191528 bytes
 _static/retool.png      | Bin 0 -> 63627 bytes
 index.rst               |  12 +++++++-----
 5 files changed, 15 insertions(+), 5 deletions(-)
 create mode 100644 _static/2ndquadrant.png
 create mode 100644 _static/retool.png

diff --git a/_static/2ndquadrant.png b/_static/2ndquadrant.png
new file mode 100644
index 0000000000000000000000000000000000000000..3b6a75589173d2fe9056ee5c3ec9a758b19c7529
GIT binary patch
literal 90540
zcmeAS@N?(olHy`uVBq!ia0y~y;MmE)z!bv4#=yYvSvxI<fq{XsILO_JVcj{ImkbOH
zoCO|{#S9F3${@^GvDChdfq^kHGbExU!q>+tIX_n~F(p4KRj(qqfB^(-Dy%AU3vyFS
z5)~?PbMlI<Dr}X&Dy;H~tw6&1N(x{lCE2!05xxNm&iO^D3Z{A{dIm~%TnY*bHbp6E
zRzWUqQ0+x2X|_rkB_#z``ugSN<$C4Ddih1^`i7R4mih)p`bI{&MJZ{z#g%y_i50qe
z#mW#vVCJ}_7AF^F7L;V>=P7{9O-#x!EwNQn0$HR00}ywXWTqi($}5I?D>*+`A0(r1
zsAr%LHydO;NYu)|C^I#$BoSo3ouLg_C5jl-9vgj-<w%Z!_!KM}<l<(>Wup%c6Hxfr
zarqolk7QtQVDNNt45?szbN6(fwEON4zqPu8_RZYFc>BbeKkFQ#Hb-zM><dqLt8Kun
z?T~hD7t`f%fmAUCqcbrFC#_cy5jZi^bzhU}d8XUUncJKL*Zj4)yQI&?<m9_`uin|m
zKQZOMTKXfj`^~z#U8khvI20NfnD7%zMSgtSJzpw(>*{5u>mK%GN+p~36wcl(oo(;6
zt2o=|x@5K5OaJ|I{*+l&TL(>vSfHC*JvZ_9J&$`)Zm;@}->%;D`?E%~!(N`=1-$qz
z0?QuDF^QJW{=d#d)gbkH<mEj^f0w^1DsKJ%>}JV&3jw#F_dVODIW%&gd~qV;_THG?
zHdgP;&Mkj_a5;xUgTpQ+mYqvpd**=+!bdo~W9r{`Kl_&UWh2|qPEFB^j(?bM@_JL=
zno31Sef_ZNujT#QzTdk(=XK4$58pJ-I-THVWD%I5;xOT~isU_a21XVE2YdvRc*UN-
z$)_c+Z)5%(!W2+c>rr@q?$-0FH=a&5-KKk5vb1O|L#twg!&8>5so93SZuras+r*`}
z;GnKhOp)5=ReL5UOkQp`TX_2WlC<f@Yp0*z6=251F(tZTX3VL(`?v5Ba+{Zmf}=|G
zr8#{p+jE}T6rT1u8n~hRO5y#hcm7?s=ihB?uEfa1p<vL?V7&88qiYZWp9(k}n10~#
z+v)5=cRp=r+wo(S^QIzIhV+Dg7k=fLL`$FCrYH(B4dl8s>4{8)94GKWt)Tkbv?*GJ
zia+OM#hsf`JX7*vNy3?FXO0+gdEA`Tf9>n%r*hw}X60{P=`B%f`BPUbf9IbYQj9FC
z^c*I5U;WN-tDjJEKFDQL`K{=><n@VMdcq||I*dAZ9nY3Lk92x*@q6{zTL(;31(s<(
zeSe~!+h$Q@`mS9q6IphZh@EKg6>wl^%w}wgS*KaiM93137Ud5wZr<Cs`PuWMSt<6X
z%Gjr8Pj`QQ_uNmVN*?B<UAxxmS*vW`^ybv%zpT@|Co#x=_hX9XY1CVFl9`c3OjO}S
zYM|vdXM*X%NT}jZ&idpvl^Y$t9bcDrEB^nVwYv{&6E>G*J5{3M=$>A&k@@np=f&sV
zDK+Yy|28Y$PG(z5G$_*_xWlw*j}$+_=w)aOU=iaiC_Gj(>A|%BHI|k+=QgWcRLZ^f
zXRFNXJO5WdJvX(T<(<ph+1biM$_)%m8yOt+-f-f}d*GmRP+;=k_Wjo9a}SbwD?fjI
zvSDIr!RgvX=jHFoeZBrGdXvaS{qOd(e?>9JZmZAn^*!9qq0n$Zg0U&)*n$sY1j;K8
zg$dgm*y>K4(OCan<GWLO{?D4C8}pK9hfIED<QDID@7?P)dXql7emZk^xBB_GcWVCr
zUMvC*2PB$eZg7Kh8(!i(lhA`j#*6lN$MOCyObxhys`}eB&##vwV|zB9t(>M`bgk@B
zng6M&-vu2Q8h10X?7Z{!0VoULFJ&jJKH#=_>%*SO3KN&`|NdC?cGJ)E@%!hg-c{-^
ziTA6s?wzi`NnUu`cD<KYxBj)f^lW2b5*1fCvGkEO!&!pG(SD|{aeI?{D`%|{D{Sc2
z6P}_|yKm)|IH`uoHE!bDcixK5d>-xX<;>8yh)du}(3N?M?-7c=fQm*?$ayuK{;a}#
z@qi$&0;lPL)GKUj=bM&=$Hn*DoBeNn?a@uHms@{`FtQ{yS_u#`v4Mf<C-(~@+va(;
z6BMSa^mFsdcuGC^^y2s4v?(vA-dq(~yjNxd%c&#p{WSw$UGB9jdw1pLt(khxCaOPg
z^p{9;KFGAp{-2)H)Sh4VWbNAa{Lg$$90~=>4iirIvYy8qpP(Gjc!%X$)z?~1tIAnR
z9G?69e%*fZpxXVq@4=5(U3>2lC#A6|kL_@bYLe@z8Lt&zmM`L6({|tDb4B%gr+crx
zCY+tfvc6<e+P9yFZ!bQ6Tfg4$*uGhNdv8y<858ySiM_RdkV1pQO_qptD{^eTstLJ8
zp@MPlQCBASZ^B_;e!Ol!+?<*D`)i%E-Sr1kzGl7@`;!xUC^p4Y^}8Qa+`0KV@3(IK
z=lN+@%<e32YkO7C*FD+lp6*gC0xQ-rIO<(}TOHL0&TV*zc`PMj;+j^T4yTTuT5#`E
z$l1c9>%1?VdVTd?mbvEw?=5?R&Z?~1&vMD;>dlyAqNl1k6dD@11fCqK!=Io*vQKm-
zl!%FQ{;~M+e0}`+qIGdikM1mE+oj@>vF~5yikE$pmrOPBOyBM~L-wSA!vY^BmYq{p
znrCto%H1sb26NV`T-4FqyY=6d)UH2f*K%K7a`k-mAWJRKDpDvjxMtg=C!U}{m<I}k
z*Tqpic>E7em~pHz+MXY+y1lpD@t<_$^U{lvp~wD~8^)UnO;R#muM)W}W8KY|Imu?z
zE3KQpaD=!lh?`h;$p@5j@K$ICb|2V&|L>I@Mt|q3h_2*)HCN^3GtbXYp9CbOtJyD#
z3^6%zWS02k;JZIlVyEfenp$pEeoyxEA*=ESYv$f9%QmqGm($FQX+@O|hor#{#YZ@p
zG1cDo7dfD4ykyURP>63@dGtvPs9pB!>EXoF62IdoX<a;{cW#GE?yo-&-v%DCxh`M3
z|N4|IHlT{l8dOw0e85U5^c5y7Y%o2mvNJl_RN=^N=jPayXH&x_ae2f_dtN%48Kdrb
z>z2aI;7NNtni-g$3M!mfYE$d!O)$|HFh**>sGOt~w=TAdx9FnPt25e0i_a{-`L%TR
z=F3Mk*BIYb$y|CTZBoe+M~22MPJt&uYyU0ViZ3)kQU1X5!N+g?(VX3OcJIs12`@Wq
z5_xIClqFLo^dhII{PdgTLYis*3V{>4&wRV|HT-C`YP7lW4Yiv&`sJT&_kGSf)NR?+
zr1s>%Z4QM1GsdQvQ`Z)6VaJ;`7#LZaL^d2V6$(AG^Rmm!BF~U)HI1}$ztpnlmo~dK
zZSrhlU=kHlII+}eu5Yj)-qxmo!-4q?XDTlF1nt_qb+gLLO@5zW{NB6FFt0ew()792
z=1X_}?wO{eaqQOG-M2q-k<wIh<gBs$sT(Qa(YE#4(xx{DWK=aC{rKFz-Sbjx`qQj;
zZ+;z}qJC~iucrKGK_-rnfCX^}%`T@9&KB(lru92L*Zh3@eO*?}RlV=2Y}3Ozx9yIQ
zyb{fM>8@uI`?r`+`#<0NA%5nG(Y@AkLE=lZpImFyHQre`&T5@(bMszy|Lux|9<~QL
zu`~Y#C%@UDQhsl;z*PThH}2N|`}OtBId;yt7e1!_+rJAfQQ-vD7vT*G(|615aU$66
z^3ql~sJZ^QX<k{x>9uR;{M`HBxBma0+Y==tD?t6JpPT|uCe1fhRRk4-AOV~y)m3!I
z1ktv>u$aAjPrT7}%{BSz#?ZKdB`Yzs{T5!05EEO}6pRm)-0gZP@IWZ)e1JU5DpiLG
z-dlgozNSRLYKH?%LOz!`Hdbw#bFtXkpx)+QUFC+0Ik_zn?yp)Hn4W@K7k_GfxCtda
z1rEmFg<+;DGoHL$V^U|oeSKK<>bt2-v2ywUcT8QvEA*jwo{DUyfWrbSCYGHc%hzXW
z5-MRTL<>5b%%*WFoLpX+SN!$<uY-$Hch0))v1x7089U!eeI^_V0kVx%rL(-e2|12|
zv7X7wxbw^vqtAiwuWwfgEKfW1Q&^_n(lV#-w$8lR)C)$(PSvN?#>}#QANl#w$<5Q<
z=iBeG-SxR{l6ZL9X_ZEgN#Y>42Qi&_614K&vW<{X#~m>bycIs4QITSq^!f4WlljX*
zjm`LVU!{d!7!^mVuAR4e>$ZQ^?+-^^_t<oH!8FeW{*xAYHZw3aatS;U$~YdNODOAT
z%xoy`oOXYrr(Y3&k)-GRa_i^Qv#0ycEPZzQ#om+ucb%<Zn{iU}Sbb1-U;Y1gyNwo~
zy?M91qLqOu6cnAWsu|uAYAiO!uw><#22SYSylkd-tD4B7M!jn{zP0qf-@DdZMztQ)
zH#cHGlh&lG_wVQH>zi3#dXQL7vE{1FRCG-%s@!#hNAu-Y-?U;&uSv6w%gjA@1<u-9
zA3kgG^UME4m%rO`{wEJ3%PLKW3Erl^=Z1m07We|cft~U7B-Z?h$IrOrJa=na&F+3u
zX`>y_d!jQvedbi7e>Q~yK2FP1mQLbgWI3heFu^;rYEl{Qc!XpghYw6bdnRSHO=&dL
z{oh---1F6hlCo(U631q_9JDSC_kS{FNgb#P`NSdcBxv5gC93#b2&#|-b~wDBy*h7_
z)+-)O(D;Lz=j_l~OE#aA$lgBbO5)b-s~GiOZ@zr1f7h1FZ%URpFf^_LRdrkCmhUBG
z@&jLmD7F(b?@tanz~^J_xogcO72Xqt$4n+)IVgGEZ_2ryevrEJ70AH7cFT_vG%)bM
z+8KU_9+lUednUyCM51`kf_2uLFWKDtw{hv_%V)fn&)*ypD5QExA;6chDQ4Bp_gkb0
z)ps_WHGe;E(B3@1#w%#g`<pQ;21{oznJ09_sPyEbBb#?fe4e+oYf{H#w#F<_KjduP
z@~cERQtGx}#Gk%%O_L0AU!9z@(cRN%>#?_fUf)xy*Uv2x6Aw0KpZw`zEsKCdgM#=s
zLM{|=P)KjoSKnVc>D;rV9_t$!+sumAC56nn^4Y}GR#hS`XToVvgKomx@50yqMx^ib
zoG~qhLm|MCu_;FD#!C}PLgxSBK4Uoh^slV-bx&3wGxGLs+I08X4%O~;S>e0hR!!Qq
zdsZf?&38H05;Jkle-??NWhFP~w`2zUmhCKC`ZVs$sVkDpU#^qy-ySb_LdRtG^?aX7
zrOkWyq>D}0bf{@zV4CP4%TB1cabRGKXDW+la{T8Pw2P%_&$OFC=h_Y$mYYekb=<Jd
zU-sqEp4*nw*O)y!>G$g9q_VwUJI=b+28gqR+pQ&xX+<;N9R`idfs#HXM`2?*q%jF?
zDAJm!nLkPV!M&r5Dkry}uzqTA;A!loqPfOz>;L`ws*_oDNwLA9l$E1sW#0YEMT8vA
z;qc(|$;8_dzYQxx5Al}FG(X^atLD$w!w(%lZJR8_$g)buVS@M6>iOFU6)O$`Oxn#;
zV^^MV{d8(aIcUV<<mL4FM(g^$ZJN8Uym(Z!cKzFDjSNg2Dnbe;R0V}Q3AJ<?8sD&#
z?34>PE@rK<NRG3=ckeZ5ob2Y+oU(IK{}#X9tGxF7n=98fRTdmKJHLDG=hx-nv8FQu
z3MW$81mp?1mw~C01Dwek<?YWzUOShyzD`VE*yQ;%O_lmjZ=SB3mfu@x7hhKPA5=Si
z&UMaW5m>Q{!BH>tK68dWp^BMBS)oyWE-O>)wcf(_C1KOu@4q+woY6CF@l(s}|L&(I
ze|lbdL;g|Oxy`(ppo%$}qbO0IK*N=Rk%dVp!r+2y^oC^iXZ*Z&C$rL~2NrZsTm1Cw
zdAEksf6{Uq8JLtCf4$)RPpC!1z{Js_xS&x_Xob?$!uMh;CbG=mA<J22X>d*^@^N3)
z{g_fvfU<rvlDd(^o_AexxAs9@fAN#b_u3eyAANg6h>;}(R7NlpN?Z;K4vmQmPOoHH
zQ?j(GSdUZ0G~;f>XQ!s%xHaEixizKPNj>*lYnt9X>!QtZ`*ml+&d%aZ_X!qyGow*$
z^QZl-^5UCngKsJ4J_IEj9X*E$ryrH&bYjaGC}JsE3mO%r&xScSh4d{^n7J@@X8Y|a
z9#efe;|z_IPrvT8^fc*S=J~R)X6Lp0u_a<Nr@V47<4_0?Vr+`>x-`**8CEpS2zT)7
zF@N><*R?&jPnxCw|MT_r%{{j#%E9DOBTP(Kf~~_u-uCwG>5&n)CY@H=yh|tShfuWV
znlrP{tG7qRgR;7V7HHW0kcS$qxOR|W0u7!lj(>0d=73qs+`DbYdCu=nO0aE;sMIUZ
z>XF-faq`c9dslr;jk>(|b?=kDKL4UkRbqP|o{2QMy3+W0+R-^)w&!LxeVNsz4l@%a
zFmzNud_DZIv4>Iaq(rQ{(XB|W%{k_FagtY}@90d|HQK2h;0mggZoJ+CE0VeNKfL(8
z_nEIkcc#~ZPL{1RmWMA}f4S$B^P%WPVW)Oq@BcCP^>j_!i$$v1fBhe2p6Q#W)TpNx
zxBR**qv5A}1_H<CTBV;iVR-g>etWFvQFv&ghSoCy3AR3y$A*V8!luu)G&^syvX6Pz
ztW3ji(>0A}DhFhOs)@UQO<-Z&rSPHR_i^3lF~N`Awy9LPq@_;08S#!~Q$~*GjsDpV
z61$DL8ZO>USTs2<+3%_6^aIm3{GM<NTbH6m)qqEZQ}xEv2scgZc>lWBElXW;1soRS
zfQD4ox@Yo3bGAsF!}|j(co*G_oOMZJC->o_#*1BaCvTV_WV^08eof`NM(e|=6Z)S1
zeYYTO*PV}ni_R_6#1{NBIeMC6OEf>PzV&n;%j_*n7JT*L+CBSaD^IN4$p=pvy{Fx8
zeJIMrk)p0}ogdsCf*A5cq{H8C{j5y~F07N8W4ctYa!$jqoKH5X@g5QW*QKhr7)89?
z)b`${WQi-5?$?S{4tu6dyluMdT2ES=AMc^MDW#`&hoz<c1C3;4-JBE{$Z{*_;&sWe
zZ@o{}rY`w6L0ac@DSPHCr=uq)%#7)}9DYRvl)@JrV7gdjY`T4-yYQO>^Mp<3w|^;0
z%}DUR|E+xO*0tJ~?_asoVJDZpOHc3oQ<pzKL)YpX@BQ;5a9ZB0E3tn&8m4cI+XKt0
zq5>U#s;~dL#rdX|?cK9P6W-nT@K31Vxqel~eAe3Ds{Q*!&&s{^ab{DJHj>hOe07t~
zua<Tf=9)=`JB??qeCjhz-u`mr^xt3qy{z0`Y?ml}4>T84B&cvgRXmN$5gZT)WN$R;
zSx-KGSk_zftc};Ao}Vm>CZDW-y*4nRdydMf<_8~tirif`C**%k>Tmmgrnq1CzgW+S
zIltT^3tEzCY&)>vTK>tOM_<cC3(D_$7NOvZNJUH34P>led-eU22h9a6xWL4+Q)Jig
z6*jOW<M`m@=IOhcXKp<DEyZopi%$%Vx-Y*(%Y4{$YxVy>8P)G=ebXuuyRMX^oMZ(B
zFxbWDM56#JM-k`7@D;)^Q{x=cb0c40{my=Di^`Ixn%noK-Cp|W_npY!F-@^{C!bib
zpLsWFt@%#e)!hT<1_g2XS5siIu~Za1N4aT=-|a7FxaY2KeK4(NchsKwT))m6?e_lt
zar55AqT%`fKVM&;{_|SXB|O!%0(WDS*vv`lP^T&cm^Okcx>T`=i&sbeuU9?s$o1+i
z`Go50TjjUdtK3++_@F!EwTW7Y5XI<K9FSpRL77W?u&;q_yUo3OuWvQ}be?`@=YPxf
z%mNBGR2%#ja6$44h8YY@96I_3id?tzd{vsdZwvG74aZEs>?~fUSkCBv{%h%?cH{JG
zvy6SM3!dFsGb6b6-`Dep*Zn&UE2p~j7Z^8x$^OgCnWwm6sm9%v2lcl7cS<Y!IXAVZ
z>r&<wVcbzC-FS+1C#c)^wXSxxnZem;MxAJ<O?hm}66tqdth_VH_WR*kb1!}qdZRQ^
zuaK{3`ge`h$v^+ZEW2nqRb$rWS<$wCK|_&l@}Kmf0otOy;JDE0y;HwUeYrpCiGkvs
zX`w694kt`kzg?YQmHoH*bKdhkPHUI1#2pYKVGF)E>h*80zf*M1^r_O7X`7d2RzF+$
zEli~4(fd<Z`owfgEAmvh+}>%J2{9Ba=FdI#8#Kc=^Q&uhCp*LyiJUf7+qUZ;7s_3E
zwJO4Nu~|3AiH$d2UyZAc?-T#Nf6kw4kt+P#Ao&kHHG{*d@ehla_!FV~v3qxE8!s_Q
zow+cUQ#G<bEm$zP-cYyGDnx(UOCAI3O>Yjqez->exYU<NJ+_m$^)F6x?<`UhggAm@
ziPi$g&65({`?Sr1&(1jGBrqY_;JaVn-YD(ns_vU#on8pN!rg2>P|+B~va^RNI%VR*
z*qyt7RhqbaJrLA=y!-LN-GLXnw><y4`0ZZ*YctoGzI*YxeY-n<&?h#Sy?O>wvpnj$
z<Co5}lx$PmP#pUD|9ZW|FF&7bkd1n}0#;pMON0`^FBGPO=6?9r<n}T}pAx)oRJVP~
zHruHyGvZFH(bHelAkJA9DY-_jVEe}k{d<t2JRuUCg?#<f^E;<o#hBS|({F3gOH?ub
zej=w~*-@XWqc4oJU^y8h-UDPCqb|-`RUUF$c3Upz7mMO+|N2?#Pn^-cTIIs1e{A2S
z-My(<f7iuyWQKY-K*zl%tZk6XKJlrs{>c8FH>bJ2Q{;NFDP-O67dP+Kb!=VihhYai
zm_tGr7#Q!Y`F+>FSNnGUY1ym0i`w7riYa*{$o=Mo>kLqPQeblPy{P{W_T08)hn4xy
z#5?-Tv%=jsu`FV-{IFujfn8glrE{*y`*!`8Zr^&XedZTxpk*;?g8?+~uE5eX|D>zF
znQh&+>lY)vOLocyM)N!A?eSXk`pd7?dw<QmSG&&mUQ4)ZRtvZd<gkNj7tbP@{5f79
zG#K?BmIc2voviTa`PaC=A!+AspW0i%<$^WELXxdD)4_937CA~~@BQ^}>dXE6f|KLU
z2uZN+e&fA?+j#exOOJ{n4s~&0b}@|*;bA$(dE|81&i$$vp0<NJ#>bXEw1ucZE<zW)
zV5-VpcW?dks>S~M@7bra-CgwF@`^koi@=F+g%b+mI~y(-*_JDa&z`Y0_2b`%RySO2
zzVB4nY@rejZq!c+SFkF4f7QC^%*Q=@)-FkX$+@H4=y1a4)9r`DswyYJY7M0HDA3lx
zw&O<QPv!HsJZAo%_-R+=G|xzItR5BP$l9qim+jxjZ*k$%I4jiGu<Tf}Ilpsp%ml&k
zufFQuMUY&*;0Mz#l}B0mTUVdHD6-#li-I|0q+M|T>If+#^Fl7%Bft-$6lN%h$ErCr
z8UC9#>ut>SKJ`qlj@7@d%lwR^KSA^@s9=)%Q5pJr{;B-OX&<xvdzl4pTx8JXox-(1
zFN6^s5!i^vQydliMHjo7ix$4TBKdij(JMLWRp(xvU85&w-M9$UrDEB`b!30zI_;?w
zZl0@9*s!AE_7w-szLjEMldUl$1(ph)iGPrK^6AOV)3NUs&D(!@+I^?@QRVgaRok}j
zuZepCN%;<iEGh~MP3KtlF-(6{5`DsS>faL^RZ>pay4*#MXPA*-F)!7C?^kCXzpc+d
zXXE;sss1~UMP%32ZP|PM&HAs=&+neIg!TufL?%c)__Xd!?wq@3zXO|$o|xaC8<o8H
z{y)dFCF%L)`bR<2yPFrjKc!Q6_TlpAPx+$F?QV^FXZ6+h&*jto0n1}xJJARuffKeT
zQWxL674i0J{}Nqm$t~?V&qX#Ivx$GZ_Lb}jUA;4BI^Dse1&xO|Li7)~Hbu_4{8YjJ
zY?tNQ@2|m~pU5uRYjdYuU;O_2tg-~@Ydek^Ff8LbsL!&?=aymxC<SBWSa8%eim(>(
z7IiYmgzYXm|30lNS7G&1)<yp=IEcS<h`Tk32kcNM;T0YYr#G^!D=Q6~w!U7jtoGZ%
z9iNu+n_NisX3C#+Y*uV#+%d^`j*^c%9|xL23umNM4viaCmLl$=PQAP@G2u)xrz!#$
z^H_Js&G;Gp>m~cli%Wys*e<d`Vt<}Z_0HEl)!}BGGZmjsJ~O2#W$w$me;>lqPjLS-
zoTK|LMC<0ou2+Q%CpU;^=dMmUc%Eff2K#619t8PPLAf!eDdy4ca?=A#r<A`<yJEU;
zQ|bF9`*|Am_WjWm2P@HS)R=H+hhNlB)(PiZSz0`*v*xZ>-=BHFBT;^PQykyEzweg2
z-TzkZE%L!>fp_9}A1$0S(gM32o;m8V>}c7?-LqQ0QSWg`1wY7&1r|)I*8eQFos$(w
zJT}es+XT>vkk2;j3;!3@73b||@s?V9n#aj~Q^@mcmD`K=b#ULt2tshd2__CWH{LqD
z{ZjSv6!96Cnl)Yg0vC9%76@HB30!z^+!2~^poy2)V8ZsUJuZ)03!i<T>iGA6ouy^Y
zG}8l5!?wHnm$psUm*<O~p8dD2_}Tu_$YsAXyFT5L`dqSg`>m^gH)@nFn+Gupn<HBE
zCPYr~_S7?Iy;m=Jz29MaPvc2BkRKJ88F_UsFf{XQI;VV^d*yFw-cJ`2`XB13S5A=*
zk+k}K@;ZMzd%QoN^syWAUD9tJnT7vf`&!2oG;<5mj*>6INl(B*fwj@6DaPc$(g)%*
zf)?m{i|NH#Ezmi;P!{aGrDEWPLp`^35|r0BN88Pp*%tZe*)sOjvgv*cn`75heoU!e
zUwc_;9=>+%BBq%vJFirK^>frW(0vv0>}|?Q_UnH^YXwvDRC2+qmo)YrSe#z{+l`5f
z>-waM$VIwM(aXNy(YWE7zH8zX@yo&OUss-S`TPsi$4I=|g=fkuz^3s^bIcdN(49X%
z?5PmBQqgtbSLoYU9_cS;PHO9i`1ykxxI>+N_WV7q4FLzgEnYqIe@JEIBG(%x5*euh
z_a_~g_`N&leYSLZuKV}k_@}{oxbhqWQ>uW6=?T~O0avX<Pct}6zvJF<_G<lW_V4$f
znnE<~V>RKpELr|!x7_C`>o-q4aYiLN{=dzebDL!|lN-TFbeh4fs|t#i-~NOMh|iQg
zU&0}!=aC=i3(2bx7ds%uT%!W(tIVrfyAE90Ja@~d&oj<%EPUqkj?G^Bick3K!1veB
ze@W`HoB!p4b#d%jSL3-?*p_LE-+r?5>h2!tBE{D)m%Qcrx=)8u@$H*eMU1Vh%%_6e
zUK(2)^d?8lxgYgA&}#A5pHH@54l4KZ>%FX?Xvub0>K!xd49|e3wrcI%hd0l6b|hiC
z3YNSyraELf>aE`UYvPF)va4FFJOoZvb7sAa$~LV?e#q_jecRi6ZWkC7IH%m~YL52_
zw!6LaZ{@~$yPNa(|6XaW{bG4U?xJnrl;<j1@g*leo+*Y);Ld_W@22akx3icp*|T|W
zx%Kl&PuH<L+IHlJ!#wsno2>YgZ`$vIR)j6}aV!Jt#Y#+xQ<$nCzW0DiP%G!13kRmn
zDxSMXPmf1`U&&FA|He{ZHhp{Fb>>@Ad9Ug2Phk(lleb*E-v4!V)PCjlv#!7Yzyk3g
zKa*AWEEdx(wj#Fq6UDFX42wH1`#Ef#&dbtemN(V?mfFhR)Hid^o4z@0x^5Ovzo7Fv
ztx|9TM~*>=Q7i%u3L1^KHf^04X)Cp9i+}aanoalOn4;}Y&b^nfcm3D@^VcUIj-4+)
z>q}GHwEs^JCwjlSJR!BWZo)VD^xO$a|Ev!mSSGSrMH`Y%o{7CUA=b#=_3D$$wwIrG
zB<Eda%3omoI(A*Gm%_#~SH!<1$4-yn+TC>p_rlM{4=mI8iX_jy5`4p|#+!FhL5MRa
zv&POcr@id>nrrUwZKgfto)vWd|D>gp>-h7{D<hP7b1q3{%GDjRh6H$u{)d$6^|HTm
zWET~zVHE#9&E$;S@<*yKHcn+TIsNaW_X&}(X*VaOb}yNSw?JBXAjnbgaO2OpOIn}K
zdFP}jx98#mF<zyUJKwZ+UG7e>+I{-ef`9eg0&h0$`<4GUVPV@QXh+GL<AqL<(2-sH
zUBqtYYdNl#Iv^EQko%37e|d|(dVZ>WXWD7*<w4)GjAFKBJid2(555L4ClfdO&KEjz
z%-PL6MHe(*sRpEYr{~SQ@NU8Vf1sYK$&I5|&(uG8)T2`@@Z#_+aZoptYfD)OXaTUp
zf+b7~&nqo&T=mO3F6f_=sWx8;pVfud1rMFx28M{iqaP_#gTxMOcc{I{wdU)q-$Fj0
zN-n-NzV*(j$?4mEv6N@iBH2KNhS#jM?&rUKORZcmKYi)<&pR(WEMGQ%lcp$0_kt`Y
zp_rSKQZve$a?Kg_4wm+^?K)AX{I%$P)9N{49!+haMLd#n-&rGFwOYY-93~+W>k!_k
zStY%qUS~tVgzj^X9#t*W6&5&Kap{t3{i$m^<LzbSP8^-NZp&(A@eDKO?E8H&Gct=3
z)i%T}v;wWG=4Acy<M5Y74^A0GyEk~x_^Y&)%kDzzg5wp-6#sw3ngc*VaKd51iq!{F
z90Gsnh)1pSNH3f?Z9V&yUyo03J)I`W9OHKEmRas%y+(s7{VDZt4{UK>$^8{<md1LA
zhU4<)H&}MuiD3EV!yKD(Yl^(nnt4-i3YI?GC-B;BF79HA!!zNX!t@L=ap4O(dR2ih
zpKPeS_jXP@%WT)!Exq8?uV&NZH=U^Ov{`&JX4;K;zTjrHzznSqZ_DjX=NPVEuJ-Ax
zBBS2EC(rfFUpR<o-@2INTD-lB7q^uw`VQQ2)N{P+8hf$ZE8g$ksk!?S?{?;__gQUK
zZ?*+I?5L36sC_&Cd2HIDPkoOWuC%Q5d={&~SHh{65D|MVyjnZ=y+a5n#K7LiAQ~H3
zpK%p&W{FMjV%yR4ZRvw|F58~9-b=M#B@dkxnK11Dr~&I%mwxG#{@$85$4_tlmsj<3
zVsIRjl!1;h^WO8T_dI!eBV5K`^}3QOr2c|rZRA#p!&jDPTt$&@*S>0<Q~KZMn{v6Y
z^x{UnYctIM{Z?LgaKW|w)*$g$plJ(*069i$gSQOP#fqg_p@}<>FuV<38C37vAN}Td
zh>^G9<c4%zuZ>evaHU6uh671V#jHCm9^dK~oqR8>==$5`pj1(1DQ3O=yn1`C^5$DD
z7rGi_-f%CJy8`YpEwEv_sH1o6P0KZ<*D>BrzW&au#lL#$8Sn&TofMPWAabtx=Ep-X
zxwD!uQ$NIy0&^T5DTwbqp|ZKn=IdRi>^FMlzW3j@p3eXETk%fkn%~DKr|U;<dzknA
z0~aXUC2%$hq!&)SzuO$NA|z^2WR6rv1DjUnfgpveJJ+#o-Wd}Nt2-bCHA(_$v}WpT
zj(Icnf27qM<Ns%4FPHz)uM)g8_k>^51i5Py${~tp#4DVMjCpfBLu~8M*@wj%xsEV;
zzni{b)$trX$5QsGkd7*rbiv`S5IEtq+vcr_DI4w<Z|&b-XJPXprahti`U81RrmX7q
z3rtydR=j7?0(Bs!xFjTeW6nN#^i)FY{hbG_RC`~=tc%@R>UqZGlb1GsTCu11q#B5O
zFj5{P%PEx!8Yfb>Zh!T+>D;LW_q2p-#Bw{E8{Qn(`7}@Y{MUzbzZd5?K{pA!;{uJF
z@J5Qg_<6Vd@4ib3mq5*+Gx@q2w%m;wVS8r%kK}&8rT1pcyMhmRb^?fch&*}J^I7VN
zlK9Sh1%aA3`Cez8`yKnf>_K_Gr<$u4D7YIZurkd#+9dhZ>0V;cirb)#3&&cv=3HEG
zEr00+lTBDW0`=hn6DH&4n39!B^UH%?U-`Iq>p#cLBgT0iHI2t)(qqo_yvaT*$@xP9
zlmZwUJDD1FCRgmP+vFo?eCjTn=IhTFrs+<4{NV44_Y2oN*aEH+utbjoL!%{Y8r#kv
zajQ;9-R@g9VgBaCP``Is%ieDPn-@HN=7(r@FYr1Xja3Jt*1xL_+jP53=uP#3o}%rp
zr+&xuTV|j8zoue)%k^6M?)$5_{UJpZHa~sPGcZ1J^m&l0Rrl%XlkZ#Io5~f|D3Dex
zdE@ljrj3EI;Gl9~VLP^kX=T^N<ca6i+usJfa<<(h{^QTXw-cv4stnsRyX@4)ir>#f
z@vM?wvF*Sa1@WELJ70Etq!)e+ExUMn>$%F<M<*lefBRni-S-PLP9G{(0h(c!skY%g
zs<0u_)+tf5*48O%p4Wdlx!V2Lb!@G8ao5WVjSjU@vyR`kKb0esR~t2p$A0&YnB7;b
zGb?oz7L+U6-@5nv$$O`TQ)}Bn1Gou2|EBGjb$bQxqX*_QmnM7fn{9T*E$w86%Aa{w
z`?i%lI}=rGRsb3Zzg)Gy?pTn~b*t8TqYc|sf4gY(KYqAIZsC>oswXN7?rZkXfBQFY
zP36SkiNW0)!!N#ZySuXUhX81+k8?svO&VzOHco!J>HE};#qYoNO#il6=I-2np_7I8
zcHRjsUbWu+c<!$~@$ctvQrYPBAtJ<Ky8E=hD-3Vd&o$=#c{cCJ&q&Mj1+zDQ-gh(p
z{hQUMm$x!k>uu(8|NZVwjYlJBO%`Z<NlHx8>awS1J-x@B-`DB8Iz@l_|G8&lyvMKV
z`_At|@;Ge!i;CZsY)Cr)b6=Oq4|`CILJ}tzmk)2z#$#_!o!qy){k6e|tulMR+@EOp
z?P}3ZojqUYFfZbsez+}}#jW{T(I#z1mUV_+O7-W@Ui^IW|2?bBX)fn(7;^?#T>f%+
z>4q<w{4B?~UgR)Koe^T+bi>W&fKK(qJ%+z*cgh|p`2F(+PyW3<Km9hQxqqJIAigsx
z=}hQa{YI1OU+3JFnQcGaT*<b7!~S~@M4!%#+pxpv@AHLMu3z=Bp0X>T{|{?e%--76
z-@Ai8*)(6g84}WzoARM%e)8j-ij$&^M%*tp&YUNF!twGn8SUJYg_GvUzv#*Q_;Dr+
zTa5f--S-9N8yxtrF4^;<ytd@dveY%-UYQ@y6B1E=xodGTU*G*{?^`!L6_|V5>iU$w
zDc;|%w{6LH?-O7Ax%>6s@bYc1+uxLS%9;OOomaPaJ>Qw^T2rh26H=Man?z(Q9MosY
zP;F8bWLheE;q%pu$}-NB&f_+V6fVkM?w<W-k^Jt&&+lvWbzK%cSFkSMzU5+s$Cr6i
zmOj=ozaOr~*ClyZMCE?u9f6YY{_vYzJxzPJOu6Wr_p8R|!1R5!&lUF{yxw?mG5?qH
z@cEnN`(1v3M@bkMS>AE`@D@#E?s@i?_fyqgqX^p*tJi#*7X13e!YA7CZ!aIzcvp8S
z%zl?b%<f5y_SY}$5C6Gd@%csnuPWswo3!7b{kfy`l1#4UDev?r7aW>i6zcqRQ&+H3
z(0xDW(se_htN-HvpKE8F=$rYwk8SP?JMsSKXZC;BeXh=Y^;(YCP5mu$hyQ+!h$~OE
zw@s3d^)v5Z`&%eL;JtO_6tm4e$$DGPnrM|W%{}|{<hOf`HIw)9EnK*IZz%7Mmn{L}
zpc#lnt`|pJL2L6qUfOtZ?vslfZ@yi;xuGtd)sW9<!uy+ZFaA8Ou^~ZZN6y-}MLgoq
z{!I&A>*lCi6mx&d->sUzkNtZ4`dH*tYrFX6&&6hM>bINz`Sta}hHL#s$rl%7&wXk1
z_<n`yy|3B=a~JP+bWRu9xpT*ylD5S=-fcQxKS`i#Th0HnKiiJwzq~kUq0!@;FMfM4
zy;1p~@=ulb^>>q^uI3~+bJmmP*FLl@(D>o{>h{(9*Y25z$1*+t`z}0Hqqd~^_Sy0t
znbW+@d$-hnk}dk|@!|L)&oA4*r78dP?r!qS&&%oFKmE+iB|T{-N<Y4A6FUznZC5Ni
za795}apLa1H8yYDr_GDF7t79^Iw8P6?Td^0_x7ukv*rdix@R$6+;XNW{Aa-deY=DE
zEGs<<?o9}bEz9$BcoaN6(7~}}lOl879E;_yvT=6)^Y%`O+_&akd(pwGYmZkuRD6}W
zmf`+tyYkl>*;;w4ViiYAcOH-SoAE`8t4lxkKHJ`R=Fy|;_ERoZXa8m1xnQgQ*N;Uy
zrRN=AU)=d!PG8Vr!6T-RKDvH=C$oGn7ta=Y5Y%*h?Sa&tPZl08D6+Xeb@|<0tK|*D
z0-E&pU1!;=q2H*y_Jz#h9n1eUMZF8ndE?D{Zqu*r-?Fykdl?*<sJH!W>*I|HduDDt
z@b&1kA8xL;-%YO@cg6fyJF)$R4FAnHEARQ39#>oHVYO?b56jnQ-OKLSY_{vk)GYe_
z#YRm|e4_sK+Xt)GrS<RFxcEfu?D)Hj3mqi8`})jHJt`}jqvzGj|JtjfJMI6Y*~ab%
zm-lb`Zg=wc@~Sx=1toRAS)i+=1)2^VQJ7va;b5iYh4OQyP6srdWuKUA(`Iixzjupj
zT>G~Z-ZxdXzI<z#&$9J|gY$*{xi3<j+5WhxpOXqWpd;n@J#x`0*WU|^e@op^y00Bq
zCoL3OQl%ujpi1%g<8F-yM_=Uou04GB;N^>-ewj!GnEXAv=hW;#zRf$%FswRtylUgC
zkDK=@|9$u2e%khx_3ANqzTOwU!oYZ+shp|rE7P1B&sHIoSrgAzmH1_!Esk`1mu{)o
zn|A5K&G?^wXFP1$bH1AA2E5+>#46JJ+x_Lc<k{=iS^KHpGw-d|d%mB&>db>MpZ4x!
zk5^Ra`!@dG&s@}ZF4>XsuU=Q0$W&>)lry?k^12VoFV0!p-~3g@LxJns<Od9SY_ozl
zyg6A~<}lZ@MB>BOKhLb6J&V*}`}AGwxWK3RGU~5Bet5xVKJ)A<Z-y+5y)L$p7S0K`
zgro`GBI@OrepJ4=8(HV2m$*{ssEquRr}xdC`zW6da&JzGoMw0`TCZ#VQ%m31FI1v`
z<?TPfTz5#leDbL;=RUp9?p<@eL7Z)|dv&Pczp33Ex+_<{Yu_ajFjKC|@x|0F-t47)
zPj|BIE;)7Oz@n{BSCwi0j+C&L+`L01_x;Ij`?S~Ho7TNbf0M3i<U1<{eNFyJOTW$5
zI{$b}pm*u1EIpk*lWD)h>;He=(>#0M?7Q*5%$M$;S`@d4@wk6_e&92ak4G&d+Z_8I
z*Zo;xe)7xym*q2D7faNx6MxSB@o36U3DHv*<F(2H9rnhU)Ct}VeRqcOcdFJp?o^{$
zcT*Pjir;wg`D9{s<Jo7oQodL#)SK%5l%4Q7QtmXzkz`pv=IF9Vn*##ZK70J`tb@=8
zrGt#@cX&)H(@%W1*lD(+{1eZMy?hH^zx0(Wx?(v~@rnPU+Nf9motOgdpUnSMJ-2YJ
zPjX%5ob27&mrqo)ZwOze>g{I!`QFY?|Ey2%uAS1(z{D{nGQn%Y>4ekg3z)q{m+m^e
z_C!f-QTCMS?Ngf<^2q<K+HV*&-}rD+TjcKK%1bAA&B@qRXu05WcP6Xt#2FqcZzmqC
z_^l<^qqZVJDTG1(g{*Y;CYyGij~*8q=S%J_O1m+!?A?jZ{Mn_)i>K`mofEf(`$=_w
zWK7;yZvWnkj;=e6f0s)>nAm8yzrVtBeG<#gC)IPrzI*H1J$w7>?b1zC-hE-3^~dhn
z=LPT8tlh<>*WA6{T~JjgcOw7k6Rzj~I&V+8Dqc6OTf+Wz`BpZyXO)H;-=B%?aM-J%
zQQors>2B38H$A6^^_{DI{CAVCcs5_jPv@o$)6(W@GyjauJhksz)w<qk-gn~iKA()f
zFQ@*=*w1=rp6l-?WeWmak6Ar?yXf@;241D9y{0#o8t1D$^`C#gaMPUN(xabsyn|(#
z*ZhypKk2xvkJ;|*CLQ_8)A^fNuI_qX)I9r+&LgYT9Y2kx7w5{W%U*nQ`{#Sr%0F|T
z-e0xU`;8Z$wfA!;HVz&21;;;uR<EdWT~Vt`TEnvQ$^Q#8<v!_e-J|+z@9e92Q^L*e
zPJ6kaRVJrgHRE}|fZn2|w|8yadD3yx<&0m(l3%i4b6&j>vS;S%hHuT^+GA8Kia#>C
zEPcn<&9=DxcWO;|__{w+^?dehPx>z)k)z%c70`Zw<w@Q#gDesKND;T#6|77gDVht8
zD^;y|v*xe7rhDJq$}=Jp8VfmB{ExR?f9dn;nJ+yjbRWowzxH{5LErbH%w1xe);$lc
zsykYlpZ9F3rU$c;O2zu%g@udG{K`vNxnEF7<BQjSGh=Pm`e;c8=ve@3Oe9~g$^5uO
z_ObHPmshNLciOV8U_31Pqj%c=-!Gn>{y#POjdGvp`!{@hApL{|6PSXVV*c<fc^PuG
zbqddpOGYa`o%H|urKRJzNu%{aT~V1m*Mv3L{w{l~__OvKXkI+DIr^RUarJK>6Zq8k
zelOirsmr)-_su6Z@#}t7pPZZZd1k0;sZH$mtGgxl+P8U&Rjy|jbzo@BVbPKkm>~A5
zFHYndw?tK<@mimg>2{2BTRoV!YDwKGl7DS=!}a{`cl9T-S@O7h^laQ2B^l4CRP4@k
zt*%qw!FsxN*ZXfjI1cJ@3$ks$_`-VGspN)D@%Gn~U6~d)-?m*T02!<(=Ir4u`e-Te
zr2N^$oo~1%NATS_#}$0DE2N}kk?h@x!3Q5qGrTLq`|E1;*I>U{$6uuUn8sH4;=$&7
zTNRI<h~>3$W3rlIZ1wW%&)pWQ{Ad2Zy0ptFW4???snZJfQjRc%j+-%U-eRoXE=L6%
z5)2zHe*8Ti%)})2S$g}_xC0lukDOUx=%>E>`=a95nZEAnikBY0eB-5+a_)82J=N!X
zma|+I-}K*T{g!v)R(gxfnN#B;I=L@&{{St$7SNayr+)nY^LMiM<6qAFb;9#_On&Wg
z12&E1PZxL0KQrs-j`{tzlZ+s3jtIYmoC)3QUT=@t#+_fg=fkud3)cfD6Eyn+SiYRo
zwY+Gz_QWQa;*Iy`n7l8w+&QB=@7)or7mLfczd9+?eBStH*_ZrjyY<qobf+l%i{?*$
zw*J<Fdyy*yb3!;9Pj5Y~ocW^l|FK=ZfBC-0^Jg_MFlBPwu~VDOAf9%}hxu!qT-C-1
z{TBiu1^jBw)1?ALVnd#}^-1o^Gv-@XUwI(^7tboL+BNm|bLQ*ce^@0LpT0su&wEQv
z+mizShWG2M6<RASxg1nyR5_I&^^P-oXWrPp9pWdBP>`Q?8b#Y_>4-<|wmYR;J@eX)
z;`rPYg^zA^B~Ax>B+b===Lv=wu%_SaFL_lU`(@($JI_x)3tjlOy*yT^VQSg@_^az?
zWj^2OQCGzH=C6JI->PjVw&eu#Hh#`~e#c^QquxFF)qAhTzMr~)i9=z-mIE0(J^D^g
zTQ+BAqXd8Yi|R@PV?)koViUSgMOT&YXA?QQw{WTXhV^ZmXXb^@TKK5<x`TSGQS<)!
zPs>^^&X^r{Wcr*L3zIC*u|(evFY>!|_5FXAPR~by4}PV2GX<o7WqMq<x#fopqziU{
z<rv$}D{F3k2=YJPqa1ff)1;Vj?_`x(ds~IOD%UKY%sn@^W%uo8iL>XJN!d)+v?zU5
z;CXbx`IJ?e^IaGtq%=%)1?Q`Z7aU_v)MQ-felpwl)G4lrY5|wqbF<k3`L!Aun7BD#
z7)F{bmOJgL_hkDWw{KI~l8+dl)SWIIeVobacS}sjzu7Z8#BM8_FnIq>I)3z1!s<s{
z84V3=TprwIUAMXZo2H*R8!rEXr{rD!*YBasr{?Mya4mS8cKW27uwCMvd?ucJP}iM9
zL15N_8w%4KKN?T&-n@15g@zUUOs6?|nz)`U>9_V2Yq??_y>oZ2<DTf*vHbH+ip<%5
z@7c>Frq@y$OR{V9w^>Ht6`QdC<FmKd=go_+vHZFA@yeVo-3bkE)T^fdQhy)1O|9dB
z!F#?ChDIi?7e3R^ta!fr@ttM&8WtQszAroI$tQR5^H0h@mQK7a=ymt%L}?qRm%TNw
z1nb#%>M<sDR~tXuwj*{|^se&$r){fBKC5g`WpO(`d(!c9Mn6L;qL2O6y7SXS78D-~
zESQp;W1ci!ZtGWj(aJ3UblN_jv=bjM9jz))C~@a=WcB`iy8KeG<d2t|{#;F(@-fzw
zXP)jd^IYw{!WHXRGiP58`gk*?@!?U`|C_m3H?f>e(X`|AJRnsr;!t~Sr-ihGegG@W
zGm#6)M%D)PC({1a|9-Znnsc(Z{0_a%pLMTo{w2NSVALj4@$+KJGP|eF`EHl~vwx$>
z(rRP7zRSfWb^Ky)V~*Vsn|eCKTJpEb1y$wSmYc6W?X<WzM>sdBNb>t+2EAi{)tEkl
z4&P{CV2Wcs#<o);**0dwX8FBdQ+9kf*k!9<__--(7GK1X)50&W%(V#;inu=6WUs}9
zpt`9i)aK>3%xp1w^F~&-Bkk1hqb;ft3FRAgFW=Rgu%NX>+BHv->xz|R+B}Qw<C9!F
z*Lrj~a4>yro&REnPRpx+_K1Xv>3Yw_Kfe+9_)|js`E$eB`ng;FxSR7e&B*r-5_eX3
z7yYko+Dl#2lry=K2Ya@uUQkuO@#N;KkIxD!7d?@lShTC*&2_7H?h8(rsM&$%9UTs|
zA81h!mluB~+bALVmT{}2fVX4Hm0ce;rC!i~Z8tG9fV0H2MJC>7<9Z=gwTnVbK9&15
z=5eR21RnvRdy8$`>Uj<t-eM;oqzX7DUA@hmVaW8E+vRx5nRgcUF?rED%Fjs5<cWUI
zm#%p)CCq!-rI~I2p6x03Jj!5x{Q=KhSFcrSwP%tA8IRo&3p`yY%@kX7WS^#1)GqHd
zDKnY;dkdEQI+H8(Vv?4|OvnWHgsuZE3e!VA&C?d1Ic=-;bv6|@1&79mC%;**lwuZ}
z`HjC(?{dZC$+zYGEqBgcHsx2kmB3lq>7O_Mn*V6t(ynLkO}9;0e_dgk&Zqz15ASPW
zU<zinP@8>9_)5D`@{_=tkCrR4SVJY>@qNE2JLmhafb*-)Jk(*3Jvsm5BG!qL#nA$K
z@6U3SoD7ZGA8o?m%=Pq-L2xBgtkF|d=xQu60S>hjsg1ifb22${-m$vLw<_-G+8*l!
zg<py9@6EaMYsSRaiM3ka_!{+!ODYWN_g^b}zQW8?u!AM$ESuqPe}j7WH{u)$9~>Hz
zH?gZM+%G75oLAqeJ?{FQ*T-{Qc22&pHNjzev_xy&u3M{5e^h?{vb#(vIj{Rv<t;y^
z*he?_+f0q0m}GhH%<jdi7oOh#<#=ytkQ}65=I9Zx5P0$^cUIhUzvJN(%LO^&8z$%K
z*B){BVq4~y_rCE*rRM@~r}F19#)+4FCdaOeWfNR8AyfIJO=%-&L5%9<?kmRgj1LF=
z>wC7w?4;m|76%)Kb4SlKm42(L5!{uq_1unKEIU$o=4ezi#R?g+&Ux|ioA+LgQ##z-
z-vVvI-rm#QVL7`}Xu{Lb`fp`(4+hWvtTWB<fX&wYsj7@IpzS)_?>&TVIIR!@Id!F6
z+J>a_wNqoi70or~jn9>dWBC+XqxV$k!6fd_OPo>^tY%FrzVv)*<^0LF7wnqlFkR(t
zqOY;%rku++`k&wBJ1&1yX}Vdt_@SWLj(=pQZtKpJVB+Q$5ZPc5%OU-);NhcX(l@5(
z>-@1-zHqc&UMH*>v{q6oIbL_0Y4po8t-F@U2(gMv%;@V27v1vhVAyO!hyAh2$&BkC
zzc1VWbwLSacyE=SfX@W)tJX@FzeU$O>doAy-Eih>O7ybXPxFM<*FH3BFL$k6+xq^{
z;{^G4V&CraZ$Fj3Y+<y7@Vrysm)~zU?K>E>KQ`darMWNJE-<{WcW0CcU}b3%>R@{C
zl<)ikE!Wg%LKnEjKUUt0nLSm{kWo*uEK}sgq5S%eSmT9$Rf@MFZ_oT-n15cNqggp7
zeA3CEru|A>5y|teRe$vpd@WZrH#ztiL+!VTb=&KI-}UF6U%DU%+1Y#J?N?W&r(CU*
zT#}tKwS4MlS+*S|t8)bWZogfv<=-g9>#%uSxyA0szP^iQw(ZD%$(HiP$G2od_Lp1N
z_cuogICAZq<-gOL>q_k1>IqZ+$$pgGoZ`O8l1Y<GfMLGUvj1zW{;htno~?i0+qcq9
zTmO_ExH2hry26^34vw`Jdv^FY9BbNZ6ywCVpY^ZPO`mg-^TI37=)JAGVCZ1#YaRb-
zc67quRoC91*()jynH6eq$YMIkvhxpUVff0eT|MtOe(ai{anN-ByO1R=`fcJ<tS+he
zZF7Ekz00pr>TJ?sh7yhHhcl{n_`Zv(I-%6K*6~hbRIBP&xmTb4qL>aRU+>=XDcWRy
zz`uE7Ywd3<28cEO_@l7v_8uMIRTb8E(nMYaI<j&u$cW6YTbFRT`%;Q*bHdMlrZ3a<
zQV+JiIBK1>qvX!HN0u8>1DK4`#6xPiq9p(Js&SaEICp#HtB*+mdmU22y?iZgPy$J<
zR(Ra@d(UBazh~!-^5$)S^LV%C46#em>^+(h%{#AEef?`FKlR(%7f+^b-P`;=UiL<c
z=i1$OL!@UsyIa0zkJYyzt=4H?4op?M_eqPKxIa0c?Ueh0-3;ZgtKT<W(N<`bd%NoF
zG|_(f9nDt^Pa32$ZnvECQ0ZySNj+W0zwZ)eE;?#jdX3-mT;1LZz8uL}4ShF{CPys1
zy2j#bXZqp7_g%q{v#xCEI^KQtMPyVbXi_eKrLjs-%Tso`(1)_^d*)1-ryu&+!Tj28
z&n3CmjbZCAU7b`{sr!0i*(w9$kWTgmiw`jW{Wn45%w<pOEyj6=C9MC{ZT@8QWr6W;
zuUn65kF|TwtK4sIkmk*{bC2DUKkKe@1yoqF%z5K}?S06_U*ALce4-j13R%D8)moNS
z#@!K{@#07Jm)jNvMRMDXep<Y#v(64Lib;F?c+>3UElM);@8+LuzW(~K!mn@5{$4-a
zN&@#i?@O`2Fw@EF%Le(UF%M&;O>P}mH}(71H+#F??VVq3jx4thitl4|dLy}Va$UK{
z|0!?sHRa!E?AQ=~C(?e&efyK;XJ-~Z^U<rD@0xXPE?-#A7uzWwA5Z06U32romczyA
zwd?BNv)*5Rr}4}Ci<R3a-*FPGkodcMgKaU3>jb9PtN&l)Uy`;~A=`Z^IKl-qK<6r{
zzPqy{li8AU(q(P_{!H-|wjt_Ml@{;zWIK4@caiud|HW+g?N-iHDk#1b^XK4;y0z=o
z#dZhJivH1m%8)^~`K-|eWoC!vRf0?7-_O^xzOYblS5CX^jW!<Em*w;Sh=({t9b{i}
z>G$Q0$IPB2Iaf*QO`80szB}ib8OI&L3*84kDZlzG_}}*D8pc%RfZWC(JI<7GEh<pl
zzc1F-U;2uVdGF)((QoZ`ef{%mCCdWyC3D)&S((~A&p6fIYN;l)zV_wg=G6Y+^^Qz+
zMsp;eWF82e6J`2xwg03CC0puGS00R%GPi#raX@2&_o)mo$*MlVQ+6_5wk<8kJskFb
zU+44x>kHHW=hO{&1hh_+Ph`8uyX)AMFLyqDIejueb8fQNyvOpt=9U;g3(Rh-KYV^}
z*_!p=!pfh{JvX<!(l9vThqUaE^14q8f^t9jCX`(HGodaz{oC<omQ6i-?(|elcvOC%
zS*ZfHRYHzS;K`>8OH$rnnYB+(#jTuSnny7E2IsC>`|Uf_)ptJ6l=Ts>G>CHAHSe|O
zf6%<6>aD-;Ok9^Ao?a%Fa^d-|SK>u%+U0G#7T+@uzpJAs!t=T2!uyK{w!}mf9y^ub
z^}={xO!d@1o&W1D{N3>6go!>o<KMNFd-hIu_PpHn;s1A&wPiJJ4mVlDs<m@7lMjf?
zzHxsZb3E#{@9UVvd3LgFl5<X)-Mv_5rM&RUO3m*{CSPyVeyLmVKkQLcOkle9)Z$0q
zh2B(dF^YJ(Oz?tHp8THDxJr{>dlG(sSaIvm?8yhFzTIA|wW{Q(h=PO0=fd8|xmB;N
zHN93PPtE?n&gHSJ-oIGhsx=-=(zk*>`h`^f)1T<ju>az5qitoY4#uu~cJ30-EWI*;
z@GW<ejRTiY;sCX}85miD1QkxGiXJmCz9=kv`E$j?<UY-Hheh^8YxC+%DBr`IkR8z7
zJI!^&-P2o7`z-%1V=f^(Kf{7kXoK#2zMyY!jvsjAz3APWmZRPuLBkM?dTe(NSbg5j
zwheUjURA)4XNPO%@v=AW3W~Dkda&tl?9L09l^&?d|Np&|XZo#O|I5~`|N7gc+hKK#
zv}2+o=Lv=R_ahgdlDi`rlpZY3lE=-Xe{Aorzi}Mrzn1%@ZGLfu?W@A{k1}kxPaG9o
zd|E8$%Kx?7o$SoCf3xn?NI1OXy5gJNoUax3@7^}~tL4WnyYAd?FHK{*>0icOI?rrv
zW6ib=2R_6+KYB<qq{eyf%<zAGhpJf&)){i9R>ZA-tb1{Ww@F#K>gi=C&InE3_VMSw
zFYkk6pIv+|G4cGj^Re4>VpR`%@2g+jKlk32Y0d|}{8d=@B4T&h)hQo$PrLE<%-iYj
z*{pv_PjC<Tc|r5?`qMwG8h$GKJB1tn-?^XvNu*sWxTPxM-=Hx4(bvdFQpbZGb{%<n
z*>A<fJDJa48t&J%EIMO*z_rT%+NaW@MNzM7eDiNzZk5Pq<$814v0D3yFwe`?&#RQC
zT)kVv&A4nsU`bJU&+bEdOZfS!vj09<Rwn;WnEjG0`$dK&#lIKw{ado(G|SA^(&o0w
zM^D<?pZfCq$;?TQ9`C-f<~rl{3`y2qOpGi=;v66H{wBY^b5Okh;L*=zhdw-tDakRD
z@yYj=i`yUke!F8|)Vyh?GYs|_E)yuf;=WmZ&5kPTEya5t+TEG>ciH0S+09Y=RiA(S
z{mJV4$L8O^_11qDzp%jKeY(|8bL*)>?fV(e2cOiL>$9k^H-Onq-L%l8O#S}*--nmZ
zZ~AQ~<zg;-)X{SCt%JWeHt@{dQX6sNeS}Hytn&>)x!*sS?^pI;eE-JkTT9=ZXS`pt
zGP%dC=?rW$qJth2e^bn-4wkb^Q$>`n$1KuZQ0o~p<&ECY81@xkQWmLQ?rOJk&<%Vk
zdvl|e6-Of5vc=5%_myq&e0ogX?&5<-OH^8`|F63C-eYO;UGe8GTxL5`W31cC!?!re
z{gDiRe`tUD+iCC3PTYOFeBWz_pHBq~&dsarzuonJUEit2Ufu#6@d*+&f0SBgo!WU=
zJ=l2dqWeEB*3=vCyO7EMq@~Q5C4O!5)!mQ0ErL__+zGQdmsR^;@%gNLC!Trx<Na%G
z_eflywmf&QVT!~Dfjc`lU7PCui|OL~rkCv^OD5JS8=twz_b29z{PiVDweNdY@84%G
zGdcHk#qom%H=cf7vZZpr{=W03CpM)#J{D>C%#3Zt@yUwkSuFna-kn~%TvmSnjqu2Y
z`g7KwS+FFz=gn<y?oEjnOlJ#LIr%b)Wq9A+WV5eA`DeDIjlc|z4+<wzlf3LSrZmjc
znKAF?*N99#1-&Ny;00|J<+qkB<6&PUefVqQ=0A?JLs~W8yHEW4J6K5Mm2&Jd53N1I
zSxdWZI7+HNq<_8ti_v&@%I@hWO}6tIe)}bH<<!nOGsCZFiLX0t%=d@M<70GPw!=$~
z5PyX!kuhH+-kd&}xZB6pz~=aku4ylO-Y1-U%XHqw{q@&7RY_Z?{ZyEB^}>!1dIG%C
zs^YirU1$IL_d;5pXVyCNwi7$f1g<dFRLNz3If=XF)9wj-jy+r=QzzeQaIbKW(TeR|
zzxEohb9a9%n^dDRzubvap*LM#|A<f0;|TAs^ZwjBrSoW;u5ride}ey#clf{7c`Unf
z?H}>54eRs{Yksww@E@MCjxn+9OyPN>{rh2%>peE+)D2r-uYTLAvpwOU?)P5%(+8?*
z4!zlOfA8D!@2|GTO)IT4%{cq5sW-}YT6Oey`|3Eq*KzmtzZ6w0x-+RZ(%;Q`;am;<
zD=P%dH!XX(JL+rQ-!tX18vAXSstmt<{5J18+sVS~ZP&R1ESN-vIg-W1e+S-(PPJg0
zz2$e!-+~pVz000{_G37ny3}&}j;Ffo9@>6Mik3`M3%YsnXzI^%FF^YNf9|c5n`dF_
z<*d+izxDMr8R_(rWe1ICKKuz<aq#xQJpOc}y?!QdJNq2}%>V!X|C90>NquFTwO%vp
z)#~Txm*i-FZn6<Ic=Lbl@!R^Tdk+8SkubV^bzMM-O<}+q4iViQPwSS)zQ26_o0a0-
zHEEBZ?s)RP2eg0#v@R({*I|P9wL|wlmFwoadLO)_IzQrn1T)LNnjddXK8iJ}U75@+
z$&u;N5Nh7w_`>6)<ZAV^?v0aF*Ig?pn;6j4zV3DGHOB=PJBwx*i^P5w|9NuS`%}|j
zp0l|>ZA!gvf#Ug^I{)^9=dVrK`~@_2gZ97v%vl^WrQ&}4?i^nI1;5vLJxk?3Z#YYF
zPO?SztV<6L&5zDlesr@-Tj}%7*Sy#5_<QgFviMz@|Jskw+g&Bxwt1Vf?$^pQ3oh9N
ziGBFGTOf8xS<&Q~TVpdXz5EbU_VOBUef+uU=QJGIqym(U1NVDOFj=i4zAmk7zsG~B
zFxHkS@25}RZpD0TWzEBVpCk1p{gqyvk7sxB?wy{hb^x@UpeUwTtFhMpxANZDO}DQc
za6dLTZ}tc1C}R#w%1T$cRN)KEnwgjT&X;|CU2B>6$k6qH)3i4~@+}u;EHmXWT)O6t
z-KE9}r?;M7#`5mP+@=5IRcD0#0Uc;M;hl#>*{YZ`TmOeX+dXH?+``{)>Q4smtvIV}
z%Xq)}mr%?J=Ef_m7VkXgPT>*c2zQvqkzKiZE(>Fgt>vAyP7S9|Sj;Kzi7F0RuJm8}
ztdOKWvuKd<mp_l#_XdPMtNjhyS-45$RG7i@(~55yS=V>7%zpFyI?M0C<CDM4iK*k4
z`c<y{*lX^hK3(4F-%j+u&-46s_p*%M<nr&6h4x?i>$<<V);y5;f6euUO;2A>iiu8@
zK7aY<f2SME-G5&WeY?uC>fC+~NKb9TTn0zIn>VXY-~4ZN;9K%c_GQ!FNANOCoc!Vi
zL(R`SPNyAz*QIV)q`t~1;=$jIdgUu}D%T$s65Y^zVVdS9dHw6ZdKd96ID1?4mS67r
zKW9(f*X>Vbb^1{~h4IDb)Y}KYaoC6yEa$&}`ukiB4Ws)?n!Jr(TrXH9cmDpda{4jv
zhVHmCUxKzhcRI{bQaJl!5A!_TX}Wb=w_loOQ^PKMKhLdXqUF99RlnaB*<H8Zy>xA~
zRkp8Xbi~cD)W7Dc_3H1$cUt_dFa3Y<ql#^~Zu7T-On!M^$=dHz4i&~7_+fp$ctQ8p
z=+D<?f9d8v@$t3v-kY1&8223cz2$dm;leN5Wb}?tjca=X+5X4Cl+4OeBzZdMj``xq
zm^Ifk?NTpsmWRX~?8(++j<mY$8Of%smidx%vfp>Bm!EC!m!C8JtfPN+lZwIu)t_&d
z%zPeH$@~5OD%Op$@ga!{RV(kho0pkx-&msNou<HUx7<7J;4=;zfepvz*;h<97jRfG
zh3W89gW~+zESdY(XEmJWux?5C1zHNS_?O7X`xV#1e{0Rz6|UXzZ`<yFwy#-_-+up5
zrtvq^r@Q|>)73ljO)7WCZ|lDNv3%0>rI)p29~j*_zi0tN|6`d=_2%xS5AXZ1mUyoF
zKPC6uw8EraGSm0e+q~OsbAR&v?`iX%28uz(m_kJrPApBaeP1so9_w~nZfcL|)MqZI
zg{Rj1dU`wHW663(mkYNa&5Q7OQvZ9~%InXKJ}hM37|LBBIWv3rVs39a_6E07%}@Kw
z5~TON*54nP4z7}gC9e2fuU@_G%(U-T0gNoG6doj6`s_V%Gye7VRR^qB_XZm5{cLeL
z@!)$a{=_{Gmi3z+c)BU_>Syj!3BCSbhkH5C3+xcPpwJ_~=xIkv=FCn1=6=bo|Gw+!
zPP>i2Q}_SW(R}{Y{O@0j8CoyJRxZ2kX=-jHt(;*0>XS=o)Fkg)w}m)<@_qfK@#oB=
zxUU+}T;9UOvQwo+%V|@FB**#9J3212s&_s9CMG#Y<K-up$5GZ*?~C59diyb@GNjij
z?#t!K7?n@|U#<|0`!CD3qhhVILaXqLO)>5#eByhb7Dd!$&-8tk^E2iIW8(*wtZO+f
z;o4a(4m(-ePB*3QRXNIRGE+Be`x<czc@wjP(uY55>6gDewbR$wQMB1d=+K(=<_0V~
zdUO`e6j7Ox_+?hT;DyxAHgA^lQ|lfkuT=UeS1<qn?$lWG$lqUnEP8gQZqt>Q%efLg
zAAgA!_3HbWpL;W{Vb;>uwhF(NHMPq0?^|gHU0KKx-=Hx4!|#kfsa?&MLg|yQ%v_vf
zq*t`=Tl=bc4zEvc;yJaw_S-zRt{jtSX}i}OJZ>&L^GJx7;Ute<_m+igZo4$<G5XX;
zh239sTXplvIq9)%Kg0bMTC5*GDPLT$zx3+u;EckHtXa(RjC}9J^OP!fJU_AJ_uKaO
zY5)6Vq|G<!tIifWH1lXH!}Q;_GX3H#2Hdayc73!8XZ%_BbBTA?iz4Yzj+~z3nMLud
zUNp_TDEIE#eEU6DH^%56TzrjJia+~^^=a;q-`m5O7k#xZtvsGuB$1=L+4MGe|Efa6
zfgHxBm^5iorPg!56h!ZSjE&ss9q->$5yKr~ejwFl0dv_tf1Ou<s}}m{9GZFbXk7|J
z#uoMaf5YFcxjpseV*7iw)5ABjJlVa#Qrq|1{NjZM*@>UNt0!=OjedT<bCO_0%z?x2
zZ?vB4*-_DZdUvW!%#8mVXRuum4>Vm68B_AJ;gnvZRqp+Z2iPKi|NNer`D4uyrc2+8
z-o>s|b-ng4HuKrt#hZF6c5^Yhbnm=%F6p-J&d`I?8DlnmmCTKM%P?JV)%)3csb?m9
z{v4S8K_8OmBtZul3g*na$@jj_;>6}Ng{heehYfz!-#I?D+TU;9f9rk9tBZW=FC@HI
z7YkpOp)U5DU*L1Sv)-y0Gf4(1{`GpGQ<HvP`EIrUvG$4G910V5H^{L+jniONYH+y6
zWL+ty!6?cu)9owzy@<~yW?NR)QK#PqQzBzhrgg<K^{Ky?oqqqzQyYW-57wSEeKgsI
zWzk0EnYLTA?tee`teUw+ZgqH}<i{nyKNS2i`u>sk=6`9=*B-lWGVPjgJWbsCrQO?~
zGPT)d{S#q}jHd}IoJf`2>#%L@_gAtjz20RXzMpTmdB+{0iMtCdD))W-P`b%xmE+l2
zy%#@U_}|NZws`)g?~L7i4&k{I-ZCEQF)x`L|2ihy&B%_=`+>!pR{^t)I8PjXVLbos
zM8-XB=RavmH*Vst;K<qWV(r(xEQKOV^`9!83k-bqYV*8{zJ}NKe28S%jn;qCzG2V&
z{PxVJ!XEa%%csoubZGp$a96VX&vQi&{ytl+^yZM=v<2Je9A2^`JLW{)xrlqY0qHez
z-qriVif1=Hhg5=70vi;jH+_Ev+EP~(__UJaY=q>RUp56ijR_I#GsTQ{F>5c-Vht3%
z{xOty=ZEWGLciU4%6I19o!d+HG}bKNlgMBtnPpQw^|xwdR#4{wJ}wT03B3(9<@RUQ
z(u-Uf8a))g&t!~kZ+QIj_q_|xE2>s~v0ux}Rg$N8HvaY1z4PNw{Jin|RosdB`SMpB
zsyJ&t+)Mv_b=DPbj*JHH;tJ;rOtYsaO}07DTe|Gl;-D3&H#p?Y^-sNbRz9p2s*}B2
z|GwsO(d;i*o_*W@vV57^i674Vj-MpAcf5g46ni%)OyBS;dEG6Wd;bbgM}7VrBb_=W
zf_?3ygEM-#H2k(%ZB2i=Y^Luu+pT_^O0N2T1?|^(qO|n+0@L3gKc7t8y=$*Q{b~K{
z>u!CL{gL@k_oh-l<IClr_ncm`=M~3^@8#RA)-GMj5#oO!>iUW8S7of#KR(-CzU`93
zIsf$Kr%aBz)~|iPn{TF>!P_(K-a32yt>Zs&yE~+_to?K}L-zNHt>!6hLQL-I-QV}^
ze09!mY97~5+4@;|eWGW5(?r%+T)1<i@B02~N%lwIOV;q^Lkfj}8pfs=u3POFryM?3
z+Pt#v?CUS}2Mtb$oO!FoAL8?xqjaJ$cYGs*_2pM$r_!6F_KP~iI<0VK;5oTkfOp!}
zJ@GakaSyqcPidBWm$j<k|7FnJK!RoCpJ|~NlGDy<PWpOn!L<5@g~oZxk#GMjuL7;T
ze$U-eWjMe4^yl~7UmZ=D`|r6NUR=WTt-ZqS!X;Ck!scIJ>y!&0i3t6gu~4No>-oH+
z1_}qR?}&Z(R@b|+>duLtN0Y0ArxjSu`jdHV{u4Xllw)rdt06=COu`B$R5$Q>2Fdak
zM7~{HrkX2|ZT;$?iT7+5+wwCaXD)wFU=v&R`^Uc1L2L)^7dWO?$@~5a+0XoR_k`Wf
zYK$N4m^hv&9Vj`m(;(QxmGw#azKP+NEz|t;V&7jsKWVw2c4{4?|LJQL3Ax!fZKmD%
zx8s%gXYsF>XBIvE^Cscq+nahJjNiNG6qh@#jg9+ys`{q+zV=Dq*VMe9qv}7`@6?_2
zZ=TC<J$#~M9xLc$wbQyrFEniPGK0p8lUaX4w)Zs_fDWM9p09RIhp(V;wy^M%KaDOf
z+l%##E<B1buMRsNG5!DCX`5e(oO-_R{iZ7kTkl29cf6un*75M}H18(??|gUuh<o>M
zY3VVG<nsj%42_?-PPoorUb(d|`Pq|8Iy0?rdgb>`{Cn+n&<gG5s_Y`(pDEKC^psaW
z&)j_JV`U;s-~Ks!?&|yGo({hF_>+n1?`bFAyP5wEdN*yt_cM0o-umCPfA&_K?_GZR
zw*eo+Ci&&d9|c2#T|i?IgQFhn>#fJnf3qr*RGq;fE?e+WPvmCjqpkk_+}o_5#>L9N
z{@o`f`HQt|r^PPoRjd2!O(S}(?Waxd*Wa`we%k5QwVOp0I265OKb4u5w=pqsObJ$q
z(=yw??WaxJx%E@0Oxf!2H-0~(TG7HUypA5HzZ;p0>gG#$@QJh3-u=>YCTVx+XRX`m
zc1>oRas_uP7bqV%8)hzcc|Py1%l7A=1@FwebOu~@FoGQnYN<K=b`*J#bhdlKsxuAV
zSER+Y*WKe=8Sk`~`{L)|s$){~9rcRbC4<%cU(P)uAG<DgtLjJBN4y?0Rx>zq>?{hF
zVB$~+kYbD!Qs3TP*i`2D;A741zIzph_r<Py<o?wQEjg$&@#UNJs(Huk=JhSTAM?h}
zG2Yx(p;2AheEp`{W4(Mge@)u$&-k7DzV^vKGgS>|3a^9?pw9w@<O{>S#UCzyyEl<j
z=YZ>r9R_l5?bjXlJStP~ac=IpiMxb6<@5jFnAEoJch;KKGq<hZbUG}rB=FSC#hbQv
ze}i;G8XWSNWVFwF>WX`xe|Bfdmy`SdzFXdQUNT{+KOe_6uYB{z&lY{rv3+{v#!U4J
z-D%RYHjjc!rZI^hp1o$1&SI0w>vyz{UtjvtSE>m#C(>}Bm%&lbT+Gq#GQ;$%_p-v-
zI`^zwYRlKo{dnW4Qwd)a=J3Do72hz;@ddllIaB#P)9*_kUvq!9o|&=r($}DSPA0@G
zD0^x)X}Ovz69<dt1B)=eP4Qe|EBC#9U$w?)^NuAw=X3Nlo1e{_d-wd_69>4b-0YO9
z44wF~Z_g4<^>D_WJG&AtJ$ZCz&a69KQy^80h-ZVs^oDBhwDKF57{uq7C-^=od{*u!
z;_5DA5ioDZ^q#*70mgSX%BTEUCVRu}n5)jbz1Np^<)nY?+Wgdl@vq+m$KBr_+dT#y
z5~2{yn7!TT?EEu=D^@tnV@zRb2`^Fi-g(n*x>l0d^eNWGGv@N#E8TQ*W{k1u1Vd%c
zAgi-mdYIDm?hE^KN93;RaWG)I6SFlSTt<J(RUzr8k{7nSnBD~Mr(<Y51U@qNy6vyJ
z^_qercNLgpQs(|Ro&W1jr_%4f=)?t?_v{x|?XNR?Z<e`a`!Ul?C)D5CfR0DduB?h&
z<>9x@?qzIa=Jw7%E(_B53U+8uc+Prgx9VrE#u}DiU+u&VJ}q1(!tzO6p+Tqq^G>fV
z(#5L!l}U4XuRXVL$_;owWzG%n&sEvA=k)iS&=1!TUo`!5ayE-Vg~kH&(89w{ou|)y
zUok^>V#B_fd!3lT8G~h-kiv;n&3!p$bzgGw@AI9JpR{{A_x;ULPv>MBt1jY^_G)0*
zeDln$Xt}y`oi}2I(|td`v$ot<#FCV<bnSiKU$PTJ|Fxc(&fU`b#!PE&OhfYGCt*uK
z+i5O|7R-M6Ed0%#6tf$#`ML?qE}wa^_%YANvuhZP{Nfw-w}0_{e*R;{Ki?ZnjT>0A
z&XpcompEf<^0p%ezgwfg1Ih{;dKet_PQO^XXYIYhuNl?vJ@|Ij`B}a;*=+sq*TV_c
z9U)T~8e6|>>;1cb!7_O-uhaMaFU#|?4sG7Tn(}SI;w_(5_CIAwxw+}{)1riIh-Wv6
zN?07u58Za;>G``mm#ud*x}3S~)13H}*R!kMU6WffPhC=}!Qm>ao?U&#>4?ir)r~#-
z=jm>coDIui2bjJ#ybfEr%JsDHS0D8cnQ!#M*uI7>wMz3!e!cFT=TVXQner#=>eS}j
z&z-i6Ykn>Gw4Te~A1jnkHGJ)`t@`Gvgs%@)U8|p(tNFyPzd`4Gsg-}#B}lEjfN9sC
zE*;NnXPujup8ph}S1Ebz&997w_f8z}S$^}>>(;Z!Z&!;4c}>{-FYWfPMNjkWi{2UT
zJRfuRPx`0jFKZ9^^1Y0l6s*8>&OmH$LimnZ){|#`u7tU}lZB&*bAhpZ{(c(+X5l}r
z0k31am!`Q{_x$ZRdLrpxeJaD37^YaQ|2tO2n${{7h$npe^h@?*#qZ<&MsF{teOnsH
z1ZjP9q^KI$yt6;8RsYFVL6_0;+nq_t{`!mpbK;j=?Kb{&k$cXyJu@bD_5bCT`LW(<
zhpB>s-kp65(-OHqL`#?b4}hHob0WOqY1gN(`+{ekyQkC~u>9DK2h1@kne*<?<omen
zx5dgG8zY{~toeAN?)>2&v%TiL^ew*qm+kJIu0;xvXcTZ*ki@j>N&eAUHd}X|yZ^KG
z%Ia$~qb%)wTpKoagh&{le^T`Jlg4K!4TeS@mXt-^Yk4-Qo}R)YF*{yn(t}-)BQ-%M
z90jm)6n(s4Y$dRK^Y#-WmGvTz`RZq;eLb9bnmKfX>nW>wJP|Cnt&gspv3c3crQ3Y+
zXDM4Z|FujC7J-IFh|hw1>x&KFmCdiV+F!6KM9_Qlop&8?<`p*@Ti@PNG;M$TcOBk2
z)6{-G(N);2m;WSI?WwBph4<4^G(F)PP(z#>6sFJl9hsJwx%S(u^wt@BRk!VokX-ZT
z*%^_lLUEo4t@m6XUVjfdk^aPkgTeBqPv7nTbEW;hsQAyR9-fz3O4zn$&i^b4b&-ho
z0lu8Y5vJ$%Y>R8Ev)F%PPyBn41Fh$*W&Yb&mv6r9Hp#Tcu4zfgUWo%z3v#|BF}&W(
zw6Z*RG2_PRn>YR9@;RKfpnU1RrleTMm1VqBvd-*kaxZ1&Z_T{1ch;iy50*AYnw)Bt
z%rt&6$>Z3Z$)2w!3!O|!b8~q%|3y}CN?OeyrI|i%b9y-5^QZrMDB2~YxM9nIdzYd&
zCGKRJ6MgEdnmIK3IN}-<rcavXas61`uTKl~jkoWath0B`#JOu%ZL^JSw!8iA>YeO>
zvsqIkw4Z0?TWp*jXSHDK)SbWAA4!hgG|BHp-A>C%(ohd81PC*(KmEBS^^I}Iyro@U
zc487QbR=uGzKL2_y6Ki&POpOm)2(t@H&2bDF^y{8`_Gp~K6HIK|M!+d&vLrJ6&(Xp
zBli|2{rE3OFZV6mC|jC3<8x`v)Q$NwHa@9aee#X;-{0#$ozh~Oyv%m;(_OFrZn)<C
zyz$S1<f_Y?`fc8}Y<m`Z^CsK$`E1)GEt@|%ELg;}OJ?cL6&X)gfCh;KRyCOZUMRNq
zP0>=vFLCR(&Um@y$+2zMzD*AJHR-eJ?xRdr4X1jOy64_d@?o4gH9Nj9QLd5e&#&{3
z>lV0nFN-LeYBJ@JUH`HJB9O|3kws2a;l$Ixd2jMxIUIlH`nn*;t$mW0i}Cg|uja7q
z_>xxt@%`2VOB^Sh-pY1<6PL$vN9))7vfmz$t<V0LdUK}Vi;&(2+jQLde;-k~AhmT5
zi~g|`mq<YehDICK63qn37yTc$m(Alczw}Am<^KLau6ffG7MLra^f{>d#6@g1S43U@
zdaq;O7&%Yu&5+e!IEhh`C1%RyhSP2rAq^P^21b1*o$wHb-<zki-|g+b7QnV~|FkEM
zUzZd=bAM^_Qq&>1Qzca(JEF5Ifb%|69Gmmy2JZWz>%;$@=?Go_ZP_-C3ef~hhxLC_
z`WTp=a=!3YJ+~vT(z0#7u;Z79+XK(3rW`O%zYsIYJMHF4RaGI!1tE-YPfuf*{(Nbg
zSDH4*hBv>tBH(dqDwv=)T}C?Uy~^c2vzIYl-`yM8cGOtBdvYRZ=aLy!+lqXns#+(d
zo;h>Eok1qJbNano;gVVEU+!Ivw*l>L<`TFdIho62nhGd%7O<EcNPV2NSby`5Bfod=
zmI!Qm(Ot-E6e`*C&bltX<%U_a0JrN*feN35Tl4>ZO}_nMUOeOTHy83bPk@(yf;QrE
zfF?&}Zaq0|FT3UK5jjuw+kGV_M}8|DNS(Rua$}Yp#~M|Gtln*F&oIA!=-57+z2xj9
zzYPBmDc#T{I#p<g;Db%UE4$W4N|qXm$E8hF?WjAu?ew1A=kBE~e%E*^=Iey=6tVLY
zqT4r}75?$*=)r|w((A3?+s1KwEXaIuo_mF*1{XBTv?w}EI4$*d0^9Z(>t?>V`?HAO
z_Y6N%%(N`q%%_`|nx!bS$O&fn_}o4&>CCJvrzw^%s_~%bUg_h-SGm`Ow0L?uyeexs
zy6gm`Ri>c8WF?TU|K$7jLc25<o?W~to_AyYSyL{Y72dPCS8>0-%|rVcYybXu5WT0-
zA%V%Ly1OQShqC6ixCGb57R4-2s_QJCr^Z1}Cu3k_$pX#2v_12mCbdzSH?MMT;`aw-
z6C2;>*ZnNG!@DklQEWwG#~l6*k&Cn^6{kfn|EBTVFjL@3(6*mC_SXxX{WpI<({*6K
zQbO--Hm1f!ESD6tnr?P|QjKL1Sh2j}T)?GYYp+h!|LDB4rY_FERW-}jY`0xqyvOV>
z(=}vgizqBGZnLSa3~)H5GBea+n!bG6-RXY?G`t=1Z%q03#+kFAGBj-7lg;}M?En9@
z|KYEd6JV91LVzw~Q%qRK`I4+BY2`U?@oP6kKbU>XeE**R`@}00n>FtpF`Vpe&?{K%
zxQ1nCMa2mt&pVkf55{i(^L765zq`tvk{`T$pnUrhi%Cb9!1PNyPI54^Xz464pW5>#
zBfiP(mQnF(ZTW-J8$X(@x%ugn>=N&1A3kUnXw7{8Q-`54p1UCU%2w9%hXgO|dvo^w
ztX%c`D~%4n*>|Vrv(21Kfs<5O&rQG6cNUgK8>2V{o@{a{R=4NSi)w%8q<nYpn&Q1K
zn&J1J+_AboQ8LCa?B3>c)*INe=0@9}-}V04%o~$3=g$9Ho$j4?I*pa%#DT-=?;P|P
zKsn=qmqYW(b^ji4GI1yfG&bl>Pq^!nX1Qf|(b_B1l-{56RrP-|tMfP)Q}AxlZzs|(
zx80U_GFfP4ir|DY`^TFnxvra0yF+u8M0ikaoC2p%Ztu3qs+%TDw!B@pv%p&D!6X}t
zc%6L78`Em8vt3gVfgQGX2z1`KqqWEK=;N_F)|JTF#Ba#-$@ga2k?Y;SEq>B)t5oXR
zNe6`ar#}4rj`45Wv`Y(3rtDw+CAMgDRiMrM69*ziSeH%+<T@epHF}qZ80chKhQ{p1
z)r{LW&QUg<pc=a^IDOx(X~xT9#82M5T=Z^_*y&$qPL)qsG3`&n&z4CC-={1$ZueNd
z`N;`c@%;Lt;3?+6tWxLbn5&3ha}Zm*eGc=a`lm1Fv2;qss#*Rt^Vk=4`hVO7Bjl4v
z7Vt1O#mEKJeS7rw-;rC&KQlk<iHgnp_W0?u)Y+1<av2qIZVM6^_eNiJXW#O~Qe#J!
z%KiX{+Xvq1-s$1x5}xq>^V&l~>WM5pcQip4@(HY%*bsMpSKIAP!rF}5dC{xuk~jFC
z@AO~Cb|<Y-=d%3utG{~JntuOVU@hlW@Ji8t(;h_y?|z=Yf41!j<d~<_;GoB3)m@Q&
z#jDOghINAvv-47U$GYQw=RXS_S;T)RJc#|DJfs87BH*xKALu5g%<A5b=_|gk`x9|v
zb=>jUzu$fS{rIqT=(F>pEN*KrCbXWtDbiTY^wQzL-s#-+2QA++Jbf5^K&sl!eagjy
z6Kv<db-2e7649{rmiC<;A-s)7tkdK&CM%llO^#{5wd0uP=2oVYr&TwLum#Pi5_7JL
z=DU18!S=O$)Y_N&Tx(qqX`a8k;KECu37!t!Q-c22Ch4s^UHx@#)m6jVucyAc*{tqu
zkYW3KD`Z+1q)FYtz@*I~@WklorOYYE%dVITf39NPA7N&@{ak6?&ku(^by)ef&N<T{
zoORkIWZlM+gqYHhDG_<g{PYB?>%#72THas!B>cPAx&Aj<DhjdZcYSF)&)&Gh?(0eE
z#txQudZh}5TDyz>-I_J;_&nnaVu8tCfs?<@xpy-@?PO}vyu_J5Ctj~*oay?q=cmlO
z-9M^Y|0%_Ps{1@w_q6%!t8e@mPJj9S{O*E)^ZTX#Oqys7Et^3N_MIG8>`u7854yc4
zL-v%(srctgQZY*3l8Z0hNniWsfm9pQ)sO{=lNnnsWzR2bm^M#W@}9s0zthqZHm(br
zm@b9>-P3e+kr#)8z`_GpeRPCkZ1;Z4@n1cWZ`<9-R|#fU%zm36(h5$IXX<+zP`ly&
zna`hpzi0Q4m%CHb`J6)`prPU1k)*pRw<C7HUgpiQ)8xS4pE;5HUPqq&VWzu)(?bZJ
z8W<X@nYQv3O_bM^Eq>Vdr2XXNY9rAK$GWiE&!>OC-z~a=E7XCZ(Uf%ybIDni8?udC
zS)Wv|)W5&8I$M2<8`CYvlg|@*9m?ivFJL}po^Cf|ci=_+O*t+X4=w3;n85UFuNv#*
znGtuk)g0gUb?2P^OZT^bI;y??<BA;(=j0wNUaIap*R=&SUmqab7&##$IqB9*o%FKk
zbL*`=8M=Mqr`qKGpS<tbf5;XR(44+PgTqUvtvp2+U)C&DexdPqVbHG1hmv0I&(tp)
z%sv0#=AHOFNlAr<171v*54KPJb~5qtXPHY1ou;gHQ;Uttqt<oKIQ-6N@wqU*lM`5&
zwzEVnp2lZXUArNtCA`kaeSrz%U)|Ns`QePZ$5a`0SvF6(#&R&#gttIzZ_KB=<~p{)
zMtjs3{IxfF_V3R<={*e$Ox&!KmcEvLysdEE+Ra-|^iB}Eut-riZP%$Sc8|fQ*g%}j
zz@*4^MeBs>&yPv&vBrk$FVELeG&{K~wdj7Y+40zGOmWvI{uNv?<-mfVtqYAVa-Hyc
z;{5*p{!Jy#4Br;JE_nd1ptlNLm>D&PXP>9S?R_CN{&lB~ti9LvH56!{o^&E{OE1d~
zo~0`14{Pu)bx_D@OgZ`M{wyJltnYJ8b0f1f{=QM!yjkFaP}%E1D;8J<!pM@xeMRlW
z)0?N8*ZrxmobqaUu=)M66$j$KEe=`q`R8B5=9{7!zN<h!2nlpZ3zUqKob&l-M#Sc)
z#`T}pEjv&W#=3s$Y!i-qpKdXv^f~k~y%chp+{bsw)8q8#n_QfhX^ugnLIrN=D`&5p
zAGok8P?SZ$L4luf@590r_uoaca&B{f_G*fr#GZcEro<DrHWK8xdZwxTMHgSrd78I<
z-jT=QU(Zb|e(v-AI{$t7pVmDmBpF%41a8D8-mWn#J$bkG=Mq<~*IX|y1&Z=+i}6wR
zW}WwQ-~X8FVev6R+Z+;18QCPlKPP3g2<*@=FyG+XEGE&g`~4B^&nzjOy`SWlKTY@S
z<4|ZgP{d@FeEQhYWBdMmdvk)fzq)3=-t%K&;Bbc!M^plCDolUEel~yY;*!ioGiIf<
zZnFBEe0l3GAK^VslCzZ_#4q^5z`pZ$`HTIxrX*+?OsN0<YSqV|f4?^`*XQ387T?CR
zeXm%<8EvfxsSO{eJzf9b=H30OMtcDVg^I@4juyol%!Sr0+gR?WhzK-(VENL<7JdJ|
z_(M|;)lZreSbD6=GxS#N@!9L2_z84+J1CSup()eo#kTWA|E#{91@51m_kTI~WYVl}
zS4>mBiLn`bJyMef#dV_$tIhee#myZy0w-b*9FP67GrWmK&|!fLW2{x;ogGsgEpAVI
zFm2VpG+p+|F#;=gHr%_QU@ZRGVZk*fPx}os*?Np}z1Q}$Y9TJY4Ulj2V%@o9ZtLQC
zB_d&;^eSKO_@Pq1p!}&{#Y$yxMa;;uNaTav?A|zi1Ma9P$Nf&UezWyByGc+{UUmv^
z<4T85)mQs=C0kdm-MsCCgF+PJH0R!JFEuQfLWM3o5Q{Y1qW$;4`PCu%ubQBZW^f#I
zvuX)H`Si5A+4-f;8?ULg{6;!q@wMH>&r_aF<3H}c`u!<64uyd7M$f}vUgtUdWftN{
z@cP=h_e!LB8{^7=DIKi){#<s9o_74puL%w>jMuX&6tf6agghuKIK6oGCp9KXmN(OQ
zKBV2y|E;IfKI?9ut)N3fZR6~Nx-C8H-g_b+ntnt>pmsv{pA8oqSIsMV6;k-KvH0i4
zvXYIKR#vaSOYG_RDC{;9JmZwd$zr&4*Vd}H1x2e9{xmv-HEz85)mG8@@C?Umk2cFQ
zafoPtc=Ob;9Mt#o7R^7VA=ZCoy2y%@_!E;#(~VgKR!nYSn|{0V<tv_hEZeWFe7aJb
z2^<n&;yddizM_jaqo1^&-Tr;G=wEG??JoCQLKqr<Gi3(E?JSSHr_Z`x;X&kqosAPc
z#OL$REJ?ne{_jbwE@SrHZSPav=WINjwK7PW<&pS|bDyqE*53d8<MlQvP_@OO@W4M|
z_1&Adc4U;Lemk=M&(x+lVE@39ol2udbIhcd^Q0Hgb9mR<GSfMdBkv^RL=^#!&;zD-
zrrjw$!rU0eZE;&-n(fkmG6hXB&lY?L3TsSBTd>CZ`KI|b`+15zJ6r@D5^@>Y9$iyY
zfmTK9Smy1m*!^BF$3HH?ZHu<(JcwgJ1&~5R!<js}>(19>WzF4~HA|;5#hC1PI{Wn5
zi{JF$_wUy66}fKc3BD4BWt#YpKmV%#@_qj`;r*TGRva(43Z%rTGQPjQWdFa<JK|LX
zUNt$aVY14Of4xZce(^Nxv!^p$((6QCo2RC@%7H`nDYs4S&u=Fpf5%TUX4GT-Y@KZ9
zyFb{U`&`!(q+mGVsxWJ2Oo@S)6;E~1_wTD?vgF*9&fF1lvku?_=er=*H|{^}?rWN!
zww{^$?^@1jZ}sxHXZ|c<LL7;byS6x2Elt{N$iyL{u)sX|MEPy&Xop)WmEI3x=2V|O
zdF&#nYqC&}`>0Rn_L?7{(y=2>VeY|do&8t;{7dVRE8595C+c~hUHuQmpSgd&JatUp
zdG`kRR54H|)q#O=KT{yfPL<a)<7dn(k+A!IdTRQ+ce_uYHQc=IiKkZ-*q?<Q7Ul-m
zDtL<w%_5W96sBAB%}DTmIVU^%zw)i-ghmYsCR4$RUyl~3GZ(JU4vO`^dW9jfxMXK#
z<)Jgn=gn%!0rjYbSWG%<a@=Z9cHNBb`n*rnAS%Xe3DRY#4uwny*>~DhS6(O;{#;tf
zqPkosSj#+i_3HAuQ|B1pgbWW0v^21=^2~ic$>U${c~^zsTpS)Xr`NsDI&o_;%g!Hp
zET7h|J@7SW@iMQ?y=+(JeOqk$Zi!*$*B^gn0yYPTfZDSPjW5?^xKFZS)cYwtUpn3I
zOZC_3FW2b)On2-8`xHV<Q5VRW&|M~x7qi7LMIdXvO&?RS(vGDLF_YXB_!zA>rWZ}m
zmuX!(g+oNcAalk(9o-M5jgdN&OH9}4Pg|*ZTSV=_n#}6?CtTCr9yKyBE#+RaKivG6
z&e93ie^*X++%YYCuE32+yLCB1E!KlvXQut--qs)}=2JD_E;FFJbeVsGcMGq_L_`Xb
z6Xh^E;ktZTiTFDguYZ3oUON6k?VzsV7NJy^1tN{--|v?{@$1;qC$4H7Ejk8Sy=+1!
zUhVDJCG!YWbyVwfuyzDJ_+J0#_BNlT@BT)8ebjAuykLsEKx<!Q1H<%~==UK_tiPog
zPL~(0Tc^^-z{KIA?9kwC=R1{UtA|6k&e_}fezR(uTt648g6d^ZqPc&5NiXay00)Lf
z1J*zN26qc*{@w7gF8s~hqP2h259(@9-pC9pgB)yG&i&fESwCLxL~LqZbL872Z@Vk@
z%e}f{l;2pGeCM3?+0e_E`*Qx;tlcGlTe;yt6_eFt4dWdthFj!&&)BIxU)Pv9i_uXx
zlIQtb<#os2o~drXzDnO<;!@$o@9kID83!JAXG!~epg-qObTP}M2C?KeDUDV4*Gm03
z_rA$8U=M7W8iztaWaEOSn0fmwUU)t~^LoWr&b-cDKQ%x%iv(;q5O?sU`{X@-GjrB_
z{4@7{hC8#H<6+@~b-Kqlygz=RobiNw<1Wr6`y;hCEy*kFE!S$!Pv_-LySPB?w#2KR
zwxg-x->1kP>@&4vc@mVe`q<UwuO@Q8@VR%1zec3eluLJC&HPtq6`c#EEYjPhR8|=;
z7P=6mVcm&nsJbW!xJ>Z2y1V%vuXuj?!apy5tTfG(H4;r>akq5^&8rA}&{McSoB8FM
z>bKh!^4!-uzEJpbo9p7UytDhhZ_3^v!OtR~;rrmUID7j)W)tt#?~*0wo}O)`>@9TS
zQIG7dHtB6{YZdpm%O`^;!WbH7HvHo=7GI}dZ$EQy*!}v+k~`0tOgJi4z0CW^%}!fo
zhb{ZuSxmua!hw%(h|qapdqTDI)_w!qofG;?tL_G0H;7#p6<4!iBP%F|8JLV2wO_ZK
zF8}|=KmUJTOisoEr}NQ_CoH@gU&b!KXZ_^z`M@bHB2tYnSeDKIoxfPS;v3WaSL=i(
z+`3+0dcgPp)AIFNA0Re`E5!a<FUP3&X|?&>-lHc!IbGvPKe+JBiB0bUkNksVO;AZ+
zD)vF@iP2k)H{Q$@@+uL36*kB}&D-j1^)qaGGCxa}-h%Rd)2hy8`}jnEdULwo#)fN2
z`Kn4ChlI%2v6=qya#Q|Q?l}FRNBP84J+69vMT3_r&ilP{BA=+;xf{7eFH^ZdcftLK
z?+(rNIN*L&Zn;qYES?=NH#tpSW}AFqZI*A0PwgDz+eer9tde9YGk$YekE24g;@hVM
z+KuwnaoiKDpS{e{k&>}0eC9J<G|6n*or#{HGu*)bb6{xHX3Tfg6MArIqV<mcB`Qn#
zzQtX&c|6(V*S)gTfQ8cyIm?_G8mqW@mi!WZeP(5OvtD%d%tQ0}URXzbntN-y-+}P*
zIK8j_C-=u@wWWj!Ho93i%<S;fZt^r0;D}3jyy)gsCp-Rq3;4wY&WYzem?QgYfpnt|
zzq9MlJ{GN$Q>>r<+qWUj+G}-|nAIw~tyyM_TccbZ@++oD^X`jFoxfq*)Y)>q(q<_)
z?RW)Bw;8H@uvsIv$OIAWUj;r0Ju%`fs1%p{xRa+vwzjVRPVbsKBI4j$xzT`i&KZN0
zzic}>&P-0%zxVF{r-$v64JK-YW-#sl|M>p4<7rzS?~W-Fw>`e*z1xbie=KQ!x4(l1
zN6#Lq5%n&%jule;S$8#+@oYom_J}CGYRk(@^*6mg4?4lz;Uv@ENuQ(5cL%@ZfA@M*
z?U`qL^;CZ&a*)D=`3^4~^$OW`?0Bzde*Es{y7xNvRY9O3##4ebBn~@-T3+dYZZxfI
z!aYN|>rB^PG0fpPURify){EakEyCxID*X0faVy&*f5_eP?;n>YH^XF+gtUgp)xJLY
z-%Re*KV4V!yh``F)z9zy{~7XZpEG5R6;s)2tJ2QxYL^xERA@V#%vLveEBsAPXCK4A
zn7T!$gj(OVNGpnYd_+D+Uyjv_x2W>hr?(S%(p-zh=WIE>((qeATE1jOj`AiqhDI+=
z3(NU8_8P5LY2H}kG@bLGLmY4Rwm<E~HUSp?`mgUk^^cdE<Nd9UJ$UWS`&s4NIMTkB
zD7Z{p%QC%$iQ}AAdRf~EKAA4*r3Xq3-c@$APS5W0-xT7s-Z1kkM-J!4)>GP(Szhy<
z{vTJgkUwbpbq3H9UT@A9?{$kO>O}9q@@;AUlQaD++or7ZYePgiM~aw+?un-_yPM}t
z`BeIB(zG4Pml9vxQ55{Gx@fW}ld0f_WAjd0F1ynHWIHHHnuR+|6T6wFHvP9rQO!41
zf!A06mV4DcJqhYBJ-MN6dVN;9SaQNdo{IOU92Wg=w4J84>gV$ISJPD=^t?V*9+JTS
zJCLj7%j@6os~bgo9#sex@S1NiDpl_P#c86pEcRRe>0g?`kN2>c=|{B}?fJEL=fk?x
zNlRaHO6=u7tc~R87Ci;?deQ$LOffk!jCz+kf1b@K-s0Wh{qZ=fr9yyvW2bR?>h<Vz
z+2>E6oBZb)N5p2^=T~p-S80q_PgL09C-HQJyC$f8xxetD)T{l4S1W{$6;9ImDmq<e
zX|KBi@3XGudt9f6q!)6&l=5O@vp<>Bke?#9Joe}M@Q}Tp;*F`Sla>}uyF25p0H|jq
zbw}@ha(klUi%VY?zm2~qUp`Y%cg?hgNZE=*M>(Kkg7+quKp958<!3!#*T3kOo~9k~
z>_Vb6i@*t$3ntAzzt`@({Qm!s?QcydCw%|PT6W!kQI%#)UfevEpw+f^>QA?{SXpOR
zPr5Dq^ZWjNHH88Z?cWdcZBjY%@9_I+-~Als&;F$4>$jBi#2SI<rKw^CZdTpi8b>E5
z%+9Z?t>5EY;H{x66lPiX_j%!c_fDzgbE0;4@}FrsGQXW&|5>InfOXmCG&ZB|?sFY!
z|3Ccv%isRxe_Pd&06kFS6`c1OS;V+Sq@GM#mzcLdDu!o$^ql48M`X8m-uZruFQv~x
zm*vfoc|TXYSYdkW+eH1!WlSf3J$~qWR>tM?64~yPm$>hpHqMK26V7=ktDVgFWwSwE
zkAKSd)qZ)|XSZKY)iqugbuQ29wU5GPt2vhx<Nan&_O4}R`nBhE{#E-Iy%Jw@d9&o!
zG;G~{aN1fk*3HpdS89p&Mk&lW5cvIWiQ5*(D+@%xw;F&NE}&A_C(%(av!T0MeAC7|
zUq4Ou^F1kBsJLAy)p<b_Q_;SUmuDK8l{i(~Oo>`7_OJhk_4BI!J+Y6Xw*@DqZ9S9q
zc>A@9hI!B9o~B;2-&rQ(!+hx7UfDz3!qUe+KAdC8d9c|iBz%FP;oDc&@^;Q@{aCqO
ze);}T_R~{mt$n2%P<LQMjePF)+cqt?&hK2twJ>4|W1}?Ft}T%gjgNLcxzFEj-gOMN
z)(YfOfsTj;6BNYve)eTEaN;Yl+<xw_>#~}A&;4$6^v8AeIqYF73eVfgpMAG%r{$#E
zx{OUdd4+fWE`A!dkmr`YXLHH>X%qH;7Vwy+T2;d7y?t}xMJX@oH_s-<&&zxv<bBEV
zzt(w^&C5hDJXg&Yy}{qOfYs#2x&O~&nPc>B{|V#$6~MWs;N6-pOoo%aUp_H6zH*=u
zni$^PDETwpmpNwN`=9#ks$hpgiN-xFMf^n<8#&W+_17~!n|m(j+q8JQKLV#3qV9#N
z*s_2&n+4Pf&h*<;^ZB(5r_ru$GrsG@>TURAJ>mIO*Es8%2c>aw&I&u5gQuxRDRD*~
zJMq<-+f3?qV0q`J=^Hx#p7=CN)!@1f_s_jo))^lJ6)N|C2|svr-TvGiRfE;>bth-K
zE&-XGDtYJa>-`mN4hNX7{rDHBdO-ET;pRn<9t60LI3ZNwy2A95uFC7v51n9eE#Qwm
z|A%+;c9!dUA{>psI4z971iZB6ublLBDubh2xCp-uXZlH{?T6=X<TnXAHhprWpqjSs
z#>I_#@8|8cd69O;==$ABucP13{hT@V(9bzfynK=la^6_`perP)aZaHf`{Q%7C#!Al
zop$41=*g@{XJ+>AYO(k|i=W-T(y#3A6Yq5#I{FjNeR;dSKZ1#2e<IuTr?<Ox5siO=
z4o`*c3gWU16L#PG74(yVIp)prXG^x8=AS)-&-YZ9Ln-T;uR>3fUbK9x@)1ng(qO+t
zHR8>Y5^<5~+rtG;RMl#1_N@8)^mOxNla8uZp5l8YpBI&Cc(N7NTK`JAa(ZW#O8Wts
z#$V^oO<;Li88gdg+LgBk(U<2qPns^qZE`l@qubAX#e>t|{s~q+`jkcL?bB_^+AM!K
zEnb(F?YImo&i-DVhtlO=;L&)eDaNcWTlQq^c57ELv*=sztU2>;F5PS}TdrEM!Qmg%
z<hK5oN1pQds+auh-RaVGhHDecq#U6elU%E}+%9^%Eo1d^eZH#KG4iMGPG4{0@eI^;
z`L<|JS4BMg9@QIe%`toIm&n-9{aT%VkK2h+OE=(q!wt|RSU+#gsY$!!zAB%ux*}D{
zSv2we%eyCDD(TgA{LL3E4*KH6GH2uOR+T*=i@p`CJbMGSVHiAAu}I{E>IqjXXX|6L
zt~YYdIX$<a{^y^6>~&XIt{I51H}2xz;<k1nKeN@s+7;55XH@L1KI^~K_?gtDAe}SM
zCT$eVe>3g=*M+ww&E1&go8K#*eU#K|yYt}bV3sbS8@gH#B`$rfJihac&8^OZ9Y$@M
z3mhj1@%&u*=F-nUXQsqnpYTap!g|TI1v>nkKI!h&|1SJ)-S_THf6?K`3oh7rKz3w6
zOW8eKYh<5H;<MOM9+zFHU;O)`#O-H(JE{#p<I9X3KIzk}^ml8NI8E1`_ssku-}R*r
znWMW}Z^lf^+xc7CZ#{qiyZw`Yibm?4_&bN?T#8@PR$1p+M_s+@&TX2#daHbNy6B86
zRwrERoPVv{&vVT1bH=sgX@Aq0gf7_4vDJSafAaIr^*67bT9w@KQ@}+&X?4J|-As1r
z?%BJ-zUNi`kcK)D9Gt6EH-t^_zV-9HpOezW-P7xK-Pw~Pyiq=Ab$}R)zzk)B8K0vT
z>SwBN>7OaUwKjyMv-|gIjxI?T!O2S_QWofU9P&_{aaJ|j`_2x#DF>$Pk$)GvizVpZ
z%X|L%OCn=b4lFO<-?FF4L6B))lTFtOuWcsZH@)3<FK%6C)$64P?s1$b?f$q~<<$<u
zyvOnD8opE~#_3t^OcmTvw@!0Q{EPz^b$HEgAJ02G@1s7X_X2J>C~~h6eX{9e^lJ}x
z-{zGIczXW+`d48uslvT1Km@dGcZdFi)xuHJnlta~^R5?BJrMF}^=US<3){n=ol#t!
z-MaJmG1u2iF1&V*RQmk#bn`y8%Oa`^%9nbx|4a;gxqen&@utEpuk3RA9o!oC_WX9;
zKYP7Hg5~v^U!ck07mT){2mIb_TfXM->1#V1`<*Nwf2(~GecfjHb^EQh;n%m`O<uFT
zX8+dODZ3wX@Wr3M`*zKC`)Z`dZ$O{JGll7(Cim&JPU}x=J~P^R!+gHIO!>5%lX5}v
z@t$d()xx!=B~H_C{3vr;{(sdSs|)I~i{^*jUBBXO>Vsv`DF&{APrprlw|P2y?8)l&
zEq}g8iLZ4GY`&CieW^;sK-gDpX7D?=*mJ(;WZypBma@8%sg(cBmb^{2=a;^?zJ@b9
z?aHFpv&(-y+CH~@*2ZP!ACK;Mzxa*Nja%O)=Er`%v*X5t?=i8`_M56sm)_jgue7;j
zFMsJLaK{!>aV)55^l{WXY4YXTw^RD>oGrZ?PXB(-taaY`>620x0S5)q4_7&LcfL1F
zh`$&3qGzeF758>y_sBBsB>A}$Q+DO}3Z4wt^5t!qcJ9sk)2pUz>(zOD*`H~B@fj1z
z7yKF%Zd-|;d9LW5Hi;`>f#J%Z4qMl!ib{P`IdE8UmXdGJ&E91jSj9uqw@iKi(4RHk
zSpTPbWxe?M(=FGRF`YSca-l${L)F^2sziV9^BbKcuh~A>>E!Df3JO(F>!&e_BZaHz
zVrrL*ddu$U^Rb8j%w(7zC9^t2sL_ja$>~)$`|Y%j-mQPS;x&)(JgaY~Rwgv=?Aa&r
zRpsYrrp*zWnY?#2vW`ud$|dyS*sI5XSRCvp*8G1B>d04qJaI|9YOeGVXLjwK(xx5D
zR=6s@lAEDvT%P+gBV(FYl>c3+-FxG>uHL$Bb@_YX;$8FYy-d^7&IRo}sWZD_{e8br
zzjx1Hd*sbhCLP8Th2TmLObARqaLQ4S@$Ox%=J;*C%M*OsrBhuQ8l#!!P1Bh)lizCl
zse|&YoIVBTG-k6jS{6?#{N7ZSY}VVJuza)g*C)04j2AYE+}`dVFZ1Qv+?86fd72AK
zUog+Q`eNZX{x@Im9ylfJTUhu1`2O6}Ul013u<9*YaP9EN$LbGu3fS>?E_?oGm;Cnf
z2W#KnuUtCEo^y}J(Mqf2zU{Bq25EV!O%*8MwQpQJnaxq}wXB0M|8=L=Q)lc&)Pt|I
zHxy0io;f3qA;z<z`^*C)js-d*pxYQus3i1SpWO2Jm-XAF&5^IwUAXwU3*28HHaorN
za>?3vMz^Q#I2$)_bL*6dcZW86rT^egm=HKkV$#f2zap7qC*92Oipk6DY_ptyE^Et?
zWjRKo2@muiFEq&Oxh+|qy4{o|<=c#hQoFC$T|aw&*4takcNjDLX8pC+pZfK=@K3q7
zQ>I47ex4c8T?kI!=Ev%qVxksbGca0ppzC%9dzeC3Gh$-mKr@pz>&_Q<*DC7lRqz&h
zEBxS7!t76MOdKvs1)wamdd1{pD;{gVw|cUA^Sss%wUV2^g2#3XpB<m@N?~(rNv-c*
z*-3}bZc=Hq7m6wRY`Xva-E+rWvuA9aTUB?u&br*PU1q8G?Ynhz_sfYZbbKzH-+n)J
zn)yb}zwc6i8lLl&=9izseZTP97V*50&AeZJoje&-ZnsL;G5WXNr?uYmq>gA`XIuX&
zDE^h?&W5js*0T&x=ASt6vPN`%<lmZ;lM$t*Ls;X|=9n++TT7<Nq@C5+|M!jbG>udK
zlcxwc9GLH5Rq--?)~`-O*?QCUb?3@@^7Yo{ybaWQ`DA*>IiZWE^>^+F_F{`x`JjFv
z%ENl+Kdtg9_O(C5`nEEpE#7&|X8#SD*0MkG)Ab&tFTR#x{ooO6<d)2Y3vm-#wYLYH
zVF_9H{nk#y?0Yp%@ta+<7}y%yKHpa950Boz)v9udvlK^2=z;Kt_)wdfSJ!LldfLLX
z=`Ri)*(a0yT=Q+p|J*b;YW7}lch=cg&|$$VCOPYc^Vb_O#C$C~vANFkd0l{U^pnWl
zMVDutyHysIx30UW*gDhU$fCEa{{J%xSTCE=zKLzup6F$3OP;AFzX?~|I)g{VsN4G(
z+eYEta|^HEdUxzip4{wvI~$MRS$r-k{mrD}r=M472L?P`Yy7uqQrwI;I|?gz6eydW
zP)l&$@lq%H;!W;GBbF!Di4ksgp=X<K?pSqe(-rt-4lC9j2y)bO<hgNj5-ZD&knavl
z(m1Y!I=pkR{TNYhwUGNj`UZpekjO<FX6JWRE=k+3<e^h~#bL?CXBpv5E_TlpXV*)8
zTdf~2H|NC~<Ik6_Wye?>+MPfAx$CHo-sg~MHNH*m+o#`|a&{ThnRn0L2h1>eJ9Gb?
z<nxu6I`^`<PW?Zf-@f8c+~&FM`-;0)<;z~G{r2dsonvfiM&_%I2KmM(=7Oge{yeB2
z4k`)3)qmp|CU4fAJ#SacwrsB{v-$hy;f~4vK}$fBb1ljXn2-ERb1bla$;0-r;z-=2
zf@$BnV?XWsv&&^+ja%KWI@KxZ?>ycs@h>&8JH60&*NL4u*F79IoiDPPvYm%(@2wp-
zUZ^|XHaEL;ezni(wakt4(zW&kYE)`HU3)}FZ*5?9#qPAHe^j4$mswhdDvR^pNPe(I
zDmQX})D6GCulCgR+QwPi-rSQRs}~=%EynFYWcN#>fShIqrkN}|0@a13tr5M03b6=@
zCqf5w^qx<jy}0(gUkYeGQ$+1S_DQ9+6V4=D&|Q;c>QixRrTmqKO3_&hO*xA;Jn8g#
z`R4(TVrW79Rz9f-Z|3~`z3TVW&3i#D!sgkHwJ(F_<Sn1`XZpFNMw@s1`5pgXLNE5U
zjQNztyKiMCuXYSt7u@U>bhL}pCq4La)$566TjkQbr+ogPxOu0|B@69+rhCh7Mi-i!
zfyQK~iCy^o?UM9nMWn_{BZm%8(MQ|vZk^x_>&rRVAGsQWmO3-BNbO}3iZwgAcXso>
z)9;RyeP^9<^yxm&xb-T{PZ`e%E!r&qf=7|(NzC>y>*f3U*A&-J3_rI%p7+^JVa_+d
z^JQgfK~p-x%l7asOS#;1!Z5TmGNxwNtLKx>KPl2ZaNuQ;UykU!29}v+hqXf^RCnFk
zWAiaWDXsXV;QZM_MMqRLSp;^dJ3M${D-;K*=0QF14wnZP6~ymv-r=GC)qIzaqslZ9
zVbIO2Di6v}DrtT?^2JDW&fGjsgYMJ1eRuw6><SAP;x#BZ^md7H)04QT8Nz>_9_BaN
zkajz9+w@Jl$`#pmoRFO|U(d|lJ<3V$HD}JhYdPzuJK26qd$2|BZOqoFO-HU3>8>*8
zI{E#S|LNSh|HCGIe|R^Q>GS!ezcht<BL12!YvcGK;*ozvvEWL&^aOJzaAOd3%T!sT
zdvna6btg0J|9$$mWA@&xH=PVj97mKNl%7=D`T8%Yj{ca@8Xola$n|r7K6r)A6?&PY
zXLZ_jg6Skl$4N6Cn{?*Pcgp-QPse<x?m<2Izf%<U#iV9-=CP*he-WDTY)$6za+WF4
zk3g+9@4o7%&%E-=S*3*guI^Ur|9dv!PO{ba``H%PcmL1ITyOKyR=Xh6RM$v3&rKs}
z`W9_9h5g63Ylkg8w0g1ms}uQep0}pEu)$o;0GcTLkTAjfR^yY>1M7kvYCS<KcsPO<
zSl;|#Rgu5;<)%H(-<*@Lc%;QwOtNMD7USlSzH`F4)BdM(qJNpO?7E|Ty@5AUZ(%M|
zOxCNo#J~Fsv>F|4{~tZEm!<hmaE#VLx9XK=v-Vs(61D!itm(4lud+D|B(_V%S#6$m
zJo3YnTOFx^;n|yKN5A&v;IX?e^3am0pZh~)<(=p6cHdc19Nw}YQKu&fR~Vc~eVpX{
z{@rJjgy;J%TQ?*hUa|)i{$Y%Bmmd1u!|op?zBcaKr|XsWZ}&{++ZtYKrm^~+l!;=w
zs{FL6_fP#4cu~~vbNkKb_Q!oSZu@qASJS^Eu;HQHb#pJt^TFE>8%gqSzXod7{`4uj
z{_e2L(!IupY1_A)Q9AE2P4m`NhwJN=*SEDls-AmRHBxM<!>_BeWA`8aqSkWtdkR0x
zE8PQM?|*u0pVw2hY3uU3|4&b!oQ4$4HYy(yCUn1fuzK^~KSjlNYF8ZC1G-N%B;vt|
z^t&bj&TIl!cBciR?|Ck_z1%VVR!&v;CZ3|dAz8~-r?@RR9kaHC)9bg}y)T<;&fali
z{hZX=ynC+XuOzvf7x%5-<9u$qL!*22^Dh_6yDKLvOjnIr?kKcZ)hu<gHPgNH?kNqs
zdb`uU`)&MD+{n;;p1YyKx`HwN%>{Qw^>35jUsZju{B-Dh-Hn>CT`ZtRh`^cycNC_Z
ze7gJghsM_8Wvk2o{yH(+1{4|dnJzEYvf*dgt^BSo>Yv7qA8SjG-2HI6`svox>`PWt
zw%F8%$*nwVa-r3FdcO41=N7m5cD>CL-`TTYOZJX#`9l8F4s)irZ{246zBJC*mgkV*
zg=~&}+G5+=<MJgRFRxE3e0k`e(p=q3KR6!jVocs&1zHB#D_-%dgQ59+|AP-<CQR!d
zw#9K}zg;)IM)_0-^SqgwT8r2guRsJfKi3)FB1v<-(hn=XwBMQe_vLl|<ChwbGBbh~
z`SO(guw%EAG(V=!vqQ)3-=xTVl^Ka2r{zrC-oSSwBOvGA%V)FZ$w+Vdl05(XrQFci
zzE4HPTi#YyZoA$3>Bscab-_;`<i(eNT;}_#Y>V*y<j-u=zh0i6|5U2kp^;ts*yS_M
zv-g|c=AYJS&T~EbwLHtG*vG%Ww-#Re#<3*+&NLo7eX}HP7CGSw+2{WrzqkH(^{?Ak
zB+Hffbb>>^H#dTBBLaIwRA7emlSi-J8%?)GGX{efOQncq_(bhJWBq*F;@h6@XPnhN
zcuI8&-<)6a1}kLVaEZ=hJ6g5RxH7QuuHWlLrU?uFZkx<j8j}~dt=HK8UfuGz`j?xc
zcl`;Qn*H{z-aW}x#qFDym;N{B6fyX=dY83LSbe-P|Ic4<|ITpLcwhT-dGj`ww7uL*
zZ8lCz-gV`%`uV5o6Y3n9eV7+lZ<1_2&%LI?x~4Jyf90L;!Cu=B`?7t0det@m&<3OK
zJAZU5KzILr&`wY<yA505u3*+!?WlKhuCkn7#nQ$9FPE(ByTPLgY9mgV?O?RDf`fU#
z5%<xORd4RR3Y*&UqJeL@>g>s3?q0(0Hn|4v*dl!K>t)7g1#fDmyD-Pv)myylIB&l1
z^drsxpD#XJ@mTZyrA@M1-I^~M&7MB7X1ZZ<!^N2fWt<{2${X&~`8N5sZI9P{sh|DL
z`;_LYoJn<^otB-eE-;Fl^+<PdEUAAZF!8_(xy`w@YDcOCxhj6nz4lA@XRm}}_(s>X
zm-~}yJ!KhLu8D6rmb-pFmnLXBk>iTzgSZLZhLijF88ki4yYG7fD(YL*E|jdz<4B!k
zJ!^kz!oM=_Gw<paG5^}uy?+0s1qR9dwNLju?JII$SN;9VQOAC3?)=q%KmFUGz0e{5
zNvQtZ2iv`a@5P74FUwG~jO{v^eY@}N3TthD+5dCdc6@mq@jdkQo5E)c)noGS=B<@J
zu4^21XW7X=*T1wWt$+S_$p@jD71y0-Y6o4Ey?R9I^QuKx7e{>+m8e*`%hd3Xoz7G>
z%lD^#ZolGll82E+AR^FVn(F<yLUC~OKw!nr1A7(3<1eem=k)bu-4hD|E#~!LX_|Rf
zRkN4p%>F;w?aMq_cl_4eqwL6@n_{+O{vqv~bA&vPE1ed<TkgqzFDLrmNBbXT`zv<t
zUvxbC>U7Or&Ck*slEXM;1ANnrX6_A`U(YELv3BiW-L(pd6ONUJYv-13?|ZW2Zudr3
zl@6sIJ8`DiJXt&c_<gpMR{oc$*|+qN{8fR1xOI$AW4_zOzFQ~N_4<la{sx5usj`mW
zTp1dJSalrrmR3y$?Pm&LY>al)yR~qMJ)771={jc(_g>!oWz9*@3@S&U!jzjaLDEdI
zR~pYP6tLIKoLO>HoKxn9NFL{U?`d)AJLk{eYxBZr_35qMEW3F0%-wGrtv-GHb-4D=
zHDael?&erpKKpI{|J&y~t%e(-lb$Mbif9C;++6c#PV<-Dj<?oq&e2@GD>m!FuOR!h
z0?h>zzaCqZux>g>iD#5WtlYJ_P>15lDol(VCVN<RW*mKcq=cE_LsZM^$c$u;Mbfil
z*GGVMuq@<w(;6gj3cQ|Ep#8vF1@Y%Gx7|0U?%gXa|8tT$6NiGpDu;;8J68nNGRJNy
zesOv_yZW6($ydvdO7KqEdhDGy=i-^1E^IURU5kv}ar(or9hb`X+}V?JdJ3C;-2SMw
z>FW}|y%xJ+o7p1pB<Y*UhBZ;{mk)1M40w<@yY;<=efiw%oh4?|t=R3C%@6$Ur@>JW
zS+OAPc0$$OD`&TrGge=<xu6=k$YWZ&uER7HK@Qgg(G$8E-dwe;2zj+{^?uW*uaeZK
zG(X%}WU}UF)tlOT&J2yeIBcpvhW-8qJyC4K6p)v)d;9e#exBufb6?2e4WLU=1+L}j
z-I5b}q4fIb^_8h<<@P6KudRO-@?PTgD&xizw$<&1Q)A!XnZBFn|L>QloBx65v1Xi#
z3yCaccn7MtZ`1^b$nCpy)#_&q-_h{B?rSI3nEkak*|3JsF_ndDP34-%+wsP&XLi3X
zKXlA>^K8pTkMb+ox_{-aoX=Pi+Og`!<y1L)*5C}@l8N8eM>mKYyRa3r1WjOKy>vg_
zF5juZz4TA-)N=w)e^tc>CVZY`!o;Bv(9z(XpP;RhE944ll&+Wu^4H3HaW6wlo-O%e
z15R%p4i4$X7acDy=!#n0m$CPE=Ho@CJx|{)U(hG)-+HlewnsYSO=)wt|H14wuWkrh
zzc2Xt^lxE!)3kdhsxO{7XS`m{JkHwpb;;wYvux&`iz$|JDpg(a#^wB5#VM-qjb7|*
zc4+(>I(u?j{ojylo(Jnfms_9z>UZ`_)M;n?BUWcsejk%Dxn7{RWx)g6xrGZ>J%2vC
zJ*sNmzt;_tO8Kik>^a3Gbl}GKi2dr1kL@t4Jtw8J!uY}|-ZfUvSA_fDX{Xy7>V$7G
zlCo9^2xWX(zAS#ts$TECpf155)^$xWHKms}garQU_3GkK2#{^;K6`Ou2~RE88n<dI
zg@>=J7xQ$#yz6i89T!;2H#JeXO3sSAV~Sx1<JYNcpB%S2sCPZ<<lSfIO4i4Be!Kbe
z>9Y*`TbG^(6o~r;?4ENuc7GQ0%3pI;pZ7JIg#I+wc~Vf*GNpx0;`jb{Med>2Ztu5k
zEQ@*VFlY0({ZIC4tl#?PNZ$Rm;X3vH>6dt4MV(YL=G!s<a`uM^m2mClY^6(|zp|Ld
zAGx+Hr}sb&V`R{^;t8F%S02vUQuXeNos{MDeY5ThCGOXHdXH;&%M?CFmQx}Urf%-3
z&)nm{HSR~QEorX#K0eV_U%cuwj!(N&8d0?`C8Dn(dxrh>!mNKqB`25iF;%heDd~{&
zV`p?)^=Wd+%&FV&$L96zzHI%~Su1|orWXskOYFX<q_c4ubGB`q%qEf(lk;Wq+*bGI
z*f%e>mYn#PvBq|m-&a|-JkO;U8Wk+x%X*cG{?NHq7J6=C<m~-VqtuIh>Sve!pYwe(
zW9jwj$!mmvPg*IJqjmpi?8lV{o~t|$i&NhDMUCh8RVmLkyR(aWycT%x&U#+I_jJwY
zMWq&Ii=8DeOsYEeXU3ajF~6QIxq9)ytqZRf7z=p(zp!tbfAcvf?f7Y*UKFnPo_O-h
zZ@cr_kzMEPIM(PcFkW(UXWHA6YhDiNi)#xLmYF-RnHrK|9sVL}LiWuIe0ryXs~Kg_
ze>6>7&RG2^dd1{3*J6H8V*q6ahX;m@t7pc{F?@U6><MV+JOiUWlj6PHO5Mc$m#o{q
z96$aw`=jmUbI;TD`FFj%JC#T5*!8CE-fI|HFD=}qzy8?XE4?KrP9^*~|LNx?%|F&v
zbMCFn-1_g*ua~hMMdkksq;7;ap7Z;?EUWoSWZ$lm1()j1Y|3~1ZR5%O_P*TFA3MFK
z?Vj-TtjUd#8m$kOnk%LntKWW+de3yf>|_UV-XEv+J@;$A{60g^^KsA5C@-PPhVCe{
zTc7GL+BL<9eT_1XJQleAY_g4eeE4Ar+jo~$cXAZ$e0k{eFAkPs-WhDWz9iW%Khrno
zW=}@wF0nP2OwX^G3%V2Unqa~ERW^t3TN%9pZ@w$gEf9U8r0-g*eyMb71!zfJh`+=8
zv?)=oRtf8w4d0h2*d0^tS!MnrXzyct@7`sytKK%)n`?)7FW*}Jeo}*x<c)Pv><g~B
zPhUIX*WdkB?Az~b{anL3r@*}Qnfp7NU3qfPW8VK-A29Fc`jQK_)6P$+JN_zNb!M$1
zXA}3)jZsf895CTL@<YU7?YgFoOd8(Hl<x4vU3tIp)SUamypc?gpT;kK=L{-ruFqJ&
zB#<wgE+w$^dB)zb{a@W!>R<efdRO=Eb)o*zwGIK{EH6Y1BN`LdF+RQJnf|-y=bhTm
zQ32^z9NR7$i}<ANUgeXJ-}Y)VHxtJh!5Qa1h<~lD_S;&)2^z{#aBoc6xhSQQ&G=D!
zdEW*V(B9=InhTh}2_3w5mHUs)<+J9x+b8QKehJ?j9X~zd<<r@9bt_*k=q@REYyEiF
zrJsLdtU4+}0vy=2mI`my&Al`IRp>*j=baPJMZRRH(PdVDer%?2<hd2~J1Z-NE*Dw+
z`g!}$TFuibUhd0GKUtdiYyFg*vUHi&kBz5dmR=NJJdeewRJCz|UANVXdFNgg6=cn|
z=E~(%{yW!flk(p+GN;Pld_KcFA<_M3PF>J^p51QyyYFybn*6I?*3I=z_^;S!Qtu3=
zr6ycvJmPsg=0=~)ZpYeZpK~sMvAT4`PUE`Z<oTaVP8zTMBBN6N>C_s%qPxXQ?yD-s
zf6lm&vgyvFmdI_NZ1_C1^BP~8KG>dk#VKFT!2YyP;Qb|yb%|46Z45f|OD|=%v$5x?
z|2Lj}+^4?3`01|gv+u1D$~V=pWC|7Hc=G+hye}_b@*I~hjlAi3_>246iwRR-JKFYd
zb6dOm!Ixu4wrrjIB&yDvY2VY*>J@+6L$j>G%h|8EDsUFfyy0y-^ZL?rSA-c^1UiBq
zT<1UTe(B)tX`8>U-k?39WRJ?+i&h?2W^AciSQ2tas>E>JEaumV@-j=O`_->F)!>}I
z>yPitpW-tTg+3_RpMKhRWZJnUDhE?1?<-wa|MBRK{ipc<F`cfMy5(N!3R%ueo|nwT
z)6QRgwCVEKrT2bs<nf9(4RiGWGNb0#BL}9<C6enD<cnf%+5VjO_sQ?w-uqWCVfJS_
z@aEr*o-&)-7{8+n_2=JQ-<-3yiF@gFJ)>klhtm0MLi;U#Y<wBz$j5M&Y15jmvOn`C
zIlB0}=N&wL?Cg`TvtsPl&z-=$JAYdFz0XgqJlU$9|F7x(T5P#w-_?YZUv?kKa;Oz(
z7Tla1f2v%g@BDMi&r(dKVl(2H|4CdjT`=$SlUeJNd*8NI@%cAB`?9Qon|E1>|EmI?
zUg^iel0A9t-=eqieY+yqSjklM*L2Et=AGLLt&84Wo2|Wn+H1#1p-&E7%Z!C~ZT_9Q
zJ^JPQi7&0iw{M?NvaJ8h_pUoW3b#LlN3A*n6*!9~?rtbg*0D(i?WlOAW^hZ!_j)P+
z|8)^>d#;^RmQ}gLSTT251e@Kj)N+seGCFHcFYvx=C*J*PwXyMu!Vhk@{@-1c`?%I#
zGT_d{2NTzSVc*Yp#XFYG$ivp)9PgZ5p3^_xs50BGy|_(MT5`$sr3RC;eKc>oe0hBI
zY}6<9%Qx5FYq?c9Z);NI_sa)=Zj{}7ZdbkJ@4J8AT{=JUp6;@P$-LVQHIx#Hzs=mq
z#pFG0LaG0y^WEG1&+gQlY?0Yxl{%w+hPzSoz0=L}pHy&YZ-{6*^2JzX?k>kOHYKtL
zDvT9Q-!5F;K1uIw<R^!OO)1Mef7-0yEP2B4s@QJZpZZ^phfa9^M&_;5w<T{HE=4AE
zvz1ozxbf^=t0B)6&a^JGswno)uUD-M^In+F|7SO)*z<aM!{(wFm99-TPnI!k*H67X
zo7wB19ruDj6_2pG(^(5n+coMbZedSdvA1Eeg1GdjuZcyIpUz2}WUK++4$>IKvBY?%
zNBXK52T1U9#5mNyczuS!sz9nD@V$utI|sjMQAOd+?~NYaHTN|>u{$`5J*K1~wytCA
z)?yE<bv68A_clK8muIs2q0*=~X{+_5|Ep`-6K`eCW|_5jl7sNt?_d0;r!W*O$W>VX
z?Q4APiz(|*PFDSQ-tWyeo<I4omz|rL>*+CXdHJam4*e592T$6uZ~f0t6BsXuv%ftr
z-)CLA{lWppjU2E1?j677VyArmX~I9R=Hn_G623`VO<nv;hg0G5T-A=8OIy<WmrmZJ
ze&3rnd)uVgN$;0Exw`jey4n)|u9|g|XF8>5{cpXx>I)lhu?k~VBJ0kWW_4r!yD_`g
zS!RCg<~TAdb!Bt@NuCWtdo+$`N5|dY&6mLQfTQf0`_Em{UY`5rP2IVt-t>ZN8cRgc
z$;~&Xyp*~lcB)7cG+HegA=4FUa@}Kd@s^nK6O-cDpI`b`Yis`6^z5q3H}tK-zI<<u
z`+vf6zwUj`T+4F%>3^OI9@sd4O7nkbg&fAeXZ7b_4%U1cm!W#KxU*)G_kPRtYx#;l
z-=90Doi%x0^d9ZGufHy+Szq^hp-T0yT9xYy-A|w6T4QeJX<43X)|PnhueaPQ|7jd7
z$_9J4@h!6fPn<h2H11~doY3uae#hDV&$~_j^fEAUv}i7{zqP-n@I$%3EMNBG4E0GW
zi-P<1UpgrG^3A1p5B)#=3fR}p_G#`E9x*$!7xyGihfKO0c_OX(&7@;xlfJEG{I<1w
zwl`De-z{<ccT*>Lo2hJaNRWDAG@<Op>17vr9_g&Owkkh+@AndQOTEeUUw85d)UN%n
z_kF@|?sVz6uZQCH8dbN~=X0HS!(FuQ_BF>NyY5e|_<8h2fYrM1t?Jj#KbR-?t?0;p
zuUQfMdL|!OH~X#a`<-t@PA-2EGTnVnc<ZjcVxJoB^lsZR>#9@Qx!qhUeoY&eF-C0q
z_oraygXxhET9?^!r_G5?KIy&NXodd#o2w`P>s4a;5W*B=G9iHN$Syf=V{V&EN^@TQ
z?+lCof3>~l-|dsa8>cK)pY-|umpK>a?tAxjeg*T(^*2f+FNIg-UCWmGIq%|q39HTh
zXEM^;tUM;?>{KuaWbQAq-g)WfB(W<E>t5d%ztuIV^N;=%ccB}Lzw#}0n8Mt6oF&G&
zNv&yr<nv$8WZo{HaD3$)LAG-@7v5X2SYJolWnrWEW>tfA=XFo==w5$5^(Ck3g3n!H
zf#>FK%bisucV(ZbJ^$W7O->uH^tY3WfAkjreDmwcE19*=(<?hZn}70;pa0o`p;3nA
z$u7;knOf~zJRrv#HZrkHQV`#na9>j)cM^DpU&F(JeZiBwin(i_lsZOEnYE_mmCbaX
zr}n$2m-(OA?9O&~?w62w+hzXwdy2k>DfpjD<p^ObnJnqTq#0D(t=Oo?{IVd&yZVc(
zqGZad^=zj4kq+;??o8Mn@&DGv#~YsPX+G)49`yB`kLC4xS)YX(Cwv~nFmFt&|FFI$
z*u_wx{BF?Z*P1_TR5w>-GE8IJ@5BCTo%x*aZ>~jsy_|5YL4V!4RR+8TJAYaCs8>hv
zWVS!KZ_u@6hsZ|uOXpWEjC=m}<ol(o?~7XnES}%pE_W&IvU}Bs_P>G~+Ib&uTY83N
z=b2f(_03`(DivSWEu3@wZQP~52DaroU+2zR@@U;T^Xt#WJm2Q=CH|euvg1Ym)RLb|
zCVs!vdA(S(<(^9E<CuA3+6CV4%S0F&OIb@!#?8Gr1+=-ffq`ium&upDwE^7jJHgYJ
za$*;DKU~`V<niI?4}Kg>Mh@HJpEJG{xb+}U^3t~rxi546lzg}S=e8h%kyoc&>cyt$
z9J|Ej^YqRi{2pGhHsyBd{LB}5vtKmKsR{p6^1bvQpNqm7hUpFkn?#jop7e~_{Pt|z
zQ_dUaMYgxK_3ewC6yzCs<<6?B25CAx&^q9HIWA3X2h%BsNgN6S6ApZ_QFzV<+4;oL
zqIqG$%kJ#EC*{&M2WYVfI3#Rr;B$%1i!%z?KjYM6v2SNLU6!oYNzvVW&0+e*XCCVs
zB{J4OWqh#xQc?QO-;wDhAESBR@4UYE-#zIEWsH*;FCTn+{f9Se)Z}Xm|2RL-%V<A5
zhhciBar#10<71y*T=EZkcUj_eT({Bdjs6YZy0dn5P4%gh7WNQNxO}VstY^0QUP+Y$
zj{;R#1U{%KF#fO2pE=nOGMU58BGtQbo#`3SV6lUO8zXOt=k!B~A5`~zd(3zG!>uP}
zooS6pZGG2n8~h2K)KLBX%hTJ7CmC_;NxyZOu6b-f=emSa9RcQL{o8ikJE(CyE7yK?
z|D%fP;B^}>IrQ9C&6suYt@sb^)egH#BpVMz{^h#ufByRCzQ2czR1#S}iF>3kS^8h8
z{^lCZTm4m^ul$)A{X_1=s#A3wA#Mi*p9Ia^wnPau*}=*xwMp$`9_wq@si0o^EsiDS
zw{L6<nX$X4IkS{0rYW<FmGz>7xU5dWxj(fBm+k3wU}S>K>s~4Sd7<Q{QX03$g9A}^
zo@_qTHzjqhT{^?-){BSPIy0A+MFc5o%|9EeU|@W&_42hj>knsgdu^KLP_($Oc<xrA
z#OHfh{7etH-cE^YI=AEDp6ivoj4ZE|FBGkv{OiiJS)dI{97ohHbgVrv1-#1t!9IpY
zz3;w%_I~>CpnJd3#Lr5N@%A$EC#62tPkYND7Tt36_fD=8Jc8@Z^vr&NSN#|JT1+}p
zvW;OT)6Za)qiZ7!pPsv`@76B5I%MM2mmZI5+(k71RNP9+|F3X;&)#;k+4oxgq-|NY
zJbKNtYYj)(lV>bDL{@s=l4Gg+`QdP9%>Tbn6tg$Y;e1i~^zX-JM!j7#d8ByKW`EXa
z;<ys5uy<ct*z&4vc3VO1v_s+<K0P;i_s^ID8a;GKn8?tm*WGfeVm`xkqbc2|oUeCG
zXZ)V)`G3m_8xQfupG<k_cO-b{?faAccHQa8yDNL|ii@)?doC}-x_6eJ@Ba&PceAES
zm2SHHdd=Y#+Jd<cw<h1+cG;|AkC0Kut@;}7d$Fz!4%0)oaNU~5Fuf_k^V;?U8O2u=
zFWmIkexbAMv`(#A=7+hjmbab|ZG6De*Q71T3fi0?;NZX_RrLLZm=Jit;;Mkcg`?@#
zLJuAV+pphKYT*7pBl+i|JuaT<tc~i&cFb43uypewyQw#(ykECz_C$v1YaSJ?`PRc@
zk$!jn-!SnD)_+SiTT_{0CS8$bE?TW^zmL69um88m?{&ZPW;VV^I_>a^LqvJOb20A)
z#fCfhmshRZJpGl<GXDIczkT;ul<EaL>U<9wvt(&1Tz{k<RCtbcYfh~exVF|kP~@7p
zoqwq_10zeA*agRiXG^wfm+v_hyWYl2V1j&AzyJJrC&?2^>5W?+pa0i*KJeTImF+E%
zytLG6-gFP0S-xL(pSHT*x$MA4u`eOaY$XYr_q2ZK?&P!Be8kBzSHb*A&F9y@AO8*Q
zyFM*DQ{AS24r^MYp3HB{!*;XguwD3H@Z*Kro=%4+Ofmnb-fZ}`_?xgVbNICLHzfCk
zPrshz&7!3_flYPRVz011FYrXZi|&O9eqC=@WIH?rO>nWi<9sn|rB#P&{+xT&lf{cf
zBI<tqkug?XIf-S<<<Nh(uR3m<v`IypWf?SA<!rT%E>-&Z^f3RW&UFV<@2G}(?0!8-
z+$i{}79(@(l*LS)uY|Z+9K~);I63#({yp~Z*3IgUV?J#c^M4)J_9Ne_-d$LroMs%w
zl)cw?(&PAbj@7SK58vZBqG+)9U$wA%X0q<mGhC|svzOnWs2zGp%6-CVucVwF2UAu(
zGk2*cO6EVIhleQ0FvhNXQE72>p$a&CRB~pxZ{bTj`APi#)2V7NW4JvgyvVxzJpTQu
z%_mq&CiuRq`Yj)n!**6Fd-sfP?dvbVxv-SG<l+M(PPq*4+ZP+BJ!V|vy<y`M*SZB&
zy;IqQvo~n>+pu1Gz53#}Q{}VnYqXr<S~~ZG4VRF|dDU;ejwi3%MA|OD@y+UZ{aMD9
zbxW8s1H_+CWt#OqW}oo?P3P7GNVTZkKRcgGL)ufR!NG;;*KhZ_;4)<`BUi|{Y9qsG
z(W?t4u2f>;xDxGPZL%fVSwzC%%*%iY2cJ(}e*U~>_N0$03(EH{bxihru03DX|7}3b
zwuO8lyXW?HU;FU#^!|5Z;om<5U2_nhcK7t!*hvR_OE|aPxul{fsBl5``{4&M%^SmF
z=ViocF5ArHv4Np~5z8{>OZ5p4jNKDw=6W|jzm#xZ=CZ0LixNov{kB=Gz02-*zFwN!
z`*z)QrfTH|2T_(~`!)Sn2Z+A{uZ|1gWo(LBb+PXXs5Mg&;$UqiVNf$AW2O04<@=^*
z=5O|yzdwX6M`TY!*}k~EzHO!#Jh{9#cz@8{wxGdi!II5iJa)f(_25<0+S<K;UDBSs
z@?PM5Je;xSN%ht@^R`Uv|D!$W`O3QQ&kc733ijVwT`2nEP~on1xkYQ9N%lOIdRK7Q
zY2*LLOj13H-sNv!IlOut{plSO<IZ_o@=MxeY?tfYn6_PT#g>MD*B-IW-8$Q1`+|#+
zo?Bv{STf%>7Wn77;26^-`EC9aihKDPR)MCWS=1aRcqi~W6@qG%MJ$(QYV5l|m+zeT
zRNvIgSNUq*o=E@o;gs3OOQM$<J6;O8?QUy4yY#NptpNM;o(0`J8fUL9yM8c~H)(QF
zo5Y?a(53EePa;Ypzici`j_eV*y)>ig%*)s1d(YXKTJJMfKhnp|ns!|CdN}vWXSoyj
z-ia5iS#~{J=cXmU?fL6peq6s<E-~fYsx12~gGVI{mf1>g+8vg%EZbbTRnjGPZ{%0=
zzIziUreAnbs;P5u@pTCs=LOrCs@|$^wtmaau>X8^wMalAi-3cI3}aKwp-gTs(2}Al
zN)ygGCH+^JId|Hm#3wT|p3f?~^W3nu?um%V|2_vH3pGa}DILcRr)B2^{GW5~&Z7Cx
zE1UnnT(BbdwCq)R=QT}p`uElSdbD8s)pt3q5&IUMTGCu^#i8-?^WLozkv(tZXB6fb
zhTMx@Vafb=^@?5ZOBB|fIQaMU*+TOxpMPov8Ro2RzI1Dz)d4BzN@k5@qsvV)|95|0
z=gy=d@9J=1bwiEW49%=ou?u$Gyw~(Mop-wJl0G+TA^5N|QPCOm_-_T-GR11$Iu-(2
z>($}9K-Ak&6Es28;84f(l3(bu-}L<j?vpm15jyaAU&HS_6=s#H<%j-$uV8HqNwBiG
z`17y)|7)_h1FuJXmYRKl#bn3Pt-DV1sJ#3c*yM3bT70eW%A;`!rW5z2ey)0)lpKCK
zVtMi9EpKm~kK1#1enfRjZ>3z!?H{@mN(^o}Th>+AbqBt`Q@SADZuaei^Xw00$nhST
zl>9Y<?Q~b|3(KJMQ`dH1YbbWxcx~3NFV>m=A$#_|7|hRqry{VzG*ecu*w@IOHO_T`
z98>u7DdOzy*JiD|GRv;}x9@t!;=4&{c{}INj7#@AP&@nn?(ex3tc|-kGxm3W(cHfD
zp6$%ivgLVSm+#|Hn85Mn$^YLcHz)nekMP;FBubSrt!QOXc91xzap}tVcFBd^dP{|W
z%@!?R`|H{AlR;|l>n+w?Rw%kEz4gVfmkF(UYbTv~lQc<HXvgZM8DEZHw!dCHd(Pv3
z;kna8*(QG}UhlovBmHc7fBM7MvD=lKUpT)Ex%D-aDgI}cK%<_l`QLkwjMd7|`}Ti!
zN<Z@9>OI3})wTaT-jzL**qe7Gc<<?$^J{Nu*8MHocz%nm%7O*Dji&P5XFIQ?Gg)cR
zI-|BhmwA2t^y@!(d=gc5Jk46x8oJIiZQY-4hgepVhGxmX@3#KC`ZYe1QE#)*67SBo
zU(%UjUjJMf8jV=K%=%aKd6R73eoslRCyfqkS=)ks*ERmn{AD9h5z?SA-Mz8`H1xM(
zUqjiy*CM}99@ulHEa0z{ebnLAj1pG!<x3x(b!VBBAkI1A5`&RsNcG}oss5aE(LcH8
ztlG`9B=6-;-}8l$n}6uMU6Gl3cmIRGPx8X9`=>wAvRHm#()`-|yBwF+JXUyh^}(@S
z$14-gM$de7hN<)A7t`?TVJ{~YJT>1~r@vhGgHC1GvVDAeuKlr@Td@3k<F{V6e?NZl
zOu6~)Nvne()64g(A8*s+j`(~(%rWLa>p$t09nKR>1RWkQGXBk7_nd_{O?|~5MwK{F
zt4u({r$J%*p$tz6(0Hb|!b^))?{!4(u_rvTiqd#%#PqWN@B8YLchCH4w&zt^{W#%|
zQA~F3<g&8e?=MNtm=wuWm91KloG!a!+PPWwC%hH6&1KuQXY$fb+ww(rn)&Cm?anX=
zl4Y~q(r0De#3v(sN9f-|yVqaVCM#@|S#5tdEsrxX!9KV9vDxPCDZh8_tem&aXm^zC
zxy!~6x2(%7@UGG|tZuItbWm8`aPGzO{cB$p-8C=f`uOYpFLNQ|rDtz-)(fuK+z|Kv
zbfsh3EZ;n#Nz(n$nbCkf4&Iv{crUMbe(PC+y4mNum%A@q+9G@Wz0wMX``<5?ox73P
zAmS+I*&Mqhp*{Mo-}bN3tCe5t%6l#U@>zj<ciuvi7YA-B|5P-KFkgA}xAjS974OQ7
zI2$LS8GIkUJ}ut5wQ%Fc_dU0#FMb&6k=nCC=edwYNm8%%PaWBNuG8Yr3tlR_eW|RL
zQ;RceZ>DA6zM1p3cdKw%<;uEDW%~AIzyAM{3)_+x-;e$MX*&yJ=o7{J;p;N1QrWnd
zT=#n#lO6uoD)*P<TMvh*@*MYAOS|~+Cnxqq^K!D4?0uH<SmVm)N$2#G-WCLXEZcEg
z@817;^Oo-pnviG3JoEL5&$it<i<)6)0sLIw)gL@F_tA<M*}|>bpKWBLofCzlyVr)@
zGdXbR%a<CZ{i}CPeY<{w-S183)K_nH*!6XbeCl?#w*~FX&+MCfbLT%l!5_wp9d_nU
z-#8)gec9tbd$P~CoVytId!N(WV7sZ^D-*M?NV)a;f!cJ9QrsuXdBB5)j4X2EE3PeA
z`1i$}*S-5BzAlq}*B?HwTu{TKp<%kuhVVw+D)sbbBG+zcW^TS8<-U+7z<Q>p<GZx0
z34C(JEc5nOXfvjk*<WiA&yCN1)2Xw$=+O78bJ+TRsM<~s(VP&`f3+<p`lp5d`eKO}
zIuVbLJzdD6SgtZRsQJ;6H<L@3{f|rwj9JcS_}=<6f6a$v%|}aYRbQArVOYOZ>yR6V
zi&nwn{f|nQgznJVHqSrh*4Mb?ORrj`45~tJSo_zo8Ft<FUzXT+iicx=aP2=AhDLUl
zCwDez|J{)LGxpvz-!fa4y($NFuFYClnD-zj*@E{{^@1aNz=viCbTc^WZQLUA6g0}h
zB-l}Sq2Sub9G}I<`DZ%tsdN>3JFwfB*Jp1lU2yy)e?7nbul%X%YwSz7-gw?OedDPy
zciQ<lxss=QK5dOx{~g#Qe~ZOl=Q@|wkBc)Te)g!!W>=qn8~QEm<;Hc)_cyX~Ptgrs
z`e(~!^QPT0?<by4Um4^Waq?^KrH}VAPTO8~J#(W}>m}cp&vy%?n{Tk`y_aRM+%NF>
zxq}_E=YmP+G>%(ZKWA=wB5*=O;Jq))OVfnVU)m-eg(>b*8SD0E-@Y_wC)=b~Kf^D{
zoZ#W9&0ecF(db0Qi4D?B92Ei{O#j^1#?E|M8@+Dvwp7cDxt8%c*?~_!>#o<e{oJjm
zIk)Ct>V9KR0iSvPQp?t7wqB}VlKK$5`XZpGp(Y)2s(^#S?1nOr)BHj^gY9-W9xm1l
zj<>drT333=!D-vKRQ-A;^Y<kaySHweqH?{@vEDR#&gPo3$&SjAUTf~pG5Ni)uI@5p
z;O);>%r4DLzFqP{&u*UFEvM$VGZs6$bINZm-1hy#wxfIWHg`#yU+J@W+akTyjhSg$
z*Tg=}t2cMXzcacsy=Z!kkKUwJ{sPz5JhruTkJzsJ{C4csiSL)Q&V85l<Xp;O#qusa
zt9f#D_1`Qf6c<|`$X*bv864j<$^Qpm-45PL_C^5~r+u9c_3t|_I;6kh{`uW6?(K@_
zrJmlu`?jgS)ZvT%bXV)YtyD;rX~o*-cRP*Kmu0fW7(c(NwFJKT;E2A$^-de`c#^;g
z_XCd?JY31A@nXS_D=7}ki|yWeYCYsw68x+GcG33zB?4;AxsAMaY1_Q4^tV0^THd?&
zN79}C%mwz69h0qhEd6udm^<ahMXT@P@1)K%Y)_be^T4+^eMWa<*c5MF->v(m=eqBD
zt0$BHE^EHKxv$dmchCD3*@5$H^$eunOfU91c`#yo^M)PVpFWm7x|_tB*1Xt!U1Q0H
zEiDh?IioIVzWur`K{DcLaX^msWGg0D?icS@cJ7_>K6tnF-hJ9HV~lp2l`zj-nHtc(
zVA`VFlfHoab`W0$FgC?l@PXM}q8`gu<@Rn%Z*D7k{_9%Fgnw!Ks?GoJsI%Lv{OuL%
z%x8CR81JkudLfl}LuzZ=!gHSrLR01`1Wah)`xRk+^IG4n*Vd1mc7OgK_H=TB$==<u
z>FZXUdLGWK3>wqme&@1>b>ltxce~HOueXTN=l$l!&=|pbZRfg4j(hztF&gYyW$hRd
zE@IQ^ogg;lhQ#UjTs!$LUGisNn;(|)?mf31yLo3t9|P0LNz=^FshZb?t6CJDyHTgI
z;P01Z3v#aemlrjAUY=+8`h>6SJftmN6V^Ax)I(-Oz_U^-x(?(#aDRPy#*)neYc?MH
z=rnD1v+Jin_pDBozPtlow*Bz&dhw>U+Yi2c{{8sduagq;;fwS^)4Sk_ei-pcRN;i`
zy={x1fIFF>@hCl}%`+LNdG@^gB_B5FW~o(?{?Fa*+fV%KV-xN*bKh;K`+UmYZQupb
z;PrDD#DN;drkH2DKWIUQ;K1f;bHAAKye!Et<+!@``#&%EzVXk$UvFPgB76^2f`KCr
zgIMs0skiHT|0{5x9%4(ttcG(Xm*;FL>)j~-`Sg{2iU(BfeZeO^VCV+<uOqxcVS2^w
zzDbC{WYPHWzW#4=#m>r`(^T8)qIOrD`=i0Aw|DDhMU0?9n5m_3pvYA;!v(x>6XFzs
zWd|-#&+ktOo4$V2)N^%H7{q6awm}DR!CpouRxlXvERca{hV(Zl9C-fSUdC&}X=%@Y
zHAi*M&7S=1U)S#qmPp}-X2?{r1hwg2=K51XgE0{2aX3DBd3yh;9-Vdisg;|2Dq{}+
z`FXuw?)5ilh6kq@bRt3PfRCOG@?m8nItr)xcwy`2Tq7;h|M@kXR#LqO+I9f33C)ld
ziy4e}UfFncr7_&S4d#u@_4%rf&AR@X>p{=Ym)E}^*9kV^Z@-S!0FZfE`UiaUw%W5W
zfH)9U8o>`h>%z`mE3)_hUAV>a)t&me;Sec=A|#dr>nsDLP;GG7$@KsJ|G)KrU)TS<
z|L?=ah~N9Y&+VW5|6Ho(;=li&|Nmp(_H<gy9o!~%xHrs<d6cQ`1v@UBLm@!1G2ZS^
zfl{Mx?$7s&OV@n{9oWYe+P@0fV$d>caKw%hXvubzJDN5|a|*ne98C<vD=}<X(-2$c
zybVz&Bh^j}j4WOvH?p=y?Oy#PeXZ^8J$q!<Y~sJI)Znm?NxQz!eeJaif1cYPcJg+8
zgeWC1g02+Gy&PD8wb`a5`s42VZPAM_ZZquNHnH7U@8|W1&ARnA*ROx7ut>J^Vt+C7
zNkN)#vcbl8YaZTdaQtFZ;<@-6)8+FYkKDT3wmJHokBY|Gyr+LG?Zls}6r7d1?SEFi
zmg!bj{TD`9&1EX4aAN7PUjM5|ZES?6G@=rclatGn&a5j<3vcpE5xDb4bnbJmm-A0G
z{0TT^>d_SMw)h{{?@gLaTLn437SCbX6luKS9AEFuFYYyM*~LCVflz;~SkK_7_cgaV
z3p8YnktQ78F<D92nJvqmd+uD)Q~S><-+j1z0@%+=ANw+Q^WTp@7U@Tx^f9mzSTVh!
zuJ5Vw2K%|GnoACBY2__^Zd|jefZYt?;tsC^X3^3`XOAnhH?GbUHeGx3O6NIGk)3nr
zc(UyDTX};2k<0>5(6B#33xuVh(-^k;>NL5HwdrT;=AGtk4e*vVn0{_wTrg9-p1%Ip
z{(g3*P>~y1c{y*qkKXzud98jimtXV+h2=$gRx?dzt3R{<FR2F_yN~c%@L=QC%O78C
z+8g2sJ$|H7ic8>0P|@Po{Ylw(0<JUoE%VRW+7=Tr{SHS;JC;IX!!`%2%grxC3^zP=
zl*zU`xyf5StSOG8qB5Y<{E?ssbM&0a3&ehF%}Ywxf2otv+c5o2+nbqO0#6Q2gv4uu
zJ!4bMpPTp3M5Z+s{#|`Q{2K4x%)`ad$bfhl)NFQOXe?lv<XAX!?~j0Mj`um2M?9VW
zBx}Q;Pn*<t&Yv33ROF&CyMb+mZ;$1g2R*v0o94XI@qPToc+abSIq}7eO)*(@3<0%Z
zQ`a-G?5ucNZ}3^=#nFgrqdc?UXTE$|Ae@g8*9=S?Qxre!zMs3@?XffGn-?Bsp;5<F
z<ZZL-awLk6ywUqvFv-i1X_HJ~JHytU+nx(;xh}nRmiw2Z=f6HYYRSa1^Niy|Rj`dL
zUP1~dma4ok-8|EE%6t#2JEEJ^)OI7<{|K9PG!+i&p8dE(+t_YTTv7k7{4y=?spalx
zuEczQtgz%){?@43LJOYpEe&8<p_?Vi8L|1?*B?CkO^<4uVl3Dot;Y}Q4imcVf9qJz
zKmDcCYPa|Fj!!x@Z{YoIgk1_7rZ61T^)|HKBzRD-|G|eaO(vG@YmT2uudv;J>b>s-
z@29h8aDnIBS#%sGcpvE9ydWbcMW5kOF2qw1>!2~zc$GEfTD#t6yEX5=9gti8IBfG_
z-faFCABqH-Shhb|U3F{2vk6O2d~#jul*O_$WTEIvW>C%Ju!d<<h)%x;>$f=@|Lcke
z{S8}vwQmcbh%}aNkAeW>+vKdg93IsJPqQ_JPS1LBS+Dx+#UJ%q4<@K=pXxtpNz;Lv
z#$(5hE&L+>S#sX_$zQMT?KHMOy>nxFO55r+og3sqHiA>ILmd;#&L`<FwU?UQaMj=R
zbK#rSyeGh`2_PvAW_w4ZLt5Ppi%Zh0dW_E}uk%=udi{W+q>6mO=BO3ABIP^N7_+X;
z%wMX;vO@IYoO64oHJJY7QD@9{ec~{S10K%aTmnxvsf2u({nB-t%ggL7bstifHXx)C
zEJu!<oSZjVA6ku{tybU)dFtfBFp*6t(_v!B<jB}ncdk9Xn!EaD)?9%FVNyRPXCAmU
zp<(N#GbiDP2JKLHm~h&5(u(+sMHheVY7q=pce~q%de9go#x!Ca@~2%&wV1JYX~C;#
z$qa`;=U?wl4!pP~{ipE&7t`5i&-UH>lF?JU^-x~Utab**>`IMEY_PDK5ZRzG{Y;7D
z`xV)L`M$LKU0AxL0O17$%Z_DR%C~9vN-~Aze_prq&py+~BJuU*{?&gMPGD7-x%X(q
z_xMf5-omMZXENn^Ba$UI%`xy~gN1v9V}rtU(G5zszjXe)kl1_SL{#r1a6*I!D%hf<
zTsbdwl#HrRzfRh$_*IqV#r|lfPTzH`C7m*9`8&UHJi2*xjo$3L3a6YEAwG9tXq4g*
zcoOu{ZQeS;TdONfSIWWs1u2XeK->dLjrafNMKi~gh)r~z{i&{!>C648>9WOsYp)%f
zX#8#eQob|ygc6+9<|p$in51b#*7!iO!Ga(rmYpH1Eag}9+?lB?E5Tejo%;=YM};KJ
zXAoteRJLN%fn&#xt<%f*ZSY>OR_AZ|u9lDmOBYAfv8Gfm>fNW;`*^#=lYK1*=AGNJ
z`1x(sZK=ZWT-Vsc#IiG`r90RB?E#Nvi&QVDZd<k(v_%>0d<1b|7gMxw`maeG#tv(=
zBcJ?Z*(I`4I`x)k!7aC<&yV7!h^|OqIRC`YZ|R&-udi(Wbwvv1N)6D>SdV&}Pd;>8
z;BAn)NC6z&XhbVlj&FXA(t)J`&*liJUr<#)@ndqPnfdq04@}bM9gm+ab?v~+@?A$l
zc(eVc!fNcsL#$D)&mGttIWrb?`_)?Q+w+Dc)PM_8I63gLe9^OcxkP8p<kg91A3lBh
zbOGCx5J8xu91=Vkc?%Ld7pZP^x~aokV)*5L>m`M!)0Jnk9@$y`^m&X&-}6bYuD%b+
z&iTJEW=`Q->Gy9>eO}T0xujDw^R%wrY4fP5%VB<S-~*Ka4HB_JpPYAIy(QD<CVuzD
zDZfUDLpvf4SZ+`4(ao9l(&TSPqlOhIS%AaUVI5P|;>m?+>epSmea_7C54yK-V_L>s
z*{ra0GaI)~-W<BAblt|(wHFzS9<RAQ&1Ac(?_cwIl7>tEuTwmI#Ya!SKWwG-?PK~1
zZ|gLUzuGQ%?MVpJD>mVuf6V4c_e8B-`15>yTlV$G<@;~v^}5|YW^(IS<+S2Mc_EF}
zQd_Rwx*^xE_x)(n(&C%9%2eP9HYDW0Db{H$BA-_*ZP;8d*{|=H6<MwYS|y{<(7+CA
zDU==iR~{G{{rI1aRPQg>rT)8Mp}@fOkz<Lm<BamgX%;hYI;NLgP?+X+nD_Loi3T%c
zFP>1?$uq@!`HOWw-mqp(5$VqUGa*|2|0ZAN%W===7roOwm44&v+^v6?8UEd5x8FQ_
z;r{ieA5xR<)bTj#7w!9LAsOp6le0vy*~^AYF4}tPffZ${3s$f|LXs7f3mLLpJm;Nm
zy|iu0bdFCQQoW17S^S8$!vya=x$Y++QQ^SQxPm3+S@W|Dn+ZnkTdo{mx%t_V>kU7W
z-%jV7cKdIq;adjw)8~(`eU_(ZoMh8>p!y!G5=VjMbjgW+XO7Hcsd)Tk+K;!VulWBq
zs(z*YzW1jCBS%RkgW9F(oJE~m9%_J3Lv>JP>EbP#sOgrPbumtL$vUlv+nyway#F-A
z_FJ02(%<PF4?Lv%lEBsV5p{<N-Zi;yop9Glu%<j%tN--dz4WEbyEf%qxcKAKCzn&j
zVy&s0OinFPKE0@fDe7Lwzug*q^WL=bSRFVz>;L?{#y0tP+@uT?0)Ic5Un;t0ebW!E
z4M7L3MArm6)`+^Sd@zS=QAoi(E~RjR<xRy}Kc3WAhE4f!Hek~AZ(e4qg$@&HzS``b
z=24LLfoTy(g2CtLMSZ%v8~9b9US4XkCiB+v@4LCKmd3pAb}3oeUAMKWuxRBp^-Bs2
zj2sROOuq#-lol1PGiEm6EtPVT$m($6yt<>XWo50=LZ9>ru_pi3_UB6mO=)Cc0cntN
zXHcL1_(!2BnCHO2B+zi+HcLw3cdww2f1bac)TWveSab1x|7^M1CHL#gAJ*&;3fg-9
zqi5Fg`JexMzOmt|K&)`1%D&C|ulL>CqgDGZ%Fpz$<J(l(C!e!;^v>zMbS-~*X4lDS
zX_;pg=fp%^o)W^sB+$UXBIUuLF8<gp`1$nKHY?sl75>Yg^j8{eoPBHZwhZT{{U9X@
z42;f97CR*lxtbu{)*vKtYSHbzf7Yt{PIU46p?dz;b>H&5zzP2Gub=<eD6{(N&85%p
z?tk|A=iT7j758(PgbunYv;CdrqkCkhYmTJ%m!+OYW}%54%L<}(jve}yEc!@m;=*$c
zpMR#RZW0LMW}Fj~b+9i86p8{34vq`h*`t}PK3vhz?6%n-@#OPD?tj%MV}H%gsNHaN
z&-5?Ck^w8j?ern4A)yHlKM=FAO(^30`zsF~2-)dw`e*;SrtYd4yZBqK%6a~&arsYT
zf9QFvnz(D%aU+Xo?_V|LFWBB8GNr4z+iH8o_hyUOIor-1biMuV{r>k?7rML;7Ha)F
z*|GSYevnMwrXI_me-9S2!b4=j9V>?p?}Uv%YJzP7o_`MZ6;^3x|Jt|yzbgM#snTV2
z&Kp2c3UU%SaX<r>!yzG`NoeJQHVsz(T?@U<%eP+K`7~8}#pcsS^XF&2S}^^&Qmvi7
zQoT!1o0K)vQJXdV!q&V?RqZqCr~Q1jIm~MNo+As+=@so?bvrRPd78!9zbDG8oSR|M
z#^JEQhH*~Jsm-f)Jz3N7LFwMdSE}=yHgoTGT$Pvf#1V^w8ZB75LSza<M59a=b-I{a
zUgeDyysEZP>%4uxX=#A&=gQR?dWTgU5{@inY4d*mr8?O8%F^X(;({~IZLvRn@#baY
z-1`5A64&1AcrA3c{p|AG_k~yZ!Rbtap>Y-GgC{|z7nz@|oW7^(^z|LwDal`VK9jgt
z^FSXSiVa8s<iN~vr0<c^${nVQIw!oma_Gn9c?&d8mD;Uu`{Jq|`R(1SmAZTK#Tx6(
zc1&F1{XToku3*6#agW#V*-bjMqVN4j<IO3bUxx7U%$I$_j4=OzACtw-H!i||kK}CT
zUeb2(V{)pidGix@sXfqq2v0fSXnHB!A$c@)?yV<AwOWBXb41VCJ^CW-dOOOq!14L}
z2!Vdiy-Kl>W;?_JpNn={yPU}lS2lRtqN>@G<>$O?*<6ux{?@%uSdeTFX0q66vvlHt
z>btB;{8yEqA6i~@=A-<acmE!;g6)GR3uxS2U}19Z<SG<AeBr^}{nuCeCauWs;p==+
zq`9&?$!eFt*`<biA9pYO`)@b*&4eG1rz;oU7v;-3x~I5Y*<i0*%=_GXt?!rk#J=oS
zIrVGz$857AK4@exayTToGN?~CsXml5@wxa!_T&93n`##BcC5gbDi}Fb{1(_ttY|*n
zxpU^MMHzP2HAMDo6VQ-}RmzKsb}zn}#Mv&SYEWY5leKBBhkr}+t=nHd+swZ<bDzh)
z>-MRUW>vR?yx;-bm?wPTr0T<O>l4L29G%Oay4?Ib*`Ug&87b=F%(DstcT!oL^TYjQ
z1WimMT63ay_snSf<03OBX-jQ$w2JKI>nk(f%)Pj8-6!YsyDuhv{Q2y4u*^-bgsJ;7
zRG#N;pJ#3-v1fiq*TRibN1UNy%FyTra=^!DtB+n(-SJ(@&bZKI20OOk-{qSywdmI!
zi9?5#<{SHm@O@hIo_qOXi<f?nEG(w3wp>~!^n#Zyyy()e>R(gqN_R|p|L$dt-TvRN
zRM_t+DNMZfd~uZ0+S7Mxrtu!jmpoAkFP|=?GFj|2S@8Af#iv@2^d>ZQd{4Z>U^0UP
zn-i?O7wnJdIivl4uHJ?7XTEN6X|xjYnDV4>$*VcLr!EdwDP3`McEgr_{)@j3FRrwj
zz9&STci--QAHK@q(`+GzA-CSUUlNnOloZ1ZHQXVb<H3_lJ=5;JVd_lN)$Crh&`l7L
zKH=dmVA12iA>JMv@k`4$*hDjSRugOE)0#Tn{6$NwUh0Znt8ECgZE~=W_j&SZMP^q)
zf#sru+hU?-FXqnd-nNCU9aN!#<NH7tgP$JnOU_-~N38!Bn-r_+C|Nr$x`@Nhh6Z`r
zg20#Fd$=E8YSsMFb3o~Jyq$Hz*TyNXVJZF7cKfl{*KJu~%ktpCCiXS9UDqDH2wI|B
zRlc=-rbsK?>2nnuCVMx}vN~_yugd=-expyH&?mF7)C;f>fGY&$wJ4Va1Bp4FrEip6
zPRNAJdwy9=u{(O|{{Q=?SMIsLW@^>*eW{CQnLcfP!atXPa`QTyFG@epO<MFKpdvp$
z++vqY*M%(`)pmRkzW<(=_n#9yed)6l6#YE3Nb~(ML0(zcE3I1asE4!+KsGBdG)`if
zc5db5?wj69PBF7N-*-H4-EZF)7;3ia=z=}-`*gIG3T{{~tj#^w?DHl5#KW7{ms<ph
zHoDsFzmQ=WdQw|CeeS1KK7pse;SBOr<2iu?CzmGr#y)ZE6FIBOa{J_@wuQ%Iu-QF<
zhcVwKfAgE~`IA=W1oL)^oOS)sGplRG)Ux`|XEOyGm6M*TY`xLCY<K^PO{-U>onEv4
zoD07o<DB$Jv#u5Vp%C{oayTedGFj|Yx$hFqE0b><_3@z6oy?;~f>`sCLV*oqr&>YT
zo+)pIx;$84Ejai(gURS;Rqd7u+gW?=={a>qu&8W0XE9Chs_>rQ<|~gX30<#F{xDt8
zbl1|)hVPUOSGVZFy;2~;I47p>Q26<yLT8_<O-tKzBzdA6Kelvyqq(7cdG(Zgt5^6)
z_<i5iaLAf7qonsxW=47^mmkabxFtN=6IwcyIYo+B9;~$qIwLo|-T(AY8TJm_j?lo8
zjX!E0&;7rXD>60ZMcS2r2?deMbW-7o+d&+Zm(GOE>+JuxTw)pfd;jDYj_lZ6(QrVH
zC9IFPIwoM>i%YwIe_E>fQ;qSxTK+W4O$`>|b7VD}PHQU&%#jaQShl94-F064G+m#a
zS)5OPKHs>L`F8Q-<LB)^al(u4lIaY7dcL{U@AH#pylb}aUC1sAj}cfJ1ZVe5ffua>
z)7w<vZb-WMe)jptx_ghGT>9+YroN6^xwAc?r{+YO)N1_dI$-oV{=~ud^?ngD0>|AJ
z?Tlz}RfGA$SEXUHw{Wy?PTZH@mnD|5%lqN<qk|>WwU<lxe%F~ZJ-e%D>A!!!?^!)^
z*1xfIy;iuVmuv5%M|bmQ8L_`I6~6F(TlwRTup?JQH%6^!0;OHBbAJmSIGJi6_j1ZK
z_KfFu<Dan^I+(flFu`LTDf3JaYW!JKH+_<A?gm%2#O2ez3aHOA_WpUIuK9rZ{W)Hp
z5rHvsVxNCrl@=?s5(1T6xo?krixBO7cB#Jn<Byr<@bFr&n5Cd7v*@s})wYvs+uy>)
zQNmGHQJ`sl*^*Ur*QC{NlyG0Yqx{taqwZz=uK7YQb_$$-dBXk5*R->m2=~2GoN#rq
z*xFEm59`XsV}1m*t_e>$a;xz}7v~(WDF*@$DbLT{?0Z;h^XqJB$v)Gm2cj1q_-wO(
z@-D-JSFW%f%j0l(F!8{;-?HC#y1VRYJdn+@%})Mv&L62wd2?@<_J?v6&7WJ=&9=4G
z;X8*8+uq%E`!=kxD6W`R5<huuV9ckZ$FFyVRJ;pYw8KYhO8W{fju-DM>J5IJWffm6
zKZl>K+4xzUc7}xutlYQ|0jiC*y_~~scjt7ou|7wLp98zs>818x<DBodEiBpGYkc}=
zaO&<|@e_pq=6qPXV%asWcX26axt{C1+-=uVEp}#~!lT$+mad~KmVQs)`(Ww%_KUZK
z-hNh>US0O}>)D^_e`|{`?7V&TcIf{2z43mLFMcs~lnXRC)G+Njuxr=zoxwY|&po++
zVfnk;y{fz4mFvGN<`4Rpcl!OW66N;&0vV=^ktZhIy`?PQ^?rh#v5lR1&TqcjuQ_|_
z+&-N1e|qO`(#N06uI||txO4G*&F%No=cZ_WyS$Wt^E{WL)IV2x&rR{tjdU>0;Pkbf
z$NR<dRpFY<1*{WI1x|c=`gB`519$Kq?qu$rCv4^&Sae^$TlsdYhtdB&{aC@X&p%bH
zo`{IhS)K<@yL3G@{_$36e*dgawc6FC6O}Cf@7}ufQro6)2Uj0uX`6Jq^hxc6e<3~>
z=DV-We#jvFuIc;beNUFBi93b-nj5_BmhJ7y`{FD%+vs^*WlFmH{p!clJD*N*?T(64
z+!gfte%{OvfBecPxUQGrnyk9u=dG{iacYk4{&OSO@JvhZv{#j1rE}-^N}W6YuIJBq
zi5DpfOm5Ko*5!OE^~1YEtl#%}-R;@FYKf%#v~TR4M-}?~KKW>#yA=Ap(>zO&`$^)j
zCz3_K+$#OHPhmJe^=wYW%=WomPt!i@{aJS9vc5{w@!C1}n?7VteE!Pipmrcr<hMMX
zVn6$%2LAir{}-_B*`9RZ-ooasTV)e0c)%G|pu>SdeLBa4wILDy898s#8uln&oVS0r
z=dTFvxavvTYPqSKez+Z4fA7Rro@?J&JU*(kT(e#q%VEU%#NNho@{?$>_Q^TZp1XO@
zzZ6?_o`2eZmB1T*sh>V4|J44b^YU)K-H+e4>#G)5JZv$oT`aI%SZP6@?mG4FdlkAr
z3YH1(3;Y^g$h9N#+i!Efa(($<R-bl%pLWaUzfIk0p6A+133sPO<`;#;SI3=A%s1E}
z!oE@abgTBU=<^HJe`RWL&#3a3RV~V|ZPcu}<jd@SKRe#zY4R<WGtXO^{?GFWzWSYU
z=X4*P<IFl$;rG+>J$2^ot^M&n`spf*{U?6?U-Q9oIoIR~A59w<TG-t=o%lIJ&*<E*
z??ra||J`EgJEGJu*<0t*3us58#+N~T`udqBuR1<9ha7D3yzW-oIrmteOtenf{C6Qy
zCp$lIwomtRDDym#CFoQZ?Y;E;?AXFz^;vJz_sy6P)p}IUbMgmcJ_b&+Gv1TAjyE2i
zYH>RDl;&s7tJ7bduC3d%-1pSf|3RmI?LPkbo%pqD@7LVkw5TI&Qq{A$HS-Tm{b2Cl
z?&AM7)ps9$3g@2w>dvfvo4+iZ_R0Fg@;?>+1r;|1GT+Dl{;hewL2U1Ft5eRd`<ul=
z^VgoKn|9ab=iCXryqhH7Y}%?29b)+U{ZD1BP63_TM_)b~=PwdAh?}kG?es;=RS{f6
zm~?`wqO7&L+obG0M5Shy+-2Hl+1_<``6h3V@&$FbWj1e*`lT>=tNA3RhqI=*MgJ`M
zx4^2%vqb4`=GxskXT_I1VxE5V;f2{7W*gc4TrRa%TzK9qucx+tdMmdaDYFi%4f?#%
zJe@Ht>yyIYS5b48uY3A8r~2$X`K|xnecbbV&i1G3ueaHh75Xb}kNNrF*dc{mn_2#z
z-*jA7VYi@PbL#7(pOYhlcy*UwWcqjhT-l{XGdAeHGyJ)-Ge^)%Dn@&g^%Jk^Z=a9;
zFPpRWOTqcw^@j3cnnB))7Z>fkpszFgWA4pk*~S(-_uOTf0`8VJ@(G`?iYZ^k*Z57S
z!pczkk?#d*X4{Js_B}fCA&^aA`!4IiGHsupQl)*2EZ4eIAE#ziU75B$;WX1WetDHW
zU*m&{e5}@QuPBsbdaD*-@r|`y*ZSLe>4?k1XM^?kKM((HwcBLFx*2x_n10QTVlfwF
zpT5kx&Ag?eD$UNy=XrO3QGV{p*Q=i&_w?3sGYw<$vh0%MJKfK>f0}l=(1b6&JBz<t
zpD$h%$WqmP)K#T9zp$XwWtWtx@!b{aGiT)_r)|8MEqb=NxMM%Oid!JeqN2g1&*8AZ
zl%<5d^GW%&SQR6~-;1wk-{QM+g6Dkdf*-4|e2x1T>vpYomkY;=;%=P@e$AivcYFHA
zJhAObDR|%gPv3H0>Gq$APCK}m1TqX5eNUPR9^YrbgwJ>X_uM(L?@X7JH{WKtEbZs;
zdw$*WD1o0F9_j{8{%O@VDgD%=eOi8BO(PRmmwo<o;>XEp#kQB^d9Kb|@p<~f8W-mU
zKUu;uC!Kw*IPul7XI=pTnvJge<(HogyV#?>RW=df2ToA+?WCQk%yLi7;L6F$!n~c`
z8@(Uo7AsA?;dAZOk}Xy?E|<Dy?cx;S7QE^Ed`|SfXLU-u&;DP0F7C_!^$!bJm~vGX
z^yO|6sJ?&b{;#Q<xxa5VE4zK=^^%28jwYJ@nX+r)jdX_xC)pS$-YZ#tu&BZ8vHG0Y
zQy;V3R$6--J1=3aIc=pN&6LLSq+F$|c};n}r_`#Ik+uRk&JK&rIv+$!KRmx=-k0C+
zlUzlrmd)TtxEnMKam7>quE2_h2ELS(iNEt~E$?4Dp_@O^D!jeDZrWXsgAb!yE$_!L
z9c5Z?Rcy(*_guECgP8V<|0Qf3Tjm_FI@Msc&C~bx@96V?*F2TAT>C1sgsHYoZ1t{(
zcP5DayS28mW?4@5lWE&I^5?`JIoa(Yn}5*jZ_SLzD2Xsl1Bv8lC%3X>&Ldu-D)$e+
zKIZgl*TaLyGk3@Bcwv?GiXT$QH#mF;wQt{;r7v1|^KJQ>ubV!H%(1HZvHs1Ay81O6
z%3|Kzzu+qm+OcJ^>HMpUw7K`3*V_BOJ@mi&s?+=KXz({~;S@QyrnNYJy4a(qb!z9>
z@0`E%Znp0>zu(iAESvd>=kAj*n=@slFJ7cJ@4jZuJMDP!y3AP~lHqa@S*m+q-<7;w
zqV)IisR;H*iWhvCCMwD5KL6}#%$WE!>Ell~jfiDaqaD>!1?TcYTg8ohLI+MRJ=m)^
zd2>3inf&E`g#ew3%w0^2B6Ak+@OtPJGCem(s&dV2?mg`0Q<wbtu>bLkQUiOv7Kb2~
zO*sXz7Mr(OR-M*+^m>J!&YpKnM?N}pb}(OkYV|a+da;r$*Yc;=Uw)owRpR2Qd(mK;
zlxWD@`i@tZHneG<iS=8%_S!$k`x}<^{5dArF?H36R{uk3*DUNL{&+advsUYue{*k6
z!TfE_-6^nk>?Kf>de+;fP=Ons4r<TT=f-}x<(Yb$b5T^z;!9hSTQ|44X}@~J^j@%c
z>F&wh)kg)5c8D+uteD#1k}d6{YVxyxYt+PsqS%PbCrTB+v~kX8=Hyjhz^5m)_v!Vv
zaOTh7)dTJXU%wdrZT~Li@D-o?-7K{Bsmrb`mR>dU`Ony%Djlbd9;fpQd2YPOU}^l9
zWZ0FI@xph}3&&1L#`lXYcJ2`P(;BHN0Ild77+8cr&TZ-qy0&EL_w>}$a#4O_;s0#D
zM6Fvr=RiRD^^-^b96zPHJzODBSL)8TS4$2i9TDW!_|7F0+xOu3Qh^oS4R5%n-v7OF
zh5h=|EnmL;;(zqO+Vi}gPL>d(Ow6n+QCDxS+C6LO+pC-n)mfHn)L(HNGfuIL=$ta^
z=#1@w>MOo}=Iqn!G_gs$;-k<a!N<z~y2RWxT<q&{ff?tYm!I3czi(pTvs+8MFR7oN
z;UozQVg-R#20y((gWDP}S@Z37DhNv&OTV7Di@!0cDD0B(%OjWUt_PO6Hmndk`<nCU
z5i7pf<K{AbddH1jm{^pAH0s`eJ}SHad-TG|QEA#@eA5&ITJrhd?ed8{wWYmb*`6yW
zR32^lxX*TLSBP+JTa0DQtn-#Gs{&VFJ#ploi5u(JpDgavC6-*g$iq~ZlDE9v{FzmN
zKx@Mp?^)ZQR`HyCUp7U|l@nZfIxsM43LH48+8SnYfsOONoz;g+wtC!~ZMlN4G&oF4
zU7S=jtwi_uMP0QlW7!a+2iAQ{eqOcM5z-U!t8N<aI_+s)790)>l9+aJoPS??G(eD@
zQSm_e>e+W4=Bev@eyl3FJ^%5A0+YiUOe(HNO}dl<Hx-s>&S6j1bmeCeQeN=6Bx%xK
z=5Lo?%ZRNP6X=+_$wQ{bUH5>iD586-$z-u}%AqM4itqi_>V95Vp1zj(=WfmyPjU+W
zm1`#2SKP~W>pu5`-{;D*yK`EN+bmL-<feXJGg;u7{j0oZ&m#Md3cO%r6nnV);<+oE
z#F!4d76@NFv$;g~$Lqi-iya=P=2mUl?*01MLdPuAoba=^LT8s+O>U3adZ}(<-_E@U
zA81YU`{JOW%d|I;r~1imTTn0e8%xqsolkbh+9ImsGQf2*xTH$uc<>~sEvPGX-_K_z
zZa1DTRiES?d-nX3HN2H-S-CsH6ic68d0Mx|Nz7=Qz=y;~U$!@kvnWiEYE%@A3Cb3F
zlgZs!H_i9U&Goup7s}-eC-8hVTU_gHP<Ly3gzwYG%S|mWZaJ{2^GTlU)kVv?7K<@`
z<UG>3=55~6w9P-ZIxkjiT)FU#)0ay-CvN3?f*4{9;dt<5l9%_JO!xYY5^pO{Iv%Z7
zydztpC@$-|pkv2@cZU~C>?`{?x%1Zbu0lPfMx{HY1=j^b%L1=@+Q<9siYR==)7Zkv
zb6xOQhtb3W<-{ms&NWIrKlsmXkz38L*wB1h@ye;#&nbUQbjn$mCJBFVl)05%k$L~Z
zi_MQhDw>^Zd3hU7?c$gdsm=FM_WGLDEj7=VT@&~+FJ~?DPk0@qAj%Y})s}Gl9*bLb
zeBlAs%6X5U6fta1){9)Kvm(9emFaHPyC>&Qa{hLXz5e~3qE)G%b#|B6|JR*Af4`aa
z&Zh6ngZ`E5J?*N_I4SbT<;M9wE&gJke?BdK{WFA}(N|R=caqP40k-W){dfNV(P4S{
zz0NXNugHJStNXg^7k;UJ`&h5#Ucf%>Pj);{s}~<Xw|&a`*B5r`F?jBue<hWnN|B*a
zpT*=<OU<fUrJ#4ANAvgm*?Zf<B7gV&m&RTki91#~=1+N1o0ls0zkJpKE7lwJR=f+7
zr}|$!m|C2F_2cDdm6xjRwS&a=WXwPNxAe1&WR1nt>~ke&J}t_~mA@)hdM4)C=ZO-A
ztIrCE<f|^&fBTYM{k7}qf7lCG{C}{iv1jq2ird9U!VX(<G`0yw*eB08AN%E~qSK<H
z4_ShYGuwB*OmB`~yLw6SraR4RHI?OIRgefM&YiSnlAH^~+hevpH=T8P=E>Ez3uQxN
zf;x3R9}P*F!9U~vmdm^MFFA8X_wQLN{twq{70++)x@kJ&(#eL_mUB}!9J^J2etVqE
z=Y#_J%{d0AKmQE%+4`c&PvP{v-lKx6&T-c4yxzLfBGtE4Df9NB!^Pd(>n7EGIm7tu
zS?0<lB_G*1rwRMsyBDoH_x?x3m({h#KaX=W39RTm@ax|9g=$|Hnbj1<)jdw#6l!O4
zk3Vj<Pkmwi9J{T5Pv`G>)~H@}EZA&Mzqi9&mLrY{LgCuCUa4$|D=>*S(F#1yzTEnK
zytMsWflrVAt@{4-`1LI2#{Cmw|B4$1iP>x2`{X98amBHC;&bt6zv2~XOph|^b!(Tr
zdw-}>@MfyP4{eL`y)l;8?d{U9^l*F?u$a|gqdi|%_em}zzkZ$gy?sqWz6u7DpSSE^
zQ-6B;y=?ipW{ezWh~d;^jtT2tNK~1|Mladax!IvAJXm!1s<IoW#m$3$T8ZyZjXm}E
zS=0YGvAupz?=Q93vBGz=mXs^|OQVyedneqj?_TrYf98t6<%S1VJN;-hN_q75c+&Id
zjn|8BPGmW<(OV{_&MN3s<Mh)^>%V=ivAfb)^>%icu%}k|KL4Xl4X-BG{co12tzPi(
zc&yl+>d2V=R(>4e&J0Y)1umrTob|4jf0M({?tg5rYyIDQ2laQ=KX%Qt`+xkEo%;94
zIDrly2bq{-*Sgs!u5Q_Nos(z!!e^~>&i?S6uc<9(pLzA_#HhKST)$<W-(CN*HiqwY
z+mu;x|C+6`t}T(-x?Vt|?t1v_&^S%ems5HyQ;JX5t7IMgpQ*L@t4)~7(-n;kvWzdU
zr<YxlSG{k$@3HS~4xhE!D(5*3f2}Arod9dWF|gcId60TQGkZ_k`smm*W|Qv)9-Nir
zs+MOT6@K6PfAPF}x#-u9|GFI3l-)fUt(GqS_g_WyuZ453hm<(Y^-+=eK9%RltFC7s
z6@-r|YqPg^8Eg&m(fzyc*uH<E%3YKF?a!}Y>~1^ZWPYs1&r@=IQxreUn6=91;q=s!
z@Tq=3_S?i=O)r(Zvt;&4uV?G7l!TsqzhKTnoBI3SdmmeEeYH0~&P8vwYpUM&ojUPx
zUBTx=zgWEw43yk_BAH{o1dEAQ>$^|=3s-Aey{K>BK4nSz&egd*f$xo%+Vt<)z3S_|
zRp%b9<`rx=R|pUDTTr0(@!|fd-0R#PXx*CVA~7L-lC+@Y_nAv(St%@i%<{ytPK)E5
zuAzZ^w&(V^n^yldi+}BpiV{>2UAsigX7iQCH~K6Q(Z3Hhl|#zL#v3dJMV-EXB5IE|
zy?9iAyi2oq?~}lP?_7WN8ch#;#=vCAX1V(;*L<<ave5S8)84bW_|9G3^t;TKL#ET$
zXUpCkiPh%?->0wET5|b%yppcipFQF1$G+>IpIJLC!{}(9zcDMvJ+}i@h12i9%e`{h
zN-R0)PiF7e?`z-RO=aqv<NR~(eu3LrKj+q;O1WJ<hi6;hM$5EX`7Il(R$saOXhr#V
zyC1)&t2RZSdekKUs_>^AUwrYA1^@Rh34gbFiR@mnZT8c&V^dcynWt%fPR~9x^6;ch
zaw<kQBDo%)nDnh|S;U+4UgZP#x|+Y871T`b4>-G2z@n$2W`D`K6IUYV8s1IJz1*_;
znx@$Q4cn%sduJbtfAaXrr&iYY&{n}l&IeC~X8)M@E2Ypu+|gc6bJ>-rpB(=1Yp!TE
zkDJC4#{IW^(V>zFdzNzXPg<2axi91N%UgUWUEU_d9B<jGWA|s#!UNf>E02q~@0tIy
z&yn||ou|x3J%;$>yN+{nFIs!`g5nzS@|gl_7Y2S0xGBxEPDlA?P3kGFs?$%ykH5Cv
z5IN!M{o6Or+gWFybNS$BGIjojef(j0AG{tUe_=fNy}G>TaztSLdw<ir2QTfMXtn>s
z|8MzQXZ;FX^;rFRSn{dP2{!lVKMM^1U{fh#x48TD>|~2QPODA4g9RO?Oh2qywA8fG
zL%MWE|JJ+{RZpd@T}7r|{?c~bX8kqq6_K}kZ%=-{Casix4S1rd@dPM^@chvzoyZoP
zEnV4RwQA$3cpd)3!J4v_MnPrr&weg_;d`w!)3&fy*~~4LA-OT4<9Nl<-SbWLL_=Mk
z%d79s|9|q`Z3)?b-F&ZIE#D=^N2veM%bT_6%VN``WpAptdOt|{pf%6SKk7cawrQBm
z(L0y!PnfhcXjLdjceQ<N<eJBixhrSC`QdqXiiq2$NQFOJj4aRnpQTl3IY0jR#kOgi
zSQc4dn`XKuWv9Z#7e`hWNHxtrWm};&UG?u>?MU4&(>V@H(r2*$+$(7&Bl>K=lY-kS
z*JrG8nGIe351#}X1{{IT0)JCbNOp_!RlIOsd~(FLtP?jPcI{f@F1A^J>AyhP7?bVm
zEq26o+*_jFX%ae(=Z$}9k#?Fq=PV;Pr&GtT+;olId(`Rog0HI!`SiG4l+ML?J(+ob
z&BGOcJl+Z{)_T$4@QJ0%!?#ez-1O3c@4Ovxrk8)u^*eCN_Wk-N(gMu8T^=NU-DC5=
z{ac_+%%$vK9p5i6`XrS5TwHQ`&lBfMkJU}h&fE8Q|6Wzh|I6~2_adQQ(@8!&u`e|I
z7ZliZnJm-D5B)hw>Z#W=rn(ZlKjC5m|NZxU|Nbdo>A#-oUH3}QDJ>4AEYt2Ce^Fh2
zHL_=k2xrB6r7eZ|Q<Cm(M9j2=crvI@*UFSSbt%?D$!?bMkxlpa8?ND76wcB%Y1$Jj
zEuNcK*9y-MER|cHvrR{B%HidYkGv@?EqI^GzNGGcMWhhNyGucPPEGr;X7RGNbX}QP
zmAMm4mE{keh+_Yw$iR3va(-{pQl-n)@sq`#axcI3^N-H7V)?&<OzQ<BthdiuH-CEi
z`l(N2Y*~`-`FBf+Jzk!+)cES}RsY0XN)&8fKCiq}m}`4?ePL9pPoZe_<qk;|$>rkb
zgAV@P#q*B8ux4gvNK9{B$Q|)BBFYj>@f=^8<m-N>eD;&s^Dak4*;JIt?niZXbW>&g
z*7eL%(CjVHaNspdK~d#gf1&i!>0TSHwI-P!RXK6L{=R$A^+?l5GYRjfkC#63w9h@b
zZl8g+(s`FVtzj)c(##*N+m(^I2X+>~H;aEeHe8)sd7S%}uH)fl=2s7<25Wn&mT123
zEr0lnU%K{BD+9|L4wmP~%P!6Ln0EhH+r8giEA*rq-LjHv?pGh`-Y)RN=|NcVkB4_Y
zv3jg}KkeM{;$<1{ew=)n-)Lbm=V)=k2l)aMk5AE?@0naWbw6ybx8?PXyKU0{u6wCu
z!rF0WbIkYO@AaO@aPRRfJDDb}`ZqTvp4oo$^~N?U&X$DtCsg+TPcOYDco$OKgXS^W
z80W+!1=#r=4=7vd<Lcs*-f^-}t@!I~mXwL{Y%=!yBG;{A;+?nPu0n_C&7{TscRQqo
zuKs_kFShvA(z=N&CjWG;c&Fb!>!;rw-c<LWTep7H@rV$1tGmv*Mm*}=TFVv1^Z$hT
zt@#>p>N<ysRIS7N$J44N@HQ@I>3ZMi#&_i8f6Zws_p?iav)x}F@7kX5N2Rp$)q@Rw
zzkhX1Fh40ULv&)T)dQDR-`OkMZp?brF(vBc7k8e@$p?ylr3rGG%xd`VUF@#5Q=Ctl
zm-DeAY|g@g6V!Wa2uYr}@QusNu74GLdW(8OT)*k+b^l4O*45_CjrekFL)4Sc-4)#N
zZ`|$_nE$Xgn($L2=#%tp>oyxL<2q&QQ(N_x1@bCA6*X6Dt>94cSs?!Ay{FLIHKONg
zFZD>(CQMy*!7erW&|bF7Ndh0<=|}$f8y>yS+Hk_vHOUgXyH?%_p8d|`$C9;=EG;~&
zX8ubk_~~MvFRZv=|JvBXlFGI}o?VOU_WhXu<$U!|bIo6x6Qk!ZeB_+T^n9teT*QTH
zrJXVz>kOx7Mmc6DFScZj4rf7hT^@)sS?t`ywESG~tVJHOF^}x0wE4eDGRdo)>%;kO
z@y2OWe~9T;t*tyeE%Lw9z1e!d@^7g{Rdx0r>iaYG!kYB9(AtcPi&~OqS-#KXsoWV?
zuzcF5iM)+^!Wv?MC5=Zvsd9fUy1#o<NMLi0XQ;+RQ>A5EYZmscSTp^=+M4`xQnT)@
zjw>?FJin>DYJT^|pU%IJrTShq35@>o`9bp4%$y+37CGO9$1jBPFQ2%m7Ou~*eEO@I
zN*jxqY-We_i8R8~90QZCYQtpjCf?O6l}%g&YuLrrvpL^(HcUvkET(p}>(Qdg;kq$j
zie9xmjos04W#989MJwlRdAaxO4aFr@QmQI?dsj~GzN3B4E5cEb!{LDd)4^D|qMLTt
ze+Yye&zYY+D`;Cp#<7b_HP2p^u{QN;w+h_)rTX%mwi~A}B^Er)TCdHg{b#{MW&YhJ
zZ&#bh&ar9!pOmM1G3Jb*{9*_3^QKWz%VlHdG2MCeWm0PM>(W&xA6{Oxr=3A_{R?JM
z;T>xu?u9=pVSXFVZV5|n3@lMD4C>RjNENSO&gzu=xO;|Z^7LD$Z{0t}G4n@I=5jmt
zo=2CyA3bzyO>fQC`EE0ph*lUeR$O&!E4`|DNTE6^{O+1BuNJjTedDyQeEG6Zf_#mA
zLJ`)U^P<Dz>$z|Ld$X)hZ&uaCNy?k7T^wX%qQsUi=3XnV+jUy&mZ$b{|6Bf_YV4-P
z>ejoyFn-Ko6;No=IMZU+9MAY4Zwmx<_Xf?0OZoGE@#ly8|K@zC7mEGq_s;$?NAitn
zOu6A(H`&;4T{rQ|e*3kh3j3{DoH!1@yE1JStoL!j6|}<P(yLtpN{VmacQKawnt7J=
z6#A~RUThX7BL4o*`CR@&sr*UT>JyIpmBt6YcHHJ-vSa<ZTT4{#&Wc=YEm7&nz%*5u
z<DQM_5$BK55j&s0<cvA@{JO=iCD-+OH*>I0KW2LK)&q~gm_zEt#~=NQPT1D>FEyL<
zVoc7@FqORpKe+!@3w{rnc;Z^8VEUtc)vhc4LYY7L3#(>+-TY>mhwIAO(<>YgG&FqK
zdCe+H>Ot0y6Asbldsq$Oozh>RRd>bGBIk5(CPca9uPk3UQA6)rZK6h^qu!aTC*JL`
z`EO%(J$QeU#pEqP=OfN}epTMO-9fC@Uw3Q8``ea*5AN<&HBWJ7U=kJX5ZLKE$L?5C
zsrCEH=vj-!58a)1Sf<IrlF4Gnl*dyNG$RA9eVkl6CD=1~O1xUc-&4L?i|UVdJP=fj
zjelBTr4b;zTP*Uw&#JuV0r%zB70FNHH8}Y9)_L*&%BQ@mrMBhxu6b^B>XzfqGJy~4
z((Se_Jil%6`T%a&kY1Vafs?7`(wB{Q{dO*ES~Dklj<tDcn3F|djF*GeCXXeYQJrg~
z_4-Y=8ctsyY;wc@#M(KN+j<!%Z&+yeBiQ@%EvbVZJMKmoDYI->jZG<^=#anhf@|dN
z=@whEN`$RhJ=z>*b9l7y1&NsMbUc3Tn74?}-udU&d|jecfAM|)QL)!AWS_en_E~!L
z{)Wfz_rDkaS+k{YM%rEddj`uam#aQHHeEx%`QY9&-+g}lE#G#&{_MfaUfye;8;Q*N
zvU+#ep~XR41v)OKXRnm-f|t(+W;w8RR<M)^8lLD|_TbLaH~%)=>kZqNv}v;T{O6ZH
zi3fZVV7l}z+$dpdU8$Z@{~Md#SLTKsOYpzq=_%%+cC1REUWc)Fo`Ue!<6WL_e?3s;
z4NhoJ&3fBpD{#Zrq3-?qvbn1t?XdBV3s+>96v(h<{JHMW&Nm({eP-L1y4g-Oyi$F6
zSEk6BO7%qvbq6)hpR%hiUz-`RPiD=(*lGIfiXPuT{A%sHbw{>-e&cd%?{%YhKW@Yd
zv0tevo&QV2y3g)Z+BWu&Av+4a>n}HoWUwE2H0e6$789eluctoKfemef3OYWehRLTL
zZ+OM2bg!NCEJbChyOC#sVr9+c!knK$t?ZFI%ws!#E?RZ?{Sy5jH6PcSHu||e32bjW
z_`v*ir$uSdq;In$wkv+>SDx_n=SrVt_vO`9_pZLq7bdKIS}d$-B6lO7P{8uE%4gO2
z5ntIOJ7!6oayMbQ<@6wN=2!g~yZKv}I>oMTZ@GE>tm3ux8@D!zJoT=+ogLY8{bTP<
znO2j#OHZV)Q#{JI;r6nbZu^ATH+L?%BImvF^IccV&CLfq4b49udFbkt5x?E^(F;B{
znKlNNdkP!wo%rIW=?5R@W8~Q5)==WQ{^HHYbM!JYGA`*<o4-rH+54t$r~V>ukA3&P
zKH7cr$wj%ex>%DFM-tnejO%$7&I#T<D&`pce9?}a8S9+$^6h5*xms|f<&K$ScK|54
zuT@$Q_*+L?Wxu=d#Pf^xs-~oDZ)&ipkKbarD_UD>d5mhCQQtm|@Gl2~gpMvfJW(p$
zbxSAn#i@JVw0zN3^;8Y>xy+Q!rM$DhPJP*3wY0d&XEbHvj{N-DA7{2>a^<1ZYLfkH
z1sWP;89hzw^VMZff+7ms{#zi;;-kFt#JRZ(+a&UgP6<>wzrTC)vQ@|SuPc3a%w5<2
za;LE57OzhsoIj#vraW!GI=ggY$bXNzUq}C_g}%O(GX2T+eH-2h8!?*Z32)x}YSG1*
zO^ts0=DshzJFm66`{>b0B7)UH-O({+f94&#+F=Ir>3PnG|IbbrzkIUO&CZd5NuRUg
zdHuQ1KfgRJv@>sSSjIK=<K&lag7SZsSh}p*9%9aQ;@F)2tKM}=8`aOHaeLl9w0a`T
zm7A_S@}esbcf2VIkv^sKaC?#e@6dO-$$}>DHZ<Q2l-Vf(9i9UZ6$>;RXlqzGxts5i
z%8{4vrBi$V{C=_H(~(~vp42+u_YytfFTe7w(h^+(cI~sO@jec&t3sQyn)ZviZ!Qi#
z9k%=Pdf!roKN?I$r^Ajr$AQ8vOEKZ^?DgmKTXwHsni+UYhe_z}htE4A)so+avou+_
zpHMjdX{lzl&Qo=L>tk+=uQO~;I_I@Fo}UvNmU+Z(+u}6SD@ju?38hb$x*)&0Xz#<1
z5r#4RjTtOmcGAAmUEoLoEktstVOpZyb>4=xm%lc?<<k762|l-TBTk%Ce{FSYQTTTC
z4Au{zS+RdM5u5bN;%h&jUAeUH+vzwz-PaK=0UJUZazJ6dUSNY?sLJcTlf$nRb1?}B
zFwO1DyD?ABV9K;V2~o1|>x6&yw7;zn_lQinHSsZ*{w0aC&!=~<`S0I5W9jVNM^P7)
za$mhsniy-+8+chcVf%{Exb>%|cidY)-TKj*9@Te!JLY&RewgFXV)r{naX!N3F-#Ua
zk35~*w(WubO;(wWnqe31eMI%1f9_n_)W#vME>g@lYtsrvi(Q$^e8h}AZ=7AW{F;DA
zW5bdy(vi0|zWJW7^Hf=yNua@ji=`{X^;(;b?f2lsJ$^Hjb_E{DJf#%(R!JeS!6a$g
z7kSU8Z}(5HxjX+>=)sDu7kf>l7<bQ4HSgm!{dhoq)ydyabpkINa3d#$lY$3Ms_s-X
zG&`|d{+ghEkEmjuZ^DYnV%to*I91sWG2OiV-epRUM`FtDd2gq^+iU)QwYU1p)pMk`
z%~sjk44M{8_&t05?xm(%S-?9F-l`iItzC4-UsBj!@y*?{ll{f=-Nl?H&SYc!tEc<v
zPtwHm{}lsG|F2ysdU?Z|%&;H)e`^Y_OY^Lom1g-3*4ThHrdBjF`014ftoL4SwL{>e
zvew_a|94NsEKC=F)K)0C@PtjurtSHceOse`n7fH+mg-F2a6b58`(khI-vXgc4y#z!
zDD(eF*vBzbE9y-X1IsQqg&o|dwTkU)9j{xh>Rpzq=ya6(#o9j>lQ}kDKV4I|>}AiD
zhpt(bw@=Nw75d8Mo&W!r#?!Vc_rRws!Ew33l%=33(>HiuprB05J%*IxTh+f;$UoYV
zviI{jw!Vp1I3{0HUvk)T)5kNi6IE9ATkJZ~Wc>4Ne~y-3I|Iup;R*NWZ~nCOyS`-8
z{CD-D;h?2w8DfnG6Bc~GB<#I<=X|^6+7m67o$n9%zjA*>&#LKNM^ZRFo>-PvOnjlI
z-1|YPd9(aA&0e`lTP<}DpF4W->AcGJEmEp&rrz&;j|&^VYTyGUa8P~(ITpGOr}Wjq
zgG<eR39Y(b(crae(ez&F<V&+U+oxao{zvA{-+AFOVKHUBVn5HaH*@ZG=XX94D$w9i
z$>jaq?Wy<sc%x%VPyU60w|6vVaq9HEUz(-6vTI+~=9w}Z`*s-q^3rDC<&>~Yu=ToT
zZ=3D=e^2NBkJQS)`+U~9?=HtTMSjb>^QCLc(Ylx0gJ19Z(j*`C+M%wT<H(E6cNcp4
z!kPdc6B+#UG`D$`n%TZ!Vbbhc#az{}<TLX+&05b7-<scCI;Ik2aBRs|{%?X+LI*RG
z+`crH709dZ|M_2K6ZbhiHQlZN4hIJgp1m#;HYq9kZLaUiiEViT+D5S8D$ASso4b9P
z)}~c>JXNxp-_N(PJNuTq!{zJGem?(bb*j7kV7>ld{^iqUePv^QtduzZ&f<I`au7N&
zFvWs8C*IL<;?64kpJw_gY}wLvGCW&0>-Lp%`-+2uS<i~*?bhxQ*yR4LC)M_E+1odl
zPP3I81y*QIO_+XVqVCD30u2Yc8d@gXZ%%o*_i^PpA%jhd42>lm687nvJrlx%rS0c?
zx42$Bv-!K;A6dI~vqR=t?d`aJx?Fp?c%eu4glF3XU!=;cPL9~;+?%1>(*j>43W{YV
zP}UWCF(a$QDPiXM^K+g!_N^3;J<sWJi|I0}{>5(%!k3Gm&Gvt0EjV+@-34|p^5;Fj
z+^o0e#UiC!P6hkD=6(MEI{l{a!w;X%nlBgabmw7FxZugOcVg<+qm`2C;@$^Nv@x&*
zDH@clex74oU8PuHf7i+U*yo*FonK7LDqPXXvPFO0oVZWionAFsv$y~A+#;_2&+c7x
zVaZId$$Zi`*395x<fw67VE*fs06Qo_f|7d!1Iss1V<>KikiO3Dn3C(=ejF-!nd)ag
zAG~w2mGhRYttQLwqYi4B<p=a@Ev5#1{MW3r?9Zx~JtgHa(|Fe{&2?Y8+R+gdM@|Yq
z3bHtxTqC`ALEI_u_@`ByvAdQH|Axb6Qp;ZV@@?q!-sR_DmcO^>+oH^!M_)f?|M@+7
z`l7uLUR?UB&-}F=B{1g+9XR<^vzKlE^%uIkPPcmQE|Cf>i=7`Cl`OaR$fb(po86B3
zP0RuLDKWie-QWMIZRL8kWMNHyJ<qxSdVz6GZj~>2*}@Hj`j;MKs#aiVwB=+e-}PLy
zTJ-tPJpCAvHU<_c?*-;YW_NFN9==hP{PB}cj#b;HG7i&Y%|BW=GF+l({-1SX|7oRL
z-gf_wYu)Pp?RqBX>-U&_%Uw!VuGH77oe{a3Pp@Z9sRFD=1Fpw&6&ogdUycqcTbJ=8
zY|(a=8x!u$jfxUgj_O?cciE=!mAmA0N)0@#Wn$+}5#d~xTQaA$YU_Um!I}RygT}_H
zW=_2IqGFLpgF`px9O-MiAFG!po)zR}<S6NC`1yHj`S-a@yV6sex0e=8e9^hQdX`He
z#}rkAXxHkQ@w%UWdi<;GEm|}Cpv!^WNJU@G=SMHP9$Pkf*^S#`)}3o^Oq=#5$adOg
zy{pr9!HV?@wxAWZ+t22gURY-xekaRu|4!4))lZN8eDc^uJG12RjCU?6lfM1fr#QLq
z`f=}0wTCWq<IGm}{%StB_s{GT`@O%PHD7*lje{VI!UQ?S-_;Fo-$z!tY~)}Pc%j9Z
ztj^JS<M`h%Q};b}-ckRwM0B~1tkdcZ{F1s#3j#ls7)Mmkjr+qc+rMqa$rW5IR;~>z
zZ0Ba>X>o%?QJ|qgka12-&w*K;Q%~s5s*hlQ)w0ffam|(o8ZUhd@~ZaEeN&z_Z*Lw$
z`h6vZ$$hV$Tsp(S`s#?-9rrnL_p(yYIWPFjvdPBYbnVi=?`N+3$pK1O8`v2yKhG|E
zxc{Ee8T~!y+Bct7+i?1&>zw=la&pe5*hJ;*%E)0gsNrUu!?@kyp#XAkVVmHIZL&`y
zl34cqKFw}_a`Qcx#oKg*jQNZAsR=kqcwK2<?;ldWq*Sqdwe#jlD)(nr-;@m8dSm$~
zl}+sHl{wF-==_QZW|Gxh{_k}7#MyRTit@jA-dW1tyg!Dc{NV4*`#V=Y>s^1}L#Kg(
zMTbLYul?lTGj4j<pFh*03~C}eM6vYDU;o#2+Ft3Up-;E0F_g34sdM_qn#p04%dgGa
z8hky3q37xS4fm&4JL|`s_&w1_dC&CyXDe90ug=-DD|t`m{g_+nD!m)`Dw&itH!Ry>
zF5|4_@^bST=hDUIf!?5eE70JO&iUZUq`b@a9sNgoqkqkI{r7X3fwBMf2%T!b162oK
z?=-W^RTgM!Q8xc-EVOpkqNWb3+aIReZJTp`ef7-;L9<@nz9eqCFu~C9)&0|lzPB&E
zp*=ZKXrr3X)t9L^-`~HGKkGur4UWblma2pNy5g+O=Kk`5>lRG`t*=k;aF{FKbG@oW
z_oaKKobejgMT!iKZ9+42#f;u>n_y{CnVE7=;Lp)Zt=(!p!QuyfkGwJ7Iyan~!{Gdt
zCO4hHR*Q2bn}wzYK(>s6iZqjH3@^KavaC99D0P3@zw^QV=_M|QkJi*h@@xs-BpB@_
zc!70&5G%jVlezQdDl*gcKG$X1%`o;4yg2dNtLk#i(A>0Ji$3M5SWo`T-W#PnG47vw
z;?nn~?YrJc>=6)L_PzU)T96QvfJIA##lksqMX@)tYYv=Ts-t}hJTKvJi>1Wa<Ca*G
zEX$nBD>NoWmG3$8JRQ_l?X>%qU)b+$wsxY`BabPo40FXB8_wO9+CL-Rh;2^W4~b%j
z-1*7gi&Zx=L0f{2QJ~=w?Yh`2yz@&A-1+=2{?V19u4M1MyiMP}37pvcW}ofW%yQqZ
z3#abIZrwdiKWq8!GL`mSpC9fQdiwOg%B-_<{d``nJ1DODlY^0CiJ!ub%U67l*ny&Z
zrSOD|^5rXUchnvi-f)knXiuw0!vSt4p`D?N`&S+AK6ks*`J{f3($1sFomxMHlTV80
zrhhctQO&*4KlKsMk11}}_r1UDlK5;_{&tD`T2PRKYmo!uOcpz95)=RWu^-%iwBg2X
zd9LMRz1Jo^7q?1Kt6yjOZ^x(9ro@z$8$FIDuUx>pY4H-lSG~6yv|6n?n(w>F{tMc$
zlu!D}_J`4PXT-35Ki;jOUpk}NkHbMhk?Bd0{|Z9`Rwe-h<p<67row#*Aa95YM7UPW
zjL&?M+Ii?tbH|>w4mqhxDLR$0GYwdB)gQc_8&kk`r*EIH`(ul5ZIQEQ1d4-nfhuW*
z4ZRNA-YOjDQ(Mrd^GH)R?cUdS)9lVvDc%tkRE^Wwq0bj~uvK8f5_Q3#j|U`~Hgc{w
z96ycMPgUeg|He}FrTJ55M=st|Getw6->9+b@w9(!UrIf<3LSHJz|HvHPt|Dh({4^L
zNEN8S(3rup#=O~OHAk0~zk_)uM@y$mip0sLuc?AdH`i%BpT#%5aB-}2hx4<&caFai
z=}37ud0E9|fpvX*ul@D7t~zOjjvF|1!S$ju(>6c7NvlKT?x?kWyRH<qIK!sYXoBpv
z%du@bUtQ+Cw>n$M;c#G5!!z$VOP+`<$Ff$IPc?O_6Mfz-xm&k3AZN1cTn=uTxLJ3a
zZrrP5`g3l}{@#^}ED8dR4iatwO<bVhnJN@<p55=R`Td^X-A8vw><(R(=%2W^;H}su
z&!*{|jY_LFwIrI>u4J}dA12I^SE+Ve-1oIa%?|U>h60dwaOh58V2oB5KN&jf`TXOY
zSA>NXE@&~imMF|welPEG=)Nc4^Tn6Ac(Ig(&w1l8+f!w7=Z(@ylX6XOe>(aw)j(s8
z$LBTXh5AaZS96qK!P=t@2kx<?#P8Ah@c~q1TnJz?Qk&dycDm5bRG~TY-n!?qS9V&&
zpI$ccbm@|rQ9c=)gYJINc$*!4bSm>+tGaVJqKbRXnC{K*be{9_H2a(wA4X*vCa_Bx
z8dW&HOxnPttZ>1OY1`y2I$7!$lR1>Luk%PHRZjf+wYnsG`O<@vQXhH$y6^wD=A-@0
zBRYpt%y*d0;A7-?qo7bczy6)YQKa^1;}MRGl<BT^(?#6g-A|ge%%uO{qzvWoi&M*7
z9%fJ6v)V=BT+p`Su28A&HGer>I#{%7zvk5+-T}+=j2tH241RiNv-H>G@-Z&*H(9=R
zgGngUF6nj8I1hzfwAt)^N%Cagru)BdCaki2IDhVAW)_7D8BCk}ORl}(O0a>~ST7VB
zpVrjHUSGyrS@&mJ;lkME-H%)DN#DH6aI#dW<ICL;cI#skOU+Dn!2-C$i9vn3#*9EF
zaOK-BR53^4%e(E)sU=T#eeT`d{iMbIt;gJzYAji*0-2LGU9(yQ4Zr}!#;TwlArXu&
zjtfj0zb@l_|L6SD^($8-eE7FXDX^o`@qqPj6N7`golibBRY%+DnTAgM`}$lQD`Hm9
z;V(-;(aQb28$hE83@rDQ76`X|{<+jgqgLHD|Gw6}kDs5<I;L@&?fRj_8--#aC`~Pa
z28UdhPk%n&sQm66!mM&@`HN(o42HYA<5<|4?2Qa$CvpmWP@J)St;IE8;T2kHh>TRs
zWU+IGvKu2fz(QOTCO@uu`bNkuRCRlAkxI{}{=Www^mz#9=ES~Y0S5>qu`qI&v^M12
zm~o`6Wa7pLuE9S{PM>>f(zI8-`QQVcCb^I!Y66OrygBrml*4igULZCN#|s}g`7~Qi
z2E6;C@d)RdIkBI(PZt04e}6|mY27oKXJ02d6udWWy=b-S^y$qtZQ#5P&rJ-C94w2h
zceON3?snXLD#k^Gy{WZWnfbF|q&lOowr;V>H8mYJ!$rK2*O`!Jp>jd9P-i=Yz%HMl
z#pszl<@x8;u6FY4%8m)%O^puD44EEhcH!iXhuc2OAe;(T&cGPW^y-DuN|(BAS2s<3
zXP<NL<MtpXW6Ajckt>hr9!grW_2!~!&TTBex{sa+_~W&uyxwxAy7Bd9#CEs|42*MP
zgfdusz$+meA9KEFd8jn~h2GCU@)mn)&IT*ptGRui?R$&uzgfKQ@EQc-?;{Emp3gtN
z=($;&UeNVh0n<)?S=sw!c~D_cmDgg?_sK5dT#8;x7KUwMp9(gdk;7rZN6-jBjc^bo
zt|}Z8wjF-hI>qhWT%G3Gk6wIQbo_%LG`~YsG&ra*O)C2y6yho||C`&Q_VA-DP9H9J
zx#o#pf4_hCjjE<*UeyQg*V@?Sm*+=aM_QM-fCqGDLBJv&aKbT}dLX!cI_SiQ&Wump
zE>%BQuM}N%;N78%M>Fj*z+-U8UK5z!uta#`7T4?7yqdX{vt?ta?2o9K=eDw3|G^U>
z)-8J{Z9ROcbL+CYDH_h#wmR5>Z2+ZM4bbTuMRPP*8~<{YR5RAvhxO{oruCZbZ$5T9
z<%;jT^XpYEonHB7-tXs=x3~$GT~uZLvt+t{-jPL#L1BqJEK+U?=QsUso7uAy8n>W?
z#VIghi|h5IwyzdnbQ)J}yVw$0@Xr5p7i)RqI%d{Fjw6K;RiHJ@g<36QAmw140rrh+
z>V!8iFzKoY+}V5O)!xvvCRaI_#kF@meOh%r`9p+Uc$I4E_dADnc1kS!Kc{Z}lg}sE
z@4gLdnP_@Hb#c|}Do>Z$`M)F0BA-|ar<a;CRn7Kyc&Dr<ZL(kP3MlV8yk)sk88gqX
zCr-%lVR~eMoOGu<XvDtJnd8ipZRL-fepj40s=EH7;oE?JCvB&NPi0BD{vt#scHi2d
zXJV1+Qj9L<uX8MqFH{rkc(`H7cVR>XEO2HiD0&%?9DMbg0EglW71s6JIp^$;Z4nZP
z5R9<yyL)nZw(TX}<>LPvJvWE`{%p@8q<Y|e#3J72NPz~2tsqxj%Boorrgcf-0w2@g
zgAama6!mnol-H$}OTE10WM<?o5b;a;dGpfA-KRIb(K-J)lQUam6FcMkyDBW-AInXb
z2@6qf&?$(s;E9t8UmGOKT57Sm&UdXSQnzslXo7M|6mv8<!6-;F<y-9Ck}i0xz0<*d
zYCUABBs8^e>2vt-a7*dbMNV@SA2i#Gsv8I&zkWfoD>E!ax#Y{{#$`H2(G2_x&3!h1
zJG;&6Iro~|>lC(heOcU>(Q|$Ft<)=lnupGYT`Ib7A}Uzs3<`Hpu4{DW@F;PO6KHUF
z%2G3N-HM`((v3brIUZMjhpU}_|9UIKTSLwlD%Xna_FwyA*IlD0z5P(R)UUW_T5pOA
zZ-;$xDQl0ry~@D~o@Q4}bkLBg$~IxRD&R4t;rZ^s`qM2dm+~4F*lwP3KlA3qONUQX
z{9SZ;&g|Hq3oUlc*nYn%F6&xONCaYW;5X%l$*1e~Xz(@$v7{`&TD!7|T`XzRquhd7
zS<l`E9iRGvQGNPj4zu4`yg%nWpMU&xO`V#b{{Mo5_4<}q>nGROo32aSW&LJ$zMpiu
zIh(TrBa?1HiFbn%xDJT$^Of8%A-_xfA+MUio!@NH_qi^c#zt#vT{`NOv1_Hp`a&7g
zwO5SRY!1t2SKaL4+h02QOJx81O2jsOD^PXWXJT@-#o;<fi$Ip_iLzevucgMkrn(Ok
z^`G8<sr354amDxi=ZBUr+wf9f?D4W2U2_FIIvdRSWap*c)L8l}iJL`%q0vn!L2>`Y
zvuzi(nXU=CB<Bb$)Qwk8c=P1@tgLggt`5%`TpE_m-c)-sUn05buV8oc$)!uC?7F`H
zcYN$k(Z{D$_9|uEe1E)XN7Yd-KXCU09G5#l3&2iG=YqBd@7}y7tKhV;_s`r3vU}{e
zu4{MsWRRPl{d;1*$AkC#-_KuWc1c5jlfXakOM!7=iY4uBAp*S6GLnI1o6w2PZ|Yum
za`A7P5U=Rt;;Nb;>sYe$%kn_&mQCp_Yu?u%Y`tjQTC-wGL(gaRsa$syeHOXLy|p;{
zP?x3a{+|bRQ-jqf>AkqF(>;ID&H|sV2Px4mVpA<w=t@{1s?{i82KDJ-=K51tcQ<@L
zJ#%f|d8aSZ4XUYEUP`;JvdF!2E_6mmj|j&LzV$Zq<86CC1^KuvNw^~}?RVnqUsksF
z3IWp^d~)tj)vfl}DNyz2nLJZpwgN+AnqbEUi^EQJn|HBXJErVl^`v6W_N=ag|F>67
zZ=NbJ;r;m~LXP=dALTs^|EMhqW%N9{hbQmXmMv%Y|IrAH{SvWdV`xF$pDS#uzh7cs
zzcxi#9A14a@nKM(J|&v{wv@MmQ%nEnV~09ZcC?h(Z4H^apt&ivbYiS(W9gLXsdo0&
zKG{$1#)q!5hzR2lXOBPKD)2&w(SGw9D{lX3B@=lWIhME_`1Nzv?@X_?y}G{zCj4xD
zY4`NIuJ@Au+Ri{Zrg)As&p+>u5RCRT{L}hd`+eKqnnLC0{@bQlUjO21sI+_SWpCG+
zyQiKFiHb)m>54%mUCiX*haN0G;(M-@O1Q1^HonSIo|U=d&7J;>$EJlklyR|K<I|UV
zcy#xNxjub=!`4S`vetQYZdujqt}>1gXNNgj?^jRU;_da|d!4vcpECo~TBU@)HD{gb
zR`24Tx^kMsl-3(rzHU-1mlPHJW?c_l!}(76VoaR+-Se9|ZTxF~d#x1i{Pd~aW#itO
zrDrZKPjW4cJg;bIUs=+v2rq5aKpUbu*S4MYRV>KPT=9m>V)K;yOgEPam)`rC$t@As
z+QRXI&$qB_=am<Fm-g3*U6y-gu>O9%`6_39E5!>TOm;V{cAi*bx&OQGTbUcYj2v%V
z6%Kti{eF3GRLh}G!431`B~-)W&onwDbLc$(+$kZQ`p3^?`rW%qr`fKb6O}G66TdZw
z^Idph$;=bSA3h5Rtxt9<EcC7qo_hBLxQPbN0KUqgVZ11wYH1gRGdjJoRrP6_`!8-%
z{l9MOU+?_e`>uUcwohadx~qELzF++3pDleS^jbdo@5oPxn#A%+XSccOnccy`ka4F8
z9E`tDL`>SHaL7VYaL$a2W=!|)-VQq%f8&&URV<5=g}}AYty8|7OL-%A{ANRjUi9r)
z<;^FaHOOzDcc(NU;@hT!TVAC%cLc`#i_)<>{<3_xL=m+0&A`ZU#e+e8y41tPyY8~=
zd3`tX+J()VtJUxQtEt@fImK1IN^!=veAhIkWj9&Uq;96pJ@#UKM5yAFdYwxzGI<#b
zeT>(77rgg<3hoX$D6ymz9s2V#s_a0&&`P~DhXj2lyC1*z>fP8}@Znw3d2bCqMh+WA
zh5d=w{q1J$d;7c_G*QMW&%>7Pr?gonY1^5#b=o%XuU!o16a4r_s<UVH_e-DC*?a9;
zI%?0Y;OYRcP6Y?8yWoM7Pc>>{cp9&B=qz79ckP2aE0`qLiae|}NMF1%HHx#}OVvGL
z?y(m>Y6ky$Qtm{m*sf@Fn9Xq~Ds0&*&v0*PQ0{Sf5W)2M=bv{GlB(<Er)oG0a;SJ5
zsHk(ClT~@oW5Z3um4+<W_9re&Zc;Zm_jBL6j1|qNjdr{gHf!HwJMo3~{`8x>KPrmb
z?@W79r8sT#<-=CK*Mz_BLAdcQXvg&STeEMusVHz?-Zpv5>bZ9hcZ6p3Xce+qY&J1l
zw7D_Wbi!R7rp>8#@~*F{)z3OLZx!%pXei`reDF7uY3mUdP|L}XBSK%GFDZmcR$#@f
zhM#|$By`S8PY=D_yJtIRgtfMd2kZATRqG(9MH~8(LqqqipB%AE=$dg1%W@g5nTIE=
z*k=EA^BcD(vL@HH{EWhd0-x3L#N8A9I`8O(R>Zv01TDrnF+sVKZ?c#f&z}4}J=Il(
z=h=y%y5`jR(YN01t<@;?{yp(-1k>i!Yx@OW%dg2!u)Ua-YyU}6V0J?(7o&X6T=V45
zPV%7oD3&GV;<LQ#JH7f&KMJ0BZGliCN25aslW}qT_Xl=fy?jx3dc78<o?0_^W-Z5e
zUFT^zrPl=O*UmK!|Ej-8UskqKC30FS&+GJN>B_tx+k9?*O8wIwXEx*A?==gaUiDnI
zXWnD4XOaJZS#ZW6Dw$dS4C>RLZC5n)nCZZ=ZSt1A1rv+DzTS{K_y4u1uUDcNKPhgQ
zdf<Nj{p#m4&)nc@Zx&cFxgnRUacS{ltL*kXP#ACIXnC;w+Ags>!D|JT?{_%#oE39b
zVN(7rxO;BHR^#Fx4Tsy=*DfyJ*Rerx>8DpA8`m4Vi5ynac*)Nu9GJZ6ps#GY3F{@h
z&)u&(j0CgvwD$Zyd-6_zOlk(AEO;q&;H2u^Z3j1r2~3c+41S!|)AQ8aZ_oFGb51V0
zKi`axhi!YC!@T-qCzqP8^>n@EbfD^E!d~aX8)9)+m_di-=`nR5eg1M?@l;v<cbkkN
zIhq_|n1ZuQH)YhRT2(yT!1mW=-$vujZj5tn1CK{1Gj;#05t{S+a>UuiKUSO*?T>n0
ztIVf2eUjLV#T!M{&$a(gyZPXkuI(cki*<I3&g88%Qn$QUJIxr}NC!>RF0ckw0)ElK
zm!&wq%$+@JmFk^u;T6s0;_<R;J~b>`kaXN-s>{T!_Kb6v?791YQ|-DJz27u_BRL!#
z#P~e|J<LH3%>Y)$&r@`cI$bfpKPN0v$4Eh7a)Zvi`z{yColK^4OflDb5|^^aqHcTO
z(fbuFRodwrHMq9^pHg_FBguzF)ivwsgSy@Ys{$1HyzRZBmaMFi$h*Aq+Yz5&7m?|?
zYY!NLVh!ZnU0w|8)7NdY`P%1{U^oAMq<$4^nUdYMRKaDTGWBx&H}=fD)#0iInxviL
zdim2*O-@D*7bSzOSA>;=W-k4E0@P6snC5W4@^kASo%pzETic5SJUSY73eUK<HDbe2
zK^?En-^IGQy<K~xbzi=lrW+`?yy#j*@+tAZuQ~!P>T4{ooGQ0^F0N#woYPpYcQN_h
zwk2&+$F{X==tW1hJA)huYL1sobGUYMR&XK55oH6>Q2Di2)+$eri9DG<>5d1V{be;n
z&x2ueIVRK`yB@af%bwj@GN;yvsA!g3PIWnBubL_4=D1)t%d()-y7#+p|GOf?B(S2R
z!Q$)P6UBR97W;j87<5K9Jf-OI(F~D>2X|&hx;E{f77}8f_G!1ujoqCU3;!J7b?R@8
zVWfrmrfZi=e+so8F41#;x3oMqJtq9`Uhd?=h99=m{vEpcXm<X&D4EI%jg@=9ls{1s
zyPRH?;ym}of9E-|br+_DRIS_I^+D*Y+|KwvmmYnqZJUj>+Z*1a?Ni(^Wp0Pv4Be`e
zEZ3{=ZrpfJv#4ij@BT2gH2t;Of|@Q{N=+A?;#cH3s`&Vh*GsQ`Q%jzJrjaz<9m=ly
zraG>OdFbr5Hdv(W{L1$N5uj7OOlCIRd!8crQeXD@jH}Km-F>IeI!&E9uZ?3`;gy*)
zvcBzk_qXVdfXK<&JKucIe^Pn)&Pmtb&iMvAqRu_Pe$qK}MWgF1;nTn86bL@wl<EA@
z<X+C)#gp&Py#HkTo8%>@=6v~dwAUi3$K}4xq;nZrT<t=S-+Qk-<*`a7^Lk*Q*^Yeg
z*kIp<?KboKR|~d^z)~Ej2e(8!%iTJtyM^<}j1Z1{@oGH^U71#%x?Mfx0WJQE7MD(D
z4U{?&;K{Lf;ldv(uFoUO<}XQ<U~SYB{_*>Lb&$xdQige@Z*C|_GHD8ZSa@S?Znjir
z{QeJL-+ejV{_6h6H&KegmG?N#{f%6BWbUFT)fV?A%}Y+N^n2s(pp@V9eRtCSORwt=
z{W)59LrZtBpYG>?l^4QWJeTz6r{=x+HC3tCR+U@ga!OD5@ud~#yj{1dc72by_o3Er
znQ#IJta}CBnR}pZoA3ljkB2ge;r_BQrMBs1J)T+mft3|+eI3dS?!K+PC?{T#FA-JC
zZ@ozD>d_KV_pXR#jd<#HO|HqSw{LZ9RnC6Wney67QJzVlVs3-Yecw3!z>_zNdzS=s
zE?LIC@viKDhpN^tYmYha+oftZaU3l#j40%_($CxL`TUNE%bvQVs9rbj>4m$?|5;_p
zKA9Q$>$=LSa~!8sx=v2b(fHvQ;#w@#6|go)>q=tpim0UlfgI3gbYq|3fs;#<dHqVW
zl>`o2DxID_-Sq0ZvaPRAX5QvhTB*9Si!blh&4c07b_HBkEPb82SHbz+x4f_FS<$kM
z0)MtxWk#!<R9f=&dwut{D1K4v6V2VbEdsK81Nj&^G#ZsmXP4JUUf$5RBq6t6^po<R
zb$3D&)s6NEOgMV(<aGaS?{CRS9-4M%^`&+p)<b`8x&=q?&0<wwEO6rU`Q*}|jzu|(
zU1VZS?%sHo9Q`k=>)^cd#V>5K*=`gsEX|EH4!Q#CGhYy5ve>z0iQ-DPTP)Xh-t#S&
zZn?T3eTEsQ^y^1Hev?<dm~n0MoECwb>Bnyz+Zr$Yq0aL6FAeuq3JZ4LTs@(=$Ar_P
z>yY%uGvB`Ni`L|7_YPm8W9a8TBdz|B7Dvh42AjvR?g<Vi;?MPUEWJgVS1$e2cWR!e
zOY{9jSNATRsJQ53^}-eNQ-v*4e&q!B?C<>dv#F+5{`bAuW7qTq)&6hplMspCy3($+
zDfZdtiIqokE=Nrf*XwKBZ_pkvPh1r?==(y9aZb#xtM{&K^JBVav;L3gG~Q#SVH^4G
zZd|lu$A#Hf0{3rwF{N?m(#uCGqb;Vcb?4Zdcym+xl+&Bv{G0H42ODUi*0ufLXKh=q
ztjYEJ<^#7ftNqL49T}MJst9OD9W^S`>O3;*vYqI?qFE7BqZ9l16NR=a>GtvnPF<)G
z?Rx!#{F$$lR-KUfXvcNM&{^hR-M#0tyiT!w&z6>rZ8-}%`tj56ukXDqmTEt7ykydQ
z*_8h@s5k}<i8VOv1q~Wcx4&iW;;=90nYCc*_H+HQkw0#g%+;8DNl2@9uXX+6Y5S{%
zHrzWXsd(nsJkxEu@Aejckt+Lp(@f#gZQq2K`D?Uq#OoZpX7y^CzVIjEjSGwYdP<Ak
z?OBAB1yrM2Et2bRAKSv0dTUcfn^~D!3VYSeX*c$tnf3bZzi_#_R=2hjo5~*_RxSDM
z^>?4<VGa?wBuh@W72eq)S0-)qc-gtQJEy~Ve*c=q3zy7~uNL1Ye0SMIlh-Sv7aITY
z{%O71*S-rD2@MX9SPF_f_cR);w`J+t^Xc47f2XgXk1nyj61Tq7&+YY+FRz#O*}ra{
zFQdQowonuQ_iZdWhu7S`wQqlkr@z^)|Er3^J2u~$|I{l;%a>_y;H<LJ<EtbzyHhsp
zx_U9Di`8VUGUynU&n!tfA^|5heXx0VD~)k&xq*LU_>!8?&^<aFEb_GvqmC)suaynd
z&AJjbv-#iypG!Kkt)0Xf!UI_&CHyy-U!Azk!|+Ahj%{`MS0Cn2{QC6w)lHQ=o}S0k
zcC+k1G6U9`cL)OcWR<1Cvac+UT6%2XAMtbXyc*!+cDr1PlmD0HuO|y@w?4{>`0_j0
zyZ2k-HQlxL9^ZaChELt$vFOO1sTyvA91agenI1J*Rz59JU4BdItgG{?*Gy5W69kwT
zIZWm`tm$Q9dbPxRHtUw;7mKPNnq=Peu36$*d)i7xCtBPgJMxC8dx)o|g{aBlmX9jQ
zv+Ax-JE*ySvV_~o8`Uz-{8r!87wpg6y7b1yDakh-j{kc5`<|D|tyDYv$y+w=e|ukx
zGj8F<CC@*vX3;&Y0<SM7fR6K<l*QMRY0W6P#3$v#*XgCUyEh0I+H&UFdmhnSk+ti!
z*5BS(j!4eU_ulW{z2ex7ElXc8ZP?fvocy!HTty*pvLEkJ<y|U`Hm~ES>r_=3&Rmff
zy=vQ|e`<<X`P&ao6=-mf=Je2NDqK=Ew_H=STW8no|6wP8d{+y)T^i<lzIF91t$Mxv
zx64~MhxoFYIIisrOt#t~(*0-2Jl|c}8C|lSYd@{zQ#KVUn!SJfr`g4t_Z#I~*517n
z+|oAr=q&C)<L(7qqOhin!-9*Tk@Awyi8aogJ<2y~FP#=QUz9H47+xa!`egcM4>5o3
zBYG>AoAlMnFFWp4@wF=cHp~0fX`yvSJ5HZUwG+&cEq&gpbuUVQ<J}b}9i#6m8=_)%
z-2J?2Z@2fX&d!)CUH7YGV!q|o=`}c{b7W{Stz7fdHndS}WrWoOi@kk+GHvE*i4{gJ
zx!jlfqwDA2AFHG`U38GK`1fK`@r`hvILm;7j}P|;9jPlmcZ=_teq82+7C+rjF-qds
zro=6OdO!MZ%#F`^BFW7QU8i62uz#&lCiZ9|C%8um@?exJXduZ{eQG9CW5&gpFl&=_
zvk#=mOP31jL`gC8mY&jEQ9JAT*G=CZo+>qe`1G}#$?rE-S<QEwTHIzWI)D6y$~5cK
z=aNDgWK}ticm!%pz7lCBF@1yDOC^gPDtB!p*c(+iTzZ~8n!`WY%zgQVU7k<Q|DR!=
z^TPK`>4F6c8&3S1Ub;wQ&SAFZ-`iYgSkG9wB<xy=-^FLT*V?L{*Cpzd7py+Iui)DE
zqt8T77d~8Fs<m(XtTLZpuUE55R|L&<NqHA~{Ai#|%4%m3yR}MxL(~O5L4E=kcni*g
zBCYs!(Do^uJ&Prl@7%=R>?sl}I7MXg*^iebY&LMOy5-g@q?jUFRvWSQ=}QmpbN#w&
zC$jcSgH9b(Dfs?l-7j<X+&L@O$W7jRB*Jg)ChjlC)vSMrUSxUnciU}q8_;B&Fw^P`
z(TkU?=VVk(oMyF)=laTEpIa{jS6KMzi_NcGSHqI@$8FA)y`Sx+vnylwSll}m@$`G$
zw7VrgBSYqAt8Cq5_xg6O&y9OR{FQd{`SwRIig1ctv})SF=H|BIx9fF#kC{Y2`5gH6
z`>{#9I?222O%M5>d?bQ2?IgftvGW42LI87P1b4ja)u=}=7EL}AsFrg5uOr)`>u;J?
z{Wz^SdA(J^`iNKFh3cEK*G(0EWq9b+^T_|dR0HhH`yJ{xN|>I1buG%KFUYv?L-wPj
zHCB(@I@JW03I;GSazqG6q}-gkwNL%i?H4bM-n?A*mt$q{lbQ3=PpQw<Ja*gWf6ZLC
zD!%`YVrTz{=WNSNZ0U&2T^X43<ag=zx^<n?=4B-JFR_q3{rl!K<NDc-3kul2ylbDe
z);6=)L~W;eU+jnb+>dW9dNw8FetT(({Jz7g34w_9C^;Mto@`P)7|-FN_P}{Z&$3Mq
z`}F)}Vv>BtPU>mQRCy9=+bHqUI^}xIY$b_I<rn1&hnzm>_QhT;|2a#gFY8kGEpZkl
ztF30ahGi=f|ID?SzsKR2JE(Zt&3U9hEbvZr^rWVx1qBmJ)b77yi@7<I-E+IaN*}4F
zQ$jONvfOvQdFa{G627FjZ!WpG-`Q02<=+M`-zW9`U;f@oyQQn?w=FUA*v79F54Yc1
zTibKYWX859<?jVoS_ykbZQsl>d!1bAyRU9azeFb1e%sY?2%aJtK(WQH5Fp$bdg5)z
z&qV20FBWM^s5G6HzvQz~CT7l?hTTH7Zx$H*$a9(fAupr;e%qhU$=A1CzAD@OxFKZj
zUf*d??(SXrb78~-iCM24e%P@b`z>O(C`VZ)_FA{&_n`Bim0z7&D$wBI&Ur;(ty9^K
z-}kQzewFf!ov)fI7<cKWOJTvpg;QLPr09ft$6s{4^dzYG#15b1pQWC<9RJ3&jQ9Ks
z=e6C}Jm2#NEw`GVDVOpwZs(^g1IEIVol|C~|LxP$ZhOA^O7h#HvXh_wgw(MI&w0LE
zb#Hw0{ym^seMtLaEz2ICvJU0VH(!T+j-Tb}Zoo3j&*9Mbb)QY$iyutT|1<yen)-_^
z9lW3ewyW!V?wq-^y{Az;Ff3)$<%qLhdwfJrwp^TA<56hz*q6m$CMM^-;Jv@9bNud`
zbTCa7xG?9rl+Z4r#N90(H(n=&KUnu!rr*oqUG;aNtxsxImh#)achh{w)^q7Qe~V7C
z*v#+GM4KC|tk#ON`d+CN-xqB?dG-nSjK3^veqVSe)#l%AvwzCx-pX|$&*yMlWZ19p
zc;+YWZmIjC7cadk-BYpn+r!D9|GCWz&0ms`yw4wW9QSo@@lQVGie<O^&fin`Q86q1
zpSwtIg>dP*B`O;fiaYM@e!Z+V{`%G6_AT84cS3dC&rgbo7s<Z&`Diy+$*;vvZ_TRv
zU!@mQDzzc;>E7>~MV|ZetnSGGrO36QA=B5hrf`||I(+FoF1mpI?9Dk@9?`Kk;#tgB
zCJL<Dz2Mxe2MkxX)cw11Z|mb@^8Wpi`>s1Kd}f|^>wv3TvR*3F*Qgse{1+HmX5D1n
zKS?%o;eSW5xBjk`$zpu_n655jHq|*{cOvh?>JXW^TmE_9ycvJ^ebvjjmdW0kA@1T^
z{@FcvQdA;r>g3>i?!&2P2R)-2pOnY0Hw*STa<ACb>X!D8_mk6wdEM4_l_Y-GTh#pa
z;M7>%2Rm05KXj83dG8Wnb$;D1+bA73y^iGW&&nIm*2SoKdF>CAw$k&SzC1yhW66sb
zo7k2=?w01{te^Yqj@Kl<%>1u*g+f=S6tCP|yILyNCjaG=ORn=KzCPo2{ltMl&|$+1
zvY0G(hWLt93RpBa^jfdY>%OpU(*1u7n|1XhPd$1+wX&r-cG~6(`@4Of9)JDf^QIlY
zyyu-i9yGH=&2Rf;*>9V3l!RBxZ=1jF+X_D&{m(xmw+2o8Ce@g9>1_M|ePPQc75mhL
zH*M5X{Iqvp=hwY;TXw$72wQ!0;YOWJwKZEbFPdBIJd!OjC+5+{yxnTPqCty4$7DTT
z;ahy&a$eHHgv(r<e|p6PH$B?*>W0fAHxDU=^6T6W^=3Wpw%MFvCH%Z<@q=mULYdEW
zQq>oJmB>^15iEbZt8>pc)d?FGpI)W)Xo6zkp**J#mtAC}+l`LNsfuT2-fs(cztv)<
z^(Md0eEorwOE11Xw>f+9Y<}?O-xEH&Kk^&ei+nNSn4+xEeQVOG1?%QI?&7%izCXJs
zVbjc>y{mc~wGTDNP07~tlJ!1N)%aTUx15Uq-_m*Y`=%MK^yRqr$u{BmZ|%KDUxZxw
z*T1+sP+LxA+q(O|tkk@-cg~l+qV>AFpvbcAUfuPm`^-OMZ?CtNimeh|`^4{6Kzs@7
z&$+%y;nf=*_V1Z;mMPryqk>XeQ~a_Uf+oF!cUIL%p7#Cv{!;r)tAj6opMAZ03v+*;
z_G}>`{bRp_<^QadoA~~;$Ny8WYrZZw{4cz5qoHr<j)f<!ciF7J_4d{7opam@eJ<bs
z|MQcN%%gMH?mu2u+dltt_0LYjKi*27^=5I=-n-uE8uV>FEoPz=+Q7iF3pDGMx7~iL
ze@DaDminEmyz<^$nC)`AGtkFMSEZ<Xx5)3T*>lAHN}WtnF<bKNi-OwL@1eh!^!mu0
zc=N({%fEe#HA_E57P*{W<idNOS<Sy}OV{6rCxjJOzBAj-K6ggjtRRtf8YlX^D~-4L
zB!=iLvn*F#?Ithm{C}CH#m+sQD>gA*JHN+bXUMgXUV)Um^G`Wl_}HSeE%vnSH@9`2
zX3HX6+oR*$`bEA8@nm+z33)!-+_O{fY5C9VDLjWJBy-w)*&{vi(vyguvpe>Evz&a`
z(DuYqsa#)~i+ld4=`GjNI=|`nrrEE<KC2{3IOVT6r}Jo<*_8WHKcoMw&ixngTJZ7G
z^P;EM)CW!r=b3$B<6MU)JLkT2EBF$?WU*7mtM4_a(W3&IV0DpVGFDi?q7r(3$F>k#
z|Jer&zO3L25kJ?PvgmCP+n)P&q0yJC)jG47-j{s$-8aFr|Ch|1YoXIQXBbS4t-ZXj
z_%erZo6tjr$tNZ21^4Wp@cz*6S+iOnoSM(TAiu%W#WAEow!yS9e5+AnrTp%<rHj@)
z-_tU68mIgIIkl!IccgA#-IgO>d^Cjf_Paj;<u5!{mTZ)JTq@BRbxF+DJX9%aXQz*t
z|EeALRe$XMw`ZHG{lh0gLLsb2*US|vC|bE-qLiA_Ue`Y#PQKY0G=IK0x1@I~_s>{4
z&)}>3FSK7S`E-BAmwn17mA$VzJktxxm2}>nRXWLhjrbyO!3l-YJ0`raxE!=pGX!$m
zNZiz*IWeo0I%PnGtSM;dMD4?h)&qJ>n(wYe==SV-d1-ewFXx|7i3e||YKna_->r8|
z(Is`FNn_`Y<=-~F{-D|W;=S;^4Lhes-1shZ>Q~)kfq+f-?Tu=7e)gEl()4+Gr$xEv
z*F)t#(`?MbznE*@dwtqLKz;iB!Xi!QS67XkGym_t;pb<qqc!Kxp4WF@@}1uPu6XwE
zSyuLIW#_voZU4u5O?K+-=LUXyzb{y=)A7?g{_*jvw=6>cVq@Q@eSZ`n`{bt4o%*LK
zyViPTAHVFIH8tdTkd>c`(z9)BKJRDLxa&Q=`S|)5ox_VJu@n?&a<1w<dhP!G?3K~l
z^LF39;Wn)_i6_tVd&NzQoigV)xN%zSyuu-W71R=0rO+_hTU2BsV`CTRmradrUwsr$
zc^)<O_L);|AF(XgW6idcvy_<+t&}LAx293oq{nm8FX^o-xp}|L&HB}6)veR~d$CmJ
z-3g1hS57<cX0h|gYj=yCN0RTF`f^(D+Ok!%gX_kIX|ea~^N-|+otk~M%wmVh>b*W|
zbdT|$yQ}g@BR|N!WuKcuP1KX0OQ+1(8`f3)5p@2{{K{6T!lIP|YKuUr_=@9#@b;h*
zCkCeV!WZrq?3(epO7onYv%{q$f27%`Cv$|Auhr3s>oB?d^prLmBd4anN}t4n`0I+_
z<zo{bTn%J$ouyE?<xR%d@9WAQJ`nm-@t%7p1CziD5yqdnd#41H?k`<+>1*h=h!XLy
zI@_*ZXRFS>rqO4szp`1f`t8|u$G8g$Rtna6tt$Pau)jDx>2j`DS)#WN)4yhm&-Yet
z4%X>~9S7{dz_b!{?Zj8HL;KbV&3O1C>BbkMpL^$=U(ai*P-V|#tQP&9xhx|yRzpv$
zflu^6X{gWzS4B0A)hf3PB0t5>sd!$OIpgNVvsZslvlFh|f8{-oJ}9NG7dmk9X{b%;
z+?0!ZwI-RK&=foM`KRXWtgMFp%e``yW!1&cU967t{&-Dj#!0n>6Wy-o<npe(k;im!
z@AQlXmzA{MybGFxn1cb|osd3jR+rfXhCV&E-fevkiZT_XCb|nmxSQ^<a$=dj&oN<h
zz#lh5zvC(o?y4-aDp~5TaQ=C?i|mcNdj9XCEq1&)c0`iH;Q=dSY01IP53EyO**$s?
zBzxLQ^<~Uq$@2=OW(Q~Q%D;M2oPD~vW$C5{w=_}q74;{}f2{XodQrC2UnTYG`be`K
z@66b;5bIRt96s3^#{fD|v`_C`tAFO~n*y&@Oj!hDF6C<XW+_ZIv0sv%Sgf18(BkYi
z?O!$zA6?Fw(-9_EnqZytF8cP)0ud$w4flk%E+>jpEn`x>A3g}07UFzL^t{5sdi`gU
ztjrdgUDlA5TI=j{=%o3=GS9P9l(Z%<(Lc1(c<Z#z<o=$ib#GFetuLDOEEd!SWeQNL
zb5H<n>R57JErO+SI*W=-X5B%()zc%s{rdAD<x}3?1$(Zyiu8Fe$WWGvUDdko<<1!@
zYo}$lUP=*~EgK>FDQA_2OzgbvGJJaHD?e~DfsSCZ3$GI2H+gmB0ehZ@k3*~C)pAcM
z_l50^)Ums-v+3W=kXPG6MYGdV<-W{Y8fY~u(=P0~L&7q@xkvM517oue#IN@%Ecmr;
zKJUBDI?`9OId36GzHC9Gc<t6viW|%uzcSt6ua3X*k=smolU3#QLXqB;|AgJe#Z>xo
zOlN-iv2;iI2JR0Ylgg%xPrl*faf>l;!jrG>|K#%;-8>Q^6XUZ%NrY*x>V)S%L&QIP
zy>}^+<9PU-Et<!TeWDNDufH!o(K&23uSE0JOHmIeZ#lT~-sY^p{!4Dc8g;LqeGcwr
zy7HpS<iwAbdD?zWpZ9-fYhKOv@Nfty4THlpfRk}fjMl*p0gfYz3%dV5xqG+0^oNVw
z>)MK?!DV-^yC(@wUej)Rx_MchmeW`HGTZQ@DjUA|cpQB)cY|JO3Fp1P)``NszR`d4
zx+l%tsC2}cfhkr=f%}J%n!?h<jJbZdrZ6us{UIdVymE1?)hY8GQfG}~=iW7awZ`rJ
z)1S*DbEhxZx~tJi#`?eKsp8AWc3wSU`737Pr5$J4zt0C9#(TDX*;aQ8*xZ1CM+bwS
z9;YeWGKU2`jlTC{BM-d$llMNnLX`WDkH}u96^zTf_UTPtlk_T=`Hb(eBgbF38hOs`
z36%Jx)u?ny<olO!$<mikKnuN&@~tdhKIcz~WAFX9dS6RkaW(#6@p!p`y*RQ$J@=H{
zo?D??JnA<^X{5`f-Q3bDe6yy`?MkHgDcLEpE@`LqyF}d1EDgENctz3IOepipYTqNO
zvfI~MsvG5fman>*U?stGZq;gwN#OJfS{LH53p94PJ$C~S(|W-fFZ13f3HF$X>sxrv
zi0AZNxBEieoCnFqoM%de68Ac*P3&wgaeU>n@|{Ky`@)j7M>gfMbaBWn3A)j?Z1VAv
zjf<UMn#z5tY&#J=_sy#iDW;2@Yl5vjLd1it-ZaHq$eud%J54Y@+_G=`oC8*^g4|Ep
z-s+rt`^qI`iLPo@H)Dc}R^y}Ze$Rrs-Wz;wYcKEWE$&{@e9P>7M1h}%?xH_!^}BiU
zZpriL@vk=t2Tg#1=1UnG(?B<zNWN{EDsaPVK?KWWP7k$A)_y)4^TfJTr#x)~KC@{J
z?<QPijX(76UCyD~>cUH{xeJwYnP$c5F1&Lu^YE*t(*BpGQF{eef7dHBC|_tF?9Q>o
z)j=tA!lgv-$#=4{?rgpMFz0k7U+IJcn_G*-?Mek4r-tfXnj<1TZN}ymle9O*DF)QE
zA9Y-OL&ZI1dbr14i?40Pr#D|(U3gn#VaIKCy&dtJa|-^R@v{SWaluQ)rhyt0sk~mL
zR-O+|tK^zrj<s1ax!*@*uF$jXPyfcN@tI6z-OV|F%VwWF8vMOwk7sDqGA-MfpZ@Aa
zlW}<R?ej+pVmq$7x(nW0b|sfzYGHTvbkFII8Y~I{(-_WA(+=vN&H7Av5#zMCHg~nR
z7nPmVzp^oI@m~(cMLE;nvKjd=K40X2dCru*Q;GyubUAGF%oD!J+P?MrhI?X}on<b0
zl}`_a9?A90{Ngop#qt#9v;C9yc`W|Jw^++f5}w*SKno{576dXg7Bg9SYHRj{aVO5b
zk+`)e@8t94uMPG;>j<2{)_6A0X>Nr;_pL22qUAnJj&(h?_)qJU90o?ui%ZYNtnIsZ
zu_4Xlv`cJ>j*Qcnear9vciSJ9$!h8p?sPR_q29t{2ShlIsBNg+_GXUq*U8U4&A5-e
zE9JeW{+Unet@}K0KWkgL>fM~-pG6;uEct9=F<~!nk5D1UgALoJer~>VUT*HiC)U<C
zqgEYp+*`KSQL*!5>+~<Ke{%}vr`}xA@>2v+!}WreoGhNjovir5tnsSTjjZ;me3zbd
zsj!9RN5^eCl4kU+yZH2)CsReTB^l@1TyVXg<haN>uqUs3OU&>0T3L~=x9_*o?Y(#L
zUz_o|#KQZ(CoS8Mx&QrYfxnNAOig&AdH3N7ZYF^j7LC1|y*FB1eU*Ot!^#ep6Q5I#
zSO2+q_4*3dqZK}jcW1PiUCPr6zFDB+chbmDR%~`*$F|B6cjpGdMt#2Q!=YM>{c@&N
za~6wkb$urOv@UF>@vW-nLzzzBkAV7%)2BW+hR02Y72}+kS@)W5@HfV?T$>nM(jKa<
zHYa7#&!Z_i=X7`9+LwI1o0W6sgbDlp^@n}=y8gC*8RM?_l1~wHt8QfeHeIky?xxFo
z4Vj(0q_(bD+gly8H!PFO+<L|3{x_S-@@DpbsjIEHTD|!2`lnu?lKLs9$o~DW)4gNY
z_+?C7Rihd=ZOVPFUZL$(^Umn^?Uvs!a_;##;R!q0doQSEnx8l0(?9fNn|90>xxgif
zI>)j%J$%ujArPDBW_wv_gIB6bZTPd0FXii>zAVn)UlX5Nm-@AK>x}p-AxF}!rUzGN
zpRUmo+>o8m$^*{(j2sRJ8XBfgC=F)b+3Ha_VfST&WnrHtax-$gaR=Su)cQa#)uH@h
zQ}zD)S4*c{iw*ea#x~b{(cPpAk?u<`NH!lZzdz@jSU0!)lJ(Z*a?YtotxRIx^+tRB
zkFUA*?>sltxwXHy-r2AJRPyz0s|hcdB!yE-C)CF-Z=26|FW&3^j~`VhGt#@OXH;B{
zf1Ok)8nyY&U5gzbf<-rNJFz2F{gCc)%M=HP`R>yX#!7eSxp;~6tzPwO?$q8BxeARe
zb<N+GE$h=gc(>xcT8;X*Wye{s3P^nW{od_f`^8H;17pvxzZ&v%rby>9@nuJ2T=(1i
z8aUlGPX5Wz$jm8nKmIzm)pDb(V=|Af&06;?Y|iX!rrU4G^OVe4c7C5wpz1sA4&iwg
zw|iV(>#TeBE@N{{^lQGORavKQrP|)P$OT%r@5NN4|D2VPqh!*7#lj8}md~HY|2cTg
z`<>N~Nvs<)IqFUw`sZy`W7pQ;vo7ug%m0}=6Z%}v{WRRPX5HN{^)n6jCYG-ieHwOB
zwk!GY%r;rRJk9#Q0a@Xx_pgOmlt0QTec!ylJkN4!U8VZ*v`_uvyI9(cI;#|)y>!{~
zuh(W`*7G@8FP|teFN!ZX<G(#PS&~Ia<-^ms+1C!mZ~UO=*MB*6fBoS@)lIhSljqs*
zud2T`q4o2loe^{PE`Ob#^z$?~ldQ5ramU}INh(|APCm2j4G22DtlNC$`b9B*sdZ1+
z>3{BCX;CTWchAqv=;+;o9}0bcmLKXd{4-m&9Xbon$YBE7X78J0n$y<6*!Z>KwNKga
zPUQw`VbNdba|(S*{%C4iyxaTw?#7C&3ky1GraD}_KmA|H(;u6r*y+Dl_Pdnx^8e*<
z-e)Q--xNOle|y)rO!{~k!vn1n=XPUdZG(GUXUtEZ`S9lKnKcK#Xs9n%f8P-4I7K!<
zo5S?9&IK+x+tU+nF<K_K<b|wK4Vsd2vB^WE<K4f4K9@fw_gDQE{lWa{QP}rCewt_h
zRe0%jcs{f__VuZ}e06<4)9T+Tzbfm$$7FogU-bF<_H~n^JLBE<pWAr8JaA6b)vu9y
z&wlMZ;`JgR#3|H=X|d3bmthz8_T9R8e(GKMk3o7aXX{Je@7uop@}F5+`I5$3r6>8^
z9xPM7Ya<?Zo?A3OKj-Vm*Cz9$r8ip^EMdC){GFBfYTuv}^LPI&?=U=59&w~FxJK;U
z^`E_xlcyA!|J++2d`zeO?}_!9+kQQp@_Sxw_|DxAlj6H--pyX}n^Qo+p@D&ssbBEK
z{^@0k4h;wPGMT^M@=9*L&ZqjHlhWSD?b)~g<JA9`pZ->wRuguHRaf(W_s2`!Yu0b5
z{GrKeXY>62|4nN5M7U~BfBu*DOWrEsj_v>1yY_ux?^qramn^JM5YA#6St9lG_h*~`
zMpgG>_x~^Y{&$bIPi@!xr{=i}>i5+5@z<;5KmKvMYHQWU4;<%I92ySDv*zu;_w1b3
z`+pVpWjEfue&=>Xd3^PC!`QO=1JzyY_ix|)apHksjyrX7rOEZbe(BWP?R|ggXYb`*
zzxPztKdQP}`{tnh@%#SQ|Fcvn6#TB7eJSPI-i<HHPTl`yIs1P`;k@oU`nx~3f3ZF~
zNmeU=ZSld2>np35UFP2&s|XGZ77m^Ohl!^d#6!JUIG_Q<(xx(Dd*UvQujek@iF~IX
z+tc<XXCgNv6I4OtU(pxauJ9SoeI}W=w|Sf1)Ze?`rMZDZmW3lHJYmz_f<=OmkOpf=
zIL*ZRef@hY<($fGhma*6bTj4t{<h|}--_ExZ@bxTzMPYYGdp{Ga{Ih@Hc-19=ChO(
zy}X<?QyXFXM9vc3^Vc>1EDpJqyZO_s6(Z|)fbD@e;EuY%>Q}!^@=t&HT+5zQRUdA!
zIWMfcW)IUp--|Nt5H(+-9Mq@B>CZnY40oo)HV3cFFrC8^_e8pN4d9kBGO@f9-;p!>
zna0r%xBs^1d^s_dX?pJ*85f8_JRS}cPdA7KYatxarfv`^a$2*sJ82`U8Z?AK!FnK^
z<=X12-4d7le{NX4Ugp=)_T6jyKQUYFs0lni7oz<@0ISGOp3>B(t`O4&6dV#5m^9b$
zdoLAqj+xe_tB33^Gr^2mX*aK3P2B$Wg4*$V3$?cR@YPp;w%=X{vW|g~iN#H6!HHBA
zZe3q!U@|Z=?G@?R7%|bi>*b>9YHGf4YZ?x0U|F|b|6Z=O$l=qzLfwjg(sxJA%_~}y
z3`-Ku!U0c=wunyUhdZHhA%~328E3Bh)4kO9OMF^)JZQ%wA$WKyd|1mgeP_W_izj@#
z^>s;AS4~zwudnNIhvmV;q5)5g?rfbZi7+pYJ0y3v#>|Fm_f$)dA_d(8MW)#HX`Vdw
zXP?K_*41ra8hG2}`273t&7fKne3-goj%~SBqzVu23;K<&2Vd^flZehh_??BrCSrm1
ziTv4D_h@JR)Hrc<*Sfw>Z%_BXE1n7pEe-(%1FOcW5=rkFP_9FR17qW^b>f;w{%Z>S
zay}t($=~;~j{P0OFWQ<V`w!?Abt>w0vxrTBD`#M2x-GaP#(eeRUGw&xII35F{%)+;
z+pk}bmN|7hK?D26`UXF}zp>WF>TuT@L^Q6dx+c1#CS32}*G(}w6Jdb_N){Vr8<$1e
z=D&WWzb*Q1-*OF*m_viZe^!y5U+Q^N5rzmgiaf4SS=nabd34u~lD5UKI*ezj_qrg=
z;t6qJpWdjqW(y=v8{0WFiYhy16+^h7z^qZbaOLaK^zz)lX+DMfzApGJSs=!h7b@aZ
zwRL{xY*COBSlU8p`ZKdZX}bO8j}ma{Mqk#l59fA?T&}tN^2^U1SysBcLIdA*Y<{!3
ze<vcxA(Dzi!WvKv?)vlz9_t#41))kWa?eaT^ziLh#riXqcKS2#?^<=v>zMd#<lu&c
z21w)-hena+V=XP1D-Kw&p7UNN>-<CU`249dk5?vNFWtN2<mMA0K^*(rWlQdA8dW+X
z!UoA(21Sgnddl@o9`ixQg8Z3K&9u{EamGY%^UJf>)@(C>Y1=);$wt#^sf1tmG4VMt
zWzYzQ`m2jmqe#<D8(x$gxWN*n6aPdg$VzHew%!BFb36Y=814U>RT^cq?*_sfAp2kj
z1^78k^tOyfBnLOO3t?9`)tvhHyr959-~QY=_ZQm|tu(E&c=U_^oL-d7;Rn+SPZnUt
zQ5KP%B8x@g={li=>H2kX#WwS$pV!^`w&aV%?!NfzmnTm+^j-CMujbroJ^HY`g=XFq
z(SRpG*TPF+nW}Lj=Mj-}UCZYj(!c!j%Z48o)=~>@FVkrK@O{zYr;ipd%bezVTmV-9
zacLB3p3=5}N7xURpr1<9du}Z&m}P(F*Sp{ABGg;Otxr5oVNaH5!XC(6Tt}KVw!%}5
zf`M1#otaM-eYs}+J|Vf{=DM)swXW~DVy<cGeEzdvdzSONN0a70!{a3GkfZJf2&)<=
za)wOa^?Jjm8;-ZyC$IYD9kssvl5N`TpKsP2SUS6eXMgJA&$;K~bzs2(^9sa-8+#l4
z^mdz@E5U>hd|*urox6MIly?C|uWxMb(+mCjM&n4yE@AoDn7sL_c1WcsINHFeV!?N&
z$@kI~U}i8dGW}LBkaVuuxH)s_hto^u&1-LN{(0_L%?*dmphAaL@BdVP{oSq?&;CjB
zI?g|P)n?=rg)lbZK1)f_&F!Lw@-W9YF64N#ZT9KjD7|$*zb~u2EqWv7op6fjT)F2z
z=d_6IyMK4jrPbRq`^wDcO~h{Gf+Y^2MmvzwvYSqU?CMum;Zy(T9%t)5x#ZXOtRVR{
z*WXsk{jNIxxZWrx{Em?N)y%RV*Z&-NGnxJLy&b1m^}212Onw$`=6Vr(=G0@H8*^;y
zy-o14{>Da!?Y#m27XEIR<^O%L;ALpX$2GBQ&wZLZUEVg}O;+snZh=RETn{byH%-p%
z{5Qd;>;I)~`Mc-DV)sLW0#jEE+olPZpt+bs;D&$W%aW=ceh=lVjdowJv|gO*^{~ds
zQ+)N+SAQ;kwz8OU-Pf2uag&FlZqXk3&->N)-B|XbQ~baOaO9z79{~-e1t*qrtX_bS
ze8-}8`Q_&shwAU#-RyonsX{nt2Zv(pF@v937rnbO=k?FOpR$3SRd;^Wvv-F3*U!GH
zbbt5cb*A(C-iaZl2!wGQQ$zxu1O<iXz+#n=$(-qGN!6@w=Q_rqkOx^phm*8rv%36(
z3lJ)hv<p;pG$>7PUt!q}Ny7>b4F|S!pHcf-GP9oH|HIq<rN`8m442HGwJb6Zsda#C
zf`Y?>dZx+$d~fz3V(?4QgH5;Hmf!YUK7I53@1Dm$tY(^C8?W+N8Id3nL3Q9UOG#1X
zocWs(`fFA<^y%H#`nL6PaijO{sJV4-4f?UxBn=MxK^0^5-!t=I9#}A+i7R&7);zA5
zZK|4lSVQew+<`LJ>isTi9xzuJI5d_=i$C2H$8WGbc4>*I$c{IsZdssu6RP$GcVm`*
zTA~m_@|b$T+-t8dX9fKY_WL{k`1F6uMtu*@s<iDlU46CQUa2b>;W4Co$6-M_(>Co_
zH=Aa{n|TL5u&jD@GqB^ON&2_DA2!{ta$A2pt#r!bxIEiU4G8;?lk$e^Oxv_?y?$zF
z35(xGLyj$PZ*ShVj<0y#HvL`o2iFJj?0?EM-PO*e@$_FmIaoIU*(nVN5?D)$B;Q=}
z>VXGiKhyhNyL>KnPdN0wc2505%l+qE9gaWz^=nZ;O(G5tu``A8Kg;MsxYSK~LeTI1
znS1Tls(t<cbjkl&|7CmBex4WZedt?pfA7=E45_=(cHaxJSMkci7fz<8aO=gweHO=g
z=GCv8pG7Wxwt4-&%JlPb-)~xNKNe-)n`fifgOq%by_Vp?)D_dVWmXZ~-x8}1teNH4
zUsR;teDBzb*LNlr=Y+4`{3r1Fw1sxFk=o+W_y&~>jqF?+MU@J3E+c~8rqv<#dbh~q
zLcOw=U2$y}@2a*<Pn11>>sxO4oky_7A4o593f!l$;Kb8zop&nme6Zm^6R1}3xfE#6
z9d~K9KyhOCI^Ey@U5uS!zDCy1@ussuX}WDB$7O`cA0$8p){V9e9h$mM9Y62al~#Hx
z{;}gsoEa4JtWWo}js0!GR2Ffp#tGbrahQ1eSy&&!K^Np3o0}`QM#&$O;0yNXj!7{(
zZU5*0hQ%y#?Gk!PUE+#sru$x=^Sn@W>l=>y28gIegp7d1ss^R$3)ijLgAl9nR1n{P
z#n;$B)95u<LLUE1uEf0c`JW8icI>gv`}=NJ(ll$q>j>p25%`<wKYv7yh~~S`oN^2d
O3=E#GelF{r5}E**FtPIh

literal 0
HcmV?d00001

diff --git a/_static/css/custom.css b/_static/css/custom.css
index 588d99d4c..d4c0ceef8 100644
--- a/_static/css/custom.css
+++ b/_static/css/custom.css
@@ -9,3 +9,11 @@ div.highlight {
 div.line-block {
   margin-bottom: 0px !important;
 }
+
+#sponsors{
+  text-align: center;
+}
+
+#sponsors h1{
+  text-align: left;
+}
diff --git a/_static/logo.png b/_static/logo.png
index 030673cfbaa40c2bc994436ff1aa67cab3a01d0e..7d23fffc4aad5ee9722dbb2e21818babaa22a4fc 100644
GIT binary patch
literal 191528
zcmeAS@N?(olHy`uVBq!ia0y~yV7<e@!1#rOiGhJ(#q)}41_lO}bVpxD28NCO+<y{T
z85kH8l0AZa85pY67#JE_7#MyrFfcT{U|=XUU|@Kaz`$TNgMmT3V9u^U8wLgjwj^(N
z7l!{JxM1({$qWn)44y8IAr-gY{QWsS<z}h;uiEc+&-o0W%!w>64L{EymBDaCr9eQF
z?~#J-#4DTTWkmVcefoXya8%sCyVL&jozA}bUOie!Ox13$>IoCigDQ?pDh?)Xc?`DK
zY{H+;kvzQj`<%Uh5API|G&S9QF?8<L-oKF>7j52TY@By*hoIzl>ECaB4c#P?dkl|(
zi5dK2D_<q%H$%A+$!Gj!^B2NoC6dpupYJ|_CU5tK*8rkhBDv>h=9A7B8@3+=n+77D
zE$`d@(i<*sC~qV0Wbq~!Nyp0M)6)?)@HLwLGKDL*WDz?BG6f<a!^EA6tg_VzA`Vi~
ze!xi*;SJ{mWJfD*2tX)&CJ><kS13`;p)&>U*`87BAYm~YnBep>npD8SaBMW+fl8QT
zGe%meGUM=amTChjNNIV-U%LK=bix^TNyiXT2Ej%d2HyiOC%dpXELgIH>-bx70YPKo
zi5(pstE`^Shzz}Kzx;kSw5)#S+~v0TBB<7ok7Suyx8{M!g%w)6b!r(LR;-<vD4OBo
zRq*b)!hJ~5b4=p%!}O^}$84O+r)*ilz*Xcj<&YHXO0CSC{SpBacWWihm^qViNj;N?
zsL4xiodr-$Gx+tnQ+p~~mTlG5v{h7MYSwIVa0&2So3c#Qr0;h9y-*S3-^G{IFQ-GD
zbgZT#QX~0{vWp9!msWs7C<m9TPpI*e8Nr(taS1X`xw%};Xhz5p27!qZi;K@y+uu%o
zwxQk<5)M6v@4H)#j@ejE+8Eq>`ILBvnNX<d=}jS@4^6SVyUt_RYA&_fqHP6fWqT*B
zjfGZFGx$xx&YNL*%p&^dBhxksS(^}37vGy))@n-2G~V7>Dsp7WI>VRJ!M!~1-UKIq
zh3b>|{4jN4k6}NbyUdr@zTN$4;;O#w(Z<|0$Id7j*82Y1|MKybU*;_WP7DUQf3rK`
zo?CI#BPUr-wKsCw(Op@y)LM;Prc6yWma~3-!_r`RpOHe-=aui@hj1)hwQ9=gp5u>g
z&UY_bvC7M3PO&1(d)o=WE-I*6T&{=4dr##VP*5#iVt8yuYUHsgMk1f=u5CU2dG6V>
z+1J<Q=H$G2^M;45dDpsTui)(M_g|M-tzNzQyxs3NA0HoQ^a+-DU)!^BmDcl^dCynP
zT4r(f+XBls@i)NvNh0~o?$p!Mdn#K*c%0%&7$p0T-PI{S@;dtV?%liB@BjDfd;Gt1
z(fNBzA0O-e`t|F<gn;7#Vt?<&)K^yiT)BMSuRG7}zF+dzpKDp1mYT}i@IB5YXw&2{
z<HWQOvoyBM!<S&~fu9B&yd;z56yMi!9JHK%Eb95p-Gz^jec$(e@AUY(pKoq%&foX#
z*V)<E%gf8Ze{WwTpz!tY+wZ@#v$Ng%<!T>ws@Hu>um2`q_fULZ?YEnG+ohdWytX=D
z%;0<3;`ybuOF{!z8X7cg={P9?NgrpD&pAmZ%PrK=zkF#)-Truyo2{Rp|9{c{?}haJ
zAIIkZIXVB$+qYLjjsJS3iMSfBlk(Yhc*&v}{xy$;<NrJo|9{i|cl!K)UzYdFSO$fL
zb|nWre<0wrs?U>oc2W<+oZ@TDu&|S>7ds{KnWHmEYVVZPn@hc?@B1`${hxOGAE#Qm
z#m&sk83i85Fm@QOb!xgZd8tA1{`>#0#{a!~|M%Yezt`UXwKi_Oxm^EchGhay(^7pe
zFX=OO5lIdSg}1MsIUlS78E@))`Q>-n$6w9w{cEoO{~lz=o`1hy2h8>J?ON0~@%hU5
zo++uGE~T-nv$CE>hhBa6?%nl$-?r{rw|dpDqw#-^D!ca?6!&b*oV7?JsF6p|H{3W<
z2@*~{hVoosA6PzTxO?x;&u8&<fBFA^;J;t-xOb6;6GzjGYZ^~0_ifr#^yI|EyzSD-
zJxzP}?mc_<?8Ah78@cPHya{!6aZ~<1@!xMI(YO2VJN>_x^uO*}x=L)P`lTygZZ0z<
z1vsWC9bUN=)|{Mid^RZGvbd-yWiAc+Wl_6HXVWUF+Q0h$-mKsE@#|;tbF13i=A5nx
z<`ya5`|o(%pCj-8y?ZZbU$^J-%P&>MfnU~czgP9S_xk>?XY>F3a9{tdlCNm@?%(S)
zlJC~Mw$_*b-Tyy$d+?t()Aw2IH(4KQdT;&aJs<Ssd)@ZNu@~Ha9sRe}j<cz2m5|^G
z!HF839Fs*a!cxrRL!cBRs+4r>=;!DEzWD$DlE3fgb)`e+JTG^61Wx<Av$g(9|G$g*
z|DNU7zUz*+sQtyl{Mf6z>7V1*?EAl7=iB`Ka=HHB*8jhz$N&GlER&(bWBL7l!+)Uo
zj@iH4;`;wb;&%K+f`QH&r#G#8eehgf<g?V7o1IKHWwnH!hCAZ)-`Dkj*Yj6P_x!xz
zExht_#;cd<Gj3YeJ?=IC_jmvQQ{VS}w|!ppezSnm?>95k=l_0N|I7bB|NrCvFYEs~
zG=1~AIpr%v3qstdSkATid1U(jKTn^}uYGoH?QHYBI}*KZ6Ba1>#=d>~_U*fOn!l%R
zRaW=6e_0!Lz4yDMacHS3*YUU07#KbtH05A8s0C}|KPyZGRRmftCBMJDjozNuD!^dk
zE4+|FZ2GkLnwLxKKi>bl-u~O6%YrA0dql3Ud-ubJ+p%iyrx%mbA6&NoytDqJ{=cIY
zCO^)V@7uh2bFlf=;&pFI*2nDsIDg--_-A6%{O!NKIrXVYqxV?p@-x+ce=d`|ZYXx|
z?ry_tf3HIWMa~?QLIswbP!2uiW1sfSd-}RPe?EOTGc()sUD3_qbKd`x%jf@k^L+o8
zmDBCy8ndOZKD+iVJAcpDXSdUpzx;e|SN7?N=R#pgC;jK~|JwIQhAXrG1vzKmzNfa`
zZ5Qi4UyFYJ?~DGwPd9|q>;8t<Wu{hgI)t`w(g|9faPE_YvRbP3q;2e8F4N9H9dzdL
zVNg=(dwEEe;qp?S(%AnW+U@t${M=N0t};CI@zSMFpU?Y$Bi;UYB&*Vfz2^U3zpwlM
z^!>g~_7Y}Y`TIY8TW<gN<!kx+Z|`g0UDl3GdGY60{y+1_2mgJ$_Uzuf@5e%$mo=Ui
zJhc7)x74Kl2G{>jt^d%?{rT=i54X~U4c~Wa+}&ymX%R{!%Q=IBW`eIcmtY`AqKTBL
z@8VUJ6B#3-qN;wqTps`H%=s%0S08-coWB46sqE`{`B$87S084ptoeIr?b^M2te@L|
z{o>SjwDo8GkJ<Z6|K7U#vEaYEebr*Y605u`8Cy4h-d_KEd;NxOkLLWoG=1L|i~HeI
zIdnIzk>cOGIP)f-V~FUJd)M>f2_<oJz_A(a&(=K>QHqL>|9-E0_uad9@2-+_y!g8G
z`n79p&5r5obc}Lx^5XZ^E$(VKE!ICr!fWH@jN;_i{rmr|RXY9u-g5t5roQ<$e|PWy
zy?giU?e5Kgx1WoZ?RT5I^XJ7n<6F0XzY5<!>v`q!%RhI{|6injdX~VR=L@^8zu7lC
zeJ<P`9}l+gWjt0hrL^j<!o_O6(=kpe?aSoe=j69l&9QVzNKDL3OkByik#Ay+dfHQk
zPy3#TU;n=ESNi=M5{n9NNSPe>xBsdC|9AaY>HYt*St<@>o;c03P>R33{?GCHKkfBD
z+Sl*@SH;1!ATw!Ns*zwak77s1s;(1nYT*6Z_S0@j(w_}{R|n3RIa5Do&yQ2u>tl9T
zEnSyAamAv@Xa4gn3V(GP``Z<IH8>uXj@~`ndUx~18|A-Z^vpgyF0_^FeP!iwBqqPG
zbm^S;WeS(xmvKCNb@jCM?!$Xd%$5*Lno#li+1ZZ?1;4(WoUGnod0Zg0*JaA48D<@d
z-|j^(g|$9x>~y9WK1=i})mSylX=d-)-p%Rf=UG>mrB~msp0?s@#{T>BtG~@mxBq!k
zTvWsAuhy$;=k7hbR<>AYUrD4QgM+}%qOVaie{a3|xV!e9$lk^7*QQOMt{1zr?CYzk
zg|X?blB!-jyQN=m&$}NL6I1i)%FCVqWCS_56s8_asXTd(IUx;EhkZ<3*kj0l+|ie-
z;iN|nYu=q59~Xzm?<~!>EiUM}up+DY*_oNo?Y<@Lzph&}VgBmbY1!%Jwb{G#O!Pk~
zo!|5Q%$BWNP38KnQ+Mv!u)|`yXr<-#_rG;+-??d9|Io<V-rn9`uAgzO+u^ro&(^Ik
zeskku-1aZ`jEgxK9pa|Ee7vQ#eeZl&m}~(BiQ<lY{#d11v!id^x>fUas(j3@f<Wb8
zb9GFDdfQ!Ie1C5L@ua`t!Z)dvcK2O&Rz5zKVbS8o9ug|*SQ(d-ljoITb9v%o_wJ_Z
z;%@i8c^cMxx9i93s(kDgD0VgBzUB2RkEPAmnSZUwEPQz7WAa_UmwUt~F3X(rd6m^V
zsZfjb+$B)AJSzl;%0ZJUGuKX0T%_~4`Qd{@t)J8H*X>;;#UAL$v8nF&vW`6;4t3xC
zdDYLa*gJLo{;1yL(XY3!{>ZUl8RwLz#oXQ2(b3Hh3+mHXpZKJ#?Y>L(nb@=bITf1(
z=j<<dc<rjTgU%<N7KW>9*Pg91v8ny_<<KFg?f1*ig@+z}!_c90defFQ@Yd2}(726U
zlgKHba06dvsj|3*rKb1p-Puw2)hSfDSim*ZG}>A^&~W>XEmdD!UT)kG^5p5Gg!F2g
z8^Q`g&r`!ij@U@`wpHI={P14Q{_AhQZN8*`rgVD$yre_X>;DEU{dmt%F<Gv^O<MZ(
z;)@xnsi~QT8*jhv?kJXP(D-B%-r2r)H8fa`L852|Z&KQHqn&3&Bj;7#x^>6q_ciJ2
z>cxJX#|4glJNMwyRBv^^xmKmWUM{+=Eo+tP@4R(iUA4ukw$K)Rvu)p}h4-)MNS5ON
zc3S6k>F(}s?wQB`eEM_i*2lYRd$p(Q=e&Po;wv(B&zWy!-|yG`UTd6wPR72jC^J>^
z)De{?ftHzTg21J#{nVBz4ljSj*4jF}e|JkF`JOna^I-Ar)u-8Z_wL?%RrcxV&Y#QH
z>CdsR|NKm}p>1l{q4XPfZspE$IPh_?x|sNLYu0%drAhhu@7H!umrlJO84&)4$1U~d
zN!$GVyu5q6PWt@K+i!0_Jv|~S%C79oiEG!6{rvp=^)e=b#XrtmSKRaU+s&s}r>f7d
zSathtdSv92xG7E@40Do|x(tN^r=_lB-_Vf~Ic-^naq+3CGuATpg1TUG)?92E-;925
z6L#dNI`1mMu=KU{zw3Jsc1>zvX(=!No0lw?+_MwXN3%*5T*bA@y<hHaX;t{TI8b&M
zDcMzd`N*CV+qZ37eB#!tSKadeB{&zocy)1cLjAu}TW?2OJ9gHFi7hoNjSZh?a!kM}
zCeC)(mI>OAf85%*=tSO~9i=}{i83hk_A>0+zJ2@V&6nSPi>r8;{I~A;t*y7YyNeB1
zmA~0re6G`@$MBei?8zs4*(W$j`m}k<e*0$(3i6%ecR%OveSe%Y`_~d71`Wrred3ni
z_dHN^mA<xTb~b3du+kosg9Wv^_N+SYdsjz3*1Gi5lXv(2ea#LpFE_jSvru;Nk%t9)
zHg4T&F0oG5^4}Zd<%=(Ts<{_yv1#Yl>g-x+hl#17w%=GTdGy@9ySI03?;?%<IX1TO
z3g2r!9a*XK`TDxJo44+yl<|lLa;%HpyKVdS{oBe?QcJH|#!pc-J}S{MA!)kA;tqj{
z-{V~76hp@|`}bCJC%*glzdS~SMRnF*2T29hUGIM>JN=UX^KRYSuagX))ou(pHp4x`
zX5A*8?nQD}UY}pPcAZ1P=V!gy*YmS)*O=dy@5#HfW8c=TUzhIxzInCx-^8_cr+?r5
zmtiB<-=^4d@Lt^VV5|3?JF*TXSjg}kue=y-z3bM;7veu(s?R_5`OVwy=i~NQu`&o-
zDuw3cti8XlcDGK~{NJtf@7}p{=97-e)Q%+wTGLwu<`l1*l_UiUN5f+?`a8^KDW)zh
z@ioz$U3vU{)%5GfBtGwp0CmSrWcWVsIbkesS~Y*Iob4t9`}*qI$8T<K-%}pga`ULb
z>W>x4kIPJ@>b|AhO;62R_j*_AedD+9a`JQYOckx>|K1dBE;V)2rp@LO@80ou+0?&!
zlC`3AU;I3auTTEHyLUT(-`4%x&F!zt_peqezq(^r-RE5yf1aq@Ki&KK`>x7)$wA78
z&#YYDv+7!@EpI9`FUl`rFKMg{pU$qTT>gEoBEy=uU+-IfZ+Ne{z4CcCZ;-*UKTjYD
z!+NiPtBcY5WRd50YWByA9KCk!+EnfE_U6KljXK>DuB!V!z0zLpKfmVP&-CY~{H9%u
zSsvYc{QCNMaaYj;`)){^2d=a?mk%i~EB{tj?zcvE=Ig0*50&n^dvxj3UF+7z?c1_(
z<H82FRJWX2cmMu<`*!X0xL;o;D!cFb9y#r(#O!5^59TN@y7IzYH-6T)@4oUr$34KE
zUmK<O`Bo}>cb~r>`OxWC-`s?IuYU)9t2!z1c`~TQ<gTIrNn+_LX{9d1kgF?Bd|vF{
zKXvZ8UTO1nv3rGFKHa%q`gZT_`?v4jyA=}~XIK0y#Qgm4xqG6;N`>1(Hyf`w=9sPe
zMD@4MDl=b+ckeA%UJsl0eEM$&G4ZglY16lvo8Pbdt((!asBhxay!`tAe|{Dp?~|WD
z`}O&=XRWWB{hG^WsMuoCshPW3Hy$+Hafbcn-xj0q*G~InrSNfl^l_F9Wzw`&m?h}o
z`SISW(l?@$4WHF+04HaYRiFIYLl}$BdG^dazpMD~)1$7>@668M7a9KeU<OO;iZbh`
zXQj<oeSC1_qOy9w?8&*a=g)tC_H2I6`?&b~w<NDjnZ9>tYhY-2>D;H5lke=PVKmfP
zKPM(ar)y4lSpWB`z020s|2P~j!^~2q=O)S1COvz0YUDh-zb^Bhr$#abT+P&Yyx0Ho
z^kq|xE<XdgyvMNr%J0=vX8!5<UC+Z%elF@#^LmB7&sU2wOl%TSnDFQB^$quoj?MUf
z6x4KAOj0)#3Vfw;yiZihY0m4fe)DW1uYcW|eVuJ_V63@|l<Tp_Re!IY{d;$9@bP}z
zzh^G*EZ$qE-yz>~xOeT_J-2U5_s#uYdijk0nSQq4SMR-hcaCqPb>X9xdmN^H>=gE2
zvu<6?u9Anpwr2Y(p9>5WS*#Vaw`%RW)jN0oyu93>`NKWoiL2TKs`kdsnlM*rW{8Wk
z%gWPd65l%|_ZS|lIkI<tz_WY1X8gW#Zj17|(p~2|JPh9I6uUp4>DeqXsl0aWv{Mqv
z_xM4TQA^tE$jh&rzie_=)myu6-P$#8-n@y~U6)*5uI_f$Sl%Tm<6HSQ<LBq**ljI(
zk|A4?Sh+K7|K{!W*|pjpXFjdz+_-Aho!xm8dD)xS&fU94Cv1BE`O-j<btiTm@0Z<Q
z@$t{s?C`}|q3q8OxNOhAFLqJcy>E_X@v`f$k4juVv~<_HV1eQdH&;QXhMqNl6mBu%
zT4L$-{)@3ECyP*%)|AUzg(lkk*loa>y2Us5-?{9d2L5Vssbsq&pu9S9)?7XYpSZFP
zrPJM87azazbM4x-y}iA2=f<W5U6m+FPp>z)@&5eT`bS6og?`rEFBP9QTP<!^QL2fY
zq4o0$lXahLUQe6*aK)~|-({CujxKFIdUR=C-_h28w<a!*o;}+<|K6QjHv}B#rT+cd
zdiU<#v%O~p4xKu6>axH6+Eu=nMO*_#Tw|{@T$=Od<+9~Lvku>D1XVykPgMIa?&DBU
zWr|S$Kc}~J+2%R7gl2v@f5m6nTUFzqP1VM-UY6YVg5Sq&3OFY5*$!M<x_ocE5?Y?0
zzh0;7>C;qD&u4$#-&+|WmG2j29FyQ_x3=Ex-apr-?9C2+>%DrPlIp6fv$M0aEu?;~
z`QW;|Zz1QQdmBGL-o@psVLf;0(xXPsGt2#Dtj*S~@}92u_T8H!8b_9_(kgm-YU;y+
ziZ?elE_Ux<7BxfX^rb4*G{4U?LasgncS>#A($Zq(Eh5TT7B>4cEt$;Wwj%bX%H{V<
zfBPqR*}t+?aY+Hq@4asZ4Zb*C-k!8<`WLUJx#~#`ReS69+pBjyEGYQ)#!|qz_~OfV
z@A&iY+>+sO_qYA}<>ch$#r}8mp4FzOSO32D?AeB_XJTS*r4pgNM&F<PDqV3s|E}7J
zTc=(<O4|O#qAKO;&YJA%>f+?={BnJh#+!`0_U_%gdGq5r)xTaY@0YWcO1^Xd{(RZJ
zCU4(o_tt?LEuR@@oQ%A8_UXDzuO+#Ey<gp0y{3F0gY}8jj9E{Y9QB>d&(YAZHMVDp
z)rAYY_XxaU1(iSG>hwij_7YBq%O-d8%5CJjPaHaQ=;UPe(5LL{|0Lw+%Rh1I;No+-
zo_FU>*{Sq-wN-_QD<=nTx7J_vdbaiT{Pn*#iFedqlnr~Vb2^#l_UzXSrAj}oiT*Zi
zTD4q6wCyEL>)Fw_x98oH>OFR5U8dCgSdNFkzP>IlF7~(mdgafb8V<#;-+iwdYIe``
zg^Xp(E&cvslJkn#ty8RyEy?#+<j#(kGXA-8@=-4pmQpQ`qegGN=Xkm}XKuap#>}GO
z{!`c6zJ|wU%%1>?4K0>L+ls|$m%95Hmar_zoV9CR_1=4j4l!*`E;G-+ckk})Zm)u!
zr>!4<tjNyRPOf`&rSt04r#g%8{dx3l!LE%Pw;J~qEPY?nbV%@Mz+@AlSr6~|t#Lp7
z*?Vu?`uiuv#HSlifBWX$-2DZHZ4YFaU+vvr_xIPgZ)K6wj`zt%$He%&o)J`k|K&I1
z&ALgTQuNGX_wOS6Z9W+N{58`d_13lRys5W@W^8-Sqp2tq<Ue!U*)wNMa%S<SPHFfa
zw#|8pT84eg%6rFV%nt&ML##OS?YrosW`Abaz>v_Z@4t61@_6af^YQZhe_w8H&X3<y
z;W_2gqBZP?H`#CBT3DT4{d@ELpI0uQx6xg&bKiZrV_)CCeZ4(TGw`y<avh`gWvh1G
z<rB`$&%Nr)5g0b@`m^WVyB->!w{bpW|KlM4qLw?wrgG_WzQXx;cNxm?`N`Q=zIw7U
zZom7Jpw;(1b(9-=D@=~f;6G9F^Vk;CV|%$1(qAzxlekb`{&&a2E$^If$N!wGpSym-
z%$3J}ZTRm|c>BJo@1=!hj68P@b$%`v*9_WtlDY42`FlrqW#4JyoQ+csbg_%h*YHsL
ze*NIJ0Io=ryP=cIXL?9ZZWnEixb?f}6JrGD<%`$eUY&b+iicxD)^yFgg`UURGgs}M
z`EAq0nTq@-H`A8w?tflBsc!Z6t;_E(=Km*l-?8f3;kniy?9THn+1!8j+qv!G>z_HF
z0M$=(zoj+`-Mu<RuVuoc86PX|nD|ahJ$?H0>2B|{1tq_)o$dX4_U_x*h9<9^S8wOa
zp1adIS>11r#X^Rkd-y^#j)m*ZDW4D*=#}BNIPm7&?{ojHxLCMk_H1kI?Bma;O`9gR
zN56aL&!tnRPL<#H>F?Lu*CQRJx_N?LXYANsS^apW@%cFxKaXUDaB7?`QtR3n#(A%>
z=c1**i=kU+>a#B&-%L<T?lF8nxrx=U<Kn#EjRKLa3*(Ni6gu!yq_pUe;;dhh8<<{7
zJz?<iQ+vO+?)>FkxsR=_9S$#ly}QJmyMNhUfd-DQQ&q=hk`BF@DXn>ap6=^d`_FZk
zEBVgNxvCks`xL8;<=P5G#kupcF3Uc@TK@k}{}Wf!tNkmQKOOXQzFoq)ia%qEQ#pJ3
z<Z#DRxrL`<9cODTa5=K%OijV{6)EQ|i=<jb=E=@T5>YhYX&9DdAZ%#4+{??abE?dY
zsdFa<7X`3?b&7l7ICD~PnS!{Z0-I&pb-nv+j*3!_URo}vUMgxjt$L{%dpn<P(W;h{
za-RCX6j(C9U;T1`g<Dp}W-`yqzBBLF9eyb*C)@wxlVAVw-Ey<PWc1fJS@jwxpS~@-
zB0+Ke6Q#)l+!GC2I;Kd>ip#qH{pUF&sn0*aExlI{^bg(r->h*=BAMmDnKM2IZk?Ls
zQv3Go_PqQ1u0}^>IbDAJ{nfHvH7}DQ#o~YMoF80Jzi-C;=(zorkB{|A8+N3hf8z3R
zlar;qdG7>i9yjy+dr^^b)t{c&G%S7Entsk^`_{dM-+IHHgO4)wY807-Zr-`|ZOpeP
zGna?=%LG4KwT@Fu$#vpU3DGHH21}><f@d-0c!LZy=5{Y@aZvL%xTGT)<nVxjX{prY
zZ!*(wDYP%U|GVLJ^{YI-&y&ujh%Pv(A>;WvDD8hr(C+LNf8Pe*?rSdAnOAdU^7{Ed
zZ<m~(ztY-Sa&Phb;OZz}!>fq`A-7W;4Q{3><xW4a;H<1&mH0fJr!%*l@YNJAtgbgK
z2oNZ`|MyPatP~*ytp^Mal~vRIjAXZj>MP_u_GoolzIE5C%$?s$bWH^(IxUpkoLr%H
zK0!mpi${p5;mg-m0!vFe6$1Mnu*r0`SWN2L<iNO|MPqf-RE{HFXP(FiHec4)^I>S_
zIP&C&!WZRPVY!7~Lamy9Y&M!5EOQRo`Si{Brf4a9rFS>~^5&54cR!vl-u>t9_7$5s
zpDEk_V@#Yhvw1ad^j6*FS(6==GUs2@*yZVJwblLVUH-acxni+X62%$IJli`uJVYX6
z;?C^8JNNG0*RNmS-u*l1dgQ#&=DiOSF1#+a`?t|wM|XY6r#074=ij-rvogEbB2TKZ
zSm(**(_aLphD0n~>DKY})1}V1<u9Jjct4$+`*dk&?5>hJ1DQ&GhR0E_R_!YKd+T4q
zkDdB8>#n~y^}YOhx>kVb^UW`{@0w^uyD&t|>@hrM6T_lvuswgX_R1Ge-hMf;<_MSi
z5wEz;rM!tPp10JbCw%++vpna>M~m1go--f4F`X#HDbRU~Te(ST`}0PZS01ttIBa75
zijM!hmb39#?YS@S?mXT6{>)?x7PkT|zC&7X*#-EEaxaI^dJ<p2z*jGCH|w-)B+s(l
zg+WUWcwK(C?eeVYnY>58ghZx)GfvAAPkXnrIlzrk$<Ka*!xFAVTV8Z*((&FZd~aiN
z6PIH#Tf3uLviNb4Z1t_~B_fw6UTjl$ImM%-s(xmoW`%m+(TPE;Rwfy2@8@CUjyS0~
zN2uAUCs4^HWa^a8j?S4g)l!wFgn2uvTXJ(4RdOt^nV{yq^wy$DFMTu|Y&iY<l9z2$
z(UA?Q*+0$fkH-5i`#+1x7978J>EJcHP0!hvgrDF^(qQI06mac?h>TSG0}~4tw<l)L
z7iX4+E#j|9zB1!@U#rnEnWm7;LuVqVEj{V3*dn1UV>$n;xOjW$*Sq<(+>v6=YYmM!
zh2Q49uY1TH|LWVbJ<b!)yI)+rJ&*tR)Je>R0tZrGnmU_Gm7c1}uH7s3PCnM!?7IGm
zhd(Yp?*7~zt`~pr&J773H<k{k5VP&u_2YJJsd{qbrTY9Cv*%CmP&=mcS!-76%npHz
zCQ|~hUJ?DVp?sm?v6>|tPHmZ?TI+UVsc-_T_D+*Rw+;uM11k$&#d1AuzPzfu>VKqX
zq^Bp}-zp>C=kL1YT8peWuWbu(^)#J(`w(NF>DmvoVy~Ile*AUvzk%QsL5admA5?V3
zg0F2+=~0uuIqzQP@B4@EPv-x7tFiRicczuh%^njtmwx_keXZ5!RNSq*90|Y9e=E)v
zo;h>!<Fd$8DpNeaD{U<`x%_?grLIgRu7zQ&6SJ<UU6ES6d`4ixS_?Cg=F2B^?p3~@
zd&J?ww!J>5{1$j=CJQrNdTX#%yFlTQ15d@4g*>jU9x5}xtx(K5Zlif?p6Zls!U0=c
zL;G%7m|m^FyK#%x%v*CWhg}e8QNNnF;G2}i4snB*YbW25^k02a?(W~dnYVYn7E8~*
z`EK{t{s&Q_>ta>S*6L=7U*Oy>p4#>Hu}Hv<E3O$)ZRwFcKMOz&Mdt@GQ9tj8&E2B!
zC?lTwvb$-|dgqF-TjhDbeP6O}vr@P3-n~1wZru2DbNs)X$?pE8T-V==mp&+-u9yG*
zZL7wsnil5WD|DRh?X0r7Ccx1oA^t4<x|ng<jQR1=v5~iL-m87wYkt~>J!#4}+qs*c
zpOdpK`*UTof5_v)XSEYWLqn~PZ@y}HxnFmR;jtO*8hek=b7IUDzqEvnYjPTwrr3-*
zJA|fqT&h>|*1LD~hSY^6YhON$zkhYZ_Pqikvy}RqvzZR~*{)oC^7iK)kLQ-=T9=>M
zvU9<2)9AgYeRglZGH+4ryvg^L&)?Zu_J296-eg9HT;3B4-=A!+ef!03zqqS~s?+Vm
z8Mk7#%O;nk?=ZXF)WTn8=6k5?Wjf!w!V7<uT@_f|pUjxCKuYq7ZFSm&l)hRwkGrii
zG)+^}S~*-40vE1g5_MQG(PWaF!Xz`DLt0BFs%&zZ^g_YUG`T{<*;6@5*z|`|ai2`}
z`924gMTS{DJ}Mon7KvP*WHrHvQ_*i#0w165+{hqfONHC(A8xDW=2nb-J@<Fbw-;XW
z^#;dpzsdE@H_W|lo%8nazGohOx1>y+q7SrgIg>N#dD5lF)0g<J<797KX((?5DsDM~
z)+s8jT;5ZxciQNAt+MaC&8t>^ws~K2D!=yg?2YU8EIzYaz$sGXZr=Ydll}G9u6ZWc
zoVaJ_#*JGyn@e4PCG#_8;&sQQD@T9+6p#v%<Y%kC9evkt<F2wp)n~qMo~%B<@zT!C
z`SCl8B3Uc_?rlE*_i6WZw#OGwUHVjf-gdXa^}F|O&740!dzOMw`gWVWxv8LKjW#YX
zeII<$dvD?(sFY!~es)-s#)2iM-bTM`X*Rxl<=Zz|x1YOCR-S$s|9Z)>NAFy@FYE1_
ztg3YR-{LiPrqeyucf6Hbc=F%un)xyzsb}WRy~tet=L??#2j8nnYPM~%Cm5%QZCzsR
z%CF`o`)^*&kL%_C;x4=GyELs}sY9Ysh}5av$vZ<roD^C&O}dwV{(PN|@%%Y`R+l^-
z+*WdMsVJIsFo|Zc99VMB(9$W?QS^xe-y4RGj42*-rZFCJoN>ij;*o;fq?J{o>nAzd
zURiCmLO3xf@Ar2u6D^m^zN?m<eX^~reMY3|T4A5Hr6MAgmoiWIwr4G8l3cW{*KhZ{
zY@y>TGz2GD3Ecl5=TRAUDrKt2ZMB2_AL@=D^!W5`o54=kxjJ`$ALw&d6z>$3yZkm&
z+Ge8DZRSar^pX_aqKeIIkGxp-FX&he2dMk3=rOs6VaZX)d(}!^ihOLp=lZFC-m_<m
z&HdMV|IB^AX8nD>(zi2`M5h0Y-kv9GTleSZ^Y|AfpEli=3_JVw?Ax<*?^-cbuAE{n
zc<#4A(zDG~Cim{%Z1U)tXlY%Sv-QNoj%UxOZSJ{W^?B>wxpNm4T#b0OEb!>DYi}PW
z6g)dKb8+_ZSG(SQw=(Q1o};wn<(H*f&bII6?lpY2xOst%rqzsXyXS@+-{R;aRsVQ_
zpR$MA<>~KEBz<9=eq-NEpZ>G0m*1Q0b+Kp+UNX^YrA0@&)r^2wJB@F~zP%~FR59f3
z&JPFgT@Lwbu(|sEs_8SYoY>Ohae}i_QT(Llo@K>p7NOHTD?PkYl5QXVwz$$WG~8&W
zzR6miM`bJ#S+f^iJ|uALOx02|gV}TIjI+0CygGMSzCmN+q$W#Unc%4_gjRj@Q0+Rh
zY-KXfszpi*IT`gb#11lvKUA_*<xe~A;==dHBUbvj3;#)#v{jNS!5;<mUn%yrC@L^^
zDrvcvGOf=%Ak3l_sLG_!l>Di0VeUgI=b1s=k4|Xi1u0G8yZh~-+hn12UnIf>R9Nes
zWIAu(K6cmr%HH{vOQ!G6d*^uj^MbXtCbOTYu_tETHO`crT&7>CD1O5I6jNpE;gY87
zUp7=bm^f#Bo^j?es3*hc2wLq^B$-xr&eYdfs@E!&^QvE9S@$Bj{<7`c*TwGLwRNlP
zVvF;KFJ|QD7yNnBIX$i_v#wC{yh2Re-pa?fdZU|H6-K((%C(;MTfgr0nVm|Xca|Go
ztG2c-y?o}Z?)tT7N{iO4J7fFvNb%x>=XzgHH#0AjQRZS;VPbvz_HXOm{&OoI?M$D4
z^WL3z-%jbAo>RPXwvShOj><Mr!|C!&ms{WbQx!_1=jt&DI(?B+U+W+8-tuK_`;Ix6
z{Hy1jSyPb7oi^pgf-|klSVg!D93xxbmFKOPT%k7e+PM$5%G2axwlb=^%<EHme#P73
z>$hC(yjy3dnk}30QvdVCX<W&Xtqay%RFo_E;^C<zzb2I_;&RpG-*5ix4_?*bWj<X^
z!&UI**Q(0plb`SW{HAtVIoI^mg!fjqC%f2Om9MN2K6N5hPrK>Fl1WUO^Rkt#8C6P4
z5<RT;mNSKw3Cc`WGGTf&LuTXoPm4~^(ew~mq_rwD#ANGIN28TzGU``kclTrju^yh>
z9xJtK-JP()LMd?**`HtaY%eYDz4uk!UgPcL1530D%))(FYI9q%o?h}GW82;@%<|7S
z&;Ply;>Rq0Vel$Lf93aoOIU@~vYS5H@IO8_T`$a3Gwiu|{r~-c)9wHK`<{1q&(7`k
zXS$4dj&D7-zw&2v{GV_4*T~sldjGv|%{lwZPdEDSTWr72BgJua!tbEPEegp~^VYxl
z^6BBSyf=CCcGo<9UH^Cc-8awe|F3+iVNq7}b^rhH|A*JUo}PFASMx!KYty>VzSX+&
z@zv7R_kXOmw=XMsd*ainiOTM?RxR6f<K|6I{hpxrvrP_IADc1jUsBNf$8)?_Z|pHV
zwnv?-&!bk0pNli%wuy|Cth4jsRe@4!0yj2l$)7puUGHvS*}YHv<zvxh_jlW_VQ|q@
zRSfWrJ#*<_;3ErT>6so=PRQyk_vNj;*!L!p)tHY>tGQF-Yj1A3I7{x{Gf%F~T-?#&
za9K;kBFUY{H+Um!!xG~U+r+ufoA~^E;Zgs>@Z^tMR;(_WPU-8y`P+RjmsqI^9+jA_
z_Csg#HgQhvh+929>Y<9|yT5CwDmjF-vb<z%>u9;KBwR$1qtU}eD@5?Mo6D-UPpyj-
z71~dK-f}~YNl{7vx3PD`1->c%+!HS;UjJA2c4ys`ZJU;NGO9>EX9_Inc+_zt-78mq
zZ<LBzvili6msKlI_Z-tHt_)OQYI5^*Sh>14`P7ZpWn~sOmO7~%3OrJoxTW;?lJYnI
zop;{9@5}l{_HEP?!F=_d+j2{)F8Jonn(2DEORH~@B8%#`JKq-Ud(3W=z`XWlPo+)d
z(jLS1<XexvKX|O+GsUuB!1LnUsek>x-}zZQeO=7WTX%DvJm&tNT3MO;^NX<hwLUrV
zMQiW=UAy<;vvUa+eTQahG|reQ!PO}xz3|0cey!@?%@NnLv;Cbc&u`eYLuccydolO#
z?1>944QA$gzhUdfy}LJ0{r%=laQd|H>&LE29QgC6=2gSw=RYfKzTNYGuAGn-*7S82
zXdvy(87-AFduD61q+ZhLW$qJP(l>K%|D<zftXfM}I<MPuJu~g%UGYE;ZIO=`*5AH)
z(u@7H=q<Aq69hb4LnK|aCTJ+OMHHXQ{n%A}&d^%z_{`IbGH&rI2+ZibkY>Ippy_Z*
z2md?E$4fm=M={L`nA}x9<)==0pGbh>%q!t57z70_ZK-tXI-Xu{cP2Z~wSdbtA<$JN
zu+`$dKyt^$YW@YQv;;M~oJ>t;%)HXsFl9zb)U6NYGg25?a&PbOkYYWer`@&5THIw(
zQGiR4mtGLtxg+AqOaB^vb6dgqT=76%Ywz8(>Ki$Hv(7qh-WY%Xp8Wdv*SCLP)w}oO
zGld-f*>3|k+hts1|N1L#vmM9m!yAmJ_5Mw(z7le1;-`&C`7&j0k1s9|+i>3a+}!hf
zPTRyRdowknBjn%_z0dd37n!V^70|B1@_erL$;yU>i-fq@)i$hhY7S!2d^)GHg)PIw
z(c^vE(J!jT{S!UP<Mtn~HnzQY|ElTIXUC1jT~jP~v~3f2Rmtq``oPg&?`wYi(u8AQ
zbf)Vu9l3Bsg7d_j^TyMy(-fvEZ*|ShDm8d^__$VTkEP7z>1~&FnmabFDT!2Dv{3SC
z>i+#(zC6{h|JlBN|Hhr0ckkQBn6%>FuENLC_y3&MulZ*z|Nn@(QTQCI!Y9J#?W;fD
z`gL|K?>E)Po0iXIU6Li<Uk`mZVfxb*a_{f#c^YzR(~nmDy0YBNbItz`uK!mxYyFqy
z^}oVXJ9jy*DyjVacKiR!|Npd~xB32NMb@;iY0sZMTgE+|LB!SY?x&Zt?W;bpEdwPc
zhSxq~m+Slvx=1<ozL>+^P+X}pNg~+dUfs_pPrl7P{PBu<cqji~DTXU|ca~0OHFz5%
zCD1sLO(`%%?x=*NY5Bymsnd%b-kx+<*sJfihKn^Ml!Zmf?{C=U`!T)j)>&!%lbbwt
z`MENAmb|roGx75G;#tR^6l~a)Ra9?l_WQG9T=Rk>J=S)@CpFU-D?E8n<HmFT3|HB{
zi_gyO4osi*!|0vHG(n%ZKLTg({pR7=om2FpNTkC<L0l>H(QFNdpE}LWO!p27mVGPy
z{O#S^ueTkS-k)7Q^Zs4woOf?x_7`feIO5=##PvqyYMi6`+$u#SkJL1mjVqlmi@4T3
zx-oIF`!wsybxJyCYt(1I|1S2-Lc8YK1DQF@;(FKmB&3#3oWM9Ud4rG^o8X+FYZ|VN
ztE!aRym<PQjE${Bue<Omh?UGy?#OoM7VHRZu$EJ{k&M3zN;R8f`G4lElm8G?SYTT%
z{z>-xH|452kH1S?)ADp}ZLOX^h*g$KzOYNNNNbT&<TTkYeb=n(1e5JVK+{A8cb=CP
zM_oAgKxcAR!>+c&%k93dod5sl{QB32j(+XswP1fA*n6+;bMI;K^NMT*`*!X5b7gYk
zzTdSir!pH(ODtM+E-<8J#bbfiIad99ij&j--(J6G*PcBUkDhpYt4<5QUiWZ%U1@pw
z`$tQ&^Y>NyiM~-}3=OUS&u;%i{{Qj+$KU_`xBrj&{?E5v19{pHU-_M8A|>i7n7n7T
z$+1%@J%-Qz1}s^qzS7mTI&PuEwA94{ix!>utZ{B?r9e+|=q?#UpWDaOT_*3F!SB?6
zvUK*;Gw&L{Xz!l0m_^Vr<SIv?l8gJn^vq|xA#)jA1X@=J*lcbHUF_v^HvWbq>y%~I
z@_*(Qty-z|P(f3HL1oRPr*Tr8ipMkrRlMF9#fzMkJ#E6mu)M(W#oj;r<mY9xT@cIn
zu@~;lE;xHa(zk~%N^I{kDSo%bN~hK1wO1y%brcq?vOk-eQlx+9=2`dPjy3_-zPZJ3
zj08d!G+1mX|9YVJmBcFpsq4F&7j`^}to;4$*xB3L^X}|1T{UZs#>v#*i!Z+W_krEM
z%2wmm0!I@L5tg!3tClqQh@B0*{Z&e1Z+~g%lYb{}eLA_=UF`X<dlN6uD2#}XwW|Aa
z<If|fiPi7-7C+%kov8oC>Mq~pCsQ35)D%8<EOJ;ZvZ&#vvG9}-1;&m9Hp7E~&t^t&
zZcXvCJhw(f`O@xp-8XGZ-FHtZFSS2a{p;6n7D?ml-`6=OKmGpY^Zm=FjuI*=nT-pZ
z)V-e=tU6XXFI`f&=}6bsleKK~+jk{CdO2?vZ-&lv$nxf5i)B|0H_y*e2}<zy+8Ms0
zrQp?-mHIUgx&J@)-}g;<4_n~-+Kf91>EBQ7<d(j^?(BRE<M<Ts?$4i#_udga{=mXy
zW6~#~R?ofVj!T5T&eZSvdGOn}V=Mlhp1%LMU)|T|c8{xHoLl?v@ckdMuK())?*B7C
z|K6U+DSIy_+~{a|_+xeb7k6!U|2dVvR*J{hY|NasNhg?n=I(7ZvyS?RFOp8~`FV0n
zy6UZYKiw}B#AsHY<378=`dQ2YzDwF|4i3w>o;zGo<G;-R?(<~%%{Tt^HD2ZNN&D6!
zwQ8R1CmELs3=9b-EM*;BT`zZgnt1TY@wBCfW^_0%IFs<{qUFVAt#cu-C#|x}ytF?p
zZF~0C{p(jf>0WcW^v&uHsTC3*`)r>x1nl~k`KwsHWtJdI0!tCciY$wizdJXre6_9c
zor-@6S3`PMVw(To<*Z&@OAhueVPZU0S1x0)YW58iCie4{j7;n9aBVj$Uw40BZFTMM
zLsM5j*N?e#?;fkc^|vOzcUx8*d9ul4U*E>8Epwukm)s0E<mI*I$pNo<NjWAO#?|LK
zIFy7It=h3?WpZ(G_73|!_cZrrty!(;^w_rAt);B{(}{^&FE967vrcF4hd0Kir=HI7
z;xC$DvdTJ$uS`Kv;IO4dTepgDYz2F0OTbkjBe#j+U4gB6Cs~%=bU4EJJv(?x66?Y0
zFLM3oLzb7npWJfh&z$DtYwT`47tYhZf9vhUnX|vm^<#O(!2aGwp|_<$KxXHcE7Q$p
zq;Fc1saJfyxX-X(kQ-EGZ7x-vY}dNx%;JD_l{d08k{A1I*|n?c)030;?)*t84_};O
z*Zug}TlxP#cGv&jzW;;t@y#~cpL236Gc(uij=t)$^h$F4lv0j{U1!o=dXGejI<2$b
z9viy2d-~}^^KHuBaL>28rdwJ0_Qm?Y$Lc@ddY%9G`Tsxj@7FvoEjwq)-f4IWw7^^Q
z{O9_g`v0Gb@B6?SD%*d2u3vhT8nc3K#wML(63O?>4=xEx`*uX<wD(yJrt4*2`u{yS
zpO^EdM@q14uHSOLsct)ZWPh$`oO04pc}mNa^!4hha{b(l3}IF)IK31_9IYxRKEL_s
z(4kYOPSw<(v;6dA?{oEebIvpPcTBe85#o31xVZeX8Sg4Vsmn)H9{F5m>hQduqSWA+
zXw}2+5Y@oQVE4X5sKzYk#izGl<@f&lmi=7+?mf9LVqq;24-8)VoOv5^_r&|ZK0iN}
z-`^FUD1IVzVbq%vPie{b?GN8=oZ5Q-$JBV6eY;p#gB3iaO8c$|M$T>G50co@=`(xc
zR`*8d-(R<w3!U2eCXJ~_NiXJB-RC<;XTP2up1<xr@9IR^)f&5-FFx~=O`7-oXF>jx
zIm+Q25lt>ikN8SA&#DO!b1&dg_2quZ@V;Y$tA?@lH<u-WQ<{`3mUk$IEne8Nt4s0P
z<BtX*3w2K0oS(ZmacT4I-P^y<R@(pP>;9kbYPQEj$JRYM^3iy?-#nYbFDHabi&GTX
zO`3MO@tlygIbz+$V$oC{=MiHjaeVXj?e}(-{O#TRoW-X0XUX$f3x40xf4}#R^M|;;
z^S}T7u<knY?g!U1_d6DMwzIR{`uQlgN_CB|@s0VXUnKj_{deW_`8hV5Vt)0gI#n*a
zwEFMapNy$?$86d_RiMGyZE_)Mr)pNTbl7eQ40O6|@^|M>|GH00-~WHmZvW?>c45e7
z;pIDiT)P>*|MOk_KY!z2pZRKg`J!^Rd)V~y^><E5PBqc$V^j?6b>d@b><QgnX?IKB
z@Td3n{Qo!O|N5SbuY37(vE_vFXaB|j|Ji?AI%N9#IC<Xho7ZrBHPGJF+uNI8^H|#7
z?&p)0!OQ#P?fqO7Tb5;hvYG#FqNni;o#}?hW_(Y!dR<ynrLr>n<bqX3;bARn6D$5+
zdRshw{rjtek&)bPrAr0v%I9rX;B7g<==7a8Rc`z9jE5(icybp@vN2??+7+Cl?S1-q
zpM30`_!CCccklV~<<Pm8KaJj(cIC~}FS+ByU&;1u-%802B~wS))!y&L8$wLC6(6wN
z`*_`|3)bgyIk|kb^9=GtDjyo_9}xICb?=8)Prq`Tn<=ez|HP&KVdZXiZI7eDKR8c`
z%hg{FNZY10je}7r**N~$no_mip0as%JHHj%|9`spNY4x}bqPb!O2Iu7?wGUrJeK00
z_Bi0xk3*^L=Is{M#gBijjSkOW7r(FS^R2aC*Y16I?ca_-u}`l)S-pxds#tEPZ`Hj>
zYS9si#crud-+b0(ws^4kXz~kry=~c&$p1CLWn!7A^o-IwAxAC>PVAqjs57N7@XPKy
zswoVw0=hjyPu3Z$OwF6O_C3$~{5P@tx0e3A_4e`cYku<fg*mAYkJMORPo2-qlPM5V
zv|N&TG1pw4oyCue=bQJ&>?->_TYvwrz1!Ejoa6sy(BOI0(0)P3<GnU*Uu{zb|1_-h
z-)#SAT}X%e=JWEbVNc6`h;vrV3fg>Z-SWS^(%y4pYM*x+pO-6^{puic<mBUxyp{6%
zm)j)Yn+Tc^>HDqsO;9lH)47!%9Fx*nH%CWD|Ne12zT(xH$@c#)@-JN%a)ojB?Ah1X
z#Y*=dXA!t~=+K=%e`GG^&fmB?wrApA<+8vfd=q6he?PNl_wMaB``^s|cr|*vMaxdV
znGcKYKcC#X^y!?Rt?~b+#^1hq_iumwkEy#dt>&I9$nTfg|Mgn*|8MvI-OgM7<L~|d
zf2U5Jx@r}NQLct@uw<TXYLDTwTA`)8{Yy^m320++Il7{=y7bPC)l5zAzqoC6b6j?0
zUQ)@bQ-*V61T($LLppD5wU)o)=~aDr$N#L3Z`mA9CM)k}E@xV9x!rKbUWsqB*Y+k(
zPB(XH5p6xbegEILTaWHcUcLJGwXpdXg<nnzAMevi+3EZ+QrT2U=5Y1%$VDcKN~<(F
zI&a-He|culTT5oev{t7Tb0b~#PAmW9xYG1DYTLKtudNr)j&5Evo&8dCaZIjus?oBS
zwWhzbFWFWntIeL^**~?JZ%2F0vlTp(zFFn+Pt2+o@wI2ZrjbyTDD&!Jf!=bbKXt0R
z7YlT9^o3~rmFZ}>%%hfTeWgiYnSH#{fiq90$aXOHu_(^jy{Gu)ueav+?aE)i+8RCk
zwsrHz1R3q6g~}H#D~`XCzVu@5B<81~i#xa`d`}Il$ly^734Ltj?-F@?p`?<MlGN0s
z4}CK|L!~oAM9<8twY<K1cHxy5HS994B^XjF<F0!t2nv>R@hu7s=-sq?`{7l0@ASS-
zt1W(hw)lDfI-U78oBkX+x!8Z6UEQlMQOj9U9UkoJG|b?uP&F}ho5<sO@ZR&S7wSZ_
z{eFf-pKktgqSgERiP+MJ_a85MTkSS@b#8Z!)cOlPi)WQdtdRTDuv=*6x7|}(4sgx$
zyz}Cm``^PC)Ph&KscrL?KI-Vs_&d2!uW#bj4^tJG=cM=c%zWZ;YpMSy!85*R-KVq~
zJyUjdnNew`?{W5<>%04j?*#5z&zo#g6?jBI$>{lmO}jeJ1>SsF`zZN*{kO~d|DOMU
zX)iG0`MPzFH}vJl+w9-ExA4`;%dT$feX`N9v1d1({(acc^86bX9>$5E<-7y}C(hWd
zQ~a~SU<LDAzFF7L$Hl$)HeF1-e{C9f_n+?lfB3(B+y0F`y8g@mzxs#&+D?BibST55
z>hV|k|G)o#|DT<j_^!O}dAZfyxMPu5LtJm>Hn})1e`De9Ya2Fm?!1Ee@gM%~&gT36
zrG2>><K+qsS%#Mh6&>Z*_U=CyyZ=qH#@lJTza5U9ZM*y9v^A2&84>Ew)0VIZ<vl-^
zkugi>`wP*1w@-E}=}Sws&rm$Dvg&x{F+JfQ3mz>{NEMj8YC@Kj=-e(z`vq6M`DfiW
z^7at%NH1r3XyO=oP~e?_bpS{6!32Fa2L+{#m(ofeO0Ct^n{QF|rT26C^s2q$=jQyp
z@%g+={A-;rE9A;q8fA0e=Uekn7xnGvo12^@>QOS`OVxr-uCEM>v>bRE-CBj3RhiBi
z79F4Y_)PJ;9rrbzS4~k&dwNof^Wy`F#R8j)y<}WuCVpQN=wS5n@|nz!tOry+D*T(l
z>&W-h^ZUCAFZy;D1qCi@v0|GjF!R*UJ(B!;(yzy!*!6kpfr-qHqK?WFm5UaMTxql{
zE_frMva!#XL+Rf14@Y-2Ha!sFl%D;y|9;KytJm+z^~{#uo)^ETs5af8Y_8nXyHN-3
z@@?k!+S+j9>0O`Bq!8YVsq;cZLX#fLT25<tz<RHGLzhY5t@{CzeIjeT9E0juSXVpE
z7FeXvq*|4^qjTQO#YO6mcS#-BIA@tApBxf2KlM@ZwPh1GY_-2L@d2l_w6wT>>htq@
zHkH4wsN4NqxqN<YQK{fecVT1yrKjg!z7djqmP@E(!EN1Y*L|BdY%t}joF}~7ZOTk%
zpZYbot5armEh$Oc)$;uAL{E*wOA=Bia4-lJWh60o6iYUnXmJYe6sg&=xAD@E*Wcus
zls0s)3N+O+oUHuqRmQI<r-dwjo)c_Zn0M9sDF~G<5^+#a3|jWWR8Kzgbcqb7>;CA~
zMQ*;lrJ7ZF<}dp8ooKiudv}?-`#x~1_Kf?f*yqPK8_(vizI^ZKG3^DJ66&k91ScyS
zxOcku%f&`Vzx;01d{E=a3WtC<{OzHkj4wo9eE;nlxMJ0cfMc02tA9;C(~z-y!?o0#
z1r{m`k1h>$FZz1ym-f4}aohiVjsI7}|KeL${J*R9H%zV`^?qLe<L~>j-LYZ!Zr)q-
z`op)I+y5>9|3O~-`EUFG-|I8;>KsE?uhO(;Jy053Zsj`btcd-D?JDm)Hp$hTuVX0x
z^|(IfZaMdR*}9J!LMF*){JR)E8(D*<c4vi5x{#5hpxDY?`K%-4;mM6g+?w1DT%8v@
zW<5J~>50twlkA`7ZS*^xtaklVgTC_oE|vu=_c+}?B**H}abx58juVw>X->;eh?SRb
z%gcHH&fG9uwez`NT;=OaQ}zFy@%Eo*bxFT=|9fTSUq(s+6Z~%G&kDGnynK?erTZ$O
zS0~ObH~#ce<I$IS^}^0AUQe@{+KySj5=q^E|GDSnfNPo7(Fvc@8XBfpXmNVDhJ++9
z*^<^4)Geyd(pq3G?!D~#=A{Ddf@jZ|-QRJ(L1os$7Qeu@0OzZLQ*;cf!%H-@Svy$R
zn~JPT)ry!JEVM4PcsyF+*}QSj>BSDpHI9cH-p1a!cdzd2@%4WnT$PXCQM0+vYSpZ$
z8{fqymY<k9C0N)|FTE^Ig=3MB$f{F(J_)H_ylu%T6E7KiE}8LdUsajQk|P3&stT(#
zgg1&aEMl5^fx%_o-p`U6#Y#$tTzrFF14DVa#2RD_IVY5JO*(KZAZLr@@qqs3S1a}z
z?5oYL{{Ls~+jPCS-#@s|+t*g5Ze@=bs|*WRlPn-QX@TMdW>MFJi&Q3>E_Hru>+~dO
zwcQrw8@GNhUHiM@I(w(kg>_shmrgn;HBGWmQ|ijC<Ow<1$mz%G<udD12wP)lONi2m
zz^a7|MLrCcX?e%Krkqslc(Km?*KeD7o(rWqHMm@xG(5ZdEZTMzEle|UOlmn+wkmAa
z<9Yic(^h@C5p`+?KR0*k8TV_}`YU$6|FGD3dY4qlZC(G%eMvog<MJ~zGgDJj4R$ac
zuyhCry?X9hSiqB(R@PS~R)I@6edDHlzpvP}NvFNKdfv&@qZvD_Z`@fX@u{a@HuCq6
z&;IMqJbZF;>iqw|_m}+pv-9lN+t=5{etyDOab8+_cl}54`i;A`+3er(XXp8PMg6M7
zg;Srl8ns&W9pBn=tonYMy>a!Ahr6_`XY4DOvv$_Zd&~Jho~!-7|MWw-@b7!SzGQxQ
zZ|$zt<p*Ntn;fh8@XmIor>}X4qLQJTV5a-+3C!6dmoyxDJp7v<?X=BSZ8&&l&a&Gn
zk>5PF|7mnJthn&}@xkEWR|<+;9v+obJ|7YhW%~AJ@9CD3yu!7sR{eeG;jFV~e?jr*
zOTE$J>tcUDIX>^_ljHO1pPl*GYPrKtU%4YI=X|N=+^Jm)a<$j2@|bG*a#<*c%Mq`Y
zyA<4xNH|ON=}xL%|HM?(C^M?ZcxQ6QT&)?Qm!%Ao+D`L_b@@6;?o0PyQW|~vr%SuU
zsXMjttpaKH&RSKZuU_{`?OH%+SJ3soLj@KxeC-aFwhU?F_cuDJcDV(x+`4sD=k%WQ
zW$qt(=GNAJ{kr-7?~DBVKmV1_$$Kxpw>5CBSLC&q0by4d7q7}{sfn{t%{#nMK~X?Z
zIF-f2nPIhqt4UhloX;Cqb}p&i&@iXiZtoN>$Iwvaj$3XOhHRZ&Nz*ISj#zo|2D07w
zEulOy`I*KNpEt4-u6eMkr52rA?&BP)!cZFg{(ANHZ*J4`*TwIt`MP=jpBv(KKkpQ)
zcLz4}h&;TRuBYt(Kxh7x??F-=cGdDfbY{yX=V~}Vx|Le|ewtrY<m6x5g49&4T^41s
z%l$E7?C6|eH}jpdQW8@~OQ@p?OWUe#SMyiRdTyEddzaGRHP+ty?_Xc&$rTi)<{qiS
zGGUUz2}8@{cRUuJ*rda{Do~JB?()sJ^79+^KcBIE#xa{dohgR$n&0R3J*rE;(*M@-
zdCF4GrG6DJ&zEsHhVH)mZe#NCygNIN1t@j(UMa2p{Os)8w|9Ro{n_Wf{4%3J@}BS8
zAA8znhK9OKdFpz_g74AkxP<zDx6b~*AOF|);>!~IG8JaOxmAz8*Z;4-dgXEb=lp+X
zE9wJEPW5Dpxb1F!XukjF+18~~TaPaFulZ!Wx32yU%llf(>+-$Fp6vN<cjBPIvYS($
zD8Bo!yY5P}(hT>gUmwfYrCGU@=iV+c6u(!P_Ve+~K&j++SNSScyP8&9S)sJb>EKHi
z|D=$N#~~31-v~-Kio0Gm>CanzZ(;cv=KZa~{*q~}XXYHWEIZ}b(Q4Y2y~sprZh-{<
z@4bAfwolH9$CR8}w(i@uYvuQB%8QGCAA9!g*uCTS{|*H&58KReW#XZN8(-H&i}0xX
z>I%u;NWa6v>MNwfXt?yKn@eA(g)?Kt`%aBx5uu_#S1IoF*D!u7emIwRl5)^htt;$%
zO{Yx!mCsOqM)A<W8!Mj(%&U2CZQI`RbHVx!zp9rSiuzV|+O~?t9e#6rKHHrC{KwHg
z)>Y!vyqS^7!c#hpcIYrPM;%lC^{hPp=j#3c&K-Syef|A=I#r)T&h74T@r+$|j+=Ax
zcdpQ0!)2`@JgREX=cFIm)#a<Zuuvgm$_<y$=bVeqO<dKsjMMSN#_#tm&E@(gOfufJ
z_%4s7{yElfTwPoYdfGF(B#x%aJ=xm%a_ZDoX1-776fZdxaK3NvjyoGQoag#~Jv6&|
z@xkcy_Q#DaA2U82c{%l8*8T;H79U9vXzoxk^S#_+Wng@xljFCJTd3`djBNh?=2G+b
zs#9j#eBqm>&!`~Cm7B^pS;;MN$yV=Ks{+*)KMFoLxoexM5to7!D_80QMuFR`(@pMP
z$-LaqUSu;_!<d_WZi!0Kl8H*Q1ltvrO?+8>Tiu?>2rMtYc7!YCO#4JoYdm#Z#v{k{
za}_=QcIp00(znOBJbU)cZ;r*sTiNzf{O&J(_kXO|vv1$N&6|VIo!{&nC{j5uICk}`
z=6`a0?#$==_NrTiPjS7ec<k7}Z{_u0e%(1#bMxmXVRx}`@gKta`##+N_xb<RpP$9|
zf9%bFlat5ew)jigz3BXT=ez#z+OlWSl-gIu^Vtm6W$6_Qid2fJzxBT7%k^Qhr@gLf
z*ygis>EbJGU)4Okt24vuPRX-%?gzgV?7AMCYLw}3$9Hj(VVaihQfv0-GCSrjT%DO9
zU#TV}aKrL>$l|Uvp5;$W_Uhj=TPe77#xo0hFaB4qzaC_?Eqm*<+&?(*(n{k8TutGf
zj+(2)?jGIyk;5VKoaX1SSj*C<6DP|Rm6lgOXJ3E+*4^7ueRa>4`mfWq>^pH&nA_vh
zu34VXgAF!sDPFh5_BqQ+t)zy}J_Ri`$DU|TY1p>;{gbr~TLfG#>w7F=VZBm$zpQuW
zpT5hx+Gob!xw}>Q#|Q1yWhXD?NZ;7P!^dRuwWH%mV8=!|-r}`Mm+wr}e(5N#$h6?#
z&Miw^q?mU1Y>MI7zHRntbF=fYd;k9bc`JV3&u>R}UcI_=s_-mv=95RBE|PMZuq*NX
zjmqU(N*7iH&bYbsc6L_df>m?cnl5UdGSYW(%6JtJUionM-Mr<&E3z(|C_S1}e2({c
z?DIMP{R);9zr7ZOUJVIVRhV9xbls#d<gL}InrDs*?HZ@%F$z4L(v~^-+9E&CtELM4
ztDNU@UDhZU{qpMAJM(>?PeteN`*(Z)C+>e|I<NlJ(P9(*w%SbYtnu{psEXry!h%KT
z0#n|*XxR4c(4GA7+qo)#<BjUv^CN;M&2Zvk`gvup+sqKrH&Z!YG4?4<E<4;KqCF{_
z{Y*2%$0KKQTX|o~ezi5ZEV*m#+{*jMjWrMCE<3U^sO>=qqkHbP<Hq{C9G1)w5p#Th
z%HjUc6Xwr0CM@jvxnid6>OJM9$C9Ow-`QH3c{;hr<;fi3iHkIzJ$n{n>gH45`S<VN
zj}<b?dz!!7oiBd>{-5;~vxH!V7t`jhT6OGk;k@S)YnD2>gnTnAH{1Vj?R4w8O8-AS
z7Z-nK{2+M#uQUI@)qmg5@B3%6{oiC(i(;vykU94C|M>qs;QzF#{!{02v1!j{Cz?uK
z<x=|g_+i~N**zC(T&5ab-fPmE;G(j3b!YXb*7nkFey%FHk{H=XiDlu}@7-*T{hs%&
zcK_3Y?e`^$#RWZ?yOyadI(4k#30kzJ%<ZJ6C6foUOQ%D?awS6sg;e*xnfEVqb$owy
z(6(0oN44+yI~?o&dX=ec<Xn|-s_5IfmHFBZmXCWFUB2-O%usUST>9NN?tRNE_vh<)
z+8(c+doVrz*Om17^It1Hx9U5t+#X@^e9!d`HJ0~9tc*vFtYY#xXT!Njib=}pvdK%g
z&J*?tKPRm+5}q*Y2glMX-idd7Uni+mM~kYw|5N_KU|zBOhMJX}78S)Fx9r({Dvzx?
z6maCk#<Dd_%kSQ?Yz^L^<;;+}bc-9$l&pm+9w7#)ks)#>J9cjVe|CEO-*^4@cNNsm
zwfa1%^tHg^A6_!MWm?!&ZWV;A4-74SpR_{J@N3((3tL3>&Ta^wcKY+@)vHghKCQji
zPteI$j<;Xda@QV<{X2HdNcBsOI<mw?gyr1MGnS!OHCCo_8uPawK701;ZRy#*mp7bW
zy=-6U<7ZQ6OV4hu^-y{5dB97nw><KAu?UNAzgL)mh4P{oD>xOB)Xw)sJUX{yrTgpc
zc_DxEHroGs;w@jDSlMXlZtTKwP<W%s8eVSW?k*;uMKZ0Od|c<#Ze6}qUG*XB_N{3T
z9Gzx4Niw>G3b-a^wX2+oYY@0vy*`)0g~`u-hxhC2Cd*EobM$aAUA5}_&o8WI%cbX3
zKK&q|l{({qOF<)(rsjcwYZHnt^Stu(kZLlRv+RDJ)R75OPtM?%2Q`UL#de<g@_BRe
z>~wB+x$TP@w#0REoSAcNi}mwQHuHVcXH0yqcg1io_mq8gzuvxy{e4b0?cU~Df2O5I
z9+Q|Yv1Hypg>SAeix0-x{&=@~{aPK}GOPJk`zC$m`t>ya@6yxL*T3UuzyJ5!{VR(V
z3qy|HyZ6G~zUuAye{arT>zn)MZ2g!1-GAda7DiX(iaXuEsP-W+<kXg6>E-$2tNpms
zmwkW9Ua<XM=+xrtg{2*7?!kArXXThJo0In~_Wsmal9I`G9^bERJaNV+lQl&xBeW=R
z;h9A`v&6bNRJ<-9iD+!~Flm#Jn)u+v<i`T{Z-Y{_<8nuSu56p_=Z#lMUG`Ln=&-uG
z&*ZCx+w#U8k8ijOb?(}|`}XUz2X_YsYo8Ez6+Zm#-@NjWUwiIr9zXoI_<COds_^4m
z_0Il%quv+nQ)<o-lT~p?&na`d*h(%9-qlJCva6j$0x$SnDfQi#$??6#Xi;f_9M46G
z1&<_G1tuBK`q`S9rcgGkcCwv)?wemP-u3Ojz4!F=wB<?L>n(2CuXp+oDdsE?8s=)O
zG|A%L`fufTirP)BSb{Qd9|?Mu!J_7JQDUmm@+aHB9}B-;UjO6R(fzeww{F+Frz0L-
z<yxO@AYr=jP3f^iQKsiC=ch(avt)5UA)6GuIc$}ox|Y%X+4En2|NYnRV(QHKul00w
zbk2O89xgWh+4F@~a(wgZo}Gyi|NH2{MHl1Rp2|-%U*21<^zHk`y?b}t%N&z9Ub?mL
z_l@4OcfHNGyD=Uv+`8HP#@*ZZrF)eO(^)4rFN(eP)W&#n@uRsMmG3)ig<nZ9xreGf
z@6NCNf4q8k^WMJ?#qItZYjZ#G(rAo0T(M&D#$y7q$0bf~^iX*|Yum;5vi-8ZJU?AA
z*?iK!-@J+8k*v0-2utWE)!#Z?p^91axFuFb>j@rkS(&;nqeo}r7R3g^kfsikH?B)+
zd9Q6#v9A#Q@~{8Rw`(U`%dDh4S~Y`mG<sT`_wHZ)bw<+5hZ>IqPBYJIS)+HX#v(!^
z+3wW4D0k!8f;RIWr@ec1QYzW!>Y|lF##@)2HafRyjok5z877&w%nUErD>KaO%)HgQ
zZ*uUbiy23Fp7nI>I3Xd@n0T4N<oewDzlWyk{O&7$C;tE5^36Pw53m2fXuon++J^1_
z=jPWMD_i9G3+(&%bv^&Fvlkz$+kG~kpX?U+<6*)R+sy)Uj+tlnR%cdezhpfaTm61v
zyCeUn1&?0|>^;0==}jZ0JCz^o=kc>A_b@5AtZ2G)dG3;+S|x+V+njDw?mZG~J$AHi
zeS&6$z^Z`BZeFL&<yO0}dAv29@T|;zMZ*G_2EXGAJ2$Qre0X*8sv`o)bKaLP?qaKW
zf7P;)tJuz5-B&hJsang5@9D2|52E$|Hza?3V*mfC&8qJ^7q4&-No<(e?84Z%Aoq*G
z&5+QBInC^wbc)Xz7Qgc4KJ|_(HG=iRox{xv7aMJuA4u%|o|}IEn@_}2-qf^vd+U9i
zCGW&08NAh0X8Fd!xFqC<P1yuR9TC0us;NGU+I`aMCTeMi9CVo%BrHDP_0X|*AKom@
z{{L0~|F37?0=n1zdZ+NhBIw%O>uX+2d%9wk>a}~%=Ox)nb+J6xO#T{Vcrqq(o!<HR
zc9nl#E<ZQNuI|at<<qKJJpw}$+T-|G+kR)KvhywI5Lm!<ezNS_g@S<&4pB>%arJ6Q
z{I!&sJ$wDEpUXO3j>y+XNgVFzo%`(7*4fYX<12q3dV2bL-kaX6!aeru7IGA<oTI`O
z^z+jW!8Vb&lTX(rbd~meRS4_-z<)k&RnnYjyI;ohZIALP6tz6vX_S1H>-?FO%L{sr
zobmd%uYc}*h3PYSSmw(VsVq6fBFHJ!Z1mjnlah<nHQx>;6$SR^j(kT}?koxp?ORkH
zBp^PoC~di%K&hQ*$?|}-vcR9tmYXh5Tzo`Oij_%~HCU(C{MxzptaV>@3il;*M&@X3
zdvmnrM5IQtT~OQMg`hR=N?wYtRjyN0BeRa$-(LFE(1vxY#!9x9nca&#X4|ei#$Yv<
zPw;Ei-nG4FS4mB`?BG~rJv;iG<ArsN*Z+3SeE;k0iv=!o95U~kcL!BjAKTchz2e04
zY5jXjA8I|!pEhk;-M7#F4IB2DeUJYCWBdB}y;W~dJ$)UnU)JSkEK~XZ`}gnhbw8i3
zuX(Ed<cD|suON<FZ_C;aJH9kl+EUEhuxgcy%IQt*TURev^yo1R<xh>AmezQ^)K-G$
z*|TR(9Ik;^O8*Mvo1flfvec+0Aav^YeV1Pv6wiCUQn<J(wkZ7J$=dDz1!YXj|NjZe
zj~6*w67PH4^?BvIS8Fe+FK3O^yz%MY^0totEs84)pE)ke-F(4sdFw03&upIQlV6^m
zv3Q9nSMKQ`|0lAQdh={bKM9|=D}44N>)nA%7gD}_V*jB2exLT#pvrr(Crue8tpzz9
zSFMubVcY%t_wV0_1BLbCcdpx+CHv~a1rLk!#R1Q5X7>0p>^}3{cgm`~6NNWl@3P5u
zI~*7)>Jl0poUyC2@ZF!K_J2R;*MAH?FCQKGA#&ZqiOb3=#oU$4B!!zTp0WolIqCmW
zB|^07`92{*#XyCvYdxg>rHpgKe*ZmR^GbMr#lMvw6Y}@PKbtAf!&Vs>rr0LH@Z^b+
zdw?M4=F6P#d0hCkPwmh5pLx@DO}R+aFQxl8Zx)`@)z>)|z+b-on%M8<{p&<@)-<Ya
zTf9<q<?#}S9HwvWi}&n5;A8#!Y-_gpzi+?o_movHcT!t-L;CuwqWf=~CEvWN>XA6r
z<9Tf7^E&g}x9`cmeXICb-CwTy<<b87N3H48#Krb3-gM$u>b407wL>0A_?%!AEQ$Sa
zaA|9Zq{`V+ziMl<H<uYXS_QT@s(WynGL(2&MgD%xz2i$=o@VqXZT0D0`ul!-Ij6Cw
z?%N~&`!&DsJe?h7-goN7%1*--PMTdD5v+<^UBmP~@vWBU%__JUa(KJm{U5X6@4KX7
z`~S|#>2X%EB1gORZS3vs<F9|Muz6Ru+e@O?O_OU*t;WkI0+s!-QEA~0TVKDNqorxn
z*fC`#SCD4$&7Eb{pV{rJYHO>%|LTpN8)qmJK1Y0!kkr{tYbJkw_bl$F=DgZpo#*TR
z?7VzDOi*gVq2Du<9)&Esdv0>p>Oy(9{v{^$^F(wKGT*NcuuxjbJ?ZMsb4lva8r<r=
z#TiW-{MT+(3%vL^aDUF3-6;!uetOLO68ceTQk>Az%YkRMwC>N|dn_^klk6g|9>bRA
zOZ_X~zJ1%<%bRx2NIY5O;GH`$k<;$xnXeV~t91Nz?B@1ex2DHVjuZ$u@>0G!i9s+R
zAc6nKT&+3#tA4NF|2ymE-0FX4E)~ghpZ4DWvA@1LKmYmvpY{LuzvcZtcX43sMt!%%
z2j~BJDK9>^sIu~BtN6U~H)6l`e#|hDGuQ0+cyGDR;&rdt`7<i=m+6aLo?q`XO@HZp
zeWkg6>T7>`t>m>|vfa;ZaUfSxP>`5fkeo?%#>2a%Om!~H8ofh9LqnI&6;AdsoLRhX
z-RqZ3OSiabzCE+$W9Ir}GjC-kpGi*owPqe0KeK>U#B@g%wN{swXD25gkFWW6Q+)p0
zuf-b<1!mp&<+x>%@8#%sU1>qxJul^>=RT8SVo+L<&BONf-Me?^?j^*Sn)}H~U;Fy&
z-GgIqZ<}A+zU|w$*J^G>`&#;y3UsDyJRPCbaDiju_jv-r+EV^?^)azK4gb8}|M%ai
zr2M)%yYrq?T}^_E?5>wZ=Fd(SbP4@od;Wvy@=MxxgVp>0{So)uprE`W$;R!bqjIim
zn|jI>Gr75Iu6c1As$D;DMr!MEDPy+Bml>>7Z7!Jjr?t#$?>X+*s<0&UFURuOmo>}I
zOnExzC)<vF`@a6V>AikmUD^IiNr{^78?DzRyKKMCcsaq~#7v`Ue#Z(!`q_U!*m38f
zvbx_~%hEq9gOA&N{A0Y_PcHUFBWI>&6kCAHlobJN)(<75CaNW?<xYRKfoaL)b5%<w
zC*%YjVez@gQ+#eBGlOUTFOH(=XQw_5x@o!fTIT_S2RA<55mxWt^X=Qx)32k&*WKH<
zX<sb+lw$5TfA3|ykzFeI<)y4ttMCqv_4ir@u9dUdSG+C#cJtArN3SmLO`mW1>CQ~$
zV%Z}d0s$fkZm;+y)cL>emUFki`Pf{y(I<J`+$IsbuNFlsl(XDY_LSzX<-8hS_xZM#
z>5@RvOCBFqoe~hzl{sJ9t=zpg-B0%C6Yk~Kd~X);&9Ix3ZZ`F&qV3fsrb#9{=l${F
z4`9(Q%6MtwoWl9>oa*gkH4@;8DJat+_WH{nletd97b|S$@i`u0-?8WEUazCFN*89D
z%XggEc>C5ZtMYeu5)3^4YqON>zI*lR)ul^S*-Z|tSoh7{xlws8PxB116E9@-f4z8M
z&$K}(c-s43x0wlrZ!3cN_y1e_zP~wb|IcjK<u9iF_#<wo`RRB5-k-<f|NgxGDvM=7
z=B!PZch)>S6#wVvd|CUlE4%AIeS97-;IZmlhvBjko!XlFns@DIR<r9aHFpkjnWWUY
zYu)X+&-mQD_xaEDQxAQ_;ITh;m4@ffqi+_L?pT(qX;}PW$=}IJGeWL3dwyS3vVX~m
zv~4V!e_4{xJWeZfb>7`%?E6PCNyB@J!L_tIg}VY4Fmp^;`o`^{{9k!n#SgaXlTC~l
zY}fT;2$}fv+ncB&9kHKL^-EX%DxGkC&xaC~TleJW?k;+Iwpd&*W@pvwZ^ypf+mYAC
zA^51q?G1N@T)V{Tg{#CO-*vElxL3Z%onv?NU-|iW>)zcoKHfi9tE+WRjEX%U7i015
z%3g(rNn9Qdny;(2zugicI4jWjgGhVrmh2RUFS}QWN;=0@GrbWxw{^E``nd`G>%M;E
zO3kQZvia#C%2csHM^I!Tql7I#uf)6lD!<6mStpjrFKSWfcoK6_@X*=0uf7&PzrUy8
z<F#{opN`Hk`lQO#*`?vKs6|cNLRmB9*ja_J>c2nVb)TQ}>rA(P&6}C(VPemwJ=-<2
zz59f%M8JWg0<XN1Q_}q7q+NUbRD0{6eT$I`FmSo_qNvN}@~WA)GabD;ru^buI!mOB
zWonkrMy6`k8&7S|&9kyAPsx3E)7XDs>C<2Qb$`k}9{bsCer>Cy^|N``Px#yu4wg;2
zY;ua{dB^6$j=g^NO?i3m{=Von?~{qNt@^S#+cu*iJcX~|t-*##>iqMs*#BC`{>FdG
zYA#uu%q5~dIu{s14V2TbI5;*Lw6O#U3SL?<DeAS8%a)Z26O($Eof3G)eI}J5;J)PM
zRZT1Q+Dy6bY$6$X%}m43U0IRYrkRl~Q`pH^Et7?(Xq8FjMf10^Uo7@rF@Lu2&D8Bb
zJzjpTVpz4xOLc*3;F5CPOYEEP`h1kw@_$G8l?j(v?p&Vv^x4_j)Ai%;-Iq`0JLjl0
z<L8%`mshV|&EO`u_~MF8DU0hKC3oz$RHnTZGP(MC(<H7I#z4QnKM#s18}3|lTljfi
z?Cx)`W>242@#$^PIh)Te>)(Ie*uVeB`hVvCnOFaLdi{Tmjm*^4FtMW*G4rj<-`)Sa
zyT1I<i;3d)-<p!y0;WAJQD1&UW$nkxh}|#NP22MJgX^=*z6Gluf3#TY#Q)kY_+hBk
zqGglk&06-d#HzgZ>3zfa$ILcQ(q5Nu(mAZM$&;T~&@+2Vn!V-PHK1*?{GC^#rb-?W
znChWeVtoB<44*@zp~+U}?q0iJZ)T)*87*Hv#i(*o*skQVxL8+)C0rcMyUu<6&1!7f
z&mj~0N-nnU-%oYFnBAqn-*QjakK6n2SF3bh#QXl^MsgMzQj3FIS12hcdF3ah=$%$l
z&|9s#r|#XUOOLz)_xw0=anjbDRTJ$qT)b8ZW~NQxYJ9ZYFJ;mhYqf>T!dzpsCEixH
zo%d#){P~Rom(T>aYY!x(lBM!(R`zB3Z@e9*==DDH$;ZP57aA(2`K?d;x5#jTOXWk`
z#QmA8mOWggQ+%#lX5p-#jg#BX7C2gJ1-tzgy=PPYv3mWUx}V3~$`ef&$e0G2ilm-Y
zYJO<fV3fX|_mBl!p;27)yZTS9%lCbFDQ^Gy<8%MD&-emdO=a2xRu@N3v%Dmc&C9D@
zsg^NCg7bv&@~Z2%115bdRhg+d!LmZfVDqXL0g*t4=bEDD8aTBSdtO_)DE?4-eNI>O
zj{T$Ge=lcypI+`a@5ed*xaz-eeg^Kn{@Il^Oh~O$YSsl8wezg$m8Lh|msjmwx=HfQ
zojW)Foa5iOeaD60m(u6OpHl3#aG$5?6%xq$O5%2S!{nu*o86CAS1C?);!&N&R}&B#
z^s(iFiO`-&moHhfPcqyxv!|n>p>wVlXHtmP=cYpz#XPwJT0$8PvAnfm8pW?fCq%^x
z8XGI0`dxp}Js@woe&MOg3L(M1*$+4@g_S3ntvPk(jGarUB5R|HuUIV$Kj<{?>ZiGO
zLEE-%V_4EArBw9$+uPaZ`S0Gm@tOTiaV`J+HKw(9xMW#ZemZp5RQ}bkudns@|M_(9
z-n}>C*3bRs+ueOHs+>@}_vY=}#pe$GepXlCb*r3LP4zO51}AgoQm@M`JL~pK_N`x+
zU$SY<_M#O13-L9tcgwi%eYAA4`=^~h--Oq_H8;PO|2`+b{{7SUCW<|7%o%Iiny=UW
zcvb)NRrpMe(|3;BecSj_Zk}xO*A4%ymQ`<fTXxgTGA-@i?c3U?H{E})ucNbO&6*Oc
zx$V(MU+wiz4352So_FWQ-MhZb!NIAQV~hLlJ={@sWxY_){JA$D*93)&R_%@3e_y|A
zkw(`h9qYM%^PaDqeJ00w&db9`BtGxh`S?rErOLG1znc|V5_u;qlYD!9@!hm5ilJ8y
z>y-O7Mog}A(EoX<%ukpvbn2Ho91k93POx@esMO&o+VWz7q@|MFo8GzlH+DYd3#<CO
z-0$0b%hFGedT+1JPS=mwU;FLR)URvb76upIJR9@QNPLlUpreYbuqxm2C4rXB%dhLl
ze7m=P?ONIB>O~(`xLtWEqNR9Nw8(|4(Q8(f#oy*1>n3!xC>7tm^ql3}lGJA&jT^$*
zr_E7ip4jHLl+j5l-fpd;hp(NQy>=?=X5I96^3!c{Hv4~N-){PO-Blmq+Cv!;g1gR5
zm&{bTdc)(4(X$(7tG(UDH60I3wD}n$;&kJd?7aOIPv0Cpy?y()s?+K&UCX+JmIhZS
z^eoyiIWF?ly}C8uG#_7WJ(q6(@6P%9kH+Wc+HKr6W3!WU!ikudA*U~x2r*kL32aV&
zFY|i=lYwD+<-}`++znG28(9M;nW^SHpRqjXVTh?SSC@;@DxXzHp2%!<mfP#T|B2c$
zg+&{MM9zIqYW%sp>iD&|h?%c-zjvA6v#ZXnb)OJ?@!=jFS<dB~wsNFC|C}i69MIde
z%C7w1Bkj}N{_|s^E%vztx%=+zTBKaY<8k(Fm?NW?@Ui+uj~CYNW$%0YS4SuJcBcMC
z!<AV%G0a)30)?~E!jd*HYoB10apYN*^tj_--^{(`b9q#ol}!`x=+%T>mC&?3HuL^#
zs{`zlIzsNVs3oy3eXwbE`V_6rA}q((@Q5ujGWYxJ&DhlR&N!y#TgLY3R?j{rf%+UT
zzyD?kiaj8mzvtuC^>tsf<A2{e+ASVjJ@IDnqq0+voulr3+VJDfS-tpKZG3b6o*(PY
z_7(m-M^Q+*i|2Tsto5c%uNppbgs+bSo%#5APvZI~Doo%199(#^+J(oX>VNB!+Wmf8
z^JZz82_A7h{`_Y`{{P<M>AOtk>F@k~^nBU0%sjo{zxRLW4hrA6a{t%u_xThV=A=gQ
zJnaAXV*j73*Z(J#mYVvW@Kcpoxz^{E=I0HcCT5x*k5zOE6e%t)cJGt<`RBR)|LXnU
ztC#!F?=$Q>{<z)rR%Ly?yhCUx=n4VQVf63ozVB{6c%a(;ZML!Xir)f<_ho8K4pZ^H
zyh!5l#^mGY=2#Ygd2w;)&Yee(9-XZ2FK1iz<;KS3%TN70t9q80`5c>Zyye`S7?0={
zr40XukWf#}t&zUoLPl2)Eu25`ymuMbL>r@y%OMN+GiIyH%S<u9By0R2Y0Zw<B?6v{
zjzxqsIUb91?m3wG*h2pkk9ydry8lluO?;dmx9i^Py}u62?=MSEjz0Ey&*Sbr!I>G0
zR%jWzUlmX`KD8*|>D;$_v$t<wcX!X;t-p^H@pGm5Z!FAJT0HSqkh0>^@4vDXu9Wr!
zURqL^$;Iz36IxxlPEY+fk3jYMN3IU9GA9Yil>AIx+PvZIyz1x7J2y{R{<buYgF&f%
z=69i_y8%4s+T+yUmld%lH80~_v&JDMvGss9<EvH;(|@^4d3iZ^Z{1nh>JTZCx5#3?
z@a|pf7~f9YS^R2&ujv_+H99)Ae{QP(zxUkk?<MtfC9+PTnLHd*%co42RT7%2!DW&3
z=#24Z1|dZ+mMkWvN(IyHX}R@+fkh2kjSiEqyU#J&RFWcOoGKYC#iHgYu*&MM;n%(s
zmgi-fk1e}*Up75;{pHhrUp^ic_m_>H6a6l&{@eBYor?{mc;|QpmYAHMEurXmFm-$U
z)#kLA%1d=O*S<Q~+CBY#&Fi)O_CJrt#R&;G@fOZhW)GcyeqG=!&eSKiwiV0mRfMM8
z+GMI<;IyLoGhgMix#wrd1Wa=c6glO0!o5gP;TzX94#rt46uklhL#JLa5t^%DGI!CH
zlgW{?%bi=_|6aD>-hS2})_MCU2wlpt+#s<0WzHqL(jyv9tNKLWT;eEGTmLrL*DB-g
z7Z0;%&Ig?&KTkB0;alEqx-NG2x3&4TuV>%?^X%NYb6fOv-s#+__@kBj<lV0;C6n}-
z8aNe~Tx_-|es)s7_N8}maWTUytGNADZ@<00y|SJA&s|Rz?PbQw4cnrkJY5g6G(KsS
z=WAzpCO(}zzUTPk!Y4NG=j|@}dRtZhOzElVcKdD}pX_h@_xAqJ{_TeouU=Wd=TjHQ
ztX*j@DnhO=4isLs_irMXZ;<xQD=)TZ&T5aVF`V6OP#hI~<z>mY@89dchSz`n^78U!
zJ!Af-&pz4cpAHJOo_p@uvuCT<@2h%y%T&qhsqqZU758?EJqwi2FZY%7UcD}<CpA(}
zUq60N#m5s9l~W_9rB?p=@ljaaZ;n-IR$}7A7Z(?=UcGv6oPO!U$~%+1lIu?0{mAz|
zXJe0+8h2BO$SS@MXS5t=Nin{02wJ={q-h0P$}h&Uh#7gWYMmtmm8L6hJ*1e*WT+r8
zNvE8_$Z_pL$@YlKA8RImez|zg`MEx&>)(CdZno{aE6c*hC7bQ02Nfo&G1;`cO%Pw~
zb}oKj*~^oYxzEca&+pYb`7>dQz=8#3KZO+D?_18(U~~TVvlu}sSG7!s9wjLgp_OS;
z0@7}0S3Ojyv*bv<^y}fb&+<QhEj@Yc&gVJy!EX)zE<UEUFtcgJX{#f897&fwGOAn^
z1=?Ji4rntJ30`3d=)5TKTrXx%#ZRdd;&bCfdby@Qb&0uZ>iFr7u&1d^+B`AqyU*uY
zectK6|I43Z|FfwbrgJiupU`0LbmM#(+rH;-vo@2^MFCfbS9=;}t64l}JQ9-c#I(gW
z)nSneOWU%{H*=~^xo8Lma&dSng_v?p>6$0tI&l|g-;NV8(*)g11Fk7dWxwduDLy~$
z!86s4y3bobhns(2RW--*+>B%vg)?yrBIBAoW=#;?8MJxh#*fFO^J6N$9hvMNZk-x;
z-BdG4xkItIJY?2}W!uk5Tz)jKT=#D7TOS=J?U2xr6@4r_G<r|J+9PbdB<rSzOv{`N
zOiq$F1Sbnv$u5uDeENoEW1E1IlHseWn($tO3-?a#js6rD|4U%P(rso>rfBdgOc$}!
zZl2O1v$@#PxZ?`r#zvVhAC5gSdvCSp?bF`M8gTdi(g#_F!w)~)+M50R++1&AnPB1G
zE00R7!hUWr|5kTvQ{J+ZR<cVj9zD`f@jOXb^hIg+^7*yzxa0pAmG5HAm||A`eS7)0
z#Tmiuk7SHX4NsoQwhLXftus36l*_9JP0C8wP0nV7Fy49jb@$CX8MS||O`ZMu{{N4c
zlImZ!UcNi&xu4wcsqueqazDRc^|;skmD(|ZDJw3&J-+PTy?a+rGOXFMD?Mt*$Aa^p
z)0_Lh%=3(#req|+vo3b`w%xmD=WW0I(q_$VU)hLPyX5%VGml+<^(re+#P{+UzZ0|A
zg7|qB${h-Ny+8T<5*M|r`<L9Du*yoRm#zBu^Yim|7rw0mU7C;@xoyLS4@ZRkZ9bnd
zp8xyKbGyGU{pZ`&?z;VUS-WSTNckD|jZ1GHtJxr8quclJ$~0D&T<J+)z8qRoz~H!;
z%VFY)iS3W?Y)&tn6LoS!(~O%x=d>sZYI{e;etfZ>f19k+69z`h2?8<=D;BL1=-^m6
z$;h(eeG&)5jo(J6jh8BDWv(hb5+(j`rgGw+9Mc=q3o5hg@AMpbE-PTXv|PT!_UMAc
zg}y?Zb@_MZ?5_Fxsdsr?&BKUinI;*VE@?a7%5<D8TQ^_WJx_n7YX0r16~B08rnny9
zTiRUiYRu(()y47R%dO1w9Q^iXw_of~KbCUx%ojBo1K(52Hm|muQ2qQ~bKb9d{&No*
z8%*9VzZVlO;yYp2%I2oI??raLf9flGVcQDt+@9OY=1i;s+~;EVef;(F^ogpAqK=Ec
zw@&Kdn7qm>$4x5xI*+*Z9;55F#h+djr~9ot%gB{^?DO3{lDwbKR32AkxmtGO!H$)m
z_NXipSgd9FJ|?VXMQQB)V)d>ij}1)!&y{q$r<dfJ%zoSTqJrPv8#i{IF<hzO@#}V<
zg0JnmUwiokHJjKnp6n^mw<%n5`}d`{bN5!+?Ao_cJUb|!iEqkIo%^?MM@PMBE-7Cx
z6{J&Rw&u{Uy04Fmub=k&UlFLJ?d7iHyFw-Ze#ql(YrS@_TI(xz@9$r0$=xh@r&DGq
z_+4GO;Ii{w2hR{!<p(l{wG~Y!Xm~N6o6Kyn)@{`+H|Lz?EFDhDzyI4;*Z)(!UO2aN
zQT6){<0m1;0W;DYHaiqdaOo6Vd2>>Z_om%%U(dVtHG1{+D(C&b>t6hSw)gt=x7V*9
zep_~X)0&BsG`yE+bQyCpDL5p_afP<dGXCr%SiN8V+sWWgEd~{hrUeK79GQB`D`lRd
z(mBhG`+t1f-rR6#kH(g>9IYpmy833Wp1y3|EbhBkK2Dx;^d!qg1|^Bo<AtfOtg;HP
z#>i|CUt-V^Dj##t@$3I1{AW_xe#9PZm?HV0uj$$53?DlqqeV_aPm_Le|E(*Lm|0iF
z!OJPkz|fqb$ehh6$R+sjf`Fkx1H+Sf@)aL0`qzBgEYu#`uvF%J%&wx$vW<2|jbWPV
zcT+5%uE<jQc2-9+pk!VX(;+=0v6d;Jj0(r|RGBk+^c}v<HuqOhfBf;i?S^XOCnpcL
zzk9u9|J3I%@BjO2UmCt^>q5nEdgb>bq+J6isr(J;NHcg@J=go?&#3JC<$XT&-(UVV
z@tw*pDJ^|DWsc2x>0Y-`<v(fGsb{}2C+kY~i%3YbCW^FZJot1-YVj4HX{l$^Hs5~B
z$It(~a-NE(%<;Q<+b?E>aJn3u5v}W%{%pf@=QUDFp;}iLc~q*Fol{^tCUInGYwLFF
zyWY>w$=5#q;BTJ4@BO~ta`k^cI`i9`nApTD$y`3$Bx|ce&m_O&-7h*zcHdn!&8#`(
zo=^B!zxvV{{ijOJ4zTz9%ia*L9M-${pU%{O-?#rhV1Ma=QQxbp>jPbtEd)#sF}WOC
z@ip-XlM>g0@{SHCK4yjwFZQ~>@77?LUaq*RoO^?s(W3<kYO6)lSnQWvziQmvl@uf#
z7WY+~k-?-VbsMLHrEw`oK!xL9pA)+|)-w1U`S4=zZu36A|6gX_|MP0;bxvL3YWBDr
zY=!2Yk1YHyFS*!rW3l*r<+wS~6)(>&=C?2U-=^krcEjwaf*uKuGd}BVz2??f`t)H4
zzdqB&|2iG4h78;M(~k7Ch*&5V@G<UT?_aoBVr_#sGwUXHhW=@d5j+hquU_8yuGpbl
zrZ%H?i`>)w-}+Lv28anUJZZgr`lf)8z@m=xvdIa)vz93d9WPZnRiysNSHO*9v-i*J
z{JHzLTv+(4;?YFb-i^}~G=&(om9`#G`n_gv&}Ny6pL_l7{@pmtzP;z_$>!6WBn~d^
zRQwcYQ(-IjUX~#uduC*V*Lq8_>B|*FgqmV<c|)EqjeYw5_HwUja`(e_{o?3o;P}Dh
zb&`$Y)h(gc!d?Lv2}UL%hJ#J7+rH&X{aSopmTP0goV|0z6KhL~FP#kE<*L2m+O2Pw
zigNxGtUjt&+_cTE>dPIcwWijaULI)kJW<3w;rNNICko~n1}D6-Tr9l7@d4)^eTE}U
zhpOeIuSQIbi(i~kSg=G#TyR6!g$0U&4TmP5PcAXs_-*TVxdY1LENzTA0vkVzU1(Z=
zHEZX0*2UiiSQ{(e$1dDncfRK8+5K4$R!O`#E3;qwXz^29=L?zol3yo<=}kVs(6o`^
zz$1ohUW^;H>~?t-@*5m*7hw)cYp~`zGbeRsu^!LizrVlNe_b8F_G(t<tYw)|BCTE$
zTI+lNwI6TqUuD$i_NK!_t$@ixMX6PUK}KMnb+uV!Ui#fD)nW`xn-UA|tIO?qz3=z&
z<L<i{jB_mte;uk(cNDf_a7fX+uDJeIZ2s0IRS}aHd@@SCJhk6PO~EZzy;(*_aE6U#
z<-1Ft_4isyJ^psm@Z@Iac0N_UXJMb@|NJ<9cS&}ysNnNGW|=a_cbC1rwXe2%-t+G6
z?$At?sb?})O`PVoOHRLdZ{5y&&!<*B{dipd{*J=MW$TPMwr>%h$|xduR=Vii)5>+3
z!CLni8A2~lxze+nQ~u=lavP2nEAQXie4S_6B8}CP6a^Kk*`_IMDU{f$6CW25v%{$T
z-Itl4)6e<E?x^_q=qS5fMZ)uUvC7WQ4G}3bx0)Hbo%iO>oVrB1HiWB@zhL)<I@X}|
z7rNSGosaW`>E!q9yJVo?5Foa+^^(rAHOH7#qCEZAIvnT-dVQp$<=WzF+<M$6j25^z
zGc~btIY!D)x0@4gyY}_or2RW}1Q>plnl`Mqw&P@<voRvu_X5jJld|)TvCs8m?F!4Z
zPIGrjDQPGjV{y4A5&UExkD;X7slBgLj@}8{E_lV4rKRm)rd6n=s>9(2>(ZuI8_oRG
zpshb+b>B|=TVFbO*cchOgw#IpG$hSzILfqXPkY0LJ2%=dT3@KQQB}V-TP4K3X~Vrd
zH~W^jpUH0`D;O9yFPJi?Lm_EeYWLf`?F~$am>O9GdOH}51%x>|)b*T{dj-mKZtkdj
z{NqQ#YC%VZ2b@ewmzKQAmU+7?B)>6ReR)jzv~pR+-1on=mb{uCF!gQNw1#ghuBkV$
zyl^e^@3Y^K|NKtU@3Wtay}iAYW+&!!t}#_~O6=g_nvi-VhUr^HrQzO7g`SZLCmAdl
z<3(DRa(Fq*mpCZBnK&U}hIaSN?`2<Kehgk;SR%<6vGtP2-pkC&2`#-FCWbn7H!NMF
zw(jx$aNYw60<H}b90$0=rk}i}9aVq8p&_9q|J%EbRn9LuPv%v8<q4Y1_T%m`aAn2x
z_0?xq#|`=S_u2oPY;RfdAz_lr=g*&~n&znb?d%nFs^9tOYF0qX!HBbGd7UOdfBExs
z`u_iW-_N!E*;n4j?Vcg~`y=mU|GIzO{56jpYyZu$w*P<Y^?H3Bz1a#nHr%W_9wBzk
zzkOKNho&!_6*%qFo2?w3E_;}5?00`SEzW12_4T~{w-YxCjHMR+=Ck|qb$$HISu-mi
zUO&IvgmW>+gl?Vw#}!FQj~2Ge{kk-Lp9ssrJ9p+>b9%L&Ye}E+wOg+>BiCIw{VO%+
zUqye%6wX`w>;J!au_EgKvdmwKB}=WIwIr_4(tR5odMbl2e3DAlqhm8}ux<a6u&Oq5
z_KS}Z+17LY1Xx@|SRCg)f3+{ChqLEmW$`2x?Yrl$ocS{I^K-en9}n$+T{C~b^ZC3L
zao4>&J7T68Zhkdyir3*dQ&HKy@=n409|Dh=a$asUNo(L2IP+$w!vcdtoryc%uiLHX
zb2fg?zDcEB2ZAP6mwx$vZ!+f|i>6NtAK%d59<CR=%S0?czfDkSQ##whd5Z*2rB1qC
z+qPf%z@@saE~YaZS3fsvTQE7rcysYwm0~7^5MO42ixWN`%DN*jWqqaN`@5TaYfnFW
zsA#}&kGn!lg;7(uZ^E@I!~4s2ds{ZfeE)f*ZDI9$yA6+;xxM%AEU8nJ>vfj4o*vz;
z(2{!7ySZcDO-plodwXkZ>-`pXLd{{Hg+!D-9cpp#cwjs2k>*DEMbcLon0X4K4HQz@
zb}SA!d-B%XZClGuPt%n)%VA*9Rokm}^Xp<^&vkMVQv6Cvg|<-<Gk(ke|2ygY=A}zT
zKPCuDxG=om_k5pz&CAo}_siEaY~i-3{q`qX-LGu&85h&%tOpgi95fkg-+Q&4l9ONP
z^CFc+iGe@Ex#8N*)~WON72LSeX8-+$a<Z?niQUg9;`?v-O**=B=VNz1?jKPxr!VWA
z|LnK?a^807-eZUP?bn2LtP*2n$X@$z<x89E)-%2*O~3trmGJ9}7cW-rou}ft{dVZ)
z=llyFht+D&Y*r{Zmm0auN`ZmnaKKE#u*mh_x0@_>U){elZMo70fsJwNm6HNRel6VO
z;V4k>@YUBUiMD&y{G0ad`Sa`bdVPKU*$2*@KQC`nQIL`0aW(zSn$&04V_ce7{C?c?
zTF@}`&Q`Onxdu^eKXel~JZ}8FBPu98LuUE!_j_MI+1Xw6F33+~or6(E&OB?QM$>6a
z6*lq6N#4@FyZO2Pn>!}kDs5KXNO4}h<P5|6E@|QQqT8?jU+)=p=G?iZna7$OR2o)I
zQ54G7HB=T?kcqgQW%ljut(}QUIt&SHnp`aX4EKziG*|a~uAlV7T}^c9d$HqeiHCpO
zxLeM;Ue3Net4h=0(S*r1{7$Epcup{^__~vEuEVrcV`F1+Jzu`}Qm#i96-+$3A?)-n
z%SjGjSBR=59C6%Zc7UPWf=&D<L%B#u{ldhQX{n9^CQ`g<*A{$PykO$W4fEuL1lc|+
zxdw{p&7M2+=k)r@s;sOo$u*85LdVjwe{4KoSN1=)T)OEf)4BLp^DOHV%L*s@rsOEx
z%Va&M<-RgVZaUk)ANO7fO=IP5h!D8g%==pT+|m5Fm;>VduF8}9<?fhD9s2e*+V1<!
z^Yg5~`c-GXd(_H3YxCq~FaP}c<E_7UOY!q_%<OzMkA&x6s8JO>`8h^gY-P}5uk0%M
z-fQPigv_sazxB^Fq2g1fcP{ybyyavNab384=CaIr&jUqt_4W1j^tMH<z2tJCI(zNT
zqs;4PtKAY=6&Ki@EqF3^A$#Qd>zy3DPuF>DGBKFOG<&y`%OZ_cSF<9g`TF|Se&2oH
zw)$JntY!0mo=Lx=Z@J}~LRw|qQG-{S%<{dfGaGI<y`HG^y4|I;d-vUTn*;B)1a3&E
z7`;#^wmWaQ>hiz4!u>Ws4jl6Oe&~x#wRiw;kLTtlp9ZypbCOC4=Q-}`%$+ssRoQpW
zzJ-n-8JMoFNhlDmejj1q|0@4L-Blh2l}bbN{S(sSSUPo>Dj46a%;aIT)}Pnh5!L(a
znyz%av;%`)x_5%6!Y(hlXy5o1>6410H`E=N(t6b9h+>XR_S>6V-#%HobEnUo^F15B
zAG#;awBB`|z*2MXnRDmPoi%G${`-ssjjxY*qNEu@;*Qo{i*2rc&cJ-<rNjgy<~xBG
zo^Ri}EpC1F`(_0J!PIn<8EX!mxE<ZF@{!1@J#w}35!sE--s*nyYQNo#-}m7V_ernm
z9ES{iChv)pulm!eE?52M<h2(q>>kDypVtaM*N;mx^hi9|q$XgpB08VT?G6J&1B0iF
zW5~PJb5CVCe2`n<9kBPfef9kI#2KRVY+XNQSWh)SclP4?xU?hZ?Y0!RBpmOPt^c>Y
ze%kW8;L{3DeJYYUI_sg4sp;3t^Z%7xUgo<tEc^SryH`&w33Ch3TXvuMN7}|TwY76s
z%N;(O796>gf1&);tcxrrf)~FhCns0U%A6I}G<T9-&Hj7G-V0v4b@kK~myQ)?=8G3E
zezoSwobJaKT}oHA1s5z+e%a{~$im<nILD^4sIqeB)hu3q{`dFy*H=_nbUju&fAx>Y
zZTVj*ubLC88>C+^XH!mTxG(pJOSqNI(%}@>^UoP;ILqJO{`={5{yeMNV{Bh91gz`(
z<gsAcr<5Dk&etl<jjgZy8oxgn@nJ8Q<JHYG^7g5GJ1&-eX}VU2M}Af7nMsUkksG&6
zdeSF5nU{ydfO}I%@;14KgPR>QuRQvA@!E|5V}}C1BhSq?Xs{Y7DRFQJOh2Z&THAN~
z*Dt5d4=rUC;of|jS=x=QEdTzV<l9eoK3?7(<0J4Y;ENO63FBr*hvpRH@H6Mn`}_Md
z-|1%PaFe(a7v;iIv;K*#lJ<M!0}RY}PC`?|2IDRz-u{K*DiO(ks;OGL@85pc8mK9?
zs_X9Bu;!W1#l_=(eEod?=ecsL)3I|cvSz+IsT=+8N&NqxvEOYkWJIzX?4BcI`S0A7
zH#V$=dJ|GzBl4f=Tu6V#cIw27cV72r#7*qHw`WmR<E6d%S0A2V;Qq14arXh1UYEt%
zdbNL#90k=yH!VIM=sWhpBm2?C_U=8^scGMS-~V5?{IcP(46*YcA0Pk!YyE#I!T(?U
z|Cc;I)_XSXa`pVwnOm<#tzKzzT{-ohX-o9y)>HPbTeWtjKEJcpFX@uuvX!2zd{$n6
z{rztFePMqaLp!^9sWT1L&KIjL6foT5nR?-@(`;A&_|GSvJ%2uZ+O%oYr|ZY;D0p*Y
z<5Un3Rmw7(-NDhuqS&MSbx%s7iHcI9gr2^>{r5Y?*KX<8|2*B!Cws}nB=@{gCU?I5
zPRj#tUF(mkMyRJWmqu-KoOgm@Kkp6e4<}mtA03GFk#QIF<vAX0))V!_&9>}--T6ZX
zX`3no8KhWJS`J8jJbLL;(5z*yd?}6VKRJA4;}!h)z^}|XCO9bMs*i^4gNq^cWxFRm
zT{k=Jp0GEA$Rvxz_PsLE-3}UC5A^YF-IjAFf?J1UhtlQ)96IYhbU3UwnaRK)uplgU
z*IDz)|8CFSz~L0Q!-7wl+j?8xt<A}wrH}Vb{%pq6Akbsz!t=tlL6DQhcb@9oyyvI>
zIPF$W7G!EoiL}YCR7`tkn^L_xVEgwLc8P?B=pIH*;{&p-X`5%NbQ-$3Tr#<;urqG`
z>))%sOxhQjU-@C-!c9Ly!<>>uO^-y*m~a2{Txa~hPt*17{s&0}&MOjOiww(|b*Je2
z-tYDQPRFn0=TBt{7kjw$`hA=F%&L`l*KT!-d3O2G(X|YFk_9%OWAvYJ@As*oP;Wz(
zk~cm9$?m6Dwj{0%?VfI3yk5>$(DPEopM`&Kn+be8%y0YUdHuiVpFe*-Z~HwaP{cLx
zNa33~)<sWF^w)h^%*@Vb^X*3R)+pcI3{@-Lv~+hqW4seGXML5x`@OT~ZMmJRwCZYB
zL8<JQXvWm0RT-N#x-`1B<=p)A<8lA}+V6K0MHn4ssjPA+Joixdnf?{WnH>xlt+(&l
zQ}grF)15na-n@D9^YioXZ){9XOH0el%*@Nv^AsxmA1V}lQm0m)#ZjWIa^8HKN~80i
zH*VZ`cDDKP!kG2fnU&txzSK!xF{_6E$bWhNHTrF_nU7Yz=dsw$XeXes!Ib0BJ<*K^
zqh!Q7l^3|N%vN)Iy)g62;+=l;mR4@Qma-{wp0K21ilc(EkLNVeo%&r&iZAYN@-kxV
z3H*Bht=;MSo*`et{?9qpoHDbxZ*H;9#100fhQyC4YdqAH7?L;^9oQ!Ib>qc{2PUx!
zG&b~@&Untmz&P{J`uEdk&p3Z)(dSrZ!Nhn02bqJ@ddqG<sn9jKd&iy8N>M~X$uZ%*
zqW}YA<IL_w8S6`?O}~A&N?T=<TFUg5jeYF=JSm)w4h(E=SD1MUmM1%$;wf-<JSzC>
zM2PuJoAa(N&LuA{%D=u}e<Fafwe8EX89Jw5eXZJlo3-KR&!6vW-&gzFeht|yx;;FI
zL1Pd1p^Dpmvj1=Ye{G+C$7YT}MT_};yT7L%CQna$mJ{R6^}OMb#W}A2wkNeuPprB1
zwUd2rnZoZwi4t8LHw^f)<rE&TxtZa6Hm*)}?)_VfPA>HCHG8~6%=X)j<?CW*7M}b2
zNPIs>lfz5Sw7Sn{&Hukz|L;`w|DWgU>ynb3KF5b#TI9C>M*CMkL-W!<k<%0xeJibx
z_;LGj6<hl$_R!Xij1Id?laiErl)^>KI2LKF%2K@hN^$utSzEJBWhpsp?&aj&+;+Bl
z|Bf9$cB;>hiHox<eRYLfe^0@W4-d7&*Oly!Js-2;zHk55l5<z9OQ)ZkWBK{ZW&iwJ
zTQs{C#qKU+3|wko^k(&<PgB`=85Z1+NeD1_)OVnYo3ph~^8MaxQo-Wtd)IySt&gnQ
z8@KBID>m(mkKWoHwdOsO)AKPdJ~rdT&-*_Y^mS}fS$W)4?~_jP*BzP+ZHbS6oLDYb
z`QrKc{ZeMfzvR8KVNjUx@r___$NA4SOGI^bbt@Z}mfh=GWB8`a#Dr~P$glFv7o@F?
zl^Z_i^c1oROzrBk?ti*dO)_w)(DYYVCLA(INsG65|M$=#CyDEKz2sbaZO$i0-@12O
z<J&!MM(*c3yB8N6J`#~|Kp`Nbd&y~!#Duw@&)k`=)mpIIOYiH#db@_yWd;IH)-Qh@
zI^K9vre{l5`TLt6k6EXOS!wquvI#P9D06TwaFo8zoSa%%7gd(C%f@zhxwp5?+AX`k
z-Z-|^ZCY96fg1;^`%kp>6t7#e{hy<Zy=0Q0m?C#aD(6wVq`mR4I#y5Ra&c+lh&_0X
zC#9d6=K~`oMJ}B6J$(L)<YgLNw`()P70-V*;F+v)(L}qJx9P#9quu)ZempWhZ&RFF
zW_GemK_UCFP5IWe*V^&_k1g)6^<tQ|d&8u|Grf(|&&BIW2&~ztXlNwGAaKxV>yuZd
zDkA$De{8Mq?PiJClg|HU_SO}%t%YYCV7aTpp4_DI%p`OB?$avI&&{{5uPfe@T`ggv
zrmnvK-`Dl?txBIQogU|PImE?kE+2!AuI}Fl?DjL}%#o3j`t@bGeeC+{rc3-MEwSIb
z;?*W==i)#S){Yk|g14S)pZx5y{P!@K35IDI85ub>cdWN>*|H_|^t89Px98vA_jl{{
zxa!Bf=9_dbzjqJ3^0MUB*Q!8~Q~Xic?d|RQaeID%npH_4u;^k|=qkPEvHRW9Oq1T1
z|JnKX^K(W!i8VV7errE?rM{0{@ZzVevuU9A!KBr@Dnfl@UOc_|GGg!D=jI3AGibew
zyRo{!jltng#%epOJ6yV))=PgnG%%f3V#r`%^=#nM_nfx<_S<V7&gK>z+V%n&NAlKQ
zT~$Bz-}Rj__A6IJ@N+0k)0twc%8|kA8W_UOETU$>)N{RbtM2B_FTb5kS@1q{-JI6C
zrj`@?3MARS9ystLp!RgzMegb8pBK%o;(sGKk(Jf^@qZ?lIh(INtF*JWzyI=`)Oz-W
zIq4@povH3$R<cq|(IwVJ#wLJW;(;GzjO5TP(YyUQE$a_<7O#tnzE=87Jg(wl_5I)X
zqVxAoO=UF*NSLgXZRWP`BYXXiR{g(qA<XO-bRU@O%hvwvUEJry?%L3zX27=BU7w-o
zYD%kvLqu+>z>F5g*3+fSuS#kvF*9sBXDq?UBQ)uKiPhaZtRdprM}Iy%_94JFN55P-
z`&irT#mdUBt}rt&%qiLJ60-jK+~RYV3>&V!`t$hu{(oQhe!o}!-~i*+--YKC7wysy
zH{Q0dxzc{`wq?H#zxAE<Vt(7V-`O8@=Y=RPYS^%$V}+X(ZzRtoowe6rt8M5FE6zx%
zxIXXh?r(4E9z0Or_x*0YUD=x(FE1~jdGp%qxFsL#%K2Qk<dki`IcMg~%5OK*-|u?8
zuJ-r0TwZ6>=`YLwgdSGg@$1#@x3LBX*gK>RjDFdj-n4V4<=z{DhFyzPJj24mcHLda
zHzRGcrH##;Wh<+S!XNGM$}v5_VBW^S$#j#Uia((H0E1Y{maB6lG9y3S)lpni`JVf|
zCQqcqsU!RjD(`pReygXqUA=lqPm_Zw&l~nr`@XYIO`TfG7CEIcRKM~)w@81~3$AN-
z+*krzZc3~<o@l#H(nZXXA?Ot^gTUXbmDYR9?--xkox7q!^3BhECbNCj67)N6ta6_$
ztlWFTYa*MYGe;{&qrio3373TSwpVMHvCo`8|9r80&jb&T2RFod1f-IA3^#B16rceb
zGiH33!Q(NL@tw(<nUBJ!X5@V@jAc#kS+-XqIb_%T=Rc2ji`ReKJm2>3m&=}$COC>Y
znmqWl_cve7Tj~0W7ZclU4m_>2FyC76=}+s;)-vmpth`d)$0l+7h*NxW$u4c{Jt5A+
zyHgXoJHG22VDVsKlr&0Y+$VWVK;r!;iHked*qZORu>N{-_jdb=|Lgp1tKOf>l}_qr
zD0uVY;{HFU_y4)rUw`Rs*=L*dXBu5s&X%8_XAA0~^2yoksQq2$lC%A`RXcZ+!~HMT
z4g2<A+L@hYeE*w4f5(Tc`$|japV5_Tx6+LZp5@iQ@RR*DmsP&A&3b!!a&B4ty!*b+
z-1qXzl`G43%N{SBq;l_f+TL~hOV34SThBfB@NoP4{r~?xym;~B$HLyFx>I+mYjNy)
zn`?Jqt+VR>rqz3sO-%Fi^4|UU_}Kp6$A15LHkS7G>s!`Hc`wb}Rr~v!b30${yW;t~
zzu&9gDifDlu#S19R+sq!26Hy=%*U)}RCo?`hzM+*we{k}#O4F8iHl|>KeugCVBlop
zHWFYo+;PZz-gAZ{@|`v_tl6_=ez~x?&N)3Z@`!Si;jw1NkaWqkGzP%{Hua9j7G2Cr
z0`CPHIIc9atzS4Zk;&~roZ98w8Mk6f)vxRnt`_K#`g&-ya036r#xUhRohJPppLreC
zmA5sR&K!DE6US}%GOhS?xAt5WeWsJLQk;hwWR*D;m^W;T@Sg(i6Kw?diGKdz(7Po(
zQA}O0>rj+5%fTyGuH66s_x}G!;`?XJ-037{)6AJWOU3%zyPv17*Zp7UF4vp<!eU1B
zse6{S4}ZMm=6<_n_HKn9iBi7>sT&$OIv8pspDZw7$lPV~^_Ii^jIXMHeIyuKN-i;E
zI0!h{D9^O$3x3Z$MZxIgr!8M^?prH7e@FHG<bJt3+w<2nDpdZvmA$_9dHuh`<@<l%
zeXQ<xv~W%J#ig6mHveqZuXz~%cXj>O4~O}qvv=Rko3-p~l`W66;Kd(n>+Q<ZThf)7
z!nISqobN>2tk!xR|K(Zt)XTj_@uGsuOuQCftaviHU+kXYiC}-*(l0MA#_ldt^%QDL
z3=?q_kT~-5=g+FWd24N}zP#wx-&b+I_Iq!C|LeX90>9Sug_}BVsxn~qpJ^@a8mPf<
zVQ*jm<HN)2an-r0sjPyB4X&K7PXmLZqM+IxQ|ni5n#S;8+w=p{56U_2Rc{g#=#=5M
zp5ENM_`(%|sNO1xh}W%aQ<aod9Nam06jrombLd{wHUIWYVo{NFW1OmsVB+~RI&T;x
zI+uj!#oQEQ^LJr7bWgd>Y?Gse(z<JlMV`Add|Y+TDS_$T$&@_l)z{{~Tgx+fg8{cl
zK*g~G3mh`e7Hq!O)2v~@YAyJs$%CWekj}l0<%&%mBKItpe>M>?Da;Wp4(}*lm%iAa
z<pKNE>1+}Y{EjzFkxXc~&D=ZTvkiaKg1dS9KOU2=|7>3W`C4@T(XAS1jTt_iYkUyC
z|6gx@-S6AhWqG0vKT|F0Gk<-!_&9&Q)nT)BrqK)vPUkAyu0G9Xa9|KgP5I(4D0(VJ
zJv934Z5}~MlQZ+UMR#&EwQniNX*#js<fo^;!jI$s-dS$9vHtkq-^Z02{I2`XxBtDp
z{&)SqyYc_!ySuwN7F;`;wXx>GfkyTDHJ|SPnO(m*`FNiK$0d`iUG`tAWCcT~1XlX2
ziSOO78M8U$d2avrYa+e-u0BbK6kqv#e$-8^><?=cH%@BsI{T#Z-vMTRfs1$U+_||q
z{pt-3p2KCkWmy~rSh5^t+a5kWJ-uJXvgq5Jn<r16bX)vzuQ;2_l|NhirCwSdVDJ7K
zo?6dvEo*Dm)>%SLRynucmMy+`VdKKef<O_)r0uuYvZa^q4Sxsf4J21MC?|yEGrX9S
zTzD+%umI~ZA%Teu#@5{vA2VqreBn@eAn9?F(dg=)a)VcP5+SD7uQ+a-KJ|>wyqk>`
zTX#8s=y@{J^zK!O=9o<ejsg<Q9VhmkY5DY^G%9G<L&XVGv^_a|6ckR#8(uehJ}13X
zSvVq7LPj>rb)o3{hCLIm&X#qkydPY4^7kg8r3{hW8q+xD1Q+Y^CphXXa&!@5^!1WU
zXkdI70Iml#)_5lTJTdF^iX6q$M!X4ewO_Bkulv5+y<bjO=K3qfW|23CHLAW`^soK8
zI)3l#b-TYX+Lczmn|}V^tF6lFO)J8rrM$V^UFPlmY$dwMfvt6BZR%{#0}2Oz=xz4j
zdZ&5bl|?-pIUnx|TYGBhi$#miE<Wr0{ay8kdw;*b%adq$%D4aLC-3ur-W>n`f&YKO
z$4e%P5#INzzaGE2v-r9B{-0;<e>B_wIFoL-I8FH6&al;~Yp=flBK>#W%Y*m#?a$Nq
zT_E}F?@RB{TR+=3fB%<ea%{!UelfoFI^kD;rI(a^S-1OL)uT@Jw6rundAppox?N6}
zU#oDu`nv1igpOs)mxK1HzP-Ku{f&)>B_6kKJ$9|?{Pq3?X1NXb*|L9}?Xn5I=092B
zutCT_KYPx@1{_TqT~}UTx163D>B_h2z^mq6H`ss7Xy}-;p~CQ3M3a*KjuW{F%*=ZW
zU3Y$$>(DV=z4ldBraiyW4*k1a9{v{#OV8;Dbez);kZ52$^XprAOhsWw)HC)Or$0Tp
zr2XfzddI_{FRQH&-o7^V?|JKqn|@7FJaRzH^Lq9B$gG93a#@ktbIu#;d^Tb96hGC`
zaX}=K@d4BO@M+d>%a&`rI_5k{<XFK^S)~-0#5a=1?yd_4MXwzTG<rMPR!2N4^F6vs
z$m7y>4Rwcm#@y@IY*ANJTNktAOLzRAM=O`l`*hD-s`u&BZM@73xAs)N-v2-T|D%1s
z`Nez$56$epd3wG4zJf}tj#m=LER!ShMIxWwFg8|Tb!lQa^hQ=m$RHtA=k$g1rx!FR
za2D(DZQ(KWJ}5VbouN6S$w1)~&#?rD8Bgz4=~jGsS3SSt%f7$SQpt=P+E0t0xB2{L
z|DWmqe@&l$Zf>sWYtKt-ug~t7@%-nrv$OaAJe&XTX#Ag}=jK{7F3{lm`XglG(NCX@
zl+0%PzF6F-CHIz(<K^lvs=n76wEFfQUA{Eubk@r5c><j?r$$_~dRjRz`}gaIk=gbi
zJN?g`Ju7Qj#KK#$`>xyKiK?D%S8~iir!nn`Td(f<>DlajyKgs=qqpUBK9;!o{ma$x
z-8a6t-`aosuEhbZbtg|BDZCT^@mBTyw`H4kvbRQg{S<Xwcxk5sN7mL^eD<!UMS0(6
z@)q2_@I4|$gyG5SKiTj7oyr~@z24)P%)pf<)~LXct$XuARYMbp21nB!(KT$}X07i|
zy*KB3T!?p+)MSl&+q2qO8W|W`tBly(k`$&~N|tD0ke$MR@AlmnwGIi64hzeR=TwV-
zvELnT-sh3hsUs-q!nWao;Dn3Hi!1ourgPn>PGn1Sbm3<@;BbP2BSI}w`70YUb3>xj
zhbpG`ZI`T9xWA2AJe@Uv);-P3TfeBaNhnBWH*j$5{ciU*t;zAmn(K=-xH={r?5<$C
zxWspDzh=kRs<}03JVs25ZwRb$xc0GBTH-ac_p~1EJr*fXzQ5JDZ2w9k{PK-(|K&Ly
zagP<IuicvEy<$$(`@`Qa#9YdbW_XarZ+`y@GtY;Ohrn~Qhul|fGGf}Tb9HGle@}`n
zvvF{O;7Q~D+!-@=8vUPJ|L@-ZKaXZ|i!YzS7{Qd>z39fC<mU&S`|BQh$Ird7V<M+f
z<MX(xx9s*mE0c3JD+}_-I7~`mJK2`_{toxrngeGX6Q=OLI-AMRuzuFWnAlwh6e<K=
zzGUqEF2G{e$I8$cKJ6KkUR%<x{O`xs+m-!S{+_q#!RrLQ^D)2X*Z-dW|LgvL*H2Gh
zuE`U2iRVJeq;>jt8kyPu-QEAY{QjS3=HK7l^>*33dGp#ZZ60Ta3t2a}M)@u`o!Wfn
z*O`v{+dkSKVcd`wpUt86BHClmRpCje7B1d2=_3Es%D_|0w0ak+nKuZyUc9%rdb*g{
z_cym{|J>MkAxb20{xbuf(D>kdvv8}q!s>o8`)Y1lrmy+x8p&pQ+9<X17w6VZta(Lp
zm74`mzyHPaKFmGC{I=co-*q?pFMU^6TA}C^SYjp15WuXtR@L3*ud~wWO=Y{+uIzs8
zJ?ZYT>aWLh_tahqxTwd$aH6F2rNgmL+^fEbFeH9_qqBg0OO?NI8{?ejs^S%4`8p|@
zN=@R^#n~Eop1I1gGcNa(X>0uIH-qUlr%i_|a|T!Z6iM@c%MQo6tzq&L5<8M5%=AQ%
zWy$=CT`#2{wO?X?{c=P3+x4aag)!%oTlbz8yf|aQJ&8?@XBT~S6}o<tTdY!wW5M@{
z3lH2lRG8qbbo=d+@U-X09&LPBW$bx7bJq22)3h?DreoYw>wYE#FtGL*G&2Og%w2Xi
zI(Fge<%ef|S+bsKi<je?Z>K`juikguv@WvbcZ}Vg9<3zq^N|xbTPPK{UX#g_GT{lR
zcz+|^RqkrXl^4@F8d+M7Ha9#!l-kLAwy6A~v=8Gej%{+{t?Hd!XR1GFBs6gFO6nZB
z8*)EPYw<s6apeUu=`vk`lVt+3cz75Z1rpdIzKDIx`TxzcA@yzVMsvTaFTPuqG(JRM
zs%PdYNCyq27#z@bk!UkBSoh&vwTi<gh7gff)5eWzr~mH%^GMv^_Uo0+`|JE%7%Y5u
z@m$E@vn_cs@&E7oU;b+!7Ai*M9gbeEH+P@K(~D)r)6*&+PVjAT^x#n9c*MvsL-2qA
zgWxyYpTC&;vwmGPuhmSfVyh8xDHLGo)AZf#dTZMx{-e+S{oP&n|GV6->g&%AEMI$L
zj^)>L_J1DVum3OqKk?ZmSEFgH2RS(^KJeT9crYJy$;o5s`!_bFo<4P|Yin6X#*6aU
zpPzR3ZHid={laROWtU$po%%Fttyp`YMBC)aljr|=q8>hN+POKF%JZ)NaK0%cdOam_
z+On53jnkh!dp7IrGKCDs^0V&In~z&NyfZnl+sXLumi66>PHgfy8oa7caghSYnyuGv
z8Sp%|2ups?$hKlb+RJ@LoRPw2)8f9myfQj;MsCR&8AAphtsNR?-(6kQA=whp&|qs&
zQTAZZ_nn^^6q=Uyv2{Fb{$!HGa$t4HMuvb_0b1Tu`bDPj?GBYTcNDq0=X;}JRF8s+
zi%a(5sVcfE{cARwow-z#nYr|`=N@5B7ncqlp+<!%DPEE{HXAT<ZsPd3o72pzkH6JH
zH**3bi)1Uy&OZx6I0Y4&UmWRVIQ4$d@yjACjslHUdmUXS^3GVu;4!(ce5K%aBm2jO
z-$aa9=QX&p*c8g`G+EN5dPexg8Xc9FY|>5sT~QevI!udx$hjANo|3q}e*I0Kt2<xX
zZ20c=v|w#o`_nIhVfBi&*I)F`b}bJvTJ=Nl^MA>NhJGcsC1)6z?>GreG*FOIa!}gj
z(W9VqfbDGd`u*Sb*8h8cc>UgYoA+GI5ICB-+xSk_+r7W%>DPVq-v9mP@mq2N2~~Md
ze~QP~J%1v}=(S14H=##Rs5xlXv6Tns{mPr9sPw*QM^&u1_?N1B;Wg`+1Q|qJ18>b$
zVBXM?{{Dcd;lqHC+xrT?>|?I}{{Eh+r4TDmWcADE_CH_#|Fipl-IEW2CK9&|v}4X0
znAq&ee*Ufg@B05==l^>-|J|*vr!BW{+Vp7edeF4-+Ub*PM6USA3xAodp?!Oi(bB5D
z>mId&7F-^C+;3m^YHs<txz^KDXRexg<@@qUf2-g7&$qKRHr`zM`I$lAB8^otS!{cM
z7P55n`iQhl>$ztZaA1<)d6tX`0S-3I+*|@N%9BeBa_pWh$kx3TpRX97eO-W~;(0?W
zV-o|Ti-PB7oAPspix((5TwD<#VACN`rOzP1!q~WAil$2Kw)pqPNh%L6ePWjQI&)7|
zmQJe4ZY`!s{q4IqsJ%AJx>&G!<&oNVGQkPCCmsoUGT1h=n;bLv;I-S>e0xLnwoUGu
z7bJ`lW^jL8G?jrR!uY5R6X(~Q&mJfBUKAz<3FR^b1SYIrs?NDXCALBPD%(qO*ZLC*
z3@2C)Tt9Cbz4^%nX&1Hz0Vc6$O&4!fWqi-Sf6aErtcn?i30y3_3R7<SJW_dijd_hL
zW9My~J6Wv)iYhTI8Jw~c#0955Wl&nb>^QH%0furlNb=C)n81E9i>Z-wj(EI9c5Z{(
z=}kv>KCS;D|NpPJ|Nl3io_eSFEZ;2DF3A1<-rnEY@xPDB*L}V%$G{VldAL}A-=}N0
z)AfDgHx?S7?b>m1l7iRG&+OkjzTIOFWNBzEf75-YnrTg|TC|^;U*4}bhuQ7FUZ{P%
z_5zd2+o|(yzaIYo)BfN2!|V4e@+2l~QaK-+n7bqW`#bxelk@9A1<BUz@OjT&16TO2
z5ldKSz;QTF{Mzl0*B<X`c#^s7$?4kfcekgWo~F??O?>(x0~P12r`bJ%X={`AZP-xo
z^pxoH7!FnC%WuoJ&N?=0-qC}%Zp`hwwE4P3>Mt+j({WO<OV3~8u@JrZf}h>Ik<m+`
znc<LW(R2ro2@;+Rk{u0=#mw^p0wQM2oLHs2>h{}Zkzp3+k4;i_WN~hoWxT3va}JN$
z?B1%yZ5<puZzi(Tzdo+P_+3!9r-`M<wzTKHa16(UsvT=ynXdc)%X-R-!n3C(9cS?x
z8(mQmNbb>Q5n#DcdE(~H9ga<{r#X2dXQ$qLI#c_YfYVcb6%~a?8-3QO9oxjxcrDw7
zanfsp7^jAq%qa`}C%7{0oujsO_QhAXY~7ZHOEWrD&Yb<gQNYlD)1D7JFCsfK4j242
z=9k}<eg5ADGo1`pP7cP17DmY%?rly^PA~NI-`?E1Gjdg#K<&Eh<XaL=4GGs&qreG4
z3X%|<6e7b@JTgvHTu)7Nc2L_<^6}4QfBV0O<!jzQYAt3+=sjuM;jvfD{>usF_#dC9
zZ_AzU!!YgEhg;F<_iPHY(h^laOR({lNlqwyb98e9gVYMKtg1M<d%rI&e490WYpKGE
zvymsFwl<q~cucW=ZhPHHN-nD=>Hj?E?{YV`o37zpGWX5b>G8jw*Z(-TT7Q3#h=Al7
zBXx#Afp<4Izt@icc?z^2kC~m1!C{h$qku$m*P@8c%f2kU+Ag=CDNJ@9i&2zbd&eY`
zkN1QVB-$489y@mY`0?Y>Ys1o)>MAvEjhyz<U%;?0**9s{+__g7tbH%LEx!1+ti8QG
z|GOq%f%Jm5Yg!9~>Q|gPu;Nk1muE}f&z06##TL=ZB^+?CIIXQ*?B)W6g;IODHY78&
ztSRt2C72;-+U?0BWvIle*tKEfGSe#=CRxV>8m`};&OGV<{)n`%F%0)jbJ7%;k{Zfu
z_uidbytlYU{7ZI%GV@o9RYwCS2{SZo%xJdx?s4n}2g{7s9VfWAZ@DyYc60%20>iNu
zH?9Q3LoE*uY+fecsd>|sCG=rr*d$lsl&VwrS6}M;b>t9-O7`xbRgd}dgDzh&-lm>C
zv4h9@gB?f4^<@+1&UU+&e*7gn69W^QqGac5MvsS|bvSi6pN9rAI5If#^Ef;!Z(Amv
z(7<?)->&QXUq-ea$rs|YS~|8wcrM@j<CeGnzxV&2{{Q@~b315R7qi3Siysc{|NlGw
z|Euf!{&hC<i!w+azMa0j?&~4#%iY?t{DH+L878?g#c`AJRuyi2mwHyJ^y$3c_ZD_)
zWzOo-ck*`I^TS4=;>*F`^M71%j#iTrWU%;gws`-q_x0b+&)a^#^CyYD+HMoWhUDXY
zpyQkVKdb-wnO(l-LR9tBQ=*{}8F4*^%kJMQZs3>yEBZ)#d8kVWr}KZ4s+^phqM}V#
zvof!K^LiOjyZ`pvbLY=LuZ){&{C@o(+XKf1rY3LaWA-h(JbPZ<I-Ujh7O;J9WL(F#
zUUyf>J&$W$A_7O4q6Jh~Se%bVac9gp$gL9Db}T62^d^0!UlA@sf@%Vc{TgSZWLzh1
ztUb*<i!o-}i%R?8B(|i0*nYXP`Q6fC>We1HGb!l(ubCe1_Dgo|qVKaSk1w1lA-j3$
z)E?JO9@pG9rk}J)5SX#xn%|_CH+QxkUFvQ8Ig{-eTLyE2qo5KeZ-jud&x5LcM_$eJ
zxxR0z$NAK6QW{T<{{Fr6pKG<8hWYUmA(B1|Ie90UvRQn;JH^JG!S(j*`h9bMmYsUL
zEnk1vw@oUn>a3yy%HHz|udz;V6$_L&%3V>qI#J_kO!JqejBGnL8wQ->0W}^UMx-mA
zTF8>P!=(J_)$4ITZ~D)#`a3l|QlX2fG%)pG?Qgz654ZpSvGM$$xV@6wSkuIxUR6FG
zU;BCO(sjm(+N-u2v1d5zu3YhNR>ZX(7f;Pzw6!C#RM$gYjAQjtj_~D%clLW7;ZZuk
z*Q=;^;rUvN8=G@KJ&3L5e<LTiu94BA_}Llz|CjCSzVH5TQd%j-AfZrvE^2e??LPhb
zuiy9oRj=Pu{@*USM@`Q)u%+Ym-}uA?#%k+;%#;QBY%9Ci1RWa}Y1BMyQn<0B@bR~|
zx6_xWFI&D`yR3gEr$cPibMRV{O*)sYj-T6U(RZC=0UOKN;~Y}IzMV|e`n2@X;;-G=
zFZP?BEMczU34Hn^BvUOY>TjH~idteb(}5^nNdd;54hw#6*@(Py8Rki@E^Y~eE`|F9
zJ~G{ta9MJKt=Da_T>HYnLe}P4r#U(n+)-gvYG69z(4@l9bfn?eyomuFfonrotWsaI
zGU9zL|D9wmJFbYy@z?raEqb?qj%S38%fh?6QZKh2)k|F$#p7V4^I{J>gGpG!txT)^
zcPc;suwHwscDA~d+nUduKkh7I6k%4HbzX(F*>q{>-_qHe9(`S~enI1xNmCqt8O>Z*
zcQroqmCS+N6{przUdr6HPA^%4N#V;r2mUk5#1`F>5M*d#PiQ`*aqel{1QwP#8~B-<
z6B<f4w+Sqrb578szVQ_!o5X{2M;<82Cp1K}GA5}AyJbz)Qc|e-cjspOpFb~`*MAZg
z+`zVGYvwGao1LAV|6kYts{eOya{QbdHWRteocpX_|M$^rcYhuAxTan1uN%d}tY)&C
zTx$`GT<o~%3uD!)nc4FG_MDra&39pP?$zk&WsH|NXU?<z-Tv(N|7@e9O*t6E#3#-F
z|7PX<KTnQt-n`k7p)keNz9#AMGJo4|GwXln|9>m&|0ix*YIk?{u^GM6=6t-op;xE>
zE;r%0p3nU&G~{n$@vLPG3s~kGvUMIi1}fhdYXk}Q{)=(W`&*osx9)D9y62+Vx!Z3~
zU3g|ev3=f(47(SXU%ZUCB=qL*#aq7vKJb3{cp%DLa&6q5^<f&*#akL>H!#1y$<1AH
zz$qawGqrH(Z1FxpNr8hL3`$kgyUSH_IGDT>6S4{=+C3OrJc1^1yq_&OWzs}Pwhtam
z$ELIQSN&nSrpzUA?7QL3e;IfE?z20m2xK+hwJ;Q7WotZWT{drK_aXyF50}U=5hlmA
znK>IKrKq2qH$O7&q`;nobC!Pa+rc0xlHTHZ!$>;uu!B-t{;umRo(HC_ci_49ICQ<-
z>GQ0fc{ft88w4;rbThoEWjxWi^uQ$3rUwmsJKQxLxCGrkD)hYRWexs!#MqeCO<<Ca
zs)++zhX79!gVTZLrE3`3c6^59e|82_e?|t=;0xc6MZK4);Byvs4ZM^azpvuq%=kZl
zs_*|j_vPv7iLGZG85kUHm%aP7_q^@LUi)9)o?JV*l!dEd@%uSHuX3-Sx6h(E(3s~{
z#-piuk7n{n>ADAqv~Im-eehmaVC1e1De2eFs<$wl*3oiw5==`Fbe7u4y?c+GyLNYR
z(30fE&hu?5&a3m=Zb*-wpcY{9eRjP4=lFm7|Gz&yT|ZT>?bSsu_2ia?4=1|YeSKN~
z{r&&H&iwXg6wFMf`P3V%H(PK)nKdC+?(Exl+xxk%h%CFbIfQRb)}!u#X(sQ=tQId`
zTqqNry;-OG)1I)^md~e@U6e6@|M$(CHC{O`ORi?=>g#_G&d(O(|1IhKqR>1mAw<@v
zbV7@2^cOkV#P#Ma_om9dl5dw+Sao*YdegGA@7HU3gzR1Ug6FBxsi#k0dz|^QXy3h$
zYyK~<D@r+A`0Bum^a^b|znwO|zClapZM`OOc-Ni1ucRKYN_ure_~HxAi0qr5|2M9+
zJm+<OY5l8rs~*4c-&d`_cf&H}YjdW&dr|c^Z0`G6j{_ICXXpK&_4h{oje^pD3H870
z=e%!u{il}GVSd<OdGC`~1sXo@`=Hh_!&2PrD}zkQ=0~5Vva&Dx;BhU*RnBee9n16k
zBKvD^ots?ZY%C|6b(Kk4(BizJ^#wj57bZa`hn<ztGY@qy_{iX)R?gF*^WgMm2Zs+&
zlQ<?laPLXmsdtU%^gZcBF@`wjZHK<HZz#60GTM^-d)vju%l-Xz4U*U9tvP6N{sKz^
z5BIZH=`0iF{_tsOeS3<l&hNV$y*+;uuR}I-*9_TLJxsm{N<3>gMCZ*s9lglVO_H}(
z#n3vr=bqWMWq&vnrTAA*mv^dcel`6|)>*aCb5oYpyuRS?_I>{DVoL^z?lb4Q85lM<
z2oz@~Ecsrod-$Bj3hmN22c=lfd}8V~WwTija!KOgt0V`>54V_k3e+J3A?ys#=bYj#
z5sKdzZrpmHivQY#;&(6S|NZj*-?M!GJzvWnIx-w$u%5fb(B|7u{hE*Vf8zf=ewI7A
z>B6}OYmLS0KHr)>U3^-x;XQAWn|lfzuDP|ONV>4N2Ha~lUubvOb-xBn3y;#7CI*i-
zkL~~o78il(jo#9VwT}+WYqu}_zRuT?rGaCA<-?u(f4=^I|KZ{F;ybx@RU-44l26|I
z|6rm0uW#GsDn2AU<2vuU`KHKu*T9Sfv9^V5nU(XhL+lT{b*lG>KRWXa&ys`2f`I}o
zjsh)-H!@62KD_&{`{jk`^O$L=uZ$M&h)dyqy`%qCZ}GZGC12mK=n7vgA69c@_q>Gv
z^REl1uCbq#?RNBf$m9LT%l565zjxrvE~T}<n12`9e#>fGl(jTl&i`wxX?@)1-+wvt
zt~Q3ozWMz_d}-7w{V(Nrerr_4PISDm{OjxYM`jnXzrUYc|0AS!o&3FoJ7IH_zgVX4
zef@3y&sNhrmrZY{d_CW9XwAIZv}e6g>7)ksvo}TGb0sq?zi{O;G+V{(c&Z?^Ftsdk
z;>isYCM1gSGaX=5v}RwYFvU$K_wE)=E@lCRv;@Zob>Tu6Q&!D>$*9PD<FUUW%gQg+
zx|<idFnAwq{c-j0p6&m?3gypek+8oK{={@X$11<J1@(KM$LhN|t#CImGuo3_vLcj!
z_qpcN6Av<NJbm&=pvb}<D(7eJ<$S!^xcIo={M#FoZ`)Rz^&JajSokD1>3I!XlTy-z
z298!&242y)s$!YF;y<M)Z<9Oa^rGbi2h#%=2bN#!++~G$7&OeM=CGxDiDt_;Uwbab
z%;69b#iz)mz)*Gert>7D$2D6giL6`pekx1qeJ%Dsd{>`HB{VSRi8Xs<HZa;TSUg{(
zp|r^6ysHWalaiLqY=tw$)1Th#I^VzN+a>?HPmj&-Rp{y;V36SE+Yq*1w(7-0_5EM2
zw%h$IXl!5z?mp?=e!uEx?_zGx#zbZPfH~!SYdF{Py4<KfuF&wLwJ_F^<<05VcRP;-
z=zGr>oESOdDkqa*U_{Hz1KsB@t8h*<_wTW(c)zc@yua6lf#GuS^ZI{Z{Of*QUjFHj
zpi|6xU43<t6APXB>wf$H`*HGoePPjOwRnq<uJe{_xVU6}TwS=^?YI2%r4Rb0mc$&q
ztYz8wT~2V#R*eO7uV$F66Ab@;D9W@YOn1h)2JPebr5D&Uyi?a(*dMurG4;c}qk`{c
zuPbxcN&ob*|6Cdz9sPgnzqFMtu3GjxpY8k}Y<B(0&IDQava@M#p6mbG9`jbVdh5Ea
z5wmAa4ErzX5^zr9fWj;BFK2mwt+@YrMbdU{qZfOh&sekY!!?1L?5JmK&%&neT7JJ_
zWqf4w>s2Rsi@x8JzxM1a2j{mN&Iz%83oco$mHNYy(V;WBl;JLq-uZL!v*xi1SM;Ya
zYkGZG`Xo1pr6X*C7|ZVM`Ppt0U3Is-sV+0(==iWNL}!_};q-;uHZUkoTf)Pn(6LIo
z>WG<fR;_B?_3(g579%EsnicC6nzHTOnI?Q+7k2rd(EBEZIWqD$Hy7Vt=^d_j?o9W2
zCE*V7_uQKTC631|$-Kl^_;tlJr{_0je*XGw^||}y_vfuu7L?kM(98IGPO`zF1|_}I
zd%tH)%xQ4YSQL6mP-05oW#%2fBv>6waum4~Urpu+(~tXGw{l8l{mJB(EScDMfh;Z(
ztXt*G7#bd4N?H-Fy=p$&s%?raOII!1WmR|kRRS}Q!2x%9@FE&J28rZfx}ppRs?X~*
zvNFv6`Dp6&xWD%QKGoNMo4)@G>w;VV44<5t|L=<O{XgI4+kAR?zJZa^!j@NmZ{?rf
z$II8RQ4zS78>0O2+(w3prX4T#TIeV6C{=y@W^1$D`>7!lL*=uq#18LjXU7K@qy$O=
z-rU^xGnoCoZN>F@yrv2b-OrcT|JYmq?`40Tg}t@3L_*usr!E3!`S*T(UH|`J`2J5@
zH*Pe19wQ;)Hor_*Nt&f`Ynb=93=wgb#$z9tYg{%&X&;ghJt`m=aFVGdF{9^YfA2!`
zRa@nP=RLny{Wtvm-mTw`l__SYh|fB?sZBp1W6OTKsJi}4FLT${FaC3XUw&QZ%~W{y
z;C+jv{f^(f>~~(!Pl%ixx1=|0qG@);%&)zB=55|l`1p(Y=~?pM-lzI*4nMxRO~`5I
zw(@6EVlQVMFZ0cN8hd-Q)GN`K!B181{`j)~rq|VV*Pn;RzR$R>qIa-i-^=C~L5&j@
z?3=dm!>ft_TSg`Z2|+HV5BE9~1Qc6mwjXh}emL{!)0?fSw`YB5HC9v5U!_)hu9dOP
zWs)`brrguZ!WO47%KQ!rWmJ`J?s&gkV_OB2TEf&%3o2ZK;=`QGX7MgP#lDoM>f*m@
zMfXz{u{&~F_&<s+nWLbv@>w%yz^`>@O;_!G9qV<kT0|o2&^p=M-{;JaiivqsGTFd@
zVM>#DVaq~=O$(S0XB;~AVd>7PkFF*^x;g3Q?o?-E9;voN94>Rx-8QhX_NY2#pX6p1
zV60|n`ZP;tzQSw1Wj3a7^TJfQ10tChPB)Jdw0d9cvYOS9TY-7{)?G_i9dBLQTJZAR
z=4~%#^ohI^S62L9F_Tf*_y9w>9e8A@hJoX-!TDm}oOK*hE?&lrhrFlj{e6>eU;S$3
z@@MOH+}IY>lpOxi_VM`qiccr?>r!u@^K^N^VDtHq^!`6*S3lP~A9yE4nzPkWW9Mf!
zUIv5B#eNPvtPLmns)g+sc6_vHx)R(rvy(?sIZDFGhDkyt@%`r`9k+LuK33+xyFb<W
zG=sw7kBi&u|NMO~Z~4cHQGwY=;6Pii^uAwD*Vp{}JpcaQY;j|0wsYL!PtLk2>+ku#
zPlHQo71Mj0^X!Eu-nPcXeqAPHz2?36+LcSrM5%VXFc)NKSmm)z$jUtI)SASUkOqO{
z8;kwsuKK-tXSmOWSs}|_r_PEoX5?BY|2=H^9r@Ufj%6#>+|>Ug_R)CXbD`wFGA{q?
zRxev2lKxjuUDP+YmZO&C;H=y*-W_e$(f)}cZ*T5*bkXT@IvsWRYT3o93w{1yxTF{M
zZ{7Z1mv|Sb_<fz66|&}|Q&s;GxBVwpG~H4RJ-fo}iMhh*U$%Lx4zKPDt19#OJ2PfO
zU(2iaQW3|mtXWun@4m<H*mi}r(^S{ly^-AaLOWDawn>16qm9)j%HYDg1FbW6YIkdU
zzRT9JT+GU75@%x}F0}AF2Tz>atX|#8($S^LOgr>+mxdP{-~V0NU4TJNZ^B$ghC;VJ
zg4_&^g337zHIkpW8=b#7EnD^S&%5=hOAFK({uRUv2HfZNcwd~taNb;<S!L0p28D*)
z+2(KVY<qfTW$@dhmI|DQ)fSy?jGbt_nNwN&0Yg!K?7ZK5K3`jTda?8Ko0qrsF1C@1
z;*aAoVB_Ox>|ioFHtBqD3jcu<JuNCahu8#MD&8)f$Pld{C?@768{X04q_HkN^ZxhT
z2zBQ=a{&%Ufd!YdX6*Hy=$PUXp*t<^77ye76^yJ4_DB8s%9F<?k<ehx1}zaoc1ma&
zY9!kWM|3|w7yEB{{jcTne?C-aPP*b$V7t_3_0>Pmw*UKKJioT)`MkSqip&+yb{e<)
z&#@}ayvBG{dhL=2Ycv?nX6<-1)3JlYMERGk@8g$Qm*bsWHnE)w)#*L2_`b~2U;Vgy
zS<c-p#g~trXnIoc>&or(|K7YzZomKFkn1&z=e&-(>+CB&EYz?6x%&Iv+IX3O-E+HD
zoz{k*Jmlvr`ewCcq^lb99k(@}cN*gQ-2RtenXz+KK@97St72MB%RUKzycgbFZ+p#H
zp}@3Up_Xs`uC4!kAAY^-|I0tiSBY~^d&a}Plhw>`pZI&0o5B3v>0fsi{Zn2uC+~M;
zTiw#0Nvxv9fpf1*9k9xJGfU>+*I7&dN5ySE`>*-^{ha-koA<DXFEHI3!`qX!=Wb5@
z+MBmbzt=T8ullB4>$d;8O^-Bp$F=N^U$=|T`rEbb>AChxbj2!>_3X*<f{$%Z9|}9o
zu*9<3jWc28<oOnrzdpUOxv?T4#Zmu-;}z|#V#i;evWbw8&U$-uYjx5Q7nVr#UQZ8)
zopJ&REt`Jkf12j-X2M*?^cKfCj@upxUhFV`(CPYl7R!;2@O2G>_mnM}R<B$4s`m54
zy<7&I3g1$Un3&>b>M*|AzyBa_exaj)g+7CY5sUS<+?#s}lOCS(G0!~icqGNqW_Qd5
z7Do@Id!k87(vi<EeGcw^#2>%2=;^+{)%<VnZp`)8U7_40$bYYygR>&sg1doX&CR4)
z`qy@QcwRG-<7m*(Sr`6ZYJwoo#0Bj9qJo>VK5`dLzPjwx6y<|PoSZfsf(ji1-BaF1
zzLRzkwW{sh8=kxJ`P9pgQ<qGiV|Rdo`OZqvaz&mGj1J!1*>dh%JG5N9-~O3?{?9A<
z{~zW1Wv#Dq<qEJx#xXc-PUDla`SCWt{`bCixs}H^%sBk=v-keWpHsP~KeuHu<B^e2
z`@nN1wTgqOdx2rpso>yuyk8<k<5X{i9!jhAb$4QG)H=&0$TGu{qbaTSjq&`tAC1-T
zB{LgE3o<_~e*gdS_kS;~!<Q}NWw6d?Y<W1Z`rXe*&+Y$TXl|F<YQ-h6;B>cw(bfZL
znWq|#MJ=6RQtLTYd{w8!gR;clI}5l>y|3|{US%cqaCKYi-sa3u=jE#!@6NX<_Fa=G
zqqWXmc)_X&@n0`G|1nhf{ySH7Cuf)Nmq50^zxOU{c~UE2es$~qw%%PEi_&Xf#Cawx
zNVkgCOwtlO`>QQ>bL!q-*R)N4`G2l@yRGfYi}$Tv$yW^z+lJKizT3WE@XHL-@OM>@
zH_xBHO2zWm-z=Lw$KzfsZ_&ERr}Sz^=sW&jGrqk3nq2ziZ~ddIY*(jdWu83|DZFEy
zV(Pl-X<rS`1V%j8TzquKDQyu622Zd5$&8Ff4{F{WVKd#ZV*^wAxj2h|-%ifdE)HB9
z#}Js{V)BvADVawh-F2~HNy7Pazu)atR}f&EH1Dvt|Ar6$qUN@6-e}r>fJM%ONzB2K
zr9jewk*C8!grPyOy@QX3QNf^b&+FH@XChX<)4Qs!q}1TTb|GZ`fvZk?zFx?dVtuXn
z=7v$_`@8J7x{K5Gd>T);aQ3POCoi>QWo$O!acr3xHtE|*<KSZB&6|t6jX!hGuX(a?
z<HLd#oGAySI2br}#Fcg`a96Bf`deV40MEk9)>9SM>~c3|kWgS^40)X)An@T=<^7%0
z=dN!4{H#K9;;GLbsRnEUD@rCj+hjSBF+$Q@Bsxmu`^khQG5N{+PF)M%{QE)L>Ph?t
z2N?D{L(`{%=cK5$%UU;@cAkvVK4ky%WB<SB_5W`l&foKn`+8xkYlpJH5_h}LKf?Ea
zZ0E24_3>GTHtUXpoxi^r@3*V{cIoKNZQDx^D0mi0vm9Gc>?*)gIjd1XaG@f@$9)be
zF|iel7o58H?mxZU`aqO)y{5~a?|ZYh9ys9_lXs$*mskGRk-gR1@)a7D&Wb-@_W$Gi
z|HrN0&*5Os-Y_lY<ckXh>b`O{9~Q2!eVbkV?M-Av3|oVnve&Lj&ntELIyLzgA1a)d
znkCuYaqqW@FZ<Q$c2*Piz4B&h3weHI&5_73k;rLJ*L^rN^#W)0H$zd)VAq{f7d<>y
z-D2m)COBE;<#Smrt<6a(A)7znbN*<`X<a!l{{8IiLur3K14XX$EWgjLS$sD2$=CG8
zr3YWU@>`v;Ki+&{%(1WEuFjX=lGgv%Yi4#=z`Dw;sV|nz-?(bu{rUeE?=Fj(S?po2
zAN=%dNN(NZbypOx#JfgURXS(yDZL+B82mPB`+_ZkUos`MXD#zOvFo0~OZ`hr*cTs3
zy=rmw+t&VTU!L(!G0Hxd6guOY@lJ-T5noiVtYJ$JozUrVfaB4{imj_J91|%`d^xr6
z<;<pz?eBeKe*P;wThjkJ)~SiXNoBQqxa+dLA2VH!IR0c~JrtF_bFN6wT0?Gz>CdO#
zw=^#;tg6dgdRt<y2wQX5+GUK2M#rAAZjjG4{r2|GuI$ei>JBFYQw~%+u$c8cy~N6t
zY;Uc6{iKc~@7mMMYEx|%uyQ#_1oAK{iQHr6P|kW6wEp-^hRBSq7Uy~6^K-+ezF29n
zMb2VfT(-vFDZ8#SIZX>|pQ*23o*)pF%JoZl{elz0iyBmT7}VS!95|=DS=>xl|J?a<
zBS)2<Lk>0$4{bXnl6UMm$>O;7sH@S|9an09-$|MjJ1hF$#@f^Ca%a1@y<Y6R^`n>z
z17Gt5mXp>l{jLpcf{czn0d{>}JH1~<gmeW9Ok`lKc`vq@f9pTHcZNnP*{#RkPqGa$
z3(4QV`lS1f)z4abyc}Y`S_gG!I6aed*Vy63^D-fU<?~17Ty}{E$*qn{Ob*Dhu06=J
z*J|0{cWm+}zFqhDyIR0WeWIwQ@bSXkckAA6y<Yd_ZhghK=k}*|&vmo)yL_cuV}hK`
zmk-<j{i*+ZZ2P~^<Smg5b7nWj@2&Xp=IKuEa4`#+ZxROFlTz74I+$O7);VyGshgca
zAw_qA$19%gyB0NBz1>&!b9R-QS<jp7LIwtJZ*NBd6X~rc=NEWv%enpI19N%){XK<C
z*z_J6=ga^9z5lPh-~P|r(&Mvvs^8a6d(sjA_n3Um&+PsC-ydKU4%jPbynBzrrW5Cu
zos*Up>0@+QZgF+h5B75>*1SJ!>b7>ZBOia!2F7)%le#(_1tOBW7Zu#Ie16El<l3`!
zFH}0k6B|s<A2#4wtl=9x|9O_smMvRMY;0s)1vxs>%j9xT?rU7dUv+Vfp_{{&s6B>m
zzP2GwrY0s!<~#QbbS~l$Jo@?5r=ma+M}dm>;^N}gbI*O%i*r;^IxZ*p*dottcGNfT
zoy`juF0|;HTb||G({awyTg^Av*5-Y!%yCBnjrIuMsamnF+Cc|PQ<Sd<ED%si5;=Zu
zx5?>63RfnZ9!v4eTFZO*LiPOTl@e`^5>@Xfs|3ad9pzQ^TqJt@>X#++#V;pw9}ei<
za&_m*n>ksW#kv12`lNf^WRCAD-_$m<wApLv%Y9voKHOt>47j^#OTrw6?ANT07xK1u
zFS;;~>+l6OMh20}d8v_W!;G(qRmSC;H7OLlDSqDO=C&(;|627&+~T(yT(h=DRf-*B
za1c2zdO6rMb7r2vgpLJqCzKj)#6@15S9*@s@xsfJM;2zsR6K>+7QR~hWeR8kl1`VB
zG+X7o=amcn8>7}<TeCG{hX&X47?I-)2FBLGBCayW_Z4(^cY7|^R<gRM#kWFf?UzvR
zNuf(09X42V{q-@4w9Y024(D%nzQK#Rq{NJ#%>90kJ#fYCH)Xqz&9La3y6OBTpHgSh
z$BV-!6uZhCubd`)Q-kB6wZrUc_GwobL!x^F1teN|#2TI$XdK~?U{bl(bVkhg2v6fu
zoAYZ;{W>^VTk~e>vT_B_pX#1^HG1v;=CI%>)|Gz8zDyDiWDsn;@O0(^K_e%z4v7=o
z2FBHsEO>NutalhZj<+rQcJ}ddaWU&QrZ4v_7(Z2-n{y~TuU&Hc+$IyAg2Nea7gm4I
zlVgfbF-@ADA|S!GIM94roC2TApWTvs7FiuyU=-)W5g1eMSbURFjHB=HgvA<KIV{H}
zScU#%y5SwU>qS-SjrEUbmTKF&NO;A|M5v}#{XdexvGVxKjSQPQIK)>bt10ORRLHvo
zN?hmGUvw>K)^=vTR!$oRm%v(8&)8|Vci2f?{JY!ysdl+|<fmWJ%Xe{WA8QE;nAE)1
zJkn><vkr;&iJUnPi%gb<WtV<_^0i!V?#w8u>fd*s9Jw*A_p$Z%{Cj(oZy)QdvSpZk
z_}Ro+oeNGJ<y2Ty;hwaYf$`fsR<({KZv`gTc~T-G25lZkrr$e|!E4lfdD9dRxs@fk
zX5n8?zl!C)y1DXfbLUAGCBG{HZ2}j&IHp%AstGtMGPo&R%#6N2>*m#|Gs0F%-Zi<G
zF^31V&V~)ti7pqp_T1=BMe5huB_AJOHS3k)b`3mo#&c4|`|Pb!40}L(9sXXg|ND9Q
z{8!to13m8MMXhGd47*c$o;m*aV*7u8!v7_d?0Ly>?#!Xr?)NQ=9$oopEY8KD!NcjS
z<!s~l()aW!<4c+?5{!=gR;*gNe>^87mR?(T)^Wox33mpAX<XAK4@8MvStQUc^C@M8
zm`@+y{rdC&93om`=I#A=YW4lU$Lk{^BNdzOh~CYc-jm6<b>5#tpv7ALj0=nPIC_dF
zJzr^fj3vxv&hyu6ZR#8Ta=%_-*s$8j<=*^b56>N&b@XT5Z~m97cRbmfzy0>xJoc(S
zW2rOY(HdP!phL$?tZTg__s`q8B8B^cu#|@I62=Xm_@ugp0;i?A2CB?`_ww@c^K-42
z+Z_7x<%{+EJ;g6CEnT{FY4*J7$^0!_qjE1V^W9zk{@$+A*B?G?*!t~2BXi|Ee;=Qg
z#1%3vT~aoZN?ng5T*So1FPnrmM%Sx(Pwjua_ju{q(#K`r?x|-o*}inY%Ct5tyR!0T
z_5BPJoxtt4&rUibQT+7O)XnMV=h@fC{a<-EPu{xh&D!nvqT=G>4(n!hhiZxHrkmN=
z?5X|z&3Crh-P-SWU9M!9nC0EEu(VvcX6Dvyo3E_B{+eNdimOE1s(A0qTdbV^##nC`
zJ6a`{b?$DCS*}3I?z=jt864iu*OoiJ@%&|*jzcP*T<@nG3u3zyHT(HaalXSF!d4p=
z@4g!s85wvjr*|&bmv@V_EKhDaQ*Cc!6SMlNmFISiu0<NFKCbkgwJcMj&1#F*?M#LM
z=cK*T%QIKaw|@S};@ds_^*a8(zH==K7u|jvm3=v{=+WB8?fmll3LZ8Ys_{7gt=pgF
z+5Y0jjT`%Ff0w<vu`&1dHjOT`oExCk78^GjGI&gK@my53n317!TIue)QEQjIyM8O+
zR<@Vpv&wZjQr|4uzkjiww`QYbKvAL2yqN;p-O(@3hv_Ppg}L%Hi>hdDHcJRq3syUw
z(Ac)s=z?yGRq2%Jf((Y!j^-`dax3C$@P<!P84f47R}0!I2y9@GVlq17GVds7_C7($
zEOCMB3d|PPp?hk6{5b9I7c*ntYcac3+g%!N9yK#*>#}*eM!G}2+j?7$?S|sx8Oj_H
zYo44)nz&cOL105q>Y<R*&yVaxn;%^LA9St#)y!H3k;qBQz8-1bE|3smF@5{)yLsF1
zWmq0qBfzjRq1wjum(evn`I~#MzkXDE_2oXz1pjH5H_yBJ-}$kZb&71DRuqf0`!w!v
z^BfvH-ru{&-L&-6^VF3JB4SIH++Npe$Ua4sGa+}8XZhQEJGbnp`S$0^ouJ#|om&%S
zSUO@DBC~H=i@iUnAeeN7<=k(k#Ve2cy;?eXSNHVvzBv}AI}2-WFFTuj_~W~i3*TKk
zd2yk|h6v*aHYt{>eY}yYkFL*cU}I7I{GeND%f!b%a~|K3WKr5M?Zga|lL8kfh^h!U
zXRvVcT73&xx;=6IBAG9rcCQOm^b=p?!ks+*eD|cEN@^?)wJTn%{uRBtw{*SG_gAWC
zv_5Et8aF=$E&upzr~o>Is^D%)qjVMfp7J#}{g&Ri{^Cm1YVE`7{`3C)JYWCsu>8M*
zv@|vbhF*s1wv%V0?LJ;O>|gWITiVRuqTwmeJ-gb6Cq8c1KYLDZeaY)&X(KKcUd|4V
zbzI>O(_+70->J5$M!bQiLu8*rg21`WeLHHFSZ=95e~$g#tr+75hUe$zR=-?2y-%)w
zxgfjJg_k8WDvOFfffjR3-}hzd+UV_idU{dWv(GO36abpQHT_c|uX6qO;a{?AH$IQp
zEcM^;_^-5!+oC4lVPv?QXYMI9l{w-3i|wx>-`DPq%Qu_-*VF1=^?}tVPMuO>VQpX)
zm|$QKrfntaI&pcVh^raLC6%2unORj;Rb^#mb#?!qoSZyeKYrfKnSq`jlT^g@<3OiM
zd_Ct~%=yS--t4_b=G9N%J``RxHG6B+<HwJ0Z_AxMXU?1%Gj43jyu2;<wn^8y&wGL*
zGT6fEANkY^cXB)ooqu4f$APQ-j7<t34pq&noTYhRMJZ8WTa<2UlinQb@`s07wZqrx
z=<CPNnKf(Pym_-{8y_>7eb(mu`MK8R-`?EZxzqBgh1M+RO375EkUxjcI6FIccXt~b
z8@u<(2u{@Ka&vP#cI+4^tCqgLcJk!Oi5oB8-CeGIFwjus*5lB!MEm!PV|s!@v?fJG
z#?}3N3feukY15`fd-~(PGBmXH7&?k<`ka1#-rkCji+0&{cL@1t9n0K)d;Pv&S(8%F
z+yAer&kC)-9Lnj=aN%W1*4A5#`|YaE+kQ8R@_k{b>~%_`aPg((b<Fxtxi;&3Zgp-{
z;F$HbtvD|=HMOqp-<zA8r|ZSenmKc4$;(SWKR>^0a`oQ+n#@;cW*T>QcL$2R{C1Uj
z_2riu%uB0t%x0fHeR{fn{J*d3>v<W@rWN1bmJ8Z5zbW<fGT+(9jvp_7drS3<Yha0$
z?9=^T+b+&p#Wy#rMlWW^g}m***=N^Xj=G(3Ma?{4C}7&=@TaFFlqS8Nq{*_k>s&$U
ziw-FtE(L=ww`H{<XLTDGEY~cXBC5%};Jk9mIzOkmXOA$o9%@iv@j2oa!QxsI_=K^8
zky%H{!Am%y;aHjEGVupfmGf=?f0E9hzyHcf*2A+pU$a*0ElEh{k!Y@*_d`ckHp{l)
z`#<(~d$Vh{2udg{zasEeUS&o1@!wTpN4~1v6gZ*KV5(5~=Bl0M7FWjB4IS>uJc5fq
z-m4b=-2SDdrd*+6<(oz8<isOBaaHlVJk{q=^c7C%*D&MCUik5l>$@YLwf1(LabkHh
zk)feyV<Lyc&d-lz9d=Z1Dt&KT?tgxLg;iN%p5<AqCPpQpSvPJp-Rxj~F2k&3G%-Da
ztL=FEq616roz>UfwWYf7)uo@Gr@OUf9gqI_?BvIZ4;Ma6%YOXhM!?>%?xu%nxqAXX
zIY)iolTaYH=lP*@jlPgKEN7JFSPL4?l3cf0>6|SygQCRk>6WXmD0~SlbxJ+E@1OqH
zrRJ+HaGYk_8|E}iO6zNz^5IuD`G0Hj7fh5)Xs`y)L|OA*kGcGB!K2Tndz|-YH!ovQ
zcyx1fdi|fr^8f!lx1T?A=Er-&j)5YMB55<L|8(ltJ?7tEdY-xcg43gie@gycvtI5u
z$I^WJjgJ}J>@pn<FW!i{Mz~xzyZ_!L@2%6E&q=+EPZoKstw=Dxv?lldro!*rd=(up
zAA0lU5&ypLvAwptA{$dees8Y-|L^|?`G1GE<=!sYxXa6T70ds>@A$X#U01%ls($Y>
zxs(R3ziP@;y<E4lNolNGvnFO|k?Q$k*)viHvd^(HNF=wlwVnF1bl<BJ*Mkj0ceYI3
zq1>}bfx~6V?YDY5I&*9)Kb@GUtnNS0ru^NVqut`mmn}1qXxo=vmXhMqyJdZ$Rm3u{
zwQJU7#0AY-rnQ)(DIp^xBPl8A^|iIXzrVMy`0!v~?QgTZI})xFFLlh?u=x2pB@xx&
zRV9kaJR4%xOa6Xu{L~<sGdplrdR1e{O1I2eaTfJ<r#Jol`7?OApKR^tv%$;#=GxcS
zRaNbpz3g>wX_LZ@t=ZxGUA>Pcsdz53bT5>7Uiog$?vj_6{`{#qx-CO4c=5#>d#k_S
z+gts9-}iak;(BlH?k+#v#=A<f=v-=K*iNRGFE!$Y+Y%=}-BtTyDa*NY=RjwT-T!^>
zds<qWNuj5wq|25>1*MD=3Wmnk{CjWr%JrB%zI5qQ_WHfwo?Tp=C=sVWH{e%SnZCY$
z{=GesF57Z$8krca(OT7Ix_Z@y@A+Q!tDD1CF10zo`|i6pZ{C2Kb@Ob0KkC+(vn)!f
zs*0*#p%=b2YVGDrYKwTK%`$E~onN!}V#bRdSCjR+oFdf)Juin$wSN5garO6iwI2?$
ze}8|!{^_ZyX`3zW?Di!dW^*{R*~dTrrG%~H^E+3rTv=cL_w{6T|7)*HMddSvMO_VT
zY--NimYYVMHQ;I7_<!Hpe{uz-0q#t4os5nG0h+pQA5S!C1l&4ev|yQtB$IjrN6#z9
zrtObJZ5Aw8_buBZ+u?J3fJcVu4-uwb57*QB${9}WR;#;0o+wxQdn8IM;w>^*dEjT{
z|6j9@$6M9B`EteQc4Lbvml8Y2u}uf>h<?3r<(1+Np1E)C?0Gn^c6V9++>EOSxC|O9
z`d`lrzV!Lf&YPJ|v!1qoKDU`!gW<#^-mF*5En)(kEeBSlb9C}fxc7haA7*x@1$<&l
z`F{O<Ib~0>gM&_{y#Uk0fD26(A3RzPFg;>Uu2Nz8DmA&}p3u?2iK#pyw+?VVnb~ph
zZS?VdKb|~RTebJgv*_jeXT>tbJJxh|C~!<@-TQssQSK^}4z->vhs0Mii=SV(wW9Od
zx+SiY($&vzd#!$6>OhrD?roEum5+Z+>y_S?cWXytj){p7tJwxM4h=rV4uu|Ny#rDk
zI5-jl9Jt=g{%*SRE7Gg|-o4KgTf_6;r(IpL-u>(bk4R71s#EL#{Z#yBFIMS$v0QU|
z<KFwHzP7v7r`=>=<|$wYt=%bbU$}qD%U=#3w;z`ZayT5=d%;9*#_ZX@K{v<zeP93o
zYIwZwWf2ysvuWFJiyoW%`&<2E{{3H%Ot0U6(}eHAqc#7Ze%9Yx^yJ6UnLqR1Eq*3&
z<3RQM)tlO9ZD+}z*;?BFT)I1>O1oHVmgt9_{JcjKUFHb?JlT2iH~*WR)#v-#SXnIo
zev95;_e|WqUuNCaMJgwmviE+!y*<DFQKveeoXv_nj$SwC!zxb~n)H0U=N?$H_m$Rm
zzN<k$rFc&`sC|xG@Nw<0wJYQj)6$-unQ1&rZ_Baru;w!pCr$(%-VmidGa~Fs_CC&9
zmI>edW|mKWUODglxpVtI9+Tex@9X-08A~H;>(xTcs?Bch?%7+Trlo3YYkP5A%i8+-
zrqIf12dm$II`ouPDavTAoAK#QOD_BFKKbd<r7K6h)$dvTdz2qHW5$dfujlQSulw<k
zUB0HEqGHFYYcaB`-2P>&gkL{g739X8KV7^kAy9<X@j_(ge9L0DqiW0j=4Nfbefsq2
z@O3en`ugdSX-y6@7o5tl<T-4>^V#OTdX4tiuDHBgsevM*t`ndC{PbzlGY!q3SKpR}
zhlSmG`|W7AIKO;laYjbQ>uYQI?S4F1+;6ul`}(@D)k|l|GMw1tvvWol&!wqxsVjR7
zO|u0z-pwnwn(McGvDT_fOl>PZ=$$WC5ILX4wos-;$WTe>*hIr+mmVz1T=l&@ds}Yk
zu@!go%xC+WZVD`%AQx2Hbm6n&D|5c!HbWk#vbwyycYl6<cJG(7t^4z1rg6Gn{JuFV
zCwCS<pQLhgL!$HAu;R*zs+kj?_PQ+=D$|r+Dia{$TIISzYk9oelHXVF?0Wk2>F4L?
z{e65`91C7tSg1a~=F`UGa^2acxwg;ed<ygW!+7A!moJ~s+yB2)e7?80S65&EwSwTp
zvfZ|pmYfH^->Y7)KWFR0XEq9p7%bBEOuKHpdON33_S7WCz)ZHUwni>4EjN@K1r4Wq
zuC4j7UMFj2(9Un)vNFFK)%|*Xi-AE|B<i>13<eg7s;#}8CpTA|XEl~=cG4^Lb}cOH
zjIVtCrF*@cUFFB3<IFCl>_>W(as*CDFtHWx)5vPPxv}=s<o0*Fv!7pEC^doEK;g}e
z>g-&5#)BNsY9qIE2uNlxvO22Ec7oBRfrW|b+VL%{EFVr?{IaLuZ1ugm`O*J%8&^y{
zvue^~t^DMvS1+wfVT));YEIa}@ku9j`r;L`GfvJ4c5<$g)lXu$X{6%ml#<=swjm|b
zD{-yl;d8mY{`NH+EU#qA*1ev)Sv-7_j_)qJ{;aLD*cD7tHVAxa%3#iB78CrIkfbE6
zz*VGvzFX<@y|j#&zzap`ntN-qvi3>Nm6Xm>`0>zfPhw3;QcX%pN=8jeMNUr23Q<0H
z1qRCo?Uvd^0cI191CI`JZ(`V>=%jOcZ>Rp2r4qldEDM;H5&n8c(9t%x-Z`uJCQtHX
z6?}NfddC(|F+oSBlvg*|GQ}S8Ub}xUy>$a<A#*twXzJIRH`Hg}z4RyB-RlkS{#(&A
zbFs#&vfZF#rTFVUG*6GK%B-uK*RjaJ>+%%IZSU{>tp8pACx8CWz3T04O*{!@lJly6
ze%Sx#*U_C%^={u#n6-h?@j#|hkl!)y#Qo16#($pJQ?xnQOxPuJyKJPetDt(Ppt)hp
z{hg_YzZGs`5I+}N^>(RvTDo3(q}cI730JB4Hh(@GuK(g*-?BH$+BGo4fQMn%lE{}j
zb~4F#|E0`%HMuV68S|Tu);!r$T$Z-4-WqB<_vg=_J9qA!I#u+lOUTm-t?u534<CN~
zSh)2}z|E#b_p^8IGC5=rvU$diu+5GEPk!Fc-(UOY#>VUM^?%oHzh_nT<;9mTTb8xE
z1TNv*I@QSOaj4Rzgdek(2di!iVP9OIW!5z>f0Bx}w)XS$^VJs}cE4v+_~^*S<m2Do
z-ripS|KHl^?boul)`|JEe^~YMq*ZFzetEC|(zWZ$6kp8_7CHLz^78nKf9CpoJ{<b^
z`1tv`*5=mM+ze7bj~B|gUR;%X=Bi1+^2>qZlT5EJnEE~B?u0tWzlEz*6uvGFeSG`q
z(W5taYAY3ed2zA)Ugh%_7Z;b`ul?@KZ(H)=!NG+K6&V74N1u(koVO|`@Ap;zGcl{L
z&N{nnS#aq8kc#xRypK5|<`iojIMWcZ{<`(P=U;RdRfal>FgD2j{B@6~N#T64YGwA;
zTQ6R$Q2YI)a-Dj_O{dpstM`TNQsHPa;9*Qi%=`D_<755(e?Dce-&^+Q$H$p7B~6cH
zZjE}?v8LSMYfYf$WHp(U>AiWIFJ@#k%@#@&O<u}!c~$3Dk9p6<^<pflzv(de`1<bs
z`|bAee);+*6WzbPxoK=>H}C5gqbk9dw!yiRrc4Pu6u9!w(W6KGYaZ3b=z6*_b);s-
znANr|4viFJVA!C*;-R9UafZ)ZXnu8T>2Lj-PYT;huDOSER_)mTs6=uq)0e4wNl8jd
zDvSvlyn&oOp5014S!&x@0yuO^KCkpPPEQw$tNMNEBe!w7Ud$`8gh$I}95AjjY&jC+
za!sh}<gUtFa<e7&{$ICue%*_IZ-rf0MLY#t*UV8CIP~fkW4LMOefK-rhj+~WJ^8ub
z-%nQ;rc}noqzNoKP%`NZ%fg_OOSg+~OuWi;X785;|B@rtMqJr{YSXf~AG$B}*YTvT
z7V2I7ziZK%mX3~crA>u7Ik&H!U3}Ie!Dyi(+j&cl$p+K4*2LXc5(qeWFDl!oLFtj@
z7Pg7qb0iY4e|xyG)A_LT+OWlCkDkozo}PATOYR}g_mM|tC^!i}<%w&V*{H+X$jMs!
zu=Zi>F{hkl9_FrOEiS!JE;+mB#?Ol7$=J1flgX7e{yn_@J-qx|rOvut$ugb&wc_y!
zkIjNxU-epS>eZ0RyY{M3gjGOD;)2uFH+#byRhX34eslF)KPBhot0&&+(kx9K%N~8-
z8YL>!QIWP~){BtbtgREhXYx$jbB2ML=R+avP_ow7T6cEE1$_VK^!?x742i|rr}Ovy
zeD;0+|G(+;D&2gQ7#!~EmA}9F{rLZ1{{QdR|LC5$F^X%$h1UCf{(L)~FBAJF<(`XU
zL^)IUU6T%pixLSs{1IVunM(H8vhUUskNf+4-u1ZBvZppXCfyNO<S0DBG;-e~>$i7j
zyS=};J^T5z-UA67b$`$3*L}LuuQ$h@n;~<STcC>z=;+kv_Wyr6xAUb&E_?fO&gF(k
z@nhNxFSJiMxMi94YJpu`BHBU^r^y|AFZ1M8&{@&OrEiz%PFt3_{PN6Mv$D3|z978N
zBfd8=_U-)*iHDy&Q4!p^=t6IL<g$B`7u+v9%x`I&xqI%pPoF+nzu)uujPZG!|9?Io
z@0SmMKFe+K!bvP^H!Pl7^2z4<8NnB^k%cnxpZCPflTKb^=&1ki`uW8c>m*duwz;?l
ziribB{^9ld{rk$_-#cIP%vj3a-_LK=$<=Z;F|lW|ZJBr5wdYO!BigZ8f<f%Lc%Q8G
zx6SkazL~!N&(oR4=~H?xtag+1QTTN3;#Diz(7zg-L6Lh`TwYtWz}eYZ>!yI9XrYGp
zqFLf;=RU{W4gKP5l6rrxb@{tPt=yn;9aIGV{Pfhhoo{7&Zt0(=jhriH_gH;(n(tif
zTI{{PVzQX8dE?cBTLCAVB$L5s@LgEF<lUUld%L&H*I56{`zLqp`qrhJbi6NzykB%x
zAw+EDs)I`&yA;n_7qipI*!c6K{5Xq0zh1B3^Xb&j&(E)(HRoYsI&nEf+TK5SdD{`&
zU(S^dvj1ltyBa@p_pZI+@4RQtT>3kd>70bIjm@478$L{)|L4h@o1jtU(33r7@kiHW
zdd;1eAkkJRbNzMcS><5e8F^ka72bPCM^^vcEy>9x$nCUp%1SnM?nw+*4r>itJUE_Q
zv@qDN$A73JLbGSb)z^#eySVlG{8rUs5Sww~#R*M^8H^V?I1e0aWj(&(Lfg-$@1D-o
zUVd(lZSBKPtJTk~dtz65K!Qu4N!6q&X<`RQ?Xz8TAKu8hv!n8TpKgEMqjz(qS2|8e
z)v*(AcM%J`k^TG2X9b46UQgc3_FOqx@$}J~sjW-H`Q>A0&F0i)ZELCBe%sW{;26VN
zp^lbmr!~v-{cGnPT%EsRKF5OSOtnLIlHXNzT0YH=^z&qxu(d|4E8<)Ko#N~7ZL3~1
z{;fVXD=~xDAR(+nKSYK(K=i5_LjohWKwIH?(bE$*wgl{$)B0%ETHb>Te}Ct_y7=VA
zg^Q2->1@4x=CqT#<|dINvpIAlzP*{T`=rrLgDoNv$qW};93=!VdPTLUmGN<ZV{_(W
z{x)Irakf&y^xb(kbuXQ<+3Y;!z@(3RG9TZ#b~gIh@iz0Gz8o2Oxm>gCg`6DOi2?l1
z&MZD15|La?34AN2FX0QY`rFCzYAw$Wb=J^z{wKQA&);KSn0B)A+q_zh(2u1TL(Lfk
z5_6aD6D$o)=f7eIDmo5B&K3FkV>*AA&WcMZzl>8E6gZlU)6f0+vfTdfN&mW{hlg0#
zzMs8Jlj+T!ou8xc|9WiyH~!z*4<2Wk&*&fAc-i>;zh_T{m!A*5Go@#@+#|QmbGI&z
z()PdoxA=qBnLi9_mrgKDSduBha_!QgGm|`T@7{L*_XYKLw=HizICJyFyo%Rn59jYO
zGA>r_TBK7R`EFbO?Nu-3W|>b^@f2}g8@AfM*5R+k7B%m!vue9Hs5u?m$8^46?TpF^
zN0vk!Ru0L(vOP5UO>1lG%$YNbpP$p!(_7W&92=$eSx{GHPvYS=UTHH8_T}COBd1+G
zwBXUv1^uZWla|D-SAO*J^78q$-y+Y3TUCEs!}dyQdKSyNo_TI}FLd9~Hof-s(xWd1
zU5i$n5V5`Gw>&s@_OFG8YAJDf;1T%Su`w}oX3erHdU8V8-{#|!$^Low_wAMPo@&7=
zI9K~}?yr+;>b|A-2D$CuwrNw*n;RSD|9xn`|My)vsJ&ril(aT?`|U)DzMh^AkEQ1r
z8diNNUFx5hX8TV|IM}&LDJm}R+T)c*^Hx0z;_Zk!_Cm8gkz-xJvn?83PoF;h`Lpu<
z-%FP+9XfPqvcKKV^z(90Z>?aTE*|O@y;LA`Yn0db7t=O|ch6eGd3Zw4$?i3;mMNXy
zb$6YkR@b36$5Qo>m8YdLqw9BvhV71=mU;EV#EF7`cg~X)%w#Q8wcgTj<-&ythG}_u
z?~aPc*SxzKzxTtR&&I~avur|B_lCM9bgYn1i@f%-WY6~-yPGvvU(GSQ8W$C6Fl*lu
z-FQ*iaP@>2g?(D5UzP1X6&kyz;-kC$uZuH{(>Li@SA2MI<QVUUs2I;x^DZ4x_3dG5
zu;^Qz6l7b~$H^dAbx88%WW_I!wI)xRG*L0dssD+=2|<}Q4vvhy7fQ`OF*05>3jLb2
zAYXLhsqT;AYmFKdCTz^m<u<Br*ErVH+LV~ddM-A~qVCn1o!-X9-QLFG&(g)GSzF%T
z5!avd>>#J2vQl%gl1$r)%t`v^{e5yO|14yGe{cWmgS)r4@F+4h3x8-~JHg;EP0g%N
z`?83wz>bN_k8f3M*m}*QI<wGFQ)2Seb@^9xp3N!QeJv`*Vd+ZNB{71I>Pj9O3K~ye
zXIW;2y%u<5KPCF-4<QwQo$z$smH(W-?p&dFde$a(39d6+C(jA&Np<|@bcmxT<BNsl
zOu<tdoI1WpeN26%D9Bm8DTF`w+@#cV$I3RbF6PgfFC%-;<kFn@S9=N{sr=sKaqC<o
zud_->>M4)SFQ+iE86M;C4iq_8oxNz%G*%G>;a82KTdz&f|8zt=@}cVm<BkT#{x_R{
zmMG3W6fDlWqe{Rm%hACirvLbHH#2{qp5C4-kE0d`O3TVg=Q&C=Ficv&(eO$wlEcw~
zV`^+7lZu0qg2KV3qlVmEOoA)_oi=9kaq7u&kzirjqoBlm!9mve00VOfXc^X>zyNjc
z=P`>f2J|1BtnOd7`|iSpim{FBeRwyl7kO=3cveT^>d)7E_7uf&G$mwZz1sPF-tUk7
z^)(L<vG$sWgkQ?JB3Juk;`u-K9{>I(dqR@u;G3X-pVQ}C*FBTDeZkm6qVqzL`sTtp
z;;mfOr?zf-ZL>DtX7#>nue>7NuPU=T28cv58W~;T$=;Oy{9Kr>5kp}{eEr*{i}Ux{
znOi68rbMzic$nDP+1c3G*xT1XIUxv|3^e^O?>FmGRfwN(*3Acd^S4GxiKIqutNs0r
zSK4ev^Rlvc?GJ4KSU0XZHep+5RGN;i?n>!(ZTpt{&;R#SzrOP0qoZz%51z|5)-n!?
z%w%y~pxT?YHEL@7<kU!sHf?R~St}M*U(7J$QVthczwg(pV1L`Mm%R1oT9tbJO>%d0
zo1%F^XMfe+b?4Mle0SgVn{=f7wAbfE39);jwYT_13_9NI@#2{>FM#jR)1xO&c+7kL
zwrqFYdf~)LDm+FuHft7}pWbA=+%JBg$<{3!c5K=3W2JxXtBdaPyg3i%zAoFHIjgU?
zH&pJ})r|Mkb25bHUyBOsGvZ)s_BgiZ(<N`vVf%5_Z@2Ee8JQZ_q#z+D7bgGIZ@KXC
z!kH-{Pi8GNwzRY~F<G+wLXKH`TiX=76?sNe_500sR~^^U(<|E@YdiPp)2BM88#dg2
zyKVPei@wJea(TR^yJJ~axE3a?>Cic+Z}WAr{Q3Bq%+sPo^6zg<uFLa#n}5jQjn(>>
zPTJbqYs0)}Oje1Eh`8VvxN1e*`qy{)88+#7hi|&TcFwXawNNA3XZziY_pV5<*}CmR
zoaMe(_ip>o7MjQvJ*Rk;)~QW8r;S8Dw61pD=ol3j)%Vz9i{rE<3<9?n#I2V$3KrM@
z`)T_AnqM!MgH9Oy_@|PIMey4_@pFM2PyL%v@&59njzt+687r=4tSh;dIcwED_n&LN
z`M66*`nT{@K79JEtIScN?NOv?Q=v?D+bp}Vkm4og@@ti+Eqhu2r~m)Q;>Yuq9pZN=
zaPZ8uIm@vjaP{sz96h4vSIn8>aLad*L5Ztl2S*1}ipLT0H{RA4_9fnDu2c`)d+%&f
zSzX48qhgbu_AzvB?8~`gBFC_}W9zT?y7N9PbV$%?YF*W^J<jwL%hwld{0A8NBqOA*
zZ4usYv44uFUXQd{huCfH%b&YX-%Tnj{Q0K!rLp)jz4*wOmnp3b6FIYeU3@kj+UQbv
z*lpPst@B*l_as^VeZpK`|LKA4_cymU)<2)d#+W*1mq_E{2@M{5k|!wi)vmYAG-YMI
z$F4tF<epiZ#}0=zy;mI~j$D5f_P?B?gH_U#fp=1a)DtEr*CQUDryS%>m8CY`KlEH&
zSzw)!(I&r1%?B8IbeQ5Ijy#>GbEBb&fx|_@<$!U;o2g%4T}^nE?e5&jVf}mp3*!xO
zrhDRcec1{DB2Ep~=DfXI`OfNY{r>KD?V~S0%g@c3AD^XPvgzj0)WojWx<_obOgo|C
zxoOWO-d?Ud7rZB~Im0YaxN*~*Yf@h|x@4;L8;xH~oFO@(QHdepW7`8SrSPz64SO9s
zcp?)L#f5u$Ox@e{x6kTzi;<Sf%bPPpMn3oI;}v4;g&Dj-s{^Iw4>L?)@R&Q1o8_Bh
z#?7Bg?&@`|kuz^n;9@R``Sj-NjVg{g#b@F)^}Jg;#BLa_e}6YyV?njJ_<;lO${QHp
z6+n*pJ5o4DrE{H)x+kdq7LTv_`045CP|-_T;?BuyUrTmqU8|n%v3{Lb{Zugqi@HBQ
zK<hgm9qH6Ly=4_QgURdO^L4+1>pzOufBdjqKHtQLui#J2r}OrIPCiV2FXF(Othhjq
z!AV8Q^7o5pa=Uiy+jnVKe!*6e#h&*&l<o<h=*x{(Gxy`Un$2+`F0$^|a(m04-#TsH
zFU?;d=#*wr{_f6YfBUrum!JB*wd!2%%lO`Jp_3lZx!f?V<C00PiB$FXcY9y2+bvh|
zpizM%WO3k^pd7nr9+yM5`n~F2C|J7s>Ln}FSymhO?D_NQwEp?CXG7g2yq+$}T-9vT
zwFq>K^Q|qOdo357KNZfsDBMc(?GzQyY2wpC-JNFnKM!6mpTDo<Wl(A;x9#7iWs5pa
zeEL*0N#$!Av*6T80j`~GFS1g0vuQXmOzYv}l$|-N{BqV-tGRt08EqY(0y5{V<XU`c
z<;hKNzFv=?KX-0yOw5_jf7b1OCnYbx{`%`#N=trqXt4(UY*paMS>M!e*w%BgX4<8k
z)}J?K=iB}La{0X7?>Aq*YzdNZx$?5a#5=X3V#n1i%jaE-JT9A@y!7$o$Bi2|*8ctm
zTGSFHmUVfVFTc$Phs76HT+O-=etnJBhPBo6=g*%%Z(dwP#EDHgiHQ$?KA&Iz_v`iU
zMG}&dfy;%~<}b~(zSSvOTKeThpzWLdy3eygx4@KT&bpShb&<xcw`G|xl6j2#`}*?k
z><A21^fI5mZFfte1Y2N4_andMlgosk$B3|G@jsbU{3bjsEF|G-hDnd%-8}JM7KN>s
zWKJasU;Oal!;2Ryww9%)x-PBk@Hl27)vLgBStT$reDh6}Mce)7`~WRpxKn&y*19Yw
zE32#O->j)m4ZiG|Tq3eEC%vppOz^Np(K*hhsLvX=SDUW=;uCsl(GqEfmP84O+0S<h
z8CIEw`W<_<U`go4u&}VW%BNHJ|60AD>+pvQ3!Rgblh5rm@%$q7^KJgT)ScNZX=&lB
zF3l-^GpB=N*3H(XFOPmpvNIH7lDcr>ih#oXsQX=uj6PnScXSiilp@0m)u{|>qCy99
zrl0rKJ%3JrM^o{0ec$+*v*yj*w`qcLn%t#B;&O90cCcMwnDCuPiBaH}Qsf(vN~uX#
zm^LS0zOnACwA`-z|BZK})sMHSMF}ukoO7HKvyDNigXcnVY^?1ix#p5$9u8$r0q#nJ
zSEqbbTAU8O2`}CeaVnoH;C$PXFITS$+3meL-L7yV!xT03iq}OESN^A86{@-`E+D|*
zD8aH(M?8gL<rc10H6a35^_OljjGCLzz~C7AHoJ6lPRGRJG$l48GY$<Iu2&yly!i2=
zPu806-u{A5ca|PL?#D1cK1cn{?nk-X=PKT;lHu>=6P&2M$!~dbZpK>P?2T8N_7pg=
zv9xSV(C_e26spkp-Q>VBL1)p|EX}#y=ezDaHJYw+npIa^MDO{Vv{k>Ojrq*{dU9^=
z$-I1wH`*-sPLL0exu!`1OO&C6^SXja^UWM0ZfD&l&plsLX};l_(5yq7KU*#`TRfqG
z@$z$z;65w8=&S}twjU9Yxh2Q+y;3jd+SmVk|L@)VdDZWBzI^#o#j|AP=KXFfzf3LL
z$GB>V#N6Mr;v|+;RoCv{vSo?)ZiWS!b{#v)-`~rx|9yM@?>o=4oY(p!lpWmv=ho}|
zJ(X(&nnjEx^xZBfL^>Z)dUJZpr@HhbpCr~PWeco}>e}-zrzmuFUlS99&jB{q8pjjt
z-`?Nel^VQQuHnF)J8wV((B9MaSQ#tW*Mu^ICuvWex^!B9|C*?Ve?>Oim)3_GEl^@*
zxM0GryV%;!&d$)V@P6(0zt8{wng9LWU2f*}_w7PD(=M!TS*zN3)neP_muJqL0To1`
ztJ&S&bELM)Cij>X&3i6wmSa)!;zFOSwaJdPF6n<;8^6p7GFx~zZ~v!Dr~SVd{p#@G
zt^H~}Ptw(7)7N|K#~jvf+p!~J_0>ZLGE!1O-_mPpYM!5)D=aMh+MkQH<m$$|dD%xF
ztrGaOv-tV4^z=gpGP1H~FS~pW%Ubr#)#R&Nw~S)awAB2)U$31yb?VQbKcGXI+~q1$
zN^;hOtzH@5X%>>IvSv=g)wU{$slBU<^Qy95wcr1L(D=Mfu%yIvx1E7YqBFMN-n@D9
z-6gxTpRd!edC2|yz14==-`~<UTbh||OFu7{>SmUA$HK@cC{*^++;7uYhHbh1c5U=_
zt=EEW50~5jeK~XH%x-c0eLtVg294P5EPg(1`t<1DWvimP7F~FE&9`*--Rtr7vJ8tf
zeqGzX?`n?O)IVL>re{N><m9fMPS44Cv+=mx?%(fro3eUVa@jI$a$Bvx@iWLn+~@y4
zdvvrrbNlW2_fmT#<>f&$_|5#bTQV=JU6l#-n)xa_ODyi%bFHq24<9nK^S!yVGq~UE
z{AV3s#w#T(SKMz#SR31}UHa}`-S1r8w<6yz&DDAqyIuZz_UY57wdZd0D(YHvV^`_x
z*z&tuQ*WCo<e1H#JbALTdET1quV?Wtzq)m526Kan@A{aXMNdyneYx^<=B#sP&djl|
zuS-mHoICZgMcKKPGd#H0Y5RhzBW?8`H_z9F74MsJ<C0*7Z^oN@_1mvIgnziT%TuYl
zL(DVaMm58N1G6Uh#m;FHkE?xtCG+$-(bm&N2|PM%lP29+#Z=jI%=zqMRz=4&6~{CM
zM+c?$Lua%C9i0<SFtAFfyiLg~TzL6q!vv0Px8ELJ`gH14(M^q<ixfCcuoy~iVLP~F
zt_TCuq8)Nkhw>hBotf>pA+_j9<L>XWyVC#Pt=`^i)+nLVT)}aov0>SR3IVrIv$~u(
z4rpB6yrpNtQ?*J-#w3+#pZHn093%n)JWjRiPZm|+&ssYByXu6sR!ZOZu48iTt;nAl
z;dbCe=y68d>_pp&*h7t%g4=i-md=|x?~BZ90mfbijv&=t2k&{btu9`?>M{@W<D-Jg
zTutI)*(Xhy9GIPTXGuuP%gf%|SbBN+bMdri)1OVhC9dZeKW}z)OrH45pz@=J#y1TV
znruYn6*h7*oj+%tq{Je4K7+|*7Jmloo_oTZmKe10NI4j|u;`>TIxX6<p-j<yf_T;T
zFZY;tH~e_?=hVuTKf^X(T+zNZ$|7d<b>%yI5^FBsIC1Rb!jBK1wOw4cb*YiZ0j}-^
z-`_Y0L<k6+R5DOfsunSDT58AFdX&R}L4b+tLRK`d$UbJC4~0j-BTG)RmhE~LDRLAv
zIJ;Q>?~5B7lg$$Z)=j^+>7V*l^{nK;mmI5ZtU09<aJ;eh_qV?{=l{KVegD6&X`5e4
zE?Yjm{@0uQxa!v?60@J5Q*7FpqQh*o%3pa!=>hip8X8u@N(u^Q4M$|y%HF?=oh*FV
zk>PFGr*qct_k22~eYY%JU`|8D`r<R7^=i7hD;(UIRa6(|g-2cZwPocg+mgb<k8ii%
zpEqybzs>f)H~;<peRbNau<AR1);YZ1ntf+=;I62mj2ky!mdvYsHWM_0Q(Ro^?CgAN
zzn3RNgW7`<tGU(h_kM3=m(z%?n;Sfv=c$gC<gB`R&wpOJbZMfp`@f&_|Gk`<KF_lJ
z-JKgZW`qS@e-NKrdo`{+Gt={{Z1lFAoA+<*&piFCSK2)9=BCu+eX@rSAC@-Dxv{(a
z{f!$pw)*=pFl@^EerBezxL%CM<t?}0#_cS6x_0}$ApiS$+pSGax9->xA>z6>&fGEJ
z=h2K!Q~M@dUhW_6G`n4{%7Z&CytH_gMf_KeDbFv3|BM#?)sazG_wVZT_@5{J>lWD=
zozh>DDb=<x?Z#Ri{nfWJii$oRWS0kz_kCF0zrwNq-Cm8ZyzQ%3Ca!vaq35*M{pCwG
zEX!UwWm%DyWx<1n4jmmG8QZEaOQ*+Gz1@1<Z?2W8ZE57qrK@r#Z_<hq{r%(P<NE*K
z>-VRhpVuy57m@0CXw4@jh6`)veEj&)zxGvd)EtiA>#GFy*SwvSeslAAJL}Sqm;U_u
zbL!Hh;&pP@J33+??#(xm0?n?4@B1{h`u*PN_YQx3QC&WJ)s=~S5-uUzr(at7;)<s1
zmi&D`mzhO9wGElMIYiGuYiHKhD618VG;VE7KK^g_yIXs!w<}!9+IsTj$+NS~vjepl
zG`bcUJ-sSe^zqTr$H)82Z_iz%p%=fe=FyQ(<MeYnIyxD4QBN)6Vnq@q^z`)pJrdu4
z!7B)Km}`4mJEOwsP12{0?^_2PP*QAg6cTyQE#j`0&|Q4`?$4vbuIWdgN2V}0xAa_F
zP~i5U?ssgwFwZo_PXY`FRyFG|F)!E{*W$g^;e8R)<+o~E4PMy>F$(euCCKny?{UoT
zDNCA`KBu9>#qq$I$Xj16uQ?fu-28a5H`=V{etp9E*xluM_pR)%u@pYowC00K<@U(U
zuYM>p@jPLWn83JZLe;5^O$MD>HhEF5E*ec99dWNyIvKbdXKXsRrE1rz;~jQ)uiIFZ
zR=jpC>~+ubKNkG+OwEM#Ax6xrSGv`<?)B;4EyUpVkwL7rlY@8C%cbgH1>IuI6cmj(
zW`<g={4V?QyMdU9Ba6|o>hL9!3^NV-lA}2!+IkO{-9E<4BK_>Pf$i>+cbC4Lc{BBN
zxY#qXY3p=!mhRkqZPCW*`tj#BO;vfXH1mwGaBJXUsn<t>ujXmxnki&(vP8@|@qhka
z``S%Uc70;mSbT2pyMKRjH|k67%)cQt)1fJXV}i~)4YAc-Ykb$5eU12@VKT|*^z@&4
zo6S7aKC}0nJ>hnGhKbbdiKV5{<<m`P>r7(Z)TPbQz`!WbsXFnuoaF21+TGt}YAxPZ
z?&&$h;uyvz#ByIzS3vUPq4~e}UjO^^=g)k>^Ep1CqiSw5)I6DKnapM&;O3a4q@=R(
z&0g>D>b#|!Ppxw}_xQjS=iS+LX=R(XWtUZbKlJ9&8=sg?r|hi4D>+vdX>=rc=XA$#
zy<dF5#ZjT}V!Bd~!UIWOg$64nPJ!ts<CA+Y?Kt-JcWiP%TFm?vTDcaXZ{v44Wh8SR
zK7QBWNWeR_d`VL`*|YhVZvQp<wD^tWmX}xcoYorl%iI6ky1q8|{H45)`x0(t<nH@<
zZRP9i*yy>h)~pK<Y2q}AIceGcqCF??p4<PurQ1JT`#;TemCLe;^Le)3V^BH3tZpYB
zVSICqp6<EpuN8P!uU`FrU-ho5FO{1aSQ<a_+~a0teBNrLR&wE#*~>b^)Ge~1KPUMu
zJ;cSuq9N}5-210ja)8@vm5}MoizZFe=-PGn-S7AN|38-h|3iHL57)hM?5;kb6EK)G
z3T3j5_vGK-2U@yQRkh0}No%j4sG~%#dwkW)rJ&o`?En8fpMPhEVB12oON)1!aXpR5
zUVSxdX^>^fiwh4IyYK%rb^V*W`~79(rfy?k=n}sBamNMz6~fiu-_4ynSJ(g5)~#E^
zR+s+z@^btAy5ErLr`X8I!gHecwEr+3u1GUw&oq$&t-$@g|9^FFie2F&7n$Q0M;zHI
zJr7^r-;-!|%wno<YvL@>n&=RXCD&huX>Zi-vN;_Q@if-U_tw_z>!7tVNA>Fp|Nr~D
zHEONl#Vd{pX{MnUYnJA1Up>pnRQqE2mAewAY+-Y@Y`J;uz$eh8V87k37q8dv|98n-
zfA5z^=kM2kk9Bo3GcyZWu;gVX*M@!H?^WOb`>uTU*=HXg9}k_ectv~ERTWR86PogR
zvu#d)F+C>HTgG)LK%e_=p84rbf$tX1o0>UG%hTm)Z27$74^6}Pg9Rm@N^6y@cpa7*
zV`XRm_oe^;XZio0U0E6IIf=!24R6~mRn;X^IG-MyvA6oWoOPMc=WS~0>gj1|%hJ=Y
zZuCeknZ+2tOn+)(#4i5Ln>TkzxQpKH^;>>9YpY)TzCWk5*YElF>-BW~cs+g>Mp@A&
zRnJd{xb-cbr=_LIS(f>Dnmld4$Ugm*<GX7MG*2&{a=ELcT<$_NllqYio8K``!fjKt
znkU4(lbPiF$+~U%;ti6i<<m|xurIW+`0@Y244WqR62}~EQGthh64DGa)}}tcC^T76
zFp)h)(3Y`fs)oY{MZq0QXP#u|dsqAAptJk8_w!bTr>UJ_Sit^FX^Rls6E24MjQy`0
zxfuJy0uIj5wdOzEz#{dE=fG0KQ|onw#9Wm7G!=qUXSnmLI304^bI34DgqumO_xORk
zO#6D~@NIuRWn0j$a<(agh9%uLtM;rH5R`i0#dDxVM~RVBS;0a`;ck4dP*Q@D<in+t
z445PsuN}NomvKl(sw-WvV?v<7Ob;7oE(u0&0WO6@IXqjBcGec3joY+-`m?un+jiZ&
zc_Sxw_s+7fzltudFR6Yb!<;A*wWX1hiG4yEYegcP6Gy{E1wqbA6UOX)($ycBUcGbH
z=;1li;?QzTjN_i+bJvbD=N2c3g!-O%wCPNB!j27l>T**bfBCt3>VcMNi!R9B+W&uI
zyZoGaSw3d3f+zQ8u`*0-jnUirI4XrhiOu2tjp_s!At!Do)#)A=B^gU=@6GBfWV;M1
zU4kK{%cUzkyjHeFPfkqV_eJ%p;mWL+-<I6oZTj~1p{b`XO>=0RXX5*nZ{Pj*ulMfu
zlKAy^Uzt~+DnqisN%3`2YtNn6owxsIUHanC)uvUg5+(^eRce9?jv_6)CtPt~Rm1c%
z+gtNU^rO@iCXdVOTr;j|b${M`HtjA$N%gxgGmG{2{^3><5=m4PW>B2$5_n_IEI#Me
zVce>z4z*(MPXEa&j^38b{HxjUZCSJn==ya1+Lzwk+}yji%WwMm^Y6+_0dBpqq2IoO
z=9u&Uf6K4`G<p7)-+!6e`Bp6N*>=I8<zdH*4-XF?@0Y*7Io*HnMU77}+s&jV$ILRR
ze1Cq9<>y1(`Zdq3@4wt`{k1Cgt8D6pt!_-~*ROwGxv%>ByXEt$UTr)sXI=H>#hE*I
z4)fdF*jgKFr3L1lxGN(6D6%bRO`~PD0E5HUDBGGJAKu;F%`a=UW!tv0UteBMkFWdr
z>FMd|>tZejhpHNQ$r&E=@%R5;wbwZPoQYI#XD4U&+r#|!F{`gPE1cN0=E}RNOBeLS
z<$jUcv~OSCue;^`bFD&|ntshXAvN{zm8`AoauuMlvwvsO?TWv=xY*j->Lp|S{>mcP
z_3EcSX$!CSn%BqID!1(10;O}mZZp=mXCzGXF|oD%`{6J@yJJDZ{eSiU-~a#ndj0-;
zdE2kHFAZ7=x^whZ+3qaeKX>2Pl_w@Xd~tEHSL!A6PxrKUy2ZA5b1$6aD(WVv@M4cf
z#X>XfRWX+ZFRxz5<e*w(Fk^@H!d<GDy#l8i`LD9kbG>})?Kl7WUzb5`-28n%(<Z5S
z>0Gj(uJ~YG#e`klzP`S;U#|rJ{{9}kXz2ZYdt>9v875g<r6dj;akxr_u9$i%?5s!8
zxvy2WN>Nc!NzX;+-%@2_;J5v9VWD&TysB3#&F@t_{`>vDed((!zkcm<I=1Us_o9rg
zQJ}?4>tc78T=n($*EadqZ$H=5L7?%dfMSPuqKjh*51&Ry*3<=F2`s+*HRePZG%A0x
zKC$P+G}(KBe%dV^OB&jF&SkURpED<^At`}DXsU^sTYSfp*0`FSI~hJEv%Y3|*hSBp
zJ!@{BpLy2qWzxIT)t)VXv{Nmju|vVvSU_GX+u6HCLh4*~O2@?t2Yv;%MjZw2!xL<|
zSRBqYe7e2kZ3TNuN28_!i=Y7qhfo7Uh4O(VEy6`BE<6r<Fgb3L`w8Xkb?dkpKb=Uo
zz4v*2(+OtLOJNDuHr(K^G&=D@uyHR()%%D!J;$6oPaIg|zER3Sl0n<zgQudvy|RMn
z7_+iRtc{#HjVYB2yAMuy)?3+ak;tKJ9lhQlB&hA{H=otB-`u{tb7T6(tCqK3eVwf0
zeJN-2?2_u6Zp$~{eD~u}H5-2tPg`OJGZUL0gKy$VhDoL>N*+oNZagkXZ)7~WS^Yud
zD_;g4AuE$>5n>DlO8X`+3wrW^EBk<yiNfpJyr+-4Q?eHAE5H8e-`?tJ&z`Ggr8sTi
z@ML35N>CDD5c_tIp^-63fJK?vN%AG{Jq|tNb%njJzppyB;LHxYz|b;Hmo54C_tk&$
z|9A4xp+h$}r+;0Tee>ag4)-&%+c)bv?fA3MjPq6ZM3v61Wwo`SHGQ}4+zILHabokF
zG{?I9U8{K9j5VfW-`{Z`PN=K<W<39=&+NC_`Fs6SS|tQ{7dfji-)iQx-t+e0i50Ky
z>R+6HxqIIQ;{{h<eVk|Oy;VxVVf9tZ(pOjR|9{cmn#|(RV&XenIJn=oDChgTShoYW
z9A$DOMPt&|-<kgN>N(%r#=W6!4<CO7WxtQd<-`9^T%@sO;V%8(KMS>wnr``grS;UA
z=jY~De?Duz|L@!U{~y}z_f&p<_T|f#U30SRSDxLlYm1MsZ|%?1@pbQZKA++hyzAAp
zf}Ra4*u7>gdwy<i@cXM%r%q*98MQVmWWphH&q*sjXG^qocXxv>uK=|!o=o=F)6<)!
z;4#TX)$FO~s`SZz-`~1+^l-RjJ=9cM(#5DG?YjH>+u6|(CpNvg@$oS`zkJ>6wcF!r
zJ{|>iTJ`m{=PX~ld)10Z7I|Bv#P#F;JmjxmG2zHO+iDZlReSQLREK)~oKtM2c71)k
zeeJI=yWj7VzS;0NB3_=Qk#o(W?ZLsppp&TM|2>Vj`*OjV>((KIbDrTVy;?*>0{XMw
zzH;9?=L&DQ`=%6WO{?HdA#1j7jmpi;%uGvrcG11>Wp-TkThph_8lBF8{I%atPuJi7
z@tE}ceZSv*e0<zn#ZN!gYm(71jZm+CkCO_nfin(>xiYqJX-&O&OVxg(%36(-#mAWr
zb7xw1F8(lCZmwMQwA8OvvHV{8+X6+tR_%@d`zrkZyZe84o8PNQE-o$(nI3+rwdC==
z-_M>r*_eD>uJ+4C`(KOgZ|yFBf9cYsbu~t9d;P2T-VuG8Gwt`9+l`7GORJ4$l*@dG
zxpL@ORP~!18<UUs)xHXzUj+)jiifS{_iH}i*;)Mh^=q#DmEIpuojS#>zeho-ySrP;
zv2^{pY^5XyB?ps3Ya)-eTCgSOaLCCtGb@`J9BZ3cs>fX79DK3*UuidMa9!8LfXs=@
zs-`tAWb1ZTnsmnc`5XnMsP-dg;tYC{&d;fQKSw}vWs7Ln;{~5STs&MYrvB~itoS)?
zFQp>d4rI=ooL=<k*ODdT{vOjBd6^dQZ0Zzj5a4v-aFjUF)XZoddUaQG@{bLzNvt-z
zoou`xUSw)$*#2Oz2piW&B@QN)7c9043r~Do?oht9N0DJ#bivH(_*FNgV*7rTHCqac
zC5Q-oRG4S++4V{HoVo6s7#KR5+9qss<X~wyr1Ib*PrdVE$tN8hDkn~yImE<p;?TL)
zL{VM^aW7M)1i3|9e6Fz-D%{}NXcuq2WBIWSH&S1yTzGll)U9W|Pp@wMdiM3|)#iEY
zgl4MvUN-sqhU3W3J-6R3+Z!iv^<-NLGq*y<LGA?~Gi<mODjA>OR9>XGDKTS>Ab;DJ
zqNg)DnUbBI8Pr6|-f(5-NJLE+pMI_CdUXEM*{io^ZK+QD_hBKkJO4ZT9qHHC?R+`Y
zE#%9ut0&B~7j6_yV?6(qwcvGKzuV7qQioi(^J(?$Z8&ba&cCee`P>N%3=IsPE{-9+
zjx!5u7p)3fneq7g%MykMGt=kY+??KT*QA$uFEu5|ll{j7t=>9D2lGoACJYPizi&^h
zcz0(fXfEgezi->u$L(G9{oO0xkFQp*-)0`Y)$7mm`hU|W7jF*bR_}YytF~-UZ{5Gs
z!EQW74`sWP8I+t4>71*V2>tycc*;WaI|rua7pR-ps46oWEL^~#JfT2!lh~h>y}Qy2
z_eHXDPgweQb@=+Y-BqHzjNTHik?;6qt-j3vumAt@`TBpK-*Bh0WC*W&G9~cbMfaFr
z`=kn48BTQt?R8iic3I40e_;ES-<u}OAJ*bDy7jaB#Ldm=`@gQu2i@XpQT;7v{q@;1
zXU?28Ygft3Nrq{Kg@w7PSF7!9ZP%I|=yiL%^ZC5$FBjcik615X`Qhm_!Hd@MYp=Fc
z=B9oP&)@TNvi#p4cV=$hx+7|B$eOLItUBA(Htk~exA}Mkv~)3jUhTIFjm%f8Z2Oe9
zm~|YATfh9=)}=`qA*EaY?zqFCeWhd0q?pHh-<MfcnQpiyXH}AMeO)Z5YJc?T5xC9p
z|HtuHCs)l8Pxe`T_0pX=DxUZ1e!o@VkgI$$QKL($_n5-#TQh=U4xdq#cTw(Ysm#rN
z`|H!EtE<DGKYNz2;`qz&zo%xc(Ku;*-sbby_4R)*y32=toc_<Oi~Zy&rA3F7dgorV
z*Y~Y=%T!B!;h$L?yz9BvtwqO7s+Rfq``5qCjt_o3ul#;(_}<LbSF_e%?|vNdd}-YJ
z^4)jM@7EL;f<R!of1`xynowb}qncjKcNuR^2w=_DI&(2+naz3Wt-HS4mAB@tHCd!}
zGxWB@Od)}rOq<(Ix*IIn_~N~pnOR)b%ca}z*X_QWmmLwh)7Y!;^yiq}JF52nd(h1P
z@8$e|FF_$#wb#zj(DB%pYFpDq*KUSvj5yh+`Q3|sr$(3Ga$%N(Z{Dm~^x+=wgG|-A
zQ}yE_B4*5;dv|mCdHuSN-QX>L{&k;(w`#LB_$_}tCptFv?^FHy%$}VUA0It=@?`G$
zOSyk{uJRN$)u^t#`ESmFY>@@q`c52*u#jhAWVU)A%jlTE>HPla(n<%u#N|vcMI>aE
zq+juIE3DDXTqJi)iTQ`~feBAC-NdvK9b8()k9WPExky8UW0m8PhI8HzQ*syIepwQ>
zZq7<}gTU1~=X`X|nmt#0RQq`{d-?gdbMu)bgqs`_%Umb2D=0N3vg$BOd}&&mojY?W
z$E<6n45?GLIBjwbcjeWP67kGj(!}G%VCb>Vz?DreUBAICfaS(-k);=OjidCBWaJwb
z?cMtB$Hw!otT#=rwP1eP!pZkeyRG`fVF^_>F#*QJ^ODa*i!8k!Iv$V^VC-LN<9kqM
z5~C9H0h<q-Z%aALrvDXDaA7*cP?~5lP3JZHREsT*+Cq9<E_|IA1Y81dy;iTxJDioX
z)_n?-jdRKYmkT@zyUZ#Rt}og6K;l;He6^od*~PiJYp>pVQMP+^w)y(_lk3&rD&=>F
zH1KkBNhoxSFeR-O>Q-EEpgBcu&W0Z{lC=}t%@ml=yy4QB!E2<%#1bgd{nc~Y^VW@O
z4^})<S$|Gv;S=+yzhAfCtN#Ax=+4e(`|fgk7YF;>m&N#qD28wx4YA?w;+PQ~ej{N~
zyRyIYp0pG1<%-jfnXdD%f|Oof`Rl)KTt4af_jh+!^V=t$Sp3sqq0Q2LnbA|(CfwSt
z@aW8$o~Zf%9<bY6l)jqsPk>>Qj`i1bxBq|r|91abuK(iyKi7--`-Cu6d<m$1I&*T|
zlcU$`w(hGcEvgHDR%GNjFHPizm&m4ar8*Bg0T+{9hZm_N*UngERiI@&OJw@OgR(XT
zP3Z{|6%&;>m70>p`dtNCBqrMbd~r~VfoY9y{QZdCE5%wprYx&me6!}+%=CY+*8f{|
zbH&QkO;Ix+8My!XC$+VwEwR@u@Tq@D!NS<fe(VOB$JaHP#!6?+U$}0nmaFFcz0%2U
z0-NXFnt!Qzn@P<@QE661g>P1|rcHmZuCFWo`RVE9<^J6s8O>f2Tg}Xzr9)O<J^Ph6
zxBT|ovej2_?XUlTegD7GsfRVnofmhn+4^Qqdfy>~m){+i?A`gZdwTr8?f;+MpHut)
z@6w}3!&Wa{-pRx`H_qQhBB844*Nu(I_kSESxBI^H{MmEoT^(mUi`;&{Kl|z=W>c%X
zRXXK%2~G?JZx|1-h?yiz3wZ0t(&)-^aAW_YQ;p8-i#4L6qE=mht-tTbqi4^Sd6kN!
zy!=`<)ysAB>h*DZf0@^RHvj);{{PR+?0i#X1Y%>mQeV_%{V`*R*<bhf&d%cSbuo<D
zM*?PvO*<jse9hqVr%#{a|6Yx^{r~4P`}g<i3_(uq1p=+R3ioPE-Fe!eWmn19R~x6>
z%nkf~`(ofF*7d)Gla^&kf7yAyR?l<N{(rCc|NF<kul~!4i*f6hUs5^RmbDc$U<I1d
z2aTUse|wv|HL6fXI$7Dd&o*+hsHNad1BS1;qGBvkQA{uYy;ya*yIF{{*Kn)Gof|hA
z6yGdrxcIg>V&2iEPXp#Xj}YPVP*hTQRvDLXvMzr2x4ZA_z8@8j-&6Rwt$5wVj47v9
zTJ&ANe%&`Ad+V)d&z>E*@??J9-`Dj&+UtLOILz<w=O+~SaPAH!-bm-xas~mH#Fyuk
zm6u*#`=DFs<CVIOj;4$W`pXz5_)Yj{-1pdBuF_@letsE?4}ag+@4uQg^8j0*gzLn%
z0__!REf$;*Xm(t(urKZP{sRmg58P)+Z@;xn$=IM_h5>`bvJXNFk1DJYah>>OliSvb
z8~iVutYeW=F>tGCvQGP=?U2B<b&o4!f@4CO<AjEu@2%xNY&=2?8#+Gsm@ybB#Z|^R
zsc|q#-<ZPf-R8k{{KO%r*7LQmjHa)9zL(+Qt53Ify5%mC^S!P;`D?=aJ6|5w?*69d
zCm%Cs3xn(Wx1XF`78&?`YU0QdXtPN;R`tz+t$}4tpOI$3(rw%2YkC$hV4c9g=HhR+
z<$Y%||B}D!79<KY?mqC<V-Ksohn%i<C)-JGrYW6wmR8PrrpvcUJpbhDd!EjMLJqb`
zB90C>lb$N@y*Etxz~RBdEAo4Kn)vfsDy))cj!Ft}Uf^U9Fw~Sh*0I2Vze0Z9l4>5|
zO^hu)ic4Q`7=3zBe1~a)qoxpl55qM9hRz1|1|4%V0|%X+InoM@n>gNF$&pb{W;PY*
z{V>lYQ&2r}>HXPn)c)4lzbxB5du`b6`IehjOTWE(^{R<}L(a6P;p^}2DSGQB68<<#
zx4fZ^hxJj6Kq!-Rr$9wo{{u^h<fa?lDUo7FHzp?}E;~^9t;vN&<Vlb~WZAx}r^9Z)
zecJovRaO3?u$`Ok+_km;`or11|K0pGZ7d<DKi?78<5;X=bZ)20OV(*k2R0O+D>Pll
zJi#u)i6y%;@P_!Wg=P}xckA><*V!E_JZ8G?{z|E4qsPDYt}xp7y{vx*|IXG;#TWdR
z<!pQX_1C`I-~W#8{~;bIQff7~TU>utZ_~b)pozr$|Lp(GuRUJ>EB*iGpL@C69$aMq
ze&p+|H*emU@BiMsW`E@BD@E@cRtUBJt+U_a*lEfWWyB&?xynbGB}_y}=EpIHRT4Y*
zWQVLXU~FO(k+flUdFUnLcjZwQ3)_O*n%AbS-x@8=Am=cjv1?aC*kg~|j~ly}d|$fl
zQJw!Y-5oxbng!~SNBrJ*-f~{y$jOkgXo48e_1WK6I|{HQa#-6}S&7`zT`k4Iuu13j
z*Q&K)umAk~3@TMtuisbo^pq&8LP_}6aGBm87r)j0|Mz$P-#6*=E1%7b-Cg#u<Nju;
zWjt;(Jlg+0`pK=o_s3^%alJIptO-oX#o<?8e~nxJd=B@a02ehiHPEEw`ns>H{q24}
zd2~tdc}&=oj*hl>iknx)>`Gm-<=oLmX7**vmSt^?+8Xt@z5YkLw0Yi(>{VA^J$aJi
zIe%x#%OC-k{lBiRpEhmUw|93}+gLwc)$?kG*Ou+~-<Mm>Rq<T3Ly5yn@AAPw%Nq|5
zw}Wab5zf2vrlvdEy{1`<3AP4q*|O!!i^cu(tV&;fy&libaP+0g{iy55dZo?P)YYd?
zpI*8nL}h7@=+Sv)Rrc@0EPA%C3(=~a23pGUcKdz1@^>+k?o0KxKOdT^w7vTKJ5YP*
zy#4<_A0Ho2PfIK5dcWgupjgV!KKTvyOV9o^yAtQF)3eC7`WxtA<oWaG`%ik}ZvQKA
z(oz=@32uhBWzpqdovUMccYP_kp7-~vn30|X!z<Ub2M+LP2rUq(KHa*YMP*H+RmZ1=
zy*c&WH-!R=B?V+X6&2kW6jclySPoT9lJ<6K%YEVMGJ$E6;EEz$Pa&4(H#523v$pa?
zItxa9%JC6tb})Z>NA>mGCq`C>f5s^9s!6^-v9|l|;osl%{miw$S}Z7Ae)lx1p@Q?h
zZf!0lBQ*gg2?yS+=0}MiO20(BbBdZ8cvP&RynD0odE0LfuJ12#l88`9)!@pA;Ajz)
z;INhGXVy7;+Ce?^TE@JYyLP|&GfChvU%U)M8>46WxhHZa9Ly`285Z7uADR@*tGh7$
z!z_JMfi_Mi2_eT1CN=^G1<hw(G+0)Y^K{yGRY5oVN1-MYa{3K&D_;9g=`sGn*6MkI
zW72|^(Q6d^S~kvK!?3V?g5`Wm|EUF=C&%yKxo6+Do9~z3jjJy#N-A9S(q{3-xn<{@
z6<RY--CG`c%XrzT6b=rCiB2y59!bqgx(6b%o1@mItrh*4IV)}D>M$)H#z_*wKM$!s
zh}r&PN#4(A($(VWx9;AndVOJE>}KxZt2>08<kZd?GAhi{aG7#P^v#~F4+W-}SM>@C
zIyf9Lj7*Dp{43?U#1zTv>Z{&yNai$Ky4BZhkN$9Re*Yw+FE=YPXH7_z6f~9U1=V~E
z6PCRMU1Y5tzAl6R!QS!%%l+p5y8i!HJU46ouk`w@8_Jg@J$&dK-1}=esMfxB)O+ut
zNEH`Hy?_}rr#@#eNa4>uz?k>*^To1l+WmK~@ofFuVNs;b?4+cjB(_v8eA#lfSE3FL
zv(4Adwfy|AH#^*+p@U^X&`KRWy?6KaMlW^fIy8m<@YmO7ZyqmRQxtcqRwFg_c3gng
zm9mohDZNX1SYvr+1>JdBGN~?Je))8{MUztZ9F{Y86sTBQs!(PPD#7A*7A?K~cHP>w
zv3sk&9_y8smX<z!`m}ley*H)1T?0KNRt0aGb#ay6;<)wSfB#kST()f4yxMO!?SF5!
zul{sWJ^O3byi_foi}zLrt<0Fj+Hs`tP4}a><@bNyJRiTO>Z=yd)YN9xmKoO1U6(Ce
z<~Psg=hpSLZ+||YpKmf-XO2oI+x-=~ulIU!%lU5B6W_4z-piRYpU<oIdz&9u`}JyX
zZ*SiA+wZ^6KAV<#ao4tOWlv8{y&hK$8W1Wg+ZMHYr5RV7_S!r97TMp;+kQ9i`|sMj
zIT_5U{u<S(-{0M3=a;*)H9I_DrAX$hwix5uvwiE>OCN4=Eco%^;c>a@H&3U>@2mX0
zOi91%;7aw6zkdDdl{OCx5AQWxb>`Axo!B|$CF=GIrks1+wJ2&WXraTEmBFCZOQ%kC
zJ(AMu3Hsw<8^e&0m-p`T{QrOK|1SR@vbWl8y~N_^eUHCBJnVmb8-GV*-nrjiON%~S
zP@K9!)$`Nl`TJ))x7^T@c;jVBNvUh#5~u6+HM~nwtb&)UzT2taV#%;!66Y_A4Wfrx
ze;+aq`0=p!WZmZ^k^E8*(V31iT3LcV3=D^y*UmIdX)fFUeg>xnhmQ!`u?CJw4UXO|
z4EGkKy9uckYHZ_ZQdq&@J@2{So()g>x=k)_{_*MQ>F4L?+m}6gu-wmPPx(Sg(^+$S
z%hqoC>KL{tbMa-p2CaLI_dleVJi7d@%A)hKp#Lq#^(Pq<cosH@wu&8Lt_WdH2<Tx-
zH7UvD7I4(8<l||+@J?1I@IuN5-JT}p!=If*B7>QxGnl+KWfb5)mwIR(XTSv8iGk}M
zTs*s2qfMdQsE#cu!O4M<O-aU}rv3JfBF$e9zHV#PGE}Hw5ENi^O6EKv;3~$+z{Fr6
z*TX!c>+sLcy>E}QzIQ#L@;7JkRkM_8&#Ir7u7+)&takL&tyiyJ{d)CF&Eru~nu?*A
zN;2n-8(gd+$9Fzo<ng;wUeNT#ov3IFcQ+0JUyqEV*3WD8wKv6?pWf8l+q*gaoPE)k
z2PcL3Wo@_I=s39inlVRpa_`m$N0>XehRtzzQ3;;(;|u5czx4`c>k50b)w6j{^}L=O
zDPL1vYkl<*^EQK9|EJ$#{JTLX()bK$iAMdm^Zz7`|G&Ne@9oaw=L`xwhi%H4z8sUz
zw>Tdd^Y>T$pU`40ww64f_<w(vuioErui|%!e)&%K>ED*mo;>?5i-4nmr?2o-yPD}4
zAu>mk+<1SxNwLY@k$m}2`jDH<SwBA)296DzY99Z+{621Pjcfmj>Xl)ucbC7vw>h1k
zVM^X~gAlPP3(nNezn0s-V|!zs#iXQti<fe=-utM1lz~AnX2*w1-ukh7DkjdHn$p<O
z^)$51Lcr^x(9tk6bMy1_Y^#5MdK$NW`Z7@KrTF6`*R30RA6xW2uG)L=?RW3>6WkUD
zR!v`$c`L`ve~!h+sq1T=-b|mL>*te_xhl+V>CQLTJfGMq&9f|i)@y!mN7dI=LjEF$
zIv!h`HY)Yj?0WR!;o<sE>h+&q`q%G@TFcbXmU6J;)rYv==0%HM?F~9qcJDV67ej~E
z)XD1pS~*`pbNSEC&JGmGY@5~g&&Su-^7*~m?{}No`R7>_CKVM0`9_Pj%kJgSu$rLa
zx&3x%Uf{gvSG{5`WnH<LR#g?%YG4pE=gr@@QETT$@Ow_uD1CjPk@<L^?B$9D7eA=Y
zT^YB2`=(8cPA!|H9{P&WzA5-+-_jEk`);*zi{Gnw+}ka#KTW|y)9#X{z{IM(|Gr%I
z|Nl|`|HqS))ddS{Yi)fm2c@%=A9}id?_>7no!f<Vzp8VoY295DwfgGouj%t^%ZiJO
z7jLb6c4lVp*3zrYSv^;5zwZiaZMSn5e}CX9qvKI2y{b$8ENja-D+JyAukpvYyxV(m
z{jAMQA0ABH7hstr$t}ohck;@bxktraRj;(@tDjq1sdsPU!-k%%9fz`PAG_Xo{^*3V
zSc)yX(xEk#e#ctWHnG)goTu{k-KVoxzs_Dgd*$Qj^XiJe`!G1Fq}VuHy6>7Hs-Mu3
z*k*n(-_?8On()^XHwGy<UwdEe(3O<T_<4>3b0UiX&jg-MHuXnhx~_XO+j=HMKP%p`
zukHSu6E%uV2{YviPCw+oZqF#iFxN|jtHt-Al3jY5(}s=%i!XFe%4$2VU}127XR#pv
zljYkdOu6!mt>D4k&j;12oo|Xy{1wxvz{FTEk-LH6CsWHrK>^Q(BN5ULXB`4~*S2b~
zFx)<$eavCffpwix`{zFc_35r(H@{{cCH>aV{^TSb@44^4d@kER`^h1ZFT179y0im*
z%ry3-xW3!_oxw4IZDXj{AtjMy-LNz%VY|0+vA6eZ+*6cXn!ES*>lAf)%S|T1>>3L^
zjy`9V%w7|^PkQr$j||K{GaCaX1X+)5IJ4u}SI>2Z8pi7i@9sQhS0B={$hRqoVawO6
z?^a*UI(zo)T#Ld-`u`s3yF7`$|LfY(Zt-4DhSr<QGk-mkUjLu}|NH;py6gU&yuLp$
zyX9+x{ofn+PAt&hRDLcl=JpH4iMeKs4UC;U3lt`Fu&W5_J2*eBj8s;6b(<@2@#d8+
z$yeG8IaUO&_cN3Fwfk)E*45MX*R9hL*7|<O{MFUJzrVk~x!Jv8&iA%$j}^YJw%vU@
zvCr?aY<hva_id-tBP;Y*RxJZ9;|LVV&C8o+cZAs>yFFDQP(<_6!hf=R<NQA_*PiM%
zYuV?|pSMQ&8j4R<h|K=|*UtF*>#tF3r!9N==~L0X=j?nk70+g-&#V9UGksoVT9Ql2
zV(tAZ3K7|=91ID?#h*btBeU1<o%VbuFSBq&^O6h^=8o?!C0|}#1g#tfP1#&}cXw@>
zH}i}uTRiUOW^cW9chUO#?jS4az9~|zFCy1mJL)+pW?#+ETU)bNZCn+$I&xZOSjq0Y
z`^w(lS{c0j+<g1}8#XMswn6n8v$I%d-TY;llT=bmwrmY+-m>@m)~MX;>tZKQp8QLD
zZ<WT3-IqIfdK6Z<nAqF@|8SUp|DR8%9R;R@ZLM+)uD_FgeO>I1g2eOlY_~?O{qs3+
z>IL`suGYxxy~WG@=ZDSendHl+clz+hGn;a<vR>WTm>mD>(sa4HABk`GdW$}6Z^^KK
zGV$KOO`n{OoXMQTaNx?9FO&W4Zob+A9@|d(E6V!dkinIui+){;|Ewo(W2EfN!m+4G
zI#I+wCL!>O`l~~%MduqhyPGa>1@^t%5IwE>pD4Ql4>JSzLa*$L9k*^Q_{hPO;L~s-
za^7woZY@z|At@ebXAupj1`W^k-5DpOoEv#N4o;Y0eysAu-bV}D1cUX(6gOP;^2v;z
z(Ij_Z=hLunuU4`wO81kiE-*A=(knk8&>Ci$lqfOnS{&064<3UhRe#vL=eGR5TNd@X
za{ueiEEevL=T>SQD0ro6{D`$fQG7{b(~LDd4(x7IHEIKXY}~MmyL(gKyN}^+344l{
zEUsI@#N%7$64L$hrlOKibhcoG!-)x7-ToZtmRfowxXoOhdH<`miI)@gub;d&Tj@^I
zgB9N|=+;~Q(r5dc>&C{&yH(CfA}K@Q#aV@4-#VCDT2C|ctYz>_w7j6Ma?jDU#ZC5A
z^>RlA4u#X-MC2yz@z`9m`0lQqn+lUl-+tQq)H^(1C%@#E-uf8_ywzHrSF~iD&}hn#
zXfzOD5&ZJz>n|1#MyZXVD=Xq}WWU|=|JZKryH9?dRgSOw_Hm`ep{$T64`i9U47v?C
z3^y|}I!$EEEEEW|15E=@j!p(IXWO-xfB#+6ge~vN#N+NAx&N;tbSn3)yHl@;o=ppu
zKWX><PVrPPSC@T1&*sPNEaIKua3Lys$;)j0|9}1`YrfpJ@7ve)?{AsLGt8+;;Xie`
z@{<0fI{k9#)u#o_T)y1gw@;RlV-cg~)i;Yn9~l*`?#O(Q#pAr*jz#F3l2FvFHOGZ}
zZ!icrT*}U0v-bH;XPG-4rc%9otG~aywUwJ~?lE2dllFEUK0h6*Z=2*svsv#wJgYnA
z+aIs*H}2fIa%cY8v%YWTuGSr`mcOT5dG7A2>#wKgxic*ATY5EX>)pK9UAfzDcb&MB
zwbg5Bl55EBDJq`xo=e@^13DC<?%QV2@FJ)|uF<v0<Z9ifC%zf#YuLLJPn=o3diDDK
z|9&0q7GIdczfpgWcUO$`#g{K%+W$Fh|L4zh`}O;@UUi%~BgL_F_TI(ZZ}M&RmnM5#
zDmV&!v5Msl{C4lUbT8;cr#m}~rKP3K^X^;-n72q{*WEms<5}jv|NVZy|L3#W?EG>z
zH9t161!_)M^5RT_ppm%i!j;ZTpZj^9=R90cRkbT@wV)u+OXD*=Z6@WJ?$?{6O4t)u
zOndVC`}=T<Wim>0T~f_Tt>#XhD$1LnW!v^X{M@W*Lc3j3N=v^UYUMtC`n16pCq3r{
zTQ2i8JvcE@dH(-D&*xXYT6y#4&AjcaC$F>g%G&?8f4|g}dsep>yjl?ySUCUC7psga
zx!9dWPY><<JgYjD-T%;gUrx?ucPAE?3)x=}Y<zrkxm^99g^M?zt;$eXGGXS;?&5Q7
zY3U4-5@zp}I22Z-FtRZi@wB8!9NB1Bw1H=WO62z2`wD+nP5aWdNWf|O($lN8udj=Z
zzMW&LrY3QrT6@|=9i_@m9ovK=ix`fvIX;Noq*JWKp_Y8opod2+EN0@~^30tL+YcGs
zG5?=2_ds)^-kT4PFG?J4m1k9EDR|)id$!5m9)Z?EfzTWg*Qpjf&SE+f8jfx<KcpbW
z$Yj#M@`mxm;<^v3LhlF&2sZ6bd99J=vgzxu>K~zPlU}TyFZ}wuTc|5jPX<Hfiw(|h
z?@bs2D<-hFUyEXN6cCUTG!#tM?BDhIQ)}Xb?Kz2tN0jsIEIju7a@hY^cYn@e@AC{5
zf+7y0=90c$<{lcY%JZ2Sl%y3N^BA`T?O-{4ASzs7VrsL-Ru1XF3)}a}nWalzT)3C}
zZ!&+$?@IOZmD9hUkKb2Q`t#7#*R$`MiZvf&JEp|8)7h{oBcZ^)LGFn0ce7i88HX20
zg=L?3_v@M4_q(4Xr=9gTm9yNj#X>s#@d@j25zb1EHL@PpZwd-1HT~E<Vd-(xb%nKy
zvY^fG15WqVigw<fe}Ch7ebs$SA1~gg!{cmf+VS|ularHgt*C!}`~J?7r@IVx+ps5o
z`}cJIf0r7eN&i2E|Ihe-uhv*`PEA4m`p+pcZtv&ruE<@?&uCmNz~<t%xs-$Xu=(Ek
z(mTE}9f<X~Uhc4L3sdr}-d`z;`52TYEccxCg@YmWLVn2Vt3QAKT)A@PMdm$oClu}P
zv9Ir5dFNu#uEwsml1s0@?y6h=P3CM`@ZK~w8}54-ZFnV29b_#`#MkY;+4cB_<nsNS
zOd`VHmRYa6`pBYhQATd=T8*xiD_1(V^VPm9o?rc_Qyny7c5>xP6Hl+#!nu!4XS2CA
zo!q_m-qCLH^|8CJz5aSdHteV4sw)>BJQP;<tNGX+Z&UNbK<ZR?%z1Iqi#H59v_#Lx
z^{#t=(&A3wx<#88n=G<9Ke?_xFYn#U<@2x24L{fS?*D=9raafLU5l&#`!)G^pR7$q
zz{MLu{9AKRFI~GnFXkX0YpRKN-1HU2eQoux%Wfoau+4JG-?ROipP%2k^XI4ET3XaP
z<$2$ve^*#DMQSe`-E(>OFUHR|^0tGz4=*n*t=oS;!(<9y*ei|FGwEq*cE4|)2bHs%
zH*bEb@@oAy!&JKmiyu12IltprGbP)>WzAOCdB?B5y0^D_e#N6s?&s(Jze%_Ep5)>@
zOJwTq$I~ij?Ao$5GL`Yc+~V6THcg>_<~jx(VTfoF_<Qf?%67gtvsO8B1Xz5K+tHxW
zkQ=x4`xkA#O;sreDiV5MGcho!d|)`otYqLc%WP6!ajo7p?H=Byrl-$N-Fo`kTU+|A
z(}vsUuUC7TpWNj+F-4NO>Fgpeo)nH&?vJw;>%8Gg+b9q+*JAqfLV?{p_x5ix`gv~V
zVQ*vpcXQW=_lUe;(TQ}n>}H;jyG!EVS3b4vymmsjz4`(l`7UQDQ|d@!un}Ty%4wB6
z(w(Tl^rb;(p*u5!4)c21yXV#x@2d5DbD>7_pi8;il<!Jy>_50T8aO_D*zVQHsmoFA
z$mYP9B*^GyZ(y`+V(s%!@rR?QT;$)^n0&V2%yymL)CmjMn#^2l85G5PK-XSGMt0Xi
z-aa??jRvO!#E&wlyl_0EAT{HffYI|zBb8l~wkE9+Ve|12iBQXCP&8rmeqr&=!{G(v
zFUu0+$QgNh@9&pBem3uG+4`&R)~;E*Ze4!aWtB}^*Cenx2(u)%9JA8jS)QcR>|3jN
z>`35L?W1n9;-fPEzL^^TYl(Zmt&P3lgsl&l4&I46y{Iy)r)vja-orobA8txs-*N1#
zbqu%yKCo+Vxc*O(#YejME4l5m9D<iwOci3wWeEA*(DCZokD2Fd*aU44->>`L>Meeb
z*<o>@x0USt-NyO*zuN!({y$b`*80CM<8S;r;&RpI`w>H>S7o;o4rj|Q*Syixyjy~$
z__pzuXiejCA*tymGavG9VpkC2;JNl_g_Jvk0?#5l>8_s!3Jwx&TcdP&npHdlT?5Kr
zI=nl5=3efpJo7hyG7M&^c$P3~=rJ>BB?U=y$Lgl8&R=^sGhkWHwyBR7?6h39Sd-nQ
z{@tA9XJxx(k8c#>DtmjY^v{ovlhys}9&*Ru*kAwu$dMLpF2R){TBle7ce#7AXxwDK
z3*HSgd-m*EF6(xwTy>kNaAH%=`+Ivq?d6He?vE_QSOhQfBrCo8{(BeyR4-MIrfS#o
zdXEoyn>gOg4HU@B%QKsOR->zGZ(Ph;yI(IBr=Ocs`LI>I$MA36{ixd+CYMZ(Ca(Fh
z)O)&K{Jt0w*R5f}6K7?u*`{Zttm*petilq`z=!=NzE^WN+7$z?Md{mkc-}wBb$G-5
z_s=Wi)?Z)jm70`vs5)Ni)D$1#tr32cT>8BqcZIAitAFb4H92!@l(=5Zj=I0Qei^R*
zz20v^UGL+H@9*w{7K$<R+bnpuzsmHQ;6H{Buk*|f$p88EDf?&m+_LE8scafE4A+Kb
zXI1UGnPd0qgtEAO>BGI>@9nPonl<nF)vQp)#r0=4aPVdDsrV=~vG^$ID0C!o&YD`V
zOw81|gGHx7B&PdB+XHTYYq3sVhXl5X_mn-IPH>!A<Y?5IRn8Hkva<X)-#M$}E+TG?
z?k`k+Tb*1i`M7F#dGgxQf2X!~Uk_h*FCy}0#`n)o2PU3plIBX7wcM}6C*g#}^En<8
zp-WDDK4h9LthQ>+{TRF2f2UqAUzYZ&u=Kl1u)?h_<zI(**94UqG)lC(>`ki|ZtX~j
z+HqyEJGU6e+FQpMoE`?U%yeY16*5*@z`)rgzpqiAtBhrviqGw%F3kTfGAQlb9?y87
zq9O3uWS)KMcg@=tioaKQc(M8W9L7a)?*sy`%<7uywj_T4#n3s0E7GJYq$fAoX&hK_
z<EDX<*S6^Y1({qd4Hh=tt(`m_3adMfGfk`w(&sQX#NA|xI3S(<Xa$o}!#q`XwZw!(
zjSCyg7rE#fBrr)cHJLWN;eR{JZik8Xvx7SAtFKSLU;Y0~E4TPH>yul*u9^HRZc^6|
z1qGL+ln?8|R(E==4=;GPct?`f)+;}+mi=FQ`MI{+qN=Ml1sTiyn%Y<+1v(NkeAkvW
z?y&uk8}nG|y7~t2BFe_EjB9`A-(7wG;?^ZKzvilV{^SUmeNR~3@5t4vpdasR)OS~Y
zExPpHO>yJn-rjrC>-T-S|G)e|+`dm+^F!3qm%Vys>~HU*QUCvuKKHA2WxwPuNW7lI
zyeTn*`~9BaW}d|bJsB4?96HbSaFq#6a24QW-&EkD!hf$?{+5M7$VwLu0m&Cz%#K>i
z+*|Q7*H`Aa($XSFukh=au1sqaJR$%5SH`<|k=hGl8>80d<>hJBF&?(IFRi$!{w;DE
ztM#20<)leV9R+S2uzD_Vg5}yqaTfhK=|>OvPrtxj{r+T><BS=zYW{Ri?zj1LqElEM
zw2ZIz_qR~3sZNV?Ib^FhsWohvujbOy#^PveG)43Czu)iwzj<yS9~nJ+&YUx!_h@j1
zsz@epGFf~5wR^wZ-^cd<lHaO`Ub!$)ki{fq{q@8bTDAPg9oM>@vUxM<XXwh1Pd4En
zI2bx!JUKZz{@<tRpf#M|fB&61Q}XQ-(csk~TF`ZoUteGU{^n+IzDdYZCWcqMYpmDL
zTHv+x(#z6jg%{=3UF@um7haakDZZOGy`#aBgK5*Y`|ocXFx1}h33)b4^Hf0Ekq6g|
zFD+bXn&&=k>pQV0Q$#D*2Ig<Sy;HlRRwR5`dit%qeOCU`$xQ|xpLMi9wZ?YuU9x}E
zCZkoCb>`0S&WJ95c3sJIdrY6(x;gS|v~^^sh_2Q;IK}3CeD&L{U%!?vU3j$c&in7p
z3M;N=oj!d!QR3XWb9FyY$KTtYKmXU`74n<oHi=lth$i;N?XJ80`i4NZMz2|0aw>24
zlXV-e%{ow46)VjaIj=Qwh0-!mll|Pz+2;AnGFNfG&#Sng&`@Dv(;OGR?R_(!#3aEF
zYfh=EFg!W*+?DB^<3xvvP16;49J=<X3$&eiCpVj?U&OI7FX4~jrpe78<TMx>4nI_k
zXt>eDtJ5L5qg~+$ukmG*o(IzxO+EMJpDp+5wfB0bel-@?o42<lvvloM|6d^%=R?+q
z+|CSJ9Xh#5mV-gX)5_R#W@_Z>+nd=|o$bt<_4n1>@88e)>+AT0tyX(4dPwNzgj&NN
z60)E8w)t(m|0Vcv#MY{<EGwCl4^$d(@UWy5FmSRoxEyNeIkf1-VULv)`}%HZB(^gY
z2pF{NVUA}!BE%=t#`c}-@cO5J8`Oe%|2>zjNY+s{*euN8;Iw#>sX#wdhsNRGd|~pt
z86#KiNe?*o@j>V04jwsnUe(yc&d(o4?f=SiSEz9EBFpH>9X!mEa~V}!+?c*T7G_lK
zSkzH`t}<VcF_1w<JkxGQEf)tv(R5zdIF;rPB_i=(c3Cn^;FOwrAmY--PYlLaTVu~Y
zxV5hH>DPBVpT3*PeSQ6%9W!^`dCu^LH!wlLAflq<@r~b$uD)X~5V?Nx)2U}?<M-7b
zQ$BO<T!>ciRD~0pWll;RvN_4CDEL&5eUbu4QFxEz%);K+lfiq(9`9lgU4Q-SyZBtq
znLDG_+I={{T>mY-ewxZj{(ax)e!V(-=JYN`#uLUrPWHz$F8FoiN%+2Ryxhyg4t2WA
ziSYb6z5Lhv`T6C$FCIx*D)eQu&0A}>o<$z-bzRtw<sa^FVS2dRe%7Pt{ap<F^1_Tg
zGvax!JZ-sl%YdVUEjRaO#hv>Xmi8B~oOhI;<=X;2*;5NN@A^!UIe2Ev;quU>J2P)~
zzuNb-GHzwal+TlvtpqI}k+CQ_v2p&485TuPPJs5cpRava?A|BSxX|$Ii{_o1)UQ7a
zyZz=sl<CUIxH!->@b0^2&TKP_45utKwzseU^5WvsrK(R)yx_N&vOM$F;Z?(7rzQ8B
zJtW#DPo4~#DzE>#I=<9uZlGA_BbReKr%s)!9lq|$>#sk5R!U?Y*|wH3)icA)nBhp_
znZp^|y2bUk-OgPqxHQx2npE;44JD<I%<8gNYo-=Dxd!$`^-Mp0$oc-eiyjsdYNvbV
zEm^$GpipLYeQ$@1Ws!@17*}tmP4T?vn>TOf27|7QDT_m%&8laa%(}hFwClBD@%G!X
zadG$V+_|#ZGx<udq12nywR7jrt$oy~E+#JS&YmdkTjcKjeRGUNnn$P85sfa;E~}~+
z3(uZCTef@cil?&XpAL2fOtSV650GfBRCuJoAfh6olpv6QGdkf*#u5Ps5q{>$eX^Qj
z3Qrc6uFlG7kCBwDW6LzQ3)xa|jor}bgS;YJk_pe0s+p^1?ED+bes$mM-6bXG*Wa5}
z_5RJx;_3NowpLj(r|%OBshQW}*rN7odF9femtU(KMSdx<PiV+__enZiIy~Gg%&hz9
z%mX(Vj`YUe{BWJ;=X!l1x5OsLfGL-vIS($#Ft~7GU8`V;fJEw*+pP%)I#dM&6gE$F
zarve0^{`Rb;qkrNR>65E3*_D6j6dx=z;NV*vz(yeC4+=+#sfkU4g&g3k6e2g9h8EW
zN^me#I7qoJ7Rj3OP~^jfMc=1=+}p}pGkf{G2?`&lHFYM;V12shj#s4<iy*@$wkfs3
z5<<2K&C_oD{<P)Bu5=+2GYOk3NotqQm#aLok=Ic%ax~sBxq2DDzHd5@{{G6!MPa>b
zWA;=f@7??|w`HnC>!%}|6($%STd-B>&;#z{a%ZB<EB}A$y?);^cCF2>>}_HpS{)Hj
zn6IrheGw@Uap1ATEz>ZA-t3t9H$cl#q^{ep(CE5iANu~BY5UTfYwF+j?~@8&6eUvg
zJ%9hsy3flDAJ|qjUO3QS_a|ui|M+$5w(tLzUT<n^zR@IAZJzBdKg;u%%kNd+FE!Wf
zVcOs*z;JU;Xq{ivf-BjLYo%x1e)X=9kHJwO!kb}&$eW6UzQyxcTQb&ey_U5>RdJKU
zP048|cO;iATXSi<D8rV^dcwION-T%Bl^OI{-<4Nl3k(ryEk7sGd`uwFlqWna?8GgT
z^OsFRnNECp^QKc+ecz9#`fqP;c4scXQnTGgZ%63U<$pIQ`Tla=bgX*+rcFf;54FxV
z&u3x~n5mHPY>ftk!s$&fXU=4ouX}NV*<Jgpg{P3M<C?91W*gqAe|+nlokXYK^>dMD
z^QJsBvb6m9VsZbu^XK<}zgNBL)us8XZH<lBuU{X(vnciby}bq{Q>FOKx;VP7y#CtR
z$@w%x#MQCk*bEzA(Ui*nf4_rz*)L082@4xKyqgo`wC8){##EJ^MyqB-?#;~qz9z6E
zQ`)9#_mngd-{7*@vt(QYLF3`|KlT4Ft=jbB_cX<`fg)F5e>L%SU%S%%@8+_qecKuX
zewp$dR`E15Gg}wC`&!o4Wy_W^EV!DLnODC3_S&%3g);ANZhrpb<KwSYbKjd-$U9C|
zSS;7!WULxyZD?5d=t$@1=jY>hm3W#a$#3#_aQ${QUzDjbhtd)mQ5P36Aq5rz{zqpY
z1UHwxJ0h&o)+m#fz|PHcLZu^1kf|p7ymxEFv4^oM8Wu1ZGrB)g?m5aVerL;<7xQj8
z{W;KFy*$49`5o!}`8%tM_g;P7>UhD|imgGiVX4rqvuDp%?VXpRxoCmmo7A;e_m|W@
z{q%MA*<bJ6SOOS~rIjXBGZ-mxG;*tQABbeo=i9rLhwVVe_8^HuEv89{DrP)4HI~fZ
zu&Ff7kk4_E;wskz96r|HGEZ~(*i5Q?QYyyi#+z{JXV7HvFG*}-j?o<4%1Q#v%&V^U
zi*qn-YIA?!KB*|%;ZV=^^hRa|-VfGaUrfDNt5KdI5U;u*W!gpKlmiOi-gr9jMhZ+3
zWpU8RVEFp^%!vaB*;+hU@}`R#Gb%h(XvpH=-00rIz{Qr9Sm-ySrQ<@2fK7SP`+0YF
ze>-!2&$nmM`TNS#_Ri<FNM2kQ_+n>952I3=n3{gdqALB@F;Q`~Z`YQ8e}B`~I5fMh
zO>&O3osEK$l9<@T!f&A6(w*xeb4JZUx(+iZ@G{){t#Wda#jiK%_T6t{@BKe%|L4K6
zt*IAw8*)E*xb=G6`u|_!+pqq5zW<N=<<DmY9?m>2za~uk>xF$kzgbJKJ-gxBhHKCC
zzRR(2o}9#cD*eG3gPNrEJsGt+JKs8<I-%^9qLkbuASmEaTzNB_n`MEnHeZl|d-UQ!
z&!d0kUiQaMZQ?7P{PJtnxt(RZV^@ZRI0s4{sbi5-Vh~_)ocU+f|2cE!)cpB)eEG6v
zhYWfiSJc(*yP0$D>{(fxih}F!mfpO1^W;fS8L0&k*^e#cw)#q%F4h!eY?c0G6CWA5
zv+nP%Z68w|cGR7n8+~J|#e$PO?wJg)-`K1(_xdcEnmFZ>^xK(JpIpi@TfS`Bm7=Bh
z-><&obKG(E|JT>oKd<a_d9XLD)ypqH#C7xL&AZFrU-S8xwKZ#kNvG%ijNII}cXk%1
zpPx5()~r=mvfP$je=T~C)iGd$mDNIdD~_Dv{gWp8WZSN~$gH#4r}>r}-zDAG;l0<Q
zqN2E(9M*>{HeU4pUXEF!hN?EFto+Q2`JAVEn6zhcZr!-iaF<%B?egVUA3b{X@Nj$f
z)~G;{l(TQY1#S3jQFJm^Dz-H1Z15&E)ABdXsa1<j#3osrCt5Ha6E@&j{a%83VUR?F
z09)AEQ)MiQiia0nw6y-ZWNx7H(op$ihSn=*#U$BRMYAjs+9as5aiYRh2SMKAGJzun
z4{P)?yBq`7Uw>WP`_j$E)HHbQwfO4KYcGqhTN<gqz~g}EPGzpIuU^$A@(3w1OC;AO
zPP=}4dj6VsclWNA6J(xfk<A=_NBY@xLH|d+7R(8aqEU{FOv@*9NiEJ$=U+PM`L@gl
zyX)7j+QI4Y?q|5;M-S(XLVR^yzqmwodY5D~HeV26QWR)%{AVJW@V;B|lcL6=ozc<S
zWe2=(P0Cc<@JmM7fcJ{8)q9>@axL#2dViLN_C0ENYTmG);lKjP7!UTvr()z}fA98b
z6yWBTVqy~$aZGefOi0M@yujmg<Yu*?`hk|Iw#M5&-e|tsCHgUc?(Q8kMeM#$RX8VU
z)7A04?`!e#7QsfrBWqs7?%G$CT3P%3P>hZ6LI&=LO-f4p0zPL5{#RtURoI&yv;Vd!
zTk0{>b=3i{7BBQ|En;+0DR+&VktJjI^NMihep#ts@5=v`J$+Us;Si>=S317->(x1p
zIZyld|Ksg9h-{tA|8{%Kjy3=9?ew16P|(=3kXKe9+f69)Li)Up=I43k`^s-ldmMOg
z@#ODbTNF)>9S+#9((IOWVv@j-Xt_!KoJQNPXMCQMI`dx6*|TSDKb=tiT4j6MsMT^x
zz~jB{n>XJ{&gI@3soN^&?d^TMPj>dKSzJvEE@sGBm1Lx)9gB)y8#eV;a97ow;$7#Z
zUe^Ae*jF~M>O{8m>)CIo&61q1d3~4W-E;T$R+qoOw|1A-``U+do#bwR`*Y8%yFB?6
z&%JI*hEq1x$v%rO-q@ah|I(#Pr%riIQd#^li{V1nR=v1AH(r*coG8##%{;YZ=Dd0L
zc9*~Z@}*?nb75iO#*LnnB9g!8?)eVd)W%=`!`TItowLuTNwhTy951ZiymXiPRk4-6
z{7T<`|IK}D|6mdW;~mA{K9Tl|Q-pPwzFB#{7nB9NZt{K!P-gV8>g3Yac3R%Eu%E4K
zZ|z=2hgr+a^X>$=_)K1#xI(l^abMYs3kx3~?-zGn7=E`uAv}Nmr`oR}TK)oe4{s29
ze}8{{U7a0|v+QkthMn6|?>`clyYq6RVS|8y0<*-~(r*d2Qf^-wI@kh_Y*tvb@leBo
z4(rq}-A;UO6=VbwPE1o|2=eMUCOy4fouiI>o&d{Vk7N;!9>oU@6SNo^3NET=t7|=M
zygNBTp1I-B$J^=p;aQ@FZI2fucvRiZ+I#K&ckOGhBpn*Rx^CEYbLXx-x88l5p7tu^
zgmKf4z^+sIu_`{Q^I09Px~+&j(@}C;)q}w{qTj*cwto5cJ!K0rlMEX66#w+*a_9M1
zTm8X|fpPO9^%E*h3=0=nu~f=fd{U@jC~!^WoG8E{l9Kqbj^U1i!Xh3A$x9}AiEIio
z8)`EbOm$*vV|-`4YR|nWgWGPL3~oP_pKei7Vwiec@M6KHh5L9MB2K*zZ27?VTv=H`
zA@iOMlj6cf9!v|EBJ3^ndpR{WD9(8LbgS21JA28wHgyp$8a)1Ucb24XO>LerQJ|AC
zvPIG-At&POrFFbo40UVg?kj(H=#9%>N%=Wzl_sesJeO%u?sj<+!U0-`^ja9!=@NCF
zXjiGH>*T6pAjVkxP<rdH@Ol4NE!$P|zjc3fbUwRS<I&2ScW(SRdV0Of$NK!k5Bm3i
zH2rd64ok%gkM*}5k9^m^d*jX5i^smYEq$+WdhX{qi4#&T&Mjwrnr~~>GA%P#RbEq`
za)42|jnT#<>dD?Zv-=%uwkAe6nlLOl*v+$`bEm<VmAX6mpHA#MX|(w1oXZ@EsY)75
zpWbXfZ};^|@aD~%y{2Dak*xjece<?PRDuN4)z@DS8O)hK|NhqO=~AaUPCR*%vNr7U
z_5NKCUtG873pFnKeeCqq1sjwFmuBwTw(Z)>k}a#RhXsF>{o0XhHhXvZ`+2ixUw&)-
z{KAB7%eLpwXMCqC|M;6-e1w;I-d$ebAM37WvGdEtL_|cy#f25P@b3A#-sJD{t63|r
zc6-&8Y$@fQ^$&D!S=HWmbGUOSJl`q%YaYXa>i2t>e-2t3)^GnUV)4x{Zv+iFnl!pf
z6sLYV5EK>qNGD)ZLWkGt1s5xK-sV_gye@A-`_$B#$2_K{8Cn%C?d-XwGIg4s{8LT)
ztfDpCZ=Ri<t*x!?60$bztAj{*kgu5F+uPgUH?qqKOf=vrF4up%sDANXxu+UaU))fL
zzRM;oEL{EV&CI!TW8>q)Wj<`Lm>#WA7CN(`$7~&siGh^!V@U~t341!2oh3F{Y+igb
z{{Wjz->w^cnX_+w=1*04dT&#Me8s6g7pBGy>^g1f^S|qzG?Jds+i7rTf5cfonb)aD
zpGvQe4Y%;j4f*PDF11RwO~WDay=_FW!Mbf$*YnqHtL99)8&R;+;<=}9+W*2U%x+8y
zY)mFL6+TXKQ)au!tz}FS=yz){xg0Z7lZR!2pTny?#n0ca-jH#`;KjW9)`PpdCrzD@
z@<aG5vy|0)A!Y^s<_Q@q_DOxp3&~W8GgcN9_-e4zU~&492InPa2b>P9Dd?H?UL#4F
z$Kb)U8i`qF$_jWTTUjIzGJIIENH}4_wA@5(iJaHJ1J%DOHnRnOzk0gi@KNWMEi8UV
zIXM<5^UDd;u9Z@<nv}7MtKX)?LiCN=(NAuxHH`Sh4zJp(Sn)BaVFJU`o~CIUKA)cK
z-7H?_Yu^9nrfGQh*LSB=`}V453%ag!*4R)yFW|A%^&Ri3LHnF~U(1Eu<mr!UX-kaQ
zp>w`CVdkt^Rli;?H#awDd~o~zU%%B?xer~a*y#9VZ~epD_w%+|1&Y{zo_Ri`IpMpB
z&Cef&DwC^U%-eg%_jlr6#yzTPP8U=d_g-DlI8p9E>`k^`2Y7cD+<C3OHm_fNkpY9M
zDNjtDV2h$}@Kj3)6%h@`nYsKAk6-YKT>7`mY~$9bw-**V$NxAa{!Cn~<z{t$bHeMZ
z*6X?T^Cel2Sc>0ZV7R2yyJ$rX+kDZ=dC$*THZR${@<l_F=3GDb!uG)VA%FLon1udw
zouqQhSX<hoaDI^qXpQ@{X<}kxA&enS+^MU+BrudG3FO5tDv#M{ai%Wp7O2J&7Z;DO
z|NGU*cGZ=+sgc`u?Yi~;`_%7Cm<(Anu2_1wJbV7UU)CCQdu{M?zd{Mkdke3r2a0UH
z{kHh|xtH>K>(|(Px!~N}nI_^o)u3si)k=|P8M7)*25GjoEWR`^w>{XXe_Q3>X)(H@
zzhB&&X0Pu!)99;a-{VVao(tu_GT(b>T7CM+)Q0Kr99Cb=+8VWB`sGClX|9*Atlkl~
zUSCfSG~w8yze9e`zDXj%M*Uvb)6@J6*B<$J>C&ZlcXwaEcI`{SyTFeMyEq&sID{Ox
zI`hFvz=UTWW3S?S!HH#`4xLr$bCc)nX?x5wt5RdFi$}u+{<~%EkvAC{W<2HVJY=wC
z;Z}w@sehHG*Cie@;7EKw@7dzJ?fP-im2c-7?==xr<XIgkvNUsDw(|{Uhj+3!7u<fi
zcFk6^sJVB}x3W3-Z`bw6P7$gv?m4zN(L`=7yM}>-%lZ@*9+MA#4O|;|Tvol4s`$>d
zBK`Y;%JhH;r|*aBKXq)&R_AiBiQAUy#H-Hr<s2hRKmxaj#1nfZCc|GBqJ);87H}|D
zn#js{^nk3NXX}c#{||JZr%PDe=@BS#FS^_onSNOQL)q%IhX(~YPfSbwbd5uLr>j_3
zN00JvwWaSreaPM^c(kv<)xpJvW1=cglLCW^poR_iZwszH-y`);UkGz5e)6F4_3O3W
zr&nJ$+x4h*?{>zBY;G~Z6LW;QjP#sTvYVeyo%;H;_S!Ocu_XSWjU4yH<_It9n8kHp
zxas<iW2Wo+^I@50l1kP@ZU(8NQC>4wUCr8m|NQ4Y7w7zWZ2z+=X6<snegB*5UzAwA
zIa<t>!SG|PdHjF<|N8$w#s8cCe|^7<{l@C=Um7c;D?ha;vON48o>#J4nrGUDMQbN)
z^jY@dk?rf)WzQ5iP8dWK7i@Po5a>AlpmFxsxL=X?{Dr2P-BbwbX_vgvz>%>!ILq9P
zH$KtjaMAwbzaIyknxK_@XtU1k8#f}NqhFWpo;-Q-z2A#8w5E1_dwWdc;N03vOCQae
z#3JY_$elfF(lU<Kv)4xzg=mR>Tod>%a@x|&Re8#%?l$c1XgKvDjp4-Sn&RT(<YZ@d
z#lFWnr%N6Ois<U-`1tvSX^FnCotE0`*4$APuHsqbzU%<s)_=F>#Cxw#5}mZ-O>4)q
z=g-B(#YOjMEaW<>HX~Abwb$$!L6S=>rhMObF+;|t;=_?n;rDw!^Q|!Ra#_#$>ygfB
zzqwYW|Ni{ke!uqn>iEB}lGWuwhXBu=7ue?`z_O}dhczR0O8>mJUEXm!THH^o=r9BX
z_+*Q?hAx&joqKZAny9sDkzp%CLR3P}rCHjk-dK{N@qEsw2D_#&OK<N@D3O_@^0I7q
z*Q2TI5^W2Ujthf9qR7VYf9vc!4)Nc6!*|u}YEUJ|)+paX$!~Q@Nl95*tK!y|TgeLU
zyq$GiaoIr!j(vBk_fF|gVLN=l&P~9PgZ+-N<fLG>-Hs=mwT>~|y=~|($)cdaYRJ&k
z!@Rt2l9rK5Dc{4Hx(X=@i!WYpS@@M_XSwSu#$JIa;i^O?zo0c?1^+MI5$?Au`gyA;
zZi~=-ZuY{hyKcTRnSEC0t#WlXk9bV)q9teV)~&z$R#h@2DO7CYsc<j9BPTBWKc<>-
zMK!E|J10p+`SwE*K|?E_rQDwcgeB|tF&$XZ;K82D{+#>$ou|gUNmJX7or!ifN!TQ?
zNwBvyjfszmJFa9a*F^SD5>;E*N-oIP@M&4`!9tnQ=&`|{KsL4GD$BN9y?bl+ZaKz<
zIgD0M<&<(1jTUd$V^ElPdZ)(oIgUI$VXriln4`nq8KfLs*$}eGAi@3zOW^91<4%tZ
zHYFy+9MgO2`t@0(>*dNP3$ONmdv<!iPLN(#PxAzx2^)kTEZT5Q<Q(S$-o@vB9ZS={
z`Qpp<-IokFIIam<Bs1(4Fq+jM!_2Vw!nH_911|(LgAN*1{}ueg{&d@Mw!lD<sVinZ
zJ!c&9=*P?FcF!+b8QA|k>3{9|^@G0^xE>i~ZNGN^=T+(d-~T_`|Lghxm-}b@Tx`GY
z+Ty*F1#JE?e2Mlg%AaRfpS$?>oaiQnS4(EL97#GU)D=EUPm!xBietr<*)tmjdl?-V
zl_eH^bPS1(zs;ghyDD|<+!-@0^cy(dDE2MRTVMY7*H^#g%MY>VelzJjR=vLe=5dpm
zo7|k&zy7+*>gBc9U%i$JwIy!9-TPRAVcVvhvWh1X7cMcpS4h5DS!TDzk+Vr4P^4vP
z<pfS=Rp+UP#EuGv>|AVmD@7|`>9mn6%bxG2PoKV<w_T$vYwN6KE1Mj5rIo$CwH0(O
z?Ocrui+R>qTWH*Qy=(RZKLMHQuhP1El(U(5HY@S><eErLo;>;3j7!(U7H-k#y7FuL
z?YG~m_I7r5PD)yQ%Ct3Uv4&OIn~44Q|KIel+qGxU8p9`rYnOe95pca%E#0=W7_^Dw
z)2B~=%J*&FvgON-<bGXUUDv>p2L~FN+4)};@F$omg^T>!JFg+dXIeTBv(hn*T-|b3
zK}Oyc0!w+iTCUt*o^o(XL#(H(=GVMa375PhSKbR!Uobaz>*35xub0Oa@A-Z#>g?ft
zg^$~c%6be7WnMq5c%Pn@Ce?fF$PpHX6<5Ew_lQr=Umo5dwEoKb?nNDsx;S&T-(7hv
zdu!C&6BCv5|9qPMH*fnD{%K3+%UD$W$WKV%@@_d4p`gUT|JSO4g>_BC#|EaP7F`QA
zYn6op9sB_k-35%4;%-Ei>^R&z$Bmyiy<~S>ru2G8QI(~+hIt2t&q*{NxmPXVu!SW_
zcVmZy*g+fP;LwUUjfa=tv$^_y`N=fv4rl#HiA3|vaBb0(2UR0Q*cvw~&EqgLzkdDN
zZQ<Rs)@f*MWIdYBYQwRigF{H*QT{ArH>Cr7ErJJ_x+gFiu=P|hr61Yc;OHXadsL6V
zx<vYR-Lf2Ez2XUFEnXILnD!|DT6lPYnSQjj=OXK)9XkbAcV2Uw(QvtLy%5{Z;>4xz
zd}mlB@)$5MZg8%gz#t-b!&$)TU6TgGw*=mlzhOrw8AzMn6LfHKlzAqRB*FIc!RL$?
zQ{xzu@_!5mqvOr4s4LEzXn*Gx$LekG{NnakaK|w7uyCxCIOfqf;m{*DhMw<n9XwvT
zT|KO9GuE;8+t>W~GIR6Y?(4R$4~h~E8(gQcZA)_OnRsB<mie>2N*7O`vwz<n6MNg8
zyJx1_eQ4dvqI0MxBh}%<Bf;}?b60mh5VI5P&%XlNB)S$dD$ggTv@EmBjHAgwo9kT6
z+ItnxE}xf@p0M%%hwt_;zE-({7Lp3gSaQGa>C*Xv73V(h|8si3$f1)r{{57%6+0qY
z$yH$c_|R^pB?knn1e4c_u=2*R+ICn7HaBRfME4(<Vty`xQ`2*E+@x=leeBm}pFQ^F
zjgL&Upl9&>r<Lok?=E?HYN_{hxrzsjz8?aY9SECtT%dEuedpgBR|J}ir3QWZ{kLv^
z{qCp77qs4c_;=^*a97UVJ(n~X92}<wMSRIto^W;5vN?Zk&VQ}YPFy0bZ#?5F%aWTp
zVOpX~7xg@=yt{sv?3#<JYv)Y2=o8(n5&e2n*yFw70n09CO!3l_&6VAvz;R{9Gyi{2
z{Of)kmY-)^9mdF->b-KI5rc~7rPp80%*_1e+u0f#7XJM7^ykl?3LK!Vo$v3*uMCmu
zb=!P%&diybo_dofPd=MAxg+9l=P66pz#ONAmnLa0eq?l%%k)vy|CKL#@`CTShA1xO
zGpd}YeK&tfTd>?+cLUSKr`AmBTfTVtopnLsOBE(Alk)ZToqA+lf8xuR%U-K=DQ&&x
zc4T*<QN|O;y$qbw3M4Ks2-TB+JlV@b;0S~C!Ha4=Z13JGY1uhCB(k&%z0=V9qnIHZ
zeO-)2V1t3nthORK)l8$V3k@u<Jk}-%Ua}G0u+UWGfQzZcruy%no~5auuBv2eYhgQ`
zp&&0D;GgR9rfm1!yznKNYritFaf*6PY+Um~{$bit)xAz09urtRB61s8TUyxLbbc(%
z&~J*4FW;3H-_|^5&7{-C%k7mC9nB8!Q4!Lc(a3Xifx`*evfr-Pf6lqN`utwu6qAg-
z;%VEa<v1KO+L2Ob#HS%5BE%*cq0rs&Y4?vf<Kp*btK>~?8Le8jEA>~~{~MoF&V9ZU
z#qFRlFXF_56y1nfb0cTXjm%fg-fL6L8pW0KfY)mx^CnhDw!|+?Z|ipL*|zc8E19^g
zS-Q~<DqDI^$T3#B6dv3D{?ZOm`hE#b-_ySFPc)r+;+xARoz>Ugd<l8HQTX`($@Sm%
zXXNJX`T1<N?F19gFZT*-bDtia|F>oD{MoaAzDfVTK&Un4!IR|U&0cqJU%$V%LfLn>
zh)D-`!2?TkWidvjMY}3o9-C^Fs>~N<5ZE~Vi}l+Dci*jWpYQh5Oie8;f8Esed&=J4
zy1F{NU)FkBYUEO(?CJZ?o-B%q>N4$-s-Ln{Ut_<#@8_F4cS+AHI-Vgdu}pUL+Jv3e
z@(ib@eBfnRp`qzHNyRg(aBGZ;LCm+WRkcY;PLp>gx;*+=7~%TVWy%BZtx>rqQd7NH
z^H@2i7(Ch=A0MB;HR|){&s^y&jteIA%H;^O1&X}Awe_|1{U66}-MaPcS=#p7x!Z56
ziYz)K;#xnacyFA(=Opuc70#RIEY?_c{k4mUvGL~Y>+77``L4b$Wv$|qvDlD*-|niw
z({&oL(@Gx+2)b;t;XZ7@b?8#tvFi7G`X5Iuo_j@jd(50wnwK@TRlAlZWR=v|Nx7uW
zzR1kioL2hhw8jb{hbxkqCQ{to+*h+i+oCrA-n(Yo^m*~8maYoXI-6E}<y&=3`RapC
z243?7!u~NXYINe@X=LT#m9r~(u=jMh{@UC%<wC+?0?sUAZqCzm8h+TEU&||*xcF|=
z{fx@Eu0s=Iy|QL@ITv2lwX=Bq%k*f4w17j{{;D>W)9YjQ*VV4we9hC4YYp#ARvUq+
zw15D%3xXnwACvoKZkpcxaIE^h=aC7CY=VvsD!y4#e{FWLUi{7Rsw~3GEyH+wlM)NV
zw5AJfO$S=Pw>tAIVpz6(RXd-2#5<MO;_EhQui@2QXn5kxs{~&r2Z^vnCa14myFOXv
zVvH~UDgkH3o0FDJcdzSa`c#(jEV<lJ2DHd98?+ZMJH|TV)$4^_47|&}&inmWhodRK
z=JD&uX@6JOe_bC}{q$*e`1)0g*%@+ja{jzgx94LLZhg4<eC@W&r~BW`?#w!y_b&Rb
z&CY%Ac5DceVEE>d@pa`Ytz-fAwO<d+OuFJCF!92Y%=MRFZ`)nVkkD}R=TF<;d?vHc
zPJL=B@gn%n)6>(}$L>z!nWm_7+iFX{bMW7fnzcgf7BA^rrOLB#>3*pNa@KD?S8v}J
zazEDkTTpcPuhY|>bOZ*Sm)*WNYWb(VSNu}9Yz%L4iWfd!D06)AmD!UTi}vrjRAiXH
zdHuJ0?2Zd|8Oyd8%|E?HCiT=5vn{_48|^+N%F4jvSn%jbr+)2A?|Z+E)6dPZtKD_~
z{r9T9QES6C*=%tQZ}Scm>B@TP*0pHG_1B+2f6m|kw`^-vX#M=1J9n;JsTrG`sJiNE
z)@Lx_a$9k8!>_46{{GXg`#TaP(rzkDa{C{-Ofz#;xu(datqWg=)fZW>e6@JxC)v}o
z#phO@zWQRGMzVI-qLU|28t^=PoMpRCMUC~DNV)N`6_Vd}FeFsJ)>y)%Bj{){>+<6D
zADUD|BDfVEaPu?%PWpc@w%GXc$EU0JTy%Zz+u$^9W@C?`+nx;yf*adaJb(SQGY&Ag
z^7n3;rku^y9mfR==AQ|Y-d*&oNuhwJp+#hwUhV%oOUuv2?%Q@x%V103k$H29kFgv&
z@u<g9CI8@ApAfO>Vrk3Oc^9*~37JgWnULtr#_7u7`sY1gN9J1BWPyVsF$Ue@PHS2U
z3jXigem*X3`et^Q#E)9jwYlV37&p7CWcy50T^qK1{?i5qmyTn_jxI(AmfLYjz66zg
zzazk{@mmL-5|nhhlsxBLIN-F^q2uulfttUs<N2E$VlKY_zI$$1pomw^%Tnw6f6r~_
zoG??q`jIA6#4Jv`zfVrqJ$pKR`MP|yze;Nz8WNvG>}fDi=AHL*vq5!WN!pX2n_t~B
zEWhLbxorD%gBF(0#og_Eva@E--(T`l$XMKR{rdIuEsLKWYUS4ZzL59I*UdE!vD@4p
zx9^Qw93}TQIbZx`4)>9p7ys_O{q6K#sjq#yvTknWKbpT6h)fNRNK8o3S#*T=s<Y-V
zVb_UKuQYxc?~*R~ANAsrPx%-1H?~4A`BtaomuO90yio3jfzv6Chdiy8B?1f|yW{^P
zZN6Faa_RI(7IwA2zJTW}Qs+#*_3PT}QrE02Tv7M6&ld}NUjEW+eoulo<kTjgMCIpq
zo;-QN%y0AIgmS-+pI_FyinU?0=gqsfIsN>;+TU4QXU$sz8tGZPE<f+gxpQW-eeXui
zd;aRz8irn@C0-tdS3F)^PYZwhf@SLc)u#P&b(vO+Ux&H-tX=v3u+guAP_4TnQ&xs(
zsTNr3?Pz^(&~<J?hk}4Y-oqOi3=FkyE%R<l2usb&IrQkynUKYK)2<&iW^-^cIwSn~
zUZY~!gVxW7p3l3=c|_vyx*fgQAAi4_Q^g*}A#kAGXzRreD=uxbEh$Y`zxIBfzCJcG
z`@5=1;u)XT;$snR3Exs?9B{v;t9o`GJ4b`9A?ukQ2c9KNS_}+M-wthf`>XhL(9ZjZ
z%euF$tjSP3(89uzp<uMZz&y5FIsQol<0KJRHV#JtD>0L{y%mmZZ<hab%ietVWy8Ai
zcDW0iIbMa#U|g9EUUs<!wCwWO)@IY3w;ofEbrre<hKRWCzMOBi3N$D<p;n>|l&<y`
zi(O<hJI@{eLw?VPy$T%vw*UYA|8S@Jymh|UzU#NdSG<#S{Cvzh-9LWMr01Fo**P2q
zJOx~xH+j!G<1ow4U<zZvE|ytq9-J*JFYTROY+@K{U-IO|zFPLWZ=0u|+CAHEdGXUz
zQ?swH)78`K`?hp@z5TjP@w&=IUjJn!?7rRqc1m{b?!B&@>{I&RO-&4ZcUwd974x^v
zDR(qZI~#X;u?Ea!Us7A=$$R0uR({0HnJ@mCTw45T^(0OwmsblHoDpG76=9WV-RPx~
zEh2ltSv%1y*=O3atx<1ZE}wsIZ}oTOew$C1=l}b1H9X$7_?geN)GXn}`<ShiUrh^I
z86qNo@rTyY$Se1^r)=%;*c<0R>4;_d&rhkPt0Uv%zu&w5`fJwKRc6~gCkb4<x3}7V
zo=xSK7Z-2-v<&r|x=AP0^`O9ejnYtqC3aIQpEL7b^tkfn+|{>h=3KJheWx+-^Wwm&
z>l*jI7q0$PbMmuImy+p}o%gN38m@VpYu}V8AR=VYai~FI!5dBQwwvrHCNeT*T+?27
z)PgIRA#ua8s>Jt4gcv4lO^lOxzf@z-FAc>7JZCoNxy!x(ZcwwQTd>V+X9H8w>ouaT
zf@~8RZg@R8XtA(~clL~?HiL?Sq+S7|YPI*D=B0bdboE}f<TzN7w&}o%v_lTg`Lcgx
z1E;Oz?RQ$&k<lq}gj30BG2hoHRUQ+)-nsfY0-TE&I9D6*c64$4)D-!!h;gyl-Ixvz
z1;z<!Gw+&D1D9KK*MnCoyiHKtuuOB3s=y-~{fH)o3)_|#7#SLZc5olHEHD1~D|>&1
z>G_~ftPBDU6PMfnYL^dLeYHO7hjRa%8=LDB?=PzS_2lD@uu{AI1y8FUem-N(mE_&x
zapuj<gKG^ZEG=bIVw8|}ZB3DW`)z5qxmfx%DHiVCW%_S!tu2pG+i<HUZcoL>D=XuD
zeM}xjZ57FwqI>!H=KnkOO;>G`cq@APes1;0zmxQ*vaMVEo2R^Rmu9DKxlNqJB;P9m
zZiUB;HhAv8p76$iXR6c&-j6%`Ycn}F^}IXZ@X&}Q(yPTOkYVb74Rw#bQC{nOIUD-&
zR$YIc8hLHb42z;KFW%kV{r%nD-=OWHzu)cF*4ECP6}P|c@0**OXN504wBpjmFy={K
z6IQ3(U-5~9p~q0T*KO7^&-K%nuT)aI7FG7{(a+C?GTOJCT&}N+DXjc=ull{{y|d@f
zXA6Bkbm-8&+TVOK77OfjRD+f+J+=GOiv0Os=B_Jx;@v1A8O-N;^2J5Tiz;eMPex=X
zRxrK$^7Cu7ObDlon`1<h$@l90c6Oz=zk1CzI?>Q!z{RDc$TK5*+5rLO=PaVkti@N>
zxP9GmX+_B9E8Xc^+?LLi;}kd{Ao)7-m*=b{mfZ^+&oMScxO|=|>cRG}wq)v01DzR{
z=0rHxzpH5K<e22RiM3gLfdSuYUY<D)I%;AJhOO#O*%3u7{-SK>jP&QRCJ5Yox@Uue
zvc~H0l1qiJRd#tdeDAw9_iV}g6doUqgcAl<363HTV&|1OS_&C9PZpkh_LtlJ%8$Pc
zmrO4|-sIsi?VxtV{O6VX`BN4!DP>%_Aj=UEkbL63LBIU^)Av9%<^4_2Qf#SIqmJ$+
z6W+sK5^d8CHb-P{(qU&1<UIUgb^PB|8-C~id;R~_TJw88leYw}FWI&7^M$ut_Wj;|
zU(4oy{=f47$9J}}1~)oauPS_7vHk9+%3asaR=w`zU37wlVZyIDv5m)~lJ{^l6va(!
zba6SX+`K_)=j$(<W@~5vP0?KExHWFQxq8;wv}s>Dd;&%G#=ZaZ^Yi<?-|r>&+nO1g
z&P<&-OF?5}QqPH=Yi5~2Hy!#OC4CU&a(MSmPc<pXO;h_?SW&c_q^-QcQPs>vTU<07
zdoFIjaAA(oP4|})i}Q49=FfVrD|d4PTcPW*Lj^twFGQRV2ek!ywn_C~(cBrh^y`@;
zM_d9$-t3inCu3a(-uq$q`%NpixYgWqH#et))>DVAUOIVE%X9;t@bK{K*RPA7QBqnO
zBH|h-;wsT5rM*tTN1{!2!V<N8Z_9Rvt)9B>u$D{K)+m=NZ@-_E5?mR!+Pz=Sw(!xB
zhlksrKYPX}V_{%!zJ0?60T#z;shP8w8n$i=TRqj_Y*^P>_ooZHmD_GEX4!IS!j2<7
zB~!LJ%oKb*zdzb=^Mont=iJw@{+_GH=BVJv#F8K)7Idno_`p2@;}d5>itEy>c5O<#
z#Av|haEA4<g8YmVRiKk}BHKJz0t}c>$X-8nWBcP~Z?<^v8EF$f$Ik2ddnNT8S0tB`
zKHG(c2uFbgMkR%V4UKDA;x_4Mcb(DveOT+?!KRK^I!_#*gc;xNujFhJZ*1Hx&&0(Q
zZ6wi<oN+DtY}MM?Te}~sr_FliqR64S?9rU*cT!omTJ5ciY7um0Wa4dl8hN1kfnWNq
z{_L2?yVgS%lgR44-}{|a$Tg5b;oNhD7KU?;yLd7-8=9JeN;lUVfBXO6|Nrpm^thbz
zUkm}fzLS1m-TL)??eqM|5BpbKmH&U`Bh$kNGBwX$s%K4opuT?3#h2oDw>&-|o!qq~
z|FFU;m%k>L*9i(T21G<m5SXY_{7`oL?!A}O&)I%_G4W=UOv_Z^<MRLSJh%IPh+AJG
z`IFA(W9!zhuX`PRzv|!5=jCtXw7Qh~l6ea{7kLyHZ(q9Q&pjp6#S2e7<=_7Ivl!Qb
z+N|Sw$78%A7XGRH`S)&ykwH$acc$mgLf$W)mqVudE{+bfa(l_VD1rC$-<P#pmg@hF
z7s=&pTJS)rXHj4g7ms@Q%NJcHn!d}HY@8zD_;SYT+iQ*(GR#n%Vr*+{Y-_t#%%I=)
z+YR|Y2jw$LezkIogO(rWZJ(^N6S4t6YHirkAWh$T*OV*9tut@GEmQ4@iK}?O`syl2
zA)~2o#omFbJ2beOT^hJPGVnWXTC?@_>(}<bZ=Qc-VORC#MRLFGw^sd{haVmuUR8Zb
z`O=e@7Jbocr^U_nVo7m-zSQK-#XwmdUBTybmIZ5eALrR=Y~`!9Eoia)U5?WYm&4bc
z>CegRy`?)f%1l3J?b**UPm}-F#jEDX-;Dd)ckM-j5x=~qg5WKsmu_35CVrdPG~vS2
z$jyQC=VZjh?G`jUq;uN!Y^|esv#3d2js4l%bK?XUnKvwOG-+#*HEzGg^KoCl@`~>t
zH5s*xuWwJSHZB%%-D_eRcsJF?(2y~uS>Y5{;&COXhLj$K4hG4?uIDo4SPE~wHDnfX
z;0U|WJz=3D)9Vfofk?IsJv>44CG4{DPTY;jaeLpy!qDPsFYYR_hl8nuF@Fz(<cjOB
zcidxaFyQH4<e<X%>E89#S9`yHJL95TUb|J)ds2$hny!WlgK0A+wC5R>`#hIB+ad+(
zxb6mTPk(%CrBi}bO0H7&t7jA9<XO~CGcX)7(6~{pzj^cK_+OtspLo>uX8Qg=soQUR
z7yGj$CYVRR*8g+2eDRK7=l^g1|25t2dk9-WLipAs|1XnG3g5@a-P4%F*D{e+O@L`z
zOVbm^J>qOECMF5y9{UTfYP?hXxmEh~YiZfY9(DEC?($V1cAl?$_x|6z_n&OsmEQi<
zi`h}|@zK$}zrU}v-1u$&uTWOm@6{#8OXXLYu(c^ZU;5=pXwD*@3N2Yrfxz4U0;3oG
z-ul0MiK*bkO`k-o0^<CC_BP2bo#MH0Y2d<O$*Unz2SoPD@qF%?vGexJmc)qFSD!t5
z#_;jOMCD!l+UEIjdnyclFWa1-K7IQ6dA7ITe|KGSH}C$ALgmv&ws$X?#DanEq$3Ku
zY6LznDOqyqu!o?`(%u*A+9awbDsV~nw%vP?pOf>Y%J%)=udlC9pFaKe+ixc)tMkj*
z?8v^pPNVCS&2<@#?6pkmmoi^;H#WU}=&o0HYN>^uZKs#~%tabk#Ms?j{J&>s-d*b@
z6*cd9<}9tE^8Mwn%9lwvv`I-{xvI#bq~UXbC4skPnt-6|<SnH;1P?T~#VS|2v3+4U
zbYRzkC*Qs|_RszC_HlUE(H!R#0hc|^jhiJToYgwk@U|8#aAZ;x5K3ed@K<PXI;K>x
z{qn0V3LFefvi0^iRPIdLR+fG7_|2&^89CZnlo$j)a6CA`5W%FOUm~Kgpl(}*`r-MD
z4U9IIpE=Vc*6!J=q+_w89X#OSxfarzD_Gc&v%lTrvQ1yI(wpy-m3(^)14Z84+WPu*
z{g0YJk;1M29?SpVaNC!sp;*tPtTy-Q{Xbv->z5xra^=aRb$2ftUv>80`1_0Ty(0(L
z`^E37ntGIdBBS>qxf=^*3kp~!a<q2Xc5L8KxT*4TZBEXen8?>M^X79syf9H&UH*TF
z%=KMs%S1wBCNdtlx;i|*=Ht<uKX*Pp-k&Wl(zej<=k@is<=p$<rq#)>YKdY{;Arw%
zx=5jQ)}$42D}5Fgom-l@D$#lIv*X{zr%1+bkDlh>+}8T8On@bI+m=nqTPDh7tZz$N
z`pI;0oaIt0AK7A48xO;|b^F&V>9^WwO+EFv-+tXQ&3ijdd{<x9651NQR{rk`_q}oc
zsm;>T(&^{sSl0im*?qTd;RJW(y3#qNzg^=jzRlXPW|7C;bkpyQ3`g}%mel0tzMUE#
zXIcF0jQ09HpV;d^fKkDN1B_dzUfdk*8uT>eoypUbD+}CJ^M76A;@9NlZu=2#Da%#-
zVgg^;rkY9rH|`YRJ(K4$N#*6&DtX4YFUr^1xy)aA-poNlkaxqpjHUxqFB}WZnCNhw
zE!x0|<(I$0;f6DBT5LB5uRAE~Ai1_bfAxN6(^s0x<(A*9|IL}`A;IuP+j#P!cPz&o
zB03LwEzwu`qH*HT2{}Ozn<f^Hwh4Pm%%W$%o-G{g%fZ2!@Pc(o1k1t>h3T2KOJ{I8
zHZc5L?4U6rUp$bvC${aq9>cDp2@-6dA{=5DX;d+<kc(hA5O+aHfN_Fjblofk2F@4h
zUX|UhQaen(Tnqd>@1V$w-KPrFx4-@R;JLNE9e7zxY%ge6Pd2-^w5g*?;<2^ArS}Gx
zpR<0xWi2Sjer`Rwbp8LI^Jf~I*!1S<^!Rrr)h!0Lwlh;)S6}{nuYCXI43mFP&j0)L
zGJRgIPYZilxLvzHqtut5r+&FTV|B3E+`;~lp{1kAjpar&2UCzh7}rVGfCjzz-DMvi
zO}T4qFFN~YY`41o*CVgj|22B~?aRA^&yRBJ?<sh2pi$Yq??_>c7WWjj;Hrst-ZRQw
zcaK`So}IxZFl24m)`$ALQ}-^s(zi>4tCUI4GVJ^Hr{!C=z1-<#9(Gk@<x+1>6-|vu
zqwEA0mxgFZ&!>(Wj&AM@3?YA)JBIwacW-Ci{`Y&gJ1U$pk_i=b6jZ8uHZy&bPVlGh
z;=J10+T2{<nMN*G-j?03|Nl4p`Z~=+MURj5hR4^29(7mEQd4pWS$}=^-+6wFf~K>5
zZKs!Jottl8|M*z%)TvXiUcCw$r#s#+pKmr>tLjqsr56j|mQ3}|xDx4>xDR}S?P=SK
zd$e56eBN_p=a=m@>e?56cQaSL=M)gUY!bR4m*-SX0dFyLqaaJmL`M%c8!@L12O3u7
zDDyQbtYTqfj67hh5TW9*eW?ax663c6JUR+bKQ}*Qb@=amfFYUf@_PMaZ&y!mU~FmN
zylC9vAaYczPUJ%a-^88@1{cAkehoH8MwXiO*R#ua|8(J<5U_H}t4wZ(g74k^i&UIG
zDE4&yH$47p_P@ph2Qt{%1K(9~IIwi-D=Tg0P+ln5rm#VkgHL%@(lo~w;X}ID^^PfW
z8H3MW0S}e!zrJ<xUpA&g9WhB?!nb-&NzHs#vp23^N6mBEvP_xdOaW_6?SAh(FYY?=
z$xUzj>OdDWb8}f|8TYwod+YyR|KD{YO#5T9`ur89Z~ocd@a`|1xA)(*mEPB<8S5_#
zTHO*DWFXmmtmDCftVW)RoIb2`_!r&qEd2F%^KWsr@A_vs4;(u5$b8?w=c~=b@BO?Q
zeJyBd(8;bpz2@~l?^VBFyJn5aY~S3lUc;$guF+>N?uxD2;QaMtCBwh!Xw}7zho_1x
zkv?j1YRx*G(^KXKE|bc4wY&JYF>PC-;ZpbYTd!G%ztiRMO<`ET;}N9f$$7S?i9^-e
zZNJu(1)r3b&d~h2?D9(u*<(@Cu7MJ+f8+coPBBuM-SMioZR@tU^{eaDc@EoFe}DB(
zQ{(c>l5cNr7C%15`}KQlTwL9chwbKOW|vGt@89q3?XBBCKP7Tn>fJhh-{8BTF*XxV
zq4%{*gJ#Z~ckc6_x7+XEyK&>hXPdsq?((%JJcq+pFTJw-;+8ja=S}~_WOQoh<-^w(
zUeLTCQ}{P@-t)V8+yA8RoWD5Y(qC4_)0Uy$X|g{JHH?Fz^%SFm>^>j=#L9Hymw#fj
zgn_sNo1mluM^D;~!)BNDN*ENJ|Fk;Rc;+au*w1TvyL8RWz_>GSWhC7$DeCQX<7hf`
zO`$=d`lF81RD+Jk5l4&-n3b87g*RlK3Si)jJYrljxlZ3(rpsI*>3}hlf<l(qwqI7-
zzFr>T-Y>I_Thz<$HOE|k66@10nHlmuEnvz8R;7kT_1U@-N^C+V4JVooJz!ySU`lz<
zls%JMP|;{{B%>133FjIa$BgcI%{=Aa?U1%qBy?m}YyNfK-MoSVd#@WFi*R@@!#TB1
zV6NZ!sNLDu-`W5EynoHH((Jd|_Vt>c#%u+(;^D8?Zv9&S<KTB!6@woy&)bMH+Z3!2
zy0F~E!uPVbdETx&M+!|fB?39uzi?#fIH1tPE`LKo;oVp3^mFUyR=j8^=1Ew#Y?<BX
zndkpJ_+9_~UiJH(Hr|t1TrZi_|NVNs{$qFinRDm-{QR=sukFA2^&nqQ;H3MTwFJ3p
zmxa%oF{RFM*BR3-7QVq#^{4JL-Zk;}i<Onuzmq3qiG=>z8@K;{c+9e%mDi5XzV!`!
zVi%k8Kd;4sAHDoI4+rc`IAkE>tF6uGdo*cJvFD@}8$9HDwTx9yZ_+t!lIQt0Gvx1*
zE7H$n?qo0&Z@yXcWTHEtyxp2fhOMPjS|@@|{sP?>wLW(DwoTj0ic6nfTIxMrKR$13
z)VZBD=eIV8T6-q@Y>j$bwp(03?$5>kIuX~4Po6wk=-eKXx9oW6rvSTCmQr6ot_)ip
z92{(QNOjASg3xKHuO=DqVmckExBuSssmqo=@3vF)pS0v|-s+2AYws+*->Frb!XVke
z!pgwvDA2j)c~b|=LF3hDgKr+0wC&)dM%zmY^`51Q3ek334=>s{`%L?Kp^1&U2m6#6
zS=f#^Mu>SNEWDU;<#p+%w$F!z`D+4OTwNL*H5)tp{zR?bd+(h{2W!)>69OGgGK>Cb
z2r{^FZu6g@uy{uQ^(}@Cmr_i!y}VK`Dr7_~<lvHIC}KLaV7}D7-(D%*Th8mLuV8Wz
zU^%AHxZy|tb;Z8yn8&wHN;Mljmb&gY&0qn8Ku%%dM1e0iw{A7_z1&nQ;_4`{B=Z$Z
zR^b!wnX~5oyYqa1!K=C3*T+Z4#l`tuHaQ!V)~EIGW^uaJUcJr2!ge*EHfFK#%XF=&
zz1E_*_t&qhS9^6%cj!#_pM6ow>hOWq;$vN(<r*i|mHm7*^|QF1iJV;&@7aHUf6G_D
z*;szB^7)~e-{%&)9g(O3-TL!=?|WIxq9-%c=Ux1^USxTW>?4WkKliR&tA2?Aw9QAv
zb*fkD71yOchu(dynmv1V<-F;9J5o=5`fJD65WTmKal!T1TW{yOYA3X8T6kKHVcGKK
z%a<*i;^@pAep+|&{Yf_$cDQB!UCq%Xl>W&kymd-j9DCx8*JbX;^SsY^=O&3%X$a0&
z;HcU=?_Frb$}6*c6U79#E?H?Rbu5Y@;@0NpA1*GQ>$m*!%M{nTmzS1akFN*arnIZ#
z<D*xvvZkeOjmpi+TBXqyw_e;eaBtlAd-JW!-~GP-|KGpAzs1GGL=?3yuM~;>m9dQ3
z?PQn>!-Wi!wDk0~TmRO@3oaF^_nefHo4fXI-r)(^!F&pL#KP<4!)L9V8Mb=swr$tm
zf45iT+Sl)V_pWeD=zS&wubGYlOe%~*rA<;*mQ&M>_;*yqS^tT?xBAcX_d(}A9bYHW
zk*B_#XGX~}fumx})E=EoQ|4Lwx{`U`1*1<6JDE8c;*PXk6Mc8=)T^ymuQE;GytHQp
zYsLgehE~UbgF6^|;<V1P9WrLRS=h(J)G)<s`$Y5W&HMh^EPI%H?}4+60IR?a=UL14
z#yy&&%q8i;a8cr855pr%h2S3x>m?IJTB5H-aTt8++_^MilHjzNIq7rmzB2;XmyhG2
z1(?v&pIQ>epE~Xdlvv3o`|J(79Q|!!sfJqS#i;u)%630Lw{QOQyt=}Nr>1IWP77Pa
z)%`tgPVwn*{rcbbe|QD|itqmC-#c@so2=ZO^b>R5e6QYn{a!@w*TXvkJJKB;Ok6xv
zdUPJ`Ek6{qqciHPch%Ehx7OdQtiS%~Ph)H6%9}5R`{&kty&Aqgey`5FZX5N9vsY`c
z-}~*?%gf8<Yd#!Q;1D=EW5LCY74Oq3EiCph@5`Tg{_!u5RUv<0l&rp<zcuRVLTe!&
z<pVP<eJ_7Y^PcW?Ghe$utzdnn{kQo2lD%<GF5mXuf3JPhW#I&)3{D1-DVZixy>8B#
zYESQLNreWbP3dA{h@2+sx=<jrGeYyfYi{|LD-CXzI;t~5nUt2kUi*vhg`R8RlAm9!
zZbeSh%vyZx@To^LXU@F2HCx<x_JMgem7gBA%h!Fq8XjNw^C{?7yjNFOM^0P$&WGLc
zrq$lK_ph$5w*T{xA9PctzMftmlcA%)oplj+7D`n-Y7pRwsn(u)>d286uIZ;-%I1ns
z)&KgtR`QqRRD;NuUcr6OYa?<Q9!2t6b}xESVzo9*+xIemf70V?o4-YO*=vU1{G_yj
zcdldO?LSU4CfankGAS^9IdCQ~L(iGT;}8=cqstx!!H5HmX)F^HUPv}azmd?J9otr@
z@U2~&)t7<ow16Z_!_~5D63vWGd)dBbEluL>691@jgn@@EkYRG7|HQQ-mHRebjJlii
z)Prxq`xw(r%_npi1>FL5*jOX-cw>W<XUp1!>=OO7<L&iD0-V(XLP;zlVQ&N)dp9&V
zG74x&RAo*~vrBhSQT2^ZU@_F_P@T1A+j}*R9>;*IvP@h|4HuL3ZBy+uuQwF-X2(Q>
z#?-!cuDbp6)h*{&Yi;gG32phjQb}!%+o3tncNX(aT)S1_T(x}oYK8}U-4n8Ts`Wly
zsq9?z;?mD<(An|+^}jA(UhaQ?N8#gVXJ_wK5p7WME{$hqDg62D)Ykn!um4y6^~nBb
z{NLyO^{+TpDl*C&=KtTKziIpVxP3QYsr|J{=UVM6?b`ZzXL*B6+d}<GS3GqZd8J?9
z{j>J6c)y(OuIxl5r;2~8>ua8Vdg}dLe~xXj6vHBeb93y=|2-<-|GS*u=EDKw^EOxW
zazh?loDNRzQ83u7C>-%fsoXU$_W_%^fBB5*)y4}BuPZfq?<O0X?|=B>xia<V-@mVu
zQ0Z`b9up@bx`N@rySuy9)zr+co13^=8ng-i-h1!PnI5k6nuh@j-kUYL0uG4xt&v>j
zc_(Rl_m0O#O&VRBbeb0~&-ctZxhW?#H8nTaH$K?O_?+e034DhOva(iP%y>~&6rQ0K
zu>bz{Ys)f)j(=3pm0qI3r7z>6$RKi0P*CdAnR7oGc~VY9El%)y$HlNAalzr}C>N%M
z3>M!Q8rr@%8Y-o^@-d|J{!@%(W=NDUD4vzxB~Y2D&usrJOV#e<i;p{J-n8}JtuA#|
zJg(y5v$M1J6(}T4h>6?sIZU<Z(TYv`c71#HI{(k7tJmk%e!KbdWoGHkw_mFYWe%@+
zz|GFzpLwKxlgTwr{Z&tAT6Fcl5X&o#lKpdJvz1)8p<0KN$ce5!^VNRyy@|IepXMmS
zxB6(|{K&VelT6;0T7~PydR5u7bu98YI9=!Tp6{<7FK%;m4ZKsw`Ac`*|Lt!+p9l(7
zyVAhH7V)U+oTWD#qqFpydwX`){QdRpmz(aozOF+*^wvpKOkcM7PWx}B?0dH-O?>{-
zYM#X<24N=dDQ!jyDlM(gFSO{r4rD!I&3>&r`G8IN*HsPYZGS6lkZj)>p?stz!^6g?
zqnJTZf`L(Pi7BVCu>vO-v(dYn<^Mmf-u+bXuHo#?HZ^^YH5a{^p6uA*xU}HF%;qj$
zo+Dzb7~2?ny_Vkf%@GjikqG&;=0hKk8*6vEw!pgWzryp^_?U~gFu7$n9Z1*Q-2Ldp
z)5>|vueurQaxpM%?D26jIG`P={x;9fV)5_#-O1<jjf|9U?@6uHU}2W}%X%WEhtcHF
z5xy2dM;#@{a~E`fyt=h4xog(eMf2N^v4kzqn4_(gxMAZ)!SGjXJLacdbxY1tJ9NnU
zK0gmvlemKui_1-+Z@pIk9_3CKxLf>(gQxtM>AJ$ZyFrbUUoKN`X;0xlz_=i1UEcRe
z4Rfd8Q#pBH{-GNe1UfwCJ<r;HF~`hTM)hyqtS?ih#jEUnU-$gB{@y>`;qkR!|NQ(M
zzCK2Cd+^GTJ>T~gq=d}ZseJeQ?b-J=pYJdAd_Mng_y0Ffg3q&DeKm3KNBO#cmJRbo
z-_P@$v_vDuBf*pF;~Op|rsM`4smaC_YR!(?ntCyNE1x`AxHL03+oj*OuIT^2zt7L@
z<7ePW@_DfL|HuCNnhyu&wfD)a30r;lni}gg*5(X>2BsvQ23MiyGs?oA?)9}awX#!9
zcZ^^BXYt0M2lv8mR%Y!=muNeiR$NwAmYi$bm)yK!P9JDEZ-2?dLsPZGFPVhOb}7l;
z+WKm3(#`YrChE#Omih)?v~O<eXT6`dJ^$XGn=ebe(ys+APFdUgIO6kuMg<NglPM~m
zCvOF?OP*bE?a8uBJGSqUnd)rL<@&eG)GB6ay6?$%lC`}>1p<YMiHd#6PxsXP|9$_u
z!D5ZBkOfPQTNoN%%-ar{w7I*x{QS9duPQ}cFXks|7rRfs%Wv@{Fs0qGpkry+Yt!TV
zZsutH_h`Qul|8{p`pb^%ufOiP`wn!|#Pa2)Prclk-9CKpKOmMqMK^TQ$uD<BC$0}$
zot>Q>zAi@7zVqM2ubdg%L_&f-H9wGD;&bcIWQNz>6B%<dWt|Vr;y%NmprYi~(8_At
zooMLOsL1RPcY!a#vG+)#h!~@Y94l96hrOZ95?KwQG?lX=i=vl0n{`}hd+=$IhQ^j@
z3!*yJvaVLCp1OQS$udo!ZRU(MoNM%pj>}!#bRlhZ^}|b7TW`+1S#^RT^4%w$?J5o_
z&Zi&kInAEmyer}gPsG-T@&_wFI9i+&@Ra!_v@wF2WrgHJ0V$=|EJ5sluPp83HeA@z
z;jVv7!XYg&AuzlmVPl|&OH0Fw{5Kp-Y-)k8ljWA{gU+jX08PBxB(vP2t3tC*Gb(Rm
zm5&tdV>~Do^0vSHoKk~gnp&a&A1~vL-ripGdliqbhR6SXX1@RDH|zIbfB)6!Vqg$h
zeKl*|^USb}qQ(jit;7aC!N(S9^Y{Py)O}p8^2L#j?ytYDVz8-MG4t8{u17z<mY>^G
z|1j!aKBJ<AqKou|hV9dOj=U*m5o#&ZuYP~#=w0vb%fao+Ey>5_e=oNGd0G1U`hTy^
znr}7{<!MsbQS$Oq`M%F{&)fZedA{b`&J{unH~v*IKE|<la??!a>;qBfb56X`2u_Qh
zTD$TY`}BQsr)D+I_3!;ztL-W_rI~@DQ0Dx(bLY;U-TV8S_0qp<FZoYWxq0W#of|g-
z(z>cnO)*o=*tRFrP14`Gwn~d3Fivbvu~b8DPvB|(Q09XIXRh82p4H<fo4H_;9G{X_
z+QNAOUULHfC+D7XZ*JUn)n2GkDs{mDj)=%dF3sW{8Y(Hx2}MPpZfs1hoR^=M_wTU%
zALmIbTcg&Vsne3}18t*ze7xWO@0ZI)A^e(aHZT6XiFcjWe@Pa{y>atr&(1cRovpoE
zO2<~JaO$#`$BrFq<rcRyHBVo2cG8|JhA%g)X1^x;)cgB~1#aO+eJlQSX!JdfTfcqJ
zo|>1JmiG4Y+M3!)&7S8Uch@fY_TsEIQya&O*D(wNjA;(`KRRw5yZ6i1<%7LVF-yBl
z#Ga{(4?46s9BVK<CXuAnB#^KvGJekd-4|cQM`pTy-Sxer;c&E(kb;AOqlZk+7OV7g
z^XxaIXWqZFi1mZzB+eezgliJY&t)cEJuTSl@twmiZvMLt4~-5MrZYMnZ9K-$=Urmi
z_4i2idZAqh*#)E=4=S#EGKX7W)m1MEHjadCdg_NCi%Q(k0?i%%YPt5~TtdwJ6_@0k
zZ}(gZ6%qW(`ReWY{PJH9ZIoUvj(Ts~k)GBqas1-~&kuIzKXZ%g{r#YB|F8f5NBe!B
zPH9U^OP@1j5OFan*;;U}kz*zULzBXc_!+l%m%ra<TP-e@zG|W9#HB}DZQin3JZEHT
zn9P4Rvf9bTYVNtMTm3F(H?D0_+tT70HbbLhk%m84LZQ=J6Wj8izYbZa`^~fH5nI*!
zZ2JCBe_A)E->dyS_YiN73eTmZ#n1oW-T!y{ZZUDcnpd4VXW6!h@XuqEVP@FKezo`g
zAD!vjA1rq8dHHR}+wjM`+C!`EYe_2hJ>I!<=gE_vZ>KRQmn3S(yPZ^Cy?XW9v%XUg
zOnEXf*XVG+k?QiErc2u*H{Y8a_y5<|*V@|JtIBRJ>(4fk^7i)rS`}-}(i@?5)vziz
z@cd&F->?29n}2DS_6D9<%)*@~-*Uf1%&pz;@ytEnpRyJdY-n&4sCeJH^KM@F>Z|JW
zDjpqb<p%9p|M~g3_klxEw_lcQ(wRMD#*V_r$4;H{nxs;=HtLe?zlncewWm0}+`Zw$
zi>14RR-QR`PES|&?w*ZvQX?lmSN#^gHf$#7itG3L|Npx@|DQ>}gu!&PGvz6-?|lBY
zJLbk>_8>c+6Pw;#4UgYj_}J~_gWcQTgNE^V*S0)h&5z7nEPVFNz0KcK*yf9G@-0~Y
z(DD248Fu@Yn(!Xe-7fDIkhZ40uYo~for~N7<}0f{?%P{^PB%X#JTFXL&7+~^N`;$?
zgMMv_X3yn4<sV;d)i%$YXR|GWVL``M#ej*+Bu_X@J+tbFV8cSK=Z~LVwfU2x@?N$=
z-NEHp^~=rvvU%HnuMIn0-7hv%vSH2!aW@r(=3`Mt2kf|-S9YGPiZN9^q|MTz(8Scy
zbHG_vY{3O}hXWR%8z#W3!0ZA;Fa2O|n|MZQ`JycDwHKqG%jUCQR8Xqc=sL9fj)btA
zU=+7PkO=rZ=by*6|9iZB|M$J`=i1lLi)>jKw6XHtCmZ$!cd8w_R&7<EUsH7dAM+~5
z8M9~K-kkpZ(4U&cVxpP(zy6=UH{bqrX>8`A8&TQsjh|FJXZ&m<z~V9Ck;25FObyYc
zld@jCTDR`{-Sc<zZm+*BsDFsByyfqq|82@|zAL@icDGKp?&F=e@1D;JQJv})s?(|D
z$|d92pwJ=to$33dKFhh8@3;Ore9FcnhCzq#fr8fbBhsCFDvi(IOrJkFz4o{CvEw|E
z@4L?(bIZ-KabRfpdt3dIF#pqY`#+vL+WK^B+_lyKnTFG!FHGW8I_{KU#P(swrB`$J
zZ>snh^?Ko7UuT2;wco?{{o1;}`d_|Y{GKbm#)9&$2cJDV=3n>ey1Jjt?AvDYE`@sy
z-HsV_Y~pE=<zR7q@Z+8zJAc-kt&-Aq1y!#X@pL?_`+dFO=I3Ay*~Da@X{nY8d*kkJ
z%f0>NNs6Y}YwcTX`uhqWADd~M{_Od4`MMtugB}UCCE6YM{Vwj&za`uE-~Y*fX(Gb`
zOHf((@KCFE_&SZNOMNz9yR_g%+UCyYy!+MhD?>Jcwj*BfkWD`G<448z+q_K+zBrj3
zGm+|@wEgSH@W<Z0Ja;N(gP*uMPJ77zsWmt}!8WTmZS%#PclSU?h2QP&?)Kuol)S1+
zd#UN#wQF_t^xoat9Gx3uR~L27_Nq^P{?v0i$;rvp-{0-6`FLq<^!8tDXXed}jI;qQ
zclr7Gd8zf)<LRfD+)|2c^>3J5%6>#``~CQdo8s1g-#q_sPHCyAVC=)T-b?OZ3%fcz
z@;)m))Vp=}L#wN0)tOpZnMC<AR!2br#-Ao)B6Uw+`#lt5G+^F%o_l_!i6SHO6V@xq
zo9o}d3qQAq{g9o01Cx@Io506=i#ymI1es1rP7k}TAG5FS;jMpvjlVibbnZ!hUz2d+
zMu1D3hT)nJ*`sPN<P4wBcjS%l;(mTaG*Kc*;EB)9cBhQQ%+%7_;InT<=ZYu3XJwGM
z@a^yWE{m?T<?6>@@xC#hB)|~xYu|N_?X@)$@5>Ig>E5$a_B*@6?W=aUazI*0{0gqa
z0kefKNUvvf2)^`tdqiN}rMn8<Er}UE3;ZUp%4YaD_w2Q;+1EjLSA!-G?f>57_CCFu
zAz-!J-MBCjzkJ7S?{5TV_xbvs2kmQ)|Nkss&blt?{k^?`svN%ezZ;x)tdV0=+q6uh
zW>UJ;K3%5Ap%q^q?p$$;<B*2^*Kb#!nikI7culCQBAF+$If<oJfP4DAnEby_()IoQ
zYO0^B969@9<?{JI|GocnZ~yQ5fA`I;W1Ui1&KG=rbtwMN(fFQT-<sdM@8|Xj8XGH5
zR8%_tMAGBJNA>Lc25W9<>`fNf7`670!x6(b*2YSwZEjo&_Iw+=_j{qt`Sa)B-`MDU
zu{UV0i0eeHq_D8Cb8{?<UtCxy+;6jJ|E2GmD+La_?N7b(Q9b-{58K_k?6=2`9a|f{
zT}(_YEG#T!;u5j7vlcwrD=#m9e|vuX(x8b4?`yS8Q~}+bzA|{Zn3&inn|!m`OPfWF
z!?mW~ym=Em7iVK=cu{^=f4a%Or~Iew^&if-#I<~jX``Zs?|(~k^YSMrCVqZ?USC&t
zrNZjVFEiF%UK_o=W5wM((6;W}+3UkrpWA8CXP@)y(%q1){2U&NNiP}Jo;N6#X#4%`
zZFTOOt4EI>y%42Tbk5k=NZfVfzJ2T7%=`JXQktzcS?ZbNXXWUGI}guS1$=(n_g7S6
zUUH&D+3vfbPR_AIPBO<e)#pb|xhlS`WR9TV#R(TD3%;A=Jnj6Hou6C-EAlTU{oJIx
zXlLNEv%jy4X-)jX+;M<K(5RX%E#O$rVm9k-=ErCErtO`zob%`jrW7Y9A;B$djW;a$
zQ#4+rzI>X^y?)=%Z+F7yORR5kI&|-b0+%zh(m7EFH`{10mo^uPM2r5H!Lseu@%}7V
zuJ}!8?BNvbW%nzp&wY3-ZM7^5V>=^9WcMM3mY5x%`a<@sZu@$3<;l)8X4VO;E*y=n
zY;8skhgQ@mI==XQ`i}TCA(j-W)a3rGko``kOsQ^PTeV_^+Zy|w14SaI@&0z<F>joI
z=$lC2;;f?#X_@}Lb;98#)^E+@tN&iTUiWjc{QoDt=J#HF`{X5K5Tt&R<$zMC_Q!8?
zt>x-pY4_VyeOlP=FJo1-<(`D}>>L)cApUbJ@7gb5ZGY%xz1l5g?F<uMYw660&WR2@
z5zN+QVg29xa=+MIZv9$zU3eld*YUWBhBaH6e6BGCYHP+-{{1r1nLVrj-RzYI`(lgt
z|J}X6{?(P0dGDX*EkAnZs@DvapV{m8Udu39mbOg3`cbAra7D^Qi!P4?Pg@)I&u4tv
zEcG@hWYIZCFE@?F-KM1xkLyHd|6a4GVE>AxdU64b*}B&J49UsK*5&W+>@0qM>C&Xr
zpM}`2s@b33RDQqq`=6hmGbb@LYz<p!qO+a(qF2G&%Z#aAivo<gcO9;HA08flevakl
z9Xn2(>2*6CwK_}rZj|86Idkr8PVfH}+Ss;Cah0U+tYx5~!TWW;bH7$x@(-+^_VMG#
z#qRxPQoVnFf4^`0-(D&*xw~Lx%^uc<2F9#TX76V@r)OBc{5q%j^XJd(d@?g;%!r7H
z2#8MNeG;~7W)*Y!?%2?xyXT{R|IL=Lk$qQpzka{higj~DqXI=_EsIj}^4`6<x%t=(
zoAZJPBo-e_JT_zM)TzPC{cJxT5#Ignjo#vY595-S`oDM-pLMy%@IY<qoV?qgK7Cpl
zynNd9>E>o;CPB8RH%(lA#$8+RMYJlf-VYN2gS%~-?Q%TA$Gx;9mA=Z>u?oJpJ~Q~|
zLE|bD4(?w&cn&snAM{Yk>FC+|CL-qH(Uxf^oX#J7_qN!&{7meQJsxjnww{PE;$sk8
zYj|#=_!dW<H+gHe`OV*5ka2w*=$!R6ip3g18x(#!O}OHpRxl^;IRDS{XBP(RYo_rv
z9T2uW|G-h_>6z@c@4iZVul1Ym<8ZA?{n)D6JX}(V`bsQKk5(_7J9o|;Ir-r839Z=;
zzxExI67V~~aG;7qz`@J+rtI;Oki}A0*C+M9<8k}ix@wWenypgByEkqu{P^f7Xfov2
z*VkL4)|O2CamCC{V9((lVXogIZ*?zDSQB^pQc7jz&tF$hgU-o*ymtHKGs+CN7-ml7
zVLFq4yY9=vcKOOTAJgak?N#6Z>CBaq!^|8F>=ExBmp}h(^S;DtuSxO(zc_}5^Tmnb
zoNE;MdOKHz3ask!y)x_KH`&SRm)eW<)AeKSWt1~Zf4QV`-ud|)Lq=`xuoKl2;_5!0
z`ug)_=c|2%`41kt%l}_{|KGn$YquINzh4k3X#UD`QhC%`P%qa0|MUMfzuxS26nW0a
z^;|1ZwQG@*_h%DhvG<*)Z4M;Lzk9Ov=k{x9k<0E0SATzZ7jp8`N{63U_`a`q{+g+9
z=-Mq4{ZBUAuW9|d@UrCEBo!WK!9Y<T0hYPoQSImF=0-<FNl8mf&!552P`0{t*?MNJ
zSnmhH2R%i<U*r#BxNf<9-@bJ@;!3NoW=Zv>tz8?odR5PiIdkUBp56U;M+?uCHv#Lf
zKen)||MzEh{ys}XLqXSxk4!UXiMbjY8eYsXo2+v4k!EmNzkFi7Xv!U<)uA;@^vss-
zU-M4KdVK&l!wTl^U%&hM`-KD7U(Yt1T_{t&JNEDLLq3Olj0G=V{1I^bC!=r5sY4G7
zzBFE0%~F!J_13=H-_M>uKWxBr*uZm=Mb9D)uiG<!z0}dy-~Z!LcXD#_?ecdL+oo#n
zjkSAux{gy_GI>JY=O2d*Y)W5Ung93Ze8E7O<DQdJGOf(amZ_guVdvE8G5_49a__yp
zCk{M#`RSlRup8UQnvS-aFa4Mo#HVLGW4?B`&-&JXW2d+s8eJY1#gfguO*0rj_1!kK
z-<q74_VAS{1KaZhQY_v~=YAewiJM{T-gcyAu1fTdoxfg1zxVMok=|O!zO0~?SzaM@
zb>XaKJDyIS=xA5{B~c>U-K0maOX+0n_UTFIt~soqF!k)avs1tJmN{M5jQG#M(7@p7
z;usR>yXVQd)|Nv$JuYD`0W(@UV{;1k#7SmHd}4Uiy3r)`8pnrE#hf!5r`VdT3haHw
z9Smv57#+)q5mbuXUH10=zuWb{|9l2jrJ6IH^3P6vyXNnW<J-L}<_obn2fmxjXvp%0
zd-~EAfi^`(b<au90@feBYx4SAP#WLjQ}h0^@B7%B|L39ozs2ioKWB4XICp?C=bJ*Q
zgIJzU>AAht|6W~P&22u-%*;&YW?ACoLy;3K6uwv%*%@A&F?Z&td;Pus?{1YB9Di3U
z9DMmVpG?NrNoRDoRAoxEd5IOAVF@r0nx)Xwt@LyC^Y{)YWBbo%`ZzZT{&`&gOaIz+
z^YDD#_}xVduVzUyy?=P9HCtT&|Ne^s0@qI*(@{`j=}@|7&BDiIoWuS*fqiF>ww`kP
zRU_xr?CS6DYX5vZ{{QU$pXO38taJ8Su3`^z4O}s?{ga>xV|rQHw;vxLuiyJED)V8;
z+Az_cfZ$1|r|bX!aooP{-OlH;&Mtd)ae`^)tXGv;J%M|aPj6y34Ly~jy0mM>I<NF@
zBlk}>;kpk$efl)hINfi)-Q4GuTcf_-n_j*AnEdXtx1f8yzkDfKd{gI>P1obR<-sdM
zu2?O<nR5<2mmj7j`gL7UTDzg!--h)uJDC`)TuYr+iRX*B-p%`dxJmXqv-lP3ZBJUK
zvM|b?*Ev0fWAPgK_qA)oE(a@n3bhJd*%e`K=X*JB{qn`j6N8%bw)GcJnH~5@?QpN5
zQk!G^hLy@I8!rBy-=lhF)syx~F^koIpE+~p&!0b6u7p$<2miG0TJW{X_Ib=C75zOQ
z4*mQ4+u!crjXQT_l+-+fx@J7G*thp1b7<hoZ&LT#cHd2ZckjgQCEn)`v)Dd8YVmxN
z%2m(2HG8X`p4wUbd|k}WOIcg1?&hrx<CgB7So2bOI)_B^5%FUZ4Cg-2S+q;?N4Kz`
z)T!EI938doGZtwWIDJ!S%A6IQ-Rl@XA<J<4q;&g~{?)}j9V`bVwDu@(s#WXvxM?(f
z&&Ko1t+HlB8=jf9bGBn}ngL@&QOcM3_jW39tl7#c&UR5~!-0y!?`F-n+f;x3X!-fA
z!P6BtpKhIaP+>x`9*2_SiJR??Ix;%za`u$IJ9Onq#nx{>?kw4=rY88YZu3>{rUSe0
zSh{NzCM-5!Ncbpcr@T7)tDcT)v1*`T<7J(0?cQT9M;X_s6(l~qwmN_A-i>>tLRasU
zc)z#q{Q^#ghK3mz#djW5Qo3npY#7)5%CLoPPdMi)o|x1YH;ywa+`hW57t}Cbr62NA
zwpgNVZ(M$DEqD&Q>g%d!%lW>Ge&B3Tz3)4Tokf6~LtzbDsn|h*C7B1ArrzM%QKqk&
ze6u(?>DTsozt4TI|Ngz-{?m(nf7vA!zA`YbS^nYM&!gq%_ix{`t+Kds>E*XeD=%hk
z{baNJ)D5-SM<kVHtT!|rnUeD?cKf}&?SkU*_T`mHS<9};_-}gj>{QkEyNtpMR>aNp
z_^i{&y5j1~tIC_V?X3HF>d>K2Y8P*WFsm)k_P6^xwe@xQy#LvIN<P{$3%F)D3#mB1
z+H#wLlYvR;%X@p)hR(d*E2c?xu^)}Nne>sne4GDr|M_l5wr(}u8-6Y9&*a%T`{yk!
zUz9qjWLm1Rv2nlMuNVAvADWN8zMd%Hx$cVq!-^2C>3XrhHrxN++%8v@k(8vw(WKG$
zS*g8o7U#P!>uVL3&JE%Wdf{u#v#W6G9?kjhK0Q4Rnhd<UI{d4D)m}N{>secMPG7rz
z{q@&h>tc8F$=li3+3_)SUDuHIxW6H2<(ac*eSLg*)a9qTiO!xqySuylZeDp&QIMkI
zU6tAoni&z>a{BE;U!4{))$Vd)6lu*CJtJkOB>z_B)+C?*|H2!J4p!a}aF>=)I<>cd
z(Tk7A<?ZYL{pr@<vtidRt7{qGs`eh*?X`4~d+z4Db&q?^%iiDpe8%{E&h2f!`af>{
z&*=KLVgHQ}C#Fa<$T!@&+`mc4@YoFnk%>0vyBA$}8~(=A(Jd`*f9dP9=J#t}uid^b
zem~!@+y#qf3f8`7ylQarX`Q>kM3=pRGeh62&1Y^qx;~HhQvDQVXNFhWm(vxbk~vyf
z1QsME9?#iOU6yqF%Z~V{w`#45+-wdvxPKk0Y+&d-#Ly5sO@vP@?Am>c@Ar;eNvZks
zAVsu`=b&@UTJCD*mM0vp0bK8OPPj8%lna^q-Hc&DH7|3CT2GQ%w80aW*_tu?xBk3$
z)wMsYg<*TzcI)}k0?&(|<<u=QG`F?8xZ;@GQ_nLU2?7iE&*ll~+SvZYd;Y^1iK{Ez
zzBXjDoa%YS9eQqO-1_jfVN<y;zbv_8x#*3jSLM&;n{88gSjBGcR$>-ZN_f}3dGeKo
zj>%1PJ|4KZc>mwO_y5kl|G(W`zOJHZlM;jGfnL-4(!!UYwjM3Nx4Y!+uR~|2eqB>g
zxHT_lf-_6vl;jzKYd0J?)S>W%BlfoF-Y~h_5iV70?>&0u%Eq$kScGD8d6eX(1kE+q
zRvc%mUfb(^T`a!t?b<I3oxgpEiD+ED?^Dk5t=o3hynZ#6`+;itp*M|tk{uT9yKx{w
ziRpPvpu!@aOOmH7=CNDMJG|h`hriqP!j@;wQtAA5+jCM6PpaL*pnu*H>{;$cmX?)o
zZftaJ=ZoE6we|8#4W9J1p>7O<xp{e@tHD8w>^I-Mv%5TB<oHvs#h2!KU3kJ+#s774
z2z&mz(=WB^G*^a(uZyXCxpX?{%7Zeixhq$$RNx2;3%fE+<NRlx(`o7HpaG)8?flG(
zw0{-pvKo1v$o&59Zg6n$>C>lo1#`XAaM-+YW8vRlrL{}%ZHmtJzT_pqGM_Kg>3b}%
z>5bnyrzfcdUJSk&`{J?9dGFQBKAkV!Z+AtVk6B*+&dJsLf7pCcKehR?qHX1;CtI_x
zpPOS>`}Wq>N#8?OhKQt}{QT$Z_4xkPQ#Wqhc=F^)i$3r0%)Jk$pT4#It;f4brn!tY
z?{~&O-Nw5;#cFZMg+&S`*S1~1t{=DO$DhyV_kTPly*4bnsOXYHmxtj7?O!5&zs1)J
zFuq^1MZn>u-_koGjE#!Rd@42ee$Sj`^?YV-ecHV`eo31jTbVyj{qX7gzBM&x=YCUN
zab6)(U7#a^g<r{4&7q}C=g8jM%lY5mo~Yuvd$vK9f}kT)p$~(@F%E}kdlzh-dMoXk
zb@jt2iO^M3e=X)edtKRJ*P5ri3pNTw2z_%6RGIhF*ru~U!)LF{I>{wbt3{dS@&vW@
zwR2w&KR0K8NowKE<O32M0h!)0aV|a%N<4Gk->)wCe@-@eYZv1O*2TZpC^kOR;8n|(
z@4I+=N44Z%zQt*arLL~1+nQC9ZU8FdmA2hG)!*N5|Leu#%voi-V@q2@Chp(nV-WGK
zLSer3oc5yM>ttCJPt?BKY~%iZ^P$SKrY#zLRgsE3j$5l9U3h5!NB#d(`yb8qTZ-TF
zB_CwWQ7d?P>(|Y4{XMns_DY}DUO9Q{*0NUy9kX*DAF(`eB5JnP0Si7&gF_sAt%7@h
z*qoni^Eol0)#sdN+zta3>4@yZO|1+OUr%Pe)URc4_gn9+7I8OYf5ofbsI_GuUc|H~
z?#bN$<;mr6y_kyke{L41pIgzr=ySrFdkWEt&d1n}xn0!~lu+_5XKE;#@X%5FTl@9x
zTYXP$%BiW@6SUIi&xgaw$;k!<JU?BYX6|oW`f9dUOyFbDR2Bw@tx=#>R=%FzzJI@7
zuhIy-pr~+Zx~S_%@%oSA$7Y;7>1kS_HIr2}?H2?8HG|tufo!1%SA5>y<{Z1b?Co*;
ze;+@e2d{C?+Pcc1H?OTt&)3gS&aURikxt>wn>XLHoNC7#tQ+!XbM^Okot>T1=6Nf&
zWlQ*;*!1Sw+UU7{%dcj&CUTS?^Q*NoS+}Y90&g(eg<rpRb!{&B5PE5;*#0V$*I$1f
zSDdAp;gqvY;_tn)dAqB#PkUq@{dbD}Y})4&6P15|f4{%(@2(9YTB0UP*p4|0m>mA_
z?Ck9H^Ydyy9u=Q`_Sr(`_K>8uj;~d=zLyivohxv=diV0P+Hc-_4_}qHI&VC6VW`$r
zp*0t`-@S9A;^))p|DWamd-mM^|IbU8f;Qh=b2V$9|7D5TDRxzw8q8L!MW0DG7}W|d
z(q&RycxjGDYMyJL0ekd?UqY*XZ`E@AablZJkI9;&MrI<Kd(xGR6n5&*5qFesnR+v=
z<j;e9U#DK(x^?SWo8<If&Y8WcPQo1?>b|uTLl<o@G>iRWW_IaY^!q*OCk5;(AHCSt
z#`>OtrRE@u4x^+=gWCj27dz$3O-b*TrUmcMuyO8}&<W&-Iq>!9x$|+AZ`YRViAjhE
zRJe#-Zs%r?QfJwg(y}D$&BEH<W$$OKYzcVMw9nv#3rmaA0VgJn111M}CIA1k_@HZM
z0?H3||Di)ldvAwTcf{^410R?%uj<vxsZ*zJ-D;Y8d`j-rbp>`Br_M~%5tXcYea<I8
zIxcqKk9R-I?^*8MQ*n5+K$BrY5960Z8~z_S`2XtvU;F=^`(9t3S0}{tgdscDqB`&6
z)Zq2|svmwj<+gk7lZ2*UKXfd&IUe!YcUxJhLwlO4{tX4;j*4?fB}EcMHeSt=ZMgY+
zgIHhdM7HB!HpRGv_p>g2f1;a#;mw>5kC@dzZT4>4@#WRa@@M7mEVmSIGGeX%p7;Ok
z{i=7z&Sqa<7w3}5<hkjPVZ}GI4eWextZRO}ICI8FcO6UP$8(BaGRGM%y#6Y}8od4j
zyV1FF<@l%TXPtfa?d@$)kGuBww<5I~sp5CnSB9)-%zAV?%RO+3m<q#(CzJi-_SXFT
z^7684;EU`>7HmpW{~Rg&^LhUNJwYqq+}^I=_xM;uaPyoir(9mD^M9ymv9=U65YSti
zxoX$Kt5>gv$5lRUxBv5ScK*JZ&nt6t_S}A3^?vo$ED_h)vuEG?-OSDpTDNv$BIqD$
zc@}TYy-shJik=Ht=JQf-A(!~y3pVGkU%Pg%?)O`ZzVdf>Bwa5SXzb`aqh7VA?Yv0q
zgc&<8zg)9!U0P(=r1FrHOTFfJEj2O)fu(ku1=ByCVweAaNp0EtUx8)kz8|z>YhSZI
zS&M&;=`sy2@3iadV*TxYJ~?#gQ1$zH*H^qT@eN%ja;$LqWy|7cJ&WY7-Fkey|9aL|
z6;G?VeQe3R$|Y4Y@245<wbwK5d3NEzgovL>sz0-ni$PndK_}4td$s;wR$?L}gPOYf
zXB+)ZJ}*5S1zvC(t?CbDzAQF3cKb)WJ;}Ta&Xfd;<<306V*j0Ab^E881}NU$-6&rt
z=jd^R|Af)0TM7xuJi8B7`*XOY2)fMa_+gUa_U*(z+3V|KcW&EpBl1?szSChBjvb2Y
zkeJ}OXMy|c3l0H^&%>hcUiaJoxO>gspC>*Z{+)L0utvk7z&H`Vm>gZn?iC$p(m#vF
z-+Rv+|Fr4AwyMlKYm5$NN&C&;{o&T_=VJM5&C|A39%pK4iP&}P^<8l;4?&5UQrU0r
znVDOghH(m7xN8b{a5x;{W)L*$ny`FdXCFgBCR5G&UkaU3;4G96%R-LVMSn!C{kAs0
z_VtsKle3~M|7>D^_rGfY@10p|KYqKN|NrLve;>cTo}RBLC6v9PU{YByW5uJ>=l^Z4
z|EK@|p!}c3FK6yzf5EvWxZ>Z@&7e7n^z(afdv>q5)sc1f*N-Q^(zee{N!aAI^_+-m
z<-5=OoYgDcL_W+rTIs^%DE)-zj7}fxjsne8N$d4uJWthL>oPJ3b8N`Ja@=8$`YFNt
zRnKj?9{sSspEWBjSIFPy*9m*wf2UuE>+Sz=d4Ftl?$?#~SQ1kX8`#wS`SJemz4veL
zZ#F-F*{@odVbxVFrERx!1v?){>@|}=Vewjan_2kMd=9~t>979$smYY&W?ue~y?R0Y
z+0{$@rerjweLoUd^5Vk6#qRy*&YsoWwUD=LUh1`5Hs`0x7Qei-6m-fNOGEnpZ&x>N
z+?cgB>Q%Yi8tr1w3mUmDpKQv{tu#IJ>C-1~{k>ln%m01x<>lqOdE0|lvN&FN{dLXO
zvuVN%VPRpbz&Azq%UYXRTX&bQ>v&bI70bl1E&slqx%qMto2}+y@7NeJe*Znht$*e$
z2xu;K+Wp=C_=godb1yP(bbQd2R9pM^Sg&-K|4I&zw~b#SLRMehxpU{tnKOl^{N$Jy
zaM*yIpX=RIX460a{?6A)tqOVR)6#M5*36kRm(Q=ON=!`r`3yA6)}#@#cBawnS!bV}
zeY&*#er@<hewUgT3)^3Pt=jqfaMjYFrjqg>=YGFgU&ZsfkpFPN&A7RK><o)Ef_~oC
zUccuPsO9zPl=kY?tCfOQU+poJmX_{~S{t{1`QDV2FTV{}pEpXrHs#5u=md|6CBLV(
zXxw@JRMm6Q@w|wAU$VQ8+8mJ5abjdpNJ`*c$TfA2>+alDyYip^Idmz?ywu$Mvd-&F
z8)4(c8?SoJRTi6=H%X9V<^i{>Wz+WmyJkImwf5d?)93xWbW(QnLf%FVrjI&I9xO-h
zNq)ZBVD#&&`I-LB*P3{bJ>H;R@UQ6gRP+0lZ|9!AdnGv{Q+?(}MFqtL9qk9Vm?$(I
z*e9_%l>g0LOJh^Bu;W~em5b-q>pWr=trlVtGjn!0lm4X81~ix@yhaexub#BN%-wTR
zh}Kk#zOC^=ted)KeEG=iA1}2{<wEt5)}x?$+qU%8m95#==Y;Qe6l};ct^08#`Ty7d
z&+30i@BeH4Soo^Xf`p3ad#}px|8V;H{i@xwQ-W`o`QJ9sP1$?*?YgZKeIjxhq<9`#
z^qeT1_gw6zmtQ~!yP*b?Qcp(6eAi=bS0w`HB){+0;F}$I#d}vlb?Hi<=qEbojg1uU
z2^^hz>zG^N&tJWtr|Vs>T$T51*|DbM^J`wk|9@Tow)@Lb@w#o>F0Kx9+TghRcJ=G6
z*PVsm&A7j<wk+-Wxw&;^R_8xk^mVSdo0l!{hB-#;-lb<R-|jG6b~i7(ZR7WSx8F{a
z)SmyP=69*~*5<R_b2?0tB-zSW1j@+UR(-jdKEL$b%Gd6JB07r>v~>9R`+u+68~^8#
zxaXu4*MCd(Ycr4c$p(sKHZR%xo!Lfy`-JOW`p2@bulxIDx&7ad{q=utWv?&YeOIHa
zWS3T}Bd1QH#JiiDpC9QIcJG&4d;Rr2%hcm9`ZT6BcD$0_m3w>JT<h|_-d<JDNvSiF
zBxeP#owRg%Tvg`#dwV~B{(Nh`w#S#1CnLPXb!8jRo;?d1b$@en^X%EPPXz|aOS0-b
zvRHThb#QR7u&{8V#Hv5f7xUI}+N^9aIc+4zVlY+UjF`rf{<ehwtf>+6^nZO(QnIS}
z@ZkFXe_y4!yU*MIubGv8?N-#<Fp<_{)$ea^PA@M0d}n9zT)*e1rfT2+^UQqzpQrlo
z@9o`v`Q?$qHIg+;GuE+Wyi>E>*T1|+>5z*{o0o3%-Z=fPq{PIBOQ*;EIynFDPyPCz
zr+a&ORpVZAC_lQm*gZWh?cBcFw8Fwd4jK8Y?dyaBgx@rmt7<GZkvy{RoTtl#Ur%&g
z(|#Mo-2ePbFaKX)?SmwRQ2vbp@46e-sEQ<hWEGNZX7f3>&ttN|x;Hm>>V7>IJY#S1
z%Ia+4qr#Hc63sJmUd++%IwZib*tC&z!*$PlyK8h6PF=pYQMrAY`tjw*vJw+|G<aKX
z{yu-oWZjdSE30R%6BXV0`PjVO6`!9kzgPA2%g@)@w)xpp-AXslo}}u?a8bVLK!-~Q
z(><xp#mDbVm$NoBy~)FIgL%{DU%5vg*)lh76bsqJQs7^7p+nqwRbZ`Q7NpN!^?2!|
znNe%a?!3%3w2~~V|MO$%{ZmhQ{~p+QX-@6;KcDTZAByY$H+resn>As1YdVLsP1&0l
z`+vm$Ieq`{U;71K0SqOwb87RS9<TrY*;stty{x5yOLtxKtE${>X(kvZJ?E+40?TVY
z#oIUDG&<&XwaaMRT6WDj;%Yn`6D1|~a7bley&n8leed_ZI=-KDwtU~$n`v^aYHy!w
z(!wLpMUKr~Q}OU=`0=+NWj8+-PIi3vK>Gf#cZVMNI(;^;|7<>2WvYq0gJaF_x7+{!
z-T(hP!-w|&FZiE5OZ##xTtI*~(&!k|6VM6`*-LTd7ME0coVWfdITx9&J=JSkD!;+k
z%#f(AO{$(ku7Th!N~;3AFK=nuQU3m3`uy5&pPruP=H{N|b|uGbvyO2`<}9{jOEPzD
z+VttuX?^Y4&$8oxM{T}&WpSjN8aLA^_Fq50hs`{)Mr^;!mvh$d|2z`k|KlKk-G^th
z^S@QumQF1?_i}gTd(-P{uC0)_DtU3FQ~3Ay_xy`jTz`8?;YC$Le1(L?gTDU$^JmZY
z_V(uH<tZ%+IxKQ0uzMzGKJv=SVD~<mnRDmnnn+bW)tu@mUsG@Y#(#&f%*Fa_mLJvc
z_g>H1D%IPjq`&mP-`cR%AzD|nO#2@9tF299V1Cf*{ln8ya_i?E^Ua@c_{wuQSNiTE
z4XIwYiBIoU3%o3``kMB6qPyJAy1&1Uo}RugZttv=$gNSjd%}+e&zEc6vT@_bOXuTb
zqM~+f+)(l9<8eQm8XF$x>@`j{J&UG2kDha)ef`7l_x#Sgq@2{)k=zp)u>SJPJ)h56
zgQh>{*Z=!zy!`$(VVBEmzBpaUF`HlUsB`Deoma13&E~%T`}3c77lVKM=^Wqm=jQaT
zJ9fg2tP>gpTLdE+4oWgIxId7XIMGJJP3Vil36`KPc{}-~!c*D$-+zy`|Dn#wV8qO5
z)!&q{SAjvo#W}}QV6Vcf4+{-AyE|A7x;}C~>5)6BtT=%&<qJbkg9_6lL64=yT5o0T
z#Cmud7?#B4++v=*LDXG{tLeo?VI~%q1eLbB7DMGm1?9&MIyMC&|9a{d<#fIa+-=E}
zGUZ_M1M9i9juRx-xQiV4SIQ>2$5=5^rR?0(a}v&ttSLI1OgxW2uBclj8Tx9j%HF!q
z*UnBYovtb|S#h#h>uIiRW)<xW21ETh470riuB*pft9}0JZ0pml-rd^A`{nAs{J1#t
zq=Cu?mlK9b2j0BrQjoeArFCAjK{spu?OSiZ&tJ6tK5zd1Uia6nGkI<vU<u&(Qgz2`
zlX!gX+ee2!Jv|z|-RfqQ`r`|2TP@c0SH3Te>)_~M7h(3$U|A=4!?rm1c)!ey90ns1
z&*cS?doK#4@xN&eT*K&a<>!CJ^M)_ye_FI;)4x4e_d33teT9L8V?stl`u*M;f(A^I
zf-DQ`tXQW+f7rQeQcqS${0yl^qs70RrmhQ|?!Crfi&R+J!2=D>9|d>y={|5e8Q=SO
z$K5>XWUZ-PyE4mm-(6B*|NE$R{inn7s*ytBIhVAPxVH+()qS}k|8H~suk-)X|4(Ul
z;FuO<@%7o)_<bL*t-SnxZRw{Cml78AoCsURDwSAp$gHDk?luL}Rf-G^=N&v6xId)u
zG$x+)ebYV7mP3Mxq0p6$p<_W+SM~h{h0@Ju+%~44o1-l3R>;uNt(|>-|CiGnqu!+a
z|Mzz59)t6>|M`1**WZt^t$%kntXi3;X-z@qq&arAzxx0G=s$k^`2PQY@8_9Fxdv8z
zbCeK|Su*o8PoRvl)4Zii&D#|@niTZk`KIlZpJ7z<qb+`o-r7|5b>5eiU7j^gpBEV@
zz|{RJKET1o-BID5`Rm@v{Wev9Uu`}5n)~_r`TUCyJZ0U$&}}HuF1Xxt`PEaCo}77k
zS!q*E@ynOX=i60$cyQxKh3Yzs_YDSTi%n-Z3LfWChzxAG_AR<);d};#dAfJgCTR;O
zD5VL=trBNZii(S?d%yR4-M7v2_x|~GI)Becw`r+nJXaE!1bq{dSFKsUzCAI6Y4`sJ
zjqm@S`_3<86|pk(vy!_r#{^MJDW(Z3-riO`f=e^29v$giU-xx&{U`PMO<T4siQP5p
z-ysIpeKkKn#s7O6&vnT7yp6G?VQ1Twj^#qfGbcWeRO<*7P!MFy@CXuco2H@7^?nY6
zl*{oPfw}3;93E{GTm_D7K9YEXLGS$B=NF>b65e-s*tm<lDq}kE_4W1oUzg|a`}u74
zEMKv<#P!#MlVSx}xD4l56egvmsc|rwpWqBy7?wGOyM-(5X{Fq)1CtsxPJP}JwEEap
zuT3SJrNVo*p8GvPV_jIjo__p}lFZCZPnVvpcm3QgU9Qde$5kB2(Ih1C*=GIq*PfGh
z917JE^;YvYzI)}+?j2EuZ<eR0&;NVtx>?j(`@fg%ZR;QIjb6PvP<7s{ncvP;zvmS)
z*uCe)u5Z%o_wL)csp{var`K-%`ts(@xwp5~moLxWD)oYE|94Ao5m%3pCzbd22v2kk
z$UAO4^_9AdNs3Pb=P$XddivMGuSc!DHq$u$-?#k#-+ImO?Wp*ewEF6*5UqQ^!8h$P
zE{M#pd8!@%vp2s+nWJfXT%F~~O;KyZ<^{8CcaCK7Fv($+U}Uu6{Pihx(YZA)N^TMi
zJRD61QV!`2jFPJE8Z0LqLjoQMNSv7bJ;Bzf&cNhzu=bwA8PgcwCHiKyu-!h>5cyED
zXZuvIhZ4Cj7?p%wu1Wi_b|^9^6bec3Pf`{X&&&xd%20oK_Uc!braMdp43Bsi6dO)^
z&Tu%O930^A|B@m{6VCw#o*T!F3KH_OCD!b?@IA{+%)pXCYJ<xm0V#(K9Ac5Yk&IUs
zMI2yI-f>>0@8W!`n`}87t&h!No1pg~w^qK{&$WQ3BSBDL!3ot($3%r##6B%KaY=)t
zaRRsdG>@*0UJoXn6?ju2V_*2kL;qye-g`%-vppw<A7A#WQ1zoqLeX>Hq<LwH0s?`{
zKiC>flX}w?y>?6OyJJc0dh5S^dpG0u=G?sFHCx3PH)p!BvDWBS&J%8Y^t*CiwDh-w
z94-nUc(ls7&nCPNxT4Vi>wEil&tj%pu^xkPCMGex+NCEsCb&OlZRX;1&~ARGwncd7
zzKYL>wjK??Z?}KTwW$2^8!iWLggmm)wCHj^-{W%5l3Rwwt!7?&q>GK%V`cX5b)R3l
zA9v#9l8>A%t->XFp;=IcXNvs`!2=h5KXm`D<9Ih#>-j=KHvty4M3zsNjtkpL^*6F>
zCkQaGuCWkF)6@}Gu1=if$oKuNxjbl&L;*BMk`*Gqs7><yVcY#|`Kwc$-`a<Vh1LE0
zv{F2-M)PJyBge#z9On*xO#Tg8ep~xldVl0<)1ZcE%{g}4zdXv$pSQoJcIVU^UWWr2
z8hkhyPSh$N{?~pl@o4zE1$BSkySX$sakx0BbVxn)c6cAR@6+V@LN^Q2-g%fd{5tYv
z^Zt*sxw*UlAKw4}``hwcN;lS+S7ly$TLN0T=(Y6Fn|Zb0Zr1+(X5gTI^7Ea<l$Ku_
zo$GYJ3vcS`naOx|?rp<g^ZrlO@nuyzv~uN2_4zfQo}Ha-r>_^YLx9Cm=6F^?w1}&W
zTgQxLFP}Yomc88X?w-oemzH|R|GstIZ=Q{%t*!61FPBt0l-NF0uFKc%a1_|Eu9TVQ
z|B}X!SpqB#C+@A@&hh2_>9vQH-j-Dt7JmGCJ-+^NuQ{l&)796{&&lcVID2L4)k)7Q
zC#hV%d|9jBy5h%$?fbs2O+GF^Z`RDV#-yc7R=)nnr>^84xTW~{xyA1N^XzJWeR_KO
zZeF<U)Ga638=}^N&i*gkeb={&;lrEF=e0_tT?6BuxCSx=O0X~m@H`Q%t$t$@u3^c+
zq+)dAIqQq(T63Kz-pHH8;<zBI=}<L;07G-c>gz{~C#krAnnjc6|9Nu$|DW^vF*_FY
z$nEVA{i{;F@@m%R&6`1|WZm0aJ@e)aYoG4->n43#oL;{8Vt|sURM0nGr7*3jDxM;O
zpw$8MY^xV(XqmdyE|<>UTX6E4X8ls}(Aqfn=t6UY9qIS)t^arI`XrsH`<sl@&uzK=
z)@`vMi(|)%jENQc9g&mfSQbBfb#?W0{kS{Za&K=;KJGWqrt-ssgHdb6SR7+ku3+%h
z->|Cw;`vJvhOJA#Ok!p5`sd`LP;@RgFE4Ia$xBcOf4^IPevW1F=Vxc*)-V6&c{a`1
z_j1|pvuA{bh5KdfKSuBW8V&Nx(Qa|ksn;xP&L_$yUC{7QtTNeJe#wo4F+ie`VJ7<@
zqql2$p0J!*(bG1`Md9iFe_5d?rzZyNackLg%dy%~EcSo<jU-hgOGag;C=mq#5w}E<
zRM*6Z3+IaNJ@b@l+5u~oiTjpD)z5j?9R78oWUo$$|DAsqPkxq}ppf;1K_MWefoCDB
zm;j^D((^ohQca957uWAOfB5`&<`*u%e%b~^IcnZYS14CtD&*P6@JXOOz=AF9#p`1N
zUrsIY@)t<T?@(%<+<WSv?d|J+a;JZOITY1?c^-!p*G!HE!HWW{jFMb)KDq{qD2YTY
zs#yBmDqKuFZ|#}B{<pX7stfL)tKGfre2@7ahnz+xmoA3}&OPksRr(|wJ5DeuMR3a<
zF!~`Qz{(id5+D$<hn+$C%gl3cW{RFv@IF@Y@IX{^L<J+8`l*SGn<g-n6h*{MKHYtK
z`uf=YHKiYqow`+|{qotp;G;JtOq?RQ_=4GQrlZl_3tgYfG_7VW$+*7Fz3<I!Q}dfV
zjdO}C1qGy}D+R?qF)%&V6@2{mXa|4X(vaB1qX*xJx+zK(9As%YxJs^9kcWYBaYLe8
zqH=|QmKK-Cd`U~tfXTrt98)B(uCR0YI`?zCz|2d6&Y@0K!tyK!fBpK!U-uz>{r)Ph
z8_jHAlw25XzD`ZA|6Ts?!G(?Pw^*OM<j;?;_<8km{#?7u+DpP#Z{)1GFU7{NVM*PF
zdm?pL7*6lsp6A}hx74?rqjhSw_v-w;pYQ$n@nd6ivEadXwV&_*zk7fG)-5%Uj~zPp
z%uQwDF4l7Ewfq0h-hb~-gz$&2zrMfvS~YRmwHYU7*?jL<64R!@vE_2{xeW}5-X_Y(
z-8=uwqW{(5sb%L{pKJ7iW<pJT!^6X;hvj{(+Pme1>8CY3Q9=CEpFVw>&CP9|e{WCe
z>uX<MU+0&zu`o2<S^Rz7#*KzfUYA%HJaUx}2h5%QUe7*2ZtAw(fg%$P87|zqv#0R!
zv0iC&z1UqP|Ni{koPIuTM?qp@qGMz8r4+B|JX6Nfb7#+;`v;oB`M&@E-@Vn}-2#vN
z+g3gClu#lAuZGWp6-SO70UejvFK1iz?#|Az)l27vz0zLe;Jo@OsG0V$b^c-o>-tYm
zPJaAY*rCAVl>3i2DWO?|<H`)SlG_3oqk6lACOW+}X#2EwYa$cF7BepAtvdr(>y+M%
zh>xEyG2h@=%$|ymz2^6RJmjzc@$2>a<(X1#3z>M6lar-H_w3xs$-vGhQ}L)%z3k1M
zn|WKAS`;|0v}B*&FkSq>r3%odmosNxBx-dv3795C^M5~f?AYt|`}dW<zn8UjSMF^y
zqhsowNitl;SENd1J@>L?rdcYjvdgQOHTBF9VRb(ZksGhSu8Y~ZC}qAzm&lCZ^-tXv
zPgLo&lJxcU1<lp{`udukPp0E>MNLi3`FXZY9xhY8Qj?OBYHIFGd8H+ooGZ`k&eBk}
zdh4c5ht7CTTC;B5y*-u1g@qqaP1Oc%BKZ3Hy6IW3<-wb8Zn>t#byFtW?$Zh7`@i4i
z*T0UwKWpAh%ldzR?oW3<uE8V!gXx3^gGTe|jQg3Pzg94QRW;{1<Ti(cxi09w!u%RR
z4h{<)MUgknepZRAu4c_+oFu5|@btEVP!&VBN{Y<xu;tfZeX;TB+QjPMA#jmFi-S?a
zK|@I^C26V7S9|&GU*<o#c<k)VY5eEoBHO0V*7M!#?R-dsXU}&AA0{~gkC&z`9ddT=
zX6Yth{_bA-g~|Af|K3X-&y_fs!Z&=k<Kd|Y=YG5GW#`JYn6IMTY?>^|j2%lI92AON
z4?6HD9Sc|5T>srq`uc&k{S}|zOl{p7XMK1@qB187uS7O)BS%GxT}T%blU~Q_%4^Y)
z`OEh%xqCBa*VdY!r?$>~c{28P+VSJFE(@QH64hdCXg$!>%QU~4(Lpf5zej1&o9QPc
zTofEsj=r%G>gKRuS5k0d;K=B4<W9+1K3lZmn8b!!59RU+PcCGMo?bnhd;2x9>0#^d
z?5Hd)%&gt~ct+ID=?X@U3bn~PYAT807HnlFSd}(@xAV^q+>u-LXrsGa-J2sDJJkXh
z*-W_4Z}`r0V(GqB>)-v+XqQNRu$$%Y33b&6d;Rl-JE!ayRbdozVZ6Zd{@`z>L+v|!
zdb2_n|7rkDV3@Ar4~(|qIHh&Ad8_xyO*xsFFV9|&%inIsz$!3li2;+p{pT<FHLtDN
z<*gdcJgN$wU3zqS{ob$7W|oUj4?pC!_}ZFHJl?AV!h6<k{lKYR*!Fm7{$rz*J)0#j
zug;&V+qEd{_qTOBt5h43)%pHkuK%ZRwf9~8pP%#Z?<kaY%$n*oNoDP|V=IH#pE>6j
zZ503eSN@w@8z(y+Y1V7YE?=&jC+T13uYYgin-}5hruaYPp1w3w<aj&3eBHO3>D7Dh
zoz~yKXV0D(k)uC;>@fS^wszZ{<m6<}X<Ki<ogP>9@=z=H@9*#LZ_U0QUjI0|y<hI8
znYsMYiH@(-_QoxjJ{FkpX0L6q4fmvP|Gg>$WG+|NKRncGe!u4PmzS5*&&}Cc_V(7Z
zXK9(%i%ulG<C-dSEo-aW;*Hz3nc3O>ySl#atM&b#=O!w<pOUzHY1&d7{a@GAncG}v
zE!!HEd%RD!-~Qi^OP4O)|9khos^_8*k>0;%$9nqv(<8U-*zx1A{J#x%^YnFeY`$Iz
zcJG%n6?Jkct24gK)6=_pss=}|;en=(1BcGM+4Eg4g6n+%1MfnH=8klQC5@Y%wN|P=
zZVfyTB`xuK@B7kS8U;T;J>CCn_5NQk{p+i~y}6mUJ-a8<MC#Pn6=AEnl)_hEZD!{O
z<=D@kKUX=Zo)^8T+5c&p-C7xTrCGCP-P)QxU5=F@z^don?n@K(Vt0L6EdO^!)Y^GA
zl|{F=<#t4@4eQ<d>fh{VGxzO(RKDuxsZBo5r+Tfv@^?AU<W1K=)BV=>fA)3!xqJWb
z-LJ2&Up9HW^_G^r_DY|rUP~`#Y>8T1w!8M#m6gHE{Z`&Sy|4DST>YPq%<X)P4vR0|
z*qD6$+uPf(zgA^(td(CiqheaBdET9fhzN`FcXy5*YfCaT&%ft$Ib>&4qQt74u);-K
zw{Bgev26MB`8BUrKA%_p?)Lp(XMg^zd>^y?^2^D!?}ESo%DVWxqg^T^_Y*6p154nA
z4O+fWzC~Gi{r}Hw$01};m$c#E@_;VGld+O<YzBRgv$pP=R^sxI#bnl6KaZX#jDkJS
z7hQh6bux=*W!Vc>-W8L3SidPa97uhCbGj_!iXAKeEV^Wp<n$qFSKqnV=$(6hY~Ek_
zar!zBP75U?vCS%1byEZcY|EwzN(8p5%x|C1kklGFdF#_xUJXq=I?cx&7O1JX%CMc=
zSlk!T^WjTG?*G1@|9{&5J)G9N+VR8_R$c}Rh4-o(8Wk9X1iI1{<yK$(CmWpjWy$A9
zpSSDZ-!oNRcaz$p15zdpt`9%yFfTITIk}=ks5+C4M{H&6k0;lDJv#f;{C=gnk%_hS
z?%cex_w(jjKTAtjS5H$rrZy|0Td}<1(208sSloQ?@G6PS6c$wPIdecxWYe3|izF{J
zC_3rv5!q`}+S&Q~%}LAmd%yFn{Jgd-fA8Ju-*>9R*WKT-X~UMAepPXw4l%MxxR|X=
z5MWGvc%xd3p_%85p6{_)TUYT`y*>NwSyW2l^?8T=?TWr^eC%F+R^olb+|_P^BDMnO
zxZBMbSOkL4eXi@f(Z1i<DKPW*{o+Ub86{RPB^g*c8f~In5>(tocYob!rsAX|ALVZf
zY75oE`d=c&JAeNyx_VdQ^4qffdwYI<yPdCpe-~#Z-y_aQmZpw<-*^B2@N#{f@`@|g
zOlyz)e{}V7{{G_3)U~p1TNT!HEchO0!+cS}*wrQE0?&oz3+j|=X4cI(dcbPof1O!=
z?;cx3#osg#Uw3X!mA71d%ku2YycQK-9@hWd|7ShJ1N*=2|2N*fmoi<s!}P}6l7Fw<
z>vwM4m!<1l|Nr}=tSL()<DOhoV9MUU=HZcB2Y6mPwj~$3r_79BoAhF~SZZY2+)%+_
znd6zW=2?|yy}VX5D?L%-mO((I*Q{mNZhib%D44nZwzjr5H#fJju`%dq-Lf~gcIM{Q
z<=y@>FLt;3GPUjJ^Q|j>1c<bJH~Y0#fnkZ~rY&2x?AWnFq;2WarQG6rcXpL#Cnqny
z{<_pkc4^KOwcTBtSMaZPaxIkc_w}v)`#SzV`~L^>GIljLqE>e>RIi^i>(UvI^N`hz
z`}SUcoyq?1%Vq!Pm380V+$_IeyFF-SME32s-<~~tcH~G)lJM<qx!sR{fQ|^$i~aT4
z{{QF0?fms$SI2`7pLT9%f2+peJuS6RLNeRY!DWv2kz$dSK#`w^CYow2c)%^C<e;B(
z^2xdlDN5O2YGdNIM6LCnt_K<lTfgtutE1iG;^N|;ZRDk;FTZ7P*mudjrK9Z4jgM#Z
z>pss+pT~JvASCK3*VeOowlmsSyQEx+PA@Af`~L23pvb`oMk_XEM^0P$v269#s;^hW
zFPrSG`S}Sn1C*Zr{q1dYYwOip)V3zdEqkeHwfKV=j~>U<r{<oM6gaZB-un3X_|@#6
zt>SSO#m~+>`en)>Aur$mc*k|n_7Wq`)fYhrjm@pQoA>?B&SGtC?PvM_j#bOE9K3Sn
z%8wsAoU}mKNs6#(^>$V5o%byC<^24doRZzKsvfU+E;^{1nu$$hX6Kt@Q~7E4{oikw
z&#THhes1oY+U>VP|D9vsw?nYu{pmh|FZQLqy8c!y$_-3z4p-IAcs!l;?ZB#IiWYC&
zw;0r9upUW|c;)29aF}hem!g2s2OYKsjzuei)`tBITg_0Ykdb-7d@Ikr#ue+-PS(t-
zeEIu`z_;kL)`zmM{1amjJ7{vJqKhe!!9kAUV3^e79Ow64XRioGB;IG77I$xjsY?s%
z-v_s6ALMAd#Z#{*lghww!|1zg*TZk39swd9H@QwRbbB9lYlv}ZJa9~0#_aI35cS7B
zxg9Jb7LE?znmAH=86C5E7M$dI&Yj-8LGa+ao3ADx=RbPwir@a~%#UG#B{mWt8abWC
z(jBLCU*CUEO4=nc;iN*-`3CMUaWxk|AMNe+yMEeh_2*~S&z%-UrKn47b<?#fN?6a@
z!4vv8V@;rRw%Mz%2ZU~T?SFc4GwXY!+hLzVCw<6Tz4_X!lszw7c6sKfroO#)D{J@V
z*Cm(zX06@2OZx3SH+4-3pMb^{Y7IKegs$66`abU_V?qK?;|Bdl49B#tZFs%pZNR3z
zpKs5v`f|e9f8HHK;RuH5)!jl7MSNeI9=i%0VECn|HJRaVcw+f_r<cxtavZ<?_QuR}
zEn0s>O~fJL>n~9ihF6<A4{%EyR9s$=BC_b>r<*I>zB<6lCa(txrx$IUb$Xii^ZfmP
zzn!oD_c?AkcThuvVG0vyMZo-uUo&sMwXWiM9~Zg5ZuQ?|*5cEzMI~q@_pbVN@3)QQ
zza6^XP4f?}<83x-T4rT8wX=Q2#*5l@pALC<c*Iwk^l2AP<&(Gm*k1p|ziRHe|L^O6
z^;b?iHc@oqk>6*}e&g2P!@!U^$>#f=;?JKy?+f1WIpwz&&(y{jy3^YPrdzMxFKd`u
z_cY6*oJa8Bt-03aT3Ujx7eCwo-92^cRIjB$>#ujN(BNWy#x&7@XZ6)puWHxD?_XCk
z>E+9pJ9q9ZUw%F^`}Nmf+j4Jj%fDZD{(R`31y{4~?x`%Ut=)V3?Yi~r*RKHq6;CFH
zuH{qKu(vWz?RLDD@%rA&l4Hk??fZ3g{lCfepZw=lJmPeG@wMugHdDwf9-b*)Pv2aP
zjGFi9YgO&<Z*M{CkjnS}zN^4-uloJoty{NR^j(c#cK!9sP^ZNm3=6KmUYfb9rugNT
z+4*m8ZdUJ0UV7Wd-(P#fY6C}+mRBh`J&Z1jMjj3wHXHI89FCjk-^<w=#n8}^ot?cs
z?`~9NWMo_%XlD~BTBObMG(46#UY|XC_S>@RoE)FE{#}b!Tz}opCtLMu<#M^&FBkK+
z&wgIHG^p{-x1T$XhCSPMrBESh)%DlL#>T<H!QS59nX{r^ZO#{YaN+Wvt66)$T=HJM
zdNt_k$Tx4^tc%@!C2&T^g$bv2ButR_`c%KZ^7ps5Su57W#XfcaUdr3?>h$Le&ipT1
zX3m{k`*r&Ab+J2({{AX$O_+6d8I$wYDBtZaJIw+`Tmz>p%gj%9wlAryjLZz<+OGNE
zRlP^(uh+>L@A3s$9zTA3ubOw-tQj*3&gJIh7<_*6<VmNn`o5oM^FeFLo;>dF?e9PA
z@Ng-M(%&PyyWjntvtp+{&&@6Te`F_2l;~|p{KU|ZRJdVQ?7kp|E8(oJat;4)q({}B
zl*{Pr)iP=j$l5wfDNpGUt4@PBiwX-%GAkED(t<;U+ozWacWB?5F2(rVam^{?cQ#Dr
z5g$05_V=q!npE!K`RqblVu<c0lP$+YXBxiPTYij*fqB{m9*!!d19fuW!(^Up{&_NP
z>wKmjr>3X=4quc~8Ya4Wtnk0$VXNTE@ko*7y=~gLBRN{O$7DQs3KC0}ut;{uMDsUg
z2$r%vYZE+j#Hqdf?0FxbKGWCxElPiVdi3d3)#~RpCZ@6zICEbx6hALIH*pQ;B9+r~
zB$yw~b)L|`6UnqmdT*Ke>AZDoHl04WJ4)uPPfxG;tML4F5e*k^M9G*+^=?et8@BqW
z<BjL9x{}{<U*-_tn0l-`<AQ`>W_dLz>D<jRjFb-Fv}MP>9UFF3Y@WVEt;2xlu~)NC
z%-oEWdA5reI2tKU_~j%qb0$NtX-Y%Hp63=ucYCMad$#K1QDt|&nzu8T`^njFtJN~#
z(MUKLE%5%6&3R76RYw9k*d0WiF6me~9O7?2!LWi==<tM&m+KZ;7fe%}(#9ysaln9q
z!7z&Lb>ogbd;Vw@zjHHPbw0P(VP;_OE9WZ)vzglzcuIGN+}iW~-=m}5`uqPB&H5H#
z(#BZ!=FZ=}@BhC$^GA>Ug4cs%UZB-Gk=g02ED|oQ&1XcL{+1}Zgxt1i-W6i>;r8z%
zKa5mGf@Yn5VXL1!VM(Rxs<Q5+<l@KE^XF!o&0c6(QjmT@f_vVdQ{ml8ufN^0uYdS+
z%WY3%c81B5AHOa8{r=y(_Xn&~{@*D+Z+h%FgXM<C&oAaUZwkDyy-s49{?um6L#cM#
zzuKLfu*TSoV~@c`^TxR|XaBu*y?(K!UE1LXOQ*-(x^qWF@VHLL)F|J-E({7hhpYC^
zdtN#3d2f`i_oSn*uTRgv7xKmBuF|{ZKNPa(7K3hQjykv0$XBv$f=H@KO60O&Yv0R<
ztW#gVxw-lI%H{KZ-TS_;{L>TAe8tPsxy5ZghQ}sp{#5w2&5JqkU+cX`s~bJ$J$Dp1
zbN1}thw}d(o;h=7{-2Zc=h)RoeLq(%FTu?aDDkwik7=qGYlL3>o-GAWUs<Q0%kbV=
z{QMj<JD-oQZ)V5sK3VIscXuM!Ur$Uhi&>WOy6)vPjmyv1Zod~58+-Nn)XvSjcJ11?
zZ{N*4b<d#n*F$51K^J<w1>NBB(%5s-nX_kQ?d$&BzW?vr;(j}?V;Wh@s^%EYeI;kS
zF#lEM?@6YHhJ{Z~Ogwt@=xp=+S1V)JhG|djl8cn(N<DRFPo*)>VT-=s6AR8H%4lXR
zs<tvV4qh3uY}vA`t+VVR-&Jr5X+A$%Er0yuzrVk;x8C{&TG)E;^P_Hk&|Kc#yzSGM
zP4!Y;6>?$5p`AA87i(}W((nz|Kg4i1FZ`o8LqOH(4^!RkU4vJIEL(CRuJcVx;tC~G
z*Mcv<_E&#@*DhD}!aM%grTjm~@^kL*tIbJ@aWSc}?Mj|&{Jy?$clH|gl^1put+i8F
z@l!LP;cEipMP{K5?rsMfg;{uK|E}8?y@Fq<`9-_@RO_Y#8uJtk7<#L=UR?22F!81I
zIj#lbYDyt?yf+U$ojv#5EjPPBPQe2LjS^|k8-49x?vnRd;_k84=U4sJJPxMsbE_H!
zW*lTPD4v#jEQFDFlB=e~+75#S4IRhsH5;B_`PcmR&2r-xEE&K4*_==)`MsPeYSA&P
z+I2k&6<x+%oQx+XC(ci1G!uP%v}*A}yEaD#&XY`%>@SXXh>N_B$?M@fAf4u9EH|^$
zO_fJ()$xxrKTkh5r#e5gR=DQj0nSZ^YAP%jE~Kd`J#P&>(Kc`HXFdiVhqV_~65n$(
zo{@~U{C&1$^Muu_a}yi|5A9Q*ZrB!Z<m>VM^|!;ic6LaxZ1lf-R(5&jEKy6r&}>tN
zjIEpa+5=XyP1U-&Vd~N&3@w(Elf@FUPe#4|)O1uZFky|N<F^M~hg<!PwU3tA-rAjf
z{`&mNS0|76`TMt=aM-CWb9~yK)0eLZE?VTqkl`V_sI`^d>`JP`A9h`tIhJ+Wu6Yv{
zm(2H`xZ)9KXQ03u_cW896*ZD_Gx|QSw>V+FDzNq*XdzKni2SZodaZ0$i#Hv<q8_~#
zbSef<qpJbSxsQMT{4wAE_3aM3XAD7Yt<kgf_x~%~?%=<0Yv8P>JEv=KUFlyd&tkAa
z{IAJ(kJanbm`=!S=v3%2y1&+R`MKCQmp`tPR65l8-f`r*sLNG9s{g+KzkSQXzvutI
z{4aepan`e2a>j?X*U!=FQu3U1|JU04xAtY5Gi>-=Ij=pVX~BJeqx*_sQjJFY7cHI8
zzU%ESoAaA=x)$vSyS*(pdTEg2qO7gIp3TmW+g-Ny>Pr^K1^+hPT9@sx>DQhU4tJNG
ze|`Jjj>5-vPneFc*|+VNrq=er#}ZE)`8R8cWM9~zsC24IQV?{GuJrvM$AbNBzkWE(
z|GG0~^|f7l*EO^xdNibRo&S*c%KC-as`M@+g^m{&7CQf0c<om3a=+ZXJhwm-Q^TEG
zwmjLp{`%{shF#zHU4OY|%^HnO1z%rX{rvpA`D|ZSrZg~Eq#<=q?$Y_I=_T(!*}N~?
zJ$v@-?Ck7QRy#{xUOIHBDM>O>Mq6ny%LJX%hYaS-oA>T(Rpd0y!%t7g|NFFk|KGRA
z<?Hv{%-PlGoi}Tl+J;||-@W6R8a{33It4nC<o(|7aqF)$PxD*8SZ}{ogOsLdTjC^@
zwPCBjs9alkB6i^%HJ3LfR>sE0;p^i<KX{Z!mT!|W4^?@&;e{jUurCv-&zp<g`{inX
zzukVn=JVO>an*0Ht&I*8VRZ~h(_(d8AhUGR*5#)(kCw05x>R7R&-F`pLmu^?a}KT2
zI<P#!clqU+b3h%OC*Svd-|O7YXFB_=ZS}X1RafIKU2Z;f=APx;$=B*`{9b2$Y`)iW
ziNE|;JA)%Q0w-@4Y;ed}@%YerZlMo_ULL<r3p+4hmSJ#c$Px+F4)l0*P}<Z|Oh_or
zuw#Y3Xn@G3tv9Fr)O2w$;CZt3D+@z_Bikv3$$!r6`E)Ss%Y1e*zBQuniyp?L*sL=!
z-uzm%bDrUy{94zC-YjMh1n#uoc<Ntb(J0ZxcqTMT>i)cM3=Ajs{paBhIH%Fa!^I`o
zZLrMm(w+|<%nS^!6HInb<j^sSN=VZaP*CAvVruKykWtEG`t97Y$6wpGo%ibvf82dt
z{Cv!gX-i!n)&#5!TXj~$XyxQ9sSCGeK9sn~#wa<NQ+kQTx>V28lQss5xHY&=eC`^(
zWOfImveKKzo823}XT}FT`K|UMV}**%CI!LD7ps>toRDz7CXw6{dsNlsiQ$&VTMfGQ
zOb^o+?U|G8AnrQ#0t?R}9v%m_1C6X34rs)ElG(Z8!R2qq{{7u8Z(H`_#=_d)<!8*3
zH_2rwZcun$DRNDCdeyV2wX@P^mixFcakX{ootnC5Lw`ujA_M0~@w;A|Mz0rMGns{b
z`kdPh`W#BibrBOXKxZxdz7Cyenz~NAcG;Hizhvh>-`SRz5?S{7+1aO0pL#8wq!t?+
zym{KQ=g+^(TiMte&ofw4dZ%~l*Q;UYXM4r;o9*_DSsD51T(y&0f>O2g@(Xo2AM|&e
z4Xc>2{pPK>S9McQKXwW8iCA*Sue&P7_p*xqgHMliADFKy^!Re2Ptw}X^y8at>DR7Z
zv)cRarTP7+hzO6(O+F8HzEIga|No<>U%!40TmAKHeqHhV#=ptQ!qe7vEXjPw*sNf{
za_e43I^WXNHQ%))FZ^CoblYz0;+pS2S`t^-R_?sE_MXhH8SBsICyGtUjES5k>KeHE
zD%bzYoyzqI$*l|wZ}xsWQyUv3u)y%1rF7fm%a{FYf1W=3@#9<T@_m0koqoUP^SMu-
zigw?<_IR~NS06tE%dsPgE`_dvezMOGL@W)t^Y@~WfKO(1%sy$JOPjXN44)djH0WiC
zRo8|ig*7iOEL3*ytNDHV{=aM6_ifF+ZT9x?W}V44+M&j0YS%Bl^xva=Lyu<|Uq{}&
zM+)b5-rZeZ|5*AyLqpZxx@TW*o9ErxQTaJ-Z5VSy-1_v+OD4I`D>vU<(<Ueg+Vp+r
z)~Q!(m!|G*Q}Hx1Gh6mb;;!IP){^9H8oZ^au4b9ut^J#u(Y!)v@>b7DQ?id1%0y?I
zKJdIaQ@{45_x+#e%0Ydxb7#(ddhpmQ{I2zp9_FWf0@H3@y}Dyj<&8uMx4<t~g8e~r
zMX#=|);_(xq}oeal;OmtoTMZswnfIQB_%gbN`0NE*_BjWTwGSREokM6YVWmS+J}#x
z_6_<LTq*eOYn7Fkd!L+b(UTLx{x*fLuB?=`F5C0(*Xz}*SMOp34dhNb5*58R?5l#7
z>T(-T(Wil5bbW*WD$KQ?>gD>oa@X5$Pdhzy7hT=)OFRDOsp9jt-(M{5_w(^%YS8Y=
zTkd=<C6Z0YimA#}`)`Byjg2L~*CwieeH8Fih-vfoU(b2i9C^bo8V4<Ki*3j_!LYgF
zjj_(j3V}@zSOYHH2naZFD_%1F+`fLFc-4@&j2^>%9~QnX4rOZQ2w3g3SL&RvuYxs8
zPmk~CE4MsYoTO7S^|?A6V&;V<WvyMGzh?c{s^DZ%2j&xM=Y`zjSBJ(to59ok^0D2O
z@=34emnd+=xu{mlHLx7Hae-Okz>gy#506^%H*7uT@^J3=c?~^=Jx}(AXN!KEubkJ&
zpm@V^alQG6RmDen;&^yOTmshyp1-{2#H1Uu3|1T~T=V&UR6>JI`9{-*hC|0@++nVE
zXgtu;)=~SeDmIyi*;LzX`XY})n{DcR=l#s)?<;tlw)kR1T&}L({abIoO}e(qoblEQ
zA=lO)H-xw=rV9sVG~W?@J$v@TtveM~Y^_`>73Q%pU4Ti&WLbTbVwCC9B>vi$vl#>g
zlo}j`1ep^ATYrU%Dsip#oz&~I|G|u-%;Hi^8Mz6I6AJ1NH62^P_|V2hg_$L8&u7m=
z>m*i(FPnY#*}0Yab1Pn~Jl^+ymV7_Q1?$(v(|>hLVEPp4|M0;f<68~C3OV?GxfyV6
ztGm+7Q~oj1h56jXjtQlr0yo6>o!C)uY(`V$-TRx*Ffvy>KM<*8qNdH|_}Hdp;n!CA
zXS&l~vz+?!b4~hp(5YULpwloG{}L$Oe$xA8@1kd0-<Czc)tytUbb#rA!L>F1K7Pli
zt`f+}J2Z85_x5Yid>3w<SnMinC@Hon<;YU`+Q)X^>Uiz1wOM{;GE-pTcQM;iX!`Zv
zuS>Vi*Z<sQm{#;Cq9cK!?sfJ4%QDjc_y3LmzuW%*Wc#<JyO{*q66ZaC@z?tOp5OQX
zfB*mY)vH(Xe=o}0etWWpx2d<ck0C&SX@Rx{&)RP`zuvC%esL>_u_jKY{_77l&q>cK
zHB%TEVmDr&GV@Yk>I}1`y<rk<R<?Gp|NdCw^*hB@|I5Fi-M<!TJhGTKZ(iN2mCL`q
zzhD36#zy%+57<Eqar5u)TH3tKXxcw{q0Z-xd*r7kEm$?J`cWa%gDxhvXY04Gv^tmh
zX(CrylS07dn_IV<K9AXaGskT9?y|R4&sLwWdz&3^UGn0>jT;e?ywCQEvpn5n@jRrA
zrF^bJ^p4o4kE`~sdvR%=ZFSxI?{)7lEOf5_dRYGN+x!3CO6Tuc7$lyZE7R7s$Kv^o
z%DLWIYZlk=GOW1%I#EJv=F+IO(=J{~JviY~!10*hHQBi$u3X|)-ySObmu4t2xny$o
z^Paf%_Mq8e(1QL?Q`gJb)l}5f*qq<ww_N!6$K2$*zn5Ie7tDXP?@49c+Aw}utCBxI
zK3<Qnugy)}>QZ(kIP&18vuAzxM!ov*>fE${_gw>D^exGpwJcM_b!ph@BfeiYtn&0d
zsi@`Ht90HqB`N9A>-hh_PEJ-|AGf#a-JPAUudo0AY5M-0tx?+A+O?{IB8(2}uV-(+
z&9!uD#p-?0Ys0jkJ6kFW8lK)%bS8W2t%J?%^7Vf{9&YEKZ&Mj$+t8u$^6Qr%0T#!H
za}C)zy=r#q%ym9|INHgq!KP%b!>jc3Tt;2`4aJWR2^<sKY~yNlNQvW`P*+2Fi_#lj
z1woA@W`=u~@Aqzfm|nZ`hlQ(4*ojL06LtnyrvEhZF==v>32}a0{QiP#L(9C58O6%1
zRgNDgGJaWiJF_(Ut&Z*jp%*HAizeJCet21lKWFXyC1(sa2roJz<=t^W?(AC@Z9#^R
z68;9;XqF47_XT^0I=Y3-uY1~TCFmVC;hmrLFP}OkCa%t12kt#KZ7Dkbxz=&=`A+Uf
zP23+JEy?0!*(=PSaZq7_fnpT{lfjD4PtM`_VvOz?4kp)5No;Ivlr`RJacghw?{lB0
zuiyXk+U@6hF%faMOEUQa8&#&QnEw1)%U8G92CKd61lO6(-a9AqLiPF9<!d&m8K^B`
zl)V&GP|evpw`0P^pZW@qe&1ke?Apq3KtPFWb9v>%BR_RGR=;Y`X4tc0e>X$J=Qy_e
zg7>Pk4Z0RtaDD2Xwlzb*VGeWn${D$nzusKgnQ!y?%DddlySJOZ5({YH5i~GbP|lz*
z%WU1e%T98E6Fh!>yvp>7FIn;?N9~rYI~v!nf2YnY*!{V+ILUxPsiS#AROcavPHs)3
zG@T{QIjaIWt~IEq7;sGM=$O*-+_mS$(GTw@rt~4td54$l2ZL?~yyci0xoyv$JsUSN
zGAvT-=9oNr^6l;U{f}obSnYjtYHRD$Xzi3WyvmNsZV?k)FR(l^ViLKyLwHy27ET6+
zJNtM3WGU<_+V6F?$+VH<`MLI#Ls^H_?_Lc%9TOiF{agF_r}Z|4LcAf&KQ2w*|7zll
zH}U^ptTzkG3zT4MtcVvmlYZa!{T=!3QET7p>e~Oj61;iyXQl~aF(Q!@m)(;-do1kV
zA+gu@AGZGbeKWd-E3_=hN{7pQiU<#@c*)Y(==&CZU-`YCHGNw#|KzcHE>(`W2$v1-
zk0$N?-ddjFAy5=<@$K<sVSk&iDT^;!)cyGZ+In`c`hDz<f`xbUR@b#K*d%2zOE5GU
zSX_T+Ucw}B+>n3TrbGqxkY@hWM+U{~uU{6MKJ)wg`}L2GbS59~dwYBP`x_tI`Q>a@
zBsr@ZeetdNXr{;cy@~aG=b2Z{W!r_@5@p=({Z8Bb^Tp!+b7#-k{eH9gy#4<_Q?<kI
zRlMD*9lp-R@kWM8k74Wi(1;~h<hGs*oZ-x<#+!d_=Ms<kR!8$ZJ+(V+4m+t!%=p(<
z$iv_{X~oIY-`?IXe|P8SkH`J;)@5%t9+$hluXeZ4Uz5WgvuA#q!55uz_uhTQ3t_>>
zOw+twN~VX0hu{3^JzY;%PjA)k4N68`=QMQJwM_dJwB~@;XAk~G#p^D=T#~tp&)T5m
zSH9yBuNT|y*H&H&-W0XgOsaR~%9Xa&-*R$tY9349kBEraQTch<EC+4z%+k`Ycgyd;
zE!&+XxwxR8Z`r(Ur=G41(Yk#3^6hQ8v**lNbNzM4iUs%P*;YS${#;#M{pvY2p2KzO
zrVpf7&D>(h_OxuzUD@AEf6wiI!YCLe@F{KvV`0K~$0m(y3JMC=%shJSO^rUbSvOX_
zOsjnOxoho@L#eJ^PdfH)NM`3zIM>R^7MS5$^Ks|#*6kHbPclqmV*0?8a^hL!DuLw!
zPh9&FlD)rL%vo{#r<=G%X<zKb3jIPE_W*~7yhS+-G52mp+>P1KI?tJ@AV5S<#hG!^
z!YF~IaRQ8-Jq@k~CywyNX4SA{FuFDb%;7r1(wVcM{GydN?*zMV_l)^=)YKMfH%~b1
z04ig8>Y5q^89sdfb@xGB@(Xn?>BJKfU55(#Vm9cXU|-0X($1&B<n5rK;G^;CySD;I
z$D{T;vnKfb_n2&P&UjPcR0RqCRiYh>YBvX;P3D)~wXfpwqp7c_i|4P)SyQn@p^Kv?
zed*~2HI7FHU)FIvN;~MbM|`ReGvlobQO_kB8|R*rP2zv#x<te1MR58A5B<j+46M}*
z9DBTGUyx!{Qb{U1R~@Uk!R1~xgNl;KZ1I)e!b)7aia!=zFRF}cbdq6q+#7XsWA*ig
zf2+Y;77e$RA1~2u5jgl%u2yhDvS5L0LICqJTPZ=2(4Cx09N*Wg$)D!&`gQzgUlPl!
z`12Dt_#aA(Z}{G*%DhjiK~#B;@!~{3Ystuj`@+dLpR?q!o&3`Ldr@H0vlVV%6JR4N
zZNH0iwYL1dyd&7xTh>83!P(f-*w)ybd)fW-+i%Z)TV~CZyg@Bp--YkMM)P@gnbyaC
z*A?EIs=k!J$FSkZJlSfdEsa|PMUQ^xYK!~WeciA6{rrkA4`XjXQfPDE_vK4{tK-(7
z{~!DReLD7t$s)gJW8>M)Z!Rs>&io}V{nl^!?b>fQ*ZceVis~rYn3^tJ{d8Bzy1P;H
zo+nE188g|vX6D-)=U?l;W~*!9mZ-IU%NKKX8wI*X?=C7&Xb_yzX@BOAYwFi~Z#_dE
zX<BfYt1jy7<Sfmv{PD2ef4<${Q`+leb`~wYn)S76ua4)O;#JOpi+pD-JGGgk$zdgL
zw3oo9MK4zOu+?e*dg*nafkAcoisvW#WUb|@UMzH%ul+L7U2f*wxxA0}-QF^9o9g?=
zeEZ*4zkT`JAhqQ5*W9TVo9qAod-?L^&!0by)6e<z^v<=dzV@{BS<u>b>!v+BqILV?
zOn!!4p1;B(r%j!r#Om92o?FtzWi|U+p;nP&PR=Q7tA3fyKI^vF(B8iO$%%=J-TUo6
zpD~_1dGe_@8gE0|zGuG<xX;@4b*3gW$EK*Yua@QA-}iU-{l9s8qpDvno$fc+>gvl9
zfk5MVB09k{gJz~L`4IdtW^2^hO+LlTroLJ1F7R&8y=iiB(c4_kZ`C>dwLtq}-^|rl
zvt*9n-kxt?_orgsb5Jj?=4a9BtEV=txtnMI<$`l|cJ}Pqvkes9FgWbYtxCN9XT5Fp
zw=-wYuKbmmmzP&pw=Zh#EAB5zOLvDoEB-q1$iW%+c%KRj-m~10CFSc9w;-qV%leqO
z2$K}vs&L-s6HeyZHTPcUY<rxxdAdqpt&QP9*He+RmAdWBA2G2sKWLmQeDq)s=Y#NN
zFZ7J7MHo%QCNQvc9@#8%kBv>&$5h)oUETcl+(jpxOgthA9#(5ET2QXTGf{Vv-)Z&i
z?bEt#lsi})1J9h<$#hhrS!6P!lL5yY?&)QduT@p&?(BSVk!wcL>VON%jhw}4rHYLQ
zQ}^>LD^0kwvFnkb&3(yNUuKGNMW^lBe*N{{1J)@5>IzavS?oT$s?D6bM0TO_$1t9S
z3e}6>pKOV<)X-7lXz*z0G85{Ma9}vK_w?6IX^*Q?4oz5gEUhem{?47rxBq-O@+0E!
zu}^E4Uj3@jw`tCGb8{~JsVn^As`egnS6klD!LyLHWSvIWoy8%mLqEvvO^$D<5K?Qs
zrOPR}NI^hJ>zxjVD37i90iHK3dkhvcNOd(Se2<ejXvi#D`D*X>V?I5-lE*Epn(b7W
z-$-(ERVa1M+FDSv#?aVuWBK`ci`l=wpD}xdYXWBvg9z&eZV#no2d*?V$Hsj={&SZw
zHvaPS<Y729ol)^;L{VuFd$z+hor3qaLJ>x49JY-j6PDlA$y~3myXJ08*Yf2@TMk`I
z%21sa*R934i>3L(52l)TvI5`4nJ3tucx$>x|HG-vE8M<nLYDo?Ib`ZDxqIl@v$XBE
z-<B_BG2>aDwoHB5vM*CzCoYX#Utk#+&{6EuBsPJe_xrt!j20oMK<RC}_tx24#Xqa#
zl9JqIEbXNz=p=Vy*4pIxPxXu>t{#uM^sVK6%#KTM%W_4+q||4HE;u1$`|pJP@8|zF
zS=xORum6`We&6=>Ugac*6La=&-S!W3F7(G^y`P`!*ZwcBdw$_!`xOKCr*f}2qqL-c
znf&|h?P~Y*meLLl>HQx+7UupJ;m9zNnml>(tYtAzcIrK!*1O#-bN*Gm8m?C6@DK?F
zWwj0Gs(Y_<<~DS+dPunQ+kUyw$jlDfx&XQ|@5}7`dA8NxZfynS5$QVT_mi46coqdb
zZ}WQit~|y|e!dWcR_&(426N`ly}Q5ue<L$HXb$GVfyU0x&W#&4x-DLqw%V(;<FSRO
zQ10^6%BB-Ib6f4VZK%kTk7T%eMd!54_t*&~+{cd}ch25^_Uv4nx<|LRf-c<HS@ZML
z&CThbZQ^6&xes4xYvg54GfT>qP)M4zbirjEo)VkA8+J6c=6^o1!2Xs}5|i}tLX|?#
zj~Aq$My)lov$HcdFaPl1;AC}w(0QFTHG6L6`1$!w`=e}n;p07Z&!9`8+ZucixAY|{
zMemLCpX8$G{nk~w*KKLg&v)hftDl^hSo{0i-zVz!mgVo}s0p(=20WXhz0jxe&7`G^
z0=nInYbX0HoRi2ddH0I$^_EWsQ_~JyyQRR>tPt=tM8q|Phv7=r)}KEs|7wTE=H}&1
zYkaCYX~h*q8I^kXz>xLVO?|vvL|R^*URk14$=^I-O;Jscp^?Fo8%b;-MyYMjry8p9
zByVE;zP7j{v{+Gq#Z4ggT;;899u}6cJ*RhF-deTP%`hm;LwSNzjev(O%lxvKOH&UW
z4^<Y~Xz`x=pUtux_tszCBOdQ|!rFaWk0A$>&OOmXG7=mD%Vzi9y`82XyZ6@Xl#Y~K
zml?Mk)|ftMoy*TF%=pXZb=kW3y+&eh*M~1Ua7%;Z(;DqJGj2+WCO3#AELjmXYfXFb
zSua(mclF-icvHV{UvfO>=D=~0(P95lH}>X~`L|ooI3(!Q=QVBMIFd2rdTsyFx#t%&
zR0!t#2uKyNRyOVW81iKmW0YQxME9Ge3XF<O=UN3XG8kwnvrat0@I}$dMUh)kp^Ke?
zF}-Ia!^GATPP$U_=hnS>xVYWg^VhwntFMcR>&5NsTQ_~#%qMdXxD{{x<u)<$xd^Yj
za}SSBhld^OM+UhIi#aATXhdaw)xN>Z&F%gFh>4lWfdlh+6spDC1emnvt+hxq=wJ{L
zX7<cjuzjBh>ozGaao20_1WsLvNUqAsx*hWQ!aiGe{x{O{`C*4v$ldnhVdOht!_+Jw
z@Zyc@&RXH{UoV*$lxMQ1|1*&}xa`?|rXz>k8gvrwPr4O-D9v=%d>QXa>sH=ukt`CI
zS{1(1>tNa?w}R5-)yJaGEfp}3cu}cw<GYni%p&{OmA0z_|8hYGcT0G8TTbcTa%=Jm
z%cW8L3=PQ}5+m|^uD&k4`uSVc+`R3tW6pV;vpf)R|45tQZXUab`CES1rYhaNm^XDt
zkDiLqM8(H*pSZF)U1O0uyY?&Zxn0K|_}BkCt#ewg{>#PY+sz3|zdmjD4_kfp<jIrr
ze;@eQfBY=ob;w+**KhaSWiPj8b6;PltD}2YsG(lsSoQaJdE3oT^ZAO;={4LMrRzCK
z_n74Tg=L%!i!?6v6{e-R9nPDqa?mkilb5l}lCagTfh7+PG@d+pQh_66<wEX%T9+RB
z|6-^wGrc1>o$bacyBFoFm@mg1bzGL7w(b3mjrsTY9cJf`+f(uJ*VostU%&SD_Rh}E
zep?oO(mgvnTU%Ru*3#PZ{JML@CmQgmtEnwpw(Lr2XsVI1vGM26pF!>T?fLh&=ifg!
z*IK%_t?ZfWJax~c!w#jzck{}-onHNYep~E7(vOXoRJR0%_uu~bEJEaXpo~Amn;RR8
z@9(RXlB)gm<mAz#NB!3C-nFah>#I=EO|6U#Cce|bpn7lI%I4rR=Dxvym-F20ea)k?
z=;zO$Z*OlGp2+0$`0?Y-n>Rn6Jh|5`IV~;i|G&TN{Bm>V&C}BlUK+VxZsoqqPd3!N
zv}3QDv3zmegsOi`4N*TkPJENK7CAa&_Uz#7^rr`xX71XsVZ)X!OVoG#%boXpuL)yA
z+UCj!2O3|#e5uhDvcn|DG<1=1z$C%8b>X#>m?nC0PmNnrXX`aPNXTnx(8U71zs^R>
zcw8_2bNM3tUihHi8P7>C+`nwzGTEgzU4$V>$CG{9%-=I+aqygIc*@bu!KX9lD@R-5
z8i7#GKa31UU0O*kyg`el<m+D)6c?#|T_(W6BpmWMZd!UP|6`5wmls`^<395+_V)Ai
zW4cxEZ!AzxFmf^T*!<}8yuR9g$M^XgqH+v2Z&hp(*SqmlEVp5Th(TDteEpLdy@&js
z%}L+l7%1`}Hi36jO6GZif@z)lW$$m8U0ktxZ;?PmGQ-KJY-aC!n&F2cT3&8E*14En
z`s}Zhy<t%u4S~9xUuPOIFr@G@Pq^^5AeB+VB8a)6!M$-`5O2VRQ_s`>1U9^Dh<#`E
zczarzp~R<s8_al`7I+9x|9b3kMqSpLNY11rWy_BAc!r6BALTqaIs|(ex)~NSI*Fwp
zsM2&{nd8ooJ%PohaQ*B=0ZHyq=Br#L+6MNK-m$sIx2;_I)OPxJ-8(yWUdbxml{rbp
zbCRJ>{<lp^+FT0E2@_64WFKC!_huN^Jk`tT&lMOvCN5`c$Y5b?`4#5NVCQ|JLG?}d
z@tq6|%`qZLE(fZo|N7^d#VJ{xt^M`o$DJo%Zj4$g)tcOU>dKQNE{peN-+puM=gprp
zI~WQWb}BTN%iUlU=Xo<nJz>hfscYp6`BfUYZUoxvbc*ULC;p%4;=^=h`wvke6*ti<
zjW30xe??`tJEWv7Q}36#AwK)TiBqd&<^79~w@NJ2;Hj=;Q&jx%(c+HXwHv1P!JHR1
zx(lgjH@{zezRIdUD<r-Jw8dQNYWwPkPfH}CEcLJ7YyT>8s41mc!JzT#?0Gt;yG#<}
zD@>Xe@@ga(9J+SH?)dgCc>)X!FYikT9(eo4>u*i%RrlLJ)}H70(QEg1aj;n=z#t@<
ze1Lskt-fdHQaiiMo%42n`Es+kBdM9=$%RJQjfMqpjvU?^wKlBtvrYZ;FS9|}dtI;F
zS<CWoZ*Know*R-izOJtA_dCVvee$<Ar}wj6;JK}rk!^mbrfwU1Y_wPQTTp%d?v5mj
zqdou9DP26XR`~6{yFJV`B<-yDjr-+0raWY7S->Zyz!0=#Wzm8w?-z?mKFz%Lx=e6m
z&`O#5FBc#8+dTTTN2BZY_4V<)%Y2)QZoU0BRXbcSZjXh|=bJ&T-#cz(n3TQ0x3~QL
zy`4LEf_C;D1T}Ep-QAsg+l;~EvIv7fV5Zb7ZJ%bXuWH*jvhC@u`tn%6ElZ-hX}5>T
zs}tM|xBhGYU6QdiYgGyNA-BzyOD<Y``fyl*;htlH`1;uDw_C4=g@uW1yM5=*o|>PZ
zcE8`Zd&`z9FG~^@WCfl`yWt?k)?$=4Z`LfUx<5ZAD!ZF(v*c)+YhC{C_V)bm`)XB{
z7Px60cJe-|*>-;S_l*~K{`LuJop|c3$=#TCafTbeE&4#0&mNbn-*e(KsCjm2srTBj
z*Pv7N&dsqbe|P8Evorw~FPoQTyLV07oqc_s`n-yy-{0OUeLA7s@8je1K;eHzMe;V6
z68`+4cihQ7GGB}D6otP?%ik8wHEV^zs_9=`mPD;h+dGfRT<OrcgADf#nUAb`WB#S%
zde+vgwact;ye$*;>U$h9dH>Wm!Epzh6bjxX7WC?MExP<tBhLO!;L`VNJW}iX8(11P
z?D^$5Pn9X<@vUt;Pu}`*`CLP<1H&berXBwGE*Nq#TzR&HOJV2tN_Q6<@wg*xf<Yg&
zd%2V+CFko-+BnCWVMCih#GL-a4}LgX^U2&3l+a+1P>{&#kvzb_!mzWs>+SKFYW`~t
z+A8Ni8yFnwW3lOAh?Ms2H-B~ZSR*sL(RtzIZ8GLp9P$_>dVYr4PqXf3ThI98j^ii!
zSF<}8+HZJjSJgH{f$c@k7G`Azxg`SU7<oMu&a{Y45IC~A<JOr5jp?ku2hP0tn$_8&
z@+MijszGV;9Z{yXlOl0k=S8#oWard8xscNDza@IZu6t1t5fOVfnndrP_2p9BtR;TC
zGB2K;<8I)RY&?0M;^%!DT+c1!XXHkjZVuEGT@+wH^`yp8&l{HEDVn=&46e0p%FXKH
zm|J`|?|QX-t65)DL&0~S;^TMD%#;0md;8gUbLP*UFP$IO$l}CO`bd{cfQ^aqTTseX
zua+g6UM);49lw%2+D<ww3JGSIXsss1RG*^b|IQ;mC_lO5(1hAXoq63(5{qA5aZ&El
zI?gZuB5j{po{WRZj8{Apm<=2_7%Y1PBbt^>SMm}F-TVE}zLYlb*sBF>zft*NmRn{y
zoE<Ok&uwO4Vy?WHkbUJp$H4}Lf`*=HpJL{GKh`8JCbOc4{ZHswyBGW4KCl+eV^7Xs
z*|=$YjZ=6O`_=R-_q&g;n{R!mg`q<=f#Ku1YK|VmiC<ZtR0eiyn{A1Fv^sFD#vkkH
z>(;N?zFzlE#k=fyyDiHjI}`pt+<SlPesfF9pNHlDy!`(~{{L|UgUGOq3;C0tndjg6
z@!0;~V{UQ1KNs!)x!?bFZF||fJDSZ2uBp>`%+EYMaX5W>!mUHSK`zHcTQ4b<tlm@X
zHSxkRA4!K(lRlhdbeNW!a`yPGzVn5eUV&Y9DH_U~-*@*cF%gS(yT%;5GQ`X0vfIUl
z%I?e3(k7_{%DB%o`gOj#Zbh-*RJG*f<jIpK2Z~JXyZE&#cA^oh`<D(L;mRpDHmPRq
zGLd?5Sh#ude%78H`o+s%EN0+3<{Bs>aa;UF=ZphZ@1xd=F_^sOm1cSHcblwrlg6z(
zcS81tinz}8OV7<+d;6_cj-iZ1{r9vN>sTEPOih=XZDCj-Temlky}{=ER}BsB=8h{<
zwwD}gIvBZL{lVMdH-3xn>mJ{A<-rs$dDD=f3kRRJ?wa>nEbsQV+?*U8-^-nyom;nV
z4O_ibBV97$oWkC?^+7AooIlSFI;rj3ySuA%G$n%6SH|-3oUv|ecand>a^ZX^+k|uL
zcJ8!HU3uVuwcA4NyA`D^f#r&|_2vuCM`ZVIRhX1IbD8_p_bc7(t4;=;x+*s3X!Uww
z5A*dJT)p|y(^97SNV<Ocr6&H!bd%T?b~hI;u5U_B4PUton3yXXym;6SFk3V*Ik50F
zxN@*uQqiw^d%$UJ7`MW=dkYsnx_9H*^PK_{99cCO+6>BDXE2=LN}j*ql_g)(p6L_T
zh6!*ecrQ%gSj8Y`<D76%JV7UdiQz=BLW7d`jJpw=6FE$**dsn|QNJhtsPkY;q3x0?
z7def||HRk*+Vm<}x%Ru{1syesB`KU8=}Js*x(n7GGvu$GTWiPlv+lcKxm@F?Mn?@9
z3Fd1~6PrcecnE!%YQWJ^`aDvAm9x`!HiMw9HjmOF2bKq}d-T_A%~;dHQIV`8B*ajW
z&Lhxe=pp9I(DCA^1-~n!S_5a37qgT6`D@?mo=#jWEiGO7t|)v<_03PWo_#u%wR*M@
zYhX<F*GX5u_C~LM{d%_a-Z*{zIUNBaoeL(h+?}xKf`Ss)qDN{$Yg;BKf8FR-o3tiy
zedyP2<-Wr^XWqQ|@}!qc!8~7Iv*WK#lhS$nSOZ?NdowpM7+0Qu!<>Bh!VRyrCyWL4
zm3llpSik3g(2;U{WxSywG$G>N9L@(5cKCQk$R{?odmQ*~8PmKwOj^n%-XbmB!t7dj
zvane$hd{fVeLKSqMj;llIn4(gme`pyok`-%x$%FS=(q9-zXjU&8(vu_VPD?xWQE(;
zO7MYkfwensDXrEN_CNK`BYaP@!iSmd3MCz{-_A=eVRaYmxhlO-b<!OMP7%*bn-b^B
zMi@yl-)@j}v{6(r*ktC)!m>ste9zrR1x}?+pBY3Zuw5`>o?zOLu-5nUo#*SKIu|ME
zY%=jK=5tbzc{j)P2>%|5kng@8N?O~?rr9=apOrUzw?aqBN=w}<221BX$!wgMyzlB~
z{e5+Mn*yiJt9Wx`iQ$It56*f0d7HME>)zhlUthDs^}A1;dS#{1GWFEg*6g);%cqz4
z&A0n|r}(_>&nJ_2omj8iTh?#H;h-s7Y`?nsU8`@xY1eA|6^k@3*<7|3QYw0L*n){6
zG%n<|Y3yWn-kg7rl#CXnvor*G7d)s~#3Jd$llx%r`>$0}ymp3$7kPfKJl0yS)Wr0t
z%jW!Iub8#hOX|X2Z=Jile6PRy<>wYWYHpUHQ?^b_)8uJoUwOfk!6zXxVVl*Ni930Z
zeA&JF-|{<abDDm4%$U*>_pA1m%EkCrX2qbj7cZQBm%38i?MT$(douFcH#LllH}C%b
zuF<;jgl?T)^s1JbZEs5>mfX&Ky`_bTfnjSu?;9~~F&*acf)jCG+up_2t1*9@%{tNK
zbdy5BJzx2_z$xsFYc4)#ua3Q5zT#T;;Uja3Hs_yTwD51J!s4*ixj8u*DWTI+3uTzQ
zi~a5v^cc?dTOPMwTW(3`^)6;Di*-&;u308UyDw(EVC2dTkb2Fd98mRd)s`-{Ad#a-
zMP3^oV^Gpqdu)c0zt{HtM^bMX8(){^eIGOLxwf|UtEjaXR9G6bq*)7dk``UeQ0V&J
zs`z2w`n(T^rmbO+$ljxG)2u&XuYm$X^~q)nH<szorfm=l7chLil<$T@=<8CZbKQ1P
zDm{Na?wk+2`>fHclFxBxPD6m3I3wc*5!aNCx#H(DdNu{S9(f+AYj%k50)zAA4)*i5
ze1|V6C^0WCILIUvnVo!Mk`f1};UlH%7EAs$GI*PHa4`0=e>`WrS%Kxo`9n&K$_;-L
za@Z2C{<w28`$DnMf+d$Ym@l~R`c-cgrLN`v<8NGx$c=^?ML(sESBw@ciGk8$Zb|%S
zRLt12xgFh^{&KwfcjWQyu(OAxuFJJ>1axq4cP*&+;^VSVkmXyeUI3>>dcy_9MJpRu
zUgrsXAb5PWa0VmeBqlTS&0o)kZNGi?)1t6!mB?#(+pn9MMX#NfcHS^RApHHym&!^h
z4lW0b8CnuAWSC@KeRb!_5?&31X&g+=TeDJ=)?8e}Y#6~LFyRnG^`j=?<9g;S3_=pw
zPT9T(4n@w|vRP-<5rzX9zdtuMG;+*v4dio5P)<0&zf9o1m^^RX2f@D8pR&K4{oUH*
zRQb+Pz+gjS0CxaG%`C<MK8_S#2j0-9EF3(2z2y%WTR0A6uCZ)A=V;0$5YghI;v4L`
z@#nVJHy>2*{G;_VqU`8msjK4q-4=kZZFrcq!&+;%)ZTdg%T{@}#VV$!xlU49d$w;W
z0|Unfp`(QoPvveb5EMuZ@HCxhVDyFc$P%}o7y8`=6dW(TFJMqe_;O&;qx7V-1Q$kU
zj!Wg|T_-6R?9;IFG-t@Vvih#d*SI}P7BzOb%!*;S*U0f|t${LAgo{dMh*ssLV%JxU
zo-CY>I=`82KHs^6iHD=rkl{Jc+PqJXwAYv3ntiVJ=Z%Rs(^z(w`M#g=doOc!+28H|
zr~jX9`s1ASa|TA!MIB9H%m04TuiLq8la-}q<%<goJ3Biq`aauSpL2Ipv39PV{q4u=
zB)3QZO1bN|)<`b;<Kl;QpEuwAbbf=^_B06vH7UDTw%2#w9S{^az%s2P<HV-&8DRze
z-@k9q|Fmt+jKlMz_qm<#-rX%1@b2c{lrV+|CO)y(g9KfUaI**A4|=t&SC3%|?<&9F
zb`B~X753{V3uV5w{`Bo_;1ZXW+j@lV$lw1N5IRfyaD&}qwj0-?rsnZFUroL8W!hUw
zwKr2{i1P#(+iw0cwX0ma-8Fu~^PRVjOfdAisu`)J`ht!5=5+&2x8C-5=JMMf<UO_b
zUKyTgR%1TLWKZ_4V|+?oCp6qw*7zUY&|^5&E48L(&&7;8YXzkpo;K$)m?^bbdBv=D
zZJ1|!gJDnkoGmU5E^Bx<@~2H$kd)WLAg_P;sj;4jg2<$Ok{t$K|3f}`bSw(n!^be;
zW`jY&19tX_k-yr{bW1GW!necr{;vd?Rs#!OL5UfGHXByFIm)5Tz^UAjD8S<O^8gRS
zUZa{5@0<L8c%MIT_n6`L`(lbhNd-(v61-BS?(gDr8yF5O78P*OR**ZH;CWZp=l7-K
zOaIsZjlLM5p5lJsgv|-gOX~yUIhh#rdk(F$Z|k#(G+4-><apG<LaaA@`R6?^_pZOX
zN@>A~HJfG#3idFXd}m2LRn7BPD_kf>LMq$TR_X{dV+3;`17pMIgc%1nf7axTXl@f=
zdTm*JDCWtd3zJ<<6cU(&_8Bv0FnmjJT2XkWLAdt%&Yui#+dueS-Tl4%&anjhK%V0B
z8t1B*N?x=sG+<&7dZ8%%Sdbyd{+;a6-}~glDxWhm|Nc{5|7(St>8kH*LC3HL)^<qk
zdpm8RR&-(VnIlJBmIf7`V^rc0ue^2d#-5#9R{V8Lcw14d)VF%}+z=Ml6P(rSSO3*v
zQ2NWq!dUn~LwS4Unq3?2$0sXpa%s`ISGm+jctXeeFeaB0zXJ{pN-cB5Cv4Te@_pfl
zH!~e${!hDN+1|#{TetsJ(t5==>+)8WD6I=&;hAtRn^S6aZogqhu7^g9MdFQ|t@o^I
z(~?tH{_RbdumADl4vVXz&9@uL|IgNcuK!d2clZC}w{Go^j@#LqBB{{#c*||S;_}zm
z)|TyFYbBDsRxf*Xf0|_R=b6ezOHVDhGs$kA=?=l0MaA|`DQ(`-?~0Cecub!3e!7kA
zojLpeFTC%x?|#$cJ9pLjm6^VO_Wx<|^?Q@`;hpDHV>Yq&G%(f#<QemHPJL&~*StGX
z_SL87VlHW?E9(9jdzYt2FfT2CeyV-a!Z}5(3h&f*-~FsH{r?q(%|S`a{+XWf@#yk5
zG?sKe*1*BHXp?tE$bFZe<xg*}x*gVc<L+d}_o7yH(x%c@T!%Am6=>xARR49cA!BW9
zboA{TH(r!jWzGs)eKoOTdD!aS-d<j7f&1?#+}+wbW!cPiTq_KC85V0?TF+VfULr@a
z_S^J}{h>S>4Syx(7tIm9uaf+Jo@=z<BHhikKZI;+A|>j48vcBbk+*C3^StlZgxqiL
zMHPPqoPQ~ruVmp(J<;*%-SwQx4|ZF>PKdm`|KiKnKLTpEH?Ha6Xzbv4{lq=Z?1(F4
zTuVn&!y>LCkxKp!2NscNm+pX{8y2s>=fLxTL5A6Q0^?D$xy^^FnFOEIm6iVY<7H$t
zG&sZYrnR-v<BIFt{P=CZ8`xf4Ie32h*Z&(zVrQ^My!Sj?E5>{(byeb*|9Jsvpq0n$
z&?ep&t^A3TRRW_Kv)_LCQnEKLyy2L#_q=s$^y2pyh0fWKkg)jU$B$kyUuVZAPTTiJ
z#&wUO+l_^Hz6t8syV^GV>{IVurr5yH&0(y_mNKE`=I^*JmC9*5l-3?eH03!oLB}&g
zk;i9g(E1}=jgE#1uzhg9pR0Jj*ww8kbJ@=1XFB?3QPQ4a6F56o+{}4)=$z%Zhz+mr
zTXC+IKQeo{`1btyc4Y<o+bcFt_P=)6w))!&W^JwwpLr(jmg6{c_N>k4Gsgb*f4^M0
z5+a!-<a*ISBe<-5zGA!^o0w?yu8gTCUreg_`KMs{_iVmXJo1~0BD@4PuhG@$F}o_y
zGDY#gLr1-pq2<*Fr)?71G5ymEN6p9Y%0I9Aoc?3uoohVz4AX!8F1_xXyEFT}{W;Z@
zOYHd?3ZC2Ly?iC_ad(;{Z-)M>Ig2E^m}YsIXdkcVo?^L2`LKt(rBtDezOJsWj?Rkk
zb*hV}%&|Ei${Vu&dinc%vf<ht5xWk*(6fGiWl@HN;O$SE(J8^HEI$km1-+a5?&9CR
zLmvWG_;}9fHC(-V_4W1f@zK%2F)Q!LT}{j^yYZoYntZwW_7#6tuDsXf!23(-=-LH7
z59K(H$X&VkZ;y!5s^F6!CP!Z=Xt{kn+&$Xe`QYv%mD6>Xp5D6feP(q>?dr+9dG|l<
zE{I*u|1@yXtL;TyeDj&23(kBx`FrnG+xpgyV;P%7wc~FzD?9CVPZAJGxf&%TG{I3I
zWxeH>9v-m}vln~iA6z_qT{0#A#l1DXiS|=IeU0;JYz&T@=IGt9;@PXXNFA391E-Hl
z_bT7--F}T>;ns<)32F7uXGZgVZ+HD9SHZiSciR2UObsbhEEeA~Vqku;Qvcb}AU{_o
zn+*zks{g*c{%2l#$l_nnaf$wj!{5Kmo;^EjwWRCCFJHdgxG`hvw1d@Y0vWk$)~~tq
zX`g|FS@zeNCts%3`iSLsvYR9b*a|A$IN&hre!HJdhV|FBlnu`&KbI5K?bvFjqT=u^
zE~f2)(~=!YK3j#Px_W0yW#`SGeQ$sIKB3lR5D?xPrOV?iwS&iip;|x?bhX!9KXuPZ
zd6Vu(#qQp@XVaFN)4!H@%kdf|Ftiq1K0has+|0nSCq3c*$!fumU+%owmV5h3y=vd#
zvwolE|Fi#pIR5|F`22NijhhvfSb9&{)&2SL{{O%C^?zT-%gf7$M><YR4HV)1?sS;>
zUu2_EYEi*YpUm@>=c^~`_VmQRRejYTemG+m&!wjJ_cOMB>A0O3uz0<4#r}oT$M)yl
zkKyy3_fY+zUivh4zl>e-8JnI8d&eg-tL!r9E-zu#SUTZl-*?0B@s`W?t$dUFNsw>n
znR~@1cK^1>q^V4OacM*OrbVk&9hjY89Q$xk>-_ZH^;&h|B1f~=@BJqK|8afI+bgSI
zzkWS=^5msC23?D?wpKlQ*#7@x{m1y4x3BkKJnrb?<vdf!SyR$hRjSDT!|T80Kj-nR
z`E>BZ2d#ZEBCX%+Qd6J4y1M#p+3t%OQ{J6ErPcMgqOLCP^0I9P7VqvYS=jG3VV`v0
zr5_zU3{Q97zEtv3?Bq0`>F0}IPJb|A^O?KujsYu;UnIVMS@YY}IpLInO8NeN*(2&N
zjZO+QRUWTg(Ug?dlK8lvKjc$ovOvv@w}KM?PVH7d|BkuI=zCpt%c0eexePX`B?>l#
z-(zFqG*bF1TKRXvYXR0ZNgV6+o3=i%W#+l5m93)S>G1vbvc}U>{REr@3ltO_T26(i
zF{B6zB!8(Y`n^iEX`Ukk*Yk^$s_Zv2Y+jL4ut9ZC>JIzjl4tvlCrt?0dh~O)x8fq6
zwXRdA|2kjw+1+$i{8h*hy!)DmyFVN795x6!cI3y8A2)7D2&QJTF)}zjoMiIyS!A0)
zU;p84KV^H5Ss!??S6oO;Jz>sy-UX&r)76>eBwVKJd?^#o{2|6A$aq15`Gi<*i^mx|
z@9sV9F)U&_kN&)Q^3eJB_Va#%ztfg(s{VcEPKvRS!0|$nz>NIkt%u(J4rJkwXj+qz
zX1Qj2_3X7X!_vbiJ-r*Z>E>JA^*MKT?A)?r&#dA;J#`-EO&K|iI!(tCWR8ONd{5u^
zWvKxl%K^)OxA*_O{r`jfzr)h`dnTqza(3uTXlyxnnBV@--}m+ZXW#$x?8%cQZf95=
z7li!T_x4f1LFS@^KQfm3o)i1nvCeOLZ^q6Ywfo!NUf<AmJY|Nv!5P*I;e7j-)hw%-
z{Cn^JyC?eWG<5CXo!oQ7Xzn%xLA!;wgjCD?w`82wn{ID^;@QdCDUpX4SDE`h%X{(J
z`RZSRX%C&v_UM0)R+Qh@FE2NzZrbGHK#`+`Z}z?~+nqUU-P*O9mlle-GF(`3m7!rl
z{^Lc<QvyW_Wmd~?;9**RiZ^ZF;)Qbeo+W<BI~^!3cf0!C%MS{x(|bGCtY4p>mzS55
zvm`TW_0@tCO^#m|K7RaoyYj~O?}Il#bvS(>&V8l)wJ3(5r8CymOfP<ac~j5d6mPai
zs*((SJ<JxL&fQ|#f9OJCh|uc~>%DZYvW4x?mr`TYU-N*Qx5Q=X)646Zdma<J7iM{)
zLjUOf`?u%ZuT6Y^`7eXR1!ZP|#cB~zQ;ZH}F8Iji@G)&hV0HBR<xb1(%mqTLTK<0U
zno|9rUqWI=3rppP9(551Mn?Th=4)Ixw$1oGFMx&T)I^iU?{Xe99FKG_2(tXWvaE=G
z_p8mV$!(ldx7Q2pYMMDkQ(58ZsROmknG@}gRiBPJk-jq@beC%pWY6;AE7N{+PG#!!
z5Mb$bOHN8!6tz|@Gl^kOgZ`&)&wib4eJw1^-^%FYe|5Q<np3jmgn$5+i8q%j3CtD<
zZ2Qa3$avyTT%z!=|C_(3-z}7loTahj?3*4tYnjhB0xAb*D!Fz|ITFy~#HDFuyhzJv
zv-azUVb9;LIv#hoUg5v%`qJ#Hmt*gizF)iMgyu6(!G!@CDw=%{7#dg%&o`WZmu|AT
z?nc36VFlG7$4;TgHQtAqWZxY>zcD%O__y@?|F*F(Dzr{vaJp>zAcCi<;5_f%S!*|k
zD5cI+ncc<DS0Za~v#oxM{<3B@#l!}_1KYkAH2k*VaZWYk>{Vc7kVw{?D<nH9%xBwC
z4rYb|%aGRw+c#7`zqj}2)2&H6XX%G(nJ#~}!*A&!Rm0LtH!t41ezoq^k<NQ%a~ZG1
z?5O_ytiS%x<BuOdR_&Ez%hJ?7_O18d(b@TbuEzfjjgOaSxbnJGGgU|IaF_1cI0@@V
zSC=#SwBDF_`a;YOce^7~6`0;cZMB~ulF?T*yZJf$yW?6mT!o)C=T|+j|1VPWYvC;Y
zVAdzrO@CzHZhQQA{-iY5S#OrkwoR3*;Nzd1V58T#<MEcOPZx76ow;>Nuh7f0)Bn$8
znUj0FXJggga}t|<wI_Q?w>5fc^Bhf@Cd%TtFknaV^K+0>2sWG%w&FD}Uvl@M(kgek
zve@0pJ^t6%zDWyOGG#{W)8GG|JbCiz)28Q@vzGnb*Uz&r=(g(Qli$95OEKEne6>p9
z<n1r9XPcV^4l!&iUp4#kVyT!*;gj8dT-ov0ZZFS+Z;cF{hTpfjrCsM$IlJ_7S?No5
zKZ~>LlUtqVyq4ZAHtF5EDAkoJ3U-=0pEG_W*(U8P;E=Nuls&?{T*`^Vz}M^M4fUXv
z%bb{wTI)JW&Y$eY%A(jh#aGUpW%X(A1L|f{T;7_kERLm|4hH|zj{7TdEM>Bo*c+~L
z;q9s~w~ra}&h1rrB3$PsFd@juOLFN88{VcBtB)k^@NF^?s$}%%d~kDt*TcGB7N4ec
z3Op=UR!UWJso;6jp?)=Q|0l77vUh#dCZ9~{TB>_zZAsR_Ysa45d6N_U++mY$TGj;L
z<w?_AXNbL!nku65FsNb54-t0GAOXgv3I2P2Nmoiaad|p6i3siBagktCNL5h%u}<&s
zH=kYm*FRortiF49RB`6*D+;NNzT2~lXE7Z3J1ba!`st%d8v`_^oKC%7`nTcruDr-;
znX@9emh9bYJN2a63^fLo25E+;7iP6g+jy;U-nF2!`e9k!r(X+~FVFY)xpta$?#2+E
zt9Ne}K5L!4xH^i_fyu|$@875A_VusVZVw9!GjZc!Sey`5W+PYs@u>Lz|9{`}f8&49
zXWpjqgS$=7Iz{Be&ZcAPtQYq@zxHL(CxOs;MmxfSYtFvg@cBH~S?;aR>b0yzcf{*n
z^2xU~kg0v}vHbW+{?Aix3Z~hAoc&4j@8`xzUC&nRp2<-W5qIFQUxciCE0^^avkx=&
zTwNUhzV9|WZ@227<y!4aY^uuRMc&-n8M=P4y51&BSy@?UXXl+UdD+?AuBu8r8x^)c
zwwU+)s@Bw^ooi;ZDYER8KL5F3g41Ci7Js(Px$N5({;DnCKIQvu22=Cjd>^N0)n7I#
zJ**+teSLlW{CV?^ozA@WNx(_x^r@#swzjsiva+Su8)Nr=dAML!n#akj6Ao(MEwnrv
zd|~l*u3ubELKB2mKg=;U+TChkZDHhPKQrCV@?7(iOfQ?Ocam~;cl@a}XL|g@e-+1H
zOUK@)&+c-VK73Q*Q?KUy*FkpjuSLJ>Z(8OHG<o{D2yqJ4ev}AU;GjCu$wSX_+E2BH
zd(JJ)0*6=@-j15NY<`f3!jwQZm&q%pD^3Ympp@}NOy<h%wx<!f!k76~6TI}qgSbrJ
za3nYM9zJZ4vv1e3Cx@4tNy)#^WM<Mxoy0VeW%d*Xh5(zhZL0)&3pplD6p{+nl*<)X
zb!y?5-`6pv^8-(kyUHI{*3Vvgjn>8t2Q15D&8K>O{qp6@_wVcTb*{^{GZ?T<^?Dh;
z|JTuZwe3;6lcbvawq3J5{CE1YcLvigNq%lVkg!XhZNZs8SKF8w8C^IOIbQ6N`!JzB
z(J1eAh}h@oUFR+p-d-ItCu*tjWT{tgrKM%<cGN#Puy5Ovjeq}aVL0{l)!gXq;bQ66
z#nQv4PtV#KCDHb@NHqIe)jW3z)s}!m63H(vPVi7U6LDwL<GFj8b8~ZZ-^w~GFYY`i
z=D9$bH#f7n`Qr7tvTt77Y^ncp?Z}f`x1y9LO31yk{`{xIt&t&TO?dsE{QsZM|Ns0y
zYSwI19%dEsIoVR(w>SR(u>Jq`@c8Q5`}=BVt-Jnes{v2)Mu}veTJ4KVj5(Nij!jWL
zvOIskNxNHC_YY6kyZo>1v!2%<xBEHYQhc+t^{t1Ep)F-B-u;{QRNs)6n||fTrKkjU
z)60JzEpO5I5IN;kpWKZ#>^E!Aw3nVcZ|-T=V}0BAT20rPbo0(O`HM5fD)!|@&3n9U
z%a)R|vZ8af_sg?PZ*P-5S9`zz_~V|96*hLZwzh_bg+_%&bNxOmq|6fAoU=UaxFt)=
zk*-qSSs#S`Up$+ZInBtl+C#H1v;0H9%ZzoeH5xyH_RgRGyn$iQgPOFoXOH{s<02yu
zD$iJU(z5?(((Ku@mt}6-y0x^dtgO7;Jb#t;^hf?Kw){-uOdGa+`1{Y1A%rRI{)77$
zm%PXp)OoAL>GIBe3M(6fm+P)tajB!6vyThdEIDn<bX8lL{l-H^XU2rx>na|vnU`?)
z(R#ZppYwj-Dld#aD?D+^ra+Dw^|JExnx%@_3+Lz6sW7S(C^-snDQE;V+Ap0T#4<4?
z$Wvo!h=8K1Xi&g{mLR^C<UrjC-~TT05nvQz@!$#(V45UwuyYEF%jTVuiw|f_Ra(NL
zGC|<Amf*JB2dpAepRD}~wmDY%UOuzAclpe~9n~=cp`39h_Od6w@oZXa7kn(WVj@ez
z?1jO?i>L7GUKLSvYB}%Xa>}KGZDVt5<)bIH#R9Fn=k9pNe^_99hqaYeTYG!{y<K4|
zt$G-qZ`iuC^5>=FvtMT~X8-lbFynk`Tl+7yXKC9{vD!{s;=ptF0#9>sr=C$upu#Q|
z2B%hmo=in?Cyrhrr^fbm>oT`3{dl0%i|=t_eDvu~<>ck_t+(Z`SgXo>z>#A`*qya!
zudbc?)Ove<?4J+Kowpx<U#6zDRO|VIOo0{#1}SDe$LpO_T8b5qsJE&GxZSyZeS7}>
zeYL;&-^f~DxO(^UwTo9T-c3I?`Q@6s(^{^j{Q5BO%f#lzn>TZRt=hYKv#DPr;~71X
zx}THl{~kSGXJu{bD#=}ApEpxxN$&0AeX_s#|9^bXCu8x%f^U-Ji{A{rrtzQMWNZ>H
zzqy>pWwLgsvXhEa%X-rZOAb_;&h#lODcQ1Ri$n0l($G!198J5+-~0Ld%UhMKP@VqS
zmOnc)d)6`zz8j)ek3u#(Km2rnN8I(``-)i;+&WeN=v^;eI%VDKs(I6MGZ`C_HdZ`8
zH}~bsmrtLjo;l{^UVM7fha*Na&zv~np*Fd(J)+J2?QDUE2Y+l{l)NuWfoa0Qi8JC|
zo+|%2(jTPRDI#L`TV0^>EC0NiDvRCQ7UjHKeST?4VtoG5*cOiXM3*H#E$LjlU(V21
zGP=JpBQNX&6T{Li%a=d@@bK{dzi;z9&IogbIBgA?xuY_<GPAE*otL@FT6po)#xuv|
z#aEkZH67sA5IE&?a;ZW~pwmjWl4|KNhK!z56SxIm?cxjh;Ly?(Eyb#E=j*LaFBh}B
z`O8UJZ&|+9lv9zt`{3HnYWY3i+qvcU)_?!@_Rp`Vy6nXvD-1TB-ML_!I71B|!vWjQ
z^O0T-m+eme<7l}P5w9z@ZC&i{wA<Tcy}$7Cy}fN;_Uvi+w|CO7-@P_|yzAhC?W~*1
z<_k>dYd+uTy`%8yBm4g!<kj=;vv5snXL#^CPVYMC60!Q<x7W+tR$cL1GN<Zpp^V8M
zm(UGH&b4=>w=4H`2`C=g%xJnkYuCMN*RI{aU9COWZSR>fDemX9mVH#1Gk^a4IdksZ
zxbfoMOGbucGg2d8JY2-L)md*#bJ@+m>Niv$R4GiD?zlHaX(mrI1FL>(O<hgRpHow{
z&x-9op?WpTR5Mj;s#V2@2M3$kc@IzU4ZFZK|LfKBSv!7A&`OKnBftIE+r+Rny~P<*
zysK@_-#@-LK7Nbvh48iiO}4~-_}~?q!tU$9sPXU9OM6C^$%+dmJrk_6bJ+5=gVTM*
z#GUWgicC53O8eHQ8y~EH-#$F!xPAEQ*BpZTBES(W^XZ?GzCRa#Np8UX8~5(*tN;Jc
zN6pxN`vFS{ksS>RU*7ro-rH?{+uCS`uVc2_#hcSsvd7(3znXP-OCz^lhgw6!gcd=k
zjtMagiVh!@S_CGsi#T}cG0V@`Fk{Q*Zx@-X<Lqi{w(Q?*%gM7Ks7OC%f6>3i-~au1
zcl+^l{rq)nGev?rBaHH_`q&wySQj{0g#BaTOputR;K0I}dcyf-YmBbvp@53Gfc4iK
z4HS=jx^(DnRgRV%149FYr;B6A$xiFw$?bgdmQ{a_-20pS_i%NPr*3ZZgawQ_In(s&
zYaYt~@Bjb)$I@;ij-<ACI~&h+Oew0U_;LU5?)vgyUnCQ*6vy5*X{zeD-g?gH)Erj1
zDIfmNG?$un<zKvjyttxMi$3q1;w|<9P8{ciJC9tr5D*`K|I{h2XY7fostgJ(AzD+P
z9zA;V=FNTk_PHoEKHANG?!Wb$<gyR?)^{T0GR|G9G0|MQEc3<lLlTpnS`ugYER8uH
z85vpm|L=GGxIG$6ebgrJT30=<ed(_a8$xu%q~+w~q@|60FBi%z%l>fU)&UN|e{VLN
zJz?T$xk2rc@*foj7M7_@4hwuwrT-I&Ut#z;JvGy{L*U_gUO`RahcgdNf2q3h@r;OE
zmU#cALAABD&d$!|%a+L;KdiocWwy9p-3@b-3pej)OGQ~_zLR{l`uD-RJ4K_f8=Xv9
z`N(Todkh1IB4_Rg9uJ1hS!_yEl&*BBNU1t%FzYYdT<g4dd0(IGoy#|+nAr@>H-G$i
z^!xwY^}p{wOMAa|t$t;xID-ZI@j|Bfq|%0l<_8XpE7*E6CQaHU?!nM&bYmTZCJVzt
z6S3~fdE#w~;*%KI8J5SzM)O_|o30;gao_&S?#=r9zWjQ<UcUNWN_6zJpn}>+{b%(b
z7uWy&dcIC*2cPOCPM0%RV)Sha625?jFJ>C2w|(oGHSK9-<710m>sF_zrlfc*K5~Y6
z<(76=&E29wyW@L4Ts{6+jO*_%>D;=Dt%3XBy}g{ns@vkR{IasLa&vPtH#av!gK3YG
z{e{w4<A|M6Gw05gm6w12_N{Hf1BT=^K`R5ia&L#NT=wcj*WOUJ1FNdIqsmu5@|`iO
zD{kI}6X8K7y++@{`i!S~xpE}l{C4Zst+%(g>&NagF*QxSy)AQAkKvi^PL&HXXRQob
zwRrL3wR>e5Vy?ResT~TJziqlxzWPty)i12^Yd<RrHE`TmYWVX>&inii$LHQ(A@XFR
zasGwPFE&oPvhAxf|6jJM`||srO)hTX5S(Xm!~V}<dz-h#9Rd$MliUye7oU4+5syOQ
z)b$*!ibr0(x^?JJQeAfNVjmArPEE1TD@%S|nJNCLb4FVBfip{=UcI@K)oaTPS^aR?
zv|~=56^oZGU|@9MSj@zc%yZi4WslLxl~0zb?TQvo_m{J+{1On&WYW+&^K1Q|{r~F!
zzpelM|IXgx>f&V64@|M@A`V^?YHlkZGbuf_VqLcG&S~e)t?N5?Zr!_k@7}$eH*em#
zb?1E4vZIy>9Qy36dGI^4;*z`>ZR<3PuNiPKx~z?gjf|VK&)U+qG(ER+V$iionUPU5
z{{QT+`!ZSnZ$@@)ub1P}6qcrdE!&oXx<miJ^8c%PbHVZOmOlm)9Gv8`a;!N5dwQlA
zaWL@|&61UW5d6J2G*l$V+~(>Ey~o%2`fUUDKYM*k|Ie5G+um;WU3R!EP|@V<RvqmR
zf2U5J+He0)g2BX>yGenkDa9yrR@&OQ^&whLUZ*$x`t@s*uI{dNi@E&Is_gFZDE}q@
z*nalhLlYeuf43T2+o`rVET2)Klqk`bdpl9$-@ots|1Yoqwfy$>{N3xiMW-(?H04yx
z+8Pxfe;+go`)c+2ZQHh1t~)I;nLmr=N0OPS(jQNSSMDw9tQQ3iO^CG@{4{yHAg9Zu
zw^5EP9Y5a8S7=NKR8*6Dss2+bxA{fz+Wnwb)q15xxidM=i<B7~U0C2T@5IO1o2ShR
zf4*wYW+joNjW=c*r|0$EpD};#SKI5?O7uCdUB9lbmUm}g<=>EZv$wgqweQZm|91Ag
z$TQRTTnd{P*ge62-sKhnfe<gw+yA{aRh6d*39{|et5g%cZ*5aiasOVQ2*ZIxf1a(c
z|2J9w?`Qt}yF0k%=P2dMpWU{lZ{4|X=jL78)>mO8*MI!>?c32&Q8~B!jtV&n6eu<+
z6vS?iS}VrYTC*==ZP?ud_ix=g_5Abf?A7aD3o#tinA#+iAhmExnD^1|_kJFJa%64i
zZFB!Q78CF5{5ie<&*e*(CapC-|C}LV=B_D^&c5IC@$UP&?=LPcZp*Bi7r$zXu6A1F
zG>)Hq$9+TPc3buZnSW0_=vllsx?_rwppuQYLNC*EC7zjyU%q~Qdw2Kt_3QI%YwxbL
zp0zCTm4KqkM30cwS68moJQiUzv*z#D>(<uRxwrMEpPnId^UNi)Xjbh{tlWDwU3s+R
zMJ4aXJg;-#YMLR!bo|cJsI}jA-~an=x&7al^8bIhGk7e&{Gy>b?ZA)TmnFY$Y)sDI
z_w(7l+TS(ji)GZOdQ~>^e-Ad8?|S?VpVa=STkZC|yJhssmQJ?GTzga9Olfz2O}u2z
zn%kduJd^rl*j)38_5Ru8HuLpeE7iB3R<adh(W?G9-T%KPC&vXAMy?Qnj~@23e;;su
z$2!s1&Sm$lZ99*a1>3}%2Ju@Lf37t9fA7xK^8Ln6Egbb$N<nIej9b~KJ*eDt@aMZ%
z(q0$(mQC6*rT=IWJD-e%%$>!OhSxuro?aKu%(-FDuA-lxT5H?+mql4`VtXU~B3AZp
z@#AY>9({8A?QlCxW66|B3;|vm9tT^egm^K<w8Ru8z7W~*A+}#C%4VKT)sF`b`LmdE
zazpgz{(msP?uY%lxV;%KXGyorVsl~=$U1&D#ilUf{=et*>;LTxPOqx^z4_*vM2Sup
zr^{OmM0yO<UN{OY&}Cxyu`ho0)mLAu6yx_;*FJxDclYMY<?rw8+`M(?yDO`&W`!=k
z^4ZDJLQ#S7+O=zS|8L)~{c^B<-t(#6u9q*^+9#Cku8sSBuKZrj=iTc5Hu=Yrzee$L
zY}Pq#;+wP4fJgLaQ%ujg*L{yQ-lr@qadxs<bL&yxu5E(i!itBC8Bz=<oLF)FwWsgt
zw9U=U&By!Y|9?2lA08IAW`?hd$Z6HNnHybf=APZPuKMq<(m8SG=Gor9e?LD`?4085
zts5B)o^x!TyhFr>W92auU*(=A0Y-kthAf}OJ`Ey_&x10iXj;leO>$Pg$oW$G@+O7_
z5gKRCgTVjq|Nq@rS5wnDeW((&#xqEBkHGa(-op~o($)WdKHt52_ryT2r9oNG7tE~v
z=QA;(WqGT<)%OqQMf(qin6Py!^nVc6ZDe#1U|7)q?Q>n6no|ph;64v<!;R~O5kqgP
zxyhkYp0A-(=gS`IazDOY!?a-M`q#VO|K7Duy6xiKyR|PKJe>FLU-f3ktK60W3ZL%X
z*}J{&_v?ih7uNs(`~Lyso0nO|{O_XY%!~Xc>szGd*p$%2B=}<6>esub1hvE@w`94r
zGzui@%;TuhpXRZ3Yv~JytGm`r<F5blHeYW}ef;txyiQJvJd6^#C%4Mm7QI+{IlWKT
z_SVgdwj0X#&-FN>BkLc{#KAeo+gI6eL*`@GHK%<Uw5I;rck$uVr-!+@xlf-yU0hte
zJ+IH--+%quwT$I15<yNg-FAwUUgxfOVX2qu66AE_+rCRT8lCNb%-&!7_N%$k+O_+h
zUwxftG_&Vu($}iH-~U$FtejITx@5|<)Q9h_|8<E-yi0q$m%E7}HeaZ-<*`Mg#IYnp
z-^;JQTD_~bf2$|?(C|a)cZbe(-#r&rrY)QDYoEXAS$-zPBaP1O_x^P6-(hUKci&D;
zPDPeC6*gaLkADuC_@-N2U#$CR(#9Wi-`6bPzTI4`o7J&Fhi93Tpi@aKyO+;huE+<!
z=Dn^CJF`rxc>;?~iikwA&t-;&cE;&V9*M8m1ccZa6<acAy|w^tf7W3PVyW91GjGnE
zn*V>l->?7wcjd~JMLT8skEcppnNy`Bc%3KKOY(z&#>r<<aWy}eipSTjT)TK~fK*$e
zL{7BS>eKaGj@(YKuKT^H)NuZ{UViD>y~P;@8U3na6>mQNW7QVi7xkGx_tdjMaXq`I
zx&5oJD14Zq!YyRgt6%*h)Bc0*?pxnh$8UV$7$x_y<9&~S;-UF{CxSucNY&oHGu@9Z
zBIYrhKG(7cPvNau*L3rf;(;a7H(mxi_$r6#OgA$#yKa8Hb6w^#v5Gp4rhWJB?fv~N
z?UANa#M&@@kyBf<_P+Y1m$)GCvcZG^g(+SQ2fj<DvZye6GH`grUM`81mVHzG^UA&@
zd`pwQ9-DePfB)Cl)#d7%tO^HI8C01USO0%iegFUd|I7b>`TM^1|C8eLU%!3#K4fw_
zp|@L&L1S+^|CtHX1vY<iQM!5QQqhA0jhoZsElOXN{6CP89=`qY4k3@7F@jE9ikhi0
z9R?p58w^d3PMPWR>&eN<^?$e5e{PolQ@U=e=vmpE+h)4n1#&Ensk5FKu9kkVZqujQ
z3#E5Wd{1u*Nowla5wKO{<|&ts4_{d`RTLk^tZgeUFaQ4P)vH5?ob2ZFTl%XA&04p6
zois~h=B$X58L6qMwY7IkW6yuqIqh^<Q>D1@UcxLf7RJ;m3u@TBZ8-Ion)pmMRC8o=
z6!;Y2<*A{_ur*6`zW&#$SdPZ6^H*KXI`Q+>t5;uNU;qE(xc$Dr-#~|#6@Z2cE&G@m
zrllTDGQ9u&^i!jyTb3?;3TgnG@B7&6+|KuK<sz3rj>K8Zg6`YA-PSMg@HBhopYJaB
zwn<O2xmPc!<kIossiIP<l1=ahle61$W3QLSZqJo&HU3(4*TnbB#G|VEuWroO*}_&5
z8*Wvp<SEc5EG%4H{N15#mSg1sXSo2U+flcVALGliQq<8?S#ACA%b!Ku3Nx1(A8UOw
z$9R?TszSv=;i*ENoB|W1mTpUYciXt)S;lt02iKd+>;CU9|Nr6lpJTh089HC*y(}Yh
z^Yb(5{C{`r|McIt`tD^U$39^W_u(s&QTIF*Qlig!a|-PIyJ*Vo+qNzZA~Gr&Ql>ny
zTyiXp>$3mW?ma)>=Hnsm<-dPbEfu+%b@aRKIp+y868NX3{;K0(NKXF!|JC|`ud46=
zj{ARrL7*vbZd)c3!?fnDIlBv;<(MNjcuM|SA^mFCy3AP-CDV%YW~tRZzWi>Ippwgv
zISLN5w3QqWzdCB-tC_kn;?A8rI@3=FdEMUjQQ6}BW1bkTscGry`FD4fK0d~K|NHIR
zw+)LYXG$rm@HFjuEWps4*<&<;L5L@||9BEhLtxw0sS-=KrM{e{w$!BL?iQWc>$<nE
z@j7!&JpVjBJ-z<#?E8QIJh%V9z5e%he)~TKrKP4k&NX5Wm^otWw5N7Gwup_5b?=w^
z`+EPs*U88GQa4B5|9;rOgojzRk$(!WQ_2@<MNrYNWb?Y?(sU)8-~+ZkF$Z_A+r4X-
zm96dGJ$v5lde`^lkG@j)d=p2GgFAboPj206dcT~JLFLChb{320*Vn~Xzc$}*RrKe{
zg$DuYtGCs^pSQN=>8mSu8ydu`7#S622`Eijm>0DxvvER@7vrQLt;z$H8mw0}3K-`&
z>4>eK=DjtFm*LQa?3OEYs<wvRyA!j&=;^6Ld#j%&U0iv!bneWu9&-lYFrBt#i`!mI
zZd#v_cX*rkUN%Pth8fe2O5DD2W5(>+pKI->dL_>Oy-&a8L1M=u72m}{r_P=|>pfj>
zu6_N!5UqtvR5_ZW*1B<Q%$;rcY{$RHW}Avy174|b37r<i$HT+J%e!^^_Q%(D<=(Ei
z1&Tl`r>isFwlTF9MU=eU`Fx)CRIfydeZSxB_V)Jn$bC@#;d_Wy==$r=pFK-UOPe-*
zy1BXe`q<rRkz&`<q~zqzJuPYt66_92-+VJdr|tOh^<l+}mt|^f{Ai=Uf9KY1+rrjg
zZ&rwij*gCsii(dv|NL|JY476VVrgmVWtnM4l3pvHS87~!`Cjtp=B-;*&(6#Q-E;Hf
z<Kvq-V(~{-1qFH8e3tEBqW-Q^3=(fHKe&{@c`?9K+o@yb%$f0jUxmNl`&}+C_MO>_
z*5m4_cB#jMc3xdkw92XB9M7>EzmB;XO)Z)eB~iuj!1Ca%%^&~C-?y!O_4Z2q(@kqv
zuJcPSIsafH^Y6U1IXPGEOsL+qRQS-HfR2XjS!xaf3q({Dd$WQTzTX`u;K0D(WN?gU
znV~|A$9Znw=4+>>_S^k>aqY<z#~B>8Tt`eyj+f4kEoE#ln<{&AofDIb<(pk~9ulcN
z3x9Ah#9S|pHJ|A5z_BE@|7g;SS553sm}V@yx$(xQQ@767e_Z`p+)i(*m&e2f&H7$Z
z6BYzc^_7$Dvdqd#4_tlKXy%y@A3nUiy!`*W_y5+dUCaBvVhLzI?{)XHpJH>Dgm5mI
z7W3}K#l?M(SsXvytA4Nek&$6ruCSBM`NK`_oi0jKy{=|$1zr2o%x||~%C>FW`1tw1
zfBB*!#Hr|_H(gpr=FRKZhbzx~w$WUgDDlH}#kS-g%f8^1A=|cXd-m+v1fHmfh#B+d
z>4|Xddw=`m41q;!*Pb=tDe*kc72qhaVCVYONLyQ5(75fn@_nCAX|G?fcKz#J3=1-6
z2{0|cAS?baW1A7E2o+FtYFTd!Zf3Kp@CDr2w{6?EgY5EuKK9ptsg;*n;`!O=d-0lb
zdACOiqKbE}gt{;&y8LnySd}>|Q#vAOqLF|MLqcNRyYKt|`u;y~VrKFEj?4|^J04G+
zetzBmU)!Hn=@u|&&DxdL>eLogr0B@RFx7=?!W01}70?OZrz8TH{Ep^lzs|_cj*i@O
zyg8S%=ds1oot87^F>*4r2zfeW%wkiRGR>XCQPtp>)Kd?J1rv|Am>poyxPE+*;)|*V
zy*-cWG&*_TnR#oz{#vy$V$ST@pKbVcML+mw#I89bEB9SY;cK&HlEiXO#S1UWtE#GM
zYyUo-9{=v$yJ<m5QztLKqpa-G@u70zpS+3Hp)H$0qb=XRe^1^d^t`5~W>199q9v@$
zm3=QuB(Eqo<XIfG)~e5$LsP8V*x2~>>({fEP4!YeY%uAh$}~5pwOkAdQ_bhZeNdQF
zeE<9Fue+XCGB{|i4O@LQ>0+VG{qGl#h^s4w-r~HkxwPl_V`gUN<^J>QUM`)^Cu=pu
zL#0W<;nWO6H;%$sa~@}(GcCX88%=ZrH-(j4eiS=^rXH3BtPI)El_k-3G^sE(b!m(q
zGefdZr_mItKb(_{7#c3|h}!2&uSuFEFz54vsIRR&n#wFH$qYhF_y4~*{N4S#?3)*_
z<nNhJ@jW<^d9QeW*)<#UnA<|@*ry#c@#T<eTewVe5|emSOQRagLKU7vSzBLOOz>qg
z?`dx5=jGvv*<Un|QGnq(ZzH1sTaQ2jPlw3D2LddLag0LlP7JIZmiZR{m>4*|Okq@D
zX<<2EYJ2@|o)yFW&o$?n8JwhCXK^T8R9(8n=lI`OUQ3%g{W3~#o@teAdsr!VZ`pBQ
z{h+RSX&d?X#jOlsNGL58oy=|Gd$^`Wf4{I>hrq*5hl?-Ho}9|iuxCT!ti5~pF880m
zY>Jvt=gO5UdwY9p?BrP-ZRE^-gE<~r_}R@j=W)LNHAYW;DNj>EYAUPcmmRt7i5-({
zL!ZtvY+E|3U|V|6!f6u(oFo=cd6a%J&|<3B%U$avtF}h1z5W_BZ6?=$JbP=@!hi)+
zwr$@oZ&C2zsCazM%cawg9Xs~uqlH+HbCjgi5#c&+J3G7h)B_xl{B!8KICy-rDRY*i
zzym2OxqkJ@o_D;imdb|T(+Xvm68x7e`#;f!Z{4beCqJ?<NF+C&*FDYTm9<q$;DX87
z?@UY%ssUWZ#@*)Y;%&?Rgk(pjFT3h@^ud7_31^F6Z;jgb%B%lXm{ZV)Jr_)TH8nUM
z#0cp*$F{{qthS8)Sru+1=ABXP{{8u_+kYCE85lj5CWS6P=gc?d#j>LfEOzV+r?>q%
zASz?hoEh@m=0OaX;tmF{g8B#pPtJ)`vU&{lc|;DjRMmy%dTm{@Y57GHu9lUxnddC6
z93!SZwcxWVG&A3k8o6WUpBFduyj(f*Iv;DF_!pujdVAYNEhgO-pUXA3{u+X2gXJ~U
z1DEuy@<}<Kv@}WZ?Rj=~_TRsM@7}#zKX%ub)A9d=REv5xMy-AJyH081i#KmdWY{Y!
zOBl_0m}6ITO!4}D{m;@FK`nnc{0eW!nawdi7Esmce&FSb7`?|W%}e+dj~MinSj|0|
za&DgO@9FhFr=Pd|F0)L>vagwE;=0!wXAa(PR&dagEDQWUak)<mI95KK0WGSq37!!2
zs3_+8*T={E|3Cl#XTH0eTUc0FfF7T(>DrHf<4cb1%Z&;;HS4jO5GUiGXJ<d|ylFXM
zLFNI=43U3t<Nr;4S!Q;<Y}r@K?t|I-@A(gH2-3Mam$koo*|aBl39qhvxA8XLV_+ib
zy)^38Q{6=`P0z>QJ;VR~Xa>W~m{q%%pYKzx*)GMkV(RM!i~^I+q_F*B^PgW+SC@Be
zTdt?V{QEseg?a?#I1~>lJm_@k5olxKZD4RzDVQ+j!tp+qBgtYDYwmo@-}W%XZ;phN
zWSgOdMa8!_H&cu{Sth*RwR`nUmkxo4ubB?5VBid5Qk`PNAfV9tpiz3(wpJx6Jy!v?
z_CA?==G*>X;a(1kfp53-`}_ODvqH~VPCvw56MH?|Z*GuO_fek14rVUOKIuANn71e<
z_bg;NX3%pXU*iWy;*?iyZXALNy0Pg!k<(g#NvY)3+<zYQV%NINsI_6YZ{6CI`x|tV
z!nwKDg^yhF^YhEg%XP$@Gkcy_wmLBy&tTXV>^||PV_#;uvP%ylPP!tLY=SrB?v7gf
zXj*b~^zCl_eK)RN4b>5go!W5u2vZHGTvt!P_3y7r&FA{HEA6N#JYW6(Pu-(yzUQAx
zF*`LF6#abEy1o8;Sh#=weTUtw1z!%_tFg1+zvV^PtHiyBoYSHU)gLsq^KdYHY@Wc)
z)pA9)J}t3w!S22K=?1)g_TT^P%&+<Ux4bTX<#iQ?=L`zEr(eB&dv|yFd+GJH(G5Hm
z5o@mpI;b2HIIVT`abd=VP?x$(IxPZ%MOzM4x_JCZ>Mbo_KJQ^>dtydpn7g}seSLj(
zwKW5W;)OlWy7wIgHP|LKc3G;<I_#swkdd34o0)m?Y0>dM+1q#SoO%8ka>B^cpp|j!
z7wh*VO5C1z(4k|>vOI~l#v^)NVFsq27r$#MPxTi3W#<*ez@VE@bH7~1-MlwK=i2q_
z*Dqe2=%W@L9nCLiQ}N(HW9{#63v<OLSyX&lv9bqLg@aOkK!?Xnj`Iou#pfhmzkHdQ
zpYMLs%4WrqqmP&A+v-V8HDx-zO>=2-a`MWGH8C3J&YY2E`&{eC_|Er!<?HMFv);e?
zcYFWu{-~JO?+xOr9{vd1Sn%&tZ_QSfgI98HFPOwVzd@kM!cT+c;>^gxL#rPPH{YFG
zEBlw}!HJL0|9$%X|J}VWb1z+K$=pzNfbl?ajKIPP54Z38x;8>5Y|ZtZBDZI{Jly8G
zE>S{bCp!b1uZyT)kB!{PPdjX`Kc1wvW9FSRr%j^m6LQpA91=y2g~z}6+bf`WXgdEB
z(+eDI?e?#p)!cvo^5x02&FSaomCB@7R{nf-b+vi^y*V>yI==qswN!|O@sp+vha<=F
z!kGKcGkJu244+l4dtB@ENIS@lW1(bQ?(LN!TvJU~^eMKySa$K^#f|0f@74bP#>>Z7
zR$97s+qR^ALh~e~mM$*i7hb01(g6uk5pb)hHEV0vRXq;Hi0M~0>D=);YW~LW`hTbM
z$G_L!HE3xt;Nf+)F8flkGGNY*%H-VARu4Z84o%Ia=6P|yKkol~`op}5!pq|?=vdvD
z`{&ur;IF%?-+n7OIrYxUBS|lJy=Pu5l<}b0+1%vtheN-<+<A28(yN7g|GIHq(mg4x
zKHt9T&CZ`kEfYef=Lvi&T4-QuI<@0ydi>98#pmts3vQmc^uyr^L8}6H<zBmO@laOg
zO!!)v)k+u346>&L=`?k#=1jGGaoO%ZhoF*8rG~xcob#5?Uu>2Gjq*fT&2{@d<J-4y
z_wL;jkFWXo?Ck85DVt*S7E2na8Cv#j-ngmi^Ru%~3lnaeonqT~VbZ$SOE_OFa^>(`
ze);d;zqYovvz9Hi_Q}uB4-XH|u8y{mJD;|B#bwW>K_@<iXo+4n$-RAyUBK$ZjAbjQ
z%!bsFPAwb)6O9Dt8SYq@JxfjN*!HFJJqu6#X?$OQ=aqdwH)n{G21`ZagW`!BdTW1w
ztNnd@{rU4}V|Uj0COa^c^oDu2dW-A-dE)+mTlxEWG48vU9&{-GeR{cnOHADSIoemV
zkC<>ypLNc`m_g&J$;lbduRIRfZNA;0aJjkJHCb;5|Mw5NpU3U9wk<6EQzcMvXoW~p
zVj^S9pNIVaFZ$h3uKsT5%YSG=+}c;W{Cp<|opSDr-Z3Re;P$ntJ1p0ns<!|2)$ZDF
zP8+%WMVYfEom^4j>D6i2zbVb3F~|ipgyO@rGn{2#)8!_u#&$2UFIAvpfw=YeIB4ol
zKYjV~<<+ZKdpx@G`s>=QU$<>D(>dQV-?j2C-~ITSdWp7LW@cqD*cj1MJkM+Cw>LL0
zU%q{s)m?CY)rBAX-dDz{O+FaqeM02%o-Z5P16x3uyhGsOc`<N%!%0WXnTsu3G5Kik
zv(gPg5f9Gm?{esuFF5|4BXL@4E8};|E!(#3|MhD1Z0YQBHMLcx{tOH)K9^tly*>W_
zoBr?P-~N5Q|Ib%%`q`y7i`&0F>7IIZtFNZ#-L<XzrZ|*j39Mpm+Tr-Xs_whP^D~D&
zU6nR(|Gn#$u*&60H9zlYuU>t6b2oSPYv~}b1tuT<JUzO!{_pkrvuT^_KbQYcOh~zL
z!6Z1HL4ZY$^;x?dhm&L0ltM`Zr<HCUOJcf?o1UtTSsd>rr(etYe(|H!S+(*UiraF{
zjZJ_260fRP1`X>lTk@&&Ee!nACot*!^NXLYCweHHZ~A69r}%iG#q-6B7qj!rxlCeZ
z@VQ%%WopB5Dy1a$du{yLYAtsmepiXjI^5jqKlk;APOCZpI7p(c@qLJA=!uIDQd-wP
z5Kqi{dpYkABqS9Ng>$@-|MyUS-Zx8^jt@r?B-pIDf9zYoO|MzOfQR|JUtw|R-$#{k
zKU|qOrZP-1x_hC8MR7-N*2fAZ$!_bfuP!~RIs1{LA@w-RiA!O1wY7VfE?v5MxxMIS
zA6bh|#(?9WwM~ydZ}MhxVLs*LxhJ4WK-aT6xANk(t$i`eY-exeJ&{^`(q&PI-rD?i
zp{q>=m>4XcA5GdAq<37X^V+o>v$-36Vy~MptTS}e{Gf2f#EVnVM!|_`qKJdXL-s_0
zE`uliKkg?h^T@5Xy~xA#UV-U<C!^54LYoaqS@X)KgN8kY-HM-XO=B~g>J>SyRZh=i
z_k-J@slkSztlMUr)Mxamv~Ee>SYecTyG%!}UsY&X>dkFyU+zkrwJbGqTkg@MFrBpH
zNo6|IJk)#-JGjovy}dDlN8WthbFD(&r6Jh|3S~?tI=+_NvhZT5t<XnTXrVbv5R}g~
zADoirPQJaZ*VSqkZ)(BuphBh@n?JKQ8c2C%-ZXTQe17PAt<!-EGoM%QI#yLxo#*ef
zX6?EHJtnz=b7v!RQY$+@Z`i#$J0YWm+e3ZrwQJ{|K7E?CRc#56GvgE?-{~!azQ(?X
z*G^sib8U!LqEXt+GNXANM?JKrZq>=o%F3#&j4bfuxL6X)6{sO<{#kmitZeSvwaZe4
z6cP`V#$KNx*RpV(^pv23tm2BRe0NOoxvZHQA0uq&CHMO8j`+RGOAh9+?zw(j`c{iV
zyl`mzug{E(jt)XAWhQAbWd13SH=nTN<$9Mx-_%(eLjK<kZ-28{vFwL_?tGue``6F2
zzI<IeQDRl#|C2S|9BN#N(**2Tr<m?Yja-(QB&u>oWziI=UF%Aw^cbG8ytQzf^T*R>
z+A=JT0vftKUW=|s_3b~^CSxzreUyPgw{GFY+D_3O^UFZpAn*{&J|}SfE)t?Bw^i(T
zY;X+AYSS%I$LkL+cW%sDI3+^CW$_dNp-&Tnm{@jI?|!`T#@&}Mw{9(Ua!jAn^u%$;
zzD+_^by^cGc9ct49N}FStdW!ZW8UhQRVQ}pFUgCl(_r9uY9rQtHG6B;+O)_twd=Dy
zUTs_ZUh?ktjk~sOu!z?Z<6v}B5DD_wxN+;ospr3!ec!ru+wRiy20n+kSg<SfWbAsp
z)8%r`?PoCz6B&+}=uT*AXKYBB65!>)rD>shL8iFw-G8~=j<cBzDgr((^Z%dSlFlQf
zA>hft!J##gosog5<rLf7CKKL?lLQzYR2UgU1WsuR-j=&QNx+eVU8%7^K|%Vsl0(^N
z(^vbK&C}tS$0v|6hlkaX@w_infI^7YB#!fsPWC8ly35zwT;G@Yb!)TK<N04&exDA1
ztitbm_2!g@bwAI>aBw<kOjK|_r^>J}<j}UCJCB_7<Irni>0F<G`)Y>NLXrPnX>Ti}
ztglqQ+S$BcqyEwIyLGVoYrPn#HL$tundwHZ)ANI*xF@!FI59Llnkmre7-b`-K4sRl
zr>yt>+{sxOa81JFoU>lViO<oqd7dn6ZogHO8O(m#C*{)2nuQy7Z3`=o@ilJTwCeQ<
z10U5S&eNZo7ewd?DBZplwfSaGD#OAHSFbJ(G%Nk?w=uxP*Z9GlfJc>%cKf$(+vTTu
zcYl7p)#Sogc2~FTdLB7Vk(1L&Z|N0D<C5lLy+#ksa^Z-;sDPH`e4Q*D6MkFTP1z^F
zpp+2(ZqwiJO=puln&vyPvD%+LxouDC?-`Q<7+g=ixpK>-`GEQ_8BdOyL*aS<MH@U8
zOcHQhp|a$qk6g69v#Nl=r+pW%f3dy2-}d*CGmn#w*DSs9^Z2hFzjprK%x`@q@BV6y
z<woFfTbGUv(x7T7@-XxC)BfF44(jLq@(<#4Q1O@$^rUEKj<;I8#+}(S*Ilz&7I<vN
z!r8N<XU~?NJ!@Tg*|#S}k=n~rqoeOMh@HCXwDVNsi#AWr%NmL{1|`pa=PeESVtYJ6
zXR43-<U-%(Y14AlCPzod&z?1_M8-XNN--l#%=P$~Iodg*R=2Hp?b_WcFz@{*gDbh*
z=95{U+kDu#cgKX?Th#*t1RrWMF8Vi}MMY@AZ6996+i!f5?+8v1QJLznG=(9ADRh0q
z5(XcpiBmkd4lqbe>^ZTFMPo^!+z<Jz(gw3a)g=>!Tp1>GC*JPiV)T4cmUg9Y=flna
zCp$RQdOOQ9uVS^E|Le_p#;j9WW>xh^Ds#-mH$UFoU$H_~?lUa?aBzV_XJ%8>d$Y^z
z{<(raOYZbd_fTeL;t*sI_+huy=W>MF<lf`Lt5<6m7Z=ar_A+tukZ7A)lv<d$a_!>e
zjEXCLGk3AAm3<qgGgp5acWaVB(K11&l)YiBiY9YswF$D-ZJhDE>GsEz>gpx|54Gsc
zH>Vl!OrI{6b#+#zq2^K%g`E-ck#SK`UB@5&-TOCJcI~oMZcW+ihCIrNw}m)V7i3C3
zSMp-*`f!znks)D&Zd&FNLsJ*MA69*~BFh6N@UUDGD~S$t+O{%CfkEW|<O2*60=GWQ
zy(#wKfU|aMpaO#ftD?|WOI{~8A*Tk91sl#DRH$v1nt6WVl$#T0i5&elU%vlqz>S3k
zH~-#jm(AVork0cfYi93;R2Xm41m-=m+L4&iIB(&iO8MyPB~Bev5@v;|O*Z98PEO8F
zEA!)0Y`LJRJS8t@jq$OhGM&k}#&37zHqJfK)^z2S-^vJ%!wPxPjuHZ1JkI?`a}=M1
zZ46j_)yDqBwvz2>JkIL5xweZJFaEjqthD*DR)MyKg?c7zjrz}?KNo-g+~>BGlvLO8
z<QT5&#hi?DGZ_vvcrvyKJ?-PUD3{-|UZP{kjHWGX`xJX?lpE4+i!(I7Kek4x^9$ER
z7Kf%gb+64<A5u~Dm}~Z_Y1_$p?c5O>3>=G6OoOx*o~c!tnDfEqNAHZAKX$~VfBx=P
zVN=7kdK2^fN#B1(c%6ABRdDf%B)D`}a;cC2l`zH~?(sGC57U`uoKo0seoK1!;_O+E
zEqV;UG{{IunD8WLWo2b&bE^n6%*g%ixM9nV9s4%kyLi#k#Aww^5sfEBveQy?*Q^ii
zVr6Q2X>~P1qsf4$G4R-zfD=J$pZ#{+wpM@Uf^DAB(YK9PZh3C8+4#H6adj4nqi?Gt
zVq@pdow?fbYl_y)vuVL6r-&?yTKQw&`qx&Ad7OpUl!@eicKfkv;lieyf5k6OIk&ij
zzq5rSEOU~J*0GSF3AZcVPVuv?&2m}1X_A6gY?iw6rnM&~-uCHZ2~ayYe}aovch?I3
z8omGGo(&AG8on=!9~MWPtofz=fx~}h#w}O}wg$Y~V{_+vp5_HCMz7Qr86uKHFZ=4e
zoOm+r(n}qIU0b$9tPZo}4@`Po5m%Re+N8IyuP<bmt!Vm63zeXq1|PDf2GwO7t1wJy
zOMJm<ch%(bCf3xx*Wp@M6*xBSoafWjBGks-?&khIL~H5p%aaoiu(G=;CPq&=5N2m@
zZT+~iQFODhZscJD4u<42+jKaCI2w<-U3js*^0B#7%W`g|Ml&q|K?a6fCk%vGSSC+m
zTCSkMVe)V)i-oG<<Vg(*LXv`xALqLWX}&Ov+?@N@n`P=GfsJcRocj|r?SKB{JgLNy
zv)|o}t0?)MkmD{lu5Tw#a@;6e+35CknY-?mmLfT(+dm_<7IxlocXB;ktX}Y_YKpkv
ze9P0ei;4_p=_*6}r2S2xZ5KX?-=lu6e0Dcst?I|lx2})dr(81eJ!Rt5ktxNXz#;oW
zn&WUmX5q$w6Wn?&Q&<js-&1Y;{nXM^4=x1w`<n}N99^(?@9}F}&(_qf4p=bjm_${F
zkzVS7)&~>xr!mPL^Rb?ro67S@t)#qMP3UFN&JEjky|J3-cJQ;abF#yWU(cR>`Lfq*
zt(JxVvY@%LvePnI_wC=fF)>ms+2^u}m*z7=Muva?ro1m{v9HeAtSGd(Vb&^NZ_mbj
zVO0i?r3)VFEuZ0bL!-B3eh}+wBSr7Sk_B3<xgz1W{#6Hasynevd}4QMS)zjK$uixX
z&Ol3#ZLtql9-M6wQ?M;}zx>ZG)<mI<!)uq_oUQh0)=!=qyNTS75^wtSubWtTtCRs2
zM)8@D)g$~mVZXjyJ2;6UKr^&dBEzLlNF~{aiSzIUUW@4ov(nV&_8m_S>R8%()N5&y
zwA%?wh89N)bNk1;^3v1uqqD^qPUxFFW3D2L*(X)K?Xs<=vEoiv>*nWX#>U6<Tdtp`
z-6)@ONw;lbAz!syJKL{c*<W8>JJ$BTO7VFUH>ZMQSk~6gl_$S`Emc^ud9m{Bv)8iu
zSXaHAW#sa~hMytl_BWe+_trP*Y^Nq?v>U1~HQ{mAT)OV{u65js6XqxNth^sOQ_G3t
zc}%U$V?z-cTTLVG+x70gl3tqgIRBj7ct8BC(~HLE&K&{^*T3|+%;U&$UoT5#>4P4R
z-T*IE4@FgvLmY{d4D6@OS|)tXkt5pNp+JshTB6VbM}b#UX8Am>ixs}3;>5zZl&7I#
ziU`Nz0~(4!Ugwzao0s}>Ei{(;u`f4Tfo0+(12GoG#2&+5?+Ybq8CS}gd$|tnJl5c$
z*wCO7a=CTNByN?|S=Q2J_UCp^5i*w9u0P+%(L|54VM)pE8%7OROnL<lT*{oaERbmm
zgW{D!8Q;qm&wC7yN$g_`&A0xg_%B$~{mHk9j-F38%wN6l?j7chj|H6y6a<{?md+3M
zs=a@lSxY#k!lL(_r8$qYmt>owoTSte12gVEuRRW>pDctviaT|@|Lw%#d%2)QqV1sN
z_uBggJZCPuoYy&Qz;NJut?%Vos*M%%vi|H^cUt0dsVxW7u^FK8`4_w1?b2I%W!qZ=
z9?Rzz66HM?^m83d&EGJ;c3bK8&*=Os|8nbp!spA{Z{A^+=FOM6XMLyrLTRj5=VQU$
z)2ycKI(@^qFyq03+qS7I8~6PFs($s*k2?pAkHq!<4^iH=Q*wXH*{SV!-?_ixjF0+%
zB)aXsM$3UpeIDmOtEK)~)Gw-$V7TIYeE+KU_ssq4`B=XfZ{3y~zB-g)gAVt3MV`aY
zZhqYu<#6^1$DKguShI5zR)xQr$9SdX=g+*t&#tu>x4-e8w?oP0$0g8Eic(GCgq+*1
zA`BtAx7||3G+SAmI^0Z~tVGV;z8xi*I`8q?b!(@bQe_h8zuDB@_juj9bye%k4J<BP
zzUs#46MTN_w&2525iuImy%d&+w``N`Kl-Te_4aLBclXV{e``gU*0RKH+so4?IdG^1
z&+OawZO7b*`1t#`?o46WmKu0W<7$h*>g??7*RQ*|xi?1S<lNsEapqeMKSPs3K;d=f
z=3VJL6&tf^nHky=C%mngv)UrydTEUP%Uyk|i|;WUE8W2mq?lAZ;hW2aJy-Jjwm$HW
zd!b#H$v*Gc-3InJ!B2uc0!|(WQZ*PflxMkdC@WM-G&~66nh+ACwNi}fF_X#R4JK|a
zEeaP@3=|zadNU^lGfiPqbtvIvQ*2>a9Kyi5O8At@M5m?+4jRfmGj{oLa5BYTH_^0E
zR{3D7$(m@zz__Y)(hkP*yAz5pl%{3yxM)-`FgVOy5F*qY<ff@Og>j*ShN1|^(kX$b
zOztX7F<cgSN<~0#35(MTwH0a&Er}}(kF{QqoE*fVxI|>uvc!Z2nU;0Z5<aV51iEHR
z?5s_*Uai<K!ggo>zdW^!E5G7gHTkXW`dDMHb1G)NdGOv*;K7$g7P36*1$Q1EylQR8
zb;vvHpql{8ikF8kinB2G1>b7e#Ue8`irFG9bV(OGJA=%Ivya2Cm(JlbFgQHzp!wsc
z4@4GbN)>s|Up(1<V&QckHq&158-IUK?{wckL00_VfwCXM$@|&sw(XQo&_A@U>3#k?
z&I?C2E3+=X;i)-MeQ$r$LI0JNU%9gqFPmJw`H10Q;X;km$M*{M-<#2YHDCUQ?nD2&
zy4rXBkM9NsuXq*Zaplq9&~nN5`>OiAK87t}yLq(zQ4EW(wfTjLn#Vf1kzoQXi4u>l
zG=6^d&b#_Xsj0C})~@6p#o(UsC9kc{h5QJXT|2YmXYjIF=W7J#9r^Pu^tN7?z{8VD
zpdGJ29w}%tG#t6Li+3}pN@{_+j7IXTV;xhJM4UQGv;@6XCY?;#7_z52eG<3i=G^07
zHI$zgRTd_CdI)wejVg*gDdDSbqCCy8B)Dls=<Bb$9#=1%pd!{U?Dcx<s@GPI0zcMi
zHy)YvHmqlf&gQ+FcdOo><guj5A!lv=wYydfyoUljBw6b0=Eujxe5u{PR`vPsy6ouL
znX|l9nxZ?-8)#nMv+hv$QSDIauRqj#o^mKkOj;@6XUe^8>LrmCOaDv`m8d-xTM@M6
zOnTkL>CNnhMhrm#PEHC76&hO@W-v$<NwzIajohKPv`0`^jOjBguhRvF`yvMCOqp5?
zdW{bC9N={fkP|w1kioZQ4vS)9l&%1yVoLyL2#0_Z!_Bx4zY--rUAVw|sAGat!8wy&
zgR|mCcvTa1#1^+5HR+vY^>pC^C$4j*-pkuG8!Z{9w-j>5ObYP$)9<}yj$+*jX1$#(
zdWsJwc{5EBT-H8`Wg*9*117w3Y;Eg2H8~WW3g!x(y<plK*tK`cqoVnD*7sB-*oOqV
z6o1yb#cI7DG)|$V#LOU(>~YOO*(fllBkKG6hQ}6J<`IInP8|_CZTlZ@;5sb8e`Af~
z;e5`+0_7VDYgU%O+SS*{8&@RJHt+evHA^$4>RL=fY%I1kD>zs!i#*-7W?JT~vrASf
zr4)wWDZOjJlY9HvwyvW|9v71~KhRv*^}O)-@5#Joaur+dChweSS8?QX<(=>L@2;A<
zueFY=e86e5GC_#pib}uj&F{5Ktq;6ED%WwBE#L6o_q1=pye2#1?{02>Q+KEMpU;EI
zQHC504S!`$wyK}b`rG;T|AA(k4e_?84wjen9Dlo=!}KQuLr@gQVFRAS4yPgn4ZGH6
ztEI{v%QMN&U%1lyN|x!I<2kq2U4LzzqVr)!wXXHD!kGCtw&hB&o%8d$v32phXX%rS
z<{RCUpFZX1ndqIrf9$@l2<p^Dx`GFSk2W$)?0vN3g3l>|uGwc?-frSLsF^w?W7e|m
zTT*hZ!`6nFnO|Fdb=4FFMxM)SLRUw(HodRjIc?g(e{#p$eZu@zZ?`_Unx)FaDsZax
zNz9IU><n#*61!enyu0+N=<L@^E4NMClJ_FYYVPgb<?;UM;VT1TqGCQVUEi`sfyejs
zr<m<QYuD+mzq70Iw8`1NbA2UNybSAJYo*WBcbxZY%LSc)e6`4J!p>5s%J!trIJWe}
z^fc>~9>0Yf_jCDr3dCQS`F@A8|0_1r<F5W6_r32+Su%yerGaIc=Ut^)d{Uw!9Llqn
zc{1KM?~<Gp=+~j&$uMhUry8g5q)ZWp1K)Sbe-h|O%i5+WsVsGwM{CJB*2FR%9^sO?
zSv{|MjC=)-sXh!UI=Ga@OVdEWsYsDSV9`q#bI0Vo12KFq?DL(sa?KNuYIE!O!o=Ue
zHiyOGu7kkc1yan%I+g|cD)anLZVBY$sb@dckQH)y#z76`NsbyE9zvT}zW(LVArh3F
z5LxzMrxH)$>&vBgy|ymnaGCmyxmWJrOWP%t!QxVXZ<_d?|D3f|>iHee>P4Qz0jny$
z3ii0lyPZ;qY;#ZMO;BiQ%q!*-dG~p;+dNjUOamXMs*arH1+`9!Q@vDeqI;Zq4j*XI
zJXa~ea#n{&?!JldQI>^XO@?ibYoxB94G`R&8o6VA-~2-_WH(EH$oTM~<LTw!KPStY
zo;CkcT=Vkryz|So-^i7F|49@%!(6%a{9TK)8Sl<`{a*0S)NR|U`;UYfe>ZqdJna9l
zK$-U~kBJ;hy;rkM(&EIXwL&EiD(xJNUSE{{eEEFwarW{J{I8C>+kBe;<45o-o2_qK
zj3ai&l*zE)f4pnmr2Q*j@<}c6`Ro_^xmsYw(z}N7iTa09+fpMdYL?z@W-nBozs{lY
z*ouS6t8&gNaKv0!ZP~G|`{wksHjn3D%8O^x{CuF^ZuRT)9D-Yx*D?tz*<7CRWwOoV
zW$Fs7hd4wPmOfG9sgz)9Se6;Wtev)1@~wXT;~0rw3kBr&{m;8wXu2%<hJmf^+kan{
zmtNnl^ZLk1Wk!eSQx>&f0uJ^4{dV_rcQ$MEW;3s+A<J3~S4U}0f4y$Y*`(Cf@8TCv
znN;xpMnSe#rt0I^kKy}LZ<m$Fzh7VXwc9C?`>>qN_N7agK3%GM{_~y#;8o`3<>ko_
z8oSx1X8%oR+Bz?6_M#nUp3Vu^620@G|M=sN6)_vlH1r%+Iu+0P`LpbU-P0rU%5K~E
zdN47nw`7JWGbu1k=yjL6s=+$hi-Ae8;e4a<0x1@mme-j|SA4okyIPhN-+i*n&E$hA
zLxX^VKuZIwRKbrWYGwf(lEOmT*}<m`Ox$eFPn2OeaDmrP(&}B1v=*yI<pGH!CLOn>
zG8_&rNVJ)<=~?T>DQjO_B@1{g=#BDXSn!N1DJOU*Q$zRL%}NX+4Tc*^LQ*(1W4y03
zc)X}Ae}6AFE^b}e>eBQ2Q@xxfUA%bla65mxk>t~i3pp)Ynv;}!brz<DGi7AljlHfr
z{dD=eJCRXQMm&c%t=YD1TkY>}nw1<zYB%0qz5cfC{qK3tU+$9YKOVTWKmVJ}`As?*
zDO@W|v_)?&+T?b<bV*=9PqX!nv(vBLy2bVV_~%54UF&9_O^dz$wKiVW=b?Xw)ZMRD
zv0gJhR3@k#x*Xu7*mLruzlW|USL@cTTc19CI(6#Qpp{Q{<=M#H-(Ua#-{0StUw(Oh
zdt-gjq%G~4Df6Z{JU)3YdHyHSvpu&bTYXy2eA2@Aa!AlBFXkhc4=iuk6v5QscIZJ_
z700QqQ)UURbo;c^CPr@iTv634Z}OcqkE&bSd{Tbw`StesKfBU2?=!#u#C&qr-Q&}J
z)x73AJFNPme_@7z&H2?~pef%o&p)?J@KF=)Kh7^>(J*)6&1+n<R!n#neWylk)pnEL
zzdbZ_Z<ooiKQ})UduZ+4yD?Xvzy6;np{K78T7bWP{q1eC-AALMqrbno`FV>Cqy6_k
z4zqj;=AD}9-tpn70;pM1!Ii-x7Zln1VDgTzVpHGbmeTU_{r`SRuY3J#UG>vnqRZb^
z&U2rs#+3i?-kJUXKJzDUoFUrH-`lrERdITcs!+R3|NhSxmp=VE>7d5c1+SMaIZ}K$
z!sgt}ty?00eR#b3>sr_Et&b1?WzM{v@%GHWr}4GhSFh$~sQWUxe)YBNrsB(+G-ib{
zRKDN)oln*(L_?&ix;lBI#4{WF)nfZORITqXbY*9FIxT8th}Y7fl_5nk>6w|Fs?0lM
z^d_IYv2Cu`(oHwlcs&erSN<;j(N4*(*zniO>}&Q*Wy`j3+Fbp5!MRAULvVA}K8@*r
zy3}LknG{Q$eArA1R&wxonH*+G^Yp#`XoAtgXABSLF*dQVs4SnwH|r%=Zsp~b&2i6r
z0-QKm<}E&{kQwdtBk=*Zq6t@zp>y)e6dPIdCWaO^CIyyd(z65>E;z$^<khP*T?Osv
zt80@YgN)~TrA^-0b2KC3{h1@lYMXPTTl6vl^bWsDV{8cOeQ`#CM}=L_S!tz8lLuFb
zkmpCy1wt&04|i|%GMoG6{aL0}Z&sN2US2sh?cF`lHIeJ$_EtSVH@CNDVbDsINiU0^
zpWC`^n^fCGucZZR@6TELdBf~J*}8Vg-q*W|i;MUFzWaV1Xw!6Ab@lI$kB_snu^GJO
zkdl&2)%vrcZk^MttgW-oKR^A{=#%o+DBZb!+qY~v^0-j-EoYNMpzDPj(R_zD1g#X|
zVqF^9yex<5iS6T$6-pB~=x}F>@OWLEBJMfo=g*%{pQb)-vazw5bNXpPNpkw(?~h#-
z9h*N+dcEsM+u5^cwZqrl*;84Zm6cUgRFsx>?DL)&z3;cO*Uwy5`Qn12%KH6QiY}jh
z^X*nIpEvV|!<!SUZWL~tFIVxu^Zsh3&k7t}N0aR4hi^N3!Q{S@sk5f<(x8_mR&xEx
z+Z|2C-o>rh5?1<YzUI%$2Vd>1mQ49tHMcl#*0Ri57na<*vDWBE*PUOon$ymHe-vo9
z`?vD^#no@VebJqM+S}V(TrXxv<>$1WG4I~Km6ev3mXSG=Vzgm(y&1QEnT^%Q`5Gp9
z-_|(pSf}0Mp(3Oud+Gb%w8inIbMC&HefP%N!&)L-!otG)e;n0UQ&YS2^2>n(2VP!Y
z?(XJx<<t}Z%q{wo@pE^YIJM~W32F)}9unu+89S-``fG`$-V=hdN~-f)yjNU*ozZuo
z<KD%qAAd>T|5$s!@A&=N@3H&kjwBoMU0S*8Y0bZO`#%qV{d)HQ^Z&2^?dm>lP?)go
z;n#ebUiC}+Yv2Fb+ZuYl+*vcnIxlh>!@<V3NqXz^Tc3u$44E7J&U-nZFw>Mn2M!!)
zWM;Rs`R}+lZv9p5dCwas%vx6Z{R<Bt|9s10HuL!(HP`7#&nw$q7kFc1^0Edw(D|~3
zg@rX>P*=AvXypT~JDb*&Smn-2Q=4pA_2osUuzFQ>b)oCMHQH_ViSC8$W$fzyWv*X0
zeEoPiYP)T~HAT(HxY+%hH`IK7_vca6zDHdXydO9TGxENg=4RBHqIG$a$9A>oT~_Sh
zzLah3VLZ7c)$q|3?S0Q9ro}yfc;?o%{d@mj3|bgh<QU}3G+oJ{b4x?;`g0fNh8Hzo
z{I>1dVfN$S-pamvn^($oL6YI}Og}Bx<vX@++qBWNt~|4>FgbJen?lbSYqLX`&pD+p
zP_BJ*;GXhtcXsyO78!B}uAKSw{(fzFWoGM3pT$xE42(=HtXv{48VyVnT^cT|a5L3%
z5@gFWTV`AT$0Pi?C1b*@Wd|KTBqSw0D&PO}>)Pn;&z?OC3lDex$+^9w`(K(T$Fkci
z9vN9%&D(S<^nb|wwPCA2fBrmq^5l;ddxBPe`SvYIXu_w<M=ivZZ?xZazoHPLHTCuN
z_4|Ln+g<+tp6e{-sa{{dew}Mm`Dy3#dD;2-?pvEybuURuV2Fs1-(ULrn)UlV&39Hj
zwvagX;Ofz&jpxptYi8${vnW`weY^Se(~;9sBg0mPbRA8qIQg{b=icx4et%tG|JI^!
z-Rr%3_uBtB$X~QGMn}wfv&7VnB|<`1GZ`Fo#8zL;GS9zP^M3F5W5<t&hlhJF724PL
zEjm#miR&b@FiRQFiseRqWi1E&3%u$#UEi&&$^1^7ug1||X=+-K-t_#tyGq~Q+PZb?
z)~QoPWddffyK{6NP1+cdlaaAv{rdd>|Nj2{`*+m`vCIhZg?6rHmWS#tzU>TIuq;#J
z;bLD-wT}nawO<TA!pHTXv46I^<w^Baqo&VtMjJd<B)-<w(ed&1efqibda3bDo~WM3
zI=g<iJal{_zVp6Mxa8G`g$27l*sPDx*|v3S;<}~pe|JgNKR9Y<W$}FW?Ahh-?(D4m
zoTfLO`*1-;#g3h3ca-zC+Z_FwRi0e8Z&`=H!|cWm(28`;1wS92mAG6YyM*Vj!sL?=
z7M=R;JfS8b;ltPK@#0P*UPryB>xF8oGGrZj#IRxKo*xf?zb`2(Gg>8UXE$xz0VWGO
zGmWKJ?Eh4x6_&1^(yu!CWXQ4rtzY}{XHDZ+s*sYpIAG0{8Ei}o0t&cVC%xYFwQ6tJ
z>X*AD3*s;HC^{|pvj5NY|DVF||BthgD~}Z~|8MXqF#6Paxf6foD$cI!-5Ql!SorbR
z*Vpnj9}X_{o__86^+MI<d+Kb@pHADn<Kw-{mp31N%k<8C<;}l)`%CBT?*E)}ROf7U
zM!evgXQ>Sa#`9L~;4XhQeR-PLs(lO#j_@yi{%dN}(#(}EO4Ga|KTa#j4!`eKyJLNB
z{rZdd<+clzIdEL(Njjo=VUvztPOh(B&bq0#jwUCay_R^Ye4X3E!y_rASi9cMf#>Vj
zFJ;?}Hyu|9_*UyEnXJPQaYN_s9!pC@Q|rx}Ecb7D$1UZbc6dXS?(~$1<&Jk>=I5V1
z_N|YPi_6U?nPHyzoxRre>1oq4d=@(_nGodV)F?Sgvc-Ub;i0$Os}Limh40z&V#V{K
z%~X$AawWVHS)w!5>$+b2uao|DK{{fkvH7{VZ{?-VrEPYa^!NAo#bzxgt5_X{O+Rb?
zT{W}wz}DTLI*<H~6D?TvhR3ARQT5#N5J_kM_~V6P;o+d$Rv#bZJ^#5yKv!2cIyyQw
zHuiYG{B_W6>(73$=iAEFLk_=uzxR9G+OXAEvow+e@0w0NnP7ME?d|QqfBoW<wJLdX
zV&b=NWhJ=>9#_mWH#aZ;_~@wD(nFT=($dz&&v;D!xXfzS6ZLxNwoB+e==$S7ACH5o
zl<M#61eB(qo@-UAHP`R<w!4=vC*R&?G^;W~?fT;?J)4ONPZ~Q#wG5wsmVG4{Uw`MZ
zxjMV){B+~{-(Ao6or;iRc=h$ypFe+&c8f1xwyf)@(!Z;vv1iOZmtVe_Q&wDDoRpMQ
zRrTw~$H(k^GAEuEt@>oe<<028JF~rWs-5eS4?Etj)SBg~`T6IcSFg05+sySVFE4-p
z<H}^-Z2RMTZyen7M&Yj9#}n48&ef;+|C_QpY-g8;=j>&jrSA%hg3sMQ+ZOpsTC{9K
z`>S)uk_>NZ-0hgd@$9&u)3s~Y#KgqJ#Krq%t*>3Ww5aOGVW}sVZ`Zd+@|?RpLr<#v
zsK`s<{^PT6Kk+P#?ytBk|978FK+P8oULnOp*F_)|Am7f{o+^wgj82-24}x0eb@xm5
zzMPVkDDi-8I?Ia}ul{uJ|8+W`K=bL(&(9fK;@1l}<($?MGy8x1{||d}?xXwv|Nj5=
z>2&`VrXs^1&rUAv3;C12zb<>)kEc~zcRl?uA$pmo#uXX!4R4yy?=5(Ag`2VAfkMlU
zijRNZ*Z=>$b7mw1N7I2#Ih-XG2~Vcx*E~M4@o`(?gFNYX$}8_KSs$|FA4_B4%*Pfp
zemAU2K5Srfe)jzN|3CKE|G8KFJ~uC~E%C;+YhwM!4J(|ZC3{q?t*xV@qbJ5Zo)f-0
z)a10oe%l<+tzVA!M^AfNDc8l9bNg70#{KVsZ)4V9&%J%jBXpwms%y-8zYD&u7rHyq
z;xMoIp5~1aJf}NWd^ZvQdz3*a*~9nphoX>@#+}ky(JqotALwgY)JLpi%sVC7)+p9|
z;$32+bcm`(xGTegoZW|}XU=M3&roj4Z*z;|^vJtyrnn^Rv+R5er|26e@-6i)o=vfl
zoUD@^8Mkstpq9qR9baO0)|A(+R!U#4_KMx=Nksjx6LOwwCRFHMU|4X@^(e22_B=(-
z^Wsv<+s-X{9`SL9oQ2v{7K`sbr}mcI+0>y>H?{iY4!4rYqOWRpKG|QK`RLEp=+m#G
zoj9gv-JG^<h9q~)dR<ZGxN>dj5N@rlP7C7-T<SF%IUYEAG``%}lQ+||dlrwA;#`4O
zhl)A{o6=@2^WDk0k9VFU(?iR~;A^e+Mi;~_@{DqS<~<0}4xYUI`t|F<CyzWk_UnN|
zeR%o#mz(wb`uehV&GcG2q5r_!c$LTi{-(LUcf)ur4WcsqE(EBqD|Fuu+L9vNmZ&uG
zK)-Ub((F@zSIt^~c2C^qFKgn~higs!`Sa(}rK-nnJb3Wn*DouEHS5>=`}ownj=q2B
z3HO;yr`bWFDN^kY5^X<g<j&7DoOb$YNi2WUfzLK?LMBh1JY7Hj-K$qoadFS))c?MH
zf13{X=YXiFs3lW6U6{5SOiO+E^l|E<_Cg)8!+{OFOE2+TKL1#;Cu*&pzW)6kg~_F*
zrgHtSch&v)@Gv~Ca_Q>Tr#I;wi^$H_{$!ou{1~)d@$4}rt#?6b@><tBO|q(mojx#q
zEKl9Hc+<v$dk^MV_a)ypd$()#5$&fAJ-z*nl673}dgml8b`;Dz_>)Ui?1Z((r`qoq
zp3OO)WccNEAm59O=2dQ6f>=zhzX^U9b)mo`RL^PE=9QkCeg<c$1@3<^KP36l)tlRT
zPidC;9c?>$lmC2xr|5>rf>+IL<w2i$ItAZcyLRo?Eh)7bTefUb5#qd>v^41Dxw+Pk
z0zSUJXV0I{&&io%TV0lrz#v((W!5y_bfrI5GD$Zs8>ofHa<eb4I`Qc3Vg5%2hm{k`
z4}FP9t!NQ%O@C@}?%1(oKYsjp_UzfCM~gCNrJtYo_T|fqCTqi1Kb-!kr|a{c%vm>{
z8r&D#&G^kTBjDkU=nc}3*YsW9@z`Qz$f-h^8ve{1D>T2#%v)~c6F5!#hj4!TV+)I2
z6B!+~<wKcPS{AdjD{Nc)>fWjpp}vfpD?IQ2;mNAoXa4*51IG{h61Wwrm874pE)e5t
zN~o=sUGMSM@1aX$ZtARMuXp{Z+Y@}M-m5h2^rj86Ik%7LmA}8Y_xARDeO=wDr=R}(
z`E%N|X+CPrwk{tXx8+{XGBvq$=<q5@=ZzjWCartD$id$-J#qG9g`>?0>w~ogY(&nj
zcIrqmI%&E7YSv7jWpV3gFI!pkF(k3n_wol<(^sLJrf#x4F1}Gr?zzm(f;C+ZQf!H@
z&OKr{V*l{ws;_RFC$RT-ewMhmHBB$>YV?KD+T))df1Y?wP{~FYG?B~U&#1NCwbkUu
zuAp^~PFeGGX3ny;wY~rQ-uEVj1ulNRzEe-9YNkq5G`_xaYU}p;|F^w%#@zT7zwh(2
z?41@n7-eo>Keu=D^kexkyKB=ohp-;gIi0X<s?pZk!?nNpWzM8JdT`kOII3Uw?fm~A
z{qOgFcaOc^`kv9?`d8zdZ%$5D|3Cfzm-$w^cX<TMzL1@5a9%6KkX6*ZHL;^p+C2Z>
zp7Qr{iYn7jgBBw6_9i;K_-%J==IYg}b8~Z7hHyo5UJu%l5VX5M%a%pFPvZB(L#*L8
zr<j<p-#qbBVd<h>ybLQi*k>87E!f)IT^;i%A<)N1NRhW#CgXzPra*1?)aVEHQzsV|
z*R(n+n8-v-ovX6$UfFh)IO}!KZO#W@&H4~kFm>6R*uu{nqKX4@)`y+3=86_@3Sn1i
zVcEywEXg3;mU}FC=C^YPW1f42Pk&bJ(`EHN+<d!O*r)98Vz0Wr#W*J|xpa5dB!*p?
zyJJ|Co`hWHIC~^%Yt&h8TSb?2?{)ikE2m|tJvAwKye!Y?)ZSI`+DmixE>@jtVmh1g
zq6y!F;>zr*#6R~g?d^>^J27{y?r(Q%H@3Fh#*(}i!VAN-bJm@Gt@Gyf`%_!CWQcTd
z3N2W^`tcX;^V`>puJoHc%Vfourh>H*`?tTGq8;b(CPL@xtlq81Bab~Ws}QibvtClg
zCw<Z+Zl(j4{zu-fT)8rOd!A^wtH8o3pRVTDzg{Z7|Khcq57}=s3CAqg+Q?~g!usZu
z$G7LGF3BoRc(G!c@|w_=KMGoZW;c7r%+h`?bya=#Qu80X*S$WPR9IXr%-ytQ%a({~
zTQ_bD)DhdhZQHf$*Q2AOC!bW&JGfA=XJXr8tz$Mfs-vT#cJ1EXFK2t}>eW^@-V<Ma
z{QZ-QE^p1guCcV!<<U{`_#-n~4BJeTcn>>FKO3R5tSdU%S7R#A)f&ZBs@+GG+#XEz
zQkCoH=i{4aQTXW1&CRm1vJ&6Tgt<IoSKiXostVL?W>lQyyD@_2a`?xPsZs4gU11g#
zZ@csy_pu%4zV`oEfuOSap1VK%jyjs8%-Huz=!Tkwx5Cn<%OdAo`MJ{yE*;k3&}U@!
zJH2UE@zX0m&C6BhOu1sxVa&g3LdcO7d5rToO-@b;Ni52!Y7lZNC<~fgX1u&PnD<<!
z)^?8jEA8~8`#ie*LniYms?7CM7wU9w=X-l|GyC$$<ArAC=I7_z@87beWs-J{UP)Qm
zqRy>ZjDLiScq@)i<O*4SYtEvpHWv+#ZSYoj-0;}%Dqry11;5zJW>oF9Gc^2oI{sf#
zV&cN6wS2t1y*)h%+z!h10>?Gwc%?!_%yxSvgxChCeq6ac=yMgrZ7;)^uJ9lp<+3Z!
z&h;l>D3n=a-m;1}#pJ_3t?b-V`A~C*h3tJUHX?W4^ZnB-3dspQ8mv&<IM-ONUpvd;
zuGAZY9f1qqt-N&pQF`I#C2{K?U$i;j+*T)`&seSSskwr$>)ej&@9*sYJ+{xw&0QFH
zcXs|hPToGBzzPdZ&Ci*xQmanhG~kih|08_s!lo+{bzG|j7R(4->u^Q)@Mp*5<UOoA
zq5|GbePmb0V{+AdV`N#l-eKj(XBLPtzw*<Ji?H>&a&OYChoPc2OTV~Wb34m$YM0z{
zUz_3`^WFc+u-!%~zOoc=_&gDIa@zN|C-AnyvW1duh9)Lon&tl-*w!Qe??d}^{rG!*
zjj9aFN6+@&|Nm@y-QGhhYJN(uUvjx^-Qk&&ou{oeWSVST{8?N2^=V_>oqZQ4J{0$#
zFC%%vfZ<%?pI=+!|NU7mu0QAdUMtm*>m~M2dNv8G_tk&jeZThQQDX^a6YiebSMQ$J
zy0S`Sdw+rY^0@W>zP@MAoZ(Qkva)JxYxA3D)9JP<$SWp(-TL+G*R7MYt=h7A^X1Pr
z_rDjumY963a5B5p>YA-vj`FJBiE=4p{$4tD^@>ee2maQGu3HgmXX0WN<n_g~by;l2
zR_E5}bgiyqd#xD`EHcij57NDGHA-Ny+E)IXF`1!PCF&xQlP0X(*732Z?2G);Z4Qk>
zdEeR+PiUC1Z{cv_SP>x4A<D$0XYu$7*VZNT-n_b5{NTvLc{>=I8_pk|+S@z3{Q2v~
za1Hi4+dZb%<|dc^#)PH`sie(dyQ<<Kt-SKW{UYx*F}>Np9M(Pma?w_HXOC;AUqg#r
zfuG`)mi56Cd!wfvlTeoNux<ES^YYTw+s56m{XCLiZrgY7U~&39dC3<iRSqaPSf1Fh
zZ`-BAwfd92(v0UuxSV`^;nGBl;%7hqhVplGIG$Ls;@aGmJGZ_%d-H72)#pZuY3)_k
z{5&Nk>1UQ4TglO|TS|Fn&Z%v=iU+poHXnNQ=+T`!F&iVU@OWSUnrpA@Y`!C87w4Y4
zS?V(J2bZqewLHsn?Hjg`JG+yAZ>)SA_4bDH?4Eu5wLWu9zg1u_Dadm0(xpqUUS;i#
zGv`^ndNudS?wK=ZIxXC=VZ(*1S6jC|x?vx>T-EpIJc~7tK34eqpI;fgoKN1aXQRu~
zpq;h9zk!lg_Vsm^eVey!Gcz?UeSdFn^6@^?*TDr@TXj~)=xJZ$=j7(uIki{YuR%-Y
zTkZY;4IMqbRkdIDR)3#oQ@LsVdj90c&#tKFJWorVqom-m_?uatOLAf1mE{lEuf{a`
z_Rg6e)Uo1#52w$Ee_E`J*Yv}WZU|Y@61wh#`n^ck#VdYy-|zb_@_f!+17G3iyrp|T
zR>+)pxqA4}yX7kUS&K5Rd1(Z)o%7TBbL{=mpYE9*AKqyMw#{-XbPC?<^fg+v_|cME
zcY0RMUp;$k^8STC=ijh@{PD-W+TU@NPp7&lJ+$y!8>TJ7bu#7CVSf8Lvt~ub#Hh4@
zb|gMH*nHwwqJEZ~uSUy}(>Z$gn+3OWRn7j+eBsH8$lDz(i>jD|{Jj1p-!@BL6QOf&
zUu|_-+A)KkzCJz`S&gM0wi^4Tug<u!w{XYG)8V@;r*2q$&SfkAy|6beXSJeKyE4tT
zhCbX|HOoPH)$!)X$xa*Py0QWf>AmsT7{T*%;xoRL9J|k(ygRu5K;C*5>#mBUl0xz~
zEtWt05ZEG^`NVk93YPb#UQrASDp$E&6OsxF{(9$lS#poAj?SH3rJxuwJ8t58)pDcl
z#O+ROyzWb-;uD#@teJTyIo*^K<zjVp*K(7V;^|&=`@@$D$=u&3%-UMLN=L-3dzHZY
z6Je%BvsEW&iRE77eW;r7c=hkqRr;4s?ch6@7oa!2keNaD;DdiHYB8TRHn|zbTc0@V
z9{=05<HHru;#(yfRug-vg&Ws<XimNDS8%&f-|plGK~pQMtp5+#84@Ip{rFL_HR>ww
z>F+Ktu2o9>d$@i7$Guf+gDSp$z5b}v=gu<r?_VUXUcSrv|Krz>s~=Cs#Msw<dGPXi
z)g`MdSpoV}>%aK_FL}7Q->bE^LMLwZ^_*U|#1DTy>(~6RzF+-v>2!llPJ!#XE-Vnt
zu~|LO=mLlLtnVkA6(V9{=FFUVaMkwM*jW92KOXHYe(vVxRxq)bamn+_*|TTAEUDVQ
zT1oG;LC~RAK_SB}feXUl_Bb9EXPAAfG}b5M(B6_iI=hNAf<r}gAKOWUEj>6@VCj`@
zxvKdGT}6*6R!B*3nX&U{xh^&P%-zcL?)K{5@=#XEcjph^-z&Lv8`sAf60MKIZ2pD3
z_gosZEOSw&_Ni`-rBcc}POmE4wXHludXAd%0!Bu~RtCK-0a8sF8!I*~W{%>NU|@)f
zUgy2Nck0@;E302;$E}q)aQEujXyfk1dvkBjILY!M;L@(?Of#n}Qe*DD_|E6ifrNbj
z>1R1+Fy#3boHs3%y4>MrA;`$kF=6*YjcZLwH)qC2t^Apw7PaZ-oevjYd_Mnm%dtl8
z1xzKJp0?MnZdxC;PO?pMd+B|~vn=;nFE{MVTRlC(rAg6oalk5$<J@^?b&MWvKCnIG
z#<Y#?zpdP@BM&hsF<5wT2DLCO3R!h~+R4V}pMPd;mFhnF=wn58_UhcDGWQoJGPF!w
z=3<speAwW_S?eIqDLpdEm2V6@=C9QC;&~FF(l6`Dxpmf4wk)$?N2Yx%IQCt=diCbb
zn^9}o7*>X4<>c_h?<s#Dw>E6{+_|zcGH>3!3p*Zi(5B30j;LYU0lgM+K8Aho`T6+D
zN=gzUxBUEBx#r2<jT<*^+ji~d&6R6xuiP`0OL5m}5ATX^-_kT|@<of{)Ku2rdy=}f
zrgFt;zWcMfMC(lJ7aRV&N*2$*f=;nLSE)6%X<64}i&;LG*MzN>uyhuV&%C{j>#L#J
zwB92EqQ8=~CO@`_*c>BhduqFc^0#L<E|uP`vFi`+dS1CLS9yDr@VUbhl7ALV5sKBy
z+B)mhqa!Wr(`36cXU))AX2KD1I>xYVh0%eyu3$06B~fcvy$pYQK6zfN(#|PX4jhe!
zYad%w%v=?qpw+P9bMofLIh_*~?+LnIPI&xg-Vu+(t4$|*l$4Y#xtzJj>PeME^46%_
zy1IRFplbHq`Sa>RoiTdPE%@#!`^-MHJu#xYo%gVSG<)prD+!s~Zo18Eex*{u(o=Eq
ztoUw?zA)d*tFCHQ>00(Jjw^{RPflhoUNB+7LA!?V-jf0Q-cLWBsw3TR&T*cX;e+>8
zW7nsT9!?0^vwzX&fU?GRrUoCi<{}{*qkWsB)-L)Qv^6SpyTwG073veK(lnJ8-*ns=
zprH``@V8x&=aitH+aI5Zc5Y_&s$VWQ_eav&Fz1JIeN~rDbWa~z*RghQ@^41@Q(voO
z^(CccUW#tr-^9Fa=JJ4M5lP{xliF6M+>p8v#?Zj`v}+4jQ$lhwbN-5;g9<BGsTIq}
zYRP&A_9jXwwXXWo(;_hE)xtnYuB{0cHib#YpR<-FOnuzR&7W~;XTtwXF}IbGB2rA|
zGJ9_HXlaJp8f`eQ(ZnycWuE{OcjT^h(OOeCOxJo9zgDlHZW^y~#mx=>GV4@aJ3f>;
zf>+{*Z1~-{@R0P@hYk)eW{I(|*g7tma@V%@{_lVLk0-o*bhO*=?qsId=8i9}>(8w}
zzu?Zwyt$PhpDx^69sTIpLEF8$D_yMeN}omr-MsU;{o7Gf0|v3{*UtU_ICp#f@729m
zT{SCSR9h|Wd;O*4``q8hy!H40DT>d}-x+fzC1{DJb=vWjc9SRgy6L_uKWCYBC3$1S
z&X{!}T5sRJZEkLM;^@&ZFxafa-D-UHcVO1!7&ESA>(;M-{`sfV!VQ}?1+5Je?sU<b
zDkUeEm!I#y{PM{Zq3Kmwg*q)W=Fg9hjC7nm``WdzCy}6Q>7SpIJy+@PfBwS<gKK#K
zc1%0WtV&)4czb)V4Lkf)YTl~H7Tnz2KWpq}`b_g$8l!jp_U-O&>6qfjkLn5w3sX~{
z-rHNfBkgF={kL!5-o1NQS6BDKhX(<xkFkGCXIK%ox+3Cw>FTSmz(DKT><^%mjka#x
zT3T9~xMlO6P1DY%mBwB#_2ugGZM?2MTSxS2xB%ydy;s*79y4+C(R#$9!|;f4>7t`c
z_P$-Y?%S6;RVQPW!?tZb@b&7d`=T4ddS5UYsYEIG@J*XAOTdK3RI^l#mrJUFGeLdD
zybePKtwwge%O$H`&y!|&alqu%nOW+4CV0e7KXQe$H#32$LMY?J(h^?Vb<zpyxv|MT
zjwczN*}I$E9D@>ARxrpqEEjlXw9Iod*W{ve2UHq;D^E?)<j!H5<E&AWCKZ&mP(Cjw
zr$J<OckxuO)}U8A`JV5IT3!F;qPy*1=9xZiMstI9rJt9(lOGcwfBe{*u+@M6{>{zJ
zl{k}N@2-2})TvX?o~f~Ey)3CJC=l=!7SUaO<@c6E+r>}9vuf9ryxIMnOGf$g=g-B(
z#U6}bzI~IkENU_Q_V4%m<eIwg@9ti_c(IwCe^u4hO)FQ}{1a9V;`zB?;nRZ`%sHAM
z3p&1j|Gs|h+J_l;Z{2bdPwdg&V6No8vZDPNkDW^Pl~Zyv74CoE*!KO-ojb>lwOzW9
zo15$F>svYRxTU|^<h^_MMwo05(OSD^jYVJcNA+n_qT=G_&72t-AOC!gylvH%<;&G)
z`YigTCfA>CG&5_fm9g>WZQI%m=RLNNxGQT@v0?36Ue0(`xxkO2M#>p}i4t!4`Rmuc
z-j+MvYboUP^_0oQJMY}M5fL3Ny~%j0S88eL*KcoczkdB%;ubGI|M#z7mj-F>xi};F
z(}BvMzz~b;iC;RNc3C`cby^spvEaQ=c=+`L2ONxM`Ya8SIAwNP*YMG)=bxjaqZ1{*
zeg9rwTB^9y*xK6K+&p}3m}K%ypR|O81^f5Qd&eZEA9%cG-MV$_*H_PLe^Zv9uWwX!
zqcY&(A<Ou<xVV^@BfEQoBaL^i`PFbI)o~Gv$g7sZJqqfVE?v5G{rdGwmo{zLqSA8X
z&YhU3C@D$F#^0u?prhs6TMrlPdGP1XrAtOeMon${60?-%ws>(Zb^KtnK1Of-+O=!f
zuMb}xnlj7h@|#z$UcGyFth)W;ryAxJr#9-GE|mGA=XgGUNrl0hP$5eOkl_&#5pi*P
z(@%R``ugn~A209CZF_fuK<CE-waJo_l7Yd7-#%A=f2SyU{no8pcklXY#zsWUm^)W@
zs@KYpR}T(0%gV~$NG{xw7}_{>>eSZO)~#DjRhC3WN4K}Nv9Ys@&g?!Sz!kJWQBZ68
z=^IzW!@~m?%sTzF;LR7%c~PBdaSs~Lm%kA`5j$&Hr>N-iWy?e)XPr%BXJ>!>(c)P#
zBf~w`H*6k}k2VWkRlS-e%KqlnD=mfxFXSX7Zfwtw&(2<5<Pd(uac9iA=bw8FePWzM
zc@$F$3qKy~mA1IO;E3nR;tT!D0yG|2rPS8Ssv5j~`}XhOziZd7ef##U)@lB$dNZCc
z<tSt@;8C9Fkudq(`Sbq1z7K8M9!+m-Y<&0bU5VA&Gi|QHQ#GDUI`#C^t5;ce^Vf%H
zJuTW9w|@K9ty{rYSd^8NED6$_`nBh>T323yYV-HJ+S=N>I=lJjljZx4Kkjr%%E(x;
zb*tz~lR5rV?7}y`l9ra9J$v@jAkLG!LFX}_^Sh$H==-)ri5XvZRa<^9nKnsKsYVYv
zdbs6efbhaCe|OkFu8fl?ig9_=rt<E|lcJsBah0s|ckloG_O=Vx?JXL@``&-Lu)E;l
z-k{9n+|q|v-|s2>apGf$&QU9)U2fG@w@b8dUO&gdzU<(oH+$><*#G;!^k<|}>&igI
zLjep7dw!iVkGJ~$=)whor4u}k6okjv&c538b>{SwD{NI=O^!S+oXQli`l^_iSXg-Y
z@87=*!&gPEU9>_%Tr6ucS90vszBs+<-A5mNeSLlTvSrhzPft%zfBm(}Z1&j{qrH3g
zvh&GURD5{w@9*!A0XtsL_FCGcu%q_(w|4nD4~~~FUs_gu(EyF@*Z+9fE?@u0@Rvnd
zX=&lP*z0p=&;I?OnZLkZEY>(GD(Xs|^18QTVq$i`UM%kH<UAI!Gsdp`oy@Jo6+bS2
z-qYIJ>OEcW?(XvZyu5RTbH08p<zW!&JTg(){lZb^-)@^{-tRkhL?K4kN<V&|jj^$@
zx%u{e`}!WWR_*QcUOjEvG*GY6qEKn_*~GM#_rIs@jQz+yOKHw;&CPFP_}v;j{g$3@
z@jt9pA?fCDg*#+=nvLXk51X_jNz>+fU1{a`%Ca@+%%w&~jtiz6*0M}D5tzcQ)yUfP
zqp6j_szI3HsesT0jR^<%ZN*#8OBg2?Hox4)5O65dc8Socqe*qVm;O#jIUpgd_+i5-
z+xrQIu|^yRlom41TIQ{|S7Cxe=}A@rJ=5M6Il+aDG3*PQQw}Y^b2()JCoh9S$;>G>
z0&R{vpZr{VcIwgA>~Q`3yu2W<Tx&I!@3sHumfy?F%zpps)vFh8<fNny)$Q20v9Y)R
z^qtGg{q4WsDUOYe^$L+^Ie6;Ssh^*puaDW;v}iVHws!5xs40&x9C)!Y@=U*Anz3f{
z>{nWyobSrF+`MrkA|gUVgll8On)U0~Z{9pvV3OC;0DS{<^X)r!M63r5L(bMUp7M)F
zYNzxo@4`8&?r?c!rl&tYae`yrztBaD$K(q3hc}%PKd|0mQF~BUq*&BpCWd8KD(9IS
z8yElk^RruAUr%2@`Gd1&Y)s6b4~O~J$LyTsq4Mqh{rP^&i+9d>|GT@p8+2~UtXZo<
zv<@FW%+4pHA;KkJ`{m-*)#2~&?rvXr;=~D#bH*Oe)~#7{=Iq(KyGpYY6BDzuvnwli
z#;sp|`DKV!>GN~4HYXlDNYI*k=(D3Gf86O?w{At}@7=m#gMooT!KWuDFJ8R3bm`L7
z;p^k})l_C@dvi2aE$Z#<O+MZyYge-)Mz8+Q$K&Da<MtLm_gfm|*m`T8ZMB=5+q~*`
zJDb`0Pqo$lU|y&q#L!Uv`}@1QyGvhR+gts;=KgV}h@ev`MwS*9JIdeRJ9qBf#fujY
z9(4S2-}Rp3^-`XI_3``bK0b2wdii?&{=CR*zkXT$VvOBclv-STdDEJA@813W4XRt`
z+EiZJmg{rmFrTHd@#lNh?;pBVsZF*le&(Yi=B+mQ>`%?7ML$11JuR*mb0DPS;K768
zah0jZ_jwe13BI}2e!wE;C7;2aqx})nruwK|{3emTCHY3bYBj@x01Z%R?JmzxOLJSf
z9X$6gD=XXG-Tn9P-{XC<*}1t#-S;nYTskE~$JWx)(%5+OjvYI;Yzfg3<8F0wcW<9k
zbbg+#{@yQ_7CN^FtrXc6|M<whUAtDbsL!4~`|;z)9#0;|ZqVTl7rCK*>glI9Z{FP9
zT`n$lV9vf~c7D)U&HnxJb9<gYd)B02QTOM^hYtoODcOz!IeB@Y(^jLSqi^PXJJ86y
z;`)w~mzTc2zW({=pMABzH{HyMj+WkLbLsDi)BXMZkE<svfBov!t^M`?8=2Xwz@R{!
zYo@}}fZ6At>&NfgvuTr&z5V_T8#Zj*_^>jry1LqEri_F{#m}eH-QC?M+UNQyXSJn9
zPW57CDB3B*prfPH)8DVJqjP6p?d|}LE3Zo#PNZ!<@ybh6dn#AaKCfl%f5aIU2&AQ@
zJv%j3d-LYaSF=PtCr7PKi@f&X!-u)n<-2z81|@*>^Kw_37Zjw`*8V-#E4_L1=J0hf
zj=RmD=&Xy`xoOLmBcRi2tG~VRRGVDEzR}{@)z#t4mo4LJWfHrpHPvg%rES}`9Xxn&
z-MV#qtG~ayzkmPMt)ZQgQ>D4f)DIg>5Y?UP6&xHaEG&F|ef<3S^WB%7G&$SY*f??G
z#J$zuxfCzGG~x4~6CNm7_WIh|=<RuD&z(~$Zr`PwbMkOIzr1Z#Nk+zs#fzPP)<539
z_}PlE)xG`w$@Y7SpP##PCuV7o=hC1~mqnX5f8KgM?sBQD?v2nQNj>HO$IAEj_8vWY
zw6(Q0Xk|-`e|-G?3l}aFpSLwPGiy8LGUbqMPe|_<Bf))opaUNS=SiLT+seb(5I8|e
zWr`73P*CcjuGjWF>c80AtgLo#)?Itk=iT@GzxyI|*mhX3#qt06vGw)Vs7&qsVOrwn
z_Entg+x}(S@>|hCEe$Ifrx!f_^_Kts&$~;x<$qn>v^3CMgdrjG%aNDj`+nbjKhL62
zX=2CEed`S$S@{`leJi!wI`m<t`8{!_Gxf(ReBSmY&1h$}m@t3VoH;(rFW>)lZF@mF
ze>2OOR0r82rHKwfZn>wE3uoT{^UNG{FK}F3TU*nv5Ut92=7xrbmX<qr?08{u?%v+&
ziN_BL81fvRI(2HdxPH~V@&^YPFPl7n{#-wHSIOgJy{)aS3l}O*VOJO8bUJbA(xt80
z*RNf>mbEo1I{NmD7a8&K@!8qhT9XTBT3cIJKRnc$eSICHgVIEcvNsXM`7x1^J1ajw
zJ74#0^Xu#DwbSP~Eqq|XH%sKqxpV8*t=sqGQFrzCcdmY1Z!P6+%-b5pTkX9w=HLAP
zpX=jxm2htVF=6kj>#vsvWoBk_GUVOeHTC@S{Xf^{Yp-*^zC!Ey9iLMU&QiJz4FQV`
zoh(0CeKs}LIqssWcEF59#dJZCLxgsy`L%0aNB6w{-KRf8vVUpO9EYo{7aEvCoP=h5
zJkar5?fRP;`O9Q8!&q2EgseE2<k%M^+-ysfo+Z%YC{W<$ke(ng$y@ze*E;<}3*uIZ
zJehkkT21mrR&RRl1(V4f{gSgj$Vyf?otUxAGyDac;GOF#1qQ6_UQSLd9*&L;4_pc~
zEkqmjoMVfa99Wl6F^JW--p9}Ost2@W_V2B&SEnv@C}3mZxO?Z$om;n<mOU-nx!AqG
ztaMxQ<K(Cdt=!@t(w-LWeE9I;xpRIzY!j|%O!YF)yHoM|?e@zrORB4_pKYF?w%hk6
zi)r@CdCp~5Q(TvF25FtL*c_v$e0RgHT~=0BRyH<0jiC6cuKxY(*|THEj-5Jn>ew+h
zH{VmK3{t<Zp86E5Dzh?Rra+TuqSjO{wSWf&$4YJ7#8+MNDxTMI%Rg+t#(7pnmb_P7
zie_eJ_iDf2y}dnOnZHTr{Hs@5YQYcE-tVjZ{ozpe(MNl$zk?bvNgHRJf8H-^ZDwit
z^WARH4O9AhdS&J1%4-*AExWU~`g{2PUssRI*YDY|p<(f|u+@n!Qf&`^{HQ1||GqK#
zcwE)XrHkGBleR3I6d;i-vEI+uH#aZOOEWz^U0h5|FMgkmxj8$pd~c4~?k!uUoPYlK
z<BzAOr-Lp>zQ3<lda1?<<p*(l-~aym_wUCFnbVJK3Sw4s>7TIf>F@vlq22z^)%A6)
zKizlOuFJgj>C>mXyUW+d?Y(vVdikRxozvs%DpOKiX0kl?y?Nutj>^x^*yU>!mijEe
zd^D*rE$!L%{eN|jEwX4`w|4E>GiOvLd-`7PleM1awbVe7<7+uLH}~bsmm^G%ZF_s|
zTG$e~4WBFKZQr)7?CGhg_J1Dozbuj3>@;Oh;LW*Clkb{lGMNN+z4+H${X=3?)~v9V
zAsco{-a8ed)%r$m*Uv}cppLJ3{=Jyk*rRDHL$o{;eSLfcoNnE|{r_41zh_4}g_V_+
z&t}S6@cQ}r{rfb1|DLk9w~ifSiz-<ddFk4<YhS)>Nt9T-c5Q}k{OYS|X=&@?_O3Eo
z5-_=`E`4cGW=_r-le72k#i>XYRP8T&dn>>G_wAD>PkJp4(h%u7x@gy&rAwC{Ja{n2
ztor-A*f$a{OQIxO68YC$&6=(k>trVI`Ny^E*C$^1Ub}zkQdUWg8k^A7SF^9Li``fA
z^KSY5qc`Mc8*(%~efsp{$Bz>yPHbl9-}mK`H#?t9$MMHEVpdGi5#f@r|MStm{#Wpo
z>k9hEERWxBZ)^MY8`P*+oh5B6P?5di^0d=W?f-r3f4}dyUf4ya*|#ff_HEfx^8Vgl
zAGPLpHWxNj9eg7#lc$k*`uS(jV)D8#i{;m@UAxjneM*36_t9=~{cYQ}?fdiT^uG7~
zJv|R>+QJG~uU-vW$$07%*EKhnw6d(Mtg5PAQEQ(S?KI#yKhJjcnz`#^c7BTg|GIwe
z?Ah6B$1R^17Z*Q%{J7KQ(Tj_VpP!ri`<VH@i6>J6ripeR6)9iYGg)gY*R-d*N?%_)
zcFb*O%&~uAYr~EoKmPmoZ~r+Kg^!MO8mFI2I3&oBaIA1;$S=^+t=;$k@?{r3^63^f
zy41RP^XA{*-`m&z`ttB_`_$S^n{LgVJNNI`_4R-6Rli>tC6*tsGe&Rv>1CNorIkL#
z!D^A~Uf<hU{QPmhy<PpkKX-SRe?04<TX-)2-kzCWOV`Ei{dFsQ{aovEJ<vMb)+xL@
z_kTIKc~?;Hhc!yj%@c9g9E7c#y$kNGu;|F^{?Qh-wvAiFD^qK#Rq-<)rHM&r{`@>&
zAEn6}7Q=7j&&0y$<8$upx&QBH|6F_E`SSRRom;owHBgx1!0_z-+5hMNf8M|U@9g+%
z+Nx{`QM<$o+!icf{+!+Z$Lzz$`^vtT6dtU-UtZZ@9pd%tqRe5N)%{jCpV+ipKe_Sa
z?%lh|$;m5<ua(Lc3tYQ?9khJ!ItaAa?Y*E8*r>M5W5vQ9&z_x~z5mBieZ9CnJ2q{a
z<fFzfXJcVuk#YOmuV263-rjC*X0|SVf8XohC04cu1`XGGcCZ~{Y0uhv>*meQ-~U0C
zTvU|P?yjh{VJkx})UsV(aP8W)4I<`VM}#|FlqMeF>GoQ>Y1_7KTefW3x;0he*ntBM
zX0t=D#@U<)wQBwAK21J7U0=NW=)#2yr%jtSZ=T$nb(1GgE`N9D;EDLlTVnLCU%a?5
zXsO(ceJy__Z!ZkdDm)h*6&3LG-mP0v8Y0V<FTZ~6nn9r&2b1E-?fd_}{rB&m0gq$R
zy^tl9<{XOiI9Llf7e3$<+;z0#lG$T32Mz%tgN&8$^w;L<=;=+{cIwd6oztf6Th}+w
ztn2+kDHf(vHX5xp+7EsPykg9`_T$g4;Lo|fTxZv3U%D<a!zIIL!;Boy2;G-00!@N<
zFDXp#djImZ-n7@BUq3y&^lYTQ-rt&)Tg)!qx4d%u-bJD994bE1MeXf+{Iz$zyq5F%
zEMJ&!z-;nCHJwExcgib;DaC#*ON1mCy&PJMp2#sS6ttDwyn|t3_6vCtmd5ApCtZTt
zVotryTIO=O&~eQju?gBo^jfy5opp1Ph)uq+dF$3zKDCIm>{9m_yJiJ0<2fbnu=Aml
zvakP4pVe^-p9y?XId(&T`e|NX-bDNNuU?%>+dO;r?5SR=^FfQa5_;N`7^hxaI7cm{
zGACn#m&JvGc`>oEb7#+vj*WG#68V}Wp{2p@o8leHCt@<wv(qgw>&od6Em5A{8qnRE
zJDmHNg9Y8JV-^`)Ig%Y28*A!YTvPLBalhTKACLPl_U?#Ut5w_eyfQdA7*q<}&fjlq
zY8txw>ZFq?{{H7*yvVScTPDLUDJE0y@wBI}Z;=E`F>|17!_(Db;^KvC9?neO#ih1>
zq2$e5x1^SSIn>HMdGcf@jw^Q;_#7ylGj;0J95ZV(vu)|;<+g}aDoinCcgu))X2WxM
z-@bk8*6BU5TQa5m{k^@lzrW43E;m@?wfyqhwQFT%WmjGB2QPq^mX`imvoCIa{JxsX
z!orW|=30Aud%p#P8*SOy**|OIE^jHnSE)YJ=iS}i;VT1!R)(le7IX?(9eV!rvuDpP
zXj{$oTO8@OGQ>%)AT^cM+QHkK`&tb9Q@^7U-#)W{>bbDto_mnAb@L}T*GW>B^$aA1
zr8-wfM@LWBkFWdvb~|WM$)-(BPS+PMR19IflC^br`Fk<0)~L1L9?Soa@anwI<a_1w
zlP6DlrOnsH?X|MB>^%JB!NKMkkE|>$SFWjC@Niyt$g-fji{gZKwk2)s*d-^jRzZE=
zrcFgJFD>o2`;}2vCic77-~arH6CBTN=7WZzbaiyTeEq5z+Esda!ur6w4FaItxM4%X
zZr0heXV1_LU48Y@M~f`8k36=Zb+7fH%Sx(Vuiah#e%scqvX(_lcJG!BR+v70`ujUO
zKeyZeNvx}rJL|$HXVWn$@&5OXORl)f*Ot7!WjbeHTYLNW_xJlf9cGBIG0ZsG`gD%`
zjr@&m+m~g|o;_P!KW<OK!$WUxZ=cwH$%I$_>D8>#)YR0%Lcx{h88<>6GcYpD$tq}V
z)9k&Ovu*WiZsTsl^Ma-exw*MdTuFGR(&b+8X=R9(MvUt}y_r5v!A_A9Z8uhbd_5te
z=V+3KYi4e4FZgoS$&)8*YiqYUG5RhL>O69DbGoQ@7tcyB%|pN5b$549o;=w?_1l*(
zE4(9OV~@&7w>_L^TWz4(WAZBW_~Vaj*RDN#_Ut>*?PhW!I~VMD|Lg1P@9*v&KC-vM
z=HC7L{f}aDOs3qNXJ7yC&(F`s#>Ok&Ny^C`<K9{K_t&jkQbm_f-IdvVC~)V`Ytf*s
z65f}$T)cQOM(_HqTdQ9G`t|EqE4R2orlDB()-79P?CWgg`jvTiB|mYKn#mEb4;rOQ
z=gJD6ZZ>skz`sQQCqMXW{uVB;v)TSEH@)Rnmtt?ygsj7gv(G+q=40SF+;KF?y-()n
z@Bd%_Uz~LM@1J!0$oo-`gq#>f9K2RseV}gtFLLK2ecko8<$qe0kIyqMiMYRF&-eEG
z|NpIx?~C8<#i-%1_K^|S-rBwQ>;CdyskK<=-oewPkT&~AMetI|squG%Q&Of(Z7@32
zvTRa&*TbOOU;C?9N&LI$Rwx{EVL{BdFE1}gaEbS-aJ3#fcI?>Q-Q~xR9pjU?+f)Aj
zUW{J)tTdyUM`|mk+<tKD>8q=&_y2jSuOGW>%f5Yf1_lK$E-W-oKlkSL_Ve4`9zA;W
z+_`h0i!zdvlM4$!Uf=)E^j&bGMC8hl3j%_VpA_x1F*IyE$F$skzFQiL@oK}5YnLy7
zeqo{WjH30ge{Ida-Y09_rWvv=cd<`eS=qLrl`M`IE?zAB_U2||BV!Cdt7E~(M@RYX
zemr<|wEJgG-T8U8pzhj)r=Dt)pB7n8KmBmum$lK`H{H|;GRv?zD7|!3=Hg3QlY-9%
z{yI5X-QCU2Xr@nfb#;2WI@=b|zM0=|x3>zMFj;D>`}^D5*Dqfh@~jOjEp(mjqgI}B
zCU^Np4@aJ3E2m5n*3uC6d!hfFyFC2P3?37X>z`&zhd%#%+C2Z>uEmnNdv$f4tAFu*
z-_E<F!RrF2K*KKnLrd13TP5OQ#q3s7rn^3Nw#Ut~0PS0|I%X~qELiPYkj-qnR{hww
zW0N(buh*UzcX@yAroOzrghi?Ene)2OKC9}-N5se7pCSF~{p+0fuTS)RDgRcI@~G!n
zkf(CV>ejU`-rN>?9Bd3uZ9NQ^C0?*qIBF=cC|&SqU6AeXu;NO`G3WcAZQ>`m+$mz*
zwQJY8dA8OjH~!zNe!q5&PUX7Qud9^i{yhEuzx5i<q6Y^W)6Qp#GCVelJ^Aj#wFP&1
zqKp^Bwys*%_=hP|B=KOqS+uCe)J7wpP$Nl`%`UE;Q!W+GIeGGAXD26U)Z=4CO+|&p
zT)*qDzfPPuaoe_S+1J-Cz5H_P)~zpJzTCJGw8cq*<J425TPs%uH@Q6(Jaa#gP3dcu
z?9-3pdNDI*%y2lqsKVyny?ggAUv9pqbU`65bMd1|ml&La8!h(~OzC>Sz|)lQ|KH!A
zHT%}Df4{ij&S}z$xb^Zj6&tp17oXgGVS=mK)r4!MvbB2m>VCgHd-m+Ve|5LF8PDuV
zjeJ=mwSRSt-u~b3cH94b=|6q?bi;R2va+^ye=5?`)z2|(&%gigK{LO>#@BPp?>Y8Q
zoi<HuN#lfN$D=}COzRarc>DHk|2Y<h78V&2$9})x-+wY-h41f^{&hkuj_K*oZ`_FR
z_xE2Jva9<0yR);+C#KGrIdf;(ThJZbl9G<h(`8M6q%3|hDQC)qx36ARJ)IhU;pfub
zyRE06R-Jq@Yb)pwVjs2QkB^S__V%t^x$^b(^`K$bUF()#&b*|tsD;g3W5%H;9ET0|
zeV+Tiq_ouVn8AbNnx_qV`t5$LSiL&CqGE<gPVo0PH;W$~;Z!MW6?ieN^)A0?&Fa;w
zgM)*g7D?tG`F!5K{>6obF?#CKQ_H7(H@J3U@^|q$VLZxhPZ<`xwz7JrqpLgDzP>Im
zk1vw>ON0N?ppz*=ooydKek{LV`~B2ZZE0!gpi>twUUY8fn`=?Xv~%0jr%yjWKkx73
zvtwQL=Vxalbf)<&KR?Iv@})~nTb#B=?Ja)JcdttE$c-B};{QF3m$NG2xX$_g-QCYN
z`S0)T?Rt`xnQ2+@pkY~NaB%R7=?8hP1uyqg+<5QOrAcSgqNAfZ6^|wb8iKZLp13Px
zRr2D^&CQ1o9}YUTbLY-(as6}W&fVKlnA~n^VKwF9ii7MiX0wm}S-EuS(v>SU-!ON&
zJUY+_x&nR1c?)y%@8_)F$Ly&ntgEw|>nCql^W&`f{X5(9<@=_eJn4Da#N5m*;P1uz
z_w5Y~8t(0FOHBB`v*KgY#t4;`H~07d|9$`ezm3VqmrUX2=8mXYyL|cbn{vA=4KMt;
za$wIk>+*LCvPA#-?%KWEf38*QKRc%m>+*L#K0ZDD{mHTpZx)?MzxulL&RR!4ZfTo|
z9w|mMYkz-B)VhD?&Yk1(^=n@L`t!$TQ>^};4~HHeZr^-U$8TZv_jiAPgKYi#t{fCD
zbGnWuE%%%2G&3|kJv}>Hd)1#+S65Bhw0-;ctKspk?<LNdZp*cve?ERs#m7@qwS|R+
zHBLy$%F0ShJ1a}y;c~hqUfeOkt5|0F;>C}De0+S~{{Nn3nOmcBD=TlB_%1nZ`CM37
zIDhZgYqRtBb+RAyQS!a)H`nTE<-Lc8+xulKnHXNYGch!D)ZAP4Hfn1WXjJj(>FNA(
zHZx8?z2Glpd~}2I*)wMntiHwnIT}C5vY4$s+TY)QYgFyOpU)?<AGw_(;kGkIP9A(W
z-}>0yVk`%x^Y<89Syg>{axzBmdF8!NpEfPayuL10d#cxpNWbNmkN3$2tMW}@kNjNo
zb<4Chf=V`G;DZ8LZ?0I_@Qdl_Ig|B!{)_lMOnh>B@*~Yz@+v>L+_s&{5PrP0?NpoX
z_dCV8xw#)({vMY9_qgQgx?=~n@gD!I*}6-+?&s<Fv*&d7e*0y!G$$eB%i-_$|6a8J
zfBDRpSfzst95`8IZbe_x-~Z>+>-?JK`3Vl@yoxPT<^(zDb1=;pIbPc|{pa%J<GnXz
zRqO0NdEDeO5oZ*2Qke`I{5QW>;e7oozugapwT4Tlgs+R4IddkcsW4I5oln-v#K7Rf
z#fyzQoh06~I!-wM{QceC=JufF##2r|y;t-3?B(VD$q}vBcCKB!cFHBtVB+S@o0nzA
z?XR<)>62z8*%J|B%cL`*(K=zd|NMW?%=cTGm`w3oUU-@F=rLJY*}s4PYO&3mIdkT$
zSyIx{!G&KRJ$m%#&z|?cGqg9<|Npmbo7tU(PWxxC4qp$tvWJgvo^AEFt=Hq6mou-q
z<g0o2)-9%nlP6EET)8s)`ntC_H!t75J=~Jz@wd|AyOCS{yi|nl|NFN6<NTXBVsq6t
z=5b50$LuIr7_?HP+jWajPJVvyo>$8&BwFWiPiSdOli0W9^z5gfAD4grxr;aG$GNnP
z0c%2^O*6N+UVZ!a_uh9mt?z8zuARwTAaBCKdeMiuB)WL1b_rL=>dyzFqrc1ApEP-A
z8DzCfZKjBy>U!?|?|90#Z+{wfDa~k^v6{mSDe1SFYh~{VFAieQFEc)$)Hy5R`ZBRR
zADu6y&yIcL`%<!muczdD$&yRkT!lFw1O@T3usW(vbl_lMR8X8S!HCaCz}G>8b1Dmq
zhfKSWhH6XW6oy&LzLu7!3YlG-aI9d8z@?ivf1c7_zaV(A)|NG&bV6P#$*7&Zy)A3f
zMX8Kw$7=e{x*h$kaZAMb>xI}!hS#oMy?Xn0_wH*g6B-*CO(s2<Bi?=V=+UEV*XnMW
z8rZk3;+(}s?N3s{W+A6;A34G@Yv-DE>!jK)-n(aKWYpxeEzRzG;E7bz-h?CbJX9o-
z*YErFYHjrPu&}UY%a(n}xO?~R^K)}=Z%*fDTlZqpY7z4p4GncBbLY+lO_)49+@8E~
zMrvfl?z7+jzI^$zv$ON;*|SAE@7%v%|LV%h>2Xz=IXOJaTdMZ<U0f!RR93bvKqF>X
z$;%THmFLc#tKktS>DJXbA&8HcckhQo+@O_)7cNYgvT5zww|C3$?=5*Lq^4SU?)%%@
z-#?w!m$$F8nd<fQ^UrhV{Jb=+wq1Mu_2<u@huis+?=E`QJ~3<ZvmN5Lg>f|>k1D(O
zJ$P|!w>%5uvYMnjr!C{-<KtsujxfkceQlmPIZ8)NTdaH5vbh$8kE-wgmh)O_;Q9Qy
z{r{g&Pfs_Le|4-^I{o}S*ZAVCAMahiUjFu$sY>d!Y16!x29=katJy#MT$yvvMJX}z
z+P}ZQ4UhUvUC_ifd(Dys{PVI76(lDo7Zn*zKB=Rx|M=~X!}9+OEG=Jx4w84AykOci
zv5*xD55N2I<HxUGyAmaom6hv1iq{u@dUA5%Ld7d~BHc&7eft)p*B;gU^XJcxA3uKk
zRyHN+VH}5A+m)=XSzB*iz54af=kxM56#^$MOp=`z$KPQ)k+%7~{r?)Z$rFS8e0)T@
zkA`Sny?uLk`TKk3_bQmvlb2*3GH_YE==1aQ$#++L`}S?Id;h*)uU4!3&B@5lj*gF)
zmy>(<@+IiX@cM6?=Px|9Z0S<g-!|v?Z{%6rR+emxTC#BA!tnT7QQf81R#qQ4gVtY9
zPfG)}VzRHV+qz{-&F9(oYu;|XK4G!@O~35y)ypz}R7Aza?JIhE>fYY!ep%~fJ*%HR
zfByc?&g5BX)z!Z@CLiaMv1oWAI7=fjP3hI|3yZ^38%^_XJa7qI8+Nfo@@)C0n{Rd&
zKaZ>ZdUfGK#TtXR_xH<}N9x7z>-i)fd;Q{?Stef1ij}n=9vrOw{q3Q#$YidMnmzk+
zy1Tn8vX?Di{`>cDLshP`h1px9cE;>0e=lce!l~%qCu3RuP9}E>&*9Stzs5yJ-<Hnb
zbMf-!WC=E*Su=`LW~B+R%&2SiJM8i1(WZqn-4DOzjlKT+_wVy_twCG7H*Pe1GUM5^
zXGt4x?0&zmTQlcp&A)4FqxJWEaMGK8cqNZ^3P|0LkB>EMj%4|IR4v+k{>qgQyZP?^
zizZH-m}Ay`Sl;qcZ!fP;qFvRO7oaB3w>Oc;3tI%*`D9mxt-hHfw$k>F_NlbZFTNTZ
z8y~j3zrX&!bpD==>F4EQZg41q&OG1%H5D>5GpnkkKEE-T9~gS-_nqzo9D?(dAXSlS
z{E?+Ko2&mYJ9n#_rrK*xR9URBbb=F8Lrbo+@TC=pHsnUJnQ*Ws`&=%)dx1~(=Kt-V
z-p^RJ_v`KW_<c1CgFZSoml%1*oL~KWySn-xhi9K#YkwbG7qheE;i1;7rK<vSv=tcU
z#@ed;&9(Y|YWt;|J+BKDEhfC(`^bPtbE<>g$*8Pn+vai2`o3kh^!`fQy^sC-t7}rl
zyL21=^Bgvq=`+u&l<O^M<NwAb-H8(1+@N6<(Ae<B#qRMnACDTRpL<Z`eluvzx^+pD
z`1IDeySe$zv1t62b^i0Ck3SwBZjZgbx9sh$t=ZQP8SJU~Y1Aee@j+<2YU<()Lx!H-
z-nmw#udb{NuKxChkwIrc!_$1>&LcN&MAX;+fAU1-)v8ZFZS>|AR_7KM7w6^i^@i*Q
z1LK)IZtg#8{yjT8ySTXcW5u4uiywmytl*Og(3!gKwX(AE^K)~x#r_E_7Gz+^X7+S(
z4C&sUe?KlVa^}pLjt?2~bdnXiE{1OwVhn$>?)A3q+aKRl6XJ}yF4leY8PiOSrN>^G
zd4wb$`BxCc=IOlh<+8Nk`A5T6)tK(DD_^NMXBI~-!#nm;E|u$7txYUyKD}scZl1Yr
zjof1!9xbcM`}}pZmu@x?G=C#eEUUQZ!0H{+Q?m{hx4surTj4lEq;7B0%L{iW7XJ-k
z_}KKnzB+%K?DeTjpP$=W{>6cXsrJ4g%Z<s4G=i2?X&P&vE?sr1bk(bnpR9jG>KN>s
z^K<$6`R`ZU&`V!7ckh%}o}D7U*<73%T;x0U-L0P6J>PJvB*TnJL7FO4|Cdi>_GA>?
z9a;U>^uOtI``0I3uB<kX*|^yD<BN|gOO9mvA3OB9KYZKi)}+Jv7F(l~ch9)HPKWQC
zy7}p?lebQs`SD-LBJ1dNF0t3QuFGDNze*|WNQ5>o=T+4^1xovb^E#eKKJFAPT$6vq
zA}L1uSYgiEnBE<EdloO=t<C$Me@9^0s!~Bo2?+^FS<#7AYuj4aHzh8pRMqlX@!<7u
zyCP?U+b84=Y_pbiX8!sem0ey|7SPr_p(r7NVX5Z{7weK20p;c9ud2kv#RccDer=W{
zof(#__`}hqu{Pg^sk^&7Iy!pwYS0Oq?)`Fe=ghIG|MzF6ak@!+Jk!jQ^A@`wxL$6%
zGXXS-9;6t+)SNZz<;%<^Gp}Ts%5<t(W~p7=n0y@6P?{cB#VOAIG<@HC`<fpg4mPuQ
z6eMh@dU%M{Mn~z=)vHtemU}N1T4OSStK|Q`zb{{AemR-vDI_9z{&QMd8c4r*e2pOA
z(+#OVA9d?*`22p?yM@l}pmI;yy)WU}n-?!MM7X-UyH^x|=Cgl(ejfd1j>&7U`>T`|
z-7UL)>(+$RoqhHh=a{ZXb1?3V;mZ^`-Y0u`lS_)dBd3?z<i5u|yu5#3*Z*DbKhNgo
z_3P~ustXDPGPz&%ZP~SJ)q2;G*-pPLbAIdV=;-L{FJ`*(dC%IlYuWkb-n@CU<Z|Ye
z=U={leQ1?&M(oYR>x&#bHydfpKYxE$>FNLtmC2qzW+=Qin0)fUwx3tS<M$RkJapgy
zLy-No>(}LNDh%xH<5ypu@b}BF*X!l2N;pm>YfW|9divY9Z(m<uUwl#HRDqhh`ts$=
z6?sFnL`~A(y??Ji)oZ5DvxkS<ZEbCtnVAC)tli3SxA5k~f-4y&7aI7li*Z^gD=Qnc
zx1DJZnjXD9&$i+N!`(Z<E3d2!UVd)Ay}gM^N>5|IwUF?=`u~4@)E1l8{s{8en{k2f
zc)XAP;lqd5@BMb`{-3k=4_uMF8aLHTb@ItI>(-q+fByZOH!{{`JpYs@co|L*>U2??
zY+3l|$hmWTK>^dJP1B3p!!cb<<&NTY=GYZwWo38NGIlfnbenuv<w3sc*&i}SdRfw+
zf7-k{7${Qq?99x*K0Y7ryLaz)x+GOs|Ni&)w}9`5h?U{olgvL#<>u$RpW@6p8mi~H
z{Bnl#y$q9gcXk&4`ttJP#X!N#{QUOb!utCCea<3LkHjym)0lo*(R)SQdUvIXo72xf
zO6U1KckW!Tr9!z)EeEe&z3SdCr&!28nTJpA_T(Lf?R>ILGHs7scG#7dl{sa&iG4Ub
z+x+32wXasa-j%T@W9`}yt!+2cq+Ku1IF`Lts%wVPOrP|0b*-aIUb42Wy5Y2N!_J+Z
zUVj2KT1uodE@$wz?VW#ndp>A*Ix{n~rsmJo@VLs?YqwijS#5}GdQ<)Gj^z#YvuDq4
z-MV$*K^d-nQO~}qXQzo7PJGVNW%Q)FRjP@_JbYuf(pdr99Up!LduNx-dEoWPd%e+<
z^RpY?t4)h(b=tRf?b{O*mH&Uc|L^w3jfTl*)WhvQX7%Q%y>D}#=%OUkXSbs|yR57%
zA;Dn!UCn346DLUbw|F1z(l#<R{n)(!NB8#oKNH>4mp}Jj8dn@^uA=uR;MCJ16RAt7
z!u!4)I6Yk@A#1UHM*j`_4T~aL)z>CWT2||3BbT3_@7{U*%$YM&wZrr7?gAYn<D)il
z_J$1`8t$!I81Ul9$H!6MH*VXuZNr9!Wju=)FOJx<@JnrWwzdr4^2;w{^u+s*v$L@U
ztqd`n-I~nG<aDQe&G`){_Emg*^z-v`!EK7ga;sBHTwSGaJ$(3Z>eQ(<cKrL<a-J@{
zQ=6W?JZ^n?dAYn@jl@TxcVB<~vJx}jyLa#7$BzrNkF*{&5`1lta#LYd4EO@rC|&uU
z+z-sxS~cdmvxb??ZY@9g?c29!&z^Y+KPj1V`sv!WYm+v1SZkhDue$#+!S%?-YZceN
zs=V1P_*hDRPC?D_9akfCRE`!X$;nE|`hEYx$MfxbsrRMKA4_9ST$43_6SlfeMeXXQ
z+z_qS7`<p=>6f0WzbDIHtcu+;tMrvxigVxX6`_ZYy?_6<OlEn6)>ijhvda6yv#<R1
z(7865XLoy>^)Bnbee+&_e%&8#rX5<Z9)0i3(=xBtouQjUPl&!Q74Dj6VUpl`r0~$b
z$JUDOd)jI*)ty`$xnI%muoZ8iO?J)3B-7ZpCm*yMuqz9xOSL^`+QpIhf{k@eg-xDJ
z_|=UGLX(-cN->K56aV2~zVP3!^O}qDu3VX+zW0gLi(R1_A}%bsorT@b3om^7WRx{g
zpjSsvPfu6(>F3H5@+(-bOwvyFsjjw`sY!gh#98EipODav)_L~zbp-_i)8uFUXe<7+
z_xaLd?td~LId9Eb8O?rc?uyn8YByb#1XFw#9O5{8)WFr*HPm@#Z!hnT_~k*GSDt<O
z^5sRW!|Lk~A3mHoQSgSrL5-5+WM)N~7S6eIKF;y;@sY8s*|B!5uS?g_M+Xit{JMK6
zS|pOcBk_WGO-4pWK|#QK>sz}sbhiIK#S+glV|u_Tk?x~qWn}_p%E1YxrJ@g)c8GAX
zR?Jy_Qt#EXfGRPr)=MuzQ^e_MX%E7?E`dg;7cN|Q?_QkAzR=$iM_zTDWM^krS65F@
zPhXgK=Iq&nnqt?t1!x>d%1lXNnZ@z%n%VEOtWP&TSj+z}{>tjQKOc|p$o^PiGyi;f
zS(%@|e}7NU9LwTopq{pv&(0XPcDosR?n;6`$`v}7Md&OFG`Fd8cXOL`Ql;z1wQJY5
zxSGtfd&8KMm$xYP*VWbGf!<AC0vbjW7z9>_Yl)s=*s=LV_ni!r2OosKbU;ot%g)X&
zV9m?UKFo00(#3k#_U+pb>+Xoq$<j87wNRAhxx_Q;$DVJuvQH#7)(Y)frP$0FrZ!>1
zrkgrEYYX*1yt{UsOHa#!$A;<g<Hzm%@^R78&gLul?f)1Eb@K4=EV-Q7Q_S<PYH#1<
zsmom@8S39%y&C!=>}iqYzdVhpLV`19KZyDD`}f5#nZsKnbf$T!hP*j+>iB0Hl`V(F
zIc=XkOyvttyZ?QmtCQgsc6R#&$%dQKyDg3;3GTFcVYc+%fr|agiRrnyx|2_yIe$Js
zKVO`yRoXl+CqMtOLh;T!&z`Bh<6yDyiL7v6kg{p}_VSDj4XNI=&5<E9ton=%4I2w*
zoPTa;_pw8<kyX^EA~IxkXhq$@vUKp0O-Ws;jT0JH@tKNcZZI}BzP>JYcj05V>gwOW
ze*JQnuWdPW_20j`6UzchH##|3D$bKN$^TR<zjXSJsTBoYOM|Mbe?NGj&|<JgHNai$
z%p0{QJDV5r{ES<;aaUf~qfptN*Z%~r*6jcB;dT`-%kBwLw>Kz-$>_w`oc~;7c=m1X
zo}G_3daRA=b6dPv**Smz-!dCH`(LNy|2<K+kGvi6ebqj}Xr1RryS_^Ihs$+-KO%VH
zd#$!met&$;*Q@`Zum4~6>%_*Ig*m;+M}LI9y4Kx#==a=!g5+<z-PiAb_k{f{U(;`u
zgRPIl-T%k9_jR;5Dc*RKSXuJtN1@6jh4cSGUFr1swQW9+YwYSjKLZUZ@$>U1@4S{_
zGHv?w=g*&C%t*+~duI>26x9CT@&6YLHtpTJH)v&umZ*iM7#FL~_tK54-6SG*xGWA-
z30KaJm9|N2QCK4@FK=J?h(+wq>({Tjxw(~<m6e);#NV7tY~R0jEpPY5w{LSbbZ%_@
z_u(-A`}_O<-~V^J{&Q`7_u+^BJ2z}#_&+ggD_8fy5UtilLQ4`3_%nV~;o+FLe8awd
zcJ}u5UtfhT`I3Bg?cIV6Hb;}Lf3HoR_aw_Ud5NT;yUVM%wXddno7(4DUwW%N_iylF
z=Qy+AGx=ewj<U~Oy4LA#)cTlJ-^-34-^IW6sFae~8w(}B6IQ)#H&%%oFP!mMMP{<s
z@;IBSM@t_ccMp2oxj`^^Yf!sL(E97vw{EdjSy>AyUeE9F*c&*t%2}rH=$9pnI{VIf
z-2ZS||Mac2kKdYq&Mud?i@SeH^i%7fb9XLPS;)NeD(&OpRk>Smc>1pJ{+7iay_<zT
z^_U#VjM%PtOj!BY#-t-Zl=daBQT`{q_Gne##&ya`d$X<{_fz|0?X+;h<2G4y9i^{P
zyw~q<_ixety5p#r>Y@PI5Q(%KXL^n%o#2|-aQxJD*Q13i9=^E0ao;{Z)`Q?v6Hlto
z*U`~=pndE1ZF$?Omj7JhK1V()EsDK*u}4fY@kJNYVwNrX2OZwNfA5}u7qoIWzSeZE
z-{NQ+Cy~3Rp^Sz06Fgf^FZHyFVq9p+q{O5hocZjvqE*mEcIz9*ByNN*3DVqgUa9S4
zt^6XPTOW@+{@B^s`R`xd@j`)_kDV8U@$mANmX@wvvu4LS?#uC}&&|#rd-6k1!s@~2
zjsAV7WKYOjDDRlGP}B6$Jr|{gPh%~_Z@;nMYW-c{yLfy1j=a*+(!#=zpmklBUMz@t
z^0{(`z+vqWTcZiH+Bbx`6jVsCowz9}DS1#Pqi1D^){0v<?%i{9O<x*xGHr8K7Pn(!
zRn@O=Z*O<HFwG2`>62DaAi(!%M{sU#?)v@ztd?k;35<$vKY#ObwcmO1%OYtWS5}pj
zmiqen$yt~2EHybX(XmRZWo?aJzr^m<tFu#5SYGN%c<gAHAgZRWKCy~<tJUnYWhEsC
z4u1LZ@$m^Er>!DYIScz<J~=sgx&QoYA(|`)Zt3&<QV`>u=)tl`w<M_JadC0+?Af!g
zW|_+HsS9;BHa0$dm>3bC{ZMh1r{gmRo1V*o^X+0IAAXL#4vLKB3uE-ul>|a<&qv3`
zx_(Ntk&BOw{k#7E*Zu$A|Np!HV~GMk>q+J7>*L#B^ej>D$lJj!uwmNt>9=p+4i68n
z|8;r(y&Z**PfS!^Q6wcR>#ED&SA0Lb&2UDXoJ~bT-91}d+aJXlN);cvk1FlD;@A_g
zkZYUKjy)cq9lzaQKEDn$hjhGOK3r?++_`g$cJ}=5IyloutvT}8u1F1~3fD)r9ZkWP
zOWcl^9-b1hHZ1W%cbH476XRhXC!TvVl$uToq_6rODDJc{fI~`NMXtw<WATK&zkdJT
zd{ZY*b*4{Rak22)K85E8uYuM}wRIa`amdW$mP~$-*(%9t)-fZKA99o$zugao`RB_^
zN*+Xg{qkkck4N3p^<rnunDOHE>tY#pYlp8@dqcF|zIl@nv2OkP|If_#&zw8=sB5!T
z|B^#FX55Nwp2r2Y`X2BPm>(ZzF!4DDsIkjhwE5$vgS%K(*Zc@OA%92feg9j{<iGmG
zwjZ)Su05z_Cc|fLBh9t*SjX0+wGzsG6WtD%_9`nSFJ7#yti0TRzk!L#r+>fS@Be?X
z{i~Pj5%KG}+1=vBJ3UO^Sokds$u-HEyK<ZNbiKcK|NrI}*V~uWn|vq0La5C7QKaEK
z-u9k}Zq?Ph3!RSbNSl87>_N5D8EZNmyzlScb@hMm=`}eEWLI_>DNXWQe$j)Ya$BcM
zQcjM}RIk$V^256xUG}#>dg#~1#qQJf<LxRxsr<@_$nHLxWHx(kh}PV>bC(9aJT+Cj
zBUB+#VY&G1{~qha1Y`A*Q`hts2{a^rRc<_IVd3G@{IcZNm6gH$a<+$@wgs)cv!n3w
zi;IhGZEauNX({Ra_wQe~xW3awNAbid>lB2oC!YkB8cEx>Z%;RpT*Ei{q{^X-HFo!J
z-|jY*&*N&6>3uFZa{*&}M^1kJ|99p4fB*S>etrD@y4Tlq1s(4?8qGZ76c#@1;4CH<
zq2KqsvSWm~I<@zG%q}&5RJwiZTuYlzw`R_)SR8jQcU|tfWll%gPfOn{`uDJl=S=Cm
z8D2BrdHCz3z2;4heY~Sjp38ej)QX$4@}=ipS>4%TeC4{OvCP{(PmfzJN4hGMrp~hH
zb8%9dcjV55_t$d|7t6ZyY`I+EvghB9+m{uEYjd6Vs{h(`JOAG7-PYFOIw@IKk39>k
ztE|jUUOY*v>nHC=sjF@2vB$*=j~HI-kl1)k@c7rGg2#FNf~{g-8n38hwEA@Qi2JOt
z9sAz@zLu~;K`Ol3&-B#QJg<Y#J?6Lm6;iF!_fT}y=w`ls=T6O+7lNA})!sj!Vl==0
zpXH_l4<bakS~vLie*E*}V{(PTL0ySvN8Pjl$;Pte$&)A7*49o?30f&~>CNulyVcdy
z1h$KGyFL+Rb57bTQoYEl<=K7D%YRwkPf^#}`CL(!=lJ@GT0)5?Z`zkNxYYjP4!M%F
zamTi8Z3p|MS2-%|bCuWj$iK1USn|BnPmN~s@ThGO?|Ig~O5>UN?dsKk*<Dmk7az=j
zB){}$lk<&bacR0+b1Jk#f3Lfm1zLAm_v4}Z{F+TWcUFFVb@lAovz?ut^XARFcP}pc
z?X6q0wuZGPrxedv_R}O!@0r!yBL%q^{l)k9%do4=tC$zABQ|k<M`TG!Nl8_e6#Ja>
z&%?vQ9-P<*-kHuOJ-5WF_Tiz{bLY;9U5%69vOv_eK<QBMg{xOfzr47(Z=an6+u~Qk
za&fh_wI06@iF7Sm;-khKUU%lkg%?X_YA?L%u;Ih?YkmSR7T(;tb!%^5-@dQcqWk4+
zqaq_6Z@*u=b}eY8<mgfD@O69s{dz5~ALqiX>~l2gX8RRC-`3_^P39g-6EjStRwx~r
z;A|zdh3AQ$qp5R3&&GwC6#^y`uP<w2U1B~bGd*4Xm}m&wojX-~_if(H9G!9g^SZdb
zUF~-ZW$wt%(Kqs6_<n)=)(#P_*1o>J&FSZrlG=N(K-Ovh`Sa(ve0|N|Uti1bRX#s6
z(>O!5%|`HM`qZZB*N+`*yZq+XvRMj~95&iEw6l82^tmq&NRd-ieRXQ8HfR|2>}+$;
zQiH8qO$`hf<nwN<eDmhbgD)4=y=VQ)xRKM))$)-cI8OKa)oZRhHgDd%dH=7g>(kQH
z^Y881xo3|IS8G*O)s_ySnN>6NN&;CvTnls8<vEwIOZXVWvlSU8vpiHjEZrHy*WTj4
zyZZaPudlDKkKh0AsCfLDbLSRqShsnz@LP@^!xwSuxrL^dJUqs_d(roM)%uf9u35j{
zx{ulUX>V_@vU^|5j)KIhDk;gJ48hh=0k-p>K7IQ8`+H%N-)2*}XN)mR3oLr7uI}4s
zXOpV?yZHWtzpf`79Ru5H))z3{jZ-+A;JJPGhkvtuul@deb$i(6ti99LH*7vL`ABv4
ztFQXg&-HD*mj9zpImIc@;#S6wi4i5wK76tN_xS&GuhNbaZ*OnkeA8!boaVD4rJ&W<
z7H{l$?4crKSM=vd{6G8pzn4ynD{aisi(mKil7RUW>#tRJe|&Armc3mdbNusbCBF}M
z+rsZUs&=q_-?jASO7YW?x+U&$$IN$YYH4KDq|Vlj+HmNate=X=ft%ZxFHf(o-W{|u
zLHhr(UTJA*X^qeWetcpwHx{)-_N-Fe6?Lescx%+#H*Z|pSu>ZVWY4lq@@_HN^|o!R
z^0$MVZt7gB+P!O+5NO$IM0E7-;^*g%9doO%|NrODpI^T~O}^K!rRC-4&z#v<TwtJe
zc%hn5=eBKTOAaeUOI#Ob^xPTKwlKN8eEa*~N0S88S8Zn&7dC8o|9gY?kLmS4#eWDc
zn)a$yJZ{F!nFqygetmuYqLPSuhyC^3h}?+VRhwO8?zha%IK%1MD_y#0-wgY^qLqmO
zk3^;4dFOq(w&-4j%A=a1{~v?Y%Bw5io@y?8%(KkR{jZzyyY3d}dFtytk2szDmZ2K`
z>F8(KWaUKlCtcb?U$x@4Civdqb&n~uu}^umEO335;`Ocjq&eMV!jBxk@WuORhs!Ee
z;ePk@s-?!3_wEXs#Vwo=dHVV3tx1*X*1JDe6jv3fyotEJ(sG+(-Hon|LWXWfL?7?C
zwxjRy4`1B_hSx+5ubC(DK9SEBJf}E+(ZicwTjjd9uVn5P)9mnA{BGs8MGq(6%iDjm
zC{#OO0_y@x@u=h9OXn-Q<ehMDxU_xa#=_s<a@TyisuALw&eiIqHPuT+XlD%H#J7L`
z{MlRm-EXed(yOYMuG|St-+ryHukYW}_<v7#7C#qQ;k^C|Th^)!g<qEfTP`h6m$6Ti
zh|#;9qt==(uP@@VBx-$2iNReShY!sk*Q6Q#SmB|vNKiJ5>%$2JrBxwXb(=jclahPq
z7T9#Wv$C?9V6f;>)4yfH83OB$3jPrHb-Uc<<T8)r(ud8NzfPPmj-PlU??CU3J9qZf
z{r&a6?)&c3)Af_v|9^RTS%cGY_UH2ZwdIM4jEvjDq8=6(h?}Ik38x3_Z1~^xQ}~zZ
zBf~keLe3MmPVrhAaIfg~wY6DWyC!vAUhc1KF7VRk@ZrOI_wLo$<PakBMKFJ5Rfc7`
zMI@-;Tfg_4lvd{l7Dt!EI}VjzZfv~GyOY=cLDS>^tCIC5WeXgCB-^O>?3bH$>8mUD
ze=pm|?k>}v=&``<SX8%Fq{QNVpH68XK73e9mF0e_#DrUKrTgXn=}(%pp!n*n7u>AT
zOjYp-l70WB&&<EXc|U(w+v)|))yp~KFT@F!ZU+O<5ax8lV+)wH#kv)<ng8B8cI?=d
zeb-CxHa0e1kFU3#e){f?!ow1qH*RcXj*E(NaxOpr`P^LV={{<Sk(++2z4GahZch~E
zYu~<Y+XBOt##X1Y3U2(eaq4b7Gton3+qP}*?(Y76dH%mIll|=+)dc@Eu(7lM{{35f
z>M8N~nvEMa1ZaqSSU0`lLvK2-zV(*U<HvaRac^$<XJc;u{bu_7zi-m*Pp25Y(6%=<
z1x+{2n<tn3_SC6UQ?<k2-QUkIDSqB)oqb!&t5v(sFS+L_G5N)@-cHxvhlTqW+*~Mr
z>HpvT|HXOxZ{51ZCvRs1-hU{})hZ??_U_)^-8*)4yvm%~GQpbX@2?XRl{ZGLS-$-F
zySuwLZ{B?4@y_Ds=dP{}=a;o&NqzO<;o%E23`z=DF8r8zY3aV@2KOIzS5;MQ5NT}n
zJ^gkX^Ib=kC$F7A1?PdF(D;pCtNwm`d_1E*fw|47e%I%%e=kk=;rSppX3x>s>!Oce
zoxWNq(_!>*!|SUy=O6XTbsZDBn)UTa=i{wWS4;1%4!2*OBj&8AE>fm7)op7~_wh$_
z=gJ;Fd>FK=vVWTV`aCn6=(XlY3VUC7-7o0ri2wX*tBcL6pO1dWFDvlgyy)Qq7s<Oz
zc)N@u$`9RUmGz9$k=}1LONUpKXMS_bE3c(Zxh884Jn&<mzh~ymnab{cI{F}>Y@b?O
zES&2b*e~0E+)!ci$tU;!-o5YZ;}fDKsx$H9PmZv_vsW@qK$~&=mT!zWm^Rm>{J;jQ
zD?M^Ky{lfjxx2IHq=Htsn3`_gu;Igphlej-44l$&e^2G-i;Lao&Yj!NFYh*w`_QTi
zo4&s%WAxZ}w_INCFK=Czla|Idk$)BcgoOSX2PG!^fu@ls9&Ytk^tI&{7oHfpHmv&3
zkB@KOygA&?ANbeK$mr9x=={B(PHA`CG@5zl+qZAe=hx@0?N#4*CjP>URQteV;wvjp
zbQK-$lQzsdV_~>_Vu5O2*1{IaLg8TNyWKNCiGP;njXoc?XZL4q=esL~7bnRI=T#_%
z=Q#It#IL^@wK#57i;QrYZ?uj`QGiWI+21aUeG%>|IY+9lZNE0nYw5NO4XN&~sYN?g
zk{%^4e>OYdM9blavnD3p<llYn$%_k@UOl_}o8LIv`fJqEAg#AK`BwitR8mx=xOQJ!
zQN3?LlV^|Mal^#N?Y;R&%a58Lizu{t+;T+l=O($}%h3Y=7gw)SD@nMKta99WVuG@Y
zuid3%H!j_|9QIzqS0!-odubc@8!O#{m>0D|!c*y@?9$@q=H@Jsu7ouqT6gzWmseNc
zj^gI#f3wK??6*t5HYE4<ahOf?IG_w#TRmUQ=l{XZ757`(`p$pTx^+HL>fMZrJ54{U
z0u~79Caig6_V8lEDka~=UOYKl-hkFP`!w}yiE#b!wQ%$>-f`5p@7DaFl~-=wym|XJ
zcWa1q-X5tB%rW^(B12j^g%9c~8J=B#FnmQq`;L%c*1yYVC%&$0du2V<E48rj<EyKy
zU!-2Xd-w0B)B5{A9+M6Z4lek%v-<lx@%Wm;|Nm<LBpS`+xfb<kpYw?WrtR0-zMEd*
z>IrK39`%*8(amK+$?kQxuU;+v^u*J`Ha{mvM_*r@tF^VY_3YWR9x9h^-t1Hho6+UH
zbW)a>)@|Elk1bob9^A;ZGWyox==*I^{H&8srj(bLTgbFYYX>DL%yi@nPL#E?p7Ba?
zO?g?F(qb;t@{1W?mQIg*_4>7S-5-l8U44E1#m#cNW_<nnRdw>odGq9K@+#7<o)r%}
zxTE$}Z&QKzEg8MVd=e)Zm6)viofdA`ySJB@v!iF#n-xqetXV2TAD(;E^x$ukjHHjz
zR4>)3UVk6k|9d>sIQ@dzy2Xo`c~2`(<S6n8TzdQV?P#s356pQ~x9s09ueNoj&$DM|
zXM>Jbt^I9Ql)El||2)6tyLa#Im$O~P8L(-(xj;>B@X9NP4l$YRi_r_$5D75jSUxqy
zsPmG?lVuCzI9Zb_Ry_Xr19XhR-Cd>M-`%}>H8kSho`1hyKR-9uIe6#In>Vjs4UH){
zac9=iw&Px=AB%Rb`OXyFvW{0lqW0raar3-8Gv>}UJtkvS!f|(v{~Qa!Ubl_&8}}ve
zlDQQ-efdv|S&Lfvum9v~bG(`*`dd3fB13v>Z*MPX`$1iuod0Xkk+Glj{}-jDu}Ry5
zwv1i7eqCH#ymV?4CyS7ZnEka|=gyt$>+AdZ^XJW*H$f{}D?TX9K5Hh`d%R!1{@2Up
z$;rvW!onAl9xUcL{-v|Cv-tVBh2G&G6it0+yN0YiWXyfoXh-dj()j2W84Hor6W_T!
zzRtS+|KIQTiv!Qqb+3J%`skj&jnku!jeYw5+Ztlb-&punS66QhdgZfx(%a6rx|cJ4
zT#Gv1@!nfS=;hnD=6)}3iJPa%pR1l1zV_PP<==aG&Hf+#@75+%f9Lgr#-(Lz**-MC
zdHM3^#s0dMzv((M`>#FE=4md8{KIqKF{M^{*`Z6kr(?Fr1-P@lwOnM#!}BdHJp7?}
z@xMQnTRvP-YMqvRLD%Sry5n>)7sp#(Zq|&i)hz#ryDVA1{{5GimtTl9fAe3wc=3xP
zSFT+HO=Bh>?^BGHetBwxsKarV<TEEuoUnes=kp<MeT7$-_m-S}eeqH5lEWPwm(oo-
zF0p3pjf;<u|NrxRecx>nzV`U~zhC$N-o3whV@7!R^-Gt8Hud!yUi3JTeMKfYxA^S}
z#mmzdt+Lo>>L!!D#^r9;+R)dc_rKfT7m<!T*_O3#$3_>Ata-wc(z7M*8us1sR}-E+
zd*;yqLvzch&r7r)wcVL@rD&b>x~oQRT6K$M3g_;S-gb4?l~swIH=~wLyv?=r(bXEw
zNj+EBuB_rs_OY2ZVZ!dsdoNDwP@i-%Kqqi|f$ozwtHVndnI8MG&f`X5?~FE=#j>(1
z-&NQIub(3QbyBj_Rxf2S<4%v5KeM*-YKyVD9}~Z<(Jp<oBVH`pFmCO|j1ZgP&5tY+
zuXh;EGvqt<Rq&O%5a<2X*Rw@8&by%=xUSIY*o?OD&DX5XP3KdXz?yiqaUtt_wjK5g
z?<S=!6t>Fl=uo?UBkjCw?XL}7+Z&&${SwH0Dy#J`EG%q8f%wFK|Nc!@_uu#Nm~?V-
z@~XT9jlA64r$svhG)&CR%fG+7yK?2qwQF_XOv$>%H;>Q7eT5KL+WD1}7Ohl``rMQu
z%r7!4>+y6!?w5;~?_VY-<Jd3C5v}!`ZL{2xm&ck`H+D$fX6~r@5E#YO$+oN0g~_%@
zP;jC9?2aRk3nShxVp;({vgpm5H%F2TISMvdxNhvsGk)>aMX%Fjt?GwAN;5gG2T!&R
zVRvj|o|mc-x!ZK5SR-58*3FwYm%qPvG{bXgQ2zeE-?Z27F|xAidbMz|d;cQq9usZ%
z5avS{E*-Ot;%j@|X~SV^c=1R4>MbU%T*9SRbL}cWJ$duyjeh-4?;G!GemrdFm$NxA
zjmPX;;O-^QuNswn)OD2BKeMav@q!?pmntU|4!nGPBVj3{sN6K$2|^3Zw{G2<o1brA
z@!>(c{U60V;VH8UEPAHdT3cJ6xa+V@gpJM0MA5GQXwvb1`T29^*wp;^aN)v*zrVlN
zf0{hs!C`;#bHDuj_n^ha3=%>NGI1X)5@H^fvb~g<zIyH2wTl-s@6<Y)R9IPAnVjtG
zvSpdu<}-^fW>i;OH>KEIsrXf}e8G<gx!u}r>|FnJv@R%o6<T-W@87@a=jQAzc_}2~
za5i$Yue(a^CDV!SE+5)t<>ch#<=2O36=;F(l*+reXXn<ftxa27TU$XPC9^5@y{?6$
z;`^1GHwzzaE`NWo_UF^-AG19gjs~=B)?cD==jOhBb~#ZFy#Jp}_TRQ`n}O&Y>+*N`
z|DNR^JAS;7@%XW0R#sLEW+mQukzJUc&VEYalE=llUaqzrl@$>mK0iL*zdmlSRR8hr
zqe@HUcceyUUt|iZUH_$f!r88N@7GPCvWHz-IOV%I)26<Co4YranVH!l>WBaRU8UKT
zm6DbF($CNPyS)C_av!zk+PTTc`(pQ2i7G3Ka9zzZUDL7Uj`YvkzQ;0_MN9VYuTM%!
z%F23mZEZAYL09_x+GiH$rfP@x$ygS>yJLB#y}~46PwUBV_y5eUZ{~Dy;c8`K(Yf2m
z@hnhjzfQz7jq~S~<_j#;aNd{xAhhMsr`hKD|Jwh5kgxlF`~IP2U#dMX*tmK>y}I6I
zvHqH5SC=EFpMN&byR)PEyPi{auh_Rgf9$t@mt3SE{o-WTS6eBiva+&y7KKSAC7=Oy
zkFvYQhaXA4=u_QxB(%I?@jShtt)B&*EOr>L@@K!bTWzvui~QTSZ<UpmGiE)oICtmH
zorj0pH?F!+!=AZHB0{V3?7B-Y^t+$Vx;E$azN&(Yo%fHg(wOL>@a6A|#r*-Z>Yknw
zHQ_n-F5cb!_?Isxi-L2!l+VnbGv~;^hgVmJ|NiwWA*<n)Q06kuj9%s=3m*JB$+9P5
z$xP1vtzW-=GwZRxD7k9&YH$C_<YeX9XO)_cK7Vn}a-ZurLDgF2eOrZ$)UK3VEld{T
zGIz1L{&DVxToakc$C5gO7Rq#Oxw`tR)50)~%D`|f-ur8>=Inju;{5U35^3Kbc~`9F
zl`8Q{uc}z4C&YW)Y475s+U19@C~sV)-lx4!^n6G5qKVtK2%F8*e?7B__voXQWras_
zji=742<w?x6dM+{cj?rxG3y>k3HR>G{aCQdHm&E!zWDXm4lAk)_5Z$Fwf5qNIU6Dh
z*P7Pd4eO3u`pA6MF$r}UBgKvTuGF6Y_`2`2O1{(KYMsi3Mhd2!$}GEQ%?i1C`!=`s
z*}lF$c7C}#I|`X=LlaKy+OwzU*^ZMbLfjcwx0-Hr(smB5>NuKoP~$F}%qG*8V`cB|
z+?it~s505pW}&gM@rme0B>}EhF>&$tcXk%Py|s1eQq}w4H{X1-xBB~rqg@7`tA85o
zJm?nnxYA|A!Tjr1nl8=TGEXGUj&qgz(aEu`Z(;wNX<m)*%vQ^_M0&(pe%1akzr@Z_
zWzD;JyXN=AZDwX>E>QGbe);>myUx3-RMvNTEDYFD|NmbzJO7255|z1o_wGHJBIIe<
zG2!t?i!;`OUDLf(e;iGk)Sj-j$tLG=DTkqDkflOGqT8WR)8E@CT`li@UfC~i9~TqT
za<aSQ%h#_9`xx?MLFcBhv47#N$W2JQkfV_KtZ>C=?MFd#*$aYBXylmu-nv?eZLOkQ
zzrVl#_U+r%C!fsPx@*&>BJjmWrf1YIU%o6XEW9n#b8)cOh9#`(eU9Br6z9%Y3|jHj
zxK3~S=@r{J{K|jGsD$(J@!3^<$w*I6FDxufNMM-6XeU<An7cW#f!F$Zh}KeR&RH@`
z_#Z!c@&s~on7Fuj{=GdvKRi5~wYBQe5zfrCr7v&GoDwYKFtB_e9MI7<akAg?i$D02
zZoa*}J@Gp?`_rnu`}XYlb2EK@qEOp}C0(LkMG4c}7B1SQuEJI^WySB`FJ8QO@ZiDK
z)!~WlUmmv0FX~h@kv$=NHOq9SPtw<>DZFP4R=m9IBhT_m-EYo}S+lIl-rU&#yZnD%
zVxr<qpS--hLpE{qzU{wUKXKWGX@1L(A3r`Zl{tO#?(+AGcJZE1TN$#e^7FIm_j|YR
z+SPR=qBP@DCFuO0bLX54oSq*!dD3$)tG2fGOdqyY=946^PL@{EEGko2nmH?LWr)}E
z%d)bvH*>_A<!k4rrKeA{PhESpE<#|Zf%*$Sp?7vgl`bsz&g_uQux|YqaQE)rir<gt
z9a>slT3VW(o?ZX~26Fx1zkHEMzIOfkL&N75e)aYCZR~mGpY~s{IsiV_^ro6dZt`6v
z-}*1_-n~0_?%c_fC;$EXH+L>*jj%-Wsi#I~Y9D{B(3<KbCEm5_)6YMD{`{G$9e(WC
zu?LS@jtASzEN1fjXu)&yY2A<I+d5RANCr$%ysy1wFUPMZiq(==FS6HW+!y3HceT)W
z?MsuJ(y!TceoT4(^w$feeXMJqJbV6pqj%erZ}|bU+ginI*h_rhfcCR|>XkO{I;!+*
z=Ylr**=DO(uLdndD1Od2E3Ukx#K+ICucs$r>I5G(etEl^FE1|s{Q0xDm-qhn|G(@1
zzhAw2b^gAe&#qh%`Bq<YTK3u8!-o$`y>XoA_&6)VBVnWTmR$#CF~4?Q^XCI|*av54
z=NAXRTy&Q|`uO9%efut6y!i0p!)@EP`KUGb28aCN<>86hRl+IjU}k1!_w$MH@j}pY
z$C)!FMM576EquN-x9pV5pSF~`KTU1#q>eeO9njM|^;Pi9fe)hh8kgPtA8LM3AnVnn
z?DM}v*I)1TI8u7(VS$PW-|k~obyp{^$bTJo_m|l$j~?FsFW*Yrmn5g=+QxsIZoVnf
z|4-81?Y2+de6M<))Bd@!L^njsvM>LZy!g{=UV8DF`Q_4r(Yhi<X0uEL*9WXS`nYg^
zoa8INugmAAY`SZ@Y3j-P4<A$Sw^X$q`_=B|v~WVY)4~~-H*DGyx3@aKEHP1W@=24d
ztNZSq+jnnXV`HO-$`h-)y=jO2Rs_}y&1`oT;`TNX>T0=@af5gFM;DW47Ja!DalSR~
zPV1z5cPQ~~k!YE<!{WsEW2V<_%35A*yBSfQkicMGm6ViJTl@FiT<d_R8)|<YWS8Ib
z{a$syy#28St_=MG9KWYUy<0eORawQvSj7p3Y+M|FtZmObPrUWvLxI`sw=Z8xN=r*i
zNF3<fmAh;E0++m`q@=t&K1MmSd{-9PQwh5pT9`~&4q85%a3ykOYPd{%qXOecm701*
ze}zX!_b02U3w8b#k<3)<Zk@g3Y}kd4+jG;VYnTc&KI;6v)bH@DI{v+BRaL)^ipRGE
z|2TK<ocjD4A-?we6_0sy!o<6e&Nk2A_y6DT?fLiDg{_vAmA!lS?%%(EIij|Ncs-WC
zW8D#dqGHoEH6hL|vt1i{E17?C&oWuE)W;(Di2d)Q#ukM!#U~P1yz^NaWN>-nGRODN
z=hyR{F6jBZZJXJY^AG$E*0`^>`S5nz&8=KP9M2M;WIMb$pxXMcqj_bB*2fAN<9iPt
zJh*o4+OJ<#D?@JGxN+c(m8q$zo!z~l$xDT&q&+&4WH?7Kg<~uGtG92D{@c%2x}(8y
z*+-_ea)r^mckQ}x_s_e#yZhzs-KP9I$S%KQowc!X^R_#uPoI9j|Np<K+Tk_#^{09<
zGc&9E&zm!6PRMC#lSN_^ORUz~o+!8`u;D||@ho;Lop(hxa>rYGt{=R0>(-k$I^Q@K
z9DJy>_{i6HcXwY1v-|fW`TlqPm>mtey*F>({C=<c{oV5WSC1%dNps#QFlotz|4okT
z{_Z#F<a`!T!L@Ap^5@T=+yDInI!VAs?ep#X|F&Js*z@_E_49Lc4-4y_UBf%$j{0QJ
zJ)cYzO(vgQu*dsv`GgCN0<rnNYr~w)roHjHf4JV&{@L+<dFO{~uV#TV`1iZz$`en3
zc7z|BFz3^ckB{fhmEE)UgW93P(K=#^n^p+s7eqCLe0*@Q*}Y%RvCJh=#AwEs+z#oB
zH*a>POv~C@_50h~hYue*xAQ%Gv*i^3dGWYzkEUbSx;yUdEPj4!Drf_|-PtVOKJ&$D
zCM!?JExuUs<HJM$`d^p#|Gm9mR!ZuS=)UUj@1CBX{`}c9gB6!ve&N>N!yulUQLw7v
zf#<>KWs4U(yIi||eSPfiviJ9Frx-7;kg-~j`%C-j=btrp{X3=1nO+N={p{MeHZD=n
zvgpZ)M~^_qHg4a(9kk@9JO0n3rPJfAil6c9%2;hEELHK?=oPp3tlLfpeP-HQ&SrA@
z)(Bohb*^~U3%&CpGV{Kltor`(wN>cr+aKRYlw?hG@;>^tc+1QMSGmkCxH$8QZ*bP|
zt$g~rZb#eJh$zSM3==7SIh!9(_3L-;+jsBcMME1K8&lKPG{c`Yb;ZTSb#?#V-QE2{
z26QeA=zPn!ffJ34t*ok^otbG}{?4Z2!-4OAzu&9QPfcAKwN~k(RCHg4R^z$}_P;Ln
zUs&xbYq;TW2XpXhj@vng0x?xe7o|>q-WZWnP*9MUmzSHHo0_^bLg(9;FH0_G=Co&t
z@=QB)?N*9W<;zQ|6(5s6i%IIK`^|ar`t{{GOc5K)N=pxlxiI<7tl}|a(ArZ~RW)t;
z^ot?C_kO?k`o)U_Zg;k3UkA0X^>lR~9_}?Pa260`*_*X;v-EMVXeF`2*p2f(zIt@^
zkK0{Svv*xTlGc{qG2oJQ`}O;C_S2}XF<;;Oy7p~twY2g}mvZ+jqL~pZy;j^PIAs=M
z8o2+VPM+A@*Zg^HdsgJO#00OJlAN3Qy6qM3{n90Y=l(yKT5M~ZdER58BES6Ff4~0r
zb3LspzklGujTDt>9Y-GJsl=_ga(%l|wsf?2cX#&b?z^%p8~4rY+<39^pWJoP>!q(u
zm%sb@sQYo--GU>+E5mX&PFOwNdt0FPlkThY^d46#UT--pv?=M;wnW?Wo2|4qn7Hre
z>Iq$vpCF-}%q`_uU;qEdj|zW(|HT(?+`M_vY|YlPgaie-{^vzI&)fZebFi7+VCFG_
zLmw_z95#8o<@8gdZytY_MHhUiyz(~V$p_`D@?!hT-`&}GZQALleSLgiG#m^1B&56F
zMCh2AnzkBTExr5p?c094UoT!<T>L_R@!x<`Pm2}?I2>qGc99Y4nfdl|hHtyxg^zCy
z-t)A*IC%eN@(EMkwIN0Z#~dn}GM28C=`a*f$zH}hPo(tDk?lS{J~6vWGK-5h2WY%`
z^QPw4%jE)|?d|Qh=WpM;x3Bc|wO(oS4Uu=RUj2G2d;QrnXBOD<&aqgsvL!2r$1t3!
zRoWsrbCs@;#=S;W^){9`0S^87hW?L41YEv;`}QbcV)Vy{?efn)SAMCTJ%9dxP<r0A
zt80T;Qm>k}qt0a!i65uCIKCL!e0?=@>iOrJZ|0~?KIqdiLu~RMv0D~>#V;-_+_`h7
z*V09{F+nRudcu=7N_?^K-N)UQyW{0SNzwO$PrfV0g~|tKUh|r<Y<ic;Qo}d(ElvyH
zy?a;u{G4Jx!`r&LPm|}1fVL>Q&bX+jtNZuY_5J(G-b(46xN+mgY5n~+mX@8fJ507$
ze}A`j?OIi#&VvUXr@D)aiCuWDF4qqM&NmKyee>qco0l&evpPQ(|NQhcY2yqZwe$0A
ztDl^hc<<i5tgTV&ub-c1`}@Vk#YH=7{{Q>?_HAy-?|Zjy{rdCyytS280^63IJ2~U0
zIxTG2>3X;*MtjfBD>Yulmvc5B5SzYY^XB5LtXD5CE<Tzh7<;2&=e6tCL$yBD+D|{N
ztEYGD@kh`xVp&;S&Afm6L8mir+-PWEaN+v(cA3d@=gvJnU0>OLQGiBCdAYx@@4@fB
z`Mv^oQjdJNeEG7nvhvOtz4_;*lhe}EA*-@Z-gxxrQLnUl!KqyZS|VIagE9*W1P)tB
z_4f7mFMg&y`)u8}o9X{Q>Hjw}GYiuZOU$!1H*e1l(h#}w+C^UGdTDi4)v@EpyFs@V
zf46ymtXKMLRc%(*D$uAx<O~NlcXxhyyE$jmwr|@uZTj^4wcqdNm`QWBe){?6|F8J}
zuTM?YuDCHVcga!f4=Ww>_@1$Zq^(`E=Fgw!_WILLr=OqKd;IZCpJ%_mzMfzAOH<_M
zx^?T`z02G3MN5S1h0e}Rn<jZJEdzsT)28L!*>UmeRZ~O5#@SzgKA(U7+_^_rxLTRm
znyX^NwWfkj!m9aUAk_Kbu;JS~yUY12<2FX*6crgw^(rkXIZ&k|!?*v>r_)E1KK}dr
z+uPfF-t)h&!uMBwd2#X08=an<qMb7HlD23{$jI1~y@|-r&o}U0mKy7F;xm)0<fpw%
zD>r-0nKx@z)#G0CtgWC!-|7nQezwcbwrKgk+MeaE?L=GcvtoX_J9qqItJPcAzc2gi
z8o>qEvbGjj*jQNncs4sf>AUCW75lF}UtPJdjQiO6*|TSNcX!`7yubRpUQFi3YX^TZ
zL>H`>W?%nr&##M5K35(u?31&t`uOOmd%v7$_t7HIt+(}GSI7T-B);EapPtc&kG+5Y
z{$1`j_t3iO9S3GIMK8M%>2#8<EaPid#xt8F&M)U0CLd~M=YR02o8|Fh_kKCMnjM=r
z3o|c{(R)07VKV62sza^ZE6g)Zq(F;R;^XVT-z``4>*VmWl<J*lRk~{T?&^dDhwocV
zdoEsGE@txe>sQd6)c${8*KhPX9QFUh!^2yn-v0ah8+==bl)CEKTQYz3_HtL>Tko|p
zM(0V^(n%Y6ubW9-4cZ#AqWaMl>3xrnCl%hG?6$Y6<ky9yXJzR&lQ>L;1j|b+Q>#8q
zdGEbYkJr6MJw#{vs;{&1mtNYidiL$5Np>Ontw%l|i7H&Q@om=Pyq=ZQxtE1iy!^6p
z!{oe<oV@AVi(8Y<K0EdG%%jIYx6a*`;=c9Xit23-ZEx0<=Pq8pxwfX_!I6oFjoXji
z7QVEiGyh0e@ao?iGfsS8^FI2#ME2eZg@@L;#2)W%RZ4s;Ww`IFt;wqIM+9B6FTJVI
zRm#oHHCT9ov7x(vhRkEGx%z$b_IBpx?Mr^mojbSR?w3ce;^U7NVmDv3%sQKPHBo$*
zgpBHkr8C@?XqIhHS(Y(R<kQX#NB_RKxOnZ_wfFAb%P_GrGAep;VPT0?uMWc-w&e7y
z63xdF4PsVY2Q4=~efso@6PG1Dxu@hDSYsPeySQt!oJ0wGiIkfjkITs#JAU)L%wM6I
zzs}ENxje;$`J$O^%!cK<jmtJ<gN}BRTgABTNc1eFpZo6Lz1wT&IMpjPIeBq_M$G=Y
z+Tvp2W_jJru<&r<PM7lX?_a)riO%0^YHZvb>}J%&R<~o}j>4>ey)R`G6<38{2-p*%
zm3Ujycm0+^3%#6;5jtYs8cjDoTV-71cS#qVIeYf$w9W7L{eCysx;%iX`1iNBXV0EZ
zG1|FrpPtgrn7q<b(aMe;cYoH%r7nDRY|)`bWwS3myK|!PYT?qyzOq}pjz0SM`1teZ
z&!0bgcHu1VGC6U*7zqi91M{~m>Dad5Yl%nAfsDpTwoTice0Te7X5LsO`cnPDOsl#-
zKfZk{+ZeH@@G)Cc*8T7L@%z@)ZS+{w7*_Y~%}rr-zmk%Y2e+J7Itrfs^~<U&`_`>n
zUQ30%7QOmvRg=4X*|IIF^2aLk^WT5@Vj^S<x@JRGBDrX%jFn{aj<V9y*gX}6wY7W0
zR_p5Oigq8pdiAQ08gqNXo-j5xHiZkT6SuvJzvOepYx(65xve7ItMpP_ADR?CWoKhM
zH{U*g?cJL<9fdBt%h!H6sXo7A-gLj^iRG*}zkhgm_=PFoM^~3mKmVxDulY3l{vWp2
zyAB?7%zpdr+qd-jwQ5Qy&P&P5w@)wLpjzfVQ7XlK$;5vT*zG^m{{MX5p1;-ULb;q>
z&5ELwr9qN1GCbR+1T7R$m+N)YkJ|$}2>elN-REa#ofaAx88wwXu4r^B=J^%++C^RI
z?c2BQe6mrIktd%PJuHxj`{A*n%WZKxpR7~dr4JuItX{wG*XQ~FWqK#necL=gc5l_z
z&6|r86B%!beKVdgKWWy~qXiaC&G{=snyL+XO2Wg!>V93Gzi5kO()UM?l;&-1Y;1gd
zynnu3t&}YDg~|onw|_s<DLn6a>gJnC8-E-XkGHA&Q&CW0F#U9HZtmMRZx;CRn!4`@
zn>9OFYwCraE92IG|MsoTX<>*~==$q{2Cd99X3mt9mA&eASEJ0j?9GjjkB={0on|yM
zdV8L2%@2W}!3I|k>3{$Bjcw_fzo$NMR>m#RaNZZb<Z`B<=JeCoZvFfBum0=$e^+nZ
zka+T~*=~z{NBR*?-L1^KjC*D{eis!qNZ7db_u=`|r$-jtkNduTqIAw$SxHID;%7WT
z1`p1EFMYpTY~5jNH{G0|l~+D|`0(vpncnp1xVX5es6($9ZEJ&9hQ!C;?-W+=lePYK
zN_%}zPtS_ij7i&4jDBA7)^BxMSpEH7?T3Tx#l^)@ow{dR;<hHas%_|);-#vxOS$LF
z(;|)g4jTmT2!5LX&ZDd5f!pH3mzS3A+_^LR`nrXx-;NzScI3#BjmgIa#1}@ZhkcH?
z{N?M{y`RrnZ;W{J?d|RDd3R^co$I<GeRl5(g9*28-xls<@rp9pX{8~=y8Y3{W1yoT
z=bTMjAG34Qo;`cOrx2F>{q;3KqvXejhu+ima`W@gpFjWj*&$`-MqWF2ZlALI>oRV*
z#BzGuURlw)C+f}>;lS-@Mb+O_O>J|rJwBsv+mDThAHT0J+Z=adiqz3FUDooe_EcpV
zJzDZWQ2Fbo*ViBQU6<SV)op2<&J(X|Yo|M}n{w)EfQHJuw7qftZBAdk6t&{^1{o-Q
zZTqoLzU#=Y>Z;RqX~vW9-aNBS_4J4PjYpkL-th7B&6#6Yo09hH%*K}|H<lckxaxi7
zJkD09ec|70GfisluebJ7k>Wh+bj<A4)Fi((U$dvWExoZK?5OZ{QFW1`p3vn&nPpt<
z@+~G`nPQ4r{4#u+ua?Ef-``pMeA~8d_iDe#9{DhP_UsFK!7D|4<_7Lv|4sN;&B1?>
z%0XZ6a-=QV`od^J;Gu^FYLg?QqMWp4wy3^)|K5N3<y%(QO{5P#iVuh}u(7c*H*dFn
za`foYty@h^X1E7(YFP)YX$%hIje2fqEAf}{5Q~!b-HWa5f?aC`zS&!+2VC`hqOq{R
zS=c!D@&ksAs=qETJ|VbO{Z*qBU;D+@;}Vze-Ltc_{P}El{<5Hz{&qi~+}m4SaQwv6
zqH9rSZfuNr1Ijb?|Ncx=cK4fW)%wMD%K41dnVIiA6SN#$+TA&CKl@rGYiOS*|Eh3;
z6!Y@jwbiXGY%5F7zh>y>@`-fsmphtbYHxr4+O@K$r>34e=hySUv$M1QM|=H`2hIFf
z0+{P;Uv0a5^XAH<Gcuf;m+*7WXjn0iRd?~l3<Vy)r9nG3+~VRo`0dG)l;~*bl=XAx
z&b@c<Uh(sDU%!5>JZpB9BdmF6tX0+3UQuP<rL!`ab(8|m8!9_yZ}8<-v?<h`>bo-J
z)tj4}D}3_q@B91X<Kyh>>sFo=%sY7F#*J?MeHG8n%$%(5-`CUQVJzx8>*lQ2uU~_X
z9RBekF+E*<mMW-t@Vxx<^Yi;PpU=*mDe0lO?B-nCsa~LSI<m8~=huFd6k0PueX7?|
zH8nLpS*w<5ufA5**3|rAxBmg^X+f9&&z(E>>eZ`JYp-3rSojfiZ)eTL?|=V)ivP#G
z#eR>eLPk=EawYrA{E8=mOPL~7rk`H8OJM!-b?eqmkFVRgc=6#v(2N(Tt$6p;$6v?(
z9$lNCoqbu!>&nWhr=J$>+_PuToU>`~@9pi5?(YlibOFsm9ctyCt{402?c31hOQx0f
zWmf%N(7WLEE^+<1BR8sld{B(DI(_=|i>swSK0Hi5-Uk|&1)VLhK0ZD&@}jtaO-ZjI
zGc&XOpNIVAWn~7w59jtRI<#-!zR%CkKQGz|I#g$}gWBZAeGNe|CywvkyBBm;%CTd|
zZrzef5qWbnB3oQc%x|8}&3pIe`7IAj|MlQtbBNZ~ZQH)RxVYFu<<jNL!E3|r*Zt1D
zUTXjA#p1Vbb1S+sZ>#xmXas(#t*@@GuBrKR*8F~t+u{}ByXybjt?GL8v0`V;yg74h
zs=mDV`1m*|E)E_%n6$A&`g(>*TYLNefA9a>33bNotEo&(RGfZ#q13t%Ena^9`BtS_
zH8p=eJw1IhM{KM2uPsh<SB7Y5Yisw***0CcdG~H_?@|{f(7{J9E-c*tYxVxBhpplp
zW*wT`ZF8{x-}8FAk{1`w&Ng2kyL;Nnlm$0g@3ubr_yd#+=G(nBv0k}Sb<e)eeQT$x
zE8gb?uY)*pV8z$BZ{E~Ap9@;UEW76}|E~-G6ut?kMm^!=+_Hx6-|os=JQhDVqXO$M
zEdMdJ;#lFYvuuVDa}T^=6uc7dZrr)WK(2CsY;3HCMSN`R-8*+&1lj9&SFd(%=L5BB
zCr_Sy`0!zm_~Vm8e7V}%+kgN1wcxsn5T{PngDQ#s;~Q1yd8lj<asJb3pgH-ZLQZr<
zM2FjAXJ_Y#;H-m8br<r~GWPT~8d_RbJ~<&cL(|94kB^tv*Wds9moE=CCA?gw#4*j(
zy-&t-`Q^!zC$H#fP-k6n{q@_oZzG;7^2&)jzWr-r>ULQ&V6#B48^65WpKrJGANL)Y
z<mLj3fLH7PWmQ%E>ek=qU|uNb_}P2Oqr)Q1MhD-`PIYlQ_CBkdw`^Pc+@LMGSLXI?
zYtLD%_i{t<>WKAm**|(ybZ*@hn<@25FL&vkSuYD#aYnCuZl-Meu|h*;>m}*WzZb_X
zHV*l8=xSTM?sTVP<$nrv-dG83ye4Iy(^Gh)JXb|&+uhUZE~n<H2v5BC?%d3oGYf84
zEm9W0dFDtGXg_m?$t|(|YpbV5+?YAfsw5@r(Up(Nwl7^SO|5cP>NAZy%-i1k!%ZeR
zflXyw9C!Pjd*`k^c@bbY|Gnqd<+pE7%Dw2~<D?XK_JNxBX77#;hYiwla&F!gDetqz
zL`&FvQhrE1DY7i#Zp&gYp7rnFzwo%qr)OpwJ3BjX&%68T)vH%8UwWzty-Mx=#MpA-
z@ZrN(vqaO@MLDSWuFkyt=3Cc+-BD}va&ju>UB7?7{>zJt5jtfrFD*TI&{3uJW}3LV
zhhkPDWPN|2izcWD$r6n;>!_Rf&EC}XX=Pk~{`(6T1X!4QYH~T2D(*cey(4UfJm|!;
zITnd)-@be~bH)sZ1}<BXiT~@i8C}p&l>7Sa+oJ7yQ@GD8n&7lS-`3W)_V>5kKYZr|
zJ>@m-Hu*7rwVCKK$Fi7BlP5Md_Vnq~KWpR`EjQD%tpE3?m0Ns*-a^|+0Y4hfT<GlN
zoRQka;S$Gbu~_*igKgX6k2}1oJ6)I-hNuWh%F4F7SX)>~bh<2f`>s;fMAFeEA$-c&
zw1=^v>p$16(>vn?I`8^^)ob1R-|Ihi#~-lWyLvVE^S;L|^Ru<4I$3`{c<|u6cX?Z9
zI=pzgE3dr#`;8kjI!a1QdwY5gB)i(K4ZOZgw>Kfa*GD7y%#9m2PMqLy3fA43^>N;X
zBdZfG+h%C*-McqAIoTErR(!d#$g<RI>Va<2@8akEs;jMeye=C3ytlXd`}_OtZvBVl
zBqS`VzPxyOd3k)@&(s&e7i0?EIuhb59=4_!bw-FYX~(fIUc7j^UaVF1x19R={nKQk
zvIB*TjEyIsOj)y4W6?n$K5stW84It?wXH5IC@`4n_4Uga9X-9g{QSkoKS<~ADg5{6
z=h?Go<NyD<{{7wE%hTtc(y)@SvbL7)b<5A!?^(3K;(=I(rhFeG?}N!FpIluXUR_-s
z9v*JUf8}-QlGKCRziw;<`6c4S!E5F+eEWYq>Moetwy5jRtP-oc_wN0><gLH=>$T{L
z33Jnqzq56f<WY}#{_o#E&}w0^?%H23m%rctzplF4+HUjm<<DEi<0`&h4L?8Mo`3VC
z3Y)%cCi~2c?%LW~Sy|cjd%w-<*s^u&+I8z5>22A%b?>)Z*`SD;K5g2mr=L!p;(BM-
z5+Zof+r-W;Zf#h<y#2o)ACoQaI<0#B>XnnKc*)+EFJHPSeY_T(fA-wDxSd6;rVE{&
zo&Wy*E0B8W<(Kny-;9%awk`hjbC21CZ#McfefaqK?d$$jBqT7nMkgmHZ;W{J@Nj!n
zm00)DbMtI}Kk5b@gVo*6FE1vzVsFLNEnByO4neH0miA})R24Ae=e6j3$JgI&-ak7#
z`-SYad-vA;PF&%)tK?-+eZBpv{S&P_uU}gkynNa6<@#}ZZrr}zy*$obC}`!CrQXwz
z9XnQ4UG18ZoUA<g<N_%^rEn7|-=#qxc#b6;`?+eSZ1;>4pHEDe6K<*DcTi?~)BfOT
zV?go#qfb98Eq(tzj`Q8um#2cZa=N&0yBQOy?Hl#)iRAT%J9pU4((AJgbup6Ct84aN
zt6i$&wIF84x^6x%kDIN|T2|S7JUj{>!h#m!3mR3$K1OYBNOiZHuP?%tot^!(NOGOY
z%aUDd*XCwqa7<+TCbUsc5Oipg*|8f7oI59*DYbrBxXZ^x%JuQv0*gI+_s;cNx^4UR
zi_Og3QZ5`C_u3*E4jJTRrEZS=^1^XBn~3R}wQCm|Yy4{d^6lFri;bUzC#D#^G@X6x
zl@!P6_}uJXh3EhN{?5+MzG2+HR{v4``Onj)O$$&^P>RSptQMJTQNkQ~I&0Ndx1|rw
zeNqZbjfL{LkKS68Xs#3Iex~zR>haabk|uf`-oEikS)`F@wANIiI@eXL>%K+o(w)@N
zw(4q@#kFk{^{4MWQMOZY;<jD-U!$&?K9ZW<v18x$6;rw%X6OhNt$vzx!ZdEJnW5Db
zpO$ULm5<w0g|tI*H$HoQ>g&?0y;XbTbf?Q4_f%W-F=L7L)oZt}PVCto7=GmQ;>6`a
zddHO?R;?B4bzA$qyCeOmao>)IZBvu3>W94AT6H+$<63e4_MpxToi|o>wr{+2q}sfi
zYD%{VR(^QEIHzjDg2n^V$GC3X7ZbdqoRBQZSZ_A_=$9M!@5^@|{q^ftRaI5Mi3Xl2
z1r|0YCMrr53pV_mc{0U-Ns#f|_wTEPm&{u7qDV$rarW6=>t>%!`4Yct*Dit7h2PkB
z%`>?yyy#+v+GNLBoR@?Z_Brfm3EHr2TU!Eud!v9X)A4udk@CWC@3-(BydiXar$d;-
zN`)q?^*2R!K4mWC@%HxixOqU>+`?jo*<^`V9`enP8rBxIbnnogFh5{@V{yyoOuPBz
zvE`|$snylejvQG&RaI3JR2d7|R|#xe5ZKt-cXUHQYk7WnxcEDZBCdd-#%rhV-o1PK
z_U+o*S^?Ycqe@*aHs^2Oym_$cLTRkcysU`JMY08_3vPbg)p&3F-o3qLHgDg)J>DnV
z%n`aa%<y_-wqoGJr9Ij2D&y?thi~@p;F~*lu2PdVYie0~y1Pq)`W(OI53LuQi+6gz
zEU8LQf4=woz2E)+KiY#1LYz5k)~uN`f4<)T?=|S`wKgv$p-z_zYa_oKsBD<O@S%)|
zcEv%3`HN!o`g?i~aEMJd=1Saf?|{RkH1*`%742GDR~{X#tH{jc+{xoH+3_g5o~el%
zM_i{1Q<3Gl+T!Bk>}+oSBCEM_va+IrDq;^g5ABw#RFdernNwC<TU%LKSzRs7s&@GB
zVUTa~y7%Z-bS<30G2MLj*+;c3&Y-2P;Q9RgJ3A(NsQAsd`}^&7{{PSR|BZKL96YWf
z)~&0no4AqjZ+T6P%;SLRam#KRNcSrq({k~gvi{MR+qZ7DwYMkA@dPLKl-b;>C|$&r
zQ(SyGs=KbcVzHt)&tapPKC3+I3nnTkWjON%a-Mh9n_m6rhhdi4M~$!Fzb|eNPft%b
zn|*ZZ!O6Gp-(UYUQ>#8Xbi=-V^G-i~Fwfe|?ApD1edhX4oSs}tQgKe2yo@nvY0%8s
zvztQ&);)g#0vgj8XI#F}_v+$echJ${^LOvsRaISm`K8IHyb1BiYh5QQ-(!usxNJE?
zqoxQ~su5_mEktYT+qbzMZw+D(Ww`JuxGnw`c<bK1Z?*p~E_Tn(&fXZIGuN-brzfFZ
zZT8tk6})klbLY;zQI?gR&E4ws;(m*r@2@5NJUm~%edFWfo94B2-aI*xVCVcpQLL$_
zE6NjOKfSo9eEze-S%?1Sy@qL8m*04;WQ(g?V63Tlo?9f9L-7fxu2AR)_R@5R-H{PF
z2|qiIwqFxaG@HEquYS|fw<}Bz=4pkkzH!$zR)~d<(`5d%v^R>4J}c7Y_t)-{_Ury0
z@In6jADOK@4!gZ_A2IwE$_-k5f9cJ;Qf%JA(=Q$~c@@!fh&_dEYm9lRI&a-A;}2^;
z9?i8-Jl`Q|sI+eCgthLuS4GbYzLs3BH*u9q)-l0}EfXiKwXVA=dj3agcJ0QzyAr}#
z*%pfTcWnD<d8|wMnxT@?x(GqTN7326KaPFR+B!@9*sKk_$9<1n>7DW_Xq~s+`{?Y$
z$NJlxJ6CkJtLi+8I{#g&?`!XmzK#BNXC>}iTr+>PV_xB!9s82kbm%Ab{@@i9yxx&~
z)byI*>yGCV$!o=BX8zj0L$=Dl(DSN^mpQ-TmI-J3{<mC_JNuqv*_DUFANEHqX3t;8
z`{mEA$NN~Sj-R@$rvGV+_~L(cr}N+0on3FC^6kmZ$2H}W-lyMh_qcb^owJ@vmi<y2
z?~XYcdb92LZr!ci|F}^lN<&0oZ^CoQPwVV759Z&mZK}H1G*iJ*auI9hvG!ljb#G3u
z-t_yNRPwg%+YQ4N;(hG*q|RY^e${sU^LP4_942di-R^Wdzav=V%HN;o>;Ju6J|BEH
zk<rXE2M!##|Nrm(|3~Bh9DR7WeWEvO=K9n*?ECL>ZV9=by~1)vR=Mb&J?AA#e+B+(
z<hb(stCh~Zt+qSw-JkZlfkil5*Jr^()&p%m?^jmdO0&*T<^Es2^#FgFSCFCi?TSps
z1<P#Ty?OKJO}hPW|Nk%T*Mja4E&liCr~LmP$3Y#@t-RB`iqsn7<~(>Cyj@LZM%6~g
zwaz|rT&=ry?Yh$MnY%fJ!|kNdq!TVIY^nvahu$kYrj@^)By?wD&~KG&U7cjb6{?d@
zKIrzmKj}ww?Xm}U$!ph!Xx;eM;MKR5_41bMM>kx&*Sh<;>Kq-Dm?sC6oW0ULYT4Fq
zy_qAnJA2j_@ijN^{I$t?zvO{UgZzTi%7Sd18ypp#-zyxOQC4>Ovil_gx!k==eqG}b
z6J~9HaqXJe7i*vFs1-lnyl!snx}~>v{Sn5DX05q4srrU}6P~k9(-(9)G5yU?G5&40
zTz57uyOhza;wu^`?~=*3{nyNc&(=qDu-lvMI4s=L{l(aHP1Dwc#(euyr}n6Z8yw5H
zm=SfrPSi+nLaz=Z_q}PQTGyUd%lR1mIMSX_A9uFoi@48aJ2$3@LjR7K`I?jqm#vMk
z&#5^t5#OVn)Fb~X_e58OV0N!b%<)bs^%SLj9ycP`6<6dR5mcVn;c|511aU#_OB?#K
zj|vJZ@9XF&oc|}GR`B-|_Tw$m*E)V&>-yMR7%OP5vvER+i|l>zjd?dbu84*o*_dQ=
ze)2BmeH|8!lS|iB^kp9{T=UWOh`9122|;be@E%dY!XAli*^O!XxlZr%KkVCb<hj)%
zlL-QXDxR!&gPIrXReTI}&*+>sf8mR*JqHrbEQ@=*_WQ<{7X*9i1XbT@8n6mqDfO`b
zz0mCJt4R+QFFferEwa7Z=Dm8*gZp1Ad6wnRXz=Wv_jPmZx)0AY4)@%5+0Yeo{O+TP
z&z7<3Z>{tGF#YS7@_3Wpn_DusvxWbT4ZYfG`sGkzS$X+(3B}jJ_ZRJdF`bRy|2@;X
z=Xrt5^Vf)-IKk_v8n`kfDk|#Nhr|5$>;M1FF`Mn9*51~p7qg?mMr}^_w`sS6nYp?m
zf9;jpby`pLi)4SpKWo4E<h$?Q<vme7nB!`{{OLb7d-mD?b8~Yoa-JwFB<pFc+3s^f
zLSmu^OQ*{2+KGj{Yqy?0eOjq0OJt7GFDv`HKNX3IiDhMCP7YdAoo?Ih*|X)5=q~3E
zlU7X<np62DFUwKYjkT*PXY(Y(jLouFI3^Ua&ezE>{B`V#)!e(qSL!BDGFkiLOW})G
zuP*Hs=n=a*JL;Xshj<f5&YgZj86pcF>Gaj?UoQ7wG@dKoZ0&5mRgJs2o4gEbAHFKS
zzG(Za^HnRG!x`e);}xf#ymD~w(~n2^E9P9BCM~?l?w{`DNwbc#>+d*~;<0XvulR-s
z)-NQt^Au&N2syqp_!qE!%@&uwU)(?C90J<}oaSw~UoG3s6I-9Lm1!E&L0Og9SDpz!
z*VT6%-O^Te&^LkC&Q!wetcfINi|41_NvvOfJbiih<=?VHrM1f(b2hy7GpM*=`flF!
zfWy+UiLZYNi5l(_O)GyY{r>yRF2Vahu63lZE$waIx_sk4W!~(y5wEM~nJU#CF6>pl
zX0>i>pZYreV-oib*9o5AsC4Z6>#yp8^DV-9I({76_~^>otw}u*Pj+^Em3iI$HP-w|
z#KvP?;h$G08ulss9qA}NYM!*F#l<PiDXDj@^v9kbNk=4@GmnYizLM_3viyzpzKzd1
z#U4xPY_fG{*}XYwftStBXS#(tT8Enc3yJ8f2xz{%d*uetQ;CS*uj*F11^>!6n{Y#@
z$NRgC{e-%v_`TKq#y^S+3hyrxU|rg{z;C<y@80JNJa$FjzIFCpz`=KutiM*|EchMq
z!G7zXPTnQESZ4oVX<XVN_Q_-O>X7c`MIVxzpNsAZICyZubzKRWSq=MloBh1^`Er?X
z&&`q#3KEBpZRIVQ!Kam>d#PuePuSU|PwiG6S@2(c66349g3he1w-&qi+x>pCSsJut
zyznt-1|uLNBZEUNe#LPYT^_e;gPuE|jo7?DG(DQd6&kPlBfm1}Lw(`Yrn^r=w%#oE
zd9|lE`9gWivKw1s&Ogvp_{n;o<Ez)+byL57{Tl!8)AXxZr70;(R<GtxV(%%<zq_mS
z^Ru(3r-L>#9#7i%@83UV_dXe`5|8SK2lq37-<3MqVZNYj!mk-D##0L_71`d_z5C+2
z(lh<n6xQQw`C@CQ+BmahR({^baqz>zg9??$a!niW$p0=;le(1q#oqGlxeLF0#XRiI
z6gsoK7SD_N@U-KNajg0awSdz(E1Mm+9(}Nw<)r6TLz`_15sa%Id%d47H}729!Hw6A
zw7nJ>Mt&$&_6=oa4XdjEzQ^v?`}L_yTRzIy$dyiDNw+^`0zO?zvE@y#9&41)ty0M>
zX4wTLi4Wgjp6WKM`_O|~ZnIwQ-ZkYShx_8BOg+ZtotMvBJeZbhRhD%2vL*K?pF;P`
zFQd!Ozw-UK=;^OF+kai0>uejz%V(N!*>AP(#Ug_Zciw-l)!C=pBI15zyVATLipgs%
z9_?^*Ibv~b^R+Jh(EHz6=fAW_>XA_9y)MP6^QgA4Mm^<d)v*ZmoL&p1u$tph8%qW6
zN8J_>ynMxb57)o>hIw}%{rY{aqqH|&$3^CNp-atiDgSwKwNdP|dNy9`nEGsKSx@rY
z={F6pMcujj;9iBm-9)~7sp=OdFLJ$m;G6ZgOw&_Yn%i&MR=r(U)A+Y7z~B^D-Pbxv
zf8C3&1^+Lz1f4Il*VH{>e6#k??%TR6XI&6l?d_1B+4)d)LWA<|M=8P{UnbmNzCtNk
zBciZD-lTD<>bJa~TOOPdwpsrm{%!f)4<)aUZ<8tGJ~(rU>W4f|{iTxbCoflpot~c&
zDRx0;(%nx2k0O$JT0D*y7VQMB#rpUB|DXB%@^)LUEel%t?%liTaaAwb?SC*<eQ>;Z
zAmhK5XQ)}g(oNCwJYJT+Yp=X}oyJ@lBylFndqr_<!J+H!LG1gz6m><l53YCK=4udi
zthLox#83Ve&#JmjH{YzU`?`AS)TtXcZftC9+_%r}iBjn5tL^;q=gyx$f9_nE*3^6V
z?j3Fi-KV)_{d#^ss|um5cT2lJth&6fFM4l`?xDt;t97owyHr!S(B#VfzYAFRe_4Ho
zS@*#tw*9t0VovByz06`3sPbXf<Y%v?C$Fm8v3Y;uwyGje<M%v|?JGLJ6hDv^4q5i$
z{VJum^A<EEN7&o{m|69^;D(UKC$6~p(>`wdeN~{w@9W%0=A3czd%djod=EajWpy%l
z)H9iy`nQ&k1wYj|f(qAtLc1h3HRdpJt_jR3?)NS~6y3D(!7V>+S)a|{cBd+zi&|}c
za+ANrx2yd&5*ag>Prg^aID6%SyiL`6SD${Jz~%p8%G~9<8$69gCZ@gGD(ByA@8mu6
z>OG|?rAKxg>yprrzGn9`>-wWxUHVEHa(Qb^)}-g25WjBj|L>6LwXJ<q-Be_ZKRvNn
zTPQ31ZLWab87V>SFqv%EHHO!wJ4_HZ3S0BM%QUH1nfKsNJIw~8ed(@iM2}m1^Q^rz
zy>U)@Z|M<n_Ls(NM*{@(3o3n$d)<1bZjiVim0x~DNvYswMx@W_%QFQJ9&ku*n|9-N
z{jCEY_Fm=Bo~~Y7+x+tN!MSh6&M$bdacj$B$IJtjxB6p5C*M7FsP5#4gRV6N2HU6T
zv#x)ech-rCG05OY=Fi*H{%iTOub!p4@p&N|^OXewqBYCP;_E+extGP1nsm_fu+83d
zIhzod>wcHRJ=Xu(?8<)o%!32}L!WEfPF$dHqe!gEL-(P~KY>U2r>C^efB2Q#Jv!OP
zMCxqXX3+V^5fK_wz2-fawJdsaR6PFA#r`@IW8>z9-SO9gF5gYQ!FI%}a+hE5QUT5@
z%eMac{eJ1w@1<;fd~c?m3~mqpu+Z$-gWiUs<qzJ!ezVH3z(D>u%c<n6+NYwTSB4br
zl-YG|@ggxxkz*2j_bm6DYgPE@$j{Hu+uPf>zFV34!TC?tK^xs;tnzywaEC0f-RwP!
z->#&pPwM3ChH1<9uP+U)zSnX0vE=c^|J-%MO*PD3E?%<Y$D;XSYvTFh-u|7Z{G|8R
za?#?;UzTw9onJ6-(W2#kr~m2kuYV97=kLgB_h(_P75m!OX$yD!=DOif8U8`f<G|uo
zPb=m){9GdUzpl+l_p?ty<%0bJa}1gvg`cifc~aT9h)1!-MsbHh*3a@-eYVFYzPfyR
zNln^^raiS2Dl9*)zU#zgd!B#$^p==t-O!idkgNaD-SltDLDdI!tHpHNFFsw*`$Xk^
zT=GMU++uFMiq4Rm7gM*~-!geh+T9it=7rO?zI?wo{@4!xuHFysZZ0zMOWsKq_9!0{
zyuW?l$J&kaw)$y^7#@o-+$UJ*vPST=#jzik3fA;bk=E`@k2x<Ge`I~P;K#M^JKlG;
zDm;)bJTy`Lx&E~X!)*_L?E6u7#Pk|Vl#z0f(Bn?Q!cePCKOFao#L5T?-ru-SqVb)w
zQlDsHPsDL^f4z>aeJ6rV)pqCC7HG_BnCNvnf7MDCgA<t(GozT&Dy>#k9^<|B*+0t7
z<Ab<~Y%Du7i#6}d=J;EiOm{_#-N~L~qgu`;?@$@#b|<*H>X_xbf4A?7e^?!FZd0!N
zJ^b>&^8bn5TQ*i-yA^zBa%?Aq)%iEu0xFNaeEncznwI>LDG9QU-mJl=MK9D}Z|w3G
zKjX|JxBuO`?BAaYEM&TmCb;!o^8=mjo4tN-*|#^55%V9cZ(6rn_n7KI<6CpH7B0V8
zbaCF>){9C(uRp&2nwj~2X<XE&63zSX4qte)&Gsv+u6%RNV#8Hkni_#eCNA*5{PObh
z!w)|^d-m+sty|Zwg{=%RI(FcX=-bKX=U5g$IWh6&%gh<wGt>Tdm}t-VCUfsMZ_(VK
zrrlDjw!JZbwPj-E2hlZ$byh6Ak#_5J-S?$SBi!u0{w75~>A9;eRAUewa&+3K1Jf!i
z%wO@UFgji+lsU`8wa@BnO)0lKXW#q>d!E?DdaljxT+mtc;qXVFn-0$=+N?eL;^m60
zoOxoGKQh~?@9^W;_xJ0{BhvDF4}9BgS7mcBJ<N5fZF%#z8d0H7F_5-rE9aHZw;j~B
zbtxY_p&oHtXZN%j7c)Y_6C4Xwc4+H0hI$lSzsR{Gwyt?|#!dFi!M8t8zu4z4K6lsM
z_M>4N9MpEK;;Va>cQO4t(>b=DqB#xO4j-n^FFbXvgMFuyPjRzPjbWIK#P$j$x1MZS
z<$c+*?neaA3nt4RH$Eo5<VJ*YlJq?Nd0Ve-zhvNd_@nJ>DP_as{N3tjmq=%?E$zwg
z-LX#earEox*FUaR%=>7gJ@0kI{SL!tr<IFhlJDprPX7G#U{_&HrIn39@|yP&uV1q*
z+Yz=#bYs%n$=#nrvaITkJ-W)dW6`^P`ns!&MH%NhWXsjhH(PY@Z58Jc-QT_QZH<je
z4ELtb5x&DU&0)vAMT%_P4AJ`@Nj{G3T^DUvV4pu-EL2IN_kCEdkHW?mlJmEv|GCig
z&5iTe{7XFd%Hplk<#$iJ`~0fV;VnJFx~!Mp=L*g$7w&0MT@b*&+GF0@vYQ9o_S(qu
zu%F)Aq{R9t_ecDZ$Avz#@7}$u?mzELicxcO^YMOp`_fk;Yf>&K@PA_InH(B(&p5-p
z(MO4M$<G^U$C3h`RDG++-ubC2?%<i@w)G2DpE63y94s=sxm1gdpEFhe-{oWGew%&!
z!&W|!Tln#3fBm1w!s>oH`uh1fISUvkY~8kZ?_Tf_c}7LWj~^c&2kh3G%5_Whw{Lu?
z$%imO-3s~WExNK=7TXfG+x_0M@cq308Nvpwp^|}2`d+nb%A#+-v&?8Nzbvu%p5Cw6
zgU`3PE}4A5MzSQp=oky{+UDtp-Yw4Gc1JDq+{1&LE<a#idVFPRfm*_Z`$iH^UX~Yr
z$eeoMw9<^Oj(uNs-ESzJdLj98@sjD@`)w_HzMfr_%wNw}d!c@r`}%iITjzvaP}Z*y
z+kHRyO6rNvtkFrrPA7!RR*UWyXE}K0&w`?j@dw2ID6TNtlG6GjO8v)sf#xP|oj(uj
z4nBEzA#h$_!qb-%-bkj39DK}K)x@&cx-u$jVysd~LA%Y4D!w*zp@^Th$+mmX|J<dN
zlykuAutkz=q0ITH<l5}D$$uw2Ztv+Z>}`8LbAsq`DQ3qbg6BKrh4|A9=Sjpn@tUXf
zzLwyu{yL%d)M26h52Tk%{=6|E;&{a4YTx$~f|q?Rne~YtKkz`UA^*t6zWgIU&X(@q
z+PAUq$FW~YHOI?8WGnTVKI;Cgvh$eT)v7<I`R}OvFL_$_Lf7GEXh1jTvikRYKbsy-
zsA)||KA)&ro!a$Q^3J=;8@t<m4Ll|^l%LFNdK!N4{QbG6&FeY3ybcC$*!?Z1{J-A^
z?WiNOZ0n27e{I(dU-?vgUg5{+rchhI^m^qd3zmJ(d8$!ywluAP>27h;d|{rG`+gO^
z`+jw6l<rh7(e9&OOE2BM8@vAcL}?>?d(dJ}=XO3{AD;#LI0dC*8Yf0BzWZ@rVb<=w
z#!c7Lzt`V-FZSo2g~5*lSus*q6q<f^9^A+xy5Oin<o|%$nx#Jj*x!c-bRKyAyl7{N
z(ae)6+qP|UVR@N(BF5m@k;jEw(vR(5@V(e*=9;Tn9@{m=x-(pE7|q<ybLD}xQpCAy
zlcuLIOA741zeMXM`|L9I*9)8Of9?4wb|*8V(vX!s@xy_#^Wj;xt1qkhbZ>cc?wzXY
z`$`+#`0Jk-UM)}j&h&lhQ=y;!)gM{dAJ$!W^jEJ4Exqw3E}zBUQF!YIhpk(3E|)g(
z+3!`p7A3P^zF^_8=WohuO?Iz+D)xH+>2+7n&C};ld}0Z%jVCO>k#G3@O;5vmKLaZ+
zy^j5nLKouNUq<+9Iu;7=@~ckjT@dx+bkp(!`Zv`7pZwUXth6pyqVm;*FXHq5)PG)5
zwCd^gru}=4@0T_-t7vI_EF$>0yELlq|LxRrwQiH<MfpExbNu}FOnCF@%j_XqqPa%B
zHnZ|SJiKqUd;a>rJh$e5<lHn}V`u!FpQZD&b-A-9dX>xDuLxV6(Ye-e=Pr)7C*O;*
zswk-5c&@%uF~U|Q-to(wezD5%Z-T}9OTUGz*njkA{r<ugu|I#@Q%v!X*yqBb_(b#H
zjqb;Hqa)%CpFdiC@l4`1{^{z6+G>@m7nHp84p~`QRPku{**CLoTc_%)N@$<|v9;F!
z{;A0}GnQv|>G%Dam^}Gz^{VrME-v$||J`ubzG14i!~Xx;b6WB5Ynp%Z?Kj{2^7f<G
zcGqA1Rjhv6d}7^`>C=wPN!WXPd(p*zH?BYTpZ`AX0^9q=mAisIMJMhrJn@}R@q8Po
z)iYuFk31L2pS7V3_h&S79h)cKbiG|W`P1=d(ekmn@*II~)gNap|69oSXUhKxm-A;T
z&aVx+|7PdC&0!hm5A%sFej6VBeQSlE`YYS@ugv$IuD2<CB0cBm_Cs}#C%l(+n#b!Z
z>BOPvzwv(1%gUP~e~-oS*U$T~X~Od++xgkjFPhrxe=2+KjsI@(U5DdW)cnuvZ2$Lv
zH~+3ZIrC%+Pt=4hDQ8c}2b6u8qh)mek>;Pyn8x=x{Lifa#W~Hh);J~L#8KJxzGCB!
z>V^N=4_&>t`R6r#3&ryfZi`lyKNs1u<IDs3@7b!~=3bm6{vo#RarmEI(_Zht|3CNS
zWzM))`DN_o|F1T_&WN8rP5aN<C8@RFcgEH)$k-wOyVrSNIY*@#XxzU=Muj~(<3l=k
z_^~IuA4b>j`p)yM?7M{3htGe*vTB;tfAH#^d;j-rdi$yBUk!gArhhrh_rt#>e|ybK
z2K}S*TN^q!jaq7AZ`5`QIB_Vp{PEnJ&XZaG^~1k=8hduLF3Z1u;Kyv$D=hy%^7C)_
zpHcSyK5P90*B^bpDc^qIdw;*#`9v|7aVm#mOU-hF-k<(l_xL{T*}OY*%VUe*TT}k!
z@wxF?o%*}?d}%lL`FHj?mdY>Ubyr<57wCNPLF&nZb#52xzxP)$tVvUPqJ78*6b&t4
zS4?0&@bj>J6POJqYGT1*sR)slVE}s^EF<8=$IxX25eEsdGk~KLA~1ou0hE3~;w=JB
zCm6vE7Y;?R<P(Mk8qQF5i$D=Wz!Zo$NYavF)H+b0jRqztH7JfI6>u=LjOIH~rf4Ch
zRB7okWUu9c1RqFqeOb$zt>_{(_w8RKE5H@~+}u15xkPg~QF^!8jtx{igN$gIU=OKT
zpyibe!y8cL4b@)6&?41)%u${hDl6c0V!rIctgTfSjyu3hyHDxv8X{b>Ukt(Kfr&pi
z6Txi&s4<`J3V*VBzo5SnED0i>obQ{k^&6@PA82w7W~vN>V)7X@i*@3apawc|STfAe
z#9iR>oSqIdNWf`d^}qV(yaCe1qFc`}Ffgc=xJHzuB$lLFB^RY8mZUNm85mmX8kp%C
znuZvfTNxTz85`*um|7VaWG;MLkD?(rKP5A*5>tbbB}BuuK*r?^3=9mOu6{1-oD!M<
DJ!bmP

literal 8149
zcmeAS@N?(olHy`uVBq!ia0y~yVAf|~VA#mP%)r3#tGs9p0|R4TfKQ04dx1|+PY(kF
z!@Ya=7#JA#?%n(0!v_Wi1~xXfZ{NP%ym|A?nKO?cKmPXZ+wR@FKY_uwZ{NOt{rc+F
zs~0a`eE9I;_3PJPzkdDv`SX`AUp{~S{O;Ymw{PFR2ZJwPzI^)h>HGKZT3IuG{`~Rl
z=TAuyvERRcYh+HBk&t9yVEFd!n|j9dFJHd={rmUBr!Ok$)84&%_wnN=M+b-encH8z
zdeyLGzn-?vrAwESlasGKc(H%q{(a}~%$hk%K~^p<HrCR@BDigJS!t<B;oQuO3=R&C
z+qZA~`1r*2tUrACuv^_yb!C;QQ>Q+A_RQGGNI!3uedVImNt+|WBdV&Z?mm0#=IVC;
z{{5z=riyvHw{P1P6cn^}&Dy@czRjC9y?pnnAitnz&C#>Bo;-g1c=__>r%#=F{ObLx
zLsza}zrK6-?)kgUb#``cJ$ZB9ym`lu9k(o<f9~A**4Ea=ix$<^)=t}UN<ctx;)dgg
zFF!bW{ZV6GeSJeiNqObV3mWqo7#I{wg8YIRgqc0q>|z)>zuM>pzf{=0{{6ke%y|_T
z4qiWA*V;4r?D?Ysk3KRm$bR*7aSW-5OHyF$X$myp`cZL%qdCxk%Z<_8nwgndT)#oq
z`jxL#&m)6<C21*~=EsiCj@@gk^K}c$?t?cBgaoYSa2U*;;H%qN?4ZUr{i>w>zK>3i
zdAF!U?|Jcg_bc&=Pw%UJY#45brRh%IAl?wSre!a~jk<)jk>z)|9rPLGmhTmBh-0W?
ze8IW^%!sVdc*IySWrsM!7p4m!6?>tK*=lkPy4rVPTm~@1TW$6daR%xCo5dSy8E=R)
zytDnnv_YTYPUwAohToISJsH0|nq|#$ft$g+QlDYd_Y2$y{!29Eys713_^q_*_3uhU
zZKmIwCLW4AvcKZ;+Pyz=gqZJa`KB~?*}t&8eX}JR;_fVb_4D)UO>XbQU$K5kTDo4`
zGV8U*ni#)tTWa^1NHoM1T~?S?|MI%_=WW;2yqg(cJk_~jDRJ9BKCZ53%hya#1BSgP
zmaGa-yja-vQ0Kz3{Z0lC_T~qv+h3adGV|`{@7(u8+IM$0G44&dbhFzhE6VQ2#qU+-
zb-~RuJK1-<)_i;P#O77otRA;rmMD+<^~A?VX@Pk5;UyDd*l&H=f7|bW*`=$WY|<IN
zr3#+p4~-Y^>I=8GUH58tqeMe(q>ER(l&|)BnfEGtI=*ahF-V9Po4nX|E$=bg+xPTq
z9(b^QOSPQo_RCDCs_gwS`AmaiUz-c3r+I3AU+xy4FTL%q#PoBI`%)b2?(RLYVD;G#
zM;?28oBqV*$@%S1j{ISs{qo(>KS}TR%oh&d#<FK+R`A<v?{0@gORqXIF<|?JQ~^h}
z97eN)3Y!`gB{py#Yv}!aBmdv;w`|FZE}wqvd%ah=wmggNO8d6@3+2&wYkx5;pYd$s
z&7A$4U5yg1Gc)|UkbA&s&E^t2IlIbbA?@PNRn@tp%%d5zYkt1`eB#nl8_{JKUj556
zIyuMre$+X=Z{B_h&%VsBxqYKPI#Hk3cH-hWXTPO(HQOwAvk_Nq{G!HNySqTq$lf^N
z*GE^bhXJo|Br5-yqui74`os1|(VtY^zB_@de&yEPcT)JDD$Q@u%{yml4&S|H&E-#m
z{8bySeViV<qU+j^Pr=FikG`Asyt~)nw94+^u|4`nKKNRwrR!FFRXuv!?D34BN^jhA
zOs+WYIv4oD!dd^rwi9;F>Xo+(L)LzL`n+xLp`v5vd&Pg8w3vLrOQ7!lK8v*PJC^gm
z|C~Cf{DS$;j^~L#YW#kbeGKrp`NGw%{-V~0v`<H+;u~U5>a$yT*Dn0<^SP~L`u8`l
zpKsXE=KtYn;Eni$KTb~G<lFnvbC&+RzrIs4?o^&~v@3aX^Sv>{8xgi62aXo@sbBy6
z`14cwk~6n|JpOp;YC}TX*Nydtjrw!<Uj0${^KE2v{}eqzzb{_|3j<#twT^H-&idi@
z?;z0|q6SG1H1m~ZdK2Gq|NnA&o2%~f{8dL=C-1w=kYVfd<K?G?bFV)9G9mt;^1nH+
zlc(ti2_6q?`k4Fw?Zl&w{n2{tTDH?FS=T)Yo$~kPJdXW4_0L`HRjBFyaGBM9#_ytI
zMza&of3~^1RkX+V(9t7q6%kpJmhH2cIbZ0s_{Y`Ns)lPO{1xY&|5^K(VXQ~s>UKu<
z3{{y^`$8T}uD#gsmvis${cqoK^Su19>(@8&^J&idGmeX&7I*uS)>ARN|40AYqbG~=
zUVM6d<6zQ;?!+(qG^#F$EZxCA|4nz>i^ne~Y}l>uG<989Z+M%dz0=$1j4d^Wj2oEp
zWz#d8HnG`DmY<67J;da_uchgr_gni<YO-gQoIWmA=3(Ieu=>ZLck(wq8a8a!*S(}T
zpX<P@YwEvNR2|ER*f&Gyp~&%FOF7m@3w<?+?GfH}*uW}&hx2bCg|D}?oL;#8nqcri
z>J4wq{x1E1t_cl~udUnXP%p-x{bu$Dvvzl*?fTR73r;><aXCG@rJp75(2tK^Dc628
z9eaJRnss3gzg?KK!Rog44;SytU_4%X;rFJa>zj&WwcjdVVn02-{-5=u)A4_;lihCY
zkWSZrtUOn5<>$RR&vq&8IW5kn#o2P<Me@EYA%1@UtoCut`~LIN{9j6IGxL^utnyx!
zk`}KMe?atTzv<u0681OO?=Z|VIFR%G=#8K+hmO}c?q8?BHnui#Npkx(mb3$v&puYv
z=o<e{`l+<Ua9?Rvhu*HM8wKj#Fdg1=UHqGyn}*E~m-rq=x#z#H9q;>gy@j()hV8WY
z=7ZNPWQuH`<ZyooeJ)?9qx+{pKR{D?$+sK+-&|)GT6Czszgw?p`>y3__sfR8I()}p
z9_nvX4$3<AVIj*I{vVIl7JGQs?bE+iRh0LKFFs?&+YF7Sr`>|5#ZO!@6koF1iTjD3
zR%FaOhR@FXL^}1SuPJNXDjX3Z$@5K<A-b0Ff>QbSqmfTvmZWs+AM^clGI)L@-`1Lq
zHH<F>9<N?1Q`&y~r|e=C1N$f5%g!l&ot3(5Lr?aE9D%0lxJ1q7iK$Bt`c5{xmZ$Y7
zh9yv>RqdmyMo`O69jA1uTUV6IKc(6%y#1SJ^KSh!um4*s@t@aCyS=gYwD{(UeGi47
z&&(C9`!uKK$abdB$@_TjaHM{}@iKd(`KtC*mkEbECr7b4bQi0-yOu{dvY5W<D|^h7
zE8_q9>#k@=ubqA$_#4`smS5EKcb=NF^X?ZWWi$81Z97cw7tMLJeD%rqA6e%q+xP}P
zQy08{v@*U$^issWKZmbO|8I2jr+D?`!>;cQwwGM<<a$_e{G3#SY)ztmXiMDwip=)`
zZZho}U*fmkC^>k0i>B9YlPRC(x=0;;p<L<wn6tl#e?{coU7K$BzK}YialBQf;;U<m
z=!Qo>CGYn6+v?8|_pZFQ`TQQC6@D^TBtBhNc~mLE{>x8{;mnKfr`-j$3kp|BJ^NK+
zYASj7E3-1Me$IDS8yAkb9bZBZ_j*iGYUkW^YU1@*wQO;vo)gTj%I@8}YnRoI@98gh
z3ko{yS$?oYfm2w>{D8wVm)IBX4+Wn4y{h>*rHAF1v;VzgpSL}JezbE>?%~4!4`-h~
zR~xV8o-<R{>zu5sP5NVp?!>dtyPtMXInZ6;xoh!S<x5$Qr`o8!jjnBM>zPpF8FeIY
znzH`i@Pl4zlXvFbnJ&7>@izBn-Jq6$y*DSaSUZ;7t(n?sP`>2s?UO0Hv?gUsc6pR!
zYO93x#j!q~>7#x#w_Py&o$imM(@(<-Qk2VoseHP?K388_Vc(g=qnB=!+noGpoO#0D
z{paJ&h4BoNe<uA@GV{A<F{N<L#Z|XTKBUWvs=xE^nUiMLug|dN3Wst_hM}5AT4vt=
zrKj!cZMv4foErV>%2BmWxqn=lv+9H1oa*onX<%gdT~gb_y5Q_1-K%Hn-zLTXo>=9w
zASw29>jCKvfk9Ub<-hEEa?QEsB12dPtKK=TiON>T&MdL)nqzByFlJxGXYsJZb;8GD
zHb1@ibJFeoNBZ~1M|`{cS^W9}vCxyH-@j<C>X=Y;Bk~VV@k=+4brZEGxE<lxotJ0l
z<dM7K^y`xXDruVECD+O)#4gtgn(&PKy}_rfGb%<`uC}k7XTSdOp8by=G;c2PTRQWC
zVq4bC?=OS?>c*d8z0IAxM7-_%^t_GM%xBzI=xe;W9$d1z<5iJo?~Y)BPx__Irjmtq
z`UZz=ol0w!zijIGt)=%{X{%++t+?71uUQn&iYv8F47q1Ed-Ls8++P!asQ<S14r1D=
z^JTt%jo>B4xB8p%qvCbqU&M9=u6-YQ=XU<jLXU)Pznp3wOjDeGB_Mxawq)G7F2;|n
zik2sg4s|N33-5V){P;GOs`v!`o(a`I52zhE&ArcJmG1HvSN><Rp4cI9@}t?InJaGB
zSK2deP}p*=o%PcFn!RT~wbs~wy8p*K+3bN;_tew-wk3K_s_fp8d;cBx!3Et~zjsT{
zDAQIh(O-8#c%k6LLKhtgow={y&YNd8{kZtHg=g#*u=|znvj~^FDDvy@pD!s+40eyY
zuO(;CSneElaL><^)AV^%QrEDUChiM}Uu69=$S&s5mW|JuW^C2=*qaira#}&8$S^0^
z@l^Qqe}WxbZ{K`cBk^%s^i;27ajV(ldl-zDneWIwQFlRn?S4-G&8-JMJ>^gP+Inuq
z##wLVKYxC{ai6@n>y3lcqkrG(`ccp{!8-4aOU=UxyO}pHnVF%h$CNQYYNEZGYv(k{
zh>0wFkBaL`_H60i{hO)f?8#Is%QYX5_8eN_GUL)}gFh+-U7M%I*8JRM=kcYuq-oQq
z;>cY!Vmz03_E~@Vs&%8gJgxhvTl|4gmlN-eem&wU-2H>;dF3pD&BcEWHF!DiCnT2|
z*@ZG~{>^mjN0MLSlh->9wiOzQ?M|_O!o8zQMto||+i&Zdo@7`3wVD;WOq-?am0t_r
z<%3;E)_qWI+_5d?O?=n8C)~OB=giOX`M=yz`uAqpx!H`@ek8f+bsFs5X|T^nOx{TT
z^U-MaeI3Wxs+}u?7nYaHbDdswD6qq{-BFNd-xa}f4MR4Q__7uD)A--KIlY}T|M#QY
z0)bCo@`*-#77zZ-WXhVJ?<H7g*7&pQDq~Gf4QH-&yadDU7i+&rz5JbFyIQN`@snu%
zH5GE*@BZ1OJ?WhH&*;adpFh`Lh>}+L@#E%C<1W*EfBGY9H=4_J8Z@pn*x7B{l5hWn
zTRCUe{*2q23<oxqg{Mu}lXbd;)iG+``|X0Oq<=U1F};0ux?r{bvB#%x{W;R{^mLE?
zpS_*6j4Q>u9_}<qsrw_VZT>+p{z2X2UlOj{!w)rG;Ze@&yeFP`WUbb`gYQ!RtL!s4
z*R)P%4dX@U+w;#F*Ke$0RIUz8>JI8Nd-FVG#vRv~ql)6(r}rG5zPtCg{-o=#r%s#o
zz|S>f%M<R~Aro&Id@EkM=lJyEW_{`T_kXM^4zApEv*yI7r|UcQm;L!SeO=GS-&*&w
zzD7UV&Y_!obN`_qR|Lex%fByGzZ`6!ZRRd$CAuI?=hu2(PrbY&uCWU~v$7@ba@Zy_
zOLNiPnnvzdr$3j)Z{f5*d+AQQ@6#Fm(aSy_{p6~3?2C=vF$1q^X8zU?yV4ll8yxBD
z1dc5^_~Ea<_3uYqg&Ngo_2O+^j<8(2=Q5{g`<)lQ1u-X9e{U6hsh)Lu-<_53KdNru
zzghpnCyNz=su9t4%_T|m{urJX|9I_f*>v%L1rq6#*Dkkt|A2EdbI|0!jXfJ<uC<G?
zZ&<C*Qxe+Z<gIz)(A+MI{oEO1s^uDb?{7*Un;uyw?bInPCdM=~O5*JcZtHof8{X{O
z@9!qils?tqK+FU;yY;FuQTt{%NKEfr(sj6cX;bfYacTY7q8&CD+Py$k{yhO(-^fUt
z?MkJa*Qe{JFYb@6&o=K!T%P}V`p+lsGMXGyXA5zE*k$%$7kBZ^59{{%beA65R#T_D
z`2W@)?kV?oPI<upM(6&eXP4{dJng=z_Ggm(>XgVciI)#oN0l4OoZ7H~;WJ;n#Exan
z4u6BJ#dm&pY6)-?x^U55G1ok5IYYr@ha(GD>VN6EvG&BJYu7)YDB3Od-Kfm^^(vFU
zTI%=T?ub8GxA^eU=vwdD`WreYIXp^hm;T{dx?g{TLA&U$<XPwUN5tIx^tAr$^tpdJ
z_%qf$HL{%lc?!qnM%n9=dpUY_Iwv}_Pygt(RA^6jaQ&3YH-FaVPuWvA|6Yaa24R)!
z4-VM=eKg~ziu}pNaZ4`=t~Aisa?eg~@r#R#Ta?OL_;6izc>FTy389Jayx(Oo@62?+
zus%pXr$#SGw(tD!DW5-XkeV4+>M~FA*eBM1m*?!;us!0O&CRe0)kXJ`VtNku|2ouh
zHnLX2)O$f`?1kHWcFa>(IK4S3c6)i|Ax{nO`)<|-=gSn|KgrqVlkW2%OC<EjS;wN?
z$2+WlF)h84RQs>@%==$2EvK(Ej4yJZY?E3v<+oAsih^?y`vlIs<n~Z}lYeo!p|U%F
z$c&==r6LoaS-fMNarVxZuV0TlnQ}gpP4T<i5$#gA|LWz2C9_+C_b;=TRS2%u+!g8?
z_@pSKM3*sR-vloY>DQmdJsj*DYERbRbW6M@$nkvN%fhs-Fx$fqPx!88e8D)qz2=fs
zyboi=>57n3x5Ew!CtfmKV|GL|%E4Gf>)ydI+4b(O+j}@R?fxh9g()M~=Z{_#-|3D;
zyG~!+-MC=uw_B-~7O8wou-p6b*!s!WPsSZ(W!U^DWxq%I^H!%s4WrjPH3a50HU@3o
z(7XI+EPql$gvZktRS$VSz0wGh{Vr)B_0z%bXF{)j8iP?@P1G!%PN#+cpPie-D{6l!
zU4ywP>`n#qfu`&UIYN_|^>y?u7%waKPI<6E`PFsdBV3s)c~ykIZZlXmRd@MQ#vNw0
zngKI-GXxKnN$?i1eQQtO_n719jq<XOYxNn{{AWx%AQc}|`e*O{9|`{2mzM^u{3GZu
zf2qdlgW%%qggTiU5%cGp1@)}GELLPH+<!T8zo9t8-9z(t73gs+DsEGFk+a?4Wlem>
zW0%z*%<3N&ALqaC^|#Lc!`p=h8$a4T=Xf05`O~IlqRw^R)g?Iru3q92-REWF|MeP5
zeq&y9Onyu5sY30061DmB=a{jrZCHQn)iHy+MgMIcaIN*YBjTTSe3m^o_vBwp<}&Zt
zKK=2T{y1pQ+6R&=?qxU%Jal2T+rDT)&xM5?zq(KAJgTei*VTz%qU5)wCOG~_&4Z|8
z5<8v$B}pXqoDPrFxxe9z`a;#bQ@(!-XYRG~J@kjS&XD`G_y+w?-pXRx=h!6Nw}u`&
z_0l1wVItezN6N<{cK&hg{yRld|MnC?uJXNaY}T{wIeTPJ-p~0G+^5AAXI?XO+VN)Y
zxr86f8=GFgY&LoN;DL$Y;T?M<ZhbwJ-qWzfVSkj*^(x6j4~%4kGS$+LU3zMM;FGIX
zGV@C@UEwDSS`*Da&e&4lbpL^D>hhb6Hw_fEFJJ%kGJkP*tLZ+I{d$4Nyxz}Trs@`T
z-;l31_PG4z`Nfl)rr4BZUp+hVk=>ilX?oN2=NH%A->3e#<-3ymYa5=Bm@k_)OgsOp
z_vnw*Dv?#fUHUIi?>J#Jzx!x?K>WWsKa%VgNFTmGH{HzYK+Mq(5C0!8joQGh>?P8;
z?@x(N{J)EP_IapF$ouR!d3oli?Bn&>ts6INs9E?l>_hV8x}`@iwqEc5xX^Uwwhc9r
z{5*#)bN%J3Gg@{?gk2{&G4banwjI;bS&#qxbK|RR+h)^=H_ucr|NpsQ!I}H}*DC3J
z`}*zD2hO*j_&-h*<!&&Yt{d;ec}DAtc+Q`c7d9P<OW9{Xjx|4ME56w{NK@d2Fnctk
zQ+&da1OJM<HP5d0`I6@@S@Cwq?Fln9XF9h1(M@A(-oY(lcrQ^S>FvK)?c2T`J-0@=
z_wL)tQnBI^vVu+Fk{fCal`n*BnDeGOqw=3hdw1LoiC9a`>B7@D6u*C5V<%dfwNd<w
z&7Sj`wo5<#WMA>@^JLF|Hze0zzdScQ-e}?V_wJMU4u2P7zUN%7bn%^|S|L;L#=HOC
z_5Wa+yTUrq{tolst3CzoH9-Zg-Nl9rie9$vY*PN-V7giV|B)F{5=*ar^3^j+)p>vL
z*^B?l*L&vQKC;o`-|{;v`jho~CQTHP+T7A8z}Kg<Lsw=8n}+U=W2FhXlYNbL{{N@)
zX35*TCFRTP(>@=Q^YnlJyW-Oe;{^xXwnm@Hc4*LiwlE@aLzAJ?9zi>kQ?C9uzfa50
zdlw(CxAf`k{_EGjpZfXq`0vmDFD`$5`}Fr~Yt{MFsx6QC?{RqTI*)t7tcmvDO@!38
z6+F(}^l+n%P@~hw7fz3welQ3wxVX9}?n{VB)0NA==G+wFGv&5)@?FHt^dNQ($Hjeh
z0-v3#B95LoU1u6#Q2r%RqEhg>?G&S|DaTJf&#nKx`g2o4Y1x<W@1D%t|Kz`IyM5nL
z=I9ef3K`tH3mT=07YFyU9bUCU^#8$kR}35Xtz`=Tl2BP$_vhvI=*-GWU2lf?I9=7w
z(@S^X-{%qZdQNEZB~y{-Y=QEXC-=&pW;_ycOYLo=_}$HIuCgy)2YEGTT`;_IaMgzA
z-HPAbBQtJ%oYN%z!gXr!tx}enxJ3_+y4^Sz^yd7kMXW1$cdv-f)mr3L9mclK=Kj>%
zQtR2Q)g4YJzWDxN-CKo6d)B0dPH>v<``GeJ^u*@Rmv{?36?xwzwlbct6#Xr~v{gKA
z-cHAS*}tFdwd$*XHazrqdajcd#Ii2aJZ<T!nbS*EzQsJ6v1*=ZtXP8FQWLl5H(8GT
zK0V!Ee*L>APiJ4AeY^O}>7%!A$BVQyd}cDZcy5kSkBQUjHFh7Eu9V%;ST;v|bKY4E
zn-7~l=~NqfZd$=3yMD!un0XO1-x{9vI}`Qd)}qdtdf)Fz8_HhGQC5(wTzSa#*@VzX
zA~VAtZ@n(5`TS^R#<@48W^en`b-G{MaPzF6ShCHGrBT4@<gIOI0&YsSi3i)yzNPx)
zpk8svo_SfVC&NCa+`Vzq>D%PB3!PWp?0www;n3;N20tcx=9ZPD{C%v!{r}5-gNk*A
z#fs7=SD8lm+vFdT-1IE>(!*1CeBR{T*_|?Jwx@R0>G1II>G2}}Y|2Ut3!5+geR+HJ
z(?)TX_vdONP2J-TxyQxi&%PCRs&eBQo!N&Q#m}sqqShJaoHsQ{%Cf{rwxBL;LBcI>
zr3K%(v(Mg~|By9be2w?suNCi3%$VtFx8F_c>{_<l^ZXggrs)Y@4hb}jmC0Yu%Xc=*
z=%UH2XtxuoNs-no7Hi0aKi>K2Oc7&7v{g>ywP||(Hx_8D+_#NqrHIsxjg_|z|F%wl
zp2+og;lnG>{y+S`^|<|vw)`2v#bS>uW)*(!e6GRqDrehgwZxRvnah_pG>Ak_-PpOs
ze*c{KJ&&LNJ^hr^_TjI|ySuy37d%)hSy{O6sjHUm`7diG{kC0Pa`FF%AO^0Av@G{T
zYu&!DoBu?pIC6;1ii|XVF;j8-Ngm<jCuj02>j#D}6L1rqsJ14cYBI0s^P|&a_1%ip
zD>la1CG4qdzhY=yy)mfyr%<6%X^iisQ#KxpVxP^J)_-ly)Watf_hnjzF+4orBcH!q
z?)-+ThfgCV%(mDYe7?ST@n(77Tbc`+19=jcTvU2_)nLi02dtW}eY!O-noR#~;B@H_
z*NL(xtVeb}J^gg<ndm~6<LWP-{Jpw=|6^BU=c|=ZSU)^?T6I{?Kt5RVU%$AD>9v?Q
zp;kZp#8W+P@%}!={iJhQtFrz)ULl6UMZYRiO@+9uS5GXz<`txDeB@~3bd$}&ar>E$
zeAf!}%rl+fHt|+8Tct#0=F@4m6C6Gy>Gs`Dc`#?UEw{j;x@Q*@K2|by&1>HK!D;W}
z`CIQ-zvSGdxFM2#@AD^>o!|F3oL?i<kpF4V$I1y?5(|Hp)bE`3UN3*i)79nc<Lmzv
z)K>le_4c<g%k$~|=aVaPd5x!C%`*A)sLF6!=i{ZTGADhMIJnAIpYwUEsEtxr8T09<
zw)(u!UB&m<Y^bq)x+kLXj?ua9*}l9E%KD;Wx#u3mitOAmr(DNA&R15pe2tdPx$cT9
zhZv)u@9w?w{PUS*izc1XPSOq%zcwL#&D7m1_ZA8-7x_N@?UpR9ZHJ~#KfjDo=Tm6N
z!_MWVm7Wh;r$0~dTK#{`SO02;=YCJ#a3t*QI>Rt|p}?LMw=Gx}^onIZ?Ra*sh9hTs
z_k%xQ;(q=4$2NEW<Fa25-+g%$zkNRA!R42;9WI@k>2cxM#cj7&rNjp4-3ZZkm=Hd>
zP-oKd$J@epEo3u4=jtJ2smgl&<kQ~8@~_XiJ-T<TtZ7GcXRKG|p2H2RmxwxX$oEVX
zKb75Y?!bJOGlXM%U_)jct8uonc_{CKvZyC7HWY11Y}%n&o62@<)`fF(SPQjw7EXB_
z)6HDnJZo)Ymg=*spSqtdu#Vc}xMI8V=8A_;XG)x~&laj#+Sm4bx`>Gim;5JvD-#A4
zmB#`C2N%e&v}d|XIQ?LDHTbpv)rzi%n%9GmZTvp>xo3kbZ_<ZcnSevP{o}0sx&Fj5
zF)T__4CZ8FiCF58C3Gv2%l|94(@Tl1`aX=Tjho_mJC-Utxz4W-VLIgA@?!y`%&JrM
zH@7BFWouGkI2_2LtfAf^u<l|aAGdYx6a}+NR_oO_j(uP6`a$4`fu%>+lYQ$WckE3|
ztY3E1BIoUfxD$0}zgAB)bUEe_S$Fp5<D{AY|4+2{F8O@@=;zz3_CMM$z4uS?ldtY)
zZ0o|8iGRur-Cut4>G9vEpF8)=joWd)C#bAE_Sn3O+%H(aFjZwPV%y?A`y104xBCzQ
z#=Q-34*Hu{FrIx;4Ph@3zrg)sX|EKR2I&C_=PhP4x%@sZZxLHe-hS~5+!LCs7(b_O
z3e<Oaw@%z3{y<IUBDR?MGV}eGg{KEH>Ydwv<j9c&2M%c{pX?Ox0Zq=bh`LD3ydfzu
zBf?@w<VVOft-OPb&VxUPjvPAFC=XVoaI>{>?%d8!R(lE7#R(z|$BrC1$H4aHjZeiv
j4GGr84RdAZ#4@O^wUb${QZt2tfq}u()z4*}Q$iB}o>xQ$

diff --git a/_static/retool.png b/_static/retool.png
new file mode 100644
index 0000000000000000000000000000000000000000..abf26a1eff1573bbb66e102e3441e87d4df877d3
GIT binary patch
literal 63627
zcmeAS@N?(olHy`uVBq!ia0y~yVEw|t!1RfOje&t-&c4tN1_lPk;vjb?hIQv;UNSH^
zFnGE+hEy=Vxy!ky^m>JT!Niu977w0<Z4+js^XC57ZJM%T<JBNn-%Q@zt2)P8js&cV
z3OQ@+x>9P@Evck6iX5WJ0xX)IERN6q)c4<+KD&HZ`i<(hwda1WJO8}${m$oa_Fmh(
z@AsY0_kO>ry|(iJs|gbehk$}Z0|VnIV>A#(Q^II27|jKvxnMLGjOK#TTripoMsvYv
zE*Q-PBR3aBs5Z)mWo~-r)xgj=kG0J2|8MoYc{_?81!Zr{-j}ss$U@!R-*3*0AN!A}
z3(I@d=r0t+=t|}|J2=)$8@y9<XgDCkH2usrcJ;j3J6?$VzWL=3Q~asz`u=;~|0)07
zhtUCDz#{U+mY+jF!C?1+)=jVf3Vru^V^nSa?T*ib`p<ti3(vp*rtZEFx_x0$3CE|-
z+j~-2!6BinahKNr%FbpX>$CTIZMQ2G%)C?n`-o@fuB>=vj2>@CL({(HjEqby%fxqN
zl~oolx_0vVFTouNyY@ytO6u(YX513TiC!3Vt1eiuKjOIeHWm&Z{ebXi;fDV&9bUdk
zNHRu!vyJt~nNw%1^~7-DHsu8i_RGrf3o1Ay7&k^4@1J(FF!f)Wfo*;D<1hcG9x1f#
zUtEoz=?<)5&GKaK1qG6t@CyC|YqgJU{l?UudZK%~{Iw4BE_~xhjvY?*HpiXRSU7s3
z7ficV8Fh&L0blW)S9b-!)?Yi`CV6iKhMtG4F$?Yg7*1ehWa?HdD7bVd)i5abmd^WW
zGvDsrvf0=W!%1vRT)(6lDrYb-G6~+WEQ}Uv=Dt#Bk?}!C1tV}JJRBVB6)Fx3DQpN}
z`mKJuTQB6;>Dh12PA|_&b3@NwH}*9&{rgsH14?v40WNaqKR?*znR@=?5@lg@H#k@`
zvi>c*=BDJ3P{_J&&yJP)sn34vJYD0{1qvzTfsGA~4Nd>p9OTp-8XQ>kToXf>`i`&Q
zYfnK|<Iup+7{<i)YweO==Y|7H+!_k~uU}ZoJ+_kDq=@DvDNc<S=1pcij7;3R8(ur5
z@2@!-pYn5AiW^3-_Ogn6F*n=9ier35BF4e7{)4ju4rzrA8ylMb9dp};p3Y(JZsyi_
z!C%LL8RSq6W?}&s?%y~ehVCw?eF+7OtbY&kH{y_PIB*OU$<jBQ(8CiN9z1#*E<cd;
zfJNbk8YXw$7gNsp+)Gz^_4?Os`_tdm^Hu%M)ZX{1v4<26jiCZJbSK+v`sngK-)7!J
zkUtWRFme4-wzCL=<w_H=8<vkleQvLM@c-<Q!tBDFeRXDqUQRG+a5il0V-fjc-E@T)
z=95-dy-7Rci*>IV%S_Mji|aoB<aN1_6jT=Cz%v>P7T7D#xeKxsEMg{dLp?g=j%DE6
z?9T6M_olB{{lgR`jm>a!aIELjnGMgyXH+-je_QwCv&-7O|K}Zv7QXMDff9Bb8V|6V
zSKK*_5d0;uBgtxS{G;5?bhW%07vOe-7zx%)T)%D~{3rl(ro(%tufJdD3hR6B(JP#N
zgpU)P<v~gz?iCKWaG&SMcDU)yoH4e__NE`Zj(lZ5edqvOoP|R`Vr4_qKM($%Eim2M
zIt6pj{7vmlSJB&kh;Nx6*hGkA<7ZBd7xViMo5KxI7P2tdxkt0`xZqP2QRE=uQCqOU
zUSe+}yf9P~xS@L6Ml&${^?SR6-^`G6%7IH<8ZY$UE;NM|9tVOruU!50f6j`h6(|Fb
zYnC)L{qvG5o2&*+S2{}$+&lTJwex=Di8rdg$S$>H75Va<Ws5aD#DW{6nx5b6ylpCb
zH39B?kpDqBo`bJR1mZ<d$u4xmFxuX-@cYVdn+#$4K?z$7lnD>=FZcrUl(x=?jx&E3
zh|b%;QW%<%I0O_nBr#d9y;0*k9i#_jYQjzyzOyBM9x{7lE*s6(WX;lCro8M<`n|LA
zmig@8)S-S6P%v2A(DZLh(l)q=#N-3#JfGzYfA^G`e<3V*!M}Bu38u^QuEE{ES|#D+
z+)%4qpqdx#(g?psTcfpFuXabITK2DxM5<>us4ZCVekG{v>Se9l_fc(IhQ^1@ZOM{d
z42?$xZ|JYQS6_H(swUVFs8^PW2V9tc?~EJ^$C`Nuu7~BHT0C##W5ZX6l`WZ?x$c-R
zjxW8y!-JAM<XA<%R3Eu&%E;uc{9)VDnI|9lKiNI=P++$`ud#x|0`<nIqUClf<;Um!
zx~_|C6Pswj1^FrWAFy!fbR5{P>hJobP-cy~dav>EiCsFNBznMf()C>TS+n7Z6chpm
z(;J%p#nhCkIV8BUoI7hXe?q_&`F9Q1pG(Nh`*Ec}Q(`7VBdd^w#m-$`^^JTpLSV7R
z!XYrjXTiN`Ye1oM;24v7+GKXscXM_GC*41?j&rSjWAUZZo%Ko|AGzpmUo5Dwp|-Kg
z{bKm`{U^)h?<)4co3`Ud)SHdpzMlHIt2!z0*3-!^96Rgdr?fovL{5L6EFxdj12=(+
zopZt~w7=fpCFTQaq_{QqtF8S0bwY&buh%ZmdWFnmy1k#ho^ku{<U6~C)B7zwcY<66
zPdQSItba4N<ak4kj__@?T3GoeYL8}o_RV9n)!$9s5tr2Sw#)O?vCjTpLrY5(&0>t%
zFU~JYlZWQZ16kZxCPlpWzoQ=*eyCo-@YuKNWFId-P*B2>;EYfQ$NDhK-*98597q@L
z_mG)nVQRRntXpOC=@~+kxRImonP9+$`R?cU!A+UXa&NNqcb}TX%d*NpqU7W14sd*$
zz=W*DN-*HU`<6g;xE4VRyFl*`dum;zwo3)-1)&rTF-%;)ia*|*2@etDM&r+agN5a9
zz4^Cr-`<A-%+m0D1`4EDZjBe^x~uG=er9Og?EK-z5pj2ijqXJ^(pf4!8et}ZR2Oq=
zyg2W>f*G!QEytW`zvX6GBx?6>-S?VpExU;vveSPF1YCIU96BHFbk%~ON0!P9HoQ59
zQiN~_%!qeztgmyn1y@2KBXXi2?5%t;BiH`UlZmU%C66k=&0ygWcoFH~xIaDNF1!?p
zc~HqL{pZ$!$I|nV-8+{<<3;(Q6~b`$zU7dadfaa3+~dFNGOqI!bnaunXb-XtX6-Mr
zfD7-VBmToJQ~hwC*?5On{R8HN3YaO3Of1hpdHsF>KU|$OcTLG-->SQhKJERst{6!r
zhl#+Al?Nr-poIj7fI@*2N1ykb$r6j+njTpo+ZQSR=*lHW(cLO~lPuH=qaLMq&R>7m
z&OF|f$(ifQ=i<*6%HOXRmt6k5W#0B%NgQuxn3&6+_g!yadVg8+&X+spZI!q@Q5Eck
zh#E%Lzenxc(qO4GLZoq*SN;6PNo$?1+_;_R`QcWlw#qA6*4g{w^tP*?{lEO?x80qO
zuOHoB^qaf0%17B?{Q=d>2Tg^x_FPT9Uc2`B%cDY*x6MyET(zz)J@(4yZ{3~ps$0yM
zLg(DqFMN9B+40XtJKsBXdPa$U@%PH9v)MoM_r6&HANZRfP0wARxOWPaXW>{g>A=64
zZ)AnTJ+EAyDAkxMuwr#}{RXl4^Vj*+R-ITR_#*1T>DY1$*ZR`dmp5+7dA@MVE^MyZ
z8?|WNk@?GGO|0Wfb+3I74*y)Q`f+CI$HQNxclah~GkyL3=&JB_-<W*eZ|AP--Fo+O
z$**-c_S7nu*O(Q4i3(X5|JrRqT)CO-`CnCYUBuV-e~now%pm%8*S39Et&QyF-zc$p
z{cYuI^Mcus1TzCvSrutV3n^^4#Z;R5#96pJGM8<0d{X1CTSdXuDS0xpE21Br?KBpa
zYSd$C(@`i7-0<qq0zbC<N`<$N_zHa%`*8WF%i3cr=YQ_nt)7)R&tLVQ^2d8eB)YTP
zRn|+Zsb!W<Eqwj$m?rxg;ideui{>kut=})0KgYtL(BaXe&TDJeiLKx9`PPBbso(3@
zx{ChZ`jSO&=2?D^D~4;6s#jm1%k#B6Z2kV<>s{{#hQF@22|WIVxzljpKNVd_Q>G`_
z!LfeMan~>wjvoI9A3a|#__$P6nQ1TQo9Xl9C;pgxgj*=|%Vmx;+6F0(`~A-F-CWi2
zt-W)$>Z%>4CASqhbF?;uKKygI)2cH({`e)m=`P=7y^W$zCf~Z#X7O^v)Gga9!{^%U
z41V;ib5~WJ&s#6gXXmdi^0WA#{^)JzWT9KvSYMgGFYCOmk~d++{GS`QtaASIEo#oh
z_42-Zv<p)f-Sb@nEg^3UuK4c(ZVTSncYv`n!m$3gn_O&MW0e2*4@Z23{XMVTerC$F
znTsd#!u}6yJkRgEpP%->SvWL6I{UU|=iMaTthKMFtG`-R+qzXjr*idv_WY?k(jU#@
zHoE?IQo5_?kNYz#d>`HBd~4I_{q*!*p|9&MZJay9QvdMh|J4g?st-iT%wNCWcaL&m
z6|B{}O=-jBuy@7cpd2(O{z3ow|7+iKtXXnkt?}z$4d<ft9vzt~V(=0a;V-U-F3^pR
zt^IZ2$RZI>^P5+G{r2~-G5*-)5^K78gM5o>c4^b=exa>@g4R~<>sZTmuztdizb<nd
zs!|_$cZTNvPI>g*`^x|8-M`BJJ)Qhpv6EfppXJA8El(?&7Jvh%@hj8X>*u2Fx7}vp
z5Qq?I%+~Q*^hxEyW(QHV`O{Zy|Cr5^CMfZ#{CpVe-(6PUW_H$l=tLRT|215z>c{7O
z<?64{C-RHtS|3@UZIBi_F@Ao3(0tx4D~|s8+P-qyBuj&jw~h!4SF41ryc+srtIIuU
z;r-Jit|Zk3{ZHNPl4oo2aee3Q|DWQ_LCvoQhQ@dfo}cbhok6W1SHT;(fkIQ&8`+pb
zZ&Z6F`DA}Io3TyNN@#`B*?_lO=CQB4zxw^G6;3a8tL0Xwe!qS)AylK*BZ(*b|Moe*
zH}!_DzpwB0$9K`R;OJvv^BF%}bE%Cxy6OMg=+CRmHLldWo-1apHf`<OnVhoIDl(H+
z2zN_HLHZ+)g(AMi7ad!wD-AA8H^?w;y;dgbZNhY!E2J=O#kF+D{p(KEdp^3@+0AEq
zQ119zr-$>^{;3x3l{<cOPqsRrx%kYtzjr15UN5}f`_HeOSe+|zrAMoDZ-07qWFPm`
zpHEJ{o9vri*YCaNkhRb&V~<xqe{VQ)4%#nRvjx;{mam%(X;~U`|Ec^IbL`O5GYVyM
zJQ7Z5fAOEEarmYAuEesHPM5zfzhC<B+ltk@;^(Z`dOh02``wxKG1-%@Z}R-^wdU6S
zx~(aXRtuGT=mf9+d1ZH6Sgz-Zs(<&C1LwaDJf988yKB}QSoJq(`zH2VN5E|^hvQ74
zGuARqbW4zGR9t`I|38yXza6={#UBqHnecg*!PRqSt5@%ppKPHMD8FV^Z}@`+OTPU&
zvh~>Pr1vwg8U?ni@p)f)>zY?8^tZ$1Z2HCLM&}E6xRurAKAQHqBq<&enkSgJes$M;
zc>-yUwu$~|=6PS<nb?1DQSZL{4V?cM9Nzf4GG2aPq`b?{p4VaiPNDK4k>PdmMU#5d
z?;M+Cz4_qP;!hhpwf@DWY}1>Tx4vrMKC8l3*10!DCztOPezAb{?EcqV%Dvmq`&`N1
zaNl{?wX5==9M%(epuTRgy^9c}W4%~(#p+4xt#7?iF>`CYFK4jw|Lcr5TGQ-Q3zzr(
zihh!}Zr+n@&UvSGKB-L8`CfJ1Mbzs3rj*aGlB~i#)%Crvd@h@KYwP5kxi*{6oSEjn
z_MYn3FD<2Cw{I!r2ic_q>f#H@#{@&t6E92Ny#yX-opuM&#jmt3E8glie$gq*vnTjh
zMb@FvP5Te6Nse;;8x_C*by?nZS-r}7@za0)89pqnyv@GL&t<<xp!}v?9B;QzN_o1Q
zOTNbX^~W8dWq*DjS+}_?0n&KdkO2zQvLjC*jn8AM8#2PJ`n>bEZu&Wwary77e8<)$
z{WBI~FS~GkQ|ZU-nHRi;V&ffiPR>0!Uvv7oW%|B4UJI)}%`DxYs(U?1-L9?1cUDT+
z_Oov1J>M9eJf^+xY<|kW|5JAS=(3(+2lC&Vj)taxT{0P$Az^9D8MA76UFq%`rtK01
zUa=xy_&xuz^H{WR<lkE^6tk6|L+-TUN~LGqLgA9$PTUjRb$!3QIpXU+>$UFW>%l^$
zN`bR|9$4L66W9Ezr593xPm6lc<ZWv`84`Xhzr<dAW;XnNF82Rhmb^&|>-OF)i0=7v
zRQKJ?cYW0<pRN73pZ3a&b^W{FJ7i->wsJst{`Df|-&-W}R=TY`e|W{$>#GH9mW8dK
zx^>I+@)bVyA?s$v{xeJT{rmFm8%I#vl3QiLg8dHc-mAcEs)QD%t!bOx5~`WL{(g3N
z+jht1<93F}CAR7ucYc1O{%YCUM=yk}XKgY4vYmftrlf|v-@e-AZ*6zIY&jviZF}J1
z<Ljnvd^MMu>(b`M@8`$zds`?P?OtdL%3TRhK%*k|4ws<b;?UV~Kz4F{tf^(lZ#TAo
z2YZ^|&;I+0E3S3nO9uW^&+5(Y>P6q3^*b!GuJZZg;_NrC5BxW}DR}>e@=ja*!p_Fx
zHT=`o+2}|b|8LykyQ|{FpSv$0EoP(&8Qi!8HG5QN%9(s{v9o*pqx9?Nhn=zMcj~W}
zS359dtyEnr-)Qf#z5K=U*Hhno{WP;w_iE7T4?GuNeO=}!_s;al18=KmdyUpxEd+PM
z7#f!f2V98X<(%aN4y*=-#z2lM?4|#blU^`g{hfYgh4z{3pWL}+jq0i4;nL^dZC`8q
zdaiQ+jcd*C=0`sGb#rrf`Lr{W4m58L)(u};s{P?bN%_*e-B+YR=}JH%&cU(%N3sH}
zm49FpXN-z)Ro)`5e&=n%Mn9IPdo19}{ysO+e)pXC1$HXmCqCbwz3Tm%h5J>**ZzzP
zFN&`?-G1kC<AJ}IkM~-=NS~!wr!D>erHS>8vZTgem6cgZ&pW?wPz2i*!O&QhJs*<Z
zKy}Xo?MAI<|6?EBiY>Kpw|{?X-(|7Z)d5uzNj~EH{%HKX(%G4>>K7?)fBtQiy31O|
zeJ@{!7XPm5+$d6$KR@PGtdP8i&+Rn}_b-i@tFZIbwDR4{l^d(h$<EtR{ph&t*PVOw
zvLZJv&&g-*KdW2N`{l#*&gW<DPUZty+;G5yMdXWnk-`#iVgyyeOpVg%d|S_W)$VwF
zVJ+9s_j43Gcc;#;O}nxFb*$ZVzWb9cv_4)vVxq35H|6c?ShnBld_Fv}40Sn0KU^01
zIb>|+zB2W3`MlclYCnyFnK|L-Z+7jw?QDGDg8Z@D-(`+p_-{MuNW1WS8E2y+NZ;Ty
zm&S|p+8OoW5*k$X?$Y|N*l8~#cy!{)rRy^0FN@WYzF$5|w(7>W<d>hHcJ5NDzgFf}
zw&t&P+@u|ukM4CwDc5v_g)81S4&0fsnKQ;<w{6z8*x7GO)7*X)J^HcrN8P@EI)zb-
z<W`sWUTODvKW#_Oqw7MyRo2asi2i+7<;ygexdE?N-&K&6zY_jj_G@*}ub)|q`d*d`
z+xuMkxMp&(waTlCYn#lf)m~MET}ki1vb*irwO7xdzw6w5eA<i}NFZ)u;`(*D>n6Mt
zmN3~t^w}zf(4&vEF7&S4o79%_ZhCFm{KWlwWk0K|EOkD%>RCl!caOdK|KQdYOpg>h
z{|c?Wz1Ju~)Wd&X(gUlFAGdLCU%%+lWc54SR-ctKPIb4RTlD+u?EjAYRz96_>{_3%
z(^tPqyFTrlw>w>JS+4kLzU$t9${rm!60t5~J-^&O_eXPFuCMjGV6*A9pY@CNer$Cn
zg(;6-9QoK8dCTtR%eKyF)mL+)t<~D{!abQvFa7LwR!^z{hrhvkhq<BGL7qzZ%~TsV
zckADYwq6N_EZ^dLOlGH9UU_|NvGM8erZZla8XbGDo;P`g)2kb|j!(W2?=v%`w&C@D
zH9eE3b+I}B&Xs)Xaf$tTt9<q9CGyi&9145=Z5hvxGxONiPWE>HcIErFUAbRxg|oij
zuBNwdt&7zC`l@5q)r<O`n_J24=Gt%Wd4+SqFRPO3Dxnp^fw9}G{?^o7pL_1&{q39H
zXAAwGYf;))w{2T??ArQvm$@=KpIkG`sJP#69Cq`6#yP|3Kfk8=N$m#pksY`j=SJ})
z@qoPsN?NU=EAESb_l?mGlrM=sy{)IPvuDZI?y&I7|Nh>3o4N0fy7YFvXY*$o&YxD{
zz9@8cQqEkP9}$l(xSTFmxf1$pz5ki2tNCTIC(HJqsp2{MXY-`v(n9OK{uo?zU;Q-T
zU%KwPnd?hGy>#nbc&pjyL%rHAouccWTiN+d7oI)#*Kc2a-lM;rcK1314$qymVlwO3
zJ3E6H`LtKrT|c>zUFDb6#u@9tJp_dd`x~0-{vUILWDgdOEkY|&wX-zaGjE@}xsYpj
z>D7n7)_;9CA>2EJF)Q%a?8z^}m-}pcR=ZpC`^@ssTF>l_K2EH(o>ll?d2@X1)Za}m
zt5>JJ&hOu?K5yy;HQ^P{(_#Z{N`99JRa7l{t^H}c`Fj0l2krf@oKF+|_S)<HwYA6o
zJU-%WE%W2s%hy7(-^{(kON*X~c806HQi<;lTVMJ0SB$sG-_k|vZpkmY+Ie)=Z~iuk
zJ2SxL@d9o}*1vipUtvXwMEe2T;}ef1L|&P?Kz~l+7cGf*R)_00zcVT^tPj2yf4;X_
zICb0iW!BaIqOP6yztWzSCCz=ua&}C~<Fi$_AKm%#=h2bVLbb66_Xd9YKabaL>W|q+
zwwmAC(SH2DM(wrTLa&~e-3#-+_wVGMxo39%=e+rU!jb3C-=tr=`?~bk$<BWDc@u7^
zUfdMQ`y{WkO7;>cO*b5H;yP2rdfmw{<PzA$pbFSqKfra7{CR`ZS~s?4g(}qgB(2c?
zY(D?_$DND2e%-(Mr*YoC_1fp^*Dv2UeeG>6n|~i0Ca;>TS3kAFGigQAzhy7O1$WI`
z{(s}kzP9-9ry|%(P44+#K0np!Rra*JS4U3R3OS2@zW)5ryPD$pM>=1>&nfw>C%OEo
z=N-4pMm(UpU`<y;)4x?RnV%u;85Rzm?FXcd_wt`LI4YeEDt7a)#m3E(wYPYE&h~Bi
z(M#?sey>;lKf61(k}37`M)8-wnJ2%w$E^Bia?kGtM~<^e)n^~RCi<ye?O$#-|F@cW
z(Sy4)ocDFF@>8-?`M6k5?NXrp@n!R^0)y8(>fU}Q`G!xI-9!xJ4uKaz4vzc1eQUwJ
zGLQ(5;)ka^zxa*$?p&R^eKJpdh}o*A-p6jN+VE|PTj$&9h3oETtZ|iFHtn|LqN}rB
zg`SZ=9C~N=`Th4aKU_IdZC1bF`TN(Fzom=&3R~aUUt#}Kr<8o%b9dP5r~b~RHD+}Q
zkFI2vy-K(p^=rj62WadZ;?#Jde@Ah$0myn#^WlJ1<NIf2wFe$azJ53ROWI$(81IBF
z8TMxt{5|H}P1+!N{Kxt?;qOZ_F6P}#n!qZz*v_PM#iRH4Q{L$J-dHznt(8q+>w{@;
zw-xi1J(%<R{I1{pn;t(FPCt9gvH9<-h-;HFb#Fg4zEK**m!ShLA}&mAXsQdJ^b0<;
zn4ueR+T@RG(lyf=t7mLZU%VvV(0yKS(4V6QU-_Emn@W6m#(ON{iDKTwC+$C?-^xmU
zf6L7fu6}~g^NNwp+9=!f@>$6nqR(!8zh?I}&LhXw>MXL^dB0cJAFFac{4s0ALcdKW
z^Oiv-t!}ck{ZK8u$#b?HGA^Uwuwd_jjgp`Cb>^QpELpv%NLTgZt^iYQ@3rgiKGFhp
zg|#-T?PU7R8<??X{>oie^?^})yB}EcPF`DjJ>TeY#n+ns$9jIB+kE@;rq35Ymt3g0
zA7!=n>2BvXi<6gTTqyvh{tZ1$T)$3Ngq-b!TDjp4)BCeu`24N}34PuY#`<@=>dDK`
zJhyz@xBhH}?z&6+BOh1lo+_wTxfq{6Cui;2e=m+G+4^_C@a^Qk+Uu5kO;~sHJM;5f
z?B>jUonARHYVYGm6OQP3uQ+RTe(&bXThnh|v;*1dkl?|{`d9I5uP-R`fkX^?4@BPl
z5!rcM<=J0`qfv`%=DT!%TPN0BV&N9MH2(F=?{`JMY}c!Kd}r_DYx1w&-mCXMfB)6m
z?{(I7iTm%)U;o{T)8h2TpJzXRz4UDM^X-z$J_q*s_iz0Yy!x5e->^%^K#|#a4m7>D
z_=+GbVL9|O9bfXkT4h%h-?J#&XS?>je*bi~{`&pNj(OLsuGMb0Vzd5kdxGg({oZ4i
z*E=^|H<8<X`r)hRuOG*j?U=hyZ{G2ByXGF>{w-iGLq@IW4|d};-Gy6Lti2amkhl2B
z_k5GSL~wEAkj}*QYi{7H4rl;7EMRZEeChdp^>@>MM796juC-ySmPwh%=k9fVr}l@w
zc)R)SlymE^J!jy)^}SU3`Coa-^>ztW6QfTH3tg6*|CecZcJiI+=5p&_KioH$FM3YM
znmw;gUmPlRhBWEBl@=`6ui@@B4-}@L%I>Q0iltd~_JQHq^X`895*@qn|IWV8c~@iC
zuDth%>wehrg;Q_uc^s0s@oD?=YoQm`&oX~0_~!q{Cm*J|Rr>tq>&o<JIAh&wCHehl
zrM2Y2f9vz6IM0pPleTyxk25&ttOQs5--9&omMmmpb@EE+&swpiQLzi-v(vAO?&`h~
z6%!hB{9(M9;PT~jR&TiRDSr!p%AUtnv%FvD#m{Ht&o+3mh4t@i^AnkW1x^<<EqfNc
z{(q@cN!0sW<+s9;ul%=$Ou0sIG)~*EqsP*r0_w|vt!ESdk>pnA_^7_>+yXm+?TcJ@
zmv%dfRq%wrnE(I5);(7H-Tr;}*&hGmz1<~^-|?p{s@44F73^8<zav(B_EqcbS6qKn
zGv&{^M2UWxe)NnDD7q3@Swy~sKTw#h1WhFgPnf<oZeQ;qb5rB|Ug_TC8NICQrue>c
zcHSKql=*n#@tsGXN-f{&bM(Iav3EO;*mdrUt~GdfTwP|#Q^UVGMOMX!_J}2J_BZz`
z+VA#Qq79q|N|Y8XxX-!R4`d(M8)*V7O4rBF%!myMxiJ4>!q+X{qM!ArS}a`tPkim|
zX-Dt>=RWtbn{A8ZzWFB~|IXRqE6yKZcF6CQ*S}b`JKMU?M(v+gHu3YfUn^3}U$GoL
zcl-8==HsvaxBRL(SZwveTO6De7L+r}cipz$$OyOe8fQr1v$>tsYX6K3T^O@2CB<C2
zEX84Q@RRnFX{>)0>%P^QUargAx@*zyX?JHX*=jRy>iJEwmyL~<SFwlRU#nNLr{sR~
zi}?@_sXpNPyH4dRBu#*(HEkP(KR=i)obP$%l7zDv>l4MV+huNl{4v$@G}DJoqV?Vz
z*ImfJsAlUoS?u5L6F;B7e8L@DVzSBZmC9LOsV5=FuUNNAIY@(72w==M+!kM<^l!6J
zdT#yZwEkT}n<c-xFl)Y;e|$^zzBgtQBh001ch1gpyXq~P;_r7Q$h>x&C-*Pi`@CPa
z`c&ww-xzyqyOn3)@hw-aZFYUR2p;-ev!Fq>JnX}Q*+$SPU$D@j_QuO%p=2$S*ewtL
z@NNZ-rc}CxUdX@cmuVSscw^Ka=8Q{DwWpI`Rh;{-GW*MnbLL%p!HLp=or&w0timg>
z(?LO<Fq`S?!sWX5B1N-1*HkCu{9NOmtD0|hu;^am{jDD_#$RLl&@W}-_iIk>&#1>0
z=gJ?b+b;Xuo0Jc!iW(c5>exGW!5V=*9uG=SKHYF+#x%Z)8yz)TQ@Q(f=7;(p|7h`E
z^1`Mc)lqFW$)58o?DGuPd-jK(o@~PP>$B_+&;FM+i*G=N`b!iREV$3ONDt&RP|{Nt
ztVsT};%V-^nH2?(W*m{Y^>)&c_q~b}x5|j*xs@19>Uvyw?_<E9x6dkXF50lyIcV+^
zmypxX%eu?eN{U;Sy?&~GIoIy<HQoNJXFP9B1gC{54Nd!=GeSc$p_0XJbDq}Lw7<f_
zrK;~FZY57XB6@6sN70NW0_KxK!j*Viw|wR+_HGw*eZO$t9^G{p*6;K!+M{-JnfCHj
z+ht$tZ?240%w0Zzn);P(liS+Cu0~%!vO$CCdCs&K+duu?Y`!~xMgHoDPhXClb5`Au
zcW3UkyJf`{jOr2Rtl7k~Dm3cu6|A}DyjAOke-J~N&u+_Ky6Z0GSAJS5ExH%n&^X1V
z@nZd(h319e&<9Nw-<wrgm!ML-*X`4f*Md)qesL5{IJBNc<jeWZ89SH#Jz95kf64YJ
z(KK~S!xuBkK7YyjC}r3-`Rv_{m#v_{m<Ae6c*(z!6SmevufT=JPpb2<yn6p^zB#8O
zrYTCzNHjT||L@$Siz?SFCQb`K8^7n{ohZKT?u!qqRmx^o`b3}IE%;u)edT%WjE^;Q
zpH%!a(u9muADF<z^~?E{G$djL6fU?uXqSAZncFriV~X?Ut4q~yZJOUJlJ~1{?$+y@
z)9)6Z{1*J@?X!k$S~>r7no6SgUE88j<!|uxocT>#+jloA*GHFGocwsFNdG%1C>R<U
zSwz0DJD97$Vv?b;Kjn-$ufe-(ZEKot2Mas@)w{Ln#I~(JcfbF`^mXC%sN4J-);&$q
z+qLAyTCQJ{_w-qK8vmcX=IY0s$~DizFEWG7S+nIpK)uUalU<;-bfDzN!X{Lacg!|#
z!A5iWZ*4mtpEujT`Qmpj^WFvOGS8L^=WTy8duv_XHmxb!?DBM<g&zImIjw8fk{9=<
zp5GL=u)cF$gV~GaU(erXdszWmGRDG@6P+-L|I^KH_v94e6M-s?T6(sMA5R^TsN>&L
z|H(q@<4Tv)WnPC5Mu~lq@>_j*q2HS=+mF6|quv{QU;A<G@{cog+iq_@s4!WqzW$EF
zbYJI~qRYLizi+KtkbiQnYW1TTe2h#i(;^di>QCryUJsvwKc@C!smhn8BhGFUBKAgq
z`EX>uN|e~m{nrcLZO^ya-WF^ea-3=Tvi({N@oOH}ZNGZ=>*oW{w|#xkbZ>w8r@X)m
z|Mzp&?z4Va7MoKxwPaKDqIvG8udKV9VKiCpvfE2&y^#}rV3PIiZ67&6VJV>CkPyil
zH@ma8N@eoyl20r6Pv+i?61$mqp(yECR7K;o^Jo8x$7P@9ypwWzch%14w}rpm`Xnpx
zb^G65wKLfh&2|?qPEogA)_chi+yfD~v8|!$-?m&ECvd!Q2t<T6M*aTj*|{<1WaZ^2
zLE$gAXX&oL5Pl)QG-P`6oN25Ne#vyFRv-U%gX@>B|Aj054yzxPub#iH>iEH}QoLm~
ziwmJGglA#_7v|3nU<cPi4GfK~A{L5~_Q@_YuM0U`&zRERRHvMA*hlxmrUmsAQ?9>C
z&&%qNESHFO{O>-~{WO1V+_v)AD>YG9bk3cyn09C8$M$o1Ad@b{EjU`=_clG%1(H=8
z7#clU?#=DhI(Ffe*F&p=1sB;)*4QV9FfMmp-SkpVm(A!{5XTms7veXJL>s=Ju8CSR
zKR)lW&iPB9PQ72Pw%u0iplas+iy3lXi_7yC!x}djP8VCD^ovt@=E0|vk1O&PtyFE_
zcO_wt)FQu-JF6~6v_;l5CQJE0H0wS7x_HO^x0^qg)?R;oeB<kV_g_2{H@mgq@$qQO
zk~!bR?!KK<&3EI`y}EZ9U;jJW-+Vn4R91xfIXKoo<=e>#8nXZioKp{Y{o;DnujHLp
zAGe)+%J=;AhWYvbw$IPoe(QDYwyO2koH?2wuHGrVHLd)6+4<1RpWlDER=v9~d+pcV
zrc&>;C6~vUtLM(2TXMK>+waR?g4Kn@_ue%W-Vw6cvu4#ri#A9GL0cqnz=^xY>gN6|
z7vl<_qMbqKf7a}K{_lEu{ob13(~TJ{W<nO$(pzfs!tB1^*I3C~@#o#ija|QVZ*4hx
z|NK^uth*A^&%SNGR=dB${B_HbT4}X^Gr^07K*{xt?t%sO<_q~a1R@w4tFpJcH83=$
zidQ76Sxif1&pP{axw_sJ<*L_<R<8b1Z8O9BTIp-152cT{|7Vg8Q~d8Q^~^r^<M-&3
zZ>O~Vyc+P`Q|HtDU)%lvRjWsBnQU~zJens3GQ4wP>H($y>i4HM)`1!!6CM68S}&;J
zkZ_ar+$om%6D(>~g!e{$s)*>{S)*S&|3>ov+2ysn?-ZUq`(Ebb_pM(pZWXfbu{fUU
zyY{P)?$e6>tjE?YEi22P@qY{JU$3=aJ!jP#J=4v4z?xH9T6g++@?K|ONTZt@v}QM;
z-Fp)Y2an2yO%IGOi12!YXA)(m*UvXr>bCdNWB)Sae0%kq>d))+Ct1tw{5e<o??1Ma
zuRk1FE&Sf^O1e%+;fF<>YwH{RQ#&sIl7CjCd`IQJ?j!am?<VhgU%PMSm)~bEzWnEI
z%=2-f<hPmS)7zIdcb~m|lHs@f97Fx<1$X#OWKIWwGKRwfVMf-!eiEfl4F@K1|G7Wu
z{P{1Su!wtb_UAL@*Y72Ml!;FM9aZ(Pw)c5i!ZGRJ>=WM2kl~Mfz9~HKzTw9;N2-PO
zJ+6FG3-`(R%MoH&-@#O{*ZKLWzdkFc$Guj$d0*{S_UdozB-yL#zpXy+o^dlv_wRC*
zvJA@?bCR#VP8R(Vz4cdQ@P+)PxiX-P`NGG+alf&btf0b%BTVxn9_^e7YRYd@3vgX<
zE!!?%w}03Abq2OdfvwNh-B!Q+aAj=yF30+>jr+e!GA8GiZv9+$+aquJo%rw~dz+8z
zJGZOJP5jY&<Q(T(>&E}@)~)WWzGWJ1XB-$WzVPbFeYH|*Rbj`f&i6dN`ub&{@jL7D
zd7%pX-`mKV-1+`Va&_G6=xtUPKYgCYEY%IlUK}Ng3l`jOU1Y~05K+b${!Zt&pqV`r
zi<$U}^L#58{foH8JL$yy?-S0<eEIpX?U&tq^<J;Kspax+!`@!DsyF{r@38wCeiPmF
z_O9^%87o$Qf35Y;T2<`jW~NE+&aCw-_;S^5R$se@Nu1?lyM60DOK-g2d+B<k>^F1I
z@UKxHAA6eJIcDZOXUWPCxfwU=r7e4(zOy<R`F`7twS`XqFILzb1`oe9`hohZiB~uo
znY{G^yx+-eeo|~=%f!Nwqxa$9osZMbzL)v%`*-Ra>F)-0qKl%pN2edyxOREG_X`_c
z!`Gc{QQw}3b*ih~n_H2)h^zCu=b2mSWwNEOi)%kcaV@E1YtLX$z3{72I@?;I^Y2xL
zlV_v<*cw@05B<0HHmmW2%fh9b(t6hV^~g@VvA(dV^wF=!y~j;tKsj09h0B6}#gO6Q
z<i_badpdPN39N+aE91`lQYY7}(x|CO>hJr!a_g!6_Y3DwE-BxhQ}RJY+U&+Mu3CMs
zlFHIIrkCQ+zMtCp-%Dnig~7$A5-;;EY|B5t_`mo0zxnHbvp+v*rD(jZ?6%4m^UiDa
z$K~c5_WPW<oON^V!gZJSyBu40KXtv`d6udh<<r0Xd~<}+_RHSD>G>zv((|`WJPvM!
zACO>;`mbc-#td5HmLSx~pT5}Nf78NTkUL$NN~eAh7IKaW-DP?#>eSPdom%h8uV&>r
zi~6ljsG9FG{j+Cz@Yd|q*VEPXOs~dW&W$;G<hJ^}i532jes<0k>b{qE@iR-G-~ajV
zD|_CS))&atI6XRa`}T^9$zP3&{vUbRDJ$K(vu;NC)7g4m``1U_&wPBl)M$&}ox58;
z?zk=W?o#E0`9k~muH~)T^Z&{h+bgf@`Y&HH1%)fp7~lf##{J&v=_MB@+JT(xz!dMX
zPG2r?U+ABm?#F*#Y2VHF_1C}YlDq%azbyVaEw}KlCI6L;dw*;*d-3p}){}bWK=mN8
zy?^V}HpHKwEU}3pCV2Jp6Q|#-jgNz!1t2tieLh=OXve?yBh745`|ln6e6H`<Kd)bs
zMKh;YwfpS-yeh7|&1U7dXvzOyJ724{Wt5iIiGGEQOm6_SJGm=wsQ5M<aA1l*wWBn3
zhFimd^(@mCYJ6XPbH`TQ#$8rlU*y_a9QYgBv#YHA@w`d<p2f;n&ntP=byF)ZHhrGo
zvK!mi%~(H~qx9=nz2G<3k1n(KRM&sIXtCgzjm1S3b&I+t*KYm3{PE-8uWAm}t)KYz
z-i#gfi=N$Cbv5*7snbK<&i~i5F0AeO{OV5mv#@vbzph*8e<|eNch5a~g@;{EZwqHz
zeShiv=_`ayowrmyj}-j^b@&D*u3y~MFI4<M4iEiMdDJ0UdfEXARzI2KprThX3#QGg
z2zs=9?suE$_R`eM+J@J8o8Rucx;Jii_4%8xlyl$Ru|9ld>V>Cwu3x<%?t7nI{go`I
zxi`<ntUi0GqzChk?MeBy_ECy${i$!yI<*?&4GV9cO`4Y4`^qws_36TB-QB_AC$1Z*
zhNisVydl1R@jau!*7sH~uY8hKk$hM4wx#BK{`1}G|MKmo>Ag~#xbXHq&j+fV>1tUo
z*V;vkzL%e|VzTk}x5W!Mf2|XiT<)`Bt}moBl)?IH6+3t-#WL|7)n%0thdM95eEVi&
z3{&U}i=>^)uAI#2d$nZxOY6##vda5kcKhx*{&v&T$?ErZ{pbC!?QFB|aH8DoeeW(M
z)^9Egb-nZ7XOB(b>C0zs>rLld)e-i;JTx(P#kaXUf7(0s)|cHgnQpbS_{p+-w_jg(
zJPG|gf7{y`vaebWhAzLm@%Y=<DerCze>JYiaeo|R_V<oe;qfC=tzH%1%afbQ*EeVT
z<h5_=o9~!!D_?cxfAo8=J@y|bAKA0E&V66tqXjN||MfiFEU|C4&AVAER)2Y(>AdIO
z8+-pl-&8?kSWkrlF2t{UoN30wu|@R9S)T7xj?Bw#H<fC<$T4S@&ny1NQSlMh`yE8x
z+A?azzhwLQ`~P_-F!}be8Kq7u{d7t%zWTc7*Deq7xusX!MZeh3`{D8^xYP5V>PGKv
zxAhD6y2!3xcx~mm3(vFLpX~lV=l#5Q`y>|~Fw6aRJheTN>zApYZf{U{aR0_yW6!I_
zpEq|V3x%54DsS8yrmm?sc}LZvuG^tM_NFEIylwV;_Rv->WPNPt8@Xs}ZO&S&z~h@2
z`Q4Z^#ln2!-mvwv!+m1Z1CM_>*11<GIjeqdirpngC+9u)G+vY!JScGlHHZWQF2qk$
z&Xi-};86{z-*ZR1@cfZ=&Z>zqOw1fPQB6zNDP7wp67j6*-%+Ex<|=x7pKf8_xqRK0
zHP;_%)s$a+H{0*uqVB$`7mMrO`FZ>?C_HuRy8P2@(GRN+Y^hFqe`Km~ay9$S|7y!O
zy<N>4m@vCc59CGeU#8cBg}1Mi=DtujLB`+bPmS)YSoN>fLAK%FJ+6E%S$-rUdhfa`
z8&}QWzAsAm;FtBCu0Q^6^t*7SbJnh+{e3TAc3No$?+m~4am{0^XW#Cre4o)LB=hL2
zo8$h)&C5Xxm~@&On*JHdxE3ooB=9hmhCXlXoULAGYxvAQX!1O_1iePBIdZdp9E#bi
z^ZlGVugPAq@E6ywtlIG5P~)>5TN7V%U8+`Jb;2Znb*kdMNh_G9Uh8#;{TO}pkAB(Z
zyJ6Lmiw<nN>awl)d0}PFyr#OjE~}XeM2~K*WBq4$cmKBgigg!%*M52*Zzhp`wcWy$
zq1?A-zjB9ST)xN`YpaS~iVh72j5stbbPorbursk7Qz$5!RB<`#ivG{({#T}ki<XM+
zcT13Dshj3mWBYNZOKk4Swd)Q9&a4vM{pzk~a>j4f&M2wH)0k&%zv|g|SSZ;l(eVA8
zwtN3sJr|r$syq9B%R=>=34gTQ?2JDyVM|{7NnoqW>DN+>S6;vH6~3Nta&Hx1afDi&
zy*;Q=#32yD)i`%rl9(DOB@}XA33Z5%>Ml%G0|jA;`iK6PugrzQ->y5ovuc<3w|^Cn
zYKy-X-8+|Top|x!6t>rok|lqd^17`rXAB9fzqvlHzWQ0k<RgxpYpWZDFQv{ku-yK8
z-S%6_w)yh&D{2=_Grqh_e8prn_p<wI<semN0aJ2xbg>1eGOYi>;iFuTW>)8vw3vVY
zoMq=Lx36`&lluH^O78z%tNz^R`xSLH?^Ux&w3z$rmS0+1mZwg-AJ^JxHZNK9dUo&E
zUol<N*7_;gEPdLbZF246%-5g8Gxja>YG7bw(gqDtE3w})0o%*K$Yje=qg!jYy}d5|
z?WSoqtCP~j-#e`p7A-xr$S)>iGiQk5{%K3Huh!klTF`iW<<s+Wvp?K<^UdK;?k?+P
zxAoNDy*-ih^H}HhZ4XtLzTOJ9S1(=U25FXigPP?b?Uz%)B_#tR(^=M49A7s+Tbx&Y
z;PtbG?0LT*u9RD;{bjz*RXMYJDj!bWS)n>1YFls=pV^0qty|_lPb+7C82a+n*}J9Y
z!Tw(z_pGf?OY<sWEL&Cn`cLR1cJ2wQMZkVIaD|EMSMcPUki{>cj`>`NwWhTZi@q9(
zz7D$a=-J+4|F!S$yH=N5RVIqdt__f%FLUC}YVDMm;I+@6-CuiS&hHuT_Ak5q{OiS!
zQ);hS>&Z=h@tb+ca-ZynX7;+0_9h>nww{hT1a96ZI5D#R<y@EpUpBJAw^8`>3BlVn
zTmCXzr<_=>^6gE=i|NbemzQ0+zNtJoJIvn3@Q9K4>Ijat{K0EipWb?t<)8I#+vIJr
z)i+m93$F4wl&*5-SoC`9e!nZPCqRsy7UtkspUJ<rQxH1xIE!nK{o=iAUv}J<&slF1
z<N8<YUHQdVEk^@mOST-Ttx+sqt({zNcR?omPiRhQ=}+sh!bipDejdL0zq7OW*_-9B
z@7B-Y`>zzJ?zQzK>$!8wN^R_|e(G&g0gusiYc5!@f5vfN*iMy3LoOR@Pg(m#N9v4s
z{>gOzd1dPS&^7;D-2duEn{T~yHeN03?W={i%#A)wc+7A5Uh4aYBhhU>2?vkWg@39|
zN$Mz{<m2@9ZqAqV&i6i>Hs<ODoPJ}Y6!?C}1#mJraEV*vh5lbfGe=PWM8ToK!MJgL
z>JoL8S6(MKZedrQ__}1unPppN+FuE*KYhtp^pgCXA0H10uX^-mKmVM=0f(=LKJ)kA
zQ?Y_YEaOhN+I45)WZh@^i`Jx;znlN#)H3UuyQ>ap?%Zz2vG-mfbaUENfq)C~oriNK
zf#a`%p)rkV{&^4mY_nU(nBPwEoj2`9?qgr|TaS8jLgiy#dR_RuW7Uj!b>FO+6AZV6
z?)Tcu^(*v-eK`+%a*E}Ylg7g5{dKzhb$5S$-nm%l)-<NCd~LtgUj3H^Hvu@-^fWa6
zJ0+7P45~LljY<>Y6;1#Cn@Q(BZq%FZ`)V$8?ABeIzJKgAFT47%>D%XdPio)0h{_(n
zv~Qk^o$0g`wo{A!vaWb84`!FD?>T&Jw|kc7H1l4=oxDY>9{&jMEYI6;ca`m*lRi7T
zetz|1gW5R-v|v;=Z!+9Y!4<0I^JYlAIvlv&>?CvXbNQUNjgs$ItNP8Gx<Z(BtH^n+
ztycT$=Ub=*p4RDIdsXz+>M|cQdp7rHebp*`H~%z>{`vRf%ujzI`IrYg=g+*uAKe{V
zpLhNBd2XSv2M?;NL#CTH6ftrA(k?&Y3mN$nP`Kdo;73mo>wCkkyPV4J_X$^(|60BJ
z%Kn>$`;*_U<I322<XragSqY!4^bEH>zb6p0RmOAeLAz(kSC@P1uKs-K2(ys-7t4Ud
z`(A7PwF>+^wJo_XbA?skR+fvWg-e4%Atj17D5*|rzq<sS?HL%Ed|B?z3%qwfWywjl
zodssAS8p$$ne(}G`>&{Ne=Z-{q~H1R=9!J_O8%83y?LAKSrE#7^L4+kE`R9zWfdMt
zkzKc5Ki|Ig_VK5UT2J;H1csOB2d|#o4r;}2%qc!SW!ueHU%$RXtXlBm)_Af0%R}=@
zSi*hJ<bReUIV$<D*2(7+ZO{B#{_^t%7g51}Z=K-Ps&@Yr1B<0EZ@hD22iMJh@1D$;
z%X^F7z5dw0?6JMi9+kqX_~xDk_kUTgdHnBqr>n(B6YZOlH$Pf-S{?j$GSWJ7!ry%}
zY~D|{(D^vI1yUx2#ev4B<})#Xvk?O$(_XGQlkV}qE^T>fy}!8Z=iQg(vordCIb7S-
zwdGnxT-%|S?8g0CEc?|0!>je9ey>-lS%0KnMa=NO-rm<o&U6cv+T6dMdR+PC>$xW%
z>vdM8A6q5!x~e=txAE(YBb)XzFaG!5LMhODR;?W*8!<9vGg(i76i3{88=^n$cYHL7
zQ+?HM+ZkUUP7k&Dk+uJ@j_Z4OUXyP3^gA2HUdhe8^J>-2jaz~zd#rVhecki@s@~+j
z)iYw$1$M<fTfTmd`Pb;vQCB=WtsFP%to=8CMbmp-p|5_u*Z!x=OgH>*U^uO8uS$@&
z>s_0TE9%9=9`5tIwa2P3Cu!>KR^y-6Dz8f4a&hx~{QKnJuOrdIU;DZZxBa^N`NXl#
zxA&pl_X8cQVqe9#3r_X|XA>#TH!}*~O}4PuSnQOo{-KrU>k}8z?_1Y$YrM#R8FX}+
z)~>g^pE@_+{rs~hX1!u<{Mp^^$5t#gd^c-_(}fwg(<j|oEhH~jJW2M+w(MU!!XDk~
zJgxR>$D4iMzApNC>-c@o(oZYwW>n^^?b;v8vM#CM?;Jg+-;tBnG`+W1pZ50Dm&(7d
zT|(zBSvk40^io=2)Z7V`xsUF4?u(!N+%)jQ{O}9^KxLD`bO-tUE6z=wFc+M>53n$W
z9;i=z^h-D=dvYDiIiKzQzA`uczjNPzEzfJx{Qu;R<NPMyR1U{!O5aVH#4DY5`O=y$
zhwXlM)Cw0LiKr7_zck{X@yBCF!i8>Sab4+LUX}MRZ_&Sc+0&nmSN>TvcXIt}S>;mK
zf7L?Qg82`zt@VqLow6hJ(Ix2|>m!HlPc8VmZd27?%d8HTG?~qH{A<hOw&wi5RAi70
zs*(=uU_JKD`__)FDej;aMY3Q;fzZzT5tAYx+W4Kk^SbNt<nS8@u5g~w3OKse_vqj3
zbGJ^){J!eBvtQ+(^~Zxp&I?O5`Z8^`x!9Opc(-P4`BC1B=guvd?|tR-m%X4J9bcHf
zme<FwjX(ZHtaGoh^H!}#^%{ZdX?7DOeqa6J83-v09t#CrkiY(M0%+GBM~+T_>xOcb
zHZ8rJIS;dPKR)yMF1gw?b+hV)od=FyN{$t*Z9c*)yjA3kU#DKQ=-F4Ve(&P?Ho0@L
zaMusV3uYoKo_4<SdauQi-&J+)+r_N2U;g`E`Mi12w4<xaCuH2^3US;YSNy8t+V$0H
zzkcmqb<Z^H_$IsQi}%S*w=jq04r9;)N{)1MP~jlqv*6kf+ma0zdH3u*P+ojo)_niv
z?<^c=R0|fqsr`9m{o2~QCDrF^;*Vba)o}M$RN(D-8^xAC&(?MR^!Et=wS9HA@%_Fs
z(^o9o=avxH_)B_|-G`m?=1-6Q{&myN+KESgJx{;8&Z%&&&8iiTYL1>4`f9T_>3#XN
zMS1fltXNvQWgAoJ95efQU;oB+`W`R-d%f!Uk!8udUhcS-eIB%F>-F~H`~AX@2Cu?}
zg$+%0?K5^MfqHprOzi1X*v%wQDoo}GY5ZWWe)EDEC|QCV2@uAC8Yb~M`Q_E%CTim|
zrrN!#dw#l1OF1xiT8i8<*oreqA;IFNzhHs=FJ~24MGqeI1J7-NDn<c?f<|tQ7u8}&
zB1kqdG_r!K?S^I*S5SyTjf53_AlEEd@ZJ(x1H@2>h?s+eV?86^BuMiR-C~CZ&=e`A
zC`2TJfsyqutA$4pq;&+c3SubCa;{(Vm_ec&GMLi!q7He_TmN|D6ZRXRQC@_?1REx<
zUym)tj6lQujVD?B=HwVhn+g@!NI6QkK`es#N#jK|A1DwGEaLo=a8W4kQ;lrDs{Mgw
z;H(9*2yE(O!GH_$=QmE^1o_iPt>8||?3=45Haxz_amxU%2+VMByk88;l`LYu52`(X
z+;H`->iqoofzbK0S72TMt7|y00<`M5)ItTkY(SVx#`0mA+3WBJUrPROtZTmj-;ND+
z?gmc>$NI@F>p_|~crg8+mU2F3Ny~JT>)X@gmg~N};{zGi1$hOmqsK4d_{CHeMR5FW
z*mz*&&6Mv)zM9>;B4*3^$L6n{R$x42TnOwxkf{y}8XL5~NGm`V9#jcdR94w;oIbDA
zs`G&N=8GpM=VXBTVsHxt6dV>vGqV28llcmsG<(ZhH%C!^rp4mF7qsmkRV#mZH8q?8
zVK_KUq_`uBmK*K>FZWsy-1vU^_V+4$9&aXG_$B_ssjb50(VBnlMkqUAK?8uGs&{YO
zZIBx`bTA!Pdzma`?i-UKsJ_9$^7_=Dp=Z83?%*!Dums${0;vMqdKz>ph|Td!puNN!
zPBGm-_oUw^M!9fi%eA!*wIAMc3!nGfVYELwdM~I*1qT_}YmJ?(I{pTRQ+YwPK!PI+
zpT|6YuQ$6De)d_Oy*&AjwUEBw4~9F2@|y6ePjIvz@Z!*TvHnP+nI{tqXcO5~<JZhW
z`{(T_c@)%nSNPU7)>o%~3txXE{qtAjk>f(su5&`SN`f^bYzHMTuro#(;7EkW<|tz{
zk-&=V(F_7E)JHSOXyG|pO^oJ(k&_Fysc$&^P40^XG}S-2Q+)pJL&@_M$K;mJulp4z
zzUKk!_fy}iRq8f9?z5g(^6h5&{F1fVv9H_9_r8ujujUGFgCc_Ki}r#A_t&q#C(S8S
zb|X>zOn~^Sq8%bD&V?*^6%-P`TI0gu^Uo|_e(qVQJNdBR$%RQGZ!b9W+t#+rmRW3H
zoigv+mgR3tpUq6ar{nsY`BM7Pt;N;HYwl)6OaES7`GI-o-^QHZjS{l^ul6qA@!3_s
z>f*WkzwdqDX8BGe_Upcv^QzxfzH^rQG~sf!{ECkZUt|2|T&;*Wytd;&@%-O+xaZe=
zIw}0$_R`nvyIltQS4?cx#a<QYrf!<o>|Gh*o8_Bu>v?&Zweo)UdCU_S8b5OOER!&_
zlakb(<iO>z-S+vM;(Iq!&mEU3KEwKH{`HkFKTjzw3_AA9XW#!L=d9oV={#=xu28+y
za@jr(o!JiZ_OpNPT(jt9zp#B&_pZNdd%mtbvb_9m>Gj3(Ust&QHTnMan$fw(pJx?E
z<TLx+{1`m{*Ol5$r_Gn&$?ZOy{M&lx=LyE=EFOOknlgXKiEZ27UfuNmYSHiWs~&&(
zdeFl5v!{R6rQM%Omrdr?e74{AuWZQQ-n~mTDr1WFe7f=Zj?I3V<#Ru+>$XbVT>t1;
z<)5lfZxy|LVx>%L_g&{G(VH-Tw(#dYw{tJ`@!S9TP}TeE#FE>$^FFfJsEfUyp&NZ{
zUi0ZPm$T`69p>GSKlOk2?=}1LtG9o)el+*<kK5a}_a5gEkZ^Nwtd}TXtk-eimi)}G
z?a!W?FP-!IUC8#$UtC1j?3*_G{mJ?geXonFxc*8pGTCxJN&j$2@=;Ls$I};!{_lM~
zd;Y&K%S%Q7PcQmBH&W=?Q~#Pr!u$W6?!9wkmBXIAx$Jzs5C7kO#b$hG=Dt^4|7Y9&
zJn3(z_E&yl#bKViH<qe5D)(7D@=BjudX4$g-@lu4E-l?|>f?88&d#;R@A#vn#<#2@
zUvAHqF6?9pT64?%@=f!j6WEtTeEle5_fPZtUc>GF(Tg%?aW%FIoj9MMd$4qEmxzx1
z-1*1*pQL|I-Ti*wZ)v%IAKL%dEL6K(ylLagrKkRV`@gwdt{^xhTz;AO#_~5CyY~u&
z^aQTC(d+fbHpx|0NtR`aMpu{ajYVo31-z4-uV{R`C+hN9F-z%2fZ~?v-)!68?2G(%
z*XaAZGw<HKsju6=+t|AJ+|K8A#>LOi&9p90D02*nOsvk%x$hm<{^{G1o3_>8=7@&I
zZHk`5aNj8+^WL6H^MX8?`Bvdw+MZ4<E)J+j!Hh-c#X?UO7X=n37B?#cmg940{Hply
z;NX6)gG+om8aP@U8j3e7KYu1`oPO?4$AY5e0zPVoSai&mDXc%BzA2$jP2-bg-Mc$G
z^Mmc*&Da@t`l<2(yZdt!{{4Q_E$o@aJdJ;Ekr1Px05WR4!0{qY&t!^`3e$g8hY2ak
zP3^)Qb9%P)pX=!6=y0&%xUsWS{d_^*y{x@c9zP6C-P6$6TmGNTr%Z1-`;+aGUl-RJ
zlrJxOwtA10=_AKec?A`HwHp>zbTn|Fp%8sW)-S8e@1OiEA*_&asilNder{#$jSY#b
zkKPE~sm5gL+VFXk;Y*(?&Hc^+JOAC5*vit#|6-kM<@^?B*H>zvVjKU=Z`f~}a5039
zX+vB)yC(mkdu<VyRG5?$P*K297Lg0<AI(+2{@B0a!O3r>rKSD-GM1Zs|LmRGt`uO+
zVqt!H@7K?DJSLqcYxJTvBpghh@?U(aj{Hyk+7%1f=cV4}E<d;@_hwPB8@ka7OcMn!
zxECrrYadqn5YNOCXmw_u?e9jz<YO||wq{>veI%66#N&N&-n=#LmK8tstM=b}prC(o
zhQNb6cbfX2+L_k;_^`M7`@6r%K6kpV@V;7fTI0Lk#5AD`7Iittn9mD#{MTF1b;O1v
zV(zi_+uy$iO!ev&x=^~ot$a_HE|MPuOhF!;6|3sLdL~2TYUbs>v(0*pzN~mwbfxM2
zo7HbUY@4S|ZTJv<LTiD%NW_^ZH?H44Ki~ep)g3F#v~{iT`1t3U9m<HbYk2+O&&waB
z#xG^rWjn0|9xy&t<$EL~+UT~6@09{-5~&crFv0rcJ^N33ku1A-C5@IWIvk_Iz1&Ng
zX`!IS#D*fBs<rK5i|(|w39jhA+P>@K@mq?Ei+8Wyx>U%6H}lD-V}UCpz2Z@mx&w=g
zLK4%fh4O|8GyC-!tHQ27yvuHBlXGU*R?pW0Ih&pasO4-;xY4{&!rD%x*+_|rQ#Ihh
z9iQnpj_r-NU-S9$8-w0M&*r`4Su|tv@sc;Uq-7WSbBpWEi9VshFKoW>pXIg*J{xm?
z{FgHdORqcjNxWdQ;Z1YpT(4VqUs*gmCtM}V&MUR${DDU1{}Y{m@_ve%kz6|=R62Qg
ztiZu7Je9SFKh1vmzwdLt>{Dg&=hd9s;%B+dn`nd*DBwJ#A<fA8<#bz=<k1NSu75d|
zJO8}?HeL6E^x#WrEH2yJ-q}1`TIcXN;@C1-%Y*|B<)5Ff{;H(F)XOz*_A&L+y1a8g
zcd|ZDRS%mR==DJ8ZoFW~JD-5cn3g~Bhu$YEZJB@F<nTHfC&|5X0f#D-+NvM?7XE4U
zpz&aujlqsS8>{D&HMhv^eSG7d!UF$!%-k<UZyo!$M_~7Lu}LR4z773kV|4u2su<Uw
z<)2IE{QYOPOMimek6RPwp=ZkuhaW5=7x?F|)KP0;aGYx?a<po3RMm$r?R7iS-rd=`
zH*(($1y5~Iko9t|iR7<k{WABZrz6WhcZJfrsQyCl@1OstF-<Tp>U;aoUUR!@iS7jH
zREPU#7YZ!Zysc>WETPJOciCINcbAr)UgY%a@9*#bd)~4Oy4d$yoqIl8Xn&&oJnv2B
z%S~F{5B#i2nD4JRSN`MSwI94RywS5>Kr)L-TV3zl0@3U99nR0QO&830b$LzXW?jxQ
zo7ed(FE*;a@Cs#dQDA30clJAn!@Gk!BTu=<@2#5tyg)r{b;4#FK1+UemeZcOx3*ZW
zjxey_yx~o=^hN3UJM~T&@ymoczHd<2G^tSO!I!&Y-wys+<~#e{>V$p5$(-G21(`!6
zr^bT#usf%8I9Yyuef{0_^fcXmwGSVs`d4zq<T^Lx+RDei>}cS4qJF?~XG`&GwrAzf
zr=Qy2T3l@VW&3IUz^&1@0?nR(d^_7D^U_xLe!0!IUbSMs58Nv#n)RVjU!9ecU2#K^
zz(Ssxvny^t`rPwBN(7wHkdt1ABqQsW<ZaGR{7MC0+}-`XzoJUXadp$-fG66#Rj)c{
z@%LTpc6iC6_eAFR_I}AP-#%XK-prR8b^5A(iI_pjx!3Ee)XqCk)StQc$->=J+xtR3
z2}oF%t*PZHZ?&0Sye@73{#nJ%VO?ncZs0i5*1+^@<4w_`CAT;Pwp20BZ~ytj*Z<1d
znlDR~nUn(NFg$<e?=d$zX4Ar!ub1+7Y<qQm&C9?h{)aDY=h-$s47d4|^L(N5R2vpG
zzd1XEj&Hu)KH+A5@TVD<vry|JMnQqb83F+g_G;Enc_F%u);6}^IX6_MshSF|@MQ8A
zoD=gV@Y9jGvsp^#R=+s>Hl4q0rj{M!UtYI9nVV{tJEr~R{IGZWwRN}lO#Rrry6=fA
zS{3WSa>{!_WaZ}IJf#UbOkWb_X6<d{oUyYnc#oTiN*k~Awy4<HxxA8>CT=l1`6<%Y
zG`@2uujrRtt=i*%w43IgU$^O$mVU|WYq@s+wXF^oDa+iLx<&frF{Ak2EnJ#sum9Qp
z#rCD_rPXI=o7Zp6zrXKtgx?ny>E9b(?pw0g^YsLs4>^rdvu|IJy6k!E;HCc)<(!U7
zTz%ql^ZCSoo)68-Sp-h*eEGup#v@%Dp1em3gV%35#HGE*r1;qx=hxvG3$-{t2qbv!
zlwJGnbyz^$6?g5Ty|$g-4sCmp<Fl#w%(~0#H{{wso8_g#aQtdwjZDw?15@_qrk=bd
zcrES6ER&fgeP2X2eNziRsxB?ny*<<F!S}i!xyM^#o8RopEB;(-cJfy4wY1GY&6k8n
zZOQmpGT*ND3j?3TQMGSd@4hcnlJ&XOkn%h>dXnKhPorfoQ{J|z|1kJ*`_1G{*V~`O
z7D!o@WZY)u7Q3;vG=0+4!;`kMuGRUbaIf$4QqKSLAJ3?o^67kH>{Z_%_bM(daJ>Ea
zN8^&So@H@MCf~h%W9P)Y?{&VF%NH5zt^3UvpKN(GNY<p{!-KgmcNEB2Ck0>HrLuee
zrfQ$vZV|E{SdU*cmT`Y<nZNAQ{zt-fH%ia0;}2_J>%Zyq-AO-luQz-tJ$SD1`3^Ii
ziBeKCd}p~huuSrEVEnt}ed5&hGA#GhC&yc-rSQHFSQhg5Nk-3GcY}I&y&tXj_GI?X
zF^zkr{-pZs48vqT-ZoAXmU$`;b@Jw&Wsf7Kb=FK*zAyaYam*z?SEH>9wwb2oY-;mW
zK6Qsf`h3D;wl8mwsTQoyNqMXGFk<uMc^e*D$z0OkP@EoRpIj&XI{ws;_j@}2otpAm
zq-N9X3-QMJfd@`><!qLo_vMOs?QTO^?+NetYtH;!{iW^8oaA(Ksco{C{xhG^{qV(&
zVdsvHnil1mK21MT&AU5iS+vzXxKXGj{7Jf?W{bQ*!hzX-U78Qy-Q9gY^`oJD?8_g5
z5AM8aORN36KjY$}sWG~`F*`n#yt(0g`B&%TbUVgLvtNg|YzXkZu3It3dm{JMy*FKs
zE&5zqmHMjjXzQQ-4Zp7C9hg4zK{o$dZL^2jYt}bA9tdcQSGwL_BG5DY`Gw5GyLdgX
zMLr0bq3`m%(C&}zmF<0}C%QifeR7xU;bYIaoX_5S*X}NAw5qavvgvk@_=RtgJ#)9;
zG@Dn{vs6ZY(;CfYhMKZR?=6=oKg{NLFY-Nhz3I_R;ld}5m)}Y}jHsOOD?jGhu_FEW
zx}Q&_gXYiokmOUIaerRrzJ*uT=zLpnsOfL-gx6jFH)|eOK9j#(=KqGTH-&Her_bH0
z$n5Jo+pKm<|MKYL6ECQ9>-o<zdC5^@-%?wk@cB*c<eAIoUcZ*MdBOgv*VCFW{@y-y
z=2Q1uTeH8HOxKGQyV+*p8^c`h8oRZ`e&>&)JOAlD|MgkVYG=yBVAE28ebY*Kw|z=}
ztdsV<NKV%_tjJ&^d+oG0e>PQTU9Oz|InCm~e2V3Vy-QzCvzj>nu5`I-{%-fXt;tLG
z<xWqv{`;WnW!97PGwkd4#omugIch8OzrN@3$N8abe?=JuH5wb3eyJXqyozH9#}Ae-
z%;s}G2l}zPuwAs+n2_%&%*(Kw)1u?2;~f>g#fk;FtHai=dv$g7^snDKQ<T;poAR*c
znRCX9H6dPVH#SH=s?GdU({(mD^UXe~BXXajCx6#;O!<6r!uq=^W*ZzA|F*nV&HClx
zeWv^84wu>gi8hVDcl6rg{hCI#9G7An&U){hDcyW`X}Qg^?%dnY|90K<%wO)K_S@}O
zz33VHW5@4X{JME5aG%tXwa+JhKJu|p^7wJZna6uJ3u;c8eBkPv^}otwPoJw?Y^>0J
z$$t&E>Vo*C*Vk%4NaCN&?8~zIjpB_<4R&AO$;AZEcc^c5I3+63^}5u6qsuV)n8|#z
z+*=MQ)dzQE3dl}&ymoH#;Y@qkb9Pea?X2}zF{Cc@fA;>%%gg6g{?{!@wF*x;#Tw~$
zpULK}ZeaLr=0EHaatHoQR`}&Pt+8=yCi`T)rr-yUl_qmmiFw#H|CGE@J@cvejQ!Iz
zg})m8yt%h&>%%oNak;`@bYA4<ua#-vyMM!--k&`>_kVA$UA(5W@_*5u+H=P)F#lqC
z)c=U_x<JiMt^8+<W()Fd*S~c<XL)0`Pv!54Z~k-~HAy)!AwJ-{P1}6G?@d>(+8?xw
zcd!b$xoQjFr+sX<4f-~xpWi2Z&Aa(aqr%db3mg54k{{Z2K7Jl^iAB6tKJs(<xjB~C
z4!#xowl$nxx#aDywEW`tXFukDuNR+oxP1O6FLxG~1tm;B=Y5-+7b)hlpp4_pM~zqg
za#r4<J2dj0t6Gjdh>qFf&G#(*cjMWoo`0X6oo(KFtknP0rZ|~}emCw&+&+IXLee)*
zmG!f+?BQ$AZqx|=cJ>I3-2ZU9sg?agnZ+9Y<p%cMr@3zIl6-bPp?>k1T+aA!51-fO
z9h<89`=7M@{R`F|$!RV9>q=Y{CNq5XyBfdU=(KRkOrz-aA0ya5H&0PsXY}E2L&87l
zE5Ws%agNd2(!1C%%&U^FUdLZQ_d>#dmp^mQZ2hbDNk?<W{JDnTq$c+z{&jy+tbVd;
z*0m=tH@`1>Ab;rbca`^#m4xNWtR}@B{r2}-v|Vwu$mu7STT*Ph?3M4&Q(2!-w=MsM
zWn-y)^6w3Aa;N_3x1Z~gUzBIl(67q+dGqPUy}BOtroWfeZr(oqx4oUo;(a^W=g(>S
z`Aoerm0PR+<!j?zrlIVC_joy;?dQsVo=~Tj{N?S8Ex*;P3+B9kJHtnGed-(erv1Sd
z{OeTY*C*7K9lLR}?~BZ~_wt5GE*al%-~9PvKSzhdQ;v|-1FMU6OxeuwL}f$mxvj0?
zb>S7o@7A(h_e(lGJ7!MqpEDlnpCYEZwX%MWd&G9EYIlp#Md#vdp1o~<<J*%APIHva
zp0q~2Qp473^BMPV;`601KiCv*{om`CtB7RccHy$z8*_XYZ;*GMeY^6<lpPIrJog^C
zU3fjUxNoNSTepNCA0CRziXBO|_fl13nN)DM$n~UU^7@1Q&;NAhp0BxXbkx)Cs#>Mk
zzN2j~xu2Mog(=yd*m%oyLQ}KAaVPFevN!$<Yfj3pz9su6`uB5@fBU^7zj>}-Kh-kT
zZqg<@*5=;D8pdV2FGT;-{q}ra;0^QHi{1OTJ@{Mu#I#MsD?tBpc+NWCU)HG>_QkbJ
zr`=5dd-C=%o%^a@@@MQ`W}f<Mu=3!A^uT9xQ>z8)EadICJp6YkdfWH3n_OR}f4UYU
zJH@L1AKU9(W=Ach7TML&?ZtcIqFt_37H9pBY5wc(xp4mHX98urF9e>q+7o%(Wim&H
zLlcL_g82*Pu3Qw-({P^m>36+*MT~iFyV@9j-;J5#{N6DBg!rf1Go@#ka~>(zP!Ug&
zUOzL>Rq~CRO|{Jpg;#z?PYT7(v{`9}dPvwuU-0;2Z1=tE7VD=CA4C5;&f9vS`TTOl
z|ISx_FSzsV=5^zfpL6fmSf=eVP+PvY=#IB-O^xQYd2+|SmDWYitIpGS?yK7DHZSjZ
ze6N{H^evTZeK%Bc@;6r69)BB`c=PBq*7P&iFCW?@d4%uhTCb`}Wk)L=pG;P8j;!~d
zd3;h)t+V15rKI}O9$W9aZyyw{bUsc^-Itll&-6C8+e7`+j(J8mHkgRc)X3Jpw0F+=
z=8vkI;?Cb}RbH<g@m=h@iQU|do6cJPZU25x!(#hq&S&)p4OYZGFIs!eagO`-jqA%x
zZaFfxY|L~Hla+Qbnc(s2;g-Fw1%V2!LM<l_zw3PCyExa&KsglDfEEmJuurpgc^4wi
zn5|LRxP@WmYmpu8c9l1>XI^`(@u|CZpHqZnW{Lj-!>skMt9-9TH(mExyWK@)FMpAx
zYh3Mv?e6Px3nSAXt3K+!d*CMfr&C4~r?Y<k@5uFa>;Fv_@&>|ECtnBq&2PBH&bWDn
z*~WD5LWybF6WcBye(rs4<!X=F)06ynom87J<@L1lagU-hor@~swQE1EF`RpQWw+AG
z`VH9!AFv;)D9DtR*pQkZQnu#EKgIiLGTr6{djAgEnM85QpPH)vbPNBne@9Qn^x2$T
zZu*k(M%%U1wxTzx1$R%}vv*cEcjaA=-F9EL2NgY?x|1)jO#Xw-&vr41vs>bGX4aTL
zoU!r1vz13v4&Ta?cUO;pz2mV+wc?EZGv0^Kee&6NbJW`A8{5?nSe|<P%dBs1ua~Xa
zhK)x2%isRXUmldpdR1Nj^}_!`C*^#ygct=q7#Np#doi6_t<>RggJsR~_RlWNZ!ar&
zt(?8#_fCfB^?hA_KQ45YnD_o~u9aE1y``5~>ZEUlVEsDP`<uT0(|qLJe70wL#^aao
zt|mAi(LPZeeCefNda&VVlSzB4j30i;7A>|q)bsPjW8Ev(afjcf>^f?=S?T04wQc-o
zZT)KtF0BY$9F=}5W9K$bm6yAo?o{7hRHtIq@am+hi0SHPC&MYnIlhHI?p?C^a}M8@
zS-T2Dtqg9s>udj0ld&s#dbr~-vt`^;rzszEf+Ejbe%f69;^MyCM?P1sJ#01W=G`86
zZQkZ5>G$I{Jk)fS4l~{yvvb<p#cS5ochuC+%&y*fZQ}l|(eEC_=z1@gx9iJ0ocFV2
zk)&b5fd=u|omYxvS)O~`w>h}4^oZ8WM7iI`?`^ARiH_d=?sm}Alb73OMBh8g_i5wa
z{xZ$>6jy~#mQ$A|D|S8zQ4`!SkN?hw-cO1LTR*;3sJheA>+<b@!ltJa4vOz?+}Ymd
z!G1~I@w1Fo$%`m%F`XB(A$C5NHTPyp>s6cnT4?aLEs=Y_-(vNXClhaIwev=Vxi<GD
zZx*)ED@}Deu$ymgdCXUtC)*EiUoG>5xqDmA&7zF=_x677`+t9b{r~ePZy$@dHQaDf
zsY!;vI%<|>@iN}vLjFhBvNgTxTx~8rvk>q&ReE~*(z(L>c3tXbXZ*I1cXa{p$#tB5
zlWi|NlG)HFA#JVcrqQEsn~}fgwKZFL%ev65nLDCpzsRe){{G7P`2G4d+|KRduPcOp
zeNb@x<2m(U=8Q#C`~*Jpru;DYlJQ0R(>1SU##_FNP4Ig>XT!Zy6aB6zKM#I(IL7$k
z{_VH6<yOyJJ@1u5cv9S_<(uQ#Cp_Dcwfx)py)wf4i>^-H0~)zW5e{&$pWX4V+kt`U
zn(|bIX}wo7{a?;ilggNXf#FBEp=#c~a|$=A3k`P`<u5;@9n|KoaaiBep7rGXgntuX
zMCP{~5U%u5igo<eaPR2l%8E^lX16BlDdmdaxKPiUYjdexrc_C^{jS-R$HzR3S2{la
z7G-R^@Xh09JAV0No8zCkw(`z@!#nl9d*b}hkE`B1<9!i5Z;t!n3D#`(QEe}ozl9x|
z_qD@{z3zSCxqHWU?Ppmlf9Q+rHZ5-j&+BWACdC9D+cPDUf$2*8>wx~ZeJ@%V9-ZzG
zII~~qZ|(F*$!7Z>CDxDI>YeiMmnT2)ONwcDz3R)l|Jv7g+j^YiZ@6G7Cat<xFi6)x
z^YzR^4ejUO>J!RD4*prbD9wH5+q%>x*>*oHq~{9nDto)@KxlaB1Z~6e%D%^;5?n6}
zOx7;$xqRfGWXHbi(*OJ<JtJ6L7N~J(EQlB09ofn=xq+33^V$6~M{j(;dSel<N7es)
z#|LNQnt5{<6<V;*pU!<)q0H>?z1SO@j`>V@`9i@dQ!?lN&2_Q6jdz#4oMh>8!erZi
zzsEoHqyoi1Z#cYk`De!$TNNzt=Pa%5O30J9;LBYhG~?_c_umU%TiwVNY}~)m+;hVs
z<%2b^UvBH`-)zA1b<XFHie9o+Fa4DsR2kOfb!o}xym#2eI8E8|{yP<U>HK=Hke?^>
zYB*Fr>=KpV@o9+y<Ez=%1vfZ+{jKxgM>Zu{XuJB&Xcs&Fa_PkM^e^fYnEbDl{+<;7
z{Qy^F)051-wr{QVCP&WeS$jTWTmHeEiGFJ~vmZVuT(vgS+}5Xk%GzD!@9nPNbP&}(
zaLH=E&7nWa&*Bd!nVrs^d3%BfyJ7iTl}$XnUv4MAHwya}ndUsvUPfP9u_#+`<D%Io
ze{;9UrT+7OcG<J^#}={TZ0?)V-Mc^DzqeuSjVV>DEvNYDOer>G{n?iyYjAB@PNTKv
zg6yg?{|{oHJ(h<&*MHsl_R2!dry=Dvf3940yz0o?x$(UCrfc86@7CFW`rnU<sn*}E
zCtLlTC;j54=^@Pp`S-s+Voc!w;x$X-I1i7_u|LXxW*n;#E4F@qUHK;S)7YQyOW!(&
zgW3|Jf&mWuyUM1;tkq$Z@;qI9aL<f}hpI6u;a|SCC46x{TEh8^UyXlxc!F{6qvzBA
z)X(^7QT4RW<?%!7KkGLaT2*c>=e?HS|F?O<#(AIZ<iF;&+)KQ1r`tr)_`S{P>L-!+
z6HNE{MwVU;J%5ht+4a*C=bJuRpO%+=fc@3gmN|Pv6U=|Czbc*7`1PCEf%(SQH|CU;
zpN*RSUH{j$6;(>n2To1gtM_;Qf~@qsHQrTwrGDQ}IxjV;e_~wY@k`h3a%+O(GVgW0
z-PXT7eRi$RIjPFdxf;7|V>aJ=-u_EWC@%P+$-VIXQD0t6EHmEoZNZx3?k|nMy-mDo
zSzz1!=h!Bjo}H}0Ca&%ek}J~tl<&^@o6vaRfbcIdhZU!THng|8E@z3`-ZjmVlSxKd
zbSGci!M?{|vsWjtxGr~o({_^+PIHSTZohr_(<}0J_dnO;O{VKE3xu;yKJK1<{m#Wb
zm7nWse}DVCYy$78E$X+|AF{7bcxbY4v!ZO!ImgT?lar=$9WK>c7yaSPJ*~6ru3uXE
z>g+b%pT(9neO~Lo%!qerpTGL|mzT-1+D(47CyIYAICQgUN<P!;sz?8&Z{9Zg$A4hG
z>5lT96H34Rm7f2gsLgV}>pK4C6T4gIf4fxt#Q9YA!H@edKTI!rX6y9o?3ukAYb{=O
z)c9PSf5`S?V@ciy_SA{~bF!};TrxM??Z?mZZ!dM%RcTgUb(DON@YAxszx}z<_j=8V
zfotybN&dcf@|R?mqxf67)0vOzYB(w@=QscOrTH=_$ENT7w*^YqQ=A#sw$I@$&Au<b
z^2OmjF??BbIXWCFK!fD{OLbIx7{m{UYF;`PBT#?vXhHV0^NJk1(=?ABxyBM#Ubk-o
z@29(sZ;y*iI=P+q_qER{2FZGTC%?{0+n#s#+2+6TE5BImb=R9|ntjc6%6jpW&lQh8
zy`d$sW_z2N{EY0*m<um=PMLr7NxsX2H%U&Cx6KnOXR^tz(G}S5V{osnr@{3>gWa#-
z4aGrjcCO;R<$()rnBFA6o>)@)`r6v{FK%v5Z+3{z+8@nt?_Gard*X{2=XvVS4JD6X
zJ^QixvQ6Jj%Nch1=4m&dlr67OHH}ET(!O8<Yp9U@#{+Ll<ldMz-rN`{KFvnwK#fez
z?hXF##drA5l-_ZB>#lpFeSNI;EA^_TwWkZx!|t=sn`N54ZU6a*3oG{s7vJULIpa8?
z_(0pW%GNJ(C%<)nmD=`t-PM<(vu~7(?&O;ml~7^V+533K_TJ=kottc(&Oi9ZA{@V1
zZ<E>F(<%I2%>FCczwTxW^WY5XyZ-XU#i`pK{&p<Uyv#jiDRcgkn*q9FH{#Vh;@W)9
zPgHjAdwFs3@i#rCozX3?SBQqkY>c0<T`=JnCqrLa9mi+;!&ja&Uih?f!OsQ-gSB;P
zJIcKTZstgyN-I6~{=@h4H*XjHeXiJiSNe<dKe3Yc3u|PHPr7dHOD>ImH-FB(E55&*
z_J3<w&HwUTP41Q}&QsVYR5lo`>piD1ZLMzn|AyJ6VeiY-X4ucId?NhyVBnOWI@fzX
zT>fKyIrRLKP<CB!-f8vOS65wKxwq=;ugaUc|9>C<_=)lPqr5rY{l$BBu)Uc3#FBs8
z^BD!Z;{VKF?k%4cd+xvD9QL1be%HE#^|F)a9RJf_@IyQG_KLd2VlECWLaqxU7kMo{
z)X^Z_Si0jvB(r|?CbkE^V*X4sdoeRT|NFo5zR~*`PF?dp@zc~&@5cKJyI%`bmHTo}
zI36_dO7FRXybAe8ZQnhwbK8BAUCZeCI4NeI&CY{`waf}He4n|TdSldcf$e9F&hx51
zOK!XOFDI)%-8wJ++YLt>K?Vi~22U5qkhB)oRwmyQx1?E?Z<zm1`M#mb{5XxqPh8#{
z^4E`s9h3_>(K2=J*S?yj<ciGxa~FD!-I!o&(0u=+jBvcs{w*@=CiP!kEq;Ek^>*%`
zx7uIK({tZ<YH<#WQ0ZN+$x>gt@7Bb-?wb0mB5TIB?5kov_p>iAJA2Ww>C!c6@ps_|
zPE9)fMC8iSKIu0}cTzNui`Zq{+j)WgZ1GK(^Lh>6gY;f+{litceuB5&b*q%?b8M@>
zRp#tAy8caN&EmDSoY!Zpjy=tE{<z27gkK_a!iulD|6}@+J7ed}qa~aQw{Gt{XM64A
zTl*V!b8P16PILcOR<cj!Z8vW=zudgNwyXZL80stA&;LEEzv4uV0{_havRBMcr89n9
z$KwB9?SA{o>-W6O!rV8leNo3b%U^Nll?__k#U`EH%4`32j~%c5{_|V+-mp5g%1VQk
zbK2#X4n;*1_*BYj4%YaW*tI7<VBcSsv+#OX3jd8RKbii+7YpCjOtI2Cr#jzW<gAJ}
z!`$r_a^IKitDLsS{OqkY`;`=!I29hmtW;TWMyrWKNA*DKTGq^$8&o2Te@Cpm+#4gX
zBxb_#i_EW|I&Cs>*sk`znfv6ETWxQ}ckH}-S#`$z%y#K}C;!~%wf;YSr`-voe|$PB
z$9t!GzppXg8m(CUGS?(X?D6}ZH|(twstnggKm7UA?q_fq_p|qYJDJ%(8-L!|u4nUM
zV`1F>Gcob6Pk-3JE@#H#=<7SBn)7&&|Fiw7wbAPi1;?-PmU0jH-&FK;Wz8bh2}fRs
zMI5o%e(&+GEyB;E;xAp<@aEbs+1=0BIiD@Jycqnu>f6yRU;a0IKHymNZ7px|HgAXB
z-bX*A>plI^n{8lk%>U^xhqd|yvGjHP8}2a2K2IoO*expF=;}W|q3%}Ujy;F#EE%j_
zs}C+Ky;R)SIQ62n@?ZP=b8K`nD#G@?ZM~L!|6W-!-?Qbpi?R<MU%c^iP*v=d;@{i2
zzV(-!W&VH9@p-u3!9Qng-qdwJEVW8FF1M^~*_~9*XZ^C)+cXbe-d~`zX3|Ul15c$t
zd_LK*>2$}!<yIQa9KZL5Pe`bXQZ22yGyUItgLu1+Hy<7zep_+Fz9WZkruT>QmNVvW
zJ8bzy^mO&%Bk#&hIvY4tdK#F1ao%32<!8fLAo#bhZRytzEsKi`HY*l5^!47@c0I8E
zby4x`!#>JV+}Bn=jd-JbVyo?atD1KW@2Y-oyR3XL?klfN;(FU}=Xe(#@Vy<o#L!Ww
z_xJVY8#>Kr?ABFo@Sirpuj%yib-QMMGBeXRUuCwe;KFtVqpQN(dD<gCSO}~${XL<1
zQ-A95Tjt{bBG$>CvAj2>D$%6U`uhT%>HVkFEgDtgwl__;+pqHc%JDDz-W}Qc{PCZl
zTaUaL*6HtzJ0F~{Z1-kH_=5(!GX9b+xqCmKUo7)}_p8*?m;Y_-U&wbNF8+o6^Ea<@
z?(d!8W181|c=88{$W`y(Oy9oo;{D@%Io9kKZp-g{%5*|k+39EAf||<v9kFgZ4#=<D
zYxZp$Z|iqw#*G1HAHTgnIOXcfa=W^}M{FnaHclzGSgUaEV&u!>oEwL=pSK%3zIi@r
zrb%Xy{i)xpV{UV;U3{i&uEx_|&#R7_2R6((VOdkIc&~EXU(@ry_N=aKUgCSNS5jJ{
z>Kj8}_cF=VOu9kSKF;}kokd7b;fQ5|^M?{$g+;zf3QVD14vc@b?iLp9uHq;#oacYx
zgGY9R*ymZ@d;Ocw9J{zBq2{D;*}X$248onKd~B$(>bd@x_qO=c+w;=@e*IB&`@%wJ
z;jf0_r>^wX<|H53?PuOzD4afX854)8yvNfSTkcJ4KlIr5`rL^om3^lrmt0Q#lzr**
zQ!V-DPUTgv;$znRnc{E4GO6OO)>M(_6KzdwH%z&Aed(_W3AOjFPQB!H>3f}arF$(?
zQOT>ylOI3Ye)}(Sp)AlaCw8*cv#wKV92P(4EEGTOdMe*`gMZ>a6&3dNho*fMDxYgr
zbZ3jkqAM#;d}Eva@u~Ga6HV0zyL)_V{)n6Hm5b6zUh!l8->z<x2^RV%Y=fECa;<Mz
z`E^ox+Nrt~i*2izetrAa^8QJQ-Q@I1uNRnW&M&q-;JidX=HX>a)d2q5H*A#`w)=dW
za&TXDdT#OaO*+XMU)vwQX3Y6(d);iUFr(m#I3}(a;qUiNety;YflpH#Yx}K@i#|*=
zsy-F}fqC;y*Jp?R=r!JR-+X=gk9w1`=R0mJV4VHk(d8BMcE7!kH>S(Kv1#VF`X|pj
z!G3bz1Ll2eV{5urzKL5`w^4sh`o)6qy-uHWqqc0QjoG~Si{@{aym?jyalhEwxE`*(
zl{+V0f5Nw>e%5dEHQgO8&gbrVsC;VT^iLe~9fH<JD^A$e{P<SYkxZ`n2VDFo2giJs
zIJF_8-|O3E-uat0FMi8@adX_Ig+4bnncY_IJ2r=@p>LbEVx6(fK3?tQoSPf^!gt+z
zJZqcG+wLT1cdPv?JLS#Ue;!!hz5mBA_fry5o8Rnl@0YtfsdWE2P-gh&^Jw3*drn4$
zci6mFv*)asyQtJ{+y5y${a0=F{kF{Ezhzh`d+LOy<-E$TZ9bZvG(YFnD<#VNqS(je
zSl+$gPnari{e6F(b(?kmqCBaWYgAYT1sWqjo&0ON-Oq&@GfIhEGybomcdVW-sL!(a
z*_)%T`y<xROZA!P{=#<c$Lq&#6u-6H*550=v#0p<zmHX}5^}j7>J#MVSr$Jl|M89C
zrOTyLr)RC7RbO3MQDy&>*VN$3a)0^iv%6m9&9J$lyZF%0O)Vwd+P8~8e|cym{dM^~
zhU2qYzkOf4{nEM*yCy&R(y;zsKm+T!-0b!{aYvt*Gz6)It314}yI%JA&!qe%v9Fiv
zELC9H)An$I?YB^Y$8tt<gT6*2g!WDR&CJa%zDIw@i=dOT?Yz>@K0gdUp0h~2eR*jO
z$KN@(vsSNN<G%WHq4WB?du%`aba>h(qc6QX;9&dF8s?X3;&T-?#gwmg|B>sMQkzou
z=cD`Ujqh$rKKD8$?bV+mKfktA<GIEqwspUze3jqg?!NO?>dDo7QDP_5Pygfn*8e$?
z?{{*Z!ON<ZX<xl7#eVc1;ggZhes(h^qjcqQSLWL?+4{k5)za~xo}v?n$l4a6AU{!O
zmQ!90-Ali+ShvNgHO60mnzX;Qd-9WwEo}cL>sj$_O52_tP+1e7`svBZ*~<2s{pWIj
z+-A4D-d4NUvg9pq+hU!>)qQQ(h0nZC{JVJN>`7HOCG>NiKD;d~XXO|&&-uj}g{G@|
zhYL5&FtTxQNH^%c+0~ogD=++EVZ4Y<rD%QCjk3hAR%Y?f|LhXD-=F@|=bZWVc`ID+
z9(uOw#{1rc^NS7%b%-*4i=DJSdfyuP$8!qb@xGfKx%OpX`?*g##TmAbj6W}bcdO;I
zLUHK9)F;oC_A?znp~%X5*WB#zH>Vu-UE7`4dB(=hz53jLXS%3$@AQX~zf3oHPuJ_-
zkp1@IeamSTvui$mVfvT4FPHUNea3wUtqpgpg^!;xmf^15!z&VS<lQz_GxHlQ`ejPC
z*AkpX*DP2wd)F?{%5(#^>XV0E65UG!*lH@Ke7e?YJAuFS(Ty7?t}3L?@VaY!F;suS
zp3+UlzdEWNb_;<@42DLB-hEs@mg=}J$l@#zl)JquboJ({udlvtPF9SWf3JSVtIW4E
zd=)-UXYx$txR_x0znJaITet2K=G)aND=PFSP2YR6faSCD16$$S+du!0dKO<Lt=s=7
zYu(Kc7mhK#U+90wWzUHTZVPYo9#;5$rHwgj-mUZZ)HZ(hpCZ3#`OmpM$7g-M@x|=j
z@*jJ@_I(UqJ4fvKRiC2&&8pMN6Y8v9R($LK{IMr)-%9CiZ*NQfKc&9l>qeCcH(rNv
zZeg}Rp|98<6}FXq%f^{2*sm89vQ@smAuzqLC-!{&^hMKxzujD6v{?3|&F?d&3-aY<
z&zb);s5hLyG3a{mws6hIHP3Xtw@!7w|MHH*f96{Z_n&W=d?hsY_t)3o-v@CY-&g#o
zXV0qzK?`@k{5|Kh{*Kg#DzZy+)!kKen3Mvn8r7E0p1>+7z$kT?+p}IV*FX8ocDaK!
z%`dJfIR87m;zV@wtW6fZx80dHMl?S)%GoEr?fjG7N+<2s>@3++TRqqEjg8Zm=OPTP
z*ZTv%o_eJANc+w03)Y2m_8r!I&fmS1JL!&xb+Jso+bhY*33a#ju9|oFvu%($*G4|u
z)ZGUxr#NsuFVN1p70obfRky>X_0e|K$zA=EN>)v4cx@>#yD6wXeC_+00-DEH&-{Nl
z=9$%VV;k3n4Rs51f5!B0+H2qMGq+vz)bosMRo5SDZz@Xr8TxU*%;xe-)2b9y++!@;
zr{um&n-s(@s^s|lTIK%(N0;BzeB$=Ztkmknl7*>)D~dq%%TK;3zo#l6IC{-)##g&c
zmA!M#mnNnq@2(GMazD!S=;pG;e8<k6IJe=%|E7P3)A;7Baj$)`-gS1o$&6VO{UUZ0
zJUrsq%=T5ye))Sr5zXk6v)Au<)Ft}i{MF?vs<m8ed8QtEtJNp^+}u^i*<$^nHw%J{
zrspLx&51AN(fk(v>~}%j_T+fmxCrG7VQ)7(%t%rV*>Lat!^|tCek-o8mH8(gdvxc6
zUuAKDvxPcL8J{Qk#&{jxx+$yne2Ryql4RepPYE3|uM-|vJ>|XiIQw4iPosr?oxAS!
zoZ9#LtKuuOe7hs5vFHE&*;M-a+BHL^H7m2uKVEXh(Y0*J>&k@hhIU{51kL~Lp1Eyz
zX%$y(#zKdg-X1J23MEWjFWUP;*e1I)aNlFPWWL06$#jqY2|5=lG@i!vCS2oN;{EdN
zA6Jg2Ww{evuQK?HAJsGvS`wHxhvVPPb~AgwbfIrD_R}6WrySn!TSva8I8|z!_1ACD
z&dq&&#oB)9kL10L8DfjJy?<-^d@Aqigyimj$1k67$a(W>rM4+M(>FGjHT)Z^CWf4P
z{aDt$M`Gh7=W9Z1Z5XdxZF{vYTCQX5@zu+2DLyF9?dO)g{@GlwF8#M)s=^QTb=lYC
z3TK8b)xBlW-&E`%Z|(Q?qs>pTDA}pC%O7)}3;Y?l;?2|>+pO-dFW~zmRuEDez-VE3
z<H?@&mf}j;+KIRKg$myOy<g&u{!Rs^P*;cK7vWdmP1>9&^q}dR>+Z6*W|}FN?K(m;
zs!!a0W__#p?c28*_abdB{Fp6vMg7Ni>p%Gq+McUCk73eE*saX_%v_==ef<Qv9V}-o
z*U#{;&6a2CE9xrs59*t&sUq$7GAx|qP5p0&2k{r~PfSTZkli(dVUE1CO~nUBn}BM`
zf9D!2Z>N8LcJ{WUxwGUk^+%6R{i)}?a-{ThYI^W{jRo(S*8EC+9#SY6wj$~N>)8B@
zi(FIWSsv}$HY4Rbliu71pIASieZJy$>DL$;v1!E<dVQvt9r!d+vVUUYshu+Ub$3qH
z$gdL@i_t9&k`2*1nDO=PY*s(v<89fuPo1<o^t2~`$1k-?K><c~CObwo_Rm71jS<2T
zLC+d$4JGc237@znSK7~WJ<g>uzS561!aprzj{T*KofEf&hTU}f*?qTHqUrg=z{PH*
zZ|?2=eJ7yjm-NS%j?Z@S$L#I?B~kQsd85toQ@KkH-<;lVaw8&z)k?Z}bBS=0x|rbA
zXA?L+T)f|ZGv57ht<0afw<TVz6`iDQ6fDPNT70+Yz{^{+uOHmvlI(Hdt4v3*pw?YI
zu2$B$=4*6?J^RDfrGJ~d>{(ymtqEd3nYNzWd*P)0t8GysxxUwn53h9J|Jbf`s>Sb;
z{CACY?ZMky9?Z~wF0hH`tc%jC1xhA!UaP(8Uvd6tX!nmbXF-j4rvpFJc6*&tHFsSg
z#ks@m#I?R16Z{%YrQ{o#e`W5MJpSG?Z`!tpi<8|i?Re|>YQjCSYcjK~&&{#C-1cDO
zynCXvHC~@LxhMY6KbT!T?0KTgYYut0oCgoQRbA_kfBdTWW=_7<Ma#zIH=dW~YezOj
zoszzGe!{$EXXe_Tdiy79le=6HXTQVQ*zJd$)x9|tAC&MF=x#Q*ICgx=oAt+!^iR68
zfLAj0!)f&op(~i(7v@@87MyXBeG#Xger)Ob5-al)d514;UZcew{z>fP<2|l1rvh5T
z64cMFYCcuhV=@18#fzH#!dpVjwx}LHu*+@<PgY!!k^)nz+Jc6<nT^`kf+yS?*sg77
zk^h`~Zfo83812Im<|!v8_`bOLuB!RT*NxFk_19*9boA!AezEbPm0!Y7iHMe;2Ohmy
z=-eK6b9?^%%)}2LHy->K>lC?my4!;WRi0VrW|?M}m;8G;IbBh<I^e_S^Y-qwlOs;F
z9=QF$Y;L<^`r*fo2fR*m-D~L$_XwUAJNHlhl$&{6?@DxDa=(auxni>JKQ8S#%)j0|
zUS*-SnLB#*|Lm{3LRbHeewycT;IYhxhn%|ukJsJ2Fzeb6fdzMWm{zU-^+N1&;{Uv(
zr7LGdeEa5PTQs-1`pN#}GPcCO&n@n-{a)RYs(-pKc!A{IyKen*cQ-|E&kN)?pY$~C
zWxb_eUEAWz0nKXX_g*{uq%J~JZUvuKYg}YW?YW=1i$3)%)Ky;XzvxqBnX3cKC*cA~
zeuMp@xq^&>8Z#Mqt(VKaJF(vPL2dUW<8z4(8)d(r+_>w3R+UF3>lfo*qnP8b@5Gcm
zzRmVJF+W~v<@U*Sr>1<2Yztk@$}KkM?PBRoehX*snG^YN_vd{lGBvVQ^L5wE->P-3
zzVh%x$G+CxwR2h?a=o}&@yqnPz;55!X2qKS59)D-{r+8W?n+|(Pqy$?l{z<kSWGvb
zDGdF5eeJ9p7qwF2nC38F{*-rSBV*;N<HwFaxv?blAIrBd;ks*1{`<5sR-++2Bib(g
z+o|n}Enk1PB`7cF>?>a0V7Dgv|BuK0)lW>s{!iVjkw16!>?uD3tk%dpUo~B`pZBWc
zOoyaxX9^$IymuG;*0(_-@K)c2+?isGf+t)Z82`qEZ1H2!az0SC#mblEUVnKIhu)i%
z>Bmm>=x)35=<<VS+}^jg^Kv}+*Ua!{=IV93UfsH3Kj{m@$|?OnrpPSOc~iPztvvgr
zsIV6z7F#09LSOz*s4RFHb}D;e=<2Y$A8xM>S2nl#=5~6)r>dBrcdEX;FqBR+JJNi5
z3-=zb+AI1UYY*fvN|8DozMP?O*}7@kP7c@Cb|r)_GgSI8X|?{9^|3LfD)AE>)NgqP
z-o5;*WYvs_1GnqNZcHl{K7KlFO8)0L(%$heuiPs?+4uTqwB9E*@5uAzS38?+=1#C%
zvS<3wA5JsZC;y*jbfoK*g8YZnONsyMo=v=JCL{d1@&#+)%3Z(rE3{7P;kcsJxI)T)
z>#5+UVvPArF+1!R82;G0xbgGF=zD?77g&7zw&3H(*G*2m=5~Tt+1uV;jjs76{c^@K
z-`RP*i+_8bdvE{vlirPpbqimo#(tiYo%g1@RO7wox~kSE$9p6%%j_2YyUaoH|EJv7
zS65#@pJRQt`2XyiaXhb|ROLJ`UOwxZ^;eE3HzGO<W4G%pZMbpcuDiS~>zCRCp&sp4
zq1V@PZ4BS`QQ?5)2hQtDR_fggIR95@Z*Oc#*U6;y&+a*R8#g}RrSo6yul*X!x2@l9
z<h@VKce0bUTDj-c$49>=+&xozKK*jJt?l9OpLOCF=xo1JblO~F^=tPA{^t?*^a9un
zg>Pl8Ub}9|p8OrVj@oTl$hN-ts`u&Dd|s0~-u^M|<6hqXzsM(I`K<0kdK2$5Csse-
z@b=U^@FFOU1@V^OPDQd5304?gKUMR3hsN#WyM8^p{chJiroAtEO0F(m_^D%cUw_U2
ze}C047ubs36+U@ca|OTl?whf<)$a?Gs{Oce==;GM<^wO4kG6iAX;=Ge<Bc_|6w5C?
zP5f_vdeik@{?xof5xeV;waqo(YGTQLvhw%xc725(+nl~L`2U^M{_fM6@T`9<C3ioi
ztDj8~D6nD=a^0tW^%+<9fx}n!#!tvom9?$;@gek(QH*NYp7oJGPq|k=oK$oB)7s^^
zyBZe0i#xa7*3@p#=h?nDHg7k*elq=f>E9b0lV?ZWz7%@i)$Z!W=b7TNHJcos=}y_&
z+8rm8vUX32jn&lT13#r1ru?orRpY_=G(a|lX^%$e&Gn@>&PS_@oY?((L*n6>{psNc
zVivny$y|7phbwJKFQ~Lu4%occ@|0VIWM_kPV`0bqcgrrVP~V%QX5ezR!hJ8>qsz;D
zcTaMAx{lXOB*O9VR=&A=Dlbpi823@n_Hn&adSauF^v1t(m;6rr**77kFZY{Q_6>PA
zUK<lmJAaj%$NT5DDLdBX?qf_yz1P3R!hI*x`bE#b?y70Y4oGON;QID#hc$y<^v+%F
z=c-=ZYr1!F-L6ob{PoG!Ur#h%&b*?%K4|@&SAp-WFWf&9+W*%`dTxKrSC#lerq11Y
zp>s06S_=HIil}wvezI{cv)}!f3;XUgn_bWNa*lI~Go#`y*1H?0^RdnAd@=L$^YigX
zewjzgoi9*$ymos@NPdu5!P=bJ8vpforp-NU`udrH(a~vJ4f{TB_}a!>8t!ub-nBO&
zE@?B*{<zeYy(Bi;+PM7Hg-tyRugvchR{wT<T5z@f^tlYLbuRq5%~14J>BrSZqqwtO
z+^@o`^b)v(mwx7&Wh>jSR`^EZws!NYloNN)SpH_pOgpw~LHDZWrb(-M=FI*4dsoU?
z!!0$jv2*XPmwCEqy8pDtpUPRjd_TQC_O+`6%c{u@RWHJy*G<08sd`~o>FbXsHgn_r
zw;t1a85g(scc^B>jtk$9^__oR%P*Q)Gq3gT`zEzh@>?GM?{KeNT+#7TWX|#D>NbD2
z6}rBC_I}>Q#qQg`Tr`($`uSS;Oubz6{tsIP*=_r_SF&jMJ&K5Y@R<Lp{VAz!cDt^w
zU|zn5{|?twcE9U~tv)pKzy8?%C*Vt;cFOhx+m`3v7rU{}*HC4`h1X#`p2u&gUVoji
zhWqiWJ6+oAewch+^ZB;xm8t2|t8|_2zq&1W(=PdTRl<8OsT0!S>je({o%ic2<LUlw
z2ik6a^8Dc+xqeyCTQA-2y@H)<cYE0JuhMCVE!f1a!^-+8=g55K8};jCBc&n^x9xSj
zzW-obMwrd9orcG+nxt-3bY1`94!if}#dBgk^V{#9-Wd`3;b+#VKUs!5-@JWsbH+<M
zekQ4ve5aO4uK%w(=kxxDHWu5jTuMlm?$ckteYW@6+mD2w)bqZSycE9Vx<|4{tk+iE
zT0wzEw_cG8*8>%p43#cyPCp;Hqqudocg&LThbw<yHi_{sy!y0hm(5GFFYP;DT}s$`
zouhm2zUNnz=WSy7#SpnU?d-mSui}-@rQb1Bu5nLJJ<d?%?V53=mrHB5F8l2J=Vllt
z+x$NL)7eu-T3z5wJ+t)el-p~M{by$5shIsZzhnLTf*oRg(Z61WPnJuql?(eETkE!7
z_2v44s%aqwKGA*a4|7V?cGSpUuetQ;$BWMs^wzGcY~@h-vMW?^R_N@tmrFNfdCxrl
z5xlDY@&%jO-0PN|`@{ToHSgrdUjmNEy<1!?oV&ex!^J%bYB?@xsh0vz+;@sTuzQ}~
zG=J6Y!TYW~`F~}CqVt^l_q>1m8tm82cd_eTyY<rRrgJ;n&SqX*baY12r!DdKT&~@l
z^LggFCsoz+`WL+{I3weB^PiuVH&4T#H_~?B)Ve;m^iL1E_B)38)03S>FZ24o+9xEt
zS6TM&e$=HMR#0{zxN(oT@t1R%Z<1Gw$1LA`;r{7R&(aCn8$X>|{w}iS{Lj~x{Clhw
zm%a;}|1@U9uZ=mv$3J#0u`iH|a^KYL@q5BG<x+*n^!>kY{+n@iXKJyRWTyiYr_04?
z)5aMgDuNpFj8%~__QlV9c7L#peK2ABgWGdsWX>-WyxITsdBizu8}8fFmWQZM(sRD{
z^O&mZ6Sg-Z+&9E;&*S}mV4|}7HqCFRjLetZPS<ApAz$SnU)Gzs#>OxCbR2(O`~Ulb
zTjCGxsz3Z}dCvTdE43$nsZX%hsE(fS|Ha=~e}8M5t;@T&=O-^{rGeV~d3Qg2W>{c+
zTmRU6+s`LMUsu^VnDr=pI%x3nK@?lbwC2UU$y>Bf%K1!9zBPHzyiO(MzE<H+vfNKB
z)u+BcXjgeSD?egyGp{t?aXSXf&eF>f+stjv)N>DiOf7!TIlFYqL&JRLpfwteEOFbl
zPHnzrwA`*>7hhQPPo`hh++T0JPuv*j@N;R>iRgr{J|+DNWero_ZoMvdcWd_bJ^Aw^
z3nnu>)r`4)-myG*`W~NYHFoJ?Mf&;IYfh{3PcE%ge#jb8miR+f`kB&)Bc^%mO+Wb)
z4}aG^cKi32m!D%N@Z97-eBybh!ls!<FK$Hdy!I__I{zC!uilgMH76BIR_=bjeS1Os
z;`n#J|4*E9z3=+eBCGHORjXKwd*6@OS0|LQf8LXCxcTg@()0z!6ShR%(mDP1`MJ5j
z&2JrHXMH;L+Sj?a&G%cd{hqWvSY7UkrqknS_g<;3v05JQA2q#F5RZB~eQR>Xoa}8f
z!oD8gVmo;)pSSOjIV{uce#!2?@~?Bx=dGSU^V7Fudf(IiC*~jgZM;q1XYTJ~9fHc+
zUV_>+GtIW>FewT2IPBDaad6M1DI8Y}7_$!)UX<f$nq6y9P`D+0&HROqKbXtrCE0OW
zo8|r1nHHYBPwf9&rrqkN@5#?SbggHaZggDS8Fwl9`Gt=yyZ11C?Q>lB_RY=BZ*v>D
zKi}NOf70+<&ib0$#cPkp|BjgRIeY)koYeKk^F70tUN1Jj*|Ff?%0K(H_v&TWvHsu7
z^ee4>&zkA3_EL_unwO<@_B;I4Igs`HrbRUWKVRJ$=l_dF`aMZ`%ozM{vgYsIQ;IFG
zJ1yF*yvr=au{=ChzVg#%xfzZ3916GgzYTLOS>yMS>&5KYH|D8n{1>;S-wbQD?d6l=
z;IvM@sXf=>(z@uS!YggLuW+xse$d77QB;Wgha*-VcU}e?d<j#Eb-kTtuuUyFS?K!m
z&NKT})}GwPJ2T&@;BuAawv?Ndhwcg8Qd@p;;{*G1r$U!7%)jdSE$!ysFH_XE-TMEZ
zYv+8az76t5>5J0&Bj%{zxaB<KS6PA~vrUdfd;R-~_xX;d6z96HH_zR(*z#G`rawDm
z>vuj`v)88f*O$K&H?niE-rsV1sr)gkn%Rx>!zb_G>O4pNOPJe9Ij)`q*G}u~KlG{O
zTK(}F)@Nn$m*;KKKX`ghu40PS!Pj<7z3$UrM+-fvl>PU&?Wf!iu?nZUV5>68)pCtf
z1-2wRluqE@`03Q9`gtmm$JfuTDRNt{fBeJ78yn2m$R*Az@9?U6y8U^Kgv%zs*wpzP
z&u$;i?KTyeJ0Uv%-kwTjL7UYpHh}j0N(lrw>}M2OE6{jKIOF!Vw{P!UnS0Fj-SmC;
z7G&=Y?n{o#S1R6FxAZs@Z-{YK-1~cb>vfjp*>Yx-*mT|bcr?X$TYSSgrekSxQ>4x<
zteaeWMbzwi;IzB1!r7uLEIK60#91e5yS8n*>AwEW)OUZqHa6EKe_4AlWxf8iq*Ym^
z4>R($Z}^_?o!7dfLwdo-J2Cy=udL@XmDuZ8HRJJ<6FV$@YCpxU4qMx0C(|?g{-^Xv
zCeK}Yy3w0%{dTt%{8?(y8S?O(`m4>sGv7arwkvu2a0~C_?aHV3rG0uC>u&J>XN~ma
zZE|(TKbk!+jQM?UX-@y-eF^`4lJ{<%drd9Z!%AT0+~C(gUfbUFv-|cz^+St3^NH)#
zD=bUQm2F$*&OiCP@Y(!HKd-OZoOkcF(e0LRoAw^vk(IDqN$5y>_J@})&+g@aUYIS*
z{U$f~^@J@~E`PD<xP3y-aluEkXUiXZzfcd~#{XvW(IuBpysrIJ^0uVN(DCNRIqUP&
zZtH%TUlYPE$`tZ5m$~rZyUx98-`=Zf+&gdhRlZO6cU-&ekF8d@dd1Z%_SwC*y1X$*
z`I+d<52xK23Ti9L)v6YIepB0^CI}j1@|8(Z)nZZ#P-FVG%k;3n%)z5S<5N#vGM&vB
zQ}UjBm5b#uwyCC;QYzoPKEAJX{Z{;Gqa5$Is*Sysc74+8{cn~{>E1i#O*3QZK0b}`
zfHS88JR1I1bHy<2ofUhcZ<}eBi^0FN2)n0;l}gv#J-IP;?{i_>i@_W9=RA^F@p^f9
z?&|*+yl<7R{`K9%Q&r=1=>`@4<P~R1Qw)<=$oty<t}iU+pRZ<YGVSY|H9I?B@3EEH
zxKJa1>G4;|XXLj&y|OEIhIr0;QD(N={S$xIf?6|MV&z=FFMIQK-T#mG@4d5_w<*?b
zS8J;F^1Zr6LMtB~tkLFweyl#DS;nnW+iDG)jo;SotTB?mPX)iL4@z5Z-lePmC+C#i
zp1b!p6r7AMoxr{J)9Fq1Z<H^ZPnl(W{P?FOi#`8Z`sF44bAR?ttdBQ$Yv9Un-dDEs
zf3Vu?+GZ0WwO!vZer30VuTX%)ezo%5T(P_?68yK@0xain-<f0av)jJ>l0xAt-_tWT
z_%Hb0nQgh_z<M{Uh7!4#PL~>0uE*(_rM)?Q$Kq!8E?4zDi+vheB25li|8Er-PW&#!
zb?|P)Y=gEMm77&DqP58?;f@x|)-1m#yK|drrtD!ppG7uzABU)YyBTj`p5Hs!|I^X=
z4wKeJ{}Wjizd7dm!B^^6H?Z)?eq+woEwJ4D@Y<<02dDq!*;?Fne8!!rg*&>6THofJ
zo1UB@UcL3I<g`uJX7^U6Ogvd%X!&V-;nS0^cN9IHzTRicPrbDIn*!dcGhd|EGpE+w
zGd2EmXPUWA)$Ug-`HED-%6{H2w%HT-E#~y}h1V~{mF<~+-u0;p(@Dhz4RuA|mU>Nc
zU^20||8P;h<NZx0+qxBx^ruUN9jxrxeTDs=o<^E|*V`X^1a?0+;uo>Vzr5`1^uQkz
zPpkdD9yeVl+JB*s{DY5@Cp9}{rzED?J&k&Ief|CYAK%;D|C8Y%cjn)VXRG6NtELp1
z%vsmny#I$`->)Yo&l=C2wfLbU-zDsEs&sXQ=Va}`bFUMGG>iCrmc)qd*z(QYRlVj%
zU&6n8ETZx2S11dn`AN?2yHMkJ`AMzctHesjoi)<A5ngf}B?tXntJY0^FHlpQ^?lLf
z+Oy9X|5<!`J+t3^=e5hvq@Dc#u6uey|LAF}xo5teSg-H=KIiSK<yI%AM*Mto)4a6A
zX;X2X+s~rE@qSOT?=RTk*Bt0;_N4E;NcZ;68ky;R93hh$n0`%NvVM=N0t2JeetxAg
z4e|S3Cf_dWP5Lh}jo**;`Q_Ej=Q9u7Xs`M&5}{~waN(1`jseBjntAQj*{AY5u2cW{
zSCPfK(RafA=N#oqtww8{9`q=SJ&D;lebe1|C$sRPH5FfVG!@T#t%&MBus>Akaml<V
z|FurL|GuW4X+7)sWQU-2(I1yc?+q8-!RHpg!sz*dtw-+p+?oHScIM`F=lk}k3+cRb
zFu4Efwu*nVX7<k8f!&n>MS`WVC*R(>;$F?K^L?XJU3l>vK8^2<j`PANez#QlJ)yu=
z?bE*rf6W)h%nW{}`J{AZcAZT{Mxyik1@C1xJGz%n(Eea_@-pYidu;X%j|-}1Zi<=3
z`?L1Yp@mC+>it|K{zFl2lNrm*^GiN{u3h1|{28Z3yiC@-84Mi`tQ--GdvfYex?XBK
zqw(5hUg?ti4-em5vP;O=UN|~z+9sbTrLuPM&t^$hF~^qHJS{wLH!IcL?3%aMr_P#v
zN|XJbNM3($Jmu7Zd&fRh1sv=R_BPs|eq}}ATJKV&bHB>YJiKpMAmzt($Af>h&y&o@
z?Y9gq)OBWW61Hc0bAL(9_DAg7dE^S`O?zt<(e@}rg}Z6*`H6+q5&Pov*iU@cv@_dh
zeeluw({syrepWWfzP|CZ#^%f4XVv^wnP2%r?(jd}x4Gu8PG8?}Q}A}`&G;w9!j*B4
zPA>?t{j`nU;M;-M?LoOaUrl~4|8t%TyEM~@(Cs3Xed53GUAB+Oy<qmX;a=;yDz)`i
zC)%SbODx#$En5C>-J9E;Pftv&dGpXQ{ZsFkvkZOL`E5^sp0|A76_*9eKt~u{-W}h%
zUX3ZH!9MryuC1o8<g}*WfAZDR+^c%h_uRxMowC&m1tMi{r{4BZ|FmJAyZFx(r~GXj
zU+jOo`1R`M^~?!(dux=dUFC1<KbZga{7SpJOCFyqV{fQy=gXclYc87iF1x`f&$js4
znboylSG)52aeIDiba^crF|FTt^7-#eoKJpdn#Ag2qB@7+_s&=AqdD)pR(6MXzD|fs
zUsb{U{6NT^`*U}_pI0Q>yeCg>eRKB9<i`cu*srPweq&$!q^EXw+&kyGh1-v=-IsH3
z&(FLkAHzaY4}5dFB*3)yx%*W2fZbEdner#xU|zq8<<p6DvA1u6Pk#U6Rpa0E=WVrr
z`V4tT$)!&-X2<p2mtOvV_nC{cyY{?N5YI@R<oor?cJ|71{8ceANA{JLY)beSB5o@m
z`RT{3KXYEWKe?aG;rIN#&yOGKvVtB`jI3WKZ*vcw=OX;#=H}-*dQ;plGTfWo9iJj@
zxBJ879Gg$Nhvmve|35EOE;Q(U_4%ao7Y0MK{fEB&d-C}1XAbFWw_gi9Q{C_Nw#ebo
z)2b)i)$gareCaxwl&|J<?%2P$f|;`v@0%oBo=D2E`xJg6@|5K~qx&Hq%PyGZ%{iBt
zbM-LyNtIOT<A;N%q*_<>Dp}r7VSCtccfM!1@QNF4f8@9qDbIW&;Blx_+p=1@!qXyM
zyGWMjUE)`dp!a7L=Q`XzTa_F&SNdej+wVKB$$P{-pQQ9!MxgVvqQufOrArn+OlbTo
z?`#m6&s6={Gkkl_%_8nk6-(=!PjJ^n{E_x~H!VxK-6}@-UwzBn*pKxLr_1WXYrOV4
zZZiHi$EoYdTb4Kf+D+yh%5(YsVV#$lmFR)eefA4ucgfV<fAre=cTDL7{XHFDZ<yN`
z#=JXjSmh-0oWbn<@_U=Ul}F0WSz2&YI@q4ou{}n%Xn6+5IfX4M%1peR8Vl}E=)Bh9
z@P<<$rG6s!=eQV_?}~dRrX9ZVYu2&4@;A9nwbioM^)@Z^f3msd*y-Lock)hudb?y&
z`@I9lN-inPxyyE2wO*ljlfU}hp8o2D?{1eYE~QMmyrX&DhZDt0C#A~VC;fZ5YQARw
zznDw5UpTVZCmZUd-#@T+lBRsZPA#TiD~rA?*fXD1BiK(cZ(h!sOQl75J~zBhWgh?a
zUUFVy?YaMP1>C6?YHw~x+ug0)oKgEGeiB!RO3%D5;VBMV<F_|WGxjW6xohE@>jzZ~
z&**fQPH0%!JNu9JrOiv;WEU-~c#!&Lk6UcD&GnyiJsvY_tAz+0tAED$=~}_h=#@Pe
z<9&9CheY2hT~q%4-a<Q#6I;1Yq$~dZ=(g_U>`B{u&Eqdg=f1c-yW9Chc6#5zP5WwR
zt**KGT4O!0ZKb(w$@T;O+$?QZ*=BaG71WK|a)aY{t;a+@(@C-GYW{zGEcT~L>;AWz
z*O}9A%~ni*c3UoG@2dq0Q%>n0{<xu~HaovC_vELeOD5f)bM)Buve*OfHa=ak-Du^+
z<##9lZ~GGZ?AM#rZMU6IKc2w<XYKAB>0kOxTm2Rku4NAR>8ilV(#9uytL$JC>+is6
ze?5O+d=YKzv2(|SDE@WfGwd@v=NY{><bTR$?C~#CQtyfO<{G1y3YYXh+6OF<j9+{4
zzt&5|JQg{hN0)1Fym9*3w}EB)+L_{W5|ZR4H%qtv=2-IYZq@N;!3Vzmz42yJe)YGi
z9QlU6&%PepWdHWtGk)8AH{?&(<7EFmZ#|;sKTZ2-<1bqteDj~sX?>+^ep&A-g{k`b
zYyH_8v-anyChM;dnW|!tb7O<)t5>fs<!=AG()>2t$9AhSy`pPz(*5V+L#{tt&NjRB
zL5awmKF3wcpBK%&Ibr*Py|xmSa}qx6u&e#`XM%nEi|su!mYdGbu`GV`!=mR7U)nym
zjWL>s>nBvUl<2>G{PF4)yJa=K?L3m3nB|+__WWm`RF)ij?;HE=*XpNo@2{?y<nV0A
z)@xC(r)FuD*D9XcvA}9Y&j#5|i|%cDTw6ZruDJY>kNa~4O8e@$C)oRJdf(}Dz|Zym
z6{Y{8ACp;L7M$9^_j##s-7RMB)yeh!XSV;3T^%ndz$nke_2PHH<UWogGa5`=B=u5+
zr8Z|@l!$BYUS|5|ddlCTvW4k+>p$N*`Z=0u-+XbdA7P7TX#O`>exLi{I@53M&F7w7
z^M2(%tv=-+v+eWykFQ>B^8cs(uzpJAr5BO?e|IVJTvMCBHMsb7>;L?Jw+%ewH=p0{
za4zpjm*0uKExg><*k<MIV0e93*dxNJQ~AKhB;L=Vx`i_94%Da}pUrBO#$x+y!c`R}
zUXB3%(66Pd9UHeevDk139Qo54dwuh*Jnf>~`6sKge@94X2rYZ-yRVBa%cd*5P_$|K
zYTcL}1<J`jQQYlobW?L5zyC2mPx^MdvVE_1{GTkR=p638i6zz-P9?tmGvCw9uguEV
zb=#78e{Xahb+KIYHu3TC==7x}QN4e^&Hqxj*!Pp~s=uorByd*ymIiQsPzv!aZMb3Z
z_{a9o37L0~*6f<geuewKPSlnc#^<I-#7VFD_mpwl-TTpZQ@*ZI6BK9^;Lung&*U-_
zbVg5Oma;+BmlxBF)6V>u>6UPM!M@uUZ1)^ZJjeoCf{K2qkpk#cFHwbnFIx|D{aB&{
zIjcrV&B0)Qv$w(gc>&zFw`3ZdCT&lN19hZbFpjcuS-`-^`i1+zMNoH5(8GZ7cUt4=
zFM;3R-F?1G!y^obCWRQ#5|Y!w*FXj?P+{uP-od-_-(g2p$<vGHY^o2MclKx4{)zd`
z*U-;Cf*lDorM-da*VBh<V!#GyG#+eb&+ooayd?am!PPKV(Lb!~5_ZfL(|g6Ub8*8y
zZiADUX9<DMhI3$H5xLOMu*wH4t<Bi<Gg?1x&kuQ)TjA=t8!|2~njUfe;#EJxpN`FJ
zrAPmD9(}TDyY_<lzApbE;RLcAIYbuxVUe0{@BLH*6sSrQJP%Yo7CtcFVL|QLGhbOQ
zKL1#+@lvbp<i@9y)N*d@__=*jfA;%7-!I->xa7=I9k3Q~Y@kF@fDz-@3;L1^c|h)M
zum?F&;7q-l^^AP6$m?AuEk`@Qtg*jjJ{>gbsi;tIy6v5kCF^Hhe>t6=FK45xP|QLy
z{h?q0|KAT0rzU~6bXo{1oY-f{b<KExu7E4kYxxOs3brN*2O9djU&hq^eEM21X2%7)
zy5H5GBKFRxS@-tISJl_%2d}s8+?G8Tq#f)sREEP(4vhuzcGpgMf)c<hP637cQ|!gg
z#BZ-#dYGy4+j)WQ3;vl*Tb}q_dfIg5$Om<~m*m#mZmRSY-ll)-dbYQbQYyxYOpr6E
z8Ur{?xQ}-AK<s2ub7-hZZkhj?_gS>ti@alJCh6YR`O=y2@3X{S#gfBDka$4yHZ(XM
zxH>S_>gNOrfefu@VmY;4iDQ4){?-?!A3vTJ(~Xk3yxd=&cdM{%-cwA?V39_S7mIf^
z8hCnu{C7y%py0uQ<Dm1jCNB6X{xFjFyincQqqioqeBRG}ew9uqEY(6>4JW67mV*az
zLe8bL;rI}E`}<4A`|}?B<d%Ciapi;aI+qN2xWD+N%sjCHHFy!`i8I!UT<4xW1(XsM
zWSEkV^<>)R-r91J=U{P}h1lP<0w?C**^+r#`S<tt_9yRmnP5-14lIk57Btj_q@;#}
z{3FA0LAkE}NW0*T`!^kRO#+*K_HWI)`szsB-m1ScvjQc-!G<M*IHoo*{aW~FiXlku
zgSvyk{*Mn1HutC5wQOnKzx2T@mQTwkv>CEokUcY<<@%H*IQ-<W6Vx}zdvwYl<d!bb
z$zVB`JtwQp^$PeObm^Jvk-cWZd*=5%GPq>BM|Q)7(;Z;XBWFVx`xGdAH$4hV14a7-
zw}cZD6ld$k?fId=^qYP0PW8{z^2GkB`wHAYcC5b7WZoBv#y>~@-(IB(ay_UZ1tkt7
zcH<7vqUd+k9{)h`>CkoH#6;!WXXe>f%QJnxEp#Kk`|8Y0-+$2?{<B~DzH+B-efOX2
z6ZY;5^;Z8)K^hQohQr^Z3PwX<Gz3ONU^E2aA>fe5)LXp%T9lwbW0ZQq&D80pjgH*{
zmO97MVmrR2c(J$~n0VmD#l_L*W*91e*joSKK;vg=^SnJr3}>$rSzedr78Nn|-07DQ
z!WSyVU*8SBdT!;tRj=-<KX-Lt=@KZ|TbH!1ud1+6aPuv2<EvBQf{x(Q07VxE7AJKF
zf%Tss9qpFqzHGp|=I4#sp1&-o=KS>jR5kmH-|K5@@4vpd_;}8>Od&?Wjs}K<f8I~m
ziQH5ZaM`(y=O**b>CLB(N1kJf_nl>ObJnN#PFelyZ%+(UTsy_<+kuP!vV|H0IIn!F
z6xTW-WwNYlHCy?vF3>W2|AyDk)wkR<TNNLe(pYv+u;b6(ju~d42C#z?=xCyjyDOYJ
z97+WiI9?O-zwWWLYI$UR*Wa18)!V*4`rmT&_$;&BDtFKdsO#LBj-aa3h6B`klh%vb
zu|a!Px=z%VjI%Xr6)Scq+&5b*4m#tqNGM=$sNbzq-XPVW7K8)Ks{RJ1Ust!Ef3lH7
zWg0_ct@N|yb5)rNrVHJvpQ&*Bt@fG?hidQcE}uX9M$_s9B?YF1!V-o_N4!2iJG;Aa
z*OMP1cZI6tAkD5sp@6-jYQ8rSjfKW1LK_~;1osm<R2iEJWF@~n@0)3yUguJ<KUin(
zlwc(Vrj5!DwHvJu{`tPr*)PPvzHGNUUuOfy6NLp;+Uz205oR$8p73;F{5vONOAw2T
zf*%XViQFFh^97r$SAUJ`o}B;5mBmFNj)je1ZjZE_t^3}MiF<4&n}eDG6J|HOT6-sE
z3v$my!JLuxOL6f<P&%6-s9<q@Mv2<qy!(n9_Q##MGuc{6fyq$8;qC^${I511u@{xt
z-ko3twF@-79KMDHx(Fe+6;6QKQDOq1<Mles8JS97-uqQ)pC|cV=!CVPKqCj|9aq_l
zW=_A2bV1GiMB#wFqGo|Nh2brY#uniV?uEkpnnP^_J(L)k%A!APytBNGUw&UXXjalE
zNwW6T5$)e^U(T(W()@1!3(1P+<~=U13foxT{D|L@adF?q(ty6BT@9~JN4)KuRqFON
z?CiT=H$-Dflirkd%0Pp!v57_Gf_{g)w5tQlBd>-9|Gs^GettjSf4{!f{ZGGftKFVh
z#ddajyHdX5>V~?2gh}0|jB;tQLfPz3W7cr2*w=IQ-HOQcko>D}*7e683{^jtH~oYn
zC_Drh1vNYzoZpEYSqxf-W~g4EWP7H(b7y~%Klr5O!)?6Ly*e@X{5o$a&jcsHLo6Zr
zqR$qu1w{<FS*@hN^pkT%dtIH`EhQ$U2ObS__e)pQ1UQ^Mwl{u$oI@}736^^)Wi#9s
zZb(m1<?L$UQ0Y6+#L8W^+%99*j;56kN(xM!stc;LH|`E&MGDmuoEi({Et66em`q(C
zWLKTpt{;-LP2XLhuK1D|%L6OLYB$YBi;{ZNj0+3SF|+f@gloj-3Ns3N=rO)(yj$b#
z9{UC5@Zudp0ehc%`Fuilb|w?oi{+jfdQ3_IVoWSwo=><~y|Tpqf4<s+GG+5^yMJ3X
zyqow!Yr%W&fGVYczbtcJ^S_#_x#aU#gAKpR_j!T0hJFp3`p#k}IAuUgo~pLM@Qe0d
z_9^>0u2?WK{dzALaJ%`yEmqY9FJhY3g@6{7%|D<Y)8$ZWyg&2uvfo-W-aGkjQc_@2
z1SKq^fSE`^5Cxj&TKgt*YA{QZPs4*-LQKES4ffwY?pyU@efz&MyIq$A83jF98mG#7
z7Y6_T_t(Ds%ETR@mTHTq!`HAGCaFk;L{>)w(=XF4n?pkcS1>V&3tjoYy?_3Tw~rUA
z%L)oKzEU$NdlT_n;vJXX(gph}uDZs7oTMb6#&|V4@zNAsXi^bi6kK7;#P#C(J-hHu
zPzrvL`d|3m+}Dp6e7*Gj;^aOK@ACrN7#J)RL1zJUIFt&{uqb@wHRpeCte2xheOLFM
z6i{DA!G~$p_CrfFqah&%A_J;HXOr)(T_@D-aEH^zbwlpP_Q}~*FFagXTo#<-G|9fU
zW^1;fn10+J*x|eiIv_)oG(kBXWP$>dQowAMSy$6GhGq#0H0}^uF#Vs+CHs&0#qRRg
z3#OEdZ4ZC)GW2>QJKyh%$`!&q5%az&9DKHVV%p?=s<qQ+)gS&dRZKU^=I(NTc~*hO
z#LF8J4~MN@y?V3aB&$i+)Fk&`4gNfJ#(xi^zRYRy2mjm*4U2r*ns;~C+4NeS<x8e%
zPut*K(v@&)l8~>(%IlXlI{w|O^!&Bwm5H~RGLt7=omw_;|DkPvXJl(NGVp}Azc2i7
zm)ZDR+AP)G|7!ey!B5$}7JXDb*81>G)~D;X7gff-`@DPFt8)jN+25Zz{Os|AeVUoE
zm#kENpKF?X``WxeO~wBu&;9-QrhVm~^($9ido?l3MlR^O`fm4EM-J|^%Um0>>G6$s
z&1+)wkAJ!@bNYN?{TG+__x7$myB^%VcRA49a9R76+_$AlOiBSuS=e}`N({`!`giW|
zf1IP$yEA^rizkzg9&0vXtDl@5y|47iU%e{pr?=njmYcoyg6+I3Gq>p1MJ~RQdC0u_
z@q^q;Kh%6@^~f3|9BB7rE8=*3y>X45S@z|$AKR<1?b=iS@wC+So!>s@-l*4Hzvy_|
zmEMyVS427FyZ<SvbLOdkzQDTi=j5}q&G+}Wt9*N~WKr<esoj6AxWAodZ@so9^Rlf)
zTs)svJfG#M3%xb3`sMrDr><D7SA0@>?!goK#lk0d{bXk6+jH}%pW;m|8?$puZFIS&
zYG&V#_}0ogVY=VS1GiiM>{JN1<-EUr;(b-sxNDL>!?x^G`9JBrb<Q85j9L%&gWD?&
z8$QH!oOv8m+*ZW5KhnqU&D$T+r?b;<JmtyamlIvP{lxyPbMLcOS$jXtI?iu)E~!lK
z`PXlb{p#o5mwO(*SSe8Ze0$Wzl^Js-w#@kv8Tysu-?Wl>lHxg2{#J18vM)OM@O_a?
zcdVt@+j%MC&%VCh9P?@B>!9l^#Uso8cbC2WcVnsdbk~`;b0vSzPcB~k=IhUY#b>RX
zw%xh^Irn-MDC>C$F@C+^f9YOGq>F+ji`_B}KgQZ8(QT1`zz3q*)&81kqV#*>HO-@D
zzpm}b&F?&r951z;e}hfKPxXCenJoFeYlCaP`tt8z6Q0g2ZPGSBxmJVm@0H%43tYR!
zWOFK~89jVo^dj2ewL;Yo{^t8z*G6sKwJLmloc;8q>+a?&pMFXVWSqO&lI_)PeI4uF
z4d)tUyspjO`J|yvR9-s#z|p6P{j8nS*}hnce}6EihUu?pQNh|DtFl(=7dLLozPKgx
zGTWxL;x)6MO**-iFVfnbZ}~ghIe(4kwHH7C`u_g^|3xR;cIv&me$L?ZtBlo`zJ|Ry
z|6XgY_1>L*pi%KRH#fh360`LjpP#VRHNzyG(%UNM-WPic$M784>$m1n)e^0K_UXy$
zy4lCyg9gwYuc+SXui&ljS{J+g+qNUp7sLx>;$KwhEdP5k2Gn56n&|LAeZ^J|_f#=P
z!4(pXp|(YF%eJp=uiMMjds3KlfzPtWD&gL<lbU{hbqnUck?mvEwqJhY`MFDYH>FPc
zFuy3*xvC}MQuLJVPZH|Pgmd)#Uzz9M+oQS1_tNA&YsAB!1P7fKwcH_fVnJ9x@2Ond
z<H^!z)<1LR-zHt4Th+X4oxWy)f&K0?FXS9zbMifQ*lC<M3;kgKt@N#q$BJKO(;oj(
z>v!2E&h<9;)E>rzf5I)z=QjVGS$6S$*Z=bg=jDE=J~~@{DyaCY$5vVXAJrVk-;2DP
zyza@4&s@*a<&JObnfun`eB$qag34}drtFP{4tGj{R*onNuN7nzTw&Ar)+R>7a)H0{
zCf1jHQd8=crrMMQEHp~kuX(cS_<nDPs`*Zvu5Ro7G^gc!e$YPW#oy-IggtFbV)?nJ
z<mc1rw`Xjg=<BH)o^l}TM8R4)=_}LC>V8+8I~?&1<Vl0j`L^7*We;hv!_E}tsh(+8
z^7hP<iF2M7&AGodqP$Pe_SQX(ztYbiZ%dTXy|MAzlY)pi>9)OIH&<M(S~9Dz{fgbL
zw#RP+gESidym`#KJNCtz&q=HPoxHc^KctA4WD&V=zG0!Opg`jdfe$-R{#+>XKGP!V
z@RcU@<x`W6hfe<!rfPe#_eSNqU4@g|6OAvKvfOyT%qR7w;ruj*I&1xy9Upw-ZoZ!o
zCw|Rl<x{S1f8E;`H(t!pcs}oQxog(X8Jt07uP$u6l3r$eOQmB^H;>u+=R5A6c3nO}
zXIsfz9hMclw!4<qT`#(8nS8A0wFQ4U&+iKd(#&_H)kkZ-$x+%Ee)_A&RvG@4?PtD)
zophZj!y@T+^6)$6_@_H=s3mU|1J!*FESo_60#=uLR|gg??*_KVzf7LgFuBP8sIp5r
zAyA!qvuaBDm#u+aazD+K8;Y5EuiN*?T3@S<Xbq~-2o=8{e&ks26xB~{b$0P5ck9Zi
ze<*m;Qe(94_2ekMaK1_T9t*DZ^PbzvyHM!X&TA72eAn-s`zz<O21mkmyA{73B%GyQ
z+>$&h*VTSj<NW)mb=D87n4TxR$Um7PW4ird`Qo1c8{^kJty&V*$KJPcYUPQX{Ks!Y
z)-iYOdBf}Qd*1a|PfrE^1Pz2bYy};acI(@WKcbB-!V3<*xE=i0RNllSC_FXi;qeTM
zuo|7}-6tO}4mezUD$sN873YrMAM4+H{YtES?5ut1F3VSMx$X8VpRW31=jHUz%52)Z
zqwD5mhyG+RdUsqQ<}G7pitxAa+4lASZZ1t(ke#miWtEfpq|dvrz4kk|w|LQ=-#7A`
z|9)P4M%m}~*0}zV!ygaWZ8Fc3KX`rZ;XB_Qb0#k572RGVaB~aKr{2q_XMy`-mpC;R
z%>QD$=2NGGsNjN&H#p1nOG|eaK0a3ZV$b7M(+iV#Zd{!g^2x-dTA;^HPwRK!ji-u7
zJpR}jaNV{u`?!?zrCi@~-P$jgtvq$Zch$`LEqr0)#xD<V&ilu*G%}Ov%0x38cW!z6
zlDA(LhQ(UR$WNSef0gy=BAGeocJ7UdEYeaGzN)Nxpg8!eom|lG7jdte<9DWNW`YWK
zfyN@xGDn#yQ`<Q@90Hj@&23)A-x6#6&v$*iv*(QVEYE2S=F`F_-QO3vTKk{){JeCX
z9~X{?_by7Xsj*<L*Y7)2rfK%^WYrG4Lxm5GYl0UqnYLPF*`>ewjIz@A+z$!m`)aoN
zHCPqN_Pl$S9C6)GKCAP(W>wwlcRJ?{5A58_B^%49@1OT?=L)%x>CYEMp89yePO9Ud
zpx#eUNM~z74a=;l`r1!bKz*N`oC15^MTCc!>-M^F8(8??*>UI1DwhT2@t<D5TQz-}
z`gu#8+dKYFhMpSu;G@{fBUbATCtS=vyJHrAzm#d#YS8ldqj5Uw$87I5J?xruQ(UX3
zaOt0gUvv(iOS`eV`_G)boXJt^obGJZm0*;WK4{^oRl{^8b$#;J*h`>e3;(7iOKw+x
zdveqH<_~T+Zc6^;TykLYy19*ko(9bgug>vENOsR@=KlFx>}Bk<`%h#3O-z+$+GM;^
z`2Sw3`wP>bf7`nx!f%y((fer@vi#qCjoTdGPP~2jLAK^)o+a|h{{)XeHF>sq#`>dH
z(#rR(Lf@XMU!N_p3v?R*(%KjC##2HI9QX6e@hEH5tXQvZ!n6F6fXw@a_D7tLGbwam
z+`YK+^RvIdzP<hJt0+C?d|c#yuKzkO9+@oM{P4_7<J>h@19yttwBwBbH)m^Z@U{1|
zw(7l)|FU-CUzcqRua~E+KmB$7U$Ys1-Y|E^3ID9=e02ECansyeUzGD?_BBV|g^rsf
z^Fj_9w478KJ>TboHP7toiE1oY{j+v9P211)#O~RR6EeH^TK>K%w}f@xh5sTCcj>f7
zM*f%nb9LiI2G7tn4}PqusC~)ZmHajPQY14wUyaS_W0w+SOK&IU?4ND4ZpzlZFXBsd
zUOcx7{krw?)(wiM!q?p6+Q@TnSxC8=%kj$Jmf8K!W$M;GyymtzV!y1>x8CJni*xk1
zW&L(yGF%}X+Mn`vftMVA<T{<d-m_~sj(7IXe{UK%&););(&NIu)art%*-{6#eVy?7
z?6J)gzg9I&J-y)?XtdoySKz|s3sE;tYc1xe5O{F)Me|G5e>1wZcsJE6?+=%oYZ|%V
z&}jdHgWC*G&z@AKzxCs_C7zQXbCy_qby}1&S2McVp-gW7>+r|FUq88CdZ2;v{q^-a
zn;d>heP%nf@r>?<_g~nUe%9Vz<~zH$`pXN$-5zG%=C@zJneuv@!X~xmzuPlBtnG6Q
zV!xCneCwNf{@-q&C%<JsHQ(NrYrQP{`a15em!Fn7y^h?R7V8qX*TZZ|-({CN{m1X+
z9H&f*T32#YbN<&Ju0M^2a$DXU{P?dZ%D%6-YU0}62?v|%cm6oWyt5Z{>q~2QUte#+
z7K{5iFM7j0-cQWg|Hoz1=Q24ScjNw}A<uqYdb!7&x#{U-9eH;1<Qe6QzJE?*@ri$Y
zC(d+zKp*do{{pvfKfN)fI5cSeTuW~0kEe>RM!!tjFn@2~!7X)F?~3atmn+@oK6Yff
zw#@%)t3p=?SATu=wRl$Ux}CD>EMfA`@90S^IDhTvzS0RB%E}+Cj44f;^m^hF8U8!l
zbI$*5+4^xW(;J!k>BSFt8{Nx}ckVf^ylMA_kL#c842)aIAbsMuN6uf}h7~TLL8k?;
zI89dn5?a9k8vapqP|k^+vvFbiC%+R<?mpYq=yqFp-NBmE%<^p2PfVAlo}M<h`un@w
z_0H_`K3wFg(eFLYA6eJBC!Awd&zo7B)6d)S|I}`NH6`#}(Vx$p&-ObTd=<EtH$&{o
z^(z~k4|7J@x?FhW`RT64ighOy?_bPQunarKdciwuCzD95k}JoH8yXB9zs}~}S+8{0
ztJZvL!wNH21%~tAD;89jOkm#yx;lvGS$M*=NvEG&Sv`MO$aO#QU7VA2KmG~3JF`&d
zKvC7}Yis@A-Q1jhar>c)4}bE{y|umgbIxb|56spn*B#c2p8WYcNOGOqrWI8wk!uQV
z<T#%3r`ubyf7a~2`+3gk!td>=-jRRgt@1xIWc$k{*m~caEp~lE3#b#`(NOHFn*wUM
z2(UAmNagO3ke+lbbJ4*a?7Xh8S%oT;*6;js=0ErlGiH=S%<hUYJ~^f4bbjvI#EK2s
zZBzcTGKEy{V)<<RSs}x8=KtM^&;J`;XOBE~zwzjkNm1*Po?iR*h@~V)B<+ahPr1@3
zepf<kJ%hQuv$F-5KG;}$7})1#9~BMXGw-j!564U|{SVA(-&U`in|Z_3O#kVhu)8-u
zBs8Y4S2*}*i`w&hKGWWN|1Y1xUMGG2V4CNmRqj%cx^I6p0Bw}~Q1riT9$Qo~=kFV!
z^UKaKuUQ{)Pg<?4e>tQ_xqyR_^-DLyr8Gf-#vg(U7Mgb_9B(v{+W+OlJBM)DPuAyC
zXUwhn_EPbm#x}Mmx94TsHomwTxxac{?$oGuf3tOaFT3pA@Az=L9^<MQ$qnb1Z~hnY
zMpSl{da(R_>jl~J4^CODZjGtrUc=kS`QpZj{;uMW$@k)3xyb%3tkcXbRAjh3{lU*&
z-F~lpm$k>1OyHHd;2w6}&wYodfd1D%VRv`F31m3mIp=n{{%*4i`}ea=Iwg>GZB69t
zp8bW9A-0n?sz0i*IWyn>Kf}4(XWomXR?MlNxT)v4-Sb(0gbr@I5Vn2cuU%}Dr%eIH
z>lHIb)-T!B|5txe3MggCFo??k>AX|1>hk5v<#FmyzT5KNwy%74)qywqdV=wV89yXX
z`PrqvaNXn~S(A67ZaUYo>2F}?g%#K@nBW(5I&{UETVg#8eZ6<)1eM-wT)JoPl-osT
z*Vo>g+;I7}x6JjkEBvEb&zyc~wIn;;VU?j6_hV43C9v=3440mEB=b?Vncw{y!^b?c
zg?7vR+Of1M<)*Ft@y824Z_*R{f85Yke&yxbzPB;gcIw$Stlj_o*0NGinp9x=ue_k)
z-~WgVPZk%2XDk_ad{t)LZ%o)1zM+|IQLp{3&B=!HF8K==`^6RJoK1YJT*+FLU$Beu
zRIbvTt;+6wTjb&!?F?q0oA~$Jy1jEJ{FA>_V^Y?e`e0>1g5t`jTs-bgm7sX)K4x~u
zac<h)mnN;=35%BR)Ld7^(;T)%ec8IX>q3N;<1hVOyKD2qLWkW)+xSZ6{ivI;_vs6(
zqgo68|9^Xz^MXofB71@5v{YLICkKz29x7~W6SR&jII`lShH2NaBgxuFT&@It^ax}*
zm9#UaTs-WNsB5#6Nm7VNQ&egPlT>f#qlp<kY6@9QSt711F}h`u5hwmnjE#6c`)695
z|M?o@zkipl%1(>h|M|LYe%$_-?=JT1+^N~T%|2yL%s=VXzn08hQt7|#{dci#8!A2e
zzQ^6R**b-VLm)zqN$tz@<7L;pn2L2LFus2qdCpUr?{vz)@Z%Y09velhef2%)-OuDH
z<{B@5v#*s9sC#j&SNgl;hP+h=&F_|6PEOk4?z_;irq=gQ;G<^;7T$^9{Owfd@%Vy+
zthMUvcimbSsB<(j=D@y-_todW&W-$h>|b_kpJqYw<S#QBe)>%=QC{-#t|e2@^hH}f
z{=8QH?XL2^Yvv^$3CC>AQ)lPM39T*v`fe|y_n$cXO$E$nuKe4Oc)0EU35ojstyg8F
zKD8}0)KY#@@!t66^V6a`<v{nq8#p9f+xLP!B-ntF>2#n1^UhD~o5a&5CDpQ(CEuTK
z`BQdE<Es->o<7k0_<kz$%H@4?GPZQ=R(~Ho`MXDL!K1gkN?%_qN<FxAajN~!h?S=g
zn(kaacl-K?jgKD9G7&BG-lu#&-MDoB`KjS?KUaGeyXH&A=7#56?_DpxA)m)&w?=L9
zSILLW#hV}bHP$@;`{bN?seaV%Svk*>YRliP*_ad8|M%y$a=km@pCWgaCB8VJ_|*N%
z&e|95VtKnFZ_9t0X<Lw}E6(pJz3yDZf|sGG-RX7Pch{N-)@4Viyyg^8*bu|&Hp?e!
zoy9HR28X#0Y^6`{eb6>iSYy?^d;63ppU<|`8hq!m{eC6bKi1&qE$R9z-&bDWxA>Uu
zN1^)Ad1+7O`h3sLSef~5MPc^qk5?!AS-o^$oE9hf{_@n1r_FS~zTfU&x;1vI%Oib}
z4f#4Inu_tS<aM^NHhxO}cE+Zr{M?ykGtyjd{iu0uy?p1<v^_e1PxRz3_`g2xZThw)
zzn*h$%b8T^zv0#<HHU@+B`mA*Yz^mXX|^&nT8jNhd{viq`B%Eq|27@|voq!R&lEY$
zp8WIn>k!k0_qWJS_7I;Qxw1Of_SjC>ON*x5bYIu)ebv@_yZ?*tr?;<u`|5gFVky(N
z-hXlD&b@zs>F9-9=MS8bICG)=`I#9#5fjbq?r;5lc2AGEn~KO<_XTD3FFf~^<WKju
z5Bj~>`=-*ynNM;HZ~aItd|4)=Dy-m;aEM9mi#m@^HPh*U2c?pCLg!n?&M}&>$A8{D
zBgf4<ZD(W{otQTv`Rz^X$yV0&?w{A)|Cn^-x#L%P5j&0Bm6_KU{Nk36J+SZMajn09
z`hT-<zgpJt{#;((^~SYXFF&t+FQc(XC;WwbTK(qhb!n$JMqAFzR_foHeSMnn-e<qU
zf`uC=YBDmhY~!ABVY{|~!i7~1=Vs|`=d#dZ-Z0<nOhxV|i#>_A5>I}U6iaNoe*RQr
zK(1|C)}!i)@@~6st&_aB^!c)^Z@vF!XL<imSSTy<;qJ|Yy;e&+b8Gf}o$EYd`pvAr
zC*I_Lc*Xfw=DlyuocViB%g?`S@H;2Vqk*Ausi48a{U-0cR4-&U`ka{Vz4iYdPi5nW
zQU7i~-g`26z1qw6B|9@u{ECdLT`#%v&e^G7C0_p*(K;=q`s)<q#9g=6F`gBTQB1i1
zqIoLwTQjvkzn<u1u(8&ZpL^goGi7SjubS7^>N_Vs)6WMvVe_Z^iJ|>6+ppH0Tm8vD
zCH=+qu1^1k1Dilj$T8d6CNyK6gW8k(^Oz5H&zdsp;6vs~@7AbgwlCRP26DjON;j?W
zY>Su1o9gymddklHsC;WI^DONhP6zf~lwTdw`*foXOO`$J<|Rhj_vda-G4hJN^`qwc
zJM+&*aS})U=d?0y{eAe5%rw1}onMr%rr&-Zk$-9a?Y-0UHfzshU}V~?8*r}WtAazr
zfh8<)QyTAu8#~5Zzl?f!^2eM%8U=;ZzHf=xxvIJIZTgDXOG!T;r+occD71aXwo?XA
z-`!8T`FGQ<{QU<U6K^id^?h;PdpBDkhkWdU)xZC|U`o;}Z(Mc0;r+R%`*z>C`ES)<
zwUssN?|EK7DIWT}xh}=?TjOh~DN(gO=2?>Ia|(~`1&y>NUHS1yP{AQ#C+Ca{@p;iP
z)to+o3X?zHkKdkm*W1XlKJjqUc`v!?shZnANdBJK+?*XeeOAq>w~>9GKku*eyz+Dh
zFAx9xDaYG*rTKP!y%wE)p66HH{$C|qWB=aLTH|+MU*L1qvhOTXHEcEIW%=eS@&cRx
zrs*ByzA7MeNAW^J{e^y?`ui*AT{vHORdMpFXVY|}`R0b)`=sj7;2_R&r)W8Mbf7fH
znGFYSZOyiy;P~gh*~%og&Zql6KCSz;_Ro(Qf7Y#B>HcW>tKBxc)qJl%K9+Jp@?Guh
zc|U%qKl=M%pZ0N{JKJ(^KhEBKqx5?0Z@(AiTVuD{K?@hbO?y~ANq)GybB|f2_S&oE
z+Ya5B>GMT-^M1|ZGr_f|=WcnmQ8?$O%IA3rTT^`-7#d%4%(yVWZ*vfbPIja1_dB0w
z@CZrIeL9c1q3GDPUDFusV`uxHijSSW?D0qa)w%I%_x|rNJKOPb^{2CT6@L%1%m4Yx
zScynQfsLwJ>Z~>8Wks9)_5}Vq*C~8Hl=0U@$@?*u&wjc!YspO#UjOd8!d(r|J_*%H
z7N9zE9jK0cJ?(lPQ?N+H=Crf@!FN6zFN`YPKYQ+~9ch1meciwN@^3eN;|G7DUKN!3
zKH|xfpH{-Z!qZqMFFIU?M>}2Ub@2D~M?O?ft^6N(>F#Euvx_cHzOTGFH|u+6|C+eH
zRnhx<cHdf8mn#~ko^XG~XQAEIOh0*kynAymZEi*Pm$|~~^Hwu`Q7+!N({8$9-Bo#p
zbe(<PQDr%|*J>ZHJ^6cK?sIK>CKiqo&jT%W)3+_#CNLwhk>`p1#8-P)dWsq^xczn8
z?YwILPd9dZ{+eeZ{(X=9)3>|N+5LWF_J7Jt=giaFH~lG{mcIAb)%E+%YfPQ7&?2<$
zW?ky;xp%_;ZqM(&e(l-x<|+LAo|mtd@n&wjs?2f2+|5B~>1C$S`HgRd_E}r+_3pW{
zW7XfZzGK|Vrg2MHnL>Xb{&wZpMAn|koF@!VUVHLqCfiQ=y@ijD-TJ>JYRe3n?_106
zY{+m76H;(U=wtPHasK16;8Lbyje;b#(DfNX?`57$J#BeDbJ8~Tv+mXR_-kixlCL~#
zdVP+i$s-OyqX;{_pSGr_^;0Vor|sYU^V#hB86VE4RfeAP`1zJwZ%4v*!A)7pUY4tu
zom_m&pmoj!dyl%H$%m>gr$p~j%WMDMrvJ_E_uXqtcBX8!h`f&Mr&kqImi<i)k62~T
z{IYoWue&#==34cZg}gUkdBvtjd|9IT>r|7M!mGct|2=V~yxITSv>CZ2=hsGW-&WXD
z=6=yKt|IVLjZ?1e5p{=#14Y6H3-{mIw&R;ngj3_0@cfhWC;iJ*3(wCC>g9PiFOsd&
z_tHC$&DZ0qYjvJ}|C@Y8w(ytj@;B3aqRTGH&)jqV#aa8x_tTz!(8(^||MRro{y(2y
zCzU2@zTa}$Z+CtEAF=!IudA#NT^$xHboh1lrDeIhQ!3-@HdKW8?z*?b(9-ay$<8g`
zn+@+?nSKA<``x$J&At7i)R^(NoALI(rCC?v%Z?r>PY>Vrq~!L(_jA^LpW?mxo$y!X
z;CoKIU8f6gZI~SY>)EW0KaGvf)kWT)D%yDR@q{N=Uv$0eO8Vuddt5{Fzy9VLo73f+
zYV=OujQle{D&DY>g+pg+1LxnR_n1zpZ#cse_w!VEo#Etz(zDF0oA;QfC4615>}9|8
zyB%jetE(n|(fpmOx%-aV@>dGa&KRGMnQ4;#^wY)9la6;KrmCMipIVvrXnyhQwcF>J
z==_s-{eJqv*9*74^tX7}GGFCv{FP<iv)@fNtJRtO$^GiG-ut$j_t?HPzqah`zc4*T
zxvH0W;kQFytNwFh{C&)6a;n6o75m?GO@4oFUCzmu+nn!P#=h5_9(Gs#mHV<itx_V}
z|5~j5#ox1C{OhwKqoC%b_a2-6&Uhkh85eQYq+ji2QO(BiY1^MlJPy|UeM6`Je9?X#
z{_~$6={!&W>$-e?-7iMpPt)5N7?~yu-KY(cJUyL(k*S$Q?#~1E{4<d++@~~NT42$9
zX!5gnGZ)zEGp|0pc}nLkwf^Es$3LEYePGs+&iFc(+QdtC*38#<f4|@Vf2O;9?Uw_q
zc~AXSDdv0?cs;)UulM9{;aR7&3WLvuR$A>dySw6J@bXxriofk!o__WGymZh1#B*nM
z+9uxbecRjpbn@mk_x5C7US{-St<)X0f2VYwtNow8q;~m}uj-$FZF5Xbjs0nS*Z$<E
zRY&%|Ur^zE=>DXdf9W1`ti#H;#xC9xJLf3t8|m)fCAGP~<{$f;+MZKWUY3#Uw_5Yp
zxlB+0?Q;x&x%@p*VjepA(y2~=-@N`U+26X0jh^lMf3N!e-iI@i`*v1dIaI9ksonBl
zMf#=t)mKb%k7#eVJZt!Jsb=}b<V$PpA5DwS`*{dd|DBj+nq7Ct?dB&?O}v9i?aOh|
zDf1W_vl_3i4$nWG@P6ma3xB`!On4VJ+wqdjtSwKknI6BoO!s5(w`)8yr&&Jk^u45h
zckkvsdf$uU=kHnPBNx8JZu;||w<Euu-c>YvPP5U>_;Vj3W?sMA|D?QH?fU%r#;J8t
zb9X2?zAAUfJl&_V^Xd7!LGM0)`WI_`=$GyE&1)`w`x^QETHWjR)}?2Px)=5@pKI@B
zH~rbqt|dFo675gEuKiSVe~*6iYxn10<qm(6-eOl7yT9n^smp9@-}AoD+Ff<~W$oUE
z+Qs+QWNTg$H+`kQ`_Y5lo3*2hcD=n&?svU<)>6}#!e5my-*Gy7>Xg|o3vbJd&&_8)
znNXtsJY|`^m)ujW$NbMLPcNt`3j3Eh^F;jgrze{q`54(u{`r(;ebFAnFB2=i-`<pZ
zI$QYTQD^0DhX#g5O;DA{v`L9WAVOop!MoQt?@`MBm-X=0M5n&9Oa7>4UthO3WyuZO
ziAEaL<!aUQr$0abWsTI&+)LBsl~3tr^PPP?@p7-kN8g!e{$J@ReBUw6Dra@4ecl~r
zK8pvkKLa2C)cl_4``PPO?WAuf=Kd|KyK8cPlHTp@Ia8+3uXxmHe&xyKt7TUuI&Q~<
zx^}5@&X>>oY~4S{eQ{lBU-a{R*1xv~N9<<$b*{`-ed2AC-!6YosBBAkUAfM;ul~Nt
z^_<7elfM1wIa)vK@!sywyXO2U@jYbzeCHpFf8CtbMSdz)2Isv$dF(wEdf@4kC9{rm
zPkwhs=YQm6j~FHv4j-olckB)|GcYoFD@{20V|!XadFJFp#sWI^o2v5ILPEc9z8@HN
z>F&1Ua@984Pyc`K+YnjlH+S6`)mKl~OuKdbdzSE*?)aSFt>4?G-sW8!vGEaq(Ea~!
zW6hP{$IpEG=ijYeC0k>+@<H1vGapY_`E7dfn=i(p?_ZQZKfmST>~E}J=DwZnr*M4b
z*Un!PIdk?-+kD1sm&W7Y+k0l`_G!MG`7|=p?`-6c^rt`PR^FTOyvX_z^YOFwXTCh;
zuUNfqiQk_MZ;Ecrc<SZXz|a`R;`3trAq`<BmRTGr4kf?e?SB8S$tHZR<KD$<cvgKo
z|9bz;kNdv;Tr%13SKy^Tb*Ju!%q|Q17(9J;@#)!%PpQ7zn)+tj?Y#S|e2w$|O!l|?
zIqS*CFIRpqEBu^gT>GjxkI&6*-&Mc-n}|N@mDy*Lx|Y7sPrta(bMCHhcW)kXm{rAC
zo4)s^NwCju|114I#jnluUjOJ>zW;*7*Ei~azN&?u`S{#<){@DfVlJ0^#)bUokUAEQ
z5Y9P8r!?=MP5AgUw6m;hj^kCqnLBLLmM>T}-81@KZGFnCg6z;koGyN{r{-U>GuwXa
zXU*g{?+g2@Yj%6?D!hE;gZIknpZ+b4^?BBLlBO?%`}?1N`nU0Y{>`gpS0lQhscN3n
z^i})ks4qVH>ekZt=Z@aWjD;kr+h=k$f4Thim>s?0@19My+nya+eN{3%{(jxN!^J*3
zr>APF^ZC9C%-ebS$;R@@E|&xp92Vp<3jfOOKGhE@V(wHuua(>|H-7Gibu8;oF4%lA
zQcSgb$zP9C^-0rSzdKd5YkknSr<T^Q9?m@TKj-qK(~*BqF8|~C{)+s~HhGVQ{@y?B
z=T$wl7M=0w{JGo8r=I?`W;L(7d9}=xZQ=(%#^1;0iWL7$()@jTC(G;Lm+NZEzh%x^
zz{&N(TD`;C?V9&h^;ho4Ze#>|%o1LI>gs;~Q$K$F4%T>gPATZ#^-s?-BlGqd7qp0b
zntz%<OZ8oS?}XI-8t>-c_ji?GWC|8HSZH5b#44m<;P4<-GQxCMefqge`rqws-t*>H
z9A3p($<KR^@tL~t%MDi^+PAsoSvsBCQ*z$+d(DxR%jZ>H-4Ut2{*!u`_a_bZRLviW
zD-VlaUgvP?&a9`dD-U~b%E{gQXWh2dzKfsEnqHf{Z~LF1Z__{PmWRLH{poIHc=w)J
zZ4LX1rA~cK)d`)yLVo4_u**IZ&%fUP)aUQv&Gl1O&r<*AVfplUv-<KoopF*A9v@$C
zmUCvh^s>o442(=`xn^9*pBkLT!eJt+(Y%f4LEHtCTDH{v+cGaNyKe3qe`zUS`16;7
zE00$`{c9qp`FgG9^A6MOYg>xas?UAcuTWW6C{_AC+>K}dzO1XO+L!amzu8_Vl&JZ7
z)tyx@E^7XMJNd-^CpWK_`JT$Qe42fK#{IQ>ul#-b=hWYvv!5k*SSc3&z58>s?x#E{
zreEhWHLg$HIHh(`-IBa$U+Zt*jK9{aC%>zolXCOq{yBF-)jqGEmtv{<e#*zaw;oSD
z^1mqW_0N@_*M0x7a0p1a9%%We;q^#B!9cWe&cb3(Hm`J3U7g9l^kcW@-Mu_}nf^<o
z9lJG87Z?4WU8Htu>EkC`BW@WfoKgAme(9R&shMy8{XMxoChOM~oBh=rKdJA0*COoq
z!}HdcGZJ=IUuWD{U|u=BvEt|dR`#a~TQ2_RyJAtYHP)2v(Kqo8`CrOse!cKT-uqts
zxm_1meD$7hfBpX4#oL1Slz~d4s=nE`gT8nEnpn8~LCWRy-*;vtZ&gpRuk@R?alO{N
zwYi^c>YtvP+P-8?<~+v#pQcnN=g0oq>%XUn^+RCp-D{iUB@b~3C<G{PsP;`M<P=aa
zU~LRfIq;>$=bZfp&q&YjeLO7xO}!W2{{BXz_&3YP$&=123vbgqojm!wp7k~JTEE+N
z)1RJs^8cUB^pi`j$*(Nl8S-`K>+9?7e{Z{;XKl1zenYLLL9WJj^;xHsbN@^i`7-0m
z^TNuy&{K6G(yYhV`aIdM_j9jlWqzje`B^r*ZmpAIF8s}X!~ECoGes}fe3`yECnR`#
z4cn>y)x|&WMqc(Sye)d6eA{bFzr4*CKzZqA(`4V>e{Ve9^G03#+1JxSw>%~L-&^~w
zJo)^V&hcl*o4)r>_Mf~Zwf_9cg!3M^%9qOSx6tUnvi{HcTNgY3PjxJ80gVdXVoLV+
z^WA;ul(Iv^fgp~YJ39*RuZ`Yrr<iKLQAhHNtbv!U5yPE174hdjt9pLE$HTJU(rcIA
zG0VSSF7xkrIxV_PVw!yJH|eEwH)@9)#7ukMeR|S=DUEr;KMhl+{Q7e2B~lB)rz?;1
z$GbPzzRd~C{xbLSq<Q^CUz9iRo?8?X>?cs`GHv-3)#TspJwdm79-n6U*}f@e!qfSa
z{IkQg`-AH8=S<lje(2nZPhYk?6faxjZ(Bd(`t%e_yTWyM1>b>3Hxv?_>czG-SqUf@
zlru@2<@|Wc^W)oj$q&ENHiVz^xvBsD`>EHymHQOWn?Kq4$MVfnZ(EPKu6J&{nPi;A
zcPh92-R<Ox?>Aznf3^46d-}l7TX!b^UsV+OPiNcW?S9C$i04IH#`|;c-d;92Z{oh<
zONTyB-(Qzfw*BTe`N!|(OHG?xR;H7h6R&n`fBdoUJ5`_aZ_B;?tvAxv?i9br?<Xqj
zikAMkx-xm^tDB%|95ia{(7?dRG|Cta1clL*z#%Xi2%|;8Xi+el3r2InXf7Dd1*5rO
pG#8BKg3(+sNOQr3MF;*fZhG3dZcf*{Hw+9644$rjF6*2UngGeV|Iz>e

literal 0
HcmV?d00001

diff --git a/index.rst b/index.rst
index 3d72f2994..a16caa4dd 100644
--- a/index.rst
+++ b/index.rst
@@ -26,12 +26,14 @@ PostgREST is a standalone web server that turns your PostgreSQL database directl
 Sponsors
 --------
 
-.. image:: _static/timescaledb.png
-  :target: https://www.timescale.com?utm_campaign=postgrest&utm_source=sponsor&utm_medium=referral&utm_content=docs
-  :width:  222px
-  :align:  center
 
-`TimescaleDB <https://www.timescale.com?utm_campaign=postgrest&utm_source=sponsor&utm_medium=referral&utm_content=docs>`_ is an scalable time-series database packaged as a PostgreSQL extension. See our tutorial for using `TimescaleDB with PostgREST <integrations/timescaledb.html>`_.
+.. image:: _static/2ndquadrant.png
+  :target: https://www.2ndquadrant.com/en/?utm_campaign=external%20websites&utm_source=postgrest&utm_medium=logo
+  :width:  13em
+
+.. image:: _static/retool.png
+  :target: https://tryretool.com/?utm_source=sponsor&utm_campaign=postgrest
+  :width:  13em
 
 Motivation
 ----------

From c21e98c9ae4dcfa4ab7d1ed8aef89046ef01db21 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Sun, 16 Jun 2019 15:09:49 -0500
Subject: [PATCH 233/652] Correct url

---
 index.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/index.rst b/index.rst
index a16caa4dd..ee3570850 100644
--- a/index.rst
+++ b/index.rst
@@ -28,7 +28,7 @@ Sponsors
 
 
 .. image:: _static/2ndquadrant.png
-  :target: https://www.2ndquadrant.com/en/?utm_campaign=external%20websites&utm_source=postgrest&utm_medium=logo
+  :target: https://www.2ndquadrant.com/en/?utm_campaign=External%20Websites&utm_source=PostgREST&utm_medium=Logo
   :width:  13em
 
 .. image:: _static/retool.png

From ecb4f15de0792313666874455b82f0367b147059 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Wed, 19 Jun 2019 21:11:46 -0500
Subject: [PATCH 234/652] Add CYBERTEC as Sponsor

---
 _static/css/custom.css |   4 ++++
 _static/cybertec.png   | Bin 0 -> 15406 bytes
 index.rst              |   3 +++
 3 files changed, 7 insertions(+)
 create mode 100644 _static/cybertec.png

diff --git a/_static/css/custom.css b/_static/css/custom.css
index d4c0ceef8..555afaa1c 100644
--- a/_static/css/custom.css
+++ b/_static/css/custom.css
@@ -17,3 +17,7 @@ div.line-block {
 #sponsors h1{
   text-align: left;
 }
+
+#sponsors img{
+  margin: 10px;
+}
diff --git a/_static/cybertec.png b/_static/cybertec.png
new file mode 100644
index 0000000000000000000000000000000000000000..4bb395027fa0fe438446e46d76c32a8a3d46df0c
GIT binary patch
literal 15406
zcmeAS@N?(olHy`uVBq!ia0y~yU{+vYV4T3g#K6FC(|vL>0|NtRfk$L90|U1(2s1Lw
znj^u$z#v)T8c`CQpH@<ySd_}(n3A8As^FQMn4TJxnwU~qcrw+7fx&vWr;B4q#jQ7Y
z>kC9m=l%c4z{q5*^R6(hDQ2pZz$!n*$dy(bC;ffYq#eQCz4gKNABC##7JkffY`ru0
z0p|{`b)4nm0SBWtS8!kZ_}D9{vq*KvsgpBnIKx|KGsI2JV|p#0(R5l)$5=ph();RX
z!nX|VciG>)eD|{P=bDf%r#WZ7l+^#ay#8N}-QS-)FJ8Sm#mvCaP|YT=fq{X6BZ7f}
zfklUbfq_YkR4yYoie8er4GpX?dqH|h=Q<n!MGjmq>0E^bMg|73y<ojWaKV9wP)s@(
z9N=J!z<NpNf+Gu|mvk-}5#7C)fq?<LufMKeyLRv1w`)#vcOCENZg-ZkXJFVAv1aq@
zk}bjiias3@eH`zn`tPX0%UuUw=`Z}lnC$%Xqy6EZENkBBT)k4VXY11t6RGSxyM_OE
zPxMF(3|z9LWYQnaiP?XC6i#tvU@)3~MDt|Or}XOMSNqqsYO$}=m$1;AqVM_o+QjCk
z{+_Xxf*VvqOwH#`2vDuxwtar->s;rB0huqCOuBS3^=YtbQJ@ba1IND2vhnh^->;th
z9PSshqiE&j$q_}t8ugb-o0q${{kpc}Y4(9hF;@fbS9~~-9~JFi{WtRH(d6`VzZQyn
zdhc^R+T4F6$?$aewVYL2nscYDeeQg;`E+UD<HxJR&dn(e|Fl13T}1BcxtIKdat=M*
z@JCgKPgGsX#oJrmy^HJe?Ca$@_kX_Xi?s|o|7wn@aovZ-59$T4?vwlPz35MmyuIF}
zAD0*RPu9LX>#_I_zwg@;Kb?qP|5g5L!Tb8ZiqpTJX_9U~?SHHI>cVgO_p{&sSoC;R
zzPy!9{edfi&d+)zpOs$vq<LJ{=EJ%_KPn@qX8-q&&VIUlNy?;{2h}l;gB44kZh9&z
zz1lo--=<xwmX+O}wnj!<ZF<ezlBH#JY_;p3=wH2XL8D&kq}#r37rm=4r+(N+WaZo6
zzH4*;&gUf)STqmXcE8`p;N5=9`d;>Lqp5NZ$Ms6fJXcMg|C*caU&WaXFDEkfSMl%V
zjkuVxChxtp(At<c>|4Bp=Kk?em|^}uZs(2NMVV8+XRfecq<7$%>6)5#OE&6Q8%9O>
zy);?T;<WI1`1&)m^4D@*dR_Ya)1Dl8*K5J7p63)S9hY!Soqj(std4y*tEJMln_sWZ
zJe@yp=bJ$L1-kJiF||ugxBb5CEwmXF0##?EUc_#hl(RA8p#M@i&*WWR=dAQ|*G_%A
z^7iiYQ_X8?N|#>gpQb<gbz$-4P91A!v#_f#_T-#o?%r%#zvA1)qul?O6&=mmS-;>?
z%Vcd|op0w3e!sT%uEN(zSEdD}Z}OjT_hQ!h<<sSUy|+I#-_awy&D&F2thn^B4QE8r
z$-s+V=?f;EH=WfL$@|qksAhG6#TKvim1(c1P2c=dWn#;!o0b;&|L(+O^xlZr>**z8
z$i4E;KhIpxGfraGSMCWO$hew*rt0;XrwwdtrcDbj^4Fg}XMyW#xvMkpn68W7Y<G0m
znl*p=Hf>rtO@Fe5($}=IIV!oiZ>{dDp0;8y^_tQZdGmS{r+xnakTYI?zwvYQUA}lu
z^!T~`9|}!2TwLXTrfR9_x0KJVm+#L@*Z#}6I`93ycKIrm4g4KnFI>1VqbhdU%|MN>
z%UsUuScIB|Wx77sc_(AiA30S!e7W46iH{9WPrYrg!11l7D)VXk^LqK$XV#qk_u`P~
z%{NzOZ@MG-M6a~*3dc%!ZBFgS$NPgfZ|U#<FZu3ss_sWk&&6wXmp{>8$@3wo^yXdT
z^fghjFW<<9xG&t(>1NVtA2{RU@-CK)xz2Nx=QgVy-23R@)AKnIr?+fhAflK)_wA2g
z;_|U)c4SO_Gxgeylb^%o=2{&3_@G>zY1%8Xk~``Wog&kw-VcnDs%MMad{g=7$7esD
zy!SmmdzPQc75PH3ZTBpH%uCri>+IEYat0x?t<(HPR`nfH<<~iPVbQXAQ5QN-SYEZf
zvAiPqTG!P{dn&DXrYJpGu=x4Ds(+8WB`>OH{B#Yg`LX~1kLmXd&62}bF}{A#SYDde
z^2#{;?CkpdSNyxYwY0o#p6|)2Y<00UeK_sz7WJ3u7n|l^%UM@cw*SYES6)9$PxG(6
zy*vNen%zcQ-sdET_U6xRE<ZnK;<UXfYZ^3JHIF*BtSa2{U1hagV6b+o`&AiDEuX)>
z@8UOU?7i>Qd#ro<iYc>i)M~pnXn(7z@~qqR>~+n>!mlSEi_e>DbII|Tmu7;ccX-jy
zIi|1M<6`(#<a*=d6g|Doa*ltSyKR-(%F|EkE=C@^^hRS!|BZ;Po_0!)y=I(S5?}eQ
zl&>npMkYr2DbvhTO@2jXKQ_B8d$aCLuFO}b1>f49lxjMyT6ov7V0zG!u$ZSClzznh
z`0;4rH~r0TyklRziTe5Qr@MOFa(Av8u88RES5|q7=elawx7n{=dHe0LH6cdR(%ch^
zKX>lh``akHBgjN*^}0=c7jIs-)R?|y(w=uSUxYqh(VUl|8MyU!T#DVL7&AM;O;;oJ
zT{Yq+nB;{|S{u9hUg2-62mKN0)0eDX{CwZ3dv7GB+UKU~wEGL*@(ov2ogDY?YWM1}
z@L!cnCwf0#XS;vf)yM@#(>AOBGnub3<;?YK*XB7c&3Zj;dSy|-y4=&#!aWMBYObF0
zSaKn(^H#)GP5vEa>fg?^ZM81{zxqz@Ege_WH?}O6v9>pB6uU1^ow(6&-u8{#`X@K2
zmM8pr>1A~M{It*|AHR9){h9Q(tNZw?>#67FO}sXz%Ea#G%W1cKH2u%|s)Lf6U&FbH
z>g>H&)(J1${XKEf%}H7kY&%6K?mj!qH}qGc?d)ZjoxlA&>Rx~91v^`A&E@|;C;t<P
z+{Qd@ZDDxP-L-eWCEe2BJLzrK_S~N*ZSJ1!IPbD6ZSUsW!E;x-OG`-^C+Qt@dA{Il
zZ84vnrN+wGcamR%t&K|-_rKa0vg)|*FW<=Z?`}+u?7e?NP`{?eP&eCb`O&54)~WZ$
zUx*1j9(N!s({kzjbt)H5xN2D3bvr#R+-9GbIlGDZ{2Q-U%=O&7c*Cx&;1BC}%u>FQ
za{So?31!c>rn6U@8i(nK#ebdCC1I;FYp?cK<1jYUI%W4gm!wYb3w%3G^0m19-;+-p
zR2vr*9nHEsXJgjVnDXXr@oDFFy`K3s+r+wj&f3ds?gvVIa1{M?x74cX^r>af-WWeA
zTJzOdY;Vhp{<>pX85v6ixepeu*n9Zs)Za!Y+{M?u@NrF4PFNegIWB#}<|E>qhK+k)
zfU^1KonFStq2X68GSW}=^*PNoT_rrXd1|GlPpZz`M=H<xxSbBGB)<%is_ZOFEfa5g
zP_m^sI{RH;&4h+jO9^lDgp-kLH~VzOWUB0Asd@GA<KyFNFG(9;xmR~BvUJ(az#XOD
zxdzr;PouYQn|E!8)|wKtzqQj+*L;<}mSt+cp+nzCn|H3^d)}|TJ<pwQ9ktqB_tC!I
z>vYUp^VU!Kl9my5%iP=ab`<`2ySQz||1b64^Zb48OvnO-`qx)|u~pv_wT+WDiFG#2
zdb}}i{q5%qeB(ARzEIfkdCIeg)1>pnJ_dMsslP1wcw_Egj-Au4l(vN)Niv*db?M#I
zYcIrQ!)v`mijVPBKbrRb%D=1S_kY;e@2fmjdVX5Zl=<%JeG?i~|F8QO{BQamhkwCw
zHMIvF<jvlE-{|+b&uMM%1sPqHiK@-(b{MDMU26I6;LQU;XZxJemG{~#{apJ}=8a?V
zs}BogvsvCATfgK;)v+=ru}iOC>|9?XaYIirGqcdcXtIjd&(m)gw~2`H82uNmY~14$
z_h<F~Uz>fm$C}$3U3uMG^Z88bWOc5!=|$Jy=>9snXQ!n3jmn#!+M}cWBI|aywH=!_
zEtoIrnaOpHHS1Qbyt_?Rp*FX)`uoc-td}isI0pv0q-*_Ow(RkmN~X_C;&v8o4b^=0
zm`7In+<k+}CH&Dlp8a6me$Pv<CE59BT>gg5sa4HCWAB8%STWQ6(~)i0RxFn;JAL9H
zcfL&B>(b_6n|J+wG8?y8{JA#s^u4vc6)QKto_cLX&4kGfqP@pT=G9Hwy^g`oIKxw^
zDP=*se3grG*`AH3>Y96>Nwuz8Y`|f?VeQ)3<)<f|J7{;3w=MNRR_PWGhNAW-?>&}W
zsHqa!nf|)=wD>9c36EG$)=%;<%9~yMaQBSK8y>|zfAE!+Szd?lzFk&FbiT&(qfOH7
z{{1|)OHH3$botzVYyXt~7n@7ZDjj&GGkMa*&puwNON|*{TC?9T{#LT3&OOnaL2s}0
zYO|NJc~<Pd?XFE*pIBj}b9Q$9`ls0*uROXhU-WzbEOmm!mY>_+@0ziWXHwm~9Z#)4
z8Qau1xG&s%zFt1#-n@mIeNL^qs%=~~@1!cf&b7)%=RX>Mo8>REtTsyLXHyB^vRi)=
zOdFQ9zE;xlp6I4-v^h~x*Jjpq$D;F#g%9`p$q0T@W6%`3J8!PdCpG@6BI)zBSD$<6
zY;KsUyw`OW|9cC*2#{grYd2<?EHf^)o!hJ#Csmp@$+=J3zHZJ_T}j=D5BE=g4&M_Y
z<bG-DlX)*EGRf~dbfe(kX4QA;YrN;iw%@YOVbPiUZ1oSPbCMQcR&AfT`Q4^Djm!4_
zUGw-E``Nxj;pK0<!nuzhTP0=19=p?Ilkfv)$3^QU|J{CjFraYix<8cy3x7MQ&41x|
ztZMW6d6(;$r}<@{+Vit`bDE&lTz7@wnVr#_7aQni_nKajzc_PI=Q&63hXpg{HeC6*
zLbK^u_cQJPm#3CXzV7Z@y;r^Ly>&vSS^P_$V`oIH?l0Z>vVv=R+}gfF&z=d}=|`z=
zKXf(p8h6EI%N2`fi0MqYGO>40#=feYM;!k_)q~t@iL&xD)$ey6{KXex<!k!++4-}}
zzVZCjoA$YH+qQXrOH<=EFD^L#ZEjs(!qoo7#TSkS9r1H`rL&tu@(G{)+_yh&eSN0A
z^^~vF{wXQD*}Lzq*(iN}r^tp)YkqoZUe8$QS(vlZ&wb&MxxG@pUh6XQtUgxFEp3*Z
z+sqIsXL<T-r&T`JQ||*_zrW9t(<~?yJgjfE&P!-3M+EOz_cP0Po<6<nnfB5(fA~&+
zxje;5KQZor6_@bb=4-{y7c5^adh}@H8<rh{8(uiK_$SSc?alMQ`18h*1tJOM+n+qy
ze*5Pyj)<>P+_9<gpQi?8nQk-rx_t3hYp%U@0UmaTj65$}W|(g-ie;JL+c)p`r=b6*
z-&$^XaO~krsj92di3b(Lr|Z~M-ZM!!DSD`=;`d$S^ptGoQqPwupT&0=eR15q_`>0p
z?$J?xFH88=-QO_n97pZ6pR<=AW=M%R@T+<D+3>@k+0RHC>jcDKIQrJ|<6E&c^E89f
z=YIS2=B>e`*YnS1ebc-Yvv|Y8g@JtS?sto=UcOcT{7i`B&9Si0;s$|YB`%A_x?j3=
zaozO(;J9Y<>AR|b>TJ?xEWf<f+Q4j1eXz#=?;Foux&NxWZ}q0*J^D9{6C(QzyIi<7
zSGe@W{LeBA|M|gj)#3|9-&Vd_<-7ZvPuX7H%;VqYu3fuam;cKocCq07H+Uk}hH=&z
zRdcRX|GH*og8*asmg|!XS8^nLo@(^<eESZe4WEQgn@XLo`~F5LXGQ)NAGRr$;Y(I8
z4tVu0y!_3knwzVxPA%cPm0I`9V@cX{r}n1-EVG;*1|KNeT3_I{L?PpB_^Gw;Y`rV2
zG*|GxDSWwgj?l_E4Nry6s&h$8NzI<^x8ui7tI0<%TfWeUl{K`l-C^0Nb~<>TX70m&
z;dOrXrs+P82K$#?d^Tm*lhFB}t78<;)EkR%72YkK7*qIup5@_BE1O=ensqBTIwtea
zirc%_@4UI_-Lm2fANQHsmvcm1xOnYa-oJ|Va~75e9%5HNA7A+K=fP+<K0O@?ksJEE
zw^)c2KR&HyuP`(J^|qB$N}g^@JuN@&ZeHB{Q~&R7tbM*|%Jr+$x}wuNJ+0X1np)0K
zzrLyH7yH7aMRVB7cYe@J*m<kQba6(;g#By8n-5o&3C`L-E4tvisukB-^;uPW^WtC0
zwo0!yi!5WjZ26+$+?2H@Tu#Av@0qX3E2#`&s<SA(cebJQ_lku(w=uJ;E!RH1T3_~m
z+yn>ZjmJKvUR~K+mcPQ@>G=ZpZF!Y9_wauDr`rAEa^thgEX%+8=DR+$cfaPpCvuAa
z*@v?EOw*pqbS@0&a1Xap+URzu_h)v9`@+rN{Y^GTtk3s&zF_gUw%TWlUpzUH_WBh2
z2Zc4!HqDccezs8#@N>70t=Yb^-cE)6`$KcaZuaKO9-9|`xGK9lN@nfV%^O#>opaQe
zvH9@MJ6d;L$LVR|1+Fb=5!-Y2%`$!6{zl`6;D)3;HXZTjjwenuq*@+nU%h_0i8Yt3
zPxsY;`Xfbd!B*_DE7q;L8L{`I(Y8wqnPrRKr`&Xj4KnJilK5wFyYTAShSFF)wl(?l
zl$Nk+zg2k@(RUyt*H(AyhB}EZx8!J3wS9|<FTC3tFlpV>oF7G&K7VieKVh=;FP$}W
zCpXs`=eM%&?24baM!WM}<G0f5E7-3&W&Z4?k7lpWy=fxL*KXNuv($=9JA9p4{ms?Z
zWoPG<PJgx_(=&OR`?Pb8wOOmUPp>@fQuy&ky4jl4e#hgxOkbCNvU;A`z<h1`!TTpz
z&H1kLM;LxjJ0K-4H)ZzHMZ3E{oSAuEC;rsVx6E(*4*6QWzjmkO(brwI&(<$24hZ%>
zz4FznSx345yBWt`%~`iBP+;1ki!+vJpH{CqdOm}<wZHEDJ&836=k;H$d?&W%^mOYp
z@##CW<nAoG9H?=%@b10Z&(F@AuHR9bR<@w{!W^0IWy^%E_|Hq9I<?I1TwH70wryo|
zx2@iD#7CazQbT@B&c0KpuL{1q&$6cP^z^gw$9KM!KHGOl_ICNSss5%fHP+nz%{I6B
z*Q3t|T$5kTT3#0w?e{X~XH`5$reI52+4^fUeuul3af$wU@=k`=(t`QgcBX4Hjpqk1
zX>u+Vnf3jh=iWUVvx3h)TlMeJq1D!9GwZz)tl4!Bry7Wg_t(~xrbgwt&YJCKF;7{S
zqe$1*qozL7d+pQBdrv;?iV~cuU0Jy=h9}~hx}|Q!zWAaND=vPyit=Y`c31t^pL<hg
z-pviu@^r#ithn{O@q=c9>HG_lN1P9EIc>RA<8jC%oab5d|2uP8w9{X*>6|N=pIIi7
zcQ+_Htj@iEv9jro)ca!2RxyELW})Ber51}CsfL@HAI)#id75xZ^wQCzh7p$5?uX48
zU-#GliSG)zkWnsjO~s#GA#`Wz^93PycwTz6M*Vdw5*4@qGJVCZ+viTr*VSD<Yj&Tt
z#F^uZg--BUS~F;CCd~b<{8XW##0peGJvBX6^3clI!eEKAYmrObt*G6}zt3H|<f*!J
z^4a-j4gb^rJaCuX``11?Eb(8DLBj*-6M7s*XHB_QuQqcP_CIj-?cMa7?2gYDL?>;W
zu_W3vs$2Y@@6qPdsn1t0X0QkgGRl1Zu3j~kkwvE>{$ZAntycIi+1ur-K5l-teo65K
z<+W><t7e{^`?-Gg>MWh`xlF%$!c1qc$}$VTD8-f1UQ_1y;bn=)zPRoFamkj;`Q|pq
zRX=}F{i*o>B-hW+?w@9mir{K>N_`r<bjyWxJOUdYn4eYW(p@gPwD^Mg`gb=<KOEQ%
z8kgX6pMT|0)6%7rXTB6yNKjmRb>lJN)@Md5ia)%YX?*F1w@~k~sA#{Zs%q1{p4O_o
zxBGKJxhKqRew0wEPT;*os!JzlzG2y9mLSR_eQY0x#oRt8VaY3&7TMSMnTw*=ADUKm
zY2V71E$3FL+3wl0b=%UVrBjbv&;MF!)Hh}6lb4C7Pc1t)r*!&99fO89oDuaO#mzV9
zGx=>^ykS4LL2c-{Z<U@kN^PF2M7<_mJIMV0R`1TNTkk@9>YV>Sn!MJ;WLd2z1B2eB
z+O7%D&o?_f?>uy`qUeIIP|$SU^*6RYziv8v)u~g<Zk>v_D%CBnc-*t#e#G9DMMtw1
zGYg(5N#Fm+Dt-U%cM@yD{C*@9TnIcdxj9ZH_UFXa54@wZOxv?Ok4f3@oAEK?-;Vl|
zi?-x9zl!g3TU@rhaJrDHr1v5l-$;+?hnTJ}EBLkOan?HaHTJ(ZzYkhs)O5Gc$%=ii
zvh}vK;;B#WzFOsLb$D~!ttjn{J%=Bjuk~24ZTZfZF13FJ|3)wVArx`-qpIYI2oL`Q
zQdS*vA4DDawJ!9)qLWq@U*>BpDZap-`n3GbE#sX<N44g*b(LmcyPkLZkaDtR#ko`G
zH$4@dw6Ww`Quv7o$&}2(jGPDIrezyrPfeTreEprOyASU0MjUPvjkp(B$i@1KE%tfd
zjB}3l9to3fgv5p}KDK%G1n02r-+6=b^^O<*TzPx9f6_F+rCO4!S7;oHi9D$OQfs!+
zksBLkCmMb$4bPj__0GmRt><fSi%AmetFFAt_~;;~{3+|h)~?%A{fy`I^pi)YZY?Rg
zv*%}VwpqBSc>mSPkGD);S03ZA<9^Ct@bRvnyLGWuLZ`=)3y+@7Ud@z{b@NlZ?)q6-
z4?Vtx_IdL>SbgneL{P%EyvmujZ1e9LUE0cK$rLv4>7AQf5*VKydU(ND`dXWlnDZK`
zSJIi28>WbzjF`4mRsSQ0*4lX=cGv8>-chPGZ878P*>%?*eSCaI-XcHGYNE2W>%Pq3
z%Y~E0H#AB7Qa0E6{Oo*f>2bZu*N-G^Y-YcgdWy~CSk(T+wdb4<T5o%wvM%aJW{$=G
z7dzL-RIb*yS~u_Qk6jxSUihos`yF3j@U&L!jzvt}KG6+2$6r73;|{xf&s<7M>TJC8
z0jK(DHX9;7P5!CO!Os7ut)bQCZF|#w%OCTmtTtJ9u~UX8LT}&glicCU*sT+eTHTfJ
z{O>ECxH0s=q}%UgGM8<8voG<3g^uyGpWIQ={+C}eFW&N^M8xch`KI*`;tz1`oZ0R-
zZ@<uo_pcv07%I=^+afAev}F2)O>6aJ_=<lWY&o}T@6OB5`Bwi@S#o(!<%a|LH^M*o
zCLUby`tEG=)fboEb9+B$&x0ry9$u*n#tBbV<=&Y8H~l=(^X9^}Yws4-N&R9^tUS3T
zW{rXPIkk*g=KtePyXi#PKHTj2&ej9e(ahLjJZ-yfgw;+(@mni&!(+G1InU%V$9HnD
zPUeZVE^&E#Yb@5z`!IQT@N&7oho?LK+oT?obx>-a{ec;-Z=xAjUwJi2p!?{ix)r;h
zil;D$ePNn*^ljH&(}sz6pPk)r{`D4TfpJ1_iE)DIyx*s~8=tJRkbS%7$)#<o>t|fq
z%zAp$%wG>0%Qx@#h`gsPCcI&Rqk6~X$IVZel5bl1tycf@<ekA97yU#B>5Y6_cW+Ca
zJZaY7s&~7CUdJ6$j+EOlOP6U{s<r%rj5U1))AqJJiM}I}t$rXj*qyiZ<K43QD$N=3
zn=kHtGTmmc>-mP%pI?Hjf8W%RV_zUFFZqzq_e>N^^eIz0yQNo!>t@Ln8Yk3VEc_Z!
z?S5h3<CCAmQx4y$+Ww?2^fsfn%!zx;TVJnbn)dA18is`F=RPn;**;vp@nMa4HRorh
zn;lP+p6%A0GJlU>*?HOJpDTV^v)?~`ZR!;r`N>x}7ce|<2n;;3DSBq%yALyW?`?6+
zK4NwI<5qX(4Zk=dW=Sr}doO)+#=5?Ua}BNsm>y&vGpctqkxJD+=wEzHWXJEe+fm5}
zE9VsSuhz}l-Y=CTxFPM_E^YJqs$1U3Pq}+YhL>T_VF7;@P-=*dnY;dBQ2KRl`FNf~
z;l<m3W>x%ah}MnX5OU0@e(|?&n<J-fTy*h<HT!+z`rdOs4GoR=WNxJ1Y&z=0`{91i
zqJ{7FJ-k>P&$@8&hoAj-bNJ`|di!j39rLtvha#-Ey+5;zY02f6k$(Rb-fVbN$o7V9
zO^)pUE``~0ng!)6s^b<dzHszvrcA}_Gf(^VVhYRkGg);kPl6infA-$GeLl_i*d(jf
zdGGB$Uw2Vz<vGw~H}{#g+FIB1Rm(c2?htUXmoq+d*L=^Fn_r)N<W9HV=Xd)0#GLP5
zt7m`L5^|_suX80|ZLaC-_G#}m7OGh1Er0cGU*gRh2{&`OR4%_f#o6xsM&rwlovG>y
z4a?lQ+SGj=9)unHb<|z_ulxr&?-c9u`^9cc`rR3S@kXdFo$TeM(-!TeaWf)x^2?`g
z%YSw?u<o8Ut8e!H1E2ml<!!1t#^K?-@r?X~D&=WEYS(-|`HZ{no9MC2p`Tm5^Oo<j
ztbHr9Iqs?|zs|Or%WZAPeCFS%J^pR(w6o#m=jR-ptD3WMPH^uzg)b-n1g6fL<FHF-
zN8ygw${TkXU;D_dem?%=L+uqMs`FpGyY1J{!~6B>p7d>-y}Z;T{j9XEt&5z$Q?@lI
zdT(6%-I}GB6S-8DYQMI;8gWI)Z=HaRW#gB~ipK@|_r3+CU!V0@{9A?1$=@$Co;&~l
z>wf+6)UJ88|8~1d{k{2#Yp$?eu{BrewmnNygeG4;Fs({#YfEs?8RrDwevuv4>S0El
z5!!uozpv2rzE|_K{keXn!M*INl#IlK3+(=f@B5iAChGbwe$$Jqvb%NOU6+=6{q5c5
znRgTe%5v`Cyj6AUQ>s<$(gtwJ;<wdf$ppXjFDonlSgZ`Z$v^XH$r@u}bL%Pg2{{(`
zudTN+GmQCo|NrZY-~QNL+xhHA>uq=5nZ{`m@7q7kv8;NxI(KcL`1Im;iH`r*R$Z$O
zdvx?5^ZRYvqt_Vxx^(T<qD4NlPApjXuOqcUBsDcSGqXWgKX>I;y>OqOjLR2Ylvo?%
z`1qai|9v}CpFBwScDwa!>Y*k_Ax)dN=O%lo*l)@;?rOVdx9a^v-)Tv6W8Kf!?)-h(
z`<|=z)OEkI_nq4OMkyq0?Yb+Kk)>Cc`A9Zs-qws>{n=}-Uyy?3j@KskDKW+RP0c6o
zOpKePmB;n8`md&Z?2b=|j$b_b|NWg}`M)pM8c#Rf&FAlK&A+w$#QGEZr`A``TDMML
z!s7UslU{3ULxQYcs(*eK#mClvG-;}K*!7%sTtAv>i~eulxXLYk&5OU@Vi)_FYeDm1
z2lp;X5qiq?cVUjgkAEMh32N_=ymV!D)&(OY--j0*ALf70IcBxnPgSj|pggV2n_sN`
zZ1nXK=NFrvik|g7uIsMDYM<=6YgNofuk;t8DnS<c|Mt%DxS${P`r4Z7obP&GF*9;Y
zuHBGuq50@S@tD}t{>Q~-!$TKO5!`v{>9;`Vy!TswB=DO(+ftEsIBKrshmd1g7b?26
zPQ298zi4>Mfqh5ZmI@6~%_J=ymV;kB4$AN^lRL|CU7V+;<Ppc|={GqdisHA{9gdnC
z?sY6`ds*|jFE1K>!@uiC9tjorC2sR~k?UvCpmnDfy<uTFc<IrERBgYoU&r_V={t9!
zx_a{_uV)oCSG~@P@87buEH>ep!c^}Ei&*Wi?qQiW#pjV0hi{Q`;LfD2X%}}@KjUe#
z4%#1{qOPC-nn-JBe9!p%RN~p4x;g&U_Qls??Po6k%@E@3oP4zT^yPii`eK;m>s|<+
zm7JhF@lg5~saF#oFG=v;GD({A@1m_aKM%h#kGOYy*8Ya&9D*_n|1h4P)^lcVkEyLu
zNmcx7tM4aI`bBQrqa@WE<+pUjmhJP`#_Zg+Cg;`pY2iQYD>koPTbq1!*|W5}E#h3Q
zDzS!NxTalPmG@q{EWLS2#zD~%L8S)C)7_^3m}aaiX^UGbvf<OZvpq{^Zu}(V8|mw-
z{_O00>->Lv|HULPx;P_-sdSl;uV47V`N>R~S1uKKxoV%TEU&Jvx$4y=7PIiCJnw{!
zF(toOC~mtn^>f2hh2*12hMm@>)!(O1^^g5@AnAS7=8!Fu_&4p=dbR1PXbjWEW)-cI
zp}M+jKZ&#NJmnE?oPPJ{xt3)fOD^o$;5l>2CML<#=9iV7r;D|}{TJr-ciE(kUf$~Y
zYwj)iuPs!iGWn#x=Sh{FPo_-0|1ha}T8P!hzS+Orc3;#I;aVHDchXgFrbh=F@0*y)
z`sc3*I(jnC(JOq{B;I=)YtyfZFvuBB{O$j_;p)9>eg~WwjITY@yuSCt$D__~<I^H{
zZMt3d)ak$}@1Dx(Eg`X6Prh5aV&_knnv9UIYNomqSWJ)mho8K<bl*P@=f8sKygXlc
z*m~<WXIxk<y}zmY`%RYvrz9u++o|Yc;3+04eeV2)qmtFLjni&iN@_prpx5(f`sY1m
zw|A6gU$d5$T(FKeYePuk#~Y76K7R7f_wN%`v1$H!kFv6}^YgoxuUNM1@x_caTc3t>
zT^Id%<al`aq;(Ihy2NBA@AmyXOZRPm8uPP-DLESdfBNfH?GjmVz3n-F#RiKd|IaK?
zXVliexFB|S?&)i~Tc^Dioi(}R+4CP~cc-6=*!Cw;?oHF{ck!D#(j+Xz_}X>fd*Aft
z*c829de6^o@ArN9cy!D9%*SVZ7ydcE<@xSUW(k_7r-e_Mem^ia^l^pGhJ2@m6LNGP
z_dVQIa@M0MXVK*kHv{Th;+$B1S<SY8&>6i?nK3&$+hp^sP2k39P`&(gb#`sdxm&W&
zuP@KJ|MG#NonGUKFBzu!|MvP^;S1LaI(_|$@P-MTdGe-Du1&mO`})jN^YbzLuG|#;
zu(ovR!&9ppmg-a{Y>dg=mRD(+v3RO*aAtUb_QAVOs;XJ{{_J!q+c9&amrh%v=@oOg
z#fEMc3O}5FGK<}@sHsYMG0$J0^&8{i*W7G+J^3k(-S1ys{qn8o*7~SeO;6C=d^7t!
z-|FmXF|4V{FN9lm?_9N|M5t0WZbDJ2+=eAVYj6K%bN)L)lZ%_p)~c{YMYl7u_xV09
zzwBu)tL6J8&C<^pT)%(w_Sfbo^XhJX;#$e1l59Eqzg6kcqsh<D?w_8)8h$G1<B!5D
zFTq=@A84-J6n85s`=8X#+ON5}JO_@>*t%u&>wxOxv(xpKm*-sbUHC`-ziZ>}wPF8Q
zbzIN=KcZw=93AE7d8x=IacVOg+sY*sesX+GQ>uEr&k8BIY6OWaR5<7#^x@q+%fmHO
zTy?~5M}!`J^yP%b!at0~LcMP4=i?_Xd0O0j?ZY3&V0Yfm^Qwa1%$Rszyz+83o*Q-9
zcha=i{L-hFZd_7gw3CaW!AH>(G#%wPXaA$SUe?#edFEJUy;yslcVF!lf%<(RRZL<1
z8?H*lzt;ViULzMcyEl5$imooDRgae)U$caPL81AG)owp`YyY?%O7-))N|)VeuQ+|;
z;NwF-g;pJFV-pqQ`Sf%568nU&X+GEIO`oxG@A3ar6|Tyz?FeRINZC61`T8UO_Y}DP
zect&w{8vq+MSa7oPue;X5f&vA{@6~jSJ)dZcLcO*ZNf$H!Y%OPEAV<M&>}RXb##Qe
z4IpD6i|#;*(YOlRnXkROTU{UeJA1Ntk6diYVP4nmzCZ8rF794-H}c)lXa5f0x37E?
zG5OEag<bRYVl3`odw)v*)OzcGFEoR_{=b|*|7&sc-p?o1b=&X%clbADez*AISMusU
z68iTG54Fs`Yg^WSfBpX_lkcBoU-?(Tt%u`ux~JvN&*zFXjr;Cb{^GBDl5jjq?6FAy
zzK{Plg>K4?tCziBw&VKmv$3D<et%#8`*5;v(4MES@0%?x`SzwdCHYe6v6t^{OQp`u
zEB4n~-sYJY!0u{y^se#UyIQKcrCT>1@00!g_WAtns`Kr(tL}5{`Z~2va)SR%gTS)8
z-<SDnPxt5lwDQ&SrAID*%6YTJ`TtLOy}W{b-S1UfFKJ9)oZT&^w=4hKo5*+j_HT^-
zzW-}k!6z@a+zoS>O-=Q^4BvhZnJ8cSMoX)1)~}r#>;E_2-5oc1?uBaUl<g<_MKUbS
zwf?^o3}2_}sGPn=Je0@!&ZHXOn?Fy+$8+uZbE9|9%UwSw%HRAavOR2He(u}#)#7ZT
z@jX#iUybjc*E$;f_pRaLKOQ?LY0r`oVPAOs;M9=Xq|~R%2k+$D$(P?hwR!g(mNoy1
z^7cg3eA`(QdUNNe@3ZPB?)`so*YbG<t1Z0TJpbwZ6gj!}*M2>HGtU>V+C0zA&n&Oo
ze_q_;hnQyG2JzDEHNK_u6{D5zn^aam`CnJ@W_!_(l;HVwzjod{o_2ETjgLFOpSgTq
z@?ntI9+zIZ`Ks3LtQU@UPdmlFbN10-&0~48wThw>?)<KbmHoZvaP5tJ&9Ea{u_s#t
zOf64rud^>)`^o;(t-IA1y90MRPG6wI9<uG*=JU7bRlVvISzl8t#`aUBveD}Da#_9U
zt9NWxei}ISQGKj#xc1GrweL1&{Q37}dprO2)7Ph5KM|jDJ80!e-SZ269DVfoU6R7@
zwMMT#<a~V>^7U=dqvA?Fmjg!mne`eIHNL;8^L^@N$x}2V_UE=&EEAknOH=o(+5dIh
z+QVwM6K=X2{A#<X_f2`pj)Utad%1j_@uf0cB|au^R;ac6pQ=6o8}?i}XuGARMW&>b
zU3tFJc9Ffey|1K8nyY3VuE~4&dEsG?P+q=u6CLk8%zTq^IdFEybN_dlQ}-_Xr^g!o
zFTaX;+S7ZJ&qi<fU{~t!wBqgjq662Cn(j3Cay@G0wuhg)%x+4r%6<0v{H-}xFUf^!
z+Fid||NBGovudAxvvRiO>|b^As_WUpW0!8dxw$#*{7&~)iK`#pEVz1ecktEu-ktxS
z-YjLdUFGuR^-5W--EQyJ#&T+F>HE(P)3g5=ef5a0Yl8N#1-Tn?`n8rl%RTq%#>!pJ
z?-u^fnPjTozWaCczjuNs#niqw<s8$GuZyd_wqEGDTimrk^*zhw5Ayl%n;xqA?OdE{
z%-`-T556DUCvZ2<X?|t#?%vl~d$r@wcE95G`kKAR^FCv0$;2sQi>FPC=gFD+NK=$4
zWb%xYa+8~t7COdmd(7)?Uw`iPshDp!b{*L}bC)Imm8EC5KYo{9d2U9-Qi)^^m6OZj
zrpnj-XD;RQ_&F_Oeb-!<X$<j^&07y<RSTWn`E=UX-4`#VeLpfy_@u;@^~KNEu2X##
zw)on=17{SBqXM3Ud|#)R*8Y9RebcPl_rB)$UuUsN){QBdf7eCg{Q<8lTY|os%vSFW
zKNfv@-Peh%tGqr=nPa`mIr5zB+;^=N%3e>EU+uVYH}>2ttq=!Kxy!N>yl3+tzx({t
zoJ2<N+UU^rZ|~2)<eAzdHs9!J^{Wf3wuib~H8AZsm{t8tdh3PX&rTlf)SbT0c6a>g
z-Pc^!)ayoW*zh}Ql5eior=?fyLS$Rzo^qB|Y?98?Fq*ZgYW^hKIN<`f|9y1_g3iVU
zy~-&)exiH#Y{{H$(|!gltyudkJ}%^8bbY_)s(^z|bF2P|G&`8?{#ACTR`2{w@ePk8
zwF~8!9oubLCoEd$u7394f?F*?HPP==?y!9i?XS82t~2*b<Eq!&?H0d$I@!N&x~cf@
zC%eu2^OoOuXnR8Pdae8Q*JVHdx=b;Nn;>}qXvf7_+kdahD>S&_`nT))S|h$yBI}!*
zZY38@++-S;p7^LF*k8PA@5G0K%0_?Jl$70Rj-SUYxZ%nN<;6|KGs1;-YgWdze*ErW
zYQbLF99p}!-Z6GZ!M}z7|L{joZj$glUdA5o^>&$^_7DGyw<p!S|GK(vo}r&+!p6hZ
z>Bo=E?J@K@lED)6miJYizP7COx9HMY))KdJdKQM|3(e6w8vN=@C;!6@KYQlQDb$+q
zv#efd#crnhzTN+yS}HS7oAty%PTl_ZotK#xYG<!o<@Z=(^>$t-`)s$I4O+|Qee=1U
zWpz$4Xy*!B`S%)sri<TvX!oX|bkR!oxt}J<Y0fW8-}!%Yqs2Gh`OEGd4c)rz&dV>7
zo?pAS%}S|R5wvIR3Ss4>UNwg3Z+m~f|95A8$$b}J8TmPXpPeuKzTYN2<-n=kW(V6I
z-~Rrczx@8P?;aoT_sH<yu$YvPx1sR8p17QTRB(^pw=d_uiaHz%DLB><RkmY!$oVx-
zv`oKWy>ItthF5r2MbR>YS%2KKd8CZF4(E0{&gYZZzrsH3*lVq$!N<-#7FN3_bB9A>
z{tlaa0@csAFx++dS#ala&^%+)gq7=Gt$BS{qJ8!qsU<a+e^yvHINxR7eQ?sZ9!1BZ
ztC4#$R{mM>@@tHx^CHjJDh0jo3!4*TZhe1KcXsWs4%vJ1i_^n=W2Q`(nEY`{wXxjq
z0~JR1Gk#vv;puDtAiZDWYTc<zueFZ8ww3vC`S^_Ngi}*4Ih^%-cev2syYidUzW=PZ
zZsx|kZ;M%}xAaD-zfRaiu?can6!Jg3xw(0X*+lO?uCI5K8HCU7S+zPk@7bKQ8R~Ys
z%d%2WrTVP>yIlDz>(?hc^#7#n3vpYu_`=kuKQC=P{P#|N-+CW;wcfoRr>z(@?=7+Y
z`}uj#$Lrg;njc3U{c-gCn;2!=wLyFIR2q3BIy-yq0%Qx0<wP`Eh3>U`_fqS;q|Amn
zf!hnS%vRp}|NUI%{qVD{@72YmlABBO-aT~*>Ta+3bn^X`tR1%J1h#&0tdD0rrxQ^z
zKg!jsRD`Ww^(;@S&Mhs|H6jUD17GA^jOkxD_u0i)ll$w_ZDh2bCwy3(SQf51P1c96
zEg}1voaTYe&+iD|n0sug%46nfQL!5DZ{-Bln(_3k;9ULei$cssqtxc!qt2h!>7LQN
zy6fYGO~0nw?vCevW3_nQh5gCJOUnW_oBervxc{l@JPng&0xA1<o`?wa^W81g>vol4
zP5qDG>h(WAeRjN2oh554E4k66^jf&)wBx52w=3<w-MG$noy3jcsotIeOw*d3R~*w)
zJ+F4vJ!NLtx?Oco7c8rtx~1p#1Dj-}9Y=aM?UJ?p^N&4?WyRW3x8BFAudU#!yZF8S
z`Ra|1t7=^rIdo0`Q}Xu1fpxAss=vo=eKj+1_UZfAZNIieo%SiK_;f(9RHVr`wV}{w
z>4ZCGPph+LX0f+A`X#3C)hd&Z`m)gL<jv^aM;z`|h%fxJWYXqZyU<vhca2)-9r+`&
zY+COAE=}I@qown)@2yPt`v$+FUSDK?x%QWFUi0tWvVp6aR<p)E*_7gQH2df7W3@g9
zt~2{7-`t)xxALa9W|_#Q!;@D|P5oT8wqLE<tu<<AnD2~=;v&)c)5KifOW9nBxBGqO
zA**Ly;9u1@SrPtAy*^s;N~j)x^5y0Gij(;-&E2d{*aiiJ7O%M?B&>F4PT^U5O}Xy}
zraf0+)46JzU2ZP9_^9dh)3!A`;<7H8Y@3^Mhi&$R&ylB=u5$dg|LeAMTCvAwK7Lb`
zU-FJ+ZQ#Mu*Ym0#trypyI$7yxpHo?d(N>A+G1IEzyOvD*|7Y|0r>DQIc(ge)rX!F+
zWuLY8?PJM|a;>H8p<T--g@<xI``Z~KdnIGf-QDr0@BA}OKW_WuY2@VRmrXo=2At29
z&^6y>y6mjv`OEvh6;Cja$ZKBq|AG52{;5w?ZKc;(_IDUAUbFeDSg7L3)@d`IL`nzE
ztePVGZ|&`=b<f-k*M(-quatDZDpzcC)GuLuN~NaGjD>Z9|DE1BPkmG>+<jN_Wc7Tz
zxNwnIfnOYSU0&QS{JzsBJ?nsxQOjD*$li;Of{a&1e)FvZ6>aB~`gVV<cFWnY_N0-T
zPlx}(<@Q@UH$Izkm&@eehmb`=CpTr!^Srz8*QzVVd769pt!?!Elh1|j472_E`G-wJ
z)`9A<WtCqOdN-cgb5}OwUy0wYRU-b9lWVPS%;T?(Y)<tuNIUIwy70RG`Qz(s54`ZI
zJh!1CRi`6&b@zoCUBT%Qb2iSHa%J{Qt5W8D2ah@I=YKnA#l>#%&u_jgk?4PXD>nUJ
z#J4}^=2TvCY1(0>{G{(f;oFmZ+pi`qd?x%VFW~y@1IEoBi2<so98=8Iwq1~Kd*eU#
z(ObFQ*Y0J`;rsPn{h!Lbf)7<2YpvhSdK&5XJbhl>yY=GwrhOe7HD<2;G-o2Cx1QYH
z%TIOpoDci>Ht)mrdG?1R`gC=BBM#nwaC_a|HLDkD?OJL0acSP=eHW*{-=|QxAa^aN
za(agpPs*IYoeo=9uGlZV`k7^ga9KrM(BY{+Z@8O2u<f3_bk@`>d7D@4iD>nU)=vB#
zytHEO&a1&{uPSZ-#@GCMe*Wj?R>qu^ub+3ko|3+j`KiUKX_=wyQmem*up~?q=4YPv
zQD@8Dng90B<cX~ojZVIFV~dWp)E{26TW7wkKT>qH{KBcMHMwi%-M+N*#_Es#n_4AJ
zUiU|Dbf`_edA@A+f*TKQyS{IodgZ>^|98jgrfpUTaE`u{IccZavG{#+pJnFlx%AHK
z#=cO^d6Rw%hZa5ga<S6Lb8DZ+$&WwpaGty5TqjpP_mj@_i}CyZ?6Hz55)jvq%DQ9A
z_V6TwKhw0Tme8fz?8bkky9;ifdY>8NWvOg-qarD=ue)-xXU)>S<@1fjvNqg4rPUsN
zHS&|@Cp)#!<~hb$7YgGpb)B$0+Tp%Zhv_Vz`8l<fmA|U<9L^biy}Q(Abs2YZc*^8c
zr`&svB*aNv$;`WQi7)KXx3yj$P4q(k-Br#in3uCK>ddJ>yTs<dPd-#Je|aZgh~wAK
zJF=&xCvV%3?YYk6ZU0Iwzh#*(*8h&&cl-JL+I7!<7~aZ!bM5i535Wm5aTs~-UbU&>
z{|ELux9dJP6D+y@e>s1CRd-jG&~*N}1`nS-nW)jZk#)Z*)BGr&gE!f2KYuCi6y5sB
zIPA;61^oSgzx~br?Q0wQygqry-9Qn!+=a95*-quU@?2JK!ryDZbACN}e1Bz=ZhY~#
zH`RHwgI4Lyk(bN9wf}$a)|;P<Za)0fziQT`%Z_ESW~{!U5?NVsA*u_{ADS>D{&#u%
z{>*ay>7O1XsQ(CCTH$5(a=O0#|1am~2ge3hm+d#pjr!TrX|Dc#-s%5A#c99(i#~b$
zr1+}DvW7XU>g3ALe#()NecXL|Vac^qEB0URX)B)2JnbAy_Q!W`UB6p;tU12Uc5dSL
z^3cmmWpd_E4?4GiciN>7`PT6hrChd7pK<=W>US1yv3t+o+**9D>xWL|?zmv)E5Cj#
zl&+pQZK6ZjbIvb$T^>94oID%(YI<mWS%t&5==p)6-<qp37L@C*Jhpme8+-CirBYws
z6KB_TOTJ#Ye4d5P+I?n*5=WO9co?o&@gq~Kyd0Fyg6{f!5`EIW;=+XM;rZ1?f}cKT
ztXlog+0iQWug$w{r#8<yoh4Lb%67ofdhb8K%aMxK_wOcE9p-iIT=_@loXzdn9dCQY
z{LS8;d%rsVd#>iwp4$ngpWM2BKRo=k==l0;U0!y%ZpZr{oGlA~^<sUXV;!IRG$!A9
zUJk7PE4n|<sV+(n*_~;qF~2q^?A79rHy(ae<#>K)^Z&Kmd&^3aKhBg(U$HS~;+t<5
z&3n%6+q!*ez)Ao2hZgAZth{n5b4`$qYN|rruP?vEKC=6%A1e><S5n!1u|1u0>5El|
zbnF|e-d%nEI4^Qus{2YYi?7S)T>ms{f83ssrUWVDzYXiw>8&eZU{J6=vG?-3yVa#q
zGi|1xpUA+#5UFf;@d58*_m<0d<bAn8+Zy2`EDj{^7zA(C1CP#t^^(p7Z`DKSC7lZ%
zX#(2|)=N4UJW7SoO9YomteVt~k!V2#wr<Gz8a17qko_Ouz{s#ORi<74V%9+h1_lOC
LS3j3^P6<r_EZ}=4

literal 0
HcmV?d00001

diff --git a/index.rst b/index.rst
index ee3570850..0b45f8713 100644
--- a/index.rst
+++ b/index.rst
@@ -26,6 +26,9 @@ PostgREST is a standalone web server that turns your PostgreSQL database directl
 Sponsors
 --------
 
+.. image:: _static/cybertec.png
+  :target: https://www.cybertec-postgresql.com/en/
+  :width:  13em
 
 .. image:: _static/2ndquadrant.png
   :target: https://www.2ndquadrant.com/en/?utm_campaign=External%20Websites&utm_source=PostgREST&utm_medium=Logo

From 59816e65765c241d4791d768bd132f15c4363e55 Mon Sep 17 00:00:00 2001
From: Eduardo Jorge <herulume@protonmail.com>
Date: Thu, 4 Jul 2019 21:14:18 +0100
Subject: [PATCH 235/652] Add missing doc for the ov operator in array types
 (#225)

---
 api.rst | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/api.rst b/api.rst
index 20c411365..085eec6ff 100644
--- a/api.rst
+++ b/api.rst
@@ -70,6 +70,9 @@ cs            contains e.g. :code:`?tags=cs.{example, new}`    :code:`@>`
 cd            contained in e.g. :code:`?values=cd.{1,2,3}`     :code:`<@`
 ov            overlap (have points in common),                 :code:`&&`
               e.g. :code:`?period=ov.[2017-01-01,2017-06-30]`
+              – also supports array types, use curly braces
+              instead of square brackets
+              e.g. :code: `?arr=ov.{1,3}`
 sl            strictly left of, e.g. :code:`?range=sl.(1,10)`  :code:`<<`
 sr            strictly right of                                :code:`>>`
 nxr           does not extend to the right of,                 :code:`&<`

From 5ad1afbf73c8d252a0429a14aa5eccc70e877eb4 Mon Sep 17 00:00:00 2001
From: Eduardo Jorge <herulume@protonmail.com>
Date: Wed, 24 Jul 2019 17:02:58 +0100
Subject: [PATCH 236/652] Add websearch_to_tsquery doc (#226)

---
 api.rst | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/api.rst b/api.rst
index 085eec6ff..ebe0bdab6 100644
--- a/api.rst
+++ b/api.rst
@@ -66,6 +66,7 @@ is            checking for exact equality (null,true,false)    :code:`IS`
 fts           :ref:`fts` using to_tsquery                      :code:`@@`
 plfts         :ref:`fts` using plainto_tsquery                 :code:`@@`
 phfts         :ref:`fts` using phraseto_tsquery                :code:`@@`
+wfts          :ref:`fts` using websearch_to_tsquery            :code:`@@`
 cs            contains e.g. :code:`?tags=cs.{example, new}`    :code:`@>`
 cd            contained in e.g. :code:`?values=cd.{1,2,3}`     :code:`<@`
 ov            overlap (have points in common),                 :code:`&&`
@@ -132,8 +133,14 @@ The :code:`fts` filter mentioned above has a number of options to support flexib
 
   GET /tsearch?my_tsv=not.phfts(english).The%20Fat%20Cats HTTP/1.1
 
+.. code-block:: http
+
+  GET /tsearch?my_tsv=not.wfts(french).amusant HTTP/1.1
+
 Using phrase search mode requires PostgreSQL of version at least 9.6 and will raise an error in earlier versions of the database.
 
+Using `websearch_to_tsquery` requires PostgreSQL of version at least 11.0 and will raise an error in earlier versions of the database.
+
 .. _v_filter:
 
 Vertical Filtering (Columns)

From ca456ecc51765f8f622b2aca837bf8adab0a70da Mon Sep 17 00:00:00 2001
From: stefan8888 <stefan8888@gmail.com>
Date: Mon, 29 Jul 2019 20:15:00 +0200
Subject: [PATCH 237/652] Updated Docker section (#236)

* Updated Docker section

On macOS, it is also necessary to add the IP address in  pg_hba.conf
---
 install.rst | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/install.rst b/install.rst
index de4bf4187..ebc0ea979 100644
--- a/install.rst
+++ b/install.rst
@@ -297,6 +297,11 @@ The database connection string above is just an example. Adjust the role and pas
   .. code-block:: bash
 
     listen_addresses = 'localhost,10.0.0.10'
+  You might also need to add a new IPv4 local connection within pg_hba.conf. For instance:
+  
+  .. code-block:: bash
+  
+    host    all             all             10.0.0.10/32            trust
 
 Containerized PostgREST *and* db with docker-compose
 ----------------------------------------------------

From f759b8bfc6b7d15f4432bc7fd318d6fdaf2b376b Mon Sep 17 00:00:00 2001
From: Erwan Thomas <janotus@maen.fr>
Date: Sun, 18 Aug 2019 23:32:08 +0200
Subject: [PATCH 238/652] Fix miscellaneous Sphinx warnings (#244)

* /index.rst:24: WARNING: Line block ends without a blank line.

* /install.rst:300: WARNING: Explicit markup ends without a blank line; unexpected unindent.

* /admin.rst:273: WARNING: Could not lex literal_block as "http". Highlighting skipped.

* /tutorials/tut1.rst:150: WARNING: Could not lex literal_block as "json". Highlighting skipped.

* Remove extra newline

* Use integer value as epoch in JSON snippet

Even though using a string value is convenient (due to the lack of JSON
comments), it is confusing since the value should actually be an
integer. A slightly more verbose documentation is therefore preferable.
---
 admin.rst          | 2 +-
 index.rst          | 1 +
 install.rst        | 5 +++--
 tutorials/tut1.rst | 4 +++-
 4 files changed, 8 insertions(+), 4 deletions(-)

diff --git a/admin.rst b/admin.rst
index f8bfd1a95..12af107e4 100644
--- a/admin.rst
+++ b/admin.rst
@@ -272,7 +272,7 @@ As discussed in :ref:`singular_plural`, there are no special URL forms for singu
 
 .. code:: http
 
-  GET /people?id=eq.1
+  GET /people?id=eq.1 HTTP/1.1
   Accept: application/vnd.pgrst.object+json
 
 This allows compound primary keys and makes the intent for singular response independent of a URL convention.
diff --git a/index.rst b/index.rst
index 0b45f8713..5c8a34dad 100644
--- a/index.rst
+++ b/index.rst
@@ -21,6 +21,7 @@
   :target: https://www.paypal.me/postgrest
 
 |
+
 PostgREST is a standalone web server that turns your PostgreSQL database directly into a RESTful API. The structural constraints and permissions in the database determine the API endpoints and operations.
 
 Sponsors
diff --git a/install.rst b/install.rst
index ebc0ea979..807b87c78 100644
--- a/install.rst
+++ b/install.rst
@@ -297,10 +297,11 @@ The database connection string above is just an example. Adjust the role and pas
   .. code-block:: bash
 
     listen_addresses = 'localhost,10.0.0.10'
+
   You might also need to add a new IPv4 local connection within pg_hba.conf. For instance:
-  
+
   .. code-block:: bash
-  
+
     host    all             all             10.0.0.10/32            trust
 
 Containerized PostgREST *and* db with docker-compose
diff --git a/tutorials/tut1.rst b/tutorials/tut1.rst
index bcef5e632..71c288d11 100644
--- a/tutorials/tut1.rst
+++ b/tutorials/tut1.rst
@@ -151,9 +151,11 @@ Go back to jwt.io and change the payload to
 
   {
     "role": "todo_user",
-    "exp": <computed epoch value>
+    "exp": 123456789
   }
 
+**NOTE**: Don't forget to change the dummy epoch value :code:`123456789` in the snippet above to the epoch value returned by the psql command.
+
 Copy the updated token as before, and save it as a new environment variable.
 
 .. code-block:: bash

From 0b5e168c8d944a7cecee1200126521918a4b4240 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Thu, 1 Aug 2019 12:22:32 -0500
Subject: [PATCH 239/652] Fix #205, operators table with heading

---
 api.rst | 71 ++++++++++++++++++++++++++++-----------------------------
 1 file changed, 35 insertions(+), 36 deletions(-)

diff --git a/api.rst b/api.rst
index ebe0bdab6..34c8d4abf 100644
--- a/api.rst
+++ b/api.rst
@@ -45,43 +45,42 @@ Complex logic can also be applied:
 
   GET /people?and=(grade.gte.90,student.is.true,or(age.gte.14,age.is.null)) HTTP/1.1
 
+Operators
+~~~~~~~~~
+
 These operators are available:
 
-============  ===============================================  =====================
-Abbreviation  Meaning                                          PostgreSQL Equivalent
-============  ===============================================  =====================
-eq            equals                                           :code:`=`
-gt            greater than                                     :code:`>`
-gte           greater than or equal                            :code:`>=`
-lt            less than                                        :code:`<`
-lte           less than or equal                               :code:`<=`
-neq           not equal                                        :code:`<>` or :code:`!=`
-like          LIKE operator (use * in place of %)              :code:`LIKE`
-ilike         ILIKE operator (use * in place of %)             :code:`ILIKE`
-in            one of a list of values e.g.                     :code:`IN`
-              :code:`?a=in.(1,2,3)` – also supports commas
-              in quoted strings like
-              :code:`?a=in.("hi,there","yes,you")`
-is            checking for exact equality (null,true,false)    :code:`IS`
-fts           :ref:`fts` using to_tsquery                      :code:`@@`
-plfts         :ref:`fts` using plainto_tsquery                 :code:`@@`
-phfts         :ref:`fts` using phraseto_tsquery                :code:`@@`
-wfts          :ref:`fts` using websearch_to_tsquery            :code:`@@`
-cs            contains e.g. :code:`?tags=cs.{example, new}`    :code:`@>`
-cd            contained in e.g. :code:`?values=cd.{1,2,3}`     :code:`<@`
-ov            overlap (have points in common),                 :code:`&&`
-              e.g. :code:`?period=ov.[2017-01-01,2017-06-30]`
-              – also supports array types, use curly braces
-              instead of square brackets
-              e.g. :code: `?arr=ov.{1,3}`
-sl            strictly left of, e.g. :code:`?range=sl.(1,10)`  :code:`<<`
-sr            strictly right of                                :code:`>>`
-nxr           does not extend to the right of,                 :code:`&<`
-              e.g. :code:`?range=nxr.(1,10)`
-nxl           does not extend to the left of                   :code:`&>`
-adj           is adjacent to, e.g. :code:`?range=adj.(1,10)`   :code:`-|-`
-not           negates another operator, see below              :code:`NOT`
-============  ===============================================  =====================
+============  ========================  ==================================================================================
+Abbreviation  In PostgreSQL             Meaning
+============  ========================  ==================================================================================
+eq            :code:`=`                 equals
+gt            :code:`>`                 greater than
+gte           :code:`>=`                greater than or equal
+lt            :code:`<`                 less than
+lte           :code:`<=`                less than or equal
+neq           :code:`<>` or :code:`!=`  not equal
+like          :code:`LIKE`              LIKE operator (use * in place of %)
+ilike         :code:`ILIKE`             ILIKE operator (use * in place of %)
+in            :code:`IN`                one of a list of values, e.g. :code:`?a=in.(1,2,3)`
+                                        – also supports commas in quoted strings like
+                                        :code:`?a=in.("hi,there","yes,you")`
+is            :code:`IS`                checking for exact equality (null,true,false)
+fts           :code:`@@`                :ref:`fts` using to_tsquery
+plfts         :code:`@@`                :ref:`fts` using plainto_tsquery
+phfts         :code:`@@`                :ref:`fts` using phraseto_tsquery
+wfts          :code:`@@`                :ref:`fts` using websearch_to_tsquery
+cs            :code:`@>`                contains e.g. :code:`?tags=cs.{example, new}`
+cd            :code:`<@`                contained in e.g. :code:`?values=cd.{1,2,3}`
+ov            :code:`&&`                overlap (have points in common), e.g. :code:`?period=ov.[2017-01-01,2017-06-30]` –
+                                        also supports array types, use curly braces instead of square brackets e.g.
+                                        :code: `?arr=ov.{1,3}`
+sl            :code:`<<`                strictly left of, e.g. :code:`?range=sl.(1,10)`
+sr            :code:`>>`                strictly right of
+nxr           :code:`&<`                does not extend to the right of, e.g. :code:`?range=nxr.(1,10)`
+nxl           :code:`&>`                does not extend to the left of
+adj           :code:`-|-`               is adjacent to, e.g. :code:`?range=adj.(1,10)`
+not           :code:`NOT`               negates another operator, see below
+============  ========================  ==================================================================================
 
 To negate any operator, prefix it with :code:`not` like :code:`?a=not.eq.2` or :code:`?not.and=(a.gte.0,a.lte.100)` .
 
@@ -982,7 +981,7 @@ UPSERT operates based on the primary key columns, you must specify all of them.
 
 .. important::
   After creating a table or changing its primary key, you must refresh PostgREST schema cache for UPSERT to work properly. To learn how to refresh the cache see :ref:`schema_reloading`.
-   
+
 
 A single row UPSERT can be done by using :code:`PUT` and filtering the primary key columns with :code:`eq`:
 

From f983e0af349a0594c55d5882a9e4e6d350333318 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Thu, 1 Aug 2019 12:35:58 -0500
Subject: [PATCH 240/652] Fix #196, add virtual columns a.k.a.

---
 api.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/api.rst b/api.rst
index 34c8d4abf..cf529570f 100644
--- a/api.rst
+++ b/api.rst
@@ -208,7 +208,7 @@ You can specify a path for a ``json`` or ``jsonb`` column using the arrow operat
 Computed Columns
 ~~~~~~~~~~~~~~~~
 
-Filters may be applied to computed columns as well as actual table/view columns, even though the computed columns will not appear in the output. For example, to search first and last names at once we can create a computed column that will not appear in the output but can be used in a filter:
+Filters may be applied to computed columns(**a.k.a. virtual columns**) as well as actual table/view columns, even though the computed columns will not appear in the output. For example, to search first and last names at once we can create a computed column that will not appear in the output but can be used in a filter:
 
 .. code-block:: postgres
 

From b07d07f17d5978de623b05a4cae4c20a8f0541fa Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Thu, 1 Aug 2019 13:06:52 -0500
Subject: [PATCH 241/652] Fix #231, add note about assuming text in rpc calls

---
 api.rst | 20 ++++++++++++++++----
 1 file changed, 16 insertions(+), 4 deletions(-)

diff --git a/api.rst b/api.rst
index cf529570f..728e485af 100644
--- a/api.rst
+++ b/api.rst
@@ -625,10 +625,6 @@ For instance, assume we have created this function in the database.
    SELECT a + b;
   $$ LANGUAGE SQL IMMUTABLE STRICT;
 
-.. important::
-
-  Whenever you create or change a function you must refresh PostgREST's schema. See the section :ref:`schema_reloading`.
-
 The client can call it by posting an object like
 
 .. code-block:: http
@@ -639,6 +635,22 @@ The client can call it by posting an object like
 
   3
 
+.. important::
+
+  Whenever you create or change a function you must refresh PostgREST's schema cache. See the section :ref:`schema_reloading`.
+
+  If the schema cache is not refreshed, PostgREST will assume :code:`text` as the default type for function arguments. This could
+  lead to getting error responses like:
+
+  .. code-block:: json
+
+     {
+      "hint":"No function matches the given name and argument types. You might need to add explicit type casts.",
+      "details":null,
+      "code":"42883",
+      "message":"function test.add_them(a => text, b => text) does not exist"
+     }
+
 You can also call a function that takes a single parameter of type json by sending the header :code:`Prefer: params=single-object` with your request. That way the JSON request body will be used as the single argument.
 
 .. code-block:: plpgsql

From 03905a584e6740d2880bdacc31a4c653a63ff4ba Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Thu, 1 Aug 2019 13:26:27 -0500
Subject: [PATCH 242/652] Fix #224, remove STRICT from example rpc

---
 api.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/api.rst b/api.rst
index 728e485af..074135b58 100644
--- a/api.rst
+++ b/api.rst
@@ -623,7 +623,7 @@ For instance, assume we have created this function in the database.
   CREATE FUNCTION add_them(a integer, b integer)
   RETURNS integer AS $$
    SELECT a + b;
-  $$ LANGUAGE SQL IMMUTABLE STRICT;
+  $$ LANGUAGE SQL IMMUTABLE;
 
 The client can call it by posting an object like
 

From 1fd06ff65d32728b585a70b3f7c79cb2117a0612 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Thu, 1 Aug 2019 14:10:02 -0500
Subject: [PATCH 243/652] Fix #199, db-extra-search-path clarification

---
 install.rst | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/install.rst b/install.rst
index 807b87c78..7f6e59676 100644
--- a/install.rst
+++ b/install.rst
@@ -129,7 +129,9 @@ db-pool
 db-extra-search-path
 --------------------
 
-  Extra schemas to add to the `search_path <https://www.postgresql.org/docs/11/ddl-schemas.html#DDL-SCHEMAS-PATH>`_ of every request. These schemas tables, views and stored procedures don't get API endpoints, they can only be referred from the database objects exposed in your :ref:`db-schema`.
+  Extra schemas to add to the `search_path <https://www.postgresql.org/docs/11/ddl-schemas.html#DDL-SCHEMAS-PATH>`_ of every request. These schemas tables, views and stored procedures **don't get API endpoints**, they can only be referred from the database objects inside your :ref:`db-schema`.
+
+  This parameter was meant to make it easier to use **PostgreSQL extensions** (like PostGIS) that are outside of the :ref:`db-schema`.
 
   Multiple schemas can be added in a comma-separated string, e.g. ``public, extensions``.
 

From 3babff99b9b0c5d2f74dc90a292f84065856baf2 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Thu, 1 Aug 2019 14:30:13 -0500
Subject: [PATCH 244/652] Fix #198, add note about nginx config location

---
 admin.rst | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/admin.rst b/admin.rst
index 12af107e4..26dd090f4 100644
--- a/admin.rst
+++ b/admin.rst
@@ -30,6 +30,11 @@ The first step is to create an Nginx configuration file that proxies requests to
     }
   }
 
+.. note::
+
+  For ubuntu, if you already installed nginx through :code:`apt` you can add this to the config file in 
+  :code:`/etc/nginx/sites-enabled/default`.
+
 .. _block_fulltable:
 
 Block Full-Table Operations

From 7ccc8c4610edcda420cfeae27e962a8e3b31926a Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Fri, 2 Aug 2019 13:33:59 -0500
Subject: [PATCH 245/652] Fix #197, add note about axios url encoding

---
 api.rst | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/api.rst b/api.rst
index 074135b58..d1599e02d 100644
--- a/api.rst
+++ b/api.rst
@@ -288,6 +288,10 @@ Here ``information.cpe`` is a column name.
 
   GET /vulnerabilities?%22information.cpe%22=like.*MS* HTTP/1.1
 
+.. note::
+
+   Some http libraries might encode URLs automatically(e.g. :code:`axios`). In these cases you should use double quotes
+   :code:`""` directly instead of :code:`%22`.
 
 Ordering
 --------

From 91e44f12ec843ef4ae5b1dcefe19dff865833c3b Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Fri, 2 Aug 2019 13:50:11 -0500
Subject: [PATCH 246/652] Fix #216, remove HUP reference

---
 admin.rst      | 4 ----
 install.rst    | 3 ---
 postgrest.dict | 1 -
 3 files changed, 8 deletions(-)

diff --git a/admin.rst b/admin.rst
index 26dd090f4..f7075f9a6 100644
--- a/admin.rst
+++ b/admin.rst
@@ -222,10 +222,6 @@ Then run the `pg_listen <https://github.com/begriffs/pg_listen>`_ utility to mon
 
 Now, whenever the structure of the database schema changes, PostgreSQL will notify the ``ddl_command_end`` channel, which will cause ``pg_listen`` to send PostgREST the signal to reload its cache.
 
-.. important::
-
-  As of PostgREST v5.1 reloading with SIGHUP is deprecated, it's still supported but will be removed in v6.0. SIGUSR1 should be used instead.
-
 Daemonizing
 ===========
 
diff --git a/install.rst b/install.rst
index 7f6e59676..98abbb3a6 100644
--- a/install.rst
+++ b/install.rst
@@ -249,9 +249,6 @@ PostgREST outputs basic request logging to stdout. When running it in an SSH ses
 
   # another option is to pipe the output into "logger -t postgrest"
 
-(Avoid :code:`nohup postgrest` because the HUP signal is used for manual :ref:`schema_reloading`.)
-
-
 Docker
 ======
 
diff --git a/postgrest.dict b/postgrest.dict
index 563e11994..0faacadb5 100644
--- a/postgrest.dict
+++ b/postgrest.dict
@@ -45,7 +45,6 @@ RSA
 RabbitMQ
 RestSharp
 SHA
-SIGHUP
 SIGUSR1
 SNS
 SQL

From e9712b0aff72e7bd782f29f90294288aba29321e Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Mon, 5 Aug 2019 10:22:29 -0500
Subject: [PATCH 247/652] Fix #200, anon permissions on auth section

---
 api.rst  |  2 ++
 auth.rst | 16 +++++++++-------
 2 files changed, 11 insertions(+), 7 deletions(-)

diff --git a/api.rst b/api.rst
index d1599e02d..34aa00188 100644
--- a/api.rst
+++ b/api.rst
@@ -768,6 +768,8 @@ A function that returns a table type response can be shaped using the same filte
 
   GET /rpc/best_films_2017?rating=gt.8&order=title.desc HTTP/1.1
 
+.. _func_privs:
+
 Function privileges
 -------------------
 
diff --git a/auth.rst b/auth.rst
index 0800a0810..bf6fa0981 100644
--- a/auth.rst
+++ b/auth.rst
@@ -425,7 +425,7 @@ As described in `JWT from SQL`_, we'll create a JWT inside our login function. N
       into result;
     return result;
   end;
-  $$ language plpgsql;
+  $$ language plpgsql security definer;
 
 An API request to call this function would look like:
 
@@ -446,18 +446,20 @@ The response would look like the snippet below. Try decoding the token at `jwt.i
 Permissions
 ~~~~~~~~~~~
 
-Your database roles need access to the schema, tables, views and functions in order to service HTTP requests. Recall from the `Overview of Role System`_ that PostgREST uses special roles to process requests, namely the authenticator and anonymous roles. Below is an example of permissions that allow anonymous users to create accounts and attempt to log in.
+Your database roles need access to the schema, tables, views and functions in order to service HTTP requests. 
+Recall from the `Overview of Role System`_ that PostgREST uses special roles to process requests, namely the authenticator and 
+anonymous roles. Below is an example of permissions that allow anonymous users to create accounts and attempt to log in.
 
-.. code:: sql
+.. code-block:: postgres
 
   -- the names "anon" and "authenticator" are configurable and not
   -- sacred, we simply choose them for clarity
-  create role anon;
+  create role anon noinherit;
   create role authenticator noinherit;
   grant anon to authenticator;
 
-  grant usage on schema public, basic_auth to anon;
-  grant select on table pg_authid, basic_auth.users to anon;
   grant execute on function login(text,text) to anon;
 
-You may be worried from the above that anonymous users can read everything from the :code:`basic_auth.users` table. However this table is not available for direct queries because it lives in a separate schema. The anonymous role needs access because the public :code:`users` view reads the underlying table with the permissions of the calling user. But we have made sure the view properly restricts access to sensitive information.
+Since the above :code:`login` function is defined as `security definer <https://www.postgresql.org/docs/current/sql-createfunction.html#id-1.9.3.67.10.2>`_,
+the anonymous user :code:`anon` doesn't need permission to read the :code:`basic_auth.users` table. It doesn't even need permission to access the :code:`basic_auth` schema.
+:code:`grant execute on function` is included for clarity but it might not be needed, see :ref:`func_privs` for more details.

From a1509dc7315b4ebc3d4e87f1b47255decb606c67 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Mon, 5 Aug 2019 11:07:44 -0500
Subject: [PATCH 248/652] Fix #170, remove no performance penalty claim

---
 auth.rst | 12 ++++++++----
 1 file changed, 8 insertions(+), 4 deletions(-)

diff --git a/auth.rst b/auth.rst
index bf6fa0981..4b770cb24 100644
--- a/auth.rst
+++ b/auth.rst
@@ -50,7 +50,7 @@ PostgREST can accommodate either viewpoint. If you treat a role as a single user
 
 You can use row-level security to flexibly restrict visibility and access for the current user. Here is an `example <http://blog.2ndquadrant.com/application-users-vs-row-level-security/>`_ from Tomas Vondra, a chat table storing messages sent between users. Users can insert rows into it to send messages to other users, and query it to see messages sent to them by other users.
 
-.. code:: sql
+.. code-block:: postgres
 
   CREATE TABLE chat (
     message_uuid    UUID PRIMARY KEY DEFAULT uuid_generate_v4(),
@@ -65,7 +65,7 @@ We want to enforce a policy that ensures a user can see only those messages sent
 
 PostgreSQL (9.5 and later) allows us to set this policy with row-level security:
 
-.. code:: sql
+.. code-block:: postgres
 
   CREATE POLICY chat_policy ON chat
     USING ((message_to = current_user) OR (message_from = current_user))
@@ -73,6 +73,10 @@ PostgreSQL (9.5 and later) allows us to set this policy with row-level security:
 
 Anyone accessing the generated API endpoint for the chat table will see exactly the rows they should, without our needing custom imperative server-side coding.
 
+.. warning::
+
+   Roles are namespaced per-cluster rather than per-database so they may be prone to collision.
+
 Web Users Sharing Role
 ~~~~~~~~~~~~~~~~~~~~~~
 
@@ -96,9 +100,9 @@ This allows JWT generation services to include extra information and your databa
 Hybrid User-Group Roles
 ~~~~~~~~~~~~~~~~~~~~~~~
 
-There is no performance penalty for having many database roles, although roles are namespaced per-cluster rather than per-database so may be prone to collision within the database. You are free to assign a new role for every user in a web application if desired. You can mix the group and individual role policies. For instance we could still have a webuser role and individual users which inherit from it:
+You can mix the group and individual role policies. For instance we could still have a webuser role and individual users which inherit from it:
 
-.. code:: sql
+.. code-block:: postgres
 
   CREATE ROLE webuser NOLOGIN;
   -- grant this role access to certain tables etc

From 664604e6cafc6825c2b36df0e4e011366f844ea0 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Mon, 5 Aug 2019 13:12:26 -0500
Subject: [PATCH 249/652] Fix #212, note about view with complex RULEs

---
 api.rst | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/api.rst b/api.rst
index 34aa00188..c54b01937 100644
--- a/api.rst
+++ b/api.rst
@@ -947,6 +947,12 @@ Updates also support :code:`Prefer: return=representation` plus :ref:`v_filter`.
 
   Beware of accidentally updating every row in a table. To learn to prevent that see :ref:`block_fulltable`.
 
+.. warning::
+
+   Insertion on VIEWs with complex `RULEs <https://www.postgresql.org/docs/11/sql-createrule.html>`_ might not work out of the box with PostgREST.
+   It's recommended that you `use triggers instead of RULEs <https://wiki.postgresql.org/wiki/Don%27t_Do_This#Don.27t_use_rules>`_.
+   If you want to keep using RULEs, a workaround is to wrap the VIEW insertion in a stored procedure and call it through the :ref:`s_procs` interface.
+
 .. _bulk_insert:
 
 Bulk Insert

From aba2f43c1019897d084e0bdd743f943ec09903ee Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Sat, 10 Aug 2019 13:40:42 -0500
Subject: [PATCH 250/652] Fix #230, make clear FKs are needed for embedding

---
 api.rst | 21 +++++++++++++++------
 1 file changed, 15 insertions(+), 6 deletions(-)

diff --git a/api.rst b/api.rst
index c54b01937..8381f8564 100644
--- a/api.rst
+++ b/api.rst
@@ -487,7 +487,13 @@ If the stored procedure returns non-scalar values, you need to do a :code:`selec
 Resource Embedding
 ==================
 
-In addition to providing RESTful routes for each table and view, PostgREST allows related resources to be included together in a single API call. This reduces the need for multiple API requests. The server uses foreign keys to determine which tables and views can be returned together. For example, consider a database of films and their awards:
+In addition to providing RESTful routes for each table and view, PostgREST allows related resources to be included together in a single
+API call. This reduces the need for multiple API requests. The server uses **foreign keys** to determine which tables and views can be 
+returned together. For example, consider a database of films and their awards:
+
+.. important::
+
+  PostgREST needs `FOREIGN KEY constraints <https://www.postgresql.org/docs/current/tutorial-fk.html>`_ to be able to do Resource Embedding.
 
 .. image:: _static/film.png
 
@@ -547,16 +553,19 @@ this:
 
   GET /films?select=title,director:directors(id,last_name) HTTP/1.1
 
-PostgREST can also detect relations going through join tables. Thus you can request the Actors for Films (which in this case finds the information through Roles). You can also reverse the direction of inclusion, asking for all Directors with each including the list of their Films:
+.. important::
+
+  Whenever FOREIGN KEY constraints change in the database schema you must refresh PostgREST's schema cache for Resource Embedding to work properly. See the section :ref:`schema_reloading`.
+
+Embeddeding through join tables
+-------------------------------
+
+PostgREST can also detect relationships going through join tables. Thus you can request the Actors for Films (which in this case finds the information through Roles). You can also reverse the direction of inclusion, asking for all Directors with each including the list of their Films:
 
 .. code-block:: http
 
   GET /directors?select=films(title,year) HTTP/1.1
 
-.. important::
-
-  Whenever foreign key relations change in the database schema you must refresh PostgREST's schema cache to allow resource embedding to work properly. See the section :ref:`schema_reloading`.
-
 Embedded Filters
 ----------------
 

From 5c22846e12d137b323755dc8e0f1f869ecddcc22 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Sat, 10 Aug 2019 18:39:55 -0500
Subject: [PATCH 251/652] Fix #172, add section on embedding views

---
 api.rst | 37 ++++++++++++++++++++++++++++++++++++-
 1 file changed, 36 insertions(+), 1 deletion(-)

diff --git a/api.rst b/api.rst
index 8381f8564..7161eeb48 100644
--- a/api.rst
+++ b/api.rst
@@ -488,7 +488,7 @@ Resource Embedding
 ==================
 
 In addition to providing RESTful routes for each table and view, PostgREST allows related resources to be included together in a single
-API call. This reduces the need for multiple API requests. The server uses **foreign keys** to determine which tables and views can be 
+API call. This reduces the need for multiple API requests. The server uses **foreign keys** to determine which tables and views can be
 returned together. For example, consider a database of films and their awards:
 
 .. important::
@@ -601,6 +601,41 @@ Embedded resources can be aliased and filters can be applied on these aliases:
 
   GET /films?select=*,90_comps:competitions(name),91_comps:competitions(name)&90_comps.year=eq.1990&91_comps.year=eq.1991 HTTP/1.1
 
+Embedding Views
+---------------
+
+Embedding a view is possible if the view contains columns that have **foreign keys** defined in their source tables.
+
+As an example, let's create a view called ``nominations_view`` based on the nominations table.
+
+.. code-block:: postgres
+
+  CREATE VIEW nominations_view AS
+  SELECT
+     rank
+   , competition_id
+   , film_id
+  FROM
+    nominations;
+
+Since it contains ``competition_id`` and ``film_id``—and each one has a **foreign key** defined in its source table—we can embed competitions and films:
+
+.. code-block:: http
+
+  GET /nominations_view?select=rank,competitions(name,year),films(title)&rank=eq.5 HTTP/1.1
+
+
+.. warning::
+
+   Is not guaranteed that all kinds of views will be embeddable. In particular, views that contain
+   UNIONs will not be made embeddable.
+
+   Why? PostgREST detects source table foreign keys in the view by querying and parsing `pg_rewrite <https://www.postgresql.org/docs/11/catalog-pg-rewrite.html>`_.
+   This may fail depending on the complexity of the view, it's a best-effort approach.
+
+.. important::
+
+  If view definitions change you must refresh PostgREST's schema cache for this to work properly. See the section :ref:`schema_reloading`.
 
 .. _custom_queries:
 

From 396b0468ce9c0b2d9b0003050beeea99e473dd7a Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Mon, 12 Aug 2019 14:13:20 -0500
Subject: [PATCH 252/652] Refine embedding views section

---
 api.rst | 11 ++++++++---
 1 file changed, 8 insertions(+), 3 deletions(-)

diff --git a/api.rst b/api.rst
index 7161eeb48..efdff6b20 100644
--- a/api.rst
+++ b/api.rst
@@ -606,7 +606,7 @@ Embedding Views
 
 Embedding a view is possible if the view contains columns that have **foreign keys** defined in their source tables.
 
-As an example, let's create a view called ``nominations_view`` based on the nominations table.
+As an example, let's create a view called ``nominations_view`` based on the *nominations* table.
 
 .. code-block:: postgres
 
@@ -618,7 +618,7 @@ As an example, let's create a view called ``nominations_view`` based on the nomi
   FROM
     nominations;
 
-Since it contains ``competition_id`` and ``film_id``—and each one has a **foreign key** defined in its source table—we can embed competitions and films:
+Since it contains ``competition_id`` and ``film_id``—and each one has a **foreign key** defined in its source table—we can embed *competitions* and *films*:
 
 .. code-block:: http
 
@@ -631,7 +631,12 @@ Since it contains ``competition_id`` and ``film_id``—and each one has a **fore
    UNIONs will not be made embeddable.
 
    Why? PostgREST detects source table foreign keys in the view by querying and parsing `pg_rewrite <https://www.postgresql.org/docs/11/catalog-pg-rewrite.html>`_.
-   This may fail depending on the complexity of the view, it's a best-effort approach.
+   This may fail depending on the complexity of the view.
+
+   `Report an issue <https://github.com/PostgREST/postgrest/issues>`_ if your view is not made embeddable so we can
+   keep continue improving foreign key detection.
+
+   In the future we'll include include a way to manually specify views source foreign keys to address this limitation.
 
 .. important::
 

From cb2bf809a7fd4b28ddc5c8097eab40dab135d4dd Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Tue, 13 Aug 2019 11:55:21 -0500
Subject: [PATCH 253/652] Fix #219, how-to for embedding table from other
 schema

---
 api.rst                                       |  2 +
 .../embedding-table-from-another-schema.rst   | 79 +++++++++++++++++++
 index.rst                                     |  6 ++
 livereload_docs.py                            |  1 +
 4 files changed, 88 insertions(+)
 create mode 100644 how-tos/embedding-table-from-another-schema.rst

diff --git a/api.rst b/api.rst
index efdff6b20..7c9ed9b9e 100644
--- a/api.rst
+++ b/api.rst
@@ -601,6 +601,8 @@ Embedded resources can be aliased and filters can be applied on these aliases:
 
   GET /films?select=*,90_comps:competitions(name),91_comps:competitions(name)&90_comps.year=eq.1990&91_comps.year=eq.1991 HTTP/1.1
 
+.. _embedding_views:
+
 Embedding Views
 ---------------
 
diff --git a/how-tos/embedding-table-from-another-schema.rst b/how-tos/embedding-table-from-another-schema.rst
new file mode 100644
index 000000000..751706464
--- /dev/null
+++ b/how-tos/embedding-table-from-another-schema.rst
@@ -0,0 +1,79 @@
+Embedding a table from another schema
+=====================================
+
+Suppose you have a **people** table in the ``public`` schema and this schema is exposed through PostgREST's :ref:`db-schema`.
+
+.. code-block:: postgres
+
+   create table public.people(
+     id        int  primary key
+   , full_name text
+   );
+
+And you want to :ref:`embed <resource_embedding>` the **people** table with a **details** table that's in another schema named ``private``.
+
+.. code-block:: postgres
+
+   create schema if not exists private;
+
+   -- For simplicity's sake the table is devoid of constraints on email, phone, etc.
+   create table private.details(
+     id         int  primary key references public.people
+   , email      text
+   , phone      text
+   , birthday   date
+   , occupation text
+   , company    text
+   );
+
+   -- other database objects in this schema
+   -- ...
+   -- ...
+
+To solve this, you can create a view of **details** in the ``public`` schema. We'll call it **public_details**.
+
+.. code-block:: postgres
+
+   create view public.public_details as
+   select
+       id
+     , occupation
+     , company
+   from
+      private.details;
+
+Since PostgREST supports :ref:`embedding_views`, you can embed **people** with **public_details**.
+
+Let's insert some data to test this:
+
+.. code-block:: postgres
+
+   insert into
+      public.people
+   values
+      (1, 'John Doe'), (2, 'Jane Doe');
+
+   insert into
+      private.details
+   values
+      (1, 'jhon@fake.com', '772-323-5433', '1990-02-01', 'Transportation attendant', 'Body Fate'),
+      (2, 'jane@fake.com', '480-474-6571', '1980-04-21', 'Geotechnical engineer', 'Earthworks Garden Kare');
+
+.. important::
+
+  Make sure PostgREST's schema cache is up-to-date. See :ref:`schema_reloading`.
+
+Now, make the following request:
+
+.. code-block:: bash
+
+   curl "http://localhost:3000/people?select=full_name,public_details(occupation,company)"
+
+The result should be:
+
+.. code-block:: json
+
+   [
+      {"full_name":"John Doe","public_details":[{"occupation":"Transportation attendant","company":"Body Fate"}]},
+      {"full_name":"Jane Doe","public_details":[{"occupation":"Geotechnical engineer","company":"Earthworks Garden Kare"}]}
+   ]
diff --git a/index.rst b/index.rst
index 5c8a34dad..f8649000d 100644
--- a/index.rst
+++ b/index.rst
@@ -105,6 +105,12 @@ Translations
    tutorials/tut0.rst
    tutorials/tut1.rst
 
+.. toctree::
+   :caption: How-to guides
+   :titlesonly:
+
+   how-tos/embedding-table-from-another-schema.rst
+
 .. toctree::
    :caption: Integrations
    :titlesonly:
diff --git a/livereload_docs.py b/livereload_docs.py
index 9983589aa..d4d0ba6e8 100755
--- a/livereload_docs.py
+++ b/livereload_docs.py
@@ -6,4 +6,5 @@ call(['sphinx-build', '-b', 'html', '-a', '-n', '.', '_build'])
 server = Server()
 server.watch('*.rst', shell('sphinx-build -b html -a -n . _build'))
 server.watch('tutorials/*.rst', shell('sphinx-build -b html -a -n . _build'))
+server.watch('how-tos/*.rst', shell('sphinx-build -b html -a -n . _build'))
 server.serve(root='_build/')

From bed1013ecd5334b0bf8a6ee8abaa2b6c63aed551 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Wed, 14 Aug 2019 21:49:49 -0500
Subject: [PATCH 254/652] Fix #235, casting type to json object

---
 api.rst                                       |  8 ++
 how-tos/casting-type-to-custom-json.rst       | 95 +++++++++++++++++++
 .../embedding-table-from-another-schema.rst   |  2 +-
 index.rst                                     |  1 +
 4 files changed, 105 insertions(+), 1 deletion(-)
 create mode 100644 how-tos/casting-type-to-custom-json.rst

diff --git a/api.rst b/api.rst
index 7c9ed9b9e..ca8212c3e 100644
--- a/api.rst
+++ b/api.rst
@@ -158,6 +158,9 @@ When certain columns are wide (such as those holding binary data), it is more ef
 
 The default is :sql:`*`, meaning all columns. This value will become more important below in :ref:`resource_embedding`.
 
+Renaming Columns
+~~~~~~~~~~~~~~~~
+
 You can rename the columns by prefixing them with an alias followed by the colon ``:`` operator.
 
 .. code-block:: http
@@ -169,6 +172,11 @@ You can rename the columns by prefixing them with an alias followed by the colon
     {"fullName": "Jane Doe", "birthDate": "01/12/1998"}
   ]
 
+.. _casting_columns:
+
+Casting Columns
+~~~~~~~~~~~~~~~
+
 Casting the columns is possible by suffixing them with the double colon ``::`` plus the desired type.
 
 .. code-block:: http
diff --git a/how-tos/casting-type-to-custom-json.rst b/how-tos/casting-type-to-custom-json.rst
new file mode 100644
index 000000000..f9d13afa7
--- /dev/null
+++ b/how-tos/casting-type-to-custom-json.rst
@@ -0,0 +1,95 @@
+Casting a type to a custom JSON object
+======================================
+
+While using PostgREST you might have noticed that certain PostgreSQL types translate to JSON strings when you would
+have expected a JSON object or array. For example, let's see the case of `range types <https://www.postgresql.org/docs/11/rangetypes.html>`_.
+
+.. code-block:: postgres
+
+   -- example taken from https://www.postgresql.org/docs/11/rangetypes.html#RANGETYPES-EXAMPLES
+   create table reservations (
+     room   int
+   , during tsrange
+   );
+
+   insert into
+      reservations
+   values
+       (1108, tsrange('2010-01-01 14:30', '2010-01-01 15:30'));
+
+Here we have a column named **during** as a ``tsrange`` type, we would like to get it as JSON through PostgREST.
+
+.. code-block:: bash
+
+   curl "http://localhost:3000/reservations"
+
+Result:
+
+.. code-block:: json
+
+   [
+     {
+      "room":1108,
+      "during":"[\"2010-01-01 14:30:00\",\"2010-01-01 15:30:00\")"
+     }
+   ]
+
+The **during** value is probably not the in the format you want. We get a JSON string because by default PostgreSQL casts
+the type to JSON by using its ``text`` representation. We can change this representation to a custom JSON object by `creating a CAST <https://www.postgresql.org/docs/current/sql-createcast.html>`_ .
+
+To do this, first we'll define the function that will do the conversion from ``tsrange`` to ``json``.
+
+.. code-block:: postgres
+
+   create or replace function tsrange_to_json(tsrange) returns json as $$
+     select json_build_object(
+       'lower', lower($1)
+     , 'upper', upper($1)
+     , 'lower_inc', lower_inc($1)
+     , 'upper_inc', upper_inc($1)
+     );
+   $$ language sql;
+
+Using this function we'll create the CAST.
+
+.. code-block:: postgres
+
+   create cast (tsrange as json) with function tsrange_to_json(tsrange) as assignment;
+
+And we'll do the request and :ref:`cast the column <casting_columns>`.
+
+.. code-block:: bash
+
+   curl "http://localhost:3000/reservations?select=room,during::json"
+
+The result now is:
+
+.. code-block:: json
+
+   [
+     {
+      "room":1108,
+      "during":{
+         "lower" : "2010-01-01T14:30:00",
+         "upper" : "2010-01-01T15:30:00",
+         "lower_inc" : true,
+         "upper_inc" : false
+      }
+     }
+   ]
+
+You can use the same idea for creating custom CASTs for different types.
+
+.. note::
+
+   If you don't want to modify CASTs for built-in types, an option would be to `create a custom type <https://www.postgresql.org/docs/current/sql-createtype.html>`_ 
+   for your own ``tsrange`` and add its own CAST.
+
+   .. code-block:: postgres
+
+      create type mytsrange as range (subtype = timestamp, subtype_diff = tsrange_subdiff);
+
+      -- define column types and casting function analoguously to the above example
+      -- ...
+
+      create cast (mytsrange as json) with function mytsrange_to_json(mytsrange) as assignment;
diff --git a/how-tos/embedding-table-from-another-schema.rst b/how-tos/embedding-table-from-another-schema.rst
index 751706464..60265dd40 100644
--- a/how-tos/embedding-table-from-another-schema.rst
+++ b/how-tos/embedding-table-from-another-schema.rst
@@ -16,7 +16,7 @@ And you want to :ref:`embed <resource_embedding>` the **people** table with a **
 
    create schema if not exists private;
 
-   -- For simplicity's sake the table is devoid of constraints on email, phone, etc.
+   -- For simplicity's sake the table is devoid of constraints/domains on email, phone, etc.
    create table private.details(
      id         int  primary key references public.people
    , email      text
diff --git a/index.rst b/index.rst
index f8649000d..8f6bdf28f 100644
--- a/index.rst
+++ b/index.rst
@@ -110,6 +110,7 @@ Translations
    :titlesonly:
 
    how-tos/embedding-table-from-another-schema.rst
+   how-tos/casting-type-to-custom-json.rst
 
 .. toctree::
    :caption: Integrations

From abdc2ac2a98ae8ae4277e5c9fd868e5e8893f5a6 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Thu, 15 Aug 2019 14:40:06 -0500
Subject: [PATCH 255/652] Remove integrations section

---
 index.rst                    |   6 -
 integrations/timescaledb.rst | 327 -----------------------------------
 2 files changed, 333 deletions(-)
 delete mode 100644 integrations/timescaledb.rst

diff --git a/index.rst b/index.rst
index 8f6bdf28f..c126cddaf 100644
--- a/index.rst
+++ b/index.rst
@@ -112,12 +112,6 @@ Translations
    how-tos/embedding-table-from-another-schema.rst
    how-tos/casting-type-to-custom-json.rst
 
-.. toctree::
-   :caption: Integrations
-   :titlesonly:
-
-   integrations/timescaledb.rst
-
 .. toctree::
    :caption: Installation
    :titlesonly:
diff --git a/integrations/timescaledb.rst b/integrations/timescaledb.rst
deleted file mode 100644
index ea372a507..000000000
--- a/integrations/timescaledb.rst
+++ /dev/null
@@ -1,327 +0,0 @@
-TimescaleDB for Time-Series Data
-================================
-
-`TimescaleDB <https://www.timescale.com?utm_campaign=postgrest&utm_source=sponsor&utm_medium=referral&utm_content=tutorial>`_ is an open-source database designed to make SQL scalable for time-series data. It is engineered up from PostgreSQL, providing automatic partitioning across time and space, while retaining the standard PostgreSQL interface.
-
-PostgREST turns your PostgreSQL database directly into a RESTful API, since TimescaleDB is packaged as a PostgreSQL extension it works with PostgREST as well.
-
-In this tutorial we'll explore some of TimescaleDB features through PostgREST.
-
-Install Docker
---------------
-
-For an easier setup we're going to use `Docker <https://www.docker.com/get-started>`_, make sure you have it installed.
-
-Run TimescaleDB
----------------
-
-First, let’s pull and start the `TimescaleDB container image <http://bit.ly/2SpxiYJ>`_:
-
-.. code-block:: bash
-
-  docker run --name tsdb_tut \
-    -e POSTGRES_PASSWORD=mysecretpassword \
-    -p 5433:5432 \
-    -d timescale/timescaledb:latest-pg11
-
-This will run the container as a daemon and expose port ``5433`` to the host system so that it doesn't conflict with another PostgreSQL installation.
-
-Set up TimescaleDB
-------------------
-
-Now, we'll create the ``timescaledb`` extension in our database.
-
-Run ``psql`` in the container we created in the previous step.
-
-.. code-block:: bash
-
-  docker exec -it tsdb_tut psql -U postgres
-  ## Run all the following commands inside psql
-
-And create the extension:
-
-.. code-block:: postgres
-
-  create extension if not exists timescaledb cascade;
-
-Create an Hypertable
---------------------
-
-`Hypertables <https://docs.timescale.com/latest/using-timescaledb/hypertables?utm_campaign=postgrest&utm_source=sponsor&utm_medium=referral&utm_content=hypertables>`_ are the core abstraction TimescaleDB offers for dealing with time-series data.
-
-To create an ``hypertable``, first we need to create standard PostgreSQL tables:
-
-.. code-block:: postgres
-
-  create table if not exists locations(
-    device_id    text  primary key
-  , location     text
-  , environment  text
-  );
-
-  create table if not exists conditions(
-    time         timestamp with time zone  not null
-  , device_id    text                      references locations(device_id)
-  , temperature  numeric
-  , humidity     numeric
-  );
-
-Now, we'll convert ``conditions`` into an hypertable with `create_hypertable <http://docs.timescale.com/latest/api?utm_campaign=postgrest&utm_source=sponsor&utm_medium=referral&utm_content=create-hypertable#create_hypertable>`_:
-
-.. code-block:: postgres
-
-  SELECT create_hypertable('conditions', 'time', chunk_time_interval => interval '1 day');
-  -- This also implicitly creates an index: CREATE INDEX ON "conditions"(time DESC);
-
-  -- Exit psql
-  exit
-
-
-Load sample data
-----------------
-
-To have some data to play with, we'll download the ``weather_small`` data set from `TimescaleDB's sample datasets <https://docs.timescale.com/latest/tutorials/other-sample-datasets?utm_campaign=postgrest&utm_source=sponsor&utm_medium=referral&utm_content=datasets>`_.
-
-.. code-block:: bash
-
-  ## Run bash inside the database container
-  docker exec -it tsdb_tut bash
-
-  ## Download and uncompress the data
-  wget -qO- https://timescaledata.blob.core.windows.net/datasets/weather_small.tar.gz | tar xvz
-
-  ## Copy data into the database
-  psql -U postgres <<EOF
-    \COPY locations  FROM weather_small_locations.csv  CSV
-    \COPY conditions FROM weather_small_conditions.csv CSV
-  EOF
-
-  ## Exit bash
-  exit
-
-Run PostgREST
--------------
-
-For the last step in the setup, pull and start the official `PostgREST image <https://hub.docker.com/r/postgrest/postgrest/>`_:
-
-.. code-block:: bash
-
-  docker run --rm -p 3000:3000 \
-    --name tsdb_pgrst \
-    --link tsdb_tut \
-    -e PGRST_DB_URI="postgres://postgres:mysecretpassword@tsdb_tut/postgres" \
-    -e PGRST_DB_ANON_ROLE="postgres" \
-    -d postgrest/postgrest:latest
-
-PostgREST on Hypertables
-------------------------
-
-We'll now see how to read data from hypertables through PostgREST.
-
-Since hypertables can be queried using standard `SELECT statements <https://docs.timescale.com/v1.2/using-timescaledb/reading-data?utm_campaign=postgrest&utm_source=sponsor&utm_medium=referral&utm_content=reading-data>`_, we can query them through PostgREST normally.
-
-Suppose we want to run this query on ``conditions``:
-
-.. code-block:: postgres
-
-  select
-    time,
-    device_id,
-    humidity
-  from conditions
-  where
-    humidity > 90           and
-    time     < '2016-11-16'
-  order by time desc
-  limit 10;
-
-Using PostgREST :ref:`horizontal <h_filter>`/:ref:`vertical <v_filter>` filtering, this query can be expressed as:
-
-.. code-block:: bash
-
-  curl -G "localhost:3000/conditions" \
-    -d select=time,device_id,humidity \
-    -d humidity=gt.90 \
-    -d time=lt.2016-11-16 \
-    -d order=time.desc \
-    -d limit=10
-  ## This command is equivalent to:
-  ## curl "localhost:3000/conditions?select=time,device_id,humidity&humidity=gt.90&time=lt.2016-11-16&order=time.desc&limit=10"
-  ## Here we used -G and -d to make the command more readable
-
-The response will be:
-
-.. code-block:: json
-
-  [{"time":"2016-11-15T23:58:00+00:00","device_id":"weather-pro-000982","humidity":90.90000000000006},
-   {"time":"2016-11-15T23:58:00+00:00","device_id":"weather-pro-000968","humidity":92.3},
-   {"time":"2016-11-15T23:58:00+00:00","device_id":"weather-pro-000963","humidity":96.29999999999993},
-   {"time":"2016-11-15T23:58:00+00:00","device_id":"weather-pro-000951","humidity":94.39999999999998},
-   {"time":"2016-11-15T23:58:00+00:00","device_id":"weather-pro-000950","humidity":93.69999999999982},
-   {"time":"2016-11-15T23:58:00+00:00","device_id":"weather-pro-000915","humidity":94.69999999999997},
-   {"time":"2016-11-15T23:58:00+00:00","device_id":"weather-pro-000911","humidity":93.2000000000001},
-   {"time":"2016-11-15T23:58:00+00:00","device_id":"weather-pro-000910","humidity":91.30000000000017},
-   {"time":"2016-11-15T23:58:00+00:00","device_id":"weather-pro-000901","humidity":92.30000000000005},
-   {"time":"2016-11-15T23:58:00+00:00","device_id":"weather-pro-000895","humidity":91.00000000000014}]
-
-JOINs with relational tables
-----------------------------
-
-Hypertables support all standard `PostgreSQL constraints <https://docs.timescale.com/latest/using-timescaledb/schema-management?utm_campaign=postgrest&utm_source=sponsor&utm_medium=referral&utm_content=constraints#constraints>`_ . We can make use of the foreign key defined on ``locations`` to make a JOIN through PostgREST. A query such as:
-
-.. code-block:: postgres
-
-  select
-    c.time,
-    c.temperature,
-    l.location,
-    l.environment
-  from conditions c
-  left join locations l on
-    c.device_id = l.device_id
-  order by time desc
-  limit 10;
-
-Can be expressed in PostgREST by using :ref:`resource_embedding`.
-
-.. code-block:: bash
-
-  curl -G localhost:3000/conditions \
-    -d select="time,temperature,device:locations(location,environment)" \
-    -d order=time.desc \
-    -d limit=10
-
-.. code-block:: json
-
-  [{"time":"2016-11-16T21:18:00+00:00","temperature":69.49999999999991,"device":{"location":"office-000202","environment":"inside"}},
-   {"time":"2016-11-16T21:18:00+00:00","temperature":90,"device":{"location":"field-000205","environment":"outside"}},
-   {"time":"2016-11-16T21:18:00+00:00","temperature":60.499999999999986,"device":{"location":"door-00085","environment":"doorway"}},
-   {"time":"2016-11-16T21:18:00+00:00","temperature":91,"device":{"location":"swamp-000188","environment":"outside"}},
-   {"time":"2016-11-16T21:18:00+00:00","temperature":42,"device":{"location":"arctic-000219","environment":"outside"}},
-   {"time":"2016-11-16T21:18:00+00:00","temperature":70.80000000000003,"device":{"location":"office-000201","environment":"inside"}},
-   {"time":"2016-11-16T21:18:00+00:00","temperature":62.699999999999974,"device":{"location":"door-00084","environment":"doorway"}},
-   {"time":"2016-11-16T21:18:00+00:00","temperature":85.49999999999918,"device":{"location":"field-000204","environment":"outside"}},
-   {"time":"2016-11-16T21:18:00+00:00","temperature":42,"device":{"location":"arctic-000218","environment":"outside"}},
-   {"time":"2016-11-16T21:18:00+00:00","temperature":42,"device":{"location":"arctic-000217","environment":"outside"}}]
-
-Time-Oriented Analytics
------------------------
-
-TimescaleDB includes new aggregate functions for time-oriented `analytics <https://docs.timescale.com/latest/api?utm_campaign=postgrest&utm_source=sponsor&utm_medium=referral&utm_content=analytics#analytics>`_.
-
-For using aggregate queries with PostgREST you must create VIEWs or :ref:`s_procs`. Here's an example for using `time_bucket <https://docs.timescale.com/latest/api?utm_campaign=postgrest&utm_source=sponsor&utm_medium=referral&utm_content=time-bucket#time_bucket>`_:
-
-.. code-block:: postgres
-
-  -- Run psql in the database container
-  docker exec -it tsdb_tut psql -U postgres
-
-  -- Create the function
-  create or replace function temperature_summaries(gap interval default '1 hour', prefix text default 'field')
-  returns table(hour text, avg_temp numeric, min_temp numeric, max_temp numeric) as $$
-    select
-      time_bucket(gap, time)::text as hour,
-      trunc(avg(temperature), 2),
-      trunc(min(temperature), 2),
-      trunc(max(temperature), 2)
-    from conditions c
-    where c.device_id in (
-      select device_id from locations
-      where location like prefix || '-%')
-    group by hour
-  $$ language sql stable;
-
-  -- Exit psql
-  exit
-
-Every time the schema is changed you must reload PostgREST :ref:`schema cache <schema_reloading>` so it can pick up the function parameters correctly. To reload, run:
-
-.. code-block:: bash
-
-  docker kill --signal=USR1 tsdb_pgrst
-
-
-Now, since the function is ``stable``, we can call it with ``GET`` as:
-
-.. code-block:: bash
-
-  curl -G "localhost:3000/rpc/temperature_summaries" \
-    -d gap=2minutes \
-    -d order=hour.asc \
-    -d limit=10 \
-    -H "Accept: text/csv"
-  ## time_bucket accepts an interval type as it's argument
-  ## so you can pass gap=5minutes or gap=5hours
-
-.. code-block:: sql
-
-  hour,avg_temp,min_temp,max_temp
-  "2016-11-15 12:00:00+00",72.97,68.00,78.00
-  "2016-11-15 12:02:00+00",73.01,68.00,78.00
-  "2016-11-15 12:04:00+00",73.05,68.00,78.10
-  "2016-11-15 12:06:00+00",73.07,68.00,78.10
-  "2016-11-15 12:08:00+00",73.11,68.00,78.10
-  "2016-11-15 12:10:00+00",73.14,68.00,78.10
-  "2016-11-15 12:12:00+00",73.17,68.00,78.19
-  "2016-11-15 12:14:00+00",73.21,68.10,78.19
-  "2016-11-15 12:16:00+00",73.24,68.10,78.29
-  "2016-11-15 12:18:00+00",73.27,68.10,78.39
-
-Note you can use PostgREST standard filtering on function results. Here we also changed the :ref:`res_format` to CSV.
-
-Fast Ingestion with Bulk Insert
--------------------------------
-
-You can use PostgREST :ref:`bulk_insert` to leverage TimescaleDB `fast ingestion <https://docs.timescale.com/latest/introduction/timescaledb-vs-postgres?utm_campaign=postgrest&utm_source=sponsor&utm_medium=referral&utm_content=fast-ingest>`_.
-
-Let's do an insert of three rows:
-
-.. code-block:: bash
-
-  curl "localhost:3000/conditions" \
-    -H "Content-Type: application/json" \
-    -H "Prefer: return=representation" \
-    -d @- << EOF
-    [
-      {"time": "2019-02-21 01:00:01-05", "device_id": "weather-pro-000000", "temperature": 40.0, "humidity": 59.9},
-      {"time": "2019-02-21 01:00:02-05", "device_id": "weather-pro-000000", "temperature": 42.0, "humidity": 69.9},
-      {"time": "2019-02-21 01:00:03-05", "device_id": "weather-pro-000000", "temperature": 44.0, "humidity": 79.9}
-    ]
-  EOF
-
-By using the ``Prefer: return=representation`` header we can see the successfully inserted rows:
-
-.. code-block:: json
-
-  [{"time":"2019-02-21T06:00:01+00:00","device_id":"weather-pro-000000","temperature":40.0,"humidity":59.9},
-   {"time":"2019-02-21T06:00:02+00:00","device_id":"weather-pro-000000","temperature":42.0,"humidity":69.9},
-   {"time":"2019-02-21T06:00:03+00:00","device_id":"weather-pro-000000","temperature":44.0,"humidity":79.9}]
-
-Let's now insert a thousand rows, we'll use `jq <https://stedolan.github.io/jq/>`_ for constructing the array.
-
-.. code-block:: bash
-
-  yes "{\"time\": \"$(date +'%F %T')\", \"device_id\": \"weather-pro-000001\", \"temperature\": 50, \"humidity\": 60}" | \
-  head -n 1000 | jq -s '.' | \
-  curl -i -d @- "http://localhost:3000/conditions" \
-    -H "Content-Type: application/json" \
-    -H "Prefer: count=exact"
-
-With ``Prefer: count=exact`` we can know how many rows were inserted. Check out the response:
-
-.. code-block:: haskell
-
-  HTTP/1.1 201 Created
-  Transfer-Encoding: chunked
-  Date: Fri, 22 Feb 2019 16:47:05 GMT
-  Server: postgrest/5.2.0 (9969262)
-  Content-Range: */1000
-
-You can see in ``Content-Range`` that the total number of inserted rows is ``1000``.
-
-Summing it up
--------------
-
-There you have it, with PostgREST you can get an instant and performant RESTful API for a TimescaleDB database.
-
-For a more in depth exploration of TimescaleDB capabilities, check their `docs <https://docs.timescale.com?utm_campaign=postgrest&utm_source=sponsor&utm_medium=referral&utm_content=docs-tutorial>`_.

From f5868bc277a511654009830f95991192c16bfa2b Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Fri, 16 Aug 2019 14:25:55 -0500
Subject: [PATCH 256/652] Add server-unix-socket config

---
 install.rst | 13 ++++++++++++-
 1 file changed, 12 insertions(+), 1 deletion(-)

diff --git a/install.rst b/install.rst
index 98abbb3a6..72a0d9fad 100644
--- a/install.rst
+++ b/install.rst
@@ -78,6 +78,7 @@ db-pool               Int     10
 db-extra-search-path  String  public
 server-host           String  127.0.0.1
 server-port           Int     3000
+server-unix-socket    String
 server-proxy-uri      String
 jwt-secret            String
 jwt-aud               String
@@ -153,7 +154,17 @@ server-host
 server-port
 -----------
 
-  The port to bind the web server.
+  The TCP port to bind the web server.
+
+server-unix-socket
+------------------
+
+  `Unix domain socket <https://en.wikipedia.org/wiki/Unix_domain_socket>`_ where to bind the PostgREST web server.
+  If specified, this takes precedence over :ref:`server-port`. Example:
+
+  .. code:: bash
+
+    server-unix-socket = "/tmp/pgrst.sock"
 
 .. _server-proxy-uri:
 

From eca325c11b7fbe9f638b2340cb7a0c243d909e79 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Fri, 16 Aug 2019 14:36:59 -0500
Subject: [PATCH 257/652] Add materialized views mention

---
 api.rst | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/api.rst b/api.rst
index ca8212c3e..c5904779e 100644
--- a/api.rst
+++ b/api.rst
@@ -565,8 +565,8 @@ this:
 
   Whenever FOREIGN KEY constraints change in the database schema you must refresh PostgREST's schema cache for Resource Embedding to work properly. See the section :ref:`schema_reloading`.
 
-Embeddeding through join tables
--------------------------------
+Embedding through join tables
+-----------------------------
 
 PostgREST can also detect relationships going through join tables. Thus you can request the Actors for Films (which in this case finds the information through Roles). You can also reverse the direction of inclusion, asking for all Directors with each including the list of their Films:
 
@@ -634,6 +634,7 @@ Since it contains ``competition_id`` and ``film_id``—and each one has a **fore
 
   GET /nominations_view?select=rank,competitions(name,year),films(title)&rank=eq.5 HTTP/1.1
 
+It's also possible to embed `Materialized Views <https://www.postgresql.org/docs/11/rules-materializedviews.html>`_.
 
 .. warning::
 

From a8b2ed313e64bc7b8759a3cd1306f52fb94c7131 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Sat, 17 Aug 2019 13:11:15 -0500
Subject: [PATCH 258/652] Add db-pool-timeout config

---
 install.rst | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/install.rst b/install.rst
index 72a0d9fad..0e288d3ee 100644
--- a/install.rst
+++ b/install.rst
@@ -75,6 +75,7 @@ db-uri                String             Y
 db-schema             String             Y
 db-anon-role          String             Y
 db-pool               Int     10
+db-pool-timeout       Int     10
 db-extra-search-path  String  public
 server-host           String  127.0.0.1
 server-port           Int     3000
@@ -125,6 +126,11 @@ db-pool
 
   Number of connections to keep open in PostgREST's database pool. Having enough here for the maximum expected simultaneous client connections can improve performance. Note it's pointless to set this higher than the :code:`max_connections` GUC in your database.
 
+db-pool-timeout
+---------------
+
+   Time to live for an idle database pool connection.
+
 .. _db-extra-search-path:
 
 db-extra-search-path

From 2414c7f7f0e58012fa238574aeab4f13d8f3b0af Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Sat, 17 Aug 2019 14:45:45 -0500
Subject: [PATCH 259/652] Add bulk call reference

---
 api.rst | 21 +++++++++++++++++++++
 1 file changed, 21 insertions(+)

diff --git a/api.rst b/api.rst
index c5904779e..d0470ed16 100644
--- a/api.rst
+++ b/api.rst
@@ -811,6 +811,27 @@ PostgREST will detect if the function is scalar or table-valued and will shape t
     { "title": "Blade Runner 2049", "rating": 8.1}
   ]
 
+Bulk Call
+---------
+
+It's possible to call a function in a bulk way, analoguosly to :ref:`bulk_insert`.
+
+.. code-block:: http
+
+   POST /rpc/add_them HTTP/1.1
+   Content-Type: application/json
+
+   [
+      {"a": 1, "b": 2},
+      {"a": 3, "b": 4}
+   ]
+
+Result:
+
+.. code-block:: json
+
+   [ 3, 7 ]
+
 Function filters
 ----------------
 

From 51c0ad3e0c0467af53de208a69ed7ed0b511f543 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Sat, 17 Aug 2019 15:34:14 -0500
Subject: [PATCH 260/652] Add specify columns reference

---
 api.rst | 30 ++++++++++++++++++++++++++++++
 1 file changed, 30 insertions(+)

diff --git a/api.rst b/api.rst
index d0470ed16..82948fe79 100644
--- a/api.rst
+++ b/api.rst
@@ -832,6 +832,8 @@ Result:
 
    [ 3, 7 ]
 
+It's also possible to :ref:`Specify Columns <specify_columns>` on functions calls.
+
 Function filters
 ----------------
 
@@ -1066,6 +1068,34 @@ To bulk insert JSON post an array of objects having all-matching keys
     { "name": "Janus", "age": 10, "height": 55 }
   ]
 
+.. _specify_columns:
+
+Specifying Columns
+------------------
+
+By using the :code:`columns` query parameter it's possible to specify the payload keys that will be inserted/updated
+and ignore the rest of the payload.
+
+.. code-block:: http
+
+   POST /datasets?columns=source,publication_date,figure HTTP/1.1
+   Content-Type: application/json
+
+   {
+     "source": "Natural Disaster Prevention and Control",
+     "publication_date": "2015-09-11",
+     "figure": 1100,
+     "location": "...",
+     "comment": "...",
+     "extra": "...",
+     "stuff": "..."
+   }
+
+In this case, only **source**, **publication_date** and **figure** will be inserted. The rest of the JSON keys will be ignored.
+
+Using this also has the side-effect of being more efficient for :ref:`bulk_insert` since PostgREST will not process the JSON and
+it'll send it directly to PostgreSQL.
+
 Upsert
 ------
 

From afff7a00a48a173f36dacbb1b01bf558ff4ad8e3 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Mon, 19 Aug 2019 13:06:12 -0500
Subject: [PATCH 261/652] Put accessing and setting headers together

---
 api.rst | 28 ++++++++++++++--------------
 1 file changed, 14 insertions(+), 14 deletions(-)

diff --git a/api.rst b/api.rst
index 82948fe79..67a911b5b 100644
--- a/api.rst
+++ b/api.rst
@@ -914,6 +914,20 @@ Stored procedures can access request headers, cookies and jwt claims by reading
 
   ``request.jwt.claim.role`` defaults to the value of :ref:`db-anon-role`.
 
+Setting Response Headers
+------------------------
+
+PostgREST reads the ``response.headers`` SQL variable to add extra headers to the HTTP response. Stored procedures can modify this variable. For instance, this statement would add caching headers to the response:
+
+.. code-block:: sql
+
+  -- tell client to cache response for two days
+
+  SET LOCAL "response.headers" =
+    '[{"Cache-Control": "public"}, {"Cache-Control": "max-age=259200"}]';
+
+Notice that the variable should be set to an *array* of single-key objects rather than a single multiple-key object. This is because headers such as ``Cache-Control`` or ``Set-Cookie`` need to be repeated when setting multiple values and an object would not allow the repeated key.
+
 Errors and HTTP Status Codes
 ----------------------------
 
@@ -962,20 +976,6 @@ Returns:
 
   {"hint":"Upgrade your plan","details":"Quota exceeded"}
 
-Setting Response Headers
-------------------------
-
-PostgREST reads the ``response.headers`` SQL variable to add extra headers to the HTTP response. Stored procedures can modify this variable. For instance, this statement would add caching headers to the response:
-
-.. code-block:: sql
-
-  -- tell client to cache response for two days
-
-  SET LOCAL "response.headers" =
-    '[{"Cache-Control": "public"}, {"Cache-Control": "max-age=259200"}]';
-
-Notice that the variable should be set to an *array* of single-key objects rather than a single multiple-key object. This is because headers such as ``Cache-Control`` or ``Set-Cookie`` need to be repeated when setting multiple values and an object would not allow the repeated key.
-
 Insertions / Updates
 ====================
 

From b38e29c3d1f258fcb9af5a021a62bf5ea1b2a1c3 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Mon, 19 Aug 2019 13:50:46 -0500
Subject: [PATCH 262/652] Add text/plain reference

Also move binary output to a top heading.
---
 api.rst | 95 ++++++++++++++++++++++++++++++++++-----------------------
 1 file changed, 57 insertions(+), 38 deletions(-)

diff --git a/api.rst b/api.rst
index 67a911b5b..5e7271de5 100644
--- a/api.rst
+++ b/api.rst
@@ -452,44 +452,6 @@ When a singular response is requested but no entries are found, the server respo
 
   Admittedly PostgREST could detect when there is an equality condition holding on all columns constituting the primary key and automatically convert to singular. However this could lead to a surprising change of format that breaks unwary client code just by filtering on an extra column. Instead we allow manually specifying singular vs plural to decouple that choice from the URL format.
 
-Binary output
--------------
-
-If you want to return raw binary data from a :code:`bytea` column, you must specify :code:`application/octet-stream` as part of the :code:`Accept` header
-and select a single column :code:`?select=bin_data`.
-
-.. code-block:: http
-
-  GET /items?select=bin_data&id=eq.1 HTTP/1.1
-  Accept: application/octet-stream
-
-You can also request binary output when calling `Stored Procedures`_ and since they can return a scalar value you are not forced to use :code:`select`
-for this case.
-
-.. code-block:: postgres
-
-  CREATE FUNCTION closest_point(..) RETURNS bytea ..
-
-.. code-block:: http
-
-  POST /rpc/closest_point HTTP/1.1
-  Accept: application/octet-stream
-
-If the stored procedure returns non-scalar values, you need to do a :code:`select` in the same way as for GET binary output.
-
-.. code-block:: sql
-
-  CREATE FUNCTION overlapping_regions(..) RETURNS SETOF TABLE(geom_twkb bytea, ..) ..
-
-.. code-block:: http
-
-  POST /rpc/overlapping_regions?select=geom_twkb HTTP/1.1
-  Accept: application/octet-stream
-
-.. note::
-
-  If more than one row would be returned the binary results will be concatenated with no delimiter.
-
 .. _resource_embedding:
 
 Resource Embedding
@@ -1145,6 +1107,63 @@ To delete rows in a table, use the DELETE verb plus :ref:`h_filter`. For instanc
 
   Beware of accidentally deleting all rows in a table. To learn to prevent that see :ref:`block_fulltable`.
 
+.. _binary_output:
+
+Binary Output
+=============
+
+If you want to return raw binary data from a :code:`bytea` column, you must specify :code:`application/octet-stream` as part of the :code:`Accept` header
+and select a single column :code:`?select=bin_data`.
+
+.. code-block:: http
+
+  GET /items?select=bin_data&id=eq.1 HTTP/1.1
+  Accept: application/octet-stream
+
+You can also request binary output when calling `Stored Procedures`_ and since they can return a scalar value you are not forced to use :code:`select`
+for this case.
+
+.. code-block:: postgres
+
+  CREATE FUNCTION closest_point(..) RETURNS bytea ..
+
+.. code-block:: http
+
+  POST /rpc/closest_point HTTP/1.1
+  Accept: application/octet-stream
+
+If the stored procedure returns non-scalar values, you need to do a :code:`select` in the same way as for GET binary output.
+
+.. code-block:: sql
+
+  CREATE FUNCTION overlapping_regions(..) RETURNS SETOF TABLE(geom_twkb bytea, ..) ..
+
+.. code-block:: http
+
+  POST /rpc/overlapping_regions?select=geom_twkb HTTP/1.1
+  Accept: application/octet-stream
+
+.. note::
+
+  If more than one row would be returned the binary results will be concatenated with no delimiter.
+
+Plain Text Output
+-----------------
+
+You can get raw output from a ``text`` column by using ``Accept: text/plain``.
+
+.. code-block:: http
+
+  GET /workers?select=custom_psv_format HTTP/1.1
+  Accept: text/plain
+
+  09310817|JOHN|DOE|15/04/88|
+  42152780|FRED|BLOGGS|20/02/85|
+  43006541|OTTO|NORMALVERBRAUCHER|01/07/90|
+  02452492|ERIKA|MUSTERMANN|11/01/80|
+
+This follows the same rules as :ref:`binary_output`.
+
 OpenAPI Support
 ===============
 

From 2d6c16c2a6ef2a0ecd03909a6673e92a71189718 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Mon, 19 Aug 2019 15:33:55 -0500
Subject: [PATCH 263/652] Fix #234, reference for raw-media-types

---
 install.rst | 17 +++++++++++++++++
 1 file changed, 17 insertions(+)

diff --git a/install.rst b/install.rst
index 0e288d3ee..0c71f25ed 100644
--- a/install.rst
+++ b/install.rst
@@ -88,6 +88,7 @@ max-rows              Int     ∞
 pre-request           String
 app.settings.*        String
 role-claim-key        String  .role
+raw-media-types       String
 ====================  ======  =========  ========
 
 .. _db-uri:
@@ -254,6 +255,22 @@ role-claim-key
     # non-alphanumerical characters can go inside quotes(escaped in the config value)
     role-claim-key = ".\"https://www.example.com/role\".key"
 
+.. _raw-media-types:
+
+raw-media-types
+---------------
+
+ This serves to extend the media types that PostgREST currently accepts through an ``Accept`` header.
+
+ These media types can be requested by following the same rules as the ones defined in :ref:`binary_output`.
+
+ As an example, the below config would allow you to request an **image** and an **xml** by doing a request with ``Accept: image/png`` 
+ and a request with ``Accept: text/xml``, respectively.
+
+ .. code:: bash
+
+   raw-media-types="image/png, text/xml"
+
 Running the Server
 ==================
 

From 4fe34079d8da42a280e9d23ec87c1b44e6dc5039 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Tue, 20 Aug 2019 14:23:05 -0500
Subject: [PATCH 264/652] Reorganize ecosystem section

---
 admin.rst     |   4 +-
 ecosystem.rst | 102 ++++++++++++++++++++++++++++++++++++++++++++++++++
 index.rst     |  98 +++++-------------------------------------------
 3 files changed, 114 insertions(+), 90 deletions(-)
 create mode 100644 ecosystem.rst

diff --git a/admin.rst b/admin.rst
index f7075f9a6..363851656 100644
--- a/admin.rst
+++ b/admin.rst
@@ -84,9 +84,9 @@ However including the request header :code:`Prefer: count=exact` calculates and
 
 This is fine in small tables, but count performance degrades in big tables due to the MVCC architecture of PostgreSQL. For very large tables it can take a very long time to retrieve the results which allows a denial of service attack. The solution is to strip this header from all requests:
 
-.. code::
+.. code-block:: postgres
 
-  Nginx stuff. Remove any prefer header which contains the word count
+  -- Pending nginx config: Remove any prefer header which contains the word count
 
 .. note::
 
diff --git a/ecosystem.rst b/ecosystem.rst
new file mode 100644
index 000000000..a64c88579
--- /dev/null
+++ b/ecosystem.rst
@@ -0,0 +1,102 @@
+.. _eco_external_notification:
+
+External Notification
+---------------------
+
+These are PostgreSQL bridges that propagate LISTEN/NOTIFY to external queues for further processing. This allows stored procedures to initiate actions outside the database such as sending emails.
+
+* `diogob/postgres-websockets <https://github.com/diogob/postgres-websockets>`_ - expose web sockets for PostgreSQL's LISTEN/NOTIFY
+* `frafra/postgresql2websocket <https://github.com/frafra/postgresql2websocket>`_ - Websockets
+* `matthewmueller/pg-bridge <https://github.com/matthewmueller/pg-bridge>`_ - Amazon SNS
+* `aweber/pgsql-listen-exchange <https://github.com/aweber/pgsql-listen-exchange>`_ - RabbitMQ
+* `SpiderOak/skeeter <https://github.com/SpiderOak/skeeter>`_ - ZeroMQ
+* `FGRibreau/postgresql-to-amqp <https://github.com/FGRibreau/postgresql-to-amqp>`_ - AMQP
+* `daurnimator/pg-kinesis-bridge <https://github.com/daurnimator/pg-kinesis-bridge>`_ - Amazon Kinesis
+
+.. _eco_example_apps:
+
+Example Apps
+------------
+
+* `tatut/postgrest-ui <https://github.com/tatut/postgrest-ui>`_ - ClojureScript UI components for PostgREST
+* `priyank-purohit/PostGUI <https://github.com/priyank-purohit/PostGUI>`_ - React Material UI admin panel
+* `Qu4tro/pgrst-dev-setup <https://github.com/Qu4tro/pgrst-dev-setup>`_ - docker-compose and tmuxp setup for experimentation.
+* `subzerocloud/postgrest-starter-kit <https://github.com/subzerocloud/postgrest-starter-kit>`_ - Boilerplate for new project
+* `NikolayS/postgrest-google-translate <https://github.com/NikolayS/postgrest-google-translate>`_ - Calling to external translation service
+* `CodeforAustralia/heritage-near-me <https://github.com/CodeforAustralia/heritage-near-me>`_ - Elm and PostgREST with PostGIS
+* `timwis/handsontable-postgrest <https://github.com/timwis/handsontable-postgrest>`_ - An excel-like database table editor
+* `Recmo/PostgrestSkeleton <https://github.com/Recmo/PostgrestSkeleton>`_ - Docker Compose, PostgREST, Nginx and Auth0
+* `benoror/ember-postgrest-dynamic-ui <https://github.com/benoror/ember-postgrest-dynamic-ui>`_ - generating Ember forms to edit data
+* `ruslantalpa/blogdemo <https://github.com/ruslantalpa/blogdemo>`_ - blog api demo in a vagrant image
+* `timwis/ext-postgrest-crud <https://github.com/timwis/ext-postgrest-crud>`_ - browser-based spreadsheet
+* `srid/chronicle <https://github.com/srid/chronicle>`_ - tracking a tree of personal memories
+* `diogob/elm-workshop <https://github.com/diogob/elm-workshop>`_ - building a simple database query UI
+* `myfreeweb/moneylog <https://github.com/myfreeweb/moneylog>`_ - accounting web app in Polymer + PostgREST
+* `tyrchen/goodfilm <https://github.com/tyrchen/goodfilm>`_ - example film api
+* `begriffs/postgrest-example <https://github.com/begriffs/postgrest-example>`_ - sqitch versioning for API
+* `SMRxT/postgrest-demo <https://github.com/SMRxT/postgrest-demo>`_ - multi-tenant logging system
+* `PierreRochard/postgrest-boilerplate <https://github.com/PierreRochard/postgrest-boilerplate>`_ - example auth back-end
+* `marmelab/ng-admin-postgrest <https://github.com/marmelab/ng-admin-postgrest>`_ - automatic database admin panel
+
+.. _eco_extensions:
+
+Extensions
+----------
+
+* `pg-safeupdate <https://bitbucket.org/eradman/pg-safeupdate/>`_ - Prevent full-table updates or deletes
+* `srid/spas <https://github.com/srid/spas>`_ - allow file uploads and basic auth
+* `svmnotn/postgrest-auth <https://github.com/svmnotn/postgrest-auth>`_ - OAuth2-inspired external auth server
+* `wildsurfer/postgrest-oauth-server <https://github.com/wildsurfer/postgrest-oauth-server>`_ - OAuth2 server
+* `nblumoe/postgrest-oauth <https://github.com/nblumoe/postgrest-oauth>`_ - OAuth2 WAI middleware
+* `criles25/postgrest-auth <https://github.com/criles25/postgrest-auth>`_ - email based auth/signup
+* `ppKrauss/PostgREST-writeAPI <https://github.com/ppKrauss/PostgREST-writeAPI>`_ - generate Nginx rewrite rules to fit an OpenAPI spec
+
+.. _clientside_libraries:
+
+Client-Side Libraries
+---------------------
+
+* `Kong/py-postgrest <https://github.com/Kong/py-postgrest>`_ - Python
+* `datrium/postgrest-pyclient <https://github.com/datrium/postgrest-pyclient>`_ - Python
+* `tomberek/aor-postgrest-client <https://github.com/tomberek/aor-postgrest-client>`_ - JS, admin-on-rest
+* `hugomrdias/postgrest-url <https://github.com/hugomrdias/postgrest-url>`_ - JS, just for generating query URLs
+* `john-kelly/elm-postgrest <https://github.com/john-kelly/elm-postgrest>`_ - Elm
+* `mithril.postgrest <https://github.com/catarse/mithril.postgrest>`_ - JS, Mithril
+* `lewisjared/postgrest-request <https://github.com/lewisjared/postgrest-request>`_ - JS, SuperAgent
+* `JarvusInnovations/jarvus-postgrest-apikit <https://github.com/JarvusInnovations/jarvus-postgrest-apikit>`_ - JS, Sencha framework
+* `davidthewatson/postgrest_python_requests_client <https://github.com/davidthewatson/postgrest_python_requests_client>`_ - Python
+* `calebmer/postgrest-client <https://github.com/calebmer/postgrest-client>`_ - JS
+* `clesiemo3/postgrestR <https://github.com/clesiemo3/postgrestR>`_ - R
+* `PierreRochard/postgrest-angular <https://github.com/PierreRochard/postgrest-angular>`_ - TypeScript, generate UI from API description
+* `thejettdurham/postgrest-sharp-client <https://github.com/thejettdurham/postgrest-sharp-client>`_ (needs maintainer) - C#, RestSharp
+* `team142/ng-postgrest <https://github.com/team142/ng-postgrest>`_ - Angular app for browsing, editing data exposed over Postgrest.
+
+.. _eco_commercial:
+
+Commercial
+---------------
+
+* `subZero <https://subzero.cloud/>`_ - Automated GraphQL & REST API with built-in caching (powered in part by PostgREST)
+
+.. _eco_production:
+
+In Production
+-------------
+
+* `Moat <https://moat.com/>`_
+* `Catarse <https://www.catarse.me/>`_
+* `Redsmin <https://www.redsmin.com/>`_
+* `Image-charts <https://image-charts.com/>`_
+* `MotionDynamic - Fast highly dynamic video generation at scale <https://api.motiondynamic.tech/>`_
+* `Drip Depot <https://www.dripdepot.com/>`_
+* `Convene <https://info.convene.thomsonreuters.com/en.html>`_ by Thomson-Reuters
+* `eGull <http://www.egull.co>`_
+* `Elyios <https://elyios.com>`_
+* `Simply Connected Systems <https://www.simplyconnectedsystems.com/>`_
+* `Nimbus <https://nimbusforwork.com/>`_
+
+  - See how Nimbus uses PostgREST in `Paul Copplestone's blog post <https://paul.copplest.one/blog/nimbus-tech-2019-04.html#products>`_.
+* `Datrium <https://www.datrium.com>`_
+
+.. * `OpenBooking <http://openbooking.ch>`_
+.. * `triggerFS - A realtime messaging and distributed trigger system <https://triggerfs.io/>`_
diff --git a/index.rst b/index.rst
index c126cddaf..f60cccf67 100644
--- a/index.rst
+++ b/index.rst
@@ -141,96 +141,18 @@ Ecosystem
 
 PostgREST has a growing ecosystem of examples, and libraries, experiments, and users. Here is a selection.
 
-Example Apps
-------------
+.. toctree::
+   :caption: Ecosystem
+   :hidden:
 
-* `subzerocloud/postgrest-starter-kit <https://github.com/subzerocloud/postgrest-starter-kit>`_ - Boilerplate for new project
-* `NikolayS/postgrest-google-translate <https://github.com/NikolayS/postgrest-google-translate>`_ - Calling to external translation service
-* `CodeforAustralia/heritage-near-me <https://github.com/CodeforAustralia/heritage-near-me>`_ - Elm and PostgREST with PostGIS
-* `timwis/handsontable-postgrest <https://github.com/timwis/handsontable-postgrest>`_ - An excel-like database table editor
-* `Recmo/PostgrestSkeleton <https://github.com/Recmo/PostgrestSkeleton>`_ - Docker Compose, PostgREST, Nginx and Auth0
-* `benoror/ember-postgrest-dynamic-ui <https://github.com/benoror/ember-postgrest-dynamic-ui>`_ - generating Ember forms to edit data
-* `ruslantalpa/blogdemo <https://github.com/ruslantalpa/blogdemo>`_ - blog api demo in a vagrant image
-* `timwis/ext-postgrest-crud <https://github.com/timwis/ext-postgrest-crud>`_ - browser-based spreadsheet
-* `srid/chronicle <https://github.com/srid/chronicle>`_ - tracking a tree of personal memories
-* `diogob/elm-workshop <https://github.com/diogob/elm-workshop>`_ - building a simple database query UI
-* `marmelab/ng-admin-postgrest <https://github.com/marmelab/ng-admin-postgrest>`_ - automatic database admin panel
-* `myfreeweb/moneylog <https://github.com/myfreeweb/moneylog>`_ - accounting web app in Polymer + PostgREST
-* `tyrchen/goodfilm <https://github.com/tyrchen/goodfilm>`_ - example film api
-* `begriffs/postgrest-example <https://github.com/begriffs/postgrest-example>`_ - sqitch versioning for API
-* `SMRxT/postgrest-demo <https://github.com/SMRxT/postgrest-demo>`_ - multi-tenant logging system
-* `PierreRochard/postgrest-boilerplate <https://github.com/PierreRochard/postgrest-boilerplate>`_ - example auth back-end
-
-
-.. _clientside_libraries:
-
-Client-Side Libraries
----------------------
-
-* `tomberek/aor-postgrest-client <https://github.com/tomberek/aor-postgrest-client>`_ - JS, admin-on-rest
-* `hugomrdias/postgrest-url <https://github.com/hugomrdias/postgrest-url>`_ - JS, just for generating query URLs
-* `john-kelly/elm-postgrest <https://github.com/john-kelly/elm-postgrest>`_ - Elm
-* `mithril.postgrest <https://github.com/catarse/mithril.postgrest>`_ - JS, Mithril
-* `lewisjared/postgrest-request <https://github.com/lewisjared/postgrest-request>`_ - JS, SuperAgent
-* `JarvusInnovations/jarvus-postgrest-apikit <https://github.com/JarvusInnovations/jarvus-postgrest-apikit>`_ - JS, Sencha framework
-* `davidthewatson/postgrest_python_requests_client <https://github.com/davidthewatson/postgrest_python_requests_client>`_ - Python
-* `datrium/postgrest-pyclient <https://github.com/datrium/postgrest-pyclient>`_ - Python
-* `calebmer/postgrest-client <https://github.com/calebmer/postgrest-client>`_ - JS
-* `clesiemo3/postgrestR <https://github.com/clesiemo3/postgrestR>`_ - R
-* `PierreRochard/postgrest-angular <https://github.com/PierreRochard/postgrest-angular>`_ - TypeScript, generate UI from API description
-* `thejettdurham/postgrest-sharp-client <https://github.com/thejettdurham/postgrest-sharp-client>`_ (needs maintainer) - C#, RestSharp
-* `team142/ng-postgrest <https://github.com/team142/ng-postgrest>`_ - Angular app for browsing, editing data exposed over Postgrest.
-
-External Notification
----------------------
-
-These are PostgreSQL bridges that propagate LISTEN/NOTIFY to external queues for further processing. This allows stored procedures to initiate actions outside the database such as sending emails.
-
-* `diogob/postgres-websockets <https://github.com/diogob/postgres-websockets>`_ - expose web sockets for PostgreSQL's LISTEN/NOTIFY
-* `frafra/postgresql2websocket <https://github.com/frafra/postgresql2websocket>`_ - Websockets
-* `matthewmueller/pg-bridge <https://github.com/matthewmueller/pg-bridge>`_ - Amazon SNS
-* `aweber/pgsql-listen-exchange <https://github.com/aweber/pgsql-listen-exchange>`_ - RabbitMQ
-* `SpiderOak/skeeter <https://github.com/SpiderOak/skeeter>`_ - ZeroMQ
-* `FGRibreau/postgresql-to-amqp <https://github.com/FGRibreau/postgresql-to-amqp>`_ - AMQP
-* `daurnimator/pg-kinesis-bridge <https://github.com/daurnimator/pg-kinesis-bridge>`_ - Amazon Kinesis
-
-Extensions
-----------
-
-* `pg-safeupdate <https://bitbucket.org/eradman/pg-safeupdate/>`_ - Prevent full-table updates or deletes
-* `srid/spas <https://github.com/srid/spas>`_ - allow file uploads and basic auth
-* `svmnotn/postgrest-auth <https://github.com/svmnotn/postgrest-auth>`_ - OAuth2-inspired external auth server
-* `wildsurfer/postgrest-oauth-server <https://github.com/wildsurfer/postgrest-oauth-server>`_ - OAuth2 server
-* `nblumoe/postgrest-oauth <https://github.com/nblumoe/postgrest-oauth>`_ - OAuth2 WAI middleware
-* `criles25/postgrest-auth <https://github.com/criles25/postgrest-auth>`_ - email based auth/signup
-* `ppKrauss/PostgREST-writeAPI <https://github.com/ppKrauss/PostgREST-writeAPI>`_ - generate Nginx rewrite rules to fit an OpenAPI spec
-
-Commercial
----------------
-
-* `subZero <https://subzero.cloud/>`_ - Automated GraphQL & REST API with built-in caching (powered in part by PostgREST)
-
-In Production
--------------
-
-* `Moat <https://moat.com/>`_
-* `Catarse <https://www.catarse.me/>`_
-* `Redsmin <https://www.redsmin.com/>`_
-* `Image-charts <https://image-charts.com/>`_
-* `MotionDynamic - Fast highly dynamic video generation at scale <https://api.motiondynamic.tech/>`_
-* `Drip Depot <https://www.dripdepot.com/>`_
-* `OpenBooking <http://openbooking.ch>`_
-* `Convene <https://info.convene.thomsonreuters.com/en.html>`_ by Thomson-Reuters
-* `eGull <http://www.egull.co>`_
-* `Elyios <https://elyios.com>`_
-* `Simply Connected Systems <https://www.simplyconnectedsystems.com/>`_
-* `Nimbus <https://nimbusforwork.com/>`_
-
-  - See how Nimbus uses PostgREST in `Paul Copplestone's blog post <https://paul.copplest.one/blog/nimbus-tech-2019-04.html#products>`_.
-
-* `triggerFS - A realtime messaging and distributed trigger system <https://triggerfs.io/>`_
-* `Datrium <https://www.datrium.com>`_
+   ecosystem.rst
 
+* :ref:`eco_external_notification`
+* :ref:`eco_example_apps`
+* :ref:`eco_extensions`
+* :ref:`clientside_libraries`
+* :ref:`eco_commercial`
+* :ref:`eco_production`
 
 Testimonials
 ------------

From 8271885bb2385612e993edc94997955911c5a05e Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Tue, 20 Aug 2019 14:42:22 -0500
Subject: [PATCH 265/652] Remove some elements of the index page

As mentioned in https://github.com/PostgREST/postgrest-docs/issues/249,
the embracing the relational model sectin would better fit in a
page about our REST style.

The shared improvements section no longer seems relevant since
we're already an established open source project.

Release notes are not removed but hidden from the index page.
---
 index.rst | 12 ++----------
 1 file changed, 2 insertions(+), 10 deletions(-)

diff --git a/index.rst b/index.rst
index f60cccf67..021c1bb5c 100644
--- a/index.rst
+++ b/index.rst
@@ -54,21 +54,11 @@ Leak-proof Abstraction
 
 There is no ORM involved. Creating new views happens in SQL with known performance implications. A database administrator can now create an API from scratch with no custom programming.
 
-Embracing the Relational Model
-------------------------------
-
-In 1970 E. F. Codd criticized the then-dominant hierarchical model of databases in his article A Relational Model of Data for Large Shared Data Banks. Reading the article reveals a striking similarity between hierarchical databases and nested http routes. With PostgREST we attempt to use flexible filtering and embedding rather than nested routes.
-
 One Thing Well
 --------------
 
 PostgREST has a focused scope. It works well with other tools like Nginx. This forces you to cleanly separate the data-centric CRUD operations from other concerns. Use a collection of sharp tools rather than building a big ball of mud.
 
-Shared Improvements
--------------------
-
-As with any open source project, we all gain from features and fixes in the tool. It's more beneficial than improvements locked inextricably within custom code-bases.
-
 Getting Support
 ----------------
 
@@ -95,6 +85,7 @@ Translations
 .. toctree::
    :caption: Release Notes
    :titlesonly:
+   :hidden:
 
    release_notes.rst
 
@@ -107,6 +98,7 @@ Translations
 
 .. toctree::
    :caption: How-to guides
+   :name: how-tos
    :titlesonly:
 
    how-tos/embedding-table-from-another-schema.rst

From 7805b99d573f7ae8532f0a28fcdfb3769d73a595 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Thu, 22 Aug 2019 15:06:37 -0500
Subject: [PATCH 266/652] Fix #213, reorganize index

---
 configuration.rst  | 210 +++++++++++++++++++++++++++++++++++++++++++++
 index.rst          |  88 ++++++++++++-------
 install.rst        | 209 +-------------------------------------------
 livereload_docs.py |   2 +
 4 files changed, 273 insertions(+), 236 deletions(-)
 create mode 100644 configuration.rst

diff --git a/configuration.rst b/configuration.rst
new file mode 100644
index 000000000..1bc197385
--- /dev/null
+++ b/configuration.rst
@@ -0,0 +1,210 @@
+.. _configuration:
+
+Configuration
+=============
+
+Here is the full list of configuration parameters.
+
+====================  ======  =========  ========
+Name                  Type    Default    Required
+====================  ======  =========  ========
+db-uri                String             Y
+db-schema             String             Y
+db-anon-role          String             Y
+db-pool               Int     10
+db-pool-timeout       Int     10
+db-extra-search-path  String  public
+server-host           String  127.0.0.1
+server-port           Int     3000
+server-unix-socket    String
+server-proxy-uri      String
+jwt-secret            String
+jwt-aud               String
+secret-is-base64      Bool    False
+max-rows              Int     ∞
+pre-request           String
+app.settings.*        String
+role-claim-key        String  .role
+raw-media-types       String
+====================  ======  =========  ========
+
+.. _db-uri:
+
+db-uri
+------
+
+  The standard connection PostgreSQL `URI format <https://www.postgresql.org/docs/current/static/libpq-connect.html#AEN45347>`_. Symbols and unusual characters in the password or other fields should be percent encoded to avoid a parse error. If enforcing an SSL connection to the database is required you can use `sslmode <https://www.postgresql.org/docs/9.1/static/libpq-ssl.html#LIBPQ-SSL-SSLMODE-STATEMENTS>`_ in the URI, for example ``postgres://user:pass@host:5432/dbname?sslmode=require``.
+
+  When running PostgREST on the same machine as PostgreSQL, it is also possible to connect to the database using a `Unix socket <https://en.wikipedia.org/wiki/Unix_domain_socket>`_ and the `Peer Authentication method <http://www.postgresql.org/docs/current/static/auth-methods.html#AUTH-PEER>`_ as an alternative to TCP/IP communication and authentication with a password, this also grants higher performance.  To do this you can omit the host and the password, e.g. ``postgres://user@/dbname``, see the `libpq connection string <https://www.postgresql.org/docs/10/static/libpq-connect.html#LIBPQ-CONNSTRING>`_ documentation for more details.
+
+  On older systems like Centos 6, with older versions of libpq, a different db-uri syntax has to be used. In this case the URI is a string of space separated key-value pairs (key=value), so the example above would be :code:`"host=host user=user port=5432 dbname=dbname password=pass"`.
+
+  Choosing a value for this parameter beginning with the at sign such as ``@filename`` (e.g. ``@./configs/my-config``) loads the secret out of an external file.
+
+.. _db-schema:
+
+db-schema
+---------
+
+  The database schema to expose to REST clients. Tables, views and stored procedures in this schema will get API endpoints.
+
+  This schema gets added to the `search_path <https://www.postgresql.org/docs/11/ddl-schemas.html#DDL-SCHEMAS-PATH>`_ of every request.
+
+.. _db-anon-role:
+
+db-anon-role
+------------
+
+  The database role to use when executing commands on behalf of unauthenticated clients.
+
+.. _db-pool:
+
+db-pool
+-------
+
+  Number of connections to keep open in PostgREST's database pool. Having enough here for the maximum expected simultaneous client connections can improve performance. Note it's pointless to set this higher than the :code:`max_connections` GUC in your database.
+
+db-pool-timeout
+---------------
+
+   Time to live for an idle database pool connection.
+
+.. _db-extra-search-path:
+
+db-extra-search-path
+--------------------
+
+  Extra schemas to add to the `search_path <https://www.postgresql.org/docs/11/ddl-schemas.html#DDL-SCHEMAS-PATH>`_ of every request. These schemas tables, views and stored procedures **don't get API endpoints**, they can only be referred from the database objects inside your :ref:`db-schema`.
+
+  This parameter was meant to make it easier to use **PostgreSQL extensions** (like PostGIS) that are outside of the :ref:`db-schema`.
+
+  Multiple schemas can be added in a comma-separated string, e.g. ``public, extensions``.
+
+.. _server-host:
+
+server-host
+-----------
+
+  Where to bind the PostgREST web server. In addition to the usual address options, PostgREST interprets these reserved addresses with special meanings:
+
+  * :code:`*` - any IPv4 or IPv6 hostname
+  * :code:`*4` - any IPv4 or IPv6 hostname, IPv4 preferred
+  * :code:`!4` - any IPv4 hostname
+  * :code:`*6` - any IPv4 or IPv6 hostname, IPv6 preferred
+  * :code:`!6` - any IPv6 hostname
+
+.. _server-port:
+
+server-port
+-----------
+
+  The TCP port to bind the web server.
+
+server-unix-socket
+------------------
+
+  `Unix domain socket <https://en.wikipedia.org/wiki/Unix_domain_socket>`_ where to bind the PostgREST web server.
+  If specified, this takes precedence over :ref:`server-port`. Example:
+
+  .. code:: bash
+
+    server-unix-socket = "/tmp/pgrst.sock"
+
+.. _server-proxy-uri:
+
+server-proxy-uri
+----------------
+
+  Overrides the base URL used within the OpenAPI self-documentation hosted at the API root path. Use a complete URI syntax :code:`scheme:[//[user:password@]host[:port]][/]path[?query][#fragment]`. Ex. :code:`https://postgrest.com`
+
+  .. code:: json
+
+    {
+      "swagger": "2.0",
+      "info": {
+        "version": "0.4.3.0",
+        "title": "PostgREST API",
+        "description": "This is a dynamic API generated by PostgREST"
+      },
+      "host": "postgrest.com:443",
+      "basePath": "/",
+      "schemes": [
+        "https"
+      ]
+    }
+
+.. _jwt-secret:
+
+jwt-secret
+----------
+
+  The secret or `JSON Web Key (JWK) (or set) <https://tools.ietf.org/html/rfc7517>`_ used to decode JWT tokens clients provide for authentication. For security the key must be **at least 32 characters long**. If this parameter is not specified then PostgREST refuses authentication requests. Choosing a value for this parameter beginning with the at sign such as :code:`@filename` loads the secret out of an external file. This is useful for automating deployments. Note that any binary secrets must be base64 encoded. Both symmetric and asymmetric cryptography are supported. For more info see :ref:`asym_keys`.
+
+.. _jwt-aud:
+
+jwt-aud
+-------
+
+  Specifies the `JWT audience claim <https://tools.ietf.org/html/rfc7519#section-4.1.3>`_. If this claim is present in the client provided JWT then you must set this to the same value as in the JWT, otherwise verifying the JWT will fail.
+
+.. _secret-is-base64:
+
+secret-is-base64
+----------------
+
+  When this is set to :code:`true`, the value derived from :code:`jwt-secret` will be treated as a base64 encoded secret.
+
+.. _max-rows:
+
+max-rows
+--------
+
+  A hard limit to the number of rows PostgREST will fetch from a view, table, or stored procedure. Limits payload size for accidental or malicious requests.
+
+.. _pre-request:
+
+pre-request
+-----------
+
+  A schema-qualified stored procedure name to call right after switching roles for a client request. This provides an opportunity to modify SQL variables or raise an exception to prevent the request from completing.
+
+.. _app.settings.*:
+
+app.settings.*
+--------------
+
+  Arbitrary settings that can be used to pass in secret keys directly as strings, or via OS environment variables. For instance: :code:`app.settings.jwt_secret = "$(MYAPP_JWT_SECRET)"` will take :code:`MYAPP_JWT_SECRET` from the environment and make it available to postgresql functions as :code:`current_setting('app.settings.jwt_secret')`.
+
+.. _role-claim-key:
+
+role-claim-key
+--------------
+
+  A JSPath DSL that specifies the location of the :code:`role` key in the JWT claims. This can be used to consume a JWT provided by a third party service like Auth0, Okta or Keycloak. Usage examples:
+
+  .. code:: bash
+
+    # {"postgrest":{"roles": ["other", "author"]}}
+    # the DSL accepts characters that are alphanumerical or one of "_$@" as keys
+    role-claim-key = ".postgrest.roles[1]"
+
+    # {"https://www.example.com/role": { "key": "author }}
+    # non-alphanumerical characters can go inside quotes(escaped in the config value)
+    role-claim-key = ".\"https://www.example.com/role\".key"
+
+.. _raw-media-types:
+
+raw-media-types
+---------------
+
+ This serves to extend the media types that PostgREST currently accepts through an ``Accept`` header.
+
+ These media types can be requested by following the same rules as the ones defined in :ref:`binary_output`.
+
+ As an example, the below config would allow you to request an **image** and an **xml** by doing a request with ``Accept: image/png`` 
+ and a request with ``Accept: text/xml``, respectively.
+
+ .. code:: bash
+
+   raw-media-types="image/png, text/xml"
+
diff --git a/index.rst b/index.rst
index 021c1bb5c..3d43f32b3 100644
--- a/index.rst
+++ b/index.rst
@@ -64,24 +64,6 @@ Getting Support
 
 The project has a friendly and growing community. Join our `chat room <https://gitter.im/begriffs/postgrest>`_ for discussion and help. You can also report or search for bugs/features on the Github `issues <https://github.com/begriffs/postgrest/issues>`_ page.
 
-.. _supporting-dev:
-
-Supporting development
-----------------------
-
-You can help PostgREST ongoing maintenance and development by:
-
-- Making a regular donation through `Patreon <https://www.patreon.com/postgrest>`_
-
-- Alternatively, you can make a one-time donation via `Paypal <https://www.paypal.me/postgrest>`_
-
-Every donation will be spent on making PostgREST better for the whole community.
-
-Translations
-~~~~~~~~~~~~
-
-* `Chinese <http://postgrest.org/zh/latest/>`_ (latest version ``v0.4.2.0``)
-
 .. toctree::
    :caption: Release Notes
    :titlesonly:
@@ -89,26 +71,40 @@ Translations
 
    release_notes.rst
 
+Tutorials
+---------
+
+Start here if you're new to PostgREST.
+
 .. toctree::
+   :glob:
    :caption: Tutorials
-   :titlesonly:
+   :hidden:
 
-   tutorials/tut0.rst
-   tutorials/tut1.rst
+   tutorials/*
+
+- :doc:`tutorials/tut0`
+- :doc:`tutorials/tut1`
+
+How-to guides
+-------------
+
+Goal-oriented guides that show how to solve a specific problem.
 
 .. toctree::
+   :glob:
    :caption: How-to guides
-   :name: how-tos
-   :titlesonly:
+   :hidden:
 
-   how-tos/embedding-table-from-another-schema.rst
-   how-tos/casting-type-to-custom-json.rst
+   how-tos/*
 
-.. toctree::
-   :caption: Installation
-   :titlesonly:
+- :doc:`how-tos/embedding-table-from-another-schema`
+- :doc:`how-tos/casting-type-to-custom-json`
 
-   install.rst
+Reference guides
+----------------
+
+Technical references for PostgREST's API and Configuration.
 
 .. toctree::
    :caption: API
@@ -116,12 +112,28 @@ Translations
 
    api.rst
 
+.. toctree::
+   :caption: Configuration
+
+   configuration.rst
+
+Topic guides
+------------
+
+Explanations of some key concepts in PostgREST.
+
 .. toctree::
    :caption: Authentication
    :titlesonly:
 
    auth.rst
 
+.. toctree::
+   :caption: Installation
+   :titlesonly:
+
+   install.rst
+
 .. toctree::
    :caption: Administration
    :titlesonly:
@@ -146,6 +158,24 @@ PostgREST has a growing ecosystem of examples, and libraries, experiments, and u
 * :ref:`eco_commercial`
 * :ref:`eco_production`
 
+.. _supporting-dev:
+
+Supporting development
+----------------------
+
+You can help PostgREST ongoing maintenance and development by:
+
+- Making a regular donation through `Patreon <https://www.patreon.com/postgrest>`_
+
+- Alternatively, you can make a one-time donation via `Paypal <https://www.paypal.me/postgrest>`_
+
+Every donation will be spent on making PostgREST better for the whole community.
+
+Translations
+------------
+
+* `Chinese <http://postgrest.org/zh/latest/>`_ (latest version ``v0.4.2.0``)
+
 Testimonials
 ------------
 
diff --git a/install.rst b/install.rst
index 0c71f25ed..5c1a0777a 100644
--- a/install.rst
+++ b/install.rst
@@ -36,8 +36,6 @@ To use PostgREST you will need an underlying database (PostgreSQL version 9.5 or
 
 On Windows, PostgREST will fail to run unless the PostgreSQL binaries are on the system path. To test whether this is the case, run ``pg_config`` from the command line. You should see it output a list of paths.
 
-.. _configuration:
-
 Configuration
 =============
 
@@ -47,7 +45,7 @@ The PostgREST server reads a configuration file to determine information about t
 
   ./postgrest /path/to/postgrest.conf
 
-The file must contain a set of key value pairs. At minimum you must include these keys:
+The configuration file must contain a set of key value pairs. At minimum you must include these keys:
 
 .. code::
 
@@ -66,210 +64,7 @@ The file must contain a set of key value pairs. At minimum you must include thes
 
 The user specified in the db-uri is also known as the authenticator role. For more information about the anonymous vs authenticator roles see the :ref:`roles`.
 
-Here is the full list of configuration parameters.
-
-====================  ======  =========  ========
-Name                  Type    Default    Required
-====================  ======  =========  ========
-db-uri                String             Y
-db-schema             String             Y
-db-anon-role          String             Y
-db-pool               Int     10
-db-pool-timeout       Int     10
-db-extra-search-path  String  public
-server-host           String  127.0.0.1
-server-port           Int     3000
-server-unix-socket    String
-server-proxy-uri      String
-jwt-secret            String
-jwt-aud               String
-secret-is-base64      Bool    False
-max-rows              Int     ∞
-pre-request           String
-app.settings.*        String
-role-claim-key        String  .role
-raw-media-types       String
-====================  ======  =========  ========
-
-.. _db-uri:
-
-db-uri
-------
-
-  The standard connection PostgreSQL `URI format <https://www.postgresql.org/docs/current/static/libpq-connect.html#AEN45347>`_. Symbols and unusual characters in the password or other fields should be percent encoded to avoid a parse error. If enforcing an SSL connection to the database is required you can use `sslmode <https://www.postgresql.org/docs/9.1/static/libpq-ssl.html#LIBPQ-SSL-SSLMODE-STATEMENTS>`_ in the URI, for example ``postgres://user:pass@host:5432/dbname?sslmode=require``.
-
-  When running PostgREST on the same machine as PostgreSQL, it is also possible to connect to the database using a `Unix socket <https://en.wikipedia.org/wiki/Unix_domain_socket>`_ and the `Peer Authentication method <http://www.postgresql.org/docs/current/static/auth-methods.html#AUTH-PEER>`_ as an alternative to TCP/IP communication and authentication with a password, this also grants higher performance.  To do this you can omit the host and the password, e.g. ``postgres://user@/dbname``, see the `libpq connection string <https://www.postgresql.org/docs/10/static/libpq-connect.html#LIBPQ-CONNSTRING>`_ documentation for more details.
-
-  On older systems like Centos 6, with older versions of libpq, a different db-uri syntax has to be used. In this case the URI is a string of space separated key-value pairs (key=value), so the example above would be :code:`"host=host user=user port=5432 dbname=dbname password=pass"`.
-
-  Choosing a value for this parameter beginning with the at sign such as ``@filename`` (e.g. ``@./configs/my-config``) loads the secret out of an external file.
-
-.. _db-schema:
-
-db-schema
----------
-
-  The database schema to expose to REST clients. Tables, views and stored procedures in this schema will get API endpoints.
-
-  This schema gets added to the `search_path <https://www.postgresql.org/docs/11/ddl-schemas.html#DDL-SCHEMAS-PATH>`_ of every request.
-
-.. _db-anon-role:
-
-db-anon-role
-------------
-
-  The database role to use when executing commands on behalf of unauthenticated clients.
-
-.. _db-pool:
-
-db-pool
--------
-
-  Number of connections to keep open in PostgREST's database pool. Having enough here for the maximum expected simultaneous client connections can improve performance. Note it's pointless to set this higher than the :code:`max_connections` GUC in your database.
-
-db-pool-timeout
----------------
-
-   Time to live for an idle database pool connection.
-
-.. _db-extra-search-path:
-
-db-extra-search-path
---------------------
-
-  Extra schemas to add to the `search_path <https://www.postgresql.org/docs/11/ddl-schemas.html#DDL-SCHEMAS-PATH>`_ of every request. These schemas tables, views and stored procedures **don't get API endpoints**, they can only be referred from the database objects inside your :ref:`db-schema`.
-
-  This parameter was meant to make it easier to use **PostgreSQL extensions** (like PostGIS) that are outside of the :ref:`db-schema`.
-
-  Multiple schemas can be added in a comma-separated string, e.g. ``public, extensions``.
-
-.. _server-host:
-
-server-host
------------
-
-  Where to bind the PostgREST web server. In addition to the usual address options, PostgREST interprets these reserved addresses with special meanings:
-
-  * :code:`*` - any IPv4 or IPv6 hostname
-  * :code:`*4` - any IPv4 or IPv6 hostname, IPv4 preferred
-  * :code:`!4` - any IPv4 hostname
-  * :code:`*6` - any IPv4 or IPv6 hostname, IPv6 preferred
-  * :code:`!6` - any IPv6 hostname
-
-.. _server-port:
-
-server-port
------------
-
-  The TCP port to bind the web server.
-
-server-unix-socket
-------------------
-
-  `Unix domain socket <https://en.wikipedia.org/wiki/Unix_domain_socket>`_ where to bind the PostgREST web server.
-  If specified, this takes precedence over :ref:`server-port`. Example:
-
-  .. code:: bash
-
-    server-unix-socket = "/tmp/pgrst.sock"
-
-.. _server-proxy-uri:
-
-server-proxy-uri
-----------------
-
-  Overrides the base URL used within the OpenAPI self-documentation hosted at the API root path. Use a complete URI syntax :code:`scheme:[//[user:password@]host[:port]][/]path[?query][#fragment]`. Ex. :code:`https://postgrest.com`
-
-  .. code:: json
-
-    {
-      "swagger": "2.0",
-      "info": {
-        "version": "0.4.3.0",
-        "title": "PostgREST API",
-        "description": "This is a dynamic API generated by PostgREST"
-      },
-      "host": "postgrest.com:443",
-      "basePath": "/",
-      "schemes": [
-        "https"
-      ]
-    }
-
-.. _jwt-secret:
-
-jwt-secret
-----------
-
-  The secret or `JSON Web Key (JWK) (or set) <https://tools.ietf.org/html/rfc7517>`_ used to decode JWT tokens clients provide for authentication. For security the key must be **at least 32 characters long**. If this parameter is not specified then PostgREST refuses authentication requests. Choosing a value for this parameter beginning with the at sign such as :code:`@filename` loads the secret out of an external file. This is useful for automating deployments. Note that any binary secrets must be base64 encoded. Both symmetric and asymmetric cryptography are supported. For more info see :ref:`asym_keys`.
-
-.. _jwt-aud:
-
-jwt-aud
--------
-
-  Specifies the `JWT audience claim <https://tools.ietf.org/html/rfc7519#section-4.1.3>`_. If this claim is present in the client provided JWT then you must set this to the same value as in the JWT, otherwise verifying the JWT will fail.
-
-.. _secret-is-base64:
-
-secret-is-base64
-----------------
-
-  When this is set to :code:`true`, the value derived from :code:`jwt-secret` will be treated as a base64 encoded secret.
-
-.. _max-rows:
-
-max-rows
---------
-
-  A hard limit to the number of rows PostgREST will fetch from a view, table, or stored procedure. Limits payload size for accidental or malicious requests.
-
-.. _pre-request:
-
-pre-request
------------
-
-  A schema-qualified stored procedure name to call right after switching roles for a client request. This provides an opportunity to modify SQL variables or raise an exception to prevent the request from completing.
-
-.. _app.settings.*:
-
-app.settings.*
---------------
-
-  Arbitrary settings that can be used to pass in secret keys directly as strings, or via OS environment variables. For instance: :code:`app.settings.jwt_secret = "$(MYAPP_JWT_SECRET)"` will take :code:`MYAPP_JWT_SECRET` from the environment and make it available to postgresql functions as :code:`current_setting('app.settings.jwt_secret')`.
-
-.. _role-claim-key:
-
-role-claim-key
---------------
-
-  A JSPath DSL that specifies the location of the :code:`role` key in the JWT claims. This can be used to consume a JWT provided by a third party service like Auth0, Okta or Keycloak. Usage examples:
-
-  .. code:: bash
-
-    # {"postgrest":{"roles": ["other", "author"]}}
-    # the DSL accepts characters that are alphanumerical or one of "_$@" as keys
-    role-claim-key = ".postgrest.roles[1]"
-
-    # {"https://www.example.com/role": { "key": "author }}
-    # non-alphanumerical characters can go inside quotes(escaped in the config value)
-    role-claim-key = ".\"https://www.example.com/role\".key"
-
-.. _raw-media-types:
-
-raw-media-types
----------------
-
- This serves to extend the media types that PostgREST currently accepts through an ``Accept`` header.
-
- These media types can be requested by following the same rules as the ones defined in :ref:`binary_output`.
-
- As an example, the below config would allow you to request an **image** and an **xml** by doing a request with ``Accept: image/png`` 
- and a request with ``Accept: text/xml``, respectively.
-
- .. code:: bash
-
-   raw-media-types="image/png, text/xml"
+For a complete reference of the configuration parameters, see :ref:`configuration`.
 
 Running the Server
 ==================
diff --git a/livereload_docs.py b/livereload_docs.py
index d4d0ba6e8..befcaa35e 100755
--- a/livereload_docs.py
+++ b/livereload_docs.py
@@ -7,4 +7,6 @@ server = Server()
 server.watch('*.rst', shell('sphinx-build -b html -a -n . _build'))
 server.watch('tutorials/*.rst', shell('sphinx-build -b html -a -n . _build'))
 server.watch('how-tos/*.rst', shell('sphinx-build -b html -a -n . _build'))
+# For custom port and host
+# server.serve(port=8080, host='192.168.1.2')
 server.serve(root='_build/')

From 5942db7fa75a367551aa423e5d9bcb8d169670d6 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Fri, 23 Aug 2019 13:30:26 -0500
Subject: [PATCH 267/652] Collapse index sections and improve the wording

---
 ecosystem.rst     | 54 ++++++++++++--------------------------
 index.rst         | 66 ++++++++++++++++++++++++++++++-----------------
 release_notes.rst | 32 -----------------------
 3 files changed, 58 insertions(+), 94 deletions(-)

diff --git a/ecosystem.rst b/ecosystem.rst
index a64c88579..1ffc96e37 100644
--- a/ecosystem.rst
+++ b/ecosystem.rst
@@ -1,18 +1,3 @@
-.. _eco_external_notification:
-
-External Notification
----------------------
-
-These are PostgreSQL bridges that propagate LISTEN/NOTIFY to external queues for further processing. This allows stored procedures to initiate actions outside the database such as sending emails.
-
-* `diogob/postgres-websockets <https://github.com/diogob/postgres-websockets>`_ - expose web sockets for PostgreSQL's LISTEN/NOTIFY
-* `frafra/postgresql2websocket <https://github.com/frafra/postgresql2websocket>`_ - Websockets
-* `matthewmueller/pg-bridge <https://github.com/matthewmueller/pg-bridge>`_ - Amazon SNS
-* `aweber/pgsql-listen-exchange <https://github.com/aweber/pgsql-listen-exchange>`_ - RabbitMQ
-* `SpiderOak/skeeter <https://github.com/SpiderOak/skeeter>`_ - ZeroMQ
-* `FGRibreau/postgresql-to-amqp <https://github.com/FGRibreau/postgresql-to-amqp>`_ - AMQP
-* `daurnimator/pg-kinesis-bridge <https://github.com/daurnimator/pg-kinesis-bridge>`_ - Amazon Kinesis
-
 .. _eco_example_apps:
 
 Example Apps
@@ -38,6 +23,22 @@ Example Apps
 * `PierreRochard/postgrest-boilerplate <https://github.com/PierreRochard/postgrest-boilerplate>`_ - example auth back-end
 * `marmelab/ng-admin-postgrest <https://github.com/marmelab/ng-admin-postgrest>`_ - automatic database admin panel
 
+.. _eco_external_notification:
+
+External Notification
+---------------------
+
+These are PostgreSQL bridges that propagate LISTEN/NOTIFY to external queues for further processing. This allows stored procedures to initiate actions outside the database such as sending emails.
+
+* `diogob/postgres-websockets <https://github.com/diogob/postgres-websockets>`_ - expose web sockets for PostgreSQL's LISTEN/NOTIFY
+* `frafra/postgresql2websocket <https://github.com/frafra/postgresql2websocket>`_ - Websockets
+* `matthewmueller/pg-bridge <https://github.com/matthewmueller/pg-bridge>`_ - Amazon SNS
+* `aweber/pgsql-listen-exchange <https://github.com/aweber/pgsql-listen-exchange>`_ - RabbitMQ
+* `SpiderOak/skeeter <https://github.com/SpiderOak/skeeter>`_ - ZeroMQ
+* `FGRibreau/postgresql-to-amqp <https://github.com/FGRibreau/postgresql-to-amqp>`_ - AMQP
+* `daurnimator/pg-kinesis-bridge <https://github.com/daurnimator/pg-kinesis-bridge>`_ - Amazon Kinesis
+
+
 .. _eco_extensions:
 
 Extensions
@@ -77,26 +78,3 @@ Commercial
 ---------------
 
 * `subZero <https://subzero.cloud/>`_ - Automated GraphQL & REST API with built-in caching (powered in part by PostgREST)
-
-.. _eco_production:
-
-In Production
--------------
-
-* `Moat <https://moat.com/>`_
-* `Catarse <https://www.catarse.me/>`_
-* `Redsmin <https://www.redsmin.com/>`_
-* `Image-charts <https://image-charts.com/>`_
-* `MotionDynamic - Fast highly dynamic video generation at scale <https://api.motiondynamic.tech/>`_
-* `Drip Depot <https://www.dripdepot.com/>`_
-* `Convene <https://info.convene.thomsonreuters.com/en.html>`_ by Thomson-Reuters
-* `eGull <http://www.egull.co>`_
-* `Elyios <https://elyios.com>`_
-* `Simply Connected Systems <https://www.simplyconnectedsystems.com/>`_
-* `Nimbus <https://nimbusforwork.com/>`_
-
-  - See how Nimbus uses PostgREST in `Paul Copplestone's blog post <https://paul.copplest.one/blog/nimbus-tech-2019-04.html#products>`_.
-* `Datrium <https://www.datrium.com>`_
-
-.. * `OpenBooking <http://openbooking.ch>`_
-.. * `triggerFS - A realtime messaging and distributed trigger system <https://triggerfs.io/>`_
diff --git a/index.rst b/index.rst
index 3d43f32b3..3b49b816f 100644
--- a/index.rst
+++ b/index.rst
@@ -74,7 +74,7 @@ The project has a friendly and growing community. Join our `chat room <https://g
 Tutorials
 ---------
 
-Start here if you're new to PostgREST.
+Are you new to PostgREST? This is the place to start!
 
 .. toctree::
    :glob:
@@ -86,10 +86,12 @@ Start here if you're new to PostgREST.
 - :doc:`tutorials/tut0`
 - :doc:`tutorials/tut1`
 
+Also have a look at :doc:`Installation <install>`.
+
 How-to guides
 -------------
 
-Goal-oriented guides that show how to solve a specific problem.
+These are recipes that'll help you address specific use-cases.
 
 .. toctree::
    :glob:
@@ -104,19 +106,23 @@ Goal-oriented guides that show how to solve a specific problem.
 Reference guides
 ----------------
 
-Technical references for PostgREST's API and Configuration.
+Technical references for PostgREST's functionality.
 
 .. toctree::
    :caption: API
-   :titlesonly:
+   :hidden:
 
    api.rst
 
 .. toctree::
    :caption: Configuration
+   :hidden:
 
    configuration.rst
 
+- :doc:`API <api>`
+- :doc:`configuration`
+
 Topic guides
 ------------
 
@@ -124,26 +130,30 @@ Explanations of some key concepts in PostgREST.
 
 .. toctree::
    :caption: Authentication
-   :titlesonly:
+   :hidden:
 
    auth.rst
 
 .. toctree::
    :caption: Installation
-   :titlesonly:
+   :hidden:
 
    install.rst
 
 .. toctree::
    :caption: Administration
-   :titlesonly:
+   :hidden:
 
    admin.rst
 
+- :doc:`Authentication <auth>`
+- :doc:`Installation <install>`
+- :doc:`Administration <admin>`
+
 Ecosystem
 ---------
 
-PostgREST has a growing ecosystem of examples, and libraries, experiments, and users. Here is a selection.
+PostgREST has a growing ecosystem of examples, libraries, and experiments. Here is a selection.
 
 .. toctree::
    :caption: Ecosystem
@@ -151,30 +161,33 @@ PostgREST has a growing ecosystem of examples, and libraries, experiments, and u
 
    ecosystem.rst
 
-* :ref:`eco_external_notification`
 * :ref:`eco_example_apps`
+* :ref:`eco_external_notification`
 * :ref:`eco_extensions`
 * :ref:`clientside_libraries`
 * :ref:`eco_commercial`
-* :ref:`eco_production`
 
-.. _supporting-dev:
+In Production
+-------------
 
-Supporting development
-----------------------
+Here are some companies that use PostgREST in production.
 
-You can help PostgREST ongoing maintenance and development by:
+* `Datrium <https://www.datrium.com>`_
+* `Nimbus <https://nimbusforwork.com/>`_
+  - See how Nimbus uses PostgREST in `Paul Copplestone's blog post <https://paul.copplest.one/blog/nimbus-tech-2019-04.html#products>`_.
+* `Catarse <https://www.catarse.me/>`_
+* `Moat <https://moat.com/>`_
+* `Redsmin <https://www.redsmin.com/>`_
+* `Image-charts <https://image-charts.com/>`_
+* `MotionDynamic - Fast highly dynamic video generation at scale <https://api.motiondynamic.tech/>`_
+* `Drip Depot <https://www.dripdepot.com/>`_
+* `Convene <https://info.convene.thomsonreuters.com/en.html>`_ by Thomson-Reuters
+* `eGull <http://www.egull.co>`_
+* `Elyios <https://elyios.com>`_
+* `Simply Connected Systems <https://www.simplyconnectedsystems.com/>`_
 
-- Making a regular donation through `Patreon <https://www.patreon.com/postgrest>`_
-
-- Alternatively, you can make a one-time donation via `Paypal <https://www.paypal.me/postgrest>`_
-
-Every donation will be spent on making PostgREST better for the whole community.
-
-Translations
-------------
-
-* `Chinese <http://postgrest.org/zh/latest/>`_ (latest version ``v0.4.2.0``)
+.. * `OpenBooking <http://openbooking.ch>`_
+.. * `triggerFS - A realtime messaging and distributed trigger system <https://triggerfs.io/>`_
 
 Testimonials
 ------------
@@ -215,3 +228,8 @@ Testimonials
   Couldn't be happier."
 
   -- Anupam Garg, Datrium, Inc.
+
+Translations
+------------
+
+* `Chinese <http://postgrest.org/zh/latest/>`_ (latest version ``v0.4.2.0``)
diff --git a/release_notes.rst b/release_notes.rst
index c4aa0b7c2..e69de29bb 100644
--- a/release_notes.rst
+++ b/release_notes.rst
@@ -1,32 +0,0 @@
-Release Notes
-=============
-
-Here we'll include the most relevant changes so you can migrate to newer versions easily.
-You can see the full changelog of each release in the `PostgREST repository <https://github.com/PostgREST/postgrest/releases>`_.
-
-v5.2.0
-======
-
-* `Explicit qualification <http://postgrest.org/en/v5.0/api.html#explicit-qualification>`_ introduced in ``v5.0`` is no longer necessary, this section will not be included from this version onwards.  A :ref:`db-extra-search-path` configuration parameter was introduced to avoid the need to explictly qualify database objects. If you install PostgreSQL extensions on the ``public`` schema, they'll work normally from now on.
-
-* Now you can filter :ref:`tabs-cols-w-spaces`.
-
-* Included the ability to quote columns that have :ref:`reserved-chars`.
-
-* Thanks to `Zhou Feng <https://github.com/zhoufeng1989>`_, now is possible to reference an external file in :ref:`db-uri`.
-
-* Thanks to `Russell Davies <https://github.com/russelldavies>`_, Json Web Key Sets are now accepted by :ref:`jwt-secret`.
-
-Thanks
-------
-
-This release was made possible thanks to:
-
-* `Daniel Babiak <https://github.com/d-babiak>`_
-* `Michel Pelletier <https://github.com/michelp>`_
-* Tsingson Qin
-* Jay Hannah
-* Victor Adossi
-* Petr Beles
-
-If you like to join them please consider :ref:`supporting PostgREST development <supporting-dev>`.

From b9c9aee645c055c8fbbe6aeaa3ad1cb21cbbe1f6 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Fri, 23 Aug 2019 14:23:58 -0500
Subject: [PATCH 268/652] Reorder configuration section

---
 configuration.rst | 34 ++++++++++++++++++++++++++++++----
 install.rst       | 23 ++---------------------
 2 files changed, 32 insertions(+), 25 deletions(-)

diff --git a/configuration.rst b/configuration.rst
index 1bc197385..f44019b1e 100644
--- a/configuration.rst
+++ b/configuration.rst
@@ -3,6 +3,31 @@
 Configuration
 =============
 
+PostgREST reads a configuration file to determine information about the database and how to serve client requests. There is no predefined location for this file, you must specify the file path as the one and only argument to the server:
+
+.. code:: bash
+
+  ./postgrest /path/to/postgrest.conf
+
+The configuration file must contain a set of key value pairs. At minimum you must include these keys:
+
+.. code::
+
+  # postgrest.conf
+
+  # The standard connection URI format, documented at
+  # https://www.postgresql.org/docs/current/static/libpq-connect.html#AEN45347
+  db-uri       = "postgres://user:pass@host:5432/dbname"
+
+  # The name of which database schema to expose to REST clients
+  db-schema    = "api"
+
+  # The database role to use when no client authentication is provided.
+  # Can (and should) differ from user in db-uri
+  db-anon-role = "anon"
+
+The user specified in the db-uri is also known as the authenticator role. For more information about the anonymous vs authenticator roles see the :ref:`roles`.
+
 Here is the full list of configuration parameters.
 
 ====================  ======  =========  ========
@@ -14,7 +39,7 @@ db-anon-role          String             Y
 db-pool               Int     10
 db-pool-timeout       Int     10
 db-extra-search-path  String  public
-server-host           String  127.0.0.1
+server-host           String  !4
 server-port           Int     3000
 server-unix-socket    String
 server-proxy-uri      String
@@ -41,6 +66,7 @@ db-uri
 
   Choosing a value for this parameter beginning with the at sign such as ``@filename`` (e.g. ``@./configs/my-config``) loads the secret out of an external file.
 
+
 .. _db-schema:
 
 db-schema
@@ -55,7 +81,7 @@ db-schema
 db-anon-role
 ------------
 
-  The database role to use when executing commands on behalf of unauthenticated clients.
+  The database role to use when executing commands on behalf of unauthenticated clients. For more information, see :ref:`roles`.
 
 .. _db-pool:
 
@@ -197,11 +223,11 @@ role-claim-key
 raw-media-types
 ---------------
 
- This serves to extend the media types that PostgREST currently accepts through an ``Accept`` header.
+ This serves to extend the `Media Types <https://en.wikipedia.org/wiki/Media_type>`_ that PostgREST currently accepts through an ``Accept`` header.
 
  These media types can be requested by following the same rules as the ones defined in :ref:`binary_output`.
 
- As an example, the below config would allow you to request an **image** and an **xml** by doing a request with ``Accept: image/png`` 
+ As an example, the below config would allow you to request an **image** and an **xml** by doing a request with ``Accept: image/png``
  and a request with ``Accept: text/xml``, respectively.
 
  .. code:: bash
diff --git a/install.rst b/install.rst
index 5c1a0777a..fc3f278cd 100644
--- a/install.rst
+++ b/install.rst
@@ -39,32 +39,13 @@ On Windows, PostgREST will fail to run unless the PostgreSQL binaries are on the
 Configuration
 =============
 
-The PostgREST server reads a configuration file to determine information about the database and how to serve client requests. There is no predefined location for this file, you must specify the file path as the one and only argument to the server:
+The PostgREST server reads a configuration file as its only argument:
 
 .. code:: bash
 
   ./postgrest /path/to/postgrest.conf
 
-The configuration file must contain a set of key value pairs. At minimum you must include these keys:
-
-.. code::
-
-  # postgrest.conf
-
-  # The standard connection URI format, documented at
-  # https://www.postgresql.org/docs/current/static/libpq-connect.html#AEN45347
-  db-uri       = "postgres://user:pass@host:5432/dbname"
-
-  # The name of which database schema to expose to REST clients
-  db-schema    = "api"
-
-  # The database role to use when no client authentication is provided.
-  # Can (and probably should) differ from user in db-uri
-  db-anon-role = "anon"
-
-The user specified in the db-uri is also known as the authenticator role. For more information about the anonymous vs authenticator roles see the :ref:`roles`.
-
-For a complete reference of the configuration parameters, see :ref:`configuration`.
+For a complete reference of the configuration file, see :ref:`configuration`.
 
 Running the Server
 ==================

From 0d4b1d8f925d71fdf727374d9065ea3413a12cc1 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Mon, 26 Aug 2019 07:44:00 -0500
Subject: [PATCH 269/652] Add release notes for v6.0.2

Also add relase notes section at index.
---
 _static/css/custom.css | 20 +++++++++++
 api.rst                |  6 ++++
 configuration.rst      |  7 +++-
 index.rst              | 45 +++++++++++++++---------
 livereload_docs.py     |  5 +--
 release_notes.rst      |  0
 releases/v5.2.0.rst    | 26 ++++++++++++++
 releases/v6.0.2.rst    | 79 ++++++++++++++++++++++++++++++++++++++++++
 8 files changed, 169 insertions(+), 19 deletions(-)
 delete mode 100644 release_notes.rst
 create mode 100644 releases/v5.2.0.rst
 create mode 100644 releases/v6.0.2.rst

diff --git a/_static/css/custom.css b/_static/css/custom.css
index 555afaa1c..50359ce05 100644
--- a/_static/css/custom.css
+++ b/_static/css/custom.css
@@ -21,3 +21,23 @@ div.line-block {
 #sponsors img{
   margin: 10px;
 }
+
+#thanks{
+  text-align: center;
+}
+
+#thanks img{
+  margin: 10px;
+}
+
+#thanks h2{
+  text-align: left;
+}
+
+#thanks p{
+  text-align: left;
+}
+
+#thanks ul{
+  text-align: left;
+}
diff --git a/api.rst b/api.rst
index 5e7271de5..97f3cf8b7 100644
--- a/api.rst
+++ b/api.rst
@@ -45,6 +45,8 @@ Complex logic can also be applied:
 
   GET /people?and=(grade.gte.90,student.is.true,or(age.gte.14,age.is.null)) HTTP/1.1
 
+.. _operators:
+
 Operators
 ~~~~~~~~~
 
@@ -773,6 +775,8 @@ PostgREST will detect if the function is scalar or table-valued and will shape t
     { "title": "Blade Runner 2049", "rating": 8.1}
   ]
 
+.. _bulk_call:
+
 Bulk Call
 ---------
 
@@ -1147,6 +1151,8 @@ If the stored procedure returns non-scalar values, you need to do a :code:`selec
 
   If more than one row would be returned the binary results will be concatenated with no delimiter.
 
+.. _plain_text_output:
+
 Plain Text Output
 -----------------
 
diff --git a/configuration.rst b/configuration.rst
index f44019b1e..d44096de4 100644
--- a/configuration.rst
+++ b/configuration.rst
@@ -90,10 +90,13 @@ db-pool
 
   Number of connections to keep open in PostgREST's database pool. Having enough here for the maximum expected simultaneous client connections can improve performance. Note it's pointless to set this higher than the :code:`max_connections` GUC in your database.
 
+.. _db-pool-timeout:
+
 db-pool-timeout
 ---------------
 
-   Time to live for an idle database pool connection.
+   Time to live for an idle database pool connection. If the timeout is reached the connection will be closed.
+   Once a new request arrives a new connection will be started.
 
 .. _db-extra-search-path:
 
@@ -126,6 +129,8 @@ server-port
 
   The TCP port to bind the web server.
 
+.. _server-unix-socket:
+
 server-unix-socket
 ------------------
 
diff --git a/index.rst b/index.rst
index 3b49b816f..41b8be7aa 100644
--- a/index.rst
+++ b/index.rst
@@ -65,11 +65,13 @@ Getting Support
 The project has a friendly and growing community. Join our `chat room <https://gitter.im/begriffs/postgrest>`_ for discussion and help. You can also report or search for bugs/features on the Github `issues <https://github.com/begriffs/postgrest/issues>`_ page.
 
 .. toctree::
+   :glob:
+   :reversed:
    :caption: Release Notes
    :titlesonly:
    :hidden:
 
-   release_notes.rst
+   releases/*
 
 Tutorials
 ---------
@@ -88,21 +90,6 @@ Are you new to PostgREST? This is the place to start!
 
 Also have a look at :doc:`Installation <install>`.
 
-How-to guides
--------------
-
-These are recipes that'll help you address specific use-cases.
-
-.. toctree::
-   :glob:
-   :caption: How-to guides
-   :hidden:
-
-   how-tos/*
-
-- :doc:`how-tos/embedding-table-from-another-schema`
-- :doc:`how-tos/casting-type-to-custom-json`
-
 Reference guides
 ----------------
 
@@ -123,6 +110,23 @@ Technical references for PostgREST's functionality.
 - :doc:`API <api>`
 - :doc:`configuration`
 
+.. _how_tos:
+
+How-to guides
+-------------
+
+These are recipes that'll help you address specific use-cases.
+
+.. toctree::
+   :glob:
+   :caption: How-to guides
+   :hidden:
+
+   how-tos/*
+
+- :doc:`how-tos/embedding-table-from-another-schema`
+- :doc:`how-tos/casting-type-to-custom-json`
+
 Topic guides
 ------------
 
@@ -167,6 +171,15 @@ PostgREST has a growing ecosystem of examples, libraries, and experiments. Here
 * :ref:`clientside_libraries`
 * :ref:`eco_commercial`
 
+Release Notes
+-------------
+
+Here we'll include the most relevant changes so you can migrate to newer versions easily.
+You can see the full changelog of each release in the `PostgREST repository <https://github.com/PostgREST/postgrest/releases>`_.
+
+- :doc:`releases/v6.0.2`
+- :doc:`releases/v5.2.0`
+
 In Production
 -------------
 
diff --git a/livereload_docs.py b/livereload_docs.py
index befcaa35e..03910bd6a 100755
--- a/livereload_docs.py
+++ b/livereload_docs.py
@@ -7,6 +7,7 @@ server = Server()
 server.watch('*.rst', shell('sphinx-build -b html -a -n . _build'))
 server.watch('tutorials/*.rst', shell('sphinx-build -b html -a -n . _build'))
 server.watch('how-tos/*.rst', shell('sphinx-build -b html -a -n . _build'))
+server.watch('releases/*.rst', shell('sphinx-build -b html -a -n . _build'))
 # For custom port and host
-# server.serve(port=8080, host='192.168.1.2')
-server.serve(root='_build/')
+server.serve(root='_build/', host='192.168.1.2')
+# server.serve(root='_build/')
diff --git a/release_notes.rst b/release_notes.rst
deleted file mode 100644
index e69de29bb..000000000
diff --git a/releases/v5.2.0.rst b/releases/v5.2.0.rst
new file mode 100644
index 000000000..43bc18833
--- /dev/null
+++ b/releases/v5.2.0.rst
@@ -0,0 +1,26 @@
+v5.2.0
+======
+
+* `Explicit qualification <http://postgrest.org/en/v5.0/api.html#explicit-qualification>`_ introduced in ``v5.0`` is no longer necessary, this section will not be included from this version onwards.  A :ref:`db-extra-search-path` configuration parameter was introduced to avoid the need to explictly qualify database objects. If you install PostgreSQL extensions on the ``public`` schema, they'll work normally from now on.
+
+* Now you can filter :ref:`tabs-cols-w-spaces`.
+
+* Included the ability to quote columns that have :ref:`reserved-chars`.
+
+* Thanks to `Zhou Feng <https://github.com/zhoufeng1989>`_, now is possible to reference an external file in :ref:`db-uri`.
+
+* Thanks to `Russell Davies <https://github.com/russelldavies>`_, Json Web Key Sets are now accepted by :ref:`jwt-secret`.
+
+Thanks
+------
+
+This release was made possible thanks to:
+
+* `Daniel Babiak <https://github.com/d-babiak>`_
+* `Michel Pelletier <https://github.com/michelp>`_
+* Tsingson Qin
+* Jay Hannah
+* Victor Adossi
+* Petr Beles
+
+If you like to join them please consider `supporting PostgREST development <https://github.com/PostgREST/postgrest#supporting-development>`_.
diff --git a/releases/v6.0.2.rst b/releases/v6.0.2.rst
new file mode 100644
index 000000000..774ac61bb
--- /dev/null
+++ b/releases/v6.0.2.rst
@@ -0,0 +1,79 @@
+.. |br| raw:: html
+
+   <br />
+
+v6.0.2
+======
+
+Full changelog is available at `PostgREST releases page <https://github.com/PostgREST/postgrest/releases>`_.
+
+Added
+-----
+
+* Ignoring payload keys for insert/update can be now done with the ``?columns`` query parameter. See :ref:`specify_columns`.
+  |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
+
+* `websearch_to_tsquery <https://www.postgresql.org/docs/11/functions-textsearch.html#id-1.5.8.18.8.2.2.7.1.1>`_ can now be used
+  through the ``wfts`` operator. See :ref:`fts`.
+  |br| -- `@herulume <https://github.com/herulume>`_
+
+* Resource Embedding on materialized views is now possible. See :ref:`embedding_views`.
+  |br| -- `@vitorbaptista <https://github.com/vitorbaptista>`_
+
+* Bulk calling an RPC is now allowed. See :ref:`bulk_call`.
+  |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
+
+* It's now possible to request a ``text/plain`` output. See :ref:`plain_text_output`.
+  |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
+
+* Config option for specifying PostgREST database pool timeout. See :ref:`db-pool-timeout`.
+  |br| -- `@Qu4tro <https://github.com/Qu4tro>`_
+
+* Config option for binding the PostgREST web server to an unix socket. See :ref:`server-unix-socket`.
+  |br| -- `@Dansvidania <https://github.com/Dansvidania>`_
+
+* Config option for extending the supported media types. See :ref:`raw-media-types`.
+  |br| -- `@Dansvidania <https://github.com/Dansvidania>`_
+
+* We now offer an statically linked binary for Linux. Look for **postgrest-<version>-linux-x64-static.tar.xz** on the
+  `releases page <https://github.com/PostgREST/postgrest/releases>`_.
+  |br| -- `@clojurians-org <https://github.com/clojurians-org>`_
+
+* A :ref:`how_tos` section was added to the documentation.
+
+Changed
+-------
+
+* ``SIGHUP`` support was removed. You should use ``SIGUSR1`` instead. See :ref:`schema_reloading`.
+
+* server-host default of ``127.0.0.1`` was changed to ``!4``. See :ref:`server-host`.
+
+Thanks
+------
+
+This release was sponsored by:
+
+.. image:: ../_static/cybertec.png
+  :target: https://www.cybertec-postgresql.com/en/
+  :width:  13em
+
+.. image:: ../_static/2ndquadrant.png
+  :target: https://www.2ndquadrant.com/en/?utm_campaign=External%20Websites&utm_source=PostgREST&utm_medium=Logo
+  :width:  13em
+
+.. image:: ../_static/retool.png
+  :target: https://tryretool.com/?utm_source=sponsor&utm_campaign=postgrest
+  :width:  13em
+
+* Daniel Babiak
+* Evans Fernandes
+* Tsingson Qin
+* Michel Pelletier
+* Jay Hannah
+* Robert Stolarz
+* Kofi Gumbs
+* Nicholas DiBiase
+* Christopher Reid
+* Nathan Bouscal
+
+If you like to join them please consider `supporting PostgREST development <https://github.com/PostgREST/postgrest#supporting-development>`_.

From 7dd37c0bc4a00c942190a9c5ddc29bc29567d6d7 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Steve=20Ch=C3=A1vez?= <stevechavezast@gmail.com>
Date: Mon, 26 Aug 2019 12:02:42 -0500
Subject: [PATCH 270/652] Update index.rst

---
 index.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/index.rst b/index.rst
index 41b8be7aa..5be91d9d4 100644
--- a/index.rst
+++ b/index.rst
@@ -124,8 +124,8 @@ These are recipes that'll help you address specific use-cases.
 
    how-tos/*
 
-- :doc:`how-tos/embedding-table-from-another-schema`
 - :doc:`how-tos/casting-type-to-custom-json`
+- :doc:`how-tos/embedding-table-from-another-schema`
 
 Topic guides
 ------------

From e81ab0d0bb62168d950695520e1894c6ea52ac6a Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Mon, 26 Aug 2019 13:34:58 -0500
Subject: [PATCH 271/652] Fix #246, add CONTRIBUTING.md

Also add structure section on README.md
---
 CONTRIBUTING.md | 3 +++
 README.md       | 5 +++++
 2 files changed, 8 insertions(+)
 create mode 100644 CONTRIBUTING.md

diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
new file mode 100644
index 000000000..20fdb43db
--- /dev/null
+++ b/CONTRIBUTING.md
@@ -0,0 +1,3 @@
+This repository follows the same contribution guidelines as the main PostgREST repository contribution guidelines:
+
+https://github.com/PostgREST/postgrest/blob/master/.github/CONTRIBUTING.md
diff --git a/README.md b/README.md
index f60577cdc..e8a06defb 100644
--- a/README.md
+++ b/README.md
@@ -17,6 +17,11 @@ Or if you use [nix](https://nixos.org/nix/), you can just run:
 
 Both of these options will build the docs and start a livereload server on `http://localhost:5500`.
 
+## Documentation structure
+
+This documentation is structured according to tutorials-howtos-topics-references. For more details on the rationale of this structure, 
+see https://www.divio.com/blog/documentation.
+
 ## Translations
 
 Translations are maintained in separate repositories forked from this one. Once you finish translating in your fork you can upload the project

From 126236c3d03d7c4916e44897e1cc346b2f9b57fd Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Steve=20Ch=C3=A1vez?= <stevechavezast@gmail.com>
Date: Mon, 26 Aug 2019 13:52:26 -0500
Subject: [PATCH 272/652] Update v6.0.2.rst

---
 releases/v6.0.2.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/releases/v6.0.2.rst b/releases/v6.0.2.rst
index 774ac61bb..19176d5b2 100644
--- a/releases/v6.0.2.rst
+++ b/releases/v6.0.2.rst
@@ -51,7 +51,7 @@ Changed
 Thanks
 ------
 
-This release was sponsored by:
+This release is sponsored by:
 
 .. image:: ../_static/cybertec.png
   :target: https://www.cybertec-postgresql.com/en/

From bc6e181d03ce39bd5dfcd99b63781cfadba0d129 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Steve=20Ch=C3=A1vez?= <stevechavezast@gmail.com>
Date: Wed, 11 Sep 2019 12:05:51 -0500
Subject: [PATCH 273/652] Add params=multiple-objects to api reference (#253)

---
 api.rst | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/api.rst b/api.rst
index 97f3cf8b7..42fa40a7f 100644
--- a/api.rst
+++ b/api.rst
@@ -602,7 +602,7 @@ It's also possible to embed `Materialized Views <https://www.postgresql.org/docs
 
 .. warning::
 
-   Is not guaranteed that all kinds of views will be embeddable. In particular, views that contain
+   It's not guaranteed that all kinds of views will be embeddable. In particular, views that contain
    UNIONs will not be made embeddable.
 
    Why? PostgREST detects source table foreign keys in the view by querying and parsing `pg_rewrite <https://www.postgresql.org/docs/11/catalog-pg-rewrite.html>`_.
@@ -780,12 +780,14 @@ PostgREST will detect if the function is scalar or table-valued and will shape t
 Bulk Call
 ---------
 
-It's possible to call a function in a bulk way, analoguosly to :ref:`bulk_insert`.
+It's possible to call a function in a bulk way, analoguosly to :ref:`bulk_insert`. To do this, you need to add the
+``Prefer: params=multiple-objects`` header to your request.
 
 .. code-block:: http
 
    POST /rpc/add_them HTTP/1.1
    Content-Type: application/json
+   Prefer: params=multiple-objects
 
    [
       {"a": 1, "b": 2},

From 1a18ef5a2016a101c87143a88b0da6721750b783 Mon Sep 17 00:00:00 2001
From: Reuben Thomas-Davis <reubenestd@gmail.com>
Date: Sun, 15 Sep 2019 21:24:17 +0100
Subject: [PATCH 274/652] add server proxy uri env var for smoother swagger-ui 
 use with docker-compose

---
 install.rst | 1 +
 1 file changed, 1 insertion(+)

diff --git a/install.rst b/install.rst
index fc3f278cd..685d28235 100644
--- a/install.rst
+++ b/install.rst
@@ -134,6 +134,7 @@ To avoid having to install the database at all, you can run both it and the serv
         PGRST_DB_URI: postgres://app_user:password@db:5432/app_db
         PGRST_DB_SCHEMA: public
         PGRST_DB_ANON_ROLE: app_user #In production this role should not be the same as the one used for the connection
+        PGRST_SERVER_PROXY_URI: "http://127.0.0.1:3000"
       depends_on:
         - db
     db:

From 2186a7e1a84525b118de956a1fc333fa5075d05a Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Tue, 17 Sep 2019 17:52:10 -0500
Subject: [PATCH 275/652] Add upcoming release page

* Add HEAD support mention
* Add change for bulk call
---
 api.rst               |  2 +-
 releases/upcoming.rst | 19 +++++++++++++++++++
 2 files changed, 20 insertions(+), 1 deletion(-)
 create mode 100644 releases/upcoming.rst

diff --git a/api.rst b/api.rst
index 42fa40a7f..1880dc9fc 100644
--- a/api.rst
+++ b/api.rst
@@ -10,7 +10,7 @@ All views and tables in the exposed schema and accessible by the active database
 
   GET /people HTTP/1.1
 
-There are no deeply/nested/routes. Each route provides OPTIONS, GET, POST, PATCH, and DELETE verbs depending entirely on database permissions.
+There are no deeply/nested/routes. Each route provides OPTIONS, GET, HEAD, POST, PATCH, and DELETE verbs depending entirely on database permissions.
 
 .. note::
 
diff --git a/releases/upcoming.rst b/releases/upcoming.rst
new file mode 100644
index 000000000..836a2c78c
--- /dev/null
+++ b/releases/upcoming.rst
@@ -0,0 +1,19 @@
+.. |br| raw:: html
+
+   <br />
+
+Upcoming
+========
+
+These are changes yet unreleased. If you'd like to try them out before a new official release, you can :ref:`build_source`.
+
+Added
+-----
+
+* Support for HTTP HEAD requests.
+  |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
+
+Changed
+-------
+
+* :ref:`bulk_call` should now be done by specifying a ``Prefer: params=multiple-objects`` header.

From 476af62326f1828a0f6e8084caf3dcc1adfcc166 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Wed, 18 Sep 2019 12:40:52 -0500
Subject: [PATCH 276/652] Add planned count reference

---
 admin.rst             |  6 +-----
 api.rst               | 30 ++++++++++++++++++++++++++++--
 releases/upcoming.rst |  3 +++
 3 files changed, 32 insertions(+), 7 deletions(-)

diff --git a/admin.rst b/admin.rst
index 363851656..9d4841c8d 100644
--- a/admin.rst
+++ b/admin.rst
@@ -32,7 +32,7 @@ The first step is to create an Nginx configuration file that proxies requests to
 
 .. note::
 
-  For ubuntu, if you already installed nginx through :code:`apt` you can add this to the config file in 
+  For ubuntu, if you already installed nginx through :code:`apt` you can add this to the config file in
   :code:`/etc/nginx/sites-enabled/default`.
 
 .. _block_fulltable:
@@ -88,10 +88,6 @@ This is fine in small tables, but count performance degrades in big tables due t
 
   -- Pending nginx config: Remove any prefer header which contains the word count
 
-.. note::
-
-  In future versions we will support :code:`Prefer: count=estimated` to leverage the PostgreSQL statistics tables for a fast (and fairly accurate) result.
-
 .. _hardening_https:
 
 HTTPS
diff --git a/api.rst b/api.rst
index 1880dc9fc..9284d3eed 100644
--- a/api.rst
+++ b/api.rst
@@ -371,12 +371,16 @@ The other way to request a limit or offset is with query parameters. For example
 
 This method is also useful for embedded resources, which we will cover in another section. The server always responds with range headers even if you use query parameters to limit the query.
 
-In order to obtain the total size of the table or view (such as when rendering the last page link in a pagination control), specify your preference in a request header:
+.. _exact_count:
 
+Exact Count
+~~~~~~~~~~~
+
+In order to obtain the total size of the table or view (such as when rendering the last page link in a pagination control), specify ``Prefer: count=exact`` as a request header:
 
 .. code-block:: http
 
-  GET /bigtable HTTP/1.1
+  HEAD /bigtable HTTP/1.1
   Range-Unit: items
   Range: 0-24
   Prefer: count=exact
@@ -389,6 +393,28 @@ Note that the larger the table the slower this query runs in the database. The s
   Range-Unit: items
   Content-Range: 0-24/3573458
 
+.. _planned_count:
+
+Planned Count
+~~~~~~~~~~~~~
+
+To avoid the shortcomings of :ref:`exact count <exact_count>`, PostgREST can leverage PostgreSQL statistics and get a fairly accurate and fast count.
+To do this, specify the ``Prefer: count=planned`` header.
+
+.. code-block:: http
+
+  HEAD /bigtable?limit=25 HTTP/1.1
+  Prefer: count=planned
+
+.. code-block:: http
+
+  HTTP/1.1 206 Partial Content
+  Content-Range: 0-24/3572000
+
+Note that the accuracy of this count depends how up-to-date are the PostgreSQL statistics tables.
+For example in this case, to increase the accuracy of the count you can do ``ANALYZE bigtable``.
+See `ANALYZE <https://www.postgresql.org/docs/11/sql-analyze.html>`_ for more details.
+
 .. _res_format:
 
 Response Format
diff --git a/releases/upcoming.rst b/releases/upcoming.rst
index 836a2c78c..8096b97ea 100644
--- a/releases/upcoming.rst
+++ b/releases/upcoming.rst
@@ -13,6 +13,9 @@ Added
 * Support for HTTP HEAD requests.
   |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
 
+* Support for :ref:`planned_count`.
+  |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
+
 Changed
 -------
 

From 5ef1db42efd962f674ebc68832b9f8f5256d3ddd Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Wed, 18 Sep 2019 14:15:38 -0500
Subject: [PATCH 277/652] Add estimated count reference

---
 api.rst               | 40 +++++++++++++++++++++++++++++++++++++++-
 releases/upcoming.rst |  2 +-
 2 files changed, 40 insertions(+), 2 deletions(-)

diff --git a/api.rst b/api.rst
index 9284d3eed..7dba6729e 100644
--- a/api.rst
+++ b/api.rst
@@ -411,10 +411,48 @@ To do this, specify the ``Prefer: count=planned`` header.
   HTTP/1.1 206 Partial Content
   Content-Range: 0-24/3572000
 
-Note that the accuracy of this count depends how up-to-date are the PostgreSQL statistics tables.
+Note that the accuracy of this count depends on how up-to-date are the PostgreSQL statistics tables.
 For example in this case, to increase the accuracy of the count you can do ``ANALYZE bigtable``.
 See `ANALYZE <https://www.postgresql.org/docs/11/sql-analyze.html>`_ for more details.
 
+.. _estimated_count:
+
+Estimated Count
+~~~~~~~~~~~~~~~
+
+When you are interested in the count, the relative error is important. If you have an estimated count of 1000000 and the exact count is
+1001000, the error is small enough to be ignored. But with an estimated count of 7, an exact count of 28 would be a huge misprediction.
+
+In general, when having smaller row-counts, the estimated count should be as close to the exact count as possible.
+
+To help with these cases, PostgREST can get the exact count up until a threshold and get the estimated count when
+that threshold is surpassed. To use this behavior, you can specify the ``Prefer: count=estimated`` header. The **threshold** is
+defined by :ref:`max-rows`.
+
+Here's an example. Suppose we set ``max-rows=1000`` and *smalltable* has 321 rows, then we'll get the exact count:
+
+.. code-block:: http
+
+  HEAD /smalltable?limit=25 HTTP/1.1
+  Prefer: count=estimated
+
+.. code-block:: http
+
+  HTTP/1.1 206 Partial Content
+  Content-Range: 0-24/321
+
+If we make a similar request on *bigtable*, which has 3573458 rows, we would get the estimated count:
+
+.. code-block:: http
+
+  HEAD /bigtable?limit=25 HTTP/1.1
+  Prefer: count=estimated
+
+.. code-block:: http
+
+  HTTP/1.1 206 Partial Content
+  Content-Range: 0-24/3572000
+
 .. _res_format:
 
 Response Format
diff --git a/releases/upcoming.rst b/releases/upcoming.rst
index 8096b97ea..886c4449b 100644
--- a/releases/upcoming.rst
+++ b/releases/upcoming.rst
@@ -13,7 +13,7 @@ Added
 * Support for HTTP HEAD requests.
   |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
 
-* Support for :ref:`planned_count`.
+* Support for :ref:`planned_count` and :ref:`estimated_count`.
   |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
 
 Changed

From 4f1f80d4f2e94aca4db268146edc4e212c5fb641 Mon Sep 17 00:00:00 2001
From: Lorenz Henk <lorenz.henk@cybertec.at>
Date: Thu, 19 Sep 2019 09:38:45 +0200
Subject: [PATCH 278/652] Replace estimated with planned

The names changed according to https://github.com/PostgREST/postgrest/issues/1378#issuecomment-531506803
---
 api.rst | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/api.rst b/api.rst
index 7dba6729e..19a7d8518 100644
--- a/api.rst
+++ b/api.rst
@@ -420,12 +420,12 @@ See `ANALYZE <https://www.postgresql.org/docs/11/sql-analyze.html>`_ for more de
 Estimated Count
 ~~~~~~~~~~~~~~~
 
-When you are interested in the count, the relative error is important. If you have an estimated count of 1000000 and the exact count is
-1001000, the error is small enough to be ignored. But with an estimated count of 7, an exact count of 28 would be a huge misprediction.
+When you are interested in the count, the relative error is important. If you have a :ref:`planned count <planned_count>` of 1000000 and the exact count is
+1001000, the error is small enough to be ignored. But with a planned count of 7, an exact count of 28 would be a huge misprediction.
 
 In general, when having smaller row-counts, the estimated count should be as close to the exact count as possible.
 
-To help with these cases, PostgREST can get the exact count up until a threshold and get the estimated count when
+To help with these cases, PostgREST can get the exact count up until a threshold and get the planned count when
 that threshold is surpassed. To use this behavior, you can specify the ``Prefer: count=estimated`` header. The **threshold** is
 defined by :ref:`max-rows`.
 
@@ -441,7 +441,7 @@ Here's an example. Suppose we set ``max-rows=1000`` and *smalltable* has 321 row
   HTTP/1.1 206 Partial Content
   Content-Range: 0-24/321
 
-If we make a similar request on *bigtable*, which has 3573458 rows, we would get the estimated count:
+If we make a similar request on *bigtable*, which has 3573458 rows, we would get the planned count:
 
 .. code-block:: http
 

From 6afed0b30dcf7254cf3288cce41d96705bbecdc9 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Sat, 28 Sep 2019 15:40:31 -0500
Subject: [PATCH 279/652] Add reference for stored proc embedding

---
 api.rst               | 32 ++++++++++++++++++++++++++++++++
 releases/upcoming.rst |  2 ++
 2 files changed, 34 insertions(+)

diff --git a/api.rst b/api.rst
index 19a7d8518..71948cc59 100644
--- a/api.rst
+++ b/api.rst
@@ -681,6 +681,38 @@ It's also possible to embed `Materialized Views <https://www.postgresql.org/docs
 
   If view definitions change you must refresh PostgREST's schema cache for this to work properly. See the section :ref:`schema_reloading`.
 
+.. _s_proc_embed:
+
+Embedding on Stored Procedures
+------------------------------
+
+If you have a :ref:`Stored Procedure <s_procs>` that returns a table type, you can embed its related tables.
+
+Here's a sample function(notice the ``RETURNS SETOF films``).
+
+.. code-block:: plpgsql
+
+  CREATE FUNCTION getallfilms() RETURNS SETOF films AS $$
+    SELECT * FROM films;
+  $$ LANGUAGE SQL IMMUTABLE;
+
+A request with ``directors`` embedded:
+
+.. code-block:: http
+
+   GET /rpc/getallfilms?select=title,directors(id,last_name)&title=like.*Workers* HTTP/1.1
+
+.. code-block:: json
+
+   [
+     { "title": "Workers Leaving The Lumière Factory In Lyon",
+       "directors": {
+         "id": 2,
+         "last_name": "Lumière"
+       }
+     }
+   ]
+
 .. _custom_queries:
 
 Custom Queries
diff --git a/releases/upcoming.rst b/releases/upcoming.rst
index 886c4449b..3085f0a92 100644
--- a/releases/upcoming.rst
+++ b/releases/upcoming.rst
@@ -16,6 +16,8 @@ Added
 * Support for :ref:`planned_count` and :ref:`estimated_count`.
   |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
 
+* Documentation reference for :ref:`s_proc_embed`.
+
 Changed
 -------
 

From 3325a1bbc6375bf2c2a57fa88b6fcd0a23112c0c Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Sat, 28 Sep 2019 20:08:21 -0500
Subject: [PATCH 280/652] Add reference for mutation embed

---
 api.rst               | 39 ++++++++++++++++++++++++++++++++++++++-
 releases/upcoming.rst |  4 +++-
 2 files changed, 41 insertions(+), 2 deletions(-)

diff --git a/api.rst b/api.rst
index 71948cc59..ca5187cb5 100644
--- a/api.rst
+++ b/api.rst
@@ -686,7 +686,7 @@ It's also possible to embed `Materialized Views <https://www.postgresql.org/docs
 Embedding on Stored Procedures
 ------------------------------
 
-If you have a :ref:`Stored Procedure <s_procs>` that returns a table type, you can embed its related tables.
+If you have a :ref:`Stored Procedure <s_procs>` that returns a table type, you can embed its related resources.
 
 Here's a sample function(notice the ``RETURNS SETOF films``).
 
@@ -713,6 +713,39 @@ A request with ``directors`` embedded:
      }
    ]
 
+.. _mutation_embed:
+
+Embedding after Insertions/Updates/Deletions
+--------------------------------------------
+
+You can embed related resources after doing :ref:`insert_update` or :ref:`delete`.
+
+Say you want to insert a **film** and then get some of its attributes plus embed its **director**.
+
+.. code-block:: http
+
+   POST /films?select=title,year,director:directors(first_name,last_name) HTTP/1.1
+   Prefer: return=representation
+
+   {
+    "id": 100, "director_id": 40,
+    "title": "127 hours", "year": 2010,
+    "rating": 7.6, "language": "english"
+   }
+
+Response:
+
+.. code-block:: json
+
+   {
+    "title": "127 hours",
+    "year": 2010,
+    "director": {
+      "first_name": "Danny",
+      "last_name": "Boyle"
+    }
+   }
+
 .. _custom_queries:
 
 Custom Queries
@@ -1040,6 +1073,8 @@ Returns:
 
   {"hint":"Upgrade your plan","details":"Quota exceeded"}
 
+.. _insert_update:
+
 Insertions / Updates
 ====================
 
@@ -1196,6 +1231,8 @@ All the columns must be specified in the request body, including the primary key
 
   This feature is only available starting from PostgreSQL 9.5 since it uses the `ON CONFLICT clause <https://www.postgresql.org/docs/9.5/static/sql-insert.html#SQL-ON-CONFLICT>`_.
 
+.. _delete:
+
 Deletions
 =========
 
diff --git a/releases/upcoming.rst b/releases/upcoming.rst
index 3085f0a92..72293b8fa 100644
--- a/releases/upcoming.rst
+++ b/releases/upcoming.rst
@@ -16,7 +16,9 @@ Added
 * Support for :ref:`planned_count` and :ref:`estimated_count`.
   |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
 
-* Documentation reference for :ref:`s_proc_embed`.
+* Reference for :ref:`s_proc_embed`.
+
+* Reference for :ref:`mutation_embed`.
 
 Changed
 -------

From 22b6ff764dd985a02b031988832bbc6d6a9d2c57 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Steve=20Ch=C3=A1vez?= <stevechavezast@gmail.com>
Date: Fri, 18 Oct 2019 11:03:32 -0500
Subject: [PATCH 281/652] Credit howtos/tuts authors (#264)

---
 how-tos/casting-type-to-custom-json.rst         | 4 +++-
 how-tos/embedding-table-from-another-schema.rst | 2 ++
 tutorials/tut0.rst                              | 2 ++
 tutorials/tut1.rst                              | 2 ++
 4 files changed, 9 insertions(+), 1 deletion(-)

diff --git a/how-tos/casting-type-to-custom-json.rst b/how-tos/casting-type-to-custom-json.rst
index f9d13afa7..b2b25128d 100644
--- a/how-tos/casting-type-to-custom-json.rst
+++ b/how-tos/casting-type-to-custom-json.rst
@@ -1,6 +1,8 @@
 Casting a type to a custom JSON object
 ======================================
 
+:author: `steve-chavez <https://github.com/steve-chavez>`_
+
 While using PostgREST you might have noticed that certain PostgreSQL types translate to JSON strings when you would
 have expected a JSON object or array. For example, let's see the case of `range types <https://www.postgresql.org/docs/11/rangetypes.html>`_.
 
@@ -82,7 +84,7 @@ You can use the same idea for creating custom CASTs for different types.
 
 .. note::
 
-   If you don't want to modify CASTs for built-in types, an option would be to `create a custom type <https://www.postgresql.org/docs/current/sql-createtype.html>`_ 
+   If you don't want to modify CASTs for built-in types, an option would be to `create a custom type <https://www.postgresql.org/docs/current/sql-createtype.html>`_
    for your own ``tsrange`` and add its own CAST.
 
    .. code-block:: postgres
diff --git a/how-tos/embedding-table-from-another-schema.rst b/how-tos/embedding-table-from-another-schema.rst
index 60265dd40..118d630d1 100644
--- a/how-tos/embedding-table-from-another-schema.rst
+++ b/how-tos/embedding-table-from-another-schema.rst
@@ -1,6 +1,8 @@
 Embedding a table from another schema
 =====================================
 
+:author: `steve-chavez <https://github.com/steve-chavez>`_
+
 Suppose you have a **people** table in the ``public`` schema and this schema is exposed through PostgREST's :ref:`db-schema`.
 
 .. code-block:: postgres
diff --git a/tutorials/tut0.rst b/tutorials/tut0.rst
index e061b4761..038b92f6f 100644
--- a/tutorials/tut0.rst
+++ b/tutorials/tut0.rst
@@ -3,6 +3,8 @@
 Tutorial 0 - Get it Running
 ===========================
 
+:author: `begriffs <https://github.com/begriffs>`_
+
 Welcome to PostgREST! In this pre-tutorial we're going to get things running so you can create your first simple API.
 
 PostgREST is a standalone web server which turns a PostgreSQL database into a RESTful API. It serves an API that is customized based on the structure of the underlying database.
diff --git a/tutorials/tut1.rst b/tutorials/tut1.rst
index 71c288d11..e9fe78f54 100644
--- a/tutorials/tut1.rst
+++ b/tutorials/tut1.rst
@@ -3,6 +3,8 @@
 Tutorial 1 - The Golden Key
 ===========================
 
+:author: `begriffs <https://github.com/begriffs>`_
+
 In :ref:`tut0` we created a read-only API with a single endpoint to list todos. There are many directions we can go to make this API more interesting, but one good place to start would be allowing some users to change data in addition to reading it.
 
 Step 1. Add a Trusted User

From 2fc0e2f8cbae385cb0148677665521ba28500bcf Mon Sep 17 00:00:00 2001
From: Fedor Ortyanov <fortyanov@gmail.com>
Date: Tue, 22 Oct 2019 11:13:51 +0300
Subject: [PATCH 282/652] fix api.rst other status from 500 to 400

---
 api.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/api.rst b/api.rst
index ca5187cb5..871d1a6f4 100644
--- a/api.rst
+++ b/api.rst
@@ -1403,5 +1403,5 @@ PostgREST translates `PostgreSQL error codes <https://www.postgresql.org/docs/cu
 | 42501                    | | if authenticated 403, | insufficient privileges         |
 |                          | | else 401              |                                 |
 +--------------------------+-------------------------+---------------------------------+
-| other                    | 500                     |                                 |
+| other                    | 400                     |                                 |
 +--------------------------+-------------------------+---------------------------------+

From dbbba4e51a9b631f6282eab795da94ba53661bfb Mon Sep 17 00:00:00 2001
From: Evan Silberman <silby@uw.edu>
Date: Thu, 14 Nov 2019 10:57:23 -0800
Subject: [PATCH 283/652] Specify units for the pool timeout setting

---
 configuration.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/configuration.rst b/configuration.rst
index d44096de4..267ed24a1 100644
--- a/configuration.rst
+++ b/configuration.rst
@@ -95,7 +95,7 @@ db-pool
 db-pool-timeout
 ---------------
 
-   Time to live for an idle database pool connection. If the timeout is reached the connection will be closed.
+   Time to live, in seconds, for an idle database pool connection. If the timeout is reached the connection will be closed.
    Once a new request arrives a new connection will be started.
 
 .. _db-extra-search-path:

From a0179cfd4b7052633d4c9f322bef09c034203626 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Mon, 18 Nov 2019 15:47:11 -0500
Subject: [PATCH 284/652] Remove keepalive nginx recommendation

---
 admin.rst | 1 -
 1 file changed, 1 deletion(-)

diff --git a/admin.rst b/admin.rst
index 9d4841c8d..8334fd02b 100644
--- a/admin.rst
+++ b/admin.rst
@@ -12,7 +12,6 @@ The first step is to create an Nginx configuration file that proxies requests to
     # upstream configuration
     upstream postgrest {
       server localhost:3000;
-      keepalive 64;
     }
     # ...
     server {

From e1c9b8fe768167c7fb281a095ff46240b0a657ce Mon Sep 17 00:00:00 2001
From: Danilo Amoroso <dan.j.amoroso@gmail.com>
Date: Mon, 25 Nov 2019 12:55:57 +0100
Subject: [PATCH 285/652] added documentation for server-unix-socket-mode
 config option

---
 configuration.rst | 58 +++++++++++++++++++++++++++++------------------
 1 file changed, 36 insertions(+), 22 deletions(-)

diff --git a/configuration.rst b/configuration.rst
index 267ed24a1..c02d8a62c 100644
--- a/configuration.rst
+++ b/configuration.rst
@@ -30,28 +30,29 @@ The user specified in the db-uri is also known as the authenticator role. For mo
 
 Here is the full list of configuration parameters.
 
-====================  ======  =========  ========
-Name                  Type    Default    Required
-====================  ======  =========  ========
-db-uri                String             Y
-db-schema             String             Y
-db-anon-role          String             Y
-db-pool               Int     10
-db-pool-timeout       Int     10
-db-extra-search-path  String  public
-server-host           String  !4
-server-port           Int     3000
-server-unix-socket    String
-server-proxy-uri      String
-jwt-secret            String
-jwt-aud               String
-secret-is-base64      Bool    False
-max-rows              Int     ∞
-pre-request           String
-app.settings.*        String
-role-claim-key        String  .role
-raw-media-types       String
-====================  ======  =========  ========
+======================= ======  =========  ========
+Name                    Type    Default    Required
+======================= ======  =========  ========
+db-uri                  String             Y
+db-schema               String             Y
+db-anon-role            String             Y
+db-pool                 Int     10
+db-pool-timeout         Int     10
+db-extra-search-path    String  public
+server-host             String  !4
+server-port             Int     3000
+server-unix-socket      String
+server-unix-socket-mode String  755        
+server-proxy-uri        String
+jwt-secret              String
+jwt-aud                 String
+secret-is-base64        Bool    False
+max-rows                Int     ∞
+pre-request             String
+app.settings.*          String
+role-claim-key          String  .role
+raw-media-types         String
+======================= ======  =========  ========
 
 .. _db-uri:
 
@@ -141,6 +142,18 @@ server-unix-socket
 
     server-unix-socket = "/tmp/pgrst.sock"
 
+.. _server-unix-socket-mode:
+
+server-unix-socket-mode
+-----------------------
+
+  `Unix file mode <https://en.wikipedia.org/wiki/File_system_permissions>`_ to be set for the socket specified in :ref:`server-unix-socket`
+  Needs to be a valid octal between 600 and 777.
+  
+  .. code:: bash
+
+    server-unix-socket-mode = "755"
+
 .. _server-proxy-uri:
 
 server-proxy-uri
@@ -239,3 +252,4 @@ raw-media-types
 
    raw-media-types="image/png, text/xml"
 
+

From a0091f61a183a23da67679716a54591c0b0d6822 Mon Sep 17 00:00:00 2001
From: Jean SIMARD <woshilapin@tuziwo.info>
Date: Tue, 26 Nov 2019 10:45:36 +0100
Subject: [PATCH 286/652] Typo (repeated word)

---
 api.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/api.rst b/api.rst
index 871d1a6f4..06082c2f7 100644
--- a/api.rst
+++ b/api.rst
@@ -675,7 +675,7 @@ It's also possible to embed `Materialized Views <https://www.postgresql.org/docs
    `Report an issue <https://github.com/PostgREST/postgrest/issues>`_ if your view is not made embeddable so we can
    keep continue improving foreign key detection.
 
-   In the future we'll include include a way to manually specify views source foreign keys to address this limitation.
+   In the future we'll include a way to manually specify views source foreign keys to address this limitation.
 
 .. important::
 

From 30d241fcff4ab8aa2af094b4c3c361606ddcc20e Mon Sep 17 00:00:00 2001
From: ycheng2020 <12297766+ycheng-kf@users.noreply.github.com>
Date: Sun, 8 Dec 2019 01:00:02 -0500
Subject: [PATCH 287/652] Fixed the pg_listen syntax (#285)

* Fixed the pg_listen syntax

Can't run killall -SIGUSR1 postgrest: No such file or directory

Error happens because pg_listen needs the full path to killall.
---
 admin.rst | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/admin.rst b/admin.rst
index 8334fd02b..a192b304b 100644
--- a/admin.rst
+++ b/admin.rst
@@ -213,9 +213,9 @@ Then run the `pg_listen <https://github.com/begriffs/pg_listen>`_ utility to mon
 
 .. code-block:: bash
 
-  pg_listen <db-uri> ddl_command_end "killall -SIGUSR1 postgrest"
+  pg_listen <db-uri> ddl_command_end $(which killall) -SIGUSR1 postgrest
 
-Now, whenever the structure of the database schema changes, PostgreSQL will notify the ``ddl_command_end`` channel, which will cause ``pg_listen`` to send PostgREST the signal to reload its cache.
+Now, whenever the structure of the database schema changes, PostgreSQL will notify the ``ddl_command_end`` channel, which will cause ``pg_listen`` to send PostgREST the signal to reload its cache. Note that pg_listen requires full path to the executable in the example above.
 
 Daemonizing
 ===========

From 458960f7c3f6475bb0a9748bddbb361d8d54c2c7 Mon Sep 17 00:00:00 2001
From: Dmitry Wagin <dmitry.wagin@ya.ru>
Date: Mon, 16 Dec 2019 16:38:25 +0300
Subject: [PATCH 288/652] change server-unix-socket-mode 755 -> 660 (#286)

---
 configuration.rst | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/configuration.rst b/configuration.rst
index c02d8a62c..6317aa4db 100644
--- a/configuration.rst
+++ b/configuration.rst
@@ -42,7 +42,7 @@ db-extra-search-path    String  public
 server-host             String  !4
 server-port             Int     3000
 server-unix-socket      String
-server-unix-socket-mode String  755        
+server-unix-socket-mode String  660
 server-proxy-uri        String
 jwt-secret              String
 jwt-aud                 String
@@ -152,7 +152,7 @@ server-unix-socket-mode
   
   .. code:: bash
 
-    server-unix-socket-mode = "755"
+    server-unix-socket-mode = "660"
 
 .. _server-proxy-uri:
 

From 1b166ce0483cfacb7ab3093b9adf15b7718d66bd Mon Sep 17 00:00:00 2001
From: Steve Chavez <stevechavezast@gmail.com>
Date: Mon, 16 Dec 2019 12:39:57 -0500
Subject: [PATCH 289/652] Add Community Tutorials section (#287)

Include DO video series
---
 ecosystem.rst | 8 ++++++++
 index.rst     | 2 +-
 2 files changed, 9 insertions(+), 1 deletion(-)

diff --git a/ecosystem.rst b/ecosystem.rst
index 1ffc96e37..ba01d1435 100644
--- a/ecosystem.rst
+++ b/ecosystem.rst
@@ -1,3 +1,11 @@
+.. _community_tutorials:
+
+Community Tutorials
+-------------------
+
+* `Building a Contacts List with PostgREST and Vue.js <https://www.youtube.com/playlist?list=PLseEp7p6EwibFjhfO6LhMx5_SFkVxt_gf>`_ -
+  In this video series, DigitalOcean shows how to build and deploy an Nginx + PostgREST(using a managed PostgreSQL database) + Vue.js webapp in an Ubuntu server droplet.
+
 .. _eco_example_apps:
 
 Example Apps
diff --git a/index.rst b/index.rst
index 5be91d9d4..967a33ac9 100644
--- a/index.rst
+++ b/index.rst
@@ -88,7 +88,7 @@ Are you new to PostgREST? This is the place to start!
 - :doc:`tutorials/tut0`
 - :doc:`tutorials/tut1`
 
-Also have a look at :doc:`Installation <install>`.
+Also have a look at :doc:`Installation <install>` and :ref:`community_tutorials`.
 
 Reference guides
 ----------------

From 8dba0dcc11f50c9a8abc6387e27ad176eb0c727d Mon Sep 17 00:00:00 2001
From: Copple <10214025+kiwicopple@users.noreply.github.com>
Date: Wed, 18 Dec 2019 01:28:44 +0800
Subject: [PATCH 290/652] Remove fragment from Nimbus blog post URL (#288)

---
 index.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/index.rst b/index.rst
index 967a33ac9..eb7f581f9 100644
--- a/index.rst
+++ b/index.rst
@@ -187,7 +187,7 @@ Here are some companies that use PostgREST in production.
 
 * `Datrium <https://www.datrium.com>`_
 * `Nimbus <https://nimbusforwork.com/>`_
-  - See how Nimbus uses PostgREST in `Paul Copplestone's blog post <https://paul.copplest.one/blog/nimbus-tech-2019-04.html#products>`_.
+  - See how Nimbus uses PostgREST in `Paul Copplestone's blog post <https://paul.copplest.one/blog/nimbus-tech-2019-04.html>`_.
 * `Catarse <https://www.catarse.me/>`_
 * `Moat <https://moat.com/>`_
 * `Redsmin <https://www.redsmin.com/>`_

From 4eefe14706e0059eaa588c89c898be919c287752 Mon Sep 17 00:00:00 2001
From: Steve Chavez <stevechavezast@gmail.com>
Date: Mon, 23 Dec 2019 13:46:22 -0500
Subject: [PATCH 291/652] Add GISOPS community tutorial (#291)

---
 ecosystem.rst | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/ecosystem.rst b/ecosystem.rst
index ba01d1435..6e0317bdf 100644
--- a/ecosystem.rst
+++ b/ecosystem.rst
@@ -6,6 +6,9 @@ Community Tutorials
 * `Building a Contacts List with PostgREST and Vue.js <https://www.youtube.com/playlist?list=PLseEp7p6EwibFjhfO6LhMx5_SFkVxt_gf>`_ -
   In this video series, DigitalOcean shows how to build and deploy an Nginx + PostgREST(using a managed PostgreSQL database) + Vue.js webapp in an Ubuntu server droplet.
 
+* `PostgREST + PostGIS API tutorial in 5 minutes <https://gis-ops.com/postgrest-postgis-api-tutorial-in-5-minutes>`_ -
+  In this tutorial, GIS • OPS shows how to perform PostGIS calculations through PostgREST :ref:`s_procs` interface.
+
 .. _eco_example_apps:
 
 Example Apps

From e47d19d4dc8095be53830186205c2a976d8bbd15 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Sat, 28 Dec 2019 11:21:30 -0500
Subject: [PATCH 292/652] Fix livereload host

---
 livereload_docs.py | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/livereload_docs.py b/livereload_docs.py
index 03910bd6a..7674d11d3 100755
--- a/livereload_docs.py
+++ b/livereload_docs.py
@@ -9,5 +9,5 @@ server.watch('tutorials/*.rst', shell('sphinx-build -b html -a -n . _build'))
 server.watch('how-tos/*.rst', shell('sphinx-build -b html -a -n . _build'))
 server.watch('releases/*.rst', shell('sphinx-build -b html -a -n . _build'))
 # For custom port and host
-server.serve(root='_build/', host='192.168.1.2')
-# server.serve(root='_build/')
+# server.serve(root='_build/', host='192.168.1.2')
+server.serve(root='_build/')

From 4cd05681dd84abb6616f02920330ef6d9f0ca3e5 Mon Sep 17 00:00:00 2001
From: Steve Chavez <stevechavezast@gmail.com>
Date: Mon, 6 Jan 2020 09:43:54 -0500
Subject: [PATCH 293/652] Add embedding disambiguation section (#290)

---
 _static/orders.png | Bin 0 -> 17892 bytes
 api.rst            | 104 +++++++++++++++++++++++++++++++++++++++++++++
 erd/README.md      |   7 +++
 erd/orders.er      |  15 +++++++
 4 files changed, 126 insertions(+)
 create mode 100644 _static/orders.png
 create mode 100644 erd/README.md
 create mode 100644 erd/orders.er

diff --git a/_static/orders.png b/_static/orders.png
new file mode 100644
index 0000000000000000000000000000000000000000..db709c873da885c3c73b42678bbcc279f582c836
GIT binary patch
literal 17892
zcmeAS@N?(olHy`uVBq!ia0y~yU_8RW!0?cRiGhLPrgl&z0|NtFlDE4H!+#K5uy^@n
z1_lKNPZ!6KiaBrZraOqZOEWyUc~|?(y(P-NAr4i6ERILpL~{~4J7?W6E!!BL)O+#C
z<%lHlUe-5zT{d1g$i$@8CCl<MyzKe!!UlJ13)`+AcKgrG-g)<??Yq*l^k=b5$vq4V
z3^lTwR!TE4Fz7O}1T!#9VB}cFz@We^;KRt^z@{*RiJ^hV!GM*4L9!u%i-Ez2;h+cu
zLkdHaCIiC>hSeaAE26`~!a_nqg10~Vos^RD<l)1>|Gxx$7=N(2xVrL68ZB8F{jrvl
zhsUPsOUB>V&IYUxW;4z-k@5`)n6O2@v6_%=4bz%W{yFSEPlcmN!NYQWum8-dTCH;b
z1{p^ImX$vbOa2QF|DES(z`EdQ!o2wwMbp)1*|q+>cwA}Tb^TdPkqrr44&DcCYzx2G
z?XS_&dUjmK`X|q#%*BlfTn^lh%jNB*ln-zS>X>y4eDzhFWhTe5jA0AUm&wWQkAFxg
zPCMFf%$7BQBhm59$H`aU&z_dzvQF;${$%Oc-mte;{Bw4_y?0#ddg#^I-tw9mLY@LF
zD=of6oIG9~eY_-V?cK7lDGZ7&1#y=as@n5@c$u(l<*MYTuk1@c?b__`y{hKl)%yRl
zukD{)n;o0#YRatb{{FyB>&5pzEM2F(y0%uAhauzJp~Ht?|JcekdAjumL8p#QKfZoz
zPd;qo(IRm0W5jGVk@aCBzoW&^dev$K9X)rjsa3$K<=BhMHkzxZ%1N*CP-x+3Z9IK=
z*NVv;imSeUiLUY4Z}-*Pnst%a8pW&DdVA*{pJKX1MemIF-m3Jzkk2t?+a0>BHr)yr
zZ3Kg$T6b_9UXk=+?d*OV!J+6f(|`Zb<WGHkq2jK=-?#ePxd+FcakAEH6mViWexUY6
z%gV>UZe|BQow!2D>)PfhR|D11D<K}!Ce2&Aw)y`niGRP9oxg(Io^>_#)%$AxH!*Ta
z%ay7Q7rolb)MJ<y_xG-Irvryz(X)TT({t~AOTY1D-m_1O%5APK<9Z$K?)G~XTazY(
zZgA|u5CQR9aU$Mlm)(7mc;-nPf0#1J0dKc=6$BP!P0{NVaGG-Pg0sHs`)M{Y_g!08
zh^W4fT&pxg$>rtu+p~UnUJ+a}Klj@-WdWxtFZHLN`c?a7b^WidU8hztf2&V0csBQU
zV7Cj0V&3=M{L@wwmIi*d%2>5><;vH5mNU9vhq|ZzUiFN-X=O>|;&*p;e*W~-d!-%I
zKH+)u=C!r8`QGh%Kh@yji;W_RP8~*E5)V!}a;z+qz7YEK#s2vl6#m^f*(14mtwswA
zXLw$UF^6K=?~R|Ccr{xDoQiUfpXZ7yPkuhTt9td<HEM0S)^$HCc5jM^E_hz0!>{b}
z>YK!sNY9YQoU7(1yx)bm80zh)d?}~D!~EpaB0(pPkNW2e-WOF@Bsi>}clS=%(e(8~
zw{z~6+MUda-=q-wf|rM9%Exz(-hy&+dROlYP3U?uPxJq~9PPmUS1K-T4Z2wEbFQ&b
zE4B8rLE!x@4<0aFJi7MRir}U5?a%J{b-BMgz;*iOc~_6<eSXR&r=_!At!B%qnYs`8
zTQ3(nv-K8!oZH&xHT7MIkc@Bk{KVpIv8Q!3Z->k+P1&)2)xHJkT3<8vZLwy!&z$+c
ztHI~v;(odF0!l3cf0Mk$EuFS7c^Utxuyf-`biA`s_@#*xhjGt~-AWuzHrpnIEVT$Y
zpY=#Jr|hVyo}R9z?r)Qms~96=0!}EXyx;fb*51d7k9Xb9C~~nr_-D?Q*X@Vuz7@aP
zYS`HyVEgJsLA((|@M4A^$3DK7wf)$$Zm$gYqyD)biv=fLHovk+z-fnqrQzSt>|XL}
zOE`|cy1qF|*Mryh;sMK4Q|nbO0luDhlrDNmF1)nu|C?NKxxJO2U!2-!8qBs+T2p{S
z@l4A7h`+x@<yN`N&V2WJwW9&+gWJctt*VqJyKzjE+V-!R=_v0PqsKxVijIdi3TK)m
zSyq&Xs0unYwd7_i-RpW+_vv!kdfP8vHez6VYsJHrxfET}|9!vzxr?8}IA8A8?)3BX
z_Oj>iTM&41r)F8$v}x1A_=J_XuHOF9cIM~b`_?b{xBt)<;!srke|9!gOutpjnr~lA
z?>qdgoP08jfx&mlmunLzN18Zw<cMzh_vHVslbur^UcdcEw{B-h6Km&jf18=M=a*gA
zSB{duJx6az{2TtV^E^@yR(*Q)>!R?+%BgNsIkr}XuI9b{wtfDbe{<^hFZpurQsZK;
zW&9bdXMERrc4gbziT+)ND~*37d@?w)HE-=VBjueU!sqMwG<J$V$XcjcGrjD6MG2=H
zN8qpAHKCoqu1vhTFXeNnM``vO?z~e??-`pISFnY>W(fJ%TF9p2#4&MK@;Q-E-KF#M
zzlr%uq*|}7Q8_Z>XGLz=)q@i27H*Vlo$zDH-(R7>Z8Gam>|gq5x32HKOWyNCO<e?+
zEW3UvTi#{zWUlvm-`6C{**dYD*2wr@ylY=+%GUL(q-y4AvIGYxb1dUsyDcHA<lXVG
zMG>oPjTW^XwJG^!<?k1168kZr!|<3-+@pOrndkUk5uH-9=5BR=Z1u~FA5X56wJLe>
z;KAM(_H{qiUk9$eme6JREH(DNQLRV$b+ff0A|WMbZ&mZo+x)lc>Bi5O!UL<t*?wEy
zn(=DYslusSdv9Bm$!>j9@TR)41mqg8eG1nEBW5j(xG4O4N!6ds%ZGmUE0^ck7ks+(
z_lo%YPn@E$kInM#{$lU{t+}B0Q+UbS;_ob5q-tlibM#(Ze(%k@vlC;R_Xn~#wzRkN
z%h~K$DSatP*0Lz&#015lzflLT|7eQ1-t>N^(fjo}vUXW#uZD|So(#x**8F`Yf1cdk
zUH8i0&1>%dTaxgHmq9^V*L2o{JKFnyeT}Vi74hT@iaUPm<jE-ac`5=<GycCi^@(AB
zy#Dh;|35P@+{~DHP~`c%*{09>+mA{pHYHyw|9kd&<@=zdq@a7XRmIuK^~QRQ0(zA{
zj`wdq?`XlwaKfdVXIaUubyL~nE=ec`E&u;*_VM(ROS-$)p1k&P&bRkx_p`s4#F6;x
zX=CW_(`u^Tr_My2|I=Tp8aic5_c4!c91Ix&LA>F$(u;o{+OqZCBG%nHzg0U;d#-T`
zO~28dCsu58efebx?-O8MUp-buyw=;Na5Jg6Il*Lq<JGz6MNWhyuQ~glO~ln*l~d5E
z!|3(9{NTd^(x;E@pRL&{;M8<v#fwE=sY|C{U%w}C!GiS6?DUn&?jMq`|Jm@Nicfjo
zjljhkmUeqD?Xvpw@J7$Z+j3%$wLC><-dXW<vG{!r7ooDoxcBq-{|VCz*1f4Txjg;q
zm;bgakIxcjaJZb^xcH~fx7pvFdIX$wl8qlr@lQy-bE~EGQf3S5`+F(I9y=fX7da!M
zS@QGov3v0@KaX(v_uu>1&@Q-$r|r$o-SsOJTLWHR;oWPK7I*r8&C2sBa`&n}$u<k5
z8kOZgS+>rLW8p&Eo=>^QUFt-Z{oib<bj3QNdqt}FpU?G2MUq<tmVbU@Ti<h8Rlq5E
z&yzdM|Em0i{gacpCrphxJV%3}foJQHd74h5h3mHMT%r<L_8>w-By1OBl%{d=+fLc9
zNBm>na>{VFxOj?Y-*uh3q<67c&d={<ZYxi(`tjz@ojd*c{QS)xTnEe-va$sS1&2p}
zX<@Z`U3qq<<cl?DbfgqpIJ~^Wz5mDvgk-P27V>j{g}(89Lk>l!mCcjCKDS%fv^O|<
zqfXbC*U$AUBovSA`4=Cq7ua@1LNKsL(8<T~*W~Lyxw{=?z6&N>X$W#8E_?B_ckgO7
z_R>vPE@od&{c-2*_4p}uXFC}fOcser_)MI%INDmwiQ}UG`WUa(inA`goUY&P_A$~d
zuTN|0uJw;*O1_?XW8*we(d>J!i&djp7)(}7lkm}8-B7nphDlMU<A3qdkK03o?i%Fx
z>)#hrKfodQX4~Ii+ZJZs<8u1y`zGT3lCG_pQ&PGa8rZH1HES-q)jQidV7d#(#r1r>
zpZM;HO%E62e0gWa{<i9Vp{J=TrEF(@-wX?yu{u8Kc$I3w8egcLVivRd1(Zsd%yWM$
zT4jW@$xpYj{ImJ<{>{9%w;3PMm$$16RgfxBvUs+5d#>CXZNs~sw!+re)K@0uO6lKJ
zVp!m4`o-niGUW<E!@IGoqZT>02pqih?a$XM-XCB7*{UYII{n}ADwWVRx#IDYayIUC
zG|1fF=sVlYS8acJKz&<VTTrdL?&kC^0jG}CE9HmZUYYnm?|z}hC$BG)*YLNtZ0cJ$
zwLAWPV)Aj`EvpUdLfu#VUbD06cG=ZQ_YbePKb0uGwfv<`#;uaiCoZ1;_gLBK>W(${
zPvqKvJo5Kj{rdmfpURSoPIW6)#wKe|zo)F`Bk?d-N4=82D{o=A{14fm_pjBTJ7Qb=
z^;fRk;x*X`DNnEcU#@A-UvwpJqIpuomNjeE2sjA@NuQl*oW7*Cq>}r5I+qmt6XV>B
z3Fo&=taV(|T*nXUU|{c&><ix0As{;K<(B^}MmMEcf*BmRRd?7Pp5uDr>y3~54AUGz
z9hNO2BH@mno}TmWYOLmn{;;H$;lTIaxBILt^GlQ8@>VTlXqcvzA0J=2?e3zMO)B|&
zo=@y<|8+w$Gee^Mh18xG6;T^?^#3nR=VJIF_hFLx*Kczxw_doAec{BtU#k7*@@22Z
zdaf4P`1)VQU$A90Kh7Tf*}c9l%lPM=uf26qDoz<Mx7`0-d2UBbPs&#A9cS1Xw$#jD
z=N6|O^3vA)%Jx5&uAj^vJG;;HI>D>2%dw21L9D;->mSznn+ggq2}s|VUR<zs@=e!$
zTc-ake}C`nsZ*=|*r+fFIK4PG*Ls2}mr3*@cA@aj7!}u(2GcyneROqopFVwB{r#Qp
zZnlPL3741oE^3+0VB$T+F+14uS5Qfe-nNTc{0sg(xxv0E@=uGvB(oV=V32obM_?H*
zgYLm)zOzkCO=s^CWw_#XQ++}Ar;WymtMk6ZykG37(DFmFI_#aF@ToioF1OE&47&0Q
ztxKL>sx7a(d*!xj;fVu%zy4g|Zuj43RA_MO{Isij2@G5eA8a3NnP2tnUuP?$o4nrp
zJ9~b=s{SnhJ=XF=_WgBp*IY>{ek=lx1+QF}l#?Cj|38_*reiC!A!N_7X~tXats=ZY
zT~OT#4hkANI&1uW`Pvt+Sn=a)bxQ)*t5$KrMYb=l&B)H2y(h)On7^T|=-Zo{7Z<x<
zU!L~=-{120_x^$v3OI3a=AF-Yy!T`1_5Ja4etWV%6Ku|p+h6y$sJK|VxZi+*)kVtm
zvoeD&{}&%drxhEG?U^ooayT#2VUqRCogqr@#muHxQZ`@(EWrVx$|-d$3!XNfu7NWX
zxK?HKoatxSVpA}ae^pism?_}nDB3&mr=Z8{latjs6qS{C<lgltDk{>^)m{3FBj#E2
zswuThyELB9=Zr3WoP4un#iuj<3=L6^=S4!Ua?F%(+~UG-RPpmuYOwi}YC#bZmACE-
z(z#Y;e*hbP!I)L4ch*nAhH30gnhqQb7cEk<n;$=amY0`Tj@g+>ObfI)mN6){sQJz+
z`Sj%EuPc9^&#(XW_4Rkt-;eBVHx@i<iZ!2q`B&ay@!Y?;F43*)Z^|&7Wxiv~%AvTW
z`un>(zkZ(b=;B&;UUI{WuLtTU-Ai9CBYF6~LB^+*Ig(EU7Rs+FnWoG+DcAOGRb*GG
z+T-$k*GUQ-O(`>dcHYxTEB|P;SSdekib<()!x~2e*51yOcXoej`~U52a%{Aw)(eZC
z8@u#XQqO)nzQxDPZ)?0j@T9%F`!_y#bEmY>rbR&M?DBgWNfqMiKick{zwzesm+k5m
zD|b6pefybsa%ax6m9v>rc$zdbTrA!nn>xvHaqQF6_Y=0un#R05cJ=zE9-TGYgs1Ox
zJNN6g=jPcG(X%!wTV(j({(Abah3{Pvg=zsGN9Clr)MrsQXLc|3Q7pZE^Fw^f$z|D5
zemAQhDlNWS{4L#d^*#B&6`!{_zuh)3=Fw6<;WJT69Lp96Cd%~(g{%?r;&65C3fFr4
zcS2NcxR1NEvvTpQK(FjmY2SWodn-=b79rr{*zF?K*7Em5(a%rPU#o8DGsN?Q9LzG^
zTRgmuflE(Ir0A(sLcGrE_-kx;W`~;zvCdk$r?&R#(?8qy*VI*gbZ}QTbxoBm{=QIK
zZ_k<?cVp*NC1q}y-aB#Hq&=JZI@i9Rv4MMLYOxU)Kkt<3pYKnT+FM%`&#x`Z%WQo=
z@b$mb%RayR`!PA3U6?o3*LeHG*ZJYIw3SZm+LE?qfA`Y9O<nVrx?kAC+&Mp`{4LW#
z5fi0L2VDMoehS`bz2wYo_I^vZHr`1UvtC;iZ@s<pnS~JR5rdo0m$SA${T5koX7%mQ
zuX%?ycQd!=`z;i7`r-WK$-L(2bI)#lXI=O0&BwiOcdlfA&ii7!(z2vV&bixiuT1&B
zMlIjE_V0~9X6O0ON#3}7JO7dG?wi$mce^6q{CIa_&cp6?B2z>4I^&<ezhV64OSSU<
zjr;v1-ze<anYU#6`=;4HH+3zKkOGfJGzQhO)bI;9J$(4^>k1G1|BGi|p0iu^>HlZy
z>py&m_!*$Fd76RcZuT!XzfIHppZ@LS#j?NK-~PE-p18&#&HASoD?8io{~w#Cy)u6I
z@ZqI@QTthURx>{lSSecZBKD_wSXJpF!=rDvz2$A5`KJDt#ssUw|ITXaKRK$CaXe}F
zdSBtB9&SFq3C=pVSq+yia{BeMtxx92CSKio=Na3s%{{v*ev-x!iDawC<@v0ut}d`W
z|06Y8c;Bz`7S5wDH<)Z}v+vdKD800{q3Y8U&!{LVl~9(eokDrnT1_NP*9R|`uQ$5C
z)$GQ!xphSk`Ppyj?8^+^nylq<=fdXihi)_Njy$fX|9VM8t#xUbhI0m+&is%5-&3cD
zG#&RUwODX*!YoGnFV{8YrzO9XemODXfOvw-3f@~&uko&Y5oYtbaaksl;=%<<A6Zwv
zewuw+w|ebmujxyoDu3Ucy4UgLwo6L`W;t{SI{93i`MCUt*yVJ7bKUv5J}<w||GW6@
zLs9YddpNdc|NScdvS22^)byh18y<T{%SvaiUYcl`AZ_{eg?#PSESdYqBs};1SrylK
z^2U=~i)Tk(eyj>PTBUx;z#?Z(pkJV|)HU|06K?&gN}6l6(VorAGunUUgM&w%|8vha
zSKKju^~|{A8`!75yD7lc)ipIqV&RG<5s&8!|F!vRsq4dAoGd(lV~)5g$BZ}Sn<5<*
zW6xhX1p=>LTwJ{AhG~W+N0Wf+oi+UHelFPhoPF)okk(xL$DdY928An}U4B<*Uf9>z
zX;-(r-g)(2ZpoR=_J3~q?~SwjQ`R!8N8n&-j99Jxm2bc6!W3Pv-C2J4XL<Pd_uGF|
zt=qJ8c|HIBxXVsrQb*3b+xO?R+NFsioj1;1{;vN$e636_XQi<B%o@fCFIXDf9B29N
z3p3fdGWsKL;-+uy>vnkZ-kH5m|477^l%A6{pO$Ve(KO~Z7W+KO=+oElD<bOKiZ8!Y
z+aG*2Wa`N~@t`JwiTj!M>-j889NE*GKRpPS*l%v**YIKbolT0-Utc^wck;&8nsB$D
zF${Bx>-_r9-A$kOPh)nq!v$kj1{3!+X8-=Jt^Zx??BU_JVEWQW$JxdCWPBA%p1hoL
z*gJenwA?H8yU$KsvtJwiV}1P#74z@f2O0aSe4h0lX4k7N;JN#M^VFQY%?<{vy^6NB
zwpv<Tibo83D#Wt1wYBBt=fC<YZ&Ok5?95E9{7*k?qN8vB`};e5{rm|N0&L~A+YfKt
zzWx2(-Q{0@ojiFm{rtSOK{Hi6rKM-TySqDl{rp+8s=mLAZTeAT=@BT>e%R2|w6w5r
zW!(S2zrQbf$t%OxzDT2G!kjrWP9DC#XAc}$P*po?nc*=Vu|IN0H7eFx?ChVl*Q(}v
zS20)Gw|BPB;;k$?y5`tFKYx3>Tus6fo@E@G7Uy@1T(0}t)GN4r+nm!6Uu-X&|Ka>Z
z%Y%GcMo|yA<K;4VV)VjeV`INW`T4C=(#p)vz8(?p?tc9Id4HP<#g+&i(1=R!S6^S>
zqw^cwE^l#AaNx+y%DNU2A0NLz`}(>^@25<gmef;PTAICP{gNe17A{o$*XN+H;APb3
z%{4zhD4LmxDIR(J(cl=*;SUuyEfboXoqG?OXlkz9u;Ie#)2p}fZVL#No7OC_XieJv
zbMud=KlN;x&~$df*5z#>a;tf6mT0+rIrX{1b1C~v4L;j2qmVzmPaiy<&o;&2&iTN;
zY_Sbb5)KGS$~8)GEL&hGAt~u;Y8&Ye0?Yq>y?O-%Ud6`;2XEeH5v|P3+$`0ckb7%u
z_VsnKyI;M39QE$|%-OSzeKwyeyjsFBZO)=KkAzMJuBa8-1gel1d<=P+9Uc%EnE7NH
z!_4N3HJAhbb=pxO;I<FPvip;!O$IeI+*h^KPB_2irOEv>{SjR?%N}rVy->64>~--Y
zRxf7Od8?$?)%;AT{=fdzAB`1Leio)|J=6c=;!$n=1S1s&)27O0_k~W*l%Ki$yMCOX
zhnJU^S5N0I+4(c|Q!Kkfrx|@tPMaZZy~d04^siX6=9CF;;vU-S>g<XpwZFbB%RBL1
z$<XlPg$n_z`W+1ZF55EYOus|aqN)F8o8@M`YO8Vg^72};ivQpi)gRA{?3pqvD=Kns
zZQ-mB{AT%q^+>So72%kTTUqYMfIakL<~AfI2Unc7-@Dll_4e$|KKkeBZT-C)XVz=#
zJ^QllWb729Jlh`%e;M{Pect13sP4Rb_0svbHWi)iTfOtG`k&&*car!cQ$bBZ#U;DA
zm3Q?s@L$Q++puBF4F6Nw1t}lul@9CcCGO}diofzzg+s~4rsl(ggIhy2G&FvEc-Z`6
ztA_8Uj;1E3-j$z!)Y$bOUp-GJ(ndV1bkUq8kKT6#S%k0myu78N?^V~I<uZKkfg9VF
z<UV@q&Jp@VJv2Q0`t|GU<NjY=9o{c*e@tTfv}s-W_ix;|arW%ms=r5$9GNspsJ#69
zExxxWCMr9(@ibO1>wU(ZBpdUr{`9`NXZj^2C9fJkRBo{<c@dEO?2miDoM-6%V?Muy
zUa70Adxyr~`X(+aYFqnDWa|I(fr6J^BfqaUHZc+5fA=7o<)Da3+qbv3qobphH`>ke
z=)LRKGGXe}t1m7tUj4*7O~NfMZr`zAqBFmFPI^+bQ}n&Irsma%`*-ftJUKB@^uG#+
z(-%!vR@Rem*9Sy<Yu$?fpB}&X)_e|zeTo7;j>!odBZ6!ncsM#9ymDpBzpqQrZdtzu
z1Y-XGy0lHcraggy%f#&8W#QtgZCArWE^K&XlzD&gqh)#i$&XXrT<@KkkY{JHLjK@e
z$!9uF>yGz*mrzv8Uadd<@lL(H6Q?;i8?g4Se(-A!V|N_?AN7~DWv3<@{^4y_n}2HB
z#T8tC6P9k4@tlzJI`cZWYrdi6{%Y+>ERF&yr&CUqHa_7sVTyaTZo<6Ux`-k@=}9ss
zEM2P?ELoy*KCdfN9pv;RqwnkXJltRVJK}m+7nc>E^0s%}o{^jX7OwUGIfd(LouiNE
zw|92Onl=|-Kl)L?sl#M`)#8qav2z|sSJ@|T=HI=}*JRD5DY6G0t8cA~e;59FZqkRX
zH{PwD{F!T$f6t}7rVK7nLv2p^W3Q77F0K<zHh;5iahvwt9lxTc-8Bij-FZ4jIsNZf
zmx%Ja$6W01*}M(dy;gmC#md7ach|StAALXL()G)3{;sa)4=w%whS{@HLNSo9blcrU
zEC*lj|MR3*E%q_@yEB`XJo&TzZrsyDiQDJOD}QqjtVx{1=)LjxHXX^oUqS8oj>@Ss
zvs2Uc%xpWZ<fb34pQt)}U8ZH~`_}HBvhz3fSI2ke1ek3;A0Npz@yqLn-<PXbl}PRX
zJhAC{$IHv@){9s4D*tUNPw8Owa@y>FW947rw>NcW&o7&6yLHv}#|Ij}xkRP71i3Cf
zl>Knxdy$&<@8%N%MOqTLqy(RR)Hr&o^FOHJ{XO;O+AR01ud#-*xjemR8a?0X`oCOz
z_42mml704t?=PL(>ODQrqUQA_rQ=Q9r_KMVn*~qLesbsPZMSBHD{J=t*=;F#Dw<Cs
z!+(jJi;YhAGS=`z{^{Dk*}q?%c=dnYrL*5ooIH8*)TyQ=T??!N51mbGHsRs?op^u4
zQ}bPUpH^0`(){7ZnbbGG=G><{2Fq8cMM^xm)fc;aW@)%*=%r2Ur-}|Z{65;PtSqO$
zY5UR(%ex<@+pqdAcQ4pEEu8BT>*Xz5wyasB<FSfkm9XlaHOvQ}UOIYoYE}1+6#*xv
zu71lL-<bOK^eu+@ov$CQ)6cxmFq_?%MSRKfy^gyWzx|r8zuMDwe&OdD0Vj?1-}tAw
zUhe3a!n!T@^Lcr@>C25ZcI;mDCQ9vY>b~8(t!<dOLfQpBefY5A`25+8oxdhOS)Nqx
zF>^b=TyYPNw2GwY^}=Ua+k?;Mt8mqb&RUioKV6$M)iPm$t(TqTN0%AJ-##2=`pbB@
zCS_-f)VrBYZZ0b-f1i@SEgW3fAMzpN{Xr*r`@d|ztV2G<?Kn~Kea>I~*;hS8en_>f
z+Stif_xr`h8-EMt)R!MW#44@7XVM?r?nRkFM^3KjI2_*P+uT;|86~7+3aZs6sx5w2
zYW4lGfBpUX;Fw8sOEONaV9tHkw|V8Q(*i1aFS1r>tbe`nMOa|(?UkFIB%O>Ce)4R|
ze5%^H^}zO)$8r~(r<dn`-W5In)FI8kN;Nmvgx0$~)w)vffAgDDoQffGzK_d%W6F0P
zDf(bwe$(%JYXTR}1}xJ72~WAM^|%_allfm8pa1tlDXM3wOwE%+Dal<596{$YT{q<{
zZ>?pYQmw-!y=3~Xjnkvw&lg`4v$ddxfBs7G3Ev+rW!Cn$R<?-YbF}Zg^Xd7y;(piD
z<(j7%ncsGPVb?7Az3{M1%G?~sRnf`uA9ON5*g9~uwzr#?YDaDQ@Sz~Hey#4T4|mV<
z+Lx7YyAT$1(Xe%A0c<V6=8~7@+4V_s&4$N7otTJi+>co$l6}(W&UmtFy~^?h(p&yB
z2Y);0zIx70mgBj;T>+2y_9<L*RFYvhVBUV|<E(v;oxWPm%2HPHcAN6Q+2qCl<9q+r
zhpamA<hf|Vy5AcPZmK_*SG@Dg^5DaFEMnfD)qf?YDd2K;OM*79#f0#urN*wy*AzZ2
zsQtI%=LwbRX6E<9vKd!AyZltP{gP$eVP@YH`CqfV4Rm{U|L?fCd3%0na&wEP_nVt6
z+b<tm&XaWS*wK9|Yv#&M30!*pQR%G7lb-w#$$9c7<nu&Nz1*DAxrd)!jbd1$(DS$Y
z*O7^PkH4#2D{Ycl;Cx0tQ*A$&<EOtrgvzSh%S`W;9boMbve(FtDlIZr64W<Tn;BMK
zVzzw3kJnzMvjh{pYJxiVG<*M+5*9-?_uvydo8k{HU0Lfz+s#=_Jepdb6`r3`DJuQD
zE5r7T-`ZozDp%U&s%%5PME%fE`zL(*-qCr@6F!`L4sxsDoY@lp=VX{4+j#8c!AaiI
zv9ixM%-kx*kXf)RuWHim1=;4a-SyY0{Hxm(uyF6%Q(vbZwz@5qz2f!u_hyOdNp&|%
zrunzCX>Qg{zbmTHVt@4b5=G;5cilyovOij_c<@3XH1ByYe{i3!+{MFZy~1739!R{f
z>h*i=wBsM*V`A*r?Vh`ES65%}`3}?YINKl9KKD274tj0u+4}v_t!tTo@7$8e)YM$@
zBC>)fuEJ<;cwC3Q>bv>&H!cT-N5*-c-}Zjf=}6Cy{4Klu&Mga(UAkw*2FKcT_dOoA
zM%4|wXXb5Rt1r<~aPaWr({8`FnqLVB%DlSl@rKmpcIp|&Sy!r0?|*UWU`)8H=iw9k
zu5YP5=~^o8sZz)H+DeSUK{TlMula>58VCRG%#BzQ7HzGpds^@C^44?nFWipmR51Ph
z=FAeqV}GJAM{l0O%wK;<;`4exlO-YTvf68YMXl+3@J`2D?Dmeei=#i>np_?{&u*X0
zwcvgg-ea*Eha`+E%cqrJTM{8<7VErBe}?t4&5Ge?k1m#Vue`8uk5#l*&93?loU@m{
zm9VfZ$$T*-!CqT*(t|DW63Pc8xQ+V%CFr`JdTIS#+TOe*t)pGe{qDh=O-nC4pP#dA
z-K7@SZ8@RW<L*@zNj=kxb<gt_`Y>NkDpS>6YsRmh8T$%O?wSAR%oEO27C&BSOC`sM
zY`)_>GbsCZ`ky_j+{;<3XPyw$*?jVPm#VmD*h?9&oLp0mWp1VhGo-Gb*r#yKv_0Vz
zc!I-mgD-oox1LV5_U|JcwUai@sBG_ldFJdrnQgCUg(w~?xfR84w)}D1@{+07lS*fV
z*Z(TwnD%nUiSJMCtN(5FbQ3vVo-KBEkF{8m$H~Zks~P9CwW~K=YIRoF_WPE}N#XMb
z$BsTf{wlaDE?a)uw7rh|?_6qie$~7C#NnnXy>?ntR=r-+o&R!^u07Z13F-p74{u6Y
z_$27ep8Ge0=P5+2ZO`dGztr&9jOja0#ZJtX+3~rsQe?^IGWHddbFQ0eI{o^YmTx)j
z>6GlBsi{k!*I!cIX<J^Gpdxa$upsIAhQ4cI><70jbTr6Ki5GZ1>u{=_{=>RO4JPvY
zv%l~7mb(2h$JsnaS<xA5zARtbF<oG;PqwAi%peX?^&>VZUu0x?Po7$T^z{d!MUz{K
z?24y-TUSxyc=7d`{)oGGoV+DAYkv8_{(EQpc79|1Xs=`2KD|qE2wEEx>-%a?&C`-7
z(Z7#w-ptHBJzq6u&cta)3*N-Oxxp%47yVoQ?bbgJUghmd`8lon+lI7>ulml39ToD{
zRPop`|G?rkYH#luu4|U+6gX$Ov8cA^)P}RS>obD))y&9w`ZV{jQ;nSb#q*cvaSG`D
z`LHjb<aN{Q{eQPE`0+(T*U2exZoKnP%PBQF1rzxld}lctEWNzw@h6Slfsd`b?W?A%
zc)FZey{e!^^Ww*!Io0XaW=@CPFMd3Fhfl9;jn?|3uP$U77S6ws_xE?rygv#R0+S<7
z6&4gLypy%~((?H8XN&5Mt~+;ZX=#5l_s-kba*LOVTz&HCk@B|nu{NKlPh{S0wbks^
zK1<%nox3wW<;mLr_1k!S$AoK-HnJu6-1wHq7m=hXeo^wG;mwfW50kCBg7P2TDQ-Vk
zC$jJ6?f7ODtpG9O#Vk`M&J;Yl>Gj>?b57kbJ#y>9CGCtumvYl5ZOWXaBIqR4rSiLm
z&--<TF2e#gUwNOxxR?^HwGZE9ss6hxYS-nhmwMCk=EkDO$(JYY+`QPT@k9HL9X^L{
z9d%rKD*L0={6~xDCj^^|@9lC<zIWvKUL~E_xuNm*_Wz%?<<$$tdC{}a^?3hq*j8M=
zO1stIUrBzhe6jQI1s80uU-I7iruzS<+xxE8Ue)AHH_v`l=@g`w`S#5UrERHy4E5Ax
zx0jWLoSzc1%JspY8^1Mg+*qGIdsDE2M@N_D!(IM2x9*=+`}uE(z`}R?Rn<P8xmKxc
z6Jo5N6aTBYp}F+=(!f>@PpwHcC8EzKOsvo;Eh}LB;b;2yiiYE(zZG(d>iX*cF8?h_
z{oNR{?)s6swvtDGSsFLZ-)zdg@KVbQm4#9A>fEb7W$%lSbqp#|ia&UH=iBGXk5ygN
zFK5-pu08pt*^+1BT9toyc<LVQ`@6B{UPZX^$?5CQy#BlR_nH2}*z*4eQrJxc7l<9v
zn=$Ep*_V<>M*hY2h92Fnow<<{ems9K?meX`Cilc1Wg)Lfj~ONQ`$F!W-J0}IZSLg1
z6BX~;Fg3S_eYsZn@HD&sCegERO5^X_R{qb`-oDRPea#!oL{%ZNJ$rsfPk8_8?!&_3
z9?R$1nzP>Dj7&No9Z<+OQ^oW6r7!gc_m^9jzf)-8VEU(@Z3CJOyqf>({;|(9ZhYry
z&Wo)-^FHUeBgex(KkVImZ+~5O_6zgko{yWIKi&+fe$H3KaZz&P$DKOX)A{abt)G81
z>`G$Xkz@N7-`Z)R5%R`ihLrI9^P9?xpG<PSHEW5%*K>d8WTxF>aq6fn&b!txJ*l<m
z?;Yzag%jhYN`D3Q#mqN+d`emKT>szNd*4J-M4v2j3}D@LYs!a*Pgh48>-2cG2>gBa
z=gvlHp`UB~^!Pqa2?)|mns@Zbo~5^TTZMh;y}4HRtj4{)#o@(mUxaOEEmV2>Uf@3G
zb=mFqJuhm@E?$`b|MRccFOPm)%h4j>J#qH$U$)O?M9+RU@9)ZKi>&^w7O-!hvhB#V
zCbh)W)K-C6X1P(IX_dlfXJ+Q>&p39!-sMK+?zDBUUVg7BDPMf(xVhi_U+<S@y}y5W
zdTEHu&yN@TCH~6Ge)ViAew-Y%@nwp8F4Mz5=hp{bd~UVE!0wmgTH`|}cRW&(e}43M
z+JbA0=WemAw5|y{uuJf`I&05aiMLAM|M)$**gex^c0y$J4h`=tWv7n2rvj$y?AuZG
z=8%rO@weksZmaXh*G2_3eEj|YpXIlL&<htn?!ER$!0_yH_n3n8xBZ;r%6iXNy)25{
zvU#(eXV4_Cz`!?q+qb;)n0|hBYh+*WG`@SrCGj4|`xm!WNEzra?vu5dz0fk{_%Z=z
zuA7!y)8hA8E%*K&z1QmIin^+bhbKN(ADvrw+vHe;@xpD3c1>&Toa=naCn?);@`Wo`
zTsU&??AW+c`qSPMr%p}!Wz1_EyTH%-_!pU-x<AkMnmY3R@+#tzI>uM4_P_G=+6*SX
z|KE6urzQRWyHg_hU$3Uxlv5KHvxdfZUlqJFJNM|M^(Nwz%AbnYdf7fn5j-Z5tY-f1
z{ruY8sFkZEZ<R{!GcihYw@(dwExG+?>9)x~CAJpMSiNyqQ`4-*slok)(t5Vu{PSNV
zUtd<+zjY&1&&xNvqmNZYzFf6pw#Co(GdC;MKVEnux7SI(Yng_p##8sdSqFn&Y=58p
zbf>rKc|U#0H#e6}-Lz;|qV)L%J9od|D?CL$$nD6Zh4ZFWt@`vSi|yLEf63S9pVnBl
z*+b}KvBu7=rp^YYs~QhpS>g7Lbz|Rwh^{p|9UUDx7A|)0_mbT_o4M}caVN&`$k>gK
zy5yeAaBY&1wEk3d>is<fufL)kO&t9EpfS^6^Cd^Eik_U9py<5h*Vd->A6YlPv)+}X
zZTofd#Azo_B#XZM_2IZTx48Qht3K)Lf=ZeU4_=%6wY}_ic-#9I%W6!Ds`@9~aEuEp
zk{9xOd!uyiiqEe;aK2Bw`QzRBb+*OwnIA59zPLK?e%d;fe^+0AI~?`qBIAXe8ux=!
zHqEFoXtK}$cwhWqoY29G#`($i37^;gOun;4^T~%FvE6$&p8t6FMpHjuL)v3&u4Nn(
ztL*l_+xIa$*qoW+0#mK~cOOQE`$q6_6T9=5Cal_&1Df4NUi*7tj>vM?bsR76oQnwd
z^gMlK-S6|!d3%!u>i$ljzvtqT?3#mfBd1N7^Z)*P1E&=hUyoc$(3e)$Rjo{w6^_1d
zm?&<<x?<WXj|rujXEW->y=7BHZN2*!RI&@%pDekh2b#*?d~lDY*}m5cRG)9+-Rtf*
z_riMHnLDzx4s2NKFLBl`arrm@E$N$c>TZ>OyRvHDE0%u(mOGz6NKG$Z`@3(xZFNn4
zb>6FkmCV1^c03fms=av9kJ5jAw$A?h%|FTiem&(N-=W#B-Ku`-?U<>5xZ>6Y?==U$
zGaM|s#P)5jj(Y07oY&`6zaF2XsZqW7!>15w-rWDX=U;4k9<{;t+Omrh$!AjjUv_W2
zBKa-f@26Ex+?l4bHJ{wmLe}}D|9Q98VXM@Z=aD}T6+T>D?>-}74xhI$>khU18Ov%J
z7#uhho%|f<IsMe!zG$9!Vv9h~m)l=7p8x&Xx$LTv=t8rM@LQ+ZZ~xAovRrjZ<}3#f
z4S|r`I+IJE{gB;v^u*1>zNf{P2mJb*{y(EzK6cM1r?AI=FP$~sTm3yREKCeEpLBO;
zG5fV=&Fhz5tH0+ozq<R{mkl?vUR^u7ee?GC^9^ybx*^#fik_O8uMPd*$M2alVak*#
zQzV2-t?i8CPZX_7T>a(qm*-myjL-DShAnML{i`?Iac%0Ql~eR)L`6lNI(_>4ySve1
zyV-P)FY}%4!fDR<!^$hKSbr(c9<jndS9WS&*Uz!stDUoL+3hpV%fm~ru89$Ren0l^
z{`-$!?>sea-ap$vRleMj83M+;e}B3(YnxY)N|Lqz{rz|1w-)(Nm|(tf%GKbrOSqTK
z0)q)5f*~6-FRKL}@@3e^_W5P%tJO-P$@eD~|8+a(y5q&qUR~k#bMgBNuFufhd`A1~
znOpL^9;ulY<p0_ykbF`3?u;|)TVsra)5Owro~fojdHp`{;}7#Wv&+nX&Rw-^)f&Am
z59etzEZ8aFqWdx@`+E6f=8LudP8YW%m#fDLiHlF2(!VRY$Iz+c=Z9at4JI!h<OImc
zazFmwcAPU{sZML^)RSShzjhWImFeD}dQe~gq^13G_vi17{p+XPEcjQx)l8n@!kR+s
zUa8dLgu|;C{!c%6_sr9xpyYM)?f*O6%|HF2Ovj~QhfI@S&z(=p-TK!Z-uw4&^#5<a
z+a^qy<Dl<-w4Yy3#$uM!ixZbM+o!L~*lx3B{i=$m^UUzg;k=m_t9SK=y-zQbsS~L5
zs#OnOY;a6fa(Q^)hfRi;f~EvtG0J;wnp0TuN&Vs*b*tA$RKjajEm`j__$x0F^X0{d
zGj`wHUUjWvduz=<Yp40k;ERWAgMU|8l*bm%j^Ao@Y{!?(Cyx?it!89uta=f->)ZUj
z=6dbxwn|ROlsDl$vE}{+h0Ary*~eynYwhfQdqec~u6@QOr=-I9u0QXerM|^eFE?-B
z+G|V~Dx@@LJlgZ)MoG%0gK?XeO*BrtBvfs7@a>k5FR%Y~O5G|OsqNY4f6(om-`Xsj
z+mpPdqhp_MsN5>n@NDtKI-#Z|FIe`?S?fG|7TcbJgNv{5pPCgm_s**-g^ekjZuPC<
z41P4(>xpd4t?NHh1WqpPUAwOM#-1o{2jfc?i+`4+<=m;hbnBqs#$`cHwJ#Q4civy8
zzv)(A&%--Memr;CZP;fjx97<vxA5bZIcaNI7f4P_73ULQGB3t%kvDsBtf(rl^6$9I
z-&Dmry}E>x<SuG$d;27Bo%G}PSt}PWx^-&Z{Y$6wUBf5M=i?1Zi$1qY+hN6vln$%g
zMbEAtpQ!Ctwf$mf;Ki-)ERqhd{chs4VqMV3w+osUJBRF?Yi{Rbxvj#5-&{LZ)Rej1
zarL_W>vyD{t}iV7yW?G1+bb<AGdtyLF_m8*yf>^p{?2RZ>%s+l#IJAjd;R>{F%NG~
zN7wU*l0O`p{Blp%<`0^M|Nk7EH*MFcPhM5qYNyAZ^XjTsxKdhVw)B<8Q`c7BSJu{#
zTwhJR$$aN*$?n|Rg9<I&a&oa|x7P1n*fz;)wV7<YuJzQwpzoa1LsTaIuw3&xf`Q@D
z5~<(QO=1^lr0r}sT6%5U`5%?uVt(A;j3z2aq)lEgn%wiVJS{S4$+D$eH%|TEvUK*p
zKec}O#(Ivg`uB%)89uu|>)x!TG8I3Bk2THsX{NJn>+IE2pWoO}EB<fyzx*2s+Lb{|
zUte2Z61()#?SoCbH|s>^Jl@uqcQD)ko^R!^A4L)Vwv$XG$`^7ZpLudO@?PZRq|6&7
zyfgPDyqj^ZEyh&5zf9(-WBaF9HtdI%|7M@PA@WvV<7DUQZGN2JHU}wk`u%P-Wa`<d
z@c9M*wW1|+_7(5{SnQnMR`H_nitHTS2(H?HC(~YO`9`Fi4l8~8bglaG#CMlUpKMcM
z{Qq*{#IT|zO)JlLyyTvK=J(0-KJymzH23dYq&mNV({)m)Rl87hv}DuDK;AdMXG&f5
zsX2H>Ba$^3smq){W!`_!=}*4h`Pq1|<XTufpVAa-z1{QUziFSbH;bA3;Md=;T?b2^
zrRDS8F7;g{V4T0b{JGGQW%qC0_{0;l<Hs=*?yjq4j%yr>R{kh6`25O0p6{TMtnkl$
zf6~wIH#^z!=tth!MKjBfJMm~*z7Ax+T$!56AGWK2BV^tl??sP3Cx6v+UB8vz`*i=G
zr_=Ogg7WXU%84z>`4YG=BsM*^CfcmN_rJy&=Xnlq_)br1o#bu!xh~zmvMFJ!+$LSS
z>Bl6J;~r_1yKXCdaPIiizzOGW$u98Q6nlLMhw7XH&-<+@kp4d-wEyorqp81c-Z!6y
zf`{$jTNi0(uKWM(defuJ$y+#%_;>gTZL&V|CwpFZ(ai+AZWW23yL+~(HCAw5Jh^4s
z;>nt=KRCY&v&3xQS?^aKqIG}6p2f3er`P>`B&xeJq{bRFa-cHh^UTd#wwL{U)41q*
zr2NKRJ6oq2qy@it$p5XFKVLpAZks@F?$f&`8<s@v+%@Y;<<C<uw`l!3x_R^ETSceu
zX`J&oon-M%uk1||_x`ni`@coi6_lFCZmKzLTOG04qtrdUJE?Q2h>*%1{|A9#lgr*q
zTzBks;dnkLVyB&3>Wyb_?YB(Szb$_A)al!8tv_t`EfLmxxqHH!&#<uo(@k8<bavmX
zJ+rbW)_D!D?%pOfox5dfnzPkBg%n-vJ3G%Ww&Ibyvn^?h_Y9%g0Y?f8iXSK>dX?1J
z-M)8oUhj)9Gj_ymOFyx}%RY>;-+!{!t5p$6nwr~WU6vm`Qk%5<>-)v=g%wTghMh}g
z*v;7=-D`CAx3IJC-~7Dh9+#f(L&Zw<^546Tuh4Wg-MQyS$J=c2^M6vG99ZYKws%*)
zpL5tdy;*yrkNfWreq*S&WNQVp;jxa~_s<$srxgj#6_lOqyH(z9+2R-VTyv`5UAWnQ
z$h`V@_5>H!Q%Px48jOsL7pcqvCHGpp_NAp;#25mmu4&T5-PwM)=f@278wWNot~~l)
z==l-1bOrBl^-`wi$Br*kE>3qZWqN+xeYwG}Z{MsQ^*&NPqQbeetk3M|B(K{+^S3vD
zSpMUM`i(1RUDq$t`mAR6PBii5t2Mtq{rh`;NvJ!&?8Z2$xsuaAH0C^ix1>eo@cegc
z-zMi}$cyZH9#yq+TJ8Jzy4%}#t+!hG@J*Vpjlah!)wOeFLyv6hu|IZn$>VG1`d-bP
z<h7M!j(oK}tMu>E+~BflES!OcsxjX+cYh1toWE~=SBtRTN{>$$L+3cVJ=%EX=0Vm6
z)he@B21b_q->biUYHj{`PVH*Hh|U&P{rCUGp6sqFueej=-~Z$V%f3CUXWxAuCvX2S
zuE}BT^3|r?oI>x_Ii~!bvliU3pVw|NwJN~k_nE%>c+H=>pTm9QR2PN>|ERR~m>@Fu
zMEHl2e|Ln%V)w85TDnzjGygM#mTi+3ML0ZAe|KB{^o!nd)5$eIPwly9zw7)TiR-1`
z`F+X)giT!pb|-k*-M)Ca^R&&`zef~w#Z<SYIzF1eKVB!0t7xm@=ROY&QQ4Z6duC@J
z{o`w;{#)63S0xJ@f9N`kdxxg;&r8vsb@TPUbzfV~8$O$}{_E}+Ivbz={kc0~l8P+1
z%JEDl|9Li!9FmffrlrpN#4Rl?r%js{RO@19dwFwr8yg?DZS20VDN9eBt^F%kd}i%g
zjc2Yocd9q7ef|9RoDRS4zP~44J$QG(^~>fPKXO*>EoQeovZtrF*4tQrU0g+k-Psie
z|N1XZ?tijv{*HtVe$$o&**^PRCh%Fw?3?V>b4MK)CiNe>GUG?hw7s*Hr(d~pO{H~Z
z`Mc*+woZkQE%?2YeYN9+ey>%nru(_{Gdn(cbbU^)pTFIfHFD?941p=z)|si+l>E#J
zyLn0R*V&&tlg(8=MQ+pM`!va0@UxQIGu^9kZ*(?BN6!k}Q~iA1G;@)uOa90{diG%V
zhbqH!>%O+ke&+Q<Pep#-jq*VEY(|EwCznl6e12tC?ax<p^zP<=eU-BK*UN{k%E#Y}
zmjBAVETO#V$Nd-WTgo<^em>vmpGdjA==OQ9miR7M^y7tl&%ge@Un*LC{dFF%BcoH+
zefxe+;_hvy300rJtbBcb%I`mg1q)}_d^Gf2s`3AGSwLdV7w4$-mdS-j>qRW|?aY|B
z@)cZD^SJwPGSjtQ3p>q(oMRc{JD-;;^~arAa+Brst;4Q6pEa*Oke9l`TP!}twk&a4
zzvS=aQ*S4?uea0HJn-Xh{ePM29a<SLe#B+hb<B8nSy^w#=5NPax&@~fUoF|GbL(d0
zd=*X4r7JYP-E)pAU()UAIvf9Z!m4k=d240{{4Q7g`QgYuZt$?dV`1A951yW$?t6E_
z`&NyMoh2#8u?^D&H&(1zzI5KIJ$q&~Zr%L<#@FXYT?WS@3i7v!dhh$5w{d3Y9&KSB
zjjt0XyGne{KW~t(`R)Gv?u`%b$z)F}y6|xM_3M3~HeU`83^9LoA^Xv^+4-!C&U$Ex
z-uJsHr+v2dN$gM8{W<;k1{8MaojJau_i#+_RZ)>EJZt7u_1rFa8CmtiMSi#0+v+vF
zq6t3f_wO1VJM9(jdiTgl`;>F%tUKG)zP}Ky3N&%`bkekc70x})X@9M}_W4+?%Cf4H
z3Fpn$P7%Gzd%J?|?A_Y;u|Fq^WZOOz>Q)i7Z=Vz$&CC+KSW3dDH!H>0;{2Cv!}b3@
zJ>C?1I4FD03(cJ&Tzi`4%;|4^lsNgMorOnls@2n~%(e1NrA-O9E-1_}+m!z!@cf>Z
z-=0oq`S?uN2TzHKs$aUi&ghbnWTnpfKfHfFUOIGCaB1J;W2G%W?HC%?U+{5Dd%0!C
z4x4FnH^=rSJ52IkdVu^91RIn7gs#tz7R^t%JWn>ur(A1ih}4v$N16ryRCfR0_u=~_
zj=p)7(!UvJ=bx2-yv$dz{rLN+H^$+X`=p~kTx7fe((aYfXBBGm>a^EV=T|@f?D~Cd
z{id4|3=C7U^*|#Fx{`I@x9^uZp8ECiFO{8BWaC^qxK5Ycs&8_;A<h!aaA11krft89
zEa$zxH2ZpT(=0BumH!z(+q8?V|NpaidgGDcUD+O!Em78`@|*uX`+YwA`Hlw%@5Qs1
zZ8HrEzq+;LrCHY1qifEWOLkvY3U4XNOJB2c$&%Ep>wll?Zog;9vH#y`|9csiO!qxF
zr{lfqkLJ6hE7hm5Ro|4z)I6#Edd7`keVn@|{8Zhp{c-sZ+2CJQw_dDV@gj1^m-)2{
zn(J-cTaPSLy7&3SQRmt>JtihS)+M}gB{pk!Tsr)eHFEm3o^RzFuLOo&-28=OR=L8*
z$#3NB_z#LSyl4FU>qP(EWp^$~@5y<;-}?D4qvy}d%H?anm^KR>lGpe9ULybZ_uEHi
zf7N_spRWD+=*OWrzrE)650qPGm>)k@F1zJP%(jK!PplOFwN+iX+?Q8k+gHxTH`U)<
z`Pca^XWCi+-RI^-T@9XlKwe4xyUd<9IqORAf83nj|33G;udPMC!+uf2nwPV>?$4k1
z;$r5XbM9R8l$ZI-zw23K*7t?`-bBSUi&u6`-?MW2=>ty%&tKi^-Y5TR*^E7<5#M)S
z_ddNnT4?{d`y10=y!`I=FS&lM(GACn;=3OD_gT$9r;7SZS9Oa1kW+~8yLDh+k>yJR
z)ux2o=XQsGl-O{oWvO4xsgg@ulg{+>=AKvD`ulB7)V6c8ewLK)6P_OOcK37L!+UOC
zo9q3m-!k~$iUo&G2j`k>`Mcd_@oBl6hrdP4c1!Ltocz~co;4`_#(vAEnran>+_yHK
zn#Xoz&)s`-PnX4gU2#tJp{n`vnZY`%<MpO2zpmjM@$Agf9<{iqo_Vic$JT~$l<n4>
zZa>8~bNP>p%kr{R7Wpi@_XKIJ?y2dMx#Ry@A8L725;03-#kCIo&eEXsps|&A)1L%0
zGMH%k9WUH(5&p#g$*sSCy5G<Gn68v`JuB9FZr7T0J&DAyZ7h8Og@3<Zx2tc9u_@h~
zuw;LeP3x!NJXhQA@6uLzD7fzT?JqLx)C!Y3qJD+#t=H?ekP_2V;@2;j_$sJ~c$6;G
z@35@<WO=&y@SJr|yGwR#OTM0$b~iLg*V9&c;mX?9iPyP8tIqR&y{fhQ!L;p?@>ch+
zM{i?bU~L4Q3y}5ss;-Gs$4RT=KYaI-e!Y3P?5Xx&jlcgk*Ke`i^XSo3@$NTK-j|Qf
z@)Y;6wXxY(H+{iVP9C0?Jx9+<ugpwdtX&q~AFzF6X6rgT&-1nOCVCd{w%jHj?d!9m
ztiWWs(tP_`-_>8|Z@=*T-Xc?5oo%yrm41Bt=IwRk1>x@8SEVkc1bE%5I&=BAxW2lI
zs;a8$F_*i2=g)|5nzJ-ZUC+b6y19h;&Cw#;NmX`_pZ!!gV!e6iw`Kck4(@pnET-ot
zmBg+3R3_%_4GlR(7kmGDKW^j0cWxwxemk+LZhCLPV)o0D#%VQw^%xm?`HV}Z-dy0c
zP(ZP5nQJ-EYMrZU9zu$3i2^}Iv#T{zA8hS-y!>43&bq|YFJluoo8C>6v)a3Ab=p+h
zC%8tTf>cCjEfZX{LaJEGGiTKc!}L%t&sBd41yx*?wtfEc_w?UT?dyt9e3zVF5kLFc
z#yKJk7d905)x0s@HM_KO!lL<icYhbl{%UyHpfc0tlbouJ7+;YNKl=^^OU34AC1zLE
z?e^CES><u`M){MN{S%7?^{VQUPaj$M`MUlc(`Bc1ia*L4ME-UTzq5qxo$r0|B%P`#
z)yY3yUX?&r(d_&9qLA<1lJIYtbLz{V-wI}(d#u!O?cSAc$8=y@c~(~VNZMO|YkZ-`
zoSK$+EGaI?ZQnmR(esy%?942me1B!uDzDq8qz-1-G2CZ$yfa_hZ;xK|8O;j8eHq0(
zYwxdKKfB5IecZGc7w@m;+bhz=Rp@x8ZL46V*FDDA5Y|9%tJ}A}-i;8O#Nm3m@9x|Z
z&zP8yAj5FZ<Q{<}yFGQv3cOYp(o>GFI`m`j!$PK(rP4ajcd&oC@HF=Jo_AqC*Qow-
z{jn)>^}n7|p_$q%SDvzCjGglNe9PKhA2+^f{?lWtUB0|?)ugpmUy7fnyouVUy||``
z@f>0t?P9^cki(%24Qd~+F8;Y>(!|bbdjgjW8jI=8FuJl<boK)Ye%lG2$vrdq)75Th
z2)qfCJ9t@KfA;_4eCgClm%iPe5Yc6LZvV$@YdyvEOQ~=Egl13s`^!0gd6-Pl?f>UP
z6px+Rz5nmdC2q?#XP3{Z4T&i!-X%KwN|DsB*RR(8zrCj>=)KvlXJ%<!OBTJIpsGHf
z<CX2K{?_x~*d#Z4s=l80`1$$>Nvn0MSK6$+mipK^PS*G6o+rMsTQ!{)Zhg;hEUq`h
z=tgAw<x?k5b|f2pRg+JS5!rjnyLpL;EYotGsI6Khd-k^qt$edf<CSo*v$B-UWjlri
zo;9TgOV2Ee^|LfvzQ28IU)L^A_WgnTW2=8#t}~o3RObKo_04Mzp`NR^F3vyE^;y5-
zX)3nCy`soJ3pe}u6kQFU6nugA*8j$XuKj%H-z4WRS+^qV!oJT7W>!zO6Sci#zO}!-
z_`2x!%CG#(B$6NQo-JMX=3UOhwM!PIzr2)x?cb3-pE}f6u9WyZ&s9(AQEv8<b*t{*
zOFyyagS#fX`Zun7vqH>%uEaVdxRW(rz=u;ORb7VR!jC=~OQVz%6ZHRW<qJ={`}bwl
zt7Co>81~F_5q9X8vyJ-Sf4~-e)`-Meb_NrvKWWz;o?C8L(J@Hft+%`QmH6cR4YSz~
ziZEQr=m<;p+aq=P%GwMG0UySUpL}8*vv+ao-Z#H7lZ~O_89U@0612twg9BTFiF`x;
zv5Cs=vvzUb?_RS;$JyC=r5)2jk%s(Z6BM06q7x4sa9H{3@GbBf=pE@8hnrv;ihLT%
b5BqQ>)q({)hfXjsFfe$!`njxgN@xNAx&3r#

literal 0
HcmV?d00001

diff --git a/api.rst b/api.rst
index 06082c2f7..2910f7e3a 100644
--- a/api.rst
+++ b/api.rst
@@ -746,6 +746,110 @@ Response:
     }
    }
 
+.. _embed_disamb:
+
+Embedding Disambiguation
+------------------------
+
+For doing resource embedding, PostgREST infers the relationship between two tables based on a foreign key between them.
+However, in cases where there's more than one foreign key between two tables, it's not possible to infer the relationship unambiguosly
+by just specifying the tables names.
+
+Target Disambiguation
+~~~~~~~~~~~~~~~~~~~~~
+
+For example, suppose you have the following ``orders`` and ``addresses`` tables:
+
+.. image:: _static/orders.png
+
+And you try to embed ``orders`` with ``addresses`` (this is the **target**):
+
+.. code-block:: http
+
+  GET /orders?select=*,addresses(*) HTTP/1.1
+
+Since the ``orders`` table has two foreign keys to the ``addresses`` table — an order has a billing address and a shipping address —
+the request is ambiguous and PostgREST will respond with an error:
+
+.. code-block:: http
+
+   HTTP/1.1 300 Multiple Choices
+
+If this happens, you need to disambiguate the request by adding precision to the **target**.
+Instead of the **table name**, you can specify the **foreign key constraint name** or the **column name** that is part of the foreign key.
+
+Let's try first with the **foreign key constraint name**. To make it clearer we can name it:
+
+.. code-block:: postgresql
+
+   ALTER TABLE orders
+      ADD CONSTRAINT billing_address  foreign key (billing_address_id) references addresses(id),
+      ADD CONSTRAINT shipping_address foreign key (shipping_address_id) references addresses(id);
+
+   -- Or if the constraints names were already generated by PostgreSQL we can rename them
+   -- ALTER TABLE orders
+   --   RENAME CONSTRAINT orders_billing_address_id_fkey  TO billing_address,
+   --   RENAME CONSTRAINT orders_shipping_address_id_fkey TO shipping_address;
+
+Now we can unambiguously embed the billing address by specifying the ``billing_address`` foreign key constraint as the **target**.
+
+.. code-block:: http
+
+  GET /orders?select=name,billing_address(name) HTTP/1.1
+
+   [
+    {
+     "name": "Personal Water Filter",
+     "billing_address": {
+       "name": "32 Glenlake Dr.Dearborn, MI 48124"
+     }
+    }
+   ]
+
+Alternatively, you can specify the **column name** of the foreign key constraint as the **target**. This can be aliased to make
+the result more clear.
+
+.. code-block:: http
+
+  GET /orders?select=name,billing_address:billing_address_id(name) HTTP/1.1
+
+   [
+    {
+     "name": "Personal Water Filter",
+     "billing_address": {
+      "name": "32 Glenlake Dr.Dearborn, MI 48124"
+     }
+    }
+   ]
+
+Hint Disambiguation
+~~~~~~~~~~~~~~~~~~~
+
+If specifying the **target** is not enough for unambiguous embedding, you can add a **hint**. For example, let's assume we create
+two VIEWs of ``addresses``: ``central_addresses`` and ``eastern_addresses``.
+
+Since PostgREST supports :ref:`embedding_views` by detecting **source foreign keys** in the views, embedding with the foreign key
+as the **target** will not be enough for an unambiguous embed:
+
+.. code-block:: http
+
+  GET /orders?select=*,billing_address(*) HTTP/1.1
+
+  HTTP/1.1 300 Multiple Choices
+
+For solving this case, in addition to the **target**, we can add a **hint**.
+Here we specify ``central_addresses`` as the **target** and the ``billing_address`` foreign key as the **hint**:
+
+.. code-block:: http
+
+  GET /orders?select=*,central_addresses!billing_address(*) HTTP/1.1
+
+  HTTP/1.1 200 OK
+
+  [ ... ]
+
+Similarly to the **target**, the **hint** can be a **table name**, **foreign key constraint name** or **column name**.
+
 .. _custom_queries:
 
 Custom Queries
diff --git a/erd/README.md b/erd/README.md
new file mode 100644
index 000000000..d71e8e263
--- /dev/null
+++ b/erd/README.md
@@ -0,0 +1,7 @@
+This files were created with https://github.com/BurntSushi/erd/.
+
+You can go download erd from https://github.com/BurntSushi/erd/releases and then do:
+
+```bash
+./erd_static-x86-64 -i erd/film.er -o _static/film.png
+```
diff --git a/erd/orders.er b/erd/orders.er
new file mode 100644
index 000000000..bdd93de2e
--- /dev/null
+++ b/erd/orders.er
@@ -0,0 +1,15 @@
+[Addresses]
+*id
+name
+city
+state
+postal_code
+
+[Orders]
+*id
+name
++billing_address_id
++shipping_address_id
+
+Orders *--1 Addresses
+Orders *--1 Addresses

From da1cf9f76d6c98d81d18372a7df1b1e27f81b450 Mon Sep 17 00:00:00 2001
From: Remo <59358383+monacoremo@users.noreply.github.com>
Date: Sun, 19 Jan 2020 20:17:56 +0100
Subject: [PATCH 294/652] Add postgrest-sessions-example to Example Apps (#294)

---
 ecosystem.rst | 1 +
 1 file changed, 1 insertion(+)

diff --git a/ecosystem.rst b/ecosystem.rst
index 6e0317bdf..1e41ecbd6 100644
--- a/ecosystem.rst
+++ b/ecosystem.rst
@@ -14,6 +14,7 @@ Community Tutorials
 Example Apps
 ------------
 
+* `monacoremo/postgrest-sessions-example <https://github.com/monacoremo/postgrest-sessions-example>`_ - example for cookie-based sessions
 * `tatut/postgrest-ui <https://github.com/tatut/postgrest-ui>`_ - ClojureScript UI components for PostgREST
 * `priyank-purohit/PostGUI <https://github.com/priyank-purohit/PostGUI>`_ - React Material UI admin panel
 * `Qu4tro/pgrst-dev-setup <https://github.com/Qu4tro/pgrst-dev-setup>`_ - docker-compose and tmuxp setup for experimentation.

From 1caf114e5aa960c2b7596e96df64fabf7c65fa8f Mon Sep 17 00:00:00 2001
From: Ivan Gabriele <ivangabriele@users.noreply.github.com>
Date: Thu, 23 Jan 2020 10:07:08 +0100
Subject: [PATCH 295/652] Add postgrester client library

---
 ecosystem.rst | 1 +
 1 file changed, 1 insertion(+)

diff --git a/ecosystem.rst b/ecosystem.rst
index 1e41ecbd6..46cdca03a 100644
--- a/ecosystem.rst
+++ b/ecosystem.rst
@@ -69,6 +69,7 @@ Extensions
 Client-Side Libraries
 ---------------------
 
+* `SocialGouv/postgrester <https://github.com/SocialGouv/postgrester>`_ - JS + Typescript
 * `Kong/py-postgrest <https://github.com/Kong/py-postgrest>`_ - Python
 * `datrium/postgrest-pyclient <https://github.com/datrium/postgrest-pyclient>`_ - Python
 * `tomberek/aor-postgrest-client <https://github.com/tomberek/aor-postgrest-client>`_ - JS, admin-on-rest

From 95fccbb00f89cd9987417e5a0854c58577906523 Mon Sep 17 00:00:00 2001
From: Copple <10214025+kiwicopple@users.noreply.github.com>
Date: Mon, 3 Feb 2020 11:33:39 +0800
Subject: [PATCH 296/652] Add supabase/postgrest-js client library

---
 ecosystem.rst | 1 +
 1 file changed, 1 insertion(+)

diff --git a/ecosystem.rst b/ecosystem.rst
index 46cdca03a..f3e230f53 100644
--- a/ecosystem.rst
+++ b/ecosystem.rst
@@ -69,6 +69,7 @@ Extensions
 Client-Side Libraries
 ---------------------
 
+* `supabase/postgrest-js <https://github.com/supabase/postgrest-js>`_ - Isomorphic JS client
 * `SocialGouv/postgrester <https://github.com/SocialGouv/postgrester>`_ - JS + Typescript
 * `Kong/py-postgrest <https://github.com/Kong/py-postgrest>`_ - Python
 * `datrium/postgrest-pyclient <https://github.com/datrium/postgrest-pyclient>`_ - Python

From f6c67ffdc144ac654e5d62f897f594d86bb95fe0 Mon Sep 17 00:00:00 2001
From: Wouter Scherphof <wouter.scherphof@gmail.com>
Date: Fri, 7 Feb 2020 23:27:41 +0100
Subject: [PATCH 297/652] correction url embedded resources through join tables

---
 api.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/api.rst b/api.rst
index 2910f7e3a..01f35676c 100644
--- a/api.rst
+++ b/api.rst
@@ -600,7 +600,7 @@ PostgREST can also detect relationships going through join tables. Thus you can
 
 .. code-block:: http
 
-  GET /directors?select=films(title,year) HTTP/1.1
+  GET /actors?select=films(title,year) HTTP/1.1
 
 Embedded Filters
 ----------------

From 878752faee2070914d36c56e49c140a4b17d313f Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Sat, 8 Feb 2020 14:52:28 -0500
Subject: [PATCH 298/652] Correct join table paragraph

---
 api.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/api.rst b/api.rst
index 01f35676c..03d91ae30 100644
--- a/api.rst
+++ b/api.rst
@@ -596,7 +596,7 @@ this:
 Embedding through join tables
 -----------------------------
 
-PostgREST can also detect relationships going through join tables. Thus you can request the Actors for Films (which in this case finds the information through Roles). You can also reverse the direction of inclusion, asking for all Directors with each including the list of their Films:
+PostgREST can also detect relationships going through join tables. Thus you can request the Actors for Films (which in this case finds the information through Roles).
 
 .. code-block:: http
 

From c4005ad8f27ad4463fbb48bc0904f04d5fe57341 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Thu, 6 Feb 2020 14:21:43 -0500
Subject: [PATCH 299/652] Change server-proxy-uri 2 openapi-server-proxy-uri

---
 configuration.rst     | 54 +++++++++++++++++++++----------------------
 releases/upcoming.rst |  2 ++
 2 files changed, 29 insertions(+), 27 deletions(-)

diff --git a/configuration.rst b/configuration.rst
index 6317aa4db..fe9b9f7f2 100644
--- a/configuration.rst
+++ b/configuration.rst
@@ -30,29 +30,29 @@ The user specified in the db-uri is also known as the authenticator role. For mo
 
 Here is the full list of configuration parameters.
 
-======================= ======  =========  ========
-Name                    Type    Default    Required
-======================= ======  =========  ========
-db-uri                  String             Y
-db-schema               String             Y
-db-anon-role            String             Y
-db-pool                 Int     10
-db-pool-timeout         Int     10
-db-extra-search-path    String  public
-server-host             String  !4
-server-port             Int     3000
-server-unix-socket      String
-server-unix-socket-mode String  660
-server-proxy-uri        String
-jwt-secret              String
-jwt-aud                 String
-secret-is-base64        Bool    False
-max-rows                Int     ∞
-pre-request             String
-app.settings.*          String
-role-claim-key          String  .role
-raw-media-types         String
-======================= ======  =========  ========
+======================== ======  =========  ========
+Name                     Type    Default    Required
+======================== ======  =========  ========
+db-uri                   String             Y
+db-schema                String             Y
+db-anon-role             String             Y
+db-pool                  Int     10
+db-pool-timeout          Int     10
+db-extra-search-path     String  public
+server-host              String  !4
+server-port              Int     3000
+server-unix-socket       String
+server-unix-socket-mode  String  660
+openapi-server-proxy-uri         String
+jwt-secret               String
+jwt-aud                  String
+secret-is-base64         Bool    False
+max-rows                 Int     ∞
+pre-request              String
+app.settings.*           String
+role-claim-key           String  .role
+raw-media-types          String
+======================== ======  =========  ========
 
 .. _db-uri:
 
@@ -149,15 +149,15 @@ server-unix-socket-mode
 
   `Unix file mode <https://en.wikipedia.org/wiki/File_system_permissions>`_ to be set for the socket specified in :ref:`server-unix-socket`
   Needs to be a valid octal between 600 and 777.
-  
+
   .. code:: bash
 
     server-unix-socket-mode = "660"
 
-.. _server-proxy-uri:
+.. _openapi-server-proxy-uri:
 
-server-proxy-uri
-----------------
+openapi-server-proxy-uri
+------------------------
 
   Overrides the base URL used within the OpenAPI self-documentation hosted at the API root path. Use a complete URI syntax :code:`scheme:[//[user:password@]host[:port]][/]path[?query][#fragment]`. Ex. :code:`https://postgrest.com`
 
diff --git a/releases/upcoming.rst b/releases/upcoming.rst
index 72293b8fa..19572008f 100644
--- a/releases/upcoming.rst
+++ b/releases/upcoming.rst
@@ -24,3 +24,5 @@ Changed
 -------
 
 * :ref:`bulk_call` should now be done by specifying a ``Prefer: params=multiple-objects`` header.
+
+* ``server-proxy-uri`` config option has been renamed to :ref:`openapi-server-proxy-uri`.

From 0ed1d31c7240e9b7dec9d43298609c2dffadc7de Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Fri, 7 Feb 2020 12:52:18 -0500
Subject: [PATCH 300/652] Add embedding disambiguation in upcoming

---
 releases/upcoming.rst | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/releases/upcoming.rst b/releases/upcoming.rst
index 19572008f..8f00c6396 100644
--- a/releases/upcoming.rst
+++ b/releases/upcoming.rst
@@ -16,13 +16,18 @@ Added
 * Support for :ref:`planned_count` and :ref:`estimated_count`.
   |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
 
-* Reference for :ref:`s_proc_embed`.
+* Support for :ref:`Resource Embedding Disambiguation <embed_disamb>`.
+  |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
 
-* Reference for :ref:`mutation_embed`.
+* Documentation reference for :ref:`s_proc_embed`.
+
+* Documentation reference for :ref:`mutation_embed`.
 
 Changed
 -------
 
 * :ref:`bulk_call` should now be done by specifying a ``Prefer: params=multiple-objects`` header.
 
+* Resource Embedding now outputs an error when multiple relationships between two tables are found, see :ref:`embed_disamb`.
+
 * ``server-proxy-uri`` config option has been renamed to :ref:`openapi-server-proxy-uri`.

From 1f40492d64b8fea00c53cadf60d6c141e31732f7 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Fri, 7 Feb 2020 13:23:33 -0500
Subject: [PATCH 301/652] Add request path/method GUC

---
 api.rst               | 183 +++++++++++++++++++++++-------------------
 releases/upcoming.rst |   3 +
 2 files changed, 104 insertions(+), 82 deletions(-)

diff --git a/api.rst b/api.rst
index 03d91ae30..506cf35b9 100644
--- a/api.rst
+++ b/api.rst
@@ -1096,87 +1096,6 @@ You can call overloaded functions with different number of arguments.
 .. code-block:: http
 
   GET /rpc/rental_duration?customer_id=232&from_date=2018-07-01 HTTP/1.1
-
-Accessing Request Headers, Cookies and JWT claims
--------------------------------------------------
-
-Stored procedures can access request headers, cookies and jwt claims by reading GUC variables set by PostgREST per request. They are named :code:`request.header.XYZ`, :code:`request.cookie.XYZ` and :code:`request.jwt.claim.XYZ`.
-
-.. code-block:: postgresql
-
-  -- To read the value of the Origin request header:
-  SELECT current_setting('request.header.origin', true);
-  -- To read the value of sessionId in a cookie:
-  SELECT current_setting('request.cookie.sessionId', true);
-  -- To read the value of the email claim in a jwt:
-  SELECT current_setting('request.jwt.claim.email', true);
-
-.. note::
-
-  ``request.jwt.claim.role`` defaults to the value of :ref:`db-anon-role`.
-
-Setting Response Headers
-------------------------
-
-PostgREST reads the ``response.headers`` SQL variable to add extra headers to the HTTP response. Stored procedures can modify this variable. For instance, this statement would add caching headers to the response:
-
-.. code-block:: sql
-
-  -- tell client to cache response for two days
-
-  SET LOCAL "response.headers" =
-    '[{"Cache-Control": "public"}, {"Cache-Control": "max-age=259200"}]';
-
-Notice that the variable should be set to an *array* of single-key objects rather than a single multiple-key object. This is because headers such as ``Cache-Control`` or ``Set-Cookie`` need to be repeated when setting multiple values and an object would not allow the repeated key.
-
-Errors and HTTP Status Codes
-----------------------------
-
-Stored procedures can return non-200 HTTP status codes by raising SQL exceptions. For instance, here's a saucy function that always responds with an error:
-
-.. code-block:: postgresql
-
-  CREATE OR REPLACE FUNCTION just_fail() RETURNS void
-    LANGUAGE plpgsql
-    AS $$
-  BEGIN
-    RAISE EXCEPTION 'I refuse!'
-      USING DETAIL = 'Pretty simple',
-            HINT = 'There is nothing you can do.';
-  END
-  $$;
-
-Calling the function returns HTTP 400 with the body
-
-.. code-block:: json
-
-  {
-    "message":"I refuse!",
-    "details":"Pretty simple",
-    "hint":"There is nothing you can do.",
-    "code":"P0001"
-  }
-
-One way to customize the HTTP status code is by raising particular exceptions according to the PostgREST :ref:`error to status code mapping <status_codes>`. For example, :code:`RAISE insufficient_privilege` will respond with HTTP 401/403 as appropriate.
-
-For even greater control of the HTTP status code, raise an exception of the ``PTxyz`` type. For instance to respond with HTTP 402, raise 'PT402':
-
-.. code-block:: sql
-
-  RAISE sqlstate 'PT402' using
-    message = 'Payment Required',
-    detail = 'Quota exceeded',
-    hint = 'Upgrade your plan';
-
-Returns:
-
-.. code-block:: http
-
-  HTTP/1.1 402 Payment Required
-  Content-Type: application/json; charset=utf-8
-
-  {"hint":"Upgrade your plan","details":"Quota exceeded"}
-
 .. _insert_update:
 
 Insertions / Updates
@@ -1444,10 +1363,110 @@ You can use a tool like `Swagger UI <http://swagger.io/swagger-ui/>`_ to create
 
   The OpenAPI information can go out of date as the schema changes under a running server. To learn how to refresh the cache see :ref:`schema_reloading`.
 
+HTTP Logic
+==========
+
+.. _guc_req_headers_cookies_claims:
+
+Accessing Request Headers, Cookies and JWT claims
+-------------------------------------------------
+
+You can access request headers, cookies and jwt claims by reading GUC variables set by PostgREST per request. They are named :code:`request.header.XYZ`, :code:`request.cookie.XYZ` and :code:`request.jwt.claim.XYZ`.
+
+.. code-block:: postgresql
+
+  -- To read the value of the Origin request header:
+  SELECT current_setting('request.header.origin', true);
+  -- To read the value of sessionId in a cookie:
+  SELECT current_setting('request.cookie.sessionId', true);
+  -- To read the value of the email claim in a jwt:
+  SELECT current_setting('request.jwt.claim.email', true);
+
+.. note::
+
+  ``request.jwt.claim.role`` defaults to the value of :ref:`db-anon-role`.
+
+.. _guc_req_path_method:
+
+Accessing Request Path and Method
+---------------------------------
+
+You can also access the request path and method with :code:`request.path` and :code:`request.method`.
+
+.. code-block:: postgresql
+
+  -- You can get the path of the request with
+  SELECT current_setting('request.path', true);
+
+  -- You can get the method of the request with
+  SELECT current_setting('request.method', true);
+
+Setting Response Headers
+------------------------
+
+PostgREST reads the ``response.headers`` SQL variable to add extra headers to the HTTP response. Stored procedures can modify this variable. For instance, this statement would add caching headers to the response:
+
+.. code-block:: sql
+
+  -- tell client to cache response for two days
+
+  SET LOCAL "response.headers" =
+    '[{"Cache-Control": "public"}, {"Cache-Control": "max-age=259200"}]';
+
+Notice that the variable should be set to an *array* of single-key objects rather than a single multiple-key object. This is because headers such as ``Cache-Control`` or ``Set-Cookie`` need to be repeated when setting multiple values and an object would not allow the repeated key.
+
+Errors and HTTP Status Codes
+----------------------------
+
+Stored procedures can return non-200 HTTP status codes by raising SQL exceptions. For instance, here's a saucy function that always responds with an error:
+
+.. code-block:: postgresql
+
+  CREATE OR REPLACE FUNCTION just_fail() RETURNS void
+    LANGUAGE plpgsql
+    AS $$
+  BEGIN
+    RAISE EXCEPTION 'I refuse!'
+      USING DETAIL = 'Pretty simple',
+            HINT = 'There is nothing you can do.';
+  END
+  $$;
+
+Calling the function returns HTTP 400 with the body
+
+.. code-block:: json
+
+  {
+    "message":"I refuse!",
+    "details":"Pretty simple",
+    "hint":"There is nothing you can do.",
+    "code":"P0001"
+  }
+
+One way to customize the HTTP status code is by raising particular exceptions according to the PostgREST :ref:`error to status code mapping <status_codes>`. For example, :code:`RAISE insufficient_privilege` will respond with HTTP 401/403 as appropriate.
+
+For even greater control of the HTTP status code, raise an exception of the ``PTxyz`` type. For instance to respond with HTTP 402, raise 'PT402':
+
+.. code-block:: sql
+
+  RAISE sqlstate 'PT402' using
+    message = 'Payment Required',
+    detail = 'Quota exceeded',
+    hint = 'Upgrade your plan';
+
+Returns:
+
+.. code-block:: http
+
+  HTTP/1.1 402 Payment Required
+  Content-Type: application/json; charset=utf-8
+
+  {"hint":"Upgrade your plan","details":"Quota exceeded"}
+
 .. _status_codes:
 
 HTTP Status Codes
-=================
+-----------------
 
 PostgREST translates `PostgreSQL error codes <https://www.postgresql.org/docs/current/static/errcodes-appendix.html>`_ into HTTP status as follows:
 
diff --git a/releases/upcoming.rst b/releases/upcoming.rst
index 8f00c6396..cf8bb706c 100644
--- a/releases/upcoming.rst
+++ b/releases/upcoming.rst
@@ -13,6 +13,9 @@ Added
 * Support for HTTP HEAD requests.
   |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
 
+* Add GUCs for :ref:`guc_req_path_method`.
+  |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
+
 * Support for :ref:`planned_count` and :ref:`estimated_count`.
   |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
 

From 5fd86e682bea3f6ff9256c8f67de21125805c0f6 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Mon, 10 Feb 2020 12:00:04 -0500
Subject: [PATCH 302/652] Add setting headers via pre-request

---
 api.rst               | 37 +++++++++++++++++++++++++++++++++++++
 releases/upcoming.rst | 12 ++++++------
 2 files changed, 43 insertions(+), 6 deletions(-)

diff --git a/api.rst b/api.rst
index 506cf35b9..dd234b769 100644
--- a/api.rst
+++ b/api.rst
@@ -1415,6 +1415,43 @@ PostgREST reads the ``response.headers`` SQL variable to add extra headers to th
 
 Notice that the variable should be set to an *array* of single-key objects rather than a single multiple-key object. This is because headers such as ``Cache-Control`` or ``Set-Cookie`` need to be repeated when setting multiple values and an object would not allow the repeated key.
 
+.. _pre_req_headers:
+
+Setting headers via pre-request
+-------------------------------
+
+By using a :ref:`pre-request` function, you can add headers to GET/POST/PATCH/PUT/DELETE responses.
+As an example, let's add some cache headers for all requests that come from an Internet Explorer(6 or 7) browser.
+
+.. code-block:: postgresql
+
+   create or replace function custom_headers() returns void as $$
+   declare
+     user_agent text := current_setting('request.header.user-agent', true);
+   begin
+     if user_agent similar to '%MSIE (6.0|7.0)%' then
+       perform set_config('response.headers',
+         '[{"Cache-Control": "no-cache, no-store, must-revalidate"}]', false);
+     end if;
+   end; $$ language plpgsql;
+
+   -- set this function on postgrest.conf
+   -- pre-request = custom_headers
+
+Now when you make a GET request to a table or view, you'll get the cache headers.
+
+.. code-block:: http
+
+  GET /people HTTP/1.1
+  User-Agent: Mozilla/4.01 (compatible; MSIE 6.0; Windows NT 5.1)
+
+  HTTP/1.1 200 OK
+  Content-Type: application/json; charset=utf-8
+  Cache-Control: no-cache, no-store, must-revalidate
+
+  ...
+
+
 Errors and HTTP Status Codes
 ----------------------------
 
diff --git a/releases/upcoming.rst b/releases/upcoming.rst
index cf8bb706c..4da513f6e 100644
--- a/releases/upcoming.rst
+++ b/releases/upcoming.rst
@@ -10,18 +10,18 @@ These are changes yet unreleased. If you'd like to try them out before a new off
 Added
 -----
 
-* Support for HTTP HEAD requests.
-  |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
-
-* Add GUCs for :ref:`guc_req_path_method`.
-  |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
-
 * Support for :ref:`planned_count` and :ref:`estimated_count`.
   |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
 
 * Support for :ref:`Resource Embedding Disambiguation <embed_disamb>`.
   |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
 
+* HTTP improvements -- `@steve-chavez <https://github.com/steve-chavez>`_
+
+   + Support for HTTP HEAD requests.
+   + GUCs for :ref:`guc_req_path_method`.
+   + Support for :ref:`pre_req_headers`.
+
 * Documentation reference for :ref:`s_proc_embed`.
 
 * Documentation reference for :ref:`mutation_embed`.

From 87528412c0e24111349b7a2b07841f496a96876f Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Tue, 11 Feb 2020 14:39:00 -0500
Subject: [PATCH 303/652] Add overriding provided headers note

---
 api.rst | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/api.rst b/api.rst
index dd234b769..3e8bbad05 100644
--- a/api.rst
+++ b/api.rst
@@ -1415,6 +1415,10 @@ PostgREST reads the ``response.headers`` SQL variable to add extra headers to th
 
 Notice that the variable should be set to an *array* of single-key objects rather than a single multiple-key object. This is because headers such as ``Cache-Control`` or ``Set-Cookie`` need to be repeated when setting multiple values and an object would not allow the repeated key.
 
+.. note::
+
+  PostgREST provided headers such as ``Content-Type``, ``Location``, etc. can be overriden this way.
+
 .. _pre_req_headers:
 
 Setting headers via pre-request

From 2aae1a389432cb9d6fa9399ab62fbd869c075586 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Thu, 13 Feb 2020 11:24:28 -0500
Subject: [PATCH 304/652] Add unix socket changes

---
 releases/upcoming.rst | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/releases/upcoming.rst b/releases/upcoming.rst
index 4da513f6e..ae5ad4225 100644
--- a/releases/upcoming.rst
+++ b/releases/upcoming.rst
@@ -16,6 +16,9 @@ Added
 * Support for :ref:`Resource Embedding Disambiguation <embed_disamb>`.
   |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
 
+* Support for user defined socket permission via :ref:`server-unix-socket-mode` config option
+  |br| -- `@Dansvidania <https://github.com/Dansvidania>`_
+
 * HTTP improvements -- `@steve-chavez <https://github.com/steve-chavez>`_
 
    + Support for HTTP HEAD requests.
@@ -34,3 +37,5 @@ Changed
 * Resource Embedding now outputs an error when multiple relationships between two tables are found, see :ref:`embed_disamb`.
 
 * ``server-proxy-uri`` config option has been renamed to :ref:`openapi-server-proxy-uri`.
+
+* Default Unix Socket file mode from 755 to 660

From 1d54b8b07d74f48ddf64ff3c2ab0feb858a610f3 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Thu, 13 Feb 2020 11:42:15 -0500
Subject: [PATCH 305/652] Add fixes to upcoming

---
 releases/upcoming.rst | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)

diff --git a/releases/upcoming.rst b/releases/upcoming.rst
index ae5ad4225..fc7b7b3ef 100644
--- a/releases/upcoming.rst
+++ b/releases/upcoming.rst
@@ -29,6 +29,24 @@ Added
 
 * Documentation reference for :ref:`mutation_embed`.
 
+Fixed
+-----
+
+* Allow embedding a VIEW when its source table foreign key is UNIQUE
+  |br| -- `@bwbroersma <https://github.com/bwbroersma>`_
+
+* ``Accept: application/vnd.pgrst.object+json`` behavior is now enforced for POST/PATCH/DELETE regardless of ``Prefer: return=minimal``
+  |br| -- `@dwagin <https://github.com/dwagin>`_
+
+* Fix self join resource embedding on PATCH
+  |br| -- `@herulume <https://github.com/herulume>`_, `@steve-chavez <https://github.com/steve-chavez>`_
+
+* Allow PATCH/DELETE without ``Prefer: return=minimal`` on tables with no SELECT privileges
+  |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
+
+* Fix many to many resource embedding for RPC/PATCH
+  |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
+
 Changed
 -------
 

From f34a480a99b4e33fd15f5f6375a37911a05e6c1f Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Thu, 13 Feb 2020 13:32:31 -0500
Subject: [PATCH 306/652] Add misc header improvements to upcoming

---
 api.rst               | 2 ++
 releases/upcoming.rst | 4 +++-
 2 files changed, 5 insertions(+), 1 deletion(-)

diff --git a/api.rst b/api.rst
index 3e8bbad05..17960fa48 100644
--- a/api.rst
+++ b/api.rst
@@ -1401,6 +1401,8 @@ You can also access the request path and method with :code:`request.path` and :c
   -- You can get the method of the request with
   SELECT current_setting('request.method', true);
 
+.. _guc_resp_hdrs:
+
 Setting Response Headers
 ------------------------
 
diff --git a/releases/upcoming.rst b/releases/upcoming.rst
index fc7b7b3ef..de5e751cd 100644
--- a/releases/upcoming.rst
+++ b/releases/upcoming.rst
@@ -19,11 +19,13 @@ Added
 * Support for user defined socket permission via :ref:`server-unix-socket-mode` config option
   |br| -- `@Dansvidania <https://github.com/Dansvidania>`_
 
-* HTTP improvements -- `@steve-chavez <https://github.com/steve-chavez>`_
+* HTTP logic improvements -- `@steve-chavez <https://github.com/steve-chavez>`_
 
    + Support for HTTP HEAD requests.
    + GUCs for :ref:`guc_req_path_method`.
    + Support for :ref:`pre_req_headers`.
+   + Allow overriding provided headers(Content-Type, Location, etc) by :ref:`guc_resp_hdrs`
+   + Access to the ``Authorization`` header value through ``request.header.authorization``
 
 * Documentation reference for :ref:`s_proc_embed`.
 

From 53f35f638c5203d50bf63db0090fb224cb8fb2dc Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Fri, 14 Feb 2020 14:14:32 -0500
Subject: [PATCH 307/652] Add on_conflict query parameter

---
 api.rst               | 26 +++++++++++++++++++++++---
 releases/upcoming.rst |  3 +++
 2 files changed, 26 insertions(+), 3 deletions(-)

diff --git a/api.rst b/api.rst
index 17960fa48..fb478dc12 100644
--- a/api.rst
+++ b/api.rst
@@ -1218,7 +1218,7 @@ In this case, only **source**, **publication_date** and **figure** will be inser
 Using this also has the side-effect of being more efficient for :ref:`bulk_insert` since PostgREST will not process the JSON and
 it'll send it directly to PostgreSQL.
 
-Upsert
+UPSERT
 ------
 
 You can make an UPSERT with :code:`POST` and the :code:`Prefer: resolution=merge-duplicates` header:
@@ -1234,11 +1234,31 @@ You can make an UPSERT with :code:`POST` and the :code:`Prefer: resolution=merge
     { "id": 3, "name": "New employee 3", "salary": 50000 }
   ]
 
-UPSERT operates based on the primary key columns, you must specify all of them. You can also choose to ignore the duplicates with :code:`Prefer: resolution=ignore-duplicates`. UPSERT works best when the primary key is natural, but it's also possible to use it if the primary key is surrogate (example: "id serial primary key"). For more details read `this issue <https://github.com/PostgREST/postgrest/issues/1118>`_.
+By default, UPSERT operates based on the primary key columns, you must specify all of them. You can also choose to ignore the duplicates with :code:`Prefer: resolution=ignore-duplicates`. This works best when the primary key is natural, but it's also possible to use it if the primary key is surrogate (example: "id serial primary key"). For more details read `this issue <https://github.com/PostgREST/postgrest/issues/1118>`_.
 
 .. important::
   After creating a table or changing its primary key, you must refresh PostgREST schema cache for UPSERT to work properly. To learn how to refresh the cache see :ref:`schema_reloading`.
 
+.. _on_conflict:
+
+On Conflict
+~~~~~~~~~~~
+
+By specifying the ``on_conflict`` query parameter, you can make UPSERT work on a column(s) that has a UNIQUE constraint.
+
+.. code-block:: http
+
+  POST /employees?on_conflict=name HTTP/1.1
+  Prefer: resolution=merge-duplicates
+
+  [
+    { "name": "Old employee 1", "salary": 40000 },
+    { "name": "Old employee 2", "salary": 52000 },
+    { "name": "New employee 3", "salary": 60000 }
+  ]
+
+PUT
+~~~
 
 A single row UPSERT can be done by using :code:`PUT` and filtering the primary key columns with :code:`eq`:
 
@@ -1252,7 +1272,7 @@ All the columns must be specified in the request body, including the primary key
 
 .. note::
 
-  This feature is only available starting from PostgreSQL 9.5 since it uses the `ON CONFLICT clause <https://www.postgresql.org/docs/9.5/static/sql-insert.html#SQL-ON-CONFLICT>`_.
+  Upsert features are only available starting from PostgreSQL 9.5 since it uses the `ON CONFLICT clause <https://www.postgresql.org/docs/9.5/static/sql-insert.html#SQL-ON-CONFLICT>`_.
 
 .. _delete:
 
diff --git a/releases/upcoming.rst b/releases/upcoming.rst
index de5e751cd..858861f46 100644
--- a/releases/upcoming.rst
+++ b/releases/upcoming.rst
@@ -10,6 +10,9 @@ These are changes yet unreleased. If you'd like to try them out before a new off
 Added
 -----
 
+* Support for the :ref:`on_conflict <on_conflict>` query parameter to UPSERT based on a unique constraint.
+  |br| -- `@ykst <https://github.com/ykst>`_
+
 * Support for :ref:`planned_count` and :ref:`estimated_count`.
   |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
 

From 66e0e88539ffab842f4dce4111e40f835008f367 Mon Sep 17 00:00:00 2001
From: H20-17 <51759305+H20-17@users.noreply.github.com>
Date: Tue, 18 Feb 2020 17:04:17 -0500
Subject: [PATCH 308/652] Clarify function privileges section (#303)

* Add best_practices.rst file

* Move function privileges to best_practices.rst
---
 api.rst            | 27 +--------------------------
 best_practices.rst | 22 ++++++++++++++++++++++
 index.rst          |  7 +++++++
 3 files changed, 30 insertions(+), 26 deletions(-)
 create mode 100644 best_practices.rst

diff --git a/api.rst b/api.rst
index fb478dc12..0cb77ee17 100644
--- a/api.rst
+++ b/api.rst
@@ -1052,32 +1052,6 @@ A function that returns a table type response can be shaped using the same filte
 
   GET /rpc/best_films_2017?rating=gt.8&order=title.desc HTTP/1.1
 
-.. _func_privs:
-
-Function privileges
--------------------
-
-By default, a function is executed with the privileges of the user who calls it. This means that the user has to have all permissions to do the operations the procedure performs.
-
-Another option is to define the function with the :code:`SECURITY DEFINER` option. Then only one permission check will take place, the permission to call the function, and the operations in the function will have the authority of the user who owns the function itself. See `PostgreSQL documentation <https://www.postgresql.org/docs/current/static/sql-createfunction.html#SQL-CREATEFUNCTION-SECURITY>`_ for more details.
-
-.. warning::
-
-  Unlike tables/views, functions privileges work as a blacklist, so they're executable for all the roles by default. You can workaround this by revoking the PUBLIC privileges of the function and then granting privileges to specific roles:
-
-  .. code-block:: postgres
-
-    REVOKE ALL PRIVILEGES ON FUNCTION private_func() FROM PUBLIC;
-    GRANT EXECUTE ON FUNCTION private_func() TO a_role;
-
-  Also to avoid doing ``REVOKE`` on every function you can enable this behavior by default with:
-
-  .. code-block:: postgres
-
-    ALTER DEFAULT PRIVILEGES REVOKE EXECUTE ON FUNCTIONS FROM PUBLIC;
-
-  See `PostgreSQL alter default privileges <https://www.postgresql.org/docs/current/static/sql-alterdefaultprivileges.html>`_ for more details.
-
 Overloaded functions
 --------------------
 
@@ -1591,3 +1565,4 @@ PostgREST translates `PostgreSQL error codes <https://www.postgresql.org/docs/cu
 +--------------------------+-------------------------+---------------------------------+
 | other                    | 400                     |                                 |
 +--------------------------+-------------------------+---------------------------------+
+
diff --git a/best_practices.rst b/best_practices.rst
new file mode 100644
index 000000000..c8ecdbc09
--- /dev/null
+++ b/best_practices.rst
@@ -0,0 +1,22 @@
+.. _func_privs:
+
+Function privileges
+-------------------
+
+By default, when a function is created, the right to execute it is is not restricted by role, but this probably isn't consistent with best practices for an API design. If you want functions to be executable exclusively by a given role upon their creation, issue psql instructions similar to this:
+
+.. code-block:: postgres
+
+  -- To stop functions from being universally executable upon creation (note the IN SCHEMA part).
+  ALTER DEFAULT PRIVILEGES IN SCHEMA api REVOKE EXECUTE ON FUNCTIONS FROM PUBLIC;
+  -- To grant execution rights for functions to a specific role upon function creation.
+  ALTER DEFAULT PRIVILEGES IN SCHEMA api GRANT EXECUTE ON FUNCTIONS TO my_role;
+
+See `PostgreSQL alter default privileges <https://www.postgresql.org/docs/current/static/sql-alterdefaultprivileges.html>`_ for more details.
+
+The foregoing example may not be appropriate in all situations. For instance you may have a situation where different functions are intended to be called by different roles. In that case you will `not` want to grant `EXECUTE` to one specific role by default. Instead you will want to manually grant executability on a case by case basis.
+
+By default, a function is executed with the privileges of the user who calls it. This means that the user has to have all permissions to do the operations the procedure performs.
+
+Another option is to define the function with the :code:`SECURITY DEFINER` option. Then only one permission check will take place, the permission to call the function, and the operations in the function will have the authority of the user who owns the function itself. See `PostgreSQL documentation <https://www.postgresql.org/docs/current/static/sql-createfunction.html#SQL-CREATEFUNCTION-SECURITY>`_ for more details.
+
diff --git a/index.rst b/index.rst
index eb7f581f9..dadf69322 100644
--- a/index.rst
+++ b/index.rst
@@ -150,9 +150,16 @@ Explanations of some key concepts in PostgREST.
 
    admin.rst
 
+.. toctree::
+   :caption: Best Practices
+   :hidden:
+
+   best_practices.rst
+
 - :doc:`Authentication <auth>`
 - :doc:`Installation <install>`
 - :doc:`Administration <admin>`
+- :doc:`Best Practices <best_practices>`
 
 Ecosystem
 ---------

From 0d3dc8509c845b54a35e0e252d501bca45c7de46 Mon Sep 17 00:00:00 2001
From: Steve Chavez <stevechavezast@gmail.com>
Date: Thu, 12 Mar 2020 10:39:15 -0500
Subject: [PATCH 309/652] Add sompani to production list (#306)

---
 index.rst | 1 +
 1 file changed, 1 insertion(+)

diff --git a/index.rst b/index.rst
index dadf69322..75f5c5bc1 100644
--- a/index.rst
+++ b/index.rst
@@ -192,6 +192,7 @@ In Production
 
 Here are some companies that use PostgREST in production.
 
+* `Sompani <https://www.sompani.com/>`_
 * `Datrium <https://www.datrium.com>`_
 * `Nimbus <https://nimbusforwork.com/>`_
   - See how Nimbus uses PostgREST in `Paul Copplestone's blog post <https://paul.copplest.one/blog/nimbus-tech-2019-04.html>`_.

From a34353653904311fb21d3033f25ced88f07baaf2 Mon Sep 17 00:00:00 2001
From: yang <27681135@qq.com>
Date: Fri, 13 Mar 2020 01:58:07 +0800
Subject: [PATCH 310/652] Add type basic_auth.jwt_token. (#308)

Or the function login will show error.
---
 auth.rst | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/auth.rst b/auth.rst
index 4b770cb24..fc05b2822 100644
--- a/auth.rst
+++ b/auth.rst
@@ -406,6 +406,11 @@ As described in `JWT from SQL`_, we'll create a JWT inside our login function. N
 
 .. code-block:: postgres
 
+  -- add type
+  CREATE TYPE basic_auth.jwt_token AS (
+    token text
+  );
+
   -- login should be on your exposed schema
   create or replace function
   login(email text, pass text) returns basic_auth.jwt_token as $$

From 334dda611c4230c3c3758c4b051b14eacf294077 Mon Sep 17 00:00:00 2001
From: Patrik Keller <p@keller-re.de>
Date: Tue, 17 Mar 2020 18:59:40 +0100
Subject: [PATCH 311/652] Tutorial: Providing images for <img> (#307)

---
 how-tos/providing-images-for-img.rst | 126 +++++++++++++++++++++++++++
 index.rst                            |   1 +
 2 files changed, 127 insertions(+)
 create mode 100644 how-tos/providing-images-for-img.rst

diff --git a/how-tos/providing-images-for-img.rst b/how-tos/providing-images-for-img.rst
new file mode 100644
index 000000000..8bb510087
--- /dev/null
+++ b/how-tos/providing-images-for-img.rst
@@ -0,0 +1,126 @@
+Providing images for <img>
+==========================
+
+:author: `pkel <https://github.com/pkel>`_
+
+In this how-to, you will learn how to create an endpoint for providing images to HTML :code:`<img>` tags without client side javascript.
+The resulting HTML might look like this:
+
+.. code-block:: html
+
+   <img src="http://host/files/42/cats.jpeg" alt="Cute Kittens"/>
+
+In fact, the presented technique is suitable for providing not only images, but arbitrary files.
+
+We will start with a minimal example that highlights the general concept.
+Afterwards we present are more detailed solution that fixes a few shortcomings of the first approach.
+
+Minimal Example
+---------------
+
+PostgREST returns binary data on requests that set the :code:`Accept: application/octet-stream` header.
+The general idea is to configure the reverse proxy in front of the API to set this header for all requests to :code:`/files/`.
+We will show how to achieve this using Nginx.
+
+First, we need a public table for storing the files.
+
+.. code-block:: postgres
+
+   create table files(
+     id   int primary key
+   , blob bytea
+   );
+
+Let's assume this table contains an image of two cute kittens with id 42.
+We can retrieve this image in binary format from our PostgREST API by requesting :code:`/files?select=blob&id=eq.42` with the :code:`Accept: application/octet-stream` header.
+Unfortunately, putting the URL into the :code:`src` of an :code:`<img>` tag will not work.
+That's because browsers do not send the required header.
+
+Luckily, we can configure our `Nginx reverse proxy <../admin.html>`_ to fix this problem for us.
+We assume that PostgREST is running on port 3000.
+We provide a new location :code:`/files/` that redirects requests to our endpoint with the :code:`Accept` header set to :code:`application/octet-stream`.
+
+.. code-block:: nginx
+
+   server {
+     # rest of reverse proxy and web server configuration
+     ...
+
+     location /files/ {
+       # /files/<id>/* ---> /files?select=blob&id=eq.<id>
+       rewrite /files/([^/]+).*  /files?select=blob&id=eq.$1  break;
+       # if id is missing
+       return 404;
+       # request binary output
+       proxy_set_header Accept application/octet-stream;
+       # usual proxy setup
+       proxy_hide_header Content-Location;
+       add_header Content-Location /api/$upstream_http_content_location;
+       proxy_set_header  Connection "";
+       proxy_http_version 1.1;
+       proxy_pass http://localhost:3000/;
+     }
+
+With this setup, we can request the cat image at :code:`localhost/files/42/cats.jpeg` without setting any headers.
+In fact, you can replace :code:`cats.jpeg` with any other filename or simply omit it.
+Putting the URL into the :code:`src` of an :code:`<img>` tag should now work as expected.
+
+Improved Version
+----------------
+
+The basic solution has some shortcomings:
+
+1.  The response :code:`Content-Type` header is set to :code:`application/octet-stream`.
+    This might confuse clients and users.
+2.  Download requests (e.g. Right Click -> Save Image As) to :code:`files/42` will propose :code:`42` as filename.
+    This might confuse users.
+3.  Requests to the binary endpoint are not cached.
+    This will cause unnecessary load on the database.
+
+The following improved version addresses these problems.
+First, we store the media types and names of our files in the database.
+
+.. code-block:: postgres
+
+   create table files(
+     id   int primary key
+   , type text
+   , name text
+   , blob bytea
+   );
+
+Next, we set up an RPC endpoint that sets the content type and filename.
+We use this opportunity to configure some basic, client-side caching.
+For production, you probably want to configure additional caches, e.g. on the reverse proxy.
+
+.. code-block:: postgres
+
+   create function file(id int) returns bytea as
+   $$
+     declare headers text;
+     declare blob bytea;
+     begin
+       select format(
+         '[{"Content-Type": "%s"},'
+          '{"Content-Disposition": "inline; filename=\"%s\""},'
+          '{"Cache-Control": "max-age=259200"}]'
+         , files.type, files.name)
+       from files where files.id = file.id into headers;
+       perform set_config('response.headers', headers, true);
+       select files.blob from files where files.id = file.id into blob;
+       if found
+       then return(blob);
+       else raise sqlstate 'PT404' using
+         message = 'NOT FOUND',
+         detail = 'File not found',
+         hint = format('%s seems to be an invalid file id', file.id);
+       end if;
+     end
+   $$ language plpgsql;
+
+With this, we can obtain the cat image from :code:`/rpc/file?id=42`.
+Consequently, we have to replace our previous rewrite rule in the Nginx recipe with the following.
+
+.. code-block:: nginx
+
+   rewrite /files/([^/]+).*  /rpc/file?id=$1  break;
diff --git a/index.rst b/index.rst
index 75f5c5bc1..0f7deaea9 100644
--- a/index.rst
+++ b/index.rst
@@ -126,6 +126,7 @@ These are recipes that'll help you address specific use-cases.
 
 - :doc:`how-tos/casting-type-to-custom-json`
 - :doc:`how-tos/embedding-table-from-another-schema`
+- :doc:`how-tos/providing-images-for-img`
 
 Topic guides
 ------------

From e23b7afa3c089201438fad08c6e1a571d60ded39 Mon Sep 17 00:00:00 2001
From: Duncan Ogilvie <mr.exodia.tpodt@gmail.com>
Date: Mon, 23 Mar 2020 17:48:09 +0100
Subject: [PATCH 312/652] Fix the 'Roles for Each Web User' example (#313)

Add missing `ALTER TABLE ... ENABLE ROW LEVEL SECURITY;`
---
 auth.rst | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/auth.rst b/auth.rst
index fc05b2822..b762bc021 100644
--- a/auth.rst
+++ b/auth.rst
@@ -60,6 +60,8 @@ You can use row-level security to flexibly restrict visibility and access for th
     message_subject VARCHAR(64) NOT NULL,
     message_body    TEXT
   );
+  
+  ALTER TABLE chat ENABLE ROW LEVEL SECURITY;
 
 We want to enforce a policy that ensures a user can see only those messages sent by him or intended for him. Also we want to prevent a user from forging the message_from column with another person's name.
 
@@ -95,7 +97,7 @@ SQL code can access claims through GUC variables set by PostgREST per request. F
 
   current_setting('request.jwt.claim.email', true)
 
-This allows JWT generation services to include extra information and your database code to react to it. For instance the RLS example could be modified to use this current_setting rather than current_user.  The second 'true' argument tells current_setting to return NULL if the setting is missing from the current configuration.
+This allows JWT generation services to include extra information and your database code to react to it. For instance the RLS example could be modified to use this current_setting rather than current_user. The second 'true' argument tells current_setting to return NULL if the setting is missing from the current configuration.
 
 Hybrid User-Group Roles
 ~~~~~~~~~~~~~~~~~~~~~~~

From 36c453d6dedfd816d887d92a4159cd18e90e3137 Mon Sep 17 00:00:00 2001
From: Sam Khawase <215221+samkhawase@users.noreply.github.com>
Date: Mon, 30 Mar 2020 19:48:20 +0200
Subject: [PATCH 313/652] Added the link to tutorial to configure and integrate
 Auth0 to PostgREST (#312)

---
 ecosystem.rst | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/ecosystem.rst b/ecosystem.rst
index f3e230f53..feb09410e 100644
--- a/ecosystem.rst
+++ b/ecosystem.rst
@@ -9,6 +9,8 @@ Community Tutorials
 * `PostgREST + PostGIS API tutorial in 5 minutes <https://gis-ops.com/postgrest-postgis-api-tutorial-in-5-minutes>`_ -
   In this tutorial, GIS • OPS shows how to perform PostGIS calculations through PostgREST :ref:`s_procs` interface.
 
+* `PostgREST + Auth0: Create REST API in mintutes and add social login using Auth0 <https://samkhawase.com/blog/postgrest_introduction/>`_ - A step-by-step tutorial to show how to Dockerize and integrate Auth0 to PostgREST service. 
+
 .. _eco_example_apps:
 
 Example Apps

From b7ee8f1cf0e2705a143fc246702d9a999278ceae Mon Sep 17 00:00:00 2001
From: fiatjaf <fiatjaf@gmail.com>
Date: Wed, 1 Apr 2020 13:00:05 -0300
Subject: [PATCH 314/652] mention that JSON operators work for row filtering
 (#314)

---
 api.rst | 11 +++++++----
 1 file changed, 7 insertions(+), 4 deletions(-)

diff --git a/api.rst b/api.rst
index 0cb77ee17..d05788ce2 100644
--- a/api.rst
+++ b/api.rst
@@ -200,17 +200,20 @@ You can specify a path for a ``json`` or ``jsonb`` column using the arrow operat
   GET /people?select=id,json_data->>blood_type,json_data->phones HTTP/1.1
 
   [
-    { "id": 1, "blood_type": "A+", "phones": [{"country_code": "61", "number": "917-929-5745"}] },
+    { "id": 1, "blood_type": "A-", "phones": [{"country_code": "61", "number": "917-929-5745"}] },
     { "id": 2, "blood_type": "O+", "phones": [{"country_code": "43", "number": "512-446-4988"}, {"country_code": "43", "number": "213-891-5979"}] }
   ]
 
+That also works with filters:
+
 .. code-block:: http
 
-  GET /people?select=id,json_data->phones->0->>number HTTP/1.1
+  GET /people?select=id,json_data->blood_type&json_data->>blood_type=eq.A- HTTP/1.1
 
   [
-    { "id": 1, "number": "917-929-5745"},
-    { "id": 2, "number": "512-446-4988"}
+    { "id": 1, "blood_type": "A-" },
+    { "id": 3, "blood_type": "A-" },
+    { "id": 7, "blood_type": "A-" }
   ]
 
 .. _computed_cols:

From 9f5ab4a8ba6909a85a5e4b496ffd6b7f876c44b9 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Wed, 1 Apr 2020 11:35:38 -0500
Subject: [PATCH 315/652] Add reference for filtering on json column

Fixes https://github.com/PostgREST/postgrest-docs/issues/266
---
 api.rst               | 25 ++++++++++++++++++++++++-
 releases/upcoming.rst |  6 ++++--
 2 files changed, 28 insertions(+), 3 deletions(-)

diff --git a/api.rst b/api.rst
index d05788ce2..f1a71d123 100644
--- a/api.rst
+++ b/api.rst
@@ -190,6 +190,8 @@ Casting the columns is possible by suffixing them with the double colon ``::`` p
     {"full_name": "Jane Doe", "salary": "120000.00"}
   ]
 
+.. _json_columns:
+
 JSON Columns
 ~~~~~~~~~~~~
 
@@ -204,7 +206,16 @@ You can specify a path for a ``json`` or ``jsonb`` column using the arrow operat
     { "id": 2, "blood_type": "O+", "phones": [{"country_code": "43", "number": "512-446-4988"}, {"country_code": "43", "number": "213-891-5979"}] }
   ]
 
-That also works with filters:
+.. code-block:: http
+
+  GET /people?select=id,json_data->phones->0->>number HTTP/1.1
+
+  [
+    { "id": 1, "number": "917-929-5745"},
+    { "id": 2, "number": "512-446-4988"}
+  ]
+
+This also works with filters:
 
 .. code-block:: http
 
@@ -216,6 +227,18 @@ That also works with filters:
     { "id": 7, "blood_type": "A-" }
   ]
 
+Note that ``->>`` is used to compare ``blood_type`` as ``text``. To compare with an integer value use ``->``:
+
+.. code-block:: http
+
+  GET /people?select=id,json_data->age&json_data->age=gt.20 HTTP/1.1
+
+  [
+    { "id": 11, "age": 25 },
+    { "id": 12, "age": 30 },
+    { "id": 15, "age": 35 }
+  ]
+
 .. _computed_cols:
 
 Computed Columns
diff --git a/releases/upcoming.rst b/releases/upcoming.rst
index 858861f46..d896b201b 100644
--- a/releases/upcoming.rst
+++ b/releases/upcoming.rst
@@ -30,9 +30,11 @@ Added
    + Allow overriding provided headers(Content-Type, Location, etc) by :ref:`guc_resp_hdrs`
    + Access to the ``Authorization`` header value through ``request.header.authorization``
 
-* Documentation reference for :ref:`s_proc_embed`.
+* Documentation improvements
 
-* Documentation reference for :ref:`mutation_embed`.
+  + Reference for :ref:`s_proc_embed`.
+  + Reference for :ref:`mutation_embed`.
+  + Reference for filters on :ref:`json_columns`.
 
 Fixed
 -----

From dd7e182b12853ca069f8a55303bdf9189b0d6623 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Fri, 3 Apr 2020 13:57:31 -0500
Subject: [PATCH 316/652] Update config.py version/release

Fixes https://github.com/PostgREST/postgrest-docs/issues/260
---
 conf.py | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/conf.py b/conf.py
index f1f263a9e..80008bf49 100644
--- a/conf.py
+++ b/conf.py
@@ -46,17 +46,17 @@ master_doc = 'index'
 
 # General information about the project.
 project = u'PostgREST'
-copyright = u'2017, Joe Nelson'
-author = u'Joe Nelson'
+author = u'Joe Nelson, Steve Chavez'
+copyright = u'2017, ' + author
 
 # The version info for the project you're documenting, acts as replacement for
 # |version| and |release|, also used in various other places throughout the
 # built documents.
 #
 # The short X.Y version.
-version = u'5.0'
+version = u'7.0'
 # The full version, including alpha/beta/rc tags.
-release = u'5.0.0'
+release = u'7.0.0'
 
 # The language for content autogenerated by Sphinx. Refer to documentation
 # for a list of supported languages.
@@ -225,7 +225,7 @@ latex_elements = {
 #  author, documentclass [howto, manual, or own class]).
 latex_documents = [
     (master_doc, 'PostgREST.tex', u'PostgREST Documentation',
-     u'Joe Nelson', 'manual'),
+     author, 'manual'),
 ]
 
 # The name of an image file (relative to this directory) to place at the top of

From 33768c509ca9b64098a19ba5b2efc3913e1644e4 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Mon, 6 Apr 2020 14:00:30 -0500
Subject: [PATCH 317/652] Add reference for rpc with array literals

Fixes https://github.com/PostgREST/postgrest-docs/issues/258
---
 api.rst | 107 ++++++++++++++++++++++++++++++++++----------------------
 1 file changed, 65 insertions(+), 42 deletions(-)

diff --git a/api.rst b/api.rst
index f1a71d123..88b4134dc 100644
--- a/api.rst
+++ b/api.rst
@@ -912,16 +912,6 @@ For instance, assume we have created this function in the database.
    SELECT a + b;
   $$ LANGUAGE SQL IMMUTABLE;
 
-The client can call it by posting an object like
-
-.. code-block:: http
-
-  POST /rpc/add_them HTTP/1.1
-
-  { "a": 1, "b": 2 }
-
-  3
-
 .. important::
 
   Whenever you create or change a function you must refresh PostgREST's schema cache. See the section :ref:`schema_reloading`.
@@ -938,25 +928,18 @@ The client can call it by posting an object like
       "message":"function test.add_them(a => text, b => text) does not exist"
      }
 
-You can also call a function that takes a single parameter of type json by sending the header :code:`Prefer: params=single-object` with your request. That way the JSON request body will be used as the single argument.
-
-.. code-block:: plpgsql
-
-  CREATE FUNCTION mult_them(param json) RETURNS int AS $$
-    SELECT (param->>'x')::int * (param->>'y')::int
-  $$ LANGUAGE SQL;
+The client can call it by posting an object like
 
 .. code-block:: http
 
-  POST /rpc/mult_them HTTP/1.1
-  Prefer: params=single-object
+  POST /rpc/add_them HTTP/1.1
 
-  { "x": 4, "y": 2 }
+  { "a": 1, "b": 2 }
 
-  8
+  3
 
 
-Procedures must be declared with named parameters, procedures declared like:
+Procedures must be declared with named parameters. Procedures declared like:
 
 .. code-block:: plpgsql
 
@@ -972,26 +955,6 @@ Note that PostgreSQL converts identifier names to lowercase unless you quote the
 
 PostgreSQL has four procedural languages that are part of the core distribution: PL/pgSQL, PL/Tcl, PL/Perl, and PL/Python. There are many other procedural languages distributed as additional extensions. Also, plain SQL can be used to write functions (as shown in the example above).
 
-.. note::
-
-  For versions prior to PostgreSQL 10, to pass a PostgreSQL native array you need to quote it as a string:
-
-  .. code-block:: http
-
-    POST /rpc/native_array_func HTTP/1.1
-
-    { "arg": "{1,2,3}" }
-
-  In these versions we recommend using function arguments of type json to accept arrays from the client:
-
-  .. code-block:: http
-
-    POST /rpc/json_array_func HTTP/1.1
-
-    { "arg": [1,2,3] }
-
-  Starting from PostgreSQL 10, a json array from the client gets mapped normally to a PostgreSQL native array.
-
 .. note::
 
   Why the `/rpc` prefix? One reason is to avoid name collisions between views and procedures. It also helps emphasize to API consumers that these functions are not normal restful things. The functions can have arbitrary and surprising behavior, not the standard "post creates a resource" thing that users expect from the other routes.
@@ -1013,6 +976,66 @@ Because ``add_them`` was declared IMMUTABLE, we can alternately call the functio
 
 The function parameter names match the JSON object keys in the POST case, for the GET case they match the query parameters ``?a=1&b=2``.
 
+Calling functions with a single json parameter
+----------------------------------------------
+
+You can also call a function that takes a single parameter of type json by sending the header :code:`Prefer: params=single-object` with your request. That way the JSON request body will be used as the single argument.
+
+.. code-block:: plpgsql
+
+  CREATE FUNCTION mult_them(param json) RETURNS int AS $$
+    SELECT (param->>'x')::int * (param->>'y')::int
+  $$ LANGUAGE SQL;
+
+.. code-block:: http
+
+  POST /rpc/mult_them HTTP/1.1
+  Prefer: params=single-object
+
+  { "x": 4, "y": 2 }
+
+  8
+
+Calling functions with array parameters
+---------------------------------------
+
+You can call a function that takes an array parameter:
+
+.. code-block:: plpgsql
+
+   CREATE FUNCTION native_array_func(arr int[]) RETURNS int[] as $$
+      SELECT arr;
+   $$ LANGUAGE SQL;
+
+.. code-block:: http
+
+ POST /rpc/native_array_func HTTP/1.1
+
+ { "arg": [1,2,3] }
+
+ [1,2,3]
+
+.. note::
+
+   For versions prior to PostgreSQL 10, to pass a PostgreSQL native array you need to quote it as a string:
+
+   .. code-block:: http
+
+    POST /rpc/native_array_func HTTP/1.1
+
+    { "arg": "{1,2,3}" }
+
+   In these versions we recommend using function parameters of type json to accept arrays from the client.
+
+For calling it with GET, you can pass the array as an `array literal <https://www.postgresql.org/docs/11/arrays.html#ARRAYS-INPUT>`_;
+as in ``{1,2,3}``. Note that the curly brackets have to be urlencoded(``{`` is ``%7B`` and ``}`` is ``%7D``).
+
+.. code-block:: http
+
+ GET /rpc/native_array_func?arr=%7B1,2,3%7D' HTTP/1.1
+
+ [1,2,3]
+
 Scalar functions
 ----------------
 

From 3292fce732bc1dff9647c2cad9aba2e7b6bfb9f4 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Tue, 7 Apr 2020 14:37:40 -0500
Subject: [PATCH 318/652] Update schema reloading section

Fixes https://github.com/PostgREST/postgrest-docs/issues/243
---
 admin.rst | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)

diff --git a/admin.rst b/admin.rst
index a192b304b..17486b155 100644
--- a/admin.rst
+++ b/admin.rst
@@ -187,12 +187,28 @@ Schema Reloading
 
 Users are often confused by PostgREST's database schema cache. It is present because detecting foreign key relationships between tables (including how those relationships pass through views) is necessary, but costly. API requests consult the schema cache as part of :ref:`resource_embedding`. However if the schema changes while the server is running it results in a stale cache and leads to errors claiming that no relations are detected between tables.
 
+.. important::
+
+   Since v5.0, PostgREST also makes use of the schema cache for stored functions metadata: parameters, return type, volatility.
+   It also uses the schema cache for resolving overloaded functions. You should refresh the cache if a change in any of the prior is done.
+
 To refresh the cache without restarting the PostgREST server, send the server process a SIGUSR1 signal:
 
 .. code:: bash
 
   killall -SIGUSR1 postgrest
 
+.. note::
+
+   To refresh the cache in docker:
+
+   .. code:: bash
+
+     docker kill -s SIGUSR1 <container>
+
+     # or in docker-compose
+     docker-compose kill -s SIGUSR1 <service>
+
 The above is the manual way to do it. To automate the schema reloads, use a database trigger like this:
 
 .. code-block:: postgresql

From 87f883b7932940941dd174fe92c4712a7c7e4d92 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Sat, 11 Apr 2020 17:40:33 -0500
Subject: [PATCH 319/652] Add multiple schemas feature

---
 api.rst               | 34 ++++++++++++++++++++++++++++++++++
 configuration.rst     | 14 +++++++++++++-
 releases/upcoming.rst |  9 ++++++---
 3 files changed, 53 insertions(+), 4 deletions(-)

diff --git a/api.rst b/api.rst
index 88b4134dc..9d06e45c8 100644
--- a/api.rst
+++ b/api.rst
@@ -1371,6 +1371,8 @@ You can get raw output from a ``text`` column by using ``Accept: text/plain``.
 
 This follows the same rules as :ref:`binary_output`.
 
+.. _open-api:
+
 OpenAPI Support
 ===============
 
@@ -1406,6 +1408,38 @@ You can use a tool like `Swagger UI <http://swagger.io/swagger-ui/>`_ to create
 
   The OpenAPI information can go out of date as the schema changes under a running server. To learn how to refresh the cache see :ref:`schema_reloading`.
 
+.. _multiple-schemas:
+
+Switching Schemas
+=================
+
+You can switch schemas at runtime with the ``Accept-Profile`` and ``Content-Profile`` headers. You can only switch to a schema that is included in :ref:`db-schema`.
+This is useful for **api versioning** and **schema-based multitenancy**.
+
+The schema to be used can be selected through the ``Accept-Profile`` header for GET or HEAD:
+
+.. code-block:: http
+
+   GET /items HTTP/1.1
+   Accept-Profile: tenant2
+
+If you don't specify the ``Accept-Profile`` header, the first schema on :ref:`db-schema` will be used.
+
+For POST, PATCH, PUT, DELETE you can use the ``Content-Profile`` header for selecting the schema:
+
+.. code-block:: http
+
+   POST /items HTTP/1.1
+   Content-Profile: tenant2
+
+   {...}
+
+You can also select the schema for :ref:`s_procs` and :ref:`open-api`.
+
+.. note::
+
+   These headers are based on the nascent "Content Negotiation by Profile" spec: https://www.w3.org/TR/dx-prof-conneg
+
 HTTP Logic
 ==========
 
diff --git a/configuration.rst b/configuration.rst
index fe9b9f7f2..35d93d308 100644
--- a/configuration.rst
+++ b/configuration.rst
@@ -75,7 +75,19 @@ db-schema
 
   The database schema to expose to REST clients. Tables, views and stored procedures in this schema will get API endpoints.
 
-  This schema gets added to the `search_path <https://www.postgresql.org/docs/11/ddl-schemas.html#DDL-SCHEMAS-PATH>`_ of every request.
+  The chosen schema gets added to the `search_path <https://www.postgresql.org/docs/11/ddl-schemas.html#DDL-SCHEMAS-PATH>`_ of every request. Example:
+
+  .. code:: bash
+
+     db-schema = "api"
+
+  You can also specify a list of schemas that can be used for **schema-based multitenancy** and **api versioning** by :ref:`multiple-schemas`. Example:
+
+  .. code:: bash
+
+     db-schema = "tenant1, tenant2"
+     ##or
+     ##db-schema = "v1, v2"
 
 .. _db-anon-role:
 
diff --git a/releases/upcoming.rst b/releases/upcoming.rst
index d896b201b..5fa71b0f2 100644
--- a/releases/upcoming.rst
+++ b/releases/upcoming.rst
@@ -10,11 +10,14 @@ These are changes yet unreleased. If you'd like to try them out before a new off
 Added
 -----
 
-* Support for the :ref:`on_conflict <on_conflict>` query parameter to UPSERT based on a unique constraint.
-  |br| -- `@ykst <https://github.com/ykst>`_
+* Support for :ref:`multiple-schemas` at runtime.
+  |br| -- `@steve-chavez <https://github.com/steve-chavez>`_, `@mahmoudkassem <https://github.com/mahmoudkassem>`_
 
 * Support for :ref:`planned_count` and :ref:`estimated_count`.
-  |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
+  |br| -- `@steve-chavez <https://github.com/steve-chavez>`_, `@LorenzHenk <https://github.com/LorenzHenk>`_
+
+* Support for the :ref:`on_conflict <on_conflict>` query parameter to UPSERT based on a unique constraint.
+  |br| -- `@ykst <https://github.com/ykst>`_
 
 * Support for :ref:`Resource Embedding Disambiguation <embed_disamb>`.
   |br| -- `@steve-chavez <https://github.com/steve-chavez>`_

From 467b22cb298619ddf03e890e502fc4033da7de11 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Mon, 13 Apr 2020 15:02:40 -0500
Subject: [PATCH 320/652] Fix required pg minimum version

Fixes https://github.com/PostgREST/postgrest-docs/issues/317
---
 install.rst        | 4 +++-
 tutorials/tut0.rst | 4 +---
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/install.rst b/install.rst
index 685d28235..0e0e2ae70 100644
--- a/install.rst
+++ b/install.rst
@@ -24,11 +24,13 @@ The release page has pre-compiled binaries for Mac OS X, Windows, and several Li
 
   It usually lives in :code:`C:\Program Files\PostgreSQL\<version>\bin`. See this `article <https://www.howtogeek.com/118594/how-to-edit-your-system-path-for-easy-command-line-access/>`_ about how to modify the system path.
 
+.. _pg-dependency:
 
 PostgreSQL dependency
 =====================
 
-To use PostgREST you will need an underlying database (PostgreSQL version 9.5 or greater is required). You can use something like Amazon `RDS <https://aws.amazon.com/rds/>`_ but installing your own locally is cheaper and more convenient for development.
+To use PostgREST you will need an underlying database. We require PostgreSQL 9.4 or greater, but recommend at least 9.5 for row-level security features.
+You can use something like Amazon `RDS <https://aws.amazon.com/rds/>`_ but installing your own locally is cheaper and more convenient for development.
 
 * `Instructions for OS X <http://exponential.io/blog/2015/02/21/install-postgresql-on-mac-os-x-via-brew/>`_
 * `Instructions for Ubuntu 14.04 <https://www.digitalocean.com/community/tutorials/how-to-install-and-use-postgresql-on-ubuntu-14-04>`_
diff --git a/tutorials/tut0.rst b/tutorials/tut0.rst
index 038b92f6f..18884ea5f 100644
--- a/tutorials/tut0.rst
+++ b/tutorials/tut0.rst
@@ -23,9 +23,7 @@ As you begin the tutorial, pop open the project `chat room <https://gitter.im/be
 Step 2. Install PostgreSQL
 --------------------------
 
-You'll need a modern copy of the database running on your system, either natively or in a Docker instance. We require PostgreSQL 9.3 or greater, but recommend at least 9.5 for row-level security features that we'll use in future tutorials.
-
-If you're already familiar with using PostgreSQL and have it installed on your system you can use the existing installation. For this tutorial we'll describe how to use the database in Docker because database configuration is otherwise too complicated for a simple tutorial.
+If you're already familiar with using PostgreSQL and have it installed on your system you can use the existing installation(see :ref:`pg-dependency` for minimum requirements). For this tutorial we'll describe how to use the database in Docker because database configuration is otherwise too complicated for a simple tutorial.
 
 If Docker is not installed, you can get it `here <https://www.docker.com/community-edition#download>`_. Next, let's pull and start the database image:
 

From a5af8dc68fa31854e1cb199ddfcef54178f4b254 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Tue, 14 Apr 2020 11:35:32 -0500
Subject: [PATCH 321/652] Add return=rep to DELETE section

---
 api.rst | 12 +++++++++++-
 1 file changed, 11 insertions(+), 1 deletion(-)

diff --git a/api.rst b/api.rst
index 9d06e45c8..03c97c96b 100644
--- a/api.rst
+++ b/api.rst
@@ -1304,14 +1304,24 @@ Deletions
 
 To delete rows in a table, use the DELETE verb plus :ref:`h_filter`. For instance deleting inactive users:
 
-.. code-block:: HTTP
+.. code-block:: http
 
   DELETE /user?active=is.false HTTP/1.1
 
+Deletions also support :code:`Prefer: return=representation` plus :ref:`v_filter`.
+
+.. code-block:: HTTP
+
+  DELETE /user?id=eq.1 HTTP/1.1
+  Prefer: return=representation
+
+  {"id": 1, "email": "johndoe@email.com"}
+
 .. warning::
 
   Beware of accidentally deleting all rows in a table. To learn to prevent that see :ref:`block_fulltable`.
 
+
 .. _binary_output:
 
 Binary Output

From 4d623986eadb65494c2c8a094bf805b5bcf22295 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Tue, 14 Apr 2020 13:24:48 -0500
Subject: [PATCH 322/652] Alternative to bulk call

---
 api.rst               | 30 +++++++++++++++++++++++-------
 releases/upcoming.rst |  2 +-
 2 files changed, 24 insertions(+), 8 deletions(-)

diff --git a/api.rst b/api.rst
index 03c97c96b..380aaf693 100644
--- a/api.rst
+++ b/api.rst
@@ -1068,20 +1068,36 @@ It's possible to call a function in a bulk way, analoguosly to :ref:`bulk_insert
 .. code-block:: http
 
    POST /rpc/add_them HTTP/1.1
-   Content-Type: application/json
+   Content-Type: text/csv
    Prefer: params=multiple-objects
 
-   [
-      {"a": 1, "b": 2},
-      {"a": 3, "b": 4}
-   ]
-
-Result:
+   a,b
+   1,2
+   3,4
 
 .. code-block:: json
 
    [ 3, 7 ]
 
+If you have large payloads to process, it's preferrable you instead use a function with an array or json parameter, as this will be more efficient.
+
+.. code-block:: postgres
+
+   create function plus_one(arr int[]) returns int[] as $$
+      SELECT array_agg(n + 1) FROM unnest($1) AS n;
+   $$ language sql;
+
+.. code-block:: http
+
+   POST /rpc/plus_one HTTP/1.1
+   Content-Type: application/json
+
+   {"arr": [1,2,3,4]}
+
+.. code-block:: json
+
+   [2,3,4,5]
+
 It's also possible to :ref:`Specify Columns <specify_columns>` on functions calls.
 
 Function filters
diff --git a/releases/upcoming.rst b/releases/upcoming.rst
index 5fa71b0f2..8a77c509b 100644
--- a/releases/upcoming.rst
+++ b/releases/upcoming.rst
@@ -60,7 +60,7 @@ Fixed
 Changed
 -------
 
-* :ref:`bulk_call` should now be done by specifying a ``Prefer: params=multiple-objects`` header.
+* :ref:`bulk_call` should now be done by specifying a ``Prefer: params=multiple-objects`` header. This fixes a performance regression when calling stored procedures.
 
 * Resource Embedding now outputs an error when multiple relationships between two tables are found, see :ref:`embed_disamb`.
 

From 750c22cd1cb577010512d0224034d8020a1ae1de Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Thu, 16 Apr 2020 12:35:57 -0500
Subject: [PATCH 323/652] Add mounting config file to docker

---
 install.rst | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/install.rst b/install.rst
index 0e0e2ae70..415757f45 100644
--- a/install.rst
+++ b/install.rst
@@ -78,6 +78,12 @@ These variables match the options shown in our :ref:`configuration` section, exc
 
   docker inspect -f "{{.Config.Env}}" postgrest/postgrest
 
+You can also specify a config file by mounting the file to the container:
+
+.. code-block:: bash
+
+  docker run -v /absolute/path/to/config:/etc/postgrest.conf postgrest/postgrest
+
 There are two ways to run the PostgREST container: with an existing external database, or through docker-compose.
 
 Containerized PostgREST with native PostgreSQL

From c2ff7ffb622cb660900285d9ede8215dba067a09 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Thu, 16 Apr 2020 13:26:02 -0500
Subject: [PATCH 324/652] Redorder insertions before stored procedures

---
 api.rst | 411 ++++++++++++++++++++++++++++----------------------------
 1 file changed, 205 insertions(+), 206 deletions(-)

diff --git a/api.rst b/api.rst
index 380aaf693..55dae2a3f 100644
--- a/api.rst
+++ b/api.rst
@@ -400,7 +400,7 @@ This method is also useful for embedded resources, which we will cover in anothe
 .. _exact_count:
 
 Exact Count
-~~~~~~~~~~~
+-----------
 
 In order to obtain the total size of the table or view (such as when rendering the last page link in a pagination control), specify ``Prefer: count=exact`` as a request header:
 
@@ -422,7 +422,7 @@ Note that the larger the table the slower this query runs in the database. The s
 .. _planned_count:
 
 Planned Count
-~~~~~~~~~~~~~
+-------------
 
 To avoid the shortcomings of :ref:`exact count <exact_count>`, PostgREST can leverage PostgreSQL statistics and get a fairly accurate and fast count.
 To do this, specify the ``Prefer: count=planned`` header.
@@ -444,7 +444,7 @@ See `ANALYZE <https://www.postgresql.org/docs/11/sql-analyze.html>`_ for more de
 .. _estimated_count:
 
 Estimated Count
-~~~~~~~~~~~~~~~
+---------------
 
 When you are interested in the count, the relative error is important. If you have a :ref:`planned count <planned_count>` of 1000000 and the exact count is
 1001000, the error is small enough to be ignored. But with a planned count of 7, an exact count of 28 would be a huge misprediction.
@@ -876,6 +876,208 @@ Here we specify ``central_addresses`` as the **target** and the ``billing_addres
 
 Similarly to the **target**, the **hint** can be a **table name**, **foreign key constraint name** or **column name**.
 
+.. _insert_update:
+
+Insertions / Updates
+====================
+
+All tables and `auto-updatable views <https://www.postgresql.org/docs/current/static/sql-createview.html#SQL-CREATEVIEW-UPDATABLE-VIEWS>`_ can be modified through the API, subject to permissions of the requester's database role.
+
+To create a row in a database table post a JSON object whose keys are the names of the columns you would like to create. Missing properties will be set to default values when applicable.
+
+.. code-block:: HTTP
+
+  POST /table_name HTTP/1.1
+
+  { "col1": "value1", "col2": "value2" }
+
+The response will include a :code:`Location` header describing where to find the new object. If the table is write-only then constructing the Location header will cause a permissions error. To successfully insert an item to a write-only table you will need to suppress the Location response header by including the request header :code:`Prefer: return=minimal`.
+
+On the other end of the spectrum you can get the full created object back in the response to your request by including the header :code:`Prefer: return=representation`. That way you won't have to make another HTTP call to discover properties that may have been filled in on the server side. You can also apply the standard :ref:`v_filter` to these results.
+
+URL encoded payloads can be posted with ``Content-Type: application/x-www-form-urlencoded``.
+
+.. code-block:: http
+
+  POST /people HTTP/1.1
+  Content-Type: application/x-www-form-urlencoded
+
+  name=John+Doe&age=50&weight=80
+
+.. note::
+
+  When inserting a row you must post a JSON object, not quoted JSON.
+
+  .. code::
+
+    Yes
+    { "a": 1, "b": 2 }
+
+    No
+    "{ \"a\": 1, \"b\": 2 }"
+
+  Some javascript libraries will post the data incorrectly if you're not careful. For best results try one of the :ref:`clientside_libraries` built for PostgREST.
+
+To update a row or rows in a table, use the PATCH verb. Use :ref:`h_filter` to specify which record(s) to update. Here is an example query setting the :code:`category` column to child for all people below a certain age.
+
+.. code-block:: http
+
+  PATCH /people?age=lt.13 HTTP/1.1
+
+  { "category": "child" }
+
+Updates also support :code:`Prefer: return=representation` plus :ref:`v_filter`.
+
+.. warning::
+
+  Beware of accidentally updating every row in a table. To learn to prevent that see :ref:`block_fulltable`.
+
+.. warning::
+
+   Insertion on VIEWs with complex `RULEs <https://www.postgresql.org/docs/11/sql-createrule.html>`_ might not work out of the box with PostgREST.
+   It's recommended that you `use triggers instead of RULEs <https://wiki.postgresql.org/wiki/Don%27t_Do_This#Don.27t_use_rules>`_.
+   If you want to keep using RULEs, a workaround is to wrap the VIEW insertion in a stored procedure and call it through the :ref:`s_procs` interface.
+
+.. _bulk_insert:
+
+Bulk Insert
+-----------
+
+Bulk insert works exactly like single row insert except that you provide either a JSON array of objects having uniform keys, or lines in CSV format. This not only minimizes the HTTP requests required but uses a single INSERT statement on the back-end for efficiency. Note that using CSV requires less parsing on the server and is much faster.
+
+To bulk insert CSV simply post to a table route with :code:`Content-Type: text/csv` and include the names of the columns as the first row. For instance
+
+.. code-block:: http
+
+  POST /people HTTP/1.1
+  Content-Type: text/csv
+
+  name,age,height
+  J Doe,62,70
+  Jonas,10,55
+
+An empty field (:code:`,,`) is coerced to an empty string and the reserved word :code:`NULL` is mapped to the SQL null value. Note that there should be no spaces between the column names and commas.
+
+To bulk insert JSON post an array of objects having all-matching keys
+
+.. code-block:: http
+
+  POST /people HTTP/1.1
+  Content-Type: application/json
+
+  [
+    { "name": "J Doe", "age": 62, "height": 70 },
+    { "name": "Janus", "age": 10, "height": 55 }
+  ]
+
+.. _specify_columns:
+
+Specifying Columns
+------------------
+
+By using the :code:`columns` query parameter it's possible to specify the payload keys that will be inserted/updated
+and ignore the rest of the payload.
+
+.. code-block:: http
+
+   POST /datasets?columns=source,publication_date,figure HTTP/1.1
+   Content-Type: application/json
+
+   {
+     "source": "Natural Disaster Prevention and Control",
+     "publication_date": "2015-09-11",
+     "figure": 1100,
+     "location": "...",
+     "comment": "...",
+     "extra": "...",
+     "stuff": "..."
+   }
+
+In this case, only **source**, **publication_date** and **figure** will be inserted. The rest of the JSON keys will be ignored.
+
+Using this also has the side-effect of being more efficient for :ref:`bulk_insert` since PostgREST will not process the JSON and
+it'll send it directly to PostgreSQL.
+
+UPSERT
+------
+
+You can make an UPSERT with :code:`POST` and the :code:`Prefer: resolution=merge-duplicates` header:
+
+.. code-block:: http
+
+  POST /employees HTTP/1.1
+  Prefer: resolution=merge-duplicates
+
+  [
+    { "id": 1, "name": "Old employee 1", "salary": 30000 },
+    { "id": 2, "name": "Old employee 2", "salary": 42000 },
+    { "id": 3, "name": "New employee 3", "salary": 50000 }
+  ]
+
+By default, UPSERT operates based on the primary key columns, you must specify all of them. You can also choose to ignore the duplicates with :code:`Prefer: resolution=ignore-duplicates`. This works best when the primary key is natural, but it's also possible to use it if the primary key is surrogate (example: "id serial primary key"). For more details read `this issue <https://github.com/PostgREST/postgrest/issues/1118>`_.
+
+.. important::
+  After creating a table or changing its primary key, you must refresh PostgREST schema cache for UPSERT to work properly. To learn how to refresh the cache see :ref:`schema_reloading`.
+
+.. _on_conflict:
+
+On Conflict
+~~~~~~~~~~~
+
+By specifying the ``on_conflict`` query parameter, you can make UPSERT work on a column(s) that has a UNIQUE constraint.
+
+.. code-block:: http
+
+  POST /employees?on_conflict=name HTTP/1.1
+  Prefer: resolution=merge-duplicates
+
+  [
+    { "name": "Old employee 1", "salary": 40000 },
+    { "name": "Old employee 2", "salary": 52000 },
+    { "name": "New employee 3", "salary": 60000 }
+  ]
+
+PUT
+~~~
+
+A single row UPSERT can be done by using :code:`PUT` and filtering the primary key columns with :code:`eq`:
+
+.. code-block:: http
+
+  PUT /employees?id=eq.4 HTTP/1.1
+
+  { "id": 4, "name": "Sara B.", "salary": 60000 }
+
+All the columns must be specified in the request body, including the primary key columns.
+
+.. note::
+
+  Upsert features are only available starting from PostgreSQL 9.5 since it uses the `ON CONFLICT clause <https://www.postgresql.org/docs/9.5/static/sql-insert.html#SQL-ON-CONFLICT>`_.
+
+.. _delete:
+
+Deletions
+=========
+
+To delete rows in a table, use the DELETE verb plus :ref:`h_filter`. For instance deleting inactive users:
+
+.. code-block:: http
+
+  DELETE /user?active=is.false HTTP/1.1
+
+Deletions also support :code:`Prefer: return=representation` plus :ref:`v_filter`.
+
+.. code-block:: HTTP
+
+  DELETE /user?id=eq.1 HTTP/1.1
+  Prefer: return=representation
+
+  {"id": 1, "email": "johndoe@email.com"}
+
+.. warning::
+
+  Beware of accidentally deleting all rows in a table. To learn to prevent that see :ref:`block_fulltable`.
+
 .. _custom_queries:
 
 Custom Queries
@@ -886,7 +1088,6 @@ The PostgREST URL grammar limits the kinds of queries clients can perform. It pr
 * Table unions
 * More complicated joins than those provided by `Resource Embedding`_
 * Geo-spatial queries that require an argument, like "points near (lat,lon)"
-* More sophisticated full-text search than a simple use of the :sql:`fts` filter
 
 .. _s_procs:
 
@@ -1135,208 +1336,6 @@ You can call overloaded functions with different number of arguments.
 .. code-block:: http
 
   GET /rpc/rental_duration?customer_id=232&from_date=2018-07-01 HTTP/1.1
-.. _insert_update:
-
-Insertions / Updates
-====================
-
-All tables and `auto-updatable views <https://www.postgresql.org/docs/current/static/sql-createview.html#SQL-CREATEVIEW-UPDATABLE-VIEWS>`_ can be modified through the API, subject to permissions of the requester's database role.
-
-To create a row in a database table post a JSON object whose keys are the names of the columns you would like to create. Missing properties will be set to default values when applicable.
-
-.. code-block:: HTTP
-
-  POST /table_name HTTP/1.1
-
-  { "col1": "value1", "col2": "value2" }
-
-The response will include a :code:`Location` header describing where to find the new object. If the table is write-only then constructing the Location header will cause a permissions error. To successfully insert an item to a write-only table you will need to suppress the Location response header by including the request header :code:`Prefer: return=minimal`.
-
-On the other end of the spectrum you can get the full created object back in the response to your request by including the header :code:`Prefer: return=representation`. That way you won't have to make another HTTP call to discover properties that may have been filled in on the server side. You can also apply the standard :ref:`v_filter` to these results.
-
-URL encoded payloads can be posted with ``Content-Type: application/x-www-form-urlencoded``.
-
-.. code-block:: http
-
-  POST /people HTTP/1.1
-  Content-Type: application/x-www-form-urlencoded
-
-  name=John+Doe&age=50&weight=80
-
-.. note::
-
-  When inserting a row you must post a JSON object, not quoted JSON.
-
-  .. code::
-
-    Yes
-    { "a": 1, "b": 2 }
-
-    No
-    "{ \"a\": 1, \"b\": 2 }"
-
-  Some javascript libraries will post the data incorrectly if you're not careful. For best results try one of the :ref:`clientside_libraries` built for PostgREST.
-
-To update a row or rows in a table, use the PATCH verb. Use :ref:`h_filter` to specify which record(s) to update. Here is an example query setting the :code:`category` column to child for all people below a certain age.
-
-.. code-block:: http
-
-  PATCH /people?age=lt.13 HTTP/1.1
-
-  { "category": "child" }
-
-Updates also support :code:`Prefer: return=representation` plus :ref:`v_filter`.
-
-.. warning::
-
-  Beware of accidentally updating every row in a table. To learn to prevent that see :ref:`block_fulltable`.
-
-.. warning::
-
-   Insertion on VIEWs with complex `RULEs <https://www.postgresql.org/docs/11/sql-createrule.html>`_ might not work out of the box with PostgREST.
-   It's recommended that you `use triggers instead of RULEs <https://wiki.postgresql.org/wiki/Don%27t_Do_This#Don.27t_use_rules>`_.
-   If you want to keep using RULEs, a workaround is to wrap the VIEW insertion in a stored procedure and call it through the :ref:`s_procs` interface.
-
-.. _bulk_insert:
-
-Bulk Insert
------------
-
-Bulk insert works exactly like single row insert except that you provide either a JSON array of objects having uniform keys, or lines in CSV format. This not only minimizes the HTTP requests required but uses a single INSERT statement on the back-end for efficiency. Note that using CSV requires less parsing on the server and is much faster.
-
-To bulk insert CSV simply post to a table route with :code:`Content-Type: text/csv` and include the names of the columns as the first row. For instance
-
-.. code-block:: http
-
-  POST /people HTTP/1.1
-  Content-Type: text/csv
-
-  name,age,height
-  J Doe,62,70
-  Jonas,10,55
-
-An empty field (:code:`,,`) is coerced to an empty string and the reserved word :code:`NULL` is mapped to the SQL null value. Note that there should be no spaces between the column names and commas.
-
-To bulk insert JSON post an array of objects having all-matching keys
-
-.. code-block:: http
-
-  POST /people HTTP/1.1
-  Content-Type: application/json
-
-  [
-    { "name": "J Doe", "age": 62, "height": 70 },
-    { "name": "Janus", "age": 10, "height": 55 }
-  ]
-
-.. _specify_columns:
-
-Specifying Columns
-------------------
-
-By using the :code:`columns` query parameter it's possible to specify the payload keys that will be inserted/updated
-and ignore the rest of the payload.
-
-.. code-block:: http
-
-   POST /datasets?columns=source,publication_date,figure HTTP/1.1
-   Content-Type: application/json
-
-   {
-     "source": "Natural Disaster Prevention and Control",
-     "publication_date": "2015-09-11",
-     "figure": 1100,
-     "location": "...",
-     "comment": "...",
-     "extra": "...",
-     "stuff": "..."
-   }
-
-In this case, only **source**, **publication_date** and **figure** will be inserted. The rest of the JSON keys will be ignored.
-
-Using this also has the side-effect of being more efficient for :ref:`bulk_insert` since PostgREST will not process the JSON and
-it'll send it directly to PostgreSQL.
-
-UPSERT
-------
-
-You can make an UPSERT with :code:`POST` and the :code:`Prefer: resolution=merge-duplicates` header:
-
-.. code-block:: http
-
-  POST /employees HTTP/1.1
-  Prefer: resolution=merge-duplicates
-
-  [
-    { "id": 1, "name": "Old employee 1", "salary": 30000 },
-    { "id": 2, "name": "Old employee 2", "salary": 42000 },
-    { "id": 3, "name": "New employee 3", "salary": 50000 }
-  ]
-
-By default, UPSERT operates based on the primary key columns, you must specify all of them. You can also choose to ignore the duplicates with :code:`Prefer: resolution=ignore-duplicates`. This works best when the primary key is natural, but it's also possible to use it if the primary key is surrogate (example: "id serial primary key"). For more details read `this issue <https://github.com/PostgREST/postgrest/issues/1118>`_.
-
-.. important::
-  After creating a table or changing its primary key, you must refresh PostgREST schema cache for UPSERT to work properly. To learn how to refresh the cache see :ref:`schema_reloading`.
-
-.. _on_conflict:
-
-On Conflict
-~~~~~~~~~~~
-
-By specifying the ``on_conflict`` query parameter, you can make UPSERT work on a column(s) that has a UNIQUE constraint.
-
-.. code-block:: http
-
-  POST /employees?on_conflict=name HTTP/1.1
-  Prefer: resolution=merge-duplicates
-
-  [
-    { "name": "Old employee 1", "salary": 40000 },
-    { "name": "Old employee 2", "salary": 52000 },
-    { "name": "New employee 3", "salary": 60000 }
-  ]
-
-PUT
-~~~
-
-A single row UPSERT can be done by using :code:`PUT` and filtering the primary key columns with :code:`eq`:
-
-.. code-block:: http
-
-  PUT /employees?id=eq.4 HTTP/1.1
-
-  { "id": 4, "name": "Sara B.", "salary": 60000 }
-
-All the columns must be specified in the request body, including the primary key columns.
-
-.. note::
-
-  Upsert features are only available starting from PostgreSQL 9.5 since it uses the `ON CONFLICT clause <https://www.postgresql.org/docs/9.5/static/sql-insert.html#SQL-ON-CONFLICT>`_.
-
-.. _delete:
-
-Deletions
-=========
-
-To delete rows in a table, use the DELETE verb plus :ref:`h_filter`. For instance deleting inactive users:
-
-.. code-block:: http
-
-  DELETE /user?active=is.false HTTP/1.1
-
-Deletions also support :code:`Prefer: return=representation` plus :ref:`v_filter`.
-
-.. code-block:: HTTP
-
-  DELETE /user?id=eq.1 HTTP/1.1
-  Prefer: return=representation
-
-  {"id": 1, "email": "johndoe@email.com"}
-
-.. warning::
-
-  Beware of accidentally deleting all rows in a table. To learn to prevent that see :ref:`block_fulltable`.
-
 
 .. _binary_output:
 

From 6b72da38e622e4488378fe7e681c4084568ebb69 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Thu, 16 Apr 2020 18:01:07 -0500
Subject: [PATCH 325/652] Move some api notes to best practices

---
 api.rst            | 18 ------------------
 best_practices.rst | 19 +++++++++++++++++++
 2 files changed, 19 insertions(+), 18 deletions(-)

diff --git a/api.rst b/api.rst
index 55dae2a3f..fd62a0f92 100644
--- a/api.rst
+++ b/api.rst
@@ -103,18 +103,6 @@ The view will provide a new endpoint:
 
   GET /fresh_stories HTTP/1.1
 
-.. important::
-
-  Views are invoked with the privileges of the view owner, much like stored procedures with the ``SECURITY DEFINER`` option. When created by a SUPERUSER role, all `row-level security <https://www.postgresql.org/docs/current/static/ddl-rowsecurity.html>`_ will be bypassed unless a different, non-SUPERUSER owner is specified.
-
-  .. code-block:: postgres
-
-    -- Workaround:
-    -- non-SUPERUSER role to be used as the owner of the views
-    CREATE ROLE api_views_owner;
-    -- alter the view owner so RLS can work normally
-    ALTER VIEW sample_view OWNER TO api_views_owner;
-
 .. _fts:
 
 Full-Text Search
@@ -932,12 +920,6 @@ Updates also support :code:`Prefer: return=representation` plus :ref:`v_filter`.
 
   Beware of accidentally updating every row in a table. To learn to prevent that see :ref:`block_fulltable`.
 
-.. warning::
-
-   Insertion on VIEWs with complex `RULEs <https://www.postgresql.org/docs/11/sql-createrule.html>`_ might not work out of the box with PostgREST.
-   It's recommended that you `use triggers instead of RULEs <https://wiki.postgresql.org/wiki/Don%27t_Do_This#Don.27t_use_rules>`_.
-   If you want to keep using RULEs, a workaround is to wrap the VIEW insertion in a stored procedure and call it through the :ref:`s_procs` interface.
-
 .. _bulk_insert:
 
 Bulk Insert
diff --git a/best_practices.rst b/best_practices.rst
index c8ecdbc09..34e9c473b 100644
--- a/best_practices.rst
+++ b/best_practices.rst
@@ -20,3 +20,22 @@ By default, a function is executed with the privileges of the user who calls it.
 
 Another option is to define the function with the :code:`SECURITY DEFINER` option. Then only one permission check will take place, the permission to call the function, and the operations in the function will have the authority of the user who owns the function itself. See `PostgreSQL documentation <https://www.postgresql.org/docs/current/static/sql-createfunction.html#SQL-CREATEFUNCTION-SECURITY>`_ for more details.
 
+Views with RLS
+--------------
+
+Views are invoked with the privileges of the view owner, much like stored procedures with the ``SECURITY DEFINER`` option. When created by a SUPERUSER role, all `row-level security <https://www.postgresql.org/docs/current/static/ddl-rowsecurity.html>`_ will be bypassed unless a different, non-SUPERUSER owner is specified.
+
+.. code-block:: postgres
+
+ -- Workaround:
+ -- non-SUPERUSER role to be used as the owner of the views
+ CREATE ROLE api_views_owner;
+ -- alter the view owner so RLS can work normally
+ ALTER VIEW sample_view OWNER TO api_views_owner;
+
+Views with Rules
+----------------
+
+Insertion on VIEWs with complex `RULEs <https://www.postgresql.org/docs/11/sql-createrule.html>`_ might not work out of the box with PostgREST.
+It's recommended that you `use triggers instead of RULEs <https://wiki.postgresql.org/wiki/Don%27t_Do_This#Don.27t_use_rules>`_.
+If you want to keep using RULEs, a workaround is to wrap the VIEW insertion in a stored procedure and call it through the :ref:`s_procs` interface.

From 5eca88fd87a81bafa5923f5976b689b882fafba1 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Thu, 16 Apr 2020 18:01:27 -0500
Subject: [PATCH 326/652] Refine function privileges section

---
 best_practices.rst | 22 +++++++++++++++++-----
 1 file changed, 17 insertions(+), 5 deletions(-)

diff --git a/best_practices.rst b/best_practices.rst
index 34e9c473b..5e1656a6c 100644
--- a/best_practices.rst
+++ b/best_practices.rst
@@ -3,18 +3,30 @@
 Function privileges
 -------------------
 
-By default, when a function is created, the right to execute it is is not restricted by role, but this probably isn't consistent with best practices for an API design. If you want functions to be executable exclusively by a given role upon their creation, issue psql instructions similar to this:
+By default, when a function is created, the privilege to execute it is not restricted by role. The function access is PUBLIC—executable by all roles(more details at `PostgreSQL Privileges page <https://www.postgresql.org/docs/12/ddl-priv.html>`_). This is not ideal for an API schema. To disable this behavior, you can run the following SQL statement:
 
 .. code-block:: postgres
 
-  -- To stop functions from being universally executable upon creation (note the IN SCHEMA part).
+  -- Assuming your schema is named "api"
   ALTER DEFAULT PRIVILEGES IN SCHEMA api REVOKE EXECUTE ON FUNCTIONS FROM PUBLIC;
-  -- To grant execution rights for functions to a specific role upon function creation.
-  ALTER DEFAULT PRIVILEGES IN SCHEMA api GRANT EXECUTE ON FUNCTIONS TO my_role;
+
+  -- Or to stop functions from being executable in the whole database(note the removal of the IN SCHEMA part).
+  ALTER DEFAULT PRIVILEGES REVOKE EXECUTE ON FUNCTIONS FROM PUBLIC;
 
 See `PostgreSQL alter default privileges <https://www.postgresql.org/docs/current/static/sql-alterdefaultprivileges.html>`_ for more details.
 
-The foregoing example may not be appropriate in all situations. For instance you may have a situation where different functions are intended to be called by different roles. In that case you will `not` want to grant `EXECUTE` to one specific role by default. Instead you will want to manually grant executability on a case by case basis.
+After that, you'll need to grant EXECUTE privileges on functions explicitly:
+
+.. code-block:: postgres
+
+   GRANT EXECUTE ON FUNCTION login TO anonymous;
+   GRANT EXECUTE ON FUNCTION reset_password TO web_user;
+
+   -- you can also GRANT EXECUTE on all functions to a privileged role
+   GRANT EXECUTE ON ALL FUNCTIONS IN SCHEMA api TO admin;
+
+Security definer
+----------------
 
 By default, a function is executed with the privileges of the user who calls it. This means that the user has to have all permissions to do the operations the procedure performs.
 

From 055b7820b35f234c23bb20ef4a069f9c082425ad Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Fri, 17 Apr 2020 17:09:40 -0500
Subject: [PATCH 327/652] Add schema structure diagram

---
 .gitignore                  |   3 ++
 _static/db.png              | Bin 0 -> 10150 bytes
 best_practices.rst          |   7 ++++
 diagrams/README.md          |  30 +++++++++++++++
 diagrams/db.tex             |  71 ++++++++++++++++++++++++++++++++++++
 {erd => diagrams}/film.er   |   0
 {erd => diagrams}/orders.er |   0
 erd/README.md               |   7 ----
 8 files changed, 111 insertions(+), 7 deletions(-)
 create mode 100644 _static/db.png
 create mode 100644 diagrams/README.md
 create mode 100644 diagrams/db.tex
 rename {erd => diagrams}/film.er (100%)
 rename {erd => diagrams}/orders.er (100%)
 delete mode 100644 erd/README.md

diff --git a/.gitignore b/.gitignore
index bf70826ea..00042c276 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,2 +1,5 @@
 _build
 Pipfile.lock
+*.aux
+*.log
+diagrams/db.pdf
diff --git a/_static/db.png b/_static/db.png
new file mode 100644
index 0000000000000000000000000000000000000000..bd463f2ef2a49d5c0f7a1dfca40cce621d35be3b
GIT binary patch
literal 10150
zcmeAS@N?(olHy`uVBq!ia0y~yU|h?<z&L?}nSp^pE9ZO}0|Td8rn7TEW^ytEgGcAo
zsp$ceBgK!u|7`QJ)j`OqJ-~UQmTJQkfhdhjt5-O@m>b}l)3Jj|yQ{;*b%HCSc+6C#
zY*!KP?j|O&l4c#IQ@aX9105p^?n}=7E^EK%|IF(1`TvTa-77x-vw%^dqdE29>FT7Q
zT?cNT?30ubIm2>aqi6oKLm$7CFyFtrTaaPxk?LLd&;MM<AviJf&(j?{_7wfpY${<`
z@Fw-z8883Hhl@}9@b~{elpY?jA?AV6{fLJz>MP%PpWCnVYtrM_XJhL`xfo<Le@XNG
zZ~I^TzAMC{>C253Cvukg7ll-X%}|&$bK50Ox#_3Bh^V+9RdcBe{_ub5AK9huY0KBU
z<Q1J#bId96vHD!kXKG|%!V;hU@z`tcenq$c_2<)F<M%$PVz^PvpzwQN)x)U_CGVIV
zeq9Xr&)vCxN)3b6yAQ@JGyhkun99q`(ZKY=flY%cbOC2cqo4uvv;$%m4B`(MYa9h`
zF#J$pQ(<B}!L&1hU4y|jLEeI6m4j{ugYN>-Ic#$u*z90h*L?edo&;NeqkvD-bO)Au
zjjS9^8w4a5IT}q6TEh3z!A(GVQ=5!}`3Y&RCZ~lN8l0yZiWbfd5Dei8bu0}K{=!|t
zw~Og+3){l>3l=8Ke|c+L1ZS{ZPGpT>zSe%zfW54>_Tkq8lQ~?^5B&TPw}WY2yZ<5C
z528QJY<RdIPX8doB%pN2VTxdEOK*W7zlubs6U&LPB?6l6uO@~qk$&m?PSGhv>}SKF
z1sNJ@UgD{pMQ%SA{#X%mB`m~n6;~<K)y7w@cb$6|yR0~$VH72|wt1Vw=L?N5GD^gD
zF~s)exols&eqsB?$uG(!c-k5h6VDi&o1x$%lV-e3qFCZ`+s+=zBR&bwHbku931iQ0
z{d%A+@$yF28(wcb->AM3C=>cE=YB-<VNXHdj)WK?J^t{%>|?P<cpok+;I1g#V|9<|
zePjQD{6o_pNPoEd!}^EkA124914<EsHJpVlvMpRr+7G1?dp@*zsH_q=+ZlHx;!#-=
z>qn7~Y=v`vG`gr}PTsLZAc!qf|E0xCqnC;=d1v}uQ@A~;`Q*zdd!ML%3jGxPsoHSX
zjCm6NI!-yWBeq7g-<WVin`_=8zlQ;40Yw^5rx;JMo)THOXGfbwxQ$QE>WZyDEI$T*
zwB(%CvaqGyWs%E9m(53fJ2SPWt#T|~;1=+C<?$8aD}_y3mU%tC^kd81Eo`?;Z>h*S
zr(dl6Vo@ddH~kkwtcvGUlWAY3pP9C1+8zbX6a^k$w*H9+G!o~e^%&TBX?hecQCj-V
zW2+ah=UMO5p0~Z+y~Mq?d-8kNPf0vwapK77H`8BEsZ{EobamR-NoOb7DpmWIh4tyB
zYaXAjJ;hr0yNBGg>(jnZyRTF4voF5R&oS_zr=sh^pogmttx<Bm7-s0V(dXl$M?FHm
zC!;jOR{Ff0bcuVJ%H+d731J4+GnG;+Q`4XFJhght_>@(2TGxE9d0w+m35PamMVoqU
z_1Wqkx@6gsXX~b|zP9L_hwS=uVf}&jOYSYVTYvBp$AuefFRnB^J1OmBgykBsYctd$
zFS{9sZjSrBPt2`*t?2sFh}Y}P*5oddT^zf%)}8&D;nmKomTQc6aP2)+6MAXYuh7N2
zRAT$`mgRN7+ac$C-dEp$eenCK`)1W`_*eJW?(cavH8xH*UbcSTm2G-$m2G$1>ZLQK
zKlZNbeYak1eOb)j+|ui>t{<~HHu0EykNk`aK6iY}W`CJcV`OS9I%C_cb2C=XY@Ky=
zM(?JVIsRpazuPQt-8ok?`)B26ez9d@FU6MY{@ZkAYtQzaZFAxdM+xs-mUy;hYFFrt
z(797D%*vF_s=X4Gu{cLKEja)4nXs#7hqhfT>soxY^YNS~do~$w5WcbX_Ss_H9nm|c
zzZI-j|Lydfk$qM3eCMf$gWW}sXB-!EpE$Yma@z9K=Q7g6pZ`6#*oIYZ{`DimJ7?_7
zDSTO~y7SkLu$^|rm&=5Al<q$KPVXK2o#WS5t@n+({gTn9LXO>LUd1MxVB7kyhbk(o
zLaS}Rn|(R=_1))%KXblheye<*{XF{7?;HM?^$)K<KL3&Yqx(<n<rCxsq!f6r@ZS-t
zu=X(1Fk7K5A^k@Fj)cwjbBT8kmQGewQ)E?CejWLG^Y#086m}~n9&YWO(wiuKzGaa!
zv(s#6@xwNUULAgRsPdudLnXWE^&S6>4w)^|Nm9F{waKJN>y*|ilPs%STE85=`1JVt
zRG!JvG2f>3t#nRtOzxeUJ??)#{#e@5(6Y@XCMo05PL-^nnxOnmNkwI!61x1n9J>sz
zDt%2@<?%o(!>9SuwdJKtFHg5W`j6*qPpstQnb&4so%w$ApUvk|yi?Ruzvo}Nw<Y~@
zNMG_f|Ji}Ff6lHhnp#}`q%Z$r&dS?dxxDvpZT2mV{<rPqTff`>Zxr5i-2WIo&oM6Z
z-tD=J*1JE8e%k)r|4q@Yt3e833K|l3b9e6k#(sr=qdm`?$i2&p&OblYaVXlA&Go5k
z_t8I(qV1*rMSOgG>E4RH%&N;&-M=M%Q++FaGk^1cmz6G=elL$OerJ|VJ+tZ1rtR$J
za(g24V&bYh3N#*1*l=j=qSZlbi{hUqh5B4A*cw|J-CJ{Z-mIU81>4*EZpdY>4PBwT
z>TiX~w-?P;%Xjrv_5S*lJR^DL@p<My%)k6S@^9tJz-=2>e7yW|$>T%9_tdLqpP4ml
z*3;SEQ4gl|Oq)4bQT_eDod3n)tMjsBr5CS#A!0GL@YPZMh5LKvl-b@bZmV7Pb<MAv
zv&y2X6WOn9T<Ls8^0MX|u2)hv&x_VAzrAVq-|)Th{qw`^;%gm0Ih}Mpbo5WR_w*vY
zv$1|VZK_p&opL#UY~Jy3=Jog9e|;sp<5|_)W2MJmhyS*yot_tQ*P{ONqh~v#-$c*d
z?weo!W%ift|I<E2|898ca9nn?b!_?B_htO+B==aP7?(Vq_jm8>@0H*4`Pa+J$$XTq
zG>|gVsuB2@@GJ4q;p_cI^13$n?AqkCYn1*i`LpuR<zM%=*5wP&;?nQA-T&SGbLF>+
zCi{<{`nTANsehh7dH!^NO<z-AY2W$t3+L?oopiVR<aAAa@igv#Q+{lIHuc%+&Gk3`
zUDf9j@!co3C+^qoAH8R0KhE#H|LsiWIosOlKk^dyeb{^Ex3K&T`CoQyHFKg)L><u!
ztGV>+%HNw`Ki>#?bm@}4lg@;FlZ$;r7#J87l0AZa85pY67#JE_7#MyrFfcT{U|=XU
zU|@Kaz`$TNgMmT3V9u^U8wLi({s5m4*Z=?jGvEV^=#q?#42+D7Ow5doOdyhpnUM*^
zU}9loVrGRXW@Kal%QG-CF))Fea}2yvYMjEd!s=FHy3R`OS(+iW`iT?N{EFor69g0t
z*m#9ytiqVtxOAf1Bu#w1%jVD9dV0-)%O|crjBH%iv|x{I&h(OLTOYsr@c;k+wC;7g
zPTiWY`pDJ$FF$_yk<z*5&Ev=Rwzg}REz8TwI(zhJU1eooN5`EjSLRNi9v2<0udBOv
z+ctk69|3-Tc{w>f9UWIEr~0ZYE>SslJ`o-XWiDYEMrIZc0dWpNNdYAzP9bT2IbBgL
zdrn~)MR^t{J9Z;Iwvrs)AJ1jBtrQLR<rL&+n%XV+{D#!^6A~@e{Ks~REuAHt9K+2e
zD$gUKBBWwwoy5<<$CSEKs_wEPm#DO)7CSqi5HmYx*-?2G4h|&?PAxZXqYz%7dXbpf
z5`r=;x!Yx(3xz^@#RL=$s}>jwF)%PFmIV0)Gbp)q%-sF1T+sM^+TB%WLhpZg`0>;J
z^PlIhUw-`k`49I$R{Y{_V_;xlO!9VjVd!9$^<ZFN;4JWnEM{QPQwCwiilz2t3=9nH
zC7!;n>`z#Pc&ua@RT@<o7^Ek7x;TbZ+<H5=z5cP;wBxCw(Q-R`Cg-fneaAP&<7<-V
zw&O+7{n^W&yh>ZYF4t49=wz(g<ek1{lg~bT$8X=TK*dWX^kT;T>Ha2@T)Uq9e)RVP
zgFu491O3^YN!)?l?kg5@=3KjV{ntv%Pn$0?+z2u2pKEcQ&G^FKTPMWizZjpt#gY8u
zgfT<Hii-~p`pqs)pLD_3c!g^4<fvKy9NPZHT$}sYNoA9VGyj1b%^GeTx?g{3EzgX6
zbc*L&mX+!;j)OLq8ppz4*vd}6^Jy~gPK}E@3-p!WsGL%t8FcWH+HRNl2ZCGYRBL?{
zJ33LMPp4%4J_muPyvj?ri1IFWNjle-t0{EsqFC*kruMJvq`eA*I3?W-pPGA5dZoAe
z>6?RQ;&bXvW=tzIuzek*G$E+}K$k@HBJW&A?Ir79o1V!mT&Y|Uxu*Q&mB*V+uANxt
zB2@V$dcng}nxFQ}wN{byG~ngmnqw^=8TEyIbB4i|9SM)8_}J=t-=5j}yveJ%D(~by
z;U`y)>nzmlKEvmA-X_)0_RObUMJLjd9<nl+a&5Y>>CUyAH9CJ}9C{mbG({#)etQ1A
z?z$PaRh>an6+M@DBTvoR+kgIWQ|H+ux0ZYo2ufy+oIXP#l&9^CTE5JY{6qUz*BpAo
z*m>q--Xz!LM4^yYmwg<0^SdIZG5prpa%SVQO-)>{G{vS}JS!0WB(VEzKuF|@6*Iz;
zrC7yMwHvx!{(s@Im{IvZ$*wW>cj1hgDthhq$Lwb?gxqPE=#`^-MB(KO&WYdFvqiGr
zU$fX{SCja&Wx+=hW-Jj^U9p<wN}|fk2u}ZbMLLtEe+o@t<T@?nc}{Sik3jNy&m=}J
zjSxZ4Q-YHF_s<Inw_LII$mdJkJD9qA!{ZafKHB{7^XiH?BpQ)YVms&H+SNN4>n5jF
z%ET`e{CxO=`icOi>7Kp%vd`N$3c4CFex3TIB~IFv@3{lZ)rp7u+rPL!ytaX_FUW<j
z(8}I}ckzA)))OpO4P&ZX_ZA=Y4`i&;n-b*QB4%53_=T}ZyPV_ENxe)_MaxAU3s104
zJv`M}@q5k&h7DJYnH8tI)IB>d&||)8W>(FUHM^z-Fxf0#a&&Igj-H|g&0S%!9A_<N
z9lc<>VpXba?-Nm$le>4VU3YY!wRIrho<*xf1z)|cY=7t2>dPFpZ<#3ja*b?Oc3l?E
zJ*%b_UW?{v^9tG8!mZ1DXHkY%M8QJVv&pH_$Ni$DoD76krrq8#p*Zb>)sj}Ns7(!@
z^xm#b;;VWnx@L>Xl+s+;<$@1__`>G&2=4xtn!;spZT+;R#TwJUy{hy|j+v0PBDqb}
zPVR4u%7+Jjv89_FU(1!RkGren_b#z*uGGl|*LLRL+RY#5Ua)^1*UQ$qhZ_Wi4}~<}
z@?Mu(^lhdc^YQH`mMOGPa=l=8IsHS%63I5JJ1Z15bNv_Wd)asRSRZHX6oxpVO=Xuq
z?>%K!v*dmZk3(}wT*0Mz#lc$x-<>uPXKtAJm+7;E(QNzhqBNexcU^<8_+FWyz~#x@
zIpb+ebMlkwd7n~tu8>KQ*<;MTC|Tom;K!cA_NYrSi;ehRU;5yE!+Yn!?)kmt_6sK(
zoJ?nsU=OK08?xT<>e(CR^_NnsO(XvFZDcrh)^%z7l6%5;R!8g1JW#YDPJ1zrL9$ku
zqM^;}d2h~T)i5mDz#73_`D>Ne;@9>4R~F3uV^<-yC*@<^ilb_4SHAf4_vXaaQ&*<x
zihNGvIoxchwqk|XO_|cW7GF<ZDfYSL|Kz}t1s`p;oj#`X#3zkqskg}z?#R0gkun-}
zlCLNFee8VFar4jGZ5)eb6h5=K&R4dt3_V}6E%tj0gQWQW4fCaM7H9ojZg(l^Nu*eU
zpK;{w69InJlg@NKNxYgXz9C3z-sir_ZqI*i^zWQGH`wvAH_vL8f18gOZa#NXS-1QA
zzm40@UV7s7`0k^~q`1=VS(o$0cF4Sn>zZdM=Wp<IV~2=9y`<nCCg)iW*{hZLOnr3o
zCF)vR^wlnMstF!aOyAqHXyV4{Zg*G?hOd&|cj1JJU3tu-qPvsDmx~mIn-|7e@|oAX
z{qbmO);d+*qD4P^9(!bQ2B+vsd54-@Nw)O$ei0GN^YP83CkrG3wr$s$sN=t=N_%@z
zz{c2~-zNgyXEwUeaqW4i*g3VNDrUD+IbY9V5A!A0H)O5<JY|`kiryJT{nMFOzStRC
zO?&zO)UCx2e$FoJWjeJwbo#ICP`yXL_ME+YkHdYt#ov`V))}F4-z!D3SBUOTT*ALG
zs61HSOe*21^#WG5Ee9IJE-*1iB{*<rG&1TMEMVPopvEhEYs|`Zwt>%$_Luc-xfXu%
z^|9`=x2{coeB|XV%S)@G)T3&fwphek+eb;8YHl&pn#%ifLj{O?yC~!Bm8{o?MY?w9
zYI}2wKYNuowIX9}lqy$4e0fmx?5(%*wr0)!*zL9Tms7ymecQKN#Vp(*vvX7I+OQ7?
zZP(R`?q500ykmBm`L@-QJq~=?a%yYtry#$X%RBdO+?rjtqV#llrTWxcYcwZF<`wXK
z-ny5oZta`BA9j3OYx`z-@7}De<kexf<JMj)OSw?x$hSLcbt&`yTmGvr{al=K`<X}f
z=51Ni+V}E)&t86Xt500^ja2Kap^{tHI9YdGvl5ST2@KPodiU+xDZa5Qq}D&K?+|%-
zJ-&3xtz`kZp-Jh{SD1fnir*2p`|DrsM{T#3w6-y>{rdK9QKiCKUA-+GiykoTa<sV=
zD!%6MlLCtyo;UBVT6b&8u3|sg(4<*+BetAccfD`_`dMj*?o4pazMb^gEjzngdF{4f
zjTwErA~GY6URiLesy}G^-i%<?ZyUEhu6q0SeXwl$$pu?OZ+{MR3OZV}ytQ`!V~ulD
z9v;hE9~3QpGqf{u$@|E!V!Br6vhOcWP0saJTWe~(rrhl8gL`U5d$(m)B?@y_r24X~
z)e@cGdryt;XLjY@@Re(2->f>aZu3c=XPcgHT`%l<Y}a0`$zfTw#hYUy?;C!tTHAGB
z`1*wJvu97``gu7ncl(?}>u0C>Z7I`S8=|i(^JVpH>AhaLnpdtJc_%eP=KZ^A<>hCY
z9#p-JzCHWt+qb5F!eb&%P0H{z@#5}2KZ{%UPuli7%dh0NZdy5M{h8-mPNmre`t7_J
zWqx#{`^wu~slloXRQtkGcgNgSDNS{c?f4NP+d5mcJt(;K)heM2LTg+6Pc(>Ks5-Jm
zKtI{vJ2^M_n{e3b*ACuyR{rwu5xDg{QGe$JtAtF4Ze!hL%Q?2lnd<h2FHL07UGViv
zrtF7;tBMzxq8zw07<Cu0ZULooRF2)k(vq4>b>&4ITSS(WW-TxMvFR``qb_S^ZQlQa
z51T&wMMlXoO6dNR7hfB0x1e;_do_l|NA1O<lBY?eZQ+ZTmq|$9WBKRKqSU%A8M1Td
zOyFOxe%w7j<<hIp|9KOw1U$262_5dbHamH;n4T8<`j0<l_So53RaGZdK6-NX<;&NL
z|0>JW$+>z6tPSV7Fl*TngKpib8`JZ@f4?smecbNvqZ2jdF8^#Rx7Jtq@TpClCi<U`
zalyPrOb;agugTaO)PC*a%ZmqBAO5y6{!;nzco`WPnf>?do$~qnRjx&c{jp{}U=yvy
zaPQ;!j%y*RZH8;j^ZonyerHY;wy~&iKKH@YYNAARm}40SLuE2&L;0W03r%A?6TM!4
z_`+S&)ZXsyKIK~Wt4YEx+2KsD&WeA^v}9@6vytV1^*_m@AoFB(dmi4f`S#kmDE+mj
z<qu8Ux%-uu*Y2tJDA+sI|Fj~*6W?eCo5%BY*Pis^+5PR>>Bo<iYi=}87A|^o_;B<2
z_{5La6|H>z8>;#E{0lGC))oBOnG)6h+mF%Ua~Rms)2^kcwk6s>l-}%lb){_oo1=%<
znD~G9=U=j|@9dBJ<y;Lv#lh+(TsxxrEc5HZ*&p8vFc|;)zLKHhxV?7N<ta1N&61Li
z{a0Z8&{rS!c5S8?PftGQ`{wzJjxgv-^s=BP1T0D9sdbdQ`@Th`zcey?_qg1-zqtO#
z@xbl1y0focT%EY@tGaH4?<M;!ZgJPX%s=t<ukr2FfW~VxwzzFg%G<N`X3(3=-c&2g
zyA>1P-u%@T)^yx!i%jOyv!8u8*xr83%=fL!cI~9fkA?p)c!{1dJ|`AAZ|#?>D(;(Y
z{@z^EpON}f(^$m$ZlL-9U#Io=|M~hwd+zd`2a@(}v-6L7TYPS5@SQUU_Rsg!Onb}y
zT~zmx=NIWe^^NlDc-ZF~G=9~uTRhd|^!5FpR)|*#o!^nP#iRCb{)z*NuXfrUXPN(g
z|Kk50o6kL#Elm#6je5!C^+My|!U;u7TP^>lGfHyyc}b{m`P9W49;Gi9a4COF!J)M;
zJ-iEbe#Z!<iiJ*}_DNbdW@W~XDUyHoBwe_(dWF<lnRT0PnDba%K9y<ZcFd6b!q1db
zm&F&!OusMsVapbo<5jBZTVIGQp6aT)|I(??#c8|l@`P%i_xN-vP0(NIiFiy12lpz|
zoh939Zzg3veDG)r+k|B?d@pTg-xrqfTXX5((pLUM>bwe05tq(P^L0{;QmOrJsLL$6
zgC$(b{KX`x%(~ZFPd^mqozj2Cxoc08_S7?v@0)dbZQagO7dcfT%3{Z)KkFQpT4}o;
z`%zkd`B3<QwMiF67f*e1W2;g}*ra&(o$GF7EIDWRSn%tU^16ddwXeNDqFXEO!Ob52
z%k#pi&p9i*7froXY3d}hSoHZ#ZnYk<?Gq>W1Z^q!HoJ;t%MRA*3q$PPnzC;Sx^uIK
zxAE)x%0{^EGw<wJd^G!si)NJ7eFt%m?#m}mT7av^bz6#RX1`L(EaX~e2(BUb`QB%}
zd`PwbIKvN#)P&Of{Hg2BKlitb&7UazZ1WPeZ6?>h#G2^ZDXYJ_;PoNzSLf2Bsynz&
zn9g1CF3eMQYuMU%>%z2l-;Vy_yfy0Xr`%t9bHt`UxD=ByHT(9Hr9C@yuV!7ndc|$(
z6Y=QXrhQvV-kI}qFFTt2#HIM9eqG@0gO;vq-R@oYar(jRXRyj9^XZQMEu0|vBgG#o
z4*O|u^<?<8Wa`6u;Z+$?GEJwaUi<YeZ|5E7)m|kN)pdLS+pbuY`S3xK?z>3wsM{>Q
ztJ<&WrAK-CnU{GkJzDqV$kSszYj4Hv7kb2>9h0fb(sPGn`O&&3F6G}Qtht&cz4FRA
zwaTMgJm!R+39s97;?FL3kM7EXoxF1E^Yf-@zqVFe5w&(x?7F;3$HGh3Z#%tm@dlNo
zbMq^r&Zw90O21nF@yxB<m(|Y#FD2O)O$u)eb2}kpB)LVRe~yIKg-aG^*H8BEE-c`c
z>x)^P6#cx`Rq0ZB<dz$LFM<+R#ETbe_lrd3SeJ_~P*tg&?$-VCglCZ5+C2+`CpdTK
z7Mxr@RoJB1Nl15@@UA8Na?*>YHB4|hUHwEQvnO}|-?fUD<{Z`0R;iutak}`4i~FkC
z?}~Jf9``+MyrZO~Y~7|<3)v;yyM^PWbk}pnTCFk<*|zMkqwBoSuSFI<H7$B%A5~ds
zxzZ*|PFelmVo~w!r>59M$sK%Z9o2R~^p47<qWKq|T1Rm<78|QxDw4PSD7|*ciK*_X
zmx^R9KT7MyK5>a!x#dpN>HIB6mcHMVxzqQ>C&{&YF0|@Ay;LM=`B8H1jtj0y5Vp8(
z^Y=eiOEWB+PseW&TEx9QB<kFQPoirVJxE`1V%bv(%a5YEu^+4~Hf376`AJ;ZwMWQR
zTfIWn`{kBj&E1S^U++?gs=WC6g7@;P_6tw@d#&iKJJwtiRjaHne0f)<Nz{|4%dX};
z>R<ah`?G#;Sa)6H|K0m??;0+dDmHtcw&UvjCn-r$-=C*{@4a?3_47N%MAMobJ9lQ7
zuG2sF?!ErG*}bQ`UteS9p19?r7svOhOk1j&vx`)76lHu$FE8x97TPUvnCCo)`=9M;
zi|cMLxNp2DROCO03v0$#zZbI>-Lu-Cd*@D2)b{YRX`jC_)$iDqeZ_E>)xyfie8V-{
zOFo{z65JSe{=`X<E$hxpUDx$mUDudt>Zux9f8bMj_OUCmf0<%8FP<vAUtq7$mN&}k
zm!GtRpS3E@cq|p!>HhfLt9_;Ah5juU{~YNFi#ud|Ys!LD{&krd4?8wxn4UXft<>GS
z+569b=AY9Z>`HO-p8TQ1%rxVsT8Xdo>e94dpBeujx%;$qbKT_)3U_C5y8Yc(S$)21
z+Jc{@T9-DJzVo|kwQu9%&9lPH&A-%NdXTj#TUI^A!b>pf?nL4FUs5|}#V=P`n^*9&
zCCu}b^2X4GS7%;$Dja30>8}>l8kYX#i2N3#BDsxgc-DS9(P^KNx#-z-O|R9mG5Z#%
zs@8^gO*371T6~Mpq<JNa`E;|N9O2*cWXb!ii;I-i>lRF%zV%tN)0T{ajY~?;c82*~
zYjzD?l<M~)$@BFbeqCq3U+W}viv<p`Z`o9Isr+ij#EHURGgV#Atq-0l#;5l+vsU%J
z<J7E+hYo&?&&jyjId|gp=xbZ*l#A--UfRO*hFfjRiCoFE=gvy{Wd1GJWZkkNb$^ik
zX%EJ=d5htVF6$`W1y7Zucu`wmUyo#%zV>CTW?XwQ<1WwV$46D>9KXw*(d(A|B4ys^
z&PAVOGCnT&%CO~+L-)F3$7MqIBj!u>hJ9XlQN`A~B$mf$LFwg>yML<Q+_72o?#kc!
z@8h0vNtgTHK7Z-`U9lSsQO%hbOZDF6X|CP<%lGlOT^IM*?BBot)tc_Y@|$~h+GW4L
zS+irs{kwC^w{I%Tx-)mX)Yt0caV4$1L5-2t7v9H;gH4Eh9b<A<?(1xAAz|^eZl70`
z7T=8&KRhSx&Q%km&pR$U>1MC~=4T#WvH7$2^SEc<N{iR>ZfgFz_cfEWL$*iG#Zo<u
zwb8{{g?~3)G`Sz~I_b{hw#i}4?A=?ZZWX?JCRJa0?dEsi*Ky}CtX2Ff7W=&E(yHz8
zYx}=k>)xfk_H)&JztZk$$@<c3KSLEA+_I)ruS5QIZ+7v)?soR>=B;{d)j4zTZUcEi
z$twEJ#&CJv*VWfq%^I#vsOnx<d~uHwcfy@H4^?{i1n|8rHPm~z@>6L{mGi0vv&&Mi
z-+TG!)}31$!@0MXFNb;AIV19Q%$)m^-u!;|aNo~@{>kPkWs;GvlkUVk%GJ|bXRWt4
z_ul;brP~)-KRo;4n(p+ya(T12e_j3h8{Zd*y$MlsOZDDm+z*ZyKJlyL|IW=juf$Bd
zuru`k{<(WU%ntjXB@Obg?z7qtzAUvL_AR`+YVmLB1y9AJd~bQOZmC(=;-793#2j_%
zlGc}tTqkCGv2AIKWYhh6F>1;N52XuISIvuSw<JwkDv(hbW!V1gcZO?t0B44#r}k@s
zLk<a&qL&=J9it?_oa|{1dvM;>-kUX}cS$p=``Xm3hwes`Ll!)}d991(j!wsuwT28^
zY?QS7=DEgZKHMXa>AGO4z*>_wQ~3`Ye)b32aBi8haH`${|HX{{vwwz!rEzSTGtK>l
zKHGsqE8SQW_i}6zSupjCk_aEqMggZ*n+ucty!97MjYwE=_CJ%lbmjupsnaGpXB4U#
zbR7*la$51iE8&CB4<6_cQ!Ub%CVt`7CNG68LR>wGpDk`XbgEns@;iN?u=S8}<42tx
z9u<-f-WqH7v|Uh7-fSctpLoXm^p6Q)r<ZT}WVxvE;(-(~-iI~H%a^xa2)bKw*+__W
zPV^DA)YMO1x(|eVr%!U|)?T}$?=Y8ZQe$TBJQj&l&z{~(HLhB3dTzzOI`#F{Rg;4C
zj&5w9-=4<glQZ*5LaWO${%|?>_xmdUpS2eG?)~!AWR(I{8~KFvixQqM3tLpL?)&y+
zJIl4--|yEr{GS{qAG&La;P$rZ%xiMf@;d(%#f0DBetCZ(|NXt{-|n)1u|8UudS(}w
zuHV!Mo}LXKx>j~}g(b~=fAPJhPS0!p7r*!Hl1g|bzi#z3<``XxUsGh<FB_i{JgxlY
z@b7hh8zxNJF-dZ6il~N>xx7GvadCG?*P@^!1<DUze=qwjb#h+!L!n^K;D7U4D__oc
z?{L*gTBRaqQT+d7?fSnOpZ6)GFU^`56)7Sd@>h4`PS>E`g)xg#PL#PCcHjGYxa$AE
z{;rfyuFmJhI#%0p9Z#9CNwC_j*+<Lh)|sMNf7-+uQ`<zMIF6?=eacl!JGsat<z@aw
z|GW+N_Wz%J#AhFOma0%xSYwF!iJTK9&N;Eya?>n*{SIr-4HTOqZ6tF3m84_bsrvqZ
z4_LV$3(Y<$U1=-5T(4r8o`&?MrxzYga!9K^tFxT*P^)F8<?CI_4+8=!18UFQDx7v%
zsOs2*klWU?BK>~P%vPJP@^Fc0&8d~@jGS$UCY}?Rxa_5BbK#1eCY$HDNyWY4?oNEM
zODsQL=GtD%`$eyEz4hCjCO%&woE0g1T&mk=$%=*L|9{u**m&m2WjD6qS1iI&T`f)r
ze;!!8dFF$daJjV!mp>nS;%T3kws3x3{><o(zc>DUQg7KecU6T5@8TuuCTpudomc8!
zc;j)$vV#lTR<<gY<rMOU=d#?1u$p=9X8WVNS?kxomF}@uJgm@Buyn~yzAZurH;PpE
z95k`H(c$7IR+ZPFk)iUW<ju;&q?snW!agmSx*>P6oNB5;$A!eDm#gwmM;w|c!e!SO
zAf?%A@>utd|G6gj7Y|ud1so1HPqW*=W|Z+op!4<dWT8Wna(&7PCI*i@PCS&-6N>z_
zht+fOv<tew?fIkPUz(l1H22ZG{ayT?3=b8!+!&86DHQKX6mL_yVq;^w<=(5Uk-w6=
zpR`Z^DERE)#W~Isq&}9v(6`O_8@eL*?ODYPkrT$Y8LbCQ9k_Wi7<CJHLE~Ny+%e3M
zF|g|lkkKzBX<_f|V`h`?NVchUGqE`r7c&}FTW9>&o{<v8?S1gUrzDG8b@DuI0+FXw
z1v=W48xQ<>6JxMrg8<LDvrW}cwG)rjbR7&@^4m_Ji%ra9%UPEbZy&tfe_UZl$U;#k
zv#5wK6IS+Cn19xD`utv@_0)wfosxTxbJLkNCmQeAAXK)!akstbLec1q;LdY1Zyyur
zDw%HF?Q&pi*M&nfT`ipQ^?P($oVrVHKX|0$WVm2yQcmkMtM`i+ZhLmtJ*{zC*On%Y
z8<qWmXD`0e>S}WE_KYev)3Vs}f=_V4Ql+((dydv@-@8?2hN@^}3FDLi&8UMH-sEt&
z2UI9Z9eOW*;z*mSiG0VIqfG}pR<;`}ZsPr7q9qtT?d<n+R-KdLoM*Hz(gKCmvkMz;
zZhYo;POtg&l1IOuu6UhV<M3j-L3rpU*Xeh{Czh;n{Ve>8Cqc9Eb^l@=nJp}t^SH$1
z_UT;je}6&gKoHyY^M}I%xSMB(Y`pQ{sY<=W7Ht6^*_ivh4Wi8An$u2J>ootl%l_qh
zL3nG{j(=>mKaR<YnQZ=Z>BFI!ztaoYd%AWgoimMIIP>Y^Ht~~p7^kfgd-e9_U&&dK
z|1v8apRKc5w?Efj`LT7w)A?=UDewLr_$pbs?ectvY4uWZ_D;{<Nyj`9T*7eLop-(a
z^qv3hH^}b2EymU}k%56hwZt`|BqgyV)hf9tHL)a>!N|bKK-a)T*U%!w(A>(@!pg`}
z*TB@uz+h>6Drn9Xp&>UvB{QuOw}vaX?(Sq@U=RV>P>_;l6_#35oSC1;5a8mbYp7?c
Uz#7AC37W+9boFyt=akR{0J}*Yu>b%7

literal 0
HcmV?d00001

diff --git a/best_practices.rst b/best_practices.rst
index 5e1656a6c..cd80ac539 100644
--- a/best_practices.rst
+++ b/best_practices.rst
@@ -1,3 +1,10 @@
+
+Schema structure
+----------------
+
+.. image:: _static/db.png
+   :align: center
+
 .. _func_privs:
 
 Function privileges
diff --git a/diagrams/README.md b/diagrams/README.md
new file mode 100644
index 000000000..ee4e31da5
--- /dev/null
+++ b/diagrams/README.md
@@ -0,0 +1,30 @@
+## ERD
+
+The ER diagrams were created with https://github.com/BurntSushi/erd/.
+
+You can go download erd from https://github.com/BurntSushi/erd/releases and then do:
+
+```bash
+./erd_static-x86-64 -i diagrams/film.er -o _static/film.png
+```
+
+## LaTeX
+
+The schema structure diagram is done with LaTeX. You can use a GUI like https://www.mathcha.io/editor to create the .tex file.
+
+Then use this command to generate the png file.
+
+```bash
+pdflatex --shell-escape -halt-on-error -output-directory ../_static db.tex
+
+## and move it to the static folder(it's not easy to do it in one go with the pdflatex)
+mv db.png ../_static/
+```
+
+LaTeX is used because it's a tweakable plain text format.
+
+You can install the full latex suite with `nix`:
+
+```
+nix-env -iA texlive.combined.scheme-full
+```
diff --git a/diagrams/db.tex b/diagrams/db.tex
new file mode 100644
index 000000000..907b3c814
--- /dev/null
+++ b/diagrams/db.tex
@@ -0,0 +1,71 @@
+\documentclass[convert]{standalone}
+\usepackage{amsmath}
+\usepackage{tikz}
+\usepackage{mathdots}
+\usepackage{yhmath}
+\usepackage{cancel}
+\usepackage{color}
+\usepackage{siunitx}
+\usepackage{array}
+\usepackage{multirow}
+\usepackage{amssymb}
+\usepackage{gensymb}
+\usepackage{tabularx}
+\usepackage{booktabs}
+\usetikzlibrary{fadings}
+\usetikzlibrary{patterns}
+\usetikzlibrary{shadows.blur}
+\usetikzlibrary{shapes}
+
+\begin{document}
+
+\newcommand\customScale{0.4}
+
+\begin{tikzpicture}[x=0.75pt,y=0.75pt,yscale=-1,xscale=1, scale=\customScale, every node/.style={scale=\customScale}]
+
+%Shape: Can [id:dp7234864758664346]
+\draw  [fill={rgb, 255:red, 47; green, 97; blue, 144 }  ,fill opacity=1 ] (497.5,51.5) -- (497.5,255.5) .. controls (497.5,275.66) and (423.18,292) .. (331.5,292) .. controls (239.82,292) and (165.5,275.66) .. (165.5,255.5) -- (165.5,51.5) .. controls (165.5,31.34) and (239.82,15) .. (331.5,15) .. controls (423.18,15) and (497.5,31.34) .. (497.5,51.5) .. controls (497.5,71.66) and (423.18,88) .. (331.5,88) .. controls (239.82,88) and (165.5,71.66) .. (165.5,51.5) ;
+%Shape: Rectangle [id:dp7384065579958246]
+\draw  [fill={rgb, 255:red, 236; green, 227; blue, 227 }  ,fill opacity=1 ] (189,115) -- (252.5,115) -- (252.5,155) -- (189,155) -- cycle ;
+%Shape: Rectangle [id:dp24763906430298177]
+\draw  [fill={rgb, 255:red, 236; green, 227; blue, 227 }  ,fill opacity=1 ] (292,118) -- (362,118) -- (362,158) -- (292,158) -- cycle ;
+%Shape: Rectangle [id:dp3775601612537265]
+\draw  [fill={rgb, 255:red, 236; green, 227; blue, 227 }  ,fill opacity=1 ] (397,114) -- (467,114) -- (467,154) -- (397,154) -- cycle ;
+%Shape: Rectangle [id:dp7071457022893852]
+\draw  [fill={rgb, 255:red, 248; green, 231; blue, 28 }  ,fill opacity=1 ] (269,199) -- (397.5,199) -- (397.5,273) -- (269,273) -- cycle ;
+%Straight Lines [id:da8846759047437789]
+\draw    (268,234) -- (226.44,155.77) ;
+\draw [shift={(225.5,154)}, rotate = 422.02] [color={rgb, 255:red, 0; green, 0; blue, 0 }  ][line width=0.75]    (10.93,-3.29) .. controls (6.95,-1.4) and (3.31,-0.3) .. (0,0) .. controls (3.31,0.3) and (6.95,1.4) .. (10.93,3.29)   ;
+%Straight Lines [id:da6908444738113828]
+\draw    (309.5,198) -- (307.6,161) ;
+\draw [shift={(307.5,159)}, rotate = 447.06] [color={rgb, 255:red, 0; green, 0; blue, 0 }  ][line width=0.75]    (10.93,-3.29) .. controls (6.95,-1.4) and (3.31,-0.3) .. (0,0) .. controls (3.31,0.3) and (6.95,1.4) .. (10.93,3.29)   ;
+%Straight Lines [id:da7168757864413169]
+\draw    (398.5,233) -- (431.72,154.84) ;
+\draw [shift={(432.5,153)}, rotate = 473.03] [color={rgb, 255:red, 0; green, 0; blue, 0 }  ][line width=0.75]    (10.93,-3.29) .. controls (6.95,-1.4) and (3.31,-0.3) .. (0,0) .. controls (3.31,0.3) and (6.95,1.4) .. (10.93,3.29)   ;
+%Up Down Arrow [id:dp14059754167108496]
+\draw  [fill={rgb, 255:red, 126; green, 211; blue, 33 }  ,fill opacity=1 ] (312.5,288.5) -- (330,273) -- (347.5,288.5) -- (338.75,288.5) -- (338.75,319.5) -- (347.5,319.5) -- (330,335) -- (312.5,319.5) -- (321.25,319.5) -- (321.25,288.5) -- cycle ;
+
+% Text Node
+\draw (201,129) node [anchor=north west][inner sep=0.75pt]   [align=left] {tables};
+% Text Node
+\draw (307,130) node [anchor=north west][inner sep=0.75pt]   [align=left ] {tables};
+% Text Node
+\draw (414,127) node [anchor=north west][inner sep=0.75pt]   [align=left] {tables};
+% Text Node
+\draw (272,203) node [anchor=north west][inner sep=0.75pt]  [color={rgb, 255:red, 0; green, 0; blue, 0 }  ,opacity=1 ] [align=center] { \\ views \\ + \\ \ \ stored procedures};
+
+% Text Node
+\draw (322,178) node [anchor=north west][inner sep=0.75pt]  [color={rgb, 255:red, 255; green, 255; blue, 255 }  ,opacity=1 ] [align=left] {\large\textbf{api}};
+% Text Node
+\draw (202,97) node [anchor=north west][inner sep=0.75pt]  [color={rgb, 255:red, 255; green, 255; blue, 255 }  ,opacity=1 ] [align=left] {\large\textbf{auth}};
+% Text Node
+\draw (300,99) node [anchor=north west][inner sep=0.75pt]  [color={rgb, 255:red, 255; green, 255; blue, 255 }  ,opacity=1 ] [align=left] {\large\textbf{private}};
+% Text Node
+\draw (414,97) node [anchor=north west][inner sep=0.75pt]  [color={rgb, 255:red, 255; green, 255; blue, 255 }  ,opacity=1 ] [align=left] {\large\textbf{other}};
+% Text Node
+\draw (358,306) node [anchor=north west][inner sep=0.75pt]   [align=left] {REST};
+
+\end{tikzpicture}
+
+
+\end{document}
diff --git a/erd/film.er b/diagrams/film.er
similarity index 100%
rename from erd/film.er
rename to diagrams/film.er
diff --git a/erd/orders.er b/diagrams/orders.er
similarity index 100%
rename from erd/orders.er
rename to diagrams/orders.er
diff --git a/erd/README.md b/erd/README.md
deleted file mode 100644
index d71e8e263..000000000
--- a/erd/README.md
+++ /dev/null
@@ -1,7 +0,0 @@
-This files were created with https://github.com/BurntSushi/erd/.
-
-You can go download erd from https://github.com/BurntSushi/erd/releases and then do:
-
-```bash
-./erd_static-x86-64 -i erd/film.er -o _static/film.png
-```

From 7714bd9623d2f93da140a727f1e81cdcb50dab2c Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Mon, 20 Apr 2020 13:36:48 -0500
Subject: [PATCH 328/652] Move HTTPS section from auth to admin

It fits better into administration concerns
---
 admin.rst |  4 ++--
 auth.rst  | 13 +++----------
 2 files changed, 5 insertions(+), 12 deletions(-)

diff --git a/admin.rst b/admin.rst
index 17486b155..52bb51a0d 100644
--- a/admin.rst
+++ b/admin.rst
@@ -87,12 +87,12 @@ This is fine in small tables, but count performance degrades in big tables due t
 
   -- Pending nginx config: Remove any prefer header which contains the word count
 
-.. _hardening_https:
+.. _https:
 
 HTTPS
 -----
 
-See the :ref:`https` section of the authentication guide.
+PostgREST aims to do one thing well: add an HTTP interface to a PostgreSQL database. To keep the code small and focused we do not implement HTTPS. Use a reverse proxy such as NGINX to add this, `here's how <https://nginx.org/en/docs/http/configuring_https_servers.html>`_. Note that some Platforms as a Service like Heroku also add SSL automatically in their load balancer.
 
 Rate Limiting
 -------------
diff --git a/auth.rst b/auth.rst
index b762bc021..48de88125 100644
--- a/auth.rst
+++ b/auth.rst
@@ -60,7 +60,7 @@ You can use row-level security to flexibly restrict visibility and access for th
     message_subject VARCHAR(64) NOT NULL,
     message_body    TEXT
   );
-  
+
   ALTER TABLE chat ENABLE ROW LEVEL SECURITY;
 
 We want to enforce a policy that ensures a user can see only those messages sent by him or intended for him. Also we want to prevent a user from forging the message_from column with another person's name.
@@ -295,13 +295,6 @@ The last type of critique focuses on the misuse of JWT for maintaining web sessi
 
 PostgREST uses JWT mainly for authentication and authorization purposes and encourages users to do the same. For web sessions, using cookies over HTTPS is good enough and well catered for by standard web frameworks.
 
-.. _https:
-
-HTTPS
------
-
-PostgREST aims to do one thing well: add an HTTP interface to a PostgreSQL database. To keep the code small and focused we do not implement HTTPS. Use a reverse proxy such as NGINX to add this, `here's how <https://nginx.org/en/docs/http/configuring_https_servers.html>`_. Note that some Platforms as a Service like Heroku also add SSL automatically in their load balancer.
-
 Schema Isolation
 ================
 
@@ -457,8 +450,8 @@ The response would look like the snippet below. Try decoding the token at `jwt.i
 Permissions
 ~~~~~~~~~~~
 
-Your database roles need access to the schema, tables, views and functions in order to service HTTP requests. 
-Recall from the `Overview of Role System`_ that PostgREST uses special roles to process requests, namely the authenticator and 
+Your database roles need access to the schema, tables, views and functions in order to service HTTP requests.
+Recall from the `Overview of Role System`_ that PostgREST uses special roles to process requests, namely the authenticator and
 anonymous roles. Below is an example of permissions that allow anonymous users to create accounts and attempt to log in.
 
 .. code-block:: postgres

From 79f2af08e301d720694cf7599bbe5772473c9dae Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Mon, 20 Apr 2020 18:16:06 -0500
Subject: [PATCH 329/652] Add wording for schema structure

---
 _static/db.png     | Bin 10150 -> 9232 bytes
 auth.rst           |   2 +-
 best_practices.rst |  20 +++++++++++++-------
 diagrams/README.md |  12 +++++++++++-
 diagrams/db.png    | Bin 0 -> 9232 bytes
 diagrams/db.tex    |   6 +++---
 6 files changed, 28 insertions(+), 12 deletions(-)
 create mode 100644 diagrams/db.png

diff --git a/_static/db.png b/_static/db.png
index bd463f2ef2a49d5c0f7a1dfca40cce621d35be3b..a3dd2d85abeecea82f09e27d0dbbccbd67678397 100644
GIT binary patch
delta 6745
zcmZ4HKfyz>Gr-TCmrII^fq{Y7)59f*fq}7-fq^lOgPDPWA-rUM<3`0qPL3G?J|V9E
z|NoynkyC8)0#5eH3piQp85tQE7#Sddk&%&!iIIsJgcv~#CT3QM44h<QW?*DwU}9!u
zWMW`s0tqv-aq&v239DO)={ifA_$s+)X@=D5Cr;3bZj-SJ6HqW<;}zx<mX&u*Q1dG;
znYQ)gmml-Co{nr>cH-*8$FJ%?tT}M`|NsBqW%F%wreD4Pa@VO_O$+v<b+4PS`pDX4
z%k*`1<D#SUva;-LZQne8EH5W__UO^Rj*hw0r|;di?aq}e{ysi+m6Zbg{L+@8oWe3p
ztn9LOF)W<Cj7-cNf|5)u>})(j90KA(DrTHQ(#oFM%&eRxIlMof%S`PSJhoG;e%ngX
z=QpHwtrcyl=D&VIBG{KRIfmQGj$KinW!412rL%;M^w<RXnMAehc_dVr**FCh4J!-z
zCbbLlN^AJki#Qhwaquyvu9T{~tjHxQ9Wz^knVnNoi@ofqJPQYhk_D$x2rmmer*#s)
zpbU$a8+Yz@*^pi_b&=8v1_lPjk|1@zU<PBCw2s|plx7N+ue$#}^zMiA4?lg}f9c)w
zgr>}o@6X@=5Oc^hVzN88ZoLSP3B%1(^Vc&lh=25SaSW-r^>%J&{cX3h<DL_yRGgT!
z=k=A_W#)GkIpQ9qIts097RmLTn7V%V-pgs;U01rM#aQkQc0ZZ6IrGxl{ddh7Jen9Z
zCmuP&AawutkHy^v4L{G#zHei5Mv&vj#imIrt%ni>?@sHGjyCdh@)vLV?8RtO->oaX
zB!BUoDZJjA!80mzK5e_z@yb*%#^IKsXIJ~-PLGsSndDRYa~DoKyL0QFI=QX!s^5N9
zh;*tfxTUK3Z9^mb($H6Tvdyls9yrAE`ODOaVN;rP#B--QL?1ew#lcqKt?3<N5mLB8
zJ=$!trnZ;YH1{tWQgM6luT79NQ5D>{YkU1U>*xNf0|Ga337ItgsLf_Jbg&bds#3Az
z74!djaeb#QaIpn#ann{Pv!Ah^--VTB&!pY!!y4ZuC^)~q!0mC`F7&hF=S4gRJ?*|5
z=<sWqWH4S}{c-C5(u$JI12Jcx$SsQev0n90gZu(}v#Wm=8p%J54?AO5an$+GX~oNz
z8LKR3*GJ2o=KHYT)p=3#`~;0%n>sEWe-Q6~#PuToG2trzD4(U;JCAN#GfQjMm&)aj
zlNP>EZr(NP>_W*eQztpvZ#i@RW@)Ux?y3WKges@;{_;-bJG42Aqnfd{R;YHXLutM3
zE~(_M*y$2Wdm8fjtwdwL2`joO2``gfwdcd#ms2*)*LyLq{{61wv3$W3HJ1h^r(KlQ
z`ek3Z^yfm=*c5@^Z|3=@rf2$H?L2z$?&Os`MRWA8u5@VME!THe(Rjf-S5eMg2BB(C
zmS4QN=ufKDnG-MGt!tLOb@$wb+s6(S*qq{#KI$L%EjY`MqeQKBuh!-Oc9#F1HM2ha
zRlXqEb9d%1+l+IMtyS6UThu!LY8CI*zo%+x$njvR&7`D!1<U^Y&Z4G%PodVf$xo)7
znB3{V^`QEa7QXXqmrp%8nUjC3q7xU#yv2?UmSTTD2~TpeiqZ8wVR7(hhsXrp_jS|$
zbQ&M(oUG!-TfSC*;s)nzj)UfYf7Uv6JgI1Mnkc^5JW%@QaTexE#YEf4?e*QhLMu5o
z3T^E5aos4WW?uG*%jsiB4d+6RstH>st4o~a-neA4P1;k}h?y2A#V@{WZ87uvG-I3K
zrTtbXmrt5u_aINwDJ4B*=CSXAdvxPfPVK0ObNf=WHmK!Bt<29FMrN6HL6ev0M<2I8
zyo|%{RFU!22_bb!-x%z4AG|Qq6T1Js{*`Ct?4n637vJ8Dwz?VqsZ-L}N@#6IbEKrU
zjg9@un|Izm>7AINVcFBVEJDuC`|c#wWt(LS3=EY|A5vabdgRI5pOv*2%>7~#78*}^
z($RG1YnqDp-+e6?_j<o8@zj`Ib?2|2mVf$Hu|lh7e~g@;v#ZG}Z(d#{z2ef!R#nl>
z$BXN~tkRmR80uqv)Ay&Gne%S;paUw;a>A}{TzV{N_CMYoag`@U4$Z%&_3IJ)CzX{m
zQr|e*`KC`+FPzz*>EibN+wEP)CEaUNdcQ_{aV?veU-)f{4eOGd$8XPgy}jYxg4g{E
zgU!Suc1BA)lYW`9?tW8tW-nLM&PA6?UjIL1drW8cwb=Ukm)xI9u2Y<@<For;|LTji
zQ%n9Ad8IWr|MjT~d$sOlwDxQfaY1_r{fR$k*-aK)d-$lAILChmtBF%9cUhMuck2F-
z|8eQaG}na-mwf(K)Z<>r|M4<w@n!zA|JQOa+}&`ld5_@bOG`gZKHMvI>id4i3$Y%*
z&Xi6slK1^QduPH^e!2RfgrePtnq5D9I<!E<XSU&YOXbD0OGRGhSxMgS4w#o$F=dkX
z;^-wC_GSleE_E||{UU!u@VA@qlq0pYSYQ7OlG*MdXyeZ{$8)3A<a<0X<l;&;o8(`L
z{#6&Z^5Wk;USFnJnERejTVc5^*Ju}WvbL$};auabI<}^JSq@B-t$xONr~bt$_G0GE
z$J**Xd3bLKX^oWR3ROS+>GBrc!)N|S&e&3$>}mGBP<UOn-R!9|w^yZfZrC2QU+J`D
zzjf99^X+RT_RW^NTN6^|aWq3)^6t4SU+U{cdD4}XD^>cROthKg?)=F^j`yT;rHRUa
zhm-cVFFf0K<=M4wVodX=*KAE|-fqlXf99^#r1`V|tlO5E&9eDGiq}2g&($1O`=3kx
ze6?ir+Z<bmPu5p;b+>Qczw~X^RjrEp+V$Hux^mxIk@dUu$F}{U^<lD>EdTnKy|qvF
zzjyJ^v#hq@sKrrNzg%)~T+P1w@Fc#jb2I<sF+X@~xB6}7?wxOQt0I}7Ip!K~-_3i3
zKP&oc{okm=RVVCf!q#V=Ik`Er?Q-Pau=BZ>cCU9%EV^~<*@7j_i;BagW#e+0vuamw
zyR5!{asAb--5-9(<q6M-=3Dvxa{Tt#iOc1}+P`f}&J5e~)6~Sb`Pq_8_U37+`E5S4
zuCv|wr#I)U#tJ#j8LF~ku{@Q(Qn|J6sMH7C&Nq=_|Il9Vwl>Ss&z^;ERrc0d+MgaI
zO84G*H}B}pFVEQRJl2;lc*_?(ZLOry#aaJ)<!9t>pZ0osNkobNiR`Ue%~D@0&-(4#
z7nu7bW|H~(&6$N}pL1?+iOhW)6*X<I<R+E%ktefvPFz&&uy0|mRQWdJzC916b52Ch
zJ!>Of`s?hft*JL>D>B#LHat=!d~Wah_{wUBx`>j4PhPgZF5N5My00Xir!tnwZ04lx
zaZ1}aZj8RWahp!HaY~|;?rXh(`-|?1zs+agZm3}u|7mvgR^Hyan@!a#-sZk~+rO<i
zSK4Za@2$NrC7E6;7O;G2*t)mvqr3T&a-DP6)cHGBTV|i$WbSPCVquNRs`@)uzioMS
zZ}S~cNZViOkrXZW`Z=@t&%3sJGkKz??UhVgcS-eUZbi$@Z5Ffd{VADm9D6?}@>^QR
z6G>Nb?%9UUpSa!j1+LA#&UzprD>Cd!sM&Yp>o1PUcJQ-$nB6|OSu*TNs@eC)&!_jc
zn9RIcJnc!m%&u+9^C#P<rMc^zG{0Ma|NO%*Pc}<V3v>JwJUM(u*Sel3=?ec(3TjvP
zJxN!pKf&WHd=j3VKY7SOIeW^V_~+c8xJTmC*~Nz^zOPfTpR0ez`;-1!R)hRkSM;AO
z|H``T$@1JEdMD@0^eNu|GUboVz5^5feBr$>`!oD}yh*(5emmP-si*Zh^X7d!xj%=g
zDQ)x5AcLQkH3xNn?v&c+{YhWrXZ&0l`F#t;ZLKWx_8FY2{POC@Q^mFI${U|N|HL}|
z$@A<VdRN`{pIblc!j512W%e!+ul1}~&yU+<m&c`M-><(zIX|Rq|F*ePZC5@uR`~zx
z>}+%9PajzIs(#4mmH+tFQKJ-<`>g&W>+~mIPrbXoZSkgl^{qA6pTzI|_e6Bc=dZ5?
zKmA(zpw4gp{0fIUxA=mUW^D&%Y<;`p&0|m9`=&piX~sPGvf`$R-mjCKdtaPXuTp2e
z!aw`a$@6cxeNN1VsY?y{x##DnCqG}lT)o&?<N56AXPsBPUHn|X-#@<LPUADv`}G~+
zvuD;Gw5@z`<?OApkZ(t(z5gcpP4wyiTfc69IDY-Oy85EWpg^(x`K)mNHrc7QHY=an
z@9DYuX5Ry|RV}CN;0`|%YE;p7b#-~b?Zs1VH$GLaJaZmPwAoB@hs0stllZ?+A9mW;
zpPav^qOShr<2ThR`y-w#-*Dy1<yr6b<X?w|eX&&!6)S({{3)|+b=n5?_0_D*U*yg(
z?!SDhCGg>n3E`4==d!<+yOSzfy!mXG{mJKNH!X{qcYNQq<Lm#wT7UBXhuGJT*G>9r
z{{HOG$u;Zh>ovE{ZdkQu*3UZ+UanhN|2qAX0L$OGef9eeY<a-dT=pdD$^UtOn)^>W
zi~rXAdHl&-#<y=oy(Yy?Vh=l6uQdPX44cw(DnCmne%ux5npS)JkLqvVNlR*c=56z8
zJ<+qh>fG<dzm`)^boHN1e{ioZSS9sZtJ=KNyj!eI7aQHWHjBA(S9evMs_V8^J%gH#
znfI4Vh;`kTTI+gjLcK;A$4sxdN%|W?tn;2oTJQaL=bvVxtijoDIqn|+<R+Y-I-{&z
zQ%e7@@oJL;d)5T){Ow@pJc-AaMUFq{mp%VU^_gs2Wv)M(7HL(h=IT(e$(6r4VruT%
zVwLmPUKU4wu=IC6C3Jg6<MUsiS&#ACZCd`sxaV=oyeEocCpM|RPyM7&fAmKGj(0mJ
zB+ZVQV#}ww`Fp#~<K17U>^WrRdbWJNU~8tugin)dCVf5nbJBU^z41q#KWTm5!}@%0
z=?tsAj}j+Eq|ICX*k|6#%hewH4%ykCt+rojayaaj;!ly^-o^J%b|-F&nEUSDyxfd6
znolF!rzo8;J|mXCZ1;Ap-*exI@GX}6QU5;f__>$HmrJkjmiqkmT9?cst$$BWpAkxz
zTpx7gOnh#a;(5Jjo3=lGp_jkCEZh4#`fF9G_w9xCw=T_??yz_IlbNaApZz|SJWt*w
z|LL4#?&68J@7}&~=B?5Fi(3wv-PP^0v0h&8wxV>`?~NO+ckB!NRM1>e-#(@3MDzI#
zohOg=8rElBG2Qid`^y)<{2uh2{LG=rIx&5kZrP;u`61Gl=bl{dX@AzGa$YO?jl%sE
zp}u$6e#&autT`$EQ{~l>H*RN7y!0;nw56D}@cPO3PhV{NetyPe{m&eltrO30@|<(B
zZ=ze2@8vDcx8fED-d>k=HJ4%k&d}spb`vanHAJ>BThGq<s9UeURO(GITkX;(f<ax%
z=hdR$u>KTT->KDfVsqiIlTW0t-YT0r`E<&A^Pe`|j9(|mv%fQu>h+cTKKI!)Z6Vir
zp4U7D?Q7=!<l*`FBr>J@=>92>M1#0g&mVYsbh7@0FMrj~Cphda_;km~YvYsS>D@Q=
z@()z-O0+({limp8|MjV#7w@4t<4?r$aF5k*#j|g6t^ZW>S7Xwj8;oD;)Z(8=9_3QC
z*Nc9W{7JG-acRb<$CDK7)Z!nUa?<%}==VPUQ_k}JRX%k-kIw9WBD(MNOAfX7XT*L_
zubK3Ii_XC(bN${&f6{s`n7int^_+X#pLov^UcBg}HQSZnQ*G`~xWxVG+i~Ig{geDZ
zvMJ8nqZ|Du_*3K|!_>!um9sCO_up4~Y~r3nwXJUaC;ItTeAoP`@?CO)+ywcvV!wlP
zL;jsEt8}bWiMFx+>9@W5-n+8;>Wi)M=XRz4im$qx_gu#AMcM9jo)go5?9cw*^rz$U
zdB=ZmpH}`}^!2v)kN)tv-y&Dv-I?|E+`ZEJbJ1(-ced@{sU9!5!Dg}gleNsRo(If6
zXZ_)8+3wp}^8-(@)K%ZMQ{Vfo^f!~%(%189yck&hPegA%`uWA5-+8~C)bCgEzhe6T
z|Ig>oue-T_JpL(K`8+Q7(;a88^CzMgJ*_-3Kenuz?dQHtG4o=--z&Fz>$ki1@4n~L
z_9!J?%+EhjA3di|?$h)6&8LGu*<O&nAkp=E*IzNeD@?D}u8aQUD%jms;ZkR@pl;oY
zPm@mlx%zwax38(+XHCive!2Wf^xb!@(OUy6m*?zJu|Fer-u2&|OLwL2R~?H#e|zt|
z*A;PMMm3kUKQ-rU{6BArmJIu}pACNwy!`8Kr^?ot{^U3Ft6KNCdJm76sz2-OpILvJ
zvuyvbjy*GVzsdeww4n5rjY_`7-uow}x3)~VH_4ps%J1GiI$3TLra$?bv+?|i^rJ0P
z<R)L=eDvMP^2ka4oVS;s4gPfH<=x5ohARKpdm1V(z5e87Mr{4W|K^3>ODnzYytngx
z6#iNN-0bhw^d}EJ{~E_n6c-Jus`r<hbC37uXR#Zie=nsv+f9uW`Ly#({f|@6S;g*U
zf3jqS)c5Z>f67hz-cchB;ZFSHtbG4*vBjkQ+KTm89~E0ny6(RAo?FJYQ(1~XB~N^h
z@`y93tlj7P{BP>^#pjP&=6~1Q6>F9C^~{X+%a*&%0x$7LU4O=Z{n^Em`h<_Bf9;AY
z-alG%*V<azc6xH!`J~DFuRXtAqNn-uwBPSPZ!6z_TJ?Edw%?hB#!TmZA1;&Ma$c`j
z{$6SC;;)Uz=4#)5SioYkc=figG1vQM+IIWio0IQ+_t!74|9kK5S`wG#b7rA&Dch%o
z_4WL9-u*A+efwW*dDDK`lJ71^%ei`}mdnepzT0QaFk86z%l_U8*Za4~t^K|6?+3=8
z4|mQnt`?iU$MQZKM`=mU_4mF}Z3ZzGC*q?{9=<5fR(bp3;wS5M!ks?-y(IlPw;^DA
zx>u{;={YklZ(e=&=k9qQo&Qh1_k6+E>)#Hq6pQ_GQd-_B{hN+OW%54X_qE~kyX%WD
zF1lRwLh;#=Ij_UM&pLPcVt;M*HB<F>TW&qO_~Eav?S--*KSf`h-fjFE?2wq}zdz?%
zP1|XqEL?2WoWn46i6Q%p`?>Aq=gzyU|FlT|_F%HeXLpsFNlD)O$}4X=ewv|L=D)Au
ziLIi%@P<>Yla_~VnaHoxDSdh8g(uo6N8Re}^eRq2cU7IQlqmi4hSh#w-wA&XoO-g{
zQTpcrEzhtCHtDC;J#8LrF!+D<ve>*mK6XV-{71q(H2a@aR@HQ^Ieu&cKa2dtAl8$g
znd6oGn;JKYRqOb@7VocF>QQIJXtTgyAW-n!p^5tHCm%;7Y;xtCsO>RtXKJd`qV0|C
z4?YPh)_cjF+#FibI^k=@1HSH7PR~^y^Ojx^d0$dte5|wK$qJ8o6H^^B<h&bS>aa`-
z4*BeHZ|};ZnJvdo)v=niFTbbH^0P*2$ND45jWcsZP1=`e{W%d|7JIAyU-<Oi*iVY{
zLnj@u6`65YrQ@Ba=G><)_l{eCHY)rsG{;<t_1Wg91|59$U$)7Fs4w2J<-Eqm|6w;I
zUZ?V3VY+jt%0!|darH&@kkTXjHq6rc>9X&Kyi$(pvYB(VShbvmRx@rF;|{#)DRyN~
z|AFZz+V%7E_I;53wP#gwJl9bspB&45F1O1(SN>RBb8~&k2XpiIdV!fY_Zh2Co2I#J
z>4&0*g^kbGACBx^x#@eo>e@ejHJ^V=-`)4eVc)4=Ox2N^L2o(*g5Ug2aDQKL@ax{C
z@&Bg%Iml99{P}nOiT8W*I)C;ovi|K=VS3=~w8xxD7sB@znNFSXKCg}K#eeh1ieEPc
zUFvjsbdVu`@}pfJ8a}O%tB|(gsHrzjx-S^`diAZ{(p&v)by!^@4dzuWi4Um{JMw7x
z#V2QbnQNm=zHCyutkAYb{n4Wp{4d%UdAsQRt7)t$Xb_i)<y$a$YYRi`PS>ioAD1Q1
z*{+v7*6)6P|Mm0fmug>VcWw~juE=-(<9TX+`2FagU4IP3_Q=J4;(4Qc=HTVOjCY&t
zMf%pvkkqhTnlgi3W|~1A&oB8C;Wi@cC)EeCosoAvR5;&p`^R|Yzia^kA!)h}f2aMq
z@ABac^Y0qB(4g8UDXKzzo{hf~4%iD;UO9hoS_<o|hSO3TT0bUV_}^F)o#rsdsxote
zeV@uZ?#~ywCLDTr;?e>UPsvpdbN$;Cdj5adn^?ca`2Vdx4-WrntYwXfnaFO(mnFy9
z9{ygjzUX$dzDZ+&N>Zh8;G)t6Q;dVzoi$I_|GVY)@AuDpg$>o0x3g?IdYCh^%f<1`
zbY}iDO_#LRHf^2w-7$b$lT~Ta8Qre|lKYNKI6iTD`~39x3A}+_bIla}l^;A()Rd_B
zAT~Ke)<M-pM*o?^q!i{Qvo5Ypnm*U?$yCEn3!`tY(A`kK=&_ezm$b^!{SUeRPg6L`
z=%|#G&wJ#a*@{}LzCX*0?t5*Ylc<|?pwD}fh=cTXeeW&F9MZi_w=N4dY=2b~Z=<A^
zD*WZqFVo#oKW|!mvY$LbubjJIS>8?0L+<2a#Y&a_wkH#9q$at4%76(xnfS+6dA|-T
z^XU^4wJYm2eHJ||FiH6{<HG$dEKUz24EBjln0F|@Wgn;W5}TTN7q-`VKRnpqn9(q)
zkFl~-uixu@yT{In{Pu7EOK`U=QT?mJXr(B3vRG|?$G7?z)^GlY4KGy1zAXLpgKHxH
zPYc=W3l1-x<j>E2@nkhyUZ;ZJyeG;F_x)!7YHB{s`Qmaxm3n=L+@_Su56KE2mS4G>
z?BDDW*Kkfcu=k_sxAb4zTUwsDPT*%>V)ygIeDxRGmr6`}{zqjh!^D2KB*n)IwdN=U
zDd~77K7QC`=cyPl?`HFYRFPC2HvYgFHXl^-o6WjCCpNC_Ro-v*N9OO$wXMr!y#JJl
zMs9TbU;OECfBfrbGZcQ*yFY$!U#GC2LrL?Q*q@`in-kAUZj@K9(0lQ}spj)j-3Rs)
zRL|6X+<4<sODO-Bsr+^mSel-<**V$$v0$`O3}iWSaZz&EcEiQeJTEKl-EW4M7)=-B
zQk4GJ__zGrR<*j$%{o7CzdEn0{e9*G!=CR-8`?8IC7+StaQeS7HB+7Ev8^fBoBcD2
z*!fM|UI;%Es*^ZYEpo%zMABWXNtf@UYTL&+)^8HNRmqq1-)sK(&pyX{>eaug1qUWe
psLO~N8H5;`TbUYJ85rmqm|7VaxK1oyIoT7NjLDhPqLZuCbpVV;KK%dy

delta 7716
zcmbQ>vCLnwGr-TCmrII^fq{Y7)59f*fq`)?0|Vm(4rT@h2Cba)Wg8U}IXU_Rd_r9R
z|NlREBByjc0|O%i8en8(U}R)uVrFDy0+CG2j7%T~6AK#?Gb=<bBO?P?o`I2xfeB<d
z1Fw`Cr?9NBx|Nu&vyyw3W=O4m;siCnVtK~|0R;m#USS!lFlII`o#-}66JPJL`SZ4(
zUUT5`iTbM#BO8}BE!bn5GreTm*2k|t{Qv(yt$W?BQ@19pK63T`%a31vq;#%%^Z2p7
zt?k-n%kr|a&K^BlS6SKD(Q)U>mATWW$3;i$>+0^^w$0ziM}VJSUQSL=N5|F4slKX;
zOH_`XPlQK8nM+uPk(q@<K%7HRQb5UwQ%IU$PFGaRo>RD9Mp2%{$&TGfkF6w!_s4UY
zZ7W5CeK`gBnWlCNKEEM#{e(nIHUF`lVoPTUC&zGeiOTaxs0gW;Sts#x@G+&Xl&ZU|
z$R#Q*sm0FDC&bLoS$0&Og@Z%Mf>X<l+bD$Br(PsxwuGPzOYU}A=R%>7UNHeh!>R?w
zLJSNHiX}mQ!Kw^OE*&#>zbh9sexG)C)tS)yA0B@EwEz6)`RkV-e}DeN{f`yDxZ5TN
zaO>6!@mR?+sx+!FFi21Eba4!+xb=2!d;MdxX~$DVqvdw?OwL)C`;Kpl$JZp!ZO4nE
z`?Hrld6l+)U9P8I(aBh~$vb_^CZB!wj^Dmvfr^((=*5iv)BQ~*xpqDI{pjxp27v^H
z2l}%)leh!9-B&E+%(-^!`mdFipEh4)xDjI3KiA?qTfOmxzqd|^$$v3Ee~Tme#|dMG
zgcTPb9Q2!Anm*}*uki}i;K@<5{yDV$i@7%Uv6IRs4`==ZH<~rvICQ`M(psJw`REkS
zw=65wV;l!<EH#dWzp#~^eCN|--klm3cNXX?zfn1*J~QaxCAHly@ec&I&Z*Y=D0XzB
zNS{v0`h5-pPkEJ>)^8EzUF?!{t}Rzn=-5TE+BHq>U)M={6$Wuix*0w-_n!1hZ}rnR
z2hGIi)SJwhR%l@RI!I|kQ2&80iReY%xs2LN*1tAAlUcY@xgv5+`N=DfH=A5LvCc)P
z@=NrBho>|@?U`$>BIjwq%fB_pT0S!B3;X5_gDpD}9#8SH)%CtTv-Np>lUH+9-pPBy
zPp%x-S*Y24hR^G~O{$;mnNPclPNXG0WMwer+H_&loohF1bpFUV^fu;bicFsT^!$0<
zbu(<MI)kJtdM@!so|?6{|NP;m&a+2uE%_u6l*}4AeTG6PPum%_e3>KphxV<mIrN6H
z^UTM*Nv_F>LLsd#`#AFEcSTHN_+78D<;=!qo0_;@X^Ks|cvc|#NnrQcfRM-)D`tcx
zOR<WjYBzMd{QtsZF{AQ-l3io$@4^`~RrK2JkJ-;)2)WZR(JM#wh{DSmoD;vTXNzRL
zzh<$^t|swk%Yu(2%vd6-x?(lUl|+@75uE<>igYGR{}h_Q$aPxC^PJ#3AA#iao=J>c
z^%^09o~HyQ_wSz<5^lL-?UB!yxOXsh_lCzOhJCd8;pf#AaY!^GrNnm5!L_S*FxE{@
ztCWdfDERsC1@#pHOw&Dk^<|&8ZxnPjVEj7uOG})zE8lYmma7vF_qTs>e|T*JUtf?5
zU!j$~2k+wj4y-3wt{TQvx9%-I=pV>fr8gzWxussrw&?H+W07__$D@;anWBo8i#isb
zV4Zq+s<YzvoDB>ct{5{bPIsw$c3z;zeAUdXnkQ>^O$%VMS-j-v+^8KrMGKm{!eTkj
zTFg3n!F0u{RN3AqqAVwO?^?U==ss)fK)yYTR*4F}dR^K6&au^(IcncBQTF8;*{tlk
zES!5*O)I<>UC+_x6|%L3TbK9Fq71Kyf`zPSlT)RS`$b7P83?URyS-yVaoPu~C9PUf
zn;Jgpy<MBcSM^YI%@&g>rMa@p1s??Qh0W;^-2E*zh0EaD`e{pxHKu=iRq2%+Ga+k5
za+|1~+}{?J4-foeOE)>bmMdQ$cUQ^pU1Hl@sgnz??aaTmn?J7Jy<q=3u9vNI4>t%3
z9|~!{<-IPo=-W&?=HuH>EK_Ko<a)vGa{7miC6aAccUCBB=K3$#_p<Nsu|Ce&DGYH!
zo60VK-h0ZdX36~+9*5?VxPnXbii5WXzB_Fo&fGBbFVklSquKW1MQJ>X@45zG@x3xZ
zfy<M*bH>w{=Hw^U^FF2QTv0ERBD2Ssdr`8+>%fmah3!$7Vip_my}tCp`-b<<gWdCc
z%k39VG&q^gAi*9|c{XId<JGe_%IhzsR+~or>D$O~?5yk3_9gd(@2rm2nR%dSL!9<v
z9)o19FhxU~*Yn<-%c@~mw1G8(yYkm6uf?zH`>!mR`^T<AYER0?x)n#&)~<Z<ss8WH
ziL0lsOw$$loW^sw*-&l83a^_orFSj9p1e}*bIbq9fg=k(+H5<0Oy`MD8p~2|lO^1d
zcNrpOH0mT@PxSlP`K06KpS9aK7RxAnW^tXbY+o6AzGPeM_Z9|8@%<a-OW!Qc`nlZh
zQqq%1u>?Qk$lWIb{HiCN>3WiQHCKE?kkq`-^?j4wp8wqF-#K$`u;XQKp4BY>HXkwE
zeD0*OZuj|r8@HXk^u+7&-A9p0ai!g}F6WEwka-o?HP2Aa-{9%S4iSNRNx?l#&a)h{
zS1a?G`sn6M)U~$gt6k(&6Fj7tzPD%5#EsM4?ywvTUnRZo!U+|-@|Z_OcPEQ47byxi
zFO0L~Gq0(C`{U8ntaYlqMT>s;Jod=q3{KIN@(wk*l5FYg{URck=i{46PZmf7Y}>9g
zQOAE#mG<_cfQ_*|zfT0Z&uny`<J$93v2$ukRm^Uua=xC!9_CA~Z^&BzdCD?76}>Zx
z`lmCme6cgOn)dSlsauO5{G46b%XDgW==5LNp?Z&g?Kyk*9!I_Vc8k9&bF4E$<-S*n
zWUmn2ow$U5V^DdpyqQ$OQR@Y)Y+DXAh+SY}j!JOg&S+%RHCVv9<v@*B_STq{>udv`
z8|^Ra+j1@Z<m+SIXK!7b{P@VrTb7qrMX5*CHf^zpwYHCvHr3o>rZtuK<%S9n_jXan
z+bdbG4~ul|&eitj7O#KyDsO5<#@Z-Vu7>#Xpy=6KZ{=;xn)|WaYwItkfV2CyZ?}qB
zxI<>=rr5P%9}e2Cs}<e9a+-O^>@xFht0#LL__F2H*4$4)elwSM?%lXGyKY74>F`SR
zskhc>PLRwi;Q73DFIU~#H+w(q__o&e&GO#8Sy{=e!*0i|y;hcTp~{hOcU1lAQs(`)
z{8wN4xj5zaGmq@e+p?y$@8$iTz5M7_pSbKBsn%CRCAX|`vhKKMB_8Dx7^Xe-?%TCf
zd}CKgt$$qKA@cBgeCd>1%K~yklhUKFF#p&Tzawt<*T3A4+HNgrZDU;f_3hoFN`<w$
zdRsacJz(19Xmcr4e9hq}1r|3vZ{A(C?pFPjUB!N~p-HpuMr=8??t0(;^|R6r-I?H;
zeLLx~TXuH0^4e{|8Z-KKMPx=Cy|Um`Re#X-y&1u(-!^W2T=n+t`(WAhlMA+n-u@is
z6m+y`d28+d#~SCRJUo`SJ}6rHW@u;RlJ}8c#dNLCW#3<%nw;ycw${{mO}W|G2lv#B
z_HN6pN~{;=u1NJ|S*s;FzxSRR-_PvIz2Pg@%D!23WZmYIJkK^g-@0Dd_1LbxT9d=F
zYKu3=MBX?2TD7+8zVP)4-)GOB%JuVdT<-Qcht|(d_1jXWxi&;!SLVy=+0uKxay749
zJMvCyhRpkS)5^=wGCinz8-08B)3<L;|AfaxoSKy3Y2wA*eZGDcx9*>`?RS=6$!*=V
za?<)U&$paPvkUawc`?fT=tlRIx4BY-RTrrCg{AI}xvNr|>K@ziBSN-ywrG1$aO<m8
zLKlSAw)mfD5W7%yWQ%})vcGq7ZtyqZu+^^}yzi|1<=-Q4>v^L7&I?uvnGW5?y33Yx
zY>_k7?G0a=$e_F6>y=E|`VR$H6)!MFIdEq%>Mmg20!r(s9J__3B{i4o%8NL*h%711
zT3-5N(_vmlUDnLny#ECsHhuPsjFM%P(ETSbzBb%$LFumdY7C2y+KWdePm@U7!WS<u
zlaRj0^3R<`sdZa2WarMAz`tDmxO;xerB|K*^Cnu=3wUPF5<1*<ZFcfxF+DBz^&fxA
z?6I@6s;W+^eDvh%%a^Yg|5cW$lXLYDSR2lDVb-!E2Hm<<H>T%*|9)RC`ncWSM<;5^
zUH;itZmqBI;ZvJ9P4qt><AQmMm>x*}Uz4#nsQuc-mlqGNKKyNC{H5~a@iH<pGW+k@
zJLU8Dt6Yl?`(s_tdcY=Hi{akK^BvbhRND;Kn&<oX@%_%6C~RX<;e76csntY@=rG4J
z4u;BP&W7?on-`kKb|!kg{_usnrm4N%-F?cn>{pY7U9!WOUY!;HlxfM*uxBI70qcK~
zM?vPv>h?UmVe{>^b5Z(hP0JsewsZF@FR$HG?@_RKs{d(4h9~vD(F`_^=j*OL>BY1A
z+qKh=A1l|~Xr3%w^ycv4=JWB1AFV4|`T93h^YQr?UZ|}r__H%5s{OYgqrvAeu&bwC
zOHpl0w0|hQ+4Jg3+5R_253e!t|L)JfWLw|aANR|-8h(m{)lIl|MD<zb*MqY^z87FH
z{`Y+)L&b4>?WoK3Q)Z}}B_$pEufX`BuRiSU+DtE=o_x;t&GQ!>VbGQ6WkF30Sdz(8
z>nL~keTzzeX=L{9ak+DUas7|uf!k|!XJ5OxI&t4ub=?TxOZHpb;;wy}f8y(3<J+kL
zjn`&uaod`dw`c3kp!zqNy{T4~cPl2oz4@yxtm(Md7MaYYXFvOHu)Y15neSVd?b=C|
z9}E9q@De>^d`>KK-r6r$Ropk*{JpuRKO^;}rm=|g-9YpIzfSA#|MT^W_T1$=4<zl|
zX6GOEw)ouA;5%my?4R$cnf8|ZyQuCX&o9z{>Ko<P@vzS~X#A>Qw|J__>H6#YKdlh2
z5<0&lX^Thg-~1H^6kqMMJI*ry{r<)OJ2sztEL)l!q#N~;$?Jv2!G#lwmbO~{O=pzk
z?DLXP-}0%8H9SgREZ|c9mV!fTUwU{K>imuoN)-#8KJAmVZp_Mz9aAL#>`A(CXY~rH
zwKD5A-7x2|xO^(p%I%mT_l2J+r!I>xs+XC5U-ZM4Ei%WeRMWS<5LrCcRdxTRQ=f~|
zcHQL()jsd>=~9}YztR)&m=F%`Ri-;jw$<KD%6$0X(G<1`%VPLm+RVN$EaA82(!Zsx
z{D;(e6`Ue2otftAq!^`A``u8NS#$?WxRm*eNm7}0ueF|jD9k&h|BQ3jo+j<7XCB`-
z>+;%Kzn!Npa;ij>#g0jT);TP-(sn)eqqP3=q3{E1lP-!bp8Dj*R;7-xN%8JG*WJii
za?bFv;MXVRbqAMfUweN<w^rPPn?3xO=Y><Bb5?dQntG|y)JbHq=<}Q0YCU4xCr<7O
z+EVasb`{H(9jwzAhS<9`W#1HZ=VlLY<Ja|-jd0y(-q}&V_-OVM7tJWE`wrqB-Iq_C
zv;fzZ>$Vit%zmYmS;)1{5L{vI^S#e{`H*V=afTlfsR^a|`BT@Mf9`J=n?F(b+2$o`
z+f1&1i8ax+Q&xX<!Rtfbug;}MRd;ZmFrB;NU6`lr*08nj)`e;9z8(F;d27_&Pr1MJ
z=7>#ya49BZYJK+YCrf*F=3dRZdi9Fi)F<N6yG{GHl)N+N<z99)`H4&MOZ~dQ+XpRO
z*Sg)i?&I`>+0S5=P3F@b{aZLe@<)n4R2=rx-s;KlY01=w^}?$%qGXy*Prdf*Ti(t)
z&a1sjCaUZ9{<mGRDD&ZiB;9wB;!(F*d{?z!(@T%?^fNE>Tv~s$?#Yp-$9mS@irX*r
zh(9|fQ<bIX4#)DNbx&N%zfD+kHA{Nsm2+y9N4I#)2|W{Dx8=m2UG5&;l?6L_<<{rt
zP1AmDt+pa+?WWjud6SNXm#*J-dgbB`DoN+&S45prFX5Gbwf^IoTe&Z*p9Nk@vMrhv
z-WcX~LdHmPi$wn%39Sp4Eb7m$pX}dVSimdS7qdDk`gyIZ(xvjqEjRpL1SPJB7cbWC
z7m3QTE*D*(s!}`Mt^4H(&mg<Cdlm#waPH16IJtbPut~9#knS?!T}$}oq!&$VnBa1{
z`iV+rPwxJ|YZWieIjW<rQajz_bnz1x_f@ms73m&5?t9vJM@dQ9x=pbbvP-z@cMHc$
z>8|IDwOVB!vTfO6N7s3uUyCe!YFhNjKB}_Na-~g_oU;1A#iHWdPff9jk~{d+I;!n}
z=pB_yMe{E_wT|L!EH+lXR3vZtQF`r?6I0z&FBQpJew5aYec}?ea?72j)A?JDEPcNz
zbEof%Pm*i*TxivKdZ|d#@}uP19T!}ao?fa4am00-zyGmXnqk>|I)01LBJS-WQRg0f
z5?#CKLHddl%brSDeiYS>{a|IWDbv!;PvXL^JwmS9>J_TqFSq<^?q*#3dY3{}<;B+*
zyq90KUwGQzYei?>vF4hnT4i<N%eyj7qMkfmb~Wcw|Jv8tpY?mgy6YPM@7|Yt*Ko;H
zvDy3TwH;UIKS@c7`u;rqd+)WQsh{65CYsjl*ts*qbe;aWcklJj&F($j{rVa+_rxt1
zy*R#4W!h5JoL!`vqbTE3dU;{*wa{*X!#w9X-2ZG(TU>X0!F}UJp(6h|Tv#){`n{O7
z=$_U7+&g!IqPB;hP5b<fseZ?<>??-5tQJ;A<{PfrUh=X2{FUIwu=6KQifmbTUh2B8
z*Xp{)OjA$Q(E0<P%CnDMiT%qIyLs_c;r#-8g|@s=R=@nDCH$;aX~tuz$WHgi?_TXI
zEid$Mx%lTuPgvX`<6Bb}r1G!J%y`(bDZ}*K32UY9-p$^B{xkoa_Fz|voA=}o9cHE(
zH`PjfomZEp{rb%K|49Aar=^?gE^kn{JB!op@4m|F^Ig*x{4CYFw5jx+-&L!98y9b$
z6=rV!rT)@`tWDXn>M0gpf>C!T3eW$N+A%ABxystSf}bs6o~M*IhAzB1^TJc%C`(O$
zwV>9p^e0E;w-^=4ZCt~%_S=b0`;5#*&#r5Ft(J}1w?I|3HoR+^>B7_ETk3@-%_~{V
zr<?uc2>+HROWtQ)T%@dCw_xh@t<RdBwqz7+TvB?rGtBQ=vuo(0RKFKVp0DTd>pJ`W
zS|_1fEO3Z@%ci1B<ySK%P89x{sp@iWeeg^%KE1D*wW{wOr)FI|bnt6@PR7;Fxf7>H
zU)xfrTvRvr(iWaK+-h4+<Vv1BcUICTv;J?nChL|Jsr!TMPkS(~&07p_hgnDIE_kXO
z#f#b~`+6k9^tCTzHRIZg8FzU;KR&85=lEUjj9$0w7b){TcP{!QlksuESB5Qr9J<#P
zJ1!HtA2DC5H|+Deiz>F>C9yn43ra74-2GGa=8nyxcUS(-e_tQ>j7z%Q_xAZq@9&D;
zV2EnYyjZIDE>Cmq?q9x-zwNrX$7cWj{jb(^7na}Lv(qm7{mq&kEAHQ&TfTi$S=ODo
z+oir%ACD_(<qc|#w7&2@Rvc_X<m(udvvOZ&YYPdBpLP4Zs<ilSr1;@EX?L!g7=7Mx
z(MdOZ^*2BB@QTf!y`R^|J^NN#yq0%U^VhwvnWP=EJ#sFV>S?TvF3u|ayXm6I{fO5|
zcNVuz4r6BT-a2)w@ZB@1`qFDRzx%$9JBMMd;#aZQ=S`PZZI55u|K(cuF736StM2=i
zc27&zmtOlBs_5XBHKlqT@~?Zdiw}0Uvv)Ud)oZKHnR|B|$Pe{OR?&AhhRf@|uD;G{
z)^Ke?Rrk8$i+hx~6Yk7;sM5P9fbVUoq29ZdpGsq@oL4QFU6y+N-pfa~?%diK&b_sK
zIn2|}8IiAJ=G>q3=J&gY`+gSmPc}~}lZ<?wbSLIfuAbgHYrVa>_vYU(-M+~B;n@$@
zbf@o?%bUIZ>+09v>iNDvEKZ1;TdMai<9=|w@QGg?|95WQc_n7rg`J`Q_s`w?VRqR6
zENPIBb)VIK@MWp}uy5hjRf~U1FL){*<$KGMbxX~{7XNgUAm*r3m$bfI<T^3ii)~9=
zB%AKni&0ZHcqm<vx@ulryCrGTQh|)hD8u$=zcXCJ12{7@J?ph!3mkGtkQBY-;O!VC
z`Q>C!bJ&CPuJ+!n8NExIS>4yBW<7K_njEs=>CJ0hEO&G|o~$)w*kYrk-8auQHuK>g
zflSv0O9j@Nw3*6(*zmJI(1vr%l!a6E7Wgk_^q>7RBrJ_%%baQMFZ9_C99rqdqPUl1
zi^zhhXOu+vcs2?+wc1>$pXBGQzhG)a!iuy1nbf5-7pP91HqkkwP|cw0XxNd{iWgo9
zAAElBK!=!Wk;XLf3$HeLDQpqq>Ph@;aoeF&<${pk=>vtWhm0FP>g@2SkaY0YSi7g~
zf_n01BkB0WGv23vOb9!@e9I@xMU58^q=@l8tWjRRy!ArR-HOXbLacM5kEqqBrhe+u
zeIVRBeUd}B_Sz+Vhq+vn8Z&d}u}GYH_Viw=an*X$b1U}MsjsiDniQ;ebYuJc_B1A+
zoS9b=T3wFuhs(LY-&gtnthLB@@0X`0s}!i($S0&<l<<66*rIxM-?t~*S+4#5e!s@y
z|Ku?F&|OOex3^7aUXz=a*ZHR?Cj18X%li8Z`S0&l|8|%Ci}lgM)HA!dbp57A@bql>
z(6zF&D=cZ|`-|^2b$VX&zxcgpmsG+l`E{$OF~{gi{F)-;e%bhx;A!PAhkvj8+c06$
zj!BYpQ$#h4%;g0VjElQFx)uc;DNug!`g_@Lsgv`%9|{F?2LGGaTKRImdxxt|(kc}>
zi{k$u>ucBl)%d(mA$@7q#HdIS;gG+&8+W<}^)8HAlyaiX)v){C*TYr+|MhpJd~$U@
zFV?Zzj_Y{JgiV6gZp}VgMz_us&HB?O&Y0RJ62);mjp<XaTH47)CMhrTFZ$<gxVQiR
z<Rd=&xU*D+qQV+O%unQ;C~?k-y_TD1>Fak`dv2iE6zO^+k@K%49pg^b_y2pq%Kcbq
z_DShVTj}L`70dKAq&Gdi@Mw}lTJ2e#<(!9FEi)}&?^1pk5KtLVd*)W*w97(O#~y^-
zww@K~_j_ix+I*FVOGIl<tyE{^Y&$gZoWR6oFIAfhSL`&|JjYEc?hSW$;)`8k`SCK>
z_FCRAdX?*~-|jT=dHo9EtVr48Qr$jFRxB+4|GRF-#xqYYyRikoViAt&YH>RF^T6WG
zGatl+%dJhg{Q1}uPy4*Ih4bt3XGVAYz47mpddt4Kt13iz7cWsaSzG<-yi)hV8;?7d
z9bDM9vQ?=pr;s;1m*q}`)y#7@+aKM{TEG6SbdSB_VTF!@rAuz|Z4o-Sv0kLQ=b(wr
zjSd$#v8ucVjSQ71C2v+HCe1Y274~Vt)D5|l<y2D*IxZwGy<C-lI^xho5iYyN04dE@
zlgGMu{LeMHzj(-!D&TOqd79k@HlvI$0-djqCkq{tl<QMYFfn-KapIwro>1hcJ*=LK
zr(MwfZO<PS|I+OArMZvh?eF6EWO!Jwz~#nxWJ#fTPoj96(iIyU+b#EAZH@eu-2J3|
z`bWWM2QSWXo*?zH{Dr=4#^2Btxo^)ZW{8|Hw#{fgVCulllfkH4zzZ53bKs6)hK!V5
zXMl{6AxR5+XCE`0bVssHt(%F>xwx3osM<Q?zxIrjDDHaigAYC>S=_3V=V=p&Jf$ko
z(WcyZ;Ln>FgB=?Lc+Q<|s(z}Sc%-K5V9=7^b^={&Vjf%0x}13X;O+k73Ohm;iaMD^
zMSPjCvbVzgv!2uE_X@42E_CUX+<Tmx&a^qvc*h2zvh9t#?L`-gMrQ<fo|}35m_S#_
zbmMN916#W;9GdBBQSX$m-=ovw)LnA>!6O|f!v#x|a$2WZy<fa=+q1LoX^qpmwlrzn
zsO%3sd-0W4SCfOcXH>D7mc^bIe1Z#>Dy^;DbF^mr-mNk-R7E387^ehiMjgEHCWpg4
zph8jV(0lO{N7__P<U7tBZ93SovfWs56Ym!jEy3t%XTP7b>YNnkJfppSkrpVpo?X~*
zbK^6&b9&9EmpuCQbj9n`8iyCt4Z=e=xlX?mKCxtt>u2F#JPDeOulpD4$ZTQBoW~_5
zw@>GK|N9F{2ZGqHpFbQHz}-AMWaEtoPgUw2wrC6Z$j02~Z4hM^*PM2;TBrHXUG^{6
z3&LBocKl<j{c%iI%w+SQOCJu+tpA-}z~0lfL+PAp^un1>7q^L@yu&zcmDsDdH~&h`
ziu{*Z;rMKw&AR=$_R5c~8=lT@6Hj^f@4#2d%59hDGfb<OinDim_D(wHiQp23)9$?M
z-KX#TZ@)oy?`<)*o{0<$45}rr5hW>!C8<`)MX8A;sSHL2Mh3bDCc1_eA%^BwrWSTq
nMwYq;rd9?9OWRXH)368~x%nxXX_Xi{;2N&ny1R4o6J;F$zc_;g

diff --git a/auth.rst b/auth.rst
index 48de88125..29d49be49 100644
--- a/auth.rst
+++ b/auth.rst
@@ -298,7 +298,7 @@ PostgREST uses JWT mainly for authentication and authorization purposes and enco
 Schema Isolation
 ================
 
-A PostgREST instance is configured to expose all the tables, views, and stored procedures of a single schema specified in a server configuration file. This means private data or implementation details can go inside a private schema and be invisible to HTTP clients. You can then expose views and stored procedures which insulate the internal details from the outside world. It keeps you code easier to refactor, and provides a natural way to do API versioning. For an example of wrapping a private table with a public view see the :ref:`public_ui` section below.
+You can isolate your api schema from internal implementation details, as explained in :ref:`schema_structure`. For an example of wrapping a private table with a public view see the :ref:`public_ui` section below.
 
 SQL User Management
 ===================
diff --git a/best_practices.rst b/best_practices.rst
index cd80ac539..6a4b0d97c 100644
--- a/best_practices.rst
+++ b/best_practices.rst
@@ -1,14 +1,20 @@
 
-Schema structure
-----------------
+.. _schema_structure:
+
+Schema Structure
+================
+
+A PostgREST instance exposes all the tables, views, and stored procedures of a single `PostgreSQL schema <https://www.postgresql.org/docs/12/ddl-schemas.html>`_ (a namespace of database objects). This means private data or implementation details can go inside different private schemas and be invisible to HTTP clients.
+
+It is recommended that you don't expose tables on your API schema. Instead expose views and stored procedures which insulate the internal details from the outside world.
+This allows you to change the internals of your schema and maintain backwards compatibility. It also keeps your code easier to refactor, and provides a natural way to do API versioning.
 
 .. image:: _static/db.png
-   :align: center
 
 .. _func_privs:
 
 Function privileges
--------------------
+===================
 
 By default, when a function is created, the privilege to execute it is not restricted by role. The function access is PUBLIC—executable by all roles(more details at `PostgreSQL Privileges page <https://www.postgresql.org/docs/12/ddl-priv.html>`_). This is not ideal for an API schema. To disable this behavior, you can run the following SQL statement:
 
@@ -17,7 +23,7 @@ By default, when a function is created, the privilege to execute it is not restr
   -- Assuming your schema is named "api"
   ALTER DEFAULT PRIVILEGES IN SCHEMA api REVOKE EXECUTE ON FUNCTIONS FROM PUBLIC;
 
-  -- Or to stop functions from being executable in the whole database(note the removal of the IN SCHEMA part).
+  -- Or to stop functions from being PUBLICly executable in the whole database
   ALTER DEFAULT PRIVILEGES REVOKE EXECUTE ON FUNCTIONS FROM PUBLIC;
 
 See `PostgreSQL alter default privileges <https://www.postgresql.org/docs/current/static/sql-alterdefaultprivileges.html>`_ for more details.
@@ -40,7 +46,7 @@ By default, a function is executed with the privileges of the user who calls it.
 Another option is to define the function with the :code:`SECURITY DEFINER` option. Then only one permission check will take place, the permission to call the function, and the operations in the function will have the authority of the user who owns the function itself. See `PostgreSQL documentation <https://www.postgresql.org/docs/current/static/sql-createfunction.html#SQL-CREATEFUNCTION-SECURITY>`_ for more details.
 
 Views with RLS
---------------
+==============
 
 Views are invoked with the privileges of the view owner, much like stored procedures with the ``SECURITY DEFINER`` option. When created by a SUPERUSER role, all `row-level security <https://www.postgresql.org/docs/current/static/ddl-rowsecurity.html>`_ will be bypassed unless a different, non-SUPERUSER owner is specified.
 
@@ -53,7 +59,7 @@ Views are invoked with the privileges of the view owner, much like stored proced
  ALTER VIEW sample_view OWNER TO api_views_owner;
 
 Views with Rules
-----------------
+================
 
 Insertion on VIEWs with complex `RULEs <https://www.postgresql.org/docs/11/sql-createrule.html>`_ might not work out of the box with PostgREST.
 It's recommended that you `use triggers instead of RULEs <https://wiki.postgresql.org/wiki/Don%27t_Do_This#Don.27t_use_rules>`_.
diff --git a/diagrams/README.md b/diagrams/README.md
index ee4e31da5..36fd9911d 100644
--- a/diagrams/README.md
+++ b/diagrams/README.md
@@ -15,7 +15,7 @@ The schema structure diagram is done with LaTeX. You can use a GUI like https://
 Then use this command to generate the png file.
 
 ```bash
-pdflatex --shell-escape -halt-on-error -output-directory ../_static db.tex
+pdflatex --shell-escape -halt-on-error db.tex
 
 ## and move it to the static folder(it's not easy to do it in one go with the pdflatex)
 mv db.png ../_static/
@@ -28,3 +28,13 @@ You can install the full latex suite with `nix`:
 ```
 nix-env -iA texlive.combined.scheme-full
 ```
+
+To tweak the file with a live reload environment use:
+
+```bash
+# open the pdf(zathura used as an example)
+zathura db.pdf &
+
+# live reload with entr
+echo db.tex | entr pdflatex --shell-escape -halt-on-error db.tex
+```
diff --git a/diagrams/db.png b/diagrams/db.png
new file mode 100644
index 0000000000000000000000000000000000000000..f5eb82b214db6fb276f74f59667ec0662e35a511
GIT binary patch
literal 9232
zcmeAS@N?(olHy`uVBq!ia0y~yV60?dV2tBnW?*0lFPY!Sz`&`N>FgYknVihP;L$mC
zYI?xrNb%$EKij-)br5oD4{)BSrP?q>AWGxX>J<(z<_5UtbnIZ#?&>gco#4tS9y3)b
z+f{_SyNOAxq*;gQ)UHC&K*z{}`;v3N%i8bxKePIL{=ed9_lnQ|EMQdVXihzNx;iOn
z*MZw7`y?eq&am9q=$Sw5(8n(&%=fSE7Gzj^q<Yu=^FP;d2u{rW^K{3KJw-n?n@SiK
zyh*)w#>+qQ;o{Ri{QdtArH4msh<RXiKjPtw`pP%n=l1LTn)LYf+1NT!E(RIRU($U4
z+x{27?+USK`f_8%iJWErMIlvTGZZGx+;)jmZu;pjA}a1j)m-X=Km4EiM|P=u+Vb@-
zc}1tx9CJ#1tUlNCnHm|Gu*9c-JoehVU(xM<{rPm)_`Of67;Y3ZDE!`6^>8Xf$vY;8
zUl+sub9b(vQo~^N?t?MQ%>Pv@rt<P~G%&qzVAEg<UBFq=C}_Yu?SPmCgZKl+8b^T}
z3_lduRG1h~FzrlW*I;l>khkDi<)E9v;JZL{4%^%ZHanQsHQ#=qC&AX=DB#mH-GSv^
zBP&PK1_8-Mjz$xNmhioFa1)T;)Fz`~enOh7$!TGR2Ir}UqJ?t<1Vgw&9ZLg*zi^lE
z?P9vy!nUyef`tk5U*6gl!5J)<6ImmeueIMaU@vQ}efYJ&WDeK!13y2+?O<Bh?te)3
zgXj-48y@b5(?7^C2`C+Mm?9Y4(pw<NuOiXu#Bw5RiGZg2tBGMtq+dF}Q*=rZ``K`4
zL57B!mw0Mtk=xIOKURcX2@5e?#Z}65wegkfUFY7#E-TJw7)8mgZQkba`9kB1j1sY3
z46%KAF54HcU)X+e@{4i_p0>us#4`rxW+?c`q!}-hD3-X~wzEg_h)=?^4H0X2!q~H0
zzaD5yyu6Y1hSwX<H>z(0%7lK)xgXJd*i+EABOyjek3YOG`&jG|-iONyxGM_xSlwfK
z-`Ia3|IqXY(jV^ru>Rrshsm+&fKr5D4QFACYzvo@_Cu+}o)2vvDysy}cE%lvcvP0e
z`cdQ~Tj87^jV`L0lXol;2x80Be`)d3=%wOI-kCnv6mCyyKKb&=-Y06GLO%t6sy3W8
zW1fV+j#JL;h^-OrHzwTB=9;(2?_q#hK#|7NDaKQ*r$iR++0kYZZsSw4x?<}O%a4H{
zEjeekENp3aS>&?OW%Ci=&P=Uos~k%gxCMM(d3;6qN@0_hWnPaj{n#>h3)?NzTPm{7
z=@%=%SX2rAP5;FZtKvD;WZIYMXQr*0wnsrTMS+Kxt$*SHjl?-=JqC7OnjVEql$L(;
z*y_dWdDi>1=WQ={FLAH!p8VeRQxZ>EoH%m&&GeU3DwVn?U7hxI(%DJ2O4Yt)VSRe(
zn#ZSWPqEhh?jbkr`n2!U?(5Y1?2E7Sa|}G_spz^e=;5kEYm}TXh8g;8^!d2xQIC-C
z$tcaRl|C;gUE*G*GWoDiLYP7IOr_My)byu3PpzIZK4lf1)-~U2p4aSC!l6xC(WYKo
zeYU!XE?KtZ*}7?~uPyrKA-n!uSbw1Xl6%YT)*rmYapA_=iz^M!PD=Y2VYx=^+6=YG
z%WlS@o8vz36LafcE4sck;`KVSHMxsq7ssxxb!We3c(wDY<r?E1TzgN|gkD<pD|GQL
zmDs+#WqIB2cE~xO_tp1bAN+pmzFBn}{?+}p`+J^Ejg6Cym#v?7Wt(1GW!v4hdg)B*
zkG-pU->p|$Uly}BxAgj}>&L8)O+4n_BR}JU&mG^g*<WVV7?~Q2&e%5V+>DhoTW4LJ
z(Yxtoj(?fq?>5U@ch1$!{#p5%Uu>D!OR?p;|2AFO+Os`p+nl(=QNlZyC7x}W+7&t@
zbnes(vod9~YOh3PEY1;53(o(1ChV%&p=}q-x)vYpd_3pLo=wIZgl}xUeYRM4NA!;A
zZw0H>e>?qVWM9=h-+AicV0Y2u8OO!kCr<9XoVNV*xs3Gi=YP*Fwqcc<fBlH?&KWy%
z3SXA0?)<eQY^PoE<uc(NrMnNm(|gB$=lHc%>wTkczhtzjkYl%*SFy<^*tY)bp^D0?
z&}!T7W?#;IefN3c&zvur-zuMHKaYO&`-cBz{ln{z&wnKU=>8LX`2_g@DFvP@{C9*Z
ztUb&$%vNYiNWYQ4BVn`sT;kn>rIQua6j>FOUq`;)eEt3%h24sYhg*B6^d?H5Z&~Eb
z>@?e1{IJcTSBIY+s(fhrP|0q3eaC;JLuQL~lGH9~Z89m+I;FMBB+KfS)-Q)IK0UrZ
zm1lBv%(rQME1gpulY6ITkNcmGKbE#Mv}|*UNy>P%Qza{?CMbVXQc>Bbgf2fX$1a1b
zN?#LJc|6d{@M*quZF%X^%hT<T{^L2@6D#?6=CzquXTIP3XY;uf?-cda@A;SRZArfz
z(wBVBe|F&PpR=orrWTh!>C1nZv+_1qF7N$Yn|({8|7|<@*6+6e8-+I=_diC@bBxQp
zcY7|Q_3qE2pSC~ue^YepYLG&hf`-K1+?~6>v0vfeXwUN|a_{n@^Un`;9Ex^jbA9UC
zee}<xXnU!D5g#94y0>C4v+6Qc_iu^cRNqS9%-{UqWu;4|-^(M6-<f4o&uluhX*;{Q
z+@8q1n7HbW0*%KLHXK^JXm!xqqWGstp*~j&w#Jr5_tu=9H|ytN!S?pP8*-UzLs#go
z`deZ0?M1WI@?CvZy}v#s&q$tme4hCa^Dlpo{9Cy)aNEWeA1{Ag^7xSOJ@u;DXJ*Zs
z^>ns()Prd~(`HUqRDb_3=YMhd>b&e&>BVbbh*(T5e05ZR;r^aEWwv*V+iI76UGwYa
ztg@);MD{BiS2|yjysY_#>y?zv^P+XjZ*SWDH+*k=|NL;f_*%zLPA6Rt9sSeoJ-tZp
zY^>i-n`+fxr(Dh-n|C~%dHucjUth`YcvkiHSn2WC;lC|vr{_i7wWz=R=-JNbH_>yq
z`{tK_nf+z^|FlohzZ+gU9GBf}9b10(eHs5c$vqY+#wAbZ{oVWed*%0h{`InQG9RTY
z4Wx{;Y6Lze{7O7@_<FyQysphXyEZxP8l`_r{;d3S`Pcoeb@{@xxb%B&_kXwlT=}h{
z$^PS~{w?-m>YwLNo<H4R)7R8j+IRl^!Z|yCC*AEnIbBm<JdOL`lpmX)O?|d{bN$VK
zSM|9>eD{g%iTkztNAH>0kMn!)e>+oo&bD^?kG#ZvANHR4Ei8XS{+AtF&77zcQAhN`
zYA*e{^7rP~&o_b|UAkoNq%&dP<YM0t1_lO&WRD<U28Jp%28M<f28Le@3=9n~7#K<o
z7#Ln9FfdrnU|<k0n6oR;hJk@`Mu1O<>;M1%83+PKMg|5(s47NAMkXdkCT0*~1TmPH
zS)o!eiiw$lk&%IknURr+fsqL$%FM>aE2So^ZY8GcENSAa<esG&QmdahK_|LR#wtue
z!GMidm{V9*-Z4SVuefB|){kF)%-ec8vT@mos}CQ)`mpA}<^TWxdza0(&6$4n{>xpb
zZZ$2~lh(a%!s;Vymo3xR)s2ge&dbWOx3zuq__4g4+}Wc?`#L)2PM^Ma+qOGbuK4@-
z)Kyjr@bgPshH?taFtM`B+QqPN@-i|pa|lW@v9Po82yqCA3#piK3P~$_W;3&LmgMmM
zcrG)wTkzOUv280wpWl$$wN|vHn*aI<iC|yO<QQ%zJ9b5RmRS=7m(CJ4(qj|kXA;%2
z=aEohX5$o4G^{M-o767IE3M&EFXCJ%#KFgux>Bm{vLctLbj)lCW_C_VE%vgb@+=%2
zN*0_(A-pW?oYqPFf-)>xZrr)sWkY(!)I~}w7#J87OM?7@8H`=hI(DB?nkiVm>i+xC
zyC2R!{Pc1ErFY8{nleAWKY#y2%pubV1_lPkByV>Yh7ML)4+aJX&H|6fVg?31We{ep
zSZZI!z`(#>;_2(k{)9z@$3p%``Q0!E2Jw%cE{-7;x8Ba}tiSD6cHDEql!_CR_PoAw
zyUhHqB1hbVR7ate%_6y;6I0jk-g`OCyX#8Vv>401!R{y1HfLTsyZ^2^gGUpC=ENgs
z7=-Ts{;{~*pyB7a+4pU1&Ioe+xY#sFrS(vP;N58*($PkKPX6LepS>7Ox^<<O<S(8x
zh1Xj%ct&N;r){@7UYQEUINUPy>}o&U>5-BulYB~l?!swjcW&KNC$}|T_1muskxrEb
zw^TL1ZD?d)8v5!^w%Ik-1BX~Xf0;TlY)X@kc<xk(=tGCIIM@ojHN8VDLJBviN1IL7
z)b{e4=Ke)PDsJ!nwF#0Ys)8GLZ9ixI+<$dI;3h61lcpcF+02Fxb|O<%Dt5eL{y#6S
z@6-h@wxBI;+6ra%GuHFFu(Ir#w0nJ6<GTa}=hqjwJx<$&epdXvi07cE-FE{Wel3#>
z#tW=JPW@k6QIdHe=Ij%>MUg+&tNv+_Utn)`_0K{h`G@ggXY4ADI{!JXc=<A8mF4Vc
znbUk9*1I|{YM!5<v1?Puh2sz6{g1d_<Ub}{<sap<RD0*qZEI#}&H7Tg{BhF47s}1M
zW}RIq`DN-PNBb>j&fhGJ)z@8h;Eqt`G~Qp{iF}7PXK_?B*47HuZgnWFx7{U`+!Z@r
zVrfr9KEIV{>^EUWHzna^va9xdxchR-rulj==Dpu_JeDtbqUO@T<g|;jTEFZIm;PL+
z8k-{U`^`N6)bvchtDQ#=-krRXr)ZA;)s+tIyXE@MDjF|%=PJs%%OF(k$?}Ug7yU_<
zI&<R1yLHX7x9*<1aQoPy0-IAj(ntLRzXfOcag?aF?$z2Hz|QjDvu4(ZzseURd+yHs
zWt(yCv9&6Di(2Pjt>V4<_f#znIUY>4nUs{TVA-GFS=7|;Db(6F`N@<MlRN#l9#mh_
z!gqe{@~I~$bMkLhbmHQex7e}4Qta<1;Ym(bF}l7dEDrwc5ShUHzHZu|PUAzJlU2NU
z%h&2p+~AzeanRiF&swLBClyUj6U7&s2TK1u&ca-&m}nchz1vr4CC5ggjlDju8wJ(O
z%RX^Aee9^=T*y&1Ve4ddiL=}rmrS-vd+Hi7)8eG~#h0xuW`3V$Y!ke+-|FP@Ni*yo
z<ViZEq=(Er_C0WqZoJB=9TjnIUuxC{wcMzc`B}rrEVC|X@)G^%<MxM_aoC+IGM+ji
zq%P?jgPrb!7e;zQ_rJgLtejmmN#)|(o6%M`!#{OO8e0ji?P!ja)V8s)KY8=c+b6vf
zGc+uFT9-x0*?Hfcq`GXgY=MEH^65j$t4fbNdHb`n_JX-zOu|CrDNj0@?tD#C@&3E7
z<>FrNcO{-0v#aj>_0#fCzbaN}_3V$4^K*7JS>?^ktE5+4TG^^9y7_qVmsMJG6+?Zj
zZ~Fd}Gjra}9&|wESx(rsjZ2Ru&Hl%`Bd+qK$f5byw0=Ee|D>{VM(P_!JKyxl>V-4=
zGhN)if4jZwxTJe+O7GWbFRo=1^9#Riv0+_u^Z4x<ueUe6TkyJnVX&E4#Lj4mXVNcI
z*4=N)&g|uC+PUa*$?N}TY>(;8z7{+GlKWH1b&At<e0KlqUwyH5YRUg1ue8SIzdluA
zuhyN6)}AdQE@<zdKk?@*yUBuU4<Gds=lIWHHF0X?F6*-7PTe2!KQ0}a=DKj<lF#3Y
zdfW^7KVD`nzRZ92|61;ayBp3m?-9IwY3ZlQhkM0Nec#V`A=cy9nbPS+^1h#E?@V~g
zFBg<hwEIxA>xWN=7Kr%FHvDd>ym)r0$jdw{$@|>_^YSXDO!8hFy=24Q?7+>XZf37v
z<ZlT6cJrNbq?Q)z>wiHq+dTwr{JG|MZnT<wkLQJ4T*+pW{7ccl>f%;j{JY2N%QOpf
z-}7lJEVtzv?P5;WHdQ^GYrIv*)^sn+foZbU&p7YAIK^Jfy!lvL-6s$44I!<Ol3bzc
zhd*83qI>wv|Hv6zYLh+9z84CwtG1gxb>{Y}l+F#?gZ3+(mh88#x_`cXt;D|Ba(8P&
z$~=x{XiMHbcjZfcy(mw*l5(X=|C5O}liZy@dC2jeRIW5p`R{Pj{`Q4u`>s5@_Dzgw
z{`8uyY0cY>na|vnnlyj*pLN?ZvspGDNb$Po`?;FKYX5V|pRbl|ew$<K@X7kBuI~2D
z`<K4Wx~f%CU%P(WMpy1zE3$r<{@AuZv_4GMlI36jvbXlh{`W5ad6v}{9JM&=>X%Cn
zj;q;sAD+b5b#CULJmv>)?N-0d+`aQ{ZdD}nGsj%x?Ynu8@MlGT{Tp?->V#cQ*!s*f
zCpTxdU5?xvc0Tvg?)A=zMYoPUTd<^gQE|AmY+NpLR_*F-m(}+#uD_bK`@`?JJmDG9
zd@J8yj^7?Tak*Sr`?qb$nPFRgnwt1FKU<Q?-aIWezs+aXb+$YI^yZw^SRto5LseER
zmZ$PpD!0}hmHL3&`6g2AAKKm4W?A~#v+%9T-a1SB(}P6m-aGH+9liPG8M~dw`tk*D
z`J$(-l{C6I>tC<@jNI+hUQaKHDDgj$y)~;@>TBg$zkT}xbDzXaGGD(rv(W5w&h0Ic
zxo@MQrtOv7q_RHpWcJR9i>e*=EzFfF-)7vm=b?1YiRig!ZKO+oon5sx_2z6v=G%rx
ziiFSYT_0ar?NAp{a`4H^*4L$b#as84r1Mn9GMUYsv^`E~`^JsYcQ<a+sWwhYl+t~z
z7jS>kUGca1?Ar}Btl~e-j^4`KTX(amdd1t^S8w~b73WG@?eM*|_oXD$YsCVVFAZDw
zwtaLre^Rb<?wUG($7;*$)0@nl&0Z|5F<Euz>bEVg?rpvU3TFE&J(8m3UO#6x|9RJT
zZzfOlw7rr^>n^GO%&lm-xy@qsy+0-MjbrcUM1D)_cp~X4&OO`E`4hL>zQDD)*I5rF
zWJQKO2{rp}eEr2S*$#eI53}0`H%o>+Nj3Za`1$nS7L%Dbi>Ez_m)W&VdH!Vkv@~~}
zlje8tpMUt}$!5uEVUC}ICx_4ITG#U=UE%*pLG9|kC+SM{CwQENPr?)OCl5I&XHWSP
z|D5|1_egv?yZG?L_jL;PbM^0df6`yeYLNfxivE-3Us;zuS)Tht@8o=$KE?ZAru>oF
zcVNPwFTD3<e}<orH;I?sZ)ck;^)zSRyl*G>=P)&;ZT=Z#@Uyb!pzhC|Qv19=>1+Iq
zpDQE3Z=txYm1W*OgHx4XUj2BgxVBw+<CEu~Sf@XEp8Z4bs@wi^>t|iq@oT@#-X-F-
zp7rYaaeM6YxYX?X^>--ehm`H#Hg~G+%BRK(|9_pGZO;7Z1FK%u4;j7kAHO<kl%jH<
zePo^f<m;(-*S9U+)UUp^=K7QPz5kwwPWk-xwcw{;OCQwv&7WW4Q0Eq3u+psUz>KYL
zSG;-bse9k_=QGWi2VYj)G|~HYl5_8ilj>FK%vbnlA3Ayd4Y$vU*)VmfAwT#0{Pg7K
z%a^McJ8L|jJ^ifninoiO>-YP|H{5A_W_rIPeD=)RgSM3~uAIG97V_=LwD;d6zllEm
zf9u!n567<`S65&37!)M7Kc5xu-zGb?)@J2X`#n83-|Tx}wyNcn9o*e#LX9fguC6W*
zxV?C)?Z&6dm1oXli8Gr??vMz~dlLWm>BCO@lk@jf)YYGS{H9uEf5emJ8?IcrJnOxl
z{Oi!LFShETV&%`AKV_D!PTQcqzM7T!i`*H;{g+R*1U}p`AzbqAT=v&;cTz=*H=pgY
zKl%LZre!hnj_<p6eEt7d>rdYQ5c~S^x=CNn-=F<Cxn^B`z2>&r4Xf77`g!NU%XKU3
zU#EW(VEH?@Z{L9}54f7ko<u$QKkrX-|4C=@-<m&<Kbgz;_Km35q_|1!VJGXA=Kq{w
zQ+iJ2XX(U`yCPlFYH$Bh{p~wxNsZ6EZC<S>dbU@c`<?jLa_Wh${*&ns?$rgWq+V-P
zn|GRbi?!)uqg&TzF<0*Du8LE2-PWpSP}4E<{&ESiuG>;;U5`!BDC3yv6*ozLLx^?W
z6G`j6|L*+LOq4Y^`z^=a<DcAw^HXP(wQEZ0|21B1a$wJzpq;-R?3^d@*s{p+2mP|=
zKdC;GZL7@nN7Ev$YSmmF3O2d&S4T|EU0bYj{@Tmp$PbqO&ZmTK&uD!9>oe;ye!ES}
zpBVQ%PMP;aQS8Jf)%U5N6pr5L-|=qegrwOqQ*8M(H-B%pdA$4Uls$*6T+f!z7i`V6
znDA**&7`kKe@;4Yyf^-+^Czv(dsv_EEuCSt_fg`ch_rdDAN$N(dAZtS-yu8uv(@%1
zO%8{>Qv50M+q?Mw$?n8$5p&<&o0prhM)PT8`xK=U#%ILRm+juJ^?U9+5x&K8Ki<b3
zKljr3a_RNmQlH;m>ylZd_3z2)GeYT->w}J*iO=m)Jg*mR)Aq+N^zyftWqW@|f2}I@
zzP+&i)}<NK9rjLtGBdUNv)`wZ=gGU|Kb>>TT|Dvj-P<?LyfwOiamyjIySjZg*2~M?
zR+R4gy>X-Uj(vfj3YshG+ov?0Xg<H8^W?E!!>lW&yZ&x}`Qn$~gPxP0IW$=(rccu?
zo3uVZMB4J)lgmBr&$?93Yem0NxW6LQ_YT`nSuLA2C&hoNygKs6?d*w{-esS*6tfmy
zKl%RYi*4V}&zP+LnM1R6;`vRUb58b6bc^!6yrub8+~UC7>$0xqGVI?Onmo&Hf@QCU
z$QEYn**PC|^_NP$31+KZ`b03OOZmK7^c&WnBI`S~noevk{B`n)^wnEsb0?opd2jyH
zrknBW<aqXXCQ`k=a^L4Zo2D(~I?wZ(r=We!yq`QgAD={~bRXS6<&kI*m+JWgFON>v
zpYY|c`uPNhy#=4{IC*V+ay-5Jre6Mm3SNoU$9K{jLHxfy^Wr@;XZ(p+9`3RFt$6lL
zuJxa4{%TD6bA$0~om%`8$)jAV_IlB8l0Qk-DK5?U^mvkjom%{ZQ%*WR4gKE7f67_D
zzsjf1=h2z{Pek{fe#xQs{*2h~={1wyZ_zpUWUk-)=ucYD1#=gjw4QTs`xEau!iyK3
zv}U{Vd#cU-375D(eLF6^f0F-4HpO{+bfez{e~LV0nEF_-a`xr({`*RgP26*+w$+XQ
zL_gn(@0veVzDq8Un;?Hy?00Z($iLHNm5y~P(KgmU{kB)%dskLpeX%wE+^+Or@l|*8
zp3B(1DBGRRb7K0B{n_7}{&ZYE@A&WS)5_nAzTWo!(H}ndTjc7yJF~u?yH|QHdTssA
zw*5QR;{`X^ELMNAmig85fZ6A)KYT6QeLHJ@;3<~6>f3hed%u<bX3|>vdR~ne1FQdu
z=*>qzzxeYz@3)is{VM)fO#lD?`TY5HH}{XnKSe8_$K`&y<Lq_*MD(Jkl_%!MmQ}O;
z+_x!aUhMaK<yLR~cGv#h_k7wOrKF4b`6r_1)X9B%KEL^N@F&{~vKJ(}e((A#=68kZ
z)!KE@pIimIyDD7jEEd$QTk&bqsXteLZ~pc*_4}+z`N1!jKZ(Bkt~GjVVCC|hJu3ER
z#Lm0^yL0KT)cvYs@#k;vo%gyTPRyw0vi7IuoQ?nIEzy!;pZ2ri&w-bJ-R)G_8q=Tr
zW`0%c9_QilQuSw@{WI%NbC&J@)v;%$?l;+=ix!l=vQf#m*n9uP^wyRs_a>RMUHRR+
zM<>f|!t^I!b2gqok$$vgirnPun~%ObSsppbpY!(ev%#OPyu3R(-%#cMdQU^erPrUl
z%!sX@_}{$HdugS&o%eRWkHSCepPT)?n*QXW=U?OaiQ=L`RsM2w?(zQoEOtZm@1;~{
zyQz^PpLTw!|8eR$tJuBlPnN8Z`u#oUPq|6oJ8GmM+=+jjmG3_;wwSbETe1G?qhgCm
z*WK6NbIaIvDogRF<caT59&sj>wflUZ|4rS#`211J{O@|ZVy&{io|(~p*>bm8;3fX3
z>(BVFKf73x@X_?IT~WpRM{Dj{TT9zcPfk0ZG<pBE=eJArG=HA<`~Bx_<@-;oKCjF6
zJG0Q3>Adg5W%66j>-EatEA3tUwei?o?b{CvSWFhL-u5--df!ajZr^)z@}2Mg`sMY1
z@7-NX;<9|sEHo}<`?RpWp1;n!|AoA7|BEee+Amx3-34hm2i0+T`PFy(j2UJN7k}B`
zJK=i&7P+;*H~#&=`19e;ImXpuv-eouXX7X>$+`aCH>%Ab#^OYL)XBpa#n~!vKV1A|
zy-v8(r@xn^Kj$_CY)|)U^*cRh#^uec&;Hy!@1yho$@iWw_<H@@;gw>sUrtKPTcv-~
zv8YVm=li}ke13QF#YLBkUMN00GUs*J_gUvIU+k}~zGkZaZp*D_7eD;fwY^aG<EQA0
z)4PpdgWVDH{P*Wvt7$tel!c3}nsXSYE-_@EaX+`c{M>nW^`92$-yTdB`RuMzGbzb?
zUwP$C$4@g<%l!8>Jh4@j7v6A+b<*;%Efe{5I;Ah~yzoRj<*1vTUd8F>uB!8u5~Y9M
zu-fnIJK@iPQ%{yVO8-2d<ry}?CjGR!r_F;62LG>K7Mr)n$F8V}|45jJX8)7Qs+z7f
z$B#|mXOW*6#Cq~GbG(v&Q{zUlY8}7V;{7#CJ?e}YZ5H?o1PY!zG*Msu<l~5hO|G01
zwLRwTOiguKw7s$Y!6!jQFS(POLn~S*e64uE*WJqLxyobS(hDN*ODc?ybv8U%;W2Mw
zszZjHcjHSPmPx@OpFQsFU3oOK<=Ck@R+IMS_w-qQ)=2GGe<ZnaW{#*y`x31`C*sRu
zZ`J<`pWYk$NpXJYqyx4hGw!N%yz|tY`_$#$aqG`Uh2Mqdm@Bb9+x*m^gYU~WnGp5G
zJGPwH*!Vx}hQ#Ys{wqv(?o^pb6eO;`s2);!WZ#BaT0dR({g7A6QC&83juxwyv(ReB
z?PA=4S3Sk9?CC!+{Y1Nde%`(hvcLAMN{;6`%H)${xzFWxndizMi)(JKFZp0@9$zmo
z^X5Kd^=Z>Imo5EJ)UdGe`TE0=-77bJS6%z3ujcb_>AU;>IP5$1i>W$NGw4mHK=7Nt
z3GVL;4u0LcH2&YTKL=Uri$DL)Kk<G~UgyuAMb^K)DohWYo%WbB=|cG4BGai8-siQk
zz4&kbSn=zopi7-Dj}9{APkyxPL&K*Pauw1x95waEN%sW<U$4HkTY9U%tq!Y8q`|z3
zCGjC)M;<M|_~dLab8VE#mrY8S724LQKYFx+|3&*EZx@|^HH|d|4dODfd<!OTZDDBL
z=~~tH<Fe#A+x3#i`rXg(zkWXbQtb=v&J7~m75UD8JWtIJzaRax>yLrh9=X_0Ja2T*
z9K8IO@otm7NZ*<nk{XsvQ)aNsOf#tC`6YiM+(u;mq(HVa@~(#p=R0oy7_a=7Eg&Ey
zP1oV?v_JP<KAd6xUE>xSRQn`FRfx~C@pr-jd%?;p=MPRxVV%`*T53b<$K(tD8*8G|
z9OhV6W=^p0Q+dbz`6AbZLk~|}S|H*nxyoU#f15(j{||c;>$e#HzxC(A;XjSFtT8bY
z+3onU<T%^I-zyf~Zq_$xEKo_R6b@Wex?qZNFuSwn>H2@S{Qmv^d9Sdc`to*`O-B!N
zMs~S4o|(?ff2Qe@*4n166TdqKaBH$EEjpw7H9&ITkqO5qPH&%|{yu>>uxqZFqQCNk
zM~a#f6(7VVXUICJy2$81bC{IEykyqJwMo<G8a|n7_-SGE%@w*E7CrV7?2=YFy8j{9
z|7i+G86B09@_CQkGh0z>)%Rz4(S5J&a}srv4)l3X5^<2euJ64inM1m_>DFbzhV8Fv
z;%$`FQiZ=f`enL1>gP?1Pxg~1=#_K#E6cm-dB~kytXQei-}YppjnpLfPZ=<QClmkJ
zD(}}}Wj=jkqIRXG&!UF~CMkbrT)4l5#pz*$!9KAG^A6>=?BjG^VpB8k!uC4vhX?x`
zGa4rKF;;f!^?RLf_t-g+-~R1?3GS99s()1&trX=>7OTzg_*Ngo`py5a;f1Q$m!+S6
za82a@X(4-k!QrKo{Q0>ro~&le>s0WY_e6Q&zTfO$P0gn{UtBJzqVJH~lv4R2S>eO-
zD|eIqn?2$h&PfOMel-1-{%d<n%M;fL{On8Yetwv*{$l%5iAm4@s7z&;*zcC4_;{h#
z9EBhy9nZwa54-F<6$9qoY+jHmlB&bTA2`G2gGzq0S-0oJ#<ji5`_2By{GGYBb(xI!
zpAyl?jc)&oKOOFmfBkHR!VmYy@9pap_H!s{J`?+MRCjaYS;>v^$`yJq{x{WpeyaPx
zeuC<mx{n)gTxtpB|1y=|ZURfw^ENvtyFV6;Hj05PM=mZ(4%=?HSeoZ$rM>&j@Diix
zVqA*S{~G_6pWCWd*ST5e=j~VLb+y0Gd|=q~U1>vm#;4>n5*$wdH>PH)^E|fYdb58<
z5j($$+Y8}mLUj_yszq)%n@GBgHR<wQRBihh$NEjew<`IP{(H?I|JmnwPrdp#wcr2)
z1A}UbYeY#(Vo9o1a#3nxNh*Vpfsui(fr+k>L5QKbm8qGPv7xSksg;32O4I!o6b-rg
zDVb@NxHX90Pq$!TU=RV>P>_;l6_#35oSC1;5a8mbYp7?cz#7AC37Q)6boFyt=akR{
E04z%AMF0Q*

literal 0
HcmV?d00001

diff --git a/diagrams/db.tex b/diagrams/db.tex
index 907b3c814..f4580f891 100644
--- a/diagrams/db.tex
+++ b/diagrams/db.tex
@@ -19,7 +19,7 @@
 
 \begin{document}
 
-\newcommand\customScale{0.4}
+\newcommand\customScale{0.35}
 
 \begin{tikzpicture}[x=0.75pt,y=0.75pt,yscale=-1,xscale=1, scale=\customScale, every node/.style={scale=\customScale}]
 
@@ -57,11 +57,11 @@
 % Text Node
 \draw (322,178) node [anchor=north west][inner sep=0.75pt]  [color={rgb, 255:red, 255; green, 255; blue, 255 }  ,opacity=1 ] [align=left] {\large\textbf{api}};
 % Text Node
-\draw (202,97) node [anchor=north west][inner sep=0.75pt]  [color={rgb, 255:red, 255; green, 255; blue, 255 }  ,opacity=1 ] [align=left] {\large\textbf{auth}};
+\draw (190,97) node [anchor=north west][inner sep=0.75pt]  [color={rgb, 255:red, 255; green, 255; blue, 255 }  ,opacity=1 ] [align=left] {\large\textbf{internal}};
 % Text Node
 \draw (300,99) node [anchor=north west][inner sep=0.75pt]  [color={rgb, 255:red, 255; green, 255; blue, 255 }  ,opacity=1 ] [align=left] {\large\textbf{private}};
 % Text Node
-\draw (414,97) node [anchor=north west][inner sep=0.75pt]  [color={rgb, 255:red, 255; green, 255; blue, 255 }  ,opacity=1 ] [align=left] {\large\textbf{other}};
+\draw (417,101) node [anchor=north west][inner sep=0.75pt]  [color={rgb, 255:red, 255; green, 255; blue, 255 }  ,opacity=1 ] [align=left] {\large\textbf{core}};
 % Text Node
 \draw (358,306) node [anchor=north west][inner sep=0.75pt]   [align=left] {REST};
 

From 3328b6059fa8753240a3469349229b838c3282a2 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Tue, 21 Apr 2020 13:37:24 -0500
Subject: [PATCH 330/652] Consolidate schema structure page

---
 auth.rst                                   |   2 +-
 diagrams/db.png                            | Bin 9232 -> 0 bytes
 index.rst                                  |  68 ++++++++++-----------
 best_practices.rst => schema_structure.rst |  58 ++++++++++--------
 4 files changed, 69 insertions(+), 59 deletions(-)
 delete mode 100644 diagrams/db.png
 rename best_practices.rst => schema_structure.rst (68%)

diff --git a/auth.rst b/auth.rst
index 29d49be49..7aaa9eabd 100644
--- a/auth.rst
+++ b/auth.rst
@@ -298,7 +298,7 @@ PostgREST uses JWT mainly for authentication and authorization purposes and enco
 Schema Isolation
 ================
 
-You can isolate your api schema from internal implementation details, as explained in :ref:`schema_structure`. For an example of wrapping a private table with a public view see the :ref:`public_ui` section below.
+You can isolate your api schema from internal implementation details, as explained in :ref:`schema_isolation`. For an example of wrapping a private table with a public view see the :ref:`public_ui` section below.
 
 SQL User Management
 ===================
diff --git a/diagrams/db.png b/diagrams/db.png
deleted file mode 100644
index f5eb82b214db6fb276f74f59667ec0662e35a511..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 9232
zcmeAS@N?(olHy`uVBq!ia0y~yV60?dV2tBnW?*0lFPY!Sz`&`N>FgYknVihP;L$mC
zYI?xrNb%$EKij-)br5oD4{)BSrP?q>AWGxX>J<(z<_5UtbnIZ#?&>gco#4tS9y3)b
z+f{_SyNOAxq*;gQ)UHC&K*z{}`;v3N%i8bxKePIL{=ed9_lnQ|EMQdVXihzNx;iOn
z*MZw7`y?eq&am9q=$Sw5(8n(&%=fSE7Gzj^q<Yu=^FP;d2u{rW^K{3KJw-n?n@SiK
zyh*)w#>+qQ;o{Ri{QdtArH4msh<RXiKjPtw`pP%n=l1LTn)LYf+1NT!E(RIRU($U4
z+x{27?+USK`f_8%iJWErMIlvTGZZGx+;)jmZu;pjA}a1j)m-X=Km4EiM|P=u+Vb@-
zc}1tx9CJ#1tUlNCnHm|Gu*9c-JoehVU(xM<{rPm)_`Of67;Y3ZDE!`6^>8Xf$vY;8
zUl+sub9b(vQo~^N?t?MQ%>Pv@rt<P~G%&qzVAEg<UBFq=C}_Yu?SPmCgZKl+8b^T}
z3_lduRG1h~FzrlW*I;l>khkDi<)E9v;JZL{4%^%ZHanQsHQ#=qC&AX=DB#mH-GSv^
zBP&PK1_8-Mjz$xNmhioFa1)T;)Fz`~enOh7$!TGR2Ir}UqJ?t<1Vgw&9ZLg*zi^lE
z?P9vy!nUyef`tk5U*6gl!5J)<6ImmeueIMaU@vQ}efYJ&WDeK!13y2+?O<Bh?te)3
zgXj-48y@b5(?7^C2`C+Mm?9Y4(pw<NuOiXu#Bw5RiGZg2tBGMtq+dF}Q*=rZ``K`4
zL57B!mw0Mtk=xIOKURcX2@5e?#Z}65wegkfUFY7#E-TJw7)8mgZQkba`9kB1j1sY3
z46%KAF54HcU)X+e@{4i_p0>us#4`rxW+?c`q!}-hD3-X~wzEg_h)=?^4H0X2!q~H0
zzaD5yyu6Y1hSwX<H>z(0%7lK)xgXJd*i+EABOyjek3YOG`&jG|-iONyxGM_xSlwfK
z-`Ia3|IqXY(jV^ru>Rrshsm+&fKr5D4QFACYzvo@_Cu+}o)2vvDysy}cE%lvcvP0e
z`cdQ~Tj87^jV`L0lXol;2x80Be`)d3=%wOI-kCnv6mCyyKKb&=-Y06GLO%t6sy3W8
zW1fV+j#JL;h^-OrHzwTB=9;(2?_q#hK#|7NDaKQ*r$iR++0kYZZsSw4x?<}O%a4H{
zEjeekENp3aS>&?OW%Ci=&P=Uos~k%gxCMM(d3;6qN@0_hWnPaj{n#>h3)?NzTPm{7
z=@%=%SX2rAP5;FZtKvD;WZIYMXQr*0wnsrTMS+Kxt$*SHjl?-=JqC7OnjVEql$L(;
z*y_dWdDi>1=WQ={FLAH!p8VeRQxZ>EoH%m&&GeU3DwVn?U7hxI(%DJ2O4Yt)VSRe(
zn#ZSWPqEhh?jbkr`n2!U?(5Y1?2E7Sa|}G_spz^e=;5kEYm}TXh8g;8^!d2xQIC-C
z$tcaRl|C;gUE*G*GWoDiLYP7IOr_My)byu3PpzIZK4lf1)-~U2p4aSC!l6xC(WYKo
zeYU!XE?KtZ*}7?~uPyrKA-n!uSbw1Xl6%YT)*rmYapA_=iz^M!PD=Y2VYx=^+6=YG
z%WlS@o8vz36LafcE4sck;`KVSHMxsq7ssxxb!We3c(wDY<r?E1TzgN|gkD<pD|GQL
zmDs+#WqIB2cE~xO_tp1bAN+pmzFBn}{?+}p`+J^Ejg6Cym#v?7Wt(1GW!v4hdg)B*
zkG-pU->p|$Uly}BxAgj}>&L8)O+4n_BR}JU&mG^g*<WVV7?~Q2&e%5V+>DhoTW4LJ
z(Yxtoj(?fq?>5U@ch1$!{#p5%Uu>D!OR?p;|2AFO+Os`p+nl(=QNlZyC7x}W+7&t@
zbnes(vod9~YOh3PEY1;53(o(1ChV%&p=}q-x)vYpd_3pLo=wIZgl}xUeYRM4NA!;A
zZw0H>e>?qVWM9=h-+AicV0Y2u8OO!kCr<9XoVNV*xs3Gi=YP*Fwqcc<fBlH?&KWy%
z3SXA0?)<eQY^PoE<uc(NrMnNm(|gB$=lHc%>wTkczhtzjkYl%*SFy<^*tY)bp^D0?
z&}!T7W?#;IefN3c&zvur-zuMHKaYO&`-cBz{ln{z&wnKU=>8LX`2_g@DFvP@{C9*Z
ztUb&$%vNYiNWYQ4BVn`sT;kn>rIQua6j>FOUq`;)eEt3%h24sYhg*B6^d?H5Z&~Eb
z>@?e1{IJcTSBIY+s(fhrP|0q3eaC;JLuQL~lGH9~Z89m+I;FMBB+KfS)-Q)IK0UrZ
zm1lBv%(rQME1gpulY6ITkNcmGKbE#Mv}|*UNy>P%Qza{?CMbVXQc>Bbgf2fX$1a1b
zN?#LJc|6d{@M*quZF%X^%hT<T{^L2@6D#?6=CzquXTIP3XY;uf?-cda@A;SRZArfz
z(wBVBe|F&PpR=orrWTh!>C1nZv+_1qF7N$Yn|({8|7|<@*6+6e8-+I=_diC@bBxQp
zcY7|Q_3qE2pSC~ue^YepYLG&hf`-K1+?~6>v0vfeXwUN|a_{n@^Un`;9Ex^jbA9UC
zee}<xXnU!D5g#94y0>C4v+6Qc_iu^cRNqS9%-{UqWu;4|-^(M6-<f4o&uluhX*;{Q
z+@8q1n7HbW0*%KLHXK^JXm!xqqWGstp*~j&w#Jr5_tu=9H|ytN!S?pP8*-UzLs#go
z`deZ0?M1WI@?CvZy}v#s&q$tme4hCa^Dlpo{9Cy)aNEWeA1{Ag^7xSOJ@u;DXJ*Zs
z^>ns()Prd~(`HUqRDb_3=YMhd>b&e&>BVbbh*(T5e05ZR;r^aEWwv*V+iI76UGwYa
ztg@);MD{BiS2|yjysY_#>y?zv^P+XjZ*SWDH+*k=|NL;f_*%zLPA6Rt9sSeoJ-tZp
zY^>i-n`+fxr(Dh-n|C~%dHucjUth`YcvkiHSn2WC;lC|vr{_i7wWz=R=-JNbH_>yq
z`{tK_nf+z^|FlohzZ+gU9GBf}9b10(eHs5c$vqY+#wAbZ{oVWed*%0h{`InQG9RTY
z4Wx{;Y6Lze{7O7@_<FyQysphXyEZxP8l`_r{;d3S`Pcoeb@{@xxb%B&_kXwlT=}h{
z$^PS~{w?-m>YwLNo<H4R)7R8j+IRl^!Z|yCC*AEnIbBm<JdOL`lpmX)O?|d{bN$VK
zSM|9>eD{g%iTkztNAH>0kMn!)e>+oo&bD^?kG#ZvANHR4Ei8XS{+AtF&77zcQAhN`
zYA*e{^7rP~&o_b|UAkoNq%&dP<YM0t1_lO&WRD<U28Jp%28M<f28Le@3=9n~7#K<o
z7#Ln9FfdrnU|<k0n6oR;hJk@`Mu1O<>;M1%83+PKMg|5(s47NAMkXdkCT0*~1TmPH
zS)o!eiiw$lk&%IknURr+fsqL$%FM>aE2So^ZY8GcENSAa<esG&QmdahK_|LR#wtue
z!GMidm{V9*-Z4SVuefB|){kF)%-ec8vT@mos}CQ)`mpA}<^TWxdza0(&6$4n{>xpb
zZZ$2~lh(a%!s;Vymo3xR)s2ge&dbWOx3zuq__4g4+}Wc?`#L)2PM^Ma+qOGbuK4@-
z)Kyjr@bgPshH?taFtM`B+QqPN@-i|pa|lW@v9Po82yqCA3#piK3P~$_W;3&LmgMmM
zcrG)wTkzOUv280wpWl$$wN|vHn*aI<iC|yO<QQ%zJ9b5RmRS=7m(CJ4(qj|kXA;%2
z=aEohX5$o4G^{M-o767IE3M&EFXCJ%#KFgux>Bm{vLctLbj)lCW_C_VE%vgb@+=%2
zN*0_(A-pW?oYqPFf-)>xZrr)sWkY(!)I~}w7#J87OM?7@8H`=hI(DB?nkiVm>i+xC
zyC2R!{Pc1ErFY8{nleAWKY#y2%pubV1_lPkByV>Yh7ML)4+aJX&H|6fVg?31We{ep
zSZZI!z`(#>;_2(k{)9z@$3p%``Q0!E2Jw%cE{-7;x8Ba}tiSD6cHDEql!_CR_PoAw
zyUhHqB1hbVR7ate%_6y;6I0jk-g`OCyX#8Vv>401!R{y1HfLTsyZ^2^gGUpC=ENgs
z7=-Ts{;{~*pyB7a+4pU1&Ioe+xY#sFrS(vP;N58*($PkKPX6LepS>7Ox^<<O<S(8x
zh1Xj%ct&N;r){@7UYQEUINUPy>}o&U>5-BulYB~l?!swjcW&KNC$}|T_1muskxrEb
zw^TL1ZD?d)8v5!^w%Ik-1BX~Xf0;TlY)X@kc<xk(=tGCIIM@ojHN8VDLJBviN1IL7
z)b{e4=Ke)PDsJ!nwF#0Ys)8GLZ9ixI+<$dI;3h61lcpcF+02Fxb|O<%Dt5eL{y#6S
z@6-h@wxBI;+6ra%GuHFFu(Ir#w0nJ6<GTa}=hqjwJx<$&epdXvi07cE-FE{Wel3#>
z#tW=JPW@k6QIdHe=Ij%>MUg+&tNv+_Utn)`_0K{h`G@ggXY4ADI{!JXc=<A8mF4Vc
znbUk9*1I|{YM!5<v1?Puh2sz6{g1d_<Ub}{<sap<RD0*qZEI#}&H7Tg{BhF47s}1M
zW}RIq`DN-PNBb>j&fhGJ)z@8h;Eqt`G~Qp{iF}7PXK_?B*47HuZgnWFx7{U`+!Z@r
zVrfr9KEIV{>^EUWHzna^va9xdxchR-rulj==Dpu_JeDtbqUO@T<g|;jTEFZIm;PL+
z8k-{U`^`N6)bvchtDQ#=-krRXr)ZA;)s+tIyXE@MDjF|%=PJs%%OF(k$?}Ug7yU_<
zI&<R1yLHX7x9*<1aQoPy0-IAj(ntLRzXfOcag?aF?$z2Hz|QjDvu4(ZzseURd+yHs
zWt(yCv9&6Di(2Pjt>V4<_f#znIUY>4nUs{TVA-GFS=7|;Db(6F`N@<MlRN#l9#mh_
z!gqe{@~I~$bMkLhbmHQex7e}4Qta<1;Ym(bF}l7dEDrwc5ShUHzHZu|PUAzJlU2NU
z%h&2p+~AzeanRiF&swLBClyUj6U7&s2TK1u&ca-&m}nchz1vr4CC5ggjlDju8wJ(O
z%RX^Aee9^=T*y&1Ve4ddiL=}rmrS-vd+Hi7)8eG~#h0xuW`3V$Y!ke+-|FP@Ni*yo
z<ViZEq=(Er_C0WqZoJB=9TjnIUuxC{wcMzc`B}rrEVC|X@)G^%<MxM_aoC+IGM+ji
zq%P?jgPrb!7e;zQ_rJgLtejmmN#)|(o6%M`!#{OO8e0ji?P!ja)V8s)KY8=c+b6vf
zGc+uFT9-x0*?Hfcq`GXgY=MEH^65j$t4fbNdHb`n_JX-zOu|CrDNj0@?tD#C@&3E7
z<>FrNcO{-0v#aj>_0#fCzbaN}_3V$4^K*7JS>?^ktE5+4TG^^9y7_qVmsMJG6+?Zj
zZ~Fd}Gjra}9&|wESx(rsjZ2Ru&Hl%`Bd+qK$f5byw0=Ee|D>{VM(P_!JKyxl>V-4=
zGhN)if4jZwxTJe+O7GWbFRo=1^9#Riv0+_u^Z4x<ueUe6TkyJnVX&E4#Lj4mXVNcI
z*4=N)&g|uC+PUa*$?N}TY>(;8z7{+GlKWH1b&At<e0KlqUwyH5YRUg1ue8SIzdluA
zuhyN6)}AdQE@<zdKk?@*yUBuU4<Gds=lIWHHF0X?F6*-7PTe2!KQ0}a=DKj<lF#3Y
zdfW^7KVD`nzRZ92|61;ayBp3m?-9IwY3ZlQhkM0Nec#V`A=cy9nbPS+^1h#E?@V~g
zFBg<hwEIxA>xWN=7Kr%FHvDd>ym)r0$jdw{$@|>_^YSXDO!8hFy=24Q?7+>XZf37v
z<ZlT6cJrNbq?Q)z>wiHq+dTwr{JG|MZnT<wkLQJ4T*+pW{7ccl>f%;j{JY2N%QOpf
z-}7lJEVtzv?P5;WHdQ^GYrIv*)^sn+foZbU&p7YAIK^Jfy!lvL-6s$44I!<Ol3bzc
zhd*83qI>wv|Hv6zYLh+9z84CwtG1gxb>{Y}l+F#?gZ3+(mh88#x_`cXt;D|Ba(8P&
z$~=x{XiMHbcjZfcy(mw*l5(X=|C5O}liZy@dC2jeRIW5p`R{Pj{`Q4u`>s5@_Dzgw
z{`8uyY0cY>na|vnnlyj*pLN?ZvspGDNb$Po`?;FKYX5V|pRbl|ew$<K@X7kBuI~2D
z`<K4Wx~f%CU%P(WMpy1zE3$r<{@AuZv_4GMlI36jvbXlh{`W5ad6v}{9JM&=>X%Cn
zj;q;sAD+b5b#CULJmv>)?N-0d+`aQ{ZdD}nGsj%x?Ynu8@MlGT{Tp?->V#cQ*!s*f
zCpTxdU5?xvc0Tvg?)A=zMYoPUTd<^gQE|AmY+NpLR_*F-m(}+#uD_bK`@`?JJmDG9
zd@J8yj^7?Tak*Sr`?qb$nPFRgnwt1FKU<Q?-aIWezs+aXb+$YI^yZw^SRto5LseER
zmZ$PpD!0}hmHL3&`6g2AAKKm4W?A~#v+%9T-a1SB(}P6m-aGH+9liPG8M~dw`tk*D
z`J$(-l{C6I>tC<@jNI+hUQaKHDDgj$y)~;@>TBg$zkT}xbDzXaGGD(rv(W5w&h0Ic
zxo@MQrtOv7q_RHpWcJR9i>e*=EzFfF-)7vm=b?1YiRig!ZKO+oon5sx_2z6v=G%rx
ziiFSYT_0ar?NAp{a`4H^*4L$b#as84r1Mn9GMUYsv^`E~`^JsYcQ<a+sWwhYl+t~z
z7jS>kUGca1?Ar}Btl~e-j^4`KTX(amdd1t^S8w~b73WG@?eM*|_oXD$YsCVVFAZDw
zwtaLre^Rb<?wUG($7;*$)0@nl&0Z|5F<Euz>bEVg?rpvU3TFE&J(8m3UO#6x|9RJT
zZzfOlw7rr^>n^GO%&lm-xy@qsy+0-MjbrcUM1D)_cp~X4&OO`E`4hL>zQDD)*I5rF
zWJQKO2{rp}eEr2S*$#eI53}0`H%o>+Nj3Za`1$nS7L%Dbi>Ez_m)W&VdH!Vkv@~~}
zlje8tpMUt}$!5uEVUC}ICx_4ITG#U=UE%*pLG9|kC+SM{CwQENPr?)OCl5I&XHWSP
z|D5|1_egv?yZG?L_jL;PbM^0df6`yeYLNfxivE-3Us;zuS)Tht@8o=$KE?ZAru>oF
zcVNPwFTD3<e}<orH;I?sZ)ck;^)zSRyl*G>=P)&;ZT=Z#@Uyb!pzhC|Qv19=>1+Iq
zpDQE3Z=txYm1W*OgHx4XUj2BgxVBw+<CEu~Sf@XEp8Z4bs@wi^>t|iq@oT@#-X-F-
zp7rYaaeM6YxYX?X^>--ehm`H#Hg~G+%BRK(|9_pGZO;7Z1FK%u4;j7kAHO<kl%jH<
zePo^f<m;(-*S9U+)UUp^=K7QPz5kwwPWk-xwcw{;OCQwv&7WW4Q0Eq3u+psUz>KYL
zSG;-bse9k_=QGWi2VYj)G|~HYl5_8ilj>FK%vbnlA3Ayd4Y$vU*)VmfAwT#0{Pg7K
z%a^McJ8L|jJ^ifninoiO>-YP|H{5A_W_rIPeD=)RgSM3~uAIG97V_=LwD;d6zllEm
zf9u!n567<`S65&37!)M7Kc5xu-zGb?)@J2X`#n83-|Tx}wyNcn9o*e#LX9fguC6W*
zxV?C)?Z&6dm1oXli8Gr??vMz~dlLWm>BCO@lk@jf)YYGS{H9uEf5emJ8?IcrJnOxl
z{Oi!LFShETV&%`AKV_D!PTQcqzM7T!i`*H;{g+R*1U}p`AzbqAT=v&;cTz=*H=pgY
zKl%LZre!hnj_<p6eEt7d>rdYQ5c~S^x=CNn-=F<Cxn^B`z2>&r4Xf77`g!NU%XKU3
zU#EW(VEH?@Z{L9}54f7ko<u$QKkrX-|4C=@-<m&<Kbgz;_Km35q_|1!VJGXA=Kq{w
zQ+iJ2XX(U`yCPlFYH$Bh{p~wxNsZ6EZC<S>dbU@c`<?jLa_Wh${*&ns?$rgWq+V-P
zn|GRbi?!)uqg&TzF<0*Du8LE2-PWpSP}4E<{&ESiuG>;;U5`!BDC3yv6*ozLLx^?W
z6G`j6|L*+LOq4Y^`z^=a<DcAw^HXP(wQEZ0|21B1a$wJzpq;-R?3^d@*s{p+2mP|=
zKdC;GZL7@nN7Ev$YSmmF3O2d&S4T|EU0bYj{@Tmp$PbqO&ZmTK&uD!9>oe;ye!ES}
zpBVQ%PMP;aQS8Jf)%U5N6pr5L-|=qegrwOqQ*8M(H-B%pdA$4Uls$*6T+f!z7i`V6
znDA**&7`kKe@;4Yyf^-+^Czv(dsv_EEuCSt_fg`ch_rdDAN$N(dAZtS-yu8uv(@%1
zO%8{>Qv50M+q?Mw$?n8$5p&<&o0prhM)PT8`xK=U#%ILRm+juJ^?U9+5x&K8Ki<b3
zKljr3a_RNmQlH;m>ylZd_3z2)GeYT->w}J*iO=m)Jg*mR)Aq+N^zyftWqW@|f2}I@
zzP+&i)}<NK9rjLtGBdUNv)`wZ=gGU|Kb>>TT|Dvj-P<?LyfwOiamyjIySjZg*2~M?
zR+R4gy>X-Uj(vfj3YshG+ov?0Xg<H8^W?E!!>lW&yZ&x}`Qn$~gPxP0IW$=(rccu?
zo3uVZMB4J)lgmBr&$?93Yem0NxW6LQ_YT`nSuLA2C&hoNygKs6?d*w{-esS*6tfmy
zKl%RYi*4V}&zP+LnM1R6;`vRUb58b6bc^!6yrub8+~UC7>$0xqGVI?Onmo&Hf@QCU
z$QEYn**PC|^_NP$31+KZ`b03OOZmK7^c&WnBI`S~noevk{B`n)^wnEsb0?opd2jyH
zrknBW<aqXXCQ`k=a^L4Zo2D(~I?wZ(r=We!yq`QgAD={~bRXS6<&kI*m+JWgFON>v
zpYY|c`uPNhy#=4{IC*V+ay-5Jre6Mm3SNoU$9K{jLHxfy^Wr@;XZ(p+9`3RFt$6lL
zuJxa4{%TD6bA$0~om%`8$)jAV_IlB8l0Qk-DK5?U^mvkjom%{ZQ%*WR4gKE7f67_D
zzsjf1=h2z{Pek{fe#xQs{*2h~={1wyZ_zpUWUk-)=ucYD1#=gjw4QTs`xEau!iyK3
zv}U{Vd#cU-375D(eLF6^f0F-4HpO{+bfez{e~LV0nEF_-a`xr({`*RgP26*+w$+XQ
zL_gn(@0veVzDq8Un;?Hy?00Z($iLHNm5y~P(KgmU{kB)%dskLpeX%wE+^+Or@l|*8
zp3B(1DBGRRb7K0B{n_7}{&ZYE@A&WS)5_nAzTWo!(H}ndTjc7yJF~u?yH|QHdTssA
zw*5QR;{`X^ELMNAmig85fZ6A)KYT6QeLHJ@;3<~6>f3hed%u<bX3|>vdR~ne1FQdu
z=*>qzzxeYz@3)is{VM)fO#lD?`TY5HH}{XnKSe8_$K`&y<Lq_*MD(Jkl_%!MmQ}O;
z+_x!aUhMaK<yLR~cGv#h_k7wOrKF4b`6r_1)X9B%KEL^N@F&{~vKJ(}e((A#=68kZ
z)!KE@pIimIyDD7jEEd$QTk&bqsXteLZ~pc*_4}+z`N1!jKZ(Bkt~GjVVCC|hJu3ER
z#Lm0^yL0KT)cvYs@#k;vo%gyTPRyw0vi7IuoQ?nIEzy!;pZ2ri&w-bJ-R)G_8q=Tr
zW`0%c9_QilQuSw@{WI%NbC&J@)v;%$?l;+=ix!l=vQf#m*n9uP^wyRs_a>RMUHRR+
zM<>f|!t^I!b2gqok$$vgirnPun~%ObSsppbpY!(ev%#OPyu3R(-%#cMdQU^erPrUl
z%!sX@_}{$HdugS&o%eRWkHSCepPT)?n*QXW=U?OaiQ=L`RsM2w?(zQoEOtZm@1;~{
zyQz^PpLTw!|8eR$tJuBlPnN8Z`u#oUPq|6oJ8GmM+=+jjmG3_;wwSbETe1G?qhgCm
z*WK6NbIaIvDogRF<caT59&sj>wflUZ|4rS#`211J{O@|ZVy&{io|(~p*>bm8;3fX3
z>(BVFKf73x@X_?IT~WpRM{Dj{TT9zcPfk0ZG<pBE=eJArG=HA<`~Bx_<@-;oKCjF6
zJG0Q3>Adg5W%66j>-EatEA3tUwei?o?b{CvSWFhL-u5--df!ajZr^)z@}2Mg`sMY1
z@7-NX;<9|sEHo}<`?RpWp1;n!|AoA7|BEee+Amx3-34hm2i0+T`PFy(j2UJN7k}B`
zJK=i&7P+;*H~#&=`19e;ImXpuv-eouXX7X>$+`aCH>%Ab#^OYL)XBpa#n~!vKV1A|
zy-v8(r@xn^Kj$_CY)|)U^*cRh#^uec&;Hy!@1yho$@iWw_<H@@;gw>sUrtKPTcv-~
zv8YVm=li}ke13QF#YLBkUMN00GUs*J_gUvIU+k}~zGkZaZp*D_7eD;fwY^aG<EQA0
z)4PpdgWVDH{P*Wvt7$tel!c3}nsXSYE-_@EaX+`c{M>nW^`92$-yTdB`RuMzGbzb?
zUwP$C$4@g<%l!8>Jh4@j7v6A+b<*;%Efe{5I;Ah~yzoRj<*1vTUd8F>uB!8u5~Y9M
zu-fnIJK@iPQ%{yVO8-2d<ry}?CjGR!r_F;62LG>K7Mr)n$F8V}|45jJX8)7Qs+z7f
z$B#|mXOW*6#Cq~GbG(v&Q{zUlY8}7V;{7#CJ?e}YZ5H?o1PY!zG*Msu<l~5hO|G01
zwLRwTOiguKw7s$Y!6!jQFS(POLn~S*e64uE*WJqLxyobS(hDN*ODc?ybv8U%;W2Mw
zszZjHcjHSPmPx@OpFQsFU3oOK<=Ck@R+IMS_w-qQ)=2GGe<ZnaW{#*y`x31`C*sRu
zZ`J<`pWYk$NpXJYqyx4hGw!N%yz|tY`_$#$aqG`Uh2Mqdm@Bb9+x*m^gYU~WnGp5G
zJGPwH*!Vx}hQ#Ys{wqv(?o^pb6eO;`s2);!WZ#BaT0dR({g7A6QC&83juxwyv(ReB
z?PA=4S3Sk9?CC!+{Y1Nde%`(hvcLAMN{;6`%H)${xzFWxndizMi)(JKFZp0@9$zmo
z^X5Kd^=Z>Imo5EJ)UdGe`TE0=-77bJS6%z3ujcb_>AU;>IP5$1i>W$NGw4mHK=7Nt
z3GVL;4u0LcH2&YTKL=Uri$DL)Kk<G~UgyuAMb^K)DohWYo%WbB=|cG4BGai8-siQk
zz4&kbSn=zopi7-Dj}9{APkyxPL&K*Pauw1x95waEN%sW<U$4HkTY9U%tq!Y8q`|z3
zCGjC)M;<M|_~dLab8VE#mrY8S724LQKYFx+|3&*EZx@|^HH|d|4dODfd<!OTZDDBL
z=~~tH<Fe#A+x3#i`rXg(zkWXbQtb=v&J7~m75UD8JWtIJzaRax>yLrh9=X_0Ja2T*
z9K8IO@otm7NZ*<nk{XsvQ)aNsOf#tC`6YiM+(u;mq(HVa@~(#p=R0oy7_a=7Eg&Ey
zP1oV?v_JP<KAd6xUE>xSRQn`FRfx~C@pr-jd%?;p=MPRxVV%`*T53b<$K(tD8*8G|
z9OhV6W=^p0Q+dbz`6AbZLk~|}S|H*nxyoU#f15(j{||c;>$e#HzxC(A;XjSFtT8bY
z+3onU<T%^I-zyf~Zq_$xEKo_R6b@Wex?qZNFuSwn>H2@S{Qmv^d9Sdc`to*`O-B!N
zMs~S4o|(?ff2Qe@*4n166TdqKaBH$EEjpw7H9&ITkqO5qPH&%|{yu>>uxqZFqQCNk
zM~a#f6(7VVXUICJy2$81bC{IEykyqJwMo<G8a|n7_-SGE%@w*E7CrV7?2=YFy8j{9
z|7i+G86B09@_CQkGh0z>)%Rz4(S5J&a}srv4)l3X5^<2euJ64inM1m_>DFbzhV8Fv
z;%$`FQiZ=f`enL1>gP?1Pxg~1=#_K#E6cm-dB~kytXQei-}YppjnpLfPZ=<QClmkJ
zD(}}}Wj=jkqIRXG&!UF~CMkbrT)4l5#pz*$!9KAG^A6>=?BjG^VpB8k!uC4vhX?x`
zGa4rKF;;f!^?RLf_t-g+-~R1?3GS99s()1&trX=>7OTzg_*Ngo`py5a;f1Q$m!+S6
za82a@X(4-k!QrKo{Q0>ro~&le>s0WY_e6Q&zTfO$P0gn{UtBJzqVJH~lv4R2S>eO-
zD|eIqn?2$h&PfOMel-1-{%d<n%M;fL{On8Yetwv*{$l%5iAm4@s7z&;*zcC4_;{h#
z9EBhy9nZwa54-F<6$9qoY+jHmlB&bTA2`G2gGzq0S-0oJ#<ji5`_2By{GGYBb(xI!
zpAyl?jc)&oKOOFmfBkHR!VmYy@9pap_H!s{J`?+MRCjaYS;>v^$`yJq{x{WpeyaPx
zeuC<mx{n)gTxtpB|1y=|ZURfw^ENvtyFV6;Hj05PM=mZ(4%=?HSeoZ$rM>&j@Diix
zVqA*S{~G_6pWCWd*ST5e=j~VLb+y0Gd|=q~U1>vm#;4>n5*$wdH>PH)^E|fYdb58<
z5j($$+Y8}mLUj_yszq)%n@GBgHR<wQRBihh$NEjew<`IP{(H?I|JmnwPrdp#wcr2)
z1A}UbYeY#(Vo9o1a#3nxNh*Vpfsui(fr+k>L5QKbm8qGPv7xSksg;32O4I!o6b-rg
zDVb@NxHX90Pq$!TU=RV>P>_;l6_#35oSC1;5a8mbYp7?cz#7AC37Q)6boFyt=akR{
E04z%AMF0Q*

diff --git a/index.rst b/index.rst
index 0f7deaea9..939f92a08 100644
--- a/index.rst
+++ b/index.rst
@@ -110,6 +110,40 @@ Technical references for PostgREST's functionality.
 - :doc:`API <api>`
 - :doc:`configuration`
 
+Topic guides
+------------
+
+Explanations of some key concepts in PostgREST.
+
+.. toctree::
+   :caption: Authentication
+   :hidden:
+
+   auth.rst
+
+.. toctree::
+   :caption: Schema Structure
+   :hidden:
+
+   schema_structure.rst
+
+.. toctree::
+   :caption: Administration
+   :hidden:
+
+   admin.rst
+
+.. toctree::
+   :caption: Installation
+   :hidden:
+
+   install.rst
+
+- :doc:`Authentication <auth>`
+- :doc:`Schema Structure <schema_structure>`
+- :doc:`Administration <admin>`
+- :doc:`Installation <install>`
+
 .. _how_tos:
 
 How-to guides
@@ -128,40 +162,6 @@ These are recipes that'll help you address specific use-cases.
 - :doc:`how-tos/embedding-table-from-another-schema`
 - :doc:`how-tos/providing-images-for-img`
 
-Topic guides
-------------
-
-Explanations of some key concepts in PostgREST.
-
-.. toctree::
-   :caption: Authentication
-   :hidden:
-
-   auth.rst
-
-.. toctree::
-   :caption: Installation
-   :hidden:
-
-   install.rst
-
-.. toctree::
-   :caption: Administration
-   :hidden:
-
-   admin.rst
-
-.. toctree::
-   :caption: Best Practices
-   :hidden:
-
-   best_practices.rst
-
-- :doc:`Authentication <auth>`
-- :doc:`Installation <install>`
-- :doc:`Administration <admin>`
-- :doc:`Best Practices <best_practices>`
-
 Ecosystem
 ---------
 
diff --git a/best_practices.rst b/schema_structure.rst
similarity index 68%
rename from best_practices.rst
rename to schema_structure.rst
index 6a4b0d97c..80e75b23f 100644
--- a/best_practices.rst
+++ b/schema_structure.rst
@@ -1,7 +1,7 @@
 
-.. _schema_structure:
+.. _schema_isolation:
 
-Schema Structure
+Schema Isolation
 ================
 
 A PostgREST instance exposes all the tables, views, and stored procedures of a single `PostgreSQL schema <https://www.postgresql.org/docs/12/ddl-schemas.html>`_ (a namespace of database objects). This means private data or implementation details can go inside different private schemas and be invisible to HTTP clients.
@@ -13,19 +13,15 @@ This allows you to change the internals of your schema and maintain backwards co
 
 .. _func_privs:
 
-Function privileges
-===================
+Functions
+=========
 
 By default, when a function is created, the privilege to execute it is not restricted by role. The function access is PUBLIC—executable by all roles(more details at `PostgreSQL Privileges page <https://www.postgresql.org/docs/12/ddl-priv.html>`_). This is not ideal for an API schema. To disable this behavior, you can run the following SQL statement:
 
 .. code-block:: postgres
 
-  -- Assuming your schema is named "api"
   ALTER DEFAULT PRIVILEGES IN SCHEMA api REVOKE EXECUTE ON FUNCTIONS FROM PUBLIC;
 
-  -- Or to stop functions from being PUBLICly executable in the whole database
-  ALTER DEFAULT PRIVILEGES REVOKE EXECUTE ON FUNCTIONS FROM PUBLIC;
-
 See `PostgreSQL alter default privileges <https://www.postgresql.org/docs/current/static/sql-alterdefaultprivileges.html>`_ for more details.
 
 After that, you'll need to grant EXECUTE privileges on functions explicitly:
@@ -35,32 +31,46 @@ After that, you'll need to grant EXECUTE privileges on functions explicitly:
    GRANT EXECUTE ON FUNCTION login TO anonymous;
    GRANT EXECUTE ON FUNCTION reset_password TO web_user;
 
-   -- you can also GRANT EXECUTE on all functions to a privileged role
-   GRANT EXECUTE ON ALL FUNCTIONS IN SCHEMA api TO admin;
-
 Security definer
 ----------------
 
-By default, a function is executed with the privileges of the user who calls it. This means that the user has to have all permissions to do the operations the procedure performs.
+A function is executed with the privileges of the user who calls it. This means that the user has to have all permissions to do the operations the procedure performs.
+If the function accesses private database objects, your `API roles <roles>`_ won't be able to succesfully execute the function.
 
-Another option is to define the function with the :code:`SECURITY DEFINER` option. Then only one permission check will take place, the permission to call the function, and the operations in the function will have the authority of the user who owns the function itself. See `PostgreSQL documentation <https://www.postgresql.org/docs/current/static/sql-createfunction.html#SQL-CREATEFUNCTION-SECURITY>`_ for more details.
-
-Views with RLS
-==============
-
-Views are invoked with the privileges of the view owner, much like stored procedures with the ``SECURITY DEFINER`` option. When created by a SUPERUSER role, all `row-level security <https://www.postgresql.org/docs/current/static/ddl-rowsecurity.html>`_ will be bypassed unless a different, non-SUPERUSER owner is specified.
+Another option is to define the function with the :code:`SECURITY DEFINER` option. Then only one permission check will take place, the permission to call the function, and the operations in the function will have the authority of the user who owns the function itself.
 
 .. code-block:: postgres
 
- -- Workaround:
- -- non-SUPERUSER role to be used as the owner of the views
- CREATE ROLE api_views_owner;
- -- alter the view owner so RLS can work normally
+  -- login as a user wich has privileges on the private schemas
+
+  -- create a sample function
+  create or replace function login(email text, pass text) returns jwt_token as $$
+  begin
+    -- access to a private schema called 'auth'
+    select auth.user_role(email, pass) into _role;
+    -- other operations
+    -- ...
+  end;
+  $$ language plpgsql security definer;
+
+Note the ``SECURITY DEFINER`` keywords at the end of the function. See `PostgreSQL documentation <https://www.postgresql.org/docs/current/static/sql-createfunction.html#SQL-CREATEFUNCTION-SECURITY>`_ for more details.
+
+Views
+=====
+
+Views are invoked with the privileges of the view owner, much like stored procedures with the ``SECURITY DEFINER`` option. When created by a SUPERUSER role, all `row-level security <https://www.postgresql.org/docs/current/static/ddl-rowsecurity.html>`_ will be bypassed unless a different, non-SUPERUSER owner is specified.
+
+For changing this, we can create a non-SUPERUSER role and make this role the view's owner.
+
+.. code-block:: postgres
+
+ CREATE ROLE api_views_owner NOINHERIT;
  ALTER VIEW sample_view OWNER TO api_views_owner;
 
-Views with Rules
-================
+Rules
+-----
 
 Insertion on VIEWs with complex `RULEs <https://www.postgresql.org/docs/11/sql-createrule.html>`_ might not work out of the box with PostgREST.
 It's recommended that you `use triggers instead of RULEs <https://wiki.postgresql.org/wiki/Don%27t_Do_This#Don.27t_use_rules>`_.
 If you want to keep using RULEs, a workaround is to wrap the VIEW insertion in a stored procedure and call it through the :ref:`s_procs` interface.
+For more details, see this `github issue <https://github.com/PostgREST/postgrest/issues/1283>`_.

From ef36ec10a19a387454780c3ac4e3999e1650f0e1 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Tue, 21 Apr 2020 14:17:13 -0500
Subject: [PATCH 331/652] Put warning in db-schema and clarify search_path

---
 api.rst               |  7 ++-----
 configuration.rst     | 12 ++++++++++--
 releases/upcoming.rst |  2 +-
 3 files changed, 13 insertions(+), 8 deletions(-)

diff --git a/api.rst b/api.rst
index fd62a0f92..3a0a4da11 100644
--- a/api.rst
+++ b/api.rst
@@ -1421,18 +1421,15 @@ Switching Schemas
 =================
 
 You can switch schemas at runtime with the ``Accept-Profile`` and ``Content-Profile`` headers. You can only switch to a schema that is included in :ref:`db-schema`.
-This is useful for **api versioning** and **schema-based multitenancy**.
 
-The schema to be used can be selected through the ``Accept-Profile`` header for GET or HEAD:
+For GET or HEAD, the schema to be used can be selected through the ``Accept-Profile`` header:
 
 .. code-block:: http
 
    GET /items HTTP/1.1
    Accept-Profile: tenant2
 
-If you don't specify the ``Accept-Profile`` header, the first schema on :ref:`db-schema` will be used.
-
-For POST, PATCH, PUT, DELETE you can use the ``Content-Profile`` header for selecting the schema:
+For POST, PATCH, PUT and DELETE, you can use the ``Content-Profile`` header for selecting the schema:
 
 .. code-block:: http
 
diff --git a/configuration.rst b/configuration.rst
index 35d93d308..00d0f7ef6 100644
--- a/configuration.rst
+++ b/configuration.rst
@@ -75,12 +75,12 @@ db-schema
 
   The database schema to expose to REST clients. Tables, views and stored procedures in this schema will get API endpoints.
 
-  The chosen schema gets added to the `search_path <https://www.postgresql.org/docs/11/ddl-schemas.html#DDL-SCHEMAS-PATH>`_ of every request. Example:
-
   .. code:: bash
 
      db-schema = "api"
 
+  This schema gets added to the `search_path <https://www.postgresql.org/docs/11/ddl-schemas.html#DDL-SCHEMAS-PATH>`_ of every request.
+
   You can also specify a list of schemas that can be used for **schema-based multitenancy** and **api versioning** by :ref:`multiple-schemas`. Example:
 
   .. code:: bash
@@ -89,6 +89,14 @@ db-schema
      ##or
      ##db-schema = "v1, v2"
 
+  .. warning::
+
+     Never expose private schemas in this way. See :ref:`schema_isolation`.
+
+  If you don't :ref:`Switch Schemas <multiple-schemas>`, the first schema in the list(``tenant1`` in this case) is chosen as the default schema.
+
+  Only the chosen schema gets added to the `search_path <https://www.postgresql.org/docs/11/ddl-schemas.html#DDL-SCHEMAS-PATH>`_ of every request.
+
 .. _db-anon-role:
 
 db-anon-role
diff --git a/releases/upcoming.rst b/releases/upcoming.rst
index 8a77c509b..55eb25bd2 100644
--- a/releases/upcoming.rst
+++ b/releases/upcoming.rst
@@ -10,7 +10,7 @@ These are changes yet unreleased. If you'd like to try them out before a new off
 Added
 -----
 
-* Support for :ref:`multiple-schemas` at runtime.
+* Support for :ref:`Switching to a schema <multiple-schemas>` defined in :ref:`db-schema`.
   |br| -- `@steve-chavez <https://github.com/steve-chavez>`_, `@mahmoudkassem <https://github.com/mahmoudkassem>`_
 
 * Support for :ref:`planned_count` and :ref:`estimated_count`.

From 3af6df743bf97bf8c19ac190a39a571200f6d2c8 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Tue, 21 Apr 2020 14:38:31 -0500
Subject: [PATCH 332/652] Reorder calling func with array

---
 api.rst       | 62 +++++++++++++++++++++------------------------------
 ecosystem.rst |  4 ++--
 2 files changed, 27 insertions(+), 39 deletions(-)

diff --git a/api.rst b/api.rst
index 3a0a4da11..350f77123 100644
--- a/api.rst
+++ b/api.rst
@@ -1179,46 +1179,51 @@ You can also call a function that takes a single parameter of type json by sendi
 
   8
 
+.. _s_procs_array:
+
 Calling functions with array parameters
 ---------------------------------------
 
 You can call a function that takes an array parameter:
 
-.. code-block:: plpgsql
+.. code-block:: postgres
 
-   CREATE FUNCTION native_array_func(arr int[]) RETURNS int[] as $$
-      SELECT arr;
-   $$ LANGUAGE SQL;
+   create function plus_one(arr int[]) returns int[] as $$
+      SELECT array_agg(n + 1) FROM unnest($1) AS n;
+   $$ language sql;
 
 .. code-block:: http
 
- POST /rpc/native_array_func HTTP/1.1
+   POST /rpc/plus_one HTTP/1.1
+   Content-Type: application/json
 
- { "arg": [1,2,3] }
+   {"arr": [1,2,3,4]}
 
- [1,2,3]
+.. code-block:: json
+
+   [2,3,4,5]
+
+For calling the function with GET, you can pass the array as an `array literal <https://www.postgresql.org/docs/11/arrays.html#ARRAYS-INPUT>`_,
+as in ``{1,2,3,4}``. Note that the curly brackets have to be urlencoded(``{`` is ``%7B`` and ``}`` is ``%7D``).
+
+.. code-block:: http
+
+ GET /rpc/plus_one?arr=%7B1,2,3,4%7D' HTTP/1.1
+
+ [2,3,4,5]
 
 .. note::
 
-   For versions prior to PostgreSQL 10, to pass a PostgreSQL native array you need to quote it as a string:
+   For versions prior to PostgreSQL 10, to pass a PostgreSQL native array on a POST payload, you need to quote it and use an array literal:
 
    .. code-block:: http
 
-    POST /rpc/native_array_func HTTP/1.1
+    POST /rpc/plus_one HTTP/1.1
 
-    { "arg": "{1,2,3}" }
+    { "arr": "{1,2,3,4}" }
 
    In these versions we recommend using function parameters of type json to accept arrays from the client.
 
-For calling it with GET, you can pass the array as an `array literal <https://www.postgresql.org/docs/11/arrays.html#ARRAYS-INPUT>`_;
-as in ``{1,2,3}``. Note that the curly brackets have to be urlencoded(``{`` is ``%7B`` and ``}`` is ``%7D``).
-
-.. code-block:: http
-
- GET /rpc/native_array_func?arr=%7B1,2,3%7D' HTTP/1.1
-
- [1,2,3]
-
 Scalar functions
 ----------------
 
@@ -1262,24 +1267,7 @@ It's possible to call a function in a bulk way, analoguosly to :ref:`bulk_insert
 
    [ 3, 7 ]
 
-If you have large payloads to process, it's preferrable you instead use a function with an array or json parameter, as this will be more efficient.
-
-.. code-block:: postgres
-
-   create function plus_one(arr int[]) returns int[] as $$
-      SELECT array_agg(n + 1) FROM unnest($1) AS n;
-   $$ language sql;
-
-.. code-block:: http
-
-   POST /rpc/plus_one HTTP/1.1
-   Content-Type: application/json
-
-   {"arr": [1,2,3,4]}
-
-.. code-block:: json
-
-   [2,3,4,5]
+If you have large payloads to process, it's preferrable you instead use a function with an :ref:`array parameter <s_procs_array>` or json parameter, as this will be more efficient.
 
 It's also possible to :ref:`Specify Columns <specify_columns>` on functions calls.
 
diff --git a/ecosystem.rst b/ecosystem.rst
index feb09410e..0a717478b 100644
--- a/ecosystem.rst
+++ b/ecosystem.rst
@@ -6,11 +6,11 @@ Community Tutorials
 * `Building a Contacts List with PostgREST and Vue.js <https://www.youtube.com/playlist?list=PLseEp7p6EwibFjhfO6LhMx5_SFkVxt_gf>`_ -
   In this video series, DigitalOcean shows how to build and deploy an Nginx + PostgREST(using a managed PostgreSQL database) + Vue.js webapp in an Ubuntu server droplet.
 
+* `PostgREST + Auth0: Create REST API in mintutes and add social login using Auth0 <https://samkhawase.com/blog/postgrest_introduction/>`_ - A step-by-step tutorial to show how to Dockerize and integrate Auth0 to PostgREST service.
+
 * `PostgREST + PostGIS API tutorial in 5 minutes <https://gis-ops.com/postgrest-postgis-api-tutorial-in-5-minutes>`_ -
   In this tutorial, GIS • OPS shows how to perform PostGIS calculations through PostgREST :ref:`s_procs` interface.
 
-* `PostgREST + Auth0: Create REST API in mintutes and add social login using Auth0 <https://samkhawase.com/blog/postgrest_introduction/>`_ - A step-by-step tutorial to show how to Dockerize and integrate Auth0 to PostgREST service. 
-
 .. _eco_example_apps:
 
 Example Apps

From 469e01f77b90605d8cf6c9b2bb7d20e6256b5d75 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Tue, 21 Apr 2020 15:09:25 -0500
Subject: [PATCH 333/652] Add release page for v7.0.0

---
 how-tos/providing-images-for-img.rst  |  2 ++
 index.rst                             |  1 +
 releases/v5.2.0.rst                   |  2 +-
 releases/v6.0.2.rst                   |  2 +-
 releases/{upcoming.rst => v7.0.0.rst} | 43 +++++++++++++++++++++++++--
 5 files changed, 45 insertions(+), 5 deletions(-)
 rename releases/{upcoming.rst => v7.0.0.rst} (69%)

diff --git a/how-tos/providing-images-for-img.rst b/how-tos/providing-images-for-img.rst
index 8bb510087..be442287b 100644
--- a/how-tos/providing-images-for-img.rst
+++ b/how-tos/providing-images-for-img.rst
@@ -1,3 +1,5 @@
+.. _providing_img:
+
 Providing images for <img>
 ==========================
 
diff --git a/index.rst b/index.rst
index 939f92a08..bdfa5e775 100644
--- a/index.rst
+++ b/index.rst
@@ -185,6 +185,7 @@ Release Notes
 Here we'll include the most relevant changes so you can migrate to newer versions easily.
 You can see the full changelog of each release in the `PostgREST repository <https://github.com/PostgREST/postgrest/releases>`_.
 
+- :doc:`releases/v7.0.0`
 - :doc:`releases/v6.0.2`
 - :doc:`releases/v5.2.0`
 
diff --git a/releases/v5.2.0.rst b/releases/v5.2.0.rst
index 43bc18833..d49067b39 100644
--- a/releases/v5.2.0.rst
+++ b/releases/v5.2.0.rst
@@ -16,7 +16,7 @@ Thanks
 
 This release was made possible thanks to:
 
-* `Daniel Babiak <https://github.com/d-babiak>`_
+* `Daniel Babiak <https://github.com/dbabiak>`_
 * `Michel Pelletier <https://github.com/michelp>`_
 * Tsingson Qin
 * Jay Hannah
diff --git a/releases/v6.0.2.rst b/releases/v6.0.2.rst
index 19176d5b2..90cdfb514 100644
--- a/releases/v6.0.2.rst
+++ b/releases/v6.0.2.rst
@@ -65,7 +65,7 @@ This release is sponsored by:
   :target: https://tryretool.com/?utm_source=sponsor&utm_campaign=postgrest
   :width:  13em
 
-* Daniel Babiak
+* `Daniel Babiak <https://github.com/dbabiak>`_
 * Evans Fernandes
 * Tsingson Qin
 * Michel Pelletier
diff --git a/releases/upcoming.rst b/releases/v7.0.0.rst
similarity index 69%
rename from releases/upcoming.rst
rename to releases/v7.0.0.rst
index 55eb25bd2..57117c22f 100644
--- a/releases/upcoming.rst
+++ b/releases/v7.0.0.rst
@@ -2,10 +2,10 @@
 
    <br />
 
-Upcoming
-========
+v7.0.0
+======
 
-These are changes yet unreleased. If you'd like to try them out before a new official release, you can :ref:`build_source`.
+You can donwload this release at the `PostgREST v7.0.0 release page <https://github.com/PostgREST/postgrest/releases/tag/v7.0.0>`_.
 
 Added
 -----
@@ -35,9 +35,12 @@ Added
 
 * Documentation improvements
 
+  + Explanation for :ref:`Schema Structure <schema_isolation>`.
   + Reference for :ref:`s_proc_embed`.
   + Reference for :ref:`mutation_embed`.
   + Reference for filters on :ref:`json_columns`.
+  + How-to for :ref:`providing_img`.
+  + Added :ref:`community_tutorials` section.
 
 Fixed
 -----
@@ -67,3 +70,37 @@ Changed
 * ``server-proxy-uri`` config option has been renamed to :ref:`openapi-server-proxy-uri`.
 
 * Default Unix Socket file mode from 755 to 660
+
+Thanks
+------
+
+This release was made possible thanks to:
+
+.. image:: ../_static/cybertec.png
+  :target: https://www.cybertec-postgresql.com/en/
+  :width:  13em
+
+.. image:: ../_static/2ndquadrant.png
+  :target: https://www.2ndquadrant.com/en/?utm_campaign=External%20Websites&utm_source=PostgREST&utm_medium=Logo
+  :width:  13em
+
+.. image:: ../_static/retool.png
+  :target: https://tryretool.com/?utm_source=sponsor&utm_campaign=postgrest
+  :width:  13em
+
+* `Daniel Babiak <https://github.com/dbabiak>`_
+* Evans Fernandes
+* `Jan Sommer <https://github.com/nerfpops>`_
+* Tsingson Qin
+* Michel Pelletier
+* Jay Hannah
+* Robert Stolarz
+* Kofi Gumbs
+* Nicholas DiBiase
+* Christopher Reid
+* Nathan Bouscal
+* Daniel Rafaj
+* David Fenko
+
+
+If you like to join them please consider `supporting PostgREST development <https://github.com/PostgREST/postgrest#supporting-development>`_.

From b6c03f3658b41101076ab21d4e9bedfc8db0b997 Mon Sep 17 00:00:00 2001
From: Steve Phillips <steve@tryingtobeawesome.com>
Date: Mon, 27 Apr 2020 06:58:01 -0700
Subject: [PATCH 334/652] api.rst: formatting tweaks

---
 api.rst | 15 +++++++++------
 1 file changed, 9 insertions(+), 6 deletions(-)

diff --git a/api.rst b/api.rst
index 350f77123..0bab1152f 100644
--- a/api.rst
+++ b/api.rst
@@ -702,7 +702,7 @@ Embedding on Stored Procedures
 
 If you have a :ref:`Stored Procedure <s_procs>` that returns a table type, you can embed its related resources.
 
-Here's a sample function(notice the ``RETURNS SETOF films``).
+Here's a sample function (notice the ``RETURNS SETOF films``).
 
 .. code-block:: plpgsql
 
@@ -742,9 +742,12 @@ Say you want to insert a **film** and then get some of its attributes plus embed
    Prefer: return=representation
 
    {
-    "id": 100, "director_id": 40,
-    "title": "127 hours", "year": 2010,
-    "rating": 7.6, "language": "english"
+    "id": 100,
+    "director_id": 40,
+    "title": "127 hours",
+    "year": 2010,
+    "rating": 7.6,
+    "language": "english"
    }
 
 Response:
@@ -1122,13 +1125,13 @@ The client can call it by posting an object like
   3
 
 
-Procedures must be declared with named parameters. Procedures declared like:
+Procedures must be declared with named parameters. Procedures declared like
 
 .. code-block:: plpgsql
 
   CREATE FUNCTION non_named_args(integer, text, integer) ...
 
-Can not be called with PostgREST, since we use `named notation <https://www.postgresql.org/docs/current/static/sql-syntax-calling-funcs.html#SQL-SYNTAX-CALLING-FUNCS-NAMED>`_ internally.
+cannot be called with PostgREST, since we use `named notation <https://www.postgresql.org/docs/current/static/sql-syntax-calling-funcs.html#SQL-SYNTAX-CALLING-FUNCS-NAMED>`_ internally.
 
 Note that PostgreSQL converts identifier names to lowercase unless you quote them like:
 

From 1315584de5dca7cf444116eb3f1c78034c453466 Mon Sep 17 00:00:00 2001
From: Nick Santos <nickrsan@users.noreply.github.com>
Date: Fri, 1 May 2020 16:18:03 -0700
Subject: [PATCH 335/652] Fix link to DigitalOcean PostgREST Contact List video

Old playlist is gone - linked to first video in series instead
---
 ecosystem.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ecosystem.rst b/ecosystem.rst
index 0a717478b..a71c41571 100644
--- a/ecosystem.rst
+++ b/ecosystem.rst
@@ -3,7 +3,7 @@
 Community Tutorials
 -------------------
 
-* `Building a Contacts List with PostgREST and Vue.js <https://www.youtube.com/playlist?list=PLseEp7p6EwibFjhfO6LhMx5_SFkVxt_gf>`_ -
+* `Building a Contacts List with PostgREST and Vue.js <https://www.youtube.com/watch?v=iHtsALtD5-U>`_ -
   In this video series, DigitalOcean shows how to build and deploy an Nginx + PostgREST(using a managed PostgreSQL database) + Vue.js webapp in an Ubuntu server droplet.
 
 * `PostgREST + Auth0: Create REST API in mintutes and add social login using Auth0 <https://samkhawase.com/blog/postgrest_introduction/>`_ - A step-by-step tutorial to show how to Dockerize and integrate Auth0 to PostgREST service.

From 622ff7b708f3a0d09eed97a6e5a71426c55bca02 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Mon, 4 May 2020 11:46:54 -0500
Subject: [PATCH 336/652] Note schema structure page is a work in progress

---
 schema_structure.rst | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/schema_structure.rst b/schema_structure.rst
index 80e75b23f..8f64354f6 100644
--- a/schema_structure.rst
+++ b/schema_structure.rst
@@ -1,4 +1,8 @@
 
+.. note::
+
+  This page is a work in progress.
+
 .. _schema_isolation:
 
 Schema Isolation

From 8dc16eef27ab97654ab17c26f61029190bcd7634 Mon Sep 17 00:00:00 2001
From: Remo <59358383+monacoremo@users.noreply.github.com>
Date: Wed, 6 May 2020 18:41:14 +0200
Subject: [PATCH 337/652] Documentation on how to run the test suite locally
 (#316)

Uses the `with_tmp_db` script added in https://github.com/PostgREST/postgrest/pull/1476.
---
 install.rst | 23 ++++++++++++++++++-----
 1 file changed, 18 insertions(+), 5 deletions(-)

diff --git a/install.rst b/install.rst
index 415757f45..2df5c9517 100644
--- a/install.rst
+++ b/install.rst
@@ -229,10 +229,23 @@ When a pre-built binary does not exist for your system you can build the project
 PostgREST Test Suite
 --------------------
 
-Creating the Test Database
-~~~~~~~~~~~~~~~~~~~~~~~~~~
+To properly run the test suite, you need a Postgres database that the tests can run against. There are several ways to set up this database. 
 
-To properly run postgrest tests one needs to create a database. To do so, use the test creation script :code:`create_test_database` in the :code:`test/` folder.
+Testing with a temporary database
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+If you have Postgres installed locally (:code:`initdb`, :code:`pg_ctl` and :code:`psql` should be on your PATH, no server needs to be running), you can run the test suite against a temporary database:
+
+.. code:: bash
+
+   test/with_tmp_db stack test
+   
+The :code:`with_tmp_db` script will set up a new Postgres cluster in a temporary directory, set the required environment variables and run the command that you passed it as an argument, :code:`stack test` in the example above. When the command is done, the temporary database is torn down and deleted again.
+
+Manually creating the Test Database
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+To manually create a database for testing, use the test creation script :code:`create_test_database` in the :code:`test/` folder.
 
 The script expects the following parameters:
 
@@ -254,8 +267,8 @@ The script will return the db uri to use in the tests--this uri corresponds to t
 
 Generating the user and the password allows one to create the database and run the tests against any PostgreSQL server without any modifications to the server. (Such as allowing accounts without a password or setting up trust authentication, or requiring the server to be on the same localhost the tests are run from).
 
-Running the Tests
-~~~~~~~~~~~~~~~~~
+Running the Tests with the manually created database
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 To run the tests, one must supply the database uri in the environment variable :code:`POSTGREST_TEST_CONNECTION`.
 

From 40bffc6950425d4e63726596670060d8d8cdddd6 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Tue, 12 May 2020 13:24:40 -0500
Subject: [PATCH 338/652] Add subheading to db-schema

---
 configuration.rst | 13 +++++++------
 1 file changed, 7 insertions(+), 6 deletions(-)

diff --git a/configuration.rst b/configuration.rst
index 00d0f7ef6..2b066f896 100644
--- a/configuration.rst
+++ b/configuration.rst
@@ -81,22 +81,23 @@ db-schema
 
   This schema gets added to the `search_path <https://www.postgresql.org/docs/11/ddl-schemas.html#DDL-SCHEMAS-PATH>`_ of every request.
 
+List of schemas
+~~~~~~~~~~~~~~~
+
   You can also specify a list of schemas that can be used for **schema-based multitenancy** and **api versioning** by :ref:`multiple-schemas`. Example:
 
   .. code:: bash
 
      db-schema = "tenant1, tenant2"
-     ##or
-     ##db-schema = "v1, v2"
+
+  If you don't :ref:`Switch Schemas <multiple-schemas>`, the first schema in the list(``tenant1`` in this case) is chosen as the default schema.
+
+  *Only the chosen schema* gets added to the `search_path <https://www.postgresql.org/docs/11/ddl-schemas.html#DDL-SCHEMAS-PATH>`_ of every request.
 
   .. warning::
 
      Never expose private schemas in this way. See :ref:`schema_isolation`.
 
-  If you don't :ref:`Switch Schemas <multiple-schemas>`, the first schema in the list(``tenant1`` in this case) is chosen as the default schema.
-
-  Only the chosen schema gets added to the `search_path <https://www.postgresql.org/docs/11/ddl-schemas.html#DDL-SCHEMAS-PATH>`_ of every request.
-
 .. _db-anon-role:
 
 db-anon-role

From 20bb295237ada14c3c8d4cda6ccde9c37d1a6b53 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Wed, 20 May 2020 13:51:04 -0500
Subject: [PATCH 339/652] Add v7.0.1 release

---
 conf.py             |  2 +-
 releases/v7.0.1.rst | 61 +++++++++++++++++++++++++++++++++++++++++++++
 2 files changed, 62 insertions(+), 1 deletion(-)
 create mode 100644 releases/v7.0.1.rst

diff --git a/conf.py b/conf.py
index 80008bf49..03012ad36 100644
--- a/conf.py
+++ b/conf.py
@@ -56,7 +56,7 @@ copyright = u'2017, ' + author
 # The short X.Y version.
 version = u'7.0'
 # The full version, including alpha/beta/rc tags.
-release = u'7.0.0'
+release = u'7.0.1'
 
 # The language for content autogenerated by Sphinx. Refer to documentation
 # for a list of supported languages.
diff --git a/releases/v7.0.1.rst b/releases/v7.0.1.rst
new file mode 100644
index 000000000..2d64ee518
--- /dev/null
+++ b/releases/v7.0.1.rst
@@ -0,0 +1,61 @@
+.. |br| raw:: html
+
+   <br />
+
+v7.0.1
+======
+
+You can see the full changelog at `PostgREST v7.0.1 release page <https://github.com/PostgREST/postgrest/releases/tag/v7.0.1>`_.
+
+Fixed
+-----
+
+* Fix overloaded computed columns on RPC
+  |br| -- `@wolfgangwalther <https://github.com/wolfgangwalther>`_
+
+* Fix POST, PATCH, DELETE with ``?select=`` and ``Prefer: return=minimal`` and PATCH with empty body
+  |br| -- `@wolfgangwalther <https://github.com/wolfgangwalther>`_
+
+* Fix missing ``openapi-server-proxy-uri`` config option
+  |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
+
+* Fix ``Content-Profile`` not working for POST RPC
+  |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
+
+* Fix PUT restriction for including all columns in payload
+  |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
+
+
+Thanks
+------
+
+This release was made possible thanks to:
+
+.. image:: ../_static/cybertec.png
+  :target: https://www.cybertec-postgresql.com/en/
+  :width:  13em
+
+.. image:: ../_static/2ndquadrant.png
+  :target: https://www.2ndquadrant.com/en/?utm_campaign=External%20Websites&utm_source=PostgREST&utm_medium=Logo
+  :width:  13em
+
+.. image:: ../_static/retool.png
+  :target: https://tryretool.com/?utm_source=sponsor&utm_campaign=postgrest
+  :width:  13em
+
+* `Daniel Babiak <https://github.com/dbabiak>`_
+* Evans Fernandes
+* `Jan Sommer <https://github.com/nerfpops>`_
+* Tsingson Qin
+* Michel Pelletier
+* Jay Hannah
+* Robert Stolarz
+* Kofi Gumbs
+* Nicholas DiBiase
+* Christopher Reid
+* Nathan Bouscal
+* Daniel Rafaj
+* David Fenko
+
+
+If you'd like to join them, consider `supporting PostgREST development <https://github.com/PostgREST/postgrest#supporting-development>`_.

From f8991b0794892766aeb4e68310c3e13bdf9106ab Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Wed, 20 May 2020 14:04:06 -0500
Subject: [PATCH 340/652] Fix broken link in schema structure

---
 schema_structure.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/schema_structure.rst b/schema_structure.rst
index 8f64354f6..718291255 100644
--- a/schema_structure.rst
+++ b/schema_structure.rst
@@ -39,7 +39,7 @@ Security definer
 ----------------
 
 A function is executed with the privileges of the user who calls it. This means that the user has to have all permissions to do the operations the procedure performs.
-If the function accesses private database objects, your `API roles <roles>`_ won't be able to succesfully execute the function.
+If the function accesses private database objects, your :ref:`API roles <roles>` won't be able to succesfully execute the function.
 
 Another option is to define the function with the :code:`SECURITY DEFINER` option. Then only one permission check will take place, the permission to call the function, and the operations in the function will have the authority of the user who owns the function itself.
 

From 516809f2de85e787fa2a278193884a897b9be70a Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Wed, 20 May 2020 14:07:35 -0500
Subject: [PATCH 341/652] Add favicon.ico

---
 _static/favicon.ico | Bin 0 -> 15086 bytes
 conf.py             |   2 +-
 2 files changed, 1 insertion(+), 1 deletion(-)
 create mode 100644 _static/favicon.ico

diff --git a/_static/favicon.ico b/_static/favicon.ico
new file mode 100644
index 0000000000000000000000000000000000000000..a9e16d3a8ba108c83e65a0c90d321c0a194a9bf9
GIT binary patch
literal 15086
zcmZQzU}RusFfaho3Jfb$85qnM7#I{3pnL%ahI^_E3<3fWeg+EzLz@``g9ZZwg8>5r
zLjnUtoB;$>Km=*Hq@;w;!^6YC+S=OC#>R#yY-?+42*M!sPEJmSE-o%`K1hrZ2HEB8
z>}-^qn=3||YcW-)rlz`?nVDTTG&Fo@XlVF=By3=KM?pd1xv+@HD{XD<2S$d5_lea1
z(8R>#eoRbE8m5a#6KQH{;;E^rF==UOaUg`7o0}b)n_C=OTU+cqJ3F0&gM(%%$jkl^
z5ES_D?Bc$ox2MawxuwMcq>g}Dj&*f)R#jD1LZrEtI;z{dy16XOESkinq+Z!O+b?l*
zcI=aqQh4F$=pINN8)#=rRb>^op1yvcqP*Pu=n$W&^BSYq%xj36Vs31*URhD;W=wRn
zF70fm%;d!jmvEbynD@!a%DzdC^6Oqu>$hu4uJzB^^-<GZot)>0i;MqtadFM1%of_{
ze)94;v$d5?m7J`?`-F&qzL}L?J0|9s|Cn1BGQ-~9W{tG8{2MDPtGc@SIsw|afHG4(
zef*<kWaZv^xj9c=R2Q^;dY1A3*;Ro{%uJ1@Nk~b(u(oxG{r~?z6J@rLuDid#pS_`>
zLB6`WS_vDjudi1~N=~&?P*S~PVx+%jPJP(y=~+hq7nC~OPm2j@m6nnD<mu(r(cRmv
zSW{c0SY1=AR9Ri4R9oMm)YROpR9jn%VQx)LjZ%Gmy<$&K4>##9M%9s)mgZt*Wp&fY
z$mqVYu`vcVF*3d{Cnxt-UQy}Fl=_6u8TqE4XJ+aApI;NOL_=MBpSXnhKNAy^2L?t)
zcMOe8?iw1I+%YjVy`!z8^H^C~<%xlT0m#gI=w_Rno8J!)506K64e7l6{Cwe{pde3g
zZ*O08?BnC(<>l_tA|)yLEjq%lXLhOErJ31U|EFi`|DRVIG*4AkW50%$#)sh0kePwO
z!MQ=fA=#n9!5xl{jwdA~Bz|#masM+gG(Hs`85Qmg0bo0Pe0+QZ0s?%pva)1JcQNrg
z{{R2aXlP_ST}4Ix{EUXE$y2k9|AWGQMwZV18Ko`{8VloE)il(P$;c_bkW)~;tDvZI
zS5{W;sj{;2J$qZL**+f5oiZ{qZ|odgN(Lftw70d3sHmx4wy`vwF{i@y#I$V9|5Gvz
z{?E$R{y!sI@Bgeq#|N_;qUV-nMRi96`*y}g1WYK+jGQp7E^*q7a=$&Z>LQmpJJ?K;
zmXUws?Bo(ke8^EpWl~bInu@CO^R$GJ>C=j=pU%lv2fH5>{xh?6{?EwN`#&wm@ZZb=
zi;uGkOz+JpFu6Oo$nwMV9FxBjGcEp1uMA$~;pSW`EF$vF%F1%~i<hrisN*u?Oi4{m
zRaI6|eVP~(JY{aN)uY*2n*XO}>HnXWrT2e&mM#+3`9D2N=l}F<o&U45HU7`YG5$Tb
zK5}`0m-9S1Ik}IfX6BP}vNA-7vz2<PCQY2kud1eY+{DCW?UKfjjZ?D>|4)Oudj^z7
z@kh4K|EbxAf9BN$E%bDCo-ZRK``+5tzHHUHO<dG-6{<;FwrpW)X=!1vsHkACs;XkI
ztgM9NV<%3ty1P1-O3Ny|PfG}Gom=UCU`m$JznNLu|7T@sL&6;H5550Wvkd;vt?}FG
z>E_ZVD=qWR)!Dgn%eJkY<>h5;$mW9B_4W1aOO`BQMs*G8yu7?TXCot{o$Bi9yRhJ$
zdb&C%#l$53h>D6oiwtmUnco<*WM+}Wz1g|O-)7{Q{hFR{{cc9C@n29p%qnrZS)LW$
zA}l8PR$f--yS}c@K@ANJtY+)z=<Epz2?-<J#i%+eDk|h%TwJ29tgK?JtgJvZ0$W?h
zSX)~~**iEz>KU5O1+^ax^>z0}1h}=el_&Qu>o15}+7dBmcD~8K>A9vqrc^~WtE#A;
zSJTkm?(AqEX=`mAZEbChVXn2cb+m(nLrh9aiYBUSXvdo{Wd^&4r<cE)s_GR1e*XUs
zj?QamH^i3A%r$unN=q{;{f>INIn7a0QhFR0mtaUcmymCAKwzkiyn@OdU2U!1(`)0p
zrsUeZo0X;Ye|E0npZ=<t4h04In^soV-Jp7pd|POvGdeQNUO_?ej*gDO(P_1b9kcSS
z-b~BX`#&Q~`~RFGn-}Q`!4u`=<z9q`h8few1>~C=8<$|OrlNdDPfO$2<odLp>G`&A
z=VodBpPr@ne_EFI|M^w!=iOW#*Jx;IUz#;@#(?x`arrJYJ;h!{P4kYbn%1!yjY&Pz
z3hmy`$kYM1AwcyQs4Sgd?S0hD%xtBBq4AkhCr|L=GK=2g$;rtU+FF`-R8^FZOsr3C
zpI&VH78Kr~x(kFs?w^sV^?z=q=QTec_w^bY8drL|yM*cK&gA4|Sz}}41Pu+1Bu!1t
zBoM8kp^>PgqmwNqC3Rj_R_;VwQAGaC0*j~9v$g+E&C&(8A3*L0;pv$=|ECvPzbs4*
z>6Mn2dabLYU8$y~mH;vf7Y5m(udkmR6&0mJsb3Ql6D^F4j5cX$X>HTi*50P2rL|R8
zS9hnOq2Yd6S=pxwib{tkR3%i+%rpBsJ6jW+=BH=sgWEokwzTg5={bgfr&fn|ib+VH
zlb4tOZed|@3}hBItfQl|-N?vjzlDXx;ppgSitDdOj~+2@-n^N0&6+i=>({Rb<IS5l
zv){XSk0UWL(NRfB>7j|C{_2H|5%Xr`82z1<sr!F=rosOinfm`{WJB`7%uL<?Gb_B$
z1o*m7Q&LiXlbM<63Tp4e%tNL(ZrsSWbLUR3y?gg^U%PgV;`Rff`1AAij+K#Bc<trk
zK7B!z&-NKvdjDr<>i(YvZujVc`!ln$bpB7vHTyfQHo8MjPT`P-y4L2_))qlRX46Cd
z|Nmdi7S@inQql^qauS1DW|z5Kfw*7i|FkSnI)eCNTBh#*DTNNVOVUH@q-Et_*x1;%
zpE`PsogQu^WJhcFL|#2T{S}IeO1C>J5}Kyv*}ny~_d(^)6li|{#Gaa^_kTg9+x7rI
zzlqW^3hyk;%`@JA{>(_oe0s>|WM!zTsHj}f)7RNKr!Hptv~1%)Gr;8$s6PXV2T&YL
z%{KnGxG`{*t&RB%adC;K4h{|_YuB#jpobd?+2QHq<0-2k`zqMSwSRVn=P^(mfclc4
zJOOGygW40*GIjnhEYSZlttl-{R!;7Wy1M%Hwzf6}LS~aIpO=>>8XO!P;N#;H;^X5J
zj0<~vdk2Swg@hX#8=R1ml)m3n9@8{6&-5$E-4ORf^1<|Mz5ny;{5Jb~I?fUk7yIq#
z=(r#tARyS+*B5R!$SglUzu=6F3`KI?4bzv9kl<)!WOT;Bz~H8_vGHBJ*u?mbfuY_#
z5i#-aZZ1yKXIHwOo0_Tje|m-?xGx53%grxyIT{lY)G93{^;S++7G&maV`Jkx$mSXu
z8QnECHN71W5D*1(2f1{8eLYKMWu-_*M~8G@U!PoGU!N>4+}qbHyJYENMN<pQJ%+}{
zdlohL?*!#pP~HWlrJ02eH>)xuYvtt>o|_mM&Z@7gmF(~D2bqU%u3UF_w{%@y9o@^P
z|NsB98Jn8z(l;>Nx}er)`_wF*|5LNH|4+%ad)ZMOTdAz9bVXfLcYA3`DaCVJ<i-g;
zedT2(GRjJdH*9RIrpzjHJv}uO<aXn)lPV$`HPqC0s;R48O-{|!#%IPr%Gui4X3EG)
zKdmi_YMPyI`f+Bq@xM7WVKa604Hn5NC_W7d4R;<$_u;cUJtbLPQ%(7{rMc;f*|h=d
zK;yUzs=PP&c)CuNkdk@j?Bp0T82gSOKee=V2<htTty5J}ygH>Wu5(7d$+ubMF2|Fi
z{Muw?W!_j?TGu{*@Pg*;F_2qG#XI*MWj8jp=#Y|;eVLaU)jYq{{?_zDn;R85(e+X?
zvJVUl4QI`qF=Np5yU_h->*SdxBP;*T-_x;cUZvOmsd;uUy2@f|<>cirs;H`Oj!#IU
zYo80<efapf`FSb|%IbH_&CQn2sR>>(BhTv7^xC*iHC5$3$|@=sV&juQOBwJPF`#m(
zX=$OVYO0@V3KE*97P~!OSQj)!N7rDLnv(p(KpzjQ0d*V^mKPNl8>y)(KQ%YeTh>sT
z+F);My<S0H{!M_72i@l*h;S~35>P+T#>P5DSy|<glCsJNRaMo8?ryHB-@bnvlw}Qu
z2N)O_cJJB4oSBnv6cQE@QBY85bnV(Ty3O<c2LlF%{|yWbjQ<%J{{R0c{~t{Mfzm(t
zA^Z<88Y=$49wL4KLc{el7}SIHGcdqtdnkWCl!oyk`WqO*G+h5dW-$N%M|KGP0ZKoB
z+J68_H$Z6y2>s6iLN_=-{lNg$*8nx|04Kz}0}%WEKVX3HKQKYu`2pfyxI2D8)&CHN
zsQUpm4;~(9;cyTV4*w6;L)16?htQ2sx*19zhti;chpf{Ab$%R>*J%;CLLnw5M%K*C
ztVmy9zrw)405{e*C{<HaE78={EHN<9FUO`9WQK`}Nm)ch1kvSfa&oeyudi>epPyd^
zHtg%`R}mN(Smxy9v_@K5`m3g<_Km>6z*;{)zjAEq{rvoj;^X6$vE>nR#Y|1je6_T-
z_D6@fEils8-(zfK7D=vIr0O#<HVe|$)Hqz5=Du-WmG_AdZ>PnoDyjz)6B21Y25o6&
zW3Q>HeYiTsef^AL`|D|8_N!FYH1?XBnz?V@yooC1OF=;advtWPQh0c{N<>5i7)M4%
zD*N~bn5e01?Z}95Ts61Q>SaT!>w0BXwbM>6F0t_mi3(v6kxB_k$%=7taVUDDqob8G
zGc$>v%Z!hYSGTjXTWDcnvD(7IVigEmSz4`8RaL#^VsEx(cCpp1IR&OKTy0G^s%fY{
zv$3;VXJu`>*2>!EsDh%>V@*x1D^}LlFukj7ZEcr_g@u_A8_z{WMa&5a3A`~eF?=8#
zA0N--<KttbsiAeSJ=bj;Xbr&3JmW8g@$Rd2^z=?@>ltp+(KT47udjc~NMC1{y1LqF
zM<=(C?CdO_=;&y^`1p9fqM{;-=Fm;e%)+cKjCRf}vbZ@dO9wLkm}l|2H{Wf4L5#z?
zqBy6GojD%+r<Zyii4Jt0uAr!VBrq^Qj#xhvQfFvnob2ghvuAFR*%Q#%2^?qZ{hyhm
z_j^{Z?(f;TM!&jpJ$IWJ>Fw3j(&~?ij-uLFsEv({wVs~tfhooAd!}a_`~{6afyNHt
z?#R*q)0^wM*~HLbpPs&9c}sgY*<)uZDJhC3CMFfy+S)ZxTy1Ee-=e6be8<E<XLoPD
z`}Wxd7Efp88Go9QXZCq|mj3@4#m*;;4fXb_Dl6YGGBRw`*4D0u>a8&}G^`2?3?zEa
zH8V3)$kx`@#l*zK4TeokOk7P(&0I9JbX&BwG!MGjn{V!`im#eiYJX-{fyJ9BKfBec
zYMLu8&COg)O-)^4`aramm6dB`WTZHuI3`9uB`rfhO-*x+siE${i3M)EXJ_mF>(6)I
zr=z2@-^t0@k{C0{Ra0D4z^$jN(`{jDvUf_M+rAmu27hMd8vHJZbKRz)rM+nBq9v^4
znoUSwYhx|9fuTvag{jejNktw9XJ+gF0j0s&`Nm&j0v)#*8JqPGGJ{z8*w|QBb8~Z1
zJv}`!U0q!<6B82&Jzc$469b)H6AE4TOwZB(155WabB%sxMZ4|N*4CM4V`B~01JVb>
zApOS1#-b4s5k!xfg@uKw7#J8#)YR0Rp{1oYLswUKk+h8L^`u~@Nptc|-hliKnu7(+
zqk+o8&TQu`vT|}4^z`&LYHMqQ^?>w&u#S$-EK^g{xuKz<M3=t>1qIB3fq{HJK0f?@
zet!Jf+1dP7R@O1PI$DQ&^W3)00);(z4jVKdqy2woq3wNFd-Kf(21b)XYQ4R^!FoaZ
z!^6V`va+&-D=RB0N*njC9%a_iGpaN<G2T7B$m!T@=sXZ845nx6|Le?g*`%qdwa?tb
zDuCE{CRJU0at4ovhSpp^H|q^E3+(QK))c|kMa{@H{#cgewpvw9eV?(hu`Q`)6RY0S
z(^FAhQ)5SIg6paoxklf>{s+y+XX^f+Uu^auz};$=imKXy;^Jbm$3df`qh)PvZL2LU
zEnBUutXhz<jg57azJcB$Elu^KQ;Hl;g3=)f&&<~SJGsz#kDj*rNi8j{OSZPQ9Uy%m
zGi+>Z8bd-th;IKzMMVkQ+uH}ay1K@?xw&Cr4^Q`G4Q;(c%~@_cKx26z`)3r`pRl(y
z*`}_pKF!I=Db(HF9a&#gP*9L0v0+R|U0z<cfToV#md13Kt<$n~|4+-ex#r_!u}WP-
zdr3q@G}Y={T<);2Fn7__)!IF!!2bBGeDjwv{<ce0)HJsF`1(?{jgQU#@bCy>ZB30e
zsbThOXBS&Ns!ViVt*WN6-_pv;0-JhjidEIOv1@4QbU9d?Zl6=?bfz`SWuvC1#sM=k
z^I&S)gUc*kL$eeEecc0-3f=Zh$amYRr>nh3LsKW49%IM-6DIH&7#eLWO7vbftITtc
zwVA;-ZB32#qVigz>lIx7B1ZhmwVN!42Kp1M%?<b3S)1+G(bk@mkr+i}kD3@82&?h(
z@{%wyv#2$<u&fCV3X~wMgRlzFXu<z~_W!{cG&J+W{{R0E_5c4cFxdZp!2JLJ14bxj
z|Ns90^Z)-J`Tzg_A^-pX2l@a1AISgze?T6pmjC~M&`=I&Smg)v|9>F;f7t*3|HJ?P
zKa#osKm7my|H1$N{~v;F{tqe?L4gPwt6*dRkqitBczP;9K|w-}j*f};_V(Eh4h|rk
zVQyj3qM@O&($3DV*ulXe3nb^{<dhN^7>H2^<mKft78Mn-m6VjQPngipYGGxs9^hs<
zC)Cqwm$9*_-}W8bSU_?hHTn7Z7<2gH;o)p<Zf^3<&d!Ra=GK~?4ki<76Kzkr+nX-6
zu(YwYvbF`uDY&}2%7=u6V5H69;9y<{2M13(J3D_<6XX8cc+(s831-(!Oij01Sz4?z
zGSJ;=X=#-QQWFpm016tck;ty>#pK~+-aI+W=<W1ugC89!rguBiEUqU7TJO--(Z#u+
zDJUq2+t}FHR8LRe(%4YHr!>m+(zI-&x3h8$zgNYYUNbe)pQUeL;9_KCWajSf&Vz1w
zNJt2WnVFfop`oFcuAYImo~~X~Zn*WH$vIXx-Rw;IwRH4#4Gj%7O-)TTyu7?P(e)$q
zO-#-8BfTtEPR=xb+mL8}%f!^&4_O`?+uhxrS6^S>SyM|p$j)4U!GuiHr!%v4|F<NY
z-80bFYthlsao5(?_B1v&cK7n~!U#WaZ*LY;Q&Ul66H^IuQ=_z+ShI_>vi1H>%`*HH
z>}I-A*TC4q(9lrS&dyFeBqRi*%@!UW&g9|Y!RhYq&S_@lAmV6a($$%2`e;VB-v912
z)4Nt?`rWqnPGW9uZXChE!5HHqzP`Tv_V)H6_V)I14h{~{#%AW_3I1k>XXYCItcx?f
zXlkTC)y~d7*}=gf+{ecUV>~A$B!n?MJe(yiE{?Uoua`;3$XqQo$b5TSiunzDOXCK8
z6C1v)tV|YA8$LQZ8YBH8hpD=u9fy;(ab<Oa%~2mG<7q0Ih9tESOw7zZQiE-Gg?pGS
zQqj-_Wo2aJ39_v$%`F^l%x0OH7}*n2{I8yY0fhh5Gcf#+N8ms93=Ci~5Dmie3=IE3
P*dD6>KLf+x{|pQOv8*KW

literal 0
HcmV?d00001

diff --git a/conf.py b/conf.py
index 03012ad36..67fba7041 100644
--- a/conf.py
+++ b/conf.py
@@ -132,7 +132,7 @@ html_theme = 'sphinx_rtd_theme'
 # The name of an image file (relative to this directory) to use as a favicon of
 # the docs.  This file should be a Windows icon file (.ico) being 16x16 or 32x32
 # pixels large.
-#html_favicon = None
+html_favicon = '_static/favicon.ico'
 
 # Add any paths that contain custom static files (such as style sheets) here,
 # relative to this directory. They are copied after the builtin static files,

From 5e44c8160fba2d3538f265c45a99f830f0bf5310 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Fri, 22 May 2020 13:33:49 -0500
Subject: [PATCH 342/652] Add package managers in installation

Fixes https://github.com/PostgREST/postgrest-docs/issues/319

* Add development page
* Clear installation page from admin and development concerns
---
 admin.rst       |  18 +++-
 development.rst | 155 ++++++++++++++++++++++++++++++
 index.rst       |   7 ++
 install.rst     | 245 +++++++++++-------------------------------------
 4 files changed, 234 insertions(+), 191 deletions(-)
 create mode 100644 development.rst

diff --git a/admin.rst b/admin.rst
index 52bb51a0d..01c4e87df 100644
--- a/admin.rst
+++ b/admin.rst
@@ -126,11 +126,25 @@ Server Version
 
 When debugging a problem it's important to verify the PostgREST version. At any time you can make a request to the running server and determine exactly which version is deployed. Look for the :code:`Server` HTTP response header, which contains the version number.
 
-HTTP Requests
--------------
+Logging
+-------
 
 The PostgREST server logs basic request information to stdout, including the requesting IP address and user agent, the URL requested, and HTTP response status. However this provides limited information for debugging server errors. It's helpful to get full information about both client requests and the corresponding SQL commands executed against the underlying database.
 
+.. note::
+
+   When running it in an SSH session you must detach it from stdout or it will be terminated when the session closes. The easiest technique is redirecting the output to a log file or to the syslog:
+
+   .. code-block:: bash
+
+     ssh foo@example.com \
+       'postgrest foo.conf </dev/null >/var/log/postgrest.log 2>&1 &'
+
+     # another option is to pipe the output into "logger -t postgrest"
+
+HTTP Requests
+-------------
+
 A great way to inspect incoming HTTP requests including headers and query params is to sniff the network traffic on the port where PostgREST is running. For instance on a development server bound to port 3000 on localhost, run this:
 
 .. code:: bash
diff --git a/development.rst b/development.rst
new file mode 100644
index 000000000..b3e7badc2
--- /dev/null
+++ b/development.rst
@@ -0,0 +1,155 @@
+.. _build_source:
+
+Build from Source
+=================
+
+.. note::
+
+  We discourage building and using PostgREST on **Alpine Linux** because of a reported GHC memory leak on that platform.
+
+To help with development, you'll need to build from source. `Stack <https://github.com/commercialhaskell/stack>`_ makes it easy. It will install any necessary Haskell dependencies on your system.
+
+* `Install Stack <http://docs.haskellstack.org/en/stable/README.html#how-to-install>`_ for your platform
+* Install Library Dependencies
+
+  =====================  =======================================
+  Operating System       Dependencies
+  =====================  =======================================
+  Ubuntu/Debian          libpq-dev, libgmp-dev
+  CentOS/Fedora/Red Hat  postgresql-devel, zlib-devel, gmp-devel
+  BSD                    postgresql95-client
+  OS X                   libpq, gmp
+  =====================  =======================================
+
+* Build and install binary
+
+  .. code-block:: bash
+
+    git clone https://github.com/PostgREST/postgrest.git
+    cd postgrest
+
+    # adjust local-bin-path to taste
+    stack build --install-ghc --copy-bins --local-bin-path /usr/local/bin
+
+.. note::
+
+   If building fails and your system has less than 1GB of memory, try adding a swap file.
+
+* Check that the server is installed: :code:`postgrest --help`.
+
+Running the Test Suite
+======================
+
+To properly run the test suite, you need a Postgres database that the tests can run against. There are several ways to set up this database.
+
+Testing with a temporary database
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+If you have Postgres installed locally (:code:`initdb`, :code:`pg_ctl` and :code:`psql` should be on your PATH, no server needs to be running), you can run the test suite against a temporary database:
+
+.. code:: bash
+
+   test/with_tmp_db stack test
+
+The :code:`with_tmp_db` script will set up a new Postgres cluster in a temporary directory, set the required environment variables and run the command that you passed it as an argument, :code:`stack test` in the example above. When the command is done, the temporary database is torn down and deleted again.
+
+Manually creating the Test Database
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+To manually create a database for testing, use the test creation script :code:`create_test_database` in the :code:`test/` folder.
+
+The script expects the following parameters:
+
+.. code:: bash
+
+  test/create_test_db connection_uri database_name [test_db_user] [test_db_user_password]
+
+Use the `connection URI <https://www.postgresql.org/docs/current/static/libpq-connect.html#AEN45347>`_ to specify the user, password, host, and port. Do not provide the database in the connection URI. The PostgreSQL role you are using to connect must be capable of creating new databases.
+
+The :code:`database_name` is the name of the database that :code:`stack test` will connect to. If the database of the same name already exists on the server, the script will first drop it and then re-create it.
+
+Optionally, specify the database user :code:`stack test` will use. The user will be given necessary permissions to reset the database after every test run.
+
+If the user is not specified, the script will generate the role name :code:`postgrest_test_` suffixed by the chosen database name, and will generate a random password for it.
+
+Optionally, if specifying an existing user to be used for the test connection, one can specify the password the user has.
+
+The script will return the db uri to use in the tests--this uri corresponds to the :code:`db-uri` parameter in the configuration file that one would use in production.
+
+Generating the user and the password allows one to create the database and run the tests against any PostgreSQL server without any modifications to the server. (Such as allowing accounts without a password or setting up trust authentication, or requiring the server to be on the same localhost the tests are run from).
+
+Running the Tests with the manually created database
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+To run the tests, one must supply the database uri in the environment variable :code:`POSTGREST_TEST_CONNECTION`.
+
+Typically, one would create the database and run the test in the same command line, using the `postgres` superuser:
+
+.. code:: bash
+
+  POSTGREST_TEST_CONNECTION=$(test/create_test_db "postgres://postgres:pwd@database-host" test_db) stack test
+
+For repeated runs on the same database, one should export the connection variable:
+
+.. code:: bash
+
+  export POSTGREST_TEST_CONNECTION=$(test/create_test_db "postgres://postgres:pwd@database-host" test_db)
+  stack test
+  stack test
+  ...
+
+If the environment variable is empty or not specified, then the test runner will default to connection uri
+
+.. code:: bash
+
+  postgres://postgrest_test@localhost/postgrest_test
+
+This connection assumes the test server on the :code:`localhost:code:` with the user `postgrest_test` without the password and the database of the same name.
+
+Destroying the Database
+~~~~~~~~~~~~~~~~~~~~~~~
+
+The test database will remain after the test, together with four new roles created on the PostgreSQL server. To permanently erase the created database and the roles, run the script :code:`test/delete_test_database`, using the same superuser role used for creating the database:
+
+.. code:: bash
+
+  test/destroy_test_db connection_uri database_name
+
+Testing with Docker
+~~~~~~~~~~~~~~~~~~~
+
+The ability to connect to non-local PostgreSQL simplifies the test setup. One elegant way of testing is to use a disposable PostgreSQL in docker.
+
+For example, if local development is on a mac with Docker for Mac installed:
+
+.. code:: bash
+
+  $ docker run --name db-scripting-test -e POSTGRES_PASSWORD=pwd -p 5434:5432 -d postgres
+  $ POSTGREST_TEST_CONNECTION=$(test/create_test_db "postgres://postgres:pwd@localhost:5434" test_db) stack test
+
+Additionally, if one creates a docker container to run stack test (this is necessary on Mac OS Sierra with GHC below 8.0.1, where :code:`stack test` fails), one can run PostgreSQL in a separate linked container, or use the locally installed PostgreSQL app.
+
+Build the test container with :code:`test/Dockerfile.test`:
+
+.. code:: bash
+
+  $ docker build -t pgst-test - < test/Dockerfile.test
+  $ mkdir .stack-work-docker ~/.stack-linux
+
+The first run of the test container will take a long time while the dependencies get cached. Creating the :code:`~/.stack-linux` folder and mapping it as a volume into the container ensures that we can run the container in disposable mode and not worry about subsequent runs being slow. :code:`.stack-work-docker` is also mapped into the container and must be specified when using stack from Linux, not to interfere with the :code:`.stack-work` for local development. (On Sierra, :code:`stack build` works, while :code:`stack test` fails with GHC 8.0.1).
+
+Linked containers:
+
+.. code:: bash
+
+  $ docker run --name pg -e POSTGRES_PASSWORD=pwd  -d postgres
+  $ docker run --rm -it -v `pwd`:`pwd` -v ~/.stack-linux:/root/.stack --link pg:pg -w="`pwd`" -v `pwd`/.stack-work-docker:`pwd`/.stack-work pgst-test bash -c "POSTGREST_TEST_CONNECTION=$(test/create_test_db "postgres://postgres:pwd@pg" test_db) stack test"
+
+Stack test in Docker for Mac, PostgreSQL app on mac:
+
+.. code:: bash
+
+  $ host_ip=$(ifconfig en0 | grep 'inet ' | cut -f 2 -d' ')
+  $ export POSTGREST_TEST_CONNECTION=$(test/create_test_db "postgres://postgres@$HOST" test_db)
+  $ docker run --rm -it -v `pwd`:`pwd` -v ~/.stack-linux:/root/.stack -v `pwd`/.stack-work-docker:`pwd`/.stack-work -e "HOST=$host_ip" -e "POSTGREST_TEST_CONNECTION=$POSTGREST_TEST_CONNECTION" -w="`pwd`" pgst-test bash -c "stack test"
+  $ test/destroy_test_db "postgres://postgres@localhost" test_db
diff --git a/index.rst b/index.rst
index bdfa5e775..59d1b2928 100644
--- a/index.rst
+++ b/index.rst
@@ -139,10 +139,17 @@ Explanations of some key concepts in PostgREST.
 
    install.rst
 
+.. toctree::
+   :caption: Development
+   :hidden:
+
+   development.rst
+
 - :doc:`Authentication <auth>`
 - :doc:`Schema Structure <schema_structure>`
 - :doc:`Administration <admin>`
 - :doc:`Installation <install>`
+- :doc:`Development <development>`
 
 .. _how_tos:
 
diff --git a/install.rst b/install.rst
index 2df5c9517..0028b2bec 100644
--- a/install.rst
+++ b/install.rst
@@ -1,21 +1,66 @@
-Binary Release
-==============
 
-[ `Download from release page <https://github.com/PostgREST/postgrest/releases/latest>`_ ]
+Installation
+============
 
-The release page has pre-compiled binaries for Mac OS X, Windows, and several Linux distributions. Extract the tarball and run the binary inside with the :code:`--help` flag to see usage instructions:
+The release page has `pre-compiled binaries for Mac OS X, Windows, Linux and FreeBSD <https://github.com/PostgREST/postgrest/releases/latest>`_ .
+The Linux binary is a static executable that can be run on any Linux distribution.
+
+If you use **macOS Homebrew**, then you can install PostgREST from the `official repo <https://formulae.brew.sh/formula/postgrest>`_.
+
+.. code:: bash
+
+  brew install postgrest
+
+If you use **Arch Linux**, then you can install PostgREST from the `official repo <https://www.archlinux.org/packages/community/x86_64/postgrest>`_.
+
+.. code:: bash
+
+  pacman -S postgrest
+
+If you use **Nix**, then you can install PostgREST from nixpkgs.
+
+.. code:: bash
+
+  nix-env -i haskellPackages.postgrest
+
+When a pre-built binary does not exist for your system you can :ref:`build the project from source <build_source>`.
+
+Running
+~~~~~~~
+
+If you downloaded PostgREST from the release page, first extract the compressed file to obtain the executable.
 
 .. code-block:: bash
 
-  # Untar the release (available at https://github.com/PostgREST/postgrest/releases/latest)
+  # For UNIX platforms
+  tar Jxf postgrest-[version]-[platform].tar.xz
 
-  $ tar Jxf postgrest-[version]-[platform].tar.xz
+  # On Windows you should unzip the file
 
-  # Try running it
-  $ ./postgrest --help
+Now you can run postgrest with the :code:`--help` flag to see usage instructions:
+
+.. code-block:: bash
+
+  # Running postgrest binary
+  ./postgrest --help
+
+  # Running postgrest installed from a package manager
+  postgrest --help
 
   # You should see a usage help message
 
+The PostgREST server reads a configuration file as its only argument:
+
+.. code:: bash
+
+  postgrest /path/to/postgrest.conf
+
+  # You can also generate a sample config file with
+  # postgrest 2> postgrest.conf
+  # You'll need to edit this file and remove the usage parts for postgrest to read it
+
+For a complete reference of the configuration file, see :ref:`configuration`.
+
 .. note::
 
   If you see a dialog box like this on Windows, it may be that the :code:`pg_config` program is not in your system path.
@@ -24,6 +69,8 @@ The release page has pre-compiled binaries for Mac OS X, Windows, and several Li
 
   It usually lives in :code:`C:\Program Files\PostgreSQL\<version>\bin`. See this `article <https://www.howtogeek.com/118594/how-to-edit-your-system-path-for-easy-command-line-access/>`_ about how to modify the system path.
 
+  To test that the system path is set correctly, run ``pg_config`` from the command line. You should see it output a list of paths.
+
 .. _pg-dependency:
 
 PostgreSQL dependency
@@ -36,31 +83,6 @@ You can use something like Amazon `RDS <https://aws.amazon.com/rds/>`_ but insta
 * `Instructions for Ubuntu 14.04 <https://www.digitalocean.com/community/tutorials/how-to-install-and-use-postgresql-on-ubuntu-14-04>`_
 * `Installer for Windows <http://www.enterprisedb.com/products-services-training/pgdownload#windows>`_
 
-On Windows, PostgREST will fail to run unless the PostgreSQL binaries are on the system path. To test whether this is the case, run ``pg_config`` from the command line. You should see it output a list of paths.
-
-Configuration
-=============
-
-The PostgREST server reads a configuration file as its only argument:
-
-.. code:: bash
-
-  ./postgrest /path/to/postgrest.conf
-
-For a complete reference of the configuration file, see :ref:`configuration`.
-
-Running the Server
-==================
-
-PostgREST outputs basic request logging to stdout. When running it in an SSH session you must detach it from stdout or it will be terminated when the session closes. The easiest technique is redirecting the output to a log file or to the syslog:
-
-.. code-block:: bash
-
-  ssh foo@example.com \
-    'postgrest foo.conf </dev/null >/var/log/postgrest.log 2>&1 &'
-
-  # another option is to pipe the output into "logger -t postgrest"
-
 Docker
 ======
 
@@ -176,6 +198,7 @@ With this you can see the swagger-ui in your browser on port 8080.
 
 Deploying to Heroku
 ===================
+
 Assuming your making modifications locally and then pushing to GitHub, it's easy to deploy to Heroku.
 
 1. Create a new app on Heroku
@@ -186,159 +209,3 @@ Assuming your making modifications locally and then pushing to GitHub, it's easy
 6. Push your changes to GitHub
 7. Set Heroku to automatically deploy from Master and then manually deploy the branch for the first build
 
-
-.. _build_source:
-
-Build from Source
-=================
-
-.. note::
-
-  We discourage building and using PostgREST on **Alpine Linux** because of a reported GHC memory leak on that platform.
-
-When a pre-built binary does not exist for your system you can build the project from source. You'll also need to do this if you want to help with development. `Stack <https://github.com/commercialhaskell/stack>`_ makes it easy. It will install any necessary Haskell dependencies on your system.
-
-* `Install Stack <http://docs.haskellstack.org/en/stable/README.html#how-to-install>`_ for your platform
-* Install Library Dependencies
-
-  =====================  =======================================
-  Operating System       Dependencies
-  =====================  =======================================
-  Ubuntu/Debian          libpq-dev, libgmp-dev
-  CentOS/Fedora/Red Hat  postgresql-devel, zlib-devel, gmp-devel
-  BSD                    postgresql95-client
-  OS X                   libpq, gmp
-  =====================  =======================================
-
-* Build and install binary
-
-  .. code-block:: bash
-
-    git clone https://github.com/PostgREST/postgrest.git
-    cd postgrest
-
-    # adjust local-bin-path to taste
-    stack build --install-ghc --copy-bins --local-bin-path /usr/local/bin
-
-.. note::
-
-   If building fails and your system has less than 1GB of memory, try adding a swap file.
-
-* Check that the server is installed: :code:`postgrest --help`.
-
-PostgREST Test Suite
---------------------
-
-To properly run the test suite, you need a Postgres database that the tests can run against. There are several ways to set up this database. 
-
-Testing with a temporary database
-~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-If you have Postgres installed locally (:code:`initdb`, :code:`pg_ctl` and :code:`psql` should be on your PATH, no server needs to be running), you can run the test suite against a temporary database:
-
-.. code:: bash
-
-   test/with_tmp_db stack test
-   
-The :code:`with_tmp_db` script will set up a new Postgres cluster in a temporary directory, set the required environment variables and run the command that you passed it as an argument, :code:`stack test` in the example above. When the command is done, the temporary database is torn down and deleted again.
-
-Manually creating the Test Database
-~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-To manually create a database for testing, use the test creation script :code:`create_test_database` in the :code:`test/` folder.
-
-The script expects the following parameters:
-
-.. code:: bash
-
-  test/create_test_db connection_uri database_name [test_db_user] [test_db_user_password]
-
-Use the `connection URI <https://www.postgresql.org/docs/current/static/libpq-connect.html#AEN45347>`_ to specify the user, password, host, and port. Do not provide the database in the connection URI. The PostgreSQL role you are using to connect must be capable of creating new databases.
-
-The :code:`database_name` is the name of the database that :code:`stack test` will connect to. If the database of the same name already exists on the server, the script will first drop it and then re-create it.
-
-Optionally, specify the database user :code:`stack test` will use. The user will be given necessary permissions to reset the database after every test run.
-
-If the user is not specified, the script will generate the role name :code:`postgrest_test_` suffixed by the chosen database name, and will generate a random password for it.
-
-Optionally, if specifying an existing user to be used for the test connection, one can specify the password the user has.
-
-The script will return the db uri to use in the tests--this uri corresponds to the :code:`db-uri` parameter in the configuration file that one would use in production.
-
-Generating the user and the password allows one to create the database and run the tests against any PostgreSQL server without any modifications to the server. (Such as allowing accounts without a password or setting up trust authentication, or requiring the server to be on the same localhost the tests are run from).
-
-Running the Tests with the manually created database
-~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-To run the tests, one must supply the database uri in the environment variable :code:`POSTGREST_TEST_CONNECTION`.
-
-Typically, one would create the database and run the test in the same command line, using the `postgres` superuser:
-
-.. code:: bash
-
-  POSTGREST_TEST_CONNECTION=$(test/create_test_db "postgres://postgres:pwd@database-host" test_db) stack test
-
-For repeated runs on the same database, one should export the connection variable:
-
-.. code:: bash
-
-  export POSTGREST_TEST_CONNECTION=$(test/create_test_db "postgres://postgres:pwd@database-host" test_db)
-  stack test
-  stack test
-  ...
-
-If the environment variable is empty or not specified, then the test runner will default to connection uri
-
-.. code:: bash
-
-  postgres://postgrest_test@localhost/postgrest_test
-
-This connection assumes the test server on the :code:`localhost:code:` with the user `postgrest_test` without the password and the database of the same name.
-
-Destroying the Database
-~~~~~~~~~~~~~~~~~~~~~~~
-
-The test database will remain after the test, together with four new roles created on the PostgreSQL server. To permanently erase the created database and the roles, run the script :code:`test/delete_test_database`, using the same superuser role used for creating the database:
-
-.. code:: bash
-
-  test/destroy_test_db connection_uri database_name
-
-Testing with Docker
-~~~~~~~~~~~~~~~~~~~
-
-The ability to connect to non-local PostgreSQL simplifies the test setup. One elegant way of testing is to use a disposable PostgreSQL in docker.
-
-For example, if local development is on a mac with Docker for Mac installed:
-
-.. code:: bash
-
-  $ docker run --name db-scripting-test -e POSTGRES_PASSWORD=pwd -p 5434:5432 -d postgres
-  $ POSTGREST_TEST_CONNECTION=$(test/create_test_db "postgres://postgres:pwd@localhost:5434" test_db) stack test
-
-Additionally, if one creates a docker container to run stack test (this is necessary on Mac OS Sierra with GHC below 8.0.1, where :code:`stack test` fails), one can run PostgreSQL in a separate linked container, or use the locally installed PostgreSQL app.
-
-Build the test container with :code:`test/Dockerfile.test`:
-
-.. code:: bash
-
-  $ docker build -t pgst-test - < test/Dockerfile.test
-  $ mkdir .stack-work-docker ~/.stack-linux
-
-The first run of the test container will take a long time while the dependencies get cached. Creating the :code:`~/.stack-linux` folder and mapping it as a volume into the container ensures that we can run the container in disposable mode and not worry about subsequent runs being slow. :code:`.stack-work-docker` is also mapped into the container and must be specified when using stack from Linux, not to interfere with the :code:`.stack-work` for local development. (On Sierra, :code:`stack build` works, while :code:`stack test` fails with GHC 8.0.1).
-
-Linked containers:
-
-.. code:: bash
-
-  $ docker run --name pg -e POSTGRES_PASSWORD=pwd  -d postgres
-  $ docker run --rm -it -v `pwd`:`pwd` -v ~/.stack-linux:/root/.stack --link pg:pg -w="`pwd`" -v `pwd`/.stack-work-docker:`pwd`/.stack-work pgst-test bash -c "POSTGREST_TEST_CONNECTION=$(test/create_test_db "postgres://postgres:pwd@pg" test_db) stack test"
-
-Stack test in Docker for Mac, PostgreSQL app on mac:
-
-.. code:: bash
-
-  $ host_ip=$(ifconfig en0 | grep 'inet ' | cut -f 2 -d' ')
-  $ export POSTGREST_TEST_CONNECTION=$(test/create_test_db "postgres://postgres@$HOST" test_db)
-  $ docker run --rm -it -v `pwd`:`pwd` -v ~/.stack-linux:/root/.stack -v `pwd`/.stack-work-docker:`pwd`/.stack-work -e "HOST=$host_ip" -e "POSTGREST_TEST_CONNECTION=$POSTGREST_TEST_CONNECTION" -w="`pwd`" pgst-test bash -c "stack test"
-  $ test/destroy_test_db "postgres://postgres@localhost" test_db

From 0b998e91d69b3a5e220eb0b8683a3f3dc0ef9c05 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Fri, 22 May 2020 14:32:53 -0500
Subject: [PATCH 343/652] Add notice about single Linux static executable

Reorder development page in the toctree
---
 index.rst           | 18 ++++++++++--------
 install.rst         |  1 +
 releases/v7.0.1.rst |  8 ++++++++
 3 files changed, 19 insertions(+), 8 deletions(-)

diff --git a/index.rst b/index.rst
index 59d1b2928..4dbbf94fb 100644
--- a/index.rst
+++ b/index.rst
@@ -139,17 +139,10 @@ Explanations of some key concepts in PostgREST.
 
    install.rst
 
-.. toctree::
-   :caption: Development
-   :hidden:
-
-   development.rst
-
 - :doc:`Authentication <auth>`
 - :doc:`Schema Structure <schema_structure>`
 - :doc:`Administration <admin>`
 - :doc:`Installation <install>`
-- :doc:`Development <development>`
 
 .. _how_tos:
 
@@ -184,7 +177,16 @@ PostgREST has a growing ecosystem of examples, libraries, and experiments. Here
 * :ref:`eco_external_notification`
 * :ref:`eco_extensions`
 * :ref:`clientside_libraries`
-* :ref:`eco_commercial`
+
+For helping with development, see the following page.
+
+* :doc:`Development <development>`
+
+.. toctree::
+   :caption: Development
+   :hidden:
+
+   development.rst
 
 Release Notes
 -------------
diff --git a/install.rst b/install.rst
index 0028b2bec..fdc192342 100644
--- a/install.rst
+++ b/install.rst
@@ -1,3 +1,4 @@
+.. _install:
 
 Installation
 ============
diff --git a/releases/v7.0.1.rst b/releases/v7.0.1.rst
index 2d64ee518..5c7d64eee 100644
--- a/releases/v7.0.1.rst
+++ b/releases/v7.0.1.rst
@@ -25,6 +25,14 @@ Fixed
 * Fix PUT restriction for including all columns in payload
   |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
 
+* Documentation improvements
+
+  + Added package managers to :ref:`install`.
+
+Changed
+-------
+
+* From this version onwards, the release page will only include a single Linux static executable that can be run on any Linux distribution.
 
 Thanks
 ------

From b965f32137dce9662c2ef21a2c56a496f186e965 Mon Sep 17 00:00:00 2001
From: Steve Chavez <stevechavezast@gmail.com>
Date: Sat, 23 May 2020 19:28:28 -0500
Subject: [PATCH 344/652] Update v7.0.1.rst

---
 releases/v7.0.1.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/releases/v7.0.1.rst b/releases/v7.0.1.rst
index 5c7d64eee..6adc23235 100644
--- a/releases/v7.0.1.rst
+++ b/releases/v7.0.1.rst
@@ -32,7 +32,7 @@ Fixed
 Changed
 -------
 
-* From this version onwards, the release page will only include a single Linux static executable that can be run on any Linux distribution.
+* From this version onwards, the release page will include a single Linux static executable that can be run on any Linux distribution.
 
 Thanks
 ------

From f03be6d2d0996313aafcbd9af62750247b9a6beb Mon Sep 17 00:00:00 2001
From: Oskar Oldorf <oskar@oldorf.net>
Date: Wed, 27 May 2020 19:36:16 +0200
Subject: [PATCH 345/652] Fix typo (#325)

---
 auth.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/auth.rst b/auth.rst
index 7aaa9eabd..8d0f6df50 100644
--- a/auth.rst
+++ b/auth.rst
@@ -46,7 +46,7 @@ PostgreSQL manages database access permissions using the concept of roles. A rol
 Roles for Each Web User
 ~~~~~~~~~~~~~~~~~~~~~~~
 
-PostgREST can accommodate either viewpoint. If you treat a role as a single user then the the JWT-based role switching described above does most of what you need. When an authenticated user makes a request PostgREST will switch into the role for that user, which in addition to restricting queries, is available to SQL through the :code:`current_user` variable.
+PostgREST can accommodate either viewpoint. If you treat a role as a single user then the JWT-based role switching described above does most of what you need. When an authenticated user makes a request PostgREST will switch into the role for that user, which in addition to restricting queries, is available to SQL through the :code:`current_user` variable.
 
 You can use row-level security to flexibly restrict visibility and access for the current user. Here is an `example <http://blog.2ndquadrant.com/application-users-vs-row-level-security/>`_ from Tomas Vondra, a chat table storing messages sent between users. Users can insert rows into it to send messages to other users, and query it to see messages sent to them by other users.
 

From ff8fd648bbe23105a1a6a6d08ba928602fc1586a Mon Sep 17 00:00:00 2001
From: waltherjj <34773048+waltherjj@users.noreply.github.com>
Date: Wed, 27 May 2020 17:04:39 +0200
Subject: [PATCH 346/652] Add new JS (Vue) client to /ecosystem

Hey! We developed a Vue.js library, happy to be part of this. Thank you for postgREST!
---
 ecosystem.rst | 1 +
 1 file changed, 1 insertion(+)

diff --git a/ecosystem.rst b/ecosystem.rst
index a71c41571..3791ea138 100644
--- a/ecosystem.rst
+++ b/ecosystem.rst
@@ -71,6 +71,7 @@ Extensions
 Client-Side Libraries
 ---------------------
 
+* `technowledgy/vue-postgrest <https://github.com/technowledgy/vue-postgrest>`_ - Vue.js
 * `supabase/postgrest-js <https://github.com/supabase/postgrest-js>`_ - Isomorphic JS client
 * `SocialGouv/postgrester <https://github.com/SocialGouv/postgrester>`_ - JS + Typescript
 * `Kong/py-postgrest <https://github.com/Kong/py-postgrest>`_ - Python

From a8697341400d3688363fc8e08ad2fcc469ced7fd Mon Sep 17 00:00:00 2001
From: Steve Chavez <stevechavezast@gmail.com>
Date: Fri, 5 Jun 2020 13:01:52 -0500
Subject: [PATCH 347/652] reference: Add response.status GUC (#329)

Related to https://github.com/PostgREST/postgrest/pull/1541
---
 api.rst | 39 +++++++++++++++++++++++++++++++++++++--
 1 file changed, 37 insertions(+), 2 deletions(-)

diff --git a/api.rst b/api.rst
index 0bab1152f..199951721 100644
--- a/api.rst
+++ b/api.rst
@@ -1496,7 +1496,7 @@ Notice that the variable should be set to an *array* of single-key objects rathe
 .. _pre_req_headers:
 
 Setting headers via pre-request
--------------------------------
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 By using a :ref:`pre-request` function, you can add headers to GET/POST/PATCH/PUT/DELETE responses.
 As an example, let's add some cache headers for all requests that come from an Internet Explorer(6 or 7) browser.
@@ -1529,10 +1529,41 @@ Now when you make a GET request to a table or view, you'll get the cache headers
 
   ...
 
+.. _guc_resp_status:
 
-Errors and HTTP Status Codes
+Setting Response Status Code
 ----------------------------
 
+You can set the ``response.status`` GUC to override the default status code PostgREST provides. For instance, the following function would replace the default ``200`` status code.
+
+.. code-block:: postgres
+
+   create or replace function teapot() returns json as $$
+   begin
+     perform set_config('response.status', '418', true);
+     return json_build_object('message', 'The requested entity body is short and stout.',
+                              'hint', 'Tip it over and pour it out.');
+   end;
+   $$ language plpgsql;
+
+.. code-block:: http
+
+  GET /rpc/teapot HTTP/1.1
+
+.. code-block:: http
+
+  HTTP/1.1 418 I'm a teapot
+
+  {"message" : "The requested entity body is short and stout.",
+   "hint" : "Tip it over and pour it out."}
+
+If the status code is standard, PostgREST will complete the status message(**I'm a teapot** in this example).
+
+.. _raise_error:
+
+Raise errors with HTTP Status Codes
+-----------------------------------
+
 Stored procedures can return non-200 HTTP status codes by raising SQL exceptions. For instance, here's a saucy function that always responds with an error:
 
 .. code-block:: postgresql
@@ -1558,6 +1589,10 @@ Calling the function returns HTTP 400 with the body
     "code":"P0001"
   }
 
+.. note::
+
+   Keep in mind that ``RAISE EXCEPTION`` will abort the transaction and rollback all changes. If you don't want this, you can instead use the :ref:`response.status GUC <guc_resp_status>`.
+
 One way to customize the HTTP status code is by raising particular exceptions according to the PostgREST :ref:`error to status code mapping <status_codes>`. For example, :code:`RAISE insufficient_privilege` will respond with HTTP 401/403 as appropriate.
 
 For even greater control of the HTTP status code, raise an exception of the ``PTxyz`` type. For instance to respond with HTTP 402, raise 'PT402':

From 94441c70c05ea9bdcc213f97752bf564bc959655 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Fri, 5 Jun 2020 14:35:45 -0500
Subject: [PATCH 348/652] Add upcoming page

---
 .github/PULL_REQUEST_TEMPLATE.md |  3 +++
 releases/upcoming.rst            | 27 +++++++++++++++++++++++++++
 2 files changed, 30 insertions(+)
 create mode 100644 .github/PULL_REQUEST_TEMPLATE.md
 create mode 100644 releases/upcoming.rst

diff --git a/.github/PULL_REQUEST_TEMPLATE.md b/.github/PULL_REQUEST_TEMPLATE.md
new file mode 100644
index 000000000..1bd9f912a
--- /dev/null
+++ b/.github/PULL_REQUEST_TEMPLATE.md
@@ -0,0 +1,3 @@
+<!--
+When adding a new doc section or page, please add an entry to releases/upcoming.rst.
+-->
diff --git a/releases/upcoming.rst b/releases/upcoming.rst
new file mode 100644
index 000000000..73a123922
--- /dev/null
+++ b/releases/upcoming.rst
@@ -0,0 +1,27 @@
+.. |br| raw:: html
+
+   <br />
+
+Upcoming
+========
+
+These are changes yet unreleased. If you'd like to try them out before a new official release, you can :ref:`build_source`.
+
+Added
+-----
+
+* Allow http status override through the :ref:`response.status <guc_resp_status>` GUC.
+  |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
+
+Fixed
+-----
+
+* Fix showing UNKNOWN on ``postgrest --help`` invocation.
+  |br| -- `@monacoremo <https://github.com/monacoremo>`_
+
+Changed
+-------
+
+* Docker images are now optimized to be built from the scratch image. This reduces the compressed image size from over 30mb to about 4mb.
+  For more details, see `Docker image built with Nix <https://github.com/PostgREST/postgrest/tree/master/nix/docker#docker-image-built-with-nix>`_.
+  |br| -- `@monacoremo <https://github.com/monacoremo>`_

From 78bd10acc9aeb0c74e572839efcbd78e9f2f03a6 Mon Sep 17 00:00:00 2001
From: Bobbie Soedirgo <bobbie@soedirgo.dev>
Date: Thu, 11 Jun 2020 16:19:57 +0800
Subject: [PATCH 349/652] Add supabase/postgrest-rs client library

---
 ecosystem.rst | 1 +
 1 file changed, 1 insertion(+)

diff --git a/ecosystem.rst b/ecosystem.rst
index 3791ea138..f21ca5548 100644
--- a/ecosystem.rst
+++ b/ecosystem.rst
@@ -71,6 +71,7 @@ Extensions
 Client-Side Libraries
 ---------------------
 
+* `supabase/postgrest-rs <https://github.com/supabase/postgrest-rs>`_ - Rust
 * `technowledgy/vue-postgrest <https://github.com/technowledgy/vue-postgrest>`_ - Vue.js
 * `supabase/postgrest-js <https://github.com/supabase/postgrest-js>`_ - Isomorphic JS client
 * `SocialGouv/postgrester <https://github.com/SocialGouv/postgrester>`_ - JS + Typescript

From 702df3218dc98504614769706d9f48c18a037cd7 Mon Sep 17 00:00:00 2001
From: Andrew Hall <andrew@rioja.io>
Date: Fri, 12 Jun 2020 18:45:31 +0100
Subject: [PATCH 350/652] add redux-postgrest to client-side libraries

As per https://github.com/andytango/redux-postgrest/issues/7
---
 ecosystem.rst | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/ecosystem.rst b/ecosystem.rst
index f21ca5548..0b3110d04 100644
--- a/ecosystem.rst
+++ b/ecosystem.rst
@@ -89,6 +89,8 @@ Client-Side Libraries
 * `PierreRochard/postgrest-angular <https://github.com/PierreRochard/postgrest-angular>`_ - TypeScript, generate UI from API description
 * `thejettdurham/postgrest-sharp-client <https://github.com/thejettdurham/postgrest-sharp-client>`_ (needs maintainer) - C#, RestSharp
 * `team142/ng-postgrest <https://github.com/team142/ng-postgrest>`_ - Angular app for browsing, editing data exposed over Postgrest.
+* `andytango/redux-postgrest <https://github.com/andytango/redux-postgrest>`_ - TypeScript/JS, client integrated with (React) Redux.
+
 
 .. _eco_commercial:
 

From 864a1440be88dbc2e268f7183aadb4a845bf08f2 Mon Sep 17 00:00:00 2001
From: Mathieu Passenaud <mathieu.passenaud@gmail.com>
Date: Tue, 3 Mar 2020 19:43:51 +0100
Subject: [PATCH 351/652] added
 https://www.mathieupassenaud.fr/codeless_backend/ tutorial

---
 ecosystem.rst | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/ecosystem.rst b/ecosystem.rst
index 0b3110d04..9ac92095c 100644
--- a/ecosystem.rst
+++ b/ecosystem.rst
@@ -11,6 +11,8 @@ Community Tutorials
 * `PostgREST + PostGIS API tutorial in 5 minutes <https://gis-ops.com/postgrest-postgis-api-tutorial-in-5-minutes>`_ -
   In this tutorial, GIS • OPS shows how to perform PostGIS calculations through PostgREST :ref:`s_procs` interface.
 
+* `"CodeLess" backend using postgres, postgrest and oauth2 authentication with keycloak <https://www.mathieupassenaud.fr/codeless_backend/>` 
+
 .. _eco_example_apps:
 
 Example Apps

From 7e3c14a71a501161c706104d10ea5ab8ecc30d9c Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Tue, 16 Jun 2020 13:52:43 -0500
Subject: [PATCH 352/652] Update community tutorials

- Description to keycloak tutorial
- Correct gisops tutorial link
---
 ecosystem.rst | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/ecosystem.rst b/ecosystem.rst
index 9ac92095c..77247d091 100644
--- a/ecosystem.rst
+++ b/ecosystem.rst
@@ -8,10 +8,11 @@ Community Tutorials
 
 * `PostgREST + Auth0: Create REST API in mintutes and add social login using Auth0 <https://samkhawase.com/blog/postgrest_introduction/>`_ - A step-by-step tutorial to show how to Dockerize and integrate Auth0 to PostgREST service.
 
-* `PostgREST + PostGIS API tutorial in 5 minutes <https://gis-ops.com/postgrest-postgis-api-tutorial-in-5-minutes>`_ -
+* `PostgREST + PostGIS API tutorial in 5 minutes <https://gis-ops.com/postgrest-postgis-api-tutorial-geospatial-api-in-5-minutes/>`_ -
   In this tutorial, GIS • OPS shows how to perform PostGIS calculations through PostgREST :ref:`s_procs` interface.
 
-* `"CodeLess" backend using postgres, postgrest and oauth2 authentication with keycloak <https://www.mathieupassenaud.fr/codeless_backend/>` 
+* `"CodeLess" backend using postgres, postgrest and oauth2 authentication with keycloak <https://www.mathieupassenaud.fr/codeless_backend/>`_ -
+  A step-by-step tutorial for using PostgREST with KeyCloak(hosted on a managed service).
 
 .. _eco_example_apps:
 

From c518585259645d3029e55d5bb8becdeaf0f935b4 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Sun, 28 Jun 2020 13:46:39 -0500
Subject: [PATCH 353/652] Add FreeBSD port to install page

---
 install.rst | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/install.rst b/install.rst
index fdc192342..0481ed283 100644
--- a/install.rst
+++ b/install.rst
@@ -12,6 +12,12 @@ If you use **macOS Homebrew**, then you can install PostgREST from the `official
 
   brew install postgrest
 
+If you use **FreeBSD**, then you can install PostgREST from the `official ports <https://www.freshports.org/www/hs-postgrest>`_.
+
+.. code:: bash
+
+  pkg install hs-postgrest
+
 If you use **Arch Linux**, then you can install PostgREST from the `official repo <https://www.archlinux.org/packages/community/x86_64/postgrest>`_.
 
 .. code:: bash

From 4c92fc7bcaabdc94a5f85b58bdbcc3a778e67717 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Teemu=20Sirvio=CC=88?= <teemu.sirvio@fmi.fi>
Date: Thu, 9 Jul 2020 10:45:47 +0300
Subject: [PATCH 354/652] Update links to pg-safeupdate

Change broken links to Bitbucket to GitHub.
---
 admin.rst     | 2 +-
 ecosystem.rst | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/admin.rst b/admin.rst
index 01c4e87df..a272fcfbb 100644
--- a/admin.rst
+++ b/admin.rst
@@ -51,7 +51,7 @@ However it's very easy to delete the **entire table** by omitting the query para
 
   DELETE /logs HTTP/1.1
 
-This can happen accidentally such as by switching a request from a GET to a DELETE. To protect against accidental operations use the `pg-safeupdate <https://bitbucket.org/eradman/pg-safeupdate/>`_ PostgreSQL extension. It raises an error if UPDATE or DELETE are executed without specifying conditions. To install it you can use the `PGXN <http://pgxn.org/>`_ network:
+This can happen accidentally such as by switching a request from a GET to a DELETE. To protect against accidental operations use the `pg-safeupdate <https://github.com/eradman/pg-safeupdate>`_ PostgreSQL extension. It raises an error if UPDATE or DELETE are executed without specifying conditions. To install it you can use the `PGXN <http://pgxn.org/>`_ network:
 
 .. code-block:: bash
 
diff --git a/ecosystem.rst b/ecosystem.rst
index 77247d091..9b33ba546 100644
--- a/ecosystem.rst
+++ b/ecosystem.rst
@@ -61,7 +61,7 @@ These are PostgreSQL bridges that propagate LISTEN/NOTIFY to external queues for
 Extensions
 ----------
 
-* `pg-safeupdate <https://bitbucket.org/eradman/pg-safeupdate/>`_ - Prevent full-table updates or deletes
+* `pg-safeupdate <https://github.com/eradman/pg-safeupdate>`_ - Prevent full-table updates or deletes
 * `srid/spas <https://github.com/srid/spas>`_ - allow file uploads and basic auth
 * `svmnotn/postgrest-auth <https://github.com/svmnotn/postgrest-auth>`_ - OAuth2-inspired external auth server
 * `wildsurfer/postgrest-oauth-server <https://github.com/wildsurfer/postgrest-oauth-server>`_ - OAuth2 server

From 58116820254971f99d4eb5389cb13e9c7e4677d9 Mon Sep 17 00:00:00 2001
From: Tad Lispy <tadeusz@lazurski.pl>
Date: Fri, 17 Jul 2020 18:36:45 +0200
Subject: [PATCH 355/652] Fix #334: Alter default privileges (#338)

* Suggest granting execute on all functions in schema api

* Suggest to permanently alter default privileges on functions
---
 schema_structure.rst | 24 ++++++++++++++++++++----
 1 file changed, 20 insertions(+), 4 deletions(-)

diff --git a/schema_structure.rst b/schema_structure.rst
index 718291255..a51d08c92 100644
--- a/schema_structure.rst
+++ b/schema_structure.rst
@@ -20,20 +20,36 @@ This allows you to change the internals of your schema and maintain backwards co
 Functions
 =========
 
-By default, when a function is created, the privilege to execute it is not restricted by role. The function access is PUBLIC—executable by all roles(more details at `PostgreSQL Privileges page <https://www.postgresql.org/docs/12/ddl-priv.html>`_). This is not ideal for an API schema. To disable this behavior, you can run the following SQL statement:
+By default, when a function is created, the privilege to execute it is not restricted by role. The function access is PUBLIC—executable by all roles (more details at `PostgreSQL Privileges page <https://www.postgresql.org/docs/12/ddl-priv.html>`_). This is not ideal for an API schema. To disable this behavior, you can run the following SQL statement:
 
 .. code-block:: postgres
 
-  ALTER DEFAULT PRIVILEGES IN SCHEMA api REVOKE EXECUTE ON FUNCTIONS FROM PUBLIC;
+  ALTER DEFAULT PRIVILEGES REVOKE EXECUTE ON FUNCTIONS FROM PUBLIC;
 
-See `PostgreSQL alter default privileges <https://www.postgresql.org/docs/current/static/sql-alterdefaultprivileges.html>`_ for more details.
+This will change the privileges for all functions created in the future in all schemas. Currently there is no way to limit it to a single schema. In our opinion it's a good practice anyway.
+
+.. note::
+
+    It is however possible to limit the effect of this clause only to functions you define. You can put the above statement at the beginning of the API schema definition, and then at the end reverse it with:
+
+    .. code-block:: postgres
+
+        ALTER DEFAULT PRIVILEGES GRANT EXECUTE ON FUNCTIONS TO PUBLIC;
+
+    This will work because the :code:`alter default privileges` statement has effect on function created *after* it is executed. See `PostgreSQL alter default privileges <https://www.postgresql.org/docs/current/static/sql-alterdefaultprivileges.html>`_ for more details.
 
 After that, you'll need to grant EXECUTE privileges on functions explicitly:
 
 .. code-block:: postgres
 
    GRANT EXECUTE ON FUNCTION login TO anonymous;
-   GRANT EXECUTE ON FUNCTION reset_password TO web_user;
+   GRANT EXECUTE ON FUNCTION signup TO anonymous;
+
+You can also grant execute on all functions in a schema to a higher privileged role:
+
+.. code-block:: postgres
+
+    GRANT EXECUTE ON ALL FUNCTIONS IN SCHEMA api TO web_user;
 
 Security definer
 ----------------

From 7f67cf78e7232f91ca8d7a1f5ce956e67b558623 Mon Sep 17 00:00:00 2001
From: vbalasu <vbalasu@gmail.com>
Date: Tue, 28 Jul 2020 09:25:17 -0700
Subject: [PATCH 356/652] Update ecosystem.rst (#341)

Added pg-notify-webook
---
 ecosystem.rst | 1 +
 1 file changed, 1 insertion(+)

diff --git a/ecosystem.rst b/ecosystem.rst
index 9b33ba546..5fd90c41b 100644
--- a/ecosystem.rst
+++ b/ecosystem.rst
@@ -47,6 +47,7 @@ External Notification
 
 These are PostgreSQL bridges that propagate LISTEN/NOTIFY to external queues for further processing. This allows stored procedures to initiate actions outside the database such as sending emails.
 
+* `vbalasu/pg-notify-webhook <https://pypi.org/project/pg-notify-webhook/>`_ - Trigger webhooks from postgres LISTEN/NOTIFY
 * `diogob/postgres-websockets <https://github.com/diogob/postgres-websockets>`_ - expose web sockets for PostgreSQL's LISTEN/NOTIFY
 * `frafra/postgresql2websocket <https://github.com/frafra/postgresql2websocket>`_ - Websockets
 * `matthewmueller/pg-bridge <https://github.com/matthewmueller/pg-bridge>`_ - Amazon SNS

From c7e623549d0218e89f52b7b0a333669b0d8823fa Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Ale=C5=A1=20Najmann?= <ales.najmann@gmail.com>
Date: Tue, 4 Aug 2020 19:02:44 +0200
Subject: [PATCH 357/652] Add Windows installation using Scoop to install page
 (#342)

---
 install.rst | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/install.rst b/install.rst
index 0481ed283..a56b0c0d0 100644
--- a/install.rst
+++ b/install.rst
@@ -30,6 +30,12 @@ If you use **Nix**, then you can install PostgREST from nixpkgs.
 
   nix-env -i haskellPackages.postgrest
 
+If you use Windows, you can install PostgREST using `Scoop command-line installer <https://scoop.sh>`_.
+
+.. code:: bash
+
+  scoop install postgrest
+
 When a pre-built binary does not exist for your system you can :ref:`build the project from source <build_source>`.
 
 Running

From 49bc82bfcaed2167d7e7aaa72623fd7d397cc83a Mon Sep 17 00:00:00 2001
From: Wolfgang Walther <wolfgangwalther@users.noreply.github.com>
Date: Thu, 13 Aug 2020 17:29:32 +0200
Subject: [PATCH 358/652] Clarify function volatility and location header
 (#339)

* clarify location header only available with PK

* clarify function volatility and GET/POST

* improve stable/immutable for post and get

* add 405 for read only transaction error
---
 api.rst | 15 ++++++++++-----
 1 file changed, 10 insertions(+), 5 deletions(-)

diff --git a/api.rst b/api.rst
index 199951721..6fd9c4ff9 100644
--- a/api.rst
+++ b/api.rst
@@ -882,7 +882,7 @@ To create a row in a database table post a JSON object whose keys are the names
 
   { "col1": "value1", "col2": "value2" }
 
-The response will include a :code:`Location` header describing where to find the new object. If the table is write-only then constructing the Location header will cause a permissions error. To successfully insert an item to a write-only table you will need to suppress the Location response header by including the request header :code:`Prefer: return=minimal`.
+If the table has a primary key, the response will include a :code:`Location` header describing where to find the new object. If the table is write-only then constructing the Location header will cause a permissions error. To successfully insert an item to a write-only table you will need to suppress the Location response header by including the request header :code:`Prefer: return=minimal`.
 
 On the other end of the spectrum you can get the full created object back in the response to your request by including the header :code:`Prefer: return=representation`. That way you won't have to make another HTTP call to discover properties that may have been filled in on the server side. You can also apply the standard :ref:`v_filter` to these results.
 
@@ -1148,13 +1148,15 @@ PostgreSQL has four procedural languages that are part of the core distribution:
 Immutable and stable functions
 ------------------------------
 
-Procedures in PostgreSQL marked with :code:`stable` or :code:`immutable` `volatility <https://www.postgresql.org/docs/current/static/xfunc-volatility.html>`_ can only read, not modify, the database and PostgREST executes them in a read-only transaction compatible for read-replicas. Stable and immutable functions can be called with the HTTP GET verb if desired.
+PostgREST executes POST requests in a read/write transaction except for functions marked as ``IMMUTABLE`` or ``STABLE``. Those must not modify the database and are executed in a read-only transaction compatible for read-replicas.
+
+Procedures that do not modify the database can be called with the HTTP GET verb as well, if desired. PostgREST executes all GET requests in a read-only transaction. Modifying the database inside read-only transactions is not possible and calling volatile functions with GET will fail.
 
 .. note::
 
-  The volatility marker is a promise about the behavior of the function.  PostgreSQL will let you mark a function that modifies the database as ``immutable/stable`` without failure.  However the function will fail when called through PostgREST since it executes it in a read-only transaction.
+  The `volatility marker <https://www.postgresql.org/docs/current/static/xfunc-volatility.html>`_ is a promise about the behavior of the function.  PostgreSQL will let you mark a function that modifies the database as ``IMMUTABLE`` or ``STABLE`` without failure.  However, because of the read-only transaction this would still fail with PostgREST.
 
-Because ``add_them`` was declared IMMUTABLE, we can alternately call the function with a GET request:
+Because ``add_them`` is ``IMMUTABLE``, we can alternately call the function with a GET request:
 
 .. code-block:: http
 
@@ -1227,6 +1229,8 @@ as in ``{1,2,3,4}``. Note that the curly brackets have to be urlencoded(``{`` is
 
    In these versions we recommend using function parameters of type json to accept arrays from the client.
 
+.. _s_procs_variadic:
+
 Scalar functions
 ----------------
 
@@ -1635,6 +1639,8 @@ PostgREST translates `PostgreSQL error codes <https://www.postgresql.org/docs/cu
 +--------------------------+-------------------------+---------------------------------+
 | 23505                    | 409                     | uniqueness violation            |
 +--------------------------+-------------------------+---------------------------------+
+| 25006                    | 405                     | read only sql transaction       |
++--------------------------+-------------------------+---------------------------------+
 | 25*                      | 500                     | invalid transaction state       |
 +--------------------------+-------------------------+---------------------------------+
 | 28*                      | 403                     | invalid auth specification      |
@@ -1678,4 +1684,3 @@ PostgREST translates `PostgreSQL error codes <https://www.postgresql.org/docs/cu
 +--------------------------+-------------------------+---------------------------------+
 | other                    | 400                     |                                 |
 +--------------------------+-------------------------+---------------------------------+
-

From 47bd27badb04ceba3ea6b4846b1f0d9e85ef8605 Mon Sep 17 00:00:00 2001
From: Sam Khawase <sam.khawase@iconmobile.com>
Date: Sun, 16 Aug 2020 09:26:40 +0200
Subject: [PATCH 359/652] Updated the link to the blog post for PostgREST +
 Auth0 tutorial

---
 ecosystem.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ecosystem.rst b/ecosystem.rst
index 5fd90c41b..ec7f4ba24 100644
--- a/ecosystem.rst
+++ b/ecosystem.rst
@@ -6,7 +6,7 @@ Community Tutorials
 * `Building a Contacts List with PostgREST and Vue.js <https://www.youtube.com/watch?v=iHtsALtD5-U>`_ -
   In this video series, DigitalOcean shows how to build and deploy an Nginx + PostgREST(using a managed PostgreSQL database) + Vue.js webapp in an Ubuntu server droplet.
 
-* `PostgREST + Auth0: Create REST API in mintutes and add social login using Auth0 <https://samkhawase.com/blog/postgrest_introduction/>`_ - A step-by-step tutorial to show how to Dockerize and integrate Auth0 to PostgREST service.
+* `PostgREST + Auth0: Create REST API in mintutes, and add social login using Auth0 <https://samkhawase.com/blog/postgrest/>`_ - A step-by-step tutorial to show how to Dockerize and integrate Auth0 to PostgREST service.
 
 * `PostgREST + PostGIS API tutorial in 5 minutes <https://gis-ops.com/postgrest-postgis-api-tutorial-geospatial-api-in-5-minutes/>`_ -
   In this tutorial, GIS • OPS shows how to perform PostGIS calculations through PostgREST :ref:`s_procs` interface.

From 92f76722cc6948908e1584fb7041446c100f336f Mon Sep 17 00:00:00 2001
From: Geoffrey van Wyk <geoffrey@vanwyk.biz>
Date: Thu, 20 Aug 2020 20:45:00 +0200
Subject: [PATCH 360/652] Fix order of options in tar command (#345)

With the current order, the tar command thinks the name of the archive is J.
This happens on Windows 10 WSL2 with tar 1.29.
---
 tutorials/tut0.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tutorials/tut0.rst b/tutorials/tut0.rst
index 18884ea5f..a0c49bac2 100644
--- a/tutorials/tut0.rst
+++ b/tutorials/tut0.rst
@@ -46,7 +46,7 @@ The pre-built binaries for download are :code:`.tar.xz` compressed files (except
 
   # download from https://github.com/PostgREST/postgrest/releases/latest
 
-  tar xfJ postgrest-<version>-<platform>.tar.xz
+  tar xJf postgrest-<version>-<platform>.tar.xz
 
 The result will be a file named simply :code:`postgrest` (or :code:`postgrest.exe` on Windows). At this point try running it with
 

From 5b59e79dc9392bdec93e673783dab4e45174a25b Mon Sep 17 00:00:00 2001
From: Vikas Prasad <vikasprasad.prasad@gmail.com>
Date: Fri, 21 Aug 2020 00:41:39 +0530
Subject: [PATCH 361/652] Mention `--install-ghc` flag is needed only for the
 first time. (#347)

---
 development.rst | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/development.rst b/development.rst
index b3e7badc2..f5d2e3388 100644
--- a/development.rst
+++ b/development.rst
@@ -33,7 +33,8 @@ To help with development, you'll need to build from source. `Stack <https://gith
 
 .. note::
 
-   If building fails and your system has less than 1GB of memory, try adding a swap file.
+   - If building fails and your system has less than 1GB of memory, try adding a swap file.
+   - `--install-ghc` flag is only needed for the first build and can be omitted in the subsequent builds.
 
 * Check that the server is installed: :code:`postgrest --help`.
 

From 089895ac279a29cfc4a2979df861d5b400456aa4 Mon Sep 17 00:00:00 2001
From: Saltuk Alakus <saltukalakus@gmail.com>
Date: Thu, 27 Aug 2020 03:23:54 +0300
Subject: [PATCH 362/652] Improvements for Auth0 documentation. (#350)

Update for Auth0 integration with the OIDC flow using APIs
---
 auth.rst | 33 ++++++++-------------------------
 1 file changed, 8 insertions(+), 25 deletions(-)

diff --git a/auth.rst b/auth.rst
index 8d0f6df50..8243e0950 100644
--- a/auth.rst
+++ b/auth.rst
@@ -204,42 +204,25 @@ JWT from Auth0
 
 An external service like `Auth0 <https://auth0.com/>`_ can do the hard work transforming OAuth from Github, Twitter, Google etc into a JWT suitable for PostgREST. Auth0 can also handle email signup and password reset flows.
 
-To use Auth0, copy its client secret into your PostgREST configuration file as the :code:`jwt-secret`. (Old-style Auth0 secrets are Base64 encoded. For these secrets set :code:`secret-is-base64` to :code:`true`, or just refresh the Auth0 secret.) You can find the secret in the client settings of the Auth0 management console.
+To use Auth0, create `an application <https://auth0.com/docs/applications>`_ for your app and `an API <https://auth0.com/docs/authorization/apis>`_ for your PostgREST server. Auth0 supports both HS256 and RS256 scheme for the issued tokens for APIs. For simplicity, you may first try HS256 scheme while creating your API on Auth0. Your application should use your PostgREST API's `API identifier <https://auth0.com/docs/get-started/dashboard/api-settings>`_ by setting it with the `audience parameter <https://auth0.com/docs/tokens/access-tokens/get-access-tokens#control-access-token-audience>`_  during the authorization request. This will ensure that Auth0 will issue an access token for your PostgREST API. For PostgREST to verify the access token, you will need to set ``jwt-secret`` on PostgREST config file with your API's signing secret.
 
 .. note::
 
-  Make sure OIDC-conformant is toggled off.
-
-  A recent Auth0 change sets it on by default. Turn it `off` here:
-
-  Clients > `Your App` > Settings > Show Advanced Settings > OAuth > OIDC Conformant
-
-  Ensure also that your client application does not pass in any `audience` configuration.
-
-Our code requires a database role in the JWT. To add it you need to save the database role in Auth0 `app metadata <https://auth0.com/docs/rules/metadata-in-rules>`_. Then, you will need to write a rule that will extract the role from the user metadata and include a :code:`role` claim in the payload of our user object. Afterwards, in your Auth0Lock code, include the :code:`role` claim in your `scope param <https://auth0.com/docs/libraries/lock/v10/sending-authentication-parameters#scope-string->`_.
+Our code requires a database role in the JWT. To add it you need to save the database role in Auth0 `app metadata <https://auth0.com/docs/rules/metadata-in-rules>`_. Then, you will need to write `a rule <https://auth0.com/docs/rules>`_ that will extract the role from the user's app_metadata and set it as a `custom claim <https://auth0.com/docs/scopes/sample-use-cases-scopes-and-claims#add-custom-claims-to-a-token>`_ in the access token. Note that, you may use Auth0's `core authorization feature <https://auth0.com/docs/authorization/rbac>`_ for more complex use cases. Metadata solution is mentioned here for simplicity. 
 
 .. code:: javascript
 
-  // Example Auth0 rule
   function (user, context, callback) {
+
+    // Follow the documentations at http://postgrest.org/en/v7.0.0/configuration.html#role-claim-key
+    // to set a custom role claim on PostgREST and use it as custom claim attribute in this rule
+    const myRoleClaim = 'https://myapp.com/role'; 
+    
     user.app_metadata = user.app_metadata || {};
-    user.role = user.app_metadata.role;
+    context.accessToken[myRoleClaim] = user.app_metadata.role;
     callback(null, user, context);
   }
 
-
-.. code:: javascript
-
-  // Example using Auth0Lock with role claim in scope
-  new Auth0Lock ( AUTH0_CLIENTID, AUTH0_DOMAIN, {
-    container: 'lock-container',
-    auth: {
-      params: { scope: 'openid role' },
-      redirectUrl: FQDN + '/login', // Replace with your redirect url
-      responseType: 'token'
-    }
-  })
-
 .. _asym_keys:
 
 Asymmetric Keys

From 57200320c3a783d93fd8b1b729c4cf6d8479024b Mon Sep 17 00:00:00 2001
From: Severin Ibarluzea <seve700@gmail.com>
Date: Sun, 20 Sep 2020 17:13:11 -0400
Subject: [PATCH 363/652] add postgrest-vercel and postgrest-node

---
 ecosystem.rst | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/ecosystem.rst b/ecosystem.rst
index ec7f4ba24..e775f1d8c 100644
--- a/ecosystem.rst
+++ b/ecosystem.rst
@@ -39,6 +39,7 @@ Example Apps
 * `SMRxT/postgrest-demo <https://github.com/SMRxT/postgrest-demo>`_ - multi-tenant logging system
 * `PierreRochard/postgrest-boilerplate <https://github.com/PierreRochard/postgrest-boilerplate>`_ - example auth back-end
 * `marmelab/ng-admin-postgrest <https://github.com/marmelab/ng-admin-postgrest>`_ - automatic database admin panel
+* `seveibar/postgrest-vercel <https://github.com/seveibar/postgrest-vercel>`_ - Run postgrest on Vercel (Serverless/AWS Lambda)
 
 .. _eco_external_notification:
 
@@ -69,6 +70,7 @@ Extensions
 * `nblumoe/postgrest-oauth <https://github.com/nblumoe/postgrest-oauth>`_ - OAuth2 WAI middleware
 * `criles25/postgrest-auth <https://github.com/criles25/postgrest-auth>`_ - email based auth/signup
 * `ppKrauss/PostgREST-writeAPI <https://github.com/ppKrauss/PostgREST-writeAPI>`_ - generate Nginx rewrite rules to fit an OpenAPI spec
+* `seveibar/postgrest-node <https://github.com/seveibar/postgrest-node>`_ - Run a postgrest server in NodeJS via an npm module
 
 .. _clientside_libraries:
 

From 32173bed4d4b14b9acf442a82d40e5d17335f2c2 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Gergely=20M=C3=A9sz=C3=A1ros?=
 <goteguru@users.noreply.github.com>
Date: Fri, 25 Sep 2020 22:32:17 +0200
Subject: [PATCH 364/652] Missing library dependency

Without zlib1g-dev the build process fails.
---
 development.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/development.rst b/development.rst
index f5d2e3388..3b1ea2774 100644
--- a/development.rst
+++ b/development.rst
@@ -15,7 +15,7 @@ To help with development, you'll need to build from source. `Stack <https://gith
   =====================  =======================================
   Operating System       Dependencies
   =====================  =======================================
-  Ubuntu/Debian          libpq-dev, libgmp-dev
+  Ubuntu/Debian          libpq-dev, libgmp-dev, zlib1g-dev
   CentOS/Fedora/Red Hat  postgresql-devel, zlib-devel, gmp-devel
   BSD                    postgresql95-client
   OS X                   libpq, gmp

From a05aed9b3e43b982d44da3ede7587d6ab9e4d195 Mon Sep 17 00:00:00 2001
From: Exa <exahilosys@gmail.com>
Date: Thu, 22 Oct 2020 21:49:29 +0300
Subject: [PATCH 365/652] Added aiodata

---
 ecosystem.rst | 1 +
 1 file changed, 1 insertion(+)

diff --git a/ecosystem.rst b/ecosystem.rst
index e775f1d8c..ea18b916a 100644
--- a/ecosystem.rst
+++ b/ecosystem.rst
@@ -96,6 +96,7 @@ Client-Side Libraries
 * `thejettdurham/postgrest-sharp-client <https://github.com/thejettdurham/postgrest-sharp-client>`_ (needs maintainer) - C#, RestSharp
 * `team142/ng-postgrest <https://github.com/team142/ng-postgrest>`_ - Angular app for browsing, editing data exposed over Postgrest.
 * `andytango/redux-postgrest <https://github.com/andytango/redux-postgrest>`_ - TypeScript/JS, client integrated with (React) Redux.
+* `Exahilosys/aiodata <https://github.com/Exahilosys/aiodata>`_ - Python, event-based proxy and caching client.
 
 
 .. _eco_commercial:

From 15d5b8a292588583cfc6338bd5ddbe3946f4e063 Mon Sep 17 00:00:00 2001
From: Exahilosys <exahilosys@gmail.com>
Date: Sat, 24 Oct 2020 00:32:17 +0300
Subject: [PATCH 366/652] Moved aiodata to Extensions

---
 ecosystem.rst | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/ecosystem.rst b/ecosystem.rst
index ea18b916a..6a1f0ffdd 100644
--- a/ecosystem.rst
+++ b/ecosystem.rst
@@ -71,6 +71,7 @@ Extensions
 * `criles25/postgrest-auth <https://github.com/criles25/postgrest-auth>`_ - email based auth/signup
 * `ppKrauss/PostgREST-writeAPI <https://github.com/ppKrauss/PostgREST-writeAPI>`_ - generate Nginx rewrite rules to fit an OpenAPI spec
 * `seveibar/postgrest-node <https://github.com/seveibar/postgrest-node>`_ - Run a postgrest server in NodeJS via an npm module
+* `Exahilosys/aiodata <https://github.com/Exahilosys/aiodata>`_ - Python, event-based proxy and caching client.
 
 .. _clientside_libraries:
 
@@ -96,8 +97,6 @@ Client-Side Libraries
 * `thejettdurham/postgrest-sharp-client <https://github.com/thejettdurham/postgrest-sharp-client>`_ (needs maintainer) - C#, RestSharp
 * `team142/ng-postgrest <https://github.com/team142/ng-postgrest>`_ - Angular app for browsing, editing data exposed over Postgrest.
 * `andytango/redux-postgrest <https://github.com/andytango/redux-postgrest>`_ - TypeScript/JS, client integrated with (React) Redux.
-* `Exahilosys/aiodata <https://github.com/Exahilosys/aiodata>`_ - Python, event-based proxy and caching client.
-
 
 .. _eco_commercial:
 

From 06dba3953f388190a89d7bdc2145013aab067d2d Mon Sep 17 00:00:00 2001
From: Wolfgang Walther <walther@technowledgy.de>
Date: Fri, 23 Oct 2020 22:06:49 +0200
Subject: [PATCH 367/652] calling variadic functions

---
 api.rst               | 39 +++++++++++++++++++++++++++++++++++++--
 releases/upcoming.rst |  2 ++
 2 files changed, 39 insertions(+), 2 deletions(-)

diff --git a/api.rst b/api.rst
index 6fd9c4ff9..9303d9528 100644
--- a/api.rst
+++ b/api.rst
@@ -1215,8 +1215,6 @@ as in ``{1,2,3,4}``. Note that the curly brackets have to be urlencoded(``{`` is
 
  GET /rpc/plus_one?arr=%7B1,2,3,4%7D' HTTP/1.1
 
- [2,3,4,5]
-
 .. note::
 
    For versions prior to PostgreSQL 10, to pass a PostgreSQL native array on a POST payload, you need to quote it and use an array literal:
@@ -1231,6 +1229,43 @@ as in ``{1,2,3,4}``. Note that the curly brackets have to be urlencoded(``{`` is
 
 .. _s_procs_variadic:
 
+Calling variadic functions
+--------------------------
+
+You can call a variadic function by passing a json array in a POST request:
+
+.. code-block:: postgres
+
+   create function plus_one(variadic v int[]) returns int[] as $$
+      SELECT array_agg(n + 1) FROM unnest($1) AS n;
+   $$ language sql;
+
+.. code-block:: http
+
+   POST /rpc/plus_one HTTP/1.1
+   Content-Type: application/json
+
+   {"v": [1,2,3,4]}
+
+.. code-block:: json
+
+   [2,3,4,5]
+
+In a GET request, you can repeat the same parameter name:
+
+.. code-block:: http
+
+   GET /rpc/plus_one?v=1&v=2&v=3&v=4 HTTP/1.1
+
+Repeating also works in POST requests with ``Content-Type: application/x-www-form-urlencoded``:
+
+.. code-block:: http
+
+  POST /rpc/plus_one HTTP/1.1
+  Content-Type: application/x-www-form-urlencoded
+
+  v=1&v=2&v=3&v=4
+
 Scalar functions
 ----------------
 
diff --git a/releases/upcoming.rst b/releases/upcoming.rst
index 73a123922..c6d9ec27d 100644
--- a/releases/upcoming.rst
+++ b/releases/upcoming.rst
@@ -12,6 +12,8 @@ Added
 
 * Allow http status override through the :ref:`response.status <guc_resp_status>` GUC.
   |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
+* Allow :ref:`s_procs_variadic`.
+  |br| -- `@wolfgangwalther <https://github.com/wolfgangwalther>`_
 
 Fixed
 -----

From fbef0078d5e7772ed796b3fb729b984c0be8f3bc Mon Sep 17 00:00:00 2001
From: Francois-Guillaume Ribreau <github@fgribreau.com>
Date: Mon, 2 Nov 2020 18:37:23 +0100
Subject: [PATCH 368/652] Update index.rst

- add netwo
- add how to guide :)
- fix my name :')
---
 index.rst | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/index.rst b/index.rst
index 4dbbf94fb..3e7b0b518 100644
--- a/index.rst
+++ b/index.rst
@@ -161,6 +161,7 @@ These are recipes that'll help you address specific use-cases.
 - :doc:`how-tos/casting-type-to-custom-json`
 - :doc:`how-tos/embedding-table-from-another-schema`
 - :doc:`how-tos/providing-images-for-img`
+- `How PostgreSQL triggers work when called with a PostgREST PATCH HTTP request <https://blog.fgribreau.com/2020/11/how-postgresql-triggers-works-when.html>`_
 
 Ecosystem
 ---------
@@ -209,6 +210,7 @@ Here are some companies that use PostgREST in production.
   - See how Nimbus uses PostgREST in `Paul Copplestone's blog post <https://paul.copplest.one/blog/nimbus-tech-2019-04.html>`_.
 * `Catarse <https://www.catarse.me/>`_
 * `Moat <https://moat.com/>`_
+* `Netwo <https://www.netwo.io/>`_
 * `Redsmin <https://www.redsmin.com/>`_
 * `Image-charts <https://image-charts.com/>`_
 * `MotionDynamic - Fast highly dynamic video generation at scale <https://api.motiondynamic.tech/>`_
@@ -226,7 +228,7 @@ Testimonials
 
   "It's so fast to develop, it feels like cheating!"
 
-  -- François-G. Ribreau
+  -- François-Guillaume Ribreau
 
   "I just have to say that, the CPU/Memory usage compared to our
   Node.js/Waterline ORM based API is ridiculous.  It's hard to even push

From 9f15044e63ecbf2c91fd6e59ba932804fcb35bcb Mon Sep 17 00:00:00 2001
From: Wolfgang Walther <walther@technowledgy.de>
Date: Sun, 22 Nov 2020 21:33:37 +0100
Subject: [PATCH 369/652] Add note about embedding of view-chains and the
 interaction with `db-extra-search-path`

---
 api.rst | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/api.rst b/api.rst
index 9303d9528..d2119a6ea 100644
--- a/api.rst
+++ b/api.rst
@@ -670,7 +670,7 @@ As an example, let's create a view called ``nominations_view`` based on the *nom
   FROM
     nominations;
 
-Since it contains ``competition_id`` and ``film_id``—and each one has a **foreign key** defined in its source table—we can embed *competitions* and *films*:
+Since it contains ``competition_id`` and ``film_id`` — and each one has a **foreign key** defined in its source table — we can embed *competitions* and *films*:
 
 .. code-block:: http
 
@@ -697,6 +697,13 @@ It's also possible to embed `Materialized Views <https://www.postgresql.org/docs
 
 .. _s_proc_embed:
 
+.. _embedding_view_chains:
+
+Embedding Chains of Views
+-------------------------
+
+Views can also depend on other views, which in turn depend on the actual source table. For PostgREST to pick up those chains recursively to any depth, all the views must be in the search path, so either in the exposed schema (:ref:`db-schema`) or in one of the schemas set in :ref:`db-extra-search-path`. This does not apply to the source table, which could be in a private schema as well. See :ref:`schema_isolation` for more details.
+
 Embedding on Stored Procedures
 ------------------------------
 

From ea2e166aa13bfcdb881964c080e261c00502e081 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Miodrag=20Mili=C4=87?= <miodrag.milic@gmail.com>
Date: Sun, 29 Nov 2020 00:00:35 +0100
Subject: [PATCH 370/652] Add chocolatey installation method

#369
---
 install.rst | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/install.rst b/install.rst
index a56b0c0d0..d365cf362 100644
--- a/install.rst
+++ b/install.rst
@@ -30,10 +30,11 @@ If you use **Nix**, then you can install PostgREST from nixpkgs.
 
   nix-env -i haskellPackages.postgrest
 
-If you use Windows, you can install PostgREST using `Scoop command-line installer <https://scoop.sh>`_.
+If you use Windows, you can install PostgREST using `Chocolatey <https://chocolatey.org>`_ or `Scoop <https://scoop.sh>`_.
 
 .. code:: bash
 
+  choco install postgrest
   scoop install postgrest
 
 When a pre-built binary does not exist for your system you can :ref:`build the project from source <build_source>`.

From b83ee94fae6a325610e869c0b546c56373a2bec8 Mon Sep 17 00:00:00 2001
From: Wolfgang Walther <walther@technowledgy.de>
Date: Sun, 29 Nov 2020 12:31:28 +0100
Subject: [PATCH 371/652] Add nix-shell tools, fix circleci, resolves #322

---
 .circleci/config.yml |  33 ++++++++++++
 .gitignore           |   1 +
 README.md            |  15 +++---
 circle.yml           |   8 ---
 default.nix          |  73 +++++++++++++++++++------
 postgrest.dict       | 124 +++++++++++++++++++++----------------------
 shell.nix            |  16 ++++++
 7 files changed, 176 insertions(+), 94 deletions(-)
 create mode 100644 .circleci/config.yml
 delete mode 100644 circle.yml
 create mode 100644 shell.nix

diff --git a/.circleci/config.yml b/.circleci/config.yml
new file mode 100644
index 000000000..2d7162fb6
--- /dev/null
+++ b/.circleci/config.yml
@@ -0,0 +1,33 @@
+version: 2.1
+
+jobs:
+  build:
+    docker:
+      - image: nixos/nix:2.3
+    steps:
+      - checkout
+      - run:
+          name: Install build script
+          command: nix-env -f default.nix -iA build
+      - run:
+          name: Build docs
+          command: postgrest-docs-build
+
+  spellcheck:
+    docker:
+      - image: nixos/nix:2.3
+    steps:
+      - checkout
+      - run:
+          name: Install spellcheck script
+          command: nix-env -f default.nix -iA spellcheck
+      - run:
+          name: Run spellcheck
+          command: postgrest-docs-spellcheck
+
+workflows:
+  check:
+    jobs:
+      - build
+      - spellcheck
+
diff --git a/.gitignore b/.gitignore
index 00042c276..4c1f95600 100644
--- a/.gitignore
+++ b/.gitignore
@@ -3,3 +3,4 @@ Pipfile.lock
 *.aux
 *.log
 diagrams/db.pdf
+misspellings
diff --git a/README.md b/README.md
index e8a06defb..0bf695513 100644
--- a/README.md
+++ b/README.md
@@ -2,20 +2,17 @@
 
 PostgREST docs use the reStructuredText format, check this [cheatsheet](https://github.com/ralsina/rst-cheatsheet/blob/master/rst-cheatsheet.rst) to get acquainted with it.
 
-You can use [pipenv](https://pipenv.readthedocs.io) to build the docs locally:
-
-```bash
-  pipenv install
-  pipenv run python livereload_docs.py
-```
-
-Or if you use [nix](https://nixos.org/nix/), you can just run:
+To build the docs locally, use [nix](https://nixos.org/nix/):
 
 ```bash
   nix-shell
 ```
 
-Both of these options will build the docs and start a livereload server on `http://localhost:5500`.
+Once in the nix-shell you have the following commands available:
+
+- `postgrest-docs-build`: Build the docs.
+- `postgrest-docs-serve`: Build the docs and start a livereload server on `http://localhost:5500`.
+- `postgrest-docs-spellcheck`: Run aspell.
 
 ## Documentation structure
 
diff --git a/circle.yml b/circle.yml
deleted file mode 100644
index ae7ac312b..000000000
--- a/circle.yml
+++ /dev/null
@@ -1,8 +0,0 @@
-dependencies:
-  pre:
-    - sudo apt-get install aspell
-
-test:
-  override:
-    - cat *.rst | grep -v '^\(\.\.\|  \)' | sed 's/`.*`//g' |aspell -d en_US -p ./postgrest.dict list | tee misspellings
-    - test ! -s misspellings
diff --git a/default.nix b/default.nix
index 9bc5b1c42..62a18d814 100644
--- a/default.nix
+++ b/default.nix
@@ -1,17 +1,60 @@
-with import (builtins.fetchGit {
-  url = https://github.com/NixOS/nixpkgs-channels;
-  ref = "nixos-18.09-small";
-  rev = "95fed28ac372c61eb83c87ad97c24b0f957827bf";
-}) {};
+let
+  # Commit of the Nixpkgs repository that we want to use.
+  nixpkgsVersion = {
+    date = "2020-10-27";
+    rev = "cd63096d6d887d689543a0b97743d28995bc9bc3";
+    tarballHash = "1wg61h4gndm3vcprdcg7rc4s1v3jkm5xd7lw8r2f67w502y94gcy";
+  };
 
-stdenv.mkDerivation {
-  name = "postgrest-docs";
-  buildInputs = [
-    python36Full
-    python36Packages.sphinx
-    python36Packages.sphinx_rtd_theme
-    python36Packages.livereload ];
-  shellHook = ''
-    python livereload_docs.py && exit
-  '';
+  # Nix files that describe the Nixpkgs repository. We evaluate the expression
+  # using `import` below.
+  pkgs = import
+    (fetchTarball {
+      url = "https://github.com/nixos/nixpkgs/archive/${nixpkgsVersion.rev}.tar.gz";
+      sha256 = nixpkgsVersion.tarballHash;
+    })
+    { };
+
+  python = pkgs.python3.withPackages (ps: [ ps.sphinx ps.sphinx_rtd_theme ps.livereload ]);
+in
+{
+  inherit pkgs;
+
+  build =
+    pkgs.writeShellScriptBin "postgrest-docs-build"
+      ''
+        set -euo pipefail
+
+        # clean previous build, otherwise some errors might be supressed
+        rm -rf _build
+
+        ${python}/bin/sphinx-build -W -b html -a -n . _build
+      '';
+
+  serve =
+    pkgs.writeShellScriptBin "postgrest-docs-serve"
+      ''
+        set -euo pipefail
+
+        # livereload_docs.py needs to find "sphinx-build"
+        PATH=${python}/bin:$PATH
+
+        ${python}/bin/python livereload_docs.py
+      '';
+
+  spellcheck =
+    pkgs.writeShellScriptBin "postgrest-docs-spellcheck"
+      ''
+        set -euo pipefail
+
+        FILES=$(find . -type f -iname '*.rst' | tr '\n' ' ')
+
+        cat $FILES \
+         | grep -v '^\(\.\.\|  \)' \
+         | sed 's/`.*`//g' \
+         | ${pkgs.aspell}/bin/aspell -d ${pkgs.aspellDicts.en}/lib/aspell/en_US -p ./postgrest.dict list \
+         | sort -f \
+         | tee misspellings
+        test ! -s misspellings
+      '';
 }
diff --git a/postgrest.dict b/postgrest.dict
index 0faacadb5..03dbef3d3 100644
--- a/postgrest.dict
+++ b/postgrest.dict
@@ -1,134 +1,134 @@
 personal_ws-1.1 en 0 utf-8
 AMQP
-Auth
-Bool
-CSV
-Codd
-DDL
-DoS
-GHC
-GUC
-Github
-Google
-GraphQL
-HMAC
-HTTPS
-HV
-Haskell
-Heroku
-Homebrew
-ILIKE
-IP
-JS
-JSON
-JWK
-JWT
-Kinesis
-Logins
-MVCC
-Mithril
-NGINX
-Nginx
-OAuth
-ORM
-OpenAPI
-PaaS
-PostGIS
-PostgREST
-PostgREST's
-PostgreSQL
-PostgreSQL's
-RDS
-RESTful
-RLS
-RSA
-RabbitMQ
-RestSharp
-SHA
-SIGUSR1
-SNS
-SQL
-SSL
-Sencha
-SuperAgent
-Tcl
-TypeScript
-UI
-Vondra
-WAI
-Websockets
-ZeroMQ
 api
 aud
+Auth
 auth
 authenticator
 balancer
+Bool
 cd
 centric
+Codd
 conf
 config
 cryptographically
+CSV
 csv
+DDL
 disjoined
+DoS
 eq
 filename
 fts
+GHC
+Github
+Google
 grantor
+GraphQL
 gte
+GUC
+Haskell
+Heroku
+HMAC
+Homebrew
 http
+HTTPS
+HV
+ILIKE
 ilike
+IP
+JS
+JSON
 json
+JWK
+JWT
 jwt
+Kinesis
 localhost
 login
+Logins
 logins
 lon
 lt
 lte
 middleware
+Mithril
 multi
+MVCC
 namespaced
 neq
+NGINX
+Nginx
 ngrep
 nullsfirst
 nullslast
 nxl
 nxr
+OAuth
+OpenAPI
 openapi
+ORM
 ov
+PaaS
 param
 params
 passphrase
-pgSQL
 pgcrypto
 pgjwt
+pgSQL
 phfts
 plfts
+PostGIS
+PostgreSQL
+PostgreSQL's
+PostgREST
 postgrest
+PostgREST's
 pre
+RabbitMQ
+RDS
 reallyreallyreallyreallyverysafe
 refactor
 requester's
+RESTful
+RestSharp
+RLS
+RSA
 savepoint
 schemas
+Sencha
+SHA
 signup
+SIGUSR
 sl
+SNS
 sqitch
+SQL
 sql
 sr
+SSL
 startup
 stateful
 stdout
+SuperAgent
 syslog
+Tcl
 tsquery
+TypeScript
+UI
+ui
 unicode
+UPSERT
+Upsert
 uri
 url
 urls
 verifier
 versioning
+Vondra
+WAI
+Websockets
 webuser
 wildcard
-Upsert
-UPSERT
-ui
+ZeroMQ
diff --git a/shell.nix b/shell.nix
new file mode 100644
index 000000000..37e6d7cbb
--- /dev/null
+++ b/shell.nix
@@ -0,0 +1,16 @@
+let
+  docs =
+    import ./default.nix;
+
+  pkgs =
+    docs.pkgs;
+in
+pkgs.mkShell {
+  name = "postgrest-docs";
+
+  buildInputs = [
+    docs.build
+    docs.serve
+    docs.spellcheck
+  ];
+}

From 84e55970911084f0d4a16088ae7027e2c2996603 Mon Sep 17 00:00:00 2001
From: Wolfgang Walther <walther@technowledgy.de>
Date: Sun, 29 Nov 2020 21:51:22 +0100
Subject: [PATCH 372/652] Add postgrest-docs-dictcheck to remove obsolete words
 from postgrest.dict

---
 default.nix    | 15 +++++++++++++++
 postgrest.dict |  4 ----
 shell.nix      |  1 +
 3 files changed, 16 insertions(+), 4 deletions(-)

diff --git a/default.nix b/default.nix
index 62a18d814..b422be002 100644
--- a/default.nix
+++ b/default.nix
@@ -57,4 +57,19 @@ in
          | tee misspellings
         test ! -s misspellings
       '';
+
+  # dictcheck detects obsolete entries in postgrest.dict, that are not used anymore
+  dictcheck =
+    pkgs.writeShellScriptBin "postgrest-docs-dictcheck"
+      ''
+        set -euo pipefail
+
+        FILES=$(find . -type f -iname '*.rst' | tr '\n' ' ')
+
+        cat postgrest.dict \
+         | tail -n+2 \
+         | tr '\n' '\0' \
+         | xargs -0 -n 1 -i \
+           sh -c "grep \"{}\" $FILES > /dev/null || echo \"{}\""
+      '';
 }
diff --git a/postgrest.dict b/postgrest.dict
index 03dbef3d3..c0a0e8c82 100644
--- a/postgrest.dict
+++ b/postgrest.dict
@@ -9,7 +9,6 @@ balancer
 Bool
 cd
 centric
-Codd
 conf
 config
 cryptographically
@@ -70,7 +69,6 @@ OpenAPI
 openapi
 ORM
 ov
-PaaS
 param
 params
 passphrase
@@ -108,7 +106,6 @@ SQL
 sql
 sr
 SSL
-startup
 stateful
 stdout
 SuperAgent
@@ -130,5 +127,4 @@ Vondra
 WAI
 Websockets
 webuser
-wildcard
 ZeroMQ
diff --git a/shell.nix b/shell.nix
index 37e6d7cbb..81649475d 100644
--- a/shell.nix
+++ b/shell.nix
@@ -12,5 +12,6 @@ pkgs.mkShell {
     docs.build
     docs.serve
     docs.spellcheck
+    docs.dictcheck
   ];
 }

From 634a0c70b7a4cc719d298d4601e26d87b305bd83 Mon Sep 17 00:00:00 2001
From: Wolfgang Walther <walther@technowledgy.de>
Date: Sun, 29 Nov 2020 23:26:06 +0100
Subject: [PATCH 373/652] Fix spelling to satisfy postgrest-docs-spellcheck

---
 admin.rst                               |  6 +--
 api.rst                                 | 50 ++++++++++----------
 auth.rst                                |  2 +-
 configuration.rst                       | 14 +++---
 development.rst                         |  8 ++--
 ecosystem.rst                           | 20 ++++----
 how-tos/casting-type-to-custom-json.rst |  6 +--
 how-tos/providing-images-for-img.rst    |  6 +--
 index.rst                               |  2 +-
 install.rst                             |  4 +-
 postgrest.dict                          | 61 +++++++++++++++++++------
 releases/upcoming.rst                   |  4 +-
 releases/v7.0.0.rst                     |  4 +-
 schema_structure.rst                    | 14 +++---
 14 files changed, 118 insertions(+), 83 deletions(-)

diff --git a/admin.rst b/admin.rst
index a272fcfbb..d131708e4 100644
--- a/admin.rst
+++ b/admin.rst
@@ -145,7 +145,7 @@ The PostgREST server logs basic request information to stdout, including the req
 HTTP Requests
 -------------
 
-A great way to inspect incoming HTTP requests including headers and query params is to sniff the network traffic on the port where PostgREST is running. For instance on a development server bound to port 3000 on localhost, run this:
+A great way to inspect incoming HTTP requests including headers and query parameters is to sniff the network traffic on the port where PostgREST is running. For instance on a development server bound to port 3000 on localhost, run this:
 
 .. code:: bash
 
@@ -250,7 +250,7 @@ Now, whenever the structure of the database schema changes, PostgreSQL will noti
 Daemonizing
 ===========
 
-For linux distros that use **systemd** (ubuntu, debian, archlinux) you can create a daemon in the following way.
+For Linux distributions that use **systemd** (Ubuntu, Debian, Archlinux) you can create a daemon in the following way.
 
 First, create postgrest configuration in ``/etc/postgrest/config``
 
@@ -271,7 +271,7 @@ Then create the systemd service file in ``/etc/systemd/system/postgrest.service`
 .. code-block:: ini
 
   [Unit]
-  Description=REST API for any Postgres database
+  Description=REST API for any PostgreSQL database
   After=postgresql.service
 
   [Service]
diff --git a/api.rst b/api.rst
index d2119a6ea..548c7094d 100644
--- a/api.rst
+++ b/api.rst
@@ -255,7 +255,7 @@ A full-text search on the computed column:
 
   GET /people?full_name=fts.Beckett HTTP/1.1
 
-As mentioned, computed columns do not appear in the output by default. However you can include them by listing them in the vertical filtering :code:`select` param:
+As mentioned, computed columns do not appear in the output by default. However you can include them by listing them in the vertical filtering :code:`select` parameter:
 
 .. code-block:: HTTP
 
@@ -314,7 +314,7 @@ Here ``information.cpe`` is a column name.
 
 .. note::
 
-   Some http libraries might encode URLs automatically(e.g. :code:`axios`). In these cases you should use double quotes
+   Some HTTP libraries might encode URLs automatically(e.g. :code:`axios`). In these cases you should use double quotes
    :code:`""` directly instead of :code:`%22`.
 
 Ordering
@@ -332,7 +332,7 @@ If no direction is specified it defaults to ascending order:
 
   GET /people?order=age HTTP/1.1
 
-If you care where nulls are sorted, add nullsfirst or nullslast:
+If you care where nulls are sorted, add ``nullsfirst`` or ``nullslast``:
 
 .. code-block:: http
 
@@ -359,7 +359,7 @@ PostgREST uses HTTP range headers to describe the size of results. Every respons
 
 Here items zero through fourteen are returned. This information is available in every response and can help you render pagination controls on the client. This is an RFC7233-compliant solution that keeps the response JSON cleaner.
 
-There are two ways to apply a limit and offset rows: through request headers or query params. When using headers you specify the range of rows desired. This request gets the first twenty people.
+There are two ways to apply a limit and offset rows: through request headers or query parameters. When using headers you specify the range of rows desired. This request gets the first twenty people.
 
 .. code-block:: http
 
@@ -443,7 +443,7 @@ To help with these cases, PostgREST can get the exact count up until a threshold
 that threshold is surpassed. To use this behavior, you can specify the ``Prefer: count=estimated`` header. The **threshold** is
 defined by :ref:`max-rows`.
 
-Here's an example. Suppose we set ``max-rows=1000`` and *smalltable* has 321 rows, then we'll get the exact count:
+Here's an example. Suppose we set ``max-rows=1000`` and ``smalltable`` has 321 rows, then we'll get the exact count:
 
 .. code-block:: http
 
@@ -455,7 +455,7 @@ Here's an example. Suppose we set ``max-rows=1000`` and *smalltable* has 321 row
   HTTP/1.1 206 Partial Content
   Content-Range: 0-24/321
 
-If we make a similar request on *bigtable*, which has 3573458 rows, we would get the planned count:
+If we make a similar request on ``bigtable``, which has 3573458 rows, we would get the planned count:
 
 .. code-block:: http
 
@@ -481,13 +481,13 @@ Use the Accept request header to specify the acceptable format (or formats) for
   GET /people HTTP/1.1
   Accept: application/json
 
-The current possibilities are
+The current possibilities are:
 
-* \*/\*
-* text/csv
-* application/json
-* application/openapi+json
-* application/octet-stream
+* ``*/*``
+* ``text/csv``
+* ``application/json``
+* ``application/openapi+json``
+* ``application/octet-stream``
 
 The server will default to JSON for API endpoints and OpenAPI on the root.
 
@@ -776,7 +776,7 @@ Embedding Disambiguation
 ------------------------
 
 For doing resource embedding, PostgREST infers the relationship between two tables based on a foreign key between them.
-However, in cases where there's more than one foreign key between two tables, it's not possible to infer the relationship unambiguosly
+However, in cases where there's more than one foreign key between two tables, it's not possible to infer the relationship unambiguously
 by just specifying the tables names.
 
 Target Disambiguation
@@ -850,7 +850,7 @@ Hint Disambiguation
 ~~~~~~~~~~~~~~~~~~~
 
 If specifying the **target** is not enough for unambiguous embedding, you can add a **hint**. For example, let's assume we create
-two VIEWs of ``addresses``: ``central_addresses`` and ``eastern_addresses``.
+two views of ``addresses``: ``central_addresses`` and ``eastern_addresses``.
 
 Since PostgREST supports :ref:`embedding_views` by detecting **source foreign keys** in the views, embedding with the foreign key
 as the **target** will not be enough for an unambiguous embed:
@@ -914,7 +914,7 @@ URL encoded payloads can be posted with ``Content-Type: application/x-www-form-u
     No
     "{ \"a\": 1, \"b\": 2 }"
 
-  Some javascript libraries will post the data incorrectly if you're not careful. For best results try one of the :ref:`clientside_libraries` built for PostgREST.
+  Some JavaScript libraries will post the data incorrectly if you're not careful. For best results try one of the :ref:`clientside_libraries` built for PostgREST.
 
 To update a row or rows in a table, use the PATCH verb. Use :ref:`h_filter` to specify which record(s) to update. Here is an example query setting the :code:`category` column to child for all people below a certain age.
 
@@ -1150,7 +1150,7 @@ PostgreSQL has four procedural languages that are part of the core distribution:
 
 .. note::
 
-  Why the `/rpc` prefix? One reason is to avoid name collisions between views and procedures. It also helps emphasize to API consumers that these functions are not normal restful things. The functions can have arbitrary and surprising behavior, not the standard "post creates a resource" thing that users expect from the other routes.
+  Why the ``/rpc`` prefix? One reason is to avoid name collisions between views and procedures. It also helps emphasize to API consumers that these functions are not normal restful things. The functions can have arbitrary and surprising behavior, not the standard "post creates a resource" thing that users expect from the other routes.
 
 Immutable and stable functions
 ------------------------------
@@ -1171,10 +1171,10 @@ Because ``add_them`` is ``IMMUTABLE``, we can alternately call the function with
 
 The function parameter names match the JSON object keys in the POST case, for the GET case they match the query parameters ``?a=1&b=2``.
 
-Calling functions with a single json parameter
+Calling functions with a single JSON parameter
 ----------------------------------------------
 
-You can also call a function that takes a single parameter of type json by sending the header :code:`Prefer: params=single-object` with your request. That way the JSON request body will be used as the single argument.
+You can also call a function that takes a single parameter of type JSON by sending the header :code:`Prefer: params=single-object` with your request. That way the JSON request body will be used as the single argument.
 
 .. code-block:: plpgsql
 
@@ -1220,7 +1220,7 @@ as in ``{1,2,3,4}``. Note that the curly brackets have to be urlencoded(``{`` is
 
 .. code-block:: http
 
- GET /rpc/plus_one?arr=%7B1,2,3,4%7D' HTTP/1.1
+  GET /rpc/plus_one?arr=%7B1,2,3,4%7D' HTTP/1.1
 
 .. note::
 
@@ -1232,14 +1232,14 @@ as in ``{1,2,3,4}``. Note that the curly brackets have to be urlencoded(``{`` is
 
     { "arr": "{1,2,3,4}" }
 
-   In these versions we recommend using function parameters of type json to accept arrays from the client.
+   In these versions we recommend using function parameters of type JSON to accept arrays from the client.
 
 .. _s_procs_variadic:
 
 Calling variadic functions
 --------------------------
 
-You can call a variadic function by passing a json array in a POST request:
+You can call a variadic function by passing a JSON array in a POST request:
 
 .. code-block:: postgres
 
@@ -1299,7 +1299,7 @@ PostgREST will detect if the function is scalar or table-valued and will shape t
 Bulk Call
 ---------
 
-It's possible to call a function in a bulk way, analoguosly to :ref:`bulk_insert`. To do this, you need to add the
+It's possible to call a function in a bulk way, analogously to :ref:`bulk_insert`. To do this, you need to add the
 ``Prefer: params=multiple-objects`` header to your request.
 
 .. code-block:: http
@@ -1316,7 +1316,7 @@ It's possible to call a function in a bulk way, analoguosly to :ref:`bulk_insert
 
    [ 3, 7 ]
 
-If you have large payloads to process, it's preferrable you instead use a function with an :ref:`array parameter <s_procs_array>` or json parameter, as this will be more efficient.
+If you have large payloads to process, it's preferable you instead use a function with an :ref:`array parameter <s_procs_array>` or JSON parameter, as this will be more efficient.
 
 It's also possible to :ref:`Specify Columns <specify_columns>` on functions calls.
 
@@ -1489,7 +1489,7 @@ HTTP Logic
 Accessing Request Headers, Cookies and JWT claims
 -------------------------------------------------
 
-You can access request headers, cookies and jwt claims by reading GUC variables set by PostgREST per request. They are named :code:`request.header.XYZ`, :code:`request.cookie.XYZ` and :code:`request.jwt.claim.XYZ`.
+You can access request headers, cookies and JWT claims by reading GUC variables set by PostgREST per request. They are named :code:`request.header.XYZ`, :code:`request.cookie.XYZ` and :code:`request.jwt.claim.XYZ`.
 
 .. code-block:: postgresql
 
@@ -1707,7 +1707,7 @@ PostgREST translates `PostgreSQL error codes <https://www.postgresql.org/docs/cu
 +--------------------------+-------------------------+---------------------------------+
 | 58*                      | 500                     | system error                    |
 +--------------------------+-------------------------+---------------------------------+
-| F0*                      | 500                     | conf file error                 |
+| F0*                      | 500                     | config file error               |
 +--------------------------+-------------------------+---------------------------------+
 | HV*                      | 500                     | foreign data wrapper error      |
 +--------------------------+-------------------------+---------------------------------+
diff --git a/auth.rst b/auth.rst
index 8243e0950..e67fc3a62 100644
--- a/auth.rst
+++ b/auth.rst
@@ -182,7 +182,7 @@ Next write a stored procedure that returns the token. The one below returns a to
     ) r;
   $$ LANGUAGE sql;
 
-PostgREST exposes this function to clients via a POST request to `/rpc/jwt_test`.
+PostgREST exposes this function to clients via a POST request to ``/rpc/jwt_test``.
 
 .. note::
 
diff --git a/configuration.rst b/configuration.rst
index 2b066f896..8654866b1 100644
--- a/configuration.rst
+++ b/configuration.rst
@@ -30,9 +30,9 @@ The user specified in the db-uri is also known as the authenticator role. For mo
 
 Here is the full list of configuration parameters.
 
-======================== ======  =========  ========
+======================== ======= =========  ========
 Name                     Type    Default    Required
-======================== ======  =========  ========
+======================== ======= =========  ========
 db-uri                   String             Y
 db-schema                String             Y
 db-anon-role             String             Y
@@ -43,16 +43,16 @@ server-host              String  !4
 server-port              Int     3000
 server-unix-socket       String
 server-unix-socket-mode  String  660
-openapi-server-proxy-uri         String
+openapi-server-proxy-uri String
 jwt-secret               String
 jwt-aud                  String
-secret-is-base64         Bool    False
+secret-is-base64         Boolean False
 max-rows                 Int     ∞
 pre-request              String
 app.settings.*           String
 role-claim-key           String  .role
 raw-media-types          String
-======================== ======  =========  ========
+======================== ======= =========  ========
 
 .. _db-uri:
 
@@ -266,8 +266,8 @@ raw-media-types
 
  These media types can be requested by following the same rules as the ones defined in :ref:`binary_output`.
 
- As an example, the below config would allow you to request an **image** and an **xml** by doing a request with ``Accept: image/png``
- and a request with ``Accept: text/xml``, respectively.
+ As an example, the below config would allow you to request an **image** and a **XML** file by doing a request with ``Accept: image/png``
+ or ``Accept: text/xml``, respectively.
 
  .. code:: bash
 
diff --git a/development.rst b/development.rst
index 3b1ea2774..ff9c987a9 100644
--- a/development.rst
+++ b/development.rst
@@ -41,18 +41,18 @@ To help with development, you'll need to build from source. `Stack <https://gith
 Running the Test Suite
 ======================
 
-To properly run the test suite, you need a Postgres database that the tests can run against. There are several ways to set up this database.
+To properly run the test suite, you need a PostgreSQL database that the tests can run against. There are several ways to set up this database.
 
 Testing with a temporary database
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
-If you have Postgres installed locally (:code:`initdb`, :code:`pg_ctl` and :code:`psql` should be on your PATH, no server needs to be running), you can run the test suite against a temporary database:
+If you have PostgreSQL installed locally (:code:`initdb`, :code:`pg_ctl` and :code:`psql` should be on your PATH, no server needs to be running), you can run the test suite against a temporary database:
 
 .. code:: bash
 
    test/with_tmp_db stack test
 
-The :code:`with_tmp_db` script will set up a new Postgres cluster in a temporary directory, set the required environment variables and run the command that you passed it as an argument, :code:`stack test` in the example above. When the command is done, the temporary database is torn down and deleted again.
+The :code:`with_tmp_db` script will set up a new PostgreSQL cluster in a temporary directory, set the required environment variables and run the command that you passed it as an argument, :code:`stack test` in the example above. When the command is done, the temporary database is torn down and deleted again.
 
 Manually creating the Test Database
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
@@ -84,7 +84,7 @@ Running the Tests with the manually created database
 
 To run the tests, one must supply the database uri in the environment variable :code:`POSTGREST_TEST_CONNECTION`.
 
-Typically, one would create the database and run the test in the same command line, using the `postgres` superuser:
+Typically, one would create the database and run the test in the same command line, using the ``postgres`` superuser:
 
 .. code:: bash
 
diff --git a/ecosystem.rst b/ecosystem.rst
index 6a1f0ffdd..c9ed9956d 100644
--- a/ecosystem.rst
+++ b/ecosystem.rst
@@ -6,7 +6,7 @@ Community Tutorials
 * `Building a Contacts List with PostgREST and Vue.js <https://www.youtube.com/watch?v=iHtsALtD5-U>`_ -
   In this video series, DigitalOcean shows how to build and deploy an Nginx + PostgREST(using a managed PostgreSQL database) + Vue.js webapp in an Ubuntu server droplet.
 
-* `PostgREST + Auth0: Create REST API in mintutes, and add social login using Auth0 <https://samkhawase.com/blog/postgrest/>`_ - A step-by-step tutorial to show how to Dockerize and integrate Auth0 to PostgREST service.
+* `PostgREST + Auth0: Create REST API in mintutes, and add social login using Auth0 <https://samkhawase.com/blog/postgrest/>`_ - A step-by-step tutorial to show how to dockerize and integrate Auth0 to PostgREST service.
 
 * `PostgREST + PostGIS API tutorial in 5 minutes <https://gis-ops.com/postgrest-postgis-api-tutorial-geospatial-api-in-5-minutes/>`_ -
   In this tutorial, GIS • OPS shows how to perform PostGIS calculations through PostgREST :ref:`s_procs` interface.
@@ -23,10 +23,10 @@ Example Apps
 * `tatut/postgrest-ui <https://github.com/tatut/postgrest-ui>`_ - ClojureScript UI components for PostgREST
 * `priyank-purohit/PostGUI <https://github.com/priyank-purohit/PostGUI>`_ - React Material UI admin panel
 * `Qu4tro/pgrst-dev-setup <https://github.com/Qu4tro/pgrst-dev-setup>`_ - docker-compose and tmuxp setup for experimentation.
-* `subzerocloud/postgrest-starter-kit <https://github.com/subzerocloud/postgrest-starter-kit>`_ - Boilerplate for new project
-* `NikolayS/postgrest-google-translate <https://github.com/NikolayS/postgrest-google-translate>`_ - Calling to external translation service
+* `subzerocloud/postgrest-starter-kit <https://github.com/subzerocloud/postgrest-starter-kit>`_ - boilerplate for new project
+* `NikolayS/postgrest-google-translate <https://github.com/NikolayS/postgrest-google-translate>`_ - calling to external translation service
 * `CodeforAustralia/heritage-near-me <https://github.com/CodeforAustralia/heritage-near-me>`_ - Elm and PostgREST with PostGIS
-* `timwis/handsontable-postgrest <https://github.com/timwis/handsontable-postgrest>`_ - An excel-like database table editor
+* `timwis/handsontable-postgrest <https://github.com/timwis/handsontable-postgrest>`_ - an excel-like database table editor
 * `Recmo/PostgrestSkeleton <https://github.com/Recmo/PostgrestSkeleton>`_ - Docker Compose, PostgREST, Nginx and Auth0
 * `benoror/ember-postgrest-dynamic-ui <https://github.com/benoror/ember-postgrest-dynamic-ui>`_ - generating Ember forms to edit data
 * `ruslantalpa/blogdemo <https://github.com/ruslantalpa/blogdemo>`_ - blog api demo in a vagrant image
@@ -39,7 +39,7 @@ Example Apps
 * `SMRxT/postgrest-demo <https://github.com/SMRxT/postgrest-demo>`_ - multi-tenant logging system
 * `PierreRochard/postgrest-boilerplate <https://github.com/PierreRochard/postgrest-boilerplate>`_ - example auth back-end
 * `marmelab/ng-admin-postgrest <https://github.com/marmelab/ng-admin-postgrest>`_ - automatic database admin panel
-* `seveibar/postgrest-vercel <https://github.com/seveibar/postgrest-vercel>`_ - Run postgrest on Vercel (Serverless/AWS Lambda)
+* `seveibar/postgrest-vercel <https://github.com/seveibar/postgrest-vercel>`_ - run PostgREST on Vercel (Serverless/AWS Lambda)
 
 .. _eco_external_notification:
 
@@ -48,7 +48,7 @@ External Notification
 
 These are PostgreSQL bridges that propagate LISTEN/NOTIFY to external queues for further processing. This allows stored procedures to initiate actions outside the database such as sending emails.
 
-* `vbalasu/pg-notify-webhook <https://pypi.org/project/pg-notify-webhook/>`_ - Trigger webhooks from postgres LISTEN/NOTIFY
+* `vbalasu/pg-notify-webhook <https://pypi.org/project/pg-notify-webhook/>`_ - trigger webhooks from PostgreSQL's LISTEN/NOTIFY
 * `diogob/postgres-websockets <https://github.com/diogob/postgres-websockets>`_ - expose web sockets for PostgreSQL's LISTEN/NOTIFY
 * `frafra/postgresql2websocket <https://github.com/frafra/postgresql2websocket>`_ - Websockets
 * `matthewmueller/pg-bridge <https://github.com/matthewmueller/pg-bridge>`_ - Amazon SNS
@@ -63,14 +63,14 @@ These are PostgreSQL bridges that propagate LISTEN/NOTIFY to external queues for
 Extensions
 ----------
 
-* `pg-safeupdate <https://github.com/eradman/pg-safeupdate>`_ - Prevent full-table updates or deletes
+* `pg-safeupdate <https://github.com/eradman/pg-safeupdate>`_ - prevent full-table updates or deletes
 * `srid/spas <https://github.com/srid/spas>`_ - allow file uploads and basic auth
 * `svmnotn/postgrest-auth <https://github.com/svmnotn/postgrest-auth>`_ - OAuth2-inspired external auth server
 * `wildsurfer/postgrest-oauth-server <https://github.com/wildsurfer/postgrest-oauth-server>`_ - OAuth2 server
 * `nblumoe/postgrest-oauth <https://github.com/nblumoe/postgrest-oauth>`_ - OAuth2 WAI middleware
 * `criles25/postgrest-auth <https://github.com/criles25/postgrest-auth>`_ - email based auth/signup
-* `ppKrauss/PostgREST-writeAPI <https://github.com/ppKrauss/PostgREST-writeAPI>`_ - generate Nginx rewrite rules to fit an OpenAPI spec
-* `seveibar/postgrest-node <https://github.com/seveibar/postgrest-node>`_ - Run a postgrest server in NodeJS via an npm module
+* `ppKrauss/PostgREST-writeAPI <https://github.com/ppKrauss/PostgREST-writeAPI>`_ - generate nginx rewrite rules to fit an OpenAPI spec
+* `seveibar/postgrest-node <https://github.com/seveibar/postgrest-node>`_ - Run a PostgREST server in Node.js via npm module
 * `Exahilosys/aiodata <https://github.com/Exahilosys/aiodata>`_ - Python, event-based proxy and caching client.
 
 .. _clientside_libraries:
@@ -95,7 +95,7 @@ Client-Side Libraries
 * `clesiemo3/postgrestR <https://github.com/clesiemo3/postgrestR>`_ - R
 * `PierreRochard/postgrest-angular <https://github.com/PierreRochard/postgrest-angular>`_ - TypeScript, generate UI from API description
 * `thejettdurham/postgrest-sharp-client <https://github.com/thejettdurham/postgrest-sharp-client>`_ (needs maintainer) - C#, RestSharp
-* `team142/ng-postgrest <https://github.com/team142/ng-postgrest>`_ - Angular app for browsing, editing data exposed over Postgrest.
+* `team142/ng-postgrest <https://github.com/team142/ng-postgrest>`_ - Angular app for browsing, editing data exposed over PostgREST.
 * `andytango/redux-postgrest <https://github.com/andytango/redux-postgrest>`_ - TypeScript/JS, client integrated with (React) Redux.
 
 .. _eco_commercial:
diff --git a/how-tos/casting-type-to-custom-json.rst b/how-tos/casting-type-to-custom-json.rst
index b2b25128d..1cc606127 100644
--- a/how-tos/casting-type-to-custom-json.rst
+++ b/how-tos/casting-type-to-custom-json.rst
@@ -80,12 +80,12 @@ The result now is:
      }
    ]
 
-You can use the same idea for creating custom CASTs for different types.
+You can use the same idea for creating custom casts for different types.
 
 .. note::
 
-   If you don't want to modify CASTs for built-in types, an option would be to `create a custom type <https://www.postgresql.org/docs/current/sql-createtype.html>`_
-   for your own ``tsrange`` and add its own CAST.
+   If you don't want to modify casts for built-in types, an option would be to `create a custom type <https://www.postgresql.org/docs/current/sql-createtype.html>`_
+   for your own ``tsrange`` and add its own cast.
 
    .. code-block:: postgres
 
diff --git a/how-tos/providing-images-for-img.rst b/how-tos/providing-images-for-img.rst
index be442287b..a90c7939e 100644
--- a/how-tos/providing-images-for-img.rst
+++ b/how-tos/providing-images-for-img.rst
@@ -1,11 +1,11 @@
 .. _providing_img:
 
-Providing images for <img>
-==========================
+Providing images for ``<img>``
+==============================
 
 :author: `pkel <https://github.com/pkel>`_
 
-In this how-to, you will learn how to create an endpoint for providing images to HTML :code:`<img>` tags without client side javascript.
+In this how-to, you will learn how to create an endpoint for providing images to HTML :code:`<img>` tags without client side JavaScript.
 The resulting HTML might look like this:
 
 .. code-block:: html
diff --git a/index.rst b/index.rst
index 3e7b0b518..65d0d54e4 100644
--- a/index.rst
+++ b/index.rst
@@ -238,7 +238,7 @@ Testimonials
   -- Louis Brauer
 
   "I really enjoyed the fact that all of a sudden I was writing
-  microservices in SQL DDL (and v8 javascript functions). I dodged so
+  microservices in SQL DDL (and v8 JavaScript functions). I dodged so
   much boilerplate. The next thing I knew, we pulled out a full rewrite
   of a Spring+MySQL legacy app in 6 months. Literally 10x faster, and
   code was super concise. The old one took 3 years and a team of 4
diff --git a/install.rst b/install.rst
index d365cf362..165a4b6ee 100644
--- a/install.rst
+++ b/install.rst
@@ -51,7 +51,7 @@ If you downloaded PostgREST from the release page, first extract the compressed
 
   # On Windows you should unzip the file
 
-Now you can run postgrest with the :code:`--help` flag to see usage instructions:
+Now you can run PostgREST with the :code:`--help` flag to see usage instructions:
 
 .. code-block:: bash
 
@@ -218,7 +218,7 @@ Assuming your making modifications locally and then pushing to GitHub, it's easy
 1. Create a new app on Heroku
 2. In Settings add the following buildpack :code:`https://github.com/PostgREST/postgrest-heroku`
 3. Add the require Config Vars in Heroku (see https://github.com/PostgREST/postgrest/blob/master/app.json#L7-L57 for more details)
-4. Modify your postgrest.conf file as required to match your Config Vars in Heroku
+4. Modify your ``postgrest.conf`` file as required to match your Config Vars in Heroku
 5. Create your :code:`Procfile` and add :code:`./env-to-config ./postgrest postgrest.conf`
 6. Push your changes to GitHub
 7. Set Heroku to automatically deploy from Master and then manually deploy the branch for the first build
diff --git a/postgrest.dict b/postgrest.dict
index c0a0e8c82..0d043e805 100644
--- a/postgrest.dict
+++ b/postgrest.dict
@@ -1,24 +1,35 @@
 personal_ws-1.1 en 0 utf-8
+Adossi
 AMQP
 api
+API's
+Archlinux
 aud
 Auth
 auth
 authenticator
 balancer
-Bool
+Beles
+Bouscal
+buildpack
 cd
 centric
-conf
+changelog
+ClojureScript
 config
 cryptographically
 CSV
-csv
+Daemonizing
 DDL
+DiBiase
 disjoined
+dockerize
 DoS
 eq
+Fenko
+Fernandes
 filename
+FreeBSD
 fts
 GHC
 Github
@@ -27,23 +38,24 @@ grantor
 GraphQL
 gte
 GUC
+Gumbs
 Haskell
 Heroku
 HMAC
 Homebrew
-http
 HTTPS
 HV
-ILIKE
 ilike
+io
 IP
 JS
+js
 JSON
-json
 JWK
 JWT
 jwt
 Kinesis
+Kofi
 localhost
 login
 Logins
@@ -51,31 +63,36 @@ logins
 lon
 lt
 lte
+macOS
 middleware
+misprediction
 Mithril
 multi
 MVCC
+namespace
 namespaced
 neq
-NGINX
-Nginx
+nginx
 ngrep
-nullsfirst
-nullslast
+nixpkgs
+npm
 nxl
 nxr
 OAuth
+onwards
 OpenAPI
 openapi
 ORM
 ov
-param
-params
 passphrase
+Pelletier
+Petr
 pgcrypto
 pgjwt
 pgSQL
 phfts
+phraseto
+plainto
 plfts
 PostGIS
 PostgreSQL
@@ -84,18 +101,24 @@ PostgREST
 postgrest
 PostgREST's
 pre
+psql
+Qin
 RabbitMQ
+Rafaj
 RDS
 reallyreallyreallyreallyverysafe
+Redux
 refactor
 requester's
 RESTful
 RestSharp
 RLS
+RPC
 RSA
 savepoint
 schemas
 Sencha
+Serverless
 SHA
 signup
 SIGUSR
@@ -108,23 +131,35 @@ sr
 SSL
 stateful
 stdout
+Stolarz
 SuperAgent
 syslog
+systemd
 Tcl
+tmuxp
+todo
+todos
+Tsingson
 tsquery
 TypeScript
 UI
 ui
 unicode
+unix
 UPSERT
-Upsert
 uri
 url
 urls
+variadic
+Vercel
 verifier
 versioning
 Vondra
+Vue
 WAI
+webhooks
+websearch
 Websockets
 webuser
+wfts
 ZeroMQ
diff --git a/releases/upcoming.rst b/releases/upcoming.rst
index c6d9ec27d..4ef4ea9af 100644
--- a/releases/upcoming.rst
+++ b/releases/upcoming.rst
@@ -10,7 +10,7 @@ These are changes yet unreleased. If you'd like to try them out before a new off
 Added
 -----
 
-* Allow http status override through the :ref:`response.status <guc_resp_status>` GUC.
+* Allow HTTP status override through the :ref:`response.status <guc_resp_status>` GUC.
   |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
 * Allow :ref:`s_procs_variadic`.
   |br| -- `@wolfgangwalther <https://github.com/wolfgangwalther>`_
@@ -24,6 +24,6 @@ Fixed
 Changed
 -------
 
-* Docker images are now optimized to be built from the scratch image. This reduces the compressed image size from over 30mb to about 4mb.
+* Docker images are now optimized to be built from the scratch image. This reduces the compressed image size from over 30 MB to about 4 MB.
   For more details, see `Docker image built with Nix <https://github.com/PostgREST/postgrest/tree/master/nix/docker#docker-image-built-with-nix>`_.
   |br| -- `@monacoremo <https://github.com/monacoremo>`_
diff --git a/releases/v7.0.0.rst b/releases/v7.0.0.rst
index 57117c22f..d72579086 100644
--- a/releases/v7.0.0.rst
+++ b/releases/v7.0.0.rst
@@ -5,7 +5,7 @@
 v7.0.0
 ======
 
-You can donwload this release at the `PostgREST v7.0.0 release page <https://github.com/PostgREST/postgrest/releases/tag/v7.0.0>`_.
+You can download this release at the `PostgREST v7.0.0 release page <https://github.com/PostgREST/postgrest/releases/tag/v7.0.0>`_.
 
 Added
 -----
@@ -45,7 +45,7 @@ Added
 Fixed
 -----
 
-* Allow embedding a VIEW when its source table foreign key is UNIQUE
+* Allow embedding a view when its source table foreign key is UNIQUE
   |br| -- `@bwbroersma <https://github.com/bwbroersma>`_
 
 * ``Accept: application/vnd.pgrst.object+json`` behavior is now enforced for POST/PATCH/DELETE regardless of ``Prefer: return=minimal``
diff --git a/schema_structure.rst b/schema_structure.rst
index a51d08c92..c45f30f32 100644
--- a/schema_structure.rst
+++ b/schema_structure.rst
@@ -20,7 +20,7 @@ This allows you to change the internals of your schema and maintain backwards co
 Functions
 =========
 
-By default, when a function is created, the privilege to execute it is not restricted by role. The function access is PUBLIC—executable by all roles (more details at `PostgreSQL Privileges page <https://www.postgresql.org/docs/12/ddl-priv.html>`_). This is not ideal for an API schema. To disable this behavior, you can run the following SQL statement:
+By default, when a function is created, the privilege to execute it is not restricted by role. The function access is ``PUBLIC`` — executable by all roles (more details at `PostgreSQL Privileges page <https://www.postgresql.org/docs/12/ddl-priv.html>`_). This is not ideal for an API schema. To disable this behavior, you can run the following SQL statement:
 
 .. code-block:: postgres
 
@@ -55,7 +55,7 @@ Security definer
 ----------------
 
 A function is executed with the privileges of the user who calls it. This means that the user has to have all permissions to do the operations the procedure performs.
-If the function accesses private database objects, your :ref:`API roles <roles>` won't be able to succesfully execute the function.
+If the function accesses private database objects, your :ref:`API roles <roles>` won't be able to successfully execute the function.
 
 Another option is to define the function with the :code:`SECURITY DEFINER` option. Then only one permission check will take place, the permission to call the function, and the operations in the function will have the authority of the user who owns the function itself.
 
@@ -84,13 +84,13 @@ For changing this, we can create a non-SUPERUSER role and make this role the vie
 
 .. code-block:: postgres
 
- CREATE ROLE api_views_owner NOINHERIT;
- ALTER VIEW sample_view OWNER TO api_views_owner;
+  CREATE ROLE api_views_owner NOINHERIT;
+  ALTER VIEW sample_view OWNER TO api_views_owner;
 
 Rules
 -----
 
-Insertion on VIEWs with complex `RULEs <https://www.postgresql.org/docs/11/sql-createrule.html>`_ might not work out of the box with PostgREST.
-It's recommended that you `use triggers instead of RULEs <https://wiki.postgresql.org/wiki/Don%27t_Do_This#Don.27t_use_rules>`_.
-If you want to keep using RULEs, a workaround is to wrap the VIEW insertion in a stored procedure and call it through the :ref:`s_procs` interface.
+Insertion on views with complex `rules <https://www.postgresql.org/docs/11/sql-createrule.html>`_ might not work out of the box with PostgREST.
+It's recommended that you `use triggers instead of rules <https://wiki.postgresql.org/wiki/Don%27t_Do_This#Don.27t_use_rules>`_.
+If you want to keep using rules, a workaround is to wrap the view insertion in a stored procedure and call it through the :ref:`s_procs` interface.
 For more details, see this `github issue <https://github.com/PostgREST/postgrest/issues/1283>`_.

From 881170b9ff7aadb2ad57bd3d49a9035b4e8d9751 Mon Sep 17 00:00:00 2001
From: Wolfgang Walther <walther@technowledgy.de>
Date: Sun, 29 Nov 2020 23:42:08 +0100
Subject: [PATCH 374/652] Fix build warnings to satisfy postgrest-docs-build

---
 auth.rst    | 24 +++++++++++++-----------
 conf.py     |  2 +-
 install.rst |  4 ++--
 3 files changed, 16 insertions(+), 14 deletions(-)

diff --git a/auth.rst b/auth.rst
index e67fc3a62..99a29c1f3 100644
--- a/auth.rst
+++ b/auth.rst
@@ -208,20 +208,22 @@ To use Auth0, create `an application <https://auth0.com/docs/applications>`_ for
 
 .. note::
 
-Our code requires a database role in the JWT. To add it you need to save the database role in Auth0 `app metadata <https://auth0.com/docs/rules/metadata-in-rules>`_. Then, you will need to write `a rule <https://auth0.com/docs/rules>`_ that will extract the role from the user's app_metadata and set it as a `custom claim <https://auth0.com/docs/scopes/sample-use-cases-scopes-and-claims#add-custom-claims-to-a-token>`_ in the access token. Note that, you may use Auth0's `core authorization feature <https://auth0.com/docs/authorization/rbac>`_ for more complex use cases. Metadata solution is mentioned here for simplicity. 
+  Our code requires a database role in the JWT. To add it you need to save the database role in Auth0 `app metadata <https://auth0.com/docs/rules/metadata-in-rules>`_. Then, you will need to write `a rule <https://auth0.com/docs/rules>`_ that will extract the role from the user's app_metadata and set it as a `custom claim <https://auth0.com/docs/scopes/sample-use-cases-scopes-and-claims#add-custom-claims-to-a-token>`_ in the access token. Note that, you may use Auth0's `core authorization feature <https://auth0.com/docs/authorization/rbac>`_ for more complex use cases. Metadata solution is mentioned here for simplicity.
 
-.. code:: javascript
+  .. code:: javascript
 
-  function (user, context, callback) {
+    function (user, context, callback) {
 
-    // Follow the documentations at http://postgrest.org/en/v7.0.0/configuration.html#role-claim-key
-    // to set a custom role claim on PostgREST and use it as custom claim attribute in this rule
-    const myRoleClaim = 'https://myapp.com/role'; 
-    
-    user.app_metadata = user.app_metadata || {};
-    context.accessToken[myRoleClaim] = user.app_metadata.role;
-    callback(null, user, context);
-  }
+      // Follow the documentations at
+      // http://postgrest.org/en/latest/configuration.html#role-claim-key
+      // to set a custom role claim on PostgREST
+      // and use it as custom claim attribute in this rule
+      const myRoleClaim = 'https://myapp.com/role';
+
+      user.app_metadata = user.app_metadata || {};
+      context.accessToken[myRoleClaim] = user.app_metadata.role;
+      callback(null, user, context);
+    }
 
 .. _asym_keys:
 
diff --git a/conf.py b/conf.py
index 67fba7041..29f4382cb 100644
--- a/conf.py
+++ b/conf.py
@@ -288,4 +288,4 @@ texinfo_documents = [
 # -- Custom setup ---------------------------------------------------------
 
 def setup(app):
-    app.add_stylesheet('css/custom.css')
+    app.add_css_file('css/custom.css')
diff --git a/install.rst b/install.rst
index 165a4b6ee..9b4756abd 100644
--- a/install.rst
+++ b/install.rst
@@ -18,7 +18,7 @@ If you use **FreeBSD**, then you can install PostgREST from the `official ports
 
   pkg install hs-postgrest
 
-If you use **Arch Linux**, then you can install PostgREST from the `official repo <https://www.archlinux.org/packages/community/x86_64/postgrest>`_.
+If you use **Arch Linux**, then you can install PostgREST from the `community repo <https://www.archlinux.org/packages/community/x86_64/postgrest>`_.
 
 .. code:: bash
 
@@ -40,7 +40,7 @@ If you use Windows, you can install PostgREST using `Chocolatey <https://chocola
 When a pre-built binary does not exist for your system you can :ref:`build the project from source <build_source>`.
 
 Running
-~~~~~~~
+-------
 
 If you downloaded PostgREST from the release page, first extract the compressed file to obtain the executable.
 

From d6caa5dae99cdf42fdf5c1c09366f2294d5546c6 Mon Sep 17 00:00:00 2001
From: Wolfgang Walther <walther@technowledgy.de>
Date: Sun, 29 Nov 2020 13:18:18 +0100
Subject: [PATCH 375/652] make docs full-width, resolves #351

---
 _static/css/custom.css | 16 ++++++++++++++--
 index.rst              |  3 +++
 2 files changed, 17 insertions(+), 2 deletions(-)

diff --git a/_static/css/custom.css b/_static/css/custom.css
index 50359ce05..cd52bc848 100644
--- a/_static/css/custom.css
+++ b/_static/css/custom.css
@@ -1,3 +1,15 @@
+.wy-nav-content {
+  max-width: initial;
+}
+
+#postgrest-documentation {
+  max-width: 800px;
+}
+
+#postgrest-documentation > h1 {
+  display: none;
+}
+
 div.wy-menu.rst-pro {
   display: none !important;
 }
@@ -10,11 +22,11 @@ div.line-block {
   margin-bottom: 0px !important;
 }
 
-#sponsors{
+#sponsors {
   text-align: center;
 }
 
-#sponsors h1{
+#sponsors h2 {
   text-align: left;
 }
 
diff --git a/index.rst b/index.rst
index 65d0d54e4..8bd6b3ec0 100644
--- a/index.rst
+++ b/index.rst
@@ -1,5 +1,8 @@
 .. title:: PostgREST Documentation
 
+PostgREST Documentation
+=======================
+
 .. figure:: _static/logo.png
 
 .. image:: https://img.shields.io/github/stars/postgrest/postgrest.svg?style=social

From b0ba2f709cd7f0fb055423c7afad96a9b95cc32e Mon Sep 17 00:00:00 2001
From: Wolfgang Walther <walther@technowledgy.de>
Date: Mon, 30 Nov 2020 19:38:15 +0100
Subject: [PATCH 376/652] remove Makefile and Pipfile

---
 Makefile | 230 -------------------------------------------------------
 Pipfile  |  14 ----
 2 files changed, 244 deletions(-)
 delete mode 100644 Makefile
 delete mode 100644 Pipfile

diff --git a/Makefile b/Makefile
deleted file mode 100644
index b739a52ff..000000000
--- a/Makefile
+++ /dev/null
@@ -1,230 +0,0 @@
-# Makefile for Sphinx documentation
-#
-
-# You can set these variables from the command line.
-SPHINXOPTS    =
-SPHINXBUILD   = sphinx-build
-PAPER         =
-BUILDDIR      = _build
-
-# User-friendly check for sphinx-build
-ifeq ($(shell which $(SPHINXBUILD) >/dev/null 2>&1; echo $$?), 1)
-	$(error The '$(SPHINXBUILD)' command was not found. Make sure you have Sphinx installed, then set the SPHINXBUILD environment variable to point to the full path of the '$(SPHINXBUILD)' executable. Alternatively you can add the directory with the executable to your PATH. If you don\'t have Sphinx installed, grab it from http://sphinx-doc.org/)
-endif
-
-# Internal variables.
-PAPEROPT_a4     = -D latex_paper_size=a4
-PAPEROPT_letter = -D latex_paper_size=letter
-ALLSPHINXOPTS   = -d $(BUILDDIR)/doctrees $(PAPEROPT_$(PAPER)) $(SPHINXOPTS) .
-# the i18n builder cannot share the environment and doctrees with the others
-I18NSPHINXOPTS  = $(PAPEROPT_$(PAPER)) $(SPHINXOPTS) .
-
-.PHONY: help
-help:
-	@echo "Please use \`make <target>' where <target> is one of"
-	@echo "  html       to make standalone HTML files"
-	@echo "  dirhtml    to make HTML files named index.html in directories"
-	@echo "  singlehtml to make a single large HTML file"
-	@echo "  pickle     to make pickle files"
-	@echo "  json       to make JSON files"
-	@echo "  htmlhelp   to make HTML files and a HTML help project"
-	@echo "  qthelp     to make HTML files and a qthelp project"
-	@echo "  applehelp  to make an Apple Help Book"
-	@echo "  devhelp    to make HTML files and a Devhelp project"
-	@echo "  epub       to make an epub"
-	@echo "  epub3      to make an epub3"
-	@echo "  latex      to make LaTeX files, you can set PAPER=a4 or PAPER=letter"
-	@echo "  latexpdf   to make LaTeX files and run them through pdflatex"
-	@echo "  latexpdfja to make LaTeX files and run them through platex/dvipdfmx"
-	@echo "  text       to make text files"
-	@echo "  man        to make manual pages"
-	@echo "  texinfo    to make Texinfo files"
-	@echo "  info       to make Texinfo files and run them through makeinfo"
-	@echo "  gettext    to make PO message catalogs"
-	@echo "  changes    to make an overview of all changed/added/deprecated items"
-	@echo "  xml        to make Docutils-native XML files"
-	@echo "  pseudoxml  to make pseudoxml-XML files for display purposes"
-	@echo "  linkcheck  to check all external links for integrity"
-	@echo "  doctest    to run all doctests embedded in the documentation (if enabled)"
-	@echo "  coverage   to run coverage check of the documentation (if enabled)"
-	@echo "  dummy      to check syntax errors of document sources"
-
-.PHONY: clean
-clean:
-	rm -rf $(BUILDDIR)/*
-
-.PHONY: html
-html:
-	$(SPHINXBUILD) -b html $(ALLSPHINXOPTS) $(BUILDDIR)/html
-	@echo
-	@echo "Build finished. The HTML pages are in $(BUILDDIR)/html."
-
-.PHONY: dirhtml
-dirhtml:
-	$(SPHINXBUILD) -b dirhtml $(ALLSPHINXOPTS) $(BUILDDIR)/dirhtml
-	@echo
-	@echo "Build finished. The HTML pages are in $(BUILDDIR)/dirhtml."
-
-.PHONY: singlehtml
-singlehtml:
-	$(SPHINXBUILD) -b singlehtml $(ALLSPHINXOPTS) $(BUILDDIR)/singlehtml
-	@echo
-	@echo "Build finished. The HTML page is in $(BUILDDIR)/singlehtml."
-
-.PHONY: pickle
-pickle:
-	$(SPHINXBUILD) -b pickle $(ALLSPHINXOPTS) $(BUILDDIR)/pickle
-	@echo
-	@echo "Build finished; now you can process the pickle files."
-
-.PHONY: json
-json:
-	$(SPHINXBUILD) -b json $(ALLSPHINXOPTS) $(BUILDDIR)/json
-	@echo
-	@echo "Build finished; now you can process the JSON files."
-
-.PHONY: htmlhelp
-htmlhelp:
-	$(SPHINXBUILD) -b htmlhelp $(ALLSPHINXOPTS) $(BUILDDIR)/htmlhelp
-	@echo
-	@echo "Build finished; now you can run HTML Help Workshop with the" \
-	      ".hhp project file in $(BUILDDIR)/htmlhelp."
-
-.PHONY: qthelp
-qthelp:
-	$(SPHINXBUILD) -b qthelp $(ALLSPHINXOPTS) $(BUILDDIR)/qthelp
-	@echo
-	@echo "Build finished; now you can run "qcollectiongenerator" with the" \
-	      ".qhcp project file in $(BUILDDIR)/qthelp, like this:"
-	@echo "# qcollectiongenerator $(BUILDDIR)/qthelp/PostgREST.qhcp"
-	@echo "To view the help file:"
-	@echo "# assistant -collectionFile $(BUILDDIR)/qthelp/PostgREST.qhc"
-
-.PHONY: applehelp
-applehelp:
-	$(SPHINXBUILD) -b applehelp $(ALLSPHINXOPTS) $(BUILDDIR)/applehelp
-	@echo
-	@echo "Build finished. The help book is in $(BUILDDIR)/applehelp."
-	@echo "N.B. You won't be able to view it unless you put it in" \
-	      "~/Library/Documentation/Help or install it in your application" \
-	      "bundle."
-
-.PHONY: devhelp
-devhelp:
-	$(SPHINXBUILD) -b devhelp $(ALLSPHINXOPTS) $(BUILDDIR)/devhelp
-	@echo
-	@echo "Build finished."
-	@echo "To view the help file:"
-	@echo "# mkdir -p $$HOME/.local/share/devhelp/PostgREST"
-	@echo "# ln -s $(BUILDDIR)/devhelp $$HOME/.local/share/devhelp/PostgREST"
-	@echo "# devhelp"
-
-.PHONY: epub
-epub:
-	$(SPHINXBUILD) -b epub $(ALLSPHINXOPTS) $(BUILDDIR)/epub
-	@echo
-	@echo "Build finished. The epub file is in $(BUILDDIR)/epub."
-
-.PHONY: epub3
-epub3:
-	$(SPHINXBUILD) -b epub3 $(ALLSPHINXOPTS) $(BUILDDIR)/epub3
-	@echo
-	@echo "Build finished. The epub3 file is in $(BUILDDIR)/epub3."
-
-.PHONY: latex
-latex:
-	$(SPHINXBUILD) -b latex $(ALLSPHINXOPTS) $(BUILDDIR)/latex
-	@echo
-	@echo "Build finished; the LaTeX files are in $(BUILDDIR)/latex."
-	@echo "Run \`make' in that directory to run these through (pdf)latex" \
-	      "(use \`make latexpdf' here to do that automatically)."
-
-.PHONY: latexpdf
-latexpdf:
-	$(SPHINXBUILD) -b latex $(ALLSPHINXOPTS) $(BUILDDIR)/latex
-	@echo "Running LaTeX files through pdflatex..."
-	$(MAKE) -C $(BUILDDIR)/latex all-pdf
-	@echo "pdflatex finished; the PDF files are in $(BUILDDIR)/latex."
-
-.PHONY: latexpdfja
-latexpdfja:
-	$(SPHINXBUILD) -b latex $(ALLSPHINXOPTS) $(BUILDDIR)/latex
-	@echo "Running LaTeX files through platex and dvipdfmx..."
-	$(MAKE) -C $(BUILDDIR)/latex all-pdf-ja
-	@echo "pdflatex finished; the PDF files are in $(BUILDDIR)/latex."
-
-.PHONY: text
-text:
-	$(SPHINXBUILD) -b text $(ALLSPHINXOPTS) $(BUILDDIR)/text
-	@echo
-	@echo "Build finished. The text files are in $(BUILDDIR)/text."
-
-.PHONY: man
-man:
-	$(SPHINXBUILD) -b man $(ALLSPHINXOPTS) $(BUILDDIR)/man
-	@echo
-	@echo "Build finished. The manual pages are in $(BUILDDIR)/man."
-
-.PHONY: texinfo
-texinfo:
-	$(SPHINXBUILD) -b texinfo $(ALLSPHINXOPTS) $(BUILDDIR)/texinfo
-	@echo
-	@echo "Build finished. The Texinfo files are in $(BUILDDIR)/texinfo."
-	@echo "Run \`make' in that directory to run these through makeinfo" \
-	      "(use \`make info' here to do that automatically)."
-
-.PHONY: info
-info:
-	$(SPHINXBUILD) -b texinfo $(ALLSPHINXOPTS) $(BUILDDIR)/texinfo
-	@echo "Running Texinfo files through makeinfo..."
-	make -C $(BUILDDIR)/texinfo info
-	@echo "makeinfo finished; the Info files are in $(BUILDDIR)/texinfo."
-
-.PHONY: gettext
-gettext:
-	$(SPHINXBUILD) -b gettext $(I18NSPHINXOPTS) $(BUILDDIR)/locale
-	@echo
-	@echo "Build finished. The message catalogs are in $(BUILDDIR)/locale."
-
-.PHONY: changes
-changes:
-	$(SPHINXBUILD) -b changes $(ALLSPHINXOPTS) $(BUILDDIR)/changes
-	@echo
-	@echo "The overview file is in $(BUILDDIR)/changes."
-
-.PHONY: linkcheck
-linkcheck:
-	$(SPHINXBUILD) -b linkcheck $(ALLSPHINXOPTS) $(BUILDDIR)/linkcheck
-	@echo
-	@echo "Link check complete; look for any errors in the above output " \
-	      "or in $(BUILDDIR)/linkcheck/output.txt."
-
-.PHONY: doctest
-doctest:
-	$(SPHINXBUILD) -b doctest $(ALLSPHINXOPTS) $(BUILDDIR)/doctest
-	@echo "Testing of doctests in the sources finished, look at the " \
-	      "results in $(BUILDDIR)/doctest/output.txt."
-
-.PHONY: coverage
-coverage:
-	$(SPHINXBUILD) -b coverage $(ALLSPHINXOPTS) $(BUILDDIR)/coverage
-	@echo "Testing of coverage in the sources finished, look at the " \
-	      "results in $(BUILDDIR)/coverage/python.txt."
-
-.PHONY: xml
-xml:
-	$(SPHINXBUILD) -b xml $(ALLSPHINXOPTS) $(BUILDDIR)/xml
-	@echo
-	@echo "Build finished. The XML files are in $(BUILDDIR)/xml."
-
-.PHONY: pseudoxml
-pseudoxml:
-	$(SPHINXBUILD) -b pseudoxml $(ALLSPHINXOPTS) $(BUILDDIR)/pseudoxml
-	@echo
-	@echo "Build finished. The pseudo-XML files are in $(BUILDDIR)/pseudoxml."
-
-.PHONY: dummy
-dummy:
-	$(SPHINXBUILD) -b dummy $(ALLSPHINXOPTS) $(BUILDDIR)/dummy
-	@echo
-	@echo "Build finished. Dummy builder generates no files."
diff --git a/Pipfile b/Pipfile
deleted file mode 100644
index 52ea333a4..000000000
--- a/Pipfile
+++ /dev/null
@@ -1,14 +0,0 @@
-[[source]]
-url = "https://pypi.org/simple"
-verify_ssl = true
-name = "pypi"
-
-[packages]
-sphinx = "*"
-sphinx-rtd-theme = "*"
-livereload = "*"
-
-[dev-packages]
-
-[requires]
-python_version = "3.6"

From a4fe838308774853038e9136c64ead56712c5a79 Mon Sep 17 00:00:00 2001
From: Joshua Taillon <jat255@gmail.com>
Date: Tue, 8 Dec 2020 12:58:25 -0700
Subject: [PATCH 377/652] Fix outdated environment variable for docker compose

Also removed a deprecated `links` setting from the docker-compose, since that's not needed any more
---
 install.rst | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/install.rst b/install.rst
index 9b4756abd..6e71745a7 100644
--- a/install.rst
+++ b/install.rst
@@ -172,13 +172,11 @@ To avoid having to install the database at all, you can run both it and the serv
       image: postgrest/postgrest
       ports:
         - "3000:3000"
-      links:
-        - db:db
       environment:
         PGRST_DB_URI: postgres://app_user:password@db:5432/app_db
         PGRST_DB_SCHEMA: public
         PGRST_DB_ANON_ROLE: app_user #In production this role should not be the same as the one used for the connection
-        PGRST_SERVER_PROXY_URI: "http://127.0.0.1:3000"
+        PGRST_OPENAPI_SERVER_PROXY_URI: "http://127.0.0.1:3000"
       depends_on:
         - db
     db:

From c3ad07fcc0b93f5a952d85bdac0d3e1e24e5b141 Mon Sep 17 00:00:00 2001
From: Gurjeet Singh <gurjeet@singh.im>
Date: Sun, 27 Dec 2020 03:42:54 -0800
Subject: [PATCH 378/652] Minor grammar fix

---
 install.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install.rst b/install.rst
index 6e71745a7..88595fe82 100644
--- a/install.rst
+++ b/install.rst
@@ -211,7 +211,7 @@ With this you can see the swagger-ui in your browser on port 8080.
 Deploying to Heroku
 ===================
 
-Assuming your making modifications locally and then pushing to GitHub, it's easy to deploy to Heroku.
+Assuming you're making modifications locally and then pushing to GitHub, it's easy to deploy to Heroku.
 
 1. Create a new app on Heroku
 2. In Settings add the following buildpack :code:`https://github.com/PostgREST/postgrest-heroku`

From 89942601e470a7fe8fd46c3888796aef94fa190d Mon Sep 17 00:00:00 2001
From: Max H <36088096+rxt30@users.noreply.github.com>
Date: Thu, 21 Jan 2021 08:33:58 +0100
Subject: [PATCH 379/652] Fix headline numbering in tutorial 1

---
 tutorials/tut1.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tutorials/tut1.rst b/tutorials/tut1.rst
index e9fe78f54..fa89591f3 100644
--- a/tutorials/tut1.rst
+++ b/tutorials/tut1.rst
@@ -122,7 +122,7 @@ A request for the todos shows three of them, and all completed.
     }
   ]
 
-Step 4. Add Expiration
+Step 5. Add Expiration
 ----------------------
 
 Currently our authentication token is valid for all eternity. The server, as long as it continues using the same JWT password, will honor the token.

From 5728bbc4b9235e96397badb79bb205e256b55c87 Mon Sep 17 00:00:00 2001
From: Copple <10214025+kiwicopple@users.noreply.github.com>
Date: Thu, 18 Feb 2021 22:16:19 +0800
Subject: [PATCH 380/652] Add Supabase to In Production and client libraries 
 (#389)

---
 ecosystem.rst | 7 ++++++-
 index.rst     | 1 +
 2 files changed, 7 insertions(+), 1 deletion(-)

diff --git a/ecosystem.rst b/ecosystem.rst
index c9ed9956d..53c0f399b 100644
--- a/ecosystem.rst
+++ b/ecosystem.rst
@@ -78,9 +78,14 @@ Extensions
 Client-Side Libraries
 ---------------------
 
+* `supabase/postgrest-js <https://github.com/supabase/postgrest-js>`_ - TypeScript/JavaScript
 * `supabase/postgrest-rs <https://github.com/supabase/postgrest-rs>`_ - Rust
+* `supabase/postgrest-dart <https://github.com/supabase/postgrest-dart>`_ - Dart
+* `supabase/postgrest-py <https://github.com/supabase/postgrest-py>`_ - Python
+* `supabase/postgrest-csharp <https://github.com/supabase/postgrest-csharp>`_ - C#
+* `supabase/postgrest-kt <https://github.com/supabase/postgrest-kt>`_ - Kotlin
+* `supabase/postgrest-swift <https://github.com/supabase/postgrest-kt>`_ - Swift
 * `technowledgy/vue-postgrest <https://github.com/technowledgy/vue-postgrest>`_ - Vue.js
-* `supabase/postgrest-js <https://github.com/supabase/postgrest-js>`_ - Isomorphic JS client
 * `SocialGouv/postgrester <https://github.com/SocialGouv/postgrester>`_ - JS + Typescript
 * `Kong/py-postgrest <https://github.com/Kong/py-postgrest>`_ - Python
 * `datrium/postgrest-pyclient <https://github.com/datrium/postgrest-pyclient>`_ - Python
diff --git a/index.rst b/index.rst
index 8bd6b3ec0..e779e5494 100644
--- a/index.rst
+++ b/index.rst
@@ -209,6 +209,7 @@ Here are some companies that use PostgREST in production.
 
 * `Sompani <https://www.sompani.com/>`_
 * `Datrium <https://www.datrium.com>`_
+* `Supabase <https://supabase.io>`_
 * `Nimbus <https://nimbusforwork.com/>`_
   - See how Nimbus uses PostgREST in `Paul Copplestone's blog post <https://paul.copplest.one/blog/nimbus-tech-2019-04.html>`_.
 * `Catarse <https://www.catarse.me/>`_

From 82e9895e1f9bda736fa51fd54474b35446e6058e Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Thu, 25 Feb 2021 18:19:51 -0500
Subject: [PATCH 381/652] Update CYBERTEC logo and url

---
 _static/cybertec-new.png | Bin 0 -> 353666 bytes
 index.rst                |   4 ++--
 2 files changed, 2 insertions(+), 2 deletions(-)
 create mode 100644 _static/cybertec-new.png

diff --git a/_static/cybertec-new.png b/_static/cybertec-new.png
new file mode 100644
index 0000000000000000000000000000000000000000..15ec8d4abc8c836e902c9f098b925939c91974ff
GIT binary patch
literal 353666
zcmeAS@N?(olHy`uVBq!ia0y~y(Dh_s;7;RUV_;x7(WWKJz`(#+;1OBOz@VoL!i*J5
z?aLS#6c{{R978JRyt&B8d%!_}WntOh>V4M@IU^qI-_6fJ0(ddYngrDh8MEz2m17No
z(U8F!EDQ{zX$DuojE2l;$c$zWoM~V*d*BS3(aHu_(2R!6XvmBf9JtcJXvmC)%xH@P
zXBrsI9yo)BO7&{PaXHxu3=9kgJWXHu|H`nhRlsgz&1re;64*sYm17SV28Pj)84a1y
zM1U&|jE2l;$c&beIMcvr_P`l5qxCATpcxIB(U2J}IB=zb(U2Jp8LG87F0Q_H8nzYy
zN3f2T#yA3ojEtDv&*#Cwz#zeP@K<|XUvroME~BxCH{}0h#v+VMXjJ)V$S{m1g3&}U
znh0>Efzgl|4H<^fL@=5NMiT+fG%%Vya0bn2;|f>MjE2l;$cz>oxYEFo37KQWthD%`
zTaVMDSR_W3V+j<n&}hhjg8>UM8ZuY{1uQfgGT>mqLX3tCmOudujfM<37_bndA%i7Q
zz(S)T0}ci(#AwK12^6r<Xvlzr0Shr2GFSoyEHoN2;9$T)&>>`+&pen&U@gGFI1G!e
zIE3gBN;quBB0TCCEP(<RqC?0~u+n1RQ<BcV7*!6AQ!K=2$Y2Q+u+V78fP(=GF&Z*h
z0tGBI8ZzKuz(S0M43<Cv3yp>hI2f=HqalMOP{2Z?Ap;HuEW~KYU<nkk&}hhjg8>UM
z8ZuY{1uQfgGT>mqLX3tCmOudu4cCx4cJHpNX`f3XLvHz7>vIh04aNs9t$uWMwTjUO
zV*|+<997=YYc+MP&lp%A_;JWGG<K5VkLPtZ_2S?_K_L{j>5z23W{2)+l14j{PJbe4
z7s`!Ie^A^<fHUfRya6;C`uKupH1XgI9fr}wgD-eS6A!-78BIKRLuWMc;0>P9k_TV#
zj3yp@p)*?Y;0+xbB_6A9zw0s90t~in{8s-bBU0cTxo&n>Z|Romhut!9A6e_ae1HFP
zM$oQ3kG?J!ud9<h_U{L~ojH<n4CbEQ+g@(dT>6*${pVYAm#n{;|LdAwY5B|Zb6)?P
z_t@au`kS>}3=9riHJ8p{Mbdjf{*u|<7=aD3dw-voJOA$K*Wl$*DI3get7~HZpELM&
zem*;rVsvK1|E0ORa_@%jx^Z=L#lM<W=kL$@!EbwY?~?52RbtcA_ZQ0@`}gNnIRgU&
zM^3QUMC20<4@hUs&WjcKaOrQ1TtWK1@b{IG2fyt7o%m*XL_9aTJxKh9|BG{X9e#B_
zZrA<gQ}TFzys}+m_h9F||9AM4>-oOzWnf^qv}{Te=sF3wCi@Lq0ynNs4s&I?J>}Be
zpBuH*Bc=<=1ba>Y$&*}fq5@Zk$!K_e(d_Q`Z&TORZ}Zo@+wtbK^;OxWn^(r|e`_Fn
ztnSw<W+n!Pb;p-YQQ||=``~oe>^x2W8Qjd<Rtq)${CBRN?frv=`<`r^CalxSGClE4
zKO3@gB%NU9hu^oBMZed)dtE%{z0qF7w0k!mZ(6?Po!(sEuT?U~{v|zNU^q~HdrA<G
zBv?6w__5{Ivgj`6dGYU;o)fKJA)gx+-@b8v3+N6FhyqOV!})ucV!bkJziBSbt*yy+
ziCG!!^>R{>mA&=x#5ej*%nS^5*OyI6>Oj)z5RrR1H@opbkj927oM)~}pZvsWdv+=F
z)}9ADw3Gu}kW^wYYqWAN%f9+<xu$H|IcuMM)wAlQQEzqUuD@I(d+eV^0RzJWQ?sQa
z%}hud*Tw0I+_<`V{ZgjylbZimM2HH`d2Pv;TyLm_qzIk);MNx3?QgVfue{#(&S0;o
z*q_snH?7|CPJiyR<A-m|@8x7*h{*BMY(vg>F|FHPmTh%N*uU%Cb2q0Cx94Rs9^5IX
z%7Sh*68}JZ=InO?<<r)EpMKAi;ogyz?{xld+g~E_`(y?q!-Lm1rvx2Aj^dgX+g@(l
z>XEQtOJv7%ray-K-aj3@GFPdxq!%I?iox8!DtDLj-Egb<Pybz0c-UVN^Im6dwYPd8
z1H*ymTQ!$<AP=8Zn6D0M{QK(842zZz6N0R+F*Pk_LJmxH!xJu=-Cg%i*Y?WZrJw)K
zWpw0No|^u$sBNQtHy;DTquW!0j&LAp`Lhk=0iOo}+^pZcSRVve#Z2edz;SRXSX;yS
z^|`xh?}qQPGhfv1|2%Q)_AfR)e^rtg7&=mey#$ey?g#H%%WhvYYCOCu<iRzOho`Gn
z9c8{8<YdtE_vU_lLp4V(o88^Cxg>o3_oNp6w_DzT!e;q;I{^lU9ci<Jx*EXlfDjGh
zTYa~$O=a@ld7viGm*+?4@+cdFwOkzM+VEwN>x*-D{mn{$S@Z5F^PWSQHzTdy>&qVd
zmyyB1P#|lzR3s2$IE1`^C8_c7s)z^YN*c^R{a90zU=#t7z)Jp*$i4hF%-Z|;-=*K(
z`1dSqPv7l*zKxrKK|Vj&%diYd&yPi*&~a*X))f!XVW`=1Iml)~4U#+t^Pb=BlGEod
zJ*~>#bAY{Sm9=+&Y5vQU9}Em1{+TTmNk;N;gZ`r2U4K_aJXjFHu*2yTzH<HnH~@cp
zO~1SJdm2Z~!r;5Hzs~==l=$Yn6B9$j_N|&rB{Y#-QWKPWd2KiAvts3Jg$3<PD-!nc
zCD#ioA*o<sV5r|*UhiHg8~u2LxYk|gsZ0&#OfS71F4W!@pKZ?c!!^N3pzFXKjuvHu
zT{CXqT<m#3gNc{XXRpA)nyW>Nji;$bbFe)-|2d?zx8~oE2U{O(sQ&(HD~bhXk$$Q9
zd1;w*<9}T;XW7uS?$(`4fwQBnCb}>%?3lmyW{z45lKKs5MOy5|XIZ~J6^#g%-=Aey
zpnDNX8lAaj^PE%n?%cVwt4viU!r46jtnS_^DGUrdW`oR4K~lY8QIXc?Ue<3<1#bj^
zjeRSPT=pQT1Th;zrv=}fJv%z;`nnb-=@)5vc`uJ{koTz(W?(pAe|y&1G$-UzNn2_8
zr>u1w9n|v~?tj^6CcEM+d)wax6@2Be&h9y<{ANd1-LNZH<$aL9?$wz~w@u%$3o9})
zH0-|xvH-cz@YY(s>3e8#WA09-9h><D3olCX$8aH6;vhF8<I@VujqJC7S-OPb&dsZD
z?_4t5{UwTnk>N&3^yZs6my?l|daEukx*f5g?%gTA1I@c;X4@1j{D>@%&hA%T{%O@&
z-L<QQD;n6pC+6k7T>62DVMFJ(w9PY*Ae9pbglA>z6-WsFE@J$!!tR`@oCK#Wx>-nk
ze%0lhjLo-ise8wzcVO|(mB!xB)27F9+cGfBPRKT!?P-Ff)<)?pE5o#FXLBzz_TtMe
zKO`-uh8J)4{?00xkXbWlc661dE(61w)u6Po6Un>{36@j$UW-^@Ch_8kbb@Mz4U!x>
z^T7U7D`n1|)w?Td*s!#`*m}E(lH1|B0^L*whBe(FgJ&Y?*uY>pHC(Xp&MfXdBFPO?
z%S^AAJaE#&lkUvI{ZiMT)v@jAIJceYz^Ur^=hLqJTza_9V4@!bL)gu0IcAd`kj$@8
zu$+4MTFioVxrM9|-sW2$9*B9|n4O7Kwje16Gb8dXr|vb|{KY~k&ddD3tzQy?&r8c*
zZjg`hGG<^{odybNDX>Ba@n^}LQ-0Zc0oNT}a=KLy9IKQU6ffodeQ@g+q?m>%MUZRS
z=bT#IVUf4lyL_o=!sD2&JC{B`Tvwp^mw{nT6DWv~3+w`R%c*m(MJ!n7_l9A{XL#mO
zGC-Jz!CI}lyvV?OcS-m!h73^7>5$<4eXw-_1H*<jpj7w-NyCBtCsw{WV=DgQ2zP`0
z2ScTE*`FH|?PqXEAgMuP9w>sw@H91se@A`iM&5chEsjHsf#GxtD0q;o;~Hnb)bw>b
z9n{?z?i@beVUgd<uExZPW*!pv!<Hhg_TtUn+m|vo%r6N}pLXpgC~}2d7#QZ=0!1!z
zsghBoWnFxh)vAy&fzi(GNMx>^!5jALOgyib+WPOC6c(}K<OX@4772!i&?&(ytB=W^
zY(5&j{n+|@){G3<hpg)u9<*1^=VD+uAX~|PcJir}GA9@q4xEqNzAK(Vu5A}64My<a
zW4u4VPMCp#;m*{*77TxOl<B|OaaQlHm=%NEjnKJ~Qi9-k+rhwK(+Y~W4@h3g*>df{
z*9~j)E<a{Gu(;~J6n_lQ?}J+}9IiUC@`{_1{!(GFXKG5{{=8#hNVvM?b4RD!@edmJ
z_<kRJY1O*R)aU*52i}Yf5li^*|ETuAH7or5<9&04B~Gz1yw+SERDb-vw>|>{gMG%^
zEY=8JOVPs*7#PG}zmhgp*}g9{UMT+hj20{5hN+A4K<>GAc!PY7=hMG0%o!ON4#eK<
zXFgzmdgY$3j>l%ZOTu?BRH%gK=Dqy6K|Y4dih-g3=}r%%q`P5dkyiWKod+i7GcnBb
zxPEQ-oKyK*KOWd1ALGHcW{)s4OTxl!%8$1EUBk$5K+7`w{N@8mv0LYxGcbgm|7X7M
zQU2fT`ia3a|DXP4W06_Eudm~D{+~*tH|&$&|NRSc8wf{O?ar+|z5m+uJHJ+)Q`xu5
zwDa5ZpZoXam}*@8x<Nh$DX(q_D$=SJEWC5=`>RQe2@_wvpCA9~)XJKkj?ZShL+V2q
z7{p%f{D4#~Z1617TCem-MTt*2Df$y*gpzyd(~!KZ!;Kvl#tOn=mp91w6lwj>JnPbM
zbVYB~xxedJ7!pFCgz(+^EuZkQul?_Xs5y)bX4l?@H>dB)XH{BW^!vD##DiUHZx^=*
z{@(K?2bPdGT-&$K^ydHN^*46Tn*8eUo%!zfe|+9ry#eGq2>xJFq-DJ|yf9jSDPx0b
zP`&=&sBpif_xvr_fA;?Bz{-#yIIkPIv+!DP`6l!02?^nc7$b^q3l@fi`#sfCIu~`h
zvGd45FU#EX^KV~b;|{KOm*dc9V9<W#v*<zKAG0^?$_v>T9`HS5zgF`0^VzriCj_sQ
z|N5rx)7qyxu*xtY`R)0?&FBCBe0^*3t7Mm$?e_PtS>M05IEMfC!KL}i3~;bx{~WKm
zlBE{cqxl%7-K>jFx18E-w*8CKF$RVTjq|QTaD@yFrBi}$W}ap3+b^ZW#;`iYT&ZrY
z_VQ1PO6S`DK8RsU{K@<KU}<*6*WD!t552iQ-*~??BSS=)<<!X?6`Fw?3d{uymCi6Q
z=p4w4u3znZdgYb=e!)Un!Rc>{L+soCJ_s^`+4SR;-@)%$0jv1me%{8HdTCme2uy~7
z;YZ(`Q>(Ad-f>R<u9!MQSis-ErI0YwQ+kwhgI{eDC&PhS8*$_c_L`^PQw60yQwfFy
z-m8w&e_Kx7ymJ|ITf`wD>2J;5b58y4c=3c&?3vE;BEvWA*PVD64j7$U`NrkQ$|naF
zTWqvvVR+EFC+Gj>-)}$r{@JO%MqXZdk=^n>rKC&OmZpcpT(<Awwtp%AU)Qg`y6Dc8
zTa&~3js9CoerxV*KqS)*nnhaGxoIywUEX-vFk~<J7x#PVx;dxXJ1jtn!-$pPLAs5&
zDa=3y28OWMY=eS3)7Y39*6e=UVX;bkd6B4K`qqyP%a}K8$r4`E{B1M0&7NPIOK;U(
zV_-;-oO@IF(BdBkZ`hwZ@iH6`s=B#v$={#)y331%1*hlwzIwhvzDEUiK4L@t2HWuV
zOK1NdFVgz@_|-NsRi!NcuBiSZ+c)gfn-GH)2dqx4yfSlXd;ImwOb2G&%73l1yeQEA
zt}r9R1HF0OVo0uC?bXc4&~dlp$JTXoPUQ<0+Pz^{PHcQ?_=bJ*oKu;<BU!~BPoHyY
z=P_#r2A$b+PC2^Bc=G7n@pX~mHfCVZPOHwla3I}s>aRjk!Ren@&$IN>gPCoguzl_A
zSyRkEUf(svbG7%+Pb<w3!$l3L(}QnzcTB$4UJ-qW;fBNQ+;2w%{g&Pnw9MY@y}s6%
zf#HMyJWvl3W*Wn4mu5zWA9}v*37)*a4@UYewcEdMigLt^U%THsR4_6`7%dlK>IbJK
zP$<s2k-K{L-{U7&-f=nd^pDiHW^YbdL+b%w-s_-m&;M&%PW|;!QEA=tSHWtpg5mZs
zRCrlVo!eoNQ|$d+m6>7Rito<g>=HdY+Db@{fnnd%ohuNE88&bgX&sm1VK~5lv4mk-
zaP73e&Up!m-(K%4yup92Rf3@*^};#RIhh9@)yjNp4lZP4NI09j-S*k^+BCnVbu}Fw
zQTzpw*Fi0Fc-H<PocB6t*X{pVtNnjU2u{BJOT-kZ=+TMtOVwA(I{)zSwRT>HANv;X
zD$)uUEWDOBJ+51vfnoc+Zcr7Rvn|iYb_Vx>)g3o}w(p-;KK<bv`F)?)```L?Ek1sK
z{ohALmp?NzF!<{(H`=d%Bm4EW@85X7+HbBtuK&0CciYA9|Eg~A@B8;1<j)A_wFeJ)
zy2xZ3FfiD=US^CCI$T#UGq_S(F#ib)IQu;;mjxTO>GHj!4Bh2Q#~2uLHvIi5XRy}n
z!KSqnt7m|W0pUBBPjB0Gd%v%rYLx%SleufVtU!0Nf@ByN7~W|wFS_$=+B<GFhC4U&
zT>eN2E-&qio;y7-U7bsrf#JNl9Vkm~Shnk9iN4aaaM@M=R{gzv?fhH!KkEPEHXgSZ
zYb<&E@~!;(sN~IAU#>oX`un>6I{6o`Sr{66Ck0z({NEE_|8DD|&Bwni{@rH2y*{IN
z!s^-AI4o~H|9a<n$_;)sP=n&Ysgo;Z+>UgzF*AHf*q3Kj@Jfbt-jT@cC0}o(Z`z=l
z)%zv$wm%cYfnclJC)PC^R{k@7!>)XjouNU$?DnfywP(usKRfR(j+{T&{czm^fB4|z
z_pSG@1^(F{|08sD@XocNJ4053yaMs}0sE6H-)yxsKK`qU`9SlHyzjPsMOs_cLG}F{
zZe4~0&p>^tOQ4l0+N-4fvlCro*DEEdEAicWewz18rtP0ydA;Y<O83_PJ(Q5mz+e{V
z_jJKq>1W^heoISC@6SDNFzdE;#snS)28InOpyn7aTiH`~1~I?Oj1^38Wwwh~N38gt
ze}i8Slv0;Z2wrKryPm^N=T7L_iT9VxDtJGYfuTY{{<iGts{2JIZ`g$!Sra0khPX-J
zl4oRKXqf-G>;}Kz(Z1!Af(?227#RM&d$mozVs-dMahV^9uRslh1Y4fp2d9PH>qj)w
zRx2zoy76pUnGhQTce$`&dT!ZDyCn<^($99bFf%Y5`1JbN<+)ZXD)ZiE?)z-M{o{|I
zoJ+mSFY+DMdw%W7-`C=cm;UHtWO%^%G$ijkPwD=G3wGs4e{@fO%U^%f`)SCt?>v*Q
zDcqa~ip&QSw|<XS7c5ly#_(aqtD7h5{Fd_lw_o4O&NI2?=<4)ImQ%k=<s5XHyY&|*
z149K@`XavmM@N49Ffjbk)W7{JX8rWwon0Ll-x{rfL=*!<1N)ZSVSA(htNn{!Uv%?T
z=oc1Pk;1@mLjYW8fVvD%Wf|nomhHa&QEmCB=((}4?ARF&Jgd;V4vK@AT_3lI1?=hS
zX#V!oOY!L5D~C7y-Ddat*yUdzH=5e~-g9q%-NObRhK8vVgMU_?{}A-8?$-TpJeE^`
zRGnY2f{%fLA;GXn>-gG}2lfdtADDbA*O%R|NK0I>(CQ7lux4ZHs`CdYm!)yq?D;$A
z)WZ$(F&(-L4E-zT)>?dTI9i>5o}Gb#f7vx2nXRGUw|%X9`l1Zf5ek5{CO<Tk-G23G
zz3oBwwdy}S&cjnLL&MjJ!8cbIUsQT@VUHR^MbZ4~3ETcHPCr~%pr^{f@H!XNsW4<<
zV6a)3XHzRG$Szp;d#AR%|1;<8vTr*d-u!)C-^7NQ;latRNw0s_9^SXcM$&f@D1zi1
z{8H7G{FENukhEmb*&5|vYW0R)IkV~LiIrE<AC({C<}MD+)@}RyAgY6rp@QcvPs*Z$
zMml$VZ@<rtu`TyodQbZWxD}qTxhA7rTfgn^gP?be6+V_zC(3~wf9K%sM0*QSgLz(l
zM-40(7%D8x<G(Ur|IK7J0or>wT(?1W>i5O>K_zB+sy*L<O(#~$Y`eKM>mWly<<-di
z=YoZ4_oNvPR8{G%XJBCXuw&Q9EpZ&HUx)rS`A}2&=Dhf(lE*JYvn#$;?ydiu^q4J;
znc>3^P-9_z!S1r9iJ5zHUT>ar>T0;}B;N0!-0*|_?cH!$of;KCh7Celx}o>ax%h#a
zV7DG5UY);s&Z&)RF&hkauf2G8r2sR-2M@oy;w|oh_rrI+=VV~$f4)ur^z1pOd|hI;
z?4By#1|PEBpzyWM?RwbS=#~Gq<)1y{h+P#63S3B{jj#hJ%N*O?<x4pjrp5iO{k!a3
z_34!{pqZNub)e4X7A6LU15BllU#{-3m=WDJXZ^a>JJZq^e_tPOVZqGs;NCN?HTmCp
zyVitXkN?Kg^%i9AzbV0%8N6)YT3HyvZuz>*xtbcFVl!vXsW_J!p`eHr{|npr84fIZ
z8uH5akUfi(*t^3U<YjWQX57A+y`LqXi-F<JFA2fYhJ!~p$j5YXG4SgyHwtR!19kNF
z$bM@MW_-NzNeE9fGeg7iuOC;>dr*~lU{)Y_zUp=24gPIQKGl7h&A`C$VBMSJj1^qD
ze3uJd=C~Z$rowQ*>$fhbO`D+7%fPVu{Z1K>&knyjc6n}xMNdcbwzAfW+$%A1TSJR$
zZ@+o-=<jQBzVi$WKN8ml9(lX(;nEXpd-uPQEYgyHK1(@1r>cN~fuZ5-<lvROY<_cR
zGatCM!ngU}6*ec!sh>M6q`x(HemV5_%KXK1PTl_YnN{al<?4$J3=OVU!m$-1>W6q3
z7`&gRM&}o4g>Pl=ww?+KH4wI$bo<uS_(!YfJy_fJGzw`PQ%rmLrt8n9$#I%8tm*w#
z{a0i8r-f&AucnJIB(&z9O*00ac->I_>e%IQ!9oGS<7<D4&VIhk)N*xuy7>F}{TE*F
zFf`~FX;}*v-uTA*wK%%O>|Fdeo>|JEy#0FBUT*8m=g)Tw@iJt;-+n75;|9N45byWN
z!8=2mxwyaXpY?=+VS|R{)GEDCehrBa!JS;ScFW~K?^V8de^|=EaA5z=%<r1+??RXg
z<SnQE+MN<Fz{tSx!%;du`oQH=D<#<285mAKbzU7W$@}}DM_$6$71E%<`)crpJvyk;
z{+BNU14BXhx5o@NZQtH~3Yja;kkhi-Z2Om(U5pH2=da}~(+3r8e|o^hM`^{+M3*;Q
zO7TA>1iv!81x1taK}LofHkMQOZi}}F2{~(CbJLjTccU%Ha~nS0`n{p5txibrwh<SD
z^z&MmIg(tQ_U8{UM(nty@cilq`510f1_pl3<(q^Bg`X>LDEL--Pmz&f!>z2?gRZ-S
zU+!URke?PT`4Ut-ACN^$fKN+>1s8Ao!rCsn5Jy*igNNnR+dG%)vq~|T`OTFqShZh+
z;Xu~SS!cf-1=W!9S9_PQS6U?IF5`A&-GPtIc5X*1Z9S_0|7ulBXJE+IS-$D|H}2zH
zt9CZ)SF`m_1ZfGqe6RCrcdPp(b_SOt?Z0vi-mohlY}kEz<s8=|`cCZJ;5xTeoS~sT
zMW4N2t@3?FhAIO?_T$>U{+SCH8SIso2i@m<%MEJc+k2d~@Yh<NBq77Vu%>Tyhs0K^
zX%nr)BK&aG&D|4%EkRWns|17DJztkAk+SLUQWzL?_OHF^6EDNS!0<!;ZpAMxrL4pw
z3lDL~9XQ@$vEKLGz5R8Df&mN-SEmQx%>LcFE5AZ>>7C2dZ4YmdzhMkY_1@acgU(;_
zS9;_zjiDj`N5E`BP&z4iaQtaVnbM+p!g<`%I%ob{^s_TOSh(f$BzqPSv3J`O?JdO8
zoV6JlBD~+fu02(@{89ij!#}m<LD?6+xw0`ZG{}DewLVz8VXcp_>+L(O#L6codg4re
zQ_TEdF3~lf%FwX>uFH|g*k4^t3_9zd7lBez{q^4E;K7S^0v{XV+>Wd-Eq$DsTTm7!
zJqOgfYLsF)pt80?47L`4E3@@Vdv0mbapqr}(od|Ec*o1Yz@Rht8q3!!2P7CC#9v8o
zwOd{kI$yT!?}L~F5AI(rJ~+o~ZS3FJ9SMoA-Y;Q($jb1baSo@7&K=+E20jLcHOtqn
zEw`L{|5oiO?wxF)Py>~56W?zCn*DleV0MICRwPuAfuX?{)S<6!e0}SiF9So3d#ztZ
z@O;T4t<t*Vk#mo0L@+R%P6buUpz)6@nVF9>bwLH-<7*{ca>24!%K!cQ+C6avGlS0h
zIj0<N8_ReK_rF+X>S8DVjky|R^8?Q<<;ly>U1n^UAHwc1kMH-voeYQepI&+8^FhBA
z35ox%J0yXd>p|IF_dy=`|2gjC{#!e9_v^&-Gcf3!csuu$)r|*16Bx~+{Zf~-$uclB
zSXWrTVPDR4EcoO~aB1;+`L#_wQMRW+RlsRO8@W<Y3~Z2V`<vjc_1=9y$l>o!)yXu>
zpBj9#vt#nMZLC5JI~G^*KVI`yq?DbRA;B}}Y}&6!peEJLT_3-MYPVU02pkmJ(bZwK
z;rE}vuf>Hq85t_7ET``6u*k~}_o_$=Un{WQ%z0ZnC=kWgncCW#DzGtBD12S>xa0=^
zIaZN<>*of?ugY$1UAezMF0+A|;lTMU-&yM4ayJynxBY$KFysH}3tkKiW*4U0>AVYJ
z%2_t&l!vZ00|P_(2XHd%fhEIh_kVXtycFc?cfJd<YfXEi{f$YdeqYRIVqj?4y-A+^
z!Ma;}mQ>ll4|t!;@PP3SC>^F9Wn{3~n_k4gz;HkfRAJ@W*uFb<`E<t*Wu-n5*9|IV
z%8z_qYF-_?+?{7*J4J$_Vfn;h%QGuuuB31N*0W7pRHyM*?T_rg`_|l_zxE|)fcHT2
z>i4p@5@y^hkYISgcy)7Mx#d((zo!ui4{zTxxDx!Z5#&$57IB7#YKua7L9umadSCej
z85n+CYF~QIWEFfk<3VR>vF#!KVl8#cskWYohDBK5+U7GW=Ul&aqQl}+wKPM8!tJ&5
zGv-ED%?iFL7{So6e6#87vn}!r3=O>(dzWw3ypri6qt%ko8smB-(q#^)2O9N=fkAA!
zsPSBvBZbm)cve3+JumSF{~OSRZbS9Sl`>n3zt&D<VUTmQeQqK5t$AX?;rmw?t`Phf
zl#!75FZ~9;+97U+1F=`y&aRC#-Vl-B{`Wyh&;M0(pMN|3#gviZfbfpaj_#`UMK}2M
zR2dTXJ`Hipy3NSIu!H$4o6X8OU5Nz@3>$XZU6Xsbb=}dwsTCHuip2lRzTR5*{bL^s
zH$w%>*6A-IU#nK>K44(zf4#GUnSo&g=dO=m43zv#)+D;Vbvv?t>w@Ld{;wzOyZn89
zd`1Qv!-s|<t@XF&IWn5AesOx9;_^?G=NE8-M$8Jr*Y13|vbdDt!NjY@eRj(~Eu34}
zqr&j-k%iJf0ilQ)RvAA)!x}pl7c(}u{<e6-z8uu3s5xG?o4;mC@Xs4<GBFaM^a4s_
z3<rd(ZvJZde=95MT(oa@+(WP+h&XWR#L72YcP@3`#Kd5;=$7{vUza&gLbBv98rQlo
zGRU1b-pIzlkPut?_@$ruJh}46nYrJ-RJ*+KHq(Ar=5c>{o{enj<Cl#sObmDY{hk^u
zH|pxJ7YW?Vwhz=!61NnE6c_PV%Q@c4M!t`cWvFoaYPn?ndDU|k5B9hHePE<?kBd|1
zOx;>p!8itnx{&I+l6g$s;1PlY{8f^I@0F4!1zVn9xktzX<XRA(7qK?;=hm-W`_HVL
z^CaY(3S!8pLd$aM+&QNr*XH+hD0eb2%sWx$vM00F#s9T&mkR@f&OKv8kZ10efITzs
znsd9^k(}^Jk<O(v>hAY0pPXl7J1v2sVfV?EGS5R^&3pL$TMp~%Wvi>(t}#G5j6Xob
zTYjk__Z2JL*%)*t{w+IZX!JmE--@#b*R?Q<J@d(6WcVSt)^gEv_lQ0Jd43=Cn8V1>
zV0|l(dHTPC^{@fg2GvhSN_D**{%fZnE8M*p(bL~hur<$cd6AUh<c=S%M;IGa1Alky
z>*TNnMZ`g4N08fNOCG<BGoLqayHkhx+Y5}>?&i7dd424%r}?~jC68CSr7<wvFO0UC
z8@zMf`GB{PT-RcA8~*4mHwv5p>WChh|NbQ3s|8CsUMMHU2QW0KZoSWDGw*rGH<eCb
zvp4Ktdu~U{>zvEWKE}?#@c)_1UqhWcp)NNTGcquIFRfnxY1dutFwpucP$V!MFuIZd
z_v3&4<wX;NEvJZr#Xv-YV3C$}uH0!ArF$+%wmC2}cxP<?Dlqp+$eC;whKLEEIhJh<
z3=C_w<k{TKcJA*_5qhMibnaEv|6fP97BDdUiL{XwRL|9%lXkfl(T2;JFsEyCDMP~4
zzsv1TTij2W{50g8?fJupu5A7iez?v+Fo}U--_p68YlLJXcKnz9*36ywZy#tN^2_O8
zUl|z=2>ph(`aKy|t1b`vzrQ;E7O1J>2rd&gRA@owUmA9=`ab7;bnfY;FAm19#L+;V
zt-Czv{mr>9N4_mP&cqO5DSzuu&|hap2DuBy2U!>x5<*L%5%lnpyAbF6tBV$x3mU#W
zcKLFi&0Rq;hJ@g!A!Sh?zbvs;)?CoG)7JU#&lUFSNuV_FT6g)T>A{8D_!!pgil38z
z;Q6sc^Fs{Wf#)xsZxLf?s4vj7*ii7k{qF;(8H@}KtSi4xuJwCrw7f{?1Ss4=Sf}&t
zwcyA7bG+WJE?l%8R8fOO85lkoXZ5d*>X#7AkLp!oII!ww{$FSJQoY@87#VDO(jRd!
zFdSI*^4R6Qc{XdEkJ@i#OgV5rce~R<P@*b(ypk=A;lQyKXQPX?mVb@(_-ImdeY&ml
z-^z<$KogAD&flpvN`K98VAl@Y`#aX0osu%u*Z2+lb-_ZVj~fhP{hoq~s2@>&PdAu4
zv4}lCR?W}A@L=Meo{sX;hRM6(y&j#JcRPNVD*e-6UUc!@7Kp1s<e$Y+#SzunSLLGD
z$_X+gT)ir(IKN2ix#d*bn=A}F=BGbm2f6(P*zLCK*;xe(RSG{iZv)kZKD$1C2|2;g
zP#VTAc)jt+*PF|2nRC4@{;bxoZkuyzV*zL?t?I`sTS<lkyH@&6x%V_guULzH(`hxy
zZ_QEeza1|nCZ1~*V`!+{YG<i*j)hh1T?wd4;bCB~S#)>j?y2c)av&Fi@P?FK9Y1WB
z2fdE=ySg1D0KxIAKkqKmS{zk;qbi$`Va@Et9XoQ$waZe(86G^h5eD^Fr^TAjdsp)K
zWu{9_7CXy<ySdjN*4(YIdU@<}@<(QdYo5Att6W`51q!7-_UIlgNdNl$S!{Mi&UujW
z+N<8Ze*N!WwGl&t^PZj#yX8fRGnA#5&3k^=!%F8!-fBlihK6W$DeJ?BY9+ok8z-_c
zFwFB<yY<h~Z>FbK&RGrL_?B?;&9-?-^P}o}ojF0N5M(w(!`ZOksaJO$vf8h$^v&E>
zj^V(q+j-^MdawVKy<}t9u{%A9je+5S(d%QEFL%t?!p!*KU)JYM<q(%Me`H|@i`ACe
zl~di8%h_7}dr$g_l|DsU-@rqRO0VqfmIvLRyf^!IHA92%rLBp5>6TMvXQtof{q4AR
zwe94Lh#8Y_o$;?=WXL$*`p)#wqq!Z13=A7o`l9|GZ2gT$Fbi+RKmLBr{?C=U8DJ-a
zh#NYkcHwg`hyG68y32{7!8hpnw*9M%?|kKDW!N!0{Shn3&99DKew=4BcZ=eq+ml%M
z*U4@8dbh#~)N4M(&9G)xluAf<Yu3ep>TQg2*Ph!t`=w3^-Uw<DHmHWOi(LI%efPNg
z5${SS2D3Z*f`ROo^Kz;bBI*y<6-WunFO?EobZy;yPF)5D!9qQb4F#amB?y#PRWF~t
zyWZpr$cZ4_kh=MHT2<|-l`$&{;q9e{uhWB9e(qAs^%G|}pjLhJSKBpf(dvD|3=IG7
z8XGb(FeJ<@dHmARd|sc@quA^fEIQZfT>f0_UH<%T#V+M*3<ox?c6BUWQJ^c7b=2uV
zQtdtCCn4vGp@FXQ%FcFqQ5d_(*1y&a4E4AAI^v79rngyaV)Rpy6kGPWnuQ@@^V1N%
zxd#s%igi6Q(}0<Q!8>O^udRfoH7rdec$Tg`mO3fe@|ruSn+Ng-1H(1%)%<f@j?6Zj
z&&|+af7M#FH1Flg-y#eQ|KH5~0cv{l?D|-;UfTbB_GOjBhaY;%xE@&|?eE_z&k*6Z
zl|y5Bk(l88H<AxLYwj6eS!DB&oq?fY`PFaFx1KzpAH>M;Ay)sk!13-mr{)=K>}&g*
zAR_pGVob!0;)SdXH+<GsKAidG@F7|L-v_sX+^e0i|EfYykrulUtlT>wbgQ?cd~N@a
znQ@@99OB{)x3bQ!zV&<6RrYsY>I?_WbKQ^3?$~i=r3{xK!-4I#!k|I3c~R!`=3Nv2
zC0M8;`C*Bj{D#uUFPBLB^FC!}nC9m9bcb1JZ%2Fz>%1%A1d=oXl#^}tRe7#^cl!3y
zow=F}3_lcOvn>j=V%DtuwYOGv=LUh@b@dDkIctP@=O;d_lm6B`5$xnNd!=7i2B&1b
zA#P(}n0BS?_4EIl%ZnDCL$qqby!}%3mlwrV$8EhA&cN_zw^j0!@7IjKOs!yK_;b}5
zw36w;N=Vx9Q+ni^J%L51z3RZV^2aY-&F8&4$;t2`Bx|F;?yt^{@^3sFLdtF{yubC}
z26zBmY>lbpiuWh$@_!dGFuYqf&vf5OP*!bEI&LNTt@(9_#l(<^8N$yWF)++tYWsih
z#IlGL((jEK7#c*k-+vcz?I1h*Bv3~T<opAZUPaA4o$B{AViJf8#tA#0hWIHzGE(YW
z!o~1l`IUJK>z{<2E7G!d;$Zl&JRQ_IJCF<-&Cj#hyTW&ZQc^fmLgv-9)aiFCs<d1g
z4kWKSYP<Esa<SiA7Re`A*4{JTavC%Ybbxtwwg0!1)kX{r?18UE>(8(3DblKTI<-sU
zTXWRp-*HZfirbVQf!bnbUC-?!_DoK+-yxRHz>vUu<<_}4Sy+l@@P3!-vgb6&!|Gf2
z&uoEb#RH#CtdzNCwZEg{a@tY`h64NjE-riB3w8P!7zEEB0gYQ7ztX#0{i|#3-^B+G
zd#zyg&foR%%O+`m{v|vN5nG~c?tbIh&tbNv<vggSN%cDl4r@7&-G82eYMZ1t?k={s
zEkxt5d8|FZcVa+9$GJ)ih68CC=WE~D9!dfg*TtZA>NTIW&OfGr8ozHm;ZvsGS)jT3
zzh|?~_s%)h=Ynwa<(0Loi?kMZ{MdW-CnLj$f^Eu=Vr%bR(idU4QF7i4JZo;#muGYL
z^|8x=*(F<a-)ty~b91@hyFC4F#VSuph7S++Y0cY~-f;DE<@pK0mX~jUYWF(OWYJ#r
z>gOPLJ6%m*Yi>E!YR5;16_KTf>kK+Of;(GUEybf48hRh><QIFbrqp*-f`K6-*<JAC
zNn1p!zVm#ZwBW~j%c-BOlpPL%lLm-*@bQXWsO40v>=(f<Z@6t44miEtUbk@huU008
z*{^1v0rj0S?pCZ4V7hi(U$F3I?{fAcE(V(^b542I9@~)Ku=NAjrBnPsO}WCgCl6G*
ze7QH7k-=uw-CsP@f_GjhXb3fb!=5hq(NQT;u`IgSfq~&#NcFwjQ{y96YzD260#z)G
zuWV0uf=V8cix?QzG%U6XU-Ql3^vXA$pb&tF>V)|{HBi!1e$*Sl%wV(X*Pqgv!IlDL
z3<;NQCKoa=Fo-Rc_Kz=pywZsy!oKuDJtS1KB;^0wSAQ?Q>M`jp;}1DY2Dt#a26lms
zy{?ZMKQP!dY-8wUH4qcod?74oIrGs7gDs4eepA`syOdw4zMH>m_diWX&D#6RzVG)=
zPu0k~$IWnmEuZz-l{rd}?3DUcII9=Wlf3slWS-6k&`6j5>6J0AN4%p&SQrl6e(}mW
z((kF;Kc6}K6D7{~S{E=h{0*s|HFtSJ$^W>u)5}4XH{Xei@2APfXu{V4TCY3j@Y~<-
z>Bib@&`1l!-#LMA&z}ZaS?e<Agc!pE-z(oYl=?kA>1W08V8WRYX$FP{!;-%N(?#n$
zI)WJw-`lnB^p9P2I|7mz9z;J4$$Pci#bpjR|F<x4L4C`q-l`y%{+||XneEIbr}W6f
zg@GY|-M-0pua}!}OV3<&wJP%c!}=fx3D>{nNs3Vn4STl~gflPREojKVP_W?Dr{?x+
z-3fNw5SKA9?9P)D{C{$#&8)rfOu%5Tx4dXh@XpnLD+LSnf*2a+UT{6)?RQj;mEnQH
znJJPC3=O%jem#u6&VOF8P&>kcqg3+#uGj6Z*ZGfo@iEkR%4S4~|8zT2>mtL+^DXZ0
z|39_T8E?*jEc|btk{~E3&m+meaKrO?ZsOy)p9})O?)ljL=%B_k%c<NKnHb*mf2+H$
zsoC>Ne)ZQP<s=4%2M4akwUqw8_UZ1zc9;_noSVJ<ru45^keOioz<R6X4UlV`85-sm
ziwJ(Voa*cM)Tff6q1G%Iq-@*L*X^^f@f2!>SXf;D`v3nr`IvQ#4E37Ji>{vIc^=f%
z9Lz3dznvenB>F+Z(-6Je`6<``aWOEI-OKem`j>6;<|uu8w<A+e9n270#L93(yZ;pD
z;$Nyt?_78o7(VQ`tIw{S9&9NF4^``R-**2|U;b%EaOHBus`3x1Tc7JK|0E*#y2C<H
zlHq`#b$<tcY1j%QMuy*6%Qi7EF#K7uPQGt<-HNjU-vtX*0xTl7O1^Tw&aZc!p}~HI
zcU3g=*Jfj8nJram5zj-!+T}p=Y3<L;o!Rb58!<2#XfB`s-u%_x<(CXaSAQ)M7W^M#
zAaOL)@2T4s28PSm*?4wsZ!EmK=Gy6gBQ^$xAI-nke$92Uc^;zY3QMX7Sk5RvvbUUi
z+$z}jAUI$_#Dnu&=c=6-yx7UXkPwtttW_HJV&*1BhTmz+7J;1Hu})r3>5;23%LnW2
zvGzH;>I|mvFs$IcA}+O}@&EHEXHfgT{m2AHhK9WbvG-rz`m65aYTI2Cq$_bW*6(Qq
z$Zb=DE3cpPJy7v)Yn1-{C)^ASAEx^$J*xFfy<E2%<N^?Gh&Au;`2QqC?&}^97mN@5
zKe=+w(~wv9F8%JX5aMMxpfcC(Nc)^qhvr!^B+Ne(BFw<h@c!!8!%9lmW+^t<7s?5q
zkF}5CVrSqB_j|f-uB6`|NrwOaxhGb4?_SRWniSt>l)}J}@cv5m`K^u2K1Z|m{*e$g
z=VDvD;`yJ}3`PdE+=u_z+`eimec@zgV5pgEwfL$1*WEdPK?8wc2l*V?^G@~BXL#Ls
zVBzZ8lCAUgl<ZuNyj=L4kzs@Sy4&T#;#^z|Z<=RnF)=WFSi7sP;`-Oa#lJ7gJXkN|
zdgS*yc`+fThQpU;tuPlXT>a(1{T1nL?Q>2oRy@YQ!0<-cnT>(r+q_0*pJQ2jYkE57
zhw``?e$QuQIAF5%`wqXK2_faHzkXWW!N|a{@8sG#PznLNOzp{vuY2}v*_jRIfrx^D
zTW3~0zvj=*aG=hzv!m26HL(2JYF!3{RO7463=9vVOa2zzlv46zWv^NKdY$~d-E|e}
z1`Idq*LMC=RXR6S`iIx&jvG%x&ar?xF;^sw7#Io+cw`d1)+s%j+;vbxEQyt2#uE3`
z=D@#uqV(rZXJBC1cm8=@i#l>>1<u_)Ex7XJ${0<=TH@d9&ULKXz53Oe6=v343=Mxv
zW6Q5?zx$PeVX{fE8OW5d>-<|4AJt0huzb+<dwn$OI{)+_=7zshgLh{8UOC5eVEd}{
zwq8b1X!%T4WM*JsKYf6)>|WO1n$C_^uY($X#aiZzSQ%#YU3>pVkNw!wIV=neA0F@O
zs3;VNwH6PwT*)t!E7E!fnwtcL6$8VD?L}JCOWi_l$FedUNL+E>XU%KA-@8u7on>rT
zIddhbj*Gwa^>E>JeraC81N>H99p7W^byzqVelImU`y}Mm%!gr_jq(Lo*d*+^1Q{3_
zG&8#^=G|S%%pjw~%zmSC_18~&O8?dd8FX2nuV-k;Jh5_5cZc-Trog{jqV(sx@-Q%L
z5dAv)^zUE1<-cQLxs_qrgDqztR$TgyNN)R9?Dovck8#<PZ@h?s!NR7ry>_l})v|94
z2d10};bvfH*njz}^WTTRRh7=MvgVvDz0N;-oqQiF7sKW2vr^~Hm2A+R^*m%AuRa?C
zL&Ei~ip>3`g8nXZG$a@f99+%JK95%>q5ZA~U(X^wxtI<yh6EuoHuu9T>LS-pFIQq?
zV7RgC^R@m5XW*eYr9|-K{9E6H(zmTdbasNL2Jh_Yn0`%~o#8;Db#Dj%vlb?XV54AN
z1_p+IUf21<zqaRh?{5_Rv#VkK>vrRZOb1GyhP;}YC@iRciX-P{X7sIEMNpAicJX~1
z&lyn;hKBo=h6N3=Tch+}|NUn#!r^9EzMq$2!|hwYXFa@Vuul6Y69YrfvUByj&aS-j
zUhixctP)A^%6olg+cwaABqWL%)RaN>US(Iu_gpa%28Nn6KMe*0N#mtV3=9v>m;C)8
zA;^D-(XB*CaP~TR9!2H`&QmLOZq0O5HZ_>`t0wY!NS+E01H*xJ8P05SypjwI54d?`
z62kAg9?@ULyf~smlp$exWqfnt-{P%tc_};$3<kR{cl?+Tyi*uH2_PJlzRmVYh?(V7
z?pAm#CtQCTqNn^wRmtio6T<`jE0zntMt4dxGBWJWS!M+)fa9+7ACI-a;(Da`AjA3x
z*A-J@?R8ps87@x<wp_>TqWmc8WJ7q-{NPFvQ0~cJt9!MwY(5{ufpDXOhPmK+t!2Nb
z#POBsb_@sdvfgJdKgGQG=M&I6iiYs=*};|PR?g{^gN9H8r)7Uf>0HaWaybn|l<r>k
zZTr)Zc}kCJU1T%`7#QLM?n}Ne){?&O#lWyTYZ+)1zUJCj=h&*RciI>k_bdaICcEki
zR<bczuhBhq*TR?~KjEHOnKft*^TVrK6B=D(R|yNMYcVh!F#lmw@Zh8^`|hNzan}^H
z{s#$29G&~zmf=8N=KJ*WQ%s9@MXjAK56U1PUim3Ma`t=b1|J~sIb)*~_hlc{=?n}T
zyo<D^Z{4q}WYx;Z@IZR*_Iy=6R(6Irvu1WNFfas^{w)v`oZVp|$nn7~EBV^8*X_xy
z3=MZD2U}*Rw*^0CyysE-&u05`K?VkfJzaCW_IlU%b!2xkGkjp)WmfROspCz@E{!jf
zlMY;ybv@#=hJnF4_2RwD4TXR9MCs2@0o7^C-W6-jo^#4N73QJ@r@p%Dzmwj<$K)CE
z)j%n5<>xi`XJ_&<9N=H^e$xBbyHjhAi>NSc&`tww2ywX1A1=7@ngrvUhRYolFMl2U
zV90Po(Q;~4+K&fk7~V8Y?pVRxtuMmNz|gSqX~?@<vA;SuFf!a|s=B``@9>%jzH6_Y
zp5Cz|m{sEFow;TV2l6uBrxrhLxLDKGq5YAGf#FTd=Z=cJ`=BLaU}qkfa^>E1{!%%2
zzo!vT!6G1{!Z&x?*J76#ZaIbq-IedB&7N~=rUPR`tU)j<14F~%YoIDuj?b1oVY$pz
z?yc+O^`^2i+>7&jdTu7;4a2WzHf&o1YV>Zr!oR;rtMtTywG$W_Bo3C=-aoT)kFZ{T
z=GM4ta*yVVGP)J2hcPtF-4MVgaW!dc+`bM828M+6EBX5JMOyxrQ<GESc{ypF@}hH(
zH>`)(#0}vSgIE4`y(U<wRLH=v?Tv|&ndMaJgG>zhxywN1W&7&a?Z?gTuqRx<a<uyW
z?z$a8k_;8rpkUk)%9P-4yM-S#wwI87i#=Zc7JC8%gTb`R+hzpTi{ziZz%6lnXSxl;
zf!kT-cJHbaY(U+CUloiD3}wOBtAzBffF=n*q14c6x$<`x#HmLS`I*OZ>gGA8ie2t-
zNiZ}B%DNue`(A~iVY^u{XjQ`D%ivmMcE=2D`wfrfcGYdrk!6UB%uQSAt9y>;0Lz_c
zA#$Qzpjr8=b;7H^zxaNLh2g=}D~-(jU)LQzz<BRe*4{OTuhj)HNE|)%S(f2J?w0Qc
z_mvOsSO;oWZMf{Glr%T^qcm)|fg$*cE2wGz9o}+f$O-j(s;2bn-KF4@Obj2qUX=@-
zx14I+$jp$Rs8$M!Tu?Qa-DeSAm7tWjyRITchoM5&a_af?HoqqaT+S40^}qcIssZln
zEH8=_f4IY)o#8?6nb)#w8=3bkbanZ&h+#viyC67X%{OMePd;GrZ)24H{8VlR1_RFR
zmQ#D*>%(Go#)4n97Xq2D!p{Y8eqCR=ya5!nVEm`Us#_D(p8lQ|!OZZ1%})tj0Q_J$
zkUiT|hJoQhLCN2M_OCfgk3w!XcFrvS`(Z@}gTcCO53bE*oUy2~wl4AtF9XAY?HSH&
zVuBy<O<-hTxOXFS_v;-&9C5e7ZNGot5@fDhPBp&C#IR@HoKvo^HCc{*^me&(QjCEi
zA?Td)Bh}?aD|5h(VPIhJ33yvyd2Zz$4Onr>z;J)@*>!cD9excA40|^Io^vYr?)vot
z3<t7jdP*@cJTNHvTM*X%)#b>_NzB5g?|&s;{@Q%ngh9g5@90d%8M}V{xs`DM)D+9!
za{sWIV4<!714G%7Ko^@QA#!)iKimp?ooXxpH~51=S8D_#L)_Hw`V!aAX6^l>k<7r*
zaB`(B=lf!<I%`;HCUj-}KV9p$^qfNd@+O#*8EV#=RcGF<y2!wgAYLN)@y@q5%nUtw
zYDo+X4S%nHb^d#?a<L=R4d&-xE3bV$yfKOCz_%@KQ>)S}1howcmw&CC7F?JHT0f!x
zG$c>yk+Zcs6T^XZGq?ZdV`i_&{krCh=c^5+&n>5FZ)9TVS$~&t=l{l!f3mm6*_{+;
zU`V*Mu2^dyXu1dNnuJxa?k#%$O%_zZf(01<EZy~AbNQ#3bbU`wh6dS^pzm*fyD>3T
z@EU6}Gcdf_zE1v}Qj)NsyBF`9&da}IUjI6H$d=(o)2)cNXBghhtV*lMJP#UF{1I<C
z_3@lj!7g{aSs5B+zi0P{_&xPnSfRW6>!)NFi6X|w5m)Z3rf@SD%=@;lR6R-J?DCEe
z(V`3t2kI>H?<d5qP=`2&fk8N=T<gyDnML~^!bV3K9-QB@*MIglc2Hk&X1)qT!^N|p
zKH-M_yXq{meTCdl@w}ON>(ADgzYe-eG5l$m(`C%OVg0M(+{^QdL6uHD_wJ64=T%en
zco`Vf7Tqhic@iSVbu2q_?eu=ZkDCu9zJ6u=*KZ92!{VqHoo#`4*Iql_4{m8me=VO<
z>i5(QzEWVu3aj9Epwx)S9!K)4z59!`O8=j0o_Upl!N=pTThioU%U~0R1Rmp+pt64X
zI{8=pr=@*`4#-)rJ->6Ee4nT!!@k&Tx56}rZ#O4C11-CFwEg~}cS=dJg6d3+3<*u^
zinY#{HcWf;5!}w-kobDt-FRk(9_8glf`Y{#4`tNFt)0#du1J>to^xvQJVXa%)j7rb
z`N5S}nBgU1!Hrvf6M8E_Zo86MJOAv;7)=F+4Y|ghAh*q5CvRu&C8Mdo;d$L&kJrBr
zE-+;H!L~npU0E8#x4VJa`>caALB&z<^s7%oUcFD)eu|&rz>%wVE5*y@_OxBC`Y9yH
zop@N|&wf@01HSi>2J56j4Z$~C&y~ZM$@|=~QJVMl04#PHWR}hGn!E7#!nc)73=J!-
zx;onDblK`K90)smgp+|`Lp&%-dxhM+xMezSNo;%h>tVz}#s{Zw6`boeW-f5((|N%L
zYI9po?e3`P>?nT9&XC}L#k!wAcY#<>*4DUtu1EGS<%uqz7rawQo8iE>EybG_UN)FF
zKkW6>%{7b+4Bzf${^t7}v=WwIXRMfPHvO?5BaF|$=j`{?V)-Wt!S7yt3<u<Po?B^i
z{d=q{E5o)#HCIr6z4-NTWUSfJB?lOPmEMfI&aZco;X(eB5WD%3eNR|qW-Q*e;J431
zkWKNRBK}$(Xnl|W-RlRV*!Vth<+boEj;Ls3X2@}`UcXCNz318Vt5q-m8-l_(@OR$*
z=OJ@gVNRK`>Gqsc$IQX&Zor}UTNgA50jji285pWxm?*{Fs@7*Xz(2E-pMfF4zU1$R
zoso|`JR6xq^)H&m+DjO*G1NaQ=e>50=fJ{M=lA!5HoY|b4V`}R38)zvH<OX!M)Bve
z_aFThN}kTzyT+F7zkoqb?B3n`gtZwCgxz`B+ZGtxDbB#~K;iDQ5V`F5b?_r14FaDF
zew-A%GXTE(wc+pN;FX(;U+2vYe#**_(0_HVj{L3P`V0rkXLs^3FeLl}MeA81u`1^F
zb!NS}yXrP%@H5n@FMo7~;lu1-GIzE-2Q441UNZOVyw{?;b}=y&C}gd_vbmbytxQ~S
zKZoSDceg%EGdwuH<@?HP!$TSWc1G!&gC@x=B0hi9UG@{yuK|aVPv~6tedku*S*ZZ#
zf|elFttg&Yq}4C@@xreo3=9thY_@z)U}$)6BrMIqa9~U6-+<|r`6k{Bf7W0A74zoT
z!9}(VKh~bSHIwl{|Etd*E*9m1B7I`;&aMuA!NNsr7#L(`RK5SWaIf&;YoLNcuuwTt
z;wY#oYJcRnNYC@h_dz)?<8yS}t?jR1ZZHT1)wwefJ7F(R3$7Fw1VyDP0|R@;yWboP
z530|qurn|i#Kzjs+1l2roXYZ}`SQ0KmWJkQvpnZWGW@%}KAp`Mw5H*5*!fb+smD7i
z0=yU)`0hAYo42ivUOU}i@T308L)Yd$4_SAFi{ZoDTh&)~zDO_$2aQyK+D#evSLENx
zhNUip!mrUwrq4Om>I7=2fgS4O@AuS5X`b?<ke>_;771T}cRZhSYNkCC!-MEEOIR5g
z418nlW!#ShN2{<NsJDLm>tUcCgUqTqUbe<LAopF$j6PSZqr||_@bcu!J=y!~&raoM
zV5l=azjDX#1RZn1kDj|Wl$OuC&A@Pf*<O3yBW#O*R&I^61EsKr`z!CSvVRhi*8+3Q
zftIUwGq&1+y8K|bHDsP#dB^q0?`!OA3=Hk>mc09Rer1eYl>ozm>$6XCF)$=l?W$YR
zy~q4*dm_WXTYFx&yZ>Y;$SBg9f1YP~7ypOtuZll;x-c*>T%HuXv!f$@e?23^fqKh)
zX7+O~hs_|Zbz!ZX*uQcIgkl*Q@{7|2OnaUMyTpK9x4&S1u;F1)dkf^2hLx*p4g7QG
zgW?&)XJD{i^{w)1-TIClp~|2kzg^p(*7_agvtf9!`pgj)1_lG&So<pvEoOIEgjzMM
zH+ui;p<f7t%nbE(wubd(d4}c;3<pY{guL2&epjsvD+9xy?N#A>POgkO(Uu#vc6xWm
zkH{4pO1E21El*-)__1lusYsWYZZ5aY5o@RGgL1%w{4=i)ZP;bu;{kCD1A|Y*^|azS
znxG5?7CP`Q^Kb0=wfDIh7=9Fgx18#JlYt@LXtDqU!+|F{pk^DxzLUAv`NNf%9|&w|
zn^=65?T1=1FDRw$)?Hq7=Um=)FIEPI_!1Gp*K@k&X>NP#w#b0%`&9;p_;f{eiL?8|
zUq77-N?<>@N)vA^`}U0s*3NC<w9c(HnBE2NFKn>Bb#AGz%Nz}E28No8Hp@Td_-QbF
zC{Me@$iOh8Z=Jl{>;C;-Y#(CfcGVd~@HFh57943|%uutv@^=QP%Og8Exbk`%&yTm<
z3=I3uI{Q5hOv^c)wYR3PV?GO4ba`H-9>anA*?()FCpBGsv5*xsyf)|By?b*`&Ab8*
z2nGg*85<UNRLl?F83;-YV8Mp%(}Q=eww@jZI(GL%=^0K|hJV+5KywY3FMM^DZ7~kl
zYmonR<7;!bF~heY(8kzxq2dqPZMHlIjbmFYf$HS*Z<RF}7#`d{TMX_o-Q1|!-SNY9
z#)eYv^H~fH_Sf%C7JJlq@lW#BIJ<6f28M?G6h>G=XZZcdZuzGd)%jq@FfcGQY!Cds
z{Z-%6jvb*)3=BW?KqEKxnQBrD3=Ma$e?1&3+p;)>!T!yPxH+YNKln{ycr$s<DOVR8
z4Xp!VIwrRn85rKQf%a9bxh>1j!0_SkF0+CIMs9UCz%A|YNiA!wJ3FK|GBNyFY5m>R
zU{?IC|H+`uAhvxv@UlF?|IFEEFy}B-)aJHbT=q7CiGg8X{9NH*ip!I(t1x_EHwH~6
zz1g--KI`)lr<n}fmc`AnE&ZFYLV}@sp=pf$O0@&mYT{1)^;^Qgz>u#FsZkji7@~`%
z1ohwcN!Fdn+PkLt;Xh5+8@r;*uQD*yUpcq&dQ#)XJD{<1aKdJffH$)a>@%1R&u<Sz
zpN8luC0+itoq?g@ZN-U|cTNg1{K!$`1O?I6uZIh>=UD`)HLP9bo7u0#n((Sf>-gLI
zCh2SqZ&#hay8PQ5P{I(sx;et{sio4hB6fy`wX4e&W}DsNuDjyvQZq>@XYRi+h6ekn
z6U=U(*I%vrsS?M)z_4wJp2H3yHCV6+f3Gw<z7$b*_NXrpD!;!b`o0(g!-m-HmZH`l
z85-ixf@WYh%-&UJvF>o5i9bWnve&;772_Dx-f1fNi3%o&eEqrVA|C?-$Vcat9^K53
zV_+~?b!+;rb1P#yXUcB`&xiC1B)&eUdxn+ahp+YSdELxzA2pT!*s(A$9N1?2!X4(I
z1pX^GW!`^9%vkm)gTwq0D?>xzS@4+1#u<zcHk{=H&964dZtLg>W@VDNT6&$It&7pX
zbM4DtF<%+nu09O`Pq!HCn{z7FB}eIz%N+)W4_b0XTIP$Mxv#l)`qu6bn*|bIi?JPI
zU}#^rmtU99mR;iFT~LQ8fq{X+Z2@R69oSI~wI45(If0oVVgqaGw-RuWe_~;12rrZq
zl&=2B0C!OAm9K~AvT-$pf4=bb@XQ^IGbYVBHPx8;!0Mg3=RtEzZj*v{c6NX!Y?2um
zDnh?cGu*`bRqyR&g~Zi<N{`%@FdS&yU0lwx7*wa|9pPqRIMDG$8DuXAZ_t0XRa|X(
z(HhWP3P^x~;l4hoF?C+BP|FQu-dEW_JNHgzW?;`)_JV<dVfWJ4?Wa3-go-tUgL)MP
zh74*8O)G6yh#goRm9dGLfkDDO_Lq?0cTnh>Crc{Zr)-VecjdQ<=AmnMpM~7(6lJh*
zd29P3>SLk_Xc(N~f#{j&`S3F|eD3afXJ&+ypnpFJ(aVw#bD7g2z`$_ti05y!M?QZT
z3M$gF_!t;ASnsM^VSgp+4a<jLeNn>F3~#oW{kXJ0l41S&d6M&Z6hLFb^Qw-WT4}R=
zsXhb4f!mvUCdzM$(toe?=zdVk+RwR+3<WFpupg|bi&{JV{3lTApL(WPtL`<dDUcvP
zXWLDg_n?U!NZ34h{WN49s5j!C#LUoOUV3F;?~V{Q1`8eIuOQ2KW9?<OKfOCkgW=w>
z%<KHzH<>p)o;OF5;ocd~-)}+lrt(vQEmzAMZA}F^C-29eo{tf>Km5#_n%7#JbFeX3
zn7sY_Jmz7d$o@6gPFr6D&Ci^AW+{3<4OS*@;D43V_uR}Iv`-Z5q6YmFD|M6}Ir=d$
zY%uNvO<Fzm@?>~WaOR2>Xsk--mVh+Fy>q44`SngS-0)oc^H)qM!@ZE{!8?ON%hcar
zpSCOKPCqll0l!u6UrL{r_$jyg>!x{M|0&ws*yZZ?G-3_I0mY2>w%kYCF8;{l0~NtW
z=U3Wz!45HKuq{Y2gAF$^9Js&w^RnA_7G?)BG92)$I<fLbA|nHP(y|Mna&G<W_Sw5m
zcxp0~9a{97z4-{k4Nc3b-e<2fSU)yfUbIk#fq~)vy4nq27V4IRMzSuiOzrv8u)E`j
zYr}?6b-_aAAchAHceZ?&PxuXP;TC}+i}&p9L!i-Ja7fJ9wb*R-;~-U7+%f#qSY8xU
zz2?;&#fuCK2mGoHv_%;B4*Sdn4YPz@=T8?bT+hQ`y_ip^`pvJ05uOY;SS_cPf4#4E
zl;MV^|669z0`+}CeovRxZBWr?V3^Tz{<OsTDc$+dqUS=w>%1s_L52hOvff*7*Wy|H
z<H;UA28IKDGotIj?g2Hh=dIXmdGC41IuQ|=&;#?_`xlE{=5(<zFsL0|6To1>U<}&j
zQeh2lK~5H8cr)kLlWhTF3}r`xrHeQZytDW;8)WYFY<Z2l-8>8oYD@36=M-s8KXq(-
z#M<d!<=)0SHLtb0be)SqhJpEgf(^J;3+m9_5S#{!Cx#9Faz$F<T3j$^$n2VPD)Mf*
zh@g7=JXQt<pPtBt3>%)Oae=0jm&ut1GrU<-d7ZzlgYm<%BCYNYi%`~vxh3<0cLswh
z+x^pmE%W5n&K_l9V3=GYBKTf6`HA%%mm}&24~CUmPUW7+#PC~Vc~NBbClPVCkDs&l
z)(C-mA=by>y(ETjC!24Aq8#j=1B%(UA+xu==U`x%G0#f-i{|p8HDwGN>eI5g7#Kd7
z?W)_c^1q<{0l(;yzXi)&81}S+3g8%S`Gn<npM~g6;b35RuzxH6#8(p<cUCYkBz)3I
zelmLvc$j&zRL<SS9*hmOm)}hh<KkZYLqxFdG9v>+Lip9E?B=Ur_2z+jNOh=%$J+8&
zib{QdKno3*lnQRl+?~SEU~3fY!@$sR{rcC#kuG;S<r1D>J+|FFmFdCOt!%vi*%*Be
zFFt0)z|dfSYUQ5Q@=C5pR%S3TB;-dNJ7FFPX{u&z2vxTfy|2i?@cY@aea}~D^(1YK
z(vNom707(MuXlrk0+eXv3=!p@g@)zSUGtwgUS(uR$e-hO1XNNlVc1}wmc_}y@Ig&Z
z`H{yLhRFrDz8-d3$xxB%e~yP?a^WR#0rp_KB6GUn$2)c|ObiU)x>I{<R!estymt3V
z2&fRg!TxsdvoOO%5zydq`65;Zh6JWBN-#HU@XxaE$p_8ufJGYiP7ki^>ByeS#?Y|0
zSW0mAoKqVwF&(Izu~M0V;lS%xzY;Ij<*+7Lt=nC<BS4=a&e`v&n$o#eUIWd!s&^O|
z8210$RvKn+)77C|$iQ&mURB2TTOV9kfBj^sR5wW^C-m>#RK*~M1b-VXl^(ZvZ3YI0
z;7<>vL7NG|wtqX3>vwcJ{NRQIai_ow`|n-a$;HfY;GR`)hi~ow@Fa#A`({cpF)-|z
z2VM{m^@L&amm6Q3xs4dyrUqMfcUWsO`&?35{>kqp14D!JRA{&LNk0Q<=wokcPffF{
z%O53!8>{q|7lE8}sz__PVBxwBgRc5D*G{K{3S$F9{<qQ9U`H`9Fx+7OJm*xe7p!Pz
z_^q<MNJdcl^HN5J2MTkpeg9v^$H1VLv#f%FfnojP*X_TWUoGCjsP_6uu}njF!2h+D
zLM8`PWGz9nPVHKtqeJ-rfrc^{TuJSD=k{aK)vBL{O6ycuqn}IiF!+Q?$88UAlsKv{
zSg0Pwz`&rkO3%(B7}ORAJLlVx+S!-k1+hV8?zS&#N`9fj3=Dk7GG~idt$D&=5No`Z
znSr6gv^4X3=MF}-wXc6Y4B}*zaQ1uZXKZ%h$=v55c~b-#7%WuY%6wVyf`Or6!ZXXM
z?n|G0hrLdf4fyWwcra}4mO5pI2F+a`*Q)kBOWPV(CjvVDNVxQhnEV_~__#v#BgN%K
zOX0&@2c~S@>7XxIxM~6eLqUPxS#H*b%-JjD85j<LRvGnl>|DY4?NIV{{^MSp2h6q}
z>yBQ?^rm(9oKx0ISr{1j9Q~deD!mhxW?<mEwP!Bx1MfVgN0X-{tj@dR&&&{f`Cj}N
z-@_LFKnpiOlUxUm$X>mvXDPZF)Gz{v%nfmV%c<H|;p2eI!0T0Ko5^!9Fj)93{~B}Q
z96Q5-BWFZ-7#I>_V(qV_diN)>-H>*l_nM*Sz<ynZ--l;1GB8+hSWd0_HgmNZ14F=h
zwzoYD^_g4a>Uuh)IS+<i{r$4lgR!Bru&$*LG>>(YiGg8*x}CnAMOXmX4WJ};#M$rY
zc6fPwV9Aq^bFXX`Y?EhZV6ez>&y9O=b0Iq;L$Gl$XvFKHZPq%58`iPc`KO=aI$-uB
z<lU`BVGQ4nSNc75vt?vxsGS<T^815gRyGEPy7YVJxIRn|d!71M`e&rmhR|5Qr%p>4
z4v1{|KCSp@Q{WxYPz*SK_s`jO6CNxZ^g$KED)>Z<kK^m|Ujl;eTx<*sCSPkdoLo7F
zlZ9bf^0F`n28PEke=XE|`_6@D!*sdbbrxY!40SHqn|6pQ9f;d?dgY$rC<cav`A<Un
zinY!Q8iq$OFg)-FO~f=k<bK7l+ux~a?WZ@a49gBxbN4)cezj`n1W;}8|M0!LvfB$&
zvzg--U$V7)%HZMdV8J+fcm8jtIUF4B3O+1N$_6rx4><TrFK)jpAZ$^>A}`9YdI`s~
z)o*WpS(xgzXbIa52YY|fu1RTb$@{zC+~0fsmUHlH*a12WH;mV>3Yo77KT^dYC3My2
znwjCCn%Cxmf|B0q5P2?khO)!PrA!PAH+o)PeY<esU50Ai{SwADat--UW0*GV=d+Op
zm7bnAb++_%2)D8_FxWj@<h8Y2r6%OIsrfZ;hxdJ}LiCStG4Mq0jI#_<xzVvRf{}sY
zMzVNn1bj)!o9@$ESA`Ktux-VcKb1=@7#I$yKan(ft#!5CiK*dX^)fdG1_tTm4D$p3
zcF%~rJ8z{iL;PZ|uQp14t?V1F`|;ift-Nu(sRD8dD=Pzo+`~m)U%diqd~Tao&i(qH
zsVVO4>Ja&E5eA7xMRSe9Wo~rLzrAj!7$~r---S+nRSarpfYW1wzs!?+b)l=&x!?@~
z9?z+-BH#U7tiix=KzYuTzk=<Dm>LqRm)S8eF#MezclX&dLwy%+1FqFCudbb*#85L)
z>*{gAjT58}Xz1uJVP;?`i`=<9a{5_Nr>4I&aOth;Lc3Hw*%zU5ExScD84LnW7wu*G
z@;djn>Ad|63=9Tht3e?Go5e`*fATjh`|oL3)2(5l#^$y-O%4Wz53GJ~`WfJXvr$O<
zK!%L#k(ix~Kb%fqst{`UTOQE&n}LDBdU+04)O25v{qe6-r@oqbrNZO3>Cd{);SU|w
zFAH6D-i3>S$8)FMOf9aQmgk^_xIHHu7s5--H<H;&;Gh8wGdQjY+IwnqTL?1)!w)X?
zZ|)2SHrNJ(wm8=LuFre^^q~gB<BvsErPXWhG1$0GeYLsfwSrDV;7*O>^$ZLRa|4%F
z2??6tt7m3lxc?$_>Z_RoKRaAq_K5O*$<p*=NJt3dVv_zCecLn}T%#DVx5>dQ-jH6j
z-o6?!{GuMb)av`heF2ON3=gE|ypZH#IQ-Qomw|!dm+{_RwtXF~9*l08OW!cqOe$tO
zV4-_emVx1hXy_{S)QD4!ix?RgY%4;SR;hW|T`4=eyJH47TUBY$(p%?684Nf=SAC8<
zt$elN-rjP1&=h3H+#Bm*MZtl2C##Q~-2ihG!?ty6Vs}ljVPLq>e8;#XcImHx84LzG
z=dUm`Ff0hKthm(Z!RYp~q^i_9xQfAUsn=H}rM?yx1FxMYKg7IbWN28pI>`3q?1nwR
z*%%nAzOC}w`Ze^A?`_lRf*+%dF05{4(`PskygH~>M)2C1gK1}Ot*caz26dL-9I8V!
z0DR(vH;074T$B*KDrEhqTdIxB3=FnbogG^p7!xAqtz>6laIjw%zCHbCw*{kHuHoKY
zwldWm3^r@Lz81PjY~wP>>(;vZ4zzmo;Hn^7&Dr&QA)E{hHyXl2SDj})&HSmV>w8n<
zy(j6`Y!8?i{BvK<70x*_dt0`iD>nlJ!$<F_uZ%%wpMV{)!96Zy<vdLdFbA|jA~SSV
zxL~0osL99dcgmKX!9d`=2onRt0(0*`rk;C&E@zI*F)_$beJ{y(gxMgAeV!sC1A}uY
zD5Yed-@w4oz#BdFH~){|+otA%8z*pld9}#v>r4;EhUEe4oR=MHzqhx)V<xCvdEh@i
zbX7m-!~w9?2jnVK=fhWTZ14<S6<)cl6|~fmcbCR@IferaHo+{QK{fNeyXLwd>C|BC
z=$L+abu{xAh9BLRJc_hL8BQ_n>QrE0Xi(JruKBvdA^^0);qa&0<F|ebfzpkU(mf8g
zs;wgG3?E!fW;UOV*cMx?42qy1!Ewz6kxPFCsDNDpS{gXfyVerMY4BYUH21fAJcl>~
z!;PlyB7P<Yn~mw9(&j_%vheMd4wsyI818HqVPlXl$YXe5_Z-v!H8{mErPM`c1s4Ou
z2GyVcl5-W5`Dbvm!jkQVP)M>}>HNMffA_IC(8TYL-NMyouwvte@lO5YtGvE0JOpo(
z)vgTM+ttC{$i%=9T@sjflYzni#mo<&#fdi;nY1!CSYLj5_3ca(hK~PwSLRK9xQe0R
z`4+FQJ54}aSi->3^L`H_LxcK+_s)8}DOVRKtbv^i@MPb%>~+eI(ib|c7wg-~a9~@=
zO1r*}od*(?(~>|Vvi+x+`E91d9Fj2q$xpHAi2m1?g<fB^zP}PwV_^8e5*N18teBZ$
z-UZ`_pk<wVUtZ0XyY<(pg~294Q-onvh`g0L!w120{0s~SCa(&z?d$*r5@^++OW&tj
z&&ut5<)5mzY`@fSPo~12mm%lkrQPZ`I^tnvf6XQR)LQtVv~RjEYh6WZ4()S|Y%fuC
zVPJT`xp!5NZ7>5vh1B^cd<+a9e5XBPexU5PEPQ)h6Qe<YNAtzy3<sS1R)w5bWoBTo
zY1O(qxg(;wjFo|b=YZ!v`;|epD<o2KukY#R$bP>dUOaTw`4ldOoS>ceW^hSXeK%7Q
z0|$%yMo=RcoJ<;OCx7pHjacVfGga&A>OFj(RSXOV81}3RvJK>5xUnzYh@FAqht=iP
z(ayUWf5<SuU~~iL=rgta3?DeTnYS}CG~{YaS6mY;RH$KKNKo)oN?Iv#Cv&&j{q6tM
z1YS&iti!M&Q=9X!+nL+zD%C-4=ZYzN?0yBo%ab=V!<V+h8?Ofzhps$VyI5a^je&vZ
z#4R~axEr##FEW0Rbiceh`Z;&Q$EYces~A2Q{<JZi4jPHlO?`asR<Sk%Lqda|SF*{D
z$@drUozC{<*%Gg<-!C&9a0^*^?)9?%CER<f@0Oii3eL;jbEZ8H1&0Kv2=Tubx{5y(
zK2A{4W5oW#DT0CFzyX;lwnE3bm>F(=_PNHuz!0BTRa!l*U9pp|!F`7R`aDxkW{H`b
zejIGdWspl=x6y!sVFT~ed&!|@phHl3F1k*Awe!@3t+Ai=_InGneaU+G*M#B1_M+N{
zw`6~Pw^K?h0wvb<pEh}Yoe3J=1H0#j^3L`LQI4>D)o^}g(A?+K;yAb%7$jEgaes8l
z$Cly7y!1_=W!zfc8yP=%{A9fm6Tz@}b3hS;+{*)-)fgBOE}wFnYjfp^%MFkp{st|r
zTIP|Gd;Q6>%KR3_y&vnO7;dzr?mWlvYiq{tXLEf(b=+!6_&MeW_F1kB%H3}Pb`EG1
zJ}`9E=QY#0IT;xkn9GF(v-dhPCRooq30mfO+Gl-U`cp?W2AgX&Ri&?=iXZR@S!uU9
zL%Kn~Byj1khz!tS3sZQlvfuAyWN486v}#XvyUzN%b^4qy&bB7&FkBFSy(}^L-j>+S
zBB0((&E)2eh)!5DvcdNABCoGLf$*^4pSsnx%8i+UVfP~yr8CbM8gwhvQWzK-^tTB}
zGQ?}}pPS9in_zOsnBjxz9D4?ahI^qa?Rq*&Z?0fwVA$ZTw>rc>q-R@pp2_@%dp~C~
zG5mV8i^=S;9VmakIKIVe>u>mKo^NM^{6YJqz(Md}pVrmQ9Tln~3=9d!V?tKOX-YBV
zTr>X3#K2&4@5?JQ{X-T)k__<=pMH7uEuw(o_gb&7kuGzzj2Yq;^=A}=wwiuf=Jhqv
zWsUM9msJc52l%W`d^dS|uWe%X?leKc{r$G=FD`m!25>TbxVkFj{NDDa-XA;P&H^`4
z9P;Z{2H6V27ok+Ee18)0@+2%k7>?Bcc76U+czp|Kf@KAF@mGd~&GSI(YaVp#9AQ0R
zULePKqrUGeLk%}*?cxIe>4JqyfeZ`@?N1l>WIIc0K5J@-)0K^9Y*-(<PI*mv^S`~h
zyN{g*9c%L?|LI-$G-tKicgYwncx%2Vdg`l4mpxL|d<+Z+&Q*sl{S_n0m|#5bv?v3^
zgF;Xhqj+rM4u&6W;+I$7KKfdI|87C01OHYA)rtu&_u@WazGFqu-i+PHY?(nN-KvoF
zHmjK=_HGv}{BL>rEc^cR>y#heWp><~z57|!Y{oE9$^N+i&vE|0>GJ<>CQ9C7J@D`3
z@$WVLiyt01u{Cz{x}d+=E_)=Z#V&x-j?0ml1q=tmBc{FPTo7+u$;7~Lz->;2IjpgJ
zK<<?7+3UI2*NA|2DS~77*m6*G?Fp)CxLEz!k>NFe-T!rG^lDF(-ZtewYjSr+(Z4E>
zd7f6456;{FdGCM5i{VD}>Y8~szQyD+NHjlR#lyhxA%i=R@j~;=Vy*-CifY&w@OKy8
z2W6YkRUyw6RmCqc->}YCezfe5_uYJ{56{=%UiWju%me2#c0YS|Z~uLBaQo}{_kZ&?
z_y75IrJw77-;8I~bGK#haaP>#ZQb9o_@X-F--^J#^|N*|F!YDbYO4}w{rfw2`uxwJ
zO$&S{-XGJu3u^CzJ+mQwTIj0vZzW-E>xROWpgPMtmHmeGd*w%Yu`m8g&i{G--rc{I
zGym_LY<HReUHAFi)Vf1+e;51M|Jk}To#Al#g!IzqJFnzk-xI9Q@Zx-NBohNe&Al(L
z%APG1Vz8a*zdmpJ`uacTy!9JwgTz+PU8Tuj3yRPiPhB4}FdVqNGHCCq@1kA|8;a}n
zd70lyvH!X0^T1g8!_SUSHE;hJZ}Wc^vGkXLlG@YlKVK*Qyz_VFcLxT4{r%37+haEe
zb$>i{R&7<tdF4m-$L6tq$&eIGXJTd8cOWR@!tOf-6?&i!@r@nc&G5W=!<b!g<F4!4
zum&{4jbczET<>;c6!V)Y+f$D{yZh$S4)gTSQT<!ie_m=FzdGdp*{ogm>%Y7^uXb)d
zgTJ19`}Lm{Z|`t0{H@gUW?*P=kL=)Vm?tx3;n#Dz48M;S$~M@YJ<ZO*@ZjRAkmtWU
zxH}nnF2x!*zOLqFy_czCAhVRO{4A&4ttAiQoSRPWUB=QrOOPSw>}sv6=JB@z+WuZD
zJDWQ7)pbF`(5M$jGpD|ayltvo$iy%|_@4V*4z4Qm&)_x6+mzOSJoWzQxuc*1jzBSa
zK+bYy(B7QgZt<X{VjvNy&(6)7naObY%d>lDF3sNUf7{gjl_`(>nFG6PUdXQkHMV8!
z4K{zdu!pT-t;I!q5r$u1`~UxWZm-13!0@Bx<<+;5E+s}x3*6s-e$;&3zAnAO_JEv5
z_o;vLqnIu%wtpviYh59zyt45EXYfg42PRj=OL4|bU&d7V_}A`j+3TjJ+N=thKehhm
z=IUOKPrH{a-k8pOVR6kl+u}ai?VG|LM;*3((OZ6n;Xr!mN;@6jkl1$T{r9%S7OMrz
zt=`kU;k_(qKKjq<x3k#UFEJbrUTU@eq-`juvo81Y`L=AaLyuO5tTf{RO?E7wa%)}W
z`(RekYGH<kzZc5R+E4j(`vv&??&(GLe7{$I={%R6<u^s*f#=`2U*F<Esq)sF`5!fm
zue_^QORZa3x}M?hudQ!q?et-MaNBmeA_K#L^vn!yhx>d=N$+HsH<-(uXM8ambi4{E
zZqF+{ntFs`+q2qCwGGz-8u;%@3w+z|m>9ZB{bM~Z$2%#Z3@3&UPd`;p3C%nA{*QHB
z?)5t%E6=^ZR3`~8dOp=fDT^~a2%h$I7vl^6y5|OyL4|fsY+QLk&RuwUUH$CRE_kVW
z!#{Kt|LL49!m4aHW|@CaoA%FezsdP?LiSI8KREclb<e!-%{!Nt$M?I*%N&?q9k|r$
zJa7C-K8Af~i$NDr)!g~=>YI*|pDW7&wkM3=xDPVD*|tgJjgutfjfS0IPZh5UdG6cg
z?Z}vOCN{Y7_3r+M{xxg2Wxw0kulN4H==WIybEd98er*k7%{5QUdGk86_S{+*8Me}{
z{9enwCvJMHi|%qUd;m2i*UW6|jmSy^9X{ayNI~gSLv!&**y#NR_ch%x-!=T*s%Koy
z@Z$b$qwOWJ&wTIAczF1_*52pu_s##e=uGVn`~4+B*BF>T6s}(t5^rtJd|-Q}9;lY~
zpVi6Uz-u`x?(Vs`|3B_}9bmA|U0B1AbHWjvUBKN&_Ry8{rkw3EQ)2q^*f&$-!|~(C
zT(><<_T@OW^WP2=xeE;p58nH&4q1O|-NtL>cb*A;+@H+PShYpx`aA{(`6w@zs_)ge
zO}~L=UJqQJ8Me|cfA_N>SYBhep<EezX3txxYWOsDg8vgqTfxFb^BDG4ROjct+;v8;
zRy}Il!nd=&w*NN|UB&<Ytj^xq@vrvqe+YlAb@lkUn+zYm&I4_&evo*1_3b}R&zx)+
zaxT~?g)y<+@J(&JzVj2~21oAiJPZs6oIj<_+9deR!GR(E>G$1jOiNcD*eW48>r?Ga
z`|0KXGvrMaW=uIh@e!kPS>V#DyJfxKHI=8HpB}oZzOQ3?@_DAJqNt@+&vtMz+?me)
zD7%SM+E5rYYHzc1sv@k^XLz&Fb?U3r+p_Zz)m&Nh)K@n4kDMeK_nrD(UF>~5wQS|S
zWFD`d^J1o-pT8>P`OKxqzdxHcZ<UNe68le!nf<-zo-%wWop+j-f#Jd8XNwpU4uiTQ
z>FewN<mqNK%r(*H7H3EZ?mP9!0_>~#t3u@6jx0?NX6XMm{TS1{ts73uWjO?_<1M<}
zxcSq}9exaM&qAlZx?}Mo>f!N~Z)e%eDV}zJZLcl&i<6sp_FO%}%CMvQ+m;C|U*3hE
z2Tdy`2z;_yZNu;`2Hvf`p<Mnt>70ltxG-d3U?>Zp`l`|;Mnmzy;=Ma(N6*?1>K<E_
zU3K1E4l3le_x_%vVPK&2bH?_bj+u*?4@|Gt1MR!tKRfQOT-6JX1Jll&ZW3cC>#t^G
z*p|3(q5%U#!E&#!iIwXUm=zBk->ZB4l)ar4_lEbk)>W3jul~m$x~l(l@lns8uWm8k
zD1Tk^M*FzSG0pW4UtE!^Dh#+6eEujW!<1)v>`e`Edv&jaW?l{$_^b|@zdg2iC47|W
z&BV)ES3hsdp4J8Gj)Q%&d%0KXyrZAGFEQ3!`Q5Q&pZWF@U9E4iKkfG0Z~yY)-kD3g
ze=dFI&G7rpBCoGo_X;t5cslPi4+Fyk$LDeD7&fSa`p_T2O)QH8?=-k~^-tkx&^^)H
z(tjILl&4faKGO+0^6LBUV@x|wHayq(;QqPsPw|Fb-H#fdF)vSI`gX=~r`QaQHx^Hi
zS%<EwKi#Vis(PQePJI=6+w?jUYs1G?LAHgxywZmGyPwU?0L|b9ObcCg{oPGi#=l|Q
zt#x(!uOb-#Kpv>i(z7?ntYLpeeSY4{TQRaflFM%IuC^Di*C<wdcV5p{NOVJb-O8Z3
z=`+@giZRH&-?@f?fkAGI05?OliM~8T*>Rt>3^x|F7V|SO1T3u*6%=30&!q6^?Oxw2
z(^G>@KXA%t+7*0r{M^Va$z=Ub<-YmW*vE5ERXjDVcz!PP!tB(Yek=^fvR8h)u={%M
z^_VVDqG5Z!;?3hLzv1iUYA5~HU-L#9mT4O9f=XD?%ZJ4t?2o&DHX&#CvnaI>l~2>3
z?pmXK?z-6V?`hNKO}$smu=}0See12U#fv8~e6aZc<9z);Wi1AVhU#VE+kYPQR2OF0
z_Tukr`Tf=+76<Y)x_A8#-^p-e(RabZJ7s6B7cw&(un1i_&-IA*Q+BskwV65vk+ZmO
z*l<V(+-rQgwfMPUp;mH2``;^NXT2DYuk<Rl>;HTHMsb6j<uaxN9+l>-(uukndshVI
z%G)q79C-F8fkBAJf9k8PrM(Oc3^k4OZ?B8w=vf}L^cLtWUWT?8_j9l7ly5Y;1}f?f
z)Me~`Chzq#_Y3%BSMQzj?RP^!O|egN_A#rnxV`!gDi-!}E~p2k^gEY!pPx9RQFiKj
z>2qfo7#ogP>ZybF5YFsoY0$Nv0V}INFjyb7WoEcN&0Kh{dkd)Akyr@sEiL_a;KUtM
z@g1OG{FwOp)cL4?e+<v8G1+UUeO}Ff3d0RWP%W^#O=9`BY`xVX`wbrmRc&4qRJ*c~
zo1w=$vuW>S=J$yY#MZ3^rMC~C<j!>(!IIa8bg|U?KYHN<O$Q97-n;O+!y-T_!R6kx
z<omnM=v_T7ZMJ5OX53W&eQcKd%(s6zvz23mv)`$jxic3r9(Zm$U66s{!2g+Xcb|!?
z1W#o6!1AnI{|%$Wx=kB?J9RQtFoEivgqBqy{-@L=8*0DXnTuYCVQ5?YcGm7T`R-4B
zZ|WX5DlcVX%bPoU*^XrrYwu({idro5!u6kJ)Rga684gtF#P~bEzqcj!@m^4`mgm0b
z)K@!ygXSW^S^nD@$Cvqa%izPj1`(Bg_d7o^D1WGqyuKrE_p_*j4>PyM76;d<eSV%d
z?^or|9cGMe??45B-6Dn$mFH7H15o0|g$y5DK!vjKLuQ_N)ocv&PI*S2;bvgyaoNcp
zF@2#D!|xZlpflcAzMXY=TXtIR^)<KFRW83}p!4(jrnj?Be=4q$5wv$XvS0a8ZxADM
zX@JyrL#L&QeQv@R=8K1}>VL|~@HpU}|K5PS7k6Vo>*Y2Wi{0yo$3nZ`>X7-`I$$3$
zFff49VQAdr#U=;lRmlskSAMj-<45{!)5+Vir{!Lc(YE06|93NIciP1Iu+Qgne%}1M
z_KyxT&qe*zdwdKZIM0K&JbnQCsO8x?SB7Tua3zL$6Ts=IQ|oHG;6!O&nH82B((Ck(
zZ--QDWx<(Tlk86y-JR4vf9}-v>*5<0o;WO7tgQV0r@Myv3C+Wn{-AO!C3M|)hK9e}
zLy}+IJujsT>NELSYMeiLZYn5GfE?doyLnYmEhu+_rkFq?3=N4Zg65{bj?rM>kbdv^
z%%!P$FPA<#l&AH&FZ}7`_0ejAhT5CgoM~rnOUd2O!ccRo_$O#D=JhYH%=lHUgxDGU
zPc+yxFs=@&eKwD=LA@+)>8}e-77Pp$ty_Dm4#-u;O7X0@y>4e<#0`CZ6FCcgU-mV}
zncE(?PJOji&3*Ay>4$&b-*9f2H|N=Fo8!R@H}XSQeK!5F(#U!Jy=}3Z1wiXN-^|H;
zr+cC7Y}8AzdqET8%Itz0b^gK|mksJ+znuOr;yW;}BKq01b+^{-3=6qo|1`Z??*HCC
zOFd)n^JjN5usv81(>_O&jlt&4%oxxf+!8%5hIuy*et8w9Y|!wqsE6&rO4*7wRtARO
z>%G2eDfvy2x={#^+UL2~pSUrbcX9n*|8~~tZQ0L2BTUTpE=SfceaUekIC83+MvqTs
z+vnB0ob#uJuHrw+$?$vSoafU|aqr#C4oXI4*S)|;U4#5^!x_}n6afuAfVd3v!lu6J
z+;`!CTt#%6%ijs<;?pGCu5)q!)<3V2w>#}-nQz?eKj)1O|JZto+5g2Budhyw3=a~|
zKV@QI5HQ@k>#Xx0eHX?93}<*wF-yz?Pd!L*f!Zk>j;{(iZ`;mP7IDv~W~M!;lk2g-
zMDpZy^Us$8UaqluY$I7~allOW$?M5B3oe?T(s=47{9Lfm<eS0*cK4^Z{FucVZuoZ>
z{b%{|eEYWSYo9<P{BujETrYcmP}>W(p!mSNleXvjMM0Gg#4m1BU+t+&U#oAjVe!3b
zJD09DS}h>4(@5T6ePA4@n^gSxQ@Yi+oQAd4kxPH=dOOSeBJ+WG+sUAV+2qe1WjNq4
z$8UX}DHF4V+;<)Zo}-yJYgiZ<-ptgx`cv|X{wuCGGwv%tx-a;#_O|Ks-0N#jJxglX
zf5O+}*1E`TvBoEl_jLT&YNE+_qiu3WgjZF~sjV+--dH;H$5qAiGW=fdRazJK*(q~j
z`1`y4pwW`Jh$)Jo_9WQh8~i~ttRe7$(QWI$Y}wh<!TgcgTIKuQf4WMbDrLvpS(WpA
zS2P@G|8!@E(QS+KS^v{r{)h;!XJyT~cxsI;!;jtRptAc%bK+qJo|8MX7<l@s*%;bV
zmPvs&)~pKg|8z_|m9^~1?T#OoO8fG6r(G&LyXoyL>7&eY+VaL;#gq2D{NCR2W2;Ow
zgV{^a1h9_sm9n!-*~~9!pWncc@L%VuNR|0%-iV{1HkI}J1D`>wI>7G#c4d#(*Nu;0
z69EUVJ)Oy~p2S{uBwz63`fb^Kx7VHAyM4VVU&Wd`>-WE%6?)tBx!}k19Y0RmSSD~6
z>0k7Aghhlw+2z%@lex_pBxdYvV&HMlJojQAV}s(%m23<QZ~8$c)J8q&c!suDwV4JV
zoNt>R&%Lg5Yu(O3-3QT6(^PY>pZUB|RVm2w+8%M84T_){>4$xn&irJpDvnzED`pPE
z2KiMX&$FKfKW&NIo4MQVurnw}%ZpzF^^Czj+0b6}{_s*nmG>=V<+<##WlHR9@4k2Z
z&{X<&v+S(T`P>Ekx!3n(?@qf~<~y(UYpu(l-7@(MW)GL#sb^$3YV63sz;MKeg@NbH
z#V@a}HP|#fEI7|_;DU_gDqaSL>eSe_76zV+ukR!*csuLxrGy7jQyY9Ucc;bnnYJ(8
zc``eZ+4l7JIPHaf{&{)Ag54XRGuTFjt+W%-V0g2w$nN?C-d|tu{R8z2Z+OoG9e4?G
zcRy(UHw2!o&DMLBzKj0tbmf4<-rkP+%8!0;%T@y=+B516_qN6sUoJaqB%iPJ2pr$-
z48OiC^7^{dh4I1ud7weh0|ycr*iQcBOt6rd%qXGsT%Cd81~Yj2Z_%^^2kzt>6wH(6
z(Gb{>yL6}LJ)S?cE`OpgGcIsf4_!5#Np}973u;RDdTiNWoD6h1)5^(Uoi8ZJeu`u7
zsk0&ZE}*ni{rpM-$OB-Pf14r)UnI8yGz=j4(d*m+hQDHh|Fd>K+wpc*tK97a+qT9Q
z-z__9Bj5h%;|iJS48Jz53aZucW$36-V`gATI0G6BeRvFXZy4K&0-FX#jqbg7jTsDF
z!0n6Up)2RPA8EB>V*V7>%$ShzY2%8wvr;pyJ~(GueTZAwkpBgg*mWP9$X7F5SPYtc
zWaVPmy>iXOx`j0tR^R{pTXZ5Q$KH$50xdHDJG%PCk}t0C<u+yu&Xh)+7L%B;UGU?3
zaBaMKTehAkyF^os&8g!{YihKPuiVbXT(h{jqhKxbffuRgmohLg^xVmL!^mI|;eL7b
z?USIMMVL~9`qO!g4GXPS1=Z$Vv}a&=v#iEeUU0vLya7Yy;dff~pp-6<aN^dwli3<+
zp{w|nmE!%MKFm_@VyjsiI`vg&_JYEb&nIbJwRb;qdSg1H?aA+x(+{yU%-s@V_G0c{
zc80&Fcvrk#&sug>MTyV;^ZB|MJATX1$_B?%)mG1QuUBjX58ocR5qX{QK=6+%RkMGb
zm^IhgR+B+4H*l%dcg1RTP>&HD05AM!ZY`A*WKUvcd$8STd&ydf0~4l}p56KW{wA-l
zku#YK-p%6r;k7(;m3Z!T9TtuQGi<|a85k0toI5VZz|cG`zU%x{jt8DQ(-{&@oICwY
z1vFG1vhv*FDPdV`HXE-mJ=l=Wec+s?FZ-vjS60PDpEZ?b*mua$a@riu{FtKVPOYnz
zx%V#K*xVrZ<e2XBce;!T+n;<cx9iuI{_^Vjw(NDTTo+bn^L}oWz4rU#>OIo-d%nB>
zygu3gPu(L~s{?LNzMoyasSYxddF<3KK8CWesjq%lpYA`cZWqyCoFi{!;8c0`;h`S*
zwC{_%MoNB1xNH_~PxZSV^j{}IeCpqx*IHLA-ydJIrgGbR<{v@&t3%emoyeAOX5MN$
z1_pz$%d2m9PUmLexwDfkfx&;d*H_S35!<_%Mh1q2?NiPctTy6cNw|IQezrk@a&3bA
zme}ICvw1VD7;2VY*1FogEnAF9W^T>77suq7zNAD-ZO=$yXRuyi;~cq4^oy2x#kU+r
zhK63P_s8r@e$M!R9<)xSFs82h|Mi{k&n5o+x{`~@=9FXP{3ozu)(`Ogx}^9mbk+N7
zH)N)LHM<%4)9Ru(&kbY!RUxna!LbgCRoj(8bE~h$oDi;1%0G4IlKWR(7KvR(^4XEk
zQs+*!ELpd;L4V_^-$&2fW=>c$Z?z2rgF%w<QTBufeaphPPrhzn_x-|!AO^GdF~=Bq
z?l{KT{9ej?4K%O3wW~u|m0{bPTo)asN0-#B65?$ylqi^2%+j*>zyS)kz4?;UW8Q0B
z-Jco2yw^hOdK`Bl(*eI3(?6SEm_PHoJ_7?!Bxun<;pZ9kM_^tJ+vlhBXv3eK)m{x9
zl~Z3WeGY2qfII<eB>gUS(v$xsey;iB>0h&UuTOuvIxhKuUev6MFhvaa*PXfW%XP|u
zX?yiw&l6wDuXrF%%b5MM%q|<_?67AAGAqnJNbcPJ>C`?>hGVaGo?>QTP=2;hfnoQ9
zcTde3Za<&L*bqD6e0cU$CWeNG+OzL1^J2}pIQvq<fz8YbA@59OEzTW3_(>-8GUJ2b
zu*x4fw@u$KG0`f1&hg^xX|1c;yzdwiZk*aYY5FOay;W~*c^DXeFR^*PxBA-e2V3)|
zzB=47!{tbOe82bN{D#`;_YL*E?P1MLw{>r4y`FU7{<Ygv_R9P$F3aD0_Q=1qgae?$
z|IKum?;6%mPk-QYWGP3ZZq@Acf~Wr?(h3-pgMO`eR=KoW>*{8s>F<u1Gk)N#ynkfP
z+gVd5Fi6aPuEoc|&~x$2tFojGQViCQ_U!q>me9Q*XwqibT7XlB@_mySZ?J-kRQ8aS
z=dQogzshxE()~|tw>RAsOW1O%upn%y6@S;BY^#L33LhpczO>|JjMd|b(nV93nfy2Y
zrn5kOwb2r31_?dhYYXDvpDuQ1V33$<^d%+s-`xLZ4J$#T>QDUdEw7H4Co5ka&;Mp-
zx7O8bnM@a!-~Y-3nq;g<V`gCBajRTkQ=Gr|th|?e&&j=8O@Cfj*J9^6l9cfK*z;6d
zC59aDd)8Hoxo!%YMhpzhU*C7^2m{qGWucMEGpZfsHIz26?o2<q>8+IQi^hxE#}9>0
zeYJTLTcy=EpN9UZu$6JIHMtJlun8|@U`SZfcEyF2!R~2BRjGC5-^b-<*BNuJ``lxA
z)3I3V>f~+NcZ?Yr4mdo`{&p#YAz|{p=e$KrPad%LWd1Y1C?;lF?~%=yN)8lwJaE3O
zb@h4f^%$=-o1(p|L-u!eTm}`+7H4_q-C7sPEzHoSe*gWBcdhqy_e^GFXxOiPcJJrs
z`RBV&SDkv?F=NX4g}*}++I7FEFf4F?zXozsZo@~7?2Fgs*KIuc+vN1GS(`WQbIa#>
zp!uZs@#byWY!~eV-<L9MTN^X|@V(7xybKMDyUX^1E+6fSj{47@b8z-0<=dN08u+Iq
zKi=i_weY26g`)BUW_H1iTGcxk5=`c4n=&vM1hsK9Zty<$nax_1`Npc^Lgo$55dVT&
z(z8SPu5jF#uzl&mldE{_nI8zB`mi-r(qZy!zB#A3cc{zDtL0w5!;u=2_B3{Ob@`97
z)kZba3=$JQ?aNxJc44)7?)4u#nHU=MuauoFt<*2B{9ixw{>7=!PfxC%ul$pVxjb-b
zRbnqJHP?dLM*mh_y&E6-E7|ANh1%Cy4Y`qb?8RUT80LpBt(y1yQU}+K1@}Km+3#J?
zV7FdIJN>ED+jq%+vIWn#d=ZKDU}@M`vF;KB!+{$<>+?PbY!Pl{PiUVroh^YO$5C?G
znv>cLyN`foN_noI`kk5Jd~X^Xa~lU^O{<Z_r!_pyb29l@McAL(z4K9cJW={$$jUf3
zNEK^wX$va@TV`Ia$(KB}AO?mP{<lr93r@73{{8=@Pk!}9?~`rS3{1GsL#i7Fh8s&R
z$t%}?s(Z0#*|QyQ+V}syVa$}{bkE%G@?+4zKd1y_kX!!c%rDoN18jTrYkz&RnIX-{
zTr+c9_PwXc88d^;_2)AiGF6tPPJMOylC&hlw|mB_Yzz!;FMKXC-Y`_Zy!y7YEAx$6
z#evKllKs4zix?OZ99D%q=gkf_Wvu$9rc{@;``L{T3Jv+w+a0&X8h3ZRSAJwZkx8&H
z>fLjRiQBTp1V8Sc<*fhgUOe-Gf+?Rrd8;<Y{aqty!oZN@Ub%e#nfG6Buba6g_H%!S
zhv3KepZf0qmVK}?He}_z6|m<2?Mc@+Ki}t^>U*~E<@Arik^Y~<6dUApTVO%JFhBg4
zLwpz4i<`gi@LMbOoxYV=yOD99<89OTpVsW!md$tCj;Gq7At!X{uK*#2o`c1qVE@Hj
zWW3?{^Uu~Gi-xtJ_OzZAc+UTD;8Lsj#s3$nIP~9p(&(6beN8LZh5eWIq=qf63S`?7
z+ac+e3m)J<`}Ib%#LP$+aHn5R#^uN*DIEq0p6pW#;`56?2hC(+IB;3>_40q4+E%T(
zd1k)n&#DD32gGzwZ-k9pZd>=|bj01aiYtR^W4={9E58{m%DC@f;Jc&A`miw$hMH?j
z?}a<`-<y6f?DV$mdz@km>T|FE*~q`x>+6~`dbUEwJ=Z)f`OegGGi-Q2Z>0ePgMkwp
z7vqNRbD_KmpS?a`6AonF&<x3EAuH{4df6C$eNa;hx^0@Cdwq>6*M`W-AIY~(ciuek
zUGU@V9f@1`-nAVtlFPjw<9=kl7vJ6)VJo-gGc(MKnEGnZvNs{J3&M>HnHUaycv2b)
z?kHL2?^av?@Q<QWo!0xm_q8N9Brd-P%V-87OY@IyTC?=0yUU-|Zx(LrWBVcX`BF6e
zsE`VWsjqDAKXWm2;J@d7<h)>EOx5eX!deH?w#IJG+Wl<D7lW<unU1|~-M5IL=b$kt
z&W@#2mCly`C97e@V11%nyWwrY9@d0#%XUVF0|jgLPG_q^c#V~7Lu~4c$2v;;`aA9)
z;a^-5w6tpBm&KbeWUy6j7E)!fnQK&0x02<;>iE5z85tVxUMM?TDrsV%eVA>ZJ~MmW
zXFZM^6J{nrN`!y*)#c@P%{Hy&F5y*Gc+0V*??4HQ(uXeglY%q47ChzfNp)~9SjzLJ
zy=v_yYbI@G>jpXJQxE!X?S6N2U+u5sW{#aK&v+jG&T(Sk%4XcqU*!3|*z@{ZnX{)m
zDue~UpJLh<Ja=V<t`0b>f(~@O|0{1rae7=g+l@=fE_YmxMCxVE^{x`oIB+@3*ysGM
zH$lbTiSzPquajq(u}1kS69a?s<`4@8_E$e1ZND#miuuM)Z$ajQ1%1EsKD^;(V3-$q
zpLcdg#X|N3?)gfKPOIt`d&;wNe%Mpw8DHdCI^&AIVBvDU8FRPSnp<o(Rn9#zopr83
z-{pPM*EX><qzC_BXDe#ovy89v+jm_C2ALJ#-tE_uiP*Z7dH<H9%;j(2*EZzteYg9e
z59l;5kO$suj=A(a=91d<Eg9(<_gs$bz0^=&aJT$$=LC=}2tU|=%WihBM}zJa%L;SB
z!fD=7+xL1h*eo{N{bkKr9n<w9&z@fK6Jl8Q&f_ox!+|p~S~3mH&#c%sRC`M@7aWK=
z&cN_M^6TAz`H%mvVt$}r+uISob4jY+%f$kW-@Nr+dh2D13hFCAnp~9-mUq=wf9I0#
zf*%v#Ssw6sb?CNnBGZA(S=aAxPihZb%hSQe(C{)No#EA^#$Vh2d0KOSI9AD!;5`kr
zhYjS=0)tzUvwZb31qJtS`E2}Misj#t!oPVj@NJhL<ZI36Y^gOnuEbb(2o_Pf-%Jnu
zTWRe5`hCgoy>%giXO69}HP^YydmuzMQ;dOOMtAr9y7lbVaT*|BEfqb$_x0|E0s)x@
z=I5Z3lIMBe=S|POz;K}dmy}@m&LvhU5B7dx_!h1AvRH4WUH4n1N0WCYh{b)myCLlB
zn>9Ss8UwFvj*t#yIxzY3Ij&=0Pg=_`FwEFiCYEsd9P=M-r8w6kbHBSD;IF!SZVI%2
ze8BOfYHjB8^jCBKO&9#Q?yM`*kNS1L^DHL98|{Ch?;iZ%Byzxih4DMFol8pfUOF}~
z{9gUf@B01M9V?94@<UiR7ry?@$*}B|$7TkG13fxZc@H#NhbtWLi|rDJdBpMegD15v
zGN<K#F!l?6RGVHh&3l)q%z?y{s<mfSuNrr**C}g>thil%*y-x$i){^SpU-3Nd9vs|
z+x;Sj1HvzNKfGjVBoSIWf3uJ#1H&2jXr~W$)3=;bz502fzVf43mpi}H8EV+ygZ7w!
zV#*?8=aTa~m%O$TUwQV*j>{Ssp6SGK!)lL)ov(K<Jh!UW_Pb1jeAxLX|1PE7sTGtz
z@Gzs;>-C(2@ioben+vkGX)pwrE{SAdNN}5WitWLL*gxNPzm`1k?nf`{g9l&l7OZq-
zV5lgX-BF=f_Q2ZK?TD|-oTrn_oR}?gb}spzyYcbtZ_@le*VpDfU;20Nzf4ei`_smB
zK={S(hfDTuXF9go%s`5P;hFCAFP76w=6XkMX=V9ZbKvitV#a@$Uhk7WcLWwaB3ouk
zt?u{{Zf*WKbfZD`^|#WX0{}suWSFsZpY$u8RsR>)K48Cc*FDyDa`rXT1Bt8mKYlCS
zJ-zJq!6$!jl^+f|%iwc%q8lSagXG5s{szqgTjm>$W&s~#wlVlLfX3x3oNCRl@Sl!5
zE%U>#TyWzF)wRW*{7%d>`eH7rDV<Y#<hIrzQvX+8#Om_0b<gD(dY)X#*I=;e{Pq3y
z$`y$w-{0;8Z9>|=wUuRdOi*mlS8ta+E5GwyV*GcY8nm_;<WjYz=e)9>r@e~lU3WH+
z>DhA&rLZbkotMz}E6<{{<NGQ0eV4CSy)&D><&0{rh}40SCzI^1-~axt_GtLkLn(K+
z{dQoO(W4AHvY@!&<L&of58mTWWj0{+R%LqAazC75S<*sJ(5l;7^DF!Jn?GXPcX)Y6
z#Z2$0r<3+^@FdK-6?DAR<&Th{{1u+bU$))lHWDtK;p1}Wg|u7Y-SWdTH5e1jZ<T(F
z+GDV4ss*Tp9CW_%=_IqAOI)qhKd33aV`aON&Lsvb2Mj`YF6l4r3$iv2-ha3*#OzF0
z{tb{fL3qaM+Z`5H?LP3ox_N7L%%w=%a&4W4ms$72=WMN9vTtp}%az~jv-dI?sJh=`
zVPHs0TA9J1_9$i|gZ0CCj14ObKx=mVm-9(kOf&yrzR%5Nx_8vGNp{>^33A}ldHPqW
z3+q@9Y`OEQIIhSud;fETu3s{_%3cgNX7+v$GgwuA4>SyafAw798&4*Q34YvkFSueq
z%jU58mt)V{!bX#pt(`k_<^9C@u1BVRHZqW2UTeMvbb=bl^$Z8*Y%w+#_hSEd(APG4
zw)dv{TnTQkY%YDvJv#SZVo}}O-H9v17?wTqn9RU%z(+@f_drO@pKrUThcZ0=e4Fb)
zip2vq28P|&%bovLylGw0xc`HMV1AKj>4^jGii~H1_p)8dc9gdH{9-<%&#~@(((A5T
zT2CuEWTCg`JX^!Zt*=)z-ZYrEUU1_yb<i~}MV|9Pwc?%w+TL6V+vdQAvJ=FLJo$Gn
zxm_0bOiRfwQ%>!CIp}yWu<Osb-RJG@xRD|ALt0+x(e#*0yXLJG6*=%{OTPB2dAq0Y
zTitMS=iA*6UDh)A9Gob|$j~q|LQATFvoMxfBG8)QgVQnwpAJxtxUq1bw4U;#a7pI+
zhk8oqiagmSF?`4`{ov!Gb4x)gLF!tq`J9(Uc151@x9|Tt@GUQugJE%TZEN9Lo=I#B
z496yTSKXf`@<&_gp39N&gNJftzTe#t1aoBZB=22kRj=+m5$jSDWao2j<!1PXh%=7&
zdDV0OecpJe(LON!bm`6|r(-UOGcr!_{&i>H>K$Dj$8WMTT`rIkyuOPifvax|2Lr>I
zBRdx{&X~|@#OMavULgGV78?VD^`-K|k<um%AKXhdub+;&q&5AEf-J+nQ1%N~98Gd3
zJ`R6);GlI`zJ>Sowqpl0UR{c2j%G+usWo47+rcD3M!v{XK9!S!p=aeh_0y`kMV{$z
z?;M!hkSKO73tA;4^u5~oC+5<oxl?~Wk!SR|<h2$Y`V0&VXAY<-#c4?WXx_E|h3{P5
z^m(QX^=i{Y%4O!wwC9@qaohX0Rx3t}5_c&U28Lzt9&Nur-HR<DDdslAv8PY%8G^yC
z-yLi(U_DL$L$6iJgH?J@PpQ_5@i5dc*DYGZ%$~=>%Km=O`!;XWbMAUC4=(bPIJ@h8
zn{Xl1fwEtDE6z)-JIb-RvgAHH1H+prYx98jw*Ri4<Es(1^0}6IpZD2es51?s->&hg
zEx+e_ME$=|LeROnum&na!l_$+v#xuw{d)k8cIkr*AIe{y+ih0Ar7pNoU&o?iyB5oX
z3$mF43=A_GTPHEjnDMy#ew}@=)`1M30G5O-P!r3Chk?QETKVB!dQT>3f9NgGJ<-sA
zhT(_e&LzLLKh>XRap>S~P#Wz0Jkh)A{dQ@$LK#7}Z;S`NnZ4b`)sr0C-g-(1bis0N
zq~l)xmBq^I_B1!0+!Y2J7%raf{cDEzs@)86u1Bu#e9kERC<orFn|!6*c`k3Nx#EYl
zzdK$Od1@E0Vf-QZc6OI5sL{Ci!-IsqFLoa+7h#auqWqPSfx&n~fDwc6lV5BG^NJ&x
z3>?7&FD|v_SDsqsr*fH;o;Ywi=F(P0W`;j&VlGYJcI4x!1B@0C#|1YA-hZ>^Pu^jT
zxb5kA3<vx(u3zN7c`(E7>7+Z4nHd<)D@`xCeU86Guy8r+j49pQKET#^rs+@rVmG}c
z?Hrp=8zR;FT+O}h$sBNg&%Gy;#C9&}-|WxaFn^kNl>3oI?_4J+$*kG>UW36R#r+mD
z14CNE$`l5*jD;Z$Z@=DsP{-J?vItaSD!<(Qa0#yz!wP4%ds`Hl=cmtSV_1Ab_3D1p
z*X^g|Rk+w+Zr#lOd6M@pA;H-@pED?btmkB?n^zugux_diBSXXUF!B3OCcXN564de)
zn9-9Bs%1cF<v@L{ar$F7oq`Y7v|y!Yg4eIS73oRmrgCkWTU46Aa&r+w&!TtxPpe*?
z+n#@`FXzDqncKVB4=7q+l4D>nNEP4zw@yfKxffeP(=;zuiK9+E3_eq`Wf&NGo?oj@
zU%)GAaa#4~1fGVAPbbM0c}^Duhq1@@tl87eYTnenvpm2N_vLPZt_Q;p!(5MT<>3bN
zW?Kn_%wu3UurI@#J52E7`l|DfWEf@kgx=>>&w@I#;eS@K*(-CS{abGO9Z1|&Vg}8)
z3=Jz^>`s&v%opX_{C(@YNvo}&o>|A1Abu<Fjq&~91CG01?0y(j${@2y8MIhKczb{W
zgYZ)+c7wj9GK@1;6dz?`IPmRPUc}XYHy6&$-`-AWY~R_=cp&fTq<hj94D2tryl>n3
zDlOggJ41p>c6UDGgWsTLxpYi7kK1R{=}+d#F)-Zl{<<e>clyfn%y~+W0)q=C^eG==
zf;M#+ehBYeqF=f#*rg=*ns7lx-&xSPIG}i7NZ`74t|dD4(3`#89j>=k*%_=ar}bTX
zuNgPfoQpj@`Mn%N`wNe328IJibVYa$xX8x;`SyEe5#u({to_MXyAPJ~F)(bqQ0`pI
zw|}DInOTa=3^ta`><<!RxBvD?Q=0x|=Urol+m_#W_!#O=EQ_^oEL`)1gMs1A?y|lF
zS;4QhPkJ}A6im351$Ah{{%PL7Zj`az>EPr$xAhd*g`lIK8g6%3gsPmmb{&-Yu9tqB
zUC+i~Gj*Hs?sL+A6-q25mhW52@IXK|lb3;E#*Wq|#u*0JEgN*d+%0&vz=A;-+}__7
z%+4!wS|IJ@1V)B=a~qip3i@u>s(jv*_nrShS={%#8>T2S{MlQ!caMN@&$C#)my1EI
z73aY7o1RX(_EzVh_0fZlmS62)CBnaZ=FgMk+>WRh9z3`rJz4K6Y{}Gtg;~$z&(yX3
z+;viQ?#yuB1I3y5gRkuOyzg>kvC;#DJ#TkE^a*8<nWUV{$iM(e2hXh7H^}Z^%-}Qk
za1H~*hsnS4R(Kbkd&<7~%Q`!IvlNDg+7D+BG-@-mKTwzxeaAxoYq^!uI#44%McISl
zhx>M=ri)k7bF&MX7#P}D%vD|SennkphqdaVgApr1Gj^ar{1*x8)?`Ww=AXIM(EJcl
zu(7Xv-)6jde&V)w%8yd@POiyf_~xXy^4*6hmm})E2OJCZIS)8m28lB;7!>M@@EmB-
zox;6A6y(;sL5D%d!h`CD-g{kqY0tA=N_H-J9doJq7vl}}olBxYi6G}!o<-pGnkSR)
zxgTi<6%Q2`%MWi=V0>`?>)inMC-b`4-8O%+<6vO0DA~D0f9I0W*maL>7-d?npA!bT
z8g$si_tUDmAU79YEI&MR7gUtN!l6|E%Em_tWqC!O-7%NauQG4&zqRIK>fSI-wr}?;
z@AFR2VtNoDlgY)vFk@Bs{knJ!@rKUgwahop1=TV5%mKATemH`<l#a{?_Uu{x{o>9g
z{Z;G<@sbt{?2k>9)?GEVUfoeKr<%i{skGXTouOv2ZhQHB#>YRWcvtEBGcY7*y(*ep
zHt#{GOHHWGo2^r;pbmTRyVf}Saqo?U_dnTSWphLGrE+K6&qeD@XH5MKZaJ@(ZK%Dr
zE>!>aR_+_|($(J?EJWOAF)=Wxz46(};B#kX6XUi`0`d&P<!=<E85sU-`1SD`_r`-c
zHN72rpdL+CfHgz=gV~MD@uF<iuXFG7o-;h}v3tJ39-eLGG3?t;2r~SeUb@?l>2`Hb
z$5a_ch6c@3s(a6?Uj07B{Ov#X8}`?&AY&~I4f4~yZ*7T`{{E<W@6*|`P(Lv6x!vdG
zu69ET+yahUrrDB$<y_5sOS7(NFtk7N2xedar-lPpV*h;m9dwexe%<@FT~EG8lrWrW
zNKav4_%IigHty6<6+d%qch&tl-oI89G4T0HTLjGiUl$<vW^HfQv!%M%{+fK3Nnlxj
zyV#21!T$H_<4!ZVZ9b=33);?Okh*ipR%6x;+x_-(!^(&G!RfhACW+;iiEOCv`<)l@
z5|-~8m<yxN@6q5+dzkG~lIteTATuTAlC$2*d6(-%1^aI`@BOmveVg%Bh7IrgOjsBg
zd~P`HWH@u6a}r}+*KbyaXNOGr85s6C-{)1&y})2l`?dK@_|7G-e=S_LkI^C|_rZZw
zml#P4hU%A#-nT8yN_$@Qj`4tpSrbdc|A)Ic9`8J_`qQ43f#Hmk-b-)m;0s%i+8p>7
z@e<Z6u8W&18=CGhb1P%@$(yj*Ack*o_jzA;R4mk-(F*Pw)`plfwCha&vM=uPt8=Wb
zhvIgHax?sX=iv+r=(!r=4U!QWk`I>u_{)-@XQRx_(C~h9XGd`4!6&sH9h<);sxkOD
z>8-3gv&W=>;oGD{X5-1;zhnf>i_bH<eOUCqE!&aFp!{uBMu1sQx~ew=Lqgsyr+Kc?
z7nt9)pWY{3^Bp$68=YaiL@X`$z&*?NyC3?%nnnz7R_~L3b#wD}uBMaKJ)lt_P)6Uy
zIHM`%()5@~l8ZOYfAw9&`!2(V^L<;GL7}^|h!Nb3tLvKnli^Hjwj2Y)pXPm_rvKJC
z371|?Xf)rs#M_yTVaB4EOV7XA{O~)tA>8kG-j1-7d!9_XCit-wR6m0{0~|sPJF~7I
z+*;3IFsuBnq!a_gfj3u-i%T8-UH0^JRR3psa8uU($WquMkOXURLDCv2y`lWfO<0Of
zn145mUG04^XdvO<YN-azEMvF$t+jU#{43bcc_7X@h@XMMz!lV>SQNpKcF2_f!SgvM
zc^hUHoMmQc*nhG7a3{Zg!l!r2Ni)4~t&nQaJgsW`WKx*mN4JX`!mqu(H@PzMrS!Hk
z8Nqi?8E0(v-7Uv-`*+m)^G`v&h*)sJD+r1Srf&`9uqw@9l3Dg+uX!8H^+KVUk>P;d
ztKAFF)z&SPnX$!u=aOB!zc`*{@QKuWS$p^T-EU>gzaMUS&$c^|;YPIkDn<qdwXB5^
z3~7&IE;86Jd*3$smr;BU!<iOvK<~ZXVKGh6=i2U=OG?wfL>^^0<Epok?{bx-V82)U
z-hlU(=Bs8*kGXWbW5?`jK7*#~wdOy}SQ>7=+`W)bsAg@Y#Mx60Squyf|4*r|y}h$(
zeNtn3@xAiHGk-u`njo`tN%Us3g#0<*?iQ?s6>|*VJZJy@vpOhY)4SJ^m$vQaWk_52
z_I2E?>Fm`{K|P773>*6UwlFa;_)KASU^sK^X#W0cLDmn+VxO22{B%yUfeu@omLAi=
zuC`KdRn=7QU19nR#aGz)uB0EH|A)C@?}uIQ+0sRyJ-;OsE78i>#BgTfYx$n%&U!Bw
z+b}XP{HuQ(<5=7N)6e8XPS_&o2uQ=n8sqH8ace%j(Sz?}J+SY^?uRN$d7?~{OT`6G
zmrWC4NK>8uWrFvr&AjVP_^Th@xTnbQ?drrd28M=Ct6&`l<4pl(2lzkk<~(qxB8-iJ
zp+4aPgU_wyzho??e~CNGa3)gPVna_y`9H-2aRxaFX|LWFxU6|LkGbc;p7(73r!&mx
z-6y?H`BCe!M3Me?r$OrnqpZUN=DY66`W|rL@~1nnLc;CZzK`oRo4rfnKL4t8_IKDa
zIfmZ}vVzNJHJn`e`SQ9V&(&pZA`EHT(?iO??l*}S`R4R@S<*r-hHqylx`EvL$$+oH
z((nfNgX42fayQKUxQ2&;;otUO7q4!NNhr!I@&t8yuQDB|e==#^YXv!G_6IlTe!sgR
z<nSJF4ZR#xL*IyK;yxg=<@MdDn+CJC9=yW9!0>;~-pi}*&%fKvJ@3lOrLY3mVBarY
zN6-jx`J>kKQq4M8UYi$vTlDj4rG%naced=>{v~WH!w31DOU?@xrtQ;s)7mS=aKqeP
z3Y30dxol)O)3LOi!T#8LHHPBHk&+AyHH+W3?J{`mq-LPmFZfYw`j#+lhClha0_Qiy
z8aF;q*0^S~_RqgV*ZPzX+1fJ{Z^*oEn@~N!$g}MqBLhRta!_Fu^!MMdxn~}Dt~~;q
z*V#SMd)51=>yL1se-;J5`@&}VK54%<U5%c*R{y?H<T?K;H^cw^F_)ZgM^~v!RfIjS
zHP;DcIACXaiH(85ATYg)HNnkq3hxK!b4OVZoY4{CV_^87c!9y^QtjUFXI1xx>ofe>
zYBu5dnpo?`=Y_Y*4|{z>>J$Cg`kw9mKE@eq%x1jV+LmbYZa*UfL!Fb}ODm;yN{<5T
zKB(Bh`p*rrr&RB5`)qLFa`naXW?T3%^ft?_f?tL(8%UPg-3ryqoa$W_pv~}SXVu&_
z*H3p;C@WQjZGXg`FkdE<nSo)32D>xEjLEIr829<#=T%?Cl+bqPk@r#9T7a1UpySBQ
z1PgWeXY`csT;i(tvfGRC!ThZUZBBRW5Ei$Y-Mg9l^JGvj@$a4D2Em*bjsq<_&mFAD
z+XK3#^G79UglOA?)e?!%`+n!`5P>ZueB)=$|5-~(?kJCco@x<1H8_LDjViQjX7pHz
z=iWTm%EWMAar%~zwyZX*FYlAC31>WT&mstPLa`~h_zhuTc%ZMt!hC>duBI#l!#~@M
z1WCd5u8fld?EChdQjJ|L%uwf}_fm0sh<(XEL0Oyb#~mNa-`GeRG2XT|-@w|S`D*vV
zd&+wP^m-m;>t*VCfsPq{GRbax{wDiQp|W>Dpi@0TZrczInyuKFvw3yH^2fK~*BH$^
zz4l3>k=>P@8M$^+3?G<l{29;ZT`oV|DaCMu-5s<yAJj!=NISNb|H1E{XIT>Z{I>Ej
z9JsT!--1V~A@fI+ecu_?pZ2^A(I-^bDnIgS`=A3F@fZHPXNzOzdr+}(;D8u|+S1tT
z*P>c4u5saHU@+(dw^Q_tb_i>}xv~^=8ZXF!3EyvhzxUPV%;FsnPtN&vH^ClWBKWU*
z-)8msXX}+jp}Zo`>7{zJtQa3W-|}Ab)x9Itf`=wsuiNc?l<$C@#U*grBC{u1l&NOB
zF?fggnIKt{f>l)(74k|+7w!637`9FE-qqVNUCiRpWb3@|E6@19{k!^JqIR7#<BVCo
z`A!KY?~6R;kAj@JF6NS!(z+vD*2Q<q4<kGC&8nrA(jS(DJ%V+GAFTXxcSA?VcBb~`
z@bgt=J5_#rG9<9<T+;r{_9%Php~<`7?SAO;hQVgLGAN4*Zwb+2C@%hZ`+b}ZW6k{5
zISexv?~}GMW@bp(cI*D({lCN+*x##7FS%*g#lqnB=`7Rn^+v7gUw6H4GoE<fd-wdE
z^FVc2{Oy8328)chve&Y84{5wQkaZYTN0zBfFOe1ufBTPH;{H<57Jg93KFF*wPCpze
zQ6Y5>bO#nlh~dK&vrBEw<?@2vF_+v!nGRIE;@i7R+D7T!5ib8%H}+~V{C?m8I%b8z
zfRo#lsb;#dA*e1q)7NkQV8d0{pzxhbw#tD9x|xo<O21>ak^R2fc#3zGyr4Wd%JVfC
zf*<TO?@14B&pIW{z>rX0<hfmNV@~?7hQe5o0N4%l{AO={sKaB^dwHMqn-Fl^F)%PB
zJpYxqqpzdb^RVM;>)L5Mm*{7)G~7L*x>o5?Z^c7T@PyzK2Ak!|FCk52<DykL3~8@i
zJ~A+z352vTYb+w-Z%=597G(krD9GJnI$j-kc=FB{yAw6vMMg!=;EuL_zdKRYje#$8
zcc0`m-p4;cy&TX!-@B((YxB~%_q=W@l>L6UKofSxU4_-TLkA{*iiID4V12dxaHPwc
zr9A9!K~Yt<l99oBiuWy-BU5`GdhSeTeGn<zDbK(#W5LoO#u*ERmoop^yHEO#HiJPr
z_giKL1M}Pq2cnN2KDcZB_szKzMHoJ?yegO<6I45|Mm@j6sEzkbfb_Cu)i>@fd(ZYf
zozcSL?XRsDWqKYNDupd#VPL4Rdh2t4(cF*B$BH#!w}Dnfz12Ch^+w|JIfxO+>#xo{
zPu4u_xT<*B`XbM=p9}|tPpRH@JF>b=m#yr5>3v>qOXd$TeJbFyOD8{Q6+U2ZJrOj8
zeqha=RnmOdV)Zg7dRGM~GT7{mxwI;--<9A0(Vq8hOIJKspB}=lQa7ubZ^Kfnlq(aQ
z82B#U+K?l0)@u3}*EtLf4F0R{c3=HI=li1eix!|eBf#-}USWF3^Q*BZ<;q@ddCyi2
zzjOLVC%B#Lw5wo(-0MF}%jO9)R3z<O@;z7V(c(7`J#&um94NM&1UXsHK$uOQ$sk?*
z7CS?N-><v~*CRVGJyh6xQgv+zJHz?avHkZ~GR`{^b!Ky^?RSO*mi<v3+y@jhudj`t
z%C>mNc~!{=><kPae2P5zb0;3$%a<Us{9ZLEVS_r}pHHaXy>>JFQTtq@Xg;um85kNa
ze!Uw|{(W{Jcl*k72G*xlYp=;O*vv1}UH92l{wjlY`MvVPL1!3j+Lc!_GcX9JT;yk9
z_>g{X3Dbd|$}~2H133~V4D74xPW;fC{^Y+t!<){SOQkL`FPY2M@k#Fx`TS?gK|OGf
z<v}D9L;I0Z?qi!LsWLDe_<Ty$c8e?9_f-vn75AX-V>rL$?7m%-?cen5gth${-W;-0
z@>AtzUq0_<%(lohh6BdgzrVbyxww8;!`$d@iH7F|Dy0kz2~B-dxeoB?PUZX1f6fIo
zu4lk4{l53%1DkD%%<n_l8GfsROO33?xwkti<`sEnJI5wuKd&{9=;A(b@AdA)(Dl)?
zngaJ^HybfBFjS=F?hKe)Ubvq7#;o!<XgGc7Df0aKdp^Ha!(5BEyAu^b6$e=A*rjue
z|7ZnRSd{Mjvg)h>Gs8ER+y6Hh#EX=zdv_<gOR`~knMxs8Wr7+Hcv@-3j&F&_vTYAL
zu9VlCx0PR#vB4HxWNY6&;CD5(Ph0T(w0DWsv-e5+J>fX8FYEfs-lhbRc;zH;)%W+}
zG#*`DqlUFtH#4UvfxHSjJ}iA}5g%LGv!E?ti$JTHUxdvlC|FnIc|D7{;cv=54I4@8
zaE6K^cO^(eI_*)!MTRpsIzKTo%;0Qhd$6HqmAu|IehJ0~+iBjb>a*ita+ICg&^Ysy
zYHd%)?w!vWqOE#4nt2#+q-UqkOf=DcKMi!i;Cb_I9=WT`(K|)tp%&ZBFXMZ5$x`A5
zXFBL4bFip{>wVr*^Ml-(hYqfIZnS$FJ1@hH<ojpD_g)u%bEfh>ulGl$4^#S<@G>y?
zoIIMpf4-&&1H+HS`=rI37!#h=<ghXvc=Gk`hQ5wq-@^xYoL1Gn-QLY`fH8x)X<Z4c
zbup-Ewr6u`ZlGSy+uZxS`!pF7-ft;Bvp<W??W5xKFM(4S7#M!PobAeXulnHm-BV=2
zPGVrNSs!z0dKn*^#C7ib&5&}IfnmeiGPYD*4-1J>y_=VEG8rsnK+X)8e$(?iiecWB
zi8~k>8afRRur%znx@dFY{wHftAKM@?_rig#eGe1vJed^simBo7WKjL9ef8iu2{VJ>
z+y&jgRc_o{%fooXS$gRK4Y|9Zt^9BH$6R{8?Zkt?*bl+ye&-oT!?M7<NNe`weQZ7X
z@Pe6PTS&T{Jhvd<p<0(YTZ?Bh9AM0>{yOb#6<^Q#bMjw%SsDDFd4SsV3<jL~S2#Xw
z-_rq#;u+hbo7o;D#5|pJ4dkY&-n+J*5G;GP<$c@Kiszcszt}0+owa4Z5hQ!7NYjPk
zo9pl2|6&vkx=N)%>%tDq%kJ*j^Sxz$x*4p}dedkY|JYC5K<j=JEVMpc{*||4bEKXM
z2m8Z)=YoyGr5O0aclYVvE|ry-Z~LFYW~Oo=Of3UL!HQpbE4ua0iE>oGH&j}8>ykRd
zg9BT$e@&H3ROgYNu|0HmJyYGiW$)XBe=>f!bL(ryVh)L;%VQ?}_h(>WU{{&`<=#%F
zADPn^K}~GfTPQ2|{Z+%om<}Omls4$zXy#~ts5gDf302z{+zfotyXWcGMl)I$g37Qh
z3^uLGnh@Q_4^%;g?E#jrcMF6BrSBfPSH0$ZX0az*GsA(FE!n@P`X!ctW_piU`R`n!
zKd<z_HNV@3G8roJUUyhrW9m6nYsA2CfHCVi*SivS`!hMvT*z=k7}O$)J-pa2L8jI`
zrVH*c`K#rJcfD0&_;x#1@1##A!;A^va$V<6u2>%~aW`rSlEXkgDOj+MSE^xexVW`$
zvFH3yR))*a1a;^IkMxX<F_&&Bh~Kz%8?@|!<3RDt-HC#N`?VO{3MYI2QUW!O4_}!k
zQX3@yXTs%gJ)o)%WabU#+`4O9^%6|H17Q*RLHX7@#^*Z{{@>klGnwJQktdVnZbcUS
z{+bZ;yw?23Ii`lW)<TfURs-heUTg{PWIUJ|60&YBXx!e_x;M<;DrO6-Kf?i+r<3xO
zA9?LJSao@yG|!t^=6?@^rg#q+-{O#W`)E3Six{Z5Ke&6%_lm3*`A5~T(@AeA=WaVT
z*Dpb2I;;?5c))&j=K14J&3nsI=b140MC-j=c-CuAxM|O+`xhDB+?fcv;1%Q<1_lNT
zhwWa?d&BI_VxCRfw}O*l*?QgLJwc{Dr#3W7o>r~x>nJZi&$zARUU@U?P6nHu`=rCZ
zTB%e@9QEp9U|?upuWPvC{2TeJocD7zVW<1tu)Z$%F;sWM*3004h1zrA`-|NR&n4{?
z5PP$A^|r%23^R6^C6~PX%_VWQa`$)EhPjrYW2OxZ)wx(181_9q3Tg=)__8J4?)j?L
zy`}N?W;yb*Obo^s+j#a~H1AoaR~pk<eC=A>jsw@sK!MECpniFswRGoUjeAcg*@4na
zf>e>`eC0<`b3fcY;{kO<gYD(Ctk_qqZV&&%QWV4e*I_{$uCKfG&WIsFZQsv*j{=_?
z%-X8Kcw?zDXpmBPa{%<DzynWyHb{QEUhATB`*<6}fiq7gnF$syFPAv$HRbcwcdJ2@
z4mmHc{8wg}7qR!947cpIZy5}rB`ROGu)3WSIq==`-R?w9*m8m!`rvN=VzC>u5L1$W
z7Vne3miwGxL;Wk6m(z3iNiY}~zx~~n`g=CRje9#SmoU7!G_eF+zBP1yz62_N6P$RY
z8upfj&p-KWlH3&*hR;*IqqgqnZg?wcW>CBnw&ZNuy>E95)La<K*2d=F<C1dQ_-P*}
z14F{5b;^(8_I`++13StHRC`8QGc!l;7EpwS7(@N?_idBSHgnvt@6XMDnSPhyK+V?u
ztkd4+GbdDMOEPWHcAvxwQ_Ju`;LF{Dv<nPx*6s#R|1VHtSnw}aKu|tSo~7sT2F5V9
z9S5%ExpEv3F4)^xSaV8s?{rX_HrZ<2cCY^6_sCPAS^#9)w`*Re8|Lnlo&(=4{NR0#
z(xV8c4dt(RHm2&m+?>VG@Xh?-*Eh`#g>$~&El~4jD0}F!3Zxe@8wWb4R5H7nEkXb8
z(@8oxObq{4{Hra{7rk+7=h42;)4Z!P&bu_s53l#uf69Jf-Imv9b~Yqt_rIM9N*BV{
z#3U;Iv;IG047-NnM(|snGre^Q+G&|!D?q0+Ex$Ey+Vx9~dxO(G^lw{wF*MYl1~r(c
znk0y%ePh}n?4AS(7`1mU2SJ+J&o5xS5naA>$<!*)N#m-vTT)BDA8K41+g)(4$a8kb
z571!0w=^Tu2JTw(IXliB$hfw1iT)!N28J2?zWsaMyz1fmt;Vo1ngepDRM(!p(y-P-
z8d4B5FdT@F^k(~ZF4^|`RPSGFq!=FbgE~@$$`Utjfme2M9JtY^!o|SgbEesek)gpp
zf&*0ACJ6CJHT*4}?j7}#mEni>&Lvgrim$SXFxtOAw1H9SQ5469sh9Uj+a$9jh`+j@
zxqMRV+PlvunSn~08KTcQAI#TH1(^c!U-en@2OmD41FhkMwP6_UgGO!Dti-wAOtsR_
znd$v&jTpm&^-m_fs@q`Ac<|brTg(Y1?x3@U)Q+9bW?*>G-=_*HRSRx_l6A>+@2Hh*
z3_sL!4K8lt)nclfm&j~<z0N=X**xZ)m!LkbB9p<ive-)P0EyP`ehdr@#*@9P3hX)l
zXTUEBx)Hx~Nq?!_^sWcXE#=`M_5a20heztfe(Zm9_ipIzh}&!r_TFJwGnHup^9qFs
ztE-ML6y|Xq%V&LD@}R`Q>Hz!ilKdA3N*H7v*zXHnoX&ID|G=mDOI};eyd3#mHs$oK
zs(E{Z-^)syR~Iud+`IC|djB+`EuXgTv}bGBD%lB2PYet%R&QF-Hx<-LzL3ktdm!%D
z#XSZb3?KB)HY{4XWx>?-=Nu;#t*KYuDP1G5VOO)jp_n>`H5XeA5_R`U7w|GL82D%&
zKP_;`>F<YC#uq_h4eEp3Tm3xKW(8-Mk(e}8h~a<G{Nq+a9B+Dm)jYZJCxhWZ^Eqb@
zbEoF8H~(1^*1A1{L{-(Bh@BuEbJH&{yqPYqdA!q)p`qW)GOk77pSnfH(elEkdiD#q
zrf*uIbDDL*)=ev3Ev!nP)N<{e6Nj-O69WU!tu2vFEPD=YhRuN7$k#mn`xy_<heD)5
zgB3cflG8UPtiQ7P;4#hPOQRSX`ZMlrwlL2YiJCdhwN%52;aaMSC&(QP3y#|)us67!
z`sgLbz);fb$h@JvZi$R~79&I0)S@}p?`yJfXdCA={I7raJc{dW%nAMmvsv$-7Aqc#
z@|mRw>KgKdocd_iVsP1h&#Ms7VSFG{H{1{E`?`Czc~%p@wIFN>9Yb#w-^E6Q1bv$p
z0g$V#7#c!NHoF}^`<?5-<5#~Q7w=@;pr`B!N`njxwrLMRM=&{Tmo#Dc{n-6f;Ua#9
z1#6#Kw;t`=Fzc7x&F@87!OhVNrY_#JB29^9LF=#IHzqPH-0FJjBe-&0BJ=#5(1F#*
zK!^E)9Ms@9V-=^}IvuU&$sjHWv#qmq{#5$H^1!?m-yik__j$K6FyxxtSKpJ(xO#Is
zKO+5r6gSici(Osm$h^TE6gaOK7_P05(<xIAi0Dj|z0w^0&Y9!g<ppyyBSVfGu{>Bj
z>wJGb3;SBz9qU1dGuqp5w@&W`ZEgpd#PD1HX+`My*FmB+Gd@FFCZI)BZ1Wl3v{&VQ
zv3R=U3OmCFKF#CZ0*A~K4|(;ST4W_I%kbJ@66B773(0Jtv-%lIuE&&b5C^$t6$8UH
z&8HReP8RuXQjGG!{L&v}=l+VSl62ZJjb+W71Njpe*1T{k*dVs~nK{UeiYY~VR-M=J
zVxDKI(fuj{w&eT*r?Kh5_M4iJ@MmB!NJtI5YTa}0k95P_)#aVN!F}GL3=FTQ6s@_x
zHG)Gl%t%xk?y4_`wt_~^85mx0H?t+=->K;2WVkUUZN^2H0~>_ut^e%zG*;n@I15VE
zXIUTIwK?3hb*G=@IneOk0q$k<>JN6?T!z})z~^CkuT5azOD?-3*6<qx4yXC)zKOH_
zoqgwx2s6Wt7SGMvvOi{Q-n7CmmCYeqnUjfup?1@cKQFx&GB6z2U$Fr+E^xt@jrYL2
zyC%(S?@AdNa=cD`yj0{K(V56>lQr$hFIm=GJ1599yblz+y6}D61~Xw$lk&r)XJ;1O
zPk3ON4#}+y3=6DZeb(py)%0DvJ4*+2_%$dF8y;$QXGu9(1lhj1qw;h|2s6V5&9i$h
z7Qc@^;I%A?dBNI=ERdFhoOOU6gUv2MW(J1XK(VVw7BJq}`OB{8&YnN)3>yM9k4JJO
zDyIH0ILuaYCC1&BzvZgzR9Dl<@(k}2BFxqt-#+E>S{+bN-uLsL*M1Hkj;w?YYb}tT
zbu+fO^kBOMyj(RfNDY*26L`bfaQC<N(~6bs3<;NK*@`}IYUBSMC3bb=4Tg+l70@+J
z3=9kUXF0!QIN<-ih=E}N_pJLRI;D+wcX2BA%mz)s-ZskI*Us?%`_-Eq|5BBBGE%b|
zxEb;@?bQDX3T-KyUSv`s$H36=z2HBG|J;+XQr&9lyyf2)7*%ZFxB?VFAk3C7<zx|H
z{pL!%=5cOO28P>{iuQ0R)(BhF%!r-Ju*FCSTv2^Fv{s67o~0<L@!{}X!h~UWsD6l*
zzvaExj0`uHJ^Ow9NR#`I4J%J@*souFTHsK5;(=3qvr;cJe2|(iyg{z*86yLzBtNvo
zI`d$DYGChCaJVxtFx<Ux=HdrGp*{2Of|5MQJq*l2VpliL)!tBCZwflMZ=2Rr3vNZ7
zC4BOa<fIzH+#WGAFjT#8Tgkw4VJ+zHI0l9nn>MZB+pEH8{Z+t8V!4cMITJ&f($gI!
z{tWWZ^4scHw{N@S$rAQ$sm`j6KNx<jfA;xdcfx|L?=_EWgG%ZTjK+xvg_l19+s(kx
z@Xo`s>c8~8_n@-566Q=Ex7vNL9PVx~wh!tPf5gsEmhosV_m2t9n^vePF(-s7gZ9na
zmaGq9U{Gi=5MyHavq^-NfkD>5JcFU^*}{LmrcYn|6J)rtGVQ~~a@_;FCCv`#Yaah4
z^EX84LYHC>!=5A0nYVnuz%!4XfuW&1`<y_GH&30VD5Pz~z);dxKKa34L_1HSVbh8}
zXO8$%UhB`wPc!ZdGHeJwdv5RNwCSuL?7oFCZP+vscGB&F@9#o+7!KGOXE2oI%_@pn
z#mI1jUGw;_qc5dX5A2qdI;Ib)HI+7O0u|AZm>>K%ozLyg)Obzp>;zEF^JB%%BM+tr
z2SS6#;rW&4@p4z#-ao2=tz<f2FhiSV_ht{vTcs=vZ(7sl{|b@*kf)v+Soxi)VQSA2
zHU@?-6I@R+@LZgFjd7l(7&r-~p9x{L{v3YlqthRT1M@7mKM}n5_RI#xf60%exYqid
zUR3mrr{O}4oJ1S@+t}qY`k<Nc16s4HPgy@axL6og96M}ZBJ(;nt9a|d-94bIdcbbH
zke?cOHQi<33dyoZ%Wh^eGi)%QwfB|13Df(u=|T+JlAXK^3@;Wg4Ps<y5ID3^fZ>7o
z{+Wyn8@A7KWR5pwvHrNWaw0!N!ulmL`MfSo{DwIV@v~fa8h0Kz#rKDo@xl!A`P>Iy
z$^AJ7I^#y_$6Yz8)WEr?pk*S1Rr<X>$&7o>!WU^Y{4@6FD0{5dVvtvMi-F<I?99)#
ztUordPYskk#o5p=<p~MI7n=MR86TMI_cAbSIL{;1aQDZ=qA%as8Q!d&@;H^_;qJBv
zvFCWDAAoA>MR&3n9ys+%Q7`!;BTx8e%MVBG88dRH73~oPox7L2L`L6<qui;*eL3v3
z|AstI%WIn#>R(~2F9{I4x)FYB$*+|&f7dLFyRoZX;LsAw^BfEt%4faT6h3=k_s?p^
z2Z!C1KpE}Cp%ezT^p8I;gX2yR6n6*eK#A#@)zcTQDhvy_(-d2zeGkgZN|+ts{xiFw
z?Aa$~i7nj=*%`76CKr8~3%W_Ybf%|}+}ti$X0keIE%w3g+;MPpF)%QEnO+>Sp_X5<
zrSMdtW;H{?eAD~k|CXy%OkX*J;m3-JM;I6y<aULEyUu^673~pXXJDw#S|)L0*KC19
zJ8v*H=y_P)YZp*EyFukaZX53hms1<<!vFhfZP+w<(~6jAMz$3?tA72wI`Q4Yt(_c<
z3=9#Az0=trTwDoTNVA}NR{8$=6@33r{DcWL$Z2)2nipEVDEh{(%u|J$Wef|rgZe%T
z9CC{M;O?FpIJcX#p<lui)K+D%dhgfD;6K$hwF1;1JTOnYJ4?pN;<9kgRcDUGIYoQK
ztr;$eo}I8{=Aj4ueY2`_f2cmSC_W|-HFGMcf!FX*qx;nkxf`pCGT!b!c%6ZPVNG!H
zyN^yQ1kS*+T*JFrulfF+xC2Ql3=9o*o2ogsy<b0N@y%EUhwDDGWZxXPt@erWfwCKD
z!tPfZD7JzaC1ymoGTRhu2r>M4>L<d$@J3VL`f%A*{pY>Gecy}N8Fr~XjnJ=((ct@c
zVgqB`qx-CD-W@oU*>G^C`StpQ((<-*pyQks>o&Iw@SR#@<PDEJji)<!6k}fV-7C?O
zgT`P(oo4r{dov4{gxy#rujy{x%-C=)vuyqRY`%Xlydy)7Cow(P>oy6LNgB@W4p%&2
zEH{VwK>qek3=9ePB}^Es4Ku}57#T`JYvn&Ku&ua!ebWj)*CYFv%B*+dxZld8y?XuH
z<d2MB;*0nGUzC-Rdx@tHbRf`HFUxE1PwFn=dKdz01YC#|U)5|bJH<8iI&8AjVgH#g
zoY7l7Ed5;g7)qw@t^Sa=?>qB{JY~>qrfuos2nM#4l{pRRJbEk*_w!O284k!9WiV`e
zy?)B$rDqr$^t>(aRd-6=J9?i}e`S4l<piEJIeJzNjynR3w`|K`a|0a>vg`*hyORWH
zWd=Anc4<DXc(^zJhw^UFZ6{!%szo}hs@hLYv`fs+d!xt1P?dD8W;<it^WF9g@6Cin
z85k}EfA3;VaHx65$iR@lb1EML!*5U<WS9KeAQgs&bKaJ5Z36qUh3=V%^8cS&w8y-I
zDaul_`_xy_1;<Y<npIiHy4H5bd(d3p<ypnd<xOc1_}XD{!%#A3X2OSU8*9KWVPIg`
zwO(gcmEWnDsT)kc_PqF<=FZFDu>9t3_V-00Vpn&rV5sPyIE8_sVP2G$SOeq7o$Mdx
z9BgIyFnhWu1H%n-<K6?;woTZ*3%(X$xy;@kc7`v$wf=?6Ln}gUa}Mm}oabp7ckO%U
zq{gXdXF0B7_~H{8a$K=xW!%E8GarIdc+Sbz1(G{1Bkm@VH4j(Va}tsJ>Q+3rlYb$!
zEp1NG9#M0K3*wr`Q#l^ac6#Xh{1M{=Tel!428OCrN~sKON1n?uFnpM{w1k1-hIneA
zuM>wmSL50ppPK|3F1TwR|F!0f%gzsK^~!se{oDRgK{n!K<I>9vdri$Xq@#BGS^ioF
zzDYC2V^*WJENlfP!-Z7M<F|js@~9qK-RBBxI9<q11vT52WwosRsr__^h&jUrb5OhR
zq1(m}tJa^jwP4tjsUpX~uwc23277{m*nIn+cbF^ACHXV_cpE0h!0=|`Orr#CIVX<i
zn#ZdPnHg%QfLmGNdV5~o*}xcgN$1Sh-#ly9$vrcgCht&ha{a5mR_ir2B^CyTgy>o6
zao3sB5Ae+amA;^8Y&f?&KylA27g#rrVXpbw=Sx-yZhKUH>f%lph6U%}9B$bDQ=0KX
zznc;$tX{=!WZ*e6cM)UUlLJ-^CbO2lXJFV+oEmsl-%=)%X<O2yqL?lzh8H_$ZZ`g~
z>ernkJ1Z(YPZi2J?GWSxr}wzR*!FMxESGbD4pxsicI3ib@J*s1w=lfeG$pzA-&4oV
z51TfvK(tX_tk|@I&zU3m@4>K`<uZTwGBWJF_9pZHveb&JE+!0rPI@>oFgVET+STt0
z(qUjOT%FOde3tWTh6DcQpiS%jXQnVlf7E?ip_#?7;C)cv_qb(k=0ATw(EV3?;FaI0
zMMh5q7qHKI{j*bV;ndwz7C#4FG5@BicoNUuj~8H3)*x5F#uoP+-cE5Szq)xo{}*=Y
za$zS6abpGpma}m^(y52LU+t}0zKHRGt}^JHH`{LuVi?#GR;Dzh+i0*i+<ylu6YMm)
zvxJ;1g4lBIEUJ9S$B-Zp)EBPU^8Qwv_}r<ksV|lFy)5-&?H5jsj0|a4VtKLdnbo`R
zB^mijpd+Tr6rV=yH{UK`$NUU54FC?blKV03AGEAtLuU+DD`x(+xhk7;$JthX*UaOr
z3<e_Kk`KJT)6M*0*~AJ^1sJU*-oRK8z{9{$ae68!xeFV+9yoTl;vye|#EMAc63&Wq
z8yN2e#oNDEVbQkSP$9M8^Ru&GWg_l=pR(8(wBh&7rKMjaHv~V029Lw`r83j+eQyg#
z4EbE}4c<IIQCsb-r3*vD!Hj+XYc5;tc@d+-uqRbTmH{*ZVZ)xlv2F{`hcgi>3?ELf
z)nH(_v31i5HN_TX*8^_0pdQ>&9tIxY&$1bdDk>%>GVeL{RXFN*l-ShGSq!pQV)pNU
z#TT`5zVBHVP(td9)oNh04guZ21PYTcO~wWvHYI~cT|oR2@5qp^K2uiSN_f0)smxq^
z76vxWrxEW@?zn7cQyd^Rb?+30Jy|MJAa~_W<vzghV-GU}!@WoIK$nLZTxQAv_4q`L
z84N<sURc^%&+y?)U}Q-0#t*ZmJf8YmeaoZm{tbDvUh_t+p6`3NTabaFAvWusukGuk
z73WOA)AtMv40{U}x>a24i~zX?gss3mCFz_irKc{=<6%g6q2|ob5Lc)t!4PLWiHCvV
zLbCT$rVHiW=jZ25<@s=Cr3b@<<x?I{1%=YmO)FkaukD+{ApI4TsFN5PjytCFCpDz=
zJbK`-wr>80O`D&Y2QXMI(pk0g>5B`uwx)wtO1u&LzJez#GNk<$JIH<phK4+E%WKxx
z-d*81Kh-rAbe$wv+`-*sbHK7+O}(qmOV8_;V361~<#8y-!{Zl<8^mi2SBo@U?@?i9
zVEA$)XeYy$J6oF=<DM{DGW<!|VamYpJ7F2?jTNt_EZ%R-&@lfnTi)H~1Kps;rmp7k
z>g)a)sqd_~FYuoIdh5Gf#&g9MgNdM4PW6)@NuC=kKS3J>3&i!VaOi*HgYBbpD8FKy
z&Hsf}y7b<g8H@}HEt#9`nJZ5DNixKl2yrtoTnO(zKmXm|1RjU;ceNxQxVDKh9q<S3
zaJsQ_(~4K(l6_kkq>ID(r3CaD4&-YdujF{>rt;xPV>SD~B|GclxVgfD;?vU?F~4Zp
zsd)3kEuE(?azLHO>cx@Qp3GrzPF)9TX@COe%i*PR4_%Wtg4iHjax5ftLty<<ndwSw
z3_n)Rbbn>XGH><?mWJs)OPClKzRY2N#qee3dCP|Bb5F1`$i;SoZqt~p$zb+sPvuNL
zhKA*PLU_;5J>61X@VDja-&nD$EB`Qj3y%!>YV>8jR#RABP+zei=w`fjy{U&BD(zt1
zH`@tCYs$~xc_}o{QUq3nANZ%;z3N_R;S#MIGvqaobAM!Fu(?{}zDtbTrV!Ns^<en1
zexeJg9^M^fz+k&AM2~^t0~_dY#Wy{U%o_^-XHS!2WcVO|_WP3eMUCqFrnsj5RL=JT
z56O6PhM9@W9*8TR+xAV(2vmjm$7;1T7J&v^K*7N9>#(Fm#k&yrh1PQof`xO=_;Ms_
z#W6I5|6Ip%{^xFn2Qw#nfb9>3*nc26HL%x}iDCbabOwfm>3a?^%--x_dG0AU!-r*6
zKW;X6Jm~DS_%V4(a_!$e!Xj&)tkKcB9@StQA{P4h&MO!53#YbES!~=1x<+Z~vw2q~
z8QWfjyav05f#HI*_^OulK37=0ZMZ+{=O6d1rrs6l*}g%2pqrK}B8?}1*<JCVv$&Aq
zL%cG`9NYAlMhvy3+kgBy$!NsD@E}z4c=SsKh7H`QfxXTg>WA8UcdTaT?GR&lkb5>^
z*~%FYIKK<+nO?8GVOM2jNc$(|8}esME0+mnEUmLM6$hv4cR`Lk6P^dbTqUe|yz2a|
zX1j--pj$m5qHk<J&rd8~cJ`+e1H(PD&wgw+g&|^BS9&n~*gg?-r;=TC&A%rPtr%*b
z8uL9!P2S0HU~#q~1H%SqHr@lz<}8<a4+^hzP0*-e?}`W0CvRHOcl6-=CE%tmE33BU
zhu<0p?#(p6o}N%De116t1H+33ZB;`DbuU;65Vtc#-6j-lCB#Jx--07UCJP*zSe2k$
zXYzYH1H+HzwE4$E{5~9Ukzx3A+XJ-XogqeBvOz9NOO%13qIu~%28K5-ks*%-4$b_M
zsQhnw(U%?$h6l+!(hbYcJw0fB)`^4vP}9^uxi|F=)Md<zt_@}1vdP2Js-J^_!9jdS
zJuF=>c&%s3abBhi*8EP$_YGl|E=+ze#&F;`xFdQ!sX6|QF6)ENi53hD4U7?5k_~d3
z76?8_U0%f4;9e)p%#aYCHmSWgVu{T2MXU@zW=u)0J@%~q#shI?rpoD49`CK!ztDBR
zkl|bNYr`#{AM67yK3NAIcYG&u?7|dR(=aP&Abe@FHTf_HF;H8*VrF&GGU<rj$9G;h
zdryLa!7fcr|Hso4XM!01<*M*9FeEVWyk}g{KP`&2;^M*xh6fWtTY9#w(^-|=%$A`1
z?v*3+B36con`<QRv9uIiy0ibV{8AZxXO8QWnx@W~>iYD%OoOaecUDyW|Er8!j7&MC
z85kP+48iw*fn3yZF6-Xo4|T8tk>LWXvF<^)GeLdc7nvApVoq(G=l#pM<U_Y@6~iAR
zA<*ho2Dxp_7tGB;1>;t(4~vpFGC1t;w!GH`DuN6$7|fC{>F6;rB(R>%e^z|+p#Jkk
z513y)6yaxTo_gl=A}bNu1K&)q$Dd!jVD9TFk6U>d85mwj6fcud`V2cCbwT{PFP#28
z@PW4t@uwE8I$ttpCF`}kiA7t|xfvGBow>LAL-*dLP$xlZvcC>I4(B7zaD3RMe3PL8
z97yYRRy`It6n^pWty*u(s0bE@3-|6s2K`7?;<~5(wBj~T4x`<>1NZq4oI5k?wZR6f
z?|lpm3?&mkPvg0`@fxhg2-mv`D+(FjSZ>Zv{QK@tE+fO1>u>JP?iP}ho#I-m$HkDf
z*!D*~=#)-2?llZAgy&~7=xcPJV)AGBaT0V|({6*wR%`D1p1OEnjNyRP5}EhT9Kn%?
z77M5A{OFjHY`f;ETgHY-`%f>j5|ush&E)#s{jPj#YqHtQnHU%xmM@W+uGqp3+Dr+G
zFop}E=MEe&PFI3Dkl}{>*?p7OYc+12ZDPHRfgvOR-Cdp^Ph&(FuDDfy_|E{kgDO0T
zZGn5uI>tS3BJ>zOoB+8fI#lfH!s#LjZ{_~PGBT_QKlM?mr9eHb;z?a||11w4aJd||
z^PQ8mx#sbi;8@zQ^pnJljfbGtE+{`U9kvRV;oH=kTQ}6*59&L|$HcJ4^VCPX7K5qk
zHk-DKG`K5+#=w{#KD1`2{kY-BpO;~?8T75hxEXBZrfoSP%g~U!I{upF1gkYyO`g7(
zDZp^xmv0JJ{~z5Cif4^aybo#yr{P`P8(7bN{pNG+LYE`xX!DY}mY`M#I5<k?8XJ7j
z2aRn(+lved-%l;F;!&&#WnFXC_f(-;5JSUP@O;?2BU}#`=&UL>WH6Ab0d<HKbnNP*
z+63gb@H+5IxUqlOm3))IVTTwa1B11JsMVUQiz+$!7#d8yE#rRb%F4~1;`($BtGuc4
z2G%gM?6z%88x+r$mg&W3JgxqG8<a*$ZU$9@-2_TTbG}<Y(0mVCr4AN)!(Q#3xL3}J
zLwF_=Lrzb%#E(oJb_Ta*&?+7Yp~KY-FPP`2GpskBBftPUS7}2ksL$gfe?s=!u?36_
z4QFScl#rX--PrG8d2e@m>r`3E3YHCp#^={8n99C?CIbV*1z~SjBZG7<Sm|5mX{k56
z+_qtU-&3&tpmY$O8Ynw!JAbx$_BkFVh7FA10oAQJ2k!+jI7ysjU|^7#pq<Kmf!Xdn
zLtMF*Gy~`$i38Wpy6|O}&MVp@uE}uV*%F!8_b-VnwHXL9%0HFjTKgwhY%1#>2I&B?
z(Au^i`8S=kh0lWq>|Zobd7R7f&=KS`u>B=-EH8hUUA_gHd>G2!+q4ucV2_ynddlON
zISdTa=E8<8i_`WCGccP4fsUqBVEfK+p_IS-{QPNAEEQK5W-v(XXrHq9{s9Jt8?!d8
zc;(3KF4VsD=evD;3<=rG7PS=wiA{B#uqG+Ue)bfZHBX#!7^D+B^tWvGu#7t;z`)QT
zXE+^}KpNH=_w&?kZiiO~-_xubwyrGSH>X>eA>s3^+K<;4wH^OEnStkq$4>@^0|B69
zV#fcBalvXmQ}z$bgg-JE6tIOeGi=BW?mT?!j^sT?h7Gow$8QT9;-A>um|hce>f=3I
zoi%SjEsMAYQ?2e*atlh;f+KD=KL^zeUoHf#<nfFQNd_Hr4hkKI_ZG~|`w^qF3FWhX
z{&Lr9*gDf>cRT~b4L<Ad2kr$m9F*n-&9@{JtPA0DX#Xk0T;UoSa(ojb1E{r?;~yFF
zby0`$#KX5FOc)q8)VA?Da3o7^=$i7_rlmmFCgS8ComI{k8Mj=I@qfOkB`i(zcr>UD
zc){4a71o@&kgDmvc^NE<8fp!%vaC6)^t3|LkD=jh=DmwQ6pPs2t<YI@d0{()L5lKQ
zW(Ef4#|Lc~V$(Qe54`S6Wo7`kjkTKD5^DEFyRk5AsMS0keV9$5Mzi}>0MD8XC5woY
z6YqyJUP}{mvJg;T^G5Bdg*a&1#<pZN{1U*b2T`3LUWC9#5gB#|iiOseJ@)ytL5#m_
zF9XAyGd^Dgjwvxnteg0bk)fe+XOIPhZ0Y77e@-g7HC&fH&DPMk+uKsFU5<%?;dY={
z=-=ow;f05z?o=M+Wk^_FBi<}<F7<#`P~X>?$MO#~PyKWG&pECGU9%3}s6WjgWyk}n
zAmh9&XBi&7Q1K3yME<7SGx<}Z0L@(t4RdF9$z4mERJ2E2o#DVYQ|s?_9rGGDFK0_Q
z;C70gfuSws<Imu~i$Bc0#P~wNTY~XkTA@0FGiY;mL+&RbrZxSJ%nS_HDK{8wq`DhJ
zm&&A{dw%$oo(ubhQ!zE5_UGfE7SM3>jpiarfz7bfk{8TBGpEfhGNgSID9wQIjdhz=
zyxOT2f0QqKqlaZ&mk>k3^0Y_k5Bz3T*D|nWEGYrqfoQXYeL;6k9pj#}&iM>&=Rk%3
zZIh{HYmR=OvY6F{fnj(04F>0OyDtnGxk^qECnF<6)*WQf*63dK?_Z&sb;QkBjzm3B
z*S9KfWdg`j5VkreDe>bi;vDDbbaB=-$D8-7Gc?@w1~u*LRx~wA^V>2sER@QWV_=Y2
zpuLp&f*~k3gIw}9!j6Flyft~-BAr#gj=o^dbj~hUY?&#+$WV5E10x4JXyh6cFt5|6
z-e={|o;lsMRKu#_d-l57#S<O1Cr^327c@ZrV&~E(SZaN-DNXKJvk;8iAUl&w?%E-r
z42FikiOX%A)AKbCIP{9}GcfR+ee`*`H>kv&q20>(=i<r^28j)=(}NipZYb$LI8X)7
zJ@I#58<ad=$nKDBoc<+I)xB*uQ%%I*y^kGoHf;K}XW@6y>RAb<bQ8%*&biQH#UWoe
zl)Hb<M3@V1EZVd}EzR+8)D`1}`mUS|8{~ufwkx*Cze+f;PeVRoh8yVgBDPaP=?uG$
zI2t$D7ax#qQ2ZP%&cF~ID0bDNr9dS&<8Ae+i+g1l4#*kiFdW*+k)aHlm7l>O81~6O
zGUWIo<{z7%RsGz)A|aK3-*#pO1_On2nMNwhLC3d%VyWR?5g%J!ksBL`0~&PQo%X5i
z+L;zMh8zCHdks=j18>H188|2}1?A(?l@$zDN1lrvkUq6Y>NI;pWAS+gh6CGtRC(9l
zmAnO-cdGGEJ^@-h@J+wLEU52m@#$>ELtc7E*goj3n||S($<qpb&>#}jE{2A4J3?Vi
zI))9tse!$(ZPlFGucf6qF*CfGKjrbIeYR|QHeVPR+A@}a)~YYi6XkbskI}cQFS^0=
zAh-P!W5R*Fpgy)xW`+%gse!WX0{c9qqGn5h3b*;Q?%%Fo(avZcZkKJqsc6F?WCt#6
z6C2D;uAelPJa}qdaGyA60yaS-s4x5!ECd#?PxESVFPj8&WX}1JYZszyg{$=37#jAP
z2J<qf#mgOF=$*pHz`%3y(dXsAf7zd6U%;$4mF0u`awVpO1A0^V84gU7FkyJB8`L-N
zF9X9H^X7#Tn>K#S)P7o#UBJC2Cr)hY(>)CO8SDDrU0*P_^AF4}5WP$F>5dRdn@y8p
z<w^qgsYO<NiZv5Ww|q)aGhsMT=WQ9+DzNVA5eM0+u1{@w8yY1wWf&MFHh4c}zQAa=
zp5fn{2sZ|v8KCy9**cw7&iWqC*=)QF3?&YmWiD-CY&$i<@tV?83x35r9>R8SG+GQq
zr4Mv3J6kFgaTYZF{{~deE1driOQkQE-{(OSFayKwr29%+%*}<R7#0YpWhEUrc8XnM
z+QfZ~prcts>=>%wrG5N4nK_-IzD!4%f$h~XZ!HFfoRgIt4;^k?IHmKnLf?s@!OtM4
z;h<LctC-(wIuB0WFsuI5q9QrI2l2CBKe9J!oO<;+&tGuc`a=HlU(o(pLtOMK*s4W_
z8<SQpSSV_|kdeVk>1l<i(~isH%&GaB2M+Xrwj%Oeg+$6fMurW?^`<a?(3@7qWDo+b
zcEp<5z@3ViHqdN6kMxc}ac0vno7WSH)`-8Y6IWYv<h=)jzojzk+lp)43=9V*=x#ml
zAfo}>Q&IIcY_GsM7f>{T@P^3LK;JV)jo|$9V%p4o5*qI_8F<ckfUY$>5DOYs{x<8p
zX2bWw3$hIhK_|!@I5ySQluvPvhg6hd1_Q%_>StET3(kq2m%7><{f>o8{@c=@v0@1y
zPA#%B7vPTiIj?As5U4ZHT(%xQ<xzFuH%JI%Kf?jD8#_7P&fw%_xL~MxoO|~-iB)Ol
zA`HxiK_(0g1_jfd`57Aaf~vijVYUqUpw%Qw3~aB|p1uGLEauMekc?W%&a30f!Eiyh
zjn^Q-JvC7FH~RsrB{J{-Ze!8jEg)-90-h;&=6s$ps)9rD3=3$i^T1txP#Xj60*0!C
zmavINhJ?kZ7FqEs&hd~8OH(spa45ei{;mGa-MgWWBW{^J*gJ<|%~J-2W+kTPl2y%0
z&7Y(ltCcds+1By+u)T0tE|kI`c|-C6&%UKUZH#R%vql`U|8(zq>80o2@2=3vd|l~r
zb?!69ONN(B85kyPDl*Dr|1ssCIzvK(m>1)XlS^kXcuZmLV_=YpnJ4;o^K|)1ZTGH$
zlKdRg=j9$#6Pe%m-VO0T_u5%MyfUm}9m|ruYjOO+{EYh&qRg+(W?*Ds@VMjs3YOp*
z3jV!XR>TJ@5g07C%xrn+4K9`DtS!rb=~k=qBJL%_ONp0K3=9f3T?`G3pWX`}$jf`e
z;;;zRG%w%@);v5NR7(`xo7ToVLE|vnjqNL6Yko00z4=j8i9^@6>-+7e^6#Bm8f=-&
z0SQPjDbODtJ874V_PZd^aYJCC2Lhkg?BG%SBcS)?Ta5YDpc)2-=b5{k@AdHqm8AO1
zIas;v0$uF;y!k<|1cStcO>=tgi!g1NEN#d*VZo-nRZ|}^GFUXtoUm|v*@XuF%M1+X
zW+XDJoC)&ymQ`&#*IU$TH;1Cm5jK@m3h^)UAKQX1ANn(UCupfL*!ClbBH_{dAYj>~
zR((TZDTW7sZf<s8^+u1?<A}#a1_p;$r%vvWeeiik6(0jnSN(K`vT|K*2B9bO7#SLx
zPj7x?*HWOG`Qq#bK86Mh2{VT-y-#a)T(tQeVt!Sr<%3Shi#OHtMA;57c;4K%c-K{{
zFJ|j!XQ_gk6F;6?uM!9K4Z%(k=v0Rfsxhz|3G00Mc6yICL&N9ocRvTNn#6K*BKw4n
ziJ--I|6T_2Fz_5%Hm7I$DTW(2%>x-H%;-&zWMGgv8FJym?elNlGZ`4>SRQ8cxUu(>
zCBymI3*?`7HKsg?ER=ML$dIY3UOW5Leb|-4AiEuE?v=m}k70NdJx{b;u|@l!lm2Xh
zLop=`3>P=NZx*>3%>}jINkjedae+foA`CnS77H<yO-?_$bp?aRh2*;-Y(dNn1p&98
z>)l_<vv*Bx4;zDk?Ed#27w2BPxqa8lFvXVnO|9qFeOhC1L&)Rk8H1c3lUDu!IRJ(i
zeOVO70bWoC7P(<<oV##;<lT_`Ps|J*&UZunZ~y%=VN$n^cFlUm2@Mk`fzATR)#PGe
zOIXO#FgLcFtAS-_Is?N42_C72f6qV}<jBztj6$WWEBF@Xt=gHb1xlfZDlHYVZoj@W
zKdS9s-8J8@O5nJdoj!3wla02XC}^81$o4?v+dNJMh?YbDHe>I)6CzcW>t<(ZS}`=d
zI1}pC^ll2D!2XGSAa|TSUB}?}cI%v;_$>?@jP<uNdYs*rrv>Vl$Q%wib)g&7-u)Q$
zV%n7_kq=|o+8^B%E-8Qbonr#S`Rfb!Z@mu=|C75t;YCl!%$?x9J0Q0lV7wvA`1foI
zJA=T|;{u1=wyGSv7u3MgGlhqN;lux_lRs*;e9+-z@XOGwY4BTjl+__gjEkM&!G%w2
zcJM34a7tByN@ImM@55{!6B3zaT<(VWE4IX6YCX5_dE~=eJT95P>t2QJzHoa>-YWBt
z@M402fx#trEo_?`Lqh+XxRyG(SIep<$}%|AY};)w7wVn#<`}cb0S{2u`G2Y=AA{eC
z{mu+`V@`879083zKaf}!)E37h#lX-3%9p1$F!E)}Io<G(uqw`D=(y^%`9gH0`PIp&
ziC}vWJX37ouMFE_?YXXnbMDsNVQERs3>~v<t(H7fI^QL|mib8Tl6cV36&mV~pMGOt
zV34`(Y$>_lQ+C1R=t9N`6WVvJ1eaC;m0>aM0{grrt&B4m7!-Khcqd3bH?o-VcK7*}
zEekiVw$Xl;#GJHg?>fmA-oH72*0C`#H2ClBfE8Q~9y9!5iGtxx_s(q>&L{0IW@Tvb
zxaxcLoKfvH{mz}i77lmZK$ZEA*{vQ77L5P@F_cV5Ke}}fgU6YmhYSodjgHJ0z+E2B
z8+_6gS4}lfZa%buk#AYvDtG6Y1=DAKE_Tq_c75|qr-j>RmV^3%A2h$814TUuA9>_D
zS>+rLtUK6Xdt&n=qm~cO(=OcHmA7i=4F-lu8$ygbKb~cCc;dzdDlVn@n;0#&T`w{+
z^Wj@CJG+u`!i4JzPpbF9)&lHWIZuR-;een|E6-d>69$F}(^~g=_9QaPME$nOQcivG
z<WRnlf>QU}Qr;KucIIi_hu^aUat<6{Xx+Q?!g-%O28PTV@0d5n_fNSI%_XpNBB)35
zFWORa{jL8UtPRRh9MTJn^*1wmbb^{}e0t}*zEz%{x@4hoGaCcLrB4|*7&;5>nwwY6
zUS+%6e!5Y~x7y!6;tz6i*C*dM<=88!!Vg*<9=~=8EMZ=(MoJ*;X}6uq&zA<<p5kRt
z(5(AE5mY?nneYj$pO^<ac_CX-jG-?j*zcHkB6G<zS2Ko{H?H_T1r^=N1{n;yz$wD8
zG<dJ1nL|>Z=(&YgeXq{DTQ6!-@@%*GgFBYOtbhNmnVqF-5AyWCqn|;OS0E-FKQOKg
zyVD}DkCV%4b~g`$f@N9D#97w8%tx}9M1!se)K-7IT;NcY34=`I^nQlFF{gPOT);Ww
z0i@oWU{aEHfq}tc*0d^h)ygmlvjc`cOL^wjp5C0KX7)hlY2-z_`29h0Up_^dPX#9o
zxXmvkUxMyS0P}w+eSW)ecl)lD^PaFVOqjN7W!x=U#VmEjZ_}7ua+bt^Rw_n{@E$PK
zS;}+awE0HH2^^4uY3~$BEC_A=E4$;GJ?G9qv-WMWPd<5HxNy_ve3$n|#^);MyRw}(
zJoNta7i<%hP+5_;YASqtZiD`&-6FeYpXOmuh~&OHS)kgRQOPVwkAdO9`>B&Z8ntW?
z<Y!?265w~N?F3`Vl=P!>&oFo#X+C%vRAu>GxG)n`Hf9><G)%EresJTK@3*ouoz=zb
zrZc2xY}{MNc=zwB*{?kFKtp^dXYYVI06}@g&Jzv(yl~;>`K7^YkFYUJSmS<m@`Tkk
z+UrF51eQ;XV`N~k+akcv!2aaEWJBGa18fSSpvJPr4jb(}Cyx6nymS8;fy#x-Hr@%7
ztaFQbN`v>d3M@O+cCPM8<ijZ5IjwKMzS_NQ!E|4aL_N?P#)~(uDKP6@o<zb2_#FJd
zIXalXjd{^}hJoSI*1K!JKd5IEN|KjzSmM?Nx^MbIQnd#I!?(9P=k(|Xv%GljmdBv-
zU?;SaXm(`2;9K36pl8g`u;r@nRxZUUE1x?U>3v#L5Z1hS#q3unzlv5FN(ftsd;2=(
zUw-=mxvR<0AaXYg)~Z=B-$r}g-2Dyb#GW}ZGYB|Uh%j+(+%BRJq<oZ#fnm@3IX(An
zc-S5|JZoZoah5xWA?N`(JIwTwvI5l;4fTclrcAL|eb8|0`PF7Z?SA{7Mj8rB8l+T)
zZF#<M-4vF+Q%Zv?`Cz#b77}3ELH^q`C-c{3<txuHFx+^@9jPwQvU0~|6Nfo&RiF^K
z663<~=4Q5~q&=tTg6+~583lG;hnCU>m0@?<1@u&St#5-`mIwA<@!fjopIeKFgxP_M
zSA4%d<FWr@bbj-rpppXuPa_Luon~mVSKa*a8`&KRr|)Ee-N67_k-hTDg2_M2>bV#g
zw#Y4YP}-*{rQoN$7j$|1nmIk;iY@Ghj2qm!6PdnDPCr`8@zAM;!38`vbUf(-Ly0k{
zWN7%Gc!Oc(j*BM8L(D^epZgN|;=;++&uj-8bm#nUy?4v;hBiuV3A38vLMXHib@1G^
z(qP@AtPBU@f7E&yZ96Z>&~e6NAp--0^~`S02HVK#lQ&N9VfcIZ1Yg66p9QQ84T~XV
zd+e<Z#^19U82<F#?^yEa_P0nTnad%!F5KiloY=7NX592Wlbh<|UN4I}!N&lqt#Vjk
z-D$WR_8fl4{vu6JpMl}us=QUx%i22vJX&lk7zCv>MHv_#6hBSb!=-4`!PQ_}z`^?<
zJMRg*!xM0Isq=kOo8O)Fj0_*lOM`7&1+Gm}6g-zx5K<bvHT_4um#kHE2am*zrA`aX
z4?hM4{*9yEps^s3#R`(zq42J>?9EuN-PP-6pUNp^V5mF(-X$n8U(=z*&5M<R;l|CF
z5QdtIyXN%ljbZsQ%lapyz{aio;S3BGi)L;}On-Nsf#JuA#U&ms#?msecSGJv{@eOw
z;pF_vu!?`&JWlgO-|l}Jeybr4+<XINNs#4W{4YrrR!uS_gja_7ICF?IHP1ck%F1xS
z`i-utD5yltSQ5g(&~SIk<U;EQ&mChJY8st07~;#7of(v#fwBT94y;-}_(J2LCPh<L
z=;0Z*<wjF&O3Xk>Fz0|~?s{iqRR{go0*9PRz&4{3H3#>8NJt0OOr6{e4fj{h&JuO1
z5ar|CabokMsEZ7Rk}riB7#2+4xr5<FW~|>a?}v<Ew$~=sDmpPJZCy9}lr1v@!*Qdj
zCU4%{{42%4Air|<tEIK)^i_lk7N__nS~Gl@{$b(dZ*%TCr5xzgo%6f(-m=o*y`7+{
z65SyT4R+wFrbb-uO^%)x1A|?nzQoE6yG0a?ltJU(Z`MI_!$igl&7g32-fGHV2p;+}
z^j*qpUA&)-;eejpQWvImpVsUMGf}^EZ+?CY|J*+(Hb3%9IiQ)d-rl~2A5<pTc7hV)
zw_}^(2LdH+x&&XiutB-nJF)zHnlm%Q2IgvS&!fG|7#|s3QfFXrNH3nqcmb3craLkJ
zFw$Sc*l`usbatI5`qp@wcIII}P$M!SeBS5DT<PW(ox4`v<GIihCzizQcjPPkubV&a
zf)@BX@Sn4WrauRzSIeS69au<k+?W`-eZy|hoytGXl+BOR)DS9Ip3<<R=L;tT!v$YU
z$?eT`a!1%4*o_kz-?WNfV>kkdfG6M8-<(^($iPq*WPa6~BT-iu9R5r5Rvi~Ow3%rE
zC`n4#am$3x6MegTMSf6wT-xo%Hi(sI<OT0}qSw=051*U&dRdi_I0J)qm52!EhV8Iu
z_+lh3&0t-nr=F}Y#Q5zncQ!-PmAW0^HB!mDrklMv0&>Q#D6bxtJDM|vXSWHMc{TWn
zRfffM@mRFI{d%mt{DS}Qyi=Q@BT8tt@5@qiyfO3UD+Y#=j~co{1ryVc_AX+4WOzxH
zfx)31To(Khk!7$h;NVT*-=@DxKZVnw1za4MREFKDKE?!22M*zFyc3w3*(_G>S{e54
z=EBX~_2vfzb@y~P-CMQ@8t|wVC-A>(<*=??H~W=m2m`~LRe7tn3pi;S2qlzjI=Hx<
zVqsu-u{QSBK0$c~`3gPt<n{{;-wt<YF(f@XEXu&pcXk2ejo#m;3=CGQXTMTy*)UCJ
z;%-p(IXNfjZpd59f8nYQ>h(_|AM(f*1XPCIX%(pRkgWO{X@1oUoF~70QG)I6@#vZh
z-|2c__qO7f>s44lMKD8yoLs9L(;HpZjuRfBn*8sS$seOR5*6(j><mQt4&1xbA=JPD
z?o?)gbI~1dnX;q{3=9mll4cHEJkkjqd$L>K)%<6Ynf03I%V$t44LmVhb9D9>Xiz9<
z>c4^yw%8@iXMXc+XWlCHNJfSW&G#oRdEj@N;iJS$AqIv8`-_b7ru(mV<v5UUGiCBe
zF9U|^$F8Of8!J~p3xpDRryUb4YEFUD!oDO;TcHO$?CRm>p}Ti{pRTrG@@*S!o+Ye&
zO6R*GIUdd~SvY;>4X7JXsT-549S`|EOJZVJ&=2mHhd&hDDb31!BzXzwBq06GEm95t
zw|;!jeBfTKuqK0GA!s066SR{Ew57RW->YR+oQi8$J)ZDLCulrdxAVeHC2(W$_m;iu
zBpz}9{R3*Sl`$|d6a?JMpVVXyx@8#E1(ji2s=e1w;%Bn^o?~aiz!0AzZnqH}x2G8j
zC0+_LFg(aUb@InX+Z+WqhJQ(ce#gX4Fuw7eCtALVMZu^W+Ga4R42x+K*yk-{2P!h#
z6B!t4t}bTjywlqx+4R=>`bwh(le+~D#iSgVr@QUC_=4HJ^`NWQ9%$$t^?CDZSyiAB
zs-qYf1e|t=Grc)dlfl5S@6^4ZAW$+@aRaTIxzRmSg7HSw^vN5YGZ=oCs{1o2ZGsik
zX%`sY90QfozdxwBDwR)7Ke}|1WYeydx3cqA^1OJ`Z==oA%lJ*{eAl<0_xzbo`j>aD
zyypU&NJDYLfq6G#x#m~jduPqa&~We7vZz*pI8~1)Z+0_x9PyaQz`zh6?srUIv4uU5
zNx*3aCu73<Jqy?r)Pi%F7z&u!cn>@WH8-BJFdPWK>ibo~=?2H76PBkBPVk8>U%0vT
zM1yUiZDZZ3x1YgT^@rAbFHrrB?0|*|>8`uCe{mA}pjqwB$Z%u2x~GsOs5NgGq{6^(
z;NBS>9wv`_#g>xx%jB32Fy7%5ZSb(U?)$Vrk%7T|YWh*o2AC@kgNp?j88*0|6A-jM
z%qG#ZYvsK=*PYY1SBCi<Wvc;|=-W%~w{XnO-FANwXx{aJ-5w9vaTIXJa46p4W&}lR
zmZlm5!?z>(-bv~Cnhwy&=r1y=<5oO#lykzC%vX%yF{`(yUveL065s@NZ00mMGJmiH
zbuVvhSML<snaygfQW~u5#BtuM(GOB)zDTbA`$1Ori!o?44s<w!#jNN+aJayoz`(#T
zfnm4z!{TSFK|7O5gZH)wm<g#Sg`Z;WIPB36Iz1-X?^w6Mq17IYlfG=8(-Xdm{l;$T
ziA(~W^Gk!lWrhfkRKt1QR2GH<^K7}MoUlB9P{4O9)7%(|1DrJnld5GIcU7*Pouvpq
zR`1)1^3^cAmmJD-fU+CPpF|es=b6-G#hOpOyA-rB>F!b&-Sb`6yv%d<PXx8YzvXEK
zH9T44%)z~tS*At&GQ*Jrpyq@6L~y%y_m_vx(%*9!7~VwR4arw*Nk1sGG5V>INonv}
zCk}g2=DB}BmBEPyy=~Wf<(-=2YN|nFQ3v*|1#PYeJK|(vTtmoS&@3jH`ylrFqDKFl
z(Oe7%6m7hwo`}_!c<`sUgadSW@zaz)LQX$a!y1<OoIZI&L8syHj>*~#f-|l``rN?=
z84PyY3(m7K9B7m<bGY(p4QQ@p<?Jjur-*DeE5i=q7pF>@e}RhdZqPi<gNjdUKnwW6
z_A)RCMuFO{5Y7+zvgwD8n<=&|?O|ZBXi#4WNvH-vN(>AK9M5cL7h>p$kMuhh$HOG!
zFi-TY_e<@YOa;$QL5mJ8P;LRWDINsukyj{d<248gKI@>qy)x{_ZpN}rd*kkSaa%>V
z3y38#GcYtP-Ysa!SpZ)p3UL7g1B1{saDF-TpZUW=*SjJ4N=yt1_qXjgp3mxi<lPkR
zf`4vSEDQ`cK;^o;fWIrZz~0{1wg((5HF*#01UIoxf=6X{TxF<vu`qAd)D8v)i<Vt0
z<D59M9|{>hw~|=0YvnvAj{RGh=jv=bKZWt$*1di@DlB__c=y9=6u4s;7#JQfyldr}
zZ<H*{(BND(MNe>dnBIY((k}%V7#<j$I=Q3PA*M@QA!~DyQC+a%frEEC#Ttyw*F)--
z<w+M9YV!1y85sE9cph*$vw^W~&EDttGdRl19!5%TX#V-Fim@d4n(xz}APeUlTYAUy
zKsRUv7Q}^Pg-lSafCdRC3o<aUr|5GU?!E+f!-8dsExjF#i@wD89rM1*By(kM1*1js
z`O;ur5e|j}oRTIC^4afihZ!+3JUAf7>T_h>)YAdE?c9E%ETBZ%nr;0dx-#s}mg}4^
z9nz)ugZ4Q+Sdw?d|BX%@dd_Vqc^Y}~o$lTb`x$C7^yC;A_*Ukvnl5lC>ckPP^Ig_Y
zndWSt_>X~sfp7Vop4+TW#)8Z)>B3GkR*60+__SsRpJGg>M1wJSm}v4T@L*dk_XkB#
zfnw37t|<)4KPjcbwrv9Qrn1b{Im)^xSyAFeYMA-e+2GBb76RPx+pJ(gqmcW3B|F3X
zigmNIR8<%l`VPDcN-A3$+wj@!k~{;$fyAkkKW?&JqL9|G;>_ujHy#={9NslqpCLWx
zU9%_ygWs72j6ZJd%F~jsVPq&MC=K3g>Fjmp)0!P22F&KXiaAqQtaqQ?eCTuPgZ)n;
zFaE2p(iVNOMz&_J2<Rw<Ia40KJaVpl4a_A=p7`E|vFnq!+0^9d$ultYJqf(va%N6^
zgRyy#0t3T=z%A^RW{cQ54i#HU>W6R^6qGBmJ@B!;4$a8M84Pxyfh&gNUsQ6H$`;48
zt;t(8^*IBqDX{kK*8`CnFVeL@>nbfQ4`1%Q>vb4rtI88s_;JnuCxWw(lgfv6*LSUa
z)5pZ{AmYzAm9+9(tQPsoe;FAVWa2C(_eW;&3bgjVwmfjLLX!7@C3v>+<Wta;#*cNJ
z71x*Lty)^az+j<tn62YxZ<*w-T`R@jK5%qBcy65&hjAfebTRX~h0{SJMBs||Kw~8v
ztf8FwX)btl59GKDyQVYMWGKopF!U|WTV?+HQ^$>^MU3Zedw^Cp9uM?8*8jHt2yel)
zw5KUKjxq-t!2=OHCK)rNXT+IL1r2Zdon65AV+LqIOC}UN%-(yYb4nufobHv&7EHF^
z{`^Nn%hSk<dZ+#${?B~jX7=5X;*E?93<nhMtZF>*a~^EDz@;bFAR9qWVpveB&WiBh
zCih0+mHA!pu(`U$c85Yy!{(4_lQ%Y}GaP?tV8ihI#m>A{t<M-3BpA+zJxIRyoq?f%
z%RfjxXr6O{7`W~B=aN{-BTK0VIwD_;Cxg-mgZm~S_!cFwwG0dlOVrPI%@#N`_0_}J
zXKR=l3b?*a6I%OrGY7-DD;}VO>y8Ke9m`j2sh-F@XRa?t;wrO-#XE&f8Pbn|Y9HrE
zwJLkwg9^181_lep!)zT_x29Pte-=0tmAGN^Z5wTy{5F@Tkr(H+?z(DU@@;jV7I;oD
zfq}<YT~NOZy?AR-xw(>GKKc|pLqqcB%`GQlwIm+Y^p>zQFcic*O}S%d@K3d@VRKQu
z-?4lxW{X+Xfy@PI%SwaSPGMs>uo5(i8oo1tWly%E6a$0bkqwMVrAs5vfl6$)Qm6E8
z8*QGcjYo3+zq9pke`luHvhxmTt%!lmeYL9F<qKfJF`-M`7go;vxxH88K`cLL#F3fd
zK&K7&JdeAYVlWrgJWa9TR@~Di_dw^5milA$P(~T|d7|cuE!>671#Y+aL*+!-7!Ei{
zm@vEtO~xe&Gcfoi{f;hCu1(rv`<gL*Vcx25HW@2*Z`=&!NL17FICm#9?nNqSE*Dh1
zBpB>Du2S|4)RYA~ZGzPOd{{&7PrCn!sX7m0y)QB_6gc@GQV*Km#cC0+e3y}dVa^$o
zmJNdT2Nvv|Hu<BED}#HfdLF~M6ILzY@ju0#*V&-qb7li$QtAzc=f^DTUOYQ*qrEPb
zE%OH7wtvodFGNO~UtJ99R3rp|9HGq%3lOkN7#J8FCcV4D_r7ZF>{IhJ7#RFcz7I?)
zT^!l)*%WlX(}Bz>lRtWMB&yXl9K6*c@a`&eK?&ax<^sQWua{L_mSA9To{;WZz2U!;
z<cH|lyH-wH#K`dA2#>TvSQ~Fa*tYi-b04?o*+e&&=#=oz&Hb|vw6)anlicJRdo$p(
zxG;B2G6}Wbb9zlF1B2hHJgsW)&Z}F~7|&hzC}&_`SRU+m?6kn4W-bP{%qYKO+E*E5
z?v_tvE>QayXg*c-5(5KIrz7)+eM@sdIS7<+m!?^omj-V=&oxh!9aPXhii;80Zlisx
z+;@9c+qq|@!9V|jW{cX6SNkMApD6-!1B_NtJKyzM;E?&=!}+;R9Q}(J84?)YoKSWP
zkAg?d9i5gBtJoSGe}?)U<D0`M6FE<`+=%^w&y><&-6^aL2M*lPX1VuNj*p>X^6J^I
zQmr|-lOFG3f1b6<@<qzT^rK5pDEQsp|9)rH!p-67oQw<%2^;c4oS%e&CWAn(Xh`{a
zZ?ei&->*w5L0k~Fc6z{kde_Q(EG!HM7%cw#P5HED$2FY;l~ONx85kaHIdyV}?F9o~
z#hegE1CI4iQ*44+4|v|`mTfTJaL?{EBSXW%8*(r9U*h-^7HNLf%Y=b}rzMg3$O)#<
zbC<qV9`t{E@Z7ER3+E!7_oUr3b<{s61X^rd5c{HS##P^^JfH?9$PG(g&jxLy1u+>E
zBEPR{FV}TpW;oz5L(+52I#cd~d2UtA3=9@~i;U`S>P=>Uu*HlonQ6|Ixjz^!n7@|>
z@73gDXlVSHBYkiC6kY}f=A;`8hMOFwZVolSYSZ#zmE(<@^DDz7445b0{1^LwW%!FX
z>32i)lR)jchbK25GJky}Z*d~nZY09vQu)@y`L@@6w+itxFgOR8Pu;up$Sb$a49_!{
zm@_amBx<OGw)s!DV(@#lZ%&V_8M8&BjrKZcj{7P62M+vQoVQ9`m65@~;k#Gk{iy4{
zUqOp&*p6&qTr?&9=+ZRHWaFof>fVKpC4XX_%Rz&OplJ<*i0i8qi}n@6Y9yF*8jd`P
zOw8BZbAC@L14G-hNM)B3_ktRXO@m|@7!DLnnf&pLb4tVHpOJpY{2#Gf%(TA9Y*4@t
zN-!)82QEB`yeRi<e<;tNX`sr8$Lns0zLa8+dDqhz&=i;K-=z*WZsyJtJ@?yDWgGL_
zz3ENwKqH7JK{K6fucJ&|&i#a4%fb+pydJbd733@jj_*bd_itVCO)b}CU~o<@Q!(7M
zUF3mJuLwH>gMr0c#|6Dn41KF~)F1CW!RU9Yv4WxPjcJR)WdQ~T=BGQk_M8WeT(q6I
zWSdm7GW6V?JCb!Tjue}BfEwueJ6iP?Zr+r)N*!DyE|8q&_a;mVqaJv2XQfQtX>f>~
z$P-RV$=5tEQ%aMMfgvH{)X5*Y)e;$tr5YAj@GAPa@)i{F9bq;Id22lD_pX)qOjsBW
zI8?4<+8=(+ck3ijf=Ri-V7Tj|*7Ka-b~hq}Zrlx>Ct6&2@aF8T_2;u%{LJb=yAKXT
z?g$f}SRDv!&@ItC&$XEyR^BQ&R)*b~p~?F`s*8=GfpOFJDH1b(a~CXg>tbeLkeCNf
zxU<+FY%o)7`CVjGH`(~W%O{bA@=iMf7#WyL<IS&nSu!y2+}K<6U^}QYlCXkDnn7a0
zu9b4P7ysGSIQJ~5gT!|3%D4C5{r@_qZ{D@CrWrKSfB3tv`;j$yTIrz0^PqTP@HpFj
z4C<(cBR8YD_J5Btzv^WMTI^Z2|74V*%QLTq@HDIiNyAkPe6QBc>5(;Jw%BVe%U}@j
ze}j$`LxbY!&5zVt3KpvTm|c1|q(6y~Az^{eU1hg(bpqXy9Epp4Z+QOBsZ!Lki1xnf
znErM_c0H*7Y*0`cR#EQxMh8Aar{J0&1smlMDxY7)@PV&*F(ZS-CiS-hvu(83P30=6
zbF%`4)4C#~d94C+AuI&~|3L#Bi&!OC*dH-UENb7iQfw9@L&Ae)Tut{uvvdsySIu4(
zyX*TZ#fFFAA@v!n*~-4zp6{|QJXm>h^CH{r)vL{3oY@@-Itr4%ZHcfoVl)~YP7DkT
z3W|_nqn9%O(t;s<YMz;rla8GD6W?HL5(L_V_28@%$NDU$8>{1=ro3s8JizcI^5VXX
zeZT78+&x=(JL8(!gWxsyyyF!aGL<IGVQ@+4ZvE<(VAYi9exZo1ge`>a5L2|nERH1{
zaheS)m5hIInZ@7Ex~+Ta8h_*SU8{CwrB&ZwpvlC4?jkFL^|NJfXUz;^V3257Iq5;W
z4LcJ<!gWcr12^VmOxc*RJMG~gJDaZRLIZ`_j@P*79$Z|TvHMwA4(K#Mj^kNLPv%&{
zB7MtDdyiFn?!(HEC2vB0e{e2SWnkFwTF>+d$6IaDgbFoKXy3>!otOPCqyV-SV6EBV
z)@!SnDukYw&O7VMxxrYbgFWH;9f>bI3<m_JxRy!?x}R!#AG0+!xs#KDVfVWzX9nxs
zWpX!eIYx%0KWaMo;{H;L0CAgBzPC;Hy#}?LEc!~1o`@`fI*h@g>x?)k&4PkIDDAo3
zpBqkk3=D5JZOeY6o7!{cKdZ!o&Pxmo3}x|i(^sE$T)1@?L)~d#mou&$8-mkbF(kBq
z`5u>+dwtCmCWZqH5+)4x+oo_cFfbRaR5`XxN9!<~MDN*v8T?YMYtMo<SBbybcJ}!f
zeba-BEBQGY7#P})7JDB%*94j!0674TJx;IO_t4rr_xhbKR)z+~9YI3Mo7V?4Je>K0
zhk+qM;+4(rvIvd`+wZs>*>Z04R0+m1=g5%1&d-!f88$dC%e@{Uz{_wTprVZ9e)RU(
z%^(NuKKGf!?bHUwV`+kd<x#C`-{jgEAIK~IFC+Ip`L^lwB2cxHsL}nZp!mGhu~qik
zxp|=35|DeAyfygB;Bjp&Y=K^b$W+(ToOOJECj8}KVBl%ptKM^VqZ?ye`XXZnhK7eL
zKCjuo@lRYTL;tqEj>x&`VtX0iObf1M*x-C`du;Jq0R{%PlvO%E&b4|lfVZ<48ckbi
zq?LR9OS)frRO{Nky4|O0vu^~Z27XO1^Z&x!UnDM=4mv-k!Le}utc{y*fQIBi&iW8%
z@0qpxS=eU~hk=2?VUeFGzkLe0+%H_K$?#ySFQ~_0pi??eSNYN2TMXN_y%U$bR{89q
z%z<}>3UUpxANReTwbYD(L85EZie-WummB;z=cK~Gz|-;Br>8e{Rgd3o)9HT&>&_m!
zHfL{xY>3#^eZQZ7@P3wieGRyi)?Bnk&+S|!yc&YKg8>qC&!4$7GZ-kOc^a9iOR-AK
z>jW*AX<L47b85YZQz=8V<=W3@nk^gdehJfOc+>FDb;?pD1_p^4D-S)eF3-JQp~k{+
zU_wk*_e9GO4Q12rj;%$B+MqS}om^$-_WZ9|#VWTnZ}&4N&_ut1#c{3VCv!|;33|_U
z|E|0(@Yq|Sv+8e$MUY+1@jn?13~Y<v&bnRqf8Q~NhU+F1?HCvi7+kG1>+UH2%J^sT
z_tJThAJ{fDpIT&fm7Br(!JfCXW`bO$@ICB7HTO&g1_OiZT*)aq!KqVjt&4O$60>{5
z*2>6`eZmRuId=W~jz1{8W(Vp|8$_tDLUs|~B>x7HwQwh?oVpkE<6i7-Q}H53hJ=JO
zlT$)YEt-`jk`STxi;00jVx86bG{M4kP7U%^@y~AtnJ`$NZmeL4yB&Jl)L55+!N4Rn
z@U8oiiH{ywgO<=4XyjhM<8~w}yXV9{Bgxg<vVVPE5zf`N_KoWir;rWCVzbYyZrHo|
zY(8kbKf!^=O`Y*?(zdCfg^J(^^O#T!9^M3{pjBtCHogZB916r{^D<QU)_ce^FeKb~
zWixy4-}CkS%8y*8GQ{s$|2apKuVHT4DmjL@i@ooa7#P^j+~4$J@9J&Yc~3#5z**%-
z0fh|B2HhS1Lq&6*=0=8G-j=O*ly&{`|1#g^yNe!J{N?-{F-W4e3X@iTz7v-JRq{Tc
zlUVX13RF;moaeCUjb7_}-BggNKdq;2+<8^wz=l5y^%)o%0xj<97+M9XJJhWBe8$<L
zK{iY*^#AwQ^ZFPnRLunqb9bjLWnf@nJ5?m~V_v#50|QUcZPS0#SS32PW#^q<^h-dn
z{w2@0OaJE<YiL!3*5w~~d^Q!-m}!36W13vP7PH~$92s(4aO3j49nY7&mD*gvz#uWF
zjy=w0P9`5ig|0B@SU4VV3At#UbSYD(_4?0e4x2aJEnlU~5a(I{KIK-~S<rAk&yA4E
z4|BOea|I0N*S?))oc=8_n>{t~>`~VBi*;80vwrRH=Yxhk&vwu%H^<^*vo`L&0&Ci+
zyayFT(>BB7tLw~_MsVOTFfjC+Pn2X}IAC$5a@#E#on3*N6IOh-I-homU7{t}l<@=C
zuWGf++p@zBu`?vBIJL;CuY;NOknQuj*PvXZpP`p?<5py3$nQr@(?Q!V-)mQF+1(M*
z!3!#(GmDQ^`PcT`*!6Z+HY>D0>F|j!7%`bGRJ1AwQlK#~Jou<)1Zp$%Tb&ORH0<q=
z-pbTzx&Cv`vXX|o;bK=;s%~c3(^Tqm=GMAMPI-og#@Si|`;tKub_^eqZmrwd)6p-~
zzV=HxtN5ZO@$Cg+;&Nv}`@<O|%+l9L?#_nyX9YLvvj{!?16xcmVUh6K!?vZjO}B%0
zoi-eweF9WZ#JsYJ&J`=ayF$$4Nafsg<5XszV=GrNR3yIs7w37~wCx5Hg8^Hx?jhUP
z+p_gsKqc#*4V%wy&Uldc{?wwPeCfCo&pv+(yZ1rkdG7U?E|6txXKOQ#o%;(rS9w9X
z4r|brva?<vL8%p#hrG^|waahX4(?>uU34j6U|@J0{QPFt<~^_7_8vGf_j;vSu+f19
zb5?OTh;MoKe&UwcV%-u32Dd{S7<YhM-wY3q=1yB-wV&&D^a-xGGeK8AX#ABtyz>O8
z>i#fiW7-=%Q;<VI_PHF{C*W~mF68Jw28ITfxmvROl0h{91H+$1oevlo7>=zxxA|&X
z<MrOI#)-cop5OG@$#6JOEVN#t&Oeo5&xF$Y{3UN^Wj8W27_g-V`reIhe6Isu=DeqE
zTlO!;j;$XOwcS$#&$_anU#+uhbBBe1vCXMHZ)Z&fJ7>q7jcTm9*JHF`I}~2rzb?YW
zxhvEP<T}v&%z~Ad9?rX^1D@OcQ7U|sk%6Hn9Mq0zT&!)%to(W3xy?I+7}=hOKpf)_
zbBq!j?}6I#-0Lx*DQJcY*Ux7^XFf<wPYrx~nsc6eWJvq$_o@li;knm!o`PCb&Ch#G
zlhey!qYMJ~E~+GM2W@i$yCZ0mrFO}Zk{!>Tzzgy|yjI%;N}=1W&WDxG`+9oMxlrDo
zBfqWAPdmjTu_Sma;|Hc|f0I6M%U;*Y%W&X?k0{r7(26GphCQpcW&dhjl^)dqDO^9~
zh|NAPxnb_VIS+lpKutcbd-3Tg(X&y&<I37cpezPj26W^`G}rgFx7S62J;hLW*9BB2
zXRi3XCjM6Ky1ax3_pVnyyC89ZVXEs@{TX*J%QBpQqo%}nd)-bk69xw5l0_jqjvFh3
zrV*}gjop01W;L7Kw{<#N&7}`JbM3<OpK|qY%GiCZ2((v2V#lTx-;^JD^!MCZ3R><7
z3WtV{8{$lzpX6YnG(l?forn9l!6Oa_-p@S2&%mG{TRQKo(xaHC2N>2WKdPOZ?){XJ
z=i16w3>9hSe@}<!USGq)%W&Yv6xXNsxbBo+FFU){2jnqX!(f)2Tt%&lqI;Vgj_=Ie
z{mdr~93JN)jLSe-Ybzqfq6Nu})y&^xPk>96y7Mlei_0=se$EjStY0N7F`?AO=e13=
z7H`4@nKt$ZmUqAGm%g<w(o>S5Vd5+;v3H==a10DLBy+FFxF2EfJrLG+YSFB2u6b^e
zA?bpJ3VszL_d$#B4CGLwB}ay<$>lEm#5E7s$dL9lzr&z1;Ef(AH8tEf5maDcaHx7^
z6YX-O`YJQ?hQ5x>x#`zWF-ff3wBi@*=4vgL2Q%+LoWm)>&>%QlOZ;6Vs87jo!|<=<
zU+bj@!p@yqbW2?H&%Co6UhR~47-+XGwpbH1p)J9izDCmeJ8X+&!~bFpPEZkoNGB~b
zRw4rBz6)r*O6IE1Ig)~|E^A_$4)pDM*}mp#W!YMVhJ&+L3N)k_-P>Pswd}0d0S1Pi
z(8!SAf`v;Gemq+DR_Z)x60~9Nrpmmxb3}5|^_9dnHQg`U_S1&(_RiZiprMThL5=QL
zSN<9b6|4j`r9jCf;jxQ=$_qEp0Zt&UL((#?_G-N&;6%J1d<;`V$<@lTot87Ulu0sJ
zKU?+x`^s~hrzSD9tp&BTDptEO%sW_l+jR4`>_2%73<+;|q#AyMI?te0I=4;#{`?bV
zy<uv3YT(ZQy!$gg|EyHEub8s)Gsu?)TFYOhJb8C(-OeyjNP(>1aPvEZ<|jL(G<*Bu
z>eAb$Wz#{W^#S1-9D)oC3c028zIIRGQ+}lORi|NYVcheZTh19bFJm}%uql#Z-r>sI
zrp70k7$$Huvpv|i)CQbnui2lD)8^Q=NkI6I(R}%eIkyb5K^xCx-)}H3n+_k=FzaJ=
zT(nLUR@E(8q_gU9hed!zP2w_8<C?){Vy6Nl1H+2XIiiA>|JAF>vwgVrZ_VeNWvmT>
zAKzOs_`j{aZMrX>fx+Ws$n6hDV{e;I105jEV7>b7tbaNGVw^WjUA$>UP27WtX7gt&
z?>u<z+CMu`Poz+@`<02(w=1VkL|y>3N<cyJXMVEhgcZ?8!I_1DfdRB=^qp}txC=k;
zgv$ibe%x0!(N`<4=`;M+5O^TEM)^_wE1PHz`2?F&i>!J&gr_onXt}pNcC&~E1H(#<
z?kszyJ`uinNa6No&)MR)+P(+F&Y68b)To<dr=Py5$=x!0_c0@IfigX~c2a}4D$H`}
z_9lhE>s?^WK@+V;p=NiI*}&lh4U->XbJIU}ROpL5V7>d5UG=riZUL(UFCq-M4+KZL
zADO)^dzug{gMuNbpsy1LMW(aiWs#gzeI>C)O>1?{=1V77hv#1ZF^`dfq2c34KI`P`
z_pe7~!cNw{VIjuSxhoVDm!PnjAh6r};p$sF;G_B~tb`+(7#Kd3gL^){E^AtuZ8op2
zn-MiP{dyCd#L}Hnj1^4fe@}<zUjK2Ifx)4RN2+1{wK{3ABQBQt?l1V-d?-Qt{i#Kp
z7D&qlh=u;Y^J4Ct2Z3|a*%=rbCTezPi3wI$r9ROUffZ{thplI*WPUye+NuI_&Vd(G
zK^=4US#A1f9)NOAgSv?zXsMlj(DR$6E??TG=drNZOztn8=lj|wno}a7=F}pqG6A^;
z^$Yi>TjcG27Bz!`K_zQd#g9Xv0Xc?*fLrS<i{<3EZ4(f+Iq{rD?s@a(c2EiHwLD9e
z@f>{GWBwG^tMB=5PiEu%G!N#M2}0H05ABRAK<;|L>D$7|z;NLFmC9|aKEJV0I@ii#
zv#`_!)TGx7X$buM-iBfS>izPd*0ZW714B@V*ws208BO_p1{omz5=zfkBv`Ab2A)k}
zwGR`!dZ$>qVhX6C2nvW}sm1$#t&Ni0xqDl7-c*nXNDH{MwRDE1n<Xi$a(^t!+nuHg
z?x4Y<Y67Us^U+S}+99U8%dzzao6c=ss=(;>KIACFpSJ$o>u2`3Fflkh>I>#)*tZeX
z@lyb8I=HYUw)mz!bGS@SYM|KFeJdX9JNx{RkIn~;bMm0^Y>TsByqM<9gyo-orc>EE
zcZH!Q8E?=?6vKhbvrY&zFf`;|soZvl$99*n#E0%z{{m9xrnh-8_QXVn{B62vYs>th
z``-3gV{thKh6oR)`_LfSw7DZ9TR?8h_MdwgzU$68-Rf?czx&u`RZwZ7{$6%c)6!|6
z6aXr8@@2T2U2f)s>KIVas4N5(m=>4JY6=y>L+%w(!j(**%Z#kfuQPA%&sxaX|0R8H
z`ts6wYgyPQv;><nf8f3*_;J}=DegIp3=cN1lzG4nn)GI9IGDA2nZ3RBWrdul_frES
zZ}3W|27W!?eeWdmwrlg9=X8VmSI5$e*S~St+H+^u+gaK0jC}vYIn|ZBuEIlwquTr7
z>e<_}=g5MxLxZ}RAm~1l{=nxqSDo8@x#LH0!2z*%N{@W!rgJAUE?EdF4=YyZG044K
zCciDG(wKqaPO%c-k4H|R2JnFiTVpTZzrSKCM|9ygnSGxs8;;N19=mxGC=>Tw@>#2L
zU?#X_2x`)FgBvUkN=r`cfgK;IpctHbSUl|mD69?`&)^VcU}%UBd>*+!<-f1X9S(sX
zomNVHuWgJ?xD<4k|6+SE@z;I6%iFT^SlJmE=1+A^y}(dY3aS@Dg~9=jGs;P8Jt{7E
zMur$0PTaL=#jp3hi?0+nxWAaMsmlsVBaeeYiG5G7F6V{?ppFm7+8@_8ns`i^3(h>?
z*8Lm3*7eXVoo*ng#lXO@f7Q9oug@wj?{{L^x3RC|d+EHn*DALO@i-Jc(_()h2&(sQ
zmG$1|V_+zl@5uaNDrmT$;ef`L*kWnH^jj@!b-?X}mA7L4?=w!Q{=3`97<5$jfsCJb
z{kg8?UbirZxuxc`k5f?TYH)iEJWT3-s?8r%S&D%Zl+E5wA4Ud-AF`$M*1oct?SABc
z&a_VE%-x+GkFCy6TglEiVbP`)zZ_?>pJGqo{%hOvJ@@*VR#pZE`w|^7SbRlniQRl-
z&UV&+H{)F9oa|`PHJi_zVBNhfTW24r===CdPD!&M4c6NKv3sS9$Ca({_N~Yi*QY%K
zHKm%M)W%RDC%h9>3X8n5c|Bc6*6qkt2gOMFS2ot`KEJu9$}nNg%vX#z4#nEX?0h?G
z=>`Ud2g`Y+8_vJGweI5^(7>RC^z$_d*8laoUqys1Ni&}EYwn}OZ1ddfb2>q$A6u!j
z>T-ugfIjDr09aGugZaIUDxueBv4bKGR3|0oYu2Pf>!it@37});wZMV%n&0lPq+s?z
zCnHEoPS;}h2nRKsKAux$IKaH_*TGY{*Ch<N85ryX#X|S@r1;x?=!C@Ei=25g>o4f!
zq$;WjJ=xWMeCBD8bKK76*9UFL+kI>&JUw$8b9&B^1Z{f*Imbb3*{rtn(1i2ccp~U3
z3;(s}HrGkk+iSe^+F?*7|NDIP-1IhQMgwm<Mh3Z08{f{#yltxO$;fcP-b#$WCh-Eu
z9D}gGGk;sZJ=E-XYEhBh#FU(M-<5k0U;9<uIsFk614BchR`;s-2W5-mgdUs$H&8$~
z$CRfDO<D!&8^g{%WDt5dN1!I`G`L)vciv?i0|SFiyVd!;*EX-kd;i|#?-MlYIT!09
zQabPKYn$km;td@$I2jw}zj)96$N#ozF(V_xfv{ysP5!@FRi`fkx$D@9x3i`ihi};G
z3K~R6dSiC|r_;p^TmRi%W?TqbKe3{6nv>SFS)gnNQvUB4C@HUnCuP>uKw0-A^EN#c
z1}$r3V0a+u+XC7EU%cw`n)q|~<vVr>ne-fM|5qIQeCFX;hMG;54D~9!40R8d$uGN8
zcDA*EfgvIL_@X9%n{H64<+k?itbhO9*QQnk*f03*<D>H6j6+t%l*-$t+7m&pu>jZ3
z@2_|>y)!${3l0Sa1_t!{fg`=;!D?<u{qT9_2{8tShUa0=Z|2TT|GRL-cfpNf7ChH{
zUG}W}{ASI$%~Pcqe;kXEVEA*O^8cie+oo)%m>3RBJGJOme}{7AL3PkT9Rq{r49jHx
z=%3}0A;%Xbtued)eZMGA^y=H|KI(u{{IRz_`&ACr>VX0XR3gsXw1Q9hk%N}XDIeIO
zO$wsV)*VhS&%J&Ja!xul?)FTvIzLVDB7dNjxE0SSE2V#HKEK&<&bWC2!;a<PDrPDd
zL;dG;aGN}=iIJhf-7te;->xa3a>Jl(_VZW8u7|_Kl9G<Z+~2Tw>;Czmp@uuB7QK2d
zyf@gmGXmbd|1o=|gU5`!5l|O8Xw4CBI<NNx%srp26wkoG5EnEzeKn{u4|F*)_e0|I
ztAd3w&u=<~GW>D*zy0pK0)`te>R<2A+<h#cgMs0PDI4#BbkHC_*gGDMw@puX><BWm
zd9g%iRj{F<8E6o^&|ic*+WNB$D2UwN`y5qSWN%!%7Bs~IviCv$85NbtbC*GE5Y_}Y
zYx$<|&X4H;N9?@oE}#>Q_Ow}@*L!Va-P6G@xG{|B&79pG8n0}u*M5EzX3OxWd1nE`
zjU8Pb$;>H?3=g(PcreY6Jq6P4amMH2hN(x>3iNvpJ*$e#5Z+dHwXF9%sBzO15gGE=
zW>LA7nxHrQY-9TbHN};?E+J~u^p=FhZ>4sF*1|D7nCZ*H!@zJLd)4PRI!b-N|F7h@
z!TGx5N5J!&iF4EW3K&21pIY>af4{s3XT!g8m)oY`0XqhUhWkZ2c0Z03gK8TE&D`sE
zzMa3fm5=|`d7X1dk92%_ANp2PWZN^)Bp<`E_ddr}QdYu4CptAy_SS!gL+hr3o8}A*
z3@V521^rkv4cs2H+27d%Diw1}=iR+lStcdu>T*YeCC;}#<Mobn#@x(|H?H{vF`SJ4
zzW@2{bsw#n7#Qk;BSZc!XtcF-a=C3P4n7w@XmjPacQ&>*Z`PlklrOR6?B<2_*@D}?
zEqp8G4O%>qaK!9;-Tjv{T(0C^UjteO0E#7sKW9NH={xM)`i2l6Q{MS8kYnxV-FE@q
z1^lK99AmG=|LpJY*qZd<XpE~%;PacAbJMpcu_s8U2EL6p;-0YQ-}WPkw@u?17#SLt
z7wWkGSRw}U+Jp@|KP75=8yYfks~)=ct_Cz5p}_g>?<Aq?;BW#Ji^{<(Cm4JNxe?@~
zh7i!wZcAep5Jx{j3Dg}f^PQXimudOojvoSo*{laQ@9YLu@4l~XiW9gSj?ePuQOK0P
zwQlCN*v($H91IK<PGXY|q|b{6C7hF4yO-@Z|8!B5f!|8A`&Eb!PiSPw=6_aU3OTvY
z_JFpj_C!a91b;u{abnloS=_B4M}uqzC!km7uiVL!2XR4-$laS(^eHF#Ulah1hjoJt
zXMhFKBJdE_TvwO+6|Z7EKP<T>_;KO6&4;bdPg}(LK>REV`-CO`zPns3J3I3iBg2D}
zvfUzfJ4HZNP1v#d?B~h{^L0-xx;0(UdGpRZ@vi2zbGOGn{s~&@-7~*j%(Jr+w(jmg
z`Kd*-+>XpkL9XpxZbWm<pJ@$lo#>}1f%*q!k#p0xgGZ3!|NajZ`!lW7rKY3fu+@1T
zc9sXzr@CJKUt6Z&*zhFg>wfiH>pos$XJD}DSKjHg=JvXc3qS$y5p~;ib;pdQ^O$oM
z+8?(N7hx_*3$)G2eS5zO6cYQ-?tZPlN==bF732p{_}CX{i3p{AgYC+n(3R|aSp6L6
zG(d&}+%q|(7#JE9SA2f6?cC-%fnY(waIa=}>wb`n&b_jU?&NQ{Zz8PVP-M3y);M?f
zvG<$|3>BbZ(5GC`(nDd<+gbnYJaxG$F2tt>%64@w)aYI%Z}&I9_29K<=X61xj2%;5
zx5^8qXQ?TM=U%^~1s-8!U|{&s7`$)-=tvxpD;XFVIydYVvD>^G)GB6(JK=JHfq{X?
zb8h<d(s^Im*LKxCoc!s5<8#4}>#feGmCjpxg!RCCt?pMAN`5Sy6MA-cR9r6WRej9B
z@L^BiQ||c@exOS3!&MulYo8j}bzP4%=uBaa-kr7k*#3{8PGQ~O&l8w!CkuSv1GT*2
z{S?>I7c#t^yZvAx#h@VRzN&3U=I%6AaHU)!DQpQkpUI_kUhK6>v)+zH@fGV_ew?dx
z`Lp`mW>CC7Vtl}Pwv}^2kCjs2?RAC{VhjxP?uQ)vaB?YlaK<is_cD9t8Z|y}6MK15
z()FpXrmxqByB-X?CTJ)OS~&?y@$G^ir_b^{5qsOz8<FN8*m?$)T`oI&3Zx3`=APKd
zkZ;otrGJ|S^6CNZS>RJa6<2?Lv+3OCe;+~x1;bCN6u$1T=<le%T4}cW^Bc3T4h$7h
z;F&S&jZ8gp|8GA!zb)I3x0RKlLA+Qet7G@JY@7Qa(|)+!Htnukx!UJ}WA|A}_ZyzG
zUl%Wwy>aVMF=%Yn<5199m1Cx`;_}ZKA0w4FLEuHzpbmi28{O9Pb0k6LG>DrBnlUgi
zBnLddnL0Q9az}-*;Bzlk!`GnVqP=w9*;h8ZOBoqH_&jT3mDoGGW5%}F%>kwi410PY
zU7b4#pj5zcz&|33hu^y3*hJau@$;*_n%3Ug5?ibWD(oe;Z(8x|wfJil*jj++^6FV?
zhKP`>4;Q<d=pw_}))K1?D=$2bY+UqE7+T}7`nK>gFdUe1rLrvcdE|bUxAB67a)Q~c
z#!2OZAJbiAu2q(WJ-_L7lfh>5%mzlcwf|*pb9Wyzh+tr-hy>Nm;^4i4KkhxV{KtOr
zK=Z#_I!x_zH|^B>e~Bw67qnTC0p!MS%1H~;go^K#orPW_#K6!XZz0Onx!VURy_HRO
zIud%@RNE31!v{|PbiM|<?l^F6`d_CNH*f#{Q(nJWqE<|h{ZyLDI;Et@=Qo2EGVGbM
zX~iE~R)e_L|H_MRn~GbpF*Jl5idxqsS%TUF2hQux>1<!CbGJO5z4ANrw(lF?N}UJY
z6q@koS9Mx-m73u@QFu{dJeh}cclPdQ*Feo4kQ*3O9(i0$$kzn1_iX6|4RK0rhLosR
zE6XGV-zz`zddPF564b`aiF!WsXgb3llf#CL$6l&|vcS#@`V0(vW+h*AzOyBEvk=Ih
z1O2)0=2{$P<+lcv`F?M@&VH>}Byi(YtjnBEP!IoDZt?jyYiD`-)Q8<l0;L_0)eo#w
z1HW2t?Nf0+G-oxqcxPZ>m=qv(HRSS#PGisrHp7QQYE0}53<{#9^K@U^yynl|+u8BC
zBSL#V;|uXW^&K7m!=K+=b8d6?QpOLL%-HYwv+x^O$=_OMnYa5{*j5IH53Bl)^0R?U
zYMUi*XZ@4&($%QAut;ZBt>MR8X4fA&32xX5Y8-=`>J_=~X6lCeG~Lk#7Yqyx40X>!
zj8x9aIDs4s>UfHNn|A2>UhuNy1KhuyLCZ~-EIYUPb;k_QEb({q=6TNq3!gY89KZ56
zX}{HZJrU*ud^0o|6GE>2eV?db$iQ&mwRZQa`nb{sTpQ+qiv0xdzme;1cia$`_;cmp
zGuw&Af*(&ko5y_c+N*8Zdz?Yh^?3W2o@SQ2TVpqez}i+HgugjVuqx(&hFC+0Ot#b`
zFOYEzA3muWfr2X(+}n%3R(VbSL6xxJbHR;ejvu<-DLry_0hMZ(t<LLwXMb=N(i<>g
zG>|HFk=YiT{6d?7;SF0e+XLhM!64JOT_`)NrSxo56Z={7=kgCjbJp$Ozl1+J^7n60
z2pwAw>WWsZ&Jx-Z0-N{xpgjBgg}xT&L!j<?DaZ_P*nuj6H@YDIG=zU_zro1Bps)xL
zZpx2JKF>dzwWp<S;(you7uK9JZePK0!?k!VL(j4Kxz}~Ba56Ahr>^4bn7u7K4BYg(
z;dk5g^rjVQf`v*(KUVJTh{(Ce+jxD$6sw%KXOuvF22keYyKAf*`1<T;Q2GP8qCtKm
zd()MhS3%AI@s~XDxc%S^_`IP#ZT3q*!*cOgE4SU!360+O_k8_t*6ihihQ%kk(*xX(
zxc<NYY!`FG++eY*|DNS5GPJ#2_W%2yx3jWsnHUb7vkc>GxewkW)qj2d>tFFZ5878n
zi(TFFR_d@{WngOH*Y`?uJ!H2PT`fE71Uf^-pz3eUR9n-@3sP^JKI4Lgl6|q3q|kF&
z*h!8GoPYO}_#Re=4)|;TaDD-5yd{^;yX)q%Kc)8LH~as#Jsm&OEUq-3_~9D<_tU1j
z%J{kIVlx;GSc<vR8QI<^yUdAP#KXW~{W`)l0a9)xZ;dUE7Q5Qs@x!~~L;tVOzuT1_
zEuG@Jb$_Ke=Z$kQexPbJFEwzk>ye4GJg@vufB&xN)`@G|810?rG*4lCAo(Dl>ELR=
z*9v=-57;(+lXILSxW%~XZO?<&W~;TVwvBCqIYtfB64>Tz?VhxKazcSn-Kn_is*#yn
zw=6BV-*$J({H=25AuTxuh6d}<mD`xPmHbjcu>ry&hwcS+?8quERt67cRMhPTrRIkA
zxqItM@9M|S-~03P`@9#~Qi6KjNwVpJh4*4tUD@BykTBV2E9-`hdAsL7&drPYz{S9D
z_}ON)AMew_V-kNBn3;dBWBj!6O~TS<t*f8k{dRS+nLP7+eM0X0TX$l*K*Jc@!v9+y
zixv%D!JnIV#}u5EK({Cr=}2;wUw!s$*%xps0gYrP^@Q?5>t^qpQ$bns&y3C2*YA4z
zdh@%l&(806|GPBsa)*V8>fX&A7H{Ly*T?Vl;cVy)S-R`@``OHI8FQ9&zxy6?dNLzJ
z!i`lS{vj+MFTP(7^85ZJv$M}DwN#&76{2t3{bXh6%6I1^_KKRUd7A8^;{r;vw^!H4
zZ3{7Eoei(?c6d*H^|!-9kgwHRA70-q&`>UIo(Vpyu0nJ7B+&5H{PJ(Vu9ohfQ2X)O
z`Te`Om-PL<uA=nKCAufi@PDQ`N9ng;S2JHGGHfu_xyy3H=l!iaKP34W7-lD~Q7-`B
zf_h+mMsac6(qFYMfAl;eGS}OGFVs<*cO&S)hHaU%XG?=i&$3lPd+*;r{OFym*Vlz-
z&u;w&P1X&f%bFO!3xL`UAaA-_2AR)*v?8W&(gux#RLG>Sk1y@MIsLEpy+1#{t0?Wd
zUg#pzRrz|(*Jl6a>FeVoz1R+ftqi*R*ZfRl7^B&#<L{Clo0;=vFfbf=Ch?l<Q4l!3
z_UGKwcfKdAy5`HW*}W#whl5uJ)xMdO8F8E49(1>H!fV|-Tb&<HTMABDAeY?9R+IC(
z{_NS7FQ85>NTk6iWaYN)B1(4KcJ7=As?`|w^u+FDW?(pQ*`oUIs_1L?_CCx1_ov!k
zN$r0{<dbccdcW+>|ITAfn0<CD_lCf8N=dH@*ccdc=1e@LQ1cE{M1JVrRoSR@^>W9L
z_{c+hr_DS2S!7j6d3u}Jq1LT;+>ZEw3WE)MSA~@C|2==jjHcKvI}Me=wG{&c!=060
zUkhDiJlYS<oeCPr1-XzRV9Lf_phKY<7#J!%cZ2#74a-51>+3S-+xm*n&+q>hH2it|
zbpUVkCEYvw-?Yy@cRp^v(GwO2!&M>W|8t9$6gKpJTyJL1UCPLC!0i)H+oikPcJ9=%
z1qETl@e9wMZSgAI&hxF;ArYKc%*=}gKb}aNcIoh~wA{SBBj98RcGsVUaa_-fL7NLe
z?s{Ms{L<kDcrY2noszO7*8tj~%nbhpDz^Tdi`)Nd+Rpjk*89U^c}KnMif1=tT#uyM
zpDC&Q_Ume@V!S!Som4f^hTaQ*<&1NSAAc8TV7TEBy6SjU^9O6t(BXl{v%Y?QQC-wJ
zH7#`2^xV94u1Atr1l^6*`x`c6!?bQQb8pa{TnEZtJzxCyo&U>S=?T+7i?%_IVkm!g
ze(~Oke1GnrgEc@Jn0%)2K+9L}TT?+3M?8mbz7D_Jv|8VL9mt(^E<L{;Hy8f53b?Mn
zyQAZEUBSyu=VciR4Al;({S*+~Y-VmA#mvyqYZ@fmavnT$EEhO?_G_)HpF4gyuiJ1b
z&P7M*QG|=lq*jGQ-R**gqM(L;&T_4*zyHR(nAfFwXAf*MK0`zGOx=c#{<}LX!0kkk
zlUXITXCFdD5Io8gt*ZaNS{Bbx{_p($2ea+}&vQAlqQ3Uub7s@J=UPg;xO??}U;ldZ
zb$HuUh6i<e$5<q`-R_vNb!X%&P6h_EdEIOeW}kNiWzQd_xp`uttCkBEYWPLG^qu<3
zbGGz(ji0J_f3K*v_Y}OgX~Pas%G(w^_0``xwG#iMBJU2R!#W5DwEoUHyRkvR&lTiU
z5T3GVzI2f}|I*z$kiw`Ub2n(jyy0xow_jK1p56coP!*+J2e*7Qub0a!JSzToeyp1L
zUx!N|w@!P;e1LydkZo6o@J>daYoX<hg|nsizh_`LP&VU*U<^3QKDaCs{5ZYfVch8s
ziO!DrEg}kQo~}B3HU^xHww~MmCr>(JdOEBEJy4q_xKUlPBN)`N2f2@dRZ?5p?rtzB
z6*KHv5c?36waYB3|GxTcaIReZ=boRR-~X-WSzB8F?)&=l|MTh-xS#9&`*?o-{&lba
zeLcTkl%c|AS{@V6_1|XZ#(x<Y4unaroO~#D>&~5;kPNi^!n0?ayuR-4sL)P`c)7sq
z>z=c{H$CgTzW;l9&;3&K)*1Dnok6;xORFq5{LXr?bk5eDh4MmRr-3F(R+cE_orUi|
zY@Mkga|qfz*$@kI^MP;H)qh_-lRs?5&-WJO*g}^#^`F<j|5a}P*hndF-_QH8-|F2N
z9<YY2eD}}(pUXFf=HlD2F?XIl3o&J2*kJoB-H=^tX~A?z8TjFd*xyYl=amw-MoxW|
zI(v4u<VWRIA^p3)_g_fReXqL~RB^n$VjEv-C%f;%8E{vZfq@}nrPo&D{U74r-G&vU
zUdER!Zp4BcS^Bx*pknjD_H%LjcV%xl?o`EaBMuZ|=R;j&w(s0|jhBHTXYNL?gXy64
z84Ug_&z|+&Z(zwS6?Ut;qteC4^$35|m-q4y>g0dV-wc}PoVGG(Z%>Et-b3p0bKs?m
z+=Cw8Khv$@?cYl`V!d9j+jUoRDQISxfk8jl9pnlIhJbZiSAPo{eimbpnDRY0@7OdY
zW`+aTiY_v^#GC>J`h(1^J6}#aGOtteU1`wLDkY_BSNF%?<KVewRQ%I~fq@}szSh;#
z?{2Qjdf2@aG#3cc(-68U#9#T5gTsfD@XH??4#{ZEIRsih%D}+DykRk@FlAuSxTT}?
z&5NHgK_O51QT?quXGEA77@~8R#CctRb__C(b3Xajd1Z#xx+#bGBe=M)6<vFF>=0<Y
z=Y~<}s@>0%)vH?d?`_?=Qw$c=1^qh<9!!3B=4LP4IYA*S<+P<A#enVn@Tm-Zz6b+D
z>Z+i<@`A=+nRyO{y7b(>GiMbu1H-m?r`a^_y1oQueFmH9b%ARn4R_p6oSJoC-DZVX
z>Gqy~4nZFlME?ivZDqK<-0Q26l3xgSe98HPVvj(62jQ@lLAIr8y!#6NgGx(~NWiR#
z#}xG-g@As(JH)L4Ya(6VtdxInbZ>sKab9upS}q0#jYAP<MczRRym`U1XQ#TvaLB$h
zT_3bpUkPOHtLJ%*?Pt$AgGQIiRtDXzy;iU&?8m7^XV3O}fNTP_zpBr)GRM#9f;A^J
zdiE|AS%3Cy>PyhnD#HPRHyL2xF`NosT4k@4wu-$XaJ%3~``o-gHf#(HP9ZDhT#wA#
zr#Yt^R6T>nah?^de|Ph*lgpjthsJUdr(I`D+xvs|sda~}jB`8E>Gx1u{`Q?St}qMN
z1TEcVeY;vg;m4CTXU`(y;ZTpL-$OkwNa5I)<PKRJ9<T%y3~~>S#+0)6+`2Po6$1l9
zmr;=Uk)`08b6)uD*{?e))XR2U_ni8wv*SnD|9ut85)r3;K&#6($gT=`AHMQknw@_L
z*Zq$&ux3idi5RC3t-F6fJj&1@bTiiLCA4?dcq0&;5*Vf|jrPj^sCJ;c>i)B|JI|g)
z@iH(3%;`L(d1vkYc970Ex7oAvW`3Ib<6#{4$Ab2y0SUVAZ{68Z0xGe$In;~&wNc{x
z%6WfhMscy07&P<~rfOZiJM$hh<3aIfxlpkNp`H8NFYR0p(#OD-<PIrp1LlA{F8ko-
zUAH6oxp`@e*clp<dPDpl#(**w!-q|0bPoLGTOIP-?jiT-7m2y@%1Mf#`JWp#p{tJn
z-LsrEyTE)tXjBSpi+1SBd*<;B@s`=e#mcbqa)HWUTe|=&$aqhJLYWB2R}2hKL3MNY
z&aMv6*|V2&F)%F1SbT|jLB(@up*QK)os#qE_p}+`nZ8fg)r^_?YU0f3h}%~df%9EW
z=qmNUYo0e+J@k{mbthsEIFW$bV(D^%)k01Bey$Kp7#KuO+zaY@z7AA9GD!5v#)94H
z5SXTSjHRMXUMcC30V@N8fS|k6f`U48kTDgNcZ;4z+aB<`+w;`P=F59#<Lw_d@aN{8
zdkTuM*=xPNnka2bPug%Pw;o)Gf($$`cU4Hg(xdX12g3c}m+pvUtSR9t4+OcFfx$q<
z`W8qf1E}qKZ+nICgPVU>pFO+f?AhKIj0_8M{%)4kxSI;e@q4z^wI#0NfTp!mSHJ&X
z_C+Rvcl)!;p!EJZ6qMfghjM<OWvvZMYBmX)3O`QGoCzNCU|?Wa5RiN{*a9+Dncz@1
z1ri!ZXSg1jw~KM!(Oj25`_0U`3z-=hY{hv4cHK5JzYZys4OnvX{B|$hbgH3x=5Ni}
zsb4nCo2mL0bo0qhNFo>WoV!BsUFp+3ur=QW^R=!{?ywLNs(Bg$8(Vf*=+?CyR(~-#
zZ(0m#E8nQQJLy)(jFnOkB4bL}J8s>vaA0I$_;WczO61)8lc3-^eCh1uyRTTntkwkO
zzT4zb`<{L2bB6348O57LKm*e`%e1cE&G}sVT_>dVgTj1qkQNZ;FFeP#uk7_7aM{AZ
zzz|^Y{TDpN!M*SLLM;E?N~s4YL1kTLaj|k11H%Jp<;H*=pD%$cB8f?6=GO%c!@2Hc
z$1SajcX|5a_qWZ0a%Iwj!Ju7I2hvsr-JNUw|Mbn`h|}$6=Fh+@pFoA(R8VK(5}yi7
zyrn3lTxDPgSfq6|`DpMiGxO<7(?O0z3WvPVRo|79mZdeQmr4un-@5bTXE6qbh@+{@
zQ_evq>X<J-OA{0nuWFq7O({un-Xfh}_Zole-ntWW8dM&cd6z%i<MlPu<<CN^h|_DU
z!C4yQj^E&7Gg|Rr`84n<bC9)MTh~``rT+)DOBi_0^g+hR5?+^fn}5H;^C88~?Z}d|
zz1-o93=O|~mN-9L=M63z6BeX(HCE3JSvjvG<M&tF`BUaGuXzY+!UcfRLgcUK@zVuA
zx|MF&776WFf~;crUZ8JT^FDd@>|*%Mj;%$@E#VDKiCMC}V1)<1fqJ33_d^U1Oy1ei
zQ8-(gU5$aEp<TwKW75yNplD2(@$0$S`zy@fXLT><=)T0<U^>$m)Y9P%Ub?IL*vzxW
zhxvDck_AXD$jA*|Q(tAe$Z&G(O9uDoKw=s<J${S4+XZR4CuEeFLMn&oTrt6FEw&1w
z_qXqyap7iQuvy~u)x|^P-6Duewmd<>yGqZPT@TLf+m-q>H%}+^UQp<&-If~;Un*`e
zEh(P-ya}|F;cURtDj7lV^ZOpO-~Bd!E+mgZ`h#`#cH%$gecl0b1!z$Iq}wf|{IGd3
zr0~7r7rJUU<G1avSSw2I7CpXy3*wwLnehQ4u!L~!*)uhzWmZkqy1$k_&6&CH`p&qA
zj`Fpjp@;*|Rs`LhTmMH}iSH_#ea^*a&!S+{st0VR32szZ_;IfFCcH=}czlU@K~8So
zIq&meXSJodLkjK<Tc53BttgRKPP+6gO*4vt;Q{-OjD|~*A)w$gDEON?QT_{y_S>1K
z??i#>09{aL3UuyLL*nWn+jT*AZ9o5a4*d|k?$(_jpm7$k;Su1@=bniIcTWC=o%`zW
z@=m$$NxLlYJV0BzyE<6qhFWmh>9Uof|CN@~vD`epqg)IOe->;!pfTtEQc$3p9oA9G
zD`nOG8@Ke9@qgW*rBzAy#6XR(XCa^tg+Wf}s^@|q!(C)na@E}mfi|od4ru-5>sZ?G
zz;AnQUJd*#jH9pK?`fL^YXWXr4JuU_7;bnKZ)LJs#h;s}W5&k7P<L(L6OG8(vy1aV
zE^K(1U0fWzv`S3yf0+21Egc-wdGh;RUosw$%2Q5K12ym@*3}u_GE(BZ!m|HK>}+Xo
z(6j+q=kJnYt7@Sp>$#xQTR|cW8h2KFVbGZO8#MOGkkC*z1r){%47Znhm74FVTNKvd
z{&~Hbd2k^U1H=9Y9u*>Q7K88IG;^OlJJ0fS>#2mLi?yz%b#8N*`YO^zX4*XFHHr70
zJ&OY6N&}nFRo_>Kl%M}v>>{&*qwZwr?AbfvjqlK3#+mO#Tds<20tG3^EnMbWwhUe6
zk<bdt#X1Ts)3A1Ph~|OCJ9;~=JUg~@6$8To|J6Zz^=-MzV<9S~Gj5&tWhjrX__zP&
zuYb?L1+;-PXtLvQ$kM87=QHN5;E+2S0-EFiS#v-ubk%XekL?W!OW*0-0-dn}5@l#O
z)a%XP@MxwYC;%E5Zv}!oCJZ_K;Myce^ML+taMPeT5EK+AT$!hwdk+p*>1Ainmb&PC
zVbgx=dL+h1I``stjyw5kphP7x?VV2L)K~8;|H;oQJh-^>`m<w2reNC`7#{e6%Un&_
z9n;@KavuXjLr1M-z^1zM;Ih%cz#1~b+pyLsTpetEXX`Nrh6BoyoRbdi%mA5_z`S+m
z%<sk`2kzFb53-$h_SwoH+s=;3pi*Ivu{$^j0+&{WEd6DpROBMFf=%wM>;Ijw9@zn{
z?hcD7d}~T>KTFdDw?{xlwuKNQ>+S$>8=dF!I>=e+3DzMi?aX%YeK>8mW#`N;K?a5j
z7v;pD9j77H)QyDA9VfV2rtUiWO!#BY9B@*!`vp3txFK;x(A~32=anD1sD5~nr+jE;
z63E%0)iO)9t_E+m{;*(a2UMitQs~Ni`nJqnuy{2Hv7QA@0UHBU59t34pDlg5hmoP-
zxY;xf)$HP8(76r_3>#+Nx--Z9NcGo)UhaRJip^ZWDe)DzoJnqRu`*~0afRjGLz_V(
zD=(fI_=hn1CtZ7XED1Rtc2~3f*Ojf9U<;nu0=ehgw5HvlMcfPt3(COL{|pSX*L!_6
zQQ`~X{1BX{{AjzGxn3YE1H-&S`$9BtOoe2Mdp1gTs|3TMLRNl@Jizv%de(GME#*9W
zb}?ww<iP0{^O8eX&ij6P-aWS?^Rym#&e^&%vJ2Km-r-#@_cp}h!-71%=TV?$Jjfjk
zhC+<3#p}V2<+;)a3B82PU#F*>yUGD_NK(>7Lk5NqEqyKC2X%Bn!F8h`H!n{qX_<RO
z=6Rmy$7X!5Wn6vt*Z*43$e-lh%8y!CKi7Txv^G8R!xB5UBOyn?)-W&}u=NA?P8YPo
zB80(Cva|8fO-K)&dFx_Gy17wdJUxZ!&y>|265Ds~6p?3O_#m<><URMaLqF$&iuMHV
zEjwR|S<Zhc6!vSc*VhP}!&kq5u6}8GKngSv$O1~*=a<hmUl(Nie!BJE-VWQ3hbPaj
z;sdpGK`vPnw6sc6(4DD?y*8(~SPv9^AmIl8JHdVzZ{3NR4qDyLz`%2L9cY0H14BY_
zX?MPI(lVz8`7%*KVQ*0SP=B_F(d#*Qzh=YRi)UB*Dkb?ZFIevS-}aD!?iVKhU7&gz
z)X%c%*Sfm6W5&1h_id}&pMPF=_Uz6*pdbY0gWVx3-=$UgwJ>MT>;`2dkSiW^*9Hb`
z;0E7feW2j&3y7o5Zrynl-5~#M;n}l0K+R_ch6b<;VCnewqO)hWx^694zqszFCG+L)
zMN7nYT+em+Aqmoceu3B56`&6DKViZAxx($~r5B$adk*OpFff4H@$&9R_Ah15-kDpx
zSp+l)2y(~)@#Me&188&lK-m;<Yms60%IGF(!TqcGAGGhuFE$pHWMKH<6Jz3V@z$L=
zkZ?O-mRY>Hql0_tA+K(&tG^#f_U-F;1;ve6ZeENMs8Q^{!s~0{)K_`yKG_QvDrHxc
zZ5J%m0d2YhS^GdQbk*)^=IMtTw_5Io1<Hr5wv_<}-=jfpIMDD`3)0>+o7VlGq3%q6
zZeENL4+DeE@`+nCZ@7a)E@x?^%b%rDJ1)olw>1(!pKvCYhnIg>R`KKKpsZli2p)TR
zJ6~Gvghbqx!r8N>VZLU#|LS?oxw)>*@=4*4(wTw5VZGN^7cr4{n;=c4gcD_3Kn`JG
zn7v#+q<*oL@?%h6PJzMG#WAD-G<2Syn>Xzd69dD%n;s8D-b8_yDcoLu*0=oN6YHyo
zyz*Cv{H{r0SQXN*{OCKV9QA1hb+h_cSDS?{t-5(W=%1h<yHcC@S5RVsIievybmhJN
zj=XgV{uUdy@xunZK|#jw1-e6u@pdR^qL6_hXUWc64A+XJ1t*)CgO{Mj9q@P|a^^jF
zq~vzCpy1^WiwlN#GH;&M>3nunm+SwpMA`Re!$D&kk5_;OXO0URc6T^$Jd_Z#WoMx|
z#J3C#ALiCQdwypR{~v?Tup?p_;)~TSU5n2{N{`!ppuJ)Y3<;Y<R?c%fGVvCJT*+<O
zH-#HO>)9OH4=qo)4&MKF!w+13tcr_xxx(w~#)`PU$modE?x$ZcGB7;29=dW~$jZ2H
z#gqT{f!$DY{(#MTNR%@$gjt%tXSRRiJX`uZ52zXi2f+MTPcXYJ*B!DtYD3{OE#``V
z@&$=ko;?c+VPH7my&}j~$fotPHE00)fLL~M@jcy*R}I%}SrN2Xf8O)!&-ZD(ecd+S
z0Mv^IdG1Hy-8ltQUsX<h^}6GPV4;v;^`aKXoxL5&=MR9bWMF964IYJ=Sn#0Taz8w!
z?(Ou^m|+bLhJ*)YqM(RnV3@r)dWN(hyB70~>!IZfjz3CbV0h5lE8+m_c`RVq++oqz
zVViomobT8Bi90jq-Mw>Owc<kL?AgJFptZ5TR)zHcN`G{@!$L%s=iZvLXP3@`xgsCj
zH||V$&>lPEB(!8<*l~GZgvO1X;3^~GM%fog49;HYRcb!RE?E4)UOlCxOV6IU`7kgX
z;Fi{Gn6!20&TpWyg5gHq-<r0WW)W|5r)JF;w^^)p^>N3Ky)*PB>dxi5_@siOf&cZn
zvhbDj!dAW$Gx)2n^sl4C`QpI`d-IDohk!~vki$N#)w+7u=U`{TgXL$Ag3Se;YpecU
zC~%WB==w*70~_AH0-43YV0KJN>Dv|74VT)@%!5HIrI-zaSfI@V2gzG^bXJFyf0lCB
zYPT-szO25e(yZHQpWhGB&t~R&y`b&bqN_s6jSn0bG~8OjV|K}P_UxIjKrR54ulb;P
z%HMN2*y_B@rx$~-Apl7=tPfpzPn@$AHWeVTD;Bcc_`rwIm2$gHgdfDo-@4=D%EG|F
zbHYPX<c%9R2fNPvHr@Z-O4)tIAxnSlID2+w#=Nkpuim9!yl7V6`+;MZ>lbcEP!78O
ztN70Gzpn#qHf*%}b|1Ewk|BO&(B3Vt8S75QfGd5FL&~MPTMxxfhqQ}$?ydvvwqsyO
zP}aG^f)pIaK^&~RLqM%12g_S`VnBm#ckZo{eYa&rQ0={E&)jVM7kho(2g*R;k+}~~
zD=(=i_5HTzKf)yae%tSP-*g}rFfjaBUO&gyT9D_@mToii=b&ruK(1h5*mw2qDgkgo
z!*hEbIO&2XfXlhd`meAQEWdy2jt;1c&U3*-Q{)VY#lX;-S#111{VrcA|9#7jj!2g?
zuAftO<$T}vCA<0fr*&t~E;V6fV9*Gi`l`^yN9oYc+#7zu=l4TwV`!)c4*)+ux9^aC
zu^p&D21z7r?aa}DwsI1Fl$Anq&f%-^^L7RZ9++E~UA$R@mw~|`fW2!Wv>4I2q@%Ry
z)kDAh)gk(~?^M+NIsxuheP8=)(Swh*ImO9>pt&B`m-D4dPap34ZU21_b3!&~2x?^&
zG@~?}|0T=+T(D3><cF$wZr(Xp&`<-&H4Jwix`Dbm3<fp3t-xhVgX3)1BaK}Q`#wj{
zp1m{zw1#n2kZlkTEEzQjm2&5;4%y$|aepu41HZd_F1wiYpOcZa$<YFJIk&~y@3;PW
z{PfQpjl=C`=G?K6EXlwyKXj$s_vh#MTAB9e=sAJyW?*Qj-dR3p(%fuN3!kAaKinNG
zZs7CR=-$jKBquORYqo>(?niJQ(+J!C;+usM-yYTn*6yLJ`fuNv)Ag*dq_S*h-r?&^
z{x6(oON)b|Z$s&-kn-+>$Nn~Lc(-+Vs>V6j*|S&Pf(HpGL%BYG*7+bX#$q<uV36&1
z4&MV`9Djphw-+Qp4o2;85PqP&UC<B|H{77x<$iN5N(cuR@fzW?XV2EUy1C;=d_MDz
z%Zt3eR({{BG%r4QY1RJuTUo<?o0MyUd}kIr^;Mutk8;wb|CLKZG~&!R*Thu8V&TC5
zl|i;!?=#9>1>N-vas>kezf^ZeQ>+$9FH*?Zgs$4Hx;H<B`NPrN?FaUp?LExJz;HmV
z;39+S?u+2ObMw}nIbkd9jG5WXtvWhp9=*_?bnQ9k8nfKu$D2WoN;9viuLAA6Z|_z6
zJHI-L<=?~4Gn3DQ7O8`*ZSV(;c740&#VmIg)JX>QRYBqmHYfgiOnDRa8^l3MDp9Lg
zA9SBT-K7s6n{Q5^39cXJMw-8Wm=w0-@@=iFr_Idu^8R{;u5uT<cDPyZ)}1+BoS-zd
zI>@%K<DKcN`I`N<;cRjrexCW*3p-4)0n}{S*wHch(cy;UrjsFK2@DJe{{FI_vLNCe
zcq2)}*$t~95)#w2uHJ2}XU}5%@#OQSN8X^rC#6#s>42QNAmwiB6z~v2yE)UHmC?KE
zbY{)pcIU!=bDQaT--@(A1L$pw;-752fBr_<f19ojXI4i0gENysdO^D&CTm^2D|2aO
zq)J7J{I1Q9l0Z#vkX*%ueH|LmHrRo*8&@Iq0gwCCS9t=p>x3Ho^K?NA*cy6^*MT<(
zS%K$x`;{MgD14Y}9=dAxO^x#*^%Lf6Z<yAq3TkfIZ2#Bu#X`yL@9WR@@><LlD*G*q
zVFSQN>Yq<l6D*VxtY&I-FU^hzmtdfoxm#|F7A3qp07|+Iyc<`8^D%?Ol%=Ol80}u_
zInIp;<6&UPS+Nn^9AdDW>3Sr7QG>N^Y{H-9RUz-)k0ee0ckTnzx?6W5ocI|S4oqGV
zWczA<W^G-m@#ee6vz0rU{oiaiGxt`6W#Q0OyEhx>ck?sNI|gcp=Rk83!?j0!g<fgr
zz^U2n$U5+z9EJpmRU!ULk9w^b9+@er<>u*uhV64!*d7gBWoG^yoOd2<&il96>#OzY
zWe@$>?;3qGGcW$QCimLYZHo2b6`H}IQ%yc>{<Zns+(MT(-??|#?YEiE7<X#_tvfnP
z!2_8L3=FBOgYKR+nd|na{@c5E8ht9c(jSCbo<C@;&~3QRbi(Q^^T((K(^y|^b<pMB
zmU_@cOvmcPWuFZR2b);A?LIu{zV-H|tk{x^{1-xFuZvzh*fIB_*!Ngn*O2sQ!pDQp
zGsSt>%O_~YfMOg}&%WQLucZd9B@Os?S3!#hgBijP;@KC>yArl8g^_`wCvf_wMo5s$
zy=Z@UPU%r^#Dj^I(?6}+_DJEn{l<Sh&mJ$(7czUl`RjBB28KV|^`6#sT)X(|Hv8-F
z_fPomfBqvTv1;?JQ$eu30tUIUr~Xzg|J-q7c9qzNre|BHS~J3;q-MKvpkd;<YoInp
z!^9h*kTI{Exapq`F(fwZc+bB2de}M_kgIMqewqPY68_=-uf!d(r#5$F9BOp`)%fOg
zhlS|b`BA)oekEMaQ%+jQ%D~X@_S({#Px1B-<m+ocw3n{=Em-)XjKS^Qnr%kGO3?7|
ziJo4xpZ)#eE5!}sWzo?a`ysgiwEjHKd=e;d8VX@qBPVQnk$pkMI<|yI?|wJF**bOg
zO3*QRJ@@uO24>_|t&J(sobP(X`r-lQ{M}Q2Zw(e-R2en>Q>Kdy|HoSi4j^B*g64z$
zrhmFvzDD`)t^LIt>i&NJes6`yj1`-2o$>)UUO-FdVqcp^uI{iXkv`D9ISdpqAoo5v
zE_<?vb9W%9jAZCJylx&ykRjpmG{KF_*%A)DQ+~8$ThUWcA9-6tGuw<!+~DTh2j0&e
z7F*-^=3U{>vKKg;9DC~b>#f@kT(4cZcFt*bh8s$2y(8x{FkCJTi=O!sTvRhKFf3c`
zz4QL$T^rOz<Bq209<^)&TgAY@V1MqHn%e4ZMT<cL2n-VKvbNwHbl_Qu=6ts!(V`5(
zW%7dRTc>K9gT+Bv{M)LvcU+Ie9R0AwJoXg#MVpoXiyxn5SkK+ID8AkDGAQRWL_hM*
zJ^C3maR;(z#tOZs&3aF}JAP!lyxGbBAT(k<EUkQK-ZkZW>amu)kV@rPvU@m42g3%*
z*R9XJKQbfRzQMI`%E^{k4UnH2@>i~1qx2}q<HM3l`vb8i|2Lj{{5W78J6l#@^v+;#
zPb~U@l~Nk$CIpay4VkZk=DEAn$Nk(G%@B8X`K?pEJ76BFo3V4L&rDNrJ#V128@%(1
zp`ka@<%sl0W?{4SYh!kTw%qG(UJn}fWN65rwYELveJ7{fi~GW$WO{o4TDBrtgOKT4
zr!EC|rEf4@7c2~l-WjaMAY5``>7D=^28Q)1q0xp7atsU&jxU4kqTZ`oU*Xxa>h{-t
zpmS0f8Wzqd)tsNf%+L^C5E#8vz~q2`u^)JCVb6(mkb^NEd|k_b`;S6Z!l8TD!@@vE
zRU~k~)t<_^I|!V7>X&URy1eub|CzrUIu%cH?PnZiy!k&SyIM-{IP(q>iA_7<F1u(i
zZT^F&VP#b^FDnDX`W5l>E0jTp^0Y1R-f6!*KQWCt=ggg1;JdjJ67FfTFf@dl{4`$h
zGgVzF<<J?(VqL+TfsnRi&JnLS2U_;7U;Cq2fPvvgSo^HhRXm`{D~1QvSHpfSyn3Cf
zSv@lPtNv-l7#5xz%WrixgJ-cMcK`dlNci;xXdEO&?V94Ryy(94XUDG_1gCGET6__f
zLKy51Ryu;B&_Kx=8a3CiF5T17;k=Pq`0KuHo523hnHxP7l)FDPKVxcE-y6B!bncq3
z=l>sj%NSo89X<2Qd~i9C)2a`O7{d>+YD{gB_s<pHKb4gJrSVJVT=9Y5{JcLUzQzaE
zBDN_jfmE{VmwW$IP<p1suJ)=nH+5+Z14BaeSLg64r(5nqQl)%g^vm{$dNC=R%zbgi
zR+iUp9V!RMIzz)o>(y)LTnl?=0&b2lFfiO+?_Igyd#C;UKko$#*A(4Y;lEWhogL%}
zkZ=D;Z3b_VV~}W-g&gE|VD&5h`*(yb4IJlZYil26W?+cUi$CadV=lO-`Gd2&V~41W
z&879Gv3@4gmTukl!8d*DRBk~~2pc5*HC{K93B&}A%}VW>@_X+RbHR^(Pd5~9-#WDw
zHlfGRF#l-}cuq%Rx@;|2`GMCjg5I&0%5_W6SWp-7F$UC2+;DZ>70~L~1O1?qprusx
z!<Ox_r__T_rTzW9Pxipl0|9q`SAzn)VdCrWGUum&D`BvY=byc>v_@D^UOCDCsR75e
zcOajFuuZ?RCD`W%Y}Qd=M#J>$OZUhNdIvHKr$iVsFc_$+L+(ibVYqeb=Z+srW)+vN
zT${I!t$^1cW%I35bHN=r3C(KI-KHQT6PR{Q@!vfqU+K~Ij*7*_5<PW)&$U{CWI%Y{
z(RmUxp+|=t*zx8C$U6)SaYs)%6(=<9lK?eR7$zq^0LRt-BsszFLM`rmyQe%4?pW$w
znfSoA=5lK8(-`p0(>+(z5ti;Q)tq0V`ThCCzh~nNCFcD8S_jIhAR8GP;tQ2QeIf=#
z*q(kBWY^oVJ&8^2nUxX`sCBk1E&efBwf(wnm*mrS3dq`IUR=88>U_r%O?ioRy!T7;
zeL)ohgYvh1+a48z4t)SAzY!FBN<H?JxZp*lM-k@@JU{^gzgVs=c7K{zkI#%!@M0MQ
zBWo^j-fEbB85F|Wg3Q9jvV!V-)~pN+YA-xq`rPP+q$ts?Q&U}HxCG^Hc6U6Tc6?LJ
z|2YT3?<sE;oqrT$r-9r1Z0&Q=ASS3GqI+ej&Fi3jT^(YA$F159{tAk=42QLd7(Vc<
zYXPT%$D0;|t~6#~s0jRf;GC@>vv3i(da(vwXn&yON?6_%&@klz;~Ct7^S-R}{+S}Z
zIP!l?K6`<tLCE#3Q(M8sn8eJw{U85d3kw4uFa)yw?In=y@6OBq)>Y!W%H4cz{o|P{
z!8U@L%#m-qLCKM!VdIUfkk-ha9=)fRJ1Vr}5}bZD`}t>SmwT}@FsQw90HtpR2K)8f
zimopGqp4)qB`6o^cI2Yiu}xA3Ob<+ubO8D3z>Poq?*H&AhWdSj?5-)_m6P_>y<I8l
zmYfEU@dKN0AKQHBVYOvA*d=ah?ulR>AO2ipFJ0%t?bFc+3Q58IlmjlY;NzDX(zo<<
zL^mE%ZjU|nIk#)6cjd#+qCb|Mzm^Kh6b44u{|eZj-wHN_fg!=VL{q**^SiNlp3<Xa
zmp3cL+#Y-9K8=BmE;Af3-X#o9EIp_DAib#vu4`m2ar&IOa{w~c0NTqEn!D8gMv<CF
z#id2wmG#n#Uba8}{`wpnD8RS>t&Rh?_<By1y3Dx}mNx}lyE8B_JifNH=GM|0LBanW
z9p%sT4!pQ?dp#)PKu-IRwC&LxP>sUCuq-hgGWq*q&o5_d<wt8H8aXTDqa!tC7#L=3
z(tFBm&LCX27(6I5FF5z<BJZC$wiePq`s*hADe`6u*5^Ieo<Hk)*gF@{h{OSpIakBB
zJ-i7X?_^+L@VWNOX79~kUysdYSZuc09%lW6qcWY-R=#@f0WOjmj-|STwqY|ce5e7(
zl4?+blil^OKRekO7z7Fxm|>0QJq?vEceusmDz7iCF?tqp?fU;RhUrYsUzctxS_iHS
z-5v$!rY-|_;TRYgB$n$vy{z}NPXDw$DDd|Ls`lKP`4_yg02Bsb?2up1a2?EIxSb*@
zSS`h>w#fcT$vSWe3lg6fo%?j1_s;m)pJo?4oS5n&(`zy9D#JR)wpVsaY2ZPD1eRav
zk)LmMr9<M6fx*Bi_LTc;TOH%gq6w?-e9Nv1fpxt;Ec$lzH0&6!W9jaYMIaw+KsD>5
zwHA$?JJzi|1KMx=A)kFw!l89jz$w{#1-Kox<HL!>>7O*(L&`Pvl^&gC&|_@_wWKbC
zTT;yB@`CEG&x3cqfij!miy*rf-<OtZet+Kf*H+2S<;c8u39IManh#4IA0F|!o^iRW
z0UrE1mL3ju%4<*r9AfZK&|3HV;89R<Uh%*|#%G2jxR<zRNu*1R<QCq3on2GHlcmD;
z#^qbfgDR8QYhlwMf$`wq&hr&M=a++PCI*ItRoAL_`CVVXJ&)x^*8D8(a4nbvK!MA^
zP`6zhT!1rFh^_9pA*^b^`2BC<F*b2<@dsLbE|sNi9((F^#}AEyiUsl8Z|yfvQ|?O5
z+^bu2IR?D6fagx+f0@&Eu)ep%I=!cV|H*v(`g-lE1R=d_ZEnQvk@_#Zz{@WT>~@0=
zEe4&;a(Ssu`2lqU!SA3($Id_t(B$rKrNmWP+TxJDrs`Mc%H30bC*EmqYGc1ws=5By
zhdJB4e=ga7k1>Xe=j!rXUCiM5Fo{k3uY^sL0+j)v@PGI+$gZQKPX1ZvPEG^MzkeEL
zf`bR->9~8p*5uAuWqlUp#{)m!yy5|gGSuDsb>Ms}M`P!V>tXA_X<&)+MzGAD6_qX~
zf`^q)Ppt9VD09H{K)~H=VQV}=U6h0s@01^H*;cd=yk`WI=KJ)X*2Uj^`Kxq=)QmNe
zxli3-OD(`gF&wDBJ(UB@{4*)k<xQu+jE4PJ!ouKJV<ZS?X^Y36ny>t*ndw2}VZEo7
zxv7>{B7VI#PLbc2sRm9hY_F`8{Ia#pxnQ0>`zq+(d;8=49h1L?8w)j@-#Yd4$>m^6
zK*XLlZA~<<`c40&q||qm-RD4LZt6<VJo*F9=}w>|^FUPhTJ!Gv9I|o|C7SEAw9B2l
zQ*A5i4I8{07rwfl5tjk-bpxYScgIhG`L-ZqLEW8@63zK*zK4E`=NIMwbFefwRS(=S
z2Sr49sY;&OnMiOmz`$v@7g$S!{Pm@G^yU6*SS2w1V)jc1dH+W+A84G5fuSOC>(t$P
zPwOJy-%sJ?f8%;YNvX}^Ox4bPb`LiGZrlgH7GuV?db{nb)~;D52P*ZzzTBqwbaKa!
zzoly!9%%nEwOf7&<Q<SqMd@!PkgFLIe9E>$8macnym!W1<SkG)VBP+@8Pvl5QCw{V
z4$g|oty4eiJ=GWd7<T8wfp)#8p}9}9G&Zhb|FmBkl+(^;X_teOQi8*;y+@ZjS6zc7
z9|nfoS+<`aWYqFi{I?1-`!M&{-b{1E729zWi#tJ%NoXmX3dw=?If8=iNzB{s{H^Nv
zI2SZk+mK%X-rUPD+aR9*&%McZHXCC0o3|ycl>4#j^sQ4nD?kQFOwboJ+`Jt!6V1R7
z=QjOQpo`4f?+vmu%NhPGIsa`L%-=a@_Pv;?l`ah8AFz1)3R3v*iwAYiYXl?>82<`9
z)&`BY{@JOQ%Fb($$_H-aKDc@{EN|Boalwz_FAp;xk3IGG*7~c<l3xbRlfJ|sUwVK2
zWf4%R$iVz*`mIwzuyhY9L-~~+W&E{@tiLO)|DjtiTe}#%kObuDoHG+ab7u?;5|d+d
zLGEEV@cm`bz5b4=I~q7&uuIO@mSSLdu-g)p5*ZjCOuZU5E%wxM!9tztiUsxgbFPQI
zGZQ^sb@r{3?uXFRw@&p!LZaby$Be6C>!yGW1ohLGd;e5X;=7i9>F>W=!s;K+yi<M@
zvI1m32p?d(!v(ISj%9{}7ZEXhxO+}kg9|ASSl{IU)f5f9v)qr|7iHl8k{v7l`up)^
zI%{{fuHUt8t<Dip>OH_P=j-`N+1lmch47#>Zhw7gjffz-VBwa!um5W_tR76A6Y(0P
z6l5<$PRGurAcjHEZb)0K!T$PEoBodEK*s2IyS5nxgN7PEFw20qX&g9qC2ZZUDfX^M
z+;tBy%kP>J{<r$c*5sE#cAXvNuNu~G@&mQf8hm%ZpC5cR>>Q-q!@$76U#cnZ;_~0B
ztK)BnMP$9Li0B5#_vRbZAx$|3h6Z;&7jXJMFyl=Yq$R&^t@lp*mM`m*n6};d`)dPe
zCt=+j@X25d3})$)f}1-k7Bg2Q>|AJ?=xur+yw<D(RQfdV?tWt*zH;py4X|+x3=Jz^
z1^uhNe^q|}JNF|CXERAG*nI1hmm$c<Al&@G2HbXGa7zt`w7Nc&#-94yxa7GKliGtN
z+lrQFFfcUCFH!(|zv1kQ>w8Kx&nqoj$slL(?!NST%OAVEE9C^+vl`Uzx*c%>FM-av
zu>4k6I%uI8$cCJ)dQT^RJzu_|?(1f@zH9fbuh|(GP2W0oCg=cqkOGDV-re9~35K4_
z>+XR?9?YI5_|eVfz_jZ4=$%2}2w0q@4Jm*U9{+kC5_>9L@S~sfhXb3uf9}~<^!?Jt
z63zGSN1XnA2>pD$LLcP!1H$W+lhX8IK25%|v_?RX{k8Y|?*_7K|Nrd2Z*SnwaKmZ4
zVBsp*;WuEr86Kp+^#V5<80KADYSZ0O{)lngo#(esd4bp4g4Fcfsj+=g?mzKE{@>q;
z8|&)#Y+3qUzUJz5SRrtu;r!p?N4HMR{Qyn-6~3{j*aZte9Qpq=(B;klhu43<e*gF5
z_4ZRtYVY>lH_yEb&aw;)Ydo7D!_Ea@I8d<WI%H||ffa97K@x@B>!5f1&aqu=H;Sfj
zow^fr7hK)U!;lioY>oV<+e`1PZ~f^j4l5d8ElrACzq?kwtRl$1r%nxAg2dg-{U5Vx
zTah9-n=(9*)ZIPhJqy=?TXilnT+9z#&%_nQgPSuTui78I6SVA194J5;Bv!^k-Qyg4
z>hHo;pcV=5hNGZte2{^G;ryXQW}mBjpMm@=G3nN+Ro<0ig2%fW*{2B>erlSibCfrJ
z>x#7&dqC??8?Jx3Sqxdr^q^ISON@ab?#}O9r*_T&X$INbz_>FA?5&>5eb6*9aVhim
zMotUEJD|e#hbyEwOz21xEL<;H@nDB{<u{>;YwGVO7apFhm#q!DjfsKbgIAui($%nM
z-vnU!{eZ^Yt6^cFJtH7%pm^TlKFAvT2ll(BfKrwUQqlvfxxH*#k+7im(L>6o^`8EH
z-jn+Gcjf+r*Uy4?yByH|DI@5<bt-ow!j{^VYtMv$>ow5eX~g-eW1v&y85s7o$%3nU
zh6DRcH05271j!tjX1#jtnkhUC3?J4&N*M+Ng{@OvU1DCd$ld7fIBM*^DdPXW1IeKF
zVG$^R9<+X)-~J~*H#IJLr!Y8Ug51~>w4X0y8Ekx@!O=R1U-(%KX!ejnVx=r3<{Vt6
zf2wm?qm<+?b3knOy0sP$L>L$z{FFU4rLzc9xjCC%=d<~=(EH~D%cPe<@A#AdDI`@~
z%FRtxge0CD%Ws_u%zf$wQ4R82)OJwguy7k_P!r@11_O_C;GvL)kGC#@i*$xRmyMM8
zTp4pV{_d~{1ucXB&?5sbDh?!E4bxM4w7KoU#H+@xn?!VLuKIu__AEHv@nin2Q%;~m
zsUfCj{huQr5WO=P>?5!ci1=`)4037afh(n&=anAay;97u?cSPgMT;TJuNW8@)KUZm
zw{x|#_wAnIU#~jp>#f_#8xKuBm!&NZs@54Eu-<V$^841QPFwh8c?MN~s}|JhUYM!{
z3T}`!VB9c$gK{XCwQP;|PYtDMc}xkXYgetEqYX;aAc+RemEe)(mmf}S@~-@!o)r1N
z{Mx-km*4%}3rZRXxPQtBvTvO_wE<>sg7%p#?eJBwW|Bm&awu5Jz|2|-q=O-06{ySc
z$VTbg9hL)PyVtDM5dozXqg_+@K?|`N7z|>zPOY2!KwR`7bG}m2zsVDI*6eLv|Em4c
z{Z3HwYe+AV6<oQ^=sWlXK9Cz3wjKNZRSr^@gH97qjt}>_vJ`ycU&5ZU5|Ac_11)Qn
z9`#By+(`N^Shy;IfuTXXR3T37jTd-2pyx=<-f3(<`uk%~*?+Ng2Q_hOCMepxyc7Ul
z?>aB=|ITCaS=yi+aS&W`fEuCKD&nIfR|<n&03#|gt%bn3JfRERqzU_ZV4C&XwRbc@
z;aQ<L58QJ%;MzKMc1J`8x7^Q*inqK44^4ijoCGP#=AC@rVX<Oug&L%E1P#zV4bFY)
z{=E!lEySijQ)D4~WerSYPpJ!j4E%Ut+G~Exz3_7e8C<S}O%p8C<N_5WKfhEfy$qW7
z_5Z#f4?IEb8E{zraQ*vS;(v7X%<EzAS|FV=1_p-cr)#!t3V@Vk5W5%{K17wNfLn71
zrj%&PyByhhsZqE5<%D3Ed_{_$P({kkrF;IbjkxyzcTmZPCE3|#plJW$x?S*N{nn|I
zZ=ITI01^OcNq9ZyYFJtpq-o5+AhA{XD_9DVM6_T@WC|ZViyc^fQye_ZaKPe9*gB<0
zlXpF6G#51dKiNa<+WkY}l0Kj+=fL?_-&yKct(CbFb`G*{3uIyR%Qf4Q<iXh;6mdT+
zm(O0g>jJnp*>k-QGU7R7LaK|5mduT!<y)s(gAN|uGfO$pI1w^?pV0DaYs>boW_G(W
zO?ewp&*??~BTujw9-M4<J*);?mmD~6(cRH}>y#5X!GJ8?u=QM)w((cgc$>XJxfCSH
zunaV^|Kt7KO^v$WS8gj>2s+8@f$5d7cPyZQK5%2r{A@`zp8mD_CY=ll`>^D8M??oG
zT{X=AP``ER%&p*VEy$n^SI_+_bwcZ8o29yc0!cFD?ACj_xZ{WK#RJno84Xk<gT)!{
zhehvv!Oq>yDQEF6$nNiB^IcPZKfHZBsY(58wstwB6jA@P*86ADUmnP;0s{lX4ZHNM
zqOY4FCP2xC-dlo@HD<ThfCl3ArtswK{M}&@Y6MllP_zAK)m`2X@}O$w$91VY|6V(p
zeORIonoj^J`M}+${Aj!0)7g4YkG?;j22Kc|Htt31)oagOfplF#>OeT>Rv#!3K$9A;
z9Tz+o+_*d?;WVg&<OLCCU}$*1IWFH=T-@fvGyeD8KYv|6;QamXE?>~4><k}#em&nH
zul(qLspk4!Q~FupS!{7>SoFsKux?etX$$eT&fPO15owTSeG5`-b?YiW3OIOR+V7ZX
z%WxwGh6Bgmbb}hG3<-0xv{!fR2$8q>u+jVHlK)y_6_*xmD^drix3~klJAPD8|KvLT
zlg|N=A3)eZ3lxx$l|>8;4BIB}T<UYP7kmms!k)5HNP%VcDrnyN_6DY$&985riUF16
z(xobOYOjL8!=X8ybvHhQy1da8`M0){X<kWWbR?)#%g`WRc4t4R=-JrSk(&F|4|EO*
z$Vvu-i1e*fp`HQ@fC5?Z=0!-z-CpMX(?sdts)&TscimeK`@y2&f%uiMJf$Q}XNG-;
zW58q8dls1sel%3d+chOT_7wXeuv<Y!9kg7%b_S@FgBcDwJnUSb7nplPE%ubV;Km>=
z1IEv{P9g4fd2szon3!Opt{cO?hm%WZgVg4nh;!M~-BDkn8DF9~AJ*t+U|@T=W}8tk
ztjqwZWMD9WZCFT%2Dg^8Y@Y}x%&uLzc8v)vHW|*R>3K2id$euaCIN68n7KekaIN>x
zW!{y`U}FXhH)d?U)ny7U4<H7EN{NKGE5KpXpj#v-*v`ee?M|+X#RpjbhGAY{?o%Zt
zyVD{K>Ji&PrRRYQdpbMr@0yaoYl?X6sozqtjNcIcdF8gG`=~)<kYNqEsVPCaM035;
zqllRYSk7c=mxJRF<c5ay?HwJ_8<{?^gJz5xK|%%r`JiFVJ0+U>yQc7qz=J{`H1VYf
z8$53Cv<x&CE(1-3F)&E1mjzwg$-rPx7JKS*N5yiF1SY%dVR|B<LIz|e!};~wio^wr
zFEVW?d;cD6q+61{lAYTTdq@OBdXS(9PXE4d+a@8{ogxedqOU;*j~w`){=RPAZ7ZQI
z{QKFT-<~Y#A<TGFup{(#)Cpn6i-I%y4g|3Hx++*TEfXuR=I%KVz`|y%U_67Ff7$+R
zYqx23)-&9B&iU~BqYTHZYnd2s1REa)C%p~lvoi0i{%jX)<osds?cpI%<IMVbujh;v
zQy+p9Shyt1ubW(BqQ~I*OfMc3PYL{U)qgIXRu=1RZ48@&VW`>sTjjs)w})PkWC->#
zXtpi>j1JhZ2llO6I#;cbQ^7#A*c+71t)H9&HO3iaHvIgyF^OT>>$EqAw}SUr-$>4%
z{3YtvrfFqq;Cuiw>xb6t{J!%w`5^m2d<cFsdnRZKfq~(M`_?UwRZgq8v$3c>Xy3@M
z4L@M~z-8&*1=CX$O%J5x%B`J08`RQlVE(A)xqhi`c4oR8*m0mhXW#8x^lUD~To{=k
ze|8Pn#sm9SE|pb}RI@aaGhj4Nme=D&L~D9=+H<#}2G3nGzc-kHr?}Xk`A&-Sj=p~B
z*)h2B_FpwmzP!;s6~6ZYY{vn+S&?9q8f;6ZJ~>iwfaQ+*#}lAdE?9a`5BFV0wda>_
zw6}t;N@1`_SU;&|#nQFenfsE#?gBa7ewSyF*|&#&kRdj(K5)RF)d80n2kcfZja9A8
zHc3!=mMnkm7+l|T^KXe$pUnNjFxki)+`kb1sCBYE>ejAl&)&n5IKzkibyB|zK*odW
ze3;=33<>kku7Mc8?}pu)$~=PvCA+@b9cE@QC41&<<nLD5uEsE<<$JPx*fNl{2}yCP
zKLfm@^WVd^jWIN={FV5o*%;hz2WkCtZzE(e%bUeBuYv>^Zm{1zZelONJ)`5dik<^J
zJnufx;Xm+jx9_G6;OmcszhxCKch=3_yZ1gQ(Smg@OZsef;Qn#Dm?+pz*@p8LqOF~~
zAmz`S?K2?*xHn3-ZaLeSJDrg!*hv0&K{{x;8rXn}%4GRzo^?j72OM`7l!2R{bzh-j
zRHg<hiNMO(-`SnKd7~YX<{17QivpK`H}Z{tgPpVCbXMka&uN~0Jgh!Pj&J0@4vK~w
zwOh9&8-wM2jvf6rF`0p{e>1pb{@}iT5+nyKg9khNi{MF@H}Y#ghLv_;yBXTk(gMM(
zvQXW(7AHd|DJwGy7tT+~%VA(>*jt#TrS|6B50C<%lQ-I})2kWyCPD3Zeoy7))-9>J
zZ++k;4d0RDD(T7c*Wj0JgETTQ@LfCu+M>_E@Mclet-?vElZ2TWg+JZB(Qe%g%E{FU
zsVX3a%hKK)E}bNOm|12@E7T5!e2_mvb>D6UwYorx7~X9Bo-Dry-XZ{tG01G0SqTn^
z8-d}Tem%@SC!QHyS$YsG1WL@y&rZHGo8y7Pou1kqCaNGkH4{Ip?7wnpT~_AtOE6^{
z+|BND{I7j;xb-4P2^=>#n{S5XsoiOxCDJBsZ(~$@Vs`Qn=t3m0q7Ao?*{zuzGmG<q
zLd6MiOJm=?%1NcVxq;r+*WmltWVcuHKgfA=c<Ms1CK%D6IU^EW<ut?wdGEeu*T!j}
z`gtRNIsANzhP&q95+^>HyprMDt=${>wS_@3c);A!>r*nw4n44cK&Dy0QaiaaA2#*~
z5@BFy(3}|w&e;vI8*9IOx}$L5$R7FM8%$t*b%r-nckX2PcJ1wr_EvBQ>%m1Ca3;Hc
z>0Amdw<NUZ++(tk{#^hcG=vzQ;FWd_lrb3+#IIa>Hrrjlm(k};?WER=un<ky-%}fr
zE9Yt^eIRbuY;Z|6@5pMEz0<a>S-N)`xcmkcLE>8~*&n=5me+%ALxdR5;B)Z|WJ&y<
zEm611J?$izW-R!5quu&2DA|D29Egij*=Z_!Ag<E>TVf`-AzKlYKj}}9_wF@IWxc@`
zf?5d1zo$F_h5QGQCOAG2a#jbNKMr_<D;Glr16TRub}`Z5C<H0{cKJs8ZWZxo%r~UJ
zdx|{+1$;yL=h{i7x@Z3{2PpvI4>5LXmeRjBfbQu9@u7IerkRk=QibN$Etf%+iyMR5
zGrN;_;0?VE_mA1d<jZ@rC44`7-0sdzaEUPQ>NC5}`YV^hwr(+ooG<{|o91NSQ~Tpw
zIXo9Y>^SKI35Yl+-M1zui+(RqJ#ghrY#(T(8mxdldES$Ia~Q1Og6c-_B*TNFb3nOv
zb=0km;4}wPR^c-Hea(NfZx2D+O+W%r-0<HNbcO-wobqk88$MZ`ocQAaORdcBf?UYx
z9RmY{1y8d4yGc4{I5%uI<G*trJa5Ke{m|y*u4!e7;35oUmfS(#N!OF*!;(PZ2NHnb
zKlPyN2SL8`gVet3TiDfJ*mbg3!;;T~13k4n?$|BjIq)vBr#9j?I6amf3!DTEAJAzw
zV6#3<z1Ld{N}%fS28I8N2*@(eZx_!%7IWB4kGl2j!B?Y`oi7f!=pM6M(+iG#kOAy3
z53OOa233^aU^5T+-MV9YF*`H-_HX!b<O9XL$$xU+9CiYom<7_rFz;X|WQYh}*;Me|
zX4jm~7tbtQX8i5pCAj$ve3x&uhfXSg#(G1u7`*V|z&UIGP3xBatcItx`lrd0F260`
z3pN@~{9!kSEPJTPf&`L!60>kwB4pqk6azWQ@?xHOXL&XV->ZHBHtgH6z)Aezl6foq
z*rOkFf2)9!P~Mxvb3vPg;N~+h)aOAfiSrMPPIg{6(6U$h_l8f9gayi+o-<}kJ~(<;
zEfO+7`t96omDN$R_P>Wk(uaCGRZHpL1uIc|fCmnrDFMg#1I??K)=iqz&Es?9?G5(+
z4`4x1rgZ74jZph}@*abJmfg39=fLAo8>aV7`V-+Def5%`FU&lH%=eS$^wviB+Jcq9
zoqk~YjFsRNaUdAfM6nc?n6cyM6}ZC>u*9nDG`Bg>{lns0q9(Xu^=9v675nR##FoJf
znla~W`L5JAhmYQ9xBd**3AUkT=1j=`UYpjaTcMMR3mZFsXTCXH^a@s<GbChf>(@Qc
z%m3lcyT8A|6%zaN<59O(O)JZa0vo}=(BS!F#*?kp|6pMS5#D#t2RypOAQ!FsR_o->
z4F`_gRo^+I3g#+?8LKw(U-!)W!@w}_YSNp-bHPXA7ZmtS`V-?FJp<Oue~^&-?)(45
zH;2pj38T9GhZ*P~El|$#*}7%5%JW4`PYyj@39+1k!JzW<+vYP2HhX7p<ev_nZ9m}n
zd*ifitCr541uGODEV!d$`L!2TLPNA3cs%1JI8qKILjqhx!8}=h9lTI#$dvxQ!S9h_
zTElb0>tK`A9;%!?zjaG1XbC9T48B9VH}a?7eh(f?28)1+3KnDVQagqU9<YOxnEqtx
z!Tq$s5M2LBF!;Zk%MPB`NGPgXvvh4%=6YXP7TYl0?Ed|KxxaN`%VxpmGBEUKsDT&p
zFx+1?t!(O(7>|Z{Q2GX+0}WR4!@Ss#Vcwaw?hu1F`Au4rl__2aOQj6esm06xgIeD3
zyad+9Aa~yfGOD)E6&#5j4EuNa7HNVLBuK@F_uKeQ_KUMV@H~?W5^V6a_WINxb*ohO
zZN)3t%n(D_o#iU^(!Vztz<aA8y$lB~&&&j;r~}tmEsa&R6c>09|14Sl9XKI?RoEqe
zj`+ORfT91@-y7{qmw?0^CT;h;wsng!!thJGH}Wq}mJb8Zi-43sa7C1HEjUH~kOGJH
zBgQ|ck8kAn25m3|t7tec`MY5H6DOGl_u}~}ir`%tAM*P^ZLy{B^3eKm@TC2{wI6KJ
z5{dClPH??@U^>L<d=KK^O^!JMwh(0cpP8V<ZP&%}K?CHaCE!$V_xLv`=X^snwZ*^Y
zy*UgDcW^=iX@uZ;=Y6ultbH!vaL-`aUugL)Q5Rf!f+RjLd{+7H#8@+V_D25eLg09;
zf24A9)ig74n3@MS@2dP<zmcCCUcufdem51|A4$+Zdj{O3Ip7Q~wz%0oNN?8*2gM-B
za0a=oH-}?|()$?p-FxQrVJCQG=m4{f>dy^3^%qYo(}4xXfyuXP{(n7uqkZ#6{%m;i
zw_wm#2D@lOe_9wgeLqk%<F`|@6z6`x|7;T21`rXS^yYBtB<YI``%WEt3~qiO5WjV2
z`o=X&_lm)))dweQe2RAc?SmBuAbp_0@-P37fPM1d{FO_6=KQv5mV#Ul`0e^?BOnWa
zLF#H+yH)JD*+012RVsjbv<yGIW>*`BZQb(oMte3SCo(WF$epbfN(VQpKzbm!?8F&}
z7yqb(>!Y{M{S1GuJ==7Z+ZR+>bXq|=M>VrI@~>8TpThD(sdy(yXG4C$lqd7IZt+H#
ze)PA>`r~#nr(v-IQpUir!8#3ee+&b|gW{~r<DSzz{aBcOtU0}rKO3|>tfAA&3_SW%
zvm4w$3}Ui5@p~h`Hn?zWaQ{%No4a!_c(*mkv<Cg}nx2xs3k<(K^n(n2f<!^M;jYnU
za40eC-(Gv9aOM*inTGSbWPfj%0FHc+k_wh$LB@ZVa)r{ti}xFje^CQ9YgTE2Bti98
z^Ii2y^KTDJ-W(2scU!@74R=j8gL5y#|8>*8S)F{QbWk{v;ost&@NVjX<QsMje<#mi
zs0USje&8<agNd@LKX*=h_8ZoJY-qnZXM07gxAj$sVPLaCy_xc}IpDN&;Q!4yr5#>H
zN?Zr(ON_rIYQhRbh7TQjlkRYHeTbBwdl#I)=G|zIx&^*v6>JKB(Yz<mK|>_p=E6&F
z2KJY|k)T|fu>b5EaM&Dh12rp+PEJ%{sL#?v7(U~e-5tx>EFU7j|Eq<VezH<GH`3c$
z4AxP8;CN5vXS!}~toLl|a*&x|Tfqc8eiuwDo0c;3NyaBbhJSZ<Z{*MJ1<Qj{(Q&hH
z53Nr2ZeZBIQQ~)jIyixR@VTcFdG(SXE7)nEx@|+ar=3dV^-E$~w<LoP35DrrV2Hcs
z13pBiA#?T8vy;E5xCiGmeh_~*IR>_)fq}th;m>btgcweqy}=HR;OF18PHvj^Z7yU$
zo`HcOKIQYfll`DFb#>IOY;f-g$%<n><se?e%T-IyPOkYN%uq3*dn12&5Zt@|sc#Nj
zom_f=VgIbtAe9VzCM;I@f9D?Lo+MBTntpT6UJL(E-nwsBP5TywmO`JKUIusE5@uy(
zcB{yr;s2m8|Cn8jC%h=K*}9Q`w(-3AEo^G<?%rtsdId5&ssGMd_iXtyu#F&3ytg^2
zzje#&s9Q7pU}6yZeDX5z*vEk{Ir0gAE`DL)FH;m{U|^VEcuQ*LH`rPLbx3c*KSfW+
zAaQ%LycoF1V>r-fv3_an^-F!c;PMQ#9`NctHRynV8^i)A*|6O7vN(vHU}eUyckR+T
zGk$|vvJVb|izHSCh6C?=Ya=?r#vBN~@sIb{-W>;A&hmoO+nX8NJ*UmCw&npRc#ti=
z_dp$(vynZ<n(&YY8O|{8m=AdOOGD-jyDd9>it>sY^otZh79Wt`GYyhX?<k#Idj`1&
zyrCIf-!DG~GwVkhc*tSXv@$htwFfpDL>zcL>m@iL7W~M{Tt8W7JHH;&hl2OV?ACxM
zj(#*>2N&N5E=z%{&a?!lcawE^z=idj4dJtYTW4i1cLRG8ly*hHwmkDWHWOTRgDimH
z{^VugXgrX3+iuMcucD-^2K}P>PrwUNz$zXr?Wx`2_vs?T0hcq!?e0i|)5wiNch6~C
zx9o(EEXbXmt+E$1#9FNjADyvI$>dqKYFb$ixbtu$-uO1y(=zL#Zr%L0;q%0qjQehY
zTAT0%wg<RptM4>tDtM50%q~V+5@h`i;n~$Tc2_PvV}nIVMM(Z+P=9;X(!JB*RnY_2
zxu?MK_d7cc+|+G2yrtG-W4?SC%Y)N*`f7JvfsguEWF~{UkUWes8-A-4GlPw-e&MY9
z_7G$dGy?-e|2uFJcGZ0w0cnzhTmr%k`o@>RW#fYnS1#$9^J~r$d$78)1MZ9)lF9OB
z>CX8&OfoBu-e}(nI#QdV!S-u^)UB!Dxfzfl^NxVCcq{C76Ob5a*_8QZaLRwMAxGZt
z&%HGa@!(!GIP5@54)pCb;3#OY>#f~k0$$d<;rY4k-)liqApGG6q$6|v(mqJy2ML1l
zgY{=k!0Et(XX}>7QMa-_7cBB*+;`Fmyb}qeB;k5b?TtCYwdoQM4xHfyyF#YpbJVS=
zpc5593K-^{S*`Ma4QK><xe++Tz@i}HPr5N^3oHY}xBK5d?M<B|T+CE6xj$Kc8n`9&
zXK6BI7~p4bZG_6ssd5$q?~mK9=>aEfnF$~}9Knf#fq`M(mD!-ql3sS^JJ5C+kl|4L
zqh}_h75IBCqzpeYh2j1iC(st~eHYXZ&d{iz45~#NrW;?EvtZcnDb@zgeS8-nwS*b0
ziGE=6FT0bwraik2+XewKzv2E&PH+Hi*uPEu?N=4|G?pJ}_Pw<cr#ToH4v6m(2B)2d
z=O*70cUrzzvD)zbS+e|}cyLB2SaDA!^4g_7U9cKZd9lRo{nnZlOLNa<&G7=aOF@==
zSaD||INYjp(!kA$hQA@+yYIwoNw;fo-#h_!7$(CFVR6rQy{vCmf<o{ZSO?!7&q=Ae
zXO$rf1sNC^{NMXdnxCD?{Tw{y4KlqVCEIc4hTz8_^#}gVx(O}>687ilU0%I3R{iI_
z5{CX~cW<!ELk`vj>8MV8b2xU=&aDl$CGYQpw|FEt`AyO>FK?BAtYTqcco6w#MoOr+
z^<=O=LA9j&CNZ!>8){89gJ&=g{9Cbf?>(Ek8Bf;U1U23!d4u<ofh=gKH3C<u7aMFh
zOZ+ZK2e(8LoczqnTd!Q|>jk?I6k0lQsxP;0$xcUW(5##l2_9NVu)lKY+@v+z`sJBE
zROlVIy8|f_K{mWuSUIWsFk|(jv^R&Bf>%d3aNfEjx@pZ)S!sEY0?<~Hn|pjWty@~F
z4)1AzB@9fByFp>a@Md4sEgMh&q7=Ob_tN=Kf<W8$8}!4yt*3!wF7Dcm_N~SN2jpf-
zgLD0i4U<*8pKpLC*sIUxPOraqY2Do0U}NFLvXnG%o@lrm=DpkN(?K5w|0Gb85Y$U=
zSYM<C4$(b(Kn=?IK8$a6lqbtygA~<j?^I4ch1RPK3=Df3AU&*)Fe|}Uzz1*>%&%VR
z%g$V_@?4FnLTG!kyp00r*1_#jnvh;I-wbKS8;P@xXLB=y4fykF&$KdCSbctAv$fZy
z?9A!2%@d!%+Bgh9yq61s)FP76_bZpo*iEi``ki6^kRo;obR{MSWQPaCgQdN-5vrB>
z90~4!`K!yzMcg-S<*r~oXgg;D;|AS^#|;Xf&Ge&=GyRHC=wp4g(V>U+OT>nUi}F@S
zy*;47y)4z?xSQOZ6E~0klgK^WZ{iSMYVYsD%JaGX+HF<QxihnUS;3L?L0a5$>P~QF
z2l9T-k=q>+Up7MqsXzihYTL8G3LkG(hm`$^Cs+C?KYHF_A;5cJ^Uo_~y$iwV1ElzX
z+03hZ1BF=Go*mzoEe2j^&hSHD+)_0C9?07uC1#J8oNGI|GG-OLeN_L*4?NAvAhFnX
zC0H4cyZxRIQ7R1Q^OnJm>|!`zmbv?xof1zHTicV(w%~aYhWZyu%adwhp_@>A?|DdG
zkybmrkMkh=mmFk_*ubh<3G9m-dv3kaTV532F5bob;AU;s?zDAhK+dYay%Aib9@wxY
zwpdtjdlDmC(yB`EMA(7(Rr7;qYJn$wK+U{kK1z@DmKSM(3pJ2lFiwbm;|b2c37dbZ
zm9Orw5M({jJwp@JBs(zKA`IMyl30@IQX|H@AyNL;x}Abx{RiTU<_6Ey0yWe?#vC{%
z<9g)$H+Wsi@aNb<@K%!p6>m?1vvopok=FFBCu3b?Iv5|g)_^>41*8*%4{XZ<g;5$4
zo7szE7YP<{o&6zqU6I!EEKm^+QnMlOy5-bLzo!APB9(!ma1ppbH;Aj=1P-H$%B?eF
zbF;(+-%pi);Cgn7Gy_9}`nCYb%G$PNZ)dIU_@N+?;GC9weGTYPGzNwTvt_Orb6HLe
z1}|a+S#x7Wcb)w4jgZbINC1QzHr|>H?o%8%{i<D1@7J<2hCOrqbFZJd3eK}2B{u}8
zH?f&LNWN_v&INIPET7UNwdF-C;8nGBsgPj#-yU!S2BhW3j?a+bODOr~0`}&Iq9U!!
z9T8v7zG0|{H2w+_s|ad81+EqkUoATu>+(lI=|QWnDA+L%@-0{G^(@l*mJRkjXb<}}
zN0&c$&d&lTMo<@R``!1@lUgL^+s*_F@9CLyD%2(ByD!L&`M1{1Tn#D(4@|ZS^#eId
zV%xUtw9@}mW;BR@O1^Dc-UTl5K5U=sa%3uG{{d*3#-URCVvy@VIv_Z~<eLk)2>Gz5
zNb9)e)ZHBwtFJIf8wW#H#ef{+?#s%*r@{YQHaG#<tn8k1YASd)Kga~0L$~LgvRPiF
z0ZuF+k%Z|_Le8;*xsSJ~gHv?F^U1-L!h+?3g^SKGNPk}WcGgbN2=ND>ccS3NR)b>p
z?leI`drr=Zw9DJF*FcU}wOPB}a_Y)iU|YeCcXiPz(rSmCqyVxBjN9`3K`jRchV#nH
zi$n$g_jE9;vfWrQ6Kp}ut#vztA>;UN4~&%TxVb9Sw&z~g5dpR986HH&JP+}k3U&g>
zqXK?PNs0Eb><u=Z!JwoXoKG1lqAaIAo^vYJWlv~SL+|e^WoKi+Df;}Q2uQbA=GMBM
z{T(ZJG^BsH`5s&eGn~&0{5?|xlqEri9Z;C_<+ml`%;*iqVvE3$k&yFE1<d$R0!l|a
zUQ1tM+)!x@PH;A}m6w9zr{QD9?q_OBb{#wwNt?H2zXRV{!SEnb*5!z=-_rm{8ew2y
zU|aa^dBl?tge?p?JCnhuLmaSpdm5Z59=w0u&JpK&q_v2N=h*UX+0PIm`lCP7<<8gU
z>5Tu@@#kKTS*gUp;QuDs<&L)2f%mJP-}0Zro}fPW%U<7Qk6@uB(NYyxJ~4Qwi8wfw
zg8X?S>G&bAlM8Q62j{Z`_a_Hi_IB({+{Dnl7<_@Z{?lUnIgp5DTl;oasNYj9rF))S
z6->ddEDR4MV?cM)MKtVRZqHo*!}|Zk&+BX6p059Q;b&!o<E|4c?`(}NRs}aGK<yaE
z6?-+-7i)c$S^pDUPlB8P#s?DKbc5}9@cU_qp7Nu;LQFj8o_84B0Nva@y+~XzebrgL
zQ!8b*#TM&>GrL6pw(K;^spf)(N@fr8e=K}EYbq1yU@L>IvBlrn@85V7z5nH|cmpLr
z`P!E|_OH_aKd*Kx!}-^>eoxoEot6LZFF1FDoRnTXH+bdm@6WuzDFo~o5W#bBA7q?%
zU#$I+ug4m~8V>Ht+WjmJ+=M*;&O}M<6j;Mz<KB+>N7-tYgNiB<P^nbrUZ3`P_BZZt
z>7V?6@3(ok{>A>X8}aIKZVdOIsx2?NRd&|vC&&g6W_xV4Jm~wKv)~hWKmr>|v-p>l
zC#AZ}a)ATwSY~`4NSxum+VW3oN?Fc3nU^w4EIBV&s0wZeg5(<3XYYQdxBOGG%brlB
z2i88Kpp^5&IQROU@6LPwh4?+)^FQ71x1-1LzoGW_fjJHTgR1A<`LaJB9NwU%)iT#D
zr|xRc(}UGw3<=&ZioxZb@>YHD6jH-}wdFzVE6yoBT04o6=a#R%1vs&QZNDG>{ph~V
z4rNoOeFytN`4to{6<+=K@_)Sg&G$F*zm>wvhmSulK3zTMz&fjwE6?0sH?s<q=0Lg`
zcutl2Eq&KJyBjV77QQj17BWctqu6q)mBv=He(ONJhJ&*^IY8r{+qyc8UDM%VwDRq&
z-*Zl-y8H=lIS~KlrX6T_GC}y&@0o%dU;Mvr9$&{@Yu~VI`Nuu~D{jTJGcj+w<LZ}s
zvFvONXaN)0y5^#}!JNP06XjsB2H%_EpzD<w8tkV9&vZRvoysK9I{((XNYH(J4dTzz
z1Iun^y4<M%JN$sf*4X07!8?09IyoBmC)_GKyBFNTalTx3Huk@+?!G_QinN{!7T$^f
z`uT8&g`m;~*L6i&<^6T~;OZ4rqDibP)>^$S`(JiGJZu*y=V|VK69BsZhrz(_cM&*F
ze(aj#C0k_G-(jrEB+)x_1=z75V&BOv`D>~d<Q$OyaiQ#NFZdLL<jZAeA7$S!@_TBd
z)c5=K!_Uf$%*rJfzPnqBg3}kM&GO*RmA_fJ*Y9+K%QcWw_S{+*`7}i3#5${q;Pl>e
zdEXt74GjOH{hk^rrTtZKU^w>B+4hd2Hdq*xkM^$v#e&ye^WSkd8}5I!R9XgJrIs^!
zTeevIzoH_ocF-wEpdhHvGY~dlQ@5PDdRw+0xWEJ%VxUp_?yS=CqI+d$=Ym&4g9O32
zVfv=^kX=0g7t2Rg2@9s5VluEYp2*0+utD)V*Lgl`F>rsnC;ql+xaCyyZx@*MCtoW&
z>s1JHSMK#P-@D>_UabFrV&xq7BQF=fKGMx7v0%I9RM*?4=J5T25>uLY>FX{py7N95
z9LivuK}1DaHKb_xkPj+uHg<Iwt1?Q=1*P;OYzzzs+U{uDSigw?kKAuC)pO;nalN~^
zaw%vL$pO99=@GB1RdTQU++Jtd+wosiP*bU{qvLkRk2kDLJV$JnC-sBtTu>~0ka0Pp
zw7f_I9{CA5U$%nE=>|yA%wMGSe1CAy{olXjclLMeUjOIs?`_%pzLhdC+?cVC@s5p>
zS`dT8TJ4LB2hx0}y<WdoUFQ4s?-5_G=ik{^w^abzVLfnp_49p2TJ|nSte>*V%>=Jd
zK9IjPHn=)R_t)$2zaN%W?R&Q6f5oDl18g#1Y(w@fuZPdFpI`k>d-uleu+T}^V&`&X
z=8qeJ$Kz*Pg33Jxp4<Cs7#OyN`#oLQ=qfv-<VO9!9V?G!+Mjsh`ZPrD|9d<4BeDN~
z{#|@NoWJ`*?sc8GU)3xO3FS{h?tMA@H}20(i3W9WbEAmqz~xyw*Xy^P+c5F)l*vzj
zoz}0d`114ctV8wJWb)$oZ#oBx7f=^gd~2-nX;6p5<7`96kBx6<S%Xd)V)#*<dwtEX
zd#w9Ut(5teUU=^JXG^x(jQUS?mK&{pZKnlp?tscYi_-k#d*03hZ+(Rt2}&`~x2)gA
z!0>o#@XF?XzTXes`|aoTybv$_aP+~llhgk@_&t4ixnHnQUa-91ep~G3ijD8Z7#h}I
z<QJJ+|5j3@;o{709)^8)Q+C!xg#Reoo9OeJ=i^bU!#Ahb7jKHOule=V>hSv4+}qd3
zN2W6{{HXT33J$w%ezL3Xbc&YUTi!9_Z54Rld0+T#)31L{`PTnk^<MhhGW+w!+l*}v
z?AUX9CFqt{NMjA;+=DxzwJf|s0Q=>^&Nr)d7!GWB8p5aiXv_XS`C6M>2VcmsS<SWm
zm*l7VEAjT~jvdusKCY7&Vr5|1KQVZvv-5Mo!UaYQi@#ecnY?Fdus4WYcmDU*)~dPD
z=|9d}9p3$;y!KJ{Yo6`v<8{rx&1EvM%Dt}hYisrm*L&IQAeZP~-v9n@u<Qn%=o^{A
z=_a7WJ1?yEzo}B4?dD70#jW43H@B|3$6gWld0#nf%P7O)&vwf<W$k|E1|Nqwz%j@E
z%LQ=lbSybOjDg|s#9+&J?45JIb#FM{CiXYg{cq{FAMqzv*7SAku5+vowa?%EEbqpC
z5e9~N-v7_kiV6z5vfYsSye<3PQBDTI$xnZMv^sn^b?(FUKi8MGoh*vAuX%M{@?Y`Y
zeRW%<zUhO@Zw7`3o-uAmW_MTw_}%c_o_jq5yjb}|&#%uL&Ht9({O)Y={{C#+@Bef@
zu=o{eh38(6(Na6Gpf+Rovl#HMW(I~0lb=~mE#52&@-{==)GzkT3=D1wA1l}(9^<*Y
zuZ4lZOnG^cgy8bO3X4AfD`xJTch7PE%*Xc9Rz+H054U&hcx_&NXKU={Tl3<L7#QLw
z2d`xQoi=Yb<F<2CJs5AeLVe<H|K4Wr;(xPj{!CXt{q=eK*Vgv_?d#+3=3iVd$?#zI
z(~!Qm;FTo}Z!eXdt@TTl68tZs`)1BA^CT_Mp&$*@uf9Jz=X?0w`H|<j_r5&OJGX=R
zhhKiNmN^@Iu@z6yTTR>bzmLAU83&)l1E(qm|IBz(Mus>yzo$FoO}-S!YW{Vb`}O+m
zALVwX8Q&M}f5%hA$Z$jM@8%zS>i;n(?7s7jc|K#pYu{<F+e_On|9jkd#eA6=-~2Dv
zcmF82lb63H@#^^P>+5Y6GrU=L{_lL@4c)IkuSy3OIX8@QuitqRVt1pR+d4gM2B>a6
z@a${thPt<{SHJsKT%NBztAqWA+vho_R(`JohdHQ4{c_3t)t}wKl@`do2O4C#K}nP0
zSbBUK1H<{n@){-oURVXaa<qQIZvWTnkLL0q`<fT*F1o)G0~r{4eEd?y1gHP~EXQ#B
zxz{p=oYg0ba_1(-`2BhvKKbdd%ZH_$_vXd#k9u3x$WV49)@2SSxU_E2HGX@adAq!L
z+2QtW*>BE+s&t7N+p@#{?!2{n&Z$I~JulZ6zrW8^?`S*!$AxBSf@5fSIP;36b?)^u
zDX=otAmjU^#CBP3@E{t*$^MJwrAq!~WL%hdsqbE7{od0nuf(5j?}%_Y;(Ob)e0Q7-
zLxbY!m2=#V*eLn2ux{9Dw>5UNfIh?Rlua@AYYgZ7u1x##%IczP{nZ@%Z`nNEx390y
zE8A<qa3IV|1YCFLEZ>$LR=T3dWskVwo0gT}g+Fa;-_H8IZ@$ystol~-+V`8QWIOnO
z$bwSHxfd{}@`TNuzGK6F7&qa<JMgw>h66L+cylv=TJe6$kM_v(lq{PP{eI2<Ea3^~
z1p{X{+_}<UdgK2(adw6T4p5W8aCP%f7N!kf)0Ef}-l(1aTDbpMz;!7#rn_0{f4`P(
zin$*D{Ow_@!*5@QUz1>H$St__9y0H-EdX5CXYPN;nX_Jg&Qx%a&)=4vC-<%JS;)OF
z&!@gBRq%Vj{rQ&t#<#PoTVV-AV#(||r#AkDjkGcxV36ek#|I>|@2f2@`j^3QVdAH^
zYpnicUW)%(`q5BHY^$ZmZPV^peLjW*YF`dpt+!du{HEnR|KVAT2{~$~zh=7lC@)%P
zK8K?q-FA)Pp7}c0`LlUG-@d;7UD;j(2IcKt9mbGN@EexCiu!*3Q0v;SE8otVSpjm?
zv9)h!RsH*>w!G-aitt-5YaG^pOWE1O@tz$PvOJd^?b{#5*nyHW2p>2w<0QDsP~M_%
z!q8wpJ-G67#*OohlRk>7|NUyV{L{{SflVvqZ?D@KZomNQ%v<(#Xg6CjmYuqD{x(C;
z$&{UTy&akR&lRZH?E5g^wC!Zk-<9#nJ9gIo%~}}1uz0f&xGT$Wd)3=nyXTzhFU<`;
zv0>^m@Zp&^<o;UTsoYzn)&BRleK7N~hK`Eq!7KlMd?x~PY{G<dMOvG;Wv7An`GK4(
zA!7?38Dx-{T3g7-P!sF-)Yru(hW*qL^A+o-cmLaUZsi@fBffio9Sme(u$g#kimsBL
z?PlgTbF?Qi8<b3b`pZOV*<Y)}6A%38ewF<+cdy#%ug^PXTz~!Tt9E-hW5Yu0>EI0`
zZ(3%S7ToXxRmcLMMSBOzUj2@{x_M`~<<!Uf+?&5wC2qf3oV|Q^94MiH+||HXJv}(m
z;y1W-05t}5w$AtWbJcpYX3nX^``5uUF%q4%j*JX{`saAbUNd~Vo_XoRPM=?|t(Je<
zD9=-Tx$LZ0BO}8;f4`@D<PTLYYGJT`e(n4f2A->+sz1F#SkS%cQU0pz(EQh?k?ZWQ
zZf)Iltl;;rt8-z;LCn5jesAsTM{^kxvTOP}W?Fz!Lz#2E+xJazmQ&6DMy}}mk@$Sh
zlMubz>vjr(*R(M(FdRrY`#R@r)xL0OrNh8*z~PGJKW^}t?173mr@0tzlv+-GT<77x
zx36rkoXzgZ9ToBG=bSoz%Rxmc4;;#WIzeU96~=1uEY=O1d7@Yo0@O}_eYm)^P59*p
zpI1`XZdZZI>#wap-@Xo)n!?QEZJYAf53;l>XY;mfG0Um9cctiM+~5jk1}~^C3%+e?
zzV-i9yPOT1(=0`8A;YQ+3=D0rSIj?aFcsXK0Xcp_O<xD|L{RWE7_e0bF)@^d`lZea
zj&wPqFZl6Xf}Gg{6{UOEuP4X~UEZ(8&&tT~q11Bf>5di6U-hPNB&35zWEJZe+7dR!
z?4PM~-CXeF`hR=x2_O96BzH~xUub;u*R3l)FdSf*!wCvYhO$#z@(*zL+-~2NotFX{
zZrE`9*1E{8vBufEpIIpV^LM%PuF5yT{fc9E_#s%=M`BC&oUVVMeO+Kz9xhVnFT1hu
z1IWCDm~T&68Qx5q<0X5b_$Gg%y?`CF(aZI(=Xl8qlwK}78{@#hu;1?Z{O`_R{iZM{
zJeS<Wb->Mc+Uv)4y$j>qFC{S4#m3LjxjtWM(K_uj`SJUsIH8tS_~l-|^E@O?@MGM<
z#4UE;s}n$WKd`^GZs*Fs>%U|-&ox|G8+&VAWCv`}B4NX`QvYz<``X~uBp}rZhyAkW
zYk?b82P)p2<YKtNYB@F2Zz<pXAF4|Cq;?!W;H&h=YI)K8;FZ0u=UCYo-YlAPDzR3s
zt3yx8Zx08<3SJ9QM!{8U-@?`cH2BWYxt_0f`m68$b074S`dAJgkomg)Z2YV2t^3kg
zSvClkpE{?v`u%Ij0^S4fGIl@HQnKriamxnvyud>=HNLg)SG=8d8gy#>e`&$_B3#?1
z8UF#f7K9I%CG^8GABfMu@WJ+5C@;f}Fw3cjJ6154EfXwM$#7d?Cc1M)xZl&@`w1y|
zA1oL)a2IK9{#W_W;Q_;!I?#ZOAwz}c<fp$j#3%3Aa_+zhpI4@l>t5eF6dD`7qxSEq
zVvz&fE9|#F3z;%2woFQp8+1Jr1H%o?(%8S^6A!<r$=UtP3p@$_XXd}0_v`nrFVf2Y
zwK*)Ei#_`3if@&fyVKOb=T3r}w+Clkv5m>Sey0PJmOxHUcr5no!-m6st>E(b@g{YB
zhJ@QsLi~!gN*A2luk<KZc8_ApwgZ9xtNy7j-*jT7Pq9{e6Dz|uU%#g|%QwB6U(3hB
zb3i$~i}8T>44v!8CqLcwZ)b45S!Mp*MnUUW@rPHREV5m{J~t8E6lP%XU-@>{u5JIC
z7ae-x;|fYU2exPJezxrGtj`@Df`zLaHiYUGYn_`9N~<8(@!Y=i1~S?T>e3(n0-io;
zn0QlIf?<Phk=Ap|sje=6WCX>VQoHB69w~KMQ>3-^;fa+S7#lXOZvOP^`A<-+a~%-3
z+ZJ2AT!X=8`N^VMyU2CV1wVSb?CI@bW=;2&`I4Q!|H}1>+O^zb4<c)W;>u<;YJ%+E
z(0ps%%*uKhx2NvaMj!|Mu)eh}a!c%IHKl)og7%tfIjvP}Z@s2~)Pitx8hTpr{WgW0
zL1OouQzpwdffDICmQ#Ey&${U;J$gRpRBXMz3~0<fIcR=-k=EA6Tl({!GyY(nmCN)2
zR3HCL*%|lcHIKN~*=eiSe_Xfk+3W218w}@@maciTAsBRLEyICxv%2Km9tOLd0S~Aj
z2+r7@cD2m6w*H5_;K#{}4!!U#(mFQ><ZzJdcy71a!bVFNq|4Qr%4Y0@9OhzF&BV-b
zOl!H(*_CUQ9$6{%v7GF)e)+z&{%OcFsR;}W$rFNi_H_L6`5%_R@Tc*-VBum12Ai!X
zi)`oWT>qLrNl)pV$PC%w_|LI>*<bBd0OuM8h6nF6z$5HhN<8<ryq#4IUJCGG3b^bF
zKEM2rvQk}8jKo%L_|zoNJy;)vfkArddE?!093VqRdextp7>=ndFPag&^9;;|9RHsx
zDeanbD%LMG>b<lo6GNNI@=wd^m(}M#R%EC@=zH6gFN@(rirVR~C7WWR(;Mnne?L&V
zSN+xAg=!4`NlSa+Vdyv8^~m#BeI}k8xwlQZ89|}-AqK^j84^n;-`ed5-@?^gHYIo_
zXb2A!s!;sHxLS*ap~unh>4yAe8@f8aZ{6AS;DP^Kmm{Tn^NX}V?fXfL46~;MTb^I3
zqx5M0yqAnW*uuM54+PK9xqkU%(cV}0&A%FR{t4TwzV5Yc(0kFXj6b5oP95j776G@J
z-mKe}{Z9E%l`_xe^zYzxKKe`F&I-M4`t|RMdY2>qT>OiRL#yo}b1<NsazU?H>$nm$
z&oSKSuue^%{xswqxJ$*5VDl}7m4PSLFZGuGvHjg0%#8=lSARe2>hfn!aO9WoA`Az*
zSNdKo()!%-Lg|suQ^p@`^0(I&dN4QaPu&#buYUTgmeM-qM;@jR`L9+#*>%tO>%BlN
zNI*P@22U=^i}13gUn@Ji7kpYwg=g;dHMiESd>%aMdtYKm*8N@HpkXht4xXsHj|){{
zH9*7k<@X_z7s;E{br}*?6lq<aa|&Wxzz3CcuWY9V?>xWqOp(^{Q(O!-(?O;GvyP5<
zrAJN+8GrB<yD~qh_MP_n^U0#x^tp`ty!WQBdu<!?UR9Olhnn`&r1rU-;7&<LN2W_n
z7>7g;f9`dO63|G>fn!@@H)rf#HqYNv@S~@Y0oU}c`91JKNw(Zc!56LJGkq1A$05Tn
zk2k7oGbChWZEk@%(&2*+pVFgPmp_w&cV1k=!cgH=dLkCo9b5fxCNsmn>oHFmeuPba
z`m1JBjK0#M?hawrmi<fbImhl@{%Y^iDGc=|y=H=g<wk1m^()^`rN^-tNCboTyBV<L
zUe~#`Ze{b@fAKCgVq82?Z-dJb0e8^&JSgdcG$$C_t+Iv<<{8LUZ(?F-Q(9gGYN5D@
z3%WNoiW{%|9_yDnHF)N;5WcB$3_s$&Rw^mIQ+gC@|ACKT-*x}o>vvYmG1Om8*=aXV
z=lbWmxet9FKJdI+y=wLMh`raRh%x-IwG=%MZe2QTi7j4gsn2tWKll0?&?(;x2PS-Z
zuXx>dxjh#f+uK9`U=zI!2dz)7i~*gz4{{^JgQIt~LDPv049OeRRT&a4zxvQU=ah|7
zU0;WBBY2J&T$YEkU1ngouLLfdem(D0KFa)n^Ngrq!~UdAG4g)XUPrq832M*Nma<u0
z)&Do>{m!cQnx+TB?`m>epNj)G=N}vlQB7EEw=LEfe0Ugx^Odr*wYN>D3x4eH_@SU8
zq4VAttPV8YcVB1uqHxfVC)kA_g3g742cwQ9`-d?cSav0i!*Z(Ck4Jh+dMu31g#v>4
z%8#bcIpynj)Qy4RLHX76);Xt?!1-b+LxmD(h+RXCp+0R>jK6Y{sNj1M?zoV>&%^%O
zavV?wg)gMl@aNaON?Y?Ei-Qgvi_ro%kDafVon7^I)~&~{{$Kfgl&SgP&I|3J6bf=v
z!Uw)Nny|KiMIpB;*pLLCZ%bGha-2YYk}HbO-~T$salpV=Y0>GGYl^gjB^ep`Uoq^S
z<8{~Iw(F6ZhZsH_dB(+cKz^pq_2-kH?pkLIDjj=Qe!o|`SNyfDCL6<o=iv3v3>7(I
zg7ZUI;_me4UeA~SnvFS-0nXgZzwXstdGNs*$RS*yUPs0IBCX?y%~Ej<d%>Hc4V0=6
zF)_pi<<?CIUfDeLzoejh7yshG_t#&~IaTYIx@;mR!<%(;PF4Q*x$k;p=5!{8^C{~#
zFw~q)*=aXN=lbV=>63(An;chsPYQp3wyM92<w3YS^nf%a$joQZf$m>2g2v!rNXU6r
zeJb~QjN6g_eI5NwEe9=D|4lmr%M%6_=fq%z;hs6wThrQQAw>Zsa=lNilzA4C^|(3y
z)dFtU_KQ{>9pzu+&aFICthIa*OT*m>!ItM%-f?kxK2xqC{TpbSPKo)$(vwB8?02r)
zE9;4{v#q>0d-cCKR)(_akQK%U^0&lp?&ydPZ4@`o-R)KkZl1ZVemiUTw(M8)uE;Op
zXf_lE_t`;RiU+Y*emcPeutKmLGA(yN;*B>aLq(qD)XyC=+>cC5Ivlq1h4ieN72hjv
zn-+g$I`Hk~?CEEJ+5cvIp!(ydP{aKhI@g!~ozJhX#oSyjAoyPW^j8z5W!u-sTjp@T
zSyg><^I<+nE3d{i);Z>DcGrQ=J9BqGa|3U#xWSft{Y;V8=YKgjX9grLK9}Wxa$B|-
zWMlM=O8KwX86WV=%noMXP#7-w(G4^`21=3)2Z}HCgPL&+;8D&4#V1$Fd}~fs>*9%i
zyGB0F`1S1BXKt^%I7NWLO>cRSw8u63`}!%I2e^O92%2;8IhaPS<NrP1`<@m@&pA(*
zKQ@u;>Q`j5gT|H38OqMi-7EBFgEP3T!w|nJz4zB<_xGag^L+0%SFQxFegw_Sgb5bT
z3*Pxf&NwF~_O&JCw9f<QcIWI)+xXg*;lax%A$9q(pH8p8{x58K|G!=5E?Wq(9;lyr
z<$km+d>X)J_f#QpF<`*<JBW#4o--&fol$<|(3qGm^VNAtn&s50|M6d$moYR5o?I#O
z-T9^76Sf0vpdsw_9~gY5z5ZM`*Ku>D#P)JQ!?`-wFW<ht-o%Z);ckHv_$<^1*|*m1
ze05%So~D3J_sq}W7E;dYf40wD>z|#e3%${^dCsZI+otC_p~=<%8UHnf{h7I&)}`D1
zI^BMrU-{9N|9`I7*e0}}k^375Yq=jVUh#K9v6k0qJ?p>M{(`R)IFR;cwKc<sDMebx
z1q($5g<D(ahR(L!yEfeK>9&9K5*F|>@WkKWQYa-T{)j1|IZs4BVY~0N*N68te!3mI
zo;7FU;*J+;r@!`p{kO07@2j{S2lyg5CBf0WZ`Hf-f3BGiPS%1t8{qW^H_~#i-?_Rl
z!g6ZWzc+I?Br3o9TfXiKST)0e3pIxFuglX@zZ!pg6<YmZ-naO=2zFaxoeiqzUdbqJ
zW`_Edp&`9w1^C1n1HRuyObqk9{Fd@*taqNmFCzNF_tn(kpAq%-8N1Wg8T_BWcei!k
z;~Ur5_Sj8(cQTl(!A5X`HRHs)+iMx$ad@~Z%;RuzSFmC_BsgQwjN6hNoDy9J0vI$V
z3(i@8tNMxZ?MY|tConv#T(#`P+uYr6$`9HyEUVUKh|t}t8EN0(ci5F7?$+{c+3P|W
z6Lz>=cKuruwBPy8SEGjBFJ?-8?w60g{5t!()Dq^|dFu}G%xna&COxoyORVwvl{NB$
z?^{^>Uxmy8d7a1gw&`=rshyiMJ}B|M6$cm43=G#IZ6AMgUB6@h7nk!Z-?$ucbgB8b
z^LqTVN`}|V&M8?1K_|8t8kYV_sF!5kw)_XktPOH;D}@<8MAQaPv(iXY@p&NqP5F`0
z@}hg|#l>^4-{Ih9i1U-RxNfep`KD+?=*Q`42N-w`XY9K1(tiG)(4rd^y9F=yF6)+m
zRsa2Zeq1%I2grQ6>};jq(=GLN95(m9=UzYa1eBf*OxO}@d~&7Ci+XnbMf2Egg}{{&
z1H*>SUo)d7|BHXiUwip?WG(yOt>2Hnza7VOfXix4^_n^Mu-b@WT8jS$Bu7hthHo5t
z)U*%8zHvLUyTju2$}4Jq&vUPzQDtX1zr3EmK5X{HPT2-g<1m4ShmyYH?tg6)!ha?P
z+;cnfF=Lm-zPis*i%Sw7gI%Se<6QRPXal(2+pylUx5LlqL&kiiM^51F*F1r@P0hd7
zc=;{;cA?_EE5rF`2Fr^sl=T*ahm#l>4lMXmEvi=kZsXM8n=h;LuiEXd{`>xSoa_NE
zi`VDBz-omJGUi382g)F;y{;XeX2r<BA2@r}laOPAAA?<TxCM7C-<3DV<%quJR8POB
z9t{i|Vl1a#o^xtXJ%7DM9z)m}cjo}cwse!&Iqojvg1b-gH;4Sc{eNdXH$%hOMUbs{
zAGY6Gx6=7R{RAPKTbZ{_XC;7&9D|J9>oG1z_A5QQd|`7#dWjmireI)b_`l+L^{bgX
zw`HHZy>8|6TE1KBe%1?4RC-je^yv7l_Sl#M+!iNSzTt#*=@K&27Ns8eCJJugUOTK^
z%Ea(adwG$7V7TB$ZJP(2GHx!@gI6*y%UZl_V*ulW%qJmbN{_b4>pcH!&9M4Rx?=;Q
zq_24O-(oiQ2@S9AX6&-)>v;UyeEoAFMza&@_fH!ouy=t62<{xL+<(0?I^u)E_1x<|
zF5m<%n0x)quYVO^&wTPw*-)ZxIrWzDxk_k5sv-Zy`G0@v{w<#`AN1W^=Iiyw&!q>9
zf7HwaFNgxAm<OI$_fE{ce#Zm6#x3mjv|kJi-viqNU5=a=+^B8wpz~_!Q={cY!PjTa
zIW@0=@j>FN+Aa0(<JeE`{r*q3!L(qh2g6~5S$bK<Pa<93Xj^`0-KBQsmnl<1@R`s_
zjJE^9rR{_HUwFN3m0Q|(e!UO&#-G5y_jbOW^|<3loXH2Bb4Q`|SwZ>Vdu^V#O`qpp
zm)RN{{JZq8w$eX!rFFlJof-V!9<gx%IT$pIvUFz0v_@+Q$eOhceA_}e8FqBfIpycK
z)Q+QG-5}xQw%=QyO`mhhVtEoX6T_XrT&=M8^S|2Ny6?X|mHmL!j~iuYV-_-)-Oku`
zL(*6L>*rHT&ubkpzq0k=rgfsFX9a{dFy@I&WHbifu*$Gw^0w@CN{^biJh*r6*1C^2
z;FkBkMW8X0ALTB0PO(pWwdC6h5krXM4jhJz4la5->+!biSH?H$U61^CIkI&x{{dku
zQOF1=L?r_Q&*f>mm>K@7EH4rf{M=z7BKF~oA9!#=W%(jcE`}QC+VgSmrwe}cuK&-{
zP+GJwieYxHNvw>^kt5GVAN0M7GJJWRuc6c|*p@9P9Nd#{sJ1X&Bm3^D^KH{)a3}A;
z_N}qSqJmrN@2MLe44T^sjrIpGw}6K*A&x9lQgS`=UGQVznFGpmo`#gMfQlrL8$UdG
zrj+`iuMLvQ*EH*fGBNz~^LuKew5#KWn8=4FK2V8hbbe*VG$w|<b53RMwg2}1CjV2W
z1G9DoSu~tAou%ieoFpXp`xMU|=U8L4zfw#LYZlHqHE$QV0xG{)=6jdFR!?V#@p<qd
z@B_YE>t?!w%I7KKI%j8QfK@RtOk4hT79>?%u@(3)DtI3>)O4pyc1L?|I;39#+J6vt
zKN&J56LxFbC-BVY&66u*T#r~YGHR!oE8TNHVzb=n+{!nad<@RP@9Qn6ex7s6*CpoL
zcXx(}@awtP@2rqJkS66T{`g<<>1{&H`~lbdPS@!&Mz|Y?CO@z_56)`u*1Vn7-SI=i
z@Q3^T>?%;JoS{7Yyy5oPVgW(>F5YQL*2{~uqCi2%z|ipY^>@df+v_azcBiQ;{k!|V
z^M^{^1HN-DutIx-$o8bv1AUM(FYNv_DMp6+X~8QG$D|1w3h`}Nv`zVuic;Oll|DsU
z$GKP!EL;8la<SIqs{h>`<$wPQFkHJkm5V87-o=uQ=CkzD{+3rT^p^%*pR#M4hfsvE
zIoGiRJIg^O9K-igEyEwt^0(Jnih~Ey@5J9W{c8Q<y(_!-!`+a*u?!937s}3t-W9%B
z=KJ>N*YzDg6qW2&vVP#*od!N43FIN2qdsduG{c%rx>p$)_Du<1=^UfBRj@Ik!L(39
z(Ee%2Gs~%)=bY+0#JIupRrQxSUUw(_Dt4Kpp~oQo%*&C{>~zL1i&y+t-)ifAXn8fu
z==F7phEl_DO}4!J7m#@Ve!1-I8u>$fHFsx%mvBCKcx#<yf5&?l4*xv!<&W+_)9wN8
zRnI@)T4$NPd)c@DzryRo-iP@%*cbYNJqL1Og;)C}P#8B{-M-X~;Xu0O)b5TQJsr6V
z8L~4F=|Dz9iQ%=@@=eo0gF<({yubKeRJeh+<Zjv7-a|||eHTjtrDe+J88dhXU7wa`
z5<7=WB7!~l`Wex##@o`6a_2zv9QPyY7Z1k&xlnf21-z-}gGKK39_2^(1q-#kDuU7<
zft<m>z!1Tkd;JX9$!W{)tAAX4iDB<yD`8LgkcNMj8hBAJL)gt}uNW9Cr_P<@CENF>
z>_Z~M>;!8iP?@l6+tU!gP|=3ciNThqK*?HP@Z-Au>lqI$+Z7bqaMo~^-m8Ki-@UkO
znorlAWsG3ozUoMWBxGCqo#@-9=7JA(1pWlpJ}ZH&(5sNjy?({`ocp)x!;__+hP+V(
zCvOIZ2*c9(F1Jm;p1D`=dZb+NV_<K>hjY;U59%rj?-tZ>o)&ER30!eET-~<Rj=><u
za%ywO43{GhFKlKo3yQt1SFB}jIklL%gdxHe<d;*CeyMVTv9iCG1u*a&nd-#6X8*;K
zjmER|(gX_^%{gFfwKCg3wz-9G&5oH&h6(e|gOe@)r7~aJ_Z7OfKkkBR>ll#W0pYCO
z%ieum*St0FDVP5<AK2LM>Xq~Svv#N5Df68h`D1;@kAwR-CDsHlh5Cu1BB&U0kKu+>
z+d|kG+O(GkwQs)C`0#fe+kv**eI4b3AHDsau8RN9@WA!z??As)8NvN-M}BwQ2o+>t
zd$P;yNN7RBSF>4qS;3!YKIb{Wy)yg!n)q&phO3W3_gXM8e2`eqw&rmDtGd(L;K8B;
zm$P>-o7Zdosn*11W-#cEdr-1mvu{`WqPMd)Z_6%IdbGRa$BG;SjoX%@zu^lF=ADa~
z#&hT51&~h}8bY@(bz(5^sV#0?XD0PQh=DCF<obT_((7r#H$O5lJlJ{Vw_pALncv?Z
z_iy1p;1H{6bD&DvSN!XR3o1%wQ-vxVOL=E~$rd`GHERWz^R(cbpTSYaAh+o4tl1qF
z;&RO8(t_#E{NTJdZROipk@g9%!!CTtxLw=t4RS971H(0!+oq4VW%DU1xgP0%#nzk%
zA7MXmdFE;GZiI%=ZA+~f3~a!eETk&oL7DQST9-ewf+e4a^tH)xFq{s4Z~V0`_`UVt
zzv<z37<leny}-;6k-qrlA~S<`uMT9jvV=LrcJHdoWnu_BJr9zz_^+1v+Oq$2Y~Z<3
zdE0arc!TzVNn2x$Uw_|QH^tOumT?@^h1n~>Rm0br@9W)<@Cz2M?%QyYuUM;!72;V2
z1{=oOC5nBJna<U@-n9$~5k*>$J1SPcVW=+<5{&grofm9*dgYrA_J-rD&h9DFdj9oa
z(0k**f7uv1cI54T=EleHI@2UJ#^uP;PmJ0xicDhXX!C4HO5-|oK$Zv6N`G+C&-H`@
zsAuK`u7n>{eo3GIdcj(MrFM7AHMZq0(CT!<yj$yLZjUV%6a0Gf{r7J{2i&ZKVg6`P
zFV^;A%W(%Akgzp(B|ig?vtO$Ea-;4JVO91Y%kFkm$P4a&7IMsTs&XJ>K|Hwi8|v~$
zNbvoy-`orz>er<(ZkXqG`KX1`JuUeShwgpN7Co?PM<6Gg-)3+WKL~u~@U?D&70=m~
z;6;@OK7;boe><}RKDoC(Ezt0Mz4qPWjNQ-nyq&eT<A<J-ou+1v%yS8_0iZheoX<3#
z8~YxCQs{xK+d=XSH)<@W&h3~{(ZF7yuP%5IQVG=QvNo(gwNmB@$hB4<J{T#vO=4=u
z-zCI*pi0tL+<NiLN2~sy<4L$W_loK2b+KBkYZ!XjBz83~WCy##CQf!qUV|0$=i1w*
z^S}p|9pHYkf3|g3NA%Cb&2zh;<8cYaTVjp#cBknp?JK^<Z+5E8?`ec5+@(i)B_ub^
z>52reb>DDkn+Q9DS+w6%1tm4Xjq9&4@Nbe9e6RfI`kYf!m+3InObfnwdgYwwA<qOq
z7Q4*3!WPHG)UdzwZdtFh7(;f7N$i_1=Ox`<v8|c7E6w+pDbItWKX`Z^#(`U{HdBK=
zjRZj5A@I4q51wv`HSX?M+_58+tzyF4IbG?Hr3(xU(#zh?D!gr4E%-6Eo{uY{{u}&Q
zB%9uuGLk!B-d~;LUCNM9{50g%;a#3CZ?ugMOqOsx;%^DsRHL+flX_S~;>ne7t|;bM
zPW@%~dwNHOxZv(MHim-q@I_1!@{3<49WQ1}=)Jl%`_lSU2K|!^;%#pNz$Z&JEC<z7
z6L^m7csolPd|7qF^s8mQvR36Hg4?|q`HOTQtIQZ0&R!|=wPg-{URIl*&$?!B;M}82
zz<oVX^c+xr%L!gC5q5prErtVWr&h|ixXAw5yY>i!f1bJ0JvV3{Eo8A+!`W$|k-Hez
zBkKhVB?a5P_!#(&1f>sDN%)F?wRDz!vTuFL0jbs5H<rX-W{5i#^ND9>I?~SkHH)`p
zzxuf=_-He`<kJwIb)ZxSI;=J!_xc=nms+zwwJvv7nXXxz47$z=<TQqgEu9>a7JI?R
zX(zPiYVtAU%$sw{@&AUZ=t{<E?+ldml#}LxN+y#W#v1~qzVEMpo89qaC0~4SG(*Ld
z{@m+lTsb!Ua=U!=`E#D#r&x0u{_a}#HCy_C_lL+C3yb-|18rc75_G}M>ia9@Y)-7a
z0TyClFay=Ix!31>|9h-1Brn1{{S;h-%_PWVA2cC)`z_^b{$Z)KZK~LV$g8E_Rg~&Z
zfkr#UEk$RmF<kSB-CeBpc+M%`*vr4S-mT7NsE|swWLmTDVoBis%d>vyu;k3xwaoXI
zDc^&gXI0M~c*_eZhak?l23qpj^X0o2$M-TV=uWkU#Eji(_sV>0{pKh=YTk4>>gM^C
zFC?MG62k|M-0MD1jvsgnEzcrSqgOFA%vN3=BwZ7urFo$Hc5laa!H>m$sndcjFCSq|
zD192jSEMCwIkhr&H>i!eZ7L7LygO4p7{hL7?6T<S=sfRoplwz5?Et@O__+W};$Jh&
zyBu?iXHNQ4h(kf-nyuTi&nZ804{fQwxwf_zvb&0b!9XVWy3eh3mR%k1l^%t?Ow5(h
z2KP=uT0U^J9|EO>hO1kbnlWsUEYeyoSh#WygLb+-sEx00Id%1}xaT2dQ#c=_US-U(
zoC=%R*j~C})+UAnmuj+hr|HEtTs57g_iDjQPnR5R;SC30NtwUAZqxAm(Psna=lj6h
zMM0J^9JmE)X8!uUVp4&A`XgwiA~A1U_A$YY;)3>C_G?;$!PkX>R99@_S4ufiq-6~$
z)i=!Ac7>JUTD;#<GqxQeUJX;tUtND4U#u1W_ZRO0&}h$dQ2AI1nn2H2P743W@IhzY
z5uOdZ+%6w=bn#J2ik{iPxFY-RlK9^Y^A5+H;+f+H@;AsL&=#_;#T`GE%qmDfz6j>3
zW!tjzZmnDSdFQ0RVjDhvE7qz$1#N#aFxWIzJ_PC9uxOhI8^g6|zolj$c7(V!Y&Bl>
zy4>%n8mMO^@q~E;OKI)f>o;e2{LobLQ%VZI#_-|IIv2hTv)nGb+I}(a?8sGRVq3DV
za&jFnOT?;e+0TU19`Ln8x`!a+85m|Sd^_vb{w3eKc7+D*n4J3;a;hc+L)%(#MO`iU
z@$ZGr4Wj9Ymc(Ol+JmOyh|p*)W`@_=%ZsE0r+aa1xCZG2omzS4Nyss_Uko-eeyPj%
z`JY=E^EBk&_I2z3TJ6>iW2i9PzLjz955}<b8M`cA@bCM1hJ`0E_P5&KD2@#|^Ht7F
zxcb~25+@Kx<}_`~P7^F#HlrZDY8AA~2>2c|#~m~fwAds;b*>gX34GwFhNibIOZ6Bw
z%q!Az7c5*^!yugsZkR6z%|WHk2{ydL{y_do$hRV`bjzupE`M(A_m?}#%Mf;KY7oPk
zc^69x1q3Jmv({`_xGMX>l6YapX_<PlZ0GjE_M$N`H1u99J8Pj-7ZA8(^5Z$D`e4(a
z8N1W2mHEE){`U95;fAZ5<I^2h!rXSC+1KUx0a?_bQ(qn=T@s@yd%*2>U&rK*ADYWQ
z?YEq|dd{hpj`j@yA-#tupo-4hWlw*H^GAjQUPTL-5{~vP>u#>Ay%#3kaR1sN&;4dh
zI;VX$@yz)R?$<zqO?v6uS(`h4ELioS|JBd6$>22wpe6K?w@sge#>OTGBrLu07#f}o
z9}3JjB|j*Gb{^KO(w)lK@O4tKWk-jn{Ts%HhZ3$wQb7&Hou^jLc^2~Rio8VEu4iAf
z<71g$FFT_Lsz}y}Gcv5%qpivmAq%P28uqWqeiXXjjY+3DjhSa|HImzAzpzls3l;l!
zabpL>u?#<gZkuj(FPeL@LRTU}a=91WT?V<=&$t{v@RlD^Y(kTq^75eBg;$oz+&;x-
zkg>R9M^8t5k=Eupry}e78E$A;PF+0blxytkSF^6KuT_5E&X};aCS&(Ax04KEpfTT%
za~L1YE_*F?bNy5Xf8WiFZSOK(!0cmSVAxRktN6-sFYf;tQ-TZgpwZW0zoJ_I*1DC|
z`un;&qF)~9zP<f8EQ3D?eAAqCp-79}`8?P+VHc;ZVmMIsg8z@dQd0Cuh98IOK(RN!
z7__#*)$iy9odn&d(8RZTj+ZRc4c8;L>((+eT)RAV7vq|?izOd_S~j1LV7MQ4{e<WK
zG$xy+(wRmD)z0A2IItDaT7UcZy`K)*Uy=roZ7?u2tk2q=CL`!B_%YDw!=pFwQ!pxa
z%zPtZQ4BsZHGy?+kO)IWt>x5T8`knU+ziuW_;)PNWzX7hzoq{oumAn~c-7lkJ0CQJ
zUfzG+_SNiY*{`o97&b(zz2e+p^lH|g^)d|qSFD>F{`Y$*ga4wpvpoO*;cGjEIO>^!
z!7S{y>2u4eRbo#AraqjV)xU5ftm*V)*0$`lzyG>_<y5MuR2U*PsqVz^OR=qc$2^Az
zatvUE>G}{BhOlVA)aCUTwyh6gxN~{M{(H|u>|Bq8?p?kmwpi8Uf$Ep{x&8Zg>^aWb
zaQ53uvnip;4b#nM=^e9cX1sGcG1hwh{XKS~(hN4eb51qB?}CIHh`f>TRmSVC{_eFW
zK7_g_LF4_wd+>DaanS5xg}P3KAd2J4c<$VTb@a9@)neH2Nlz&$ekMc3lDi!h(xB0l
zf9A`Jrh>XAG8|$N%jTR4%$1uSJk#aK`cm0f*OlKFGA4ZXy(018Y45V`LYFxjtOxea
z?OE2%y^+!XMYDmV#aVdUgMr~jMDFz~jHT&XJomTE4Ym}6Mf(3GurW+7?s;<&%ai!c
zC(AOY=YdyYtyvJ>#l)~$d%00xhp;MB0;k*G(D&wBXI>6<@p*NX|2ET(?Q>4~xyZO2
z39Og(5@cX|oArW`Vb7L}C55jnnGY=9BkL=^`L+4_<4G*@4)h90?qI%;*g49u;pDA#
zppK&b_cEq`k8bP(Z$)QdV0gFa?X1;vP6hs-QyHG|VND-W!V@U=mfUq1+ErNnV(Kb}
z16ij)i`P3pF?`_J_PhFA{`a|aPA%`4QM2#Xx|!NcA51N$&fTYZ^?7!D0K)-swL=UQ
zmWy95;_KQM!qnitTgF%1{Ca*|_8C5#YisuTPF7+rTL7N_0mUo>1CPU7MT_^ptr+V|
zAcwz#T(|1&tVqA73*J}etMS>)-*x=459Hz>1_p-jX2O!r(}Qnj?tYf`0=&fHfY!|*
zUWN!;%c)j(o&;qwR4DEiEWC8TyY3{Y$@jRb{?y7hnp`~Lxqq&$XD#(zarj4FZ^wM4
zM{Cmx7!J&@*-$9+;AzjY?pr&m*RU}7r`=h<mZ9Hpx*YTKNXS|pusfyK+b7qqy7VFR
zw&hf1*m1-K;eX?Ley#cGzVP7Yo2ILw{U(M7|9<`TGbnl104i+`bX6`@VAv2<r1f>-
zt=3Hp8=T6NA1&GcYVWIH7oT6Cg_u4Y6Fxr)Df`76@BTNm{(e{%!-GDxCZ-C>#V?bV
z$G6wEF;`fX`hpVQ-q+^qWyRR!vh*z3^6HTbKm(rK>oHG5*1eu+uiC!f;#xo0(F_a?
zzcY3(`^IE@cIA=hl2HdPU9AjFHUv2fB!B02dxwRHG;`U4{otO~nrY#$7#UV8FW+?8
zKHzqk7(>{Ny!&rnZg2CqoO=7;KhxFrx7Tg7WVsgL_jJYm2c;LxXWj~RXLumEu7&->
zAGgb`&v_V52VcK-GGmv;uDZ{^+|C_fKGSmS!qX7GTkAgFhqj_X7CRS62^K&9`#`@>
z`H>H-j=2+l+jP0*)LW<D?ER4N@|9fwM({odkotFL?<BXuhA|JUs$8nXutBOw%UaOT
z@B~YPX~_H7#s8|N2e16kCja|)R4$ik_U^Q08#Y)KX|W3iu3!A``MysK4E`^!r86{$
z7e6$XI}r5td-mIvGa7$`)@IiCu{m$MZtsl9&<(xU-YeSocYN34t=}*^_-6L*G(A{D
z;@#@Ev%0|p+g$w9UU`7$=|OJf4|;Ce=W@J3Rs+1E4HA~xkCl|ZO=WK2-T41$t?u%o
z+xhcmeX&nx6FK<##7dd3(%bFg?-esKoHm<iaNx7FuXt(1ug({Y)83_+#GYAqf6qPv
z(+>>tN{<2xcp_@UN}s|ORDcEw1-8T%PYkx))-Ut#(T?}~!AB#2vd6Wuvlh#P{%`Vr
zdGJ!sb5PLF?1YVjK8SnvDCq$oti>=ZT#Jc8Uw?U#n4r2B;{mqY@7PQK+O5%EUL-BJ
zwejqd|CZUikFjZ2ESPgD&gIJM757(!*59A5&hUY0T?^lbJ#Lp>W!e7vy<s^2>~F@d
z8L|5-Z3Qh0{LPt?ADDo*+<=0G0knW@{=xa7vi}x*^VlT-b0_~*h&x|-D;~Ne^L;bC
z&$46p&NUJ{-p)DYciS}W2Pn}T=&D#M!0=&Hkyfe0;p$X|gobU(k2dVDyKLU~>w@{V
zm9y8T<zDyMWAWhs72XKJ!VB@$@qhN|sxc(ER`BzG=mAZ4`&dk~Jg|B9s_YM6XJ6;z
zWBwjEzp+>4Si@UQaAZLo>U^o}tj_XJ&MtdGD}Kz~4C@ftMBO%hTzBv4Qj<i@z9Znd
zDFz0H0{h(SKEG;x4N}+z4L^cK8?Juvl4W@C^hwA!rAJ<z3=jDEe!n*V+qT+Y(D1$a
z+%vD<m;RW3<3@_*)VXz=L-&5$_oFuYA!CE+H_-77OpG@D7fS-|t@~=jSSkcd-|m(2
z6?ea$A9r7avA}&^zG2C4l(vMURewitI^)CtPeS@`ue%7j5t@Oa!98<#+MV;;cTG{T
z+37qH6nr4h*_>D#XUuaa(8Z@s4lK5&D_o0_LI2e$<`jk<lkfifwfCj({g_wDE_c4n
z4t)04G<)|mw>4|J=Xl)>*eWc@F1Yb}yp#<i!|PLSg$>V31qFW_u~!)W{u@=ZisgW8
zW!upQ;7mS~*A_Cu1hSK%ZSgnfQ!D4V9$C8S@cX`Bb>IaApysSb?)9GEkzwD`4hXN_
zy!F;P!)CCXKnD`lz1nlkd8T1PHDoq+_2a2g3<pl1SlOeT6#s|egU0;#OY3h;m>RtE
zt$Ehj->d)CEso^VUuu@!)iJlj;)Qv@+pqicwYeBJB<^|6R-p!}g<R|>njh%4mW0%j
z`cs&GsDF(NwYOnyd$XXv4%$=%xwjeAJy>2OC%AhR-+s%!4rB08GswLnzxGOgeP5y(
zP!Z&w20289fq~)9Z5t)NqwqAerY}5;k>R{PsAHwRh`nLy&3ERRe-jsn-S2p1rj#aF
zc=`XFdT@ow$v-jJ^40%M_W!p;3NT1W@oF*7I|%OAf8WFwA^G0@^3f;1&c2>GiJ`pU
zw*Bd*g_l5c=5mV5AI;R6{cO!!srzf8;pH4yEl{?KcmK_^E8o2Q4J{oG1ZVC}n-jcp
z@9g_rqVvv7)PS~^7~c8X^R~S!096|YlAnb5{gzv{K{GA)`ka+&2ToV2Rx?z@)qd{g
z-pG8Q`{utS=F=}u*LTeE`db*ie@9Qp?0@N|FYB-Ao8(W)izw2XFRlCb>vcaDnJ@O=
z+vo8!91ypYa^Tufv-strI=Q_<rUy>#l=2m4zn&lWn@{qGx^eqjNegE`28IWXMOxK%
z!J8UumV@&Q0|SrSZPUqfPO+c=|FFEY{$~Vi`-II@D;@jgLDd%XIYj5R?1fC<fC@PC
z&W`e;<P$|&pxL5591IK(9Q)orPe1G<BJv=0?<9K$oB8`*y2>8fpj*Ze5qUelM$rCM
z{l9$=wU-Cg-*G$g{H*@h=f3r||B^p%%YNpyXIGI{wcy6<|C!}nj`;om9r%Cqzxv(I
z=Q$Z3%*$b5sE|vZAITVYDQ~}<yf*&_{xrT;g93JNPLw<NJJYQ1?>11{VPH7GFxU0S
zc`p9_maopIKtue%<jmdAw#@fk@?PGian7m0+osUF9YCq)Ztog}Z@(n>F)$qXJ2Upw
zvX8Nx2e_-3GBA8tb51!a{t3f|Z`<}~Bz?V_7G^p1{QkPGj>`YP&(1eHTXS>A^JQ<P
zq_gA}m^uD>wEou5%ZH~l|Lb?%pP5;{^nWS?!?oGRrZ9M$&C+}I;q$~fjA7SSth;(W
zKQ3NF@PqlYLx~Tz6>C}NUbpaJVqo~b{365bXU$!(1QlG(^E9Ncr$hK?y9M~5E0FKJ
zi|%|sXKpSe_x^+qG}agzcE7GZ<I%Hl_2y~oz-7vvaKBV_r83szZ8J4B4xFx1t!Jo^
zvz&VC&7-wD7!wN0{(pJ;??w0h`?ZqC!p)}D{<!>q-_K*ySAG8XYt^>wutkmmeox=C
z1-<=xeg4&6H|zRe$?d0qFK1zRAZW6TC1Me%XjI-m-SEIEYk6Ps$*;}V=T2bVck~y-
z|4OzOyHyw%cI@AOyP5s<3peO^NJFDlKgbt1&aRZXa<Fd^$RD5rMssUy@#XV<YtAp(
z-pbuyqyQ`b8>)Xx2>wn=K5!<AiJ_r=V>>9?G$1jup~iCR-VTXwDTW=(53m38a`Eqf
zzC~I^><kGv?XIP*4`PexyI8XEu_g0?TPvFRk1c-r=*6$I+3zPduAk}6T9<8RAjr(X
zaA$TJbB<Imw2{%^n6*1?Uhq#tCBHpP54Qh(`VBnf3o31%{IZq$y7SBVOResfLg3{t
zpz40_%<MB4AOn#V3e`VuTI62;F^}azYpx~(gH3m#OHMavF>eE}X<$UdQmg)sT0!PD
zy?^W8vi<0`(s0#U09v90ilXx~S<EK9_k;vTgJSVFmVbvCU=7!4%ihk4bg5BKteEn4
z-*;G5%}{PWQIvW6?BJV{RU8Zq9~ju3k`LDe1T;+FzLX8TPH1z7g$TH<EPY0ivq4qT
zSNyo($FO}2+0Wl*>@rv&|3ggrrKA=65(b6`|Mv8!37-vxR<07OKr1*d%kO1Sm;<{W
zFk$7bb&~E!_=DQqHzNA$b!VP17*A(lc%ZnaKkf3J6&eRl-wtACh?qCW>#xE8IPfWB
zIXh-DG286DSh7)AF!>_WnzgIzblHCxpJkKS^%vZq;a_l(VfG2g%4r6Mgcs-9<rrL!
zl=-Fl!$Myt__k@f;K#rd9}=qOLjs9`;ZFa~r2>U2%nS@Wc7yt2Z@PMTlk+qWaNP)E
zVTf3@5xhtAM#21B>k2)X5-eX8x8>esTC+Cyd{1Nk2g_LpPp`}X4g7z9Y-=+6*|xW{
zq(h-ab=w;I#eWxzGv1JfHpvfcUU7bTzAG<(Qa!99Jz%>f)_9`$k$Iq!E{^ZWQMOsy
zT2RmT%{f)+@}?U!Z{NWCyn*F_P|vdN$G@DnF=XdoS^ttD{!^rs%oHYuhTos$X89UJ
zR@yT#G~Dkw%222R&GQV?)`BK1FDQ%19gBgjqHFm5Tg8~|+!<8{h8^;IC2zVEhq6{w
zMrScF`0FnZl5g894BEiSz-$nh(y-k0*Z((n&jvoeb4%~R@+l2-8|N~nFkA{@o_x@o
zt(~W=Uh>PyhRKfa8<z=LFqN~ZF@!s^E$8`{P;G86c0plnY3$^A_shj6ZLOR4G%ag`
zr9+TjdHrq1f75%v2pCRhWMGh4ruF*m@6RqVD#yM<*B~@>Wb96>4*MM?mU2!3mU{Oc
z$y<Ny|5URt;ZwIF`r3bIoOOKHR|M*kS6PWka7Jm0KKLza#n7<-Q4n~&Mam<uiwyJg
zcAqm4)OIjZyEdWm|CO@dZnguCnhXpt4*xdR`~+F^%)s#Aq<`duospr}F5hv6CXNT$
zTVjg^1@|B2-Mf<+8m$Zq=4)3@+`Vdze=%ruscJ+1{41a%mR5&0ybpiDz+e|1dd*(x
zkq5;3gxx>(hnXCB9;suVe!Jd<Yr>qP@A7R9{NFW=Wv2B>&=A^-gRaa=GL}NF8)ax<
z&%OSqt3$eQg5}{iP*?o$x^3<BUWIS(4kR~h-E&}{G6RE!OX#)B9Wyw)kIabXG7xB0
zVtDX5Bz12r!|&-Hpo;3mk*SLq?an9dyqPDqM?}+MlU{lKYsN#V%pZ1ucGy<jUfJVu
zVQmmdDFXw;w?6{xGdJ&t*3u37m&?xHs^fie_8%-38tTsIvi|O4V0aL4Z?5OWd}Rja
zKn*4ayQ@nrKt`N6F?AE8-PN+WiAq5YDY^fT{SVRKknC)0VZh43(EjP2PtmP)8}CEC
zm2iK3$BxOIlGdTHVmf~1+gWdA7hZR2Z<Yle@dH-)pdhXIfbC{b>0t0KMa4CHEfbIP
zLUx89GNF<278RhVcSsB4V*er2{WNWNV1c4v!;`<8f6wNBu!*q%R50#Ysr9<j#Ye?8
zDNh7i!EIRocGm5VAF5(TWs7RSwlFa4J6P#*hf|I(c<R>bQjljr;=c?RH{X$c3L2u9
zIdP^wXv-z70|p{h3=RFOPgThY+Pi>?Q3t<U>vjfN95}8!ZFZ(hOqY;?^uK4!(b<{}
z%)tx{1q|=cE;&&SOWV(Po}aKLG&OfU56FDbk<qK(&f01#eW4q%CI0V>i;mw`ZL&LS
z%gn%F(eOPj=*e!50}dix3=RGtjg{2E2LdW6Uq8k6!$e%rP*~l;EUo+LF$R_sck(2-
zp1f1}4yp_p^rRGAwPCHvKbhOl-;vBKDq90PHFsasZBzTVHyfI7!f)ZaaDFNzSylLk
zUi;iJgQN4xme}MnO^Dt7D^LA0Q4&i6O^YZPi~VD?I|xcwLVu>~FmC$1{;n~@iP?@C
zDf!#Kb1^Vf%;etXaWQH&)R+3ZM0h1P!&BD#BE3qBj^8ElaE?65eI|j4p~1W&UCq@z
zidCY|Nu1$BA{+Ps-3g1e*D}{|z2;%~`H6?&+D&x^K0ii=1JQmeE=@59I3QMhXxf&&
z?YZx}C(g^>=tIj_(2lOnd!;|rFX7KG5{E`UgM<CEX--F0@-Q$w2)#Gcb7H;{19OlD
zGsC_0TCe2=4TZsbcqOAWWgjGqojyC0yOwcN*`{hShM%8qODXk%?q@&0`qZu8Mk|Xz
z$qQurf!B2>+kIp;LFojv!1Dd2va@A+PkWgjl)eM+D*`F9h`DVFvUrWw>y<JL3=dqt
zy_~#Ado2@>`$BGpiutS7JQplf1ZM@KlIvw>qdqdc-yV^-tv$1@OF*I8zWh9kg1??L
z1N(9Yh6kq0FDbfygZ0DroV@A0DRk;qTW~eaz`#(my!hqe+0Wox=w3YCzT?1~AO?nt
zqn!od{NA?s0xQFw+hr9eT)-J1C1Ytx1OM)hj+qjSo6K+93OCsNtmPGS4~_H(b>7bx
z8H#J}x(3}Sci{D{bvNIc?iUoExhWmi=E=WYb~e=IPc-uft>3Uodxl?zyG4}zKtWc&
z>eMZ{+MuV^90wXiPBAq6Teaz)UV$!n4X(qobt3#9>bjq%$qD`!Qe?0e-<{4pVdl2%
zJmp7j?-NdNGBE5pa5QE~##&e@*&Nf=>0_A=Es_tE@4mpW=hR=wIi(B?41Z@_W&9?~
z$Z){>jIL^^_E~5cPoJLzs)`ko!%wmQ5O~eQ@MpQF%by7xDW_AJA25hAF#K7l^*Yn#
zjEZwp4L3AtTAW!r=fspm(6KF`NUT{6N@b7!yK{d~Lh|O$N#Zl2xfmGqH@MFixw|#C
zcy(mMLyZzfhQA@HwQ_>)P<yqXGVcME#d3=xJNO&^e>(q8lJUuLsO2`tw<`rbjfN)Y
z1B|!UMY<o!kDRzr7&b$1z+k`q@DEYO^RqgkK4(}ked-Pcwb01(psN+@4R%iv`6<R^
zV9@Hs@Sq?x(qH*eJNVM16E}Qsn{NNd%&=#6DH}uFBT2@}O$X&<7BDe1JeToqb-4*U
zV7Xw2cjUyytJb`Q94g7c@F4o_yGQ?5vR1@}UVA41%KD&Su(*(Ce`)R>aGLtz9~yaH
zIY~`KXiJdRfej+R7#iaA{v?31phB_OKgN5R8}H0<KhpV!q2l1lq@9++d@1Q`i#kre
zQxIif_;92(MrGw&scKja!}r}gEalWc*iiPq*xRP|N{`%xKde~^-j4~gy~=PsGbAHc
z?@^w-YHJ!}+tLf{4B)1O<1g+)P}EJZWLIFg_rCoNL&af#M#s2Y>pogb%gs5($iVPz
zPDe9KENo8vK|${I9Q~62x<*DR0U$?%Y;b<)msv3nsYH%B$$dtbm7(GPBiWfDYfZQf
zbXx5g9wglMR#OAdYbzA<IWX)woV3%jzhfrI&YbUO7(NxP%{O?$!oct^JoK8LltO6s
zS!lED%Qx?oloN1YvMmH{(%*5B?ax7^sy6IX6S$l9#&EZbZZ0eAT!1MdKlz|hoC^y1
zNB=v(C7aG4<}X_#@|FpH3@%`hdC|T=!MZNHxjBS^;lq3$Min&6GuD-WJPJCo=ZNjX
z59&yX*>E$n(ju+w&EAX*4^B?h@wgCs+jM&utHd-Xd4>Xk>EPvU4o7-h>l?~<c64;U
zV6eE5v++*E;<i0&zVH@?O#K?d!@y8*-Zf^)D=+W`U!WYhC3f@O{5oYbqhxp>gT`c*
z{+0f~j<CDx#$9FR8E07-7{0IC^exY4RSh$v!~!Qxh7Y?y<>SZx86Za=IAre--~BXA
zN>IFsdBO7TyT&Xh4o96Ycpm|_IF)(HDRXF>zv25&Rr8|YsayYoiZPI8o|F8!2lm~a
z6At2lFkiW@w!wB028J?NVd1|}n4w~_H~6Z*2aT=u4gd6%l9bFDs%E{Jr|7_TYu(OE
z#&?Pra4|Hz2~DldiERwo8oN0RdeHiT-8YK;`kqBWlTw1lt#vzlI;2|<$RWJ>3sl{K
zl9TNFV@pom32I=}n!?1Ozxq^Fb-_P*K~VZVV9PGgP!*wLez{}E1WAVXB^#@!F;xCo
zn_jShi-AGuQ3Qv|t0>sX&hIamoz=fMQSmqI*glC_@=}eq-@tcffc*Gn^Ca;jOSH19
z`xzJ%9=WioochiWv2=aWOmL>Q+4zC~!ug}$HuRifs91jTT_n?!gZX)2%eMI~by#$*
z3tHs-m{8x{e?}q&>c0aQ{&aO%uRXAMC3s&E$g(QK?ILnJqS+W4)`X_MojW6CYi#k-
z*oKFiB}@$G!R@C19bnz>?rx3UEXH~uQS9{DZ$<aG3mHE+itkS6nqW7bx1l+dfnh_b
z7OT+H+hD~E3<r+ycrf>lMKIJM2NrCJEtVFv-^$c~XEHQjF<fxIZJJhofEnb`6LZUx
zf=U-hHY93&VPeq#r3mUoGgLge!0cczE@(JWl0n|&rfqP;m!Efe`DNBHF(^cX@>9~Y
zdWOzVZ$UK$s2P>K?umPvp9r*kI>7KZgv(|YY)FM+!S?KljXRezFr=KfHe4B%EtW8Y
zYcIor`Kva~b3bCg2o#eI?%IJ2GHDy{<mf-!D<IA=|A;ZG(S@?JQ|CRL2lC{TGrtWq
zH$Ml39LPTATkCGF+kNlkggGIpwxQs&KN%PpK*QI$E`RKo9@wi4-73Mr@FlH|-Q~=x
zP4iAOGBotejP+Wz&V<{*r!|h@L8Sc=aFA5XR4`cFsdVvq!g@e`rp~n4#feU0b*m-8
z-p#((?s@fY-UaY6R16FZ@{bpl7ZtAo9oh(T4cm!1-ZxgBs)DcPXow4Y)Kr~j%E&Nb
z>8dr`zw7vI@n2N)ok3!SlOe-~{PKW*^57JCVBS^>2EH;yEe5-pj2si#XTMWS+GL%;
z%D`Y*^igc(C&<l(pi75hPEI^?Midsd7q-N1-n;pKlwra7yGV8ULq`5HSxgKH;rCiS
zZ$|BAI2`hVmEm83B6tPujq7E-3wJWGN9dS87c`tK$}m4?TlF!9%;K92HU$SjSu`Zo
zcKbeuLvPGMeqvx?_#tyG{^Z%1$51ZMm8D4!?tzLdh(LSx?qhd?DiS~wxH~`T`D_At
zaGjGm!-pkWuiq;E<emspcVM1$A%o1D_7x02yw{{U|H|3b&dwLX$S^_q{lO(UYhyub
z7#JG*Z^wSAQ};3|S_2y81qrsTcstAc`}f1PNTtE<X_80QXuaMk!N720!p)^iPJQQV
zVAP(%%usz!DM<<9&CO!$2X2d<K3gXIz$b*^kE;9bblwRowq>s?;r?#(o`K=S#P10~
z+b+Qhq2(Lj&za-16}k@LKtrq+`<wS5`$4#Zz1ZeK<4j)$hLojRuOD~J$e8Q0R+QTy
zrZtZt;XFS${tw9WoMyG?DP?2$w~d?A`BU9$iKI=|8K5{Ud?<D@Yxl9IusQts$E9>E
zEiZybK|rQ6m#viH_|67Sehdr@U!L<xRwSeeGcfG@$mesa<~@VN1}95~4-2$jZ|<1U
z3C?E!Hi&T^crAAN?41p%4EqiweLur^sdQ=dj^_(R85nM^I92sdhnaIXyo6o8={dBE
z%8<ZtYh9#uFux(>&_4zS28Vp@i3e?qy%`x!^p+<CJ*#Fv&>(t>vB6y&JWSY-zV;~7
zhh_3gOb@yvZntf@S;NmSvxSL4LH%C6=ghy*)-1#P6>n#0S5BI|YR%iVpiB%pmg0oo
zR_AAs!3K~&85XSHmc6am`#lT0;p$UWdTa~~Mvv-TCp|qE(~zkBg_+@dGygX3V0DPK
z_K`o>EAA%koauIC<_v}(O3!zv^G{edHSXcO<}e0^Cr5tkYkpn}4h#l{2cQ2=11}!{
zjSYU!-u=u->0Joa6$}htQs%MS80_X`XwV5s-CO&8ZpLhvyBcB%H@N;X9M~%l-t^p%
z4zlj{PTvNGnuTwTpZh$Ruxwj)j0pq3T4<#FX(omSpC8wpPu08zdxU}EN6odQlbwpN
zRxZz7ecp+iSFL#qPckpwd!-ee|EJ8rQ1tNb^eH>F#S<QIu`*8By=u*J!NO^f=G%v+
ztqBbGN)(kC_TAubbiTCiD))Dp9ZU=gm7$UH?nhiMFIn|gYC7y>{u(=R_~CUt$CpA=
zE(1fuygQ1_{GisBg802!&zbLK7?{H~I2a!3D5*g`7u(7DAQjZzXDm<yS(fvihw0Lj
z?G`p4)-W?Du-~ipyqW(NngIWZ>eZ>MAHM~S*@P3f*4?}(U$I!lC=EUg=TQG_+M(vi
z&}+q!3=9(*g;ggT+_z+4TNfa}aD*S+b3f31Z4qO|)twa#Kh)+qPFOcJ@8P|bp#0kK
zJuc{(G&>|555!+6>+QaO@?;3?QjDGh`l=HR5qZ5TYxgrVrMxF>-_H~<F(_n)M$XTi
zab#vJmq9^m6T^wf&}+v94L?H$C*!t=@gDdLsv95Otv|wi!2D<WcO9ln#Y=;CnBRQ+
zo{6DhitZNgLowj%ML>hg-z5s%^`6aw`IJR(s>`uE{jgcE4|dP04m2BEGB8Zo5zIPy
z!|ZL@d7?Z9IjwaJC+@hu1E;S8(lU7r6*qV0F#JfH=Q?4*U9~^bcMsW4=Vf4+ux8bo
zSQCd=h;p=g&B;mKGnauiGB8N&+Lj&mPCzC3_$g>;FjP#}-gwZqcn$-D$K3L`pl5wC
z4T2g|SRB@^+BDDY$jtxXK>M(1TXx=2<`0XwFEV^Mdrp+$<R(dZIg1Kb28UB~(iJju
zukY{?1gm6t@O~pA<44rJgk~28h8G8AjXop<P5ru2hk?N(5HxmS5v0fYxt2MBg-exj
z!p6;SlcqqeTa<l~!6tv>ogDt%XF!2!eam)o!<U$sBJbvgq}qzIGB9*nh3atrUJKqu
z#lX<8{}k(ol*L-vzhOnVM6<W<M9uQY&;-V?#~IYIKO|g!hJj&%*85#c&VA>Fc=Xu0
zsi5&GhV@b1><?VU7cnL%*i2UN)!utZnSBETgNGkz@Xq3r4(I1ws9zquFXDrjZ4S5A
z-JG|1|7A|eSsIYdc?=8>?yhrX|9<WW1B1h&GcVLj)21`^I4o3QC<>YS)kev03dBAm
z8Sw|He7hM8MCN%;Sg<X7-50KYnFCA=3a<NJPOuV(RtpS&Tyw8SOjlJehFNbQv|q%v
zZ`G!GTF{{kh6k~Cl$rVco`CJsQ%yC`y?!T4BH;&@EaQZg#o)V&4$PLxVyHNlwDaaV
zW1ke}0}ei7r+a%}PFR+`_mJ&*O9qCZl2xHX>HDDx<-q-N<zyqna9FZc{^%W;@+tzp
zIPQIss#!(A)U7v{GBBtt)q4Fl?ssRH=Zu|88I%JxxEg%sYJ=T&uS8p^A>Hx`(}4>S
z%<U#Sa~R~#fSN)~3=KyjvO($Q$2zEuAHJ_mg$=hEXq>wR4QmF5+BHj9`~6%Q861+%
z=&F|P%Vy|tS*XEK6g>57q01Q&NLXg?KIXcL;eYDJJ3ib0pI~ihjC?aM&><@4RJ%G~
z5+lQep1U*KI^8^P<UfTbh#Jo7b0?2(glCLq@Ic1>Q%cUoOJP=jxn6eGN-58U{X4jz
zGrd>nd3S0X<FSPogc&5Q!mYpw{)3;{e@26ld4Ut;W`BBkawRBncf7Y)lD8DPJG?=^
zP&>`YFccn?kK`PSOs+$8GcX+3eY2Q_KP@!!b~g)ygV3r?_wFsOSmG;`UZ#1#L!^sI
z!8zRvlvf+fW4k#XL_SYqOjxj{)j8?bx}Cip(t8i>4K`$8m>_V!&|_{lv`}H#*Y*%r
zOE4Tx_6KPPyY)i5rTm8@IqD1yK@aavyYe@0_p`9m437g|a5l^dNv)L;GzR<qz-*mA
z%zvgIEi&%!5Z=jP5YT<J$T*Zw<#>Z|g~7^Gze2<q7<ytuuibuc?%t(RxDR{;1!zQz
z_xVBOFzw!!9VS?~*ucm*9M(iWuzTibMt^W{ir&lhyz6zC;c?&#u7)#nw81%wFX^NF
z1OId*#)Jnps}*eZq#M-d6*Dj_IZ&;8@-}Y{v{&&!f3uypn;LBMK|;zMWskgPQZRp3
z%)e`ERQ{;Bni~`}9Gks8=T;Xox-AJ1W0?7IF~pu?ZS@BGIo&J`jhof@UK-wEnOAX+
zkzqnpu<oQC*^p~}z(EEkCRl#wfTkM;hT0p&EY_isvtzj!4y*_Tg_^MLB#Zk-3}6d(
z-uSCAUlU@-CL!SilaCe|_jV{xWH2b`zH7|w;d0ybb;pj&>UU;`rrL_LGB7AVXVMKy
zUk}X%2d?j$W^TD*I@kaPhK7lTPv+m*!4H~W0=eWt@|oWa>dQAVFeE%VC+hL)*1C_n
z%n2@Bsf-f@?LosP3=aynZ(_Pptj5RScF36fQt|;#n~!st84|Xv+H@~&p6Nw}&d;*2
z^!-EnSr9Zt6Li2MS-po&oS3)?>J|pOBYXHOl0a?j<nmRHLgi}{8VWVPusXQufDf%c
z(0FTI<VmiC{!%uEV<5{OZ(^)?lpw~yko;^nujPj8AQyvrOWBdjq1G@+s3C<Ud*<$A
zb;=b+t4~$w@iQ<S%lNKWy~IZ7xm`@dL`@Mk2fkIC?C$BAXo81O`HIxl8q~X=rtSLc
zuENmMk}kI7cq;RUl)$N9L*y73dalfT<Z;LMwrRF1)O$56qYI%-2A)aPEHGa+*sWX2
z+JB~si6LRlp3{?<pD$x@TNWU}Fw+8(MP+hSwHj=%Nis-GJzA9f*h*!|+gWelf3co>
zNO}K71_p__pg|79%QBst;U0W__tYF88EtUa6&z`A=C27!&4o8z4jjKx%;JCMIU7U5
znllg7*+KPz&q4zRqr!FI!2pXHi8~m6%cL+S<k;*+r23wT-y@11z*m)AFV?i#IU@^Z
zi(%&OG+9A&FJ)!K5JFAQPWcZ{Kw}7#7#Jj`-nD+?l&$hEtvrvbK~QrFtHY}@`&0cQ
z;F^Wqm`6O}{z@AL3CZ(%9{s1;9-N%1!@wZ1uz2Z2#%iz<X#9bw2c5<66{80nZ>=-j
zF7j<AC<ok_lhwmxq0egI)Ov~GL_;fhJci*xtk~(Zg)V27upc;artG|df-EQ}PhPdg
z_BjKCL@&5Ky2LQ(`6kG&MTUm_jbgCz=mQCs?ff7+LHJ9du5Lw%8W#hD+c9e$%Yrzr
zgch!)j1wAz!O`rXZ^po2v+*Z?!^TZve4LrP(?kW!ty<lmFJfRwa9LwIfq6P?lC`FJ
zTlTdgb>U)HXreH1(q1}Iu>2t`W7pi7%JXodttSIRPw&m8PYzUSHVA4>VRK;9(SanL
z_o;Ik8#Zogl)VH_=$7mZ2WC{%tFr4sV}ya>-?E*s*%FD_+p_N{LdS_27``N)7qpof
zlA8NXn1NyOhU)UU8QoVb^;r%4TJJG<Kw6Z+;H^wwHVKJ490B)1IyD$1G|wA&^z;7y
zkP<faYm6KN0}rU&-P+c==tRSNF;ECGFfiPI?)MGKWN0p33wO=~f!yme{xkkQ_k@w*
zfX5uIE*=YYR)e6{M+_cw<iSI27lLn_ZZ~4ykv^BPAuw9Ud|v7VvFW@A>_BZv1GatV
zCve{f&oVPGFzh?;g|H+wA6C{fTsXdU%Y%ua(UqRo^6;XBJk0|hqFu}ih0D1>)loxS
z-VxRhC#;wmlGBx~!Fj1*vi00Ui;Dvp7z~*9ouAMQYU7%sC%F2E&K93D;5%ACUi+ZA
z?g&Res9)60%+R2Cd++9RQ(V~QOlFc;=~T#|@-E~cNY#bYQ85htYm6BT%I2j`kekkX
zVDjQsYj~X)K`RYRT-a(L=bD0)LU6-#$$$QOcX(m(^uh8BV`J^}PYetR5B6-H#C>0f
z!EIH548zJ*r+!%|seygO!0;;yG~#C=B*UOwzNLB@<I4?&^55p3WM*hsxa!oeGc(zY
z9#%sOyaV5NO|_S_2n0th0|P_yl`_bM8({knEWEYOke%h*%xEr#0~adORoVC7URTJj
z2MNK%<)=WVG~APkVyH-%%h(W7vCJ{*PhLC3fd^tt9Q5Em`Vpu76PmCYcy8r?1)C2d
zY-6~&<<73!WGBYXz~H>4I()8XI}d0cI;r&&gU5}PkbCDF$~T>3aL|%D(9*Icc5_z;
zD25iVTC@BS14F`sb0W@c?{2M&gcWcgW5GCXix52CE*ze^A>sT^3kC)WjrXgb9Qvuz
zAgDcs-QkemRB-2J?^;*3g7a3)3@bnQG=JHV!vGDjm8YtH&$9~Tk^C?hmJ`8dGcYj3
zJ^xo<RImm#GX)ZA@K2WGcw@X>grQ;Kr*&R>HLDpUHab-@ELoxT`Yq%4POwiFm``8A
zWMeUjnW57nP(|f9TiuQ44B`w7&QENo#{BSu<YbU(5WK$FY`)A4d9VvXy)(~S>oz{;
z_y!8EX`BoU&YP;;=W4d{+}RSlIn3lhh3GD3g}~*|QPz9O8}CG<Gbm`z%bhSMUaQr%
zd)1odN{kE%3Fkzd)MC0|i3(y91H=00lki;g;^lp&X4~hW;7!=GcoKK9H>2CS00o9l
zt1$3t>^<GyL5!eDIftY*3!R-Hm9t;s`I(^b?OL^F`}^g>trHq|Z_9oI8)^JemksNG
zFz|%mHr;;P_!q1j&%jW%LrCn6Avo+l_Ic^mEM}0{>D0)e^6LNQ^77-I$<fjc<(iDa
zrA!SxJ}k#Qw(rVFPjFIbUhn)upvLHc_^zohIvLU%m}h96c%WT1!|ri%4)Z_fYFmGn
z;P<cP%$%y%c7k_>JgC^MxRT*w?_zcahq6Cyd_O-b+1or*5@%p|e&pvA4I4<OnSsHA
zUmLWp0vt4R_AZ5uQZY0r-{5BI=Uu%??lcQSL-7Xd*?dzS1?B}Ze2H1;0B-Xi5HAMn
zdcdo8h*`l{FW#wc&k6qi+S_~0*%%m}KZxRHdH54NS`LcOOq~_bT(RK!G%lDh1K-uM
zv)|?}?mh5e;z|n!1`FYH%UnKQC_C$Qo8fQR3;qV4NJz(W`A<!Ag<bjee=NN;V_nWO
zHoW24|M%l_hqV)??zDQ?nLUw#;ltHcoA!OPW^UA(0?P|EO5YcQ-N?Z3V)NE-Ct^dd
z34^OEkl-He-QEuktGyW+EX2<(b4kqCbYSCBWtyNUejA)P8-jaP*&UYE9CLKLweF^#
z#m?)RHb%ni3=HW97BDWlu_bo%71$si$T$#|Nl}C!y7R!}o^{jlw$RAimw6cuOuseP
zvpq_I<GdP!QGkYE1JBQckW^_g^}Zy-iK{M~C&=o5Ih;H_G_pU1iQ$0w?l1<&3O%qx
zKqf<Rd-O^0>=lS>G3l?uhbtj!3=B1f=|M^#bC?vETZI@;T!;YQIA1Vn=?#WUE-VZw
zr}AG;n7`8x8cLz7Hr?Zs+7ZCuC;{sTflLEq_N?7$s<82Gh6fV6zxTasW$V8Y&Bbsa
zyjV@Oi@kgi!>523f}mcCt%oM>RIqE*BfEJOdR-a7ft7Y^UE~Xqc{93L7#j3bE-*~Q
z^u_U=(_!ssh5{99rw1DoL$3+XWMKFpT9$rs;Rnt`#+(g4B3&#B#>uUavS|5_Z^!31
zPr20kf#JlJg71;+PoDbC|8OET^qMj#>Tj;vbkDB*r&>i5C|*J^;w4pA&nR6Cd`|~x
zl<;@-3788X>3FHk^JGX_6rjQ|Q&Jmzhnn9uAz6Vrpm>>k-s(iZ`0s}+XZkQO{9wB7
zq%LqCd<Ql-xFE!X3h$W{cTQ}A#nrv=+or`64+(#BWn}meI>)v1$h#n@Z}hf;^1y+Y
zVVjtnX1nk+G`#5z<+*8?!!WPtAU8w9dV{G}jhL}=Jo+@OKh9uraPEZ%6T4Tfd8^0D
z@F4i@xdq}u>K*OdvcpcXop4_0&R}F52ANtaSTykg!-+ZPtxlYIcl00o-b2cVSFPFW
z&c<+HIjE#R^VI7R%ccN~kUConTk*p1K;)in)ADtxObiFqXLHSQu<2$v;jz#M!;1S?
z6#a|$9uhVN#Y891Zly`Sw@tl!L0*M~5Gr|K`G)Nx^LDK~Riz-#z+iXy-J74jH$YBt
zu;Yqln$Ue${0lcY)(>RfTKCb3LEvua7Y2qC_acr?P`&^B;mT}KLg`F9q$U78Py}K8
z1C}yIfddXFVIuF>znvB8_0n<6hnBlb85nBB()|~0+%2M@+-k&l;zR`G0Nw+d`~H4h
zesCv)OTj~9{!f?7dd2@dT-m*9P3#XQh6jg3Q}^yYZZO59F=7WevBS&;r6aqtQ;_7z
zz)&Nz+xy|lm7rvzV(ch<qV~3Fb}RFf#TQf=BnuZp>H~0I?>Lk$_vEGD`VTFM%nS@Q
zY|U&PX$!%V2uLPd+}!&D#%&P3A<5()8=7i6iJO5zKC}GU9ucF)3O2?GGo2PPq@*nH
z0jqrAl6;U+pv8Oo1a<vihlB60+Vss&l7T_~ZPX!_PoNSNyeAv16hahi+KR9vd26h(
zxYQd{QIHimY6(q|8Zrv{t#*tjPPl-BsbJImMa)gophRonwyI4>(v0D^q!|Olf%cWB
zepxLoQA}j|_y?K=9@y-Z2QBpi*>gc&I~FR;z@WZMSjHwXUlZ!A%>fn;aa^@b69i9#
zcds!t1pBJ6I|wAZI@f`UT&v0eU7JMEkq7c8D<^00z}nLm{_o)R)R*I4@VV&&op1OW
zm$!vR`afY}IN-kG)UT>)5w(qCu(bfsMD!Z}<m^scThOpa<QI#A@^sjy^#*a?Bg{8v
ztrnZNW6h~59We%md(olS7Eifkeo&~#u^r?QB>cfF`{zW%&5$8d1_lPZX?vG$xF4d&
zz)&+G`=C(I-lYtZT2r_{-DWur@PrgYMYHxpMuC>Zj}!Fu{~WGs<7Hs@Ajl)7FzffW
zY@H}j>k`TQhV7B3`g>wEV1?v^$6I1I-+Ct?XlPRyJN2uB4g<rU<##1NyRBd`4!3Zq
z<C@Dfp>v}WD3~AkhCO0tXb|A(Zui+5ySesZ{o?qFBrPEZ2D<}3D_D}@Hwb>XdJPtw
zaGMo&xPD<s=zn|eUG_l+h7afF7<Q&zE;}3an&GEr373N!TNkL_ZZMDR<nMTOTfW|J
z3crJj-EW2LHr@ll;-JM(ObiFAL8VJhszyN5Ovp$QXcEy&4ALECV3@$UzaCyP<R`Xs
zyfL55&A{;fjO64Dn_`9&AqyiIj10q6V2(Oi`BDDc>{F}^4dqX2JWXbA%hriR4=(ep
z-D$e8Rj3RPLUOO`Y}@U^!r>nimTD^oGCi?;+a3|MgE}I76P7!{`W`IiopKBe4|n8n
z{+#t%?AxwYr>az>7#QxY(t7Ra^)hM#BD4-v7P~{@k%581f_wK*aMKXv#2TI5-iiBH
z#xO8cs2e*9O}M+1VWyS{w}YC_GmtcBdD~$LG5(oZyVK?d?Ygf2CKZ&N-#-N97|$ld
z8_<OpP_+yU_s;uAPTIJ!2o#qfLAyDzN*m_yUCO|)XL`1$(3#rXrrJxHpR9z>LLcm1
z#LnPg!93OZTHaOeYH*gUp5ZyMK@2=t2{Hp6H*8Lr&he%^aOzf2p}6PdJD*BL*QSqa
z7!{IRix^KF@c_@+eo%|!V^I2R&CGDI$CNK}_G<BOQemmJx>5`bexXypew%q}DFf%T
zeQ#$?1s|t}ZV8D0;Puwn&3>A9S2BH@)y2xtU|zILWzo)SjGsbZh&A}|h{DPUhmzdu
zYl6J^FBUhXpJ8EUI3R7|FLcofHr<w<zXpD4d|c!zSQmkzLfP6iVgKq?Yuq<6GCUC3
zz4^)14;*Qi%X**lFi2`ofvR&Th~r^VkeaTeSYIrAI1ZHa3MQ>u!>+kB`=#K7bXd*$
z{JoPq%ZCLiAa^q`Fc@tLgSX^9xRrGs_?!l^#O2&1mn|2p9PV-bWx7xv8reS;(u!kX
zV3+RV+El(esbU&;5(C4WN1zC{Y`VE6HW?J*U{eeD!lJ+o1_p)~t(~)AY`eJIrnf6)
zzAtLqyDT)4--VgsfMHqsiIo>PGS-ze>=FINs=!?L1C}Bh=5EWLrn$7&CP82P2m^z~
zQJ*Z9EdkI$>;sjXTcG}CSTH>da@je^o_hz^3M8)Yo^okx1_Oh|rLXUFI4|Ca<(jb5
z3EW?2U|?|h`nKO*{S>>xB2X(k$R;I!UDA!$i?m*^1nCF~y>|P)kRGd>!#vnH#GL&b
z`#?s6a8>$JSjU>-fvipo$N5>EYzz&`md-*KYj2yrvtmqH7hu33DWM6SoMPyEw7u-a
z{g~q))_~1#`m7vS3Ee*gG7t@?uXsBv)$66B`G)JMq1TcxGB6Z$+`aiRD1s#=U(<o1
zbrR!=10LYjuOHI1L6?y`*xg!pGmhiN3XyNSjB*$l8k|E?Z9O#aa&$MmyS*+FGAY8q
z@Zb$^h>O6zWHjp-8kRpZYD_;1ii*ZLvYn@jSsNI*pgo5RWoNZ&K+!%yemc{GO1&ON
zh60Y~Zi{wZwSgGppx<-VMZg<2yfs0vn(@R<kKGVS28Q{k`UETP`G#I&{>i}bVba~1
zAKg4ywq));w#Oe~34_25m!AwQsR=em46Ym7oZi65z`$oXRmf2nGS31tjDdjx)X13{
zadO7Y?J&Xl(9nAJVa?1828N2(y-Qt8uiH5Aw9aEZalio_PN038BFv8!+gj&6bOmLK
z4{KJf+1||7CZx2W{VoHnG(9)}H+X?B%xEyZ@$6!D2K^aa><kUzH%k3O=BYEV1Zqe%
z@btj514BO~>vyuw1DAOEg>foc&7g58kO{w%m%w`&AU+5;ToAj++#t@gdegRUE{2A^
zt2XVsH&1e@a{$zIkQy*nh%UZ*XfuyA14F|4RcnrGF4cZ1FvSs8r~Ea%AnI5#AC_Cd
zIzYs?jNNIwx0fhOS4;zyrZ(wnl1;m^cc-nbX^`LotsDm_VqjoM$zB&#F%i@>dy{;D
zAuzYBnHy@>i*|2YD3jsKC4cZ;r(jL*PwW${xEC6FEg2M{{=1DIO%32URm{@hz?BMh
zmcR{<p9~C7*1Vln>h;p^<cBqHH#BxuFfjax4!zbq<x;N$$EgJ{v%zM92)|NQNVAB6
zp+P_KImezHHF*Yxf9=Lf6Lq)n3%D=L2B~6TU|^Egly6vYtgAhMN4jCU?^9-m1NIUo
z4k>J~e()EU&}+i6f+xIgLUq8Y4e_^4Z|_|y{qex&yj7dzI@uW-zFhY?fACw622azj
z{N2aq_#=6PfuY4Xz_P_C+<eaoP>TGQsm06mnFr=_3+rj%gPY-|gWAZe-^eyjzv;`$
zaNvI0B!vypPnnMdy#P-nfR!o4=U!hE>{YJSCJw5*99EsGs@9Y7YFhBF>^!V;e9_(s
zKJpx_0Y==I$;}jJviek&f)WG6wsdDjfg4Ug88(XiVpCvNR)sao4|Icq1Z=WVM#BSm
z6O!TFMbJtTm|+n5L2B;xobS`}j<B5H<)P_&l$k*wI`rD*yEg@tsxo$`t*mT_;HqVw
z(6|u39q@r`@kfvq3=ACWv|f99y)>%gYk77P8Xyk)eZIH~Xu}JFg{?s+LCFL*^~q2p
z`P=<Ls_{<-hL-QPRSYf9b}~9Rv?A4~pRSdiwOU%TJPnd0H%gi~q<qi4zUB|C3H0TZ
z19bHi1H%EyPkFE_u@79Id0H;cWX-86EhUDA8LKwU%Q@fjN*x^h!7rebS_}*f3M_}&
z9;AZuKTGJ;uNq5Bmew;FgQr3m7#J4R>y^48+z$yPP@IBSwCmpO;EFR5=4Wt-xF71D
zz@K|v=Px6}5fsx~cFuYjsyBm?;m8vikCJ(kP$Ry0gkDpw#g-lmHbe&=?ABYoX<i2h
zgTgdO{@yAKidsX_D)^`!!-@FYrmv@5n!D<utMg$t28N`Sr>dp|?FzJRyt_Si^Cy_X
z3);%1(8z#V&A`C0;rQBs2ch>}Sr`P)`8;JY@0Vk62x)zWP<O~6haoQg1_OhG4jZq)
zTtwMod`+@ZXDTdLUC?HR8(uSaTlTikR&pT>`k;2Ck`hCM#HvklOQ+;r@lBY$E&Gig
zE61t;Xa&K*z~I2M`!ut3>EUirImWR_>-Afwy({-|o`aPF4gVxx_BdQS1uHRMOx?H(
z=7W86YE?d1?Ox5m@aV_7?559i7!)=*{bWda5C<#S843)hb37>3o5RR(#K2oK_Qk9N
za<|q+{(_c93@_$xJjIc+7PdqKW-x=rskJ*Egqnv&_8(zkn6Q1-8ur_p=g;EIle1-L
zIKlOnc>*IhtaZWgpg>RX!0UCZHp!jlWKf9T?Z|8_Dm*70)I$K7_xFiy_#sfH$p!I{
zvBjOdwByYuATcn(w%WTh?{Zo1-K7kTqVTma3=AE~<(&zOiz=per!z2A&R#Y}uf(Td
z`$f19X0KYqeh+-zImql6dt13+@z=or&H2EGRkK&EaZh4mIB_|zZF%fh7jP_>xPAet
zhG3>BP1!@cd*v8p4s2j#XxJlZ;!pxg#EW6wy$jCCO9fB(!^&`oE>QCKe3sPQTq7>b
z;IM65wYUBi?}B;!3@qU;u*ouTRmPyOX6h@&J-1&l9%uwb@`-@ZYnP{73fRt)4(o(D
z*!O;gMKHr0!}k_2FU)D&mc8wF_xn=D^`LPQ6*Y#2J>d4s*(+WJ(A2c91H7;U;wlG|
z-0M2QUi@9{;h?f^!t(c3ttHw_5Xpu(snxv>(-3KCZsRG43<JZtWBj299N%nVVmNVL
zXKBg8@TS@B{0t3KxL{e8fq|i=WObQE2dGMvTzRT$R*=-IDGxx&$qjOzD+9xV<;S{|
zCv1gJSHlc{kWzf{pd+|m;bKtGHZE;?&cv`J<OD+lPXxRr%y4}7R7sg5;3%lMt_~mm
zx{y5ml=6h7n1-4_DvU?X%{Ovc876eDTC-epDR-^Von>#Oc6&2=v~n<<Xn<eS&QP#q
zTXvY{((0WD9l_CXAn(F~faw$JU`KZ?s9&{7Zgp?MH7;180dszX`OI#9KG5<Oj}Qii
z$PJU_Z1@=xmczGoG_IY(?-1a9l-b&zg^}Gbhk-$XpN-eS>wE6?AHC3i#e(_As+1+l
z7r@N?b^H!^(-Np-Xnd*cY_3=4VquF8*>DC1+wiGhO_rKmQC_l>gW-nOxd;1U$zk6q
zuTKmtTf=NNJT79CIR^?VIpYk5y4|4lS0Ixe@_j?xRdTN*wme?2PlF%FGDm*5_d^3v
zu1;ZPxR70T(b<bX_j-jG!vXzP=y513PTg_>4YYHt0Jl)=ceOW5m@zP1$Y<j{5D%|3
zU##Ewj^jxjMkC^bUR{SEU)pt11_%GpR9jz7-mmQ6rZIhpZ`ENqali>tDj7}Zc~AhV
zY`#ozWd3j))R~2ie0{mL^cA)usbV*{yTcxM2$ql*On<YWegB<Pj1BumCxLtqs>U`f
z{lwVu;@$oKQ5teTqHmjio^r`ep<n{2nYDs}q3ZYo#vk4Aa@_W*Y#37!JJjz`BN!MM
z?)C3gEwHd&&%jUx+Gi`7x5C_mKll2Kmz)RkTOp&W3=AEwK(=VhGceQ{<}mPqtBL-Q
zR9n*whPuyxp_|kf>{r{REK%M7i$Rzj5B}bWW@_KP@>G?IK0`y@ic?h+f@ZDcuAAA-
z*if&vgwcU*nis4DZ7>I!UmiO3t4kaM!`_dvp&w4i-ZssKoyGCxT0|+!<^b4&9tZoG
z*I_BRpzhYX$fZ;2R<ZGYa}Hr(*lXym8M}hJ?qe)lgF9Ct!-ewP>uaEG^*slhKQM4S
zi+gzBf7b4_m;d<-ro4Z|#9&b$8tEVG<s5oYzZf>L_2rgJElct>SV+J;#jt06bmgIg
z`$EB!>IY`72K(wIXWh>H-D#>^4F6V6fR%CwD_3$gWL%SCpZC$(pkTx5RcqECWo0PX
zSJuo{bG~tZPLLO9O)1#mFTtVL9#6T{`m1Bf+gVEwVTR<E*y7!{lbK|m?ViKHaPHoj
zGk!nbhKVrzS?{F8kn#vL|Hr`az}F2l9A<EB727;RaUPkc?K>D4&dqXU{t*9pTegij
zG^}5&?|cUe0<gtM#0SMUdaZ|JLsN6vL>LatTy?5y!|hnEKS#^!80Kj}FU4~3%2Z)d
z*wFfkkt1zoLBjlP+1E6e{^wxlGh1`2N=uKS;dAl@2Af29nZG}Bf~!e3#_0Hg_8*F2
z7G3qm3=Ge+tHX9*;Qv!}z3i+P%tMF7;l+K$?r6zFf&0Q!Z3QG54&0n6X~M8S_tv_Z
z-O$Q$!F9D)$}?KwK~|N!1YYKRzEXD9Xz7;)auzpIL$3uFGBV7W4w}SVdw&IM-RA8g
z4STsZGEC^43LZ>kXb}E6m$4yZniTuI%VlQ|ZD6!GWw6vlSd!tu&l|i_KkTO-$lnfL
zunii~fON*VMTL5H?}vrqU$aZl9KmoP^7leHi&NiMtzlPUX0Xt{f0c26Zje`TA;SiL
zMNtN$jnFZ_0;TRrj2*}F-yF!!Q)O|V398Qu!g!<_j@O)rrtcTqJO6Q<xEl|%1xEj{
z_%`!EVcYGyOO2QrEcins`-8pAUp3r+mV158QN{yytsx92js!tRx0pXNHbze2aWJv_
z-EdvPjN$lB56!<5BpD7|Uwx`7<pP6E(fzVsYuGl3zh!IfnLh1<hA_-R(10%_zE6nv
zfmTl`7%?<#PFQYZQ>M+&FfZ7Ht-)svWSA@8NK9Vf>fQbSw+7iUO#JbNIqq`V*>C@a
z%bS`O-w8>z6_R8)Fui!Cl-%chXtllI|GE+ngV}e5ToKkmSPvfG$Yw&gch#w?q%d_G
z&>+8)3WLq^2|Nszpq7^hSoH&5xfXT@0lUu)&XQ&f$3MSkV|c(VX~Izba~{;93(298
z@vr+E&VW|If%UxD-^d5caOa|Ln{w~&dzb;LK#s66d|3J>qviOY*$fX{TPqk&oNxnA
z4=^0)3~ORm;Fw=|!130)nbKwq?z>l=s!}pzXwd)c{N=+5P{{=jdC(?@S>?f<84F9n
zb}=wC+>>4n>FPE7Pk-OH?$)tGWsLQwc@IR12v{|6aa7-b*S&=KMZ$}O8ZC+WT*qD>
zh<OoaB<sMwgZae+o%E8lx_=BCdvkSOR(e(37x0|+?K>mG+=S=+Yx1>>85+({4Bpw-
zq5r5|+-5PuhjkMx7+y@QPK9_~x=KWbf%)NGs||eYLJ771@)#KG9IZ1R_<Z}&^c>oi
zYIyg1oip2snHZ_<M*qw?iMjE`TGNx58E&kfbE?qA=LnzvovXg7ed-MFr8?Og<UTTh
zOPJZ#Q)LYb?in)}i1^Q9yJjFNw&tz3-&40728Q34`J^PeW#TH<%|0dI2nmq}zSAq`
z=<oNvs>uB0j6OsRLB4Uk8*(~Qe*31jtv7#iGi<0oefOh#QM<U!Y=#ff%7Tm+l*Pb}
zw*${~PO!GUt9!x7U?5Q(%Dmbrhr!J3+)9~leujknyglz*;t`Fl+UZs)9j}%Z{ez9k
z!tMK(u9O{dd-|MH5g^x247SWIpU(8Zvae&N4a1MQ6I(EX^W&0?1mEDsgSYy4UNJD-
z;BRJo;5+X*G&${hAJxutp&8c2mEbVm2$f-IXbv#HYNI4}t6}TiCn0@D*%&s6KQ1e`
z`7l57ZixRUh6m+tLQD(Xd9ol*Gb^etEYi1RXggra9}#{x#P~2<f^xX!)Z&Yb3~%N*
zGJjazzH8+lKF~lN0|Uc_M9Zm{J1j0MGN-JA)nCm4=2Od`e3=^w-qQ^-^{&xH@ilKx
z+~;FB@a}1d-gN87uDttabg?vq_AFs>h`-`nx*j~)b|YrDj(EZev0Lm5p38~w<eXq+
zz0m_|AX}$gVAykVGt^Rt@3F5YG#Z72CzV0{Y5Be{P$`BBn%|}!N?Ug;Hj07a&AEte
zAG%%dh7@mP*w8g`3d4(;?2sAIV}7peJa-;nU}jkGJ?3?TucR5n?4PrOcTSUKIB?F#
zg?oQRU&l<?PG76{ySXGaxM7RYKpq0)g!8YKRdsd97q$1^Sjx(<LHTXpkM*Bg<16?W
z6H=7}87~<3b3w)v%u))C7;4McCngA&2HQ%RF-Xq_#RNOUhS;|Y8jUv|(ocJP0d_Hx
z)vCYWzRdn7q46BHmIQ1Yh<H%!^OR58^7P6(9efN4yKnuRBfRm@YMaB%8#YZ`!SF(o
z8`6bt@U`{gYnb=hPxc1~yJ&*3yPzS+W8Wl97~X&S1KsC#q4s|12?yO*%c_E4wHU|>
zFn$w%H{^3ig@A2N%AI%Dm>3eOkG<`yc(643vo&MHagQj5FK6~Tfznq(^7KW_Z0D-k
z7=FDAJbYl;twd&S#zSuZPOO~M&Bu_C%_G%tUH8^=*bdNLZ+C<IRRhurvZzXBdC?kw
z5DV09KR0s)k6F=^_v{P_)kRv%Pv8BZ)Ee%4l<9z#+a;z2={nFW-arZTku5XB-e*zl
zIR_&;HW;$kF)(aXSYDI|N+c7EA?7voWluM#xvb3m^bNGcVQ|<#=QWJIpg2wN;~KLY
zCqn(629+={L?^1-?8yr>zv^SguqIhWm*LlvyjAYt)WX0Z|3Sfqq3V_2#sgv!W(>2f
zPp`alf}i2RVKt=|b4l0@ncx6zI1AZp0dWI_oWDG8mAZAn1Lr?~85n8;{8BAve_k!~
zFm#?JL&R;56oxMs=7NttNl<>C#N1IW$Z#QeUEzWDt%uptCbjhT7Hb`U#LRHR$M5N_
z1&kG!`@ijk%z864<n6vD&;0BU%u5j4K+Dwkb@C-7#}{cOe`I9HS$3DvUQ~Y1$@}aK
z+0van4RV_xGbd)nI_3=TB^h4mUbjeymYLFaR@U+lGsA|NWfvMArhhOy51Yr7ogQr2
z+hJ^L6wtkE<-94d-Z<R4`K$9*9q-r?%AE6N*<4Llh6BHjz16FD5WfAbu{Fb*R24mj
zsuywKwKEI{+V-R~ELb1&xM6Juzup~BVY6?#%Rj}|Ffe4#mM~$+kGkS(Dh{>4;rZPa
z6Bs|kw!p%zW02`vsh5!K{;!RJ;o9_I%l-~~7xw&F9c&H0Jxkae`0qmY)SDIQnI*i)
z)A!Q}WLq#jPv38kH~Y4ejBGz<c=|n!Xk%bleR5@t+mWd|9{A3?3{8-~9`2TtG)RZ%
zyI;ru!Nz48`c}=(5)<V9d+^x4XCdp3vNLR$wsOY<-|k&2pFLts5LRBvc)`3hSa-U#
zjW)QXxK^fO)G%M}2!q4<JDMUl)DE*fIK0p0NJI|<gZAtWu6ti{B%sYMhwo2A_HDmE
z<4{247N{=|2;AK1d0#dg)|Fat`3-MV|I8;LHSVko8=638gU&h0b?=F!Y(sCa3%i5=
zU5KR&Hzv5AV))Wq{^Ee1#R&%a&+dLtgW4Dv-k)CC!z<NLe)iR}Dk11pk;C)Y)e{s~
z&p!1NHn`k&;y3KX1BM3^e3c(XI&avx_}hC9&?Iq)pK_9pa>ev?ZU!?mAz21n({S)?
z?Hc{%>njq4U~2)2^voEV7c#z(eSe`b)*y$$?p&h+LqqwNX12T(miMzDTdo-x7Tms-
zud;9DM8@607^RQQv|TIby@_ez|2-}Er=A-_L%D9bkz6Ooy)TPv-Pjv?dycTdJ#1E_
zW7aUEo1tOeM?TpbR)^UVwD&y;Ikt#}q2ltD1&kHfWABF4{f0I#U+l}4H7Ypw71Bt7
z1~q8lDRI^dR=b>8!Iomm3<uU1Y28<TG&|!#?7Xv#KPF84!SF)U8&YUC^xlb^W8-#Y
z^B0B}ovzin%r{usr5-%~cV^|B(}D~SmV)A?MwEL`Hf-ZkL)?xqW#)2w#PC?vs}S(+
zWRUH5!_2Q1>3>=)_0YNRjT95Zk5Ip-7D{T18q003_@?HmGsqhW$urc3m|wm8X`v_h
zPT>vPyeBgLF%f5Guzfg-?TwFh&V%-rhlfEUFhAsPIWi~DJg|G->t&yyE4mpj6k1Mw
z-SK0QJKH&UG&j^)U4=~(Iq3Ub;gAPs!X5?&{hqT=TJC@H;XBaY>%!sC9|=93A?FmR
zgntw_`9Pm9E028Hv|!0@L52tMr=RyI7arJ+7|3YPwlyl?FAcWkwFNiOK)!@wi;&V_
z-SU6-8XT~oc5v}~YNYf}fOXI7oq4NPb};-{F_DGw#m1fBY5IiR<x0#yPJ(PcWXgME
zW!a4bbEiB!3<~USK?aFkb54El_+j=%CV>?`A5#+Z`|XQxTcd(=cF-IRvz+0;!`Ux5
z?B1NXr^wJS|FcE^UGalnf95i55LGs0x{y2#T%;cO<(JAPP*`19BrkY=5yOJV^KNHL
z9av}ifZ?`bHve@-2A)Zd%o{ezmj>H*LCb{&pYuXEp0#15sD-O%XYCBnSg7%1L%!wI
z_em@aY<V(*@ojQUYZ8=H7`7#<xH9}&mA7hnM@0bSn#T=_-BTG~SY0<t(C3kESo`ym
z+&X3kiB(TGAD#H^;r3;)Q*>Tz12u?aRtnCkN4K=0Z-X)Gw&Yvq7BVqN%$aj4)#cB^
z${%ZQ?^-E$l;wa~&k_!Y^O2BK*I)nC(r>7*JkQ{8{j3Scn~N?tHi*`5X@A4Oz^1zV
zldaOeOxe2E3-h$zgD)gyU|`tw-mU$^XX_4i*q8;wmuYul>u4DMZn_iwYfbQv4U0Qw
zbO|y@%$jp*<8OtCn=T;?Ij21)F?_ib1DOtol>e_|PB+xfk}_k6HqPb0&B(yh<jA~1
z3_go#weD}&Be(ts@Or!X`CZtA9m565(qP-0#w^jFb(bfJi82_NJns0hsPxC$_FXII
zSTiMLyDef_@Z81$6#oZi6=^*;V(!?n*J5XXN2><Iixo%T9zD7EQ$uZLJFgE5U-ZYL
zANUv&5~h8(bN6b$U$t)bsm;((b@(3pJB+E$NFUb7gr}rkNACsQm{;icG-Mvb0f8qW
zddiRZQxALDR5Nb~RW4+@kX{;W>w0AFB#;XdbdNt``Z1mLG(*YMY>5w&%Yxe1{+t%P
zQ%s%VLb>JC_ou7nT@QO9<sWI=L;mONL0aMVfo3(@ulRnI5VS90i!KxqG!A59sGS~c
z+1IghQKIVk(%_%fj0vmV9<d}a=zt5;hOcu@aX*OXD`U72x-Rj+JxMc$X!DaRf2`$W
zc%j?OmXIq9zE_fgfuSVY@2Qp2z7>Lx7Ur!&#4XHjhvz+^Y|+Kjf<KzGGJLsvL&q;-
z=H8_YId?slFz_7k0j~$#FfF){@lUoM7lYL)Q=T6>d~S!o$^87s%kW}nWc7LGKll1~
zt(*rseg<Udh01-~+v+WT!wLrj220W1@Sa%JGH^rUvUbkd`Ib|?3z-;drv(3$6Rg(|
z4>J=KWw>oNNrRy_-27^-iw$I{eps1~Rzp3gP`1=ybzr}{^}0dB-t2bXJ6>|zp6M(%
z0)?}=<<!|7KUPIV%!ChA%1#IOU8`E=KLhXO202ZlCD;^NPcVF$B-_0q_VS!l8+{lX
z>@wfyFY{`h`gg_bSDrBpIk!C)G4LGm0Uyx5VN-D+<DLh$%nY%QZ?V>F>tst<{qM}m
zm@W~97u|DC?Nm(NFm3m)mG4}k19cZF_f2mIyBmTfirugJn#R8ixhS7=c6!H*E@6fj
zGoSuFJ25CRHSIdn24UrmOa=mwm9__7^`)|YI20qpP|{QW<iK*H9EP%_X~7?N%Q9RL
zXX8Ckg-B03=A0_s-N01<KiVGTQ!xIOu*&tus(j0-(i52&YA@WoUK6ag=FPgiRqln1
z8@QEMG8qU!HWD2;b<TzL!~EOblYe(abg(q^Mcj#-^W%er1xvE-fiPLgM~n<#9Q{%s
z)vByX4K$x>3@ae+KL4Hd<Gc^JEd*MqKKbWDu*IO{oPO1J>z(yGE-2(&jklayJdueZ
zc3QBdX}j>XXZdUmb0s^)8WdN|ex<3DHx=BYS$%S)OgGm9R_^JHFSxGjJW#meYuewz
zo_ipy7StCKVR*3$QrtO2AV#BQrw2#w`~7#3`;Y4}uuS~n@?r@IhH7|<`*k)?^v1qS
zzoXm3862jcReI#nykV2;-H^0WrVYl*7nuwcjKR}X2Tq-HW&Lm{M24ZHC0ne(L+w_>
z+TYsCA8og0SWtYc(R1I+_OCYAeV={@=RXF92EOe5Gk086{FA-2;$a+oTDUo}3^v;6
z(7$zesF+pTTC2^%5@7c)**l*x%zT<C!)}vFdJN1)!QeH-Yu-eJF#O-S*CJ9crcR8L
zfj#eH+-3&8rbOlq#+&DK-G9%}urAV0UM7?GTG9n*bJ5}Z-5+U8aWh~8m#}bWV5mx6
z<9B1%>N%&jMld$$fg8Z`Ud>x|UM-u|#nTWg<tg5<5EAf^<509M#f1;(rztT$IIuH}
zvHipb#vA+e*ZpR2nEoUrPwCO@O9{H?1q}tk<01?U4&_fn{FEQLwSH)N51Vj>+r7a3
z)v{UJc84{*{bjwpNH3US0e6ws@n^h;+?FLVCtP<EVoON)11`21R$ERJKA^uRo#DZS
zpFbolEZ%NtY)wmez3*Abu_RUozF2F8m-?;;Z!Iegw(SI`4+e$>m#5vYl3OW&)zj&V
zf^Kw1`aO-<!r;Ju=FEeZt+v(k*b?O3g4hxg(!ldm4O8cIb3RylyL)ov??iD1nMI(A
zVsBalvuPO5n<Jpo=pqwC`zqO<C(?B{dJqN4wYtZZOPwnoZp&Mx4jYDpd)eW=PWf7!
z)uP+pdAs-=<zkT8H0P9s(mpNDYi5Sag&S%mJS7_xGv&ABO$9eE_m^rZHH4o%!gQdq
zsF#T^>~6^E!xy-D5Bi-c(yBYn%)obbi|hoJHP7AehV&aji>en}HvW1bUJSRI=iE;4
zE?JNpeys<!FJ`QeDti>|cQi(u;eo<aP;KS^_JEs>JM#u{WkY5I2V=;N==@qi!2_#n
zZm=F$I4g_IqJYo&aGs3r{?5}YWloDTSg2S|o&7XHW$6Jo8)vB1B@y7d<CQ>Nq8M!G
zXU`W6ezpU1Y(Un7y7UicxE$HMFHs#_CW<jwsJx9UEoMtJwtuy(YLYC&Z-Yrj49rj1
z!Hua1N57{behm6|<L2CPKjNgrATz_Yx|hi!1vCPce(qMI90LQpBIxw=`b=iCqG<D}
zs>`7E$X?aU_z<i9=hZ=TXy=CE!=!TfHFOU1ulRmV`N#L>iq7&Ptt5sA4QG@dc_?m}
zxbX(Vjp-AYFiOn&cJ%4mN1$r=!S<RtJRf$=jA5`a2ySI)KevJL#!gU%nZej_ep;~Q
zH*2e!j&$gT@P<6;=nD+%XLUn{d7!QVQC0antDi=m-5`AWXV~U4e+h;I%TKM;d7fW)
zl_}?m``wWKMa&8DZj;y&7A)&x2ZhvqD{;XCtJRVi9~`J)=PPMVWZn>6|2#x5m4~5b
z)6@4N@lzP2cdnkDr3YP+*pPQ>rOx@Z{|oIZrhbMEp@3`#;|s;5!M0m>dpF*-_-xL`
zP_wP9|JVGkhTdLR_5*gkOLz|mT=g~W?nr+MipvAL`;IbySbe*D^6`!e0bU07M+^6w
zG0NB+W=qgdvz!_n$jmTbarq`2mA}3}HW<R2X}fY)*;ia$l((uHTor=s<(V`W-X=V}
z8Pp~$zcF+5oKw9Oj1A{6yz`&WDQ{L5Zhm#~4~84dCvIVsFz^QNk9|-({S#xw<nKHT
zGF_c&4Sj|=3}vq~Di7!{Pm<(e*br_x_37@T_DlJsqxqy}bn}C(VqjP>`&MdT`m5&f
z$OLGcjlm#h-)b0JVg|Su**5pL_VQ1$XBZCHZLPkX{#LFu!8my*<A!|YPG*CIU}ymN
z9cBKY_Fj^~Ld4jYAvWm-!<(Zs_Zu@L%rDYfUbnb`AF*_2@vVIIJ>Ofm|J()}afG;r
zfq|hdb*KNw$mbh^FV8u(vxBk0cGi~PmmAOCx$0{=U6$du*(3`F=TLCt<p(Ir85r_^
zDM>Y4zZ*Bl#`OsQM}`k4>$Y51X;=sH{d=wDM$?QLHe_2)ecUm_^~l5xiOKwke$K5c
z+l4<YOTQ1B!Z@&744itwZuzw=Z`Ja$a?K6ar*DRDF6)<IIN<j*WZm@Y%S(CWjl|>`
z<|nF@GO(TV2A`o<;qLb|#*QI>Ru@}?|FbBTk|67x2X56HitD$r|7Tz*%lzs4Z)VFw
z=Q+8c>;amPS~2I;r`<2s|7tb|E#w4S$?(1kv3~MG@aefa=TEiH{Usz=EXd5TdkScf
zW`8S>d{Mah)ar5uyQ3a&7<lfSfjZ#&#tMeG^6J7(e_muO$}!lTT(nn=u_WkjNbvW|
z8^kAnV^Cl?aP29mzVX`hL9zRrB(%C|=sO9zGbkee!@8M}ZVkjOU^1cN)v~IncfldH
zZ|+3;9pzJDNKh}*Ixc89U9V<_<Ti$ySrcC{N^JVJbm>w~kcJQ2yl*n>IsH(B!LB=7
z-~u~e@PT)-y8H~!Li|#B8FGUCQh&;Q)L(e0z0wTYmV2=-^Y>b{54)c4T6qTEpq1EB
z76z@77#I$3xpVN(nrd+Q(K~~&A@|fu8U62zXYb{d2jzm89)_A}6Q3|Xcn%4O2c^r4
z7%Q%a*f7)xT~}D}`PH(hfAQNcsJyxJiQ&N-TLBJ+4~dpjKR^B3s`Bu#*xSvpmX_>g
zy{2EQ%qynn!!P&*`3Qs)4uFTKJL{P@h}S<2S?9{jkaO`<+&`ZM9}<%VnLf;PyTqRG
z;?=TU{T=NKpM!KT<XedH9JrmQ?>DV|aa{*TgYEB&am@_B4lLxl(f`!(z|1v_4gIH9
z%D5jfQR-{qlz%o8+UQu&T%`5<v}?ew=KGuGK&G9*=0S*vbBdL6HC!9yCztt&F&t<I
zHy^yZJ|vcx2A@63aUfmFQ=Xx2lMOhH#eEOeW7uyhD#%d%OxFB@bZM~e`{m+Nt$TmW
z3jWB$%}{eiN9o)W4*6{v^E<&B7#Lnmm~(2QaqEUjPqzzxhux+Ku^LpmCawmzCfnvQ
zzd0G`a;8}8ITJgB*;H`nf>U5yl8zgL-E9wMh7X^YJ}tU<Vl%itdk}6pHFzV#p10o~
zrN{~LD={Vb%jN0&y=&$D(sNjJgMGNAXnirm0k<Np)9>Hy_u}7ns218ybuibx|9##|
zzPfBR*b4iIPD$97Nd|}ap!RR=mJ23tjt08;fChNk7_LnXwv4~$&B3?r(Ym}<J2e=8
z<S6qp9N4c0o(OITpWDUyVEdkQhJ^T-;)Z*f?YuS_V&9&fpL1&K4#tMkE#LXWotoE1
zY&m}j>gy5@zo*qMe-;`?bmqgh)+Lzw7bP*gfiIa($kbuIF?(~zjOQVJu6zt@R_!gH
z;eKS|g#>LIcIE;Bw=9N+`be<-4C{AK;Xd#ilq}v$&O6F-pilQ!HlKt1-3-xhuino&
zwe<vJL+F!`efsa^TUevv+hH7zKMC<WtKBkH_tmmp;_$j*Z7_63j)5V-{Ay9#`J@ky
z2mZ~OIhU1Tjn?ua8NtsT7D7@vM`Q1X6bCXDaJWS=G}J@7z>v}Q{RSpN38uo9j2n{q
zSeW)+mD{xAvca3HD$9%XiWnZ)zWv*DUnQYh?Ck;A9^752X@SgZ&TNM@51@g>z;GZt
zZwXWNSKZ}FY61)!x}Mq|p1C9;``99u2LU}Mj12ldPzx<YIS+V&f`9tF*z5+zf*VZV
zUTY{lvz%JIlbK=t$(1tt@5OKZW=pW<fgSAgVn*4{$*#N`thnLzBh1!@_$$7q-5u5^
z55&c8-Moc?A@1ru?V8DaIcGsWE@UduaGS-@@c)W$>3hg|6Mr79_F$-c|LxHeO{KaH
zt_IneTdzws+{@yRzLO>K?G@M|!5f(w{s;R#t*D%T;hsLj?ZWGPFsCd~F4DSw`l;Wq
zrm419e7|bIPdS4*=mBr?!2|bVw;FF{V2Cp)7cM(gtk1xnx`dD6M=LvcuKq`Sk=Ak}
z#)!`EJPdETvUv<d%xAUjweIQwwX44{9Qbe0-C^8#Ana!^ta^4X(t0jvcu{iA(fiOv
zTMTQS2gbpyJTL*=iL+jM_}<^S!8^sQ89w~q`kk$wn`PUpb+zwU8=4J+SQ++QvD=}0
z1YD=<&*@@*@Ew!_nU~gga5d=uz8IIxP_;f!>-&`tmgkg`<^@|$vuBtPJk#yS^@Hq;
zw^QM3L)y384>_mw$RmHlw3$1g4oJ{_)@#HvJqlWyGd!r@DaKLLwZB;F-#><ir+3bN
z?wH}hv@K63h=K2{hcd$lE&c+K)(?{oPGnd;`xIA$?&m^#1C!JF<@2`kRhNqiex7q`
z;|s=w9YtEF?<=nRBiyjI*bmw;ToC<C@S|(`hH0R&!%kRmfQ$p<3jezy{iiEcotpeV
zmis*o`odrkV>$J6*}G>G>)AGhZZ8c!>&kUtp=2ftLtUu(RTCvK$eEt?bGw-mOt*`x
zpXNXM?g;CFX?H-4XKrDMNo6+<xV-$JdG6NXR)zx%PeaxzKjOc8_}X1b*xuv|vX)ab
zfBUL#m^Tx?pbhL6P;n{R%gQ=GZCbFUxIF`pzu(gxcN6QD)ZN%6J&~!P!!3%j!MrjN
zTx<TfoXUD23Y0CPV}ctN&T=`j`P;+bIZs2DEn){<aUJ7+<bGEB+z-;w)hZ6|PeP_0
zezN`xYj*S%UsGYkdUdGX8@hI_lv956pM%@(D5Ri%#NP1m1Soqk-l}Fy*j=~f{7!~~
z0yizjhU-^-O=I<<1i%UIPl*~^!_~WSb9C%a>=Bk^kT1C&7tFx69MlDp$d<D^8|s&;
zRmULF1|BF_n|Gu0=>o?6;H%m}<6sV;zRbT%qB%#lABQ>xP94~#Ciqdu^oNMMpyBzI
zbGqdje(5hS+Oy}I`;nQu64j3-u|5dsHDP9W|H%Q|u3J0j)KVRWYoIww`KM7#JW+Q;
zPA4*VFMQ50|Ap3aqfiEhFVWU98OzdcNFq7lH}6rG@C}CdVTTtTNPGA67{eTGXk&+=
z;X0@jv!A<W)#8pB+lzNFG}J}E)3v>9_~yv}wX<IZZefsFH8G9hL2hZVuDGs_3wVgl
z{^tsb1m5l9>YqDyOqOJj-j%&xmBG2(_zS~>$+1sEmU%HW)Md4EoxQE-eBj$(1K0xf
z2Ooa6G1<L2XAaw(w_)b4mGfMVGyE_Echx{?#QdtSX=g`k%Y(~0`#;Xw{&@#OgIrem
zl=`c>Z;lkZ^tf^#P?XMOXQ(^f3?5tm^EiZ$A^Y<@#s=S=Z47^ma}vY^%QrRnmtK`~
zVqvISBCBSy-GQ$x%`)SG8!SP#>w@Zn;QIjw+J9VwHZ$O{!tjHmI_^QS?(>4Px9_Gg
zIP`DXeR6#Xm$mWA*{?kJFvx70SjO<6wlr9`-XXFBoLCPXKf;i`Yp=yj_ak%fFhpFA
zt>$HXAfIe`VEOJWeq|;G+X=yzaeTsA?OcEDzrA~}(WmlS`U7X{J4GgD75)QEF3)n~
z8rZ)?DO_Vx<YtRxh*0>oC~vitrNN0Ne#r$KA0Bki@qN2`?%c?~i+8WyHD7&Elk8a+
z9jpECR=qm6rnuqh1z6}NJlS{4d85AekIeqH>9DysxW5kgzifZE>|9BhZNzG;%Q+K+
zEd`hva@x!${|TA1!KA;mY~?2=gR=7~EDZOb#(>udDa2_q9`N6Ij^RLm(OZTeUiKy3
z9XrB=BX(c@7NEpnkZ3ve?k$%Urov3qoEJlzOAQl$XYn81x8}k08}S&WkqxWy+{C}H
zayGmAJ#`RcFv!gn`?*pgapk#R3#$W?7>>Q0*~0MP_OFGj<CoP0fe+)~Hn;Z(gMD7z
zj&Sy+=cn>Dyf3-CPL|=%@>@9%0(}$S`rSU<$#8(>X-HZ2=LH=%rpxPG-3h-3dvSRp
zKdVhAcPco+f=<(lj(QI-7k)(ly>RuW*L5wH?CrtnbDxIrxiB(Zo)SFsYUGng%}ak>
z;h$UipTXylu_5Du^4Xf;JAYbyk1*Ij_qogP!|yp4>xcWl7Vhrv;9lAoXmNIBMFAIs
z+A`kG)xLYarLud6O7s5s1KoaZkd!OGB$4;S>u0&^?V-`}Av^DCziz@gXfe*faDVZ+
zvbqq>h~0CoKI<$`dN0o4<KveqCOEyQd8u`962r1bGnX(t`2EFs`vnGYt!2{B@<a0T
z;k{N*enx#{_|f*d>@35B^|3BT)VG2i6w}GXuuO6Jrs&zMu1EHrNO)-in|7Djxb6SP
z5VsF1Z`5IR6x3A=4D)>KOTOopX>O>qF8vk>i6&mlsgW)*UEI^&ZIj<6oywM=HP4fa
zq3#4^Hf_Vx967chm8EkZ2L5IEA^laVaG3=|{d)Ob?7zzsLi~!gwmv+tE`lLp&#kRh
zf`Y%3nwDOMr`IDzTH&St7xz5ytl8ub_7&VA3=9krP2IQdyCf!xl)d8FGUrsI1w+D}
zBCX9GJ4A%n9NB5aY@m962`j_>_42!1U1A``S@fH!9~kS-{V90A&sKt!q5f%7-Hz`I
zj2Qk$+n0n37OwU&kXj#gxG{Dj!+{@LvP<qV@7I@$;DlXl#o(s3Jm|aP{8Q}ndY-33
zQ#9N~4eHnVW9NRXS+>bQ$~rgiWv2&2!W@Wu_}3gMwJ+gb%9h|Y&y$;>?#52=B+Z7i
zMOy4}3=H;b`D*Jz>=^z%3Eu6-@S)a3x}or9J}-OOQznMT7uTKbE?dhs%^#74POXe_
zJ+iXqfoH5HMlRmK^Y_ACmm_N*9m;s)a^&}%Q$8vT26}IQ)o6-EbRO@p2+v|z_H5=6
zh6l&LIG4){=7Yz%8+6MQY8vJn+uy0~=rDfD{J{U*ZBwR(_ZRr@#=69;7VSAz=b}@j
zwL6Ki;cNEwC$78Qm`^W<H7*Z$JPlc=^eDvc!;*Es7k<`(4SCzlwceV-J);m7P6zs}
zf(<3+o}P2cM~A_H@9nM{O}>bk-E}YCO_gp~S*d2o@IzBv@Z$>b)Njs8<%7(B_WXPp
zC%fujASYu+-tDc74f4fl|M_~()w$ex9>TMLvBC7z$~SID7RAnPyn4Z~p@<E(766`r
zQeMe*&GD*@dmLi+;mNtFFsIGC(p<EOwX79Z0v+go(f&?P>7J%k&$(2;r#?Ci8{#ad
zM()+?W(<3_@tj_09>cO1Gp{f_IR4c+T-q^00OY5HXju=r2h$_d86I>OPi6Q~nESu4
zSfl5>A1J8yIkPmFo>+Osv7o!-MtFUMBq9wxTWu?{d{d)(`ECBYdpBXEYVCr1&ki#@
z{uJ%^)Ju(FgPi5ms`)i5|7-|K|9in!!;&HRi%%BAhvHugS9dFJ2k);rAa+aK>cIM$
z^6#!PzP^5nW5d^Vw@n!v=3n5y>*`VyWGyjwZb!tE5I+}YhSigUZ?3(bkX^Z<ND4Mu
z(9>ZnvY|xW3l<pg1ii*-Hh1y58wOs>EvIT<WH^wu_4Rw{)b^>rZt%~oj%QGNJ@W;_
zgXwcL!A-2&8q14RDjMR$<h!au+#1$?%{VLh!1K%$LAOkGrF+jq_P8@9u!8QaEtD7h
z{fbw6DLnafY_S#LuGUD%wEOB@z8F>o!(DM;)feaTz~@IaEP5_w`aRWKzDZk-A!6Sg
zueoz8R$bXpl<viMV2bTzIfg%b>R!B4dNfxE6r>wk`&#%uWIt=K{w`R!u7@G|bxqxl
z?+SGd@t67UF1i<|t=w}h)$eF}JVV5yIj0<5uKa!^TiP}iQS_*Qt4iSrso$`3U=l3f
zU7f1?A?O6mX@8iClM?o1y<hL@mm2QIu))T1>go=Q(4>f+mG&jvsq6`-=6Uin)J4i(
z`LF^!K$0_)xsmzLuAdL@xw_PZcr~p3yfK!Up+YMC+xr76_Ga=sFfsV+EDyT==2i1K
z>nv{V^0n|lvUn1b_ATJRrK`5T%}>E%%DZs=nw-YzPOwt?LHbrp!|Plei?_yqciy%$
zi{XIqsg-ZG{d}<e6_<8+b>TcsYlh(OK1~cCvVSeC{=f+8lQ!s<sFXCQC(mU}_-*l>
z*=Awgi&p{DxlLOGt<SF1dBr?2iK$`v#9+(Lj$0Mk?w*NHvlcfNr-GZC3=9$b=bX|}
z(tEqGVd?ISz2=}?0Sg>3eeL0zv%QSRR(@lO-trUVoQ%&0Uf;PC{IzB4ioF)^r^+>~
ztX6Ym_)+@zLaghNwL##Rb1f^<(r4xS@cLPMb*b?S>!mC=q~71!Dc_)eh5v4)OHEL)
z#Mbb&4;$W#GCmN08j>dXai8fI#xO+rD0pJ!6}g7#n;Mp`Zf4Y<0&B;DT?8T`rq{iY
zQ+gD`V31Y1?$&R!bY6xZtd>*nTJhT`eY+}n?a}18ISe^n>62I*)RP%Ot%HW#VwJ)M
z_2PSNF3cNl+EogOC9HgNzwzU0ewTYsL-<ly8SIyvzS|jM7ctxa?}eXz;En+ULqhMX
z1#NS@WUmxxu}5^yHdDYDol404wQzSwN54?R#ocFC#&mKr)cMW+zc=IafyS>Em%D`<
zd_Ve3V)$SJZb@uE1!_$m5VI68J8*f1{JX2XnZ{39Zd9bdox^`X=!<i>{El5=(Gq*-
zcKoni{;1f1;m?9=8=eQ<O;~&9I4EQp7#P+BN?$1u7hL~@LA!X}6;NP+woitXpMtfn
z89v-S)8CkBadzdMCn04|LDlEiyK6rG`aYHS+A~n~{**l-*k-Z{gU#H!7q33F^?QLD
zF$bnu2$>wX3@U+oGmBMOZ$x}9TgRTT^PJM7z}`e5y<#o#MNAFvCkO9b#algv``Riq
zsR-D1tpwX5t<7dD9=38Mq^|qDaCdkf)L9Yp>R!lAnXdc63!dX_S|M3H>5z)d^?Qky
zQ>Q;-YREsma?X~0v#n3DW}61rF_@h+&SW|;`SU?=>dxIbKltWUvjdY?z2@on;@VIs
zw^o&Tjhpm`qIGu+B-a;fneR(yY1kjWezN7%TOqGQW+uF?ISx(T8`LbPc6aPBS-}`~
z?q3bmRd6aH=iKcx83}*BDL>L%UZkSU@T1yts+IP~z58ZwD9iu7aJM)!!|W$BO&A|!
zeswMnw|CIe2I-A{<Zyw(KfP|pcLBk4kb~0R%J3iH`r=$JD7Za~cXFYOVE3G^_fm`x
z{EM{oUzct&eZhFm8(#ODo>=+jSx8p>{_C&!wac^jgHk8RSU5H?`+MPP<VE9y2U6a+
z9GMXOaUW~L{t3Y=i+}20WxMt+*d?ZevBCGV&mx8oUw$pL?(gXL0>%9SF$*E11D9vX
zzl*&pe~N2^;j_<&_evKst+_LE(%~g<+>a<NfArgpAp=~3Utc%*KvgEJL%)G7H~!(?
zzrq{Lo_j$PKHN17J%RQmrD<Q*79<4e6>EhnF*p3bysmfsR2H{~Yvgya2QqBPoaZUR
zFfDBvcm-lkqp~8ij%#dsMMzY`$?7d-JR9WxUbyReB>HK)=grOz#pOk6W(?b6{g&3v
z-;i<LJ>hQ}ydGN<=J#~ZJMAs?OyHE-`Uy0}#K6FC;M5&0Q<#em@Xy{VdFepOoM$2L
zinR1o*$$YUUis!)cG6z6D#ZgDSM27PFJed#ww<iSpyO^|^7ZuG?cls|psiXpp<%hX
z{hjIzem6#g+|6Zv><PAdN{=SrI{f6%wBVg9`6Ijd8gi!uTXuJx?zr)hsUdL2cjxT_
z&=&lGtSgPKxgLk5Rok~(h1bE{GcV|_{4)4vLYt*^FW%jL6O<4IO;zR$+XDTbE{Nm4
zZ7L|yK2wI_M#y;;ZidsB`D10@d<X;&Lf=R+`^%(r{7=FAW&Z-=8cy!YdtStFZHfFY
zcK((FDYEWI7TM--GDIscFA^2p?<wQ<*ih*lWNeXvVS|+A)R~IB23*_!UeI-cmEQ-1
zt5+i2w6*TVIps%-4;^{}PEdx*Tn%d{1zWD#yj%HE>yt#2d*7VP_4ydgt{R_YI&f*O
z%aO(4IpPfm`&zg+n3S&gt^SmC#+<5m-x6dFaDYmwE3-~Bsb%iB%b6KGvy;EUcY5&6
zvn%ho9$C2|F+>mE3yIjbt^ARilHTnDN(p<<T?IEXV4()0X9#RwlDMmGb?u2Pdm~Av
z4KItdzV0i%P%Z5CG}yl6R{_(8i}O0g8K$k4-&M^$4WuJy2QwoxIG_}j(oS(3SZ*%k
zV^5HIW&3rpPQs*Dho?=qoT~kial^_Yt<tq`^_0G~@+|%o2+w*?Pp_Qg;_~)-`I<Xu
z;ibL2A9h~_!vX&++u(aE<$c25I+tBf+r@amEz5XU{baqKb3Q5zIlG<<u{At>-TrPB
zZ-QYBD?`NA<GWrys{d1OSM&J3ee3kMKdisr-}~Vd1H+6h${!hZ&i^UMFZ}cH^X-m`
z#b+2Mf7mu}w=1iG+}{hfPe22UK{^JJ%h%pK;Avm-J&7eD_({mC<}>1g8<j&O=7LUd
z19_W4$KNm2T<M(hqpe1VSImL0&A9gH+#2vi97s_^d{FiBIW9-IQ(HV&y}x_ESnL0r
z_IFM#3^`rb>Wc*he>=5aoC!+K+zhkd?QCI8NKIQ?*~040@F3dG?a1Nq|7Y*c|MzpB
zY<%^L_IG)cwPpubN($=#|8ksNaO3Z*_WytGU-`c--F3eb1H=Dx_2oqyGQTfjNH(&+
zV{QNM!_Oma!3`IGN1VTz#3V7l?!~$yt<wMJv_Bq5xqALc`PaR7`0w^gFwWRD$18Wi
z=cow=Uhfg9WZoRF+OT&{@pck(qpQ_GUIF2VMX^Vr8IK_$^4G%ZjACzg*EY}Jy3311
z1WU_aHfu1>*aU9)$<<powOp)R^L<VdV}i8JbR&i}ZqXaoFh|yf7ctz>+8+Nmb-&!d
z5^=$JGrK$Aoy*^+ew-iW`!8ntd$|QugIDtQ^6mSzc=7(9_t(#RGo6j$MxOgyJMo66
zmYL6^r2QF>z1%o=HKWA(nblb{_Wb%+J0G<E%b1s)VaB3u>t7z*rz)}bm+k$Xuvx@;
zaktG2MFo$a;$EC`9$vPeF1b+k9^@?$J`nW9dHac#XTDlCom~C?;qE!7Jnc)$AF(8K
z6={_&`?vH%!j^MqPp~IM+e|lMSmPIa<HX86y&dMK_!uUC(^PtQJ3irJ-M#v+>E-)U
z;`UEF_-J)}%E$e6E6rTqFZi4McjxWC_5X9yolmned=TkVdgP?aI4!+yM|u69hsAdr
ze#OmXbju7oe{~U~#QM4y?~1ja3x1qEBjJ<ZYpJ~2fZ)T749irOe@gYZ&3*7-#@RQF
z&^V~5%C$J$`cKy&YJ2H{`7qCdd;`V}ovZ)$z58n2baM6Pdv)hm{@E<Qi@T7?K-F^U
zYO`i(iRIDXXE5YUetwCq;p(gQcQ&9nTt7vQ!R@7?(mSO`3;(X!$CJ0~b^ANVoY^Z=
zf2+RUFMDk&C;@)G(c96yzOJp>h9Tj!Y<@K(Ls(+nj`HF^4?pkjs95`eVezMR^A@`@
z8Pt7koH*xHXQ}KBj^9#z3?Q3t{dg6WVUYE??gf0C;)j+Zt*!c}TmSAhs4@m$QwFMD
zqOMkY=7U!gfIS0lTW5S;bWd9~r{(@Fokx>@{S(t<NS+3Aka_MmGlRIQ0;Ub2^SY%O
zt}W8byW@I<`zd?F)asn;58J<e{&)H!|J}V7Kc;=N`uQnp=g-yu!QS01SomT2d@(M@
zhTgFE&A%2#dq^hieAZr_eq7#8{^uM{11b5}J0oQnCL3jEw^}DP_bzzIz_55)@XFt9
zdP<K%f()`s>sP-233ed^!#t1M#(~!p@2}A8xwrLSG*lE$9a#3F{hiu!qyCQMg@@cK
zL<PTFPK~Us?-pq=%rf4#{>-`di`A>y)fsL-+j)dB;VUS6#Y_BM_lIGFNWWm=^}hCw
zh$H*g9prwRCc3X`?ceKe)8?Ey-Lc}hqsx`VI`_BF_Z2WS@D_Y|`cJxHsdeW4+8Z;t
zHpKP6ox^jW<qErdk(RjNN4LBUh9)u$2~&!+*w>zH*z0Ie_Z(i++w|_5zkc0ew<FxD
zt)3R*7~4=bBxdO^vFcBA->^aORrSwW&=5Ol3{gOvA$el3rMa=Z+QVe~5>Pah&g+(8
zxVBh+*X}u|?3Evx3o;z=-`(4>%kjZFS^mElbf-)<eBJ(TUvA9r_1Clfo+>DnDL>Ls
zire=1fSNf&f>U1$>jtUMhxh(|%s>D2;lTG(WfIo<y|RpCVYnPDuW)kZ9G4^eek3H<
zWLkXCQ#xlV!;o;dNb9Th9q#J-1fjg&3wH~MLPGt(`jacKr1xeo{vPhdIl1s|6=c6I
zD1B{`T>)9B&A`C0I_SCNHp`&*qOxYEGF@b@elNE#;l9YU!OwE)-Hsg>+lAGV)wCG4
zT`XS7eBjp?=kkfcmKoeK3<vJ-?(O(pcI7O?_cpDKoxc|D&aPkk|HhX~VsiYqK7LyL
zfA8Z~28N!V-XI2T6Z<>6E&qM^nd`DAu)JYwg|+>i&kWKBwp?ZRtedWwGv~Ts;i88O
z46iSJ`xSFTnQ!tUcpp{&#L6pm8qdFZA9!Npc4Q`GvkwD9g2<W2Nz!k;VEwR$&{we3
z)!N?sNlB?~&Z*mVFV4AgAFz57;-~aTOR0>7Ve*G{^1G}988`IK^Oj|}wvMmWqNAfW
zkins*t7G^2zUugUhvcR2$|)sX?5jV$^3AsDlltzm5<k37GBlK~l3xDGtyYm?&9OfP
z@BjQb{G6HJopH^bJ@cBU$|l@;6_rveVX1VlL&)sh^fu=AN{{xe-N|&|($f&WsL71g
zhZC)`CTlf=cbPFTFw{A{t}VL8=Pa2}rT1ntv^;AlT(OtGNb3?L?id&tDylYj?6|JZ
zX?AJ$oKv2)^RHVTRbopB1t;aGgNa6VS0leaVoHd%oo>UhCR~>5qL|4$ohYUasdn35
z-<Nl{FX7f__+glP;Km}^|I>mkJ36Kd2G+}Mo&V01u_1KjcX{(wyc>cxf4f-_f0Hrn
zQL^=SrVWh07FwTQdF8!v+(}`xpxO(cRhAoV)@N);J-u?yR`zLcFE_sY5n(S5ZoPsA
zw~yb{W}N(8LQp&jUa!EMZx(4^!e2Ts(PfXgNzRhLpzh<RYc^U8({z`AGE&OB^_6`_
zpVi}kj&Te*tDjF|Z}|GU{hi(Nq7ZS@Ba8>ycJ+4b)_1orDQ{|fn)!a??rjx6+qcb#
z?610Cd7)1{iGg9-1CKz)u<W`W-wXacEUvZ4N?c%b;L_EH|JA?VS$%~;I`!JMusi;T
z(^kD+<m~q})@4rh1fGWF(}HjIcC7BO2#c99XC|x%Smz`CrF30Br_a5awOe7%htUVj
zAjOt>I+xikP&~}_zRG`h?h3|=thMsbTO)rMSib+YFuH@cA@^I%F9rj?Qby(FpZYs?
zh;T9pe>YTmw@+qYOKaha_IGwluRgy2o&st%@hLr8A<Hgi!`Ps{A^yEFj|*$W+Mf^a
z-Tl~p{_Da{$Cr%LUZvFSC|`esVfNB>i=Tv?Q+{NA@sL|}?EB}h4lnp-#PA`cNUQYx
z*<M?71J8U@*b0#!b-5DGcZ+{J-Awod8uwClgZe^ZuK%~^8y=Ri!UlN`NL{t_`u@!K
zpxf>Kj{C)0@3Zc2se2)Jg!jPuQ!B63Uf5cHe`C_2CpB4rOBfSY+ur}i#BgB76-PnK
zsf#--M0ps5KS~Ie3vSFfKKE$FjJ|Jme?R^E>+JV5)kVhTNZ{|EUP~Ab_*-PoUd0fx
z@aMyOkA56}Uhi^b=`LoSqxP?MhGjCE1>2X1TTT_uR^IUO)q~}V%Zp?M)4y3TeApZ{
zx$)P8PuZ?5o}dvy_`J$}#pOoXzg6N^i0Aao)PVLW5~jR+dpYs&TW;8FT0`l|&D_!c
zOTRlc^oBn_J@?A@8vBxGmzY0XF4A%rEKFT*?{n>pOf^GC#X2?y1HHc&&K7Cy7A(|}
zVsLvA?4on4@H+q9xf2pLe{n9qFE#IO&Cl+qA$&@U^!n<4W;Tj2{FtUMy_z9n<Ijip
zu7aY<re@VQ2LD&P<|R)RNqBrUjk%P!#Qn;KkAC~JEDDtK80uVZdl#oZkn*|Z1MBJk
zkCuK?y6!wj&YWmw_`(%vEHO0XhNO!>3wb73_=c51di}Qm=_0M`f`!-k?>3)c{1In4
z_3pLFpSLbLn6meBy)eVSr#r0}4rp9mXz;c9^}Y&*h|T?PXMH)ISSY(K*uJD(u<-j+
z{rRBw0lQ$~6~6Cl84k>!yMp7uuQUAL(~isAT|b|<{s_Ydm1ke?teV0wd%gUw-*ZlZ
zrd*`A9rAP8bAIKWYqr&2WfaO7_Ngupn$5E(P-DiH?YaK2<=^#}+6?Awapcjz!frO{
z`4X5PV01%nSoMZGFE_J9Ki={!e6?}+?}fXCtQqc40u@Bk-@6Sm=SS7YGTf-TS{%yI
z@bP8)J4H|n?7QGbWhI8N7s)O<`((b(TJqz-{IAaC_uqx)@B6d5?EkN)6-zT1Hhe96
z<+i%+#k*~L1sJkRF711KQ=I95{?CjL_6N#V@=HGtdG+_p#utg%SH7OzJ?E6GeTkeE
z^8@{@YRuvLid#?qelZU^r0`(>(~vUdM{8uO?jL+sb-jumny?rim*l^Ls$pO_Q1sRL
z`-I??#;e(vwyh2Py*hT=_kTY6Y7GDU{Fa`xs#)w{Q2BM<d&eGz5Ble?GBO-nsT(8b
zdgRas35IDel6PPGQ~2YP$dAas7iul1|5<qVbe*M%KXb#|koU~*QusH>eLlRm{W1Ui
z{;1&W*E|gN&x7}_U;8}dEAtI2<L{R?l)n1?_iQ*XyI33(L(RgI3^`L~T0mX-&mWZI
zuIv?5|90-svFe=nu#L$Hd)|T9`GezPLrrO1BB%u16P9;FYrWE=|4&2ixgBw}FL`#I
z`9nLXyAtDiWM9{TCwq+-%Q5`BT>O=x;p40JcY4c%+K=%hF+J$4>FW5U`qKArW}-~Q
zv~3EX-@DG7b1KlK#xhRRh9Rf**WPQbD;TeVhMx-lJp3H^yC%)S_CWti=l}k%c81(#
z*ybPWes<*<rAK>zB);CW;`i4gt<N16uiMXU&}h(Ic9J1yPW`oXlOv!pKhV~S_jU^D
zf`w~jHkh9KDgzyEVMw_9>fctg+fX$O4A)l4@7jE=|74HW4ZD1$q-nt`i@o!o@Nd{#
zq_umk{c~x3<{KRIv;O-AG99R|S|`U~koT4G&zw{CN{@m<82+>z?}*s)c$xgJYFCzP
z3r(l}DlcBS&GNm9QqCpjhO=K+<sC565KY+oti8G%oKxcVcQZZMef9md{#TYECmFVd
z*B-D~{z*?Mu3GXynAN)PEtXTe>t5JQVB64Ir1g9j&jGicZ`<EFK{Lexv+QPZzo^CE
z#N&82gxcM*hQ=Q_dceeo_%y+fyEh#OTlM$Gz2_l$uXiqx-&L*8-0*f%uw_?=wyjm-
z;yGWOzbgbW{O~`2m6_q#dih<e=Xm|K)j!I5p!|n~V0Xukm+g5A6Anmh{d`&e`3f_a
zk1KeCY&LmtGe|FuyPfaCwIS~F;k~;b^UwdEIG6Fk?zvZsmlrV#2tI%NySMge!`dyv
zg84;STR)zNv@hBBn&k!)$QM;PXP<x_$iT2I$nWWbcg@+gwq<*`613-bg4aPXFfgb+
zj02x`09Lp9GXLFJzo+vBKhEBC_*#{y;D7z)pVpl-de{E$pf_W}=BFWLxBvXQzNoGD
z)3&-}!kP?!wm;8eVz_*P|8A(?Qw=3QSGEK5ZQPD1DdoL7U-!a9i%D&1?unh5?y*~H
zZ?b92Z9UxJ$}nTyWc}+E4A-*jc9fU?d06~cR?n63gZ<yd^Ngo*G-PB;fToWBtW(%<
zH4Z#knd>sA(t|g_IMawh`t6;2&@;snZg1Hu@YVAE=8hZRnHtuX-Q~ZVbh{hu3kC)T
z;f3~0F!q72ub@WnO553SD{XVOS{=@t7QE7Uz23IH5)89f-TfZxdZcec;^LY&?eAii
zFnqW^Z#6fAkGp+I>BdF>_AO6hzEL$_>5-a}*xw6xbE*v+&R*h=&D~LUv2WLe>MLye
za*}&E7$z4h88v*IA^$E`w*E&<`|bZ~Vh#Jh^jED5kz&|)4IHMRrnAJ2s;w_iya#Q9
zwRqkBF7Y-u(+15Vt<Br~T_-c%uqi$ZS>4Fckb9}B<jgJOeczlI`b+P>z7~#=<Q~+o
zuATkvYhKgZ@birOpN3?;UlwU!(w(c%abVerm3w+RR+}xBx}np*R$iasgZVsd9tIz8
z`;yIby#CJhcV*vDYPXHG*A+BIz`o7(_L9%X-R5rFQGLbit8BF(!+{rXpM>z$v@uHb
z|9p7w=*RZ+?AIh2{+<5%r{KL;B*PEwzZd2{59zb1VKez^{MFO%sgjZ&Xf=jJL*}Iv
z2D5pvTK_;;MzuoP+X}_f2iniS?Se&!fssBdjD6t76+2zaske^5+*{Ca?Q-skm3Q2Z
zMB0~>cQF~nT2B33W!K*!Yk0`bs(e2i!~fgGUl|)-zHA3Y;QsF`e=wNcvr)=ZN&@wc
zcQoc+Ki3-mb_Mr7b-}=X<z^|yge|YO-g?H{AUIS0-Pu0-8ot*&4FAhw&-b2UJYat1
zy~R7*7B-WwF(1^FUd8SE#c+G-AqF3Jztruf5*5m3H!?Qgvhh0tNkj+KvVO~_y}coB
z^g-P2n{)X>Sm(<?Gi}O7-Z(@*#t__(0hKM>92s%0N5GN2Vzc+#uPierfJ)sfJ1^@$
zVUvCx_THD_$F}ELEDV!N#RS>eE;HoJIo=WBa>Up6*TQN6!vptMOaH!Qxml0t`tQe+
z%Xav)HGEug{aJA(L(l0y1^H#5j5F8Il{shU>nguH-;@|W<d(iQTOPDt^8HlqA6~T%
zUyYUr?Ps3*)p>h>Ohe)6l~=Z|=JsVvc)T~e`ZUB>3}$YAsoz)clR7?$b>BhbV5q2p
z;ol2)pNAZQ%^)&tuq)Mj80hlmG{cWmnQs}V2d^~#p!aG{@=->K^>a?0HrpQZ-tR_E
z|5|^2h7Y{wML8Ijt<>{)67uTN(?d*Z2cBHjH_3l>k^gS51!J8bsAUt_|9P81%_Xxx
zkuq!zUvI6y{_IvrC?CUPBl|nEW$S;)yj{rAkXsUazI77&gX*ha@60&`8kosAFn>=6
zXs|!}y7upd(Ha5=c02*~&KkoPHTHhrXbKy{oUv!lsl3<o3m4V1ePF(~H4e7@=lFqD
zJ78-8pgskiPO-f1g<O$V>9f+g?mHIe9SDDA`Ow#8&eM=rK6|>W&IKqme9W-5Ie+V6
z9G}_!Gk+x*YUV$G#lmp;s+d9lEv9GtG#J&M8Y<<1{r7@lUYLE!_flqmTb>%0hQJl~
z6JtA>5^A2cS8oQ51-viSl1n%pbG>-M1;!to&)@Fmt1fNW|49qf+0C_$|KhwoK(*m(
z)^E30ws*1v4_t$<(VDSk&Z*PalplM{=Xs!BlT{7dX@u~`568b3?mi94;-7y13f~WI
zYr&6dO6Q8S(*ItF)f77L>uE@q{Q2&V3PrvfT<?D^+%0Gd^T##*yUu<~`8Gzn9NA~V
z==R=9DX*rJbA#2_d6r7A)aI?8b1F}osq#{vY#_q{uQ^*@8!{-HK%yz8eq-=YhUiDT
z=KXHrJ#apwx->0!eP1ctgZF#7Iuw@&eeay}-MM^y5X0(l>HSweZ}@F?L+k$<-$yRs
z?PUxMKE8fWAFPg(_;r$T|D!cuA=mLRFfc58x$WylSoy$^;QMRg?h`9zT#szzY1kk5
z{Bi8FkaM^1T+(i3ir9PY{O3b<H8-^6Z|_NBcwlWCuE8*4pH<5u-2^?JZHy92D_!nf
zIs8DO;cM3OhqKGBxIUe{zRl%b2Rp;GXBNvhy*3s+P;nO8n!f)&#OFZU?sd;?6q!G0
z|5~{F^vXF`**isrezg6v{B5$l=<Y1OJK7QlK5hN0u=V5t?x$^Qi=t;A?u0g{XEgn~
zlj|b$vXaqeW2JqGc^9mubD%?(6FPOs(9pS}c*FZMhnV&)oTsc;to1xM@8#4cMxA)S
zr>VB@xBa|$pls$>=kE%|3_t45U*%#jbN=fvCwL|Q8-1mu_%#gK-wl=YlpY<MK8@k=
z)wW%K4R7c!FG{LVVbHmHar$dLhR4u|kuiI~B>iUByw@x|2ZC4d^K9R1^=^LS`@r*}
z%PptAzE<)e?kdB)xZU=vec9qP^>gMP-}W9f+XuSNd&{kRZHu?<TNy6%;fmbt0N8qU
zL^`Vrv@hYeoO;XnRrywyeTTa{cAQx`XZy~j;azMWzJNPp*ZO2t+tz+QU-#nO5k3a{
zXFIDH4?N50o>BVatgFkMF0q8Cc3X=-_}Z6zKgDmL`}e}#E5#LmvOiW{Yx9!p7G#)r
z=H&EjU53Y|kVGbPO|pTvB=&q^6YGP{tL-=Vl#=2T8{dc6=g)rzT1LD|epl-u#y`8}
zoH~8$%+c?&HeB_4^;zV09CSD%A*M*HbpFeW;q4DO4;an84d2Tyeef4-RUN|tk1x*U
z(}RDeyZliTeqg<~qvQ0PQ<blIOP3Zf_$x0jx|TNm)qBp{nfLhbw!UF}aNIWBnBj&_
zuE9~A<w5`BmOo;R*mb;P1^52&QsvGf=A5=|E1zpE-y|)l{?<ZFpW)9W;it?q+I~K~
z_vXjp=Nry3<V<*7l_#vh;J^0W<&!I~WS=?YoO^(O)%>0Q#ai3fzC7T>$XFNS_cS%z
z;K6R68+rM6{TU(QpF9E7_gcK3@3(hj=uXoWP+<nMV{;{;TRj*U7#;^!?|u@}_vS5A
z-34&;T#2j>7c2}+SJYNI(4SrW<oxZOqBs2d1q~<LGW?nI{1qF+?3MDnBK?;ByX)u5
zvq9wZt{b=c@AiIT%2~H<;qtt9J5Pa{6O*?YY}GGg_>pLBIaPT6Vuodjbvw+h|9#kL
zcKDxf%7G()i|clzAFyZehO{8p*qN+3b-=$uRM6S)={8fD4}Ucel%D`C%!;%wyTY^W
z*73R*=eF;K?pizWYU^KaP&c<PJc;4jkp=LY2Xw2*|2KEzgOtOkSv(NtyO-$1-4Mt4
zg)QV%%~|$~+8S56bk;9;B5D%nxH8P(g<||?E;EA-O^vJq_BRgd>+Sn;;;Gi|e;gC0
z+!rro-d(-yt(E#jqxU;2Aw`hQ`a6$R&;PX-Nq->y^nCC4%6D<Grs=6=FZU`i{n@)K
zt7!lEoz(^kN`7~p84rBFEo{wjBQ`cmz4Yo6`}@(EY!ThBgXYY*J%#1Pe7&vaKMVZh
zO0UX1WwzfLur!00;l7IeFDr4QhPN9e_|6@hUS28xrg;iu^sBo`7Bjr%7|yTte!FMS
zn`b?IANJmR5*mIs*X7Ko=UpC5e<EW|*`Mxli~H@wviEzyxqN6e+w3k1`;w9>+ikT$
zF>R?n#0Lxv3^~ohk+9M-;daT&z3W%2oj>(c{v`9h;CXw$+ns;7diArI{~8VY+O`hq
zsn3iLtdGr_zPF!=;ZK9@LFR_L*OrzAh5Oc3{8PBfaQ~^I(zD9am3xJp7#@B9{ibF^
zdKBO9CraN`l>AOBDlj}a?RUCdgCRP}Q0C0>>E#R0G2|>P|7q;=h@ryqvQf_ChzpJK
z1vBO!e7$Ps)X!S!I~R5~Fx7^KpFMclk~iJBK~$I*dLKr^^MGF-Pl^}1KV80%<G`|A
zFM_JoU^kL(2tMPPeEp>&G!HWz2zwP&9U6XCU+`nTBukxxo%?sQ^}Dj{p50s;n>C$@
z>%;uI1;(`wjiNi>Kl5>5cyRnpr#!=(eR^9z@5=f#|8sK*bIsQ7pbc}mB^m0M%Djub
z7FsMIxLnXM@CI9hzSWx5&s601i7Pd{-6+BL?D6T{vpX!V+eqAC;ukcG;$eSh$ygB>
zoAv(ns*|QoOMj;&@bW1?s&(;sz3Sxo$D8%Gnlo{K@wMzW)IDu0w&B%wy{*rcpt13%
zV^>z6lG1t`mWNCJeBHQ!Df-dEFFT>J$xwEBZw*u-14GU-y{+k`SD)+)P1a<(_8>Q|
z^lFUDkv-mTV*(oOw7!RL?x=Xo#1Qsm-|Xc~ObqsU{ydBe<ck(ATsLcWhedx!Z6^DV
zHMe8t=(66DR%Ch*U9xg-{VzGqW&`z9SuPcZKaT(E=5TQyD2wD_KmGA(tlgE}A?XZe
z5q1eSQ9SJ7lUNR9zW@cW@4fFo6c`W8db8d{Hp1md<n&uhA297+w{BK*kpHY({VaBm
zcX_X!1wGL0!&NW-jy-NqpHDo<et>Vr%c*P|jQw7%`nZmPfng6H^I@1j8O)AH#+rWr
z#K^#)zux<;$Bl=xeNOH9pPa~iP38Ns>frFRI`1b>{VxA@Dx>xKb+i8H7+qEt`Oy^o
z-GyO;T=gRkhQAk=mPMM~D{?H3f5rGOIgo4Pb0?+)R#O;@c0RDx{{G-+!o%o;tPSqV
z1r0^H8s2V};9GZWdbzq_;k%=n3Cyw2tIr-SNZ4S{uwIMbVeM+Q`{w_3gb&Q>{k&@R
zvu#(D&hJfNe=}=W7N3`F=BqWvA6WU9K7$Ujeqb-XD&y)B_fsa_uGv7#elI)gn?>Dv
zThooWHyD58eZj=g5WZQYih+T_Y{I=Da1s4w>UYq>z#CkZZ3(falRwo>ii|#BCF^!%
z|K~H8c4eJYezeB>?Nkot-OKKH`(9;h*#9AWdX%jqLxS%&79oaTs^a3O6y`7WwOH^x
zPdRB``1D(|_pviKJP+oIKD{feNU<hpT6H1AuQwak%@S@;VBB^&$zq3O{JmbKM|T#4
zCN#&m9C?{!ap8!3L+^#9Wl`a0J!}~&)ONl+(0(Upfr;!4%il~nyNk9}iV5bc3jdH6
zh8+)a!T;yoD;*Xc9gEMeah}e4L79JPJ!~E5hUQaiJXfYJzZzP6VQH8?^p14~hHYV%
zuT6D}SsAb8?mzRjIy&5U-b4HMLDu4_3Ae9?8f$L${wm1&@09EGTQfNr5Bz%5smk!h
zzi#3Fb+ZCp=C~h`p3ZQ=c;|_#YfHbyJYuZyT)OdEWL)ZxG`p0FC_ZLJhx<OK$`u)+
zGYn;(JfD5>$EUowxIBgmUwQGvjSK%V<SeQ&d+sL7P~kR<k0E;fob-7&(pmOhT7T|8
zBu5>1r}<Z$@05H_NS)kN(O*j#|D0Un{kC@lIF3MT+m3#^d2lHUL@@)yhO?jE958A>
z&7=3g@@ZX7{;O4%r;ELnANj~@CCt7OI=Q;f@AR8X&L^4w9m{o@!zIM9=K8z}CI|b{
zm3z-0Zg{n7rgj#S?S};mxDKej462^W{d8$YT@=^z<C9n%`fY0eGj2F4cKBdQP383Y
z`TunL4`}~PHI$jdX~!^IWB%EdtJU5&s&F#JH7sL35T^Ov^YW*ktRGDEc3nB=0&PN?
z1;3nI@ag3KI~h;c+y8z4IsU!3`T_Ikl9jgN;4?WGkU+!r>)_J--Re>u*#pL>|NgE!
zw|d>IZkyd(yx+!LX!H#YKN~nR+UjDn$Pc#Vv03j~c^Ix```a)sxbGEMEGa1eOO881
zJ=Xom%tx9Gvsa1i|MdOJo^`VVH5culYQRwSz(9V>`=Dyon+&&e4Q1x^>c7uBwYk^%
z-~sQ-6TdaOA0BY1XE2MJek(QBbid1y{i$3PimQFu<<6gVIkI#5rv~4E@UxC}ffh<>
zJHu2o513bI%!jPt`Eq>8o^tL3uYc@5|3LV?Amg5{+m~j;8UZ(IK~ul;;04Myr+0Tt
z7u$<}X!>M%*}U}XlbK6DgZ<ab!Z3Tmmucr}Ki~7>_|RMTGN@WLgJDBmbrKgt$;!Fc
zLnn80KIfW!pzlWn*HSZ4#v4+xS<?kKu34QH#r68<^MyQ28xGIg_nzTKQTM|KH8qvy
zTBU5~4G$EbKK#dD{BWZb14Hye@3)b$rs{DknBxu>y40LV&v>=!<oP$BgC?_71eRWv
znL6vj5zEvE*1fx~+~WoxuHvxXBAc0kq28<z<5(_+gw0R(8I)dqV)_5SvgrZt)0-LV
zL9zAPX1|Hjxv#64;+$hmCmZel62a8){=-J^w=)kg9{BvjGlsF@$KDM)dpag}><|-3
z@V@JIL|^b@d~DWdh56c@ED6$258LjvxVH40hSEP#L2)6@1ASIgBO2~*l;B(EHTR$~
z&xbjm($9GQJj2+KYgDSnUg5g)<$>EB9;H|BTnRN^z51DlQ^WIV(t1}zi{%9WN6(u7
zhTH0cY+a$61T>{7)M@{PPent;7#MCCq#iq`|A}eOqQ@OS1O)%DUpK2V)^zzKMw{(6
z$~(_^?bDy{c)W?Pru}ut3@#Z4oB6gISsCV)tlYbDb()A^y5PsKga+NhiT2xfU76=C
z!LWN-&HlO1nQAm=`6?yFFJinQ*j{>d&XmL77~V7-EttU1+kb3&`Ob46HqT+o{&qXb
zqF{wY!`drLzwO&|qdIlId_`)z;77alyRz1ujy(AJkEN>N0jn#a#R2Ecd`_qH9q9jY
zW9c^^*d_H1^LD=rdc7CCdkA!<!1O!Y-}TOcja@V3^xI@FUpH%VM}>Co0qxWCo%3I>
zs_f{fjEl`$ufiHJeOH!SYTnC;fJXT#@5BAhMzA+L->SZk;lQd-3U(`3tBLdf)3rFz
zc4~I}b3wz`LDkBh3~zRQsx@D`I&B(v#!qVlB|cTT23Z5m_OlE(6uTcLSnb;rJxyHf
z+f%V0jyu&1B6--KGjSd;J6-*^^y(Aae<~9Xv|03Z@K;_9-K>#bcy8|*_L}}n2?>if
z3T<$^o&`P!3luB+`LhLJndpV=-UT;G)de?BfnD#+P<CO<oPNt`F$v6X+>e~Eyc${@
z{cPI2r<SKDG1si#mBn}J&ZV0D#TpF<X8GKi&2ZrJZ_ggahVw6js>KBV>oglOn7QiZ
z{1Xy%kIl+eV7g!(oArM8m2<nV$hjWbuk`3pD8qqi#uG#n+;!WU|1=%aP+Ip?;s@hT
z<CGA)V1|U(r7L5n%`!i*Ow#>Gd&iIZ(yM1)ui9A7{b%i+gazwnWyYHRl!@=^*uIEu
zjb~l^LzDSag#tic0v)gWd|B06SYfcCnNJ0}Sc0J;HYDv`&nX_c2HzqHL3{Tj|F4A>
zhdvXKJ1Ov?{L`GryRy!GzVo=_NBK`1#)$U#-B;#yt1#H?pMOMx;m0Jst>J<bx!J^<
zSoUoCWBFyB_uIhfw>B3sFf&x?ieKJ!<r#D5|BjCS+J1J1=+_(8%@Tgee8ac<;e%Cs
zJf6;E{UP^rb8?8CH$y`DlUduVQxXpE?d|x#ZuPT$>t<EfO^i6y5GuvPp#NZt_uF0v
zShBMHzR~;bp7)MWe>KdzR1WhNLxOkd%DwuZ|1z3gEu886V}I$@n5&`2Yga$>*w&!_
z(|F;!S(|rdeY*MWe_zMO2MpQUUIbYShcHw~RzKol_%n4mQ+llF&&0ob6Bza1B)iN3
zwdX4se(cfPy0gOmWP6R$qs+J5;tbI$_2s@QJPGEyZOt+1GkWyjPpe#i{xjDHQMpgH
zkCH454#+pePW$fccZz#2!)z`4!~4&!UN`H{`W+n|pZA>F>9oN8)hbKPuX8$W?H<hh
zdueHz<_V}@9L~p1FMbZ=*xx+?YuYm$_y%dq@9y}a(0icm^yjJn=Z43cUe_-6Ua!LU
zYw5aK%^eoHwI9yJvCq3)I&&fq!=4GYjcg42+@{}(j5R&oF~j}H!Uc@yUnnY_`}Ev*
zdQ@*2!vpQom3#X;YVOyCas4s={*EE1Gq{uKMs4@Q1iO8Ec59WgwNGr+ue9;lBf+<4
z2g?D!)78I9ulAh!Fthe1+qNS+*6^2J)lo`{l;XFz&uqPF-K@ny$7kNS%p7;(xZc+E
zCRkJGOU%2&W}16pcLzd!$H2gF!zniFd1~3q=%38njub||f4yqwS!3_hcP=euIrMJT
z>StTd=#`#l+QVXN&iFv|4W|{uhpk0{3qa+`4EG}u4;oBQyPk-&3sBs^@Zqo5M&0`P
z&z!p^$24?zm^*PDV7q;u{VJ$L6grR>&BGr4`1I~SMpt!|>ZavA5Z?dveEZRY2MUG^
zdnbJV?7g}1&!l(z)-Xq>#a!F}dezRjOq&ALi5u>|T4kwmmUWIPLtNCp<ukgVXZA2S
z_{=>C?PE3EyF4G3j~EizOIFUk5?Y+1Cb6NFPx;aFJ+D?(R?Lc?m2UWa=NTcc+iTa&
zx@@%j%axka2d#5o?c`+8&-XvW*pMH{#kjoms*iF~ny_F*bN8Q0P@0&*upurs>$#xe
z`qgP6@9xWnu_Oe~oz}d9;mwYt1ruKLT>khp_8$M7)y52h6XShm>9jF_Z)W)7SJ%00
z&cUAwzYmC6>%FdxHQm1RVZ$-z4Y99QSw>{)8BDW#Ao|4i(8Ox^*xHYXUq@kaVjK4B
z%1)@)7#JAJ4rk8%Sgtewz_eTa9oti%{%jWqr#I1U&atNIf`*#k)!Hwy?P-eNbw!U=
zjv?;eycx_4_ZNff`sYhE7Tn;h>F<XW-Bk=9_IN4gg@m6C{P(Zc>IE}{^ph>?W;N?=
z{XU850zahTP#*G%Cx3}-mG=IYl3fyfci5ROM8{@5fBJOa{8-ild=^(K7`8dDJ3ZwX
zQ)TZ`-ilP^t*~?d8g}$`tc1-iz<k5N@TSjZ_VRVJJm<X>7yKQ>{ieY@_36%z?N2|y
z%`974nX<w0)hfxgXY_2RNIwv*eG^oz#>nu&>e~@nh97aUS@}wjmaLl<>9R-M<AJt~
zi_1M8n_wH3hUww&9;!c;vs=IY62pPE8~W@wp9wKtknet|@LsU**!1$tpL!l0)q2q%
zqd!BpjhVfJ@xk}MzcXV^*}uJQl-+Wx;=#j}FC8*%3X~sy*z{_ZWmKl#2e%)MydT$j
zznz)_bGq&H^O1gE(qKhin9YluXZWN&;U_-SPD=lBC3N!hcGXVyvNMS@PyVr(zH{BI
z?x{PMdY^2Y9{$d9-ZbNv2h?`F3$mWb$xvZioy5=ZXNBI@&7j^?lAPdiCa#)exh`jR
zT{*|f&JY(r{nl(7iS_GdMgEf%3~uLOxWTYIwVtzKUL+5D`s35Pms=f{{@Ffvdc58&
zowjD_m23_6C#t`ypS#Cko%4V4G3M<{KOU&ev@6j6xuLG~>YOzu;sx^=b7tM2qYJA@
zD@;y0ziEMW9U=;s#zQ;A3=9X}y$IU9X7#gJmzoJ-3GI6|LFtx1HSgu7GrCu^x#u~?
znzCybd%LH$85~$vp)uc=;ehrn;Tnbn*;8)+J!4Hb$8ZRQEZEV}5osr)sKBtHa@Uo6
zPu{=Um32-jDQa3XE5n{?g|VjYPk%%F^Ye4P$-X_O&#M}rSKBc8)4_)~lPoMI$1(ia
zthe=h>D4FGbMo%+GuswQ2<D$YrSB47f2rody;g?%>rBKY)|!Z0h`1#<>+ZVZrwYqL
z3U#l8s`a3~Uswz>Ffi-}4ON}dtJS{h!2d+@?Bh+J)*Nm3e>N>{C&z=|S3-+}(x&+-
zJ&KTM<ej?zw|m-D<^!*9PiAIFn7ixBxmT-BI-5N+(^z=j&h5w=@3+49nHd>wFA#bA
zY44v%7oXF&rrR*Y9n5r@!)fDCuiMtV`Qy{O!E+z>dNY<CbFDj=XehHnn&CkFiQiwB
z-aK&0&h~=y@zlRE`}gbA{`UOLcwYDetM*w|zqczHqaW=uf$vp#vAbJu>*am$<sd)S
zR42mg)*H6qF+3TUBN0`N^KR<TukD{-UwYNX<;c}jcP=gEX0ls<$9m4Rn@cNYxkNXx
zs(~7LTnusd=gBZIybhE5<^O8cOxGjTjBWQ$u<qNuXV;aiK4ymK6*cYWU#&WM|K;UP
z-<}FJh?{7hpT_XzMv}#jlkJO+PcQ#DGv(P%mTgh%WY35lZmhOp_~G^Qj&H1KW&e}?
zM|ocC{IluH?M?G$@$1Z&63DP~n1402c*~`T2Uq?{Zb<!9{%hstW3U)0j6Mgyaj3@c
z-F6c(*dj`XhPfu1n}7B#6@RhOrv0NYs46-+aR;dAt}k1;x3KX-c<EJ}vpTXn(;2p1
z(2vbJugb?@c6go*1H<{H-f!2en^oy@=5(9=hS{Gc%#ECWYv&)P19>lks^{;&|9X{W
zcSmOA?@QbVxGmPLezwH>?bHNj=+NfR4G(9g-PtfztkOTxP^RK1JHx)fx|hq=%_<lC
z==g@=U-JGp{5|2b_+#u%<uuN+ztP=18B`_tvd){uEpy6b!&13V&u6s38bS>H&o%tK
z`^91YeKA{E5|%_4oG*Gmb63_UpG~ukmh(5<->doh`H$LZkKbNCb7}d{rN7EIu0FN*
z;N>diiwDGhgIf4Zj0weWPO>t5n6vB3vqjHWtefTOGDoxFkl)UZ4$uJC7N!GvTI_{s
zrB|O+|ICbh_mZ(9Z}O+P%nTbP_=@H}EUBq1k9x(^zKBU$fBzffSRVH0L7?q#pt0MK
zA7K)V`(Er=<6e5z#q#o(D-8<f@;ij=w)w`Ix@-5c`h~48ZqPOVdKZ?XKAf=Rf_mz~
z`#aqN);{ZD_hK<rt@nOgJ2QG$PsiVV$C)2+^PQG*Kl1xW?Y+le)r-BSHyt<A`p)S8
zx>tqC`q3`$w=PDE37g-XWM}vwwCl>b*Q+f1J2rPzXusHS6_U+*O_&_)pD_3S{JnqO
ztQvcJ-O~r%80MW`QgfZ*K)p^|^XHFG?{2Db-y<%0BVzxvss~9H7hL2St|{zq2@dzQ
z$Y%cFdvDFY8L@Wm`e9N6cQPCfEL*wyS<2Fl2Ra|d9_ag}x<6Q9C)6tpA7>ZCwoo4k
z-ysCQ(;GCh{B6~`S(iIJf_Oh%?K@pH=V#2bX>rdhmp<irx9N=DUcn$U*H}~c)VP<I
z?_4sU#QbK#>ra;K3^_AwIT;z^yr$p!-7(`z=;ZdIIa7IS6Rd5f+`ql~({3JyF9AFG
zXIu@P{GNMR>f7C73=y0E)^zOie!KGk(}pZV85_IFJ^Js9<|e+oV45?fJBB@mhdu5Z
zW5d_k)28#y-OTu-E<fzMpxxz$2dhjJ3<P@8mv3aa5G=p@$~;f#fvF4*I=im;wZe-G
zm{%Ltc)#5QN!AVw`)(ITKJKWH-+#WZCSqpfFO%&hnn(7u?8<V}F82OxB~p=a{OS9<
zp3`qtcd|8{-K?(8aKKwz`jdL;RUf5CI!fPE8O^Sh{<D1>WIbJp;en^-pR=!4o&5fJ
zbH|U!0)~jqd-6;4Rxs3@1D7Bhk54aOzVzG!1G7EzZg<SkYh(VN$MC`D)4ZBW#lpzA
zDXa;$VbTINt5&O>s$4nSf0jT@r{(>{>t-#U+Q#I6mUYfd)?d#SdB1hJ2J@2Kc?~Of
z7^h}!^+YC^A78ZVZT)QY{mtGf%xiq-$^Kln#yvIfW$w)AT{`Jy^3SI~v%KVVe*3D`
z&k|DeUS2k8mw7R}-DdYqnF59zG1W!P411;paoF~EtW46#nd1uTd&GM2GJH^d>Tq_;
zx>=h+rw2wKWJ>To_LHG@`YmZj)(75VhY$Yz@hLCz70=~QlNdf2ePVpL`DlTGa6Ust
zU8ViLb+bGxKVGfXKk(T~FZ<6I|DWAzEau-fRtANiU11_@p=E!cgU=zx{RpDnWV5f|
z)bI~<Zi(SXRBYCIum8$7JWH?6dGb1@jFExC*0j_bWi7yi^4KiU2)t!Rek;p^NZDy$
z+h<OG`sSVM%-E{nXVdPLuZ;C#4?MSj-5H(QsP-mif#CP-3<uI~PnKtRU^>-NcBh0D
zC<{t>bL^RA<M8}r`9|-zy(SC{@vHAx`@C8;bLV>YgkHbX-?<oSE+$!2tTFD<e}C@O
z_crnM4}R93VQ)G8UY_BD)2Ruw0$rX=kNSR8_QBD=p~6kKud=bMwm&WDS>^(2JoK`B
zitqPoX7puc_@^`9TkfYGtdUz$l9d2!Wik9Y*a$ux3KXRW<V(Sg`7bZe*f7MMnXP|D
zxAw=KGnf7Z_iwx#9DdewX6P@I{U-mv7T$l%^nvv~q#<Q?d)^-ghS>|e-}=hk3k*N2
zp_JCO=)<Bs<wrV7&tkLQx5_d6h<o>%F=BIOWgKh6{;d*xpYA<Nsi`av+h=dnf8bZ_
zllz;G78EFNWB6e8iF-9T&F^2zkg!;0+SlcOJ1+G+*kz)yL-X}YNymRV@m^2UR<3@w
zz(mj@B2#U_P5uMhPxe;0ol}MR$foM~9tDtZK<f+V7V)>&9)w9TyqJ2q<AiN?-%{Cx
z<TvZjY>`?2&wJ|5rTnRWFYBL8op%1yn`Pc_dqeW3?aG?>Y+9e)%=oGs-)}I~H2245
zJ!fKLn4Rz6$I####8%PsYSqcsi^kHMKdjOF^geR>t>Q#BhHIHm_u0wsnX!94`vYs)
zXYYlW;~9U5bw5;)zaihN|NhhG6FE;8*njw2WSh86g740B#sh38O#ki5y61X?{U^f>
zDSzIie_Q+mX9=ck-}%wu=j-Lq*I#|cGD~QUXRN9F(!vA5!i`tw&-%%*#(mxAxK355
zCmsHz!K3p7^SUn)u;wSji|OFjUC${W>&;ggwjKU=YUlmJpFjV-yuas+UTwtOz+W>Z
zm;JO(*lAk-h&Ozn_haK?Z-1|S3_lFzcVF>4BEYci@H`tvhS@8;-&VTJxgI*%Try3t
zP$O`I*iMb9?N32t1%g2g4=kr1)^mUNn(+tY<g3k77(Q$jJM8%HpG2?zdz=0P-*=zg
zZ{Pj!fIuC?4TIRM=cQL=*6v%ub>NzH%+38j-Z*T!G)3Xm=UcCCuD@FQWw!sn-M{s=
zhHrd)>ieU>pTTyfyd9tB+x~sdwwG~FPkHT+cd%mU2Ulgn;Sl&9(+8W~(qOkBG8}kb
z3YytW3p#h>4Y%+CzZ>y0SMRin|7>r(D*V~BG;!_vx#@@RuK)8_{#-)Y%C|>no&lA^
z_0>Vorn^~AmrAXB`7r%oJY&TA*Lqup4OtuBZd4CvIH2}A$hyCyQggz&oG*vUckAwV
ze*W`9qX83xzUKYw*FnRdmp94Ousq1#yLNTjt4Ohi_gf|S<X-bUK5bpf_M@ubwDr?(
zW`-O{f8>+*<ou@`3(EQIZ$7U09M1S-iKk=PU(ezu_4=z*9_%wQt>9dI{*N)A7jt81
z{m<uY4?_27KmQN&{I7SrzC^${KLpLI-a?ZC1H+f#>9<zz%5qCRc4yydh6Uwe=LPGl
zmi_qq>V8dH-pj+{X%p^E`KnrPdc9<B->F|$JZHxLdh%lO&$SGD_Py3WGoOvY?8dw&
z3=Fpyc)zt#dIrjhNomaz`)(cov-|SWZ%ess85rhYUHZ-L{^{$X#bSb$dqp)F_Fc-X
z+a{{RP<I4YT3wNRa60evd-tEUj11cxrr+|cY`ikhn&JMVAKd@9vn^!&plmnI_&?0i
zwcjl^Ec_CM<e^2dHXOr+_}HxVuU1LA9{In6hv5g?@Aw&kzsiff?{gb5)ISW{@5^w*
z&;Fz|!v^17&;iBWn-m%UME<+`!&K?t#ieDSVFfpa1ItdZ9<Ax0^gdMSky8@G53XQG
zri56r!v|{&WmXs;kbio=wftwf^8daLUWT0Mo1W+Gmt_FWA)Vd~Ixzv{P>1`rE=P_W
zfak3r(dtgH0+peDz4zPDnWy;~7(PT5?LQm**Nid2`mahp!vV8bLDuhsszbV#ZlA=_
zFDCeL{h!?zmzG^y`pqqZp}}|R`_Nri`ji%Rb!2xkJ<ylA9=h03l_7hp1mCmnhYwbs
zD^T3^C1l^X`%mw;{;__j#L%#|ENeZ;X{z0NTZIq8f~i90hJhCIQ;<7B_}W2Bma?0T
zZ(#NGf$J}Wto4n5GBPm4&8nNtu;FRlBnO6s*-w))r{7xK@gv+N#zW1vL|Sma+Y$R+
zSLT(iv@I88V7R@+`|T$0x1N?PKNTt&Y7T}ZFjVk$KTOys!RICzxYGE7^3SOCpSI4g
zXIGJ9*cLzi*6%+>{w^`z>I@7Ynm!qya5(^rQaN89_|4MS-o!!9N(Z^L<9_<|XO&Oh
zvoJF-R3t9{mCJOX?6>DXhKAS+OTX>$eygFhs^f>o$}b0$l>S{^`fY{x+cn;AdzUaX
z++HKoWYg7gUqz_lyv5qp&m0mMD)hP^ChP<^#pPe|yxCBb``<YJ_0L(;GZ=2@#%6tH
zm|f#vt-F<h;Q;rE^Ky$n>A-^LLizh5`y+@RAj7_coe40fAK3mf$lAPJo`Iplap(PK
zK?fKUcK=nWXE>mDa<*t}mb&1_{*E8IN^&YQWQ(K)_dj{P+xzXxL<@!k>s|&`-(Ol5
z_3pX8ibR9xZ$U#r0fu?ElPq>b^051tw#8qSyurx-H0q!GzHQ=%4^Caebl}~o-)~a+
zkJjoiFnpM^PB|%L9=xCP>)muC3)ni2gteby+yqnG-+IFbM{0KKZLQ3E>AsMefnnZF
zYfu6-|D)2+a6s=>Q1#`dWm1CfmCDLWd8)H?zXtFz{@Dx}w63Z3R%6(3`qbY)8cP43
z#>q8^1|MX2uvDk5dG^r)gJ>Rh_NC_vbbsW`tU0^y^!0+B)2@m!EKuKdCC>H8iaDUu
zH6ynFS!4Jzs9Jv$C^|v-qv7{9VMI15E4?bi0Y4NC<jl!;{=2<kU}#AHw9fl&OaWs8
z)S<6~s^^;<?Ybi8>aujgDY3{Yy*rv~I2L%no%)24q4x69Z+q^X{x2oSugB1E&w9=3
zv@72g7(RT0<l#9kN9?`l9{kKX`_;mj#sAM-&)HX&%Ej<&<s3tao#m_y4A*q*lY8c5
z!`xNzWg|})tXWXuw|&uRKI@4wAm@Yd54)xR&$>Tk25I|#dk(i2!<)YOPlOm=bn9(B
z9pv$Mea8>i%Y0@RN_U$5zqs_<6*n1%1MhcTIp-C;sdWOwmwAdC8TQONT2KIL>6Bj#
zblIa_y=w#Ky3?kWQ`TRsS$m3$;lfh0`@%g+j~0Fh-7a%Y(LTE8)Ml9D9PZcZ)bhd-
z;Jn+t959zMe6U=~-&gsYf#JZe7uz`*tTX(B7#sGz462qFOb5-%2nk;9u;}fm6=z=m
zzzn=P=c)(jcF$9LFJ;D>E-w0Cq7lZh_sh0*vu37eFvNit1=QcVE*pREsny{nI;CuJ
zmkwVp-66rZ&P9&l#~i(_;i>U|>sdG$7=AET+80fkZ^!~V6a^GU4+<6Tgh+r`ApD^H
zsoZ_<L|B2?AaA7gyr8dD5Tp^*mS7QJC_6uI4iiJ|wWZ&*l;q59U#&W6@2{NnX3>M0
zcioPF#u7|97!HKL3YyLDB6l^^Seu#o`%%6H<)7rv`P^c>!2+5;v6<}y>f1c6_L|%H
ze9MWitw#$A^iDAxxPIcf(5qFI;)3!lJPZs!{Fa}yfrXgOu5-)}cU`&14J#@?I2E05
zH*Y%IXEh-L<Z=-HVYpM?FV=K%M}*svjRi~$4EG-<Pruc9fbl@yFV8qehPvxZ%kC}x
zW}@^@Tj}0ZMU@SD+XX*HyFfEh=JZ?I7g-s8*u`e03l<6qax1dDkZq4(xZwdB;Wd<5
zb4}7_{RX}6BHzE^`;L9us<w&Y!1fdANvHm@Ffbh0UUhwGnI`lGO9qDiy`1iq3Ugo+
zSPc3nB3a9Bb|Q-Me(l;qx267kAgw=cEG<(?V%V_z+Y>Q{2mM}+rSrmLP2B|xr35RR
zpG2(q;kMJG9<($>`yewz#Cp)ev%0<OX4Rap6BBHA;<>=xUV7DM*OhZir5k*=Nbvm&
zPM3(kCp*Q;IWC#=v2@H7sl$6>f*Ba>Ro*YX5<2<6x?P6~1H*@@_g0>U6`eMxY@fO<
z^;ZOiB513zcTrqpY?%Ulx7!A}o%ZmM-N3}a5dRP~BC&uWVf)*Y`V0rAm#*B~*|B-g
zt5ud=9hYqus3;vfbWB{wEAii+7<&c=o6UM#pM!>5HblDo(YeR4cLM*GGfSl!e78&R
zy*pigt)`~3Jm3}2@>e`Hj_VBPJP%zb%h0g(Rgm@i)oTC!>jWYh7#`&BIelKB36?Si
zuJ8PxAjhB%ABE7~AyiU!qw@*OM+bgAv9m0_+M|>tDR|t8n}Oj^>+!nTOe_q$^Zol6
z8TR>2zcstV;`D0B<dd|<&*%FLzFo`JJT(9Le6|}5414;D<jvNuPLmTXZdYL}yEl7R
zmfx-`S*N%TT#Mjg|NgWx)o$M&>xh+xD~!KfcV4M)b4}uuDHFqoHQ=$Clm9#Tm3SE#
zY7XxH^G3k}8mtWcwa?ssoraYN2R2`r4KGoz>3l!Ea<$s|3-NA8HvV8@V3=RH_P!d!
zm*ewdm>FtzZz?p>*M7Civa`eUUPxfa+g4Z2UHZGP#C^4uU|^WN<j(xLS3-?@J7%V(
zF<9qDeM@FYc&!7P;j_@!22Yt6L`}0goVUB~)ZZkFfMf=SIM?a7Dq~H5%Kvp_V_<0T
z-*fsrPZKQc1o(f>wP%Jots#6_yRNnFc}7!y*kP;;*R;Q%1yA977k_4CXz-75KjN|9
zm*GXf?M^m^AB9T|51G{EPbrwdKI@6^v`u`i6|ZBbF#X=-{dUv)gA5Ee*kZHJzk&>4
zNq9>g@T-arKYK+{oT2PslEn_Kv&TTg_RT@@7NO}kIJYl7Her6?^zMfT_Hr|95QGM=
zmV62e1B1rBr|GPqk{2An9qmRN9(sWfPG?|XXt+M5`s4I{g&S7$rNFKLVz{<`j=l6$
z$=Ao7co-O5j+DOKUa2p^a6!Jhh?ikQTxxM@T-cS+;wk2_Vb>N;$luc)<P%@EGWHuN
zkZ-T@e(UQp=UQlS)VuTFRfQ9t`zR-=tz~#K2|T6sJoV_0PkwU~ci*wQD)A|bhuyrE
zpMzn;&Rti|ojx#|{}KxW!`|<D_R3#uVPg~wf*%9e%wjlU)x`!yxic||?Y&<1(7Qbt
z7!uCzx^nM&=;so*=MgoG3=6KW^WJ~<_da$ehF@v^#~2wvWy0)^8Pi2eugXkG<EotN
zazt9QB6R!GjCt%Ab$FLBGJpoY&%XxcO3+y0Q3mT&AwgqJ)`aQ0ZO!&qB#%umf5kKV
z>7$j$CR|UlC=d{5xS<8^+&!s(%5TKZz_9nLp1rgOY}vGf&6GyoUl(Bsc=i)7`J}QN
z6A_v2^UI*>`0%qU&LrB4Wic?kSo-=>{^z(~j0@_&J&|E}kUG_O#^+6PS3`>@nP(_H
zTB39G_VdDMsjV?nm3~h3HDqY0)A(LHc~{mm!HL%wUSWRIa(GvkT5Q(yOPmhzI&IDN
zS0N78e_XZo+y)6go?Yw=Wlr~^SFTq3A82<%gMs18IqR=s;Kabd(BS^_@5Vpxc72DB
zqCa>l(+NKS%4R*dQ~kv9hqv(uMur9DMf=YN*6B^CVtBFKwvwHpqBd3Hlswy_E1|_g
zg6c~@9$N9oX3DztWrBj{s_XhsgBHfbW=($@S1l%J|J_c3VRxdGVDV0t1?R;MADsUR
z++A#Y|2^Q*&YD%GQzV!f-mHNvPL+S(ti#OU04mOyF2UxR6W~4n4Ht{%-!Tt5(pQuV
ztNRXcpZHt)YL(<v<ILkpd<+bG7u;845U6%yVAwDd+=RQj{D0BX4b>snJY8hI?67pc
z_h6TP>$~4V>$Roh7#RLcE!q!iTH7c+6D-t7V2FNe@qT*A%2+RDhClO<7JRsAbr_U#
zAO4S7b45H4lyu)|GBn(SmcAeDcW^N<Bs|}H`aHuW*r+zbxeR-j?aJ!gb>*H1r11DZ
zfA4PVzSkDp+4f|e`kpeCSwMubopZ+K=Vf|4ZVC!aje-&#4;ny(fOzd~-Z?Bb9S@k9
zEkYgG;<xU3>g>7XNBjJlH_rzzEpjZn`6$YH=ic)3znK^qK5Y0kXYSJtud3hu*8490
zh>f9PZrVLHh7aBQI~W-fc3%n8v;S&tv+u*(y1&;eCq4K4HtElX)cse!d)CRCeSE#X
za_$oQ3sKb@SQ!p{f0h3F>4sP7&mODTbBiRbmaYBphk@aTuz3CN*Y5w#KfnL~dH;F)
ziuDHa|G%`qm!6j!xvu<ib!*KV+rvli|9fT2%y7W{O4zw+hgbb?tp^>uS#~Ya{`YFw
z)Wv~Au>72$eP>0dtoe6KSd*pU_{HaMb=t2c-TC{^=?w$JhRJ7cvoQR7tiOnX;fCzi
zsi!}R7yn!tf2Anmt0Ld|<MQ8+*?;PsU;p)wbeuwb?W6Pe|KxQXX}7<BE$rIvE1V1r
zvvX@QtG395y`MBk^`~PhL-fn{rxUk^M;q=CV%T@_=>30HzYqRyEua6(|L5=jf8IZ8
zmKWdu`}F?*mXE93^Z)*jdT(zy<Jb51j{iP?K6?M(uao5}3=B0hZ=JeX6!EqGedeU}
zBxZ(&xkWe5|IvaTcfqh>11#^~kV^Zo`Sr7UGjUiw!LTE~_T9On2;F0UKj<IfW?-;>
zs&ulkayG+(_5YMO85%NIu3Zz#$H1^ZG<s(Y-)g%LZ!Aupf5dph>+k%B?5mg?+Dkuf
z-yc`^A-+H}kD=jiNVH`%-|DXw&#ITDF)-ZVZ2!Avy%#KN$EZg}z>XDR$l)xPxlvlo
z3(qf)Uwtm0b~wxMoo=mS9Z2u<ty7spnHc0}d4knExG%1rt?lmFrt;pEX+!C^>4#tK
zyah7)oqKNT+$H=nJA^eE7;?7OEvt`=whV^dUEy%<x9v;2bQgG=!%X7&p@Vv}vte=1
zAQwOXaB%d@{^CjohK9FganY6+6d68L8+U>XXZSP!)~Tl!f8MN(VAytQvx>VG$T2(Y
zA3M!)on*a{3AE-t{by_Hbg*Iu28R7VQWKry&#1w=iwrj;>~-3&&V#MxV0e)EWv5N8
zUH=b8hJ@_7{m-iy8ti9uf}2PWw*N9ZeCt%;r0bsVjxcX9?VEP^)y`cYli&I0rp`@y
zSZT??kTbWgExsomw450v)39<gB6`!V-%37yRuq=w8T`}doG)I-#K3UF>RB!mLw%MS
zc&TGU|LV1Syf;mM;^e{*{V;M;Z73*#+*yC?R8@>rk|iGlLr(i{mF|x^u$}n^rTIGW
zF@$Y*)-v5J<Yom01jq#kE=xWCGG{d-1H-msouHKS{EQ0NJ0CK)PQ88WRNbV*D&>oq
zZd4rC0u?tq>bFjvU08TxYXu`i!s4&SzxQn06b3s4$bm0gdpT^41;e&Gy=XSAUMr(g
zxtNQA;YLO6y=NO|F*KZ?=?SizAAHWzPWOD~x$X$-hKqF(e5;v7!JgWG>(tvFHcz7V
zFfeSG_$#tDFnZ$+Sc_=JuHA)+hi_hK26+R7%bFsE-s}=To%l5dw)2wV!<Q`W<+XMF
zS_}*c$uqZeGSqCGxdNn^VV_U#(`DN>c@!xbHT0G(0R?SCdtmfV-%InS#&<|CFqoYx
zwO`$zUItdpz|f$%Tl#$<A`86X`m8desdXC2oggI%#yy{_`K~fDFi0;wf7`|+Uzp*C
zlyN3lx@PXJQ-zbJd*18jOHke$!Kcj(zN%NwBlqdHZJXvli8;o=ut8Ao*QEV*Vd1c{
z%b@W3W81E;NdD{EE#T8A3kz+A4UV8di&NWqnVW&ZX6Nq0d(UQSF*K|<oD6P!9k?z%
zUGd!HIo<pT%Cf6L#mR%jt6_XL>g)^+>g93KH`lMdvx*7ibOr{789QDVCLXSO1s^rB
zJ|4rlEFm5qkQ*Y8RoZo{l&@lBXizUs2UP@X(<Xsa(GN3lN^zXzEUw9Dc5e044N)r~
z*42KPBg4Q@QImh%7`Aijz?HfE+|qf=<-myyv`V}>OFMh35hFOCfp53~IVoXtPx%co
z&vl{93=IA2<{y5(FPe#=X7x<SKKp(Cxlh;Z-%&bIDB-cpYLH0}9`>F;$?wX`z|j9{
z!?q$7*p=1|d)BU%xe}J=3XTVm$<ev-wICXVH&kY6zgFp1x&Dfgp~3y~`TO0sPW7H(
zY{)mA4Bl{f;QMR+ylm~y`z!+IFi1bXS`_hiCCJMU9$pPQH;Kpd-4R{}2L5*iHq9VW
zkcmFA``rsozQPWhZSdR?WGq~;0KQV^hR@ciw^g{m-(+BT5E%32^Y;oqc7`8m#*hZy
zo%w}@k0w0vTf-pzFaq3A>0i99$dXUyLyrstgPfav_Wm_%=bVHUelvE|^(Phd!{U&k
z>{R#D4Yz{f=ON}SyLBozcj<dw+i*b!2Adh5Z=I^MukV&%_z`E!3DyNFHBu+p8NBt{
z!r=c--5HWB{c}@o?UeV6Su-%)S^eEp?D0%kg_Ce<-SKLX>2{##1$p;C%MR^>A#bu_
z$JaBMMdv<MIN3Rif#JcuxjoNw85*h$g~6ryfxoNQ-nkYgrWeeV(~=Bs6WYxC*JI;Z
z?^dT<#=x*c{BMr!`n7A0a)JzIU|{gM6S{x(8#$O&3~$yjUj;iF)LVYGdaaDQWr!#P
z!=2fOKhEK0D9BG+1WE`D6&8=Z?<t;~JA-lF8UNFXTh;48J(J_X(L2|!Ju`Vuw=4t0
zzSFLgT<w#)VFNNVc6`3oRSmCWLe`p|ciFQc9%dQCHs{=@IwvPQ@k?c3_;B`DWtGJF
z>kJIvv()@RPHkupjo#^VseO5Dr__U!GToq(<iW?QVSJP3bjUF<>^oVRo4S8nkv447
zJK+)E@!jy%!@;TlSb~d|<bq5B;TwEgr=C{nRw>tFW@uRdZQuOm$BRuF4(y%X33eYS
z<>h5-|22Brxr1@u5wHhAl}W?#@MufFB8@5rh96q_S=#JMuoS7bPT#gVGTL%>6)aI6
zc(Qi69K+<Kcd%s=3^@~TdF_9^ZTgd_d<KROM}PgSw41k_kwNZ=&l-@M82XoQE1L7<
z>y8$|hU29=`Jez@9vE%u{pr%@LI#E(YwFVM)~uZa-;6tB$G$a*=QqJxWexGqcHZr3
z<gDB#6UGj{coSr3!&}39#nCD|1Ed)kYOYn<+yCCj!SLZinh;o9Ma<Tz<(|(T8@Vya
zod^38W@}_WGrNsEJ3~YNZs~TOIVWMoB`6Y4-9cD--{5$!rsXC0-i@5;cE&3}h3(o`
z3=9t@-@6vZcjgWYgWO@CQy}Ls^snDmba}erx1~Lg*egPgKLR<U!fNZ((n+q9v`rZp
z4&;APol^aHCTtZ@!YRJro7m=q^@0M#eupTh@TVlpHDX9!434&ZwYepPoq?ggz+&EX
zMh3Z~K4-vM{L^Dj-OvxYx03Ne;GZorVbzOZ7T&()6>nCwj*WrghpWA`{;$YLa9IRO
z^(}k-KW*Ap^voG-1Oo%ZhrsNO28PFxY&1D1BsJ;IN&yCjI!p1{J2@F_cFjBiF8t<Q
z`?09PP%oS1!9&RuP$t{Jn5E6`$ydtAaNx+?FPjT<pOzuY|H)+&Q{ti{{o#G*2Kz)i
z*5J=smTSbKU}4_yHUyOP-!sIn7GP-L+-+7Y%uu0ad=i}YZ1#R^{b+M?suhFW9skpb
zhjxb@gslbGs-6Z4vgP5?mfl7xJA>I77=$mMKhVB)YVuLAUeM7Z<w4*o$`9d!^AX$~
zoJRBECBn9d+@<$xqg8fZP-b8dzH<H`sQCWG*s$DSGPuEZAnnCzsch}PPEVt!GT2x&
zgG)Cvm)xgCG8P4Eg&7#s9_7gx6)c0z;wK#XCEK-d+oRq0Vc{G9EX>d60;opQ0A*{i
z@V0Pht-V%?kzvM!$#s11o+mD4X7Eo{s{|=%I2#mg=~ZN*SIqJt5gfIfKrX()14>K#
zDxNs0GBCW^@mi(&u_SB|IAPVgW7Z<m5%<@}pV`B;>{ZBTka-}y;cu3<yC>h|J1d15
z8f34X-wg^XRb~eN+-2anZ8#eoZRx$q<5Qe11OKt7phIUGc!NMi-W&BwP)DikN@Z^9
zz4QCHK&cF5qS~7!+cp)n!^*e^uXp4hY}pHHdC7yM!T3hq)~TC8Wzj1Zh6MJ#@1NiO
zc!!(e!;>_~4h~RVRywJ2lC~(LO~?FchqLrRXU0IipYec!fx-IOhHXg~VIgObS{ryc
zAlmX9yn_0XRyM;RbUCQS_8V*?s6Fr(R3}$^uDi;~aDeaS{hu@XpT{yZ^cn<%Q^tX3
ztH9NW=eesa9~AtKg32&ZHJ<MI>+{F&uNWB;PTy6nw44XO`eNCuq?juOFX62whMMMd
z&puXI5@y)Fa9dGy^h|Zja7_jV>j$~HsTa@hJjKFbcG3q@>&;%jt!ToNfKZ0-@2(a_
z=z<Sm0@?UlrS`#rsZ|UNH-fHvemk~V7wUrpB6n3QgQIV5hwmJJ5Es)mk@NS>I#8|y
ztGc1Pb!xLpdloB0g7?>*v)i{$Rc2*kn4Pgq6eQj7HULz(7S#yy9{6iHO%;^&)4<;T
zB{WG`l#yXW>b+}W&;I(Xh7EHjELt~NCrf)dtd3z|_<l@>d)d1j%Qf@-ZCOBug76Jh
zP=xAF-V?6Fz!3f9`p((uUd#+;SA8IhYi}>!w#m;(KHh`5z&=j5{i@S6kfzzIL4|+m
zBx_Sfh7AvY&HTDyThS8OkYB<fzbx&~g?_MP#qj-jEzh!d?JCEE`N1g@WJ1|li}e}v
zo_OtKV906gR^cu-XKe5_zYMOA4wS82d*_SzrN`Zw4DXJwlmTf1H6rd>6g-FuWnjoz
z@w)KDftgJpb3kQAXVv_a6>DYS$%VnDLwciAT^!%)TG-W?3<vU7Lehv|2sgt4w(8*M
zo9~~8t1>do&RYf^Z*O>O9Jk`l;cNF+@jr;$14{IPpp1~S?Uq;ksmttqb5?UPH1HN*
zJilt|RK%k3&R69%&$mwXhG&q5cEfYY%#$`h-EeC%IB|j;`DPxdt$*F~-4&4CFP~pt
zxUFcF2tz{j852-3z_4L2I4g&86zKOI1$BNl{LIqczI7_|`QwZXHx%--w159yvkF|<
zGcYhDH2s>?cKvVP`rq&b-2W)*%!G8$d%EpcixCSq-mP4_$J?kposXe`w{U98`fWuk
z1sD=$pV<Pj^e(8Y&{mkK!f^jx`_m0plR%z0P$n_If4|SCxKsuPn~8N|wUN=5p&&ni
zutA{s<4JAhh!oZTEbPjMZgI~ub)Yx`DQS=mjo!Hu)T(+d!O);y5)>VIC9GyXGs6ul
z<EdapIs0#&N}c37DZ7-ZX8Pl&8>;l2K#}-1AUab0B{RET2phuz<=5#KepaY~-3jW6
z%-XH8K3n_uG!u{&AZ)YCd*b1GP)U0H5r_}M4R=GMEj@}X&e<_BG#vl*`i*b-HO7Xu
zroo`1kKsVxinVJd>r9GSE%IQtt#^?M$QKQ71EB@tVlxH?xs$W&*xsfGHo_uKxMX6=
z`fZ>5VCVEQ_#ZmM{bOytPW#nH_{m)f<)DT?$Y4o^2KR!gDS6-27&g33lLBWk(1_CQ
zTc>PJ?u=sGck^OV#M@3#9~?AR<~Mnd&!@Oj1_ql6b=PVv=h=dT2XqX}Grg0qZ=I@}
zpT7{+Eoo5SEN1)Xp#Aj2S@Aj`&w}uV-C5dy|J_kKxpNjHLxqF-)~T+!Pu)&19N0EH
z6P%F}zF!IBo3tlX_keljv?meZn|yAk%UBrr7cI17V0ag4pM37PG3?Hw16RK67Ovhp
zwR{#k$aK&#szv5n4gFTpe5-fDuJB<1c{eXxo82=`eP^&K1H<<f^Yz<ro!S_{*br-Y
z8N3AbK;EjgGOCs#`UlK^W?HWK<^nQrL+!Cf=HH(8BrF&h4%og(KV|;6=jQoYOt3gs
zd-iw7f`fNq#bE<)VD!$5tTk6Qt4u$gXetg0G_b4QY`b-8x60pj7q+fqWZ1zT?)fcC
zd-@?3hO(1Bv%v~>uijQP?Fp!CVy@Y0JdqJ}P{aCLr!ptCg5tHNy>41ePde<N^@f#|
zx5XPGFMxG|YMO~>BAWZFr#&gMT=NXHa~>?wa5oH`sE=2AGBA8td+$ovuXmTCIhh!C
zr!50#H;{tL=_wPR_+4d)e+sG+TtKBCC||$+D7h1C@!Gn!n4Wa_*qP=|KTx|Z1%8G6
zfn!DMneE<2PCET`!>rSwQUGjsS^WIzQ&K#Nmgg}r>^rpnv$=mO8^fDbGt)pGV<?LU
z4I>%u<6wVqdhSV3#h0-AYFOU!M&|XrG7Jn4xW5=beqGo0Cf&0UtRB>ey7b<6&&suD
zj$48&7LX-5>%8wCm|u0Rem*E=&j1O5aKiViVZZk7+N%=&3N-7z$9I!Ky)eU#Qe(&%
zpU>eROf?gqL_KAQf5Yyq4KlyXIrr&Yuy2pK+8g(!yMv4Y<!;TF-_@RNof^CrmbG$P
zrA-f}+j@WUw}z!Zh6E{aspmS$T#KFIf$+OYd)BR$`TBYB1cruK^UL79IR{F5^bd(Y
zF7jg7cjjeLgza>Y9}avoE&$D*y>Mo`cO~o_FRVGvp!TeGQsN%-!o{#NL>tyVT*qFs
zvtF<L>PGm@Mj&gKd&a5l46|flkl*38DLlGTU4$V)D{U4i5*cPpyLBoz-f!lUn6C`+
zPa-EN2ZFr%hL4$@f#HXPz3{o?#<0tM4}{!NwOqOO%Tu1|@CNY>tL&)<!+#zxikJ&3
zo;QLtgM#J2yVYygWNUv`$-m0WU{G1h_I&oOQ;W70S${QPXvm!T65P^Am<4K&pS#Nc
z!S&aHQ??MB`|Ju7P98eI$k5<v{nB|wmbQ5?Kd7z(nL1-ix60phM>gJqS+gxT_o>;*
zxxXH){xb!Xs^@is2N6JOmo3~@G$qC3Q`}PqhRG$i=N{OE+A|oq8bcz<CmhsmU)axZ
zK)moEC^;q^|MJw1jgNuBCrIAt!=`OTYe3y-kU<GfziMwT+_ot`dS@W)%&!C2qE`#-
zyVb2?4$8jZA{eC9$2s?@k>`Hnl7&SK4W5=O*Pc21fQ4aM&N6UG*O0k-?HpChIaPcN
z@ee@5=mMZh@4!350tSYJpnGbOSHg5E!R0Ebn0%yna`vrL_bT$iV_TqPb~mApt!8$*
z=fABoVeYUCM;ID1SAgpNZ<F`PJvU-x*sy!u<UMQF%Dk3fn6c~T6-bJFFx`7fx+kA2
z<A=!Q;A2E?_=3FpX3uxewp*tH?SHQX#|Nk~>evn{bM~pj!f``&UJ2Lzr~9WJes#Af
z!d4tSv;p&L?EKSHo;W>aV6c9<WSi0YwQH_&GfX&>0+MEM_*dKbN$2Egm2xJ=A4|kf
zCzh&!+QkibQy(xe9Pq1}y@X$KM~FUHEdzsrV7O=9nzb@l!}6xW#-cY&zLwSc{@eF|
z)tQ!So<RmXK;e-2qIhPO_HWO7Dm#O%84mdE0GBmu{1_Vk8&8ImxcgVF{leJBJzbsg
z-<6LbXM;vQ4!rx7@Zdo9`7?|R+iv|<an60ZV*bYvSefi|VEuPhv8_|3TOnb_!0=|v
z)~bhbe<nPMKb=^r10MPSxpqb$sJyM5q`j4yA!qC4Tc`GHdsHpPz_8y~7?hA0804km
z*Xd8X!^!qw@jO+-IiTU&1g0$Q_mkeJ?z~{maNt_y?RNL8VS1sUnge8_&w<}6?OUhX
zeg`#tK>`e*#GAdH<IZYOZCqu!<{P*X4wkwc04l9@ChaLy=VwTG9iv_u8EqLR%W&ZM
zS;!pef%jL#u6c?*7V=^E_u@IIxCMnt!uPLF?YB<-s{$@MZ*cux2kMzfiCe<*)|*Xr
z`@gE3+_SA{Sti&b28M={k*j6iUG4t&JIiuSACeOSqb=WVo--+Cr7S~&_M9tWzjXZW
zuLezU89xMT{b2Z*`+HsCrzi&o`BE)V0&aM@0y>8OmVrTfHNWJI)oWu`LBflHVMfFD
zzjfKUPj_r9S`F))Hh4y@mVI}3v&#RiGGWs}<67`bm1nfwI^~<2I`N6`Bx_J4EP1V>
z|69lJD+5E#Js-%~)-|VguoN5a>tTPe9n`RgG-#GBwl`nD_KkXFE+`4Q8A1{&DAiB;
ztYUvHtnb)PaLWSZ2cPS`?;al9<FzS{Z?&=@EJ++Fxf13#`Hkw%0BeQ=$6i=Jy?-U_
z+19CBqZk<Wo$-Mrkv}sF6`v`c+`53_--8m%HS@Z`!5@{S{r*@ZbABj4!-pk2@Irjq
z68+P^Hf}2lh~9Y-R=6;Dp1IS|{#EB>y>9!}r$rHGQ(>8r0TlUbK|Zj3cZ!MO!OIxc
zm(||>r3?%oO4B}pWAZ`qucaqJBfN*0e)QT+_!I$dv|Kjkld<qJQmK5e%)s#B1(N-X
z?oXEZwQ0?*Q@!v#96t_3Nqo?VQ~i0pC_+}h{c7<<xc5!2gxyoU>0Pw0h@ru~eEO5p
z+|)!lb%q1mXPyMRu|Xd+p|HuLNY|j@{*Ow_HP683Im}oFY8C&hd2z%YGz=_Z1PWmg
z_Bk3lDRGZ_;mT4F4}|OT@2Gx?Gx(74Z(_<`nXunVuuRgB`J()5mNt8>+7#<*28RA;
zHYek9pUyqO$guCO4`j}wW@X`yhe{{6USOzu90DFgx@^iPW8wG7=;YLXCWZsemD#YJ
z<O~Lkf9+lcfZFeRqObzzK>8gH4!NuRp8u*X*XT_@oaO%o<RlO_;C<|~qH>b(RAvU7
z8Ltb~o;%)`)lXw+cyBxz)UjY-h)=GG-0xAOXVLJ#VyjFTJGkLKW81A$yS81Lzi_{2
zk@;5}28MTmkjf<m?v4$I*Bx`^=`Ium<r0uh3^knPz7I0@czyam?eMD#%Qf>}gM~pv
zS^WKlq0yG_thXN98OXqJr+=UDza`s@%qI&oJotA8JjTUv;JTE)x15TlxZHvIIZ`&D
z;?3dTUzxuqC*vk@H!?8POt(vUaMmIvK^N9qOK|_H8t$B%ng~zk4EGPj@Kr?pf3cr`
z`r%g&@aCxjZ|(B1`O;IL6x`X$%5Y%&>)j82-@BA7$;5DH{Y)EhrTimo>r}g#w=oS2
z`zxj$VFfpT>Y)7)$w_;rb1@tUfBjwXTbB0nMX+R5b|rLw_O0nLSHtwC!X^U`nC}vl
zvDqm<=}$2vE*8RKi2;=TBkylDeRqe6;lb-Kci*r7t@q<r*Lybx2AhVN0T5@%ZJo+I
zU4`-A<8)?qkjRgK+^3tiU1H~(!@<VzpgTrg@>gxkty61Z5z!!fCEestM0Dhr-OJ!(
zMh~j5gk585>HVnX8O^sE)a?z1o@mIx@Mhn>?A7n@yxP6}m~0HF<ng@!H!iwTU7Mky
z-FPx&Y~+6S9+gTxkB0a;T_86!+y@Qf|1>-~wSa-a?iIL#-?Obq6V|{=VE?+4$Nrln
z@7Af(@cGJu{xcTMXFml``U=gBcR?uugb%!Xy?gsFzIFS$v+tZ_WjG)o+q2oSKb4u`
z!-q5@(2A@7=kMK>-CmfQ%^X+qao#Kr4|fMErj5V1=^yEA2w+*JY#@8^f}lj#0|)Wn
zW%&k8%xMg14sH$Wx1|-^_4U_(IV`{6cjc<G#!WSfYsFPdO7+*UGT5~4YT2y&gk{FA
z$NQx9mO;)#{I@>llGXGQDZ&3e9nq>x3_tpB<rhrx-W3F@`amvCNO?7BRlL$8`BFXS
zx9Xzc#x6+we8SQd8%p_<9zE}f=m0lIL88kRzkOttwR<N6!;kH|F7G|9I(Oz-PKFOf
z`+~DU(hT#wVo$8J6nZfE^gijnDWFoX!G4nWDsL}8rAN~{c7&@iBph0&{HXm_{siw`
zpCR=D0|SHG6216}_~{`}C+U5K3w}6rjSH6K7#MCZJU4gM?wv}Dx;vydGB5~-mGAgJ
z#e3Cf%jx$x7#Q@k<M)E1k)gtCtL3KmZRUa>{Sq5FtvfnacUXJ|UkCM||4JjXVByX3
z!+Y*}7sbmm%$Rh$N_UF)EN@sFQDWxnjv24v=Se?kT`K}EslYzl=B<}0DX3m+9&=@H
ztYD#n5<`NMoy!r|+t2wJ4ru@IgG`!Lux;+x5g3v1=-$`61!iBtsprG>BG1<`L3{hJ
z?A*@B;B%nX<xdd1-qT6Xm|*3n+Y-IF7e$`Se}UD5tgFb}xnwCk6EYkqJEa=ydL+>0
zkCqZc0uv|%V=n1TFHtXGXt@4)?k#X`{ct79_&}!19SuE$!th%2Ju|C7Eh~l})ukH)
z^j@kc)pd1Lt1>gVy>ND!^JJ19qPOC<=v&P{A;J6Gk8*n-1jQN11s}TJaDYP;#A(nC
zEiZpMNl)ofd&iDx!VCsZ+XX+KkGYhom#Lb-&~W|xTu4M!@NLyJQu5<<WKnx(prp4P
zk_PSK^<HWz^(j3HPi1CsTf`Uis>pM5%%v#E+&2Tm0gfw{T<?oL^NT#ESHXkehLARV
z0+``I*=g0aMV`wAKc4T{Au7&b!1P`4W3b*!jp<tiG#Czi`{4&Eqiv?gT#9v>vyF8=
zL-5z+`@HIxKw<o#`0DT1JC}5K{IFB9(~@D>u=v%3CH2=Fy>>2HDggClgWwMV!C1YQ
zD$`BGVFQW`(P^siRtLik-knQa^<HWy)pd4MZ)9Y!es#UW;*@GErvO93?;3T;nAp5v
zy_b4Qe#(#B7B+HjegYa)Z_uCS9rb+DIi*F#^JN)sD3%6X`fX*gk}p6Ambx}P&b$3-
zMg5aWX*-uJh3~4k5u^=Y+sJSr@1$z18#o16F(kCtbacEg_7vZ_#QGp3L(cN|(B@@v
zb}#dC!NSEi4!FpEzgwUQ?tbob)61OcZPnTFU9fO<2g8AByZSrgUoBV?b1B9H6uF=g
z-M-%vg8$E`UXAPU=7!DaGTbODO`ACZs)T_d;rkWKaBwK@J9~hM;YQeX!HZ8pPTo3&
zfnnS2a>%H~1Jy09^Op-2u6}U9CHBkR0u_iG!t^rb1l0vUdb`}wR$<uSYIo)Jl$cAY
zui^FA4cF~!{XhSXxfH3Fsptx`wCv2*128s2g89=)*Gk#KTuQ2#7#nnh)62?sF1Z|Y
zDae9>VRvFYq=~m@O3bC$`@CB@H<^jaXxJDSe!ai9(q#@8xP!Ak^!--%BdPa!!@rs;
z)rI&lJP@s2ab2ZUV-hTy8)U<(6~uNfX@#W=h8u;eJ1Vph_j=uk-MJ*yWzM&|2HCs4
z`Hylk?3r|X+x8MY28M>apXWj*)G9o8F0m5$XrlB^RBpzC?X~7H9ANwNr+V)?t$MZE
z_rCiPc2-t~xErM|B|Dcy>SeC|0rlnqzFnOi^OYXSuVqhCgxl(tpbBR*NVLaXvYB2Y
zBKThUQQR7a1Kg{w%h_Meo>=9(=mP`8?w8h(6DL1hD)KDVc(n4Ed%_~U-+2|v;Fy@_
zq?b9@dzR}Fe!;@ED;N$Kuf8rFtM}4m`j!ybx}1dLS0vf@U)y&&=8~u0ORec8>TtW=
zj`+Yrih)65X3QlUP`;jS=FiRWVCS9f*?o(xwg*pTWGK76?+@5R6}&r_gx=>(7Yt-!
z@Hyk?a^=~3WAH}K4<WB=zjs)?-Tlx+Nl*FF+DA+b{x8&&^ol&EDZt90-7k{=*5&JE
zD#8yXKBhB$%e&nV_nkcg%GY2U7~GVmmxO<x`t5E(XnB|Gk@K5a8RiB2)pOc=Zb#O2
zSq6rl1Lcq{UJtfDnKVuCV;sW)mc6fcKlJ$k(r>f1>b)(ff{b;!qh-MGq4(9-Bfn!V
zc~&2TCCv@mdADqu>z_<ISLDfk5?Wj^7zjRV0qF<h10GK&y({vZF8Hz5rDlRL!-w8?
z%8#aZSgg7(@iofXk&)q8ay)qcf??0Hm`i)!xBXK8;VW?9$d&s4eI_X&BR|L#d6rsU
z47|^~xnsp)c0N%lh96AZze+8#yBux;wu6Boq5aO4_aEGjC{5oY1}i!kgtvBelplhJ
zM#IOf&D+vy&11IhUHbeH8^gW}?b~)=;qhl^n0QMZGJv~Yce=^@-4A_T{&-6qXpz~X
zdOF<+r2oOrE7c#q+J)Tb-E3C!AYdb7!~TNXY&>T~LG4tK6K)7@y`LEPTea9zdm+fp
zATb9W<wxnMAQl)md_1kXRypZf`Qg;t(N%h73=i^aGIo1k=VE0r$h!|&EYgrW!FyL0
zFE>N*r*-e!j5|S<*M~bro}Xhb1-k6%?}%n)XQ*2qC%<R?b?&db9AW1rH0Xv`%hvUF
z$Vcrz?5dZk3JVp6A138FD<Sm{$PEU%JC~H|Wr_)c^4LdahWZ6@$~E!pC0}iAW@2RM
zxxcRm?DiXCTN4+)Z~L{}Qk=^`@$)|ESD&6*gSK5UfZbB&zlu+8M^A^dD|>_I?zPuh
z-b#VBfu=!bU$tv@ecOCSb*&1h{|K^_q5h?n(mgG3g$w5Uc<W`#3U1yft#|w0rQ&=>
zh8bIaTb(vmT6e3IiGe|QlRhM~ZS&MyX=WiOIgP{Tgk$ytD`D_lvA*i`koTTvf9K8E
zx{$fOi=Sa~&~%A&w@qO#IIwM3XNRlp&LvZ)fGq=E>$O?;?Ozy&q2c8zq-c2emVse%
zk-T8|*C&(Sx$rX>`2H?p2dPcqp1ZZN^Y|e~wMVh{dDC|;X$5cf1C?HtE@z<DGchy-
z?p`<l=guWdXFwg$pj#STEv=k%aT<8=6=W1c{JL}EKO^A{V1|TSw`|r&-shd3oB#6X
zm24&k<#MPCT6h@@a(@RyhnH?IH#7Niw?Im8b%%wBpn>4$ebRj<r67wwNELa0F6+;_
z*2cHPo}b}yQLO#rVo&d#u+kxVnV$a&Ti))fn(L6tpMim4-VrZJkY2Ep8rXL(DRnvX
zD{n_mwfA{Zb_TbnW=iW`%`4h$%g9i%VLhY?Z1(q`0c<Tm&f;5lE|edRj83akP)T5V
zwZHUphlMbB*~WTMoCJd6<my9a!H;1Q3>z-nT~TD-sp8EIwXq>LNL*d#l}%&JB`0_{
z`oor6=lW-NScHM*qruK%c;Kj)84E73Bn7|D(dJ`#v&HK1=S^?b*clrBZ(0w@+BvIZ
zF0Fdsc6rwg6D2+tR-XgA_er1ADF(H~A8g&KuX65o?Juj62WtZu64LLuA6djJ837+)
zy&-gc?efIPbWRR<`kWVg_iN!ANbLl2#ew%*Wz#{)Q|Zw|84VGJH$7I*i|>_9WM()Z
ze=8gkp4%d0^KMB=)(eY3qNT{Q9Nc7mu=VMrS4E32@00d>{h_hLLY#{sXYKEf9jlIS
z2Dh|9d4&58=th_<{YOFep!^N8l3~w|Tl+sR-UR0})Gs^BvHQ*Lh3_18XFPW}$dHg-
zn^WyQU5Sa|!TUF>Ar;MSJy2=2@SkSAu$Tek*1&2x!F2E%>xAen`Z{{Q^LDH`%&zn(
z#)4skY2NMUpBM3R!4gOX@As|OH_W|te8V)D5W}8%R`zS&{sOxPO#JZ9Wxut2?$TQG
zGq=vSuVQ0}e(e0W#_YW?LxcXt^^iz=(*!QGFLzjoOBgV||CMKPT2;3NG^%pIEHge~
z&eyvIf`a_d9XuF5XsuIzbjlbuSolEn>c7@h7o8$cL|gX2wUxGZ`A6X{VyIaMsz#sH
znxA>a7reKF;X~HD*Y_@M+x^9lhk>DHWvwVUz!JirOiHUYzheJ(=Y<B&6=!d`OC1Jz
z;D+1VeOFWO^M2*-OaJ=3!$L%iVNVBt?tuedkX8T#LxXsktl;UYB2Vw5;9L(Hr(GNV
zyXIaOtYBwg_z|>o2{_AJ^matL%+Xe2*wb-)m+_ujF=mDX;kU!V#S%l=8CRD%E=M*#
zXqaf-(c$VchYPgUt|51-_pa5<?6)p7MoL>H2nsRS>;<KU`8#(m+4>9SPyHuWO4GhR
znKZ2nK3HJA{M_#Uk&uEA<dp;0vx-klt2K{tbFobqEL^aF;lmTVYj>BXH83%J2>BKY
z&aVxzle~Am2DKW(1Pe865}w@qcDG=n_bwrDeE>=={T-F}dDR6A1qGiwF*oFwU1sAs
zGZm~CG_#oYz4T|mZ@vGQAZ-GWy*FyXZIrF%FC6B8_+Wfs`w3_fI{VkHvgvYKS`0Ol
zZ+*7U-|c<fi<99%@U3uPu);E5y_f6Ww{6~*a8<!I;f>z!yod}rP?RNvUrF`IeR1IF
z;)Trbo--eq{xhJR=gFjLuRwViq}68f?2d@7@87PE`VSeXVqjn}u<P!ym=3-n9;Aff
zgGiBQxnN<a|9#%g+jf6h`-tg)_|D#rUCcEX?V=eO9-Mru4Ozjmdxc)a+uaX!l)4xi
zCt7DTC;PL26R6%v)wQ>$tLWdp(AeE!A*RIeXQfp_LLB=y2?MYN3=9l58-I61xE|Rw
zcj`ab6bHkMo?FHxdU-G<3=dX5o%HJ6R#3?1=C7RR%J3sw{#AOqUgk<a1_qn$wW458
zC4^sn*0oRip8Jt}Cl<GNJKndQj=8jS0jPYu;o9HEH^=SBnG1{zKlHEX9ykya2{pYz
zJ?OV!*jt@q&+JxMfz@y_>c(r3K8PBd<uO5XtIb~TeyF6RckA6HP_^uz2hJu}dIA_2
z;?C>~0);ulhSNo!pZ7`oDL;ytaNxw>JLQKLnSw7?JK%RpRaZGF^92LLky>ekf>e0F
z;zRE`<)p6#HR7NtJ+O5ZI@3$8mml_Zk<mu9D?ZH0x}W3{bM12Z;mF&uzrrpu&RFq!
z+xC)&ybKHnvTuY#hDpm}^)j!OAD-P&q3)CLM6A|)&XzWC3cnHA#>ZfgSbE@q&2*FR
zuyT@N--TS4HOfhnf~%{FJhNTl;cw?WxBQcSD=hagFvNN3WeN&*@00Gkb?;K7iwp-t
z!^GYBwtvE(wJ|Y#xb+QE<Q(ugbIa&@awC&+S%mcYTl>L_zzn!RRx`4}{Sv?Eo79?H
zk@kP)c<%~^_q85q>%xay85k;fbL*q;hF4uIKfLCxZml*CgWI#@yRo;vl`=CN2)iK;
z4sC|y0P$Vl?iO4V+at#zDzWkNK4~$ji=Z%+kalKgkXUGyu)yy6On8^_2lMy0zdwFm
zBVV`f{#?+yACOW8h6kEYCxz9T-*G##@DRes>zBSQo&Ei8!IiQZ*X}N5XJSlnziRi_
ze|~PRy*UFz&eU2+%g{h<tL5VNZJRqZoLJq~nMKdf@B+ClVa>mU7YAl8^<sF#!3<8E
zpmOj2?#_<gp#8zS=7#FM^jiwCA5=ze>FAIbg;c#D!HV46^HA^WD7~uGmS8A5(td04
zeD5d@9)^b8ZTgTwqhl)5x4hZ?u-4^|T13JTKBXi%!R1aM+Y-*ynU_3R!z){%Uc#{L
zOl>rS#rpGW;PY3LOYZ)=w6*+!o>G|L#=P1Bkd<J3d%?Nw{{vyA6$8Tovy-Y<<&Ib0
z=XK9*&%7I7rJ=&G?ToKW%+<e3cP_Dh$iT3H``c1*vN>?$%Cf_dq`%`p$KJQQ9~w<B
z(F9MVEK``iWkvjhH=tJknOhGSo!J>Ge6QzzoX-dfDv-qnb=TkK@965--F`jhQqVV$
z5C|X8JE6MvSKbcO{qVt6h8u1>mz3TP1*MEgmn+43It+1vZx61o-uis2db|Jw!<$*P
zo#32n;I?x~B)BNnNk}+S_ilIM!b(t?)S!7%^{(rYP}{eW2VA9X3Lf+_9N^xOJKwq6
zj009f-Kf3(Ha}qh`pWC)mcP$?Hfh=?SjoWPw&a`3TyD_(EXain3^&qtE^)mpe!cwg
z;d7UMRq2>8#2u*p%ac{@EzZTqa6s?&bWq=$fkC<K*0l3-T#^zSZw1s&^4=v3ZleWH
z_Fi?KG41R6yXA)?fB&3o&cxuqhEHO~^~-kE5c3%t-j)js^55SZv+ersZ+|~$&Gn8t
z4R7hsnBnR&hZ~X_K<aO>?p(6F-L|OKT*mc?tIL(YOWT=P9(2~`*naQ+_LG@`!8$)4
z(sAqw&HeCV_ro>1Yi$Kg41(I%&iv&AE|h#C^<G{Ucle!GAuPDLtZ%O-!w;|T{cYSj
zA~0Ly&icC8#PMvX`to}Bx7Yvw%u_{VoBDO<f?n=^c#jX(e`R1uxc+3)HNnC_e^5vK
zW5E|!rVm?R-ML(OJ9bx?D+9x^w0OuRbUl%JnODo5b9MgsUO3RP_x0|?Y2LHAK@(yP
zD^II}qYUh=HFFQIyw28e{?kT2i4~{+Oo62hJ8#)%_20$+C;#1hb^f1wpT7TBoc^W$
zA8Z1ffx&;(xiHJ{AW%4gaYFdk*y8!$&VIccP(E#*>k;clrVo;@bgowZl{u-pR+NXK
z!SMF&95W_Rj$%mo@+)sgSBJbRZ_kZdmpRWS{mTgiuQ~LI0wuDK1{DtqUVUYFu)ik9
zIqOwJqxDj7Dg;}ELEMn7HQ$qI?fv@QrR|HDA4~)d;mq@n(&S-a2;R8;W)8S@$8bR9
z%iRrEY&d%E_<}5a2d+{X>esz*yKGjnfKT2cK&!#?*9|rv9h+!8mPxdOitTfkcJ2NW
zv4&xC$?b2`&J}xVgRXg5mXW{tCU|g&p~3S7D1Tm2o9Nuhto%)Jx`{BjimsWrPx{=g
z2aQ#HQ+N}u*llBE?vA-McLg5%j;(&*ws_m-5;4K!i`XQ#LjBe$#n7-46r929A$o-`
zl^^zW`Lq5^<HYLu(1>Q(=X0MoJ@<oyE&C~U11|a74UMjPFa4m`Vqyd%NZ|72^233*
zBdxkSlJglG0(W$FRJ!OCdumT)VmR=B`}UhTQ^18xgXhcL3(YwGsg))id8hm+<S@9f
zt=YRz`qhQT%VsqX0yG)R+-m(ctx%u7MF5dzKvtmQ{;!})VcI#RM-hb#Wv6^y&fI=?
zY3mCHh6nv`bIqh7(VkHBD{n=w>hnqLZfndg&V4rNT?@GWyT9yx+hj=Oh4?kBEskdA
z-tv&i`y;9qD7+7rzw#<Bmrc9&+3zC5woAv|cYD8gVPRmX&(Gg{Qv)*YJNfb~rs;x(
zI<*N$?4C?Y1E<)A<(EML3~KZgvo(a53JZSzb;o@A79n_1hGGqbbAJ(N_M-4w+4O7I
znORvYM7NiwXM%bV+=2`Y2d0DK?-V#Y98mdsw?ITt+qdDsiM{7l&$fcS=fB=IyF$Y1
zgI_1(ysLi?7c`nBJn)0{1Ryq`k`;Qj=5uUs#a6Ajz;OQ6vy1mGO$}mZII#WZ?Hn^N
z@FIW%DO=eN{Qt<u;Pz&pnN{`<P;53lzdp~}hDY9@g5kmKs}Gq@o5duooQG;M3U5!_
zK54&O;4H9KfMMUwzlZN#`Zdct3e<YFnY;IF+G0r4+b8Ni?{vYBpRc@T=(**aTX0VG
zZYQV!Vu))y$jlIbv;dNHQOt&Owng3N&A)Z-Qv2Pd>_W^xbj<m8dl!3pt1>e*Jl_mT
zh~S~^hLf*%FEm@ZXKs~jL*VZj-d4hfAQSfNF{^m+<>H4%XG4ZR?y`CtRxq>ifHi<*
zvEYR3U+xxM`Zn!av5rH-{~c?sy>CZ8ne=W78v{e!v3qHo10kn@sI3P@=*GT|=9Sl(
zB(}~k@(fo3MPS4At8Dypwte=KIdH^=M?B(6_+fnMLZW-0^t~-}m!`k{8nENQk(!*{
z-mmXnn)-o};X&yeP^t&loDKEn->#<ZTO@YiMCr~YODBLrE1`Nzx(I(Wd!H+F&zV{m
z9XVd{2>A8eSp3zX`C|9O7Z>kcs^Vke?>X~z@!qB051AMal-;<UV+N@x8kW6pJKgak
z(zZcxcYnv?m`igZHvRr`_rtS`7aFY^9t8Lt=-XK@p>v^)dkyI187vk-gyxq`pJ#I`
z`d64|gKWv?jQp2Q4Gat$=6*Aq-3wX!`C#Hc>1k5m8z$~PsXCVfoEWyngW5wM4ji@=
zk=~H{PM!^vhqW0&zJ(ZyK_0mOdiTSR_bzSsV#`?wYPMf3n|_azlYwE|{d;Mf1tFQ(
z<`Sso9^rnZaTfzp0sLm#KIuL=UO9`-j$}b5{Wsfq#eSH?C`{jiXr^J<$G}jtd!MwQ
z{9C=+)k_X&@2I;GJIgx?v`(_@GRQ(mgW-=~_9g9COg(pg$6Sg5Pj_$F{VT8HbH)b;
z+vAT|=G{1ZIH9p4;^`#hnNUo-&aZ#pHu?TrJ==h?2b_2R=jFc)Dr96xkO76E1~^b2
z@PD~mASr0Sn%AJn{>h{;a2vJZ<BQ!7KR##_KFr>r|G^+)ft_`P6l9DT(+;r6?Zxlg
zCU0B+B{Bcy#)=00g3r6}F3mp5%+OGH3zRm%>9@iDV)<b&W;uhR?}CL>ymtwMJLWx;
zA2J_^-;w9c$^#i(0-J|HG{{~qKRnyL+FQPCy4(rDj*i>+-|EI{aWOFX90vs(=&ULR
zhCiMAr2C?hd)urN&g2z&s)M&_HN1rQri$+<|Kjq`85<6qN&x#E!xD&q#Qc5IesXVh
z);?c5Bk{|-+vhGlJ)Eug((eregF$Td?6Yo=35*Zozw#`)JN^eMCp-a_?2wSle6{<b
zue4RcEx*4%58P%fyXGsc@!{o@Nz>p<;UJcvkPRSRiSaKFTYd{`m|J?kY?_|@TfNwB
zVFreZ98gsPE^ZnA^zM^>CRn)654l`FvVVU6o=j(UIetZp5SbfR*K-#f*u^Uv(FM_i
zVh^12L%Y`8=8cYR*7|%=o^9uHZ%0S@-;LaLPIc{376yht;9?gt1^B@nRK-aZ_g&?Z
z*ePG+sjUbq<r(Ui*cw|_mh|x`G>8YcbFH~ud^%KG>%lzG5_Y&PXp9dkzw#<>L`RiR
zo40K~e~5V8k*}b3`7G}!Eo%mb4_iTr@)0;<4y0%F7XM!zcHqR_>&G6%T#5p(hCc8-
z>wI9}tp|<m^ZP{w_MNJg)<}TO6r))M;eJ>J&NAsQ58u1AJ*aVg+1;{f*MiHZtt<A-
ze#*kYFz*tmFoqn(^uwptJjUh7{wv%PJ7;%ToK?Nc2^zv;_#swnZo?y2Vbk&;BJknl
z+s6;H+=|?3k7z<etU@Mpc7qyq>n>gX_G`o8FAfzSPJUfHcj^3Z)1OVc2I_(CX#v%0
z7Z?uwPk#Te@769cGrs+|cpcc6Fk6Vu*qV3U^$z2bro$^0b~IUtvV<4B>8{<qJ?5Z#
zd4sip=$m|xCp?93g#SA#Y?+_#rhH%~OWk@kaktH&yz@acD|37Pr^;oL8=l|eN&bHa
zTyPvPyK*UyU&f+@gVDHPa!ToQhsN9e*AL&&@5SedH?yN|J$yFr((dom@7c*q&$j*Y
z?%TRcDyPqWetUQ6>cltKkFhZ@$X!mFr3Ow93<ttjEd9HolKDbo-hp|)OC^4DD}yEY
zS5Eu(@ImA4W{$cWHhzEd+GNW%|NQ&#>$8o&3RW~Qg9`@az(Z#L3-I1u9scs|-=*^J
z3~i@%$bQQ!4uARS@Z6=_%V+Q<*XNorFeHTQF3U86j2zZ1jk@(&<^NUQ8IAMXHtsh9
zmoFQ*vog#16;8~3p3atZ`d;3@ucxigzfOD;ehBP7Wc!fVHS?ox@q5~Rx0p0tx2n9_
zKXcO6<L3|GSl`Odz%XyoQ4`-bu<nNZ0PpI#Pu$-&NdCBP@J-tpEV_H$w6a}4#r!A9
z+_RkW;M?P5=1-FHd_p_!+5EE!IdH!ptO&_6WTwr&s9Sfdz5LDYU%0#5hyTnG^*#Sz
z?7I|w`t0W{iQii@7#I%NMfqG#ft+pjgKg`U!)Isr_I+XgcIWKd*#+$z_nU#e{o%^h
zOLj7LA08$&-LahT;M;fm<8Jq)^Udu~+;wINn|=QJ;T!9}{do><8z9?{#GcU`b!+)M
z?Y+OZPF7)$6Rdt%JL&aV{!h<qmzKXbkUdss``v?q;Xn;2{2}K6)hv#>^;Y_V+usJs
zit^vfqVsowhaa9jTI|gEuC8W><%9>#>2V_bkDi@VWZYR?ap1n)xAL1vHexXU=x^O}
z*}DGE&i?%O#<oJA9QW)lwtxBc*~GKg?e1jmk~>!S)#JWA1H*yIn`SIK2|3i^gKSo&
z{^UQ=&IxSy_>$|hz-@&F|J6%n)hu^@ZkMm0*UzW><H5K2mNy=+dH-I9=flCf%uIF>
zcP)J$T+5R94H>S(a0*1=!NjYV?DkFn^7wrH4V!nn_TK+eaejOC@6PqLHU2NZx__S?
z$DjQFW9@PV28KJ6kDB;KfxF)a%2zDCyYFYVWwUt$<DDwgp1(UGEri?Kf7)I-DgLM3
z&x~Cx=X6!E!2$b7-sJuF9(@NFgb+(H$?ApEzNwZ^`nRDn=W<qY{mcKG<c|IGerL|g
zz>vVMvn&%jl~S|(?Cd@N{M{4O{u%fD^-ji@@Zgplc=sX)V)^}iiQl1<#DkcOKYHuF
zy#qg21+EkuV}rHWWs{i@o8Ecq=1zSQ;h&)P&$Q?7DdG(H@WTqy$2+jsYP#@@iK)78
zkASvmVzUfY459O{<gvP`Pg<88@R3oejP<rQ0S^bDs>Z^zS$EXL7cv6dP#xwSt!jBq
zbVg^nr(gTVcxiC26pJQQAvyQuko%2tj_zD@phrf%G8Zw1hpH5nS79?3GPqXozinf@
zYNevCf%5sR%y2e*Srl$W!|{zXmU)8q*fTKPm=twO>*U6L2YU8M9s75O$gtaB1z9JT
zu=?Cn*0g79rak))-T(o&0vF@M0jq=H^pa2wak!y@@&2oq&h<hHWn9`|;{54`zLW2O
zc^gu<Zh5WZZpCc;`Le;ca5v(7{`R#AsMo~Mz+R|lY~ZY)ovGeNqRzL{$LeN2318Vb
z)6!$pnx%6kAmf5yN8us1t-cKD2FjgDo%Fqk*|>N@N~E{7A$(0Z9=!|<IsVHb3r=l%
z65m|+)O*5~_Cn$0rfFpv;N>`Y^@1dC^!bH@Xod=l!#DQ(eR3;GXycotlbzXqj5zQA
zzMcu{c7V<Xu{qiM<^YeZdgQfBe0ZA$U<<*-_tlq$!3?=;2H#$*Oy9(8TsjBj{V(7m
z4=ja`X!yN(#xhUH(yR)Wty@wjrQc#U{;GHKrNOss=n?>Y`ayC(>gKkAXoe3NdP~^T
z-dLQx1RHS#3*#o<xi41+%i8oMz6tk?JHdbEMxpN8Q@FINe{8=5TMGczhamRFF9&be
zWw2Q_-SggTh8Y_-N8OqVNf-!KI9N6F{UCK`h0Wm`>nF#|V3@IUbJVS?cOb6Ap$jg2
z;QI^6ZlQ+bragaOtK^?yICCdb_iffY*nluxDOSdV=+aZ*ynDcJheuH|SHiP%S()L*
z{a6)a2;N^53>vj(V350S@a?*1+$<)A^sQU8!5wi7#pnVLUh6E&oCF@4VkmRbeQR}c
zqAkOxEQ#O6MCw0XVg+@&r8)b7_aKKO#*fi$L*^ft{;~v|MjP%L_WU(EDLt9t&$~6#
z%2e?-M&Ty>+3W|2oEw(no_S}OKI{g?H)7TSt`H03!~Rmp3WEcAlE?m8o%G(!@aHAS
zYNB#1L(RRUS!&>!JBEbgS1$2QUNcGNCffu5{7G~8llM;px3;j@iYoMP)n!QSTy`Fm
zamAN0{^*vU3@SI^M?9lyK;s>V*Ikx531U}Sh;Hu8Co^jq{ymDFbUE?Obs~+Bw}K3F
zBrK1e!Tun>4{ZG<G>fov55V=7^Cs{2`n0-};omb0P`RlANsQRFAw*T?f~yOL4WIQU
z-<iP)wOyS!+YQR^-hqVPfpyZy>gGPV6u>aQ1YGV-Bq|OYETercKY^w+e+O{7U&~<k
zQVmq@X+z=`;a2Rd8H>-o0?T|znKPT~!Deu&zg!5M8^Gdt2m|-Ipwqt?7#?IwfGWMU
zI~nX=E1Zn*ww{h}zyNMy!_JpFkc!>^RO?QLe;4z&ZYiD#m&V7KG5Opru>6M-9#G7k
zN@4i_VtdprZz8pKpM%8FhbJ*=I}N1|*#9cmed`5ju7S<PLp)0`^qmY@oA{t}<<eNS
zpEvUu;-7?0>P~!fy@;rg+pyjWaxC(J$zP04_P%7;cOr69s_xqWJv{azq`rlwLzXpE
zRJCo4SKnzMdqCXU57gT5fTTx+QmicGZePWstjz14eQ(%59L<|Fhc9_Qv>e5%5h2)6
zdnpo9XV2Th{h6_5YO~7es9VK&dth+gH`Kc`XYoK94E_<|Y|qQM@0S1J8}TQJ^uUWX
zkR;}RZz(6^zLWV|w`jkFn~#rigB@fyWKoiTjPBdgN%C(wKKRC|?vyxIrwd;qgU<*C
z|Il>E>25c;#nV`Rq@{aK+q%V>lc=b#SY-t{ocX|I^Paz@lfsv={75_Q8MbwcFp&my
zS%D5OWMDXOZ--A&vR^}f*_4z>?`l0r%K@*$85kJ+ebd1+5ezr@58sGaugvsocwaQ(
z$^NZdxDksQ@flL#Wt9!~>4CV)nNN-_VYvTxdep6{J^1v%<!nT|GiUWcimd7-)5>N(
zNuSMhryJ5OIt_^xxMJ*#1A4F5K#I-k=c$vVH#6Poeyp-O>Q*OYZU?(2gy@@1=OF9M
zHpGMTj*0exy_Q~^)-1K1PE@_y5W988vXhWL;D&Z^-pS!ESRcoeT(1dPB!#dGJ8So{
z&5*SFX07*SraQamXJ>|Q-Qo;6I1#%Rgy;=bQ1S&gIT)%}O)H!G<itLP@9$zKJwJRS
z-Wykw6QLip4@2+88i+vk+e>>Gq6_DwgnC;O*UD^&-7sU>Nywtf4aXtA=h<NTU-H<$
zrSKyMAco^0ZI<~#`hqvAr>n8uSQVcI_Wew7lER?}E?lA0ojD7#D!;)t+<UiQQA&El
z+N$YKej0qcZUjjcaK+deA1+uO1>2P%cJ3_ChEj0W3tkBp!ma}$T9GjqyseXA1E^oE
zR+*jEu-4kc=-MT{r9>554-|EmWkNUPq%D|MHY;U|>4E0T$xmt|es6^w^oXzwJ1ggQ
z(kwObu^$WxYFU}5RnEWR{g7}^z0$7duNUkLNbFi+qT5ymLwXcxPcPkJ;D4n7YVhbm
zMjBvhaM8E7%vk1`0G6FGG3u7lN#ohfHao&S_1ZSZd*d4e25SKk2Wnr7{H-s0^M2Vx
zlfcIxvV|B<GCHscG%kF#O|OgRLubMaj<(K(nH;xd4?f_&f2%~*poGPlJs_&%f%T_(
zadYooJEL>?to-e-HbEy<mrQ%`{n!2LAY&N}EW*{;D}=>8^IosAoJ3SP-tc_ea>y<$
zp3_BJclds~_=X|>k;Tc_Skve5;}yV$<03xH`E~`|dTnsrWoCU~_D%m!*|Dbgx`|6o
zW{ZQmW`T`1a45ZcN8NIZ?Sa|9W<06c8FgniQARYp-?$tyzQA*B>PyCZcM2!%-j#LE
zmnh8#zDrCEVu3inan<T)b|)A9Wi&gafBNd9OGFig3^m=hSHbR2xUjBGjv=A>PeAzD
z*jQ6{H=-Qy;Jwt;AQy11ZD3ptcEEFn1IH?SjAGY`nX3_J#>#Kt9iR*i2X{+VF*NXQ
zp8w?fuB>&CLtMa)!$TYh?)B14Vq{=Az_2y8e!`O{pX2{Mt+l%^UlW@8ck|zLjjx&~
z|AyP|{{Jd{`~Q72{f}*DWQdE2HRV75C6fQZXGmPt)b>HjV>}jtq#FJkXf4$MDYahq
z_E)oty63*S80)*2_J0eW^!xnx?eTW!)F0or|DVoqAoxmX@zf{k8yU<lB~N-;v~`Ce
zQF)7@J}tyc5Y%_r7IOP*x@VtV{OjM%D#w}cel|QAJL&iN>-*n5pZxJI+n+p!4If{v
zvi$K!a#y}?L+@AbNvoe`eN2Gwiv+nBC*EhKwX_4|59xJpe@#|-{aWMX&F9CRciY}P
zuJYaU-M`wi>W_cx{=Cch;3~u)M;Xm-{i-pJT_;wa2GWPqWSGPQ@5Mn~po{r7INn-k
z@A>IzY1Vx4k29X=oqYTJ`0k%6HT#?E)fsFeV@=sT|E-iba4dR$y598FN6&=7Ou$S3
zxxHcvczML0iQ8WDPnx4@`SVXjR=4@r8Bfek-u+c*CwZT52P*?}X!u#3ldXRlw;i%M
zS+X<AW(HC9YeS%B>Icx6$%Cz1K#A&2_v?s1z26m2zWp`J|JZite#QguR<C}haq|5#
zwi{COC(Y3h@3x*yRBGqBy<&>d7f@aEVbQI1_WniRep-c9zpnKtn*AirPVzplEgQq`
zmFs3jPU8N|lrwey^wmeF!Vg}>8zgPnAzp@{;Uk;H+g|&Fg2caQ)my)6ACSqQ2yI`;
z&X{0+C3N#YyU(*N8MmEl{~B4cGs<E%USnaBJQr3>Nh)UmUAU8beZIP-_oh0VE5#e^
z)OJS3e?Ivm?}Z`5jl9yUchoFRl@DC2gp>fwz(oVh2wb$pv_Q?Hpvv=uIXDm7fD&UZ
z@6S`qRm?rpKA-&IC&K``I`{Q^OYOsqIcwvmtv<RGe&!i2Q^DeG$st~bpw$32j<>(E
zd!Dn8Uz_%ax8E~w(wS$IKdvoc$m!md^=`6^6i-5SE!fTFYT)t|tQ!w;qjqsn7pTee
zKz~bY{k)W2`>uATf6zSXJLzVP(LQ032H&vov%jn_SSvH;Y(1_r{q)tOH29WvJmxYq
z+%?l$Is>#Jc;BV6zn+s$t33Do_Vr<Fjh9h0D4^p~7|a4=P5JlnGrno51Qjh62H+za
z@EHn{JCG+eHOL2){ylH4v-dLkTO*rwNc;DMlxd)ZXWzkpVA+b*&$LeZvoYS_gr@0Y
zqVoEid4ZZoK@C!#sM}wkdoFu@d*Sv3WgE4fo<+9vd*1sn9f)4N`kBH>dtSy3!F6%#
z#KPex=YbrC6W`EX9Mt8>$iN^mXWQ%kNj~=R?eiFOR`h$Wn|$Yt`eSxw#t&hyR?Sr1
zX~1y6@8<+it!n`}UjV0(P>DAkftp7_J1u$KK&7nS_3dHl-8O17Rd>$wKlZ(i`N7t!
zp~X|4ls{xFJNIjiA*eE22I=xZ4Zua+s9PM=1?q*}$jrSiuVU$6H1)}aTRA)VUqAm;
zW3<myg<<{5b+f*vpI`Zc!TRO&r&)!WkiA2=41|g|yalBS0S1PKxmU{m22RSHbXw(i
zSlaO#uOid=J?U+%4@|Fw7SDSUzLBx)+VQWFRXd~Z%mgJOsD9j3f_1N#CMcgKEZ-7a
zKjn$m$<|cKhT|&NUuWA%+DphZOb-b^TRX{lB4gRLUp0k0V|3HhK*bks6QMFU>=p-g
zfkqQ<aOPg0uevkle$*7kDxadcDQ5F~-h;N*ah6{7nY>3>JmLA?`1$LnuRhvLTqAzl
z@fA~&K;taiqCl~?Zql46p?^>R{xUV3-}C+{!vo8!p~VwY{{GyguXEts?<t^kac3rY
z{RY%&IH?5d9xu&hObiSO+FN7mr#;a+xsvrE|K9lhZqFuv+-t*NGksUqy2*bOG!7*E
z*%70=?krJ*j2nKsEfq0lWMJ43dTX7%chS@*SBgHUyuZGF=FgNGeQ}2StJlq1tg@e*
z(?H|1%4JY34mk`5r!yfE4QEZYmd;>jU}#u-0aQ}FR#`6Aod4<bFH@8GJ@QYOA5>on
zEq-k+dEkMKnq~YtvF*!1?FxuqJmd|Z#X((}3=9l6GIFoWtM2qFO4R(3*YCOR`t=&4
zx(UJ!`GMhQD<{PtWtLb1uAW{JRq>gfUoj;Kv@XRg2vicUoAf6^v7)TsQ}6lYk3LZh
z`&?s9zkBk54CVJc2TBV+i8J>2JkY$^4VT>O@v1xhKQ%W#aDAg*dA;m!?d`AWLd+j{
z*SRuFthxMk=H7Ku=|l}rH1HZ}Exp0az|hcpvFvZ<q}M9#VU6Km6;D2`G1@m-wqf}S
zaA9_oNn#Jk|5rgLIpYaWm{d+vpyp9fzkAP4Q2iXEZn>3h&&v2oF=y2uvl}yfxPK+o
z*t<wk<iLYkkD`4sx^p1&3NY=s=zACDfzAZjvvk{Q{#)zz`+bU@6r6lu_HV_LwYR?p
z2Qz$NF`mfqqh{Xz^{b!xKqgpl83h$@*lw(~^aMWx!-3fuyX$5>u{ybrH9@)7$7rtq
zvGQk(56)i+EuQ}*K!L&Tcj3;c7~;B0AAY$l6}idCz)%qiN>wveEkotD9n$w)_iXaV
z=AEFMxJ@ssyl-KAzzxm<4|#}+{SRH=j<7K>JTToFTR-*5ca`Ob4qy8L_W5%)<_G+D
zR4PT-8uYh#zI(OGQjn+u{K3~AFU=xm28IuhKzY^3yJ&@3&eqCFFKdkI43ruEgKG8a
zd#wr#HBSvsJ}ufhgOjKx&WBImK=aZMRJX>~Unu)qIw^FL^Tx#2TRq?1Ubo*wl_7qI
z7;}UDhWSroV@-`A8<wE4fs=~6w_=JC=n!Q6MQ?v?R@to5&UM)D*Mt<S`91H?ay!JD
zmV5TG%QH3De>Ob%vuJAp>@Y-}27)Cj6stjdt3KShwaz|c_dlzXS|=AC*s$4e@|~@*
z^_fWwlg_v>JkXa}f1bbe>Kw==GGKjphz~|?OGQ9qV-;qgieRRyWr!$S>O7D`<<IaL
z_>^9iQTe(2Cu2pE{PfjFw?bCn;V};^bv`@9YoZ9~UeSwXe?uqDztVEB3Y<dC=P@xH
z4goj&K}LS}1obMKAq%9yI`I(alS8~F3NbJ=yazYEA}1xQHmbaz9CJ?nF}oo{+tPKj
zHmhiFX8zzJKN-~IuST4^g2zyXefL*PQ37S=`)l6*%AE9C<+m17{ErzR|G#%(l$Zu?
zfX<R_P_ObS+7_cb2QnFk&qR>izRU9(7#J98x*_@A^ON4meH{nF`zHUnR`z$P0YkH~
zu_Z(O;a~qn>Q=8#(;}++JMdj{YLE&G=o-b$-Tzch`c86w+Mqr|eI_UXHZqjO$C|o(
z)|s0!+<)-5XzL6vqUw_mxo%5EKqLDVo3_2ypZv$!@In5sDNkzbB=2*wZ}|Oc)lT1{
ztSp9o2iw2iOxzh|(?Oi6-`~7sWnefEyak-0bWYl{Fz-8<IO+bab^As569m%I*d9pF
zRol6C^)n9#P<Ro-4g1qWye9H6Ff{DH0;)|TCnYa!NdI65D)s9GgcHm`jfy9BC--$S
z{&4H}JU4Ci(Yc@q*m?0y9Rq^`gQtrl5nWgR&C5Y^F7->_{`#!4-LtQiY2L}BziOAh
z{iW>4Sa!K+YlTNqava0H!*!GHzgjgD@3LLEk3N`GgC@T}q~BV%-|JKMq}quM>1A`C
ztb6;*IFYgJ+L<j3HqGUwS7W${s{TIQ@Ac9&Vq{?WAb)F}y@yfseJ$oaP4dqtf82V3
zVfXTNvwo|zFJpZmxhH;|Sg;~d#q_^B^FW6q)U15_Yq84q*U^a$;h*}qy-rVJezQb+
zGt&njy;rMtu3Y`hfvCLSU~i_i)PtFU;lTbavGtRln4R3GbU^yYj3+sElJ*_^8>C;Y
zvh@12+mf-u?Z1_|PB`~-qS~ts>)&uPF)$p6y8ZRC%6`?G;w%-)$35TOT4!&_a3C*Y
zo!ECzyIH~w>09i~?_3Lg3|XWEj{_Wx4^wSHr&DF@{-<?v_rZ1svxA9~Zf|>iehuRW
z<FsWg4`#})KhIlwbq)upUxvdBgz$&|-?lI?Fi33M_B!3OPO6GMVeuRF$gQ#VrrZbo
zb{Hx%=qJ?X?O40|nM({p6K+<+e`Bqs9*hhO1`eRk%1+OstonrJzc%xG*7LAzxch2V
zWc~Y`vm6Jwf6jlJWhe|8a>i{OSVm&k-i4qHEU^eQE^|lC@+%92*&YAf>*sq|Hhj(V
z;W)ru6&`*z1Tq2*)`FWzc=4?bG&q`&0UARpn*QX*j|0<oWbCfHR`$2?Aj7t6y)PLm
z65oR|3Q;W^o}2T&GBPl<Ed~vGZTI9m%a=2=`|I!U+h5t+m~YsfzWPY<<ed_RJsZkP
zull$Wm1^3u&VOQHU^onJf!|j7t;W9X%Ew=|Yu^51W@gG+D!rNU1J}K)p~Z-EXmER%
zfx*C~I*grx;YKZ}qTK1bDL*gawCwu(=WngEH&8inZKt6m!}=%7cV(p|5!LE&-ke?t
zI&bP)*<X{BS||6dY?LjW^JLrGU&_r)IsH$wK2Au<Gh&E4=^ATl3_tf7pZgjVZ*DeY
zU^wtD3)C>2+u0~v0xoBSA2a1ll`dxd(53fk)l5#vk^p=LF)%Rj9GwT+f>#y{%5U$_
zaKG8`S7m$d_4yK#3E6jMa5aRN1%{vX0iOv^z$AtQj&Eyt7#KEG-&!|ctuj3-f#KWa
zJKJLGlX4o)ZjaHGn{>vP^?>&76|2+KATx&q4BYVgn-0jlXoz`X2@X*6N*dM{B&#vp
zJK!2?if_sIAN}gG;yE7E-WC3MTf(4pi@`)pfjesI&a+1kGCy>D=x8WrA}1mjlXXyR
zMRMaU=B<qCi%v87u6W-&^X2WYiYj(S4=c^y)YrSF?LnH5d@w2W8Y=_C4jIkqnJzUZ
zngy+Ff*ZYe-jR}D@HtG4>4A@(NvX9cQS&A{LZ+rNGBD^lpGuVylt0TEv(eGzO_1L9
ze;f?EvNy;67ZjZD!*XC|P0p(_Eqt3e;Ne)%skNGkf#FL$*g#)Sf#!~gWif3*3?;Wt
z*)Ytxczjvja-#ARgPw0{AOk}~o%hZ=ZbuIFF#I>`>xey-s=?`yzSf8Nz|7j5S7lj5
z4beTA6mpG)f#JpaDW`K?-Y6v{xHasTu(y{F)^m<z*p&|TCi8)ry0doeH6?1Kt3XrB
z8|2O4Q%}v5$^;D!6c2>=&YwS7bNWIXhPhjexEa#F{qaq`e&y|2qUQ1&yaOTy85kDS
z2k9N|xZ!%_Kn=rv)4q;Y7lyf8jJX+PKm5rB8FqoFksOEnp<*EaPM>nx0PHx~1KoF)
z$4m=iEIFOFyRN6>{uw3*cANU-o2I4Kpxy{P_HZ&Tq)+|Iz`*cJ`KeJ)N32WFS+)(+
ze@{6bW7Kdiau!QNpTz(B=0sHs4fj_0urn}R(C+S#n9cJb)NV=4vP+C5r_RYRl$_YH
z^7c|tEs4_^Fo}kJzh1t4d9s3mfx&h{QKZ|Ey=xint@-!m^m%JZ#$5|n-ag(TF_XE0
z@8|Qh-Sec0N+d64pGsn2V7NQIXr|kdy(<~`lBO2zoGP@yIBXfif@DyRGKH*ifw=((
zeZhR{Q3eKvUAj*{=_%RG;(U<6Cb-dSCyy%Yi<YU93@;Y+``*1LMN}4eG5Hi|Oz`g1
zqMf}RQ#%>>@<ar!BN@--Z;rLM@83Uzse$j7X=!ybQHf%KzLqy514BvhsZ<HU)g2Nu
zI38#m)11C^3&Y$E#>@<|U;g-}UA^-50%SP^4$r}a9ppp8m>3vdtO<4LIm28K@?CTK
z%p(lx+l?3*WI@T6sE%uc-HJ6V3=9`+HK(V#+?mPtK&8%ir_T~Li`7&AFqGV=4c>0d
zOjN5f_WR|_mnTnTU|_IPd1}<#(Qn3Ru~J{~<GaiH_Vy?E3gmq6+SxZB|HOPD@oU=d
zdy<eP8!*4%pkJ&y1v>BH?nF@Fw|X-8<p~I$o^m>%s$p}aC%?n-wX=5ZHH2)}z+nPR
z_(JGZ(1CZm6hV0>)P=`~sX**;M}!A|ftmJ8#uqypzrzobfoZ`;Ur3z_+Jj=1EGnp6
z%rNI_?Wxo>riRP6bFT9Xesry3u*$o0<?SKJ_B?F*k;ELtL&F#u7%cWrIc=l#&WG^=
z=l*3edA^JVV%9eqUo?LAz3azA)F4TTZ>k^zL&ImUoqM`F_|q6(ObI=enjzFMIogxY
z!Cz<guDyn!kv=4=u`@5IPBmp<U^u4^3Zki;3|8qPg5H}M=G^fsVyH@bFq^1$#0Ar-
zptEVtWr+$h3p11idF?#o!(3oB`|U47rMl@d4f7<-OLrR(=N{3ip!0FgDL*yp@38*K
zX!Z8`l+$ZF8T_(T%^7Sz?OS=foQ<f4*RBPdKwXKKOJnksA2okr*t@}NCyy^{fsyq}
z#uqa~gSY1qRT4aSqXp_M&Ivn}Dj}$Sld&pUM3B3fan2dPEQYEy0YUG@L}ircVW72!
z51xn#8cvd35dJP$Pk1t;%>A_8|CE*Nym=kYFIkqC?nacy&aDiRXJB|x5~Me|W5;xv
z1=FW#PG9(v!7oYOn8DU0|JAo+MD1@muruToGXujMH;~7?cQRIG3kYg|W}I`xFO8up
z<H2pB=E@8Frh=AFt8eb<XuQL)w`_XR%$WiYc9`A%>X*b&^=jS9Xmg_cR3J9>4Fdzi
z@##e~ZU1}l76?AmoGu;ABy%^tlkvsMN}?m{i5BS8&pz#^MZ$u`Ga2=cDJV^Q#$vH+
z?h%GBQ;1s)V$tnY#=y|9INIfiLs~<35y(p-4_1_YV!DuA?t6C^QH$XlCWC58Pf*KW
z*>k6l(xdt>tUEm7l^%Tq6^ygQA6U%V_0^w;;n$n<vlBPR?k3XE6)9{C3>JN$#>KQx
zOfhR5U3AWH7lh1z%DUh<+df{RQsVNEmAniL1tzCEBu;P_Tnsvunv~SA_@*bf!}+_W
zrLRFZEMhMykVX9#O_F3_c<>=e@BO^`C9FHRPER>~;R=KM#>t`$+#7OUT|0}c8Yf#O
zR@IP!;Xt5HD(eoZ=8hS&r5}6%rJXPay#^v<tJ5oufuZ5B*UmG_Nh;b0LM!JNRi+m;
zEdHUR%^?1umgtnTLaUOIfq_pQlyc-%Sa*1FZ)TP`+PsD#hJ(l?95NNOc8`7Q6yXP1
zy}^3MpP6Ou_ysZO9oa#2E-;x28e3?eSTxh+$lN&$;komQB;%@C8klc$avfluX-;hP
z^evhs%E0g-K`e+VW^dzn#si7D+g{r%Jt~i6+#zt@{O}$4{Y^NdhJk_MfME#eqUSxa
zr&8qvl{FbVI(|<%y;gvMed}c52JTP$i1t>&RM4R``IC!wc6Q9{VfZt>Rf2*2tAaX%
z_%R~WNsOu{XfEWea*~2F!~dsxPmKgw9wd|nF%=}fo3*PHGz5>&ClERI(36}D3?HgA
zr{C__F<qcxeMARSfyC^$zZ|_7^d=CQ-d1?|F)%ckN1k9mVBQm?XI#j@_iXbNhL{<F
zL?^WbEloxShB$RlGxgmQ<_Ff#G^a0gU|`=kS+IfIB%kQa<D#m}z;Ix-?h@t)>}-OD
z!kiBj<Wg83FzqC+G-+PBgoT0O2DrPJ{F0%fG4fQZhRA{0wjLY@T4xbm6x>?_I+6Q9
z=(A0XADo&yB05+<m_aLkkas?;C2GXeqQ%RVfuZ5=l9*+JhLd<3Z0{_O$zx%z*v!t!
zxFg{GY+~a$KL~WQ?}qI=QyBI%eP=&#+ctya0BbRE2?V0~LlLNR-=o6(K=fU(p7|lh
zJtzI_81z7`Vj`OiSG7Q6?ca>1b2pfOkYlWv&Hk5RM**>#>#C}%g7_I29<T=KUGDg?
zLX;u@OTYjAKYuio4!kxg{r!hW_9XiO*5Aj|c9#+7uj<t*%nS?_8+V2<$TWQCJaF6Q
z1^a<kA_HZ85NJ2Shh%V|EMa=U016Z*raiZsOBiBy{9cxKm#A^S1NXE*YpCK<^n@AM
zpX_D&P-Xp=VF!~j<WK@g2E|SOUM0fJ!0=<=l+z|kZbpm+4wI*x4hU!nubjf$ply&#
zY?gVmbP_iM!-MuTA;y9P=J(<a*Kg)r?-%^&YR8~AhqwaZMzpFV1H*ysOJnZ29*Iz5
z=u4PZB+147L5qJAV*zU#(G3Lg)k~Nd7=EnVX~Q6MQb9@W5!0Sier62oh^+T+c&myt
zFdVqPG$v2!k)IqxUxuFEfz>vr*bYoBATCkphk3FxFnsVW&SbFI6nH9C$>_j6IThvy
zUOhw?sQN)CSr`~Tlxt2;bh+cre1P+e3)_wJX}jwt@HA*YBCaJ7w`3A01H*&WX`2`d
zl*%=yOK)WS_HA|wLrmvxqLUVXC}^uy&D9Vw2EPnFGl)OBb`Vz#%CAxZMa1eUr&W~P
zHZc@9fs$51!(N+HtOrDAnh;y%?pr;H9W-f|Hi@AiskviD2j7P2b7L4{CO)5?m_<~B
z{6V!AsF(Rq8Po(RpTtnWR(z51+b0cihVZmBl1xZaV`oS=^4hsaSpGq(+3l~3Ll|Oa
z5??>f)&ea(`In@{&XE4ZmSw~I^Hq!msdtFW=H{WGJz;;=gMyQ-h@rr3@|4pT7#Q@w
zX^1j}KO?%$@F8?6=y;?5W>c9OjHO+U9N~Z(ae}xOLrthEHv@x%%c-Z&e!6opSS6&f
zG>G5!WIZ5SL|pcW4?W4m!0=&tCl5o(5sRlq$vh3>l~Xtyv`z9}eY*y}j{tXZ1(7-M
zKU@=R#!4QBk`ren80@#*TqmE(^uX)qG@|<We|%Lr85j!Q2I*}VG~D-%kD=t$5g7*k
zZ?i)fViXCrO8+Olf7f^G#I`oZ_Y0rJ)pau*5pT5MWcapLKT4gcLb-wGfeS-Ei-Dko
z-m|g^){NOo5;6|gH!6P!zrFcM=4bs2{{L<Kr=D83vN-L+twmS&e!B(Puf%XbR@#Y)
zfnfq)3qwPjq*&_K+(3qTPu*rPyjb{f_xAV4#Xz$~kO06#uDC70%fQfJBF4lZ_2R@L
z2Ak6%GZ<cIT7ni5;n4<>dY~?Sh>?NeOJrc!ZOx?%`575_O}1$;oG()LVfZp7ow$BI
z)Qmfh_n8?Sl6ku}Nkz*wsNdxfWUw`@`2KA#k;b&ggHHZ^v9oy}J41t;^ztcsx`GE5
zFFVBS&|irt0beX!wC0;!#dZF_pLgl^UrD?l^ET(+4<AO8@W8PAAg|l}e;T4cR-H20
z$Dj8Za)ZX1r=4?B|2@y2_woJY&Cp>~vC_0h8$TCcUOo5h?{8|15epZskz1u%nYZ@j
zlg9dgPqWf5>u57DL_M7N&vE@*X~qAb{$R<ZTDOL}Xoomk+fT6z_JbN@bHAV7o_~Lh
z5d*^o?~OMra=$WWY*-&|J^Q?73(JeG<@xuYJAY~3cbu^y?$@v5U*FF|l%rM)u4Pnz
zORrr}owva%=J4)6RoM!E)-=BEcl;P`J)7UOl=XpR*QQnR@8AFCJ5evcR&!eYwYH>l
zY$^ASoK^r$Niw`x5N&z-X2XGHPju|B{j<BhcoNie4Q$<!jV~LGg>Sx-s{i$CXXnj(
z$*bPF`>iiC+i&yXKkI^J8mre@@Y_}|jozy6yTW|twROMkv;5bUndQIx`Ja*DK+L<7
zjZ1FXsy~)>fvp87j0)yka?kpO-#h2~3ZSFz?@H}D|0BTu*^*@}358O#!sq{tIlc1w
z=hybXj8~g8GB7O2t^4`y?QB<O28ODY8ml)?xwP;q`+|r6YPW8#%$&#|_wC)=-zR5v
zb2BE){r49&XrdNqtbUuZV{dHszPbPHUL5#!mhF)L>w2j+whxydwC>H=wRi8cgYUXc
zq#qb$->~g<yL<WSU+`$?0h^@ruX^Wz2E7;<7(PU8H5T6fU2*q@{}!KjZu>vu{5ju8
zZ|2l`EC|nw{rtL~&sw1U{MM?;zp|^gZvMHH(O#Z`Av<i!)iv*S&13eIow@ke#%uZ>
ze?dcf8v^*hJl=Ai<3geA`PJv|{F9rI%+A2DU?bRzpe@HBFV5~0S;cT6cYo~L9Jz?(
zhW5SHzyB#M-J<Wp@a0N=ea!!NGeL<6ob47kW}OZHp5<J(+vG}ZT>NY23u*P&*GRvZ
zRlV+iv~2bs+x7O@*Z+E&yxf<0JsPB=;oB}#gEBLnZRe}Qwii$Pwi+bJ!0=$^oS78?
zwem$}dFO6&F8JEDY1Q@FIlG@N?=RfDzc7rCVZrSz%L#99*%rpXZ@(H38b2yt`PTTG
z?fOYse`mZkW}3VF+>^NZ+1LMP*0B3X{{StJz9786=J&U=QOpbsdxNKh-aGIo<tbxE
z<N0vw+0kNL4-((s+h^~oDa$R$VEgrJ|LgnrBj87RG<;oYnlSgT<rbOqMY}y$Gk$Q$
zzQPuLt=(Y9Kl``YZ+F@6ymfPq$zOI*snTH9G3V)9+trOnt1msjX*U%XYk!o_ov}3j
zXcV7bJz?wK6Z*L|$`1BNa;{gMJ$d4i{pssbcTc{V^JNPw=rnB8Uu<XJeqKALy&5$C
z{$k~g^flL~-AJ#I``zQP`sC{Uw~klUE}Zv=fq`MoDgFEVYK3zc7#5UwZL;##l#Qxn
zh<X&y#l;9tiG^M-n*|szB>(^S_}6#D_3{i2Pqk0I@->N{YnpIZ^jqt%s%(K<OPt^H
zW^7!vW?NqDf8K<MIrfil*>`6DpT2Gncpq!Tv}nuIw$9ArtLy>-&IvIvyy%f|nE%Mq
z$d&iZ>|6KQ^=sD0Keo(L`~TN_&%Xb~TS2RC&Wio+zrFRZd%Bv~`_F4P3!BGQH#=0j
ztSeYw_O?DVZ^G}Z+5XGc{bXP`yD<O4rJ6NQZLWZd00;N0-z2}sRkAhyuHAEW@=eL|
zgtt$whClkeR!;pg+aJ)K=_MCH9^br<fx+RuNUG^o7uE)`pZizOJ*&*kR<IvbKqVc^
ze#p4s_`mo4ukYI;Ds&xBlZSHBANHBm-;-ik?`giFWUJbp&9DClTnSGrySv|n0W_4$
z@K4P0bYX7Af;mrL)vS3Nd@_=WfuUF2v_IOgqVAiN$%E(rq?m8#Kbks!V;-n@k@~P1
zRM~jFJ#%E9adGzNpVwwuo<Dxzl1S>-*xk>>mG%~aJeeIb<!S_9%F=z;-qq{h{m;a}
z;81<k?y=7HP1%~^=j@a>i2eGwey$B@gP`|EQ2Fa3#=!7m>Y_D8!RPj`v0~8u^!)0%
zXWLkrcii8-{e3a>(f?fh47T5X_P@Tr9iCPh7{rv%DfaRH&Rt`l&AUtgw;WGGVV1MR
zu~`M?r$X~i<r;u;3q!52<!R<-X6dJ|b>bxtv+Vz3tH8i;pvrac<1!oTXZGdMJ5+u~
zW=oxq`gwk(6lfOVX!qaado7GF9(#U#-R!wDckj4$bIvzgi36`iQok-M^RxPIDR9Z{
zr;WAx+J7tz2_L`kX3aUjwNCIC3nK%AL-Wn_oIN+~9_w6BnlBi^QTg@Q<aBlhh6F`$
zLF2*1z_2%H%GE%xmseIXUoiUbpPbeJDrWAru`|?uUvIyz{`wX%28J2lJX)2?S!+&&
zIP)wxU9*1Q3Gu@_Dm((is+*W~I^WC7iJmpz?wXl5?>FO%mJ=UkT$Ha(49%Uo`j$e%
z^ZbULBB`PBhYUpa9{X*)wB+F||M@2(&-$)grTT``sXq2?j-Sr|suhK^x~sY3j{N<-
z_)pwHW7l&<IR!b{H9d(<Mbo~tRm;6F-znRWw&LpUlAZTH7GGiYOKRAiuE!v!67Sf2
zXGcEctYu|s=Vo@6{fxTZzUNJ~LBn&+Q(4;UzFX!;a73^E6S@1{>)s=a=NxC8=8@MO
zcG-M|Y26c>MPdgmg;#8R?>T>EVB3DzdF9>~3#LCwi<o`OF1hY)RA<=Cug~V(NN0Jb
zy8d2NeEQxWi_f{tlbxsV-OhaPBL)VmH{spf3=Cf;IPYZGaxqSXovC1dKi7T67d!u)
zd7vQ3z+kZ6xY9IirN-*p|F`yU-T(agE&c8P*8SwWptken;R9V~musy4UpQeddki<v
z1{L|MlRvlIY4{v7;n}xnlMT!b*9@QRHSVgIE0$`SeW5mUJ|if=AKy}7`}w!*WbbAF
z*v~I#=2oj0S4#ihZZiM8>6h#J*XnYw@Y&xFwJ|=l=gxlnGkdLUoX%~!TJ~5q-E;nq
z=Z$rfZ!<<TOB}MP&eN&d#I|!;v3;B++x%?iJL>0_F%@*zu=W=E_b;uHH$E*{zw#^p
zzRv5@SI_meZEbArGA?%iCLf(^P_3tT>Q%N4|MS`tr}we5{fG<<i!R)2-%%XC<+4WH
z@rm4XW4~X$Qz&mKkP!KAa*&l^>@Ao33&N!CtYZD)dycs->Hg$<RVmYaYx}=euX8!q
z(s%m%_TyrbRi1fmQ#YNzA-Vb9oR!<oS1eQ$tmxQNrOuP}_s99}O}kcIooSKJ{(W-w
z{QkH?1_s%0tB<lWFjTG3KWokSVp<{3KE?-iT~8Ta>@MWd04@19ySeu7n%&?3-nrQG
zF56_@?v?vZ<}=S)q_LX$@PRlVTNZ{3ChTEPT#xDgnaTKKW0dkc<=zPE%xepNZ_!w7
zul#?C^p<;HYz;1yOBI%1s=fY)+jl1;Lj$Wu*QQ&+tGNysJ$*kb>Rga+k@=P4Y4X{>
zLyD#`FdVqkwW&(@d{6Rb(S4`C+Wr3M#kPZ)LDy(c=<b^5_uhr|FV+7V=lyMM<MX1l
zMVHw&r$1V>X5X>TA6nmYywKly_}uCHkK2ESPPzL0R%!jM?*|wdRBD@dd7NWzXutCO
z`kA7H<1gp`y?TD*a;v#-*Z<;UWT=SAo&WK{!pg=ivufQQ#C>`-H~h%!JsPX;KU#A)
z^?oyGg6(ges5k?|0)J2gx_}`n>--@`o2*qI#Taa#CrB_bFvOa5q~D)EuRfpm`=uJb
z2=&rT{pr&4W43&4XJ^=@I&1UI>e`u(fnn_7*0bNeWysiK5nr+3-HvcK&83(BXq|eM
z{A5wl<ZJr1{5)S=d6FzTuAewm9`$!ty(qJ!$y3nz&5svptj^u3!XT#kDmcy3`!MtF
z+%mprYcy8h6o`Bt%fQf}zOuAt+b@RiG1^5d?F1Myb~?W8dEH-q@WsY2mfu6YG=0-*
zr-90O9SebUwPP0#AD`J-cjCVIZ*VwS=$AjNX8fgi-Q<{Qz07syUHaF>WuHxdZO3q-
zeCPStH%niO-taAwV>pv7v0nZ=+s5s`(sScWAMIvgc<{USQrwf!H^$$NzpXvC*&_ep
zKZz=rxV_WUD!;9tm~LPE7StMh7Y@3Eqbluu6Z3_j=9oX32Y3%On=E8s@crK2T6<8%
zetO?=Mh1q4doy{z?^^%!&X#L6d9M~T>Np36MYH+tKc#UzK$(YOfg+#Ik<~qmFG@0)
zcs<EaI~&m+w)}e9Z_aer$XK`Lu;1(#0=GKy{Jyqh`loxoi9b{s7(RGe&aapfWF_dq
z5Vu-mb>S18tFqtEFEH~cFmo|`uJaYN$fhpf^^YvqJ?FYN{nDMc`^!f*hFvKV>#O>g
zuHU&nXwR~D^$X(X%v5;tzU?t6s<h^{e_heur+Mm?@0ZUfzV;};zMZ}9H-p3bBXPe1
zpE$DFG46eMPrTu}#MRFkh11fvt*?4%!_RO*d~5A7;dGHI{q_Gd>rQTU_<nM=@TXhy
z&%y)4<R9P4p9b2m@iH8=mIo3{N!5iCYz@1YB{4DFpD!sRz{J4Nu>b6=^R@C1f~SQ3
zd;ECq!8oZ4jNJxeN5ieV#2F6kl8tB#*DSicd-dG2v&HtaGguv2P%dZKasFssU|9XK
zDd$WwTJsD#8mq6g$Nv-a-8uIn3j@QmiSyMzT}b}R!!RTIi4OlFzp!(YO0qlN<ZtwU
zY6t2ctkGEgwjwX&^$v^8zYd)Lxl{X<>laZ5hFu!-do><~zF$A3TG;=|{Drf-HqCl#
z-=|}^U8L}yy*+>Yk+>z#6Eim6*{{6rCwt+0_R{U^e~bUx%fJvTWI5r_t*smOhVTC#
z%FJ-Un<w2gRdea*7uM51Yfk^9$>1P<GyMtYEAIu1yEaK3{~8}R_x7jsr0p83H{aSC
z@5jQxuwZ%J)(;E}4)I4OaGZ@~$k=SVn*D<U>jj1f;8y&+P15The<{~JIe+WIIN^)T
zaW6a`#O3PrF&x<CdU@Nz){3o#JOYdjTMeJ|SoS7moQ=G5JmVa%u1K>4pVIXl0cQT6
zc58ILb$<T(&uIy0)xTA7op3{?%ehY~uQZ<MRG!dD|7plCG-WdjLqnbBsVx0@vRAG2
z{Oy#BW<8FX68cWFAgRHc;R5sKe_lW5ea`+8HtTD6Q5aK{*0XoAmc|E-c^99*R~Q(!
zzf!L4o93x3>vcbWPwP+LQG56N^JmML*crA2K5<B^RsO>AWLp*Q0oOafPgOE}5L*1h
z&$8Ff<!ANNOW(N|E|e9zJv?Bie16G37AuFixt33VT|WG$EBk-z&%F!`41YH#o@Hcc
zkTXo-XxMhUmr0Q!@8{!R<-F4v6qa7xz5V_6BcR^Syj+o9vvu8@eobqiEtXmuGG*%X
z><5vH4o-e1x87XmRMwqu=8Ozm=KY>{)Z*2l*$fNjc5SlKIHhGCY<K>-zK(LS)RB1y
z>pv@)RI^^-`&n+<CjL)!|6ykD<Hk>FAAPR5A28)=r}1nCh6Bb=>h!-IWT*&Qr+e<X
zkW%_i{q&Q@Z?6?iV{c+(V7M!GzOS<4$JVIhQzefS|B8Rb%-Aq*=3VyMj?F^T3%|L&
z)!E|m_RNv`xicTMrky`L{h~H^#)hbOAA<k<JGAH1^Jl^TWOlw|X2=z?oG^Jx&^zgp
zRo9LEPgrhpHf3PYIic~+{?qqUSL(DFF1T$!r*R|wiE7$c)o+puRX=TBy~k?(7WvQB
z>S^wvg?6XgzOpeeR2^}XV2E9?g8xBc{82Ur8&ISBfVRl?Sr_Jtrf$_;a6p-lB|Y)V
zcSeS6Vcrv_?_zoure`vQ>9Tb_Nn7)L*2YZ=zu6W#Za%8ecKXlmSCxI?C%*F@-?_3n
z?_HjQBm=_-mh-#}HZQJyxZ$*<V&R<4Hu|Stb%VNBCFj?sACL9kV+QiSo%W+QXX}e~
z%L2oG)i^jmeLnTiokwR_xToxAURRu_^jw2QY?kZ0392_r@3J%8dJx8^GXJ-HgvB$H
z)r>nz-g6&d>PfQys`l#imusvHQfKXyy%XjOO0Am~{(t=*EAC0_|H^;rX}5Xp2)g`y
zSN>rsW(Ee^MG_JXdI4wHKWtcegP{RDC=@Z_PRl!krC&7p;^t?%uwM~P{i?P!<-z?&
zZ`^$t8Ll0yy_+Ok`tmHpg_xa*Y3J@AbC|erX%c5z^My|vX6Z7vecf%^v2cTm&IyHC
zyPwxS6#gyBz;J;1)8@l7A20-@SLk>vf%eGB21(n!zqv8;3Of@+?ey%8_9CfYRex#i
zRBvKiVe9-)^t|qd3`_IEx!-qwuG{|NP}S3W(_Z;S7+tSrSTOO4LqyY|z4{E?CLPsN
z{6F3;QrN-ZFxle%Ij$S&Eo~FS(^)_Dw11v)Q(K&gf#E`;w3s*p!;9vOH};!uFqAYX
z*)_D+3Q9A40AE4qJ%K+?-c5PeY>78pbuV0~ew-0<@=?!GA%=*_%8l_F-%A;ELf1-u
zuY8i9c(ds7{ryGC5AFy=Y)Smela%24Y2W!mFU|Ly^IhserSz`a!?zhcil(hO=Wpp<
z$j;F4t+V>)%7>qOr(I856~@BwVx!}i&{OGZYOax%@?6;y&TBs{_WoIZ(O5-$()XR~
zAKzLp#}&4w?C$?1?^;9)@3J#UIr6oL&ba&gl_1N3MNi&O`#dACSYZ{z0V~(Mr<Z<~
zg`KcdUNdu#Rkpzt(8Z50w(-6OHKtpf*co;urKmE>nTSd;cpNUzzb_41E5vZxxaVNp
z{H{%>nEm^CY+CPKYDoNeM1&z?=b|;+uBPeTaX4(mFwN08PfEd@>0C9l`Zu-&)2y>Q
zVt+?2b@X~^v2==bk$k5O14F^-)&_<z;d1w8wpW~r+>~^`cv>3=6N5wbk<X8PugLT0
z#6CWo<yutxV8{D|3=CDe?`vyjJY76@cEi)vb7%h0KBs$d)zj?%rT5s+|Kz#Y{`A!M
z@SioSUfX4x?0y&j?6&|nBf}c6JKXbkil?=Hdj4kpoa)K1*%BN-_00Nw!`pN|8$-m(
z=$%uYzC<?Pw0qoI>lVRls%GL~E52x(00YAUXEPl&28Ij5W;+>P@Enz9;Qys$!th}(
zBxUyodc8DR`sIGcfrm3?s+6SOy@`6?di&}b4u*(kX2<xhLiYQ@4B17i6<4R-S#w)q
zX~~?RQ)eUZdLNo}Wb1z?<GgD+@t^${D{g-t!@!V`Ch^mYp-ScYcDHk%qIeCnO{A49
zO6yn|7-p>u`&=aZ{lgaTxXt{ok+ILVZYg7M=&wERetc)A@OQTj6(9dpJUhd}JL&tu
z^^a#p{8x`?vgof8ejc27_fzHH{de9oGn@{4Eji_VD?jTT(;L%Yvn3pCGn}8cid~jr
z1J~ACx1FN1671i#K8;H7%zJwE>Wm94hgay%c>x|O;+4K8$iVP|b9OXCN#}dhhTpzN
zSsC_y2B-Gb+vVFg6d%5<>}#>$v&p;|xs9w0VQ2pyFA`x}z_fwGHL`cHTZD7ith5P1
zR{hV`+zw+GdmLu`t~PP0Vv+MZe$YUG!`Y2{4I1iJJk|L>Y4Z|Cx5B!omuxv17);!G
ze$K0^d()zHUEh^go55i|?;{)kedbmd{W--Jm!&-l@W@>7$LCLYU|9OP-y0+<<L&2r
zo_Zem_#fA-l(PNnzw<F{C@AbVd@cDTZbs>>r@NNFVql0^koaZ6<Y-2QX-eO1ww(8H
zKDqV4q!X(z7wo?H{E5?iVFreVvfCT#7#JM<dvr_~WH+T7GQRuj8o}^jcWxr+mbI-X
zd0+Z1zPZ2o#)ViZKfV4NObpt>XN65GqUFwNGFEJq_*FeK=$Alcc*d$bbG}YK`2IuH
z$DU=9=DyEn@iQ=7iS1x>*nX7Z;OrBTPQs#^OZRtevYH5L0DL{Qm8J5;_NwE4C%<~j
z7wN7}*JEgS|K08QMSo8}skjvytM@KilQ(DP0#&}pyXsR8K6v_RZ}7eA{l=abLVoUh
zvPWZe=e?B-2b5g+QYO7Oe6#Sf!QmCm1@E~JDDh_RoN7Cfl_5_1dfL&SE&ksmGc9(C
zMF>=uMy1(*=MN9&V_>)tCw+~Nf#HRf>t2SE3)@^-cf9U@eSi5OCWiZ#EuewC*XA9~
zH|mdm2>z;lLC`g_*OWPO)xvBwh7C^aO?yMy<}rOxGPJP1&ML0t(JkXvd~Ks^^Uo)3
z-!At2ZvJDfJ8}I_bJxg|+6)X1``=dSF}zqNp<vO=*u;F=hg;_Mawdj`uNtSatmi56
z>pG^3emwK^jyA)A`@hwW2f9}WO}Q#<*tq=aIiDD7W5?4^UjNHHS6iXi_S5C<N#8rx
zj?r)2-d_>cW@Fgna!y<<wN%hjVDse+qwo6|be#Xy?L7D0`CA}k!}PAbmCuDUX5Y0a
zPE=z(;~6(sOd689p+0ZS?dEYf&Qm0u)6K=eVDsee?eDXWfd-|DMJ`UsOS-^a(zJ~0
zboqs^<{S)b;!Sw<b&dw{Ufs=P(0}W|_sbbYoVmt6nzb6IUR|0XRS{+K_?$EI|4Tiy
z#ZG<KdcKi;PbwoL!-DPSo-{J-dVG!H;KZd%Q{MzLG92hS%J9B3{Y0FE+xmvZ``DQn
z6rNb!dOYRQ77gvcjt>OS`CJfOT%osbgE*(Z_NiAoS^jN@T)kz*Q%$exvoXwYf3x)7
zk}2O<`@~Lu-)El2#;_sbXWffqc3KPu{T7e&=1(*`ZQ8p0o8-fvPp-b~h@3CH7u2qe
zN;wQVe8~2}0uF}QB^LY->f{j_`s`-u<~TK}`A*hHC#dy0PRq|x5M$WDB-OV5SfKnp
z6^8ZUQ?6PpH8K4#w@)L<qjxVug~Ok^C$Il)l(<;*^PVbyvc<*;pm~x?kJ~esvS;kS
zvD(OCg5Hd`!7FbvGBl`aozi;FYVXoF;h%->saKbNhBGwCw`ndd-aF;Nx<A%|Q?B+J
z3zwX!d*k}*GQ)R`Q(3z;R@cP63#fU~5a{)CvT-rPf#64W6_dUPy`6tK=<p25f@NY1
z4XjdEz6EY)5o4(EIk(;=-tTu$iQ~QWITp|P_$P-iU;HJFje#L!B5yY<1H+dC+g#Ze
zG}r8BWMJt32rk0TZk6u!=l#+2O)`4(REZ8#kZ)Diwf(kYkek}>ESg$6Gw9a>O>J3Y
z0~X$Qt75;ePmWM1aoqPzUOd&b*HIairr)e)WzAS`lVQikaclJ=?@#GJP0p>!iHu}m
zh?o=g_VmIH-@+yaecHpy@L_Z8bM*)LAMb!lYuRbvmCnC)J#@Zn)2YASc1x$YIXNFc
zbMDN}XUq)cBB`Z9-w*Cy<jnrWYQjq6BnF)uc{TfGICK~a=10}J_HxDs**{-5Pax~b
z)t45KXiYlo#K^!9D|VEttB~P^600P`_t_oX3^mU|k<KtH-|Rv5BL}lB$0ja~lJvD^
zY*^ZvZt$EZEO~*VH3NU=`zM+IRx4agtmK$g%kbm(E_*-CyF1=pPF#GaV4sHeZ%+n>
z3-;pIWERva^&6WyOyD~`|Lw|KvJ4CnJu}J;0)IPQ>5#a=$50S%XJ05>`uKviYvkLb
z{~j;Ax|}_&dg3|%3)z<G5mT<FdcEB8e&d46X+HzL|718&UO9h@#_BoDmSTcdX%e5A
z{B(2}xJ^7X=RUVdx}w0uaORt&`X}v@JL{^Pe$3uuWo!KUtj={%c@-cn#>T+#!h%<c
z@r73NR0f8I<2^2*(ekKdbH0>#k<_iJHy6x&^gZ}qZfRMpFk^$NQBLtzlLagf`WCI>
zD~dB|b9TJ`bk8FdyYCmQw<f-qPs$K3xtl3xlQbXHS53{(;CHBgvd5RF&vxqOCG4Nl
z|JXc#S-kIF6Enks(@zq=XfBmb_gN|F68m7@0tSXZD)-fECrn@F|LDw-NUxW-A}y=Z
z9{gdc6|+2?`ENBpldZw-^Y)u>FkHwlEPFP2Z?V<89U7}w*03{hPy5^v{56fi;ST?u
zBYUh~SpDw#GH;KSt=Z|V`M*K^c$3p@pv^2+ejD`|<}MXreh?R&$k?!dZ}soEJka`r
zTdDT5F3*iH&sd^-dQ%a*ZS{VJ1Fw3HRxRafwquylx$wQX=F(!vh3Q4f?}~eOzMOqa
zfbH<Tm$UEQ_&v3mfuZ4_#U^#O3pEqh&y<q!<`<o~`3h)=>Y2#j`RakpY^6Vq3uC8D
z-MoQ;q5SEdFTGJwyY#-refsx!;n8Ks=gePFt|b3ObE(OeUti8728R8d_5au*W{3Sx
zYCqS=PYANw_T|eFjZd<#7#Sj#Bwm?4vz(E^R`fgL^>b<$oGa%SCe5E{cd~ZHldBJ_
z*ZrNm6SNfc?50Fp28M<{V-t=Bz0bDn1=qz585`ucfhLR@qSVb7TI!v8rN*Yfcy^)Y
z$5)+}3>yjzbDWqjTs6KT(jd~?p{}{K_Tqx$JPgasyEa)Fw=~W>J^wHN$K4DJ3?=b(
zY&$lbV>mnI^C#EHr?0=TTY6XJ%=r9`jf08dz-Q6at+J*4^HeL(RL%)yWO$IiIqH^o
zy2gt|H;Q-m*-E^yzFt$M{L25_S_@k<FU`9y|6~|mG%i}xmvp}-W$(+Gj#rptPLwlj
zNLc>qCBp^#jpr+}UcTITcgm$JcFMH^={?Inz53uh@3gh%sVr{~1_p*}`G-M!+hvy<
zFhV`rJA>f>|2)vd@q)dd9xQ&H5%4^~Y)xcfShDk)>q!w)uEz1-H)q%oll(EZd$HWU
zbcU=&j30ZCt@&`*BROxE&ih=^)Ty%z<)bowyfgUkcjG%NLqpt+-Y8=RDV0wjEz@`A
z$3ED7li{E_Xc+*1_w$pTo0r;Lt_%!gZ(?OASbs>8YnRG7pC`|cCUbL_?|61Ova;WH
z-Tznq58m(jscsp_@M7Bz_I*B@b8ne1fBvcXfy;gl2C+3C{xUKA6|fY0e&=ES;T`<j
z&U>g|{q*Yjr&k5X^R9@!I?u+yupvzvw29$`h4W>`7n^KXbAQ-uzpj42pb*24g9ky2
zcQW?hJTP53n=^Z<<+)!SwhS8#F8<jqaB-`IR2tWX_=_b)iww2@q+FYE`=)}G>bjr7
z&v!rU3w-l?*E?nghwrgZ8bhy1E|6Tr_doc_)5iKUY#gheGcq((AKANUm;1BQxG7VO
zH!?7MKV5A)|4YE4w^`|GWx8rMCrsy`>x@$szFxmW`MHaK3oFAe^>1gESA9Fkzqw8@
zS&=cJ(e2zf28Zoei*%}r581Pwi@V_Z>D33FpVkkY1H;k}u`)1hu#-;WXJ9Cqx+sRB
zD&e#e^PShLH!vJ1pOp$~GnhYdzPa2r(l^P2ZG)3*<lc)mDQk~yWMg3HUhwc?m1GLn
z1?P(eKb)UfHqL)~zdO5k=gY1PgEzDI`De#|x0PpRaM=E|`oC~C&xW|2-?nJ1J{{AZ
zuld07@RUpH)u9XwA2!d(H3(!r%sqEzKO@736?dFpI>`&(TA{I8I9)A4@8_)gm$UqD
zyRJ*06(kkuv*UW<zT@Ij3@`dDxc_Uu@@cGpvgZN&UnPc!4S)U`6>ei^*tNV&&#{m7
zU3s2edovGgEx`PV>pIe{DoZQ&9bU9%S=uKi28K1q+dwxY%BC@MHLMF>z*4Y(<qn1e
z_wVhk)putDZAjZVyZFJZ1&2;$^6ZS;>G*udc}4~Xu~U2RR_$ER{9<OtxvIRo4?Ul=
zUAd6v8oBpmZ)<ULA~)yxqFL-lPwvY;WMXJIcgnfqn~wg0sw-{B#HKOKJ1P*#z`(IJ
z{Z!+O4^BTf8+V=;Vqo}wyT4j(>y|A}b7r16-*r5U=UG^V-?Fn$xF6p9Hg`I6!?$i3
zk9F#{TjzXO5xn&}gU$^Hc`Jq&(_WY-%@>@vP5->p?5m$%Red=8$IWnZ_<S=4h6d5w
z0tE~V3l5uXV_5K61T+`#e?thg0OG|IM-xZW7u;dbJ=R?JOZH=UaCOnWB8^GerWZ<N
z7ucJmx9)t(XsUk5?e>uc-)Cp&@Yvk1lZ#6_FV4VV_4dpsrZsVaVUH!Gw9`31-z@iI
zWoX#f{rh3J#cAI46YZVF=WS$Qkem9wC~uLRtdzFh;>%MmtqW}ump=NlbECi|wTp{W
zl;SzgKieb2uq6UCqw{}vzU;%uqPJhK{MBdRE?bwb&#)!FW`6wb^p^D7{dUhTXib!!
z65f9O<ah7uu8}hZxfmEWI7v70GBA|PaC2k$a&THG+m2)<6^0Lo=YdWwa8Q4HY=ORW
zd_reZz|DZ3>v`r<%a|GVw7K0s`@m9c0sEqj8=kE(*q_|HGjp=Ufe$Ac*eW&#dSy!e
z4rE|(_}<gC$!g;|hSkE?@A4N-`;hc=&M6hPA|?h0dEX>`c`?QMX?m_g3=aaEPk39G
zdnq5C+1Yu|d4s^uS^phvMRNu3GhWXMNXS#(s?Ko1uJBrI)_$31X1o7i)n{sOwd(()
z!f?UqqitQ@+l0K|u93cPjW3B!6y7s2yuH=(>U4PqhJ;eHBT@_uFE;3Qb35?=*vHJk
zAom#D(Akx3_T}jrsl%6KICGOTPH{5qi7+uWQQ0ZkwP?+oWag3xlSy~BAN!E>TWZrK
zwvG0w49t7(U3lQl!0=*=a&<DpYQddflOMK)pKi9uf1<<4@M3nwI+GdmTyI|mEm!p1
z{Lizh>w<=B<lG}OI~%7qwpyL5oblp6L$Anp)pKVLp6-3LXHK>)!xo1-|LZ0(H;PNY
z6lXjjH0QQGYs0sV=Q-A=&7T-HA-sL*$=aXG_kkKL)AF5r7#SM)E(eG-*cHqWe6VgM
zs4ig3U<L)U?6HG6l?)MkHqJ0>Yn#JxAiKx3D_i9IO$OPi?ZMC8CS4Pc(=|`A6?U7Y
zVa}y@>Xp%Z|44<18FM!ONU@M)U?>UNcYpteEexlHEl;ns)rwf*$TRWkeLjYUxQ@S7
z=cnp;zhi#D!^&{r^0}**E{PPny}QwL;L@Apbx))fmt}Tsx^?=ysu){b?vp5fhO^?e
zzIXl~dcATlTY}`9`AiPoN4{^f;ofu4W4_$1H5#jhuUAK``eSP_HJ_b<Az~fxM^*-g
zT`M$J>vD5D`2RS^yyJB@$X{KcJ^Ksf)7UrjdbYB5ss%BB%;`zw5ny7d;OyNy`)CzI
zNq|Yl-R;{p7__rpxnN>Ap=#3qtil9M9(87hhP+#$w>dY+7+%Q{+WO@{(o?HnouDz#
zSn>1I(#2+}?lv%IW_S>J<<h3GpJ!YG!-CVFB&ep@e*SWPx#6SF6`8IHiEeev85Zp9
z+O+FLt*?%tj?cQi|5T3i9%#C0&)Oi?QK$6$8kg9zjz6j<UNw6CYq@mp8dS|)q07R+
z5HX3jk(GhL%4@Sb!>>aPY7M*dj<7J)NpOHxCVp`{$6TXv>eZ1+hn;#_Hx`;aW?^_1
zHYL<9dV_XRuhFFto(0iK4Q*^|H&n1)xgb%<Z(ll%ciOqF@(c{SUarwtZGKHGp-?H^
za^mKerBWv%nHVmlPTaiv!t!2Gi6iN}3=PXqdT$o{*pu;JFf4mU{rfMn3ple%HHum{
zMC^8rJlV_S(ELQkBQR`d{*is9jY}syW=ptOvz@`A`KaCEy#f(?YJc~bxIVe6{^`|*
zpq*{6C(q$vU^q~e)1l44a3N4CoZ*5r+e5}bZ~9-~&u?L2`1kSM+uybiL8BdUpcdC9
zJEc7_fnm`<`4w~KY|NHs_`u}ebj?Gmi?PJTq|;{mybUIm4re1OBA4Hq@O@!x!&HMg
zJPZuG)a`@kM}#*V?b!2ErEM1DY4vnY28ZyuOQ*PnO&7hXd&+B`1jB>MCrcw&S{N5T
zmK40E^!~U1ocYOf7u}y@B@!|3@1iw&N5mPf>Hqra_rxLL<&zzZ5nDdrIM2i&wdC63
z%XZ2-$M+datcliLzc1S`LHEgRMh1py3C;nG3=Mr%$%%|F1lxT;{elxyL5nW_ix~b$
zJ$>tNcSg<ypPf6WH-<4B*mK9;WO8+017Anmo%Cx$)7~9wkh*sC18anI?+!+W1=V~{
zD;VPRi`3+w=p;S`mjzQ6t@&ixT)X;Im#p<~eufV@pDwLwF&4hS@$>up=GS(w1Ez$|
zyI=6KnqgYr{ZcuGYpbU*OGa`<a9ZXuh~+-&F=8-juXT%<nQSR`P4(RW6RQvZdRp_l
z6Vwojn8Uk~1(duN>N3=RI+n$J=VPD;!vpr6MhpxLFP7htNnDjEyQhQA{A_A2Lqodu
zsjN9cQe6?syh*hT87reEhw<)A{K;mx;Mh;aFs)e!cV9dFOQMF8f#Gg(qAz2dUXki^
zCys1oP!y=U$WDuqef?-NJHv;XPnUE;zdS8UW14libbjfMp1R%xpXR<cW@dODc)D@N
z_tvYEUNa<2{8V?X)vknLL*2((8^hlWVbAXTaShY8D-NzK&FFc&Xw96H%nS?>6L=fJ
zKA5P>P`hXabRX;v|GWtEi#($9)@!V`J-b9Ice}>wwfoo^87j;UUz~MzvzCLmtMfZ=
z<_C#O*)DR(hbeuVb}sgH;#;15EDQ~KlA@`lDZY%)!cRvsy;cReUVP5V&cxm_+i*sP
zGpf&*o=r-8_^8<QV+}`dvi+o~nx|eVJ<oEH343+uuPwuxX)+vZ=Ekrybeo*|DJsa?
zu+_TzeQH9fTH4f&TAyBBi1;1&9&{d)b}okkC@1h4Fkev5Ut@MaHdv9dLH=6{69WT7
zRqg^wtusg8dwq^nW_aM~8u|3rsoIHITa>PGHhkN8VS@Cvq$Psds|BjPo;UIKCaxD}
zVA%Ea$OF@cpC=-n9zU7$^u{Izh6`@4k#8;29hm1>dNVQ@O!o{7dp2RC!N&hTG=CK_
zo_);2>McIsu+k}FZ_WQwMSCuW)q<8=J7qZ5+^xK_n&E)b6T5xtN}LR@1E*Y_SnC$i
zJ?HVBE$2^cI=R~U@!Qwu`9Yhsq?0%p7)qw}#xeYI3ASt4y|054ynOJ_lbFj^6)`58
zCAotiOD3^0*tGxNRaTJCe!*yBvd$XmHD~uJzSjw^*>{drQtJ7guks8GR?6SqtT)eL
zIIo<}*;^{;Y{$s3AeZOhGR~rTH)hr|G(4AfiTl+%<73n}`Gux)7A9mSt-oE)xaPda
zIyr`E`tPdMpZ#`Dj#;&rEupcmd($o90EURQKmOT@mPO2-SZAv<d5_f=w|D2)zXKiG
zC2GdP&%p3v)}l4rbhH>4zTBG*sui=!SV0T3IF9qBA6|S+s&~tw0A@di2a<g(D@A$K
zSu-Y9$k}g8+fbIyHh&|JYox5i2fp62cfa@<80H3wq?&G<!_Yr@bBo())9=ET-V6-4
zmT0V=Tw``|(M5swXPFEPXHusG?GiDHQ~qXpjzuu)vCS*Cgv72*RgdQ}Nhw~x_==l_
z!CT03Lg&9z7c{cgGe&GVeWIL+K^rvrl^n0jd0JsT-`dUjV)_gW2Ttd9$TBcoaGYhu
zbisUgn9PH|l@q|>eqgW6xwiJql*@A0xELw|OeRTp259&2ykW>-=iRw5u;}m;Zsx3r
zC5zS^1NG2bj~V|EVqn<y*r$&DL89TDpmRdAbl*qD?pn^suz>f`zON^eE*hkZu`nd)
z?RJga+5X6N5nHv;Z)u0>IqrWMbiCf}w-E8oXbFD)gdySM6Nd#Czi=}pOl14z#B{(b
z_SANV<T*FfQzkySx^U~6N30AC6$^PAK>-XZ<MXP&fBQR471V&wk~!BF-L>hI<(AmO
z%-+KL%nS@Rrxu(p+Zf02c7dX~$!U$HB}u*!Eg2_r?{nOG_`AWVS)Y+%fpFU=YliRI
zr?jpM&f(_Y;<Ru1OmH2>q@JaaxnPmTYFln*27~E`7p?gsov2rsmh@<+K-6oSR~!#Q
zyEa*!s_#%T=_)Q_*x>MSuNFJgS+k&O-UCc;-R=o9L@Zjg#_!CgCO63!^G`2wndf)E
zHe<a__xCfu7#SGOq&x3nU})gGbV0D;p602n)2o>OJnnyeU;PjxgFR$y@6I&-^z0jq
z|1X@_7|Yfc&dAVTF#m$yHSPrulNj3C?p&~Gca7{_%e_8u%GGU-(=S*#gZ*R7_xPqv
zL%@{KcgmG|au>9e52r9PWNdnIvnFF=+}p>>>(A@f=f5twbbmV^!-pjCw9Ox4&iOc`
z&v|WnH2cW+gDVxB9`ii)U`#N4bZ4gw#}?;xd+j!dG3cD=+#AdgG4DpYjaX8~oWQ`a
zPuhFDbl2O7cxG&M-rCB*!0`E|0Qlax7cA|b;6%jGQ2ACowNx?d!`%ppsN=I3K?8%P
zW=ocqvTe*`FbObuViqGZ>$TD>t;2U7N#$Qq-7@*$bOweCvhUt9Iz7?RKgt}n(!fWI
zp@A)!*>Zos=F<O5rrcXL<=^wH^v}~*&po@>JudoZ{p6ru;a)H6gT3}Iow9G+Ti^93
z^8&-F_trdTV9+<;u>45zk;>WL>1qp%&n;TV5a+bsHDjH#Z92n)QYChy&d<*ste@;;
zcooSI(bD)wok7Qa?K_r?WzOk_6`GZ$FXnt+w1y9~%KpIToDN}7PGPfRW?;BEe-Q(N
zea1a51_lNj6?2!Xd-~$KA4(kFcYI-M*P=Dse#x;gJm5RK{MN}`j3(Dx9Y0*iV7u}`
z>EeXjrgFD*-+z{ibY@`4*c<!(8^itLX}1ks0?rBDdVS%60|Ub>wR7_CqGzP<^wRvB
z@Aa~NU76YUb!BFtmGA1|*0ba1{nfv5b57jboVb{`IdU;?bDsTLQonpkUG)3gS*+)S
z7#KcFi>8(;<=Lp5^YQs2+~jxiE6d~+`VHyb)ol|y92dtP`76!v!D#xs%7s(=7OPt^
z?3q@4ieZC{`YXQ$AKw^%3KIYH>VoBS*T}b#VGIln%X2#fLEfGfz;MAmI!yLKU%L5a
z_6E6v2cR5Rai%UXOkByOKa=B5+%-Oi9}6{B$9P9}cxa1Cc`}*wAKZUIs&!%d8Rd6-
z)z^Kzz`1-@0W*Vx`kWiu%)fNjHSU~N`=FU&ZF$&~sdXC|7)(xfUah!teafZ(OQ-z1
zfA!q6A6e<2A7!N%C)UQSFEi6$UuMStX}|r_FY|xAFT7qir=5`@!S490jLIWRjfF3G
z?p*gEXszgZ(cjmPGqLrWPdLxsFuk+x(e6X+YfBe?lWJfs^pj)|)5w~{cT_|we@2ki
zCZ99PpI$w?>0lmvYA2|$$aMx^$g@D$#E5N2cH&vk$z==-3)nv~g!)>)n458HNB-03
z)1}-DE2O*KR?B{|Wnl0PnsRm8!TlGs(%G&Uv~Qkr$>YERW4*`sco`Tn);r2&<^OH4
z>$>yJ<(!aJvVf)c?=S|2HL-W5TP1(kaKFg@_3F827q6asc6RE&_D}o&XQh8uS-M5`
zf9$)WFfoP)sd`VA>|Cp{I;MG}w!wwS!!hX(ew{a7dAj+Vh0dw0^Hq$Xk-ySK^NqIL
zbC@UHz$)nyZ^-aq>LbascFJ3h7Y2sizSjM`<L8`DuP($ggLA0=Z2{1!m<$XH7B3SM
zW2n0!1WLgVB>lQKSqW%V9h>mFOghVqh2e?}r`zgEIo1p@-kl3$KNWlz&OR30waM!8
z1ZgXE^N0JktYKidP~{pJRy|Gd#lkt8Wg;tHOj-Chje$Yxk;1ntKX1<0Tnbu;3re4L
zk*PWB%FOaV)tfK<Vz%_l&0T+vRB|yiOfQ_)G+!jO^vM~PFNZW<@jh_;ICp^>>n+#4
zoD4R>U-<3C^k1-4@-c{|-nUF;i0D|n!jtKib6%^uYuw+EB?~@(s=VYG7?!VN%D`~o
zuh|h+28I_4azV3S3=H-+g+T4M2Q$x^Zdjb&r&IAd(wRZQeA?}67F)i$ZR}%M6KRrj
zcPrlotM+%xD|}+^^RseVY1#)%pJQNPcw3&hgYSa6YvkM~4_}MPTCLPL<<)D>!0`In
zyf5qi$GpwSi+`Krcm1bx%-bBlq-jU;U;nX`N)z}R%fN8vd?eRCaNE{Ol=nq%?Q;##
z0^3Tp!<`I{uXz?P<6)?9d2+~x-*Nk!)shSej!(iE9*8E*{}{ouu(a%HSVhkst1stH
zytiRsIB?hubjt3F1&yw(3);WwSRIfRh8+CZAimS&Pq$si`JX3}w%^<Fo{@oJpS4h%
z-vt+;gtJ|nsuou&Z<%#J{+;O055*T7{j7CPotnqVz_8`^g?;K5#3vp%P!Zep_R3BX
z28L@(HCFFEvHj!r^_olT<KO1YGf|ZTl`!kd%s&5Y{GWTE|FX!rU<QUgcUo_Jjeg_#
zL&o9%lVXv1%Xgli8M*92l>5c^3=BKmYyAE0ymwNc3+h=jmVK3HY6uUkW_nwiHh<#p
zBhMcN#mQEs@7Gv;Y|c^^28N7DypVgiAoT;ol_zaH)1}HUFtf>&9zL)^i$P)O63%k-
z9qXAR_AB#7FTBdL;$h#d1>OsO>%IBN#NhB+Ryu>fBsS(bPiJdgfgUSELuugjfBok*
zm+oCX_w4Cqe;i7~t!G=he|SIT()DM5Lb4~n{=cp2*F8ptIM9myi5lO6-?+wD3A67l
zU3RZ)*P=DwKFK#Rt)2S*<vAUB2Ad2ecBZ+e7xbALSSLm^Hi&oFt=pZ%zSgv3->ZV?
zbF2AXS*u<~tgmBWXxLpR3f^1*%SjiOfQ}ZLaos@5<b?KxRJPc1_dK=2i{BL(9O6Y&
zOA|7@(|L*(Z&*F|?Emxk?y9=x<@6r9rdY$DpTY1zut8nnLv^*@5jn;$96tRAt}5U7
z!ok<`z*&6X*34dpv<o~Af@gX5d01~eZDRjbIn;CJdEtwR@5^pSPmT0gIaT}mu9LM2
z4BHmw?QRa(a`8d`t?3noivGWD-)X(4S8!4B+V4G_*G}HKuYGJ@--QLos=6wrVx8>D
z9veS6GKZPrz>?Ug>&z=x-OkfLrhi07k^f=LDWBj-28L}8pI`02(;kr=JoUcV&%?Kc
z&hcN#Emu1K(to+38xO;QPidvMV|#1=o>s_vG>>J%a{KdvS8~grNIIx&Gs^q^vF6M6
zblau#=FhG>>G;Pq|KFQ06MrNboqM%ych0Jy`-TiNgp=Z317)OyJ#H<$lg&`ILH?DA
zdFaY?W(J+(c8_=1zBR7v-9PU}ddj`^hV36#2QCx{Xa83udQSJ0BO?RDkK_Eum>3v5
zJT*)bofsJ!9(=d2`~7Xd{r~u6Muz&r2vD&WaWqlqPGQ~`58u0G%O9nAu6(`CIv|6C
zVbjyOs=CiNDjG7(HaC8@_=5m<-hDgK`+2KAZENR_ez9Nhe8#)8q95(L>O(J-TbZnQ
zn9o(@Jgx8bw%r-4f;NjXFw9t&{83gR@!`E~`Av%2`>*7d-ws(?qrkvmcIf8C{ddJ(
z1*IzLrB8m{qiG_=&wD(1UGlll;^%@-{A6H=IGY#aZCN~L;;y%cDtA1-bDZ&qF~8y)
z_jwXsds_Ecr@wT2xKX2P_m9`FFW=AC3X9x+H_k?SuX(xKuLH9Zi}dbZXM7-ExVAdY
zLxEfI`>$ootAZJxWQ(2u$jHFmu~Gc_{q65F=YM=(bw>JLy3LH+(KZ{-TSOXLwun4>
zb->=K?q{gQc8jUSpj#N6e;?#vW?<;NX}pjj<<)^B%zIuO1dW+6Ffc@%j=Wp8@IiOm
zswHlYv%bv9`p3iYv(r^sw8O_+b{3zO5Zi{xk26<gye_NhWZjW(9$E9-)Hn3r-f!n$
zZL7{=s}YetEq7FDe$V;ToQgExsfMgO6|*=0kohs|w*v#iftJqq3@2CK)-##1=B!SN
zrU|djhHZ=t3C@1JB_AcuUGU50mHQ-~eD3mp^QO}`r#U~@WMH@^^h)LIlMBxl=I#FQ
z?|b&U#|(eoTG%nCwW(x3tG9NFUopGD&1%lnd*7mTj$O-p{D05P|LKa~zP;)BGI3tm
zV$pZ6)qO+n`F;7txWIhlweG0h6Q)n7u2m^#XfS=#9<yhe)_NW#hCRCP<U9A~9RIty
z>dftX={*1c>&H2-xm}wuzfkCjfYLfXn{tUq@6OF-Vqp05l>ITd`0|`^gyX}e_3uFE
zp)oLQ*!KTguJ|m!JCa^O0^L4W)r>90xy~>+OgraWJ?Y%qw+v=}!rf;pdwfgtlQ!Q!
zX|lM>@X_v{%MNS|`0n{fw5#S_-gm9evgAEJ!S8)EPw?Kn-TQj?<U8z43=C>H=KF5n
z=4YK0usyaT_)nIZV)X7=Y)lLr9IwrFEws97{LnY_-j&?%3pKhRp%z@Zmw_RB=a;w%
z`zq$0+$CA@?s|mw`)enjEYI6rytmVA6=(XA!<CPhY3=uWw&=gr<yz_bzna%nY-av0
z-Enty%DFQ?Ef|W#uWOlS?Q|&n_B4+9LNoX8Ooj~;xHnGk&3g9A&_8p&Va)66>A!mv
z>tAN9liU3F)yIH#<7C5ibx-f{*#uwDEx#DDwCXJbgTuG7BIx;;3YqtP!2JV;FOST`
z3K~S_%s#5}_Ihsll-~*r4sC1RUP_5$G}90ZwKIFx{5weGX!|m)@3U6f<gfaqW_Ee*
zmVgzzSDsq^W2O_&&*h6W>_lA)=f4Z_JJ!0RZl1^!wndKv8g3^rFdSGi_iFC)mr@3m
zhG~__YKqkhGaqEWYi3|Lu;J0qLwAbP>`X%|t(#s)M4s@}>3USPX!?Ej!bFCKuUEd^
z+FbDXFMq|+UgOf6v!2>9NPh?rIeL7NMqSRTPg_==I$dzA;+4GCoUeW9`}Ak6;xT+C
zf4K6)hkmz$%AMBRwy`(Zzjk{g&30l^ggL`&t1mi?4cm|IP2Kvdtz7=Q<bU;d#&N2f
z&i^RQoBvVaopIfk^A=pkH{P?V+{N?W`I%hB!TPV;Sr`~Jy5xI6i;@`_CT!SU5O#nC
z+|NC5t1P)#<LDcYMy24FT*cM%Kq01=v@!Q=^d*t5mGY*cmD7JaFywR`+kd#Sr|@bd
z7wZmj!TI+eUe^(8;rlo%`1Q86H+qxnr#?(Sf7i$HU5f3o>YM`W?~3{JYaisV-|K(0
z`g6^}e?R~K-NIin=eL8picNohQDi#<gTtbA^Y$KR^ttHU6FGTa`y!2bN&fzYr}B#n
z&#13HqT`(WaPg0D!}ldI*FdG<)9s)H+i-ABn%$P~zM;z|30Dc;=Ps^MKl8Vmhv7o|
zOexQot8Tx$^e=Fen60tkxec}7tNjm2e%*22BLCm_dH?<$n7LhL<<#j5cfCFL*M|R<
zw~hMWS9{G>KgxuixVr~jN4?ftW54a#ExCrAqowQq&3^ey$o^*Rnf-PDzSmc&vwf<W
zYa;(Yz*>nne52grJJ}3jr5`WZaWj0_9-RJw{c20`(V1_J<Bn~<QoXVK+RoZzYiGWU
zpEh42-2QZ}jL<drn7@^^lb!Ms%kqxgWn^f$^LN5;a874nU~u63_x<_*-QR!9@AsSo
z>ib+PjM;uyXCd3p6b-YDK@Li>v+S82;zY!KZddB8;5*Qe6zJC){rmfmkQr9blcsNU
zD6g0oe<inEYW{nv54qQL%#ziFKc>GG|7=_N-8HbL_vkj~!ngUpq4&OiT=;13&)3!U
zdFu+kd+J=utxug*_ITEjf1C^qKG*l{@l81OY8&@&mg8!LpWY?!`Sf~P@-+A2{eC8L
z^OpSGQLn1b!O*a9PKw>8lXEt5?3`}6?!$2oz4Xgv$(z5%-P_B^U?iHQGS?)u@-_E_
zX$I@h`KToRJ98xVPW_v=&%aLnzB2s(?~QU-<9f7h-g?WaS^ugG(AKyAwxIo^YESOD
z!c`S+HghiS?b@lmxx&x;+^J_R)xR9i7&0~F94Wu*ZERP`U;MFOF-hV4|7iVx+vi{H
z6ZkztZ0B``HLJy<85_)R2Fo2QmAF0Ux<cXnkLPz?F}zluIKS}mxuka;TMN{ZWI|$U
zf5|<2HH$|uynf}rlhHd{*^3LmF5kaup>gi-k8umHi!v}wSS#-X*)u<3!vv8Zt2x;k
z>}B^(H2@u8w_!p2>utL)Moi@lzG9xc@aN~s;Hlv|`B@m2tjpWIH{!y?lDX0QnR8mI
zbN_GBKlXRhGOhfsMLT9@Gu4>wTkUgcUqz(dqw~{u&YO39#{J*vjPLBa^VcV@EBJo@
zy72yF_2T{CCeNR1(vp_C{9_~!1A|ZSiQ9XGidmManZ5b5zH|1R_8U3{YYb2Ce;ji@
zX`0kwzvKFaxsQFg7#N&S>^%9SH0$-74}MYG?>_$^XV`T5=9a}j>i8HAywbap=;v({
zt*2g9HSe6ypPlTM)BYZ>EPj9a|E_Jj-ugZIeKYVO&ry+;Q>S<S*jzQ^x5bw?-ZtvF
zx~A&S*3CI?deZfeYIv$~+D0~Bh9^%>MI}$#XR})NV=j;Uqp7z9tBVc$C!hJOd(7{h
zDZ}es0r^4<`^2+8pJaY9xAvI$k@BkFJ+~8e=S-KjkDhFDYR9k1(;vM)YX7yQ?@Ic-
zHJfKdYp6>yFr2u=zYO_`gos1F7Af}Iniw`L2xgwT=W@gaSq6{WE1il@-sWvh5@lzW
z@YCsAqnJ_u&iP^T(H-~AuCr8#&Av3R_h*%Gp<diH-d?@siz~Gb*)DZ!`6yTSwZy;E
zb*KNM+Ghp7!%s--z23Ha>wazqhRJ23_YX2GbIGZ)nwK=q+>p<LbNvw=|Ht}<rwey?
z`N}ggEHM8#S0R0~i~Vn%XUm>U6E9WT#&qDoy6#0Y9zDD323rf@V^iT!eLiVw^`q0^
zM&OJ~_t@VTr6pPIYuS5z<=mMSdh>+;{9co=WBHN2CqA4D>wo4{c{=oNnfkdPmG?^D
z8DCsXwo%vB``T9FKl5sCx#a$O@oO5*)~j#7JM>qkA?8Sx&Z8-p3+%<2XNK%uxMSNd
z>u-Xu1LmH2niT!Gulr7R#oXHS56{lew)Ok!toANOMwB7$$<G_|zk9ehoZlf@e{KJ^
z^E2!Uzk1HhiK&e{)4gZ*>e3>CWDWJCH<JrRKcBHxW?*P|^C#gHBSXWHH!}km7!uB<
zaLa=R_Zbd!ygj~b6W2Eb&C=UXZ*W+;ONlZ$$nEKW^3X(V6?1|_SL(Ot!NF5EhuED_
zJ96V}rH)d~O2a=3`i`EyBrau>tz=qteWT+OUoF-N&%27^k2T#{zEN}9qYsZa%O`7I
z(`H~Wh*dmRyiQZWKy(&I-@W8B$2mTpO8I2;ENR;2oim=g_VgR-wO=!1VBmS6@z^mp
z=qx{XrCI6iR++=`?gf^!r+oe{*>HA8)~Zj}BKCta;Lh|<fp6MP|A#*>T$U*IdG^d5
zyWaZEwUyeNmd9_@X)JvHX!-loKVHAAu6#A;*$UZJQ>Sm6A^qUzh5iD0d;hO;b}bfR
zn<e(|IbqPYGxNFs`2+@!$h&3g*F+b87h&G%n>pWZU4H(&tbd)=J$@(l?#ozpX_myk
z^!vr!ueMd+GPj+1+dlMn)}FG%n{AgGr!Z_-x8r=q-%I?zd%UZ*otG$*s+)O*ea5uA
z68DSd*(QFJ4UMV2GpT3w`R@6zU%jjo{$4#V>CLOTJ(u(T#LatRC&0kqP*-R0oPoh1
zNhFtrf#Kh`-}3uwf8U?~e?23(0&n>DH)#9awM}I{J;zFaT3kKD!f;8HyF+f)Bb_-%
zm&tI=Vd8O4e*V?A#lj_cYI*Q~h1){hJLVlbv^KnJ8{e}-=WBL7vc9DAy-;GM{>OV|
zlYdqF?wQ}d<4>xNP`zAzW`(7kc<JrfrBNbs3=Bqs_jXRIKhCmD|JWZ>L7C+jY(8kU
z8#Cx1(a}$;+c@KCMZ|3eh6~&0{1%SseIV6VB6<IHQPuL|G&Y89I>+?#ABW!AS7KV|
zpQ69c)&Eia(S^s4N?v8TlDmES!RqrNsl{oJR15EaJ-_$*uD5=VCA+Fh#82rL#(z5c
z+;Vbx7FYGhjVryr-U<_$-?+ITPuotsU;U@!vG-1~jtoKSY(`n%3-i_$bvD`@wSDyc
zlgYZ{Z<6z`>s;#=c+a*iZ{4$d`yZ|Q_~+coJO5Tz6+JHew`Dma!ynJwYhP{K3UgKk
z*<`zZl(oOozGusMixu33*GrE6SXw@}aM%3Px@Xq0<(&!L-TVFL<R5YC?w$N0bKIu*
zrv?LqLs*#)=>9<lh6y{^g+a><85o*(bhXMQe0jCaI^cr3c2^gp!!4WFpBEXb9$-jX
z<MMdr*A}&R?!{-LBAj*ZNJ-tUG3#r#@c&@^v0vM@&;6<4z0;sJpo&S}iM1yaD$LA6
zCA)0eYme}6w6MIreYKzs1B1`JQd@&6!|gGXPZV;NmfIbj@ia4d>P^$i9>dcc!iBzh
z*spRmk=p&~00YB|n}N%if6e%{JMPThlX~|AW<OwNP!>Dq*s?Vuc<SaE<}%+r>w11}
zo_}<)yR%N!uQ@X%roTDwvq!~_|Io}I|2uzgp2zrjQCQqAo9EYs-@UXq4b{}&$nG0j
z$9w+RB8`8-$EVf3y`Br&vdZvtMr-=KpK?=Q??~hO+NxLF)7Wxe=COUE?zdnW;cdz0
z_tY8OwCCODJb&i%GA;f`n;$Q}<-9ncdouHZ{VOW>&zm6pG5y?$DfUMq&b$RTSUV0!
zw9hr^T-|^E^NwHF@35;pn{9v9`lrJ7f|9g(!VC-!d1YrTzzwDeJKjtd2WNu>g@p#I
zj*0mk-8u7ASDG5b1T$6_aKIZJ@w!$lJ9|g^{R4abHyTD&eEYw~p!|K=>usC+`~vQl
zJxqUQ@x4%@Ga%)cbMVyahjGgUzQ;e4ifgO>J>4)S_?gq;O_T4iGcqu!y*sl@PGTpw
zFN^zQyJI^1vsTUNjQqD(TvSTa&Xiwd^PPS1raUYR3*2|kQ{N+b&@{)X@A=KW`iuuy
zS}SVK%-`Gb@r8W%q8}2EzvZ+WhX{+EKXheh|6vcCBevU^)79d{zpJEwQ*l>+VtA%V
zzU9i1Ur9wFVde7gUzP{|Wk|jn^3=B{yqf*R{9nclD%$gee;(!OcUn>Yd8J0z|IAgN
z?#%irpQv+a#*rQ0x88Dy{@8sdJHhMG=Ep|Y<bE02CCmFfy0*fRo#FqJMK{u8Vs9{8
z3mLzRkFdU-F4I$cjOFMa!NRYF0^#uvXLR>;?QG35>34r|xO(bu(CV(rp9gEey#t0$
zZdajxU(i%L!-lrsKHQ>nY<}N=81O&t&u?bd=#F!*wsEsR&*$Y(UY;3Sr+4P}lD~6)
zGxUT+@c%Ra?ikVZ{-Z_h=~{+mevB7&WZT+gW<6#4a?bkmE4y~LcfosqXmWgfc4LC}
zk-7ZE^8IqHTfg`k&2LlsHz(u5{@R5fujz=)I#;W3Pw2ale^T?cnZ<U|rqzn#3=JQ5
zUvpq=u=MYJ%iyMJCiv&-nw-1SB{omF|G!P*@?N3MGOaWJW*dFjsKLb>%a~BHduCsu
zm}TNa8^^n4-)BA*k?VON#n51Sw0L4-|97Kj_4AKKNt`>GcdpK2_MMQWpGAa&x8I$&
zXJ=qRT9WHG75C@UcfHMfvsC@4-RD<MbKWjl>1A5MCUl><@6|T$_e}d$ekyK%Y;v6c
zFW1(y$24tbpDU7YQT-v;KUpgNcJa*D?D7+jFOOKa_0#P~Ro`unz1Oq-Z}!e>FGoVx
zqtD7mPNi>L_n~#i&tr3MRVzF0{3fIvn`AsYaerc|ZwF_`T%Pp2`5(Q`EDc|NjmPs-
z-R9ayue5^}SC;g>-ex^rotuH-$s=}S$gPDc=N^K~qlDP|M!8uVFQoUiFKJ%9NaI^l
z<C(o@X7xPNGkIhgl+m!U>$@f|)91xIZnR`-nE937erm_!{n57VV8yZLFP#`Y8~(LK
z%!@dA%1$F>r=;P%H3sGTK_hDdr~SQt{Je3tR$$u;MUhG0Vj}vS?kpDQ%Aao*S~>Z*
z1B1_*@M?dCGnQ*^>+P9*j)%*@C@J;!R{`nMRpk+fHqUrEwf4$dj_Qc;eY;iOohz4N
zXcPUcR6O;vmGYkLf6G~}Z`4$Oyn}~ffxd5OTh!0#55s%B=UeM<G)!Fc^qgP6vGDD$
z66eaSjW^m=Pg-0gnXNjBZL51&vHUyFb2IbYf~Sg?-o7j9`tg6!k3G^GUdP;tf1=QH
zIVLwv>_Iipe~#zQR|@a1I=+0z+R{%&k1FOKfB(T}Pj#}>-VWjOK?$cG?f%>Q%UL@7
zdhYi0v(8CHZ&lgW9JhO%wQlw*oB5Ag{R1Ul?>Il>^3P7ix5w{wmA|YzvZrHp{@fi^
z{#P>OrcStD|Ja(Bf#FHQaUEs`hR%%#LGwM|uXcb-D;{;3NqzedHGYl^p1RN>P2<&v
z`mRMkKsi{%^`qvWi;Fbmd|W3vU7p*0hrKZ{SVPl);mppR><uj~Nw=gDQoJ8VG}P@}
zzwTL7@b|Obt{2u9|GvZg>GS-K3nwBUK3dCpbcelZXyt>Q8+Ps3UnBH=(p$y+d#QQy
z5)2GNC4t-THg>WeTa>q(+m~g#+7TW5BQut^-P7(eJpCc(ufXvsXJ<*~Gca7+GW{ik
zUCOnJ+tvCE6M7`3^F3FsD@jXIepTT%bEQwj?bevjRV>pdEj}Khe{N>yyql9{S`Y7f
z`^HyoLEi4g5x*xqy(8{gI4RPn@b#n5SN86=Kj+CjVM>MGlkm;EOs^ZV8Ey89iw&L{
zpS<Vy^B?yPemG*@pmOG_{3o89G8;u1Hi>0dynANHr@f>9{lA=m7p#)sC119`FHkyi
zb-Q0oEyMXFl`NC|<Ljc%GB7ykm7OtRV3;t&S{Sqw>GRbFa1iIX2Tv{c4ZU}S`Q`GB
zj@}vPzRq8yVJGhT@#qzm$JcL|u(+w3tqd+PjDIG_aA{FP!oF|GjFAk#9?sjfC!2NW
zcJ;o$rR(PJPgnP>o#k_M$M?{8k2k3L28y^RzBfMYZ{M(Cy3DaH8eRS;Yj+fKzrT6S
zjDf)*clRUa0})5mnv&9Pf3!3c_~P@zQ|5HD#kQPtg?G!oZDe4GIPSP?@$}HOR|B>$
z(C9iY7;|cw%=3?ij0*X_p>@6KYIP-fNd@PEeY^jzfBWP28JFOx_lsm2d^f1?EEP9A
z-<bJ1CjMTnMf|IO`(!`ftDh8EQ>;<<kI|!7;zU`?tRMERH`bUI)z4bBCwJASm1Qkk
z-*0#l$Lu+?x~=95kK~*iTnsxu>uudr{dk*g;rx%zAn#o}^im-FK40Ni-VVb_%!S|9
zS_)UQGcXiwNS+3+OdF1PmVgh3lbCp8&g*3>PjxTTI-Gd#zh>7X`;CdGn|IFIa{3N?
zLm-!HTA8o!wk+S33<{dhml<bsc`$uZ*rzTpb$aQY_D8FQcimGtYPsWFtxQ#d@6@)L
zJH8)lwLLR`_9`3R>bWy(za4C4dhQ$A_Wo=C#t)XW4UNw+Fc?%WT)4M_-+*m;(lqIE
zd1;Qg422u}B{uKjNR~N1>#V?L7KQ}bo%0m;NFOxKiRzm#$#BA9&G8bs<jbEj+Y2W?
zYWE7fTb6h}!Tx*UjSU59kL=I+<n-B|Tze~2Tc7jOvuU3tUTr;Lcyrw{t@l^XzC4<D
zw@jV0hL3^6aKZ*N3o{{U(QC)#oqhl8uuEpxSaxJ$#P<hJ;+RinuKHwT=X~UByYf0F
zhj(v`_0*39`MovH3lE+e?iyHgqLQa-Q~dV3fkN|Dk~f~4wBuJ==j!}Mi{D|fseeE_
zx_sWu$N;BLh1C83KhAD(XZX>buEfB=uvldF);le2y1t=pYFq5voZoU?@V!*1!@`)n
z$W!*6H^YR62#XIFV$$BO$=kj64m;xl_F2I?&o9pCbq}7p@ZkN@caJxyovl~b+b8{Z
z(r=5L8_xqIcC9>hdyU;!F_X}rrXqIz)kphp@*a5h_V}}%3=9Xh#NKpf-llnMPWI#t
zf%9jrvbp3?P?6YkIHKLq|L^9$BO7aV7#JdMZRcs%SuHbfhCUlZipsHNPcQR5-jKJu
zS;RiV>ygY#(Jhhw>1ugJzb+&v`WIzqRZqSw`uXV<xyW-nZ6+6XoWIS#v)`HjiYQCM
zr$@WW($vgXX?8tYu=3RD9=p%iY*x!2Gyo;guJaQX@2GeDe`Nu)LbRcJ>V5MB&E<);
zW(!~Yh6PUz|0Y?TsB4pGxK3~1?#TG0yoH7Ln|50Ku75HmKV-$#9DaTV29H~Ppqm02
z7#NH`BurvFarb@wpJ~a)(hLj?Y8rBD_Vuv7sOxF<d4Kk4O3bk)feob_PfSTOo0D$O
z#4v&Fd<j?YD~76t67P$g9P=u}l`n-n-D%srH8R+D_Mr>2h0iVgb0_3!Yx=>oqf9T{
z-+h-}_`!^U!RP+Et+pFd!_^X!o%Xz0zD(=xcXOS-pZ>4Jb6eh<Gcc?!T4yQ0^XbPQ
zdCU&Wo_)&P|AX(#smiX8yL)yD@Vvh`v-9JO+mlQBl8T>L`%Evsbo%F=kf&#-=vkEd
zhPM4azx>YeMBjJJ3`-s?(&(x+-YKZa_G#ftFVmK73deRmP2_ifXF6fchI+wy4?jlw
z?LQL6aAIougCg)q^HOfV*gNTa&eh6XQ>ibwb>ynK`kwCkoK>GxzDz#*)VV+O%x}vH
z!TSQme|=zLV9>m62-@$%z~I29;sEaA`vh1#kmH(Z7AiTb?5~8Bu7;a=)$ff8EIp0y
zl@2D}EpvBcVo-a3M<l72{{pw`PVw)Nj_)p7Z4BQa_Pw!l)oneI5c_krGG<FOyB?h=
zPN;rl_c8E}e454Y(%Y4K3=9Xp{7uT`&vCw6Hj5+A@5Xj6!_&KC>^|H$veEvMO<BS5
zPx}}dA_CXFJ|R;ay+@jv;bzCrE$W{#t5fr9k0iZwp8MM($HT(7@WGiQJ6dc#pKF+D
z%~?Jp^-E=N(X8JLIu93WaNYkbn6;`%Z2s{zYF9*U49XaMLTmc|W-*yRvb)y1<J5!A
zeb-{-wwV_E2PM7k^95g@{YpPC(hzeqJ?2jBo%2a4vsT&k8|sG%Cuvq6%d0wa)%=y_
zy1JPc)8+Oq)7pP@&ZqvJ{YTs0h`ByYXJBCPxYoB4w4xc5@~(nT!De9aiO#uGdNCwb
zL*%35!QQ~#7c3ek2BdVUKX+qdShhNE_vHu<E|XQv5zc$s-$@^C&G=)Tv`}O9jr&o2
zqEF}P94%}YmrAP5SoO)|UiOVm8|-65j@FxKOHVQ7XJA<3c!%M}3W;>FaEZ8%?!W5C
zPTtsb!{UR@y!1qieeW3<82%U3F)>t}S}r>Ko%>sxqbp9<-stH+=hHL0SVX$?;Z6fj
z_nrI)gwEZ4@Ba4A-a1`%;eBNc0?api&ijVSwa)rxS#x7!cjb+RVHcL)IiAE&w7zkP
zX=tVRV}?f>e=Yr<HZvTU^u}1vuYP&qX1lol+GCkQ;rDq8zfR0vW%NhqkH~LzgEgCX
zy<H>E$k3qjc19Sepz~;QacbD^*#@pfJUoJ@hCei@2^6sh)x>xD&gBJ)Y`(+Z_!g9K
z?CzQKx^!hQ9@tVj&Dh_Vui>iZq1`)X9^3!;TFBE}jXAS_TdX<wHzDcOw%MJP{CXl4
zcAUQ_bk?5(70PP&w!bTu?{1XQ-owkl;AzqGk-5Ql=FvHYZNiTd-3{%IbsVwy<o{|P
zubK(BjmMYGj0_Aqr+*7Fd{{0q`(I?vF7f4@HEmC><cgo0B>&8gkD2>>|NL32_W1k?
zR#SQ>EN|&<xMRZi2kA*pueRO(yeHyDsZIN7kE6wJt}R<#>?hUWx$3r_&Ec%g<|_o4
zfBFYc&AQqf5Ipsv%%S!>#}}p-t#5n+3ddx|Z(h|x*OxL(=>2hT$+YK5>mL8=p4j!f
z=U3U9b5RvZN3NPH?a8kf2%q2fV-DZWR^NBY8ySnZ;i0KuDAmtALHp!9hWy`IkVE?}
z3D43u39S^GT~TXzbnzk!t=r2!vVSgnz3uZ{h6c{A_o7_q4bSi5ODJ_emZ!+?8ye^P
zz)G|0!jCrxE!MaMzT@mXdt0<iF6>6S&7}#6d!EgjdQ(`gt(u2{VaY?MdukgvKgNCT
zJ}7skw4>cLbY<K*kE1hEe?;y$U#r8m$WotyK_^Xrdm-0WR<{C428L+C>rRUEzg^^6
zbF{K+VrRNq+RpyN2M*1<)@UqzS?GJW|D%6~hXb|qqvlMGo0I;U<%sFO=XZ`Ly1rv)
z@R?eAYs0%_zHh##<cnS<#V((JbXT?NcPWp!JC6h8m)j?4GdwxAIp47VTFhmE$ML@J
z9&b?k-uzN9T>hGK&+663?G=4P>#|oFeR=b9%I^rCH#_pID?vkLMP)vk3=9*5T0<BZ
z8p1Pvu{pdGDP?3}P{>?(pgwr2`o<kE#W&kZP2b7Sa9eQp{JD~K^8z<WGAw&}WzWYm
zb$845i8HJYY$-S7y6@+raZKykW~1-TnVh{$WySI>jIr&t$1402k0c4c+n`>PJFlu-
z?E7^FhK9`BQ@3;GbnKmySev!#Q_Pv7KaXVQS{ydw@SVcQkYETJk}(qgT{L%v@gA|~
z!N=9#aKCwO$HC0?^ZPj;pAZ{&!E@(pPu1$MsXfoK@+*>WU~T<eRAu6O{LHU9)%J6T
z84XNJZ?}Hmoh)oV<F^F!PVX<DRaL(T3%q_e^-i_|w{K`%=k)Jx?-Ut!etZ*sX6m0w
zo|fX#k)0B6TaMJJJj=0ATvw;E&MwwBv~A90eozdpoAj@Qfx%%~nU6In$1+S{JUNl!
z$+^t}3=9oAEsvJ@hPFLg2FkDr*S4=)ciYcdaNEN>D?T?xISVt)Q1KP7=v2GHusZO<
z*INFKoLs_!v*(#U%g%hqE*!Z1u4ACceo%h;bt7b{ZEI&|aoOD87Ca6-Yzz#S0*<rA
zGc<SXe3<T5ZXll|Y^A1T^1C-Z;)u@gt<l@({;*|W_#m6^!pQKi$M^op-!a}Dj`F@g
zeoYp-{$t<y!#`y{y+1rJY?Zu$c%l4H=XZ|{6t;d^cG$SaaC-0#kAFh*FJE(BUFgq{
zkoAOv|M{+!r<4sRWOi<R_rdPpjNcJo9Nw8u=#|j_pLFcH+BznOyf^In$Lt=r9Eq4Q
z<1yEh4xg^ymkN$t6&C!h`A6lN-Hh6g<qQl8rq*d9;2`n<wJ_8i!Iy+7DEo%qGYhQ@
z5IO43zJ9x(p~yDJK!&)-yBQgTg=X`-pKTmhASNx(yg}jYZ}BqIiLamBH~Ami`1?@G
zjdaO#?aQ=8ZRW37rscfnzw^7t7mTYl7#Jq>c~@s1XgH$NE_lx7kGk3X<ff!EpKjgx
z>UBnlfuW*vk2yob{zsR>H?9*}ZE2XdSnwRn+h=wh%$(_Jb9Q=p?D_tG&9Zw5Pn>-Y
zJHBJy(C~Yi)_b@5seiop9IrRj^4`3TJ;CVJHtTTze1q$T{nI(S-s`JBlHL2EnBmEj
zJDZbp+lBYnF+@z0`SRV=H?&Unx9g|;jq_eLCq~YyKE%?on%^tN)-dU9^W<m_1_qVX
z<0YVWgM*MtEz=%<M|Dv6G@Lo&B(rdZOY*zz&vxWl^RnESvFmN0Nca<8t~Cq?wq)!%
z746r{cOb~*U+kHyB6^eRyIZf=OHNy=dCIn^^mc3Y_sDmT4JPn!EVK|7d;X!>^3B=0
zyJh#bGBPOe{+4>p;M`&P@HpG{@`Wewcm_{3@2p+-=7`&b>pT0M`}-cpf$m_j%1&cw
z=sCK}D@$vwo9+_96}R)wM}9hJVLWlgGOhf_wr>o-Z<J_=s=T~l+nwKc{xA2w_x#hG
z$!rN;Hm}=1YCd~!l;|6JZ>8o9?w!{i%#zOT^fulnXIRKkB=|YF%=gFcImPq!HXeU^
zGkp%*{kMrR-K&>t9=mmT_rKbA$%YL9>u;XtWnh@lBOA=gz@TzMO_IU#SJpMgdtc8A
zFitQ$54r|%lPK3!(@@E-Ise>~r>_k(Xz~r>Y1l4vEqD110S2G;Hqkw<kCPjoR>;@g
zug$4BWRe-N+2(ue$IbhVdiZ@qv%byiu$V4iB;PLAd6a>{!K!YeIxCOEnN9T%YYuzn
zn7K10IiJWbzA63Fk%8gEHs;673={SWOs_jpD-c#-v{TzJ*n)e@?B5DJ2WEC2Ir{gh
z@YgSFiuy@Mo*dSFlcse2q_J=4Ju%mhM|bEPtz~TRTyb0P$cJxd!`?gb9I1{`dQ=s0
zx8v)|(|jq)>zLn6Ug!Q#kzwbC`5PpD_XvxAZdubiJz3YL=+Ud@pAxSVC#=|c=TLR=
z9qZ~K1_lSCG9Oh2h6xMu)kGN>DjM4g7@nLd1{E`JOhYS$xqVD__8%3Kxt_b+QeyU^
z32g5_$}%=^b{u_fvhAsEd+BXW70wM7-_Lx%+xM5LGB$YX!<d&_6{EV6{wj-I-<7_z
z|1g8y5v6}BD(7CR7vJjMyzA{Zp&v2~3<u)(Ff;G%-1*?R+m`VDg*#(%jNF})l0ANh
z{hjcgm*K#oqO<=`8=8m2F*6*PQ!&j+r?hf+>21s4jjrc>c#h5N^f^-dZ1RrxKJ`~l
zNt-`ka=-k3$kXc^<5lu^nb>&WoPS{}(}eAj@0bl33@5N0wfsBhx5b*1b&M0FU$6Pv
zv6E>6x24nj-$I`+%+Skz{B*@^!@7N!|Ng!bvUE-h&yn=16OFsi*XmSlldsNTWMJ^Q
z*QW_?DKQu=ln@7HC5LB+9==|t<=?&N$Bf?*IgN*J@~q3-{o(W8>?M`$zXch5n$yj?
zcNlmva9{3tRJ%QSzr($y4Ihg{Udx-`fBrACWafrtT8Gb{DSh|&!sN>;cB~8x0y5Wf
z)9ra*bk9iLFXtS*bD7rrpkD!h7Oy;2Y<N2E%`s!pshg+28Ow-Q<})yyHwl$Iceut(
z&)a(Djjzj&{Y(BoXXXi?JNb5<zt4X;{x@^ak=A?a{Hc#-t=gm6^+@r1VT9Y=vTI)%
zdZO-@J)imRHQ&o99u-h+Qyc)Qw%h*hdb`J-`DRBp)5a-RE7KSzblV#L)%!X_{oJjJ
z$|Q})s_X1JUPo-6?$Z*tcjNuZcMjG4v}9snn6x2Tijkp#rPg#MLyE^I^#i~6XfsUM
zoSz0-?DOwp$kWt75qr&Z8w1lzZ_B29sl3@&{P-MG+3RiArU48FaUbtKydkoY;k8x6
z(ay7b&+qK%%wA>mq`UrPt;{rmM=4z2`U7gztxng<RDE+?eEN%NsN}cKb;a`Saxp&t
zK<h3)rxlqumR`**SL$C}{@ge8p6a)mKjJ#J-j$xd^&~$NLxcH|?_~@OGgdC%Vv_w*
zw=+HR$p7C@&$ujmv~TnL<#n>%+k2*Mp76fd&x&{YPW}Uvo}6GZC^I&`vifyIaKo0l
z-R0|#p68e#{d(=y&YesXx|NOp>ZRYitWcg|dF}Ayr?%_kAHAB{wX;=`|DECYjV~_N
z-7Tw|$H35V^0r|s1A{};zF8p*3=dd^o-&@8`5ZJ>ZzIf~(C%as-*fhuhQh&wSKGLK
zwX&4YG>LRGG!%YblNPv8V8*ev4Ba=){qn1FR(-nNvA+MP=Bd3htiO++tn=D$XBztQ
z-h}?{MH=sl<y%Z;kJXwpFevcub`6Y~<(=T0H0|%N3n5Q^z2rNlAN_k=*zojL&?=~l
zIt&c&Pg?%h-!8LZvS17|!+{q^W^A#Y`_#gJqpi5%{KmQ%YvYOAmucl6wkrWucIU4Y
zetJ_k|KHlo4>9q5#RUvKVRy@(zxw+{>xjb@^)n7V<*RjfSlO#Pggufwxi~VubA~p<
z&H}rywN>|)AGCX1G{;v`vGD6X(?_o=yKAfbkN8!oZWmx+n6XDTm;;o1JWuSDFhAf_
z_y6(se4!U05r!G!T=UFACHWHKrDyb7tiJ81%-FW5!tnHp*V}@7co>d(Z#0?qFqYwg
zY*G<--~?+~^P*$ZAN?~h`Z%w4+HZ?58Ya6!Y%G*FK3vLl=k@1xybKJPoI8WA{XF26
zbmr5I7hj(R=j?l=@Z%(GEr7pT(iu=2F!!1f1H&Hm=Q0Nt3&tE)J6XxhP~m!~`A1TX
z*tYfWPCPqmxc|i4V*VAGt1j)VnKzGdeveCj-|KDGo=-MUn7B+U|LpfKM`I?deJ_k~
z$}=otSmrvn`QM#x&8JIOp0eK9H}&nc-1NCTPmV>dz52%Q<08fc)=%f}UkrJAJuqH@
zyYq8J{uVK{@`5=>uKq4w|D6A*{l~IuoxhwvpVw_;U}*5XZCDFRMJ6ij3f6|2EDhgx
z#xqUOW<SQj!0>=~<Hhst$y)^Z(v3x0MfQDvaPOPicVz~Ng*SAH?%%0-zWLde^;VZV
zq#nd_747%03sp+`e1G<x<B6Q__#Z3h-JJh>2fIhwqs<SF>{);GJRbwYlING^No`Q_
zW%*rvH)QF@GXZP()t_yfcUd#uhJk@cXS+=2opZBSEaYa;IURSTsBc-x#!il}ji3hi
zygRp>lj835?=#cb`|-1>-SM6L43UL?RfR>#j1o(Cy*+pJ((ALyH^lo*Sx$KLl&;vj
zL#mKh!F+mJjcMuam5%HVd`B|weKUC0otzoomXlb-?!GK<ckuT&_c~U82F)-$Kdip^
zlJw7Cpf!DOXV@_?C^(wAGcq(>uQ4@Zc=F=Aecfjs76yifa+6R=t{b%me$Bf*{(RoZ
zT6$YnGw9Qz*%kTKG7q=*Ha4AQFz}mqQGa(x%qQRF%KOY1mO0jiM&%XDH>hR=7%P?D
zetXmX<=OeHJB5GhtXZ(~)b2$Zc2c{i%4Q|8F)*CGDPGPnP4qEyI@>z&@9z#*X0Q6R
zOrz`k&i=zvuXgk^F)*y(dAcIyTk*}u>u>8FuTiiyXJ}Yz5?U$!T{WU-&gZkmeS72|
zo;i{kJoTPr#k)hr3(V8cg&G*f`$Pog70EZK%J@F>Vm#3+;Zg5*#9>p}x^>^YuB5VT
zx)ky>eB;Ndoz2V)uMC$TwR`+%PPDxISBqcD>&}(WS~aJ2zr@VAH|bU91Q{4Sj`Vf1
zFfa(EG>bIcv2bDDV8QtroVoU_T6t>qA`Lr<g^q8p<t`5}t_@!DBsKhF`TA*p#f=Li
zw$FX0#$cdSdb_o$A^q7C>+cI+RMn(kUGX^e9w)=SWsIyl1E*9MzT<x^^vxd}<r*h^
zZ~WdH(on4{70<-rP*pcopH=5%T#dccy5lQnsQQM+tq|WX=F7y$P%*W9UCy^3d&L<T
zbe>(Z&^;sfi|y#F;NLfE9wfH@b+<MD;ny>9&MMCfvm=$}GtZb&VgEnrp4cNFJ%+`>
z+hcEBw=px``{P2$(^#hY&7wyoX3Y5h>DydIW}_wi%nTo7-@83gI~Fu2HU7*)5j`XE
zN3Zt&(pYy+`kbwLl`^=*StA?F&cLwbn3^Vo<f**^<_C=Odc_zdgN}fXC7O02Bvm8n
z`@tE!uaq91KUVhS(t%3J@5MVyx{CL`t63w?#xQf!y6T%X#eK64V{dfGT+1z=@LPdl
z&q3QsYmPkI-?dgREuTw#rr>Y&zX20wS0>6oIM}hq1+*&gQb}f9qwAI2?dr!jnLppS
zP(#G<-M0*tFr_q3h6B|_=Oj-*mHn5&a(zQ)5*NdPOG$54HoiD&QM@(soX?lX!NF61
z<$hST!#;Qae);8w^-a2~Z@)VtGePnEZ`PIO%m+9s)n6Yk?J1qKbD36pmfM;myG<rY
zZ=7<qqmg-n)p@I;l-x5SovXhu&Ri9gs~IQy`rG`|#_x}AtPy2kNLW>NMh285eD0YC
zb8IkRy$7C8s0i0-_<hiW_gTPU!Cyh!V>M=N$adKOxm@x6GOhO_#dTAa%oz;yX5HTR
zChc8${<NRs#>u(t3}-gyMS;Vez4Z26G1rare_MQUaLoIcx{ks8G&k#Z({e_JhA%B!
z_ti!w2rmCrT>Ww9O0R0MKWkT>T3@sztjy}-Yc__2;-YouYi4)`zpY}qz9I0Vtq?<k
zXt-Oh;<=C<k2R*Ld#-<9y7JV`EA}jhyMJGq&-?XO*<4S?Z7;4p(AR1IVZk6Q_&xXh
znd`UYp4|S_^ZoPFlY7}V3H>&(ne}z4tnZsD#)f|<!~OefkFma-Z^8HI)!s@0_f$c{
zHYNV8^2Y=j7-lSyz0AhIpz^A_lT|^vTunN`a6f1Qppv2J$y`v_gk1<p&G`29;0<0k
zN0wiYc7NG4JAMD}KlPud-`(|AB$us0u!Hr5$@af-mqVUzUw*%r*HbjEer7o{L&Cg8
zcYJ!;dS6$6i96suYZcG=mh)`ss#4|*3=Xr>N^ifN8T~+3s&MW5dlsK2RfH`ywD9Jx
zyzef&JB@+CO#AzsjZ4mZrd9D>xhcqyARF$MZ<usmTKRf??Kz(fQ<iDzKiX&dy6_qI
zjjjqcK86``@8A8kn7e*2dtvP#)!&T~=RQu+6I-DENRxr#ba1tb?X{ymy*sMxk6ew6
z2%b7UYu=YfA+qKS3<+IjXFx|dG5E}LQEYf>v4qbdZx8s0->zA!czE~QN$q!>V>##S
zF3^IRg72>1eM9SNzww(G)XYsXXE5NK<-G6Bv)22yFTZPa{oVD}uZNjI;I3rH(T=P6
z^CQahMV>s<-MmOcuIIufKlQS`3=9X7%AQVU%<rsz|C=o{_j%H^J&I4fY^4?~?Tln%
z_%Q8xx>oVzUo(4T?z2B}WMa_HUiHcE-J3&vYDIG=i=OwH^VE*d)}nslJb^v#u}i<U
zO0j*@Y|OnFpKa(Kyu*WG)52-@e%T%Up=P6gZlg-6WFybrStSe)Br6@?2lty9ZrpdU
z_TA$HOFCAs_m7zyI%jp|rfsp+pxg9B-p(*(U{DA&^JP5I`CRTmkw^iHg84nrF;)q@
zzM*kqu7$Zg><<gfUVoCUy7~0;{i_E)_?F%+<H~0|@GX<)=icMXwARP{_&Yl{{zgZo
zJ440HG}jb$v8Q7E(LK-h-(Ifp{g<72=t@t~^<C##?XypB?qgwSD7h+impNa+J#xNU
z)1H+pPX+wXNSiV(?JpC<f#{<3#=GLT$4+`~^yue#ne%g={F}?ha7}%GmEpM%p7S^F
ze>L?DwTeG?>CwKg>dM>Az8fY)KatmU<8@?k1MQ7?w;|i?TG9QGrGKL0L_V+o${Epj
zCtJZhNt59~F}qufPo%WI+nbcrN3K>Yt~=+IG&ilX@OAKFP6mb<b7X_TnPE04Gt8@I
zI6X0j7nUMs&0597zVUr;@_U(r^w@pQ`qgV!&P+>R|2dYaL3h>dcUv^NYKuS26~CUp
zvGeWYGX2~wey_J(-owXGp_D)8V)yItk0-yjd{<`OSs7k4|6kIQX`AA=&t=nRV3@E@
zyE^+ov7uOi^o*?;N++CVt=d!KmzsI}nmz-=o@FafMK@2*34UAfECsamAT$2+uN@2r
z7_LY}_U!olVb08m^NS5rWDEb_+V`X?D_wirxzDp=EY*1#E<gHPTYGH6_Y;@n&z+p2
zCzcRf#KFk$Ape|_foRg9*T!vYbgpIQ^*o4jx|_DKf`K6+sLV&4fnkD1=MjdK#Vfsz
zdN53TypPi%tnU9~^NpZIH7|~P=192I^S$0?Z8UF<lH8m7<`wrdXRZ44?UeoQTaQY6
z=QimwY>1tARKI#P<JM<a^l$5SJu2xDXFKpBGhnV-<zt_NnK8#V?fPu~=+TEc5=TDm
zNoQto*yZ%^ZtG9hd4l$l^Q*N_f2fU|$JWTeu;;1W=ZltpTULI{VY$A6w@87pp>(DD
z9*M2}Y$4n4uKeYYJ=@aQk^c$Pn)4EQ)1QC+-4i%#-!nS~?pw2ugfdOovg@tW-C4<-
z_e}HuW%PO8GOfc>KW{nco~h+L5%|usg@NJprt_23b~g9S+fk)&*S-33bMfBF>uTUS
zbBgR`Rt5$YuS7A1qK^s77^kV-6l$2`!3VnhV%`xqM@_S~yW6_=*xO|nZ1|sQzW#4>
z#1xmtbJJz7<t{(T&yeGIw`?IpTJD?upKpXbU7fvqk%r#(lGxw}v5XC&G7?)=PD;o3
zEc$Xg_3y5E&*qk^|CoN`%csqOkzKY$3=AH(*MC~pkbXqxy6`NHEU8n69(`YGnB*<E
znT6qj?!A*;NoGyiFMRKoJ(NwbpV+@y$8rM0fvBXlDtmqIJ@+}f;f?*e=ib3n&rR99
zEu#EXWY^an^9{>(r)k)JnjogeFV<if5MOP}|LWDomL;E*+QdHVF%*3|o5ReY^YlW2
z>dWkR%m-9DR<D2VxMqsok(%QBOTW%Jx-Xi6fnoB7<XH?14I)PuNij@d=4@i{{`I&2
zzDOFYg8HKr1_p);i)T#!baKYGS0)S3A8I?o{5SpBZ|i>F(73&y)9?L$Zh5(bi(%Vg
z;~%N{>ux{#y;5eyblK~<<p#&NnG>$qSYKKac{a)9|J_MD@@&t2I{f`{U|?~WN%wtu
zvBfV{85owlza+zaG~V#^gzJ0r4Z^;y_$aL{^g6C@hAIO?eqiz2^)<hyoXbr4z3y(v
z(p`@k9OUzQAMNIIud4+WnpbxAAD;C_`J#Hd=C#f8pS2RUyxLYAX5#zqE`tGY*2}fe
z_pJ0XO^Wci<DK7g?a-4r=A9euxfnL6eEoCzvCg4GZ#L#n-|?$T@5t4c-oaBB{<|U0
zyi4r62?IldQJD{D75)bH$=nWXBKO%MdRej=iXP4cod#u_y{hP$LD~8;)4D{~ea8B`
zU%ov5#A_i3!wtUk52nZJen?;QHtu;f>w!(*dLyc4t-7+NZR2hO=j@#!HS<G{IK7+B
zmY=wL)^r92hfjU4w{70fCi1EH`m#<1?aqzwvKMdPaJVx@oq^%DV)`5X>7}>d_C9pF
zCir;T@ymZ%vI9>uFudrl$=-JI-{UG!u`4gQxAXVSb4F|3`$UtU|M8!-hMghd$)kPG
z)>TH`6#tqS(O4zeZ9VH0=y=8rrr#tlm(2gopp)?FdEPRuZ>vSZ<6}EkzYcc3pXOGg
zTV%}0&~WmGVJHKG!y%C<CI$9cN{nmV9GMx46x~3ZK@M{qZI|!O%{SSS6v_8x|C_sy
zlzl_%LOWiB?%v43$FM=M^mgkq&h}%!t@*jl*6zLaq13mNZ83w++PvMui`jB!R6Kbl
zXQG?pyU+ggMn5KohA*+#a+g<1r|8^cK3BsYR(3yRsSV$?g^3S@-n?aE_#pLM{r@)W
zub<fr!zO;-J!#fX28Z}H+F}CdtuNbuZ4CRK@xMdyNbOsFw(``iGOO2KoS$p>?b78Z
zzxf#+FV8ztb)`Ew(>L_qv0ci0{QpRw==~eW(D3wTy3gcVw_`pr6}HFv?;YLod+Ws5
zoBL`?7#I??%Fc*@HY8btqFiPUV?^(FR#=oXclZ{`etCa><}rPpRe8Ic7isYE-YA!w
zy=qV7hx2~Bc78o@=Qd-)W}E8xZ5OK6t~_PUYZWKj)u6eC>%b;Z4#>1#9I`z&qhx1(
zS(sV&s-TOtVPgC3yYlt@7UnWAc-+qm6q)`^a#Pu?-wbPBCS3|Yf9<HT*0-%<>G|Re
z4ck{-{WIO_nTGFGozH)?zA`g5?5i=I#2xs31!&mG(s-j-x|+nLGcVS;)*UVDn5uIu
zu4-1zf5wC(Nw#lq$*g@-d}d*5Xh)$=TKwC31_p+E3(qCYdSh(l_2^Z$aCo|h;=6wt
zE#b@li!m@5a9S_pWMJ@^aW;gZ=s_j>2C0)*8J--n1}(tkS+erf>_r;;B<|nK_;YBH
zUeA^8b<=)qHkaPBZskhRJhq13pd~L;ua*7%@R#XFyUe1a8UMI*Ce=>7TAR75Xy$jd
zir!_@yElWP-Db|!-1NWvKQ|rUw`<wTQ@2;f*(_E{+iAf&osprUyL?N1%+=g-gK6E7
zAw9wWjCxng_PjS_xX`^!Yp!Ne^c(wi?-s5+b$Vr-&13QJ+oglI8ht%4vDx|SWd;T_
zKc1A*{-X5A$x=PtldE~3JehryjUgf`_r#=>+%pj?kMFT6EM*h@eD3M`b?5deBK&(}
z?nzdKQZ8<$HP1j>Y^8(^85J@?EoBK%Gl}PQ%$}X*UH%(1?oXW_tNV*RdELRkZR_*B
zYK}7`FoTv}2Jb%h%lf<bvo^gwd}l7KWb0$7FMgL`czm9$XV8?{7dyX86`r`NdBRu!
z(eLl#i+4^q%o(H1z;J>8cmITiyWa90vg_O#fAgrz`q>jRSAE*1(Z&9G(}cxfHPM$s
zp7w6OU(cOxmgiQa%iUSn<r({#;m}T@o&5|B^N-BCUvBh`d(MK-ci0nn&-rZN{I)Z^
zT;j2~LD)InW$x<*86?aNCtQuaC7vq#@po~qfVdJHAE^G{D8i6%Z|%hhpSxw>BpZDv
zZr@^6SZen0(#<nd-$n&9GB5;hNS?;P(9q(k!lqCvRlvOFxHU7w%H8IN85kH0)-2Q7
ze~kI&n)POFd(`C~+&2%nUm3CR!?UYw>#|pg9A<1d8!+c(s`uK<kE{ZkUrm4eYaZhU
zrnAp4DW}gdwCa5wI_>+?m0oAnUQGTwiS=sk@{g(v3{MjG=k1=kv+d1|==i&(Ho*+F
zg?6ciiDx&Nw{o*GBxL9D{JqcjdfV(HyWL`*-#@Wd>xnxfL+$422i=bTa@e{4b$IFh
zkfk!^Y~tT{uJ8SF>Pe(Q+BwhV&!gWlGcY8FZolhzqu<m~yK;)LxBruNoo5ML;+zM<
zI&2vk{NFS$cehP*bC0Rjee@~^wEV5+`n4oqRtAQid;H5d7#KW4Z@gJ``(5BgX$B!R
zLxBX_g&%%zG-Odogfya=XRVrZHCJ59>5cUJuPtohzM)z=r=v~cD{pF@J$q>X=li}f
zcUW4N-Dlr8Q=Gw|A);ZO**5*Cr*k#dysf)?V5{%NpIxt089tRRWJr&4;@Pj!75VP*
zffpKKyRGcce*q0`?0TzrRXO5BpbhA7>?QB7?|QrLiN9mmljrOF&P>{O_r%Az8Q{v2
zGyAo%@|W%LueR-;dqDEtgx~cRO|Ng5rN3olm|>N!7FKR}l{<Y>+9P#s>vF!Sg4SX7
zx}cR`cRK!0{%yf<z@xKq&AUx2Pvr;itvIIq#PLe*_Z4wRcJsN_)iUJt$8BdgFnRN?
zw`t!bFAJXUzmcAjbL48c`nq#!vBzq{HhzD)^E@L1!{Y79T?`BjM?Cvj6;dbJFkV}H
zQj}rkXV8fg46}>#)>J<%Fk27W;rQn$$KDrNH|rI}bTiG0D<?0>lwsgGed~Yf*)CRx
z>2dsNPtLRT?c`@-@V>eJw%;CciJpk>QTvXx-Mg?|T6vei`|Au06U3`0Oz7OPye?y3
zc+uL6+O^&HH7)OTTh2V>%EYii);F{*rosL2fBo>}b8FY%e&-c;b-vtF4@L&&4f_%<
z&ry!=H5SeZxifo@*(+_!HMieoG+nn%{bW4Nc=n~EObk9VewnQ1to}JYcu#@bX~`Ae
zW&8g!F)}bnuzu7_$arVGS};6)aZ<kb{he3eT+3DOmttU$*eZLOnSnvY@1Yn&P+58z
z<F!Y2Tn?{}fCe-ZoRf+d>L07l<xBf4=IRw!CNJ%`_EB2O{8XPi{R{~a;>W(bYOg*2
zsOm%AkJGbt-U~4lrA=S@Q{O;k<MFFI?Ttl#t9Dz?0(p#KujRVi=j^1PIG!mgO`68z
zdZx%QX&M8=p5wQE-7h<CrB-@7R@Al7tjSxF`F=D*!`mCi@BXg1{mx`x{f0f-$;ZTQ
ze2<%3)6E;T_*m4sbFa2ppQsgJU}zJ$9^KAXsXE;^v~Ko;QscO)FS-Y+l^7T%X#Vaw
zz4OCA4jxxX{y3Z(DAMm%rwU#n5_sFtmVv?Hkx2o&LZok~l@I5Jw)_8o=&B^!NjNhI
zshNRV4YN!0_FUf<z5VXRBlgUPKN^4AR4O$mbK0L>e{WRqGrWk5`TSn`y7=17c9(yA
zE4`=6(B;H<`Dx3JhG+K<1RRkK|9mvkstr^M9=gqKIq!fe69dEFU2AUVouA?K>CMXZ
z&vvc!>MfM)l6ikLV+#+%foi?p3*~&Tw@F{U*<4|puDoN)#t(iR3>#!$$$mXPv-7Hr
zN$ATp7SiJ1_pa~#<8|k~g!Oq*hK9sS^@y{J_tyMc7Iy^HO#C49{4s;atj!O+Z;S3`
zWK&tUPpYtV+oF}H^7mD17w>0gU~tPl{)K^op>wzKK?apq2ahm)d34QyX~K&3`~QEu
zoqdv(fuZ5-#WzdM`O-hn-SyVVc&D@S=S5ScFCK9cI=f-IdFDHJ27?~%$G;Z6-eDJg
z_3RG2b1U9l&n=(yTY+K2miS~Jt_9|$x8Jtzm$*1J<J7qebM&Je?v{avBjcQy56`r0
zFF9IX`*Y`N!ObZKhV3uzaqK_+mz$x%+%&W@J@@aT&AZ;7+g>ZEIDJ*#?gG9?Ik&GH
zDfRn?T1hi89JsRb>L#h5k~x=`UW`Av&{#}*dHC(3zSrA=@3S%_SVZ41p1b0-Y4+QL
z*>AS)_t({B*eCq^H3P$$)yE6&F?dX>KApAh$km&RCPe?pV4Aiqdi&g(ECz;zEoDBS
z`R7eDWU?o7H;CMw8QKuHV?NUat@EJ0GB^0nwq1LkV5T3q<VmV8zpIBxVO?y-x4q`q
zx|tg^yUvGY|C_#ct6q1y`aAYL`&NGTV@z4Q^3?4+#}iz)Cowym_v3ltB{yr;o>>n{
zjdj0yixnHRcK`W*bNBAWR+DlPZ~PRj?N>U*@PsiUz@WHVZ_;%pL$QvH47Zprig83L
zymH#kbcwN%m6t8WB;rDRihrit-Lq}6v;PL$pBKKku*0%&NlNO*^3-)xwHX;2mR89J
zZ(GjzcxhX*;q_1XYZ`4&TOOJ6y~^H$fx+zU86KOLIg{UC&dp7Wj6Uw$yKwm$Rz?Pi
zE!*}b+}0`k_Tmi7>?>D7U#8aQ3W+Uxm$diYvM-1APPWh3^jw4?;bhXOr+dDx+o5+v
zj$`$reg9K`Wq@khrTO*c@^kOAPCL2p*J=yt<Hxp?CtJPWCSe-Qz~GRdJ5!2*A%Q8+
z$B04siGb>Xq8~P_32WYTGBPk6U^6KV)w}RR<=gsAx8w4-?X84*)pZv$wx|i6zpTT=
zFzxk)r`!CsreD{4y!Xsg{mrsb*-RT6KHV#NYRwX%^t-qF;)L0y1^Y7W^mG^*8ZtMT
zwSU}{zEfg;_nKzg(?3r<Wn%cSX4yKg-oJY_{`#)$x4G|9oANt<n(6s>yZ*mr-0+-%
z;lPEH_Ik&n8tgvE=()vj`C2vO68~<ORQU^)3JeWTH?eP;;h+1yEQ0m#*7&ju-x--U
zlwEh?JK%D{SnrwFJi!R1>fr8;>;2^C%xY~tp$@uKb!%!C149Gng$MEthPw<`Gpzsq
z^^^Bcn_3Ys2DcOQBp4VNa{8EWu3xUn`d>8IE=xb=+55P=4Let^zBFOA;O&`x)mC~8
z5?a%3>~bT;vv({=-j>^YfZ@<u0iBfa<h+E=J(J7A&sERi&%MCofBVPZdsp_p$UT3Y
zoq=J^u{@v1T%8^tpP#-QiTC%EmEFHG^%qarx|Q00m7YC*!^yz#IiUK}mLU1cZRhGY
ztUbCX`+x4gHE%3mnDa3lxL|3#QQ~!&*}AjM*1;F==0(>Zth!+xd8Vw|FKWLyL&MX+
z-8&?z71sFNj*qSf-3C8T>HLlv?<?J^6Au`z(2eP-Ej3&B_IgdOn$_*H^{fmG7s8`K
z7h=p{V0C8b>Eq5}n09IwV}s$Rzn}tD`jXs<e=7ghFVbYS|72tHHu!c!rKE|;%(XEt
zU$?DqW^Pc-+#mei_txZTpX`=7-sq0G#o=>z(>K9o8R5x!54PS~w&ga{&6`Jsz8`w1
z`f7drvV)+N#n(4lX-UX_-Ps*jeA;RybJfk+`}hSI8saRt6>Vm9sqgL9lwbc?J}cW`
z{gr^TCATgYGBO;9xizav_TsBI!PRy$zaE^?(Q)~E^p{2QwjG<)zZ)*g;pbv_Fg5Aa
z(mcbi<n-<D;?sC-lFwh(W@^}fDVwul<%IN@n3KkF>t3H>G|2jPb@%S=>;3vcf$@7H
z14BdHEhAk9h65}blUNgS^3G};2-3X3l8}?PKd!E@19a|{+3T1;@lO*DB&T=Y;=W*_
zS$XT|rhki;t<#J7^jC*>J41q{NkY}FP10u~`_FB=zs`_hnb+PouWRzpyk$yA2)yRf
zeUW8m>8E{PHksGTD=;u@FuGkd(ZK4}R`JK1CzM`t|C(A27N33n%GGA6De1Kxn(M#Z
zwOSUFwOsFZt=qqMg)`IJ7#R|r`B>`|KlOj<d|qhyO8=TW-`}r(NvFaMQ=d08Fo>n|
zZji97zUH{U<N3;)3=h`dDdj#8a>96DoMmx=;&~1orDbcj6&U_{a9R58-)Y~|mKayM
zGB7NdUI+I34b#$6@nAj9b+VIr4|rJEaBhfsTKv_;hfzY19W<?+aCp`(EpdlCZ31Oy
zk2;kloyzyVd!FI=xuVRVPg{;}`*_%B>i+k!=j+bx(>VX|<CSIx2JZru4*#g5)pw7p
z{-2v%v}C2cL89KGh`!0&HoglC4u7?!LC<9A+jrN}b+eyUR?qxn&cNVvyY8lZtm9j$
z4U$<UyR)xs-<<YMC;r>E_slE|3(U{mGH$xP?1^Xi+nw*0UY~Vr%K5pmwHI${fzI8}
zR{MYBZtcrpvn`IsajCgd!T(ZZ@6SBH|7+mpjWWMgrx`wdylmaM;~$tA8P?1+btv!G
zezBF^U$Z*bzMJR3mZMX?{+u=6MwB5~@%#>%jc1MJURpAhq|DtWF@Nh9-<8HzhT3!A
z?CKV0V0f{3{uwR?1_QzHS?LT0N_y)UBNnZn9>4D2&;I|yK@7)^EGz^a&)Z&<_|Cm}
z<A&yM0oIqxY`!v_+0dn?BA)do?N+CzeAX6LhVJayE$=xVPM)^wU8cT#?ya_kf9?iy
zJPe6x=q%z(tSocpxSw=t|CIMrKmE0yCeIVmJLA*rZ=0L*&K>DC{k+el{nN~6f7uxt
z1b5|SU)?wJj`-Z|;_oBG4>TN|^4*E!_OlJfTi>pkZF_q9N>65n1ijq3e>WE2H_qLj
z?!!OrtN1q4;P6+=o-Oj@VrVeDVctDAlKX;tRY2+X*jEO#c1^k;yK&jNcS)xf|C7AF
z;thLUkLL7$(#Pk;Gc@>3n-)BG0(W{qMEf_(%gF)^&z{TL9qbB&tp(t1@YL98P<d>r
zX63Q-hEFdoe!AjGf%~Uo#?_@7`{veeTJOg{b)L1l+A`zvkDwBGbE+2uLqlglgIt5*
zPNUfj-sQSW7<xKPL1O@49D>8227Fw+GvdZQhvR1_P3f+8;;?@7bIH>9qH9;Kww_;;
zo;ib=VSTYmo&T=bi>Zy`+CQw1C#f%cGf6RF)tvRw`@So-6s`P}>GSjKjXH~jm2dR*
zj@@e8nl<~t>8X2s<ir^o0<%7s+0VW!KGmDszuM02LF%VxcWt+A-L}C@dzH47?9M0#
zhG$pj{oW_KVdl5wQ{I-lZ_VT1$F2BgUD}GppH{AoWMoL#{O(A7p<!yenwau`kM~<D
zKUN!Go_YS@*TVG|ir%&h>^nN;eDbOM<6oK?8P+)cKDWfbsQkIJv;l)b#<>}1PVQ7?
zP&;PX^i-?zSo~AT#_2c0<7eD*s#?Bswe{9$?u(B(85my7o$td5PH}2d4HI|dbDJ|n
ztXsX!K#rm9-M`mQ#j`=B^o#yWE#LS4jOb{-DdTU)<i9&U@$rdE51!oZ`uA>OwRo^y
z*-aCM67k@=$Fj-GLSyd)-Ft1f?!|k#X61CB22HK(TQffGUADn{yR4IiW_6_D)6D{h
zX8vV<z*!`B*VNAcX3Mg5F(qsa442EUJ)87qvEBPxpP!3XYFnC1taC2Desfip&4Wna
z*uV8kEDQ|Zq371dalQ0OegA&h%GIsc4?dMi<9K-ZRl5~ezhcYfmF$cR3)H_9)ybx-
z?b==TUck0&VSZe?9sBj?$M!mDe_Z!=<F}P>!hiNLG0gDfEi3<iZXN?e_BQng#XDsW
zNH8YM^qN-~?lOJd6G?vW|ALin32dgOcc<2V?Ow<`>!d~a?yEEZC^0Zxu#R5F!oV=2
zY1z8GTWS3a1|@tinbx!=`7#_kG>egef#KKFGc`In=F9%1El7So_14aEi~pIc&t#vR
zX?xz7lcD>gtkrF=d;4eYs?w-m^XR=?r}JyyghP2g|4!w!3-~#4lp8+1Jmb^tiT~yt
zNHTf)?p&QI0|P_$^=CKxT<Y{*B`4m9vAA~k=LI$%28ILoO-oCcUi;^oZuoTXy8r%5
z-RzgeWYyWNsXx(NdhN>9yP&diO>0$I*jeLibN?vUKKuD5FaCei)<VCkt@m05>UuTj
zAD>dYpPAv$-0~&wzVtFMyihOAX7K5?dHgEpzv}rLKXsT4vfizHd2XK-So7`Qpz}q|
zqtiekFhP4V?*Wb<cFYlt>!-(`QfzkL$eO?+Gl!Xhp+PQFUv00cI(M-_^)9~KZf<|>
zp3<9`_3D+=xi^u=ZRMmHzRY}oVfo!{*~daJD&%a-^%ZR7ES5|Bdg}X`PVa`s_erPn
zojI(TE}cvc4%fcT4Vu(=Zc-ZhEl}FA>SCTxq@Dzu$GarO@4m5?hxr*84CKCTofrN}
z!Tayy*_Hq0Z~blCRMsag^;ux*<~`}b{7eiChp(@bE%QxHKi7CUI=Al6J)Y8Ka>=$=
z^4A>SEpRB+=cn4T8k1Ie35Eo}d%t&IHfLgpFn^!(dE<4i16O{$i|(J4{zoi$-=uVw
zsB0N_Z-y`5K5JLih1t1^cAyOgaW{=*L5HR7I3n9%_@S0<gOyz}qXaW=A0q?9f_f9)
zh&jzSFE5R}cscL3_mZ%aa*uO%8$R7$D=WkBCGhv%mr1vm&t3cDz5e^se(iteZEp%*
zF*2xm2fzFJtB&(Stk2IKd%wufklWe!?oBW=1H*<)_oCcl%TRyT=9KfBtgELnFfb@z
zx^gv^<6(O7uQhio&mTWN#ov2v3P)mk@nP8|m%k-dFf^1F%xevuRR3n(M!5urCntA*
zuH3<v``>hH?d#xgoc712$S0jjf5pn!pxLeYzExnGEz8_H>ld~gF&v1$d3aX;@7s(s
zrYu`m^L_30eKyJo@wJNIu1Yd(ZN0k^bX!4H>gf^&1_t3p85|7@cjrrIGH;N&#>2pK
z_wV)7`qw~Ps4v*_rReA7uV79u%q?D2t5|a>X1dq@OE;tH7d^C`SH-}vK>7aM&1*~6
z-iYhVwzZ1BA|X0M$#<uDntICz#g-4zK0lR~)mU7#I1rNQbbIbrkde|?pWX61d#HQc
z)!7FXZf<^)C;Jt&7i&%U&Fj0wKc`Qf^?T;;C5BJ;&M4Yh@qdZ@Vc99Sm#urVmWko@
z7VTU5yI%hM@yqAmM(cDn38u<V?`q`M^>4oPIy{T@e!D=OZgrF4)5SAB&0fjM$S}j^
z{hzxxnHd?(65X#nSF-0iAQC(K>(<|f=POjtb4*T--)sH*6;I>yE!OivCvdILnaKwl
zgrBubi*<9qnoI-Z<rMaWts+Ml4N4$k;p`iGcdGrFvrgaGEYjlMd+?-3RobmyySaGh
z_nh`xSqX+OQ_6QQH}#FRUGwmMApcjJ_hkn{ZmzzwM#AZbOmJO?=KP~m-Zmck0Sbz$
z2nGfQvvn(18&8)xr+RG4)4K@~-_C}sf6vVYHP4kVUHdFQ`?C04o2~!FgY9?~Yq%BP
ze9J%4{NN@t!!@;Kf5Nsr-_&QkKl$kym-2Hy7pkiQbdT7b{PjcT?wU_)>Uk7Fi9W!d
zgTbf6cEY=J?PduK2{)2X-Mjg$c>l6_Cm1f6f9jdN^}qAHk1_KE)ecInwJtw>q5AE-
zrfR)iH_OC99RT&{G-d{d84{fl3~fFiwGVLB?)_7={H7cObNX4(5|_WJclXVhJLA)A
zMZP)VmO}f~W6euTw=b*ro_jaPdR8jqftp+I&*VO=x)gP9`>b7B|Ia<P`nR^xYF-sX
z!^utIH~F91zO3bV813^@Z&}SUPt_iOpP#umgH5*1HPH)TVqjR{{$%pA;$_!_+YY+E
z=bjkN%)lVAa@)Oot#|aT|Hs{r_}8O(zeT{W%I=xn@1-lXfAcaNu-Yq{8@6<<=nc^a
zetFk#*mJ~r^RMc=lDeiheY1TM$HQWupNh+B)|pE)7!=+6zPmE#)vGiQW;O;lNBR9f
zSHv?Xta>8(`|(^GWuGR~DD(bv(uNB2uD*K$T7Y}+h7ssK;UgY-j0P!P@r+^T({&k~
z)82D~s*ThCK0h*9J!8VRN%QBfJf7J0dE&ol=OvC}3}>Eu%$XM=b!P47+S64f+vd*L
zWU6l9n$`1b`J48={E9W*n)i=RIbY*`FeAh6_T2ZHpo;_+uUtJ_;E;aW6W7%K&s&}+
zv-~?eFSY!Y9s>izv9~*}{FwbXJ$L%&wT4eOvH#F**>L;u#&37`?hRo`V4mYY^ZZ!>
zwwunM`tQDcd3b`w<I8i;A2rQ*^=jSS^o91P<R0x7IP`qRCug6XZ`5C1W@G4a^ZA+k
z``qC_R}z>RW-FLm$^ZV(;1hJ){>aV7x{2v66SKZwz3X_Rx3;wH$md&gYqc2|7MO4I
zVP#-2Fyu;Slvs6p**dv1atBUD8Z#J#Y>(I9e`hA>$gmg7zd7|rU*0S*eV@<ii&vOG
z^lUXP%a~oflO<zYx#3fDaQW%@J66*7*yL+>H+VO1crN?BvVdWA!rlATODo_17C5wh
z#-~`HpFYib5+-NUcW-V3mB;yhZ&#jsTI+K&j^oSx`<MG>?b?(MY6K;{{rNt)_|Kxd
z0*5@$AGcs}|JBXRAgy3;!u~#!`*Tg{b2%P1=Y2Jbzn-q`f4+JDHt+sz&~N}1PD|3I
z84L>Ueck=}93MkY)AwyZPlPiXq<+)+^?H5fvEoWM36s~G->tbS!BhT8@5pmdJ3=~o
z850A;455>{3~WA*f(N8(_WlXtleFnFWnfN$<c;MQ&nCsRnF{76FDwu4Kg@HMP4CL*
znP2xDw&UkxsCsZh<;<3A-`9Nm6!<k@bLD#GWv6!4OO!cryf=N(=6Jbg+w9-pWGomM
z7{0hgZ!gVpdsbxEV0h@t&CPF~Re3bCGB6|<`o_+UWZuMPZ(h1IT!CQ&=dW*j&Pd)l
zdeXk^^NlN4&rV?DNqy}iVD)kDZo6-hZHc?Li1R4cK#GMfP5I+f?)%vqFdTSLasB-{
zYiouLVQ=SM?pv|nqhFt4nV<c$#2b0<^?%Px-!mb-<>1Ek_vXIWXmitBF<bV%5d(um
ze9lZx28M(tmF)}?O02F7uanO*91w^EEo^f5AGu%u*upn2E#_1)%-h&`zW+1tpV`hu
zHeVSS4siFeyzpEq`9tmA+coa#xBE1!;~F(Ly_27}-|WS|I>8NX`!D40ezsgV8?*(W
zYUSCFrfJVzcc<Rp^gOxcWS0J^Ti;kplFkb;FeF&L$=>L7-8Xh_mjT0uJj18vS+|}S
z88;Yyn_BF9_k_KX%e&l{X}4#d|C*8gOK$mx&3$L;I37B4JiHE0Ryxbpd{<yFU|~;N
zIT@6M*-YXX5@g;OpFO_Mo?)`ud5egT?KY2nXQyvTXaBpbZkhD&S3DDK+uqfffx0If
zQl&rxM3+9WHY}{ndF55ecHmcpF@u3gf4u(w2yh^rH!Uq)eDSPP%r-Mwy@_>ED<v)B
zzuVucOS`-N_kGz3cV~RM4QlevyA*fph3&u0*{i&xe*b=QAR~?6r?2$CM$LYXAJNr<
zA1ZfpSS<UK_NuXQ-vyI;#jHd|28I`#lT8;CTZV?S?tQvw&AT^|ObiS@F45sXH~&my
zm75#Mz+mR#`@2T2&EUko%=44;{cZVVPud%~%)9;WO8T09JE_Clgq<qnK^4+J+hsL^
z!FFNw91LHk%&WQ^;mrgo1-@@(Zg_uq;qBbdJ<|=Jwws-=P&v=BcXPg%)yDPb9+;Fq
zox93<D`)|}e$Grb28M*JS-W->-4tM8UTnaeu(#$NlYz-TP?erwVImyiP^~GZe9ese
z(wE<vv+w-3zWrdoEz9v>eg=j!53Gx}^~P+vF>m3H`$zWM3Is9-CoGEjXD#<s=|TBZ
zr3V6s@(rKPp7ANu=Vq(!hR7o6yC)YjGB8|-_Km&UD&TkaLie_-a~<<R*<$0$)w30O
zB^VeQu4lel_2&OwE@khs3s<f-FJNMjeiU=E=1Gf~^8XuijfHvqW}BB^Pd2xczkb~E
zWnrgc3%_DZeDbMs!>5~Pd`k5BdG-o3Gegd_d%E0({ZgQuAr~a_b?1q2#)iG!hBx!>
zGu!_&J#X>#zyY<J;qe_?rJPH1pILqU$-%(z<<PWD(B6BmivkSJixzMs^zMtRt1Pf&
zWMEDP7Ym0IW%tk6?kr<6SBCq#&+Ij&!Rg;^de<^M$lRwqzwCY-(=N?>Z|6PV$-3;s
z)BTUPN;_F_D#n1Dc;bdnAJ5oS8y2B2eyhCr_LZxLCxH7AUrb6%m+>ErS;T#M!Sp|I
zWsBd*GcY8~>N{iY{bfDxd}T(4g1jQTa%YJYeoNzvzLx3lB9m7<Iluek&mC%S_jOn8
zE4;<2xQAb{h7a6g=+c~jY|7s{MuyoBWS1;nwr-6wV?$~1ck}sf{rU_)lHV`-@@l_$
zSKzPwd4|jWRL@SgnU>zN^|ST$xwWNjr#9d2J@3xIut0p94>JRUL7=#rTm$3By{sGR
zo+t4gXaHx80|gcn_DZmCK7RgamH+O1>6BcT>YcN^8`5rfYRZ2pEnwKdY54S#L{0RE
z`CDFAseBDMZ~gA`1BS4LvER*`tgD{h)oBy3YXS9tKs9IbsdmGs=E3}YYi8VWGcU?u
zU|`^B-E*nt+*?Pd_cu1bd6ot#EiGs5(t3Tco?G4fgLiQFxk3g8Y2jeKoeO1+4W{pA
z?Ah4=M1FT+T9e}EKV_TkmmKUnaPtbYf#B2cuT)w-=q~#s5WKGgQD#QnV1DVwpUjXT
z+~-oO_w6_1gZe9#{)g*s_y0U@^LV0-@|rodU-R;2@2Zlx)bNn~o7AqG-{hDWKo{#p
zf>TEkcf-OA5fR3mBdr^l4Ft}@+S&#JZ=deyf417VSKCczS<Q>2y)%DJ*nDZu>&jX4
znGVdC?K<uwUAsQ(`r_}iWt`8y-7>w7*{8Sk|CcGXJIWPX&MUUuPda4|?t>n@!py9_
zL3_pAJ3JX{7#J9QB7(!0mfzH$*C;-9?}^9r`UTY%?^VdY-BZ3OT$O?0fQxBqshHCa
zv;TVzEnl|oO+ORE>}BG|{#@ClpH|<|d{5!Lq_bN6y@~r+vr8AQfBa;M)Cviw9|BH4
zOqbP&2ixiI<w-u3zf4YsAwhM|{qkg9PKGt1x9$Dcum8DYxh%uK=RP`W&#UKse9T{Y
z%(&7mqI3J9Tb;F~Z9cg<<wgAr3<r+o&SU~DmIe2$XVfsT9eBv!!26@>=Tp6w0_|@M
zJPqKnAD;eYOm{QcjPvxa&3?OwJ$VEBPaEFV3=2eq>u#G>Jb9ltd)Kbljxl>~+rHm%
zzL`0qb=kU8<%jn^@Qd1c<EctZfn+eW#4F=8-{V(ZD0KJ4d`1Qa1C`~9E$+tO7717P
zUXZR6x6XQXY91(5w#eROPH}wtr=$2XgM+-xtk#`2+sbELbgW)BC+~^8<eFvc^3KGi
z+o@k)@>lM?^L#V2boG`GdMzI;!Tlb!Wi`)w)EPFo>~6Z*X)C~xaQ8~q+2^~|YbP=;
z5Wi*fSbei$rt0}0|MV-51y{O7bk!!lamf{HzPc~??yQ4;UmBPg7|ilci-5XkWr?2{
zB^d69Gt6E*Q<A}X!A{T_tdP)%F$^+%YW}nz)a?9i7b9@hZ0!|~q;0v=otX~Q|MZ))
zR=?Ea)xvqtCE1p}x^m`o^QQ3cib!et=#<z~ymx=hefjJns~0Hucvf5XcTav^Y}Vp<
zh-HVu>e;UqdBqqQ8lGlnNA|T&>pK;BhuM*t!Ay5q%sH=jGdgy@VBRY6^LXE{3(g#I
zo^pGo=TCmU)U8+kZJWTob^*QQQ~QrkS)X+3xMAx4=?o6(_Y}pF_*obtW^XgUXDv9t
zyY2|Xhw@*BpBGO`xB01fzC!Ul$K9WEBTrmqIL>1~N&3~X=PC>g8w#VBF)%R9*uXuR
z-{E}hcJarI8zissFnqcD_WEi4@-$8c1_n0w;6~OXQ||NRT{!dDV@leq;KLqgwdX&#
zWNY|uA=W;#>Z9G&xCPbsn-_k$TIO?ex2%DsZ|vOPbqQ^6H<?O1{g8ks=KIsXWj}Py
zZ(Sk06I7S8Enm6%Qul*fXZB|7kNI=`v*96;9SW<Z#WyfAFnrj%Z<8SBvl3}1iwoW|
z3@<n>Z~Z*Ut?Tx0qx4tRp2qX1^Z43KZY<1xwd&6051FqD6PEoIIMfbq+&cUGTy(|c
z*p$8J85llaFkdwL_qV??3<<G*u2p&O(%BpKPe^~l`mxg{`Q`DP^8)jpmoJ&^{`*x=
z!@fs%SAeQ~XwnG2YSwinL8QUX+T5C9_UEskPRHKPkYo6D3Ot_Gb~07JyU?I|PTw-Q
zhV(C)|NTFodj2-sh4sLdqf<_+_F98lroPo>3-v*HW&<eCC{C|2=>N3uyI#u&Ls&8v
z3%2Xg+%M?(Ls<M~xpFxh1H*xUslT?nZ~ne0xVmFQVV2D9ji843f$~)T4{;_HjyKiq
z-rT$?$dIt;*5`e{pVjAma_YXwzDoMMWO6~On04UtjdkZdjr-qzIwb=xM#O^mb%VyU
z`oBzIW=Pw>eyJCfUvh8ld0{O$|FrtnTn2;5Hp-uW%uCn#JEMMTdQ1Av@b|~|StUQP
ze0OYb9HInyq_<3tfuZW`caa0n=FVnjs5%1<2euWtOy$|{tg4MSeEifjqbSpBleVA#
zuH09z*6BBA9>4S@L8G?J<SXd#rG4D#ucPC>uVGJqv3bQx4Fgx-*r`=Ft0()rr{=$}
z<#<@k@o@W$Prg1sx9qiGTXxPm)jZr;N{4}gq2~Iv(3AW3=0x9TyJ7Kl*WDcrybKHt
z_FK{q@w+ys+q4Pr{VGwDV3@Jz@=Epv%9RU`S{PsKH5LY^lCn0F8-^L*)9Pkc$-G$e
zXWc$-a8q3h8Z7+Dr+&pTF&v$zQIhnQgJI3&Jum*udC%G)2`WWCE?m6-nWVS<Gvi9P
zAI-I2^R9>)Rrto9<S%^!T2P#Dxz320f#JZB*e$N|3>VCOZ*xdDoYiXoXg7nIp=!m?
zs-H(&H9!lhVp3!GXaBRhnVnrL(Vtvw87wdDHtqiY8_k7Zu1;LGg25;BcEQIB%m%^h
zuNf|VndS5I+N>{;Pb=+SfBeA^w)D-_8nM{8#O;6It1OH8H|_Pdi|;~%!=>ICnd)tN
z?`E9L&@f$g=Y<A2t1?T@KNIV%b;Ylq+`m_2+Iyqw)(v%rsna>ip2)H{h-!$(yw>(y
zZ&I4NUogQhb*@D4zwP^$*gQ0BDM-*~WO&iNZC}RymNVyf-#K)}qhxWrMf3G<8XB)3
z<ZiZ<-x?%cc<USE=Q*2J6zP45{T-iCy*cJ@L0Hr|afW5j*IK?mBE`WF(LLkS#yv0Y
zyn7pJTvTnCdfuY8`0|yhyJxgL-SXB`|NMzX`@SdF$v=@ixUb4QD?+k6yV`W_9?1(4
zj0_EezfLY;Vqgdk<FZUT<-79Z2L*-;#^P!$37<jDydTf)|DB)3*kHFQ4Rl{x;_i*#
z@62?*`MB8PD}&ABJ?+U_)sy6_4f^)oDl`;j5MEaKJZFB@t(r}H^6Oq4wD`5kM9^+_
zl|aMG%vZ0JmaUnna(c`Cf8|2KdiA-VotyJ`D<s!$^3N!<-g$kCJVSz>_1pRj>aTV_
zsQ0RS8DtYzA{Tsbvp7TcbD@KI>)K5s7}%1phcF)4U|L#w?Ha44^ttkW#TMqT6Br!M
zf7uxBIsYWLuEH{%|2HO<GAkE7{*$SmrE`7F-u^9LIxS{i;XkMKcH95G{QoQYcjcb<
zjDKOu&M<l5yVcUw3JeEMO*LMn*b+Q(-s}j&vfH1+4`iE`ma3mWG3l@A`HH{J_Gy)F
z$Ik7mGXHi}l6!0G-8WmmH!?9W<Q$o{fti6J;}VO5zNQ+(3;y{h8NN(>4>~nL!i?8_
z*KO%r4KsC@)m$;_ef)k_(M`Ymk1qACe0eb7*PD!2j0_2zYS_<RyS`^#&F9Z$w~l>h
z2rkLF7P%182oVd`o9-KbWJ-VSdn2cO-z@cVW+`n31_qmzdt2U3ez7OxxSdH(OYM)m
z7$wk!raDjG9NGIqz^Q^qQO2Y+Ri2UIMemGHnX@OS*4=w9_V|p8`E_S0ojnJhr<uPp
zHCwQ9b#QgXnhSXx4{JFd8ZG-%?elZhp7!HY_*rBbj=AekIVbn~hPNbx#Pk`TW(yqJ
z`CIqdw-x^l7|y))nKx1N7Qf=06UIhmhN)Xy?@p;LwVf%+eZI*2(*y>F18%vT_6!UL
zrM|JTTUxg<To9ixbBXnZXf_+euVtWY2`;(X&Zg@7+<gcdLa{UNxpL-HWqa=A5QZ5&
z+iu?3Cs}_fxjJlN`K`9{?X@z|{WAWx3<pe1OGCfu)*Jp^<G3?H4cu7XcN8>8EN=KT
zS)A2~X;x8rvFVb7pxy4qeP2~(obL2KoACC}xzfjvK=T#zu6*k%Gn@8X;E-c<F*m~n
z?zfgb!kaJ7jQVy|hNtj?bjsTUGb-lo4qU&{(mnX^!N}czzuEqQgp1a)8mZuK`&bwr
zFW8=AeyxY$fYqE<fil;sy!70=$_yWxzF7zRS6xdDn-^%G*5<d?2b4&J&le+y#{qf0
z7RCm-k9%1zD97vXxA~F7wjlkSFKAaYPxS3O&n}vjZL(jm@l(%?qD&8=qZ!NWo-ciJ
zX5RL<lZqMCPCRYc{Ppi$&wD>B@4ar&wB}X3Q_U2y`EA+x56-ZWM!8_SOG{=memYZD
zYz_$p9X;DOF6)G@opx=yyQ6}afuUh0sJn2izVkxL-D$rze6wU=cp+?g<7f<T;RV|d
zX|EVxoS4aZ?8xUky;Z%unXgvW95<i*=i$vQm$W~_TbZK4cD<VNGb9-#RPH~#dtxCI
zgLY`urB;D^oki;Dp!As&6CD23uQA*BAY09O<7stg_zj<e$|f6S<|XpQppfa^7T5iA
zXTLZD!;KZX57`+Qel$BpGyHnAQ8$ToLA*&N>jHhb{c&|0!NpDCg_MSsRwkc~YqMUx
zTDUx!`|XXGf1md(1`Rib9Vow_Q)|Ci;r*XIZ)a?JE<IyO+28t{Z#Os0{bn?)-{0ir
zwGT7)RVTMu?UV);bPNw7ePieD{!*a#yQpwO*te^@10VA<FdW!?tM-8ZA`{E)iY?7{
z^BLI~mT4}FIk)NEtbgb7_TJX@`L|K}r@PzYm8-Qk-|Rep`mEO1%>H0LhP@l)q5atU
ze$Du!Q~Z-pu`gq1kWj2uW@wn&sX2eU?aLYQ>)-EYXpozno^pBHY3%}zhs}t9m|bmb
zwSUH@^F9m=3CY`9<QNzp^s`BsPl{pqa%5*G!;AT#x%M@Z3@<pr)1DIi;u57I!FARv
z7>!SFJaMMv;^o4>863%XmekG<W$<zJ`DxIyA^Fh!lKb-lU#wlW&g=2++jjjM+4+{s
zF(m8)Mg9L{$`1X1ZY=p74IVHS47Tgj+^sWb-$x(NkiyjjHqfZ=XG@{wJLl|N!G0|*
zdd2f^FFutsFfcqTStC~;<mLOev6h)(L4MLHRr|m9j_A0^{(ki2*Y1nSJsS(-Pye}+
zofELTfAO^beK+|P=d>W2$;%C&G8?lp?0sUr3tZTG9hq`^@7nh++c#fs>=kFITKM+%
z`|2tCCZ?xo*i62ABRoCl-I)yasvFD<4APrbL8}4(m#T>{d}(;E-0<&{B(H<~oY|}l
z3=9&y;tR{Zmt`<NJAaGK()!S+CC8Vo)2p&rXAc@I3AFo`;ZggfNQGh9qYFOgul)YL
zYg*Nc=SOF3D%CJZb^pfjVq=kG1&?A42WZ6F{>T)4aD)D=?M)N$8|UBGX)v=gFf>$d
zoi6uJCqe(#wDm1lH>cm5>CM8(z%au*IDD@g;~Lmn0RFc#xk{%!{=RbM>ceH{7#XS-
zpJhI|Q}12Y3g-8XcUQ76;LhfBdvR{bx%F?iA8Xt4_m0%Z<;TA{bEqq}oSyONz2Vc<
zGd`_6&&Tkh*L>L`;nEun2ZD}HxqoEJ=~|BWF55Q8-`aeR;Q-UDU0SA**OT1)PZ}Sx
z00ooH<+~?bnUF$BQG_Aq##&|thP`EZRSY*a++IIDUL*_DQmWXY)2(S`^xBwrWu5QZ
zyPs{IGxWq|imeO$vAHcM{mI^UsqMA$3I|qg5#R7zCPic0>Fg}<&>}pobZPE4?Ox;U
zQ|Z6Ky0DLr0kopv)hm;hg8Z`hFXvRNHx%g|d3DUP4wPK3eVY)LZkhK#@71ZwK!ye7
zw|0G9{Y{6p`{MUZ#<xF<o|Wr{^-S1f<sAI2Ozx}{^G39sG&h>Hq4%cfub*3MyBHXz
zEqW_mzV!V^r&Dz=UNRi#WvEp?e`12oRM03*3iCJC+PZI7B^7Ir?fz)X%fOIxX4(a2
z28KWGw*$5a@-djb@cF>_>-FoW(}UjpJSoDs!4W*?WuP~Ur{sCSw}!3ab9a8I+@|>U
zf9#h8p4x4~!FDsM1Q;Z2-<NK_YgTI7aoYCwv+{ERHjuve)@AEXu`2H8Fk#*jyG_NJ
zL*AKV|FJ3WlTM`@roP{}=9aYJyA*+JQ2ifqVd8<aPiq*GTNHz<@Am!zg^N|@Yn}hP
zS&KhQIQ<9@4*&I!kzucJu-?!4tH0f0>E4-l{`#f4f0E7T86P`Qe7E=fS>EjZpXX|)
zu7D(ze8Z>hGd{Wc{M1<X=UNXFgKcrH6GKC)=5P7j_*Jovu_tE6XfW)F3l1-@YBNYs
zJ^$ljyUpXu+38pG#eW^%XO+AJv|#jrL(WVMPz$~=k&j_^&@B1*4m*eUk;V)gG$8?F
z<Qr=_;qKft&BJ9cCheX1uKml*3s<hX?oL0MBQ=fDpzL^B#j=H0#ZNlh=P%!DB9pLb
z)-J94zqik0V9Qf)`C!-b!E)K3-~8f?w~Nzm?y)X=Y^2J-z~Hue<?7X++9m4(PadE9
zt)|By<=esCf%o|t7#z}lW9POC*md5?xYI7cH*43WYB7cvbHA;5JoTRL`e!k^ua*9v
zkcgdm)$dB~7l-K6-#=e@eBi-UQwPYfzf|zPPEGmO?Mw`-1%vGbZux<h48-X!`(w7O
z=IXop6YYA-uI!u3Tlj$Cg8SROKKp0Lu&vt@y+8Z@=K9}?=YL!~vdO3D`rMo0={@hx
zWT}6e2<mg?aN0639QeP*)#<wv(*d>^lhUOVI2JtL7gx7)QyN2pv)(>f?euZu^D|Rq
zX1<--R?#@m`~SRhiQqC%QHI4=%=GS<?l$IqYkRW#?&&qD3{Dn2iZ)%$%0i|u(p=wg
zmcd#oOnq<Go_l)apUj#b+tYb-p0YDAESOx>X0WX0*0o5Zn(c}$dqJZystgy*4WI7a
z_OI&plRdMnz8#h2DSaSaWPWn~tc{by-@EyS_=A=rd|0<!j@@nPm%l#+oPIz$pIfup
z7#e&h#IrJpeRJlGt6Y9V{A9Rg-m6n~b__a!!Qsbqdo6p8ez$qNKG*)4@!z-zp}oGl
zHm*PS!lZO*nivB^g2FZ*5zxAhIozBK(gkWS7@8j%OE>s__zPOK^!Q0YnYmuP#ENYT
zd!J3(%)2q|?IKVQGgo{zvq92vwen@J7n<JBlAd91E8#U?*4LJS;qCX?rFzL<lbheI
zp7AMgr^)f0%?hA%L>NBA=jy!+ae21rz4V&4Td(<M?b;=ECV>&uN+?P*TNd+eOC7i3
zoGs5eCAY=T+I1`YdnqGB)zUe|9Evrc@9h-%?i+iz=fU#?i7#TwB{gkj-^vmm%kD1n
z`&IYKF<}a53hMMMMewj*?r%FLhVJ0zyP)3qg3XtnuYHre<-JhWhq(1$oXhfA7}mI*
zG`8!~Ro-$N+yR|E<I_eP<@FD4zC3nQ^_W-gwLedk85tUSZwgg0Ff{D96c%E*_9jYM
zy}{A4d<8>;>F&Q(KaYZ2xyL+(@8{j)$=vYg<ivtACDun~HEz4Pbk5DsHs2X~roP{C
z^W1N%4dNLo|Mt9{@hNdWJI4k--`Lnzfq%L;dhXP5JWK|6%3I4B#1`z#VSif=s-AnI
zg2R{2zqvKC?&7|`ps6&5UwWX_9&?WOkCanI`XRT4b0+@{4-P*b%+JDb!QSwx`P<*m
z-7jx8Id^&Ax!a2Tb<AJHlGl8hlQd!0t||^inW{F)opS{adEPwSr+NR#l>XDZ4lQAJ
zNZ)6_dm}p&!<n^f4_fEmS3G5RY}<>yw-(1;WY}Qk8+&(arJKa&y8?&W<v;bff9fe&
zvTeicgLgwYiYFP*nr~}}XwjU%<;F6<g|)%dN<63GA!zK=Q8}35+8dt(jG(pcGAGis
zOx)+>o-k!DN;`jBpEvxsjRV6Atz|VUA}?)j`&9?3n68;H{I@JGe|AS!Sjd@Ue)1`P
z!>7i-Z9tRtdk$@UaQ5jP)yfSe)lOF1UpMv$GcYvpYWxl}e0uqt(691m2_|{Y9PGZa
zFM0VGzWDk4Jn;LuSH<^g+4O9yj8|UyhR0qVJ993#Ug7bao@MLuu6#CB+zp;Oxu10E
zdG2`yhKA4zfl!7As;T)(%VMhT|C4gExOlr_rQg$~3<+Cj?b^kq_{V$3%#KOve||X6
z`*`5U;Y&Be)7RMCmVL36je#NO)U*?zqvBusL@-25uI`<{$oBHe7RC)~@JY1;6_yju
zzSufF>CKFnGxe&h)>YovU2`+=K0614?9aT}YcpSEO~~F;c4vN-!4$jhSuKoz+=IiP
z);@@`m@%Pf;<?{N8~wm*g`VtfNZ%tmXXj5nP{10^+O>;Q@lVdN_$_PunRVu#e#FSY
z@IcgSZG_LxH<6%OrZrpLpH3Gz<hZ+@o8f}=TkDLMPYYLupT2ar`hRk-9INz#`M0Vc
z{mZSIF#|LRZ}@cgrsuN3Wny9s^U4+MK5u@`#$dDbY_;69JLx_<zwG%N^Dq5i)UMad
z)}3?vX3XfIzqRsM{24ys;7>i%bLV}Guuq$}QQhM6=Jn?~D!1+ac#{*}cm5MQ`$XwM
zJ%-l>dZ!o;fByQ(d*_k`hNTQ^8k<4aBpT%LrIdpvFFwV$I~fLN%2i&!ym9Y}m8(}5
zaVDH^-<j!t`QJxIiOJhOE@*qSIrd9wLb24ZAJ-4=mOb!)%HMg>9}}9&z}56p%kMM2
z8!8X=EdZq(<2ft0&N}^j#;1b}$2fcXcY$i>e=5sjUL8OE^ZaCiL)%{T982bS_}{d&
z^v;#5hp#j<GJJ8jJS-h-mwVsw{>)iZ3;Mo&{nqx6dCkN>%E@J^WzVmFd$}Ne)-J8D
zHS^DK3vapnuJXTB@V<ccpix{M@7eEda;i5^wK<uu*m6GiUGU$#SvIdGb2GdS&ARYZ
za^{Lj>3;(5eNI00{8NvOV=ZVo5v-z~d9IbM!PG)HrQzTwNxlPCKlXu^^d)S##a$J%
z&-}JT)|D8hAA4la&Sa1f>|LK;o%1T|!uv8%@0<7B%(L$q99FMf-7er1`TkxPr*Np=
zoyzw@2^CYVA2KsABzWDb4gI<7r$soocf$K!o7+K+afSv_&Foh*idN?Sym76|Q0}^7
z%l5ZFIT;$_G-@N0PA$)^{n}Z6Vd|vrI@|N=4&~KJ*Ze_aiTnJ6`<W+;Ide=;wYOQe
zW}hfS#Fecl7!PbYGUfg@)3W2L=Ou&pb!kp7j@;iWV7Gnm%`#iD?7}NorrO0ZY)Jdm
z^WnH{iR$?Z<?|fe7cb8@+-<ZQK0NjFWC{}lgU#BNt3PiOywWGYxIt<DE$=rB5(_{b
zB+z2y-K7me4WhrkeErl7o>A$!-TO2337_wW&BqEReyY4(GUaBU$peN2l|J7mKFJm9
zx!<1uxQ_kti`92$e2NPWzxIjYzh(9J06opj?-q0SC!ac{dcbg5%&Sx9PwfoxKWsAf
z^z3DF&3!TJSQr=%JOS+tsm{A)tD2@=x%2X}b$&-VB9zmAfo_snxAwp0*ZAMT{YN=$
z+XPO{dwlZ>GbrKw{#SWr-rc)qrrPDVuS}IHyXHAx^4OW@nu{-9xf<wW`C{|IBU9}d
z<&#gP{{OPZR(tI<u7;J9joBI=T4Yr}+*nhs*kW$~XYIX-zn)HCw(i&^Zb=5V<!6nj
zeP0^8`FP9QZI#C^o1L%FJ8zL$9n9~*UgzKN{+n9~=(0Nl1^byg3=9qFQ<XaSomdWZ
z?dai6_;G61!^M>>39f5EdvFt;cqR9JE8>w@oos9!Y~1$D#y9rvkty$Qd;3+~O7!{J
zo94s76L~x5^7p?v$(b^x4?i6fmyLYR@W+4m{>mG1xAy6p_}u9~yVHO6F01)f4r(vn
zUI8@?7|twxGK=rc%6%^^mc{5D*!}vaMdQaEhSM1s7%qpL`?vM)y?fOxZZCJuVcu|^
zgW-#7HQ(|%!98lJYtN~D*}Trh=jKe#2iDm+ZcA6LUc60wNu0D#?8<E0%-80pe}A62
zuae<_%pQG)4Vm9cW-NNWY~7cmtPN+aGkzPspT(`V?oRxtg>z0%OrK*?JEcJ(pM`<J
zfG7GHCj-NS$fruL+!dJ;Sf$QRWNdr?`swsdX*<lPGORi96*gPRz!O%zb7q<kxGdq8
zxO{#S*HXdr4}a9@FsQkGetq-Z>|Ihve+T?7wy^&Q9*0N}p0#UNrgZWBSqwj%Gtd1s
z1hq20y<^yXw}Y2~fg$+Hw^^2^KlN|r{oc>mU9DZlz`*cf&$eT$-`w0QzUrc8y7Irf
zSFSe7JzzMn?C2E!<WtWLpSBAedj83N=9H~fSHx2_pU5+c6)WWZy?!P1rurX~uNDrg
zujJ30viCD+1;NkW0}Kr3FPJkiB<#(*Th74n7qmK{?#u`EPdx_nwF{Hh-1@BrTBW~p
zzK;L{!-1To8XC)Lu8BD^959;OsdgY^inoXTEI)>6XH>6)#>-`|E4I{rww*uY)4b+4
z&4o6gLEeokSAV|Ow{Caw^oIQ}HuMTJ@Jwa9vAOqc(vwf0_q;x6@hfY0jK{qzQ@J-X
z)&+cfopg#lxA|)9#zy-$Q=~p$nz8%M)T;W1{gnbj3=9m*R;^sUdB&%Sf3JwYJ$?4z
z>OG=%3=9kvQ9eI&tM8rv`K~a_iNpPAU*}48CWae5m!#EO3NHK;_dR?pw!%Dxc^%7K
z!QI9?djf;Q-3^~ExX<?IdRcY-`@-t!?`M9`Vpz7|tm@$fN2aX5V*i2bf5xj*b!rC;
zY^MFY@GXO3f&H!bPxsFFw9`iU&-MAAdVFK&a-H3Abjp1nTQ&ynNz+*v7|fEqZ!j`2
z#FePIFzDRe>RiLHxagwXH|B=ao&R8Mx(AuFqIiyj7k_o%>&s#EjlJ6<@Q&U5!`H4^
zcbN@B44*FEwot*}T0Szy?d!T-O4qCy{4=DB<y!>uj<WwtQE&OMGe$!^*iK+p;O*H}
zpsJ|B@5!8J#qW$v5@f$HgH|T?&G?kb@$kC9p?#V1bBoS>mG_O6-B!Amfk8X`9Osnc
z9fnUgf4g(wy<$tgVhjJ%|2b?`4@+J#GDIv}w(cFvl#N-hR$cj8Yjp5~`qJkYJUJdN
zd+W%;ki0x!hk>Cs<eiWG26ujjzbfZB{C_E*mk8cBIbFu~?~F!y+pc4Go~VKvwl{>z
z7#JF!Z|&6)WoF#qBlVE6=fw5X`l)9N()<`B78M@^9ch|yBI#6n?q<n(Wrl}#+_+wI
zGZEBcG5*0f`|ZA!t7q@y%M<jComzhN_ru<rwMjld&$iUXHSFB_`~%;dqs{7X!E>nM
zhN)-WkDs(oGS`a+O_X1{W%F1+xc{)swy!V2m7HYKDR#rBoAk?-7A*c!%#pZ$<?7X-
zgb}fB#;3U7dX*xe(a8DWnOJ_qr}s}=HVPa%E^z4gw>u1fi|$^Tdh6@c0x`A*&x}{E
zG+I9BZ|1Gv9DL0V)Ru7*l4Dq)YR}EEp{jrB{>L|d$ul3gv8D3Zd|#bEXTRG#o@%4~
z=isfrjh}m%85q9Y@mJ$uU`Wt=I%!V16YBw?nCxjh243lkEswuV@@1&#{k?vA{5e+v
z1_lPTr{`4DdoE1$ocnU$%GKTT`rewJi{<;b=&{*)4u)pIU_J3`ZpLPpBZ_y6ziqv9
zrtHaGz6Y7Uv9?prpPccj`Mq#OQ04wU!>5<_{9E&PZsW<!SFg^k0gc|s*Pi9O&3$*q
z+ghKWcUaF|xGAj&TGVcT&UH`b_eWPu`htVc<*jmOYB={T=~Qsvt%Jh<Z{OqpId%J|
z9g7RCzB1@synXSH%Im~lrkd^QLWeJ3xmsE6_v?<V%Lnt+wI!0l+sr|oiw#x%s{7y8
z=rZs)2Zt{=e7bvE`Cc34KR5T;DF1QPFJfR|NLXAa1iHU|`qV>hGd?XBIAr~h>A}=<
ztO5x&u*stJGBOs1dl~jjdUg|3px8>~8ECz2y?AlWInapZUa#ona%ra<vLE_4W?36P
zwLR;?C^17>_}iL|*IK5{e_hLe>|(lm?&3&>w2W7;ESA+QHZ(sI^6FfF(y66}-!;DT
zfD%SUTyQvlYQ09whsYIiAw@H)ZRM4}^xmKO)0Qt4)VwPZ4z|nqKCP@JujEwawV?WP
z)2|K;2b%0SWP}Ue*G}}+tgT>~KXLc=`$pT%nI+Zh1JBiN``s-*ue>7YrKx1{Df{Vl
zOiR_mW`MHiv{iE|tqYbjGVpi@hd<A?f2RF+#zRll^A!TYdX~q66+x$EH+;P%l+VD>
zuv0UK;lWlf<vqoLED~#t#qTqI@cIs0J;z{B;-2;)GWj0!mi<3BJqB$8{C8;g-JI>o
zdlziWZKwmy;or>jsmy=n$WY-~UH9m~cdj!bddL3BfErHwMb$vlZ=h+kMSl`s#fN+<
z&RX9PS{P`<z;J-$=oIhz3#YgFb$`?_UHL!jRo42ItF=FKF&r?yW6ZX}YVn)R4E0yP
z-MbO|nEkw!=GSn;r_6~=2`XRyF)%FPKXvy7`&&6x1_Oh)<rO#6cbS!cSn_sKdXMJ)
zlg3O2iJvBcW_5Bntr-{&)XdtY)oW_UDbBEdfuP)hj@rF{J_$Hk7$0ZY(*$mL{kO0F
zUKZj$Ntef>eMb3}K(+=Q2Fn1a&sO}d(F!S!%G^?s7fvuWvbNVenCfk5kZ_QZS<5Nn
z!~co4D<x&O-q@YBS-<q>J`Pv^70Szs*Wa1G=FHS=#-4){BWtcbKEdr32O6U*w*XCP
z%k0#6(5G2_Ez<w^R-J2QpDVvHW;ik@WIWByW6)_YxFIqXG(s#^I!9W}__k-L`L_g6
zY|dD@YWCk%c|q?U<tv$bwQtlpRyUuSp<#OUmOK`QX^PX1UXKu4nRi2-u{C|^FPH0~
zcVj|IKYPt!kgzBh+a+1to66AO>-oKx-|gOcCI&bC`Nnb<=`Az&%{889nJ%-Xc_sUT
z#qEy0V!L(=ZoURC&7pOQ)x{L423O4%b_3q!QWKaqEI7XUwfA{YJD-6kDoak*>4tIl
zd8@ZCcT7{7=Bl-*$i8X%Ca>F}cV&9NKV>v9s@t3<{rl&-&#!;hxG_ZiTF3ao-LN@5
zw_Tua{i|ns?>8IS%!=JsZaoDwCwai?$)44L&!_30+-3pFEC$}8=EoIV>UTc3%1RHt
zyJuDv=ty1fdP9bUl}V9Hz8>9u#osCAVPq)B!-cD6J1a6ZWO|sk`j|2t2wEz~|9hj(
zyB1M~V-I&1A5#zJI$!mE&cu}`N<j-(7|hbVUobK-+&bO9=eZNx0j53{-h@Bv*6Huh
zTElsuN#r~m14F~hU54L#PHa3m=jEc~$<fm`7w+kq8Wh6WaBuaiXH)O5nfd63^yVi`
zFJ>8^+qO1A&B1)5PEg<5*>@V4f9%{VaA^OkT@!;rlVk>pJ2x)ed-<nUI%s1D!yk>i
zjVoTM-M#<Exxg*o|7<t|!?PXzsSCfI{Ipl<Hh0v*<rnuEHFS2TPRw$9xBS25*N6i=
zw-sCddsctjStkfe2yd6v9&e5i<A21;@OaXB$#Q3o?aRdGeSJIU;~7h3kb*Vmrrls-
zU?^F((}W@R?z1O>49gydFnTdqRqffeFT_R~lp75#OuEnSn(vW#vRkfa;rmsq^2(OW
zu`pD<HxOrj@_gB*XB)T8e!t>9Gs}zF5n|;l8QnP^Za&#K6BKF3>_Dxd150FPzYFs-
z-2!SdKbXBLFUT)x*X~HpQz?7azdBZ@#lUcWV^~b@U&DPXM0ZL*UCs2sf1}R6W1Boo
zBkf*zvluV6{oTH&9kgufK+gP2`;u?fi>Nb5EU!5?<D9RZReH<Jd&~c5KkotgXM<Gq
zBQ6Gp3%)wt?7lY`U%YTRz_9G`t6!g1E3IHCc~TB?LBqk-ubyeNY{*rcUwZ9wp>F88
z^}A&+dPhw?T)0n%!R^V3lyfB)A8*vX{IVkM)TxlryL+TwW-~|3jG1Bm)MqcZqD_~H
z&FfsfGr9VpUT*?ZQskW#xz|qhMS<FQ3@!Edvwe4VTz|LC?~;7cYX*iNowsYg@g2yj
z6}^A$iju_22(gvR?(D0|HVD48d;hvuZs$Pb=m*Z*g7$@_CjMt(P*a+AbY-#IjO^pk
zI65|M2NMH>&Jz{&e@q8#xE?b4T)6r*Rm<aB#yiH0hu>cP`s4(v4;UmE&$gsnzyADS
zT8`KH(!k?~Wy~0Y1FoLU<9N9CWZkt&oo-K)w>_yJ1)O%gKN#@qT?VK<6|ygTB3E&}
zm`g=i7Q-L=(7SWEKuPC-%8J};=ki1EzTr<?a6rLkh8hDyL*mL;&q71ZSC-wDUzT_2
z+#6vgh7Zi&Z5gjU_L~!ZTl$1Wq{FI{f~OxTw0v;9Cx7Nkb*Q;{W_~=lhWV#__4nQW
z)P?=J3_fSdpZCbmH9q9?a?Zy?5KroypB4d1h~lRoWpg+NXENNf5L9hA`AM3=LAp*K
z6txn2R^^plwm<V^bJ97>*<7rq&u?F>k#3N)HnTML&0Sl3t=aI)++{Zz^e24t0p<AP
zv+t~7{;~7E2?J<5rNsU@>CgVGlue&$aC_a4E#C|#6f!X|e0cwR&C9rZz1C}61h!qa
zTe!!Hfnn46jXHCFGcaU}pMIqC{FTea_Vm5Jl~GymLB-6Um%%#Swa;fW802o$@pI<*
zeNHlQSxNbeb5LI#pJoAyDjn6|Hk|Sd#&eEu+99aWkhyEuKA+YTdA{}x#&_ak<Euck
zz6=RGeP<r|h}+8DzI1fck5wIE+Q*qClo>9UWZawoRpfM1Q1<SXYg5IyEVocQaQf(`
z9o}cHoH*p~-fT|a8#)7&GZX%Nnz_V^_4CqVE6a!vdt^6)#>8?~?Xu)hT(T>-T5Y<{
zUh#7*%nS*i<eWLwLEG^*Sgw2*rPCd<{%LI7Y=-)+vQ9t3L(N}>fvWf5QhBEe;nRn1
zsxf?69wEkmPBL*_i1p)R5TEV2Gfe{IGc{2W4#kWK%m;Mzx)~m9XK09w=>Y{yg3g;#
z+xMC+1sAU$Tzf$zzBs)7u#_G+`6cRoIey+ZuXi%nl4nY<&ODpRk>HsWIj2pa%$ehP
z5|{ngwFcYwg62;e3XA_;Ip-N_zP`;M02JkM%T~?al3ph3bVJOmE+DkDSW5$R;rX23
z9gGY)Av)c&Bg9_L`*J*{p6|zM{ck0V3=9pNzeG+a*-tw<_ar+*-Iu$TkJX>|d<ee%
zbI!+z3XqWrh0#gu3=A7~M2Mv;wzw;@JW#*1bRv5r<BV;qU!R`+<%Pjl3x*HD&%>`z
zp9dN^U;rgMJ|_<Av`>-Z!nsSzFE$%~xm%WZhL54PD8npmR#x-Y&7fj&&1;5f8gG{#
z+2nD5ZN3x7_9X85iCo41`yoF2c*-=}Zswz%+vcW&!n!9u)Le7=|L&D(ZTFvCVPx<L
z>q%XBjFaJl_C}pc^Pc6sa!*Wqu>8`zb$|Rp%~7r(-J{nx>iC^8V=(ZKGk#;8-je?J
z;T%vtWf0r03hHd@FMFZNU|+?hIH!w?;pRpMh7Zl^`$0t}Lr=$_l{eLHdgxC(di_hk
z9M97Cpt*8}UyE1G4p(gXzU)b4|3;m6RaV<VFUwTzd%G%c&0B_PI)A?%+hoC^xW{|{
z(MR0%AD6C@_RR-{pPQDs{uXnq_|U6o9q+S)3cv$Nt9Ds(EB;Zd*-{X7_3S<eMh2f#
zlXsajIK(ft%Gs!MDeCFgs+<qO?^o~IdD65WWXLhKyZrx5uLkv`eoQE1Y}j_`mg0Ql
zeVmGSxMcpgTBX|*p99r~40m%oB^ekFoIbK?$HXhl2l)GfCrUapD(u{~&u2QPJvSS}
zeapSO_I)`6GV;KKr%C$lX`dqfH|pqBS#2ww@hLlh^{Q8C<r2=U2~2BVr_FwIOHDj@
zKd9vMQ_gJ=_5A)lDRRm4=lnY#vVVx*zx>c0(C9IPLDabgw=V7h9TAa`a;eTg)Vy4=
z<@>W~)3!Ntn1AD9WKetR5ih~8;C;~9K2TA9+WN2GL;ZWVu7et4ZqGDZK4@O`n^V!x
z#qgjtDe}(IO%?^`IPAaPgJh$U?W&->@4axM0K@$|$2VCB^D@*GOwyNPI`H`F*QY0+
zECzcfLgv}BgMaQ^>GqGaP|ki@z>v(6Ak}yFvrq7O-nqYC=PwT85l+~8DYo~@2j!Lz
zicb?c&Ho(#y((`FXmo?YO=H?oUyg@&?ws5D_>A<wM{ynu3=9&h=1iaa?btUTCE48P
z-}x9A9*ZYO`s`iD&0wIQDQ__Cs3XV2SdNF+?i{RNvbjMTba)IyL!<X!3A<K-vgF7Y
zq1+5QpFhq#23rfzTkKXbt=J9Z+!rt2GqEu+d??zeBe!aoXXoMl-0BCOWX@na5FZm8
zU-$R;?)qi-JM<SZ8&pE`)MVw&mX|a8k8dm5sIxDubg~rJKKY;CwJRU5+#k+xW6!F*
zZ^erCb?@w^9ld)bxme8U$71%!FLo<uTQ^+oPMugc{oJZup7(dJ<UG;0!MP&-s_(Cw
z8=FDlFEM{ge2Ik94YTdWf9HL=I_K@7`Wn%$YkX`*exNG@R=j!^%JJ}+EPGtS`c<<x
zD?Ym%T3URmIdP5mti|n_dqNlzSmmznVN6h%=Obd@l{)d8J^!j*mM4BTPE|NKKb^_^
zW%0yU;#{CJJPj25ck;bmS<B0iFtyGi-KX+-KC8?eV^H395U&^4WngGnYI*i3lZg=1
zjCC_6TQfe;U$;*G{J)Ry<{zJ>%iweC?bWYOkAn7zGcX*m2r1pX`oTpXa6YuzSL#{4
z=>77KLE_tjub$oaotr^=nc#<<^jf()R!a``h2C{JEBf5(RJk`pM014LOY>hog?T^v
zzlYvka=z^=XanDYjwhRUg)D#2T{%~K?p4_@HQ<(!jq=^i+=_Qrd_FI<q-NLbIoVbm
zKkt2eFFfnd$@^Cs8RDK8%w5W@c;MKH^O^p>n)9aqzH|3U?Ly(Lw;r6Yi+gEYn6MXA
zn(!P5-gmhwOP`q`VtLKEiV5%IWvtU#AZ@P;*QR+eGBD`4`vqBu`8AxZ`ee=Ez+I=!
zu<R|Ur2#6)LgrMTDZBXm;975;?(R9k2XpNF8FFTAK67);+kd_?&u*XQ)nJTR95Tmx
znrqgoziKT7df$BR{9cuJZkZftIHqA^XX?anHF>^oV)9q-n%E7Bas!9ZyKmYB@|-ws
zKkHZh8FcmR!G<QwmAg4M>c~|Y@GvCIusgPChjDrK_tK>G-&OAzvn`ms#b4;O($(6Z
zsx2QhTRvzs`P_)J(q8fE*;I2-Rdyjb^Zz?%E8(uxLZQ=#ETtGW2x_)#%{Sh6?s-p@
zvtjBvNsy`qt-6j(3=9!+y)6uCZ$lDe8J>X(CSUP$tXv6`>|)`yybs^mXFkhq<!<ka
z^?ChN@5pn`hTfI0)c*42&TdS<dy4-r|La|4eeDJw4TitgS(Iln{RtFKP<vAwYMy?N
z0R$Eor+7tMUfcpMk|I{^y2-D2XUFXWTrnY~o2@4tc=tVl=e5#tafXO1l{(yCW6U1s
zb?H|*S~ts>GDw4(Q###~Bg8W8UpLpS0D07S0yh_EbD|HA;vVnc<r{U*U8<YM$;9wW
z;cLK&=RNB`Sw7y|nYifNr@Ja3+aE|qGl90hmq>9k`kb%zx?}R5VM~dOQ-zRDgQsV&
zg~$a^^D3f`z3|SSRe5}-PiAR86|7kQ@49O|+oj~&p?6Q%vLpomVLMxP?fJpA!FmVe
zmVfRNFSEE%$lT+W$5b<GHp6~y#W}NM)n4rVt5%hB{|N&FgG0Hc`rFAD&Tf4>M;w%H
zELQFE+^J$-8P7gVckg<=Rl6!p8&16YmcaA+5uX{uhK}Dc_vIN9z9dD?Il2i{Yw;=8
zTzlNXc`JB7Xt?UdME{LCe94h_W{5B>IRD8qdDr5P$1IhFw}xNson`#xn!`JAyen@@
zEn;L~nC7jl*x(t&!{2ZX)XV$zmSM)6$AA8UQvU(&r*~w`-d~V8v*gCv@}$TZjhd@n
z=S3N^r*|(1RkEMlmid2r#hLBFS9`b0I`}V1Q`)H0=fttU1+?ku-C17YPfJ(LRu<l8
zHcNc#c3W^a)`5R+n}D3}nV8T}b9P&KP@n9;lc(0a=AS$xHtub_^ZV}mgA&(V_cAan
zSRJzYiNUniU*{MOELpOvd!tTYa^#Y|SK=?nSF#%@=C9rrcv+C4>danVh6E>2-)rHj
z*_T)4Et~S3m4PQjr+fGNbCUKJ=_yI~tkYw(zdP^x2s(p=A?M1p56lb<Yg*i#7%qRb
zoYt!LjiIEdw07pC+4-)#2||yqetp`y5){P=Iz^XXepf3|t8S`SRr?$odiTw@+6fFj
z=O${-)y$glNBmmpTN%E@2@JuL>MkdPV#32UA%6L8g?IlA1>;SwfHI9le@)%XIooA<
zUpH)fk_TE^?67b3tSqbiZu{&B@ABt;vAGa@>TC6jgAxo4iIyFyiM)&qK2bW|-4S9d
zrybQ-Z0T2Q`MvUZi)V#>!`@hiW3KT@3=H!&3p@SLZTYZ%Ri50cU6!Huc^M>{V)}1d
zDhE$KC)t1YSJa8OEc=$X`Bz^{K@9SI%2Z)7kn~q%VKrcgn3B%c@X`A`kKSfbk~c7G
zPb*m#-TSrf)tdI?SIYDC8LpkJe3o;~!2U$JYSMbPtNts0JYBt#opHhXOZR+rx*tb~
zt&DiKTi{UTxvxzdcddNoRtP#EpkZQ1YT@HE>!!|Km3M_T>C}@=+qN5nqrJ!V+*ZHe
zG1Y2QO@HlOH9PL!!!wq3w{0a(?Ygm>iDB0dfzyxtjz|c7ub9!WT}{$V{p#P2)IzD#
zN%k!ttiWYfhL^;~E!$Tg2jz|n>M!kX<tw(-hn5yk|E70k0V~6=ckRW;%oSVCpOci_
zY5%LLoh9MOlk?lYmx5RO9ZNl3!^FU_#w}0fOJoJ3+glCQ<XK4!Vuhu(KPPmzG8)9G
z|NJcn3W;M+ZseRRx%PNtuFtvU!FRIkKtZu=)$G49A+zUKccm68n%SqGz1??cIs@~B
zZ#qelOLi-++<0QWV$0_(d<Nw`XUaGpIx)-sI`SLTR*ideA}&pPe|YKQLZRTNeV~gQ
zYp1=Fem7Im?19ex<u7Nie4Bi0Hxt9HUjnBO%?)ewSjY6?Y_G=#uZ=o#Ns)7oZ1UJ|
zn_qN4Wa~YN#h2&3dkd;<m&BaV*HmA%YIbmW6k~&8M{1$?=|?v#m4z={w+5GA8w8^d
z@i8!L2vV2gWb6s+Ni9sQVyx&~{rdEmGX?q`42w&uOKU5$vOvjmnwQ}m-qWtpCiCX`
z>K*)iByFGU(TNNZi<1w|J9+D=q-Fgz+s>ag#~9eu{vJEJ$)YRuqgKm@Y>tO_^5v8#
zeJg!xa!LK0BWMW%Yf@y**{^43y!Qduy`Z+X@%NCM3*MH*FIhD^+;(<Lvs_PNZc^kO
zpC?P181#$fP9Lhwua7v)=y3k%rXAg>g)*m;%v(OFwS0(t>*ls(ef4ezgVI-S3=Dt5
zZ|w&q_Whdvn^w(^-N?w$_MpAk?duH5*<1YVi_dxV`@H%GD)cVcM?Yg>U`Qw}QeLR6
z$R;sY{r-Cfor(8F8a{pmx0p*7&d9Ikcb0t7ar65u-Dh(Q>-;_+1Xn~1ZVxY*fX6_-
zHvTxXeYuA1fr6u(c66i`ikyBlmFaHJiQlX8-h5nl?rcQ71n7Kse{f%T`?B<P+rJ%c
zs9d#c;$?mYh7D|?cbC|%{hoBT?d_Kjen+N!Q+x85i6M8+@@iWp)(iIU&L1{70`;s?
zZQA`70lRhqIbV6^?Te==GGs4UR$#uq%_M@M!PKjA(*M~-YO8l`Ok-kTd)!`i=A5Kt
z_g;ZRD{sa~+Ny%0jxFVM3L^u<nlP^ep8o~X8Uj5#r|Ky%Zx9K;KD}JA#eWf}ftGss
z_33)ypmd$9>2rKShJyL*W0J;8mRWX%Z!NNDFk~_)2)(<c^zOFGnrq4X*bjU@vV87i
zMINDsn{^r&{(|CJj-7d$)U!9U9jXre1o>R2{qu@4lSypPKFTsOFl<QrDR(&kk&pkL
zwXdFSai46sbkDxsay^U;FSdU!=|3)GSir6}LGZTeP6M5l-=e|A#>>yY)xNv$GVkRH
z3BB5TCz2sd?fO|(hK5v6%gOxTj2Rjff1R{^oc_Fr=f>|<d0&{L8zaQ{7gq-!@ZKZ3
z_gWsfU7L`y%}0ZQ;Xu@qN1pypyarr`(~h>TWJ#F0Zk@ir%5&zPV{fm1O`Sh$9?0hh
zf}S|(-d^-`jrvcPwH+60ZgVL!ZeXj+PTQO|Q+a*u-H9{Kr}HMHT*^<-=~nJ-kle84
zcy$`n%f{NtAl>@YXK_8N^-A;po%HUXk*QQ7XhXMj=-nkT6ZO+t=KWl|YW8AZ{*|j{
zPno>y^7aR7F5JzCmt@$$^Zez#K96sguCHWgNN}9j{Br7)Vu{m_RHnJ!+FUE^^kc@q
zTRMgY>Xq@L3^!~_l^GbGd4G@ozv9(1z2`wp3_N~z={El!&iQ!F$H*Z4oaD<!X0T&&
zE=_v@s=DHIx<gjD3#v9eto~HXcYy0>FQbGVWYl@}(wnE#ZvLM2cG3Cf*Aq9dWM7~<
z-<%;#P5l09mkPD)X=Q5~pWj~j>e+_(%`6Fq_L(ey6wR6Hgo3K_)~}i^Jb6n=y!$uM
z^ku_C3tmN=S?hP+3ol(9DDgq&KBzgM9dz~VYJo$&KQ0BwuiAC<{)Y=@fA7a{Z_nHt
z!?2+FbA(t{?w62V?xtTQO1@+TEN;zP_D$w@(7QPoqag(vXoS<Sj#Kf^tZONs1SK1C
zw>B~?Fn`m?z_4YzxYLj6zw#LlT&OKSSMgxZ#KuB!pZLI&T+sSL28P!{rynV`e26^2
z$o5uaTI(Z6hBZe(gMuG^dX_M<y?yfPSI}e7#QXwn-uPR^ak~|Fa+aE&6u*D(XaL(T
z&z&#l9t!y!`m>mwVf6yX4>|o(U$>?4-Z}SBfQ|FO=_gEg(^m=>=yZSa`LB0hb&q&d
z)vNET^5*#KOnlyPu8iF*4m8!iHirB84W6xwB4rsE7!Leey61Cl;qv2oW;OFaCnV+b
z?JQ$BaK5H5_2EC`<VWZDl9#Co^#q)9_NfiKJWFSq>#pD5)mlCn{?-2M>%VvHE4Oz#
z467G~@h~u~p7Lscu2niOLxN`79OHXk2DVS<6q?pNyZu?`M8?YU`!^3CIL6Ju&~s!O
z=r*s2)sqDdEuO&46QtEsp7@F(V(IGFr-eIrFf^Bfi}hci0c=(cs{;ZVD(1Hr&uQ{I
zvPyQoHAC3Z{4+V{YNJnOKUnU_Q?~h@wjIBL?M9uvq)3_Ln><`C>p2zwNI6-QZ=W!4
z<G0kwWv-wr8>gwyzw4?vH+%W2*^}q>3r>6Lr(zA>Jh_3XQvcc78|$vtay)eYr~Wpl
zT_DeF#`k)IrIlWm+iWG+7%u3`Uy_w6W-^d?ceebq!IFcA%s1-1ONyLxY?DP#>c{N@
zhjt4bQvcoe<&0;j`KNsh5v}VN-I`Uyz|e4XN$C~mQ1jo9*cp0GmOt-d|2fC-YVyA~
zb0*HSylCFUdrP>+?M!*Lc@Z~aTKj8f>O{R&vRsx29@s2%F}}=pV3tg)z&sY|gn)T(
zeu8rHnpW<cvlq|2lOtX$7sEf-&z3<~mN#h%1CLjzIlE$u>}IpcTVu`Bou%Heoz!HQ
zv7uzS!L*~UI^ByS#8zH>^%}erwsPNkrrDpit&*<ZfBLDMLv@!JXcG66?Ctp(Prt9q
zD`PkCtC$$`dBV3E&;YJZ<i7nMcJEksHkadJtWNje2(k26v&yz@@7%pU^zNQh|KG0M
zG5<m~E5kGI*H`%~|DH0qGi&*^Z|p{X5iQ@#**EH3Ih!n!6nW>!CJWEs{faH|P8|E&
z1nh3VPdvQs>Rxaapz}8O&+1judpQ^yE}r^2qrblB+zL74*<03@gRgN4-kSQ1k%8fw
z_Ozq191kaNVCFfsaG5{Dn$uUmK6TD>;5tws1MjtoZPhMXoB3@MW9Z!_PL9@-s~_IY
zm~hcC@6M8qXKSi|er9Jlz2w8!obR)I%F=Z2^wk(J{8L_Q4(We@1`gUmwON}$o@*zs
z#mZODrXJ8gd)FiGxYe89|Ei$PTUAdtpA$~ZKWeG|LAm-V0|SHil;TNxM@n?h1<NJr
zbT>zcncx4{yi>f%TIKGZ^{>+I?)=Z5{qKG5EE#Kt2eX%N5%c<<?b0&wmf1#zp3qm1
z#ZNy{ns&5Mr#nRXZ7Ih?=U?HKbJ<^i*|uu7vmkrI$vK&&3-a_B4s_S9eC4)Ip248X
zeva`wtMrt^m;O#%dG~q5(%EPKE^j|x-7on0-a9wYB8mj%Z7s443<-aeBIjg8@fk?W
zFA7X&h?u?l_36!XBKRHt*Y4Z3?@9+~ETp1S_Tu8_*X~{@&yag6s^hZwP??AtYeMF#
zU6rCv7p`QRWl!n*6!oJpp!r_UUeM&xk3)<z^#9H~w#lM5wNT*nqkP4d_~5uGj)!qS
zBAVX{9O`t~%=yz&l!1XEV$qiC8TlKhZV$a{VV}-*#VRL1UjwvZMWSQ#oY_ZS&1n~i
zJHE-H>Rn&9PIrj>`^A<op7gKEyLNLzZPwZQcaO6%IN4pk7rHui!ahG+hS-qO&GvIH
zI;rQkt~RZV@p01WZjTU42low^SU2YfowwiVz2@S|1m+DX-yC)Ynlmvxc)Bm7bg`Nd
zgMp^KWqQr?ITKBb&v6_$wq)xBP~9{8LwO)O1H+9Oi(`5M7lt+b+tr)8@S;7#>`!lJ
zCLZTu_!6dN@M<O~aVFH7nBVR>thw(6pU9d>pR9F%j|;HxOM7|dLq*VfiH1<CDZA~a
zH$CX~%-(&!&EkWp^|o!y3wk5O#D9J_H9dTvS5c<syL+7B>JQPO=F7Vl=^br$`#%>n
z?g2Xfros2ul6Q;@vP<SHuIIcFlb*?MHtp#3dHuo>lUL=%{q$o<aJ_eQQ-L1afs~Na
z$?x<+(rQxkF3Tm{u2~-;wmkIi5}Uc-57+FJE)2YS)={Us^iH<@i-)h{Rkt!RG@Re4
zb7!;6I_vY*bN5JHh-kbzq4|Ky)7q`}-y4JM&hdX=@_mnXMC065d3~4bc06F(pmOcg
z-4)V|3>#$LuioYPJKOyc=i0l+HqD5VQ#+9H)Otq!J7dfA6yI;Fc6oj;{-R!KX}Wf|
z<%ad=Jl@WZU|?wYciYIFfq`N6MD7kR5w;iWmkS(P_>(aq7~B=tWqPso%b9{H``3el
zRBV#elCGHQjXH0Ru8Gt-BII;q-j(im?~*c@-!;#%FSq|{v1P;D*@u`97-dM=M1MK6
z(cq}`?Tzc07i`|rK8Z_pd7J7+oib;Rd?yb1%ll7R=4{ZB`mfi%=+50eQkN1yQz;rr
zk#|}J>}GG+8I<?L^ZaoR{nYcDq|aVsU|@(_v1)esr_<rj%vwI^O*`tiZ~o1r8-LH4
zyJYX-&423RX8!rV-@Ipnj=N6xY{NZ#3<-)a`Od80sB@<@&1;UmkyX~S(q(n5lc&Gh
zab(jDkJkqx#9nUyI2}@`ay%@2^)Yd!U)bK|+y|E2nfcD|4;wRs&iUV~@}49xF--nG
zx%k-ibCQvQrRme0b0_D$S#2D4@Alif;6)(^e&oyy2Av)6$!R!?lkv;7M6Wm#TZWuV
zpteET$BQZqUoI8?n+NXC+ltJ%2}zOf#52^+)@yFLdG4YB8>hqm(9+G)PB)Bwjbp!5
z<m?qY{pg%=w6=BV-HKyO4_q(3&(rC?93l4doVV7GpK8ygjtd-`{NfYSRJE_(5A~wV
ze?zv^^PK6lJseiIS^wCHlZ9{7%E4#3yjWS1UU2(~PUxwt{{>DzQkZu1tkVDEJCA*9
zv_0(i?OFkQS=M*%chv@L3<<`UtP<?Mzeu_vR;4y`LwGPh!{R5kcYEd7J~VF$mpuJQ
zXWG#~o$e{CKU=-6Zxc9oRrg`*rJF}KDli>z+cBAuVMEOO)w?#HXJq&=_looxOJ(gz
zRqk^*^s<-987D8z18s<8$eF1E3aPHt!ZilU4)1HCw!AQA(7Ao}>(k7t5`l<@ILrOJ
z_QjMw22EinNQr#ReV?eoEZe;*FX&)H)~mu9hwUDo&Pcf77kagqEs<f*lt<S#+eXgb
zGvmkBVv80>CIcCy3Vz}@{(CI~cF*oSRuA@c?<(3q=h)Y~8Zn@y5!ynaDbI%<HPM!`
z2P6^$<6YMYSA$NM)DO6Nw$XZ}_jgUxef_B)AMIXKdH%xQZ+VyQo(p|;)i>AfN;P{!
zrdMtJrCDKj6_%YamPp=`AJ&-a_4>$`|B|O4X-soHb+=O1>Boes#ufoN*4cf1S6?$H
zNPaPVcjmo5!+}qK1F!a4A7WrQUvTckB+K*~#ow>yuFO3Y@pi_|Ygab1Gr*QUR6Pv1
zT-b1LM{nxFmG%s^#VUq!3(VhLJ}P_}lnpnO#kbbH6|tZ5{%G&g<vQkud*)ZkM187c
zd9akvwP0CygxEaGxMR0=%>B+4%LMAn!&^NQ>xw~vvaJ5;KP6pIpUGiC+>v5e^R6OL
zJA&)zrX3!oB}XdO?Om03MJj2H$&puS^^jzwX!-Q?<ZoZ&mP_3{z326WA|7WB`Kk}U
z+Max0l^0gJzc{PBHm?elifV&&Cz}7-*VFg;c;20v2|aUGmp_h_u<|N>39qZ`yyKtS
zo-O|RDkCvkUXtNPhixJ|Lqw;3)*(iQEymC1d<>MBdDv3<^)}^4J-(slMclgskIR9|
zeBFhhqJPhnH%14OrZCigdGTAK!EV>CeScn=b1e{`=fvUuvl=vom>?-KE!%(cny=BJ
zm+x)tIGv+so47of-@)6ipFwBMs@cx1=br6)@$*NO{<NcW+nUy%WM)pty_8=9&SmWz
zb>cKH`Esi_ZP~F$Z`t1MNuWV*?eZz_j~U%A3^m`KbcEw%@!MnHL5=XHRl6(;^Aj~M
z#ocR<5M$q&fAG@LO%~jWHF9M$uDvU{*?VjCE>BaoZS5aFO@EfAvYwe?#(U6w_Rp`6
z7oYP>pEp@@ad?_&#PTivv%Z-mN6IWUP2+etUEt9A%Kp#SQa%W4%3pae%5ZwYyeRh5
zcK)mk5A5~UY-M2B_50zRLi6j%|H{r~yzifHDK=HSxb1#px~-eXIyZCeoz|cg8ONq+
zFfuTFan|V$ne%b-ONJXOoLjFlyjZ>Z_34lcUz<6ZZmd}RrxuhUHt6W3UiRL(bDdlC
z=GZTl1<Xo)Z{KM8F(2TT;kxJJzfot6=d{N;Jo-tzBD+`;lIwz&{Ejw$;LpW5dGFd+
zY2gNOPcjcA$6LQQ2Q?tpZc&$TvJic?bKBf<Be#t@ce>xF<wFut_niNV?!TTUaU_~Q
z{jv6seTdlcA~tK!-|ga|cXc-F9k}xDm(8l*d<>H(T$`~zIdaa7cY(X-S264g&~6i~
z$_~1H+E%miY2CVg%cKl5`;Dg^b=2wJ-zsqLY4xRxfBinytuy9kn0D}Hm^o<JX3eqr
z<?++!>}F#yu-qy4d3*7(zw+lK^XD2*x^^%0t_&wjc1rx*jg|(B=h}b|eL8R=XJ!DX
zIy})jYmp}7jSl`<R*V<Q!>><YnRsw#C)16N^WoR0i#vh3p*lC`HEdgU^K_NwE~98I
zzm)w2oJGOOmc?&>#4ufm)Jyss_atr8x@ftLIqB<HNw=~yzG!_vi*f#+3p_s-ryZDF
zX7rU|&xGHZcO#@h*{<v9uC(uuY_8v4mB&|Y=N55f@rteCSI_<nI0lME<;?$?w_9}H
zXkI^Rcjmk9^`{s1C8}F{?|W^xb+5;FUxtJ`mnyHU{~33xd8gdoQoHRvjn=|FZNERx
z-8q{xTj=y7wfmF(s@JSMckcC;=d-G<PtKjC_VpJ-1Y7Bb-4mO688%q0oPT!Z4<-hk
z>yVz#$KK*&CxiQcroLHSo*X}SV`ZwFb>Lw{_Ioi`xz&;J+B=(RM`vzeHei8F+h2PR
zS`-s;2ecp{_0or>#=M)ZfyUj0bJpFydUV!o-~PGJj=jy;#dJXFPu-d27rsw=^6cuT
zS+^!OGdScwRl2+UzA3Yx>n{6c^-B%Er|dcZ`-sjn$2(S*65tK?2`A?GZ!ONs?-AUT
zezRAmo`Io(?^Eo{?@8M>OsU_$zjN1(pM7s8?m6K1ZPl*Ik1?U8lZ%#>U9<kuyL;x1
z*Q^aIJ+e>wSNg8bJ5dsGyA-tP=a9_3^LOv?W^OQ0TlvlNR&g(ApiSv*;(sBhAEw|F
zsWLXHCoW$lZ91KyLesQ;_s26F3>%`}zbyw1c<FTSmOm#M-wv8&I5*eW&&?|R%I5sS
zZ&!D3Tz~FHg@5^i|C$U88$6>I@iQ=7(C2DqT64G7OGKoMf$iA=W99?5mUz49fp#n~
ztlpr#>g`e|182$C983Ogc)OB4k?-u!Y2G%sZ-()3Hn5)PpY!(O=3|%U_P+VLrmIwz
zp?P9=$$Ur$Rtr2>Y1mSbE$05V;uT{>WBb9r8sj<BLHCSE9oe*lQ?W+u_0BRU4s~03
z<q}o>Mbf^Y$?9E}qU&30`%*W`pH52t>GspEwOSq2<9W8!aCXv}d~hMY^W5c~UOL^A
z@1%FXG`N3Ph9`4_LHp+~d3Ow(=Xt!o8X+bQnGE^ev)-9Q{?n|m`^!IW`p$d6`{coQ
z$BdO34!oKhR=PM&oZ-N%CA;M|>YPi8l=)k5PGYWc->l+eN1?|NJ+{4j?{5Gb7Xw4j
z<!P0y3=A*k$4Gp+aD`#boyCh17<evT{rdF!A8ECTvI$!+eSeeq?;fZmjxbA~`t~M&
z{QAe5dvCDXEKO5ymM-mo+SXq9sxZUTP=z6C^(!^e##_Q0XRdiY&EMzt&6Tf?%@t%|
z)4W^T0~*r@HG=L#`m)cht$NyPR~*$mb+?xZbnVjyJM~Y7(LZ(PZ$BKdL;XG^txa3C
z%kzA|)QZw+-(J-9re5scz31n?H^=38Qa$$R>}rp=dUiGExA{BHfA3&yD74^L+|vh2
zPLB@G@tb5VeD{QXg3p}g<&VpSs<hT7Cr8eCYMOg%eYLRDk15|ap1HYV&s1)%1Kg39
z%QqW?4%pziQpWM{%o9e2oMYwBd)m)Qx~~PTsd(iW;gQRy2U`m;q4sND*(X_Li9LVz
z?#xw-{#*;%`39L;`Vy?uE#2zK7^WrKVi%$y-mnn77|Nmg;ths`BYmH~gAPnSprw&^
zah~lg)00P;zNvjo5-&Hr()fMOj%~r30n85U?oFoGGtVD4x7fLIYttOaER%shcv|TA
zMxC<a#&`YKm={mrQjK1(b1Zgi-W*R*Z8+<Rl=Um&EsFz9l8chftZ&MLbFbOkBRnP3
zieB>t-HV;iCVE=w?pllY2LsxksNFyL?o~mP@BO#_j0Y^1e0}sfLd^ZAoaW`!f4gsn
zskaFR8n2fw{hXixS=G^*I`LCmT)TkXlKp1&ixtwv8d`5Mzh1X$cJsnsNrr@mdts%?
z=b0H6u+K5>n`Qc)>CI|=ms;UtPI-yYk(yiJCFcKvBt#OH1~J;Ue`Daeb@gj%*1DfJ
zb(q#1IllV!={VDgpca;!dt>9bId9kXD`|h8`>nQtIn{pK-o*=fL>hWO&o;chH>py)
z*zD5vtvT&d(#!^CI~~5iEN9(izpQk6r<~4t5$=xELgO8d`7_c$xqO4&Mx9HM_ts80
zzjb+_iL#RUqS<d(<(b5T_GBpATkjQJ?ssY59moFHiSnnvzfQ5f+a3GB?|{g6*}L*=
z4T;{in?W7!BK7GX-tS?4-~8^*%!Ci0KELmq`R2%XRi1#T*Gp_pM~Jn9$7kd(#kUL0
zJM&yY*3XuKVb6@um-DVfu`@*U3vbO~WcZbO%u@OAlR1TjSyH9S+b3-N5cke4PmzIP
zLtwo)X!U)ack4Wn8rFzi{Tp>ej<Y6+tXrqw|NrB=`7fIuRvU9|Faa&nT7HO=fq`Mo
zjd={)zm+OHmSJ`cORIiU$o$H&JN4t%RkMrJ<JQWw3cN{VHV6(i&y3x!>t#ImYekOp
z^rDjgGpYolZk#)xaIc%8CrInU-0uc{pZ}gXyk~u4evQSdD;(-?@A}#ba93RUv48TF
zH=oiR9)r%xSm^z`<bSr<bFbb-`k&&|dBUpr!%LHycHg`nz{9|huufR<)f1bqQZGI;
ze3m`m{Kw~wotJgBrT?a@cfv|H+aHuUwLC(s=rBV<#k@~@j|V?rYV$ZueyiWN&v&yW
zHZgC$-fNX=Q1de{H%ff|(%svB&MWy9JoDbc8|z*@)0oz}OOHY4m1FM|zi;d&VGPF}
z-;rIg^v2nGr+>?DMgHA(S2drPq2X)MISVf9mDjy>xGm%F+MdvTb7Y@Y^25D%djEnB
zVOji7?+*h5Lvz6l=|8*fuze_6sqtl{1(Si%am&i{#>@v!-;Iln-?arac)TVgPsqD^
z*8FvjTI&{lcoMVn<mP90SAWi0qn~r~Taa;1?*@h$hi5*o`F*WS`|FFJi>5A)StG*W
zraSGZbKZ)gsH<o5{_)yuij!z@em%9-rlP*QXu^Kb6nBHE$M4e6yER;jfAsDd*Jg{<
z-gs>26#f0x#F9y`wr50eGBAATnZx`ot|rQR>jw71<I2;HUaw*Qr}n<z@c!>rd2&gS
zTXxPbvN>3BE19t&vGPp%lJv~njCV5>@6N2yc38X8^q9n(*+>1}v73Y~Xx(GySDt%*
z)vn5^pSk*<rtmgZUt-wfvg&74XF~Qj2ZkFhCF_>9ALV*tJK^sg^91|<H@C`PlGe<B
z8#14Xp`q^gNz2FEtIk}z`nUXr-4Q1_Hj8JzlO`XHsL(G@uoq@vxUpsbY*0Jn-|1FI
z{?DxDt&WUh;_X2qQVhFx?ArI|SAY3`n-k}Gtee<3Y^Xll1yX8SsJL7DsP?tP_iofw
zbFp3&b{Ed=;C0{*z56C>)umIv8G9yvte$PRd83ZacP0bLpXKjW{;quWOyPZT#O$xr
zpY8AVY)!k*SNK5s(Vd>SRj;1?pE>hpQsket=N~gOFw7G_t@QT1>`GsQ@Tpn*k8ZlK
zqi^Bv$^UPiJlJsTl*^Mj8~&T#-+Xg33qyqT_glAq3!F|0_!+)Y=iRDZp2dHbvLBZ0
zy1#nY&e>c0XUu=SY=-vAOlt-nXCB2l$2NVq?Hm2>NZI3aEXfaK_DbKMY>>2adCtD_
z>S^Eq_I-|x`8nh7lur)vPb--l*1dCCGg)^3ZUzInpXPsW|9trWWcR79kH3AsSNLml
z?kn?0SN_>D94L5VS{8M9Ze97giWJ+s(Z7D^s@b~#vpdq5f1=M$l_&O}?_}f4_Z~y)
z<m=ORvNAA8wAIX*GpTjHkK_TTcg2(B7<w*U{rdF!oG))?GA0<l{QX&>em-bgc+IS)
zLRpPN8>&`zd~uom`cS~hM#cm&*Ut$NYu+-<SQ8;;zES5={zK4;0<My8K~ul?zjWJt
zI<KtAG5JOBs=RM!*%%lM7|*S|Wx3V;7{`gD@1DJ#z;-(2hWmW~v#JaYrYC-@e4Bdf
zr@-k)IULM?1LeLyuj^g){oJ!Bvwgl67hh~PWMHr_pZ~t_kI?By26x{Js9Sxgdzltp
zXQd1Zy7JQrN<qD6BE*hw)Cr0^zFx5<y7<0#mLcN?jqKm=uEel6aGu!u*zdDt@+r-l
z$)C?&nGn5xd+6PWdPWAG3+2yyGHw4Jv`p4tI!FI`&)t=|m*(DaYCBiGL;86?=wuJ@
zd8`c&J5mduFETmcbcuC(bA(uYD}RIG?p^!#oOYEndCT-dtu|jS2DV1&+R>$NzKJA8
z^82n#j1X~VN|=^>vC;9P4cmbyOMlz#eCV6S^hfXS)ho%DjK3}16+C6Pb$a@jv)aZ+
z(|3C_Fc=i96fEU<c*o}4R$(WLmp>&E=Sd5`a%--rI$`&#W)>q8!y5Nfs<*^m@3cFz
z$>Q}-iS(}2LY?XBCx6*#vHI0BeM|M9@0V3vS6{`>&#-rL)wUWwP@84r{P%@F_NEDb
zd$POu--(3K(#LBySyxIKIBwL@ONv}_|IhWxyKmox)<<+RZkP}u_R6i~dAT@)n#Q!F
zv8T*Wn?AXBLpoBsJf4w(P4BMl&v$b^-ig{3{-(Ta%J-{#+joDoOMbDZ9o*+&$hmXh
z7t~7Ku;iFi=-nC)#Tvs>hP6vrmN~P2W0=vk`t|AE^?QCl-<ZzUaP5-uVaH$pM2tX-
zl4Muy@?`y0#<JU#b>a2L8C?28Zfdo8`aW6=_fPYx+2$YE@Ft|Rc*47`8RiT>zW+UW
zg~jIm(&f*z-?yed4qA9~bLa5|ldo)9xoS3J?+$UkH|3X%yK>H}|CeK6IHq`2)q+Pc
zXZHD-b*o>gnTmbUITBF$zHE9?!JNmJ)z_b4V_>i?%u#ywOW<^p&d)ISpFb<svnNY7
z?VZE?HTmAjk1pR6o;EW&*xz~nn?Zb|&Xo^|nnCa9ugaVEM5+XI0^6bfJL_MZ%h&UX
zh%1*5FD;(*ovr^0)2$tcJNMTy#DNAi!+4@U^X!y7Ues&7Q|>|pBb)mDgEr@WE4x?b
zAF0YJy|*fzo56tZ=bVqAfzbQcu6){T_U?l1s@6M|e4y&a`MK?#Ua0_3a{PN&1avm7
zzgEF4X_b1zS_b2#hceiudKe8%!>><I|6lR_{DYZ{3#LAX?G-v;wR6JV-ZXvfu&ZbH
zu^lz=2-WhNI*Wal9mBrG0dhRST6fm3uwkfqzWdP~^`F~=3g4Z*_@~@(R&3ehKRx>{
zvWPG+%xIZXJ>~m@e+G|>=iWM;u;NqtU&EFS$wJZAC+1hbxLiHy<`rH>h6uy*z-UYV
zzszg~=fXbCJG4Ef{AcxB&^VOIw4?LCS6`C7z<K}cPS9ecgf6+yzjXhK-CyB;kn8SF
z<BOe}<=W2t-adPIjk(Z_9ec$5f6i2|od4D3-?d{o%Z>SJbr>Ti*iOj%cI9NO{p&e-
zt9D6VDqv*OeST?fXle0;?`~^Whdn+LXUA}$qQ*Mi=ey9SSeCCd%+r^znjKrIF!yf7
zzt>0hSv606e|Bg7tzKi$M9kxDKA=Qu@bt->;>+v?mm9gKGx%J+`ZcvG?Z*RN27}A(
ze?YBnh7EpQM@oy0mmK7~a`6f?1M{=b+z0ykTv^y&8i*G%Gt^Dsay-7tgEyk=?(#b`
z>}UV?`?7U^i*@eZH<7}ZjrV<j_Su%5fk9dDw36wu-KO)4_pW{QY{&EDmPnh^<;u_J
z@4IQLT%7rblVL;EyG>`y<W47*7@pd?_ipIRXWLih?b|DUY2Kr60c`tR45zg|H(`kA
z|6Oxk>FT0-+0#kpYrT^rV}97C9lg@>DsA~H>F2gQQ$K&sdy>vjKe6iEvaMBd+wD6q
zxZQZpmJoRD$KA@lCEHi+`uLCKMgyd{F8{DzvBkZ3LrMPMV~h+v{-^%`UMKfi{dte{
z<2f6xf4{n0xlDRv$?=>cTkq~I-(BhTSFFt>fq@}m&bBk!3=9Vfo;EF)s%HLkr#;3+
zl0ohDt6!ha7&9N(Z1?27Cj$dRLuv4iMbgjrtzK?u$}|1EKEwZsUD2%q+gw@LGH=&0
zGMt&#UA)}%efH0b(hDEtl%F%-_1SK*|FI~Cnwk6ho-bu!U{GvHcFcGR8fRdZQ2zru
z>S&v3`||WMpA#|ro-;6nosZr2{O<EV+XA~%3x%D2SX{flU1@n`e&VX?_2RY?%nUsj
zYxnto)C5l`+)s*pvwUlYPWR>rG5)l<rknKd&;9JqwtUs>T2mdX-I6yd8cn@ke-k*A
z7kAmd^KVpSH{%A4YK6N$@3Jz~X-zxoy6)v?&z5QDWD^-0CZ75_!+)Q3ddl86<z?yd
zd#&GZo_NZ3$-X6XHch;?;bQ!9>HGZ*3=WX%02&fcxB8oYW&5$;?n#pzgFz)^MCISB
z&sV=LO$W~#yfvwL`NmK*O7g}G_NA+4JHPjo*aDi@^HpTHInm+3f}cFh4%{1c<UY+k
zRj$}lZ5S<mbkgqNl5N(ly)Rq$ynpv6$L@YH1A~FmMxA#ihqF~}^>@ub6L5FN&U0^i
zFLNvBmhIqrH;;i~&4k@6jBR}%N*YZ&x^maDxl7KU{@P-14h|}wo4HX<PmS-yJ9FeG
zMgGy9cC>DnzaVHuN$X~Lv$NG3tjpCTl+vf(-I>jJW=dA}GSga)#QXDJN4@obv6X3q
z%g=R3C(kH*6gkQ6^FNjw8{U6&ySKzn<yms3)?O|KhGTDcZ~gLmPW*`~i}W`dSNXQD
zzc;h?wBV{&YF97(pA>&{{`WJV?)P?n&oeJt&&bdacf$zOSUx;`cGd0`d>``VlOi+J
z*ck5b1n*7w5D)6690%_$$mwu%y_@lEQ&qBd6+>{!dFh4;+=2T=IVHAi?>fcoPz_#x
zu*B)2yr^9qx9d*pOK*x4xuh?P@B4h~r&SARx$)dNSz33!vcz)bn-wQbzdQF%{jWpw
zQmy%&B~%y=G*r4(-AmNz_MEfuc^t=gTM4eeV#`0xWN2Vrvh_;tzt5H}A2jcGR!skQ
zWYdr6f5if)mDU>jCq>3Qxl{6D>YitllP~nfFt?qU7f^2QEN!qs5)_B?UR%Fjwe`lj
zS8jZK4BeaTub=&&{{COzW3z2X7#BzU_6t>HxFk5ik73ETQh5h=2Q8+Hf*oBCf<S~2
z|7R;_rAAfdADxT~yv{rbUwix8sckAu5)94u_rE_{b$6H9g<i&s%l+pUFPSFA@L|#p
zcByNxS`WVJiDPA8;1>8UdH#(t-!q3jn?(!1rX9JOu6AwNuOD-F|C%xVs!mngF`1rb
z!I)E1PUx~QFt|P354yJCfK5yDtIEjMYD@E_2b%V3Zu)YJnStT|mV0aT{{8;?U*#Il
zfkU-i?+-5pT}{TYAy{gk$>Ipt{-nh2nr-GBrwf<;&|vVKbc4OMl4Ji<?P5-bucDDv
zbEjX;ouu;6=3?i<*S;F3{;oQ4N#A(y{(UwTdeWTdZx-exu<l-Rv(mP1H3NfzvEn!3
z*&4ZL-gf6D$vE%nIoYxQ<M9hJ=hs{<Q!zW|(Ght~VAij`e@cuD%g+9M@xD4f<>jSW
z!R=~qAO5bcXSsgJVkJMn0q^`r_e*wtT%3RCeA4tYcjnGx?|t(;wRG2kQWas*Z>Q&W
zXT9<4W4sXZ$IRl)X{{?#mFW!CrEh#>7<BJO%A1yD-JdYg%G8kIvEbvC>6MXpZxp{e
z(h3UG(}Le5o$pS*arwd8mG7@^oOAowk*l+X!{>MY$lLe#<lP#cz0Tb_bF2KNK7M=l
zWDNrY!{QI|%Rn=sc3nDqIix3;y=-i)3Qk$sBF*rl^J`k^$NTI5s~0v1N38IFXq)i~
z)VGQ4w3KyMTOi0g_t#QQ(=&%1<HFKir~O;AgOlNNy1vM>he~21tPD~bn@mKy?9QHk
zW%N(?u6f;F3$g9_K7sF^`H8+sWf8fxPSI=@GXq1Kn%O~Zr(3Ic{$1I8L+92#x!}(V
z^Y?Bv?q!i|OrHE<(ea7#@(c%-96ffYXw$!!g=}X}NOS*Ws*Id_?2g8H*81;n)@UC{
zxzn=O@iJ@9OUM1q$Ii_;o9J{!J^S2y=?vW?vp;X*+PL-hjKv<`pFCi=5ccC*efk%v
ziOpvt_8J*8JPuBI=^7W7c>iVmvUKg=m65R`k*}<I7!nkdY)_otalRsX{zmiTh4RyX
zK?1R{f^YM=nY+suF3;`g^!c&w>xryqfwJig3<)~l&VbI;c{4}z62Hy`>2`I71@pe9
zi3<I*lhjK{v^)A8w6^GgUgnQWcMf0Ct4PwDZpUDt{O=fpPDEVT@-DtZIWkA?n=o8(
znz;13=cGAS@i(RKYo5)_xj&~S{+Pq&&(rUMFPCpv+w%42X2qI|yKl_kTIO<QljYBu
zpiSi!6Vn<P82(N=|FO1PcDj<c{G7mN?0LLA3<nn7sLwg~PdWIJPGs@D?gL>-Z@xzO
zue^8SC(8oeuN!BdUS4)kr)^J8!^EzykL%3sqc@AQGHh^gop$f&-VKNTe0SpWb^bVW
z$xIvl)#1l-b|uNK`tauc^*x=R_pHfVR&ls8QnqWmdD?zK1_p^<+hEXT4f?Lr>N-#I
z&gy3J{<!SKB~P_jh6C%?n6Kt`UE9F=Q{;X%Xlc@JHMfgrlFu|RWZ$T8sBvTKO^fgq
zYzY_Fm?p&iS;m;ay^-<5%9xjN8UJoiSafHt%u%P~8-zdpTpb-ybMnn&CWZq&NAH}~
zE{-|<m1UjaKGn3FbK0i935g4vcd%;DeFlbKPj`QrfA4tA)}vit57_He^8C;<3}$Fx
z?R>o`z4+b<$2GrMf(z27Nky0J;dtS8;-StalPj{7kE2%?s~hi@XJ8XLA7LZ)KJC+{
zP3uxZjyz>Jw*JJW?5&TtO<R4Rm0^QV;e5j*PwKvNl$<j!vwrmItmR?zz>WD2V!Nx3
zEqwmqFw1YgTg+L0z9I|^2`1lsSQ!`&{5f(&uy;?RYK1Vj5;FtuTJzQ1*=z}nc1OR<
zf<`g@jwThjr!5pb8~3Z!^7-uM)}TMk35`h`wd$D@;?Ai>bnr2_J<aEBc-fafrR?4E
zii_51b5HAOa>e)WjbUJzvGayc)aH%T=RQeQm7jc4W7C)7Nh<znYbO5Pv*w7-O;y9w
zRr`D%f=VNeXQtNjf5ZJ<r^WTYY${uN;*x;0_O#0HHOG@DE-mt6V3_v&+#K^|aaN1P
zzn}bmHbnXSwWAKxlj4s}F#nX3uzT@5ZiZ+9=1f06v*h9oH-=;S*ZL+;-X?oLk%56*
z?Df$<S@Smrvm5W4uGqQSJl)pZ(UAXPUU$vzg0jzfNk4h!U46Dkn3193;tgZax}VRY
zlQ-JWOiEaG?}(EOgM;_$v!`Y;&e-h#5!5(kFkpKma@KOfU42)kggU*mng^6J^*BFo
z&Ogh>aJS=mU!3-tyE7-xymS15$@ctn`=oZ4WPQp0n8(b}kh;Nb{qw9O-(?PcWyRk<
zfW3c2hmqme<Jn*4A36I^tLOOR8G0Racba`+VCYWyztQq{zfa@yEtc<{7ZkfrYpdyS
zHoV~{d;UcngT%D_f6vzFN=n~vVz{iRo@-qs!^j|}_s&@E_qum}abf4eP1V=ko3rEB
zkt4H$A4b~W`gH2>|9^V=s}FDNci7`r`f7Hi)}}9?r|3yAFwEF)`<a`8!64stT3gB^
z|7DUhW}3TByEh|*;l{nH&70B~p1p9c*$)~C?rDv1E#?p2{b1#Z(^@wDzrE$zXDnQ-
zDWb)=pm=(lNSdb%BZE~?N~VU8G?%Bn^yRll5A8N7&fX&>{5oa2iTsM^r$zLH7#ME&
z<y3t?Xs}P?Npf8OAE}4YQk-VxYIf)NGWjC<KdUn^{N339FZ{cqdhd!8m-G$)$M)UZ
zWP5rlGed+<_L66OpEg;|yXCssB7NB&!}rb$#0}Y`lfL%5?GQe<j_Cp@T)utYv}s?8
z&yxcTJ}q;$tX+AZmBHc1x_>$IHwM4*HBn!8?@rwt-IFXwtV|wS+P`{{b$I{tM5doh
zztzq9YzL~$Q_q9WKR6RVacSb`pOaUzr9JYUxYS%tm|@rEdu!H6Hdt0}zPCp2EcogJ
zv5gY%8#yzd>^yO)oiq0R6^#_e&#HEO8x%G^C<$j>-%w~77$V28OZf5G<x=-blHRx$
zxi3Ev<eG6i@WYIQM@wha-j&*On}H!AaNQ)8N~5RxR_9N@DtU69qkhA>{Ji)xlVU$?
zU%IW}-;>iW>qHq6x}I?Vy?S+qUYbr)-@L7#H{Fez&B&k=9K&z1{_>n({ykxFVd91J
z=cMKJieH#6P_4b`OGNxizZFlJ9JCAd-&}lQs>XI`#)(G8854G}tH!Ul{aM4n@JH~v
zjp*$+EjNOkAH7-|dEWPUF8|*}PWSG`#)T!<J-_ig({HUh14BZ{Hy?Heh66?-kyQ^1
ztPBblZn*hc$vfXig`p&WZ)B_K;rDG~Gj^DR^9pFgr?e~ctYU@T>XnhL$9U8?@3B<)
zXwIHcsOM{WW)@RE!-a)6K0Gs-=f7xg__1|Ue{;rtUKja!6Zdkry<)wfd%+x&4jaDy
zQZ*+(O{h!f?;MqrlW%7E)T!-ONQ*pw7?g|>4$X1@YyaJKn$`b5%!N5ujAPfWUJ6=S
zb0|{VH2wcX!_PHl-$gzfGE|9HUlenz)IKh}uZ*G0pJ&NV8-49kuNylfCfDBgVes*u
zxb%8f`POGXLJSP?M|T-6&+^!${OHx$&ei@7abf1R^LF!We6xGc8n@}kr%w+(vC~58
z;8LI7azzFP1Fiq5RtyXb)0AcW&Y#xGiKsPsd*Fyo`;qNR-lj^74RUMESHJ#W_t!pt
zjbuY-)#iI^OawrE7&lchds}nuUdsu0=XdYCC-LE`qeehb%FDG686sHDswUn$^y}>@
z8Rq-K+>UY5bLMMr3Tfv1r!>d=)ah3y#}=6CWvlP0KQeFD?$;X&KE||0Jm2`ag~w;j
z(s}2DcX%)`EU;D-*VJFF)UurSwSQ~Hv8gf<YLEQ-s*@K^e2_SCX_7LJ=b24%_0^0F
zRYJw0KkbWl#|NamEUn2qB0KGA+!+>zgpco@h?p$1<5?_{{p_c$dHVTHtv9?U&);3L
zukZbij`wqwn=hYQ%^7FR@L2F4+kR8|-q;nBk8rGTW;KX?82!lc?2cncelgC_{oS)Q
z=EVDF(XP|#elC;STzjnS$n;w~MZ@!5V``6l+O$jZ!JC+l=0Dc@t3l;WPlm}C``mXI
z%Ox2Y49xzgg7)@KQ_Zn@mMZ%0=i-&@YL6^cax`}^F&vJ_4>SM&_gB48Hd}(zzIBq<
zW=}N*ovdNt#+R~v@q&PQo5=?C=^Ib*GZ>4_n%DMh`7?<$T@wpF%PZGT9QfYyY__@^
z+br(qlRs_ZD!f!LZO10^sPsKgMe_7-rV=xbF@HUAo1LK{byv@8wcaK5?_$r~Z`!z9
zcEQ72GOZO)uU=wrOnj31)ob$2TP7?l3@^@a-1ztM-aYTCx^(uQIQ{CzthB%*-V6*J
zzx)43{n0R4ZpV|X@_wmo;o`D6lk0A--WacNSbNhK?-i~>pH-ifm_09Nb;x#|cJEl-
z2NU6<4eNU)t(Q$>Ip881`O8v&b@tcYv$(geK5YKx$~tL=tPSUXY;sP||G9g|`3kXY
z&s*s!0uOb<;=<0)+j&gy=+)zz`m1L*zW!RnQyuI&?Osoc!xheaKhT_(fmJo=_UeSn
zN6Q}Pdrq>MU6=4g&RHmB;?h}a%m*5-%?^z){*!f<!N;M(f9^VSZSYz632S6d<h{Eo
zS7@K)+}&(>Px^!S^UBD~Lrezs*Q7S^)V*f7(0pUd)8>u2Pb-?P?<p?4@0?dxoSrn7
zNA=xe%{lS?Ot%>rHaIMtSTac^{Mo)~i#cPIBkpfc=AW-PSMu$xIrfYUFU~LA`1f*z
zRHy&Zl{G7mR%mSsS;NVY@G!~m;N?rl7qWg$lvwP&`O>MkEbAp_Y*6yve?m9Yw@;nn
zwpLF<vU_FZ%FsjWD%lv9y}cC|qP<*rPZ|S5mB{BkS9~&#ORoMl$1?Ms!nG5rE}u4W
z?JRw6y<<^-W#rpGImvNh;;+oMD{U8GV33$=8_dMOu)$~J#O+QC56rM_`yQgRf{}qI
zXK$o!gfWA%_%)vPkF}t=b_1)A4&NGQW}az$^H0Nw`Sij{-UB^H)0XeFY;(1^{6K=?
zS76G^rOV9M{xHit|IfYnchX#*6Pv^4|EXnQh*+WIz5emdxP(VZzU!+$--yUi(dau8
zV3Tbs8mX1W$#6mb?3MqIcb>R3*Ia1+B#G*P(<PGYrh!g$`Ezn+XPMseii>B0<HD9_
zJ=^+e#dfI;+^*B^sd|1o_<;GqgLgcY+DQs;eB#2|JtxV`WNdiZWf)QEb@n79E5if%
zE*;*=xYmi8K7PK{MclV9W*506+25*v`=RUH=S{c1{&YK^QheTUKRcp?FFM-v@3<5{
zqw<%PCoUzs)-WV&2PY7jC}Rd?ky-2J!4t?Ck<;178{f!1N&TwjIcf9FyAmIixehR&
znf=IrgUs)1MGP0T?_c9N`On?@+ii)it>L!*=l(J=9C&onyXofzj}5Z#9or^Jzl?gP
zUeL?H5L}k=ZQrd@=8v9TfBDxeey;mu;*VMeh7auNYPSlvbsBE$%Rhcg;>OZ~f1hsh
zFdSI$Bw>58Tz2wdy*bIh)4gG90i;SBUUpY{`7hfvQTcuX1H+#Kt+j4!D%&^67Ji+0
z;<VNtWBa}bS%-`ZH+Mf*(qH{p#nZ3t-}`e7piYp1SM@T`{irv)bpFcl-`4oR-*fc0
zlDFt1riO_T`C;*oW-T;OKj2Xll^?eJ<6jog!E0WXk*zykHQvlTy6{ci997Rv_Q$1}
z_i2mBUu}^~*!Lvj(54?}nH~JQboNeGKHFfjJLkE=yWNiYNgH#kcYn13H+>ua9hq^9
z-I-^zLfXx9oqv3OiOp6C>Yt&?;IRMA(*MWLO6VnZb?NLC^q;d8T)#2=Uw-1!hW|fu
zJfy5Qm>-ciQv2af%9cfGavO|Yr?u7TPET7fvtphALsX~j1Nq)K?S0WVL`}UJo;mLe
zDt@HE!0^ZUPWm1*BOb??TJ1-#ti?WC+xNYgbk2ESR9x74wtw%d#BK-P=44=ySZaHj
ziGjhvLr!y(iOi0lTYem5D0}NWaVcLn!+{fP%vbBbKKts-EJlgO``2erU9=a}TM)VN
zJ?FWh*wO{nT`UJa{kY3~CLm{1X-ZyVpkGpQB!ko~$Ax~&Jb9MRoU9r9X2ubv4@WN@
zU#R*!?~89;RV{z;&Hx661>uQn|K)Tf-by<6ZE|Lg>zPUW=1M-i1!^Z(Db@e<Kkqv2
z*SkAT6PHf^v@A{Yk6GR{I}QehKZoZkX1dy0Cnw17nXA5W@!Av7l{a7B(4TO(yU=R?
z^0X@o3<=Rm3U50aH)t1aW=wOESt4ra#=x*|^@&T`_phHlVrRHTdELFfT`#Rg>Oaf7
zS7a`Xzj`;|ulS?-=QSPwukqZ~s|AhH7Tz)jZ6^7%@WiEp2d~SSncg^L)O=fgXd8n;
z-s`hkYb5W@P)lGxH0$B^uW6;ZA3#GA8&99s5~;Q}3|y<>cCq<J&##O!bGAJ$f_V*<
zmmV-rJDD%PK(@8HGH~M3`G@U$M3^`7UpnV`=XJxrj^)>%+p;k*w9L3A{yW@2dRFGv
zV!M#d7Sq)2qIa%b?|VjwVS#;->A%Cbc1kPG`(e>8{m?(liHYHZ?X`fnbB@eP-5^}p
ze`#k|*`Dv)K3AR+=T|OHbz(>esM6bBJYo9O%^Eyf`l|!#v+l28KGS94Vf<|YL&D4&
z=78xD>Bd<;Tb@T|r^m<CnkVH{p4qD7WPho>Vs7p3J8#$eU8`Ml88kr&sZ<*BMI)uS
zy#Gy8Ik~x!kxht8L|#1dSHc0tgg@72hkCHo<(_5Wd7&xO7nL8@RSTLO4PIywSDobW
zH$a79nx;s@^#-1VIuXU@)K9nB|1COk$x!@wi)N6<%!N1DGtd8%-rG_5g?Vvw|N8(2
zh6ntv)7mVK?`3Q}DJ-AwUuRZ3@ptt7;)zS=FE852z#zP&@PGXc_4f`rFKQRIz07I3
zHQ~CqJPQNEzSA>1zs;GMF#XWK@B1V(j#l$abVq*-XOQrFv-?lViD*IQ#Ee(p8PD`v
zco-iK-W9>H!ZU_#*W(z5W`XegT|0gq__WEYFP-c7ykPMx&HG1RzjciZTYu$xrZ2d1
zjjCP-I)!b2H*bgEWR*%23y1S|t>1gqlo<?kU!Q%YCl|IQjp3J=l#2X%^VRIipwU_%
z$G9-X`;U&KZ2c6IvNG-9UyIp~eHpj@_{)68BQ8vQmiM6~*)Nd^d<n<+eDz9?e4fIk
zdU<z6n;&1D_4CTe%JrAo3%~r@vmbOe{_YDtQp<dm53Y?lmX>$n=jK$G?Bahc3=86m
zrvG>TySwj*MT<>u<qoY)Urt|QXJlxo@4DaFx-j$Uk(r!jitnm#FV1m4YtvScHD#r8
zUHe@r9R`Uh`}e+;Ia1YSAX3T2V64n{>Bc@=4TiKAn>}kM8h^N=bicbX^7K~ab#@DG
z@IT9Qs$F=f^xoGS$DalDuerA8GXq1z#aqUp>!51<btI~^X0p7v_}+C|oJIyW!{sga
z*4Q04J**zg@#V?ks?Aoh`C;H2F%C?*Gh^*FnG^3E<H8mSyg&FRk7vbe8#86*1UZw)
zhSbXmVhb#NEi;^YW-Ywoo%KFzmH0V}qd$J`e7W*%p3-$r1_qubCoTo#Ke$zK_(^B~
z_Rab7^VdC175!%3&y$mzG>w7bi{7=D%avWHwY~pwzxVkPThT}@c0PuN`5XV=m}e~f
z=1}UL|H~}jTPNh~na+?9@$Jm5$<1dKK5eoJn=YHMZBBOXvkEV9ZibRW_v>eEIDaDG
z$kp4Eqb(XD7XL_V`dRX@>c6@E>TbRNOABq@yxj6xB6~9<14GZHd6}Ty*zR3Ae}ht9
zMov<B&nt9c;d2$wIPu6=1{@4Ncd9o3+H`M?o{1ELmDn|&{A;tPK1l`5?FKz!%y;#_
zy?gen*8V#;FR?RxkYkw9yk`yHVS67nomua#8lLg>O7eCD8jG+#xNY74I{Agya@IZK
z2kv_@K<a$oE%SPKd}g^dy^TG#Ebqci<5U%C!ObiT3-Z6a?Wo?U_H+5pyVsjybU~$B
z#YAJ_x0c2S7d)!lZhPw6p7#=mHU=(Rr{ukNIzxhk>ohwH?~Atr*F5H{{XB>9OvoRx
zYLoq2JB^tRe6slOC;UxPvSr7wFuo&Ke~T8sbo$%1nDhRz<9+idPl(=e|Ka|8&nrbt
z3=D3$=RsEteVBBk<HdFr&w0FJ8<rOQc)a68P_HXPg4?y(p&2G0Zp~tR;SgawXPvn=
z=MGSPvg8Q!tLtgG+FbKWbnK=--@Hq60q@xp49^~(u{reUt+oTlpWZoVr)P5c=g#_X
zG)2kVK6}HKsjE5Ttsg7b-Rmhn$iQ%*|Hk1a&dVMJ+P{;0N>rcy`#n4AesN7bBg2LH
z!O630<PMsi37WW6yl92m%Z(?3OqCcJeymjT-rrI$vGiI^vGJ1AJKp;i`=3)TJ2db8
z>2Jw)j8{tYmoOv*Tw{H^Qu?64lQiZtvu&sT>RVp4kij9nk4LriXpR1JYl*HMRn?DP
z*>>)<EI0o7`=_D)>b3KyTByBxx#f8*I|D<{t$Cp1cNg?UgglN&;@r^6?>bHHxZ691
z183Hlubxm-x#ETBhF1TDn&+xE2Tc)TU|^V`bT)2V@R26<5^u#g1&dRsUtREE@R`RH
z;82hz(vW{*bJfgcGA2*os5oCtSh=_Oqu;Ix(?cWTWhKtsl6(7{iGjgBDCK3WjWUnV
z^k-3TV~;({+pyL+JxFTj><e3&7z|>wGQPhy@tpMB^8N!J%iAmr4zb_lZ(E-{{i<Y@
z`1z6}wRx}ieB1MU*TXqpw&%Pqx72VkNKD%$_*V8w>e4*3y`5iGz(HY=TbtCwaHjX~
z1gTG(KJhvT*M;-A#_Y8%{3>_EX4eNkn^_lg_ntnTb^HFTd3)Zr*6lgBl!<|1@wRl(
zKIawMId!6uQbH5$Buo}G2ITzkow&41n(@Gywcyr<mdN><{B@0Ob@BOO;ty?;9)N1(
zm7T7!_h#-`tD$m(-&M20{={v@85?#yvoL6Ps8D^9TAHE2kahd}y(J6TnU6WV>CSNv
zEZ(J%cdzG|C<DU*Z@uJR#e`W$?%d+`y}NFC)yJMwQ(tDdoDpJZP|R?<yI9HF`Ru{q
z!lNfScyFye%D}MV^vuq;H_Veb!VCA$E_)Jbuq1i0FY`H1<^v5~I=uDO^Lr|@lN7#q
z#+EhA)ZS$B<h$*x=TTR-ur;Ix_0Lp$V{F7x_;qdU)6}n7kG>n2EsQ&Jk>~wu8~xQ`
zmU$bOH_zMi_T)k~1_rnM^CFB43>QKsE?ua2F~6&w$+V?e?zrnTt#ix_+?(#Lar)SC
z{Th!0Z{pbxud6m+`XLNT9!48`-&#(&yK&E&zVs*?#*F7@b};(fTKbZC-^1H{3nb6h
zXFl3|F^Oa2!Jxzq(cpMpbp0I1k>}5k#F!-6i!(sd{f*mgFE4o%WIx|{QhLjz>7gfB
zEe)!AJ0h7F3|M}q*mfIo79Pzs@MmDSB38^{C%N&O-=lwmUzFbE?>F7G*7oQOw%fw>
ztKI#$e1F6;9{BLYcw6~|=~u6Y=+FDuwXy$>2&2xS-pqCGd-WJ1RKCv0JY=WrylGnY
z`vX7cy?c@>I`8P`op;Wcw?tW#S4Qs5`mz7=<n4RYtJ@hE4v4&&2|A<imd2(pW@@T;
zr5zry+lfS0$;{ry%)q_*-kNtw2Tiis9=JO#e02G1+R_=IQ!Nc5D<fN(|Es4JXuIa*
zxNg_$QUB1(%=>|1nWk9JCqDLlOMfVQXt!1l>|S)o<YD>I2_kFm_BEZ%Icyi@>^kk2
zG$#YYo)sr9NpEFMxOC*sw#9<Vw<mC4Iy3oJ8v}!Zyy3bZ2dDJis(x+2zz|iCmSp`c
z|K;T8+18(!cPZZsIR8>aZ&IPgrjYyM3=;E9ua)T~uXTMfsY;09bfW#LeTP@ZXfRw!
zuwNqgyXVTXYbwl>t2fUT2;Y9}c2Hc{Lra_aUwp3!|9XAz>fP>>r?qPApD6Emw{q82
z(1m_8nrt_-FfceoFVsk#xHK{O<6cLWeIMtjoXmHfmbHtCfqVPCHT%|>uilXMqxNMo
z<Da9~O%GRX-o^2r(-|~K;uC7~qCS;r`?7`vdy&Vi|K6SHVDJg5sDD4(>VY(SWu&aM
zK*KGOr)+L3Ph6TkBiP&8y)x2rzejRme>rFCiQOS*o`*3oG%%isZFxEA^4__V_pEu6
zc_|`Cs3Pf!)Wr;O28J}XYlhS38~FKqPKwd56<}b<Sa;&m?H{(D)(>?y-byRcd*}bm
ztxVfocwgDFmnZfxGW3MMcs)<$<YLXN-1~JZv8PVI3Z0~qHIYHb<&W5A`OxzZL8E<H
zm$>)KrB81R?8@F*z4`L3efw74K6(08T4HIZ^Sg_&J@fwu{P};n_jcb$W(Eee#PcSg
z12NVrc^^LZHT&cp2OYH<3GO~dhMKMS);I}v#*02?c=WLG@z=D}v!FSjGY5TbKKNIk
z_ng!rTB@VJn)|%k2ifQPqSA~BQ}leeKgddLU^tk*H~^ARzHWNHG5*1k8_GA&O`V~x
ztMTmKox4{+Bk4Eh-spI<SF_<|=l=VLuH-(AIx|V^h|cWI`<WORK9?+vd#MpC7Wpgn
zWitbVLw3@y+dI#kepPVF{D8*Y8PnF@IsS*sDj;R$XD!pGsijt(+^IV6&ayD@yt_3a
z|LGlbec7PtvI&)M+^-hfw05&J%zAV4+LY;2^BG=TYySAAM`qdEj@8>ms;lSue|ogN
zSY+SAxF2R5fAjg46&NdjRgvdoV3^TmYs|{P;2{2pE%HXopA?70iB8SG?|19i25%8#
z_%ZKm+Sd*D)*PDku$i&x=&#znk)V;F_Jg28_T=f)ue3ZT2^;U+8eM&6uf^<#wv2Z_
z)G^GMaAV7rUCck^?w2|&(kQRx+7>jO?devH6L)pb>TTb=euJg&k)%7`I&S-P&pu#a
zXmIP&;kDf6@5Za<DU)E$zVW5>6`}8jPuopHQdX9WGBBJ8u*t6zdp*aP@B6g`28NuI
zGdtf}7&|Ucy1R#Y@h;K*o@K7JoG+$*e!@`l_L|-EYey!&=&Gq}c)HX0`PMzN4wy1I
z=)O8;mNb8&+PmIs=U;BVp;`F#?aAaU4gJ;KDxP+JuNLhVEed*{l>2Od$N%l+#yii)
zew@w1z@V0VJ_J<aPMzQrn38#;=dZ64gN~PnnYG@gD+dD@9=N_ft0lrvv38@T&Z*={
zD*NFhAYz|3S(QrcHkMjkrlY_5@Q41$yCN5saxdmI(7bp1K>wTLPE`jsX`YImzv#{Z
z4bjM73hV2#EAQ-XwtBMJ{QC+?9tMUBllJP&SfJ#ce}(_ft=;cUTbktsHs`FHaf_9i
zf#K^>8CJ{rk3Z;~<7POp?UDJvy^VKHdB%lZ^UTq`rW$OXZ++fyeN)~~>%jic#TOKx
zKV^6k_2TKeW8bdzecH5Z)(_ha$s6_VH&!x4%&`uRJAIO6ogl-kfWw>Re)k;E=v-a?
z$RTF$J_-AO7E@opy;#?=v_@S&H15u~9?;mfWc4yG28M=pqLEUQ82C&D8(b^mQ(mrI
z#LM6y{Q9hx3=6OCUponl8GFCKKKrU-Z=~&vEKt*x@6)ELr4~-<^OE{F?_RpX^<(Db
z8(Vl9GItpGAMlU(fAEmy@rxac?i`pAJA3ZhyGLwoek|Ox#?SP1maDP_1H*!;O5X3U
z$Ty$7RFYkNY=ZbvwJvwJRfg#S3=9d+l5#%wR^HpGz4H_UL&=eQH^0r9xq!Q_`?hi0
zn@baSB{DE9UY>X4+r6i$r8Zw@CoEsbV}Ib2NaQb7&q?mV|BZh8GMwqLd0ypL!_1(p
zwr-zo;a90oo49Oa?fU*XwQruUa&mw2*~tcW*R$s5tS#W<XJD8y$rg01ql3ItQu)NC
ziOt`@4OgQx=V~XZ>=%oCB_Pjm;S{t9KUt-6uFA>Dfh{*V+xOPPyES+29Amzf<9~R1
zUCg<U%NqP*CHxvbo<9A`#B&mJFzX+ebrV$=Xu9Xl`tMXO*OU4@Z_dHHw;I!0uPk7w
zvj&|g+mIX6QGGzAb8(LT8{f{zPtF?`Zb)A;_qJx72?N6gpNUHq;~!2=ygl=`lK0UL
z28I_dfA&qc-Y~be@@|f@{_23qZ;mMBosHTlUtYXt<-9p(Kdnos*yqdm!gb<O{#Oj8
zPCPAPN&oiUn#*un^<2dHkKls#SI&a0&F4Ap3jBXNV@Fl`k*oDe`m2+Zzc|Z(-o#~D
znD1Uy8w?&goiWAsGN?S6-=)Lb%fcrr(t4AFRjN*Z(-#x9KMV{xse2>u9zEPA-=lKo
z5V#Jqii7p`);viqU3}4dxy+yU5jratNa%l<#I4L?z<KYwgDlq>rg$-XrmsKuJ#wv#
z+-u~e|LNY#h>1%Ree%;wgLi*4(_ejA^`3?P>C>-_JSQnTU%fH8_y_~T0kfn#k54Ha
z+9DDuHS5s5+1u9c?cRC!gYEQB|Dt#H-xp_KIKU(lDfP)t{_NKW^Pb*eVz|Iux@_C@
z=c!M94115(X8*Lly}SRXNXdD*g4!gr3%sDrbb0H=ySD=4!me#J5qixUD`nc?y7}IE
z_g-6uXGi|!)_(F`;hozufAakc{DoiNcCP;KaAxjq?@1~3Q^YO!@~7J|$Z~9*{a&pe
zWci{uGxHc27=DS(;ylu{X#L@3vl!b?a`krib?Z!h!pu;TwKuXhGCypg!-4fuf(Mq=
z#u~4Ijl-9H+Qe1K|2%D*aci6Y-hdwQ6^|A4R|hMz8pLh9*z}b>puJRK!H2}!S^tCD
zo9?{nx^p}4&M{NdKbm&JT-&x6TOaLaV_-O@dQEeexvqg_(zLrfW*+vvuy)THzR4<;
z=@HSOeqln!xd(6Wt(?c!ygLYV>4n^l`ZvdX?_@Wr9oqMGpWy9TfB*lpIrH^cRl$?@
z45pUaybQaAKgrDR{eSJ=)6}Q4+tk(_v1btTpR-Z!egwmr&Z;wCpMH~E=~?si`M#c?
zkCv@EaY?%Ht6#_J|Gs~2mp{LIjNyp~GXulq&FQB=bA?_LmzEoL{@m->?#an%yI(Z2
zYL$a7!-eILD(PQ@v4>XM%OAVaBJ#tQ!zLJK%-yp_Z<5N-j5O<|5513n+Eg`F<>bvZ
zd0a0pw_aqGFuh;u5X;`hcj(c{>#Owl82c|T+Gvn8i}A~X6PGTeysRrTH``NN9Z++8
z>!K%Xf7&uKFvRXOnPi~rI_;jC=cklg+sdX)pPH8TXYP*Z>SKHi2@(9qX2*hNZfuel
zo4qu6*R3OZnt@?K@y7Fki7DHkonh%c^7obU;%!@(D|!F@_Dh-XW>1XGtAc6op6@AV
zc;S2J{+7BI$8y(f<+T^h{;=27i{Z4`>vBeh(~IPajeiLr{I<sWm-4!MyoF!$kL<a6
z`(lhh@z*!9Yzz!O7w1KSt`YNicp-M;(s0j7e^zB0`y6Ul@#IUsti;gZ2yW_Ggl!Q~
zd-!@*;@-$eV^E7`vq<-xtY<gZs#jmwYjJrBQ^o_IM5%_r%TxF=4p}o#^DVrSw#T^g
z<U+xuc9AV_-R4c7`rS7EX=>>#m6JO!W<2#|1{KEIg|#2=H5__!V&VH^xA&|$_pCrU
zNB`J*f1Xrr*A>ZD2Vb)>%rLqi?^$HklpV20B7O@0mHii{{7rgi&dG4V?`Hj*W1ewg
z;l(=ye~Eryd0*<8pT*~^i+Aw<F}W@M=3eWr#6LaH7mNLtXZYgFvqYNx*rZu&ZZrNk
zymw;7#5o=eX^T%>I-j;#u=3HLkT(}Ob}Nb9>1F<SX}{JclRtldn=H#tD$Bd#$jHF3
zEaUtdMh1or+zU5kOkAqC@Tad%9cPcX#gvcP6PHdmJIvS+8<8J2|N87ujRilV60Ibb
zuFr1!npV2=-kLR_4e||<T}RE|O;WjOet2#W$3l57E=J#${kiFGJP9?QHd*;hdUE0l
z1MiP@&8*zdH=n6juKaVaN&aKao&_f^?GB88&>|XHrJTRd_<vB!{2LeU?n?nB7ls$N
zw%%a(IoJEEVeU@B%_{GL<8<p3Ztb4?s+F0+AoJ5nH>GD`d*gpue0j6z#HI6__c=2#
zlxfX#pJ;xex4bgaGWrbv(Y>DOOuIhHe4h7W`V5!a->-N-F<E-)e?G^!AiVJWT7y$_
zEzX~QRmAq)(f`rsg?Z`>^#PLw8KynIH|KiUgy~aj-RhoAy;wQ1>Wpn?;aC67dv-p2
z`sh`CXv)i0<IFD};DJle>SdrS%VWEax;iIL;a6jFQxv&g8JzMmbK+9IGzJFi?f2Ha
zyEgl3q7TDW2f?!U;PeG*6+-3*w}D1QTUEcEEqX3<>Rm*RSBcT;*-UK<I3y2PXiBk}
zY+ZjqN9W$-OY934uJ(-8b+$HrWUo4Xcm213UB%O<Pj&izTI}C5d7WB;Z3V_Rwb>aM
zKz$DVZ-*139=#9iSs?w;=TPsAr;qMh%-=NiHfOvw1H<J~f%ET;m|Ul|#Y{L9^W{<S
z#HH6_85npD?p*io&Jn5158{RKzpmX&NzY6E$MScV@xI;@haacc$nSac`G&qgLu7#Y
zBJ2M`%nz#{6)WE3IIw-q&v-R?p@y9o!}m+R&Zu*<eK!51{LAUL)b4T?mhOL<f5bR5
z->um3jH^Yzx*RJ5gU_XTnV`&g-AS=u$=ms1OZ+62o#u)gjO7nGHY<6nzGq-qy!qam
zbxDqE{nOaXp4CPmO7Uw+jhC%`<ElP-9-bZ-bLPXmhJSN2F7X+7r7vU6IJld6ns4B{
zv~z3Qe{!BbcE0ld7yTzM?9TsHV;B1N^WCRSRa-lDKh^)Vi7R`_cDJQlt6R4*GBkjC
zz|#K`3lf9Y`G%+WnWV+6+q1@L?%Byp`wxrFab{$=(QEzq-_&Iv9t)idw%4l_uo64=
zxhSlhh2cQP(KrwPv=zb+&m8GB7Opw&duRSK>F{HP0_SwiK(hn8n*W^GII(hKIUmDb
z?M+|&^1u1rT`78`{LTw`h6DE_KJR~%@J5`2f%oU{`#rU8b;s-;b9d={J@<0rj;iN*
zN3Z_ZdbWO_<YiOC$}A&B28PL7(_ewg`R)q_TTfgH`0{n@A{T=d6IOiop15@StOf>#
z<ZbuX*sV8T-Mu4iLJrSiPTuzV$o#Nycv-)7&l<nv$8oHFzZX9Awigj(y7lQFgT%x=
zYtD)Eutl8`m2Pp}9sP@8i-O-t`y>08?mJ%p?(+=&JibRa?O5}67pK@vSJz)1zHy=I
zTS<Ech6Vo9Jtx^nC(dXK5I69g<iBjSabkY_o7BWlo2<6k@7#L3Gv1zo;c{8lzhlbJ
z!sm7xmZ|kTZk_dofq~~tU1WLRo5dg2?pbq4a@L&%CC`G-%wAA`&eObH_I$v>`?As#
z=U0jGvnDtsDct2OeUx9z{JC9%+0saX;m_G-M#hGtAHVOnd_MQ5;O`#$?-tLxXA8bx
z@vdWaz5B$aiSM6<Kfm<iK<&h(`&=0r8cyCaE@fa~=<%JnwA^)C+p<UdZ(nJRyQ}W`
zY1fHM!LFqY4VsbpVdbySYMJ!>(Dj_8KAC;*PjDrf4iC7!;7ao55$0bd@9*6!`Tl7W
z*T+xIJMW4c%;0wBHPE_u`heNF9yy(9P910G9^WBVbK3Z$k>S6@82yK8>>~GmN_FU+
zUi<gnTASmBEDQ`UT+b+9ox-#1X#Te7=O6DdaSP0LyVnt!_jKinAVY74hPxBAzsP?&
z<)(H_;_12a$3f0z3=CxtqVzZU&9yLg{8az-^F65^Kg-9a6O_F7zp%U<al(1WoExT>
zH_upJlrpE@%SNQ(ph#rZW9#j~53Qf)xqWx`u8f@9*~sw0*6>^g|0~wYNZI~hOpFT}
zXRyD0UvJD_8F@4PiT<ZeR#$$%b3GTqyWqqn>%y;oovZ8J|I}H0<vlp<N)i(TgIezS
zFN_Qf24Sw#+MMJSXFlEA8~Y-}<5VT6tn<0V$S`Bc*R;~z;NEYqDRapyw31Hn(<UzV
zHv3s`<1DA#?eDg{Ct@%opv7l#S%Y9l@3Ep{#vI4O$OsMBozcSUpS(ZUbE5mn6g~yB
z=wBwkrDd;G#)W+g7E{n)U7+_j<>liIOK<;>V`5-<;k!orTSiNwRF@7fuQd1Nt1J7H
zrgay}&UU|auXiIe!;Rh@a!>4^zwhfkyyM8MSNYTI_@aM>q^vX*XJBaV-g)Y}+rHq3
zXIkF>X6^oc{?+r+*LL&nrdpiSGb^7t{p!Ojdb8pz)&Cm3FJow1w#|2Y-w}sty6YNk
zm>K@`Z2f;auJ<n!;{wIsJ!fN&&Xf4S{<}wi^EHXS9aY<pT-~qytaa|HdROo7A9Iu$
z7!IVooe5gybWBG?U2BtxihxYk8=mNDzN6LMI<_GVVhl4Te@!bDzRvUhu{r;RbHSi8
zZ}s6HyFpWZGxi3QsLCCxPv2JkG@y(>>EeRVH}6UqY~fbsGvK;+{J=KQYCf~B4G~HC
zXXhSycK?I>ny*(p_IL!od#G{h?%w`;zdwsT|Ni#U@rBISC+`Opy;^H7Cq^CN*`=Ol
zSzH+zd+O`^mRsr!47-=Edt4vW_s~vkXANvEfYOiE5%IC-nHU&mEX&S5cW&<O`j}-F
z@8zf4@!1w^%dR-*X}(>5dHa4#V+H*pKdA=Cqqb+&7vEd?Il_BhYv<O+yvI=-40TU7
zPh@O3y7BytIkj&8{LWoG{l=KjC1$VqqgVF>Q(ii+asO|zt2_D46EP+RhRNI0xfmH3
zW;7{z?-z-b5{j-1tPqjnKDzgwx@VDua1jGTS~{eiuekEPLEUeS0<N!rH>O#@J4Q)Q
zQcESeug;nM^`7OFyZmQ08uaEIO}fwUW*Sq2gScL=lFqb6cizTC3k%Q9Z2GondBL&b
zC)X{cU8mKR^=%WE|Ga6_zj+Jytm!ko{o+Wn&J{ieh6}rQ{QHrx1f0sM1HUg@U7R${
zc<S`fjJ6-^m-aieckM`LVmR>bhVwuE=kJes|EsBfUKx3EJ0nAa`lFvB_ZQ#Y{C|hR
zxu7r4?4EfV=p^6sn>T%GREvsX+g#~R@tfZn62z}Oc^7x%^_ArO%0qMHb!!C}Dkd6h
zFl?~-CVAVkKYd~3jvM;}&pb{2CfTmK?w)Po*Y_Pe*F1dx@bL@1zKxTjIT#qu9GaI2
zIxE=AX>pU1x3lBic$3ODaa(oIPj;S@4l8-DH(A8aFf9QZaEw0<>bPxZSNvFLf1T%H
zxp19*8yD!Povs@f9y(6!b+oaZa##9nb)(*!cDJ`~LJ8$bpFOjM7jW-;ov`!B{aZKt
zc{e;r`l$TDh;?WCa*c9(yJx9S&Fz&pHvW$Nv-@1xx?Xt(27?U(|0|4M7)T~f`zx?{
z&deFyWxKx=zUY{t%5dOatr>f~Wxcu6{U<#a?nM`JGBA|Ai2C0UccVV0Bf|N7WLMpZ
z{u_-KrU&UoW}6#^9ow|hGtznD(sN$S20N6z^J`vzdt{@pZQ3lRbgp#YmqLaGVwU~-
z*0R4@nH+=-zv=&9BKx~X<(1*}Pcp?)5*<6L@{e5Izxc!@eb;GiQi}84$_slY-f?1J
zND%wx1KQ0VEFxslrNettZ~u)at@Rw8Q{GQjvDDf0MN7p+LWv<E^V;mI(?QGq|METF
zKJl>Hhx&gp#x3_ff9#cz294KfIu%acv&N};NqzP^BZ>A+)f1+NcGSzCeRr%OHn4&#
zVY`VG^R7+nD-Csmbxy4<$hO{D{(RHZR8gsIb98EDvM&56PuR$@YxCy6KVICm=ij*T
z*xcItem2KJ*NiYUcbZOoGySlONTk#wgYVB)iziJp7EGSDJ!#t9imvyv3=C!7!vFt2
zUi0P09jo-ao&ARWLJSOSqQz|MdaLvgmG3Kk({uE1s_B<sh57S~miN?JKa73gBT&>I
zr}mw<A$F7B`{R{yVf$Ls_0E0#dFeP~!>uPaOb3ka&iWq4cVz7}-Fe;NpP!}{NtPY{
zy;A<sEBk<ym#tP0_BepszS7mpgcukaG`V}{Jyv_KZ&syP={M;~?Ie|U*J*J_7sW9!
zbZ>(Uq)+Ink=Q?V-gG-Pom;_^RQ9*ucm5IEa{u@xcF+=_h-o(#d{*?Fw0&8fLBH!X
zt*i_Du1O7gb3s#2E{tW*&Rk%Y{p8p9G)QLS-q(B9^ewOYnB#l#an+vWvd3Qks`Ej~
z@4J2N!@DJ0zBs-(@m1#?sJxn^<n4U;WVJE-<if;NRl-Trj+GxuQogbKhRBS!oe!BA
zdJZ>N{<z#&db{FC+aGmr`F6g$rxvp^B)G4eJM+ca-8;&X(voT(Ev|gqTYKv6uGmj!
z^EJiy$E>sX{wXx>*&GuFYvJr-`<ab#bJ`_5&OA;{OY)si{F%#vc|NZggU%$|hHv+t
zr7oTKx2W}A`EPIe7O6RFZ!s2rjROsFOkAq?|IuF!{XWA9;LLlhex?@#1H-cgCoWB}
zsT1T^i1lboOms>*8|t%(k>P<gDE)mn`vtUDN5s~)yR(6-bfZZ8bsks~C1Od%47(#N
z_p6xL%6D$~Ejvlc@oSC7rYpre0%ld2mMxsYcHqOK``VW0zy1*_J{GxP&l)Ge6UxQ$
z-Wdr$L3^QucZ4m7-agA}tJuEdPKnoo-=9zAES{%w^5muC3;UG3MgQGz+`x9~wAPdT
z`=jri<$oL-7uLR!!&F$fYgM#**(q@6db(axutoKAgCfJUpC{*qfFh+-=X+(<qnT5!
z4Nsr5IsP}FfuYR*-@o|SoALMe&M;OoySP?h_TJt?&dMze3_NNz^;X6gSAX8K=FtBC
zm$v`2IkK;&PXDjwoQ1d7DtYHWuI?^d=N#Lo<SpNGzv#%EsjrvzJNwp2GrYMq_1BKQ
zoWGABf5mpT+k%53_sHh_V|)zLo`>B@)vmviylwg>g~IuPzRgunCcW{iaQnaa%Ix<u
zcl_cPiL9DB{c8Gsu|H?`f=dIxZ)emP7#NC$CY?B(mOn|Q-E-0&|4C0yvKS|S_nfpx
zbCZe5qc8<Yh6Qb3)4qa+=D_0y6_Zs?E-p+y23oQ7VNd(>doIl2(_p7xjnwh@e~sC|
zqJ2}f(EQiUk@sT0A90)hw(KSIg$qZQtP@MHJ9j2kw_nk}hUvOzea&t2$G7>!G)(^c
zPI_|l&i1k;oNtt7ey)1AykMen+1tPOKw<MPX=0t4lK$%15g~K)YJ|!e85qhm*Lfa!
zm0-2*Oz8T1Z9k^Zcv^B~=dSMGy(N#MjC~mz3N<!;IT-TisAF8%bmd+1j!rbbw7MWK
zR!)?GVRymW?GfwG)xJLO93#9x`j^EQpF8O?T}$~7h<$TDYx@4r(VacT=TBd8WldO~
zv_EsJ^{--)WQF6!dk?A#vNI-lf16wPuHcL~J45b~&nq73y=~pAmVSHs^ILYww!ie>
z`K{Uh{_nl{0^#)n;s2NKSpGRJ=lW5<mw%ZV7|xuU_YzcH^*Jd;PFx!9I!*4F?|paS
zvpqFllb)1LT)NzFBO^nD*tOYL&sJ^bI=OlMV{@@HkXbm;dYA2Kpe-g5i}tMX`@D&Z
zRq3DX>>{H*+R68%+3&rsywp;CGs)1%xBnHl?=8@n6+`ia>7gfz&-te5eoCGA|3Xix
zvd;AHPs`4I-XwHAro-a8ySIG%ERiSo7D_zd6ZeLJ=dsJ-(=R)Cb<a<?<CFaia`2m&
z6{5@BBz&AFE}cJF<!8dKs#3Y+X|qoD#mrf3UF|n_vpy4pfnJhXeQE06ZPG<<Y=tSl
zYzzl3JetY*^UPna`@i_l`S=8PI6q1Kn&5k9x4)r$)7@gfDr@$0&3f*CZvV@B`8eQm
z@}GAs4Y9(^FRurlIT#jRe&`7s!v)5T_vTy6d_Kx}K<tfi-g6K6j;9?TjXzGW`eJk2
zw(x76?2#S6ZqCWy)T`uu`2NxO$tsoe?p?iXxU-dk;lP_WGlM|oieAnyu}CSt$NTwa
z*Qw3v<nrWxKUwAH(i4}umAplT85v%jsM@?MIzLSOVYIec@)UzpB7b+Lahxx%Sa(*5
zfq`LzOJ$_&F{fp-RXqJ{SgeC@Tz}`DGjGoMkN2t;2<mqxrS!)7ys2Vb=C^VEFOlOh
zJ0gC(E`0g;!hwltM>j-VJ9xW#`t+$^Kc30_b9+Yl=|0g&sjeb>-70}!<x32{?`XB%
zv}aA8X~>H^dy{T6FdXQJnZ+}sN4wOrN<3-W{N%}jZW_<N-aoo?k@Z5y2jY)884R@e
zmp#`1HaA})ZjG!$dWyvJ%1F!kybK2xIK>;Lt5uZ?ocFOXH&^_~b0@ue(%$N6+fB62
z8Rfm#ICgo)#u?imeGi(yktsnWY3;j1IbXEiyvzqp^L(^D7qmvbP#tvQV8gUGtU3DI
z&s)@gla#((UwHh;Rd&Hgul|dL|6i`;eR$`o;IE}(Z!NDyfNGhkwwE~>7!Cxr9BEea
zcHTHQev(S%`U8T(A7`kXoUP;?-<tMp7B4fy7f_ouE<bGg>$6%axAu45PckU`{;-nw
z{M)L{ySUD8lmwL-(=_x~Uyjgt`d>4}ic4zW7x%?0e~Dau*zZ=s)q15|tUHL&fam_%
zuOhC~>Si8ly|g>q`A)}IWu1VDOSfM;IQPejhrer%-e_04{MGh&)1Ei;ns)sCz1U#;
z*5fB?KEFFR-A>H*LmndogPXFM+V2Fngg;4g?G{o0oz4_3p84R%lhjg~<Z15S^4)S3
z_ZS(Dxxc$$|Fkl4ZtvSg&$O=b2UsUW<UhU0#IS*RpX2ZC^5@UqU7>4SR~gwFCGubT
zd2e0p>U2Z7LcK0fd-z;(Oz%&w&(#Ta*~RN*8Vm!g3nbou+O$iQd1hOF(PsZ?c47=A
zPBIJ(Vk=HuI=}I_{q2qCE$X)y1xjt)C&6C$HL+#Kuem#Z#UI`EX1V7io8FhZB+iun
zImg1lFasLgms)!FD|xT)(y{fK^u*j%R|2#o%udzwQ})EA$6cp+Jz-{$xKXuv7ic!%
z!@>0*Z@;-IW1v(I+UIaJvm(wHbP>~rkcFK&783JSPP#Q;zWC!oK-qeeFRPwkEIwhL
z$Lp56P+}_ETL$J6r(cC^-gxVe?sNWmt!ZoI6L;>>-z_M$uX_49ADvCr%N5F%?`bLv
zo|nklW6-m`GSc=*YUz%a*|NKDTrd)0wU7E0@#Vq36G6S=3=9n$cNVRaU#58F<K-i{
z2D3Q(JbEJUbw+-BG#ND9yf`KP=kL5Vmw$;KGk@}7h5QC%`Nuca85ks7&SaORB}pXC
zEfxR1S7PQ4Illev^)qKX+8q7Ee(dPXV|jC)r!H+j$@4U|RQBJ-FNGNoZc17)98-Db
zS!bZx%yHjm{@d!l=r!+E%%vF^8uV^Rziz8NHnZz<)uu0n846FP*!VolO4m7d^}c?s
z3|o=Xx_|y3V+B6x${#Pw{i1axWS1FeW=Q7k%uvuSoi!&e-B$8GKS|}Ms+vm1jzfB_
zP0{(2R4jEieQ`P@#Bku<TJzQIU(-ap6l9L&o4N+wgbWma)v}rX@TUo=wR}M6X=>?=
z=~qMJ!WRBGuwV4N#MI|1o+dRfJ#%!HCgj_4seRP-?Vq)C#-*c7J~O`O*8ZFJIdtOE
z_(S$RZn?iJBj@@)iE7O2>@InpoU`O;O-%Pjvt=LO?}*W>WndGzC(2(LDfwCU*Rq9A
z4<@lMjQ>^&+LG8=-SlXafo$FS!#@|#Twv26+hzFpKd+@^w`@yYXCxCt&xBt$?6>I0
zZ?><D+}mZT{ONDmYqNQ|><kSHZ`8~9Mdbg@U-5X`6zO?QJLLaF`tEhKG&gZ_op$d?
zRa?$`8-4A<Gm@Rp-`>-!m5~bC&e34F>(g2585_3mKY99<)jMZnp+vh!RZkb+$zibi
zcC+E%m4_Ycc^S5)`Y*8lCYi1_Z=!wtFAI|=bB*+_KYG<H82-O6LKw7+?D)l4ncAH_
zpZORV46Lh{fzDvrm&a1Cx9Q8O6PG3={I&9&<UdJR;zaNy75Pcv;{0+z%275`h66vK
zOUu*tMz*qC0u@Q}`=2hz_y1V=Th*rip{2<q(8@qiL`Za{K1mgw_440-70-LBo<$E5
zCFW{Z-`jiX#A>^ZA^$>BUapPV;O2Me{$0*k{R2;qB*mqtt()e5P2x}Qq6uds+z&B{
zMpmis-xw^Pd^kc)Pb?yQ!fwm^@ybCdFP&|=PZ&5QzN>$lTB@FAwI@Iz*7<bY-Q(}w
zK+9V@f5v@JV>_mQO#Dw=yKqwK|8u8bg&7}AZ2idhST5<9_pbMitu`CackfDOXvp07
z?e{(#{ne`t<8DlOnp!$X#q-2utEgWQJq{hN9nK641~Ybqf4JAd|0>qTxNy&cYPq@j
z-<1Eq<vF_GUGhAk$0>QcisjB<H!A$N=ePUk8#BIhGAtH;{VI0WOvk;vzb{lq&eeM{
z&t3c6;btobhA&5MPMLrCK6}H>F2m{mX*-O+Nv12kGqzH`KPPIgveLSJ!jE3n3(r3s
zd|$d-0kr*P##Y<Q+zfx}zrA~Jk*Az3V&V0){G}L^z<v%Fb%wyYyX-y60+NmHf-`y!
zgs><nM?7*|uhhxn<F+A%Va27Cg4KJ|_b5j$N;~nhnXPWWme}=w-|n&QHkA1C((X9}
zL%f%7_^eev?Kwf0A1(f}o<}g-tecrVf7Yry*{h0H8L~4t*xAL_?fG5u^W%@pPmga&
z`(b(SZQ8O4rnA;d*7<#pyps=E8~kF)G0T;fId{ueCcLa)6w%hU>~HDqkf$$iuqPho
zWB+@7t-mm<V#35lf~!C7VZ5=X^Vt;d&$8#P-w|HDGC29p96gB$Y1bv!UpwC|OPVj)
zedv|c;<bKjw$AUH8+(7(^}rdwD^lve`yG+{=quuqUVP^~1B1hT%l#}rKUCh`XJz`P
zzimlQgh}q6&cgI!&@O~uzRCaJ|K6Lo+cREY&wL}B_xIbUH}<>sFWI?c(sTxf17b^M
z)>Sj_3)M`2<ZmgwTk!Y3@^8xJhvrr9Klw6t{dUcG?;iE|kF_5Y-#q@nv3Z%+)s>73
zrq5dCQyQ@D?76U|d(WQ^aXzv8W8RX&eks4{=RiA;HYmO_TpxZby=0nA@;6EOvv$e+
zovYus?D!QPwD#LFt;?Ig?g<w^w#yRKALF@Ye3_epf#JT`>_h3kq05vu|6i}swfM_=
zUh#gDZf3UqW}!coWGymQ1vREKG@Pm3^{3+V%TJFVE<fG>vf%CdkLS#d*V`PrpWRks
zf3&tVSpl?#!Eoj6Jblq)D{jAAlehcImZ#^h$ZXT-3eRiN@i}hCFk8emc^?0F{TOZ6
zq#t76k7kM7Vz{Am{^nB+h7<NnjQ^ecvi^)Q`!UbY_rLyLo41?$XvAlsvloLHA8${V
z?{@!WchC8wUygs;?@MxL-(TeUmylEcXWNzBa+&HQ-`dSzN7WfKFkC424P91zL|u*R
z*ZJqA=|N{cIh#zoEB{g=C*+Os(%S2%Gwz*uHs|<e7KVm@MSU+4)32rZi&tKmUbM3M
z<<!k585nZ9=XB2XvJ@^aQro6{ROnJ&{;ls@#qM<qS5NtSEhP2T#X{R}g%O)Y9`6)9
zea8QYpM6iQjNHk8Yz(#PY@4L_i@FwyzmLrEyjwPTi(2PL_6FZe|HT>HbY8u_yPN&m
ztI|M`PdAN2w%@&C_jvKm^f&s2U+)Tp|Mv=>nyGW|`>RC};_0B<Q4Ut8fezq%a6CwG
z$uh0;vsU?d2Ermo*51Io*Su@dkF6_DiN9=c44%rT%*eoVW%=oT@%ei8a&^1@{7~A<
zd~ElFGc}(Z_Fw0Dxv%s0@mY+ZS(VmZZ{wDvS(M(Ey`Eb>an@rI*N^ixdOmK`=$ihn
zWzC*`C;OapM{el(&Y4=@VQl>^ciQ)$iG~elSKQ9i=d${geDC!Sx$noaM0i>RyV5>9
ze^&Q4i?`wP#BYj0ieGOOCzKk$kNrEfDAu&{{>&>p|BSwwe|NKD%NGBAY~{fl@0ovJ
z{&mVqkb&WZQ}EQ|QUOkKHF4!ybDe)}&fC5DhIArt&>5q*+-{rQ%(9nBYBD(dHw~>+
zHh=GU{&J*gI=8(3+U&*082*0UmbW|jGc&^hGnZZo+k<6~Q=j<6oSb>1XT{#>*ACXN
zvfgO?vZmQIPww0?I|k_wM(1YUSbpB+$de;}^8WKo81{-)e|&%TlHZcrfBb^XmJ$!|
z?>Bv^<0|!hk;cEZ&lwnQ3z$kUHWXUR{btBHu=>QzfWrpDg=SCtH})SEwg|rzEEsMt
z`P<@6$Btj1^6GhhUsY+K&D71HUWmq@6i^^1m==22%AS~M&NB1JdB>a;#(CcZZ#>ZA
zN@rv+aGI}YA9sd3?(e5(@hcOLCa#ediG1+h)cFo*4Jt#kSa04X|E|e<JNACH-MGnd
zrsjvuksmErwf`|+cX21v6dQ%3Pwz`DSn8YH&)x9#Q%>x>w$_^St!j1Jl~ZROae3&L
z5aYMD**xhU!;d8^y$UbR^SWRA@mzxbqmOz=qN?@R>i;+X=6GY_mi*xBxzlI$$^G7A
z<M*afwmSXhsx8yY%opt!XJ9xH-_;m1%l$;t`PX?%C2lXt+r7oTLM!d3h2UnJ(z5#1
zch)m7{M_+r-Jb;^)Bmkkdw(uhU;owb<<+l4^{(3#?Z28^emP`mjXVRxw!~HZH~jYc
zS!$Qwp6h<D#rTE4NcMxwKRec!zrG-sDi_4FC~tRi<s#{i?p>+BY`%oo<j?6mZGX~-
zKajzwaLxLMeoG}zq~0y_joRGZxTZe}w66Wl1=lBBw`a$%H<>5@YTN7^>2KEGNZ-@3
zL%hFOUw_4Szs37Hcl^rhSgqgj*|+tcW%EN>b_NEC*7-i5hNn$jj@G=R{(|hQ_*6Li
z&Xvks*;RCdgP~zPs9ZDFxA}Q`cKzF<RSz8;HwON!J}dAY)K!@<e{aU51Bdy<{;mJr
zwYR5j$(ysYdH(XpD4*4+IMMp(hW5udj5m6mAMctH!tg<>`E?5WB`FiG`<B(4_Z+s^
z&(h;@Du3necTs_ldVkg~G}vC;XdATs?!u-o*^1Y06|dwdxm%|GveM++#v2>&Un+OJ
zTlR8ian|`9%ZoONQugz%-!|@cTg33><$<53ZEIF~eK-H$n|Xgn-tOY(`xg9v^!b-v
zQreqipF1S|kLrXA8=elnZys&lUD$5u@!OL<ZC2whZ{HeUy`Dp@pKsewxt5w)Tk|01
zVgJ$J7h5+g-~1V{{qEd3@(c`Sx<zW2W-hYl`R2Fu@8<1=Wsfb+p6)pQDDa8@7r$iR
z*>jD57E4clwD;w2v!|Y?)!$Cs_4b=`*(&x|mv0<qQQ!{r*S+ew(<Iq?>b?GK!wJh*
z-_Fy|lCqf2dqD4Q_u88HIfWwH=^9^zl3$!#6BsW3aa!>29_h)CG*&+Qdc`hz|A~tc
z(!YCb)z{sVe)LN5X~gmv?eh=bSVnWi2PwD41#K5&xb|56F$V(!!)xL86?%&tJ-pU<
zoqfmu=(yUaf+Z@gt7p8{_Dx`5h`6@=bbtB91#j1@<?i3}^ZKJ%52rTD^ypvXnXhLb
z1&V)%e{otdO!u#7SZo%(EcmDQwL!7{rwJwXS8~mZ`?537FK(R3<in61wEeEj#5YST
z*FSdGTl7QrwB?p<Ef=lA)|4*3wDY|E>uuJa&z+u%zYR0#vH#q+LF{|d+Deb363J^{
z%KXZ+?ce+4zUcG12%FW*KPrdquU-Dmw_(lRK6wePqt6=KeHQmk->UNEe&HMc-+SI&
zvq_tor8uvXyEgtx*PLDX<!M>{Qw1xtH%V^D?%khga;b6=|FYlhmu@}MGX0;s>eI64
z*LNA0-j-c`cfwZg?-mRUw=aY|&3xixVZFUt^W0yvA~nCY>~%Wdl=z?ee>tV|tYy!f
zUoyENQrGLR=UzV|x9_v6wOZM(ux|#8C)|RkhJW;17I*61*<=OZBM$41*(sd%sy;E%
zUtt=%gZ!P9|9KWKoG#&9E_y$E&ATg~6Bozny)l+MC3?^HcTaZed_!iz@cMX>qxs45
z-Esoq|L@yY3cSxhXZiH_O{X8~ra>>XOS2ghc;`vFFfcIO=n2`NDC(27s_0TkYSx|K
z#epK~fd^*qxg+j6kxN%r)b(S%Z|FPI(3yOvV=WBW84d*3?D|vj@#Uw-UoJmA{`bo|
z$@g=ff8_JB+ZSP6v+K`}?=L?+PCT<7yp5m1Syi)|dr?87Q`hO8Cmt%@wETWDOU*J?
z$AQfzeEM<*1^Y*P^Gwe#7Bn$13KR&DyZmga(gpK*TXzR<znduX{`!Y}+dciykH-1#
zU-D?}|CP7jo%(+0|CQYB;oI*<+N`b*-%zdoZgC<v1A{}^qJ5XIoN@er^m*u+P4@HL
zgO7`B-XpO2&wNmBNc%ZoLfP>2+ugaVF3l5RaBxdHdws^{rAthY%`aTn%Uam>MD1Mv
zg!Lu;%OehR7jrNi5R-A6tNrU??wZQ=YpVC_UgeIy(LKffqJI0YGf&l@`PiL#c6Fk9
zt<JN}(uLDp-;~r|+Bs$R!as%#J#7*m`<IkIIsK(?T9U%O$@_JCz3-M?-t{&}w)6BN
zjkxb0tr!^?B<9~pw=w@JJv~XIJac~GgZlLRqn4t-dtP5Q39U4rVxPv+xA>gaUxWVD
z_j^s($vqe0yE8qqXqx~7gT&PNKA@qY9QPcR|8u|0>*6|c?9(6jz*+x1X8#TUEZ^S2
zz;L6@f4cnT>gSPvL_irWZjI=(?DlZAMdte=jE{gWGGI7x!{gLFzOxIal}|j~x+z%v
zVnOfID=R<l_#DjOFYdadhF$l0++xEzm9_4#w`DJS0Lo)|O&6{D)Pi!ZonEBzFLwLg
zQmN0&wAS~0f96_uZ>3shcDdPx{plAj{aTr~TiEqwwYu%}xa+y*v!8SH6t11kHTihd
zk>aZFeQ!Y*ty*TU`lNGh=Cv6YihV=luH=@#o8$BTN}<{pyK{VV`rhVb%(*{H#MLl#
z|5EW~$?^;g4L-3J`}a=bFTE{m5~}I{WB=<-nR7Bj+v_DR?Yy~q$MLzIj0_3Mm*$1t
zEz8vX*dF+9YUQ~jFAx2Dobj4@$t|0W|4lo;3jMvj<TKAR)#&9PC56Lpt$99iam9>%
z)t6`PRs6rPR`7Y`rQPR1nZ?vv_DVeS0Sy=5ty{ML$v3{I{qoGm_AhmT+he1`<9cdq
zcNVBsKjHx$6mDCtbH7&m->vkX8`El!>2^w-U0Gf8_RfCE$d1*k_ukjnS6=r|G3$Jf
z);hV;L&0bNXqWnKdYA)RjcsK=vj~*$dNs}!8~eBQH<_}#2EIAo-{y1Mu)A_c*L-Q$
zP)3Fq&HmHn-|w@#^6&KQdfA$-c>!;VK8s!FssH=0<mW|DLx!PYqxJMDdn>tJ>wj*n
z{;qP`<GbhGGGpHUFr$kfSQB*jT-QDSo$vIn3ks>KrBUft+We0%hdd3vTXy}^lx=Fg
zpHq7(wa(R=PTF6+T8ZEP;Lo!jAOG)G{Fmr_E#zt8-7?{${nalkO*H<m&D;Gu;`kib
zx{nG+_gefH?0(;#&Fjp-(9k$T%=P2)lPx+vi}l*7B>sLbQcSCqHay)u@rce_?XT|1
z@}dk1(c%}E%z3)E_t>+^8|R(w`dpWOZX@5N)h8IOWPUp^Fl>nQ4V`yvUVo|Uf1Cc=
z9oxArg~gL^aCd$E=eVZx$>%S(&)hQ2Uuh?3)Vc(=7QpFlnI_xE-#3mYd0)B-P8aU;
zw#-?=+aWdi@{ftl+vAMC>oV-@s@nPd+@5cjl6X?K2{22#>b_~M`z>7hpW(!j-da@#
zg}L|F-+ov7By@A-H_7b>>>j(ltew7a#oqUk_v07$t`>J)DDNXT2YevlOZCg3ak{?(
zu37snGDKN(_x&pjc=0jFaf!*f@QE1(i!-em7%YF5{QRhOFa7_g)3fXMc6>c_@X#*D
z#V3x>J{tA#z3JiQr~APjV1^G%e`}N+dgePvIC7Sf;hIN2g|nvmEDkhf@UNe@N#=c-
z&TFN6!E0tuD}Qm9&rMsjW1q?2=&7?7$6U)TpF3}Fm&|&16JP6V7xEX2Ogeu(aZcm6
zx;ydu%4UCWJ2k%B|B1QiTyd`(=j7I9)7~BYCpevnfq`w|%2Ts<z4hx_^y6-i(|*&?
zpF8t*JO2*e`(3N9ZvE|db#m)_jy2shyVL!5NptItr883ZX9#gHOxPIl-t^_w+cxV|
z*6t0;dA(!hsld5U*WJ#OO8>X!Y}@PHyJhoduPU))WoYoV?wR%Rn)u(ZrRR=ZwaHK7
z*n3c^JgHDVNWY`Tr|2H@^Zex#<sVlkR9`B7=iHU;)}#OWvr4Vtef8k)pWRljWO8`7
z?AqMD-)&yqTeA03$=b6{cROY){%PbcobdDfYPlFOhBZzyuM>ZF+iqk`c+mIwOlR%P
zw?C8SZ(QkRns@zx-Q%zu>1VDN&Uq;m{(k+z<5!=*+BW;h=Oce-v^zgv$iUEG`0L~v
zW(Ed_`lD{Y#Am;}Sd)COA^G3@@3JbtoU*nRiL(pY9hbOwLxhbXA;T`V?$4eJ86WaN
zCFi3m#lO$Rxm;@!&EnOM+<LhFzszG$&S$XkIXwNXrOavhU2I)a8@o1VtU6W{cP)3j
z{gy=r47Wwn>)+nge_qDn>vywni`m-S@07Z3ZJguWYL+->)~Y?LZok{5(RDqqajkdq
zzg>B|e^;>0?_9rbUEc0y4U0E&_tw1rvPa^RyhVy;op>+9KZ)NFDUaSW-91`Azxew^
zVT1FnZ{MaHK9cz@6_xhb1=Nt2m~r{W=Sv)1ReIl+-?Lsnvv)eT;c5PvM|HmM?~44@
z_hNhU@1+b3H@$aOZq1B|w9@|MZenFGQ+3Z}&QI&obtxuwt8eQa<$qGe%&@^QQ#N#a
ztd;(U{Ka!xp9|Xm&~6j>-EaQc_Jqu*=}GdR6uv2aUt75OYuvs&1}?drJBxQuJeOGG
z@p0d-w?TiNhs4gf>gpG_t6jaSH*d}?Ert}`d$qwlPcHeSB^$CCMO!r2PW6`m+WPs%
z?<^070~&h_&NB449*Mei@8Em2+ShSz=YC~AS$HG8rlsSy&)38oJ7(T1|JjvZd#n3@
z@tfp{6W=_3)%|K)wcv9{zN_cYds#(S7=CkPU|=}*QXMol$xzwZ9A3V0<G)sof4`K3
z4u2D?YrC=Gu~pr2XSVstHg?(9xEUB+LG2cEZoPk>p2h#(m}b#YZ~EW%i1YgG8^d-)
z{`tFiBd8b7Fs&#lzRr5l%+@B>(>u%KH+7Zlclo?Uao);XQ!+(@7#|caJC>Wt#jt4=
z_fgC6Pg<g;Ticp0&eFQFD_DQ=&rkBDx92W@Z@_9GFJ^ej^Um%^7Pkv++U$!?%vxpB
zD|5N(P4dKr(>HGWnOz&aJy!7f!}pJ5{@ARq$UeGj@riGHCO)-cPmCA-w&qUuD?SDW
z9$ynR@8>i0eD%J>2T#4+5xLJO_U6yPGoRjD$wl`>o_nqJPXABYJv;sFnfl3Zni&`-
z>@InyJFDN?{)0uP?C1Hr-uhjdSC{8|yI$p5-tu$$y_ec|y|uHJ=4Lpcc68R4n7G1e
zamUWbzdm}Seoy?1{oB6I>3np0Pv_A;own6?nkRl!zxqpJ!il+)^LJTms{M)nwet2m
zt5=6(cyy2L^!sRQ+<7ba+>V^%JFA5n6f;(R()u=~-hAQBO1Y2yRd)4(|10E}XMPXd
z(|zwt^yUJw->;2tK2l)dnfQZ&VZ#fPZ`p5*-?h~q6V-iV>~}P8TUx<S+hpOrFOFRO
zeC76zU*C1+SkJkhIn90g{OGMe7#SK2f1i8<x>u@TNy?EQ$^Qa5N)nrQM`&yaKGIgc
z@x%M_$b^bIj|CAHDgino%3iL1`Eoz%`572&9$bEU{O9j4SGWI*24(A-wIB9=J$$cE
zxG0VLbxYF2_dlxtet7xmvH5>9&}#b!C)dqhHD$_P+xFz2&etF4{NCRXyQ9M?LMJ_G
z4#T`7yYGJ5b9>{Yj0~IGA0>a>k#Q>wPDoi4uv+cI-wDqi<kqyux)i>vf6~-@(Mj=L
z=c9Ge<@+bh_PEEVEPmO#=wIB?^Wx_Z?|R#{zNj#NU)GtgU+wG9C(U!%_~E?1iL*qH
z^I0(lh6Y8i!Zo|zN*TJGIHr;mmNe~WwMJUyZh`54s`fwJXn4A^_DJk?%f#9_i<ucD
z`iys0`cIp+&Hwc_YgwmvWp~S}FG}2zyjp0z`t~~qenticvmB}49^d*ueK)F$)BmUH
z{lw>v?w|W|n{K2h=IvwG%uo7}_D!8#yO#e?^_%7k%<CUNcb@Zf_H(b($-my0-%L>q
zzcq8^+aPVxhJzlzPh`G-`?}OPvPy%^=(pSbZ;!11|CzA<eB%3~{ui6=zA|j!KBv#f
zQ14wGQF?o+Z419!>T|L0lIN4>e>`RPxc+APotYwwtz}={x6^p^s(DlIj$e1SpOZYN
zd+ZkXb3XRuWpTy~3<hQPy|ti-NYF`2F1crsva;=I>FwINE4ICOVEzAJ_I!DZEA`2T
z#TXcVJ-+<(_|fw3-SV+F^z;9H{mOXT_4GQ)F7{bcb^l(?0-4cpcZMsY$Ts)pxliXl
zEn4`c%k9nT%DC;ZTIU{qX4|kxLu18+2SrlPyDFEI9DBO<VDzm-lm9HoGFM$FTyN9=
ze#7?C+h?C0-MQG|`>LZMn?twXjk`1b<(*91Y5RA#oBWgQ$T&2?E_iyfe0Sq)@i%%R
z3D2#A=A^ESDFQWGW!-|cKIXmHx#fA__PZgEZyb!yd7_?na{C;U(3N#O3<nD4oH`rb
zEpq#p?bEle`yOZJS&Ek4mUUTkuClIc$MW@;b_V=(WMIfS<#g`Ie74F9PkcUv1pl6V
z_)5rA*Slrc=ke|hI)1)=#_aABljY8)Z^+v%&Ru!w(~t7!H9kLoGV~mCxp(A&ZG6Q2
zi02Fpw?FOucbUN;V&!?iIk&g}d)L4HvrWscx3gNS&LrPSpYz_di}{^f*-jf9kC@sY
zN3K?`N(PT{Zv34I%5Mw|HTU_=LQIddGBivC4e;yn<<xgWx_3Os8<S*i3-|7b`}VY|
z>Rp&Kmz?t4?p3$n-Am6^ot&|a??4t`@AXT1Mmzm}Jx_`|Gi9lb|Lb#C7_Jl?{NW<}
z<MASme+GZ|e*UwX>F)MIzRzl1CH!h^VcYN41&aI*Z20X^vrK$l@Wp={`43Gn39Ss>
ze%CWlWPg9HPQsG3q#y={0~b2Wo#Pf2zG>WBE3vlZ+5a0~m>GE7t<HySkDc7tJoDPt
z3d!d+%SvxAEsj}UYiAs>{cg9#^a*uwUmr|*F}+02Y;Jt;YzBsg-p*Nu@8?J|?0X!u
z?#_dyJFe6pv*WP+YE>5`Qz%w>DSV>(-vIqHYp&#O{~kJTi$$ir#cZYn4_xlKtYWUt
zEMsJdSZv$OdB8)qd-Int+w=aNc0t`=XS_Au<e3@&`w9nt`wpuQ%)Y@>=ly12IPl`H
z$u~w&+JxbKukTLa+Lw}K^o=p1G0ny1sB56ee#wJNudd7pn=ieF`HSz}GW}<+qLHUs
z6CWAQTD7Nxt@AwZgG+q1&l2_oF&^9XmQU2_-QMu-;w=|=ex&`o{N1!_5C402<0*fC
zRNig&emvjgpX`EVTK%uL-QKR(8ffKn^rx>a1A{?{;QM(U)=qM>R@wB-SZb>!G2gkE
zkHNrW`MITQ?tVT|{%398?$;;g?|pGtvcZDiqEr6!x&A#}zr*+0Ffd39r?Xx9_c(en
zkIoL=uB0r7Hr=P!uH}{oi5z{OEZ;q^T5jW!{f|0JZ!e9%9{<$y`@Vgtcgxsa1J8V3
z%CD6EE0tfbSAXv6UiJe4rlFNj|B5ptn119-y~5C-f5iGwwQX0``_wt?zh3)XIAoW+
z>SWFIn|6=m{>U7uTP(-*w|G_F^A8=XneP{_{svm}Q2#eY1{Rp09nSe4tpELa&wO)P
zoN#tKxQ~0uJDqF7+8iO?H;fT|Ozx+%MHruS>aAHC7PS29^7FDiQCXjAEWbIPI3s?x
zp<AE3w7#$HK>h!FZU^7(di(6?w&!PSyEXRA-E*$~g!^MF(R{hz3OqLwZNyFPwtcL)
zAF}kXF#|(_Ptcy<{>FSaXSkdRV)mElpDY7fZ?R!lhD80_H8+m!>6_1AdfT)x?%%4F
zr*`N5>33iExo!@p&+DJzyCvC-rWJ{uo3(06G%LdaHQ(g7NoSc<Hj5meU~ezAe4@2_
zzMlSi@#Iqz)obHLT)V2zeUAD6Yj5wK>#Y_Ug8SoZzTTExZgb|*UI7NS)hkau-u0I6
z&3Vw^sLjp7H^#TvPo3WWO)`Hm-{-4Nw$EbU7@vD>p#RQ%*Zxlim+P~4D6QMKKjO5k
z#MUoo>`Opn3=j6#8G-scupm7Uo@Xj|xAP>&|7XXuwq3n2Gcjw`r)7D&t9$#xj6#=i
zCaB(9KD~U}>DEip;;w;vOl`F-zvQt$p2}r*J@@-QjjsE5*lx}ifBA3GgFKNpdSbJf
z&);?V_%8MB(eroaMVxw&@y9x0<%hhxWs^1TtPil`xnFA%4;mxswP04e$2-&Gd7W}v
zW#+jAks!Y=(3;&1bM@vVCKtc@DS7Zj`<|}N4fTI*wpx~({H+fZIqEn^(C7c3Q#G5|
z@?US;owX|HoB#uZ^u`Ish05tn9y>q3n%L`J!!BdhY{a4eI9)FL-`*ca{#9c4zZTEm
z|Lb|GjLx6(xQ=?hb1#D*KVg{AS;^yaR-A!hUe<jMCWA2U-#!1!gj4eOJ^$|NcbfTk
zPkH>+^nVk@<M*21OqZFL{JW>QT*5NKZubF`tD4e(H5eEeTITbB7M8+-a>IjvtK0Z;
z&R>bpf2%b4^^*ISYQN03jJkFD%9ognd=2v6=e=3aPczG2b!oS(|D<;dcfC!UC9z&b
zG~MRxi>k)2)_rUlv*z>OKE3|gkFOH!jqk0*pG)pDIbM2u>E3q!WO;6h#!feG28IJ3
zo#oDMkiJH2ph*1;bBQgHHTKL51__02zvE)kR$q$P-#dT*mE7rdvB&L~6*J$r7XG$K
zqw8;Lec8MTxjzE7-%YP{W?;zi3Z7aHs>wUOn|T(0J9n$N<`IwAWTzBRl~?_*H)5G(
z`n$NhA`Hiro=$M*dEzzKl%Zj1jJ5Lj*n8@X5?fC+e^_Tw6aU_LR=(I>vry1jm(sdA
zjdgsBzwcXlYV$_W+4%<+rMrO=D=dsSHZRgpTj|lvcyryZx8J%JRhTZ@|FhFXHAz-v
zLBw5??c8iP1kay-TDd+s_Kx>zP@PccC(g4b{K$VkUhST1XLhC9EE0Hs^2TvSws*0?
zQ_a;R85krMca(RRI=U@Ne6rKB*>Sd6Xk~gABZJ$+8z$cmz5cPXd(n@-*7o~#|9p?@
zuRU;MmGMq)28NuV;Hlv+ZMHhLU9{>i=IFVc_{59pu}P@0XoF#AOwraRkc;P?vs3Pw
zEoG{#xQ=ge`Q4DE>2?eZ2g2t`3V>vxSixtJ1@mon$-2tkWg=^wZQj4*edeVm8LNFj
zuQE>Wz0!2<rQh#(uMVCe=%y!iV88rt3s7CMvClhr>hYB?|AV}uC3@G+bSDGDff=Tu
zGrw_3n=?LHyz<nR_}c7K2@}rEUS(svm4V^0!27yu<p-SSiMtktZokXDn1$iMvLlsQ
zmcj;h+h1+#jeg>>Y9_<u64`Wj#)ObZzu(V|WM_Dw`D)v3^9F{V$l$5v-)1FlnYH5N
zIggIjhcoWJl4fII_>g<P2Q&!{^$SCQ$kB;PGS*8kp89mIXlKBt1t(8t&AXoaypr`p
zLxrE6xtsUS>jgcfoz<CX4&jgX@_F=KF5fh<A<(n8-rx79hVNnreFK^AU3tt541aR7
z_6uw(R!HM)E?#YD!f-&NlAWba<!NN>)!grgJQx`^X!?dOn{zXpnP>6DPnvwQR{hC2
zbzJwA&z$~RnS_+IS4$ZT(gO95SQ{`LIQ%8Laz=3sLr+}r)Rpf;jlUH(Ox$?hBIwa8
z1FL%5_j5rbIX||gA7h32gMop;?R~7sgGBaM+h)5ohu7tZ`DP}>+WZbPKl!$aaod^V
zqRM-(Bh0^F$(nb(N<?C##-$gL43CXW?>`nf|EGD8#=GNoVg?GruG<+I82+tZd206}
zjXqxXC(4hc+AqfNoVf3EMu;H+)Z^FcdUWdxv;7AzJADR*=n0>m<nfyD%-id^&upqO
z`{E**bT`I?EwfhHZ1D%(!TTZQ)1AbaW#?w~Oy6PE1M1}_pJHTS*!Om3AyTuUA<#O1
z)u)m-%^Q;27yo-5UOe&g(M$D#6P%iNU%gU#`|Z<`gABKY&L6+kp#N59@@p0OYui@O
zeo}Vuz^|jXejK@QNMnx11*^Qk3AKwPnRyOPOt)fSI57Q@&YH~$6DD@#%XCB@Qjh`V
z5-mmsx9qG}jjBuTgzR)-V94p2!zt0r{8L0Hs^TB>;qtY4S`2@3mFk%o9_)Uy-R8}L
z^Wy9bx0B`zx~aZ3K9%YaBip8bHEW;IdC)S3?`Lixh5mtzx#ppj8NbSx=j|4Mc|GF)
zKldFc-gTX9baGi8yoUF|Z5#RN<?BDHycYX@Wp88b$=earnUt@GJT26^X8o<Op>cQb
zc`Ie{_h(mnUd(xu%qVGnJq2_`+wM7?t!G@$6lL90$X53awR+CaV34$Nn{_!qgSUqz
z&!Zg-3^_i*Q_G9g5-#*zS@|IP(Y}iGf`kic=Q@}U{5J{x8Og)K@L=~l9$tnGJ<GJ#
z2lcHv*yOnR{E2w6N3W`89x%B3I-iSy;Y0HI9zi7E^jxY8p2}75W}aoly)`SnTv=|g
ze82i?+0Iyl1Jf$(^xo@C=T^18_ZFPE8hdAE)UY)#RWOh5SoZ$fh6&4~tM`BcNW8HB
zdmG26OChON?nNoL6udR{pWe8_$RLm&ILDD?+Q)@?)|EUU_s@~FFgRpj;a<3pVc*J?
zr!Idv{o+7^ta)f<dKKe?`dO>~$QTM#e`R1;^QiSAQ^WsGnVZ?pOwFYk^C#}?SiSl%
z|KTs2G`d#rdV9o{fq_Bp!x_-=TQJWYcrgbQFSn`>+UWQ<E14;E3Eq{uJ9W>R+j;hj
zU$frWvFk10q8EavKjs}@wqtvk`PsKkjb|e=YS?(rZ&`Ut`tzwp%d{@<{yfpKam}6T
zcxDEMh*KNWQYOsrh}>sfI$>(`b3X=#8QsPm$JtmSF3pq)WneJV{FL#;=Rm=nBRiRX
zOgwyIKV#d{%vGPR%walU@5=MUfsd5|6f>2n7IIJSh%x-R>{7$Zruj8vkHJ<Qq40Lc
z>QIrRQ|Fj6Ff_ccPRoJ$1GFP1B<N$WbMU_Ei5&m4-aOvG<lA*a<@<F=w6s+okGq!}
zJhgmhj80|ep{7}3>z;+)EvvSSHP~P|YyV+|x!DZozaQEAa3_DI2kRGg-_Sa<cm@Ur
z{_d@lZEH>h1W#SAxi0se0=H&br9v7f!+}K+*Y8S+BygTz{PGWXGb_V^WhZ7f9Q62E
zczoI9)FX1=RK9I#Ox#hfCc+>m_O*#`4?C#Zv+;XlEGJ<nF(tZo>kqlYQi(0$6E|<m
z2aWIldpXk(Im=)4I2$MO^F4oSz_fDtqmBu|dOdGWsm+YlKXA;&x$gW?a2Ge_^zOT_
z*7!H>cm4dmSedDLfr7cc$oap@%B*|MH-@t@Fl^YfOzZNzhg%h!{~U=duMWMCzw+jD
zN0VAMhKBVg6WOMHwV8Epzd;fMLr&Km&J*)yRj$$blz+$EKt?z{gyF$)kgNY3-mCa?
z-QRg};tX#>j)c!KY)tgn`Jw%rWTl7Acm79pjBTm&Hmk8QF))0Xn$CvY0CIEOJpJFy
zo?3>mf{ACRPFlK5>wVXv9j4XVm2unWz87uyKg(sJ^0dcy`+Tj94{2|<W8EiE=<+({
z#O$U!I%`*+GUk<BaJ_HVsy#-o3=9m~)>k@sK8aL^K3~RPl`Z6J&&cpV{!#45BPSTV
zt5n%p7#e&h8#CSvGVXWJUiHaoju6|!6Oy6~5pjFiyBiNw-Iexl$hkXn*ZUx6X@-5u
z=Vt6Nx0|qcWv$yZ!S5%pBpg&&`s4WgU)oFz3^gxjend)D4F@m3S(>i&F;?)v)49)z
z7N+<rKfUT(v^$}J_v5;~dzP*AYCUvwg@(q8l_#>|uH`<z%lG4!W1z@(H`Yz1D-_IE
zceL?H#X0?#Ir?0ffuTY4=)EnQ+b68F_+6LxZ$Wv`nNO#-Ffe?WuuQ9eu02aw!1dhc
zH9QOq(yHl9n--_Z`HK~LrTZ(yKmYWKA)z!$VMEyVS3OKAZ#TdEy>HjsZ@;T@88&45
zhWfoVcDi=&c6y5FqgMtM@{8hiKwVGO^F5%QoG`!e+?trCzt=?aH^Z6-+g6_1owIJ*
zoY)zAr!IYVxq4=-@qwtL#UHi?#?E>lz3u4UZC0;C9&r1H*7d3R8Y?s3th^qw^t)o%
zG6VB3eQxg<7#RGoggh;@YR-^R^e<$K6OMe*uWabez!0XeUNYinH1Bgph8rf9!V`Ln
zO+QCW-!Xk1uSUxAYvqg#HuEGn*0`?PX_~p})2RZcl-I|u*uHS>U(d_%D`Ax%Ys$*Z
zRYh5^B0`T`tq<*%X9KPMJHAYufnkBhJn(9Dm~SN3EY?`y(0?U&`}De*lb7ynzuC1+
z>%E9n^%T#x>pUC$xbCifrnJ0UHT#<2>gwq2bDh2(5TCWmhu4lzB)xUb615M@m-QUK
z^g*cVag1^~14F~sjqCX(yCqKUv}~C>c{UTn0k21Y9$GJETccn)XZm_Bh68RVXExlM
z?0rzp=Za|anmcZ_%nT1WmDoOQp5^!<gFSHht_{mrPFzb5{=Q(ZT)Z^Ho0#CK^ON@<
znkDdQqTTv)b3SDFhQ_Tp%HRC0`fgd)GSD4K-*X@XE-)`KPvKJiBg5MHQl2*oT*Xha
zJ%9G9<|me(x#hc`ng-qwHmlzp`qVd2<hxr{>b%SY_D76El><*4-m3Otjq@9QSxKK8
zGmFm`GcYuK&0O_KYwcDZ%_rJPs_M%G%AUpKaWOFTUkrJgX>~c}Lxbp?tGV0r4=^y?
zP_Y!g5dHpX&<4)H=PFM<?@J}T*c;;fHK10BA)>!^mZPyVm$qfs`SW*rA2Oeq^!)qb
zZ@+2^87{DIj5idFZq!*)C&K<svQn$CRASHe(%UQNGJ%fB+`JLgxPf_$f#*!F$lZXN
z_4}74%QuL|n1@zQKYP`PMLexAb-l@4wqvXEc8ARQv{X7Fb6@&Rv+s9atqE_;?}}J_
z?EQuO?ST&R*A}fjWqiKwM(5{cTKv4W3=9Wu`I;&;?=cOn)JfyCRs@yD!M;aQB|1ym
z-tRqGx9PcSV9eFr?@FKdGcz>I>z>mYzczBAdEcy6Q=XqYW)k|-@@m?bJMD3^S1#mY
zcrAW^?Y-8-%J<4;J5E?@In1-0y`BA~CIf?aM_pu+_J#bHpDjC!89$_e@)oG0IdL}|
z14GYMV`F4LHW#klQNRCc?sTq*Ju<&7);xH<=)i`+z?3)FG}gZ{*!-F`VtVJqm|Jh8
zdF2x>-zi>Q4H{p}6X(rwubD0{nfGGp?Hkeo6J~GiO8+n2x-&8R-0W2%`Roh~HyS$T
z`u6HRIa?>1Gk1n61B1U<;Y?=blLyY8|FBfz$xf(eGtKxJ4lFYbtrW}-vlQMC?Vc65
zftP!u*ZJBP^Jhw}V%T8$QMP))HN8I<D&PFBKU=Nk&~`+!?!-+UhKNf}IY;f3zx3C-
znJK+nSzA~tu_nCeI%wlSRoXM88Yw~Go_T1cfUm`i_0GkcCw2F%oBGhgbh`HE9A-E5
zF44WFpS?fF9lz$v=y;Sl{QFuqU55Hjx6AHs%vDd#xQcE|Cn(Qawdc|l#%)TbXGF3=
zUR%&n7%!cCBD!YU{f@{($3Sc1H<%T!yM5ES?bU1Jn&3*F?1{6^&gXsbo`GS(^Q5!0
ziqzhn70rpg^}SyBIYWZB*u3B8<~r>6dHk7^A?L)Q-5d7${MdH;{nh*3yR;dec*=bE
z9ryj~A%+G0Z;YMv&nitnY^N-JG34po9acP1r($=nx}A65gqeXM`O}#kP~{9wt`66N
z4)!iyrnNuPW$M2bx8J!2iU<d9+LE?V(;(+^>&3X6pLe~rx!<ty<DKZ<_u*x(!B?(U
z?qlTdYP;<2##!~yjH{@7@utAQFSYTBc{gT&Q>;D%!-24f`hyH6p_NM~>f~IR2#U$q
zV(I+nd3BgS_Z!!IoPSjJ+TwM${ror>7^KzHnaYyHvR`Q*KELf~ar_^)Uyn7u2{1J9
zM&CG{(_>nbIP;fnQaeNCF2nr$;oI-V#e<5^6L!j9PW`#lSzc$BrMON{ov-a>XrM@V
z>Fu|(<3X2+&6}AC^&yBlacxh-szd)OXNb6dta;PCp{YA(-4w@8CgZMc>)#n{=Vq%|
zw30FA)|!=G@5|nFRp*!Lzuq?cN!i5%Wv(`#PHZ^rr+Ybp_u8_Rr*><csm%>ZTzk(v
zRC6C61H%SY!N(Sc_a^Mmh}bFqu_&Ro@5yooh7Fn<?ccrObT0h2*SO~6d%iPYqV}x4
zeeR|d1A|%KL)(9MG7cYGTKjMBjqmMqJAUWi-zj{<@_7hD!s(!i_OXGmwE#RzR-WpV
z;P{g}E$f(m;C^=*W(EIOn{9K}gZd%0BENgsH_l@zOBUNH^T;&E^~lxWxYO0je9cp;
zPQ`(WyDHGMQbpP{q(rUY{hTW=#a;N?)3YXP6OQZo960rA*W0+1va<~RLPtB}B=;_@
zT%VjiYt^31Gd=~XNyZs(NEO`uGcqynM(6Dt@)sJ~*LEGc!!8wf=++Xocfp4_85lOi
z`i9DhyB6l(P^=eJ7vJ3S)v~Bfo}oc^hQ<A}44~Hbj|-CfPW-nwx|t1X<6H7EFyzEM
z@mcaKK;2E+Y}rI{_jniGF6NJ3H#$S+Kj<yiV%T6U$h>j>$s1>t{0g@pv3SAAFhTwN
z`*ztcKOZqHSpR6wkA1anH#%q5^}g}C(kB|;o>&zpay0aAS=AXP28QPEXGD;bcUaKI
z-o^5!{!8OuZM&`A^=NBm<SkdV>n96#vdg<K<V(=8c^|e|QF8Y)xtP1RcfE}RMfx{a
z#|O<FkxaJ>R}0$gUiMIR&C!W!pk{z|>V0`OrK6{n(<+nv9$vgu_x^m+GzNwo=Q-6y
z?<UNd>!S0hJ!$UOdpYZmM&2#^&HTfff#HNh@YLfIjT7H;y`FmQig0D&my=F=K3zL<
z;My4_|6ivjFdxV}TKDXHl0wgwKYPEVowTpN`CpFVZ&A9P+?MN)vzZ&>vR8dNXQ!NV
zchyIk2y0L)`nhXh&5GN8u|^CG2^Z$gj02@`C_dq)mA6^`DBp?GS8CQiQCggx+OViH
zFgY)LnFqUp*u3)7yTf%R$ZgnHF~_q{oHr-F=K6c>GrZA-vaCBzo6?_)JZp3Jo<DQ`
z+wV*a3~$1Mr-r)*&Y8_7(YH*izkAV-&@)0|W$P7n7#MDgJ)h6F=HZD8fkzakT?=_?
za_-+pla&|$gx)RF?@<OVWq!VwKS`gpVwMQ=uhOfgra9hS;bx&b-`hy$96e(x%J4$G
zv{_>1)cfAb{G1Jc?#$fG{`UKiTMP@ni+xi1V%l_eGQWTRk=h;V>-d_#F3hw3o5sk{
zaIh*Z3pq7&tFP>I3!cjL>S-oug5ltrm8ZIM)=g6^mS6WS^lll~Y^LV0?RQnAUT>DU
zzx++in#H1AF>@bfAGq`=ayD0SytFB#z*;0=_vMgNV&3`sh;wV7fevZdJL%iuv}G)9
z%ID<eEtDC&z2{G@1-19e6z@6nA4xyqvdh0dZ`G$a6Q^4Xu8-)Ra=tWl``vEFKe`MI
zDGJxtt!(p3-uK|*vr3Uyeiy2JL*<r5^`~)}9RqoLWr(@PRU7|O-!p>B2Gvey+pEnv
z9LkO;%6(e}%GQ=1UlV7qn$xlRfZNUVCFPHP>aXKF{MG$#S^rsO(7`ra)0eSBqZ&k2
zy)~0sE;oCb4X7#>+6$_R9g6I07w)|FSms&9MF#B;bE3~?`iY-j5ShLP6eiU>V@)<#
z2hRBFkQjEOV{*m@-o2YY{Hf0`d*FE8KVuqb%7Jak4!1y&bI%SPaQSm|p6H(&l}B{!
zrL`Ft%2E?~&5b#~+;|&&zUIiS*BAEg6I=hJoq=J4??mH?S?+TsDk5&~wBafe-YVCB
zq%h&_vz?{oZDI_+v|r7tkWV|2=HC<AQOJ<ucJ567)!gz6-?Ld7WOR;%Hhi7L@4vot
z_2C73*WUKylV)HrusH9d$$$V~u6YJe{XJ_>N<Ju_CmyM*QtXm3O-oK~2lWsyz1mhi
zu}*U1(z{uHZv8PcdfaEGRh&K0r+J1qdn%WVylZmqi>;u3`{VUo#fQ!J=C2AWW@TV#
zkjq;2X^Tczb}{qeNskO>aUN>ExAc4msIICN_<5QATK<=iE?K!X%IEF>{hv_1Q*Nu;
zX9k9x=qKOyY^-ZtdZzf%8&6O#@4Ql4Wj<S??zyMe7#-}y?zQLpN;4ZrAO5#rj*+2q
zlKrm@f9>LB7@nv+(z3UXX38#p^oG+?0MxaQ-hMaqixx8jgG5XEGUNf5Ds|B_zxQYK
zxg1ln{JYjN=GI@US*(YpVkOQ@wOxNZZ_-UuW}Vj;Jk~zZS)85vVAiTV!7?8L_grV}
z-xM$-nmM6j&+m+N&-TvBF$tadXl1pO^TGQ;lP4`+rnS6{g@Iwg^)<H>7MKXP)O#47
zHunvkCnd$e@Jpr0i~rGF(O-{hgQvdax&OR0)_>0Ws`R$&N~SZXKWAk)5M~-$DQYR)
zJF)%!uBpPu1zgS)#m|$mi9EGd_&9UJ8J#x|=g+ogOA`CowfvgR{vv0Fl$YnW*k<fM
zew~fsX6M%D^X`;YOseGdua!P|%qiyY-pJ;Im2<zbFA~>fU~u?0Z>AF>x*1;dR!-~<
zF$ul6CvgU-LtQfQ>Qy7QcPEcuoWdrtYURw>&i8@8+>EbY-Mi-Yxm{uvQ(D;$%-VPO
z)urcY^}J`VCcK`t>d%~SJG&NH82;+HlWTHnix?{d!;76AhdWabI4nJ10ZL7rhvE%S
zZ~0%6s=>hUVsUHQ2V>zQeM_r9TwkVTKFRq?$kWU~k>_fax^^eZ85k07E2S&#ZQr-K
zt+l>l{<r5(j~I%4dh)>YUH76Nk$JKVPqgo~2glxwKk9Jej?OE)HOg^{&lo4D|BaI?
zyYRf5xk1J?#x>8{rcY{KiuSz!!G)y~OTxje_U-AQdisv7aWj(tFL1B4I6F^Cx_R?N
zwH?gQ{w)s=Vx0Nq^qMtm*4=*Rns%M%!-8FJgB(vzcgxJY?i;Gb;&(r0#zgm-DHUfO
z{A;d$k&QU#`Rk5L4A-WsAx{gll4M<<CFY#FenSJ)DSvCB+x6&P#Nh&0<AdgQuY0ci
zz7lY=QjdY*m)^IV-{+bqw&y)Qb9`Ab|FU<Vw_0}3(Pv<|v1*ytWy@yf_uoED-@^Z2
z?c3AD0ww=*Gle7KR^8mLznzbvP4S!G_n=tEV6V1!*CW3xW-&%eGd*$dd6cOCdfV;S
zpIMn4)`=C}PFEA0wx~_LSpih6YaN~W1hgh;XLTAIQn8+}Jjk$VesJL|jgnIiE=Iq!
zKkwWU-J14drLXxGxmAZZ@-rA%NExkrrn9^|RR+{l$@vj@?^^D6rNgh;s#Ip}`~Sw0
zhksZ9-lpWkM*^12s1Kf+x&Fys&s3ElVNf36fBTz>f#HejwZe1O2M?HrR)&fktur~%
zV(4LbI)3p)BL;>P#d9_C7WpUmmQ)-(X!dE2vRtLWYqNRJDg#Bri{uy>ZnU<}=@b?|
z&|#V>Z};tS;s&vEb4=1C<-V+2d8+e{6@$dIFL&>Sq~5w;liokM=Z@Q%q`T=1SNzyd
zoS$p?d*R=C@$w8Q+TSF<FEW??kegLuWbx>gLBwYpvyCDQ3<}ZbePoeR!kZ(tfg<@q
zhE2I9KB?+_yuZE98SM%?_SEU%4EK*bENy8?ZsA1}FK#u`TmI~Kpbc}QdbdP|)|p@T
zG7j0BNN25K+j}A8sma^UqxU3uuI}+%_E!(Ie#5o-<gq^oH@F%fbT;&MQ!w?pm%Zwe
zr5*#rCgJSuS2TXzd9#sKv;2$3QSM87x36XF|G$=5c#qg;w$J)(AGR|vOjrnM4p^R>
zayVki*DvdRL;bexoYxlHwIg-a?t&$9l7F15_<!wO>17(rkZ|D9?mGK(E1c#py|bX1
z_o&VlHl`CjyYjpX`*<15G`>k*{{Ghbch3j@tO}!yN3RS#KHHe>m1JaS(6KenMGA=x
zq2Dj+l&)WSO552!W6}likb#k0;FVi{ckTi;`=6IxWVkPMv~`~JoTa8xk(ZM1y_QR#
z_1Km9uW;+m%f?TAk9a1&F=<XWxil~0mb7-)qa$mK9n^h8mp$VuR}*JoP^b>>RZWz6
zBvWto_{Y5|#s)8|-^6Ck$obF7&~V2zbY_v|y_p_nFU*dz&st@3`>29>XyxQAz8Md;
zR)mTi^?N4Bz|d8(-#`77a{8g2%x!vaH!uHH`RSYF(hk+7>HoG`GyF3;zjn8w41+<9
z=6t)kfxUZc3<Z9@_}ljS#|w3a3Cp8De_PND8cN}D3!b|Co8&|8tO_G8?!vFig{2Zb
zSN6Yg{$j+;z;NP}G3YR3c(_CxcB{ErXHPrz?MkkBr%TDS;?*yBY?o_Zf2?tYk>}_U
zpLIvRtL+u_^_DW;vI!JSsbyy!`awl`>(2YL)!o)y<e6ufwd&Ijjjs8o=?Mx!%v<I^
z-UqtalHrle;!?RD7c1urAy2nxbeYe(Yb<bm;`*X2Cq@Q|u8RG&i#cti3oeB`{kN`o
z_Tpy;c5=pb@5-|_m0@7GvC<-XpMH8%<1YWgSzFG_S^hSN(p+{W<f&tzh<noXo*AHA
zvhl|0`@!dX=UI0BY4F`;_>v*=)1SJCRp!4Jofqd|aNfA#{Eu^X%F1c;CkA%?S!iqN
zVxS@aYTNBE`&bwl4n)}+&w&R51H*>El`GD8Y8g!E%FcLaB-NfQ-yk|St#oUTU+`4%
zt`^&_bj1mKcfAc-xZ#$Mo^EY?TuRZ}p6S(J3isS*%%1va$;FUY&o%sbk|)kO`2SYO
z(<60^$yY<3_Nsm0Ip7&Q_4ms<vzZJG42Lg;JYBiNw8uMmYPjY#;q-q;bxsEE%D=z#
zMs?PN95zM<iCJ6ny45};nXPfQI{dx()X(>)Gt5F~o_iJl{XtOMgWS7iMe?A~*%Ggu
z-qbkLmG5ZWk<5k*Ax|TZ=t(CZI&oqxGsCm3&1$ZJdpc_)ZcL4w!)$T;%m2D7Tt)kt
zpSbfpKCV`~-+@75(u&ND`ST}EoOv@n<qc%kx%rd(-7@L>^Fc?9O;2|N?O20_kC~FF
zpoQmI?V!b1G!jm6T*>{e^w;RR_RbS8q9padzkD_CdhYTaniH&hKZX}4zIA5XbKSP@
zx#9-Fl^TUwela3Pt$puHHhy0zP#Zk;p8JE-Y9HSBvP<sN>w5J6(!cedpyrE7b+Unz
z;OC10)9#pT{9lswjDbO7QwGz1`O4cLB0d|}nA^%6^t__>;HBM_T=iqz3<u7goSC5T
z?DxbXjR)3BWiykk^N*BEFzzg6IACuQT6s0(Y22IVt7VUDi*^6|KX)GUi^nsW8RVYb
z{G0rXgW<q5)6h!s-#z<prKhmWv2SF3^vb{@|MfO&<FyP74t(>#7jVG*9<e&a;+cl1
zphv4|&}Xj0)>cx>*Dd>KsVFS2_A1auxbaS9-`Zo}RriX&?my<U_6=wu&&*ik2@{uT
z`7eI?duL^GLy+^<`LkEe>1sVReG%s$lUlb&o0)1&yKNsdUkL&2vu5Cl4xYO5<=5)V
zJdZbD2>9k3D6&0|u}bIZ+CQ`2g@bwx$5fu?9-sC0-jU5sTaMLVer{Y-7(3Zw@uACe
zujOvfmtkbMv9)zh=l{vZj%m-bGk;Iqumm(U_x9u>4ZkB55(|D>ih=^B{Ak_3eYYHQ
zE_&`+ocCMiK(8m;3Gc4EGdIZxWs5PCEm?Vr`*#n|jlG}MKhz3_hfkJodzgE-EWGsg
zUW54z3=Z>cjjdsU0y=I+?0Vpy`t>VM89Q5LUEaulpi6Jlt|&KcQTAYwH-TA4%^PAs
zT?&)^CXL>+kA7Eua$xT-i+0O6lL`G9zvj&|%{Qq{R}h>1FROr!-(&v7FOi<}Xa0EO
zFn^DK>*KeK%nS@Y=Qdif_Jn8E-4A(M7bxOBkM&DHR>_|CYs45BlBZtFc{$hO+vkVw
zewU=|-_4HeE^a&bX8rNci!_3gf9_TMW5~epWc|uhyHCulNd7-@p7++NeMOPp&hn<A
zGtbRkI^)Pr&LoDkb1NAbR(D8r+;Yr`>RP|I^XqlJj+qQkUS8W{`=au0*<`tRc?O=i
zHO1fG8XF00KJoNM@jn*1Woq_3r(T~(zr0$If#Jp4^ktxnZeal<rz?8p$Nx8X9~Ry|
zwvFL|sQUk><{AfzSi__mW^yTnC#-5(9r9rg*P;-Cl}*|u4hxx9GOuJf<01Ottkvmi
zK|4z|&8{O%_stJaG@9&k+E%5(c6YUzSo=>)Ij1ER_Mw-LH95X_zc2W@`@Z6R>7qxU
zcgeCBGw&?=d#mTSisi@3yXR&u$~s_o<k8WW7rvk8t5pv+eE&0B>)6|!%w_`njX&-d
z-tYW!H%oiT>}QSoNe?R~f;Lr8Hxb(-P$sc`m(IFNjhptLjJ(8L%JI<I=0(IgA%=#H
z-s}hBmoPtAYy3oY`)R`vzrB;M$^5(4yo~2y;T`KFeijCX+DYHe9<>#Ier)rXGsRN<
z^OjT=JrE80XLN1N&k3JGCM<qk62HNZmEp#WTaJ4c?wI$>r0y8sjg#d}JQJ2W-?J`S
z$Y;(V6A>%MpE>Vi`sbdMH~mj-7AqY3WmQ>P{q)7`-&>xAo}K%(rl(Tl_e}<dhJCX-
zcwnK;z`&4`v-72u*p(SqQx_U&dW%;jDVy`{Q!qAX+9rC`xAD!ACdYK8?GsP;+&Xn)
zX`zShx4IjLHfAet@Gp(LWASC~nG*iy?=?K@C+u@pe`&px!|1ozeCxVS)<<WVK`Ai$
zOz`Y*mPb;}B^=L<(m8*Z%`Tdj{;?r>FFymre^LGhe#JR$0{<@PsubQm{(Q?j<<o{C
zr<`NHFVJ-UaB*J(1H-Qsdflr{=50-HviqU@w*B`iF^M-}XZ(-agwFZwU;KYU^NiVl
zCS<MIrO&{yeo>i#^_Mx<nC8g-vNZi$J3qbQ&zYld+E<12OEXw(i1>fOMp-iIoN?TY
z^p>|r_ZEG6^~L4SpSjml3uj&1GjGY}>Yp2T%zwKu>sB!63fC`ZT|k=`Vd0dZ+yByF
z`uyp$*NI+vz?yEAs?0Y{ReR%sU5B4;`xJPQSHbz?&UX<Hu6>i}PD{HK7GWfJ^PJ9c
zH|9$3oe`~(FE`K7|8+L;!-nXOyG8Z~ujKfYU$ptn!A%V1d*)f+;9+2BSjt_=sqn`(
z{imYrCC+@^XFB%Bn|q$>Ffu&&eW^nCSwS72;+<EkF8<oqr@!{M#G$xGZuaBv&n#b+
zxt{G)90P-dK(*S7MvM1<6`zH^X>Z;x`uxx1JM|n7#VviR-k4pDoO?C(qe1|~0lk&7
zN3>&?&$6qH;$HAh&7tni>B#=7%?uZmpGlrPQuMd8((Q&~Whvi^-R|%0e{Z}bb$I39
zyzK7hbI;Db$-%&Y7AOyP&kI)UJ)e2F)aHyUV^Ca(>06y#opjst%$6B5K7QPJx9`z1
zhrF2WW{>}Q^ws2T|GYBm)?^uJz9;^PVO1}p4_+&oa4Wq1;NjaH_t*ZA?Y_VD%iQW~
zSKmbZ@tM0`>;dSW#1G+lN^*zFR~k1gt%&VtFFAJD>T(?OjjhN1&RzN?#=sB}eCL1c
zbXS{<-<wU_78mc0Ic`41eBL$Xd6C*%jpJ7>+beORnvo$P;mynk438{+InVj-_d2P;
zcID}$c||k!w+Q5YwYJ^3N8jgaBrC(cS+^W>H0s>yJS}_nUH$U$4bOy`CHgzXx65xj
z#>G%|!baIP^)Kg}#ywWmU$#g6*8h8RN_^*em8}QXsLo5bUO(%bPV+V<1_otA!3<cc
zVPIhRG5dIk%j4o$vG+lWz0$Eqq;gd5_q-R~`RV3eZ~}Q8Vw$V->8s}t^P;JN(GO>b
zxcD+|eOs}OnJ;Up!D?oAi<bSOId302W*K;V+&!&JW&V=)4>o&z_9~3~alOQL`fUaV
zh6lTY{G9Bhe$1|jNWYUU!2g~{@sDEqNxma<o>tD`o(ekY;_Xq}hnc+#zp5S<f6Z9q
zv6X>sd!PO@xl0E>zB%?j^ztokMh1uco5lyFtK%fy?OzmF%-N;$tTgh-p7Z)IcXPHs
z*vG&ibH?lK0{4jtN4M{?%k=%aXZhUA*UK0`oS&onA^H8<jZ6*yqGqOtM9+8L@Q;Ph
zC2p?ymcX@tw_N*rX4dkpvh4!@bni1UFnl@cqJk7S3U`+KUbA2RX!*vDHmA}xYqM@e
zFf6*1EWPv0inSl)U;cZbu=A{JxNr5e=*5i}cM1IJy>mUaaC%_%!qYeEt-Dq*?w!E3
zd7jp}vvNn74m>Z7+!MV#LHmPQkl~Z{8!L)99)=&?dGpYxD!J#a`myI385klaZ)G{q
z{pjJ`(#V)4bDrj3o3W`i@7yOZb|!`cc_r7TORVNSpSy}v;5DNS&(Gdvf32R|W}FI$
z3G=PC`sT;Lu;Bi*YPCoImYT?INN>7c;kR?*WW%1tisq$}XC9Xuw|r1+`Ot2oR=r`5
z{-6HeObi#;SC(DyJk@xIn@h3fwZNgwsLvPEv+|jqc>cZl^@cY$gYEQZlIJhkJl<OA
z_U*yNU&1fir|$W+cEbm*^{ckdzh)E5ec;x=HM6dPP9Z;V(6<FC+!_R{d}c2`A3X8j
z<t-<p3In&Le*TdrS9|}&oTO#9El+Q}ctB%kT<$Zi<;M<nNwdam|FkdbR%Y8<Hnyy#
z7TcX0D!B{o9!`&7un=RqcK8DS#)_g?vFTmKn;UP3G~E6w16r_tG^XT~Bl8}Or#g@4
zwUle7|6H;BM`Ltx00YB^ZPSvs3OL2Yf13TZ_2%l!7FkxyY)@sLd2!*#T?;<NGpm=`
zN*<cc$dK^kQH8?WnLl#Qvq)F@e7>fhDfiox-KqX+>c@cTM_o@PM-?B6-r@iI)xDki
z3=FkXiWHU?+F6|CHnubT{&k^VcchH+*S~j{r)OmcFc?j~Hs|Etzc-Gr%DnoFt$}Ar
z<*~?F>3^<n=F49Yz5lX}@)wU&tNou|z3H@PTm3!Pxs$)h6zOqf|K6MxwKbK2p`rPg
zC-^i6Xb>7OZ8Z3A(<0D){%o;EiC0;g)3%ATdv0;*@8nUexo9l?JIM5H>!DDG`Ae0~
zyl2f+p7-`dSdHGwS>KLrz8jXNd7bHkwB~zhe#U((W|d7_7dqdiL-**TcN-I4OtoZv
zu|Fi_=c=q*nY;c~A6x#~D)xMDA_D_M#oG0n-wW2LH`Z^Ow7KVV_*A~d%FlH4UvJuR
zS(AZbgM6m_?dz*D^)FlGroHzFdt~wI^^EJEjygYHz07u_UYUAQ-FLNTxo=8Y85G1z
zBkwGEe&e#qI@`@<jqg`nj#=_oc*4Rdt2g-f#a8;6Hm(U|WY{$E*yhhB=2eORk7?Xl
z_Laf%nbEs551CUmpLzdNEwL|IdC!F5iSk+FW52&It#m6pV56Mk5;xa$@6D~Y*RHRe
zW%lpa@`N={w`AQa|F(sZfua4=<atO#-U$hE!HpMw%(7n7x_uhg9}AvJ<8Vt;v9O~_
zvZ0sle!a_odd8ID#ZF_!TPJE`#rP$+ipLc#PIw)5P9%W&myXympLT}%C46<}ed)5-
zKmJ^x$KAf!q0Q>(&grc?^<)0KzczfjX#EpC&=%&Y7Up55xo0f@L@#H09bp+zFfFcV
z+T$-X_$2miy2ix7z^888U*Efa%Ja@_Z#yneecSS5f!FH(Jk`1CKOwqeZ-1u#Nt5s9
zObiEh9H}xdJZJds{nqp*zTfHz4PoC-&OMpBsqy!e=)D`=SQ$=)O5Hz}{(!sqcXR37
zB1y~nvI4jNtz>`8kYH>$|DS&CH|O`sd7JdQPtV&f%n<R>$@bjLJzUwle9xbLCaLJG
z|Kw`=r|EC9c|C3T7iHaAULtRK?c;sX@80uvg3c6g|1$X=QurwZe@vLxUNYnP_W3i#
zO;zKKH{L#xY*oNrRK9q|%P_qlN1=v$p6!iwf-`$H!hFBI+O%WktZ$JAxAe*`KWt)q
zn{n^9pgE<piYn9B{a#b>K%d9wm)`OBUzfiA|KiF^gEO-?mV=f=<tv}nzh}k4bHioU
z=3i3rp_k_^os+s$*!`i^Q=PY^j0_F)I@|M)KmWQa)Bm!SbGG-dgH`+9cl@3BiK}@2
z)ww@HOmk&6uNDTKd=U1{N8)<l^uNLeOfP5cKa)CdiK+U>uW^4~R`{5H)Vpk@%FuA|
z#hJJBm&ly(;Zun||8nQo*ADZduZFXq2(Xb~oOR3n=hm$?zOPrWdCc6vvv<R`l*s<e
z#R9SYr+;RA?lF+je{wbU|M90gi*xTs%UNH2GV9j&Z?T4Y!QZ197#>`x6G9r7WT<*$
zW~!SvrOs>i^v7w>b}qQc9(sA7x2sIV{iXYo6p{@4>p7ntvpc3_!Ij5g`!wM9SxbY-
z3p?gN)nBx8V`P;c+X<&r+V!V(L3PTfD!zL8^}kExcTZg2kQg2J-@4f9V<_kE1vblm
zs$VZ*U|{%`I_;X-X?<qtZuZ?rW5U$aCHY1FtWalvx^MF48ma1Z1_p=wOAqf$KbFb<
zb<VXf@$Wu=_$qVs-^y8L&(#0he%p6rqJHS*dskBv-&-><+>GkWJ{({DEbW^Q&%B);
z5*xSVzsjx&^{t+@?*GSK|L;9dnj#k*_th&-ltH5Ti;c|l&-zz*Pn}DaI?bay|DmOf
zLcHPmf4hJDy->L7@^cw6h7&QfyrZ6lo-t0EC+OxBS6i|!Sngj!y2sMm{L3YLE$466
zAKg1S_<Jk^!vg*~A>?Jr-=35`J#Vul{L2;1S3f719e3sv$-QysV3)!Hy`_t!`nk$;
zpDOKT_?4!nB)w90&dG)&g{Q<B@7`FxD%1Z-VS~(4r@8k(g{*XV9n$zNaECwpx;s1S
z5B^wUn6rm1Ce-)$y5KpxKNX&sbQpAWt;LKP@oQ$8$+i65zlb3xTQ$9M(x<6~e=oVu
zowf9Ms?AwvMh1s@aT3eVUOK(&(DvZvUu(jhYn$^G*EO!4_09a}$+<uGX5DJvvQ2`4
zVbio@;op3C`fUpj{Ga?SxOVm9P}8@Wx72g*p8Rk#n4RImN@*4LOWEh=reFUla6jQz
z^p`bewhq%C*}f`Y80{Tu`u2>JJ%dD__%q4rJ4HYD98Q}j=$5xs?!Ql5t-&ji>$CUG
zk)3+3q^H{W`8@r7ou4^^zsEB$ENJuuO(-fbc)B=-==X_rw<bXA5CpaOnk9#YSms}o
zZ~r7ZQWsv^>HMH^y2TG8ZN6}jqJ$5Z67$nD&v~8ObpM?-JKL#9CWZqJOG{ffoA?zQ
ze1HA*-G@@pp3LZ*#)8MU9cP-?YEd_D`Nz$+g$HiMd}lxTON61pG}O2HTBY1Kof?Vl
z8|7L|K{;Z=^ey{qv*r~BybGR}mN!rEhg{{?H#Yj$CoFkgo&WhmChz5%C%+Ao_bhvN
z7&P=CqbtVE2+{{~6CA(raE)62()3x<EX$q#NBxs0UYotKoNdF-b6f5I)vV{{Klczc
z70b{QX7y!l^@25Xo<6*qsrPD`UU&P(a?p|_->X~H=Nd*mW!^CD>BHBjH-_Z%$AgYs
zVy;%JdR=H)=J#8@XMW?{6|=r=DZcxEN%-asd(=;?WMbIkR3$cVrQ{az)3XGwg@ZQT
zIxM+!s;IZK@|aCTHPfE1JyrR4%dbs1Q=C<?YG$$Vqx8<tyL8r7UEpJ2X!vgtr6X2_
zw7>x3od?!Ij%PEg=4xHKEB$@$;X2WWY-OvmZcRR?_~GO8jdFFxkoahL@6pcXXRU8}
zdi(bsXTm|z!LWMOGTYZZ7iIqai{CzXt9*HFCg>2#`s+81H`eUE?ppnM&nESAKO}E-
zugYAmUA=Uzt>vDlb-OC`cdR`9DDjOf6T^n=m1!4d%AD{!T4f(TFOiXfAwlMh@wZEl
zPu&u>luAf{a+QBob?tshr{2k{G9T9*nl5LOI{)13O*^E{-)3cCC@S0%p~Hf_3j*w=
z1m?L)cbC6h8u9vem0$ZGz3wgdco%wTPv~EjIsJOI>#p+Skm%X4bjs#8=fY1$?z>l8
zZs&DQh=Cy@-0Dwl>6|i~Ccc_CJ&PaB+E>Yc3p8jewrZJeq~!IwEB)4=cNp<knos!7
znv$2ge@^!Qx;x9N56#`G$-vNl@noaU{8n4`{}F3`7EdmcHh=Y(fq~(`j?!;C=FdvM
zGyC?`z0%Jl8~08OuMb|lqA<wxZ79b>Z~j@E_@9?X#_;~nWny5kw2IOZV?wI-z<y%*
zz!iFVU$iBU#lCy5FR!&J@6Ojg!29LmsZ#rWelg$wUwpN-_T2|>klGt_OEx@sd8+2>
zM!kRQ^3D}iDy*5K%D}L}Sik3TQGB!ze{B7Wb^i_em>3u&^s1k3ON*D8uys}D?(2VN
zT>hi7D0+A7J?=|?ALw2F&d6X;@zOGa@5%mo*4b;G&r4-wU}%t!oSELUzTYZW`}|!?
zx6eHe@h4a3KiybdD}VRio>iIpP8|EcFVM_?xks;i^}~I(3=9h8?%hY71TZquJqN8D
zRg>aQ-xtmO>#cL<*95N3b|qW|{mU%04Rk=&)6t!~um3ZYW2wKtcir;r-_HEEz{T<6
zAk(+6WTwt}8sE-pcOsIBfuViUH4(k*Gv<`U)kcI@%&t53@p7<~v+dQ?!tw`Ypi4)Y
z=h_M{pIeywr_$!qk2}jMPq2TUa9~2H@9n+M<}ds6Oyc_dJx_LScE9zPfg!=+(w%>=
zHh%~xR`@>mmOybfs8P@mTah@=@ZZ0{=XIa&oIGwbGo7U^A*J%Gd}M6&if8}g=TD5}
zcz9mU<f-nTsOd+aez+&bz+j*P^0otpx4&tKzOK7&DNr%%->(T>+wGP)t?{3G==S|O
zD*;}K$*VH&mvWWPFIo53GXAr?HS2cyY3)0A?*rvphyS6zzk}8peV_C6@2NRg?#vNk
zV3;uboYdqClFM7)|M{#o?X~r^X^)pDya6TH?7bV(7yYi9U&wC1{$1zmH*+f@9`9$D
z*uoh9fA>7=omVQqr^kwYmj8F1fq}>G>XysrYU=XNA2|K|_U_bPj`LeV$#&o0!*=DL
zdl;CfRL1?S-nV_5!Lz&bf8Bgiw_;YAn9~lK3z9q+OJl`0%WYw1V0a)et1HHB3koez
zB81}$%5xXpy}0G_rqqw`mikv`m2N-qEol3OZ<{1mH{E8CekH>pAGYrE-TRNv_vhc)
z-v83z^wOW)`?YuQf=pok&i^^&?tT85n`>U3i9QL6YX$}ehyJxY)0N(2&cE}wh(G4j
zrG1_4yL9CK-LL07;1;&-|J|(`ckes@D)0M#W%qXN|25Zl>f4lDTN%;M#BktP)dc29
zyZ2?+qv}tWuV4ka_Q@mpBAsWFjBL;3uT6`HwnzxQJa3uZ-Rre~bYril8cIj=FfugQ
zfIPPl6bm3{!LdZgs?2ci@_eU-p$$EI9?g2s08XI^&o3pGyf^#%|5~bH{Ns42Hn%6D
z)oSxzZQAiUlJP|F)h&f@PrjViTh7nGpkRI5hB>+(<mC_L&m<X-Jr=!QbN#oR$JWe8
zHpdH(<v-q~*B!}!3v>nFw8cl07A}XofDq%x%2k>EP8{ZnE&Y<;-oRrkAs3W5^Dz=9
zF5@;7hhE;tt$4<nL*Dq+-P^l#mf2>oGcX)*Q`?16{NggBVSB*zqrn`BQcgS0FKJG;
zJ`bsudO<<E7kMZfmjPh$1G87n`li+LVd?R`HS$g~uBCpw(!32k9J}Z=SOGCaMRsZA
z87GeGwr^kj7C5v;uY0-N7FGs^1a0BF#5=_9N~$5Z;-71q&+X$^^m)Ch;+11G0|Udh
zvMmuhU*w2!23SpXu<2W!mJjLtRevm73WBB|4d%ZE+M=N)d>5k<0BgWP9I(5ZS}5vd
zVPCM^zFlBhX{3$p4$xG*HK>C8f;@DDMKh96b-3x<OpZi3CyRTZ@7M8xe6>Tklz|~Z
zLrn>M#14{LoXi7?S5gbboo2KN%=`Z1`Q!VumhI<dU@(vnUI@x=IJF^5JP3HTX$QBW
zk2A;j>Wo9hf1+RJGchpmoVu8_Q6LamAzn7$s;pb(iY=8K4<Ac!dt4kVX0F7`z`%3S
zC4}g7Z?R>U&O9fM%L0e~N}E32qt`9n$i~3X_9|mz1P7?6jn{s-<laDVMSq&_c5&SF
zqf<GU85o?+1Y_aygc!e;=ygYOJgjo}wOW7rkyisFL&L(^9R`H7!R2d%rytd6`EXo&
zb}7jI2TTkM$pxUMlN4MD0Y*dIDo~mKqqut;s8AFRWnf6qQ3C}h0gX^;hj>T=y}zOI
zdTHbt7EuNUiOGwPCMhECaD%GFL4Aq3y5+LKAzzM%KiJ>yS$8@~Z59K=fg7L(x+BpU
zWx@AV%WQc;<=FB2nXgM@#f&GiFfbg;Py*eZh{Iwu;U^39x_1j4GHLnn!>Rc7E}b+c
zPS7R;mnTFgsuQlUV&#f0mjw>hE<gG4`%DE;e1J-g8Z@i$a8Gz$-SXav<MWkgnXzL2
zN*oLfJvT2VZTvvABN!B{Loe^^&Ruu<k>?lC9s=tq9kJy1(7Fnb%}7!wZn^wG;u2&k
z<O_c!#e#-CzDJO^ZV<HKlbN7BK}ARkPTY3+gTy7s9Q6R9AR3JU0wFY-ga`x>!)OvB
z5JCf!gnrn6d(ptcz|fE=u%`aSbBhdCJax^!rzDlzqsnnb`Dn<Dh77}KA{b2sqlo}l
z8W;_k(U4&nO$4KfU^EfnOalX%JvP0~7KNP)fa$=|whd;OKtx7E1`-aK<Y>rXh6zMu
zG-M#*fJ!F3xyT5bzB;TB@&Cg4!V6qX3=9Xh|G_hUfvO)g89u5UBTOIyqX7vC2TXD_
zWH7@7A~G5>kZ`~xM?(fPOdukoAp;2qOmZ}2FvA2QG8!_FaKI!-Lk2TUAR?n70|^IA
zax`Qx!vrES8ZwY@z$8aQ1~W_`BBLP#2?tDa#D|Ol(JL)}Oe1N%+o*EP)CLh54H-x{
zV3MODgBd0ek<pNWgaaly8Zww+0udPv8Av!_lA|Gm872^s(U5_J1132dGMHfk5gDW*
z6Zi6ED(<xa5T~P%gVY}=Zp6hIb^B<@FpMUG(L^wE5&@Q#7WY39y*m?>Qbv`7LIE2d
z4H;~q0umby8Bi!-!=oXCEmS~aqagzd1#EaUWUz$_NNhA@K%syQkA@7kPyvaJh72ea
zu;I~=!4@hYvC)tLg#tD_8Zy{I1tc~aGN4evhDSpNTd07<Mnh%;WTgdL(}f@Z7EXWc
zpv?ga7c4mUGfATuqsp;_Ay{ZMWWd3Ig%}MPEP(<R8Vwn6Fkm4@Lk3HrfQ3dw1{@4n
zh|!S25-4Dy(U1WL0~Uf7A(I_>c?$yrvjOOi0ECsauxZqEL<rzwjfVS>2${t4?^9%+
UOEIW!tOmK))78&qol`;+08Y`L4FCWD

literal 0
HcmV?d00001

diff --git a/index.rst b/index.rst
index e779e5494..89c9961e6 100644
--- a/index.rst
+++ b/index.rst
@@ -30,8 +30,8 @@ PostgREST is a standalone web server that turns your PostgreSQL database directl
 Sponsors
 --------
 
-.. image:: _static/cybertec.png
-  :target: https://www.cybertec-postgresql.com/en/
+.. image:: _static/cybertec-new.png
+  :target: https://www.cybertec-postgresql.com/en/?utm_source=postgrest.org&utm_medium=referral&utm_campaign=postgrest
   :width:  13em
 
 .. image:: _static/2ndquadrant.png

From d77da6bd49ce19c3fb9472271e8f58ebf4dcd041 Mon Sep 17 00:00:00 2001
From: Alexis Panagiotopouos <apanagio@gmail.com>
Date: Fri, 12 Mar 2021 13:02:42 +0200
Subject: [PATCH 382/652] Update api.rst

Changed SET LOCAL to SELECT set_config( ... ) so that the value of the header can be dynamically calculated. Supported in versions 9.6 and above.
---
 api.rst | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/api.rst b/api.rst
index 548c7094d..4c72eb03a 100644
--- a/api.rst
+++ b/api.rst
@@ -1530,9 +1530,9 @@ PostgREST reads the ``response.headers`` SQL variable to add extra headers to th
 
   -- tell client to cache response for two days
 
-  SET LOCAL "response.headers" =
-    '[{"Cache-Control": "public"}, {"Cache-Control": "max-age=259200"}]';
-
+  SELECT set_config('response.headers',
+    '[{"Cache-Control": "public"}, {"Cache-Control": "max-age=259200"}]', true);
+  
 Notice that the variable should be set to an *array* of single-key objects rather than a single multiple-key object. This is because headers such as ``Cache-Control`` or ``Set-Cookie`` need to be repeated when setting multiple values and an object would not allow the repeated key.
 
 .. note::

From 9f50e1d2d701a2805e74490f59b340268ba5610f Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Thu, 25 Mar 2021 20:15:08 -0500
Subject: [PATCH 383/652] Add Supabase as a sponsor

---
 _static/supabase.png | Bin 0 -> 4488 bytes
 index.rst            |   6 ++++++
 2 files changed, 6 insertions(+)
 create mode 100644 _static/supabase.png

diff --git a/_static/supabase.png b/_static/supabase.png
new file mode 100644
index 0000000000000000000000000000000000000000..9c3686bd041532138671ea54604bc77885f7cad1
GIT binary patch
literal 4488
zcmeAS@N?(olHy`uVBq!ia0y~yV0_8Iz>v<t%)r1PeAjCy0|UdW0G|-o|NsBX%gfuH
z?_*$Kkdcv*l9F1pX3du`UnC?X1O)|u{rY8buG`>j=dNA5L`6l5ZmoFq=#kOpN;^9{
zPft(dZPf<rO3n8-m6esLsi|>ra9AF0)m>3&ytVqpix=99b2BqD&!0cv($aGD=+VWC
z7f+ZlVc))ebLPxROia9a^QNVxWl>Slym|9FJ3BXT-aKj2B!7Q@joIl21_noOomXg!
zP@9|-5fO3g%kvXYudRP^=IyV~@mJ@~eSF}-x7T%d*6(?9#plx0{s%j`s(lz*1Gy(f
zt2IYD9qW?bS5<Ox$>O^QqK;0QcxAKr#=?T5b2i;SA$&vX69a=lq^FBxNX4ADv6<Dk
zcL+}7d8Lr6*)=70*6u);&PDH(vsUMnP0qQrtdxKI|Nrl&Eb&NSlbA4N>5(|e_tR|_
zIta`VFJ>@aqCIu-gFV*k_8ycMId}GK_i?%AgWnJ2Uk^9$w`FU7-@tDk-uCi&L%HC^
zwwLJ)>T0(P{_+S|W*+`he4yQBDeq<R{&Mz3AnLXD;V+vHa3B8i`M~chWzx&^W#la{
zw!J)k?CR9SUy%<k_kzg3y%%5dJS>@zWL5QM;~ZIe#f#_XzO>pLyy0td|I;@=YEoxB
zTd_Hd>l#Q_dj2}z%S_^DzPvvHGH%+-c-2L`m#3fl@;v*n$&sT*e_g{e4}VED(zVV!
z{H4`stp$QgHCk(xdH9Q~(O+)YEs4KA%~&>POX4q~ng4nVF15YnPWi>W_EOtR@8n-|
z+cFM+X*GQNqQlH5UgENp`d{4{c|A=FU-Oxl-nT5jF8S+U#*=cXrN=fEEk5XTZQnA}
zgIkQVSx+ypdnNMyKBxNO9sd`YYRh?guC%C|@MR~DH;+T(InVj?U;di5aY@hN?tgc+
zQe}D<%yazL`#*sHKxq4YfgdMZ{~6UeHLa3<#=CU?O!wYBIR<w<=S!_WvL*QWU1PJe
zp~d&NUVis>Nul3auf5Z?MGfwjs_kEL{^&+g|0wm^yk)P=vcp(s^|0=6bnn=xeOJ3K
zG2y29k*lFK{~I=zUE3?_nY=i7;=hJUQ-f()XOn}cW_P|cY!=QiHoNFsYLdQ<^>@Ei
zzL%$JR>bv^U5uNpeKv??%(`@8*1OL}cV8Hqe6LuO)3@aI!=~JCOLn*3F}Qp)G(Tpg
z&kWt~>oxxeMIGA^swZ%Hv)1Hy8)o>f3Qazh6)Gu~{oCcTp5j!!r#?|WnUbb^RexQ1
zc=UVXuJ?k6dczD#%$FP5PVMw?F;qCVNi|9>_WjbfhL;!AZ*>2XUw!xdiqa`2VIdou
zw@jIKijjNja|zSAD+4~-9WR?d@g<w;@|155tNjzJ9$orUxk-LS$S%2?MtOUV>at$`
zHe*`JRNW`<(q~O8Og?Gw-85*W;mOGsv1cFk{3<zp!v4Oe`;LFY$MmK4Xm?3IzjCYh
z;+;-6b%Wf@mz$ri+qUJHtd;ztWlb+veN%fmt;1ILVqmgN>-$-=%HCSOD+#YVWA)^d
z%)|AD|E4|2?lRB6_vg=H{_mRalJ4BOQ**NRjF8UBS-IOA4H|x0HojaHx98F#`RuLA
znLR63Jl}RU@1Wt1X?rEMM&Brzq%11(=Be(v6}dB`zKH+SsxAHc-Cq8~be8=4`+6(?
zStk8zpT0hRZ`Iew{q{#Y-u{_B=eR|ZSFTxkd$9BjUB|ncKF>Xw+I(dzyf;NA%1tn+
zE6`k~%f_s6V%}5Lzs|E3{5?0hi*@<VpyNGC)nPRi6W%XjyexUXDbwSNf2a5V(El=u
zhWYgzW^RY%I#14Tewn5cE4_MZD6=eY%bnRd7iN{FEk3FHf=zSlsS<0o^M}`+U|T1(
zA^hu}j~cJ+Wti6KF1XUz@!e?U9j=ueu3r=9=LCFDuglJ0R8I^}R6lgwX_4qM%ZrAW
z?YXA*&G;Ale?hL=tZ!3x98<nGd1l|X(A%LKV!ldzx~1@pwY<Vs?i+)ft%T2MANSes
zQZ2aDgJoiy10pws`)>QeIfrqFR#=dJ^n`|$a*8WuH`F_?+qW<^c<v>QCzi>x6n-sr
zDbc%}^s#HkB}<)CQ7OHfyq6o@O>@-hIL0F99+6wuo^YrwdX?DznC6WFX}6MA`<&}l
z?Ae_o$XW6;dE)muT(Pl2L4wz|FZ4>~oyPga*{{DmOIw<u$G_4#^Mpz2?)c*_%5$$p
zzppb3Tg|!7FCvGl{IKcu4&j;KwtZNx7htWZs8@8Lt|xBtD|y4%Z0EBd6|er0OWczy
z!v5`O>AL+j+b%2$H;dDmYB`}RAX9Db<q*$>D-^owLKkHClwIn0q5n&rlTC8huKPVw
zCA-@Va=o9+#Xj^sI_rM=#hxu&S?z@9L^&+el|F83u;uZ?^5v4%AD7hMshW3DHHS@i
zs^o3|fJ3eonbG(BdQUCAW%AX<YMG`w@1u>Y&s+8jX<OAh7YJSUFy^!WRIQ_MI`Zya
z*AfpOj?ZUn3Pp{0*L!bwczyGO`eh57Y18gb(YLmnQfE0YCh^Bqf!}7c7tSrOaT5JI
z$;bKj+`J8Od&5G0C7)ZYb>Q-oz*?cpT*4;~KAfPsjCs54XMw&(k%+k}#?2dkOzW+G
z+3x)E!RN3Z``s*uzSyk#d8U)2dTMV}<THl(UMs(dUVCBw($C8DUc-y;ztlq;-gc>#
zTIakBTD{z0?H$2`Lgp_&IcwHLy=usOq+!LfKgiO*Vc`vKj?bHf=f&wy^_yoaqI|*n
zRgj;Qp>D^sxG0&~A~hdtdCY9Xl5VT;>z;pAu}m|0<HP>Ym^lvj<Ja$+a(=DDvh3nV
zVINB3Z`Y@b?8r5!Klr6<LYLEw4}xd+YA0(w^0;fadd}p&nPGEG5@x;rvbAj9N|UF;
z9TxlEuo~S|H}qX2vvB3xmA_USbF1f>TdFiyvdzluKN0Ep+<VRDw*7Mc`B#~BlXh7K
z&Fpx3VM}Vq+$A#8il-D`lDwSM>?%C>{gUJzF8>s{g2i_geEY%E?rL-O;;JQ=qqa<*
zBy2j}#n`thDAD+Uo~5Jx4R!AoYvqnNKPYgJNp}w_To`iaj&lCR)oT9~@1Id@%>CZ@
zGF<2~tDn`xoY_9-Z(1Z*GhO!8ysvS$Re9Pz?U$01B+qW~FIgY_Gq8VR<#T6$2d#N-
zS_-RXWLY2Dd+Dk=>q@VgnK#S4Ki(*vX@C0C#gwGLr3W~Df}cqqvC*)Q%hqDO^e=On
zroBduMh~-8^t9>c4!Ltlt?Y2vuXA})pl9H$=Pj8oCW8H<mM@uqnOZfTVQ^h;pgX-=
zMZl-}&#cR*{R8Hn+Oj_UxwHR<_P(_fxxyJv9SSy|;3L2AQg}hLtMvQXo9aVOFAe2P
zN%BwF<(9KaYpPm$)Q*okV{)$fd}>ItF}WOagn5nm`7{kt^{`3*gx)AG)9&-rnrX^b
zw`&@6m2_lT`_Y+hF8k|Rd%mA#e<i45#eK=PYwrt9!I>pxg#yZg6M3Jk?Y&;y9Jt^0
zSX@J<*Q8`qrEG^qk9o9q-(CNzE_uPciK&z2E(CcVHrgn<y0mzMviH3HOE0%;$S`Zo
z4X7>sEB%#4cFwfusb;1hRMsyJzxXIttgy^5_^!p7ubaM2xc;S`)o1eY-rviLE;FrA
zc<py6(kkkaNywQ+Poug*_FR!~VE!qjuYE#e?{O=GzidW-rQU5+nrinew5M*zE3Z<C
zoBmCiPfPd%eodGxoEKZ2z|D2FB=*3TDZjiJ`i+Cl`S|#5S--gTd4}53NwQb_KgoJ9
z*6rQ5Q?Fgyb!nkZ*e%awi+$W{WbPj<$*|M*Xxeo-U@MzQ+ShAY_8tX}jF+#NWv}JS
z;=HCci}6I)GY{5jzm|2o`xri-qtE`{ey>LRpNcme>bi@S`9v$eT)fV;E$&2#W7}f=
z@5)cP!<3R;jD6><?k;{Ewe8Hdrhqk#2^y6_GjE;>wDs^`{kHk;k`;HB=<HK^ta~)s
z-STDR-L17B>K_{JU1KF8pf0#^F&7W_rfGdESf1?XWnE~|@{+6alFw>G$rZd$j6YnN
z657<)_tHZvgIT?2>-2Y?$5wF*bud>~S4`6ns-N2P-8*B?=Pnk-Uk@!ROL^p<bd<=L
zd&?zWN@fXol&UT0@KVSAkkIbn93}-}sb#5)4V#j^P72M7zQyg+5hFI8E6VBA#@jl_
zn^jyFf8<Mwny^~CalM6{bNapV{Zn2q7G|B+8M^xIgVcG!Uw-se>2I4mO}*)*m{7&Z
zSBvD%$frs=Zn)`a#ap&EYT3t|<^{Y-{Lf#6i0eK4a;e9gb?(W}U(cK88FYLJT(8ih
zvxZOC#m^=z;0*tPDHp?EI8EWa^JdcnhnOwA?w_uO^W3_rE2`e09{Pyk?9%QxPAld|
zEnA&4U-Fh@6{nAngYbug&3enWv@YXYvUu~-jvn?J?(C_H-yV0q=hK`tc~6y64{P9U
z-Bk@I7f*g-b$hpSxw@>9Xb7Xfx#NbLkG~7Gs>e(^#3`6twQP0nHfg=)rPbZ>`J#eN
z8ao@laql%cHdC#5o`T!+pqEX_CD;6%H`FCO&9~`m73pt$axB(UJ@%le?C----(6p-
zZHbGWBb{-3TTx9&z)ku2wx_0kKeXlSg1RNE&)v_?-4b;(|EApMC5DV&S&y>bth*I?
z|Iwq*Yu<8r9kq`Ua^Kouv*q98?@rI|$~tHN<k5<~cr3Zx^66bJhQ{1uWw$Mx^Itb)
zD21$?T=?a-)r(xIAOFNQFF$<r-ZUejpFYAH9Q)YTEs?sd+t$49&n@E>dO}7XOEx(N
zF{(Ry-z>RWF#X=kxF`eN>k4;jEtgG~lv;JQg?a0$4XNu5JlQL?kD7d%(P6E<N%CgI
zk#8MoQNP>b&o;TM*k(*wb3*0nliRG9>-s`ItgdRlQ+aIyi#!+aMf<;xcjOht6&#u7
zzS7x?F)4Xgrnh_Rl*QNgaJ?+8yuvYsb52{Csdqrt)yS0+UitI8r>Y#=e`+F^oxsJt
zx95L}4Oth#Hw%<&Y8k#BY&tw;Nq*~vZ?hYf`3>|ZoWAwe#Its#M04HVnYqVqGA}T0
z{P|MWbL*#{O`NuM0>RBwcU|{#)l<BfT{?M1R4vDgiZ>eSwFjDHRxPdDljs|8kSX!y
zgCh!;c~>zlSi6jM#rlX1ttZ+l5?(qklNOukkyfmF&?H1X%hg(Kqkr3x3oKDbmKUkb
zauVBC?a<ZDw0Gve=gd{Bgf+`&YaRJKGo<}u-xZ&Vs*Jacm$x4|o;WMVyCYF8eE*e4
z+m(JA%J`@(m?fO9{oTKYdAZPWf8U)m`TL?bZeO(2Np-e$aZ=~4E9GHwY?plHUoHtY
ziTN^d`H#Z^+(oul&KE9hy1A{{E`e2yJ;_QaTKdVC#qX+TF+WtSv9!CT{Cnz?%MO|c
z7G}lTn0}l6TI+>9*Ywz1j%8H~BDZKu9oanR)4YPJsS~<ZU%XV%7x&8ll*jo;i-ZG?
zs+G68?w2xY`XQY?ul&ccTQ!SipDj#m`u0I!_L^wPjMudtp@&<~?$6kE@%Q?FYAX->
z*+owHck~onJww0>zWNux6#h;;{rmp)uW6U#Rqm>%x*k5PlfFmW^5>NZrIi!rAMiGe
z4xN1K=@Ql3TCAU!H)xpc{C%JEujS^iDVwG8UR|-4*^wBre!ct8?6AaLLi;BRwmn=C
z9HMyf`}NbFAIs%BrPCK1eBmx#DSS<Ra@D~f##5$wefbe+Ah*u!^w&2pq$bp?II6~9
zbm=~a$YnNu=U<Q5zFg|JRbe>%<>vyC*)}&k>$xSCooC;9<H@`Dep@Au!(V<X98dN?
z;Tg_z`FTrC&ZirX4;uK)=b!Oncf07{I%AMxx&EUkdzU|5qTTkgnCWQp|GGC9Pk_{D
z$o)>MS9!V+#6IAA-`-F?*3f6Z@S%$P_NEZ#q8m?6TE6T`{59vnQMK>>=RCtN#0Q?L
z-FS9^MC8Z!wI|Js_Zk0U>bIR@Zxv)-`+xp%xsHS8Zc_cWuIjl3VKQcyzaJO-EA{8$
z1d-V`f$F&hen*bows`rx;YNkD`d^uX|CcOYK5v|^-#fWZ?#GY&!K-%j^6>ERoNN5g
Zd`x#wN9^l5Ck6%v22WQ%mvv4FO#sh&p?LrR

literal 0
HcmV?d00001

diff --git a/index.rst b/index.rst
index 89c9961e6..f0fb38f8f 100644
--- a/index.rst
+++ b/index.rst
@@ -42,6 +42,12 @@ Sponsors
   :target: https://tryretool.com/?utm_source=sponsor&utm_campaign=postgrest
   :width:  13em
 
+.. image:: _static/supabase.png
+  :target: https://supabase.io?utm_source=postgrest%20backers&utm_medium=open%20source%20partner&utm_campaign=postgrest%20backers%20github&utm_term=homepage
+  :width:  13em
+
+|
+
 Motivation
 ----------
 

From 2a2a4fdd9282d0237425ce7125fb8bfba79e06e4 Mon Sep 17 00:00:00 2001
From: Wolfgang Walther <wolfgangwalther@users.noreply.github.com>
Date: Mon, 5 Apr 2021 21:52:31 +0200
Subject: [PATCH 384/652] remove translation section from readme

TODO: implement a proper translation workflow
---
 README.md | 11 -----------
 1 file changed, 11 deletions(-)

diff --git a/README.md b/README.md
index 0bf695513..9f964a975 100644
--- a/README.md
+++ b/README.md
@@ -18,14 +18,3 @@ Once in the nix-shell you have the following commands available:
 
 This documentation is structured according to tutorials-howtos-topics-references. For more details on the rationale of this structure, 
 see https://www.divio.com/blog/documentation.
-
-## Translations
-
-Translations are maintained in separate repositories forked from this one. Once you finish translating in your fork you can upload the project
-to https://readthedocs.org and we'll link to it in the official documentation site https://postgrest.org.
-
-See more details in the chinese translation [PR](https://github.com/PostgREST/postgrest-docs/issues/66#issuecomment-297431688).
-
-### Available translations
-
-- Chinese - https://github.com/Lellansin/postgrest-docs (latest version `v0.4.2.0`)

From a1178a80164d0f5fe92368dd87993abb08c874a3 Mon Sep 17 00:00:00 2001
From: Wolfgang Walther <walther@technowledgy.de>
Date: Tue, 1 Dec 2020 00:30:05 +0100
Subject: [PATCH 385/652] move "Build from Source" to installation chapter and
 remove "Running the Test Suite"

---
 development.rst       | 156 ------------------------------------------
 index.rst             |  14 ++--
 install.rst           |  61 +++++++++++++----
 releases/upcoming.rst |   2 +-
 4 files changed, 55 insertions(+), 178 deletions(-)
 delete mode 100644 development.rst

diff --git a/development.rst b/development.rst
deleted file mode 100644
index ff9c987a9..000000000
--- a/development.rst
+++ /dev/null
@@ -1,156 +0,0 @@
-.. _build_source:
-
-Build from Source
-=================
-
-.. note::
-
-  We discourage building and using PostgREST on **Alpine Linux** because of a reported GHC memory leak on that platform.
-
-To help with development, you'll need to build from source. `Stack <https://github.com/commercialhaskell/stack>`_ makes it easy. It will install any necessary Haskell dependencies on your system.
-
-* `Install Stack <http://docs.haskellstack.org/en/stable/README.html#how-to-install>`_ for your platform
-* Install Library Dependencies
-
-  =====================  =======================================
-  Operating System       Dependencies
-  =====================  =======================================
-  Ubuntu/Debian          libpq-dev, libgmp-dev, zlib1g-dev
-  CentOS/Fedora/Red Hat  postgresql-devel, zlib-devel, gmp-devel
-  BSD                    postgresql95-client
-  OS X                   libpq, gmp
-  =====================  =======================================
-
-* Build and install binary
-
-  .. code-block:: bash
-
-    git clone https://github.com/PostgREST/postgrest.git
-    cd postgrest
-
-    # adjust local-bin-path to taste
-    stack build --install-ghc --copy-bins --local-bin-path /usr/local/bin
-
-.. note::
-
-   - If building fails and your system has less than 1GB of memory, try adding a swap file.
-   - `--install-ghc` flag is only needed for the first build and can be omitted in the subsequent builds.
-
-* Check that the server is installed: :code:`postgrest --help`.
-
-Running the Test Suite
-======================
-
-To properly run the test suite, you need a PostgreSQL database that the tests can run against. There are several ways to set up this database.
-
-Testing with a temporary database
-~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-If you have PostgreSQL installed locally (:code:`initdb`, :code:`pg_ctl` and :code:`psql` should be on your PATH, no server needs to be running), you can run the test suite against a temporary database:
-
-.. code:: bash
-
-   test/with_tmp_db stack test
-
-The :code:`with_tmp_db` script will set up a new PostgreSQL cluster in a temporary directory, set the required environment variables and run the command that you passed it as an argument, :code:`stack test` in the example above. When the command is done, the temporary database is torn down and deleted again.
-
-Manually creating the Test Database
-~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-To manually create a database for testing, use the test creation script :code:`create_test_database` in the :code:`test/` folder.
-
-The script expects the following parameters:
-
-.. code:: bash
-
-  test/create_test_db connection_uri database_name [test_db_user] [test_db_user_password]
-
-Use the `connection URI <https://www.postgresql.org/docs/current/static/libpq-connect.html#AEN45347>`_ to specify the user, password, host, and port. Do not provide the database in the connection URI. The PostgreSQL role you are using to connect must be capable of creating new databases.
-
-The :code:`database_name` is the name of the database that :code:`stack test` will connect to. If the database of the same name already exists on the server, the script will first drop it and then re-create it.
-
-Optionally, specify the database user :code:`stack test` will use. The user will be given necessary permissions to reset the database after every test run.
-
-If the user is not specified, the script will generate the role name :code:`postgrest_test_` suffixed by the chosen database name, and will generate a random password for it.
-
-Optionally, if specifying an existing user to be used for the test connection, one can specify the password the user has.
-
-The script will return the db uri to use in the tests--this uri corresponds to the :code:`db-uri` parameter in the configuration file that one would use in production.
-
-Generating the user and the password allows one to create the database and run the tests against any PostgreSQL server without any modifications to the server. (Such as allowing accounts without a password or setting up trust authentication, or requiring the server to be on the same localhost the tests are run from).
-
-Running the Tests with the manually created database
-~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-To run the tests, one must supply the database uri in the environment variable :code:`POSTGREST_TEST_CONNECTION`.
-
-Typically, one would create the database and run the test in the same command line, using the ``postgres`` superuser:
-
-.. code:: bash
-
-  POSTGREST_TEST_CONNECTION=$(test/create_test_db "postgres://postgres:pwd@database-host" test_db) stack test
-
-For repeated runs on the same database, one should export the connection variable:
-
-.. code:: bash
-
-  export POSTGREST_TEST_CONNECTION=$(test/create_test_db "postgres://postgres:pwd@database-host" test_db)
-  stack test
-  stack test
-  ...
-
-If the environment variable is empty or not specified, then the test runner will default to connection uri
-
-.. code:: bash
-
-  postgres://postgrest_test@localhost/postgrest_test
-
-This connection assumes the test server on the :code:`localhost:code:` with the user `postgrest_test` without the password and the database of the same name.
-
-Destroying the Database
-~~~~~~~~~~~~~~~~~~~~~~~
-
-The test database will remain after the test, together with four new roles created on the PostgreSQL server. To permanently erase the created database and the roles, run the script :code:`test/delete_test_database`, using the same superuser role used for creating the database:
-
-.. code:: bash
-
-  test/destroy_test_db connection_uri database_name
-
-Testing with Docker
-~~~~~~~~~~~~~~~~~~~
-
-The ability to connect to non-local PostgreSQL simplifies the test setup. One elegant way of testing is to use a disposable PostgreSQL in docker.
-
-For example, if local development is on a mac with Docker for Mac installed:
-
-.. code:: bash
-
-  $ docker run --name db-scripting-test -e POSTGRES_PASSWORD=pwd -p 5434:5432 -d postgres
-  $ POSTGREST_TEST_CONNECTION=$(test/create_test_db "postgres://postgres:pwd@localhost:5434" test_db) stack test
-
-Additionally, if one creates a docker container to run stack test (this is necessary on Mac OS Sierra with GHC below 8.0.1, where :code:`stack test` fails), one can run PostgreSQL in a separate linked container, or use the locally installed PostgreSQL app.
-
-Build the test container with :code:`test/Dockerfile.test`:
-
-.. code:: bash
-
-  $ docker build -t pgst-test - < test/Dockerfile.test
-  $ mkdir .stack-work-docker ~/.stack-linux
-
-The first run of the test container will take a long time while the dependencies get cached. Creating the :code:`~/.stack-linux` folder and mapping it as a volume into the container ensures that we can run the container in disposable mode and not worry about subsequent runs being slow. :code:`.stack-work-docker` is also mapped into the container and must be specified when using stack from Linux, not to interfere with the :code:`.stack-work` for local development. (On Sierra, :code:`stack build` works, while :code:`stack test` fails with GHC 8.0.1).
-
-Linked containers:
-
-.. code:: bash
-
-  $ docker run --name pg -e POSTGRES_PASSWORD=pwd  -d postgres
-  $ docker run --rm -it -v `pwd`:`pwd` -v ~/.stack-linux:/root/.stack --link pg:pg -w="`pwd`" -v `pwd`/.stack-work-docker:`pwd`/.stack-work pgst-test bash -c "POSTGREST_TEST_CONNECTION=$(test/create_test_db "postgres://postgres:pwd@pg" test_db) stack test"
-
-Stack test in Docker for Mac, PostgreSQL app on mac:
-
-.. code:: bash
-
-  $ host_ip=$(ifconfig en0 | grep 'inet ' | cut -f 2 -d' ')
-  $ export POSTGREST_TEST_CONNECTION=$(test/create_test_db "postgres://postgres@$HOST" test_db)
-  $ docker run --rm -it -v `pwd`:`pwd` -v ~/.stack-linux:/root/.stack -v `pwd`/.stack-work-docker:`pwd`/.stack-work -e "HOST=$host_ip" -e "POSTGREST_TEST_CONNECTION=$POSTGREST_TEST_CONNECTION" -w="`pwd`" pgst-test bash -c "stack test"
-  $ test/destroy_test_db "postgres://postgres@localhost" test_db
diff --git a/index.rst b/index.rst
index f0fb38f8f..c071b055b 100644
--- a/index.rst
+++ b/index.rst
@@ -188,15 +188,6 @@ PostgREST has a growing ecosystem of examples, libraries, and experiments. Here
 * :ref:`eco_extensions`
 * :ref:`clientside_libraries`
 
-For helping with development, see the following page.
-
-* :doc:`Development <development>`
-
-.. toctree::
-   :caption: Development
-   :hidden:
-
-   development.rst
 
 Release Notes
 -------------
@@ -277,3 +268,8 @@ Translations
 ------------
 
 * `Chinese <http://postgrest.org/zh/latest/>`_ (latest version ``v0.4.2.0``)
+
+Contributing
+------------
+
+Please see the `Contributing guidelines <https://github.com/PostgREST/postgrest/blob/main/.github/CONTRIBUTING.md>`_ in the main PostgREST repository.
diff --git a/install.rst b/install.rst
index 88595fe82..87d650c9d 100644
--- a/install.rst
+++ b/install.rst
@@ -30,17 +30,15 @@ If you use **Nix**, then you can install PostgREST from nixpkgs.
 
   nix-env -i haskellPackages.postgrest
 
-If you use Windows, you can install PostgREST using `Chocolatey <https://chocolatey.org>`_ or `Scoop <https://scoop.sh>`_.
+If you use Windows, you can install PostgREST using `Chocolatey <https://chocolatey.org/packages/postgrest>`_ or `Scoop <https://scoop.sh>`_.
 
 .. code:: bash
 
   choco install postgrest
   scoop install postgrest
 
-When a pre-built binary does not exist for your system you can :ref:`build the project from source <build_source>`.
-
-Running
--------
+Running PostgREST
+=================
 
 If you downloaded PostgREST from the release page, first extract the compressed file to obtain the executable.
 
@@ -88,14 +86,9 @@ For a complete reference of the configuration file, see :ref:`configuration`.
 .. _pg-dependency:
 
 PostgreSQL dependency
-=====================
+---------------------
 
-To use PostgREST you will need an underlying database. We require PostgreSQL 9.4 or greater, but recommend at least 9.5 for row-level security features.
-You can use something like Amazon `RDS <https://aws.amazon.com/rds/>`_ but installing your own locally is cheaper and more convenient for development.
-
-* `Instructions for OS X <http://exponential.io/blog/2015/02/21/install-postgresql-on-mac-os-x-via-brew/>`_
-* `Instructions for Ubuntu 14.04 <https://www.digitalocean.com/community/tutorials/how-to-install-and-use-postgresql-on-ubuntu-14-04>`_
-* `Installer for Windows <http://www.enterprisedb.com/products-services-training/pgdownload#windows>`_
+To use PostgREST you will need an underlying database. We require PostgreSQL 9.5 or greater. You can use something like `Amazon RDS <https://aws.amazon.com/rds/>`_ but installing your own locally is cheaper and more convenient for development. You can also run PostgreSQL in a :ref:`docker container<pg-in-docker>`.
 
 Docker
 ======
@@ -157,6 +150,8 @@ The database connection string above is just an example. Adjust the role and pas
 
     host    all             all             10.0.0.10/32            trust
 
+.. _pg-in-docker:
+
 Containerized PostgREST *and* db with docker-compose
 ----------------------------------------------------
 
@@ -208,6 +203,48 @@ If you want to have a visual overview of your API in your browser you can add sw
 
 With this you can see the swagger-ui in your browser on port 8080.
 
+.. _build_source:
+
+Building from Source
+====================
+
+When a pre-built binary does not exist for your system you can build the project from source.
+
+.. note::
+
+  We discourage building and using PostgREST on **Alpine Linux** because of a reported GHC memory leak on that platform.
+
+You can build PostgREST from source with `Stack <https://github.com/commercialhaskell/stack>`_. It will install any necessary Haskell dependencies on your system.
+
+* `Install Stack <https://docs.haskellstack.org/en/stable/README/#how-to-install>`_ for your platform
+* Install Library Dependencies
+
+  =====================  =======================================
+  Operating System       Dependencies
+  =====================  =======================================
+  Ubuntu/Debian          libpq-dev, libgmp-dev, zlib1g-dev
+  CentOS/Fedora/Red Hat  postgresql-devel, zlib-devel, gmp-devel
+  BSD                    postgresql95-client
+  OS X                   libpq, gmp
+  =====================  =======================================
+
+* Build and install binary
+
+  .. code-block:: bash
+
+    git clone https://github.com/PostgREST/postgrest.git
+    cd postgrest
+
+    # adjust local-bin-path to taste
+    stack build --install-ghc --copy-bins --local-bin-path /usr/local/bin
+
+.. note::
+
+   - If building fails and your system has less than 1GB of memory, try adding a swap file.
+   - `--install-ghc` flag is only needed for the first build and can be omitted in the subsequent builds.
+
+* Check that the server is installed: :code:`postgrest --help`.
+
 Deploying to Heroku
 ===================
 
diff --git a/releases/upcoming.rst b/releases/upcoming.rst
index 4ef4ea9af..c7fb082c9 100644
--- a/releases/upcoming.rst
+++ b/releases/upcoming.rst
@@ -5,7 +5,7 @@
 Upcoming
 ========
 
-These are changes yet unreleased. If you'd like to try them out before a new official release, you can :ref:`build_source`.
+These are changes yet unreleased. If you'd like to try them out before a new official release, you can use a `nightly release <https://github.com/PostgREST/postgrest/releases/tag/nightly>`_.
 
 Added
 -----

From 92395eae8aa2185bc2e9d0f689e647434fb26f31 Mon Sep 17 00:00:00 2001
From: Wolfgang Walther <walther@technowledgy.de>
Date: Mon, 7 Dec 2020 20:08:42 +0100
Subject: [PATCH 386/652] added postgrest-docs-linkcheck; clean up links

* removed outdated links
* updated permanent redirections
* updated postgres docs links to current version
* sort links in ecosystems by repo-name
* change http:// to https://
---
 admin.rst                               |   6 +-
 api.rst                                 |  26 ++---
 auth.rst                                |   8 +-
 configuration.rst                       |  12 +--
 default.nix                             |  14 ++-
 ecosystem.rst                           | 121 ++++++++++++------------
 how-tos/casting-type-to-custom-json.rst |   4 +-
 how-tos/providing-images-for-img.rst    |   2 +-
 index.rst                               |  43 ++++-----
 install.rst                             |   6 +-
 releases/upcoming.rst                   |   2 +-
 releases/v5.2.0.rst                     |   4 +-
 releases/v6.0.2.rst                     |   6 +-
 releases/v7.0.0.rst                     |   4 +-
 releases/v7.0.1.rst                     |   4 +-
 schema_structure.rst                    |  12 +--
 shell.nix                               |   1 +
 tutorials/tut0.rst                      |   6 +-
 18 files changed, 141 insertions(+), 140 deletions(-)

diff --git a/admin.rst b/admin.rst
index d131708e4..2a8d03d4f 100644
--- a/admin.rst
+++ b/admin.rst
@@ -1,3 +1,5 @@
+.. _admin:
+
 Hardening PostgREST
 ===================
 
@@ -51,7 +53,7 @@ However it's very easy to delete the **entire table** by omitting the query para
 
   DELETE /logs HTTP/1.1
 
-This can happen accidentally such as by switching a request from a GET to a DELETE. To protect against accidental operations use the `pg-safeupdate <https://github.com/eradman/pg-safeupdate>`_ PostgreSQL extension. It raises an error if UPDATE or DELETE are executed without specifying conditions. To install it you can use the `PGXN <http://pgxn.org/>`_ network:
+This can happen accidentally such as by switching a request from a GET to a DELETE. To protect against accidental operations use the `pg-safeupdate <https://github.com/eradman/pg-safeupdate>`_ PostgreSQL extension. It raises an error if UPDATE or DELETE are executed without specifying conditions. To install it you can use the `PGXN <https://pgxn.org/>`_ network:
 
 .. code-block:: bash
 
@@ -60,7 +62,7 @@ This can happen accidentally such as by switching a request from a GET to a DELE
   # then add this to postgresql.conf:
   # shared_preload_libraries='safeupdate';
 
-This does not protect against malicious actions, since someone can add a url parameter that does not affect the result set. To prevent this you must turn to database permissions, forbidding the wrong people from deleting rows, and using `row-level security <https://www.postgresql.org/docs/current/static/ddl-rowsecurity.html>`_ if finer access control is required.
+This does not protect against malicious actions, since someone can add a url parameter that does not affect the result set. To prevent this you must turn to database permissions, forbidding the wrong people from deleting rows, and using `row-level security <https://www.postgresql.org/docs/current/ddl-rowsecurity.html>`_ if finer access control is required.
 
 Count-Header DoS
 ----------------
diff --git a/api.rst b/api.rst
index 4c72eb03a..d5951818a 100644
--- a/api.rst
+++ b/api.rst
@@ -108,7 +108,7 @@ The view will provide a new endpoint:
 Full-Text Search
 ~~~~~~~~~~~~~~~~
 
-The :code:`fts` filter mentioned above has a number of options to support flexible textual queries, namely the choice of plain vs phrase search and the language used for stemming. Suppose that :code:`tsearch` is a table with column :code:`my_tsv`, of type `tsvector <https://www.postgresql.org/docs/current/static/datatype-textsearch.html>`_. The following examples illustrate the possibilities.
+The :code:`fts` filter mentioned above has a number of options to support flexible textual queries, namely the choice of plain vs phrase search and the language used for stemming. Suppose that :code:`tsearch` is a table with column :code:`my_tsv`, of type `tsvector <https://www.postgresql.org/docs/current/datatype-textsearch.html>`_. The following examples illustrate the possibilities.
 
 .. code-block:: http
 
@@ -183,7 +183,7 @@ Casting the columns is possible by suffixing them with the double colon ``::`` p
 JSON Columns
 ~~~~~~~~~~~~
 
-You can specify a path for a ``json`` or ``jsonb`` column using the arrow operators(``->`` or ``->>``) as per the `PostgreSQL docs <https://www.postgresql.org/docs/9.5/static/functions-json.html>`_.
+You can specify a path for a ``json`` or ``jsonb`` column using the arrow operators(``->`` or ``->>``) as per the `PostgreSQL docs <https://www.postgresql.org/docs/current/functions-json.html>`_.
 
 .. code-block:: http
 
@@ -427,7 +427,7 @@ To do this, specify the ``Prefer: count=planned`` header.
 
 Note that the accuracy of this count depends on how up-to-date are the PostgreSQL statistics tables.
 For example in this case, to increase the accuracy of the count you can do ``ANALYZE bigtable``.
-See `ANALYZE <https://www.postgresql.org/docs/11/sql-analyze.html>`_ for more details.
+See `ANALYZE <https://www.postgresql.org/docs/current/sql-analyze.html>`_ for more details.
 
 .. _estimated_count:
 
@@ -676,14 +676,14 @@ Since it contains ``competition_id`` and ``film_id`` — and each one has a **fo
 
   GET /nominations_view?select=rank,competitions(name,year),films(title)&rank=eq.5 HTTP/1.1
 
-It's also possible to embed `Materialized Views <https://www.postgresql.org/docs/11/rules-materializedviews.html>`_.
+It's also possible to embed `Materialized Views <https://www.postgresql.org/docs/current/rules-materializedviews.html>`_.
 
 .. warning::
 
    It's not guaranteed that all kinds of views will be embeddable. In particular, views that contain
    UNIONs will not be made embeddable.
 
-   Why? PostgREST detects source table foreign keys in the view by querying and parsing `pg_rewrite <https://www.postgresql.org/docs/11/catalog-pg-rewrite.html>`_.
+   Why? PostgREST detects source table foreign keys in the view by querying and parsing `pg_rewrite <https://www.postgresql.org/docs/current/catalog-pg-rewrite.html>`_.
    This may fail depending on the complexity of the view.
 
    `Report an issue <https://github.com/PostgREST/postgrest/issues>`_ if your view is not made embeddable so we can
@@ -879,7 +879,7 @@ Similarly to the **target**, the **hint** can be a **table name**, **foreign key
 Insertions / Updates
 ====================
 
-All tables and `auto-updatable views <https://www.postgresql.org/docs/current/static/sql-createview.html#SQL-CREATEVIEW-UPDATABLE-VIEWS>`_ can be modified through the API, subject to permissions of the requester's database role.
+All tables and `auto-updatable views <https://www.postgresql.org/docs/current/sql-createview.html#SQL-CREATEVIEW-UPDATABLE-VIEWS>`_ can be modified through the API, subject to permissions of the requester's database role.
 
 To create a row in a database table post a JSON object whose keys are the names of the columns you would like to create. Missing properties will be set to default values when applicable.
 
@@ -1044,7 +1044,7 @@ All the columns must be specified in the request body, including the primary key
 
 .. note::
 
-  Upsert features are only available starting from PostgreSQL 9.5 since it uses the `ON CONFLICT clause <https://www.postgresql.org/docs/9.5/static/sql-insert.html#SQL-ON-CONFLICT>`_.
+  Upsert features are only available starting from PostgreSQL 9.5 since it uses the `ON CONFLICT clause <https://www.postgresql.org/docs/current/sql-insert.html#SQL-ON-CONFLICT>`_.
 
 .. _delete:
 
@@ -1138,7 +1138,7 @@ Procedures must be declared with named parameters. Procedures declared like
 
   CREATE FUNCTION non_named_args(integer, text, integer) ...
 
-cannot be called with PostgREST, since we use `named notation <https://www.postgresql.org/docs/current/static/sql-syntax-calling-funcs.html#SQL-SYNTAX-CALLING-FUNCS-NAMED>`_ internally.
+cannot be called with PostgREST, since we use `named notation <https://www.postgresql.org/docs/current/sql-syntax-calling-funcs.html#SQL-SYNTAX-CALLING-FUNCS-NAMED>`_ internally.
 
 Note that PostgreSQL converts identifier names to lowercase unless you quote them like:
 
@@ -1161,7 +1161,7 @@ Procedures that do not modify the database can be called with the HTTP GET verb
 
 .. note::
 
-  The `volatility marker <https://www.postgresql.org/docs/current/static/xfunc-volatility.html>`_ is a promise about the behavior of the function.  PostgreSQL will let you mark a function that modifies the database as ``IMMUTABLE`` or ``STABLE`` without failure.  However, because of the read-only transaction this would still fail with PostgREST.
+  The `volatility marker <https://www.postgresql.org/docs/current/xfunc-volatility.html>`_ is a promise about the behavior of the function.  PostgreSQL will let you mark a function that modifies the database as ``IMMUTABLE`` or ``STABLE`` without failure.  However, because of the read-only transaction this would still fail with PostgREST.
 
 Because ``add_them`` is ``IMMUTABLE``, we can alternately call the function with a GET request:
 
@@ -1215,7 +1215,7 @@ You can call a function that takes an array parameter:
 
    [2,3,4,5]
 
-For calling the function with GET, you can pass the array as an `array literal <https://www.postgresql.org/docs/11/arrays.html#ARRAYS-INPUT>`_,
+For calling the function with GET, you can pass the array as an `array literal <https://www.postgresql.org/docs/current/arrays.html#ARRAYS-INPUT>`_,
 as in ``{1,2,3,4}``. Note that the curly brackets have to be urlencoded(``{`` is ``%7B`` and ``}`` is ``%7D``).
 
 .. code-block:: http
@@ -1420,7 +1420,7 @@ This follows the same rules as :ref:`binary_output`.
 OpenAPI Support
 ===============
 
-Every API hosted by PostgREST automatically serves a full `OpenAPI <https://www.openapis.org/>`_ description on the root path. This provides a list of all endpoints(tables, foreign tables, views, functions), along with supported HTTP verbs and example payloads. For extra customization, the OpenAPI output contains a "description" field for every `SQL comment <https://www.postgresql.org/docs/current/static/sql-comment.html>`_ on any database object. For instance,
+Every API hosted by PostgREST automatically serves a full `OpenAPI <https://www.openapis.org/>`_ description on the root path. This provides a list of all endpoints(tables, foreign tables, views, functions), along with supported HTTP verbs and example payloads. For extra customization, the OpenAPI output contains a "description" field for every `SQL comment <https://www.postgresql.org/docs/current/sql-comment.html>`_ on any database object. For instance,
 
 .. code-block:: sql
 
@@ -1446,7 +1446,7 @@ Also if you wish to generate a ``summary`` field you can do it by having a multi
     spans
     multiple lines$$;
 
-You can use a tool like `Swagger UI <http://swagger.io/swagger-ui/>`_ to create beautiful documentation from the description and to host an interactive web-based dashboard. The dashboard allows developers to make requests against a live PostgREST server, and provides guidance with request headers and example request bodies.
+You can use a tool like `Swagger UI <https://swagger.io/tools/swagger-ui/>`_ to create beautiful documentation from the description and to host an interactive web-based dashboard. The dashboard allows developers to make requests against a live PostgREST server, and provides guidance with request headers and example request bodies.
 
 .. important::
 
@@ -1664,7 +1664,7 @@ Returns:
 HTTP Status Codes
 -----------------
 
-PostgREST translates `PostgreSQL error codes <https://www.postgresql.org/docs/current/static/errcodes-appendix.html>`_ into HTTP status as follows:
+PostgREST translates `PostgreSQL error codes <https://www.postgresql.org/docs/current/errcodes-appendix.html>`_ into HTTP status as follows:
 
 +--------------------------+-------------------------+---------------------------------+
 | PostgreSQL error code(s) | HTTP status             | Error description               |
diff --git a/auth.rst b/auth.rst
index 99a29c1f3..745106043 100644
--- a/auth.rst
+++ b/auth.rst
@@ -16,7 +16,7 @@ The authenticator should be created :code:`NOINHERIT` and configured in the data
 
 .. image:: _static/security-anon-choice.png
 
-Here are the technical details. We use `JSON Web Tokens <http://jwt.io/>`_ to authenticate API requests. As you'll recall a JWT contains a list of cryptographically signed claims. All claims are allowed but PostgREST cares specifically about a claim called role.
+Here are the technical details. We use `JSON Web Tokens <https://jwt.io/>`_ to authenticate API requests. As you'll recall a JWT contains a list of cryptographically signed claims. All claims are allowed but PostgREST cares specifically about a claim called role.
 
 .. code:: json
 
@@ -48,7 +48,7 @@ Roles for Each Web User
 
 PostgREST can accommodate either viewpoint. If you treat a role as a single user then the JWT-based role switching described above does most of what you need. When an authenticated user makes a request PostgREST will switch into the role for that user, which in addition to restricting queries, is available to SQL through the :code:`current_user` variable.
 
-You can use row-level security to flexibly restrict visibility and access for the current user. Here is an `example <http://blog.2ndquadrant.com/application-users-vs-row-level-security/>`_ from Tomas Vondra, a chat table storing messages sent between users. Users can insert rows into it to send messages to other users, and query it to see messages sent to them by other users.
+You can use row-level security to flexibly restrict visibility and access for the current user. Here is an `example <https://www.2ndquadrant.com/en/blog/application-users-vs-row-level-security/>`_ from Tomas Vondra, a chat table storing messages sent between users. Users can insert rows into it to send messages to other users, and query it to see messages sent to them by other users.
 
 .. code-block:: postgres
 
@@ -208,14 +208,14 @@ To use Auth0, create `an application <https://auth0.com/docs/applications>`_ for
 
 .. note::
 
-  Our code requires a database role in the JWT. To add it you need to save the database role in Auth0 `app metadata <https://auth0.com/docs/rules/metadata-in-rules>`_. Then, you will need to write `a rule <https://auth0.com/docs/rules>`_ that will extract the role from the user's app_metadata and set it as a `custom claim <https://auth0.com/docs/scopes/sample-use-cases-scopes-and-claims#add-custom-claims-to-a-token>`_ in the access token. Note that, you may use Auth0's `core authorization feature <https://auth0.com/docs/authorization/rbac>`_ for more complex use cases. Metadata solution is mentioned here for simplicity.
+  Our code requires a database role in the JWT. To add it you need to save the database role in Auth0 `app metadata <https://auth0.com/docs/rules/metadata>`_. Then, you will need to write `a rule <https://auth0.com/docs/rules>`_ that will extract the role from the user's app_metadata and set it as a `custom claim <https://auth0.com/docs/scopes/sample-use-cases-scopes-and-claims#add-custom-claims-to-a-token>`_ in the access token. Note that, you may use Auth0's `core authorization feature <https://auth0.com/docs/authorization/rbac>`_ for more complex use cases. Metadata solution is mentioned here for simplicity.
 
   .. code:: javascript
 
     function (user, context, callback) {
 
       // Follow the documentations at
-      // http://postgrest.org/en/latest/configuration.html#role-claim-key
+      // https://postgrest.org/en/latest/configuration.html#role-claim-key
       // to set a custom role claim on PostgREST
       // and use it as custom claim attribute in this rule
       const myRoleClaim = 'https://myapp.com/role';
diff --git a/configuration.rst b/configuration.rst
index 8654866b1..dddc9d0d5 100644
--- a/configuration.rst
+++ b/configuration.rst
@@ -16,7 +16,7 @@ The configuration file must contain a set of key value pairs. At minimum you mus
   # postgrest.conf
 
   # The standard connection URI format, documented at
-  # https://www.postgresql.org/docs/current/static/libpq-connect.html#AEN45347
+  # https://www.postgresql.org/docs/current/libpq-connect.html#LIBPQ-CONNSTRING
   db-uri       = "postgres://user:pass@host:5432/dbname"
 
   # The name of which database schema to expose to REST clients
@@ -59,9 +59,9 @@ raw-media-types          String
 db-uri
 ------
 
-  The standard connection PostgreSQL `URI format <https://www.postgresql.org/docs/current/static/libpq-connect.html#AEN45347>`_. Symbols and unusual characters in the password or other fields should be percent encoded to avoid a parse error. If enforcing an SSL connection to the database is required you can use `sslmode <https://www.postgresql.org/docs/9.1/static/libpq-ssl.html#LIBPQ-SSL-SSLMODE-STATEMENTS>`_ in the URI, for example ``postgres://user:pass@host:5432/dbname?sslmode=require``.
+  The standard connection PostgreSQL `URI format <https://www.postgresql.org/docs/current/libpq-connect.html#LIBPQ-CONNSTRING>`_. Symbols and unusual characters in the password or other fields should be percent encoded to avoid a parse error. If enforcing an SSL connection to the database is required you can use `sslmode <https://www.postgresql.org/docs/current/libpq-ssl.html#LIBPQ-SSL-SSLMODE-STATEMENTS>`_ in the URI, for example ``postgres://user:pass@host:5432/dbname?sslmode=require``.
 
-  When running PostgREST on the same machine as PostgreSQL, it is also possible to connect to the database using a `Unix socket <https://en.wikipedia.org/wiki/Unix_domain_socket>`_ and the `Peer Authentication method <http://www.postgresql.org/docs/current/static/auth-methods.html#AUTH-PEER>`_ as an alternative to TCP/IP communication and authentication with a password, this also grants higher performance.  To do this you can omit the host and the password, e.g. ``postgres://user@/dbname``, see the `libpq connection string <https://www.postgresql.org/docs/10/static/libpq-connect.html#LIBPQ-CONNSTRING>`_ documentation for more details.
+  When running PostgREST on the same machine as PostgreSQL, it is also possible to connect to the database using a `Unix socket <https://en.wikipedia.org/wiki/Unix_domain_socket>`_ and the `Peer Authentication method <https://www.postgresql.org/docs/current/auth-peer.html>`_ as an alternative to TCP/IP communication and authentication with a password, this also grants higher performance.  To do this you can omit the host and the password, e.g. ``postgres://user@/dbname``, see the `libpq connection string <https://www.postgresql.org/docs/current/libpq-connect.html#LIBPQ-CONNSTRING>`_ documentation for more details.
 
   On older systems like Centos 6, with older versions of libpq, a different db-uri syntax has to be used. In this case the URI is a string of space separated key-value pairs (key=value), so the example above would be :code:`"host=host user=user port=5432 dbname=dbname password=pass"`.
 
@@ -79,7 +79,7 @@ db-schema
 
      db-schema = "api"
 
-  This schema gets added to the `search_path <https://www.postgresql.org/docs/11/ddl-schemas.html#DDL-SCHEMAS-PATH>`_ of every request.
+  This schema gets added to the `search_path <https://www.postgresql.org/docs/current/ddl-schemas.html#DDL-SCHEMAS-PATH>`_ of every request.
 
 List of schemas
 ~~~~~~~~~~~~~~~
@@ -92,7 +92,7 @@ List of schemas
 
   If you don't :ref:`Switch Schemas <multiple-schemas>`, the first schema in the list(``tenant1`` in this case) is chosen as the default schema.
 
-  *Only the chosen schema* gets added to the `search_path <https://www.postgresql.org/docs/11/ddl-schemas.html#DDL-SCHEMAS-PATH>`_ of every request.
+  *Only the chosen schema* gets added to the `search_path <https://www.postgresql.org/docs/current/ddl-schemas.html#DDL-SCHEMAS-PATH>`_ of every request.
 
   .. warning::
 
@@ -125,7 +125,7 @@ db-pool-timeout
 db-extra-search-path
 --------------------
 
-  Extra schemas to add to the `search_path <https://www.postgresql.org/docs/11/ddl-schemas.html#DDL-SCHEMAS-PATH>`_ of every request. These schemas tables, views and stored procedures **don't get API endpoints**, they can only be referred from the database objects inside your :ref:`db-schema`.
+  Extra schemas to add to the `search_path <https://www.postgresql.org/docs/current/ddl-schemas.html#DDL-SCHEMAS-PATH>`_ of every request. These schemas tables, views and stored procedures **don't get API endpoints**, they can only be referred from the database objects inside your :ref:`db-schema`.
 
   This parameter was meant to make it easier to use **PostgreSQL extensions** (like PostGIS) that are outside of the :ref:`db-schema`.
 
diff --git a/default.nix b/default.nix
index b422be002..a571acffb 100644
--- a/default.nix
+++ b/default.nix
@@ -1,9 +1,9 @@
 let
   # Commit of the Nixpkgs repository that we want to use.
   nixpkgsVersion = {
-    date = "2020-10-27";
-    rev = "cd63096d6d887d689543a0b97743d28995bc9bc3";
-    tarballHash = "1wg61h4gndm3vcprdcg7rc4s1v3jkm5xd7lw8r2f67w502y94gcy";
+    date = "2021-04-04";
+    rev = "c0e881852006b132236cbf0301bd1939bb50867e";
+    tarballHash = "0fy7z7yxk5n7yslsvx5cyc6h21qwi4bhxf3awhirniszlbvaazy2";
   };
 
   # Nix files that describe the Nixpkgs repository. We evaluate the expression
@@ -72,4 +72,12 @@ in
          | xargs -0 -n 1 -i \
            sh -c "grep \"{}\" $FILES > /dev/null || echo \"{}\""
       '';
+
+  linkcheck =
+    pkgs.writeShellScriptBin "postgrest-docs-linkcheck"
+      ''
+        set -euo pipefail
+
+        ${python}/bin/sphinx-build -b linkcheck . _build
+      '';
 }
diff --git a/ecosystem.rst b/ecosystem.rst
index 53c0f399b..9344ba0f1 100644
--- a/ecosystem.rst
+++ b/ecosystem.rst
@@ -19,27 +19,26 @@ Community Tutorials
 Example Apps
 ------------
 
-* `monacoremo/postgrest-sessions-example <https://github.com/monacoremo/postgrest-sessions-example>`_ - example for cookie-based sessions
-* `tatut/postgrest-ui <https://github.com/tatut/postgrest-ui>`_ - ClojureScript UI components for PostgREST
-* `priyank-purohit/PostGUI <https://github.com/priyank-purohit/PostGUI>`_ - React Material UI admin panel
-* `Qu4tro/pgrst-dev-setup <https://github.com/Qu4tro/pgrst-dev-setup>`_ - docker-compose and tmuxp setup for experimentation.
-* `subzerocloud/postgrest-starter-kit <https://github.com/subzerocloud/postgrest-starter-kit>`_ - boilerplate for new project
-* `NikolayS/postgrest-google-translate <https://github.com/NikolayS/postgrest-google-translate>`_ - calling to external translation service
-* `CodeforAustralia/heritage-near-me <https://github.com/CodeforAustralia/heritage-near-me>`_ - Elm and PostgREST with PostGIS
-* `timwis/handsontable-postgrest <https://github.com/timwis/handsontable-postgrest>`_ - an excel-like database table editor
-* `Recmo/PostgrestSkeleton <https://github.com/Recmo/PostgrestSkeleton>`_ - Docker Compose, PostgREST, Nginx and Auth0
-* `benoror/ember-postgrest-dynamic-ui <https://github.com/benoror/ember-postgrest-dynamic-ui>`_ - generating Ember forms to edit data
-* `ruslantalpa/blogdemo <https://github.com/ruslantalpa/blogdemo>`_ - blog api demo in a vagrant image
-* `timwis/ext-postgrest-crud <https://github.com/timwis/ext-postgrest-crud>`_ - browser-based spreadsheet
-* `srid/chronicle <https://github.com/srid/chronicle>`_ - tracking a tree of personal memories
-* `diogob/elm-workshop <https://github.com/diogob/elm-workshop>`_ - building a simple database query UI
-* `myfreeweb/moneylog <https://github.com/myfreeweb/moneylog>`_ - accounting web app in Polymer + PostgREST
-* `tyrchen/goodfilm <https://github.com/tyrchen/goodfilm>`_ - example film api
-* `begriffs/postgrest-example <https://github.com/begriffs/postgrest-example>`_ - sqitch versioning for API
-* `SMRxT/postgrest-demo <https://github.com/SMRxT/postgrest-demo>`_ - multi-tenant logging system
-* `PierreRochard/postgrest-boilerplate <https://github.com/PierreRochard/postgrest-boilerplate>`_ - example auth back-end
-* `marmelab/ng-admin-postgrest <https://github.com/marmelab/ng-admin-postgrest>`_ - automatic database admin panel
-* `seveibar/postgrest-vercel <https://github.com/seveibar/postgrest-vercel>`_ - run PostgREST on Vercel (Serverless/AWS Lambda)
+* `blogdemo <https://github.com/ruslantalpa/blogdemo>`_ - blog api demo in a vagrant image
+* `chronicle <https://github.com/srid/chronicle>`_ - tracking a tree of personal memories
+* `elm-workshop <https://github.com/diogob/elm-workshop>`_ - building a simple database query UI
+* `ember-postgrest-dynamic-ui <https://github.com/benoror/ember-postgrest-dynamic-ui>`_ - generating Ember forms to edit data
+* `ext-postgrest-crud <https://github.com/timwis/ext-postgrest-crud>`_ - browser-based spreadsheet
+* `general <https://github.com/PierreRochard/general>`_ - example auth back-end
+* `goodfilm <https://github.com/tyrchen/goodfilm>`_ - example film api
+* `handsontable-postgrest <https://github.com/timwis/handsontable-postgrest>`_ - an excel-like database table editor
+* `heritage-near-me <https://github.com/CodeforAustralia/heritage-near-me>`_ - Elm and PostgREST with PostGIS
+* `ng-admin-postgrest <https://github.com/marmelab/ng-admin-postgrest>`_ - automatic database admin panel
+* `pgrst-dev-setup <https://github.com/Qu4tro/pgrst-dev-setup>`_ - docker-compose and tmuxp setup for experimentation.
+* `postgrest-demo <https://github.com/SMRxT/postgrest-demo>`_ - multi-tenant logging system
+* `postgrest-example <https://github.com/begriffs/postgrest-example>`_ - sqitch versioning for API
+* `postgrest-sessions-example <https://github.com/monacoremo/postgrest-sessions-example>`_ - example for cookie-based sessions
+* `postgrest-starter-kit <https://github.com/subzerocloud/postgrest-starter-kit>`_ - boilerplate for new project
+* `postgrest-translation-proxy <https://github.com/NikolayS/postgrest-translation-proxy>`_ - calling to external translation service
+* `postgrest-ui <https://github.com/tatut/postgrest-ui>`_ - ClojureScript UI components for PostgREST
+* `postgrest-vercel <https://github.com/seveibar/postgrest-vercel>`_ - run PostgREST on Vercel (Serverless/AWS Lambda)
+* `PostgrestSkeleton <https://github.com/Recmo/PostgrestSkeleton>`_ - Docker Compose, PostgREST, Nginx and Auth0
+* `PostGUI <https://github.com/priyank-purohit/PostGUI>`_ - React Material UI admin panel
 
 .. _eco_external_notification:
 
@@ -48,14 +47,14 @@ External Notification
 
 These are PostgreSQL bridges that propagate LISTEN/NOTIFY to external queues for further processing. This allows stored procedures to initiate actions outside the database such as sending emails.
 
-* `vbalasu/pg-notify-webhook <https://pypi.org/project/pg-notify-webhook/>`_ - trigger webhooks from PostgreSQL's LISTEN/NOTIFY
-* `diogob/postgres-websockets <https://github.com/diogob/postgres-websockets>`_ - expose web sockets for PostgreSQL's LISTEN/NOTIFY
-* `frafra/postgresql2websocket <https://github.com/frafra/postgresql2websocket>`_ - Websockets
-* `matthewmueller/pg-bridge <https://github.com/matthewmueller/pg-bridge>`_ - Amazon SNS
-* `aweber/pgsql-listen-exchange <https://github.com/aweber/pgsql-listen-exchange>`_ - RabbitMQ
-* `SpiderOak/skeeter <https://github.com/SpiderOak/skeeter>`_ - ZeroMQ
-* `FGRibreau/postgresql-to-amqp <https://github.com/FGRibreau/postgresql-to-amqp>`_ - AMQP
-* `daurnimator/pg-kinesis-bridge <https://github.com/daurnimator/pg-kinesis-bridge>`_ - Amazon Kinesis
+* `pg-bridge <https://github.com/matthewmueller/pg-bridge>`_ - Amazon SNS
+* `pg-kinesis-bridge <https://github.com/daurnimator/pg-kinesis-bridge>`_ - Amazon Kinesis
+* `pg-notify-webhook <https://github.com/vbalasu/pg-notify-webhook>`_ - trigger webhooks from PostgreSQL's LISTEN/NOTIFY
+* `pgsql-listen-exchange <https://github.com/gmr/pgsql-listen-exchange>`_ - RabbitMQ
+* `postgres-websockets <https://github.com/diogob/postgres-websockets>`_ - expose web sockets for PostgreSQL's LISTEN/NOTIFY
+* `postgresql-to-amqp <https://github.com/FGRibreau/postgresql-to-amqp>`_ - AMQP
+* `postgresql2websocket <https://github.com/frafra/postgresql2websocket>`_ - Websockets
+* `skeeter <https://github.com/SpiderOak/skeeter>`_ - ZeroMQ
 
 
 .. _eco_extensions:
@@ -63,45 +62,45 @@ These are PostgreSQL bridges that propagate LISTEN/NOTIFY to external queues for
 Extensions
 ----------
 
+* `aiodata <https://github.com/Exahilosys/aiodata>`_ - Python, event-based proxy and caching client.
 * `pg-safeupdate <https://github.com/eradman/pg-safeupdate>`_ - prevent full-table updates or deletes
-* `srid/spas <https://github.com/srid/spas>`_ - allow file uploads and basic auth
-* `svmnotn/postgrest-auth <https://github.com/svmnotn/postgrest-auth>`_ - OAuth2-inspired external auth server
-* `wildsurfer/postgrest-oauth-server <https://github.com/wildsurfer/postgrest-oauth-server>`_ - OAuth2 server
-* `nblumoe/postgrest-oauth <https://github.com/nblumoe/postgrest-oauth>`_ - OAuth2 WAI middleware
-* `criles25/postgrest-auth <https://github.com/criles25/postgrest-auth>`_ - email based auth/signup
-* `ppKrauss/PostgREST-writeAPI <https://github.com/ppKrauss/PostgREST-writeAPI>`_ - generate nginx rewrite rules to fit an OpenAPI spec
-* `seveibar/postgrest-node <https://github.com/seveibar/postgrest-node>`_ - Run a PostgREST server in Node.js via npm module
-* `Exahilosys/aiodata <https://github.com/Exahilosys/aiodata>`_ - Python, event-based proxy and caching client.
+* `postgrest-auth (criles25) <https://github.com/criles25/postgrest-auth>`_ - email based auth/signup
+* `postgrest-auth (svmotn) <https://github.com/svmnotn/postgrest-auth>`_ - OAuth2-inspired external auth server
+* `postgrest-node <https://github.com/seveibar/postgrest-node>`_ - Run a PostgREST server in Node.js via npm module
+* `postgrest-oauth <https://github.com/nblumoe/postgrest-oauth>`_ - OAuth2 WAI middleware
+* `postgrest-oauth/api <https://github.com/postgrest-oauth/api>`_ - OAuth2 server
+* `PostgREST-writeAPI <https://github.com/ppKrauss/PostgREST-writeAPI>`_ - generate nginx rewrite rules to fit an OpenAPI spec
+* `spas <https://github.com/srid/spas>`_ - allow file uploads and basic auth
 
 .. _clientside_libraries:
 
 Client-Side Libraries
 ---------------------
 
-* `supabase/postgrest-js <https://github.com/supabase/postgrest-js>`_ - TypeScript/JavaScript
-* `supabase/postgrest-rs <https://github.com/supabase/postgrest-rs>`_ - Rust
-* `supabase/postgrest-dart <https://github.com/supabase/postgrest-dart>`_ - Dart
-* `supabase/postgrest-py <https://github.com/supabase/postgrest-py>`_ - Python
-* `supabase/postgrest-csharp <https://github.com/supabase/postgrest-csharp>`_ - C#
-* `supabase/postgrest-kt <https://github.com/supabase/postgrest-kt>`_ - Kotlin
-* `supabase/postgrest-swift <https://github.com/supabase/postgrest-kt>`_ - Swift
-* `technowledgy/vue-postgrest <https://github.com/technowledgy/vue-postgrest>`_ - Vue.js
-* `SocialGouv/postgrester <https://github.com/SocialGouv/postgrester>`_ - JS + Typescript
-* `Kong/py-postgrest <https://github.com/Kong/py-postgrest>`_ - Python
-* `datrium/postgrest-pyclient <https://github.com/datrium/postgrest-pyclient>`_ - Python
-* `tomberek/aor-postgrest-client <https://github.com/tomberek/aor-postgrest-client>`_ - JS, admin-on-rest
-* `hugomrdias/postgrest-url <https://github.com/hugomrdias/postgrest-url>`_ - JS, just for generating query URLs
-* `john-kelly/elm-postgrest <https://github.com/john-kelly/elm-postgrest>`_ - Elm
-* `mithril.postgrest <https://github.com/catarse/mithril.postgrest>`_ - JS, Mithril
-* `lewisjared/postgrest-request <https://github.com/lewisjared/postgrest-request>`_ - JS, SuperAgent
-* `JarvusInnovations/jarvus-postgrest-apikit <https://github.com/JarvusInnovations/jarvus-postgrest-apikit>`_ - JS, Sencha framework
-* `davidthewatson/postgrest_python_requests_client <https://github.com/davidthewatson/postgrest_python_requests_client>`_ - Python
-* `calebmer/postgrest-client <https://github.com/calebmer/postgrest-client>`_ - JS
-* `clesiemo3/postgrestR <https://github.com/clesiemo3/postgrestR>`_ - R
-* `PierreRochard/postgrest-angular <https://github.com/PierreRochard/postgrest-angular>`_ - TypeScript, generate UI from API description
-* `thejettdurham/postgrest-sharp-client <https://github.com/thejettdurham/postgrest-sharp-client>`_ (needs maintainer) - C#, RestSharp
-* `team142/ng-postgrest <https://github.com/team142/ng-postgrest>`_ - Angular app for browsing, editing data exposed over PostgREST.
-* `andytango/redux-postgrest <https://github.com/andytango/redux-postgrest>`_ - TypeScript/JS, client integrated with (React) Redux.
+* `aor-postgrest-client <https://github.com/tomberek/aor-postgrest-client>`_ - JS, admin-on-rest
+* `elm-postgrest <https://github.com/john-kelly/elm-postgrest>`_ - Elm
+* `general-angular <https://github.com/PierreRochard/general-angular>`_ - TypeScript, generate UI from API description
+* `jarvus-postgrest-apikit <https://github.com/JarvusInnovations/jarvus-postgrest-apikit>`_ - JS, Sencha framework
+* `mithril-postgrest <https://github.com/catarse/mithril-postgrest>`_ - JS, Mithril
+* `ng-postgrest <https://github.com/team142/ng-postgrest>`_ - Angular app for browsing, editing data exposed over PostgREST.
+* `postgrest-client <https://github.com/calebmer/postgrest-client>`_ - JS
+* `postgrest-csharp <https://github.com/supabase/postgrest-csharp>`_ - C#
+* `postgrest-dart <https://github.com/supabase/postgrest-dart>`_ - Dart
+* `postgrest-js <https://github.com/supabase/postgrest-js>`_ - TypeScript/JavaScript
+* `postgrest-kt <https://github.com/supabase/postgrest-kt>`_ - Kotlin
+* `postgrest-py <https://github.com/supabase/postgrest-py>`_ - Python
+* `postgrest-pyclient <https://github.com/datrium/postgrest-pyclient>`_ - Python
+* `postgrest-request <https://github.com/lewisjared/postgrest-request>`_ - JS, SuperAgent
+* `postgrest-rs <https://github.com/supabase/postgrest-rs>`_ - Rust
+* `postgrest-sharp-client <https://github.com/thejettdurham/postgrest-sharp-client>`_ (needs maintainer) - C#, RestSharp
+* `postgrest-swift <https://github.com/supabase/postgrest-kt>`_ - Swift
+* `postgrest-url <https://github.com/hugomrdias/postgrest-url>`_ - JS, just for generating query URLs
+* `postgrestR <https://github.com/clesiemo3/postgrestR>`_ - R
+* `postgrest_python_requests_client <https://github.com/davidthewatson/postgrest_python_requests_client>`_ - Python
+* `postgrester <https://github.com/SocialGouv/postgrester>`_ - JS + Typescript
+* `py-postgrest <https://github.com/Kong/py-postgrest>`_ - Python
+* `redux-postgrest <https://github.com/andytango/redux-postgrest>`_ - TypeScript/JS, client integrated with (React) Redux.
+* `vue-postgrest <https://github.com/technowledgy/vue-postgrest>`_ - Vue.js
 
 .. _eco_commercial:
 
diff --git a/how-tos/casting-type-to-custom-json.rst b/how-tos/casting-type-to-custom-json.rst
index 1cc606127..b4687bad2 100644
--- a/how-tos/casting-type-to-custom-json.rst
+++ b/how-tos/casting-type-to-custom-json.rst
@@ -4,11 +4,11 @@ Casting a type to a custom JSON object
 :author: `steve-chavez <https://github.com/steve-chavez>`_
 
 While using PostgREST you might have noticed that certain PostgreSQL types translate to JSON strings when you would
-have expected a JSON object or array. For example, let's see the case of `range types <https://www.postgresql.org/docs/11/rangetypes.html>`_.
+have expected a JSON object or array. For example, let's see the case of `range types <https://www.postgresql.org/docs/current/rangetypes.html>`_.
 
 .. code-block:: postgres
 
-   -- example taken from https://www.postgresql.org/docs/11/rangetypes.html#RANGETYPES-EXAMPLES
+   -- example taken from https://www.postgresql.org/docs/current/rangetypes.html#RANGETYPES-EXAMPLES
    create table reservations (
      room   int
    , during tsrange
diff --git a/how-tos/providing-images-for-img.rst b/how-tos/providing-images-for-img.rst
index a90c7939e..5a1463d5e 100644
--- a/how-tos/providing-images-for-img.rst
+++ b/how-tos/providing-images-for-img.rst
@@ -38,7 +38,7 @@ We can retrieve this image in binary format from our PostgREST API by requesting
 Unfortunately, putting the URL into the :code:`src` of an :code:`<img>` tag will not work.
 That's because browsers do not send the required header.
 
-Luckily, we can configure our `Nginx reverse proxy <../admin.html>`_ to fix this problem for us.
+Luckily, we can configure our :ref:`Nginx reverse proxy <admin>` to fix this problem for us.
 We assume that PostgREST is running on port 3000.
 We provide a new location :code:`/files/` that redirects requests to our endpoint with the :code:`Accept` header set to :code:`application/octet-stream`.
 
diff --git a/index.rst b/index.rst
index c071b055b..5614f859f 100644
--- a/index.rst
+++ b/index.rst
@@ -8,7 +8,7 @@ PostgREST Documentation
 .. image:: https://img.shields.io/github/stars/postgrest/postgrest.svg?style=social
   :target: https://github.com/PostgREST/postgrest
 
-.. image:: https://img.shields.io/github/release/PostgREST/postgrest.svg
+.. image:: https://img.shields.io/github/v/release/PostgREST/postgrest.svg
   :target: https://github.com/PostgREST/postgrest/releases
 
 .. image:: https://img.shields.io/docker/pulls/postgrest/postgrest.svg
@@ -39,11 +39,11 @@ Sponsors
   :width:  13em
 
 .. image:: _static/retool.png
-  :target: https://tryretool.com/?utm_source=sponsor&utm_campaign=postgrest
+  :target: https://retool.com/?utm_source=sponsor&utm_campaign=postgrest
   :width:  13em
 
 .. image:: _static/supabase.png
-  :target: https://supabase.io?utm_source=postgrest%20backers&utm_medium=open%20source%20partner&utm_campaign=postgrest%20backers%20github&utm_term=homepage
+  :target: https://supabase.io/?utm_source=postgrest%20backers&utm_medium=open%20source%20partner&utm_campaign=postgrest%20backers%20github&utm_term=homepage
   :width:  13em
 
 |
@@ -71,7 +71,7 @@ PostgREST has a focused scope. It works well with other tools like Nginx. This f
 Getting Support
 ----------------
 
-The project has a friendly and growing community. Join our `chat room <https://gitter.im/begriffs/postgrest>`_ for discussion and help. You can also report or search for bugs/features on the Github `issues <https://github.com/begriffs/postgrest/issues>`_ page.
+The project has a friendly and growing community. Join our `chat room <https://gitter.im/begriffs/postgrest>`_ for discussion and help. You can also report or search for bugs/features on the Github `issues <https://github.com/PostgREST/postgrest/issues>`_ page.
 
 .. toctree::
    :glob:
@@ -204,25 +204,21 @@ In Production
 
 Here are some companies that use PostgREST in production.
 
-* `Sompani <https://www.sompani.com/>`_
+* `Catarse <https://www.catarse.me>`_
 * `Datrium <https://www.datrium.com>`_
-* `Supabase <https://supabase.io>`_
-* `Nimbus <https://nimbusforwork.com/>`_
-  - See how Nimbus uses PostgREST in `Paul Copplestone's blog post <https://paul.copplest.one/blog/nimbus-tech-2019-04.html>`_.
-* `Catarse <https://www.catarse.me/>`_
-* `Moat <https://moat.com/>`_
-* `Netwo <https://www.netwo.io/>`_
-* `Redsmin <https://www.redsmin.com/>`_
-* `Image-charts <https://image-charts.com/>`_
-* `MotionDynamic - Fast highly dynamic video generation at scale <https://api.motiondynamic.tech/>`_
-* `Drip Depot <https://www.dripdepot.com/>`_
-* `Convene <https://info.convene.thomsonreuters.com/en.html>`_ by Thomson-Reuters
-* `eGull <http://www.egull.co>`_
+* `Drip Depot <https://www.dripdepot.com>`_
+* `eGull <https://www.egull.co>`_
 * `Elyios <https://elyios.com>`_
-* `Simply Connected Systems <https://www.simplyconnectedsystems.com/>`_
-
-.. * `OpenBooking <http://openbooking.ch>`_
-.. * `triggerFS - A realtime messaging and distributed trigger system <https://triggerfs.io/>`_
+* `Image-charts <https://www.image-charts.com>`_
+* `Moat <https://moat.com>`_
+* `MotionDynamic - Fast highly dynamic video generation at scale <https://motiondynamic.tech>`_
+* `Netwo <https://www.netwo.io>`_
+* `Nimbus <https://www.nimbusforwork.com>`_
+  - See how Nimbus uses PostgREST in `Paul Copplestone's blog post <https://paul.copplest.one/blog/nimbus-tech-2019-04.html>`_.
+* `OpenBooking <https://www.openbooking.ch>`_
+* `Redsmin <https://www.redsmin.com>`_
+* `Sompani <https://www.sompani.com>`_
+* `Supabase <https://supabase.io>`_
 
 Testimonials
 ------------
@@ -264,11 +260,6 @@ Testimonials
 
   -- Anupam Garg, Datrium, Inc.
 
-Translations
-------------
-
-* `Chinese <http://postgrest.org/zh/latest/>`_ (latest version ``v0.4.2.0``)
-
 Contributing
 ------------
 
diff --git a/install.rst b/install.rst
index 87d650c9d..8704afd40 100644
--- a/install.rst
+++ b/install.rst
@@ -18,7 +18,7 @@ If you use **FreeBSD**, then you can install PostgREST from the `official ports
 
   pkg install hs-postgrest
 
-If you use **Arch Linux**, then you can install PostgREST from the `community repo <https://www.archlinux.org/packages/community/x86_64/postgrest>`_.
+If you use **Arch Linux**, then you can install PostgREST from the `community repo <https://archlinux.org/packages/community/x86_64/postgrest>`_.
 
 .. code:: bash
 
@@ -30,7 +30,7 @@ If you use **Nix**, then you can install PostgREST from nixpkgs.
 
   nix-env -i haskellPackages.postgrest
 
-If you use Windows, you can install PostgREST using `Chocolatey <https://chocolatey.org/packages/postgrest>`_ or `Scoop <https://scoop.sh>`_.
+If you use Windows, you can install PostgREST using `Chocolatey <https://community.chocolatey.org/packages/postgrest>`_ or `Scoop <https://scoop.sh>`_.
 
 .. code:: bash
 
@@ -252,7 +252,7 @@ Assuming you're making modifications locally and then pushing to GitHub, it's ea
 
 1. Create a new app on Heroku
 2. In Settings add the following buildpack :code:`https://github.com/PostgREST/postgrest-heroku`
-3. Add the require Config Vars in Heroku (see https://github.com/PostgREST/postgrest/blob/master/app.json#L7-L57 for more details)
+3. Add the require Config Vars in Heroku (see https://github.com/PostgREST/postgrest/blob/main/app.json for more details)
 4. Modify your ``postgrest.conf`` file as required to match your Config Vars in Heroku
 5. Create your :code:`Procfile` and add :code:`./env-to-config ./postgrest postgrest.conf`
 6. Push your changes to GitHub
diff --git a/releases/upcoming.rst b/releases/upcoming.rst
index c7fb082c9..b7fa22323 100644
--- a/releases/upcoming.rst
+++ b/releases/upcoming.rst
@@ -25,5 +25,5 @@ Changed
 -------
 
 * Docker images are now optimized to be built from the scratch image. This reduces the compressed image size from over 30 MB to about 4 MB.
-  For more details, see `Docker image built with Nix <https://github.com/PostgREST/postgrest/tree/master/nix/docker#docker-image-built-with-nix>`_.
+  For more details, see `Docker image built with Nix <https://github.com/PostgREST/postgrest/tree/main/nix/docker#user-content-docker-image-built-with-nix>`_.
   |br| -- `@monacoremo <https://github.com/monacoremo>`_
diff --git a/releases/v5.2.0.rst b/releases/v5.2.0.rst
index d49067b39..7cc90611b 100644
--- a/releases/v5.2.0.rst
+++ b/releases/v5.2.0.rst
@@ -1,7 +1,7 @@
 v5.2.0
 ======
 
-* `Explicit qualification <http://postgrest.org/en/v5.0/api.html#explicit-qualification>`_ introduced in ``v5.0`` is no longer necessary, this section will not be included from this version onwards.  A :ref:`db-extra-search-path` configuration parameter was introduced to avoid the need to explictly qualify database objects. If you install PostgreSQL extensions on the ``public`` schema, they'll work normally from now on.
+* `Explicit qualification <https://postgrest.org/en/v5.0/api.html#explicit-qualification>`_ introduced in ``v5.0`` is no longer necessary, this section will not be included from this version onwards.  A :ref:`db-extra-search-path` configuration parameter was introduced to avoid the need to explictly qualify database objects. If you install PostgreSQL extensions on the ``public`` schema, they'll work normally from now on.
 
 * Now you can filter :ref:`tabs-cols-w-spaces`.
 
@@ -23,4 +23,4 @@ This release was made possible thanks to:
 * Victor Adossi
 * Petr Beles
 
-If you like to join them please consider `supporting PostgREST development <https://github.com/PostgREST/postgrest#supporting-development>`_.
+If you like to join them please consider `supporting PostgREST development <https://github.com/PostgREST/postgrest#user-content-supporting-development>`_.
diff --git a/releases/v6.0.2.rst b/releases/v6.0.2.rst
index 90cdfb514..88a73ee5c 100644
--- a/releases/v6.0.2.rst
+++ b/releases/v6.0.2.rst
@@ -13,7 +13,7 @@ Added
 * Ignoring payload keys for insert/update can be now done with the ``?columns`` query parameter. See :ref:`specify_columns`.
   |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
 
-* `websearch_to_tsquery <https://www.postgresql.org/docs/11/functions-textsearch.html#id-1.5.8.18.8.2.2.7.1.1>`_ can now be used
+* `websearch_to_tsquery <https://www.postgresql.org/docs/current/functions-textsearch.html#id-1.5.8.19.7.2.2.7.1.1.1>`_ can now be used
   through the ``wfts`` operator. See :ref:`fts`.
   |br| -- `@herulume <https://github.com/herulume>`_
 
@@ -62,7 +62,7 @@ This release is sponsored by:
   :width:  13em
 
 .. image:: ../_static/retool.png
-  :target: https://tryretool.com/?utm_source=sponsor&utm_campaign=postgrest
+  :target: https://retool.com/?utm_source=sponsor&utm_campaign=postgrest
   :width:  13em
 
 * `Daniel Babiak <https://github.com/dbabiak>`_
@@ -76,4 +76,4 @@ This release is sponsored by:
 * Christopher Reid
 * Nathan Bouscal
 
-If you like to join them please consider `supporting PostgREST development <https://github.com/PostgREST/postgrest#supporting-development>`_.
+If you like to join them please consider `supporting PostgREST development <https://github.com/PostgREST/postgrest#user-content-supporting-development>`_.
diff --git a/releases/v7.0.0.rst b/releases/v7.0.0.rst
index d72579086..34e5d46db 100644
--- a/releases/v7.0.0.rst
+++ b/releases/v7.0.0.rst
@@ -85,7 +85,7 @@ This release was made possible thanks to:
   :width:  13em
 
 .. image:: ../_static/retool.png
-  :target: https://tryretool.com/?utm_source=sponsor&utm_campaign=postgrest
+  :target: https://retool.com/?utm_source=sponsor&utm_campaign=postgrest
   :width:  13em
 
 * `Daniel Babiak <https://github.com/dbabiak>`_
@@ -103,4 +103,4 @@ This release was made possible thanks to:
 * David Fenko
 
 
-If you like to join them please consider `supporting PostgREST development <https://github.com/PostgREST/postgrest#supporting-development>`_.
+If you like to join them please consider `supporting PostgREST development <https://github.com/PostgREST/postgrest#user-content-supporting-development>`_.
diff --git a/releases/v7.0.1.rst b/releases/v7.0.1.rst
index 6adc23235..5186216e5 100644
--- a/releases/v7.0.1.rst
+++ b/releases/v7.0.1.rst
@@ -48,7 +48,7 @@ This release was made possible thanks to:
   :width:  13em
 
 .. image:: ../_static/retool.png
-  :target: https://tryretool.com/?utm_source=sponsor&utm_campaign=postgrest
+  :target: https://retool.com/?utm_source=sponsor&utm_campaign=postgrest
   :width:  13em
 
 * `Daniel Babiak <https://github.com/dbabiak>`_
@@ -66,4 +66,4 @@ This release was made possible thanks to:
 * David Fenko
 
 
-If you'd like to join them, consider `supporting PostgREST development <https://github.com/PostgREST/postgrest#supporting-development>`_.
+If you'd like to join them, consider `supporting PostgREST development <https://github.com/PostgREST/postgrest#user-content-supporting-development>`_.
diff --git a/schema_structure.rst b/schema_structure.rst
index c45f30f32..d21b9332e 100644
--- a/schema_structure.rst
+++ b/schema_structure.rst
@@ -8,7 +8,7 @@
 Schema Isolation
 ================
 
-A PostgREST instance exposes all the tables, views, and stored procedures of a single `PostgreSQL schema <https://www.postgresql.org/docs/12/ddl-schemas.html>`_ (a namespace of database objects). This means private data or implementation details can go inside different private schemas and be invisible to HTTP clients.
+A PostgREST instance exposes all the tables, views, and stored procedures of a single `PostgreSQL schema <https://www.postgresql.org/docs/current/ddl-schemas.html>`_ (a namespace of database objects). This means private data or implementation details can go inside different private schemas and be invisible to HTTP clients.
 
 It is recommended that you don't expose tables on your API schema. Instead expose views and stored procedures which insulate the internal details from the outside world.
 This allows you to change the internals of your schema and maintain backwards compatibility. It also keeps your code easier to refactor, and provides a natural way to do API versioning.
@@ -20,7 +20,7 @@ This allows you to change the internals of your schema and maintain backwards co
 Functions
 =========
 
-By default, when a function is created, the privilege to execute it is not restricted by role. The function access is ``PUBLIC`` — executable by all roles (more details at `PostgreSQL Privileges page <https://www.postgresql.org/docs/12/ddl-priv.html>`_). This is not ideal for an API schema. To disable this behavior, you can run the following SQL statement:
+By default, when a function is created, the privilege to execute it is not restricted by role. The function access is ``PUBLIC`` — executable by all roles (more details at `PostgreSQL Privileges page <https://www.postgresql.org/docs/current/ddl-priv.html>`_). This is not ideal for an API schema. To disable this behavior, you can run the following SQL statement:
 
 .. code-block:: postgres
 
@@ -36,7 +36,7 @@ This will change the privileges for all functions created in the future in all s
 
         ALTER DEFAULT PRIVILEGES GRANT EXECUTE ON FUNCTIONS TO PUBLIC;
 
-    This will work because the :code:`alter default privileges` statement has effect on function created *after* it is executed. See `PostgreSQL alter default privileges <https://www.postgresql.org/docs/current/static/sql-alterdefaultprivileges.html>`_ for more details.
+    This will work because the :code:`alter default privileges` statement has effect on function created *after* it is executed. See `PostgreSQL alter default privileges <https://www.postgresql.org/docs/current/sql-alterdefaultprivileges.html>`_ for more details.
 
 After that, you'll need to grant EXECUTE privileges on functions explicitly:
 
@@ -73,12 +73,12 @@ Another option is to define the function with the :code:`SECURITY DEFINER` optio
   end;
   $$ language plpgsql security definer;
 
-Note the ``SECURITY DEFINER`` keywords at the end of the function. See `PostgreSQL documentation <https://www.postgresql.org/docs/current/static/sql-createfunction.html#SQL-CREATEFUNCTION-SECURITY>`_ for more details.
+Note the ``SECURITY DEFINER`` keywords at the end of the function. See `PostgreSQL documentation <https://www.postgresql.org/docs/current/sql-createfunction.html#SQL-CREATEFUNCTION-SECURITY>`_ for more details.
 
 Views
 =====
 
-Views are invoked with the privileges of the view owner, much like stored procedures with the ``SECURITY DEFINER`` option. When created by a SUPERUSER role, all `row-level security <https://www.postgresql.org/docs/current/static/ddl-rowsecurity.html>`_ will be bypassed unless a different, non-SUPERUSER owner is specified.
+Views are invoked with the privileges of the view owner, much like stored procedures with the ``SECURITY DEFINER`` option. When created by a SUPERUSER role, all `row-level security <https://www.postgresql.org/docs/current/ddl-rowsecurity.html>`_ will be bypassed unless a different, non-SUPERUSER owner is specified.
 
 For changing this, we can create a non-SUPERUSER role and make this role the view's owner.
 
@@ -90,7 +90,7 @@ For changing this, we can create a non-SUPERUSER role and make this role the vie
 Rules
 -----
 
-Insertion on views with complex `rules <https://www.postgresql.org/docs/11/sql-createrule.html>`_ might not work out of the box with PostgREST.
+Insertion on views with complex `rules <https://www.postgresql.org/docs/current/sql-createrule.html>`_ might not work out of the box with PostgREST.
 It's recommended that you `use triggers instead of rules <https://wiki.postgresql.org/wiki/Don%27t_Do_This#Don.27t_use_rules>`_.
 If you want to keep using rules, a workaround is to wrap the view insertion in a stored procedure and call it through the :ref:`s_procs` interface.
 For more details, see this `github issue <https://github.com/PostgREST/postgrest/issues/1283>`_.
diff --git a/shell.nix b/shell.nix
index 81649475d..4800d62ec 100644
--- a/shell.nix
+++ b/shell.nix
@@ -13,5 +13,6 @@ pkgs.mkShell {
     docs.serve
     docs.spellcheck
     docs.dictcheck
+    docs.linkcheck
   ];
 }
diff --git a/tutorials/tut0.rst b/tutorials/tut0.rst
index a0c49bac2..4d39ca5e7 100644
--- a/tutorials/tut0.rst
+++ b/tutorials/tut0.rst
@@ -23,9 +23,9 @@ As you begin the tutorial, pop open the project `chat room <https://gitter.im/be
 Step 2. Install PostgreSQL
 --------------------------
 
-If you're already familiar with using PostgreSQL and have it installed on your system you can use the existing installation(see :ref:`pg-dependency` for minimum requirements). For this tutorial we'll describe how to use the database in Docker because database configuration is otherwise too complicated for a simple tutorial.
+If you're already familiar with using PostgreSQL and have it installed on your system you can use the existing installation (see :ref:`pg-dependency` for minimum requirements). For this tutorial we'll describe how to use the database in Docker because database configuration is otherwise too complicated for a simple tutorial.
 
-If Docker is not installed, you can get it `here <https://www.docker.com/community-edition#download>`_. Next, let's pull and start the database image:
+If Docker is not installed, you can get it `here <https://www.docker.com/get-started>`_. Next, let's pull and start the database image:
 
 .. code-block:: bash
 
@@ -109,7 +109,7 @@ You should see the psql command prompt:
 
   postgres=#
 
-The first thing we'll do is create a `named schema <https://www.postgresql.org/docs/current/static/ddl-schemas.html>`_ for the database objects which will be exposed in the API. We can choose any name we like, so how about "api." Execute this and the other SQL statements inside the psql prompt you started.
+The first thing we'll do is create a `named schema <https://www.postgresql.org/docs/current/ddl-schemas.html>`_ for the database objects which will be exposed in the API. We can choose any name we like, so how about "api." Execute this and the other SQL statements inside the psql prompt you started.
 
 .. code-block:: postgres
 

From aa38221fc16d04eb5e8e82e3659e62b6d7d1340d Mon Sep 17 00:00:00 2001
From: Wolfgang Walther <walther@technowledgy.de>
Date: Sun, 4 Apr 2021 16:06:45 +0200
Subject: [PATCH 387/652] Add linkcheck to CI

---
 .circleci/config.yml | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index 2d7162fb6..0cf4e8783 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -25,6 +25,18 @@ jobs:
           name: Run spellcheck
           command: postgrest-docs-spellcheck
 
+  linkcheck:
+    docker:
+      - image: nixos/nix:2.3
+    steps:
+      - checkout
+      - run:
+          name: Install linkcheck script
+          command: nix-env -f default.nix -iA linkcheck
+      - run:
+          name: Run linkcheck
+          command: postgrest-docs-linkcheck
+
 workflows:
   check:
     jobs:

From d5b9f6cc8877e31e516ec18dac3127777cff3f2d Mon Sep 17 00:00:00 2001
From: Wolfgang Walther <walther@technowledgy.de>
Date: Tue, 6 Apr 2021 11:09:33 +0200
Subject: [PATCH 388/652] fix postgrest repo link in CONTRIBUTING.md

---
 CONTRIBUTING.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
index 20fdb43db..be92f4d7a 100644
--- a/CONTRIBUTING.md
+++ b/CONTRIBUTING.md
@@ -1,3 +1,3 @@
 This repository follows the same contribution guidelines as the main PostgREST repository contribution guidelines:
 
-https://github.com/PostgREST/postgrest/blob/master/.github/CONTRIBUTING.md
+https://github.com/PostgREST/postgrest/blob/main/.github/CONTRIBUTING.md

From 8273e270f2c594e609a4bbc371945f98bad9d095 Mon Sep 17 00:00:00 2001
From: Wolfgang Walther <walther@technowledgy.de>
Date: Tue, 6 Apr 2021 15:43:32 +0200
Subject: [PATCH 389/652] Change http to https in README.md

---
 README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/README.md b/README.md
index 9f964a975..29050fb9a 100644
--- a/README.md
+++ b/README.md
@@ -1,4 +1,4 @@
-# PostgREST documentation http://postgrest.org/
+# PostgREST documentation https://postgrest.org/
 
 PostgREST docs use the reStructuredText format, check this [cheatsheet](https://github.com/ralsina/rst-cheatsheet/blob/master/rst-cheatsheet.rst) to get acquainted with it.
 

From 7e4810f0a6a2ccf72248762a51c2ebe31c242fc1 Mon Sep 17 00:00:00 2001
From: Wolfgang Walther <walther@technowledgy.de>
Date: Tue, 6 Apr 2021 15:51:32 +0200
Subject: [PATCH 390/652] change Master to Main in heroku deploy steps

---
 install.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install.rst b/install.rst
index 8704afd40..6a682d8fd 100644
--- a/install.rst
+++ b/install.rst
@@ -256,5 +256,5 @@ Assuming you're making modifications locally and then pushing to GitHub, it's ea
 4. Modify your ``postgrest.conf`` file as required to match your Config Vars in Heroku
 5. Create your :code:`Procfile` and add :code:`./env-to-config ./postgrest postgrest.conf`
 6. Push your changes to GitHub
-7. Set Heroku to automatically deploy from Master and then manually deploy the branch for the first build
+7. Set Heroku to automatically deploy from Main and then manually deploy the branch for the first build
 

From 535ebba219c0a564e68accf4e8eece99ecda92fd Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Fri, 9 Apr 2021 23:33:50 -0500
Subject: [PATCH 391/652] Remove subzero link

---
 ecosystem.rst | 7 -------
 1 file changed, 7 deletions(-)

diff --git a/ecosystem.rst b/ecosystem.rst
index 9344ba0f1..776167834 100644
--- a/ecosystem.rst
+++ b/ecosystem.rst
@@ -101,10 +101,3 @@ Client-Side Libraries
 * `py-postgrest <https://github.com/Kong/py-postgrest>`_ - Python
 * `redux-postgrest <https://github.com/andytango/redux-postgrest>`_ - TypeScript/JS, client integrated with (React) Redux.
 * `vue-postgrest <https://github.com/technowledgy/vue-postgrest>`_ - Vue.js
-
-.. _eco_commercial:
-
-Commercial
----------------
-
-* `subZero <https://subzero.cloud/>`_ - Automated GraphQL & REST API with built-in caching (powered in part by PostgREST)

From 038fcc02b2eb96036ea85ad21ad517bb0b0acfff Mon Sep 17 00:00:00 2001
From: Amanda <amanda@thehq.io>
Date: Mon, 19 Apr 2021 01:04:34 -0700
Subject: [PATCH 392/652] Adding a hint to Hello World

This note helps people who are hitting this error `{"hint":null,"details":null,"code":"42P01","message":"relation \"api.todos\" does not exist"}`

https://github.com/PostgREST/postgrest/issues/1009
---
 tutorials/tut0.rst | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/tutorials/tut0.rst b/tutorials/tut0.rst
index 4d39ca5e7..04e6420a3 100644
--- a/tutorials/tut0.rst
+++ b/tutorials/tut0.rst
@@ -165,7 +165,10 @@ PostgREST uses a configuration file to tell it how to connect to the database. C
   db-schema = "api"
   db-anon-role = "web_anon"
 
-The configuration file has other :ref:`options <configuration>`, but this is all we need. Now run the server:
+The configuration file has other :ref:`options <configuration>`, but this is all we need. 
+If you are not using Docker, make sure that your port number is correct and replace `postgres` with the name of the database where you added the todos table.
+
+Now run the server:
 
 .. code-block:: bash
 

From 27680197106e48686ef4d3716b30391f38413b09 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Wed, 21 Apr 2021 17:00:44 -0500
Subject: [PATCH 393/652] Add GNUHost as a sponsor

---
 _static/empty.png   | Bin 0 -> 468 bytes
 _static/gnuhost.png | Bin 0 -> 9360 bytes
 index.rst           |  11 +++++++++++
 3 files changed, 11 insertions(+)
 create mode 100644 _static/empty.png
 create mode 100644 _static/gnuhost.png

diff --git a/_static/empty.png b/_static/empty.png
new file mode 100644
index 0000000000000000000000000000000000000000..99fabe47fdacf17f9341a7150d38ddb3d609bc36
GIT binary patch
literal 468
zcmeAS@N?(olHy`uVBq!ia0y~yV02($V2I~nU|?X_!{gY)z`($g?&#~tz_78O`%fY(
z0|SFXvPY0F14ES>14Ba#1H&%{28M<g3=E|P3=FRl7#OT(FffQ0%-I!a!@$76l;rL1
z!tlSn|IB^{1_t&LPhVH|r!3+e##)mvh-fk}Fx>HUaSW-r_4dL+P6h>m0|ur4C%%6u
zP}?!VCtz24;GFA>`;85ZhA7<iZ93yFi-(`zGB7ZxmbgZgq$HN4S|t~yCYGc!7#SED
z>Kd5n8X1Qe8e5qfTA3K>8kkxc7&vR?-bK-no1c=IR*74KQTf$GP;_~^`njxgN@xNA
DHGgx#

literal 0
HcmV?d00001

diff --git a/_static/gnuhost.png b/_static/gnuhost.png
new file mode 100644
index 0000000000000000000000000000000000000000..79a4c9d728437897f1dfa19cc7cca083c0910cec
GIT binary patch
literal 9360
zcmeAS@N?(olHy`uVBq!ia0y~yV02($V2I~nV_;yInJyQ=z`(##?Bp53!NI{%!;#X#
zz`($k<n8Xl@E-&h>|H*YfkA=6)5S5QV$R#S)l*`_Ywz3NuYH&7_W8n@7nYYilBFf3
znHi;noGV2>t3BMxv`j^FippBAaPFhL8*?r{(_7jgZ&<oJqSb6+rqm>XM=C6z8bp{l
z`8<0(bL7nG604U?blY^{PNk>u_rh=6>+j6Gn5}a5@j2&5HCwh!D|v5O{r}v~=YPKC
z|Nr*>`|Sya>TEk*3^KN+o;-0PLT=OaYQ9s|+hUwF{`6d2*YN(}!^W?Lj|!vu{XPji
z%Ug6{wQjnb+p$Y0L>|cOxN_gf@Z{336XMca%}>N+l|*#iS9-Pk;Kz$quRpd|x3#Ii
zJUTPz%!wTaCq*7u&iL_Q+S#o!|K6(Yk*ZL=RQ0B|!=1%n!hY$Ag$jJvl518xKgsO8
zYj(-jr{_+bm?1xtX%73oh3iYVxW4bXw!3ll#B1|^Tskgr|M)+pb@i*Be_L3)T0PUv
z?U>UEkq1mOcBFoumX%Y<|AG5J+5+LsUvj@RemLLlfB!!ujWsPLMxy1a*aN3Ue;519
zmlZym%=ovs)4K6};&rL}S<Kh=OW(cve_E)hk+O2~y%ezrN|JjQu2<jop-84Iy2|-+
z@b%Vz^FO-p&cFM8`^`ljZpUt^1vhx7{Fo;DUgedr$6baSq7TZ8GOMDWua~RHDP4N{
z#0d-Wn<5pQJ6ule{@3t9zG*dshwG8(SDqEuPxxBz4v#$2)6-KtLGys>g1tw+9dDO&
z{$&$j_i{F`$MxkOvfiuh&tghTNtrX*hfz=PuCLdMy6|V~8&=-bKO@@oy+7~Hzo6-x
ze$Sb>QS4;g8MO;vUo3R=-p^W>_08F{L;UEBKkY@i$3s`E$GW*4yLmz+LHNSmC4R5(
zPuwa0dx?a@(}wG(_N@N1aP8m7#MYjkt**-$X1n;mZd|_6p1J1z6#XS(i{}@g+24C<
z*|w__^^}#9^^90=sBD>@rFZ3@Tn+!X%#ZcASbn{{==ISQ5)_KT4c-TKpWJ=r{v#pQ
zhHr-!E*6S6yJOuhRFmkkKj7WF-9@G;XHT54n0!WktH&R^uH;<nf014D+&|PUa%XyY
z(do;TkPG|WcQIyIzFqUU$^Uuw)cCyppFdn)tyJOWc1&mIRj~(6OWSAl9alf8di`Y8
z_NAJOmoIN>7o47~{^H9=*Vj4w*Urj+DY0|qd;V+3Pp*H_xA^gDrFu6vw=_mQ*7s`m
zw=VzR)Zu-=n?XQRU|D#>`LZ<G&kK&ot6Zty|M^;T|GJI?l9H0kL2>a&sP$pg{nAZ#
zTn}fl&XIHs{V=`bUxeaHn`_hRe|3Bln(lwAr>AG~NioN19p8f9O3MFP?eK%6f^pg$
zrVCA#!k5HX<?UP=bAOwxl(doV<Q<ZdlIjyR52zX3xg5OZh3FQ&A1RuQyA1wMGWmY{
zsjc-r-<A7s)My$T8TqMiHkozcM(^!)E86e;cd0r$Nh+)5+#B~l8<T$RT=$s$pP&5l
zOCpNKMn>lpf*ZV#EWKBH`0645)BCtrF1GBg657H4vz+tg{PO2~awlq<B_+?Q&t}qR
zjQ0<kcgjBgoAm{yW&6{evs|kzuO0U+-ftB4vbr(<MRwe8Nl8hEG)6tn`xmZ9>Ai|q
z`rH4~wfE@@RVg{XYwwRm{NHc8mYpx{T7sKf@d=#+u8)Kgmzc&i9?G8P|C3SUgw5$6
z%wCiHr)68;Gpzf3&G)8Pq1&-bCygA%eDk>t|4%-#KE5pW%8jaG<!}C{c5PX9=yO~C
zoqv_rzvSLEwb;35ZhA`09&lD$Sv|Q^pKWdQMnBcaDzg{MCa9E8>)x|9=GFVCjsJ{|
z^o)$S3j{07e-=g6SbzE)?#uQ?NR#tQ)_r!l2wh7fBfS(O)*TKpuks~lu8LRuXtwz6
zYV{6&rg)y<#QUpGPMBEOI9c-mt3j1>{P}{T>nBaRd*k|?$hWDf8*C*WT<2O@xA*P3
zgAYRmm6RVVDFiosUa}|sw5nlCz2axSCC}GQlR1{mSifw>5A$nx%_=gsJ~?q>hr|hy
z2bCZ4J{^v|9iPxT|L7l`OQ&+m^1^xCS)30Ty6jGjHK?B){MY<iZOV%ST_+|^EEJr4
zbkf}B<o#FnZ<YF!^`t(##PpI;T5`pqG?y109~7S)%-A<yV4v(<IZiJ##qSCKHoo3g
z>#s9kMpDw=Dn;ypjD$&H^8cw*kNju)>~~@5<&70*UoGrg$soEU@WX;P?kaLqzRsPn
z?00sO(Uxaw*NhDo?!6MLbUY${-fp(#=Wf@yxgFbcLg&Ec5A55w^gijn?)o|JV5x`n
z?AwjU8}pUr4*yG2uz3|A9d@Gs*sU7{=iffPxa`~Xi4zOMj94ws{^<RCewEsv;0H&Q
z;(EWXdFEef+w${l!@fx_ZMULVGvBf<*|W1YB_-v|borN>A3$liLor5_^Zc6A*H6SS
ze_1>szHg!9v)89yUcX*n@j$cjJSb-#EBd6olwt4eKOevTm44NFL;SVPa=9;D4~{N4
zyDhrWskpXw`ImpXZ|+C_|FZ9(&(GA9HN15xA`84l+*Z}<Z~M#Vy7x|!_OjfvS-bZ*
zo(+CrzeM%U;`qhe=E$a|q@0;A&&gV`<;rEtpxocz1^=!&qU!cK?Aq^_=bv5v@blYV
z=9^6JZpWk^EedP+_h8z#BEA1cs~*a3yQi?RG?jHjW4`5)^INv_*-i7UH8#2?Ccc#E
zOWvo&(&cvBWxfWV$Y)yTA`%wG*Xg*({^DH!_ZQ<{Y2U4Pb33+k=L?Yq>(wRi?)bcO
z+kNgmyf2Q(F#Dg`Ett5VPw)cc7M-NRlv5wBD%9F?m!3QkF*~M&Yr^VZpVxg%n*Dfz
ze^V>N>pz$ME5lB5${T;-icK$M<=zwC^jr9nf7!h<1@Gw7Cn6Td)NoB`%$j$$KESuA
z)k$^k|9QJuS5M1dTVh!7ry}=xTUX`g2kN}L9k}=S+co@EpZMe=E7$yq6E`-+T$rhF
z_Kt){!t`I!r$YBL{Ha=VU2)#t2a~>+WxX_yzWn3#>vuQmH$;9qyZW`-{r;n0woYlC
zxAWGV)q8)+ZJ)C5`Q`l0Vq3*-<!v@UGV6Wmnw0(8TVGyh&194^seIgb?_$iJL)Rv4
z?<nEfD!4IkiBP@Fm#_<;Cv<V=pD=y0Uj5qpbxS@KcNXl~R(yKK9@}fl)`@bL|L*J%
z(|9&Vrf|-!<<|W2vtMsmyma2Vi(bc#-)w1aP-&l`HdTRd=Z^gQNn$lIx31X5>DpL#
zl`{BEedhFQ3%7Is`7O_d68G#{yIZC>oMmNeKzUTUkVMJrM(6HV->W8_O#hZE+y8F%
zOY3C|&E&HBx7@FK(Qd52vV5}q`&(s^t2VfLo)DIl{PyFq_u0E;odN6eZ_l&XdFjZm
zwH6Cs9eyic`|HD;<M%IIw+c(Co>J9m7<nrH?Sw0zuJr8^`#%5ecDtSTKhF7mDdxtm
zEp;1()DOzo%bDDmC2dpl>HV|Uo^ASf?^*NIdiGsQ+jBqtl)>9qT%TB%Gt}Ci{IG6r
z_=#VVi|V8Tk9$jZimq_I!LYF0^H68=wtwN*bD85~gRHp^T%YXY^UZ$qv?JREzFIkL
zV)hU(^>=AnasBOY_mCfNUhvj_FS%zLVOP6^Z|k(vK{cDF*sxotPf@NgnYDl3oI8c=
zIx#={{hw{WKKX-S<av`-%FAB0=pR}pBr`Mez$w?K^YTAF6#0H~=PV(9rulNqo^Lj=
z+4dm&-Tg~JomE?9?=i=883yfi`)D8dNc+uFE`w{=t_uqP-LrQ4jS{B&K1FZk+dgd<
zyYu`c&%_Ipt7EnPYF*<<TJ`La+yn0A@=<zU%XzO~%68_l7k#)iDCocv?svhL>pxVS
z-PwMM^<U1TX=mfDS6}-3VA{5aO!~Zrdt_f94GW41+26abaEZjjmr-})*Hqk=|6R+z
ze|`Vug7Da_D@|9nU3YnHYgoj2;ZH2Ts~kh{ZUvDAj#GYhKV7*oDKghy@pIgf)63(F
z=3kDO_cQFW{zsXvgUdb!=y-bgOYM_%`gLN`tw@E%)AQ>qd-n0Ze)Te&qgzg3+55($
z#(@>iIUn<V?(KM-JSXk!v0YIdZy4S)74=%LV0bs5ho|Sxme1z9^KOU7d0bz4rD^NM
zOMS=G*Cke+4*vS&NZ{Xte%4D0G&8)NQ;N)DJ(t=xy1wBPc-0v3!YPL7Rld%QozlCT
z9}1s$$ylkb*{a)-?(@5){8&}Yb2q+=kJul?xwyV=)LWwWX8FWx^Xq1K&%WiZ^^ZTO
zV!rG4gv`lDX0|%Mlv)%Yzw~Lj+rQxd_3wXuI52s+eAGG7d#dfyz2$m8Z7mfKs5U)+
z_$S-_cG<r3OKZPp>rXtnLSoCsf|*O~KK#@@FnRv>%9G}s`?o)4UC6L=;rgXEQ};P7
zd~9pBp2g~b@aLT&-5SY0eQp-sMfWC)HP7Jq!FV*~|E4YW?8@8U>^U|uo++;2RH^B6
z!MB^f8V5HzAFke2|Mtnsc~e*v_@690+`NokvXt9SWa(kOkH5L+O?owj-Lg}y{MXVG
zCnlVUS*+MTC*xH2zASbj$E4dHPAWIj^CYvMUwCs`n8SD1<xOezCJ%3F-tyUQ{$*>Q
zPwV!mJ-k~Ie_htnDXn^Otkg^T;QNBR-*+Bq_$KtwCH9Qe$KD73j&0rD=Xp_S`2mJ)
z2P~H?`nYx4eJjhI$sFJ0W%9N<O;uWEw?Dgt&sRU_*0C!S&*jd&WqkfMs}buu{$ncl
z%T11cSGIll!mFWp{Rgg_Ud=O9G)ljOc3fvXA0Z}rb_uh8$^Bghr_()Sm(}$xmA7~O
zdDG5yqRx&$6Y0+y+oa;A`d|NRI47W?OiFZ;74PZiCaMc~Z@iaZ`)19I+WIXluQk{v
z{@Sv6ZRYCziYLDCI9xn>bpM2=7n9d=Jl<Iw<JEZLOx-QP^)6-ST|92f9Li2C)1M`H
zAw2cJK;-k8%x4>w4tZGjtY@n-j1|+DT>a&4He0=df$F5Fqxm^sRyV{lzGI#zFz-m*
z3`0d5*}iLnM?bgB=RB2o&qVZ*d5vxR!o^n0D)L+SX6H^)f4<M|>O^7dJpw;>E|_z4
z$A{WY^K&%LS+W@>F19&T<fG5QdgB8>Po40OXHMt8^46|ZUi*>j#MaX~2mLJgle{ux
zHu`qOyowE9m-RVw{r!#)&T2NQ(cClFNw~f-d*Jn9=>jGPhq+%T<S@z2-e0oI?2)Z<
z^{>8y-w&=oua7$xvtowYk(%Fc)@QbDuunTCe`clW@>_@Iy)v2apDfeQC9BU|&#-ys
zv8ES&R}zg?=Ow&<GkL3QhR?~PEI-Pfh4xKRd+g3Fe3Ugc{OAl9@uw<T*|tBJr|Hdp
z_g%>8lCyc^UgoLiq<{TO<N2q!<%;mCV*Z?~-@LXytvJ3b>kzxIvS0X%6&KUFzOJ-i
z`MhiEk}&)AO>u>+83NaZcVtDnpDS3it<qWdto>@4L(v@%(<hkee-4P9_iwk6Pnhte
zn0Hrrrv7O8F!%0uzM4Ek-@gAz?~g_8`@s02x{;URnB$Q--Yqj%Ufd&a-uR(?-`zcL
z1Kb}zc+72O{@BNFZjs;982ek5?v*8){dZpU=K3%9G~&vOXem>jn7#Q_KF7*-&FpJa
z1H)4a{)SX}l=JFW6&_mZyR~TRQ^A??61N1}4VAz6MPDiB^)u=}+W*j2EX)4dhg7CA
zuAZ%1W&b^_nZG?Xw1KVAIsUYZ$L&kkoZNdh=1$q6>DszPNNjtT3IC#y36Hfos+gYz
zE!p<;RrV~+gOeSt(ls27CG)n1*uHf>o$$x5YxC+X?gi6kukze^yl0={9>rNI9r=?h
zo~U#u<h_x)WccPQ@6t6)Kc;H#{BIQaR`=kA!`xHVAHTUW>CU8@n|gxBv?Pufx8Irj
zX8snRjAJsdPJE2n_4a(y30{r~w)41artjsBj^umAk-6o(M^J6XKjZn!v>m2%^n4Xn
zk9zfXvEDb=N5)I<nEKVKuCNxmm7-dBlJ8Ej*F=f845jNmESB0b+RV9<&CP!}B51$W
zRcob5R}|g-_a`JAJX^YbO24n)w)&luyx)s^>KS^ikj*}S{e1k9P#ewT=cWHLUAX+i
zM|Ru&kl=q0KFqtfyDCrq*7k&jM$`H`IJhpan^d{1%j&{Ry_ah*#VxY@p|Lb``>8Jv
zc1hH)I<!(Q|KWkq)hig<S6i<S3Cz!ENv)8+W@apH#qeSdvtMyUr=8!+yeTi(Z{6bi
zU%*<OYt<Wi`!9PV>+z40^K{tmhIZa-`?+#5*V%1N_0uNEf8wo`4^OTtE)=*h>2Sg|
ztL6Nge4QSAKBpz-91$_wH@M-RZ(YUVbEjGD8~>!O(cZAAFgD}=mp?Uqp@&7Ey8Q1A
z)IZw8Y<a{i;c%zKLe{ObJnk99-QAX5asJ6e`J;31Hg)E1e<!VVf74&Sq)W*ahu=(3
zTYO}<8<*7+q5ZWJe=x5;k<QYoFY<P2)V;^E4ojW!dV4fvN_NXB27$#h_RLr%ZF-*R
z&0Bvb)4M6{f=|vXC>_hP2$z28;@v5mrPLU)eTIq>N3Fp6whNtiH*0*=F>^aqz3A}i
zCEwiJ^Rue89Nk|V_KBY8y%sI`>Xx;^t}q?ecz>gfo44<t=3O;4Le1sU<r?eGH706~
zR@Wle^UgI7^?Jf{$(_GudCli@{t5YRRg4Uia_na>s1KcYtMbbA_rE8-i%U^E80EM|
z{nb+C?K$@uJTq*(xm6N87N6Zb-SLpxLo1*EVar^vd7m<Wf5!WzVbUfI`xL1pp)(>I
z%`Vjbez<&=#+#<hc}#b#13H(^`^_zUls$Xr%Bb?F6_>@X-`h~8Gvm}lE8D+X{!6EO
z|Jkur{`kFZFBCE_x9t!s+<H;vT8h@PDJ`8+Hm+B{Py7C*_TqN_x_n=aga34OGxaKG
za{RwF(Pqb@33Gl$OX_T0{=@p|k`MO0{Aa_zt#f+2`l(ml>bF74v*ahV{8c)_-ll)I
z?#fc;`+FAXI$rKS<a_Z94^LFVpQVl}rH7|I<G#TncPQrAcM*$}JIp0YZ?{!0pS!yG
zaMOCp0G`f7uZ17JD{s&Ff96-sp7O10PA$_saBNPU;LaJV54`ZL-F+#m#@Z_``RC08
z%Y+60buSR?3Yzh+S}BgZ@o&rnE6?fE^KX8<KllFs3t9VrDCg={hCg0<;I$Ovx+QkD
zk0fTu33L_hsaAZO{r<woiL=Z8DISrKedqFOUY>q`?OdlH4<eSnSCgpu)AV(rr|aQ9
z;s5b5#@Rm)m72eN!Ta(2<)jMHOU2997jn-EywSbqg>a<J`3;A;-Lg;i>V4dLwL)KP
z2}A$1Dyzv^zq5m@-38*Rw9auE#y(A{+Hz~cp{o(smA2{a_6|D5eAn!~QdQQLO`oSH
zKHcPcuB-V%iQD0yI`>_d)Rf-cw%+Dn_ulvp*00R}1+UZv#jp21d*MU-wz~`aWnwm7
zIoQ*>`QN&O4<F7huUj?I?6|+uSCjRnYnfw(lWSf_?0T%Z`G4nBIiB+?8Dei;v75Fn
zr_(fF{Y6lCMWTql=&d(1&+O)A>@>(-C4KE;M^5}rg%56(YhUNe7Onig?rMpO`qijO
zlk#Vt?|<(0>C&RQ=imByWo7pj{$AfMuq|>=aTw>KvJ1DTwmCoEf8+OlD?76i#&z?4
zcbtu9-NNsxpZC$n?4!kt`HFjMBwKR0?zYy}o5$RZ<a7M~sKRs0qzyAlPS0HRrfcrD
zf1CxPL2@sbewFw?MTmLLhkKSglefQlvv$S2)9%}kn!GIGnA@Q@d#!Tl`wf+C&K1)x
zm=$QRu$aAl?>C#8^wivptlZ8YdzG*L`EgNt`~Sf6vg~|oj(u6Lyf)<Y&L`|HwXs3>
z%2*Q@iWSU1doA;HsVB!7S$4MmdwV{wW0>1kKIg}^Xq|hp+E40U2>q|#G3&|}A4T!g
z&EHS|%8%8(%6=+1xO-o?=T_ZL-BnW8)-YX(Tjc#)uI=9PQ^CPM-7Xz{bgQWQjz{8W
z_C-5FdKXDWcPyN|aO(fB#Z#wb2fSFb*xTbv@_}NWy$*~jE&+?L1hT9;#(mBp!mnjf
z;RH>+RUI$6lyBq}M|(IuIL7;bwsl|M`W*u0GIL+(iS8>{Gp){dYnY{ds`U}AR$s>d
zGB0co97`*`{`to~_haR`|JRpJ61y<Fai;6U(}KI*wXN#|0&+LF?c292Fo^qrW5Tqo
zlhx&x@p|9<*L^*m_v862<Lttf5$i*WuFhmUujU&eyT5|(*nhPPf}d7)ZB<(9Idxjq
zx_RyoLev5eyUJa=_9DjPsl=tIp!L0>+^uI9)c5|)zqUsxM`y+ssk)pwkIW7)*3M-$
z6I;{P$GqI;!ejINrEU+uu<Ty?z1)1I_s;z3+ArTb?%>J{f6UEU();oJ@+bRvwwUaG
z|1{aky=rB*#omrro-fnvxqQNeofIQ_b+#>7I?W``W~bYQcdvdw5pVYXtE>Fzt4o~f
zN3M7W)qkQp_b)cJ-!LuA!FlftjlxIEMEBY>e&h3z)&2Ts=BnJeGvXa@*?gXRR6Ey}
zeaDiUfA!3>Uw)6~i+Po=>EA2bY~}Q&;*H+){?FN0^ryYHTYo4cBw3ArujR2xSNFa+
z7h(`HcSYXYb;tj7yJ>wq8}>=-iLBX4rEl+Y`FQ1TnYaGu<1jnV6x(>iGC1tj7Gb&4
z2l9ytnb)SB+aROm=woEEVTHnDlknA!?<y8Qcv>QE{PePS#>$o6(%<;{eQON<?~Gcv
z<LZz5MzL2bcgb9S_VZ8OW!AvbNi~|!e*CJ)DLnW2n$xQ;wF#FZk59Ys($!Pn>r<EC
z%G1T+cRqhrQ4aoC+R`WPx|z3BX2y$Ge@cFTW$xcJ#o^mEr&lW@#8=y|w%LF5iyfD8
z@a_0F0_zr@c(v?6NO91eLY|K@+Is~5_$WkvymMdJCsAJL4)@2&vBJ&u=Z~+H`@i&`
z?p2k4b7b$`=h$k=xm)K;bn654X^R4?Jd%E%ac%zErhWRZ^*ot<teqC?r+O~m<m|C{
z>(x)HFIp~%buGBDX3yDg*8KLhf1GRQ&+1yp{^#?8Z<YKphndTM_syJg%B_tvkFjj(
z)o*t$&W@VjS0;VZCdD^U$kNW{WZQ%vMbT?F7nyJ^TJ~j4ptid@*Th{%nzBAIeh|>)
zcf8}edO_+oiKZqGf31=Wz6BRvH<T-GZRWq;EHCr=wKY%k;qDjKp9JQu*rm%7_4td`
zD#Z-RG}+G&_iz>Lsg1Vw`)B!L@9MQ{A1;wvZ~XLhc)#X@^Ue>1Uw{7n?&6ncmJEMh
z9a#9#ww7PPf6ls@yvH}}-}Y|tZ$8~zslpVmh4qK*D$ldTcGj|Al65io?2{vSLO^=u
zrR5wsF}!@jXXkuc^ZUeu#!vHf%PmF9neyj;?`&UD94Vu$q8|TQ?Za=u_x_x{w{7Li
zcP+RlVfFl;uv%5m-Yd^^Z+j(K3IDwH>8!O`Pl&8o&f0feE0woZE)0+_yW|nuYqxhs
z!<iYbtQp6*DA?O?Yq|K)*1Fw&*(Fvj2Uk62L9^R2dMEsE>lJR@)9^gB;p+>tLtFNz
zohxY!O<DRh(;~ZH@t>VVol*Gu+Qn<vroIt*dVEWM(W%`$bJI-}<uqDW%9|*5?u)x8
z%s#PC(QNJ&$6$8W*~^oItd0H7bFVb7Rg3kPxo7{YXRdr-uTWe5EMtk^CcneVC(Hd_
zdgric<r^0>rn7sW9h=6KeDL9!qbuDu-R`=rwY4VORdk+-omuSdqUx-_T?t&7YIAD;
z`S@3|z80`mNc88bjrQ_qQT{$D=;7`ej!*Jj+Sh(p*vo6VbyDkH&hy6}J!{lkz<T@G
zeNPc~&GiR;CaBCmef_nZz%Kbh$0fUT+0BkJ{BEcgy7b$si~Zg8+%qo^ORv1TPUXoz
z&1H|bxXDfb+n%et)_0{?u*rAd&hribMKgkf*FHM-peSDH@4a6!|4y8Y_w;l)r+f7M
z1&y{1@8#X{Z+$!|lFPFHh0943h9=A6^Rr5WnV)*yK4-n*yTaS7Tc+oEmR$-is(Svb
zDz{HpX{yPeb(_^&mo5Kv_MzzOs*Hr1H<GpUeK~h;sAtmDe-T|GUwl{hqr{Q*<@c&S
zym;eY-KlrgE_~gyc%~S>sP-EiIWZvu8=n2xZmaeAx9rh7+r`5boOcGZoo5wWYO$Yn
zhK%*3E7o?pkEXu~P``40n&=LvBP+xN<zDW}y)XRSI?OOe>geb6>_=y7`1(bK{<ePO
z^D%W^R$BhXzT(TVxAPTLbRFw@6OGGOZ{6{RmwRR6!yZNZo}XX8w${d5)Ru2|**MKg
zlCi(3xWjCZ#s7lz!vFD8v;RtW#_``v4HVXDSSFCXJiqM9ijuwWgP+=3NB7n<ZeiU$
z^_ZJ0_cn#Jusv4`GI<j1?$+LZpnlGxPaw5FQi^$(irShbn!zbYXBI`+^{ud+W3|Cd
z<nV*qr=T{+M&2pwnannS$zGRuOz{5Ue{Umf>i$b^dMj%ccklA|>S<OD*%Qrt^V_ym
zWc#Yj(E70Cf%efk|BDRYw{&k>^>M~ogAJ|$f^ioPJ*pIa(6;w*vO&$U-jf#Ad?(G`
z7`wgT;J>cq8(3$Yv*YoB1>S$R_k{cneK=h@muabzo?578#HKgyMTUQ!p3Aa7zw`J;
z%i^Fv-VfL%W?pE1WG<G>nW=yEqVy&GrLH=MPB$uTQ@Nf~yE;85Hh10My50Hrzkj?a
z{rjD-^QW|jy1e}VY`#sf{T#LAm|17LVg0S*-v{oWD~)lFTG`iDARoqeh0SJC@Lvz%
zHTyGu3O?vJ5O%nmS(CMn88pqg{Atkt`vy<Vg(_AqT;MkMEURJl*(9cqdndfmj+MXn
z{mIR~_xox;yiPXHuQpJvRDR|vcJ%0%>P7XUt@HR4|GB2u{g2n%#^EG>^%cj?_lmWC
zW&SPBJ6(Q9HWb;d-}yqwQq6oz-_@wkdTrdteia9X9pzfZF4&wEws!5(TSpIkyj)v$
zHsz0awfQx!pZ|L*@2?CtzVH2Hf64YYzdsdyc`s!7Lf65zAg6PGaI`lU^VQ9^GxP)(
z>_4z^<*_TuSD4qn-Fh@?8{5X&GIOJ){Jw5madT6u{PHR@)yJ<rU%b}75a~Is=4_^&
zkwt{<ZId$!_uLyFO_RwD>=C_OEW2M|&up8$v!xjS9B<0Bj<LKw@6_hR%;Vd1EJG)5
zOK58ks#-DEpVM^veT@^Y607to-oLn<I;%2I?B+8|(FKlA`Ey?f+kOvwBEPw$=2qh_
zwrkDj9g|(eHC7n<a)<@bU@y-6we?)Q?S=+jIq?g*olZM1efR21>xpAvV9^Av1>i8B
zKl9GJ|6*s>m)zaPrgbnSC57SnOeSuduuyN?<Es_-?A-YIx>Rp()6A)!3k^00*JM>N
z{qa5co!Mq;aKyH`x7%K3a&rAY^6XXc(@&Q-y^p`Yss3nLFK9a2{&_sBnt5D1XTq{=
zcW*sCa_W-B2aON0oxf%OZhd!~ZU62&cg0t=Ch_Vmd}uIlqUzKit2pjIUC6zMr^fA=
z>#<7F2Um7|e7tJgeg1tyubFP}xQ2GJcYORDdz}4!?3sT%x{qeQP_)!k<9G16_3!n%
zq_-2f>*RZSdb)c)YaNhlQ&-dY6ED0^;N;qjjfaj3#IAjwC6j;OJS5Ju^>NVqT@$_D
zwYHu1E1qE2^L1`_ruy2Rp6=GqS_h83y0B3Bz{Jn8zZaiLv3=QhsWj_}y7`9F9sk39
zEV4Ts-Q147GTfhKVE$#R&z38<C!6fgu{+?Iq@j|zwD!@38(x0Vvt4zUhJIQXyh-xN
z#3TP+Z;SrUzjjfEq@-l}!#`IO)~WZ1-jthLoojosKQU#cnQYc25tf|`7FeCM{gU%b
zMrP*&5rr2<hnESP9~G?d$UL)Ve@~C;sXbgBRxN&KPUqaa*1`BCX<MV6_u~_XENnD>
zzvhvToGogxtgzF-a%Xb(+%1P&zVa=+{B2uD-2EHosngUA>#uEGH!HGUQZjqWXYB*K
zJMSFnDD}Ge;@2Hj5%I<o%<Qf8i?!F*^!4k<PdgTrDbjK0pNx9d^10P*3*=uYt`NQ4
zx;M|v^N!SpKih9rrzC~8o;z{ELi_V32JVZ&!H)kse&qJ3T#v}&3`$%)r$F|Ho8MOZ
z>vP+$mn`^jA~m{f!IR~NyQP=5_}!|1@?>{nKlgv<zLLH!B}qxi?AA)n1J`DqUh`S}
z_0|f02G8O*_75Lad1Sv<<1c?B8+Uo>HXg0^M`dTWdfa_(6Je9`d$nw9v-bYS(V)pi
z%X$f(8N1ok8=23(yK`pR)5zT~OVtHs%-ttxpO0)lcaMFSwZOaBbBnkoB_+L|&*8eD
z%9T8I-(15ZWy?K#Q(l(EJFp(L0F5B5{i^x?rAuq?fosNT|9dYv{1)VAc{E={=-;BR
z%FW8F6_efEj{UJ*%~aBP$fNZ5R<ZZ$&(<jzY`T!OdbzU9B9A2>mOoYbBUa$3>G05Z
zbMb#S)`!1JroO3H`0-z4)z$UedS&(EeQvX*rNo?>6Uyj!?YG&@H*Qt77uc>$%lOY4
zeaJ?@c~Ab~x6Z$(UAg5|{J5=b_S((g9b|-R9KGykuf8gu<Nf*Zoze=e;2KFualT?L
zhv`+<dwpJpdgN#3M00HDc>DcaPUVaR|8Gr}|MTh6?Wo9OMX%#ru6#b=Y_vbMxPN8s
z_SLB`CfLpT`OC;i&*fYa<27fGBInE}m)jP7*tj&cPD60kmI{@bKKqySulw`P-&@tU
u)aOS(PrF9j{uei`C;a?jWTaQ{&;Dwiahg1P@G}Mm1_n=8KbLh*2~7aedYi)l

literal 0
HcmV?d00001

diff --git a/index.rst b/index.rst
index 5614f859f..380746df8 100644
--- a/index.rst
+++ b/index.rst
@@ -42,10 +42,21 @@ Sponsors
   :target: https://retool.com/?utm_source=sponsor&utm_campaign=postgrest
   :width:  13em
 
+.. image:: _static/gnuhost.png
+  :target: https://gnuhost.eu/?utm_source=sponsor&utm_campaign=postgrest
+  :width:  13em
+
 .. image:: _static/supabase.png
   :target: https://supabase.io/?utm_source=postgrest%20backers&utm_medium=open%20source%20partner&utm_campaign=postgrest%20backers%20github&utm_term=homepage
   :width:  13em
 
+.. The static/empty.png(created with `convert -size 320x95 xc:#fcfcfc empty.png`) is an ugly workaround
+   to create space and center the logos. It's not easy to layout with restructuredText.
+
+.. image:: _static/empty.png
+  :target: #sponsors
+  :width:  13em
+
 |
 
 Motivation

From 92c5066a79f8a8298febece5da8d1d34d6b7b59b Mon Sep 17 00:00:00 2001
From: Lee Yi Jie Joel <lee.yi.jie.joel@gmail.com>
Date: Fri, 28 May 2021 21:45:50 +0800
Subject: [PATCH 394/652] docs: add elixir client library

---
 ecosystem.rst | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/ecosystem.rst b/ecosystem.rst
index 776167834..5cc044ec8 100644
--- a/ecosystem.rst
+++ b/ecosystem.rst
@@ -101,3 +101,6 @@ Client-Side Libraries
 * `py-postgrest <https://github.com/Kong/py-postgrest>`_ - Python
 * `redux-postgrest <https://github.com/andytango/redux-postgrest>`_ - TypeScript/JS, client integrated with (React) Redux.
 * `vue-postgrest <https://github.com/technowledgy/vue-postgrest>`_ - Vue.js
+* `postgrest-ex <https://github.com/J0/postgrest-ex>`_ - Elixir
+
+

From 07cc6547eefb3532ce18a91530cb5ccf3f702830 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Murat=20Mirg=C3=BCn=20ERCAN?=
 <45563173+muratmirgun@users.noreply.github.com>
Date: Fri, 28 May 2021 22:21:04 +0300
Subject: [PATCH 395/652] Add Supabase-go Library Ecosystem

---
 ecosystem.rst | 1 +
 1 file changed, 1 insertion(+)

diff --git a/ecosystem.rst b/ecosystem.rst
index 5cc044ec8..92507af6c 100644
--- a/ecosystem.rst
+++ b/ecosystem.rst
@@ -86,6 +86,7 @@ Client-Side Libraries
 * `postgrest-client <https://github.com/calebmer/postgrest-client>`_ - JS
 * `postgrest-csharp <https://github.com/supabase/postgrest-csharp>`_ - C#
 * `postgrest-dart <https://github.com/supabase/postgrest-dart>`_ - Dart
+* `postgrest-go <https://github.com/supabase/postgrest-go>`_ - Go
 * `postgrest-js <https://github.com/supabase/postgrest-js>`_ - TypeScript/JavaScript
 * `postgrest-kt <https://github.com/supabase/postgrest-kt>`_ - Kotlin
 * `postgrest-py <https://github.com/supabase/postgrest-py>`_ - Python

From 574e57d01af583e937fe5b70c240dc5feb4360b8 Mon Sep 17 00:00:00 2001
From: Wolfgang Walther <walther@technowledgy.de>
Date: Tue, 6 Apr 2021 10:25:19 +0200
Subject: [PATCH 396/652] Upgrade nixpkgs to enable linkcheck in CI

---
 .circleci/config.yml | 2 +-
 default.nix          | 6 +++---
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index 0cf4e8783..36c6ba737 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -42,4 +42,4 @@ workflows:
     jobs:
       - build
       - spellcheck
-
+      - linkcheck
diff --git a/default.nix b/default.nix
index a571acffb..039ae825b 100644
--- a/default.nix
+++ b/default.nix
@@ -1,9 +1,9 @@
 let
   # Commit of the Nixpkgs repository that we want to use.
   nixpkgsVersion = {
-    date = "2021-04-04";
-    rev = "c0e881852006b132236cbf0301bd1939bb50867e";
-    tarballHash = "0fy7z7yxk5n7yslsvx5cyc6h21qwi4bhxf3awhirniszlbvaazy2";
+    date = "2021-06-02";
+    rev = "84aa23742f6c72501f9cc209f29c438766f5352d";
+    tarballHash = "0h7xl6q0yjrbl9vm3h6lkxw692nm8bg3wy65gm95a2mivhrdjpxp";
   };
 
   # Nix files that describe the Nixpkgs repository. We evaluate the expression

From 7447b03295e83ea922b171a2c0b5b14bfae0c22b Mon Sep 17 00:00:00 2001
From: Wolfgang Walther <walther@technowledgy.de>
Date: Wed, 2 Jun 2021 09:10:24 +0200
Subject: [PATCH 397/652] Fix broken links

---
 api.rst               | 2 +-
 auth.rst              | 4 ++--
 configuration.rst     | 4 ++--
 index.rst             | 3 +--
 releases/upcoming.rst | 2 +-
 5 files changed, 7 insertions(+), 8 deletions(-)

diff --git a/api.rst b/api.rst
index d5951818a..7e2c8d9af 100644
--- a/api.rst
+++ b/api.rst
@@ -472,7 +472,7 @@ If we make a similar request on ``bigtable``, which has 3573458 rows, we would g
 Response Format
 ---------------
 
-PostgREST uses proper HTTP content negotiation (`RFC7231 <https://tools.ietf.org/html/rfc7231#section-5.3>`_) to deliver the desired representation of a resource. That is to say the same API endpoint can respond in different formats like JSON or CSV depending on the client request.
+PostgREST uses proper HTTP content negotiation (`RFC7231 <https://datatracker.ietf.org/doc/html/rfc7231#section-5.3>`_) to deliver the desired representation of a resource. That is to say the same API endpoint can respond in different formats like JSON or CSV depending on the client request.
 
 Use the Accept request header to specify the acceptable format (or formats) for the response:
 
diff --git a/auth.rst b/auth.rst
index 745106043..3d0c915bf 100644
--- a/auth.rst
+++ b/auth.rst
@@ -208,7 +208,7 @@ To use Auth0, create `an application <https://auth0.com/docs/applications>`_ for
 
 .. note::
 
-  Our code requires a database role in the JWT. To add it you need to save the database role in Auth0 `app metadata <https://auth0.com/docs/rules/metadata>`_. Then, you will need to write `a rule <https://auth0.com/docs/rules>`_ that will extract the role from the user's app_metadata and set it as a `custom claim <https://auth0.com/docs/scopes/sample-use-cases-scopes-and-claims#add-custom-claims-to-a-token>`_ in the access token. Note that, you may use Auth0's `core authorization feature <https://auth0.com/docs/authorization/rbac>`_ for more complex use cases. Metadata solution is mentioned here for simplicity.
+  Our code requires a database role in the JWT. To add it you need to save the database role in Auth0 `app metadata <https://auth0.com/docs/users/metadata/manage-metadata-rules>`_. Then, you will need to write `a rule <https://auth0.com/docs/rules>`_ that will extract the role from the user's app_metadata and set it as a `custom claim <https://auth0.com/docs/scopes/sample-use-cases-scopes-and-claims#add-custom-claims-to-a-token>`_ in the access token. Note that, you may use Auth0's `core authorization feature <https://auth0.com/docs/authorization/rbac>`_ for more complex use cases. Metadata solution is mentioned here for simplicity.
 
   .. code:: javascript
 
@@ -272,7 +272,7 @@ JWT security
 
 There are at least three types of common critiques against using JWT: 1) against the standard itself, 2) against using libraries with known security vulnerabilities, and 3) against using JWT for web sessions. We'll briefly explain each critique, how PostgREST deals with it, and give recommendations for appropriate user action.
 
-The critique against the `JWT standard <https://tools.ietf.org/html/rfc7519>`_ is voiced in detail `elsewhere on the web <https://paragonie.com/blog/2017/03/jwt-json-web-tokens-is-bad-standard-that-everyone-should-avoid>`_. The most relevant part for PostgREST is the so-called :code:`alg=none` issue. Some servers implementing JWT allow clients to choose the algorithm used to sign the JWT. In this case, an attacker could set the algorithm to :code:`none`, remove the need for any signature at all and gain unauthorized access. The current implementation of PostgREST, however, does not allow clients to set the signature algorithm in the HTTP request, making this attack irrelevant. The critique against the standard is that it requires the implementation of the :code:`alg=none` at all.
+The critique against the `JWT standard <https://datatracker.ietf.org/doc/html/rfc7519>`_ is voiced in detail `elsewhere on the web <https://paragonie.com/blog/2017/03/jwt-json-web-tokens-is-bad-standard-that-everyone-should-avoid>`_. The most relevant part for PostgREST is the so-called :code:`alg=none` issue. Some servers implementing JWT allow clients to choose the algorithm used to sign the JWT. In this case, an attacker could set the algorithm to :code:`none`, remove the need for any signature at all and gain unauthorized access. The current implementation of PostgREST, however, does not allow clients to set the signature algorithm in the HTTP request, making this attack irrelevant. The critique against the standard is that it requires the implementation of the :code:`alg=none` at all.
 
 Critiques against JWT libraries are only relevant to PostgREST via the library it uses. As mentioned above, not allowing clients to choose the signature algorithm in HTTP requests removes the greatest risk. Another more subtle attack is possible where servers use asymmetric algorithms like RSA for signatures. Once again this is not relevant to PostgREST since it is not supported. Curious readers can find more information in `this article <https://auth0.com/blog/critical-vulnerabilities-in-json-web-token-libraries/>`_. Recommendations about high quality libraries for usage in API clients can be found on `jwt.io <https://jwt.io/>`_.
 
diff --git a/configuration.rst b/configuration.rst
index dddc9d0d5..b7f4e475d 100644
--- a/configuration.rst
+++ b/configuration.rst
@@ -203,14 +203,14 @@ openapi-server-proxy-uri
 jwt-secret
 ----------
 
-  The secret or `JSON Web Key (JWK) (or set) <https://tools.ietf.org/html/rfc7517>`_ used to decode JWT tokens clients provide for authentication. For security the key must be **at least 32 characters long**. If this parameter is not specified then PostgREST refuses authentication requests. Choosing a value for this parameter beginning with the at sign such as :code:`@filename` loads the secret out of an external file. This is useful for automating deployments. Note that any binary secrets must be base64 encoded. Both symmetric and asymmetric cryptography are supported. For more info see :ref:`asym_keys`.
+  The secret or `JSON Web Key (JWK) (or set) <https://datatracker.ietf.org/doc/html/rfc7517>`_ used to decode JWT tokens clients provide for authentication. For security the key must be **at least 32 characters long**. If this parameter is not specified then PostgREST refuses authentication requests. Choosing a value for this parameter beginning with the at sign such as :code:`@filename` loads the secret out of an external file. This is useful for automating deployments. Note that any binary secrets must be base64 encoded. Both symmetric and asymmetric cryptography are supported. For more info see :ref:`asym_keys`.
 
 .. _jwt-aud:
 
 jwt-aud
 -------
 
-  Specifies the `JWT audience claim <https://tools.ietf.org/html/rfc7519#section-4.1.3>`_. If this claim is present in the client provided JWT then you must set this to the same value as in the JWT, otherwise verifying the JWT will fail.
+  Specifies the `JWT audience claim <https://datatracker.ietf.org/doc/html/rfc7519#section-4.1.3>`_. If this claim is present in the client provided JWT then you must set this to the same value as in the JWT, otherwise verifying the JWT will fail.
 
 .. _secret-is-base64:
 
diff --git a/index.rst b/index.rst
index 380746df8..b375f8b67 100644
--- a/index.rst
+++ b/index.rst
@@ -21,7 +21,7 @@ PostgREST Documentation
   :target: https://www.patreon.com/postgrest
 
 .. image:: https://img.shields.io/badge/Donate-PayPal-green.svg
-  :target: https://www.paypal.me/postgrest
+  :target: https://www.paypal.com/paypalme/postgrest
 
 |
 
@@ -219,7 +219,6 @@ Here are some companies that use PostgREST in production.
 * `Datrium <https://www.datrium.com>`_
 * `Drip Depot <https://www.dripdepot.com>`_
 * `eGull <https://www.egull.co>`_
-* `Elyios <https://elyios.com>`_
 * `Image-charts <https://www.image-charts.com>`_
 * `Moat <https://moat.com>`_
 * `MotionDynamic - Fast highly dynamic video generation at scale <https://motiondynamic.tech>`_
diff --git a/releases/upcoming.rst b/releases/upcoming.rst
index b7fa22323..698e4f4ed 100644
--- a/releases/upcoming.rst
+++ b/releases/upcoming.rst
@@ -25,5 +25,5 @@ Changed
 -------
 
 * Docker images are now optimized to be built from the scratch image. This reduces the compressed image size from over 30 MB to about 4 MB.
-  For more details, see `Docker image built with Nix <https://github.com/PostgREST/postgrest/tree/main/nix/docker#user-content-docker-image-built-with-nix>`_.
+  For more details, see `Docker image built with Nix <https://github.com/PostgREST/postgrest/tree/main/nix/tools/docker#user-content-docker-image-built-with-nix>`_.
   |br| -- `@monacoremo <https://github.com/monacoremo>`_

From 8e0b67ed09fde863c9412bc5353f171145e00107 Mon Sep 17 00:00:00 2001
From: Wolfgang Walther <walther@technowledgy.de>
Date: Wed, 2 Jun 2021 09:18:49 +0200
Subject: [PATCH 398/652] Sort ecosystem

---
 ecosystem.rst | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/ecosystem.rst b/ecosystem.rst
index 92507af6c..c89d12820 100644
--- a/ecosystem.rst
+++ b/ecosystem.rst
@@ -86,6 +86,7 @@ Client-Side Libraries
 * `postgrest-client <https://github.com/calebmer/postgrest-client>`_ - JS
 * `postgrest-csharp <https://github.com/supabase/postgrest-csharp>`_ - C#
 * `postgrest-dart <https://github.com/supabase/postgrest-dart>`_ - Dart
+* `postgrest-ex <https://github.com/J0/postgrest-ex>`_ - Elixir
 * `postgrest-go <https://github.com/supabase/postgrest-go>`_ - Go
 * `postgrest-js <https://github.com/supabase/postgrest-js>`_ - TypeScript/JavaScript
 * `postgrest-kt <https://github.com/supabase/postgrest-kt>`_ - Kotlin
@@ -96,12 +97,10 @@ Client-Side Libraries
 * `postgrest-sharp-client <https://github.com/thejettdurham/postgrest-sharp-client>`_ (needs maintainer) - C#, RestSharp
 * `postgrest-swift <https://github.com/supabase/postgrest-kt>`_ - Swift
 * `postgrest-url <https://github.com/hugomrdias/postgrest-url>`_ - JS, just for generating query URLs
-* `postgrestR <https://github.com/clesiemo3/postgrestR>`_ - R
 * `postgrest_python_requests_client <https://github.com/davidthewatson/postgrest_python_requests_client>`_ - Python
 * `postgrester <https://github.com/SocialGouv/postgrester>`_ - JS + Typescript
+* `postgrestR <https://github.com/clesiemo3/postgrestR>`_ - R
 * `py-postgrest <https://github.com/Kong/py-postgrest>`_ - Python
 * `redux-postgrest <https://github.com/andytango/redux-postgrest>`_ - TypeScript/JS, client integrated with (React) Redux.
 * `vue-postgrest <https://github.com/technowledgy/vue-postgrest>`_ - Vue.js
-* `postgrest-ex <https://github.com/J0/postgrest-ex>`_ - Elixir
-
 

From a9dbd9e14f42493442a09e33cc5145b7a641fcf3 Mon Sep 17 00:00:00 2001
From: Wolfgang Walther <walther@technowledgy.de>
Date: Thu, 3 Jun 2021 16:51:45 +0200
Subject: [PATCH 399/652] Add user-agent to sphinx config to fix some
 linkchecks

---
 conf.py | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/conf.py b/conf.py
index 29f4382cb..71122e56a 100644
--- a/conf.py
+++ b/conf.py
@@ -289,3 +289,7 @@ texinfo_documents = [
 
 def setup(app):
     app.add_css_file('css/custom.css')
+
+# taken from https://github.com/sphinx-doc/sphinx/blob/82dad44e5bd3776ecb6fd8ded656bc8151d0e63d/sphinx/util/requests.py#L42
+user_agent = 'Mozilla/5.0 (X11; Linux x86_64; rv:25.0) Gecko/20100101 Firefox/25.0'
+

From 326019cca2ba7fca378c632608bf15a61002424a Mon Sep 17 00:00:00 2001
From: laurenceisla <vanquisher.laurence.02@gmail.com>
Date: Mon, 14 Jun 2021 19:30:22 -0500
Subject: [PATCH 400/652] Add reference for OPTIONS on the API page (#407)

* Add CORS documentation
* Add options requests to upcoming page
---
 api.rst               | 51 +++++++++++++++++++++++++++++++++++++++++++
 postgrest.dict        |  2 ++
 releases/upcoming.rst |  5 +++++
 3 files changed, 58 insertions(+)

diff --git a/api.rst b/api.rst
index 7e2c8d9af..7617b0841 100644
--- a/api.rst
+++ b/api.rst
@@ -1452,6 +1452,57 @@ You can use a tool like `Swagger UI <https://swagger.io/tools/swagger-ui/>`_ to
 
   The OpenAPI information can go out of date as the schema changes under a running server. To learn how to refresh the cache see :ref:`schema_reloading`.
 
+.. _options_requests:
+
+OPTIONS
+=======
+
+You can verify which HTTP methods are allowed on endpoints for tables and views by using an OPTIONS request. These methods are allowed depending on what operations *can* be done on the table or view, not on the database permissions assigned to them.
+
+For example, the OPTIONS request and response for a table named ``people`` are:
+
+.. code-block:: http
+
+  OPTIONS /people HTTP/1.1
+
+.. code-block:: http
+
+  HTTP/1.1 200 OK
+  Allow: OPTIONS,GET,HEAD,POST,PUT,PATCH,DELETE
+
+For a view, the methods are determined by the presence of INSTEAD OF TRIGGERS:
+
+.. table::
+   :widths: auto
+
+   +--------------------+-------------------------------------------------------------------------------------------------+
+   | Method allowed     | View's requirements                                                                             |
+   +====================+=================================================================================================+
+   | OPTIONS, GET, HEAD | None (Always allowed)                                                                           |
+   +--------------------+-------------------------------------------------------------------------------------------------+
+   | POST               | INSTEAD OF INSERT TRIGGER                                                                       |
+   +--------------------+-------------------------------------------------------------------------------------------------+
+   | PUT                | INSTEAD OF INSERT TRIGGER, INSTEAD OF UPDATE TRIGGER, also requires the presence of a           |
+   |                    | primary key                                                                                     |
+   +--------------------+-------------------------------------------------------------------------------------------------+
+   | PATCH              | INSTEAD OF UPDATE TRIGGER                                                                       |
+   +--------------------+-------------------------------------------------------------------------------------------------+
+   | DELETE             | INSTEAD OF DELETE TRIGGER                                                                       |
+   +--------------------+-------------------------------------------------------------------------------------------------+
+   | All the above methods are allowed for                                                                                |
+   | `auto-updatable views <https://www.postgresql.org/docs/current/sql-createview.html#SQL-CREATEVIEW-UPDATABLE-VIEWS>`_ |
+   +--------------------+-------------------------------------------------------------------------------------------------+
+
+For database function endpoints, OPTIONS requests are not supported.
+
+.. important::
+  Whenever you add or remove tables or views, or modify a view's INSTEAD OF TRIGGERS on the database, you must refresh PostgREST's schema cache for OPTIONS requests to work properly. See the section :ref:`schema_reloading`.
+
+CORS
+----
+
+PostgREST sets highly permissive cross origin resource sharing, that is why it accepts Ajax requests from any domain.
+
 .. _multiple-schemas:
 
 Switching Schemas
diff --git a/postgrest.dict b/postgrest.dict
index 0d043e805..6530644f4 100644
--- a/postgrest.dict
+++ b/postgrest.dict
@@ -17,6 +17,7 @@ centric
 changelog
 ClojureScript
 config
+CORS
 cryptographically
 CSV
 Daemonizing
@@ -146,6 +147,7 @@ UI
 ui
 unicode
 unix
+updatable
 UPSERT
 uri
 url
diff --git a/releases/upcoming.rst b/releases/upcoming.rst
index 698e4f4ed..1034cfbf5 100644
--- a/releases/upcoming.rst
+++ b/releases/upcoming.rst
@@ -12,9 +12,14 @@ Added
 
 * Allow HTTP status override through the :ref:`response.status <guc_resp_status>` GUC.
   |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
+
 * Allow :ref:`s_procs_variadic`.
   |br| -- `@wolfgangwalther <https://github.com/wolfgangwalther>`_
 
+* Documentation improvements
+
+  + Added the :ref:`OPTIONS requests <options_requests>` section.
+
 Fixed
 -----
 

From f7f3aadab86b4fb9c3498f349266ad560beb6049 Mon Sep 17 00:00:00 2001
From: laurenceisla <lau.isla.c@gmail.com>
Date: Fri, 18 Jun 2021 12:10:31 -0500
Subject: [PATCH 401/652] Reorganize the Schema Cache information into a
 separate reference page (#404)

---
 admin.rst             |  50 +---------------
 api.rst               |  14 +----
 index.rst             |   7 +++
 releases/upcoming.rst |   2 +
 schema_cache.rst      | 131 ++++++++++++++++++++++++++++++++++++++++++
 5 files changed, 143 insertions(+), 61 deletions(-)
 create mode 100644 schema_cache.rst

diff --git a/admin.rst b/admin.rst
index 2a8d03d4f..03b7579c1 100644
--- a/admin.rst
+++ b/admin.rst
@@ -196,58 +196,10 @@ Restart the database and watch the log file in real-time to understand how HTTP
     docker run -v "$(pwd)/init.sh":"/docker-entrypoint-initdb.d/init.sh" -d postgres
     docker logs -f <container-id>
 
-.. _schema_reloading:
-
 Schema Reloading
 ----------------
 
-Users are often confused by PostgREST's database schema cache. It is present because detecting foreign key relationships between tables (including how those relationships pass through views) is necessary, but costly. API requests consult the schema cache as part of :ref:`resource_embedding`. However if the schema changes while the server is running it results in a stale cache and leads to errors claiming that no relations are detected between tables.
-
-.. important::
-
-   Since v5.0, PostgREST also makes use of the schema cache for stored functions metadata: parameters, return type, volatility.
-   It also uses the schema cache for resolving overloaded functions. You should refresh the cache if a change in any of the prior is done.
-
-To refresh the cache without restarting the PostgREST server, send the server process a SIGUSR1 signal:
-
-.. code:: bash
-
-  killall -SIGUSR1 postgrest
-
-.. note::
-
-   To refresh the cache in docker:
-
-   .. code:: bash
-
-     docker kill -s SIGUSR1 <container>
-
-     # or in docker-compose
-     docker-compose kill -s SIGUSR1 <service>
-
-The above is the manual way to do it. To automate the schema reloads, use a database trigger like this:
-
-.. code-block:: postgresql
-
-  CREATE OR REPLACE FUNCTION public.notify_ddl_postgrest()
-    RETURNS event_trigger
-   LANGUAGE plpgsql
-    AS $$
-  BEGIN
-    NOTIFY ddl_command_end;
-  END;
-  $$;
-
-  CREATE EVENT TRIGGER ddl_postgrest ON ddl_command_end
-     EXECUTE PROCEDURE public.notify_ddl_postgrest();
-
-Then run the `pg_listen <https://github.com/begriffs/pg_listen>`_ utility to monitor for that event and send a SIGUSR1 when it occurs:
-
-.. code-block:: bash
-
-  pg_listen <db-uri> ddl_command_end $(which killall) -SIGUSR1 postgrest
-
-Now, whenever the structure of the database schema changes, PostgreSQL will notify the ``ddl_command_end`` channel, which will cause ``pg_listen`` to send PostgREST the signal to reload its cache. Note that pg_listen requires full path to the executable in the example above.
+Changing the schema while the server is running can lead to errors due to a stale schema cache. To learn how to refresh the cache see :ref:`schema_reloading`.
 
 Daemonizing
 ===========
diff --git a/api.rst b/api.rst
index 7617b0841..ae9006734 100644
--- a/api.rst
+++ b/api.rst
@@ -990,6 +990,8 @@ In this case, only **source**, **publication_date** and **figure** will be inser
 Using this also has the side-effect of being more efficient for :ref:`bulk_insert` since PostgREST will not process the JSON and
 it'll send it directly to PostgreSQL.
 
+.. _upsert:
+
 UPSERT
 ------
 
@@ -1109,18 +1111,6 @@ For instance, assume we have created this function in the database.
 
   Whenever you create or change a function you must refresh PostgREST's schema cache. See the section :ref:`schema_reloading`.
 
-  If the schema cache is not refreshed, PostgREST will assume :code:`text` as the default type for function arguments. This could
-  lead to getting error responses like:
-
-  .. code-block:: json
-
-     {
-      "hint":"No function matches the given name and argument types. You might need to add explicit type casts.",
-      "details":null,
-      "code":"42883",
-      "message":"function test.add_them(a => text, b => text) does not exist"
-     }
-
 The client can call it by posting an object like
 
 .. code-block:: http
diff --git a/index.rst b/index.rst
index b375f8b67..8b8e69e9e 100644
--- a/index.rst
+++ b/index.rst
@@ -127,8 +127,15 @@ Technical references for PostgREST's functionality.
 
    configuration.rst
 
+.. toctree::
+   :caption: Schema Cache
+   :hidden:
+
+   schema_cache.rst
+
 - :doc:`API <api>`
 - :doc:`configuration`
+- :doc:`Schema Cache <schema_cache>`
 
 Topic guides
 ------------
diff --git a/releases/upcoming.rst b/releases/upcoming.rst
index 1034cfbf5..a3e10dc9f 100644
--- a/releases/upcoming.rst
+++ b/releases/upcoming.rst
@@ -19,6 +19,8 @@ Added
 * Documentation improvements
 
   + Added the :ref:`OPTIONS requests <options_requests>` section.
+  + Added the :ref:`schema_cache` section.
+  + Moved the :ref:`schema_reloading` reference from :ref:`admin` to :ref:`schema_cache`
 
 Fixed
 -----
diff --git a/schema_cache.rst b/schema_cache.rst
new file mode 100644
index 000000000..a57cf83f3
--- /dev/null
+++ b/schema_cache.rst
@@ -0,0 +1,131 @@
+.. _schema_cache:
+
+Schema Cache
+============
+
+PostgREST caches metadata from the database schema to avoid repeating expensive queries. This metadata is not required by all of the PostgREST features, only the following:
+
++--------------------------------------------+-------------------------------------------------------------------------------+
+| Feature                                    | Required Metadata                                                             |
++============================================+===============================================================================+
+| :ref:`resource_embedding`                  | Foreign key constraints                                                       |
++--------------------------------------------+-------------------------------------------------------------------------------+
+| :ref:`Stored Functions <s_procs>`          | Function signature (parameters, return type, volatility and                   |
+|                                            | `overloading <https://www.postgresql.org/docs/current/xfunc-overload.html>`_) |
++--------------------------------------------+-------------------------------------------------------------------------------+
+| :ref:`Upserts <upsert>`                    | Primary keys                                                                  |
++--------------------------------------------+-------------------------------------------------------------------------------+
+| :ref:`Insertions <insert_update>`          | Primary keys (optional: only if the Location header is requested)             |
++--------------------------------------------+-------------------------------------------------------------------------------+
+| :ref:`OPTIONS requests <options_requests>` | View INSTEAD OF TRIGGERS and primary keys                                     |
++--------------------------------------------+-------------------------------------------------------------------------------+
+| :ref:`open-api`                            | Table columns, primary keys and foreign keys                                  |
++                                            +-------------------------------------------------------------------------------+
+|                                            | View columns and INSTEAD OF TRIGGERS                                          |
++                                            +-------------------------------------------------------------------------------+
+|                                            | Function signature                                                            |
++--------------------------------------------+-------------------------------------------------------------------------------+
+
+The Stale Schema Cache
+----------------------
+
+When you make changes on the metadata mentioned above, the schema cache will turn stale on a running PostgREST. Future requests that use the above features will need the :ref:`schema cache to be reloaded <schema_reloading>`; otherwise, you'll get an error instead of the expected result.
+
+For instance, let's see what would happen if you have a stale schema for foreign key relationships and function signature:
+
+Stale Foreign Key Relationships
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+Suppose you add a ``cities`` table to your database. This table has a foreign key referencing an existing ``countries`` table. Then, you make a request to get the ``cities`` and their belonging ``countries``:
+
+.. code-block:: http
+
+  GET /cities?select=name,country:countries(id,name) HTTP/1.1
+
+But instead, you get an error message that looks like this:
+
+.. code-block:: json
+
+  {
+    "hint": "If a new foreign key between these entities was created in the database, try reloading the schema cache.",
+    "message": "Could not find a relationship between cities and countries in the schema cache"
+  }
+
+As you can see, PostgREST couldn't find the newly created foreign key in the schema cache. See the section :ref:`schema_reloading` to solve this issue.
+
+Stale Function Signature
+~~~~~~~~~~~~~~~~~~~~~~~~
+
+Suppose you create the following function while PostgREST is running:
+
+.. code-block:: plpgsql
+
+  CREATE FUNCTION plus_one(num integer)
+  RETURNS integer AS $$
+   SELECT num + 1;
+  $$ LANGUAGE SQL IMMUTABLE;
+
+Then, you make this request:
+
+.. code-block:: http
+
+  GET /rpc/plus_one?num=1 HTTP/1.1
+
+On a stale schema, PostgREST will assume :code:`text` as the default type for the function argument ``num``. Thus, the response you get is:
+
+.. code-block:: json
+
+ {
+  "hint":"No function matches the given name and argument types. You might need to add explicit type casts.",
+  "details":null,
+  "code":"42883",
+  "message":"function test.plus_one(num => text) does not exist"
+ }
+
+See the section :ref:`schema_reloading` to solve this issue.
+
+.. _schema_reloading:
+
+Schema Cache Reloading
+----------------------
+
+To refresh the cache without restarting the PostgREST server, send the server process a SIGUSR1 signal:
+
+.. code:: bash
+
+  killall -SIGUSR1 postgrest
+
+.. note::
+
+   To refresh the cache in docker:
+
+   .. code:: bash
+
+     docker kill -s SIGUSR1 <container>
+
+     # or in docker-compose
+     docker-compose kill -s SIGUSR1 <service>
+
+The above is the manual way to do it. To automate cache reloads, use a database trigger like this:
+
+.. code-block:: postgresql
+
+  CREATE OR REPLACE FUNCTION public.notify_ddl_postgrest()
+    RETURNS event_trigger
+   LANGUAGE plpgsql
+    AS $$
+  BEGIN
+    NOTIFY ddl_command_end;
+  END;
+  $$;
+
+  CREATE EVENT TRIGGER ddl_postgrest ON ddl_command_end
+     EXECUTE PROCEDURE public.notify_ddl_postgrest();
+
+Then run the `pg_listen <https://github.com/begriffs/pg_listen>`_ utility to monitor for that event and send a SIGUSR1 when it occurs:
+
+.. code-block:: bash
+
+  pg_listen <db-uri> ddl_command_end $(which killall) -SIGUSR1 postgrest
+
+Now, whenever the structure of the database changes, PostgreSQL will notify the ``ddl_command_end`` channel, which will cause ``pg_listen`` to send PostgREST the signal to reload its cache. Note that pg_listen requires full path to the executable in the example above.

From 3f2a58ab7657c82ddb71a095c7a71fd0f4d2fc7b Mon Sep 17 00:00:00 2001
From: Laurence Isla <lau.isla.c@gmail.com>
Date: Mon, 12 Jul 2021 17:04:55 -0500
Subject: [PATCH 402/652] Add Oblivious as a sponsor

---
 _static/oblivious.jpg | Bin 0 -> 27612 bytes
 index.rst             |  10 +++++++---
 2 files changed, 7 insertions(+), 3 deletions(-)
 create mode 100644 _static/oblivious.jpg

diff --git a/_static/oblivious.jpg b/_static/oblivious.jpg
new file mode 100644
index 0000000000000000000000000000000000000000..955e1a57d324c5a4423db4a66d8096ed4cf4a7ea
GIT binary patch
literal 27612
zcmex=<NpH&0WUXCHwH#VCI%S>83u;`w;7xnIM~?O*;qN)+1WWcIk<R4czL+Fc_f8|
z`9)-<<mF_gWMmXn^wbrUbd+UeG|V-13=B<7Oyt!qZ7qy!^o&i6K!z}Ka&q!;^GNXW
zN*F21C>oIr{vTiv<X{Y7WngAhVqg+vWEN!ne}qAvfq{{g5eyihfRTxrg_Vt+gOiK<
z{}G0*0t`%y%*;$I%&e>|EDQ{cwTw*63@n1ILW+itY{G$w>`H|qMvW5}awt1(JSZA;
z@q>zSQc)8pmzcPOq?D?fx`w8fiK&^ng{76Vi>sTvho@I?NN8AiL}XNQN@`kqMrKxV
zNoiSmMP*fUOKV$uM`zch$y26In?7UatVN5LEM2yI#mZHiHgDOwZTpU$yAB;ba`f2o
z6DLnyx_ss8wd*%--g@}x@sp>|p1*kc>f@)+U%r0({^RE_kiQrin8CgR5fG1|`Ad+2
ziIItgg_(sN<S$01at1~wW<eHKMME|r$3XVPLSZGNMh+3Di3>L#<Wx2e`XHKAbdgI;
z#pI#tN08URJ|oU!O=S5D?lFYFZZYsMGcqs<G7B=;GkpK0v8aIy11~wtpeyPedTq;H
zzO(DTdcV+Bh<`lu(DNHr^AqDdAJyNI_t>b<-u@=#imFWIr}=t{Uu6AXI>=p~7%}U3
z&mPMKE3KAoP0w-vVA8Pt?<b>rub=)$?8WvZK2j^49XjdS-9|arg`cL&we<Nv%I>O^
za@Ttk*{?ErQU>!Y-so?wAC^wkUVgB8g~2~nf8Bbs=U>(-2mf9C_2i~qY5mDLJAYr^
z?B(%?tMS+Mu0RLbzu%A5%f<`OO*z1yp%ilbWrTQ~<;T#+d9#m1&9r}WXVZTMCGGi(
z8gx#ti1SyNl)dvw;l+7Q9)En@zs)?H_j$?Pp7g?VT3Q-R`CIS&XE=Xk|M!~<^Yuax
zuRXHx`eJrVQC<<ot?b=@JaZ-bWUGT*WJO}_*k4C)lNYxsUf!U5efdOpN2@jS&x8xQ
zGE}p+zZHG7x?pu>;<DHkuWn13*>~jBO}&-zpJ7X0d*N2oT&;I!`|nlE@LK#+>gT#H
zhTqYyKe`|4)@W?Fo-5^c{N0j#-Tw^lryX3kz-R-Dfa5#u2MQj~cExf(67TwB5t6y<
z>LnNZr#-#T-2XGwY;*Xd!Tfekm-h4fJardyxDGzbHCA4JE9ZA@z<&nkAK@E+6d#+#
z-u3p+UHQPaBD*h<x0U{ee0Grj5;#kPVNus8hKIp~4a_PJxIWo;*h_!8&u6l$tVQ`s
zsp8bk@-zwmo$?jG`Oj}<sEXUX?&UoB4b^wUzDY-yO5RmYwmVR&ej~i?$L??KlN?po
zx31ZyDe*h?(&w)s{~6>@?a7Y+sJ8x5_P0G(-!I!WWghePQ_UCM9qgt~c94?Vw{unY
z^|aTa`{upNfA96=@ynM#!fHhV7+qo5Qt<A!MbqpW(zfdC(S5}0ow@14SLuf1jElCG
z$<L5jz%xsGWAj7*zVr!;e&l@+JgL9c{h4oEeA7Rhbmrdz>vzsH{PTjjVbNZ;_@;d}
zz2^1F`QJP*%zqwPZqH+rpXD+6a8z?b`uD=0^MCPWFi%>v<$aCyy3G9_|1&Jk65ILm
z`K?{`hLKCX<_I``F=3bz=*l1x=*l3fyY<Ys>70eR#)pk$)=b<O7W~H5)s>;@d-Ffr
z*SjpeV@vI~>M|amRTnv>w#xkR&+Get#2>rG-=kaeR_?EAfzb!^(@M1={~7G2eiV(|
zctzjj^p1CH^3t~L=y|Hrd1`}wpo4sMV7&bg=EwJ<bj^<*mV8($BL7RO@mK$;z0WRv
zy7lXt^=i+@^X`T6OgeIKYU4YO*ABuLT}2oIM>r0ZjSk;%(d1?+uh%o{?1;8Fcbi(<
z^IOv^HXr>J-ds|4r8M%}y0W7}pFVA0)b-Q+c)UPqy=<0S_DLQykK-pcyZuy_TYlyD
z1@_>N(vRJiKFU<PT;e|IxW~Cmho4R>eC40`#$M`Em&O7nFxKAiq5iPHV8tbeZ)VG+
zb^ctR{4`nK?@iql#^cu=AO2@x`O$xr$9|K^%69_)8BWLK_S7Hf7yVM-Qpf%y{cz88
z@l&PQNB?QJ$VJ$ly!`oWRZhWik!+d3RZ2ZtD-JNfbda}x5x=?h%f%(Lo^2G}X`8s!
z_X+>^KK7S!{Yz>DKiEwXobQ|cGW^H8r|Infm<;wWty0riz_VMPFXL81{DzldVZYr(
zjx#mc%Y@C-%viv3R97T`A=A*?mBD01g5yE<t%<MZaeuhBh2x5ex8#3@TLumFhG+8w
z9pr*n|2uz=f4}M)-+Ob8ZwZ<y{;6jEwLQ0w#BaXe@#WE_7vIf(%~42CtJztveDKeI
z2CiRqlSLRmw5?wBDoXX@wkvPax6J;%Suy6XZB}dT(^Z*LWm{9e&6+yJJiy|hXMn*U
zTmHQj-@EJ6*P4CxJ>Isix96_!o+o>9zu1O<UBEwk#oG5m73Ogt=HA?X&E#hS%b!V)
z4fp?EV`19tz$y~xz*@GC<;V236;f|>x3oR>D`U&H<O}J0TEFY+(Le|J+#mMGZkhL*
zoZpri{Pen9>F$pz?ic!BU)tsMBiP|1+wzBN!*sp9c2(#p+d4jMFHO8t9e(vc17Dqb
z<~{38pZadcMyax82i>i|<sbNG1@j(wkvIaYhjrD*<n%AwNG|eRnH5x~BoXrGvwf=k
z<6G-~G{;~5W4h>0)~+dsv@^ujulA=h?=<~*z0W4S{&Bs)$(3=k6ZL}bG1Ns&w&7pD
z^1XxLkK@Oz=J%HFG?jG=?%&PBRp$|Wp+5ND&RfuIwC2W*yIJ8IZr*hGeCN#V<X$#!
zsl5;P^S-Lnyq0+B%MPB+Co1g^b>E%wjcMP;AN3!udwtMtFk~!V>9K$R?$Rf}TK~QJ
z&tUh3@$e7k2fEAVDPO4xQ{KJv;iQwEhRc6H|IxqQe{FS$fNL(7GmEE;hrx<22Id=F
z)4CWm7U9RsSG?R7wRO(4s@5gpW|w$OidH0KAKFv>fjwbzz=!s`GTY{BPb&O(SpG@9
z)i1VY2YKe0+y3drs$0+Ki+tP|-g}*ANtx2Z^_y&JKb&{}cy(ds^*6UB=_&5%DYBhW
zFLeFXJgpCX>mTxlzA?>C>ut1)Sv+NG{hsB2W-%NBCA-zL;+9t~&I-tqsy%$Ll$ov1
z#ise6+*Q9WhF{+w_8+-zFPr)3UhRf#1GV(_&He9}Z(s2?t~H)L(`xIp&Q-Txg$YZn
zTYJaK;OiH=<IA*Pzi*Eh(AiVIkh|rk*g`(BS2yH$)VkHTeEYM4c{9kik%pIfD>-wY
zR&H?#I&-FgLH4ZO9_7d9kLYi9s8L<!`}?I^{@wc4YW2rge%EF&pSRPgah-i^*Td~w
zie}j^p4!OxpCPJBlK=Yl1?#P#Nl4q@@j|J*&})Irs@UDW#fA^~x~w<aHmv!PRQc3n
zvC}7O*3iI7o-edtuWzmAOZZ^drMAQ2*U?MO#cIVHN;&o&-oJ7IuRmi2zwZaLo^9J!
zsO*{QxNE2Kvx$3crxZ8F7Dzy?A(Uc4@`kexeT;84*)RU$Qs%5B))PL<G`~M`cc%Z^
zyo(O<!ap7#l<IHXx^2T=xfK1+(RVZso!WolSJyM`ck-e?f_*;rb?QxDd3cxEGfQ!>
zuAgUXiXZLg$&wSi{?25ro6>q|Vd?(eTIp?a#~KVl)@j!t{HMMDLw(2Eui4@%3y*9R
z{&Z^YmH!O$w3)gXelI^fPjS;nyVmU0neU`HuUnkgxO?SybJW#O?FaXF^gfg=$Sgl+
zzbXF-*VF!AGp*QvmD&Hz`n5yA&G9UQE~u~{F*r!rLFRk!pFsBJKbqBRe7DY1z0H&I
z_{@Y4i+}xPT;FY~>-0SA%DVjbs+oCtDw!%}mM7IsU)jt4NxAjBYyU>w)U$oFKW&he
zOa9*f@bc&NDzN5>yW_=odmPu@d>NJzSH03nLw2wK1)lkb8f=Rn=r`=&QY!Y*Z83-0
zw&S_8HavX#?mvU;zw}%CCarnP?Y8xTiM6fPNi)Z6fnN7@R+HcP`9F>_A-Q!aH}$}u
zkPj?z<{utQgocN14y%qdJY9H7_(kE*>$M)03-}vVyFAh=mb!TgOifK};&{btw0HXB
z=S{&L*B*V8ol>1!%68kTuiMOc{ttoYuXro2LfYP6%Mbd?{AV~6_^|)Y>zn3TRRw|@
z(@svaf0+NGuKC)&z;%-k%+r{DNX}rx)hpX4OTV4V{_)rygMW+fa54PO>uS69NPBn0
zx`cucry4J|J1t3(KeY@RV$d21+_)R2?4A7`a_Vw|A5#CVF`Id@%wg??6L<JO{?T4;
ztNon+mim!n&m%T|cw;25b=BtQffup+-qkh#XK-4;FElGseU@ixS*2{ZvEj+2s>wdk
zQc3&ne}?pWF3xr9_xKk|-sb;hy3zJV&(1$=?2ob!g@`3ANSWNA{dPU$k5U`m2WQQ_
zIK(0z@tRqmxU>EB@rMqw3S?G3%-qN9WVe3|Z+*X|^J;y)<fj`wZwgOse;zM*H`+VB
z+;q*0pp2A^yB<#rER;X5-^a0jvYll`ZHa%!<nuzg?SVb9{JzKA{<_smF?{xdj`r9s
z{K5L@@tPk|v3$>b?!2tvoP65p=J6**_F7+G{doM)yi@*gyg<oM@3-4_7iQb}v0YbS
zs%vNeuzurFaIyq-3$bIj42DG$HZV*oU=OMew_aKC`%sm$=-%sZlnbxA9PIeRmchJu
z(VkEFz5kdRx6O^cf6qEoqF$@F&Z>fS2LD^nW3{;|{~5R#zEo-VZu+tILH8#yeSxUO
za!oPIKZ{<Cioca5!1-p~!kryoDpL6N&se}Mf-<Ht+4TJDILi;m+q?CauZ?n6`r3Vl
z=Rd>u6DJq&wRL^+_5RlSp>?t7mhD&aXK!{FaQ$<m`B#|yACs;9v-^Lz<(Z|wuU%W*
zzwG{N2f6pI2|wJA-b(NJ;&Rnwd%e!wN$v`VkKMi6nvc|1hxOUjT#IL2@86^Q@X^VY
z*<lmC_9lhjgIYVO>yxhcw~h~USBq@ka%Fu)NosGh^N)?^Uq)Q~cWE12g35=hr;g5x
z%$qX7Znpd91^i`;Hq}@@(zQNnrMhqJGLN`hiGQ4VT1vxYJJx1FnsH0c>SZu2nry;6
ziy;acnV3U(&|y7IW48>(j3sAv2}ByCpN~C4am%?E8bwEY+bqv1Tv=w<z%%Pd_0e6o
zfAk-nHE-SXe|GC6FI1_!$~QG=znb48^*Y0zx70GJcJrOaY{~PM#m)a2`rfVY=Y>10
z%%0ms{)b1MQl?qY&Mr&4i|W5uey%rQe;l9I_4D|*{7Wsn{;gka^q*nH_6ULByHoyk
z*<1ax!!mja^*W)T`SAXhv-jsMy7D0b#`)HVj?2zr{&W57`oi_bKi=o0|A;L+{4dg9
zr2XHo<6jr>PX^WhARL;sM4-U&#QLpuvOijW%s((IZrK~DwC>Y0{xfXbuU)V6&-9~j
zt>ABq?7Fnst6t>YIjpd=Cw(*T+Fy;JBn3+^=(OzW<{#}Jt$jYI&YxCTy6V)<wu{lr
zfBRMQKX;H#+qf=s7i;sqSKBw-idJ~~Bq#j_-;&>4AKr`AUDVy>ozESy&Z>6Z+xk$)
zzx7%l&kO(99{I6s$@N`(AD_8tt$a?%@WtvIVX6#yulE^$6z`PnTfI8wj-vgm?uYDu
zSPCOTR;_s>8nRiAfm!8x`jQ&WkIS|Soz7o)UMBbAJ3|5c@7H)43M&`w)$?zZv+A>b
zbnNPm->ZvuuJe!i;NMwe!ToBN>D@gJkI&xRY5#uVL<b4ctm8rZF6*%#ZN2ktGymf@
zr}odHVO<Pg`?>$rd^GEO$+u=>*0#k>DblLUH{01ivh96-NM7)d?PCvz%j*usHcsC%
z`{~5G`S;`=?bBPiHgBEIy5yZ(XL+Reyz^8}TC@C$po4tP#W?8?`yVG<S<>wM(Ph<i
z-<GBy4|Li$?O*u)ecaOtRZ<MvGd^DL)%nBw@TRHv5~CB*r<+6{oOr(AeB!I@<?FN`
z<v05G+nDGi?TFBOF!@~LomB6H9{J>XTNpp5chzZEtUs!+bbf{D+Qq`%*-pt0ww$l(
zg=5@2*PV~}5&GCx_-uBsP-Rk&Q0n$0-HrGAvU^Mz0xxxGFyH&nkT!cK>+z19lWImA
zPO&d!J^1I7z1A<GeI<Wq?SEpp{y)R@J@LPU!!IVGCfTPp^^dFLnSK;*)qG@pUb(XD
zLv!!@o=??$M%k;^$v>)Z=<lzwnpSW}ckk0Z^Ky6|OjTzQ%_(8O)?k<Q(fz2r=#Q0m
z^S+8VUELKOHCc-BMdisqp6kqZ$EH7Y@A=|yxX#3LX_tYwcb*H#we?<)R)EHTnP1A^
z-1W}W#&S*6MpdO<;qker&;M(VyBjC`+qC|Ke*Axibsy_r=*GQuU=6-%Y8@-@v-3)R
zs$g{Vv6PAD6SSUIPCq_Vt^Z-^{V5UJF;1J3fA8LZT!iuQJd+>SAL$F+J<T`0;8)u0
zNh>DI@pyc7_PW|O?X!7$>-3%)-8rvwNp8LJH1&_Bq9TmTmsE5|UPzDJve)a`)hW*f
zPdL~IUbudFKgT|`{k?D1He8u19Ja;bOh96q-|U7r#XbF1KkfFqKj1o3r|y(|_i1;e
z&y1Hnh4YV#Fn%q?*Ltq-KkDBbZWXrFuKD3K*LiH3#TBP_XP1Y_8d=Z!E<NdWwr2nP
z7S+PnT|cY?DpjuJ#Rd8FYKy6_w6t8nEj4fN>eohFW=&gKT6U(W=A}3P=>@B%T`xBa
z=FH7gZF0Q$sAx%@(!xazw!0suAB*+ljl1shQTF7n%{vlh!h?!cd@3YuuiF%#Sigkv
zYz=STrmbhZ`QDrC;OyJI`Ix=b?^`^7=h@yZ>-iVLsEW@EWXj30|Mtw<ox3GgHR9>b
zcQVyH8voKit)H)bWuJYP+V@A^x7&H9m2Eu4@WwCZKf{aorIoqx;<(oSw{=9N9P6$<
zwt4vyeAZfxe@?DXSjYe1?u<=8LKm*PW76^2eBVon=AVMGPvN>qtwBVe*GoV1*eCib
z>*kqWA^qzW_Luew?P>qkensf^fv|7s@9)OxS-x2?*+E_(HrN}!<PY~%zWE>RPAMHx
zeG(MC;XKRRJNBWX&#tb0*z5RZy~xY(6ThXnSKKdOaL4#p0Q+5&;Lzq3i5GghO0hUI
z)YRAOw#Q|?t<oo1%D!FPvdQob!&!zRdtp0;+ZFsypMz6&%{>-&jrsN6*?%Yg`m%n)
zS6#RF;aAl5@0<I4*UWBD<vEkG<B#pr+WoP=bKTbLMF(TI9Tc<_bhCTa|M|M<`2fbK
zeX<|EEq>ISci-!>;%7ZIdxtJ7P<MINuiX!pHwhn(6X_4y*-@YQ%1fn8dB)>^qW_k^
ze(NB$kL5??!XJ9KEW=cHUp3&FUbN1`{tf>_`L*Rq4TjzhtVSN!LNs2j=`jdxa}@cd
z!F<A|{)4smb;W7_84jP6o4+!-e3C_5^2`2*c8~kBey$F>tY6aWRL%XneEY7(u9MO|
z0@?44jN`IDW<T6wXLRw_uVbpdSyw%K8xGEO|6u-Q0so{I%RQx!D!VI9EwxBZY~o+I
z>;hxF>mT7Ci+=S_e^^`exb##{q~G(I4F8y_C*HocuVm%gb!l66bv?W1)|WBICT}@w
zgiI4JL+xkR!v74sds5|lZ4`6syt;4vXDBU|urG7G|H9qAe`}ctLrY5dQG3BHE577+
zSY4f>C8WAD%~iI!=J3z!w~jBZ>HN6QUjNayRmN8n^Us+s;I~=SrNMmHK5hL^p6ve&
zU*C)WYq|O*w&wkBlVzpy0w?G17UAw+S^r`EB36vZR+M}!`r&y`$(Kue(%0NLwlKNv
zldG%j^uhywHpUl)AN|iDviQ?K^@>Kv^S=V^XRtL`f?8E}ouJ}d98`Q)?EfORzHB|u
z-&v23b+0=)e{ZqW;}^^SWZ!wgux7pB3$uNy7xYcKFVu9;_%_LE<tvWwEX+|`0@#n)
z>Hf%k6wevwF<ngPP83tk?iB*NtbWa@z5FJ-U*q7msn(l&l4t$?vO<}K$yQ5#W7Ko|
z^me=5tPC~23x6md*{3u&>9R@n%A&$&A~%}vY&;<P<^7@aZ4)c_{ikKm6snDS=`hRn
z_lmt``rE4JeSM+TwU~=Rt|91AgIJda&W;|7t@g9|UGv$udiy55j{fj<@!cCSJEwUl
zNmfXFDzIKxYZZR!%Zvs5jmx*qyXGu=M9As!suN57pJbhF>s|S3(wZ_cadW-n46cIt
zPvcAXuHDnS^FeR_N{7soJb^s!QtH1~u`*Q1AG+VP{o1aj`*uI-m?p2d=Y&otYj;`t
zai7xT&*T2FX&j|Zle8xIqtfTM{}}|gzWjOowk%uy&7bv4i>|JG<mvNI<LWbuGt)Pl
z%e~9igIB_K*MF1>wm&@I9<c6`j?#(mw~S+56MvZhbJ;8WZ_lFt3>RGUur&D58*n)I
z@uvSS-a2&W$7JtIfqgn}Z@J5Ex0Ju={yg6G{=M5TuNmLF>!IAlab}X`8-|nXJ8DAL
zoqiNAl4W(|CflpD()f4lUF92&G9<&Mx`I}V6r8>y)8(bX{9ae?`P*5hz31ikZSV85
zy(0fQJbTKI%!2FjynAewOT|3qe?M{iul8!p6tKtnTgS)X$V{<1>FpCb_3P^k*#CSE
z{?vc8{hxK*o$SZ;-BvfR*QsP(X1^;VR6EN)VUGND6UHMKT}2r8K3FUMPe@)W(<+)N
zdEQf(8UG$w=3kKdT`QRE>JqSOF#}&i_^J5}IY-YQSu&-kyE;<kkDvIj>sPnHhf;zB
zy<Hh<j(_}o(0lRgjTLRDbf?W~ylu7OVVdlJh6m2`SC~GY`t5$djm12z4{=MEY-(1S
znAh@nqSB`&b;|O+HNGmjB5S3a*0ro=zR|^yD-!4+xB7$hQQk#A?*G=yG|XJ3KDGIR
zm!<Qc<B#J*`KEqwZGEz<Y+-&ibMCBrp;P&H&FT8R-FI()(51Kf3+;FBY*me4%uv6U
zA!_}^e^&J;Bd+{scs)h_muB|suAlOcm;agC>;G@3<9~)l(;93Zb!jZ%ulhU7{_*=G
z^S_?E|MO(L)AjTAn;n_nA8GmW>Fs}pIaB^KbjM4o{&x8%|KaGdqfSB3ei@&%y~>|o
z{4;=k>5uJ?*0<Tnon^gybLZappQT$F@5q1aE7;$;Uh}GbrfiU>L}rxk8qGht1#g~z
zl2|WLo}P5>=!`j&{5+RkU|+lbt>9yU16#LEI(>&jrvA;>%Ng^xH0X7%%UBxn;nK~0
z9^Y@>e;f~*M=kh~eoRWdJD2xZ?+W(<hM$k^wU=M@SK7Y%!Cm$6{TIGUY~?k3<()mF
zFUaE@|Ak-uS-)04%s=wGUgn0h_jx_uw7c#zB`k#b->?5FyMp-=sK=xISikE(!>5ov
z&i@(W?SE^m-<*vmvVhMF6grFlGo<bRDZX|8uiyTEnf4yqWB)DtKf}c8=>H7sxBO?g
zpnXS!VM$tO(3t}ok}C72Hb1r(c6`XseJ?xsSn4Nn!6SU;J0H4L7ssnrtbgR*X_ILD
zci-Q~Th+BQ88wCe$^K`Mxxjw;*7KwBY(Hu?#bz6vHu}$ST00>%=U2@h{v+2}SJqv!
z3dsrgxv2MCcHSe`{x6dMN<a6CFuq&;+bc^h<Nm|j@%lE89&YYGwRiQweYzVzE^mK$
z^^LjGMoks}?~4ns`v16oMD$Dgo9ouwy4N}QpO`MVL++`E{fPkforVX_6=<LP<N0y*
zAvxK3-uYX->q}bN`p!DD+P(3RpJ=-FqhqPskNma0>h-t&H1_LTZ_AVZ*!R0U{1}VO
zoUaS`7wG+G$PBsTI=wwQf6aCI2ilhZ88Uri`X@VV3VxNA{8#(%iv|3J{okfsbzt)6
zzd1ihE%C3m-|25t8a8#m=l58Bci|kFI+psVpYOUDe)Avt&mdl-{%GZ;YqvhW&6jzY
z`|f(O;TLul`E$EBUfRdfVLxkM+}oehWna&4tv&m&f7^eCL%K`rGxL7u-%S3z{qNh`
zZpH5%q}Ch^ndHEbGWph?(?{mZ>``Cfuex>5<X7by1+FWk8NU}5{!H8D-zm0h>hr^Q
zvv@T;^6uSfjrjMO=g)!aiL-ueyg0FI)6|3lM+v0{+k3CSP2G8~?&QN8P2WD}@zpy9
ztbeP$@}2Y^>&)%@)bl^A=XvSMP^-M;-^E`x?^dpQDPFeV>m)HD#vcXsbE~d3Kho7c
zva9I+OYx0&qvvs}huXEsIsUqSXvg}jzjM}Z)&JpTs@)RlHv5~?q<Li~v!`c#x47#d
z?-eGt^RYaCMWN@_t<}+K@}JJm*Z<E@(^v2H^YtV7V{@~^ujFlc%lB}N$%&hbg<J}C
zZdlxjUcr7Le9~#{v&x>zn|I4hOP=I^t-)^g)%_Xsxo?U2TAlm%x83cQlJk#w^<K}^
z|1Qn1Isc`e@8ITtvtnfaHSJOAV)%9a;r64a{blcZFZa*<rt4+$nTh?*B#qb2uZ%3#
zdx?I0esJYI{;pk`&fjmj*gaUx^_wGr>7uKw2E(FNSysLCrY4$x{d*|-w$sujlbjn^
zYc79ef84foz0Ixi_F3M%=I>@sd6e0{uD+$3ul5D=otnUp#)s|+>B=o$(Y`bOXW4eS
zl$l?Y7yR*9uYJuvQ*-7`lUQESYR_^t|G%I1KaS%$cgZj<>5QMJy2{nJ>dse7UvJD_
z8W9ucS9z05?D+Ld4c52!_s3c9P&rzinPscEHMsxx`_hpA46XM+a{p^S{hy(sp#Gz%
z@E?hfuN<Gv<?NTdq29Co>8>4by*;m#R4>k68F44d&+52MD*tN-xv7c29e$j<+J39I
z_0e}B#|`t3di)E$_oMz>_a(iVN!LqmzKQrci}~4tUww-|oUOTesf*$FZujdZcdJh3
zo9w=k_x8N>qnro7<ej5TKkRS+<GZ>dKFIs6(l_tQkWV6i*4avwDD7MPBlBa>;p1ZW
zQ+9G@t~s`I63<5k*+~1tTN$c!MZ)a6zGjx_bH3WO#;{X$%ht+3f2RY5^K&k+{(k-2
z*XqWdxVz5zTwg0=H2$0|h}wVbJxiwQ)KW?PCGrQ;1?&G*JgkrUnH~L+Z|x)P=X<WM
zU$$#z|DP>MPQMv1@Fzx=Fn+Q9{#G+%jobW(Kj)NXKIfi)fcejBow`f2rhS~xAC-IF
zV(#YtQ+tfM7=HU7h_l}C@m<IDYZLbfJKa`qJfSMR;@~^}wWU)(Pk(dWx;Hy+`^g*E
zKJJuz*zs@cms|#s)~1zd3XCV!n&VY!f<M07xxQj?;N^MGvUAO@rM2oNC#|~eXKwzz
z^YvMVTK=_v0zZ^BoS8oB3BT5VhSSzHr|$oFm)&-yKI1Q&P`KYE{da{Imud_AOWT)a
zo3VhuboRHY`|tmr&v!fbKSSQb&A+%_)o^~ibo;2(9V@rx%ekeyo40W)PcAa9FL^$3
z*3Y&rC7k!JABjr&I7!ZW#SHm^Lk)KC7EK7c!04)09o|(F_2bYjkxM`74{y@k&#?CF
zh36;i@5X=I`@3F&-|eG&e~slsmj4W$`xZ?++p~68&8O{uSn8ub^(KFt=<sHiUfY?y
zOLk9Y`Ok15{7?3Qb$QG8?5OUZxnx!*-}6asI%jG<O~o{ruc!W9R1<g3r)*Y`enMjL
zulFl;>od-a96NC5<*$^}FIK$#&#+nQbFK8DIK__~=O!<{7rWrq$0KF@Kg9j7ZOy9_
z`|;?KvdTWGeOgvOvsCOSP0C=tVN!p~-h1X%)46ibZri48D^!qgJh*Oo{Ey=gPs_8P
zU-MFY!z*#=mV(>q+4=VOf}0p5?f>oiY4zyZqf5!WXM~)!zIuwRly6+Ig85d7{w?*G
z{?Oock+;q#yloRZ5%^g0m63<N^Uv!SqtcdUu6{Y~S8LB})3t}#`&?f*u5WsMuReXg
z_^!J#Kf+%599J+GYwUNEuXTTT{y_%wi!A7Pq#dJ9#3Vn@CzCx9i<cO`i#JQivu3o&
z^lx-M@t>h2>}}C~-V^z4|6~rH|Kt5g{>O`T%it|mE~rUF(Y)+Si|hq#ic=rt^Y4B0
zG-dY$(XHFh8`;@Uc$dL^&OSq4x^~tneXg6noy(7GpY8ARPt-p6{007~pV!u9?V5XS
z^Qt?q%s0){%S$oxxVPj#gV%D%$`t5$gnYsu$?4~QL@xg1ceLdB&0D))eLmk5|H<2A
z|Mw;T87`cylEvtSIhR}Ax_P$XKSP<uE$1)HrXOO@ye}>_`6P2vdwTLK&y(wS+5~z1
zaF0wVaP4^_|2ysKhpk{Us`=kM3#oYbpFv^Tzw^2K?puXlzWS;Cfc3%Lk9r!N2X<_m
zX20@){iS{DQJTCgw%U*DyQ35?>{HG9p!Bw_vhK3PxB40XmR!H7wy)stk}VJU_AYv*
zko;EclZ*dKH};<v3;6j#lQio$)d|JV{?E`RrP5P$@ko;T-)l<y%+{~1W0_PZ8j<q+
z`(^$=H5b^IhM)M)AZ!0*O;-KaQ~ZBLwthWY)Bo}EKd)oU|1-oa_|I_B+d;0-RV08t
z@u9w?_rrLeAAR@Eo{G=%<`LZSs`K;v#P?0?k7KUQUv}@c_{YeIXz$`u<3#1&BF|MP
zdX-lxsLpu6c<1_cdoDZq=pV+1FUG_;@og?^T&JQu<KPoF+jhyXCX7#a>A!it_U>(+
zTiaIWCcH6H?B!Www_Jh$u*t6TZ=SA=iZ<C5wl=%wmGP4kZEE(;lQ@4p+BfCE(gplY
zUuBKHd+eKbJYd_TThElYKAu?MxN7Rx^~dBH93S21Jzby8A+@(B^<jeLRCZPVSMK|-
z?ekJ-0#*537cYFBeV+fd*{-!M%dERAnODmGb^OY{G(FHkzW7J{5wUw3AD&LznE7wj
zGuxxptNA4BnK;&VeXzfI_=wKOta)-%KM9K$G*vOT=F~sl`hE&S__27={|rx7R<!@y
zSN|<AKJ7ZHfP)OEu`lob?`-`i{p|X$-{${ft!}NTe{=mmgVML{{~6*l|1&HI-x0vZ
z-m}Lr|1m$$-51w|Oq>$9JQl0U6!BSKKlAJPf&UDWFOG$GUD9>B%V?LnW~NI0u7d2>
zHGy3WKUjK%Y&EqPd_3BfxzF;tu5#>3**CjG%2+#@KbfAtz!>jRch>$B-}V0tuh+z%
zT>ZT2m-4sF{|pn#_Wx&yP5S5SAonK3;NZ)+;z#qF{t18N*fCGqdHMYloWju?xnjO+
zUS7XU`{IkE3^lTAGQ*?f)|W4f)4Sar>62%jQZDMY_w=`p59@DkwYC?IKHl-pVfzk+
zda3>?^H=rMAILtO!La(5>YS*y-HGYOqFvP;kBj&f#2Bt}O}dx1ZD&`>?~gl5e>Kly
z_-*X)Bk{q12HtbirRw^{Zv`*;Z0vR5SMQO=A4$7D9!<}%np1VIarvu2vnRW@dpiDV
z$aZVsda}p&!}CM`RGS{IFPWWKt|YMCW4COyjF6l0k7v7X9sd}%Y?ghiX{_VzjHYYu
z?DsQ|zjl!4Ju@%n+{|;=wC6814V`;vg=*&k=A8>??4D-pd2+qS57mc>kM!jZ7ur;>
z`EvEQ&&(Im_6mP~{^4b)n%+>y_F`I;>)z*`YwK>WII+mBb#6<+^B)BqcWR3##%)bp
zb~CeVWp-jV@77&BIt2?t<r`KjO>3~r{y6=BZkDd!qxXmVS?|tS7n@LN<}K$}c%G%s
z^4oglYbCMnhks3(Rkt$h+x5T)Tk>C2$rr|#KLX|MoG{yZw|$|E%eGhC`1LmDKf{|V
zjE_J=lx6=JIP9OSd=dZk>i#cm>o>916n<#_=QXeOKSONve+GxF-!cJ=z7wxm+`Q8o
zDyi~?X>MHL$NNXmF8JYCGCR}k?yHt#9yV*7rTZUGuorfabN!hA$mgHIwRpb`GpD<3
zEm96BP)|Je`R&WMU)P%~xac5#kN?Bo>)n5RGZ){IT^4p`lHf!s{yq1nzm8A-k$&h`
zc&karm%CawlRDYY{P_7K@6GX@>lOdb{u1J?n;c#8_etNji<56U+_~{<lD*dVE(V`4
z{mvTA#XmOtRLjPlRdcd)KPG4VYV8%N+lw0P^nWxy(EiWBls!LXhh6TRo7vG5EGE|S
zFXnr+lk0c-@j9WcALqBO+p_WsXV>)Y)AtlH9{g2icWj^D{!KeBmvVPYuQ*dK_Q|A3
z@y&q;7g(#dFMDNP<+qsiZ_j(yGkkKE0-rcmO$lJXWzV-Ko4@yuuGj*mrFYU#?dquK
zX(;_Aw`kYu4y9e&rroQ!=CRbNug6Hz;~?8UzaOfPmVfx(udrpBPh?j7i%(4zynlFq
ze*B`gZ|een{*U}`UM`P|Ic?Xz>SU6{B!!taN8%HT`0TBIeh$5yXObKB-gkGvcCk%c
zf*3C=JXXH7?~~~#_G8_t+kPxxoh$LV%%g58D?<S&R;$b3-2Bg=thW6>LtN&6hK1KJ
znSRC)GGP#$^*LVpkK~0tiM47=Wj4M1)ieLKYDZoq|7!j9JJx$GYOpi=(f#4k_lIBK
zt|`8IyfU|JP0~z(_1ZlvWgdL8w|bQQ^8PKYvuPh}r=GLRuD;m(Lek?u1J}>42Ckh;
z{xh6NJN|E<@_&X4t--5j`TuFlsek>*{x3%W`@NDtSB4^ap+7-2iVv#a`l%hg%*ea_
zZ%H2GA2$Do@shqKlh1tidirEyx3%HPBtK8nFXnI6OO;;El3ifY`)rcicLfIfnd|4S
zU|9G5p?ULzkJEdVw(ezJlRM!~jDp2IMh5*0lZ@ZSsFvGv)ugjG?MawEz2R@$BV*RX
z8Yf*<1a7=<(qMl5JKDNhI^*ry#6AvX=^%^iSu4IVEjt=~*)*Fs?VR;lt54Fa%OxX~
za+?2%mNgjsaec_keKf2$e@*6vJ3KX;1l#=!4o{3X{^Rw-v;M)NTdk9~KI=LDH_xuZ
z(}rDc-q){79m_NGYtv1ap7GWZR`gU(oN%f_;R5@CCrR7?2(Q}L`8ZZSz)dS@m+y^#
zFD;Zmsco}UuMnzd{xQuXP<G4dNhw>V^gsOf&~EYa*D>3AGfn?(P0nW8>}~R*Lwub#
z7sKxZ0uIUxmo9Tzs^n_x)aVbc==mGp>;5}gU6{MOe6q6p?(6KLta(2!UAb9tKW4iE
z@AgX**cTSLe_o>nnL1z8#qgW`!O<JLe*`X)J+j4H#dq@MoF4X<UGG<)*q`40x%h$P
zoAc4p$C+Ookbgew>n*r0&_D=L_^hJEI_Kl@0$=i(U!GNcvRe1^%1=5M{=BOeezEUa
zgNaSzV_xHfvt)M7TdeT7V`1>;Gj|*QGss>2#NShsxbnyKn8`s`;+dy5vD)is-gN(J
z`*NS|$F{YPePg%Eh9#U~yRpczrL$I~e$F+_;qBVVANuY@|Ixe9pz^+Dzug<(va9DS
zgl^pY!G8FI=&jSs4@Fc7HO#+q-5I3?2U=$=xlf_tZbg2`_V~TJOIFy6DD4wgX6gF<
zb%Ptf*N^ZcRmmCmRIhxw#!@@$na8nOW|_Jf3wU;EENZZdZ~wL7qD}3hc<bC=y@@H7
zFV>Vz{wecM^xM@MrZu6>d<&k0-;QIxe*MTk&P!VzZqM^@I{oJLr|qwJ8A@PV3qbi+
z^x=PoElad+v9;UTrR*w^cZ>PY@Mh~f(MR!H<{YR<cWp1%uQ=ZyqbUE|l%eJ}Xrn}Y
z>>t7HX8#$uzHBJ|eQcWJkDco$veq7aFjwcrJ<f|;zQwNRU6OcwvEU?oqYUP{eeOSA
z{%2544*t)uE};I!()H`KpVarw{}g6w|LZCHzpf~T&s`de8m!MZ-(t%C&mj2a$xP;h
z8NOE<`uNU;$o~-2exrD4U)kSTYnor}`ukDlD33w&zn@9<U$}m0fQN>e1m`pv@z#WY
zRCbByuW`I)^5c4rQn88yACvtV_J?!oM8B=A+5X!(s-sTfpoPTeHy7p~nCKwq32GHC
z{3CQl>hPm^GnfUYYpd|F7lcgw&(P2MXZ7n-KQ=$?RDP7-UQqw^tM*$f2C9z3fo4%2
z%Xh6%{;}{8E4%$m%Rg779<Sc~WAlFoRsSRMUq9G?VO?j`!1YW2Tekm?$*(u1uRW68
zzi9r)^>ejfyuZ2rpM%x&zqRWBnjPdGgZyFrxSsd;qx~FNQqGP0B0h7=Kb%ms{Ilps
z(<4IBF`g`^f+B7#UMbVW$FY82zt_*;$J<-&H|)v&yObp*Dy!iX#|u^Ynz{x5Oc<Yn
z(nYQFZ~KY~S#`YA-KKuFo2e!ue16)KiND^7zP|eL{vmsje(s82=Q2}nW|sf!w)1B&
zlu&<hK<YP7$pY5(ihmdUaWeVO!0Noj<%#c#Gt3P2PiNH}|9bn^_4RU7KbappFI0cX
z@gvtWjrpbP<}JErQ*z?z`M+O0{;)Dso~=#%pnur@MjTVuuaw)RE4R<PDbw<z`P1`%
ztnp?Q=7&H1SbX$W-b4xO^qDS8>Uk2L_CKBVyX@XQ>*$QN4+A#3EEIH4U}IRonX#yg
zLHmGxW(lK>xq4Ba_@__*8IJA!w}=1RjQ<S%^*sL>_80$Iw19s;s6cu5k9YaZkKrzo
z$7FAR>g}!V(0+Ws=|97#&@b_8_W#md{YHyH`^o;kS*Nr13+3g07Zz>t%xk{zxVUa@
zd{p=mIm;c{^JQOO+8@9D%>Ky}|7tML2gU5G`wfDt{uuSP8C@@$+<$1V*PiZg<$HvG
zFg?2=m-{|O@ZSfvy=CD3q`>tv`?tuqvCVwcU0cR-TWrbf)B}&tI<VCX_Mf<Zx%9cb
z^q0`9|D@thh#TG5byxArarQ6C4)V&N*#O<GN2YBzjB&Z0(s_8{7lkL`cdJx?z1k%<
zcZK@hUEBH!zohd1&3^FfxAViCwdRNA`K`Z-b?t9Z;lB{T9+Um#d_RZqqq)!6jPp6|
zW4C@?S~L6O`+r_@@BgiK{?D-B0{hHBR}sc{_M4-a*JYo-o4Z(kw)}_ni&sDQzq$IK
zvz)?zhV>QoU)0twdI4U~aJtTZL4I41;j8V1$)8O>O|6ap`1_w{&Hb<6`9GU}YGn|u
zcXHJ4Fu8H^K=z91_Ti#VTlU!gXHeFg`kx_w!hePrNey;yn5K1UFdwnc<Tdl$W4q*)
z#*!uCywdZ1Papr+9B+R8&OOZ!U$=MFnAa|j{V02;g7>b3%xeCH4A+nTQ~vO7;ltd#
z$6i+!8lLAC;Qz4eTdM8B1w6Af7B!fZtgQ~a@ci?awO+5z`90(Gdj5(%>Wi=R<L}*H
z9;~kY7VF6#Y*H=pPrLtVT&OEUt?r_K7iWpyjQCos_wHzaq*9_$y_3Ci+{}d)rw`v#
z^}Xe`Hn-@;$sRkI+K|uje3u{1@=%RToVa+RU+9Gg&2L;8YR^C7=g*AOxOCs|>RX{l
zcXu9qu<~p06{%-6`X44A+9z`5*wWNoo$HzN^}J`A|Ezmu*z@~(SB3WDWxE%8iZ0vY
zw{m%p-t+$qu@c|%AN`U)w{PNy{|p^l&I`XZd==$;=}xr0q>QNTVZLJxrl3>~O29w<
zGdy-}*zjZVs)mIwx78%x?{xoqwm|f4{Fb_zPkt=-x^lHHdbYE${I`jn|NQK=K1RXo
z)bI5-HwWHc@wzJ6{(hHrOUy6XCI1;7pN@A4KXISMG;rx3|BYb^s!#HBZhn`PU)A;N
z892ofHR_?U*kS?G;#nDMA7!RZRql0*yxYM1%C~5r`H%KR6>_J~?4N#icj+0ki4&jM
z@89s<er?Us$NimE&-?Ve?s|W#X0_}(r`#g<_V44b3-}{Hem}lDTTyTJLx<_ckF(>q
z|Jq{zhX0Y>U%RcJpDkQ*FKhdyd-w00E-u#2t4zr~<9}_{MT`oTHS+RX-*-#1v-YM<
zRhI8$S{<JKVZP_T8$V_)IuKq`cq+Yq5!3xMj6W{0-<Wn$N9>~0DiOCv2WAEa!(iwR
zJWw?W!;0&t)!A26yo|Go^)orTZz;#*0-4J0PaFPhn}2NI@^$Qw-nZ~~*9aC&`}l7E
zrvD5c+rK8UpV{AW{&5$>k6&FuOFdZ<`W9RYV2peF+xo}Wggv`IY&|n0^5l-Kcj|li
zXS!eE`Ny_LZSBihQ_oFYc{@w2NaCID6Ct<58`&D{zAW0gpZUkG)5q$hwqMQlh~(fb
z6szoVu$1?Ed~25%JZ7EaE$c2tEjqh4V^`7!wR@au1^iA=7=Nk1j(0t+<SKkpnbn1L
zX1@b_aJ*=Z(?`XR;eDpIfu05?%PfrlGuT{j{qu4Du?9;}ooqF~Jx(rP_{VGS%iHo=
zPN~lB>DR5a{Il`L^;?S@4C8cv+gDg_xhs}0bk}`b^~a~TpReeU^MB<2gta>0r2{Ma
zP)vMGIO=fC7RKkGP^}gGZL;b=L)wqd?KQ_T80DJz`(OVI-+lf3{>{FZ+CR!JR4(SO
z6shJnkbkEALhuq~YJFe&-^HiqOJpYKacp|>>(8@&GuBVFv%jx<{YWv>HrK6dGHN?d
z*9SVtg@fwH><`nf-2D@HA<)e$rgHxGQ`7!U{T5oY|F=yhZ~5cdbA6{9-ng}mfAP*+
z_P$rYvNDK%oPM<ar&gTee}?t*|4s?NxfN9)fL$77>c#&Io8$j<-@5;|cKN@?xQB7_
zzfJ!$oY=eeKg0D~^)E!<iGXHa89&ZHI{&9u9jMT3{LipJw{YssKau|#CM|!&|LceR
zFQ)5~4y?7ZV6E&i{~6YUhVHVTOZ~D2&EHMn+xed%-V<CX?*Pq2hqHeyKD7VClplPb
zEGCyeonapKLsDhMQ}-(=b)oly4DN6!D|{7U{J{CzwOn3wk5-NP<I}e*Cg;vQ`P+Bn
z+pW9$4?L+0J$!+wxp`uI(jSeF`F~XRv2EEg&G-7Y{V%R7%$a+NP2#T`|MPg6>&yNK
zer*4vTxaYpJ=5$)Rz;grmCpPF_vg#^GSn(R&KGoln9u$yYV*W>8Xc{kzc0y&)Rlfz
zxpdOzyve#aPl?TjuRNd3`fh(q{it2()BZNyCqEVBGj=lXmJ_IBR{tpaD5`eKuW1YO
zlXF_1@0gg}>t3eL)L{GkTgiuQH`f30EtJ>&*PG?>_Uetg=FjVE*YtD02&l+DY*p8v
z$96g+l)Juif9HPT$x&ZGLCg@|`0uj($M+BCe}7j$CG`E&2lZQy|Ed0w{`dF%r=kos
zKS8lo{UQFJ*S_wr)BiKLZmn&Nm-{3BpJCGaMSoNOGhED#PYhs;=c~A6)_q*+lf}V*
z7v}sc5{@ste*C^<$+AoT)U##=2|ZbRs7m1Q{3}un4?xB5cm12YBLrSY?dy5pSjcr=
zLjA{t3H5IBQ){K;1%5~$(S4XN`Eu4a|EVGeeAp|_^Zt_hoh6w(Ph^@pzx0aK#0$+A
zF0g=_TcXn+S*u>DF<ljDaDINK7UR2+M_aYHw@18HFK1YE>}cc5o&fd(UqIV{zx5yb
zA$9-Z^!C7CvrXy`?o0e7_2bsDOWwa<S6jHH&U5W$-)XUa*O%3zmrc60IgSb4Vrg~X
zw1W9(0PCrr=8y0HnQFcN*SGfn436v9tbTI8zy4FmyZx_k$^T_*usH>qK`#0`>#p1O
z_39s`GdliA{AcK`m5w+3cP>1ezxOM5n#Jcgobg5L_FtIws|Z{b*v$UcJjeaROJ&_=
z-6skBF-+M{XZ>RTHu>uHQx{EAayDk_Es<+}xBheeseN?|n9!^I&DqY53G<XL%l3)p
zJyQA4aNsCI?R`+^B4&TjAI?QT?)&{VTh6BDP&0eQ0U;Ovh3{;4g{yxof7E-tv3J@0
zrOrIFrk;}Y_Th}UY{AaZGs*GKYW0Wh$5z&OuU^;vNa8`;yFA_HExF<O?*#nWFJEi0
zIezp$n~nd&_DR{<Wmk2?C)%zOI#9o5&cq)n;d8A_@<Oky=HpOi3BTVy>v`#Yri%0<
zjr+HjWM|&_&u}_mxBS0fF;Waa`nrCFNB*6&#d_}fC0XTVIaMkPycYkI`g}M0fqYNN
zflE=k>y`>U|1OkUQ@`uRU(N;mI*Zn2MTP#GSaxk!@0@F!*N4pHntyHO1;*Irhx29c
zRwy5t7*pAItK^N)JKp=+`rjMA%GP^5da;0i--3D8GnD6v^NV!JO31Xaq)1KMq2FA!
z_|<%#lIc^sZMd%ewCgCa_u+b<0d9bu{Ad4S{w+HOsV=qD%ge*nFG@ePUm5i?Y2W+n
zCOfvS<@(RyGlN<73cqmrouqvd`?pLw^zYHR#Lk4NiwocJ@qb#t1xjC_qB!bu{<BM8
zy`z5@cdlI;8T@Lw>G#yuCsD1fd!O*`lJ1xmk{_Bl@z3iAvwod_klx|8{lhouOqIKZ
z%RO@M2%o#RqHcx-Xsj_6IzIvG-Qva}#b;&r=$l;9DO8%4p4_mYRINcKLPO;PYsK~>
z^ZU$xc~1BIaM-=L%4kzu?Tbft-G3kd;;(wTPxDX4<cQBE`8@tQV#=DfxBjfP&(SZ~
z_t*c@o?y!b+~(WAM@_vmy?ndSofwbX^E@Lq3x73@>cW2L!uq_wbG9fKuFr~kyy9jy
zN0aft%X8*mtdIIA_3QnEbuA|TZP#>8ZmWKly^_CvcI$tJ;|_l_m@k6bUFcYo<E*X-
z<EQt>?zi_p{G0mqua)rM=`}wm1{AU^U-6B7#rH>hy7qm!vgNdGyx+V-|L&@9oy+AZ
z-N&(h(ms_xhWkI5{`M89?v)Gsd-nWy<3Ic_YJbUJYOnycwyf?mRDAl+aA4PqJ=@M~
zn>1m2*pUYw3%-3xoZK8ATTy&uSA17V$5vUbr)jOn&lrDpyL+`gIi4r%dfT7yH9!0V
z#CO@gKB(>%x8m`|DIYSJ-$iL3{$u*vHFLV4ik;HsXIp14oOdI?=l9fe?hj|Zd%I8P
zhtw;B(~qP>&VM+$)BlMpL)n&@>zD(7TzrsgrSzZSHq*<7hq{Z?)qiq*%9r|6d*y4z
z(#;><@GrY<&-U<yvB9_F+&@x&UtstDxc^a#S($J}xX0YMcZJ(NMcn=yR9~$8qrcwq
z>-sq>&%IaPyjv{IQpeBJ<Q9YWjvvVnr2AzmdIhgu_uiK9y{Pf_?}lIVKbm?UxW{z0
zrgXLL)=3g?1DXp<4nOIs5Bnne^?sX;@v<NOuI*lz6+b=fNuBZcrSxvYcfJf+(b0!9
zb7lAL$(AwHaB-F3VrK~166nCVeuACp$!C8;ubzAJ_S5xGuItyI_xdsWk=z1P{|>9C
zm*%XF-PQbNdH$CLd}*Mv(D#S%I<<)(#iT1^bgEi>b0`0Ozi0o7<B#Jb`lfy`-Fjr(
z^uU;dihUV#Jo=VTO(^2{ll}UA+kL?|Hu;N>^lQ1Uahb7mn+lW1Khv+lzXI4RT}65d
zj2#5;+&P+=t9#^~kj8}F8*LcaJlA*F#IN1n@h5gw)^m$pJJKDhL0dK&<4%8E{Alf(
zZ^0Gujyr{B)<xf*aV|vv&*$L#wtshgT|fT?!%}9GsW0U@>f}y7maWatSF*qH%}*|=
z%ImI6^7Z?-UpvU%{@{OT?Zf>{M+=MPPTzIicTquks$Yk_UcJ<pRauJ`wT3b<Hn3+E
zE@0ZH|6{S@<VX1((h~m}yp%sNgkO)^-?=50l{;(J+NBG*cc*M>I8v=2954D~dPr>k
zkzdP}Eoj-bb5aQVx=Y6;{}?(*h6K7Y)Jp$0-SO|xb>SU5d;VqrXSlY$X#K1@hKlW8
z7xGGL?L+r=U5Mp)()uiSRb)Av<ku&4Zu=%|+u8I^bk?nmXPrC4dz&?X2|5S|x~62y
zX<qokYJY3j+NG-*=T7os7X0@<is7gHqb2jwkNjs4Ff;r&x&NfYI=iiV{8#DieAF8p
z;@}h;>#4=|N@U})dY&*}2GK9+Z>~N5EgjpxV@J=wtolRyir1(AV14vg`|$T&+vcy1
zbI;hGWZvfKC$i~@fPdcNPbQ3Cj*9ZGy}S1fx9ysb{@k@Ul?qPP3kC;(&IMtgT2uaE
z{<rVV^;>lxpM5s%UOMx%j=vv&6x1`vYhAxT*;)38KF^8uGF_op+nkvXvhCCS_`P+>
zhx#7<Ez8(X@;-~+_)lZ@yZ;RB4;^IATFNdiEme*5bCh*lcF{rXtF7Prh%0IP_s?9m
zYvy*F-Yeh!IqgmVR`+54xA~oEA6bu7ZoAxeW0Qrk!M|qpkD`w+9Qk}+#!$0TC1KU#
zl`0Roeg{AN-n#fhdvi|7f(3r!XLcn13EHmvPrj9*<ndBn=(5N-#^2s2r+&Co@$y^S
z`Rk|uGjM&6e(QAJcUyM%>m9m@vMIA1x_{34+5UKYcgcOBAAQGowO;D2eX~GuY0p#d
zjVBqtKj32c1nLf0?{D@KezdK_zkEVn;fD1aS!>)M*k;M|S3LH(su!_#k8ralvqkVh
z`-$r}m8=)Yl)6*>Wv|z@H_0l_8cFOsUTHA<?XmvW`C)hL%P>3TM$T&ECoux{PiM=l
zw0Beg_iKIOs#){qX0OhiZdLolDLT93Op)R{UWOWR*OGtMA9CL})p**?Em*ohW$%_B
zk34?MuXs`Wdd32#eG7hwKAv(7G@`)q^~vJj&i*m3J3i~!?iYRe<!H_RC@HngwGaQs
z-4D6E%;0YHwkL`AugC|ui!gq#6+QIF?#Ij}Kb{>FREf?F6si2yS5SO+^6%4sR_|KC
zv@^cr*QE?QhHLtfO*^+|EdE~p)BW?hd68low>)J7MN((>F~}|37yskxM>%=XEWsDM
zd~Sc)ZGPv|de5iFjBFiFGQX-_!F=MyqOCUe3$o<Yt|eUBa>8f3u^IcKzBm2}8q62|
zG5_$~x?iF<sp90OOaBTy9xhdWD&KzZ4{L2;%zuVv8}-x&_j#jViY1qwpOsnItkb?)
z{__Q{7a9!fr|!?Nc58m*FsHe@+u}y`W9`4%uV#H%f6Lx6^UGW9*iPebW!aS-|6UjE
zpUD32*8={zpyukUI@yZO8r{chjf1CdyS-*!%<+rTPt`x1tLOUdXBiZ6$>V0MOlqW`
zquio>%<BU`m>)ZveW=Xv<@O1B%M;}VSMR&2EZ4Z#ZVThr($FiV(y{9P^M3tGX}iUu
zuhLf_!u1ifrp{ZC{g-`vp3jb#s)t(HKge94T5<bPd52BGA?=%C_YV4nUE&kATYI<v
zT7yQ#=c7Rt$B$m$wV7$d?wsw;e+>IXYODX5o(*@+d>GwX!@uIktb~)fEFYr})jwan
z@#lU9`{0<j45GSgj@^1EdEjK1YyF95ixxH5{ca1Hr83Qor*GlZb|-$XN&CV-oIgHa
z;6<3&tlFz<w|?Eai{r|+Am7CeMiwvM#ykE{J~peouS9X>4eev0dv-3I{NC-~oKm^A
z2D_TS3vJH-i1gh5?r)RseBbkbi{rw1E=8Z0xoE92aYIU~g_gTQ*LVM0-X5t}w$!GE
zKdqQ`_4ZxQ)c*_@X6;dGu-o?|@}t=OW4DBk7AmQ2&e@%(c#ga89Q(reFS0MVEA8XI
z__g~ldq{iG<-E9iuY{*ete+@*d~2=Y1N+`z_8p75PDhnoF0~Ucp5v_fmG_VOjejMK
zuSJq(^sQSswOLb=MW)$*0Z+c*k7&=2VKY_R)@Dq0JNz`suHyWvc?+%|lhe5H<iq{W
zQeL^Rd)GEg9DXd_p8PXu->s`#t7V1#W(Qo!OWwY<BX#aMd&XC_s~_!`czyrF<R9CE
zt}%&t&+Jy3x3G%mA433}s7UBtZJ(XjO1)#vP8qA7J=0`yrE3052l<d1uI-cfTd%nu
zvpKnRV(r2Fe_N|UQ-2h@cOU*Id-+R;;igNh-O4{YWab}v^3QZ7cm#&=WxQrh`G?aP
z`>bo-Opb0_v9CaR`3#G~KmCv6!>-S-N&GPJV|Zg8i(vk~jrN(_8Hx(*Qso2xv@+B*
zyRxqZcbyr+SJkk6w76JP_;;r9+wE7yPd#5SA!YgV6MwQ#y~_5UnX_JTS7X;{?lm2U
zH?k`=*!`5%SmV!`{o%*#L$}H{vU|^PHu(3tPoj=R>Na?`3UZPT)^+(dTnyO>Jo8v<
zu6~^UX!*B0mn*Ver%RRiZhMvb+M4;h`)`GRrFUuyf3)0_zr@zK?Ckcyea_EzneiBw
z{JA~x%h{TJRTn^Y1uo3?pP}iGt$J5Y?6Q{}d?%mDWy&9xc-sGjw{|Cs;qBYUS-iw7
zt|+Z|!*D?Kq5bCVt$S8S|7Q@6asTX9cQ(i4#p3D8uL|s$<GxsdYb30;guc&NyH(mU
zSMNbzb>;M&i6?f3$vs*V=pb+P<NE{Iqnl5!sPLHi&@yeq#I~>B+-%)9K7SpjT%KN>
zSoH0B*(XOU8Iz)wVe*aZ_ntVLRMC9!7kih2VYXE2-t*s6wA<qs^SLtASi07VulsjS
zOjvBP^R?7%HWNiJRd#>5W8nTIyXA@<<Bw}+`zMOdebm>>^W*%315ym1era!;{7}5_
zanb${eRsC++9mksMgK$bewA7fUw^j|<DVDIos0H59eyC+n=euMG4kfhf11nB*|V}-
zFJAcX?6*Rrlk2jBVycd2%N_jBP%AU}Cl|xdclYj9ue`)vF)uRaVUVfLk>8AQM<3)j
z?3%ag<Gmj<_RUW}%$=%yZbFs(yL$Vj)yLcS2tGW|?I!MVY3+l_dybZS+z+$4?!czO
z)HZSPjf|+AsJfZivRl_Ub4&4G`8B_4zbiQDG0uEs>+#~B^p&j&=B8`6Oj>cQ$Z3*&
z)Q`}cOUlYsXZCs8o?O3AZ|%apTV`E*WIBm+!f_>Yw;%(@^=ke%A0Ils^6%31`nPVE
zz27uly71+0$p!rCKLS5o%9nbzKYM?l#~1J9-`8J0H~%j3pTYRn+8T!+`m28=dFGdt
zOb@(NJZHt34gGG+E56Gwt#w}ha$A*ei<z0&$J@7^7AE(Z9taHE_N>8<NnxczkKjSJ
zCEIt*yHqmoUZmnozA%p)t2MtV?K|?({!l;Xk0pDqM-|<^yRH6GZhhI4UlT0ykAzRp
zy1zO1(q^;%^@m>Hvfj}(@jnAo%=1qR_}I=r=I>jxP*82BN|%*na=86W(fMotxPQ#=
zNXRgi&3d{Zf3HZ2+wxc9lI!NxH`tkXemg4K^Z574B8I<(KK&2W`yxMl+g8~BUV5qh
zsRo;4UEls{f6KqRwBXjd?U{LVuice$v+umc{yJ{%!~W(tp%0gr{AWn9YQ0sYw&(DJ
zU#&0fwHQ9UZ{N?pwO-s`^w~n0ZBiDNnK6k^<vRF3+tg;iik0`+c%fu<t-0U!2;GF(
z72SW%ue94*8lu6#!0>?4+krK);@q$AJ|E&XS1;GhKB4oZVuO)0tIgxv>mNpMx$f{P
zv_Z>_!}bO9gYMNc-|MC9+&S~vEVnzKtW#(FnjCQbs-4;o&WCgJo_Vk4OuO`a!Zd9T
zUb*_aw)V_1ruX06T&+BRQ$^FM(6`T>F3!JP%1}`&`lkNFIXTV$3=6jP|7WOI{m<}7
z^W<;yA2YVehhJj)wc4Zpo1=rAY24%w!BJOp>J(poGYdL(ZF|n?LI#zEu}j_^UvaEB
zcHaEorYHBvx*y5jzAO5+%zuXaF8>+4zWTG*n1A@*Bs$-Bd;0FuTi=6aFA2V|Wxv#5
zvL~^+a@h~#$i0`Z%s!#>6zau&R{uml%AP&*eY;W2oim?(mBlJ$H=U{VT)+1w^U5%W
zCIiP8*{A;aeh@!w_4Lg2Fd^Ti=M{Ah2}l`%JjkTM{4`7ZPTu~sv!M}x`;V9ft<Sd-
z>;IXzDjvy$wWt3x90_3Wy%=|D{^t75?wViwCa|yC(*B<zMRfi0e`kyG*#kdH<-XhY
z?asfP`lSqo@~m5XgN{Eko1LDj(wkrQX1V}V*`{2TjdC~6)vkWM@X}6sh$lnm`)p6&
zUAXn#GV3ME7s{Al#umH;*B-2u=Ev<>%sciN?K(Th_5GKlI-%}H&R5$XUjMv4a!D%B
zQV$lvCjKghA1oK+J$_vNR=54?R>}N7mbJXyUPtF$E47PIUm0ZN@a^EbYM;NezozZ>
ze;b>3$~vJgf79yS6JLI2W&XN=r@t|dJGc6%a@4Ml*|G-hLGJwKANmike;Oaub>_qO
z_AT#uGA?9R#V~1SxIcQn+wh%l7QFanKVC0xn(H6*qjS~K6`pFRBYOf|jz4vgHL(5l
zY=_rx<74qWHP(;QgkK4mgs<8i_KJDy#~0NGzphV@|97@HU)}Gcl<1r7Vn+mjto%2H
z@xhevP21nxe^hWhZT%9_ueuuczgW%xNgh6G|3&QLe}?x@_WyBZsCXK=VehWX>yvhG
zn&+XHlyLE+<UzK*i!Oi5xhmOy>yLA~!272T=l`6#UimP-F;4Qs-z(+QbM;mh3$yv#
zFiLHBzoGO`v4iY?hW5O5>-U&0i;Y|8y>jj1%8;JKuBL3i2@DL(3zjb6D?b*;d+AT^
zqHS|my1Ch9r1|7`?sfc^ytiil<M{Sn&ztmTS^qAZbg}>4dS%Jp<NFtWGyOKzu{=Gu
zK3{d~9YKGVW`3C!k`dLQGpa7e2mF}*t?t9ORqyTk3)LnY%e)DE<~sko=ZQbOmGf49
zU_NH%cR$rE{DhUn(p&xy4g|1IcedGfS>=Mq$5Smvy9`-9-f^sZ?f2vC<GE&nT-kC}
zjE&zqraAwdIBUK7A$!?lPwOAb?#L+*bF!anCEp@vJ@eathC}vN)w>tSpKH*lXn&;N
zwI`6XIppfINq4@s87Mn{<?gwz8@GMwzw>oEds59W-?-s^XG@#gAEutVMSHam*E86d
zF4^R}>a^ZkqtDy?C+YlW*u`((xqzSPLw!T(d#SiJQK^f$3vNt$<=F99KJNLA;`opX
z{)g|TKCm@7oW^r~QscMo?eZq=7pn9ZtXp*L+^u7Gb>Av<aR?+PcQUQ`#Ta~niEql5
zKnK>eie{IsALUxBm&C10*wu0DNNMnm{(^#fuFH!W>|{Ttx0dR&zrOsks>d~wFL}DW
z&dQrp{xi%86Rkb?XgzzzJ;Tes)7EEgYCKc4o?r57*xNs=5AJdPZT)&$k<Bd8zkB~k
zo;t4i>52S>f5|T$<P2TQF8xvZcqd5YKSN8|!;g1mIsTPq9e%LAZ+!|^N&RM?PnS=v
zVt<vveE#+3AGIIehkU%YYT{Ap!^@7{e`%glv&vTd>i(1K!#-?(^ENkME2d(4ptwr$
zx9EUSyVmpSADH&8_rI*OWwpebHM)zoZR<!>>MUzrz_0&f|AJdD{xh)g&0gl9ymj+5
z8I3ROl6Ft#`POWYFVCK3y1v82`mEYl@94WO$u*^tFWh%nD8G!ii~D!>*N0t&$!jw=
zML&O%`F-)@JFLoI7x0TL+WXq?@2q#+%qxF%sm8s`&GY|fbEIDD-4_4GI_^tedylTU
z)w6i-mHGOAKN;9tG5l<I`fzUZBk!ZzE}6W1w?v&~(Vx{{lMnpKe$C%Hk8SdSePU+i
z!8+5o8&zI@^LteRL*VNMtLusB%WuBC_BuZ`n|F)$fj)^t8h=<LMHr9&@&2&zV|$bS
zmKWE}Gg!VI|2IqD@kdYpv3<tV)Z4<lLNt|x)+|YAvg-Q%X;1Q_{Db~KJoTSk+hg<L
z_I)q!nCO$AmYn_jpxS(WvV*+wW0QpI`~Fz|kYAlSPpvuhqsF%A>fpV)Q;)Q{9hZE=
z@H%#Vrybi5@7VHr*TgTqlUCWf&P@2<!^fYFGSu8$^yB)Gd9nes!Zw%ZOZ;b;=J;v;
z_mhuyiT$|x_?XlF+ZHE|xp44*TDLy<?;O(;5p&HWH|_E}l$tU7%N_fugY^ybtilv?
zb?#JkFa5WL@$hRqm1{N57PG^ztjm|Idq3+Z_ZL~#)bN$J>(2i(o!KxWBDz0($2t4=
z6S6m6v`>36@tSXOj1fa++a=q@|9<6v5Mg|9t88xds{5|#iMhIG&n(Y!mwGZeKA=YZ
zN6<XphOAqw*37!IdOJhYwpZ26cYe)!TVwv<Ec2nVdw%`PU6}>jr}SR3zuK?19qBNe
z9!3dUUR@E!kI#?JXP4)wxKz@~e?#B6FvsBmQ)T>te=Xtc@hLSyAEGKQ9}*Y4=(ap?
z``@pNAJ09!>aRrM&#Lg_K}S`D_5>~T6ztkG5p=o}gAsHGE`Ragd3zGJZT}u8v1dxl
z&c9!m`7<8)IsK!|Kel~6>zhh`zwR~q$NkzfO1neGQ+j=XyVq~`1NU^deq7$ByEVH=
z%*iaqh5y%1h9`A9<&FffdxIt^aN*Fc+&4__T0Q&q^pIn|w5PJ%0iIc#<5EA~j<8BU
z96h_lV$#2m?JP0^JMY|I^!Vcf{+WA1*Pnk>FZ@dC$dh+Fr)*mPU3k&@2L{?wI0mdi
zYvb3-vb*p6$hJFuY2?bxcS{A=u@%0mYe@MgIyc_4hUJ6g<&x(g-4=63uU>jHV~wT9
z?(KiLfAUu`d_BwU4mxT}SL-a(!EB*pJKi^*{55&<k88aOO9}Ok7BKZdXTsGqj_QIN
z$l!UmKuBX5&YrP!Q5S<Da^Sc@cT4cVlqPj)EMNvrHK5=mH2*G!&LD6$dLvuWrLlnJ
z0LTuXpo?hd;>=jOsDaCeD@udmC`hjavO_!@y<Hj9G&2@8fSmzy0(w`F<!H_IkJlf5
zy!2J<qu*TdU$VFVGb~-y|20Vd(J%AQzph`}8Xd4<+m$cByQNP|i_UH_JkevsHL=-2
zo@HW}_NE`*53J8KSG0Mjxz}0+MO}K(Ct1t+@577iUP#F96@Dn+AANA1dc?Y?${u?a
z_1shJ5B+Couh06tON06SiKU*4Bb5_QJTTf|$s*S_KaTl>`J)JJ`IfDnSG{^7e3eU|
z{|!9<@@G}}elGYdKl%)W_7VF`v(yjIx)yx6o<INhqrLm~M1SkwGAW-kv)sFPLY%<;
z52_abLKr{$g2D$Y4(n@Oc>hOt`1Z>tH>9#>-ez=o!1rX{fl{>wtNJ!M=Gn*P)I65B
zNu_S&uT-%3S*>BWY~SG~j<*Z@Bm#ppu4pOsurfEW7T;t4&^y2Bk7@4GXogFSyB_5v
zoK}2QH@AJ8HWBFznrG3YXDIV|^u>RK9X=)}H{Wx=|1`%LPne%|9(R*}KI_N*qjBO_
zYLwUeFL@RCcAD{&!tW`5XZ9W2_jFzG@j8~vHpPogmp<xvx0vO2tj5np`LCAmSis-)
zVr{>0MSAdud0Wk<uX0G9Wjr<UdrI7y<vUFK!7XS0uJERiY3iCv0;f(Dg!Hw9U$N)3
z(^l_#d)e(;YRI*u_({$UdLiZi8LF?;nSQ$KonNTC_6TUzd9d5Ti5DKMl;tpC{C+Mo
z`*@w$pX6;HSpr_%Q<$l6wM|I#JZIt8FZs{o4&yla>QS9eM(_F>)2nY6`(AdH*wOv>
ziDLgVX8vQlvvN8%xt(|*n%Kl&=pfH1rM=|i`}Xr~Ho2=Zoy(_+99^isC->C9cKO!g
z5_nkxD=-3GeY3M|-(Cs3w$bMDse{VBY~F@17#6T>+cxjrEA8xzd67>OI;D7~sc#Vd
zy8Y1pwhup~-9NvZs&XxFisVz7j^iou`SHOab|N)e&4<J~S7l9HGV96euhFIUhxYwj
z{$YI(vj}Jk6_QVfVd^84bNI54)p1<1$z8m4+F}l&6=%e?>?&qok@pXbSF5;uVAuY}
zufdrsj_(tDCcT9H^ptA3<G1$RSaY}B>GB@erM}Bvm7Ofi)i@Yr$$mxdNYw@QLm}ZS
zYMg(VulnKnWdG$bUuXAo<&85H<=-}5sqVkDXCHXsfN12@W=)0W3GP|n`rG%*>U}Bg
z_W5W&vog(KWf@;;NB!2n4}bm5KDuH7|DG>rgN{dT==$xqtLxdVz$uf=PT2pg&)OL;
zSP_0)>U;CLmR-KDk4xsB&->3{5>y-h>+AXjdz3#uKYZ&#-~Fin44u9YAL~wQ?f-rM
z@DI>{YDq{zjB_#9S(cSLK1S<$B;*&0s)1+FK}i6N7kpVXSqU^4y!Z>p<Jq3qA2UYz
zUfW!FrE#bK(;ao852k)O|5kiul=DMwUdy?@SH3&B_&p4fnSX`<*uFHhG^D-pgZ<&&
z;^X28kxq#lgFEw8C0xJB-?KZ^VEI<u<w}k7D%a(iW$TMeH4iP~KQsA8_4O<FdG`sw
zyvN;S{rbT4s>}Lk4J9LruLl3gUi2ZoaZ5k*%leedNxIs_re|gtdDWgzd>d=apdbON
z578@wk;c!~NN{9mzHxoxkIxU{rmp|F{TH+QvMlyz8QcCn3;rTs^1IJ=_4O4C_*?%t
zKAf9;=vQ-O*0-SBUYxhi*oDijy36q^%(eFJnvANny(u|gy*2V4<Ug2N++R>FUl=F*
z=s&~FhmDh7AKKo~x9Hr<{jT*N|GZ#6uwt!lvcuIH`;y$P*_>}xPcnG5upM9cqMqw4
zI34hwWj`kMpP?;XC{t?f*$wP!22YON54Dl{>dXDD@5<V%O4m&)@~$LEuAP6ne%&Pw
z`=u4NB8*?xP5gNIpw)yx+b7qA<W?689{3Zkv|HBx=swx2PJf$YF0bP*60@G7`!n72
z!&%7%{QF$*Zj=;0`k$e;D}HPAe}?lF``>SjXVJN|;?Ri)Rct2vGiLv*_WaLKE5-2p
z%H7+1zDFGD_i3B`K3XStnelho&gIb)uXvVp)$2UlC!M*pux;XvDlxU0vlxE!2mCns
zAey7QK6mM1{s-H8=ghw>dZ42FTW_OsMUC|m>zxwOv$q|Pd&nMtr0eH<lK{4Pdmr)o
zAKA5L*0i-H-^GpO)>H)ky(-)AWz8wraJyD@v~~CEmhD@bJf9V}_L=G&{~*H18oBB6
zdsFQlZ*_8)?%Xlqp;9Nep}k|==7;hPQukH_J&&JRayq#A$x2>h{^hQJD!;9-{;<8t
zgrEIphe@|c@5lDJ|1wj4ZU6GpLC*dGe?w24toPC58SL8270=b*PyEyVJnn01a`y75
z<Jsx?qI>rwXSoWohRPiX`7ttEBKYb8uByJNiK}nfE?b<=dUbb?NwGrWuj`Y4^na_m
zP%1X5R_tA_QSyn-_L*XJ?Gt~_Us|my!uW~5qmJjtX$O9V%lq!<?f-P`%zKNk+TZtk
zJ$Sx-)~#TX4<|*MSM8dr{K545NztjRf26xyfBflduHL0LRi`CX>TENZA7*L4Ivf8$
zym>2A+*!RX&(;4$oQkYhJO6o|a_HaL`Ipr_uCHDC#e2t1`;Sl0e_FuLwP>%_=Li0M
zYa_Qs+>X)sr;!&v|G<NPQ_si#G5a{RGvE5~_CInf<^D4~oyG8U#oEX{hU;%HtlVPj
zWg;8-R)wL?Vij+8!GdW`0qj8m9~}fP`u9nyo}VslXZ2Qc^|oDn8>=|CTw1@Jd1cq#
z+wv0@@chzVyzK*f_j>y)Kgxsb-#eWC^D+8cJ<Ff+iih=^!WgQyeAa6G^{m0>Ti3U<
z*5C54r`{@+O*?eA_%lc76NNfO*Rm@AH}4;IJFQ)DFYdm<tA#CD^?LPD3_n{P(-@dM
zU$9rbwz2<k`RG1Xt(=m~Ys~){bl-`e>i=w8&vX6iFY|^y`VT+YZ!WR6h)8~}x%bC^
zhRjXbi<m_iAKa7qJ7=Nq<cj`~Ob<)5Yt0$I#BKgLe_S8`;Xgym7JKg79VWGA+=)HL
ctDfF|b$oJk34GWR>&y{ye{Gnu+5g`J0B-5IkpKVy

literal 0
HcmV?d00001

diff --git a/index.rst b/index.rst
index 8b8e69e9e..795d1a479 100644
--- a/index.rst
+++ b/index.rst
@@ -50,12 +50,16 @@ Sponsors
   :target: https://supabase.io/?utm_source=postgrest%20backers&utm_medium=open%20source%20partner&utm_campaign=postgrest%20backers%20github&utm_term=homepage
   :width:  13em
 
+.. image:: _static/oblivious.jpg
+  :target: https://oblivious.ai/?utm_source=sponsor&utm_campaign=postgrest
+  :width:  13em
+
 .. The static/empty.png(created with `convert -size 320x95 xc:#fcfcfc empty.png`) is an ugly workaround
    to create space and center the logos. It's not easy to layout with restructuredText.
 
-.. image:: _static/empty.png
-  :target: #sponsors
-  :width:  13em
+.. .. image:: _static/empty.png
+     :target: #sponsors
+     :width:  13em
 
 |
 

From 8562f48a37d3cf9834d67da7ff05ec096dc4d1b8 Mon Sep 17 00:00:00 2001
From: laurenceisla <lau.isla.c@gmail.com>
Date: Tue, 20 Jul 2021 16:15:17 -0500
Subject: [PATCH 403/652] Add openapi-mode configuration option

---
 api.rst               |  8 +++++++-
 configuration.rst     | 36 +++++++++++++++++++++++++++++-------
 releases/upcoming.rst |  3 +++
 3 files changed, 39 insertions(+), 8 deletions(-)

diff --git a/api.rst b/api.rst
index ae9006734..735aa2940 100644
--- a/api.rst
+++ b/api.rst
@@ -1410,7 +1410,13 @@ This follows the same rules as :ref:`binary_output`.
 OpenAPI Support
 ===============
 
-Every API hosted by PostgREST automatically serves a full `OpenAPI <https://www.openapis.org/>`_ description on the root path. This provides a list of all endpoints(tables, foreign tables, views, functions), along with supported HTTP verbs and example payloads. For extra customization, the OpenAPI output contains a "description" field for every `SQL comment <https://www.postgresql.org/docs/current/sql-comment.html>`_ on any database object. For instance,
+Every API hosted by PostgREST automatically serves a full `OpenAPI <https://www.openapis.org/>`_ description on the root path. This provides a list of all endpoints (tables, foreign tables, views, functions), along with supported HTTP verbs and example payloads.
+
+.. note::
+
+  By default, this output depends on the permissions of the role that is contained in the JWT role claim (or the :ref:`db-anon-role` if no JWT is sent). If you need to show all the endpoints disregarding the role's permissions, set the :ref:`openapi-mode` config to :code:`ignore_privileges`.
+
+For extra customization, the OpenAPI output contains a "description" field for every `SQL comment <https://www.postgresql.org/docs/current/sql-comment.html>`_ on any database object. For instance,
 
 .. code-block:: sql
 
diff --git a/configuration.rst b/configuration.rst
index b7f4e475d..960002b67 100644
--- a/configuration.rst
+++ b/configuration.rst
@@ -30,12 +30,12 @@ The user specified in the db-uri is also known as the authenticator role. For mo
 
 Here is the full list of configuration parameters.
 
-======================== ======= =========  ========
-Name                     Type    Default    Required
-======================== ======= =========  ========
-db-uri                   String             Y
-db-schema                String             Y
-db-anon-role             String             Y
+======================== ======= ================= ========
+Name                     Type    Default           Required
+======================== ======= ================= ========
+db-uri                   String                    Y
+db-schema                String                    Y
+db-anon-role             String                    Y
 db-pool                  Int     10
 db-pool-timeout          Int     10
 db-extra-search-path     String  public
@@ -43,6 +43,7 @@ server-host              String  !4
 server-port              Int     3000
 server-unix-socket       String
 server-unix-socket-mode  String  660
+openapi-mode             String  follow-privileges
 openapi-server-proxy-uri String
 jwt-secret               String
 jwt-aud                  String
@@ -52,7 +53,7 @@ pre-request              String
 app.settings.*           String
 role-claim-key           String  .role
 raw-media-types          String
-======================== ======= =========  ========
+======================== ======= ================= ========
 
 .. _db-uri:
 
@@ -175,6 +176,27 @@ server-unix-socket-mode
 
     server-unix-socket-mode = "660"
 
+.. _openapi-mode:
+
+openapi-mode
+------------
+
+  Specifies how the OpenAPI output should be displayed:
+
+  .. code:: bash
+
+    # Follows the privileges of the JWT role claim (or from db-anon-role if the JWT is not sent)
+    # Shows information depending on the permissions that the role making the request has
+    openapi-mode = "follow-privileges"
+
+    # Ignores the privileges of the JWT role claim (or from db-anon-role if the JWT is not sent)
+    # Shows all the exposed information, regardless of the permissions that the role making the request has
+    openapi-mode = "ignore-privileges"
+
+    # Disables the OpenApi output altogether.
+    # Throws a `404 Not Found` error when accessing the API root path
+    openapi-mode = "disabled"
+
 .. _openapi-server-proxy-uri:
 
 openapi-server-proxy-uri
diff --git a/releases/upcoming.rst b/releases/upcoming.rst
index a3e10dc9f..398370f05 100644
--- a/releases/upcoming.rst
+++ b/releases/upcoming.rst
@@ -16,6 +16,9 @@ Added
 * Allow :ref:`s_procs_variadic`.
   |br| -- `@wolfgangwalther <https://github.com/wolfgangwalther>`_
 
+* Config options for showing a full OpenAPI output regardless of the JWT role privileges and for disabling it altogether. See :ref:`openapi-mode`.
+  |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
+
 * Documentation improvements
 
   + Added the :ref:`OPTIONS requests <options_requests>` section.

From 204b0ed25950162df36b130b1d668409b096f691 Mon Sep 17 00:00:00 2001
From: laurenceisla <lau.isla.c@gmail.com>
Date: Tue, 20 Jul 2021 16:40:45 -0500
Subject: [PATCH 404/652] Add improved error messages for RPC on a stale schema

Error message for a not found RPC.

Unsupported overloaded RPC with the same argument names but different types.
---
 api.rst               |  4 ++++
 releases/upcoming.rst |  4 ++++
 schema_cache.rst      | 14 +++++++-------
 3 files changed, 15 insertions(+), 7 deletions(-)

diff --git a/api.rst b/api.rst
index 735aa2940..2dea57d3f 100644
--- a/api.rst
+++ b/api.rst
@@ -1346,6 +1346,10 @@ You can call overloaded functions with different number of arguments.
 
   GET /rpc/rental_duration?customer_id=232&from_date=2018-07-01 HTTP/1.1
 
+.. important::
+
+  Overloaded functions with the same argument names but different types are not supported.
+
 .. _binary_output:
 
 Binary Output
diff --git a/releases/upcoming.rst b/releases/upcoming.rst
index 398370f05..cfebed6d2 100644
--- a/releases/upcoming.rst
+++ b/releases/upcoming.rst
@@ -37,3 +37,7 @@ Changed
 * Docker images are now optimized to be built from the scratch image. This reduces the compressed image size from over 30 MB to about 4 MB.
   For more details, see `Docker image built with Nix <https://github.com/PostgREST/postgrest/tree/main/nix/tools/docker#user-content-docker-image-built-with-nix>`_.
   |br| -- `@monacoremo <https://github.com/monacoremo>`_
+
+* Improved error message for a not found RPC on a stale schema (see :ref:`stale_function_signature`) and for the unsupported case of
+  overloaded functions with the same argument names but different types.
+  |br| -- `@laurenceisla <https://github.com/laurenceisla>`_
diff --git a/schema_cache.rst b/schema_cache.rst
index a57cf83f3..9e994c75e 100644
--- a/schema_cache.rst
+++ b/schema_cache.rst
@@ -53,6 +53,8 @@ But instead, you get an error message that looks like this:
 
 As you can see, PostgREST couldn't find the newly created foreign key in the schema cache. See the section :ref:`schema_reloading` to solve this issue.
 
+.. _stale_function_signature:
+
 Stale Function Signature
 ~~~~~~~~~~~~~~~~~~~~~~~~
 
@@ -71,16 +73,14 @@ Then, you make this request:
 
   GET /rpc/plus_one?num=1 HTTP/1.1
 
-On a stale schema, PostgREST will assume :code:`text` as the default type for the function argument ``num``. Thus, the response you get is:
+Next, PostgREST tries to find the function on the stale schema to no avail:
 
 .. code-block:: json
 
- {
-  "hint":"No function matches the given name and argument types. You might need to add explicit type casts.",
-  "details":null,
-  "code":"42883",
-  "message":"function test.plus_one(num => text) does not exist"
- }
+  {
+    "hint": "If a new function was created in the database with this name and arguments, try reloading the schema cache.",
+    "message": "Could not find the api.plus_one(num) function in the schema cache"
+  }
 
 See the section :ref:`schema_reloading` to solve this issue.
 

From a7cddd8ecebcb74e8c3a2026eda4fa121f68c830 Mon Sep 17 00:00:00 2001
From: laurenceisla <lau.isla.c@gmail.com>
Date: Wed, 21 Jul 2021 14:40:34 -0500
Subject: [PATCH 405/652] Add log-level config option

---
 configuration.rst     | 24 +++++++++++++++++++++++-
 releases/upcoming.rst |  6 ++++++
 2 files changed, 29 insertions(+), 1 deletion(-)

diff --git a/configuration.rst b/configuration.rst
index 960002b67..577d14ae9 100644
--- a/configuration.rst
+++ b/configuration.rst
@@ -43,6 +43,7 @@ server-host              String  !4
 server-port              Int     3000
 server-unix-socket       String
 server-unix-socket-mode  String  660
+log-level                String  error
 openapi-mode             String  follow-privileges
 openapi-server-proxy-uri String
 jwt-secret               String
@@ -176,12 +177,33 @@ server-unix-socket-mode
 
     server-unix-socket-mode = "660"
 
+.. _log-level:
+
+log-level
+---------
+
+  Specifies the level of information to be logged while running PostgREST.
+
+  .. code:: bash
+
+      # Only startup and db connection recovery messages are logged
+      log-level = "crit"
+
+      # All the "crit" level events plus server errors (status 5xx) are logged
+      log-level = "error"
+
+      # All the "error" level events plus request errors (status 4xx) are logged
+      log-level = "warning"
+
+      # All the "warning" level events plus all requests (every status code) are logged
+      log-level  "info"
+
 .. _openapi-mode:
 
 openapi-mode
 ------------
 
-  Specifies how the OpenAPI output should be displayed:
+  Specifies how the OpenAPI output should be displayed.
 
   .. code:: bash
 
diff --git a/releases/upcoming.rst b/releases/upcoming.rst
index cfebed6d2..8de3d97b1 100644
--- a/releases/upcoming.rst
+++ b/releases/upcoming.rst
@@ -19,6 +19,9 @@ Added
 * Config options for showing a full OpenAPI output regardless of the JWT role privileges and for disabling it altogether. See :ref:`openapi-mode`.
   |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
 
+* Config option for logging level. See :ref:`log-level`.
+  |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
+
 * Documentation improvements
 
   + Added the :ref:`OPTIONS requests <options_requests>` section.
@@ -41,3 +44,6 @@ Changed
 * Improved error message for a not found RPC on a stale schema (see :ref:`stale_function_signature`) and for the unsupported case of
   overloaded functions with the same argument names but different types.
   |br| -- `@laurenceisla <https://github.com/laurenceisla>`_
+
+* Modified the default logging level from ``info`` to ``error``. See :ref:`log-level`.
+  |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
\ No newline at end of file

From f5c5094d7dbc8ae6efa787211f3cbb03a90d51a4 Mon Sep 17 00:00:00 2001
From: laurenceisla <lau.isla.c@gmail.com>
Date: Wed, 21 Jul 2021 19:49:41 -0500
Subject: [PATCH 406/652] Add db-tx-end config option

---
 configuration.rst     | 23 ++++++++++++++++++++++-
 postgrest.dict        |  1 +
 releases/upcoming.rst |  3 +++
 3 files changed, 26 insertions(+), 1 deletion(-)

diff --git a/configuration.rst b/configuration.rst
index 577d14ae9..b6b9db3d6 100644
--- a/configuration.rst
+++ b/configuration.rst
@@ -39,6 +39,7 @@ db-anon-role             String                    Y
 db-pool                  Int     10
 db-pool-timeout          Int     10
 db-extra-search-path     String  public
+db-tx-end                String  commit
 server-host              String  !4
 server-port              Int     3000
 server-unix-socket       String
@@ -133,6 +134,27 @@ db-extra-search-path
 
   Multiple schemas can be added in a comma-separated string, e.g. ``public, extensions``.
 
+.. _db-tx-end:
+
+db-tx-end
+---------
+
+  Specifies how to terminate the database transactions.
+
+  .. code:: bash
+
+    # The transaction is always committed
+    db-tx-end = "commit"
+
+    # The transaction is committed unless a "Prefer: tx=rollback" header is sent
+    db-tx-end = "commit-allow-override"
+
+    # The transaction is always rolled back
+    db-tx-end = "rollback"
+
+    # The transaction is rolled back unless a "Prefer: tx=commit" header is sent
+    db-tx-end = "rollback-allow-override"
+
 .. _server-host:
 
 server-host
@@ -317,4 +339,3 @@ raw-media-types
 
    raw-media-types="image/png, text/xml"
 
-
diff --git a/postgrest.dict b/postgrest.dict
index 6530644f4..6d86f45b2 100644
--- a/postgrest.dict
+++ b/postgrest.dict
@@ -142,6 +142,7 @@ todo
 todos
 Tsingson
 tsquery
+tx
 TypeScript
 UI
 ui
diff --git a/releases/upcoming.rst b/releases/upcoming.rst
index 8de3d97b1..4a8f35688 100644
--- a/releases/upcoming.rst
+++ b/releases/upcoming.rst
@@ -22,6 +22,9 @@ Added
 * Config option for logging level. See :ref:`log-level`.
   |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
 
+* Config option for specifying how to terminate the transactions (allowing rollbacks, useful for testing). See :ref:`db-tx-end`.
+  |br| -- `@wolfgangwalther <https://github.com/wolfgangwalther>`_
+
 * Documentation improvements
 
   + Added the :ref:`OPTIONS requests <options_requests>` section.

From 41325fd9ba6856fb45e1232be6e2dbe6a5189c37 Mon Sep 17 00:00:00 2001
From: laurenceisla <lau.isla.c@gmail.com>
Date: Fri, 23 Jul 2021 11:41:47 -0500
Subject: [PATCH 407/652] Add db-prepared-statements config option

---
 admin.rst             | 13 +++++++++++++
 configuration.rst     | 12 ++++++++++++
 postgrest.dict        |  2 ++
 releases/upcoming.rst |  6 ++++++
 4 files changed, 33 insertions(+)

diff --git a/admin.rst b/admin.rst
index 03b7579c1..4a1c7ab26 100644
--- a/admin.rst
+++ b/admin.rst
@@ -120,6 +120,19 @@ The burst argument tells Nginx to start dropping requests if more than five queu
 
 Nginx rate limiting is general and indiscriminate. To rate limit each authenticated request individually you will need to add logic in a :ref:`Custom Validation <custom_validation>` function.
 
+.. _connection_poolers:
+
+Using Connection Poolers
+------------------------
+
+In order to increase performance, PostgREST uses prepared statements by default. However, this setting is incompatible with connection poolers such as PgBouncer working in transaction pooling mode. In this case, you need to set the :ref:`db-prepared-statements` config option to ``false``. On the other hand, session pooling is fully compatible with PostgREST, while statement pooling is not compatible at all.
+
+.. note::
+
+  If prepared statements are enabled, PostgREST will quit after detecting that transaction or statement pooling is being used.
+
+You should also set the ``db-channel-enabled`` config option to ``false``, due to the ``LISTEN`` command not being compatible with transaction pooling, although it should not give any errors if it's left enabled by default.
+
 Debugging
 =========
 
diff --git a/configuration.rst b/configuration.rst
index b6b9db3d6..066b117be 100644
--- a/configuration.rst
+++ b/configuration.rst
@@ -39,6 +39,7 @@ db-anon-role             String                    Y
 db-pool                  Int     10
 db-pool-timeout          Int     10
 db-extra-search-path     String  public
+db-prepared-statements   Boolean True
 db-tx-end                String  commit
 server-host              String  !4
 server-port              Int     3000
@@ -134,6 +135,17 @@ db-extra-search-path
 
   Multiple schemas can be added in a comma-separated string, e.g. ``public, extensions``.
 
+.. _db-prepared-statements:
+
+db-prepared-statements
+----------------------
+
+  Enables or disables prepared statements.
+
+  When disabled, the generated queries will be parameterized (invulnerable to SQL injection) but they will not be prepared (cached in the database session). Not using prepared statements will noticeably decrease performance, so it's recommended to always have this setting enabled.
+
+  You should only set this to ``false`` when using PostgresSQL behind a connection pooler such as PgBouncer working in transaction pooling mode. See :ref:`this section <connection_poolers>` for more information.
+
 .. _db-tx-end:
 
 db-tx-end
diff --git a/postgrest.dict b/postgrest.dict
index 6d86f45b2..7c3644939 100644
--- a/postgrest.dict
+++ b/postgrest.dict
@@ -88,6 +88,7 @@ ov
 passphrase
 Pelletier
 Petr
+PgBouncer
 pgcrypto
 pgjwt
 pgSQL
@@ -95,6 +96,7 @@ phfts
 phraseto
 plainto
 plfts
+poolers
 PostGIS
 PostgreSQL
 PostgreSQL's
diff --git a/releases/upcoming.rst b/releases/upcoming.rst
index 4a8f35688..d35310ceb 100644
--- a/releases/upcoming.rst
+++ b/releases/upcoming.rst
@@ -16,12 +16,18 @@ Added
 * Allow :ref:`s_procs_variadic`.
   |br| -- `@wolfgangwalther <https://github.com/wolfgangwalther>`_
 
+* Allow :ref:`connection_poolers` such as PgBouncer in transaction pooling mode.
+  |br| -- `@laurenceisla <https://github.com/laurenceisla>`_
+
 * Config options for showing a full OpenAPI output regardless of the JWT role privileges and for disabling it altogether. See :ref:`openapi-mode`.
   |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
 
 * Config option for logging level. See :ref:`log-level`.
   |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
 
+* Config option for enabling or disabling prepared statements. See :ref:`db-prepared-statements`.
+  |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
+
 * Config option for specifying how to terminate the transactions (allowing rollbacks, useful for testing). See :ref:`db-tx-end`.
   |br| -- `@wolfgangwalther <https://github.com/wolfgangwalther>`_
 

From 77faf9e9bc6088be3916eac0e1a1e2e1897eb62c Mon Sep 17 00:00:00 2001
From: laurenceisla <lau.isla.c@gmail.com>
Date: Fri, 23 Jul 2021 17:15:30 -0500
Subject: [PATCH 408/652] Add explicit headers-only POST request using Prefer
 header and default the request to minimal

---
 api.rst               | 2 +-
 releases/upcoming.rst | 9 ++++++++-
 2 files changed, 9 insertions(+), 2 deletions(-)

diff --git a/api.rst b/api.rst
index 2dea57d3f..3ec32d019 100644
--- a/api.rst
+++ b/api.rst
@@ -889,7 +889,7 @@ To create a row in a database table post a JSON object whose keys are the names
 
   { "col1": "value1", "col2": "value2" }
 
-If the table has a primary key, the response will include a :code:`Location` header describing where to find the new object. If the table is write-only then constructing the Location header will cause a permissions error. To successfully insert an item to a write-only table you will need to suppress the Location response header by including the request header :code:`Prefer: return=minimal`.
+If the table has a primary key, the response can contain a :code:`Location` header describing where to find the new object by including the header :code:`Prefer: return=headers-only` in the request. Make sure that the table is not write-only, otherwise constructing the :code:`Location` header will cause a permissions error.
 
 On the other end of the spectrum you can get the full created object back in the response to your request by including the header :code:`Prefer: return=representation`. That way you won't have to make another HTTP call to discover properties that may have been filled in on the server side. You can also apply the standard :ref:`v_filter` to these results.
 
diff --git a/releases/upcoming.rst b/releases/upcoming.rst
index d35310ceb..81c3a8a57 100644
--- a/releases/upcoming.rst
+++ b/releases/upcoming.rst
@@ -16,6 +16,9 @@ Added
 * Allow :ref:`s_procs_variadic`.
   |br| -- `@wolfgangwalther <https://github.com/wolfgangwalther>`_
 
+* Allow sending the header ``Prefer: headers-only`` to get a response with a ``Location`` header. See :ref:`insert_update`.
+  |br| -- `@laurenceisla <https://github.com/laurenceisla>`_
+
 * Allow :ref:`connection_poolers` such as PgBouncer in transaction pooling mode.
   |br| -- `@laurenceisla <https://github.com/laurenceisla>`_
 
@@ -55,4 +58,8 @@ Changed
   |br| -- `@laurenceisla <https://github.com/laurenceisla>`_
 
 * Modified the default logging level from ``info`` to ``error``. See :ref:`log-level`.
-  |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
\ No newline at end of file
+  |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
+
+* POST requests for insertions no longer include a ``Location`` header in the response by default and behave the same way as having a
+  ``Prefer: return=minimal`` header in the request. This prevents permissions errors when having a write-only table. See :ref:`insert_update`.
+  |br| -- `@laurenceisla <https://github.com/laurenceisla>`_

From 5cbabe4a2129a48dc3bfc8c8d93e1f09f395da11 Mon Sep 17 00:00:00 2001
From: laurenceisla <lau.isla.c@gmail.com>
Date: Sat, 24 Jul 2021 16:27:02 -0500
Subject: [PATCH 409/652] Add database notification functionality and
 configuration variables for schema reloading

---
 admin.rst             |  2 +-
 configuration.rst     | 18 ++++++++++++++++++
 postgrest.dict        |  1 +
 releases/upcoming.rst |  7 +++++++
 schema_cache.rst      | 42 ++++++++++++++++++++++++++++++------------
 5 files changed, 57 insertions(+), 13 deletions(-)

diff --git a/admin.rst b/admin.rst
index 4a1c7ab26..7b5e5e95f 100644
--- a/admin.rst
+++ b/admin.rst
@@ -131,7 +131,7 @@ In order to increase performance, PostgREST uses prepared statements by default.
 
   If prepared statements are enabled, PostgREST will quit after detecting that transaction or statement pooling is being used.
 
-You should also set the ``db-channel-enabled`` config option to ``false``, due to the ``LISTEN`` command not being compatible with transaction pooling, although it should not give any errors if it's left enabled by default.
+You should also set the :ref:`db-channel-enabled` config option to ``false``, due to the ``LISTEN`` command not being compatible with transaction pooling, although it should not give any errors if it's left enabled by default.
 
 Debugging
 =========
diff --git a/configuration.rst b/configuration.rst
index 066b117be..bed5a750d 100644
--- a/configuration.rst
+++ b/configuration.rst
@@ -39,6 +39,8 @@ db-anon-role             String                    Y
 db-pool                  Int     10
 db-pool-timeout          Int     10
 db-extra-search-path     String  public
+db-channel               String  pgrst
+db-channel-enabled       Boolean True
 db-prepared-statements   Boolean True
 db-tx-end                String  commit
 server-host              String  !4
@@ -135,6 +137,22 @@ db-extra-search-path
 
   Multiple schemas can be added in a comma-separated string, e.g. ``public, extensions``.
 
+.. _db-channel:
+
+db-channel
+----------
+
+  The name of the notification channel that PostgREST uses for :ref:`schema_reloading` and configuration reloading.
+
+.. _db-channel-enabled:
+
+db-channel-enabled
+------------------
+
+  When this is set to :code:`true`, the notification channel specified in :ref:`db-channel` is enabled.
+
+  You should set this to ``false`` when using PostgresSQL behind a connection pooler such as PgBouncer working in transaction pooling mode. See :ref:`this section <connection_poolers>` for more information.
+
 .. _db-prepared-statements:
 
 db-prepared-statements
diff --git a/postgrest.dict b/postgrest.dict
index 7c3644939..bc12f8438 100644
--- a/postgrest.dict
+++ b/postgrest.dict
@@ -91,6 +91,7 @@ Petr
 PgBouncer
 pgcrypto
 pgjwt
+pgrst
 pgSQL
 phfts
 phraseto
diff --git a/releases/upcoming.rst b/releases/upcoming.rst
index 81c3a8a57..cda81ff1b 100644
--- a/releases/upcoming.rst
+++ b/releases/upcoming.rst
@@ -16,6 +16,9 @@ Added
 * Allow :ref:`s_procs_variadic`.
   |br| -- `@wolfgangwalther <https://github.com/wolfgangwalther>`_
 
+* Allow schema cache reloading using PostgreSQL :ref:`NOTIFY <schema_reloading_notify>` command.
+  |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
+
 * Allow sending the header ``Prefer: headers-only`` to get a response with a ``Location`` header. See :ref:`insert_update`.
   |br| -- `@laurenceisla <https://github.com/laurenceisla>`_
 
@@ -53,6 +56,10 @@ Changed
   For more details, see `Docker image built with Nix <https://github.com/PostgREST/postgrest/tree/main/nix/tools/docker#user-content-docker-image-built-with-nix>`_.
   |br| -- `@monacoremo <https://github.com/monacoremo>`_
 
+* The ``pg_listen`` `utility <https://github.com/begriffs/pg_listen>`_ is no longer needed to automatically reload the schema cache
+  and it's replaced entirely by database notifications. See :ref:`schema_reloading_notify`.
+  |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
+
 * Improved error message for a not found RPC on a stale schema (see :ref:`stale_function_signature`) and for the unsupported case of
   overloaded functions with the same argument names but different types.
   |br| -- `@laurenceisla <https://github.com/laurenceisla>`_
diff --git a/schema_cache.rst b/schema_cache.rst
index 9e994c75e..fe684b708 100644
--- a/schema_cache.rst
+++ b/schema_cache.rst
@@ -89,7 +89,7 @@ See the section :ref:`schema_reloading` to solve this issue.
 Schema Cache Reloading
 ----------------------
 
-To refresh the cache without restarting the PostgREST server, send the server process a SIGUSR1 signal:
+To refresh the cache without restarting the PostgREST server, send a SIGUSR1 signal to the server process.
 
 .. code:: bash
 
@@ -106,26 +106,44 @@ To refresh the cache without restarting the PostgREST server, send the server pr
      # or in docker-compose
      docker-compose kill -s SIGUSR1 <service>
 
-The above is the manual way to do it. To automate cache reloads, use a database trigger like this:
+.. _schema_reloading_notify:
+
+Reloading with NOTIFY
+~~~~~~~~~~~~~~~~~~~~~
+
+There are environments where you can't send the SIGUSR1 Unix Signal (like on managed containers in cloud services or on Windows systems). For this reason, PostgREST also allows you to reload its schema cache through PostgreSQL `NOTIFY <https://www.postgresql.org/docs/current/sql-notify.html>`_ as follows:
 
 .. code-block:: postgresql
 
-  CREATE OR REPLACE FUNCTION public.notify_ddl_postgrest()
-    RETURNS event_trigger
-   LANGUAGE plpgsql
+  NOTIFY pgrst, 'reload schema'
+
+The ``"pgrst"`` notification channel is enabled by default. For configuring the channel, see :ref:`db-channel` and :ref:`db-channel-enabled`.
+
+Automatic schema cache reloading
+********************************
+
+You can do automatic schema cache reloading in a pure SQL way with an `event trigger <https://www.postgresql.org/docs/current/event-trigger-definition.html>`_ and ``NOTIFY``.
+
+.. code-block:: postgresql
+
+  -- Create an event trigger function
+  CREATE OR REPLACE FUNCTION public.pgrst_watch() RETURNS event_trigger
+    LANGUAGE plpgsql
     AS $$
   BEGIN
-    NOTIFY ddl_command_end;
+    NOTIFY pgrst;
   END;
   $$;
 
-  CREATE EVENT TRIGGER ddl_postgrest ON ddl_command_end
-     EXECUTE PROCEDURE public.notify_ddl_postgrest();
+  -- This event trigger will fire after every ddl_command_end event
+  CREATE EVENT TRIGGER pgrst_watch
+    ON ddl_command_end
+    EXECUTE PROCEDURE public.pgrst_watch();
 
-Then run the `pg_listen <https://github.com/begriffs/pg_listen>`_ utility to monitor for that event and send a SIGUSR1 when it occurs:
+Now, whenever the ``pgrst_watch`` trigger is fired in the database, PostgREST will automatically reload the schema cache.
 
-.. code-block:: bash
+To disable auto reloading, drop the trigger:
 
-  pg_listen <db-uri> ddl_command_end $(which killall) -SIGUSR1 postgrest
+.. code-block:: postgresql
 
-Now, whenever the structure of the database changes, PostgreSQL will notify the ``ddl_command_end`` channel, which will cause ``pg_listen`` to send PostgREST the signal to reload its cache. Note that pg_listen requires full path to the executable in the example above.
+  DROP EVENT TRIGGER pgrst_watch
\ No newline at end of file

From 2e50a22e641e077444a0619bf836df2baa8676e7 Mon Sep 17 00:00:00 2001
From: laurenceisla <lau.isla.c@gmail.com>
Date: Sat, 24 Jul 2021 18:52:52 -0500
Subject: [PATCH 410/652] Add config reloading with SIGUSR2

---
 configuration.rst     | 34 ++++++++++++++++++++++++++++++++++
 releases/upcoming.rst |  3 +++
 2 files changed, 37 insertions(+)

diff --git a/configuration.rst b/configuration.rst
index bed5a750d..56aee4713 100644
--- a/configuration.rst
+++ b/configuration.rst
@@ -60,6 +60,40 @@ role-claim-key           String  .role
 raw-media-types          String
 ======================== ======= ================= ========
 
+.. _config_reloading:
+
+Configuration Reloading
+-----------------------
+
+To reload the configuration without restarting the PostgREST server send a SIGUSR2 signal to the server process.
+
+.. code:: bash
+
+  killall -SIGUSR2 postgrest
+
+.. note::
+
+   To refresh the cache in docker:
+
+   .. code:: bash
+
+     docker kill -s SIGUSR2 <container>
+
+     # or in docker-compose
+     docker-compose kill -s SIGUSR2 <service>
+
+.. important::
+
+  The following settings will not be reread when reloading the configuration. You will need to restart PostgREST in that case.
+
+    * ``db-uri``
+    * ``db-pool``
+    * ``db-pool-timeout``
+    * ``server-host``
+    * ``server-port``
+    * ``server-unix-socket``
+    * ``server-unix-socket-mode``
+
 .. _db-uri:
 
 db-uri
diff --git a/releases/upcoming.rst b/releases/upcoming.rst
index cda81ff1b..b8cf803e3 100644
--- a/releases/upcoming.rst
+++ b/releases/upcoming.rst
@@ -25,6 +25,9 @@ Added
 * Allow :ref:`connection_poolers` such as PgBouncer in transaction pooling mode.
   |br| -- `@laurenceisla <https://github.com/laurenceisla>`_
 
+* Allow :ref:`config_reloading` by sending a SIGUSR2 signal.
+  |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
+
 * Config options for showing a full OpenAPI output regardless of the JWT role privileges and for disabling it altogether. See :ref:`openapi-mode`.
   |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
 

From 6909e3435e3d0f3599ba345b03d3dbb4c3fbc02f Mon Sep 17 00:00:00 2001
From: Laurence Isla <lau.isla.c@gmail.com>
Date: Sat, 24 Jul 2021 19:42:47 -0500
Subject: [PATCH 411/652] Add changelog for embedding views recursively

---
 api.rst               | 4 ++--
 releases/upcoming.rst | 3 +++
 2 files changed, 5 insertions(+), 2 deletions(-)

diff --git a/api.rst b/api.rst
index 3ec32d019..246d17a20 100644
--- a/api.rst
+++ b/api.rst
@@ -695,8 +695,6 @@ It's also possible to embed `Materialized Views <https://www.postgresql.org/docs
 
   If view definitions change you must refresh PostgREST's schema cache for this to work properly. See the section :ref:`schema_reloading`.
 
-.. _s_proc_embed:
-
 .. _embedding_view_chains:
 
 Embedding Chains of Views
@@ -704,6 +702,8 @@ Embedding Chains of Views
 
 Views can also depend on other views, which in turn depend on the actual source table. For PostgREST to pick up those chains recursively to any depth, all the views must be in the search path, so either in the exposed schema (:ref:`db-schema`) or in one of the schemas set in :ref:`db-extra-search-path`. This does not apply to the source table, which could be in a private schema as well. See :ref:`schema_isolation` for more details.
 
+.. _s_proc_embed:
+
 Embedding on Stored Procedures
 ------------------------------
 
diff --git a/releases/upcoming.rst b/releases/upcoming.rst
index b8cf803e3..e64afadbb 100644
--- a/releases/upcoming.rst
+++ b/releases/upcoming.rst
@@ -16,6 +16,9 @@ Added
 * Allow :ref:`s_procs_variadic`.
   |br| -- `@wolfgangwalther <https://github.com/wolfgangwalther>`_
 
+* Allow :ref:`embedding_view_chains` recursively to any depth.
+  |br| -- `@wolfgangwalther <https://github.com/wolfgangwalther>`_
+
 * Allow schema cache reloading using PostgreSQL :ref:`NOTIFY <schema_reloading_notify>` command.
   |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
 

From c4387ec7dd2964c02fc3f79788e3b9b0fd41d120 Mon Sep 17 00:00:00 2001
From: Duncan Ogilvie <mr.exodia.tpodt@gmail.com>
Date: Mon, 2 Aug 2021 18:45:12 +0200
Subject: [PATCH 412/652] Mention environment variables in the configuration
 section

---
 configuration.rst | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/configuration.rst b/configuration.rst
index 56aee4713..e1138ac18 100644
--- a/configuration.rst
+++ b/configuration.rst
@@ -60,6 +60,8 @@ role-claim-key           String  .role
 raw-media-types          String
 ======================== ======= ================= ========
 
+You can also set these configuration parameters using environment variables. They are capitalized, have a ``PGRST_`` prefix, and use underscores. For example: ``PGRST_DB_URI`` corresponds to ``db-uri``.
+
 .. _config_reloading:
 
 Configuration Reloading

From 20bee2ec34c641f45bfb389580b869953b2bb380 Mon Sep 17 00:00:00 2001
From: Laurence Isla <lau.isla.c@gmail.com>
Date: Mon, 2 Aug 2021 18:33:50 -0500
Subject: [PATCH 413/652] Fix log-level value for status 4xx errors

---
 configuration.rst | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/configuration.rst b/configuration.rst
index e1138ac18..9a3711ef2 100644
--- a/configuration.rst
+++ b/configuration.rst
@@ -281,9 +281,9 @@ log-level
       log-level = "error"
 
       # All the "error" level events plus request errors (status 4xx) are logged
-      log-level = "warning"
+      log-level = "warn"
 
-      # All the "warning" level events plus all requests (every status code) are logged
+      # All the "warn" level events plus all requests (every status code) are logged
       log-level  "info"
 
 .. _openapi-mode:

From 33f0da0509b2c2785a2a30f2189da54def8c062c Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Sun, 25 Jul 2021 23:59:38 -0500
Subject: [PATCH 414/652] Add no downtime schema cache reload

---
 releases/upcoming.rst |  3 +++
 schema_cache.rst      | 19 +++++++++++--------
 2 files changed, 14 insertions(+), 8 deletions(-)

diff --git a/releases/upcoming.rst b/releases/upcoming.rst
index e64afadbb..3ab9d21c6 100644
--- a/releases/upcoming.rst
+++ b/releases/upcoming.rst
@@ -19,6 +19,9 @@ Added
 * Allow :ref:`embedding_view_chains` recursively to any depth.
   |br| -- `@wolfgangwalther <https://github.com/wolfgangwalther>`_
 
+* No downtime when reloading the schema cache. See the note in :ref:`schema_reloading`.
+  |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
+
 * Allow schema cache reloading using PostgreSQL :ref:`NOTIFY <schema_reloading_notify>` command.
   |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
 
diff --git a/schema_cache.rst b/schema_cache.rst
index fe684b708..df8804d21 100644
--- a/schema_cache.rst
+++ b/schema_cache.rst
@@ -95,16 +95,19 @@ To refresh the cache without restarting the PostgREST server, send a SIGUSR1 sig
 
   killall -SIGUSR1 postgrest
 
+
+For docker you can do:
+
+.. code:: bash
+
+  docker kill -s SIGUSR1 <container>
+
+  # or in docker-compose
+  docker-compose kill -s SIGUSR1 <service>
+
 .. note::
 
-   To refresh the cache in docker:
-
-   .. code:: bash
-
-     docker kill -s SIGUSR1 <container>
-
-     # or in docker-compose
-     docker-compose kill -s SIGUSR1 <service>
+   There's no downtime when reloading the schema cache. The reloading will happen on a background thread while requests keep being served.
 
 .. _schema_reloading_notify:
 

From 9543e746ec977001b716bb45ef147958e594a154 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Mon, 26 Jul 2021 01:11:43 -0500
Subject: [PATCH 415/652] Mention log-level=crit/error increase throughput

---
 configuration.rst | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/configuration.rst b/configuration.rst
index 9a3711ef2..5f074ac87 100644
--- a/configuration.rst
+++ b/configuration.rst
@@ -286,6 +286,9 @@ log-level
       # All the "warn" level events plus all requests (every status code) are logged
       log-level  "info"
 
+
+  Because currently there's no buffering for logging, the levels with minimal logging(``crit/error``) will increase throughput.
+
 .. _openapi-mode:
 
 openapi-mode

From 57d725bab6fc935126d43f22be91a71af57e0e76 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Mon, 26 Jul 2021 01:44:34 -0500
Subject: [PATCH 416/652] Add Bearer without capitalization

---
 auth.rst              | 4 ++++
 releases/upcoming.rst | 3 +++
 2 files changed, 7 insertions(+)

diff --git a/auth.rst b/auth.rst
index 3d0c915bf..d00f67368 100644
--- a/auth.rst
+++ b/auth.rst
@@ -143,6 +143,8 @@ In the function you can run arbitrary code to check the request and raise an exc
   END
   $$ LANGUAGE plpgsql;
 
+.. _client_auth:
+
 Client Auth
 ===========
 
@@ -153,6 +155,8 @@ To make an authenticated request the client must include an :code:`Authorization
   GET /foo HTTP/1.1
   Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJyb2xlIjoiamRvZSIsImV4cCI6MTQ3NTUxNjI1MH0.GYDZV3yM0gqvuEtJmfpplLBXSGYnke_Pvnl0tbKAjB4
 
+The ``Bearer`` header value can be used with or without capitalization(``bearer``).
+
 JWT Generation
 --------------
 
diff --git a/releases/upcoming.rst b/releases/upcoming.rst
index 3ab9d21c6..0c1ee72a6 100644
--- a/releases/upcoming.rst
+++ b/releases/upcoming.rst
@@ -34,6 +34,9 @@ Added
 * Allow :ref:`config_reloading` by sending a SIGUSR2 signal.
   |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
 
+* Allow ``Bearer`` with and without capitalization as authentication schema. See :ref:`client_auth`.
+  |br| -- `@wolfgangwalther <https://github.com/wolfgangwalther>`_
+
 * Config options for showing a full OpenAPI output regardless of the JWT role privileges and for disabling it altogether. See :ref:`openapi-mode`.
   |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
 

From 52cdd505617e260056240e4cd38bd1ef4acb9576 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Mon, 26 Jul 2021 02:14:37 -0500
Subject: [PATCH 417/652] Show timestamps for server diagnostic information

---
 admin.rst             | 21 ++++++++++++++++++++-
 releases/upcoming.rst |  3 +++
 2 files changed, 23 insertions(+), 1 deletion(-)

diff --git a/admin.rst b/admin.rst
index 7b5e5e95f..7ab4f1277 100644
--- a/admin.rst
+++ b/admin.rst
@@ -141,10 +141,27 @@ Server Version
 
 When debugging a problem it's important to verify the PostgREST version. At any time you can make a request to the running server and determine exactly which version is deployed. Look for the :code:`Server` HTTP response header, which contains the version number.
 
+.. _pgrst_logging:
+
 Logging
 -------
 
-The PostgREST server logs basic request information to stdout, including the requesting IP address and user agent, the URL requested, and HTTP response status. However this provides limited information for debugging server errors. It's helpful to get full information about both client requests and the corresponding SQL commands executed against the underlying database.
+PostgREST logs basic request information to ``stdout``, including the requesting IP address and user agent, the URL requested, and HTTP response status.
+
+.. code-block::
+
+   127.0.0.1 - - [26/Jul/2021:01:56:38 -0500] "GET /clients HTTP/1.1" 200 - "" "curl/7.64.0"
+   127.0.0.1 - - [26/Jul/2021:01:56:48 -0500] "GET /unexistent HTTP/1.1" 404 - "" "curl/7.64.0"
+
+For diagnostic information about the server itself, PostgREST logs to ``stderr``.
+
+.. code-block::
+
+   12/Jun/2021:17:47:39 -0500: Attempting to connect to the database...
+   12/Jun/2021:17:47:39 -0500: Listening on port 3000
+   12/Jun/2021:17:47:39 -0500: Connection successful
+   12/Jun/2021:17:47:39 -0500: Config re-loaded
+   12/Jun/2021:17:47:40 -0500: Schema cache loaded
 
 .. note::
 
@@ -157,6 +174,8 @@ The PostgREST server logs basic request information to stdout, including the req
 
      # another option is to pipe the output into "logger -t postgrest"
 
+PostgREST logging provides limited information for debugging server errors. It's helpful to get full information about both client requests and the corresponding SQL commands executed against the underlying database.
+
 HTTP Requests
 -------------
 
diff --git a/releases/upcoming.rst b/releases/upcoming.rst
index 0c1ee72a6..7c86d907e 100644
--- a/releases/upcoming.rst
+++ b/releases/upcoming.rst
@@ -37,6 +37,9 @@ Added
 * Allow ``Bearer`` with and without capitalization as authentication schema. See :ref:`client_auth`.
   |br| -- `@wolfgangwalther <https://github.com/wolfgangwalther>`_
 
+* Show timestamps for server diagnostic information. See :ref:`pgrst_logging`.
+  |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
+
 * Config options for showing a full OpenAPI output regardless of the JWT role privileges and for disabling it altogether. See :ref:`openapi-mode`.
   |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
 

From 8d4bc76aab358eb50d6ef61f2d9bceffa6f1e0ae Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Mon, 26 Jul 2021 02:46:44 -0500
Subject: [PATCH 418/652] Add entry for OPTIONS on views

* Also clarify the schema cache page
---
 releases/upcoming.rst | 6 ++++--
 schema_cache.rst      | 5 ++++-
 2 files changed, 8 insertions(+), 3 deletions(-)

diff --git a/releases/upcoming.rst b/releases/upcoming.rst
index 7c86d907e..fde6b391d 100644
--- a/releases/upcoming.rst
+++ b/releases/upcoming.rst
@@ -37,6 +37,9 @@ Added
 * Allow ``Bearer`` with and without capitalization as authentication schema. See :ref:`client_auth`.
   |br| -- `@wolfgangwalther <https://github.com/wolfgangwalther>`_
 
+* Allow OPTIONS to generate HTTP methods based on views triggers. See :ref:`OPTIONS requests <options_requests>`.
+  |br| -- `@laurenceisla <https://github.com/laurenceisla>`_
+
 * Show timestamps for server diagnostic information. See :ref:`pgrst_logging`.
   |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
 
@@ -54,8 +57,7 @@ Added
 
 * Documentation improvements
 
-  + Added the :ref:`OPTIONS requests <options_requests>` section.
-  + Added the :ref:`schema_cache` section.
+  + Added the :ref:`schema_cache` page.
   + Moved the :ref:`schema_reloading` reference from :ref:`admin` to :ref:`schema_cache`
 
 Fixed
diff --git a/schema_cache.rst b/schema_cache.rst
index df8804d21..e03359a8c 100644
--- a/schema_cache.rst
+++ b/schema_cache.rst
@@ -3,7 +3,10 @@
 Schema Cache
 ============
 
-PostgREST caches metadata from the database schema to avoid repeating expensive queries. This metadata is not required by all of the PostgREST features, only the following:
+Certain PostgREST features require metadata from the database schema. Getting this metadata requires executing expensive queries, so
+in order to avoid repeating this work, PostgREST uses a schema cache.
+
+The following features are the ones that require metadata from the schema cache.
 
 +--------------------------------------------+-------------------------------------------------------------------------------+
 | Feature                                    | Required Metadata                                                             |

From 698db875908fdcdeaf407e44d21041d005ecf713 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Mon, 26 Jul 2021 03:01:00 -0500
Subject: [PATCH 419/652] Reorder configuration reloading

---
 configuration.rst | 70 ++++++++++++++++++++++++-----------------------
 1 file changed, 36 insertions(+), 34 deletions(-)

diff --git a/configuration.rst b/configuration.rst
index 5f074ac87..c7355f0fb 100644
--- a/configuration.rst
+++ b/configuration.rst
@@ -9,6 +9,10 @@ PostgREST reads a configuration file to determine information about the database
 
   ./postgrest /path/to/postgrest.conf
 
+.. note::
+
+   Configuration can be reloaded without restarting the server. See :ref:`config_reloading`.
+
 The configuration file must contain a set of key value pairs. At minimum you must include these keys:
 
 .. code::
@@ -62,40 +66,6 @@ raw-media-types          String
 
 You can also set these configuration parameters using environment variables. They are capitalized, have a ``PGRST_`` prefix, and use underscores. For example: ``PGRST_DB_URI`` corresponds to ``db-uri``.
 
-.. _config_reloading:
-
-Configuration Reloading
------------------------
-
-To reload the configuration without restarting the PostgREST server send a SIGUSR2 signal to the server process.
-
-.. code:: bash
-
-  killall -SIGUSR2 postgrest
-
-.. note::
-
-   To refresh the cache in docker:
-
-   .. code:: bash
-
-     docker kill -s SIGUSR2 <container>
-
-     # or in docker-compose
-     docker-compose kill -s SIGUSR2 <service>
-
-.. important::
-
-  The following settings will not be reread when reloading the configuration. You will need to restart PostgREST in that case.
-
-    * ``db-uri``
-    * ``db-pool``
-    * ``db-pool-timeout``
-    * ``server-host``
-    * ``server-port``
-    * ``server-unix-socket``
-    * ``server-unix-socket-mode``
-
 .. _db-uri:
 
 db-uri
@@ -408,3 +378,35 @@ raw-media-types
 
    raw-media-types="image/png, text/xml"
 
+.. _config_reloading:
+
+Configuration Reloading
+=======================
+
+To reload the configuration without restarting the PostgREST server send a SIGUSR2 signal to the server process.
+
+.. code:: bash
+
+  killall -SIGUSR2 postgrest
+
+To refresh the cache in docker:
+
+.. code:: bash
+
+  docker kill -s SIGUSR2 <container>
+
+  # or in docker-compose
+  docker-compose kill -s SIGUSR2 <service>
+
+.. important::
+
+  The following settings will not be reread when reloading the configuration. You will need to restart PostgREST in that case.
+
+    * ``db-uri``
+    * ``db-pool``
+    * ``db-pool-timeout``
+    * ``server-host``
+    * ``server-port``
+    * ``server-unix-socket``
+    * ``server-unix-socket-mode``
+

From 254a2f7f36efd687561593773d06b00c34d14e2e Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Mon, 26 Jul 2021 04:39:02 -0500
Subject: [PATCH 420/652] Add in-db config plus reloading

---
 configuration.rst     | 63 ++++++++++++++++++++++++++++++++++++++-----
 releases/upcoming.rst |  3 +++
 schema_cache.rst      |  2 +-
 3 files changed, 60 insertions(+), 8 deletions(-)

diff --git a/configuration.rst b/configuration.rst
index c7355f0fb..d70869d5a 100644
--- a/configuration.rst
+++ b/configuration.rst
@@ -47,6 +47,7 @@ db-channel               String  pgrst
 db-channel-enabled       Boolean True
 db-prepared-statements   Boolean True
 db-tx-end                String  commit
+db-config                Boolean True
 server-host              String  !4
 server-port              Int     3000
 server-unix-socket       String
@@ -191,6 +192,13 @@ db-tx-end
     # The transaction is rolled back unless a "Prefer: tx=commit" header is sent
     db-tx-end = "rollback-allow-override"
 
+.. _db-config:
+
+db-config
+---------
+
+   Enables the in-database configuration.
+
 .. _server-host:
 
 server-host
@@ -402,11 +410,52 @@ To refresh the cache in docker:
 
   The following settings will not be reread when reloading the configuration. You will need to restart PostgREST in that case.
 
-    * ``db-uri``
-    * ``db-pool``
-    * ``db-pool-timeout``
-    * ``server-host``
-    * ``server-port``
-    * ``server-unix-socket``
-    * ``server-unix-socket-mode``
+    * :ref:`db-uri`
+    * :ref:`db-pool`
+    * :ref:`db-pool-timeout`
+    * :ref:`server-host`
+    * :ref:`server-port`
+    * :ref:`server-unix-socket`
+    * :ref:`server-unix-socket-mode`
 
+.. _in_db_config:
+
+In-Database Configuration
+=========================
+
+By adding settings to the **authenticator** role (see :ref:`roles`), you can make the database the single source of truth for PostgREST's configuration.
+This is enabled by :ref:`db-config`.
+
+For example, you can configure :ref:`db-schema` and :ref:`jwt-secret` like this:
+
+.. code:: postgresql
+
+   ALTER ROLE authenticator SET pgrst.db_schema = "tenant1, tenant2, tenant3"
+   ALTER ROLE authenticator SET pgrst.jwt_secret = "REALLYREALLYREALLYREALLYVERYSAFE"
+
+.. important::
+
+   For altering a role in this way, you need a SUPERUSER. You might not be able to use this configuration mode on cloud-hosted databases.
+
+Note that underscores(``_``) need to be used instead of dashes(``-``) for the options when the configuration is inside the database.
+
+When using both the configuration file and the in-database configuration, the latter takes precedence.
+
+.. danger::
+
+  If direct connections to the database are allowed, then it's not safe to use the in-db configuration for storing the :ref:`jwt-secret`.
+  The settings of every role are PUBLIC - they can be viewed by any user that queries the ``pg_catalog.pg_db_role_setting`` table.
+  In this case you should keep the :ref:`jwt-secret` in the configuration file or as environment variables.
+
+.. _in_db_config_reloading:
+
+In-database configuration reloading
+-----------------------------------
+
+To reload the in-database configuration from within the database, you can use a NOTIFY command.
+
+.. code:: postgresql
+
+   NOTIFY pgrst, 'reload config'
+
+The ``"pgrst"`` notification channel is enabled by default. For configuring the channel, see :ref:`db-channel` and :ref:`db-channel-enabled`.
diff --git a/releases/upcoming.rst b/releases/upcoming.rst
index fde6b391d..81f8bbe88 100644
--- a/releases/upcoming.rst
+++ b/releases/upcoming.rst
@@ -37,6 +37,9 @@ Added
 * Allow ``Bearer`` with and without capitalization as authentication schema. See :ref:`client_auth`.
   |br| -- `@wolfgangwalther <https://github.com/wolfgangwalther>`_
 
+* :ref:`in_db_config` that can be :ref:`reloaded with NOTIFY <in_db_config_reloading>`.
+  |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
+
 * Allow OPTIONS to generate HTTP methods based on views triggers. See :ref:`OPTIONS requests <options_requests>`.
   |br| -- `@laurenceisla <https://github.com/laurenceisla>`_
 
diff --git a/schema_cache.rst b/schema_cache.rst
index e03359a8c..04c8c84bf 100644
--- a/schema_cache.rst
+++ b/schema_cache.rst
@@ -92,7 +92,7 @@ See the section :ref:`schema_reloading` to solve this issue.
 Schema Cache Reloading
 ----------------------
 
-To refresh the cache without restarting the PostgREST server, send a SIGUSR1 signal to the server process.
+To reload the cache without restarting the PostgREST server, send a SIGUSR1 signal to the server process.
 
 .. code:: bash
 

From 12f8852183f2cb0120d2abd992d98a6bed1d2926 Mon Sep 17 00:00:00 2001
From: Laurence Isla <lau.isla.c@gmail.com>
Date: Mon, 26 Jul 2021 20:32:03 -0500
Subject: [PATCH 421/652] Add fixes and sponsors to upcoming page

---
 postgrest.dict        |   9 ++++
 releases/upcoming.rst | 107 ++++++++++++++++++++++++++++++++++++++++--
 2 files changed, 113 insertions(+), 3 deletions(-)

diff --git a/postgrest.dict b/postgrest.dict
index bc12f8438..a5c4b6d0c 100644
--- a/postgrest.dict
+++ b/postgrest.dict
@@ -46,6 +46,7 @@ HMAC
 Homebrew
 HTTPS
 HV
+Ibarluzea
 ilike
 io
 IP
@@ -55,6 +56,7 @@ JSON
 JWK
 JWT
 jwt
+JWTs
 Kinesis
 Kofi
 localhost
@@ -86,6 +88,7 @@ openapi
 ORM
 ov
 passphrase
+Pawel
 Pelletier
 Petr
 PgBouncer
@@ -111,18 +114,22 @@ RabbitMQ
 Rafaj
 RDS
 reallyreallyreallyreallyverysafe
+Rechkemmer
 Redux
 refactor
+Remo
 requester's
 RESTful
 RestSharp
 RLS
 RPC
 RSA
+Saleeba
 savepoint
 schemas
 Sencha
 Serverless
+Severin
 SHA
 signup
 SIGUSR
@@ -136,6 +143,7 @@ SSL
 stateful
 stdout
 Stolarz
+subselect
 SuperAgent
 syslog
 systemd
@@ -146,6 +154,7 @@ todos
 Tsingson
 tsquery
 tx
+Tyll
 TypeScript
 UI
 ui
diff --git a/releases/upcoming.rst b/releases/upcoming.rst
index 81f8bbe88..21c84dc30 100644
--- a/releases/upcoming.rst
+++ b/releases/upcoming.rst
@@ -2,10 +2,10 @@
 
    <br />
 
-Upcoming
-========
+v8.0.0
+======
 
-These are changes yet unreleased. If you'd like to try them out before a new official release, you can use a `nightly release <https://github.com/PostgREST/postgrest/releases/tag/nightly>`_.
+You can download this release at the `PostgREST v8.0.0 release page <https://github.com/PostgREST/postgrest/releases/tag/v8.0.0>`_.
 
 Added
 -----
@@ -69,6 +69,60 @@ Fixed
 * Fix showing UNKNOWN on ``postgrest --help`` invocation.
   |br| -- `@monacoremo <https://github.com/monacoremo>`_
 
+* Removed single column restriction to allow composite foreign keys in join tables.
+  |br| -- `@goteguru <https://github.com/goteguru>`_
+
+* Fix how the PostgREST version is shown in the help text when the .git directory is not available.
+  |br| -- `@monacoremo <https://github.com/monacoremo>`_
+
+* Fix expired JWTs starting an empty transaction on the db.
+  |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
+
+* Fix location header for POST request with ``select=`` without PK.
+  |br| -- `@wolfgangwalther <https://github.com/wolfgangwalther>`_
+
+* Fix error messages on connection failure for localized PostgreSQL on Windows.
+  |br| -- `@wolfgangwalther <https://github.com/wolfgangwalther>`_
+
+* Fix ``application/octet-stream`` appending ``charset=utf-8``.
+  |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
+
+* Fix overloading of functions with unnamed arguments.
+  |br| -- `@wolfgangwalther <https://github.com/wolfgangwalther>`_
+
+* Return ``405 Method not Allowed`` for GET of volatile RPC instead of 500.
+  |br| -- `@wolfgangwalther <https://github.com/wolfgangwalther>`_
+
+* Fix RPC return type handling and embedding for domains with composite base type.
+  |br| -- `@wolfgangwalther <https://github.com/wolfgangwalther>`_
+
+* Fix embedding through views that have COALESCE with subselect.
+  |br| -- `@wolfgangwalther <https://github.com/wolfgangwalther>`_
+
+* Fix parsing of boolean config values for Docker environment variables, now it accepts double quoted truth values ``("true", "false")`` and numbers ``("1", "0")``.
+  |br| -- `@wolfgangwalther <https://github.com/wolfgangwalther>`_
+
+* Fix using ``app.settings.xxx`` config options in Docker, now they can be used as ``PGRST_APP_SETTINGS_xxx``.
+  |br| -- `@wolfgangwalther <https://github.com/wolfgangwalther>`_
+
+* Fix panic when attempting to run with unix socket on non-unix host and properly close unix domain socket on exit.
+  |br| -- `@monacoremo <https://github.com/monacoremo>`_
+
+* Disregard internal junction (in non-exposed schema) when embedding.
+  |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
+
+* Fix requests for overloaded functions from HTML forms to no longer hang.
+  |br| -- `@laurenceisla <https://github.com/laurenceisla>`_
+
+* Add a hint and clarification to the no relationship found error.
+  |br| -- `@laurenceisla <https://github.com/laurenceisla>`_
+
+* Show comprehensive error when an RPC is not found in a stale schema cache.
+  |br| -- `@laurenceisla <https://github.com/laurenceisla>`_
+
+* Fix Location headers in headers only representation for null PK inserts on views.
+  |br| -- `@laurenceisla <https://github.com/laurenceisla>`_
+
 Changed
 -------
 
@@ -90,3 +144,50 @@ Changed
 * POST requests for insertions no longer include a ``Location`` header in the response by default and behave the same way as having a
   ``Prefer: return=minimal`` header in the request. This prevents permissions errors when having a write-only table. See :ref:`insert_update`.
   |br| -- `@laurenceisla <https://github.com/laurenceisla>`_
+
+Thanks
+------
+
+.. image:: ../_static/cybertec-new.png
+  :target: https://www.cybertec-postgresql.com/en/?utm_source=postgrest.org&utm_medium=referral&utm_campaign=postgrest
+  :width:  13em
+
+.. image:: ../_static/2ndquadrant.png
+  :target: https://www.2ndquadrant.com/en/?utm_campaign=External%20Websites&utm_source=PostgREST&utm_medium=Logo
+  :width:  13em
+
+.. image:: ../_static/retool.png
+  :target: https://retool.com/?utm_source=sponsor&utm_campaign=postgrest
+  :width:  13em
+
+.. image:: ../_static/gnuhost.png
+  :target: https://gnuhost.eu/?utm_source=sponsor&utm_campaign=postgrest
+  :width:  13em
+
+.. image:: ../_static/supabase.png
+  :target: https://supabase.io/?utm_source=postgrest%20backers&utm_medium=open%20source%20partner&utm_campaign=postgrest%20backers%20github&utm_term=homepage
+  :width:  13em
+
+.. image:: ../_static/oblivious.jpg
+  :target: https://oblivious.ai/?utm_source=sponsor&utm_campaign=postgrest
+  :width:  13em
+
+* `Daniel Babiak <https://github.com/dbabiak>`_
+* Evans Fernandes
+* `Jan Sommer <https://github.com/nerfpops>`_
+* `Franz Gusenbauer <https://www.igutech.at/>`_
+* Tsingson Qin
+* Michel Pelletier
+* Jay Hannah
+* Robert Stolarz
+* Nicholas DiBiase
+* Christopher Reid
+* Nathan Bouscal
+* Daniel Rafaj
+* David Fenko
+* Remo Rechkemmer
+* Severin Ibarluzea
+* Tom Saleeba
+* Pawel Tyll
+
+If you like to join them please consider `supporting PostgREST development <https://github.com/PostgREST/postgrest#user-content-supporting-development>`_.

From 21e54aacda4ed3c77cde9f1f4d07e4d2a6e1eab2 Mon Sep 17 00:00:00 2001
From: Laurence Isla <lau.isla.c@gmail.com>
Date: Mon, 26 Jul 2021 20:44:47 -0500
Subject: [PATCH 422/652] Rename upcoming to v8.0.0

---
 index.rst                             | 1 +
 releases/{upcoming.rst => v8.0.0.rst} | 0
 2 files changed, 1 insertion(+)
 rename releases/{upcoming.rst => v8.0.0.rst} (100%)

diff --git a/index.rst b/index.rst
index 795d1a479..eb23a7c92 100644
--- a/index.rst
+++ b/index.rst
@@ -217,6 +217,7 @@ Release Notes
 Here we'll include the most relevant changes so you can migrate to newer versions easily.
 You can see the full changelog of each release in the `PostgREST repository <https://github.com/PostgREST/postgrest/releases>`_.
 
+- :doc:`releases/v8.0.0`
 - :doc:`releases/v7.0.0`
 - :doc:`releases/v6.0.2`
 - :doc:`releases/v5.2.0`
diff --git a/releases/upcoming.rst b/releases/v8.0.0.rst
similarity index 100%
rename from releases/upcoming.rst
rename to releases/v8.0.0.rst

From 37c2a8aa7b5c60a2fd1b54ca47ab7c7c4581e065 Mon Sep 17 00:00:00 2001
From: Laurence Isla <lau.isla.c@gmail.com>
Date: Tue, 27 Jul 2021 14:04:30 -0500
Subject: [PATCH 423/652] Make the landing page wider

* Add max-width for logos only

* Fix margin on sponsor images and add reference to the PostgREST team

* Fix information on v8 changelog
---
 _static/css/custom.css | 12 ++++++----
 index.rst              | 52 +++++++++++++++++++++++-------------------
 releases/v8.0.0.rst    | 45 ++++++++++++++++++------------------
 3 files changed, 59 insertions(+), 50 deletions(-)

diff --git a/_static/css/custom.css b/_static/css/custom.css
index cd52bc848..6015b6d48 100644
--- a/_static/css/custom.css
+++ b/_static/css/custom.css
@@ -2,10 +2,6 @@
   max-width: initial;
 }
 
-#postgrest-documentation {
-  max-width: 800px;
-}
-
 #postgrest-documentation > h1 {
   display: none;
 }
@@ -53,3 +49,11 @@ div.line-block {
 #thanks ul{
   text-align: left;
 }
+
+.image-container {
+  max-width: 800px;
+  display: block;
+  margin-left: auto;
+  margin-right: auto;
+  margin-bottom: 24px;
+}
diff --git a/index.rst b/index.rst
index eb23a7c92..af28331db 100644
--- a/index.rst
+++ b/index.rst
@@ -3,7 +3,9 @@
 PostgREST Documentation
 =======================
 
-.. figure:: _static/logo.png
+.. container:: image-container
+
+  .. figure:: _static/logo.png
 
 .. image:: https://img.shields.io/github/stars/postgrest/postgrest.svg?style=social
   :target: https://github.com/PostgREST/postgrest
@@ -30,36 +32,38 @@ PostgREST is a standalone web server that turns your PostgreSQL database directl
 Sponsors
 --------
 
-.. image:: _static/cybertec-new.png
-  :target: https://www.cybertec-postgresql.com/en/?utm_source=postgrest.org&utm_medium=referral&utm_campaign=postgrest
-  :width:  13em
+.. container:: image-container
 
-.. image:: _static/2ndquadrant.png
-  :target: https://www.2ndquadrant.com/en/?utm_campaign=External%20Websites&utm_source=PostgREST&utm_medium=Logo
-  :width:  13em
+  .. image:: _static/cybertec-new.png
+    :target: https://www.cybertec-postgresql.com/en/?utm_source=postgrest.org&utm_medium=referral&utm_campaign=postgrest
+    :width:  13em
 
-.. image:: _static/retool.png
-  :target: https://retool.com/?utm_source=sponsor&utm_campaign=postgrest
-  :width:  13em
+  .. image:: _static/2ndquadrant.png
+    :target: https://www.2ndquadrant.com/en/?utm_campaign=External%20Websites&utm_source=PostgREST&utm_medium=Logo
+    :width:  13em
 
-.. image:: _static/gnuhost.png
-  :target: https://gnuhost.eu/?utm_source=sponsor&utm_campaign=postgrest
-  :width:  13em
+  .. image:: _static/retool.png
+    :target: https://retool.com/?utm_source=sponsor&utm_campaign=postgrest
+    :width:  13em
 
-.. image:: _static/supabase.png
-  :target: https://supabase.io/?utm_source=postgrest%20backers&utm_medium=open%20source%20partner&utm_campaign=postgrest%20backers%20github&utm_term=homepage
-  :width:  13em
+  .. image:: _static/gnuhost.png
+    :target: https://gnuhost.eu/?utm_source=sponsor&utm_campaign=postgrest
+    :width:  13em
 
-.. image:: _static/oblivious.jpg
-  :target: https://oblivious.ai/?utm_source=sponsor&utm_campaign=postgrest
-  :width:  13em
+  .. image:: _static/supabase.png
+    :target: https://supabase.io/?utm_source=postgrest%20backers&utm_medium=open%20source%20partner&utm_campaign=postgrest%20backers%20github&utm_term=homepage
+    :width:  13em
 
-.. The static/empty.png(created with `convert -size 320x95 xc:#fcfcfc empty.png`) is an ugly workaround
-   to create space and center the logos. It's not easy to layout with restructuredText.
+  .. image:: _static/oblivious.jpg
+    :target: https://oblivious.ai/?utm_source=sponsor&utm_campaign=postgrest
+    :width:  13em
 
-.. .. image:: _static/empty.png
-     :target: #sponsors
-     :width:  13em
+  .. The static/empty.png(created with `convert -size 320x95 xc:#fcfcfc empty.png`) is an ugly workaround
+     to create space and center the logos. It's not easy to layout with restructuredText.
+
+  .. .. image:: _static/empty.png
+       :target: #sponsors
+       :width:  13em
 
 |
 
diff --git a/releases/v8.0.0.rst b/releases/v8.0.0.rst
index 21c84dc30..55c5ad373 100644
--- a/releases/v8.0.0.rst
+++ b/releases/v8.0.0.rst
@@ -72,9 +72,6 @@ Fixed
 * Removed single column restriction to allow composite foreign keys in join tables.
   |br| -- `@goteguru <https://github.com/goteguru>`_
 
-* Fix how the PostgREST version is shown in the help text when the .git directory is not available.
-  |br| -- `@monacoremo <https://github.com/monacoremo>`_
-
 * Fix expired JWTs starting an empty transaction on the db.
   |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
 
@@ -148,34 +145,38 @@ Changed
 Thanks
 ------
 
-.. image:: ../_static/cybertec-new.png
-  :target: https://www.cybertec-postgresql.com/en/?utm_source=postgrest.org&utm_medium=referral&utm_campaign=postgrest
-  :width:  13em
+Big thanks from the `PostgREST team <https://github.com/orgs/PostgREST/people>`_ to our sponsors!
 
-.. image:: ../_static/2ndquadrant.png
-  :target: https://www.2ndquadrant.com/en/?utm_campaign=External%20Websites&utm_source=PostgREST&utm_medium=Logo
-  :width:  13em
+.. container:: image-container
 
-.. image:: ../_static/retool.png
-  :target: https://retool.com/?utm_source=sponsor&utm_campaign=postgrest
-  :width:  13em
+  .. image:: ../_static/cybertec-new.png
+    :target: https://www.cybertec-postgresql.com/en/?utm_source=postgrest.org&utm_medium=referral&utm_campaign=postgrest
+    :width:  13em
 
-.. image:: ../_static/gnuhost.png
-  :target: https://gnuhost.eu/?utm_source=sponsor&utm_campaign=postgrest
-  :width:  13em
+  .. image:: ../_static/2ndquadrant.png
+    :target: https://www.2ndquadrant.com/en/?utm_campaign=External%20Websites&utm_source=PostgREST&utm_medium=Logo
+    :width:  13em
 
-.. image:: ../_static/supabase.png
-  :target: https://supabase.io/?utm_source=postgrest%20backers&utm_medium=open%20source%20partner&utm_campaign=postgrest%20backers%20github&utm_term=homepage
-  :width:  13em
+  .. image:: ../_static/retool.png
+    :target: https://retool.com/?utm_source=sponsor&utm_campaign=postgrest
+    :width:  13em
 
-.. image:: ../_static/oblivious.jpg
-  :target: https://oblivious.ai/?utm_source=sponsor&utm_campaign=postgrest
-  :width:  13em
+  .. image:: ../_static/gnuhost.png
+    :target: https://gnuhost.eu/?utm_source=sponsor&utm_campaign=postgrest
+    :width:  13em
+
+  .. image:: ../_static/supabase.png
+    :target: https://supabase.io/?utm_source=postgrest%20backers&utm_medium=open%20source%20partner&utm_campaign=postgrest%20backers%20github&utm_term=homepage
+    :width:  13em
+
+  .. image:: ../_static/oblivious.jpg
+    :target: https://oblivious.ai/?utm_source=sponsor&utm_campaign=postgrest
+    :width:  13em
 
-* `Daniel Babiak <https://github.com/dbabiak>`_
 * Evans Fernandes
 * `Jan Sommer <https://github.com/nerfpops>`_
 * `Franz Gusenbauer <https://www.igutech.at/>`_
+* `Daniel Babiak <https://github.com/dbabiak>`_
 * Tsingson Qin
 * Michel Pelletier
 * Jay Hannah

From 42656edfd9af94a9f2391dba61a743fe8e36c4cf Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Mon, 9 Aug 2021 14:04:47 -0500
Subject: [PATCH 424/652] Improve wording in some sections

---
 api.rst             |  9 +++++----
 configuration.rst   |  4 ++--
 index.rst           |  2 +-
 releases/v8.0.0.rst |  2 +-
 schema_cache.rst    | 28 ++++++++++++----------------
 5 files changed, 21 insertions(+), 24 deletions(-)

diff --git a/api.rst b/api.rst
index 246d17a20..ecc34487b 100644
--- a/api.rst
+++ b/api.rst
@@ -1459,7 +1459,7 @@ OPTIONS
 
 You can verify which HTTP methods are allowed on endpoints for tables and views by using an OPTIONS request. These methods are allowed depending on what operations *can* be done on the table or view, not on the database permissions assigned to them.
 
-For example, the OPTIONS request and response for a table named ``people`` are:
+For a table named ``people``, OPTIONS would show:
 
 .. code-block:: http
 
@@ -1470,7 +1470,7 @@ For example, the OPTIONS request and response for a table named ``people`` are:
   HTTP/1.1 200 OK
   Allow: OPTIONS,GET,HEAD,POST,PUT,PATCH,DELETE
 
-For a view, the methods are determined by the presence of INSTEAD OF TRIGGERS:
+For a view, the methods are determined by the presence of INSTEAD OF TRIGGERS.
 
 .. table::
    :widths: auto
@@ -1493,9 +1493,10 @@ For a view, the methods are determined by the presence of INSTEAD OF TRIGGERS:
    | `auto-updatable views <https://www.postgresql.org/docs/current/sql-createview.html#SQL-CREATEVIEW-UPDATABLE-VIEWS>`_ |
    +--------------------+-------------------------------------------------------------------------------------------------+
 
-For database function endpoints, OPTIONS requests are not supported.
+For functions, OPTIONS requests are not supported.
 
 .. important::
+
   Whenever you add or remove tables or views, or modify a view's INSTEAD OF TRIGGERS on the database, you must refresh PostgREST's schema cache for OPTIONS requests to work properly. See the section :ref:`schema_reloading`.
 
 CORS
@@ -1583,7 +1584,7 @@ PostgREST reads the ``response.headers`` SQL variable to add extra headers to th
 
   SELECT set_config('response.headers',
     '[{"Cache-Control": "public"}, {"Cache-Control": "max-age=259200"}]', true);
-  
+
 Notice that the variable should be set to an *array* of single-key objects rather than a single multiple-key object. This is because headers such as ``Cache-Control`` or ``Set-Cookie`` need to be repeated when setting multiple values and an object would not allow the repeated key.
 
 .. note::
diff --git a/configuration.rst b/configuration.rst
index d70869d5a..b758b1265 100644
--- a/configuration.rst
+++ b/configuration.rst
@@ -391,13 +391,13 @@ raw-media-types
 Configuration Reloading
 =======================
 
-To reload the configuration without restarting the PostgREST server send a SIGUSR2 signal to the server process.
+To reload the configuration without restarting the PostgREST server, send a SIGUSR2 signal to the server process.
 
 .. code:: bash
 
   killall -SIGUSR2 postgrest
 
-To refresh the cache in docker:
+To reload the config in docker:
 
 .. code:: bash
 
diff --git a/index.rst b/index.rst
index af28331db..8b2033ea1 100644
--- a/index.rst
+++ b/index.rst
@@ -234,7 +234,7 @@ Here are some companies that use PostgREST in production.
 * `Catarse <https://www.catarse.me>`_
 * `Datrium <https://www.datrium.com>`_
 * `Drip Depot <https://www.dripdepot.com>`_
-* `eGull <https://www.egull.co>`_
+* `eGull <http://www.egull.co>`_
 * `Image-charts <https://www.image-charts.com>`_
 * `Moat <https://moat.com>`_
 * `MotionDynamic - Fast highly dynamic video generation at scale <https://motiondynamic.tech>`_
diff --git a/releases/v8.0.0.rst b/releases/v8.0.0.rst
index 55c5ad373..b79098df1 100644
--- a/releases/v8.0.0.rst
+++ b/releases/v8.0.0.rst
@@ -22,7 +22,7 @@ Added
 * No downtime when reloading the schema cache. See the note in :ref:`schema_reloading`.
   |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
 
-* Allow schema cache reloading using PostgreSQL :ref:`NOTIFY <schema_reloading_notify>` command.
+* Allow schema cache reloading using PostgreSQL :ref:`NOTIFY <schema_reloading_notify>` command. This enables :ref:`auto_schema_reloading`.
   |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
 
 * Allow sending the header ``Prefer: headers-only`` to get a response with a ``Location`` header. See :ref:`insert_update`.
diff --git a/schema_cache.rst b/schema_cache.rst
index 04c8c84bf..e4c265703 100644
--- a/schema_cache.rst
+++ b/schema_cache.rst
@@ -6,8 +6,6 @@ Schema Cache
 Certain PostgREST features require metadata from the database schema. Getting this metadata requires executing expensive queries, so
 in order to avoid repeating this work, PostgREST uses a schema cache.
 
-The following features are the ones that require metadata from the schema cache.
-
 +--------------------------------------------+-------------------------------------------------------------------------------+
 | Feature                                    | Required Metadata                                                             |
 +============================================+===============================================================================+
@@ -34,18 +32,18 @@ The Stale Schema Cache
 
 When you make changes on the metadata mentioned above, the schema cache will turn stale on a running PostgREST. Future requests that use the above features will need the :ref:`schema cache to be reloaded <schema_reloading>`; otherwise, you'll get an error instead of the expected result.
 
-For instance, let's see what would happen if you have a stale schema for foreign key relationships and function signature:
+For instance, let's see what would happen if you have a stale schema cache for foreign key relationships and function signatures.
 
 Stale Foreign Key Relationships
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
-Suppose you add a ``cities`` table to your database. This table has a foreign key referencing an existing ``countries`` table. Then, you make a request to get the ``cities`` and their belonging ``countries``:
+Suppose you add a ``cities`` table to your database and define a foreign key that references an existing ``countries`` table. Then, you make a request to get the ``cities`` and their belonging ``countries``.
 
 .. code-block:: http
 
   GET /cities?select=name,country:countries(id,name) HTTP/1.1
 
-But instead, you get an error message that looks like this:
+The result will be an error:
 
 .. code-block:: json
 
@@ -54,14 +52,14 @@ But instead, you get an error message that looks like this:
     "message": "Could not find a relationship between cities and countries in the schema cache"
   }
 
-As you can see, PostgREST couldn't find the newly created foreign key in the schema cache. See the section :ref:`schema_reloading` to solve this issue.
+As you can see, PostgREST couldn't find the newly created foreign key in the schema cache. See :ref:`schema_reloading` and :ref:`auto_schema_reloading` to solve this issue.
 
 .. _stale_function_signature:
 
 Stale Function Signature
 ~~~~~~~~~~~~~~~~~~~~~~~~
 
-Suppose you create the following function while PostgREST is running:
+The same issue will occur on newly created functions on a running PostgREST.
 
 .. code-block:: plpgsql
 
@@ -70,14 +68,10 @@ Suppose you create the following function while PostgREST is running:
    SELECT num + 1;
   $$ LANGUAGE SQL IMMUTABLE;
 
-Then, you make this request:
-
 .. code-block:: http
 
   GET /rpc/plus_one?num=1 HTTP/1.1
 
-Next, PostgREST tries to find the function on the stale schema to no avail:
-
 .. code-block:: json
 
   {
@@ -85,7 +79,7 @@ Next, PostgREST tries to find the function on the stale schema to no avail:
     "message": "Could not find the api.plus_one(num) function in the schema cache"
   }
 
-See the section :ref:`schema_reloading` to solve this issue.
+Here, PostgREST tries to find the function on the stale schema to no avail. See :ref:`schema_reloading` and :ref:`auto_schema_reloading` to solve this issue.
 
 .. _schema_reloading:
 
@@ -125,10 +119,12 @@ There are environments where you can't send the SIGUSR1 Unix Signal (like on man
 
 The ``"pgrst"`` notification channel is enabled by default. For configuring the channel, see :ref:`db-channel` and :ref:`db-channel-enabled`.
 
-Automatic schema cache reloading
-********************************
+.. _auto_schema_reloading:
 
-You can do automatic schema cache reloading in a pure SQL way with an `event trigger <https://www.postgresql.org/docs/current/event-trigger-definition.html>`_ and ``NOTIFY``.
+Automatic Schema Cache Reloading
+--------------------------------
+
+You can do automatic schema cache reloading in a pure SQL way and forget about stale schema cache errors with an `event trigger <https://www.postgresql.org/docs/current/event-trigger-definition.html>`_ and ``NOTIFY``.
 
 .. code-block:: postgresql
 
@@ -137,7 +133,7 @@ You can do automatic schema cache reloading in a pure SQL way with an `event tri
     LANGUAGE plpgsql
     AS $$
   BEGIN
-    NOTIFY pgrst;
+    NOTIFY pgrst, 'reload schema';
   END;
   $$;
 

From 98350e294148a2a066e47fbd12522f4ded7e9f4b Mon Sep 17 00:00:00 2001
From: laurenceisla <lau.isla.c@gmail.com>
Date: Mon, 9 Aug 2021 18:06:45 -0500
Subject: [PATCH 425/652] Update docker configuration

---
 configuration.rst   | 20 ++++++++++----------
 install.rst         | 15 ++-------------
 releases/v8.0.0.rst |  3 +++
 3 files changed, 15 insertions(+), 23 deletions(-)

diff --git a/configuration.rst b/configuration.rst
index b758b1265..5b6a28e37 100644
--- a/configuration.rst
+++ b/configuration.rst
@@ -32,6 +32,8 @@ The configuration file must contain a set of key value pairs. At minimum you mus
 
 The user specified in the db-uri is also known as the authenticator role. For more information about the anonymous vs authenticator roles see the :ref:`roles`.
 
+.. _config_full_list:
+
 Here is the full list of configuration parameters.
 
 ======================== ======= ================= ========
@@ -65,8 +67,6 @@ role-claim-key           String  .role
 raw-media-types          String
 ======================== ======= ================= ========
 
-You can also set these configuration parameters using environment variables. They are capitalized, have a ``PGRST_`` prefix, and use underscores. For example: ``PGRST_DB_URI`` corresponds to ``db-uri``.
-
 .. _db-uri:
 
 db-uri
@@ -386,6 +386,13 @@ raw-media-types
 
    raw-media-types="image/png, text/xml"
 
+.. _env_variables_config:
+
+Environment Variables
+=====================
+
+You can also set these :ref:`configuration parameters <config_full_list>` using environment variables. They are capitalized, have a ``PGRST_`` prefix, and use underscores. For example: ``PGRST_DB_URI`` corresponds to ``db-uri`` and ``PGRST_APP_SETTINGS_*`` to ``app.settings.*``.
+
 .. _config_reloading:
 
 Configuration Reloading
@@ -397,14 +404,7 @@ To reload the configuration without restarting the PostgREST server, send a SIGU
 
   killall -SIGUSR2 postgrest
 
-To reload the config in docker:
-
-.. code:: bash
-
-  docker kill -s SIGUSR2 <container>
-
-  # or in docker-compose
-  docker-compose kill -s SIGUSR2 <service>
+This method does not reload :ref:`env_variables_config` and it will not work for reloading a Docker container configuration. In these cases, you need to restart the PostgREST server or use :ref:`in_db_config` as an alternative.
 
 .. important::
 
diff --git a/install.rst b/install.rst
index 6a682d8fd..afe50b6e8 100644
--- a/install.rst
+++ b/install.rst
@@ -99,19 +99,7 @@ You can get the `official PostgREST Docker image <https://hub.docker.com/r/postg
 
   docker pull postgrest/postgrest
 
-The image consults an internal ``/etc/postgrest.conf`` file. To customize this file you can either mount a replacement configuration file into the container, or use environment variables. The environment variables will be interpolated into the default config file.
-
-These variables match the options shown in our :ref:`configuration` section, except they are capitalized, have a ``PGRST_`` prefix, and use underscores. To get a list of the available environment variables, run this:
-
-.. code-block:: bash
-
-  docker inspect -f "{{.Config.Env}}" postgrest/postgrest
-
-You can also specify a config file by mounting the file to the container:
-
-.. code-block:: bash
-
-  docker run -v /absolute/path/to/config:/etc/postgrest.conf postgrest/postgrest
+To configure the container image, use :ref:`env_variables_config`.
 
 There are two ways to run the PostgREST container: with an existing external database, or through docker-compose.
 
@@ -125,6 +113,7 @@ The first way to run PostgREST in Docker is to connect it to an existing native
   # Run the server
   docker run --rm --net=host -p 3000:3000 \
     -e PGRST_DB_URI="postgres://postgres@localhost/postgres" \
+    -e PGRST_DB_SCHEMA="public" \
     -e PGRST_DB_ANON_ROLE="postgres" \
     postgrest/postgrest
 
diff --git a/releases/v8.0.0.rst b/releases/v8.0.0.rst
index b79098df1..a47dfa503 100644
--- a/releases/v8.0.0.rst
+++ b/releases/v8.0.0.rst
@@ -127,6 +127,9 @@ Changed
   For more details, see `Docker image built with Nix <https://github.com/PostgREST/postgrest/tree/main/nix/tools/docker#user-content-docker-image-built-with-nix>`_.
   |br| -- `@monacoremo <https://github.com/monacoremo>`_
 
+* The Docker image no longer has an internal ``/etc/postgrest.conf`` file, you must use :ref:`env_variables_config` to configure it.
+  |br| -- `@wolfgangwalther <https://github.com/wolfgangwalther>`_
+
 * The ``pg_listen`` `utility <https://github.com/begriffs/pg_listen>`_ is no longer needed to automatically reload the schema cache
   and it's replaced entirely by database notifications. See :ref:`schema_reloading_notify`.
   |br| -- `@steve-chavez <https://github.com/steve-chavez>`_

From ff30d4d417547e4542aadcefac4e0d3d0c3bdb22 Mon Sep 17 00:00:00 2001
From: Laurence Isla <lau.isla.c@gmail.com>
Date: Mon, 9 Aug 2021 18:29:37 -0500
Subject: [PATCH 426/652] Update config.py version/release

---
 conf.py | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/conf.py b/conf.py
index 71122e56a..6e017e016 100644
--- a/conf.py
+++ b/conf.py
@@ -54,9 +54,9 @@ copyright = u'2017, ' + author
 # built documents.
 #
 # The short X.Y version.
-version = u'7.0'
+version = u'8.0'
 # The full version, including alpha/beta/rc tags.
-release = u'7.0.1'
+release = u'8.0.0'
 
 # The language for content autogenerated by Sphinx. Refer to documentation
 # for a list of supported languages.

From fcabf4012b0c650a563b826ba8260322b51c2daa Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Tue, 10 Aug 2021 00:26:24 -0500
Subject: [PATCH 427/652] Reorder release notes for v8.0

---
 admin.rst           |  4 +--
 configuration.rst   |  6 ++---
 releases/v8.0.0.rst | 64 ++++++++++++++++++++-------------------------
 schema_cache.rst    |  6 ++---
 4 files changed, 37 insertions(+), 43 deletions(-)

diff --git a/admin.rst b/admin.rst
index 7ab4f1277..dca785cbf 100644
--- a/admin.rst
+++ b/admin.rst
@@ -148,14 +148,14 @@ Logging
 
 PostgREST logs basic request information to ``stdout``, including the requesting IP address and user agent, the URL requested, and HTTP response status.
 
-.. code-block::
+.. code-block:: none
 
    127.0.0.1 - - [26/Jul/2021:01:56:38 -0500] "GET /clients HTTP/1.1" 200 - "" "curl/7.64.0"
    127.0.0.1 - - [26/Jul/2021:01:56:48 -0500] "GET /unexistent HTTP/1.1" 404 - "" "curl/7.64.0"
 
 For diagnostic information about the server itself, PostgREST logs to ``stderr``.
 
-.. code-block::
+.. code-block:: none
 
    12/Jun/2021:17:47:39 -0500: Attempting to connect to the database...
    12/Jun/2021:17:47:39 -0500: Listening on port 3000
diff --git a/configuration.rst b/configuration.rst
index 5b6a28e37..04dd236db 100644
--- a/configuration.rst
+++ b/configuration.rst
@@ -404,7 +404,7 @@ To reload the configuration without restarting the PostgREST server, send a SIGU
 
   killall -SIGUSR2 postgrest
 
-This method does not reload :ref:`env_variables_config` and it will not work for reloading a Docker container configuration. In these cases, you need to restart the PostgREST server or use :ref:`in_db_config` as an alternative.
+This method does not reload :ref:`env_variables_config` and it will not work for reloading a Docker container configuration. In these cases, you need to restart the PostgREST server or use the :ref:`in_db_config` as an alternative.
 
 .. important::
 
@@ -433,12 +433,12 @@ For example, you can configure :ref:`db-schema` and :ref:`jwt-secret` like this:
    ALTER ROLE authenticator SET pgrst.db_schema = "tenant1, tenant2, tenant3"
    ALTER ROLE authenticator SET pgrst.jwt_secret = "REALLYREALLYREALLYREALLYVERYSAFE"
 
+Note that underscores(``_``) need to be used instead of dashes(``-``) for the in-database config options.
+
 .. important::
 
    For altering a role in this way, you need a SUPERUSER. You might not be able to use this configuration mode on cloud-hosted databases.
 
-Note that underscores(``_``) need to be used instead of dashes(``-``) for the options when the configuration is inside the database.
-
 When using both the configuration file and the in-database configuration, the latter takes precedence.
 
 .. danger::
diff --git a/releases/v8.0.0.rst b/releases/v8.0.0.rst
index a47dfa503..6b55c98e1 100644
--- a/releases/v8.0.0.rst
+++ b/releases/v8.0.0.rst
@@ -19,7 +19,7 @@ Added
 * Allow :ref:`embedding_view_chains` recursively to any depth.
   |br| -- `@wolfgangwalther <https://github.com/wolfgangwalther>`_
 
-* No downtime when reloading the schema cache. See the note in :ref:`schema_reloading`.
+* No downtime when reloading the schema cache. See :ref:`schema_reloading`.
   |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
 
 * Allow schema cache reloading using PostgreSQL :ref:`NOTIFY <schema_reloading_notify>` command. This enables :ref:`auto_schema_reloading`.
@@ -63,6 +63,34 @@ Added
   + Added the :ref:`schema_cache` page.
   + Moved the :ref:`schema_reloading` reference from :ref:`admin` to :ref:`schema_cache`
 
+Changed
+-------
+
+* Docker images are now optimized to be built from the scratch image. This reduces the compressed image size from over 30 MB to about 4 MB.
+  For more details, see `Docker image built with Nix <https://github.com/PostgREST/postgrest/tree/main/nix/tools/docker#user-content-docker-image-built-with-nix>`_.
+  |br| -- `@monacoremo <https://github.com/monacoremo>`_
+
+* The Docker image no longer has an internal ``/etc/postgrest.conf`` file, you must use :ref:`env_variables_config` to configure it.
+  |br| -- `@wolfgangwalther <https://github.com/wolfgangwalther>`_
+
+* The ``pg_listen`` `utility <https://github.com/begriffs/pg_listen>`_ is no longer needed to automatically reload the schema cache
+  and it's replaced entirely by database notifications. See :ref:`auto_schema_reloading`.
+  |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
+
+* POST requests for insertions no longer include a ``Location`` header in the response by default and behave the same way as having a
+  ``Prefer: return=minimal`` header in the request. This prevents permissions errors when having a write-only table. See :ref:`insert_update`.
+  |br| -- `@laurenceisla <https://github.com/laurenceisla>`_
+
+* Modified the default logging level from ``info`` to ``error``. See :ref:`log-level`.
+  |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
+
+* Changed the error message for a not found RPC on a stale schema (see :ref:`stale_function_signature`) and for the unsupported case of
+  overloaded functions with the same argument names but different types.
+  |br| -- `@laurenceisla <https://github.com/laurenceisla>`_
+
+* Changed the error message for the no relationship found error. See :ref:`stale_fk_relationships`.
+  |br| -- `@laurenceisla <https://github.com/laurenceisla>`_
+
 Fixed
 -----
 
@@ -111,40 +139,6 @@ Fixed
 * Fix requests for overloaded functions from HTML forms to no longer hang.
   |br| -- `@laurenceisla <https://github.com/laurenceisla>`_
 
-* Add a hint and clarification to the no relationship found error.
-  |br| -- `@laurenceisla <https://github.com/laurenceisla>`_
-
-* Show comprehensive error when an RPC is not found in a stale schema cache.
-  |br| -- `@laurenceisla <https://github.com/laurenceisla>`_
-
-* Fix Location headers in headers only representation for null PK inserts on views.
-  |br| -- `@laurenceisla <https://github.com/laurenceisla>`_
-
-Changed
--------
-
-* Docker images are now optimized to be built from the scratch image. This reduces the compressed image size from over 30 MB to about 4 MB.
-  For more details, see `Docker image built with Nix <https://github.com/PostgREST/postgrest/tree/main/nix/tools/docker#user-content-docker-image-built-with-nix>`_.
-  |br| -- `@monacoremo <https://github.com/monacoremo>`_
-
-* The Docker image no longer has an internal ``/etc/postgrest.conf`` file, you must use :ref:`env_variables_config` to configure it.
-  |br| -- `@wolfgangwalther <https://github.com/wolfgangwalther>`_
-
-* The ``pg_listen`` `utility <https://github.com/begriffs/pg_listen>`_ is no longer needed to automatically reload the schema cache
-  and it's replaced entirely by database notifications. See :ref:`schema_reloading_notify`.
-  |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
-
-* Improved error message for a not found RPC on a stale schema (see :ref:`stale_function_signature`) and for the unsupported case of
-  overloaded functions with the same argument names but different types.
-  |br| -- `@laurenceisla <https://github.com/laurenceisla>`_
-
-* Modified the default logging level from ``info`` to ``error``. See :ref:`log-level`.
-  |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
-
-* POST requests for insertions no longer include a ``Location`` header in the response by default and behave the same way as having a
-  ``Prefer: return=minimal`` header in the request. This prevents permissions errors when having a write-only table. See :ref:`insert_update`.
-  |br| -- `@laurenceisla <https://github.com/laurenceisla>`_
-
 Thanks
 ------
 
diff --git a/schema_cache.rst b/schema_cache.rst
index e4c265703..f6fd23749 100644
--- a/schema_cache.rst
+++ b/schema_cache.rst
@@ -34,6 +34,8 @@ When you make changes on the metadata mentioned above, the schema cache will tur
 
 For instance, let's see what would happen if you have a stale schema cache for foreign key relationships and function signatures.
 
+.. _stale_fk_relationships:
+
 Stale Foreign Key Relationships
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
@@ -102,9 +104,7 @@ For docker you can do:
   # or in docker-compose
   docker-compose kill -s SIGUSR1 <service>
 
-.. note::
-
-   There's no downtime when reloading the schema cache. The reloading will happen on a background thread while requests keep being served.
+There's no downtime when reloading the schema cache. The reloading will happen on a background thread while requests keep being served.
 
 .. _schema_reloading_notify:
 

From 0d23be7731ca7e601f9540e937871591c56fd04f Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Tue, 10 Aug 2021 00:37:25 -0500
Subject: [PATCH 428/652] Fix logging blocks not showing on RTD

---
 admin.rst | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/admin.rst b/admin.rst
index dca785cbf..908514a9b 100644
--- a/admin.rst
+++ b/admin.rst
@@ -148,14 +148,14 @@ Logging
 
 PostgREST logs basic request information to ``stdout``, including the requesting IP address and user agent, the URL requested, and HTTP response status.
 
-.. code-block:: none
+.. code::
 
    127.0.0.1 - - [26/Jul/2021:01:56:38 -0500] "GET /clients HTTP/1.1" 200 - "" "curl/7.64.0"
    127.0.0.1 - - [26/Jul/2021:01:56:48 -0500] "GET /unexistent HTTP/1.1" 404 - "" "curl/7.64.0"
 
 For diagnostic information about the server itself, PostgREST logs to ``stderr``.
 
-.. code-block:: none
+.. code::
 
    12/Jun/2021:17:47:39 -0500: Attempting to connect to the database...
    12/Jun/2021:17:47:39 -0500: Listening on port 3000

From f7108e8612808afb372827bd0d43c4e7d778c470 Mon Sep 17 00:00:00 2001
From: Laurence Isla <lau.isla.c@gmail.com>
Date: Wed, 11 Aug 2021 20:13:04 -0500
Subject: [PATCH 429/652] Add example apps to ecosystem

Add postgres-postgrest-cloudflared-example and svelte-postgrest-template
---
 ecosystem.rst  | 2 ++
 postgrest.dict | 3 +++
 2 files changed, 5 insertions(+)

diff --git a/ecosystem.rst b/ecosystem.rst
index c89d12820..2d96671d1 100644
--- a/ecosystem.rst
+++ b/ecosystem.rst
@@ -32,6 +32,7 @@ Example Apps
 * `pgrst-dev-setup <https://github.com/Qu4tro/pgrst-dev-setup>`_ - docker-compose and tmuxp setup for experimentation.
 * `postgrest-demo <https://github.com/SMRxT/postgrest-demo>`_ - multi-tenant logging system
 * `postgrest-example <https://github.com/begriffs/postgrest-example>`_ - sqitch versioning for API
+* `postgres-postgrest-cloudflared-example <https://github.com/cloudflare/postgres-postgrest-cloudflared-example>`_ - docker-compose setup exposing PostgREST using cloudfared
 * `postgrest-sessions-example <https://github.com/monacoremo/postgrest-sessions-example>`_ - example for cookie-based sessions
 * `postgrest-starter-kit <https://github.com/subzerocloud/postgrest-starter-kit>`_ - boilerplate for new project
 * `postgrest-translation-proxy <https://github.com/NikolayS/postgrest-translation-proxy>`_ - calling to external translation service
@@ -39,6 +40,7 @@ Example Apps
 * `postgrest-vercel <https://github.com/seveibar/postgrest-vercel>`_ - run PostgREST on Vercel (Serverless/AWS Lambda)
 * `PostgrestSkeleton <https://github.com/Recmo/PostgrestSkeleton>`_ - Docker Compose, PostgREST, Nginx and Auth0
 * `PostGUI <https://github.com/priyank-purohit/PostGUI>`_ - React Material UI admin panel
+* `svelte-postgrest-template <https://github.com/guyromm/svelte-postgrest-template>`_ - Svelte/SvelteKit, PostgREST, EveryLayout and social auth
 
 .. _eco_external_notification:
 
diff --git a/postgrest.dict b/postgrest.dict
index a5c4b6d0c..202a9505f 100644
--- a/postgrest.dict
+++ b/postgrest.dict
@@ -16,6 +16,7 @@ cd
 centric
 changelog
 ClojureScript
+cloudfared
 config
 CORS
 cryptographically
@@ -27,6 +28,7 @@ disjoined
 dockerize
 DoS
 eq
+EveryLayout
 Fenko
 Fernandes
 filename
@@ -145,6 +147,7 @@ stdout
 Stolarz
 subselect
 SuperAgent
+SvelteKit
 syslog
 systemd
 Tcl

From 91152ebad0625abc1acf7a0b65937e936b0c2f86 Mon Sep 17 00:00:00 2001
From: laurenceisla <lau.isla.c@gmail.com>
Date: Fri, 13 Aug 2021 17:31:01 -0500
Subject: [PATCH 430/652] Add partitioned tables in the schema cache

---
 api.rst               | 43 +++++++++++++++++++++++++++++++++++++++++++
 index.rst             |  4 +++-
 releases/upcoming.rst | 12 ++++++++++++
 3 files changed, 58 insertions(+), 1 deletion(-)
 create mode 100644 releases/upcoming.rst

diff --git a/api.rst b/api.rst
index ecc34487b..ea7b7bd63 100644
--- a/api.rst
+++ b/api.rst
@@ -651,6 +651,49 @@ Embedded resources can be aliased and filters can be applied on these aliases:
 
   GET /films?select=*,90_comps:competitions(name),91_comps:competitions(name)&90_comps.year=eq.1990&91_comps.year=eq.1991 HTTP/1.1
 
+.. _embedding_partitioned_tables:
+
+Embedding Partitioned Tables
+----------------------------
+
+Embedding can also be done between `partitioned tables <https://www.postgresql.org/docs/current/ddl-partitioning.html>`_ and other tables.
+
+For example, let's create the ``box_office`` partitioned table that has the gross daily revenue of a film:
+
+.. code-block:: postgres
+
+  CREATE TABLE box_office (
+    bo_date DATE NOT NULL,
+    film_id INT REFERENCES test.films NOT NULL,
+    gross_revenue DECIMAL(12,2) NOT NULL,
+    PRIMARY KEY (bo_date, film_id)
+  ) PARTITION BY RANGE (bo_date);
+
+  -- Let's also create partitions for each month of 2021
+
+  CREATE TABLE box_office_2021_01 PARTITION OF test.box_office
+  FOR VALUES FROM ('2021-01-01') TO ('2021-01-31');
+
+  CREATE TABLE box_office_2021_02 PARTITION OF test.box_office
+  FOR VALUES FROM ('2021-02-01') TO ('2021-02-28');
+
+  -- and so until december 2021
+
+Since it contains the ``films_id`` foreign key, it is possible to embed ``box_office`` and ``films``:
+
+.. code-block:: http
+
+  GET /box_office?select=bo_date,gross_revenue,films(title)&gross_revenue=gte.1000000 HTTP/1.1
+
+Embedding is also possible between ``box_office`` partitions and the ``films`` table:
+
+.. code-block:: http
+
+  GET /films?select=title,box_office_2021_02(bo_date,gross_revenue)&rating=gt.8 HTTP/1.1
+
+.. note::
+  Partitioned tables can reference other tables since PostgreSQL 11 but can only be referenced from any other table since PostgreSQL 12.
+
 .. _embedding_views:
 
 Embedding Views
diff --git a/index.rst b/index.rst
index 8b2033ea1..65522fad5 100644
--- a/index.rst
+++ b/index.rst
@@ -234,7 +234,6 @@ Here are some companies that use PostgREST in production.
 * `Catarse <https://www.catarse.me>`_
 * `Datrium <https://www.datrium.com>`_
 * `Drip Depot <https://www.dripdepot.com>`_
-* `eGull <http://www.egull.co>`_
 * `Image-charts <https://www.image-charts.com>`_
 * `Moat <https://moat.com>`_
 * `MotionDynamic - Fast highly dynamic video generation at scale <https://motiondynamic.tech>`_
@@ -246,6 +245,9 @@ Here are some companies that use PostgREST in production.
 * `Sompani <https://www.sompani.com>`_
 * `Supabase <https://supabase.io>`_
 
+.. Certs are failing
+  * `eGull <http://www.egull.co>`_
+
 Testimonials
 ------------
 
diff --git a/releases/upcoming.rst b/releases/upcoming.rst
new file mode 100644
index 000000000..5d9e0e437
--- /dev/null
+++ b/releases/upcoming.rst
@@ -0,0 +1,12 @@
+.. |br| raw:: html
+
+   <br />
+
+Upcoming
+========
+
+Added
+-----
+
+* Allow :ref:`embedding <embedding_partitioned_tables>`, UPSERT, INSERT with Location response, OPTIONS request and OpenAPI support for partitioned tables.
+  |br| -- `@laurenceisla <https://github.com/laurenceisla>`_

From 34958e723a57a0ea323a3a4f0501640263bf530d Mon Sep 17 00:00:00 2001
From: laurenceisla <lau.isla.c@gmail.com>
Date: Fri, 3 Sep 2021 13:04:21 -0500
Subject: [PATCH 431/652] Add link and explanation to download the latest
 unreleased builds

---
 ecosystem.rst         | 1 -
 releases/upcoming.rst | 3 +++
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/ecosystem.rst b/ecosystem.rst
index 2d96671d1..1104ac7a5 100644
--- a/ecosystem.rst
+++ b/ecosystem.rst
@@ -93,7 +93,6 @@ Client-Side Libraries
 * `postgrest-js <https://github.com/supabase/postgrest-js>`_ - TypeScript/JavaScript
 * `postgrest-kt <https://github.com/supabase/postgrest-kt>`_ - Kotlin
 * `postgrest-py <https://github.com/supabase/postgrest-py>`_ - Python
-* `postgrest-pyclient <https://github.com/datrium/postgrest-pyclient>`_ - Python
 * `postgrest-request <https://github.com/lewisjared/postgrest-request>`_ - JS, SuperAgent
 * `postgrest-rs <https://github.com/supabase/postgrest-rs>`_ - Rust
 * `postgrest-sharp-client <https://github.com/thejettdurham/postgrest-sharp-client>`_ (needs maintainer) - C#, RestSharp
diff --git a/releases/upcoming.rst b/releases/upcoming.rst
index 5d9e0e437..120b69eaa 100644
--- a/releases/upcoming.rst
+++ b/releases/upcoming.rst
@@ -5,6 +5,9 @@
 Upcoming
 ========
 
+These are changes yet unreleased. If you'd like to try them out before a new official release, access `the list of CI runs <https://github.com/PostgREST/postgrest/actions/workflows/ci.yaml?query=branch%3Amain>`_
+and select the newest commit, then download the build from the Artifacts section at the bottom of the page (you'll need a GitHub account to download it).
+
 Added
 -----
 

From aea3b24b31f0cb8ed78a767a4a5e9140377a74cd Mon Sep 17 00:00:00 2001
From: Laurence Isla <lau.isla.c@gmail.com>
Date: Fri, 3 Sep 2021 15:05:15 -0500
Subject: [PATCH 432/652] Update example apps

---
 ecosystem.rst  | 15 ++++++++++-----
 postgrest.dict |  3 +++
 2 files changed, 13 insertions(+), 5 deletions(-)

diff --git a/ecosystem.rst b/ecosystem.rst
index 1104ac7a5..dd096a534 100644
--- a/ecosystem.rst
+++ b/ecosystem.rst
@@ -19,27 +19,32 @@ Community Tutorials
 Example Apps
 ------------
 
-* `blogdemo <https://github.com/ruslantalpa/blogdemo>`_ - blog api demo in a vagrant image
 * `chronicle <https://github.com/srid/chronicle>`_ - tracking a tree of personal memories
+* `cloudgov-demo-postgrest <https://github.com/GSA/cloudgov-demo-postgrest>`_ - demo for a federally-compliant REST API on cloud.gov
+* `code-du-travail-backoffice <https://github.com/SocialGouv/code-du-travail-backoffice>`_ - data administration portal for the official French Labor Code and Agreements
+* `compose-postgrest <https://github.com/mattddowney/compose-postgrest>`_ - docker-compose setup with Nginx and HTML example
+* `delibrium-postgrest <https://gitlab.com/delibrium/delibrium-postgrest/>`_ - example school API and front-end in Vue.js
 * `elm-workshop <https://github.com/diogob/elm-workshop>`_ - building a simple database query UI
 * `ember-postgrest-dynamic-ui <https://github.com/benoror/ember-postgrest-dynamic-ui>`_ - generating Ember forms to edit data
+* `ETH-transactions-storage <https://github.com/Adamant-im/ETH-transactions-storage>`_ - indexer for Ethereum to get transaction list by ETH address
 * `ext-postgrest-crud <https://github.com/timwis/ext-postgrest-crud>`_ - browser-based spreadsheet
 * `general <https://github.com/PierreRochard/general>`_ - example auth back-end
-* `goodfilm <https://github.com/tyrchen/goodfilm>`_ - example film api
+* `goodfilm <https://github.com/tyrchen/goodfilm>`_ - example film API
+* `guild-operators <https://github.com/cardano-community/guild-operators/tree/alpha/files/grest>`_ - example queries and functions that the Cardano Community uses for their Guild Operators' Repository
 * `handsontable-postgrest <https://github.com/timwis/handsontable-postgrest>`_ - an excel-like database table editor
 * `heritage-near-me <https://github.com/CodeforAustralia/heritage-near-me>`_ - Elm and PostgREST with PostGIS
 * `ng-admin-postgrest <https://github.com/marmelab/ng-admin-postgrest>`_ - automatic database admin panel
 * `pgrst-dev-setup <https://github.com/Qu4tro/pgrst-dev-setup>`_ - docker-compose and tmuxp setup for experimentation.
+* `postgres-postgrest-cloudflared-example <https://github.com/cloudflare/postgres-postgrest-cloudflared-example>`_ - docker-compose setup exposing PostgREST using cloudfared
 * `postgrest-demo <https://github.com/SMRxT/postgrest-demo>`_ - multi-tenant logging system
 * `postgrest-example <https://github.com/begriffs/postgrest-example>`_ - sqitch versioning for API
-* `postgres-postgrest-cloudflared-example <https://github.com/cloudflare/postgres-postgrest-cloudflared-example>`_ - docker-compose setup exposing PostgREST using cloudfared
 * `postgrest-sessions-example <https://github.com/monacoremo/postgrest-sessions-example>`_ - example for cookie-based sessions
-* `postgrest-starter-kit <https://github.com/subzerocloud/postgrest-starter-kit>`_ - boilerplate for new project
 * `postgrest-translation-proxy <https://github.com/NikolayS/postgrest-translation-proxy>`_ - calling to external translation service
 * `postgrest-ui <https://github.com/tatut/postgrest-ui>`_ - ClojureScript UI components for PostgREST
 * `postgrest-vercel <https://github.com/seveibar/postgrest-vercel>`_ - run PostgREST on Vercel (Serverless/AWS Lambda)
 * `PostgrestSkeleton <https://github.com/Recmo/PostgrestSkeleton>`_ - Docker Compose, PostgREST, Nginx and Auth0
 * `PostGUI <https://github.com/priyank-purohit/PostGUI>`_ - React Material UI admin panel
+* `prospector <https://github.com/sfcta/prospector>`_ - data warehouse and visualization platform
 * `svelte-postgrest-template <https://github.com/guyromm/svelte-postgrest-template>`_ - Svelte/SvelteKit, PostgREST, EveryLayout and social auth
 
 .. _eco_external_notification:
@@ -71,7 +76,7 @@ Extensions
 * `postgrest-node <https://github.com/seveibar/postgrest-node>`_ - Run a PostgREST server in Node.js via npm module
 * `postgrest-oauth <https://github.com/nblumoe/postgrest-oauth>`_ - OAuth2 WAI middleware
 * `postgrest-oauth/api <https://github.com/postgrest-oauth/api>`_ - OAuth2 server
-* `PostgREST-writeAPI <https://github.com/ppKrauss/PostgREST-writeAPI>`_ - generate nginx rewrite rules to fit an OpenAPI spec
+* `PostgREST-writeAPI <https://github.com/ppKrauss/PostgREST-writeAPI>`_ - generate Nginx rewrite rules to fit an OpenAPI spec
 * `spas <https://github.com/srid/spas>`_ - allow file uploads and basic auth
 
 .. _clientside_libraries:
diff --git a/postgrest.dict b/postgrest.dict
index 202a9505f..227ccefcb 100644
--- a/postgrest.dict
+++ b/postgrest.dict
@@ -12,6 +12,7 @@ balancer
 Beles
 Bouscal
 buildpack
+Cardano
 cd
 centric
 changelog
@@ -28,6 +29,8 @@ disjoined
 dockerize
 DoS
 eq
+ETH
+Ethereum
 EveryLayout
 Fenko
 Fernandes

From 5fb11e37a3bf5116a183a88fe335d6da49a49ab7 Mon Sep 17 00:00:00 2001
From: Laurence Isla <lau.isla.c@gmail.com>
Date: Wed, 15 Sep 2021 19:45:47 -0500
Subject: [PATCH 433/652] Add devops links to helm charts

---
 ecosystem.rst  | 8 ++++++++
 postgrest.dict | 2 ++
 2 files changed, 10 insertions(+)

diff --git a/ecosystem.rst b/ecosystem.rst
index dd096a534..68d6f5bd9 100644
--- a/ecosystem.rst
+++ b/ecosystem.rst
@@ -47,6 +47,14 @@ Example Apps
 * `prospector <https://github.com/sfcta/prospector>`_ - data warehouse and visualization platform
 * `svelte-postgrest-template <https://github.com/guyromm/svelte-postgrest-template>`_ - Svelte/SvelteKit, PostgREST, EveryLayout and social auth
 
+.. _dev_ops:
+
+DevOps
+------
+
+* `jbkarle/postgrest <https://github.com/jbkarle/postgrest>`_ - helm chart with a demo database for development and test purposes
+* `cloudstark/helm-charts <https://github.com/cloudstark/helm-charts/tree/master/postgrest>`_ - helm chart to deploy PostgREST to a Kubernetes cluster via a Deployment and Service
+
 .. _eco_external_notification:
 
 External Notification
diff --git a/postgrest.dict b/postgrest.dict
index 227ccefcb..cfe0e3bea 100644
--- a/postgrest.dict
+++ b/postgrest.dict
@@ -24,6 +24,7 @@ cryptographically
 CSV
 Daemonizing
 DDL
+DevOps
 DiBiase
 disjoined
 dockerize
@@ -64,6 +65,7 @@ jwt
 JWTs
 Kinesis
 Kofi
+Kubernetes
 localhost
 login
 Logins

From 09ca21d032047086bd6c81545d0d4fabd3450b74 Mon Sep 17 00:00:00 2001
From: Boris Korzun <drtr0jan@yandex.ru>
Date: Thu, 23 Sep 2021 03:52:37 +1000
Subject: [PATCH 434/652] Updated FreeBSD dependencies

Update FreeBSD dependencies as in bsd.default-versions.mk
---
 install.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install.rst b/install.rst
index afe50b6e8..c7592f5e1 100644
--- a/install.rst
+++ b/install.rst
@@ -213,7 +213,7 @@ You can build PostgREST from source with `Stack <https://github.com/commercialha
   =====================  =======================================
   Ubuntu/Debian          libpq-dev, libgmp-dev, zlib1g-dev
   CentOS/Fedora/Red Hat  postgresql-devel, zlib-devel, gmp-devel
-  BSD                    postgresql95-client
+  BSD                    postgresql12-client
   OS X                   libpq, gmp
   =====================  =======================================
 

From a6a088e9f0c157a0baefef81b1725d8850088819 Mon Sep 17 00:00:00 2001
From: laurenceisla <lau.isla.c@gmail.com>
Date: Thu, 30 Sep 2021 17:18:58 -0500
Subject: [PATCH 435/652] Specify external connection poolers

---
 admin.rst           | 8 ++++----
 configuration.rst   | 4 ++--
 releases/v8.0.0.rst | 2 +-
 3 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/admin.rst b/admin.rst
index 908514a9b..68df23052 100644
--- a/admin.rst
+++ b/admin.rst
@@ -120,12 +120,12 @@ The burst argument tells Nginx to start dropping requests if more than five queu
 
 Nginx rate limiting is general and indiscriminate. To rate limit each authenticated request individually you will need to add logic in a :ref:`Custom Validation <custom_validation>` function.
 
-.. _connection_poolers:
+.. _external_connection_poolers:
 
-Using Connection Poolers
-------------------------
+Using External Connection Poolers
+---------------------------------
 
-In order to increase performance, PostgREST uses prepared statements by default. However, this setting is incompatible with connection poolers such as PgBouncer working in transaction pooling mode. In this case, you need to set the :ref:`db-prepared-statements` config option to ``false``. On the other hand, session pooling is fully compatible with PostgREST, while statement pooling is not compatible at all.
+PostgREST manages its :ref:`own pool of connections <db-pool>` and uses prepared statements by default in order to increase performance. However, this setting is incompatible with external connection poolers such as PgBouncer working in transaction pooling mode. In this case, you need to set the :ref:`db-prepared-statements` config option to ``false``. On the other hand, session pooling is fully compatible with PostgREST, while statement pooling is not compatible at all.
 
 .. note::
 
diff --git a/configuration.rst b/configuration.rst
index 04dd236db..2da88d208 100644
--- a/configuration.rst
+++ b/configuration.rst
@@ -158,7 +158,7 @@ db-channel-enabled
 
   When this is set to :code:`true`, the notification channel specified in :ref:`db-channel` is enabled.
 
-  You should set this to ``false`` when using PostgresSQL behind a connection pooler such as PgBouncer working in transaction pooling mode. See :ref:`this section <connection_poolers>` for more information.
+  You should set this to ``false`` when using PostgresSQL behind an external connection pooler such as PgBouncer working in transaction pooling mode. See :ref:`this section <external_connection_poolers>` for more information.
 
 .. _db-prepared-statements:
 
@@ -169,7 +169,7 @@ db-prepared-statements
 
   When disabled, the generated queries will be parameterized (invulnerable to SQL injection) but they will not be prepared (cached in the database session). Not using prepared statements will noticeably decrease performance, so it's recommended to always have this setting enabled.
 
-  You should only set this to ``false`` when using PostgresSQL behind a connection pooler such as PgBouncer working in transaction pooling mode. See :ref:`this section <connection_poolers>` for more information.
+  You should only set this to ``false`` when using PostgresSQL behind an external connection pooler such as PgBouncer working in transaction pooling mode. See :ref:`this section <external_connection_poolers>` for more information.
 
 .. _db-tx-end:
 
diff --git a/releases/v8.0.0.rst b/releases/v8.0.0.rst
index 6b55c98e1..a02a20f69 100644
--- a/releases/v8.0.0.rst
+++ b/releases/v8.0.0.rst
@@ -28,7 +28,7 @@ Added
 * Allow sending the header ``Prefer: headers-only`` to get a response with a ``Location`` header. See :ref:`insert_update`.
   |br| -- `@laurenceisla <https://github.com/laurenceisla>`_
 
-* Allow :ref:`connection_poolers` such as PgBouncer in transaction pooling mode.
+* Allow :ref:`external_connection_poolers` such as PgBouncer in transaction pooling mode.
   |br| -- `@laurenceisla <https://github.com/laurenceisla>`_
 
 * Allow :ref:`config_reloading` by sending a SIGUSR2 signal.

From ad13e00f6456c75cbe69a0f8921114806d1ef2af Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Bart=C5=82omiej=20Szostek?= <szostek.bartek@gmail.com>
Date: Sun, 3 Oct 2021 00:40:42 +0100
Subject: [PATCH 436/652] Typo in api.rst, correct `ignore_privileges`

The correct setting name is `ignore-privileges`, with dash in between the words.
---
 api.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/api.rst b/api.rst
index ea7b7bd63..6ac6001ed 100644
--- a/api.rst
+++ b/api.rst
@@ -1461,7 +1461,7 @@ Every API hosted by PostgREST automatically serves a full `OpenAPI <https://www.
 
 .. note::
 
-  By default, this output depends on the permissions of the role that is contained in the JWT role claim (or the :ref:`db-anon-role` if no JWT is sent). If you need to show all the endpoints disregarding the role's permissions, set the :ref:`openapi-mode` config to :code:`ignore_privileges`.
+  By default, this output depends on the permissions of the role that is contained in the JWT role claim (or the :ref:`db-anon-role` if no JWT is sent). If you need to show all the endpoints disregarding the role's permissions, set the :ref:`openapi-mode` config to :code:`ignore-privileges`.
 
 For extra customization, the OpenAPI output contains a "description" field for every `SQL comment <https://www.postgresql.org/docs/current/sql-comment.html>`_ on any database object. For instance,
 

From ec7ace2e73509e955b01e65b653baecd663b84ad Mon Sep 17 00:00:00 2001
From: laurenceisla <lau.isla.c@gmail.com>
Date: Wed, 13 Oct 2021 14:31:49 -0500
Subject: [PATCH 437/652] Add compatibility with PostgreSQL v14

---
 api.rst               | 24 ++++++++++++++++++------
 auth.rst              |  2 +-
 configuration.rst     | 10 ++++++++++
 postgrest.dict        |  1 +
 releases/upcoming.rst |  8 ++++++++
 5 files changed, 38 insertions(+), 7 deletions(-)

diff --git a/api.rst b/api.rst
index 6ac6001ed..2a56d9aad 100644
--- a/api.rst
+++ b/api.rst
@@ -1584,20 +1584,32 @@ HTTP Logic
 Accessing Request Headers, Cookies and JWT claims
 -------------------------------------------------
 
-You can access request headers, cookies and JWT claims by reading GUC variables set by PostgREST per request. They are named :code:`request.header.XYZ`, :code:`request.cookie.XYZ` and :code:`request.jwt.claim.XYZ`.
+You can access request headers, cookies and JWT claims by reading GUC variables set by PostgREST per request. They are named :code:`request.headers`, :code:`request.cookies` and :code:`request.jwt.claims`.
 
 .. code-block:: postgresql
 
-  -- To read the value of the Origin request header:
-  SELECT current_setting('request.header.origin', true);
+  -- To read the value of the User-Agent request header:
+  SELECT current_setting('request.headers', true)::json->>'user-agent';
+
   -- To read the value of sessionId in a cookie:
-  SELECT current_setting('request.cookie.sessionId', true);
+  SELECT current_setting('request.cookies', true)::json->>'sessionId';
+
   -- To read the value of the email claim in a jwt:
-  SELECT current_setting('request.jwt.claim.email', true);
+  SELECT current_setting('request.jwt.claims', true)::json->>'email';
+
+  -- To get all the headers sent in the request
+  SELECT current_setting('request.headers', true)::json;
 
 .. note::
 
-  ``request.jwt.claim.role`` defaults to the value of :ref:`db-anon-role`.
+  The ``role`` in ``request.jwt.claims`` defaults to the value of :ref:`db-anon-role`.
+
+.. _guc_legacy_names:
+
+Legacy GUC variable names
+~~~~~~~~~~~~~~~~~~~~~~~~~
+
+For PostgreSQL versions below 14, PostgREST will take into consideration the :ref:`db-use-legacy-gucs` config, which is set to true by default. This means that the interface for accessing these GUCs is `the same as in older versions <https://postgrest.org/en/v8.0/api.html#accessing-request-headers-cookies-and-jwt-claims>`_. You can opt in to use the JSON GUCs mentioned above by setting the ``db-use-legacy-gucs`` to false.
 
 .. _guc_req_path_method:
 
diff --git a/auth.rst b/auth.rst
index d00f67368..748a9fe29 100644
--- a/auth.rst
+++ b/auth.rst
@@ -165,7 +165,7 @@ You can create a valid JWT either from inside your database or via an external s
 JWT from SQL
 ~~~~~~~~~~~~
 
-You can create JWT tokens in SQL using the `pgjwt extension <https://github.com/michelp/pgjwt>`_. It's simple and requires only pgcrypto. If you're on an environment like Amazon RDS which doesn't support installing new extensions, you can still manually run the `SQL inside pgjwt <https://github.com/michelp/pgjwt/blob/master/pgjwt--0.1.0.sql>`_ (you'll need to replace ``@extschema@`` with another schema or just delete it) which creates the functions you will need.
+You can create JWT tokens in SQL using the `pgjwt extension <https://github.com/michelp/pgjwt>`_. It's simple and requires only pgcrypto. If you're on an environment like Amazon RDS which doesn't support installing new extensions, you can still manually run the `SQL inside pgjwt <https://github.com/michelp/pgjwt/blob/master/pgjwt--0.1.1.sql>`_ (you'll need to replace ``@extschema@`` with another schema or just delete it) which creates the functions you will need.
 
 Next write a stored procedure that returns the token. The one below returns a token with a hard-coded role, which expires five minutes after it was issued. Note this function has a hard-coded secret as well.
 
diff --git a/configuration.rst b/configuration.rst
index 2da88d208..2826e2d5d 100644
--- a/configuration.rst
+++ b/configuration.rst
@@ -50,6 +50,7 @@ db-channel-enabled       Boolean True
 db-prepared-statements   Boolean True
 db-tx-end                String  commit
 db-config                Boolean True
+db-use-legacy-gucs       Boolean True
 server-host              String  !4
 server-port              Int     3000
 server-unix-socket       String
@@ -199,6 +200,15 @@ db-config
 
    Enables the in-database configuration.
 
+.. _db-use-legacy-gucs:
+
+db-use-legacy-gucs
+------------------
+
+  Determine if GUC request settings for headers, cookies and jwt claims use the `legacy names <https://postgrest.org/en/v8.0/api.html#accessing-request-headers-cookies-and-jwt-claims>`_ (string with dashes, invalid starting from PostgreSQL v14) with text values instead of the :ref:`new names <guc_req_headers_cookies_claims>` (string without dashes, valid on all PostgreSQL versions) with json values.
+
+  On PostgreSQL versions 14 and above, this parameter is ignored.
+
 .. _server-host:
 
 server-host
diff --git a/postgrest.dict b/postgrest.dict
index cfe0e3bea..396e67b5e 100644
--- a/postgrest.dict
+++ b/postgrest.dict
@@ -45,6 +45,7 @@ grantor
 GraphQL
 gte
 GUC
+gucs
 Gumbs
 Haskell
 Heroku
diff --git a/releases/upcoming.rst b/releases/upcoming.rst
index 120b69eaa..060d528b0 100644
--- a/releases/upcoming.rst
+++ b/releases/upcoming.rst
@@ -13,3 +13,11 @@ Added
 
 * Allow :ref:`embedding <embedding_partitioned_tables>`, UPSERT, INSERT with Location response, OPTIONS request and OpenAPI support for partitioned tables.
   |br| -- `@laurenceisla <https://github.com/laurenceisla>`_
+
+* Make GUC names for headers, cookies and jwt claims compatible with PostgreSQL v14.
+
+  + The GUC names on PostgreSQL 14 are changed to the ones :ref:`mentioned in this section <guc_req_headers_cookies_claims>`, while older versions still use the :ref:`guc_legacy_names`.
+  + PostgreSQL versions below 14 can opt in to the new JSON GUCs by setting the :ref:`db-use-legacy-gucs` config option to false (true by default).
+  + Managed to avoid a breaking change thanks to `@robertsosinski <https://github.com/robertsosinski>`_ who reported the bug that only one ``.`` character was allowed in GUC keys to the PostgreSQL team. See the `full discussion <https://www.postgresql.org/message-id/17045-6a4a9f0d1513f72b%40postgresql.org>`_.
+
+  -- `@laurenceisla <https://github.com/laurenceisla>`_

From ee1ec780d2dfe1e96257e67f406bb7c6586a0ee3 Mon Sep 17 00:00:00 2001
From: laurenceisla <lau.isla.c@gmail.com>
Date: Mon, 18 Oct 2021 17:34:49 -0500
Subject: [PATCH 438/652] Add nested embedding examples

---
 api.rst               | 19 +++++++++++++++++++
 releases/upcoming.rst |  4 ++++
 2 files changed, 23 insertions(+)

diff --git a/api.rst b/api.rst
index 2a56d9aad..e4255edda 100644
--- a/api.rst
+++ b/api.rst
@@ -616,6 +616,17 @@ PostgREST can also detect relationships going through join tables. Thus you can
 
   GET /actors?select=films(title,year) HTTP/1.1
 
+.. _nested_embedding:
+
+Nested Embedding
+----------------
+
+If you want to embed through join tables but need more control on the intermediate resources, you can do nested embedding. For instance, you can request the Actors, their Roles and the Films for those Roles:
+
+.. code-block:: http
+
+  GET /actors?select=roles(character,films(title,year)) HTTP/1.1
+
 Embedded Filters
 ----------------
 
@@ -651,6 +662,14 @@ Embedded resources can be aliased and filters can be applied on these aliases:
 
   GET /films?select=*,90_comps:competitions(name),91_comps:competitions(name)&90_comps.year=eq.1990&91_comps.year=eq.1991 HTTP/1.1
 
+Filters can also be applied on nested embedded resources:
+
+.. code-block:: http
+
+  GET /films?select=*,roles(*,actors(*))&roles.actors.order=last_name&roles.actors.first_name=like.*Tom* HTTP/1.1
+
+The result will show the nested actors named Tom and order them by last name. Aliases can also be used instead of the resource names to filter the nested tables.
+
 .. _embedding_partitioned_tables:
 
 Embedding Partitioned Tables
diff --git a/releases/upcoming.rst b/releases/upcoming.rst
index 060d528b0..37bc92dc0 100644
--- a/releases/upcoming.rst
+++ b/releases/upcoming.rst
@@ -21,3 +21,7 @@ Added
   + Managed to avoid a breaking change thanks to `@robertsosinski <https://github.com/robertsosinski>`_ who reported the bug that only one ``.`` character was allowed in GUC keys to the PostgreSQL team. See the `full discussion <https://www.postgresql.org/message-id/17045-6a4a9f0d1513f72b%40postgresql.org>`_.
 
   -- `@laurenceisla <https://github.com/laurenceisla>`_
+
+* Documentation improvements
+
+  + Added :ref:`nested_embedding` to the :ref:`resource_embedding` section.

From c6ef4305b13d2b6af1e4820dc71fbb0e100ff500 Mon Sep 17 00:00:00 2001
From: laurenceisla <lau.isla.c@gmail.com>
Date: Tue, 19 Oct 2021 11:34:18 -0500
Subject: [PATCH 439/652] Allow top-level resource with embed filter

---
 api.rst               | 65 +++++++++++++++++++++++++++++++++++++++++++
 configuration.rst     | 16 +++++++++++
 releases/upcoming.rst |  7 +++++
 3 files changed, 88 insertions(+)

diff --git a/api.rst b/api.rst
index e4255edda..5826f7f45 100644
--- a/api.rst
+++ b/api.rst
@@ -670,6 +670,65 @@ Filters can also be applied on nested embedded resources:
 
 The result will show the nested actors named Tom and order them by last name. Aliases can also be used instead of the resource names to filter the nested tables.
 
+.. _embedding_top_level_filter:
+
+Top Level Filtering
+~~~~~~~~~~~~~~~~~~~
+
+By default, embedded filters don't change the top level resource rows at all:
+
+.. code-block:: http
+
+  GET /films?select=title,actors(first_name,last_name)&actors.first_name=eq.Jehanne HTTP/1.1
+
+.. code-block:: json
+
+  [
+    {
+      "title": "Workers Leaving The Lumière Factory In Lyon",
+      "actors": []
+    },
+    {
+      "title": "The Dickson Experimental Sound Film",
+      "actors": []
+    },
+    {
+      "title": "The Haunted Castle",
+      "actors": [
+        {
+          "first_name": "Jehanne",
+          "last_name": "d'Alcy"
+        }
+      ]
+    }
+  ]
+
+In order to filter the top level rows you need to add ``!inner`` to the embedded resource. For instance, to get **only** the films that have an actor named ``Jehanne``:
+
+.. code-block:: http
+
+  GET /films?select=title,actors!inner(first_name,last_name)&actors.first_name=eq.Jehanne HTTP/1.1
+
+.. code-block:: json
+
+  [
+    {
+      "title": "The Haunted Castle",
+      "actors": [
+        {
+          "first_name": "Jehanne",
+          "last_name": "d'Alcy"
+        }
+      ]
+    }
+  ]
+
+If you prefer to work with top level filtering as a default embedding behavior for PostgREST, set the :ref:`db-embed-default-join` configuration parameter to ``"inner"``. This way, you don't need to specify ``!inner`` on every request and, if you need the previous behavior, add ``!left`` to the embedding resource. For instance, this will not filter the films in any way:
+
+.. code-block:: http
+
+  GET /films?select=title,actors!left(first_name,last_name)&actors.first_name=eq.Jehanne HTTP/1.1
+
 .. _embedding_partitioned_tables:
 
 Embedding Partitioned Tables
@@ -936,6 +995,12 @@ Here we specify ``central_addresses`` as the **target** and the ``billing_addres
 
 Similarly to the **target**, the **hint** can be a **table name**, **foreign key constraint name** or **column name**.
 
+Hints also work alongside ``!inner`` if a top level filtering is needed. From the above example:
+
+.. code-block:: http
+
+  GET /orders?select=*,central_addresses!billing_address!inner(*)&central_addresses.code="AB1000" HTTP/1.1
+
 .. _insert_update:
 
 Insertions / Updates
diff --git a/configuration.rst b/configuration.rst
index 2826e2d5d..c3a38301d 100644
--- a/configuration.rst
+++ b/configuration.rst
@@ -50,6 +50,7 @@ db-channel-enabled       Boolean True
 db-prepared-statements   Boolean True
 db-tx-end                String  commit
 db-config                Boolean True
+db-embed-default-join    String  left
 db-use-legacy-gucs       Boolean True
 server-host              String  !4
 server-port              Int     3000
@@ -200,6 +201,21 @@ db-config
 
    Enables the in-database configuration.
 
+.. _db-embed-default-join:
+
+db-embed-default-join
+---------------------
+
+  Determines the default embedding type between tables or views when none is specified in the request. For more info, see :ref:`embedding_top_level_filter`.
+
+  .. code:: bash
+
+    # Embeds using LEFT JOIN
+    db-embed-default-join = "left"
+
+    # Embeds using INNER JOIN
+    db-embed-default-join = "inner"
+
 .. _db-use-legacy-gucs:
 
 db-use-legacy-gucs
diff --git a/releases/upcoming.rst b/releases/upcoming.rst
index 37bc92dc0..a7ac4b116 100644
--- a/releases/upcoming.rst
+++ b/releases/upcoming.rst
@@ -14,6 +14,13 @@ Added
 * Allow :ref:`embedding <embedding_partitioned_tables>`, UPSERT, INSERT with Location response, OPTIONS request and OpenAPI support for partitioned tables.
   |br| -- `@laurenceisla <https://github.com/laurenceisla>`_
 
+* Allow filtering top-level resource based on embedded resources filters
+
+  + This is enabled by adding ``!inner`` to the embedded resource. See :ref:`embedding_top_level_filter`.
+  + This behavior can be enabled by default by setting the  :ref:`db-embed-default-join` to ``"inner"``.
+
+  -- `@steve-chavez <https://github.com/steve-chavez>`_
+
 * Make GUC names for headers, cookies and jwt claims compatible with PostgreSQL v14.
 
   + The GUC names on PostgreSQL 14 are changed to the ones :ref:`mentioned in this section <guc_req_headers_cookies_claims>`, while older versions still use the :ref:`guc_legacy_names`.

From 7e7d4df93b85bddd13957b2b131335bade205a4a Mon Sep 17 00:00:00 2001
From: Wolfgang Walther <walther@technowledgy.de>
Date: Wed, 20 Oct 2021 13:14:32 +0200
Subject: [PATCH 440/652] docker-compose: remove optional quotes around
 environment variable

Resolves #446
---
 install.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install.rst b/install.rst
index c7592f5e1..2c03932e1 100644
--- a/install.rst
+++ b/install.rst
@@ -160,7 +160,7 @@ To avoid having to install the database at all, you can run both it and the serv
         PGRST_DB_URI: postgres://app_user:password@db:5432/app_db
         PGRST_DB_SCHEMA: public
         PGRST_DB_ANON_ROLE: app_user #In production this role should not be the same as the one used for the connection
-        PGRST_OPENAPI_SERVER_PROXY_URI: "http://127.0.0.1:3000"
+        PGRST_OPENAPI_SERVER_PROXY_URI: http://127.0.0.1:3000
       depends_on:
         - db
     db:

From 8e11b6f5dfd1b07feb27a4fa947c531179809193 Mon Sep 17 00:00:00 2001
From: Laurence Isla <lau.isla.c@gmail.com>
Date: Wed, 20 Oct 2021 16:13:49 -0500
Subject: [PATCH 441/652] Allow escaping inside double quotes with a backslash
 (#447)

---
 api.rst               | 8 ++++++++
 releases/upcoming.rst | 9 +++++++++
 2 files changed, 17 insertions(+)

diff --git a/api.rst b/api.rst
index 5826f7f45..e85864d60 100644
--- a/api.rst
+++ b/api.rst
@@ -312,6 +312,14 @@ Here ``information.cpe`` is a column name.
 
   GET /vulnerabilities?%22information.cpe%22=like.*MS* HTTP/1.1
 
+If the value filtered by the ``in`` operator has a double quote (``"``), you can escape it using a backslash ``"\""``. A backslash itself can be used with a double backslash ``"\\"``.
+
+Here ``Quote:"`` and ``Backslash:\`` are percent-encoded values. Note that ``%5C`` is the percent-encoded backslash.
+
+.. code-block:: http
+
+  GET /marks?name=in.(%22Quote:%5C%22%22,%22Backslash:%5C%5C%22) HTTP/1.1
+
 .. note::
 
    Some HTTP libraries might encode URLs automatically(e.g. :code:`axios`). In these cases you should use double quotes
diff --git a/releases/upcoming.rst b/releases/upcoming.rst
index a7ac4b116..9610ba27e 100644
--- a/releases/upcoming.rst
+++ b/releases/upcoming.rst
@@ -29,6 +29,15 @@ Added
 
   -- `@laurenceisla <https://github.com/laurenceisla>`_
 
+* Allow escaping inside double quotes with a backslash, e.g. ``?col=in.("Double\"Quote")``, ``?col=in.("Back\\slash")``. See :ref:`reserved-chars`.
+  |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
+
 * Documentation improvements
 
   + Added :ref:`nested_embedding` to the :ref:`resource_embedding` section.
+
+Fixed
+-----
+
+* Fix using single double quotes (``"``) and backslashes (``/``) as values on the "in" operator
+  |br| -- `@steve-chavez <https://github.com/steve-chavez>`_

From b15dd8783e77ab7932c11b7c9bc2b7093015f886 Mon Sep 17 00:00:00 2001
From: Laurence Isla <vanquisher.laurence.02@gmail.com>
Date: Thu, 21 Oct 2021 21:08:29 -0500
Subject: [PATCH 442/652] Add Retry-After header when recovering the connection

---
 admin.rst             | 11 +++++++++++
 postgrest.dict        |  2 ++
 releases/upcoming.rst |  3 +++
 3 files changed, 16 insertions(+)

diff --git a/admin.rst b/admin.rst
index 68df23052..df318e516 100644
--- a/admin.rst
+++ b/admin.rst
@@ -188,6 +188,17 @@ A great way to inspect incoming HTTP requests including headers and query parame
 
 The options to ngrep vary depending on the address and host on which you've bound the server. The binding is described in the :ref:`configuration` section. The ngrep output isn't particularly pretty, but it's legible.
 
+.. _automatic_recovery:
+
+Automatic Connection Recovery
+-----------------------------
+
+When PostgREST loses the connection to the database, it retries the connection using capped exponential backoff, with 32 seconds being the maximum backoff time.
+
+This retry behavior is triggered immediately after the connection is lost if :ref:`db-channel-enabled` is set to true (this is the default behavior), otherwise it will be activated once a request is made.
+
+To notify the client when the next reconnection attempt will be, PostgREST responds with ``503 Service Unavailable`` and the ``Retry-After: x`` header, where ``x`` is the number of seconds programmed for the next retry.
+
 Database Logs
 -------------
 
diff --git a/postgrest.dict b/postgrest.dict
index 396e67b5e..5a2689239 100644
--- a/postgrest.dict
+++ b/postgrest.dict
@@ -8,6 +8,7 @@ aud
 Auth
 auth
 authenticator
+backoff
 balancer
 Beles
 Bouscal
@@ -123,6 +124,7 @@ Rafaj
 RDS
 reallyreallyreallyreallyverysafe
 Rechkemmer
+reconnection
 Redux
 refactor
 Remo
diff --git a/releases/upcoming.rst b/releases/upcoming.rst
index 9610ba27e..e5dc3541b 100644
--- a/releases/upcoming.rst
+++ b/releases/upcoming.rst
@@ -32,6 +32,9 @@ Added
 * Allow escaping inside double quotes with a backslash, e.g. ``?col=in.("Double\"Quote")``, ``?col=in.("Back\\slash")``. See :ref:`reserved-chars`.
   |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
 
+* Add ``Retry-After`` header when recovering the connection. See :ref:`automatic_recovery`.
+  |br| -- `@gautam1168 <https://github.com/gautam1168>`_
+
 * Documentation improvements
 
   + Added :ref:`nested_embedding` to the :ref:`resource_embedding` section.

From 23ad30a20ab712d1ffc16689f5eef97d41fb63eb Mon Sep 17 00:00:00 2001
From: Laurence Isla <lau.isla.c@gmail.com>
Date: Thu, 28 Oct 2021 17:47:21 -0500
Subject: [PATCH 443/652] Add templates section to the ecosystem

---
 ecosystem.rst         | 10 ++++++++--
 index.rst             |  3 +++
 releases/upcoming.rst |  1 +
 requirements.txt      |  1 +
 4 files changed, 13 insertions(+), 2 deletions(-)
 create mode 100644 requirements.txt

diff --git a/ecosystem.rst b/ecosystem.rst
index 68d6f5bd9..787a8b75d 100644
--- a/ecosystem.rst
+++ b/ecosystem.rst
@@ -14,6 +14,14 @@ Community Tutorials
 * `"CodeLess" backend using postgres, postgrest and oauth2 authentication with keycloak <https://www.mathieupassenaud.fr/codeless_backend/>`_ -
   A step-by-step tutorial for using PostgREST with KeyCloak(hosted on a managed service).
 
+.. _templates:
+
+Templates
+---------
+
+* `compose-postgrest <https://github.com/mattddowney/compose-postgrest>`_ - docker-compose setup with Nginx and HTML example
+* `svelte-postgrest-template <https://github.com/guyromm/svelte-postgrest-template>`_ - Svelte/SvelteKit, PostgREST, EveryLayout and social auth - `blog post <https://www.webgma.co.il/Articles/rapid-prototyping-with-postgrest-and-svelte/en/>`_
+
 .. _eco_example_apps:
 
 Example Apps
@@ -22,7 +30,6 @@ Example Apps
 * `chronicle <https://github.com/srid/chronicle>`_ - tracking a tree of personal memories
 * `cloudgov-demo-postgrest <https://github.com/GSA/cloudgov-demo-postgrest>`_ - demo for a federally-compliant REST API on cloud.gov
 * `code-du-travail-backoffice <https://github.com/SocialGouv/code-du-travail-backoffice>`_ - data administration portal for the official French Labor Code and Agreements
-* `compose-postgrest <https://github.com/mattddowney/compose-postgrest>`_ - docker-compose setup with Nginx and HTML example
 * `delibrium-postgrest <https://gitlab.com/delibrium/delibrium-postgrest/>`_ - example school API and front-end in Vue.js
 * `elm-workshop <https://github.com/diogob/elm-workshop>`_ - building a simple database query UI
 * `ember-postgrest-dynamic-ui <https://github.com/benoror/ember-postgrest-dynamic-ui>`_ - generating Ember forms to edit data
@@ -45,7 +52,6 @@ Example Apps
 * `PostgrestSkeleton <https://github.com/Recmo/PostgrestSkeleton>`_ - Docker Compose, PostgREST, Nginx and Auth0
 * `PostGUI <https://github.com/priyank-purohit/PostGUI>`_ - React Material UI admin panel
 * `prospector <https://github.com/sfcta/prospector>`_ - data warehouse and visualization platform
-* `svelte-postgrest-template <https://github.com/guyromm/svelte-postgrest-template>`_ - Svelte/SvelteKit, PostgREST, EveryLayout and social auth
 
 .. _dev_ops:
 
diff --git a/index.rst b/index.rst
index 65522fad5..eb891698b 100644
--- a/index.rst
+++ b/index.rst
@@ -209,7 +209,10 @@ PostgREST has a growing ecosystem of examples, libraries, and experiments. Here
 
    ecosystem.rst
 
+* :ref:`community_tutorials`
+* :ref:`templates`
 * :ref:`eco_example_apps`
+* :ref:`dev_ops`
 * :ref:`eco_external_notification`
 * :ref:`eco_extensions`
 * :ref:`clientside_libraries`
diff --git a/releases/upcoming.rst b/releases/upcoming.rst
index e5dc3541b..36fd101b1 100644
--- a/releases/upcoming.rst
+++ b/releases/upcoming.rst
@@ -38,6 +38,7 @@ Added
 * Documentation improvements
 
   + Added :ref:`nested_embedding` to the :ref:`resource_embedding` section.
+  + Added the :ref:`templates` section to the :doc:`Ecosystem </ecosystem>`.
 
 Fixed
 -----
diff --git a/requirements.txt b/requirements.txt
new file mode 100644
index 000000000..163f583b5
--- /dev/null
+++ b/requirements.txt
@@ -0,0 +1 @@
+docutils==0.17.1
\ No newline at end of file

From a0bdcb706c01540173355bce05362c63453132f8 Mon Sep 17 00:00:00 2001
From: Laurence Isla <lau.isla.c@gmail.com>
Date: Thu, 28 Oct 2021 18:06:52 -0500
Subject: [PATCH 444/652] Add curl examples alongside http snippets

---
 admin.rst                        |   33 +-
 api.rst                          | 1213 +++++++++++++++++++++++-------
 auth.rst                         |   27 +-
 conf.py                          |    7 +-
 default.nix                      |    5 +-
 extensions/sphinx-copybutton.nix |   33 +
 extensions/sphinx-tabs.nix       |   29 +
 requirements.txt                 |    4 +-
 schema_cache.rst                 |   20 +-
 9 files changed, 1087 insertions(+), 284 deletions(-)
 create mode 100644 extensions/sphinx-copybutton.nix
 create mode 100644 extensions/sphinx-tabs.nix

diff --git a/admin.rst b/admin.rst
index df318e516..d1352228a 100644
--- a/admin.rst
+++ b/admin.rst
@@ -43,15 +43,27 @@ Block Full-Table Operations
 
 Each table in the admin-selected schema gets exposed as a top level route. Client requests are executed by certain database roles depending on their authentication. All HTTP verbs are supported that correspond to actions permitted to the role. For instance if the active role can drop rows of the table then the DELETE verb is allowed for clients. Here's an API request to delete old rows from a hypothetical logs table:
 
-.. code-block:: http
+.. tabs::
 
-  DELETE /logs?time=lt.1991-08-06 HTTP/1.1
+  .. code-tab:: http
+
+    DELETE /logs?time=lt.1991-08-06 HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/logs?time=lt.1991-08-06" -X DELETE
 
 However it's very easy to delete the **entire table** by omitting the query parameter!
 
-.. code-block:: http
+.. tabs::
 
-  DELETE /logs HTTP/1.1
+  .. code-tab:: http
+
+    DELETE /logs HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/logs" -X DELETE
 
 This can happen accidentally such as by switching a request from a GET to a DELETE. To protect against accidental operations use the `pg-safeupdate <https://github.com/eradman/pg-safeupdate>`_ PostgreSQL extension. It raises an error if UPDATE or DELETE are executed without specifying conditions. To install it you can use the `PGXN <https://pgxn.org/>`_ network:
 
@@ -293,10 +305,17 @@ Alternate URL Structure
 
 As discussed in :ref:`singular_plural`, there are no special URL forms for singular resources in PostgREST, only operators for filtering. Thus there are no URLs like :code:`/people/1`. It would be specified instead as
 
-.. code:: http
+.. tabs::
 
-  GET /people?id=eq.1 HTTP/1.1
-  Accept: application/vnd.pgrst.object+json
+  .. code-tab:: http
+
+    GET /people?id=eq.1 HTTP/1.1
+    Accept: application/vnd.pgrst.object+json
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/people?id=eq.1" \
+      -H "Accept: application/vnd.pgrst.object+json"
 
 This allows compound primary keys and makes the intent for singular response independent of a URL convention.
 
diff --git a/api.rst b/api.rst
index e85864d60..5e3fbe1ec 100644
--- a/api.rst
+++ b/api.rst
@@ -6,9 +6,15 @@ Tables and Views
 
 All views and tables in the exposed schema and accessible by the active database role for a request are available for querying. They are exposed in one-level deep routes. For instance the full contents of a table `people` is returned at
 
-.. code-block:: http
+.. tabs::
 
-  GET /people HTTP/1.1
+  .. code-tab:: http
+
+    GET /people HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/people"
 
 There are no deeply/nested/routes. Each route provides OPTIONS, GET, HEAD, POST, PATCH, and DELETE verbs depending entirely on database permissions.
 
@@ -23,27 +29,51 @@ Horizontal Filtering (Rows)
 
 You can filter result rows by adding conditions on columns, each condition a query string parameter. For instance, to return people aged under 13 years old:
 
-.. code-block:: http
+.. tabs::
 
-  GET /people?age=lt.13 HTTP/1.1
+  .. code-tab:: http
+
+    GET /people?age=lt.13 HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/people?age=lt.13"
 
 Multiple parameters can be logically conjoined by:
 
-.. code-block:: http
+.. tabs::
 
-  GET /people?age=gte.18&student=is.true HTTP/1.1
+  .. code-tab:: http
+
+    GET /people?age=gte.18&student=is.true HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/people?age=gte.18&student=is.true"
 
 Multiple parameters can be logically disjoined by:
 
-.. code-block:: http
+.. tabs::
 
-  GET /people?or=(age.gte.14,age.lte.18) HTTP/1.1
+  .. code-tab:: http
+
+    GET /people?or=(age.gte.14,age.lte.18) HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/people?or=(age.gte.14,age.lte.18)"
 
 Complex logic can also be applied:
 
-.. code-block:: http
+.. tabs::
 
-  GET /people?and=(grade.gte.90,student.is.true,or(age.gte.14,age.is.null)) HTTP/1.1
+  .. code-tab:: http
+
+    GET /people?and=(grade.gte.90,student.is.true,or(age.gte.14,age.is.null)) HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/people?and=(grade.gte.90,student.is.true,or(age.gte.14,age.is.null))"
 
 .. _operators:
 
@@ -99,9 +129,15 @@ For more complicated filters you will have to create a new view in the database,
 
 The view will provide a new endpoint:
 
-.. code-block:: http
+.. tabs::
 
-  GET /fresh_stories HTTP/1.1
+  .. code-tab:: http
+
+    GET /fresh_stories HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/fresh_stories"
 
 .. _fts:
 
@@ -110,21 +146,45 @@ Full-Text Search
 
 The :code:`fts` filter mentioned above has a number of options to support flexible textual queries, namely the choice of plain vs phrase search and the language used for stemming. Suppose that :code:`tsearch` is a table with column :code:`my_tsv`, of type `tsvector <https://www.postgresql.org/docs/current/datatype-textsearch.html>`_. The following examples illustrate the possibilities.
 
-.. code-block:: http
+.. tabs::
 
-  GET /tsearch?my_tsv=fts(french).amusant HTTP/1.1
+  .. code-tab:: http
 
-.. code-block:: http
+    GET /tsearch?my_tsv=fts(french).amusant HTTP/1.1
 
-  GET /tsearch?my_tsv=plfts.The%20Fat%20Cats HTTP/1.1
+  .. code-tab:: bash Curl
 
-.. code-block:: http
+    curl "http://localhost:3000/tsearch?my_tsv=fts(french).amusant"
 
-  GET /tsearch?my_tsv=not.phfts(english).The%20Fat%20Cats HTTP/1.1
+.. tabs::
 
-.. code-block:: http
+  .. code-tab:: http
 
-  GET /tsearch?my_tsv=not.wfts(french).amusant HTTP/1.1
+    GET /tsearch?my_tsv=plfts.The%20Fat%20Cats HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/tsearch?my_tsv=plfts.The%20Fat%20Cats"
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /tsearch?my_tsv=not.phfts(english).The%20Fat%20Cats HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/tsearch?my_tsv=not.phfts(english).The%20Fat%20Cats"
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /tsearch?my_tsv=not.wfts(french).amusant HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/tsearch?my_tsv=not.wfts(french).amusant"
 
 Using phrase search mode requires PostgreSQL of version at least 9.6 and will raise an error in earlier versions of the database.
 
@@ -137,9 +197,17 @@ Vertical Filtering (Columns)
 
 When certain columns are wide (such as those holding binary data), it is more efficient for the server to withhold them in a response. The client can specify which columns are required using the :sql:`select` parameter.
 
-.. code-block:: http
+.. tabs::
 
-  GET /people?select=first_name,age HTTP/1.1
+  .. code-tab:: http
+
+    GET /people?select=first_name,age HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/people?select=first_name,age"
+
+.. code-block:: json
 
   [
     {"first_name": "John", "age": 30},
@@ -153,9 +221,17 @@ Renaming Columns
 
 You can rename the columns by prefixing them with an alias followed by the colon ``:`` operator.
 
-.. code-block:: http
+.. tabs::
 
-  GET /people?select=fullName:full_name,birthDate:birth_date HTTP/1.1
+  .. code-tab:: http
+
+    GET /people?select=fullName:full_name,birthDate:birth_date HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/people?select=fullName:full_name,birthDate:birth_date"
+
+.. code-block:: json
 
   [
     {"fullName": "John Doe", "birthDate": "04/25/1988"},
@@ -169,9 +245,17 @@ Casting Columns
 
 Casting the columns is possible by suffixing them with the double colon ``::`` plus the desired type.
 
-.. code-block:: http
+.. tabs::
 
-  GET /people?select=full_name,salary::text HTTP/1.1
+  .. code-tab:: http
+
+    GET /people?select=full_name,salary::text HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/people?select=full_name,salary::text"
+
+.. code-block:: json
 
   [
     {"full_name": "John Doe", "salary": "90000.00"},
@@ -185,18 +269,34 @@ JSON Columns
 
 You can specify a path for a ``json`` or ``jsonb`` column using the arrow operators(``->`` or ``->>``) as per the `PostgreSQL docs <https://www.postgresql.org/docs/current/functions-json.html>`_.
 
-.. code-block:: http
+.. tabs::
 
-  GET /people?select=id,json_data->>blood_type,json_data->phones HTTP/1.1
+  .. code-tab:: http
+
+    GET /people?select=id,json_data->>blood_type,json_data->phones HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/people?select=id,json_data->>blood_type,json_data->phones"
+
+.. code-block:: json
 
   [
     { "id": 1, "blood_type": "A-", "phones": [{"country_code": "61", "number": "917-929-5745"}] },
     { "id": 2, "blood_type": "O+", "phones": [{"country_code": "43", "number": "512-446-4988"}, {"country_code": "43", "number": "213-891-5979"}] }
   ]
 
-.. code-block:: http
+.. tabs::
 
-  GET /people?select=id,json_data->phones->0->>number HTTP/1.1
+  .. code-tab:: http
+
+    GET /people?select=id,json_data->phones->0->>number HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/people?select=id,json_data->phones->0->>number"
+
+.. code-block:: json
 
   [
     { "id": 1, "number": "917-929-5745"},
@@ -205,9 +305,17 @@ You can specify a path for a ``json`` or ``jsonb`` column using the arrow operat
 
 This also works with filters:
 
-.. code-block:: http
+.. tabs::
 
-  GET /people?select=id,json_data->blood_type&json_data->>blood_type=eq.A- HTTP/1.1
+  .. code-tab:: http
+
+    GET /people?select=id,json_data->blood_type&json_data->>blood_type=eq.A- HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/people?select=id,json_data->blood_type&json_data->>blood_type=eq.A-"
+
+.. code-block:: json
 
   [
     { "id": 1, "blood_type": "A-" },
@@ -217,9 +325,17 @@ This also works with filters:
 
 Note that ``->>`` is used to compare ``blood_type`` as ``text``. To compare with an integer value use ``->``:
 
-.. code-block:: http
+.. tabs::
 
-  GET /people?select=id,json_data->age&json_data->age=gt.20 HTTP/1.1
+  .. code-tab:: http
+
+    GET /people?select=id,json_data->age&json_data->age=gt.20 HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/people?select=id,json_data->age&json_data->age=gt.20"
+
+.. code-block:: json
 
   [
     { "id": 11, "age": 25 },
@@ -251,15 +367,27 @@ Filters may be applied to computed columns(**a.k.a. virtual columns**) as well a
 
 A full-text search on the computed column:
 
-.. code-block:: http
+.. tabs::
 
-  GET /people?full_name=fts.Beckett HTTP/1.1
+  .. code-tab:: http
+
+    GET /people?full_name=fts.Beckett HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/people?full_name=fts.Beckett"
 
 As mentioned, computed columns do not appear in the output by default. However you can include them by listing them in the vertical filtering :code:`select` parameter:
 
-.. code-block:: HTTP
+.. tabs::
 
-  GET /people?select=*,full_name HTTP/1.1
+  .. code-tab:: http
+
+    GET /people?select=*,full_name HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/people?select=*,full_name"
 
 .. important::
 
@@ -278,9 +406,15 @@ To request this:
 
 Do this:
 
-.. code-block:: http
+.. tabs::
 
-  GET /%D9%85%D9%88%D8%A7%D8%B1%D8%AF HTTP/1.1
+  .. code-tab:: http
+
+    GET /%D9%85%D9%88%D8%A7%D8%B1%D8%AF HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/%D9%85%D9%88%D8%A7%D8%B1%D8%AF"
 
 .. _tabs-cols-w-spaces:
 
@@ -289,9 +423,15 @@ Table / Columns with spaces
 
 You can request table/columns with spaces in them by percent encoding the spaces with ``%20``:
 
-.. code-block:: http
+.. tabs::
 
-  GET /Order%20Items?Unit%20Price=lt.200 HTTP/1.1
+  .. code-tab:: http
+
+    GET /Order%20Items?Unit%20Price=lt.200 HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/Order%20Items?Unit%20Price=lt.200"
 
 .. _reserved-chars:
 
@@ -302,15 +442,27 @@ If filters include PostgREST reserved characters(``,``, ``.``, ``:``, ``()``) yo
 
 Here ``Hebdon,John`` and ``Williams,Mary`` are values.
 
-.. code-block:: http
+.. tabs::
 
-  GET /employees?name=in.(%22Hebdon,John%22,%22Williams,Mary%22) HTTP/1.1
+  .. code-tab:: http
+
+    GET /employees?name=in.(%22Hebdon,John%22,%22Williams,Mary%22) HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/employees?name=in.(%22Hebdon,John%22,%22Williams,Mary%22)"
 
 Here ``information.cpe`` is a column name.
 
-.. code-block:: http
+.. tabs::
 
-  GET /vulnerabilities?%22information.cpe%22=like.*MS* HTTP/1.1
+  .. code-tab:: http
+
+    GET /vulnerabilities?%22information.cpe%22=like.*MS* HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/vulnerabilities?%22information.cpe%22=like.*MS*"
 
 If the value filtered by the ``in`` operator has a double quote (``"``), you can escape it using a backslash ``"\""``. A backslash itself can be used with a double backslash ``"\\"``.
 
@@ -330,25 +482,49 @@ Ordering
 
 The reserved word :sql:`order` reorders the response rows. It uses a comma-separated list of columns and directions:
 
-.. code-block:: http
+.. tabs::
 
-  GET /people?order=age.desc,height.asc HTTP/1.1
+  .. code-tab:: http
+
+    GET /people?order=age.desc,height.asc HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/people?order=age.desc,height.asc"
 
 If no direction is specified it defaults to ascending order:
 
-.. code-block:: http
+.. tabs::
 
-  GET /people?order=age HTTP/1.1
+  .. code-tab:: http
+
+    GET /people?order=age HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/people?order=age"
 
 If you care where nulls are sorted, add ``nullsfirst`` or ``nullslast``:
 
-.. code-block:: http
+.. tabs::
 
-  GET /people?order=age.nullsfirst HTTP/1.1
+  .. code-tab:: http
 
-.. code-block:: http
+    GET /people?order=age.nullsfirst HTTP/1.1
 
-  GET /people?order=age.desc.nullslast HTTP/1.1
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/people?order=age.nullsfirst"
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /people?order=age.desc.nullslast HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/people?order=age.desc.nullslast"
 
 You can also use :ref:`computed_cols` to order the results, even though the computed columns will not appear in the output.
 
@@ -369,11 +545,19 @@ Here items zero through fourteen are returned. This information is available in
 
 There are two ways to apply a limit and offset rows: through request headers or query parameters. When using headers you specify the range of rows desired. This request gets the first twenty people.
 
-.. code-block:: http
+.. tabs::
 
-  GET /people HTTP/1.1
-  Range-Unit: items
-  Range: 0-19
+  .. code-tab:: http
+
+    GET /people HTTP/1.1
+    Range-Unit: items
+    Range: 0-19
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/people" -i \
+      -H "Range-Unit: items" \
+      -H "Range: 0-19"
 
 Note that the server may respond with fewer if unable to meet your request:
 
@@ -387,9 +571,15 @@ You may also request open-ended ranges for an offset with no limit, e.g. :code:`
 
 The other way to request a limit or offset is with query parameters. For example
 
-.. code-block:: http
+.. tabs::
 
-  GET /people?limit=15&offset=30 HTTP/1.1
+  .. code-tab:: http
+
+    GET /people?limit=15&offset=30 HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/people?limit=15&offset=30"
 
 This method is also useful for embedded resources, which we will cover in another section. The server always responds with range headers even if you use query parameters to limit the query.
 
@@ -400,12 +590,21 @@ Exact Count
 
 In order to obtain the total size of the table or view (such as when rendering the last page link in a pagination control), specify ``Prefer: count=exact`` as a request header:
 
-.. code-block:: http
+.. tabs::
 
-  HEAD /bigtable HTTP/1.1
-  Range-Unit: items
-  Range: 0-24
-  Prefer: count=exact
+  .. code-tab:: http
+
+    HEAD /bigtable HTTP/1.1
+    Range-Unit: items
+    Range: 0-24
+    Prefer: count=exact
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/bigtable" -I \
+      -H "Range-Unit: items" \
+      -H "Range: 0-24" \
+      -H "Prefer: count=exact"
 
 Note that the larger the table the slower this query runs in the database. The server will respond with the selected range and total
 
@@ -423,10 +622,17 @@ Planned Count
 To avoid the shortcomings of :ref:`exact count <exact_count>`, PostgREST can leverage PostgreSQL statistics and get a fairly accurate and fast count.
 To do this, specify the ``Prefer: count=planned`` header.
 
-.. code-block:: http
+.. tabs::
 
-  HEAD /bigtable?limit=25 HTTP/1.1
-  Prefer: count=planned
+  .. code-tab:: http
+
+    HEAD /bigtable?limit=25 HTTP/1.1
+    Prefer: count=planned
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/bigtable?limit=25" -I \
+      -H "Prefer: count=planned"
 
 .. code-block:: http
 
@@ -453,10 +659,17 @@ defined by :ref:`max-rows`.
 
 Here's an example. Suppose we set ``max-rows=1000`` and ``smalltable`` has 321 rows, then we'll get the exact count:
 
-.. code-block:: http
+.. tabs::
 
-  HEAD /smalltable?limit=25 HTTP/1.1
-  Prefer: count=estimated
+  .. code-tab:: http
+
+    HEAD /smalltable?limit=25 HTTP/1.1
+    Prefer: count=estimated
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/smalltable?limit=25" -I \
+      -H "Prefer: count=estimated"
 
 .. code-block:: http
 
@@ -465,10 +678,17 @@ Here's an example. Suppose we set ``max-rows=1000`` and ``smalltable`` has 321 r
 
 If we make a similar request on ``bigtable``, which has 3573458 rows, we would get the planned count:
 
-.. code-block:: http
+.. tabs::
 
-  HEAD /bigtable?limit=25 HTTP/1.1
-  Prefer: count=estimated
+  .. code-tab:: http
+
+    HEAD /bigtable?limit=25 HTTP/1.1
+    Prefer: count=estimated
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/bigtable?limit=25" -I \
+      -H "Prefer: count=estimated"
 
 .. code-block:: http
 
@@ -484,10 +704,17 @@ PostgREST uses proper HTTP content negotiation (`RFC7231 <https://datatracker.ie
 
 Use the Accept request header to specify the acceptable format (or formats) for the response:
 
-.. code-block:: http
+.. tabs::
 
-  GET /people HTTP/1.1
-  Accept: application/json
+  .. code-tab:: http
+
+    GET /people HTTP/1.1
+    Accept: application/json
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/people"
+      -H "Accept: application/json"
 
 The current possibilities are:
 
@@ -514,10 +741,17 @@ By default PostgREST returns all JSON results in an array, even when there is on
 
 This can be inconvenient for client code. To return the first result as an object unenclosed by an array, specify :code:`vnd.pgrst.object` as part of the :code:`Accept` header
 
-.. code-block:: http
+.. tabs::
 
-  GET /items?id=eq.1 HTTP/1.1
-  Accept: application/vnd.pgrst.object+json
+  .. code-tab:: http
+
+    GET /items?id=eq.1 HTTP/1.1
+    Accept: application/vnd.pgrst.object+json
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/items?id=eq.1"
+      -H "Accept: application/vnd.pgrst.object+json"
 
 This returns
 
@@ -557,9 +791,15 @@ returned together. For example, consider a database of films and their awards:
 
 As seen above in :ref:`v_filter` we can request the titles of all films like this:
 
-.. code-block:: http
+.. tabs::
 
-  GET /films?select=title HTTP/1.1
+  .. code-tab:: http
+
+    GET /films?select=title HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/films?select=title"
 
 This might return something like
 
@@ -573,9 +813,15 @@ This might return something like
 
 However because a foreign key constraint exists between Films and Directors, we can request this information be included:
 
-.. code-block:: http
+.. tabs::
 
-  GET /films?select=title,directors(id,last_name) HTTP/1.1
+  .. code-tab:: http
+
+    GET /films?select=title,directors(id,last_name) HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/films?select=title,directors(id,last_name)"
 
 Which would return
 
@@ -607,9 +853,15 @@ only one director associated with a film. As the table name is plural it might
 be preferable for it to be singular instead. An table name alias can accomplish
 this:
 
-.. code-block:: http
+.. tabs::
 
-  GET /films?select=title,director:directors(id,last_name) HTTP/1.1
+  .. code-tab:: http
+
+    GET /films?select=title,director:directors(id,last_name) HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/films?select=title,director:directors(id,last_name)"
 
 .. important::
 
@@ -620,9 +872,15 @@ Embedding through join tables
 
 PostgREST can also detect relationships going through join tables. Thus you can request the Actors for Films (which in this case finds the information through Roles).
 
-.. code-block:: http
+.. tabs::
 
-  GET /actors?select=films(title,year) HTTP/1.1
+  .. code-tab:: http
+
+    GET /actors?select=films(title,year) HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/actors?select=films(title,year)"
 
 .. _nested_embedding:
 
@@ -631,50 +889,92 @@ Nested Embedding
 
 If you want to embed through join tables but need more control on the intermediate resources, you can do nested embedding. For instance, you can request the Actors, their Roles and the Films for those Roles:
 
-.. code-block:: http
+.. tabs::
 
-  GET /actors?select=roles(character,films(title,year)) HTTP/1.1
+  .. code-tab:: http
+
+    GET /actors?select=roles(character,films(title,year)) HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/actors?select=roles(character,films(title,year))"
 
 Embedded Filters
 ----------------
 
 Embedded resources can be shaped similarly to their top-level counterparts. To do so, prefix the query parameters with the name of the embedded resource. For instance, to order the actors in each film:
 
-.. code-block:: http
+.. tabs::
 
-  GET /films?select=*,actors(*)&actors.order=last_name,first_name HTTP/1.1
+  .. code-tab:: http
+
+    GET /films?select=*,actors(*)&actors.order=last_name,first_name HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/films?select=*,actors(*)&actors.order=last_name,first_name"
 
 This sorts the list of actors in each film but does *not* change the order of the films themselves. To filter the roles returned with each film:
 
-.. code-block:: http
+.. tabs::
 
-  GET /films?select=*,roles(*)&roles.character=in.(Chico,Harpo,Groucho) HTTP/1.1
+  .. code-tab:: http
+
+    GET /films?select=*,roles(*)&roles.character=in.(Chico,Harpo,Groucho) HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/films?select=*,roles(*)&roles.character=in.(Chico,Harpo,Groucho)"
 
 Once again, this restricts the roles included to certain characters but does not filter the films in any way. Films without any of those characters would be included along with empty character lists.
 
 An ``or`` filter  can be used for a similar operation:
 
-.. code-block:: http
+.. tabs::
 
-  GET /films?select=*,roles(*)&roles.or=(character.eq.Gummo,character.eq.Zeppo) HTTP/1.1
+  .. code-tab:: http
+
+    GET /films?select=*,roles(*)&roles.or=(character.eq.Gummo,character.eq.Zeppo) HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/films?select=*,roles(*)&roles.or=(character.eq.Gummo,character.eq.Zeppo)"
 
 Limit and offset operations are possible:
 
-.. code-block:: http
+.. tabs::
 
-  GET /films?select=*,actors(*)&actors.limit=10&actors.offset=2 HTTP/1.1
+  .. code-tab:: http
+
+    GET /films?select=*,actors(*)&actors.limit=10&actors.offset=2 HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/films?select=*,actors(*)&actors.limit=10&actors.offset=2"
 
 Embedded resources can be aliased and filters can be applied on these aliases:
 
-.. code-block:: http
+.. tabs::
 
-  GET /films?select=*,90_comps:competitions(name),91_comps:competitions(name)&90_comps.year=eq.1990&91_comps.year=eq.1991 HTTP/1.1
+  .. code-tab:: http
+
+    GET /films?select=*,90_comps:competitions(name),91_comps:competitions(name)&90_comps.year=eq.1990&91_comps.year=eq.1991 HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/films?select=*,90_comps:competitions(name),91_comps:competitions(name)&90_comps.year=eq.1990&91_comps.year=eq.1991"
 
 Filters can also be applied on nested embedded resources:
 
-.. code-block:: http
+.. tabs::
 
-  GET /films?select=*,roles(*,actors(*))&roles.actors.order=last_name&roles.actors.first_name=like.*Tom* HTTP/1.1
+  .. code-tab:: http
+
+    GET /films?select=*,roles(*,actors(*))&roles.actors.order=last_name&roles.actors.first_name=like.*Tom* HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/films?select=*,roles(*,actors(*))&roles.actors.order=last_name&roles.actors.first_name=like.*Tom*"
 
 The result will show the nested actors named Tom and order them by last name. Aliases can also be used instead of the resource names to filter the nested tables.
 
@@ -767,15 +1067,27 @@ For example, let's create the ``box_office`` partitioned table that has the gros
 
 Since it contains the ``films_id`` foreign key, it is possible to embed ``box_office`` and ``films``:
 
-.. code-block:: http
+.. tabs::
 
-  GET /box_office?select=bo_date,gross_revenue,films(title)&gross_revenue=gte.1000000 HTTP/1.1
+  .. code-tab:: http
+
+    GET /box_office?select=bo_date,gross_revenue,films(title)&gross_revenue=gte.1000000 HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/box_office?select=bo_date,gross_revenue,films(title)&gross_revenue=gte.1000000"
 
 Embedding is also possible between ``box_office`` partitions and the ``films`` table:
 
-.. code-block:: http
+.. tabs::
 
-  GET /films?select=title,box_office_2021_02(bo_date,gross_revenue)&rating=gt.8 HTTP/1.1
+  .. code-tab:: http
+
+    GET /films?select=title,box_office_2021_02(bo_date,gross_revenue)&rating=gt.8 HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/films?select=title,box_office_2021_02(bo_date,gross_revenue)&rating=gt.8"
 
 .. note::
   Partitioned tables can reference other tables since PostgreSQL 11 but can only be referenced from any other table since PostgreSQL 12.
@@ -801,9 +1113,15 @@ As an example, let's create a view called ``nominations_view`` based on the *nom
 
 Since it contains ``competition_id`` and ``film_id`` — and each one has a **foreign key** defined in its source table — we can embed *competitions* and *films*:
 
-.. code-block:: http
+.. tabs::
 
-  GET /nominations_view?select=rank,competitions(name,year),films(title)&rank=eq.5 HTTP/1.1
+  .. code-tab:: http
+
+    GET /nominations_view?select=rank,competitions(name,year),films(title)&rank=eq.5 HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/nominations_view?select=rank,competitions(name,year),films(title)&rank=eq.5"
 
 It's also possible to embed `Materialized Views <https://www.postgresql.org/docs/current/rules-materializedviews.html>`_.
 
@@ -848,9 +1166,15 @@ Here's a sample function (notice the ``RETURNS SETOF films``).
 
 A request with ``directors`` embedded:
 
-.. code-block:: http
+.. tabs::
 
-   GET /rpc/getallfilms?select=title,directors(id,last_name)&title=like.*Workers* HTTP/1.1
+  .. code-tab:: http
+
+     GET /rpc/getallfilms?select=title,directors(id,last_name)&title=like.*Workers* HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+     curl "http://localhost:3000/rpc/getallfilms?select=title,directors(id,last_name)&title=like.*Workers*"
 
 .. code-block:: json
 
@@ -872,19 +1196,36 @@ You can embed related resources after doing :ref:`insert_update` or :ref:`delete
 
 Say you want to insert a **film** and then get some of its attributes plus embed its **director**.
 
-.. code-block:: http
+.. tabs::
 
-   POST /films?select=title,year,director:directors(first_name,last_name) HTTP/1.1
-   Prefer: return=representation
+  .. code-tab:: http
 
-   {
-    "id": 100,
-    "director_id": 40,
-    "title": "127 hours",
-    "year": 2010,
-    "rating": 7.6,
-    "language": "english"
-   }
+     POST /films?select=title,year,director:directors(first_name,last_name) HTTP/1.1
+     Prefer: return=representation
+
+     {
+      "id": 100,
+      "director_id": 40,
+      "title": "127 hours",
+      "year": 2010,
+      "rating": 7.6,
+      "language": "english"
+     }
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/films?select=title,year,director:directors(first_name,last_name)" \
+      -H "Prefer: return=representation" \
+      -d @- << EOF
+      {
+        "id": 100,
+        "director_id": 40,
+        "title": "127 hours",
+        "year": 2010,
+        "rating": 7.6,
+        "language": "english"
+      }
+    EOF
 
 Response:
 
@@ -917,9 +1258,15 @@ For example, suppose you have the following ``orders`` and ``addresses`` tables:
 
 And you try to embed ``orders`` with ``addresses`` (this is the **target**):
 
-.. code-block:: http
+.. tabs::
 
-  GET /orders?select=*,addresses(*) HTTP/1.1
+  .. code-tab:: http
+
+    GET /orders?select=*,addresses(*) HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/orders?select=*,addresses(*)" -i
 
 Since the ``orders`` table has two foreign keys to the ``addresses`` table — an order has a billing address and a shipping address —
 the request is ambiguous and PostgREST will respond with an error:
@@ -946,9 +1293,17 @@ Let's try first with the **foreign key constraint name**. To make it clearer we
 
 Now we can unambiguously embed the billing address by specifying the ``billing_address`` foreign key constraint as the **target**.
 
-.. code-block:: http
+.. tabs::
 
-  GET /orders?select=name,billing_address(name) HTTP/1.1
+  .. code-tab:: http
+
+    GET /orders?select=name,billing_address(name) HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/orders?select=name,billing_address(name)"
+
+.. code-block:: json
 
    [
     {
@@ -962,9 +1317,17 @@ Now we can unambiguously embed the billing address by specifying the ``billing_a
 Alternatively, you can specify the **column name** of the foreign key constraint as the **target**. This can be aliased to make
 the result more clear.
 
-.. code-block:: http
+.. tabs::
 
-  GET /orders?select=name,billing_address:billing_address_id(name) HTTP/1.1
+  .. code-tab:: http
+
+    GET /orders?select=name,billing_address:billing_address_id(name) HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/orders?select=name,billing_address:billing_address_id(name)"
+
+.. code-block:: json
 
    [
     {
@@ -984,18 +1347,34 @@ two views of ``addresses``: ``central_addresses`` and ``eastern_addresses``.
 Since PostgREST supports :ref:`embedding_views` by detecting **source foreign keys** in the views, embedding with the foreign key
 as the **target** will not be enough for an unambiguous embed:
 
-.. code-block:: http
+.. tabs::
 
-  GET /orders?select=*,billing_address(*) HTTP/1.1
+  .. code-tab:: http
+
+    GET /orders?select=*,billing_address(*) HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/orders?select=*,billing_address(*)" -i
+
+.. code-block:: http
 
   HTTP/1.1 300 Multiple Choices
 
 For solving this case, in addition to the **target**, we can add a **hint**.
 Here we specify ``central_addresses`` as the **target** and the ``billing_address`` foreign key as the **hint**:
 
-.. code-block:: http
+.. tabs::
 
-  GET /orders?select=*,central_addresses!billing_address(*) HTTP/1.1
+  .. code-tab:: http
+
+    GET /orders?select=*,central_addresses!billing_address(*) HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl 'http://localhost:3000/orders?select=*,central_addresses!billing_address(*)' -i
+
+.. code-block:: http
 
   HTTP/1.1 200 OK
 
@@ -1018,11 +1397,19 @@ All tables and `auto-updatable views <https://www.postgresql.org/docs/current/sq
 
 To create a row in a database table post a JSON object whose keys are the names of the columns you would like to create. Missing properties will be set to default values when applicable.
 
-.. code-block:: HTTP
+.. tabs::
 
-  POST /table_name HTTP/1.1
+  .. code-tab:: http
 
-  { "col1": "value1", "col2": "value2" }
+    POST /table_name HTTP/1.1
+
+    { "col1": "value1", "col2": "value2" }
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/table_name" \
+      -X POST -H "Content-Type: application/json" \
+      -d '{ "col1": "value1", "col2": "value2" }'
 
 If the table has a primary key, the response can contain a :code:`Location` header describing where to find the new object by including the header :code:`Prefer: return=headers-only` in the request. Make sure that the table is not write-only, otherwise constructing the :code:`Location` header will cause a permissions error.
 
@@ -1030,12 +1417,20 @@ On the other end of the spectrum you can get the full created object back in the
 
 URL encoded payloads can be posted with ``Content-Type: application/x-www-form-urlencoded``.
 
-.. code-block:: http
+.. tabs::
 
-  POST /people HTTP/1.1
-  Content-Type: application/x-www-form-urlencoded
+  .. code-tab:: http
 
-  name=John+Doe&age=50&weight=80
+    POST /people HTTP/1.1
+    Content-Type: application/x-www-form-urlencoded
+
+    name=John+Doe&age=50&weight=80
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/people" \
+      -X POST -H "Content-Type: application/x-www-form-urlencoded" \
+      -d "name=John+Doe&age=50&weight=80"
 
 .. note::
 
@@ -1053,11 +1448,19 @@ URL encoded payloads can be posted with ``Content-Type: application/x-www-form-u
 
 To update a row or rows in a table, use the PATCH verb. Use :ref:`h_filter` to specify which record(s) to update. Here is an example query setting the :code:`category` column to child for all people below a certain age.
 
-.. code-block:: http
+.. tabs::
 
-  PATCH /people?age=lt.13 HTTP/1.1
+  .. code-tab:: http
 
-  { "category": "child" }
+    PATCH /people?age=lt.13 HTTP/1.1
+
+    { "category": "child" }
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/people?age=lt.13" \
+      -X PATCH -H "Content-Type: application/json" \
+      -d '{ "category": "child" }'
 
 Updates also support :code:`Prefer: return=representation` plus :ref:`v_filter`.
 
@@ -1074,28 +1477,53 @@ Bulk insert works exactly like single row insert except that you provide either
 
 To bulk insert CSV simply post to a table route with :code:`Content-Type: text/csv` and include the names of the columns as the first row. For instance
 
-.. code-block:: http
+.. tabs::
 
-  POST /people HTTP/1.1
-  Content-Type: text/csv
+  .. code-tab:: http
 
-  name,age,height
-  J Doe,62,70
-  Jonas,10,55
+    POST /people HTTP/1.1
+    Content-Type: text/csv
+
+    name,age,height
+    J Doe,62,70
+    Jonas,10,55
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/people" \
+      -X POST -H "Content-Type: text/csv" \
+      --data-binary @- << EOF
+    name,age,height
+    J Doe,62,70
+    Jonas,10,55
+    EOF
 
 An empty field (:code:`,,`) is coerced to an empty string and the reserved word :code:`NULL` is mapped to the SQL null value. Note that there should be no spaces between the column names and commas.
 
 To bulk insert JSON post an array of objects having all-matching keys
 
-.. code-block:: http
+.. tabs::
 
-  POST /people HTTP/1.1
-  Content-Type: application/json
+  .. code-tab:: http
 
-  [
-    { "name": "J Doe", "age": 62, "height": 70 },
-    { "name": "Janus", "age": 10, "height": 55 }
-  ]
+    POST /people HTTP/1.1
+    Content-Type: application/json
+
+    [
+      { "name": "J Doe", "age": 62, "height": 70 },
+      { "name": "Janus", "age": 10, "height": 55 }
+    ]
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/people" \
+      -X POST -H "Content-Type: application/json" \
+      -d @- << EOF
+      [
+        { "name": "J Doe", "age": 62, "height": 70 },
+        { "name": "Janus", "age": 10, "height": 55 }
+      ]
+    EOF
 
 .. _specify_columns:
 
@@ -1105,20 +1533,38 @@ Specifying Columns
 By using the :code:`columns` query parameter it's possible to specify the payload keys that will be inserted/updated
 and ignore the rest of the payload.
 
-.. code-block:: http
+.. tabs::
 
-   POST /datasets?columns=source,publication_date,figure HTTP/1.1
-   Content-Type: application/json
+  .. code-tab:: http
 
-   {
-     "source": "Natural Disaster Prevention and Control",
-     "publication_date": "2015-09-11",
-     "figure": 1100,
-     "location": "...",
-     "comment": "...",
-     "extra": "...",
-     "stuff": "..."
-   }
+     POST /datasets?columns=source,publication_date,figure HTTP/1.1
+     Content-Type: application/json
+
+     {
+       "source": "Natural Disaster Prevention and Control",
+       "publication_date": "2015-09-11",
+       "figure": 1100,
+       "location": "...",
+       "comment": "...",
+       "extra": "...",
+       "stuff": "..."
+     }
+
+  .. code-tab:: bash Curl
+
+     curl "http://localhost:3000/datasets?columns=source,publication_date,figure" \
+       -X POST -H "Content-Type: application/json" \
+       -d @- << EOF
+       {
+         "source": "Natural Disaster Prevention and Control",
+         "publication_date": "2015-09-11",
+         "figure": 1100,
+         "location": "...",
+         "comment": "...",
+         "extra": "...",
+         "stuff": "..."
+       }
+     EOF
 
 In this case, only **source**, **publication_date** and **figure** will be inserted. The rest of the JSON keys will be ignored.
 
@@ -1132,16 +1578,31 @@ UPSERT
 
 You can make an UPSERT with :code:`POST` and the :code:`Prefer: resolution=merge-duplicates` header:
 
-.. code-block:: http
+.. tabs::
 
-  POST /employees HTTP/1.1
-  Prefer: resolution=merge-duplicates
+  .. code-tab:: http
 
-  [
-    { "id": 1, "name": "Old employee 1", "salary": 30000 },
-    { "id": 2, "name": "Old employee 2", "salary": 42000 },
-    { "id": 3, "name": "New employee 3", "salary": 50000 }
-  ]
+    POST /employees HTTP/1.1
+    Prefer: resolution=merge-duplicates
+
+    [
+      { "id": 1, "name": "Old employee 1", "salary": 30000 },
+      { "id": 2, "name": "Old employee 2", "salary": 42000 },
+      { "id": 3, "name": "New employee 3", "salary": 50000 }
+    ]
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000OST /employees" \
+      -X POST -H "Content-Type: application/json"
+      -H "Prefer: resolution=merge-duplicates" \
+      -d @- << EOF
+      [
+        { "id": 1, "name": "Old employee 1", "salary": 30000 },
+        { "id": 2, "name": "Old employee 2", "salary": 42000 },
+        { "id": 3, "name": "New employee 3", "salary": 50000 }
+      ]
+    EOF
 
 By default, UPSERT operates based on the primary key columns, you must specify all of them. You can also choose to ignore the duplicates with :code:`Prefer: resolution=ignore-duplicates`. This works best when the primary key is natural, but it's also possible to use it if the primary key is surrogate (example: "id serial primary key"). For more details read `this issue <https://github.com/PostgREST/postgrest/issues/1118>`_.
 
@@ -1155,27 +1616,50 @@ On Conflict
 
 By specifying the ``on_conflict`` query parameter, you can make UPSERT work on a column(s) that has a UNIQUE constraint.
 
-.. code-block:: http
+.. tabs::
 
-  POST /employees?on_conflict=name HTTP/1.1
-  Prefer: resolution=merge-duplicates
+  .. code-tab:: http
 
-  [
-    { "name": "Old employee 1", "salary": 40000 },
-    { "name": "Old employee 2", "salary": 52000 },
-    { "name": "New employee 3", "salary": 60000 }
-  ]
+    POST /employees?on_conflict=name HTTP/1.1
+    Prefer: resolution=merge-duplicates
+
+    [
+      { "name": "Old employee 1", "salary": 40000 },
+      { "name": "Old employee 2", "salary": 52000 },
+      { "name": "New employee 3", "salary": 60000 }
+    ]
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/employees?on_conflict=name" \
+      -X POST -H "Content-Type: application/json"
+      -H "Prefer: resolution=merge-duplicates" \
+      -d @- << EOF
+      [
+        { "name": "Old employee 1", "salary": 40000 },
+        { "name": "Old employee 2", "salary": 52000 },
+        { "name": "New employee 3", "salary": 60000 }
+      ]
+    EOF
 
 PUT
 ~~~
 
 A single row UPSERT can be done by using :code:`PUT` and filtering the primary key columns with :code:`eq`:
 
-.. code-block:: http
+.. tabs::
 
-  PUT /employees?id=eq.4 HTTP/1.1
+  .. code-tab:: http
 
-  { "id": 4, "name": "Sara B.", "salary": 60000 }
+    PUT /employees?id=eq.4 HTTP/1.1
+
+    { "id": 4, "name": "Sara B.", "salary": 60000 }
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost/employees?id=eq.4" \
+      -X PUT -H "Content-Type: application/json" \
+      -d '{ "id": 4, "name": "Sara B.", "salary": 60000 }'
 
 All the columns must be specified in the request body, including the primary key columns.
 
@@ -1190,9 +1674,15 @@ Deletions
 
 To delete rows in a table, use the DELETE verb plus :ref:`h_filter`. For instance deleting inactive users:
 
-.. code-block:: http
+.. tabs::
 
-  DELETE /user?active=is.false HTTP/1.1
+  .. code-tab:: http
+
+    DELETE /user?active=is.false HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/user?active=is.false" -X DELETE
 
 Deletions also support :code:`Prefer: return=representation` plus :ref:`v_filter`.
 
@@ -1225,9 +1715,15 @@ Stored Procedures
 
 Every stored procedure in the API-exposed database schema is accessible under the :code:`/rpc` prefix. The API endpoint supports POST (and in some cases GET) to execute the function.
 
-.. code-block:: http
+.. tabs::
 
-  POST /rpc/function_name HTTP/1.1
+  .. code-tab:: http
+
+    POST /rpc/function_name HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/rpc/function_name" -X POST
 
 Such functions can perform any operations allowed by PostgreSQL (read data, modify data, and even DDL operations).
 
@@ -1248,11 +1744,21 @@ For instance, assume we have created this function in the database.
 
 The client can call it by posting an object like
 
-.. code-block:: http
+.. tabs::
 
-  POST /rpc/add_them HTTP/1.1
+  .. code-tab:: http
 
-  { "a": 1, "b": 2 }
+    POST /rpc/add_them HTTP/1.1
+
+    { "a": 1, "b": 2 }
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/rpc/add_them" \
+      -X POST -H "Content-Type: application/json" \
+      -d '{ "a": 1, "b": 2 }'
+
+.. code-block:: json
 
   3
 
@@ -1290,9 +1796,15 @@ Procedures that do not modify the database can be called with the HTTP GET verb
 
 Because ``add_them`` is ``IMMUTABLE``, we can alternately call the function with a GET request:
 
-.. code-block:: http
+.. tabs::
 
-  GET /rpc/add_them?a=1&b=2 HTTP/1.1
+  .. code-tab:: http
+
+    GET /rpc/add_them?a=1&b=2 HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/rpc/add_them?a=1&b=2"
 
 The function parameter names match the JSON object keys in the POST case, for the GET case they match the query parameters ``?a=1&b=2``.
 
@@ -1307,12 +1819,23 @@ You can also call a function that takes a single parameter of type JSON by sendi
     SELECT (param->>'x')::int * (param->>'y')::int
   $$ LANGUAGE SQL;
 
-.. code-block:: http
+.. tabs::
 
-  POST /rpc/mult_them HTTP/1.1
-  Prefer: params=single-object
+  .. code-tab:: http
 
-  { "x": 4, "y": 2 }
+    POST /rpc/mult_them HTTP/1.1
+    Prefer: params=single-object
+
+    { "x": 4, "y": 2 }
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/rpc/mult_them" \
+      -X POST -H "Content-Type: application/json" \
+      -H "Prefer: params=single-object" \
+      -d '{ "x": 4, "y": 2 }'
+
+.. code-block:: json
 
   8
 
@@ -1329,12 +1852,20 @@ You can call a function that takes an array parameter:
       SELECT array_agg(n + 1) FROM unnest($1) AS n;
    $$ language sql;
 
-.. code-block:: http
+.. tabs::
 
-   POST /rpc/plus_one HTTP/1.1
-   Content-Type: application/json
+  .. code-tab:: http
 
-   {"arr": [1,2,3,4]}
+     POST /rpc/plus_one HTTP/1.1
+     Content-Type: application/json
+
+     {"arr": [1,2,3,4]}
+
+  .. code-tab:: bash Curl
+
+     curl "http://localhost:3000/rpc/plus_one" \
+       -X POST -H "Content-Type: application/json" \
+       -d '{"arr": [1,2,3,4]}'
 
 .. code-block:: json
 
@@ -1343,19 +1874,33 @@ You can call a function that takes an array parameter:
 For calling the function with GET, you can pass the array as an `array literal <https://www.postgresql.org/docs/current/arrays.html#ARRAYS-INPUT>`_,
 as in ``{1,2,3,4}``. Note that the curly brackets have to be urlencoded(``{`` is ``%7B`` and ``}`` is ``%7D``).
 
-.. code-block:: http
+.. tabs::
 
-  GET /rpc/plus_one?arr=%7B1,2,3,4%7D' HTTP/1.1
+  .. code-tab:: http
+
+    GET /rpc/plus_one?arr=%7B1,2,3,4%7D' HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/rpc/plus_one?arr=%7B1,2,3,4%7D'"
 
 .. note::
 
    For versions prior to PostgreSQL 10, to pass a PostgreSQL native array on a POST payload, you need to quote it and use an array literal:
 
-   .. code-block:: http
+   .. tabs::
 
-    POST /rpc/plus_one HTTP/1.1
+     .. code-tab:: http
 
-    { "arr": "{1,2,3,4}" }
+       POST /rpc/plus_one HTTP/1.1
+
+       { "arr": "{1,2,3,4}" }
+
+     .. code-tab:: bash Curl
+
+       curl "http://localhost:3000/rpc/plus_one" \
+         -X POST -H "Content-Type: application/json" \
+         -d '{ "arr": "{1,2,3,4}" }'
 
    In these versions we recommend using function parameters of type JSON to accept arrays from the client.
 
@@ -1372,12 +1917,20 @@ You can call a variadic function by passing a JSON array in a POST request:
       SELECT array_agg(n + 1) FROM unnest($1) AS n;
    $$ language sql;
 
-.. code-block:: http
+.. tabs::
 
-   POST /rpc/plus_one HTTP/1.1
-   Content-Type: application/json
+  .. code-tab:: http
 
-   {"v": [1,2,3,4]}
+    POST /rpc/plus_one HTTP/1.1
+    Content-Type: application/json
+
+    {"v": [1,2,3,4]}
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/rpc/plus_one" \
+      -X POST -H "Content-Type: application/json" \
+      -d '{"v": [1,2,3,4]}'
 
 .. code-block:: json
 
@@ -1385,33 +1938,63 @@ You can call a variadic function by passing a JSON array in a POST request:
 
 In a GET request, you can repeat the same parameter name:
 
-.. code-block:: http
+.. tabs::
 
-   GET /rpc/plus_one?v=1&v=2&v=3&v=4 HTTP/1.1
+  .. code-tab:: http
+
+     GET /rpc/plus_one?v=1&v=2&v=3&v=4 HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+     curl "http://localhost:3000/rpc/plus_one?v=1&v=2&v=3&v=4"
 
 Repeating also works in POST requests with ``Content-Type: application/x-www-form-urlencoded``:
 
-.. code-block:: http
+.. tabs::
 
-  POST /rpc/plus_one HTTP/1.1
-  Content-Type: application/x-www-form-urlencoded
+  .. code-tab:: http
 
-  v=1&v=2&v=3&v=4
+    POST /rpc/plus_one HTTP/1.1
+    Content-Type: application/x-www-form-urlencoded
+
+    v=1&v=2&v=3&v=4
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/rpc/plus_one" \
+      -X POST -H "Content-Type: application/x-www-form-urlencoded"
+      -d 'v=1&v=2&v=3&v=4'
 
 Scalar functions
 ----------------
 
 PostgREST will detect if the function is scalar or table-valued and will shape the response format accordingly:
 
-.. code-block:: http
+.. tabs::
 
-  GET /rpc/add_them?a=1&b=2 HTTP/1.1
+  .. code-tab:: http
+
+    GET /rpc/add_them?a=1&b=2 HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/rpc/add_them?a=1&b=2"
+
+.. code-block:: json
 
   3
 
-.. code-block:: http
+.. tabs::
 
-  GET /rpc/best_films_2017 HTTP/1.1
+  .. code-tab:: http
+
+    GET /rpc/best_films_2017 HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/rpc/best_films_2017"
+
+.. code-block:: json
 
   [
     { "title": "Okja", "rating": 7.4},
@@ -1427,15 +2010,28 @@ Bulk Call
 It's possible to call a function in a bulk way, analogously to :ref:`bulk_insert`. To do this, you need to add the
 ``Prefer: params=multiple-objects`` header to your request.
 
-.. code-block:: http
+.. tabs::
 
-   POST /rpc/add_them HTTP/1.1
-   Content-Type: text/csv
-   Prefer: params=multiple-objects
+  .. code-tab:: http
 
-   a,b
-   1,2
-   3,4
+    POST /rpc/add_them HTTP/1.1
+    Content-Type: text/csv
+    Prefer: params=multiple-objects
+
+    a,b
+    1,2
+    3,4
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/rpc/add_them" \
+      -X POST -H "Content-Type: text/csv" \
+      -H "Prefer: params=multiple-objects" \
+      --data-binary @- << EOF
+    a,b
+    1,2
+    3,4
+    EOF
 
 .. code-block:: json
 
@@ -1454,13 +2050,25 @@ A function that returns a table type response can be shaped using the same filte
 
   CREATE FUNCTION best_films_2017() RETURNS SETOF films ..
 
-.. code-block:: http
+.. tabs::
 
-  GET /rpc/best_films_2017?select=title,director:directors(*) HTTP/1.1
+  .. code-tab:: http
 
-.. code-block:: http
+    GET /rpc/best_films_2017?select=title,director:directors(*) HTTP/1.1
 
-  GET /rpc/best_films_2017?rating=gt.8&order=title.desc HTTP/1.1
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/rpc/best_films_2017?select=title,director:directors(*)"
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /rpc/best_films_2017?rating=gt.8&order=title.desc HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/rpc/best_films_2017?rating=gt.8&order=title.desc"
 
 Overloaded functions
 --------------------
@@ -1473,13 +2081,25 @@ You can call overloaded functions with different number of arguments.
 
   CREATE FUNCTION rental_duration(customer_id integer, from_date date) ..
 
-.. code-block:: http
+.. tabs::
 
-  GET /rpc/rental_duration?customer_id=232 HTTP/1.1
+  .. code-tab:: http
 
-.. code-block:: http
+    GET /rpc/rental_duration?customer_id=232 HTTP/1.1
 
-  GET /rpc/rental_duration?customer_id=232&from_date=2018-07-01 HTTP/1.1
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/rpc/rental_duration?customer_id=232"
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /rpc/rental_duration?customer_id=232&from_date=2018-07-01 HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/rpc/rental_duration?customer_id=232&from_date=2018-07-01"
 
 .. important::
 
@@ -1493,10 +2113,17 @@ Binary Output
 If you want to return raw binary data from a :code:`bytea` column, you must specify :code:`application/octet-stream` as part of the :code:`Accept` header
 and select a single column :code:`?select=bin_data`.
 
-.. code-block:: http
+.. tabs::
 
-  GET /items?select=bin_data&id=eq.1 HTTP/1.1
-  Accept: application/octet-stream
+  .. code-tab:: http
+
+    GET /items?select=bin_data&id=eq.1 HTTP/1.1
+    Accept: application/octet-stream
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/items?select=bin_data&id=eq.1" \
+      -H "Accept: application/octet-stream"
 
 You can also request binary output when calling `Stored Procedures`_ and since they can return a scalar value you are not forced to use :code:`select`
 for this case.
@@ -1505,10 +2132,17 @@ for this case.
 
   CREATE FUNCTION closest_point(..) RETURNS bytea ..
 
-.. code-block:: http
+.. tabs::
 
-  POST /rpc/closest_point HTTP/1.1
-  Accept: application/octet-stream
+  .. code-tab:: http
+
+    POST /rpc/closest_point HTTP/1.1
+    Accept: application/octet-stream
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/rpc/closest_point" \
+      -X POST -H "Accept: application/octet-stream"
 
 If the stored procedure returns non-scalar values, you need to do a :code:`select` in the same way as for GET binary output.
 
@@ -1516,10 +2150,17 @@ If the stored procedure returns non-scalar values, you need to do a :code:`selec
 
   CREATE FUNCTION overlapping_regions(..) RETURNS SETOF TABLE(geom_twkb bytea, ..) ..
 
-.. code-block:: http
+.. tabs::
 
-  POST /rpc/overlapping_regions?select=geom_twkb HTTP/1.1
-  Accept: application/octet-stream
+  .. code-tab:: http
+
+    POST /rpc/overlapping_regions?select=geom_twkb HTTP/1.1
+    Accept: application/octet-stream
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/rpc/overlapping_regions?select=geom_twkb" \
+      -X POST -H "Accept: application/octet-stream"
 
 .. note::
 
@@ -1532,10 +2173,19 @@ Plain Text Output
 
 You can get raw output from a ``text`` column by using ``Accept: text/plain``.
 
-.. code-block:: http
+.. tabs::
 
-  GET /workers?select=custom_psv_format HTTP/1.1
-  Accept: text/plain
+  .. code-tab:: http
+
+    GET /workers?select=custom_psv_format HTTP/1.1
+    Accept: text/plain
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/workers?select=custom_psv_format" \
+      -H "Accept: text/plain"
+
+.. code-block:: text
 
   09310817|JOHN|DOE|15/04/88|
   42152780|FRED|BLOGGS|20/02/85|
@@ -1596,9 +2246,15 @@ You can verify which HTTP methods are allowed on endpoints for tables and views
 
 For a table named ``people``, OPTIONS would show:
 
-.. code-block:: http
+.. tabs::
 
-  OPTIONS /people HTTP/1.1
+  .. code-tab:: http
+
+    OPTIONS /people HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/people" -X OPTIONS -i
 
 .. code-block:: http
 
@@ -1648,19 +2304,35 @@ You can switch schemas at runtime with the ``Accept-Profile`` and ``Content-Prof
 
 For GET or HEAD, the schema to be used can be selected through the ``Accept-Profile`` header:
 
-.. code-block:: http
+.. tabs::
 
-   GET /items HTTP/1.1
-   Accept-Profile: tenant2
+  .. code-tab:: http
+
+     GET /items HTTP/1.1
+     Accept-Profile: tenant2
+
+  .. code-tab:: bash Curl
+
+     curl "http://localhost:3000/items" \
+       -H "Accept-Profile: tenant2"
 
 For POST, PATCH, PUT and DELETE, you can use the ``Content-Profile`` header for selecting the schema:
 
-.. code-block:: http
+.. tabs::
 
-   POST /items HTTP/1.1
-   Content-Profile: tenant2
+  .. code-tab:: http
 
-   {...}
+     POST /items HTTP/1.1
+     Content-Profile: tenant2
+
+     {...}
+
+  .. code-tab:: bash Curl
+
+     curl "http://localhost:3000/items" \
+       -X POST -H "Content-Type: application/json" \
+       -H "Content-Profile: tenant2" \
+       -d '{...}'
 
 You can also select the schema for :ref:`s_procs` and :ref:`open-api`.
 
@@ -1763,17 +2435,24 @@ As an example, let's add some cache headers for all requests that come from an I
 
 Now when you make a GET request to a table or view, you'll get the cache headers.
 
-.. code-block:: http
+.. tabs::
 
-  GET /people HTTP/1.1
-  User-Agent: Mozilla/4.01 (compatible; MSIE 6.0; Windows NT 5.1)
+  .. code-tab:: http
+
+    GET /people HTTP/1.1
+    User-Agent: Mozilla/4.01 (compatible; MSIE 6.0; Windows NT 5.1)
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/people" -i \
+     -H "User-Agent: Mozilla/4.01 (compatible; MSIE 6.0; Windows NT 5.1)"
+
+.. code-block:: http
 
   HTTP/1.1 200 OK
   Content-Type: application/json; charset=utf-8
   Cache-Control: no-cache, no-store, must-revalidate
 
-  ...
-
 .. _guc_resp_status:
 
 Setting Response Status Code
@@ -1791,9 +2470,15 @@ You can set the ``response.status`` GUC to override the default status code Post
    end;
    $$ language plpgsql;
 
-.. code-block:: http
+.. tabs::
 
-  GET /rpc/teapot HTTP/1.1
+  .. code-tab:: http
+
+    GET /rpc/teapot HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/rpc/teapot" -i
 
 .. code-block:: http
 
diff --git a/auth.rst b/auth.rst
index 748a9fe29..8e3383cb0 100644
--- a/auth.rst
+++ b/auth.rst
@@ -150,10 +150,17 @@ Client Auth
 
 To make an authenticated request the client must include an :code:`Authorization` HTTP header with the value :code:`Bearer <jwt>`. For instance:
 
-.. code:: http
+.. tabs::
 
-  GET /foo HTTP/1.1
-  Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJyb2xlIjoiamRvZSIsImV4cCI6MTQ3NTUxNjI1MH0.GYDZV3yM0gqvuEtJmfpplLBXSGYnke_Pvnl0tbKAjB4
+  .. code-tab:: http
+
+    GET /foo HTTP/1.1
+    Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJyb2xlIjoiamRvZSIsImV4cCI6MTQ3NTUxNjI1MH0.GYDZV3yM0gqvuEtJmfpplLBXSGYnke_Pvnl0tbKAjB4
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/foo" \
+      -H "Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJyb2xlIjoiamRvZSIsImV4cCI6MTQ3NTUxNjI1MH0.GYDZV3yM0gqvuEtJmfpplLBXSGYnke_Pvnl0tbKAjB4"
 
 The ``Bearer`` header value can be used with or without capitalization(``bearer``).
 
@@ -422,11 +429,19 @@ As described in `JWT from SQL`_, we'll create a JWT inside our login function. N
 
 An API request to call this function would look like:
 
-.. code:: http
+.. tabs::
 
-  POST /rpc/login HTTP/1.1
+  .. code-tab:: http
 
-  { "email": "foo@bar.com", "pass": "foobar" }
+    POST /rpc/login HTTP/1.1
+
+    { "email": "foo@bar.com", "pass": "foobar" }
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/rpc/login" \
+      -X POST -H "Content-Type: application/json" \
+      -d '{ "email": "foo@bar.com", "pass": "foobar" }'
 
 The response would look like the snippet below. Try decoding the token at `jwt.io <https://jwt.io/>`_. (It was encoded with a secret of :code:`reallyreallyreallyreallyverysafe` as specified in the SQL code above. You'll want to change this secret in your app!)
 
diff --git a/conf.py b/conf.py
index 6e017e016..be38720aa 100644
--- a/conf.py
+++ b/conf.py
@@ -28,7 +28,10 @@ import os
 # Add any Sphinx extension module names here, as strings. They can be
 # extensions coming with Sphinx (named 'sphinx.ext.*') or your custom
 # ones.
-extensions = []
+extensions = [
+  'sphinx_tabs.tabs',
+  'sphinx_copybutton'
+]
 
 # Add any paths that contain templates here, relative to this directory.
 templates_path = ['_templates']
@@ -293,3 +296,5 @@ def setup(app):
 # taken from https://github.com/sphinx-doc/sphinx/blob/82dad44e5bd3776ecb6fd8ded656bc8151d0e63d/sphinx/util/requests.py#L42
 user_agent = 'Mozilla/5.0 (X11; Linux x86_64; rv:25.0) Gecko/20100101 Firefox/25.0'
 
+# sphinx-tabs configuration
+sphinx_tabs_disable_tab_closing = True
diff --git a/default.nix b/default.nix
index 039ae825b..40db65825 100644
--- a/default.nix
+++ b/default.nix
@@ -15,7 +15,10 @@ let
     })
     { };
 
-  python = pkgs.python3.withPackages (ps: [ ps.sphinx ps.sphinx_rtd_theme ps.livereload ]);
+  sphinxTabsPkg = ps: ps.callPackage ./extensions/sphinx-tabs.nix {};
+  sphinxCopybuttonPkg = ps: ps.callPackage ./extensions/sphinx-copybutton.nix {};
+
+  python = pkgs.python3.withPackages (ps: [ ps.sphinx ps.sphinx_rtd_theme ps.livereload (sphinxTabsPkg ps) (sphinxCopybuttonPkg ps) ]);
 in
 {
   inherit pkgs;
diff --git a/extensions/sphinx-copybutton.nix b/extensions/sphinx-copybutton.nix
new file mode 100644
index 000000000..8d408d300
--- /dev/null
+++ b/extensions/sphinx-copybutton.nix
@@ -0,0 +1,33 @@
+{ lib
+, buildPythonPackage
+, fetchFromGitHub
+, sphinx
+}:
+
+buildPythonPackage rec {
+  pname = "sphinx-copybutton";
+  version = "0.4.0";
+
+  src = fetchFromGitHub {
+    owner = "executablebooks";
+    repo = "sphinx-copybutton";
+    rev = "v${version}";
+    sha256 = "sha256-vrEIvQeP7AMXSme1PBp0ox5k8Q1rz+1cbHIO+o17Jqc=";
+    fetchSubmodules = true;
+  };
+
+  propagatedBuildInputs = [
+    sphinx
+  ];
+
+  doCheck = false; # no tests
+
+  pythonImportsCheck = [ "sphinx_copybutton" ];
+
+  meta = with lib; {
+    description = "A small sphinx extension to add a \"copy\" button to code blocks";
+    homepage = "https://github.com/executablebooks/sphinx-copybutton";
+    license = licenses.mit;
+    maintainers = with maintainers; [ Luflosi ];
+  };
+}
diff --git a/extensions/sphinx-tabs.nix b/extensions/sphinx-tabs.nix
new file mode 100644
index 000000000..f90b1c18d
--- /dev/null
+++ b/extensions/sphinx-tabs.nix
@@ -0,0 +1,29 @@
+{ lib
+, buildPythonPackage
+, fetchPypi
+, sphinx
+}:
+
+buildPythonPackage rec {
+  pname = "sphinx-tabs";
+  version = "3.2.0";
+
+  src = fetchPypi {
+    inherit pname version;
+    sha256 = "sha256:1970aahi6sa7c37cpz8nwgdb2xzf21rk6ykdd1m6w9wvxla7j4rk";
+  };
+
+  propagatedBuildInputs = [
+    sphinx
+  ];
+
+  doCheck = false;
+
+  pythonImportsCheck = [ "sphinx_tabs" ];
+
+  meta = with lib; {
+    description = "Create tabbed content in Sphinx documentation when building HTML";
+    homepage = "https://sphinx-tabs.readthedocs.io";
+    license = licenses.mit;
+  };
+}
\ No newline at end of file
diff --git a/requirements.txt b/requirements.txt
index 163f583b5..7c1725324 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -1 +1,3 @@
-docutils==0.17.1
\ No newline at end of file
+docutils==0.17.1
+sphinx-tabs
+sphinx-copybutton
\ No newline at end of file
diff --git a/schema_cache.rst b/schema_cache.rst
index f6fd23749..1e708876d 100644
--- a/schema_cache.rst
+++ b/schema_cache.rst
@@ -41,9 +41,15 @@ Stale Foreign Key Relationships
 
 Suppose you add a ``cities`` table to your database and define a foreign key that references an existing ``countries`` table. Then, you make a request to get the ``cities`` and their belonging ``countries``.
 
-.. code-block:: http
+.. tabs::
 
-  GET /cities?select=name,country:countries(id,name) HTTP/1.1
+  .. code-tab:: http
+
+    GET /cities?select=name,country:countries(id,name) HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/cities?select=name,country:countries(id,name)"
 
 The result will be an error:
 
@@ -70,9 +76,15 @@ The same issue will occur on newly created functions on a running PostgREST.
    SELECT num + 1;
   $$ LANGUAGE SQL IMMUTABLE;
 
-.. code-block:: http
+.. tabs::
 
-  GET /rpc/plus_one?num=1 HTTP/1.1
+  .. code-tab:: http
+
+    GET /rpc/plus_one?num=1 HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/rpc/plus_one?num=1"
 
 .. code-block:: json
 

From 7cc3d319bc3971c8d897b817bc9f072630712a39 Mon Sep 17 00:00:00 2001
From: Laurence Isla <lau.isla.c@gmail.com>
Date: Fri, 29 Oct 2021 15:11:39 -0500
Subject: [PATCH 445/652] Fix broken styles

---
 requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/requirements.txt b/requirements.txt
index 7c1725324..5a5a51b65 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -1,3 +1,3 @@
-docutils==0.17.1
+docutils<0.18
 sphinx-tabs
 sphinx-copybutton
\ No newline at end of file

From 8b74e14c4f9e9ca3762795a19411bdb68d0d6bcb Mon Sep 17 00:00:00 2001
From: Laurence Isla <lau.isla.c@gmail.com>
Date: Mon, 8 Nov 2021 12:27:22 -0500
Subject: [PATCH 446/652] Use tabs to show different installation methods

---
 install.rst    | 50 ++++++++++++++++++++++++++++++++++----------------
 postgrest.dict |  1 -
 2 files changed, 34 insertions(+), 17 deletions(-)

diff --git a/install.rst b/install.rst
index 2c03932e1..2d789ad08 100644
--- a/install.rst
+++ b/install.rst
@@ -6,36 +6,54 @@ Installation
 The release page has `pre-compiled binaries for Mac OS X, Windows, Linux and FreeBSD <https://github.com/PostgREST/postgrest/releases/latest>`_ .
 The Linux binary is a static executable that can be run on any Linux distribution.
 
-If you use **macOS Homebrew**, then you can install PostgREST from the `official repo <https://formulae.brew.sh/formula/postgrest>`_.
+You can also use your OS package manager.
 
-.. code:: bash
+.. tabs::
 
-  brew install postgrest
+  .. group-tab:: Mac OSX
 
-If you use **FreeBSD**, then you can install PostgREST from the `official ports <https://www.freshports.org/www/hs-postgrest>`_.
+    You can install PostgREST from the `Homebrew official repo <https://formulae.brew.sh/formula/postgrest>`_.
 
-.. code:: bash
+    .. code:: bash
 
-  pkg install hs-postgrest
+      brew install postgrest
 
-If you use **Arch Linux**, then you can install PostgREST from the `community repo <https://archlinux.org/packages/community/x86_64/postgrest>`_.
+  .. group-tab:: FreeBSD
 
-.. code:: bash
+    You can install PostgREST from the `official ports <https://www.freshports.org/www/hs-postgrest>`_.
 
-  pacman -S postgrest
+    .. code:: bash
 
-If you use **Nix**, then you can install PostgREST from nixpkgs.
+      pkg install hs-postgrest
 
-.. code:: bash
+  .. group-tab:: Linux
 
-  nix-env -i haskellPackages.postgrest
+    .. tabs::
 
-If you use Windows, you can install PostgREST using `Chocolatey <https://community.chocolatey.org/packages/postgrest>`_ or `Scoop <https://scoop.sh>`_.
+      .. tab:: Arch Linux
 
-.. code:: bash
+        You can install PostgREST from the `community repo <https://archlinux.org/packages/community/x86_64/postgrest>`_.
 
-  choco install postgrest
-  scoop install postgrest
+        .. code:: bash
+
+          pacman -S postgrest
+
+      .. tab:: Nix
+
+        You can install PostgREST from nixpkgs.
+
+        .. code:: bash
+
+          nix-env -i haskellPackages.postgrest
+
+  .. group-tab:: Windows
+
+    You can install PostgREST using `Chocolatey <https://community.chocolatey.org/packages/postgrest>`_ or `Scoop <https://scoop.sh>`_.
+
+    .. code:: bash
+
+      choco install postgrest
+      scoop install postgrest
 
 Running PostgREST
 =================
diff --git a/postgrest.dict b/postgrest.dict
index 5a2689239..684faa934 100644
--- a/postgrest.dict
+++ b/postgrest.dict
@@ -75,7 +75,6 @@ logins
 lon
 lt
 lte
-macOS
 middleware
 misprediction
 Mithril

From 4e4458eb95eb8ae57031b305b5fec2893eb2f2f8 Mon Sep 17 00:00:00 2001
From: Laurence Isla <lau.isla.c@gmail.com>
Date: Wed, 10 Nov 2021 19:35:44 -0500
Subject: [PATCH 447/652] Allow POST rpc with a single unnamed parameter

---
 api.rst               | 42 ++++++++++++++++++++++++++++++++++++++++++
 releases/upcoming.rst |  3 +++
 2 files changed, 45 insertions(+)

diff --git a/api.rst b/api.rst
index 5e3fbe1ec..6917c937f 100644
--- a/api.rst
+++ b/api.rst
@@ -1808,6 +1808,8 @@ Because ``add_them`` is ``IMMUTABLE``, we can alternately call the function with
 
 The function parameter names match the JSON object keys in the POST case, for the GET case they match the query parameters ``?a=1&b=2``.
 
+.. _s_proc_single_json:
+
 Calling functions with a single JSON parameter
 ----------------------------------------------
 
@@ -1839,6 +1841,46 @@ You can also call a function that takes a single parameter of type JSON by sendi
 
   8
 
+.. _s_proc_single_unnamed:
+
+Calling functions with a single unnamed parameter
+-------------------------------------------------
+
+You can make a POST request to a function with a single unnamed parameter to send raw ``json/jsonb``, ``bytea`` or ``text`` data.
+
+To send raw JSON, you can avoid using the ``Prefer: params=single-object`` header if the function has a single unnamed ``json`` or ``jsonb`` parameter and the header ``Content-Type: application/json`` is included in the request.
+
+.. code-block:: plpgsql
+
+  CREATE FUNCTION mult_them(json) RETURNS int AS $$
+    SELECT ($1->>'x')::int * ($1->>'y')::int
+  $$ LANGUAGE SQL;
+
+.. tabs::
+
+  .. code-tab:: http
+
+    POST /rpc/mult_them HTTP/1.1
+    Content-Type: application/json
+
+    { "x": 4, "y": 2 }
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/rpc/mult_them" \
+      -X POST -H "Content-Type: application/json" \
+      -d '{ "x": 4, "y": 2 }'
+
+.. code-block:: json
+
+  8
+
+.. note::
+
+  If an overloaded function has a single ``json`` or ``jsonb`` unnamed parameter, PostgREST will call this function as a fallback provided that no other overloaded function is found with the parameters sent in the POST request.
+
+To send raw binary, the parameter type must be ``bytea`` and the header ``Content-Type: application/octet-stream`` must be included in the request. Similarly, to send raw text, the parameter type must be ``text`` and the header ``Content-Type: text/plain`` must be included in the request.
+
 .. _s_procs_array:
 
 Calling functions with array parameters
diff --git a/releases/upcoming.rst b/releases/upcoming.rst
index 36fd101b1..48446f113 100644
--- a/releases/upcoming.rst
+++ b/releases/upcoming.rst
@@ -35,6 +35,9 @@ Added
 * Add ``Retry-After`` header when recovering the connection. See :ref:`automatic_recovery`.
   |br| -- `@gautam1168 <https://github.com/gautam1168>`_
 
+* Allow calling a function with a :ref:`single unnamed parameter <s_proc_single_unnamed>` to POST raw ``json/jsonb``, ``bytea`` or ``text``.
+  |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
+
 * Documentation improvements
 
   + Added :ref:`nested_embedding` to the :ref:`resource_embedding` section.

From 4720cfc1d36081e3bf3de88f441b6972bfad38f4 Mon Sep 17 00:00:00 2001
From: Laurence Isla <lau.isla.c@gmail.com>
Date: Thu, 11 Nov 2021 17:02:17 -0500
Subject: [PATCH 448/652] Add example to rpc unnamed single bytea parameter

---
 api.rst | 35 +++++++++++++++++++++++++++++++++--
 1 file changed, 33 insertions(+), 2 deletions(-)

diff --git a/api.rst b/api.rst
index 6917c937f..661fba091 100644
--- a/api.rst
+++ b/api.rst
@@ -1848,7 +1848,7 @@ Calling functions with a single unnamed parameter
 
 You can make a POST request to a function with a single unnamed parameter to send raw ``json/jsonb``, ``bytea`` or ``text`` data.
 
-To send raw JSON, you can avoid using the ``Prefer: params=single-object`` header if the function has a single unnamed ``json`` or ``jsonb`` parameter and the header ``Content-Type: application/json`` is included in the request.
+To send raw JSON, the function must have a single unnamed ``json`` or ``jsonb`` parameter and the header ``Content-Type: application/json`` must be included in the request.
 
 .. code-block:: plpgsql
 
@@ -1879,7 +1879,38 @@ To send raw JSON, you can avoid using the ``Prefer: params=single-object`` heade
 
   If an overloaded function has a single ``json`` or ``jsonb`` unnamed parameter, PostgREST will call this function as a fallback provided that no other overloaded function is found with the parameters sent in the POST request.
 
-To send raw binary, the parameter type must be ``bytea`` and the header ``Content-Type: application/octet-stream`` must be included in the request. Similarly, to send raw text, the parameter type must be ``text`` and the header ``Content-Type: text/plain`` must be included in the request.
+To send raw binary, the parameter type must be ``bytea`` and the header ``Content-Type: application/octet-stream`` must be included in the request.
+
+.. code-block:: plpgsql
+
+  CREATE TABLE files(blob bytea);
+
+  CREATE FUNCTION upload_binary(bytea) RETURNS void AS $$
+    INSERT INTO files(blob) VALUES ($1);
+  $$ LANGUAGE SQL;
+
+.. tabs::
+
+  .. code-tab:: http
+
+    POST /rpc/upload_binary HTTP/1.1
+    Content-Type: application/octet-stream
+
+    file_name.ext
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/rpc/upload_binary" \
+      -X POST -H "Content-Type: application/octet-stream" \
+      --data-binary "@file_name.ext"
+
+.. code-block:: http
+
+  HTTP/1.1 200 OK
+
+  [ ... ]
+
+To send raw text, the parameter type must be ``text`` and the header ``Content-Type: text/plain`` must be included in the request.
 
 .. _s_procs_array:
 

From 06c0180e4f297a071c7ff3d166defa3e9bd74a44 Mon Sep 17 00:00:00 2001
From: Laurence Isla <lau.isla.c@gmail.com>
Date: Mon, 15 Nov 2021 17:36:29 -0500
Subject: [PATCH 449/652] Add the Logical Operators section to Horizontal
 Filtering

---
 api.rst               | 65 ++++++++++++++++++++++++-------------------
 postgrest.dict        |  1 -
 releases/upcoming.rst |  1 +
 3 files changed, 37 insertions(+), 30 deletions(-)

diff --git a/api.rst b/api.rst
index 661fba091..077a6665d 100644
--- a/api.rst
+++ b/api.rst
@@ -27,7 +27,7 @@ There are no deeply/nested/routes. Each route provides OPTIONS, GET, HEAD, POST,
 Horizontal Filtering (Rows)
 ---------------------------
 
-You can filter result rows by adding conditions on columns, each condition a query string parameter. For instance, to return people aged under 13 years old:
+You can filter result rows by adding conditions on columns. For instance, to return people aged under 13 years old:
 
 .. tabs::
 
@@ -39,7 +39,7 @@ You can filter result rows by adding conditions on columns, each condition a que
 
     curl "http://localhost:3000/people?age=lt.13"
 
-Multiple parameters can be logically conjoined by:
+You can evaluate multiple conditions on columns by adding more query string parameters. For instance, to return people who are 18 or older **and** are students:
 
 .. tabs::
 
@@ -51,30 +51,6 @@ Multiple parameters can be logically conjoined by:
 
     curl "http://localhost:3000/people?age=gte.18&student=is.true"
 
-Multiple parameters can be logically disjoined by:
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /people?or=(age.gte.14,age.lte.18) HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/people?or=(age.gte.14,age.lte.18)"
-
-Complex logic can also be applied:
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /people?and=(grade.gte.90,student.is.true,or(age.gte.14,age.is.null)) HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/people?and=(grade.gte.90,student.is.true,or(age.gte.14,age.is.null))"
-
 .. _operators:
 
 Operators
@@ -111,11 +87,11 @@ sr            :code:`>>`                strictly right of
 nxr           :code:`&<`                does not extend to the right of, e.g. :code:`?range=nxr.(1,10)`
 nxl           :code:`&>`                does not extend to the left of
 adj           :code:`-|-`               is adjacent to, e.g. :code:`?range=adj.(1,10)`
-not           :code:`NOT`               negates another operator, see below
+not           :code:`NOT`               negates another operator, see :ref:`logical_operators`
+or            :code:`OR`                logical :code:`OR`, see :ref:`logical_operators`
+and           :code:`AND`               logical :code:`AND`, see :ref:`logical_operators`
 ============  ========================  ==================================================================================
 
-To negate any operator, prefix it with :code:`not` like :code:`?a=not.eq.2` or :code:`?not.and=(a.gte.0,a.lte.100)` .
-
 For more complicated filters you will have to create a new view in the database, or use a stored procedure. For instance, here's a view to show "today's stories" including possibly older pinned stories:
 
 .. code-block:: postgresql
@@ -139,6 +115,37 @@ The view will provide a new endpoint:
 
     curl "http://localhost:3000/fresh_stories"
 
+.. _logical_operators:
+
+Logical operators
+~~~~~~~~~~~~~~~~~
+
+Multiple conditions on columns are evaluated using ``AND`` by default, but you can combine them using ``OR`` with the ``or`` operator. For example, to return people under 18 **or** over 21:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /people?or=(age.lt.18,age.gt.21) HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/people?or=(age.lt.18,age.gt.21)"
+
+To **negate** any operator, you can prefix it with :code:`not` like :code:`?a=not.eq.2` or :code:`?not.and=(a.gte.0,a.lte.100)` .
+
+You can also apply complex logic to the conditions:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /people?grade=gte.90&student=is.true&or=(age.eq.14,not.and(age.gte.11,age.lte.17)) HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/people?grade=gte.90&student=is.true&or=(age.eq.14,not.and(age.gte.11,age.lte.17))"
+
 .. _fts:
 
 Full-Text Search
diff --git a/postgrest.dict b/postgrest.dict
index 684faa934..fba460fd9 100644
--- a/postgrest.dict
+++ b/postgrest.dict
@@ -27,7 +27,6 @@ Daemonizing
 DDL
 DevOps
 DiBiase
-disjoined
 dockerize
 DoS
 eq
diff --git a/releases/upcoming.rst b/releases/upcoming.rst
index 48446f113..2a958c7e2 100644
--- a/releases/upcoming.rst
+++ b/releases/upcoming.rst
@@ -42,6 +42,7 @@ Added
 
   + Added :ref:`nested_embedding` to the :ref:`resource_embedding` section.
   + Added the :ref:`templates` section to the :doc:`Ecosystem </ecosystem>`.
+  + Added the :ref:`logical_operators` section
 
 Fixed
 -----

From d12974339acec70abd0000100b5db23da856f660 Mon Sep 17 00:00:00 2001
From: Laurence Isla <lau.isla.c@gmail.com>
Date: Thu, 18 Nov 2021 17:34:51 -0500
Subject: [PATCH 450/652] Allow unknown for is operator

---
 api.rst               | 2 +-
 releases/upcoming.rst | 3 +++
 2 files changed, 4 insertions(+), 1 deletion(-)

diff --git a/api.rst b/api.rst
index 077a6665d..1feb1a60c 100644
--- a/api.rst
+++ b/api.rst
@@ -72,7 +72,7 @@ ilike         :code:`ILIKE`             ILIKE operator (use * in place of %)
 in            :code:`IN`                one of a list of values, e.g. :code:`?a=in.(1,2,3)`
                                         – also supports commas in quoted strings like
                                         :code:`?a=in.("hi,there","yes,you")`
-is            :code:`IS`                checking for exact equality (null,true,false)
+is            :code:`IS`                checking for exact equality (null,true,false,unknown)
 fts           :code:`@@`                :ref:`fts` using to_tsquery
 plfts         :code:`@@`                :ref:`fts` using plainto_tsquery
 phfts         :code:`@@`                :ref:`fts` using phraseto_tsquery
diff --git a/releases/upcoming.rst b/releases/upcoming.rst
index 2a958c7e2..9cbba9fe3 100644
--- a/releases/upcoming.rst
+++ b/releases/upcoming.rst
@@ -38,6 +38,9 @@ Added
 * Allow calling a function with a :ref:`single unnamed parameter <s_proc_single_unnamed>` to POST raw ``json/jsonb``, ``bytea`` or ``text``.
   |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
 
+* Allow specifying ``unknown`` for the ``is`` :ref:`operator <operators>`.
+  |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
+
 * Documentation improvements
 
   + Added :ref:`nested_embedding` to the :ref:`resource_embedding` section.

From c946f02607a080c88779d2c6fb3a59eec79b9255 Mon Sep 17 00:00:00 2001
From: Laurence Isla <vanquisher.laurence.02@gmail.com>
Date: Mon, 22 Nov 2021 14:43:24 -0500
Subject: [PATCH 451/652] Remove partitions from the schema cache

---
 api.rst               | 27 ++++++++-------------------
 releases/upcoming.rst |  6 ++++++
 2 files changed, 14 insertions(+), 19 deletions(-)

diff --git a/api.rst b/api.rst
index 1feb1a60c..a58d4356a 100644
--- a/api.rst
+++ b/api.rst
@@ -720,7 +720,7 @@ Use the Accept request header to specify the acceptable format (or formats) for
 
   .. code-tab:: bash Curl
 
-    curl "http://localhost:3000/people"
+    curl "http://localhost:3000/people" \
       -H "Accept: application/json"
 
 The current possibilities are:
@@ -757,7 +757,7 @@ This can be inconvenient for client code. To return the first result as an objec
 
   .. code-tab:: bash Curl
 
-    curl "http://localhost:3000/items?id=eq.1"
+    curl "http://localhost:3000/items?id=eq.1" \
       -H "Accept: application/vnd.pgrst.object+json"
 
 This returns
@@ -1084,20 +1084,9 @@ Since it contains the ``films_id`` foreign key, it is possible to embed ``box_of
 
     curl "http://localhost:3000/box_office?select=bo_date,gross_revenue,films(title)&gross_revenue=gte.1000000"
 
-Embedding is also possible between ``box_office`` partitions and the ``films`` table:
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /films?select=title,box_office_2021_02(bo_date,gross_revenue)&rating=gt.8 HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/films?select=title,box_office_2021_02(bo_date,gross_revenue)&rating=gt.8"
-
 .. note::
-  Partitioned tables can reference other tables since PostgreSQL 11 but can only be referenced from any other table since PostgreSQL 12.
+  * Partitioned tables can reference other tables since PostgreSQL 11 but can only be referenced from any other table since PostgreSQL 12.
+  * Embedding on partitions is not allowed because it leads to ambiguity errors (see :ref:`embed_disamb`) between them and their parent partitioned table. :ref:`custom_queries` can be used if this is needed.
 
 .. _embedding_views:
 
@@ -1600,8 +1589,8 @@ You can make an UPSERT with :code:`POST` and the :code:`Prefer: resolution=merge
 
   .. code-tab:: bash Curl
 
-    curl "http://localhost:3000OST /employees" \
-      -X POST -H "Content-Type: application/json"
+    curl "http://localhost:3000/employees" \
+      -X POST -H "Content-Type: application/json" \
       -H "Prefer: resolution=merge-duplicates" \
       -d @- << EOF
       [
@@ -1639,7 +1628,7 @@ By specifying the ``on_conflict`` query parameter, you can make UPSERT work on a
   .. code-tab:: bash Curl
 
     curl "http://localhost:3000/employees?on_conflict=name" \
-      -X POST -H "Content-Type: application/json"
+      -X POST -H "Content-Type: application/json" \
       -H "Prefer: resolution=merge-duplicates" \
       -d @- << EOF
       [
@@ -2042,7 +2031,7 @@ Repeating also works in POST requests with ``Content-Type: application/x-www-for
   .. code-tab:: bash Curl
 
     curl "http://localhost:3000/rpc/plus_one" \
-      -X POST -H "Content-Type: application/x-www-form-urlencoded"
+      -X POST -H "Content-Type: application/x-www-form-urlencoded" \
       -d 'v=1&v=2&v=3&v=4'
 
 Scalar functions
diff --git a/releases/upcoming.rst b/releases/upcoming.rst
index 9cbba9fe3..b62c2d63f 100644
--- a/releases/upcoming.rst
+++ b/releases/upcoming.rst
@@ -52,3 +52,9 @@ Fixed
 
 * Fix using single double quotes (``"``) and backslashes (``/``) as values on the "in" operator
   |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
+
+Changed
+-------
+
+* Partitions (created using ``PARTITION OF``) are no longer included in the :ref:`schema_cache`.
+  |br| -- `@laurenceisla <https://github.com/laurenceisla>`_

From 35d9b98bff9f177179c7d8911f1c6a80557192f0 Mon Sep 17 00:00:00 2001
From: Laurence Isla <lau.isla.c@gmail.com>
Date: Tue, 23 Nov 2021 22:12:29 -0500
Subject: [PATCH 452/652] Remove the db-embed-default-join config

---
 api.rst               | 61 +++++++++++++++++++++++++++++++------------
 configuration.rst     | 16 ------------
 releases/upcoming.rst |  8 ++----
 3 files changed, 46 insertions(+), 39 deletions(-)

diff --git a/api.rst b/api.rst
index a58d4356a..3529b3e19 100644
--- a/api.rst
+++ b/api.rst
@@ -475,9 +475,15 @@ If the value filtered by the ``in`` operator has a double quote (``"``), you can
 
 Here ``Quote:"`` and ``Backslash:\`` are percent-encoded values. Note that ``%5C`` is the percent-encoded backslash.
 
-.. code-block:: http
+.. tabs::
 
-  GET /marks?name=in.(%22Quote:%5C%22%22,%22Backslash:%5C%5C%22) HTTP/1.1
+  .. code-tab:: http
+
+    GET /marks?name=in.(%22Quote:%5C%22%22,%22Backslash:%5C%5C%22) HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/marks?name=in.(%22Quote:%5C%22%22,%22Backslash:%5C%5C%22)"
 
 .. note::
 
@@ -992,9 +998,15 @@ Top Level Filtering
 
 By default, embedded filters don't change the top level resource rows at all:
 
-.. code-block:: http
+.. tabs::
 
-  GET /films?select=title,actors(first_name,last_name)&actors.first_name=eq.Jehanne HTTP/1.1
+  .. code-tab:: http
+
+    GET /films?select=title,actors(first_name,last_name)&actors.first_name=eq.Jehanne HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/films?select=title,actors(first_name,last_name)&actors.first_name=eq.Jehanne
 
 .. code-block:: json
 
@@ -1020,9 +1032,15 @@ By default, embedded filters don't change the top level resource rows at all:
 
 In order to filter the top level rows you need to add ``!inner`` to the embedded resource. For instance, to get **only** the films that have an actor named ``Jehanne``:
 
-.. code-block:: http
+.. tabs::
 
-  GET /films?select=title,actors!inner(first_name,last_name)&actors.first_name=eq.Jehanne HTTP/1.1
+  .. code-tab:: http
+
+    GET /films?select=title,actors!inner(first_name,last_name)&actors.first_name=eq.Jehanne HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/films?select=title,actors!inner(first_name,last_name)&actors.first_name=eq.Jehanne"
 
 .. code-block:: json
 
@@ -1038,12 +1056,6 @@ In order to filter the top level rows you need to add ``!inner`` to the embedded
     }
   ]
 
-If you prefer to work with top level filtering as a default embedding behavior for PostgREST, set the :ref:`db-embed-default-join` configuration parameter to ``"inner"``. This way, you don't need to specify ``!inner`` on every request and, if you need the previous behavior, add ``!left`` to the embedding resource. For instance, this will not filter the films in any way:
-
-.. code-block:: http
-
-  GET /films?select=title,actors!left(first_name,last_name)&actors.first_name=eq.Jehanne HTTP/1.1
-
 .. _embedding_partitioned_tables:
 
 Embedding Partitioned Tables
@@ -1380,9 +1392,15 @@ Similarly to the **target**, the **hint** can be a **table name**, **foreign key
 
 Hints also work alongside ``!inner`` if a top level filtering is needed. From the above example:
 
-.. code-block:: http
+.. tabs::
 
-  GET /orders?select=*,central_addresses!billing_address!inner(*)&central_addresses.code="AB1000" HTTP/1.1
+  .. code-tab:: http
+
+    GET /orders?select=*,central_addresses!billing_address!inner(*)&central_addresses.code=AB1000 HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/orders?select=*,central_addresses!billing_address!inner(*)&central_addresses.code=AB1000"
 
 .. _insert_update:
 
@@ -1682,10 +1700,19 @@ To delete rows in a table, use the DELETE verb plus :ref:`h_filter`. For instanc
 
 Deletions also support :code:`Prefer: return=representation` plus :ref:`v_filter`.
 
-.. code-block:: HTTP
+.. tabs::
 
-  DELETE /user?id=eq.1 HTTP/1.1
-  Prefer: return=representation
+  .. code-tab:: http
+
+    DELETE /user?id=eq.1 HTTP/1.1
+    Prefer: return=representation
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/user?id=eq.1" -X DELETE \
+      -H "Prefer: return=representation"
+
+.. code-block:: json
 
   {"id": 1, "email": "johndoe@email.com"}
 
diff --git a/configuration.rst b/configuration.rst
index c3a38301d..2826e2d5d 100644
--- a/configuration.rst
+++ b/configuration.rst
@@ -50,7 +50,6 @@ db-channel-enabled       Boolean True
 db-prepared-statements   Boolean True
 db-tx-end                String  commit
 db-config                Boolean True
-db-embed-default-join    String  left
 db-use-legacy-gucs       Boolean True
 server-host              String  !4
 server-port              Int     3000
@@ -201,21 +200,6 @@ db-config
 
    Enables the in-database configuration.
 
-.. _db-embed-default-join:
-
-db-embed-default-join
----------------------
-
-  Determines the default embedding type between tables or views when none is specified in the request. For more info, see :ref:`embedding_top_level_filter`.
-
-  .. code:: bash
-
-    # Embeds using LEFT JOIN
-    db-embed-default-join = "left"
-
-    # Embeds using INNER JOIN
-    db-embed-default-join = "inner"
-
 .. _db-use-legacy-gucs:
 
 db-use-legacy-gucs
diff --git a/releases/upcoming.rst b/releases/upcoming.rst
index b62c2d63f..3f79dba41 100644
--- a/releases/upcoming.rst
+++ b/releases/upcoming.rst
@@ -14,12 +14,8 @@ Added
 * Allow :ref:`embedding <embedding_partitioned_tables>`, UPSERT, INSERT with Location response, OPTIONS request and OpenAPI support for partitioned tables.
   |br| -- `@laurenceisla <https://github.com/laurenceisla>`_
 
-* Allow filtering top-level resource based on embedded resources filters
-
-  + This is enabled by adding ``!inner`` to the embedded resource. See :ref:`embedding_top_level_filter`.
-  + This behavior can be enabled by default by setting the  :ref:`db-embed-default-join` to ``"inner"``.
-
-  -- `@steve-chavez <https://github.com/steve-chavez>`_
+* Allow filtering top-level resource based on embedded resources filters. This is enabled by adding ``!inner`` to the embedded resource. See :ref:`embedding_top_level_filter`.
+  |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
 
 * Make GUC names for headers, cookies and jwt claims compatible with PostgreSQL v14.
 

From 9eac683e5146b9dbc2c694cbc5444356ec238369 Mon Sep 17 00:00:00 2001
From: Wolfgang Walther <walther@technowledgy.de>
Date: Wed, 24 Nov 2021 16:04:55 +0100
Subject: [PATCH 453/652] Drop support for PG 9.5.

Related: https://github.com/PostgREST/postgrest/pull/2038
---
 api.rst     | 6 ------
 auth.rst    | 2 +-
 install.rst | 2 +-
 3 files changed, 2 insertions(+), 8 deletions(-)

diff --git a/api.rst b/api.rst
index 3529b3e19..31fcbb906 100644
--- a/api.rst
+++ b/api.rst
@@ -193,8 +193,6 @@ The :code:`fts` filter mentioned above has a number of options to support flexib
 
     curl "http://localhost:3000/tsearch?my_tsv=not.wfts(french).amusant"
 
-Using phrase search mode requires PostgreSQL of version at least 9.6 and will raise an error in earlier versions of the database.
-
 Using `websearch_to_tsquery` requires PostgreSQL of version at least 11.0 and will raise an error in earlier versions of the database.
 
 .. _v_filter:
@@ -1677,10 +1675,6 @@ A single row UPSERT can be done by using :code:`PUT` and filtering the primary k
 
 All the columns must be specified in the request body, including the primary key columns.
 
-.. note::
-
-  Upsert features are only available starting from PostgreSQL 9.5 since it uses the `ON CONFLICT clause <https://www.postgresql.org/docs/current/sql-insert.html#SQL-ON-CONFLICT>`_.
-
 .. _delete:
 
 Deletions
diff --git a/auth.rst b/auth.rst
index 8e3383cb0..0c8c50726 100644
--- a/auth.rst
+++ b/auth.rst
@@ -65,7 +65,7 @@ You can use row-level security to flexibly restrict visibility and access for th
 
 We want to enforce a policy that ensures a user can see only those messages sent by him or intended for him. Also we want to prevent a user from forging the message_from column with another person's name.
 
-PostgreSQL (9.5 and later) allows us to set this policy with row-level security:
+PostgreSQL allows us to set this policy with row-level security:
 
 .. code-block:: postgres
 
diff --git a/install.rst b/install.rst
index 2d789ad08..0a454835d 100644
--- a/install.rst
+++ b/install.rst
@@ -106,7 +106,7 @@ For a complete reference of the configuration file, see :ref:`configuration`.
 PostgreSQL dependency
 ---------------------
 
-To use PostgREST you will need an underlying database. We require PostgreSQL 9.5 or greater. You can use something like `Amazon RDS <https://aws.amazon.com/rds/>`_ but installing your own locally is cheaper and more convenient for development. You can also run PostgreSQL in a :ref:`docker container<pg-in-docker>`.
+To use PostgREST you will need an underlying database. We require PostgreSQL 9.6 or greater. You can use something like `Amazon RDS <https://aws.amazon.com/rds/>`_ but installing your own locally is cheaper and more convenient for development. You can also run PostgreSQL in a :ref:`docker container<pg-in-docker>`.
 
 Docker
 ======

From c46c3b7a860939e60cbdfaa8ef49fdeb490fc8e8 Mon Sep 17 00:00:00 2001
From: Laurence Isla <lau.isla.c@gmail.com>
Date: Mon, 29 Nov 2021 03:27:38 -0500
Subject: [PATCH 454/652] Bump to PostgREST v9 (#468)

* Add highlights and modify changelog structure

* Rename upcoming page to v9.0.0

* Classify features, edit breaking changes and fixes

* Highlight top-level filtering

* Clarify PostgreSQL 14 breaking change

* Add devops to doc improvements

* Add curl snippets to doc improvements
---
 admin.rst             |   2 +-
 api.rst               |  23 ++++++--
 ecosystem.rst         |   6 +-
 index.rst             |  11 +++-
 releases/upcoming.rst |  56 ------------------
 releases/v9.0.0.rst   | 130 ++++++++++++++++++++++++++++++++++++++++++
 6 files changed, 159 insertions(+), 69 deletions(-)
 delete mode 100644 releases/upcoming.rst
 create mode 100644 releases/v9.0.0.rst

diff --git a/admin.rst b/admin.rst
index d1352228a..054a31a39 100644
--- a/admin.rst
+++ b/admin.rst
@@ -207,7 +207,7 @@ Automatic Connection Recovery
 
 When PostgREST loses the connection to the database, it retries the connection using capped exponential backoff, with 32 seconds being the maximum backoff time.
 
-This retry behavior is triggered immediately after the connection is lost if :ref:`db-channel-enabled` is set to true (this is the default behavior), otherwise it will be activated once a request is made.
+This retry behavior is triggered immediately after the connection is lost if :ref:`db-channel-enabled` is set to true(the default), otherwise it will be activated once a request is made.
 
 To notify the client when the next reconnection attempt will be, PostgREST responds with ``503 Service Unavailable`` and the ``Retry-After: x`` header, where ``x`` is the number of seconds programmed for the next retry.
 
diff --git a/api.rst b/api.rst
index 31fcbb906..eb79826ab 100644
--- a/api.rst
+++ b/api.rst
@@ -910,6 +910,8 @@ If you want to embed through join tables but need more control on the intermedia
 
     curl "http://localhost:3000/actors?select=roles(character,films(title,year))"
 
+.. _embed_filters:
+
 Embedded Filters
 ----------------
 
@@ -991,10 +993,10 @@ The result will show the nested actors named Tom and order them by last name. Al
 
 .. _embedding_top_level_filter:
 
-Top Level Filtering
-~~~~~~~~~~~~~~~~~~~
+Embedding with Top-level Filtering
+----------------------------------
 
-By default, embedded filters don't change the top level resource rows at all:
+By default, :ref:`embed_filters` don't change the top-level resource(``films``) rows at all:
 
 .. tabs::
 
@@ -1095,8 +1097,9 @@ Since it contains the ``films_id`` foreign key, it is possible to embed ``box_of
     curl "http://localhost:3000/box_office?select=bo_date,gross_revenue,films(title)&gross_revenue=gte.1000000"
 
 .. note::
+  * Embedding on partitions is not allowed because it leads to ambiguity errors (see :ref:`embed_disamb`) between them and their parent partitioned table(more details at `#1783(comment) <https://github.com/PostgREST/postgrest/issues/1783#issuecomment-959823827>`_). :ref:`custom_queries` can be used if this is needed.
+
   * Partitioned tables can reference other tables since PostgreSQL 11 but can only be referenced from any other table since PostgreSQL 12.
-  * Embedding on partitions is not allowed because it leads to ambiguity errors (see :ref:`embed_disamb`) between them and their parent partitioned table. :ref:`custom_queries` can be used if this is needed.
 
 .. _embedding_views:
 
@@ -1255,6 +1258,8 @@ For doing resource embedding, PostgREST infers the relationship between two tabl
 However, in cases where there's more than one foreign key between two tables, it's not possible to infer the relationship unambiguously
 by just specifying the tables names.
 
+.. _target_disamb:
+
 Target Disambiguation
 ~~~~~~~~~~~~~~~~~~~~~
 
@@ -1281,6 +1286,8 @@ the request is ambiguous and PostgREST will respond with an error:
 
    HTTP/1.1 300 Multiple Choices
 
+   {..}
+
 If this happens, you need to disambiguate the request by adding precision to the **target**.
 Instead of the **table name**, you can specify the **foreign key constraint name** or the **column name** that is part of the foreign key.
 
@@ -1344,6 +1351,8 @@ the result more clear.
     }
    ]
 
+.. _hint_disamb:
+
 Hint Disambiguation
 ~~~~~~~~~~~~~~~~~~~
 
@@ -2430,8 +2439,10 @@ You can also select the schema for :ref:`s_procs` and :ref:`open-api`.
 
    These headers are based on the nascent "Content Negotiation by Profile" spec: https://www.w3.org/TR/dx-prof-conneg
 
-HTTP Logic
-==========
+.. _http_context:
+
+HTTP Context
+============
 
 .. _guc_req_headers_cookies_claims:
 
diff --git a/ecosystem.rst b/ecosystem.rst
index 787a8b75d..6d4aa68c1 100644
--- a/ecosystem.rst
+++ b/ecosystem.rst
@@ -28,7 +28,6 @@ Example Apps
 ------------
 
 * `chronicle <https://github.com/srid/chronicle>`_ - tracking a tree of personal memories
-* `cloudgov-demo-postgrest <https://github.com/GSA/cloudgov-demo-postgrest>`_ - demo for a federally-compliant REST API on cloud.gov
 * `code-du-travail-backoffice <https://github.com/SocialGouv/code-du-travail-backoffice>`_ - data administration portal for the official French Labor Code and Agreements
 * `delibrium-postgrest <https://gitlab.com/delibrium/delibrium-postgrest/>`_ - example school API and front-end in Vue.js
 * `elm-workshop <https://github.com/diogob/elm-workshop>`_ - building a simple database query UI
@@ -53,13 +52,14 @@ Example Apps
 * `PostGUI <https://github.com/priyank-purohit/PostGUI>`_ - React Material UI admin panel
 * `prospector <https://github.com/sfcta/prospector>`_ - data warehouse and visualization platform
 
-.. _dev_ops:
+.. _devops:
 
 DevOps
 ------
 
-* `jbkarle/postgrest <https://github.com/jbkarle/postgrest>`_ - helm chart with a demo database for development and test purposes
+* `cloudgov-demo-postgrest <https://github.com/GSA/cloudgov-demo-postgrest>`_ - demo for a federally-compliant REST API on cloud.gov
 * `cloudstark/helm-charts <https://github.com/cloudstark/helm-charts/tree/master/postgrest>`_ - helm chart to deploy PostgREST to a Kubernetes cluster via a Deployment and Service
+* `jbkarle/postgrest <https://github.com/jbkarle/postgrest>`_ - helm chart with a demo database for development and test purposes
 
 .. _eco_external_notification:
 
diff --git a/index.rst b/index.rst
index eb891698b..aa48aa9c9 100644
--- a/index.rst
+++ b/index.rst
@@ -94,12 +94,16 @@ The project has a friendly and growing community. Join our `chat room <https://g
 
 .. toctree::
    :glob:
-   :reversed:
    :caption: Release Notes
    :titlesonly:
    :hidden:
 
-   releases/*
+   v9.0.0 <releases/v9.0.0>
+   releases/v8.0.0
+   releases/v7.0.1
+   releases/v7.0.0
+   releases/v6.0.2
+   releases/v5.2.0
 
 Tutorials
 ---------
@@ -212,7 +216,7 @@ PostgREST has a growing ecosystem of examples, libraries, and experiments. Here
 * :ref:`community_tutorials`
 * :ref:`templates`
 * :ref:`eco_example_apps`
-* :ref:`dev_ops`
+* :ref:`devops`
 * :ref:`eco_external_notification`
 * :ref:`eco_extensions`
 * :ref:`clientside_libraries`
@@ -224,6 +228,7 @@ Release Notes
 Here we'll include the most relevant changes so you can migrate to newer versions easily.
 You can see the full changelog of each release in the `PostgREST repository <https://github.com/PostgREST/postgrest/releases>`_.
 
+- :doc:`releases/v9.0.0`
 - :doc:`releases/v8.0.0`
 - :doc:`releases/v7.0.0`
 - :doc:`releases/v6.0.2`
diff --git a/releases/upcoming.rst b/releases/upcoming.rst
deleted file mode 100644
index 3f79dba41..000000000
--- a/releases/upcoming.rst
+++ /dev/null
@@ -1,56 +0,0 @@
-.. |br| raw:: html
-
-   <br />
-
-Upcoming
-========
-
-These are changes yet unreleased. If you'd like to try them out before a new official release, access `the list of CI runs <https://github.com/PostgREST/postgrest/actions/workflows/ci.yaml?query=branch%3Amain>`_
-and select the newest commit, then download the build from the Artifacts section at the bottom of the page (you'll need a GitHub account to download it).
-
-Added
------
-
-* Allow :ref:`embedding <embedding_partitioned_tables>`, UPSERT, INSERT with Location response, OPTIONS request and OpenAPI support for partitioned tables.
-  |br| -- `@laurenceisla <https://github.com/laurenceisla>`_
-
-* Allow filtering top-level resource based on embedded resources filters. This is enabled by adding ``!inner`` to the embedded resource. See :ref:`embedding_top_level_filter`.
-  |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
-
-* Make GUC names for headers, cookies and jwt claims compatible with PostgreSQL v14.
-
-  + The GUC names on PostgreSQL 14 are changed to the ones :ref:`mentioned in this section <guc_req_headers_cookies_claims>`, while older versions still use the :ref:`guc_legacy_names`.
-  + PostgreSQL versions below 14 can opt in to the new JSON GUCs by setting the :ref:`db-use-legacy-gucs` config option to false (true by default).
-  + Managed to avoid a breaking change thanks to `@robertsosinski <https://github.com/robertsosinski>`_ who reported the bug that only one ``.`` character was allowed in GUC keys to the PostgreSQL team. See the `full discussion <https://www.postgresql.org/message-id/17045-6a4a9f0d1513f72b%40postgresql.org>`_.
-
-  -- `@laurenceisla <https://github.com/laurenceisla>`_
-
-* Allow escaping inside double quotes with a backslash, e.g. ``?col=in.("Double\"Quote")``, ``?col=in.("Back\\slash")``. See :ref:`reserved-chars`.
-  |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
-
-* Add ``Retry-After`` header when recovering the connection. See :ref:`automatic_recovery`.
-  |br| -- `@gautam1168 <https://github.com/gautam1168>`_
-
-* Allow calling a function with a :ref:`single unnamed parameter <s_proc_single_unnamed>` to POST raw ``json/jsonb``, ``bytea`` or ``text``.
-  |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
-
-* Allow specifying ``unknown`` for the ``is`` :ref:`operator <operators>`.
-  |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
-
-* Documentation improvements
-
-  + Added :ref:`nested_embedding` to the :ref:`resource_embedding` section.
-  + Added the :ref:`templates` section to the :doc:`Ecosystem </ecosystem>`.
-  + Added the :ref:`logical_operators` section
-
-Fixed
------
-
-* Fix using single double quotes (``"``) and backslashes (``/``) as values on the "in" operator
-  |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
-
-Changed
--------
-
-* Partitions (created using ``PARTITION OF``) are no longer included in the :ref:`schema_cache`.
-  |br| -- `@laurenceisla <https://github.com/laurenceisla>`_
diff --git a/releases/v9.0.0.rst b/releases/v9.0.0.rst
new file mode 100644
index 000000000..09187b46f
--- /dev/null
+++ b/releases/v9.0.0.rst
@@ -0,0 +1,130 @@
+
+PostgREST 9.0.0
+===============
+
+This major version is released with PostgreSQL 14 compatibility and is accompanied with new features and bug fixes. You can look at the detailed changelog and download the pre-compiled binaries on the `GitHub release page <https://github.com/PostgREST/postgrest/releases/tag/v9.0.0>`_.
+
+Features
+--------
+
+PostgreSQL 14 compatibility
+~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+PostgreSQL 14 Beta 1 tightened its GUC naming scheme making it impossible to use multiple dots (``.``) and dashes (``-``) on custom GUC parameters, this caused our `old HTTP Context <https://postgrest.org/en/v8.0/api.html#accessing-request-headers-cookies-and-jwt-claims>`_ to fail across all requests. Thankfully, `@robertsosinski <https://github.com/robertsosinski>`_ got the PostgreSQL team to reconsider allowing multiple dots in the GUC name, allowing us to avoid a major breaking change. You can see the full discussion `here <https://www.postgresql.org/message-id/17045-6a4a9f0d1513f72b%40postgresql.org>`_.
+
+Still, dashes cannot be used on PostgreSQL 14 custom GUC parameters, so we changed our HTTP Context :ref:`to namespace using a mix of dots and JSON <guc_req_headers_cookies_claims>`. On older PostgreSQL versions we still use the :ref:`guc_legacy_names`. If you wish to use the new JSON GUCs on these versions, set the :ref:`db-use-legacy-gucs` config option to false.
+
+Resource Embedding with Top-level Filtering
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+Historically, Resource Embedding was always done with a query that included the equivalent of a ``LEFT JOIN``, which meant you could not
+exclude any of the top-level resource rows. You can now use :ref:`embedding_top_level_filter` to do the equivalent of an ``INNER JOIN``, thus you can filter the top-level resource rows with any of the available operators.
+
+Partitioned Tables
+~~~~~~~~~~~~~~~~~~
+
+Partitioned tables now integrate with all the feature set. You can :ref:`embed partitioned tables <embedding_partitioned_tables>`, UPSERT, INSERT(with a correctly generated Location header) and make OPTIONS requests on them. They're also included in the generated OpenAPI.
+
+Functions(RPC)
+~~~~~~~~~~~~~~
+
+* Functions with a :ref:`single unnamed parameter <s_proc_single_unnamed>` can now be used to POST raw ``bytea``, ``text`` or ``json/jsonb``.
+
+Horizontal Filtering
+~~~~~~~~~~~~~~~~~~~~
+
+* The ``unknown`` value for three-valued logic can now be used on the ``is`` :ref:`operator <operators>`.
+
+* Escaping double quotes(``"``) in double-quoted surrounded strings is now possible by using backslashes, e.g. ``?col=in.("Double\"Quote")``. Backslashes can be escaped with a preceding backslash, e.g. ``?col=in.("Back\\slash")``. See :ref:`reserved-chars`.
+
+Administration
+~~~~~~~~~~~~~~
+
+* A ``Retry-After`` header is now added when PostgREST is doing :ref:`automatic_recovery`.
+
+Error messages
+~~~~~~~~~~~~~~
+
+* :ref:`embed_disamb` now shows an improved error message that includes relevant hints for clearing out the ambiguous embedding.
+
+Documentation improvements
+~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+* Added ``curl`` snippets to the :doc:`API <../api>` page.
+
+* Added the :ref:`automatic_recovery` section.
+
+* Added the :ref:`nested_embedding` section.
+
+* Added the :ref:`logical_operators` section.
+
+* Added the :ref:`templates` and :ref:`devops` sections to the :doc:`Ecosystem </ecosystem>`.
+
+Bug fixes
+---------
+
+* Correct RPC return type handling for RETURNS TABLE with a single column (`#1930 <https://github.com/PostgREST/postgrest/pull/1930>`_).
+
+* Schema Cache query failing with ``standard_conforming_strings = off`` (`#1992 <https://github.com/PostgREST/postgrest/issues/1992>`_).
+
+* OpenAPI missing default values for String types (`#1871 <https://github.com/PostgREST/postgrest/issues/1871>`_).
+
+Breaking changes
+----------------
+
+* Dropped support for PostgreSQL 9.5 as it already reached its end-of-life according to `PostgreSQL versioning policy <https://www.postgresql.org/support/versioning/>`_.
+
+* Partitions of a `partitioned table <https://www.postgresql.org/docs/current/ddl-partitioning.html#DDL-PARTITIONING-DECLARATIVE>`_ are no longer included in the :ref:`schema_cache`. This is so errors are not generated when doing resource embedding on partitioned tables.
+
+* Dropped support for doing :ref:`hint_disamb` using dots instead of exclamation marks, e.g. doing ``select=*,projects.client_id(*)`` instead of ``select=*,projects!client_id(*)``). Using dots was undocumented and deprecated back in `v6.0.2 <https://github.com/PostgREST/postgrest/releases/tag/v6.0.2>`_.
+
+Thanks
+------
+
+Big thanks from the `PostgREST team <https://github.com/orgs/PostgREST/people>`_ to our sponsors!
+
+.. container:: image-container
+
+  .. image:: ../_static/cybertec-new.png
+    :target: https://www.cybertec-postgresql.com/en/?utm_source=postgrest.org&utm_medium=referral&utm_campaign=postgrest
+    :width:  13em
+
+  .. image:: ../_static/2ndquadrant.png
+    :target: https://www.2ndquadrant.com/en/?utm_campaign=External%20Websites&utm_source=PostgREST&utm_medium=Logo
+    :width:  13em
+
+  .. image:: ../_static/retool.png
+    :target: https://retool.com/?utm_source=sponsor&utm_campaign=postgrest
+    :width:  13em
+
+  .. image:: ../_static/gnuhost.png
+    :target: https://gnuhost.eu/?utm_source=sponsor&utm_campaign=postgrest
+    :width:  13em
+
+  .. image:: ../_static/supabase.png
+    :target: https://supabase.io/?utm_source=postgrest%20backers&utm_medium=open%20source%20partner&utm_campaign=postgrest%20backers%20github&utm_term=homepage
+    :width:  13em
+
+  .. image:: ../_static/oblivious.jpg
+    :target: https://oblivious.ai/?utm_source=sponsor&utm_campaign=postgrest
+    :width:  13em
+
+* Evans Fernandes
+* `Jan Sommer <https://github.com/nerfpops>`_
+* `Franz Gusenbauer <https://www.igutech.at/>`_
+* `Daniel Babiak <https://github.com/dbabiak>`_
+* Tsingson Qin
+* Michel Pelletier
+* Jay Hannah
+* Robert Stolarz
+* Nicholas DiBiase
+* Christopher Reid
+* Nathan Bouscal
+* Daniel Rafaj
+* David Fenko
+* Remo Rechkemmer
+* Severin Ibarluzea
+* Tom Saleeba
+* Pawel Tyll
+
+If you like to join them please consider `supporting PostgREST development <https://github.com/PostgREST/postgrest#user-content-supporting-development>`_.

From d5fb73bf9bfce9707befd5895d08f8c10eb5bc4a Mon Sep 17 00:00:00 2001
From: Laurence Isla <lau.isla.c@gmail.com>
Date: Tue, 30 Nov 2021 16:09:21 -0500
Subject: [PATCH 455/652] Fix GUC names using the old syntax

---
 api.rst            | 2 +-
 auth.rst           | 2 +-
 tutorials/tut1.rst | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/api.rst b/api.rst
index eb79826ab..f5d5f796d 100644
--- a/api.rst
+++ b/api.rst
@@ -2523,7 +2523,7 @@ As an example, let's add some cache headers for all requests that come from an I
 
    create or replace function custom_headers() returns void as $$
    declare
-     user_agent text := current_setting('request.header.user-agent', true);
+     user_agent text := current_setting('request.headers', true)::json->>'user-agent';
    begin
      if user_agent similar to '%MSIE (6.0|7.0)%' then
        perform set_config('response.headers',
diff --git a/auth.rst b/auth.rst
index 0c8c50726..cb2928e8c 100644
--- a/auth.rst
+++ b/auth.rst
@@ -95,7 +95,7 @@ SQL code can access claims through GUC variables set by PostgREST per request. F
 
 .. code:: sql
 
-  current_setting('request.jwt.claim.email', true)
+  current_setting('request.jwt.claims', true)::json->>'email';
 
 This allows JWT generation services to include extra information and your database code to react to it. For instance the RLS example could be modified to use this current_setting rather than current_user. The second 'true' argument tells current_setting to return NULL if the setting is missing from the current configuration.
 
diff --git a/tutorials/tut1.rst b/tutorials/tut1.rst
index fa89591f3..ec288fc97 100644
--- a/tutorials/tut1.rst
+++ b/tutorials/tut1.rst
@@ -212,7 +212,7 @@ First make a new schema and add the function:
     language plpgsql
     as $$
   begin
-    if current_setting('request.jwt.claim.email', true) =
+    if current_setting('request.jwt.claims', true)::json->>'email' =
        'disgruntled@mycompany.com' then
       raise insufficient_privilege
         using hint = 'Nope, we are on to you';

From 1b24eb34ee6aaef5151c2dc8a84bc4d4a7bd2e93 Mon Sep 17 00:00:00 2001
From: Devin Stein <devstein@alumni.upenn.edu>
Date: Fri, 10 Dec 2021 15:08:51 -0800
Subject: [PATCH 456/652] Add missing = in log-level docs

---
 configuration.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/configuration.rst b/configuration.rst
index 2826e2d5d..3b76ea765 100644
--- a/configuration.rst
+++ b/configuration.rst
@@ -272,7 +272,7 @@ log-level
       log-level = "warn"
 
       # All the "warn" level events plus all requests (every status code) are logged
-      log-level  "info"
+      log-level = "info"
 
 
   Because currently there's no buffering for logging, the levels with minimal logging(``crit/error``) will increase throughput.

From 66e49f0ea20d645829fb4f7d4ac31fd625910a75 Mon Sep 17 00:00:00 2001
From: Laurence Isla <lau.isla.c@gmail.com>
Date: Thu, 23 Dec 2021 16:54:08 -0500
Subject: [PATCH 457/652] Update config.py version/release

---
 conf.py | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/conf.py b/conf.py
index be38720aa..f0390613d 100644
--- a/conf.py
+++ b/conf.py
@@ -57,9 +57,9 @@ copyright = u'2017, ' + author
 # built documents.
 #
 # The short X.Y version.
-version = u'8.0'
+version = u'9.0'
 # The full version, including alpha/beta/rc tags.
-release = u'8.0.0'
+release = u'9.0.0'
 
 # The language for content autogenerated by Sphinx. Refer to documentation
 # for a list of supported languages.

From 04e7020ae3c4be128a89f605d116978c09110836 Mon Sep 17 00:00:00 2001
From: Wolfgang Walther <walther@technowledgy.de>
Date: Fri, 24 Dec 2021 12:06:34 +0100
Subject: [PATCH 458/652] fix database-configuration ALTER ROLE example,
 resolves #481

---
 configuration.rst | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/configuration.rst b/configuration.rst
index 3b76ea765..4bccf0d8c 100644
--- a/configuration.rst
+++ b/configuration.rst
@@ -440,8 +440,8 @@ For example, you can configure :ref:`db-schema` and :ref:`jwt-secret` like this:
 
 .. code:: postgresql
 
-   ALTER ROLE authenticator SET pgrst.db_schema = "tenant1, tenant2, tenant3"
-   ALTER ROLE authenticator SET pgrst.jwt_secret = "REALLYREALLYREALLYREALLYVERYSAFE"
+   ALTER ROLE authenticator IN DATABASE <your_database_name> SET pgrst.db_schema = "tenant1, tenant2, tenant3"
+   ALTER ROLE authenticator IN DATABASE <your_database_name> SET pgrst.jwt_secret = "REALLYREALLYREALLYREALLYVERYSAFE"
 
 Note that underscores(``_``) need to be used instead of dashes(``-``) for the in-database config options.
 

From cfde95b0aad909d03183749d80e3a78206412dd6 Mon Sep 17 00:00:00 2001
From: Wolfgang Walther <walther@technowledgy.de>
Date: Sat, 1 Jan 2022 15:13:57 +0100
Subject: [PATCH 459/652] remove reference to heroku app.json in main repo

---
 install.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install.rst b/install.rst
index 0a454835d..6c410455e 100644
--- a/install.rst
+++ b/install.rst
@@ -259,7 +259,7 @@ Assuming you're making modifications locally and then pushing to GitHub, it's ea
 
 1. Create a new app on Heroku
 2. In Settings add the following buildpack :code:`https://github.com/PostgREST/postgrest-heroku`
-3. Add the require Config Vars in Heroku (see https://github.com/PostgREST/postgrest/blob/main/app.json for more details)
+3. Add the require Config Vars in Heroku
 4. Modify your ``postgrest.conf`` file as required to match your Config Vars in Heroku
 5. Create your :code:`Procfile` and add :code:`./env-to-config ./postgrest postgrest.conf`
 6. Push your changes to GitHub

From 01874108822aff4501f8f233d00fbc59e6d9f338 Mon Sep 17 00:00:00 2001
From: Wolfgang Walther <walther@technowledgy.de>
Date: Fri, 7 Jan 2022 20:30:25 +0100
Subject: [PATCH 460/652] remove dead link to v5 docs

---
 releases/v5.2.0.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/releases/v5.2.0.rst b/releases/v5.2.0.rst
index 7cc90611b..d32044526 100644
--- a/releases/v5.2.0.rst
+++ b/releases/v5.2.0.rst
@@ -1,7 +1,7 @@
 v5.2.0
 ======
 
-* `Explicit qualification <https://postgrest.org/en/v5.0/api.html#explicit-qualification>`_ introduced in ``v5.0`` is no longer necessary, this section will not be included from this version onwards.  A :ref:`db-extra-search-path` configuration parameter was introduced to avoid the need to explictly qualify database objects. If you install PostgreSQL extensions on the ``public`` schema, they'll work normally from now on.
+* Explicit qualification introduced in ``v5.0`` is no longer necessary, this section will not be included from this version onwards.  A :ref:`db-extra-search-path` configuration parameter was introduced to avoid the need to explictly qualify database objects. If you install PostgreSQL extensions on the ``public`` schema, they'll work normally from now on.
 
 * Now you can filter :ref:`tabs-cols-w-spaces`.
 

From 6c382c598511ba444506d4033ec03193898d6524 Mon Sep 17 00:00:00 2001
From: Wolfgang Walther <walther@technowledgy.de>
Date: Fri, 7 Jan 2022 21:40:32 +0100
Subject: [PATCH 461/652] replace permanently redirected URIs

---
 auth.rst            |  4 ++--
 ecosystem.rst       | 16 ++++++++--------
 index.rst           |  6 +++---
 releases/v8.0.0.rst |  2 +-
 releases/v9.0.0.rst |  4 ++--
 5 files changed, 16 insertions(+), 16 deletions(-)

diff --git a/auth.rst b/auth.rst
index cb2928e8c..9df91c78f 100644
--- a/auth.rst
+++ b/auth.rst
@@ -215,11 +215,11 @@ JWT from Auth0
 
 An external service like `Auth0 <https://auth0.com/>`_ can do the hard work transforming OAuth from Github, Twitter, Google etc into a JWT suitable for PostgREST. Auth0 can also handle email signup and password reset flows.
 
-To use Auth0, create `an application <https://auth0.com/docs/applications>`_ for your app and `an API <https://auth0.com/docs/authorization/apis>`_ for your PostgREST server. Auth0 supports both HS256 and RS256 scheme for the issued tokens for APIs. For simplicity, you may first try HS256 scheme while creating your API on Auth0. Your application should use your PostgREST API's `API identifier <https://auth0.com/docs/get-started/dashboard/api-settings>`_ by setting it with the `audience parameter <https://auth0.com/docs/tokens/access-tokens/get-access-tokens#control-access-token-audience>`_  during the authorization request. This will ensure that Auth0 will issue an access token for your PostgREST API. For PostgREST to verify the access token, you will need to set ``jwt-secret`` on PostgREST config file with your API's signing secret.
+To use Auth0, create `an application <https://auth0.com/docs/get-started/applications>`_ for your app and `an API <https://auth0.com/docs/get-started/apis>`_ for your PostgREST server. Auth0 supports both HS256 and RS256 scheme for the issued tokens for APIs. For simplicity, you may first try HS256 scheme while creating your API on Auth0. Your application should use your PostgREST API's `API identifier <https://auth0.com/docs/get-started/apis/api-settings>`_ by setting it with the `audience parameter <https://auth0.com/docs/secure/tokens/access-tokens/get-access-tokens#control-access-token-audience>`_  during the authorization request. This will ensure that Auth0 will issue an access token for your PostgREST API. For PostgREST to verify the access token, you will need to set ``jwt-secret`` on PostgREST config file with your API's signing secret.
 
 .. note::
 
-  Our code requires a database role in the JWT. To add it you need to save the database role in Auth0 `app metadata <https://auth0.com/docs/users/metadata/manage-metadata-rules>`_. Then, you will need to write `a rule <https://auth0.com/docs/rules>`_ that will extract the role from the user's app_metadata and set it as a `custom claim <https://auth0.com/docs/scopes/sample-use-cases-scopes-and-claims#add-custom-claims-to-a-token>`_ in the access token. Note that, you may use Auth0's `core authorization feature <https://auth0.com/docs/authorization/rbac>`_ for more complex use cases. Metadata solution is mentioned here for simplicity.
+  Our code requires a database role in the JWT. To add it you need to save the database role in Auth0 `app metadata <https://auth0.com/docs/manage-users/user-accounts/metadata/manage-metadata-rules>`_. Then, you will need to write `a rule <https://auth0.com/docs/customize/rules>`_ that will extract the role from the user's app_metadata and set it as a `custom claim <https://auth0.com/docs/get-started/apis/scopes/sample-use-cases-scopes-and-claims#add-custom-claims-to-a-token>`_ in the access token. Note that, you may use Auth0's `core authorization feature <https://auth0.com/docs/manage-users/access-control/rbac>`_ for more complex use cases. Metadata solution is mentioned here for simplicity.
 
   .. code:: javascript
 
diff --git a/ecosystem.rst b/ecosystem.rst
index 6d4aa68c1..883db8bc0 100644
--- a/ecosystem.rst
+++ b/ecosystem.rst
@@ -105,20 +105,20 @@ Client-Side Libraries
 * `mithril-postgrest <https://github.com/catarse/mithril-postgrest>`_ - JS, Mithril
 * `ng-postgrest <https://github.com/team142/ng-postgrest>`_ - Angular app for browsing, editing data exposed over PostgREST.
 * `postgrest-client <https://github.com/calebmer/postgrest-client>`_ - JS
-* `postgrest-csharp <https://github.com/supabase/postgrest-csharp>`_ - C#
-* `postgrest-dart <https://github.com/supabase/postgrest-dart>`_ - Dart
+* `postgrest-csharp <https://github.com/supabase-community/postgrest-csharp>`_ - C#
+* `postgrest-dart <https://github.com/supabase-community/postgrest-dart>`_ - Dart
 * `postgrest-ex <https://github.com/J0/postgrest-ex>`_ - Elixir
-* `postgrest-go <https://github.com/supabase/postgrest-go>`_ - Go
+* `postgrest-go <https://github.com/supabase-community/postgrest-go>`_ - Go
 * `postgrest-js <https://github.com/supabase/postgrest-js>`_ - TypeScript/JavaScript
-* `postgrest-kt <https://github.com/supabase/postgrest-kt>`_ - Kotlin
-* `postgrest-py <https://github.com/supabase/postgrest-py>`_ - Python
+* `postgrest-kt <https://github.com/supabase-community/postgrest-kt>`_ - Kotlin
+* `postgrest-py <https://github.com/supabase-community/postgrest-py>`_ - Python
 * `postgrest-request <https://github.com/lewisjared/postgrest-request>`_ - JS, SuperAgent
-* `postgrest-rs <https://github.com/supabase/postgrest-rs>`_ - Rust
+* `postgrest-rs <https://github.com/supabase-community/postgrest-rs>`_ - Rust
 * `postgrest-sharp-client <https://github.com/thejettdurham/postgrest-sharp-client>`_ (needs maintainer) - C#, RestSharp
-* `postgrest-swift <https://github.com/supabase/postgrest-kt>`_ - Swift
+* `postgrest-swift <https://github.com/supabase-community/postgrest-kt>`_ - Swift
 * `postgrest-url <https://github.com/hugomrdias/postgrest-url>`_ - JS, just for generating query URLs
 * `postgrest_python_requests_client <https://github.com/davidthewatson/postgrest_python_requests_client>`_ - Python
-* `postgrester <https://github.com/SocialGouv/postgrester>`_ - JS + Typescript
+* `postgrester <https://github.com/ivangabriele/postgrester>`_ - JS + Typescript
 * `postgrestR <https://github.com/clesiemo3/postgrestR>`_ - R
 * `py-postgrest <https://github.com/Kong/py-postgrest>`_ - Python
 * `redux-postgrest <https://github.com/andytango/redux-postgrest>`_ - TypeScript/JS, client integrated with (React) Redux.
diff --git a/index.rst b/index.rst
index aa48aa9c9..3d522585d 100644
--- a/index.rst
+++ b/index.rst
@@ -51,7 +51,7 @@ Sponsors
     :width:  13em
 
   .. image:: _static/supabase.png
-    :target: https://supabase.io/?utm_source=postgrest%20backers&utm_medium=open%20source%20partner&utm_campaign=postgrest%20backers%20github&utm_term=homepage
+    :target: https://supabase.com/?utm_source=postgrest%20backers&utm_medium=open%20source%20partner&utm_campaign=postgrest%20backers%20github&utm_term=homepage
     :width:  13em
 
   .. image:: _static/oblivious.jpg
@@ -243,7 +243,7 @@ Here are some companies that use PostgREST in production.
 * `Datrium <https://www.datrium.com>`_
 * `Drip Depot <https://www.dripdepot.com>`_
 * `Image-charts <https://www.image-charts.com>`_
-* `Moat <https://moat.com>`_
+* `Moat <https://www.moat.com>`_
 * `MotionDynamic - Fast highly dynamic video generation at scale <https://motiondynamic.tech>`_
 * `Netwo <https://www.netwo.io>`_
 * `Nimbus <https://www.nimbusforwork.com>`_
@@ -251,7 +251,7 @@ Here are some companies that use PostgREST in production.
 * `OpenBooking <https://www.openbooking.ch>`_
 * `Redsmin <https://www.redsmin.com>`_
 * `Sompani <https://www.sompani.com>`_
-* `Supabase <https://supabase.io>`_
+* `Supabase <https://supabase.com>`_
 
 .. Certs are failing
   * `eGull <http://www.egull.co>`_
diff --git a/releases/v8.0.0.rst b/releases/v8.0.0.rst
index a02a20f69..7cdc36c58 100644
--- a/releases/v8.0.0.rst
+++ b/releases/v8.0.0.rst
@@ -163,7 +163,7 @@ Big thanks from the `PostgREST team <https://github.com/orgs/PostgREST/people>`_
     :width:  13em
 
   .. image:: ../_static/supabase.png
-    :target: https://supabase.io/?utm_source=postgrest%20backers&utm_medium=open%20source%20partner&utm_campaign=postgrest%20backers%20github&utm_term=homepage
+    :target: https://supabase.com/?utm_source=postgrest%20backers&utm_medium=open%20source%20partner&utm_campaign=postgrest%20backers%20github&utm_term=homepage
     :width:  13em
 
   .. image:: ../_static/oblivious.jpg
diff --git a/releases/v9.0.0.rst b/releases/v9.0.0.rst
index 09187b46f..7843f2403 100644
--- a/releases/v9.0.0.rst
+++ b/releases/v9.0.0.rst
@@ -63,7 +63,7 @@ Documentation improvements
 Bug fixes
 ---------
 
-* Correct RPC return type handling for RETURNS TABLE with a single column (`#1930 <https://github.com/PostgREST/postgrest/pull/1930>`_).
+* Correct RPC return type handling for RETURNS TABLE with a single column (`#1930 <https://github.com/PostgREST/postgrest/issues/1930>`_).
 
 * Schema Cache query failing with ``standard_conforming_strings = off`` (`#1992 <https://github.com/PostgREST/postgrest/issues/1992>`_).
 
@@ -102,7 +102,7 @@ Big thanks from the `PostgREST team <https://github.com/orgs/PostgREST/people>`_
     :width:  13em
 
   .. image:: ../_static/supabase.png
-    :target: https://supabase.io/?utm_source=postgrest%20backers&utm_medium=open%20source%20partner&utm_campaign=postgrest%20backers%20github&utm_term=homepage
+    :target: https://supabase.com/?utm_source=postgrest%20backers&utm_medium=open%20source%20partner&utm_campaign=postgrest%20backers%20github&utm_term=homepage
     :width:  13em
 
   .. image:: ../_static/oblivious.jpg

From 62726ddcfdd4835745d798ffcf082e2a3dca4364 Mon Sep 17 00:00:00 2001
From: Wolfgang Walther <walther@technowledgy.de>
Date: Fri, 7 Jan 2022 21:45:48 +0100
Subject: [PATCH 462/652] force colored output in build and linkcheck tools

---
 default.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/default.nix b/default.nix
index 40db65825..651046e36 100644
--- a/default.nix
+++ b/default.nix
@@ -31,7 +31,7 @@ in
         # clean previous build, otherwise some errors might be supressed
         rm -rf _build
 
-        ${python}/bin/sphinx-build -W -b html -a -n . _build
+        ${python}/bin/sphinx-build --color -W -b html -a -n . _build
       '';
 
   serve =
@@ -81,6 +81,6 @@ in
       ''
         set -euo pipefail
 
-        ${python}/bin/sphinx-build -b linkcheck . _build
+        ${python}/bin/sphinx-build --color -b linkcheck . _build
       '';
 }

From 540ef4ad9f5f5242c86ddafa4b5f7e837636a9be Mon Sep 17 00:00:00 2001
From: Wolfgang Walther <walther@technowledgy.de>
Date: Fri, 7 Jan 2022 20:17:18 +0100
Subject: [PATCH 463/652] Update configuration page

---
 admin.rst                                     |   2 +-
 api.rst                                       |  14 +-
 auth.rst                                      |   6 +-
 configuration.rst                             | 879 ++++++++++--------
 .../embedding-table-from-another-schema.rst   |   2 +-
 postgrest.dict                                |   1 +
 releases/v7.0.0.rst                           |   2 +-
 tutorials/tut0.rst                            |   2 +-
 tutorials/tut1.rst                            |   2 +-
 9 files changed, 527 insertions(+), 383 deletions(-)

diff --git a/admin.rst b/admin.rst
index 054a31a39..6f906363f 100644
--- a/admin.rst
+++ b/admin.rst
@@ -266,7 +266,7 @@ First, create postgrest configuration in ``/etc/postgrest/config``
 .. code-block:: ini
 
   db-uri = "postgres://<your_user>:<your_password>@localhost:5432/<your_db>"
-  db-schema = "<your_exposed_schema>"
+  db-schemas = "<your_exposed_schema>"
   db-anon-role = "<your_anon_role>"
   db-pool = 10
 
diff --git a/api.rst b/api.rst
index f5d5f796d..2e39e0178 100644
--- a/api.rst
+++ b/api.rst
@@ -396,7 +396,7 @@ As mentioned, computed columns do not appear in the output by default. However y
 
 .. important::
 
-  Computed columns must be created under the :ref:`exposed schema <db-schema>` to be used in this way.
+  Computed columns must be created under the :ref:`exposed schema <db-schemas>` to be used in this way.
 
 Unicode support
 ---------------
@@ -666,9 +666,9 @@ In general, when having smaller row-counts, the estimated count should be as clo
 
 To help with these cases, PostgREST can get the exact count up until a threshold and get the planned count when
 that threshold is surpassed. To use this behavior, you can specify the ``Prefer: count=estimated`` header. The **threshold** is
-defined by :ref:`max-rows`.
+defined by :ref:`db-max-rows`.
 
-Here's an example. Suppose we set ``max-rows=1000`` and ``smalltable`` has 321 rows, then we'll get the exact count:
+Here's an example. Suppose we set ``db-max-rows=1000`` and ``smalltable`` has 321 rows, then we'll get the exact count:
 
 .. tabs::
 
@@ -1156,7 +1156,7 @@ It's also possible to embed `Materialized Views <https://www.postgresql.org/docs
 Embedding Chains of Views
 -------------------------
 
-Views can also depend on other views, which in turn depend on the actual source table. For PostgREST to pick up those chains recursively to any depth, all the views must be in the search path, so either in the exposed schema (:ref:`db-schema`) or in one of the schemas set in :ref:`db-extra-search-path`. This does not apply to the source table, which could be in a private schema as well. See :ref:`schema_isolation` for more details.
+Views can also depend on other views, which in turn depend on the actual source table. For PostgREST to pick up those chains recursively to any depth, all the views must be in the search path, so either in the exposed schema (:ref:`db-schemas`) or in one of the schemas set in :ref:`db-extra-search-path`. This does not apply to the source table, which could be in a private schema as well. See :ref:`schema_isolation` for more details.
 
 .. _s_proc_embed:
 
@@ -2399,7 +2399,7 @@ PostgREST sets highly permissive cross origin resource sharing, that is why it a
 Switching Schemas
 =================
 
-You can switch schemas at runtime with the ``Accept-Profile`` and ``Content-Profile`` headers. You can only switch to a schema that is included in :ref:`db-schema`.
+You can switch schemas at runtime with the ``Accept-Profile`` and ``Content-Profile`` headers. You can only switch to a schema that is included in :ref:`db-schemas`.
 
 For GET or HEAD, the schema to be used can be selected through the ``Accept-Profile`` header:
 
@@ -2516,7 +2516,7 @@ Notice that the variable should be set to an *array* of single-key objects rathe
 Setting headers via pre-request
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
-By using a :ref:`pre-request` function, you can add headers to GET/POST/PATCH/PUT/DELETE responses.
+By using a :ref:`db-pre-request` function, you can add headers to GET/POST/PATCH/PUT/DELETE responses.
 As an example, let's add some cache headers for all requests that come from an Internet Explorer(6 or 7) browser.
 
 .. code-block:: postgresql
@@ -2532,7 +2532,7 @@ As an example, let's add some cache headers for all requests that come from an I
    end; $$ language plpgsql;
 
    -- set this function on postgrest.conf
-   -- pre-request = custom_headers
+   -- db-pre-request = custom_headers
 
 Now when you make a GET request to a table or view, you'll get the cache headers.
 
diff --git a/auth.rst b/auth.rst
index 9df91c78f..892f73f77 100644
--- a/auth.rst
+++ b/auth.rst
@@ -122,13 +122,13 @@ You can mix the group and individual role policies. For instance we could still
 Custom Validation
 -----------------
 
-PostgREST honors the :code:`exp` claim for token expiration, rejecting expired tokens. However it does not enforce any extra constraints. An example of an extra constraint would be to immediately revoke access for a certain user. The configuration file parameter :code:`pre-request` specifies a stored procedure to call immediately after the authenticator switches into a new role and before the main query itself runs.
+PostgREST honors the :code:`exp` claim for token expiration, rejecting expired tokens. However it does not enforce any extra constraints. An example of an extra constraint would be to immediately revoke access for a certain user. The configuration file parameter :code:`db-pre-request` specifies a stored procedure to call immediately after the authenticator switches into a new role and before the main query itself runs.
 
 Here's an example. In the config file specify a stored procedure:
 
 .. code:: ini
 
-  pre-request = "public.check_user"
+  db-pre-request = "public.check_user"
 
 In the function you can run arbitrary code to check the request and raise an exception to block it if desired.
 
@@ -226,7 +226,7 @@ To use Auth0, create `an application <https://auth0.com/docs/get-started/applica
     function (user, context, callback) {
 
       // Follow the documentations at
-      // https://postgrest.org/en/latest/configuration.html#role-claim-key
+      // https://postgrest.org/en/latest/configuration.html#db-role-claim-key
       // to set a custom role claim on PostgREST
       // and use it as custom claim attribute in this rule
       const myRoleClaim = 'https://myapp.com/role';
diff --git a/configuration.rst b/configuration.rst
index 4bccf0d8c..1215d9a3d 100644
--- a/configuration.rst
+++ b/configuration.rst
@@ -24,7 +24,7 @@ The configuration file must contain a set of key value pairs. At minimum you mus
   db-uri       = "postgres://user:pass@host:5432/dbname"
 
   # The name of which database schema to expose to REST clients
-  db-schema    = "api"
+  db-schemas   = "api"
 
   # The database role to use when no client authentication is provided.
   # Can (and should) differ from user in db-uri
@@ -32,370 +32,6 @@ The configuration file must contain a set of key value pairs. At minimum you mus
 
 The user specified in the db-uri is also known as the authenticator role. For more information about the anonymous vs authenticator roles see the :ref:`roles`.
 
-.. _config_full_list:
-
-Here is the full list of configuration parameters.
-
-======================== ======= ================= ========
-Name                     Type    Default           Required
-======================== ======= ================= ========
-db-uri                   String                    Y
-db-schema                String                    Y
-db-anon-role             String                    Y
-db-pool                  Int     10
-db-pool-timeout          Int     10
-db-extra-search-path     String  public
-db-channel               String  pgrst
-db-channel-enabled       Boolean True
-db-prepared-statements   Boolean True
-db-tx-end                String  commit
-db-config                Boolean True
-db-use-legacy-gucs       Boolean True
-server-host              String  !4
-server-port              Int     3000
-server-unix-socket       String
-server-unix-socket-mode  String  660
-log-level                String  error
-openapi-mode             String  follow-privileges
-openapi-server-proxy-uri String
-jwt-secret               String
-jwt-aud                  String
-secret-is-base64         Boolean False
-max-rows                 Int     ∞
-pre-request              String
-app.settings.*           String
-role-claim-key           String  .role
-raw-media-types          String
-======================== ======= ================= ========
-
-.. _db-uri:
-
-db-uri
-------
-
-  The standard connection PostgreSQL `URI format <https://www.postgresql.org/docs/current/libpq-connect.html#LIBPQ-CONNSTRING>`_. Symbols and unusual characters in the password or other fields should be percent encoded to avoid a parse error. If enforcing an SSL connection to the database is required you can use `sslmode <https://www.postgresql.org/docs/current/libpq-ssl.html#LIBPQ-SSL-SSLMODE-STATEMENTS>`_ in the URI, for example ``postgres://user:pass@host:5432/dbname?sslmode=require``.
-
-  When running PostgREST on the same machine as PostgreSQL, it is also possible to connect to the database using a `Unix socket <https://en.wikipedia.org/wiki/Unix_domain_socket>`_ and the `Peer Authentication method <https://www.postgresql.org/docs/current/auth-peer.html>`_ as an alternative to TCP/IP communication and authentication with a password, this also grants higher performance.  To do this you can omit the host and the password, e.g. ``postgres://user@/dbname``, see the `libpq connection string <https://www.postgresql.org/docs/current/libpq-connect.html#LIBPQ-CONNSTRING>`_ documentation for more details.
-
-  On older systems like Centos 6, with older versions of libpq, a different db-uri syntax has to be used. In this case the URI is a string of space separated key-value pairs (key=value), so the example above would be :code:`"host=host user=user port=5432 dbname=dbname password=pass"`.
-
-  Choosing a value for this parameter beginning with the at sign such as ``@filename`` (e.g. ``@./configs/my-config``) loads the secret out of an external file.
-
-
-.. _db-schema:
-
-db-schema
----------
-
-  The database schema to expose to REST clients. Tables, views and stored procedures in this schema will get API endpoints.
-
-  .. code:: bash
-
-     db-schema = "api"
-
-  This schema gets added to the `search_path <https://www.postgresql.org/docs/current/ddl-schemas.html#DDL-SCHEMAS-PATH>`_ of every request.
-
-List of schemas
-~~~~~~~~~~~~~~~
-
-  You can also specify a list of schemas that can be used for **schema-based multitenancy** and **api versioning** by :ref:`multiple-schemas`. Example:
-
-  .. code:: bash
-
-     db-schema = "tenant1, tenant2"
-
-  If you don't :ref:`Switch Schemas <multiple-schemas>`, the first schema in the list(``tenant1`` in this case) is chosen as the default schema.
-
-  *Only the chosen schema* gets added to the `search_path <https://www.postgresql.org/docs/current/ddl-schemas.html#DDL-SCHEMAS-PATH>`_ of every request.
-
-  .. warning::
-
-     Never expose private schemas in this way. See :ref:`schema_isolation`.
-
-.. _db-anon-role:
-
-db-anon-role
-------------
-
-  The database role to use when executing commands on behalf of unauthenticated clients. For more information, see :ref:`roles`.
-
-.. _db-pool:
-
-db-pool
--------
-
-  Number of connections to keep open in PostgREST's database pool. Having enough here for the maximum expected simultaneous client connections can improve performance. Note it's pointless to set this higher than the :code:`max_connections` GUC in your database.
-
-.. _db-pool-timeout:
-
-db-pool-timeout
----------------
-
-   Time to live, in seconds, for an idle database pool connection. If the timeout is reached the connection will be closed.
-   Once a new request arrives a new connection will be started.
-
-.. _db-extra-search-path:
-
-db-extra-search-path
---------------------
-
-  Extra schemas to add to the `search_path <https://www.postgresql.org/docs/current/ddl-schemas.html#DDL-SCHEMAS-PATH>`_ of every request. These schemas tables, views and stored procedures **don't get API endpoints**, they can only be referred from the database objects inside your :ref:`db-schema`.
-
-  This parameter was meant to make it easier to use **PostgreSQL extensions** (like PostGIS) that are outside of the :ref:`db-schema`.
-
-  Multiple schemas can be added in a comma-separated string, e.g. ``public, extensions``.
-
-.. _db-channel:
-
-db-channel
-----------
-
-  The name of the notification channel that PostgREST uses for :ref:`schema_reloading` and configuration reloading.
-
-.. _db-channel-enabled:
-
-db-channel-enabled
-------------------
-
-  When this is set to :code:`true`, the notification channel specified in :ref:`db-channel` is enabled.
-
-  You should set this to ``false`` when using PostgresSQL behind an external connection pooler such as PgBouncer working in transaction pooling mode. See :ref:`this section <external_connection_poolers>` for more information.
-
-.. _db-prepared-statements:
-
-db-prepared-statements
-----------------------
-
-  Enables or disables prepared statements.
-
-  When disabled, the generated queries will be parameterized (invulnerable to SQL injection) but they will not be prepared (cached in the database session). Not using prepared statements will noticeably decrease performance, so it's recommended to always have this setting enabled.
-
-  You should only set this to ``false`` when using PostgresSQL behind an external connection pooler such as PgBouncer working in transaction pooling mode. See :ref:`this section <external_connection_poolers>` for more information.
-
-.. _db-tx-end:
-
-db-tx-end
----------
-
-  Specifies how to terminate the database transactions.
-
-  .. code:: bash
-
-    # The transaction is always committed
-    db-tx-end = "commit"
-
-    # The transaction is committed unless a "Prefer: tx=rollback" header is sent
-    db-tx-end = "commit-allow-override"
-
-    # The transaction is always rolled back
-    db-tx-end = "rollback"
-
-    # The transaction is rolled back unless a "Prefer: tx=commit" header is sent
-    db-tx-end = "rollback-allow-override"
-
-.. _db-config:
-
-db-config
----------
-
-   Enables the in-database configuration.
-
-.. _db-use-legacy-gucs:
-
-db-use-legacy-gucs
-------------------
-
-  Determine if GUC request settings for headers, cookies and jwt claims use the `legacy names <https://postgrest.org/en/v8.0/api.html#accessing-request-headers-cookies-and-jwt-claims>`_ (string with dashes, invalid starting from PostgreSQL v14) with text values instead of the :ref:`new names <guc_req_headers_cookies_claims>` (string without dashes, valid on all PostgreSQL versions) with json values.
-
-  On PostgreSQL versions 14 and above, this parameter is ignored.
-
-.. _server-host:
-
-server-host
------------
-
-  Where to bind the PostgREST web server. In addition to the usual address options, PostgREST interprets these reserved addresses with special meanings:
-
-  * :code:`*` - any IPv4 or IPv6 hostname
-  * :code:`*4` - any IPv4 or IPv6 hostname, IPv4 preferred
-  * :code:`!4` - any IPv4 hostname
-  * :code:`*6` - any IPv4 or IPv6 hostname, IPv6 preferred
-  * :code:`!6` - any IPv6 hostname
-
-.. _server-port:
-
-server-port
------------
-
-  The TCP port to bind the web server.
-
-.. _server-unix-socket:
-
-server-unix-socket
-------------------
-
-  `Unix domain socket <https://en.wikipedia.org/wiki/Unix_domain_socket>`_ where to bind the PostgREST web server.
-  If specified, this takes precedence over :ref:`server-port`. Example:
-
-  .. code:: bash
-
-    server-unix-socket = "/tmp/pgrst.sock"
-
-.. _server-unix-socket-mode:
-
-server-unix-socket-mode
------------------------
-
-  `Unix file mode <https://en.wikipedia.org/wiki/File_system_permissions>`_ to be set for the socket specified in :ref:`server-unix-socket`
-  Needs to be a valid octal between 600 and 777.
-
-  .. code:: bash
-
-    server-unix-socket-mode = "660"
-
-.. _log-level:
-
-log-level
----------
-
-  Specifies the level of information to be logged while running PostgREST.
-
-  .. code:: bash
-
-      # Only startup and db connection recovery messages are logged
-      log-level = "crit"
-
-      # All the "crit" level events plus server errors (status 5xx) are logged
-      log-level = "error"
-
-      # All the "error" level events plus request errors (status 4xx) are logged
-      log-level = "warn"
-
-      # All the "warn" level events plus all requests (every status code) are logged
-      log-level = "info"
-
-
-  Because currently there's no buffering for logging, the levels with minimal logging(``crit/error``) will increase throughput.
-
-.. _openapi-mode:
-
-openapi-mode
-------------
-
-  Specifies how the OpenAPI output should be displayed.
-
-  .. code:: bash
-
-    # Follows the privileges of the JWT role claim (or from db-anon-role if the JWT is not sent)
-    # Shows information depending on the permissions that the role making the request has
-    openapi-mode = "follow-privileges"
-
-    # Ignores the privileges of the JWT role claim (or from db-anon-role if the JWT is not sent)
-    # Shows all the exposed information, regardless of the permissions that the role making the request has
-    openapi-mode = "ignore-privileges"
-
-    # Disables the OpenApi output altogether.
-    # Throws a `404 Not Found` error when accessing the API root path
-    openapi-mode = "disabled"
-
-.. _openapi-server-proxy-uri:
-
-openapi-server-proxy-uri
-------------------------
-
-  Overrides the base URL used within the OpenAPI self-documentation hosted at the API root path. Use a complete URI syntax :code:`scheme:[//[user:password@]host[:port]][/]path[?query][#fragment]`. Ex. :code:`https://postgrest.com`
-
-  .. code:: json
-
-    {
-      "swagger": "2.0",
-      "info": {
-        "version": "0.4.3.0",
-        "title": "PostgREST API",
-        "description": "This is a dynamic API generated by PostgREST"
-      },
-      "host": "postgrest.com:443",
-      "basePath": "/",
-      "schemes": [
-        "https"
-      ]
-    }
-
-.. _jwt-secret:
-
-jwt-secret
-----------
-
-  The secret or `JSON Web Key (JWK) (or set) <https://datatracker.ietf.org/doc/html/rfc7517>`_ used to decode JWT tokens clients provide for authentication. For security the key must be **at least 32 characters long**. If this parameter is not specified then PostgREST refuses authentication requests. Choosing a value for this parameter beginning with the at sign such as :code:`@filename` loads the secret out of an external file. This is useful for automating deployments. Note that any binary secrets must be base64 encoded. Both symmetric and asymmetric cryptography are supported. For more info see :ref:`asym_keys`.
-
-.. _jwt-aud:
-
-jwt-aud
--------
-
-  Specifies the `JWT audience claim <https://datatracker.ietf.org/doc/html/rfc7519#section-4.1.3>`_. If this claim is present in the client provided JWT then you must set this to the same value as in the JWT, otherwise verifying the JWT will fail.
-
-.. _secret-is-base64:
-
-secret-is-base64
-----------------
-
-  When this is set to :code:`true`, the value derived from :code:`jwt-secret` will be treated as a base64 encoded secret.
-
-.. _max-rows:
-
-max-rows
---------
-
-  A hard limit to the number of rows PostgREST will fetch from a view, table, or stored procedure. Limits payload size for accidental or malicious requests.
-
-.. _pre-request:
-
-pre-request
------------
-
-  A schema-qualified stored procedure name to call right after switching roles for a client request. This provides an opportunity to modify SQL variables or raise an exception to prevent the request from completing.
-
-.. _app.settings.*:
-
-app.settings.*
---------------
-
-  Arbitrary settings that can be used to pass in secret keys directly as strings, or via OS environment variables. For instance: :code:`app.settings.jwt_secret = "$(MYAPP_JWT_SECRET)"` will take :code:`MYAPP_JWT_SECRET` from the environment and make it available to postgresql functions as :code:`current_setting('app.settings.jwt_secret')`.
-
-.. _role-claim-key:
-
-role-claim-key
---------------
-
-  A JSPath DSL that specifies the location of the :code:`role` key in the JWT claims. This can be used to consume a JWT provided by a third party service like Auth0, Okta or Keycloak. Usage examples:
-
-  .. code:: bash
-
-    # {"postgrest":{"roles": ["other", "author"]}}
-    # the DSL accepts characters that are alphanumerical or one of "_$@" as keys
-    role-claim-key = ".postgrest.roles[1]"
-
-    # {"https://www.example.com/role": { "key": "author }}
-    # non-alphanumerical characters can go inside quotes(escaped in the config value)
-    role-claim-key = ".\"https://www.example.com/role\".key"
-
-.. _raw-media-types:
-
-raw-media-types
----------------
-
- This serves to extend the `Media Types <https://en.wikipedia.org/wiki/Media_type>`_ that PostgREST currently accepts through an ``Accept`` header.
-
- These media types can be requested by following the same rules as the ones defined in :ref:`binary_output`.
-
- As an example, the below config would allow you to request an **image** and a **XML** file by doing a request with ``Accept: image/png``
- or ``Accept: text/xml``, respectively.
-
- .. code:: bash
-
-   raw-media-types="image/png, text/xml"
-
 .. _env_variables_config:
 
 Environment Variables
@@ -436,14 +72,14 @@ In-Database Configuration
 By adding settings to the **authenticator** role (see :ref:`roles`), you can make the database the single source of truth for PostgREST's configuration.
 This is enabled by :ref:`db-config`.
 
-For example, you can configure :ref:`db-schema` and :ref:`jwt-secret` like this:
+For example, you can configure :ref:`db-schemas` and :ref:`jwt-secret` like this:
 
 .. code:: postgresql
 
-   ALTER ROLE authenticator IN DATABASE <your_database_name> SET pgrst.db_schema = "tenant1, tenant2, tenant3"
+   ALTER ROLE authenticator IN DATABASE <your_database_name> SET pgrst.db_schemas = "tenant1, tenant2, tenant3"
    ALTER ROLE authenticator IN DATABASE <your_database_name> SET pgrst.jwt_secret = "REALLYREALLYREALLYREALLYVERYSAFE"
 
-Note that underscores(``_``) need to be used instead of dashes(``-``) for the in-database config options.
+Note that underscores(``_``) need to be used instead of dashes(``-``) for the in-database config parameters.
 
 .. important::
 
@@ -469,3 +105,510 @@ To reload the in-database configuration from within the database, you can use a
    NOTIFY pgrst, 'reload config'
 
 The ``"pgrst"`` notification channel is enabled by default. For configuring the channel, see :ref:`db-channel` and :ref:`db-channel-enabled`.
+
+.. _config_full_list:
+
+List of parameters
+==================
+
+======================== ======= ================= ======== ==========
+Name                     Type    Default           Required Reloadable
+======================== ======= ================= ======== ==========
+app.settings.*           String                             Y
+db-anon-role             String                    Y        Y
+db-channel               String  pgrst                      Y
+db-channel-enabled       Boolean True                       Y
+db-config                Boolean True                       Y
+db-extra-search-path     String  public                     Y
+db-max-rows              Int     ∞                          Y
+db-pool                  Int     10
+db-pool-timeout          Int     10
+db-pre-request           String                             Y
+db-prepared-statements   Boolean True                       Y
+db-schemas               String                    Y        Y
+db-tx-end                String  commit                     Y
+db-uri                   String                    Y
+db-use-legacy-gucs       Boolean True                       Y
+jwt-aud                  String                             Y
+jwt-role-claim-key       String  .role                      Y
+jwt-secret               String                             Y
+jwt-secret-is-base64     Boolean False                      Y
+log-level                String  error                      Y
+openapi-mode             String  follow-privileges          Y
+openapi-server-proxy-uri String                             Y
+raw-media-types          String                             Y
+server-host              String  !4
+server-port              Int     3000
+server-unix-socket       String
+server-unix-socket-mode  String  660
+======================== ======= ================= ======== ==========
+
+.. _app.settings.*:
+
+app.settings.*
+--------------
+
+  =============== ====================
+  **Environment** PGRST_APP_SETTINGS_*
+  **In-Database** pgrst.app_settings_*
+  =============== ====================
+
+  Arbitrary settings that can be used to pass in secret keys directly as strings, or via OS environment variables. For instance: :code:`app.settings.jwt_secret = "$(MYAPP_JWT_SECRET)"` will take :code:`MYAPP_JWT_SECRET` from the environment and make it available to postgresql functions as :code:`current_setting('app.settings.jwt_secret')`.
+
+.. _db-anon-role:
+
+db-anon-role
+------------
+
+  =============== ==================
+  **Environment** PGRST_DB_ANON_ROLE
+  **In-Database** `n/a`
+  =============== ==================
+
+  The database role to use when executing commands on behalf of unauthenticated clients. For more information, see :ref:`roles`.
+
+.. _db-channel:
+
+db-channel
+----------
+
+  =============== ================
+  **Environment** PGRST_DB_CHANNEL
+  **In-Database** `n/a`
+  =============== ================
+
+  The name of the notification channel that PostgREST uses for :ref:`schema_reloading` and configuration reloading.
+
+.. _db-channel-enabled:
+
+db-channel-enabled
+------------------
+
+  =============== ========================
+  **Environment** PGRST_DB_CHANNEL_ENABLED
+  **In-Database** `n/a`
+  =============== ========================
+
+  When this is set to :code:`true`, the notification channel specified in :ref:`db-channel` is enabled.
+
+  You should set this to ``false`` when using PostgresSQL behind an external connection pooler such as PgBouncer working in transaction pooling mode. See :ref:`this section <external_connection_poolers>` for more information.
+
+.. _db-config:
+
+db-config
+---------
+
+  =============== ===============
+  **Environment** PGRST_DB_CONFIG
+  **In-Database** `n/a`
+  =============== ===============
+
+   Enables the in-database configuration.
+
+.. _db-extra-search-path:
+
+db-extra-search-path
+--------------------
+
+  =============== ==========================
+  **Environment** PGRST_DB_EXTRA_SEARCH_PATH
+  **In-Database** pgrst.db_extra_search_path
+  =============== ==========================
+
+  Extra schemas to add to the `search_path <https://www.postgresql.org/docs/current/ddl-schemas.html#DDL-SCHEMAS-PATH>`_ of every request. These schemas tables, views and stored procedures **don't get API endpoints**, they can only be referred from the database objects inside your :ref:`db-schemas`.
+
+  This parameter was meant to make it easier to use **PostgreSQL extensions** (like PostGIS) that are outside of the :ref:`db-schemas`.
+
+  Multiple schemas can be added in a comma-separated string, e.g. ``public, extensions``.
+
+.. _db-max-rows:
+
+db-max-rows
+-----------
+
+  *For backwards compatibility, this config parameter is also available without prefix as "max-rows".*
+
+  =============== =================
+  **Environment** PGRST_DB_MAX_ROWS
+  **In-Database** pgrst.db_max_rows
+  =============== =================
+
+  A hard limit to the number of rows PostgREST will fetch from a view, table, or stored procedure. Limits payload size for accidental or malicious requests.
+
+.. _db-pool:
+
+db-pool
+-------
+
+  =============== =================
+  **Environment** PGRST_DB_POOL
+  **In-Database** `n/a`
+  =============== =================
+
+  Number of connections to keep open in PostgREST's database pool. Having enough here for the maximum expected simultaneous client connections can improve performance. Note it's pointless to set this higher than the :code:`max_connections` GUC in your database.
+
+.. _db-pool-timeout:
+
+db-pool-timeout
+---------------
+
+  =============== =================
+  **Environment** PGRST_DB_POOL_TIMEOUT
+  **In-Database** `n/a`
+  =============== =================
+
+   Time to live, in seconds, for an idle database pool connection. If the timeout is reached the connection will be closed.
+   Once a new request arrives a new connection will be started.
+
+.. _db-pre-request:
+
+db-pre-request
+--------------
+
+  *For backwards compatibility, this config parameter is also available without prefix as "pre-request".*
+
+  =============== =================
+  **Environment** PGRST_DB_PRE_REQUEST
+  **In-Database** pgrst.db_pre_request
+  =============== =================
+
+  A schema-qualified stored procedure name to call right after switching roles for a client request. This provides an opportunity to modify SQL variables or raise an exception to prevent the request from completing.
+
+.. _db-prepared-statements:
+
+db-prepared-statements
+----------------------
+
+  =============== =================
+  **Environment** PGRST_DB_PREPARED_STATEMENTS
+  **In-Database** pgrst.db_prepared_statements
+  =============== =================
+
+  Enables or disables prepared statements.
+
+  When disabled, the generated queries will be parameterized (invulnerable to SQL injection) but they will not be prepared (cached in the database session). Not using prepared statements will noticeably decrease performance, so it's recommended to always have this setting enabled.
+
+  You should only set this to ``false`` when using PostgresSQL behind an external connection pooler such as PgBouncer working in transaction pooling mode. See :ref:`this section <external_connection_poolers>` for more information.
+
+.. _db-schemas:
+
+db-schemas
+----------
+
+  *For backwards compatibility, this config parameter is also available in singular as "db-schema".*
+
+  =============== =================
+  **Environment** PGRST_DB_SCHEMAS
+  **In-Database** pgrst.db_schemas
+  =============== =================
+
+  The database schema to expose to REST clients. Tables, views and stored procedures in this schema will get API endpoints.
+
+  .. code:: bash
+
+     db-schemas = "api"
+
+  This schema gets added to the `search_path <https://www.postgresql.org/docs/current/ddl-schemas.html#DDL-SCHEMAS-PATH>`_ of every request.
+
+List of schemas
+~~~~~~~~~~~~~~~
+
+  You can also specify a list of schemas that can be used for **schema-based multitenancy** and **api versioning** by :ref:`multiple-schemas`. Example:
+
+  .. code:: bash
+
+     db-schemas = "tenant1, tenant2"
+
+  If you don't :ref:`Switch Schemas <multiple-schemas>`, the first schema in the list(``tenant1`` in this case) is chosen as the default schema.
+
+  *Only the chosen schema* gets added to the `search_path <https://www.postgresql.org/docs/current/ddl-schemas.html#DDL-SCHEMAS-PATH>`_ of every request.
+
+  .. warning::
+
+     Never expose private schemas in this way. See :ref:`schema_isolation`.
+
+.. _db-tx-end:
+
+db-tx-end
+---------
+
+  =============== =================
+  **Environment** PGRST_DB_TX_END
+  **In-Database** pgrst.db_tx_end
+  =============== =================
+
+  Specifies how to terminate the database transactions.
+
+  .. code:: bash
+
+    # The transaction is always committed
+    db-tx-end = "commit"
+
+    # The transaction is committed unless a "Prefer: tx=rollback" header is sent
+    db-tx-end = "commit-allow-override"
+
+    # The transaction is always rolled back
+    db-tx-end = "rollback"
+
+    # The transaction is rolled back unless a "Prefer: tx=commit" header is sent
+    db-tx-end = "rollback-allow-override"
+
+.. _db-uri:
+
+db-uri
+------
+
+  =============== =================
+  **Environment** PGRST_DB_URI
+  **In-Database** `n/a`
+  =============== =================
+
+  The standard connection PostgreSQL `URI format <https://www.postgresql.org/docs/current/libpq-connect.html#LIBPQ-CONNSTRING>`_. Symbols and unusual characters in the password or other fields should be percent encoded to avoid a parse error. If enforcing an SSL connection to the database is required you can use `sslmode <https://www.postgresql.org/docs/current/libpq-ssl.html#LIBPQ-SSL-SSLMODE-STATEMENTS>`_ in the URI, for example ``postgres://user:pass@host:5432/dbname?sslmode=require``.
+
+  When running PostgREST on the same machine as PostgreSQL, it is also possible to connect to the database using a `Unix socket <https://en.wikipedia.org/wiki/Unix_domain_socket>`_ and the `Peer Authentication method <https://www.postgresql.org/docs/current/auth-peer.html>`_ as an alternative to TCP/IP communication and authentication with a password, this also grants higher performance.  To do this you can omit the host and the password, e.g. ``postgres://user@/dbname``, see the `libpq connection string <https://www.postgresql.org/docs/current/libpq-connect.html#LIBPQ-CONNSTRING>`_ documentation for more details.
+
+  On older systems like Centos 6, with older versions of libpq, a different db-uri syntax has to be used. In this case the URI is a string of space separated key-value pairs (key=value), so the example above would be :code:`"host=host user=user port=5432 dbname=dbname password=pass"`.
+
+  Choosing a value for this parameter beginning with the at sign such as ``@filename`` (e.g. ``@./configs/my-config``) loads the secret out of an external file.
+
+.. _db-use-legacy-gucs:
+
+db-use-legacy-gucs
+------------------
+
+  =============== =================
+  **Environment** PGRST_DB_USE_LEGACY_GUCS
+  **In-Database** pgrst.db_use_legacy_gucs
+  =============== =================
+
+  Determine if GUC request settings for headers, cookies and jwt claims use the `legacy names <https://postgrest.org/en/v8.0/api.html#accessing-request-headers-cookies-and-jwt-claims>`_ (string with dashes, invalid starting from PostgreSQL v14) with text values instead of the :ref:`new names <guc_req_headers_cookies_claims>` (string without dashes, valid on all PostgreSQL versions) with json values.
+
+  On PostgreSQL versions 14 and above, this parameter is ignored.
+
+.. _jwt-aud:
+
+jwt-aud
+-------
+
+  =============== =================
+  **Environment** PGRST_JWT_AUD
+  **In-Database** pgrst.jwt_aud
+  =============== =================
+
+  Specifies the `JWT audience claim <https://datatracker.ietf.org/doc/html/rfc7519#section-4.1.3>`_. If this claim is present in the client provided JWT then you must set this to the same value as in the JWT, otherwise verifying the JWT will fail.
+
+.. _jwt-role-claim-key:
+
+jwt-role-claim-key
+------------------
+
+  *For backwards compatibility, this config parameter is also available without prefix as "role-claim-key".*
+
+  =============== =================
+  **Environment** PGRST_JWT_ROLE_CLAIM_KEY
+  **In-Database** pgrst.jwt_role_claim_key
+  =============== =================
+
+  A JSPath DSL that specifies the location of the :code:`role` key in the JWT claims. This can be used to consume a JWT provided by a third party service like Auth0, Okta or Keycloak. Usage examples:
+
+  .. code:: bash
+
+    # {"postgrest":{"roles": ["other", "author"]}}
+    # the DSL accepts characters that are alphanumerical or one of "_$@" as keys
+    jwt-role-claim-key = ".postgrest.roles[1]"
+
+    # {"https://www.example.com/role": { "key": "author }}
+    # non-alphanumerical characters can go inside quotes(escaped in the config value)
+    jwt-role-claim-key = ".\"https://www.example.com/role\".key"
+
+.. _jwt-secret:
+
+jwt-secret
+----------
+
+  =============== =================
+  **Environment** PGRST_JWT_SECRET
+  **In-Database** pgrst.jwt_secret
+  =============== =================
+
+  The secret or `JSON Web Key (JWK) (or set) <https://datatracker.ietf.org/doc/html/rfc7517>`_ used to decode JWT tokens clients provide for authentication. For security the key must be **at least 32 characters long**. If this parameter is not specified then PostgREST refuses authentication requests. Choosing a value for this parameter beginning with the at sign such as :code:`@filename` loads the secret out of an external file. This is useful for automating deployments. Note that any binary secrets must be base64 encoded. Both symmetric and asymmetric cryptography are supported. For more info see :ref:`asym_keys`.
+
+.. _jwt-secret-is-base64:
+
+jwt-secret-is-base64
+--------------------
+
+  =============== =================
+  **Environment** PGRST_JWT_SECRET_IS_BASE64
+  **In-Database** pgrst.jwt_secret_is_base64
+  =============== =================
+
+  When this is set to :code:`true`, the value derived from :code:`jwt-secret` will be treated as a base64 encoded secret.
+
+.. _log-level:
+
+log-level
+---------
+
+  =============== =================
+  **Environment** PGRST_LOG_LEVEL
+  **In-Database** `n/a`
+  =============== =================
+
+  Specifies the level of information to be logged while running PostgREST.
+
+  .. code:: bash
+
+      # Only startup and db connection recovery messages are logged
+      log-level = "crit"
+
+      # All the "crit" level events plus server errors (status 5xx) are logged
+      log-level = "error"
+
+      # All the "error" level events plus request errors (status 4xx) are logged
+      log-level = "warn"
+
+      # All the "warn" level events plus all requests (every status code) are logged
+      log-level = "info"
+
+
+  Because currently there's no buffering for logging, the levels with minimal logging(``crit/error``) will increase throughput.
+
+.. _openapi-mode:
+
+openapi-mode
+------------
+
+  =============== =================
+  **Environment** PGRST_OPENAPI_MODE
+  **In-Database** pgrst.openapi_mode
+  =============== =================
+
+  Specifies how the OpenAPI output should be displayed.
+
+  .. code:: bash
+
+    # Follows the privileges of the JWT role claim (or from db-anon-role if the JWT is not sent)
+    # Shows information depending on the permissions that the role making the request has
+    openapi-mode = "follow-privileges"
+
+    # Ignores the privileges of the JWT role claim (or from db-anon-role if the JWT is not sent)
+    # Shows all the exposed information, regardless of the permissions that the role making the request has
+    openapi-mode = "ignore-privileges"
+
+    # Disables the OpenApi output altogether.
+    # Throws a `404 Not Found` error when accessing the API root path
+    openapi-mode = "disabled"
+
+.. _openapi-server-proxy-uri:
+
+openapi-server-proxy-uri
+------------------------
+
+  =============== =================
+  **Environment** PGRST_OPENAPI_SERVER_PROXY_URI
+  **In-Database** pgrst.openapi_server_proxy_uri
+  =============== =================
+
+  Overrides the base URL used within the OpenAPI self-documentation hosted at the API root path. Use a complete URI syntax :code:`scheme:[//[user:password@]host[:port]][/]path[?query][#fragment]`. Ex. :code:`https://postgrest.com`
+
+  .. code:: json
+
+    {
+      "swagger": "2.0",
+      "info": {
+        "version": "0.4.3.0",
+        "title": "PostgREST API",
+        "description": "This is a dynamic API generated by PostgREST"
+      },
+      "host": "postgrest.com:443",
+      "basePath": "/",
+      "schemes": [
+        "https"
+      ]
+    }
+
+.. _raw-media-types:
+
+raw-media-types
+---------------
+
+  =============== =================
+  **Environment** PGRST_RAW_MEDIA_TYPES
+  **In-Database** pgrst.raw_media_types
+  =============== =================
+
+ This serves to extend the `Media Types <https://en.wikipedia.org/wiki/Media_type>`_ that PostgREST currently accepts through an ``Accept`` header.
+
+ These media types can be requested by following the same rules as the ones defined in :ref:`binary_output`.
+
+ As an example, the below config would allow you to request an **image** and a **XML** file by doing a request with ``Accept: image/png``
+ or ``Accept: text/xml``, respectively.
+
+ .. code:: bash
+
+   raw-media-types="image/png, text/xml"
+
+.. _server-host:
+
+server-host
+-----------
+
+  =============== =================
+  **Environment** PGRST_SERVER_HOST
+  **In-Database** pgrst.server_host
+  =============== =================
+
+  Where to bind the PostgREST web server. In addition to the usual address options, PostgREST interprets these reserved addresses with special meanings:
+
+  * :code:`*` - any IPv4 or IPv6 hostname
+  * :code:`*4` - any IPv4 or IPv6 hostname, IPv4 preferred
+  * :code:`!4` - any IPv4 hostname
+  * :code:`*6` - any IPv4 or IPv6 hostname, IPv6 preferred
+  * :code:`!6` - any IPv6 hostname
+
+.. _server-port:
+
+server-port
+-----------
+
+  =============== =================
+  **Environment** PGRST_SERVER_PORT
+  **In-Database** pgrst.server_port
+  =============== =================
+
+  The TCP port to bind the web server.
+
+.. _server-unix-socket:
+
+server-unix-socket
+------------------
+
+  =============== =================
+  **Environment** PGRST_SERVER_UNIX_SOCKET
+  **In-Database** pgrst.server_unix_socket
+  =============== =================
+
+  `Unix domain socket <https://en.wikipedia.org/wiki/Unix_domain_socket>`_ where to bind the PostgREST web server.
+  If specified, this takes precedence over :ref:`server-port`. Example:
+
+  .. code:: bash
+
+    server-unix-socket = "/tmp/pgrst.sock"
+
+.. _server-unix-socket-mode:
+
+server-unix-socket-mode
+-----------------------
+
+  =============== =================
+  **Environment** PGRST_SERVER_UNIX_SOCKET_MODE
+  **In-Database** pgrst.server_unix_socket_mode
+  =============== =================
+
+  `Unix file mode <https://en.wikipedia.org/wiki/File_system_permissions>`_ to be set for the socket specified in :ref:`server-unix-socket`
+  Needs to be a valid octal between 600 and 777.
+
+  .. code:: bash
+
+    server-unix-socket-mode = "660"
diff --git a/how-tos/embedding-table-from-another-schema.rst b/how-tos/embedding-table-from-another-schema.rst
index 118d630d1..6631982de 100644
--- a/how-tos/embedding-table-from-another-schema.rst
+++ b/how-tos/embedding-table-from-another-schema.rst
@@ -3,7 +3,7 @@ Embedding a table from another schema
 
 :author: `steve-chavez <https://github.com/steve-chavez>`_
 
-Suppose you have a **people** table in the ``public`` schema and this schema is exposed through PostgREST's :ref:`db-schema`.
+Suppose you have a **people** table in the ``public`` schema and this schema is exposed through PostgREST's :ref:`db-schemas`.
 
 .. code-block:: postgres
 
diff --git a/postgrest.dict b/postgrest.dict
index fba460fd9..16a91dd58 100644
--- a/postgrest.dict
+++ b/postgrest.dict
@@ -125,6 +125,7 @@ Rechkemmer
 reconnection
 Redux
 refactor
+Reloadable
 Remo
 requester's
 RESTful
diff --git a/releases/v7.0.0.rst b/releases/v7.0.0.rst
index 34e5d46db..3c2c0ef58 100644
--- a/releases/v7.0.0.rst
+++ b/releases/v7.0.0.rst
@@ -10,7 +10,7 @@ You can download this release at the `PostgREST v7.0.0 release page <https://git
 Added
 -----
 
-* Support for :ref:`Switching to a schema <multiple-schemas>` defined in :ref:`db-schema`.
+* Support for :ref:`Switching to a schema <multiple-schemas>` defined in :ref:`db-schemas`.
   |br| -- `@steve-chavez <https://github.com/steve-chavez>`_, `@mahmoudkassem <https://github.com/mahmoudkassem>`_
 
 * Support for :ref:`planned_count` and :ref:`estimated_count`.
diff --git a/tutorials/tut0.rst b/tutorials/tut0.rst
index 04e6420a3..27e9cb44d 100644
--- a/tutorials/tut0.rst
+++ b/tutorials/tut0.rst
@@ -162,7 +162,7 @@ PostgREST uses a configuration file to tell it how to connect to the database. C
 .. code-block:: ini
 
   db-uri = "postgres://authenticator:mysecretpassword@localhost:5433/postgres"
-  db-schema = "api"
+  db-schemas = "api"
   db-anon-role = "web_anon"
 
 The configuration file has other :ref:`options <configuration>`, but this is all we need. 
diff --git a/tutorials/tut1.rst b/tutorials/tut1.rst
index ec288fc97..cb307dc4b 100644
--- a/tutorials/tut1.rst
+++ b/tutorials/tut1.rst
@@ -226,7 +226,7 @@ Next update :code:`tutorial.conf` and specify the new function:
 
   # add this line to tutorial.conf
 
-  pre-request = "auth.check_token"
+  db-pre-request = "auth.check_token"
 
 Restart PostgREST for the change to take effect. Next try making a request with our original token and then with the revoked one.
 

From 4bd090ba13ade70b9f87714dad3d2031f72082ff Mon Sep 17 00:00:00 2001
From: Wolfgang Walther <walther@technowledgy.de>
Date: Fri, 7 Jan 2022 18:53:25 +0100
Subject: [PATCH 464/652] add user to logging example

---
 admin.rst | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/admin.rst b/admin.rst
index 6f906363f..20404d21d 100644
--- a/admin.rst
+++ b/admin.rst
@@ -158,12 +158,12 @@ When debugging a problem it's important to verify the PostgREST version. At any
 Logging
 -------
 
-PostgREST logs basic request information to ``stdout``, including the requesting IP address and user agent, the URL requested, and HTTP response status.
+PostgREST logs basic request information to ``stdout``, including the authenticated user if available, the requesting IP address and user agent, the URL requested, and HTTP response status.
 
 .. code::
 
-   127.0.0.1 - - [26/Jul/2021:01:56:38 -0500] "GET /clients HTTP/1.1" 200 - "" "curl/7.64.0"
-   127.0.0.1 - - [26/Jul/2021:01:56:48 -0500] "GET /unexistent HTTP/1.1" 404 - "" "curl/7.64.0"
+   127.0.0.1 - user [26/Jul/2021:01:56:38 -0500] "GET /clients HTTP/1.1" 200 - "" "curl/7.64.0"
+   127.0.0.1 - anonymous [26/Jul/2021:01:56:48 -0500] "GET /unexistent HTTP/1.1" 404 - "" "curl/7.64.0"
 
 For diagnostic information about the server itself, PostgREST logs to ``stderr``.
 

From 737ad76dfdc1188bd463bbcefb280318f2d4bcf2 Mon Sep 17 00:00:00 2001
From: Wolfgang Walther <walther@technowledgy.de>
Date: Sat, 8 Jan 2022 11:35:51 +0100
Subject: [PATCH 465/652] Clarify in-database configuration example regarding
 IN DATABASE

---
 configuration.rst | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/configuration.rst b/configuration.rst
index 1215d9a3d..50f8ce7ee 100644
--- a/configuration.rst
+++ b/configuration.rst
@@ -76,9 +76,11 @@ For example, you can configure :ref:`db-schemas` and :ref:`jwt-secret` like this
 
 .. code:: postgresql
 
-   ALTER ROLE authenticator IN DATABASE <your_database_name> SET pgrst.db_schemas = "tenant1, tenant2, tenant3"
+   ALTER ROLE authenticator SET pgrst.db_schemas = "tenant1, tenant2, tenant3"
    ALTER ROLE authenticator IN DATABASE <your_database_name> SET pgrst.jwt_secret = "REALLYREALLYREALLYREALLYVERYSAFE"
 
+You can use both database-specific settings with `IN DATABASE` and cluster-wide settings without it. Database-specific settings will override cluster-wide settings if both are used for the same parameter.
+
 Note that underscores(``_``) need to be used instead of dashes(``-``) for the in-database config parameters.
 
 .. important::

From 9d23cfde9dceb906e736c55bc77a1f4f9b2eb7e1 Mon Sep 17 00:00:00 2001
From: Steve Chavez <stevechavezast@gmail.com>
Date: Wed, 12 Jan 2022 12:52:34 -0500
Subject: [PATCH 466/652] Add finer-grained event trigger (#489)

---
 schema_cache.rst | 70 +++++++++++++++++++++++++++++++++++++++++++++++-
 1 file changed, 69 insertions(+), 1 deletion(-)

diff --git a/schema_cache.rst b/schema_cache.rst
index 1e708876d..11d0f9510 100644
--- a/schema_cache.rst
+++ b/schema_cache.rst
@@ -160,4 +160,72 @@ To disable auto reloading, drop the trigger:
 
 .. code-block:: postgresql
 
-  DROP EVENT TRIGGER pgrst_watch
\ No newline at end of file
+  DROP EVENT TRIGGER pgrst_watch
+
+Finer-Grained Event Trigger
+~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+You can refine the previous event trigger and only react to the events relevant to the schema cache. This also prevents unnecessary
+reloading when creating temporary tables(``CREATE TEMP TABLE``) inside functions.
+
+.. code-block:: postgresql
+
+  -- watch create and alter
+  CREATE OR REPLACE FUNCTION pgrst_ddl_watch() RETURNS event_trigger AS $$
+  DECLARE
+    cmd record;
+  BEGIN
+    FOR cmd IN SELECT * FROM pg_event_trigger_ddl_commands()
+    LOOP
+      IF cmd.command_tag IN (
+        'CREATE SCHEMA', 'ALTER SCHEMA'
+      , 'CREATE TABLE', 'CREATE TABLE AS', 'SELECT INTO', 'ALTER TABLE'
+      , 'CREATE FOREIGN TABLE', 'ALTER FOREIGN TABLE'
+      , 'CREATE VIEW', 'ALTER VIEW'
+      , 'CREATE MATERIALIZED VIEW', 'ALTER MATERIALIZED VIEW'
+      , 'CREATE FUNCTION', 'ALTER FUNCTION'
+      , 'CREATE TRIGGER'
+      , 'CREATE TYPE'
+      , 'CREATE RULE'
+      , 'COMMENT'
+      )
+      -- don't notify in case of CREATE TEMP table or other objects created on pg_temp
+      AND cmd.schema_name is distinct from 'pg_temp'
+      THEN
+        NOTIFY pgrst, 'reload schema';
+      END IF;
+    END LOOP;
+  END; $$ LANGUAGE plpgsql;
+
+  -- watch drop
+  CREATE OR REPLACE FUNCTION pgrst_drop_watch() RETURNS event_trigger AS $$
+  DECLARE
+    obj record;
+  BEGIN
+    FOR obj IN SELECT * FROM pg_event_trigger_dropped_objects()
+    LOOP
+      IF obj.object_type IN (
+        'schema'
+      , 'table'
+      , 'foreign table'
+      , 'view'
+      , 'materialized view'
+      , 'function'
+      , 'trigger'
+      , 'type'
+      , 'rule'
+      )
+      AND obj.is_temporary IS false -- no pg_temp objects
+      THEN
+        NOTIFY pgrst, 'reload schema';
+      END IF;
+    END LOOP;
+  END; $$ LANGUAGE plpgsql;
+
+  CREATE EVENT TRIGGER pgrst_ddl_watch
+    ON ddl_command_end
+    EXECUTE PROCEDURE pgrst_ddl_watch();
+
+  CREATE EVENT TRIGGER pgrst_drop_watch
+    ON sql_drop
+    EXECUTE PROCEDURE pgrst_drop_watch();

From 5187eadd0bcbbee91d054fa7e2f29794a0521099 Mon Sep 17 00:00:00 2001
From: Wolfgang Walther <walther@technowledgy.de>
Date: Sun, 23 Jan 2022 11:04:35 +0100
Subject: [PATCH 467/652] Restructure configuration reloading section

---
 configuration.rst   | 65 +++++++++++++++++++++++++--------------------
 releases/v8.0.0.rst |  2 +-
 2 files changed, 37 insertions(+), 30 deletions(-)

diff --git a/configuration.rst b/configuration.rst
index 50f8ce7ee..ff6784c26 100644
--- a/configuration.rst
+++ b/configuration.rst
@@ -39,31 +39,6 @@ Environment Variables
 
 You can also set these :ref:`configuration parameters <config_full_list>` using environment variables. They are capitalized, have a ``PGRST_`` prefix, and use underscores. For example: ``PGRST_DB_URI`` corresponds to ``db-uri`` and ``PGRST_APP_SETTINGS_*`` to ``app.settings.*``.
 
-.. _config_reloading:
-
-Configuration Reloading
-=======================
-
-To reload the configuration without restarting the PostgREST server, send a SIGUSR2 signal to the server process.
-
-.. code:: bash
-
-  killall -SIGUSR2 postgrest
-
-This method does not reload :ref:`env_variables_config` and it will not work for reloading a Docker container configuration. In these cases, you need to restart the PostgREST server or use the :ref:`in_db_config` as an alternative.
-
-.. important::
-
-  The following settings will not be reread when reloading the configuration. You will need to restart PostgREST in that case.
-
-    * :ref:`db-uri`
-    * :ref:`db-pool`
-    * :ref:`db-pool-timeout`
-    * :ref:`server-host`
-    * :ref:`server-port`
-    * :ref:`server-unix-socket`
-    * :ref:`server-unix-socket-mode`
-
 .. _in_db_config:
 
 In-Database Configuration
@@ -95,12 +70,44 @@ When using both the configuration file and the in-database configuration, the la
   The settings of every role are PUBLIC - they can be viewed by any user that queries the ``pg_catalog.pg_db_role_setting`` table.
   In this case you should keep the :ref:`jwt-secret` in the configuration file or as environment variables.
 
-.. _in_db_config_reloading:
+.. _config_reloading:
 
-In-database configuration reloading
------------------------------------
+Configuration Reloading
+=======================
 
-To reload the in-database configuration from within the database, you can use a NOTIFY command.
+It's possible to reload PostgREST's configuration without restarting the server. You can do this :ref:`via signal <config_reloading_signal>` or :ref:`via notification <config_reloading_notify>`.
+
+It's not possible to change :ref:`env_variables_config` for a running process and reloading a Docker container configuration will not work. In these cases, you need to restart the PostgREST server or use :ref:`in_db_config` as an alternative.
+
+.. important::
+
+  The following settings will not be reloaded. You will need to restart PostgREST to change those.
+
+    * :ref:`db-uri`
+    * :ref:`db-pool`
+    * :ref:`db-pool-timeout`
+    * :ref:`server-host`
+    * :ref:`server-port`
+    * :ref:`server-unix-socket`
+    * :ref:`server-unix-socket-mode`
+
+.. _config_reloading_signal:
+
+Reload with signal
+------------------
+
+To reload the configuration via signal, send a SIGUSR2 signal to the server process.
+
+.. code:: bash
+
+  killall -SIGUSR2 postgrest
+
+.. _config_reloading_notify:
+
+Reload with NOTIFY
+------------------
+
+To reload the configuration from within the database, you can use a NOTIFY command.
 
 .. code:: postgresql
 
diff --git a/releases/v8.0.0.rst b/releases/v8.0.0.rst
index 7cdc36c58..9df17821e 100644
--- a/releases/v8.0.0.rst
+++ b/releases/v8.0.0.rst
@@ -37,7 +37,7 @@ Added
 * Allow ``Bearer`` with and without capitalization as authentication schema. See :ref:`client_auth`.
   |br| -- `@wolfgangwalther <https://github.com/wolfgangwalther>`_
 
-* :ref:`in_db_config` that can be :ref:`reloaded with NOTIFY <in_db_config_reloading>`.
+* :ref:`in_db_config` that can be :ref:`reloaded with NOTIFY <config_reloading_notify>`.
   |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
 
 * Allow OPTIONS to generate HTTP methods based on views triggers. See :ref:`OPTIONS requests <options_requests>`.

From 5f938dbe1a05df6ee978e236bc9e63a043ea6d1f Mon Sep 17 00:00:00 2001
From: Wolfgang Walther <walther@technowledgy.de>
Date: Sat, 22 Jan 2022 15:54:13 +0100
Subject: [PATCH 468/652] Run PostgREST with zero config. Related to
 https://github.com/PostgREST/postgrest/pull/2112

---
 admin.rst          |  5 ---
 auth.rst           |  2 +-
 configuration.rst  | 92 +++++++++++++++++++++++++++-------------------
 tutorials/tut0.rst |  4 +-
 4 files changed, 58 insertions(+), 45 deletions(-)

diff --git a/admin.rst b/admin.rst
index 20404d21d..c319c29c4 100644
--- a/admin.rst
+++ b/admin.rst
@@ -268,11 +268,6 @@ First, create postgrest configuration in ``/etc/postgrest/config``
   db-uri = "postgres://<your_user>:<your_password>@localhost:5432/<your_db>"
   db-schemas = "<your_exposed_schema>"
   db-anon-role = "<your_anon_role>"
-  db-pool = 10
-
-  server-host = "127.0.0.1"
-  server-port = 3000
-
   jwt-secret = "<your_secret>"
 
 Then create the systemd service file in ``/etc/systemd/system/postgrest.service``
diff --git a/auth.rst b/auth.rst
index 892f73f77..867339cbc 100644
--- a/auth.rst
+++ b/auth.rst
@@ -63,7 +63,7 @@ You can use row-level security to flexibly restrict visibility and access for th
 
   ALTER TABLE chat ENABLE ROW LEVEL SECURITY;
 
-We want to enforce a policy that ensures a user can see only those messages sent by him or intended for him. Also we want to prevent a user from forging the message_from column with another person's name.
+We want to enforce a policy that ensures a user can see only those messages sent by them or intended for them. Also we want to prevent a user from forging the message_from column with another person's name.
 
 PostgreSQL allows us to set this policy with row-level security:
 
diff --git a/configuration.rst b/configuration.rst
index ff6784c26..59501140c 100644
--- a/configuration.rst
+++ b/configuration.rst
@@ -3,7 +3,18 @@
 Configuration
 =============
 
-PostgREST reads a configuration file to determine information about the database and how to serve client requests. There is no predefined location for this file, you must specify the file path as the one and only argument to the server:
+Without configuration, PostgREST won't be able to serve requests. At the minimum it needs either :ref:`a role to serve anonymous requests with <db-anon-role>` - or :ref:`a secret to use for JWT authentication <jwt-secret>`. Config parameters can be provided via :ref:`file_config`, via :ref:`env_variables_config` or through :ref:`in_db_config`.
+
+To connect to a database it uses a `libpq connection string <https://www.postgresql.org/docs/current/libpq-connect.html#LIBPQ-CONNSTRING>`_. The connection string can be set in the configuration file or via environment variable or can be read from an external file. See :ref:`db-uri` for details. Any parameter that is not set in the connection string is read from `libpq environment variables <https://www.postgresql.org/docs/current/libpq-envars.html>`_. The default connection string is ``postgresql://``, which reads **all** parameters from the environment.
+
+The user with whom PostgREST connects to the database is also known as the authenticator role. For more information about the anonymous vs authenticator roles see :ref:`roles`.
+
+.. _file_config:
+
+Config File
+-----------
+
+PostgREST can read a config file. There is no predefined location for this file, you must specify the file path as the one and only argument to the server:
 
 .. code:: bash
 
@@ -13,7 +24,7 @@ PostgREST reads a configuration file to determine information about the database
 
    Configuration can be reloaded without restarting the server. See :ref:`config_reloading`.
 
-The configuration file must contain a set of key value pairs. At minimum you must include these keys:
+The configuration file must contain a set of key value pairs:
 
 .. code::
 
@@ -23,26 +34,31 @@ The configuration file must contain a set of key value pairs. At minimum you mus
   # https://www.postgresql.org/docs/current/libpq-connect.html#LIBPQ-CONNSTRING
   db-uri       = "postgres://user:pass@host:5432/dbname"
 
-  # The name of which database schema to expose to REST clients
-  db-schemas   = "api"
-
   # The database role to use when no client authentication is provided.
-  # Can (and should) differ from user in db-uri
+  # Should differ from authenticator
   db-anon-role = "anon"
 
-The user specified in the db-uri is also known as the authenticator role. For more information about the anonymous vs authenticator roles see the :ref:`roles`.
+  # The secret to verify the JWT for authenticated requests with.
+  # Needs to be 32 characters minimum.
+  jwt-secret           = "reallyreallyreallyreallyverysafe"
+  jwt-secret-is-base64 = False
+
+  # Port the postgrest process is listening on for http requests
+  server-port = 80
+
+You can run ``postgrest --example`` to display all possible configuration parameters and how to use them in a configuration file.
 
 .. _env_variables_config:
 
 Environment Variables
-=====================
+---------------------
 
 You can also set these :ref:`configuration parameters <config_full_list>` using environment variables. They are capitalized, have a ``PGRST_`` prefix, and use underscores. For example: ``PGRST_DB_URI`` corresponds to ``db-uri`` and ``PGRST_APP_SETTINGS_*`` to ``app.settings.*``.
 
 .. _in_db_config:
 
 In-Database Configuration
-=========================
+-------------------------
 
 By adding settings to the **authenticator** role (see :ref:`roles`), you can make the database the single source of truth for PostgREST's configuration.
 This is enabled by :ref:`db-config`.
@@ -120,37 +136,37 @@ The ``"pgrst"`` notification channel is enabled by default. For configuring the
 List of parameters
 ==================
 
-======================== ======= ================= ======== ==========
-Name                     Type    Default           Required Reloadable
-======================== ======= ================= ======== ==========
-app.settings.*           String                             Y
-db-anon-role             String                    Y        Y
-db-channel               String  pgrst                      Y
-db-channel-enabled       Boolean True                       Y
-db-config                Boolean True                       Y
-db-extra-search-path     String  public                     Y
-db-max-rows              Int     ∞                          Y
+======================== ======= ================= ==========
+Name                     Type    Default           Reloadable
+======================== ======= ================= ==========
+app.settings.*           String                    Y
+db-anon-role             String                    Y
+db-channel               String  pgrst             Y
+db-channel-enabled       Boolean True              Y
+db-config                Boolean True              Y
+db-extra-search-path     String  public            Y
+db-max-rows              Int     ∞                 Y
 db-pool                  Int     10
 db-pool-timeout          Int     10
-db-pre-request           String                             Y
-db-prepared-statements   Boolean True                       Y
-db-schemas               String                    Y        Y
-db-tx-end                String  commit                     Y
-db-uri                   String                    Y
-db-use-legacy-gucs       Boolean True                       Y
-jwt-aud                  String                             Y
-jwt-role-claim-key       String  .role                      Y
-jwt-secret               String                             Y
-jwt-secret-is-base64     Boolean False                      Y
-log-level                String  error                      Y
-openapi-mode             String  follow-privileges          Y
-openapi-server-proxy-uri String                             Y
-raw-media-types          String                             Y
+db-pre-request           String                    Y
+db-prepared-statements   Boolean True              Y
+db-schemas               String  public            Y
+db-tx-end                String  commit            
+db-uri                   String  postgresql://
+db-use-legacy-gucs       Boolean True              Y
+jwt-aud                  String                    Y
+jwt-role-claim-key       String  .role             Y
+jwt-secret               String                    Y
+jwt-secret-is-base64     Boolean False             Y
+log-level                String  error             Y
+openapi-mode             String  follow-privileges Y
+openapi-server-proxy-uri String                    Y
+raw-media-types          String                    Y
 server-host              String  !4
 server-port              Int     3000
 server-unix-socket       String
 server-unix-socket-mode  String  660
-======================== ======= ================= ======== ==========
+======================== ======= ================= ==========
 
 .. _app.settings.*:
 
@@ -176,6 +192,8 @@ db-anon-role
 
   The database role to use when executing commands on behalf of unauthenticated clients. For more information, see :ref:`roles`.
 
+  When unset anonymous access will be blocked.
+
 .. _db-channel:
 
 db-channel
@@ -376,9 +394,7 @@ db-uri
 
   When running PostgREST on the same machine as PostgreSQL, it is also possible to connect to the database using a `Unix socket <https://en.wikipedia.org/wiki/Unix_domain_socket>`_ and the `Peer Authentication method <https://www.postgresql.org/docs/current/auth-peer.html>`_ as an alternative to TCP/IP communication and authentication with a password, this also grants higher performance.  To do this you can omit the host and the password, e.g. ``postgres://user@/dbname``, see the `libpq connection string <https://www.postgresql.org/docs/current/libpq-connect.html#LIBPQ-CONNSTRING>`_ documentation for more details.
 
-  On older systems like Centos 6, with older versions of libpq, a different db-uri syntax has to be used. In this case the URI is a string of space separated key-value pairs (key=value), so the example above would be :code:`"host=host user=user port=5432 dbname=dbname password=pass"`.
-
-  Choosing a value for this parameter beginning with the at sign such as ``@filename`` (e.g. ``@./configs/my-config``) loads the secret out of an external file.
+  Choosing a value for this parameter beginning with the at sign such as ``@filename`` (e.g. ``@./configs/my-config``) loads the connection string out of an external file.
 
 .. _db-use-legacy-gucs:
 
@@ -442,6 +458,8 @@ jwt-secret
 
   The secret or `JSON Web Key (JWK) (or set) <https://datatracker.ietf.org/doc/html/rfc7517>`_ used to decode JWT tokens clients provide for authentication. For security the key must be **at least 32 characters long**. If this parameter is not specified then PostgREST refuses authentication requests. Choosing a value for this parameter beginning with the at sign such as :code:`@filename` loads the secret out of an external file. This is useful for automating deployments. Note that any binary secrets must be base64 encoded. Both symmetric and asymmetric cryptography are supported. For more info see :ref:`asym_keys`.
 
+  Choosing a value for this parameter beginning with the at sign such as ``@filename`` (e.g. ``@./configs/my-config``) loads the secret out of an external file.
+
 .. _jwt-secret-is-base64:
 
 jwt-secret-is-base64
diff --git a/tutorials/tut0.rst b/tutorials/tut0.rst
index 27e9cb44d..d17b32b7c 100644
--- a/tutorials/tut0.rst
+++ b/tutorials/tut0.rst
@@ -140,7 +140,7 @@ Next make a role to use for anonymous web requests. When a request comes in, Pos
 
 The :code:`web_anon` role has permission to access things in the :code:`api` schema, and to read rows in the :code:`todos` table.
 
-It's a good practice to create a dedicated role for connecting to the database, instead of using the highly privileged ``postgres`` role. So we'll do that, name the role ``authenticator`` and also grant him the ability to switch to the ``web_anon`` role :
+It's a good practice to create a dedicated role for connecting to the database, instead of using the highly privileged ``postgres`` role. So we'll do that, name the role ``authenticator`` and also grant it the ability to switch to the ``web_anon`` role :
 
 .. code-block:: postgres
 
@@ -157,7 +157,7 @@ Now quit out of psql; it's time to start the API!
 Step 5. Run PostgREST
 ---------------------
 
-PostgREST uses a configuration file to tell it how to connect to the database. Create a file :code:`tutorial.conf` with this inside:
+PostgREST can use a configuration file to tell it how to connect to the database. Create a file :code:`tutorial.conf` with this inside:
 
 .. code-block:: ini
 

From 0824139069043ad963d33f2fb901696d7ace24ee Mon Sep 17 00:00:00 2001
From: Wolfgang Walther <walther@technowledgy.de>
Date: Sun, 23 Jan 2022 12:12:32 +0100
Subject: [PATCH 469/652] Add order of precedence for config parameters

---
 configuration.rst | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/configuration.rst b/configuration.rst
index 59501140c..422093d36 100644
--- a/configuration.rst
+++ b/configuration.rst
@@ -9,6 +9,12 @@ To connect to a database it uses a `libpq connection string <https://www.postgre
 
 The user with whom PostgREST connects to the database is also known as the authenticator role. For more information about the anonymous vs authenticator roles see :ref:`roles`.
 
+Config parameters are read in the following order:
+
+1. From the config file.
+2. From environment variables, overriding values from the config file.
+3. From the database, overriding values from both the config file and environment variables.
+
 .. _file_config:
 
 Config File

From 49ca91cc3ca3c18fbfcff8511e125f332cff5829 Mon Sep 17 00:00:00 2001
From: Nilesh <nilesh@trivedi.pw>
Date: Fri, 28 Jan 2022 00:27:19 +0000
Subject: [PATCH 470/652] Improving docs for setting response headers like
 content-type (#494)

---
 api.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/api.rst b/api.rst
index 2e39e0178..6367d4a3b 100644
--- a/api.rst
+++ b/api.rst
@@ -2509,7 +2509,7 @@ Notice that the variable should be set to an *array* of single-key objects rathe
 
 .. note::
 
-  PostgREST provided headers such as ``Content-Type``, ``Location``, etc. can be overriden this way.
+  PostgREST provided headers such as ``Content-Type``, ``Location``, etc. can be overriden this way. Note that irrespective of overridden ``Content-Type`` response header, the content will still be converted to JSON, unless you also set :ref:`raw-media-types` to something like ``text/html``.
 
 .. _pre_req_headers:
 

From 0ae86b7e7490ce986ab47f84c98c5278e09ca83e Mon Sep 17 00:00:00 2001
From: Wolfgang Walther <walther@technowledgy.de>
Date: Sun, 30 Jan 2022 13:24:29 +0100
Subject: [PATCH 471/652] Fix references to full documents instead of first
 section

Resolves #492

Signed-off-by: Wolfgang Walther <walther@technowledgy.de>
---
 how-tos/providing-images-for-img.rst | 2 +-
 releases/v7.0.0.rst                  | 2 +-
 releases/v8.0.0.rst                  | 4 ++--
 releases/v9.0.0.rst                  | 2 +-
 tutorials/tut0.rst                   | 2 +-
 5 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/how-tos/providing-images-for-img.rst b/how-tos/providing-images-for-img.rst
index 5a1463d5e..989e19749 100644
--- a/how-tos/providing-images-for-img.rst
+++ b/how-tos/providing-images-for-img.rst
@@ -38,7 +38,7 @@ We can retrieve this image in binary format from our PostgREST API by requesting
 Unfortunately, putting the URL into the :code:`src` of an :code:`<img>` tag will not work.
 That's because browsers do not send the required header.
 
-Luckily, we can configure our :ref:`Nginx reverse proxy <admin>` to fix this problem for us.
+Luckily, we can configure our :doc:`Nginx reverse proxy <../admin>` to fix this problem for us.
 We assume that PostgREST is running on port 3000.
 We provide a new location :code:`/files/` that redirects requests to our endpoint with the :code:`Accept` header set to :code:`application/octet-stream`.
 
diff --git a/releases/v7.0.0.rst b/releases/v7.0.0.rst
index 3c2c0ef58..241f0e901 100644
--- a/releases/v7.0.0.rst
+++ b/releases/v7.0.0.rst
@@ -35,7 +35,7 @@ Added
 
 * Documentation improvements
 
-  + Explanation for :ref:`Schema Structure <schema_isolation>`.
+  + Explanation for :doc:`Schema Structure <../schema_structure>`.
   + Reference for :ref:`s_proc_embed`.
   + Reference for :ref:`mutation_embed`.
   + Reference for filters on :ref:`json_columns`.
diff --git a/releases/v8.0.0.rst b/releases/v8.0.0.rst
index 9df17821e..b99bd695f 100644
--- a/releases/v8.0.0.rst
+++ b/releases/v8.0.0.rst
@@ -60,8 +60,8 @@ Added
 
 * Documentation improvements
 
-  + Added the :ref:`schema_cache` page.
-  + Moved the :ref:`schema_reloading` reference from :ref:`admin` to :ref:`schema_cache`
+  + Added the :doc:`../schema_cache` page.
+  + Moved the :ref:`schema_reloading` reference from :doc:`../admin` to :doc:`../schema_cache`
 
 Changed
 -------
diff --git a/releases/v9.0.0.rst b/releases/v9.0.0.rst
index 7843f2403..d451bba7e 100644
--- a/releases/v9.0.0.rst
+++ b/releases/v9.0.0.rst
@@ -74,7 +74,7 @@ Breaking changes
 
 * Dropped support for PostgreSQL 9.5 as it already reached its end-of-life according to `PostgreSQL versioning policy <https://www.postgresql.org/support/versioning/>`_.
 
-* Partitions of a `partitioned table <https://www.postgresql.org/docs/current/ddl-partitioning.html#DDL-PARTITIONING-DECLARATIVE>`_ are no longer included in the :ref:`schema_cache`. This is so errors are not generated when doing resource embedding on partitioned tables.
+* Partitions of a `partitioned table <https://www.postgresql.org/docs/current/ddl-partitioning.html#DDL-PARTITIONING-DECLARATIVE>`_ are no longer included in the :doc:`../schema_cache`. This is so errors are not generated when doing resource embedding on partitioned tables.
 
 * Dropped support for doing :ref:`hint_disamb` using dots instead of exclamation marks, e.g. doing ``select=*,projects.client_id(*)`` instead of ``select=*,projects!client_id(*)``). Using dots was undocumented and deprecated back in `v6.0.2 <https://github.com/PostgREST/postgrest/releases/tag/v6.0.2>`_.
 
diff --git a/tutorials/tut0.rst b/tutorials/tut0.rst
index d17b32b7c..a0ffb936c 100644
--- a/tutorials/tut0.rst
+++ b/tutorials/tut0.rst
@@ -165,7 +165,7 @@ PostgREST can use a configuration file to tell it how to connect to the database
   db-schemas = "api"
   db-anon-role = "web_anon"
 
-The configuration file has other :ref:`options <configuration>`, but this is all we need. 
+The configuration file has other :doc:`options <../configuration>`, but this is all we need. 
 If you are not using Docker, make sure that your port number is correct and replace `postgres` with the name of the database where you added the todos table.
 
 Now run the server:

From a85dfe955832ca306df369765694e85c00273faf Mon Sep 17 00:00:00 2001
From: Wolfgang Walther <walther@technowledgy.de>
Date: Sun, 30 Jan 2022 10:54:36 +0100
Subject: [PATCH 472/652] chore: Move *.rst files to docs/ folder

Signed-off-by: Wolfgang Walther <walther@technowledgy.de>
---
 .readthedocs.yaml                                   |   6 ++++++
 default.nix                                         |   8 ++++----
 diagrams/README.md                                  |   4 ++--
 {_static => docs/_static}/2ndquadrant.png           | Bin
 {_static => docs/_static}/css/custom.css            |   0
 {_static => docs/_static}/cybertec-new.png          | Bin
 {_static => docs/_static}/cybertec.png              | Bin
 {_static => docs/_static}/db.png                    | Bin
 {_static => docs/_static}/empty.png                 | Bin
 {_static => docs/_static}/favicon.ico               | Bin
 {_static => docs/_static}/film.png                  | Bin
 {_static => docs/_static}/gnuhost.png               | Bin
 {_static => docs/_static}/logo.png                  | Bin
 {_static => docs/_static}/oblivious.jpg             | Bin
 {_static => docs/_static}/orders.png                | Bin
 {_static => docs/_static}/retool.png                | Bin
 {_static => docs/_static}/security-anon-choice.png  | Bin
 {_static => docs/_static}/security-roles.png        | Bin
 {_static => docs/_static}/supabase.png              | Bin
 {_static => docs/_static}/timescaledb.png           | Bin
 .../_static}/tuts/tut0-request-flow.png             | Bin
 {_static => docs/_static}/tuts/tut1-jwt-io.png      | Bin
 {_static => docs/_static}/win-err-dialog.png        | Bin
 admin.rst => docs/admin.rst                         |   0
 api.rst => docs/api.rst                             |   0
 auth.rst => docs/auth.rst                           |   0
 conf.py => docs/conf.py                             |   0
 configuration.rst => docs/configuration.rst         |   0
 ecosystem.rst => docs/ecosystem.rst                 |   0
 .../how-tos}/casting-type-to-custom-json.rst        |   0
 .../embedding-table-from-another-schema.rst         |   0
 .../how-tos}/providing-images-for-img.rst           |   0
 index.rst => docs/index.rst                         |   0
 install.rst => docs/install.rst                     |   0
 {releases => docs/releases}/v5.2.0.rst              |   0
 {releases => docs/releases}/v6.0.2.rst              |   0
 {releases => docs/releases}/v7.0.0.rst              |   0
 {releases => docs/releases}/v7.0.1.rst              |   0
 {releases => docs/releases}/v8.0.0.rst              |   0
 {releases => docs/releases}/v9.0.0.rst              |   0
 schema_cache.rst => docs/schema_cache.rst           |   0
 schema_structure.rst => docs/schema_structure.rst   |   0
 {tutorials => docs/tutorials}/tut0.rst              |   0
 {tutorials => docs/tutorials}/tut1.rst              |   0
 livereload_docs.py                                  |  10 +++++-----
 45 files changed, 17 insertions(+), 11 deletions(-)
 create mode 100644 .readthedocs.yaml
 rename {_static => docs/_static}/2ndquadrant.png (100%)
 rename {_static => docs/_static}/css/custom.css (100%)
 rename {_static => docs/_static}/cybertec-new.png (100%)
 rename {_static => docs/_static}/cybertec.png (100%)
 rename {_static => docs/_static}/db.png (100%)
 rename {_static => docs/_static}/empty.png (100%)
 rename {_static => docs/_static}/favicon.ico (100%)
 rename {_static => docs/_static}/film.png (100%)
 rename {_static => docs/_static}/gnuhost.png (100%)
 rename {_static => docs/_static}/logo.png (100%)
 rename {_static => docs/_static}/oblivious.jpg (100%)
 rename {_static => docs/_static}/orders.png (100%)
 rename {_static => docs/_static}/retool.png (100%)
 rename {_static => docs/_static}/security-anon-choice.png (100%)
 rename {_static => docs/_static}/security-roles.png (100%)
 rename {_static => docs/_static}/supabase.png (100%)
 rename {_static => docs/_static}/timescaledb.png (100%)
 rename {_static => docs/_static}/tuts/tut0-request-flow.png (100%)
 rename {_static => docs/_static}/tuts/tut1-jwt-io.png (100%)
 rename {_static => docs/_static}/win-err-dialog.png (100%)
 rename admin.rst => docs/admin.rst (100%)
 rename api.rst => docs/api.rst (100%)
 rename auth.rst => docs/auth.rst (100%)
 rename conf.py => docs/conf.py (100%)
 rename configuration.rst => docs/configuration.rst (100%)
 rename ecosystem.rst => docs/ecosystem.rst (100%)
 rename {how-tos => docs/how-tos}/casting-type-to-custom-json.rst (100%)
 rename {how-tos => docs/how-tos}/embedding-table-from-another-schema.rst (100%)
 rename {how-tos => docs/how-tos}/providing-images-for-img.rst (100%)
 rename index.rst => docs/index.rst (100%)
 rename install.rst => docs/install.rst (100%)
 rename {releases => docs/releases}/v5.2.0.rst (100%)
 rename {releases => docs/releases}/v6.0.2.rst (100%)
 rename {releases => docs/releases}/v7.0.0.rst (100%)
 rename {releases => docs/releases}/v7.0.1.rst (100%)
 rename {releases => docs/releases}/v8.0.0.rst (100%)
 rename {releases => docs/releases}/v9.0.0.rst (100%)
 rename schema_cache.rst => docs/schema_cache.rst (100%)
 rename schema_structure.rst => docs/schema_structure.rst (100%)
 rename {tutorials => docs/tutorials}/tut0.rst (100%)
 rename {tutorials => docs/tutorials}/tut1.rst (100%)

diff --git a/.readthedocs.yaml b/.readthedocs.yaml
new file mode 100644
index 000000000..3bce02afa
--- /dev/null
+++ b/.readthedocs.yaml
@@ -0,0 +1,6 @@
+version: 2
+sphinx:
+  configuration: docs/conf.py
+python:
+   install:
+   - requirements: requirements.txt
diff --git a/default.nix b/default.nix
index 651046e36..5dffe887a 100644
--- a/default.nix
+++ b/default.nix
@@ -31,7 +31,7 @@ in
         # clean previous build, otherwise some errors might be supressed
         rm -rf _build
 
-        ${python}/bin/sphinx-build --color -W -b html -a -n . _build
+        ${python}/bin/sphinx-build --color -W -b html -a -n docs _build
       '';
 
   serve =
@@ -50,7 +50,7 @@ in
       ''
         set -euo pipefail
 
-        FILES=$(find . -type f -iname '*.rst' | tr '\n' ' ')
+        FILES=$(find docs -type f -iname '*.rst' | tr '\n' ' ')
 
         cat $FILES \
          | grep -v '^\(\.\.\|  \)' \
@@ -67,7 +67,7 @@ in
       ''
         set -euo pipefail
 
-        FILES=$(find . -type f -iname '*.rst' | tr '\n' ' ')
+        FILES=$(find docs -type f -iname '*.rst' | tr '\n' ' ')
 
         cat postgrest.dict \
          | tail -n+2 \
@@ -81,6 +81,6 @@ in
       ''
         set -euo pipefail
 
-        ${python}/bin/sphinx-build --color -b linkcheck . _build
+        ${python}/bin/sphinx-build --color -b linkcheck docs _build
       '';
 }
diff --git a/diagrams/README.md b/diagrams/README.md
index 36fd9911d..67009dc31 100644
--- a/diagrams/README.md
+++ b/diagrams/README.md
@@ -5,7 +5,7 @@ The ER diagrams were created with https://github.com/BurntSushi/erd/.
 You can go download erd from https://github.com/BurntSushi/erd/releases and then do:
 
 ```bash
-./erd_static-x86-64 -i diagrams/film.er -o _static/film.png
+./erd_static-x86-64 -i diagrams/film.er -o docs/_static/film.png
 ```
 
 ## LaTeX
@@ -18,7 +18,7 @@ Then use this command to generate the png file.
 pdflatex --shell-escape -halt-on-error db.tex
 
 ## and move it to the static folder(it's not easy to do it in one go with the pdflatex)
-mv db.png ../_static/
+mv db.png ../docs/_static/
 ```
 
 LaTeX is used because it's a tweakable plain text format.
diff --git a/_static/2ndquadrant.png b/docs/_static/2ndquadrant.png
similarity index 100%
rename from _static/2ndquadrant.png
rename to docs/_static/2ndquadrant.png
diff --git a/_static/css/custom.css b/docs/_static/css/custom.css
similarity index 100%
rename from _static/css/custom.css
rename to docs/_static/css/custom.css
diff --git a/_static/cybertec-new.png b/docs/_static/cybertec-new.png
similarity index 100%
rename from _static/cybertec-new.png
rename to docs/_static/cybertec-new.png
diff --git a/_static/cybertec.png b/docs/_static/cybertec.png
similarity index 100%
rename from _static/cybertec.png
rename to docs/_static/cybertec.png
diff --git a/_static/db.png b/docs/_static/db.png
similarity index 100%
rename from _static/db.png
rename to docs/_static/db.png
diff --git a/_static/empty.png b/docs/_static/empty.png
similarity index 100%
rename from _static/empty.png
rename to docs/_static/empty.png
diff --git a/_static/favicon.ico b/docs/_static/favicon.ico
similarity index 100%
rename from _static/favicon.ico
rename to docs/_static/favicon.ico
diff --git a/_static/film.png b/docs/_static/film.png
similarity index 100%
rename from _static/film.png
rename to docs/_static/film.png
diff --git a/_static/gnuhost.png b/docs/_static/gnuhost.png
similarity index 100%
rename from _static/gnuhost.png
rename to docs/_static/gnuhost.png
diff --git a/_static/logo.png b/docs/_static/logo.png
similarity index 100%
rename from _static/logo.png
rename to docs/_static/logo.png
diff --git a/_static/oblivious.jpg b/docs/_static/oblivious.jpg
similarity index 100%
rename from _static/oblivious.jpg
rename to docs/_static/oblivious.jpg
diff --git a/_static/orders.png b/docs/_static/orders.png
similarity index 100%
rename from _static/orders.png
rename to docs/_static/orders.png
diff --git a/_static/retool.png b/docs/_static/retool.png
similarity index 100%
rename from _static/retool.png
rename to docs/_static/retool.png
diff --git a/_static/security-anon-choice.png b/docs/_static/security-anon-choice.png
similarity index 100%
rename from _static/security-anon-choice.png
rename to docs/_static/security-anon-choice.png
diff --git a/_static/security-roles.png b/docs/_static/security-roles.png
similarity index 100%
rename from _static/security-roles.png
rename to docs/_static/security-roles.png
diff --git a/_static/supabase.png b/docs/_static/supabase.png
similarity index 100%
rename from _static/supabase.png
rename to docs/_static/supabase.png
diff --git a/_static/timescaledb.png b/docs/_static/timescaledb.png
similarity index 100%
rename from _static/timescaledb.png
rename to docs/_static/timescaledb.png
diff --git a/_static/tuts/tut0-request-flow.png b/docs/_static/tuts/tut0-request-flow.png
similarity index 100%
rename from _static/tuts/tut0-request-flow.png
rename to docs/_static/tuts/tut0-request-flow.png
diff --git a/_static/tuts/tut1-jwt-io.png b/docs/_static/tuts/tut1-jwt-io.png
similarity index 100%
rename from _static/tuts/tut1-jwt-io.png
rename to docs/_static/tuts/tut1-jwt-io.png
diff --git a/_static/win-err-dialog.png b/docs/_static/win-err-dialog.png
similarity index 100%
rename from _static/win-err-dialog.png
rename to docs/_static/win-err-dialog.png
diff --git a/admin.rst b/docs/admin.rst
similarity index 100%
rename from admin.rst
rename to docs/admin.rst
diff --git a/api.rst b/docs/api.rst
similarity index 100%
rename from api.rst
rename to docs/api.rst
diff --git a/auth.rst b/docs/auth.rst
similarity index 100%
rename from auth.rst
rename to docs/auth.rst
diff --git a/conf.py b/docs/conf.py
similarity index 100%
rename from conf.py
rename to docs/conf.py
diff --git a/configuration.rst b/docs/configuration.rst
similarity index 100%
rename from configuration.rst
rename to docs/configuration.rst
diff --git a/ecosystem.rst b/docs/ecosystem.rst
similarity index 100%
rename from ecosystem.rst
rename to docs/ecosystem.rst
diff --git a/how-tos/casting-type-to-custom-json.rst b/docs/how-tos/casting-type-to-custom-json.rst
similarity index 100%
rename from how-tos/casting-type-to-custom-json.rst
rename to docs/how-tos/casting-type-to-custom-json.rst
diff --git a/how-tos/embedding-table-from-another-schema.rst b/docs/how-tos/embedding-table-from-another-schema.rst
similarity index 100%
rename from how-tos/embedding-table-from-another-schema.rst
rename to docs/how-tos/embedding-table-from-another-schema.rst
diff --git a/how-tos/providing-images-for-img.rst b/docs/how-tos/providing-images-for-img.rst
similarity index 100%
rename from how-tos/providing-images-for-img.rst
rename to docs/how-tos/providing-images-for-img.rst
diff --git a/index.rst b/docs/index.rst
similarity index 100%
rename from index.rst
rename to docs/index.rst
diff --git a/install.rst b/docs/install.rst
similarity index 100%
rename from install.rst
rename to docs/install.rst
diff --git a/releases/v5.2.0.rst b/docs/releases/v5.2.0.rst
similarity index 100%
rename from releases/v5.2.0.rst
rename to docs/releases/v5.2.0.rst
diff --git a/releases/v6.0.2.rst b/docs/releases/v6.0.2.rst
similarity index 100%
rename from releases/v6.0.2.rst
rename to docs/releases/v6.0.2.rst
diff --git a/releases/v7.0.0.rst b/docs/releases/v7.0.0.rst
similarity index 100%
rename from releases/v7.0.0.rst
rename to docs/releases/v7.0.0.rst
diff --git a/releases/v7.0.1.rst b/docs/releases/v7.0.1.rst
similarity index 100%
rename from releases/v7.0.1.rst
rename to docs/releases/v7.0.1.rst
diff --git a/releases/v8.0.0.rst b/docs/releases/v8.0.0.rst
similarity index 100%
rename from releases/v8.0.0.rst
rename to docs/releases/v8.0.0.rst
diff --git a/releases/v9.0.0.rst b/docs/releases/v9.0.0.rst
similarity index 100%
rename from releases/v9.0.0.rst
rename to docs/releases/v9.0.0.rst
diff --git a/schema_cache.rst b/docs/schema_cache.rst
similarity index 100%
rename from schema_cache.rst
rename to docs/schema_cache.rst
diff --git a/schema_structure.rst b/docs/schema_structure.rst
similarity index 100%
rename from schema_structure.rst
rename to docs/schema_structure.rst
diff --git a/tutorials/tut0.rst b/docs/tutorials/tut0.rst
similarity index 100%
rename from tutorials/tut0.rst
rename to docs/tutorials/tut0.rst
diff --git a/tutorials/tut1.rst b/docs/tutorials/tut1.rst
similarity index 100%
rename from tutorials/tut1.rst
rename to docs/tutorials/tut1.rst
diff --git a/livereload_docs.py b/livereload_docs.py
index 7674d11d3..5d0f5db2e 100755
--- a/livereload_docs.py
+++ b/livereload_docs.py
@@ -2,12 +2,12 @@
 from livereload import Server, shell
 from subprocess import call
 ## Build docs at startup
-call(['sphinx-build', '-b', 'html', '-a', '-n', '.', '_build'])
+call(['sphinx-build', '-b', 'html', '-a', '-n', 'docs', '_build'])
 server = Server()
-server.watch('*.rst', shell('sphinx-build -b html -a -n . _build'))
-server.watch('tutorials/*.rst', shell('sphinx-build -b html -a -n . _build'))
-server.watch('how-tos/*.rst', shell('sphinx-build -b html -a -n . _build'))
-server.watch('releases/*.rst', shell('sphinx-build -b html -a -n . _build'))
+server.watch('*.rst', shell('sphinx-build -b html -a -n docs _build'))
+server.watch('tutorials/*.rst', shell('sphinx-build -b html -a -n docs _build'))
+server.watch('how-tos/*.rst', shell('sphinx-build -b html -a -n docs _build'))
+server.watch('releases/*.rst', shell('sphinx-build -b html -a -n docs _build'))
 # For custom port and host
 # server.serve(root='_build/', host='192.168.1.2')
 server.serve(root='_build/')

From a4db05aebab3cca4f2d7264c9ec505cabdc70fa9 Mon Sep 17 00:00:00 2001
From: Wolfgang Walther <walther@technowledgy.de>
Date: Sun, 30 Jan 2022 14:19:07 +0100
Subject: [PATCH 473/652] Improve docker install examples

Removes the PGRST_DB_SCHEMA variable which is public by default now.

Removes the PGRST_DB_ANON_ROLE variable, because using the authenticator role or even a superuser is very bad practice.

Replaces the postgres superuser with app_user, because using a superuser to connect to postgres is very bad practice.

Signed-off-by: Wolfgang Walther <walther@technowledgy.de>
---
 docs/install.rst | 6 +-----
 1 file changed, 1 insertion(+), 5 deletions(-)

diff --git a/docs/install.rst b/docs/install.rst
index 6c410455e..290596b0f 100644
--- a/docs/install.rst
+++ b/docs/install.rst
@@ -130,9 +130,7 @@ The first way to run PostgREST in Docker is to connect it to an existing native
 
   # Run the server
   docker run --rm --net=host -p 3000:3000 \
-    -e PGRST_DB_URI="postgres://postgres@localhost/postgres" \
-    -e PGRST_DB_SCHEMA="public" \
-    -e PGRST_DB_ANON_ROLE="postgres" \
+    -e PGRST_DB_URI="postgres://app_user:password@localhost/postgres" \
     postgrest/postgrest
 
 The database connection string above is just an example. Adjust the role and password as necessary. You may need to edit PostgreSQL's :code:`pg_hba.conf` to grant the user local login access.
@@ -176,8 +174,6 @@ To avoid having to install the database at all, you can run both it and the serv
         - "3000:3000"
       environment:
         PGRST_DB_URI: postgres://app_user:password@db:5432/app_db
-        PGRST_DB_SCHEMA: public
-        PGRST_DB_ANON_ROLE: app_user #In production this role should not be the same as the one used for the connection
         PGRST_OPENAPI_SERVER_PROXY_URI: http://127.0.0.1:3000
       depends_on:
         - db

From 91f1580f954e99f3cdecfe611c676b035de4e683 Mon Sep 17 00:00:00 2001
From: Wolfgang Walther <walther@technowledgy.de>
Date: Sun, 30 Jan 2022 14:19:58 +0100
Subject: [PATCH 474/652] Fix warning when using docker host network

Resolves #491

Signed-off-by: Wolfgang Walther <walther@technowledgy.de>
---
 docs/install.rst | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/docs/install.rst b/docs/install.rst
index 290596b0f..eebeeb33a 100644
--- a/docs/install.rst
+++ b/docs/install.rst
@@ -129,7 +129,7 @@ The first way to run PostgREST in Docker is to connect it to an existing native
 .. code-block:: bash
 
   # Run the server
-  docker run --rm --net=host -p 3000:3000 \
+  docker run --rm --net=host \
     -e PGRST_DB_URI="postgres://app_user:password@localhost/postgres" \
     postgrest/postgrest
 
@@ -155,6 +155,15 @@ The database connection string above is just an example. Adjust the role and pas
 
     host    all             all             10.0.0.10/32            trust
 
+  The docker command will then look like this:
+
+  .. code-block:: bash
+
+    # Run the server
+    docker run --rm -p 3000:3000 \
+      -e PGRST_DB_URI="postgres://app_user:password@10.0.0.10/postgres" \
+      postgrest/postgrest
+
 .. _pg-in-docker:
 
 Containerized PostgREST *and* db with docker-compose

From e7e102bc4281fc654f98f384c7d0b374b6ba22b2 Mon Sep 17 00:00:00 2001
From: Wolfgang Walther <walther@technowledgy.de>
Date: Sun, 30 Jan 2022 11:09:41 +0100
Subject: [PATCH 475/652] ci: switch to GitHub Actions

Signed-off-by: Wolfgang Walther <walther@technowledgy.de>
---
 .circleci/config.yml      | 45 ---------------------------------------
 .github/dependabot.yml    |  6 ++++++
 .github/workflows/ci.yaml | 40 ++++++++++++++++++++++++++++++++++
 3 files changed, 46 insertions(+), 45 deletions(-)
 delete mode 100644 .circleci/config.yml
 create mode 100644 .github/dependabot.yml
 create mode 100644 .github/workflows/ci.yaml

diff --git a/.circleci/config.yml b/.circleci/config.yml
deleted file mode 100644
index 36c6ba737..000000000
--- a/.circleci/config.yml
+++ /dev/null
@@ -1,45 +0,0 @@
-version: 2.1
-
-jobs:
-  build:
-    docker:
-      - image: nixos/nix:2.3
-    steps:
-      - checkout
-      - run:
-          name: Install build script
-          command: nix-env -f default.nix -iA build
-      - run:
-          name: Build docs
-          command: postgrest-docs-build
-
-  spellcheck:
-    docker:
-      - image: nixos/nix:2.3
-    steps:
-      - checkout
-      - run:
-          name: Install spellcheck script
-          command: nix-env -f default.nix -iA spellcheck
-      - run:
-          name: Run spellcheck
-          command: postgrest-docs-spellcheck
-
-  linkcheck:
-    docker:
-      - image: nixos/nix:2.3
-    steps:
-      - checkout
-      - run:
-          name: Install linkcheck script
-          command: nix-env -f default.nix -iA linkcheck
-      - run:
-          name: Run linkcheck
-          command: postgrest-docs-linkcheck
-
-workflows:
-  check:
-    jobs:
-      - build
-      - spellcheck
-      - linkcheck
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 000000000..e2347a8c7
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,6 @@
+version: 2
+updates:
+- package-ecosystem: github-actions
+  directory: /
+  schedule:
+    interval: weekly
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
new file mode 100644
index 000000000..4f4c76349
--- /dev/null
+++ b/.github/workflows/ci.yaml
@@ -0,0 +1,40 @@
+name: CI
+
+on:
+  push:
+    branches:
+    - main
+    - v*
+  pull_request:
+    branches:
+    - main
+    - v*
+
+jobs:
+  build:
+    name: Build docs
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v2.4.0
+    - uses: cachix/install-nix-action@v16
+    - run: nix-env -f default.nix -iA build
+    - run: postgrest-docs-build
+
+  spellcheck:
+    name: Run spellcheck
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v2.4.0
+    - uses: cachix/install-nix-action@v16
+    - run: nix-env -f default.nix -iA spellcheck
+    - run: postgrest-docs-spellcheck
+
+  linkcheck:
+    name: Run linkcheck
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v2.4.0
+    - uses: cachix/install-nix-action@v16
+    - run: nix-env -f default.nix -iA linkcheck
+    - run: postgrest-docs-linkcheck
+    

From 43a92d4e6b78f18650fbaf111f9b2c28472b4ae2 Mon Sep 17 00:00:00 2001
From: Wolfgang Walther <walther@technowledgy.de>
Date: Sun, 30 Jan 2022 13:57:32 +0100
Subject: [PATCH 476/652] ci: Only run linkcheck in pull requests to main
 branch

Avoids running linkcheck on back branches, where links are outdated anyway.

Signed-off-by: Wolfgang Walther <walther@technowledgy.de>
---
 .github/workflows/ci.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 4f4c76349..b03dadad1 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -31,6 +31,7 @@ jobs:
 
   linkcheck:
     name: Run linkcheck
+    if: github.base_ref == 'main'
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v2.4.0

From 71dd891d2f8309c6c58a1f6ed88d1f32bac8f203 Mon Sep 17 00:00:00 2001
From: Wolfgang Walther <walther@technowledgy.de>
Date: Thu, 3 Feb 2022 07:49:49 +0100
Subject: [PATCH 477/652] fix postgrest-serve after move to docs/ folder

Signed-off-by: Wolfgang Walther <walther@technowledgy.de>
---
 livereload_docs.py | 5 +----
 1 file changed, 1 insertion(+), 4 deletions(-)

diff --git a/livereload_docs.py b/livereload_docs.py
index 5d0f5db2e..8dae16577 100755
--- a/livereload_docs.py
+++ b/livereload_docs.py
@@ -4,10 +4,7 @@ from subprocess import call
 ## Build docs at startup
 call(['sphinx-build', '-b', 'html', '-a', '-n', 'docs', '_build'])
 server = Server()
-server.watch('*.rst', shell('sphinx-build -b html -a -n docs _build'))
-server.watch('tutorials/*.rst', shell('sphinx-build -b html -a -n docs _build'))
-server.watch('how-tos/*.rst', shell('sphinx-build -b html -a -n docs _build'))
-server.watch('releases/*.rst', shell('sphinx-build -b html -a -n docs _build'))
+server.watch('docs/**/*.rst', shell('sphinx-build -b html -a -n docs _build'))
 # For custom port and host
 # server.serve(root='_build/', host='192.168.1.2')
 server.serve(root='_build/')

From 9c0db849ce6f46cd618555c5bd7b2375c724745c Mon Sep 17 00:00:00 2001
From: Wolfgang Walther <walther@technowledgy.de>
Date: Thu, 3 Feb 2022 07:50:55 +0100
Subject: [PATCH 478/652] Move JSON Columns and Computed Columns sections one
 level up

Both of those are about select and filters - so do not belong into "Vertical Filtering" only.

Signed-off-by: Wolfgang Walther <walther@technowledgy.de>
---
 docs/api.rst | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/docs/api.rst b/docs/api.rst
index 6367d4a3b..92dd04fbe 100644
--- a/docs/api.rst
+++ b/docs/api.rst
@@ -270,7 +270,7 @@ Casting the columns is possible by suffixing them with the double colon ``::`` p
 .. _json_columns:
 
 JSON Columns
-~~~~~~~~~~~~
+------------
 
 You can specify a path for a ``json`` or ``jsonb`` column using the arrow operators(``->`` or ``->>``) as per the `PostgreSQL docs <https://www.postgresql.org/docs/current/functions-json.html>`_.
 
@@ -351,7 +351,7 @@ Note that ``->>`` is used to compare ``blood_type`` as ``text``. To compare with
 .. _computed_cols:
 
 Computed Columns
-~~~~~~~~~~~~~~~~
+----------------
 
 Filters may be applied to computed columns(**a.k.a. virtual columns**) as well as actual table/view columns, even though the computed columns will not appear in the output. For example, to search first and last names at once we can create a computed column that will not appear in the output but can be used in a filter:
 

From 4d6909a08f654628458855776e17b5f1c28037fa Mon Sep 17 00:00:00 2001
From: Wolfgang Walther <walther@technowledgy.de>
Date: Thu, 3 Feb 2022 08:05:01 +0100
Subject: [PATCH 479/652] Mention computed columns can be on the extra search
 path.

Signed-off-by: Wolfgang Walther <walther@technowledgy.de>
---
 docs/api.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/api.rst b/docs/api.rst
index 92dd04fbe..a95f1118c 100644
--- a/docs/api.rst
+++ b/docs/api.rst
@@ -396,7 +396,7 @@ As mentioned, computed columns do not appear in the output by default. However y
 
 .. important::
 
-  Computed columns must be created under the :ref:`exposed schema <db-schemas>` to be used in this way.
+  Computed columns must be created in the :ref:`exposed schema <db-schemas>` or in a schema in the :ref:`extra search path <db-extra-search-path>` to be used in this way.
 
 Unicode support
 ---------------

From 6aeb5065f8f901888e325400fca93a31e70fa023 Mon Sep 17 00:00:00 2001
From: Wolfgang Walther <walther@technowledgy.de>
Date: Thu, 3 Feb 2022 08:06:01 +0100
Subject: [PATCH 480/652] Add docs about accessing array items and fields of
 composite types with JSON operators.

Added in https://github.com/PostgREST/postgrest/pull/2145

Signed-off-by: Wolfgang Walther <walther@technowledgy.de>
---
 docs/api.rst | 21 +++++++++++++++------
 1 file changed, 15 insertions(+), 6 deletions(-)

diff --git a/docs/api.rst b/docs/api.rst
index a95f1118c..2cac9c2a2 100644
--- a/docs/api.rst
+++ b/docs/api.rst
@@ -269,10 +269,10 @@ Casting the columns is possible by suffixing them with the double colon ``::`` p
 
 .. _json_columns:
 
-JSON Columns
-------------
+Array / Composite / JSON Columns
+--------------------------------
 
-You can specify a path for a ``json`` or ``jsonb`` column using the arrow operators(``->`` or ``->>``) as per the `PostgreSQL docs <https://www.postgresql.org/docs/current/functions-json.html>`_.
+You can specify a path for a ``json`` or ``jsonb`` column using the arrow operators(``->`` or ``->>``) as per the `PostgreSQL docs <https://www.postgresql.org/docs/current/functions-json.html>`_. This also works for array items and fields of composite types.
 
 .. tabs::
 
@@ -348,10 +348,19 @@ Note that ``->>`` is used to compare ``blood_type`` as ``text``. To compare with
     { "id": 15, "age": 35 }
   ]
 
+
+.. important::
+
+  When using the ``->`` and ``->>`` operators, PostgREST uses a query like ``to_jsonb(<col>)->'field'``. To make filtering and ordering on those nested fields use an index, the index needs to be created on the same expression, including the ``to_jsonb(...)`` call:
+
+  .. code-block:: postgres
+ 
+    CREATE INDEX ON mytable ((to_jsonb(data) -> 'identification' ->> 'registration_number'));
+
 .. _computed_cols:
 
-Computed Columns
-----------------
+Computed / Virtual Columns
+--------------------------
 
 Filters may be applied to computed columns(**a.k.a. virtual columns**) as well as actual table/view columns, even though the computed columns will not appear in the output. For example, to search first and last names at once we can create a computed column that will not appear in the output but can be used in a filter:
 
@@ -537,7 +546,7 @@ If you care where nulls are sorted, add ``nullsfirst`` or ``nullslast``:
 
     curl "http://localhost:3000/people?order=age.desc.nullslast"
 
-You can also use :ref:`computed_cols` to order the results, even though the computed columns will not appear in the output.
+You can also use :ref:`computed_cols` to order the results, even though the computed columns will not appear in the output. You can sort by nested fields of :ref:`json_columns` with the JSON operators.
 
 .. _limits:
 

From 9049ed1f7139e231142aae48eeb14ceec34b4373 Mon Sep 17 00:00:00 2001
From: Electronoob <electronoob@users.noreply.github.com>
Date: Tue, 8 Feb 2022 01:28:16 +0000
Subject: [PATCH 481/652] updated the example config switch

replacing postgrest 2 with postgrest -e
---
 docs/install.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/install.rst b/docs/install.rst
index eebeeb33a..5ab43ba11 100644
--- a/docs/install.rst
+++ b/docs/install.rst
@@ -86,7 +86,7 @@ The PostgREST server reads a configuration file as its only argument:
   postgrest /path/to/postgrest.conf
 
   # You can also generate a sample config file with
-  # postgrest 2> postgrest.conf
+  # postgrest -e > postgrest.conf
   # You'll need to edit this file and remove the usage parts for postgrest to read it
 
 For a complete reference of the configuration file, see :ref:`configuration`.

From b209731ff326b050e4491ab571bce8dff01bfc7c Mon Sep 17 00:00:00 2001
From: Steve Chavez <stevechavezast@gmail.com>
Date: Wed, 9 Feb 2022 14:17:22 -0500
Subject: [PATCH 482/652] Add admin section on file descriptors (#504)

---
 docs/admin.rst | 12 ++++++++++++
 postgrest.dict |  1 +
 2 files changed, 13 insertions(+)

diff --git a/docs/admin.rst b/docs/admin.rst
index c319c29c4..d487062ed 100644
--- a/docs/admin.rst
+++ b/docs/admin.rst
@@ -256,6 +256,7 @@ Schema Reloading
 
 Changing the schema while the server is running can lead to errors due to a stale schema cache. To learn how to refresh the cache see :ref:`schema_reloading`.
 
+
 Daemonizing
 ===========
 
@@ -295,6 +296,17 @@ After that, you can enable the service at boot time and start it with:
   ## For reloading the service
   ## systemctl restart postgrest
 
+File Descriptors
+----------------
+
+File descriptors are kernel resources that are used by HTTP connections (among others). File descriptors are limited per process. The kernel default limit is 1024, which is increased in some Linux distributions.
+When under heavy traffic, PostgREST can reach this limit and start showing ``No file descriptors available`` errors. To clear these errors, you can increase the process' file descriptor limit.
+
+.. code-block:: ini
+
+  [Service]
+  LimitNOFILE=10000
+
 Alternate URL Structure
 =======================
 
diff --git a/postgrest.dict b/postgrest.dict
index 16a91dd58..60c7055c1 100644
--- a/postgrest.dict
+++ b/postgrest.dict
@@ -51,6 +51,7 @@ Haskell
 Heroku
 HMAC
 Homebrew
+HTTP
 HTTPS
 HV
 Ibarluzea

From abe0daa3dcd9398da6a3a7cd2e25b94766dc78c3 Mon Sep 17 00:00:00 2001
From: Laurence Isla <lau.isla.c@gmail.com>
Date: Tue, 15 Feb 2022 14:20:12 -0500
Subject: [PATCH 483/652] Add example for array and composite type columns

---
 docs/api.rst | 44 +++++++++++++++++++++++++++++++++++++++++++-
 1 file changed, 43 insertions(+), 1 deletion(-)

diff --git a/docs/api.rst b/docs/api.rst
index 2cac9c2a2..6856e6e81 100644
--- a/docs/api.rst
+++ b/docs/api.rst
@@ -272,7 +272,14 @@ Casting the columns is possible by suffixing them with the double colon ``::`` p
 Array / Composite / JSON Columns
 --------------------------------
 
-You can specify a path for a ``json`` or ``jsonb`` column using the arrow operators(``->`` or ``->>``) as per the `PostgreSQL docs <https://www.postgresql.org/docs/current/functions-json.html>`_. This also works for array items and fields of composite types.
+You can specify a path for a ``json`` or ``jsonb`` column using the arrow operators(``->`` or ``->>``) as per the `PostgreSQL docs <https://www.postgresql.org/docs/current/functions-json.html>`_.
+
+.. code-block:: postgres
+
+  CREATE TABLE people (
+    id int,
+    json_data json
+  );
 
 .. tabs::
 
@@ -348,6 +355,41 @@ Note that ``->>`` is used to compare ``blood_type`` as ``text``. To compare with
     { "id": 15, "age": 35 }
   ]
 
+The arrow operators are also used for array and composite type columns.
+
+.. code-block:: postgres
+
+  CREATE TYPE coordinates (
+    lat decimal(8,6),
+    long decimal(9,6)
+  );
+
+  CREATE TABLE countries (
+    id int,
+    location coordinates,
+    languages text[]
+  );
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /countries?select=id,location->>lat,location->>long,primary_language:languages->0&location->lat=gte.19 HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/countries?select=id,location->>lat,location->>long,primary_language:languages->0&location->lat=gte.19"
+
+.. code-block:: json
+
+  [
+    {
+      "id": 5,
+      "lat": "19.741755",
+      "long": "-155.844437",
+      "primary_language": "en"
+    }
+  ]
 
 .. important::
 

From fbe317b2444ef0ae0a0b550906b27537bc2394c1 Mon Sep 17 00:00:00 2001
From: Adam Kliment <79609+netmilk@users.noreply.github.com>
Date: Tue, 22 Feb 2022 17:48:22 +0100
Subject: [PATCH 484/652] Update auth.rst (#507)

---
 docs/auth.rst | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/docs/auth.rst b/docs/auth.rst
index 867339cbc..94e449db5 100644
--- a/docs/auth.rst
+++ b/docs/auth.rst
@@ -93,9 +93,18 @@ Alternately database roles can represent groups instead of (or in addition to) i
 
 SQL code can access claims through GUC variables set by PostgREST per request. For instance to get the email claim, call this function:
 
+For PostgreSQL server version >= 14
+
 .. code:: sql
 
   current_setting('request.jwt.claims', true)::json->>'email';
+  
+
+For PostgreSQL server version < 14
+
+.. code:: sql
+
+  current_setting('request.jwt.claim.email', true);
 
 This allows JWT generation services to include extra information and your database code to react to it. For instance the RLS example could be modified to use this current_setting rather than current_user. The second 'true' argument tells current_setting to return NULL if the setting is missing from the current configuration.
 

From 4aff0caa59b88b3c828fb12bcdfc13e0f797f532 Mon Sep 17 00:00:00 2001
From: Laurence Isla <lau.isla.c@gmail.com>
Date: Wed, 23 Feb 2022 17:25:07 -0500
Subject: [PATCH 485/652] Add documentation on the minimal health check

---
 docs/admin.rst         | 29 +++++++++++++++++++++++++++++
 docs/configuration.rst | 22 ++++++++++++++++++----
 2 files changed, 47 insertions(+), 4 deletions(-)

diff --git a/docs/admin.rst b/docs/admin.rst
index d487062ed..f2f0ad8f8 100644
--- a/docs/admin.rst
+++ b/docs/admin.rst
@@ -256,6 +256,35 @@ Schema Reloading
 
 Changing the schema while the server is running can lead to errors due to a stale schema cache. To learn how to refresh the cache see :ref:`schema_reloading`.
 
+.. _health_check:
+
+Health Check
+------------
+
+You can enable a minimal health check to verify if PostgREST is available for client requests and to check the status of its internal state.
+
+To do this, set the configuration variable :ref:`admin-server-port` to the port number of your preference. Two endpoints ``live`` and ``ready`` will then be available.
+
+The ``live`` endpoint verifies if PostgREST is running on its configured port. A request will return ``200 OK`` if PostgREST is alive or ``503`` otherwise.
+
+The ``ready`` endpoint also checks the state of both the Database Connection and the :ref:`schema_cache`. A request will return ``200 OK`` if it is ready or ``503`` if not.
+
+For instance, to verify if PostgREST is running at ``localhost:3000`` while the ``admin-server-port`` is set to ``3001``:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET localhost:3001/live HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl -I "http://localhost:3001/live"
+
+.. code-block:: http
+
+  HTTP/1.1 200 OK
+
 
 Daemonizing
 ===========
diff --git a/docs/configuration.rst b/docs/configuration.rst
index 422093d36..57c22199b 100644
--- a/docs/configuration.rst
+++ b/docs/configuration.rst
@@ -105,6 +105,7 @@ It's not possible to change :ref:`env_variables_config` for a running process an
 
   The following settings will not be reloaded. You will need to restart PostgREST to change those.
 
+    * :ref:`admin-server-port`
     * :ref:`db-uri`
     * :ref:`db-pool`
     * :ref:`db-pool-timeout`
@@ -145,6 +146,7 @@ List of parameters
 ======================== ======= ================= ==========
 Name                     Type    Default           Reloadable
 ======================== ======= ================= ==========
+admin-server-port        Int
 app.settings.*           String                    Y
 db-anon-role             String                    Y
 db-channel               String  pgrst             Y
@@ -174,6 +176,18 @@ server-unix-socket       String
 server-unix-socket-mode  String  660
 ======================== ======= ================= ==========
 
+.. _admin-server-port:
+
+admin-server-port
+-----------------
+
+  =============== =======================
+  **Environment** PGRST_ADMIN_SERVER_PORT
+  **In-Database** `n/a`
+  =============== =======================
+
+Specifies the port for the :ref:`health_check` endpoints.
+
 .. _app.settings.*:
 
 app.settings.*
@@ -589,7 +603,7 @@ server-host
 
   =============== =================
   **Environment** PGRST_SERVER_HOST
-  **In-Database** pgrst.server_host
+  **In-Database** `n/a`
   =============== =================
 
   Where to bind the PostgREST web server. In addition to the usual address options, PostgREST interprets these reserved addresses with special meanings:
@@ -607,7 +621,7 @@ server-port
 
   =============== =================
   **Environment** PGRST_SERVER_PORT
-  **In-Database** pgrst.server_port
+  **In-Database** `n/a`
   =============== =================
 
   The TCP port to bind the web server.
@@ -619,7 +633,7 @@ server-unix-socket
 
   =============== =================
   **Environment** PGRST_SERVER_UNIX_SOCKET
-  **In-Database** pgrst.server_unix_socket
+  **In-Database** `n/a`
   =============== =================
 
   `Unix domain socket <https://en.wikipedia.org/wiki/Unix_domain_socket>`_ where to bind the PostgREST web server.
@@ -636,7 +650,7 @@ server-unix-socket-mode
 
   =============== =================
   **Environment** PGRST_SERVER_UNIX_SOCKET_MODE
-  **In-Database** pgrst.server_unix_socket_mode
+  **In-Database** `n/a`
   =============== =================
 
   `Unix file mode <https://en.wikipedia.org/wiki/File_system_permissions>`_ to be set for the socket specified in :ref:`server-unix-socket`

From e9ef876433348a76e32320857ad4edf0de207041 Mon Sep 17 00:00:00 2001
From: Wolfgang Walther <walther@technowledgy.de>
Date: Tue, 8 Feb 2022 09:07:02 +0100
Subject: [PATCH 486/652] Add hint on how to prevent exposing computed columns
 as RPCs

Signed-off-by: Wolfgang Walther <walther@technowledgy.de>
---
 docs/api.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/api.rst b/docs/api.rst
index 6856e6e81..ab4f997fb 100644
--- a/docs/api.rst
+++ b/docs/api.rst
@@ -447,7 +447,7 @@ As mentioned, computed columns do not appear in the output by default. However y
 
 .. important::
 
-  Computed columns must be created in the :ref:`exposed schema <db-schemas>` or in a schema in the :ref:`extra search path <db-extra-search-path>` to be used in this way.
+  Computed columns must be created in the :ref:`exposed schema <db-schemas>` or in a schema in the :ref:`extra search path <db-extra-search-path>` to be used in this way. When placing the computed column in the :ref:`exposed schema <db-schemas>` you can use an **unnamed** argument, as in the example above, to prevent it from being exposed as an :ref:`RPC <s_procs>` under ``/rpc``.
 
 Unicode support
 ---------------

From 98976e4d57b862e4b177438763aae351c02ecdab Mon Sep 17 00:00:00 2001
From: Laurence Isla <vanquisher.laurence.02@gmail.com>
Date: Fri, 4 Mar 2022 20:04:49 -0500
Subject: [PATCH 487/652] Add how-to for working with PostgreSQL data types

---
 .../working-with-postgresql-data-types.rst    | 80 +++++++++++++++++++
 docs/index.rst                                |  1 +
 postgrest.dict                                |  1 +
 3 files changed, 82 insertions(+)
 create mode 100644 docs/how-tos/working-with-postgresql-data-types.rst

diff --git a/docs/how-tos/working-with-postgresql-data-types.rst b/docs/how-tos/working-with-postgresql-data-types.rst
new file mode 100644
index 000000000..7cba0a979
--- /dev/null
+++ b/docs/how-tos/working-with-postgresql-data-types.rst
@@ -0,0 +1,80 @@
+.. _working_with_types:
+
+Working with PostgreSQL data types
+==================================
+
+PostgREST makes use of PostgreSQL string representations to work with data types. Thanks to this, you can use special values, such as ``now`` for timestamps, ``yes`` for booleans or time values including the time zones. This page describes how you can take advantage of these string representations to perform operations on different PostgreSQL data types.
+
+Timestamps
+----------
+
+You can use the **time zone** to filter or send data if needed. Let's use this table as an example:
+
+.. code-block:: postgres
+
+  create table reports (
+    id int primary key
+    , due_date timestamptz
+  );
+
+Suppose you are located in Sydney and want create a report with the date in the local time zone. Your request should look like this:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    POST /reports HTTP/1.1
+    Content-Type: application/json
+
+    [{ "id": 1, "due_date": "2022-02-24 11:10:15 Australia/Sydney" },
+     { "id": 2, "due_date": "2022-02-27 22:00:00 Australia/Sydney" }]
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/reports" \
+      -X POST -H "Content-Type: application/json" \
+      -d '[{ "id": 1, "due_date": "2022-02-24 11:10:15 Australia/Sydney" },{ "id": 2, "due_date": "2022-02-27 22:00:00 Australia/Sydney" }]'
+
+Someone located in Cairo can retrieve the data using their local time, too:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /reports?due_date=eq.2022-02-24+02:10:15+Africa/Cairo HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/reports?due_date=eq.2022-02-24+02:10:15+Africa/Cairo"
+
+.. code-block:: json
+
+  [
+    {
+      "id": 1,
+      "due_date": "2022-02-23T19:10:15-05:00"
+    }
+  ]
+
+The response has the date in the time zone configured by the server: ``UTC -05:00``.
+
+You can use other comparative filters and also `PostgreSQL special date/time input values <https://www.postgresql.org/docs/current/datatype-datetime.html#DATATYPE-DATETIME-SPECIAL-TABLE>`_. For instance, to get the reports that are due after today you would do:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /reports?due_date=gt.today HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/reports?due_date=gt.today"
+
+.. code-block:: json
+
+  [
+    {
+      "id": 2,
+      "due_date": "2022-02-27T06:00:00-05:00"
+    }
+  ]
diff --git a/docs/index.rst b/docs/index.rst
index 3d522585d..8fa7b04f7 100644
--- a/docs/index.rst
+++ b/docs/index.rst
@@ -201,6 +201,7 @@ These are recipes that'll help you address specific use-cases.
 - :doc:`how-tos/embedding-table-from-another-schema`
 - :doc:`how-tos/providing-images-for-img`
 - `How PostgreSQL triggers work when called with a PostgREST PATCH HTTP request <https://blog.fgribreau.com/2020/11/how-postgresql-triggers-works-when.html>`_
+- :doc:`how-tos/working-with-postgresql-data-types`
 
 Ecosystem
 ---------
diff --git a/postgrest.dict b/postgrest.dict
index 60c7055c1..1ac2dd976 100644
--- a/postgrest.dict
+++ b/postgrest.dict
@@ -11,6 +11,7 @@ authenticator
 backoff
 balancer
 Beles
+booleans
 Bouscal
 buildpack
 Cardano

From ea58095e92bac0ad5f5af826aec2145d67fd82db Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 8 Mar 2022 01:56:21 +0100
Subject: [PATCH 488/652] Bump actions/checkout from 2.4.0 to 3 (#512)

---
 .github/workflows/ci.yaml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index b03dadad1..fb815e2cc 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -15,7 +15,7 @@ jobs:
     name: Build docs
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v2.4.0
+    - uses: actions/checkout@v3
     - uses: cachix/install-nix-action@v16
     - run: nix-env -f default.nix -iA build
     - run: postgrest-docs-build
@@ -24,7 +24,7 @@ jobs:
     name: Run spellcheck
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v2.4.0
+    - uses: actions/checkout@v3
     - uses: cachix/install-nix-action@v16
     - run: nix-env -f default.nix -iA spellcheck
     - run: postgrest-docs-spellcheck
@@ -34,7 +34,7 @@ jobs:
     if: github.base_ref == 'main'
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v2.4.0
+    - uses: actions/checkout@v3
     - uses: cachix/install-nix-action@v16
     - run: nix-env -f default.nix -iA linkcheck
     - run: postgrest-docs-linkcheck

From 1489fc84b8a28d61936b2d2c8ed0ca7f68147159 Mon Sep 17 00:00:00 2001
From: Laurence Isla <lau.isla.c@gmail.com>
Date: Mon, 14 Mar 2022 14:56:34 -0500
Subject: [PATCH 489/652] Recommend specifying host names for health check
 (#514)

In case of multiple network interfaces
---
 docs/admin.rst | 1 +
 1 file changed, 1 insertion(+)

diff --git a/docs/admin.rst b/docs/admin.rst
index f2f0ad8f8..acdfc29a1 100644
--- a/docs/admin.rst
+++ b/docs/admin.rst
@@ -285,6 +285,7 @@ For instance, to verify if PostgREST is running at ``localhost:3000`` while the
 
   HTTP/1.1 200 OK
 
+If you have a machine with multiple network interfaces and multiple PostgREST instances in the same port, you need to specify a unique :ref:`hostname <server-host>` in the configuration of each PostgREST instance for the health check to work correctly. Don't use the special values(``!4``, ``*``, etc) in this case because the health check could report a false positive.
 
 Daemonizing
 ===========

From 8f989480783ab05067e66fe623be7974b83950d1 Mon Sep 17 00:00:00 2001
From: Laurence Isla <lau.isla.c@gmail.com>
Date: Mon, 14 Mar 2022 15:03:01 -0500
Subject: [PATCH 490/652] Add Errors reference (#430)

* Adds PostgREST' error codes

* Move error information to a dedicated reference page

* Organize errors into tables
---
 docs/_static/css/custom.css |   8 +
 docs/admin.rst              |   5 +
 docs/api.rst                |  89 ++---------
 docs/errors.rst             | 301 ++++++++++++++++++++++++++++++++++++
 docs/index.rst              |   7 +
 docs/schema_cache.rst       |  12 +-
 docs/tutorials/tut0.rst     |   2 +-
 docs/tutorials/tut1.rst     |   7 +-
 postgrest.dict              |   2 +
 9 files changed, 356 insertions(+), 77 deletions(-)
 create mode 100644 docs/errors.rst

diff --git a/docs/_static/css/custom.css b/docs/_static/css/custom.css
index 6015b6d48..fc7f2edb6 100644
--- a/docs/_static/css/custom.css
+++ b/docs/_static/css/custom.css
@@ -57,3 +57,11 @@ div.line-block {
   margin-right: auto;
   margin-bottom: 24px;
 }
+
+.wy-table-responsive table td {
+    white-space: normal !important;
+}
+
+.wy-table-responsive {
+    overflow: visible !important;
+}
diff --git a/docs/admin.rst b/docs/admin.rst
index acdfc29a1..e7a7448f9 100644
--- a/docs/admin.rst
+++ b/docs/admin.rst
@@ -153,6 +153,11 @@ Server Version
 
 When debugging a problem it's important to verify the PostgREST version. At any time you can make a request to the running server and determine exactly which version is deployed. Look for the :code:`Server` HTTP response header, which contains the version number.
 
+Errors
+------
+
+See the :doc:`Errors <errors>` reference page for detailed information on the errors that PostgREST returns.
+
 .. _pgrst_logging:
 
 Logging
diff --git a/docs/api.rst b/docs/api.rst
index ab4f997fb..7acaafa36 100644
--- a/docs/api.rst
+++ b/docs/api.rst
@@ -539,6 +539,8 @@ Here ``Quote:"`` and ``Backslash:\`` are percent-encoded values. Note that ``%5C
    Some HTTP libraries might encode URLs automatically(e.g. :code:`axios`). In these cases you should use double quotes
    :code:`""` directly instead of :code:`%22`.
 
+.. _ordering:
+
 Ordering
 --------
 
@@ -827,7 +829,9 @@ When a singular response is requested but no entries are found, the server respo
 
   {
     "message": "JSON object requested, multiple (or no) rows returned",
-    "details": "Results contain 0 rows, application/vnd.pgrst.object+json requires 1 row"
+    "details": "Results contain 0 rows, application/vnd.pgrst.object+json requires 1 row",
+    "hint": null,
+    "code": "PGRST505"
   }
 
 .. note::
@@ -1714,6 +1718,8 @@ By specifying the ``on_conflict`` query parameter, you can make UPSERT work on a
       ]
     EOF
 
+.. _upsert_put:
+
 PUT
 ~~~
 
@@ -2636,8 +2642,10 @@ You can set the ``response.status`` GUC to override the default status code Post
 
   HTTP/1.1 418 I'm a teapot
 
-  {"message" : "The requested entity body is short and stout.",
-   "hint" : "Tip it over and pour it out."}
+  {
+    "message" : "The requested entity body is short and stout.",
+    "hint" : "Tip it over and pour it out."
+  }
 
 If the status code is standard, PostgREST will complete the status message(**I'm a teapot** in this example).
 
@@ -2693,72 +2701,9 @@ Returns:
   HTTP/1.1 402 Payment Required
   Content-Type: application/json; charset=utf-8
 
-  {"hint":"Upgrade your plan","details":"Quota exceeded"}
-
-.. _status_codes:
-
-HTTP Status Codes
------------------
-
-PostgREST translates `PostgreSQL error codes <https://www.postgresql.org/docs/current/errcodes-appendix.html>`_ into HTTP status as follows:
-
-+--------------------------+-------------------------+---------------------------------+
-| PostgreSQL error code(s) | HTTP status             | Error description               |
-+==========================+=========================+=================================+
-| 08*                      | 503                     | pg connection err               |
-+--------------------------+-------------------------+---------------------------------+
-| 09*                      | 500                     | triggered action exception      |
-+--------------------------+-------------------------+---------------------------------+
-| 0L*                      | 403                     | invalid grantor                 |
-+--------------------------+-------------------------+---------------------------------+
-| 0P*                      | 403                     | invalid role specification      |
-+--------------------------+-------------------------+---------------------------------+
-| 23503                    | 409                     | foreign key violation           |
-+--------------------------+-------------------------+---------------------------------+
-| 23505                    | 409                     | uniqueness violation            |
-+--------------------------+-------------------------+---------------------------------+
-| 25006                    | 405                     | read only sql transaction       |
-+--------------------------+-------------------------+---------------------------------+
-| 25*                      | 500                     | invalid transaction state       |
-+--------------------------+-------------------------+---------------------------------+
-| 28*                      | 403                     | invalid auth specification      |
-+--------------------------+-------------------------+---------------------------------+
-| 2D*                      | 500                     | invalid transaction termination |
-+--------------------------+-------------------------+---------------------------------+
-| 38*                      | 500                     | external routine exception      |
-+--------------------------+-------------------------+---------------------------------+
-| 39*                      | 500                     | external routine invocation     |
-+--------------------------+-------------------------+---------------------------------+
-| 3B*                      | 500                     | savepoint exception             |
-+--------------------------+-------------------------+---------------------------------+
-| 40*                      | 500                     | transaction rollback            |
-+--------------------------+-------------------------+---------------------------------+
-| 53*                      | 503                     | insufficient resources          |
-+--------------------------+-------------------------+---------------------------------+
-| 54*                      | 413                     | too complex                     |
-+--------------------------+-------------------------+---------------------------------+
-| 55*                      | 500                     | obj not in prerequisite state   |
-+--------------------------+-------------------------+---------------------------------+
-| 57*                      | 500                     | operator intervention           |
-+--------------------------+-------------------------+---------------------------------+
-| 58*                      | 500                     | system error                    |
-+--------------------------+-------------------------+---------------------------------+
-| F0*                      | 500                     | config file error               |
-+--------------------------+-------------------------+---------------------------------+
-| HV*                      | 500                     | foreign data wrapper error      |
-+--------------------------+-------------------------+---------------------------------+
-| P0001                    | 400                     | default code for "raise"        |
-+--------------------------+-------------------------+---------------------------------+
-| P0*                      | 500                     | PL/pgSQL error                  |
-+--------------------------+-------------------------+---------------------------------+
-| XX*                      | 500                     | internal error                  |
-+--------------------------+-------------------------+---------------------------------+
-| 42883                    | 404                     | undefined function              |
-+--------------------------+-------------------------+---------------------------------+
-| 42P01                    | 404                     | undefined table                 |
-+--------------------------+-------------------------+---------------------------------+
-| 42501                    | | if authenticated 403, | insufficient privileges         |
-|                          | | else 401              |                                 |
-+--------------------------+-------------------------+---------------------------------+
-| other                    | 400                     |                                 |
-+--------------------------+-------------------------+---------------------------------+
+  {
+    "message": "Payment Required",
+    "details": "Quota exceeded",
+    "hint": "Upgrade your plan",
+    "code": "PT402"
+  }
diff --git a/docs/errors.rst b/docs/errors.rst
new file mode 100644
index 000000000..39fa807a4
--- /dev/null
+++ b/docs/errors.rst
@@ -0,0 +1,301 @@
+.. _error_source:
+
+Error Source
+============
+
+For the most part, error messages will come directly from the database with the same `format that PostgreSQL uses <https://www.postgresql.org/docs/current/plpgsql-errors-and-messages.html>`_, in other words, PostgREST will convert the ``MESSAGE``, ``DETAIL``, ``HINT`` and ``ERRCODE`` from the PostgreSQL error to JSON format and add an HTTP status code to the response (see :ref:`status_codes`). For instance, this is the error you will get when querying a nonexistent table:
+
+.. code-block:: http
+
+  GET /nonexistent_table?id=eq.1 HTTP/1.1
+
+.. code-block:: json
+
+  {
+    "hint": null,
+    "details": null,
+    "code": "42P01",
+    "message": "relation \"api.nonexistent_table\" does not exist"
+  }
+
+However, some errors do come from PostgREST itself (such as those related to the :ref:`schema_cache`). These have the same structure as the PostgreSQL errors (message, details, hint and code) but are differentiated by the ``PGRST`` prefix in the ``code`` field (see :ref:`pgrst_errors`). For instance, when querying a function that does not exist, the error will be:
+
+.. code-block:: http
+
+  POST /rpc/nonexistent_function HTTP/1.1
+
+.. code-block:: json
+
+  {
+    "hint": "If a new function was created in the database with this name and parameters, try reloading the schema cache.",
+    "details": null
+    "code": "PGRST202",
+    "message": "Could not find the api.nonexistent_function() function in the schema cache"
+  }
+
+.. _status_codes:
+
+HTTP Status Codes
+=================
+
+PostgREST translates `PostgreSQL error codes <https://www.postgresql.org/docs/current/errcodes-appendix.html>`_ into HTTP status as follows:
+
++--------------------------+-------------------------+---------------------------------+
+| PostgreSQL error code(s) | HTTP status             | Error description               |
++==========================+=========================+=================================+
+| 08*                      | 503                     | pg connection err               |
++--------------------------+-------------------------+---------------------------------+
+| 09*                      | 500                     | triggered action exception      |
++--------------------------+-------------------------+---------------------------------+
+| 0L*                      | 403                     | invalid grantor                 |
++--------------------------+-------------------------+---------------------------------+
+| 0P*                      | 403                     | invalid role specification      |
++--------------------------+-------------------------+---------------------------------+
+| 23503                    | 409                     | foreign key violation           |
++--------------------------+-------------------------+---------------------------------+
+| 23505                    | 409                     | uniqueness violation            |
++--------------------------+-------------------------+---------------------------------+
+| 25006                    | 405                     | read only sql transaction       |
++--------------------------+-------------------------+---------------------------------+
+| 25*                      | 500                     | invalid transaction state       |
++--------------------------+-------------------------+---------------------------------+
+| 28*                      | 403                     | invalid auth specification      |
++--------------------------+-------------------------+---------------------------------+
+| 2D*                      | 500                     | invalid transaction termination |
++--------------------------+-------------------------+---------------------------------+
+| 38*                      | 500                     | external routine exception      |
++--------------------------+-------------------------+---------------------------------+
+| 39*                      | 500                     | external routine invocation     |
++--------------------------+-------------------------+---------------------------------+
+| 3B*                      | 500                     | savepoint exception             |
++--------------------------+-------------------------+---------------------------------+
+| 40*                      | 500                     | transaction rollback            |
++--------------------------+-------------------------+---------------------------------+
+| 53*                      | 503                     | insufficient resources          |
++--------------------------+-------------------------+---------------------------------+
+| 54*                      | 413                     | too complex                     |
++--------------------------+-------------------------+---------------------------------+
+| 55*                      | 500                     | obj not in prerequisite state   |
++--------------------------+-------------------------+---------------------------------+
+| 57*                      | 500                     | operator intervention           |
++--------------------------+-------------------------+---------------------------------+
+| 58*                      | 500                     | system error                    |
++--------------------------+-------------------------+---------------------------------+
+| F0*                      | 500                     | config file error               |
++--------------------------+-------------------------+---------------------------------+
+| HV*                      | 500                     | foreign data wrapper error      |
++--------------------------+-------------------------+---------------------------------+
+| P0001                    | 400                     | default code for "raise"        |
++--------------------------+-------------------------+---------------------------------+
+| P0*                      | 500                     | PL/pgSQL error                  |
++--------------------------+-------------------------+---------------------------------+
+| XX*                      | 500                     | internal error                  |
++--------------------------+-------------------------+---------------------------------+
+| 42883                    | 404                     | undefined function              |
++--------------------------+-------------------------+---------------------------------+
+| 42P01                    | 404                     | undefined table                 |
++--------------------------+-------------------------+---------------------------------+
+| 42501                    | | if authenticated 403, | insufficient privileges         |
+|                          | | else 401              |                                 |
++--------------------------+-------------------------+---------------------------------+
+| other                    | 400                     |                                 |
++--------------------------+-------------------------+---------------------------------+
+
+.. _pgrst_errors:
+
+PostgREST Error Codes
+=====================
+
+PostgREST error codes have the form ``PGRSTgxx``, where ``PGRST`` is the prefix that differentiates the error from a PostgreSQL error, ``g`` is the group where the error belongs and ``xx`` is the number that identifies the error in the group.
+
+.. _pgrst0**:
+
+Group 0 - Connection
+--------------------
+
+Related to the connection with the database.
+
++---------------+-------------------------------------------------------------+
+| Code          | Description                                                 |
++===============+=============================================================+
+| .. _pgrst000: | Could not connect with the database due to an incorrect     |
+|               | :ref:`db-uri` or due to the PostgreSQL service not running. |
+| PGRST000      |                                                             |
++---------------+-------------------------------------------------------------+
+| .. _pgrst001: | Could not connect with the database due to an internal      |
+|               | error.                                                      |
+| PGRST001      |                                                             |
++---------------+-------------------------------------------------------------+
+| .. _pgrst002: | Could not connect with the database when building the       |
+|               | :ref:`schema_cache` due to the PostgreSQL service not       |
+| PGRST002      | running.                                                    |
++---------------+-------------------------------------------------------------+
+
+.. _pgrst1**:
+
+Group 1 - Api Request
+---------------------
+
+Related to the HTTP request elements.
+
++---------------+-------------------------------------------------------------+
+| Code          | Description                                                 |
++===============+=============================================================+
+| .. _pgrst100: | Parsing error in the query string parameter.                |
+|               | See :ref:`h_filter`, :ref:`operators` and :ref:`ordering`.  |
+| PGRST100      |                                                             |
++---------------+-------------------------------------------------------------+
+| .. _pgrst101: | For :ref:`functions <s_procs>`, only ``GET`` and ``POST``   |
+|               | verbs are allowed. Any other verb will throw this error.    |
+| PGRST101      |                                                             |
++---------------+-------------------------------------------------------------+
+| .. _pgrst102: | Related to the request body structure.                      |
+|               | See :ref:`insert_update`.                                   |
+| PGRST102      |                                                             |
++---------------+-------------------------------------------------------------+
+| .. _pgrst103: | Related to :ref:`limits`.                                   |
+|               |                                                             |
+| PGRST103      |                                                             |
++---------------+-------------------------------------------------------------+
+| .. _pgrst104: | Either the :ref:`filter operator <operators>` is missing    |
+|               | or it doesn't exist.                                        |
+| PGRST104      |                                                             |
++---------------+-------------------------------------------------------------+
+| .. _pgrst105: | Related to an :ref:`UPSERT using PUT <upsert_put>`.         |
+|               |                                                             |
+| PGRST105      |                                                             |
++---------------+-------------------------------------------------------------+
+| .. _pgrst106: | The schema specified when                                   |
+|               | :ref:`switching schemas <multiple-schemas>` is not present  |
+| PGRST106      | in the :ref:`db-schemas` configuration variable.            |
++---------------+-------------------------------------------------------------+
+| .. _pgrst107: | The ``Content-Type`` sent in the request is invalid.        |
+|               |                                                             |
+| PGRST107      |                                                             |
++---------------+-------------------------------------------------------------+
+| .. _pgrst108: | The filter is applied to a embedded resource that is not    |
+|               | specified in the ``select`` part of the query string.       |
+| PGRST108      | See :ref:`embed_filters`.                                   |
++---------------+-------------------------------------------------------------+
+
+.. _pgrst2**:
+
+Group 2 - Schema Cache
+----------------------
+
+Related to a :ref:`stale schema cache <stale_schema>`. Most of the time, these errors are solved by :ref:`reloading the schema cache <schema_reloading>`.
+
++---------------+-------------------------------------------------------------+
+| Code          | Description                                                 |
++===============+=============================================================+
+| .. _pgrst200: | Caused by :ref:`stale_fk_relationships`, otherwise any of   |
+|               | the embedding resources or the relationship itself may not  |
+| PGRST200      | exist in the database.                                      |
++---------------+-------------------------------------------------------------+
+| .. _pgrst201: | Related to :ref:`embed_disamb`.                             |
+|               |                                                             |
+| PGRST201      |                                                             |
++---------------+-------------------------------------------------------------+
+| .. _pgrst202: | Caused by a :ref:`stale_function_signature`, otherwise      |
+|               | the function may not exist in the database.                 |
+| PGRST202      |                                                             |
++---------------+-------------------------------------------------------------+
+| .. _pgrst203: | Caused by requesting overloaded functions with the same     |
+|               | argument names but different types, or by using a ``POST``  |
+| PGRST203      | verb to request overloaded functions with a ``JSON`` or     |
+|               | ``JSONB`` type unnamed parameter. The solution is to rename |
+|               | the function or add/modify the names of the arguments.      |
++---------------+-------------------------------------------------------------+
+
+.. _pgrst3**:
+
+Group 3 - JWT errors
+--------------------
+
+Related to the authentication process using JWT. You can follow the :ref:`tut1` for an example on how to implement authentication and the :doc:`Authentication page <auth>` for more information on this process.
+
++---------------+-------------------------------------------------------------+
+| Code          | Description                                                 |
++===============+=============================================================+
+| .. _pgrst300: | A :ref:`JWT secret <jwt-secret>` is missing from the        |
+|               | configuration.                                              |
+| PGRST300      |                                                             |
++---------------+-------------------------------------------------------------+
+| .. _pgrst301: | Any error related to the verification of the JWT,           |
+|               | which means that the JWT provided is invalid in some way.   |
+| PGRST301      |                                                             |
++---------------+-------------------------------------------------------------+
+| .. _pgrst302: | Attempted to do a request without                           |
+|               | :ref:`authentication <client_auth>` when the anonymous role |
+| PGRST302      | is disabled by not setting it in :ref:`db-anon-role`.       |
++---------------+-------------------------------------------------------------+
+
+.. _pgrst4**:
+
+Group 4 - Hasql
+---------------
+
+Related to `the library <https://hackage.haskell.org/package/hasql>`_ that PostgREST uses to connect to the database. If you encounter any of these errors, you may have stumbled on a PostgREST bug, please `open an issue <https://github.com/PostgREST/postgrest/issues>`_ and we'll be glad to fix it.
+
++---------------+-------------------------------------------------------------+
+| Code          | Description                                                 |
++===============+=============================================================+
+| .. _pgrst400: | Internal error: Unexpected Result.                          |
+|               |                                                             |
+| PGRST400      |                                                             |
++---------------+-------------------------------------------------------------+
+| .. _pgrst401: | Internal error: Attempted to parse more columns than        |
+|               | there are in the result.                                    |
+| PGRST401      |                                                             |
++---------------+-------------------------------------------------------------+
+| .. _pgrst402: | Internal error: Attempted to parse a NULL as some value.    |
+|               |                                                             |
+| PGRST402      |                                                             |
++---------------+-------------------------------------------------------------+
+| .. _pgrst403: | Internal error: Wrong value parser used.                    |
+|               |                                                             |
+| PGRST403      |                                                             |
++---------------+-------------------------------------------------------------+
+| .. _pgrst404: | Internal error: Unexpected amount of rows.                  |
+|               |                                                             |
+| PGRST404      |                                                             |
++---------------+-------------------------------------------------------------+
+
+.. _pgrst5**:
+
+Group 5 - General
+-----------------
+
+These are uncategorized errors.
+
++---------------+-------------------------------------------------------------+
+| Code          | Description                                                 |
++===============+=============================================================+
+| .. _pgrst500: | Related to :ref:`guc_resp_hdrs`.                            |
+|               |                                                             |
+| PGRST500      |                                                             |
++---------------+-------------------------------------------------------------+
+| .. _pgrst501: | The status code must be a positive integer.                 |
+|               | See :ref:`guc_resp_status`.                                 |
+| PGRST501      |                                                             |
++---------------+-------------------------------------------------------------+
+| .. _pgrst502: | Related to :ref:`binary_output`. See :ref:`providing_img`   |
+|               | for an example on requesting images.                        |
+| PGRST502      |                                                             |
++---------------+-------------------------------------------------------------+
+| .. _pgrst503: | For an :ref:`UPSERT using PUT <upsert_put>`, when           |
+|               | :ref:`limits and offsets <limits>` are used.                |
+| PGRST503      |                                                             |
++---------------+-------------------------------------------------------------+
+| .. _pgrst504: | For an :ref:`UPSERT using PUT <upsert_put>`, when the       |
+|               | primary key in the query string and the body are different. |
+| PGRST504      |                                                             |
++---------------+-------------------------------------------------------------+
+| .. _pgrst505: | More than 1 or no items where returned when requesting      |
+|               | a singular response. See :ref:`singular_plural`.            |
+| PGRST505      |                                                             |
++---------------+-------------------------------------------------------------+
+| .. _pgrst506: | The HTTP verb used in the request in not supported.         |
+|               |                                                             |
+| PGRST506      |                                                             |
++---------------+-------------------------------------------------------------+
diff --git a/docs/index.rst b/docs/index.rst
index 8fa7b04f7..ea08aa3ad 100644
--- a/docs/index.rst
+++ b/docs/index.rst
@@ -145,9 +145,16 @@ Technical references for PostgREST's functionality.
 
    schema_cache.rst
 
+.. toctree::
+   :caption: Errors
+   :hidden:
+
+   errors.rst
+
 - :doc:`API <api>`
 - :doc:`configuration`
 - :doc:`Schema Cache <schema_cache>`
+- :doc:`Errors <errors>`
 
 Topic guides
 ------------
diff --git a/docs/schema_cache.rst b/docs/schema_cache.rst
index 11d0f9510..4b59c7988 100644
--- a/docs/schema_cache.rst
+++ b/docs/schema_cache.rst
@@ -27,6 +27,8 @@ in order to avoid repeating this work, PostgREST uses a schema cache.
 |                                            | Function signature                                                            |
 +--------------------------------------------+-------------------------------------------------------------------------------+
 
+.. _stale_schema:
+
 The Stale Schema Cache
 ----------------------
 
@@ -56,8 +58,10 @@ The result will be an error:
 .. code-block:: json
 
   {
-    "hint": "If a new foreign key between these entities was created in the database, try reloading the schema cache.",
-    "message": "Could not find a relationship between cities and countries in the schema cache"
+    "hint": "Verify that 'cities' and 'countries' exist in the schema 'api' and that there is a foreign key relationship between them. If a new relationship was created, try reloading the schema cache.",
+    "details": null,
+    "code": "PGRST200",
+    "message": "Could not find a relationship between 'cities' and 'countries' in the schema cache"
   }
 
 As you can see, PostgREST couldn't find the newly created foreign key in the schema cache. See :ref:`schema_reloading` and :ref:`auto_schema_reloading` to solve this issue.
@@ -89,7 +93,9 @@ The same issue will occur on newly created functions on a running PostgREST.
 .. code-block:: json
 
   {
-    "hint": "If a new function was created in the database with this name and arguments, try reloading the schema cache.",
+    "hint": "If a new function was created in the database with this name and parameters, try reloading the schema cache.",
+    "details": null,
+    "code": "PGRST202",
     "message": "Could not find the api.plus_one(num) function in the schema cache"
   }
 
diff --git a/docs/tutorials/tut0.rst b/docs/tutorials/tut0.rst
index a0ffb936c..5a2ed1604 100644
--- a/docs/tutorials/tut0.rst
+++ b/docs/tutorials/tut0.rst
@@ -223,7 +223,7 @@ Response is 401 Unauthorized:
     "hint": null,
     "details": null,
     "code": "42501",
-    "message": "permission denied for relation todos"
+    "message": "permission denied for table todos"
   }
 
 There we have it, a basic API on top of the database! In the next tutorials we will see how to extend the example with more sophisticated user access controls, and more tables and queries.
diff --git a/docs/tutorials/tut1.rst b/docs/tutorials/tut1.rst
index cb307dc4b..33ef764e7 100644
--- a/docs/tutorials/tut1.rst
+++ b/docs/tutorials/tut1.rst
@@ -175,7 +175,12 @@ After expiration, the API returns HTTP 401 Unauthorized:
 
 .. code-block:: json
 
-  {"message":"JWT expired"}
+  {
+    "hint": null,
+    "details": null,
+    "code": "PGRST301",
+    "message": "JWT expired"
+  }
 
 Bonus Topic: Immediate Revocation
 ---------------------------------
diff --git a/postgrest.dict b/postgrest.dict
index 1ac2dd976..2b15bd67b 100644
--- a/postgrest.dict
+++ b/postgrest.dict
@@ -49,6 +49,7 @@ GUC
 gucs
 Gumbs
 Haskell
+Hasql
 Heroku
 HMAC
 Homebrew
@@ -170,6 +171,7 @@ Tyll
 TypeScript
 UI
 ui
+uncategorized
 unicode
 unix
 updatable

From f56373313ee076c5df652cd9afef584f1d51b91d Mon Sep 17 00:00:00 2001
From: Steve Chavez <stevechavezast@gmail.com>
Date: Tue, 22 Mar 2022 10:57:04 +0100
Subject: [PATCH 491/652] Fix not reloading on ALTER TYPE (#517)

---
 docs/schema_cache.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/schema_cache.rst b/docs/schema_cache.rst
index 4b59c7988..9aa1f3a13 100644
--- a/docs/schema_cache.rst
+++ b/docs/schema_cache.rst
@@ -191,7 +191,7 @@ reloading when creating temporary tables(``CREATE TEMP TABLE``) inside functions
       , 'CREATE MATERIALIZED VIEW', 'ALTER MATERIALIZED VIEW'
       , 'CREATE FUNCTION', 'ALTER FUNCTION'
       , 'CREATE TRIGGER'
-      , 'CREATE TYPE'
+      , 'CREATE TYPE', 'ALTER TYPE'
       , 'CREATE RULE'
       , 'COMMENT'
       )

From a8034df2bf7a5d07b57e760b664ec2efc1b77f24 Mon Sep 17 00:00:00 2001
From: Laurence Isla <lau.isla.c@gmail.com>
Date: Tue, 22 Mar 2022 05:30:45 -0500
Subject: [PATCH 492/652] Add how to on PostGIS and hstore data types (#516)

---
 .../working-with-postgresql-data-types.rst    | 214 ++++++++++++++++++
 postgrest.dict                                |   1 +
 2 files changed, 215 insertions(+)

diff --git a/docs/how-tos/working-with-postgresql-data-types.rst b/docs/how-tos/working-with-postgresql-data-types.rst
index 7cba0a979..921be2ba5 100644
--- a/docs/how-tos/working-with-postgresql-data-types.rst
+++ b/docs/how-tos/working-with-postgresql-data-types.rst
@@ -78,3 +78,217 @@ You can use other comparative filters and also `PostgreSQL special date/time inp
       "due_date": "2022-02-27T06:00:00-05:00"
     }
   ]
+
+hstore
+------
+
+You can work with data types belonging to additional supplied modules such as `hstore <https://www.postgresql.org/docs/current/hstore.html>`_. Let's use the following table:
+
+.. code-block:: postgres
+
+  -- Activate the hstore module in the current database
+  create extension if not exists hstore;
+
+  create table countries (
+    id int primary key,
+    name hstore unique
+  );
+
+The ``name`` column will have the name of the country in different formats. You can insert values using the string representation for that data type, for instance:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    POST /countries HTTP/1.1
+    Content-Type: application/json
+
+    [
+      { "id": 1, "name": "common => Egypt, official => \"Arab Republic of Egypt\", native => مصر" },
+      { "id": 2, "name": "common => Germany, official => \"Federal Republic of Germany\", native => Deutschland" }
+    ]
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/countries" \
+      -X POST -H "Content-Type: application/json" \
+      -d @- << EOF
+      [
+        { "id": 1, "name": "common => Egypt, official => \"Arab Republic of Egypt\", native => مصر" },
+        { "id": 2, "name": "common => Germany, official => \"Federal Republic of Germany\", native => Deutschland" }
+      ]
+    EOF
+
+Notice that the use of ``"`` in the value of the ``name`` column needs to be escaped using a backslash ``\``.
+
+You can also query and filter the value of a ``hstore`` column using the arrow operators, as you would do for a :ref:`JSON column<json_columns>`. For example, if you want to get the native name of Egypt, the query would be:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /countries?select=name->>native&name->>common=like.Egypt HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/countries?select=name->>native&name->>common=like.Egypt"
+
+.. code-block:: json
+
+  [{ "native": "مصر" }]
+
+PostGIS
+------------------
+
+You can use the string representation for `PostGIS <https://postgis.net/>`_ data types such as ``geometry`` or ``geography``. As an example, let's create a table using the ``geometry`` type (you need to `install PostGIS <https://postgis.net/install/>`_ first).
+
+.. code-block:: postgres
+
+  -- Activate the postgis module in the current database
+  create extension if not exists postgis;
+
+  create table coverage (
+    id int primary key,
+    name text unique,
+    area geometry
+  );
+
+Say you want to add areas in polygon format. The request using string representation would look like:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    POST /coverage HTTP/1.1
+    Content-Type: application/json
+
+    [
+      { "id": 1, "name": "small", "area": "SRID=4326;POLYGON((0 0, 1 0, 1 1, 0 1, 0 0))" },
+      { "id": 2, "name": "big", "area": "SRID=4326;POLYGON((0 0, 10 0, 10 10, 0 10, 0 0))" }
+    ]
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/coverage" \
+      -X POST -H "Content-Type: application/json" \
+      -d @- << EOF
+      [
+        { "id": 1, "name": "small", "area": "SRID=4326;POLYGON((0 0, 1 0, 1 1, 0 1, 0 0))" },
+        { "id": 2, "name": "big", "area": "SRID=4326;POLYGON((0 0, 10 0, 10 10, 0 10, 0 0))" }
+      ]
+    EOF
+
+Now, when you request the information, PostgREST will automatically cast the ``area`` column to ``JSON`` format. Although this output is useful, you will want to use the PostGIS functions to have more control on filters or casts. For these cases, creating a ``view`` is your best option. For example, let's use some of the functions to get the data in `GeoJSON format <https://geojson.org/>`_ and to calculate the area in square units:
+
+.. code-block:: postgres
+
+  create or replace view coverage_geo as
+  select name,
+         -- Get the Geometry Object
+         st_AsGeoJSON(c.area)::json as geo_geometry,
+         -- Get the Feature Object
+         st_AsGeoJSON(c.*)::json as geo_feature,
+         -- Calculate the area in square units
+         st_area(c.area) as square_units
+  from coverage c;
+
+  -- Create another view for the FeatureCollection Object
+  -- for the sake of making the examples clearer
+  create or replace view coverage_geo_collection as
+    select
+      json_build_object(
+          'type', 'FeatureCollection',
+          'features', json_agg(st_AsGeoJSON(c.*)::json)
+        )
+        as geo_feature_collection
+    from coverage c;
+
+Now the query will return the information as you expected:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /coverage_geo?name=eq.big HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/coverage_geo?name=eq.big"
+
+.. code-block:: json
+
+  [
+    {
+      "name": "big",
+      "geo_geometry": {
+        "type": "Polygon",
+        "coordinates": [
+          [[0,0],[10,0],[10,10],[0,10],[0,0]]
+        ]
+      },
+      "geo_feature": {
+        "type": "Feature",
+        "geometry": {
+          "type": "Polygon",
+          "coordinates": [
+            [[0,0],[10,0],[10,10],[0,10],[0,0]]
+          ]
+        },
+        "properties": {
+          "id": 2,
+          "name": "big"
+        }
+      },
+      "square_units": 100
+    }
+  ]
+
+And for the Feature Collection format:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /coverage_geo_collection HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/coverage_geo_collection"
+
+.. code-block:: json
+
+  [
+    {
+      "geo_feature_collection": {
+        "type": "FeatureCollection",
+        "features": [
+          {
+            "type": "Feature",
+            "geometry": {
+                "type": "Polygon",
+                "coordinates": [
+                  [[0,0],[1,0],[1,1],[0,1],[0,0]]
+                ]
+            },
+            "properties": {
+              "id": 1,
+              "name": "small"
+            }
+          },
+          {
+            "type": "Feature",
+            "geometry": {
+                "type": "Polygon",
+                "coordinates": [
+                  [[0,0],[10,0],[10,10],[0,10],[0,0]]
+                ]
+            },
+            "properties": {
+              "id": 2,
+              "name": "big"
+            }
+          }
+        ]
+      }
+    }
+  ]
diff --git a/postgrest.dict b/postgrest.dict
index 2b15bd67b..a20158ba4 100644
--- a/postgrest.dict
+++ b/postgrest.dict
@@ -53,6 +53,7 @@ Hasql
 Heroku
 HMAC
 Homebrew
+hstore
 HTTP
 HTTPS
 HV

From 5688bc1521f992b00dd37662d3510d08d3ecec44 Mon Sep 17 00:00:00 2001
From: Laurence Isla <lau.isla.c@gmail.com>
Date: Thu, 24 Mar 2022 17:48:43 -0500
Subject: [PATCH 493/652] Add JSON, Composite and Ranges types to the working
 with types how-to

---
 docs/ecosystem.rst                            |   2 +
 docs/how-tos/casting-type-to-custom-json.rst  |  97 -------
 .../embedding-table-from-another-schema.rst   |  81 ------
 .../working-with-postgresql-data-types.rst    | 253 ++++++++++++++++++
 docs/index.rst                                |   3 -
 5 files changed, 255 insertions(+), 181 deletions(-)
 delete mode 100644 docs/how-tos/casting-type-to-custom-json.rst
 delete mode 100644 docs/how-tos/embedding-table-from-another-schema.rst

diff --git a/docs/ecosystem.rst b/docs/ecosystem.rst
index 883db8bc0..10923ab15 100644
--- a/docs/ecosystem.rst
+++ b/docs/ecosystem.rst
@@ -14,6 +14,8 @@ Community Tutorials
 * `"CodeLess" backend using postgres, postgrest and oauth2 authentication with keycloak <https://www.mathieupassenaud.fr/codeless_backend/>`_ -
   A step-by-step tutorial for using PostgREST with KeyCloak(hosted on a managed service).
 
+* `How PostgreSQL triggers work when called with a PostgREST PATCH HTTP request <https://blog.fgribreau.com/2020/11/how-postgresql-triggers-works-when.html>`_ - A tutorial to see how the old and new values are set or not when doing a PATCH request to PostgREST.
+
 .. _templates:
 
 Templates
diff --git a/docs/how-tos/casting-type-to-custom-json.rst b/docs/how-tos/casting-type-to-custom-json.rst
deleted file mode 100644
index b4687bad2..000000000
--- a/docs/how-tos/casting-type-to-custom-json.rst
+++ /dev/null
@@ -1,97 +0,0 @@
-Casting a type to a custom JSON object
-======================================
-
-:author: `steve-chavez <https://github.com/steve-chavez>`_
-
-While using PostgREST you might have noticed that certain PostgreSQL types translate to JSON strings when you would
-have expected a JSON object or array. For example, let's see the case of `range types <https://www.postgresql.org/docs/current/rangetypes.html>`_.
-
-.. code-block:: postgres
-
-   -- example taken from https://www.postgresql.org/docs/current/rangetypes.html#RANGETYPES-EXAMPLES
-   create table reservations (
-     room   int
-   , during tsrange
-   );
-
-   insert into
-      reservations
-   values
-       (1108, tsrange('2010-01-01 14:30', '2010-01-01 15:30'));
-
-Here we have a column named **during** as a ``tsrange`` type, we would like to get it as JSON through PostgREST.
-
-.. code-block:: bash
-
-   curl "http://localhost:3000/reservations"
-
-Result:
-
-.. code-block:: json
-
-   [
-     {
-      "room":1108,
-      "during":"[\"2010-01-01 14:30:00\",\"2010-01-01 15:30:00\")"
-     }
-   ]
-
-The **during** value is probably not the in the format you want. We get a JSON string because by default PostgreSQL casts
-the type to JSON by using its ``text`` representation. We can change this representation to a custom JSON object by `creating a CAST <https://www.postgresql.org/docs/current/sql-createcast.html>`_ .
-
-To do this, first we'll define the function that will do the conversion from ``tsrange`` to ``json``.
-
-.. code-block:: postgres
-
-   create or replace function tsrange_to_json(tsrange) returns json as $$
-     select json_build_object(
-       'lower', lower($1)
-     , 'upper', upper($1)
-     , 'lower_inc', lower_inc($1)
-     , 'upper_inc', upper_inc($1)
-     );
-   $$ language sql;
-
-Using this function we'll create the CAST.
-
-.. code-block:: postgres
-
-   create cast (tsrange as json) with function tsrange_to_json(tsrange) as assignment;
-
-And we'll do the request and :ref:`cast the column <casting_columns>`.
-
-.. code-block:: bash
-
-   curl "http://localhost:3000/reservations?select=room,during::json"
-
-The result now is:
-
-.. code-block:: json
-
-   [
-     {
-      "room":1108,
-      "during":{
-         "lower" : "2010-01-01T14:30:00",
-         "upper" : "2010-01-01T15:30:00",
-         "lower_inc" : true,
-         "upper_inc" : false
-      }
-     }
-   ]
-
-You can use the same idea for creating custom casts for different types.
-
-.. note::
-
-   If you don't want to modify casts for built-in types, an option would be to `create a custom type <https://www.postgresql.org/docs/current/sql-createtype.html>`_
-   for your own ``tsrange`` and add its own cast.
-
-   .. code-block:: postgres
-
-      create type mytsrange as range (subtype = timestamp, subtype_diff = tsrange_subdiff);
-
-      -- define column types and casting function analoguously to the above example
-      -- ...
-
-      create cast (mytsrange as json) with function mytsrange_to_json(mytsrange) as assignment;
diff --git a/docs/how-tos/embedding-table-from-another-schema.rst b/docs/how-tos/embedding-table-from-another-schema.rst
deleted file mode 100644
index 6631982de..000000000
--- a/docs/how-tos/embedding-table-from-another-schema.rst
+++ /dev/null
@@ -1,81 +0,0 @@
-Embedding a table from another schema
-=====================================
-
-:author: `steve-chavez <https://github.com/steve-chavez>`_
-
-Suppose you have a **people** table in the ``public`` schema and this schema is exposed through PostgREST's :ref:`db-schemas`.
-
-.. code-block:: postgres
-
-   create table public.people(
-     id        int  primary key
-   , full_name text
-   );
-
-And you want to :ref:`embed <resource_embedding>` the **people** table with a **details** table that's in another schema named ``private``.
-
-.. code-block:: postgres
-
-   create schema if not exists private;
-
-   -- For simplicity's sake the table is devoid of constraints/domains on email, phone, etc.
-   create table private.details(
-     id         int  primary key references public.people
-   , email      text
-   , phone      text
-   , birthday   date
-   , occupation text
-   , company    text
-   );
-
-   -- other database objects in this schema
-   -- ...
-   -- ...
-
-To solve this, you can create a view of **details** in the ``public`` schema. We'll call it **public_details**.
-
-.. code-block:: postgres
-
-   create view public.public_details as
-   select
-       id
-     , occupation
-     , company
-   from
-      private.details;
-
-Since PostgREST supports :ref:`embedding_views`, you can embed **people** with **public_details**.
-
-Let's insert some data to test this:
-
-.. code-block:: postgres
-
-   insert into
-      public.people
-   values
-      (1, 'John Doe'), (2, 'Jane Doe');
-
-   insert into
-      private.details
-   values
-      (1, 'jhon@fake.com', '772-323-5433', '1990-02-01', 'Transportation attendant', 'Body Fate'),
-      (2, 'jane@fake.com', '480-474-6571', '1980-04-21', 'Geotechnical engineer', 'Earthworks Garden Kare');
-
-.. important::
-
-  Make sure PostgREST's schema cache is up-to-date. See :ref:`schema_reloading`.
-
-Now, make the following request:
-
-.. code-block:: bash
-
-   curl "http://localhost:3000/people?select=full_name,public_details(occupation,company)"
-
-The result should be:
-
-.. code-block:: json
-
-   [
-      {"full_name":"John Doe","public_details":[{"occupation":"Transportation attendant","company":"Body Fate"}]},
-      {"full_name":"Jane Doe","public_details":[{"occupation":"Geotechnical engineer","company":"Earthworks Garden Kare"}]}
-   ]
diff --git a/docs/how-tos/working-with-postgresql-data-types.rst b/docs/how-tos/working-with-postgresql-data-types.rst
index 921be2ba5..06276f6c7 100644
--- a/docs/how-tos/working-with-postgresql-data-types.rst
+++ b/docs/how-tos/working-with-postgresql-data-types.rst
@@ -79,6 +79,259 @@ You can use other comparative filters and also `PostgreSQL special date/time inp
     }
   ]
 
+JSON
+----
+
+To work with a ``json`` type column, you can handle the value as a JSON object. For instance, let's use this table:
+
+.. code-block:: postgres
+
+  create table products (
+    id int primary key,
+    name text unique,
+    extra_info json
+  );
+
+Now, you can insert a new product using a JSON object for the ``extra_info`` column:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    POST /products HTTP/1.1
+    Content-Type: application/json
+
+    {
+      "id": 1,
+      "name": "Canned fish",
+      "extra_info": {
+        "expiry_date": "2025-12-31",
+        "exportable": true
+      }
+    }
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/products" \
+      -X POST -H "Content-Type: application/json" \
+      -d @- << EOF
+      {
+        "id": 1,
+        "name": "Canned fish",
+        "extra_info": {
+          "expiry_date": "2025-12-31",
+          "exportable": true
+        }
+      }
+    EOF
+
+To query and filter the data see :ref:`json_columns` for a complete reference.
+
+Composite Types
+---------------
+
+With PostgREST, you have two options to handle `composite type columns <https://www.postgresql.org/docs/current/rowtypes.html>`_. On one hand you can use string representation and on the other you can handle it as you would a JSON column. Let's create a type and a table for this example:
+
+.. code-block:: postgres
+
+  create type dimension as (
+    length decimal(6,2),
+    width decimal (6,2),
+    height decimal (6,2),
+    unit text
+  );
+
+  create table products (
+    id int primary key,
+    size dimension
+  );
+
+  insert into products (id, size)
+  values (1, '(5.0,5.0,10.0,"cm")');
+
+Now, you could insert values using string representation as seen in the example above.
+
+.. tabs::
+
+  .. code-tab:: http
+
+    POST /products HTTP/1.1
+    Content-Type: application/json
+
+    { "id": 2, "size": "(0.7,0.5,1.8,\"m\")" }
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/products" \
+      -X POST -H "Content-Type: application/json" \
+      -d @- << EOF
+      { "id": 2, "size": "(0.7,0.5,1.8,\"m\")" }
+    EOF
+
+Or, you could insert the data in JSON format. The following request is equivalent to the previous one:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    POST /products HTTP/1.1
+    Content-Type: application/json
+
+      {
+        "id": 2,
+        "size": {
+          "length": 0.7,
+          "width": 0.5,
+          "height": 1.8,
+          "unit": "m"
+        }
+      }
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/products" \
+      -X POST -H "Content-Type: application/json" \
+      -d @- << EOF
+      {
+        "id": 2,
+        "size": {
+          "length": 0.7,
+          "width": 0.5,
+          "height": 1.8,
+          "unit": "m"
+        }
+      }
+    EOF
+
+You can also query data using the arrow operators as you would for :ref:`JSON columns <json_columns>`.
+
+Ranges
+------
+
+To illustrate how to work with `ranges <https://www.postgresql.org/docs/current/rangetypes.html>`_, let's use the following table as an example:
+
+.. code-block:: postgres
+
+   create table events (
+     id int primary key,
+     name text unique,
+     duration tsrange
+   );
+
+Now, to insert a new event, specify the ``duration`` value as a string representation of the ``tsrange`` type, for example:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    POST /events HTTP/1.1
+    Content-Type: application/json
+
+    {
+      "id": 1,
+      "name": "New Year's Party",
+      "duration": "['2022-12-31 11:00','2023-01-01 06:00']"
+    }
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/events" \
+      -X POST -H "Content-Type: application/json" \
+      -d @- << EOF
+      {
+        "id": 1,
+        "name": "New Year's Party",
+        "duration": "['2022-12-31 11:00','2023-01-01 06:00']"
+      }
+    EOF
+
+You can use range :ref:`operators <operators>` to filter the data. But what if you need get the events for the New Year 2023? Doing this filter ``events?duration=cs.2023-01-01`` will return an error because PostgreSQL needs an explicit cast to timestamp of the string value. A workaround would be to use a range starting and ending in the same date, like this:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /events?duration=cs.[2023-01-01,2023-01-01] HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/events?duration=cs.\[2023-01-01,2023-01-01\]"
+
+.. code-block:: json
+
+  [
+    {
+      "id": 1,
+      "name": "New Year's Party",
+      "duration": "[\"2022-12-31 11:00:00\",\"2023-01-01 06:00:00\"]"
+    }
+  ]
+
+.. _casting_range_to_json:
+
+Casting a Range to a JSON Object
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+As you may have noticed, the ``tsrange`` value is returned as a string literal. To return it as a JSON value, first you need to create a function that will do the conversion from a ``tsrange`` type:
+
+.. code-block:: postgres
+
+   create or replace function tsrange_to_json(tsrange) returns json as $$
+     select json_build_object(
+       'lower', lower($1)
+     , 'upper', upper($1)
+     , 'lower_inc', lower_inc($1)
+     , 'upper_inc', upper_inc($1)
+     );
+   $$ language sql;
+
+Then, create the cast using this function:
+
+.. code-block:: postgres
+
+   create cast (tsrange as json) with function tsrange_to_json(tsrange) as assignment;
+
+Finally, do the request :ref:`casting the range column <casting_columns>`:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /events?select=id,name,duration::json HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/events?select=id,name,duration::json"
+
+.. code-block:: json
+
+  [
+    {
+      "id": 1,
+      "name": "New Year's Party",
+      "duration": {
+        "lower": "2022-12-31T11:00:00",
+        "upper": "2023-01-01T06:00:00",
+        "lower_inc": true,
+        "upper_inc": true
+      }
+    }
+  ]
+
+.. note::
+
+   If you don't want to modify casts for built-in types, an option would be to `create a custom type <https://www.postgresql.org/docs/current/sql-createtype.html>`_
+   for your own ``tsrange`` and add its own cast.
+
+   .. code-block:: postgres
+
+      create type mytsrange as range (subtype = timestamp, subtype_diff = tsrange_subdiff);
+
+      -- define column types and casting function analogously to the above example
+      -- ...
+
+      create cast (mytsrange as json) with function mytsrange_to_json(mytsrange) as assignment;
+
 hstore
 ------
 
diff --git a/docs/index.rst b/docs/index.rst
index ea08aa3ad..9448cd089 100644
--- a/docs/index.rst
+++ b/docs/index.rst
@@ -204,10 +204,7 @@ These are recipes that'll help you address specific use-cases.
 
    how-tos/*
 
-- :doc:`how-tos/casting-type-to-custom-json`
-- :doc:`how-tos/embedding-table-from-another-schema`
 - :doc:`how-tos/providing-images-for-img`
-- `How PostgreSQL triggers work when called with a PostgREST PATCH HTTP request <https://blog.fgribreau.com/2020/11/how-postgresql-triggers-works-when.html>`_
 - :doc:`how-tos/working-with-postgresql-data-types`
 
 Ecosystem

From eb4c428da618263367bb14c4fc5bfd39bb0f7fdc Mon Sep 17 00:00:00 2001
From: Laurence Isla <lau.isla.c@gmail.com>
Date: Fri, 25 Mar 2022 00:14:18 -0500
Subject: [PATCH 494/652] Fix unordered list styles

---
 requirements.txt | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/requirements.txt b/requirements.txt
index 5a5a51b65..57ed0b59f 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -1,3 +1,5 @@
-docutils<0.18
-sphinx-tabs
-sphinx-copybutton
\ No newline at end of file
+docutils==0.16
+sphinx>=4.3.0
+sphinx-copybutton
+sphinx-rtd-theme>=0.5.1
+sphinx-tabs
\ No newline at end of file

From e1c987dc5fe5e0993b250158bf690b0380149134 Mon Sep 17 00:00:00 2001
From: Laurence Isla <lau.isla.c@gmail.com>
Date: Sun, 27 Mar 2022 10:54:48 -0500
Subject: [PATCH 495/652] Add latest page (#521)

* better highlight for composite/array reference
---
 docs/admin.rst           |   2 +
 docs/api.rst             |  12 ++-
 docs/errors.rst          |   2 +-
 docs/index.rst           |   7 +-
 docs/releases/latest.rst | 158 +++++++++++++++++++++++++++++++++++++++
 postgrest.dict           |   1 +
 6 files changed, 172 insertions(+), 10 deletions(-)
 create mode 100644 docs/releases/latest.rst

diff --git a/docs/admin.rst b/docs/admin.rst
index e7a7448f9..36b9e5e6f 100644
--- a/docs/admin.rst
+++ b/docs/admin.rst
@@ -331,6 +331,8 @@ After that, you can enable the service at boot time and start it with:
   ## For reloading the service
   ## systemctl restart postgrest
 
+.. _file_descriptors:
+
 File Descriptors
 ----------------
 
diff --git a/docs/api.rst b/docs/api.rst
index 7acaafa36..d1503fd42 100644
--- a/docs/api.rst
+++ b/docs/api.rst
@@ -269,8 +269,8 @@ Casting the columns is possible by suffixing them with the double colon ``::`` p
 
 .. _json_columns:
 
-Array / Composite / JSON Columns
---------------------------------
+JSON Columns
+------------
 
 You can specify a path for a ``json`` or ``jsonb`` column using the arrow operators(``->`` or ``->>``) as per the `PostgreSQL docs <https://www.postgresql.org/docs/current/functions-json.html>`_.
 
@@ -354,8 +354,12 @@ Note that ``->>`` is used to compare ``blood_type`` as ``text``. To compare with
     { "id": 12, "age": 30 },
     { "id": 15, "age": 35 }
   ]
+.. _composite_array_columns:
 
-The arrow operators are also used for array and composite type columns.
+Composite / Array Columns
+-------------------------
+
+The arrow operators(``->``, ``->>``) can also be used for accessing composite fields and array elements.
 
 .. code-block:: postgres
 
@@ -396,7 +400,7 @@ The arrow operators are also used for array and composite type columns.
   When using the ``->`` and ``->>`` operators, PostgREST uses a query like ``to_jsonb(<col>)->'field'``. To make filtering and ordering on those nested fields use an index, the index needs to be created on the same expression, including the ``to_jsonb(...)`` call:
 
   .. code-block:: postgres
- 
+
     CREATE INDEX ON mytable ((to_jsonb(data) -> 'identification' ->> 'registration_number'));
 
 .. _computed_cols:
diff --git a/docs/errors.rst b/docs/errors.rst
index 39fa807a4..8024c1109 100644
--- a/docs/errors.rst
+++ b/docs/errors.rst
@@ -3,7 +3,7 @@
 Error Source
 ============
 
-For the most part, error messages will come directly from the database with the same `format that PostgreSQL uses <https://www.postgresql.org/docs/current/plpgsql-errors-and-messages.html>`_, in other words, PostgREST will convert the ``MESSAGE``, ``DETAIL``, ``HINT`` and ``ERRCODE`` from the PostgreSQL error to JSON format and add an HTTP status code to the response (see :ref:`status_codes`). For instance, this is the error you will get when querying a nonexistent table:
+For the most part, error messages will come directly from the database with the same `structure that PostgreSQL uses <https://www.postgresql.org/docs/current/plpgsql-errors-and-messages.html>`_, PostgREST will convert the ``MESSAGE``, ``DETAIL``, ``HINT`` and ``ERRCODE`` from the PostgreSQL error to JSON format and add an HTTP status code to the response (see :ref:`status_codes`). For instance, this is the error you will get when querying a nonexistent table:
 
 .. code-block:: http
 
diff --git a/docs/index.rst b/docs/index.rst
index 9448cd089..e2caa8096 100644
--- a/docs/index.rst
+++ b/docs/index.rst
@@ -98,6 +98,7 @@ The project has a friendly and growing community. Join our `chat room <https://g
    :titlesonly:
    :hidden:
 
+   Latest <releases/latest>
    v9.0.0 <releases/v9.0.0>
    releases/v8.0.0
    releases/v7.0.1
@@ -230,14 +231,10 @@ PostgREST has a growing ecosystem of examples, libraries, and experiments. Here
 Release Notes
 -------------
 
-Here we'll include the most relevant changes so you can migrate to newer versions easily.
-You can see the full changelog of each release in the `PostgREST repository <https://github.com/PostgREST/postgrest/releases>`_.
+Changes among versions.
 
 - :doc:`releases/v9.0.0`
 - :doc:`releases/v8.0.0`
-- :doc:`releases/v7.0.0`
-- :doc:`releases/v6.0.2`
-- :doc:`releases/v5.2.0`
 
 In Production
 -------------
diff --git a/docs/releases/latest.rst b/docs/releases/latest.rst
new file mode 100644
index 000000000..101d8fd77
--- /dev/null
+++ b/docs/releases/latest.rst
@@ -0,0 +1,158 @@
+
+Latest
+======
+
+These are features/bugfixes not yet on a stable version. You can try them by downloading the latest pre-releases `on the GitHub release page <https://github.com/PostgREST/postgrest/releases>`_.
+
+Features
+--------
+
+API
+~~~
+
+Access Composite Type fields and Array elements
+^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
+
+You can now :ref:`access fields of a Composite type or elements of an Array type <composite_array_columns>` with the arrow operators(``->``, ``->>``) in the same way you would access the JSON type fields.
+
+Improved Error Messages
+^^^^^^^^^^^^^^^^^^^^^^^
+
+To increase consistency, all the errors messages are now normalized. The ``hint``, ``details``, ``code`` and ``message`` fields will always be present in the body, each one defaulting to a
+``null`` value. In the same way, the :ref:`errors that were raised <raise_error>` with ``SQLSTATE`` now include the ``message`` and ``code`` in the body.
+
+In addition to these changes and to further clarify the source of an error, PostgREST now adds a ``PGRST`` prefix to the error code of all the errors that are PostgREST-specific and don't come from the database. These errors have a unique code that identifies them and are documented in the :ref:`pgrst_errors` section.
+
+Alongside these changes, there is now a dedicated reference page for :doc:`Error documentation </errors>`.
+
+Administration
+~~~~~~~~~~~~~~
+
+Health checks
+^^^^^^^^^^^^^
+
+Admins can now benefit from two :ref:`health check endpoints <health_check>` exposed in a different port than the main app. When activated, the ``live`` and ``ready`` endpoints are available to verify if PostgREST is alive and running or if the database connection and the :ref:`schema cache <schema_cache>` are ready for querying.
+
+Logging users
+^^^^^^^^^^^^^
+
+You can now verify the current authenticated database user in the :ref:`request log <pgrst_logging>` on stdout.
+
+Run without configuration
+^^^^^^^^^^^^^^^^^^^^^^^^^
+
+It is now possible to execute PostgREST without specifying any configuration variable, even without the three that were mandatory
+
+  - If :ref:`db-uri` is not set, PostgREST will use the `libpq environment variables <https://www.postgresql.org/docs/current/libpq-envars.html>`_ for the database connection.
+  - If :ref:`db-schemas` is not set, it will use the database ``public`` schema.
+  - If :ref:`db-anon-role` is not set, it will not allow anonymous requests.
+
+Documentation improvements
+~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+* Added a :doc:`/how-tos/working-with-postgresql-data-types` how-to, which contains explanations and examples on how to work with different PostgreSQL data types such as timestamps, ranges or PostGIS types, among others.
+
+* Added in-database and environment variable settings for each :ref:`configuration variable <config_full_list>`.
+
+* Added the :ref:`file_descriptors` subsection.
+
+* Moved the :ref:`error_source` and the :ref:`status_codes` sections to the :doc:`errors reference page </errors>`.
+
+* Moved the *Casting type to custom JSON* how-to to the :ref:`casting_range_to_json` subsection.
+
+* Removed direct links for PostgREST versions older than 8.0 from the versions menu.
+
+* Removed the deprecated *Embedding table from another schema* how-to.
+
+Bug fixes
+---------
+
+* Execute deferred constraint triggers when using ``Prefer: tx=rollback`` (`#2020 <https://github.com/PostgREST/postgrest/issues/2020>`_)
+
+* Return ``204 No Content`` without ``Content-Type`` for ``PUT`` (`#2058 <https://github.com/PostgREST/postgrest/issues/2058>`_)
+
+* Fix ``is`` not working with upper or mixed case values like ``NULL, TrUe, FaLsE`` (`#2077 <https://github.com/PostgREST/postgrest/issues/2077>`_)
+
+* Fix schema cache loading when views with ``XMLTABLE`` and ``DEFAULT`` are present (`#2024 <https://github.com/PostgREST/postgrest/issues/2024>`_)
+
+* Fix wrong CORS header Authentication -> Authorization (`#1724 <https://github.com/PostgREST/postgrest/issues/1724>`_)
+
+* Clarify error for failed schema cache load. (`#2107 <https://github.com/PostgREST/postgrest/issues/2107>`_)
+
+  - From ``Database connection lost. Retrying the connection`` to ``Could not query the database for the schema cache. Retrying.``
+
+* Fix reading database configuration properly when ``=`` is present in its value (`#2120 <https://github.com/PostgREST/postgrest/issues/2120>`_)
+
+* Fix silently ignoring filter on a non-existent embedded resource (`#1771 <https://github.com/PostgREST/postgrest/issues/1771>`_)
+
+* Remove trigger functions from schema cache and OpenAPI output, because they can't be called directly anyway. (`#2135 <https://github.com/PostgREST/postgrest/issues/2135>`_)
+
+* Remove aggregates, procedures and window functions from the schema cache and OpenAPI output. (`#2101 <https://github.com/PostgREST/postgrest/issues/2101>`_)
+
+* Remove functions, which are not callable due to unnamed arguments, from schema cache and OpenAPI output. (`#2152 <https://github.com/PostgREST/postgrest/issues/2152>`_)
+
+* Fix accessing JSON array fields with ``->`` and ``->>`` in ``?select=`` and ``?order=``. (`#2145 <https://github.com/PostgREST/postgrest/issues/2145>`_)
+
+* Fix ``--dump-schema`` running with a wrong PG version. (`#2153 <https://github.com/PostgREST/postgrest/issues/2153>`_)
+
+* Keep working when ``EMFILE (Too many open files)`` is reached. (`#2042 <https://github.com/PostgREST/postgrest/issues/2042>`_)
+
+* Ignore ``Content-Type`` headers for ``GET`` requests when calling RPCs. Previously, ``GET`` without parameters, but with ``Content-Type: text/plain`` or ``Content-Type: application/octet-stream`` would fail with ``404 Not Found``, even if a function without arguments was available. (`#2147 <https://github.com/PostgREST/postgrest/issues/2147>`_)
+
+Breaking changes
+----------------
+
+* Return ``204 No Content`` without ``Content-Type`` for RPCs returning ``VOID`` (`#2001 <https://github.com/PostgREST/postgrest/issues/2001>`_)
+
+  - Previously, those RPCs would return ``null`` as a body with ``Content-Type: application/json``.
+
+Thanks
+------
+
+Big thanks from the `PostgREST team <https://github.com/orgs/PostgREST/people>`_ to our sponsors!
+
+.. container:: image-container
+
+  .. image:: ../_static/cybertec-new.png
+    :target: https://www.cybertec-postgresql.com/en/?utm_source=postgrest.org&utm_medium=referral&utm_campaign=postgrest
+    :width:  13em
+
+  .. image:: ../_static/2ndquadrant.png
+    :target: https://www.2ndquadrant.com/en/?utm_campaign=External%20Websites&utm_source=PostgREST&utm_medium=Logo
+    :width:  13em
+
+  .. image:: ../_static/retool.png
+    :target: https://retool.com/?utm_source=sponsor&utm_campaign=postgrest
+    :width:  13em
+
+  .. image:: ../_static/gnuhost.png
+    :target: https://gnuhost.eu/?utm_source=sponsor&utm_campaign=postgrest
+    :width:  13em
+
+  .. image:: ../_static/supabase.png
+    :target: https://supabase.com/?utm_source=postgrest%20backers&utm_medium=open%20source%20partner&utm_campaign=postgrest%20backers%20github&utm_term=homepage
+    :width:  13em
+
+  .. image:: ../_static/oblivious.jpg
+    :target: https://oblivious.ai/?utm_source=sponsor&utm_campaign=postgrest
+    :width:  13em
+
+* Evans Fernandes
+* `Jan Sommer <https://github.com/nerfpops>`_
+* `Franz Gusenbauer <https://www.igutech.at/>`_
+* `Daniel Babiak <https://github.com/dbabiak>`_
+* Tsingson Qin
+* Michel Pelletier
+* Jay Hannah
+* Robert Stolarz
+* Nicholas DiBiase
+* Christopher Reid
+* Nathan Bouscal
+* Daniel Rafaj
+* David Fenko
+* Remo Rechkemmer
+* Severin Ibarluzea
+* Tom Saleeba
+* Pawel Tyll
+
+If you like to join them please consider `supporting PostgREST development <https://github.com/PostgREST/postgrest#user-content-supporting-development>`_.
diff --git a/postgrest.dict b/postgrest.dict
index a20158ba4..f9cc140fc 100644
--- a/postgrest.dict
+++ b/postgrest.dict
@@ -14,6 +14,7 @@ Beles
 booleans
 Bouscal
 buildpack
+bugfixes
 Cardano
 cd
 centric

From 06156eb79796249e5f425cd9ff055d2a71fece64 Mon Sep 17 00:00:00 2001
From: Christopher Ahlers <11285058+FooBar1969@users.noreply.github.com>
Date: Mon, 4 Apr 2022 14:48:29 -0700
Subject: [PATCH 496/652] Update ecosystem.rst

Fixed incorrect link for the swift library in Client-Side Libraries section. It now links properly to: https://github.com/supabase-community/postgrest-swift
---
 docs/ecosystem.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/ecosystem.rst b/docs/ecosystem.rst
index 10923ab15..6ae4e1c9f 100644
--- a/docs/ecosystem.rst
+++ b/docs/ecosystem.rst
@@ -117,7 +117,7 @@ Client-Side Libraries
 * `postgrest-request <https://github.com/lewisjared/postgrest-request>`_ - JS, SuperAgent
 * `postgrest-rs <https://github.com/supabase-community/postgrest-rs>`_ - Rust
 * `postgrest-sharp-client <https://github.com/thejettdurham/postgrest-sharp-client>`_ (needs maintainer) - C#, RestSharp
-* `postgrest-swift <https://github.com/supabase-community/postgrest-kt>`_ - Swift
+* `postgrest-swift <https://github.com/supabase-community/postgrest-swift>`_ - Swift
 * `postgrest-url <https://github.com/hugomrdias/postgrest-url>`_ - JS, just for generating query URLs
 * `postgrest_python_requests_client <https://github.com/davidthewatson/postgrest_python_requests_client>`_ - Python
 * `postgrester <https://github.com/ivangabriele/postgrester>`_ - JS + Typescript

From 6f79b41bc12814f75ebc19956eb930fbc50e88b5 Mon Sep 17 00:00:00 2001
From: Michael Kane Juncker <michael.juncker@enote.com>
Date: Tue, 5 Apr 2022 19:03:35 +0200
Subject: [PATCH 497/652] feat(api): add match/imatch operators for regular
 expression support - refs PostgREST/postgrest#2236

---
 docs/api.rst   | 13 ++++++++++++-
 postgrest.dict |  1 +
 2 files changed, 13 insertions(+), 1 deletion(-)

diff --git a/docs/api.rst b/docs/api.rst
index d1503fd42..7ae36a41a 100644
--- a/docs/api.rst
+++ b/docs/api.rst
@@ -69,6 +69,8 @@ lte           :code:`<=`                less than or equal
 neq           :code:`<>` or :code:`!=`  not equal
 like          :code:`LIKE`              LIKE operator (use * in place of %)
 ilike         :code:`ILIKE`             ILIKE operator (use * in place of %)
+match         :code:`~`                 ~ operator, see :ref:`pattern_matching`
+imatch        :code:`~*`                ~* operator, see :ref:`pattern_matching`
 in            :code:`IN`                one of a list of values, e.g. :code:`?a=in.(1,2,3)`
                                         – also supports commas in quoted strings like
                                         :code:`?a=in.("hi,there","yes,you")`
@@ -146,6 +148,15 @@ You can also apply complex logic to the conditions:
 
     curl "http://localhost:3000/people?grade=gte.90&student=is.true&or=(age.eq.14,not.and(age.gte.11,age.lte.17))"
 
+.. _pattern_matching:
+
+Pattern Matching
+~~~~~~~~~~~~~~~~
+
+The pattern-matching operators (:code:`like`, :code:`ilike`, :code:`match`, :code:`imatch`) exist to support filtering data using patterns instead of concrete strings, as described in the `PostgreSQL docs <https://www.postgresql.org/docs/current/functions-matching.html>`__.
+
+To ensure best performance on larger data sets, an `appropriate index <https://www.postgresql.org/docs/current/pgtrgm.html#id-1.11.7.42.8>`__ should be used and even then, it depends on the pattern value and actual data statistics whether an existing index will be used by the query planner or not.
+
 .. _fts:
 
 Full-Text Search
@@ -272,7 +283,7 @@ Casting the columns is possible by suffixing them with the double colon ``::`` p
 JSON Columns
 ------------
 
-You can specify a path for a ``json`` or ``jsonb`` column using the arrow operators(``->`` or ``->>``) as per the `PostgreSQL docs <https://www.postgresql.org/docs/current/functions-json.html>`_.
+You can specify a path for a ``json`` or ``jsonb`` column using the arrow operators(``->`` or ``->>``) as per the `PostgreSQL docs <https://www.postgresql.org/docs/current/functions-json.html>`__.
 
 .. code-block:: postgres
 
diff --git a/postgrest.dict b/postgrest.dict
index f9cc140fc..f9861cce2 100644
--- a/postgrest.dict
+++ b/postgrest.dict
@@ -60,6 +60,7 @@ HTTPS
 HV
 Ibarluzea
 ilike
+imatch
 io
 IP
 JS

From f6c68ddafb83ccd4ff33b47973081f6de647be43 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 11 Apr 2022 12:34:22 +0000
Subject: [PATCH 498/652] Bump cachix/install-nix-action from 16 to 17

Bumps [cachix/install-nix-action](https://github.com/cachix/install-nix-action) from 16 to 17.
- [Release notes](https://github.com/cachix/install-nix-action/releases)
- [Commits](https://github.com/cachix/install-nix-action/compare/v16...v17)

---
updated-dependencies:
- dependency-name: cachix/install-nix-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/ci.yaml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index fb815e2cc..865683ba1 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -16,7 +16,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v3
-    - uses: cachix/install-nix-action@v16
+    - uses: cachix/install-nix-action@v17
     - run: nix-env -f default.nix -iA build
     - run: postgrest-docs-build
 
@@ -25,7 +25,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v3
-    - uses: cachix/install-nix-action@v16
+    - uses: cachix/install-nix-action@v17
     - run: nix-env -f default.nix -iA spellcheck
     - run: postgrest-docs-spellcheck
 
@@ -35,7 +35,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v3
-    - uses: cachix/install-nix-action@v16
+    - uses: cachix/install-nix-action@v17
     - run: nix-env -f default.nix -iA linkcheck
     - run: postgrest-docs-linkcheck
     

From 72bffddbf18eac309216323a524f8d56ef458d04 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Thu, 24 Mar 2022 18:21:13 +0100
Subject: [PATCH 499/652] Add limited updates/deletions

Also move updates to its own section
---
 docs/api.rst | 101 ++++++++++++++++++++++++++++++++++++---------------
 1 file changed, 71 insertions(+), 30 deletions(-)

diff --git a/docs/api.rst b/docs/api.rst
index 7ae36a41a..1b886af09 100644
--- a/docs/api.rst
+++ b/docs/api.rst
@@ -1479,10 +1479,10 @@ Hints also work alongside ``!inner`` if a top level filtering is needed. From th
 
     curl "http://localhost:3000/orders?select=*,central_addresses!billing_address!inner(*)&central_addresses.code=AB1000"
 
-.. _insert_update:
+.. _insert:
 
-Insertions / Updates
-====================
+Insertions
+==========
 
 All tables and `auto-updatable views <https://www.postgresql.org/docs/current/sql-createview.html#SQL-CREATEVIEW-UPDATABLE-VIEWS>`_ can be modified through the API, subject to permissions of the requester's database role.
 
@@ -1537,28 +1537,6 @@ URL encoded payloads can be posted with ``Content-Type: application/x-www-form-u
 
   Some JavaScript libraries will post the data incorrectly if you're not careful. For best results try one of the :ref:`clientside_libraries` built for PostgREST.
 
-To update a row or rows in a table, use the PATCH verb. Use :ref:`h_filter` to specify which record(s) to update. Here is an example query setting the :code:`category` column to child for all people below a certain age.
-
-.. tabs::
-
-  .. code-tab:: http
-
-    PATCH /people?age=lt.13 HTTP/1.1
-
-    { "category": "child" }
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/people?age=lt.13" \
-      -X PATCH -H "Content-Type: application/json" \
-      -d '{ "category": "child" }'
-
-Updates also support :code:`Prefer: return=representation` plus :ref:`v_filter`.
-
-.. warning::
-
-  Beware of accidentally updating every row in a table. To learn to prevent that see :ref:`block_fulltable`.
-
 .. _bulk_insert:
 
 Bulk Insert
@@ -1621,8 +1599,7 @@ To bulk insert JSON post an array of objects having all-matching keys
 Specifying Columns
 ------------------
 
-By using the :code:`columns` query parameter it's possible to specify the payload keys that will be inserted/updated
-and ignore the rest of the payload.
+By using the :code:`columns` query parameter it's possible to specify the payload keys that will be inserted and ignore the rest of the payload.
 
 .. tabs::
 
@@ -1662,10 +1639,37 @@ In this case, only **source**, **publication_date** and **figure** will be inser
 Using this also has the side-effect of being more efficient for :ref:`bulk_insert` since PostgREST will not process the JSON and
 it'll send it directly to PostgreSQL.
 
+.. _update:
+
+Updates
+=======
+
+To update a row or rows in a table, use the PATCH verb. Use :ref:`h_filter` to specify which record(s) to update. Here is an example query setting the :code:`category` column to child for all people below a certain age.
+
+.. tabs::
+
+  .. code-tab:: http
+
+    PATCH /people?age=lt.13 HTTP/1.1
+
+    { "category": "child" }
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/people?age=lt.13" \
+      -X PATCH -H "Content-Type: application/json" \
+      -d '{ "category": "child" }'
+
+Updates also support :code:`Prefer: return=representation` plus :ref:`v_filter`.
+
+.. warning::
+
+  Beware of accidentally updating every row in a table. To learn to prevent that see :ref:`block_fulltable`.
+
 .. _upsert:
 
 UPSERT
-------
+======
 
 You can make an UPSERT with :code:`POST` and the :code:`Prefer: resolution=merge-duplicates` header:
 
@@ -1703,7 +1707,7 @@ By default, UPSERT operates based on the primary key columns, you must specify a
 .. _on_conflict:
 
 On Conflict
-~~~~~~~~~~~
+-----------
 
 By specifying the ``on_conflict`` query parameter, you can make UPSERT work on a column(s) that has a UNIQUE constraint.
 
@@ -1736,7 +1740,7 @@ By specifying the ``on_conflict`` query parameter, you can make UPSERT work on a
 .. _upsert_put:
 
 PUT
-~~~
+---
 
 A single row UPSERT can be done by using :code:`PUT` and filtering the primary key columns with :code:`eq`:
 
@@ -1795,6 +1799,43 @@ Deletions also support :code:`Prefer: return=representation` plus :ref:`v_filter
 
   Beware of accidentally deleting all rows in a table. To learn to prevent that see :ref:`block_fulltable`.
 
+Limited Updates/Deletions
+=========================
+
+You can limit the amount of affected rows by :ref:`update` or :ref:`delete` with the ``limit`` query parameter. For this, you must add an explicit ``order`` on a unique column(s).
+
+.. tabs::
+
+  .. code-tab:: http
+
+    PATCH /users?limit=10&order=id&last_login=lt.2017-01-01 HTTP/1.1
+
+    { "status": "inactive" }
+
+  .. code-tab:: bash Curl
+
+    curl -X PATCH "/users?limit=10&order=id&last_login=lt.2020-01-01" \
+      -H "Content-Type: application/json" \
+      -d '{ "status": "inactive" }'
+
+.. tabs::
+
+  .. code-tab:: http
+
+    DELETE /users?limit=10&order=id&status=eq.inactive HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl -X DELETE "http://localhost:3000/users?limit=10&order=id&status=eq.inactive"
+
+If your table has no unique columns, you can use the `ctid <https://www.postgresql.org/docs/current/ddl-system-columns.html>`_ system column.
+
+Using ``offset`` to target a different subset of rows is also possible.
+
+.. note::
+
+  There is no native ``UPDATE...LIMIT`` or ``DELETE...LIMIT`` support in PostgreSQL; the generated query simulates that behavior and is based on `this Crunchy Data blog post <https://www.crunchydata.com/blog/simulating-update-or-delete-with-limit-in-postgres-ctes-to-the-rescue>`_.
+
 .. _custom_queries:
 
 Custom Queries

From 5f3284eed0682116d3c8e4e06ff115585902cccd Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Thu, 24 Mar 2022 18:41:11 +0100
Subject: [PATCH 500/652] fix broken links

---
 docs/api.rst             | 2 +-
 docs/ecosystem.rst       | 2 +-
 docs/errors.rst          | 2 +-
 docs/install.rst         | 2 +-
 docs/releases/v8.0.0.rst | 4 ++--
 docs/schema_cache.rst    | 2 +-
 6 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/docs/api.rst b/docs/api.rst
index 1b886af09..727a2d315 100644
--- a/docs/api.rst
+++ b/docs/api.rst
@@ -1271,7 +1271,7 @@ A request with ``directors`` embedded:
 Embedding after Insertions/Updates/Deletions
 --------------------------------------------
 
-You can embed related resources after doing :ref:`insert_update` or :ref:`delete`.
+You can embed related resources after doing :ref:`insert`, :ref:`update` or :ref:`delete`.
 
 Say you want to insert a **film** and then get some of its attributes plus embed its **director**.
 
diff --git a/docs/ecosystem.rst b/docs/ecosystem.rst
index 6ae4e1c9f..8283d6c69 100644
--- a/docs/ecosystem.rst
+++ b/docs/ecosystem.rst
@@ -22,7 +22,7 @@ Templates
 ---------
 
 * `compose-postgrest <https://github.com/mattddowney/compose-postgrest>`_ - docker-compose setup with Nginx and HTML example
-* `svelte-postgrest-template <https://github.com/guyromm/svelte-postgrest-template>`_ - Svelte/SvelteKit, PostgREST, EveryLayout and social auth - `blog post <https://www.webgma.co.il/Articles/rapid-prototyping-with-postgrest-and-svelte/en/>`_
+* `svelte-postgrest-template <https://github.com/guyromm/svelte-postgrest-template>`_ - Svelte/SvelteKit, PostgREST, EveryLayout and social auth
 
 .. _eco_example_apps:
 
diff --git a/docs/errors.rst b/docs/errors.rst
index 8024c1109..950c9a9fa 100644
--- a/docs/errors.rst
+++ b/docs/errors.rst
@@ -150,7 +150,7 @@ Related to the HTTP request elements.
 | PGRST101      |                                                             |
 +---------------+-------------------------------------------------------------+
 | .. _pgrst102: | Related to the request body structure.                      |
-|               | See :ref:`insert_update`.                                   |
+|               | See :ref:`insert` and :ref:`update`.                        |
 | PGRST102      |                                                             |
 +---------------+-------------------------------------------------------------+
 | .. _pgrst103: | Related to :ref:`limits`.                                   |
diff --git a/docs/install.rst b/docs/install.rst
index 5ab43ba11..c68ae1586 100644
--- a/docs/install.rst
+++ b/docs/install.rst
@@ -48,7 +48,7 @@ You can also use your OS package manager.
 
   .. group-tab:: Windows
 
-    You can install PostgREST using `Chocolatey <https://community.chocolatey.org/packages/postgrest>`_ or `Scoop <https://scoop.sh>`_.
+    You can install PostgREST using `Chocolatey <https://community.chocolatey.org/packages/postgrest>`_ or `Scoop <https://github.com/ScoopInstaller/Scoop>`_.
 
     .. code:: bash
 
diff --git a/docs/releases/v8.0.0.rst b/docs/releases/v8.0.0.rst
index b99bd695f..bdaea4916 100644
--- a/docs/releases/v8.0.0.rst
+++ b/docs/releases/v8.0.0.rst
@@ -25,7 +25,7 @@ Added
 * Allow schema cache reloading using PostgreSQL :ref:`NOTIFY <schema_reloading_notify>` command. This enables :ref:`auto_schema_reloading`.
   |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
 
-* Allow sending the header ``Prefer: headers-only`` to get a response with a ``Location`` header. See :ref:`insert_update`.
+* Allow sending the header ``Prefer: headers-only`` to get a response with a ``Location`` header. See :ref:`insert`.
   |br| -- `@laurenceisla <https://github.com/laurenceisla>`_
 
 * Allow :ref:`external_connection_poolers` such as PgBouncer in transaction pooling mode.
@@ -78,7 +78,7 @@ Changed
   |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
 
 * POST requests for insertions no longer include a ``Location`` header in the response by default and behave the same way as having a
-  ``Prefer: return=minimal`` header in the request. This prevents permissions errors when having a write-only table. See :ref:`insert_update`.
+  ``Prefer: return=minimal`` header in the request. This prevents permissions errors when having a write-only table. See :ref:`insert`.
   |br| -- `@laurenceisla <https://github.com/laurenceisla>`_
 
 * Modified the default logging level from ``info`` to ``error``. See :ref:`log-level`.
diff --git a/docs/schema_cache.rst b/docs/schema_cache.rst
index 9aa1f3a13..5e5fce3a6 100644
--- a/docs/schema_cache.rst
+++ b/docs/schema_cache.rst
@@ -16,7 +16,7 @@ in order to avoid repeating this work, PostgREST uses a schema cache.
 +--------------------------------------------+-------------------------------------------------------------------------------+
 | :ref:`Upserts <upsert>`                    | Primary keys                                                                  |
 +--------------------------------------------+-------------------------------------------------------------------------------+
-| :ref:`Insertions <insert_update>`          | Primary keys (optional: only if the Location header is requested)             |
+| :ref:`Insertions <insert>`                 | Primary keys (optional: only if the Location header is requested)             |
 +--------------------------------------------+-------------------------------------------------------------------------------+
 | :ref:`OPTIONS requests <options_requests>` | View INSTEAD OF TRIGGERS and primary keys                                     |
 +--------------------------------------------+-------------------------------------------------------------------------------+

From 9c23ac2f39b3d4f0699f09fdbe51500c892a8ebb Mon Sep 17 00:00:00 2001
From: Laurence Isla <lau.isla.c@gmail.com>
Date: Mon, 2 May 2022 23:14:24 -0500
Subject: [PATCH 501/652] Reorganize error groups

---
 docs/api.rst    |   2 +
 docs/errors.rst | 111 ++++++++++++++++++++----------------------------
 postgrest.dict  |   4 +-
 3 files changed, 51 insertions(+), 66 deletions(-)

diff --git a/docs/api.rst b/docs/api.rst
index 727a2d315..2eb7e7cd9 100644
--- a/docs/api.rst
+++ b/docs/api.rst
@@ -1799,6 +1799,8 @@ Deletions also support :code:`Prefer: return=representation` plus :ref:`v_filter
 
   Beware of accidentally deleting all rows in a table. To learn to prevent that see :ref:`block_fulltable`.
 
+.. _limited_update_delete:
+
 Limited Updates/Deletions
 =========================
 
diff --git a/docs/errors.rst b/docs/errors.rst
index 950c9a9fa..248051f98 100644
--- a/docs/errors.rst
+++ b/docs/errors.rst
@@ -177,6 +177,42 @@ Related to the HTTP request elements.
 |               | specified in the ``select`` part of the query string.       |
 | PGRST108      | See :ref:`embed_filters`.                                   |
 +---------------+-------------------------------------------------------------+
+| .. _pgrst109: | Restricting a Deletion or an Update using limits must       |
+|               | include the ordering of a unique column.                    |
+| PGRST109      | See :ref:`limited_update_delete`.                           |
++---------------+-------------------------------------------------------------+
+| .. _pgrst110: | When restricting a Deletion or an Update using limits       |
+|               | modifies more rows than the maximum specified in the limit. |
+| PGRST110      | See :ref:`limited_update_delete`.                           |
++---------------+-------------------------------------------------------------+
+| .. _pgrst111: | Related to :ref:`guc_resp_hdrs`.                            |
+|               |                                                             |
+| PGRST111      |                                                             |
++---------------+-------------------------------------------------------------+
+| .. _pgrst112: | The status code must be a positive integer.                 |
+|               | See :ref:`guc_resp_status`.                                 |
+| PGRST112      |                                                             |
++---------------+-------------------------------------------------------------+
+| .. _pgrst113: | Related to :ref:`binary_output`. See :ref:`providing_img`   |
+|               | for an example on requesting images.                        |
+| PGRST113      |                                                             |
++---------------+-------------------------------------------------------------+
+| .. _pgrst114: | For an :ref:`UPSERT using PUT <upsert_put>`, when           |
+|               | :ref:`limits and offsets <limits>` are used.                |
+| PGRST114      |                                                             |
++---------------+-------------------------------------------------------------+
+| .. _pgrst115: | For an :ref:`UPSERT using PUT <upsert_put>`, when the       |
+|               | primary key in the query string and the body are different. |
+| PGRST115      |                                                             |
++---------------+-------------------------------------------------------------+
+| .. _pgrst116: | More than 1 or no items where returned when requesting      |
+|               | a singular response. See :ref:`singular_plural`.            |
+| PGRST116      |                                                             |
++---------------+-------------------------------------------------------------+
+| .. _pgrst117: | The HTTP verb used in the request in not supported.         |
+|               |                                                             |
+| PGRST117      |                                                             |
++---------------+-------------------------------------------------------------+
 
 .. _pgrst2**:
 
@@ -209,8 +245,8 @@ Related to a :ref:`stale schema cache <stale_schema>`. Most of the time, these e
 
 .. _pgrst3**:
 
-Group 3 - JWT errors
---------------------
+Group 3 - JWT
+-------------
 
 Related to the authentication process using JWT. You can follow the :ref:`tut1` for an example on how to implement authentication and the :doc:`Authentication page <auth>` for more information on this process.
 
@@ -230,72 +266,19 @@ Related to the authentication process using JWT. You can follow the :ref:`tut1`
 | PGRST302      | is disabled by not setting it in :ref:`db-anon-role`.       |
 +---------------+-------------------------------------------------------------+
 
-.. _pgrst4**:
+.. The Internal Errors Group X** is always at the end
 
-Group 4 - Hasql
----------------
+.. _pgrst_X**:
 
-Related to `the library <https://hackage.haskell.org/package/hasql>`_ that PostgREST uses to connect to the database. If you encounter any of these errors, you may have stumbled on a PostgREST bug, please `open an issue <https://github.com/PostgREST/postgrest/issues>`_ and we'll be glad to fix it.
+Group X - Internal
+------------------
+
+Internal errors mostly related to `the library <https://hackage.haskell.org/package/hasql>`_ that PostgREST uses to connect to the database. If you encounter any of these errors, you may have stumbled on a PostgREST bug, please `open an issue <https://github.com/PostgREST/postgrest/issues>`_ and we'll be glad to fix it.
 
 +---------------+-------------------------------------------------------------+
 | Code          | Description                                                 |
 +===============+=============================================================+
-| .. _pgrst400: | Internal error: Unexpected Result.                          |
-|               |                                                             |
-| PGRST400      |                                                             |
-+---------------+-------------------------------------------------------------+
-| .. _pgrst401: | Internal error: Attempted to parse more columns than        |
-|               | there are in the result.                                    |
-| PGRST401      |                                                             |
-+---------------+-------------------------------------------------------------+
-| .. _pgrst402: | Internal error: Attempted to parse a NULL as some value.    |
-|               |                                                             |
-| PGRST402      |                                                             |
-+---------------+-------------------------------------------------------------+
-| .. _pgrst403: | Internal error: Wrong value parser used.                    |
-|               |                                                             |
-| PGRST403      |                                                             |
-+---------------+-------------------------------------------------------------+
-| .. _pgrst404: | Internal error: Unexpected amount of rows.                  |
-|               |                                                             |
-| PGRST404      |                                                             |
-+---------------+-------------------------------------------------------------+
-
-.. _pgrst5**:
-
-Group 5 - General
------------------
-
-These are uncategorized errors.
-
-+---------------+-------------------------------------------------------------+
-| Code          | Description                                                 |
-+===============+=============================================================+
-| .. _pgrst500: | Related to :ref:`guc_resp_hdrs`.                            |
-|               |                                                             |
-| PGRST500      |                                                             |
-+---------------+-------------------------------------------------------------+
-| .. _pgrst501: | The status code must be a positive integer.                 |
-|               | See :ref:`guc_resp_status`.                                 |
-| PGRST501      |                                                             |
-+---------------+-------------------------------------------------------------+
-| .. _pgrst502: | Related to :ref:`binary_output`. See :ref:`providing_img`   |
-|               | for an example on requesting images.                        |
-| PGRST502      |                                                             |
-+---------------+-------------------------------------------------------------+
-| .. _pgrst503: | For an :ref:`UPSERT using PUT <upsert_put>`, when           |
-|               | :ref:`limits and offsets <limits>` are used.                |
-| PGRST503      |                                                             |
-+---------------+-------------------------------------------------------------+
-| .. _pgrst504: | For an :ref:`UPSERT using PUT <upsert_put>`, when the       |
-|               | primary key in the query string and the body are different. |
-| PGRST504      |                                                             |
-+---------------+-------------------------------------------------------------+
-| .. _pgrst505: | More than 1 or no items where returned when requesting      |
-|               | a singular response. See :ref:`singular_plural`.            |
-| PGRST505      |                                                             |
-+---------------+-------------------------------------------------------------+
-| .. _pgrst506: | The HTTP verb used in the request in not supported.         |
-|               |                                                             |
-| PGRST506      |                                                             |
+| .. _pgrstX00: | Internal errors related to the library that connects to the |
+|               | database.                                                   |
+| PGRSTX00      |                                                             |
 +---------------+-------------------------------------------------------------+
diff --git a/postgrest.dict b/postgrest.dict
index f9861cce2..5a3f17271 100644
--- a/postgrest.dict
+++ b/postgrest.dict
@@ -50,7 +50,6 @@ GUC
 gucs
 Gumbs
 Haskell
-Hasql
 Heroku
 HMAC
 Homebrew
@@ -108,6 +107,8 @@ PgBouncer
 pgcrypto
 pgjwt
 pgrst
+pgrstX
+PGRSTX
 pgSQL
 phfts
 phraseto
@@ -174,7 +175,6 @@ Tyll
 TypeScript
 UI
 ui
-uncategorized
 unicode
 unix
 updatable

From 6e24e23b4b99ed1232aa82869933e0211428db20 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Franz-Josef=20F=C3=A4rber?=
 <franz-josef.faerber@stmuk.bayern.de>
Date: Thu, 28 Apr 2022 10:31:32 +0200
Subject: [PATCH 502/652] Allow returning XML

---
 docs/api.rst             | 84 +++++++++++++++++++---------------------
 docs/configuration.rst   |  6 +--
 docs/errors.rst          |  5 ++-
 docs/releases/v6.0.2.rst |  2 +-
 4 files changed, 46 insertions(+), 51 deletions(-)

diff --git a/docs/api.rst b/docs/api.rst
index 2eb7e7cd9..3f95f1dca 100644
--- a/docs/api.rst
+++ b/docs/api.rst
@@ -801,7 +801,13 @@ The current possibilities are:
 * ``text/csv``
 * ``application/json``
 * ``application/openapi+json``
+
+and in the special case of a single-column select the following additional three formats;
+also see the section :ref:`scalar_return_formats`:
+
 * ``application/octet-stream``
+* ``text/plain``
+* ``text/xml``
 
 The server will default to JSON for API endpoints and OpenAPI on the root.
 
@@ -2216,6 +2222,9 @@ PostgREST will detect if the function is scalar or table-valued and will shape t
     { "title": "Blade Runner 2049", "rating": 8.1}
   ]
 
+To manually choose a return format such as binary, plain text or XML, see the section :ref:`scalar_return_formats`.
+
+
 .. _bulk_call:
 
 Bulk Call
@@ -2319,12 +2328,25 @@ You can call overloaded functions with different number of arguments.
 
   Overloaded functions with the same argument names but different types are not supported.
 
-.. _binary_output:
+.. _scalar_return_formats:
 
-Binary Output
-=============
+Response Formats For Scalar Responses
+=====================================
 
-If you want to return raw binary data from a :code:`bytea` column, you must specify :code:`application/octet-stream` as part of the :code:`Accept` header
+For scalar return values such as 
+
+* single-column selects on tables or
+* scalar functions,
+
+you can set the additional content types
+
+* ``application/octet-stream``
+* ``text/plain``
+* ``text/xml``
+
+as part of the :code:`Accept` header.
+
+Example 1: If you want to return raw binary data from a :code:`bytea` column, you must specify :code:`application/octet-stream` as part of the :code:`Accept` header
 and select a single column :code:`?select=bin_data`.
 
 .. tabs::
@@ -2339,74 +2361,46 @@ and select a single column :code:`?select=bin_data`.
     curl "http://localhost:3000/items?select=bin_data&id=eq.1" \
       -H "Accept: application/octet-stream"
 
-You can also request binary output when calling `Stored Procedures`_ and since they can return a scalar value you are not forced to use :code:`select`
-for this case.
+Example 2: You can request XML output when calling `Stored Procedures`_ that return a scalar value of type ``text/xml``. You are not forced to use select for this case.
 
 .. code-block:: postgres
 
-  CREATE FUNCTION closest_point(..) RETURNS bytea ..
+  CREATE FUNCTION generate_xml_content(..) RETURNS xml ..
 
 .. tabs::
 
   .. code-tab:: http
 
-    POST /rpc/closest_point HTTP/1.1
-    Accept: application/octet-stream
+    POST /rpc/generate_xml_content HTTP/1.1
+    Accept: text/xml
 
   .. code-tab:: bash Curl
 
-    curl "http://localhost:3000/rpc/closest_point" \
-      -X POST -H "Accept: application/octet-stream"
+    curl "http://localhost:3000/rpc/generate_xml_content" \
+      -X POST -H "Accept: text/xml"
 
-If the stored procedure returns non-scalar values, you need to do a :code:`select` in the same way as for GET binary output.
+Example 3: If the stored procedure returns non-scalar values, you need to do a :code:`select` in the same way as for GET binary output.
 
 .. code-block:: sql
 
-  CREATE FUNCTION overlapping_regions(..) RETURNS SETOF TABLE(geom_twkb bytea, ..) ..
+  CREATE FUNCTION get_descriptions(..) RETURNS SETOF TABLE(id int, description text) ..
 
 .. tabs::
 
   .. code-tab:: http
 
-    POST /rpc/overlapping_regions?select=geom_twkb HTTP/1.1
-    Accept: application/octet-stream
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/rpc/overlapping_regions?select=geom_twkb" \
-      -X POST -H "Accept: application/octet-stream"
-
-.. note::
-
-  If more than one row would be returned the binary results will be concatenated with no delimiter.
-
-.. _plain_text_output:
-
-Plain Text Output
------------------
-
-You can get raw output from a ``text`` column by using ``Accept: text/plain``.
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /workers?select=custom_psv_format HTTP/1.1
+    POST /rpc/get_descriptions?select=description HTTP/1.1
     Accept: text/plain
 
   .. code-tab:: bash Curl
 
-    curl "http://localhost:3000/workers?select=custom_psv_format" \
-      -H "Accept: text/plain"
+    curl "http://localhost:3000/rpc/get_descriptions?select=description" \
+      -X POST -H "Accept: text/plain"
 
-.. code-block:: text
+.. note::
 
-  09310817|JOHN|DOE|15/04/88|
-  42152780|FRED|BLOGGS|20/02/85|
-  43006541|OTTO|NORMALVERBRAUCHER|01/07/90|
-  02452492|ERIKA|MUSTERMANN|11/01/80|
+  If more than one row would be returned the binary/plain-text/xml results will be concatenated with no delimiter.
 
-This follows the same rules as :ref:`binary_output`.
 
 .. _open-api:
 
diff --git a/docs/configuration.rst b/docs/configuration.rst
index 57c22199b..9d2a33619 100644
--- a/docs/configuration.rst
+++ b/docs/configuration.rst
@@ -587,14 +587,14 @@ raw-media-types
 
  This serves to extend the `Media Types <https://en.wikipedia.org/wiki/Media_type>`_ that PostgREST currently accepts through an ``Accept`` header.
 
- These media types can be requested by following the same rules as the ones defined in :ref:`binary_output`.
+ These media types can be requested by following the same rules as the ones defined in :ref:`scalar_return_formats`.
 
  As an example, the below config would allow you to request an **image** and a **XML** file by doing a request with ``Accept: image/png``
- or ``Accept: text/xml``, respectively.
+ or ``Accept: font/woff2``, respectively.
 
  .. code:: bash
 
-   raw-media-types="image/png, text/xml"
+   raw-media-types="image/png, font/woff2"
 
 .. _server-host:
 
diff --git a/docs/errors.rst b/docs/errors.rst
index 248051f98..08782f4ec 100644
--- a/docs/errors.rst
+++ b/docs/errors.rst
@@ -193,8 +193,9 @@ Related to the HTTP request elements.
 |               | See :ref:`guc_resp_status`.                                 |
 | PGRST112      |                                                             |
 +---------------+-------------------------------------------------------------+
-| .. _pgrst113: | Related to :ref:`binary_output`. See :ref:`providing_img`   |
-|               | for an example on requesting images.                        |
+| .. _pgrst113: | Related to :ref:`scalar_return_formats`.                    |
+|               | See :ref:`providing_img` for an example on requesting       |
+|               | images.                                                     |
 | PGRST113      |                                                             |
 +---------------+-------------------------------------------------------------+
 | .. _pgrst114: | For an :ref:`UPSERT using PUT <upsert_put>`, when           |
diff --git a/docs/releases/v6.0.2.rst b/docs/releases/v6.0.2.rst
index 88a73ee5c..f96550515 100644
--- a/docs/releases/v6.0.2.rst
+++ b/docs/releases/v6.0.2.rst
@@ -23,7 +23,7 @@ Added
 * Bulk calling an RPC is now allowed. See :ref:`bulk_call`.
   |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
 
-* It's now possible to request a ``text/plain`` output. See :ref:`plain_text_output`.
+* It's now possible to request a ``text/plain`` output. See :ref:`scalar_return_formats`.
   |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
 
 * Config option for specifying PostgREST database pool timeout. See :ref:`db-pool-timeout`.

From 496a1734eca3163f20ccdfa4336462c51ccbda62 Mon Sep 17 00:00:00 2001
From: Laurence Isla <lau.isla.c@gmail.com>
Date: Wed, 18 May 2022 20:50:06 -0500
Subject: [PATCH 503/652] Add documentation on embedding views containing joins

---
 docs/api.rst | 52 ++++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 52 insertions(+)

diff --git a/docs/api.rst b/docs/api.rst
index 3f95f1dca..cedbd4aa2 100644
--- a/docs/api.rst
+++ b/docs/api.rst
@@ -1227,6 +1227,58 @@ It's also possible to embed `Materialized Views <https://www.postgresql.org/docs
 
   If view definitions change you must refresh PostgREST's schema cache for this to work properly. See the section :ref:`schema_reloading`.
 
+Embedding Views containing Joins
+--------------------------------
+
+The same embedding rules applies to views with joined tables, that is, the column of any table participating in the join with a **foreign key** definition must be present in the view.
+
+For instance, let's create a view called ``film_competition_view`` that will join three tables:
+
+.. code-block:: postgres
+
+  CREATE VIEW film_competition_view AS
+  SELECT
+   films.title as film_title
+   , competitions.name as competition_name
+   , film_id
+  FROM
+   nominations
+   JOIN films ON films.id = nominations.film_id
+   JOIN competitions ON competitions.id = nominations.competition_id;
+
+The view can be embedded with the table ``films`` because it has the ``film_id`` column from the ``nominations`` table, which has a relationship with ``films``.
+
+But what if you want to embed the view with the ``actors`` table? The ``film_id`` column alone will not allow it since it belongs to ``nominations``, which doesn't have a relationship to ``actors``. In this case, you need to select the ``films.id`` column from the ``films`` table, which has a many-to-many relationship with ``actors``.
+
+.. code-block:: postgres
+
+  CREATE VIEW film_competition_view AS
+  SELECT
+   films.title as film_title
+   , competitions.name as competition_name
+   -- To keep the relationship with the films table, this column is renamed
+   , film_id as nominations_film_id
+   -- Adding this column allows the relationships we want
+   , films.id as film_id
+  FROM
+   nominations
+   JOIN films ON films.id = nominations.film_id
+   JOIN competitions ON competitions.id = nominations.competition_id;
+
+Now the view can embed both the ``films`` and ``actors`` tables:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /film_competition_view?select=film_title,films(language),actors(last_name,first_name)&competition_name=ilike.bafta HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/film_competition_view?select=film_title,films(language),actors(last_name,first_name)&competition_name=ilike.bafta"
+
+As seen above, it is important to verify that the column in the view has the foreign key to the table you want to embed.
+
 .. _embedding_view_chains:
 
 Embedding Chains of Views

From 340c96883eda44d814cf9ac7404836d42da65baa Mon Sep 17 00:00:00 2001
From: Laurence Isla <lau.isla.c@gmail.com>
Date: Thu, 19 May 2022 16:44:31 -0500
Subject: [PATCH 504/652] Fix main explanation on views with joins (#537)

* Fix indentation and example view
* Change films.id to just id
---
 docs/api.rst | 38 ++++++++++++++++++--------------------
 1 file changed, 18 insertions(+), 20 deletions(-)

diff --git a/docs/api.rst b/docs/api.rst
index cedbd4aa2..5b30e6bd1 100644
--- a/docs/api.rst
+++ b/docs/api.rst
@@ -1230,54 +1230,52 @@ It's also possible to embed `Materialized Views <https://www.postgresql.org/docs
 Embedding Views containing Joins
 --------------------------------
 
-The same embedding rules applies to views with joined tables, that is, the column of any table participating in the join with a **foreign key** definition must be present in the view.
+On views that contain joins, PostgREST will infer the joined tables' foreign keys based on the sources of the view columns.
 
-For instance, let's create a view called ``film_competition_view`` that will join three tables:
+For instance, let's create a view called ``detailed_nominations_view`` that will join three tables:
 
 .. code-block:: postgres
 
-  CREATE VIEW film_competition_view AS
+  CREATE VIEW detailed_nominations_view AS
   SELECT
-   films.title as film_title
+     films.title as film_title
    , competitions.name as competition_name
+   , rank
    , film_id
-  FROM
-   nominations
-   JOIN films ON films.id = nominations.film_id
-   JOIN competitions ON competitions.id = nominations.competition_id;
+  FROM nominations
+  JOIN films ON films.id = nominations.film_id
+  JOIN competitions ON competitions.id = nominations.competition_id;
 
 The view can be embedded with the table ``films`` because it has the ``film_id`` column from the ``nominations`` table, which has a relationship with ``films``.
 
-But what if you want to embed the view with the ``actors`` table? The ``film_id`` column alone will not allow it since it belongs to ``nominations``, which doesn't have a relationship to ``actors``. In this case, you need to select the ``films.id`` column from the ``films`` table, which has a many-to-many relationship with ``actors``.
+But what if you want to embed the view with the ``actors`` table? The ``film_id`` column alone will not allow it since it belongs to ``nominations``, which doesn't have a relationship to ``actors``. In this case, you need to select the ``id`` column from the ``films`` table, which has a many-to-many relationship with ``actors``.
 
 .. code-block:: postgres
 
-  CREATE VIEW film_competition_view AS
+  CREATE VIEW detailed_nominations_view AS
   SELECT
-   films.title as film_title
+     films.title as film_title
    , competitions.name as competition_name
+   , rank
    -- To keep the relationship with the films table, this column is renamed
    , film_id as nominations_film_id
    -- Adding this column allows the relationships we want
    , films.id as film_id
-  FROM
-   nominations
-   JOIN films ON films.id = nominations.film_id
-   JOIN competitions ON competitions.id = nominations.competition_id;
+  FROM nominations
+  JOIN films ON films.id = nominations.film_id
+  JOIN competitions ON competitions.id = nominations.competition_id;
 
-Now the view can embed both the ``films`` and ``actors`` tables:
+Now we can embed both the ``films`` and ``actors`` tables:
 
 .. tabs::
 
   .. code-tab:: http
 
-    GET /film_competition_view?select=film_title,films(language),actors(last_name,first_name)&competition_name=ilike.bafta HTTP/1.1
+    GET /detailed_nominations_view?select=film_title,rank,films(language),actors(last_name,first_name)&competition_name=ilike.bafta HTTP/1.1
 
   .. code-tab:: bash Curl
 
-    curl "http://localhost:3000/film_competition_view?select=film_title,films(language),actors(last_name,first_name)&competition_name=ilike.bafta"
-
-As seen above, it is important to verify that the column in the view has the foreign key to the table you want to embed.
+    curl "http://localhost:3000/detailed_nominations_view?select=film_title,rank,films(language),actors(last_name,first_name)&competition_name=ilike.bafta"
 
 .. _embedding_view_chains:
 

From 06ab9fbd6704a46a19b5eb44b92249e7a4ba0d9a Mon Sep 17 00:00:00 2001
From: Laurence Isla <vanquisher.laurence.02@gmail.com>
Date: Thu, 19 May 2022 20:37:27 -0500
Subject: [PATCH 505/652] Add how to work with array columns (#538)

---
 .../working-with-postgresql-data-types.rst    | 133 +++++++++++++++++-
 1 file changed, 131 insertions(+), 2 deletions(-)

diff --git a/docs/how-tos/working-with-postgresql-data-types.rst b/docs/how-tos/working-with-postgresql-data-types.rst
index 06276f6c7..c5095bd9f 100644
--- a/docs/how-tos/working-with-postgresql-data-types.rst
+++ b/docs/how-tos/working-with-postgresql-data-types.rst
@@ -127,6 +127,135 @@ Now, you can insert a new product using a JSON object for the ``extra_info`` col
 
 To query and filter the data see :ref:`json_columns` for a complete reference.
 
+Arrays
+------
+
+To handle `array types <https://www.postgresql.org/docs/current/arrays.html>`_ you can use string representation or JSON array format. For instance, let's create the following table:
+
+.. code-block:: postgres
+
+  create table movies (
+    id int primary key,
+    title text not null,
+    tags text[],
+    performance_times time[]
+  );
+
+To insert a new value you can use string representation.
+
+.. tabs::
+
+  .. code-tab:: http
+
+    POST /movies HTTP/1.1
+    Content-Type: application/json
+
+    {
+      "id": 1,
+      "title": "Paddington",
+      "tags": "{family,comedy,not streamable}",
+      "performance_times": "{12:40,15:00,20:00}"
+    }
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/movies" \
+      -X POST -H "Content-Type: application/json" \
+      -d @- << EOF
+      {
+        "id": 1,
+        "title": "Paddington",
+        "tags": "{family,comedy,not streamable}",
+        "performance_times": "{12:40,15:00,20:00}"
+      }
+    EOF
+
+Or you could send the data using a JSON array format. The following request sends the same data as the example above:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    POST /movies HTTP/1.1
+    Content-Type: application/json
+
+    {
+      "id": 1,
+      "title": "Paddington",
+      "tags": ["family", "comedy", "not streamable"],
+      "performance_times": ["12:40", "15:00", "20:00"]
+    }
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/movies" \
+      -X POST -H "Content-Type: application/json" \
+      -d @- << EOF
+      {
+        "id": 1,
+        "title": "Paddington",
+        "tags": ["family", "comedy", "not streamable"],
+        "performance_times": ["12:40", "15:00", "20:00"]
+      }
+    EOF
+
+To query the data you can use the arrow operators. See :ref:`composite_array_columns`.
+
+Multidimensional Arrays
+~~~~~~~~~~~~~~~~~~~~~~~
+
+Handling multidimensional arrays is no different than handling one-dimensional ones: both the string representation and the JSON array format are allowed. For example, let's add a new column to the table:
+
+.. code-block:: postgres
+
+  -- The column stores the cinema, floor and auditorium numbers in that order
+  alter table movies
+  add column cinema_floor_auditorium int[][][];
+
+Now, let's update the row we inserted before using JSON array format:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    PATCH /movies?id=eq.1 HTTP/1.1
+    Content-Type: application/json
+
+    {
+      "cinema_floor_auditorium": [ [ [1,2], [6,7] ], [ [3,5], [8,9] ] ]
+    }
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/movies?id=eq.1" \
+      -X PATCH -H "Content-Type: application/json" \
+      -d @- << EOF
+      {
+        "cinema_floor_auditorium": [ [ [1,2], [6,7] ], [ [3,5], [8,9] ] ]
+      }
+    EOF
+
+Now, for example, to query the auditoriums that are located in the first cinema (position 0 in the array) and on the second floor (position 1 in the next inner array), we can use the arrow operators this way:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /movies?select=title,auditorium:cinema_floor_auditorium->0->1&id=eq.1 HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/movies?select=title,auditorium:cinema_floor_auditorium->0->1&id=eq.1"
+
+.. code-block:: json
+
+  [
+    {
+      "title": "Paddington",
+      "auditorium": [6,7]
+    }
+  ]
+
 Composite Types
 ---------------
 
@@ -203,7 +332,7 @@ Or, you could insert the data in JSON format. The following request is equivalen
       }
     EOF
 
-You can also query data using the arrow operators as you would for :ref:`JSON columns <json_columns>`.
+You can also query data using the arrow operators. See :ref:`composite_array_columns`.
 
 Ranges
 ------
@@ -391,7 +520,7 @@ You can also query and filter the value of a ``hstore`` column using the arrow o
   [{ "native": "مصر" }]
 
 PostGIS
-------------------
+-------
 
 You can use the string representation for `PostGIS <https://postgis.net/>`_ data types such as ``geometry`` or ``geography``. As an example, let's create a table using the ``geometry`` type (you need to `install PostGIS <https://postgis.net/install/>`_ first).
 

From 06956c1994264d7c1b7c23d0d55ca04d95d612c5 Mon Sep 17 00:00:00 2001
From: Laurence Isla <lau.isla.c@gmail.com>
Date: Tue, 24 May 2022 20:36:17 -0500
Subject: [PATCH 506/652] Add explicit use of special timestamp values

---
 docs/how-tos/working-with-postgresql-data-types.rst | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/docs/how-tos/working-with-postgresql-data-types.rst b/docs/how-tos/working-with-postgresql-data-types.rst
index c5095bd9f..c439301d0 100644
--- a/docs/how-tos/working-with-postgresql-data-types.rst
+++ b/docs/how-tos/working-with-postgresql-data-types.rst
@@ -58,17 +58,17 @@ Someone located in Cairo can retrieve the data using their local time, too:
 
 The response has the date in the time zone configured by the server: ``UTC -05:00``.
 
-You can use other comparative filters and also `PostgreSQL special date/time input values <https://www.postgresql.org/docs/current/datatype-datetime.html#DATATYPE-DATETIME-SPECIAL-TABLE>`_. For instance, to get the reports that are due after today you would do:
+You can use other comparative filters and also all the `PostgreSQL special date/time input values <https://www.postgresql.org/docs/current/datatype-datetime.html#DATATYPE-DATETIME-SPECIAL-TABLE>`_ as illustrated in this example:
 
 .. tabs::
 
   .. code-tab:: http
 
-    GET /reports?due_date=gt.today HTTP/1.1
+    GET /reports?or=(and(due_date.gte.today,due_date.lte.tomorrow),and(due_date.gt.-infinity,due_date.lte.epoch)) HTTP/1.1
 
   .. code-tab:: bash Curl
 
-    curl "http://localhost:3000/reports?due_date=gt.today"
+    curl "http://localhost:3000/reports?or=(and(due_date.gte.today,due_date.lte.tomorrow),and(due_date.gt.-infinity,due_date.lte.epoch))"
 
 .. code-block:: json
 

From 209b70cbfca8b23f7cf0f0b8b9d5822079e6aeff Mon Sep 17 00:00:00 2001
From: Laurence Isla <lau.isla.c@gmail.com>
Date: Wed, 25 May 2022 17:29:52 -0500
Subject: [PATCH 507/652] Add disclaimer on $ usage in jwt-secret values (#543)

---
 docs/configuration.rst | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/docs/configuration.rst b/docs/configuration.rst
index 9d2a33619..66061904b 100644
--- a/docs/configuration.rst
+++ b/docs/configuration.rst
@@ -480,6 +480,10 @@ jwt-secret
 
   Choosing a value for this parameter beginning with the at sign such as ``@filename`` (e.g. ``@./configs/my-config``) loads the secret out of an external file.
 
+  .. warning::
+
+     Only when using the :ref:`file_config`, if the ``jwt-secret`` contains a ``$`` character by itself it will give errors. In this case, use ``$$`` and PostgREST will interpret it as a single ``$`` character.
+
 .. _jwt-secret-is-base64:
 
 jwt-secret-is-base64

From 96c169e593b5ef75a461da5a15a0e6e3fac68602 Mon Sep 17 00:00:00 2001
From: Laurence Isla <lau.isla.c@gmail.com>
Date: Fri, 27 May 2022 17:12:47 -0500
Subject: [PATCH 508/652] Add bytea to working with types and improve img
 example (#542)

---
 docs/how-tos/providing-images-for-img.rst     | 78 ++++++-------------
 .../working-with-postgresql-data-types.rst    | 78 +++++++++++++++++++
 docs/index.rst                                |  3 +-
 postgrest.dict                                |  1 +
 4 files changed, 104 insertions(+), 56 deletions(-)

diff --git a/docs/how-tos/providing-images-for-img.rst b/docs/how-tos/providing-images-for-img.rst
index 989e19749..f1d892e0d 100644
--- a/docs/how-tos/providing-images-for-img.rst
+++ b/docs/how-tos/providing-images-for-img.rst
@@ -5,25 +5,18 @@ Providing images for ``<img>``
 
 :author: `pkel <https://github.com/pkel>`_
 
-In this how-to, you will learn how to create an endpoint for providing images to HTML :code:`<img>` tags without client side JavaScript.
-The resulting HTML might look like this:
-
-.. code-block:: html
-
-   <img src="http://host/files/42/cats.jpeg" alt="Cute Kittens"/>
-
-In fact, the presented technique is suitable for providing not only images, but arbitrary files.
+In this how-to, you will learn how to create an endpoint for providing images to HTML :code:`<img>` tags without client side JavaScript. In fact, the presented technique is suitable for providing not only images, but arbitrary files.
 
 We will start with a minimal example that highlights the general concept.
-Afterwards we present are more detailed solution that fixes a few shortcomings of the first approach.
+Afterwards we present a more detailed solution that fixes a few shortcomings of the first approach.
+
+.. warning::
+
+   Be careful when saving binaries in the database, having a separate storage service for these is preferable in most cases. See `Storing Binary files in the Database <https://wiki.postgresql.org/wiki/BinaryFilesInDB>`_.
 
 Minimal Example
 ---------------
 
-PostgREST returns binary data on requests that set the :code:`Accept: application/octet-stream` header.
-The general idea is to configure the reverse proxy in front of the API to set this header for all requests to :code:`/files/`.
-We will show how to achieve this using Nginx.
-
 First, we need a public table for storing the files.
 
 .. code-block:: postgres
@@ -36,64 +29,40 @@ First, we need a public table for storing the files.
 Let's assume this table contains an image of two cute kittens with id 42.
 We can retrieve this image in binary format from our PostgREST API by requesting :code:`/files?select=blob&id=eq.42` with the :code:`Accept: application/octet-stream` header.
 Unfortunately, putting the URL into the :code:`src` of an :code:`<img>` tag will not work.
-That's because browsers do not send the required header.
+That's because browsers do not send the required :code:`Accept: application/octet-stream` header.
 
-Luckily, we can configure our :doc:`Nginx reverse proxy <../admin>` to fix this problem for us.
-We assume that PostgREST is running on port 3000.
-We provide a new location :code:`/files/` that redirects requests to our endpoint with the :code:`Accept` header set to :code:`application/octet-stream`.
+Luckily we can specify the accepted media types in the :ref:`raw-media-types` configuration variable.
+In this case, the :code:`Accept: image/webp` header is sent by many web browsers by default, so let's add it to the configuration variable, like this: :code:`raw-media-types="image/webp"`.
+Now, the image will be displayed in the HTML page:
 
-.. code-block:: nginx
+.. code-block:: html
 
-   server {
-     # rest of reverse proxy and web server configuration
-     ...
-
-     location /files/ {
-       # /files/<id>/* ---> /files?select=blob&id=eq.<id>
-       rewrite /files/([^/]+).*  /files?select=blob&id=eq.$1  break;
-       # if id is missing
-       return 404;
-       # request binary output
-       proxy_set_header Accept application/octet-stream;
-       # usual proxy setup
-       proxy_hide_header Content-Location;
-       add_header Content-Location /api/$upstream_http_content_location;
-       proxy_set_header  Connection "";
-       proxy_http_version 1.1;
-       proxy_pass http://localhost:3000/;
-     }
-
-With this setup, we can request the cat image at :code:`localhost/files/42/cats.jpeg` without setting any headers.
-In fact, you can replace :code:`cats.jpeg` with any other filename or simply omit it.
-Putting the URL into the :code:`src` of an :code:`<img>` tag should now work as expected.
+   <img src="http://localhost:3000/files?select=blob&id=eq.42" alt="Cute Kittens"/>
 
 Improved Version
 ----------------
 
 The basic solution has some shortcomings:
 
-1.  The response :code:`Content-Type` header is set to :code:`application/octet-stream`.
-    This might confuse clients and users.
-2.  Download requests (e.g. Right Click -> Save Image As) to :code:`files/42` will propose :code:`42` as filename.
+1.  The response :code:`Content-Type` header is set to :code:`image/webp`.
+    This might be a problem if you want to specify a different format for the file.
+2.  Download requests (e.g. Right Click -> Save Image As) to :code:`/files?select=blob&id=eq.42` will propose :code:`files` as filename.
     This might confuse users.
 3.  Requests to the binary endpoint are not cached.
     This will cause unnecessary load on the database.
 
 The following improved version addresses these problems.
-First, we store the media types and names of our files in the database.
+First, in addition to the minimal example, we need to store the media types and names of our files in the database.
 
 .. code-block:: postgres
 
-   create table files(
-     id   int primary key
-   , type text
-   , name text
-   , blob bytea
-   );
+   alter table files
+     add column type text,
+     add column name text;
 
 Next, we set up an RPC endpoint that sets the content type and filename.
 We use this opportunity to configure some basic, client-side caching.
-For production, you probably want to configure additional caches, e.g. on the reverse proxy.
+For production, you probably want to configure additional caches, e.g. on the :ref:`reverse proxy <admin>`.
 
 .. code-block:: postgres
 
@@ -120,9 +89,8 @@ For production, you probably want to configure additional caches, e.g. on the re
      end
    $$ language plpgsql;
 
-With this, we can obtain the cat image from :code:`/rpc/file?id=42`.
-Consequently, we have to replace our previous rewrite rule in the Nginx recipe with the following.
+With this, we can obtain the cat image from :code:`/rpc/file?id=42`. Thus, the resulting HTML will be:
 
-.. code-block:: nginx
+.. code-block:: html
 
-   rewrite /files/([^/]+).*  /rpc/file?id=$1  break;
+   <img src="http://localhost:3000/rpc/file?id=42" alt="Cute Kittens"/>
diff --git a/docs/how-tos/working-with-postgresql-data-types.rst b/docs/how-tos/working-with-postgresql-data-types.rst
index c439301d0..9cfcf5279 100644
--- a/docs/how-tos/working-with-postgresql-data-types.rst
+++ b/docs/how-tos/working-with-postgresql-data-types.rst
@@ -5,6 +5,10 @@ Working with PostgreSQL data types
 
 PostgREST makes use of PostgreSQL string representations to work with data types. Thanks to this, you can use special values, such as ``now`` for timestamps, ``yes`` for booleans or time values including the time zones. This page describes how you can take advantage of these string representations to perform operations on different PostgreSQL data types.
 
+.. contents::
+  :local:
+  :depth: 1
+
 Timestamps
 ----------
 
@@ -461,6 +465,80 @@ Finally, do the request :ref:`casting the range column <casting_columns>`:
 
       create cast (mytsrange as json) with function mytsrange_to_json(mytsrange) as assignment;
 
+Bytea
+-----
+
+To send raw binary to PostgREST you need a function with a single unnamed parameter of `bytea type <https://www.postgresql.org/docs/current/datatype-binary.html>`_. For example, let's create a table that will save some files and a function that inserts data to that table:
+
+.. code-block:: postgres
+
+   create table files (
+     id int primary key generated always as identity,
+     file bytea
+   );
+
+   create function upload_binary(bytea) returns void as $$
+     insert into files (file) values ($1);
+   $$ language sql;
+
+Next, let's use the PostgREST logo for our test.
+
+.. code-block:: bash
+
+   curl "https://postgrest.org/en/latest/_images/logo.png" -o postgrest-logo.png
+
+Now, to send the file ``postgrest-logo.png`` we need to set the ``Content-Type: application/octet-stream`` header in the request:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    POST /rpc/upload_binary HTTP/1.1
+    Content-Type: application/octet-stream
+
+    postgrest-logo.png
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/rpc/upload_binary" \
+      -X POST -H "Content-Type: application/octet-stream" \
+      --data-binary "@postgrest-logo.png"
+
+To get the image from the database, you will need to set the ``Accept: application/octet-stream`` header in the request and select only the
+``bytea`` column.
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /files?select=file&id=eq.1 HTTP/1.1
+    Accept: application/octet-stream
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/files?select=file&id=eq.1" \
+      -H "Accept: application/octet-stream"
+
+You can also use more accurate headers depending on the type of the files by using the :ref:`raw-media-types` configuration. For example, adding the ``raw-media-types="image/png"`` setting to the configuration file will allow you to use the ``Accept: image/png`` header:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /files?select=file&id=eq.1 HTTP/1.1
+    Accept: image/png
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/files?select=file&id=eq.1" \
+      -H "Accept: image/png"
+
+See :ref:`providing_img` for a step-by-step example on how to handle images in HTML.
+
+.. warning::
+
+   Be careful when saving binaries in the database, having a separate storage service for these is preferable in most cases. See `Storing Binary files in the Database <https://wiki.postgresql.org/wiki/BinaryFilesInDB>`_.
+
 hstore
 ------
 
diff --git a/docs/index.rst b/docs/index.rst
index e2caa8096..c26e2477a 100644
--- a/docs/index.rst
+++ b/docs/index.rst
@@ -203,7 +203,8 @@ These are recipes that'll help you address specific use-cases.
    :caption: How-to guides
    :hidden:
 
-   how-tos/*
+   how-tos/working-with-postgresql-data-types
+   how-tos/providing-images-for-img
 
 - :doc:`how-tos/providing-images-for-img`
 - :doc:`how-tos/working-with-postgresql-data-types`
diff --git a/postgrest.dict b/postgrest.dict
index 5a3f17271..fe4bf205a 100644
--- a/postgrest.dict
+++ b/postgrest.dict
@@ -15,6 +15,7 @@ booleans
 Bouscal
 buildpack
 bugfixes
+Bytea
 Cardano
 cd
 centric

From 48783087de6307bbeae39abd3c938cb41b1beca4 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Franz-Josef=20F=C3=A4rber?=
 <franz-josef.faerber@stmuk.bayern.de>
Date: Thu, 2 Jun 2022 12:07:35 +0200
Subject: [PATCH 509/652] RPC POST for function w/single unnamed XML param,
 postgrest-PR #2300

---
 docs/api.rst | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/docs/api.rst b/docs/api.rst
index 5b30e6bd1..886b46578 100644
--- a/docs/api.rst
+++ b/docs/api.rst
@@ -2043,7 +2043,7 @@ You can also call a function that takes a single parameter of type JSON by sendi
 Calling functions with a single unnamed parameter
 -------------------------------------------------
 
-You can make a POST request to a function with a single unnamed parameter to send raw ``json/jsonb``, ``bytea`` or ``text`` data.
+You can make a POST request to a function with a single unnamed parameter to send raw ``json/jsonb``, ``bytea``, ``text`` or ``xml`` data.
 
 To send raw JSON, the function must have a single unnamed ``json`` or ``jsonb`` parameter and the header ``Content-Type: application/json`` must be included in the request.
 
@@ -2076,6 +2076,8 @@ To send raw JSON, the function must have a single unnamed ``json`` or ``jsonb``
 
   If an overloaded function has a single ``json`` or ``jsonb`` unnamed parameter, PostgREST will call this function as a fallback provided that no other overloaded function is found with the parameters sent in the POST request.
 
+To send raw XML, the parameter type must be ``xml`` and the header ``Content-Type: text/xml`` must be included in the request.
+
 To send raw binary, the parameter type must be ``bytea`` and the header ``Content-Type: application/octet-stream`` must be included in the request.
 
 .. code-block:: plpgsql

From 580184532b8d39d077fd71ddad060c46e84a8e02 Mon Sep 17 00:00:00 2001
From: Laurence Isla <lau.isla.c@gmail.com>
Date: Tue, 14 Jun 2022 10:40:10 -0500
Subject: [PATCH 510/652] Add 9.0.1 changelog

---
 docs/index.rst           |  1 +
 docs/releases/latest.rst | 20 ---------
 docs/releases/v9.0.1.rst | 89 ++++++++++++++++++++++++++++++++++++++++
 postgrest.dict           |  2 +
 4 files changed, 92 insertions(+), 20 deletions(-)
 create mode 100644 docs/releases/v9.0.1.rst

diff --git a/docs/index.rst b/docs/index.rst
index c26e2477a..db3a181d5 100644
--- a/docs/index.rst
+++ b/docs/index.rst
@@ -99,6 +99,7 @@ The project has a friendly and growing community. Join our `chat room <https://g
    :hidden:
 
    Latest <releases/latest>
+   v9.0.1 <releases/v9.0.1>
    v9.0.0 <releases/v9.0.0>
    releases/v8.0.0
    releases/v7.0.1
diff --git a/docs/releases/latest.rst b/docs/releases/latest.rst
index 101d8fd77..e09ccb247 100644
--- a/docs/releases/latest.rst
+++ b/docs/releases/latest.rst
@@ -67,38 +67,18 @@ Documentation improvements
 Bug fixes
 ---------
 
-* Execute deferred constraint triggers when using ``Prefer: tx=rollback`` (`#2020 <https://github.com/PostgREST/postgrest/issues/2020>`_)
-
 * Return ``204 No Content`` without ``Content-Type`` for ``PUT`` (`#2058 <https://github.com/PostgREST/postgrest/issues/2058>`_)
 
-* Fix ``is`` not working with upper or mixed case values like ``NULL, TrUe, FaLsE`` (`#2077 <https://github.com/PostgREST/postgrest/issues/2077>`_)
-
-* Fix schema cache loading when views with ``XMLTABLE`` and ``DEFAULT`` are present (`#2024 <https://github.com/PostgREST/postgrest/issues/2024>`_)
-
-* Fix wrong CORS header Authentication -> Authorization (`#1724 <https://github.com/PostgREST/postgrest/issues/1724>`_)
-
 * Clarify error for failed schema cache load. (`#2107 <https://github.com/PostgREST/postgrest/issues/2107>`_)
 
   - From ``Database connection lost. Retrying the connection`` to ``Could not query the database for the schema cache. Retrying.``
 
-* Fix reading database configuration properly when ``=`` is present in its value (`#2120 <https://github.com/PostgREST/postgrest/issues/2120>`_)
-
 * Fix silently ignoring filter on a non-existent embedded resource (`#1771 <https://github.com/PostgREST/postgrest/issues/1771>`_)
 
-* Remove trigger functions from schema cache and OpenAPI output, because they can't be called directly anyway. (`#2135 <https://github.com/PostgREST/postgrest/issues/2135>`_)
-
-* Remove aggregates, procedures and window functions from the schema cache and OpenAPI output. (`#2101 <https://github.com/PostgREST/postgrest/issues/2101>`_)
-
 * Remove functions, which are not callable due to unnamed arguments, from schema cache and OpenAPI output. (`#2152 <https://github.com/PostgREST/postgrest/issues/2152>`_)
 
 * Fix accessing JSON array fields with ``->`` and ``->>`` in ``?select=`` and ``?order=``. (`#2145 <https://github.com/PostgREST/postgrest/issues/2145>`_)
 
-* Fix ``--dump-schema`` running with a wrong PG version. (`#2153 <https://github.com/PostgREST/postgrest/issues/2153>`_)
-
-* Keep working when ``EMFILE (Too many open files)`` is reached. (`#2042 <https://github.com/PostgREST/postgrest/issues/2042>`_)
-
-* Ignore ``Content-Type`` headers for ``GET`` requests when calling RPCs. Previously, ``GET`` without parameters, but with ``Content-Type: text/plain`` or ``Content-Type: application/octet-stream`` would fail with ``404 Not Found``, even if a function without arguments was available. (`#2147 <https://github.com/PostgREST/postgrest/issues/2147>`_)
-
 Breaking changes
 ----------------
 
diff --git a/docs/releases/v9.0.1.rst b/docs/releases/v9.0.1.rst
new file mode 100644
index 000000000..ffec1ee2a
--- /dev/null
+++ b/docs/releases/v9.0.1.rst
@@ -0,0 +1,89 @@
+
+PostgREST 9.0.1
+===============
+
+This version includes important fixes for production environments and other miscellaneous fixes. You can download the pre-compiled binaries on the `GitHub release page <https://github.com/PostgREST/postgrest/releases/tag/v9.0.1>`_.
+
+Bug Fixes
+---------
+
+* Keep working when ``EMFILE (Too many open files)`` is reached. (`#2042 <https://github.com/PostgREST/postgrest/issues/2042>`_)
+
+* Disable parallel GC for better performance on higher core CPUs (`#2294 <https://github.com/PostgREST/postgrest/issues/2294>`_). Thanks to `NoRedInk for their blog post <https://blog.noredink.com/post/666654908557180928/tuning-haskell-rts-for-kubernetes-part-2>`_ that lead us to this fix.
+
+* Fix using CPU while idle. (`#1076 <https://github.com/PostgREST/postgrest/issues/1076>`_)
+
+* Fix reading database configuration properly when ``=`` is present in the value. (`#2120 <https://github.com/PostgREST/postgrest/issues/2120>`_)
+
+* Fix ``is`` not working with upper or mixed case values like ``NULL``, ``TrUe``, ``FaLsE``. (`#2077 <https://github.com/PostgREST/postgrest/issues/2077>`_)
+
+* Execute deferred constraint triggers when using ``Prefer: tx=rollback``. (`#2020 <https://github.com/PostgREST/postgrest/issues/2020>`_)
+
+* Ignore ``Content-Type`` headers for ``GET`` requests when calling RPCs. (`#2147 <https://github.com/PostgREST/postgrest/issues/2147>`_)
+
+   * Previously, ``GET`` without parameters, but with ``Content-Type: text/plain`` or ``Content-Type: application/octet-stream`` would fail with ``404 Not Found``, even if a function without arguments was available.
+
+* Fix wrong CORS header from ``Authentication`` to ``Authorization``. (`#1724 <https://github.com/PostgREST/postgrest/issues/1724>`_)
+
+* Fix ``json`` and ``jsonb`` columns showing a type in OpenAPI spec. (`#2165 <https://github.com/PostgREST/postgrest/issues/2165>`_)
+
+* Remove trigger functions from the schema cache and OpenAPI output, because they can't be called directly anyway. (`#2135 <https://github.com/PostgREST/postgrest/issues/2135>`_)
+
+* Remove aggregates, procedures and window functions from the schema cache and OpenAPI output. (`#2101 <https://github.com/PostgREST/postgrest/issues/2101>`_)
+
+* Fix schema cache loading when views with ``XMLTABLE`` and ``DEFAULT`` are present. (`#2024 <https://github.com/PostgREST/postgrest/issues/2024>`_)
+
+* Fix ``--dump-schema`` running with a wrong PG version. (`#2153 <https://github.com/PostgREST/postgrest/issues/2153>`_)
+
+* Fix misleading disambiguation error where the content of the ``relationship`` key looks like valid syntax. (`#2239 <https://github.com/PostgREST/postgrest/issues/2239>`_)
+
+Thanks
+------
+
+Big thanks from the `PostgREST team <https://github.com/orgs/PostgREST/people>`_ to our sponsors!
+
+.. container:: image-container
+
+  .. image:: ../_static/cybertec-new.png
+    :target: https://www.cybertec-postgresql.com/en/?utm_source=postgrest.org&utm_medium=referral&utm_campaign=postgrest
+    :width:  13em
+
+  .. image:: ../_static/2ndquadrant.png
+    :target: https://www.2ndquadrant.com/en/?utm_campaign=External%20Websites&utm_source=PostgREST&utm_medium=Logo
+    :width:  13em
+
+  .. image:: ../_static/retool.png
+    :target: https://retool.com/?utm_source=sponsor&utm_campaign=postgrest
+    :width:  13em
+
+  .. image:: ../_static/gnuhost.png
+    :target: https://gnuhost.eu/?utm_source=sponsor&utm_campaign=postgrest
+    :width:  13em
+
+  .. image:: ../_static/supabase.png
+    :target: https://supabase.com/?utm_source=postgrest%20backers&utm_medium=open%20source%20partner&utm_campaign=postgrest%20backers%20github&utm_term=homepage
+    :width:  13em
+
+  .. image:: ../_static/oblivious.jpg
+    :target: https://oblivious.ai/?utm_source=sponsor&utm_campaign=postgrest
+    :width:  13em
+
+* Evans Fernandes
+* `Jan Sommer <https://github.com/nerfpops>`_
+* `Franz Gusenbauer <https://www.igutech.at/>`_
+* `Daniel Babiak <https://github.com/dbabiak>`_
+* Tsingson Qin
+* Michel Pelletier
+* Jay Hannah
+* Robert Stolarz
+* Nicholas DiBiase
+* Christopher Reid
+* Nathan Bouscal
+* Daniel Rafaj
+* David Fenko
+* Remo Rechkemmer
+* Severin Ibarluzea
+* Tom Saleeba
+* Pawel Tyll
+
+If you like to join them please consider `supporting PostgREST development <https://github.com/PostgREST/postgrest#user-content-supporting-development>`_.
diff --git a/postgrest.dict b/postgrest.dict
index fe4bf205a..2262fe9bc 100644
--- a/postgrest.dict
+++ b/postgrest.dict
@@ -24,6 +24,7 @@ ClojureScript
 cloudfared
 config
 CORS
+CPUs
 cryptographically
 CSV
 Daemonizing
@@ -41,6 +42,7 @@ Fernandes
 filename
 FreeBSD
 fts
+GC
 GHC
 Github
 Google

From a9baa5bc9f73009d19b87fb24b252eaea3206ef1 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Wed, 15 Jun 2022 23:11:42 -0500
Subject: [PATCH 511/652] lowercase upsert

---
 docs/api.rst | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/docs/api.rst b/docs/api.rst
index 886b46578..e41e7513a 100644
--- a/docs/api.rst
+++ b/docs/api.rst
@@ -1724,10 +1724,10 @@ Updates also support :code:`Prefer: return=representation` plus :ref:`v_filter`.
 
 .. _upsert:
 
-UPSERT
+Upsert
 ======
 
-You can make an UPSERT with :code:`POST` and the :code:`Prefer: resolution=merge-duplicates` header:
+You can make an upsert with :code:`POST` and the :code:`Prefer: resolution=merge-duplicates` header:
 
 .. tabs::
 
@@ -1755,17 +1755,17 @@ You can make an UPSERT with :code:`POST` and the :code:`Prefer: resolution=merge
       ]
     EOF
 
-By default, UPSERT operates based on the primary key columns, you must specify all of them. You can also choose to ignore the duplicates with :code:`Prefer: resolution=ignore-duplicates`. This works best when the primary key is natural, but it's also possible to use it if the primary key is surrogate (example: "id serial primary key"). For more details read `this issue <https://github.com/PostgREST/postgrest/issues/1118>`_.
+By default, upsert operates based on the primary key columns, you must specify all of them. You can also choose to ignore the duplicates with :code:`Prefer: resolution=ignore-duplicates`. This works best when the primary key is natural, but it's also possible to use it if the primary key is surrogate (example: "id serial primary key"). For more details read `this issue <https://github.com/PostgREST/postgrest/issues/1118>`_.
 
 .. important::
-  After creating a table or changing its primary key, you must refresh PostgREST schema cache for UPSERT to work properly. To learn how to refresh the cache see :ref:`schema_reloading`.
+  After creating a table or changing its primary key, you must refresh PostgREST schema cache for upsert to work properly. To learn how to refresh the cache see :ref:`schema_reloading`.
 
 .. _on_conflict:
 
 On Conflict
 -----------
 
-By specifying the ``on_conflict`` query parameter, you can make UPSERT work on a column(s) that has a UNIQUE constraint.
+By specifying the ``on_conflict`` query parameter, you can make upsert work on a column(s) that has a UNIQUE constraint.
 
 .. tabs::
 
@@ -1798,7 +1798,7 @@ By specifying the ``on_conflict`` query parameter, you can make UPSERT work on a
 PUT
 ---
 
-A single row UPSERT can be done by using :code:`PUT` and filtering the primary key columns with :code:`eq`:
+A single row upsert can be done by using :code:`PUT` and filtering the primary key columns with :code:`eq`:
 
 .. tabs::
 
@@ -2385,7 +2385,7 @@ You can call overloaded functions with different number of arguments.
 Response Formats For Scalar Responses
 =====================================
 
-For scalar return values such as 
+For scalar return values such as
 
 * single-column selects on tables or
 * scalar functions,

From 5305998a952b0a84c76ed7d6a3935ca7a9d3e2d8 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Wed, 15 Jun 2022 23:32:53 -0500
Subject: [PATCH 512/652] disallowed full table update

---
 docs/api.rst | 6 ++----
 1 file changed, 2 insertions(+), 4 deletions(-)

diff --git a/docs/api.rst b/docs/api.rst
index e41e7513a..54426024e 100644
--- a/docs/api.rst
+++ b/docs/api.rst
@@ -1716,12 +1716,10 @@ To update a row or rows in a table, use the PATCH verb. Use :ref:`h_filter` to s
       -X PATCH -H "Content-Type: application/json" \
       -d '{ "category": "child" }'
 
+Doing a full table update without filters is not allowed and will result in 0 updated rows. To make a an update without filters, you must limit the rows affected. See :ref:`limited_update_delete`.
+
 Updates also support :code:`Prefer: return=representation` plus :ref:`v_filter`.
 
-.. warning::
-
-  Beware of accidentally updating every row in a table. To learn to prevent that see :ref:`block_fulltable`.
-
 .. _upsert:
 
 Upsert

From 13ce0f33548c741fabd1800f2ffa3c313a00b4f7 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Wed, 15 Jun 2022 23:51:04 -0500
Subject: [PATCH 513/652] add bulk update

---
 docs/api.rst             | 33 +++++++++++++++++++++++++++++++++
 docs/releases/latest.rst |  5 +++++
 postgrest.dict           |  2 ++
 3 files changed, 40 insertions(+)

diff --git a/docs/api.rst b/docs/api.rst
index 54426024e..5d34ecf77 100644
--- a/docs/api.rst
+++ b/docs/api.rst
@@ -1720,6 +1720,39 @@ Doing a full table update without filters is not allowed and will result in 0 up
 
 Updates also support :code:`Prefer: return=representation` plus :ref:`v_filter`.
 
+.. _bulk_update:
+
+Bulk Update
+-----------
+
+You can update rows with different data by providing a JSON array of objects having uniform keys, the rows will be chosen based on the primary key column(s) values.
+
+.. tabs::
+
+  .. code-tab:: http
+
+    PATCH /employees HTTP/1.1
+
+    [
+      { "id": 1, "name": "Renamed employee 1", "salary": 40000 },
+      { "id": 2, "name": "Renamed employee 2", "salary": 52000 },
+      { "id": 3, "name": "Renamed employee 3", "salary": 60000 }
+    ]
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/employees" \
+      -X PATCH -H "Content-Type: application/json" \
+      -d @- << EOF
+    [
+      { "id": 1, "name": "Renamed employee 1", "salary": 40000 },
+      { "id": 2, "name": "Renamed employee 2", "salary": 52000 },
+      { "id": 3, "name": "Renamed employee 3", "salary": 60000 }
+    ]
+    EOF
+
+You must not include any filters for this to work. If you provide filters, only the values of the first object in the array will be used for the update.
+
 .. _upsert:
 
 Upsert
diff --git a/docs/releases/latest.rst b/docs/releases/latest.rst
index e09ccb247..3b7eaaf97 100644
--- a/docs/releases/latest.rst
+++ b/docs/releases/latest.rst
@@ -10,6 +10,11 @@ Features
 API
 ~~~
 
+Bulk Update
+^^^^^^^^^^^
+
+See :ref:`bulk_update`.
+
 Access Composite Type fields and Array elements
 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
 
diff --git a/postgrest.dict b/postgrest.dict
index 2262fe9bc..d1430e1f6 100644
--- a/postgrest.dict
+++ b/postgrest.dict
@@ -182,6 +182,8 @@ unicode
 unix
 updatable
 UPSERT
+Upsert
+upsert
 uri
 url
 urls

From 360cfa3fbd0e6a6f4b3f39a488f56e838c3fc8b2 Mon Sep 17 00:00:00 2001
From: Steve Chavez <stevechavezast@gmail.com>
Date: Mon, 20 Jun 2022 13:50:47 -0500
Subject: [PATCH 514/652] clarify errors (#550)

---
 docs/errors.rst | 42 ++++++++++++++++++++++++++----------------
 1 file changed, 26 insertions(+), 16 deletions(-)

diff --git a/docs/errors.rst b/docs/errors.rst
index 08782f4ec..e3473e487 100644
--- a/docs/errors.rst
+++ b/docs/errors.rst
@@ -3,12 +3,17 @@
 Error Source
 ============
 
-For the most part, error messages will come directly from the database with the same `structure that PostgreSQL uses <https://www.postgresql.org/docs/current/plpgsql-errors-and-messages.html>`_, PostgREST will convert the ``MESSAGE``, ``DETAIL``, ``HINT`` and ``ERRCODE`` from the PostgreSQL error to JSON format and add an HTTP status code to the response (see :ref:`status_codes`). For instance, this is the error you will get when querying a nonexistent table:
+For the most part, error messages will come directly from the database with the same `structure that PostgreSQL uses <https://www.postgresql.org/docs/current/error-style-guide.html>`_. PostgREST will convert the ``MESSAGE``, ``DETAIL``, ``HINT`` and ``ERRCODE`` from the PostgreSQL error to JSON format and add an HTTP status code to the response (see :ref:`status_codes`). For instance, this is the error you will get when querying a nonexistent table:
 
 .. code-block:: http
 
   GET /nonexistent_table?id=eq.1 HTTP/1.1
 
+.. code-block:: http
+
+  HTTP/1.1 404 Not Found
+  Content-Type: application/json; charset=utf-8
+
 .. code-block:: json
 
   {
@@ -18,12 +23,17 @@ For the most part, error messages will come directly from the database with the
     "message": "relation \"api.nonexistent_table\" does not exist"
   }
 
-However, some errors do come from PostgREST itself (such as those related to the :ref:`schema_cache`). These have the same structure as the PostgreSQL errors (message, details, hint and code) but are differentiated by the ``PGRST`` prefix in the ``code`` field (see :ref:`pgrst_errors`). For instance, when querying a function that does not exist, the error will be:
+However, some errors do come from PostgREST itself (such as those related to the :ref:`schema_cache`). These have the same structure as the PostgreSQL errors but are differentiated by the ``PGRST`` prefix in the ``code`` field (see :ref:`pgrst_errors`). For instance, when querying a function that does not exist, the error will be:
 
 .. code-block:: http
 
   POST /rpc/nonexistent_function HTTP/1.1
 
+.. code-block:: http
+
+  HTTP/1.1 404 Not Found
+  Content-Type: application/json; charset=utf-8
+
 .. code-block:: json
 
   {
@@ -149,11 +159,11 @@ Related to the HTTP request elements.
 |               | verbs are allowed. Any other verb will throw this error.    |
 | PGRST101      |                                                             |
 +---------------+-------------------------------------------------------------+
-| .. _pgrst102: | Related to the request body structure.                      |
-|               | See :ref:`insert` and :ref:`update`.                        |
+| .. _pgrst102: | An invalid request body was sent(e.g. an empty body or      |
+|               | malformed JSON).                                            |
 | PGRST102      |                                                             |
 +---------------+-------------------------------------------------------------+
-| .. _pgrst103: | Related to :ref:`limits`.                                   |
+| .. _pgrst103: | An invalid range was specified for :ref:`limits`.           |
 |               |                                                             |
 | PGRST103      |                                                             |
 +---------------+-------------------------------------------------------------+
@@ -161,7 +171,7 @@ Related to the HTTP request elements.
 |               | or it doesn't exist.                                        |
 | PGRST104      |                                                             |
 +---------------+-------------------------------------------------------------+
-| .. _pgrst105: | Related to an :ref:`UPSERT using PUT <upsert_put>`.         |
+| .. _pgrst105: | An invalid :ref:`PUT <upsert_put>` request was done         |
 |               |                                                             |
 | PGRST105      |                                                             |
 +---------------+-------------------------------------------------------------+
@@ -185,17 +195,17 @@ Related to the HTTP request elements.
 |               | modifies more rows than the maximum specified in the limit. |
 | PGRST110      | See :ref:`limited_update_delete`.                           |
 +---------------+-------------------------------------------------------------+
-| .. _pgrst111: | Related to :ref:`guc_resp_hdrs`.                            |
-|               |                                                             |
+| .. _pgrst111: | An invalid ``response.headers`` was set.                    |
+|               | See :ref:`guc_resp_hdrs`.                                   |
 | PGRST111      |                                                             |
 +---------------+-------------------------------------------------------------+
 | .. _pgrst112: | The status code must be a positive integer.                 |
 |               | See :ref:`guc_resp_status`.                                 |
 | PGRST112      |                                                             |
 +---------------+-------------------------------------------------------------+
-| .. _pgrst113: | Related to :ref:`scalar_return_formats`.                    |
-|               | See :ref:`providing_img` for an example on requesting       |
-|               | images.                                                     |
+| .. _pgrst113: | More than one column was returned for a scalar result.      |
+|               | See :ref:`scalar_return_formats`.                           |
+|               |                                                             |
 | PGRST113      |                                                             |
 +---------------+-------------------------------------------------------------+
 | .. _pgrst114: | For an :ref:`UPSERT using PUT <upsert_put>`, when           |
@@ -229,8 +239,8 @@ Related to a :ref:`stale schema cache <stale_schema>`. Most of the time, these e
 |               | the embedding resources or the relationship itself may not  |
 | PGRST200      | exist in the database.                                      |
 +---------------+-------------------------------------------------------------+
-| .. _pgrst201: | Related to :ref:`embed_disamb`.                             |
-|               |                                                             |
+| .. _pgrst201: | An ambiguous embedding request was made.                    |
+|               | See :ref:`embed_disamb`.                                    |
 | PGRST201      |                                                             |
 +---------------+-------------------------------------------------------------+
 | .. _pgrst202: | Caused by a :ref:`stale_function_signature`, otherwise      |
@@ -274,12 +284,12 @@ Related to the authentication process using JWT. You can follow the :ref:`tut1`
 Group X - Internal
 ------------------
 
-Internal errors mostly related to `the library <https://hackage.haskell.org/package/hasql>`_ that PostgREST uses to connect to the database. If you encounter any of these errors, you may have stumbled on a PostgREST bug, please `open an issue <https://github.com/PostgREST/postgrest/issues>`_ and we'll be glad to fix it.
+Internal errors. If you encounter any of these, you may have stumbled on a PostgREST bug, please `open an issue <https://github.com/PostgREST/postgrest/issues>`_ and we'll be glad to fix it.
 
 +---------------+-------------------------------------------------------------+
 | Code          | Description                                                 |
 +===============+=============================================================+
-| .. _pgrstX00: | Internal errors related to the library that connects to the |
-|               | database.                                                   |
+| .. _pgrstX00: | Internal errors related to the library used for connecting  |
+|               | to the database.                                            |
 | PGRSTX00      |                                                             |
 +---------------+-------------------------------------------------------------+

From 65c2754719c38d26f7ab10e97f648193e59e5ce1 Mon Sep 17 00:00:00 2001
From: Laurence Isla <lau.isla.c@gmail.com>
Date: Tue, 21 Jun 2022 17:38:29 -0500
Subject: [PATCH 515/652] Modify GeoJSON examples from views to functions
 (#551)

---
 .../working-with-postgresql-data-types.rst    | 138 +++++++++---------
 1 file changed, 70 insertions(+), 68 deletions(-)

diff --git a/docs/how-tos/working-with-postgresql-data-types.rst b/docs/how-tos/working-with-postgresql-data-types.rst
index 9cfcf5279..9ad0c934d 100644
--- a/docs/how-tos/working-with-postgresql-data-types.rst
+++ b/docs/how-tos/working-with-postgresql-data-types.rst
@@ -638,23 +638,28 @@ Say you want to add areas in polygon format. The request using string representa
       ]
     EOF
 
-Now, when you request the information, PostgREST will automatically cast the ``area`` column to ``JSON`` format. Although this output is useful, you will want to use the PostGIS functions to have more control on filters or casts. For these cases, creating a ``view`` is your best option. For example, let's use some of the functions to get the data in `GeoJSON format <https://geojson.org/>`_ and to calculate the area in square units:
+Now, when you request the information, PostgREST will automatically cast the ``area`` column to ``JSON`` format. Although this output is useful, you will want to use the PostGIS functions to have more control on filters or casts. For these cases, creating a ``function`` is your best option. For example, let's use some of the functions to get the data in `GeoJSON format <https://geojson.org/>`_ and to calculate the area in square units:
 
 .. code-block:: postgres
 
-  create or replace view coverage_geo as
-  select name,
-         -- Get the Geometry Object
-         st_AsGeoJSON(c.area)::json as geo_geometry,
-         -- Get the Feature Object
-         st_AsGeoJSON(c.*)::json as geo_feature,
-         -- Calculate the area in square units
-         st_area(c.area) as square_units
-  from coverage c;
+  create or replace function coverage_geo(filter text) returns json as $$
+    select
+      json_build_object(
+          'name', c.name,
+        -- Get the Geometry Object
+          'geo_geometry', st_AsGeoJSON(c.area)::json,
+        -- Get the Feature Object
+          'geo_feature', st_AsGeoJSON(c.*)::json,
+        -- Calculate the area in square units
+          'square_units', st_area(c.area)
+        )
+    from coverage c
+    where c.name = filter;
+  $$ language sql;
 
-  -- Create another view for the FeatureCollection Object
+  -- Create another function for the FeatureCollection Object
   -- for the sake of making the examples clearer
-  create or replace view coverage_geo_collection as
+  create or replace function coverage_geo_collection() returns json as $$
     select
       json_build_object(
           'type', 'FeatureCollection',
@@ -662,6 +667,7 @@ Now, when you request the information, PostgREST will automatically cast the ``a
         )
         as geo_feature_collection
     from coverage c;
+  $$ language sql;
 
 Now the query will return the information as you expected:
 
@@ -669,39 +675,37 @@ Now the query will return the information as you expected:
 
   .. code-tab:: http
 
-    GET /coverage_geo?name=eq.big HTTP/1.1
+    GET /rpc/coverage_geo?filter=big HTTP/1.1
 
   .. code-tab:: bash Curl
 
-    curl "http://localhost:3000/coverage_geo?name=eq.big"
+    curl "http://localhost:3000/rpc/coverage_geo?filter=big"
 
 .. code-block:: json
 
-  [
-    {
-      "name": "big",
-      "geo_geometry": {
+  {
+    "name": "big",
+    "geo_geometry": {
+      "type": "Polygon",
+      "coordinates": [
+        [[0,0],[10,0],[10,10],[0,10],[0,0]]
+      ]
+    },
+    "geo_feature": {
+      "type": "Feature",
+      "geometry": {
         "type": "Polygon",
         "coordinates": [
           [[0,0],[10,0],[10,10],[0,10],[0,0]]
         ]
       },
-      "geo_feature": {
-        "type": "Feature",
-        "geometry": {
-          "type": "Polygon",
-          "coordinates": [
-            [[0,0],[10,0],[10,10],[0,10],[0,0]]
-          ]
-        },
-        "properties": {
-          "id": 2,
-          "name": "big"
-        }
-      },
-      "square_units": 100
-    }
-  ]
+      "properties": {
+        "id": 2,
+        "name": "big"
+      }
+    },
+    "square_units": 100
+  }
 
 And for the Feature Collection format:
 
@@ -709,46 +713,44 @@ And for the Feature Collection format:
 
   .. code-tab:: http
 
-    GET /coverage_geo_collection HTTP/1.1
+    GET /rpc/coverage_geo_collection HTTP/1.1
 
   .. code-tab:: bash Curl
 
-    curl "http://localhost:3000/coverage_geo_collection"
+    curl "http://localhost:3000/rpc/coverage_geo_collection"
 
 .. code-block:: json
 
-  [
-    {
-      "geo_feature_collection": {
-        "type": "FeatureCollection",
-        "features": [
-          {
-            "type": "Feature",
-            "geometry": {
-                "type": "Polygon",
-                "coordinates": [
-                  [[0,0],[1,0],[1,1],[0,1],[0,0]]
-                ]
-            },
-            "properties": {
-              "id": 1,
-              "name": "small"
-            }
+  {
+    "geo_feature_collection": {
+      "type": "FeatureCollection",
+      "features": [
+        {
+          "type": "Feature",
+          "geometry": {
+              "type": "Polygon",
+              "coordinates": [
+                [[0,0],[1,0],[1,1],[0,1],[0,0]]
+              ]
           },
-          {
-            "type": "Feature",
-            "geometry": {
-                "type": "Polygon",
-                "coordinates": [
-                  [[0,0],[10,0],[10,10],[0,10],[0,0]]
-                ]
-            },
-            "properties": {
-              "id": 2,
-              "name": "big"
-            }
+          "properties": {
+            "id": 1,
+            "name": "small"
           }
-        ]
-      }
+        },
+        {
+          "type": "Feature",
+          "geometry": {
+              "type": "Polygon",
+              "coordinates": [
+                [[0,0],[10,0],[10,10],[0,10],[0,0]]
+              ]
+          },
+          "properties": {
+            "id": 2,
+            "name": "big"
+          }
+        }
+      ]
     }
-  ]
+  }

From 06ece64cb0b2b490d986e1b1033fea9c42174e3a Mon Sep 17 00:00:00 2001
From: fjf2002 <franz-josef.faerber@stmuk.bayern.de>
Date: Wed, 29 Jun 2022 17:11:15 +0200
Subject: [PATCH 516/652] HOW-TO for SOAP (#554)

---
 docs/how-tos/create-soap-endpoint.rst | 222 ++++++++++++++++++++++++++
 docs/index.rst                        |   2 +
 2 files changed, 224 insertions(+)
 create mode 100644 docs/how-tos/create-soap-endpoint.rst

diff --git a/docs/how-tos/create-soap-endpoint.rst b/docs/how-tos/create-soap-endpoint.rst
new file mode 100644
index 000000000..62f0d0412
--- /dev/null
+++ b/docs/how-tos/create-soap-endpoint.rst
@@ -0,0 +1,222 @@
+.. _create_soap_endpoint:
+
+Create a SOAP endpoint
+======================
+
+:author: `fjf2002 <https://github.com/fjf2002>`_
+
+PostgREST now has XML support. With a bit of work, SOAP endpoints become possible.
+
+Please note that PostgREST supports just ``text/xml`` MIME type in request/response headers ``Content-Type`` and ``Accept``.
+If you have to use other MIME types such as ``application/soap+xml``, you could manipulate the headers in your reverse proxy.
+
+
+
+Minimal Example
+---------------
+This example will simply return the request body, inside a tag ``therequestbodywas``.
+
+Add the following function to your PostgreSQL database:
+
+.. code-block:: postgres
+
+   CREATE OR REPLACE FUNCTION my_soap_endpoint(xml) RETURNS xml AS $$
+   DECLARE
+     nsarray CONSTANT text[][] := ARRAY[
+       ARRAY['soapenv', 'http://schemas.xmlsoap.org/soap/envelope/']
+     ];
+   BEGIN
+     RETURN xmlelement(
+       NAME "soapenv:Envelope",
+       XMLATTRIBUTES('http://schemas.xmlsoap.org/soap/envelope/' AS "xmlns:soapenv"),
+       xmlelement(NAME "soapenv:Header"),
+       xmlelement(
+         NAME "soapenv:Body",
+         xmlelement(
+           NAME theRequestBodyWas,
+           (xpath('/soapenv:Envelope/soapenv:Body', $1, nsarray))[1]
+         )
+       )
+    );
+   END;
+   $$ LANGUAGE plpgsql;
+
+Do not forget to refresh the :ref:`PostgREST schema cache <schema_reloading>`.
+
+Use ``curl`` for a first test:
+
+.. code-block:: bash
+
+    curl http://localhost:3000/rpc/my_soap_endpoint \
+        --header 'Content-Type: text/xml' \
+        --header 'Accept: text/xml' \
+        --data-binary @- <<XML
+    <soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/">
+      <soapenv:Header/>
+      <soapenv:Body>
+        <mySOAPContent>
+          My SOAP Content
+        </mySOAPContent>
+      </soapenv:Body>
+    </soapenv:Envelope>
+    XML
+
+The output should contain the original request body within the ``therequestbodywas`` entity,
+and should roughly look like:
+
+.. code-block:: xml
+
+    <soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/">
+      <soapenv:Header/>
+      <soapenv:Body>
+        <therequestbodywas>
+          <soapenv:Body xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/">
+            <mySOAPContent>
+              My SOAP Content
+            </mySOAPContent>
+          </soapenv:Body>
+        </therequestbodywas>
+      </soapenv:Body>
+    </soapenv:Envelope>
+
+Unfortunately the ``Accept: text/xml`` header is currently mandatory concerning PostgREST, otherwise it will respond
+with a ``Content-Type: application/json`` header and enclose the response with quotes.
+(You can check the returned headers by adding ``-v`` to the curl call.)
+
+If your SOAP clients do not send the ``Accept: text/xml`` header, you can fix that in your nginx reverse proxy
+by adding something like ...
+
+.. code-block:: nginx
+
+    set $accept $http_accept;
+    if ($contentType ~ "^text/xml($|;)") {
+        set $accept "text/xml";
+    }
+    proxy_set_header Accept $accept;
+
+to your ``location`` nginx configuration.
+(The given example sets the ``Accept`` header for each request of Content-Type ``text/xml``.)
+
+
+A more elaborate example
+------------------------
+
+Here we have a SOAP service that converts a fraction to a decimal value,
+with pass-through of PostgreSQL errors to the SOAP response.
+Please note that in production you probably should not pass through plain database errors
+potentially disclosing internals to the client, but instead handle the errors directly.
+
+
+.. code-block:: postgres
+
+   -- helper function
+   CREATE OR REPLACE FUNCTION _soap_envelope(body xml)
+    RETURNS xml
+    LANGUAGE sql
+   AS $function$
+     SELECT xmlelement(
+       NAME "soapenv:Envelope",
+       XMLATTRIBUTES('http://schemas.xmlsoap.org/soap/envelope/' AS "xmlns:soapenv"),
+       xmlelement(NAME "soapenv:Header"),
+       xmlelement(NAME "soapenv:Body", body)
+     );
+   $function$;
+   
+   -- helper function
+   CREATE OR REPLACE FUNCTION _soap_exception(
+     faultcode text,
+     faultstring text
+   )
+    RETURNS xml
+    LANGUAGE sql
+   AS $function$
+     SELECT _soap_envelope(
+       xmlelement(NAME "soapenv:Fault",
+         xmlelement(NAME "faultcode", faultcode),
+         xmlelement(NAME "faultstring", faultstring)
+       )
+     );
+   $function$;
+   
+   CREATE OR REPLACE FUNCTION fraction_to_decimal(xml)
+    RETURNS xml
+    LANGUAGE plpgsql
+   AS $function$
+   DECLARE
+     nsarray CONSTANT text[][] := ARRAY[
+       ARRAY['soapenv', 'http://schemas.xmlsoap.org/soap/envelope/']
+     ];
+     exc_msg text;
+     exc_detail text;
+     exc_hint text;
+     exc_sqlstate text;
+   BEGIN
+     -- simulating a statement that results in an exception:
+     RETURN _soap_envelope(xmlelement(
+       NAME "decimalValue",
+       (
+         (xpath('/soapenv:Envelope/soapenv:Body/fraction/numerator/text()', $1, nsarray))[1]::text::int
+         /
+         (xpath('/soapenv:Envelope/soapenv:Body/fraction/denominator/text()', $1, nsarray))[1]::text::int
+       )::text::xml
+     ));
+   EXCEPTION WHEN OTHERS THEN
+     GET STACKED DIAGNOSTICS
+       exc_msg := MESSAGE_TEXT,
+       exc_detail := PG_EXCEPTION_DETAIL,
+       exc_hint := PG_EXCEPTION_HINT,
+       exc_sqlstate := RETURNED_SQLSTATE;
+     RAISE WARNING USING
+       MESSAGE = exc_msg,
+       DETAIL = exc_detail,
+       HINT = exc_hint;
+     RETURN _soap_exception(faultcode => exc_sqlstate, faultstring => concat(exc_msg, ', DETAIL: ', exc_detail, ', HINT: ', exc_hint));
+   END
+   $function$;
+
+Let's test the ``fraction_to_decimal`` service with illegal values:
+
+.. code-block:: bash
+
+    curl http://localhost:3000/rpc/fraction_to_decimal \
+      --header 'Content-Type: text/xml' \
+      --header 'Accept: text/xml' \
+      --data-binary @- <<XML
+    <soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/">
+      <soapenv:Header/>
+      <soapenv:Body>
+        <fraction>
+          <numerator>42</numerator>
+          <denominator>0</denominator>
+        </fraction>
+      </soapenv:Body>
+    </soapenv:Envelope>
+    XML
+
+The output should roughly look like:
+
+.. code-block:: xml
+
+   <soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/">
+     <soapenv:Header/>
+     <soapenv:Body>
+       <soapenv:Fault>
+         <faultcode>22012</faultcode>
+         <faultstring>division by zero, DETAIL: , HINT: </faultstring>
+       </soapenv:Fault>
+     </soapenv:Body>
+   </soapenv:Envelope>
+
+
+References
+----------
+For more information concerning PostgREST, cf.
+
+- :ref:`s_proc_single_unnamed`
+- :ref:`scalar_return_formats`
+- :ref:`Nginx reverse proxy <admin>`
+
+For SOAP reference, visit
+
+- the specification at https://www.w3.org/TR/soap/
+- shorter more practical advice is available at https://www.w3schools.com/xml/xml_soap.asp
diff --git a/docs/index.rst b/docs/index.rst
index db3a181d5..989c55f16 100644
--- a/docs/index.rst
+++ b/docs/index.rst
@@ -206,9 +206,11 @@ These are recipes that'll help you address specific use-cases.
 
    how-tos/working-with-postgresql-data-types
    how-tos/providing-images-for-img
+   how-tos/create-soap-endpoint
 
 - :doc:`how-tos/providing-images-for-img`
 - :doc:`how-tos/working-with-postgresql-data-types`
+- :doc:`how-tos/create-soap-endpoint`
 
 Ecosystem
 ---------

From b37bacb19a5da5b9834ba09a7865840119d5851e Mon Sep 17 00:00:00 2001
From: Laurence Isla <lau.isla.c@gmail.com>
Date: Fri, 8 Jul 2022 12:27:14 -0500
Subject: [PATCH 517/652] Add Limezest/postgrest-cloud-run to ecosystem

---
 docs/ecosystem.rst | 1 +
 1 file changed, 1 insertion(+)

diff --git a/docs/ecosystem.rst b/docs/ecosystem.rst
index 8283d6c69..3d177848c 100644
--- a/docs/ecosystem.rst
+++ b/docs/ecosystem.rst
@@ -62,6 +62,7 @@ DevOps
 * `cloudgov-demo-postgrest <https://github.com/GSA/cloudgov-demo-postgrest>`_ - demo for a federally-compliant REST API on cloud.gov
 * `cloudstark/helm-charts <https://github.com/cloudstark/helm-charts/tree/master/postgrest>`_ - helm chart to deploy PostgREST to a Kubernetes cluster via a Deployment and Service
 * `jbkarle/postgrest <https://github.com/jbkarle/postgrest>`_ - helm chart with a demo database for development and test purposes
+* `Limezest/postgrest-cloud-run <https://github.com/Limezest/postgrest-cloud-run>`_ - expose a PostgreSQL database on Cloud SQL using Cloud Run
 
 .. _eco_external_notification:
 

From bba960d4c631a79837215785911b22cea9de8b3a Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Mon, 11 Jul 2022 23:55:56 -0500
Subject: [PATCH 518/652] new m2m relationship detection

---
 docs/api.rst | 24 +++++++++++++++++++++++-
 1 file changed, 23 insertions(+), 1 deletion(-)

diff --git a/docs/api.rst b/docs/api.rst
index 5d34ecf77..d28ca2475 100644
--- a/docs/api.rst
+++ b/docs/api.rst
@@ -957,7 +957,29 @@ this:
 Embedding through join tables
 -----------------------------
 
-PostgREST can also detect relationships going through join tables. Thus you can request the Actors for Films (which in this case finds the information through Roles).
+PostgREST can also detect many-to-many relationships going through join tables. For this, the join table must contain foreign keys to the tables in
+the many-to-many relationship and its primary key must include these foreign key columns.
+
+.. code-block:: postgresql
+
+  create table "Roles"(
+    film_id int references "Films"(id)
+  , actor_id int references "Actors"(id)
+  , primary key(film_id, actor_id)
+  )
+
+  -- the many-to-many relationship can also be detected if the join table has a surrogate key,
+  -- as long as the foreign key columns are also part of the primary key
+
+  create table "Roles"(
+    id int generated always as identity,
+  , film_id int references "Films"(id)
+  , actor_id int references "Actors"(id)
+  , primary key(id, film_id, actor_id)
+  )
+
+
+Then you can request the Actors for Films (which in this case finds the information through Roles).
 
 .. tabs::
 

From 2592639d1b37078fd3df7537b60a5e46e4df116d Mon Sep 17 00:00:00 2001
From: Laurence Isla <lau.isla.c@gmail.com>
Date: Tue, 19 Jul 2022 10:51:36 -0500
Subject: [PATCH 519/652] Reword and clarify embedding on views

---
 docs/api.rst | 75 ++++++++++------------------------------------------
 1 file changed, 14 insertions(+), 61 deletions(-)

diff --git a/docs/api.rst b/docs/api.rst
index d28ca2475..4e7c4813f 100644
--- a/docs/api.rst
+++ b/docs/api.rst
@@ -1204,31 +1204,34 @@ Since it contains the ``films_id`` foreign key, it is possible to embed ``box_of
 Embedding Views
 ---------------
 
-Embedding a view is possible if the view contains columns that have **foreign keys** defined in their source tables.
+PostgREST will infer the relationships of a view based on its source tables. Source tables are the ones referenced in the ``FROM`` and ``JOIN`` clauses of the view definition. The foreign keys of the relationships must be present in the top ``SELECT`` clause of the view for this to work.
 
-As an example, let's create a view called ``nominations_view`` based on the *nominations* table.
+For instance, the following view has ``nominations``, ``films`` and ``competitions`` as source tables:
 
 .. code-block:: postgres
 
   CREATE VIEW nominations_view AS
-  SELECT
-     rank
-   , competition_id
-   , film_id
-  FROM
-    nominations;
+    SELECT
+       films.title as film_title
+     , competitions.name as competition_name
+     , nominations.rank
+     , nominations.film_id as nominations_film_id
+     , films.id as film_id
+    FROM nominations
+    JOIN films ON films.id = nominations.film_id
+    JOIN competitions ON competitions.id = nominations.competition_id;
 
-Since it contains ``competition_id`` and ``film_id`` — and each one has a **foreign key** defined in its source table — we can embed *competitions* and *films*:
+Since this view contains ``nominations.film_id``, which has a **foreign key** relationship to ``films``, then we can embed the ``films`` table. Similarly, because the view contains ``films.id``, then we can also embed the ``roles`` and the ``actors`` tables (the last one in a many-to-many relationship):
 
 .. tabs::
 
   .. code-tab:: http
 
-    GET /nominations_view?select=rank,competitions(name,year),films(title)&rank=eq.5 HTTP/1.1
+    GET /nominations_view?select=film_title,films(language),roles(character),actors(last_name,first_name)&rank=eq.5 HTTP/1.1
 
   .. code-tab:: bash Curl
 
-    curl "http://localhost:3000/nominations_view?select=rank,competitions(name,year),films(title)&rank=eq.5"
+    curl "http://localhost:3000/nominations_view?select=film_title,films(language),roles(character),actors(last_name,first_name)&rank=eq.5"
 
 It's also possible to embed `Materialized Views <https://www.postgresql.org/docs/current/rules-materializedviews.html>`_.
 
@@ -1249,56 +1252,6 @@ It's also possible to embed `Materialized Views <https://www.postgresql.org/docs
 
   If view definitions change you must refresh PostgREST's schema cache for this to work properly. See the section :ref:`schema_reloading`.
 
-Embedding Views containing Joins
---------------------------------
-
-On views that contain joins, PostgREST will infer the joined tables' foreign keys based on the sources of the view columns.
-
-For instance, let's create a view called ``detailed_nominations_view`` that will join three tables:
-
-.. code-block:: postgres
-
-  CREATE VIEW detailed_nominations_view AS
-  SELECT
-     films.title as film_title
-   , competitions.name as competition_name
-   , rank
-   , film_id
-  FROM nominations
-  JOIN films ON films.id = nominations.film_id
-  JOIN competitions ON competitions.id = nominations.competition_id;
-
-The view can be embedded with the table ``films`` because it has the ``film_id`` column from the ``nominations`` table, which has a relationship with ``films``.
-
-But what if you want to embed the view with the ``actors`` table? The ``film_id`` column alone will not allow it since it belongs to ``nominations``, which doesn't have a relationship to ``actors``. In this case, you need to select the ``id`` column from the ``films`` table, which has a many-to-many relationship with ``actors``.
-
-.. code-block:: postgres
-
-  CREATE VIEW detailed_nominations_view AS
-  SELECT
-     films.title as film_title
-   , competitions.name as competition_name
-   , rank
-   -- To keep the relationship with the films table, this column is renamed
-   , film_id as nominations_film_id
-   -- Adding this column allows the relationships we want
-   , films.id as film_id
-  FROM nominations
-  JOIN films ON films.id = nominations.film_id
-  JOIN competitions ON competitions.id = nominations.competition_id;
-
-Now we can embed both the ``films`` and ``actors`` tables:
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /detailed_nominations_view?select=film_title,rank,films(language),actors(last_name,first_name)&competition_name=ilike.bafta HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/detailed_nominations_view?select=film_title,rank,films(language),actors(last_name,first_name)&competition_name=ilike.bafta"
-
 .. _embedding_view_chains:
 
 Embedding Chains of Views

From eb100cc7460eef07b6b44ae83b678483e9074089 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Fri, 5 Aug 2022 18:36:25 -0500
Subject: [PATCH 520/652] clarify * as an alias of % for LIKE

---
 docs/api.rst | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/docs/api.rst b/docs/api.rst
index 4e7c4813f..31f627bb9 100644
--- a/docs/api.rst
+++ b/docs/api.rst
@@ -67,8 +67,8 @@ gte           :code:`>=`                greater than or equal
 lt            :code:`<`                 less than
 lte           :code:`<=`                less than or equal
 neq           :code:`<>` or :code:`!=`  not equal
-like          :code:`LIKE`              LIKE operator (use * in place of %)
-ilike         :code:`ILIKE`             ILIKE operator (use * in place of %)
+like          :code:`LIKE`              LIKE operator (to avoid `URL encoding <https://en.wikipedia.org/wiki/Percent-encoding>`_ you can use ``*`` as an alias of the percent sign ``%`` for the pattern)
+ilike         :code:`ILIKE`             ILIKE operator (to avoid `URL encoding <https://en.wikipedia.org/wiki/Percent-encoding>`_ you can use ``*`` as an alias of the percent sign ``%`` for the pattern)
 match         :code:`~`                 ~ operator, see :ref:`pattern_matching`
 imatch        :code:`~*`                ~* operator, see :ref:`pattern_matching`
 in            :code:`IN`                one of a list of values, e.g. :code:`?a=in.(1,2,3)`

From a0c463b99824eb8e7cfc68a3bc2bfb36919a4bbe Mon Sep 17 00:00:00 2001
From: Laurence Isla <lau.isla.c@gmail.com>
Date: Tue, 23 Aug 2022 21:59:48 -0500
Subject: [PATCH 521/652] Add missing changes/fixes/features for v10

---
 docs/api.rst                                  | 290 +++++++++++----
 docs/configuration.rst                        |  28 +-
 .../working-with-postgresql-data-types.rst    | 171 ++++-----
 docs/index.rst                                |   2 +-
 docs/install.rst                              |   2 +-
 docs/releases/latest.rst                      | 143 --------
 docs/releases/v10.0.0.rst                     | 337 ++++++++++++++++++
 postgrest.dict                                |   5 +
 8 files changed, 676 insertions(+), 302 deletions(-)
 delete mode 100644 docs/releases/latest.rst
 create mode 100644 docs/releases/v10.0.0.rst

diff --git a/docs/api.rst b/docs/api.rst
index 31f627bb9..50d78aec4 100644
--- a/docs/api.rst
+++ b/docs/api.rst
@@ -801,6 +801,7 @@ The current possibilities are:
 * ``text/csv``
 * ``application/json``
 * ``application/openapi+json``
+* ``application/geo+json``
 
 and in the special case of a single-column select the following additional three formats;
 also see the section :ref:`scalar_return_formats`:
@@ -870,35 +871,56 @@ In addition to providing RESTful routes for each table and view, PostgREST allow
 API call. This reduces the need for multiple API requests. The server uses **foreign keys** to determine which tables and views can be
 returned together. For example, consider a database of films and their awards:
 
-.. important::
-
-  PostgREST needs `FOREIGN KEY constraints <https://www.postgresql.org/docs/current/tutorial-fk.html>`_ to be able to do Resource Embedding.
-
 .. image:: _static/film.png
 
-As seen above in :ref:`v_filter` we can request the titles of all films like this:
+.. important::
+
+  * PostgREST needs `FOREIGN KEY constraints <https://www.postgresql.org/docs/current/tutorial-fk.html>`_ to be able to do Resource Embedding.
+  * Whenever FOREIGN KEY constraints change in the database schema you must refresh PostgREST's schema cache for Resource Embedding to work properly. See the section :ref:`schema_reloading`.
+
+.. _one-to-many:
+
+One-to-many relationships
+-------------------------
+
+When a one-to-many relationship is detected, the embedded resource is returned as a JSON array. For example, we can request the Directors and the Films they directed because there is a foreign key constraint between them, like this:
 
 .. tabs::
 
   .. code-tab:: http
 
-    GET /films?select=title HTTP/1.1
+    GET /directors?select=last_name,films(title) HTTP/1.1
 
   .. code-tab:: bash Curl
 
-    curl "http://localhost:3000/films?select=title"
-
-This might return something like
+    curl "http://localhost:3000/directors?select=last_name,films(title)"
 
 .. code-block:: json
 
   [
-    { "title": "Workers Leaving The Lumière Factory In Lyon" },
-    { "title": "The Dickson Experimental Sound Film" },
-    { "title": "The Haunted Castle" }
+    { "last_name": "Lumière",
+      "films": [
+        {"title": "Workers Leaving The Lumière Factory In Lyon"}
+      ]
+    },
+    { "last_name": "Dickson",
+      "films": [
+        {"title": "The Dickson Experimental Sound Film"}
+      ]
+    },
+    { "last_name": "Méliès",
+      "films": [
+        {"title": "The Haunted Castle"}
+      ]
+    }
   ]
 
-However because a foreign key constraint exists between Films and Directors, we can request this information be included:
+.. _many-to-one:
+
+Many-to-one relationships
+-------------------------
+
+When a many-to-one relationship is detected, the embedded resource is returned as a JSON object. For example, we can request all the Films and the Director for each film like this:
 
 .. tabs::
 
@@ -910,8 +932,6 @@ However because a foreign key constraint exists between Films and Directors, we
 
     curl "http://localhost:3000/films?select=title,directors(id,last_name)"
 
-Which would return
-
 .. code-block:: json
 
   [
@@ -935,10 +955,7 @@ Which would return
     }
   ]
 
-In this example, since the relationship is a forward relationship, there is
-only one director associated with a film. As the table name is plural it might
-be preferable for it to be singular instead. An table name alias can accomplish
-this:
+However, the table name is in plural, which is not accurate since a Film is directed by only one Director. Using a table name alias can solve this:
 
 .. tabs::
 
@@ -950,34 +967,31 @@ this:
 
     curl "http://localhost:3000/films?select=title,director:directors(id,last_name)"
 
-.. important::
+.. _many-to-many:
 
-  Whenever FOREIGN KEY constraints change in the database schema you must refresh PostgREST's schema cache for Resource Embedding to work properly. See the section :ref:`schema_reloading`.
-
-Embedding through join tables
------------------------------
+Many-to-many relationships
+--------------------------
 
 PostgREST can also detect many-to-many relationships going through join tables. For this, the join table must contain foreign keys to the tables in
-the many-to-many relationship and its primary key must include these foreign key columns.
+the many-to-many relationship and its composite primary key must include these foreign key columns.
 
 .. code-block:: postgresql
 
-  create table "Roles"(
-    film_id int references "Films"(id)
-  , actor_id int references "Actors"(id)
+  create table roles(
+    film_id int references films(id)
+  , actor_id int references actors(id)
   , primary key(film_id, actor_id)
-  )
+  );
 
   -- the many-to-many relationship can also be detected if the join table has a surrogate key,
   -- as long as the foreign key columns are also part of the primary key
 
-  create table "Roles"(
+  create table roles(
     id int generated always as identity,
-  , film_id int references "Films"(id)
-  , actor_id int references "Actors"(id)
+  , film_id int references films(id)
+  , actor_id int references actors(id)
   , primary key(id, film_id, actor_id)
-  )
-
+  );
 
 Then you can request the Actors for Films (which in this case finds the information through Roles).
 
@@ -991,6 +1005,84 @@ Then you can request the Actors for Films (which in this case finds the informat
 
     curl "http://localhost:3000/actors?select=films(title,year)"
 
+.. _one-to-one:
+
+One-to-one relationships
+------------------------
+
+PostgREST detects one-to-one relationships when a foreign key is also the primary key of the table or when the foreign key has a ``UNIQUE`` constraint.
+
+.. code-block:: postgresql
+
+  -- references Films using the primary key as a foreign key
+  CREATE TABLE technical_specs(
+    film_id INT PRIMARY KEY REFERENCES films,
+    runtime TIME,
+    camera TEXT,
+    sound TEXT
+  );
+
+  -- references Films using a foreign key with unique constraint
+  CREATE TABLE technical_specs(
+    film_id INT REFERENCES films UNIQUE,
+    runtime TIME,
+    camera TEXT,
+    sound TEXT
+  );
+
+Now, the embedding between Films and Technical_Specs is returned as a JSON object no matter the order.
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /films?select=title,technical_specs(*) HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/films?select=title,technical_specs(*)"
+
+.. _computed_relationships:
+
+Computed Relationships
+----------------------
+
+You can customize how PostgREST detects relationships between two tables. To do this, you need to create a function that has one of the tables as a single parameter and the other as its return type. For instance:
+
+.. code-block:: postgres
+
+  CREATE FUNCTION director_competition(directors) RETURNS SETOF competitions AS $$
+    SELECT c.*
+    FROM competitions c
+    JOIN nominations n ON c.id = n.competition_id
+    JOIN films f ON n.film_id = f.id
+    WHERE f.director_id = $1.id
+  $$ STABLE LANGUAGE sql;
+
+The above function allows a direct relationship between ``directors`` and ``competitions``:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /directors?select=*,competitions:director_competition(name) HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/directors?select=*,competitions:director_competition(name)"
+
+Take into consideration that the opposite relationship will not be detected, so you need to create another function for that.
+
+Computed relationships also allow you to override the ones that are detected by default. For example, this function can change the ``/films?select=directors(*)`` embedding:
+
+.. code-block:: postgres
+
+  CREATE FUNCTION directors(films) RETURNS SETOF directors ROW 1 AS $$
+    -- Override the relationship here
+  $$ STABLE LANGUAGE sql;
+
+Note that if ``ROW 1`` is added, PostgREST will detect a :ref:`many-to-one relationship <many-to-one>` and return a JSON object instead of an array embedding.
+
 .. _nested_embedding:
 
 Nested Embedding
@@ -1460,25 +1552,24 @@ Hint Disambiguation
 If specifying the **target** is not enough for unambiguous embedding, you can add a **hint**. For example, let's assume we create
 two views of ``addresses``: ``central_addresses`` and ``eastern_addresses``.
 
-Since PostgREST supports :ref:`embedding_views` by detecting **source foreign keys** in the views, embedding with the foreign key
-as the **target** will not be enough for an unambiguous embed:
+PostgREST cannot detect a view as an embedded resource by using a column name or foreign key name as targets, that is why we need to use the view name ``central_addresses`` instead. But, still, this is not enough for an unambiguous embed.
 
 .. tabs::
 
   .. code-tab:: http
 
-    GET /orders?select=*,billing_address(*) HTTP/1.1
+    GET /orders?select=*,central_addresses(*) HTTP/1.1
 
   .. code-tab:: bash Curl
 
-    curl "http://localhost:3000/orders?select=*,billing_address(*)" -i
+    curl "http://localhost:3000/orders?select=*,central_addresses(*)" -i
 
 .. code-block:: http
 
   HTTP/1.1 300 Multiple Choices
 
 For solving this case, in addition to the **target**, we can add a **hint**.
-Here we specify ``central_addresses`` as the **target** and the ``billing_address`` foreign key as the **hint**:
+Here, we still specify ``central_addresses`` as the **target** and use the ``billing_address`` foreign key as the **hint**:
 
 .. tabs::
 
@@ -1510,6 +1601,10 @@ Hints also work alongside ``!inner`` if a top level filtering is needed. From th
 
     curl "http://localhost:3000/orders?select=*,central_addresses!billing_address!inner(*)&central_addresses.code=AB1000"
 
+.. note::
+
+  If the relationship is so complex that hint disambiguation does not solve it, then using :ref:`computed_relationships` is the best alternative.
+
 .. _insert:
 
 Insertions
@@ -1695,39 +1790,6 @@ Doing a full table update without filters is not allowed and will result in 0 up
 
 Updates also support :code:`Prefer: return=representation` plus :ref:`v_filter`.
 
-.. _bulk_update:
-
-Bulk Update
------------
-
-You can update rows with different data by providing a JSON array of objects having uniform keys, the rows will be chosen based on the primary key column(s) values.
-
-.. tabs::
-
-  .. code-tab:: http
-
-    PATCH /employees HTTP/1.1
-
-    [
-      { "id": 1, "name": "Renamed employee 1", "salary": 40000 },
-      { "id": 2, "name": "Renamed employee 2", "salary": 52000 },
-      { "id": 3, "name": "Renamed employee 3", "salary": 60000 }
-    ]
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/employees" \
-      -X PATCH -H "Content-Type: application/json" \
-      -d @- << EOF
-    [
-      { "id": 1, "name": "Renamed employee 1", "salary": 40000 },
-      { "id": 2, "name": "Renamed employee 2", "salary": 52000 },
-      { "id": 3, "name": "Renamed employee 3", "salary": 60000 }
-    ]
-    EOF
-
-You must not include any filters for this to work. If you provide filters, only the values of the first object in the array will be used for the update.
-
 .. _upsert:
 
 Upsert
@@ -2497,6 +2559,8 @@ Also if you wish to generate a ``summary`` field you can do it by having a multi
     spans
     multiple lines$$;
 
+If you need to include the ``security`` and ``securityDefinitions`` options, set the :ref:`openapi-security-active` configuration to ``true``.
+
 You can use a tool like `Swagger UI <https://swagger.io/tools/swagger-ui/>`_ to create beautiful documentation from the description and to host an interactive web-based dashboard. The dashboard allows developers to make requests against a live PostgREST server, and provides guidance with request headers and example request bodies.
 
 .. important::
@@ -2550,7 +2614,7 @@ For a view, the methods are determined by the presence of INSTEAD OF TRIGGERS.
    | `auto-updatable views <https://www.postgresql.org/docs/current/sql-createview.html#SQL-CREATEVIEW-UPDATABLE-VIEWS>`_ |
    +--------------------+-------------------------------------------------------------------------------------------------+
 
-For functions, OPTIONS requests are not supported.
+For functions, the methods depend on their volatility. ``VOLATILE`` functions allow only ``OPTIONS,POST``, whereas the rest also permit ``GET,HEAD``.
 
 .. important::
 
@@ -2817,3 +2881,83 @@ Returns:
     "hint": "Upgrade your plan",
     "code": "PT402"
   }
+
+.. _explain_plan:
+
+Execution plan
+--------------
+
+You can get the execution plan of a request by adding the ``Accept: application/vnd.pgrst.plan`` header after setting the :ref:`db-plan-enabled` configuration to ``true``. It is useful to verify why a certain operation might be expensive as a result of using `EXPLAIN <https://www.postgresql.org/docs/current/sql-explain.html>`_ on the generated query for the request.
+
+The output of the plan is generated in ``text`` format by default:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /users?select=name&order=id HTTP/1.1
+    Accept: application/vnd.pgrst.plan
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/users?select=name&order=id" \
+      -H "Accept: application/vnd.pgrst.plan"
+
+.. code-block:: psql
+
+  Aggregate  (cost=73.65..73.68 rows=1 width=112)
+    ->  Index Scan using users_pkey on users  (cost=0.15..60.90 rows=850 width=36)
+
+The same execution can be returned in ``json`` format by using the ``Accept: application/vnd.pgrst.plan+json`` header instead:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /users?select=name&order=id HTTP/1.1
+    Accept: application/vnd.pgrst.plan+json
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/users?select=name&order=id" \
+      -H "Accept: application/vnd.pgrst.plan+json"
+
+.. code-block:: json
+
+  [
+    {
+      "Plan": {
+        "Node Type": "Aggregate",
+        "Strategy": "Plain",
+        "Partial Mode": "Simple",
+        "Parallel Aware": false,
+        "Async Capable": false,
+        "Startup Cost": 73.65,
+        "Total Cost": 73.68,
+        "Plan Rows": 1,
+        "Plan Width": 112,
+        "Plans": [
+          {
+            "Node Type": "Index Scan",
+            "Parent Relationship": "Outer",
+            "Parallel Aware": false,
+            "Async Capable": false,
+            "Scan Direction": "Forward",
+            "Index Name": "users_pkey",
+            "Relation Name": "users",
+            "Alias": "users",
+            "Startup Cost": 0.15,
+            "Total Cost": 60.90,
+            "Plan Rows": 850,
+            "Plan Width": 36
+          }
+        ]
+      }
+    }
+  ]
+
+You can also get the result plan of the different media types that PostgREST supports by adding them to the header using ``for``. For instance, to obtain the plan for a :ref:`text/xml <scalar_return_formats>` media type in json format, you need to add the ``Accept: application/vnd.pgrst.plan; for=text/xml`` header.
+
+Additionally, the deactivated parameters of the ``EXPLAIN`` command can be enabled by adding them to the header using ``options``. The available parameters are ``analyze``, ``verbose``, ``settings``, ``buffers`` and ``wal``, while the remaining ones are active by default.  For example, to add the ``analyze`` and ``wal`` parameters, add the ``Accept: application/vnd.pgrst.plan; options=analyze|wal`` header.
+
+Note that any changes done will be committed when activating the ``analyze`` option. To avoid this, set the :ref:`db-tx-end` configuration in a way that allows to rollback the changes according to your preference.
diff --git a/docs/configuration.rst b/docs/configuration.rst
index 66061904b..1e45e1065 100644
--- a/docs/configuration.rst
+++ b/docs/configuration.rst
@@ -154,8 +154,9 @@ db-channel-enabled       Boolean True              Y
 db-config                Boolean True              Y
 db-extra-search-path     String  public            Y
 db-max-rows              Int     ∞                 Y
+db-plan-enabled          Boolean False             Y
 db-pool                  Int     10
-db-pool-timeout          Int     10
+db-pool-timeout          Int     3600
 db-pre-request           String                    Y
 db-prepared-statements   Boolean True              Y
 db-schemas               String  public            Y
@@ -168,6 +169,7 @@ jwt-secret               String                    Y
 jwt-secret-is-base64     Boolean False             Y
 log-level                String  error             Y
 openapi-mode             String  follow-privileges Y
+openapi-security-active  Boolean False             Y
 openapi-server-proxy-uri String                    Y
 raw-media-types          String                    Y
 server-host              String  !4
@@ -282,6 +284,18 @@ db-max-rows
 
   A hard limit to the number of rows PostgREST will fetch from a view, table, or stored procedure. Limits payload size for accidental or malicious requests.
 
+.. _db-plan-enabled:
+
+db-plan-enabled
+---------------
+
+  =============== =====================
+  **Environment** PGRST_DB_PLAN_ENABLED
+  **In-Database** pgrst.db_plan_enabled
+  =============== =====================
+
+  When this is set to :code:`true`, the execution plan of a request can be retrieved by using the :code:`Accept: application/vnd.pgrst.plan` header. See :ref:`explain_plan`.
+
 .. _db-pool:
 
 db-pool
@@ -551,6 +565,18 @@ openapi-mode
     # Throws a `404 Not Found` error when accessing the API root path
     openapi-mode = "disabled"
 
+.. _openapi-security-active:
+
+openapi-security-active
+-----------------------
+
+  =============== =============================
+  **Environment** PGRST_OPENAPI_SECURITY_ACTIVE
+  **In-Database** pgrst.openapi_security_active
+  =============== =============================
+
+When this is set to :code:`true`, security options are included in the :ref:`OpenAPI output <open-api>`.
+
 .. _openapi-server-proxy-uri:
 
 openapi-server-proxy-uri
diff --git a/docs/how-tos/working-with-postgresql-data-types.rst b/docs/how-tos/working-with-postgresql-data-types.rst
index 9ad0c934d..fb317c97e 100644
--- a/docs/how-tos/working-with-postgresql-data-types.rst
+++ b/docs/how-tos/working-with-postgresql-data-types.rst
@@ -597,6 +597,8 @@ You can also query and filter the value of a ``hstore`` column using the arrow o
 
   [{ "native": "مصر" }]
 
+.. _ww_postgis:
+
 PostGIS
 -------
 
@@ -638,76 +640,81 @@ Say you want to add areas in polygon format. The request using string representa
       ]
     EOF
 
-Now, when you request the information, PostgREST will automatically cast the ``area`` column to ``JSON`` format. Although this output is useful, you will want to use the PostGIS functions to have more control on filters or casts. For these cases, creating a ``function`` is your best option. For example, let's use some of the functions to get the data in `GeoJSON format <https://geojson.org/>`_ and to calculate the area in square units:
-
-.. code-block:: postgres
-
-  create or replace function coverage_geo(filter text) returns json as $$
-    select
-      json_build_object(
-          'name', c.name,
-        -- Get the Geometry Object
-          'geo_geometry', st_AsGeoJSON(c.area)::json,
-        -- Get the Feature Object
-          'geo_feature', st_AsGeoJSON(c.*)::json,
-        -- Calculate the area in square units
-          'square_units', st_area(c.area)
-        )
-    from coverage c
-    where c.name = filter;
-  $$ language sql;
-
-  -- Create another function for the FeatureCollection Object
-  -- for the sake of making the examples clearer
-  create or replace function coverage_geo_collection() returns json as $$
-    select
-      json_build_object(
-          'type', 'FeatureCollection',
-          'features', json_agg(st_AsGeoJSON(c.*)::json)
-        )
-        as geo_feature_collection
-    from coverage c;
-  $$ language sql;
-
-Now the query will return the information as you expected:
+Now, when you request the information, PostgREST will automatically cast the ``area`` column into a ``Polygon`` geometry type. Although this is useful, you may need the whole output to be in `GeoJSON <https://geojson.org/>`_ format out of the box, which can be done by including the ``Accept: application/geo+json`` in the request. This will work for PostGIS versions 3.0.0 and up and will return the output as a `FeatureCollection Object <https://www.rfc-editor.org/rfc/rfc7946#section-3.3>`_:
 
 .. tabs::
 
   .. code-tab:: http
 
-    GET /rpc/coverage_geo?filter=big HTTP/1.1
+    GET /coverage HTTP/1.1
+    Accept: application/geo+json
 
   .. code-tab:: bash Curl
 
-    curl "http://localhost:3000/rpc/coverage_geo?filter=big"
+    curl "http://localhost:3000/coverage" \
+      -H "Accept: application/geo+json"
 
 .. code-block:: json
 
   {
-    "name": "big",
-    "geo_geometry": {
-      "type": "Polygon",
-      "coordinates": [
-        [[0,0],[10,0],[10,10],[0,10],[0,0]]
-      ]
-    },
-    "geo_feature": {
-      "type": "Feature",
-      "geometry": {
-        "type": "Polygon",
-        "coordinates": [
-          [[0,0],[10,0],[10,10],[0,10],[0,0]]
-        ]
+    "type": "FeatureCollection",
+    "features": [
+      {
+        "type": "Feature",
+        "geometry": {
+          "type": "Polygon",
+          "coordinates": [
+            [[0,0],[1,0],[1,1],[0,1],[0,0]]
+          ]
+        },
+        "properties": {
+          "id": 1,
+          "name": "small"
+        }
       },
-      "properties": {
-        "id": 2,
-        "name": "big"
+      {
+        "type": "Feature",
+        "geometry": {
+          "type": "Polygon",
+          "coordinates": [
+            [[0,0],[10,0],[10,10],[0,10],[0,0]]
+          ]
+        },
+        "properties": {
+          "id": 2,
+          "name": "big"
+        }
       }
-    },
-    "square_units": 100
+    ]
   }
 
-And for the Feature Collection format:
+If you need to add an extra property, like the area in square units by using ``st_area(area)``, you could add a generated column to the table and it will appear in the ``properties`` key of each ``Feature``.
+
+.. code-block:: postgres
+
+  alter table coverage
+    add square_units double precision generated always as ( st_area(area) ) stored;
+
+In the case that you are using older PostGIS versions, then creating a function is your best option. For example:
+
+.. code-block:: postgres
+
+  create or replace function coverage_geo_collection() returns json as $$
+    select
+      json_build_object(
+        'type', 'FeatureCollection',
+        'features', json_agg(
+          json_build_object(
+            'type', 'Feature',
+            'geometry', st_AsGeoJSON(c.area)::json,
+            'properties', json_build_object('id', c.id, 'name', c.name)
+          )
+        )
+      )
+    from coverage c;
+  $$ language sql;
+
+Now this query will return the same results:
 
 .. tabs::
 
@@ -722,35 +729,33 @@ And for the Feature Collection format:
 .. code-block:: json
 
   {
-    "geo_feature_collection": {
-      "type": "FeatureCollection",
-      "features": [
-        {
-          "type": "Feature",
-          "geometry": {
-              "type": "Polygon",
-              "coordinates": [
-                [[0,0],[1,0],[1,1],[0,1],[0,0]]
-              ]
-          },
-          "properties": {
-            "id": 1,
-            "name": "small"
-          }
+    "type": "FeatureCollection",
+    "features": [
+      {
+        "type": "Feature",
+        "geometry": {
+          "type": "Polygon",
+          "coordinates": [
+            [[0,0],[1,0],[1,1],[0,1],[0,0]]
+          ]
         },
-        {
-          "type": "Feature",
-          "geometry": {
-              "type": "Polygon",
-              "coordinates": [
-                [[0,0],[10,0],[10,10],[0,10],[0,0]]
-              ]
-          },
-          "properties": {
-            "id": 2,
-            "name": "big"
-          }
+        "properties": {
+          "id": 1,
+          "name": "small"
         }
-      ]
-    }
+      },
+      {
+        "type": "Feature",
+        "geometry": {
+          "type": "Polygon",
+          "coordinates": [
+            [[0,0],[10,0],[10,10],[0,10],[0,0]]
+          ]
+        },
+        "properties": {
+          "id": 2,
+          "name": "big"
+        }
+      }
+    ]
   }
diff --git a/docs/index.rst b/docs/index.rst
index 989c55f16..dcb1089fd 100644
--- a/docs/index.rst
+++ b/docs/index.rst
@@ -98,7 +98,7 @@ The project has a friendly and growing community. Join our `chat room <https://g
    :titlesonly:
    :hidden:
 
-   Latest <releases/latest>
+   v10.0.0 <releases/v10.0.0>
    v9.0.1 <releases/v9.0.1>
    v9.0.0 <releases/v9.0.0>
    releases/v8.0.0
diff --git a/docs/install.rst b/docs/install.rst
index c68ae1586..ec3c97721 100644
--- a/docs/install.rst
+++ b/docs/install.rst
@@ -228,7 +228,7 @@ When a pre-built binary does not exist for your system you can build the project
 
 You can build PostgREST from source with `Stack <https://github.com/commercialhaskell/stack>`_. It will install any necessary Haskell dependencies on your system.
 
-* `Install Stack <https://docs.haskellstack.org/en/stable/README/#how-to-install>`_ for your platform
+* `Install Stack <https://docs.haskellstack.org/en/stable/README/#how-to-install-stack>`_ for your platform
 * Install Library Dependencies
 
   =====================  =======================================
diff --git a/docs/releases/latest.rst b/docs/releases/latest.rst
deleted file mode 100644
index 3b7eaaf97..000000000
--- a/docs/releases/latest.rst
+++ /dev/null
@@ -1,143 +0,0 @@
-
-Latest
-======
-
-These are features/bugfixes not yet on a stable version. You can try them by downloading the latest pre-releases `on the GitHub release page <https://github.com/PostgREST/postgrest/releases>`_.
-
-Features
---------
-
-API
-~~~
-
-Bulk Update
-^^^^^^^^^^^
-
-See :ref:`bulk_update`.
-
-Access Composite Type fields and Array elements
-^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
-
-You can now :ref:`access fields of a Composite type or elements of an Array type <composite_array_columns>` with the arrow operators(``->``, ``->>``) in the same way you would access the JSON type fields.
-
-Improved Error Messages
-^^^^^^^^^^^^^^^^^^^^^^^
-
-To increase consistency, all the errors messages are now normalized. The ``hint``, ``details``, ``code`` and ``message`` fields will always be present in the body, each one defaulting to a
-``null`` value. In the same way, the :ref:`errors that were raised <raise_error>` with ``SQLSTATE`` now include the ``message`` and ``code`` in the body.
-
-In addition to these changes and to further clarify the source of an error, PostgREST now adds a ``PGRST`` prefix to the error code of all the errors that are PostgREST-specific and don't come from the database. These errors have a unique code that identifies them and are documented in the :ref:`pgrst_errors` section.
-
-Alongside these changes, there is now a dedicated reference page for :doc:`Error documentation </errors>`.
-
-Administration
-~~~~~~~~~~~~~~
-
-Health checks
-^^^^^^^^^^^^^
-
-Admins can now benefit from two :ref:`health check endpoints <health_check>` exposed in a different port than the main app. When activated, the ``live`` and ``ready`` endpoints are available to verify if PostgREST is alive and running or if the database connection and the :ref:`schema cache <schema_cache>` are ready for querying.
-
-Logging users
-^^^^^^^^^^^^^
-
-You can now verify the current authenticated database user in the :ref:`request log <pgrst_logging>` on stdout.
-
-Run without configuration
-^^^^^^^^^^^^^^^^^^^^^^^^^
-
-It is now possible to execute PostgREST without specifying any configuration variable, even without the three that were mandatory
-
-  - If :ref:`db-uri` is not set, PostgREST will use the `libpq environment variables <https://www.postgresql.org/docs/current/libpq-envars.html>`_ for the database connection.
-  - If :ref:`db-schemas` is not set, it will use the database ``public`` schema.
-  - If :ref:`db-anon-role` is not set, it will not allow anonymous requests.
-
-Documentation improvements
-~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-* Added a :doc:`/how-tos/working-with-postgresql-data-types` how-to, which contains explanations and examples on how to work with different PostgreSQL data types such as timestamps, ranges or PostGIS types, among others.
-
-* Added in-database and environment variable settings for each :ref:`configuration variable <config_full_list>`.
-
-* Added the :ref:`file_descriptors` subsection.
-
-* Moved the :ref:`error_source` and the :ref:`status_codes` sections to the :doc:`errors reference page </errors>`.
-
-* Moved the *Casting type to custom JSON* how-to to the :ref:`casting_range_to_json` subsection.
-
-* Removed direct links for PostgREST versions older than 8.0 from the versions menu.
-
-* Removed the deprecated *Embedding table from another schema* how-to.
-
-Bug fixes
----------
-
-* Return ``204 No Content`` without ``Content-Type`` for ``PUT`` (`#2058 <https://github.com/PostgREST/postgrest/issues/2058>`_)
-
-* Clarify error for failed schema cache load. (`#2107 <https://github.com/PostgREST/postgrest/issues/2107>`_)
-
-  - From ``Database connection lost. Retrying the connection`` to ``Could not query the database for the schema cache. Retrying.``
-
-* Fix silently ignoring filter on a non-existent embedded resource (`#1771 <https://github.com/PostgREST/postgrest/issues/1771>`_)
-
-* Remove functions, which are not callable due to unnamed arguments, from schema cache and OpenAPI output. (`#2152 <https://github.com/PostgREST/postgrest/issues/2152>`_)
-
-* Fix accessing JSON array fields with ``->`` and ``->>`` in ``?select=`` and ``?order=``. (`#2145 <https://github.com/PostgREST/postgrest/issues/2145>`_)
-
-Breaking changes
-----------------
-
-* Return ``204 No Content`` without ``Content-Type`` for RPCs returning ``VOID`` (`#2001 <https://github.com/PostgREST/postgrest/issues/2001>`_)
-
-  - Previously, those RPCs would return ``null`` as a body with ``Content-Type: application/json``.
-
-Thanks
-------
-
-Big thanks from the `PostgREST team <https://github.com/orgs/PostgREST/people>`_ to our sponsors!
-
-.. container:: image-container
-
-  .. image:: ../_static/cybertec-new.png
-    :target: https://www.cybertec-postgresql.com/en/?utm_source=postgrest.org&utm_medium=referral&utm_campaign=postgrest
-    :width:  13em
-
-  .. image:: ../_static/2ndquadrant.png
-    :target: https://www.2ndquadrant.com/en/?utm_campaign=External%20Websites&utm_source=PostgREST&utm_medium=Logo
-    :width:  13em
-
-  .. image:: ../_static/retool.png
-    :target: https://retool.com/?utm_source=sponsor&utm_campaign=postgrest
-    :width:  13em
-
-  .. image:: ../_static/gnuhost.png
-    :target: https://gnuhost.eu/?utm_source=sponsor&utm_campaign=postgrest
-    :width:  13em
-
-  .. image:: ../_static/supabase.png
-    :target: https://supabase.com/?utm_source=postgrest%20backers&utm_medium=open%20source%20partner&utm_campaign=postgrest%20backers%20github&utm_term=homepage
-    :width:  13em
-
-  .. image:: ../_static/oblivious.jpg
-    :target: https://oblivious.ai/?utm_source=sponsor&utm_campaign=postgrest
-    :width:  13em
-
-* Evans Fernandes
-* `Jan Sommer <https://github.com/nerfpops>`_
-* `Franz Gusenbauer <https://www.igutech.at/>`_
-* `Daniel Babiak <https://github.com/dbabiak>`_
-* Tsingson Qin
-* Michel Pelletier
-* Jay Hannah
-* Robert Stolarz
-* Nicholas DiBiase
-* Christopher Reid
-* Nathan Bouscal
-* Daniel Rafaj
-* David Fenko
-* Remo Rechkemmer
-* Severin Ibarluzea
-* Tom Saleeba
-* Pawel Tyll
-
-If you like to join them please consider `supporting PostgREST development <https://github.com/PostgREST/postgrest#user-content-supporting-development>`_.
diff --git a/docs/releases/v10.0.0.rst b/docs/releases/v10.0.0.rst
new file mode 100644
index 000000000..4d2a6aea8
--- /dev/null
+++ b/docs/releases/v10.0.0.rst
@@ -0,0 +1,337 @@
+
+PostgREST 10.0.0
+================
+
+Features
+--------
+
+API
+~~~
+
+XML/SOAP support for RPC
+^^^^^^^^^^^^^^^^^^^^^^^^
+
+RPC now understands the ``text/xml`` media type, allowing SQL functions to send XML output(``Accept: text/xml``) and receive XML input(``Content-Type: text/xml``). This makes SOAP endpoints possible, check the :ref:`create_soap_endpoint` how-to for more details.
+
+GeoJSON support
+^^^^^^^^^^^^^^^
+
+GeoJSON is supported across the board(reads, writes, RPC) with the ``Accept: application/geo+json`` header, this depends on PostGIS from the versions 3.0.0 and up. The :ref:`working with PostGIS section <ww_postgis>` has an example to get you started.
+
+One-to-one relationships
+^^^^^^^^^^^^^^^^^^^^^^^^
+
+A :ref:`one-to-one relationship <one-to-one>` is now detected when a table's foreign key is also its primary key or when the foreign key has a ``UNIQUE`` constraint.
+
+Customizable Relationships for Resource Embedding
+^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
+
+Using :ref:`computed_relationships`, you can add custom relationships or override automatically detected ones. This makes :ref:`resource_embedding` possible on Foreign Data Wrappers and complex SQL views.
+
+EXPLAIN Execution Plan
+^^^^^^^^^^^^^^^^^^^^^^
+
+The :ref:`EXPLAIN execution plan of a request <explain_plan>` is now obtainable with the ``Accept: application/vnd.pgrst.plan`` header. The result can be in ``text`` or ``json`` formats and is compatible with EXPLAIN vizualizers like `explain.depesz.com <https://explain.depesz.com>`_ or `explain.dalibo.com <https://explain.dalibo.com>`_.
+
+POSIX Regular Expressions
+^^^^^^^^^^^^^^^^^^^^^^^^^
+
+You can now use two :ref:`pattern matching <pattern_matching>` operators for `POSIX regular expressions <https://www.postgresql.org/docs/current/functions-matching.html#FUNCTIONS-POSIX-REGEXP>`_: ``match`` and ``imatch``, equivalent in PostgreSQL to ``~`` and ``~*`` respectively.
+
+Access composite type fields and array elements
+^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
+
+:ref:`Accessing fields of a Composite type or elements of an Array type <composite_array_columns>` is now possible with the arrow operators(``->``, ``->>``) in the same way you would access a JSON type fields.
+
+Authorize button for SwaggerUI
+^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
+
+You can now activate the "Authorize" button in SwaggerUI by enabling the :ref:`openapi-security-active` configuration. Add your JWT token prepending :code:`Bearer` to it and you'll be able to request protected resources.
+
+Improved error messages
+^^^^^^^^^^^^^^^^^^^^^^^
+
+To increase consistency, all the errors messages are now normalized. The ``hint``, ``details``, ``code`` and ``message`` fields will always be present in the body, each one defaulting to a
+``null`` value. In the same way, the :ref:`errors that were raised <raise_error>` with ``SQLSTATE`` now include the ``message`` and ``code`` in the body.
+
+To further clarify the source of an error, we now add a ``PGRST`` prefix to the error code of all the errors that are PostgREST-specific and don't come from the database. These errors have unique codes that identifies them and are documented in the :ref:`pgrst_errors` section.
+
+Administration
+~~~~~~~~~~~~~~
+
+Health checks
+^^^^^^^^^^^^^
+
+Admins can now benefit from two :ref:`health check endpoints <health_check>` exposed in a different port than the main app. When activated, the ``live`` and ``ready`` endpoints are available to verify if PostgREST is alive and running or if the database connection and the :ref:`schema cache <schema_cache>` are ready for querying.
+
+Logging users
+^^^^^^^^^^^^^
+
+You can now see the :ref:`request database user in the logs <pgrst_logging>`.
+
+Run without configuration
+^^^^^^^^^^^^^^^^^^^^^^^^^
+
+It is now possible to execute PostgREST without specifying any configuration variable. The three that were mandatory on the previous versions, are no longer so.
+
+  - If :ref:`db-uri` is not set, PostgREST will use the `libpq environment variables <https://www.postgresql.org/docs/current/libpq-envars.html>`_ for the database connection.
+  - If :ref:`db-schemas` is not set, it will use the database ``public`` schema.
+  - If :ref:`db-anon-role` is not set, it will not allow anonymous requests.
+
+Documentation improvements
+~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+* Added a :doc:`/how-tos/working-with-postgresql-data-types` how-to, which contains explanations and examples on how to work with different PostgreSQL data types such as timestamps, ranges or PostGIS types, among others.
+
+* Added in-database and environment variable settings for each :ref:`configuration variable <config_full_list>`.
+
+* Added the :ref:`file_descriptors` subsection.
+
+* Added a reference page for :doc:`Error documentation </errors>`.
+
+* Moved the :ref:`error_source` and the :ref:`status_codes` sections to the :doc:`errors reference page </errors>`.
+
+* Moved the *Casting type to custom JSON* how-to to the :ref:`casting_range_to_json` subsection.
+
+* Removed direct links for PostgREST versions older than 8.0 from the versions menu.
+
+* Removed the deprecated *Embedding table from another schema* how-to.
+
+* Restructured the :ref:`resource_embedding` section:
+
+  - Added a :ref:`one-to-many` and :ref:`many-to-one` subsections.
+
+  - Renamed the *Embedding through join tables* subsection to :ref:`many-to-many`.
+
+Bug fixes
+---------
+
+* Return ``204 No Content`` without ``Content-Type`` for ``PUT`` (`#2058 <https://github.com/PostgREST/postgrest/issues/2058>`_)
+
+* Clarify error for failed schema cache load. (`#2107 <https://github.com/PostgREST/postgrest/issues/2107>`_)
+
+  - From ``Database connection lost. Retrying the connection`` to ``Could not query the database for the schema cache. Retrying.``
+
+* Fix silently ignoring filter on a non-existent embedded resource (`#1771 <https://github.com/PostgREST/postgrest/issues/1771>`_)
+
+* Remove functions, which are not callable due to unnamed arguments, from schema cache and OpenAPI output. (`#2152 <https://github.com/PostgREST/postgrest/issues/2152>`_)
+
+* Fix accessing JSON array fields with ``->`` and ``->>`` in ``?select=`` and ``?order=``. (`#2145 <https://github.com/PostgREST/postgrest/issues/2145>`_)
+
+* Ignore ``max-rows`` on ``POST``, ``PATCH``, ``PUT`` and ``DELETE`` (`#2155 <https://github.com/PostgREST/postgrest/issues/2155>`_)
+
+* Fix inferring a foreign key column as a primary key column on views (`#2254 <https://github.com/PostgREST/postgrest/issues/2254>`_)
+
+* Restrict generated many-to-many relationships (`#2070 <https://github.com/PostgREST/postgrest/issues/2070>`_)
+
+  - Only adds many-to-many relationships when a table has foreign keys to two other tables and these foreign key columns are part of the table's primary key columns.
+
+* Allow casting to types with underscores and numbers (e.g. ``select=oid_array::_int4``) (`#2278 <https://github.com/PostgREST/postgrest/issues/2278>`_)
+
+* Prevent views from breaking one-to-many/many-to-one embeds when using column or foreign key as target (`#2277 <https://github.com/PostgREST/postgrest/issues/2277>`_, `#2238 <https://github.com/PostgREST/postgrest/issues/2238>`_, `#1643 <https://github.com/PostgREST/postgrest/issues/1643>`_)
+
+  - When using a column or foreign key as target for embedding (``/tbl?select=*,col-or-fk(*)``), only tables are now detected and views are not.
+
+  - You can still use a column or an inferred foreign key on a view to embed a table (``/view?select=*,col-or-fk(*)``)
+
+* Increase the ``db-pool-timeout`` to 1 hour to prevent frequent high connection latency (`#2317 <https://github.com/PostgREST/postgrest/issues/2317>`_)
+
+* The search path now correctly identifies schemas with uppercase and special characters in their names (regression) (`#2341 <https://github.com/PostgREST/postgrest/issues/2341>`_)
+
+* "404 Not Found" on nested routes and "405 Method Not Allowed" errors no longer start an empty database transaction (`#2364 <https://github.com/PostgREST/postgrest/issues/2364>`_)
+
+* Fix inaccurate result count when an inner embed was selected after a normal embed in the query string (`#2342 <https://github.com/PostgREST/postgrest/issues/2342>`_)
+
+* ``OPTIONS`` requests no longer start an empty database transaction (`#2376 <https://github.com/PostgREST/postgrest/issues/2376>`_)
+
+* Allow using columns with dollar sign ($) without double quoting in filters and ``select`` (`#2395 <https://github.com/PostgREST/postgrest/issues/2395>`_)
+
+* Fix loop crash error on startup in PostgreSQL 15 beta 3. ``Log: "UNION types \"char\" and text cannot be matched."`` (`#2410 <https://github.com/PostgREST/postgrest/issues/2410>`_)
+
+* Fix race conditions managing database connection helper (`#2397 <https://github.com/PostgREST/postgrest/issues/2397>`_)
+
+* Allow ``limit=0`` in the request query to return an empty array (`#2269 <https://github.com/PostgREST/postgrest/issues/2269>`_)
+
+Breaking changes
+----------------
+
+* Return ``204 No Content`` without ``Content-Type`` for RPCs returning ``VOID`` (`#2001 <https://github.com/PostgREST/postgrest/issues/2001>`_)
+
+  - Previously, those RPCs would return ``null`` as a body with ``Content-Type: application/json``.
+
+* ``limit/offset`` now limits the affected rows on ``UPDATE``/``DELETE`` (`#2156 <https://github.com/PostgREST/postgrest/issues/2156>`_)
+
+  - Previously, ``limit``/``offset`` only limited the returned rows but not the actual updated rows
+
+* ``max-rows`` is no longer applied on ``POST``, ``PATCH``, ``PUT`` and ``DELETE`` returned rows (`#2155 <https://github.com/PostgREST/postgrest/issues/2155>`_)
+
+  - This was misleading because the affected rows were not really affected by ``max-rows``, only the returned rows were limited
+
+* Restrict generated many-to-many relationships (`#2070 <https://github.com/PostgREST/postgrest/issues/2070>`_)
+
+  - A primary key that contains the foreign key columns is now needed for generating many-to-many relationships.
+
+* Views now are not detected when embedding using the column or foreign key as target (``/view?select=*,column(*)``) (`#2277 <https://github.com/PostgREST/postgrest/issues/2277>`_)
+
+  - This embedding form was easily made ambiguous whenever a new view was added.
+
+  - For migrating, clients must be updated to the embedding form of ``/view?select=*,other_view!column(*)``.
+
+* Using ``Prefer: return=representation`` no longer returns a ``Location`` header (`#2312 <https://github.com/PostgREST/postgrest/issues/2312>`_)
+
+Migration Guide
+~~~~~~~~~~~~~~~
+
+Many-to-may relationships
+^^^^^^^^^^^^^^^^^^^^^^^^^
+
+The way PostgREST infers many-to-many relationships is now restricted. Before this change, a table could work as an intermediate join between two tables just by having foreign keys referencing each one of them. Consider the following:
+
+.. code-block:: postgresql
+
+  CREATE TABLE users (
+    id INT PRIMARY KEY,
+    name TEXT
+  );
+
+  CREATE TABLE permissions (
+    id INT PRIMARY KEY,
+    name TEXT
+  );
+
+  CREATE TABLE permission_user (
+    id INT PRIMARY KEY,
+    user_id INT REFERENCES users(id),
+    permission_id INT REFERENCES permissions(id)
+  );
+
+Before, PostgREST could infer a relationship between ``users`` and ``permissions`` through ``permission_user``.
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /users?select=permissions(*) HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/users?select=permissions(*)"
+
+But now this is not allowed. In order for it to work, the intermediate table must also have the foreign keys included in its primary key. So, in this case we need to do the following:
+
+.. code-block:: postgresql
+
+  -- This table has a pk defined already so we drop it first
+  alter table permission_user
+    drop constraint permission_user_pkey;
+
+  -- Then we add all the foreign keys to the primary key
+  alter table permission_user
+    add primary key (id, user_id, permission_id);
+
+With this, PostgREST 10 will infer successfully a relationship between ``users`` and ``permissions``.
+
+If you want an alternative to the previous method or need a more customized relationship, you could use :ref:`computed_relationships` to get a similar result.
+
+Embedding views
+^^^^^^^^^^^^^^^
+
+Using column names or foreign key constraint names as :ref:`embedding targets <target_disamb>` will not detect views anymore. Consider this as an example:
+
+.. code-block:: postgresql
+
+  CREATE TABLE users (
+    id INT PRIMARY KEY,
+    name TEXT,
+    is_active BOOL
+  );
+
+  CREATE TABLE messages (
+    id INT PRIMARY KEY,
+    body TEXT,
+    user_id INT REFERENCES users(id)
+  );
+
+  CREATE VIEW active_users AS
+    SELECT *
+    FROM users
+    WHERE is_active;
+
+Previously, the following request returned a ``300 Multiple Choices`` error, because the ``active_users`` view was also detected:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /messages?select=body,user_id(name) HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/messages?select=body,user_id(name)"
+
+But in this version, this will not fail and will embed the table ``users`` instead. You need to use the view name as target in order to embed it, like this:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /messages?select=body,active_users(name) HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000messages?select=body,active_users(name)"
+
+For other cases, adding a column or foreign key as :ref:`hint <hint_disamb>` may be needed.
+
+You could also use :ref:`computed_relationships` to get a similar result or if you want a more customized relationship.
+
+Thanks
+------
+
+Big thanks from the `PostgREST team <https://github.com/orgs/PostgREST/people>`_ to our sponsors!
+
+.. container:: image-container
+
+  .. image:: ../_static/cybertec-new.png
+    :target: https://www.cybertec-postgresql.com/en/?utm_source=postgrest.org&utm_medium=referral&utm_campaign=postgrest
+    :width:  13em
+
+  .. image:: ../_static/2ndquadrant.png
+    :target: https://www.2ndquadrant.com/en/?utm_campaign=External%20Websites&utm_source=PostgREST&utm_medium=Logo
+    :width:  13em
+
+  .. image:: ../_static/retool.png
+    :target: https://retool.com/?utm_source=sponsor&utm_campaign=postgrest
+    :width:  13em
+
+  .. image:: ../_static/gnuhost.png
+    :target: https://gnuhost.eu/?utm_source=sponsor&utm_campaign=postgrest
+    :width:  13em
+
+  .. image:: ../_static/supabase.png
+    :target: https://supabase.com/?utm_source=postgrest%20backers&utm_medium=open%20source%20partner&utm_campaign=postgrest%20backers%20github&utm_term=homepage
+    :width:  13em
+
+  .. image:: ../_static/oblivious.jpg
+    :target: https://oblivious.ai/?utm_source=sponsor&utm_campaign=postgrest
+    :width:  13em
+
+* Evans Fernandes
+* `Jan Sommer <https://github.com/nerfpops>`_
+* `Franz Gusenbauer <https://www.igutech.at/>`_
+* `Daniel Babiak <https://github.com/dbabiak>`_
+* Tsingson Qin
+* Michel Pelletier
+* Jay Hannah
+* Robert Stolarz
+* Nicholas DiBiase
+* Christopher Reid
+* Nathan Bouscal
+* Daniel Rafaj
+* David Fenko
+* Remo Rechkemmer
+* Severin Ibarluzea
+* Tom Saleeba
+* Pawel Tyll
+
+If you like to join them please consider `supporting PostgREST development <https://github.com/PostgREST/postgrest#user-content-supporting-development>`_.
diff --git a/postgrest.dict b/postgrest.dict
index d1430e1f6..2105b5839 100644
--- a/postgrest.dict
+++ b/postgrest.dict
@@ -43,6 +43,7 @@ filename
 FreeBSD
 fts
 GC
+GeoJSON
 GHC
 Github
 Google
@@ -118,6 +119,7 @@ phraseto
 plainto
 plfts
 poolers
+POSIX
 PostGIS
 PostgreSQL
 PostgreSQL's
@@ -165,6 +167,7 @@ Stolarz
 subselect
 SuperAgent
 SvelteKit
+SwaggerUI
 syslog
 systemd
 Tcl
@@ -200,3 +203,5 @@ Websockets
 webuser
 wfts
 ZeroMQ
+Customizable
+customizable

From 9128c8602ae5b2ff3ecea50eee1f3ecaedce0d85 Mon Sep 17 00:00:00 2001
From: Steve Chavez <stevechavezast@gmail.com>
Date: Fri, 26 Aug 2022 16:08:08 -0500
Subject: [PATCH 522/652] Refine docs for v10

* shorten release page

* shorten explain docs

* add limited update/delete to release page

* refine relationships

* refine disambiguation

* refine release page

* remove migration guide

* add author to WWT how-to
---
 docs/api.rst                                  | 282 +++++++++++-------
 .../working-with-postgresql-data-types.rst    |   2 +
 docs/releases/v10.0.0.rst                     | 244 +++++----------
 3 files changed, 249 insertions(+), 279 deletions(-)

diff --git a/docs/api.rst b/docs/api.rst
index 50d78aec4..bc95ea337 100644
--- a/docs/api.rst
+++ b/docs/api.rst
@@ -875,52 +875,15 @@ returned together. For example, consider a database of films and their awards:
 
 .. important::
 
-  * PostgREST needs `FOREIGN KEY constraints <https://www.postgresql.org/docs/current/tutorial-fk.html>`_ to be able to do Resource Embedding.
-  * Whenever FOREIGN KEY constraints change in the database schema you must refresh PostgREST's schema cache for Resource Embedding to work properly. See the section :ref:`schema_reloading`.
-
-.. _one-to-many:
-
-One-to-many relationships
--------------------------
-
-When a one-to-many relationship is detected, the embedded resource is returned as a JSON array. For example, we can request the Directors and the Films they directed because there is a foreign key constraint between them, like this:
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /directors?select=last_name,films(title) HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/directors?select=last_name,films(title)"
-
-.. code-block:: json
-
-  [
-    { "last_name": "Lumière",
-      "films": [
-        {"title": "Workers Leaving The Lumière Factory In Lyon"}
-      ]
-    },
-    { "last_name": "Dickson",
-      "films": [
-        {"title": "The Dickson Experimental Sound Film"}
-      ]
-    },
-    { "last_name": "Méliès",
-      "films": [
-        {"title": "The Haunted Castle"}
-      ]
-    }
-  ]
+  Whenever FOREIGN KEY constraints change in the database schema you must refresh PostgREST's schema cache for Resource Embedding to work properly. See the section :ref:`schema_reloading`.
 
 .. _many-to-one:
 
 Many-to-one relationships
 -------------------------
 
-When a many-to-one relationship is detected, the embedded resource is returned as a JSON object. For example, we can request all the Films and the Director for each film like this:
+Since ``films`` has a **foreign key** referencing ``directors``, this establishes a many-to-one relationship between them. Because of this, we're able
+to request all the films and the director for each film.
 
 .. tabs::
 
@@ -955,7 +918,9 @@ When a many-to-one relationship is detected, the embedded resource is returned a
     }
   ]
 
-However, the table name is in plural, which is not accurate since a Film is directed by only one Director. Using a table name alias can solve this:
+Note that the embedded ``directors`` is returned as a JSON object because of the "to-one" end.
+
+Since the table name is plural, we can be more accurate by making it singular with an alias.
 
 .. tabs::
 
@@ -967,13 +932,64 @@ However, the table name is in plural, which is not accurate since a Film is dire
 
     curl "http://localhost:3000/films?select=title,director:directors(id,last_name)"
 
+.. code-block:: json
+
+  [
+    { "title": "Workers Leaving The Lumière Factory In Lyon",
+      "director": {
+        "id": 2,
+        "last_name": "Lumière"
+      }
+    },
+    ".."
+  ]
+
+.. _one-to-many:
+
+One-to-many relationships
+-------------------------
+
+The inverse one-to-many relationship between ``directors`` and ``films`` is detected based on the **foreign key** reference. In this case, the embedded ``films`` are returned as a JSON array because of the "to-many" end.
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /directors?select=last_name,films(title) HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/directors?select=last_name,films(title)"
+
+.. code-block:: json
+
+  [
+    { "last_name": "Lumière",
+      "films": [
+        {"title": "Workers Leaving The Lumière Factory In Lyon"}
+      ]
+    },
+    { "last_name": "Dickson",
+      "films": [
+        {"title": "The Dickson Experimental Sound Film"}
+      ]
+    },
+    { "last_name": "Méliès",
+      "films": [
+        {"title": "The Haunted Castle"}
+      ]
+    }
+  ]
+
 .. _many-to-many:
 
 Many-to-many relationships
 --------------------------
 
-PostgREST can also detect many-to-many relationships going through join tables. For this, the join table must contain foreign keys to the tables in
-the many-to-many relationship and its composite primary key must include these foreign key columns.
+Many-to-many relationships are detected based on the join table. The join table must contain foreign keys to other two tables
+and they must be part of its composite key.
+
+For the many-to-many relationship between ``films`` and ``actors``, the join table ``roles`` would be:
 
 .. code-block:: postgresql
 
@@ -983,8 +999,7 @@ the many-to-many relationship and its composite primary key must include these f
   , primary key(film_id, actor_id)
   );
 
-  -- the many-to-many relationship can also be detected if the join table has a surrogate key,
-  -- as long as the foreign key columns are also part of the primary key
+  -- the join table can also be detected if the composite key has additional columns
 
   create table roles(
     id int generated always as identity,
@@ -993,24 +1008,45 @@ the many-to-many relationship and its composite primary key must include these f
   , primary key(id, film_id, actor_id)
   );
 
-Then you can request the Actors for Films (which in this case finds the information through Roles).
-
 .. tabs::
 
   .. code-tab:: http
 
-    GET /actors?select=films(title,year) HTTP/1.1
+    GET /actors?select=first_name,last_name,films(title) HTTP/1.1
 
   .. code-tab:: bash Curl
 
-    curl "http://localhost:3000/actors?select=films(title,year)"
+    curl "http://localhost:3000/actors?select=first_name,last_name,films(title)"
+
+.. code-block:: json
+
+  [
+    { "first_name": "Willem",
+      "last_name": "Dafoe",
+      "films": [
+        {"title": "The Lighthouse"}
+      ]
+    },
+    ".."
+  ]
 
 .. _one-to-one:
 
 One-to-one relationships
 ------------------------
 
-PostgREST detects one-to-one relationships when a foreign key is also the primary key of the table or when the foreign key has a ``UNIQUE`` constraint.
+one-to-one relationships are detected if there's an unique constraint on a foreign key.
+
+.. code-block:: postgresql
+
+  CREATE TABLE technical_specs(
+    film_id INT REFERENCES films UNIQUE,
+    runtime TIME,
+    camera TEXT,
+    sound TEXT
+  );
+
+Or if the foreign key is also a primary key.
 
 .. code-block:: postgresql
 
@@ -1022,66 +1058,117 @@ PostgREST detects one-to-one relationships when a foreign key is also the primar
     sound TEXT
   );
 
-  -- references Films using a foreign key with unique constraint
-  CREATE TABLE technical_specs(
-    film_id INT REFERENCES films UNIQUE,
-    runtime TIME,
-    camera TEXT,
-    sound TEXT
-  );
-
-Now, the embedding between Films and Technical_Specs is returned as a JSON object no matter the order.
-
 .. tabs::
 
   .. code-tab:: http
 
-    GET /films?select=title,technical_specs(*) HTTP/1.1
+    GET /films?select=title,technical_specs(runtime) HTTP/1.1
 
   .. code-tab:: bash Curl
 
-    curl "http://localhost:3000/films?select=title,technical_specs(*)"
+    curl "http://localhost:3000/films?select=title,technical_specs(runtime)"
+
+.. code-block:: json
+
+  [
+    {
+      "title": "Pulp Fiction",
+      "technical_specs": {"camera": "Arriflex 35-III"}
+    },
+    ".."
+  ]
 
 .. _computed_relationships:
 
-Computed Relationships
+Computed relationships
 ----------------------
 
-You can customize how PostgREST detects relationships between two tables. To do this, you need to create a function that has one of the tables as a single parameter and the other as its return type. For instance:
+You can manually define relationships between resources. This is useful for database objects that can't define foreign keys, like `Foreign Data Wrappers <https://wiki.postgresql.org/wiki/Foreign_data_wrappers>`_.
+To do this, you can create functions similar to :ref:`computed_cols`.
+
+Assuming there's a foreign table ``premieres`` that we want to relate to ``films``.
 
 .. code-block:: postgres
 
-  CREATE FUNCTION director_competition(directors) RETURNS SETOF competitions AS $$
-    SELECT c.*
-    FROM competitions c
-    JOIN nominations n ON c.id = n.competition_id
-    JOIN films f ON n.film_id = f.id
-    WHERE f.director_id = $1.id
-  $$ STABLE LANGUAGE sql;
+  create foreign table premieres (
+    id integer,
+    location text,
+    "date" date,
+    film_id integer
+  ) server import_csv options ( filename '/tmp/directors.csv', format 'csv');
 
-The above function allows a direct relationship between ``directors`` and ``competitions``:
+  create function film(premieres) returns setof films rows 1 as $$
+    select * from films where id = $1.film_id
+  $$ stable language sql;
+
+The above function defines a relationship between ``premieres`` (the parameter) and ``films`` (the return type) and since there's a ``rows 1``, this defines a many-to-one relationship.
+The name of the function ``film`` is arbitrary and can be used to do the embedding:
 
 .. tabs::
 
   .. code-tab:: http
 
-    GET /directors?select=*,competitions:director_competition(name) HTTP/1.1
+    GET /premieres?select=location,film(name) HTTP/1.1
 
   .. code-tab:: bash Curl
 
-    curl "http://localhost:3000/directors?select=*,competitions:director_competition(name)"
+    curl "http://localhost:3000/premieres?select=location,film(name)"
 
-Take into consideration that the opposite relationship will not be detected, so you need to create another function for that.
+.. code-block:: json
 
-Computed relationships also allow you to override the ones that are detected by default. For example, this function can change the ``/films?select=directors(*)`` embedding:
+  [
+    {
+      "location": "Cannes Film Festival",
+      "film": {"name": "Pulp Fiction"}
+    },
+    ".."
+  ]
+
+Now let's define the opposite one-to-many relationship with another function.
 
 .. code-block:: postgres
 
-  CREATE FUNCTION directors(films) RETURNS SETOF directors ROW 1 AS $$
-    -- Override the relationship here
-  $$ STABLE LANGUAGE sql;
+  create function premieres(films) returns setof premieres as $$
+    select * from premieres where film_id = $1.director_id
+  $$ stable language sql;
 
-Note that if ``ROW 1`` is added, PostgREST will detect a :ref:`many-to-one relationship <many-to-one>` and return a JSON object instead of an array embedding.
+Similarly, this function defines a relationship between the parameter ``films`` and the return type ``premieres``.
+In this case there's an implicit ``ROWS 1000`` defined by PostgreSQL(`search "result_rows" on this PostgreSQL doc <https://www.postgresql.org/docs/current/sql-createfunction.html>`_),
+we consider any value greater than 1 as "many" so this defines a one-to-many relationship.
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /films?select=name,premieres(name) HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/films?select=name,premieres(name)"
+
+.. code-block:: json
+
+  [
+    {
+      "name": "Pulp Ficiton",
+      "premieres": [{"location": "Cannes Festival"}]
+    },
+    ".."
+  ]
+
+Computed relationships also allow you to override the ones that are automatically detected by PostgREST.
+
+For example, to override the :ref:`many-to-one relationship <many-to-one>` between ``films`` and ``directors``.
+
+.. code-block:: postgres
+
+  create function directors(films) returns setof directors rows 1 as $$
+    select * from directors where id = $1.director_id
+  $$ stable language sql;
+
+Taking advantage of overloaded functions, you can use the same function name for different parameters and thus define relationships from other tables/views to ``directors``.
+
+Computed relationships have good performance as they follow the `Inlining conditions for table functions <https://wiki.postgresql.org/wiki/Inlining_of_SQL_functions#Inlining_conditions_for_table_functions>`_.
 
 .. _nested_embedding:
 
@@ -1327,22 +1414,15 @@ Since this view contains ``nominations.film_id``, which has a **foreign key** re
 
 It's also possible to embed `Materialized Views <https://www.postgresql.org/docs/current/rules-materializedviews.html>`_.
 
-.. warning::
-
-   It's not guaranteed that all kinds of views will be embeddable. In particular, views that contain
-   UNIONs will not be made embeddable.
-
-   Why? PostgREST detects source table foreign keys in the view by querying and parsing `pg_rewrite <https://www.postgresql.org/docs/current/catalog-pg-rewrite.html>`_.
-   This may fail depending on the complexity of the view.
-
-   `Report an issue <https://github.com/PostgREST/postgrest/issues>`_ if your view is not made embeddable so we can
-   keep continue improving foreign key detection.
-
-   In the future we'll include a way to manually specify views source foreign keys to address this limitation.
-
 .. important::
 
-  If view definitions change you must refresh PostgREST's schema cache for this to work properly. See the section :ref:`schema_reloading`.
+  - It's not guaranteed that all kinds of views will be embeddable. In particular, views that contain UNIONs will not be made embeddable.
+
+    + Why? PostgREST detects source table foreign keys in the view by querying and parsing `pg_rewrite <https://www.postgresql.org/docs/current/catalog-pg-rewrite.html>`_.
+      This may fail depending on the complexity of the view.
+    + As a workaround, you can use :ref:`computed_relationships` to define manual relationships for views.
+
+  - If view definitions change you must refresh PostgREST's schema cache for this to work properly. See the section :ref:`schema_reloading`.
 
 .. _embedding_view_chains:
 
@@ -1603,7 +1683,7 @@ Hints also work alongside ``!inner`` if a top level filtering is needed. From th
 
 .. note::
 
-  If the relationship is so complex that hint disambiguation does not solve it, then using :ref:`computed_relationships` is the best alternative.
+  If the relationship is so complex that hint disambiguation does not solve it, you can use :ref:`computed_relationships`.
 
 .. _insert:
 
@@ -2887,9 +2967,7 @@ Returns:
 Execution plan
 --------------
 
-You can get the execution plan of a request by adding the ``Accept: application/vnd.pgrst.plan`` header after setting the :ref:`db-plan-enabled` configuration to ``true``. It is useful to verify why a certain operation might be expensive as a result of using `EXPLAIN <https://www.postgresql.org/docs/current/sql-explain.html>`_ on the generated query for the request.
-
-The output of the plan is generated in ``text`` format by default:
+You can get the `EXPLAIN execution plan <https://www.postgresql.org/docs/current/sql-explain.html>`_ of a request by adding the ``Accept: application/vnd.pgrst.plan`` header when :ref:`db-plan-enabled` is set to ``true``.
 
 .. tabs::
 
@@ -2908,7 +2986,7 @@ The output of the plan is generated in ``text`` format by default:
   Aggregate  (cost=73.65..73.68 rows=1 width=112)
     ->  Index Scan using users_pkey on users  (cost=0.15..60.90 rows=850 width=36)
 
-The same execution can be returned in ``json`` format by using the ``Accept: application/vnd.pgrst.plan+json`` header instead:
+The output of the plan is generated in ``text`` format by default but you can change it to JSON by using the ``+json`` suffix.
 
 .. tabs::
 
@@ -2956,8 +3034,8 @@ The same execution can be returned in ``json`` format by using the ``Accept: app
     }
   ]
 
-You can also get the result plan of the different media types that PostgREST supports by adding them to the header using ``for``. For instance, to obtain the plan for a :ref:`text/xml <scalar_return_formats>` media type in json format, you need to add the ``Accept: application/vnd.pgrst.plan; for=text/xml`` header.
+By default the plan is assumed to generate the JSON representation of a resource(``application/json``), but you can obtain the plan for the :ref:`different representations that PostgREST supports <res_format>` by adding them to the ``for`` parameter. For instance, to obtain the plan for a ``text/xml``, you would use ``Accept: application/vnd.pgrst.plan; for="text/xml``.
 
-Additionally, the deactivated parameters of the ``EXPLAIN`` command can be enabled by adding them to the header using ``options``. The available parameters are ``analyze``, ``verbose``, ``settings``, ``buffers`` and ``wal``, while the remaining ones are active by default.  For example, to add the ``analyze`` and ``wal`` parameters, add the ``Accept: application/vnd.pgrst.plan; options=analyze|wal`` header.
+The other available parameters are ``analyze``, ``verbose``, ``settings``, ``buffers`` and ``wal``, which correspond to the `EXPLAIN command options <https://www.postgresql.org/docs/current/sql-explain.html>`_. To use the ``analyze`` and ``wal`` parameters for example, you would add them like ``Accept: application/vnd.pgrst.plan; options=analyze|wal``.
 
-Note that any changes done will be committed when activating the ``analyze`` option. To avoid this, set the :ref:`db-tx-end` configuration in a way that allows to rollback the changes according to your preference.
+Note that akin to the EXPLAIN command, the changes will be committed when using the ``analyze`` option. To avoid this, you can use the :ref:`db-tx-end` and the ``Prefer: tx=rollback`` header.
diff --git a/docs/how-tos/working-with-postgresql-data-types.rst b/docs/how-tos/working-with-postgresql-data-types.rst
index fb317c97e..68a50fa24 100644
--- a/docs/how-tos/working-with-postgresql-data-types.rst
+++ b/docs/how-tos/working-with-postgresql-data-types.rst
@@ -3,6 +3,8 @@
 Working with PostgreSQL data types
 ==================================
 
+:author: `Laurence Isla <https://github.com/laurenceisla>`_
+
 PostgREST makes use of PostgreSQL string representations to work with data types. Thanks to this, you can use special values, such as ``now`` for timestamps, ``yes`` for booleans or time values including the time zones. This page describes how you can take advantage of these string representations to perform operations on different PostgreSQL data types.
 
 .. contents::
diff --git a/docs/releases/v10.0.0.rst b/docs/releases/v10.0.0.rst
index 4d2a6aea8..7dc46feda 100644
--- a/docs/releases/v10.0.0.rst
+++ b/docs/releases/v10.0.0.rst
@@ -5,79 +5,65 @@ PostgREST 10.0.0
 Features
 --------
 
-API
-~~~
-
 XML/SOAP support for RPC
-^^^^^^^^^^^^^^^^^^^^^^^^
+~~~~~~~~~~~~~~~~~~~~~~~~
 
-RPC now understands the ``text/xml`` media type, allowing SQL functions to send XML output(``Accept: text/xml``) and receive XML input(``Content-Type: text/xml``). This makes SOAP endpoints possible, check the :ref:`create_soap_endpoint` how-to for more details.
+RPC now understands the ``text/xml`` media type, allowing SQL functions to send XML output(``Accept: text/xml``) and receive XML input(``Content-Type: text/xml``). This makes SOAP endpoints possible, check the :ref:`create_soap_endpoint` how-to and the :ref:`scalar_return_formats` reference for more details.
 
 GeoJSON support
-^^^^^^^^^^^^^^^
+~~~~~~~~~~~~~~~
 
 GeoJSON is supported across the board(reads, writes, RPC) with the ``Accept: application/geo+json`` header, this depends on PostGIS from the versions 3.0.0 and up. The :ref:`working with PostGIS section <ww_postgis>` has an example to get you started.
 
-One-to-one relationships
-^^^^^^^^^^^^^^^^^^^^^^^^
+Execution Plan
+~~~~~~~~~~~~~~
 
-A :ref:`one-to-one relationship <one-to-one>` is now detected when a table's foreign key is also its primary key or when the foreign key has a ``UNIQUE`` constraint.
+The :ref:`execution plan <explain_plan>` of a request is now obtainable with the ``Accept: application/vnd.pgrst.plan`` header. The result can be in ``text`` or ``json`` formats and is compatible with EXPLAIN vizualizers like `explain.depesz.com <https://explain.depesz.com>`_ or `explain.dalibo.com <https://explain.dalibo.com>`_.
 
-Customizable Relationships for Resource Embedding
-^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
+Resource Embedding
+~~~~~~~~~~~~~~~~~~
 
-Using :ref:`computed_relationships`, you can add custom relationships or override automatically detected ones. This makes :ref:`resource_embedding` possible on Foreign Data Wrappers and complex SQL views.
+- A :ref:`one-to-one relationship <one-to-one>` is now detected when a foreign key is unique.
 
-EXPLAIN Execution Plan
-^^^^^^^^^^^^^^^^^^^^^^
+- Using :ref:`computed_relationships`, you can add custom relationships or override automatically detected ones. This makes :ref:`resource_embedding` possible on Foreign Data Wrappers and complex SQL views.
 
-The :ref:`EXPLAIN execution plan of a request <explain_plan>` is now obtainable with the ``Accept: application/vnd.pgrst.plan`` header. The result can be in ``text`` or ``json`` formats and is compatible with EXPLAIN vizualizers like `explain.depesz.com <https://explain.depesz.com>`_ or `explain.dalibo.com <https://explain.dalibo.com>`_.
+Horizontal/Vertical Filtering
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
-POSIX Regular Expressions
-^^^^^^^^^^^^^^^^^^^^^^^^^
+- :ref:`Accessing fields of a Composite type or elements of an Array type <composite_array_columns>` is now possible with the arrow operators(``->``, ``->>``) in the same way you would access a JSON type fields.
 
-You can now use two :ref:`pattern matching <pattern_matching>` operators for `POSIX regular expressions <https://www.postgresql.org/docs/current/functions-matching.html#FUNCTIONS-POSIX-REGEXP>`_: ``match`` and ``imatch``, equivalent in PostgreSQL to ``~`` and ``~*`` respectively.
+- :ref:`pattern_matching` operators for `POSIX regular expressions <https://www.postgresql.org/docs/current/functions-matching.html#FUNCTIONS-POSIX-REGEXP>`_ are now available: ``match`` and ``imatch``, equivalent in PostgreSQL to ``~`` and ``~*`` respectively.
 
-Access composite type fields and array elements
-^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
+Insertions/Updates
+~~~~~~~~~~~~~~~~~~
 
-:ref:`Accessing fields of a Composite type or elements of an Array type <composite_array_columns>` is now possible with the arrow operators(``->``, ``->>``) in the same way you would access a JSON type fields.
+- ``limit`` can now affect the number of updated/deleted rows. See :ref:`limited_update_delete`.
 
-Authorize button for SwaggerUI
-^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
+OpenAPI
+~~~~~~~
 
 You can now activate the "Authorize" button in SwaggerUI by enabling the :ref:`openapi-security-active` configuration. Add your JWT token prepending :code:`Bearer` to it and you'll be able to request protected resources.
 
-Improved error messages
-^^^^^^^^^^^^^^^^^^^^^^^
-
-To increase consistency, all the errors messages are now normalized. The ``hint``, ``details``, ``code`` and ``message`` fields will always be present in the body, each one defaulting to a
-``null`` value. In the same way, the :ref:`errors that were raised <raise_error>` with ``SQLSTATE`` now include the ``message`` and ``code`` in the body.
-
-To further clarify the source of an error, we now add a ``PGRST`` prefix to the error code of all the errors that are PostgREST-specific and don't come from the database. These errors have unique codes that identifies them and are documented in the :ref:`pgrst_errors` section.
-
 Administration
 ~~~~~~~~~~~~~~
 
-Health checks
-^^^^^^^^^^^^^
+- Two :ref:`health check endpoints <health_check>` are now exposed in a secondary port.
 
-Admins can now benefit from two :ref:`health check endpoints <health_check>` exposed in a different port than the main app. When activated, the ``live`` and ``ready`` endpoints are available to verify if PostgREST is alive and running or if the database connection and the :ref:`schema cache <schema_cache>` are ready for querying.
+- :ref:`pgrst_logging` now shows the database user.
 
-Logging users
-^^^^^^^^^^^^^
-
-You can now see the :ref:`request database user in the logs <pgrst_logging>`.
-
-Run without configuration
-^^^^^^^^^^^^^^^^^^^^^^^^^
-
-It is now possible to execute PostgREST without specifying any configuration variable. The three that were mandatory on the previous versions, are no longer so.
+- It is now possible to execute PostgREST without specifying any configuration variable. The three that were mandatory on the previous versions, are no longer so.
 
   - If :ref:`db-uri` is not set, PostgREST will use the `libpq environment variables <https://www.postgresql.org/docs/current/libpq-envars.html>`_ for the database connection.
   - If :ref:`db-schemas` is not set, it will use the database ``public`` schema.
   - If :ref:`db-anon-role` is not set, it will not allow anonymous requests.
 
+Error messages
+~~~~~~~~~~~~~~
+
+- To increase consistency, all the errors messages are now normalized. The ``hint``, ``details``, ``code`` and ``message`` fields will always be present in the body, each one defaulting to a ``null`` value. In the same way, the :ref:`errors that were raised <raise_error>` with ``SQLSTATE`` now include the ``message`` and ``code`` in the body.
+
+- To further clarify the source of an error, we now add a ``PGRST`` prefix to the error code of all the errors that are PostgREST-specific and don't come from the database. These errors have unique codes that identify them and are documented in the :ref:`pgrst_errors` section.
+
 Documentation improvements
 ~~~~~~~~~~~~~~~~~~~~~~~~~~
 
@@ -95,7 +81,7 @@ Documentation improvements
 
 * Removed direct links for PostgREST versions older than 8.0 from the versions menu.
 
-* Removed the deprecated *Embedding table from another schema* how-to.
+* Removed the *Embedding table from another schema* how-to.
 
 * Restructured the :ref:`resource_embedding` section:
 
@@ -103,6 +89,43 @@ Documentation improvements
 
   - Renamed the *Embedding through join tables* subsection to :ref:`many-to-many`.
 
+* Split up the *Insertions/Updates* section into :ref:`insert` and :ref:`update`.
+
+Breaking changes
+----------------
+
+* Many-to-many relationships now require that foreign key columns be part of the join table composite key
+
+  - This was needed to reduce :ref:`embed_disamb` errors in complex schemas(`#2070 <https://github.com/PostgREST/postgrest/issues/2070>`_).
+
+  - For migrating to this version, the less invasive method is to use :ref:`computed_relationships` to replace the previous many-to-many relationships.
+
+  - Otherwise you can change your join table primary key. For example with ``alter table permission_user drop constraint permission_user_pkey, add primary key (id, user_id, permission_id);``
+
+* Views now are not detected when embedding using :ref:`target_disamb`.
+
+  - This embedding form was easily made ambiguous whenever a new view was added(`#2277 <https://github.com/PostgREST/postgrest/issues/2277>`_).
+
+  - For migrating to this version, you can use :ref:`computed_relationships` to replace the previous view relationships.
+
+  - :ref:`hint_disamb` works as usual on views.
+
+* ``limit/offset`` now limits the affected rows on ``UPDATE``/``DELETE``
+
+  - Previously, ``limit``/``offset`` only limited the returned rows but not the actual updated rows(`#2156 <https://github.com/PostgREST/postgrest/issues/2156>`_)
+
+* ``max-rows`` is no longer applied on ``POST``, ``PATCH``, ``PUT`` and ``DELETE`` returned rows
+
+  - This was misleading because the affected rows were not really affected by ``max-rows``, only the returned rows were limited(`#2155 <https://github.com/PostgREST/postgrest/issues/2155>`_)
+
+* Return ``204 No Content`` without ``Content-Type`` for RPCs returning ``VOID``
+
+  - Previously, those RPCs would return ``null`` as a body with ``Content-Type: application/json`` (`#2001 <https://github.com/PostgREST/postgrest/issues/2001>`_).
+
+* Using ``Prefer: return=representation`` no longer returns a ``Location`` header
+
+  - This reduces unnecessary computing for all insertions (`#2312 <https://github.com/PostgREST/postgrest/issues/2312>`_)
+
 Bug fixes
 ---------
 
@@ -152,139 +175,6 @@ Bug fixes
 
 * Allow ``limit=0`` in the request query to return an empty array (`#2269 <https://github.com/PostgREST/postgrest/issues/2269>`_)
 
-Breaking changes
-----------------
-
-* Return ``204 No Content`` without ``Content-Type`` for RPCs returning ``VOID`` (`#2001 <https://github.com/PostgREST/postgrest/issues/2001>`_)
-
-  - Previously, those RPCs would return ``null`` as a body with ``Content-Type: application/json``.
-
-* ``limit/offset`` now limits the affected rows on ``UPDATE``/``DELETE`` (`#2156 <https://github.com/PostgREST/postgrest/issues/2156>`_)
-
-  - Previously, ``limit``/``offset`` only limited the returned rows but not the actual updated rows
-
-* ``max-rows`` is no longer applied on ``POST``, ``PATCH``, ``PUT`` and ``DELETE`` returned rows (`#2155 <https://github.com/PostgREST/postgrest/issues/2155>`_)
-
-  - This was misleading because the affected rows were not really affected by ``max-rows``, only the returned rows were limited
-
-* Restrict generated many-to-many relationships (`#2070 <https://github.com/PostgREST/postgrest/issues/2070>`_)
-
-  - A primary key that contains the foreign key columns is now needed for generating many-to-many relationships.
-
-* Views now are not detected when embedding using the column or foreign key as target (``/view?select=*,column(*)``) (`#2277 <https://github.com/PostgREST/postgrest/issues/2277>`_)
-
-  - This embedding form was easily made ambiguous whenever a new view was added.
-
-  - For migrating, clients must be updated to the embedding form of ``/view?select=*,other_view!column(*)``.
-
-* Using ``Prefer: return=representation`` no longer returns a ``Location`` header (`#2312 <https://github.com/PostgREST/postgrest/issues/2312>`_)
-
-Migration Guide
-~~~~~~~~~~~~~~~
-
-Many-to-may relationships
-^^^^^^^^^^^^^^^^^^^^^^^^^
-
-The way PostgREST infers many-to-many relationships is now restricted. Before this change, a table could work as an intermediate join between two tables just by having foreign keys referencing each one of them. Consider the following:
-
-.. code-block:: postgresql
-
-  CREATE TABLE users (
-    id INT PRIMARY KEY,
-    name TEXT
-  );
-
-  CREATE TABLE permissions (
-    id INT PRIMARY KEY,
-    name TEXT
-  );
-
-  CREATE TABLE permission_user (
-    id INT PRIMARY KEY,
-    user_id INT REFERENCES users(id),
-    permission_id INT REFERENCES permissions(id)
-  );
-
-Before, PostgREST could infer a relationship between ``users`` and ``permissions`` through ``permission_user``.
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /users?select=permissions(*) HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/users?select=permissions(*)"
-
-But now this is not allowed. In order for it to work, the intermediate table must also have the foreign keys included in its primary key. So, in this case we need to do the following:
-
-.. code-block:: postgresql
-
-  -- This table has a pk defined already so we drop it first
-  alter table permission_user
-    drop constraint permission_user_pkey;
-
-  -- Then we add all the foreign keys to the primary key
-  alter table permission_user
-    add primary key (id, user_id, permission_id);
-
-With this, PostgREST 10 will infer successfully a relationship between ``users`` and ``permissions``.
-
-If you want an alternative to the previous method or need a more customized relationship, you could use :ref:`computed_relationships` to get a similar result.
-
-Embedding views
-^^^^^^^^^^^^^^^
-
-Using column names or foreign key constraint names as :ref:`embedding targets <target_disamb>` will not detect views anymore. Consider this as an example:
-
-.. code-block:: postgresql
-
-  CREATE TABLE users (
-    id INT PRIMARY KEY,
-    name TEXT,
-    is_active BOOL
-  );
-
-  CREATE TABLE messages (
-    id INT PRIMARY KEY,
-    body TEXT,
-    user_id INT REFERENCES users(id)
-  );
-
-  CREATE VIEW active_users AS
-    SELECT *
-    FROM users
-    WHERE is_active;
-
-Previously, the following request returned a ``300 Multiple Choices`` error, because the ``active_users`` view was also detected:
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /messages?select=body,user_id(name) HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/messages?select=body,user_id(name)"
-
-But in this version, this will not fail and will embed the table ``users`` instead. You need to use the view name as target in order to embed it, like this:
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /messages?select=body,active_users(name) HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000messages?select=body,active_users(name)"
-
-For other cases, adding a column or foreign key as :ref:`hint <hint_disamb>` may be needed.
-
-You could also use :ref:`computed_relationships` to get a similar result or if you want a more customized relationship.
-
 Thanks
 ------
 

From 022101ae3c8b23760c107b23a5a6b21d0c575a4b Mon Sep 17 00:00:00 2001
From: mdr1384 <32360633+mdr1384@users.noreply.github.com>
Date: Thu, 15 Sep 2022 09:32:24 -0400
Subject: [PATCH 523/652] Fix example code in computed relationships

Looks like a copy-paste error - the `films.id` column should be associated with the `premieres.film_id` column.
---
 docs/api.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/api.rst b/docs/api.rst
index bc95ea337..89a48524c 100644
--- a/docs/api.rst
+++ b/docs/api.rst
@@ -1129,7 +1129,7 @@ Now let's define the opposite one-to-many relationship with another function.
 .. code-block:: postgres
 
   create function premieres(films) returns setof premieres as $$
-    select * from premieres where film_id = $1.director_id
+    select * from premieres where film_id = $1.id
   $$ stable language sql;
 
 Similarly, this function defines a relationship between the parameter ``films`` and the return type ``premieres``.

From d507f2f0f4f8e8eddf2ebbd367c6a4c03cc1f39e Mon Sep 17 00:00:00 2001
From: Laurence Isla <lau.isla.c@gmail.com>
Date: Mon, 19 Sep 2022 21:09:32 -0500
Subject: [PATCH 524/652] Shorten explanations for the working with types
 section

---
 .../working-with-postgresql-data-types.rst    | 58 +++++++++----------
 1 file changed, 29 insertions(+), 29 deletions(-)

diff --git a/docs/how-tos/working-with-postgresql-data-types.rst b/docs/how-tos/working-with-postgresql-data-types.rst
index 68a50fa24..04e6562de 100644
--- a/docs/how-tos/working-with-postgresql-data-types.rst
+++ b/docs/how-tos/working-with-postgresql-data-types.rst
@@ -14,7 +14,7 @@ PostgREST makes use of PostgreSQL string representations to work with data types
 Timestamps
 ----------
 
-You can use the **time zone** to filter or send data if needed. Let's use this table as an example:
+You can use the **time zone** to filter or send data if needed.
 
 .. code-block:: postgres
 
@@ -88,7 +88,7 @@ You can use other comparative filters and also all the `PostgreSQL special date/
 JSON
 ----
 
-To work with a ``json`` type column, you can handle the value as a JSON object. For instance, let's use this table:
+To work with a ``json`` type column, you can handle the value as a JSON object.
 
 .. code-block:: postgres
 
@@ -98,7 +98,7 @@ To work with a ``json`` type column, you can handle the value as a JSON object.
     extra_info json
   );
 
-Now, you can insert a new product using a JSON object for the ``extra_info`` column:
+You can insert a new product using a JSON object for the ``extra_info`` column:
 
 .. tabs::
 
@@ -136,7 +136,7 @@ To query and filter the data see :ref:`json_columns` for a complete reference.
 Arrays
 ------
 
-To handle `array types <https://www.postgresql.org/docs/current/arrays.html>`_ you can use string representation or JSON array format. For instance, let's create the following table:
+To handle `array types <https://www.postgresql.org/docs/current/arrays.html>`_ you can use string representation or JSON array format.
 
 .. code-block:: postgres
 
@@ -147,7 +147,7 @@ To handle `array types <https://www.postgresql.org/docs/current/arrays.html>`_ y
     performance_times time[]
   );
 
-To insert a new value you can use string representation.
+You can insert a new value using string representation.
 
 .. tabs::
 
@@ -176,7 +176,7 @@ To insert a new value you can use string representation.
       }
     EOF
 
-Or you could send the data using a JSON array format. The following request sends the same data as the example above:
+Or you could send the same data using JSON array format:
 
 .. tabs::
 
@@ -205,20 +205,20 @@ Or you could send the data using a JSON array format. The following request send
       }
     EOF
 
-To query the data you can use the arrow operators. See :ref:`composite_array_columns`.
+To query the data you can use arrow operators. See :ref:`composite_array_columns`.
 
 Multidimensional Arrays
 ~~~~~~~~~~~~~~~~~~~~~~~
 
-Handling multidimensional arrays is no different than handling one-dimensional ones: both the string representation and the JSON array format are allowed. For example, let's add a new column to the table:
+Similarly to one-dimensional arrays, both the string representation and JSON array format are allowed.
 
 .. code-block:: postgres
 
-  -- The column stores the cinema, floor and auditorium numbers in that order
+  -- This new column stores the cinema, floor and auditorium numbers in that order
   alter table movies
   add column cinema_floor_auditorium int[][][];
 
-Now, let's update the row we inserted before using JSON array format:
+You can now update the item using JSON array format:
 
 .. tabs::
 
@@ -241,7 +241,7 @@ Now, let's update the row we inserted before using JSON array format:
       }
     EOF
 
-Now, for example, to query the auditoriums that are located in the first cinema (position 0 in the array) and on the second floor (position 1 in the next inner array), we can use the arrow operators this way:
+Then, for example, to query the auditoriums that are located in the first cinema (position 0 in the array) and on the second floor (position 1 in the next inner array), we can use the arrow operators this way:
 
 .. tabs::
 
@@ -265,7 +265,7 @@ Now, for example, to query the auditoriums that are located in the first cinema
 Composite Types
 ---------------
 
-With PostgREST, you have two options to handle `composite type columns <https://www.postgresql.org/docs/current/rowtypes.html>`_. On one hand you can use string representation and on the other you can handle it as you would a JSON column. Let's create a type and a table for this example:
+With PostgREST, you have two options to handle `composite type columns <https://www.postgresql.org/docs/current/rowtypes.html>`_.
 
 .. code-block:: postgres
 
@@ -284,7 +284,7 @@ With PostgREST, you have two options to handle `composite type columns <https://
   insert into products (id, size)
   values (1, '(5.0,5.0,10.0,"cm")');
 
-Now, you could insert values using string representation as seen in the example above.
+On one hand you can insert values using string representation.
 
 .. tabs::
 
@@ -303,7 +303,7 @@ Now, you could insert values using string representation as seen in the example
       { "id": 2, "size": "(0.7,0.5,1.8,\"m\")" }
     EOF
 
-Or, you could insert the data in JSON format. The following request is equivalent to the previous one:
+Or you could insert the same data in JSON format.
 
 .. tabs::
 
@@ -338,12 +338,12 @@ Or, you could insert the data in JSON format. The following request is equivalen
       }
     EOF
 
-You can also query data using the arrow operators. See :ref:`composite_array_columns`.
+You can also query the data using arrow operators. See :ref:`composite_array_columns`.
 
 Ranges
 ------
 
-To illustrate how to work with `ranges <https://www.postgresql.org/docs/current/rangetypes.html>`_, let's use the following table as an example:
+PostgREST allows you to handle `ranges <https://www.postgresql.org/docs/current/rangetypes.html>`_.
 
 .. code-block:: postgres
 
@@ -353,7 +353,7 @@ To illustrate how to work with `ranges <https://www.postgresql.org/docs/current/
      duration tsrange
    );
 
-Now, to insert a new event, specify the ``duration`` value as a string representation of the ``tsrange`` type, for example:
+To insert a new event, specify the ``duration`` value as a string representation of the ``tsrange`` type:
 
 .. tabs::
 
@@ -380,7 +380,7 @@ Now, to insert a new event, specify the ``duration`` value as a string represent
       }
     EOF
 
-You can use range :ref:`operators <operators>` to filter the data. But what if you need get the events for the New Year 2023? Doing this filter ``events?duration=cs.2023-01-01`` will return an error because PostgreSQL needs an explicit cast to timestamp of the string value. A workaround would be to use a range starting and ending in the same date, like this:
+You can use range :ref:`operators <operators>` to filter the data. But, in this case, requesting a filter like ``events?duration=cs.2023-01-01`` will return an error, because PostgreSQL needs an explicit cast from string to timestamp. A workaround is to use a range starting and ending in the same date:
 
 .. tabs::
 
@@ -470,7 +470,7 @@ Finally, do the request :ref:`casting the range column <casting_columns>`:
 Bytea
 -----
 
-To send raw binary to PostgREST you need a function with a single unnamed parameter of `bytea type <https://www.postgresql.org/docs/current/datatype-binary.html>`_. For example, let's create a table that will save some files and a function that inserts data to that table:
+To send raw binary to PostgREST you need a function with a single unnamed parameter of `bytea type <https://www.postgresql.org/docs/current/datatype-binary.html>`_.
 
 .. code-block:: postgres
 
@@ -483,7 +483,7 @@ To send raw binary to PostgREST you need a function with a single unnamed parame
      insert into files (file) values ($1);
    $$ language sql;
 
-Next, let's use the PostgREST logo for our test.
+Let's download the PostgREST logo for our test.
 
 .. code-block:: bash
 
@@ -506,8 +506,8 @@ Now, to send the file ``postgrest-logo.png`` we need to set the ``Content-Type:
       -X POST -H "Content-Type: application/octet-stream" \
       --data-binary "@postgrest-logo.png"
 
-To get the image from the database, you will need to set the ``Accept: application/octet-stream`` header in the request and select only the
-``bytea`` column.
+To get the image from the database, set the ``Accept: application/octet-stream`` header and select only the
+``bytea`` type column.
 
 .. tabs::
 
@@ -521,7 +521,7 @@ To get the image from the database, you will need to set the ``Accept: applicati
     curl "http://localhost:3000/files?select=file&id=eq.1" \
       -H "Accept: application/octet-stream"
 
-You can also use more accurate headers depending on the type of the files by using the :ref:`raw-media-types` configuration. For example, adding the ``raw-media-types="image/png"`` setting to the configuration file will allow you to use the ``Accept: image/png`` header:
+Use more accurate headers according to the type of the files by using the :ref:`raw-media-types` configuration. For example, adding the ``raw-media-types="image/png"`` setting to the configuration file will allow you to use the ``Accept: image/png`` header:
 
 .. tabs::
 
@@ -544,7 +544,7 @@ See :ref:`providing_img` for a step-by-step example on how to handle images in H
 hstore
 ------
 
-You can work with data types belonging to additional supplied modules such as `hstore <https://www.postgresql.org/docs/current/hstore.html>`_. Let's use the following table:
+You can work with data types belonging to additional supplied modules such as `hstore <https://www.postgresql.org/docs/current/hstore.html>`_.
 
 .. code-block:: postgres
 
@@ -556,7 +556,7 @@ You can work with data types belonging to additional supplied modules such as `h
     name hstore unique
   );
 
-The ``name`` column will have the name of the country in different formats. You can insert values using the string representation for that data type, for instance:
+The ``name`` column will have the name of the country in different formats. You can insert values using the string representation for that data type:
 
 .. tabs::
 
@@ -583,7 +583,7 @@ The ``name`` column will have the name of the country in different formats. You
 
 Notice that the use of ``"`` in the value of the ``name`` column needs to be escaped using a backslash ``\``.
 
-You can also query and filter the value of a ``hstore`` column using the arrow operators, as you would do for a :ref:`JSON column<json_columns>`. For example, if you want to get the native name of Egypt, the query would be:
+You can also query and filter the value of a ``hstore`` column using the arrow operators, as you would do for a :ref:`JSON column<json_columns>`. For example, if you want to get the native name of Egypt:
 
 .. tabs::
 
@@ -604,7 +604,7 @@ You can also query and filter the value of a ``hstore`` column using the arrow o
 PostGIS
 -------
 
-You can use the string representation for `PostGIS <https://postgis.net/>`_ data types such as ``geometry`` or ``geography``. As an example, let's create a table using the ``geometry`` type (you need to `install PostGIS <https://postgis.net/install/>`_ first).
+You can use the string representation for `PostGIS <https://postgis.net/>`_ data types such as ``geometry`` or ``geography`` (you need to `install PostGIS <https://postgis.net/install/>`_ first).
 
 .. code-block:: postgres
 
@@ -617,7 +617,7 @@ You can use the string representation for `PostGIS <https://postgis.net/>`_ data
     area geometry
   );
 
-Say you want to add areas in polygon format. The request using string representation would look like:
+To add areas in polygon format, you can use string representation:
 
 .. tabs::
 
@@ -697,7 +697,7 @@ If you need to add an extra property, like the area in square units by using ``s
   alter table coverage
     add square_units double precision generated always as ( st_area(area) ) stored;
 
-In the case that you are using older PostGIS versions, then creating a function is your best option. For example:
+In the case that you are using older PostGIS versions, then creating a function is your best option:
 
 .. code-block:: postgres
 

From fdb975c87c9e85b1ed4e6d1a4d81956c3c6cf623 Mon Sep 17 00:00:00 2001
From: Laurence Isla <lau.isla.c@gmail.com>
Date: Wed, 21 Sep 2022 19:09:50 -0500
Subject: [PATCH 525/652] Add information on preflight requests in CORS
 subsection

---
 docs/api.rst   | 30 ++++++++++++++++++++++++++++++
 postgrest.dict |  1 +
 2 files changed, 31 insertions(+)

diff --git a/docs/api.rst b/docs/api.rst
index 89a48524c..8638445b7 100644
--- a/docs/api.rst
+++ b/docs/api.rst
@@ -2705,6 +2705,36 @@ CORS
 
 PostgREST sets highly permissive cross origin resource sharing, that is why it accepts Ajax requests from any domain.
 
+It also handles `preflight requests <https://developer.mozilla.org/en-US/docs/Glossary/Preflight_request>`_ done by the browser, which are cached using the returned ``Access-Control-Max-Age: 86400`` header (86400 seconds = 24 hours). This is useful to reduce the latency of the subsequent requests.
+
+A ``POST`` preflight request would look like this:
+
+.. tabs::
+
+  .. code-tab:: http
+
+     OPTIONS /items HTTP/1.1
+     Origin: http://example.com
+     Access-Control-Allow-Method: POST
+     Access-Control-Allow-Headers: Content-Type
+
+  .. code-tab:: bash Curl
+
+     curl -i "http://localhost:3000/items" \
+       -X OPTIONS \
+       -H "Origin: http://example.com" \
+       -H "Access-Control-Request-Method: POST" \
+       -H "Access-Control-Request-Headers: Content-Type"
+
+.. code-block:: http
+
+  HTTP/1.1 200 OK
+  Access-Control-Allow-Origin: http://example.com
+  Access-Control-Allow-Credentials: true
+  Access-Control-Allow-Methods: GET, POST, PATCH, PUT, DELETE, OPTIONS, HEAD
+  Access-Control-Allow-Headers: Authorization, Content-Type, Accept, Accept-Language, Content-Language
+  Access-Control-Max-Age: 86400
+
 .. _multiple-schemas:
 
 Switching Schemas
diff --git a/postgrest.dict b/postgrest.dict
index 2105b5839..39588be67 100644
--- a/postgrest.dict
+++ b/postgrest.dict
@@ -127,6 +127,7 @@ PostgREST
 postgrest
 PostgREST's
 pre
+preflight
 psql
 Qin
 RabbitMQ

From 73f759ef3a0b519c64ebe3a2d4e203a311c0a668 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 17 Oct 2022 12:23:52 +0000
Subject: [PATCH 526/652] Bump cachix/install-nix-action from 17 to 18

Bumps [cachix/install-nix-action](https://github.com/cachix/install-nix-action) from 17 to 18.
- [Release notes](https://github.com/cachix/install-nix-action/releases)
- [Commits](https://github.com/cachix/install-nix-action/compare/v17...v18)

---
updated-dependencies:
- dependency-name: cachix/install-nix-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/ci.yaml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 865683ba1..18290bff2 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -16,7 +16,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v3
-    - uses: cachix/install-nix-action@v17
+    - uses: cachix/install-nix-action@v18
     - run: nix-env -f default.nix -iA build
     - run: postgrest-docs-build
 
@@ -25,7 +25,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v3
-    - uses: cachix/install-nix-action@v17
+    - uses: cachix/install-nix-action@v18
     - run: nix-env -f default.nix -iA spellcheck
     - run: postgrest-docs-spellcheck
 
@@ -35,7 +35,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v3
-    - uses: cachix/install-nix-action@v17
+    - uses: cachix/install-nix-action@v18
     - run: nix-env -f default.nix -iA linkcheck
     - run: postgrest-docs-linkcheck
     

From 8a98b4ed2671a89f444cafb37d0d780266a90777 Mon Sep 17 00:00:00 2001
From: Andrea Bernicchia <51401007+abernicchia-heroku@users.noreply.github.com>
Date: Thu, 27 Oct 2022 17:58:17 +0200
Subject: [PATCH 527/652] Update heroku installation docs

* Heroku installation docs aligned with https://github.com/PostgREST/postgrest-heroku/pull/40
* Update install.rst
---
 docs/install.rst | 123 ++++++++++++++++++++++++++++++++++++++++++++---
 1 file changed, 115 insertions(+), 8 deletions(-)

diff --git a/docs/install.rst b/docs/install.rst
index ec3c97721..39de4f063 100644
--- a/docs/install.rst
+++ b/docs/install.rst
@@ -260,13 +260,120 @@ You can build PostgREST from source with `Stack <https://github.com/commercialha
 Deploying to Heroku
 ===================
 
-Assuming you're making modifications locally and then pushing to GitHub, it's easy to deploy to Heroku.
+1.  Log into Heroku using the `Heroku CLI <https://devcenter.heroku.com/articles/heroku-cli>`_:
 
-1. Create a new app on Heroku
-2. In Settings add the following buildpack :code:`https://github.com/PostgREST/postgrest-heroku`
-3. Add the require Config Vars in Heroku
-4. Modify your ``postgrest.conf`` file as required to match your Config Vars in Heroku
-5. Create your :code:`Procfile` and add :code:`./env-to-config ./postgrest postgrest.conf`
-6. Push your changes to GitHub
-7. Set Heroku to automatically deploy from Main and then manually deploy the branch for the first build
+  .. code-block:: bash
 
+    # If you have multiple Heroku accounts, use flag '--interactive' to switch between them
+    heroku login --interactive
+
+
+2.  Create a new Heroku app using the PostgREST buildpack:
+
+  .. code-block:: bash
+
+    mkdir ${YOUR_APP_NAME}
+    cd ${YOUR_APP_NAME}
+    git init .
+
+    heroku apps:create ${YOUR_APP_NAME} --buildpack https://github.com/PostgREST/postgrest-heroku.git
+    heroku git:remote -a ${YOUR_APP_NAME}
+
+3.  Create a new Heroku PostgreSQL add-on attached to the app and keep notes of the assigned add-on name (e.g. :code:`postgresql-curly-58902`) referred later as ${HEROKU_PG_DB_NAME}
+
+  .. code-block:: bash
+
+    heroku addons:create heroku-postgresql:standard-0 -a ${YOUR_APP_NAME}
+    # wait until the add-on is available
+    heroku pg:wait -a ${YOUR_APP_NAME}
+
+4.  Create the necessary user roles according to the 
+    `PostgREST documentation <https://postgrest.org/en/stable/auth.html>`_:
+
+  .. code-block:: bash
+
+    heroku pg:credentials:create --name api_user -a ${YOUR_APP_NAME}
+    # use the following command to ensure the new credential state is active before attaching it
+    heroku pg:credentials -a ${YOUR_APP_NAME}
+
+    heroku addons:attach ${HEROKU_PG_DB_NAME} --credential api_user -a ${YOUR_APP_NAME}
+
+5.  Connect to the PostgreSQL database and create some sample data:
+
+  .. code-block:: bash
+
+    heroku psql -a ${YOUR_APP_NAME}
+
+  .. code-block:: postgres
+
+    # from the psql command prompt execute the following commands:
+    create schema api;
+
+    create table api.todos (
+    id serial primary key,
+    done boolean not null default false,
+    task text not null,
+    due timestamptz
+    );
+
+    insert into api.todos (task) values
+    ('finish tutorial 0'), ('pat self on back');
+
+    grant usage on schema api to api_user;
+    grant select on api.todos to api_user;
+
+6.  Create the :code:`Procfile`:
+
+  .. code-block:: bash
+
+    web: PGRST_SERVER_HOST=0.0.0.0 PGRST_SERVER_PORT=${PORT} PGRST_DB_URI=${PGRST_DB_URI:-${DATABASE_URL}} ./postgrest-${POSTGREST_VER}
+  ..
+    
+  Set the following environment variables on Heroku:
+
+  .. code-block:: bash
+
+    heroku config:set POSTGREST_VER=10.0.0
+    heroku config:set PGRST_DB_SCHEMA=api
+    heroku config:set PGRST_DB_ANON_ROLE=api_user
+  ..
+
+  PGRST_DB_URI can be set if an external database is used or if it's different from the default Heroku DATABASE_URL. This latter is used if nothing is provided.  
+  POSTGREST_VER is mandatory to select and build the required PostgREST release.
+
+  See https://postgrest.org/en/stable/configuration.html#environment-variables for the full list of environment variables.
+
+7.  Build and deploy your app:
+
+  .. code-block:: bash
+
+    git add Procfile
+    git commit -m "PostgREST on Heroku"
+    git push heroku master
+  ..
+
+  Your Heroku app should be live at :code:`${YOUR_APP_NAME}.herokuapp.com`
+
+8.  Test your app
+
+    From a terminal display the application logs:
+
+  .. code-block:: bash
+
+    heroku logs -t
+  ..
+
+  From a different terminal retrieve with curl the records previously created:
+
+  .. code-block:: bash
+ 
+    curl https://${YOUR_APP_NAME}.herokuapp.com/todos
+  .. 
+
+  and test that any attempt to modify the table via a read-only user is not allowed:
+
+  .. code-block:: bash
+
+    curl https://${YOUR_APP_NAME}.herokuapp.com/todos -X POST \
+     -H "Content-Type: application/json" \
+     -d '{"task": "do bad thing"}'   

From 50eb42bf462c4552d60144b7da948adbbae2b349 Mon Sep 17 00:00:00 2001
From: Andrea Bernicchia <51401007+abernicchia-heroku@users.noreply.github.com>
Date: Wed, 2 Nov 2022 18:23:35 +0100
Subject: [PATCH 528/652] LICENSE file added (#579)

---
 LICENSE | 21 +++++++++++++++++++++
 1 file changed, 21 insertions(+)
 create mode 100644 LICENSE

diff --git a/LICENSE b/LICENSE
new file mode 100644
index 000000000..4d0857d54
--- /dev/null
+++ b/LICENSE
@@ -0,0 +1,21 @@
+Copyright (c) 2014 Joe Nelson
+Copyright (c) 2019 Steve Chavez
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+"Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be included
+in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
+IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY
+CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
+TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
+SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

From a6af266ab7810cc45f32d74cbf97f9ab90e37ef6 Mon Sep 17 00:00:00 2001
From: Laurence Isla <lau.isla.c@gmail.com>
Date: Mon, 14 Nov 2022 19:11:43 -0500
Subject: [PATCH 529/652] Fix step 3 of the tutorial 0

---
 docs/tutorials/tut0.rst | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/docs/tutorials/tut0.rst b/docs/tutorials/tut0.rst
index 5a2ed1604..7b2ce647c 100644
--- a/docs/tutorials/tut0.rst
+++ b/docs/tutorials/tut0.rst
@@ -52,9 +52,9 @@ The result will be a file named simply :code:`postgrest` (or :code:`postgrest.ex
 
 .. code-block:: bash
 
-  ./postgrest
+  ./postgrest -h
 
-If everything is working correctly it will print out its version and information about configuration. You can continue to run this binary from where you downloaded it, or copy it to a system directory like :code:`/usr/local/bin` on Linux so that you will be able to run it from any directory.
+If everything is working correctly it will print out its version and the available options. You can continue to run this binary from where you downloaded it, or copy it to a system directory like :code:`/usr/local/bin` on Linux so that you will be able to run it from any directory.
 
 .. note::
 

From 485e4db4d79cb2431cafca6d7f68891cf0c96ea3 Mon Sep 17 00:00:00 2001
From: Laurence Isla <lau.isla.c@gmail.com>
Date: Mon, 14 Nov 2022 19:16:42 -0500
Subject: [PATCH 530/652] Fix auth page due to anonymous requests not allowed
 when db-anon-role is not set

---
 docs/auth.rst | 50 ++++++++++++++++++++++++++++----------------------
 1 file changed, 28 insertions(+), 22 deletions(-)

diff --git a/docs/auth.rst b/docs/auth.rst
index 94e449db5..5a3d129d3 100644
--- a/docs/auth.rst
+++ b/docs/auth.rst
@@ -12,7 +12,7 @@ There are three types of roles used by PostgREST, the **authenticator**, **anony
 
 .. image:: _static/security-roles.png
 
-The authenticator should be created :code:`NOINHERIT` and configured in the database to have very limited access. It is a chameleon whose job is to "become" other users to service authenticated HTTP requests. The picture below shows how the server handles authentication. If auth succeeds, it switches into the user role specified by the request, otherwise it switches into the anonymous role.
+The authenticator should be created :code:`NOINHERIT` and configured in the database to have very limited access. It is a chameleon whose job is to "become" other users to service authenticated HTTP requests. The picture below shows how the server handles authentication. If auth succeeds, it switches into the user role specified by the request, otherwise it switches into the anonymous role (if it's set in :ref:`db-anon-role`).
 
 .. image:: _static/security-anon-choice.png
 
@@ -399,6 +399,27 @@ Public User Interface
 
 In the previous section we created an internal table to store user information. Here we create a login function which takes an email address and password and returns JWT if the credentials match a user in the internal table.
 
+Permissions
+~~~~~~~~~~~
+
+Your database roles need access to the schema, tables, views and functions in order to service HTTP requests.
+Recall from the `Overview of Role System`_ that PostgREST uses special roles to process requests, namely the authenticator and
+anonymous roles. Below is an example of permissions that allow anonymous users to create accounts and attempt to log in.
+
+.. code-block:: postgres
+
+  -- the names "anon" and "authenticator" are configurable and not
+  -- sacred, we simply choose them for clarity
+  create role anon noinherit;
+  create role authenticator noinherit;
+  grant anon to authenticator;
+
+Then, add ``db-anon-role`` to the configuration file to allow anonymous requests.
+
+.. code:: ini
+
+  db-anon-role = "anon"
+
 Logins
 ~~~~~~
 
@@ -436,6 +457,12 @@ As described in `JWT from SQL`_, we'll create a JWT inside our login function. N
   end;
   $$ language plpgsql security definer;
 
+  grant execute on function login(text,text) to anon;
+
+Since the above :code:`login` function is defined as `security definer <https://www.postgresql.org/docs/current/sql-createfunction.html#id-1.9.3.67.10.2>`_,
+the anonymous user :code:`anon` doesn't need permission to read the :code:`basic_auth.users` table. It doesn't even need permission to access the :code:`basic_auth` schema.
+:code:`grant execute on function` is included for clarity but it might not be needed, see :ref:`func_privs` for more details.
+
 An API request to call this function would look like:
 
 .. tabs::
@@ -459,24 +486,3 @@ The response would look like the snippet below. Try decoding the token at `jwt.i
   {
     "token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJlbWFpbCI6ImZvb0BiYXIuY29tIiwicGFzcyI6ImZvb2JhciJ9.37066TTRlh-1hXhnA9oO9Pj6lgL6zFuJU0iCHhuCFno"
   }
-
-Permissions
-~~~~~~~~~~~
-
-Your database roles need access to the schema, tables, views and functions in order to service HTTP requests.
-Recall from the `Overview of Role System`_ that PostgREST uses special roles to process requests, namely the authenticator and
-anonymous roles. Below is an example of permissions that allow anonymous users to create accounts and attempt to log in.
-
-.. code-block:: postgres
-
-  -- the names "anon" and "authenticator" are configurable and not
-  -- sacred, we simply choose them for clarity
-  create role anon noinherit;
-  create role authenticator noinherit;
-  grant anon to authenticator;
-
-  grant execute on function login(text,text) to anon;
-
-Since the above :code:`login` function is defined as `security definer <https://www.postgresql.org/docs/current/sql-createfunction.html#id-1.9.3.67.10.2>`_,
-the anonymous user :code:`anon` doesn't need permission to read the :code:`basic_auth.users` table. It doesn't even need permission to access the :code:`basic_auth` schema.
-:code:`grant execute on function` is included for clarity but it might not be needed, see :ref:`func_privs` for more details.

From f3831427e573d770d08efcecd90307f9dad4bbc6 Mon Sep 17 00:00:00 2001
From: Laurence Isla <lau.isla.c@gmail.com>
Date: Mon, 14 Nov 2022 19:33:25 -0500
Subject: [PATCH 531/652] Fix broken links and dictcheck

---
 docs/api.rst       | 2 +-
 docs/ecosystem.rst | 2 +-
 postgrest.dict     | 3 ---
 3 files changed, 2 insertions(+), 5 deletions(-)

diff --git a/docs/api.rst b/docs/api.rst
index 8638445b7..c40b747dd 100644
--- a/docs/api.rst
+++ b/docs/api.rst
@@ -155,7 +155,7 @@ Pattern Matching
 
 The pattern-matching operators (:code:`like`, :code:`ilike`, :code:`match`, :code:`imatch`) exist to support filtering data using patterns instead of concrete strings, as described in the `PostgreSQL docs <https://www.postgresql.org/docs/current/functions-matching.html>`__.
 
-To ensure best performance on larger data sets, an `appropriate index <https://www.postgresql.org/docs/current/pgtrgm.html#id-1.11.7.42.8>`__ should be used and even then, it depends on the pattern value and actual data statistics whether an existing index will be used by the query planner or not.
+To ensure best performance on larger data sets, an `appropriate index <https://www.postgresql.org/docs/current/pgtrgm.html#id-1.11.7.44.8>`__ should be used and even then, it depends on the pattern value and actual data statistics whether an existing index will be used by the query planner or not.
 
 .. _fts:
 
diff --git a/docs/ecosystem.rst b/docs/ecosystem.rst
index 3d177848c..69f9eb350 100644
--- a/docs/ecosystem.rst
+++ b/docs/ecosystem.rst
@@ -38,7 +38,7 @@ Example Apps
 * `ext-postgrest-crud <https://github.com/timwis/ext-postgrest-crud>`_ - browser-based spreadsheet
 * `general <https://github.com/PierreRochard/general>`_ - example auth back-end
 * `goodfilm <https://github.com/tyrchen/goodfilm>`_ - example film API
-* `guild-operators <https://github.com/cardano-community/guild-operators/tree/alpha/files/grest>`_ - example queries and functions that the Cardano Community uses for their Guild Operators' Repository
+* `guild-operators <https://github.com/cardano-community/koios-artifacts/tree/main/files/grest>`_ - example queries and functions that the Cardano Community uses for their Guild Operators' Repository
 * `handsontable-postgrest <https://github.com/timwis/handsontable-postgrest>`_ - an excel-like database table editor
 * `heritage-near-me <https://github.com/CodeforAustralia/heritage-near-me>`_ - Elm and PostgREST with PostGIS
 * `ng-admin-postgrest <https://github.com/marmelab/ng-admin-postgrest>`_ - automatic database admin panel
diff --git a/postgrest.dict b/postgrest.dict
index 39588be67..96eade670 100644
--- a/postgrest.dict
+++ b/postgrest.dict
@@ -14,7 +14,6 @@ Beles
 booleans
 Bouscal
 buildpack
-bugfixes
 Bytea
 Cardano
 cd
@@ -204,5 +203,3 @@ Websockets
 webuser
 wfts
 ZeroMQ
-Customizable
-customizable

From f6e3b77643a22c6f7611cd25435cf504d516e1f7 Mon Sep 17 00:00:00 2001
From: fjf2002 <franz-josef.faerber@stmuk.bayern.de>
Date: Wed, 16 Nov 2022 23:10:18 +0100
Subject: [PATCH 532/652] =?UTF-8?q?how-to:=20SQL=20User=20Management=20usi?=
 =?UTF-8?q?ng=20postgres=E2=80=99=20users=20and=20passwords=20(#581)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 docs/auth.rst                                 |   8 +
 ...ent-using-postgres-users-and-passwords.rst | 342 ++++++++++++++++++
 docs/index.rst                                |   2 +
 postgrest.dict                                |   4 +
 4 files changed, 356 insertions(+)
 create mode 100644 docs/how-tos/sql-user-management-using-postgres-users-and-passwords.rst

diff --git a/docs/auth.rst b/docs/auth.rst
index 5a3d129d3..fb9db9999 100644
--- a/docs/auth.rst
+++ b/docs/auth.rst
@@ -305,6 +305,8 @@ Schema Isolation
 
 You can isolate your api schema from internal implementation details, as explained in :ref:`schema_isolation`. For an example of wrapping a private table with a public view see the :ref:`public_ui` section below.
 
+.. _sql_user_management:
+
 SQL User Management
 ===================
 
@@ -486,3 +488,9 @@ The response would look like the snippet below. Try decoding the token at `jwt.i
   {
     "token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJlbWFpbCI6ImZvb0BiYXIuY29tIiwicGFzcyI6ImZvb2JhciJ9.37066TTRlh-1hXhnA9oO9Pj6lgL6zFuJU0iCHhuCFno"
   }
+
+
+Alternatives
+~~~~~~~~~~~~
+
+See the how-to :ref:`sql-user-management-using-postgres-users-and-passwords` for a similar way that completely avoids the table :code:`basic_auth.users`.
diff --git a/docs/how-tos/sql-user-management-using-postgres-users-and-passwords.rst b/docs/how-tos/sql-user-management-using-postgres-users-and-passwords.rst
new file mode 100644
index 000000000..ea53a5d32
--- /dev/null
+++ b/docs/how-tos/sql-user-management-using-postgres-users-and-passwords.rst
@@ -0,0 +1,342 @@
+.. _sql-user-management-using-postgres-users-and-passwords:
+
+SQL User Management using postgres' users and passwords
+=======================================================
+
+:author: `fjf2002 <https://github.com/fjf2002>`_
+
+
+This is an alternative to :ref:`sql_user_management`, solely using the built-in table `pg_catalog.pg_authid <https://www.postgresql.org/docs/current/catalog-pg-authid.html>`_ for user management. This means
+
+- no dedicated user table (aside from :code:`pg_authid`) is required
+
+- postgres' users and passwords (i. e. the stuff in :code:`pg_authid`) are also used at the postgrest level.
+
+.. note::
+  Only postgres users with SCRAM-SHA-256 password hashes (the default since PostgreSQL v14) are supported.
+
+.. warning::
+
+  This is experimental. We can't give you any guarantees, especially concerning security. Use at your own risk.
+
+
+
+Working with pg_authid and SCRAM-SHA-256 hashes
+-----------------------------------------------
+
+As in :ref:`sql_user_management`, we create a :code:`basic_auth` schema:
+
+.. code-block:: postgres
+
+  -- We put things inside the basic_auth schema to hide
+  -- them from public view. Certain public procs/views will
+  -- refer to helpers and tables inside.
+  CREATE SCHEMA IF NOT EXISTS basic_auth;
+
+
+As in :ref:`sql_user_management`, we create the :code:`pgcrypto` and :code:`pgjwt` extensions. Here we prefer to put the extensions in its own schemas:
+
+.. code-block:: postgres
+
+  CREATE SCHEMA ext_pgcrypto;
+  ALTER SCHEMA ext_pgcrypto OWNER TO postgres;
+  CREATE EXTENSION IF NOT EXISTS pgcrypto WITH SCHEMA ext_pgcrypto;
+
+
+Concerning the `pgjwt extension <https://github.com/michelp/pgjwt>`_, please cf. to :ref:`client_auth`.
+
+.. code-block:: postgres
+
+  CREATE SCHEMA ext_pgjwt;
+  ALTER SCHEMA ext_pgjwt OWNER TO postgres;
+  CREATE EXTENSION IF NOT EXISTS pgjwt WITH SCHEMA ext_pgjwt;
+
+
+In order to be able to work with postgres' SCRAM-SHA-256 password hashes, we also need the PBKDF2 key derivation function. Luckily there is `a PL/pgSQL implementation on stackoverflow <https://stackoverflow.com/q/47162200/2337147>`_:
+
+.. code-block:: plpgsql
+
+  CREATE FUNCTION basic_auth.pbkdf2(salt bytea, pw text, count integer, desired_length integer, algorithm text) RETURNS bytea
+      LANGUAGE plpgsql IMMUTABLE
+      AS $$
+  DECLARE 
+    hash_length integer;
+    block_count integer;
+    output bytea;
+    the_last bytea;
+    xorsum bytea;
+    i_as_int32 bytea;
+    i integer;
+    j integer;
+    k integer;
+  BEGIN
+    algorithm := lower(algorithm);
+    CASE algorithm
+    WHEN 'md5' then
+      hash_length := 16;
+    WHEN 'sha1' then
+      hash_length = 20;
+    WHEN 'sha256' then
+      hash_length = 32;
+    WHEN 'sha512' then
+      hash_length = 64;
+    ELSE
+      RAISE EXCEPTION 'Unknown algorithm "%"', algorithm;
+    END CASE;
+    --
+    block_count := ceil(desired_length::real / hash_length::real);
+    --
+    FOR i in 1 .. block_count LOOP
+      i_as_int32 := E'\\000\\000\\000'::bytea || chr(i)::bytea;
+      i_as_int32 := substring(i_as_int32, length(i_as_int32) - 3);
+      --
+      the_last := salt::bytea || i_as_int32;
+      --
+      xorsum := ext_pgcrypto.HMAC(the_last, pw::bytea, algorithm);
+      the_last := xorsum;
+      --
+      FOR j IN 2 .. count LOOP
+        the_last := ext_pgcrypto.HMAC(the_last, pw::bytea, algorithm);
+        
+        --
+        -- xor the two
+        --
+        FOR k IN 1 .. length(xorsum) LOOP
+          xorsum := set_byte(xorsum, k - 1, get_byte(xorsum, k - 1) # get_byte(the_last, k - 1));
+        END LOOP;
+      END LOOP;
+      --
+      IF output IS NULL THEN
+        output := xorsum;
+      ELSE
+        output := output || xorsum;
+      END IF;
+    END LOOP;
+    --
+    RETURN substring(output FROM 1 FOR desired_length);
+  END $$;
+
+  ALTER FUNCTION basic_auth.pbkdf2(salt bytea, pw text, count integer, desired_length integer, algorithm text) OWNER TO postgres;
+
+
+Analogous to :ref:`sql_user_management` creates the function :code:`basic_auth.user_role`, we create a helper function to check the user's password, here with another name and signature (since we want the username, not an email address).
+But contrary to :ref:`sql_user_management`, this function does not use a dedicated :code:`users` table with passwords, but instead utilizes the built-in table `pg_catalog.pg_authid <https://www.postgresql.org/docs/current/catalog-pg-authid.html>`_:
+
+.. code-block:: plpgsql
+
+  CREATE FUNCTION basic_auth.check_user_pass(username text, password text) RETURNS name
+      LANGUAGE sql
+      AS
+  $$
+    SELECT rolname AS username
+    FROM pg_authid
+    -- regexp-split scram hash:
+    CROSS JOIN LATERAL regexp_match(rolpassword, '^SCRAM-SHA-256\$(.*):(.*)\$(.*):(.*)$') AS rm
+    -- identify regexp groups with sane names:
+    CROSS JOIN LATERAL (SELECT rm[1]::integer AS iteration_count, decode(rm[2], 'base64') as salt, decode(rm[3], 'base64') AS stored_key, decode(rm[4], 'base64') AS server_key, 32 AS digest_length) AS stored_password_part
+    -- calculate pbkdf2-digest:
+    CROSS JOIN LATERAL (SELECT basic_auth.pbkdf2(salt, check_user_pass.password, iteration_count, digest_length, 'sha256')) AS digest_key(digest_key)
+    -- based on that, calculate hashed passwort part:
+    CROSS JOIN LATERAL (SELECT ext_pgcrypto.digest(ext_pgcrypto.hmac('Client Key', digest_key, 'sha256'), 'sha256') AS stored_key, ext_pgcrypto.hmac('Server Key', digest_key, 'sha256') AS server_key) AS check_password_part
+    WHERE rolpassword IS NOT NULL
+      AND pg_authid.rolname = check_user_pass.username
+    -- verify password:
+      AND check_password_part.stored_key = stored_password_part.stored_key
+      AND check_password_part.server_key = stored_password_part.server_key;
+  $$;
+
+  ALTER FUNCTION basic_auth.check_user_pass(username text, password text) OWNER TO postgres;
+
+
+
+Public User Interface
+---------------------
+
+Analogous to :ref:`sql_user_management`, we create a login function which takes a username and password and returns JWT if the credentials match a user in the internal table.
+Here we use the username instead of the email address to identify a user.
+
+
+Logins
+~~~~~~
+
+As described in :ref:`client_auth`, we'll create a JWT token inside our login function. Note that you'll need to adjust the secret key which is hard-coded in this example to a secure (at least thirty-two character) secret of your choosing.
+
+
+.. code-block:: plpgsql
+
+  CREATE TYPE basic_auth.jwt_token AS (
+    token text
+  );
+
+  -- if you are not using psql, you need to replace :dbname with the current database's name.
+  ALTER DATABASE :DBNAME SET "app.jwt_secret" to 'reallyreallyreallyreallyverysafe';
+
+
+  CREATE FUNCTION public.login(username text, password text) RETURNS basic_auth.jwt_token
+      LANGUAGE plpgsql security definer
+      AS $$
+  DECLARE
+    _role name;
+    result basic_auth.jwt_token;
+  BEGIN
+    -- check email and password
+    SELECT basic_auth.check_user_pass(username, password) INTO _role;
+    IF _role IS NULL THEN
+      RAISE invalid_password USING message = 'invalid user or password';
+    END IF;
+    --
+    SELECT ext_pgjwt.sign(
+        row_to_json(r), current_setting('app.jwt_secret')
+      ) AS token
+      FROM (
+        SELECT login.username as role,
+          extract(epoch FROM now())::integer + 60*60 AS exp
+      ) r
+      INTO result;
+    RETURN result;
+  END;
+  $$;
+
+  ALTER FUNCTION public.login(username text, password text) OWNER TO postgres;
+
+
+
+Permissions
+~~~~~~~~~~~
+
+Analogous to :ref:`sql_user_management`:
+Your database roles need access to the schema, tables, views and functions in order to service HTTP requests.
+Recall from the :ref:`roles` that PostgREST uses special roles to process requests, namely the authenticator and
+anonymous roles. Below is an example of permissions that allow anonymous users to attempt to log in.
+
+
+.. code-block:: postgres
+
+  -- the names "anon" and "authenticator" are configurable and not
+  -- sacred, we simply choose them for clarity
+  CREATE ROLE anon NOINHERIT;
+  CREATE role authenticator NOINHERIT LOGIN PASSWORD 'secret';
+  GRANT anon TO authenticator;
+
+  GRANT EXECUTE ON FUNCTION public.login(username text, password text) TO anon;
+
+
+Since the above :code:`login` function is defined as `security definer <https://www.postgresql.org/docs/current/sql-createfunction.html#id-1.9.3.67.10.2>`_,
+the anonymous user :code:`anon` doesn't need permission to access the table :code:`pg_catalog.pg_authid` .
+:code:`grant execute on function` is included for clarity but it might not be needed, see :ref:`func_privs` for more details.
+
+Choose a secure password for role :code:`authenticator`.
+Do not forget to configure PostgREST to use the :code:`authenticator` user to connect, and to use the :code:`anon` user as anonymous user.
+
+
+Testing
+-------
+
+Let us create a sample user:
+
+.. code-block:: postgres
+
+  CREATE ROLE foo PASSWORD 'bar';
+
+
+Test at the SQL level
+~~~~~~~~~~~~~~~~~~~~~
+
+Execute:
+
+.. code-block:: postgres
+
+  SELECT * FROM public.login('foo', 'bar');
+
+
+This should return a single scalar field like:
+
+::
+
+                                                              token
+  -----------------------------------------------------------------------------------------------------------------------------
+  eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJyb2xlIjoiZm9vIiwiZXhwIjoxNjY4MTg4ODQ3fQ.idBBHuDiQuN_S7JJ2v3pBOr9QypCliYQtCgwYOzAqEk
+  (1 row)
+
+
+Test at the REST level
+~~~~~~~~~~~~~~~~~~~~~~
+An API request to call this function would look like:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    POST /rpc/login HTTP/1.1
+
+    { "username": "foo", "password": "bar" }
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/rpc/login" \
+      -X POST -H "Content-Type: application/json" \
+      -d '{ "username": "foo", "password": "bar" }'
+
+The response would look like the snippet below. Try decoding the token at `jwt.io <https://jwt.io/>`_. (It was encoded with a secret of :code:`reallyreallyreallyreallyverysafe` as specified in the SQL code above. You'll want to change this secret in your app!)
+
+.. code:: json
+
+  {
+    "token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJyb2xlIjoic2VwcCIsImV4cCI6MTY2ODE4ODQzN30.WSytcouNMQe44ZzOQit2AQsqTKFD5mIvT3z2uHwdoYY"
+  }
+
+
+
+A more sophisticated test at the REST level
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+Let us configure the :code:`foo` user correctly and add a table for him/her:
+
+.. code-block:: postgres
+
+  CREATE TABLE public.foobar(foo int, bar text, baz float);
+  ALTER TABLE public.foobar owner TO postgres;
+
+
+Now try to get the table's contents with:
+
+.. tabs::
+  
+  .. code-tab:: http
+
+    GET /foobar HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/foobar"
+
+
+This should fail --- of course, we haven't specified the user, thus PostgREST falls back to the :code:`anon` user and denies access.
+Add an :code:`Authorization` header. Please use the token value from the login function call above instead of the one provided below.
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /foobar HTTP/1.1
+    Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJyb2xlIjoiZm9vIiwiZXhwIjoxNjY4MTkyMjAyfQ.zzdHCBjfkqDQLQ8D7CHO3cIALF6KBCsfPTWgwhCiHCY
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/foobar" \
+      -H "Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJyb2xlIjoiZm9vIiwiZXhwIjoxNjY4MTkyMjAyfQ.zzdHCBjfkqDQLQ8D7CHO3cIALF6KBCsfPTWgwhCiHCY"
+
+
+This will fail again --- we get :code:`Permission denied to set role`. We forgot to allow the authenticator role to switch into this user by executing:
+
+.. code-block:: postgres
+
+  GRANT foo TO authenticator;
+
+
+Re-execute the last REST request. We fail again --- we also forgot to grant permissions for :code:`foo` on the table. Execute:
+
+.. code-block:: postgres
+
+   GRANT SELECT ON TABLE public.foobar TO foo;
+
+Now the REST request should succeed. An empty JSON array :code:`[]` is returned.
diff --git a/docs/index.rst b/docs/index.rst
index dcb1089fd..d5311d4ac 100644
--- a/docs/index.rst
+++ b/docs/index.rst
@@ -207,10 +207,12 @@ These are recipes that'll help you address specific use-cases.
    how-tos/working-with-postgresql-data-types
    how-tos/providing-images-for-img
    how-tos/create-soap-endpoint
+   how-tos/sql-user-management-using-postgres-users-and-passwords
 
 - :doc:`how-tos/providing-images-for-img`
 - :doc:`how-tos/working-with-postgresql-data-types`
 - :doc:`how-tos/create-soap-endpoint`
+- :doc:`how-tos/sql-user-management-using-postgres-users-and-passwords`
 
 Ecosystem
 ---------
diff --git a/postgrest.dict b/postgrest.dict
index 96eade670..671c29911 100644
--- a/postgrest.dict
+++ b/postgrest.dict
@@ -104,6 +104,7 @@ ORM
 ov
 passphrase
 Pawel
+PBKDF
 Pelletier
 Petr
 PgBouncer
@@ -113,6 +114,7 @@ pgrst
 pgrstX
 PGRSTX
 pgSQL
+authid
 phfts
 phraseto
 plainto
@@ -123,6 +125,8 @@ PostGIS
 PostgreSQL
 PostgreSQL's
 PostgREST
+postgres
+postgres's
 postgrest
 PostgREST's
 pre

From 8be87ed4ac1a0ebd672dab66616cfc635cbdd4fc Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Franz-Josef=20F=C3=A4rber?=
 <franz-josef.faerber@stmuk.bayern.de>
Date: Tue, 3 Jan 2023 16:03:06 +0100
Subject: [PATCH 533/652] Minor improvements to
 sql-user-management-using-postgres-users-and-passwords.rst

---
 ...ement-using-postgres-users-and-passwords.rst | 17 ++++++++---------
 1 file changed, 8 insertions(+), 9 deletions(-)

diff --git a/docs/how-tos/sql-user-management-using-postgres-users-and-passwords.rst b/docs/how-tos/sql-user-management-using-postgres-users-and-passwords.rst
index ea53a5d32..4dec8ed1f 100644
--- a/docs/how-tos/sql-user-management-using-postgres-users-and-passwords.rst
+++ b/docs/how-tos/sql-user-management-using-postgres-users-and-passwords.rst
@@ -6,14 +6,14 @@ SQL User Management using postgres' users and passwords
 :author: `fjf2002 <https://github.com/fjf2002>`_
 
 
-This is an alternative to :ref:`sql_user_management`, solely using the built-in table `pg_catalog.pg_authid <https://www.postgresql.org/docs/current/catalog-pg-authid.html>`_ for user management. This means
+This is an alternative to chapter :ref:`sql_user_management`, solely using the PostgreSQL built-in table `pg_catalog.pg_authid <https://www.postgresql.org/docs/current/catalog-pg-authid.html>`_ for user management. This means
 
 - no dedicated user table (aside from :code:`pg_authid`) is required
 
-- postgres' users and passwords (i. e. the stuff in :code:`pg_authid`) are also used at the postgrest level.
+- PostgreSQL's users and passwords (i. e. the stuff in :code:`pg_authid`) are also used at the PostgREST level.
 
 .. note::
-  Only postgres users with SCRAM-SHA-256 password hashes (the default since PostgreSQL v14) are supported.
+  Only PostgreSQL users with SCRAM-SHA-256 password hashes (the default since PostgreSQL v14) are supported.
 
 .. warning::
 
@@ -98,9 +98,7 @@ In order to be able to work with postgres' SCRAM-SHA-256 password hashes, we als
       FOR j IN 2 .. count LOOP
         the_last := ext_pgcrypto.HMAC(the_last, pw::bytea, algorithm);
         
-        --
         -- xor the two
-        --
         FOR k IN 1 .. length(xorsum) LOOP
           xorsum := set_byte(xorsum, k - 1, get_byte(xorsum, k - 1) # get_byte(the_last, k - 1));
         END LOOP;
@@ -140,7 +138,7 @@ But contrary to :ref:`sql_user_management`, this function does not use a dedicat
     CROSS JOIN LATERAL (SELECT ext_pgcrypto.digest(ext_pgcrypto.hmac('Client Key', digest_key, 'sha256'), 'sha256') AS stored_key, ext_pgcrypto.hmac('Server Key', digest_key, 'sha256') AS server_key) AS check_password_part
     WHERE rolpassword IS NOT NULL
       AND pg_authid.rolname = check_user_pass.username
-    -- verify password:
+      -- verify password:
       AND check_password_part.stored_key = stored_password_part.stored_key
       AND check_password_part.server_key = stored_password_part.server_key;
   $$;
@@ -152,7 +150,7 @@ But contrary to :ref:`sql_user_management`, this function does not use a dedicat
 Public User Interface
 ---------------------
 
-Analogous to :ref:`sql_user_management`, we create a login function which takes a username and password and returns JWT if the credentials match a user in the internal table.
+Analogous to :ref:`sql_user_management`, we create a login function which takes a username and password and returns a JWT if the credentials match a user in the internal table.
 Here we use the username instead of the email address to identify a user.
 
 
@@ -168,7 +166,7 @@ As described in :ref:`client_auth`, we'll create a JWT token inside our login fu
     token text
   );
 
-  -- if you are not using psql, you need to replace :dbname with the current database's name.
+  -- if you are not using psql, you need to replace :DBNAME with the current database's name.
   ALTER DATABASE :DBNAME SET "app.jwt_secret" to 'reallyreallyreallyreallyverysafe';
 
 
@@ -289,7 +287,8 @@ The response would look like the snippet below. Try decoding the token at `jwt.i
 
 A more sophisticated test at the REST level
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-Let us configure the :code:`foo` user correctly and add a table for him/her:
+Let's add a table, intended for the :code:`foo` user:
+
 
 .. code-block:: postgres
 

From 082b4183341010f526bb7c0d32ebc331f628191e Mon Sep 17 00:00:00 2001
From: Steve Chavez <stevechavezast@gmail.com>
Date: Sat, 28 Jan 2023 20:20:48 -0500
Subject: [PATCH 534/652] Add db-plan-enabled recommendation (#588)

* fix broken links
---
 docs/auth.rst          |  4 ++--
 docs/configuration.rst | 26 +++++++++++++++++++++++++-
 docs/ecosystem.rst     |  1 -
 3 files changed, 27 insertions(+), 4 deletions(-)

diff --git a/docs/auth.rst b/docs/auth.rst
index fb9db9999..eeb55c0b0 100644
--- a/docs/auth.rst
+++ b/docs/auth.rst
@@ -98,7 +98,7 @@ For PostgreSQL server version >= 14
 .. code:: sql
 
   current_setting('request.jwt.claims', true)::json->>'email';
-  
+
 
 For PostgreSQL server version < 14
 
@@ -292,7 +292,7 @@ JWT security
 
 There are at least three types of common critiques against using JWT: 1) against the standard itself, 2) against using libraries with known security vulnerabilities, and 3) against using JWT for web sessions. We'll briefly explain each critique, how PostgREST deals with it, and give recommendations for appropriate user action.
 
-The critique against the `JWT standard <https://datatracker.ietf.org/doc/html/rfc7519>`_ is voiced in detail `elsewhere on the web <https://paragonie.com/blog/2017/03/jwt-json-web-tokens-is-bad-standard-that-everyone-should-avoid>`_. The most relevant part for PostgREST is the so-called :code:`alg=none` issue. Some servers implementing JWT allow clients to choose the algorithm used to sign the JWT. In this case, an attacker could set the algorithm to :code:`none`, remove the need for any signature at all and gain unauthorized access. The current implementation of PostgREST, however, does not allow clients to set the signature algorithm in the HTTP request, making this attack irrelevant. The critique against the standard is that it requires the implementation of the :code:`alg=none` at all.
+The critique against the `JWT standard <https://datatracker.ietf.org/doc/html/rfc7519>`_ is voiced in detail `elsewhere on the web <https://web.archive.org/web/20230123041631/https://paragonie.com/blog/2017/03/jwt-json-web-tokens-is-bad-standard-that-everyone-should-avoid>`_. The most relevant part for PostgREST is the so-called :code:`alg=none` issue. Some servers implementing JWT allow clients to choose the algorithm used to sign the JWT. In this case, an attacker could set the algorithm to :code:`none`, remove the need for any signature at all and gain unauthorized access. The current implementation of PostgREST, however, does not allow clients to set the signature algorithm in the HTTP request, making this attack irrelevant. The critique against the standard is that it requires the implementation of the :code:`alg=none` at all.
 
 Critiques against JWT libraries are only relevant to PostgREST via the library it uses. As mentioned above, not allowing clients to choose the signature algorithm in HTTP requests removes the greatest risk. Another more subtle attack is possible where servers use asymmetric algorithms like RSA for signatures. Once again this is not relevant to PostgREST since it is not supported. Curious readers can find more information in `this article <https://auth0.com/blog/critical-vulnerabilities-in-json-web-token-libraries/>`_. Recommendations about high quality libraries for usage in API clients can be found on `jwt.io <https://jwt.io/>`_.
 
diff --git a/docs/configuration.rst b/docs/configuration.rst
index 1e45e1065..988eae8c9 100644
--- a/docs/configuration.rst
+++ b/docs/configuration.rst
@@ -160,7 +160,7 @@ db-pool-timeout          Int     3600
 db-pre-request           String                    Y
 db-prepared-statements   Boolean True              Y
 db-schemas               String  public            Y
-db-tx-end                String  commit            
+db-tx-end                String  commit
 db-uri                   String  postgresql://
 db-use-legacy-gucs       Boolean True              Y
 jwt-aud                  String                    Y
@@ -296,6 +296,30 @@ db-plan-enabled
 
   When this is set to :code:`true`, the execution plan of a request can be retrieved by using the :code:`Accept: application/vnd.pgrst.plan` header. See :ref:`explain_plan`.
 
+  It's recommended to use this in testing environments only since it reveals internal database details.
+  However, if you choose to use it in production you can add a :ref:`db-pre-request` to filter the requests that can use this feature.
+
+  For example, to only allow requests from an IP address to get the execution plans:
+
+  .. code-block:: postgresql
+
+   -- Assuming a proxy(Nginx, Cloudflare, etc) passes an "X-Forwarded-For" header(https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Forwarded-For)
+   create or replace function filter_plan_requests()
+   returns void as $$
+   declare
+     headers   json := current_setting('request.headers', true)::json;
+     client_ip text := coalesce(headers->>'x-forwarded-for', '');
+     accept    text := coalesce(headers->>'accept', '');
+   begin
+     if accept like 'application/vnd.pgrst.plan%' and client_ip != '144.96.121.73' then
+       raise insufficient_privilege using
+         message = 'Not allowed to use application/vnd.pgrst.plan';
+     end if;
+   end; $$ language plpgsql;
+
+   -- set this function on your postgrest.conf
+   -- db-pre-request = filter_plan_requests
+
 .. _db-pool:
 
 db-pool
diff --git a/docs/ecosystem.rst b/docs/ecosystem.rst
index 69f9eb350..2fe80a94e 100644
--- a/docs/ecosystem.rst
+++ b/docs/ecosystem.rst
@@ -89,7 +89,6 @@ Extensions
 * `aiodata <https://github.com/Exahilosys/aiodata>`_ - Python, event-based proxy and caching client.
 * `pg-safeupdate <https://github.com/eradman/pg-safeupdate>`_ - prevent full-table updates or deletes
 * `postgrest-auth (criles25) <https://github.com/criles25/postgrest-auth>`_ - email based auth/signup
-* `postgrest-auth (svmotn) <https://github.com/svmnotn/postgrest-auth>`_ - OAuth2-inspired external auth server
 * `postgrest-node <https://github.com/seveibar/postgrest-node>`_ - Run a PostgREST server in Node.js via npm module
 * `postgrest-oauth <https://github.com/nblumoe/postgrest-oauth>`_ - OAuth2 WAI middleware
 * `postgrest-oauth/api <https://github.com/postgrest-oauth/api>`_ - OAuth2 server

From 378a225a9b364f60175744f003b8c0a9a04c8ffb Mon Sep 17 00:00:00 2001
From: Laurence Isla <lau.isla.c@gmail.com>
Date: Thu, 9 Feb 2023 14:56:38 -0500
Subject: [PATCH 535/652] Add db-pool-acquisition-timeout configuration
 parameter

---
 docs/configuration.rst   | 81 ++++++++++++++++++++--------------------
 docs/releases/v6.0.2.rst |  2 +-
 2 files changed, 41 insertions(+), 42 deletions(-)

diff --git a/docs/configuration.rst b/docs/configuration.rst
index 988eae8c9..b479e5a56 100644
--- a/docs/configuration.rst
+++ b/docs/configuration.rst
@@ -108,7 +108,7 @@ It's not possible to change :ref:`env_variables_config` for a running process an
     * :ref:`admin-server-port`
     * :ref:`db-uri`
     * :ref:`db-pool`
-    * :ref:`db-pool-timeout`
+    * :ref:`db-pool-acquisition-timeout`
     * :ref:`server-host`
     * :ref:`server-port`
     * :ref:`server-unix-socket`
@@ -143,40 +143,40 @@ The ``"pgrst"`` notification channel is enabled by default. For configuring the
 List of parameters
 ==================
 
-======================== ======= ================= ==========
-Name                     Type    Default           Reloadable
-======================== ======= ================= ==========
-admin-server-port        Int
-app.settings.*           String                    Y
-db-anon-role             String                    Y
-db-channel               String  pgrst             Y
-db-channel-enabled       Boolean True              Y
-db-config                Boolean True              Y
-db-extra-search-path     String  public            Y
-db-max-rows              Int     ∞                 Y
-db-plan-enabled          Boolean False             Y
-db-pool                  Int     10
-db-pool-timeout          Int     3600
-db-pre-request           String                    Y
-db-prepared-statements   Boolean True              Y
-db-schemas               String  public            Y
-db-tx-end                String  commit
-db-uri                   String  postgresql://
-db-use-legacy-gucs       Boolean True              Y
-jwt-aud                  String                    Y
-jwt-role-claim-key       String  .role             Y
-jwt-secret               String                    Y
-jwt-secret-is-base64     Boolean False             Y
-log-level                String  error             Y
-openapi-mode             String  follow-privileges Y
-openapi-security-active  Boolean False             Y
-openapi-server-proxy-uri String                    Y
-raw-media-types          String                    Y
-server-host              String  !4
-server-port              Int     3000
-server-unix-socket       String
-server-unix-socket-mode  String  660
-======================== ======= ================= ==========
+=========================== ======= ================= ==========
+Name                        Type    Default           Reloadable
+=========================== ======= ================= ==========
+admin-server-port           Int
+app.settings.*              String                    Y
+db-anon-role                String                    Y
+db-channel                  String  pgrst             Y
+db-channel-enabled          Boolean True              Y
+db-config                   Boolean True              Y
+db-extra-search-path        String  public            Y
+db-max-rows                 Int     ∞                 Y
+db-plan-enabled             Boolean False             Y
+db-pool                     Int     10
+db-pool-acquisition-timeout Int     ∞
+db-pre-request              String                    Y
+db-prepared-statements      Boolean True              Y
+db-schemas                  String  public            Y
+db-tx-end                   String  commit
+db-uri                      String  postgresql://
+db-use-legacy-gucs          Boolean True              Y
+jwt-aud                     String                    Y
+jwt-role-claim-key          String  .role             Y
+jwt-secret                  String                    Y
+jwt-secret-is-base64        Boolean False             Y
+log-level                   String  error             Y
+openapi-mode                String  follow-privileges Y
+openapi-security-active     Boolean False             Y
+openapi-server-proxy-uri    String                    Y
+raw-media-types             String                    Y
+server-host                 String  !4
+server-port                 Int     3000
+server-unix-socket          String
+server-unix-socket-mode     String  660
+=========================== ======= ================= ==========
 
 .. _admin-server-port:
 
@@ -332,18 +332,17 @@ db-pool
 
   Number of connections to keep open in PostgREST's database pool. Having enough here for the maximum expected simultaneous client connections can improve performance. Note it's pointless to set this higher than the :code:`max_connections` GUC in your database.
 
-.. _db-pool-timeout:
+.. _db-pool-acquisition-timeout:
 
-db-pool-timeout
----------------
+db-pool-acquisition-timeout
+---------------------------
 
   =============== =================
-  **Environment** PGRST_DB_POOL_TIMEOUT
+  **Environment** PGRST_DB_POOL_ACQUISITION_TIMEOUT
   **In-Database** `n/a`
   =============== =================
 
-   Time to live, in seconds, for an idle database pool connection. If the timeout is reached the connection will be closed.
-   Once a new request arrives a new connection will be started.
+  Specifies the maximum time in seconds that the request will wait for the pool to free up a connection slot to the database. If it times out without acquiring a connection, then the request is aborted and a ``504`` error is returned.
 
 .. _db-pre-request:
 
diff --git a/docs/releases/v6.0.2.rst b/docs/releases/v6.0.2.rst
index f96550515..47f870e44 100644
--- a/docs/releases/v6.0.2.rst
+++ b/docs/releases/v6.0.2.rst
@@ -26,7 +26,7 @@ Added
 * It's now possible to request a ``text/plain`` output. See :ref:`scalar_return_formats`.
   |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
 
-* Config option for specifying PostgREST database pool timeout. See :ref:`db-pool-timeout`.
+* Config option for specifying PostgREST database pool timeout ``db-pool-timeout``.
   |br| -- `@Qu4tro <https://github.com/Qu4tro>`_
 
 * Config option for binding the PostgREST web server to an unix socket. See :ref:`server-unix-socket`.

From 6b65a5b15187db359a670793085b0a8d4ff31c5c Mon Sep 17 00:00:00 2001
From: Laurence Isla <lau.isla.c@gmail.com>
Date: Thu, 9 Feb 2023 16:48:17 -0500
Subject: [PATCH 536/652] Add HTTP status codes to PGRST errors (#590)

---
 docs/errors.rst | 283 +++++++++++++++++++++++++-----------------------
 postgrest.dict  |   1 -
 2 files changed, 149 insertions(+), 135 deletions(-)

diff --git a/docs/errors.rst b/docs/errors.rst
index e3473e487..affeb12b2 100644
--- a/docs/errors.rst
+++ b/docs/errors.rst
@@ -125,21 +125,25 @@ Group 0 - Connection
 
 Related to the connection with the database.
 
-+---------------+-------------------------------------------------------------+
-| Code          | Description                                                 |
-+===============+=============================================================+
-| .. _pgrst000: | Could not connect with the database due to an incorrect     |
-|               | :ref:`db-uri` or due to the PostgreSQL service not running. |
-| PGRST000      |                                                             |
-+---------------+-------------------------------------------------------------+
-| .. _pgrst001: | Could not connect with the database due to an internal      |
-|               | error.                                                      |
-| PGRST001      |                                                             |
-+---------------+-------------------------------------------------------------+
-| .. _pgrst002: | Could not connect with the database when building the       |
-|               | :ref:`schema_cache` due to the PostgreSQL service not       |
-| PGRST002      | running.                                                    |
-+---------------+-------------------------------------------------------------+
++---------------+-------------+-------------------------------------------------------------+
+| Code          | HTTP status | Description                                                 |
++===============+=============+=============================================================+
+| .. _pgrst000: | 503         | Could not connect with the database due to an incorrect     |
+|               |             | :ref:`db-uri` or due to the PostgreSQL service not running. |
+| PGRST000      |             |                                                             |
++---------------+-------------+-------------------------------------------------------------+
+| .. _pgrst001: | 503         | Could not connect with the database due to an internal      |
+|               |             | error.                                                      |
+| PGRST001      |             |                                                             |
++---------------+-------------+-------------------------------------------------------------+
+| .. _pgrst002: | 503         | Could not connect with the database when building the       |
+|               |             | :ref:`schema_cache` due to the PostgreSQL service not       |
+| PGRST002      |             | running.                                                    |
++---------------+-------------+-------------------------------------------------------------+
+| .. _pgrst003: | 503         | The request time exceeded the timeout specified in          |
+|               |             | :ref:`db-pool-acquisition-timeout`.                         |
+| PGRST003      |             |                                                             |
++---------------+-------------+-------------------------------------------------------------+
 
 .. _pgrst1**:
 
@@ -148,82 +152,89 @@ Group 1 - Api Request
 
 Related to the HTTP request elements.
 
-+---------------+-------------------------------------------------------------+
-| Code          | Description                                                 |
-+===============+=============================================================+
-| .. _pgrst100: | Parsing error in the query string parameter.                |
-|               | See :ref:`h_filter`, :ref:`operators` and :ref:`ordering`.  |
-| PGRST100      |                                                             |
-+---------------+-------------------------------------------------------------+
-| .. _pgrst101: | For :ref:`functions <s_procs>`, only ``GET`` and ``POST``   |
-|               | verbs are allowed. Any other verb will throw this error.    |
-| PGRST101      |                                                             |
-+---------------+-------------------------------------------------------------+
-| .. _pgrst102: | An invalid request body was sent(e.g. an empty body or      |
-|               | malformed JSON).                                            |
-| PGRST102      |                                                             |
-+---------------+-------------------------------------------------------------+
-| .. _pgrst103: | An invalid range was specified for :ref:`limits`.           |
-|               |                                                             |
-| PGRST103      |                                                             |
-+---------------+-------------------------------------------------------------+
-| .. _pgrst104: | Either the :ref:`filter operator <operators>` is missing    |
-|               | or it doesn't exist.                                        |
-| PGRST104      |                                                             |
-+---------------+-------------------------------------------------------------+
-| .. _pgrst105: | An invalid :ref:`PUT <upsert_put>` request was done         |
-|               |                                                             |
-| PGRST105      |                                                             |
-+---------------+-------------------------------------------------------------+
-| .. _pgrst106: | The schema specified when                                   |
-|               | :ref:`switching schemas <multiple-schemas>` is not present  |
-| PGRST106      | in the :ref:`db-schemas` configuration variable.            |
-+---------------+-------------------------------------------------------------+
-| .. _pgrst107: | The ``Content-Type`` sent in the request is invalid.        |
-|               |                                                             |
-| PGRST107      |                                                             |
-+---------------+-------------------------------------------------------------+
-| .. _pgrst108: | The filter is applied to a embedded resource that is not    |
-|               | specified in the ``select`` part of the query string.       |
-| PGRST108      | See :ref:`embed_filters`.                                   |
-+---------------+-------------------------------------------------------------+
-| .. _pgrst109: | Restricting a Deletion or an Update using limits must       |
-|               | include the ordering of a unique column.                    |
-| PGRST109      | See :ref:`limited_update_delete`.                           |
-+---------------+-------------------------------------------------------------+
-| .. _pgrst110: | When restricting a Deletion or an Update using limits       |
-|               | modifies more rows than the maximum specified in the limit. |
-| PGRST110      | See :ref:`limited_update_delete`.                           |
-+---------------+-------------------------------------------------------------+
-| .. _pgrst111: | An invalid ``response.headers`` was set.                    |
-|               | See :ref:`guc_resp_hdrs`.                                   |
-| PGRST111      |                                                             |
-+---------------+-------------------------------------------------------------+
-| .. _pgrst112: | The status code must be a positive integer.                 |
-|               | See :ref:`guc_resp_status`.                                 |
-| PGRST112      |                                                             |
-+---------------+-------------------------------------------------------------+
-| .. _pgrst113: | More than one column was returned for a scalar result.      |
-|               | See :ref:`scalar_return_formats`.                           |
-|               |                                                             |
-| PGRST113      |                                                             |
-+---------------+-------------------------------------------------------------+
-| .. _pgrst114: | For an :ref:`UPSERT using PUT <upsert_put>`, when           |
-|               | :ref:`limits and offsets <limits>` are used.                |
-| PGRST114      |                                                             |
-+---------------+-------------------------------------------------------------+
-| .. _pgrst115: | For an :ref:`UPSERT using PUT <upsert_put>`, when the       |
-|               | primary key in the query string and the body are different. |
-| PGRST115      |                                                             |
-+---------------+-------------------------------------------------------------+
-| .. _pgrst116: | More than 1 or no items where returned when requesting      |
-|               | a singular response. See :ref:`singular_plural`.            |
-| PGRST116      |                                                             |
-+---------------+-------------------------------------------------------------+
-| .. _pgrst117: | The HTTP verb used in the request in not supported.         |
-|               |                                                             |
-| PGRST117      |                                                             |
-+---------------+-------------------------------------------------------------+
++---------------+-------------+-------------------------------------------------------------+
+| Code          | HTTP status | Description                                                 |
++===============+=============+=============================================================+
+| .. _pgrst100: | 400         | Parsing error in the query string parameter.                |
+|               |             | See :ref:`h_filter`, :ref:`operators` and :ref:`ordering`.  |
+| PGRST100      |             |                                                             |
++---------------+-------------+-------------------------------------------------------------+
+| .. _pgrst101: | 405         | For :ref:`functions <s_procs>`, only ``GET`` and ``POST``   |
+|               |             | verbs are allowed. Any other verb will throw this error.    |
+| PGRST101      |             |                                                             |
++---------------+-------------+-------------------------------------------------------------+
+| .. _pgrst102: | 400         | An invalid request body was sent(e.g. an empty body or      |
+|               |             | malformed JSON).                                            |
+| PGRST102      |             |                                                             |
++---------------+-------------+-------------------------------------------------------------+
+| .. _pgrst103: | 416         | An invalid range was specified for :ref:`limits`.           |
+|               |             |                                                             |
+| PGRST103      |             |                                                             |
++---------------+-------------+-------------------------------------------------------------+
+| .. _pgrst105: | 405         | An invalid :ref:`PUT <upsert_put>` request was done         |
+|               |             |                                                             |
+| PGRST105      |             |                                                             |
++---------------+-------------+-------------------------------------------------------------+
+| .. _pgrst106: | 406         | The schema specified when                                   |
+|               |             | :ref:`switching schemas <multiple-schemas>` is not present  |
+| PGRST106      |             | in the :ref:`db-schemas` configuration variable.            |
++---------------+-------------+-------------------------------------------------------------+
+| .. _pgrst107: | 415         | The ``Content-Type`` sent in the request is invalid.        |
+|               |             |                                                             |
+| PGRST107      |             |                                                             |
++---------------+-------------+-------------------------------------------------------------+
+| .. _pgrst108: | 400         | The filter is applied to a embedded resource that is not    |
+|               |             | specified in the ``select`` part of the query string.       |
+| PGRST108      |             | See :ref:`embed_filters`.                                   |
++---------------+-------------+-------------------------------------------------------------+
+| .. _pgrst109: | 400         | Restricting a Deletion or an Update using limits must       |
+|               |             | include the ordering of a unique column.                    |
+| PGRST109      |             | See :ref:`limited_update_delete`.                           |
++---------------+-------------+-------------------------------------------------------------+
+| .. _pgrst110: | 400         | When restricting a Deletion or an Update using limits       |
+|               |             | modifies more rows than the maximum specified in the limit. |
+| PGRST110      |             | See :ref:`limited_update_delete`.                           |
++---------------+-------------+-------------------------------------------------------------+
+| .. _pgrst111: | 500         | An invalid ``response.headers`` was set.                    |
+|               |             | See :ref:`guc_resp_hdrs`.                                   |
+| PGRST111      |             |                                                             |
++---------------+-------------+-------------------------------------------------------------+
+| .. _pgrst112: | 500         | The status code must be a positive integer.                 |
+|               |             | See :ref:`guc_resp_status`.                                 |
+| PGRST112      |             |                                                             |
++---------------+-------------+-------------------------------------------------------------+
+| .. _pgrst113: | 406         | More than one column was returned for a scalar result.      |
+|               |             | See :ref:`scalar_return_formats`.                           |
+| PGRST113      |             |                                                             |
++---------------+-------------+-------------------------------------------------------------+
+| .. _pgrst114: | 400         | For an :ref:`UPSERT using PUT <upsert_put>`, when           |
+|               |             | :ref:`limits and offsets <limits>` are used.                |
+| PGRST114      |             |                                                             |
++---------------+-------------+-------------------------------------------------------------+
+| .. _pgrst115: | 400         | For an :ref:`UPSERT using PUT <upsert_put>`, when the       |
+|               |             | primary key in the query string and the body are different. |
+| PGRST115      |             |                                                             |
++---------------+-------------+-------------------------------------------------------------+
+| .. _pgrst116: | 406         | More than 1 or no items where returned when requesting      |
+|               |             | a singular response. See :ref:`singular_plural`.            |
+| PGRST116      |             |                                                             |
++---------------+-------------+-------------------------------------------------------------+
+| .. _pgrst117: | 405         | The HTTP verb used in the request in not supported.         |
+|               |             |                                                             |
+| PGRST117      |             |                                                             |
++---------------+-------------+-------------------------------------------------------------+
+| .. _pgrst118: | 400         | Could not order the result using the related table because  |
+|               |             | there is no many-to-one or one-to-one relationship between  |
+| PGRST118      |             | them.                                                       |
++---------------+-------------+-------------------------------------------------------------+
+| .. _pgrst119: | 400         | Could not use the spread operator on the related table      |
+|               |             | because there is no many-to-one or one-to-one relationship  |
+| PGRST119      |             | between them.                                               |
++---------------+-------------+-------------------------------------------------------------+
+| .. _pgrst120: | 400         | An embedded resource can only be filtered using the         |
+|               |             | ``is.null`` or ``not.is.null`` :ref:`operators <operators>`.|
+| PGRST120      |             |                                                             |
++---------------+-------------+-------------------------------------------------------------+
 
 .. _pgrst2**:
 
@@ -232,27 +243,31 @@ Group 2 - Schema Cache
 
 Related to a :ref:`stale schema cache <stale_schema>`. Most of the time, these errors are solved by :ref:`reloading the schema cache <schema_reloading>`.
 
-+---------------+-------------------------------------------------------------+
-| Code          | Description                                                 |
-+===============+=============================================================+
-| .. _pgrst200: | Caused by :ref:`stale_fk_relationships`, otherwise any of   |
-|               | the embedding resources or the relationship itself may not  |
-| PGRST200      | exist in the database.                                      |
-+---------------+-------------------------------------------------------------+
-| .. _pgrst201: | An ambiguous embedding request was made.                    |
-|               | See :ref:`embed_disamb`.                                    |
-| PGRST201      |                                                             |
-+---------------+-------------------------------------------------------------+
-| .. _pgrst202: | Caused by a :ref:`stale_function_signature`, otherwise      |
-|               | the function may not exist in the database.                 |
-| PGRST202      |                                                             |
-+---------------+-------------------------------------------------------------+
-| .. _pgrst203: | Caused by requesting overloaded functions with the same     |
-|               | argument names but different types, or by using a ``POST``  |
-| PGRST203      | verb to request overloaded functions with a ``JSON`` or     |
-|               | ``JSONB`` type unnamed parameter. The solution is to rename |
-|               | the function or add/modify the names of the arguments.      |
-+---------------+-------------------------------------------------------------+
++---------------+-------------+-------------------------------------------------------------+
+| Code          | HTTP status | Description                                                 |
++===============+=============+=============================================================+
+| .. _pgrst200: | 400         | Caused by :ref:`stale_fk_relationships`, otherwise any of   |
+|               |             | the embedding resources or the relationship itself may not  |
+| PGRST200      |             | exist in the database.                                      |
++---------------+-------------+-------------------------------------------------------------+
+| .. _pgrst201: | 300         | An ambiguous embedding request was made.                    |
+|               |             | See :ref:`embed_disamb`.                                    |
+| PGRST201      |             |                                                             |
++---------------+-------------+-------------------------------------------------------------+
+| .. _pgrst202: | 404         | Caused by a :ref:`stale_function_signature`, otherwise      |
+|               |             | the function may not exist in the database.                 |
+| PGRST202      |             |                                                             |
++---------------+-------------+-------------------------------------------------------------+
+| .. _pgrst203: | 300         | Caused by requesting overloaded functions with the same     |
+|               |             | argument names but different types, or by using a ``POST``  |
+| PGRST203      |             | verb to request overloaded functions with a ``JSON`` or     |
+|               |             | ``JSONB`` type unnamed parameter. The solution is to rename |
+|               |             | the function or add/modify the names of the arguments.      |
++---------------+-------------+-------------------------------------------------------------+
+| .. _pgrst204: | 400         | Caused when the :ref:`column specified <specify_columns>`   |
+|               |             | in the ``columns`` query parameter is not found.            |
+| PGRST204      |             |                                                             |
++---------------+-------------+-------------------------------------------------------------+
 
 .. _pgrst3**:
 
@@ -261,21 +276,21 @@ Group 3 - JWT
 
 Related to the authentication process using JWT. You can follow the :ref:`tut1` for an example on how to implement authentication and the :doc:`Authentication page <auth>` for more information on this process.
 
-+---------------+-------------------------------------------------------------+
-| Code          | Description                                                 |
-+===============+=============================================================+
-| .. _pgrst300: | A :ref:`JWT secret <jwt-secret>` is missing from the        |
-|               | configuration.                                              |
-| PGRST300      |                                                             |
-+---------------+-------------------------------------------------------------+
-| .. _pgrst301: | Any error related to the verification of the JWT,           |
-|               | which means that the JWT provided is invalid in some way.   |
-| PGRST301      |                                                             |
-+---------------+-------------------------------------------------------------+
-| .. _pgrst302: | Attempted to do a request without                           |
-|               | :ref:`authentication <client_auth>` when the anonymous role |
-| PGRST302      | is disabled by not setting it in :ref:`db-anon-role`.       |
-+---------------+-------------------------------------------------------------+
++---------------+-------------+-------------------------------------------------------------+
+| Code          | HTTP status | Description                                                 |
++===============+=============+=============================================================+
+| .. _pgrst300: | 500         | A :ref:`JWT secret <jwt-secret>` is missing from the        |
+|               |             | configuration.                                              |
+| PGRST300      |             |                                                             |
++---------------+-------------+-------------------------------------------------------------+
+| .. _pgrst301: | 401         | Any error related to the verification of the JWT,           |
+|               |             | which means that the JWT provided is invalid in some way.   |
+| PGRST301      |             |                                                             |
++---------------+-------------+-------------------------------------------------------------+
+| .. _pgrst302: | 401         | Attempted to do a request without                           |
+|               |             | :ref:`authentication <client_auth>` when the anonymous role |
+| PGRST302      |             | is disabled by not setting it in :ref:`db-anon-role`.       |
++---------------+-------------+-------------------------------------------------------------+
 
 .. The Internal Errors Group X** is always at the end
 
@@ -286,10 +301,10 @@ Group X - Internal
 
 Internal errors. If you encounter any of these, you may have stumbled on a PostgREST bug, please `open an issue <https://github.com/PostgREST/postgrest/issues>`_ and we'll be glad to fix it.
 
-+---------------+-------------------------------------------------------------+
-| Code          | Description                                                 |
-+===============+=============================================================+
-| .. _pgrstX00: | Internal errors related to the library used for connecting  |
-|               | to the database.                                            |
-| PGRSTX00      |                                                             |
-+---------------+-------------------------------------------------------------+
++---------------+-------------+-------------------------------------------------------------+
+| Code          | HTTP status | Description                                                 |
++===============+=============+=============================================================+
+| .. _pgrstX00: | 500         | Internal errors related to the library used for connecting  |
+|               |             | to the database.                                            |
+| PGRSTX00      |             |                                                             |
++---------------+-------------+-------------------------------------------------------------+
diff --git a/postgrest.dict b/postgrest.dict
index 671c29911..789cdcdf4 100644
--- a/postgrest.dict
+++ b/postgrest.dict
@@ -126,7 +126,6 @@ PostgreSQL
 PostgreSQL's
 PostgREST
 postgres
-postgres's
 postgrest
 PostgREST's
 pre

From 6089a462356fbc21c9849cebcd305b057d12a88c Mon Sep 17 00:00:00 2001
From: Ian Eyberg <ian@opuler.com>
Date: Thu, 9 Feb 2023 15:43:11 -0800
Subject: [PATCH 537/652] adding link to ops unikernel package (#586)

---
 docs/ecosystem.rst | 1 +
 postgrest.dict     | 2 ++
 2 files changed, 3 insertions(+)

diff --git a/docs/ecosystem.rst b/docs/ecosystem.rst
index 2fe80a94e..f9fadfb57 100644
--- a/docs/ecosystem.rst
+++ b/docs/ecosystem.rst
@@ -63,6 +63,7 @@ DevOps
 * `cloudstark/helm-charts <https://github.com/cloudstark/helm-charts/tree/master/postgrest>`_ - helm chart to deploy PostgREST to a Kubernetes cluster via a Deployment and Service
 * `jbkarle/postgrest <https://github.com/jbkarle/postgrest>`_ - helm chart with a demo database for development and test purposes
 * `Limezest/postgrest-cloud-run <https://github.com/Limezest/postgrest-cloud-run>`_ - expose a PostgreSQL database on Cloud SQL using Cloud Run
+* `eyberg/postgrest <https://repo.ops.city/v2/packages/eyberg/postgrest/10.1.1/x86_64/show>`_ - run PostgREST as a Nanos unikernel
 
 .. _eco_external_notification:
 
diff --git a/postgrest.dict b/postgrest.dict
index 789cdcdf4..102642e31 100644
--- a/postgrest.dict
+++ b/postgrest.dict
@@ -89,6 +89,7 @@ multi
 MVCC
 namespace
 namespaced
+Nanos
 neq
 nginx
 ngrep
@@ -185,6 +186,7 @@ TypeScript
 UI
 ui
 unicode
+unikernel
 unix
 updatable
 UPSERT

From 87b383316d25932412dae20485f172430c9bb931 Mon Sep 17 00:00:00 2001
From: Steve Chavez <stevechavezast@gmail.com>
Date: Mon, 13 Feb 2023 11:06:22 -0500
Subject: [PATCH 538/652] fix: PGRST003 status code to 504 (#594)

---
 docs/errors.rst | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/docs/errors.rst b/docs/errors.rst
index affeb12b2..2d13faa98 100644
--- a/docs/errors.rst
+++ b/docs/errors.rst
@@ -140,8 +140,8 @@ Related to the connection with the database.
 |               |             | :ref:`schema_cache` due to the PostgreSQL service not       |
 | PGRST002      |             | running.                                                    |
 +---------------+-------------+-------------------------------------------------------------+
-| .. _pgrst003: | 503         | The request time exceeded the timeout specified in          |
-|               |             | :ref:`db-pool-acquisition-timeout`.                         |
+| .. _pgrst003: | 504         | The request timed out waiting for a pool connection         |
+|               |             | to be available. See :ref:`db-pool-acquisition-timeout`.    |
 | PGRST003      |             |                                                             |
 +---------------+-------------+-------------------------------------------------------------+
 

From adeb622d31697ce11d9b15e3c614d6f159c3e662 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 13 Feb 2023 12:34:33 -0500
Subject: [PATCH 539/652] Bump cachix/install-nix-action from 18 to 19 (#593)

Bumps [cachix/install-nix-action](https://github.com/cachix/install-nix-action) from 18 to 19.
- [Release notes](https://github.com/cachix/install-nix-action/releases)
- [Commits](https://github.com/cachix/install-nix-action/compare/v18...v19)

---
updated-dependencies:
- dependency-name: cachix/install-nix-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/ci.yaml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 18290bff2..ac19ad081 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -16,7 +16,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v3
-    - uses: cachix/install-nix-action@v18
+    - uses: cachix/install-nix-action@v19
     - run: nix-env -f default.nix -iA build
     - run: postgrest-docs-build
 
@@ -25,7 +25,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v3
-    - uses: cachix/install-nix-action@v18
+    - uses: cachix/install-nix-action@v19
     - run: nix-env -f default.nix -iA spellcheck
     - run: postgrest-docs-spellcheck
 
@@ -35,7 +35,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v3
-    - uses: cachix/install-nix-action@v18
+    - uses: cachix/install-nix-action@v19
     - run: nix-env -f default.nix -iA linkcheck
     - run: postgrest-docs-linkcheck
     

From cf8ced10146c005105853b87b60198114cbd43a1 Mon Sep 17 00:00:00 2001
From: Steve Chavez <stevechavezast@gmail.com>
Date: Mon, 13 Feb 2023 22:29:38 -0500
Subject: [PATCH 540/652] remove wrong claim about CSV being faster (#595)

---
 docs/api.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/api.rst b/docs/api.rst
index c40b747dd..dbd38c6f2 100644
--- a/docs/api.rst
+++ b/docs/api.rst
@@ -1748,7 +1748,7 @@ URL encoded payloads can be posted with ``Content-Type: application/x-www-form-u
 Bulk Insert
 -----------
 
-Bulk insert works exactly like single row insert except that you provide either a JSON array of objects having uniform keys, or lines in CSV format. This not only minimizes the HTTP requests required but uses a single INSERT statement on the back-end for efficiency. Note that using CSV requires less parsing on the server and is much faster.
+Bulk insert works exactly like single row insert except that you provide either a JSON array of objects having uniform keys, or lines in CSV format. This not only minimizes the HTTP requests required but uses a single INSERT statement on the back-end for efficiency.
 
 To bulk insert CSV simply post to a table route with :code:`Content-Type: text/csv` and include the names of the columns as the first row. For instance
 

From 6da204d5545055db8877c9b3c9de86d52c920e47 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 6 Mar 2023 11:17:46 -0500
Subject: [PATCH 541/652] Bump cachix/install-nix-action from 19 to 20 (#597)

Bumps [cachix/install-nix-action](https://github.com/cachix/install-nix-action) from 19 to 20.
- [Release notes](https://github.com/cachix/install-nix-action/releases)
- [Commits](https://github.com/cachix/install-nix-action/compare/v19...v20)

---
updated-dependencies:
- dependency-name: cachix/install-nix-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/ci.yaml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index ac19ad081..c3bc41829 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -16,7 +16,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v3
-    - uses: cachix/install-nix-action@v19
+    - uses: cachix/install-nix-action@v20
     - run: nix-env -f default.nix -iA build
     - run: postgrest-docs-build
 
@@ -25,7 +25,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v3
-    - uses: cachix/install-nix-action@v19
+    - uses: cachix/install-nix-action@v20
     - run: nix-env -f default.nix -iA spellcheck
     - run: postgrest-docs-spellcheck
 
@@ -35,7 +35,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v3
-    - uses: cachix/install-nix-action@v19
+    - uses: cachix/install-nix-action@v20
     - run: nix-env -f default.nix -iA linkcheck
     - run: postgrest-docs-linkcheck
     

From f588bb6daf791bfc307c8f73f03c112a6294cfbb Mon Sep 17 00:00:00 2001
From: Laurence Isla <lau.isla.c@gmail.com>
Date: Thu, 13 Apr 2023 18:38:07 -0500
Subject: [PATCH 542/652] Fix info on updates without filters

---
 docs/api.rst | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/docs/api.rst b/docs/api.rst
index dbd38c6f2..caaefa5c9 100644
--- a/docs/api.rst
+++ b/docs/api.rst
@@ -1866,10 +1866,12 @@ To update a row or rows in a table, use the PATCH verb. Use :ref:`h_filter` to s
       -X PATCH -H "Content-Type: application/json" \
       -d '{ "category": "child" }'
 
-Doing a full table update without filters is not allowed and will result in 0 updated rows. To make a an update without filters, you must limit the rows affected. See :ref:`limited_update_delete`.
-
 Updates also support :code:`Prefer: return=representation` plus :ref:`v_filter`.
 
+.. warning::
+
+  Beware of accidentally updating every row in a table. To learn to prevent that see :ref:`block_fulltable`.
+
 .. _upsert:
 
 Upsert

From 3ff9b81c7d8273e2b3d03029b67d58c721245f17 Mon Sep 17 00:00:00 2001
From: Steve Chavez <stevechavezast@gmail.com>
Date: Tue, 18 Apr 2023 12:43:15 -0500
Subject: [PATCH 543/652] Remove public from schema cache event trigger

---
 docs/schema_cache.rst | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/docs/schema_cache.rst b/docs/schema_cache.rst
index 5e5fce3a6..c966a3990 100644
--- a/docs/schema_cache.rst
+++ b/docs/schema_cache.rst
@@ -147,7 +147,7 @@ You can do automatic schema cache reloading in a pure SQL way and forget about s
 .. code-block:: postgresql
 
   -- Create an event trigger function
-  CREATE OR REPLACE FUNCTION public.pgrst_watch() RETURNS event_trigger
+  CREATE OR REPLACE FUNCTION pgrst_watch() RETURNS event_trigger
     LANGUAGE plpgsql
     AS $$
   BEGIN
@@ -158,7 +158,7 @@ You can do automatic schema cache reloading in a pure SQL way and forget about s
   -- This event trigger will fire after every ddl_command_end event
   CREATE EVENT TRIGGER pgrst_watch
     ON ddl_command_end
-    EXECUTE PROCEDURE public.pgrst_watch();
+    EXECUTE PROCEDURE pgrst_watch();
 
 Now, whenever the ``pgrst_watch`` trigger is fired in the database, PostgREST will automatically reload the schema cache.
 

From 516a4daacf3e86d5a4a9364eebbc6c3b37a4cfda Mon Sep 17 00:00:00 2001
From: Steve Chavez <stevechavezast@gmail.com>
Date: Tue, 18 Apr 2023 17:13:40 -0500
Subject: [PATCH 544/652] snippet for computed rel overload

---
 docs/api.rst | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/docs/api.rst b/docs/api.rst
index caaefa5c9..1e5e10c46 100644
--- a/docs/api.rst
+++ b/docs/api.rst
@@ -1168,6 +1168,12 @@ For example, to override the :ref:`many-to-one relationship <many-to-one>` betwe
 
 Taking advantage of overloaded functions, you can use the same function name for different parameters and thus define relationships from other tables/views to ``directors``.
 
+.. code-block:: postgres
+
+  create function directors(film_schools) returns setof directors as $$
+    select * from directors where film_school_id = $1.id
+  $$ stable language sql;
+
 Computed relationships have good performance as they follow the `Inlining conditions for table functions <https://wiki.postgresql.org/wiki/Inlining_of_SQL_functions#Inlining_conditions_for_table_functions>`_.
 
 .. _nested_embedding:

From f55ced0306c7018a930c81fb635ba1aa4829b202 Mon Sep 17 00:00:00 2001
From: Laurence Isla <lau.isla.c@gmail.com>
Date: Fri, 21 Apr 2023 17:04:31 -0500
Subject: [PATCH 545/652] Add a warning when working with computed
 relationships

---
 docs/api.rst | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/docs/api.rst b/docs/api.rst
index 1e5e10c46..a9483635e 100644
--- a/docs/api.rst
+++ b/docs/api.rst
@@ -1174,7 +1174,13 @@ Taking advantage of overloaded functions, you can use the same function name for
     select * from directors where film_school_id = $1.id
   $$ stable language sql;
 
-Computed relationships have good performance as they follow the `Inlining conditions for table functions <https://wiki.postgresql.org/wiki/Inlining_of_SQL_functions#Inlining_conditions_for_table_functions>`_.
+Computed relationships have good performance as their intended design follow the `Inlining conditions for table functions <https://wiki.postgresql.org/wiki/Inlining_of_SQL_functions#Inlining_conditions_for_table_functions>`_.
+
+.. warning::
+
+  - Always use ``SETOF`` when creating computed relationships. Functions can return a table without using ``SETOF``, but bear in mind that they will not be inlined.
+
+  - Make sure to correctly label the ``to-one`` part of the relationship. When using the ``ROWS 1`` estimation, PostgREST will expect a single row to be returned. If that is not the case, then it will unnest the embedding and return repeated values for the top level resource.
 
 .. _nested_embedding:
 

From 424eac4b3ea22cd2c4e8fa47988cb8485b04e92f Mon Sep 17 00:00:00 2001
From: Laurence Isla <lau.isla.c@gmail.com>
Date: Fri, 21 Apr 2023 11:29:05 -0500
Subject: [PATCH 546/652] Add documentation for v10.2.0

Co-authored-by: Steve Chavez <stevechavezast@gmail.com>
---
 docs/configuration.rst    |  16 +++-
 docs/index.rst            |   1 +
 docs/install.rst          |   2 +
 docs/releases/v10.2.0.rst | 153 ++++++++++++++++++++++++++++++++++++++
 4 files changed, 171 insertions(+), 1 deletion(-)
 create mode 100644 docs/releases/v10.2.0.rst

diff --git a/docs/configuration.rst b/docs/configuration.rst
index b479e5a56..a2b41a303 100644
--- a/docs/configuration.rst
+++ b/docs/configuration.rst
@@ -109,6 +109,7 @@ It's not possible to change :ref:`env_variables_config` for a running process an
     * :ref:`db-uri`
     * :ref:`db-pool`
     * :ref:`db-pool-acquisition-timeout`
+    * :ref:`db-pool-max-lifetime`
     * :ref:`server-host`
     * :ref:`server-port`
     * :ref:`server-unix-socket`
@@ -156,7 +157,8 @@ db-extra-search-path        String  public            Y
 db-max-rows                 Int     ∞                 Y
 db-plan-enabled             Boolean False             Y
 db-pool                     Int     10
-db-pool-acquisition-timeout Int     ∞
+db-pool-acquisition-timeout Int     10
+db-pool-max-lifetime        Int     1800
 db-pre-request              String                    Y
 db-prepared-statements      Boolean True              Y
 db-schemas                  String  public            Y
@@ -344,6 +346,18 @@ db-pool-acquisition-timeout
 
   Specifies the maximum time in seconds that the request will wait for the pool to free up a connection slot to the database. If it times out without acquiring a connection, then the request is aborted and a ``504`` error is returned.
 
+.. _db-pool-max-lifetime:
+
+db-pool-max-lifetime
+--------------------
+
+  =============== =================
+  **Environment** PGRST_DB_POOL_MAX_LIFETIME
+  **In-Database** `n/a`
+  =============== =================
+
+  Specifies the maximum time in seconds of an existing connection in the pool. When this lifetime is reached, then the connection will be closed and returned to the pool.
+
 .. _db-pre-request:
 
 db-pre-request
diff --git a/docs/index.rst b/docs/index.rst
index d5311d4ac..f138876d8 100644
--- a/docs/index.rst
+++ b/docs/index.rst
@@ -98,6 +98,7 @@ The project has a friendly and growing community. Join our `chat room <https://g
    :titlesonly:
    :hidden:
 
+   v10.2.0 <releases/v10.2.0>
    v10.0.0 <releases/v10.0.0>
    v9.0.1 <releases/v9.0.1>
    v9.0.0 <releases/v9.0.0>
diff --git a/docs/install.rst b/docs/install.rst
index 39de4f063..8ba9f56d4 100644
--- a/docs/install.rst
+++ b/docs/install.rst
@@ -257,6 +257,8 @@ You can build PostgREST from source with `Stack <https://github.com/commercialha
 
 * Check that the server is installed: :code:`postgrest --help`.
 
+.. _deploy_heroku:
+
 Deploying to Heroku
 ===================
 
diff --git a/docs/releases/v10.2.0.rst b/docs/releases/v10.2.0.rst
new file mode 100644
index 000000000..5d1e1cebf
--- /dev/null
+++ b/docs/releases/v10.2.0.rst
@@ -0,0 +1,153 @@
+
+PostgREST 10.2.0
+================
+
+This minor version adds bug fixes and some features that provide stability to v10.0.0. These release notes include the changes added in versions `10.1.0 <https://github.com/PostgREST/postgrest/releases/tag/v10.1.0>`_, `10.1.1 <https://github.com/PostgREST/postgrest/releases/tag/v10.1.1>`_ and `10.1.2 <https://github.com/PostgREST/postgrest/releases/tag/v10.1.2>`_. You can look at the detailed changelog and download the pre-compiled binaries on the `GitHub release page <https://github.com/PostgREST/postgrest/releases/tag/v10.2.0>`_.
+
+Features
+--------
+
+Connection Lifetime
+~~~~~~~~~~~~~~~~~~~
+
+To prevent memory leaks caused by long-lived connections, PostgREST limits their lifetime in the pool through :ref:`db-pool-max-lifetime`.
+
+Connection Timeout
+~~~~~~~~~~~~~~~~~~
+
+There is now a time limit to wait for new connections in the pool, that is, if a new request cannot get a connection in the time specified in :ref:`db-pool-acquisition-timeout` then a response with ``504`` status is returned
+
+Documentation improvements
+~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+* Added HTTP status codes to the :ref:`pgrst_errors`.
+
+* Added a how-to on :ref:`sql-user-management-using-postgres-users-and-passwords`.
+
+* Updated the :ref:`Heroku installation page <deploy_heroku>`.
+
+Changes
+-------
+
+* Removed ``db-pool-timeout`` option because it was removed in the ``hasql-pool`` library that PostgREST uses for SQL connections. (`#2444 <https://github.com/PostgREST/postgrest/issues/2444>`_)
+
+Deprecated
+----------
+
+* Deprecate bulk-calls when including the ``Prefer: params=multiple-objects`` in the request. It is preferable to use a function with an :ref:`array <s_procs_array>` or JSON parameter for a better performance. (`#1385 <https://github.com/PostgREST/postgrest/issues/1385>`_)
+
+Bug fixes
+---------
+
+* Reduce allocations communication with PostgreSQL, particularly for request bodies. (`#2261 <https://github.com/PostgREST/postgrest/issues/2261>`_, `#2349 <https://github.com/PostgREST/postgrest/issues/2349>`_, `#2467 <https://github.com/PostgREST/postgrest/issues/2467>`_)
+
+* Fix ``SIGUSR1`` to fully flush the connection pool. (`#2401 <https://github.com/PostgREST/postgrest/issues/2401>`_, `#2444 <https://github.com/PostgREST/postgrest/issues/2444>`_)
+
+* Fix opening an empty transaction on failed resource embedding. (`#2428 <https://github.com/PostgREST/postgrest/issues/2428>`_)
+
+* Fix embedding the same table multiple times. (`#2455 <https://github.com/PostgREST/postgrest/issues/2455>`_)
+
+* Fix a regression when embedding views where base tables have a different column order for foreign key columns (`#2518 <https://github.com/PostgREST/postgrest/issues/2518>`_)
+
+* Fix a regression with the ``Location`` header when :ref:`inserting <insert>` into views with primary keys from multiple tables (`#2458 <https://github.com/PostgREST/postgrest/issues/2458>`_)
+
+* Fix a regression in OpenAPI output with mode ``follow-privileges`` (`#2356 <https://github.com/PostgREST/postgrest/issues/2356>`_)
+
+* Fix infinite recursion when loading schema cache with self-referencing view (`#2283 <https://github.com/PostgREST/postgrest/issues/2283>`_)
+
+* Return status code ``200`` instead of ``404`` for ``PATCH`` requests which don't affect any rows (`#2343 <https://github.com/PostgREST/postgrest/issues/2343>`_)
+
+* Treat the :ref:`computed relationships <computed_relationships>` that do not return ``SETOF`` as M2O/O2O relationship (`#2481 <https://github.com/PostgREST/postgrest/issues/2481>`_)
+
+* Fix embedding a computed relationship with a normal relationship (`#2534 <https://github.com/PostgREST/postgrest/issues/2534>`_)
+
+* Fix error message when ``[]`` is used inside ``select`` (`#2362 <https://github.com/PostgREST/postgrest/issues/2362>`_)
+
+* Disallow ``!inner`` on computed columns (`#2475 <https://github.com/PostgREST/postgrest/issues/2475>`_)
+
+* Ignore leading and trailing spaces in column names when parsing the query string (`#2285 <https://github.com/PostgREST/postgrest/issues/2285>`_)
+
+* Fix ``UPSERT`` with PostgreSQL 15 (`#2545 <https://github.com/PostgREST/postgrest/issues/2545>`_)
+
+* Fix embedding views with multiple references to the same base column (`#2459 <https://github.com/PostgREST/postgrest/issues/2459>`_)
+
+* Fix regression when embedding views with partial references to multi column foreign keys (`#2548 <https://github.com/PostgREST/postgrest/issues/2548>`_)
+
+* Fix regression when requesting ``limit=0`` and ``db-max-row`` is set (`#2558 <https://github.com/PostgREST/postgrest/issues/2558>`_)
+
+* Return a clear error without hitting the database when trying to update or insert an unknown column with ``?columns`` (`#2542 <https://github.com/PostgREST/postgrest/issues/2542>`_)
+
+* Fix bad M2M embedding on RPC (`#2565 <https://github.com/PostgREST/postgrest/issues/2565>`_)
+
+* Replace misleading error message when no function is found with a hint containing functions/parameters names suggestions (`#2575 <https://github.com/PostgREST/postgrest/issues/2575>`_)
+
+* Move explanation about "single parameters" from the ``message`` to the ``details`` in the error output (`#2582 <https://github.com/PostgREST/postgrest/issues/2582>`_)
+
+* Replace misleading error message when no relationship is found with a hint containing parent/child names suggestions (`#2569 <https://github.com/PostgREST/postgrest/issues/2569>`_)
+
+* Add the required OpenAPI items object when the parameter is an array (`#1405 <https://github.com/PostgREST/postgrest/issues/1405>`_)
+
+* Add upsert headers for ``POST`` requests to the OpenAPI output (`#2592 <https://github.com/PostgREST/postgrest/issues/2592>`_)
+
+* Fix foreign keys pointing to ``VIEW`` instead of ``TABLE`` in OpenAPI output (`#2623 <https://github.com/PostgREST/postgrest/issues/2623>`_)
+
+* Consider any PostgreSQL authentication failure as fatal and exit immediately (`#2622 <https://github.com/PostgREST/postgrest/issues/2622>`_)
+
+* Fix ``NOTIFY pgrst`` not reloading the db connections catalog cache (`#2620 <https://github.com/PostgREST/postgrest/issues/2620>`_)
+
+* Fix ``db-pool-acquisition-timeout`` not logging to stderr when the timeout is reached (`#2667 <https://github.com/PostgREST/postgrest/issues/2667>`_)
+
+* Fix PostgreSQL resource leak with long-lived connections through the :ref:`db-pool-max-lifetime` configuration (`#2638 <https://github.com/PostgREST/postgrest/issues/2638>`_)
+
+* There is now a stricter parsing of the query string. Instead of silently ignoring, the parser now returns a :ref:`PostgREST error <pgrst100>` on invalid syntax. (`#2537 <https://github.com/PostgREST/postgrest/issues/2537>`_)
+
+Thanks
+------
+
+Big thanks from the `PostgREST team <https://github.com/orgs/PostgREST/people>`_ to our sponsors!
+
+.. container:: image-container
+
+  .. image:: ../_static/cybertec-new.png
+    :target: https://www.cybertec-postgresql.com/en/?utm_source=postgrest.org&utm_medium=referral&utm_campaign=postgrest
+    :width:  13em
+
+  .. image:: ../_static/2ndquadrant.png
+    :target: https://www.2ndquadrant.com/en/?utm_campaign=External%20Websites&utm_source=PostgREST&utm_medium=Logo
+    :width:  13em
+
+  .. image:: ../_static/retool.png
+    :target: https://retool.com/?utm_source=sponsor&utm_campaign=postgrest
+    :width:  13em
+
+  .. image:: ../_static/gnuhost.png
+    :target: https://gnuhost.eu/?utm_source=sponsor&utm_campaign=postgrest
+    :width:  13em
+
+  .. image:: ../_static/supabase.png
+    :target: https://supabase.com/?utm_source=postgrest%20backers&utm_medium=open%20source%20partner&utm_campaign=postgrest%20backers%20github&utm_term=homepage
+    :width:  13em
+
+  .. image:: ../_static/oblivious.jpg
+    :target: https://oblivious.ai/?utm_source=sponsor&utm_campaign=postgrest
+    :width:  13em
+
+* Evans Fernandes
+* `Jan Sommer <https://github.com/nerfpops>`_
+* `Franz Gusenbauer <https://www.igutech.at/>`_
+* `Daniel Babiak <https://github.com/dbabiak>`_
+* Tsingson Qin
+* Michel Pelletier
+* Jay Hannah
+* Robert Stolarz
+* Nicholas DiBiase
+* Christopher Reid
+* Nathan Bouscal
+* Daniel Rafaj
+* David Fenko
+* Remo Rechkemmer
+* Severin Ibarluzea
+* Tom Saleeba
+* Pawel Tyll
+
+If you like to join them please consider `supporting PostgREST development <https://github.com/PostgREST/postgrest#user-content-supporting-development>`_.

From 4e49310d6e5cf7a2b6b77a071a02a5b6bc8104be Mon Sep 17 00:00:00 2001
From: Steve Chavez <stevechavezast@gmail.com>
Date: Fri, 21 Apr 2023 19:20:46 -0500
Subject: [PATCH 547/652] Clarify pool connection features

---
 docs/releases/v10.2.0.rst | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/docs/releases/v10.2.0.rst b/docs/releases/v10.2.0.rst
index 5d1e1cebf..3011e470e 100644
--- a/docs/releases/v10.2.0.rst
+++ b/docs/releases/v10.2.0.rst
@@ -7,15 +7,15 @@ This minor version adds bug fixes and some features that provide stability to v1
 Features
 --------
 
-Connection Lifetime
-~~~~~~~~~~~~~~~~~~~
+Pool Connection Lifetime
+~~~~~~~~~~~~~~~~~~~~~~~~
 
 To prevent memory leaks caused by long-lived connections, PostgREST limits their lifetime in the pool through :ref:`db-pool-max-lifetime`.
 
-Connection Timeout
-~~~~~~~~~~~~~~~~~~
+Pool Connection Acquisition Timeout
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
-There is now a time limit to wait for new connections in the pool, that is, if a new request cannot get a connection in the time specified in :ref:`db-pool-acquisition-timeout` then a response with ``504`` status is returned
+There is now a time limit to wait for pool connections to be acquired. If a new request cannot get a connection in the time specified in :ref:`db-pool-acquisition-timeout` then a response with a ``504`` status is returned.
 
 Documentation improvements
 ~~~~~~~~~~~~~~~~~~~~~~~~~~

From 55cc616a5ec8ae47e4b02f1449b83a3372ff38f6 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Mon, 1 May 2023 01:01:32 -0300
Subject: [PATCH 548/652] Authentication as a reference

* Creates a Database Authorization topic
* Moves JWT from Auth0 into Ecosystem
* Moves SQL User Management to a how-to
---
 docs/auth.rst                                 | 442 +++---------------
 docs/configuration.rst                        |   4 +-
 docs/db_authz.rst                             |  89 ++++
 docs/ecosystem.rst                            |  31 ++
 ...ent-using-postgres-users-and-passwords.rst |   8 +-
 docs/how-tos/sql-user-management.rst          | 228 +++++++++
 docs/index.rst                                |  21 +-
 7 files changed, 435 insertions(+), 388 deletions(-)
 create mode 100644 docs/db_authz.rst
 create mode 100644 docs/how-tos/sql-user-management.rst

diff --git a/docs/auth.rst b/docs/auth.rst
index eeb55c0b0..90df4c086 100644
--- a/docs/auth.rst
+++ b/docs/auth.rst
@@ -1,22 +1,47 @@
-.. _roles:
+.. raw:: html
 
-Overview of Role System
-=======================
+  <h1>Authentication</h1>
 
 PostgREST is designed to keep the database at the center of API security. All authorization happens through database roles and permissions. It is PostgREST's job to **authenticate** requests -- i.e. verify that a client is who they say they are -- and then let the database **authorize** client actions.
 
-Authentication Sequence
+.. _roles:
+
+Overview of role system
 -----------------------
 
 There are three types of roles used by PostgREST, the **authenticator**, **anonymous** and **user** roles. The database administrator creates these roles and configures PostgREST to use them.
 
 .. image:: _static/security-roles.png
 
-The authenticator should be created :code:`NOINHERIT` and configured in the database to have very limited access. It is a chameleon whose job is to "become" other users to service authenticated HTTP requests. The picture below shows how the server handles authentication. If auth succeeds, it switches into the user role specified by the request, otherwise it switches into the anonymous role (if it's set in :ref:`db-anon-role`).
+The authenticator role is used for connecting to the database and should be configured to have very limited access. It is a chameleon whose job is to "become" other users to service authenticated HTTP requests.
+
+
+.. code:: sql
+
+
+  CREATE ROLE authenticator LOGIN NOINHERIT NOCREATEDB NOCREATEROLE NOSUPERUSER;
+
+.. note::
+
+  The names "authenticator" and "anon" names are configurable and not sacred, we simply choose them for clarity. See :ref:`db-uri` and :ref:`db-anon-role`.
+
+.. _user_impersonation:
+
+User Impersonation
+------------------
+
+The picture below shows how the server handles authentication. If auth succeeds, it switches into the user role specified by the request, otherwise it switches into the anonymous role (if it's set in :ref:`db-anon-role`).
 
 .. image:: _static/security-anon-choice.png
 
-Here are the technical details. We use `JSON Web Tokens <https://jwt.io/>`_ to authenticate API requests. As you'll recall a JWT contains a list of cryptographically signed claims. All claims are allowed but PostgREST cares specifically about a claim called role.
+This role switching mechanism is called **user impersonation**. In PostgreSQL it's done with the ``SET ROLE`` statement.
+
+.. _jwt_impersonation:
+
+JWT-Based User Impersonation
+----------------------------
+
+We use `JSON Web Tokens <https://jwt.io/>`_ to authenticate API requests. As you'll recall a JWT contains a list of cryptographically signed claims. All claims are allowed but PostgREST cares specifically about a claim called role.
 
 .. code:: json
 
@@ -35,127 +60,22 @@ Note that the database administrator must allow the authenticator role to switch
 .. code:: sql
 
   GRANT user123 TO authenticator;
+  -- similarly for the anonymous role
+  -- GRANT anonymous TO authenticator;
 
-If the client included no JWT (or one without a role claim) then PostgREST switches into the anonymous role whose actual database-specific name, like that of with the authenticator role, is specified in the PostgREST server configuration file. The database administrator must set anonymous role permissions correctly to prevent anonymous users from seeing or changing things they shouldn't.
+If the client included no JWT (or one without a role claim) then PostgREST switches into the anonymous role. The database administrator must set the anonymous role permissions correctly to prevent anonymous users from seeing or changing things they shouldn't.
 
-Users and Groups
-----------------
+.. _jwt_generation:
 
-PostgreSQL manages database access permissions using the concept of roles. A role can be thought of as either a database user, or a group of database users, depending on how the role is set up.
+JWT Generation
+~~~~~~~~~~~~~~
 
-Roles for Each Web User
-~~~~~~~~~~~~~~~~~~~~~~~
-
-PostgREST can accommodate either viewpoint. If you treat a role as a single user then the JWT-based role switching described above does most of what you need. When an authenticated user makes a request PostgREST will switch into the role for that user, which in addition to restricting queries, is available to SQL through the :code:`current_user` variable.
-
-You can use row-level security to flexibly restrict visibility and access for the current user. Here is an `example <https://www.2ndquadrant.com/en/blog/application-users-vs-row-level-security/>`_ from Tomas Vondra, a chat table storing messages sent between users. Users can insert rows into it to send messages to other users, and query it to see messages sent to them by other users.
-
-.. code-block:: postgres
-
-  CREATE TABLE chat (
-    message_uuid    UUID PRIMARY KEY DEFAULT uuid_generate_v4(),
-    message_time    TIMESTAMP NOT NULL DEFAULT now(),
-    message_from    NAME      NOT NULL DEFAULT current_user,
-    message_to      NAME      NOT NULL,
-    message_subject VARCHAR(64) NOT NULL,
-    message_body    TEXT
-  );
-
-  ALTER TABLE chat ENABLE ROW LEVEL SECURITY;
-
-We want to enforce a policy that ensures a user can see only those messages sent by them or intended for them. Also we want to prevent a user from forging the message_from column with another person's name.
-
-PostgreSQL allows us to set this policy with row-level security:
-
-.. code-block:: postgres
-
-  CREATE POLICY chat_policy ON chat
-    USING ((message_to = current_user) OR (message_from = current_user))
-    WITH CHECK (message_from = current_user)
-
-Anyone accessing the generated API endpoint for the chat table will see exactly the rows they should, without our needing custom imperative server-side coding.
-
-.. warning::
-
-   Roles are namespaced per-cluster rather than per-database so they may be prone to collision.
-
-Web Users Sharing Role
-~~~~~~~~~~~~~~~~~~~~~~
-
-Alternately database roles can represent groups instead of (or in addition to) individual users. You may choose that all signed-in users for a web app share the role webuser. You can distinguish individual users by including extra claims in the JWT such as email.
-
-.. code:: json
-
-  {
-    "role": "webuser",
-    "email": "john@doe.com"
-  }
-
-SQL code can access claims through GUC variables set by PostgREST per request. For instance to get the email claim, call this function:
-
-For PostgreSQL server version >= 14
-
-.. code:: sql
-
-  current_setting('request.jwt.claims', true)::json->>'email';
-
-
-For PostgreSQL server version < 14
-
-.. code:: sql
-
-  current_setting('request.jwt.claim.email', true);
-
-This allows JWT generation services to include extra information and your database code to react to it. For instance the RLS example could be modified to use this current_setting rather than current_user. The second 'true' argument tells current_setting to return NULL if the setting is missing from the current configuration.
-
-Hybrid User-Group Roles
-~~~~~~~~~~~~~~~~~~~~~~~
-
-You can mix the group and individual role policies. For instance we could still have a webuser role and individual users which inherit from it:
-
-.. code-block:: postgres
-
-  CREATE ROLE webuser NOLOGIN;
-  -- grant this role access to certain tables etc
-
-  CREATE ROLE user000 NOLOGIN;
-  GRANT webuser TO user000;
-  -- now user000 can do whatever webuser can
-
-  GRANT user000 TO authenticator;
-  -- allow authenticator to switch into user000 role
-  -- (the role itself has nologin)
-
-.. _custom_validation:
-
-Custom Validation
------------------
-
-PostgREST honors the :code:`exp` claim for token expiration, rejecting expired tokens. However it does not enforce any extra constraints. An example of an extra constraint would be to immediately revoke access for a certain user. The configuration file parameter :code:`db-pre-request` specifies a stored procedure to call immediately after the authenticator switches into a new role and before the main query itself runs.
-
-Here's an example. In the config file specify a stored procedure:
-
-.. code:: ini
-
-  db-pre-request = "public.check_user"
-
-In the function you can run arbitrary code to check the request and raise an exception to block it if desired.
-
-.. code-block:: postgres
-
-  CREATE OR REPLACE FUNCTION check_user() RETURNS void AS $$
-  BEGIN
-    IF current_user = 'evil_user' THEN
-      RAISE EXCEPTION 'No, you are evil'
-        USING HINT = 'Stop being so evil and maybe you can log in';
-    END IF;
-  END
-  $$ LANGUAGE plpgsql;
+You can create a valid JWT either from inside your database(see :ref:`sql_user_management`) or via an external service(see :ref:`external_jwt`).
 
 .. _client_auth:
 
 Client Auth
-===========
+~~~~~~~~~~~
 
 To make an authenticated request the client must include an :code:`Authorization` HTTP header with the value :code:`Bearer <jwt>`. For instance:
 
@@ -173,84 +93,20 @@ To make an authenticated request the client must include an :code:`Authorization
 
 The ``Bearer`` header value can be used with or without capitalization(``bearer``).
 
-JWT Generation
---------------
-
-You can create a valid JWT either from inside your database or via an external service. Each token is cryptographically signed with a secret key. In the case of symmetric cryptography the signer and verifier share the same secret passphrase. In asymmetric cryptography the signer uses the private key and the verifier the public key. PostgREST supports both symmetric and asymmetric cryptography.
-
-JWT from SQL
-~~~~~~~~~~~~
-
-You can create JWT tokens in SQL using the `pgjwt extension <https://github.com/michelp/pgjwt>`_. It's simple and requires only pgcrypto. If you're on an environment like Amazon RDS which doesn't support installing new extensions, you can still manually run the `SQL inside pgjwt <https://github.com/michelp/pgjwt/blob/master/pgjwt--0.1.1.sql>`_ (you'll need to replace ``@extschema@`` with another schema or just delete it) which creates the functions you will need.
-
-Next write a stored procedure that returns the token. The one below returns a token with a hard-coded role, which expires five minutes after it was issued. Note this function has a hard-coded secret as well.
-
-.. code-block:: postgres
-
-  CREATE TYPE jwt_token AS (
-    token text
-  );
-
-  CREATE FUNCTION jwt_test() RETURNS public.jwt_token AS $$
-    SELECT public.sign(
-      row_to_json(r), 'reallyreallyreallyreallyverysafe'
-    ) AS token
-    FROM (
-      SELECT
-        'my_role'::text as role,
-        extract(epoch from now())::integer + 300 AS exp
-    ) r;
-  $$ LANGUAGE sql;
-
-PostgREST exposes this function to clients via a POST request to ``/rpc/jwt_test``.
-
-.. note::
-
-  To avoid hard-coding the secret in stored procedures, save it as a property of the database.
-
-  .. code-block:: postgres
-
-    -- run this once
-    ALTER DATABASE mydb SET "app.jwt_secret" TO 'reallyreallyreallyreallyverysafe';
-
-    -- then all functions can refer to app.jwt_secret
-    SELECT sign(
-      row_to_json(r), current_setting('app.jwt_secret')
-    ) AS token
-    FROM ...
-
-JWT from Auth0
+Symmetric Keys
 ~~~~~~~~~~~~~~
 
-An external service like `Auth0 <https://auth0.com/>`_ can do the hard work transforming OAuth from Github, Twitter, Google etc into a JWT suitable for PostgREST. Auth0 can also handle email signup and password reset flows.
-
-To use Auth0, create `an application <https://auth0.com/docs/get-started/applications>`_ for your app and `an API <https://auth0.com/docs/get-started/apis>`_ for your PostgREST server. Auth0 supports both HS256 and RS256 scheme for the issued tokens for APIs. For simplicity, you may first try HS256 scheme while creating your API on Auth0. Your application should use your PostgREST API's `API identifier <https://auth0.com/docs/get-started/apis/api-settings>`_ by setting it with the `audience parameter <https://auth0.com/docs/secure/tokens/access-tokens/get-access-tokens#control-access-token-audience>`_  during the authorization request. This will ensure that Auth0 will issue an access token for your PostgREST API. For PostgREST to verify the access token, you will need to set ``jwt-secret`` on PostgREST config file with your API's signing secret.
-
-.. note::
-
-  Our code requires a database role in the JWT. To add it you need to save the database role in Auth0 `app metadata <https://auth0.com/docs/manage-users/user-accounts/metadata/manage-metadata-rules>`_. Then, you will need to write `a rule <https://auth0.com/docs/customize/rules>`_ that will extract the role from the user's app_metadata and set it as a `custom claim <https://auth0.com/docs/get-started/apis/scopes/sample-use-cases-scopes-and-claims#add-custom-claims-to-a-token>`_ in the access token. Note that, you may use Auth0's `core authorization feature <https://auth0.com/docs/manage-users/access-control/rbac>`_ for more complex use cases. Metadata solution is mentioned here for simplicity.
-
-  .. code:: javascript
-
-    function (user, context, callback) {
-
-      // Follow the documentations at
-      // https://postgrest.org/en/latest/configuration.html#db-role-claim-key
-      // to set a custom role claim on PostgREST
-      // and use it as custom claim attribute in this rule
-      const myRoleClaim = 'https://myapp.com/role';
-
-      user.app_metadata = user.app_metadata || {};
-      context.accessToken[myRoleClaim] = user.app_metadata.role;
-      callback(null, user, context);
-    }
+Each token is cryptographically signed with a secret key. In the case of symmetric cryptography the signer and verifier share the same secret passphrase, which can be configured with :ref:`jwt-secret`.
+If it is set to a simple string value like “reallyreallyreallyreallyverysafe” then PostgREST interprets it as an HMAC-SHA256 passphrase.
 
 .. _asym_keys:
 
 Asymmetric Keys
 ~~~~~~~~~~~~~~~
 
-As described in the :ref:`configuration` section, PostgREST accepts a ``jwt-secret`` config file parameter. If it is set to a simple string value like "reallyreallyreallyreallyverysafe" then PostgREST interprets it as an HMAC-SHA256 passphrase. However you can also specify a literal JSON Web Key (JWK) or set. For example, you can use an RSA-256 public key encoded as a JWK:
+In asymmetric cryptography the signer uses the private key and the verifier the public key.
+
+As described in the :ref:`configuration` section, PostgREST accepts a ``jwt-secret`` config file parameter. However you can also specify a literal JSON Web Key (JWK) or set. For example, you can use an RSA-256 public key encoded as a JWK:
 
 .. code-block:: json
 
@@ -287,7 +143,14 @@ You can specify the literal value as we saw earlier, or reference a filename to
 
   jwt-secret = "@rsa.jwk.pub"
 
-JWT security
+.. _jwt_validation:
+
+JWT Validation
+~~~~~~~~~~~~~~
+
+PostgREST honors the :code:`exp` claim for token expiration, rejecting expired tokens.
+
+JWT Security
 ~~~~~~~~~~~~
 
 There are at least three types of common critiques against using JWT: 1) against the standard itself, 2) against using libraries with known security vulnerabilities, and 3) against using JWT for web sessions. We'll briefly explain each critique, how PostgREST deals with it, and give recommendations for appropriate user action.
@@ -300,197 +163,26 @@ The last type of critique focuses on the misuse of JWT for maintaining web sessi
 
 PostgREST uses JWT mainly for authentication and authorization purposes and encourages users to do the same. For web sessions, using cookies over HTTPS is good enough and well catered for by standard web frameworks.
 
-Schema Isolation
-================
+.. _custom_validation:
 
-You can isolate your api schema from internal implementation details, as explained in :ref:`schema_isolation`. For an example of wrapping a private table with a public view see the :ref:`public_ui` section below.
+Custom Validation
+-----------------
 
-.. _sql_user_management:
-
-SQL User Management
-===================
-
-Storing Users and Passwords
----------------------------
-
-As mentioned, an external service can provide user management and coordinate with the PostgREST server using JWT. It's also possible to support logins entirely through SQL. It's a fair bit of work, so get ready.
-
-The following table, functions, and triggers will live in a :code:`basic_auth` schema that you shouldn't expose publicly in the API. The public views and functions will live in a different schema which internally references this internal information.
-
-First we'll need a table to keep track of our users:
-
-.. code:: sql
-
-  -- We put things inside the basic_auth schema to hide
-  -- them from public view. Certain public procs/views will
-  -- refer to helpers and tables inside.
-  create schema if not exists basic_auth;
-
-  create table if not exists
-  basic_auth.users (
-    email    text primary key check ( email ~* '^.+@.+\..+$' ),
-    pass     text not null check (length(pass) < 512),
-    role     name not null check (length(role) < 512)
-  );
-
-We would like the role to be a foreign key to actual database roles, however PostgreSQL does not support these constraints against the :code:`pg_roles` table. We'll use a trigger to manually enforce it.
-
-.. code-block:: plpgsql
-
-  create or replace function
-  basic_auth.check_role_exists() returns trigger as $$
-  begin
-    if not exists (select 1 from pg_roles as r where r.rolname = new.role) then
-      raise foreign_key_violation using message =
-        'unknown database role: ' || new.role;
-      return null;
-    end if;
-    return new;
-  end
-  $$ language plpgsql;
-
-  drop trigger if exists ensure_user_role_exists on basic_auth.users;
-  create constraint trigger ensure_user_role_exists
-    after insert or update on basic_auth.users
-    for each row
-    execute procedure basic_auth.check_role_exists();
-
-Next we'll use the pgcrypto extension and a trigger to keep passwords safe in the :code:`users` table.
-
-.. code-block:: plpgsql
-
-  create extension if not exists pgcrypto;
-
-  create or replace function
-  basic_auth.encrypt_pass() returns trigger as $$
-  begin
-    if tg_op = 'INSERT' or new.pass <> old.pass then
-      new.pass = crypt(new.pass, gen_salt('bf'));
-    end if;
-    return new;
-  end
-  $$ language plpgsql;
-
-  drop trigger if exists encrypt_pass on basic_auth.users;
-  create trigger encrypt_pass
-    before insert or update on basic_auth.users
-    for each row
-    execute procedure basic_auth.encrypt_pass();
-
-With the table in place we can make a helper to check a password against the encrypted column. It returns the database role for a user if the email and password are correct.
-
-.. code-block:: plpgsql
-
-  create or replace function
-  basic_auth.user_role(email text, pass text) returns name
-    language plpgsql
-    as $$
-  begin
-    return (
-    select role from basic_auth.users
-     where users.email = user_role.email
-       and users.pass = crypt(user_role.pass, users.pass)
-    );
-  end;
-  $$;
-
-.. _public_ui:
-
-Public User Interface
----------------------
-
-In the previous section we created an internal table to store user information. Here we create a login function which takes an email address and password and returns JWT if the credentials match a user in the internal table.
-
-Permissions
-~~~~~~~~~~~
-
-Your database roles need access to the schema, tables, views and functions in order to service HTTP requests.
-Recall from the `Overview of Role System`_ that PostgREST uses special roles to process requests, namely the authenticator and
-anonymous roles. Below is an example of permissions that allow anonymous users to create accounts and attempt to log in.
-
-.. code-block:: postgres
-
-  -- the names "anon" and "authenticator" are configurable and not
-  -- sacred, we simply choose them for clarity
-  create role anon noinherit;
-  create role authenticator noinherit;
-  grant anon to authenticator;
-
-Then, add ``db-anon-role`` to the configuration file to allow anonymous requests.
+PostgREST does not enforce any extra constraints besides :ref:`jwt_validation`. An example of an extra constraint would be to immediately revoke access for a certain user. Using :ref:`db-pre-request` you can specify a stored procedure to call immediately after :ref:`user_impersonation` and before the main query itself runs.
 
 .. code:: ini
 
-  db-anon-role = "anon"
+  db-pre-request = "public.check_user"
 
-Logins
-~~~~~~
-
-As described in `JWT from SQL`_, we'll create a JWT inside our login function. Note that you'll need to adjust the secret key which is hard-coded in this example to a secure (at least thirty-two character) secret of your choosing.
+In the function you can run arbitrary code to check the request and raise an exception to block it if desired.
 
 .. code-block:: postgres
 
-  -- add type
-  CREATE TYPE basic_auth.jwt_token AS (
-    token text
-  );
-
-  -- login should be on your exposed schema
-  create or replace function
-  login(email text, pass text) returns basic_auth.jwt_token as $$
-  declare
-    _role name;
-    result basic_auth.jwt_token;
-  begin
-    -- check email and password
-    select basic_auth.user_role(email, pass) into _role;
-    if _role is null then
-      raise invalid_password using message = 'invalid user or password';
-    end if;
-
-    select sign(
-        row_to_json(r), 'reallyreallyreallyreallyverysafe'
-      ) as token
-      from (
-        select _role as role, login.email as email,
-           extract(epoch from now())::integer + 60*60 as exp
-      ) r
-      into result;
-    return result;
-  end;
-  $$ language plpgsql security definer;
-
-  grant execute on function login(text,text) to anon;
-
-Since the above :code:`login` function is defined as `security definer <https://www.postgresql.org/docs/current/sql-createfunction.html#id-1.9.3.67.10.2>`_,
-the anonymous user :code:`anon` doesn't need permission to read the :code:`basic_auth.users` table. It doesn't even need permission to access the :code:`basic_auth` schema.
-:code:`grant execute on function` is included for clarity but it might not be needed, see :ref:`func_privs` for more details.
-
-An API request to call this function would look like:
-
-.. tabs::
-
-  .. code-tab:: http
-
-    POST /rpc/login HTTP/1.1
-
-    { "email": "foo@bar.com", "pass": "foobar" }
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/rpc/login" \
-      -X POST -H "Content-Type: application/json" \
-      -d '{ "email": "foo@bar.com", "pass": "foobar" }'
-
-The response would look like the snippet below. Try decoding the token at `jwt.io <https://jwt.io/>`_. (It was encoded with a secret of :code:`reallyreallyreallyreallyverysafe` as specified in the SQL code above. You'll want to change this secret in your app!)
-
-.. code:: json
-
-  {
-    "token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJlbWFpbCI6ImZvb0BiYXIuY29tIiwicGFzcyI6ImZvb2JhciJ9.37066TTRlh-1hXhnA9oO9Pj6lgL6zFuJU0iCHhuCFno"
-  }
-
-
-Alternatives
-~~~~~~~~~~~~
-
-See the how-to :ref:`sql-user-management-using-postgres-users-and-passwords` for a similar way that completely avoids the table :code:`basic_auth.users`.
+  CREATE OR REPLACE FUNCTION check_user() RETURNS void AS $$
+  BEGIN
+    IF current_user = 'evil_user' THEN
+      RAISE EXCEPTION 'No, you are evil'
+        USING HINT = 'Stop being so evil and maybe you can log in';
+    END IF;
+  END
+  $$ LANGUAGE plpgsql;
diff --git a/docs/configuration.rst b/docs/configuration.rst
index a2b41a303..cf4e6c8b2 100644
--- a/docs/configuration.rst
+++ b/docs/configuration.rst
@@ -7,8 +7,6 @@ Without configuration, PostgREST won't be able to serve requests. At the minimum
 
 To connect to a database it uses a `libpq connection string <https://www.postgresql.org/docs/current/libpq-connect.html#LIBPQ-CONNSTRING>`_. The connection string can be set in the configuration file or via environment variable or can be read from an external file. See :ref:`db-uri` for details. Any parameter that is not set in the connection string is read from `libpq environment variables <https://www.postgresql.org/docs/current/libpq-envars.html>`_. The default connection string is ``postgresql://``, which reads **all** parameters from the environment.
 
-The user with whom PostgREST connects to the database is also known as the authenticator role. For more information about the anonymous vs authenticator roles see :ref:`roles`.
-
 Config parameters are read in the following order:
 
 1. From the config file.
@@ -463,6 +461,8 @@ db-uri
 
   The standard connection PostgreSQL `URI format <https://www.postgresql.org/docs/current/libpq-connect.html#LIBPQ-CONNSTRING>`_. Symbols and unusual characters in the password or other fields should be percent encoded to avoid a parse error. If enforcing an SSL connection to the database is required you can use `sslmode <https://www.postgresql.org/docs/current/libpq-ssl.html#LIBPQ-SSL-SSLMODE-STATEMENTS>`_ in the URI, for example ``postgres://user:pass@host:5432/dbname?sslmode=require``.
 
+  The user with whom PostgREST connects to the database is also known as the ``authenticator`` role. For more information see :ref:`roles`.
+
   When running PostgREST on the same machine as PostgreSQL, it is also possible to connect to the database using a `Unix socket <https://en.wikipedia.org/wiki/Unix_domain_socket>`_ and the `Peer Authentication method <https://www.postgresql.org/docs/current/auth-peer.html>`_ as an alternative to TCP/IP communication and authentication with a password, this also grants higher performance.  To do this you can omit the host and the password, e.g. ``postgres://user@/dbname``, see the `libpq connection string <https://www.postgresql.org/docs/current/libpq-connect.html#LIBPQ-CONNSTRING>`_ documentation for more details.
 
   Choosing a value for this parameter beginning with the at sign such as ``@filename`` (e.g. ``@./configs/my-config``) loads the connection string out of an external file.
diff --git a/docs/db_authz.rst b/docs/db_authz.rst
new file mode 100644
index 000000000..8225a9a4c
--- /dev/null
+++ b/docs/db_authz.rst
@@ -0,0 +1,89 @@
+.. raw:: html
+
+  <h1>Database Authorization</h1>
+
+Database authorization is the process of granting and verifying database access permissions. PostgreSQL manages permissions using the concept of roles. A role can be thought of as either a database user, or a group of database users, depending on how the role is set up.
+
+Roles for Each Web User
+-----------------------
+
+PostgREST can accommodate either viewpoint. If you treat a role as a single user then the :ref:`jwt_impersonation` does most of what you need. When an authenticated user makes a request PostgREST will switch into the database role for that user, which in addition to restricting queries, is available to SQL through the :code:`current_user` variable.
+
+You can use row-level security to flexibly restrict visibility and access for the current user. Here is an `example <https://www.2ndquadrant.com/en/blog/application-users-vs-row-level-security/>`_ from Tomas Vondra, a chat table storing messages sent between users. Users can insert rows into it to send messages to other users, and query it to see messages sent to them by other users.
+
+.. code-block:: postgres
+
+  CREATE TABLE chat (
+    message_uuid    UUID PRIMARY KEY DEFAULT uuid_generate_v4(),
+    message_time    TIMESTAMP NOT NULL DEFAULT now(),
+    message_from    NAME      NOT NULL DEFAULT current_user,
+    message_to      NAME      NOT NULL,
+    message_subject VARCHAR(64) NOT NULL,
+    message_body    TEXT
+  );
+
+  ALTER TABLE chat ENABLE ROW LEVEL SECURITY;
+
+We want to enforce a policy that ensures a user can see only those messages sent by them or intended for them. Also we want to prevent a user from forging the ``message_from`` column with another person's name.
+
+PostgreSQL allows us to set this policy with row-level security:
+
+.. code-block:: postgres
+
+  CREATE POLICY chat_policy ON chat
+    USING ((message_to = current_user) OR (message_from = current_user))
+    WITH CHECK (message_from = current_user)
+
+Anyone accessing the generated API endpoint for the chat table will see exactly the rows they should, without our needing custom imperative server-side coding.
+
+.. warning::
+
+   Roles are namespaced per-cluster rather than per-database so they may be prone to collision.
+
+Web Users Sharing Role
+----------------------
+
+Alternately database roles can represent groups instead of (or in addition to) individual users. You may choose that all signed-in users for a web app share the role ``webuser``. You can distinguish individual users by including extra claims in the JWT such as email.
+
+.. code:: json
+
+  {
+    "role": "webuser",
+    "email": "john@doe.com"
+  }
+
+SQL code can access claims through GUC variables set by PostgREST per request. For instance to get the email claim, call this function:
+
+For PostgreSQL server version >= 14
+
+.. code:: sql
+
+  current_setting('request.jwt.claims', true)::json->>'email';
+
+
+For PostgreSQL server version < 14
+
+.. code:: sql
+
+  current_setting('request.jwt.claim.email', true);
+
+This allows JWT generation services to include extra information and your database code to react to it. For instance the RLS example could be modified to use this ``current_setting`` rather than ``current_user``. The second ``'true'`` argument tells ``current_setting`` to return NULL if the setting is missing from the current configuration.
+
+Hybrid User-Group Roles
+-----------------------
+
+You can mix the group and individual role policies. For instance we could still have a webuser role and individual users which inherit from it:
+
+.. code-block:: postgres
+
+  CREATE ROLE webuser NOLOGIN;
+  -- grant this role access to certain tables etc
+
+  CREATE ROLE user000 NOLOGIN;
+  GRANT webuser TO user000;
+  -- now user000 can do whatever webuser can
+
+  GRANT user000 TO authenticator;
+  -- allow authenticator to switch into user000 role
+  -- (the role itself has nologin)
+
diff --git a/docs/ecosystem.rst b/docs/ecosystem.rst
index f9fadfb57..ba6292bd6 100644
--- a/docs/ecosystem.rst
+++ b/docs/ecosystem.rst
@@ -1,3 +1,34 @@
+.. _external_jwt:
+
+External JWT Generation
+-----------------------
+
+JWT from Auth0
+~~~~~~~~~~~~~~
+
+An external service like `Auth0 <https://auth0.com/>`_ can do the hard work transforming OAuth from Github, Twitter, Google etc into a JWT suitable for PostgREST. Auth0 can also handle email signup and password reset flows.
+
+To use Auth0, create `an application <https://auth0.com/docs/get-started/applications>`_ for your app and `an API <https://auth0.com/docs/get-started/apis>`_ for your PostgREST server. Auth0 supports both HS256 and RS256 scheme for the issued tokens for APIs. For simplicity, you may first try HS256 scheme while creating your API on Auth0. Your application should use your PostgREST API's `API identifier <https://auth0.com/docs/get-started/apis/api-settings>`_ by setting it with the `audience parameter <https://auth0.com/docs/secure/tokens/access-tokens/get-access-tokens#control-access-token-audience>`_  during the authorization request. This will ensure that Auth0 will issue an access token for your PostgREST API. For PostgREST to verify the access token, you will need to set ``jwt-secret`` on PostgREST config file with your API's signing secret.
+
+.. note::
+
+  Our code requires a database role in the JWT. To add it you need to save the database role in Auth0 `app metadata <https://auth0.com/docs/manage-users/user-accounts/metadata/manage-metadata-rules>`_. Then, you will need to write `a rule <https://auth0.com/docs/customize/rules>`_ that will extract the role from the user's app_metadata and set it as a `custom claim <https://auth0.com/docs/get-started/apis/scopes/sample-use-cases-scopes-and-claims#add-custom-claims-to-a-token>`_ in the access token. Note that, you may use Auth0's `core authorization feature <https://auth0.com/docs/manage-users/access-control/rbac>`_ for more complex use cases. Metadata solution is mentioned here for simplicity.
+
+  .. code:: javascript
+
+    function (user, context, callback) {
+
+      // Follow the documentations at
+      // https://postgrest.org/en/latest/configuration.html#db-role-claim-key
+      // to set a custom role claim on PostgREST
+      // and use it as custom claim attribute in this rule
+      const myRoleClaim = 'https://myapp.com/role';
+
+      user.app_metadata = user.app_metadata || {};
+      context.accessToken[myRoleClaim] = user.app_metadata.role;
+      callback(null, user, context);
+    }
+
 .. _community_tutorials:
 
 Community Tutorials
diff --git a/docs/how-tos/sql-user-management-using-postgres-users-and-passwords.rst b/docs/how-tos/sql-user-management-using-postgres-users-and-passwords.rst
index 4dec8ed1f..108959ab7 100644
--- a/docs/how-tos/sql-user-management-using-postgres-users-and-passwords.rst
+++ b/docs/how-tos/sql-user-management-using-postgres-users-and-passwords.rst
@@ -59,7 +59,7 @@ In order to be able to work with postgres' SCRAM-SHA-256 password hashes, we als
   CREATE FUNCTION basic_auth.pbkdf2(salt bytea, pw text, count integer, desired_length integer, algorithm text) RETURNS bytea
       LANGUAGE plpgsql IMMUTABLE
       AS $$
-  DECLARE 
+  DECLARE
     hash_length integer;
     block_count integer;
     output bytea;
@@ -97,7 +97,7 @@ In order to be able to work with postgres' SCRAM-SHA-256 password hashes, we als
       --
       FOR j IN 2 .. count LOOP
         the_last := ext_pgcrypto.HMAC(the_last, pw::bytea, algorithm);
-        
+
         -- xor the two
         FOR k IN 1 .. length(xorsum) LOOP
           xorsum := set_byte(xorsum, k - 1, get_byte(xorsum, k - 1) # get_byte(the_last, k - 1));
@@ -210,8 +210,6 @@ anonymous roles. Below is an example of permissions that allow anonymous users t
 
 .. code-block:: postgres
 
-  -- the names "anon" and "authenticator" are configurable and not
-  -- sacred, we simply choose them for clarity
   CREATE ROLE anon NOINHERIT;
   CREATE role authenticator NOINHERIT LOGIN PASSWORD 'secret';
   GRANT anon TO authenticator;
@@ -299,7 +297,7 @@ Let's add a table, intended for the :code:`foo` user:
 Now try to get the table's contents with:
 
 .. tabs::
-  
+
   .. code-tab:: http
 
     GET /foobar HTTP/1.1
diff --git a/docs/how-tos/sql-user-management.rst b/docs/how-tos/sql-user-management.rst
new file mode 100644
index 000000000..1f8716e86
--- /dev/null
+++ b/docs/how-tos/sql-user-management.rst
@@ -0,0 +1,228 @@
+.. _sql_user_management:
+
+SQL User Management
+===================
+
+As mentioned on :ref:`jwt_generation`, an external service can provide user management and coordinate with the PostgREST server using JWT. It’s also possible to support logins entirely through SQL. It’s a fair bit of work, so get ready.
+
+Storing Users and Passwords
+---------------------------
+
+The following table, functions, and triggers will live in a :code:`basic_auth` schema that you shouldn't expose publicly in the API. The public views and functions will live in a different schema which internally references this internal information.
+
+First we'll need a table to keep track of our users:
+
+.. code:: sql
+
+  -- We put things inside the basic_auth schema to hide
+  -- them from public view. Certain public procs/views will
+  -- refer to helpers and tables inside.
+  create schema if not exists basic_auth;
+
+  create table if not exists
+  basic_auth.users (
+    email    text primary key check ( email ~* '^.+@.+\..+$' ),
+    pass     text not null check (length(pass) < 512),
+    role     name not null check (length(role) < 512)
+  );
+
+We would like the role to be a foreign key to actual database roles, however PostgreSQL does not support these constraints against the :code:`pg_roles` table. We'll use a trigger to manually enforce it.
+
+.. code-block:: plpgsql
+
+  create or replace function
+  basic_auth.check_role_exists() returns trigger as $$
+  begin
+    if not exists (select 1 from pg_roles as r where r.rolname = new.role) then
+      raise foreign_key_violation using message =
+        'unknown database role: ' || new.role;
+      return null;
+    end if;
+    return new;
+  end
+  $$ language plpgsql;
+
+  drop trigger if exists ensure_user_role_exists on basic_auth.users;
+  create constraint trigger ensure_user_role_exists
+    after insert or update on basic_auth.users
+    for each row
+    execute procedure basic_auth.check_role_exists();
+
+Next we'll use the pgcrypto extension and a trigger to keep passwords safe in the :code:`users` table.
+
+.. code-block:: plpgsql
+
+  create extension if not exists pgcrypto;
+
+  create or replace function
+  basic_auth.encrypt_pass() returns trigger as $$
+  begin
+    if tg_op = 'INSERT' or new.pass <> old.pass then
+      new.pass = crypt(new.pass, gen_salt('bf'));
+    end if;
+    return new;
+  end
+  $$ language plpgsql;
+
+  drop trigger if exists encrypt_pass on basic_auth.users;
+  create trigger encrypt_pass
+    before insert or update on basic_auth.users
+    for each row
+    execute procedure basic_auth.encrypt_pass();
+
+With the table in place we can make a helper to check a password against the encrypted column. It returns the database role for a user if the email and password are correct.
+
+.. code-block:: plpgsql
+
+  create or replace function
+  basic_auth.user_role(email text, pass text) returns name
+    language plpgsql
+    as $$
+  begin
+    return (
+    select role from basic_auth.users
+     where users.email = user_role.email
+       and users.pass = crypt(user_role.pass, users.pass)
+    );
+  end;
+  $$;
+
+.. _public_ui:
+
+Public User Interface
+---------------------
+
+In the previous section we created an internal table to store user information. Here we create a login function which takes an email address and password and returns JWT if the credentials match a user in the internal table.
+
+Permissions
+~~~~~~~~~~~
+
+Your database roles need access to the schema, tables, views and functions in order to service HTTP requests.
+Recall from the :ref:`roles` that PostgREST uses special roles to process requests, namely the authenticator and
+anonymous roles. Below is an example of permissions that allow anonymous users to create accounts and attempt to log in.
+
+.. code-block:: postgres
+
+  create role anon noinherit;
+  create role authenticator noinherit;
+  grant anon to authenticator;
+
+Then, add ``db-anon-role`` to the configuration file to allow anonymous requests.
+
+.. code:: ini
+
+  db-anon-role = "anon"
+
+JWT from SQL
+~~~~~~~~~~~~
+
+You can create JWT tokens in SQL using the `pgjwt extension <https://github.com/michelp/pgjwt>`_. It's simple and requires only pgcrypto. If you're on an environment like Amazon RDS which doesn't support installing new extensions, you can still manually run the `SQL inside pgjwt <https://github.com/michelp/pgjwt/blob/master/pgjwt--0.1.1.sql>`_ (you'll need to replace ``@extschema@`` with another schema or just delete it) which creates the functions you will need.
+
+Next write a stored procedure that returns the token. The one below returns a token with a hard-coded role, which expires five minutes after it was issued. Note this function has a hard-coded secret as well.
+
+.. code-block:: postgres
+
+  CREATE TYPE jwt_token AS (
+    token text
+  );
+
+  CREATE FUNCTION jwt_test() RETURNS public.jwt_token AS $$
+    SELECT public.sign(
+      row_to_json(r), 'reallyreallyreallyreallyverysafe'
+    ) AS token
+    FROM (
+      SELECT
+        'my_role'::text as role,
+        extract(epoch from now())::integer + 300 AS exp
+    ) r;
+  $$ LANGUAGE sql;
+
+PostgREST exposes this function to clients via a POST request to ``/rpc/jwt_test``.
+
+.. note::
+
+  To avoid hard-coding the secret in stored procedures, save it as a property of the database.
+
+  .. code-block:: postgres
+
+    -- run this once
+    ALTER DATABASE mydb SET "app.jwt_secret" TO 'reallyreallyreallyreallyverysafe';
+
+    -- then all functions can refer to app.jwt_secret
+    SELECT sign(
+      row_to_json(r), current_setting('app.jwt_secret')
+    ) AS token
+    FROM ...
+
+Logins
+~~~~~~
+
+As described in `JWT from SQL`_, we'll create a JWT inside our login function. Note that you'll need to adjust the secret key which is hard-coded in this example to a secure (at least thirty-two character) secret of your choosing.
+
+.. code-block:: postgres
+
+  -- add type
+  CREATE TYPE basic_auth.jwt_token AS (
+    token text
+  );
+
+  -- login should be on your exposed schema
+  create or replace function
+  login(email text, pass text) returns basic_auth.jwt_token as $$
+  declare
+    _role name;
+    result basic_auth.jwt_token;
+  begin
+    -- check email and password
+    select basic_auth.user_role(email, pass) into _role;
+    if _role is null then
+      raise invalid_password using message = 'invalid user or password';
+    end if;
+
+    select sign(
+        row_to_json(r), 'reallyreallyreallyreallyverysafe'
+      ) as token
+      from (
+        select _role as role, login.email as email,
+           extract(epoch from now())::integer + 60*60 as exp
+      ) r
+      into result;
+    return result;
+  end;
+  $$ language plpgsql security definer;
+
+  grant execute on function login(text,text) to anon;
+
+Since the above :code:`login` function is defined as `security definer <https://www.postgresql.org/docs/current/sql-createfunction.html#id-1.9.3.67.10.2>`_,
+the anonymous user :code:`anon` doesn't need permission to read the :code:`basic_auth.users` table. It doesn't even need permission to access the :code:`basic_auth` schema.
+:code:`grant execute on function` is included for clarity but it might not be needed, see :ref:`func_privs` for more details.
+
+An API request to call this function would look like:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    POST /rpc/login HTTP/1.1
+
+    { "email": "foo@bar.com", "pass": "foobar" }
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/rpc/login" \
+      -X POST -H "Content-Type: application/json" \
+      -d '{ "email": "foo@bar.com", "pass": "foobar" }'
+
+The response would look like the snippet below. Try decoding the token at `jwt.io <https://jwt.io/>`_. (It was encoded with a secret of :code:`reallyreallyreallyreallyverysafe` as specified in the SQL code above. You'll want to change this secret in your app!)
+
+.. code:: json
+
+  {
+    "token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJlbWFpbCI6ImZvb0BiYXIuY29tIiwicGFzcyI6ImZvb2JhciJ9.37066TTRlh-1hXhnA9oO9Pj6lgL6zFuJU0iCHhuCFno"
+  }
+
+
+Alternatives
+~~~~~~~~~~~~
+
+See the how-to :ref:`sql-user-management-using-postgres-users-and-passwords` for a similar way that completely avoids the table :code:`basic_auth.users`.
diff --git a/docs/index.rst b/docs/index.rst
index f138876d8..e5d90de2f 100644
--- a/docs/index.rst
+++ b/docs/index.rst
@@ -130,6 +130,12 @@ Reference guides
 
 Technical references for PostgREST's functionality.
 
+.. toctree::
+   :caption: Authentication
+   :hidden:
+
+   auth.rst
+
 .. toctree::
    :caption: API
    :hidden:
@@ -154,6 +160,7 @@ Technical references for PostgREST's functionality.
 
    errors.rst
 
+- :doc:`Authentication <auth>`
 - :doc:`API <api>`
 - :doc:`configuration`
 - :doc:`Schema Cache <schema_cache>`
@@ -165,10 +172,10 @@ Topic guides
 Explanations of some key concepts in PostgREST.
 
 .. toctree::
-   :caption: Authentication
+   :caption: Database Authorization
    :hidden:
 
-   auth.rst
+   db_authz.rst
 
 .. toctree::
    :caption: Schema Structure
@@ -188,7 +195,7 @@ Explanations of some key concepts in PostgREST.
 
    install.rst
 
-- :doc:`Authentication <auth>`
+- :doc:`Database Authorization <db_authz>`
 - :doc:`Schema Structure <schema_structure>`
 - :doc:`Administration <admin>`
 - :doc:`Installation <install>`
@@ -205,15 +212,17 @@ These are recipes that'll help you address specific use-cases.
    :caption: How-to guides
    :hidden:
 
+   how-tos/sql-user-management
    how-tos/working-with-postgresql-data-types
+   how-tos/sql-user-management-using-postgres-users-and-passwords
    how-tos/providing-images-for-img
    how-tos/create-soap-endpoint
-   how-tos/sql-user-management-using-postgres-users-and-passwords
 
-- :doc:`how-tos/providing-images-for-img`
+- :doc:`how-tos/sql-user-management`
 - :doc:`how-tos/working-with-postgresql-data-types`
-- :doc:`how-tos/create-soap-endpoint`
 - :doc:`how-tos/sql-user-management-using-postgres-users-and-passwords`
+- :doc:`how-tos/providing-images-for-img`
+- :doc:`how-tos/create-soap-endpoint`
 
 Ecosystem
 ---------

From 638aa8369dc6332a7da1555ed1fd2b364ffd88fa Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Mon, 1 May 2023 01:14:33 -0300
Subject: [PATCH 549/652] fix broken link

---
 docs/releases/v10.0.0.rst | 2 +-
 docs/releases/v10.2.0.rst | 2 +-
 docs/releases/v7.0.0.rst  | 2 +-
 docs/releases/v7.0.1.rst  | 2 +-
 docs/releases/v8.0.0.rst  | 2 +-
 docs/releases/v9.0.0.rst  | 2 +-
 docs/releases/v9.0.1.rst  | 2 +-
 postgrest.dict            | 1 +
 8 files changed, 8 insertions(+), 7 deletions(-)

diff --git a/docs/releases/v10.0.0.rst b/docs/releases/v10.0.0.rst
index 7dc46feda..9177fcfbc 100644
--- a/docs/releases/v10.0.0.rst
+++ b/docs/releases/v10.0.0.rst
@@ -207,7 +207,7 @@ Big thanks from the `PostgREST team <https://github.com/orgs/PostgREST/people>`_
     :width:  13em
 
 * Evans Fernandes
-* `Jan Sommer <https://github.com/nerfpops>`_
+* Jan Sommer
 * `Franz Gusenbauer <https://www.igutech.at/>`_
 * `Daniel Babiak <https://github.com/dbabiak>`_
 * Tsingson Qin
diff --git a/docs/releases/v10.2.0.rst b/docs/releases/v10.2.0.rst
index 3011e470e..ff7dc61ea 100644
--- a/docs/releases/v10.2.0.rst
+++ b/docs/releases/v10.2.0.rst
@@ -133,7 +133,7 @@ Big thanks from the `PostgREST team <https://github.com/orgs/PostgREST/people>`_
     :width:  13em
 
 * Evans Fernandes
-* `Jan Sommer <https://github.com/nerfpops>`_
+* Jan Sommer
 * `Franz Gusenbauer <https://www.igutech.at/>`_
 * `Daniel Babiak <https://github.com/dbabiak>`_
 * Tsingson Qin
diff --git a/docs/releases/v7.0.0.rst b/docs/releases/v7.0.0.rst
index 241f0e901..03aaa3a42 100644
--- a/docs/releases/v7.0.0.rst
+++ b/docs/releases/v7.0.0.rst
@@ -90,7 +90,7 @@ This release was made possible thanks to:
 
 * `Daniel Babiak <https://github.com/dbabiak>`_
 * Evans Fernandes
-* `Jan Sommer <https://github.com/nerfpops>`_
+* Jan Sommer
 * Tsingson Qin
 * Michel Pelletier
 * Jay Hannah
diff --git a/docs/releases/v7.0.1.rst b/docs/releases/v7.0.1.rst
index 5186216e5..541c46245 100644
--- a/docs/releases/v7.0.1.rst
+++ b/docs/releases/v7.0.1.rst
@@ -53,7 +53,7 @@ This release was made possible thanks to:
 
 * `Daniel Babiak <https://github.com/dbabiak>`_
 * Evans Fernandes
-* `Jan Sommer <https://github.com/nerfpops>`_
+* Jan Sommer
 * Tsingson Qin
 * Michel Pelletier
 * Jay Hannah
diff --git a/docs/releases/v8.0.0.rst b/docs/releases/v8.0.0.rst
index bdaea4916..22b77a736 100644
--- a/docs/releases/v8.0.0.rst
+++ b/docs/releases/v8.0.0.rst
@@ -171,7 +171,7 @@ Big thanks from the `PostgREST team <https://github.com/orgs/PostgREST/people>`_
     :width:  13em
 
 * Evans Fernandes
-* `Jan Sommer <https://github.com/nerfpops>`_
+* Jan Sommer
 * `Franz Gusenbauer <https://www.igutech.at/>`_
 * `Daniel Babiak <https://github.com/dbabiak>`_
 * Tsingson Qin
diff --git a/docs/releases/v9.0.0.rst b/docs/releases/v9.0.0.rst
index d451bba7e..236ebf0e3 100644
--- a/docs/releases/v9.0.0.rst
+++ b/docs/releases/v9.0.0.rst
@@ -110,7 +110,7 @@ Big thanks from the `PostgREST team <https://github.com/orgs/PostgREST/people>`_
     :width:  13em
 
 * Evans Fernandes
-* `Jan Sommer <https://github.com/nerfpops>`_
+* Jan Sommer
 * `Franz Gusenbauer <https://www.igutech.at/>`_
 * `Daniel Babiak <https://github.com/dbabiak>`_
 * Tsingson Qin
diff --git a/docs/releases/v9.0.1.rst b/docs/releases/v9.0.1.rst
index ffec1ee2a..dfbaa5735 100644
--- a/docs/releases/v9.0.1.rst
+++ b/docs/releases/v9.0.1.rst
@@ -69,7 +69,7 @@ Big thanks from the `PostgREST team <https://github.com/orgs/PostgREST/people>`_
     :width:  13em
 
 * Evans Fernandes
-* `Jan Sommer <https://github.com/nerfpops>`_
+* Jan Sommer
 * `Franz Gusenbauer <https://www.igutech.at/>`_
 * `Daniel Babiak <https://github.com/dbabiak>`_
 * Tsingson Qin
diff --git a/postgrest.dict b/postgrest.dict
index 102642e31..d99c43b30 100644
--- a/postgrest.dict
+++ b/postgrest.dict
@@ -156,6 +156,7 @@ Sencha
 Serverless
 Severin
 SHA
+Sommer
 signup
 SIGUSR
 sl

From 473035575cd29811cbb71e414290a84ac42fd863 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Tue, 2 May 2023 19:29:01 -0300
Subject: [PATCH 550/652] database as single source of truth philosophy

make it clear at the index
---
 docs/index.rst | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/docs/index.rst b/docs/index.rst
index e5d90de2f..81ae15fbf 100644
--- a/docs/index.rst
+++ b/docs/index.rst
@@ -67,15 +67,15 @@ Sponsors
 
 |
 
-Motivation
-----------
+Database as Single Source of Truth
+----------------------------------
 
-Using PostgREST is an alternative to manual CRUD programming. Custom API servers suffer problems. Writing business logic often duplicates, ignores or hobbles database structure. Object-relational mapping is a leaky abstraction leading to slow imperative code. The PostgREST philosophy establishes a single declarative source of truth: the data itself.
+Using PostgREST is an alternative to manual CRUD programming. Custom API servers suffer problems. Writing business logic often duplicates, ignores or hobbles database structure. Object-relational mapping is a leaky abstraction leading to slow imperative code. The PostgREST philosophy establishes a single declarative source of truth: the database itself.
 
 Declarative Programming
 -----------------------
 
-It's easier to ask PostgreSQL to join data for you and let its query planner figure out the details than to loop through rows yourself. It's easier to assign permissions to db objects than to add guards in controllers. (This is especially true for cascading permissions in data dependencies.) It's easier to set constraints than to litter code with sanity checks.
+It's easier to ask PostgreSQL to join data for you and let its query planner figure out the details than to loop through rows yourself. It's easier to assign permissions to database objects than to add guards in controllers. (This is especially true for cascading permissions in data dependencies.) It's easier to set constraints than to litter code with sanity checks.
 
 Leak-proof Abstraction
 ----------------------

From 764f0a035293da68df3b652fd0f23b3ade334783 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Wed, 3 May 2023 00:38:23 -0300
Subject: [PATCH 551/652] link authn to db authz

---
 docs/auth.rst     |  2 +-
 docs/db_authz.rst | 13 +++++++++----
 2 files changed, 10 insertions(+), 5 deletions(-)

diff --git a/docs/auth.rst b/docs/auth.rst
index 90df4c086..81360d31e 100644
--- a/docs/auth.rst
+++ b/docs/auth.rst
@@ -2,7 +2,7 @@
 
   <h1>Authentication</h1>
 
-PostgREST is designed to keep the database at the center of API security. All authorization happens through database roles and permissions. It is PostgREST's job to **authenticate** requests -- i.e. verify that a client is who they say they are -- and then let the database **authorize** client actions.
+PostgREST is designed to keep the database at the center of API security. All :doc:`authorization happens in the database <db_authz>` . It is PostgREST's job to **authenticate** requests -- i.e. verify that a client is who they say they are -- and then let the database **authorize** client actions.
 
 .. _roles:
 
diff --git a/docs/db_authz.rst b/docs/db_authz.rst
index 8225a9a4c..abb8e59c8 100644
--- a/docs/db_authz.rst
+++ b/docs/db_authz.rst
@@ -2,10 +2,15 @@
 
   <h1>Database Authorization</h1>
 
-Database authorization is the process of granting and verifying database access permissions. PostgreSQL manages permissions using the concept of roles. A role can be thought of as either a database user, or a group of database users, depending on how the role is set up.
+Database authorization is the process of granting and verifying database access permissions. PostgreSQL manages permissions using the concept of roles.
+
+Users and Groups
+----------------
+
+A role can be thought of as either a database user, or a group of database users, depending on how the role is set up.
 
 Roles for Each Web User
------------------------
+~~~~~~~~~~~~~~~~~~~~~~~
 
 PostgREST can accommodate either viewpoint. If you treat a role as a single user then the :ref:`jwt_impersonation` does most of what you need. When an authenticated user makes a request PostgREST will switch into the database role for that user, which in addition to restricting queries, is available to SQL through the :code:`current_user` variable.
 
@@ -41,7 +46,7 @@ Anyone accessing the generated API endpoint for the chat table will see exactly
    Roles are namespaced per-cluster rather than per-database so they may be prone to collision.
 
 Web Users Sharing Role
-----------------------
+~~~~~~~~~~~~~~~~~~~~~~
 
 Alternately database roles can represent groups instead of (or in addition to) individual users. You may choose that all signed-in users for a web app share the role ``webuser``. You can distinguish individual users by including extra claims in the JWT such as email.
 
@@ -70,7 +75,7 @@ For PostgreSQL server version < 14
 This allows JWT generation services to include extra information and your database code to react to it. For instance the RLS example could be modified to use this ``current_setting`` rather than ``current_user``. The second ``'true'`` argument tells ``current_setting`` to return NULL if the setting is missing from the current configuration.
 
 Hybrid User-Group Roles
------------------------
+~~~~~~~~~~~~~~~~~~~~~~~
 
 You can mix the group and individual role policies. For instance we could still have a webuser role and individual users which inherit from it:
 

From 4f4ae27a2d285cbb5110bcc313c3eb85f65ddc81 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Wed, 3 May 2023 08:45:05 -0300
Subject: [PATCH 552/652] clarify custom validation

---
 docs/auth.rst  | 15 ++++++++-------
 docs/index.rst |  2 +-
 2 files changed, 9 insertions(+), 8 deletions(-)

diff --git a/docs/auth.rst b/docs/auth.rst
index 81360d31e..ea80deae5 100644
--- a/docs/auth.rst
+++ b/docs/auth.rst
@@ -143,10 +143,8 @@ You can specify the literal value as we saw earlier, or reference a filename to
 
   jwt-secret = "@rsa.jwk.pub"
 
-.. _jwt_validation:
-
-JWT Validation
-~~~~~~~~~~~~~~
+JWT Claims Validation
+~~~~~~~~~~~~~~~~~~~~~
 
 PostgREST honors the :code:`exp` claim for token expiration, rejecting expired tokens.
 
@@ -168,19 +166,22 @@ PostgREST uses JWT mainly for authentication and authorization purposes and enco
 Custom Validation
 -----------------
 
-PostgREST does not enforce any extra constraints besides :ref:`jwt_validation`. An example of an extra constraint would be to immediately revoke access for a certain user. Using :ref:`db-pre-request` you can specify a stored procedure to call immediately after :ref:`user_impersonation` and before the main query itself runs.
+PostgREST does not enforce any extra constraints besides JWT validation. An example of an extra constraint would be to immediately revoke access for a certain user. Using :ref:`db-pre-request` you can specify a stored procedure to call immediately after :ref:`user_impersonation` and before the main query itself runs.
 
 .. code:: ini
 
   db-pre-request = "public.check_user"
 
-In the function you can run arbitrary code to check the request and raise an exception to block it if desired.
+In the function you can run arbitrary code to check the request and raise an exception(see :ref:`raise_error`) to block it if desired. You can take advantage of :ref:`guc_req_headers_cookies_claims` for
+doing custom logic based on the web user info.
 
 .. code-block:: postgres
 
   CREATE OR REPLACE FUNCTION check_user() RETURNS void AS $$
+  DECLARE
+    email text := current_setting('request.jwt.claims', true)::json->>'email';
   BEGIN
-    IF current_user = 'evil_user' THEN
+    IF email = 'evil.user@malicious.com' THEN
       RAISE EXCEPTION 'No, you are evil'
         USING HINT = 'Stop being so evil and maybe you can log in';
     END IF;
diff --git a/docs/index.rst b/docs/index.rst
index 81ae15fbf..5034f843a 100644
--- a/docs/index.rst
+++ b/docs/index.rst
@@ -70,7 +70,7 @@ Sponsors
 Database as Single Source of Truth
 ----------------------------------
 
-Using PostgREST is an alternative to manual CRUD programming. Custom API servers suffer problems. Writing business logic often duplicates, ignores or hobbles database structure. Object-relational mapping is a leaky abstraction leading to slow imperative code. The PostgREST philosophy establishes a single declarative source of truth: the database itself.
+Using PostgREST is an alternative to manual CRUD programming. Custom API servers suffer problems. Writing business logic often duplicates, ignores or hobbles database structure. Object-relational mapping is a leaky abstraction leading to slow imperative code. The PostgREST philosophy establishes a single declarative source of truth: the data itself.
 
 Declarative Programming
 -----------------------

From d1d159d1e0bc576add273b07ae91d4b746ae0189 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Wed, 3 May 2023 16:39:43 -0300
Subject: [PATCH 553/652] join schema structure with db authz

---
 docs/auth.rst             |   2 +-
 docs/db_authz.rst         | 105 ++++++++++++++++++++++++++++++++++++--
 docs/index.rst            |   7 ---
 docs/releases/v7.0.0.rst  |   2 +-
 docs/schema_structure.rst |  96 ----------------------------------
 5 files changed, 103 insertions(+), 109 deletions(-)
 delete mode 100644 docs/schema_structure.rst

diff --git a/docs/auth.rst b/docs/auth.rst
index ea80deae5..31eb5e31e 100644
--- a/docs/auth.rst
+++ b/docs/auth.rst
@@ -172,7 +172,7 @@ PostgREST does not enforce any extra constraints besides JWT validation. An exam
 
   db-pre-request = "public.check_user"
 
-In the function you can run arbitrary code to check the request and raise an exception(see :ref:`raise_error`) to block it if desired. You can take advantage of :ref:`guc_req_headers_cookies_claims` for
+In the function you can run arbitrary code to check the request and raise an exception(see :ref:`raise_error`) to block it if desired. Here you can take advantage of :ref:`guc_req_headers_cookies_claims` for
 doing custom logic based on the web user info.
 
 .. code-block:: postgres
diff --git a/docs/db_authz.rst b/docs/db_authz.rst
index abb8e59c8..73e8146b9 100644
--- a/docs/db_authz.rst
+++ b/docs/db_authz.rst
@@ -5,12 +5,12 @@
 Database authorization is the process of granting and verifying database access permissions. PostgreSQL manages permissions using the concept of roles.
 
 Users and Groups
-----------------
+================
 
 A role can be thought of as either a database user, or a group of database users, depending on how the role is set up.
 
 Roles for Each Web User
-~~~~~~~~~~~~~~~~~~~~~~~
+-----------------------
 
 PostgREST can accommodate either viewpoint. If you treat a role as a single user then the :ref:`jwt_impersonation` does most of what you need. When an authenticated user makes a request PostgREST will switch into the database role for that user, which in addition to restricting queries, is available to SQL through the :code:`current_user` variable.
 
@@ -46,7 +46,7 @@ Anyone accessing the generated API endpoint for the chat table will see exactly
    Roles are namespaced per-cluster rather than per-database so they may be prone to collision.
 
 Web Users Sharing Role
-~~~~~~~~~~~~~~~~~~~~~~
+----------------------
 
 Alternately database roles can represent groups instead of (or in addition to) individual users. You may choose that all signed-in users for a web app share the role ``webuser``. You can distinguish individual users by including extra claims in the JWT such as email.
 
@@ -75,7 +75,7 @@ For PostgreSQL server version < 14
 This allows JWT generation services to include extra information and your database code to react to it. For instance the RLS example could be modified to use this ``current_setting`` rather than ``current_user``. The second ``'true'`` argument tells ``current_setting`` to return NULL if the setting is missing from the current configuration.
 
 Hybrid User-Group Roles
-~~~~~~~~~~~~~~~~~~~~~~~
+-----------------------
 
 You can mix the group and individual role policies. For instance we could still have a webuser role and individual users which inherit from it:
 
@@ -92,3 +92,100 @@ You can mix the group and individual role policies. For instance we could still
   -- allow authenticator to switch into user000 role
   -- (the role itself has nologin)
 
+.. _schema_isolation:
+
+Schemas
+=======
+
+A PostgREST instance exposes all the tables, views, and stored procedures of the schemas configured in :ref:`db-schemas`. This means private data or implementation details can go inside private schemas and be invisible to HTTP clients.
+
+It is recommended that you don't expose tables on the schemas you expose, instead expose views and stored procedures which insulate the internal details from the outside world.
+This allows you to change the internals of your schema and maintain backwards compatibility. It also keeps your code easier to refactor, and provides a natural way to do API versioning.
+
+.. image:: _static/db.png
+
+Note that you must explicitly allow roles to access the exposed schemas:
+
+.. code-block:: postgres
+
+   GRANT USAGE ON SCHEMA api TO webuser;
+
+.. _func_privs:
+
+Functions
+=========
+
+By default, when a function is created, the privilege to execute it is not restricted by role. The function access is ``PUBLIC`` — executable by all roles (more details at `PostgreSQL Privileges page <https://www.postgresql.org/docs/current/ddl-priv.html>`_). This is not ideal for an API schema. To disable this behavior, you can run the following SQL statement:
+
+.. code-block:: postgres
+
+  ALTER DEFAULT PRIVILEGES REVOKE EXECUTE ON FUNCTIONS FROM PUBLIC;
+
+This will change the privileges for all functions created in the future in all schemas. Currently there is no way to limit it to a single schema. In our opinion it's a good practice anyway.
+
+.. note::
+
+    It is however possible to limit the effect of this clause only to functions you define. You can put the above statement at the beginning of the API schema definition, and then at the end reverse it with:
+
+    .. code-block:: postgres
+
+        ALTER DEFAULT PRIVILEGES GRANT EXECUTE ON FUNCTIONS TO PUBLIC;
+
+    This will work because the :code:`alter default privileges` statement has effect on function created *after* it is executed. See `PostgreSQL alter default privileges <https://www.postgresql.org/docs/current/sql-alterdefaultprivileges.html>`_ for more details.
+
+After that, you'll need to grant EXECUTE privileges on functions explicitly:
+
+.. code-block:: postgres
+
+   GRANT EXECUTE ON FUNCTION login TO anonymous;
+   GRANT EXECUTE ON FUNCTION signup TO anonymous;
+
+You can also grant execute on all functions in a schema to a higher privileged role:
+
+.. code-block:: postgres
+
+    GRANT EXECUTE ON ALL FUNCTIONS IN SCHEMA api TO web_user;
+
+Security definer
+----------------
+
+A function is executed with the privileges of the user who calls it. This means that the user has to have all permissions to do the operations the procedure performs.
+If the function accesses private database objects, your :ref:`API roles <roles>` won't be able to successfully execute the function.
+
+Another option is to define the function with the :code:`SECURITY DEFINER` option. Then only one permission check will take place, the permission to call the function, and the operations in the function will have the authority of the user who owns the function itself.
+
+.. code-block:: postgres
+
+  -- login as a user wich has privileges on the private schemas
+
+  -- create a sample function
+  create or replace function login(email text, pass text) returns jwt_token as $$
+  begin
+    -- access to a private schema called 'auth'
+    select auth.user_role(email, pass) into _role;
+    -- other operations
+    -- ...
+  end;
+  $$ language plpgsql security definer;
+
+Note the ``SECURITY DEFINER`` keywords at the end of the function. See `PostgreSQL documentation <https://www.postgresql.org/docs/current/sql-createfunction.html#SQL-CREATEFUNCTION-SECURITY>`_ for more details.
+
+Views
+=====
+
+Views are invoked with the privileges of the view owner, much like stored procedures with the ``SECURITY DEFINER`` option. When created by a SUPERUSER role, all `row-level security <https://www.postgresql.org/docs/current/ddl-rowsecurity.html>`_ will be bypassed unless a different, non-SUPERUSER owner is specified.
+
+For changing this, we can create a non-SUPERUSER role and make this role the view's owner.
+
+.. code-block:: postgres
+
+  CREATE ROLE api_views_owner NOINHERIT;
+  ALTER VIEW sample_view OWNER TO api_views_owner;
+
+Rules
+-----
+
+Insertion on views with complex `rules <https://www.postgresql.org/docs/current/sql-createrule.html>`_ might not work out of the box with PostgREST.
+It's recommended that you `use triggers instead of rules <https://wiki.postgresql.org/wiki/Don%27t_Do_This#Don.27t_use_rules>`_.
+If you want to keep using rules, a workaround is to wrap the view insertion in a stored procedure and call it through the :ref:`s_procs` interface.
+For more details, see this `github issue <https://github.com/PostgREST/postgrest/issues/1283>`_.
diff --git a/docs/index.rst b/docs/index.rst
index 5034f843a..c3e18938e 100644
--- a/docs/index.rst
+++ b/docs/index.rst
@@ -177,12 +177,6 @@ Explanations of some key concepts in PostgREST.
 
    db_authz.rst
 
-.. toctree::
-   :caption: Schema Structure
-   :hidden:
-
-   schema_structure.rst
-
 .. toctree::
    :caption: Administration
    :hidden:
@@ -196,7 +190,6 @@ Explanations of some key concepts in PostgREST.
    install.rst
 
 - :doc:`Database Authorization <db_authz>`
-- :doc:`Schema Structure <schema_structure>`
 - :doc:`Administration <admin>`
 - :doc:`Installation <install>`
 
diff --git a/docs/releases/v7.0.0.rst b/docs/releases/v7.0.0.rst
index 03aaa3a42..67357c9b2 100644
--- a/docs/releases/v7.0.0.rst
+++ b/docs/releases/v7.0.0.rst
@@ -35,7 +35,7 @@ Added
 
 * Documentation improvements
 
-  + Explanation for :doc:`Schema Structure <../schema_structure>`.
+  + Explanation for :doc:`Schema Structure <../db_authz>`.
   + Reference for :ref:`s_proc_embed`.
   + Reference for :ref:`mutation_embed`.
   + Reference for filters on :ref:`json_columns`.
diff --git a/docs/schema_structure.rst b/docs/schema_structure.rst
deleted file mode 100644
index d21b9332e..000000000
--- a/docs/schema_structure.rst
+++ /dev/null
@@ -1,96 +0,0 @@
-
-.. note::
-
-  This page is a work in progress.
-
-.. _schema_isolation:
-
-Schema Isolation
-================
-
-A PostgREST instance exposes all the tables, views, and stored procedures of a single `PostgreSQL schema <https://www.postgresql.org/docs/current/ddl-schemas.html>`_ (a namespace of database objects). This means private data or implementation details can go inside different private schemas and be invisible to HTTP clients.
-
-It is recommended that you don't expose tables on your API schema. Instead expose views and stored procedures which insulate the internal details from the outside world.
-This allows you to change the internals of your schema and maintain backwards compatibility. It also keeps your code easier to refactor, and provides a natural way to do API versioning.
-
-.. image:: _static/db.png
-
-.. _func_privs:
-
-Functions
-=========
-
-By default, when a function is created, the privilege to execute it is not restricted by role. The function access is ``PUBLIC`` — executable by all roles (more details at `PostgreSQL Privileges page <https://www.postgresql.org/docs/current/ddl-priv.html>`_). This is not ideal for an API schema. To disable this behavior, you can run the following SQL statement:
-
-.. code-block:: postgres
-
-  ALTER DEFAULT PRIVILEGES REVOKE EXECUTE ON FUNCTIONS FROM PUBLIC;
-
-This will change the privileges for all functions created in the future in all schemas. Currently there is no way to limit it to a single schema. In our opinion it's a good practice anyway.
-
-.. note::
-
-    It is however possible to limit the effect of this clause only to functions you define. You can put the above statement at the beginning of the API schema definition, and then at the end reverse it with:
-
-    .. code-block:: postgres
-
-        ALTER DEFAULT PRIVILEGES GRANT EXECUTE ON FUNCTIONS TO PUBLIC;
-
-    This will work because the :code:`alter default privileges` statement has effect on function created *after* it is executed. See `PostgreSQL alter default privileges <https://www.postgresql.org/docs/current/sql-alterdefaultprivileges.html>`_ for more details.
-
-After that, you'll need to grant EXECUTE privileges on functions explicitly:
-
-.. code-block:: postgres
-
-   GRANT EXECUTE ON FUNCTION login TO anonymous;
-   GRANT EXECUTE ON FUNCTION signup TO anonymous;
-
-You can also grant execute on all functions in a schema to a higher privileged role:
-
-.. code-block:: postgres
-
-    GRANT EXECUTE ON ALL FUNCTIONS IN SCHEMA api TO web_user;
-
-Security definer
-----------------
-
-A function is executed with the privileges of the user who calls it. This means that the user has to have all permissions to do the operations the procedure performs.
-If the function accesses private database objects, your :ref:`API roles <roles>` won't be able to successfully execute the function.
-
-Another option is to define the function with the :code:`SECURITY DEFINER` option. Then only one permission check will take place, the permission to call the function, and the operations in the function will have the authority of the user who owns the function itself.
-
-.. code-block:: postgres
-
-  -- login as a user wich has privileges on the private schemas
-
-  -- create a sample function
-  create or replace function login(email text, pass text) returns jwt_token as $$
-  begin
-    -- access to a private schema called 'auth'
-    select auth.user_role(email, pass) into _role;
-    -- other operations
-    -- ...
-  end;
-  $$ language plpgsql security definer;
-
-Note the ``SECURITY DEFINER`` keywords at the end of the function. See `PostgreSQL documentation <https://www.postgresql.org/docs/current/sql-createfunction.html#SQL-CREATEFUNCTION-SECURITY>`_ for more details.
-
-Views
-=====
-
-Views are invoked with the privileges of the view owner, much like stored procedures with the ``SECURITY DEFINER`` option. When created by a SUPERUSER role, all `row-level security <https://www.postgresql.org/docs/current/ddl-rowsecurity.html>`_ will be bypassed unless a different, non-SUPERUSER owner is specified.
-
-For changing this, we can create a non-SUPERUSER role and make this role the view's owner.
-
-.. code-block:: postgres
-
-  CREATE ROLE api_views_owner NOINHERIT;
-  ALTER VIEW sample_view OWNER TO api_views_owner;
-
-Rules
------
-
-Insertion on views with complex `rules <https://www.postgresql.org/docs/current/sql-createrule.html>`_ might not work out of the box with PostgREST.
-It's recommended that you `use triggers instead of rules <https://wiki.postgresql.org/wiki/Don%27t_Do_This#Don.27t_use_rules>`_.
-If you want to keep using rules, a workaround is to wrap the view insertion in a stored procedure and call it through the :ref:`s_procs` interface.
-For more details, see this `github issue <https://github.com/PostgREST/postgrest/issues/1283>`_.

From 8ec925c33eca90225a7b81c22511ef8297494559 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Wed, 3 May 2023 16:57:17 -0300
Subject: [PATCH 554/652] clarify view security invoker feature

Move RULEs limitation to Insertions
---
 docs/api.rst      |  7 +++++++
 docs/db_authz.rst | 20 ++++++++++----------
 2 files changed, 17 insertions(+), 10 deletions(-)

diff --git a/docs/api.rst b/docs/api.rst
index a9483635e..e693c5a86 100644
--- a/docs/api.rst
+++ b/docs/api.rst
@@ -1755,6 +1755,13 @@ URL encoded payloads can be posted with ``Content-Type: application/x-www-form-u
 
   Some JavaScript libraries will post the data incorrectly if you're not careful. For best results try one of the :ref:`clientside_libraries` built for PostgREST.
 
+.. important::
+
+  It's recommended that you `use triggers instead of rules <https://wiki.postgresql.org/wiki/Don%27t_Do_This#Don.27t_use_rules>`_.
+  Insertion on views with complex `rules <https://www.postgresql.org/docs/current/sql-createrule.html>`_ might not work out of the box with PostgREST due to its usage of CTEs.
+  If you want to keep using rules, a workaround is to wrap the view insertion in a stored procedure and call it through the :ref:`s_procs` interface.
+  For more details, see this `github issue <https://github.com/PostgREST/postgrest/issues/1283>`_.
+
 .. _bulk_insert:
 
 Bulk Insert
diff --git a/docs/db_authz.rst b/docs/db_authz.rst
index 73e8146b9..0659c1887 100644
--- a/docs/db_authz.rst
+++ b/docs/db_authz.rst
@@ -173,19 +173,19 @@ Note the ``SECURITY DEFINER`` keywords at the end of the function. See `PostgreS
 Views
 =====
 
-Views are invoked with the privileges of the view owner, much like stored procedures with the ``SECURITY DEFINER`` option. When created by a SUPERUSER role, all `row-level security <https://www.postgresql.org/docs/current/ddl-rowsecurity.html>`_ will be bypassed unless a different, non-SUPERUSER owner is specified.
+Views are invoked with the privileges of the view owner, much like stored procedures with the ``SECURITY DEFINER`` option. When created by a SUPERUSER role, all `row-level security <https://www.postgresql.org/docs/current/ddl-rowsecurity.html>`_ policies will be bypassed. This is an unsuitable behavior for an API schema.
 
-For changing this, we can create a non-SUPERUSER role and make this role the view's owner.
+If you're on PostgreSQL >= 15, this behavior can be changed by specifying the ``security_invoker`` option.
 
 .. code-block:: postgres
 
-  CREATE ROLE api_views_owner NOINHERIT;
+  CREATE VIEW sample_view WITH (security_invoker = true) AS
+  SELECT * FROM sample_table;
+
+On PostgreSQL < 15, you can create a non-SUPERUSER role and make this role the view's owner.
+
+.. code-block:: postgres
+
+  CREATE ROLE api_views_owner NOSUPERUSER NOBYPASSRLS;
   ALTER VIEW sample_view OWNER TO api_views_owner;
 
-Rules
------
-
-Insertion on views with complex `rules <https://www.postgresql.org/docs/current/sql-createrule.html>`_ might not work out of the box with PostgREST.
-It's recommended that you `use triggers instead of rules <https://wiki.postgresql.org/wiki/Don%27t_Do_This#Don.27t_use_rules>`_.
-If you want to keep using rules, a workaround is to wrap the view insertion in a stored procedure and call it through the :ref:`s_procs` interface.
-For more details, see this `github issue <https://github.com/PostgREST/postgrest/issues/1283>`_.

From 4fb13ebae6ce50cd830dd40661c1c958585f0534 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Wed, 3 May 2023 17:22:20 -0300
Subject: [PATCH 555/652] add tables to db authz

---
 docs/db_authz.rst | 20 ++++++++++++++++++--
 1 file changed, 18 insertions(+), 2 deletions(-)

diff --git a/docs/db_authz.rst b/docs/db_authz.rst
index 0659c1887..5e622b192 100644
--- a/docs/db_authz.rst
+++ b/docs/db_authz.rst
@@ -104,12 +104,28 @@ This allows you to change the internals of your schema and maintain backwards co
 
 .. image:: _static/db.png
 
-Note that you must explicitly allow roles to access the exposed schemas:
+You must explicitly allow roles to access the exposed schemas:
 
 .. code-block:: postgres
 
    GRANT USAGE ON SCHEMA api TO webuser;
 
+Tables
+======
+
+To let web users access tables you must grant them privileges for the operations you want them to do.
+
+.. code-block:: postgres
+
+  GRANT
+    SELECT
+  , INSERT
+  , UPDATE(message_body)
+  , DELETE
+  ON chat TO webuser;
+
+You can also choose on which table columns the operation is valid. In the above example, the web user can only update the ``message_body`` column.
+
 .. _func_privs:
 
 Functions
@@ -173,7 +189,7 @@ Note the ``SECURITY DEFINER`` keywords at the end of the function. See `PostgreS
 Views
 =====
 
-Views are invoked with the privileges of the view owner, much like stored procedures with the ``SECURITY DEFINER`` option. When created by a SUPERUSER role, all `row-level security <https://www.postgresql.org/docs/current/ddl-rowsecurity.html>`_ policies will be bypassed. This is an unsuitable behavior for an API schema.
+Views are invoked with the privileges of the view owner, much like stored procedures with the ``SECURITY DEFINER`` option. When created by a SUPERUSER role, all `row-level security <https://www.postgresql.org/docs/current/ddl-rowsecurity.html>`_ policies will be bypassed.
 
 If you're on PostgreSQL >= 15, this behavior can be changed by specifying the ``security_invoker`` option.
 

From 837df8b0450ab5921b7eacc72fffb9a58a34b4c3 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Wed, 3 May 2023 17:32:36 -0300
Subject: [PATCH 556/652] schema cache title is redundant on navbar

Use a raw html title for correcting this
---
 docs/admin.rst        | 2 +-
 docs/errors.rst       | 6 +++---
 docs/schema_cache.rst | 5 +++--
 3 files changed, 7 insertions(+), 6 deletions(-)

diff --git a/docs/admin.rst b/docs/admin.rst
index 36b9e5e6f..3f427feac 100644
--- a/docs/admin.rst
+++ b/docs/admin.rst
@@ -272,7 +272,7 @@ To do this, set the configuration variable :ref:`admin-server-port` to the port
 
 The ``live`` endpoint verifies if PostgREST is running on its configured port. A request will return ``200 OK`` if PostgREST is alive or ``503`` otherwise.
 
-The ``ready`` endpoint also checks the state of both the Database Connection and the :ref:`schema_cache`. A request will return ``200 OK`` if it is ready or ``503`` if not.
+The ``ready`` endpoint also checks the state of both the Database Connection and the :doc:`Schema Cache <schema_cache>`. A request will return ``200 OK`` if it is ready or ``503`` if not.
 
 For instance, to verify if PostgREST is running at ``localhost:3000`` while the ``admin-server-port`` is set to ``3001``:
 
diff --git a/docs/errors.rst b/docs/errors.rst
index 2d13faa98..e4bc89000 100644
--- a/docs/errors.rst
+++ b/docs/errors.rst
@@ -23,7 +23,7 @@ For the most part, error messages will come directly from the database with the
     "message": "relation \"api.nonexistent_table\" does not exist"
   }
 
-However, some errors do come from PostgREST itself (such as those related to the :ref:`schema_cache`). These have the same structure as the PostgreSQL errors but are differentiated by the ``PGRST`` prefix in the ``code`` field (see :ref:`pgrst_errors`). For instance, when querying a function that does not exist, the error will be:
+However, some errors do come from PostgREST itself (such as those related to the :doc:`Schema Cache <schema_cache>`). These have the same structure as the PostgreSQL errors but are differentiated by the ``PGRST`` prefix in the ``code`` field (see :ref:`pgrst_errors`). For instance, when querying a function that does not exist, the error will be:
 
 .. code-block:: http
 
@@ -137,8 +137,8 @@ Related to the connection with the database.
 | PGRST001      |             |                                                             |
 +---------------+-------------+-------------------------------------------------------------+
 | .. _pgrst002: | 503         | Could not connect with the database when building the       |
-|               |             | :ref:`schema_cache` due to the PostgreSQL service not       |
-| PGRST002      |             | running.                                                    |
+|               |             | :doc:`Schema Cache <schema_cache>`                          |
+| PGRST002      |             | due to the PostgreSQL service not running.                                                    |
 +---------------+-------------+-------------------------------------------------------------+
 | .. _pgrst003: | 504         | The request timed out waiting for a pool connection         |
 |               |             | to be available. See :ref:`db-pool-acquisition-timeout`.    |
diff --git a/docs/schema_cache.rst b/docs/schema_cache.rst
index c966a3990..9751e4d51 100644
--- a/docs/schema_cache.rst
+++ b/docs/schema_cache.rst
@@ -1,7 +1,8 @@
 .. _schema_cache:
 
-Schema Cache
-============
+.. raw:: html
+
+  <h1>Schema Cache</h1>
 
 Certain PostgREST features require metadata from the database schema. Getting this metadata requires executing expensive queries, so
 in order to avoid repeating this work, PostgREST uses a schema cache.

From 9de94274cf3ca5959bff863064b545eccf942dfa Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Wed, 3 May 2023 17:44:36 -0300
Subject: [PATCH 557/652] shorten some paragraphs in errors page

---
 docs/errors.rst | 12 ++++++++----
 1 file changed, 8 insertions(+), 4 deletions(-)

diff --git a/docs/errors.rst b/docs/errors.rst
index e4bc89000..2a5831c21 100644
--- a/docs/errors.rst
+++ b/docs/errors.rst
@@ -3,7 +3,7 @@
 Error Source
 ============
 
-For the most part, error messages will come directly from the database with the same `structure that PostgreSQL uses <https://www.postgresql.org/docs/current/error-style-guide.html>`_. PostgREST will convert the ``MESSAGE``, ``DETAIL``, ``HINT`` and ``ERRCODE`` from the PostgreSQL error to JSON format and add an HTTP status code to the response (see :ref:`status_codes`). For instance, this is the error you will get when querying a nonexistent table:
+For the most part, error messages will come directly from the database with the same `structure that PostgreSQL uses <https://www.postgresql.org/docs/current/error-style-guide.html>`_. PostgREST will convert the ``MESSAGE``, ``DETAIL``, ``HINT`` and ``ERRCODE`` from the PostgreSQL error to JSON and add an HTTP status code to the response. For instance, when querying a nonexistent table:
 
 .. code-block:: http
 
@@ -23,7 +23,7 @@ For the most part, error messages will come directly from the database with the
     "message": "relation \"api.nonexistent_table\" does not exist"
   }
 
-However, some errors do come from PostgREST itself (such as those related to the :doc:`Schema Cache <schema_cache>`). These have the same structure as the PostgreSQL errors but are differentiated by the ``PGRST`` prefix in the ``code`` field (see :ref:`pgrst_errors`). For instance, when querying a function that does not exist, the error will be:
+However, some errors do come from PostgREST itself (such as those related to the :doc:`Schema Cache <schema_cache>`). These have the same structure as the PostgreSQL errors but are differentiated by the ``PGRST`` prefix in the ``code`` field. For instance, when querying a function that does not exist:
 
 .. code-block:: http
 
@@ -116,7 +116,11 @@ PostgREST translates `PostgreSQL error codes <https://www.postgresql.org/docs/cu
 PostgREST Error Codes
 =====================
 
-PostgREST error codes have the form ``PGRSTgxx``, where ``PGRST`` is the prefix that differentiates the error from a PostgreSQL error, ``g`` is the group where the error belongs and ``xx`` is the number that identifies the error in the group.
+PostgREST error codes have the form ``PGRSTgxx``
+
+- ``PGRST`` is the prefix that differentiates the error from a PostgreSQL error.
+- ``g`` is the error group
+- ``xx`` is the error identifier in the group.
 
 .. _pgrst0**:
 
@@ -138,7 +142,7 @@ Related to the connection with the database.
 +---------------+-------------+-------------------------------------------------------------+
 | .. _pgrst002: | 503         | Could not connect with the database when building the       |
 |               |             | :doc:`Schema Cache <schema_cache>`                          |
-| PGRST002      |             | due to the PostgreSQL service not running.                                                    |
+| PGRST002      |             | due to the PostgreSQL service not running.                  |
 +---------------+-------------+-------------------------------------------------------------+
 | .. _pgrst003: | 504         | The request timed out waiting for a pool connection         |
 |               |             | to be available. See :ref:`db-pool-acquisition-timeout`.    |

From 560ec79a9021a61a84b193df54e1037ecb4eb233 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Thu, 4 May 2023 16:08:47 -0300
Subject: [PATCH 558/652] clarify schema cache and errors page

---
 docs/errors.rst          |  20 +++++---
 docs/releases/v8.0.0.rst |   4 +-
 docs/schema_cache.rst    | 100 +++++++--------------------------------
 3 files changed, 34 insertions(+), 90 deletions(-)

diff --git a/docs/errors.rst b/docs/errors.rst
index 2a5831c21..5fe83b14d 100644
--- a/docs/errors.rst
+++ b/docs/errors.rst
@@ -1,9 +1,14 @@
 .. _error_source:
 
-Error Source
+Error Format
 ============
 
-For the most part, error messages will come directly from the database with the same `structure that PostgreSQL uses <https://www.postgresql.org/docs/current/error-style-guide.html>`_. PostgREST will convert the ``MESSAGE``, ``DETAIL``, ``HINT`` and ``ERRCODE`` from the PostgreSQL error to JSON and add an HTTP status code to the response. For instance, when querying a nonexistent table:
+PostgREST error messages follow the PostgreSQL error structure. It includes ``MESSAGE``, ``DETAIL``, ``HINT``, ``ERRCODE`` and will add an HTTP status code to the response.
+
+Errors from PostgreSQL
+----------------------
+
+PostgREST will forward errors coming from PostgreSQL. For instance, when querying a nonexistent table:
 
 .. code-block:: http
 
@@ -23,7 +28,10 @@ For the most part, error messages will come directly from the database with the
     "message": "relation \"api.nonexistent_table\" does not exist"
   }
 
-However, some errors do come from PostgREST itself (such as those related to the :doc:`Schema Cache <schema_cache>`). These have the same structure as the PostgreSQL errors but are differentiated by the ``PGRST`` prefix in the ``code`` field. For instance, when querying a function that does not exist:
+Errors from PostgREST
+---------------------
+
+Errors that come from PostgREST itself maintain the same structure. But differ in the ``PGRST`` prefix in the ``code`` field. For instance, when querying a function that does not exist in the :doc:`schema cache <schema_cache>`:
 
 .. code-block:: http
 
@@ -37,7 +45,7 @@ However, some errors do come from PostgREST itself (such as those related to the
 .. code-block:: json
 
   {
-    "hint": "If a new function was created in the database with this name and parameters, try reloading the schema cache.",
+    "hint": "...",
     "details": null
     "code": "PGRST202",
     "message": "Could not find the api.nonexistent_function() function in the schema cache"
@@ -250,7 +258,7 @@ Related to a :ref:`stale schema cache <stale_schema>`. Most of the time, these e
 +---------------+-------------+-------------------------------------------------------------+
 | Code          | HTTP status | Description                                                 |
 +===============+=============+=============================================================+
-| .. _pgrst200: | 400         | Caused by :ref:`stale_fk_relationships`, otherwise any of   |
+| .. _pgrst200: | 400         | Caused by stale foreign key relationships, otherwise any of |
 |               |             | the embedding resources or the relationship itself may not  |
 | PGRST200      |             | exist in the database.                                      |
 +---------------+-------------+-------------------------------------------------------------+
@@ -258,7 +266,7 @@ Related to a :ref:`stale schema cache <stale_schema>`. Most of the time, these e
 |               |             | See :ref:`embed_disamb`.                                    |
 | PGRST201      |             |                                                             |
 +---------------+-------------+-------------------------------------------------------------+
-| .. _pgrst202: | 404         | Caused by a :ref:`stale_function_signature`, otherwise      |
+| .. _pgrst202: | 404         | Caused by a stale function signature, otherwise             |
 |               |             | the function may not exist in the database.                 |
 | PGRST202      |             |                                                             |
 +---------------+-------------+-------------------------------------------------------------+
diff --git a/docs/releases/v8.0.0.rst b/docs/releases/v8.0.0.rst
index 22b77a736..69fb70bd2 100644
--- a/docs/releases/v8.0.0.rst
+++ b/docs/releases/v8.0.0.rst
@@ -84,11 +84,11 @@ Changed
 * Modified the default logging level from ``info`` to ``error``. See :ref:`log-level`.
   |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
 
-* Changed the error message for a not found RPC on a stale schema (see :ref:`stale_function_signature`) and for the unsupported case of
+* Changed the error message for a not found RPC on a stale schema (see :ref:`stale_schema`) and for the unsupported case of
   overloaded functions with the same argument names but different types.
   |br| -- `@laurenceisla <https://github.com/laurenceisla>`_
 
-* Changed the error message for the no relationship found error. See :ref:`stale_fk_relationships`.
+* Changed the error message for the no relationship found error. See :ref:`stale_schema`.
   |br| -- `@laurenceisla <https://github.com/laurenceisla>`_
 
 Fixed
diff --git a/docs/schema_cache.rst b/docs/schema_cache.rst
index 9751e4d51..cfd9f0bb2 100644
--- a/docs/schema_cache.rst
+++ b/docs/schema_cache.rst
@@ -4,8 +4,7 @@
 
   <h1>Schema Cache</h1>
 
-Certain PostgREST features require metadata from the database schema. Getting this metadata requires executing expensive queries, so
-in order to avoid repeating this work, PostgREST uses a schema cache.
+Some PostgREST features need metadata from the database schema. Getting this metadata requires expensive queries. To avoid repeating this work, PostgREST uses a schema cache.
 
 +--------------------------------------------+-------------------------------------------------------------------------------+
 | Feature                                    | Required Metadata                                                             |
@@ -30,84 +29,19 @@ in order to avoid repeating this work, PostgREST uses a schema cache.
 
 .. _stale_schema:
 
-The Stale Schema Cache
-----------------------
+Stale Schema Cache
+------------------
 
-When you make changes on the metadata mentioned above, the schema cache will turn stale on a running PostgREST. Future requests that use the above features will need the :ref:`schema cache to be reloaded <schema_reloading>`; otherwise, you'll get an error instead of the expected result.
+One operational problem that comes a cache is that it can go stale. This can happen for PostgREST when you make changes to the metadata before mentioned. Requests that depend on the metadata will fail.
 
-For instance, let's see what would happen if you have a stale schema cache for foreign key relationships and function signatures.
-
-.. _stale_fk_relationships:
-
-Stale Foreign Key Relationships
-~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-Suppose you add a ``cities`` table to your database and define a foreign key that references an existing ``countries`` table. Then, you make a request to get the ``cities`` and their belonging ``countries``.
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /cities?select=name,country:countries(id,name) HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/cities?select=name,country:countries(id,name)"
-
-The result will be an error:
-
-.. code-block:: json
-
-  {
-    "hint": "Verify that 'cities' and 'countries' exist in the schema 'api' and that there is a foreign key relationship between them. If a new relationship was created, try reloading the schema cache.",
-    "details": null,
-    "code": "PGRST200",
-    "message": "Could not find a relationship between 'cities' and 'countries' in the schema cache"
-  }
-
-As you can see, PostgREST couldn't find the newly created foreign key in the schema cache. See :ref:`schema_reloading` and :ref:`auto_schema_reloading` to solve this issue.
-
-.. _stale_function_signature:
-
-Stale Function Signature
-~~~~~~~~~~~~~~~~~~~~~~~~
-
-The same issue will occur on newly created functions on a running PostgREST.
-
-.. code-block:: plpgsql
-
-  CREATE FUNCTION plus_one(num integer)
-  RETURNS integer AS $$
-   SELECT num + 1;
-  $$ LANGUAGE SQL IMMUTABLE;
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /rpc/plus_one?num=1 HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/rpc/plus_one?num=1"
-
-.. code-block:: json
-
-  {
-    "hint": "If a new function was created in the database with this name and parameters, try reloading the schema cache.",
-    "details": null,
-    "code": "PGRST202",
-    "message": "Could not find the api.plus_one(num) function in the schema cache"
-  }
-
-Here, PostgREST tries to find the function on the stale schema to no avail. See :ref:`schema_reloading` and :ref:`auto_schema_reloading` to solve this issue.
+You can solve this by reloading the cache manually or automatically.
 
 .. _schema_reloading:
 
 Schema Cache Reloading
 ----------------------
 
-To reload the cache without restarting the PostgREST server, send a SIGUSR1 signal to the server process.
+To manually reload the cache without restarting the PostgREST server, send a SIGUSR1 signal to the server process.
 
 .. code:: bash
 
@@ -123,27 +57,29 @@ For docker you can do:
   # or in docker-compose
   docker-compose kill -s SIGUSR1 <service>
 
-There's no downtime when reloading the schema cache. The reloading will happen on a background thread while requests keep being served.
+There’s no downtime when reloading the schema cache. The reloading will happen on a background thread while serving requests.
 
 .. _schema_reloading_notify:
 
 Reloading with NOTIFY
 ~~~~~~~~~~~~~~~~~~~~~
 
-There are environments where you can't send the SIGUSR1 Unix Signal (like on managed containers in cloud services or on Windows systems). For this reason, PostgREST also allows you to reload its schema cache through PostgreSQL `NOTIFY <https://www.postgresql.org/docs/current/sql-notify.html>`_ as follows:
+PostgREST also allows you to reload its schema cache through PostgreSQL `NOTIFY <https://www.postgresql.org/docs/current/sql-notify.html>`_.
 
 .. code-block:: postgresql
 
   NOTIFY pgrst, 'reload schema'
 
-The ``"pgrst"`` notification channel is enabled by default. For configuring the channel, see :ref:`db-channel` and :ref:`db-channel-enabled`.
+This is useful in environments where you can’t send the SIGUSR1 Unix Signal. Like on cloud managed containers or on Windows systems.
+
+The ``pgrst`` notification channel is enabled by default. For configuring the channel, see :ref:`db-channel` and :ref:`db-channel-enabled`.
 
 .. _auto_schema_reloading:
 
 Automatic Schema Cache Reloading
 --------------------------------
 
-You can do automatic schema cache reloading in a pure SQL way and forget about stale schema cache errors with an `event trigger <https://www.postgresql.org/docs/current/event-trigger-definition.html>`_ and ``NOTIFY``.
+You can do automatic schema cache reloading in a pure SQL way and forget about stale schema cache errors. For this use an `event trigger <https://www.postgresql.org/docs/current/event-trigger-definition.html>`_ and ``NOTIFY``.
 
 .. code-block:: postgresql
 
@@ -161,9 +97,9 @@ You can do automatic schema cache reloading in a pure SQL way and forget about s
     ON ddl_command_end
     EXECUTE PROCEDURE pgrst_watch();
 
-Now, whenever the ``pgrst_watch`` trigger is fired in the database, PostgREST will automatically reload the schema cache.
+Now, whenever the ``pgrst_watch`` trigger fires, PostgREST will auto-reload the schema cache.
 
-To disable auto reloading, drop the trigger:
+To disable auto reloading, drop the trigger.
 
 .. code-block:: postgresql
 
@@ -172,12 +108,12 @@ To disable auto reloading, drop the trigger:
 Finer-Grained Event Trigger
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
-You can refine the previous event trigger and only react to the events relevant to the schema cache. This also prevents unnecessary
-reloading when creating temporary tables(``CREATE TEMP TABLE``) inside functions.
+You can refine the previous event trigger to only react to the events relevant to the schema cache. This also prevents unnecessary
+reloading when creating temporary tables inside functions.
 
 .. code-block:: postgresql
 
-  -- watch create and alter
+  -- watch CREATE and ALTER
   CREATE OR REPLACE FUNCTION pgrst_ddl_watch() RETURNS event_trigger AS $$
   DECLARE
     cmd record;
@@ -204,7 +140,7 @@ reloading when creating temporary tables(``CREATE TEMP TABLE``) inside functions
     END LOOP;
   END; $$ LANGUAGE plpgsql;
 
-  -- watch drop
+  -- watch DROP
   CREATE OR REPLACE FUNCTION pgrst_drop_watch() RETURNS event_trigger AS $$
   DECLARE
     obj record;

From 9a3973be351c972208814e36b7d3063789726b67 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Fri, 5 May 2023 00:09:30 -0300
Subject: [PATCH 559/652] add transactions reference

---
 docs/api.rst             | 264 ++------------------------------
 docs/configuration.rst   |   2 +-
 docs/db_authz.rst        |  11 +-
 docs/index.rst           |  17 ++-
 docs/releases/v9.0.0.rst |   2 +-
 docs/transactions.rst    | 320 +++++++++++++++++++++++++++++++++++++++
 6 files changed, 354 insertions(+), 262 deletions(-)
 create mode 100644 docs/transactions.rst

diff --git a/docs/api.rst b/docs/api.rst
index e693c5a86..e2b163ecc 100644
--- a/docs/api.rst
+++ b/docs/api.rst
@@ -1,6 +1,8 @@
 .. role:: sql(code)
    :language: sql
 
+.. _tables_views:
+
 Tables and Views
 ================
 
@@ -2079,21 +2081,18 @@ The PostgREST URL grammar limits the kinds of queries clients can perform. It pr
 Stored Procedures
 =================
 
-Every stored procedure in the API-exposed database schema is accessible under the :code:`/rpc` prefix. The API endpoint supports POST (and in some cases GET) to execute the function.
+*"A single resource can be the equivalent of a database stored procedure, with the power to abstract state changes over any number of storage items"* -- `Roy T. Fielding <https://roy.gbiv.com/untangled/2008/rest-apis-must-be-hypertext-driven#comment-743>`_
 
-.. tabs::
+Every stored procedure in the exposed database schema is accessible under the :code:`/rpc` prefix. Procedures can perform any operations allowed by PostgreSQL (read data, modify data, and even DDL operations).
 
-  .. code-tab:: http
+.. note::
 
-    POST /rpc/function_name HTTP/1.1
+  The ``/rpc`` prefix is used to avoid name collisions between views and procedures.
 
-  .. code-tab:: bash Curl
+POST on Stored Procedures
+-------------------------
 
-    curl "http://localhost:3000/rpc/function_name" -X POST
-
-Such functions can perform any operations allowed by PostgreSQL (read data, modify data, and even DDL operations).
-
-To supply arguments in an API call, include a JSON object in the request payload and each key/value of the object will become an argument.
+To supply arguments in an API call, include a JSON object in the request payload. Each key/value of the object will become an argument.
 
 For instance, assume we have created this function in the database.
 
@@ -2128,39 +2127,18 @@ The client can call it by posting an object like
 
   3
 
-
-Procedures must be declared with named parameters. Procedures declared like
-
-.. code-block:: plpgsql
-
-  CREATE FUNCTION non_named_args(integer, text, integer) ...
-
-cannot be called with PostgREST, since we use `named notation <https://www.postgresql.org/docs/current/sql-syntax-calling-funcs.html#SQL-SYNTAX-CALLING-FUNCS-NAMED>`_ internally.
-
-Note that PostgreSQL converts identifier names to lowercase unless you quote them like:
-
-.. code-block:: postgres
-
-  CREATE FUNCTION "someFunc"("someParam" text) ...
-
-PostgreSQL has four procedural languages that are part of the core distribution: PL/pgSQL, PL/Tcl, PL/Perl, and PL/Python. There are many other procedural languages distributed as additional extensions. Also, plain SQL can be used to write functions (as shown in the example above).
-
 .. note::
 
-  Why the ``/rpc`` prefix? One reason is to avoid name collisions between views and procedures. It also helps emphasize to API consumers that these functions are not normal restful things. The functions can have arbitrary and surprising behavior, not the standard "post creates a resource" thing that users expect from the other routes.
+  PostgreSQL converts identifier names to lowercase unless you quote them like:
 
-Immutable and stable functions
-------------------------------
+  .. code-block:: postgres
 
-PostgREST executes POST requests in a read/write transaction except for functions marked as ``IMMUTABLE`` or ``STABLE``. Those must not modify the database and are executed in a read-only transaction compatible for read-replicas.
+    CREATE FUNCTION "someFunc"("someParam" text) ...
 
-Procedures that do not modify the database can be called with the HTTP GET verb as well, if desired. PostgREST executes all GET requests in a read-only transaction. Modifying the database inside read-only transactions is not possible and calling volatile functions with GET will fail.
+GET on Stored Procedures
+------------------------
 
-.. note::
-
-  The `volatility marker <https://www.postgresql.org/docs/current/xfunc-volatility.html>`_ is a promise about the behavior of the function.  PostgreSQL will let you mark a function that modifies the database as ``IMMUTABLE`` or ``STABLE`` without failure.  However, because of the read-only transaction this would still fail with PostgREST.
-
-Because ``add_them`` is ``IMMUTABLE``, we can alternately call the function with a GET request:
+If the function doesn't modify the database, it will also run under the GET method(see :ref:`access_mode`).
 
 .. tabs::
 
@@ -2801,218 +2779,6 @@ You can also select the schema for :ref:`s_procs` and :ref:`open-api`.
 
    These headers are based on the nascent "Content Negotiation by Profile" spec: https://www.w3.org/TR/dx-prof-conneg
 
-.. _http_context:
-
-HTTP Context
-============
-
-.. _guc_req_headers_cookies_claims:
-
-Accessing Request Headers, Cookies and JWT claims
--------------------------------------------------
-
-You can access request headers, cookies and JWT claims by reading GUC variables set by PostgREST per request. They are named :code:`request.headers`, :code:`request.cookies` and :code:`request.jwt.claims`.
-
-.. code-block:: postgresql
-
-  -- To read the value of the User-Agent request header:
-  SELECT current_setting('request.headers', true)::json->>'user-agent';
-
-  -- To read the value of sessionId in a cookie:
-  SELECT current_setting('request.cookies', true)::json->>'sessionId';
-
-  -- To read the value of the email claim in a jwt:
-  SELECT current_setting('request.jwt.claims', true)::json->>'email';
-
-  -- To get all the headers sent in the request
-  SELECT current_setting('request.headers', true)::json;
-
-.. note::
-
-  The ``role`` in ``request.jwt.claims`` defaults to the value of :ref:`db-anon-role`.
-
-.. _guc_legacy_names:
-
-Legacy GUC variable names
-~~~~~~~~~~~~~~~~~~~~~~~~~
-
-For PostgreSQL versions below 14, PostgREST will take into consideration the :ref:`db-use-legacy-gucs` config, which is set to true by default. This means that the interface for accessing these GUCs is `the same as in older versions <https://postgrest.org/en/v8.0/api.html#accessing-request-headers-cookies-and-jwt-claims>`_. You can opt in to use the JSON GUCs mentioned above by setting the ``db-use-legacy-gucs`` to false.
-
-.. _guc_req_path_method:
-
-Accessing Request Path and Method
----------------------------------
-
-You can also access the request path and method with :code:`request.path` and :code:`request.method`.
-
-.. code-block:: postgresql
-
-  -- You can get the path of the request with
-  SELECT current_setting('request.path', true);
-
-  -- You can get the method of the request with
-  SELECT current_setting('request.method', true);
-
-.. _guc_resp_hdrs:
-
-Setting Response Headers
-------------------------
-
-PostgREST reads the ``response.headers`` SQL variable to add extra headers to the HTTP response. Stored procedures can modify this variable. For instance, this statement would add caching headers to the response:
-
-.. code-block:: sql
-
-  -- tell client to cache response for two days
-
-  SELECT set_config('response.headers',
-    '[{"Cache-Control": "public"}, {"Cache-Control": "max-age=259200"}]', true);
-
-Notice that the variable should be set to an *array* of single-key objects rather than a single multiple-key object. This is because headers such as ``Cache-Control`` or ``Set-Cookie`` need to be repeated when setting multiple values and an object would not allow the repeated key.
-
-.. note::
-
-  PostgREST provided headers such as ``Content-Type``, ``Location``, etc. can be overriden this way. Note that irrespective of overridden ``Content-Type`` response header, the content will still be converted to JSON, unless you also set :ref:`raw-media-types` to something like ``text/html``.
-
-.. _pre_req_headers:
-
-Setting headers via pre-request
-~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-By using a :ref:`db-pre-request` function, you can add headers to GET/POST/PATCH/PUT/DELETE responses.
-As an example, let's add some cache headers for all requests that come from an Internet Explorer(6 or 7) browser.
-
-.. code-block:: postgresql
-
-   create or replace function custom_headers() returns void as $$
-   declare
-     user_agent text := current_setting('request.headers', true)::json->>'user-agent';
-   begin
-     if user_agent similar to '%MSIE (6.0|7.0)%' then
-       perform set_config('response.headers',
-         '[{"Cache-Control": "no-cache, no-store, must-revalidate"}]', false);
-     end if;
-   end; $$ language plpgsql;
-
-   -- set this function on postgrest.conf
-   -- db-pre-request = custom_headers
-
-Now when you make a GET request to a table or view, you'll get the cache headers.
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /people HTTP/1.1
-    User-Agent: Mozilla/4.01 (compatible; MSIE 6.0; Windows NT 5.1)
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/people" -i \
-     -H "User-Agent: Mozilla/4.01 (compatible; MSIE 6.0; Windows NT 5.1)"
-
-.. code-block:: http
-
-  HTTP/1.1 200 OK
-  Content-Type: application/json; charset=utf-8
-  Cache-Control: no-cache, no-store, must-revalidate
-
-.. _guc_resp_status:
-
-Setting Response Status Code
-----------------------------
-
-You can set the ``response.status`` GUC to override the default status code PostgREST provides. For instance, the following function would replace the default ``200`` status code.
-
-.. code-block:: postgres
-
-   create or replace function teapot() returns json as $$
-   begin
-     perform set_config('response.status', '418', true);
-     return json_build_object('message', 'The requested entity body is short and stout.',
-                              'hint', 'Tip it over and pour it out.');
-   end;
-   $$ language plpgsql;
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /rpc/teapot HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/rpc/teapot" -i
-
-.. code-block:: http
-
-  HTTP/1.1 418 I'm a teapot
-
-  {
-    "message" : "The requested entity body is short and stout.",
-    "hint" : "Tip it over and pour it out."
-  }
-
-If the status code is standard, PostgREST will complete the status message(**I'm a teapot** in this example).
-
-.. _raise_error:
-
-Raise errors with HTTP Status Codes
------------------------------------
-
-Stored procedures can return non-200 HTTP status codes by raising SQL exceptions. For instance, here's a saucy function that always responds with an error:
-
-.. code-block:: postgresql
-
-  CREATE OR REPLACE FUNCTION just_fail() RETURNS void
-    LANGUAGE plpgsql
-    AS $$
-  BEGIN
-    RAISE EXCEPTION 'I refuse!'
-      USING DETAIL = 'Pretty simple',
-            HINT = 'There is nothing you can do.';
-  END
-  $$;
-
-Calling the function returns HTTP 400 with the body
-
-.. code-block:: json
-
-  {
-    "message":"I refuse!",
-    "details":"Pretty simple",
-    "hint":"There is nothing you can do.",
-    "code":"P0001"
-  }
-
-.. note::
-
-   Keep in mind that ``RAISE EXCEPTION`` will abort the transaction and rollback all changes. If you don't want this, you can instead use the :ref:`response.status GUC <guc_resp_status>`.
-
-One way to customize the HTTP status code is by raising particular exceptions according to the PostgREST :ref:`error to status code mapping <status_codes>`. For example, :code:`RAISE insufficient_privilege` will respond with HTTP 401/403 as appropriate.
-
-For even greater control of the HTTP status code, raise an exception of the ``PTxyz`` type. For instance to respond with HTTP 402, raise 'PT402':
-
-.. code-block:: sql
-
-  RAISE sqlstate 'PT402' using
-    message = 'Payment Required',
-    detail = 'Quota exceeded',
-    hint = 'Upgrade your plan';
-
-Returns:
-
-.. code-block:: http
-
-  HTTP/1.1 402 Payment Required
-  Content-Type: application/json; charset=utf-8
-
-  {
-    "message": "Payment Required",
-    "details": "Quota exceeded",
-    "hint": "Upgrade your plan",
-    "code": "PT402"
-  }
-
 .. _explain_plan:
 
 Execution plan
diff --git a/docs/configuration.rst b/docs/configuration.rst
index cf4e6c8b2..e43f2d003 100644
--- a/docs/configuration.rst
+++ b/docs/configuration.rst
@@ -368,7 +368,7 @@ db-pre-request
   **In-Database** pgrst.db_pre_request
   =============== =================
 
-  A schema-qualified stored procedure name to call right after switching roles for a client request. This provides an opportunity to modify SQL variables or raise an exception to prevent the request from completing.
+  A schema-qualified stored procedure name to call right after the :ref:`tx_settings` are set. See :ref:`pre-request`.
 
 .. _db-prepared-statements:
 
diff --git a/docs/db_authz.rst b/docs/db_authz.rst
index 5e622b192..6e3748aad 100644
--- a/docs/db_authz.rst
+++ b/docs/db_authz.rst
@@ -57,20 +57,19 @@ Alternately database roles can represent groups instead of (or in addition to) i
     "email": "john@doe.com"
   }
 
-SQL code can access claims through GUC variables set by PostgREST per request. For instance to get the email claim, call this function:
-
-For PostgreSQL server version >= 14
+SQL code can access claims through PostgREST :ref:`tx_settings`. For instance to get the email claim, call this function:
 
 .. code:: sql
 
   current_setting('request.jwt.claims', true)::json->>'email';
 
+.. note::
 
-For PostgreSQL server version < 14
+  For PostgreSQL < 14
 
-.. code:: sql
+  .. code:: sql
 
-  current_setting('request.jwt.claim.email', true);
+    current_setting('request.jwt.claim.email', true);
 
 This allows JWT generation services to include extra information and your database code to react to it. For instance the RLS example could be modified to use this ``current_setting`` rather than ``current_user``. The second ``'true'`` argument tells ``current_setting`` to return NULL if the setting is missing from the current configuration.
 
diff --git a/docs/index.rst b/docs/index.rst
index c3e18938e..fa98bb6b5 100644
--- a/docs/index.rst
+++ b/docs/index.rst
@@ -125,8 +125,8 @@ Are you new to PostgREST? This is the place to start!
 
 Also have a look at :doc:`Installation <install>` and :ref:`community_tutorials`.
 
-Reference guides
-----------------
+References
+----------
 
 Technical references for PostgREST's functionality.
 
@@ -142,6 +142,12 @@ Technical references for PostgREST's functionality.
 
    api.rst
 
+.. toctree::
+   :caption: Transactions
+   :hidden:
+
+   transactions.rst
+
 .. toctree::
    :caption: Configuration
    :hidden:
@@ -162,14 +168,15 @@ Technical references for PostgREST's functionality.
 
 - :doc:`Authentication <auth>`
 - :doc:`API <api>`
+- :doc:`Transactions <transactions>`
 - :doc:`configuration`
 - :doc:`Schema Cache <schema_cache>`
 - :doc:`Errors <errors>`
 
-Topic guides
+Explanations
 ------------
 
-Explanations of some key concepts in PostgREST.
+Key concepts in PostgREST.
 
 .. toctree::
    :caption: Database Authorization
@@ -198,7 +205,7 @@ Explanations of some key concepts in PostgREST.
 How-to guides
 -------------
 
-These are recipes that'll help you address specific use-cases.
+Recipes that'll help you address specific use-cases.
 
 .. toctree::
    :glob:
diff --git a/docs/releases/v9.0.0.rst b/docs/releases/v9.0.0.rst
index 236ebf0e3..5963e8237 100644
--- a/docs/releases/v9.0.0.rst
+++ b/docs/releases/v9.0.0.rst
@@ -12,7 +12,7 @@ PostgreSQL 14 compatibility
 
 PostgreSQL 14 Beta 1 tightened its GUC naming scheme making it impossible to use multiple dots (``.``) and dashes (``-``) on custom GUC parameters, this caused our `old HTTP Context <https://postgrest.org/en/v8.0/api.html#accessing-request-headers-cookies-and-jwt-claims>`_ to fail across all requests. Thankfully, `@robertsosinski <https://github.com/robertsosinski>`_ got the PostgreSQL team to reconsider allowing multiple dots in the GUC name, allowing us to avoid a major breaking change. You can see the full discussion `here <https://www.postgresql.org/message-id/17045-6a4a9f0d1513f72b%40postgresql.org>`_.
 
-Still, dashes cannot be used on PostgreSQL 14 custom GUC parameters, so we changed our HTTP Context :ref:`to namespace using a mix of dots and JSON <guc_req_headers_cookies_claims>`. On older PostgreSQL versions we still use the :ref:`guc_legacy_names`. If you wish to use the new JSON GUCs on these versions, set the :ref:`db-use-legacy-gucs` config option to false.
+Still, dashes cannot be used on PostgreSQL 14 custom GUC parameters, so we changed our HTTP Context :ref:`to namespace using a mix of dots and JSON <guc_req_headers_cookies_claims>`. On older PostgreSQL versions we still use the settings legacy names. If you wish to use the new JSON GUCs on these versions, set the :ref:`db-use-legacy-gucs` config option to false.
 
 Resource Embedding with Top-level Filtering
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
diff --git a/docs/transactions.rst b/docs/transactions.rst
new file mode 100644
index 000000000..d86ea9818
--- /dev/null
+++ b/docs/transactions.rst
@@ -0,0 +1,320 @@
+.. raw:: html
+
+  <h1>Transactions</h1>
+
+Every :doc:`authenticated <auth>` request to an :doc:`API resource <api>` runs inside a transaction. The sequence of the transaction is as follows:
+
+.. code-block:: postgresql
+
+  BEGIN; -- <Access Mode> <Isolation Level>
+  -- <Transaction-scoped settings>
+  -- <Main Query>;
+  END;
+
+.. _access_mode:
+
+Access Mode
+===========
+
+The access mode on :ref:`tables_views` is determined by the HTTP method.
+
+.. list-table::
+   :header-rows: 1
+
+   * - HTTP Method
+     - Access Method
+   * - GET, HEAD
+     - READ ONLY
+   * - POST, PATCH, PUT, DELETE
+     - READ WRITE
+
+:ref:`s_procs` additionally depend on the function `volatility <https://www.postgresql.org/docs/current/xfunc-volatility.html>`_.
+
+.. list-table::
+   :header-rows: 2
+
+   * -
+     - Access Method
+     -
+     -
+   * - HTTP Method
+     - VOLATILE
+     - STABLE
+     - IMMUTABLE
+   * - GET, HEAD
+     - READ ONLY
+     - READ ONLY
+     - READ ONLY
+   * - POST
+     - READ WRITE
+     - READ ONLY
+     - READ ONLY
+
+Modifying the database inside READ ONLY transactions is not possible. PostgREST uses this fact to enforce HTTP semantics in GET and HEAD requests.
+
+.. note::
+
+  The volatility marker is a promise about the behavior of the function.  PostgreSQL will let you mark a function that modifies the database as ``IMMUTABLE`` or ``STABLE`` without failure.  But, because of the READ ONLY transaction the function will fail under PostgREST.
+
+The :ref:`options_requests` method doesn't start a transaction, so it's not relevant here.
+
+Isolation Level
+===============
+
+Every transaction uses the PostgreSQL default isolation level: READ COMMITTED.
+
+.. _tx_settings:
+
+Transaction-Scoped Settings
+===========================
+
+PostgREST uses settings tied to the transaction lifetime. These can be used to get data about the HTTP request. Or to modify the HTTP response.
+
+You can get these with ``current_setting``
+
+.. code-block:: postgresql
+
+  -- request settings use the ``request.`` prefix.
+  SELECT
+    current_setting('request.<setting>', true);
+
+And you can set them with ``set_config``
+
+.. code-block:: postgresql
+
+  -- response settings use the ``response.`` prefix.
+  SELECT
+    set_config('response.setting1', 'value1' ,true);
+
+Request Role and Search Path
+-----------------------------
+
+Because of :ref:`user_impersonation`, PostgREST sets the standard ``role``. You can get this in different ways:
+
+.. code-block:: postgresql
+
+  SELECT current_role;
+
+  SELECT current_user;
+
+  SELECT current_setting('role', true);
+
+Additionally it also sets the ``search_path`` based on :ref:`db-schemas` and :ref:`db-extra-search-path`.
+
+
+.. _guc_req_headers_cookies_claims:
+
+Request Headers, Cookies and JWT claims
+---------------------------------------
+
+PostgREST stores the headers, cookies and headers as JSON. To get them:
+
+.. code-block:: postgresql
+
+  -- To get all the headers sent in the request
+  SELECT current_setting('request.headers', true)::json;
+
+  -- To get a single header, you can use JSON arrow operators
+  SELECT current_setting('request.headers', true)::json->>'user-agent';
+
+  -- value of sessionId in a cookie
+  SELECT current_setting('request.cookies', true)::json->>'sessionId';
+
+  -- value of the email claim in a jwt
+  SELECT current_setting('request.jwt.claims', true)::json->>'email';
+
+.. note::
+
+  The ``role`` in ``request.jwt.claims`` defaults to the value of :ref:`db-anon-role`.
+
+.. _guc_req_path_method:
+
+Request Path and Method
+-----------------------
+
+The path and method are stored as ``text``.
+
+.. code-block:: postgresql
+
+  SELECT current_setting('request.path', true);
+
+  SELECT current_setting('request.method', true);
+
+.. _guc_resp_hdrs:
+
+Response Headers
+----------------
+
+You can set ``response.headers`` to add headers to the HTTP response. For instance, this statement would add caching headers to the response:
+
+.. code-block:: sql
+
+  -- tell client to cache response for two days
+
+  SELECT set_config('response.headers',
+    '[{"Cache-Control": "public"}, {"Cache-Control": "max-age=259200"}]', true);
+
+.. code-block:: http
+
+  HTTP/1.1 200 OK
+  Content-Type: application/json; charset=utf-8
+  Cache-Control: no-cache, no-store, must-revalidate
+
+Notice that the ``response.headers`` should be set to an *array* of single-key objects rather than a single multiple-key object. This is because headers such as ``Cache-Control`` or ``Set-Cookie`` need repeating when setting many values. An object would not allow the repeated key.
+
+.. note::
+
+  PostgREST provided headers such as ``Content-Type``, ``Location``, etc. can be overriden this way. Note that irrespective of overridden ``Content-Type`` response header, the content will still be converted to JSON, unless you also set :ref:`raw-media-types` to something like ``text/html``.
+
+.. _guc_resp_status:
+
+Response Status Code
+--------------------
+
+You can set the ``response.status`` to override the default status code PostgREST provides. For instance, the following function would replace the default ``200`` status code.
+
+.. code-block:: postgres
+
+   create or replace function teapot() returns json as $$
+   begin
+     perform set_config('response.status', '418', true);
+     return json_build_object('message', 'The requested entity body is short and stout.',
+                              'hint', 'Tip it over and pour it out.');
+   end;
+   $$ language plpgsql;
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /rpc/teapot HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/rpc/teapot" -i
+
+.. code-block:: http
+
+  HTTP/1.1 418 I'm a teapot
+
+  {
+    "message" : "The requested entity body is short and stout.",
+    "hint" : "Tip it over and pour it out."
+  }
+
+If the status code is standard, PostgREST will complete the status message(**I'm a teapot** in this example).
+
+Main query
+==========
+
+The main query is produced by requesting the :doc:`API resources <api>`.
+
+Transaction End
+===============
+
+If the transaction doesn't fail, it will always end in a COMMIT. Unless :ref:`db-tx-end` is configured to ROLLBACK in any case or conditionally with ``Prefer: tx=rollback``. This can be used for testing purposes.
+
+Aborting transactions
+=====================
+
+Any database failure(like a failed constraint) will result in a rollback of the transaction. You can also do a RAISE inside a function to cause a rollback.
+
+.. _raise_error:
+
+Raise errors with HTTP Status Codes
+-----------------------------------
+
+You can return non-200 HTTP status codes by raising SQL exceptions. For instance, here's a saucy function that always responds with an error:
+
+.. code-block:: postgresql
+
+  CREATE OR REPLACE FUNCTION just_fail() RETURNS void
+    LANGUAGE plpgsql
+    AS $$
+  BEGIN
+    RAISE EXCEPTION 'I refuse!'
+      USING DETAIL = 'Pretty simple',
+            HINT = 'There is nothing you can do.';
+  END
+  $$;
+
+Calling the function returns HTTP 400 with the body
+
+.. code-block:: json
+
+  {
+    "message":"I refuse!",
+    "details":"Pretty simple",
+    "hint":"There is nothing you can do.",
+    "code":"P0001"
+  }
+
+One way to customize the HTTP status code is by raising particular exceptions according to the PostgREST :ref:`error to status code mapping <status_codes>`. For example, :code:`RAISE insufficient_privilege` will respond with HTTP 401/403 as appropriate.
+
+For even greater control of the HTTP status code, raise an exception of the ``PTxyz`` type. For instance to respond with HTTP 402, raise 'PT402':
+
+.. code-block:: sql
+
+  RAISE sqlstate 'PT402' using
+    message = 'Payment Required',
+    detail = 'Quota exceeded',
+    hint = 'Upgrade your plan';
+
+Returns:
+
+.. code-block:: http
+
+  HTTP/1.1 402 Payment Required
+  Content-Type: application/json; charset=utf-8
+
+  {
+    "message": "Payment Required",
+    "details": "Quota exceeded",
+    "hint": "Upgrade your plan",
+    "code": "PT402"
+  }
+
+.. _pre-request:
+
+Pre-Request
+===========
+
+The pre-request is a function that can run after the :ref:`tx_settings` are set and before the main query. It's enabled with :ref:`db-pre-request`.
+
+This provides an opportunity to modify settings or raise an exception to prevent the request from completing.
+
+.. _pre_req_headers:
+
+Setting headers via pre-request
+-------------------------------
+
+As an example, let's add some cache headers for all requests that come from an Internet Explorer(6 or 7) browser.
+
+.. code-block:: postgresql
+
+   create or replace function custom_headers() returns void as $$
+   declare
+     user_agent text := current_setting('request.headers', true)::json->>'user-agent';
+   begin
+     if user_agent similar to '%MSIE (6.0|7.0)%' then
+       perform set_config('response.headers',
+         '[{"Cache-Control": "no-cache, no-store, must-revalidate"}]', false);
+     end if;
+   end; $$ language plpgsql;
+
+   -- set this function on postgrest.conf
+   -- db-pre-request = custom_headers
+
+Now when you make a GET request to a table or view, you'll get the cache headers.
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /people HTTP/1.1
+    User-Agent: Mozilla/4.01 (compatible; MSIE 6.0; Windows NT 5.1)
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/people" -i \
+     -H "User-Agent: Mozilla/4.01 (compatible; MSIE 6.0; Windows NT 5.1)"

From 2e1dc0738a27e0d41a73ce0cc634a2c7a4f635d7 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Fri, 5 May 2023 10:00:49 -0300
Subject: [PATCH 560/652] readthedocs doesn't build anymore

Pin the python version to solve it.
---
 .readthedocs.yaml | 4 ++++
 requirements.txt  | 3 ++-
 2 files changed, 6 insertions(+), 1 deletion(-)

diff --git a/.readthedocs.yaml b/.readthedocs.yaml
index 3bce02afa..4690fde9d 100644
--- a/.readthedocs.yaml
+++ b/.readthedocs.yaml
@@ -4,3 +4,7 @@ sphinx:
 python:
    install:
    - requirements: requirements.txt
+build:
+  os: ubuntu-22.04
+  tools:
+    python: "3.11"
diff --git a/requirements.txt b/requirements.txt
index 57ed0b59f..4f76b0480 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -2,4 +2,5 @@ docutils==0.16
 sphinx>=4.3.0
 sphinx-copybutton
 sphinx-rtd-theme>=0.5.1
-sphinx-tabs
\ No newline at end of file
+sphinx-tabs
+urllib3==2.0.2

From 082e9b14e9f02ca6c30984edff3059a0ab007f2f Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Fri, 5 May 2023 11:22:32 -0300
Subject: [PATCH 561/652] transactions reference doesn't consider anon reqs

Change authenticated to user impersonation.
---
 docs/transactions.rst | 11 +++++++----
 1 file changed, 7 insertions(+), 4 deletions(-)

diff --git a/docs/transactions.rst b/docs/transactions.rst
index d86ea9818..7a73131c0 100644
--- a/docs/transactions.rst
+++ b/docs/transactions.rst
@@ -2,7 +2,7 @@
 
   <h1>Transactions</h1>
 
-Every :doc:`authenticated <auth>` request to an :doc:`API resource <api>` runs inside a transaction. The sequence of the transaction is as follows:
+After :ref:`user_impersonation`, every request to an :doc:`API resource <api>` runs inside a transaction. The sequence of the transaction is as follows:
 
 .. code-block:: postgresql
 
@@ -84,7 +84,7 @@ And you can set them with ``set_config``
 
   -- response settings use the ``response.`` prefix.
   SELECT
-    set_config('response.setting1', 'value1' ,true);
+    set_config('response.<setting>', 'value1' ,true);
 
 Request Role and Search Path
 -----------------------------
@@ -204,6 +204,8 @@ You can set the ``response.status`` to override the default status code PostgRES
 
 If the status code is standard, PostgREST will complete the status message(**I'm a teapot** in this example).
 
+.. _main_query:
+
 Main query
 ==========
 
@@ -279,7 +281,7 @@ Returns:
 Pre-Request
 ===========
 
-The pre-request is a function that can run after the :ref:`tx_settings` are set and before the main query. It's enabled with :ref:`db-pre-request`.
+The pre-request is a function that can run after the :ref:`tx_settings` are set and before the :ref:`main_query`. It's enabled with :ref:`db-pre-request`.
 
 This provides an opportunity to modify settings or raise an exception to prevent the request from completing.
 
@@ -292,7 +294,8 @@ As an example, let's add some cache headers for all requests that come from an I
 
 .. code-block:: postgresql
 
-   create or replace function custom_headers() returns void as $$
+   create or replace function custom_headers()
+   returns void as $$
    declare
      user_agent text := current_setting('request.headers', true)::json->>'user-agent';
    begin

From 36300da16dbd0237d853639539930589d518901e Mon Sep 17 00:00:00 2001
From: Steve Chavez <stevechavezast@gmail.com>
Date: Sun, 7 May 2023 12:25:12 -0300
Subject: [PATCH 562/652] connection pool reference (#616)

* add link in index to external jwt
* change pgrst errors location for better reading
---
 docs/admin.rst           | 24 ------------
 docs/configuration.rst   |  6 +--
 docs/connection_pool.rst | 83 ++++++++++++++++++++++++++++++++++++++++
 docs/errors.rst          | 47 ++++++++++++-----------
 docs/index.rst           |  8 ++++
 docs/install.rst         | 12 +++---
 6 files changed, 124 insertions(+), 56 deletions(-)
 create mode 100644 docs/connection_pool.rst

diff --git a/docs/admin.rst b/docs/admin.rst
index 3f427feac..ecd7972d1 100644
--- a/docs/admin.rst
+++ b/docs/admin.rst
@@ -132,19 +132,6 @@ The burst argument tells Nginx to start dropping requests if more than five queu
 
 Nginx rate limiting is general and indiscriminate. To rate limit each authenticated request individually you will need to add logic in a :ref:`Custom Validation <custom_validation>` function.
 
-.. _external_connection_poolers:
-
-Using External Connection Poolers
----------------------------------
-
-PostgREST manages its :ref:`own pool of connections <db-pool>` and uses prepared statements by default in order to increase performance. However, this setting is incompatible with external connection poolers such as PgBouncer working in transaction pooling mode. In this case, you need to set the :ref:`db-prepared-statements` config option to ``false``. On the other hand, session pooling is fully compatible with PostgREST, while statement pooling is not compatible at all.
-
-.. note::
-
-  If prepared statements are enabled, PostgREST will quit after detecting that transaction or statement pooling is being used.
-
-You should also set the :ref:`db-channel-enabled` config option to ``false``, due to the ``LISTEN`` command not being compatible with transaction pooling, although it should not give any errors if it's left enabled by default.
-
 Debugging
 =========
 
@@ -205,17 +192,6 @@ A great way to inspect incoming HTTP requests including headers and query parame
 
 The options to ngrep vary depending on the address and host on which you've bound the server. The binding is described in the :ref:`configuration` section. The ngrep output isn't particularly pretty, but it's legible.
 
-.. _automatic_recovery:
-
-Automatic Connection Recovery
------------------------------
-
-When PostgREST loses the connection to the database, it retries the connection using capped exponential backoff, with 32 seconds being the maximum backoff time.
-
-This retry behavior is triggered immediately after the connection is lost if :ref:`db-channel-enabled` is set to true(the default), otherwise it will be activated once a request is made.
-
-To notify the client when the next reconnection attempt will be, PostgREST responds with ``503 Service Unavailable`` and the ``Retry-After: x`` header, where ``x`` is the number of seconds programmed for the next retry.
-
 Database Logs
 -------------
 
diff --git a/docs/configuration.rst b/docs/configuration.rst
index e43f2d003..25d8e9282 100644
--- a/docs/configuration.rst
+++ b/docs/configuration.rst
@@ -330,7 +330,7 @@ db-pool
   **In-Database** `n/a`
   =============== =================
 
-  Number of connections to keep open in PostgREST's database pool. Having enough here for the maximum expected simultaneous client connections can improve performance. Note it's pointless to set this higher than the :code:`max_connections` GUC in your database.
+  Number of maximum connections to keep open in PostgREST's database pool.
 
 .. _db-pool-acquisition-timeout:
 
@@ -342,7 +342,7 @@ db-pool-acquisition-timeout
   **In-Database** `n/a`
   =============== =================
 
-  Specifies the maximum time in seconds that the request will wait for the pool to free up a connection slot to the database. If it times out without acquiring a connection, then the request is aborted and a ``504`` error is returned.
+  Specifies the maximum time in seconds that the request will wait for the pool to free up a connection slot to the database.
 
 .. _db-pool-max-lifetime:
 
@@ -354,7 +354,7 @@ db-pool-max-lifetime
   **In-Database** `n/a`
   =============== =================
 
-  Specifies the maximum time in seconds of an existing connection in the pool. When this lifetime is reached, then the connection will be closed and returned to the pool.
+  Specifies the maximum time in seconds of an existing connection in the pool.
 
 .. _db-pre-request:
 
diff --git a/docs/connection_pool.rst b/docs/connection_pool.rst
new file mode 100644
index 000000000..9bb38c3c6
--- /dev/null
+++ b/docs/connection_pool.rst
@@ -0,0 +1,83 @@
+Connection Pool
+---------------
+
+Every request to an :doc:`API resource <api>` borrows a connection from the connection pool to start a :doc:`transaction <transactions>`.
+
+A connection pool is a cache of reusable database connections. It allows serving many HTTP requests using few database connections.
+
+Minimizing connections it’s paramount to performance. Each PostgreSQL connection creates a process, having too many can exhaust available resources.
+
+.. _pool_growth_limit:
+
+Growth Limit
+------------
+
+If all the connections are being used, a new connection is added to the pool. The pool can grow until it reaches the :ref:`db-pool` size.
+
+Note it’s pointless to set this higher than the ``max_connections`` setting in your database.
+
+Connection lifetime
+-------------------
+
+After a period of time, connections from the pool will be released and news ones will be created. This time is specified by :ref:`db-pool-max-lifetime`.
+
+The lifetime doesn't affect running requests. Only unused connections will be released.
+
+For knowing why a connection lifetime is necessary, see the following discussion:
+https://www.postgresql.org/message-id/flat/CA%2Bmi_8bnvpxHZtb6EgHSHY-xn29W8VJMzjPU3fiCOv1bfjrNuA%40mail.gmail.com.
+
+Acquisition Timeout
+-------------------
+
+If all the available connections in the pool are busy, an HTTP request will wait until reaching a timeout. You can configure this timeout with :ref:`db-pool-acquisition-timeout`.
+
+If the request reaches the timeout, it will be aborted with the following response:
+
+.. code-block:: http
+
+  HTTP/1.1 504 Gateway Timeout
+
+  {"code":"PGRST003",
+   "details":null,
+   "hint":null,
+   "message":"Timed out acquiring connection from connection pool."}
+
+Getting this error message is an indicator of a performance issue. To solve it, you can:
+
+- Reduce your queries execution time.
+
+  - Check the request :ref:`explain_plan` to tune your query, this usually means adding indexes.
+
+- Reduce the amount of requests.
+
+  - Reduce write requests. Do :ref:`bulk_insert` (or :ref:`upsert`) instead of inserting rows one by one.
+  - Reduce read requests. Use :ref:`resource_embedding`. Combine unrelated data into a single request using custom database views or functions.
+  - Use :ref:`s_procs` for combining read and write logic into a single request.
+
+- Increase the :ref:`pool growth limit <pool_growth_limit>`.
+
+  - Not a panacea since connections can't grow infinitely. Try the previous recommendations before this.
+
+.. _automatic_recovery:
+
+Automatic Recovery
+------------------
+
+If the pool loses the connection to the database, it will retry reconnecting using exponential backoff. With 32 seconds being the maximum backoff time between retries.
+
+The retries happen immediately after a connection loss, if :ref:`db-channel-enabled` is set to true(the default). Otherwise they'll happen once a request arrives.
+
+To notify the client of the next retry, the server sends a ``503 Service Unavailable`` status with the ``Retry-After: x`` header. Where ``x`` is the number of seconds programmed for the next retry.
+
+.. _external_connection_poolers:
+
+Using External Connection Poolers
+---------------------------------
+
+It's possible to use external connection poolers, such as PgBouncer. Session pooling is compatible, while transaction pooling requires :ref:`db-prepared-statements` set to ``false``. Statement pooling is not compatible with PostgREST.
+
+Also set :ref:`db-channel-enabled` to ``false`` since ``LISTEN`` is not compatible with transaction pooling. Although it should not give any errors if left enabled.
+
+.. note::
+
+  It’s not recommended to use an external connection pooler. `Our benchmarks <https://github.com/PostgREST/postgrest/issues/2294#issuecomment-1139148672>`_ indicate it provides much lower performance than PostgREST built-in pool.
diff --git a/docs/errors.rst b/docs/errors.rst
index 5fe83b14d..74c4a3f84 100644
--- a/docs/errors.rst
+++ b/docs/errors.rst
@@ -28,29 +28,6 @@ PostgREST will forward errors coming from PostgreSQL. For instance, when queryin
     "message": "relation \"api.nonexistent_table\" does not exist"
   }
 
-Errors from PostgREST
----------------------
-
-Errors that come from PostgREST itself maintain the same structure. But differ in the ``PGRST`` prefix in the ``code`` field. For instance, when querying a function that does not exist in the :doc:`schema cache <schema_cache>`:
-
-.. code-block:: http
-
-  POST /rpc/nonexistent_function HTTP/1.1
-
-.. code-block:: http
-
-  HTTP/1.1 404 Not Found
-  Content-Type: application/json; charset=utf-8
-
-.. code-block:: json
-
-  {
-    "hint": "...",
-    "details": null
-    "code": "PGRST202",
-    "message": "Could not find the api.nonexistent_function() function in the schema cache"
-  }
-
 .. _status_codes:
 
 HTTP Status Codes
@@ -119,6 +96,30 @@ PostgREST translates `PostgreSQL error codes <https://www.postgresql.org/docs/cu
 | other                    | 400                     |                                 |
 +--------------------------+-------------------------+---------------------------------+
 
+Errors from PostgREST
+---------------------
+
+Errors that come from PostgREST itself maintain the same structure. But differ in the ``PGRST`` prefix in the ``code`` field. For instance, when querying a function that does not exist in the :doc:`schema cache <schema_cache>`:
+
+.. code-block:: http
+
+  POST /rpc/nonexistent_function HTTP/1.1
+
+.. code-block:: http
+
+  HTTP/1.1 404 Not Found
+  Content-Type: application/json; charset=utf-8
+
+.. code-block:: json
+
+  {
+    "hint": "...",
+    "details": null
+    "code": "PGRST202",
+    "message": "Could not find the api.nonexistent_function() function in the schema cache"
+  }
+
+
 .. _pgrst_errors:
 
 PostgREST Error Codes
diff --git a/docs/index.rst b/docs/index.rst
index fa98bb6b5..24ff6547b 100644
--- a/docs/index.rst
+++ b/docs/index.rst
@@ -148,6 +148,12 @@ Technical references for PostgREST's functionality.
 
    transactions.rst
 
+.. toctree::
+   :caption: Connection Pool
+   :hidden:
+
+   connection_pool.rst
+
 .. toctree::
    :caption: Configuration
    :hidden:
@@ -169,6 +175,7 @@ Technical references for PostgREST's functionality.
 - :doc:`Authentication <auth>`
 - :doc:`API <api>`
 - :doc:`Transactions <transactions>`
+- :doc:`Connection pool <connection_pool>`
 - :doc:`configuration`
 - :doc:`Schema Cache <schema_cache>`
 - :doc:`Errors <errors>`
@@ -235,6 +242,7 @@ PostgREST has a growing ecosystem of examples, libraries, and experiments. Here
 
    ecosystem.rst
 
+* :ref:`external_jwt`
 * :ref:`community_tutorials`
 * :ref:`templates`
 * :ref:`eco_example_apps`
diff --git a/docs/install.rst b/docs/install.rst
index 8ba9f56d4..508f830b0 100644
--- a/docs/install.rst
+++ b/docs/install.rst
@@ -289,7 +289,7 @@ Deploying to Heroku
     # wait until the add-on is available
     heroku pg:wait -a ${YOUR_APP_NAME}
 
-4.  Create the necessary user roles according to the 
+4.  Create the necessary user roles according to the
     `PostgREST documentation <https://postgrest.org/en/stable/auth.html>`_:
 
   .. code-block:: bash
@@ -330,7 +330,7 @@ Deploying to Heroku
 
     web: PGRST_SERVER_HOST=0.0.0.0 PGRST_SERVER_PORT=${PORT} PGRST_DB_URI=${PGRST_DB_URI:-${DATABASE_URL}} ./postgrest-${POSTGREST_VER}
   ..
-    
+
   Set the following environment variables on Heroku:
 
   .. code-block:: bash
@@ -340,7 +340,7 @@ Deploying to Heroku
     heroku config:set PGRST_DB_ANON_ROLE=api_user
   ..
 
-  PGRST_DB_URI can be set if an external database is used or if it's different from the default Heroku DATABASE_URL. This latter is used if nothing is provided.  
+  PGRST_DB_URI can be set if an external database is used or if it's different from the default Heroku DATABASE_URL. This latter is used if nothing is provided.
   POSTGREST_VER is mandatory to select and build the required PostgREST release.
 
   See https://postgrest.org/en/stable/configuration.html#environment-variables for the full list of environment variables.
@@ -368,9 +368,9 @@ Deploying to Heroku
   From a different terminal retrieve with curl the records previously created:
 
   .. code-block:: bash
- 
+
     curl https://${YOUR_APP_NAME}.herokuapp.com/todos
-  .. 
+  ..
 
   and test that any attempt to modify the table via a read-only user is not allowed:
 
@@ -378,4 +378,4 @@ Deploying to Heroku
 
     curl https://${YOUR_APP_NAME}.herokuapp.com/todos -X POST \
      -H "Content-Type: application/json" \
-     -d '{"task": "do bad thing"}'   
+     -d '{"task": "do bad thing"}'

From 79620396edc776ed8ebf969ae05c5af9afb99277 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Sun, 7 May 2023 13:03:58 -0300
Subject: [PATCH 563/652] remove manual inclusion of pages on index

* drop unavailable doc pages from release notes
* rename releases pages so they order in TOC
---
 docs/_static/css/custom.css               |  20 +++
 docs/{ => explanations}/admin.rst         |  10 +-
 docs/{ => explanations}/db_authz.rst      |   7 +-
 docs/{ => explanations}/install.rst       |   4 +-
 docs/index.rst                            | 139 +++-------------
 docs/{ => references}/api.rst             |   9 +-
 docs/{ => references}/auth.rst            |  11 +-
 docs/{ => references}/configuration.rst   |   8 +-
 docs/{ => references}/connection_pool.rst |   2 +-
 docs/{ => references}/errors.rst          |  22 +--
 docs/{ => references}/schema_cache.rst    |   5 +-
 docs/{ => references}/transactions.rst    |  33 ++--
 docs/releases/{v9.0.0.rst => v09.0.0.rst} |   8 +-
 docs/releases/{v9.0.1.rst => v09.0.1.rst} |   4 +-
 docs/releases/v10.0.0.rst                 |   8 +-
 docs/releases/v10.2.0.rst                 |   4 +-
 docs/releases/v5.2.0.rst                  |  26 ---
 docs/releases/v6.0.2.rst                  |  79 ---------
 docs/releases/v7.0.0.rst                  | 106 ------------
 docs/releases/v7.0.1.rst                  |  69 --------
 docs/releases/v8.0.0.rst                  | 191 ----------------------
 docs/tutorials/tut0.rst                   |   2 +-
 postgrest.dict                            |   1 +
 23 files changed, 112 insertions(+), 656 deletions(-)
 rename docs/{ => explanations}/admin.rst (98%)
 rename docs/{ => explanations}/db_authz.rst (98%)
 rename docs/{ => explanations}/install.rst (99%)
 rename docs/{ => references}/api.rst (99%)
 rename docs/{ => references}/auth.rst (98%)
 rename docs/{ => references}/configuration.rst (99%)
 rename docs/{ => references}/connection_pool.rst (99%)
 rename docs/{ => references}/errors.rst (99%)
 rename docs/{ => references}/schema_cache.rst (99%)
 rename docs/{ => references}/transactions.rst (96%)
 rename docs/releases/{v9.0.0.rst => v09.0.0.rst} (96%)
 rename docs/releases/{v9.0.1.rst => v09.0.1.rst} (99%)
 delete mode 100644 docs/releases/v5.2.0.rst
 delete mode 100644 docs/releases/v6.0.2.rst
 delete mode 100644 docs/releases/v7.0.0.rst
 delete mode 100644 docs/releases/v7.0.1.rst
 delete mode 100644 docs/releases/v8.0.0.rst

diff --git a/docs/_static/css/custom.css b/docs/_static/css/custom.css
index fc7f2edb6..7000d0fce 100644
--- a/docs/_static/css/custom.css
+++ b/docs/_static/css/custom.css
@@ -65,3 +65,23 @@ div.line-block {
 .wy-table-responsive {
     overflow: visible !important;
 }
+
+#tutorials span.caption-text {
+    display: none;
+}
+
+#references span.caption-text {
+    display: none;
+}
+
+#explanations span.caption-text {
+    display: none;
+}
+
+#how-tos span.caption-text {
+    display: none;
+}
+
+#ecosystem span.caption-text {
+    display: none;
+}
diff --git a/docs/admin.rst b/docs/explanations/admin.rst
similarity index 98%
rename from docs/admin.rst
rename to docs/explanations/admin.rst
index ecd7972d1..1315ae14a 100644
--- a/docs/admin.rst
+++ b/docs/explanations/admin.rst
@@ -1,5 +1,8 @@
 .. _admin:
 
+Admin
+#####
+
 Hardening PostgREST
 ===================
 
@@ -140,11 +143,6 @@ Server Version
 
 When debugging a problem it's important to verify the PostgREST version. At any time you can make a request to the running server and determine exactly which version is deployed. Look for the :code:`Server` HTTP response header, which contains the version number.
 
-Errors
-------
-
-See the :doc:`Errors <errors>` reference page for detailed information on the errors that PostgREST returns.
-
 .. _pgrst_logging:
 
 Logging
@@ -248,7 +246,7 @@ To do this, set the configuration variable :ref:`admin-server-port` to the port
 
 The ``live`` endpoint verifies if PostgREST is running on its configured port. A request will return ``200 OK`` if PostgREST is alive or ``503`` otherwise.
 
-The ``ready`` endpoint also checks the state of both the Database Connection and the :doc:`Schema Cache <schema_cache>`. A request will return ``200 OK`` if it is ready or ``503`` if not.
+The ``ready`` endpoint also checks the state of both the Database Connection and the :ref:`schema_cache`. A request will return ``200 OK`` if it is ready or ``503`` if not.
 
 For instance, to verify if PostgREST is running at ``localhost:3000`` while the ``admin-server-port`` is set to ``3001``:
 
diff --git a/docs/db_authz.rst b/docs/explanations/db_authz.rst
similarity index 98%
rename from docs/db_authz.rst
rename to docs/explanations/db_authz.rst
index 6e3748aad..eb6b3041b 100644
--- a/docs/db_authz.rst
+++ b/docs/explanations/db_authz.rst
@@ -1,6 +1,7 @@
-.. raw:: html
+.. _db_authz:
 
-  <h1>Database Authorization</h1>
+Database Authorization
+######################
 
 Database authorization is the process of granting and verifying database access permissions. PostgreSQL manages permissions using the concept of roles.
 
@@ -101,7 +102,7 @@ A PostgREST instance exposes all the tables, views, and stored procedures of the
 It is recommended that you don't expose tables on the schemas you expose, instead expose views and stored procedures which insulate the internal details from the outside world.
 This allows you to change the internals of your schema and maintain backwards compatibility. It also keeps your code easier to refactor, and provides a natural way to do API versioning.
 
-.. image:: _static/db.png
+.. image:: ../_static/db.png
 
 You must explicitly allow roles to access the exposed schemas:
 
diff --git a/docs/install.rst b/docs/explanations/install.rst
similarity index 99%
rename from docs/install.rst
rename to docs/explanations/install.rst
index 508f830b0..8d3a6455a 100644
--- a/docs/install.rst
+++ b/docs/explanations/install.rst
@@ -1,7 +1,7 @@
 .. _install:
 
 Installation
-============
+############
 
 The release page has `pre-compiled binaries for Mac OS X, Windows, Linux and FreeBSD <https://github.com/PostgREST/postgrest/releases/latest>`_ .
 The Linux binary is a static executable that can be run on any Linux distribution.
@@ -95,7 +95,7 @@ For a complete reference of the configuration file, see :ref:`configuration`.
 
   If you see a dialog box like this on Windows, it may be that the :code:`pg_config` program is not in your system path.
 
-  .. image:: _static/win-err-dialog.png
+  .. image:: ../_static/win-err-dialog.png
 
   It usually lives in :code:`C:\Program Files\PostgreSQL\<version>\bin`. See this `article <https://www.howtogeek.com/118594/how-to-edit-your-system-path-for-easy-command-line-access/>`_ about how to modify the system path.
 
diff --git a/docs/index.rst b/docs/index.rst
index 24ff6547b..e0931674c 100644
--- a/docs/index.rst
+++ b/docs/index.rst
@@ -95,18 +95,10 @@ The project has a friendly and growing community. Join our `chat room <https://g
 .. toctree::
    :glob:
    :caption: Release Notes
-   :titlesonly:
-   :hidden:
+   :reversed:
+   :maxdepth: 1
 
-   v10.2.0 <releases/v10.2.0>
-   v10.0.0 <releases/v10.0.0>
-   v9.0.1 <releases/v9.0.1>
-   v9.0.0 <releases/v9.0.0>
-   releases/v8.0.0
-   releases/v7.0.1
-   releases/v7.0.0
-   releases/v6.0.2
-   releases/v5.2.0
+   releases/*
 
 Tutorials
 ---------
@@ -116,14 +108,11 @@ Are you new to PostgREST? This is the place to start!
 .. toctree::
    :glob:
    :caption: Tutorials
-   :hidden:
+   :maxdepth: 1
 
    tutorials/*
 
-- :doc:`tutorials/tut0`
-- :doc:`tutorials/tut1`
-
-Also have a look at :doc:`Installation <install>` and :ref:`community_tutorials`.
+Also have a look at :ref:`install` and :ref:`community_tutorials`.
 
 References
 ----------
@@ -131,54 +120,12 @@ References
 Technical references for PostgREST's functionality.
 
 .. toctree::
-   :caption: Authentication
-   :hidden:
+   :glob:
+   :caption: References
+   :name: references
+   :maxdepth: 1
 
-   auth.rst
-
-.. toctree::
-   :caption: API
-   :hidden:
-
-   api.rst
-
-.. toctree::
-   :caption: Transactions
-   :hidden:
-
-   transactions.rst
-
-.. toctree::
-   :caption: Connection Pool
-   :hidden:
-
-   connection_pool.rst
-
-.. toctree::
-   :caption: Configuration
-   :hidden:
-
-   configuration.rst
-
-.. toctree::
-   :caption: Schema Cache
-   :hidden:
-
-   schema_cache.rst
-
-.. toctree::
-   :caption: Errors
-   :hidden:
-
-   errors.rst
-
-- :doc:`Authentication <auth>`
-- :doc:`API <api>`
-- :doc:`Transactions <transactions>`
-- :doc:`Connection pool <connection_pool>`
-- :doc:`configuration`
-- :doc:`Schema Cache <schema_cache>`
-- :doc:`Errors <errors>`
+   references/*
 
 Explanations
 ------------
@@ -186,50 +133,25 @@ Explanations
 Key concepts in PostgREST.
 
 .. toctree::
-   :caption: Database Authorization
-   :hidden:
+   :glob:
+   :caption: Explanations
+   :name: explanations
+   :maxdepth: 1
 
-   db_authz.rst
+   explanations/*
 
-.. toctree::
-   :caption: Administration
-   :hidden:
-
-   admin.rst
-
-.. toctree::
-   :caption: Installation
-   :hidden:
-
-   install.rst
-
-- :doc:`Database Authorization <db_authz>`
-- :doc:`Administration <admin>`
-- :doc:`Installation <install>`
-
-.. _how_tos:
-
-How-to guides
--------------
+How-tos
+-------
 
 Recipes that'll help you address specific use-cases.
 
 .. toctree::
    :glob:
    :caption: How-to guides
-   :hidden:
+   :name: how-tos
+   :maxdepth: 1
 
-   how-tos/sql-user-management
-   how-tos/working-with-postgresql-data-types
-   how-tos/sql-user-management-using-postgres-users-and-passwords
-   how-tos/providing-images-for-img
-   how-tos/create-soap-endpoint
-
-- :doc:`how-tos/sql-user-management`
-- :doc:`how-tos/working-with-postgresql-data-types`
-- :doc:`how-tos/sql-user-management-using-postgres-users-and-passwords`
-- :doc:`how-tos/providing-images-for-img`
-- :doc:`how-tos/create-soap-endpoint`
+   how-tos/*
 
 Ecosystem
 ---------
@@ -238,28 +160,11 @@ PostgREST has a growing ecosystem of examples, libraries, and experiments. Here
 
 .. toctree::
    :caption: Ecosystem
-   :hidden:
+   :name: ecosystem
+   :maxdepth: 1
 
    ecosystem.rst
 
-* :ref:`external_jwt`
-* :ref:`community_tutorials`
-* :ref:`templates`
-* :ref:`eco_example_apps`
-* :ref:`devops`
-* :ref:`eco_external_notification`
-* :ref:`eco_extensions`
-* :ref:`clientside_libraries`
-
-
-Release Notes
--------------
-
-Changes among versions.
-
-- :doc:`releases/v9.0.0`
-- :doc:`releases/v8.0.0`
-
 In Production
 -------------
 
diff --git a/docs/api.rst b/docs/references/api.rst
similarity index 99%
rename from docs/api.rst
rename to docs/references/api.rst
index e2b163ecc..0dd517fc2 100644
--- a/docs/api.rst
+++ b/docs/references/api.rst
@@ -1,3 +1,8 @@
+.. _api:
+
+API
+###
+
 .. role:: sql(code)
    :language: sql
 
@@ -873,7 +878,7 @@ In addition to providing RESTful routes for each table and view, PostgREST allow
 API call. This reduces the need for multiple API requests. The server uses **foreign keys** to determine which tables and views can be
 returned together. For example, consider a database of films and their awards:
 
-.. image:: _static/film.png
+.. image:: ../_static/film.png
 
 .. important::
 
@@ -1552,7 +1557,7 @@ Target Disambiguation
 
 For example, suppose you have the following ``orders`` and ``addresses`` tables:
 
-.. image:: _static/orders.png
+.. image:: ../_static/orders.png
 
 And you try to embed ``orders`` with ``addresses`` (this is the **target**):
 
diff --git a/docs/auth.rst b/docs/references/auth.rst
similarity index 98%
rename from docs/auth.rst
rename to docs/references/auth.rst
index 31eb5e31e..2501c3536 100644
--- a/docs/auth.rst
+++ b/docs/references/auth.rst
@@ -1,8 +1,7 @@
-.. raw:: html
+Authentication
+==============
 
-  <h1>Authentication</h1>
-
-PostgREST is designed to keep the database at the center of API security. All :doc:`authorization happens in the database <db_authz>` . It is PostgREST's job to **authenticate** requests -- i.e. verify that a client is who they say they are -- and then let the database **authorize** client actions.
+PostgREST is designed to keep the database at the center of API security. All :ref:`authorization happens in the database <db_authz>` . It is PostgREST's job to **authenticate** requests -- i.e. verify that a client is who they say they are -- and then let the database **authorize** client actions.
 
 .. _roles:
 
@@ -11,7 +10,7 @@ Overview of role system
 
 There are three types of roles used by PostgREST, the **authenticator**, **anonymous** and **user** roles. The database administrator creates these roles and configures PostgREST to use them.
 
-.. image:: _static/security-roles.png
+.. image:: ../_static/security-roles.png
 
 The authenticator role is used for connecting to the database and should be configured to have very limited access. It is a chameleon whose job is to "become" other users to service authenticated HTTP requests.
 
@@ -32,7 +31,7 @@ User Impersonation
 
 The picture below shows how the server handles authentication. If auth succeeds, it switches into the user role specified by the request, otherwise it switches into the anonymous role (if it's set in :ref:`db-anon-role`).
 
-.. image:: _static/security-anon-choice.png
+.. image:: ../_static/security-anon-choice.png
 
 This role switching mechanism is called **user impersonation**. In PostgreSQL it's done with the ``SET ROLE`` statement.
 
diff --git a/docs/configuration.rst b/docs/references/configuration.rst
similarity index 99%
rename from docs/configuration.rst
rename to docs/references/configuration.rst
index 25d8e9282..d27eb0bcb 100644
--- a/docs/configuration.rst
+++ b/docs/references/configuration.rst
@@ -1,7 +1,7 @@
 .. _configuration:
 
 Configuration
-=============
+#############
 
 Without configuration, PostgREST won't be able to serve requests. At the minimum it needs either :ref:`a role to serve anonymous requests with <db-anon-role>` - or :ref:`a secret to use for JWT authentication <jwt-secret>`. Config parameters can be provided via :ref:`file_config`, via :ref:`env_variables_config` or through :ref:`in_db_config`.
 
@@ -16,7 +16,7 @@ Config parameters are read in the following order:
 .. _file_config:
 
 Config File
------------
+===========
 
 PostgREST can read a config file. There is no predefined location for this file, you must specify the file path as the one and only argument to the server:
 
@@ -55,14 +55,14 @@ You can run ``postgrest --example`` to display all possible configuration parame
 .. _env_variables_config:
 
 Environment Variables
----------------------
+=====================
 
 You can also set these :ref:`configuration parameters <config_full_list>` using environment variables. They are capitalized, have a ``PGRST_`` prefix, and use underscores. For example: ``PGRST_DB_URI`` corresponds to ``db-uri`` and ``PGRST_APP_SETTINGS_*`` to ``app.settings.*``.
 
 .. _in_db_config:
 
 In-Database Configuration
--------------------------
+=========================
 
 By adding settings to the **authenticator** role (see :ref:`roles`), you can make the database the single source of truth for PostgREST's configuration.
 This is enabled by :ref:`db-config`.
diff --git a/docs/connection_pool.rst b/docs/references/connection_pool.rst
similarity index 99%
rename from docs/connection_pool.rst
rename to docs/references/connection_pool.rst
index 9bb38c3c6..c7f6d7ed0 100644
--- a/docs/connection_pool.rst
+++ b/docs/references/connection_pool.rst
@@ -1,5 +1,5 @@
 Connection Pool
----------------
+===============
 
 Every request to an :doc:`API resource <api>` borrows a connection from the connection pool to start a :doc:`transaction <transactions>`.
 
diff --git a/docs/errors.rst b/docs/references/errors.rst
similarity index 99%
rename from docs/errors.rst
rename to docs/references/errors.rst
index 74c4a3f84..e481a70fd 100644
--- a/docs/errors.rst
+++ b/docs/references/errors.rst
@@ -1,12 +1,12 @@
 .. _error_source:
 
-Error Format
-============
+Errors
+######
 
 PostgREST error messages follow the PostgreSQL error structure. It includes ``MESSAGE``, ``DETAIL``, ``HINT``, ``ERRCODE`` and will add an HTTP status code to the response.
 
 Errors from PostgreSQL
-----------------------
+======================
 
 PostgREST will forward errors coming from PostgreSQL. For instance, when querying a nonexistent table:
 
@@ -31,7 +31,7 @@ PostgREST will forward errors coming from PostgreSQL. For instance, when queryin
 .. _status_codes:
 
 HTTP Status Codes
-=================
+-----------------
 
 PostgREST translates `PostgreSQL error codes <https://www.postgresql.org/docs/current/errcodes-appendix.html>`_ into HTTP status as follows:
 
@@ -97,7 +97,7 @@ PostgREST translates `PostgreSQL error codes <https://www.postgresql.org/docs/cu
 +--------------------------+-------------------------+---------------------------------+
 
 Errors from PostgREST
----------------------
+=====================
 
 Errors that come from PostgREST itself maintain the same structure. But differ in the ``PGRST`` prefix in the ``code`` field. For instance, when querying a function that does not exist in the :doc:`schema cache <schema_cache>`:
 
@@ -123,7 +123,7 @@ Errors that come from PostgREST itself maintain the same structure. But differ i
 .. _pgrst_errors:
 
 PostgREST Error Codes
-=====================
+---------------------
 
 PostgREST error codes have the form ``PGRSTgxx``
 
@@ -134,7 +134,7 @@ PostgREST error codes have the form ``PGRSTgxx``
 .. _pgrst0**:
 
 Group 0 - Connection
---------------------
+~~~~~~~~~~~~~~~~~~~~
 
 Related to the connection with the database.
 
@@ -161,7 +161,7 @@ Related to the connection with the database.
 .. _pgrst1**:
 
 Group 1 - Api Request
----------------------
+~~~~~~~~~~~~~~~~~~~~~
 
 Related to the HTTP request elements.
 
@@ -252,7 +252,7 @@ Related to the HTTP request elements.
 .. _pgrst2**:
 
 Group 2 - Schema Cache
-----------------------
+~~~~~~~~~~~~~~~~~~~~~~
 
 Related to a :ref:`stale schema cache <stale_schema>`. Most of the time, these errors are solved by :ref:`reloading the schema cache <schema_reloading>`.
 
@@ -285,7 +285,7 @@ Related to a :ref:`stale schema cache <stale_schema>`. Most of the time, these e
 .. _pgrst3**:
 
 Group 3 - JWT
--------------
+~~~~~~~~~~~~~
 
 Related to the authentication process using JWT. You can follow the :ref:`tut1` for an example on how to implement authentication and the :doc:`Authentication page <auth>` for more information on this process.
 
@@ -310,7 +310,7 @@ Related to the authentication process using JWT. You can follow the :ref:`tut1`
 .. _pgrst_X**:
 
 Group X - Internal
-------------------
+~~~~~~~~~~~~~~~~~~
 
 Internal errors. If you encounter any of these, you may have stumbled on a PostgREST bug, please `open an issue <https://github.com/PostgREST/postgrest/issues>`_ and we'll be glad to fix it.
 
diff --git a/docs/schema_cache.rst b/docs/references/schema_cache.rst
similarity index 99%
rename from docs/schema_cache.rst
rename to docs/references/schema_cache.rst
index cfd9f0bb2..44d9fd2d2 100644
--- a/docs/schema_cache.rst
+++ b/docs/references/schema_cache.rst
@@ -1,8 +1,7 @@
 .. _schema_cache:
 
-.. raw:: html
-
-  <h1>Schema Cache</h1>
+Schema Cache
+============
 
 Some PostgREST features need metadata from the database schema. Getting this metadata requires expensive queries. To avoid repeating this work, PostgREST uses a schema cache.
 
diff --git a/docs/transactions.rst b/docs/references/transactions.rst
similarity index 96%
rename from docs/transactions.rst
rename to docs/references/transactions.rst
index 7a73131c0..565a2e6d0 100644
--- a/docs/transactions.rst
+++ b/docs/references/transactions.rst
@@ -1,6 +1,5 @@
-.. raw:: html
-
-  <h1>Transactions</h1>
+Transactions
+============
 
 After :ref:`user_impersonation`, every request to an :doc:`API resource <api>` runs inside a transaction. The sequence of the transaction is as follows:
 
@@ -14,7 +13,7 @@ After :ref:`user_impersonation`, every request to an :doc:`API resource <api>` r
 .. _access_mode:
 
 Access Mode
-===========
+-----------
 
 The access mode on :ref:`tables_views` is determined by the HTTP method.
 
@@ -59,14 +58,14 @@ Modifying the database inside READ ONLY transactions is not possible. PostgREST
 The :ref:`options_requests` method doesn't start a transaction, so it's not relevant here.
 
 Isolation Level
-===============
+---------------
 
 Every transaction uses the PostgreSQL default isolation level: READ COMMITTED.
 
 .. _tx_settings:
 
 Transaction-Scoped Settings
-===========================
+---------------------------
 
 PostgREST uses settings tied to the transaction lifetime. These can be used to get data about the HTTP request. Or to modify the HTTP response.
 
@@ -87,7 +86,7 @@ And you can set them with ``set_config``
     set_config('response.<setting>', 'value1' ,true);
 
 Request Role and Search Path
------------------------------
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 Because of :ref:`user_impersonation`, PostgREST sets the standard ``role``. You can get this in different ways:
 
@@ -105,7 +104,7 @@ Additionally it also sets the ``search_path`` based on :ref:`db-schemas` and :re
 .. _guc_req_headers_cookies_claims:
 
 Request Headers, Cookies and JWT claims
----------------------------------------
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 PostgREST stores the headers, cookies and headers as JSON. To get them:
 
@@ -130,7 +129,7 @@ PostgREST stores the headers, cookies and headers as JSON. To get them:
 .. _guc_req_path_method:
 
 Request Path and Method
------------------------
+~~~~~~~~~~~~~~~~~~~~~~~
 
 The path and method are stored as ``text``.
 
@@ -143,7 +142,7 @@ The path and method are stored as ``text``.
 .. _guc_resp_hdrs:
 
 Response Headers
-----------------
+~~~~~~~~~~~~~~~~
 
 You can set ``response.headers`` to add headers to the HTTP response. For instance, this statement would add caching headers to the response:
 
@@ -169,7 +168,7 @@ Notice that the ``response.headers`` should be set to an *array* of single-key o
 .. _guc_resp_status:
 
 Response Status Code
---------------------
+~~~~~~~~~~~~~~~~~~~~
 
 You can set the ``response.status`` to override the default status code PostgREST provides. For instance, the following function would replace the default ``200`` status code.
 
@@ -207,24 +206,24 @@ If the status code is standard, PostgREST will complete the status message(**I'm
 .. _main_query:
 
 Main query
-==========
+----------
 
 The main query is produced by requesting the :doc:`API resources <api>`.
 
 Transaction End
-===============
+---------------
 
 If the transaction doesn't fail, it will always end in a COMMIT. Unless :ref:`db-tx-end` is configured to ROLLBACK in any case or conditionally with ``Prefer: tx=rollback``. This can be used for testing purposes.
 
 Aborting transactions
-=====================
+---------------------
 
 Any database failure(like a failed constraint) will result in a rollback of the transaction. You can also do a RAISE inside a function to cause a rollback.
 
 .. _raise_error:
 
 Raise errors with HTTP Status Codes
------------------------------------
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 You can return non-200 HTTP status codes by raising SQL exceptions. For instance, here's a saucy function that always responds with an error:
 
@@ -279,7 +278,7 @@ Returns:
 .. _pre-request:
 
 Pre-Request
-===========
+-----------
 
 The pre-request is a function that can run after the :ref:`tx_settings` are set and before the :ref:`main_query`. It's enabled with :ref:`db-pre-request`.
 
@@ -288,7 +287,7 @@ This provides an opportunity to modify settings or raise an exception to prevent
 .. _pre_req_headers:
 
 Setting headers via pre-request
--------------------------------
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 As an example, let's add some cache headers for all requests that come from an Internet Explorer(6 or 7) browser.
 
diff --git a/docs/releases/v9.0.0.rst b/docs/releases/v09.0.0.rst
similarity index 96%
rename from docs/releases/v9.0.0.rst
rename to docs/releases/v09.0.0.rst
index 5963e8237..5827f542a 100644
--- a/docs/releases/v9.0.0.rst
+++ b/docs/releases/v09.0.0.rst
@@ -1,6 +1,6 @@
 
-PostgREST 9.0.0
-===============
+9.0.0
+=====
 
 This major version is released with PostgreSQL 14 compatibility and is accompanied with new features and bug fixes. You can look at the detailed changelog and download the pre-compiled binaries on the `GitHub release page <https://github.com/PostgREST/postgrest/releases/tag/v9.0.0>`_.
 
@@ -50,7 +50,7 @@ Error messages
 Documentation improvements
 ~~~~~~~~~~~~~~~~~~~~~~~~~~
 
-* Added ``curl`` snippets to the :doc:`API <../api>` page.
+* Added ``curl`` snippets to the :ref:`api` page.
 
 * Added the :ref:`automatic_recovery` section.
 
@@ -74,7 +74,7 @@ Breaking changes
 
 * Dropped support for PostgreSQL 9.5 as it already reached its end-of-life according to `PostgreSQL versioning policy <https://www.postgresql.org/support/versioning/>`_.
 
-* Partitions of a `partitioned table <https://www.postgresql.org/docs/current/ddl-partitioning.html#DDL-PARTITIONING-DECLARATIVE>`_ are no longer included in the :doc:`../schema_cache`. This is so errors are not generated when doing resource embedding on partitioned tables.
+* Partitions of a `partitioned table <https://www.postgresql.org/docs/current/ddl-partitioning.html#DDL-PARTITIONING-DECLARATIVE>`_ are no longer included in the :ref:`schema_cache`. This is so errors are not generated when doing resource embedding on partitioned tables.
 
 * Dropped support for doing :ref:`hint_disamb` using dots instead of exclamation marks, e.g. doing ``select=*,projects.client_id(*)`` instead of ``select=*,projects!client_id(*)``). Using dots was undocumented and deprecated back in `v6.0.2 <https://github.com/PostgREST/postgrest/releases/tag/v6.0.2>`_.
 
diff --git a/docs/releases/v9.0.1.rst b/docs/releases/v09.0.1.rst
similarity index 99%
rename from docs/releases/v9.0.1.rst
rename to docs/releases/v09.0.1.rst
index dfbaa5735..bac8795b1 100644
--- a/docs/releases/v9.0.1.rst
+++ b/docs/releases/v09.0.1.rst
@@ -1,6 +1,6 @@
 
-PostgREST 9.0.1
-===============
+9.0.1
+=====
 
 This version includes important fixes for production environments and other miscellaneous fixes. You can download the pre-compiled binaries on the `GitHub release page <https://github.com/PostgREST/postgrest/releases/tag/v9.0.1>`_.
 
diff --git a/docs/releases/v10.0.0.rst b/docs/releases/v10.0.0.rst
index 9177fcfbc..e703324a4 100644
--- a/docs/releases/v10.0.0.rst
+++ b/docs/releases/v10.0.0.rst
@@ -1,6 +1,6 @@
 
-PostgREST 10.0.0
-================
+10.0.0
+======
 
 Features
 --------
@@ -73,9 +73,9 @@ Documentation improvements
 
 * Added the :ref:`file_descriptors` subsection.
 
-* Added a reference page for :doc:`Error documentation </errors>`.
+* Added a reference page for :ref:`error_source`.
 
-* Moved the :ref:`error_source` and the :ref:`status_codes` sections to the :doc:`errors reference page </errors>`.
+* Moved the :ref:`error_source` and the :ref:`status_codes` sections to the :ref:`errors reference page <error_source>`.
 
 * Moved the *Casting type to custom JSON* how-to to the :ref:`casting_range_to_json` subsection.
 
diff --git a/docs/releases/v10.2.0.rst b/docs/releases/v10.2.0.rst
index ff7dc61ea..96121b410 100644
--- a/docs/releases/v10.2.0.rst
+++ b/docs/releases/v10.2.0.rst
@@ -1,6 +1,6 @@
 
-PostgREST 10.2.0
-================
+10.2.0
+======
 
 This minor version adds bug fixes and some features that provide stability to v10.0.0. These release notes include the changes added in versions `10.1.0 <https://github.com/PostgREST/postgrest/releases/tag/v10.1.0>`_, `10.1.1 <https://github.com/PostgREST/postgrest/releases/tag/v10.1.1>`_ and `10.1.2 <https://github.com/PostgREST/postgrest/releases/tag/v10.1.2>`_. You can look at the detailed changelog and download the pre-compiled binaries on the `GitHub release page <https://github.com/PostgREST/postgrest/releases/tag/v10.2.0>`_.
 
diff --git a/docs/releases/v5.2.0.rst b/docs/releases/v5.2.0.rst
deleted file mode 100644
index d32044526..000000000
--- a/docs/releases/v5.2.0.rst
+++ /dev/null
@@ -1,26 +0,0 @@
-v5.2.0
-======
-
-* Explicit qualification introduced in ``v5.0`` is no longer necessary, this section will not be included from this version onwards.  A :ref:`db-extra-search-path` configuration parameter was introduced to avoid the need to explictly qualify database objects. If you install PostgreSQL extensions on the ``public`` schema, they'll work normally from now on.
-
-* Now you can filter :ref:`tabs-cols-w-spaces`.
-
-* Included the ability to quote columns that have :ref:`reserved-chars`.
-
-* Thanks to `Zhou Feng <https://github.com/zhoufeng1989>`_, now is possible to reference an external file in :ref:`db-uri`.
-
-* Thanks to `Russell Davies <https://github.com/russelldavies>`_, Json Web Key Sets are now accepted by :ref:`jwt-secret`.
-
-Thanks
-------
-
-This release was made possible thanks to:
-
-* `Daniel Babiak <https://github.com/dbabiak>`_
-* `Michel Pelletier <https://github.com/michelp>`_
-* Tsingson Qin
-* Jay Hannah
-* Victor Adossi
-* Petr Beles
-
-If you like to join them please consider `supporting PostgREST development <https://github.com/PostgREST/postgrest#user-content-supporting-development>`_.
diff --git a/docs/releases/v6.0.2.rst b/docs/releases/v6.0.2.rst
deleted file mode 100644
index 47f870e44..000000000
--- a/docs/releases/v6.0.2.rst
+++ /dev/null
@@ -1,79 +0,0 @@
-.. |br| raw:: html
-
-   <br />
-
-v6.0.2
-======
-
-Full changelog is available at `PostgREST releases page <https://github.com/PostgREST/postgrest/releases>`_.
-
-Added
------
-
-* Ignoring payload keys for insert/update can be now done with the ``?columns`` query parameter. See :ref:`specify_columns`.
-  |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
-
-* `websearch_to_tsquery <https://www.postgresql.org/docs/current/functions-textsearch.html#id-1.5.8.19.7.2.2.7.1.1.1>`_ can now be used
-  through the ``wfts`` operator. See :ref:`fts`.
-  |br| -- `@herulume <https://github.com/herulume>`_
-
-* Resource Embedding on materialized views is now possible. See :ref:`embedding_views`.
-  |br| -- `@vitorbaptista <https://github.com/vitorbaptista>`_
-
-* Bulk calling an RPC is now allowed. See :ref:`bulk_call`.
-  |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
-
-* It's now possible to request a ``text/plain`` output. See :ref:`scalar_return_formats`.
-  |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
-
-* Config option for specifying PostgREST database pool timeout ``db-pool-timeout``.
-  |br| -- `@Qu4tro <https://github.com/Qu4tro>`_
-
-* Config option for binding the PostgREST web server to an unix socket. See :ref:`server-unix-socket`.
-  |br| -- `@Dansvidania <https://github.com/Dansvidania>`_
-
-* Config option for extending the supported media types. See :ref:`raw-media-types`.
-  |br| -- `@Dansvidania <https://github.com/Dansvidania>`_
-
-* We now offer an statically linked binary for Linux. Look for **postgrest-<version>-linux-x64-static.tar.xz** on the
-  `releases page <https://github.com/PostgREST/postgrest/releases>`_.
-  |br| -- `@clojurians-org <https://github.com/clojurians-org>`_
-
-* A :ref:`how_tos` section was added to the documentation.
-
-Changed
--------
-
-* ``SIGHUP`` support was removed. You should use ``SIGUSR1`` instead. See :ref:`schema_reloading`.
-
-* server-host default of ``127.0.0.1`` was changed to ``!4``. See :ref:`server-host`.
-
-Thanks
-------
-
-This release is sponsored by:
-
-.. image:: ../_static/cybertec.png
-  :target: https://www.cybertec-postgresql.com/en/
-  :width:  13em
-
-.. image:: ../_static/2ndquadrant.png
-  :target: https://www.2ndquadrant.com/en/?utm_campaign=External%20Websites&utm_source=PostgREST&utm_medium=Logo
-  :width:  13em
-
-.. image:: ../_static/retool.png
-  :target: https://retool.com/?utm_source=sponsor&utm_campaign=postgrest
-  :width:  13em
-
-* `Daniel Babiak <https://github.com/dbabiak>`_
-* Evans Fernandes
-* Tsingson Qin
-* Michel Pelletier
-* Jay Hannah
-* Robert Stolarz
-* Kofi Gumbs
-* Nicholas DiBiase
-* Christopher Reid
-* Nathan Bouscal
-
-If you like to join them please consider `supporting PostgREST development <https://github.com/PostgREST/postgrest#user-content-supporting-development>`_.
diff --git a/docs/releases/v7.0.0.rst b/docs/releases/v7.0.0.rst
deleted file mode 100644
index 67357c9b2..000000000
--- a/docs/releases/v7.0.0.rst
+++ /dev/null
@@ -1,106 +0,0 @@
-.. |br| raw:: html
-
-   <br />
-
-v7.0.0
-======
-
-You can download this release at the `PostgREST v7.0.0 release page <https://github.com/PostgREST/postgrest/releases/tag/v7.0.0>`_.
-
-Added
------
-
-* Support for :ref:`Switching to a schema <multiple-schemas>` defined in :ref:`db-schemas`.
-  |br| -- `@steve-chavez <https://github.com/steve-chavez>`_, `@mahmoudkassem <https://github.com/mahmoudkassem>`_
-
-* Support for :ref:`planned_count` and :ref:`estimated_count`.
-  |br| -- `@steve-chavez <https://github.com/steve-chavez>`_, `@LorenzHenk <https://github.com/LorenzHenk>`_
-
-* Support for the :ref:`on_conflict <on_conflict>` query parameter to UPSERT based on a unique constraint.
-  |br| -- `@ykst <https://github.com/ykst>`_
-
-* Support for :ref:`Resource Embedding Disambiguation <embed_disamb>`.
-  |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
-
-* Support for user defined socket permission via :ref:`server-unix-socket-mode` config option
-  |br| -- `@Dansvidania <https://github.com/Dansvidania>`_
-
-* HTTP logic improvements -- `@steve-chavez <https://github.com/steve-chavez>`_
-
-   + Support for HTTP HEAD requests.
-   + GUCs for :ref:`guc_req_path_method`.
-   + Support for :ref:`pre_req_headers`.
-   + Allow overriding provided headers(Content-Type, Location, etc) by :ref:`guc_resp_hdrs`
-   + Access to the ``Authorization`` header value through ``request.header.authorization``
-
-* Documentation improvements
-
-  + Explanation for :doc:`Schema Structure <../db_authz>`.
-  + Reference for :ref:`s_proc_embed`.
-  + Reference for :ref:`mutation_embed`.
-  + Reference for filters on :ref:`json_columns`.
-  + How-to for :ref:`providing_img`.
-  + Added :ref:`community_tutorials` section.
-
-Fixed
------
-
-* Allow embedding a view when its source table foreign key is UNIQUE
-  |br| -- `@bwbroersma <https://github.com/bwbroersma>`_
-
-* ``Accept: application/vnd.pgrst.object+json`` behavior is now enforced for POST/PATCH/DELETE regardless of ``Prefer: return=minimal``
-  |br| -- `@dwagin <https://github.com/dwagin>`_
-
-* Fix self join resource embedding on PATCH
-  |br| -- `@herulume <https://github.com/herulume>`_, `@steve-chavez <https://github.com/steve-chavez>`_
-
-* Allow PATCH/DELETE without ``Prefer: return=minimal`` on tables with no SELECT privileges
-  |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
-
-* Fix many to many resource embedding for RPC/PATCH
-  |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
-
-Changed
--------
-
-* :ref:`bulk_call` should now be done by specifying a ``Prefer: params=multiple-objects`` header. This fixes a performance regression when calling stored procedures.
-
-* Resource Embedding now outputs an error when multiple relationships between two tables are found, see :ref:`embed_disamb`.
-
-* ``server-proxy-uri`` config option has been renamed to :ref:`openapi-server-proxy-uri`.
-
-* Default Unix Socket file mode from 755 to 660
-
-Thanks
-------
-
-This release was made possible thanks to:
-
-.. image:: ../_static/cybertec.png
-  :target: https://www.cybertec-postgresql.com/en/
-  :width:  13em
-
-.. image:: ../_static/2ndquadrant.png
-  :target: https://www.2ndquadrant.com/en/?utm_campaign=External%20Websites&utm_source=PostgREST&utm_medium=Logo
-  :width:  13em
-
-.. image:: ../_static/retool.png
-  :target: https://retool.com/?utm_source=sponsor&utm_campaign=postgrest
-  :width:  13em
-
-* `Daniel Babiak <https://github.com/dbabiak>`_
-* Evans Fernandes
-* Jan Sommer
-* Tsingson Qin
-* Michel Pelletier
-* Jay Hannah
-* Robert Stolarz
-* Kofi Gumbs
-* Nicholas DiBiase
-* Christopher Reid
-* Nathan Bouscal
-* Daniel Rafaj
-* David Fenko
-
-
-If you like to join them please consider `supporting PostgREST development <https://github.com/PostgREST/postgrest#user-content-supporting-development>`_.
diff --git a/docs/releases/v7.0.1.rst b/docs/releases/v7.0.1.rst
deleted file mode 100644
index 541c46245..000000000
--- a/docs/releases/v7.0.1.rst
+++ /dev/null
@@ -1,69 +0,0 @@
-.. |br| raw:: html
-
-   <br />
-
-v7.0.1
-======
-
-You can see the full changelog at `PostgREST v7.0.1 release page <https://github.com/PostgREST/postgrest/releases/tag/v7.0.1>`_.
-
-Fixed
------
-
-* Fix overloaded computed columns on RPC
-  |br| -- `@wolfgangwalther <https://github.com/wolfgangwalther>`_
-
-* Fix POST, PATCH, DELETE with ``?select=`` and ``Prefer: return=minimal`` and PATCH with empty body
-  |br| -- `@wolfgangwalther <https://github.com/wolfgangwalther>`_
-
-* Fix missing ``openapi-server-proxy-uri`` config option
-  |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
-
-* Fix ``Content-Profile`` not working for POST RPC
-  |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
-
-* Fix PUT restriction for including all columns in payload
-  |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
-
-* Documentation improvements
-
-  + Added package managers to :ref:`install`.
-
-Changed
--------
-
-* From this version onwards, the release page will include a single Linux static executable that can be run on any Linux distribution.
-
-Thanks
-------
-
-This release was made possible thanks to:
-
-.. image:: ../_static/cybertec.png
-  :target: https://www.cybertec-postgresql.com/en/
-  :width:  13em
-
-.. image:: ../_static/2ndquadrant.png
-  :target: https://www.2ndquadrant.com/en/?utm_campaign=External%20Websites&utm_source=PostgREST&utm_medium=Logo
-  :width:  13em
-
-.. image:: ../_static/retool.png
-  :target: https://retool.com/?utm_source=sponsor&utm_campaign=postgrest
-  :width:  13em
-
-* `Daniel Babiak <https://github.com/dbabiak>`_
-* Evans Fernandes
-* Jan Sommer
-* Tsingson Qin
-* Michel Pelletier
-* Jay Hannah
-* Robert Stolarz
-* Kofi Gumbs
-* Nicholas DiBiase
-* Christopher Reid
-* Nathan Bouscal
-* Daniel Rafaj
-* David Fenko
-
-
-If you'd like to join them, consider `supporting PostgREST development <https://github.com/PostgREST/postgrest#user-content-supporting-development>`_.
diff --git a/docs/releases/v8.0.0.rst b/docs/releases/v8.0.0.rst
deleted file mode 100644
index 69fb70bd2..000000000
--- a/docs/releases/v8.0.0.rst
+++ /dev/null
@@ -1,191 +0,0 @@
-.. |br| raw:: html
-
-   <br />
-
-v8.0.0
-======
-
-You can download this release at the `PostgREST v8.0.0 release page <https://github.com/PostgREST/postgrest/releases/tag/v8.0.0>`_.
-
-Added
------
-
-* Allow HTTP status override through the :ref:`response.status <guc_resp_status>` GUC.
-  |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
-
-* Allow :ref:`s_procs_variadic`.
-  |br| -- `@wolfgangwalther <https://github.com/wolfgangwalther>`_
-
-* Allow :ref:`embedding_view_chains` recursively to any depth.
-  |br| -- `@wolfgangwalther <https://github.com/wolfgangwalther>`_
-
-* No downtime when reloading the schema cache. See :ref:`schema_reloading`.
-  |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
-
-* Allow schema cache reloading using PostgreSQL :ref:`NOTIFY <schema_reloading_notify>` command. This enables :ref:`auto_schema_reloading`.
-  |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
-
-* Allow sending the header ``Prefer: headers-only`` to get a response with a ``Location`` header. See :ref:`insert`.
-  |br| -- `@laurenceisla <https://github.com/laurenceisla>`_
-
-* Allow :ref:`external_connection_poolers` such as PgBouncer in transaction pooling mode.
-  |br| -- `@laurenceisla <https://github.com/laurenceisla>`_
-
-* Allow :ref:`config_reloading` by sending a SIGUSR2 signal.
-  |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
-
-* Allow ``Bearer`` with and without capitalization as authentication schema. See :ref:`client_auth`.
-  |br| -- `@wolfgangwalther <https://github.com/wolfgangwalther>`_
-
-* :ref:`in_db_config` that can be :ref:`reloaded with NOTIFY <config_reloading_notify>`.
-  |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
-
-* Allow OPTIONS to generate HTTP methods based on views triggers. See :ref:`OPTIONS requests <options_requests>`.
-  |br| -- `@laurenceisla <https://github.com/laurenceisla>`_
-
-* Show timestamps for server diagnostic information. See :ref:`pgrst_logging`.
-  |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
-
-* Config options for showing a full OpenAPI output regardless of the JWT role privileges and for disabling it altogether. See :ref:`openapi-mode`.
-  |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
-
-* Config option for logging level. See :ref:`log-level`.
-  |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
-
-* Config option for enabling or disabling prepared statements. See :ref:`db-prepared-statements`.
-  |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
-
-* Config option for specifying how to terminate the transactions (allowing rollbacks, useful for testing). See :ref:`db-tx-end`.
-  |br| -- `@wolfgangwalther <https://github.com/wolfgangwalther>`_
-
-* Documentation improvements
-
-  + Added the :doc:`../schema_cache` page.
-  + Moved the :ref:`schema_reloading` reference from :doc:`../admin` to :doc:`../schema_cache`
-
-Changed
--------
-
-* Docker images are now optimized to be built from the scratch image. This reduces the compressed image size from over 30 MB to about 4 MB.
-  For more details, see `Docker image built with Nix <https://github.com/PostgREST/postgrest/tree/main/nix/tools/docker#user-content-docker-image-built-with-nix>`_.
-  |br| -- `@monacoremo <https://github.com/monacoremo>`_
-
-* The Docker image no longer has an internal ``/etc/postgrest.conf`` file, you must use :ref:`env_variables_config` to configure it.
-  |br| -- `@wolfgangwalther <https://github.com/wolfgangwalther>`_
-
-* The ``pg_listen`` `utility <https://github.com/begriffs/pg_listen>`_ is no longer needed to automatically reload the schema cache
-  and it's replaced entirely by database notifications. See :ref:`auto_schema_reloading`.
-  |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
-
-* POST requests for insertions no longer include a ``Location`` header in the response by default and behave the same way as having a
-  ``Prefer: return=minimal`` header in the request. This prevents permissions errors when having a write-only table. See :ref:`insert`.
-  |br| -- `@laurenceisla <https://github.com/laurenceisla>`_
-
-* Modified the default logging level from ``info`` to ``error``. See :ref:`log-level`.
-  |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
-
-* Changed the error message for a not found RPC on a stale schema (see :ref:`stale_schema`) and for the unsupported case of
-  overloaded functions with the same argument names but different types.
-  |br| -- `@laurenceisla <https://github.com/laurenceisla>`_
-
-* Changed the error message for the no relationship found error. See :ref:`stale_schema`.
-  |br| -- `@laurenceisla <https://github.com/laurenceisla>`_
-
-Fixed
------
-
-* Fix showing UNKNOWN on ``postgrest --help`` invocation.
-  |br| -- `@monacoremo <https://github.com/monacoremo>`_
-
-* Removed single column restriction to allow composite foreign keys in join tables.
-  |br| -- `@goteguru <https://github.com/goteguru>`_
-
-* Fix expired JWTs starting an empty transaction on the db.
-  |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
-
-* Fix location header for POST request with ``select=`` without PK.
-  |br| -- `@wolfgangwalther <https://github.com/wolfgangwalther>`_
-
-* Fix error messages on connection failure for localized PostgreSQL on Windows.
-  |br| -- `@wolfgangwalther <https://github.com/wolfgangwalther>`_
-
-* Fix ``application/octet-stream`` appending ``charset=utf-8``.
-  |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
-
-* Fix overloading of functions with unnamed arguments.
-  |br| -- `@wolfgangwalther <https://github.com/wolfgangwalther>`_
-
-* Return ``405 Method not Allowed`` for GET of volatile RPC instead of 500.
-  |br| -- `@wolfgangwalther <https://github.com/wolfgangwalther>`_
-
-* Fix RPC return type handling and embedding for domains with composite base type.
-  |br| -- `@wolfgangwalther <https://github.com/wolfgangwalther>`_
-
-* Fix embedding through views that have COALESCE with subselect.
-  |br| -- `@wolfgangwalther <https://github.com/wolfgangwalther>`_
-
-* Fix parsing of boolean config values for Docker environment variables, now it accepts double quoted truth values ``("true", "false")`` and numbers ``("1", "0")``.
-  |br| -- `@wolfgangwalther <https://github.com/wolfgangwalther>`_
-
-* Fix using ``app.settings.xxx`` config options in Docker, now they can be used as ``PGRST_APP_SETTINGS_xxx``.
-  |br| -- `@wolfgangwalther <https://github.com/wolfgangwalther>`_
-
-* Fix panic when attempting to run with unix socket on non-unix host and properly close unix domain socket on exit.
-  |br| -- `@monacoremo <https://github.com/monacoremo>`_
-
-* Disregard internal junction (in non-exposed schema) when embedding.
-  |br| -- `@steve-chavez <https://github.com/steve-chavez>`_
-
-* Fix requests for overloaded functions from HTML forms to no longer hang.
-  |br| -- `@laurenceisla <https://github.com/laurenceisla>`_
-
-Thanks
-------
-
-Big thanks from the `PostgREST team <https://github.com/orgs/PostgREST/people>`_ to our sponsors!
-
-.. container:: image-container
-
-  .. image:: ../_static/cybertec-new.png
-    :target: https://www.cybertec-postgresql.com/en/?utm_source=postgrest.org&utm_medium=referral&utm_campaign=postgrest
-    :width:  13em
-
-  .. image:: ../_static/2ndquadrant.png
-    :target: https://www.2ndquadrant.com/en/?utm_campaign=External%20Websites&utm_source=PostgREST&utm_medium=Logo
-    :width:  13em
-
-  .. image:: ../_static/retool.png
-    :target: https://retool.com/?utm_source=sponsor&utm_campaign=postgrest
-    :width:  13em
-
-  .. image:: ../_static/gnuhost.png
-    :target: https://gnuhost.eu/?utm_source=sponsor&utm_campaign=postgrest
-    :width:  13em
-
-  .. image:: ../_static/supabase.png
-    :target: https://supabase.com/?utm_source=postgrest%20backers&utm_medium=open%20source%20partner&utm_campaign=postgrest%20backers%20github&utm_term=homepage
-    :width:  13em
-
-  .. image:: ../_static/oblivious.jpg
-    :target: https://oblivious.ai/?utm_source=sponsor&utm_campaign=postgrest
-    :width:  13em
-
-* Evans Fernandes
-* Jan Sommer
-* `Franz Gusenbauer <https://www.igutech.at/>`_
-* `Daniel Babiak <https://github.com/dbabiak>`_
-* Tsingson Qin
-* Michel Pelletier
-* Jay Hannah
-* Robert Stolarz
-* Nicholas DiBiase
-* Christopher Reid
-* Nathan Bouscal
-* Daniel Rafaj
-* David Fenko
-* Remo Rechkemmer
-* Severin Ibarluzea
-* Tom Saleeba
-* Pawel Tyll
-
-If you like to join them please consider `supporting PostgREST development <https://github.com/PostgREST/postgrest#user-content-supporting-development>`_.
diff --git a/docs/tutorials/tut0.rst b/docs/tutorials/tut0.rst
index 7b2ce647c..2d86c871f 100644
--- a/docs/tutorials/tut0.rst
+++ b/docs/tutorials/tut0.rst
@@ -165,7 +165,7 @@ PostgREST can use a configuration file to tell it how to connect to the database
   db-schemas = "api"
   db-anon-role = "web_anon"
 
-The configuration file has other :doc:`options <../configuration>`, but this is all we need. 
+The configuration file has other :ref:`options <configuration>`, but this is all we need.
 If you are not using Docker, make sure that your port number is correct and replace `postgres` with the name of the database where you added the todos table.
 
 Now run the server:
diff --git a/postgrest.dict b/postgrest.dict
index d99c43b30..7fed84b22 100644
--- a/postgrest.dict
+++ b/postgrest.dict
@@ -179,6 +179,7 @@ Tcl
 tmuxp
 todo
 todos
+tos
 Tsingson
 tsquery
 tx

From 637a6e281d2be8d18f1de040641424199ed8fe40 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Mon, 8 May 2023 11:55:46 -0300
Subject: [PATCH 564/652] Move part of admin to references

- Add integrations section with Nginx and SystemD
- Move Nginx and SystemD sections from admin on integrations
---
 docs/_static/css/custom.css   |   4 +
 docs/explanations/admin.rst   | 359 ----------------------------------
 docs/index.rst                |  11 ++
 docs/integrations/nginx.rst   | 147 ++++++++++++++
 docs/integrations/systemd.rst |  51 +++++
 docs/references/admin.rst     | 121 ++++++++++++
 postgrest.dict                |   1 +
 7 files changed, 335 insertions(+), 359 deletions(-)
 delete mode 100644 docs/explanations/admin.rst
 create mode 100644 docs/integrations/nginx.rst
 create mode 100644 docs/integrations/systemd.rst
 create mode 100644 docs/references/admin.rst

diff --git a/docs/_static/css/custom.css b/docs/_static/css/custom.css
index 7000d0fce..a1bd351fe 100644
--- a/docs/_static/css/custom.css
+++ b/docs/_static/css/custom.css
@@ -85,3 +85,7 @@ div.line-block {
 #ecosystem span.caption-text {
     display: none;
 }
+
+#integrations span.caption-text {
+    display: none;
+}
diff --git a/docs/explanations/admin.rst b/docs/explanations/admin.rst
deleted file mode 100644
index 1315ae14a..000000000
--- a/docs/explanations/admin.rst
+++ /dev/null
@@ -1,359 +0,0 @@
-.. _admin:
-
-Admin
-#####
-
-Hardening PostgREST
-===================
-
-PostgREST is a fast way to construct a RESTful API. Its default behavior is great for scaffolding in development. When it's time to go to production it works great too, as long as you take precautions. PostgREST is a small sharp tool that focuses on performing the API-to-database mapping. We rely on a reverse proxy like Nginx for additional safeguards.
-
-The first step is to create an Nginx configuration file that proxies requests to an underlying PostgREST server.
-
-.. code-block:: nginx
-
-  http {
-    # ...
-    # upstream configuration
-    upstream postgrest {
-      server localhost:3000;
-    }
-    # ...
-    server {
-      # ...
-      # expose to the outside world
-      location /api/ {
-        default_type  application/json;
-        proxy_hide_header Content-Location;
-        add_header Content-Location  /api/$upstream_http_content_location;
-        proxy_set_header  Connection "";
-        proxy_http_version 1.1;
-        proxy_pass http://postgrest/;
-      }
-      # ...
-    }
-  }
-
-.. note::
-
-  For ubuntu, if you already installed nginx through :code:`apt` you can add this to the config file in
-  :code:`/etc/nginx/sites-enabled/default`.
-
-.. _block_fulltable:
-
-Block Full-Table Operations
----------------------------
-
-Each table in the admin-selected schema gets exposed as a top level route. Client requests are executed by certain database roles depending on their authentication. All HTTP verbs are supported that correspond to actions permitted to the role. For instance if the active role can drop rows of the table then the DELETE verb is allowed for clients. Here's an API request to delete old rows from a hypothetical logs table:
-
-.. tabs::
-
-  .. code-tab:: http
-
-    DELETE /logs?time=lt.1991-08-06 HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/logs?time=lt.1991-08-06" -X DELETE
-
-However it's very easy to delete the **entire table** by omitting the query parameter!
-
-.. tabs::
-
-  .. code-tab:: http
-
-    DELETE /logs HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/logs" -X DELETE
-
-This can happen accidentally such as by switching a request from a GET to a DELETE. To protect against accidental operations use the `pg-safeupdate <https://github.com/eradman/pg-safeupdate>`_ PostgreSQL extension. It raises an error if UPDATE or DELETE are executed without specifying conditions. To install it you can use the `PGXN <https://pgxn.org/>`_ network:
-
-.. code-block:: bash
-
-  sudo -E pgxn install safeupdate
-
-  # then add this to postgresql.conf:
-  # shared_preload_libraries='safeupdate';
-
-This does not protect against malicious actions, since someone can add a url parameter that does not affect the result set. To prevent this you must turn to database permissions, forbidding the wrong people from deleting rows, and using `row-level security <https://www.postgresql.org/docs/current/ddl-rowsecurity.html>`_ if finer access control is required.
-
-Count-Header DoS
-----------------
-
-For convenience to client-side pagination controls PostgREST supports counting and reporting total table size in its response. As described in :ref:`limits`, responses ordinarily include a range but leave the total unspecified like
-
-.. code-block:: http
-
-  HTTP/1.1 200 OK
-  Range-Unit: items
-  Content-Range: 0-14/*
-
-However including the request header :code:`Prefer: count=exact` calculates and includes the full count:
-
-.. code-block:: http
-
-  HTTP/1.1 206 Partial Content
-  Range-Unit: items
-  Content-Range: 0-14/3573458
-
-This is fine in small tables, but count performance degrades in big tables due to the MVCC architecture of PostgreSQL. For very large tables it can take a very long time to retrieve the results which allows a denial of service attack. The solution is to strip this header from all requests:
-
-.. code-block:: postgres
-
-  -- Pending nginx config: Remove any prefer header which contains the word count
-
-.. _https:
-
-HTTPS
------
-
-PostgREST aims to do one thing well: add an HTTP interface to a PostgreSQL database. To keep the code small and focused we do not implement HTTPS. Use a reverse proxy such as NGINX to add this, `here's how <https://nginx.org/en/docs/http/configuring_https_servers.html>`_. Note that some Platforms as a Service like Heroku also add SSL automatically in their load balancer.
-
-Rate Limiting
--------------
-
-Nginx supports "leaky bucket" rate limiting (see `official docs <https://nginx.org/en/docs/http/ngx_http_limit_req_module.html>`_). Using standard Nginx configuration, routes can be grouped into *request zones* for rate limiting. For instance we can define a zone for login attempts:
-
-.. code-block:: nginx
-
-  limit_req_zone $binary_remote_addr zone=login:10m rate=1r/s;
-
-This creates a shared memory zone called "login" to store a log of IP addresses that access the rate limited urls. The space reserved, 10 MB (:code:`10m`) will give us enough space to store a history of 160k requests. We have chosen to allow only allow one request per second (:code:`1r/s`).
-
-Next we apply the zone to certain routes, like a hypothetical stored procedure called :code:`login`.
-
-.. code-block:: nginx
-
-  location /rpc/login/ {
-    # apply rate limiting
-    limit_req zone=login burst=5;
-  }
-
-The burst argument tells Nginx to start dropping requests if more than five queue up from a specific IP.
-
-Nginx rate limiting is general and indiscriminate. To rate limit each authenticated request individually you will need to add logic in a :ref:`Custom Validation <custom_validation>` function.
-
-Debugging
-=========
-
-Server Version
---------------
-
-When debugging a problem it's important to verify the PostgREST version. At any time you can make a request to the running server and determine exactly which version is deployed. Look for the :code:`Server` HTTP response header, which contains the version number.
-
-.. _pgrst_logging:
-
-Logging
--------
-
-PostgREST logs basic request information to ``stdout``, including the authenticated user if available, the requesting IP address and user agent, the URL requested, and HTTP response status.
-
-.. code::
-
-   127.0.0.1 - user [26/Jul/2021:01:56:38 -0500] "GET /clients HTTP/1.1" 200 - "" "curl/7.64.0"
-   127.0.0.1 - anonymous [26/Jul/2021:01:56:48 -0500] "GET /unexistent HTTP/1.1" 404 - "" "curl/7.64.0"
-
-For diagnostic information about the server itself, PostgREST logs to ``stderr``.
-
-.. code::
-
-   12/Jun/2021:17:47:39 -0500: Attempting to connect to the database...
-   12/Jun/2021:17:47:39 -0500: Listening on port 3000
-   12/Jun/2021:17:47:39 -0500: Connection successful
-   12/Jun/2021:17:47:39 -0500: Config re-loaded
-   12/Jun/2021:17:47:40 -0500: Schema cache loaded
-
-.. note::
-
-   When running it in an SSH session you must detach it from stdout or it will be terminated when the session closes. The easiest technique is redirecting the output to a log file or to the syslog:
-
-   .. code-block:: bash
-
-     ssh foo@example.com \
-       'postgrest foo.conf </dev/null >/var/log/postgrest.log 2>&1 &'
-
-     # another option is to pipe the output into "logger -t postgrest"
-
-PostgREST logging provides limited information for debugging server errors. It's helpful to get full information about both client requests and the corresponding SQL commands executed against the underlying database.
-
-HTTP Requests
--------------
-
-A great way to inspect incoming HTTP requests including headers and query parameters is to sniff the network traffic on the port where PostgREST is running. For instance on a development server bound to port 3000 on localhost, run this:
-
-.. code:: bash
-
-  # sudo access is necessary for watching the network
-  sudo ngrep -d lo0 port 3000
-
-The options to ngrep vary depending on the address and host on which you've bound the server. The binding is described in the :ref:`configuration` section. The ngrep output isn't particularly pretty, but it's legible.
-
-Database Logs
--------------
-
-Once you've verified that requests are as you expect, you can get more information about the server operations by watching the database logs. By default PostgreSQL does not keep these logs, so you'll need to make the configuration changes below. Find :code:`postgresql.conf` inside your PostgreSQL data directory (to find that, issue the command :code:`show data_directory;`). Either find the settings scattered throughout the file and change them to the following values, or append this block of code to the end of the configuration file.
-
-.. code:: sql
-
-  # send logs where the collector can access them
-  log_destination = "stderr"
-
-  # collect stderr output to log files
-  logging_collector = on
-
-  # save logs in pg_log/ under the pg data directory
-  log_directory = "pg_log"
-
-  # (optional) new log file per day
-  log_filename = "postgresql-%Y-%m-%d.log"
-
-  # log every kind of SQL statement
-  log_statement = "all"
-
-Restart the database and watch the log file in real-time to understand how HTTP requests are being translated into SQL commands.
-
-.. note::
-
-  On Docker you can enable the logs by using a custom ``init.sh``:
-
-  .. code:: bash
-
-    #!/bin/sh
-    echo "log_statement = 'all'" >> /var/lib/postgresql/data/postgresql.conf
-
-  After that you can start the container and check the logs with ``docker logs``.
-
-  .. code:: bash
-
-    docker run -v "$(pwd)/init.sh":"/docker-entrypoint-initdb.d/init.sh" -d postgres
-    docker logs -f <container-id>
-
-Schema Reloading
-----------------
-
-Changing the schema while the server is running can lead to errors due to a stale schema cache. To learn how to refresh the cache see :ref:`schema_reloading`.
-
-.. _health_check:
-
-Health Check
-------------
-
-You can enable a minimal health check to verify if PostgREST is available for client requests and to check the status of its internal state.
-
-To do this, set the configuration variable :ref:`admin-server-port` to the port number of your preference. Two endpoints ``live`` and ``ready`` will then be available.
-
-The ``live`` endpoint verifies if PostgREST is running on its configured port. A request will return ``200 OK`` if PostgREST is alive or ``503`` otherwise.
-
-The ``ready`` endpoint also checks the state of both the Database Connection and the :ref:`schema_cache`. A request will return ``200 OK`` if it is ready or ``503`` if not.
-
-For instance, to verify if PostgREST is running at ``localhost:3000`` while the ``admin-server-port`` is set to ``3001``:
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET localhost:3001/live HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl -I "http://localhost:3001/live"
-
-.. code-block:: http
-
-  HTTP/1.1 200 OK
-
-If you have a machine with multiple network interfaces and multiple PostgREST instances in the same port, you need to specify a unique :ref:`hostname <server-host>` in the configuration of each PostgREST instance for the health check to work correctly. Don't use the special values(``!4``, ``*``, etc) in this case because the health check could report a false positive.
-
-Daemonizing
-===========
-
-For Linux distributions that use **systemd** (Ubuntu, Debian, Archlinux) you can create a daemon in the following way.
-
-First, create postgrest configuration in ``/etc/postgrest/config``
-
-.. code-block:: ini
-
-  db-uri = "postgres://<your_user>:<your_password>@localhost:5432/<your_db>"
-  db-schemas = "<your_exposed_schema>"
-  db-anon-role = "<your_anon_role>"
-  jwt-secret = "<your_secret>"
-
-Then create the systemd service file in ``/etc/systemd/system/postgrest.service``
-
-.. code-block:: ini
-
-  [Unit]
-  Description=REST API for any PostgreSQL database
-  After=postgresql.service
-
-  [Service]
-  ExecStart=/bin/postgrest /etc/postgrest/config
-  ExecReload=/bin/kill -SIGUSR1 $MAINPID
-
-  [Install]
-  WantedBy=multi-user.target
-
-After that, you can enable the service at boot time and start it with:
-
-.. code-block:: bash
-
-  systemctl enable postgrest
-  systemctl start postgrest
-
-  ## For reloading the service
-  ## systemctl restart postgrest
-
-.. _file_descriptors:
-
-File Descriptors
-----------------
-
-File descriptors are kernel resources that are used by HTTP connections (among others). File descriptors are limited per process. The kernel default limit is 1024, which is increased in some Linux distributions.
-When under heavy traffic, PostgREST can reach this limit and start showing ``No file descriptors available`` errors. To clear these errors, you can increase the process' file descriptor limit.
-
-.. code-block:: ini
-
-  [Service]
-  LimitNOFILE=10000
-
-Alternate URL Structure
-=======================
-
-As discussed in :ref:`singular_plural`, there are no special URL forms for singular resources in PostgREST, only operators for filtering. Thus there are no URLs like :code:`/people/1`. It would be specified instead as
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /people?id=eq.1 HTTP/1.1
-    Accept: application/vnd.pgrst.object+json
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/people?id=eq.1" \
-      -H "Accept: application/vnd.pgrst.object+json"
-
-This allows compound primary keys and makes the intent for singular response independent of a URL convention.
-
-Nginx rewrite rules allow you to simulate the familiar URL convention. The following example adds a rewrite rule for all table endpoints, but you'll want to restrict it to those tables that have a numeric simple primary key named "id."
-
-.. code-block:: nginx
-
-  # support /endpoint/:id url style
-  location ~ ^/([a-z_]+)/([0-9]+) {
-
-    # make the response singular
-    proxy_set_header Accept 'application/vnd.pgrst.object+json';
-
-    # assuming an upstream named "postgrest"
-    proxy_pass http://postgrest/$1?id=eq.$2;
-
-  }
-
-.. TODO
-.. Administration
-..   API Versioning
-..   HTTP Caching
-..   Upgrading
diff --git a/docs/index.rst b/docs/index.rst
index e0931674c..a90ece340 100644
--- a/docs/index.rst
+++ b/docs/index.rst
@@ -153,6 +153,17 @@ Recipes that'll help you address specific use-cases.
 
    how-tos/*
 
+Integrations
+------------
+
+.. toctree::
+   :glob:
+   :caption: Integrations
+   :name: integrations
+   :maxdepth: 1
+
+   integrations/*
+
 Ecosystem
 ---------
 
diff --git a/docs/integrations/nginx.rst b/docs/integrations/nginx.rst
new file mode 100644
index 000000000..25ce6ca98
--- /dev/null
+++ b/docs/integrations/nginx.rst
@@ -0,0 +1,147 @@
+Nginx
+=====
+
+PostgREST is a fast way to construct a RESTful API. Its default behavior is great for scaffolding in development. When it's time to go to production it works great too, as long as you take precautions.
+PostgREST is a small sharp tool that focuses on performing the API-to-database mapping. We rely on a reverse proxy like Nginx for additional safeguards.
+
+The first step is to create an Nginx configuration file that proxies requests to an underlying PostgREST server.
+
+.. code-block:: nginx
+
+  http {
+    # ...
+    # upstream configuration
+    upstream postgrest {
+      server localhost:3000;
+    }
+    # ...
+    server {
+      # ...
+      # expose to the outside world
+      location /api/ {
+        default_type  application/json;
+        proxy_hide_header Content-Location;
+        add_header Content-Location  /api/$upstream_http_content_location;
+        proxy_set_header  Connection "";
+        proxy_http_version 1.1;
+        proxy_pass http://postgrest/;
+      }
+      # ...
+    }
+  }
+
+.. note::
+
+  For ubuntu, if you already installed nginx through :code:`apt` you can add this to the config file in
+  :code:`/etc/nginx/sites-enabled/default`.
+
+.. _block_fulltable:
+
+Block Full-Table Operations
+---------------------------
+
+Each table in the admin-selected schema gets exposed as a top level route. Client requests are executed by certain database roles depending on their authentication. All HTTP verbs are supported that correspond to actions permitted to the role. For instance if the active role can drop rows of the table then the DELETE verb is allowed for clients. Here's an API request to delete old rows from a hypothetical logs table:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    DELETE /logs?time=lt.1991-08-06 HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/logs?time=lt.1991-08-06" -X DELETE
+
+However it's very easy to delete the **entire table** by omitting the query parameter!
+
+.. tabs::
+
+  .. code-tab:: http
+
+    DELETE /logs HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/logs" -X DELETE
+
+This can happen accidentally such as by switching a request from a GET to a DELETE. To protect against accidental operations use the `pg-safeupdate <https://github.com/eradman/pg-safeupdate>`_ PostgreSQL extension. It raises an error if UPDATE or DELETE are executed without specifying conditions. To install it you can use the `PGXN <https://pgxn.org/>`_ network:
+
+.. code-block:: bash
+
+  sudo -E pgxn install safeupdate
+
+  # then add this to postgresql.conf:
+  # shared_preload_libraries='safeupdate';
+
+This does not protect against malicious actions, since someone can add a url parameter that does not affect the result set. To prevent this you must turn to database permissions, forbidding the wrong people from deleting rows, and using `row-level security <https://www.postgresql.org/docs/current/ddl-rowsecurity.html>`_ if finer access control is required.
+
+.. _https:
+
+HTTPS
+-----
+
+PostgREST aims to do one thing well: add an HTTP interface to a PostgreSQL database. To keep the code small and focused we do not implement HTTPS. Use a reverse proxy such as NGINX to add this, `here's how <https://nginx.org/en/docs/http/configuring_https_servers.html>`_. Note that some Platforms as a Service like Heroku also add SSL automatically in their load balancer.
+
+Rate Limiting
+-------------
+
+Nginx supports "leaky bucket" rate limiting (see `official docs <https://nginx.org/en/docs/http/ngx_http_limit_req_module.html>`_). Using standard Nginx configuration, routes can be grouped into *request zones* for rate limiting. For instance we can define a zone for login attempts:
+
+.. code-block:: nginx
+
+  limit_req_zone $binary_remote_addr zone=login:10m rate=1r/s;
+
+This creates a shared memory zone called "login" to store a log of IP addresses that access the rate limited urls. The space reserved, 10 MB (:code:`10m`) will give us enough space to store a history of 160k requests. We have chosen to allow only allow one request per second (:code:`1r/s`).
+
+Next we apply the zone to certain routes, like a hypothetical stored procedure called :code:`login`.
+
+.. code-block:: nginx
+
+  location /rpc/login/ {
+    # apply rate limiting
+    limit_req zone=login burst=5;
+  }
+
+The burst argument tells Nginx to start dropping requests if more than five queue up from a specific IP.
+
+Nginx rate limiting is general and indiscriminate. To rate limit each authenticated request individually you will need to add logic in a :ref:`Custom Validation <custom_validation>` function.
+
+Alternate URL Structure
+-----------------------
+
+As discussed in :ref:`singular_plural`, there are no special URL forms for singular resources in PostgREST, only operators for filtering. Thus there are no URLs like :code:`/people/1`. It would be specified instead as
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /people?id=eq.1 HTTP/1.1
+    Accept: application/vnd.pgrst.object+json
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/people?id=eq.1" \
+      -H "Accept: application/vnd.pgrst.object+json"
+
+This allows compound primary keys and makes the intent for singular response independent of a URL convention.
+
+Nginx rewrite rules allow you to simulate the familiar URL convention. The following example adds a rewrite rule for all table endpoints, but you'll want to restrict it to those tables that have a numeric simple primary key named "id."
+
+.. code-block:: nginx
+
+  # support /endpoint/:id url style
+  location ~ ^/([a-z_]+)/([0-9]+) {
+
+    # make the response singular
+    proxy_set_header Accept 'application/vnd.pgrst.object+json';
+
+    # assuming an upstream named "postgrest"
+    proxy_pass http://postgrest/$1?id=eq.$2;
+
+  }
+
+.. TODO
+.. Administration
+..   API Versioning
+..   HTTP Caching
+..   Upgrading
diff --git a/docs/integrations/systemd.rst b/docs/integrations/systemd.rst
new file mode 100644
index 000000000..55b7d6cf7
--- /dev/null
+++ b/docs/integrations/systemd.rst
@@ -0,0 +1,51 @@
+systemd
+=======
+
+For Linux distributions that use **systemd** (Ubuntu, Debian, Archlinux) you can create a daemon in the following way.
+
+First, create postgrest configuration in ``/etc/postgrest/config``
+
+.. code-block:: ini
+
+  db-uri = "postgres://<your_user>:<your_password>@localhost:5432/<your_db>"
+  db-schemas = "<your_exposed_schema>"
+  db-anon-role = "<your_anon_role>"
+  jwt-secret = "<your_secret>"
+
+Then create the systemd service file in ``/etc/systemd/system/postgrest.service``
+
+.. code-block:: ini
+
+  [Unit]
+  Description=REST API for any PostgreSQL database
+  After=postgresql.service
+
+  [Service]
+  ExecStart=/bin/postgrest /etc/postgrest/config
+  ExecReload=/bin/kill -SIGUSR1 $MAINPID
+
+  [Install]
+  WantedBy=multi-user.target
+
+After that, you can enable the service at boot time and start it with:
+
+.. code-block:: bash
+
+  systemctl enable postgrest
+  systemctl start postgrest
+
+  ## For reloading the service
+  ## systemctl restart postgrest
+
+.. _file_descriptors:
+
+File Descriptors
+----------------
+
+File descriptors are kernel resources that are used by HTTP connections (among others). File descriptors are limited per process. The kernel default limit is 1024, which is increased in some Linux distributions.
+When under heavy traffic, PostgREST can reach this limit and start showing ``No file descriptors available`` errors. To clear these errors, you can increase the process' file descriptor limit.
+
+.. code-block:: ini
+
+  [Service]
+  LimitNOFILE=10000
diff --git a/docs/references/admin.rst b/docs/references/admin.rst
new file mode 100644
index 000000000..31f86599b
--- /dev/null
+++ b/docs/references/admin.rst
@@ -0,0 +1,121 @@
+.. _admin:
+
+Admin
+#####
+
+.. _pgrst_logging:
+
+Logging
+-------
+
+PostgREST logs basic request information to ``stdout``, including the authenticated user if available, the requesting IP address and user agent, the URL requested, and HTTP response status.
+
+.. code::
+
+   127.0.0.1 - user [26/Jul/2021:01:56:38 -0500] "GET /clients HTTP/1.1" 200 - "" "curl/7.64.0"
+   127.0.0.1 - anonymous [26/Jul/2021:01:56:48 -0500] "GET /unexistent HTTP/1.1" 404 - "" "curl/7.64.0"
+
+For diagnostic information about the server itself, PostgREST logs to ``stderr``.
+
+.. code::
+
+   12/Jun/2021:17:47:39 -0500: Attempting to connect to the database...
+   12/Jun/2021:17:47:39 -0500: Listening on port 3000
+   12/Jun/2021:17:47:39 -0500: Connection successful
+   12/Jun/2021:17:47:39 -0500: Config re-loaded
+   12/Jun/2021:17:47:40 -0500: Schema cache loaded
+
+.. note::
+
+   When running it in an SSH session you must detach it from stdout or it will be terminated when the session closes. The easiest technique is redirecting the output to a log file or to the syslog:
+
+   .. code-block:: bash
+
+     ssh foo@example.com \
+       'postgrest foo.conf </dev/null >/var/log/postgrest.log 2>&1 &'
+
+     # another option is to pipe the output into "logger -t postgrest"
+
+Currently PostgREST doesn't log the SQL commands executed against the underlying database.
+
+Database Logs
+~~~~~~~~~~~~~
+
+To find the SQL operations, you can watch the database logs. By default PostgreSQL does not keep these logs, so you'll need to make the configuration changes below.
+
+Find :code:`postgresql.conf` inside your PostgreSQL data directory (to find that, issue the command :code:`show data_directory;`). Either find the settings scattered throughout the file and change them to the following values, or append this block of code to the end of the configuration file.
+
+.. code:: sql
+
+  # send logs where the collector can access them
+  log_destination = "stderr"
+
+  # collect stderr output to log files
+  logging_collector = on
+
+  # save logs in pg_log/ under the pg data directory
+  log_directory = "pg_log"
+
+  # (optional) new log file per day
+  log_filename = "postgresql-%Y-%m-%d.log"
+
+  # log every kind of SQL statement
+  log_statement = "all"
+
+Restart the database and watch the log file in real-time to understand how HTTP requests are being translated into SQL commands.
+
+.. note::
+
+  On Docker you can enable the logs by using a custom ``init.sh``:
+
+  .. code:: bash
+
+    #!/bin/sh
+    echo "log_statement = 'all'" >> /var/lib/postgresql/data/postgresql.conf
+
+  After that you can start the container and check the logs with ``docker logs``.
+
+  .. code:: bash
+
+    docker run -v "$(pwd)/init.sh":"/docker-entrypoint-initdb.d/init.sh" -d postgres
+    docker logs -f <container-id>
+
+Server Version
+--------------
+
+When debugging a problem it's important to verify the PostgREST version. Look for the :code:`Server` HTTP response header, which contains the version number.
+
+.. code::
+
+  Server: postgrest/11.0.1
+
+.. _health_check:
+
+Health Check
+------------
+
+You can enable a health check to verify if PostgREST is available for client requests. Also to check the status of its internal state.
+
+To do this, set the configuration variable :ref:`admin-server-port` to the port number of your preference. Two endpoints ``live`` and ``ready`` will then be available.
+
+The ``live`` endpoint verifies if PostgREST is running on its configured port. A request will return ``200 OK`` if PostgREST is alive or ``503`` otherwise.
+
+The ``ready`` endpoint also checks the state of both the Database Connection and the :ref:`schema_cache`. A request will return ``200 OK`` if it is ready or ``503`` if not.
+
+For instance, to verify if PostgREST is running at ``localhost:3000`` while the ``admin-server-port`` is set to ``3001``:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET localhost:3001/live HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl -I "http://localhost:3001/live"
+
+.. code-block:: http
+
+  HTTP/1.1 200 OK
+
+If you have a machine with multiple network interfaces and multiple PostgREST instances in the same port, you need to specify a unique :ref:`hostname <server-host>` in the configuration of each PostgREST instance for the health check to work correctly. Don't use the special values(``!4``, ``*``, etc) in this case because the health check could report a false positive.
diff --git a/postgrest.dict b/postgrest.dict
index 7fed84b22..4313956b8 100644
--- a/postgrest.dict
+++ b/postgrest.dict
@@ -61,6 +61,7 @@ HTTP
 HTTPS
 HV
 Ibarluzea
+Integrations
 ilike
 imatch
 io

From a530030b714745fc6a2f43fad83e7203be48c448 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Mon, 8 May 2023 13:57:23 -0300
Subject: [PATCH 565/652] add integrations

* Move Nginx and systemd to integration
* Move External JWT Generatio to integration
* greenplum short notice
---
 docs/ecosystem.rst              | 33 ++-------------------------------
 docs/integrations/greenplum.rst |  6 ++++++
 docs/integrations/jwt_gen.rst   | 31 +++++++++++++++++++++++++++++++
 postgrest.dict                  |  1 +
 4 files changed, 40 insertions(+), 31 deletions(-)
 create mode 100644 docs/integrations/greenplum.rst
 create mode 100644 docs/integrations/jwt_gen.rst

diff --git a/docs/ecosystem.rst b/docs/ecosystem.rst
index ba6292bd6..7774b3d1f 100644
--- a/docs/ecosystem.rst
+++ b/docs/ecosystem.rst
@@ -1,34 +1,3 @@
-.. _external_jwt:
-
-External JWT Generation
------------------------
-
-JWT from Auth0
-~~~~~~~~~~~~~~
-
-An external service like `Auth0 <https://auth0.com/>`_ can do the hard work transforming OAuth from Github, Twitter, Google etc into a JWT suitable for PostgREST. Auth0 can also handle email signup and password reset flows.
-
-To use Auth0, create `an application <https://auth0.com/docs/get-started/applications>`_ for your app and `an API <https://auth0.com/docs/get-started/apis>`_ for your PostgREST server. Auth0 supports both HS256 and RS256 scheme for the issued tokens for APIs. For simplicity, you may first try HS256 scheme while creating your API on Auth0. Your application should use your PostgREST API's `API identifier <https://auth0.com/docs/get-started/apis/api-settings>`_ by setting it with the `audience parameter <https://auth0.com/docs/secure/tokens/access-tokens/get-access-tokens#control-access-token-audience>`_  during the authorization request. This will ensure that Auth0 will issue an access token for your PostgREST API. For PostgREST to verify the access token, you will need to set ``jwt-secret`` on PostgREST config file with your API's signing secret.
-
-.. note::
-
-  Our code requires a database role in the JWT. To add it you need to save the database role in Auth0 `app metadata <https://auth0.com/docs/manage-users/user-accounts/metadata/manage-metadata-rules>`_. Then, you will need to write `a rule <https://auth0.com/docs/customize/rules>`_ that will extract the role from the user's app_metadata and set it as a `custom claim <https://auth0.com/docs/get-started/apis/scopes/sample-use-cases-scopes-and-claims#add-custom-claims-to-a-token>`_ in the access token. Note that, you may use Auth0's `core authorization feature <https://auth0.com/docs/manage-users/access-control/rbac>`_ for more complex use cases. Metadata solution is mentioned here for simplicity.
-
-  .. code:: javascript
-
-    function (user, context, callback) {
-
-      // Follow the documentations at
-      // https://postgrest.org/en/latest/configuration.html#db-role-claim-key
-      // to set a custom role claim on PostgREST
-      // and use it as custom claim attribute in this rule
-      const myRoleClaim = 'https://myapp.com/role';
-
-      user.app_metadata = user.app_metadata || {};
-      context.accessToken[myRoleClaim] = user.app_metadata.role;
-      callback(null, user, context);
-    }
-
 .. _community_tutorials:
 
 Community Tutorials
@@ -47,6 +16,8 @@ Community Tutorials
 
 * `How PostgreSQL triggers work when called with a PostgREST PATCH HTTP request <https://blog.fgribreau.com/2020/11/how-postgresql-triggers-works-when.html>`_ - A tutorial to see how the old and new values are set or not when doing a PATCH request to PostgREST.
 
+* `REST Data Service on YugabyteDB / PostgreSQL <https://dev.to/yugabyte/rest-data-service-on-yugabytedb-postgresql-5f2h>`_
+
 .. _templates:
 
 Templates
diff --git a/docs/integrations/greenplum.rst b/docs/integrations/greenplum.rst
new file mode 100644
index 000000000..c8f02242e
--- /dev/null
+++ b/docs/integrations/greenplum.rst
@@ -0,0 +1,6 @@
+Greenplum
+#########
+
+`Greenplum <https://greenplum.org/>`_ has been reported to work by adding ``LOGIN`` to the :ref:`anonymous and user roles <roles>`.
+
+For more details, see https://github.com/PostgREST/postgrest/issues/2021.
diff --git a/docs/integrations/jwt_gen.rst b/docs/integrations/jwt_gen.rst
new file mode 100644
index 000000000..f2b80517a
--- /dev/null
+++ b/docs/integrations/jwt_gen.rst
@@ -0,0 +1,31 @@
+.. _external_jwt:
+
+External JWT Generation
+-----------------------
+
+JWT from Auth0
+~~~~~~~~~~~~~~
+
+An external service like `Auth0 <https://auth0.com/>`_ can do the hard work transforming OAuth from Github, Twitter, Google etc into a JWT suitable for PostgREST. Auth0 can also handle email signup and password reset flows.
+
+To use Auth0, create `an application <https://auth0.com/docs/get-started/applications>`_ for your app and `an API <https://auth0.com/docs/get-started/apis>`_ for your PostgREST server. Auth0 supports both HS256 and RS256 scheme for the issued tokens for APIs. For simplicity, you may first try HS256 scheme while creating your API on Auth0. Your application should use your PostgREST API's `API identifier <https://auth0.com/docs/get-started/apis/api-settings>`_ by setting it with the `audience parameter <https://auth0.com/docs/secure/tokens/access-tokens/get-access-tokens#control-access-token-audience>`_  during the authorization request. This will ensure that Auth0 will issue an access token for your PostgREST API. For PostgREST to verify the access token, you will need to set ``jwt-secret`` on PostgREST config file with your API's signing secret.
+
+.. note::
+
+  Our code requires a database role in the JWT. To add it you need to save the database role in Auth0 `app metadata <https://auth0.com/docs/manage-users/user-accounts/metadata/manage-metadata-rules>`_. Then, you will need to write `a rule <https://auth0.com/docs/customize/rules>`_ that will extract the role from the user's app_metadata and set it as a `custom claim <https://auth0.com/docs/get-started/apis/scopes/sample-use-cases-scopes-and-claims#add-custom-claims-to-a-token>`_ in the access token. Note that, you may use Auth0's `core authorization feature <https://auth0.com/docs/manage-users/access-control/rbac>`_ for more complex use cases. Metadata solution is mentioned here for simplicity.
+
+  .. code:: javascript
+
+    function (user, context, callback) {
+
+      // Follow the documentations at
+      // https://postgrest.org/en/latest/configuration.html#db-role-claim-key
+      // to set a custom role claim on PostgREST
+      // and use it as custom claim attribute in this rule
+      const myRoleClaim = 'https://myapp.com/role';
+
+      user.app_metadata = user.app_metadata || {};
+      context.accessToken[myRoleClaim] = user.app_metadata.role;
+      callback(null, user, context);
+    }
+
diff --git a/postgrest.dict b/postgrest.dict
index 4313956b8..6e1e1dd4c 100644
--- a/postgrest.dict
+++ b/postgrest.dict
@@ -48,6 +48,7 @@ Github
 Google
 grantor
 GraphQL
+Greenplum
 gte
 GUC
 gucs

From c82b23940be4e5c489bd218eadabac5217eaf50b Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Wed, 10 May 2023 12:51:06 -0300
Subject: [PATCH 566/652] add missing mention to cache reload on recovery

---
 docs/references/connection_pool.rst | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/docs/references/connection_pool.rst b/docs/references/connection_pool.rst
index c7f6d7ed0..38dabeee1 100644
--- a/docs/references/connection_pool.rst
+++ b/docs/references/connection_pool.rst
@@ -67,6 +67,8 @@ If the pool loses the connection to the database, it will retry reconnecting usi
 
 The retries happen immediately after a connection loss, if :ref:`db-channel-enabled` is set to true(the default). Otherwise they'll happen once a request arrives.
 
+The server reloads the :ref:`schema_cache` when recoverying.
+
 To notify the client of the next retry, the server sends a ``503 Service Unavailable`` status with the ``Retry-After: x`` header. Where ``x`` is the number of seconds programmed for the next retry.
 
 .. _external_connection_poolers:

From fc635d18ae869780bd523da3e2138e1b07250abd Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Tue, 9 May 2023 23:07:53 -0300
Subject: [PATCH 567/652] split the API reference

---
 docs/_static/css/custom.css                   |    4 +
 docs/index.rst                                |    7 +
 docs/references/admin.rst                     |   79 +
 docs/references/api.rst                       | 2871 +----------------
 docs/references/api/cors.rst                  |   34 +
 docs/references/api/openapi.rst               |   45 +
 docs/references/api/options.rst               |   52 +
 docs/references/api/resource_embedding.rst    |  836 +++++
 .../api/resource_representation.rst           |  150 +
 docs/references/api/schemas.rst               |  107 +
 docs/references/api/stored_procedures.rst     |  456 +++
 docs/references/api/tables_views.rst          | 1060 ++++++
 docs/references/api/url_grammar.rst           |  108 +
 docs/references/configuration.rst             |   25 +-
 docs/references/connection_pool.rst           |    2 +-
 postgrest.dict                                |    1 +
 16 files changed, 2954 insertions(+), 2883 deletions(-)
 create mode 100644 docs/references/api/cors.rst
 create mode 100644 docs/references/api/openapi.rst
 create mode 100644 docs/references/api/options.rst
 create mode 100644 docs/references/api/resource_embedding.rst
 create mode 100644 docs/references/api/resource_representation.rst
 create mode 100644 docs/references/api/schemas.rst
 create mode 100644 docs/references/api/stored_procedures.rst
 create mode 100644 docs/references/api/tables_views.rst
 create mode 100644 docs/references/api/url_grammar.rst

diff --git a/docs/_static/css/custom.css b/docs/_static/css/custom.css
index a1bd351fe..602ef678f 100644
--- a/docs/_static/css/custom.css
+++ b/docs/_static/css/custom.css
@@ -89,3 +89,7 @@ div.line-block {
 #integrations span.caption-text {
     display: none;
 }
+
+#api span.caption-text {
+    display: none;
+}
diff --git a/docs/index.rst b/docs/index.rst
index a90ece340..09529b4b5 100644
--- a/docs/index.rst
+++ b/docs/index.rst
@@ -125,6 +125,13 @@ Technical references for PostgREST's functionality.
    :name: references
    :maxdepth: 1
 
+   references/auth.rst
+   references/api.rst
+   references/transactions.rst
+   references/connection_pool.rst
+   references/schema_cache.rst
+   references/errors.rst
+   references/configuration.rst
    references/*
 
 Explanations
diff --git a/docs/references/admin.rst b/docs/references/admin.rst
index 31f86599b..ed83e8c9d 100644
--- a/docs/references/admin.rst
+++ b/docs/references/admin.rst
@@ -89,6 +89,85 @@ When debugging a problem it's important to verify the PostgREST version. Look fo
 
   Server: postgrest/11.0.1
 
+.. _explain_plan:
+
+Execution plan
+--------------
+
+You can get the `EXPLAIN execution plan <https://www.postgresql.org/docs/current/sql-explain.html>`_ of a request by adding the ``Accept: application/vnd.pgrst.plan`` header.
+This is enabled by :ref:`db-plan-enabled` (false by default).
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /users?select=name&order=id HTTP/1.1
+    Accept: application/vnd.pgrst.plan
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/users?select=name&order=id" \
+      -H "Accept: application/vnd.pgrst.plan"
+
+.. code-block:: psql
+
+  Aggregate  (cost=73.65..73.68 rows=1 width=112)
+    ->  Index Scan using users_pkey on users  (cost=0.15..60.90 rows=850 width=36)
+
+The output of the plan is generated in ``text`` format by default but you can change it to JSON by using the ``+json`` suffix.
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /users?select=name&order=id HTTP/1.1
+    Accept: application/vnd.pgrst.plan+json
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/users?select=name&order=id" \
+      -H "Accept: application/vnd.pgrst.plan+json"
+
+.. code-block:: json
+
+  [
+    {
+      "Plan": {
+        "Node Type": "Aggregate",
+        "Strategy": "Plain",
+        "Partial Mode": "Simple",
+        "Parallel Aware": false,
+        "Async Capable": false,
+        "Startup Cost": 73.65,
+        "Total Cost": 73.68,
+        "Plan Rows": 1,
+        "Plan Width": 112,
+        "Plans": [
+          {
+            "Node Type": "Index Scan",
+            "Parent Relationship": "Outer",
+            "Parallel Aware": false,
+            "Async Capable": false,
+            "Scan Direction": "Forward",
+            "Index Name": "users_pkey",
+            "Relation Name": "users",
+            "Alias": "users",
+            "Startup Cost": 0.15,
+            "Total Cost": 60.90,
+            "Plan Rows": 850,
+            "Plan Width": 36
+          }
+        ]
+      }
+    }
+  ]
+
+By default the plan is assumed to generate the JSON representation of a resource(``application/json``), but you can obtain the plan for the :ref:`different representations that PostgREST supports <res_format>` by adding them to the ``for`` parameter. For instance, to obtain the plan for a ``text/xml``, you would use ``Accept: application/vnd.pgrst.plan; for="text/xml``.
+
+The other available parameters are ``analyze``, ``verbose``, ``settings``, ``buffers`` and ``wal``, which correspond to the `EXPLAIN command options <https://www.postgresql.org/docs/current/sql-explain.html>`_. To use the ``analyze`` and ``wal`` parameters for example, you would add them like ``Accept: application/vnd.pgrst.plan; options=analyze|wal``.
+
+Note that akin to the EXPLAIN command, the changes will be committed when using the ``analyze`` option. To avoid this, you can use the :ref:`db-tx-end` and the ``Prefer: tx=rollback`` header.
+
 .. _health_check:
 
 Health Check
diff --git a/docs/references/api.rst b/docs/references/api.rst
index 0dd517fc2..b83d24b94 100644
--- a/docs/references/api.rst
+++ b/docs/references/api.rst
@@ -3,2861 +3,16 @@
 API
 ###
 
-.. role:: sql(code)
-   :language: sql
-
-.. _tables_views:
-
-Tables and Views
-================
-
-All views and tables in the exposed schema and accessible by the active database role for a request are available for querying. They are exposed in one-level deep routes. For instance the full contents of a table `people` is returned at
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /people HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/people"
-
-There are no deeply/nested/routes. Each route provides OPTIONS, GET, HEAD, POST, PATCH, and DELETE verbs depending entirely on database permissions.
-
-.. note::
-
-  Why not provide nested routes? Many APIs allow nesting to retrieve related information, such as :code:`/films/1/director`. We offer a more flexible mechanism (inspired by GraphQL) to embed related information. It can handle one-to-many and many-to-many relationships. This is covered in the section about :ref:`resource_embedding`.
-
-.. _h_filter:
-
-Horizontal Filtering (Rows)
----------------------------
-
-You can filter result rows by adding conditions on columns. For instance, to return people aged under 13 years old:
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /people?age=lt.13 HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/people?age=lt.13"
-
-You can evaluate multiple conditions on columns by adding more query string parameters. For instance, to return people who are 18 or older **and** are students:
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /people?age=gte.18&student=is.true HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/people?age=gte.18&student=is.true"
-
-.. _operators:
-
-Operators
-~~~~~~~~~
-
-These operators are available:
-
-============  ========================  ==================================================================================
-Abbreviation  In PostgreSQL             Meaning
-============  ========================  ==================================================================================
-eq            :code:`=`                 equals
-gt            :code:`>`                 greater than
-gte           :code:`>=`                greater than or equal
-lt            :code:`<`                 less than
-lte           :code:`<=`                less than or equal
-neq           :code:`<>` or :code:`!=`  not equal
-like          :code:`LIKE`              LIKE operator (to avoid `URL encoding <https://en.wikipedia.org/wiki/Percent-encoding>`_ you can use ``*`` as an alias of the percent sign ``%`` for the pattern)
-ilike         :code:`ILIKE`             ILIKE operator (to avoid `URL encoding <https://en.wikipedia.org/wiki/Percent-encoding>`_ you can use ``*`` as an alias of the percent sign ``%`` for the pattern)
-match         :code:`~`                 ~ operator, see :ref:`pattern_matching`
-imatch        :code:`~*`                ~* operator, see :ref:`pattern_matching`
-in            :code:`IN`                one of a list of values, e.g. :code:`?a=in.(1,2,3)`
-                                        – also supports commas in quoted strings like
-                                        :code:`?a=in.("hi,there","yes,you")`
-is            :code:`IS`                checking for exact equality (null,true,false,unknown)
-fts           :code:`@@`                :ref:`fts` using to_tsquery
-plfts         :code:`@@`                :ref:`fts` using plainto_tsquery
-phfts         :code:`@@`                :ref:`fts` using phraseto_tsquery
-wfts          :code:`@@`                :ref:`fts` using websearch_to_tsquery
-cs            :code:`@>`                contains e.g. :code:`?tags=cs.{example, new}`
-cd            :code:`<@`                contained in e.g. :code:`?values=cd.{1,2,3}`
-ov            :code:`&&`                overlap (have points in common), e.g. :code:`?period=ov.[2017-01-01,2017-06-30]` –
-                                        also supports array types, use curly braces instead of square brackets e.g.
-                                        :code: `?arr=ov.{1,3}`
-sl            :code:`<<`                strictly left of, e.g. :code:`?range=sl.(1,10)`
-sr            :code:`>>`                strictly right of
-nxr           :code:`&<`                does not extend to the right of, e.g. :code:`?range=nxr.(1,10)`
-nxl           :code:`&>`                does not extend to the left of
-adj           :code:`-|-`               is adjacent to, e.g. :code:`?range=adj.(1,10)`
-not           :code:`NOT`               negates another operator, see :ref:`logical_operators`
-or            :code:`OR`                logical :code:`OR`, see :ref:`logical_operators`
-and           :code:`AND`               logical :code:`AND`, see :ref:`logical_operators`
-============  ========================  ==================================================================================
-
-For more complicated filters you will have to create a new view in the database, or use a stored procedure. For instance, here's a view to show "today's stories" including possibly older pinned stories:
-
-.. code-block:: postgresql
-
-  CREATE VIEW fresh_stories AS
-  SELECT *
-    FROM stories
-   WHERE pinned = true
-      OR published > now() - interval '1 day'
-  ORDER BY pinned DESC, published DESC;
-
-The view will provide a new endpoint:
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /fresh_stories HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/fresh_stories"
-
-.. _logical_operators:
-
-Logical operators
-~~~~~~~~~~~~~~~~~
-
-Multiple conditions on columns are evaluated using ``AND`` by default, but you can combine them using ``OR`` with the ``or`` operator. For example, to return people under 18 **or** over 21:
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /people?or=(age.lt.18,age.gt.21) HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/people?or=(age.lt.18,age.gt.21)"
-
-To **negate** any operator, you can prefix it with :code:`not` like :code:`?a=not.eq.2` or :code:`?not.and=(a.gte.0,a.lte.100)` .
-
-You can also apply complex logic to the conditions:
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /people?grade=gte.90&student=is.true&or=(age.eq.14,not.and(age.gte.11,age.lte.17)) HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/people?grade=gte.90&student=is.true&or=(age.eq.14,not.and(age.gte.11,age.lte.17))"
-
-.. _pattern_matching:
-
-Pattern Matching
-~~~~~~~~~~~~~~~~
-
-The pattern-matching operators (:code:`like`, :code:`ilike`, :code:`match`, :code:`imatch`) exist to support filtering data using patterns instead of concrete strings, as described in the `PostgreSQL docs <https://www.postgresql.org/docs/current/functions-matching.html>`__.
-
-To ensure best performance on larger data sets, an `appropriate index <https://www.postgresql.org/docs/current/pgtrgm.html#id-1.11.7.44.8>`__ should be used and even then, it depends on the pattern value and actual data statistics whether an existing index will be used by the query planner or not.
-
-.. _fts:
-
-Full-Text Search
-~~~~~~~~~~~~~~~~
-
-The :code:`fts` filter mentioned above has a number of options to support flexible textual queries, namely the choice of plain vs phrase search and the language used for stemming. Suppose that :code:`tsearch` is a table with column :code:`my_tsv`, of type `tsvector <https://www.postgresql.org/docs/current/datatype-textsearch.html>`_. The following examples illustrate the possibilities.
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /tsearch?my_tsv=fts(french).amusant HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/tsearch?my_tsv=fts(french).amusant"
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /tsearch?my_tsv=plfts.The%20Fat%20Cats HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/tsearch?my_tsv=plfts.The%20Fat%20Cats"
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /tsearch?my_tsv=not.phfts(english).The%20Fat%20Cats HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/tsearch?my_tsv=not.phfts(english).The%20Fat%20Cats"
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /tsearch?my_tsv=not.wfts(french).amusant HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/tsearch?my_tsv=not.wfts(french).amusant"
-
-Using `websearch_to_tsquery` requires PostgreSQL of version at least 11.0 and will raise an error in earlier versions of the database.
-
-.. _v_filter:
-
-Vertical Filtering (Columns)
-----------------------------
-
-When certain columns are wide (such as those holding binary data), it is more efficient for the server to withhold them in a response. The client can specify which columns are required using the :sql:`select` parameter.
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /people?select=first_name,age HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/people?select=first_name,age"
-
-.. code-block:: json
-
-  [
-    {"first_name": "John", "age": 30},
-    {"first_name": "Jane", "age": 20}
-  ]
-
-The default is :sql:`*`, meaning all columns. This value will become more important below in :ref:`resource_embedding`.
-
-Renaming Columns
-~~~~~~~~~~~~~~~~
-
-You can rename the columns by prefixing them with an alias followed by the colon ``:`` operator.
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /people?select=fullName:full_name,birthDate:birth_date HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/people?select=fullName:full_name,birthDate:birth_date"
-
-.. code-block:: json
-
-  [
-    {"fullName": "John Doe", "birthDate": "04/25/1988"},
-    {"fullName": "Jane Doe", "birthDate": "01/12/1998"}
-  ]
-
-.. _casting_columns:
-
-Casting Columns
-~~~~~~~~~~~~~~~
-
-Casting the columns is possible by suffixing them with the double colon ``::`` plus the desired type.
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /people?select=full_name,salary::text HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/people?select=full_name,salary::text"
-
-.. code-block:: json
-
-  [
-    {"full_name": "John Doe", "salary": "90000.00"},
-    {"full_name": "Jane Doe", "salary": "120000.00"}
-  ]
-
-.. _json_columns:
-
-JSON Columns
-------------
-
-You can specify a path for a ``json`` or ``jsonb`` column using the arrow operators(``->`` or ``->>``) as per the `PostgreSQL docs <https://www.postgresql.org/docs/current/functions-json.html>`__.
-
-.. code-block:: postgres
-
-  CREATE TABLE people (
-    id int,
-    json_data json
-  );
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /people?select=id,json_data->>blood_type,json_data->phones HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/people?select=id,json_data->>blood_type,json_data->phones"
-
-.. code-block:: json
-
-  [
-    { "id": 1, "blood_type": "A-", "phones": [{"country_code": "61", "number": "917-929-5745"}] },
-    { "id": 2, "blood_type": "O+", "phones": [{"country_code": "43", "number": "512-446-4988"}, {"country_code": "43", "number": "213-891-5979"}] }
-  ]
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /people?select=id,json_data->phones->0->>number HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/people?select=id,json_data->phones->0->>number"
-
-.. code-block:: json
-
-  [
-    { "id": 1, "number": "917-929-5745"},
-    { "id": 2, "number": "512-446-4988"}
-  ]
-
-This also works with filters:
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /people?select=id,json_data->blood_type&json_data->>blood_type=eq.A- HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/people?select=id,json_data->blood_type&json_data->>blood_type=eq.A-"
-
-.. code-block:: json
-
-  [
-    { "id": 1, "blood_type": "A-" },
-    { "id": 3, "blood_type": "A-" },
-    { "id": 7, "blood_type": "A-" }
-  ]
-
-Note that ``->>`` is used to compare ``blood_type`` as ``text``. To compare with an integer value use ``->``:
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /people?select=id,json_data->age&json_data->age=gt.20 HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/people?select=id,json_data->age&json_data->age=gt.20"
-
-.. code-block:: json
-
-  [
-    { "id": 11, "age": 25 },
-    { "id": 12, "age": 30 },
-    { "id": 15, "age": 35 }
-  ]
-.. _composite_array_columns:
-
-Composite / Array Columns
--------------------------
-
-The arrow operators(``->``, ``->>``) can also be used for accessing composite fields and array elements.
-
-.. code-block:: postgres
-
-  CREATE TYPE coordinates (
-    lat decimal(8,6),
-    long decimal(9,6)
-  );
-
-  CREATE TABLE countries (
-    id int,
-    location coordinates,
-    languages text[]
-  );
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /countries?select=id,location->>lat,location->>long,primary_language:languages->0&location->lat=gte.19 HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/countries?select=id,location->>lat,location->>long,primary_language:languages->0&location->lat=gte.19"
-
-.. code-block:: json
-
-  [
-    {
-      "id": 5,
-      "lat": "19.741755",
-      "long": "-155.844437",
-      "primary_language": "en"
-    }
-  ]
-
-.. important::
-
-  When using the ``->`` and ``->>`` operators, PostgREST uses a query like ``to_jsonb(<col>)->'field'``. To make filtering and ordering on those nested fields use an index, the index needs to be created on the same expression, including the ``to_jsonb(...)`` call:
-
-  .. code-block:: postgres
-
-    CREATE INDEX ON mytable ((to_jsonb(data) -> 'identification' ->> 'registration_number'));
-
-.. _computed_cols:
-
-Computed / Virtual Columns
---------------------------
-
-Filters may be applied to computed columns(**a.k.a. virtual columns**) as well as actual table/view columns, even though the computed columns will not appear in the output. For example, to search first and last names at once we can create a computed column that will not appear in the output but can be used in a filter:
-
-.. code-block:: postgres
-
-  CREATE TABLE people (
-    fname text,
-    lname text
-  );
-
-  CREATE FUNCTION full_name(people) RETURNS text AS $$
-    SELECT $1.fname || ' ' || $1.lname;
-  $$ LANGUAGE SQL;
-
-  -- (optional) add an index to speed up anticipated query
-  CREATE INDEX people_full_name_idx ON people
-    USING GIN (to_tsvector('english', full_name(people)));
-
-A full-text search on the computed column:
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /people?full_name=fts.Beckett HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/people?full_name=fts.Beckett"
-
-As mentioned, computed columns do not appear in the output by default. However you can include them by listing them in the vertical filtering :code:`select` parameter:
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /people?select=*,full_name HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/people?select=*,full_name"
-
-.. important::
-
-  Computed columns must be created in the :ref:`exposed schema <db-schemas>` or in a schema in the :ref:`extra search path <db-extra-search-path>` to be used in this way. When placing the computed column in the :ref:`exposed schema <db-schemas>` you can use an **unnamed** argument, as in the example above, to prevent it from being exposed as an :ref:`RPC <s_procs>` under ``/rpc``.
-
-Unicode support
----------------
-
-PostgREST supports unicode in schemas, tables, columns and values. To access a table with unicode name, use percent encoding.
-
-To request this:
-
-.. code-block:: http
-
-  GET /موارد HTTP/1.1
-
-Do this:
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /%D9%85%D9%88%D8%A7%D8%B1%D8%AF HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/%D9%85%D9%88%D8%A7%D8%B1%D8%AF"
-
-.. _tabs-cols-w-spaces:
-
-Table / Columns with spaces
-~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-You can request table/columns with spaces in them by percent encoding the spaces with ``%20``:
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /Order%20Items?Unit%20Price=lt.200 HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/Order%20Items?Unit%20Price=lt.200"
-
-.. _reserved-chars:
-
-Reserved characters
-~~~~~~~~~~~~~~~~~~~
-
-If filters include PostgREST reserved characters(``,``, ``.``, ``:``, ``()``) you'll have to surround them in percent encoded double quotes ``%22`` for correct processing.
-
-Here ``Hebdon,John`` and ``Williams,Mary`` are values.
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /employees?name=in.(%22Hebdon,John%22,%22Williams,Mary%22) HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/employees?name=in.(%22Hebdon,John%22,%22Williams,Mary%22)"
-
-Here ``information.cpe`` is a column name.
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /vulnerabilities?%22information.cpe%22=like.*MS* HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/vulnerabilities?%22information.cpe%22=like.*MS*"
-
-If the value filtered by the ``in`` operator has a double quote (``"``), you can escape it using a backslash ``"\""``. A backslash itself can be used with a double backslash ``"\\"``.
-
-Here ``Quote:"`` and ``Backslash:\`` are percent-encoded values. Note that ``%5C`` is the percent-encoded backslash.
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /marks?name=in.(%22Quote:%5C%22%22,%22Backslash:%5C%5C%22) HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/marks?name=in.(%22Quote:%5C%22%22,%22Backslash:%5C%5C%22)"
-
-.. note::
-
-   Some HTTP libraries might encode URLs automatically(e.g. :code:`axios`). In these cases you should use double quotes
-   :code:`""` directly instead of :code:`%22`.
-
-.. _ordering:
-
-Ordering
---------
-
-The reserved word :sql:`order` reorders the response rows. It uses a comma-separated list of columns and directions:
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /people?order=age.desc,height.asc HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/people?order=age.desc,height.asc"
-
-If no direction is specified it defaults to ascending order:
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /people?order=age HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/people?order=age"
-
-If you care where nulls are sorted, add ``nullsfirst`` or ``nullslast``:
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /people?order=age.nullsfirst HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/people?order=age.nullsfirst"
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /people?order=age.desc.nullslast HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/people?order=age.desc.nullslast"
-
-You can also use :ref:`computed_cols` to order the results, even though the computed columns will not appear in the output. You can sort by nested fields of :ref:`json_columns` with the JSON operators.
-
-.. _limits:
-
-Limits and Pagination
----------------------
-
-PostgREST uses HTTP range headers to describe the size of results. Every response contains the current range and, if requested, the total number of results:
-
-.. code-block:: http
-
-  HTTP/1.1 200 OK
-  Range-Unit: items
-  Content-Range: 0-14/*
-
-Here items zero through fourteen are returned. This information is available in every response and can help you render pagination controls on the client. This is an RFC7233-compliant solution that keeps the response JSON cleaner.
-
-There are two ways to apply a limit and offset rows: through request headers or query parameters. When using headers you specify the range of rows desired. This request gets the first twenty people.
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /people HTTP/1.1
-    Range-Unit: items
-    Range: 0-19
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/people" -i \
-      -H "Range-Unit: items" \
-      -H "Range: 0-19"
-
-Note that the server may respond with fewer if unable to meet your request:
-
-.. code-block:: http
-
-  HTTP/1.1 200 OK
-  Range-Unit: items
-  Content-Range: 0-17/*
-
-You may also request open-ended ranges for an offset with no limit, e.g. :code:`Range: 10-`.
-
-The other way to request a limit or offset is with query parameters. For example
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /people?limit=15&offset=30 HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/people?limit=15&offset=30"
-
-This method is also useful for embedded resources, which we will cover in another section. The server always responds with range headers even if you use query parameters to limit the query.
-
-.. _exact_count:
-
-Exact Count
------------
-
-In order to obtain the total size of the table or view (such as when rendering the last page link in a pagination control), specify ``Prefer: count=exact`` as a request header:
-
-.. tabs::
-
-  .. code-tab:: http
-
-    HEAD /bigtable HTTP/1.1
-    Range-Unit: items
-    Range: 0-24
-    Prefer: count=exact
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/bigtable" -I \
-      -H "Range-Unit: items" \
-      -H "Range: 0-24" \
-      -H "Prefer: count=exact"
-
-Note that the larger the table the slower this query runs in the database. The server will respond with the selected range and total
-
-.. code-block:: http
-
-  HTTP/1.1 206 Partial Content
-  Range-Unit: items
-  Content-Range: 0-24/3573458
-
-.. _planned_count:
-
-Planned Count
--------------
-
-To avoid the shortcomings of :ref:`exact count <exact_count>`, PostgREST can leverage PostgreSQL statistics and get a fairly accurate and fast count.
-To do this, specify the ``Prefer: count=planned`` header.
-
-.. tabs::
-
-  .. code-tab:: http
-
-    HEAD /bigtable?limit=25 HTTP/1.1
-    Prefer: count=planned
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/bigtable?limit=25" -I \
-      -H "Prefer: count=planned"
-
-.. code-block:: http
-
-  HTTP/1.1 206 Partial Content
-  Content-Range: 0-24/3572000
-
-Note that the accuracy of this count depends on how up-to-date are the PostgreSQL statistics tables.
-For example in this case, to increase the accuracy of the count you can do ``ANALYZE bigtable``.
-See `ANALYZE <https://www.postgresql.org/docs/current/sql-analyze.html>`_ for more details.
-
-.. _estimated_count:
-
-Estimated Count
----------------
-
-When you are interested in the count, the relative error is important. If you have a :ref:`planned count <planned_count>` of 1000000 and the exact count is
-1001000, the error is small enough to be ignored. But with a planned count of 7, an exact count of 28 would be a huge misprediction.
-
-In general, when having smaller row-counts, the estimated count should be as close to the exact count as possible.
-
-To help with these cases, PostgREST can get the exact count up until a threshold and get the planned count when
-that threshold is surpassed. To use this behavior, you can specify the ``Prefer: count=estimated`` header. The **threshold** is
-defined by :ref:`db-max-rows`.
-
-Here's an example. Suppose we set ``db-max-rows=1000`` and ``smalltable`` has 321 rows, then we'll get the exact count:
-
-.. tabs::
-
-  .. code-tab:: http
-
-    HEAD /smalltable?limit=25 HTTP/1.1
-    Prefer: count=estimated
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/smalltable?limit=25" -I \
-      -H "Prefer: count=estimated"
-
-.. code-block:: http
-
-  HTTP/1.1 206 Partial Content
-  Content-Range: 0-24/321
-
-If we make a similar request on ``bigtable``, which has 3573458 rows, we would get the planned count:
-
-.. tabs::
-
-  .. code-tab:: http
-
-    HEAD /bigtable?limit=25 HTTP/1.1
-    Prefer: count=estimated
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/bigtable?limit=25" -I \
-      -H "Prefer: count=estimated"
-
-.. code-block:: http
-
-  HTTP/1.1 206 Partial Content
-  Content-Range: 0-24/3572000
-
-.. _res_format:
-
-Response Format
----------------
-
-PostgREST uses proper HTTP content negotiation (`RFC7231 <https://datatracker.ietf.org/doc/html/rfc7231#section-5.3>`_) to deliver the desired representation of a resource. That is to say the same API endpoint can respond in different formats like JSON or CSV depending on the client request.
-
-Use the Accept request header to specify the acceptable format (or formats) for the response:
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /people HTTP/1.1
-    Accept: application/json
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/people" \
-      -H "Accept: application/json"
-
-The current possibilities are:
-
-* ``*/*``
-* ``text/csv``
-* ``application/json``
-* ``application/openapi+json``
-* ``application/geo+json``
-
-and in the special case of a single-column select the following additional three formats;
-also see the section :ref:`scalar_return_formats`:
-
-* ``application/octet-stream``
-* ``text/plain``
-* ``text/xml``
-
-The server will default to JSON for API endpoints and OpenAPI on the root.
-
-.. _singular_plural:
-
-Singular or Plural
-------------------
-
-By default PostgREST returns all JSON results in an array, even when there is only one item. For example, requesting :code:`/items?id=eq.1` returns
-
-.. code:: json
-
-  [
-    { "id": 1 }
-  ]
-
-This can be inconvenient for client code. To return the first result as an object unenclosed by an array, specify :code:`vnd.pgrst.object` as part of the :code:`Accept` header
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /items?id=eq.1 HTTP/1.1
-    Accept: application/vnd.pgrst.object+json
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/items?id=eq.1" \
-      -H "Accept: application/vnd.pgrst.object+json"
-
-This returns
-
-.. code:: json
-
-  { "id": 1 }
-
-When a singular response is requested but no entries are found, the server responds with an error message and 406 Not Acceptable status code rather than the usual empty array and 200 status:
-
-.. code-block:: json
-
-  {
-    "message": "JSON object requested, multiple (or no) rows returned",
-    "details": "Results contain 0 rows, application/vnd.pgrst.object+json requires 1 row",
-    "hint": null,
-    "code": "PGRST505"
-  }
-
-.. note::
-
-  Many APIs distinguish plural and singular resources using a special nested URL convention e.g. `/stories` vs `/stories/1`. Why do we use `/stories?id=eq.1`? The answer is because a singular resource is (for us) a row determined by a primary key, and primary keys can be compound (meaning defined across more than one column). The more familiar nested urls consider only a degenerate case of simple and overwhelmingly numeric primary keys. These so-called artificial keys are often introduced automatically by Object Relational Mapping libraries.
-
-  Admittedly PostgREST could detect when there is an equality condition holding on all columns constituting the primary key and automatically convert to singular. However this could lead to a surprising change of format that breaks unwary client code just by filtering on an extra column. Instead we allow manually specifying singular vs plural to decouple that choice from the URL format.
-
-.. _resource_embedding:
-
-Resource Embedding
-==================
-
-In addition to providing RESTful routes for each table and view, PostgREST allows related resources to be included together in a single
-API call. This reduces the need for multiple API requests. The server uses **foreign keys** to determine which tables and views can be
-returned together. For example, consider a database of films and their awards:
-
-.. image:: ../_static/film.png
-
-.. important::
-
-  Whenever FOREIGN KEY constraints change in the database schema you must refresh PostgREST's schema cache for Resource Embedding to work properly. See the section :ref:`schema_reloading`.
-
-.. _many-to-one:
-
-Many-to-one relationships
--------------------------
-
-Since ``films`` has a **foreign key** referencing ``directors``, this establishes a many-to-one relationship between them. Because of this, we're able
-to request all the films and the director for each film.
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /films?select=title,directors(id,last_name) HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/films?select=title,directors(id,last_name)"
-
-.. code-block:: json
-
-  [
-    { "title": "Workers Leaving The Lumière Factory In Lyon",
-      "directors": {
-        "id": 2,
-        "last_name": "Lumière"
-      }
-    },
-    { "title": "The Dickson Experimental Sound Film",
-      "directors": {
-        "id": 1,
-        "last_name": "Dickson"
-      }
-    },
-    { "title": "The Haunted Castle",
-      "directors": {
-        "id": 3,
-        "last_name": "Méliès"
-      }
-    }
-  ]
-
-Note that the embedded ``directors`` is returned as a JSON object because of the "to-one" end.
-
-Since the table name is plural, we can be more accurate by making it singular with an alias.
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /films?select=title,director:directors(id,last_name) HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/films?select=title,director:directors(id,last_name)"
-
-.. code-block:: json
-
-  [
-    { "title": "Workers Leaving The Lumière Factory In Lyon",
-      "director": {
-        "id": 2,
-        "last_name": "Lumière"
-      }
-    },
-    ".."
-  ]
-
-.. _one-to-many:
-
-One-to-many relationships
--------------------------
-
-The inverse one-to-many relationship between ``directors`` and ``films`` is detected based on the **foreign key** reference. In this case, the embedded ``films`` are returned as a JSON array because of the "to-many" end.
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /directors?select=last_name,films(title) HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/directors?select=last_name,films(title)"
-
-.. code-block:: json
-
-  [
-    { "last_name": "Lumière",
-      "films": [
-        {"title": "Workers Leaving The Lumière Factory In Lyon"}
-      ]
-    },
-    { "last_name": "Dickson",
-      "films": [
-        {"title": "The Dickson Experimental Sound Film"}
-      ]
-    },
-    { "last_name": "Méliès",
-      "films": [
-        {"title": "The Haunted Castle"}
-      ]
-    }
-  ]
-
-.. _many-to-many:
-
-Many-to-many relationships
---------------------------
-
-Many-to-many relationships are detected based on the join table. The join table must contain foreign keys to other two tables
-and they must be part of its composite key.
-
-For the many-to-many relationship between ``films`` and ``actors``, the join table ``roles`` would be:
-
-.. code-block:: postgresql
-
-  create table roles(
-    film_id int references films(id)
-  , actor_id int references actors(id)
-  , primary key(film_id, actor_id)
-  );
-
-  -- the join table can also be detected if the composite key has additional columns
-
-  create table roles(
-    id int generated always as identity,
-  , film_id int references films(id)
-  , actor_id int references actors(id)
-  , primary key(id, film_id, actor_id)
-  );
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /actors?select=first_name,last_name,films(title) HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/actors?select=first_name,last_name,films(title)"
-
-.. code-block:: json
-
-  [
-    { "first_name": "Willem",
-      "last_name": "Dafoe",
-      "films": [
-        {"title": "The Lighthouse"}
-      ]
-    },
-    ".."
-  ]
-
-.. _one-to-one:
-
-One-to-one relationships
-------------------------
-
-one-to-one relationships are detected if there's an unique constraint on a foreign key.
-
-.. code-block:: postgresql
-
-  CREATE TABLE technical_specs(
-    film_id INT REFERENCES films UNIQUE,
-    runtime TIME,
-    camera TEXT,
-    sound TEXT
-  );
-
-Or if the foreign key is also a primary key.
-
-.. code-block:: postgresql
-
-  -- references Films using the primary key as a foreign key
-  CREATE TABLE technical_specs(
-    film_id INT PRIMARY KEY REFERENCES films,
-    runtime TIME,
-    camera TEXT,
-    sound TEXT
-  );
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /films?select=title,technical_specs(runtime) HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/films?select=title,technical_specs(runtime)"
-
-.. code-block:: json
-
-  [
-    {
-      "title": "Pulp Fiction",
-      "technical_specs": {"camera": "Arriflex 35-III"}
-    },
-    ".."
-  ]
-
-.. _computed_relationships:
-
-Computed relationships
-----------------------
-
-You can manually define relationships between resources. This is useful for database objects that can't define foreign keys, like `Foreign Data Wrappers <https://wiki.postgresql.org/wiki/Foreign_data_wrappers>`_.
-To do this, you can create functions similar to :ref:`computed_cols`.
-
-Assuming there's a foreign table ``premieres`` that we want to relate to ``films``.
-
-.. code-block:: postgres
-
-  create foreign table premieres (
-    id integer,
-    location text,
-    "date" date,
-    film_id integer
-  ) server import_csv options ( filename '/tmp/directors.csv', format 'csv');
-
-  create function film(premieres) returns setof films rows 1 as $$
-    select * from films where id = $1.film_id
-  $$ stable language sql;
-
-The above function defines a relationship between ``premieres`` (the parameter) and ``films`` (the return type) and since there's a ``rows 1``, this defines a many-to-one relationship.
-The name of the function ``film`` is arbitrary and can be used to do the embedding:
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /premieres?select=location,film(name) HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/premieres?select=location,film(name)"
-
-.. code-block:: json
-
-  [
-    {
-      "location": "Cannes Film Festival",
-      "film": {"name": "Pulp Fiction"}
-    },
-    ".."
-  ]
-
-Now let's define the opposite one-to-many relationship with another function.
-
-.. code-block:: postgres
-
-  create function premieres(films) returns setof premieres as $$
-    select * from premieres where film_id = $1.id
-  $$ stable language sql;
-
-Similarly, this function defines a relationship between the parameter ``films`` and the return type ``premieres``.
-In this case there's an implicit ``ROWS 1000`` defined by PostgreSQL(`search "result_rows" on this PostgreSQL doc <https://www.postgresql.org/docs/current/sql-createfunction.html>`_),
-we consider any value greater than 1 as "many" so this defines a one-to-many relationship.
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /films?select=name,premieres(name) HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/films?select=name,premieres(name)"
-
-.. code-block:: json
-
-  [
-    {
-      "name": "Pulp Ficiton",
-      "premieres": [{"location": "Cannes Festival"}]
-    },
-    ".."
-  ]
-
-Computed relationships also allow you to override the ones that are automatically detected by PostgREST.
-
-For example, to override the :ref:`many-to-one relationship <many-to-one>` between ``films`` and ``directors``.
-
-.. code-block:: postgres
-
-  create function directors(films) returns setof directors rows 1 as $$
-    select * from directors where id = $1.director_id
-  $$ stable language sql;
-
-Taking advantage of overloaded functions, you can use the same function name for different parameters and thus define relationships from other tables/views to ``directors``.
-
-.. code-block:: postgres
-
-  create function directors(film_schools) returns setof directors as $$
-    select * from directors where film_school_id = $1.id
-  $$ stable language sql;
-
-Computed relationships have good performance as their intended design follow the `Inlining conditions for table functions <https://wiki.postgresql.org/wiki/Inlining_of_SQL_functions#Inlining_conditions_for_table_functions>`_.
-
-.. warning::
-
-  - Always use ``SETOF`` when creating computed relationships. Functions can return a table without using ``SETOF``, but bear in mind that they will not be inlined.
-
-  - Make sure to correctly label the ``to-one`` part of the relationship. When using the ``ROWS 1`` estimation, PostgREST will expect a single row to be returned. If that is not the case, then it will unnest the embedding and return repeated values for the top level resource.
-
-.. _nested_embedding:
-
-Nested Embedding
-----------------
-
-If you want to embed through join tables but need more control on the intermediate resources, you can do nested embedding. For instance, you can request the Actors, their Roles and the Films for those Roles:
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /actors?select=roles(character,films(title,year)) HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/actors?select=roles(character,films(title,year))"
-
-.. _embed_filters:
-
-Embedded Filters
-----------------
-
-Embedded resources can be shaped similarly to their top-level counterparts. To do so, prefix the query parameters with the name of the embedded resource. For instance, to order the actors in each film:
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /films?select=*,actors(*)&actors.order=last_name,first_name HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/films?select=*,actors(*)&actors.order=last_name,first_name"
-
-This sorts the list of actors in each film but does *not* change the order of the films themselves. To filter the roles returned with each film:
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /films?select=*,roles(*)&roles.character=in.(Chico,Harpo,Groucho) HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/films?select=*,roles(*)&roles.character=in.(Chico,Harpo,Groucho)"
-
-Once again, this restricts the roles included to certain characters but does not filter the films in any way. Films without any of those characters would be included along with empty character lists.
-
-An ``or`` filter  can be used for a similar operation:
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /films?select=*,roles(*)&roles.or=(character.eq.Gummo,character.eq.Zeppo) HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/films?select=*,roles(*)&roles.or=(character.eq.Gummo,character.eq.Zeppo)"
-
-Limit and offset operations are possible:
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /films?select=*,actors(*)&actors.limit=10&actors.offset=2 HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/films?select=*,actors(*)&actors.limit=10&actors.offset=2"
-
-Embedded resources can be aliased and filters can be applied on these aliases:
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /films?select=*,90_comps:competitions(name),91_comps:competitions(name)&90_comps.year=eq.1990&91_comps.year=eq.1991 HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/films?select=*,90_comps:competitions(name),91_comps:competitions(name)&90_comps.year=eq.1990&91_comps.year=eq.1991"
-
-Filters can also be applied on nested embedded resources:
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /films?select=*,roles(*,actors(*))&roles.actors.order=last_name&roles.actors.first_name=like.*Tom* HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/films?select=*,roles(*,actors(*))&roles.actors.order=last_name&roles.actors.first_name=like.*Tom*"
-
-The result will show the nested actors named Tom and order them by last name. Aliases can also be used instead of the resource names to filter the nested tables.
-
-.. _embedding_top_level_filter:
-
-Embedding with Top-level Filtering
-----------------------------------
-
-By default, :ref:`embed_filters` don't change the top-level resource(``films``) rows at all:
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /films?select=title,actors(first_name,last_name)&actors.first_name=eq.Jehanne HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/films?select=title,actors(first_name,last_name)&actors.first_name=eq.Jehanne
-
-.. code-block:: json
-
-  [
-    {
-      "title": "Workers Leaving The Lumière Factory In Lyon",
-      "actors": []
-    },
-    {
-      "title": "The Dickson Experimental Sound Film",
-      "actors": []
-    },
-    {
-      "title": "The Haunted Castle",
-      "actors": [
-        {
-          "first_name": "Jehanne",
-          "last_name": "d'Alcy"
-        }
-      ]
-    }
-  ]
-
-In order to filter the top level rows you need to add ``!inner`` to the embedded resource. For instance, to get **only** the films that have an actor named ``Jehanne``:
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /films?select=title,actors!inner(first_name,last_name)&actors.first_name=eq.Jehanne HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/films?select=title,actors!inner(first_name,last_name)&actors.first_name=eq.Jehanne"
-
-.. code-block:: json
-
-  [
-    {
-      "title": "The Haunted Castle",
-      "actors": [
-        {
-          "first_name": "Jehanne",
-          "last_name": "d'Alcy"
-        }
-      ]
-    }
-  ]
-
-.. _embedding_partitioned_tables:
-
-Embedding Partitioned Tables
-----------------------------
-
-Embedding can also be done between `partitioned tables <https://www.postgresql.org/docs/current/ddl-partitioning.html>`_ and other tables.
-
-For example, let's create the ``box_office`` partitioned table that has the gross daily revenue of a film:
-
-.. code-block:: postgres
-
-  CREATE TABLE box_office (
-    bo_date DATE NOT NULL,
-    film_id INT REFERENCES test.films NOT NULL,
-    gross_revenue DECIMAL(12,2) NOT NULL,
-    PRIMARY KEY (bo_date, film_id)
-  ) PARTITION BY RANGE (bo_date);
-
-  -- Let's also create partitions for each month of 2021
-
-  CREATE TABLE box_office_2021_01 PARTITION OF test.box_office
-  FOR VALUES FROM ('2021-01-01') TO ('2021-01-31');
-
-  CREATE TABLE box_office_2021_02 PARTITION OF test.box_office
-  FOR VALUES FROM ('2021-02-01') TO ('2021-02-28');
-
-  -- and so until december 2021
-
-Since it contains the ``films_id`` foreign key, it is possible to embed ``box_office`` and ``films``:
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /box_office?select=bo_date,gross_revenue,films(title)&gross_revenue=gte.1000000 HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/box_office?select=bo_date,gross_revenue,films(title)&gross_revenue=gte.1000000"
-
-.. note::
-  * Embedding on partitions is not allowed because it leads to ambiguity errors (see :ref:`embed_disamb`) between them and their parent partitioned table(more details at `#1783(comment) <https://github.com/PostgREST/postgrest/issues/1783#issuecomment-959823827>`_). :ref:`custom_queries` can be used if this is needed.
-
-  * Partitioned tables can reference other tables since PostgreSQL 11 but can only be referenced from any other table since PostgreSQL 12.
-
-.. _embedding_views:
-
-Embedding Views
----------------
-
-PostgREST will infer the relationships of a view based on its source tables. Source tables are the ones referenced in the ``FROM`` and ``JOIN`` clauses of the view definition. The foreign keys of the relationships must be present in the top ``SELECT`` clause of the view for this to work.
-
-For instance, the following view has ``nominations``, ``films`` and ``competitions`` as source tables:
-
-.. code-block:: postgres
-
-  CREATE VIEW nominations_view AS
-    SELECT
-       films.title as film_title
-     , competitions.name as competition_name
-     , nominations.rank
-     , nominations.film_id as nominations_film_id
-     , films.id as film_id
-    FROM nominations
-    JOIN films ON films.id = nominations.film_id
-    JOIN competitions ON competitions.id = nominations.competition_id;
-
-Since this view contains ``nominations.film_id``, which has a **foreign key** relationship to ``films``, then we can embed the ``films`` table. Similarly, because the view contains ``films.id``, then we can also embed the ``roles`` and the ``actors`` tables (the last one in a many-to-many relationship):
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /nominations_view?select=film_title,films(language),roles(character),actors(last_name,first_name)&rank=eq.5 HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/nominations_view?select=film_title,films(language),roles(character),actors(last_name,first_name)&rank=eq.5"
-
-It's also possible to embed `Materialized Views <https://www.postgresql.org/docs/current/rules-materializedviews.html>`_.
-
-.. important::
-
-  - It's not guaranteed that all kinds of views will be embeddable. In particular, views that contain UNIONs will not be made embeddable.
-
-    + Why? PostgREST detects source table foreign keys in the view by querying and parsing `pg_rewrite <https://www.postgresql.org/docs/current/catalog-pg-rewrite.html>`_.
-      This may fail depending on the complexity of the view.
-    + As a workaround, you can use :ref:`computed_relationships` to define manual relationships for views.
-
-  - If view definitions change you must refresh PostgREST's schema cache for this to work properly. See the section :ref:`schema_reloading`.
-
-.. _embedding_view_chains:
-
-Embedding Chains of Views
--------------------------
-
-Views can also depend on other views, which in turn depend on the actual source table. For PostgREST to pick up those chains recursively to any depth, all the views must be in the search path, so either in the exposed schema (:ref:`db-schemas`) or in one of the schemas set in :ref:`db-extra-search-path`. This does not apply to the source table, which could be in a private schema as well. See :ref:`schema_isolation` for more details.
-
-.. _s_proc_embed:
-
-Embedding on Stored Procedures
-------------------------------
-
-If you have a :ref:`Stored Procedure <s_procs>` that returns a table type, you can embed its related resources.
-
-Here's a sample function (notice the ``RETURNS SETOF films``).
-
-.. code-block:: plpgsql
-
-  CREATE FUNCTION getallfilms() RETURNS SETOF films AS $$
-    SELECT * FROM films;
-  $$ LANGUAGE SQL IMMUTABLE;
-
-A request with ``directors`` embedded:
-
-.. tabs::
-
-  .. code-tab:: http
-
-     GET /rpc/getallfilms?select=title,directors(id,last_name)&title=like.*Workers* HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-     curl "http://localhost:3000/rpc/getallfilms?select=title,directors(id,last_name)&title=like.*Workers*"
-
-.. code-block:: json
-
-   [
-     { "title": "Workers Leaving The Lumière Factory In Lyon",
-       "directors": {
-         "id": 2,
-         "last_name": "Lumière"
-       }
-     }
-   ]
-
-.. _mutation_embed:
-
-Embedding after Insertions/Updates/Deletions
---------------------------------------------
-
-You can embed related resources after doing :ref:`insert`, :ref:`update` or :ref:`delete`.
-
-Say you want to insert a **film** and then get some of its attributes plus embed its **director**.
-
-.. tabs::
-
-  .. code-tab:: http
-
-     POST /films?select=title,year,director:directors(first_name,last_name) HTTP/1.1
-     Prefer: return=representation
-
-     {
-      "id": 100,
-      "director_id": 40,
-      "title": "127 hours",
-      "year": 2010,
-      "rating": 7.6,
-      "language": "english"
-     }
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/films?select=title,year,director:directors(first_name,last_name)" \
-      -H "Prefer: return=representation" \
-      -d @- << EOF
-      {
-        "id": 100,
-        "director_id": 40,
-        "title": "127 hours",
-        "year": 2010,
-        "rating": 7.6,
-        "language": "english"
-      }
-    EOF
-
-Response:
-
-.. code-block:: json
-
-   {
-    "title": "127 hours",
-    "year": 2010,
-    "director": {
-      "first_name": "Danny",
-      "last_name": "Boyle"
-    }
-   }
-
-.. _embed_disamb:
-
-Embedding Disambiguation
-------------------------
-
-For doing resource embedding, PostgREST infers the relationship between two tables based on a foreign key between them.
-However, in cases where there's more than one foreign key between two tables, it's not possible to infer the relationship unambiguously
-by just specifying the tables names.
-
-.. _target_disamb:
-
-Target Disambiguation
-~~~~~~~~~~~~~~~~~~~~~
-
-For example, suppose you have the following ``orders`` and ``addresses`` tables:
-
-.. image:: ../_static/orders.png
-
-And you try to embed ``orders`` with ``addresses`` (this is the **target**):
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /orders?select=*,addresses(*) HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/orders?select=*,addresses(*)" -i
-
-Since the ``orders`` table has two foreign keys to the ``addresses`` table — an order has a billing address and a shipping address —
-the request is ambiguous and PostgREST will respond with an error:
-
-.. code-block:: http
-
-   HTTP/1.1 300 Multiple Choices
-
-   {..}
-
-If this happens, you need to disambiguate the request by adding precision to the **target**.
-Instead of the **table name**, you can specify the **foreign key constraint name** or the **column name** that is part of the foreign key.
-
-Let's try first with the **foreign key constraint name**. To make it clearer we can name it:
-
-.. code-block:: postgresql
-
-   ALTER TABLE orders
-      ADD CONSTRAINT billing_address  foreign key (billing_address_id) references addresses(id),
-      ADD CONSTRAINT shipping_address foreign key (shipping_address_id) references addresses(id);
-
-   -- Or if the constraints names were already generated by PostgreSQL we can rename them
-   -- ALTER TABLE orders
-   --   RENAME CONSTRAINT orders_billing_address_id_fkey  TO billing_address,
-   --   RENAME CONSTRAINT orders_shipping_address_id_fkey TO shipping_address;
-
-Now we can unambiguously embed the billing address by specifying the ``billing_address`` foreign key constraint as the **target**.
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /orders?select=name,billing_address(name) HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/orders?select=name,billing_address(name)"
-
-.. code-block:: json
-
-   [
-    {
-     "name": "Personal Water Filter",
-     "billing_address": {
-       "name": "32 Glenlake Dr.Dearborn, MI 48124"
-     }
-    }
-   ]
-
-Alternatively, you can specify the **column name** of the foreign key constraint as the **target**. This can be aliased to make
-the result more clear.
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /orders?select=name,billing_address:billing_address_id(name) HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/orders?select=name,billing_address:billing_address_id(name)"
-
-.. code-block:: json
-
-   [
-    {
-     "name": "Personal Water Filter",
-     "billing_address": {
-      "name": "32 Glenlake Dr.Dearborn, MI 48124"
-     }
-    }
-   ]
-
-.. _hint_disamb:
-
-Hint Disambiguation
-~~~~~~~~~~~~~~~~~~~
-
-If specifying the **target** is not enough for unambiguous embedding, you can add a **hint**. For example, let's assume we create
-two views of ``addresses``: ``central_addresses`` and ``eastern_addresses``.
-
-PostgREST cannot detect a view as an embedded resource by using a column name or foreign key name as targets, that is why we need to use the view name ``central_addresses`` instead. But, still, this is not enough for an unambiguous embed.
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /orders?select=*,central_addresses(*) HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/orders?select=*,central_addresses(*)" -i
-
-.. code-block:: http
-
-  HTTP/1.1 300 Multiple Choices
-
-For solving this case, in addition to the **target**, we can add a **hint**.
-Here, we still specify ``central_addresses`` as the **target** and use the ``billing_address`` foreign key as the **hint**:
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /orders?select=*,central_addresses!billing_address(*) HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl 'http://localhost:3000/orders?select=*,central_addresses!billing_address(*)' -i
-
-.. code-block:: http
-
-  HTTP/1.1 200 OK
-
-  [ ... ]
-
-Similarly to the **target**, the **hint** can be a **table name**, **foreign key constraint name** or **column name**.
-
-Hints also work alongside ``!inner`` if a top level filtering is needed. From the above example:
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /orders?select=*,central_addresses!billing_address!inner(*)&central_addresses.code=AB1000 HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/orders?select=*,central_addresses!billing_address!inner(*)&central_addresses.code=AB1000"
-
-.. note::
-
-  If the relationship is so complex that hint disambiguation does not solve it, you can use :ref:`computed_relationships`.
-
-.. _insert:
-
-Insertions
-==========
-
-All tables and `auto-updatable views <https://www.postgresql.org/docs/current/sql-createview.html#SQL-CREATEVIEW-UPDATABLE-VIEWS>`_ can be modified through the API, subject to permissions of the requester's database role.
-
-To create a row in a database table post a JSON object whose keys are the names of the columns you would like to create. Missing properties will be set to default values when applicable.
-
-.. tabs::
-
-  .. code-tab:: http
-
-    POST /table_name HTTP/1.1
-
-    { "col1": "value1", "col2": "value2" }
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/table_name" \
-      -X POST -H "Content-Type: application/json" \
-      -d '{ "col1": "value1", "col2": "value2" }'
-
-If the table has a primary key, the response can contain a :code:`Location` header describing where to find the new object by including the header :code:`Prefer: return=headers-only` in the request. Make sure that the table is not write-only, otherwise constructing the :code:`Location` header will cause a permissions error.
-
-On the other end of the spectrum you can get the full created object back in the response to your request by including the header :code:`Prefer: return=representation`. That way you won't have to make another HTTP call to discover properties that may have been filled in on the server side. You can also apply the standard :ref:`v_filter` to these results.
-
-URL encoded payloads can be posted with ``Content-Type: application/x-www-form-urlencoded``.
-
-.. tabs::
-
-  .. code-tab:: http
-
-    POST /people HTTP/1.1
-    Content-Type: application/x-www-form-urlencoded
-
-    name=John+Doe&age=50&weight=80
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/people" \
-      -X POST -H "Content-Type: application/x-www-form-urlencoded" \
-      -d "name=John+Doe&age=50&weight=80"
-
-.. note::
-
-  When inserting a row you must post a JSON object, not quoted JSON.
-
-  .. code::
-
-    Yes
-    { "a": 1, "b": 2 }
-
-    No
-    "{ \"a\": 1, \"b\": 2 }"
-
-  Some JavaScript libraries will post the data incorrectly if you're not careful. For best results try one of the :ref:`clientside_libraries` built for PostgREST.
-
-.. important::
-
-  It's recommended that you `use triggers instead of rules <https://wiki.postgresql.org/wiki/Don%27t_Do_This#Don.27t_use_rules>`_.
-  Insertion on views with complex `rules <https://www.postgresql.org/docs/current/sql-createrule.html>`_ might not work out of the box with PostgREST due to its usage of CTEs.
-  If you want to keep using rules, a workaround is to wrap the view insertion in a stored procedure and call it through the :ref:`s_procs` interface.
-  For more details, see this `github issue <https://github.com/PostgREST/postgrest/issues/1283>`_.
-
-.. _bulk_insert:
-
-Bulk Insert
------------
-
-Bulk insert works exactly like single row insert except that you provide either a JSON array of objects having uniform keys, or lines in CSV format. This not only minimizes the HTTP requests required but uses a single INSERT statement on the back-end for efficiency.
-
-To bulk insert CSV simply post to a table route with :code:`Content-Type: text/csv` and include the names of the columns as the first row. For instance
-
-.. tabs::
-
-  .. code-tab:: http
-
-    POST /people HTTP/1.1
-    Content-Type: text/csv
-
-    name,age,height
-    J Doe,62,70
-    Jonas,10,55
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/people" \
-      -X POST -H "Content-Type: text/csv" \
-      --data-binary @- << EOF
-    name,age,height
-    J Doe,62,70
-    Jonas,10,55
-    EOF
-
-An empty field (:code:`,,`) is coerced to an empty string and the reserved word :code:`NULL` is mapped to the SQL null value. Note that there should be no spaces between the column names and commas.
-
-To bulk insert JSON post an array of objects having all-matching keys
-
-.. tabs::
-
-  .. code-tab:: http
-
-    POST /people HTTP/1.1
-    Content-Type: application/json
-
-    [
-      { "name": "J Doe", "age": 62, "height": 70 },
-      { "name": "Janus", "age": 10, "height": 55 }
-    ]
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/people" \
-      -X POST -H "Content-Type: application/json" \
-      -d @- << EOF
-      [
-        { "name": "J Doe", "age": 62, "height": 70 },
-        { "name": "Janus", "age": 10, "height": 55 }
-      ]
-    EOF
-
-.. _specify_columns:
-
-Specifying Columns
-------------------
-
-By using the :code:`columns` query parameter it's possible to specify the payload keys that will be inserted and ignore the rest of the payload.
-
-.. tabs::
-
-  .. code-tab:: http
-
-     POST /datasets?columns=source,publication_date,figure HTTP/1.1
-     Content-Type: application/json
-
-     {
-       "source": "Natural Disaster Prevention and Control",
-       "publication_date": "2015-09-11",
-       "figure": 1100,
-       "location": "...",
-       "comment": "...",
-       "extra": "...",
-       "stuff": "..."
-     }
-
-  .. code-tab:: bash Curl
-
-     curl "http://localhost:3000/datasets?columns=source,publication_date,figure" \
-       -X POST -H "Content-Type: application/json" \
-       -d @- << EOF
-       {
-         "source": "Natural Disaster Prevention and Control",
-         "publication_date": "2015-09-11",
-         "figure": 1100,
-         "location": "...",
-         "comment": "...",
-         "extra": "...",
-         "stuff": "..."
-       }
-     EOF
-
-In this case, only **source**, **publication_date** and **figure** will be inserted. The rest of the JSON keys will be ignored.
-
-Using this also has the side-effect of being more efficient for :ref:`bulk_insert` since PostgREST will not process the JSON and
-it'll send it directly to PostgreSQL.
-
-.. _update:
-
-Updates
-=======
-
-To update a row or rows in a table, use the PATCH verb. Use :ref:`h_filter` to specify which record(s) to update. Here is an example query setting the :code:`category` column to child for all people below a certain age.
-
-.. tabs::
-
-  .. code-tab:: http
-
-    PATCH /people?age=lt.13 HTTP/1.1
-
-    { "category": "child" }
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/people?age=lt.13" \
-      -X PATCH -H "Content-Type: application/json" \
-      -d '{ "category": "child" }'
-
-Updates also support :code:`Prefer: return=representation` plus :ref:`v_filter`.
-
-.. warning::
-
-  Beware of accidentally updating every row in a table. To learn to prevent that see :ref:`block_fulltable`.
-
-.. _upsert:
-
-Upsert
-======
-
-You can make an upsert with :code:`POST` and the :code:`Prefer: resolution=merge-duplicates` header:
-
-.. tabs::
-
-  .. code-tab:: http
-
-    POST /employees HTTP/1.1
-    Prefer: resolution=merge-duplicates
-
-    [
-      { "id": 1, "name": "Old employee 1", "salary": 30000 },
-      { "id": 2, "name": "Old employee 2", "salary": 42000 },
-      { "id": 3, "name": "New employee 3", "salary": 50000 }
-    ]
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/employees" \
-      -X POST -H "Content-Type: application/json" \
-      -H "Prefer: resolution=merge-duplicates" \
-      -d @- << EOF
-      [
-        { "id": 1, "name": "Old employee 1", "salary": 30000 },
-        { "id": 2, "name": "Old employee 2", "salary": 42000 },
-        { "id": 3, "name": "New employee 3", "salary": 50000 }
-      ]
-    EOF
-
-By default, upsert operates based on the primary key columns, you must specify all of them. You can also choose to ignore the duplicates with :code:`Prefer: resolution=ignore-duplicates`. This works best when the primary key is natural, but it's also possible to use it if the primary key is surrogate (example: "id serial primary key"). For more details read `this issue <https://github.com/PostgREST/postgrest/issues/1118>`_.
-
-.. important::
-  After creating a table or changing its primary key, you must refresh PostgREST schema cache for upsert to work properly. To learn how to refresh the cache see :ref:`schema_reloading`.
-
-.. _on_conflict:
-
-On Conflict
------------
-
-By specifying the ``on_conflict`` query parameter, you can make upsert work on a column(s) that has a UNIQUE constraint.
-
-.. tabs::
-
-  .. code-tab:: http
-
-    POST /employees?on_conflict=name HTTP/1.1
-    Prefer: resolution=merge-duplicates
-
-    [
-      { "name": "Old employee 1", "salary": 40000 },
-      { "name": "Old employee 2", "salary": 52000 },
-      { "name": "New employee 3", "salary": 60000 }
-    ]
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/employees?on_conflict=name" \
-      -X POST -H "Content-Type: application/json" \
-      -H "Prefer: resolution=merge-duplicates" \
-      -d @- << EOF
-      [
-        { "name": "Old employee 1", "salary": 40000 },
-        { "name": "Old employee 2", "salary": 52000 },
-        { "name": "New employee 3", "salary": 60000 }
-      ]
-    EOF
-
-.. _upsert_put:
-
-PUT
----
-
-A single row upsert can be done by using :code:`PUT` and filtering the primary key columns with :code:`eq`:
-
-.. tabs::
-
-  .. code-tab:: http
-
-    PUT /employees?id=eq.4 HTTP/1.1
-
-    { "id": 4, "name": "Sara B.", "salary": 60000 }
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost/employees?id=eq.4" \
-      -X PUT -H "Content-Type: application/json" \
-      -d '{ "id": 4, "name": "Sara B.", "salary": 60000 }'
-
-All the columns must be specified in the request body, including the primary key columns.
-
-.. _delete:
-
-Deletions
-=========
-
-To delete rows in a table, use the DELETE verb plus :ref:`h_filter`. For instance deleting inactive users:
-
-.. tabs::
-
-  .. code-tab:: http
-
-    DELETE /user?active=is.false HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/user?active=is.false" -X DELETE
-
-Deletions also support :code:`Prefer: return=representation` plus :ref:`v_filter`.
-
-.. tabs::
-
-  .. code-tab:: http
-
-    DELETE /user?id=eq.1 HTTP/1.1
-    Prefer: return=representation
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/user?id=eq.1" -X DELETE \
-      -H "Prefer: return=representation"
-
-.. code-block:: json
-
-  {"id": 1, "email": "johndoe@email.com"}
-
-.. warning::
-
-  Beware of accidentally deleting all rows in a table. To learn to prevent that see :ref:`block_fulltable`.
-
-.. _limited_update_delete:
-
-Limited Updates/Deletions
-=========================
-
-You can limit the amount of affected rows by :ref:`update` or :ref:`delete` with the ``limit`` query parameter. For this, you must add an explicit ``order`` on a unique column(s).
-
-.. tabs::
-
-  .. code-tab:: http
-
-    PATCH /users?limit=10&order=id&last_login=lt.2017-01-01 HTTP/1.1
-
-    { "status": "inactive" }
-
-  .. code-tab:: bash Curl
-
-    curl -X PATCH "/users?limit=10&order=id&last_login=lt.2020-01-01" \
-      -H "Content-Type: application/json" \
-      -d '{ "status": "inactive" }'
-
-.. tabs::
-
-  .. code-tab:: http
-
-    DELETE /users?limit=10&order=id&status=eq.inactive HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl -X DELETE "http://localhost:3000/users?limit=10&order=id&status=eq.inactive"
-
-If your table has no unique columns, you can use the `ctid <https://www.postgresql.org/docs/current/ddl-system-columns.html>`_ system column.
-
-Using ``offset`` to target a different subset of rows is also possible.
-
-.. note::
-
-  There is no native ``UPDATE...LIMIT`` or ``DELETE...LIMIT`` support in PostgreSQL; the generated query simulates that behavior and is based on `this Crunchy Data blog post <https://www.crunchydata.com/blog/simulating-update-or-delete-with-limit-in-postgres-ctes-to-the-rescue>`_.
-
-.. _custom_queries:
-
-Custom Queries
-==============
-
-The PostgREST URL grammar limits the kinds of queries clients can perform. It prevents arbitrary, potentially poorly constructed and slow client queries. It's good for quality of service, but means database administrators must create custom views and stored procedures to provide richer endpoints. The most common causes for custom endpoints are
-
-* Table unions
-* More complicated joins than those provided by `Resource Embedding`_
-* Geo-spatial queries that require an argument, like "points near (lat,lon)"
-
-.. _s_procs:
-
-Stored Procedures
-=================
-
-*"A single resource can be the equivalent of a database stored procedure, with the power to abstract state changes over any number of storage items"* -- `Roy T. Fielding <https://roy.gbiv.com/untangled/2008/rest-apis-must-be-hypertext-driven#comment-743>`_
-
-Every stored procedure in the exposed database schema is accessible under the :code:`/rpc` prefix. Procedures can perform any operations allowed by PostgreSQL (read data, modify data, and even DDL operations).
-
-.. note::
-
-  The ``/rpc`` prefix is used to avoid name collisions between views and procedures.
-
-POST on Stored Procedures
--------------------------
-
-To supply arguments in an API call, include a JSON object in the request payload. Each key/value of the object will become an argument.
-
-For instance, assume we have created this function in the database.
-
-.. code-block:: plpgsql
-
-  CREATE FUNCTION add_them(a integer, b integer)
-  RETURNS integer AS $$
-   SELECT a + b;
-  $$ LANGUAGE SQL IMMUTABLE;
-
-.. important::
-
-  Whenever you create or change a function you must refresh PostgREST's schema cache. See the section :ref:`schema_reloading`.
-
-The client can call it by posting an object like
-
-.. tabs::
-
-  .. code-tab:: http
-
-    POST /rpc/add_them HTTP/1.1
-
-    { "a": 1, "b": 2 }
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/rpc/add_them" \
-      -X POST -H "Content-Type: application/json" \
-      -d '{ "a": 1, "b": 2 }'
-
-.. code-block:: json
-
-  3
-
-.. note::
-
-  PostgreSQL converts identifier names to lowercase unless you quote them like:
-
-  .. code-block:: postgres
-
-    CREATE FUNCTION "someFunc"("someParam" text) ...
-
-GET on Stored Procedures
-------------------------
-
-If the function doesn't modify the database, it will also run under the GET method(see :ref:`access_mode`).
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /rpc/add_them?a=1&b=2 HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/rpc/add_them?a=1&b=2"
-
-The function parameter names match the JSON object keys in the POST case, for the GET case they match the query parameters ``?a=1&b=2``.
-
-.. _s_proc_single_json:
-
-Calling functions with a single JSON parameter
-----------------------------------------------
-
-You can also call a function that takes a single parameter of type JSON by sending the header :code:`Prefer: params=single-object` with your request. That way the JSON request body will be used as the single argument.
-
-.. code-block:: plpgsql
-
-  CREATE FUNCTION mult_them(param json) RETURNS int AS $$
-    SELECT (param->>'x')::int * (param->>'y')::int
-  $$ LANGUAGE SQL;
-
-.. tabs::
-
-  .. code-tab:: http
-
-    POST /rpc/mult_them HTTP/1.1
-    Prefer: params=single-object
-
-    { "x": 4, "y": 2 }
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/rpc/mult_them" \
-      -X POST -H "Content-Type: application/json" \
-      -H "Prefer: params=single-object" \
-      -d '{ "x": 4, "y": 2 }'
-
-.. code-block:: json
-
-  8
-
-.. _s_proc_single_unnamed:
-
-Calling functions with a single unnamed parameter
--------------------------------------------------
-
-You can make a POST request to a function with a single unnamed parameter to send raw ``json/jsonb``, ``bytea``, ``text`` or ``xml`` data.
-
-To send raw JSON, the function must have a single unnamed ``json`` or ``jsonb`` parameter and the header ``Content-Type: application/json`` must be included in the request.
-
-.. code-block:: plpgsql
-
-  CREATE FUNCTION mult_them(json) RETURNS int AS $$
-    SELECT ($1->>'x')::int * ($1->>'y')::int
-  $$ LANGUAGE SQL;
-
-.. tabs::
-
-  .. code-tab:: http
-
-    POST /rpc/mult_them HTTP/1.1
-    Content-Type: application/json
-
-    { "x": 4, "y": 2 }
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/rpc/mult_them" \
-      -X POST -H "Content-Type: application/json" \
-      -d '{ "x": 4, "y": 2 }'
-
-.. code-block:: json
-
-  8
-
-.. note::
-
-  If an overloaded function has a single ``json`` or ``jsonb`` unnamed parameter, PostgREST will call this function as a fallback provided that no other overloaded function is found with the parameters sent in the POST request.
-
-To send raw XML, the parameter type must be ``xml`` and the header ``Content-Type: text/xml`` must be included in the request.
-
-To send raw binary, the parameter type must be ``bytea`` and the header ``Content-Type: application/octet-stream`` must be included in the request.
-
-.. code-block:: plpgsql
-
-  CREATE TABLE files(blob bytea);
-
-  CREATE FUNCTION upload_binary(bytea) RETURNS void AS $$
-    INSERT INTO files(blob) VALUES ($1);
-  $$ LANGUAGE SQL;
-
-.. tabs::
-
-  .. code-tab:: http
-
-    POST /rpc/upload_binary HTTP/1.1
-    Content-Type: application/octet-stream
-
-    file_name.ext
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/rpc/upload_binary" \
-      -X POST -H "Content-Type: application/octet-stream" \
-      --data-binary "@file_name.ext"
-
-.. code-block:: http
-
-  HTTP/1.1 200 OK
-
-  [ ... ]
-
-To send raw text, the parameter type must be ``text`` and the header ``Content-Type: text/plain`` must be included in the request.
-
-.. _s_procs_array:
-
-Calling functions with array parameters
----------------------------------------
-
-You can call a function that takes an array parameter:
-
-.. code-block:: postgres
-
-   create function plus_one(arr int[]) returns int[] as $$
-      SELECT array_agg(n + 1) FROM unnest($1) AS n;
-   $$ language sql;
-
-.. tabs::
-
-  .. code-tab:: http
-
-     POST /rpc/plus_one HTTP/1.1
-     Content-Type: application/json
-
-     {"arr": [1,2,3,4]}
-
-  .. code-tab:: bash Curl
-
-     curl "http://localhost:3000/rpc/plus_one" \
-       -X POST -H "Content-Type: application/json" \
-       -d '{"arr": [1,2,3,4]}'
-
-.. code-block:: json
-
-   [2,3,4,5]
-
-For calling the function with GET, you can pass the array as an `array literal <https://www.postgresql.org/docs/current/arrays.html#ARRAYS-INPUT>`_,
-as in ``{1,2,3,4}``. Note that the curly brackets have to be urlencoded(``{`` is ``%7B`` and ``}`` is ``%7D``).
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /rpc/plus_one?arr=%7B1,2,3,4%7D' HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/rpc/plus_one?arr=%7B1,2,3,4%7D'"
-
-.. note::
-
-   For versions prior to PostgreSQL 10, to pass a PostgreSQL native array on a POST payload, you need to quote it and use an array literal:
-
-   .. tabs::
-
-     .. code-tab:: http
-
-       POST /rpc/plus_one HTTP/1.1
-
-       { "arr": "{1,2,3,4}" }
-
-     .. code-tab:: bash Curl
-
-       curl "http://localhost:3000/rpc/plus_one" \
-         -X POST -H "Content-Type: application/json" \
-         -d '{ "arr": "{1,2,3,4}" }'
-
-   In these versions we recommend using function parameters of type JSON to accept arrays from the client.
-
-.. _s_procs_variadic:
-
-Calling variadic functions
---------------------------
-
-You can call a variadic function by passing a JSON array in a POST request:
-
-.. code-block:: postgres
-
-   create function plus_one(variadic v int[]) returns int[] as $$
-      SELECT array_agg(n + 1) FROM unnest($1) AS n;
-   $$ language sql;
-
-.. tabs::
-
-  .. code-tab:: http
-
-    POST /rpc/plus_one HTTP/1.1
-    Content-Type: application/json
-
-    {"v": [1,2,3,4]}
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/rpc/plus_one" \
-      -X POST -H "Content-Type: application/json" \
-      -d '{"v": [1,2,3,4]}'
-
-.. code-block:: json
-
-   [2,3,4,5]
-
-In a GET request, you can repeat the same parameter name:
-
-.. tabs::
-
-  .. code-tab:: http
-
-     GET /rpc/plus_one?v=1&v=2&v=3&v=4 HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-     curl "http://localhost:3000/rpc/plus_one?v=1&v=2&v=3&v=4"
-
-Repeating also works in POST requests with ``Content-Type: application/x-www-form-urlencoded``:
-
-.. tabs::
-
-  .. code-tab:: http
-
-    POST /rpc/plus_one HTTP/1.1
-    Content-Type: application/x-www-form-urlencoded
-
-    v=1&v=2&v=3&v=4
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/rpc/plus_one" \
-      -X POST -H "Content-Type: application/x-www-form-urlencoded" \
-      -d 'v=1&v=2&v=3&v=4'
-
-Scalar functions
-----------------
-
-PostgREST will detect if the function is scalar or table-valued and will shape the response format accordingly:
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /rpc/add_them?a=1&b=2 HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/rpc/add_them?a=1&b=2"
-
-.. code-block:: json
-
-  3
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /rpc/best_films_2017 HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/rpc/best_films_2017"
-
-.. code-block:: json
-
-  [
-    { "title": "Okja", "rating": 7.4},
-    { "title": "Call me by your name", "rating": 8},
-    { "title": "Blade Runner 2049", "rating": 8.1}
-  ]
-
-To manually choose a return format such as binary, plain text or XML, see the section :ref:`scalar_return_formats`.
-
-
-.. _bulk_call:
-
-Bulk Call
----------
-
-It's possible to call a function in a bulk way, analogously to :ref:`bulk_insert`. To do this, you need to add the
-``Prefer: params=multiple-objects`` header to your request.
-
-.. tabs::
-
-  .. code-tab:: http
-
-    POST /rpc/add_them HTTP/1.1
-    Content-Type: text/csv
-    Prefer: params=multiple-objects
-
-    a,b
-    1,2
-    3,4
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/rpc/add_them" \
-      -X POST -H "Content-Type: text/csv" \
-      -H "Prefer: params=multiple-objects" \
-      --data-binary @- << EOF
-    a,b
-    1,2
-    3,4
-    EOF
-
-.. code-block:: json
-
-   [ 3, 7 ]
-
-If you have large payloads to process, it's preferable you instead use a function with an :ref:`array parameter <s_procs_array>` or JSON parameter, as this will be more efficient.
-
-It's also possible to :ref:`Specify Columns <specify_columns>` on functions calls.
-
-Function filters
-----------------
-
-A function that returns a table type response can be shaped using the same filters as the ones used for tables and views:
-
-.. code-block:: postgres
-
-  CREATE FUNCTION best_films_2017() RETURNS SETOF films ..
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /rpc/best_films_2017?select=title,director:directors(*) HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/rpc/best_films_2017?select=title,director:directors(*)"
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /rpc/best_films_2017?rating=gt.8&order=title.desc HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/rpc/best_films_2017?rating=gt.8&order=title.desc"
-
-Overloaded functions
---------------------
-
-You can call overloaded functions with different number of arguments.
-
-.. code-block:: postgres
-
-  CREATE FUNCTION rental_duration(customer_id integer) ..
-
-  CREATE FUNCTION rental_duration(customer_id integer, from_date date) ..
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /rpc/rental_duration?customer_id=232 HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/rpc/rental_duration?customer_id=232"
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /rpc/rental_duration?customer_id=232&from_date=2018-07-01 HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/rpc/rental_duration?customer_id=232&from_date=2018-07-01"
-
-.. important::
-
-  Overloaded functions with the same argument names but different types are not supported.
-
-.. _scalar_return_formats:
-
-Response Formats For Scalar Responses
-=====================================
-
-For scalar return values such as
-
-* single-column selects on tables or
-* scalar functions,
-
-you can set the additional content types
-
-* ``application/octet-stream``
-* ``text/plain``
-* ``text/xml``
-
-as part of the :code:`Accept` header.
-
-Example 1: If you want to return raw binary data from a :code:`bytea` column, you must specify :code:`application/octet-stream` as part of the :code:`Accept` header
-and select a single column :code:`?select=bin_data`.
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /items?select=bin_data&id=eq.1 HTTP/1.1
-    Accept: application/octet-stream
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/items?select=bin_data&id=eq.1" \
-      -H "Accept: application/octet-stream"
-
-Example 2: You can request XML output when calling `Stored Procedures`_ that return a scalar value of type ``text/xml``. You are not forced to use select for this case.
-
-.. code-block:: postgres
-
-  CREATE FUNCTION generate_xml_content(..) RETURNS xml ..
-
-.. tabs::
-
-  .. code-tab:: http
-
-    POST /rpc/generate_xml_content HTTP/1.1
-    Accept: text/xml
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/rpc/generate_xml_content" \
-      -X POST -H "Accept: text/xml"
-
-Example 3: If the stored procedure returns non-scalar values, you need to do a :code:`select` in the same way as for GET binary output.
-
-.. code-block:: sql
-
-  CREATE FUNCTION get_descriptions(..) RETURNS SETOF TABLE(id int, description text) ..
-
-.. tabs::
-
-  .. code-tab:: http
-
-    POST /rpc/get_descriptions?select=description HTTP/1.1
-    Accept: text/plain
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/rpc/get_descriptions?select=description" \
-      -X POST -H "Accept: text/plain"
-
-.. note::
-
-  If more than one row would be returned the binary/plain-text/xml results will be concatenated with no delimiter.
-
-
-.. _open-api:
-
-OpenAPI Support
-===============
-
-Every API hosted by PostgREST automatically serves a full `OpenAPI <https://www.openapis.org/>`_ description on the root path. This provides a list of all endpoints (tables, foreign tables, views, functions), along with supported HTTP verbs and example payloads.
-
-.. note::
-
-  By default, this output depends on the permissions of the role that is contained in the JWT role claim (or the :ref:`db-anon-role` if no JWT is sent). If you need to show all the endpoints disregarding the role's permissions, set the :ref:`openapi-mode` config to :code:`ignore-privileges`.
-
-For extra customization, the OpenAPI output contains a "description" field for every `SQL comment <https://www.postgresql.org/docs/current/sql-comment.html>`_ on any database object. For instance,
-
-.. code-block:: sql
-
-  COMMENT ON SCHEMA mammals IS
-    'A warm-blooded vertebrate animal of a class that is distinguished by the secretion of milk by females for the nourishment of the young';
-
-  COMMENT ON TABLE monotremes IS
-    'Freakish mammals lay the best eggs for breakfast';
-
-  COMMENT ON COLUMN monotremes.has_venomous_claw IS
-    'Sometimes breakfast is not worth it';
-
-These unsavory comments will appear in the generated JSON as the fields, ``info.description``, ``definitions.monotremes.description`` and ``definitions.monotremes.properties.has_venomous_claw.description``.
-
-Also if you wish to generate a ``summary`` field you can do it by having a multiple line comment, the ``summary`` will be the first line and the ``description`` the lines that follow it:
-
-.. code-block:: plpgsql
-
-  COMMENT ON TABLE entities IS
-    $$Entities summary
-
-    Entities description that
-    spans
-    multiple lines$$;
-
-If you need to include the ``security`` and ``securityDefinitions`` options, set the :ref:`openapi-security-active` configuration to ``true``.
-
-You can use a tool like `Swagger UI <https://swagger.io/tools/swagger-ui/>`_ to create beautiful documentation from the description and to host an interactive web-based dashboard. The dashboard allows developers to make requests against a live PostgREST server, and provides guidance with request headers and example request bodies.
-
-.. important::
-
-  The OpenAPI information can go out of date as the schema changes under a running server. To learn how to refresh the cache see :ref:`schema_reloading`.
-
-.. _options_requests:
-
-OPTIONS
-=======
-
-You can verify which HTTP methods are allowed on endpoints for tables and views by using an OPTIONS request. These methods are allowed depending on what operations *can* be done on the table or view, not on the database permissions assigned to them.
-
-For a table named ``people``, OPTIONS would show:
-
-.. tabs::
-
-  .. code-tab:: http
-
-    OPTIONS /people HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/people" -X OPTIONS -i
-
-.. code-block:: http
-
-  HTTP/1.1 200 OK
-  Allow: OPTIONS,GET,HEAD,POST,PUT,PATCH,DELETE
-
-For a view, the methods are determined by the presence of INSTEAD OF TRIGGERS.
-
-.. table::
-   :widths: auto
-
-   +--------------------+-------------------------------------------------------------------------------------------------+
-   | Method allowed     | View's requirements                                                                             |
-   +====================+=================================================================================================+
-   | OPTIONS, GET, HEAD | None (Always allowed)                                                                           |
-   +--------------------+-------------------------------------------------------------------------------------------------+
-   | POST               | INSTEAD OF INSERT TRIGGER                                                                       |
-   +--------------------+-------------------------------------------------------------------------------------------------+
-   | PUT                | INSTEAD OF INSERT TRIGGER, INSTEAD OF UPDATE TRIGGER, also requires the presence of a           |
-   |                    | primary key                                                                                     |
-   +--------------------+-------------------------------------------------------------------------------------------------+
-   | PATCH              | INSTEAD OF UPDATE TRIGGER                                                                       |
-   +--------------------+-------------------------------------------------------------------------------------------------+
-   | DELETE             | INSTEAD OF DELETE TRIGGER                                                                       |
-   +--------------------+-------------------------------------------------------------------------------------------------+
-   | All the above methods are allowed for                                                                                |
-   | `auto-updatable views <https://www.postgresql.org/docs/current/sql-createview.html#SQL-CREATEVIEW-UPDATABLE-VIEWS>`_ |
-   +--------------------+-------------------------------------------------------------------------------------------------+
-
-For functions, the methods depend on their volatility. ``VOLATILE`` functions allow only ``OPTIONS,POST``, whereas the rest also permit ``GET,HEAD``.
-
-.. important::
-
-  Whenever you add or remove tables or views, or modify a view's INSTEAD OF TRIGGERS on the database, you must refresh PostgREST's schema cache for OPTIONS requests to work properly. See the section :ref:`schema_reloading`.
-
-CORS
-----
-
-PostgREST sets highly permissive cross origin resource sharing, that is why it accepts Ajax requests from any domain.
-
-It also handles `preflight requests <https://developer.mozilla.org/en-US/docs/Glossary/Preflight_request>`_ done by the browser, which are cached using the returned ``Access-Control-Max-Age: 86400`` header (86400 seconds = 24 hours). This is useful to reduce the latency of the subsequent requests.
-
-A ``POST`` preflight request would look like this:
-
-.. tabs::
-
-  .. code-tab:: http
-
-     OPTIONS /items HTTP/1.1
-     Origin: http://example.com
-     Access-Control-Allow-Method: POST
-     Access-Control-Allow-Headers: Content-Type
-
-  .. code-tab:: bash Curl
-
-     curl -i "http://localhost:3000/items" \
-       -X OPTIONS \
-       -H "Origin: http://example.com" \
-       -H "Access-Control-Request-Method: POST" \
-       -H "Access-Control-Request-Headers: Content-Type"
-
-.. code-block:: http
-
-  HTTP/1.1 200 OK
-  Access-Control-Allow-Origin: http://example.com
-  Access-Control-Allow-Credentials: true
-  Access-Control-Allow-Methods: GET, POST, PATCH, PUT, DELETE, OPTIONS, HEAD
-  Access-Control-Allow-Headers: Authorization, Content-Type, Accept, Accept-Language, Content-Language
-  Access-Control-Max-Age: 86400
-
-.. _multiple-schemas:
-
-Switching Schemas
-=================
-
-You can switch schemas at runtime with the ``Accept-Profile`` and ``Content-Profile`` headers. You can only switch to a schema that is included in :ref:`db-schemas`.
-
-For GET or HEAD, the schema to be used can be selected through the ``Accept-Profile`` header:
-
-.. tabs::
-
-  .. code-tab:: http
-
-     GET /items HTTP/1.1
-     Accept-Profile: tenant2
-
-  .. code-tab:: bash Curl
-
-     curl "http://localhost:3000/items" \
-       -H "Accept-Profile: tenant2"
-
-For POST, PATCH, PUT and DELETE, you can use the ``Content-Profile`` header for selecting the schema:
-
-.. tabs::
-
-  .. code-tab:: http
-
-     POST /items HTTP/1.1
-     Content-Profile: tenant2
-
-     {...}
-
-  .. code-tab:: bash Curl
-
-     curl "http://localhost:3000/items" \
-       -X POST -H "Content-Type: application/json" \
-       -H "Content-Profile: tenant2" \
-       -d '{...}'
-
-You can also select the schema for :ref:`s_procs` and :ref:`open-api`.
-
-.. note::
-
-   These headers are based on the nascent "Content Negotiation by Profile" spec: https://www.w3.org/TR/dx-prof-conneg
-
-.. _explain_plan:
-
-Execution plan
---------------
-
-You can get the `EXPLAIN execution plan <https://www.postgresql.org/docs/current/sql-explain.html>`_ of a request by adding the ``Accept: application/vnd.pgrst.plan`` header when :ref:`db-plan-enabled` is set to ``true``.
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /users?select=name&order=id HTTP/1.1
-    Accept: application/vnd.pgrst.plan
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/users?select=name&order=id" \
-      -H "Accept: application/vnd.pgrst.plan"
-
-.. code-block:: psql
-
-  Aggregate  (cost=73.65..73.68 rows=1 width=112)
-    ->  Index Scan using users_pkey on users  (cost=0.15..60.90 rows=850 width=36)
-
-The output of the plan is generated in ``text`` format by default but you can change it to JSON by using the ``+json`` suffix.
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /users?select=name&order=id HTTP/1.1
-    Accept: application/vnd.pgrst.plan+json
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/users?select=name&order=id" \
-      -H "Accept: application/vnd.pgrst.plan+json"
-
-.. code-block:: json
-
-  [
-    {
-      "Plan": {
-        "Node Type": "Aggregate",
-        "Strategy": "Plain",
-        "Partial Mode": "Simple",
-        "Parallel Aware": false,
-        "Async Capable": false,
-        "Startup Cost": 73.65,
-        "Total Cost": 73.68,
-        "Plan Rows": 1,
-        "Plan Width": 112,
-        "Plans": [
-          {
-            "Node Type": "Index Scan",
-            "Parent Relationship": "Outer",
-            "Parallel Aware": false,
-            "Async Capable": false,
-            "Scan Direction": "Forward",
-            "Index Name": "users_pkey",
-            "Relation Name": "users",
-            "Alias": "users",
-            "Startup Cost": 0.15,
-            "Total Cost": 60.90,
-            "Plan Rows": 850,
-            "Plan Width": 36
-          }
-        ]
-      }
-    }
-  ]
-
-By default the plan is assumed to generate the JSON representation of a resource(``application/json``), but you can obtain the plan for the :ref:`different representations that PostgREST supports <res_format>` by adding them to the ``for`` parameter. For instance, to obtain the plan for a ``text/xml``, you would use ``Accept: application/vnd.pgrst.plan; for="text/xml``.
-
-The other available parameters are ``analyze``, ``verbose``, ``settings``, ``buffers`` and ``wal``, which correspond to the `EXPLAIN command options <https://www.postgresql.org/docs/current/sql-explain.html>`_. To use the ``analyze`` and ``wal`` parameters for example, you would add them like ``Accept: application/vnd.pgrst.plan; options=analyze|wal``.
-
-Note that akin to the EXPLAIN command, the changes will be committed when using the ``analyze`` option. To avoid this, you can use the :ref:`db-tx-end` and the ``Prefer: tx=rollback`` header.
+PostgREST exposes three database objects of a schema as resources: tables, views and stored procedures.
+
+.. toctree::
+   :glob:
+   :maxdepth: 1
+
+   api/tables_views.rst
+   api/stored_procedures.rst
+   api/schemas.rst
+   api/resource_embedding.rst
+   api/openapi.rst
+   api/resource_representation.rst
+   api/*
diff --git a/docs/references/api/cors.rst b/docs/references/api/cors.rst
new file mode 100644
index 000000000..77ad54d68
--- /dev/null
+++ b/docs/references/api/cors.rst
@@ -0,0 +1,34 @@
+CORS
+====
+
+PostgREST sets highly permissive cross origin resource sharing, that is why it accepts Ajax requests from any domain.
+
+It also handles `preflight requests <https://developer.mozilla.org/en-US/docs/Glossary/Preflight_request>`_ done by the browser, which are cached using the returned ``Access-Control-Max-Age: 86400`` header (86400 seconds = 24 hours). This is useful to reduce the latency of the subsequent requests.
+
+A ``POST`` preflight request would look like this:
+
+.. tabs::
+
+  .. code-tab:: http
+
+     OPTIONS /items HTTP/1.1
+     Origin: http://example.com
+     Access-Control-Allow-Method: POST
+     Access-Control-Allow-Headers: Content-Type
+
+  .. code-tab:: bash Curl
+
+     curl -i "http://localhost:3000/items" \
+       -X OPTIONS \
+       -H "Origin: http://example.com" \
+       -H "Access-Control-Request-Method: POST" \
+       -H "Access-Control-Request-Headers: Content-Type"
+
+.. code-block:: http
+
+  HTTP/1.1 200 OK
+  Access-Control-Allow-Origin: http://example.com
+  Access-Control-Allow-Credentials: true
+  Access-Control-Allow-Methods: GET, POST, PATCH, PUT, DELETE, OPTIONS, HEAD
+  Access-Control-Allow-Headers: Authorization, Content-Type, Accept, Accept-Language, Content-Language
+  Access-Control-Max-Age: 86400
diff --git a/docs/references/api/openapi.rst b/docs/references/api/openapi.rst
new file mode 100644
index 000000000..31d23b52a
--- /dev/null
+++ b/docs/references/api/openapi.rst
@@ -0,0 +1,45 @@
+.. _open-api:
+
+OpenAPI
+=======
+
+PostgREST automatically serves a full `OpenAPI <https://www.openapis.org/>`_ description on the root path. This provides a list of all endpoints (tables, foreign tables, views, functions), along with supported HTTP verbs and example payloads.
+
+.. note::
+
+  By default, this output depends on the permissions of the role that is contained in the JWT role claim (or the :ref:`db-anon-role` if no JWT is sent). If you need to show all the endpoints disregarding the role's permissions, set the :ref:`openapi-mode` config to :code:`ignore-privileges`.
+
+For extra customization, the OpenAPI output contains a "description" field for every `SQL comment <https://www.postgresql.org/docs/current/sql-comment.html>`_ on any database object. For instance,
+
+.. code-block:: sql
+
+  COMMENT ON SCHEMA mammals IS
+    'A warm-blooded vertebrate animal of a class that is distinguished by the secretion of milk by females for the nourishment of the young';
+
+  COMMENT ON TABLE monotremes IS
+    'Freakish mammals lay the best eggs for breakfast';
+
+  COMMENT ON COLUMN monotremes.has_venomous_claw IS
+    'Sometimes breakfast is not worth it';
+
+These unsavory comments will appear in the generated JSON as the fields, ``info.description``, ``definitions.monotremes.description`` and ``definitions.monotremes.properties.has_venomous_claw.description``.
+
+Also if you wish to generate a ``summary`` field you can do it by having a multiple line comment, the ``summary`` will be the first line and the ``description`` the lines that follow it:
+
+.. code-block:: plpgsql
+
+  COMMENT ON TABLE entities IS
+    $$Entities summary
+
+    Entities description that
+    spans
+    multiple lines$$;
+
+If you need to include the ``security`` and ``securityDefinitions`` options, set the :ref:`openapi-security-active` configuration to ``true``.
+
+You can use a tool like `Swagger UI <https://swagger.io/tools/swagger-ui/>`_ to create beautiful documentation from the description and to host an interactive web-based dashboard. The dashboard allows developers to make requests against a live PostgREST server, and provides guidance with request headers and example request bodies.
+
+.. important::
+
+  The OpenAPI information can go out of date as the schema changes under a running server. To learn how to refresh the cache see :ref:`schema_reloading`.
+
diff --git a/docs/references/api/options.rst b/docs/references/api/options.rst
new file mode 100644
index 000000000..288c3b53d
--- /dev/null
+++ b/docs/references/api/options.rst
@@ -0,0 +1,52 @@
+.. _options_requests:
+
+OPTIONS method
+==============
+
+You can verify which HTTP methods are allowed on endpoints for tables and views by using an OPTIONS request. These methods are allowed depending on what operations *can* be done on the table or view, not on the database permissions assigned to them.
+
+For a table named ``people``, OPTIONS would show:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    OPTIONS /people HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/people" -X OPTIONS -i
+
+.. code-block:: http
+
+  HTTP/1.1 200 OK
+  Allow: OPTIONS,GET,HEAD,POST,PUT,PATCH,DELETE
+
+For a view, the methods are determined by the presence of INSTEAD OF TRIGGERS.
+
+.. table::
+   :widths: auto
+
+   +--------------------+-------------------------------------------------------------------------------------------------+
+   | Method allowed     | View's requirements                                                                             |
+   +====================+=================================================================================================+
+   | OPTIONS, GET, HEAD | None (Always allowed)                                                                           |
+   +--------------------+-------------------------------------------------------------------------------------------------+
+   | POST               | INSTEAD OF INSERT TRIGGER                                                                       |
+   +--------------------+-------------------------------------------------------------------------------------------------+
+   | PUT                | INSTEAD OF INSERT TRIGGER, INSTEAD OF UPDATE TRIGGER, also requires the presence of a           |
+   |                    | primary key                                                                                     |
+   +--------------------+-------------------------------------------------------------------------------------------------+
+   | PATCH              | INSTEAD OF UPDATE TRIGGER                                                                       |
+   +--------------------+-------------------------------------------------------------------------------------------------+
+   | DELETE             | INSTEAD OF DELETE TRIGGER                                                                       |
+   +--------------------+-------------------------------------------------------------------------------------------------+
+   | All the above methods are allowed for                                                                                |
+   | `auto-updatable views <https://www.postgresql.org/docs/current/sql-createview.html#SQL-CREATEVIEW-UPDATABLE-VIEWS>`_ |
+   +--------------------+-------------------------------------------------------------------------------------------------+
+
+For functions, the methods depend on their volatility. ``VOLATILE`` functions allow only ``OPTIONS,POST``, whereas the rest also permit ``GET,HEAD``.
+
+.. important::
+
+  Whenever you add or remove tables or views, or modify a view's INSTEAD OF TRIGGERS on the database, you must refresh PostgREST's schema cache for OPTIONS requests to work properly. See the section :ref:`schema_reloading`.
diff --git a/docs/references/api/resource_embedding.rst b/docs/references/api/resource_embedding.rst
new file mode 100644
index 000000000..231ddd377
--- /dev/null
+++ b/docs/references/api/resource_embedding.rst
@@ -0,0 +1,836 @@
+.. _resource_embedding:
+
+Resource Embedding
+==================
+
+PostgREST allows including related resources in a single API call. This reduces the need for many API requests.
+
+**Foreign Keys** determine which tables and views can be returned together. For example, consider a database of films and their awards:
+
+.. image:: ../../_static/film.png
+
+.. important::
+
+  Whenever foreign keys change you must do :ref:`schema_reloading` for this feature to work.
+
+.. _many-to-one:
+
+Many-to-one relationships
+-------------------------
+
+Since ``films`` has a **foreign key** to ``directors``, this establishes a many-to-one relationship. Thus, we're able to request all the films and the director for each film.
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /films?select=title,directors(id,last_name) HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/films?select=title,directors(id,last_name)"
+
+.. code-block:: json
+
+  [
+    { "title": "Workers Leaving The Lumière Factory In Lyon",
+      "directors": {
+        "id": 2,
+        "last_name": "Lumière"
+      }
+    },
+    { "title": "The Dickson Experimental Sound Film",
+      "directors": {
+        "id": 1,
+        "last_name": "Dickson"
+      }
+    },
+    { "title": "The Haunted Castle",
+      "directors": {
+        "id": 3,
+        "last_name": "Méliès"
+      }
+    }
+  ]
+
+Note that the embedded ``directors`` is returned as a JSON object because of the "to-one" end.
+
+Since the table name is plural, we can be more accurate by making it singular with an alias.
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /films?select=title,director:directors(id,last_name) HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/films?select=title,director:directors(id,last_name)"
+
+.. code-block:: json
+
+  [
+    { "title": "Workers Leaving The Lumière Factory In Lyon",
+      "director": {
+        "id": 2,
+        "last_name": "Lumière"
+      }
+    },
+    ".."
+  ]
+
+.. _one-to-many:
+
+One-to-many relationships
+-------------------------
+
+The **foreign key reference** establishes the inverse one-to-many relationship. In this case, ``films`` returns as a JSON array because of the “to-many” end.
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /directors?select=last_name,films(title) HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/directors?select=last_name,films(title)"
+
+.. code-block:: json
+
+  [
+    { "last_name": "Lumière",
+      "films": [
+        {"title": "Workers Leaving The Lumière Factory In Lyon"}
+      ]
+    },
+    { "last_name": "Dickson",
+      "films": [
+        {"title": "The Dickson Experimental Sound Film"}
+      ]
+    },
+    { "last_name": "Méliès",
+      "films": [
+        {"title": "The Haunted Castle"}
+      ]
+    }
+  ]
+
+.. _many-to-many:
+
+Many-to-many relationships
+--------------------------
+
+The join table determines many-to-many relationships. It must contain foreign keys to other two tables and they must be part of its composite key.
+
+For the many-to-many relationship between ``films`` and ``actors``, the join table ``roles`` is:
+
+.. code-block:: postgresql
+
+  create table roles(
+    film_id int references films(id)
+  , actor_id int references actors(id)
+  , primary key(film_id, actor_id)
+  );
+
+  -- the join table can also be detected if the composite key has additional columns
+
+  create table roles(
+    id int generated always as identity,
+  , film_id int references films(id)
+  , actor_id int references actors(id)
+  , primary key(id, film_id, actor_id)
+  );
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /actors?select=first_name,last_name,films(title) HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/actors?select=first_name,last_name,films(title)"
+
+.. code-block:: json
+
+  [
+    { "first_name": "Willem",
+      "last_name": "Dafoe",
+      "films": [
+        {"title": "The Lighthouse"}
+      ]
+    },
+    ".."
+  ]
+
+.. _one-to-one:
+
+One-to-one relationships
+------------------------
+
+One-to-one relationships are detected when:
+
+- The foreign key has a unique constraint.
+
+.. code-block:: postgresql
+
+  CREATE TABLE technical_specs(
+    film_id INT REFERENCES films UNIQUE,
+    runtime TIME,
+    camera TEXT,
+    sound TEXT
+  );
+
+- The foreign key is a primary key.
+
+.. code-block:: postgresql
+
+  -- references Films using the primary key as a foreign key
+  CREATE TABLE technical_specs(
+    film_id INT PRIMARY KEY REFERENCES films,
+    runtime TIME,
+    camera TEXT,
+    sound TEXT
+  );
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /films?select=title,technical_specs(runtime) HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/films?select=title,technical_specs(runtime)"
+
+.. code-block:: json
+
+  [
+    {
+      "title": "Pulp Fiction",
+      "technical_specs": {"camera": "Arriflex 35-III"}
+    },
+    ".."
+  ]
+
+.. _computed_relationships:
+
+Computed relationships
+----------------------
+
+You can manually define relationships between resources. This is useful for database objects that can't define foreign keys, like `Foreign Data Wrappers <https://wiki.postgresql.org/wiki/Foreign_data_wrappers>`_.
+
+To do this, you can create functions similar to :ref:`computed_cols`.
+
+Assuming there's a foreign table ``premieres`` that we want to relate to ``films``.
+
+.. code-block:: postgres
+
+  create foreign table premieres (
+    id integer,
+    location text,
+    "date" date,
+    film_id integer
+  ) server import_csv options ( filename '/tmp/directors.csv', format 'csv');
+
+  create function film(premieres) returns setof films rows 1 as $$
+    select * from films where id = $1.film_id
+  $$ stable language sql;
+
+The above function defines a relationship between ``premieres`` (the parameter) and ``films`` (the return type). Since there's a ``rows 1``, this defines a many-to-one relationship.
+The name of the function ``film`` is arbitrary and can be used to do the embedding:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /premieres?select=location,film(name) HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/premieres?select=location,film(name)"
+
+.. code-block:: json
+
+  [
+    {
+      "location": "Cannes Film Festival",
+      "film": {"name": "Pulp Fiction"}
+    },
+    ".."
+  ]
+
+Now let's define the opposite one-to-many relationship.
+
+.. code-block:: postgres
+
+  create function premieres(films) returns setof premieres as $$
+    select * from premieres where film_id = $1.id
+  $$ stable language sql;
+
+In this case there's an implicit ``ROWS 1000`` defined by PostgreSQL(`search "result_rows" on this PostgreSQL doc <https://www.postgresql.org/docs/current/sql-createfunction.html>`_).
+We consider any value greater than 1 as "many" so this defines a one-to-many relationship.
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /films?select=name,premieres(name) HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/films?select=name,premieres(name)"
+
+.. code-block:: json
+
+  [
+    {
+      "name": "Pulp Ficiton",
+      "premieres": [{"location": "Cannes Festival"}]
+    },
+    ".."
+  ]
+
+Computed relationships also allow you to override the ones that PostgREST auto-detects.
+
+For example, to override the :ref:`many-to-one relationship <many-to-one>` between ``films`` and ``directors``.
+
+.. code-block:: postgres
+
+  create function directors(films) returns setof directors rows 1 as $$
+    select * from directors where id = $1.director_id
+  $$ stable language sql;
+
+Thanks to overloaded functions, you can use the same function name for different parameters. Thus define relationships from other tables/views to directors.
+
+.. code-block:: postgres
+
+  create function directors(film_schools) returns setof directors as $$
+    select * from directors where film_school_id = $1.id
+  $$ stable language sql;
+
+Computed relationships have good performance as their intended design enable `inlining <https://wiki.postgresql.org/wiki/Inlining_of_SQL_functions#Inlining_conditions_for_table_functions>`_.
+
+.. warning::
+
+  - Always use ``SETOF`` when creating computed relationships. Functions can return a table without using ``SETOF``, but bear in mind that they will not be inlined.
+
+  - Make sure to correctly label the ``to-one`` part of the relationship. When using the ``ROWS 1`` estimation, PostgREST will expect a single row to be returned. If that is not the case, it will unnest the embedding and return repeated values for the top level resource.
+
+.. _nested_embedding:
+
+Nested Embedding
+----------------
+
+If you want to embed through join tables but need more control on the intermediate resources, you can do nested embedding. For instance, you can request the Actors, their Roles and the Films for those Roles:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /actors?select=roles(character,films(title,year)) HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/actors?select=roles(character,films(title,year))"
+
+.. _embed_filters:
+
+Embedded Filters
+----------------
+
+Embedded resources can be shaped similarly to their top-level counterparts. To do so, prefix the query parameters with the name of the embedded resource. For instance, to order the actors in each film:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /films?select=*,actors(*)&actors.order=last_name,first_name HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/films?select=*,actors(*)&actors.order=last_name,first_name"
+
+This sorts the list of actors in each film but does *not* change the order of the films themselves. To filter the roles returned with each film:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /films?select=*,roles(*)&roles.character=in.(Chico,Harpo,Groucho) HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/films?select=*,roles(*)&roles.character=in.(Chico,Harpo,Groucho)"
+
+Once again, this restricts the roles included to certain characters but does not filter the films in any way. Films without any of those characters would be included along with empty character lists.
+
+An ``or`` filter  can be used for a similar operation:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /films?select=*,roles(*)&roles.or=(character.eq.Gummo,character.eq.Zeppo) HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/films?select=*,roles(*)&roles.or=(character.eq.Gummo,character.eq.Zeppo)"
+
+Limit and offset operations are possible:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /films?select=*,actors(*)&actors.limit=10&actors.offset=2 HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/films?select=*,actors(*)&actors.limit=10&actors.offset=2"
+
+Embedded resources can be aliased and filters can be applied on these aliases:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /films?select=*,90_comps:competitions(name),91_comps:competitions(name)&90_comps.year=eq.1990&91_comps.year=eq.1991 HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/films?select=*,90_comps:competitions(name),91_comps:competitions(name)&90_comps.year=eq.1990&91_comps.year=eq.1991"
+
+Filters can also be applied on nested embedded resources:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /films?select=*,roles(*,actors(*))&roles.actors.order=last_name&roles.actors.first_name=like.*Tom* HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/films?select=*,roles(*,actors(*))&roles.actors.order=last_name&roles.actors.first_name=like.*Tom*"
+
+The result will show the nested actors named Tom and order them by last name. Aliases can also be used instead of the resource names to filter the nested tables.
+
+.. _embedding_top_level_filter:
+
+Embedding with Top-level Filtering
+----------------------------------
+
+By default, :ref:`embed_filters` don't change the top-level resource(``films``) rows at all:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /films?select=title,actors(first_name,last_name)&actors.first_name=eq.Jehanne HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/films?select=title,actors(first_name,last_name)&actors.first_name=eq.Jehanne
+
+.. code-block:: json
+
+  [
+    {
+      "title": "Workers Leaving The Lumière Factory In Lyon",
+      "actors": []
+    },
+    {
+      "title": "The Dickson Experimental Sound Film",
+      "actors": []
+    },
+    {
+      "title": "The Haunted Castle",
+      "actors": [
+        {
+          "first_name": "Jehanne",
+          "last_name": "d'Alcy"
+        }
+      ]
+    }
+  ]
+
+In order to filter the top level rows you need to add ``!inner`` to the embedded resource. For instance, to get **only** the films that have an actor named ``Jehanne``:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /films?select=title,actors!inner(first_name,last_name)&actors.first_name=eq.Jehanne HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/films?select=title,actors!inner(first_name,last_name)&actors.first_name=eq.Jehanne"
+
+.. code-block:: json
+
+  [
+    {
+      "title": "The Haunted Castle",
+      "actors": [
+        {
+          "first_name": "Jehanne",
+          "last_name": "d'Alcy"
+        }
+      ]
+    }
+  ]
+
+.. _embedding_partitioned_tables:
+
+Embedding Partitioned Tables
+----------------------------
+
+Embedding can also be done between `partitioned tables <https://www.postgresql.org/docs/current/ddl-partitioning.html>`_ and other tables.
+
+For example, let's create the ``box_office`` partitioned table that has the gross daily revenue of a film:
+
+.. code-block:: postgres
+
+  CREATE TABLE box_office (
+    bo_date DATE NOT NULL,
+    film_id INT REFERENCES test.films NOT NULL,
+    gross_revenue DECIMAL(12,2) NOT NULL,
+    PRIMARY KEY (bo_date, film_id)
+  ) PARTITION BY RANGE (bo_date);
+
+  -- Let's also create partitions for each month of 2021
+
+  CREATE TABLE box_office_2021_01 PARTITION OF test.box_office
+  FOR VALUES FROM ('2021-01-01') TO ('2021-01-31');
+
+  CREATE TABLE box_office_2021_02 PARTITION OF test.box_office
+  FOR VALUES FROM ('2021-02-01') TO ('2021-02-28');
+
+  -- and so until december 2021
+
+Since it contains the ``films_id`` foreign key, it is possible to embed ``box_office`` and ``films``:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /box_office?select=bo_date,gross_revenue,films(title)&gross_revenue=gte.1000000 HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/box_office?select=bo_date,gross_revenue,films(title)&gross_revenue=gte.1000000"
+
+.. note::
+
+  * Embedding on partitions is not allowed because it leads to ambiguity errors (see :ref:`embed_disamb`) between them and their parent partitioned table. More details at `#1783(comment) <https://github.com/PostgREST/postgrest/issues/1783#issuecomment-959823827>`_). :ref:`custom_queries` can be used if this is needed.
+
+  * Partitioned tables can reference other tables since PostgreSQL 11 but can only be referenced from any other table since PostgreSQL 12.
+
+.. _embedding_views:
+
+Embedding Views
+---------------
+
+PostgREST will infer the relationships of a view based on its source tables. Source tables are the ones referenced in the ``FROM`` and ``JOIN`` clauses of the view definition. The foreign keys of the relationships must be present in the top ``SELECT`` clause of the view for this to work.
+
+For instance, the following view has ``nominations``, ``films`` and ``competitions`` as source tables:
+
+.. code-block:: postgres
+
+  CREATE VIEW nominations_view AS
+    SELECT
+       films.title as film_title
+     , competitions.name as competition_name
+     , nominations.rank
+     , nominations.film_id as nominations_film_id
+     , films.id as film_id
+    FROM nominations
+    JOIN films ON films.id = nominations.film_id
+    JOIN competitions ON competitions.id = nominations.competition_id;
+
+Since this view contains ``nominations.film_id``, which has a **foreign key** relationship to ``films``, then we can embed the ``films`` table. Similarly, because the view contains ``films.id``, then we can also embed the ``roles`` and the ``actors`` tables (the last one in a many-to-many relationship):
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /nominations_view?select=film_title,films(language),roles(character),actors(last_name,first_name)&rank=eq.5 HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/nominations_view?select=film_title,films(language),roles(character),actors(last_name,first_name)&rank=eq.5"
+
+It's also possible to embed `Materialized Views <https://www.postgresql.org/docs/current/rules-materializedviews.html>`_.
+
+.. important::
+
+  - It's not guaranteed that all kinds of views will be embeddable. In particular, views that contain UNIONs will not be made embeddable.
+
+    + Why? PostgREST detects source table foreign keys in the view by querying and parsing `pg_rewrite <https://www.postgresql.org/docs/current/catalog-pg-rewrite.html>`_.
+      This may fail depending on the complexity of the view.
+    + As a workaround, you can use :ref:`computed_relationships` to define manual relationships for views.
+
+  - If view definitions change you must refresh PostgREST's schema cache for this to work properly. See the section :ref:`schema_reloading`.
+
+.. _embedding_view_chains:
+
+Embedding Chains of Views
+-------------------------
+
+Views can also depend on other views, which in turn depend on the actual source table. For PostgREST to pick up those chains recursively to any depth, all the views must be in the search path, so either in the exposed schema (:ref:`db-schemas`) or in one of the schemas set in :ref:`db-extra-search-path`. This does not apply to the source table, which could be in a private schema as well. See :ref:`schema_isolation` for more details.
+
+.. _s_proc_embed:
+
+Embedding on Stored Procedures
+------------------------------
+
+If you have a :ref:`Stored Procedure <s_procs>` that returns a table type, you can embed its related resources.
+
+Here's a sample function (notice the ``RETURNS SETOF films``).
+
+.. code-block:: plpgsql
+
+  CREATE FUNCTION getallfilms() RETURNS SETOF films AS $$
+    SELECT * FROM films;
+  $$ LANGUAGE SQL IMMUTABLE;
+
+A request with ``directors`` embedded:
+
+.. tabs::
+
+  .. code-tab:: http
+
+     GET /rpc/getallfilms?select=title,directors(id,last_name)&title=like.*Workers* HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+     curl "http://localhost:3000/rpc/getallfilms?select=title,directors(id,last_name)&title=like.*Workers*"
+
+.. code-block:: json
+
+   [
+     { "title": "Workers Leaving The Lumière Factory In Lyon",
+       "directors": {
+         "id": 2,
+         "last_name": "Lumière"
+       }
+     }
+   ]
+
+.. _mutation_embed:
+
+Embedding after Insertions/Updates/Deletions
+--------------------------------------------
+
+You can embed related resources after doing :ref:`insert`, :ref:`update` or :ref:`delete`.
+
+Say you want to insert a **film** and then get some of its attributes plus embed its **director**.
+
+.. tabs::
+
+  .. code-tab:: http
+
+     POST /films?select=title,year,director:directors(first_name,last_name) HTTP/1.1
+     Prefer: return=representation
+
+     {
+      "id": 100,
+      "director_id": 40,
+      "title": "127 hours",
+      "year": 2010,
+      "rating": 7.6,
+      "language": "english"
+     }
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/films?select=title,year,director:directors(first_name,last_name)" \
+      -H "Prefer: return=representation" \
+      -d @- << EOF
+      {
+        "id": 100,
+        "director_id": 40,
+        "title": "127 hours",
+        "year": 2010,
+        "rating": 7.6,
+        "language": "english"
+      }
+    EOF
+
+Response:
+
+.. code-block:: json
+
+   {
+    "title": "127 hours",
+    "year": 2010,
+    "director": {
+      "first_name": "Danny",
+      "last_name": "Boyle"
+    }
+   }
+
+.. _embed_disamb:
+
+Embedding Disambiguation
+------------------------
+
+For doing resource embedding, PostgREST infers the relationship between two tables based on a foreign key between them.
+However, in cases where there's more than one foreign key between two tables, it's not possible to infer the relationship unambiguously
+by just specifying the tables names.
+
+.. _target_disamb:
+
+Target Disambiguation
+~~~~~~~~~~~~~~~~~~~~~
+
+For example, suppose you have the following ``orders`` and ``addresses`` tables:
+
+.. image:: ../../_static/orders.png
+
+And you try to embed ``orders`` with ``addresses`` (this is the **target**):
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /orders?select=*,addresses(*) HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/orders?select=*,addresses(*)" -i
+
+Since the ``orders`` table has two foreign keys to the ``addresses`` table — an order has a billing address and a shipping address —
+the request is ambiguous and PostgREST will respond with an error:
+
+.. code-block:: http
+
+   HTTP/1.1 300 Multiple Choices
+
+   {..}
+
+If this happens, you need to disambiguate the request by adding precision to the **target**.
+Instead of the **table name**, you can specify the **foreign key constraint name** or the **column name** that is part of the foreign key.
+
+Let's try first with the **foreign key constraint name**. To make it clearer we can name it:
+
+.. code-block:: postgresql
+
+   ALTER TABLE orders
+      ADD CONSTRAINT billing_address  foreign key (billing_address_id) references addresses(id),
+      ADD CONSTRAINT shipping_address foreign key (shipping_address_id) references addresses(id);
+
+   -- Or if the constraints names were already generated by PostgreSQL we can rename them
+   -- ALTER TABLE orders
+   --   RENAME CONSTRAINT orders_billing_address_id_fkey  TO billing_address,
+   --   RENAME CONSTRAINT orders_shipping_address_id_fkey TO shipping_address;
+
+Now we can unambiguously embed the billing address by specifying the ``billing_address`` foreign key constraint as the **target**.
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /orders?select=name,billing_address(name) HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/orders?select=name,billing_address(name)"
+
+.. code-block:: json
+
+   [
+    {
+     "name": "Personal Water Filter",
+     "billing_address": {
+       "name": "32 Glenlake Dr.Dearborn, MI 48124"
+     }
+    }
+   ]
+
+Alternatively, you can specify the **column name** of the foreign key constraint as the **target**. This can be aliased to make
+the result more clear.
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /orders?select=name,billing_address:billing_address_id(name) HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/orders?select=name,billing_address:billing_address_id(name)"
+
+.. code-block:: json
+
+   [
+    {
+     "name": "Personal Water Filter",
+     "billing_address": {
+      "name": "32 Glenlake Dr.Dearborn, MI 48124"
+     }
+    }
+   ]
+
+.. _hint_disamb:
+
+Hint Disambiguation
+~~~~~~~~~~~~~~~~~~~
+
+If specifying the **target** is not enough for unambiguous embedding, you can add a **hint**. For example, let's assume we create
+two views of ``addresses``: ``central_addresses`` and ``eastern_addresses``.
+
+PostgREST cannot detect a view as an embedded resource by using a column name or foreign key name as targets, that is why we need to use the view name ``central_addresses`` instead. But, still, this is not enough for an unambiguous embed.
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /orders?select=*,central_addresses(*) HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/orders?select=*,central_addresses(*)" -i
+
+.. code-block:: http
+
+  HTTP/1.1 300 Multiple Choices
+
+For solving this case, in addition to the **target**, we can add a **hint**.
+Here, we still specify ``central_addresses`` as the **target** and use the ``billing_address`` foreign key as the **hint**:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /orders?select=*,central_addresses!billing_address(*) HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl 'http://localhost:3000/orders?select=*,central_addresses!billing_address(*)' -i
+
+.. code-block:: http
+
+  HTTP/1.1 200 OK
+
+  [ ... ]
+
+Similarly to the **target**, the **hint** can be a **table name**, **foreign key constraint name** or **column name**.
+
+Hints also work alongside ``!inner`` if a top level filtering is needed. From the above example:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /orders?select=*,central_addresses!billing_address!inner(*)&central_addresses.code=AB1000 HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/orders?select=*,central_addresses!billing_address!inner(*)&central_addresses.code=AB1000"
+
+.. note::
+
+  If the relationship is so complex that hint disambiguation does not solve it, you can use :ref:`computed_relationships`.
+
diff --git a/docs/references/api/resource_representation.rst b/docs/references/api/resource_representation.rst
new file mode 100644
index 000000000..82f27d96b
--- /dev/null
+++ b/docs/references/api/resource_representation.rst
@@ -0,0 +1,150 @@
+Resource Representation
+#######################
+
+PostgREST uses proper HTTP content negotiation (`RFC7231 <https://datatracker.ietf.org/doc/html/rfc7231#section-5.3>`_) to deliver a resource representation.
+That is to say the same API endpoint can respond in different formats like JSON or CSV depending on the request.
+
+.. _res_format:
+
+Response Format
+===============
+
+Use the Accept request header to specify the acceptable format (or formats) for the response:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /people HTTP/1.1
+    Accept: application/json
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/people" \
+      -H "Accept: application/json"
+
+For tables and views the current possibilities are:
+
+* ``*/*``
+* ``text/csv``
+* ``application/json``
+* ``application/openapi+json``
+* ``application/geo+json``
+
+The server will default to JSON for API endpoints and OpenAPI on the root.
+
+.. _singular_plural:
+
+Singular or Plural
+------------------
+
+By default PostgREST returns all JSON results in an array, even when there is only one item. For example, requesting :code:`/items?id=eq.1` returns
+
+.. code:: json
+
+  [
+    { "id": 1 }
+  ]
+
+This can be inconvenient for client code. To return the first result as an object unenclosed by an array, specify :code:`vnd.pgrst.object` as part of the :code:`Accept` header
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /items?id=eq.1 HTTP/1.1
+    Accept: application/vnd.pgrst.object+json
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/items?id=eq.1" \
+      -H "Accept: application/vnd.pgrst.object+json"
+
+This returns
+
+.. code:: json
+
+  { "id": 1 }
+
+When a singular response is requested but no entries are found, the server responds with an error message and 406 Not Acceptable status code rather than the usual empty array and 200 status:
+
+.. code-block:: json
+
+  {
+    "message": "JSON object requested, multiple (or no) rows returned",
+    "details": "Results contain 0 rows, application/vnd.pgrst.object+json requires 1 row",
+    "hint": null,
+    "code": "PGRST505"
+  }
+
+.. note::
+
+  Many APIs distinguish plural and singular resources using a special nested URL convention e.g. `/stories` vs `/stories/1`. Why do we use `/stories?id=eq.1`? The answer is because a singular resource is (for us) a row determined by a primary key, and primary keys can be compound (meaning defined across more than one column). The more familiar nested urls consider only a degenerate case of simple and overwhelmingly numeric primary keys. These so-called artificial keys are often introduced automatically by Object Relational Mapping libraries.
+
+  Admittedly PostgREST could detect when there is an equality condition holding on all columns constituting the primary key and automatically convert to singular. However this could lead to a surprising change of format that breaks unwary client code just by filtering on an extra column. Instead we allow manually specifying singular vs plural to decouple that choice from the URL format.
+
+.. _scalar_return_formats:
+
+Scalar Function Response Format
+-------------------------------
+
+In the special case of a :ref:`scalar_functions` there are three additional formats:
+
+* ``application/octet-stream``
+* ``text/plain``
+* ``text/xml``
+
+Example 1: If you want to return raw binary data from a :code:`bytea` column, you must specify :code:`application/octet-stream` as part of the :code:`Accept` header
+and select a single column :code:`?select=bin_data`.
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /items?select=bin_data&id=eq.1 HTTP/1.1
+    Accept: application/octet-stream
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/items?select=bin_data&id=eq.1" \
+      -H "Accept: application/octet-stream"
+
+Example 2: You can request XML output when having a scalar function that returns a type of ``text/xml``. You are not forced to use select for this case.
+
+.. code-block:: postgres
+
+  CREATE FUNCTION generate_xml_content(..) RETURNS xml ..
+
+.. tabs::
+
+  .. code-tab:: http
+
+    POST /rpc/generate_xml_content HTTP/1.1
+    Accept: text/xml
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/rpc/generate_xml_content" \
+      -X POST -H "Accept: text/xml"
+
+Example 3: If the stored procedure returns non-scalar values, you need to do a :code:`select` in the same way as for GET binary output.
+
+.. code-block:: sql
+
+  CREATE FUNCTION get_descriptions(..) RETURNS SETOF TABLE(id int, description text) ..
+
+.. tabs::
+
+  .. code-tab:: http
+
+    POST /rpc/get_descriptions?select=description HTTP/1.1
+    Accept: text/plain
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/rpc/get_descriptions?select=description" \
+      -X POST -H "Accept: text/plain"
+
+.. note::
+
+  If more than one row would be returned the binary/plain-text/xml results will be concatenated with no delimiter.
diff --git a/docs/references/api/schemas.rst b/docs/references/api/schemas.rst
new file mode 100644
index 000000000..359f5c959
--- /dev/null
+++ b/docs/references/api/schemas.rst
@@ -0,0 +1,107 @@
+.. _schemas:
+
+Schemas
+=======
+
+PostgREST can expose a single or multiple schema's tables, views and functions. The :ref:`active database role <roles>` must have the usage privilege on the schemas to access them.
+
+Single schema
+-------------
+
+To expose a single schema, specify a single value in :ref:`db-schemas`.
+
+.. code:: bash
+
+   db-schemas = "api"
+
+This schema is added to the `search_path <https://www.postgresql.org/docs/current/ddl-schemas.html#DDL-SCHEMAS-PATH>`_ of every request using :ref:`tx_settings`.
+
+.. _multiple-schemas:
+
+Multiple schemas
+----------------
+
+To expose multiple schemas, specify a comma-separated list on :ref:`db-schemas`:
+
+.. code:: bash
+
+   db-schemas = "tenant1, tenant2"
+
+To switch schemas, use the ``Accept-Profile`` and ``Content-Profile`` headers.
+
+If you don't specify a Profile header, the first schema in the list(``tenant1`` here) is selected as the default schema.
+
+Only the selected schema gets added to the `search_path <https://www.postgresql.org/docs/current/ddl-schemas.html#DDL-SCHEMAS-PATH>`_ of every request.
+
+.. note::
+
+   These headers are based on the "Content Negotiation by Profile" spec: https://www.w3.org/TR/dx-prof-conneg
+
+GET/HEAD
+~~~~~~~~
+
+For GET or HEAD, select the schema with ``Accept-Profile``.
+
+.. tabs::
+
+  .. code-tab:: http
+
+     GET /items HTTP/1.1
+     Accept-Profile: tenant2
+
+  .. code-tab:: bash Curl
+
+     curl "http://localhost:3000/items" \
+       -H "Accept-Profile: tenant2"
+
+Other methods
+~~~~~~~~~~~~~
+
+For POST, PATCH, PUT and DELETE, select the schema with ``Content-Profile``.
+
+.. tabs::
+
+  .. code-tab:: http
+
+     POST /items HTTP/1.1
+     Content-Profile: tenant2
+
+     {...}
+
+  .. code-tab:: bash Curl
+
+     curl "http://localhost:3000/items" \
+       -X POST -H "Content-Type: application/json" \
+       -H "Content-Profile: tenant2" \
+       -d '{...}'
+
+You can also select the schema for :ref:`s_procs` and :ref:`open-api`.
+
+Restricted schemas
+~~~~~~~~~~~~~~~~~~
+
+You can only switch to a schema included in :ref:`db-schemas`. Using another schema will result in an error:
+
+.. tabs::
+
+  .. code-tab:: http
+
+     GET /items HTTP/1.1
+     Accept-Profile: tenant3
+
+     {...}
+
+  .. code-tab:: bash Curl
+
+     curl "http://localhost:3000/items" \
+       -H "Accept-Profile: tenant3"
+
+.. code-block::
+
+  {
+    "code":"PGRST106",
+    "details":null,
+    "hint":null,
+    "message":"The schema must be one of the following: tenant1, tenant2"
+  }
+
diff --git a/docs/references/api/stored_procedures.rst b/docs/references/api/stored_procedures.rst
new file mode 100644
index 000000000..64fa86d49
--- /dev/null
+++ b/docs/references/api/stored_procedures.rst
@@ -0,0 +1,456 @@
+.. _s_procs:
+
+Stored Procedures
+=================
+
+*"A single resource can be the equivalent of a database stored procedure, with the power to abstract state changes over any number of storage items"* -- `Roy T. Fielding <https://roy.gbiv.com/untangled/2008/rest-apis-must-be-hypertext-driven#comment-743>`_
+
+Every stored procedure in the :ref:`exposed schema <schemas>` and accessible by the :ref:`active database role <roles>` is executable under the :code:`/rpc` prefix. Procedures can perform any operations allowed by PostgreSQL (read data, modify data, and even DDL operations).
+
+If they return table types, Stored Procedures can:
+
+- Use all the same :ref:`read filters as Tables and Views <read>` (horizontal/vertical filtering, counts, limits, etc.).
+- Use :ref:`Resource Embedding <s_proc_embed>`, if the returned table type has relationships to other tables.
+
+.. note::
+
+  Why the ``/rpc`` prefix? PostgreSQL allows a table or view to have the same name as a function. The prefix allows us to avoid routes collisions.
+
+Calling with POST
+-----------------
+
+To supply arguments in an API call, include a JSON object in the request payload. Each key/value of the object will become an argument.
+
+For instance, assume we have created this function in the database.
+
+.. code-block:: plpgsql
+
+  CREATE FUNCTION add_them(a integer, b integer)
+  RETURNS integer AS $$
+   SELECT a + b;
+  $$ LANGUAGE SQL IMMUTABLE;
+
+.. important::
+
+  Whenever you create or change a function you must refresh PostgREST's schema cache. See the section :ref:`schema_reloading`.
+
+The client can call it by posting an object like
+
+.. tabs::
+
+  .. code-tab:: http
+
+    POST /rpc/add_them HTTP/1.1
+
+    { "a": 1, "b": 2 }
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/rpc/add_them" \
+      -X POST -H "Content-Type: application/json" \
+      -d '{ "a": 1, "b": 2 }'
+
+.. code-block:: json
+
+  3
+
+.. note::
+
+  PostgreSQL converts identifier names to lowercase unless you quote them like:
+
+  .. code-block:: postgres
+
+    CREATE FUNCTION "someFunc"("someParam" text) ...
+
+Calling with GET
+----------------
+
+If the function doesn't modify the database, it will also run under the GET method(see :ref:`access_mode`).
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /rpc/add_them?a=1&b=2 HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/rpc/add_them?a=1&b=2"
+
+The function parameter names match the JSON object keys in the POST case, for the GET case they match the query parameters ``?a=1&b=2``.
+
+.. _s_proc_single_json:
+
+Functions with a single JSON parameter
+--------------------------------------
+
+You can also call a function that takes a single parameter of type JSON by sending the header :code:`Prefer: params=single-object` with your request. That way the JSON request body will be used as the single argument.
+
+.. code-block:: plpgsql
+
+  CREATE FUNCTION mult_them(param json) RETURNS int AS $$
+    SELECT (param->>'x')::int * (param->>'y')::int
+  $$ LANGUAGE SQL;
+
+.. tabs::
+
+  .. code-tab:: http
+
+    POST /rpc/mult_them HTTP/1.1
+    Prefer: params=single-object
+
+    { "x": 4, "y": 2 }
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/rpc/mult_them" \
+      -X POST -H "Content-Type: application/json" \
+      -H "Prefer: params=single-object" \
+      -d '{ "x": 4, "y": 2 }'
+
+.. code-block:: json
+
+  8
+
+.. _s_proc_single_unnamed:
+
+Functions with a single unnamed parameter
+-----------------------------------------
+
+You can make a POST request to a function with a single unnamed parameter to send raw ``json/jsonb``, ``bytea``, ``text`` or ``xml`` data.
+
+To send raw JSON, the function must have a single unnamed ``json`` or ``jsonb`` parameter and the header ``Content-Type: application/json`` must be included in the request.
+
+.. code-block:: plpgsql
+
+  CREATE FUNCTION mult_them(json) RETURNS int AS $$
+    SELECT ($1->>'x')::int * ($1->>'y')::int
+  $$ LANGUAGE SQL;
+
+.. tabs::
+
+  .. code-tab:: http
+
+    POST /rpc/mult_them HTTP/1.1
+    Content-Type: application/json
+
+    { "x": 4, "y": 2 }
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/rpc/mult_them" \
+      -X POST -H "Content-Type: application/json" \
+      -d '{ "x": 4, "y": 2 }'
+
+.. code-block:: json
+
+  8
+
+.. note::
+
+  If an overloaded function has a single ``json`` or ``jsonb`` unnamed parameter, PostgREST will call this function as a fallback provided that no other overloaded function is found with the parameters sent in the POST request.
+
+To send raw XML, the parameter type must be ``xml`` and the header ``Content-Type: text/xml`` must be included in the request.
+
+To send raw binary, the parameter type must be ``bytea`` and the header ``Content-Type: application/octet-stream`` must be included in the request.
+
+.. code-block:: plpgsql
+
+  CREATE TABLE files(blob bytea);
+
+  CREATE FUNCTION upload_binary(bytea) RETURNS void AS $$
+    INSERT INTO files(blob) VALUES ($1);
+  $$ LANGUAGE SQL;
+
+.. tabs::
+
+  .. code-tab:: http
+
+    POST /rpc/upload_binary HTTP/1.1
+    Content-Type: application/octet-stream
+
+    file_name.ext
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/rpc/upload_binary" \
+      -X POST -H "Content-Type: application/octet-stream" \
+      --data-binary "@file_name.ext"
+
+.. code-block:: http
+
+  HTTP/1.1 200 OK
+
+  [ ... ]
+
+To send raw text, the parameter type must be ``text`` and the header ``Content-Type: text/plain`` must be included in the request.
+
+.. _s_procs_array:
+
+Functions with array parameters
+-------------------------------
+
+You can call a function that takes an array parameter:
+
+.. code-block:: postgres
+
+   create function plus_one(arr int[]) returns int[] as $$
+      SELECT array_agg(n + 1) FROM unnest($1) AS n;
+   $$ language sql;
+
+.. tabs::
+
+  .. code-tab:: http
+
+     POST /rpc/plus_one HTTP/1.1
+     Content-Type: application/json
+
+     {"arr": [1,2,3,4]}
+
+  .. code-tab:: bash Curl
+
+     curl "http://localhost:3000/rpc/plus_one" \
+       -X POST -H "Content-Type: application/json" \
+       -d '{"arr": [1,2,3,4]}'
+
+.. code-block:: json
+
+   [2,3,4,5]
+
+For calling the function with GET, you can pass the array as an `array literal <https://www.postgresql.org/docs/current/arrays.html#ARRAYS-INPUT>`_,
+as in ``{1,2,3,4}``. Note that the curly brackets have to be urlencoded(``{`` is ``%7B`` and ``}`` is ``%7D``).
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /rpc/plus_one?arr=%7B1,2,3,4%7D' HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/rpc/plus_one?arr=%7B1,2,3,4%7D'"
+
+.. note::
+
+   For versions prior to PostgreSQL 10, to pass a PostgreSQL native array on a POST payload, you need to quote it and use an array literal:
+
+   .. tabs::
+
+     .. code-tab:: http
+
+       POST /rpc/plus_one HTTP/1.1
+
+       { "arr": "{1,2,3,4}" }
+
+     .. code-tab:: bash Curl
+
+       curl "http://localhost:3000/rpc/plus_one" \
+         -X POST -H "Content-Type: application/json" \
+         -d '{ "arr": "{1,2,3,4}" }'
+
+   In these versions we recommend using function parameters of type JSON to accept arrays from the client.
+
+.. _s_procs_variadic:
+
+Variadic functions
+------------------
+
+You can call a variadic function by passing a JSON array in a POST request:
+
+.. code-block:: postgres
+
+   create function plus_one(variadic v int[]) returns int[] as $$
+      SELECT array_agg(n + 1) FROM unnest($1) AS n;
+   $$ language sql;
+
+.. tabs::
+
+  .. code-tab:: http
+
+    POST /rpc/plus_one HTTP/1.1
+    Content-Type: application/json
+
+    {"v": [1,2,3,4]}
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/rpc/plus_one" \
+      -X POST -H "Content-Type: application/json" \
+      -d '{"v": [1,2,3,4]}'
+
+.. code-block:: json
+
+   [2,3,4,5]
+
+In a GET request, you can repeat the same parameter name:
+
+.. tabs::
+
+  .. code-tab:: http
+
+     GET /rpc/plus_one?v=1&v=2&v=3&v=4 HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+     curl "http://localhost:3000/rpc/plus_one?v=1&v=2&v=3&v=4"
+
+Repeating also works in POST requests with ``Content-Type: application/x-www-form-urlencoded``:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    POST /rpc/plus_one HTTP/1.1
+    Content-Type: application/x-www-form-urlencoded
+
+    v=1&v=2&v=3&v=4
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/rpc/plus_one" \
+      -X POST -H "Content-Type: application/x-www-form-urlencoded" \
+      -d 'v=1&v=2&v=3&v=4'
+
+Table-Valued functions
+----------------------
+
+A function that returns a table type can be filtered using the same filters as :ref:`tables and views <tables_views>`. They can also use :ref:`Resource Embedding <s_proc_embed>`.
+
+.. code-block:: postgres
+
+  CREATE FUNCTION best_films_2017() RETURNS SETOF films ..
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /rpc/best_films_2017?select=title,director:directors(*) HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/rpc/best_films_2017?select=title,director:directors(*)"
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /rpc/best_films_2017?rating=gt.8&order=title.desc HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/rpc/best_films_2017?rating=gt.8&order=title.desc"
+
+.. _scalar_functions:
+
+Scalar functions
+----------------
+
+PostgREST will detect if the function is scalar or table-valued and will shape the response format accordingly:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /rpc/add_them?a=1&b=2 HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/rpc/add_them?a=1&b=2"
+
+.. code-block:: json
+
+  3
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /rpc/best_films_2017 HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/rpc/best_films_2017"
+
+.. code-block:: json
+
+  [
+    { "title": "Okja", "rating": 7.4},
+    { "title": "Call me by your name", "rating": 8},
+    { "title": "Blade Runner 2049", "rating": 8.1}
+  ]
+
+To manually choose a return format such as binary, plain text or XML, see the section :ref:`scalar_return_formats`.
+
+Overloaded functions
+--------------------
+
+You can call overloaded functions with different number of arguments.
+
+.. code-block:: postgres
+
+  CREATE FUNCTION rental_duration(customer_id integer) ..
+
+  CREATE FUNCTION rental_duration(customer_id integer, from_date date) ..
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /rpc/rental_duration?customer_id=232 HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/rpc/rental_duration?customer_id=232"
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /rpc/rental_duration?customer_id=232&from_date=2018-07-01 HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/rpc/rental_duration?customer_id=232&from_date=2018-07-01"
+
+.. important::
+
+  Overloaded functions with the same argument names but different types are not supported.
+
+.. _bulk_call:
+
+Bulk Call
+---------
+
+It's possible to call a function in a bulk way, analogously to :ref:`bulk_insert`. To do this, you need to add the
+``Prefer: params=multiple-objects`` header to your request.
+
+.. tabs::
+
+  .. code-tab:: http
+
+    POST /rpc/add_them HTTP/1.1
+    Content-Type: text/csv
+    Prefer: params=multiple-objects
+
+    a,b
+    1,2
+    3,4
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/rpc/add_them" \
+      -X POST -H "Content-Type: text/csv" \
+      -H "Prefer: params=multiple-objects" \
+      --data-binary @- << EOF
+    a,b
+    1,2
+    3,4
+    EOF
+
+.. code-block:: json
+
+   [ 3, 7 ]
+
+If you have large payloads to process, it's preferable you instead use a function with an :ref:`array parameter <s_procs_array>` or JSON parameter, as this will be more efficient.
+
+It's also possible to :ref:`Specify Columns <specify_columns>` on functions calls.
diff --git a/docs/references/api/tables_views.rst b/docs/references/api/tables_views.rst
new file mode 100644
index 000000000..99a919e49
--- /dev/null
+++ b/docs/references/api/tables_views.rst
@@ -0,0 +1,1060 @@
+.. _tables_views:
+
+Tables and Views
+################
+
+All views and tables of the :ref:`exposed schema <schemas>` and accessible by the :ref:`active database role <roles>` are available for querying. They are exposed in one-level deep routes.
+
+.. _read:
+
+Read
+====
+
+For instance the full contents of a table `people` is returned at
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /people HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/people"
+
+There are no deeply/nested/routes. Each route provides OPTIONS, GET, HEAD, POST, PATCH, and DELETE verbs depending entirely on database permissions.
+
+.. note::
+
+  Why not provide nested routes? Many APIs allow nesting to retrieve related information, such as :code:`/films/1/director`. We offer a more flexible mechanism (inspired by GraphQL) to embed related information. It can handle one-to-many and many-to-many relationships. This is covered in the section about :ref:`resource_embedding`.
+
+
+.. _h_filter:
+
+Horizontal Filtering (Rows)
+---------------------------
+
+You can filter result rows by adding conditions on columns. For instance, to return people aged under 13 years old:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /people?age=lt.13 HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/people?age=lt.13"
+
+You can evaluate multiple conditions on columns by adding more query string parameters. For instance, to return people who are 18 or older **and** are students:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /people?age=gte.18&student=is.true HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/people?age=gte.18&student=is.true"
+
+.. _operators:
+
+Operators
+~~~~~~~~~
+
+These operators are available:
+
+============  ========================  ==================================================================================
+Abbreviation  In PostgreSQL             Meaning
+============  ========================  ==================================================================================
+eq            :code:`=`                 equals
+gt            :code:`>`                 greater than
+gte           :code:`>=`                greater than or equal
+lt            :code:`<`                 less than
+lte           :code:`<=`                less than or equal
+neq           :code:`<>` or :code:`!=`  not equal
+like          :code:`LIKE`              LIKE operator (to avoid `URL encoding <https://en.wikipedia.org/wiki/Percent-encoding>`_ you can use ``*`` as an alias of the percent sign ``%`` for the pattern)
+ilike         :code:`ILIKE`             ILIKE operator (to avoid `URL encoding <https://en.wikipedia.org/wiki/Percent-encoding>`_ you can use ``*`` as an alias of the percent sign ``%`` for the pattern)
+match         :code:`~`                 ~ operator, see :ref:`pattern_matching`
+imatch        :code:`~*`                ~* operator, see :ref:`pattern_matching`
+in            :code:`IN`                one of a list of values, e.g. :code:`?a=in.(1,2,3)`
+                                        – also supports commas in quoted strings like
+                                        :code:`?a=in.("hi,there","yes,you")`
+is            :code:`IS`                checking for exact equality (null,true,false,unknown)
+fts           :code:`@@`                :ref:`fts` using to_tsquery
+plfts         :code:`@@`                :ref:`fts` using plainto_tsquery
+phfts         :code:`@@`                :ref:`fts` using phraseto_tsquery
+wfts          :code:`@@`                :ref:`fts` using websearch_to_tsquery
+cs            :code:`@>`                contains e.g. :code:`?tags=cs.{example, new}`
+cd            :code:`<@`                contained in e.g. :code:`?values=cd.{1,2,3}`
+ov            :code:`&&`                overlap (have points in common), e.g. :code:`?period=ov.[2017-01-01,2017-06-30]` –
+                                        also supports array types, use curly braces instead of square brackets e.g.
+                                        :code: `?arr=ov.{1,3}`
+sl            :code:`<<`                strictly left of, e.g. :code:`?range=sl.(1,10)`
+sr            :code:`>>`                strictly right of
+nxr           :code:`&<`                does not extend to the right of, e.g. :code:`?range=nxr.(1,10)`
+nxl           :code:`&>`                does not extend to the left of
+adj           :code:`-|-`               is adjacent to, e.g. :code:`?range=adj.(1,10)`
+not           :code:`NOT`               negates another operator, see :ref:`logical_operators`
+or            :code:`OR`                logical :code:`OR`, see :ref:`logical_operators`
+and           :code:`AND`               logical :code:`AND`, see :ref:`logical_operators`
+============  ========================  ==================================================================================
+
+For more complicated filters you will have to create a new view in the database, or use a stored procedure. For instance, here's a view to show "today's stories" including possibly older pinned stories:
+
+.. code-block:: postgresql
+
+  CREATE VIEW fresh_stories AS
+  SELECT *
+    FROM stories
+   WHERE pinned = true
+      OR published > now() - interval '1 day'
+  ORDER BY pinned DESC, published DESC;
+
+The view will provide a new endpoint:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /fresh_stories HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/fresh_stories"
+
+.. _logical_operators:
+
+Logical operators
+~~~~~~~~~~~~~~~~~
+
+Multiple conditions on columns are evaluated using ``AND`` by default, but you can combine them using ``OR`` with the ``or`` operator. For example, to return people under 18 **or** over 21:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /people?or=(age.lt.18,age.gt.21) HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/people?or=(age.lt.18,age.gt.21)"
+
+To **negate** any operator, you can prefix it with :code:`not` like :code:`?a=not.eq.2` or :code:`?not.and=(a.gte.0,a.lte.100)` .
+
+You can also apply complex logic to the conditions:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /people?grade=gte.90&student=is.true&or=(age.eq.14,not.and(age.gte.11,age.lte.17)) HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/people?grade=gte.90&student=is.true&or=(age.eq.14,not.and(age.gte.11,age.lte.17))"
+
+.. _pattern_matching:
+
+Pattern Matching
+~~~~~~~~~~~~~~~~
+
+The pattern-matching operators (:code:`like`, :code:`ilike`, :code:`match`, :code:`imatch`) exist to support filtering data using patterns instead of concrete strings, as described in the `PostgreSQL docs <https://www.postgresql.org/docs/current/functions-matching.html>`__.
+
+To ensure best performance on larger data sets, an `appropriate index <https://www.postgresql.org/docs/current/pgtrgm.html#id-1.11.7.44.8>`__ should be used and even then, it depends on the pattern value and actual data statistics whether an existing index will be used by the query planner or not.
+
+.. _fts:
+
+Full-Text Search
+~~~~~~~~~~~~~~~~
+
+The :code:`fts` filter mentioned above has a number of options to support flexible textual queries, namely the choice of plain vs phrase search and the language used for stemming. Suppose that :code:`tsearch` is a table with column :code:`my_tsv`, of type `tsvector <https://www.postgresql.org/docs/current/datatype-textsearch.html>`_. The following examples illustrate the possibilities.
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /tsearch?my_tsv=fts(french).amusant HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/tsearch?my_tsv=fts(french).amusant"
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /tsearch?my_tsv=plfts.The%20Fat%20Cats HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/tsearch?my_tsv=plfts.The%20Fat%20Cats"
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /tsearch?my_tsv=not.phfts(english).The%20Fat%20Cats HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/tsearch?my_tsv=not.phfts(english).The%20Fat%20Cats"
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /tsearch?my_tsv=not.wfts(french).amusant HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/tsearch?my_tsv=not.wfts(french).amusant"
+
+Using `websearch_to_tsquery` requires PostgreSQL of version at least 11.0 and will raise an error in earlier versions of the database.
+
+.. _v_filter:
+
+Vertical Filtering (Columns)
+----------------------------
+
+When certain columns are wide (such as those holding binary data), it is more efficient for the server to withhold them in a response. The client can specify which columns are required using the sql:`select` parameter.
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /people?select=first_name,age HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/people?select=first_name,age"
+
+.. code-block:: json
+
+  [
+    {"first_name": "John", "age": 30},
+    {"first_name": "Jane", "age": 20}
+  ]
+
+The default is ``*``, meaning all columns. This value will become more important below in :ref:`resource_embedding`.
+
+Renaming Columns
+~~~~~~~~~~~~~~~~
+
+You can rename the columns by prefixing them with an alias followed by the colon ``:`` operator.
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /people?select=fullName:full_name,birthDate:birth_date HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/people?select=fullName:full_name,birthDate:birth_date"
+
+.. code-block:: json
+
+  [
+    {"fullName": "John Doe", "birthDate": "04/25/1988"},
+    {"fullName": "Jane Doe", "birthDate": "01/12/1998"}
+  ]
+
+.. _casting_columns:
+
+Casting Columns
+~~~~~~~~~~~~~~~
+
+Casting the columns is possible by suffixing them with the double colon ``::`` plus the desired type.
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /people?select=full_name,salary::text HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/people?select=full_name,salary::text"
+
+.. code-block:: json
+
+  [
+    {"full_name": "John Doe", "salary": "90000.00"},
+    {"full_name": "Jane Doe", "salary": "120000.00"}
+  ]
+
+.. _json_columns:
+
+JSON Columns
+------------
+
+You can specify a path for a ``json`` or ``jsonb`` column using the arrow operators(``->`` or ``->>``) as per the `PostgreSQL docs <https://www.postgresql.org/docs/current/functions-json.html>`__.
+
+.. code-block:: postgres
+
+  CREATE TABLE people (
+    id int,
+    json_data json
+  );
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /people?select=id,json_data->>blood_type,json_data->phones HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/people?select=id,json_data->>blood_type,json_data->phones"
+
+.. code-block:: json
+
+  [
+    { "id": 1, "blood_type": "A-", "phones": [{"country_code": "61", "number": "917-929-5745"}] },
+    { "id": 2, "blood_type": "O+", "phones": [{"country_code": "43", "number": "512-446-4988"}, {"country_code": "43", "number": "213-891-5979"}] }
+  ]
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /people?select=id,json_data->phones->0->>number HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/people?select=id,json_data->phones->0->>number"
+
+.. code-block:: json
+
+  [
+    { "id": 1, "number": "917-929-5745"},
+    { "id": 2, "number": "512-446-4988"}
+  ]
+
+This also works with filters:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /people?select=id,json_data->blood_type&json_data->>blood_type=eq.A- HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/people?select=id,json_data->blood_type&json_data->>blood_type=eq.A-"
+
+.. code-block:: json
+
+  [
+    { "id": 1, "blood_type": "A-" },
+    { "id": 3, "blood_type": "A-" },
+    { "id": 7, "blood_type": "A-" }
+  ]
+
+Note that ``->>`` is used to compare ``blood_type`` as ``text``. To compare with an integer value use ``->``:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /people?select=id,json_data->age&json_data->age=gt.20 HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/people?select=id,json_data->age&json_data->age=gt.20"
+
+.. code-block:: json
+
+  [
+    { "id": 11, "age": 25 },
+    { "id": 12, "age": 30 },
+    { "id": 15, "age": 35 }
+  ]
+.. _composite_array_columns:
+
+Composite / Array Columns
+-------------------------
+
+The arrow operators(``->``, ``->>``) can also be used for accessing composite fields and array elements.
+
+.. code-block:: postgres
+
+  CREATE TYPE coordinates (
+    lat decimal(8,6),
+    long decimal(9,6)
+  );
+
+  CREATE TABLE countries (
+    id int,
+    location coordinates,
+    languages text[]
+  );
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /countries?select=id,location->>lat,location->>long,primary_language:languages->0&location->lat=gte.19 HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/countries?select=id,location->>lat,location->>long,primary_language:languages->0&location->lat=gte.19"
+
+.. code-block:: json
+
+  [
+    {
+      "id": 5,
+      "lat": "19.741755",
+      "long": "-155.844437",
+      "primary_language": "en"
+    }
+  ]
+
+.. important::
+
+  When using the ``->`` and ``->>`` operators, PostgREST uses a query like ``to_jsonb(<col>)->'field'``. To make filtering and ordering on those nested fields use an index, the index needs to be created on the same expression, including the ``to_jsonb(...)`` call:
+
+  .. code-block:: postgres
+
+    CREATE INDEX ON mytable ((to_jsonb(data) -> 'identification' ->> 'registration_number'));
+
+.. _computed_cols:
+
+Computed / Virtual Columns
+--------------------------
+
+Filters may be applied to computed columns(**a.k.a. virtual columns**) as well as actual table/view columns, even though the computed columns will not appear in the output. For example, to search first and last names at once we can create a computed column that will not appear in the output but can be used in a filter:
+
+.. code-block:: postgres
+
+  CREATE TABLE people (
+    fname text,
+    lname text
+  );
+
+  CREATE FUNCTION full_name(people) RETURNS text AS $$
+    SELECT $1.fname || ' ' || $1.lname;
+  $$ LANGUAGE SQL;
+
+  -- (optional) add an index to speed up anticipated query
+  CREATE INDEX people_full_name_idx ON people
+    USING GIN (to_tsvector('english', full_name(people)));
+
+A full-text search on the computed column:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /people?full_name=fts.Beckett HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/people?full_name=fts.Beckett"
+
+As mentioned, computed columns do not appear in the output by default. However you can include them by listing them in the vertical filtering :code:`select` parameter:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /people?select=*,full_name HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/people?select=*,full_name"
+
+.. important::
+
+  Computed columns must be created in the :ref:`exposed schema <db-schemas>` or in a schema in the :ref:`extra search path <db-extra-search-path>` to be used in this way. When placing the computed column in the :ref:`exposed schema <db-schemas>` you can use an **unnamed** argument, as in the example above, to prevent it from being exposed as an :ref:`RPC <s_procs>` under ``/rpc``.
+
+
+.. _ordering:
+
+Ordering
+--------
+
+The reserved word ``order`` reorders the response rows. It uses a comma-separated list of columns and directions:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /people?order=age.desc,height.asc HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/people?order=age.desc,height.asc"
+
+If no direction is specified it defaults to ascending order:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /people?order=age HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/people?order=age"
+
+If you care where nulls are sorted, add ``nullsfirst`` or ``nullslast``:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /people?order=age.nullsfirst HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/people?order=age.nullsfirst"
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /people?order=age.desc.nullslast HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/people?order=age.desc.nullslast"
+
+You can also use :ref:`computed_cols` to order the results, even though the computed columns will not appear in the output. You can sort by nested fields of :ref:`json_columns` with the JSON operators.
+
+.. _limits:
+
+Limits and Pagination
+---------------------
+
+PostgREST uses HTTP range headers to describe the size of results. Every response contains the current range and, if requested, the total number of results:
+
+.. code-block:: http
+
+  HTTP/1.1 200 OK
+  Range-Unit: items
+  Content-Range: 0-14/*
+
+Here items zero through fourteen are returned. This information is available in every response and can help you render pagination controls on the client. This is an RFC7233-compliant solution that keeps the response JSON cleaner.
+
+There are two ways to apply a limit and offset rows: through request headers or query parameters. When using headers you specify the range of rows desired. This request gets the first twenty people.
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /people HTTP/1.1
+    Range-Unit: items
+    Range: 0-19
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/people" -i \
+      -H "Range-Unit: items" \
+      -H "Range: 0-19"
+
+Note that the server may respond with fewer if unable to meet your request:
+
+.. code-block:: http
+
+  HTTP/1.1 200 OK
+  Range-Unit: items
+  Content-Range: 0-17/*
+
+You may also request open-ended ranges for an offset with no limit, e.g. :code:`Range: 10-`.
+
+The other way to request a limit or offset is with query parameters. For example
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /people?limit=15&offset=30 HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/people?limit=15&offset=30"
+
+This method is also useful for embedded resources, which we will cover in another section. The server always responds with range headers even if you use query parameters to limit the query.
+
+.. _exact_count:
+
+Exact Count
+-----------
+
+In order to obtain the total size of the table or view (such as when rendering the last page link in a pagination control), specify ``Prefer: count=exact`` as a request header:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    HEAD /bigtable HTTP/1.1
+    Range-Unit: items
+    Range: 0-24
+    Prefer: count=exact
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/bigtable" -I \
+      -H "Range-Unit: items" \
+      -H "Range: 0-24" \
+      -H "Prefer: count=exact"
+
+Note that the larger the table the slower this query runs in the database. The server will respond with the selected range and total
+
+.. code-block:: http
+
+  HTTP/1.1 206 Partial Content
+  Range-Unit: items
+  Content-Range: 0-24/3573458
+
+.. _planned_count:
+
+Planned Count
+-------------
+
+To avoid the shortcomings of :ref:`exact count <exact_count>`, PostgREST can leverage PostgreSQL statistics and get a fairly accurate and fast count.
+To do this, specify the ``Prefer: count=planned`` header.
+
+.. tabs::
+
+  .. code-tab:: http
+
+    HEAD /bigtable?limit=25 HTTP/1.1
+    Prefer: count=planned
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/bigtable?limit=25" -I \
+      -H "Prefer: count=planned"
+
+.. code-block:: http
+
+  HTTP/1.1 206 Partial Content
+  Content-Range: 0-24/3572000
+
+Note that the accuracy of this count depends on how up-to-date are the PostgreSQL statistics tables.
+For example in this case, to increase the accuracy of the count you can do ``ANALYZE bigtable``.
+See `ANALYZE <https://www.postgresql.org/docs/current/sql-analyze.html>`_ for more details.
+
+.. _estimated_count:
+
+Estimated Count
+---------------
+
+When you are interested in the count, the relative error is important. If you have a :ref:`planned count <planned_count>` of 1000000 and the exact count is
+1001000, the error is small enough to be ignored. But with a planned count of 7, an exact count of 28 would be a huge misprediction.
+
+In general, when having smaller row-counts, the estimated count should be as close to the exact count as possible.
+
+To help with these cases, PostgREST can get the exact count up until a threshold and get the planned count when
+that threshold is surpassed. To use this behavior, you can specify the ``Prefer: count=estimated`` header. The **threshold** is
+defined by :ref:`db-max-rows`.
+
+Here's an example. Suppose we set ``db-max-rows=1000`` and ``smalltable`` has 321 rows, then we'll get the exact count:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    HEAD /smalltable?limit=25 HTTP/1.1
+    Prefer: count=estimated
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/smalltable?limit=25" -I \
+      -H "Prefer: count=estimated"
+
+.. code-block:: http
+
+  HTTP/1.1 206 Partial Content
+  Content-Range: 0-24/321
+
+If we make a similar request on ``bigtable``, which has 3573458 rows, we would get the planned count:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    HEAD /bigtable?limit=25 HTTP/1.1
+    Prefer: count=estimated
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/bigtable?limit=25" -I \
+      -H "Prefer: count=estimated"
+
+.. code-block:: http
+
+  HTTP/1.1 206 Partial Content
+  Content-Range: 0-24/3572000
+
+.. _update:
+
+Update
+======
+
+To update a row or rows in a table, use the PATCH verb. Use :ref:`h_filter` to specify which record(s) to update. Here is an example query setting the :code:`category` column to child for all people below a certain age.
+
+.. tabs::
+
+  .. code-tab:: http
+
+    PATCH /people?age=lt.13 HTTP/1.1
+
+    { "category": "child" }
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/people?age=lt.13" \
+      -X PATCH -H "Content-Type: application/json" \
+      -d '{ "category": "child" }'
+
+Updates also support :code:`Prefer: return=representation` plus :ref:`v_filter`.
+
+.. warning::
+
+  Beware of accidentally updating every row in a table. To learn to prevent that see :ref:`block_fulltable`.
+
+.. _insert:
+
+Insert
+======
+
+All tables and `auto-updatable views <https://www.postgresql.org/docs/current/sql-createview.html#SQL-CREATEVIEW-UPDATABLE-VIEWS>`_ can be modified through the API, subject to permissions of the requester's database role.
+
+To create a row in a database table post a JSON object whose keys are the names of the columns you would like to create. Missing properties will be set to default values when applicable.
+
+.. tabs::
+
+  .. code-tab:: http
+
+    POST /table_name HTTP/1.1
+
+    { "col1": "value1", "col2": "value2" }
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/table_name" \
+      -X POST -H "Content-Type: application/json" \
+      -d '{ "col1": "value1", "col2": "value2" }'
+
+If the table has a primary key, the response can contain a :code:`Location` header describing where to find the new object by including the header :code:`Prefer: return=headers-only` in the request. Make sure that the table is not write-only, otherwise constructing the :code:`Location` header will cause a permissions error.
+
+On the other end of the spectrum you can get the full created object back in the response to your request by including the header :code:`Prefer: return=representation`. That way you won't have to make another HTTP call to discover properties that may have been filled in on the server side. You can also apply the standard :ref:`v_filter` to these results.
+
+URL encoded payloads can be posted with ``Content-Type: application/x-www-form-urlencoded``.
+
+.. tabs::
+
+  .. code-tab:: http
+
+    POST /people HTTP/1.1
+    Content-Type: application/x-www-form-urlencoded
+
+    name=John+Doe&age=50&weight=80
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/people" \
+      -X POST -H "Content-Type: application/x-www-form-urlencoded" \
+      -d "name=John+Doe&age=50&weight=80"
+
+.. note::
+
+  When inserting a row you must post a JSON object, not quoted JSON.
+
+  .. code::
+
+    Yes
+    { "a": 1, "b": 2 }
+
+    No
+    "{ \"a\": 1, \"b\": 2 }"
+
+  Some JavaScript libraries will post the data incorrectly if you're not careful. For best results try one of the :ref:`clientside_libraries` built for PostgREST.
+
+.. important::
+
+  It's recommended that you `use triggers instead of rules <https://wiki.postgresql.org/wiki/Don%27t_Do_This#Don.27t_use_rules>`_.
+  Insertion on views with complex `rules <https://www.postgresql.org/docs/current/sql-createrule.html>`_ might not work out of the box with PostgREST due to its usage of CTEs.
+  If you want to keep using rules, a workaround is to wrap the view insertion in a stored procedure and call it through the :ref:`s_procs` interface.
+  For more details, see this `github issue <https://github.com/PostgREST/postgrest/issues/1283>`_.
+
+.. _bulk_insert:
+
+Bulk Insert
+-----------
+
+Bulk insert works exactly like single row insert except that you provide either a JSON array of objects having uniform keys, or lines in CSV format. This not only minimizes the HTTP requests required but uses a single INSERT statement on the back-end for efficiency.
+
+To bulk insert CSV simply post to a table route with :code:`Content-Type: text/csv` and include the names of the columns as the first row. For instance
+
+.. tabs::
+
+  .. code-tab:: http
+
+    POST /people HTTP/1.1
+    Content-Type: text/csv
+
+    name,age,height
+    J Doe,62,70
+    Jonas,10,55
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/people" \
+      -X POST -H "Content-Type: text/csv" \
+      --data-binary @- << EOF
+    name,age,height
+    J Doe,62,70
+    Jonas,10,55
+    EOF
+
+An empty field (:code:`,,`) is coerced to an empty string and the reserved word :code:`NULL` is mapped to the SQL null value. Note that there should be no spaces between the column names and commas.
+
+To bulk insert JSON post an array of objects having all-matching keys
+
+.. tabs::
+
+  .. code-tab:: http
+
+    POST /people HTTP/1.1
+    Content-Type: application/json
+
+    [
+      { "name": "J Doe", "age": 62, "height": 70 },
+      { "name": "Janus", "age": 10, "height": 55 }
+    ]
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/people" \
+      -X POST -H "Content-Type: application/json" \
+      -d @- << EOF
+      [
+        { "name": "J Doe", "age": 62, "height": 70 },
+        { "name": "Janus", "age": 10, "height": 55 }
+      ]
+    EOF
+
+.. _specify_columns:
+
+Specifying Columns
+------------------
+
+By using the :code:`columns` query parameter it's possible to specify the payload keys that will be inserted and ignore the rest of the payload.
+
+.. tabs::
+
+  .. code-tab:: http
+
+     POST /datasets?columns=source,publication_date,figure HTTP/1.1
+     Content-Type: application/json
+
+     {
+       "source": "Natural Disaster Prevention and Control",
+       "publication_date": "2015-09-11",
+       "figure": 1100,
+       "location": "...",
+       "comment": "...",
+       "extra": "...",
+       "stuff": "..."
+     }
+
+  .. code-tab:: bash Curl
+
+     curl "http://localhost:3000/datasets?columns=source,publication_date,figure" \
+       -X POST -H "Content-Type: application/json" \
+       -d @- << EOF
+       {
+         "source": "Natural Disaster Prevention and Control",
+         "publication_date": "2015-09-11",
+         "figure": 1100,
+         "location": "...",
+         "comment": "...",
+         "extra": "...",
+         "stuff": "..."
+       }
+     EOF
+
+In this case, only **source**, **publication_date** and **figure** will be inserted. The rest of the JSON keys will be ignored.
+
+Using this also has the side-effect of being more efficient for :ref:`bulk_insert` since PostgREST will not process the JSON and
+it'll send it directly to PostgreSQL.
+
+.. _upsert:
+
+Upsert
+======
+
+You can make an upsert with :code:`POST` and the :code:`Prefer: resolution=merge-duplicates` header:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    POST /employees HTTP/1.1
+    Prefer: resolution=merge-duplicates
+
+    [
+      { "id": 1, "name": "Old employee 1", "salary": 30000 },
+      { "id": 2, "name": "Old employee 2", "salary": 42000 },
+      { "id": 3, "name": "New employee 3", "salary": 50000 }
+    ]
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/employees" \
+      -X POST -H "Content-Type: application/json" \
+      -H "Prefer: resolution=merge-duplicates" \
+      -d @- << EOF
+      [
+        { "id": 1, "name": "Old employee 1", "salary": 30000 },
+        { "id": 2, "name": "Old employee 2", "salary": 42000 },
+        { "id": 3, "name": "New employee 3", "salary": 50000 }
+      ]
+    EOF
+
+By default, upsert operates based on the primary key columns, you must specify all of them. You can also choose to ignore the duplicates with :code:`Prefer: resolution=ignore-duplicates`. This works best when the primary key is natural, but it's also possible to use it if the primary key is surrogate (example: "id serial primary key"). For more details read `this issue <https://github.com/PostgREST/postgrest/issues/1118>`_.
+
+.. important::
+  After creating a table or changing its primary key, you must refresh PostgREST schema cache for upsert to work properly. To learn how to refresh the cache see :ref:`schema_reloading`.
+
+.. _on_conflict:
+
+On Conflict
+-----------
+
+By specifying the ``on_conflict`` query parameter, you can make upsert work on a column(s) that has a UNIQUE constraint.
+
+.. tabs::
+
+  .. code-tab:: http
+
+    POST /employees?on_conflict=name HTTP/1.1
+    Prefer: resolution=merge-duplicates
+
+    [
+      { "name": "Old employee 1", "salary": 40000 },
+      { "name": "Old employee 2", "salary": 52000 },
+      { "name": "New employee 3", "salary": 60000 }
+    ]
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/employees?on_conflict=name" \
+      -X POST -H "Content-Type: application/json" \
+      -H "Prefer: resolution=merge-duplicates" \
+      -d @- << EOF
+      [
+        { "name": "Old employee 1", "salary": 40000 },
+        { "name": "Old employee 2", "salary": 52000 },
+        { "name": "New employee 3", "salary": 60000 }
+      ]
+    EOF
+
+.. _upsert_put:
+
+PUT
+---
+
+A single row upsert can be done by using :code:`PUT` and filtering the primary key columns with :code:`eq`:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    PUT /employees?id=eq.4 HTTP/1.1
+
+    { "id": 4, "name": "Sara B.", "salary": 60000 }
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost/employees?id=eq.4" \
+      -X PUT -H "Content-Type: application/json" \
+      -d '{ "id": 4, "name": "Sara B.", "salary": 60000 }'
+
+All the columns must be specified in the request body, including the primary key columns.
+
+.. _delete:
+
+Delete
+======
+
+To delete rows in a table, use the DELETE verb plus :ref:`h_filter`. For instance deleting inactive users:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    DELETE /user?active=is.false HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/user?active=is.false" -X DELETE
+
+Deletions also support :code:`Prefer: return=representation` plus :ref:`v_filter`.
+
+.. tabs::
+
+  .. code-tab:: http
+
+    DELETE /user?id=eq.1 HTTP/1.1
+    Prefer: return=representation
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/user?id=eq.1" -X DELETE \
+      -H "Prefer: return=representation"
+
+.. code-block:: json
+
+  {"id": 1, "email": "johndoe@email.com"}
+
+.. warning::
+
+  Beware of accidentally deleting all rows in a table. To learn to prevent that see :ref:`block_fulltable`.
+
+.. _limited_update_delete:
+
+Limited Update/Delete
+=====================
+
+You can limit the amount of affected rows by :ref:`update` or :ref:`delete` with the ``limit`` query parameter. For this, you must add an explicit ``order`` on a unique column(s).
+
+.. tabs::
+
+  .. code-tab:: http
+
+    PATCH /users?limit=10&order=id&last_login=lt.2017-01-01 HTTP/1.1
+
+    { "status": "inactive" }
+
+  .. code-tab:: bash Curl
+
+    curl -X PATCH "/users?limit=10&order=id&last_login=lt.2020-01-01" \
+      -H "Content-Type: application/json" \
+      -d '{ "status": "inactive" }'
+
+.. tabs::
+
+  .. code-tab:: http
+
+    DELETE /users?limit=10&order=id&status=eq.inactive HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl -X DELETE "http://localhost:3000/users?limit=10&order=id&status=eq.inactive"
+
+If your table has no unique columns, you can use the `ctid <https://www.postgresql.org/docs/current/ddl-system-columns.html>`_ system column.
+
+Using ``offset`` to target a different subset of rows is also possible.
+
+.. note::
+
+  There is no native ``UPDATE...LIMIT`` or ``DELETE...LIMIT`` support in PostgreSQL; the generated query simulates that behavior and is based on `this Crunchy Data blog post <https://www.crunchydata.com/blog/simulating-update-or-delete-with-limit-in-postgres-ctes-to-the-rescue>`_.
+
diff --git a/docs/references/api/url_grammar.rst b/docs/references/api/url_grammar.rst
new file mode 100644
index 000000000..c562f0a75
--- /dev/null
+++ b/docs/references/api/url_grammar.rst
@@ -0,0 +1,108 @@
+.. note::
+
+  This page is a work in progress.
+
+URL Grammar
+===========
+
+.. _custom_queries:
+
+Custom Queries
+--------------
+
+The PostgREST URL grammar limits the kinds of queries clients can perform. It prevents arbitrary, potentially poorly constructed and slow client queries. It's good for quality of service, but means database administrators must create custom views and stored procedures to provide richer endpoints. The most common causes for custom endpoints are
+
+* Table unions
+* More complicated joins than those provided by :ref:`resource_embedding`.
+* Geo-spatial queries that require an argument, like "points near (lat,lon)"
+
+Unicode support
+---------------
+
+PostgREST supports unicode in schemas, tables, columns and values. To access a table with unicode name, use percent encoding.
+
+To request this:
+
+.. code-block:: http
+
+  GET /موارد HTTP/1.1
+
+Do this:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /%D9%85%D9%88%D8%A7%D8%B1%D8%AF HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/%D9%85%D9%88%D8%A7%D8%B1%D8%AF"
+
+.. _tabs-cols-w-spaces:
+
+Table / Columns with spaces
+~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+You can request table/columns with spaces in them by percent encoding the spaces with ``%20``:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /Order%20Items?Unit%20Price=lt.200 HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/Order%20Items?Unit%20Price=lt.200"
+
+.. _reserved-chars:
+
+Reserved characters
+~~~~~~~~~~~~~~~~~~~
+
+If filters include PostgREST reserved characters(``,``, ``.``, ``:``, ``()``) you'll have to surround them in percent encoded double quotes ``%22`` for correct processing.
+
+Here ``Hebdon,John`` and ``Williams,Mary`` are values.
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /employees?name=in.(%22Hebdon,John%22,%22Williams,Mary%22) HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/employees?name=in.(%22Hebdon,John%22,%22Williams,Mary%22)"
+
+Here ``information.cpe`` is a column name.
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /vulnerabilities?%22information.cpe%22=like.*MS* HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/vulnerabilities?%22information.cpe%22=like.*MS*"
+
+If the value filtered by the ``in`` operator has a double quote (``"``), you can escape it using a backslash ``"\""``. A backslash itself can be used with a double backslash ``"\\"``.
+
+Here ``Quote:"`` and ``Backslash:\`` are percent-encoded values. Note that ``%5C`` is the percent-encoded backslash.
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /marks?name=in.(%22Quote:%5C%22%22,%22Backslash:%5C%5C%22) HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/marks?name=in.(%22Quote:%5C%22%22,%22Backslash:%5C%5C%22)"
+
+.. note::
+
+   Some HTTP libraries might encode URLs automatically(e.g. :code:`axios`). In these cases you should use double quotes
+   :code:`""` directly instead of :code:`%22`.
+
diff --git a/docs/references/configuration.rst b/docs/references/configuration.rst
index d27eb0bcb..fdf922b3c 100644
--- a/docs/references/configuration.rst
+++ b/docs/references/configuration.rst
@@ -398,30 +398,7 @@ db-schemas
   **In-Database** pgrst.db_schemas
   =============== =================
 
-  The database schema to expose to REST clients. Tables, views and stored procedures in this schema will get API endpoints.
-
-  .. code:: bash
-
-     db-schemas = "api"
-
-  This schema gets added to the `search_path <https://www.postgresql.org/docs/current/ddl-schemas.html#DDL-SCHEMAS-PATH>`_ of every request.
-
-List of schemas
-~~~~~~~~~~~~~~~
-
-  You can also specify a list of schemas that can be used for **schema-based multitenancy** and **api versioning** by :ref:`multiple-schemas`. Example:
-
-  .. code:: bash
-
-     db-schemas = "tenant1, tenant2"
-
-  If you don't :ref:`Switch Schemas <multiple-schemas>`, the first schema in the list(``tenant1`` in this case) is chosen as the default schema.
-
-  *Only the chosen schema* gets added to the `search_path <https://www.postgresql.org/docs/current/ddl-schemas.html#DDL-SCHEMAS-PATH>`_ of every request.
-
-  .. warning::
-
-     Never expose private schemas in this way. See :ref:`schema_isolation`.
+  The list of database schemas to expose to clients. See :ref:`schemas`.
 
 .. _db-tx-end:
 
diff --git a/docs/references/connection_pool.rst b/docs/references/connection_pool.rst
index 38dabeee1..d0dea7939 100644
--- a/docs/references/connection_pool.rst
+++ b/docs/references/connection_pool.rst
@@ -67,7 +67,7 @@ If the pool loses the connection to the database, it will retry reconnecting usi
 
 The retries happen immediately after a connection loss, if :ref:`db-channel-enabled` is set to true(the default). Otherwise they'll happen once a request arrives.
 
-The server reloads the :ref:`schema_cache` when recoverying.
+The server reloads the :ref:`schema_cache` when recovering.
 
 To notify the client of the next retry, the server sends a ``503 Service Unavailable`` status with the ``Retry-After: x`` header. Where ``x`` is the number of seconds programmed for the next retry.
 
diff --git a/postgrest.dict b/postgrest.dict
index 6e1e1dd4c..672343183 100644
--- a/postgrest.dict
+++ b/postgrest.dict
@@ -154,6 +154,7 @@ RSA
 Saleeba
 savepoint
 schemas
+schema's
 Sencha
 Serverless
 Severin

From c5d6526d996ec4c0723704d9cfd1d90b7f8fcb9c Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Wed, 10 May 2023 13:51:51 -0300
Subject: [PATCH 568/652] move pg-safeupdate to own integration

---
 docs/integrations/nginx.rst         | 31 ---------------------
 docs/integrations/pg-safeupdate.rst | 42 +++++++++++++++++++++++++++++
 postgrest.dict                      |  1 +
 3 files changed, 43 insertions(+), 31 deletions(-)
 create mode 100644 docs/integrations/pg-safeupdate.rst

diff --git a/docs/integrations/nginx.rst b/docs/integrations/nginx.rst
index 25ce6ca98..2dc7755b8 100644
--- a/docs/integrations/nginx.rst
+++ b/docs/integrations/nginx.rst
@@ -35,37 +35,6 @@ The first step is to create an Nginx configuration file that proxies requests to
   For ubuntu, if you already installed nginx through :code:`apt` you can add this to the config file in
   :code:`/etc/nginx/sites-enabled/default`.
 
-.. _block_fulltable:
-
-Block Full-Table Operations
----------------------------
-
-Each table in the admin-selected schema gets exposed as a top level route. Client requests are executed by certain database roles depending on their authentication. All HTTP verbs are supported that correspond to actions permitted to the role. For instance if the active role can drop rows of the table then the DELETE verb is allowed for clients. Here's an API request to delete old rows from a hypothetical logs table:
-
-.. tabs::
-
-  .. code-tab:: http
-
-    DELETE /logs?time=lt.1991-08-06 HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/logs?time=lt.1991-08-06" -X DELETE
-
-However it's very easy to delete the **entire table** by omitting the query parameter!
-
-.. tabs::
-
-  .. code-tab:: http
-
-    DELETE /logs HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/logs" -X DELETE
-
-This can happen accidentally such as by switching a request from a GET to a DELETE. To protect against accidental operations use the `pg-safeupdate <https://github.com/eradman/pg-safeupdate>`_ PostgreSQL extension. It raises an error if UPDATE or DELETE are executed without specifying conditions. To install it you can use the `PGXN <https://pgxn.org/>`_ network:
-
 .. code-block:: bash
 
   sudo -E pgxn install safeupdate
diff --git a/docs/integrations/pg-safeupdate.rst b/docs/integrations/pg-safeupdate.rst
new file mode 100644
index 000000000..c5f0928cd
--- /dev/null
+++ b/docs/integrations/pg-safeupdate.rst
@@ -0,0 +1,42 @@
+pg-safeupdate
+#############
+
+.. _block_fulltable:
+
+Block Full-Table Operations
+---------------------------
+
+If the :ref:`active role <user_impersonation>` can delete table rows then the DELETE verb is allowed for clients. Here's an API request to delete old rows from a hypothetical logs table:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    DELETE /logs?time=lt.1991-08-06 HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/logs?time=lt.1991-08-06" -X DELETE
+
+Note that it's very easy to delete the **entire table** by omitting the query parameter!
+
+.. tabs::
+
+  .. code-tab:: http
+
+    DELETE /logs HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/logs" -X DELETE
+
+This can happen accidentally such as by switching a request from a GET to a DELETE. To protect against accidental operations use the `pg-safeupdate <https://github.com/eradman/pg-safeupdate>`_ PostgreSQL extension. It raises an error if UPDATE or DELETE are executed without specifying conditions. To install it you can use the `PGXN <https://pgxn.org/>`_ network:
+
+.. code-block:: bash
+
+  sudo -E pgxn install safeupdate
+
+  # then add this to postgresql.conf:
+  # shared_preload_libraries='safeupdate';
+
+This does not protect against malicious actions, since someone can add a url parameter that does not affect the result set. To prevent this you must turn to database permissions, forbidding the wrong people from deleting rows, and using `row-level security <https://www.postgresql.org/docs/current/ddl-rowsecurity.html>`_ if finer access control is required.
diff --git a/postgrest.dict b/postgrest.dict
index 672343183..2ae87ffac 100644
--- a/postgrest.dict
+++ b/postgrest.dict
@@ -152,6 +152,7 @@ RLS
 RPC
 RSA
 Saleeba
+safeupdate
 savepoint
 schemas
 schema's

From d593bcff802e13e14837d4313ec71e62040e8a9c Mon Sep 17 00:00:00 2001
From: Laurence Isla <lau.isla.c@gmail.com>
Date: Wed, 10 May 2023 15:29:11 -0500
Subject: [PATCH 569/652] Fix remaining info about pg-safeupdate in nginx docs

---
 docs/integrations/nginx.rst | 9 ---------
 1 file changed, 9 deletions(-)

diff --git a/docs/integrations/nginx.rst b/docs/integrations/nginx.rst
index 2dc7755b8..449716bbc 100644
--- a/docs/integrations/nginx.rst
+++ b/docs/integrations/nginx.rst
@@ -35,15 +35,6 @@ The first step is to create an Nginx configuration file that proxies requests to
   For ubuntu, if you already installed nginx through :code:`apt` you can add this to the config file in
   :code:`/etc/nginx/sites-enabled/default`.
 
-.. code-block:: bash
-
-  sudo -E pgxn install safeupdate
-
-  # then add this to postgresql.conf:
-  # shared_preload_libraries='safeupdate';
-
-This does not protect against malicious actions, since someone can add a url parameter that does not affect the result set. To prevent this you must turn to database permissions, forbidding the wrong people from deleting rows, and using `row-level security <https://www.postgresql.org/docs/current/ddl-rowsecurity.html>`_ if finer access control is required.
-
 .. _https:
 
 HTTPS

From dec1e03a0e66c4edfe61c6580bd01a51d91c049c Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Wed, 10 May 2023 18:57:19 -0300
Subject: [PATCH 570/652] add v11 release notes with docs improvs

---
 docs/conf.py                                  |  4 +-
 docs/{integrations => explanations}/nginx.rst |  2 +
 docs/index.rst                                |  4 ++
 docs/references/auth.rst                      |  2 +
 docs/references/connection_pool.rst           |  2 +
 docs/references/transactions.rst              |  2 +
 docs/releases/v11.0.0.rst                     | 72 +++++++++++++++++++
 postgrest.dict                                |  1 +
 8 files changed, 87 insertions(+), 2 deletions(-)
 rename docs/{integrations => explanations}/nginx.rst (99%)
 create mode 100644 docs/releases/v11.0.0.rst

diff --git a/docs/conf.py b/docs/conf.py
index f0390613d..2e48d664b 100644
--- a/docs/conf.py
+++ b/docs/conf.py
@@ -57,9 +57,9 @@ copyright = u'2017, ' + author
 # built documents.
 #
 # The short X.Y version.
-version = u'9.0'
+version = u'11.0'
 # The full version, including alpha/beta/rc tags.
-release = u'9.0.0'
+release = u'11.0.0'
 
 # The language for content autogenerated by Sphinx. Refer to documentation
 # for a list of supported languages.
diff --git a/docs/integrations/nginx.rst b/docs/explanations/nginx.rst
similarity index 99%
rename from docs/integrations/nginx.rst
rename to docs/explanations/nginx.rst
index 449716bbc..ccbdebc47 100644
--- a/docs/integrations/nginx.rst
+++ b/docs/explanations/nginx.rst
@@ -1,3 +1,5 @@
+.. _nginx:
+
 Nginx
 =====
 
diff --git a/docs/index.rst b/docs/index.rst
index 09529b4b5..34890d57d 100644
--- a/docs/index.rst
+++ b/docs/index.rst
@@ -158,8 +158,12 @@ Recipes that'll help you address specific use-cases.
    :name: how-tos
    :maxdepth: 1
 
+   how-tos/sql-user-*
+   how-tos/working-*
    how-tos/*
 
+.. _intgrs:
+
 Integrations
 ------------
 
diff --git a/docs/references/auth.rst b/docs/references/auth.rst
index 2501c3536..4eb8b93a1 100644
--- a/docs/references/auth.rst
+++ b/docs/references/auth.rst
@@ -1,3 +1,5 @@
+.. _authn:
+
 Authentication
 ==============
 
diff --git a/docs/references/connection_pool.rst b/docs/references/connection_pool.rst
index d0dea7939..48683b90a 100644
--- a/docs/references/connection_pool.rst
+++ b/docs/references/connection_pool.rst
@@ -1,3 +1,5 @@
+.. _connection_pool:
+
 Connection Pool
 ===============
 
diff --git a/docs/references/transactions.rst b/docs/references/transactions.rst
index 565a2e6d0..45a17b1cc 100644
--- a/docs/references/transactions.rst
+++ b/docs/references/transactions.rst
@@ -1,3 +1,5 @@
+.. _transactions:
+
 Transactions
 ============
 
diff --git a/docs/releases/v11.0.0.rst b/docs/releases/v11.0.0.rst
new file mode 100644
index 000000000..2db22b082
--- /dev/null
+++ b/docs/releases/v11.0.0.rst
@@ -0,0 +1,72 @@
+11.0.0
+======
+
+Features
+--------
+
+Documentation improvements
+~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+- New :ref:`transactions` reference.
+- New :ref:`connection_pool` reference.
+- Split :ref:`api` into other sub-references.
+- Split :ref:`authn` into :ref:`db_authz` and :ref:`sql_user_management`.
+- Split :ref:`admin` into :ref:`intgrs` and :ref:`nginx`.
+
+Breaking changes
+----------------
+
+Bug fixes
+---------
+
+Thanks
+------
+
+Big thanks from the `PostgREST team <https://github.com/orgs/PostgREST/people>`_ to our sponsors!
+
+.. container:: image-container
+
+  .. image:: ../_static/cybertec-new.png
+    :target: https://www.cybertec-postgresql.com/en/?utm_source=postgrest.org&utm_medium=referral&utm_campaign=postgrest
+    :width:  13em
+
+  .. image:: ../_static/2ndquadrant.png
+    :target: https://www.2ndquadrant.com/en/?utm_campaign=External%20Websites&utm_source=PostgREST&utm_medium=Logo
+    :width:  13em
+
+  .. image:: ../_static/retool.png
+    :target: https://retool.com/?utm_source=sponsor&utm_campaign=postgrest
+    :width:  13em
+
+  .. image:: ../_static/gnuhost.png
+    :target: https://gnuhost.eu/?utm_source=sponsor&utm_campaign=postgrest
+    :width:  13em
+
+  .. image:: ../_static/supabase.png
+    :target: https://supabase.com/?utm_source=postgrest%20backers&utm_medium=open%20source%20partner&utm_campaign=postgrest%20backers%20github&utm_term=homepage
+    :width:  13em
+
+  .. image:: ../_static/oblivious.jpg
+    :target: https://oblivious.ai/?utm_source=sponsor&utm_campaign=postgrest
+    :width:  13em
+
+* `Roboflow <https://github.com/roboflow>`_
+* Evans Fernandes
+* Jan Sommer
+* `Franz Gusenbauer <https://www.igutech.at/>`_
+* Zac Miller
+* Tsingson Qin
+* Michel Pelletier
+* Jay Hannah
+* Robert Stolarz
+* Nicholas DiBiase
+* Christopher Reid
+* Nathan Bouscal
+* Daniel Rafaj
+* David Fenko
+* Remo Rechkemmer
+* Severin Ibarluzea
+* Tom Saleeba
+* Pawel Tyll
+
+If you like to join them please consider `supporting PostgREST development <https://github.com/PostgREST/postgrest#user-content-supporting-development>`_.
diff --git a/postgrest.dict b/postgrest.dict
index 2ae87ffac..5a3c355bd 100644
--- a/postgrest.dict
+++ b/postgrest.dict
@@ -213,4 +213,5 @@ websearch
 Websockets
 webuser
 wfts
+Zac
 ZeroMQ

From c56108b8a9a4fb407adf8a08a06dfc87f86350fc Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Wed, 10 May 2023 19:59:33 -0300
Subject: [PATCH 571/652] add breaking changes

---
 docs/references/api/stored_procedures.rst | 39 -----------------------
 docs/releases/v11.0.0.rst                 |  9 ++++--
 2 files changed, 7 insertions(+), 41 deletions(-)

diff --git a/docs/references/api/stored_procedures.rst b/docs/references/api/stored_procedures.rst
index 64fa86d49..3bb971ab3 100644
--- a/docs/references/api/stored_procedures.rst
+++ b/docs/references/api/stored_procedures.rst
@@ -415,42 +415,3 @@ You can call overloaded functions with different number of arguments.
 .. important::
 
   Overloaded functions with the same argument names but different types are not supported.
-
-.. _bulk_call:
-
-Bulk Call
----------
-
-It's possible to call a function in a bulk way, analogously to :ref:`bulk_insert`. To do this, you need to add the
-``Prefer: params=multiple-objects`` header to your request.
-
-.. tabs::
-
-  .. code-tab:: http
-
-    POST /rpc/add_them HTTP/1.1
-    Content-Type: text/csv
-    Prefer: params=multiple-objects
-
-    a,b
-    1,2
-    3,4
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/rpc/add_them" \
-      -X POST -H "Content-Type: text/csv" \
-      -H "Prefer: params=multiple-objects" \
-      --data-binary @- << EOF
-    a,b
-    1,2
-    3,4
-    EOF
-
-.. code-block:: json
-
-   [ 3, 7 ]
-
-If you have large payloads to process, it's preferable you instead use a function with an :ref:`array parameter <s_procs_array>` or JSON parameter, as this will be more efficient.
-
-It's also possible to :ref:`Specify Columns <specify_columns>` on functions calls.
diff --git a/docs/releases/v11.0.0.rst b/docs/releases/v11.0.0.rst
index 2db22b082..83a3a5a94 100644
--- a/docs/releases/v11.0.0.rst
+++ b/docs/releases/v11.0.0.rst
@@ -13,11 +13,16 @@ Documentation improvements
 - Split :ref:`authn` into :ref:`db_authz` and :ref:`sql_user_management`.
 - Split :ref:`admin` into :ref:`intgrs` and :ref:`nginx`.
 
+Bug fixes
+---------
+
 Breaking changes
 ----------------
 
-Bug fixes
----------
+- Removed Bulk Call with ``Prefer: params=multiple-objects`` on Stored Procedures.
+- To comply with `RFC 9110 <https://www.rfc-editor.org/rfc/rfc9110.html#name-range>`_, the Range header is now only considered on GET.
+  + Other methods will ignore it and instead should use the ``limit/offset``.
+  + PUT requests no longer return an error when this header is present (using limit/offset still triggers the error)
 
 Thanks
 ------

From 0bd43663fcf2d0e8c6b31dbb40b6f2ecc63f6c1e Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Wed, 10 May 2023 20:06:06 -0300
Subject: [PATCH 572/652] add isdistinct

---
 docs/references/api/tables_views.rst | 1 +
 docs/releases/v11.0.0.rst            | 5 +++++
 postgrest.dict                       | 1 +
 3 files changed, 7 insertions(+)

diff --git a/docs/references/api/tables_views.rst b/docs/references/api/tables_views.rst
index 99a919e49..aec5d9dcb 100644
--- a/docs/references/api/tables_views.rst
+++ b/docs/references/api/tables_views.rst
@@ -82,6 +82,7 @@ in            :code:`IN`                one of a list of values, e.g. :code:`?a=
                                         – also supports commas in quoted strings like
                                         :code:`?a=in.("hi,there","yes,you")`
 is            :code:`IS`                checking for exact equality (null,true,false,unknown)
+isdistinct    :code:`IS DISTINCT FROM`  not equal, treating :code:`NULL` as a comparable value
 fts           :code:`@@`                :ref:`fts` using to_tsquery
 plfts         :code:`@@`                :ref:`fts` using plainto_tsquery
 phfts         :code:`@@`                :ref:`fts` using phraseto_tsquery
diff --git a/docs/releases/v11.0.0.rst b/docs/releases/v11.0.0.rst
index 83a3a5a94..3372bf58c 100644
--- a/docs/releases/v11.0.0.rst
+++ b/docs/releases/v11.0.0.rst
@@ -4,6 +4,11 @@
 Features
 --------
 
+Horizontal Filtering
+~~~~~~~~~~~~~~~~~~~~
+
+- New ``isdistinct`` :ref:`operator <operators>`. It is a direct translation of `IS DINTINCT FROM <https://www.postgresql.org/docs/current/functions-comparison.html#FUNCTIONS-COMPARISON-PRED-TABLE>`_.
+
 Documentation improvements
 ~~~~~~~~~~~~~~~~~~~~~~~~~~
 
diff --git a/postgrest.dict b/postgrest.dict
index 5a3c355bd..6803c01be 100644
--- a/postgrest.dict
+++ b/postgrest.dict
@@ -67,6 +67,7 @@ ilike
 imatch
 io
 IP
+isdistinct
 JS
 js
 JSON

From cb7d70c197e420cab365f4220294fe47f3c72ceb Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Wed, 10 May 2023 20:17:46 -0300
Subject: [PATCH 573/652] add trace header

---
 docs/references/admin.rst         | 28 ++++++++++++++++++++++++++++
 docs/references/configuration.rst | 13 +++++++++++++
 docs/releases/v11.0.0.rst         |  5 +++++
 3 files changed, 46 insertions(+)

diff --git a/docs/references/admin.rst b/docs/references/admin.rst
index ed83e8c9d..2a8f01b7a 100644
--- a/docs/references/admin.rst
+++ b/docs/references/admin.rst
@@ -89,6 +89,34 @@ When debugging a problem it's important to verify the PostgREST version. Look fo
 
   Server: postgrest/11.0.1
 
+.. _trace_header:
+
+Trace Header
+------------
+
+You can enable tracing HTTP requests by setting :ref:`server-trace-header`. Specify the set header in the request, and the server will include it in the response.
+
+.. code:: bash
+
+  server-trace-header = "X-Request-Id"
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /users
+    X-Request-Id: 123
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/users" \
+      -H "X-Request-Id: 123"
+
+.. code::
+
+  HTTP/1.1 200 OK
+  X-Request-Id: 123
+
 .. _explain_plan:
 
 Execution plan
diff --git a/docs/references/configuration.rst b/docs/references/configuration.rst
index fdf922b3c..64906661b 100644
--- a/docs/references/configuration.rst
+++ b/docs/references/configuration.rst
@@ -174,6 +174,7 @@ openapi-server-proxy-uri    String                    Y
 raw-media-types             String                    Y
 server-host                 String  !4
 server-port                 Int     3000
+server-trace-header         String                    Y
 server-unix-socket          String
 server-unix-socket-mode     String  660
 =========================== ======= ================= ==========
@@ -670,6 +671,18 @@ server-port
 
   The TCP port to bind the web server.
 
+.. _server-trace-header:
+
+server-trace-header
+-------------------
+
+  =============== =================
+  **Environment** PGRST_SERVER_TRACE_HEADER
+  **In-Database** `pgrst.server_trace_header`
+  =============== =================
+
+  The header name used to trace HTTP requests. See :ref:`trace_header`.
+
 .. _server-unix-socket:
 
 server-unix-socket
diff --git a/docs/releases/v11.0.0.rst b/docs/releases/v11.0.0.rst
index 3372bf58c..da5aa1d3e 100644
--- a/docs/releases/v11.0.0.rst
+++ b/docs/releases/v11.0.0.rst
@@ -9,6 +9,11 @@ Horizontal Filtering
 
 - New ``isdistinct`` :ref:`operator <operators>`. It is a direct translation of `IS DINTINCT FROM <https://www.postgresql.org/docs/current/functions-comparison.html#FUNCTIONS-COMPARISON-PRED-TABLE>`_.
 
+Admin
+~~~~~
+
+- New :ref:`trace_header`.
+
 Documentation improvements
 ~~~~~~~~~~~~~~~~~~~~~~~~~~
 

From 1de06f5332e9f73e62b4d3e56368243d5e1fcb94 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Wed, 10 May 2023 20:40:46 -0300
Subject: [PATCH 574/652] add openapi overriding

---
 docs/references/api/openapi.rst   | 50 +++++++++++++++++++++++++++++++
 docs/references/configuration.rst | 12 ++++++++
 docs/releases/v11.0.0.rst         |  5 ++++
 3 files changed, 67 insertions(+)

diff --git a/docs/references/api/openapi.rst b/docs/references/api/openapi.rst
index 31d23b52a..f2ba5d476 100644
--- a/docs/references/api/openapi.rst
+++ b/docs/references/api/openapi.rst
@@ -43,3 +43,53 @@ You can use a tool like `Swagger UI <https://swagger.io/tools/swagger-ui/>`_ to
 
   The OpenAPI information can go out of date as the schema changes under a running server. To learn how to refresh the cache see :ref:`schema_reloading`.
 
+.. _override_openapi:
+
+Overriding OpenAPI response
+---------------------------
+
+You can override the default response with a function result. To do this, set the function on :ref:`db-root-spec`.
+
+.. code:: bash
+
+   db-root-spec = "root"
+
+.. code:: postgres
+
+  create or replace function root() returns json as $_$
+  declare
+  openapi json = $$
+    {
+      "swagger": "2.0",
+      "info":{
+        "title":"Overridden",
+        "description":"This is a my own API"
+      }
+    }
+  $$;
+  begin
+    return openapi;
+  end
+  $_$ language plpgsql;
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET / HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl http://localhost:3000
+
+.. code-block:: http
+
+  HTTP/1.1 200 OK
+
+  {
+    "swagger": "2.0",
+    "info":{
+      "title":"Overridden",
+      "description":"This is a my own API"
+    }
+  }
diff --git a/docs/references/configuration.rst b/docs/references/configuration.rst
index 64906661b..557972a15 100644
--- a/docs/references/configuration.rst
+++ b/docs/references/configuration.rst
@@ -387,6 +387,18 @@ db-prepared-statements
 
   You should only set this to ``false`` when using PostgresSQL behind an external connection pooler such as PgBouncer working in transaction pooling mode. See :ref:`this section <external_connection_poolers>` for more information.
 
+.. _db-root-spec:
+
+db-root-spec
+------------
+
+  =============== =================
+  **Environment** PGRST_DB_ROOT_SPEC
+  **In-Database** pgrst.db_root_spec
+  =============== =================
+
+  Function to override the OpenAPI response. See :ref:`override_openapi`.
+
 .. _db-schemas:
 
 db-schemas
diff --git a/docs/releases/v11.0.0.rst b/docs/releases/v11.0.0.rst
index da5aa1d3e..7e67adb7e 100644
--- a/docs/releases/v11.0.0.rst
+++ b/docs/releases/v11.0.0.rst
@@ -9,6 +9,11 @@ Horizontal Filtering
 
 - New ``isdistinct`` :ref:`operator <operators>`. It is a direct translation of `IS DINTINCT FROM <https://www.postgresql.org/docs/current/functions-comparison.html#FUNCTIONS-COMPARISON-PRED-TABLE>`_.
 
+OpenAPI
+~~~~~~~
+
+- Allow :ref:`override_openapi`.
+
 Admin
 ~~~~~
 

From e813375c7da5b72cbbd6d16bb69c89909e2ccac6 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Wed, 10 May 2023 20:47:09 -0300
Subject: [PATCH 575/652] openapi title override

---
 docs/references/api/openapi.rst | 17 +++++++++++++----
 docs/releases/v11.0.0.rst       |  1 +
 2 files changed, 14 insertions(+), 4 deletions(-)

diff --git a/docs/references/api/openapi.rst b/docs/references/api/openapi.rst
index f2ba5d476..d8d3ce34b 100644
--- a/docs/references/api/openapi.rst
+++ b/docs/references/api/openapi.rst
@@ -35,20 +35,29 @@ Also if you wish to generate a ``summary`` field you can do it by having a multi
     spans
     multiple lines$$;
 
+Similarly, you can override the API title by commenting the schema.
+
+.. code-block:: plpgsql
+
+  COMMENT ON SCHEMA api IS
+  $$FooBar API
+
+  A RESTful API that serves FooBar data.$$;
+
 If you need to include the ``security`` and ``securityDefinitions`` options, set the :ref:`openapi-security-active` configuration to ``true``.
 
 You can use a tool like `Swagger UI <https://swagger.io/tools/swagger-ui/>`_ to create beautiful documentation from the description and to host an interactive web-based dashboard. The dashboard allows developers to make requests against a live PostgREST server, and provides guidance with request headers and example request bodies.
 
 .. important::
 
-  The OpenAPI information can go out of date as the schema changes under a running server. To learn how to refresh the cache see :ref:`schema_reloading`.
+  The OpenAPI information can go out of date as the schema changes under a running server. See :ref:`schema_reloading`.
 
 .. _override_openapi:
 
-Overriding OpenAPI response
----------------------------
+Overriding Full OpenAPI Response
+--------------------------------
 
-You can override the default response with a function result. To do this, set the function on :ref:`db-root-spec`.
+You can override the whole default response with a function result. To do this, set the function on :ref:`db-root-spec`.
 
 .. code:: bash
 
diff --git a/docs/releases/v11.0.0.rst b/docs/releases/v11.0.0.rst
index 7e67adb7e..8ef67c98d 100644
--- a/docs/releases/v11.0.0.rst
+++ b/docs/releases/v11.0.0.rst
@@ -12,6 +12,7 @@ Horizontal Filtering
 OpenAPI
 ~~~~~~~
 
+- Allow :ref:`overriding the OpenAPI title <open-api>`.
 - Allow :ref:`override_openapi`.
 
 Admin

From 7832ddba52426cad026ab2a70d4c39cde5df7a51 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Wed, 10 May 2023 21:14:50 -0300
Subject: [PATCH 576/652] add any/all modifiers

---
 docs/references/api/tables_views.rst | 33 ++++++++++++++++++++++++++++
 docs/releases/v11.0.0.rst            |  1 +
 2 files changed, 34 insertions(+)

diff --git a/docs/references/api/tables_views.rst b/docs/references/api/tables_views.rst
index aec5d9dcb..837dd8232 100644
--- a/docs/references/api/tables_views.rst
+++ b/docs/references/api/tables_views.rst
@@ -100,6 +100,8 @@ adj           :code:`-|-`               is adjacent to, e.g. :code:`?range=adj.(
 not           :code:`NOT`               negates another operator, see :ref:`logical_operators`
 or            :code:`OR`                logical :code:`OR`, see :ref:`logical_operators`
 and           :code:`AND`               logical :code:`AND`, see :ref:`logical_operators`
+all           :code:`ALL`               comparison matches all the values in the list, see :ref:`logical_operators`
+any           :code:`ANY`               comparison matches any value in the list, see :ref:`logical_operators`
 ============  ========================  ==================================================================================
 
 For more complicated filters you will have to create a new view in the database, or use a stored procedure. For instance, here's a view to show "today's stories" including possibly older pinned stories:
@@ -156,6 +158,37 @@ You can also apply complex logic to the conditions:
 
     curl "http://localhost:3000/people?grade=gte.90&student=is.true&or=(age.eq.14,not.and(age.gte.11,age.lte.17))"
 
+.. _modifiers:
+
+Operator Modifiers
+~~~~~~~~~~~~~~~~~~
+
+You may further simplify the logic using the ``any/all`` modifiers of ``eq,like,ilike,gt,gte,lt,lte,match,imatch``.
+
+For instance, to avoid repeating the same column for ``or``, use ``any`` to get people with last names that start with O or P:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /people?last_name=like(any).{O*,P*} HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/people?last_name=like(any).{O*,P*}"
+
+In a similar way, you can use ``all`` to avoid repeating the same column for ``and``. To get the people with last names that start with O and end with n:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /people?last_name=like(all).{O*,*n} HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/people?last_name=like(all).{O*,*n}"
+
 .. _pattern_matching:
 
 Pattern Matching
diff --git a/docs/releases/v11.0.0.rst b/docs/releases/v11.0.0.rst
index 8ef67c98d..c7cf789ea 100644
--- a/docs/releases/v11.0.0.rst
+++ b/docs/releases/v11.0.0.rst
@@ -8,6 +8,7 @@ Horizontal Filtering
 ~~~~~~~~~~~~~~~~~~~~
 
 - New ``isdistinct`` :ref:`operator <operators>`. It is a direct translation of `IS DINTINCT FROM <https://www.postgresql.org/docs/current/functions-comparison.html#FUNCTIONS-COMPARISON-PRED-TABLE>`_.
+- New ``and/all`` :ref:`modifiers`.
 
 OpenAPI
 ~~~~~~~

From 8ae6b012f4abba8d7643b2b1c8e311885d01c31b Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Wed, 10 May 2023 21:23:34 -0300
Subject: [PATCH 577/652] add empty embed filter

---
 docs/references/api/resource_embedding.rst | 28 ++++++++++++++++++++--
 docs/releases/v11.0.0.rst                  |  6 +++++
 2 files changed, 32 insertions(+), 2 deletions(-)

diff --git a/docs/references/api/resource_embedding.rst b/docs/references/api/resource_embedding.rst
index 231ddd377..e410ba447 100644
--- a/docs/references/api/resource_embedding.rst
+++ b/docs/references/api/resource_embedding.rst
@@ -418,8 +418,8 @@ The result will show the nested actors named Tom and order them by last name. Al
 
 .. _embedding_top_level_filter:
 
-Embedding with Top-level Filtering
-----------------------------------
+Top-level Filtering
+-------------------
 
 By default, :ref:`embed_filters` don't change the top-level resource(``films``) rows at all:
 
@@ -481,6 +481,30 @@ In order to filter the top level rows you need to add ``!inner`` to the embedded
     }
   ]
 
+.. _empty_embed_filter:
+
+Empty Embed Filter
+~~~~~~~~~~~~~~~~~~
+
+If you want to filter the films by actors but don't want to include them in the response, empty the embedded columns.
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /films?select=title,actors!inner()&actors.first_name=eq.Jehanne HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/films?select=title,actors!inner()&actors.first_name=eq.Jehanne"
+
+.. code-block:: json
+  [
+    {
+      "title": "The Haunted Castle",
+    }
+  ]
+
 .. _embedding_partitioned_tables:
 
 Embedding Partitioned Tables
diff --git a/docs/releases/v11.0.0.rst b/docs/releases/v11.0.0.rst
index c7cf789ea..a346e1797 100644
--- a/docs/releases/v11.0.0.rst
+++ b/docs/releases/v11.0.0.rst
@@ -10,6 +10,11 @@ Horizontal Filtering
 - New ``isdistinct`` :ref:`operator <operators>`. It is a direct translation of `IS DINTINCT FROM <https://www.postgresql.org/docs/current/functions-comparison.html#FUNCTIONS-COMPARISON-PRED-TABLE>`_.
 - New ``and/all`` :ref:`modifiers`.
 
+Resource Embedding
+~~~~~~~~~~~~~~~~~~
+
+- New :ref:`empty_embed_filter`.
+
 OpenAPI
 ~~~~~~~
 
@@ -38,6 +43,7 @@ Breaking changes
 
 - Removed Bulk Call with ``Prefer: params=multiple-objects`` on Stored Procedures.
 - To comply with `RFC 9110 <https://www.rfc-editor.org/rfc/rfc9110.html#name-range>`_, the Range header is now only considered on GET.
+
   + Other methods will ignore it and instead should use the ``limit/offset``.
   + PUT requests no longer return an error when this header is present (using limit/offset still triggers the error)
 

From d15dc680aff2b4b94d29b8818b56cb71e10e1e1b Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Wed, 10 May 2023 22:28:58 -0300
Subject: [PATCH 578/652] add top-level ordering

---
 docs/references/api/resource_embedding.rst | 19 +++++++++++++++++++
 docs/releases/v11.0.0.rst                  |  1 +
 2 files changed, 20 insertions(+)

diff --git a/docs/references/api/resource_embedding.rst b/docs/references/api/resource_embedding.rst
index e410ba447..ed44c47cb 100644
--- a/docs/references/api/resource_embedding.rst
+++ b/docs/references/api/resource_embedding.rst
@@ -505,6 +505,25 @@ If you want to filter the films by actors but don't want to include them in the
     }
   ]
 
+.. _top_level_order:
+
+Top-level Ordering
+------------------
+
+On :ref:`Many-to-One <many-to-one>` and :ref:`One-to-One <one-to-one>` relationships, you can use a column of the "to-one" end to sort the top-level.
+
+For example, to arrange the films in descending order using the director's last name.
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /films?select=title,directors(last_name)&order=directors(last_name).desc HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/films?select=title,directors(last_name)&order=directors(last_name).desc"
+
 .. _embedding_partitioned_tables:
 
 Embedding Partitioned Tables
diff --git a/docs/releases/v11.0.0.rst b/docs/releases/v11.0.0.rst
index a346e1797..5223369e1 100644
--- a/docs/releases/v11.0.0.rst
+++ b/docs/releases/v11.0.0.rst
@@ -14,6 +14,7 @@ Resource Embedding
 ~~~~~~~~~~~~~~~~~~
 
 - New :ref:`empty_embed_filter`.
+- New :ref:`top_level_order`.
 
 OpenAPI
 ~~~~~~~

From 9595ed845e4067622388dbf9bf311805bec5dae3 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Wed, 10 May 2023 22:50:22 -0300
Subject: [PATCH 579/652] add null filtering embeds

---
 docs/references/admin.rst                  |  3 +-
 docs/references/api/resource_embedding.rst | 59 +++++++++++++++++++---
 docs/releases/v11.0.0.rst                  |  3 +-
 3 files changed, 57 insertions(+), 8 deletions(-)

diff --git a/docs/references/admin.rst b/docs/references/admin.rst
index 2a8f01b7a..6e00eb3f9 100644
--- a/docs/references/admin.rst
+++ b/docs/references/admin.rst
@@ -104,7 +104,8 @@ You can enable tracing HTTP requests by setting :ref:`server-trace-header`. Spec
 
   .. code-tab:: http
 
-    GET /users
+    GET /users HTTP/1.1
+
     X-Request-Id: 123
 
   .. code-tab:: bash Curl
diff --git a/docs/references/api/resource_embedding.rst b/docs/references/api/resource_embedding.rst
index ed44c47cb..456e03dbf 100644
--- a/docs/references/api/resource_embedding.rst
+++ b/docs/references/api/resource_embedding.rst
@@ -481,24 +481,71 @@ In order to filter the top level rows you need to add ``!inner`` to the embedded
     }
   ]
 
-.. _empty_embed_filter:
+.. _null_embed:
 
-Empty Embed Filter
-~~~~~~~~~~~~~~~~~~
+Null filtering on Embedded Resources
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
-If you want to filter the films by actors but don't want to include them in the response, empty the embedded columns.
+Null filtering on the embedded resources can behave the same as ``!inner``. While providing more flexibility.
+
+For example, doing ``actors=not.is.null`` returns the same result as ``actors!inner(*)``:
 
 .. tabs::
 
   .. code-tab:: http
 
-    GET /films?select=title,actors!inner()&actors.first_name=eq.Jehanne HTTP/1.1
+    GET /films?select=title,actors(*)&actors=not.is.null HTTP/1.1
 
   .. code-tab:: bash Curl
 
-    curl "http://localhost:3000/films?select=title,actors!inner()&actors.first_name=eq.Jehanne"
+    curl "http://localhost:3000/films?select=title,actors(*)&actors=not.is.null"
+
+The ``is.null`` filter can be used in embedded resources to perform an anti-join. To get all the films that do not have any nominations:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /films?select=title,nominations()&nominations=is.null HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/films?select=title,nominations()&nominations=is.null"
+
+
+Both ``is.null`` and ``not.is.null`` can be included inside the `or` operator. For instance, to get the films that have no actors **or** directors registered yet:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /films?select=title,actors(*),directors(*)&or=(actors.is.null,directors.is.null) HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/films?select=title,actors(*),directors(*)&or=(actors.is.null,directors.is.null)"
+
+.. _empty_embed:
+
+Empty Embed
+~~~~~~~~~~~
+
+You can leave an embedded resource empty, this helps with filtering in some cases.
+
+To filter the films by actors but not include them:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /films?select=title,actors()&actors.first_name=eq.Jehanne&actors=not.is.null HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/films?select=title,actors()&actors.first_name=eq.Jehanne&actors=not.is.null"
 
 .. code-block:: json
+
   [
     {
       "title": "The Haunted Castle",
diff --git a/docs/releases/v11.0.0.rst b/docs/releases/v11.0.0.rst
index 5223369e1..7eba9688a 100644
--- a/docs/releases/v11.0.0.rst
+++ b/docs/releases/v11.0.0.rst
@@ -13,8 +13,9 @@ Horizontal Filtering
 Resource Embedding
 ~~~~~~~~~~~~~~~~~~
 
-- New :ref:`empty_embed_filter`.
 - New :ref:`top_level_order`.
+- New :ref:`null_embed`.
+- New :ref:`empty_embed`.
 
 OpenAPI
 ~~~~~~~

From f02be3fb769c5f0410df96fc30b8f9ecf4ec1192 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Wed, 10 May 2023 23:11:45 -0300
Subject: [PATCH 580/652] add spread embed

---
 docs/references/api/resource_embedding.rst | 59 ++++++++++++++++++++++
 docs/releases/v11.0.0.rst                  |  1 +
 2 files changed, 60 insertions(+)

diff --git a/docs/references/api/resource_embedding.rst b/docs/references/api/resource_embedding.rst
index 456e03dbf..54de4d460 100644
--- a/docs/references/api/resource_embedding.rst
+++ b/docs/references/api/resource_embedding.rst
@@ -571,6 +571,65 @@ For example, to arrange the films in descending order using the director's last
 
     curl "http://localhost:3000/films?select=title,directors(last_name)&order=directors(last_name).desc"
 
+.. _spread_embed:
+
+Spread embedded resource
+------------------------
+
+On many-to-one and one-to-one relationships, you can "spread" the embedded resource. That is, remove the surrounding JSON object for the embedded resource columns.
+
+.. tabs::
+
+  .. code-tab:: http
+
+     GET /films?select=title,...directors(director_last_name:last_name)&title=like.*Workers* HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+     curl "http://localhost:3000/films?select=title,...directors(director_last_name:last_name)&title=like.*Workers*"
+
+.. code-block:: json
+
+   [
+     {
+       "title": "Workers Leaving The Lumière Factory In Lyon",
+       "director_last_name": "Lumière"
+     }
+   ]
+
+Note that there is no ``"directors"`` object. Also the embed columns can be aliased normally.
+
+You can use this to get the columns of a join table in a many-to-many relationship. For instance, to get films and its actors, but including the ``character`` column from the roles table:
+
+.. tabs::
+
+  .. code-tab:: http
+
+     GET /films?select=title,actors:roles(character,...actors(first_name,last_name))&title=like.*Lighthouse* HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+     curl "http://localhost:3000/films?select=title,actors:roles(character,...actors(first_name,last_name))&title=like.*Lighthouse*"
+
+.. code-block:: json
+
+   [
+     {
+       "title": "The Lighthouse",
+       "actors": [
+          {
+            "character": "Thomas Wake",
+            "first_name": "Willem",
+            "last_name": "Dafoe"
+          }
+       ]
+     }
+   ]
+
+.. note::
+
+  The spread operator ``...`` is borrowed from the Javascript `spread syntax <https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Operators/Spread_syntax>`_.
+
 .. _embedding_partitioned_tables:
 
 Embedding Partitioned Tables
diff --git a/docs/releases/v11.0.0.rst b/docs/releases/v11.0.0.rst
index 7eba9688a..a2de2b3b9 100644
--- a/docs/releases/v11.0.0.rst
+++ b/docs/releases/v11.0.0.rst
@@ -14,6 +14,7 @@ Resource Embedding
 ~~~~~~~~~~~~~~~~~~
 
 - New :ref:`top_level_order`.
+- New :ref:`spread_embed`.
 - New :ref:`null_embed`.
 - New :ref:`empty_embed`.
 

From 84b01dea993e28fc71e6881e02a12cde507742a3 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Wed, 10 May 2023 23:44:09 -0300
Subject: [PATCH 581/652] add recursive m2m disamb

---
 diagrams/users.er                          |  13 +++++++
 docs/_static/users.png                     | Bin 0 -> 14073 bytes
 docs/references/api/resource_embedding.rst |  38 +++++++++++++++++++++
 3 files changed, 51 insertions(+)
 create mode 100644 diagrams/users.er
 create mode 100644 docs/_static/users.png

diff --git a/diagrams/users.er b/diagrams/users.er
new file mode 100644
index 000000000..e42ca312f
--- /dev/null
+++ b/diagrams/users.er
@@ -0,0 +1,13 @@
+[Users]
+*id
+first_name
+last_name
+username
+
+[Subscriptions]
+*+subscriber_id
+*+subscribed_id
+type
+
+Users 1--* Subscriptions
+Subscriptions *--1 Users
diff --git a/docs/_static/users.png b/docs/_static/users.png
new file mode 100644
index 0000000000000000000000000000000000000000..f8b57fee753d46a31e6d918c868c8775fc8f97fb
GIT binary patch
literal 14073
zcmeAS@N?(olHy`uVBq!ia0y~yVBE>Tz;J+riGhJZET`)b0|NtFlDE4H!+#K5uy^@n
z1_lKNPZ!6KiaBrhrpJVYU;n?C-<ZSVKtsYp?n~XujS&Hk$}1##H4>a1Sesdu<FbUj
z7p(}Kydpzkg3Fsjx=jav2L%dyuP{^aU=VFtAmlPZEj1w_?VtX)xu55xr_FGh$ryQG
z{QC1bTfg6|KHIq_dwy(P_k+(rIT#oi1iB|Jl4W3EkYI3F!@|HYf#--90|UcJA~`3-
zv}<c?ITwU~{QC9n;{RJ17``Z#M9R;wD15ZcclNJCQyo2ATv`^zGB7x3rSwg0YisKk
z(|yGq&ZgMe+1XXb$iT3&;U@tLH59`3)&8D#C)T3sOGaZ*b#?WoEqnIF{Cmg9z`()$
z7*jXTjEI@@=IzV4xai_y_tmRb8A<R+OH1qPuV1lZ#i~_WjkAs(Jt}RUCu3c<X4$f3
zU0q$Bot_R32Ob~qUs-BoWOO3(;$ruHyV_q@u3s<z@!=th<DDIa&e!A^87lriJl)g}
z20r~9!NI}K-|~`@lmfES)7_{2`}_U=jTtj$tXQIAwdVW`!{%Q<&fEXDNjV|#FssDM
zR!yyK&9r&*{KQz<*jBAxJ$d`}b+MCI9-ntX`@Jv&gQbDNv8nfKzsvR?cjjPaVF?Kh
z-MV$_)M?X}Em>0Y>*aD~_db=?clXs+pPgkY!^f`p<zc)0zpvNhw{G1Uy*<yBqqMAS
zUHtxk@9yqC)H~m@IPKgVOaJ+HZ{NIm^7&`+vojO-xic`ZaT;Z(YqadzWmU6q<;u?e
zYtEhl0UKM}l~=#LyL<ZiXF;bDD_cdygIBJID1Ldn{eIlus;?&}tJ}!Ef4zSHvOW#N
zZQHhe{P@vCYOS;_6N7<=gv8@hg^!Ot>|U`#gO``LxcIYW@w1%!`{qjh*b$SLmZr8Z
zZDWK*fKm%bQ$b<j!RwKckzc=lW$HaY)7V`h!0V<m14A=AYmfHJFaOsE+wd%D+F!$(
zRrmkz_wVoT|9?KeUcf0vZ~GPy`10%PYj!@Fh&>e_Te-yroO*kE=gytGqt4Hd&r#q|
z?B|L-;`(tJ+1bIpzkdBXWV-aFpoBofETapeMx9Dp2{9*AjHXVV`f=+Ajs7hHEDKk!
z?q2Wf>+9|1B_t$tZGHUvcklADvb@?3wY0G8DO$U7rKXLI$g-tNT@NT3t@668Y@p!b
z<+W<XihwQR4*wS|TBM|@>AB2Z#9*BY$D_mi_GeC=a^f&GH5C;RxpDjU<3*P)1r@pT
zbsr514ON{V6dWAAB|}itc+UL!=aV*mD0Or^_~z#3mnFZRoSc05(xnfZD=RB)zXT`s
z+vdnmke+Rp%hZ_FaO!BcxVV0t&SmAUnd|TDC{(VLm5`V*dGh63w`NVB{`~oK_gjY#
z9Xj#)>FMd~qqo0%c6Rpp`S$s_xw%<cRbO5RMp|WE(Wu#&e4NkbSM{GCAG<`gxwyG+
z-@5hc)hjM8F1?r?8)|-jTChMt({{=xP}1NwdTa3N=--C;x}Qr=^v9oB<~w`E)bukm
zE{6KLyC1)HEo@Vok5A8uzf))Y{QUfJ))m!R9UUBr-<Q1KsD9v|mt}*1mxl*9bd(eo
z9k0DuzQNWR6kQt<9CLDV!osedo~|Dq9ewr6m7d;Sb>CTAvaV_sJ(c=w|Npc7^>wkk
z%ii9atnRO+r4<zwHN$6FZ|~VZKR;hz8@+tlGPi3no6~xC@BZy?|F`7%xw)G*ZJIVs
zEH*aQ*4CDto!#I6eB|ad&zJMQfKsG{!Vf3yi%AE(yCwv#-rn$Clbxf<!^5NDr&j~l
zy!BHwfARMGoyuU)AP^uOu*Len{jXcw|NXgL&2hvlAs{#;WJ}svsqE}*w&sOv*4X6S
zFbEF5yfS$Cx~Q$MZf(u(`nGO<QbtC{;)hc-gGJtU|B;YLmtkC>@8RL`;rsXZFJ36<
zeg%W4PoGLkN;<dm{r&N{U-X6Ch4l@Ess<h_SFYsb<2%+^^y<pWipRHZZ_l4Rd2-@s
z9R;2q?M6p0FE6j+V&i@P9=6MGU}~5(Yu0oSxV|=edr@(*=&OYJ2C1h+W{R2oivG>T
za%}1W1y=cQ#{=vS8@_w@Zhrkg%gXA1e=3VkHdUGB-QQQcWbf+5N%jB#e&3XO+O0=o
z;j(4Nk~S_{yqI-S=a*HN^yBv2*p_?y$H&K8w{8s$2|082>~!5|H?Ly~nl5Wx*X`wy
zIBH>2{Vk_S;Y9fKnKM1@I{5oLB5zlIdg7Upv10Guy~~z8o1p0Y<;$06XJ!_^yJM+0
z-FvOt1*g>1r>jC&yY)&fU9>1EF;P%XPVa-fcipTzMsJU`?7h5~dyl_m!>$|M|4!@g
zpHR;_ZQ3+(y_k%Qj2EjW7C%2Xaq8qrlRSRk+gt7Vdw%`D&fY7N`BsOmy>#i4(2vF3
z92^SK6XHUDotbGIoBJj=D@*8I)RK;^CxRs|S?i>=e>&DHy*q3E`RD(CJnmn@)xt1Y
z-GANs_3GI{(Gh#AzJ7RknDrGq8(Z1qx11Mx_r5S#$HJyr{QR7%vwvaX$4RQ*TefaJ
z-XpoW<mDw{b-z8;-`A~XKRU-;_}P<_lNA*euU@@+e!hKqdHL~Uo72zFv#*zn_g<;>
z_qcrhnwXuF&Za51xb;W~%FD;cg23P3@Ap?%R(6(nF6k)cm)%$Rm~H-fa|43|-%d_e
zpS;lJ4Bx`p=J{=HZI3=K=<fCo3=E8ojdgKh;VYgwbLQ#k`r<zye0+TT@87?xSFPgW
z;yTtN>1-7o8L4^s_G{Uct~CaHuVNq6o?^W6Rr2`h>H5YJJQM51qoSg&EMM{X)RQME
zm-Gr_UcPwY5w>p48kOT=kB|2scQayXX>04Uw6?DORkG=<b@{uJ(B4~H*RIv=n-m)=
zV7YF}3xoaL5t_^Xt_)tD#NF$rEPVLG&p)l);*+Kp7Z<liOPJ@$ME;zezfbY4dH%gA
zFW+*4D&7f=KR-X8K4nVH->=u@Yd$nKEQoh@Zk|8?{$zFksvE49Ce9o$U%s69a!FB9
z(FY4}FWKx**KXXHA!UA4A?V1i=X|HV($m$&M4dSzqoVrcY-j0w`tU(v{YIx5494l_
zRMxMQf4p|>+8<8yX5A6cZglLOH!rTDqQcMb-0t%CLBYX?4;}JQJ#g-vU#C!ejc4}0
zC2Xq?=uSU<bpFr#_5W=xeGad>6cKdm>ebSdlT>f`UEOGAVlw5^@=lSB(>h$*Q<rYs
zI5B3gV8$G&e_7ett@D?1RdvpJH|5#euVMn)j0}n`ZG5t?UcHhM6fAsm!|>9NZ*QX?
z&PuuA#Nio}Bbw2;XX(X^S+iz&ScPV)P4;}oF(Gby#InlJm$K7D)h2uL<?qgtQCzZk
zvGSiaN9HT|`{s2_J)od!X<7OI-`}@y-!hdI&1n+2bougO@hhwuMw!O*&+jjO-uELe
z@BTjDxbV<WQBl!{ulenMG{|TqhQ3^}V#WRX|9jW0>Dl#t#exM4iY|*Up3vMsT|d6d
z$Ng5c$72J@-z?jHceMB|pS&sY=+UG4aeEZH>;C^O|8(o>)veWh-Zj;GTXU)}c6WDs
zdwKQr^i*AJKIoI1ySBBpb<tjlC0n*^d2?gq<97MFA73u}+yDEKEG;c<HFw_h>DzN}
zo5eJ`Ev~Gre3;G7&i?7(ix(OE{QRY*Uu%DVv#tFVQlr0f=g!;P^Z%c(|M&Ub-Q8QW
zuRm%z!?BQ8+U!C1)6>(lv$D?3x351l!|>OyUom>&OICfk9$!Cq)~v4UHPdw>i@v-F
z<mcyaQjoK+t9fx@;gKUp)`_i5ab0wnW1*n3+n$=ALW*CWoSgjVQ4%*d_ebUfZ*OmZ
z%(5az@B01w|EI^-Nm>>?*;)L2(&Wj7tp5J~?(WC)Dzu;8el7ao4xhn_%FoZv-rHNf
z^7KuKCWU=}zeQ(fXV+wBX1;v-wDjkv)Rq88N5+5k7PYm1MYY4`*wse){9YZlwyU$#
zvfu&3)fdm7KY#zefBouJs~$ail$4azGQYH><jc2j$F5&q=4)N~>B+6F**9~_N=v_P
zN<F>8RMl^`SHDZUpwqp3_io<2$+7U*F*j{(?HnI}|My;A$=}}GJl-dJdrxI?dU|?Q
z)vn%N-mN8%j&v3l7T*0Fc53@|?Gs|!x?td#zj1qmNHf=wyLWBX)YQz)zkhsu{OZ-K
zU%!4md-iNrR+gKao1UIt_O&&IWo65*_4oJR-<<C6<mBY)+S=E5ZcpXsZ*OnA-@TwG
z#LnJ6*Sh@Ojg61L->=Wl%G$JL%bzco{jaZ$b`P5n7iwi-aN+FPx69|(?J9kJ?ep{V
zH*>ZvT==ksQ~282X!pCt_ncL%dIWCmD%Ea3+}Yo+udgpY?})(3^!c@B$;WzLym+y@
z{QbU~pPTmXjdgcVzq6yzd%E7&&z~1RE1Sw$nN`$$ZM{<CcTIMO*WpT%l9EqqGF)6(
zOs`)3&6V+&iGkq@Cn&Ems4#C7VqkDE642i5Ush)3D6qTyy;$(`FE1}MX~i*IxPM^L
z<QWGIB5&F%gfTHNc(8p7FOyGCe;#+|IvaySJ=?LV3=9mD8Y6DjwmjFCmXdOEcK-V1
z%atov=FFYDK5p+Si}wr+FMJ<J@423loju#G)~d3^US0k9WPiIx-3tsK>KGoMic>Z+
zGSb&Sf9lk$Yipx@eSK3?Q?swHJNoG~0|QS<Ld?zVm|Z2E3LW0l^%6BROH04X*Z=u=
zb8~vgL~RBJHVuPyZ%pUe*XJc9IApy`PCGwutwucq!wXlad-olz1~rb``Q^pL#DdzV
z?OmP3U(#=!e(uiha{r5Q41YTwJxYp{Z;ZH^T~S?aU-99<?c3H?R#ks~d^9yRZReA1
zI(h1!1E`7M)wO6Z1DlzEc6BeWwAqp4$DcoadUl2(b2LX&#GVR6omOp`3+q`}4*Z&G
zWXtq<>fW|ht6tsRU4DISw0Y4JkI>LiclYB@o}@(FW^DM*ED>Hd**N{2LQBCq(VAXK
z`?^0rK0f|f>g>$yD6rgreqLs#W$`nggoFi3HdD<jD=V$b-kdmd=1I{`VKpBPe*XD3
zm7Biw@2~wm%}3fc@6L|u@9!pZ?q>B8bn^4_v-rr(@Ws?%-5a(1)aB3TE?crBA}XrP
z+Okuo;=_Z+?(Xikwqujk{r~;@oo{TsIrH+ezu#`>U)sK4_3G2lKNp(q+q1`pvC|-?
z>is=iSy@@T`TUJS6QuusU%zht=E~1$m1W^kQM)oPFB8{~+f(`3ZQkEgEd9s1xwtM}
zx@1-QO2m&_R9JZOv}s~8GBH6xpcZ>@ww9LGt5>h=|Nq%Md-m;1OTB*|OJ$fKCK1lZ
zv+vg{ZE^AGbLPnK^76X=zNDI&nc3RfYG-Gc^3O)9cU#HJOX2I|N}b(YLPJgU^!z+M
zHC0rWNL$-5EGTb`ur#nJd~{@beBI6Y`}YYtmA|{=$ica!>*)5ox2;XHudSJDU2bM-
z`t#SXZCkf~?V9|acYfV3O-BJyQPHAz<wv_jSsW)6d;LAaJMqV_UzakrJbU&m?xkST
z(*q02jb*<J`p>s><&cz;3hHHJV_Oj&U2nL%?CmVe;<UQDe{H<dRqr1DcJcG;n>KCQ
zf!ouV`{itnOiiy|z4|shuVcxA1qV)@TD5)Ba_2QHRlRL(Y%K!K2Ny_v+<)cQuV3%B
zu3WN2L|i;QB}GJ9T3THEda?R_ehV2tN5{tI=H@@U^>lP}w6$M@4BESQ?~)})PM%!3
zy{aXG^NX&<SvE(3yLpb`;olz}?LKwtl%k?y#S5+{&z~1t$h5Motb5Vs(bd(pBWB%!
zo&f)b2+l83QBhGG3#UyJTP1k^(V{%#!beA(+xfO`+4AGpuT3}K%rm(v|Ki09i^@+=
zrf3F(8j$POy?gPZ;=zH&W5?WLq$DIf1X>QXwKp^{G$~|dWqr`Sr}Ol|g9+27J$v?S
z*}8RkiHRT2n%^%eEAzU^?X+U=UQp9)j#cTZY15{G#vHo6YievjUF*MpKA&fC{PXMe
z`jaP53ak5t1P9MHPUp+qU-Y!=OP)f@y}i}j^Y7caySuYBFI>0IF8kV=<NflJm&Sfo
zWn(lKaGE-GYWDSYrUnKH1`_k;&C`$D^W*jU{Q^#VE!MfzM1J@P0ux^fI`G`Bn9s(>
zW+Jt=|IbUs_}Z_cPA|^PG!9XYV~pQjw${hjw(3jA$rLV$j|;bit`3{{TYD*^;*<#!
z6oTK^a`hko{N;<tKkq*ukINUba&vPV8yhz+Kh`6eoRZ>lkByyOxn*0<O{EQYw%7hH
z)2v>(YL%3A*_wjZQ>VN()xLV!d3Lt><gyrdDf1sSb(NJnSFT*?pf4pQb@b@bD{d{n
zg_;|rU0q$3-Fg;m%TG=g786^xWXY8~cXT$f)_jVn(Pwg46Qc4ya?O#~59Zf?le{V+
zC)X$7<>fVLrRKzqn^vwodFm9G;+DL-yBejnFJHba=ydMfxs@wd_JToVWTf{r9Zz51
zr=NdTB$ogD^z@4R2Z`c?O{_~&@9Ze#P;_=ae0jP5^{ZE}UcWAHUDl(}vCz4_XlG34
z-Ywg=KNh=l=T6?89Uq^aoqg-pt?cXT&d#x%d~07@+p&j-+vE4uc)ksfkB_f1zmc<T
z>eQ)|CIv-A+=#FLdo*ox{QkP$;E=U(d!uUNlNRi{c<EA7T3XxUTu)EW=;-LOvTbwc
z-o3EUIX5?VcNSyPQ-;U3-BV-qu3x(r79T(VY+AB+diwI--rk851v4iKP24!?{Bv;;
zkq28BH%e=NoSqyKGG)f47cVka8CqIODsIWYZ&!2s+O=hC*7z*H{Qu8q|E#SujnkD{
z3U&zIKmGlFeZRn`@86$)tT?oEN3B$E+3Rb%iNDq7*C_3kX6KV};FxPw>a~E|*myI)
z-46$!_#}Y>=JJi1m({Z7o}R9++``1fv@2_g^v0lVf2+1`-6|?7I@>IF(o4+++H&@F
zI{(j#)wWNXbg5HVeVPCKeML`Cb#!o~raqOmE}JrCO3dD>sWz8m<Kpbn&Pd4hPoF&b
z^Fem`jx8Mr&z*bse13i0zM9JU|7X}8K79D_<;%u8I&Z$;umAsIasQn=cOrDeBD+e>
z)O}~U)T(G}a|fEOd-nW!c}dBd`2BMICp<oQR_^)eP@}KzHz&bp=EaK_m9F3U^y!n8
zmDQd-dpwTntcq1L-w@(d00IW{&%6I`Q*W8Dc=6&H`;I6)ICgV$dTD9t_qVs**EaX(
ze0i3lI>~U;KL7d~e_5QJooD_N{_?y~Rn6S|`sK^P!NI|?v40o$+nqXbVgYzy&CAP+
z#qr7W=iOT-oEDc*S66?icWqs)b;0qeGxqG+bGV&fKWa<I!Gs$(Z;FbECGFn5d-twg
zRq5&KTaD&bu2{M9;P#6bFLEsW|L^<$D^|I=xxaq>diLy@Q1!vpxu2h%eSK>CiWM3y
z7k++z?s_XYC}>HEbHY@AhBpr3wVjQx*xnsFecF4$xoc~q1)Z4we_L_D{0D>cukW6*
zpOh`@{#3+Q|B$<2pRCFmC;092=fm5N9XodI+O;cO>V9(^IA+e6F=5(*1qv+zF)=b*
zZ}rJq3piDOe>e5UY5V_wngwQAm1c$Ot&P~oq!<zvrFAJTHdc43^p3?#y{C8m{2BXI
z^`qb$ws|K-f9SHZvO2f%EWDVZtE(Gp%Cxblf$@DX-<Q=9JFCCHTd-ik?(+9xp`jaZ
zzWMW~CO$siB~rlH+<f`vmnTo2%rV=&W=+oXb8{<pPu;%V{3Zu@WNPb{Ej1q=I7UZH
zUkg>_ICSL5l9ekxlk{a}WoONr#j)_ihYwv{TxPRl0|GXrpP%R4&iC-!+qZAq`Q`QA
z?Ag0_@5YTAzvPvalo-tPDJ}i__;`PKSXhz8oce!1)opESA0O+TIC0`5a9Q)C`1gs4
z%3r^J<>lpF?l)J;G)u(k#JO{RKFR{x>=GaBo;vLBnp*t)oajHh3)io!U$1v|a$4bf
zxQ+Mr=5&6ijQ{`s?qHgIcG=~Z2M-?Hwr$&$Syon7{qpwHHi<XhwB?Cw%*@POcrgQH
zzz3Pz;(9R}d!=ja{_lRjPxu{&;*=RPG?wWba_l(x{PX@FkGQi=n@GKVy?(zN2P+#}
zSLX8b*UK0fUU0Va%WvDbacAl4u*^(NrxQnxr2PByGyB>aNwXY@d&&E=udh3H?AUDc
ze5IB<ckdoPeE6f%j^<|Obra^!y?gU!W>(g&)YH>0T)1%NjE}FcufPBKx3{-TOG!Pl
zx?lT!?vJ>CpXdMYk+Ze3vf8y{$Be@dBO)W$#_TM5c&IhU?DxTD_87hECr^4NoVVY$
zIYQ^<T?dZVwzgTbXS=((+138qvTt8pe0=?z8yo-q`)8bfPUP}*36?t!9J#l*@hX-)
zJk&aC)~v$E$KKxADg1uBymgsQq`RxDtLMt)&+|C!=Ihty+D!8I@p+TDo?+Sb`|9n7
z9~SM5{d>CN>#NY{XzBLD3$H!@Sg~!}Hl?kW@9yq)_d6f_-_(D$neP&lJM#5^E?&73
z5*_{f#l^*|R%xZCrpCs`T3cJ&+uQ%SsD9w=Z1ekjtCufY<P_VRo1M+g#g&zn<>a*M
z#m=2OO-)U!zrRz}mX?sH`S<gA?9YBhjz#~U+`hT5)_Te6$@c7gGCy7{?q4A`C*OV9
z3--sS>dtnH>wo(Ed3TrZ^K)~ne}B{MtGyDjE$^;XV=~VS?eKLW;o-r$74>sEJ3CKA
z1P2B>X2tPH8nyK72X!g8zrVM)`r{*4KfiMy9v)6VKX2`lB_TmUpN`AdOGrv~{?U5!
z`KOH>zjj_g<=0oCo}MS$<?A|1FV_Ehsh*>+qqAo9>d#-l=H}<GU$x4}(D32MitTxK
zrEIIdG+an@;&^+1fBZ!~hPy0Dsr#2LUc7kUzI}@qJEyGNyVrL1*<)3YD@xju<tLvM
ziL}?y=s5p8`117*cK+(6>F@6BOg`SXcJ*p)UEQMxyH7v8b@S%k-R0*GA9juqkF9xR
zmKa-7Utb?n^8er8oyE_;c}4Lp*gtXl^!Dv>U7++=F@NWum%eX%u3fvfVS_<(a`K+o
zbvt+dJgvW9g+obSf4z9MWXO!!v)Nf#c%;pIQdTZrytuo&domd8-Me@0+__7aE}c0u
zGW@1gNJz*M{wa4EN-j2jpK-5e>hALQc4cpFtPWqFGK+PBhnpLlqkvNQyM{W}7mJu}
z)9>skOcGlxYP!N@ueA31*xkocj5g-T%s(F<9&TUpLE-=X%^wd`^S@Zc{N8Y{q;~xN
zy4=*%)a2yLpPyDHC@}4MaiH4gJ<HY&8w{EhUcG)TZ&%~N;dn0m-j2d%g^tDU{mYgu
z+qH9NW=6&XeiOav(vp%dpFCNzcJ11wOP{`ZQ}g7+#B0~WS}yFX{k_a@ZkNEXSF6{b
zU^{B<{H^H!zrUH6ml;a%$jZ(=aNxkMT~=9Jw`?)7x3@1YE*2G?`tWf3`Pt_B#>T-r
zChjhOziY=10|_2w<;BhH{Esf3IN_nKtsNQ~nw_29C~IG1_y5Vs$rkS0X3di7K6<FD
z(YE#|vzQ&oQ><JO?B`FN0(E-B{EjJ|xxFp-uu|ZRIbfjZ+}6_8R<?V(d%s-m&!^Mh
zzJ1HF@Y=O&o72xvn?8N{vSp7hty-mJZf?Hm)9vl~>*MxTJwDcZdwc%wUArcI`~Cg>
z<aOJ&ZOgm8&DYg+>8e#-HoYI-+}y0{JuM<4;z1>w-Te3O-}}q{d-D8wds~}b-Jc)R
z<Lh32%a_#nvQ_Wbv0mxg+FE(Lnj4dsF)XP5a&E_`7Z(@T*v&tg;y1&f(MnLe;19>-
z88ajV1VE;qJ9qBRotTyjPft&m<T<v~d%Bbqs2%?4)2D4YH=Fj~EqiyTGt_(KB8E#l
zMC9f77d<^SY0{)?*RJ*S@FXWc-m=9cXy-fy4u1ZA?eKMbs=js|ez>Rd^Rq`syS22m
zo}3VzJYj->lvGq)+`T(@=1iHgWX&2GIXO9DVPR?M=-AlU=;+;*pVQ>}#RUZ$U(dI%
zx6{)*ckrO1s_N2h+qUi8X=!RY^=Oi;eVt5p?%w+m(b38+ESKgdF|vAlpO!QGcQbvy
zZrq+73l=O;|Ig3GaMyjA@We;w^~*)IJvA@9zP?_$Ma^%H#sUMY+FvEy+}(YBd=t-d
z9ryb9AkL#To#$HNqGjeM&Yk=A_3PE^*O#BVKbb3Y$HbeP(}Sfye*5OeA!}DNV@pX{
znbAz2^z`&k?H4jkf^NwLM?`c8{Cd=_-x6DU{#<jjo|Qqsi({1qtU8Bw?B30NCeGEx
z<wJ!{aq;H~6DGWP@dDJBe7@Ibwpnjgcj&W^CoNk7!osF?cY7x#C8egSn)XjRuruUU
zxfQ5FVNrDX>#_V|1{)h&iqy(Ohn)1LXQ!mNEWey-GHVhT%$+Oi^y2C1>9+p^|H_z~
zn@30AUa~}`sGfiN>AeLHn<h@YcwD~z&gXAeuU^%U-E}0vU_+4-!wF&5BVMwyvW(o_
zN2`8)d3kely05SA<;$1T&(F(EPjA1xp;WrjIp4zS^Z&nfpuF3D_~zE^>z_g6JZ5sw
z9~p9sHqO1hLoiW!Ua9MUzx_o!WAvtb_suO7{3`P8H`g`S^{ZD$?<`6U4GqoBef#U{
zYi}>FK6!h;tFFs0X0SLucqu+n%rGIgBvLkdPsPR$lavi+9ISkovS|OD!X=kqu3NXR
z;>5LEx3W@GMMXqf(m#IWQ)$$hWxHg}nw%#mCR(@)E!(nX%aSE7(b2or&qhT@KY#Wt
zEG(?7^wfvF>5q<dMn*<jm%Z7rY15;R6_1bi|9{+XujW5bC!kk>BQ-U3;<WAg_aCXS
z+<5WiNsI96Nk4x6OifFR+fxx(wf@<enU_Cv20y4>v}1>bs;cWU_g}7SN(u`(IXDVR
zOHEBppB7kb&%eKJ?OIj)_K%$VzkK;}>sHi5!_4mnW@dU?T3uaThunLNjg8H7Z@KXC
z@AeG{2yk<2+r9huy4c-nJ~Ixa7{%|eiwy`U`1Ist>FaBr^8-^H9=~{@@htw~i;Ig{
zmzcBY?Ao=f#`ARf#fuk>YTMY^*uDwRRa`K?;NzpCjFQ@*QT6Ga;p^ji^>uV~czAf;
z-PyT#wXRR&Tm}ZQMWD3+tGjiD{!dd85)vx<`|B&OwAqB^jxw^cZ{NO+-(PokavC!;
zb8v95|9m^!{ChTyN}rxHFc=8D6lc$ov#Hon_qS?|(~8xrL1UCRZbTF*^YyxUdwI<=
zO6@w(IANYa{l7mucI?=ge0<f)l`mhuY;9?|v#)ly_DRl{iX4xwtPJMl<b3z;-K|@<
zoZEN|jg3El`sC&3S5{vBUi3U8LjcEuud6*&_MLxzetvpt>cy8Osi~<=3LZaAot>Q-
z-`1VkUH*PUkYt?qL7`k0M*|6-#-9fdGGCm(rLM7#DdX?Hd<|{w?Ck9Fl9C5oOKVo`
z+PinJcINFzkCG<7O84{gJ9L?eW8s@OIjfiidfg5yUOjlw(ZPLI&i{XZe;+FI_CDPy
ztlqU!|G|ctGiRQ-bN2i^+v*Pw82{}J+1=aAYxhdaAujIT+1cjJ&CS)>O41Cwk{%pA
zRj18*OMJ$R84rBt&X_V~%7zUaHf`Fpu8g%u+MI9s`orzkw{PFBw2_;B`mNTsS+iyZ
zsk0YwakWgCH*emFUs_sPO53@3WUWGc{(k#brum;gCNwlOI(oL-VqQt3mMrz<t5_vW
zv!?9cT^+u6e?4fn{&>H9{nuAh8)gK@Z%#VeWt@KQ%9Se*{tMJTZ(G0q{rdg?Zr!-i
z(f`)-eGq^2<hDj}ZFY5wg)h3r^-t8kS6X=a<qwHTQyx0IySpzFoayi;tm1FrVz-AZ
z%bQ!~%#qR6)wN{zYPqo3z2C>z_vDHz<#{3^A`y|1p2D|SVqPU?U%H@wtt@5HeXquE
zn(?(?r*?OH`}y^qIAVPuq2cgD5fKp!3yTx`UmrSjXw#-m`^pxB2X|baJn5;JUUhGl
z$$=e32?dXibT&?^<9?z1>GNkxnLekar8RdB7(Ha#_3Q5vQxk#XQ=5f3rZCU#>+74W
z?(a9#DD}#Uz*nzc_4W0!^T`~Txkk{bv9XcGk;7*L3k!<?OJHztbN<Jls_g9TTeg^(
zo12%GmU44<=kNR3W>u-XPrN0dy83s&{XdJ+S0TE(y1cx+;^NbP{HUnmdi;ETy&A`(
z>+$uzetz>T3Kz|qb!(1gvB&SJ+TlyenH9ghySuyg_cu!`D<cV>($cSyo6{z0#m_i(
z>eSZk>rxUD1`<5}{^!N@;~pfRz0||P3JxHp$(N2*FY8`hu<N58FAq<KNtFE0&v8w^
z8qWzphhAPEwz^PbcmL3#LubzTJXmR%d`v=8a^m)b2M=;A)Q#R2Fm<DV)9vl~(>G0D
zwQAMI<l|i72Tn!o_<P`h!=-(dpVKb+txESSX+Hma`t<3uXU*dJvS{JLz?hgGZ4psX
z&LyeaHg4qP<_-=D%F4@|_QQ@f=9OFa-3yXU5i30u!cH~*6VTqcZo%fw#aUTd$zTu`
zc5RZXcTjNf&l<aXLc42z7QIrg=-HWYkm*v>*Co8Xy#Dj;V#CA3!TkioCWSUW*)HRl
z&i70A?v>sC;MudX$H#ij^Y2}`b}epqS#OB`k)={nQtkZmbw59;ZjG<4t$lenVe`$f
zurMz#uf)W}`oCYrXP>S6`^)rNT*Tfg)A{G~GcynFif?ReR8>{Y&CR`e^JZCD8E61+
z>(;5yYJ*~5#btv!a{}5=9qK!#{>V1e((>}jEGaR$I%Ce99)Vli^X2#DW@jH(=k_p-
zICEyEv7nR1md^LA%jG_N|1KWTzjT}b;){8Acd6$5e=^yBN%`Xgjm#VigO~epmL#U7
zeLKi5KS9(i_m+$9(bbz685x!4ia!qe9wjaDYbt}mjSn9_eE9N(hnxHJr%%5gw#&1m
zz1tvhXo=_K701@B(Q)xqm@|L={fid`g@lwQh>B(#J<K(HRBc)Kh-LE0p1wXcm#228
zPM?1L;>8T}{CN$BxVN2ta%`q?x`5Ncg9jsyigNE1VhIcjI|f=ElYV~Q)vH%UPbBr4
zS9loj)p!8Pzj8N|p8oy)ee$G9PxQ^c@0&DbipnPmo)7aDE?NYt*XPcC`|8!KnKLab
zKc!Sx|6a66DdyLQht8#?rHxacf(9fyK3(q%4@o;a%XRJLd-v+Tzl$v{F0OHK@X=qp
zcCG(>yVBCqw^^GN^X?x%?!II$kB`vZ1G0);UD|TT9?fcNYXd2oXEPI2u!}vAHqTRd
zxk&oz(s|p}Y&X4?+_YgsKydJD(cWwZ#gezTOn<)DW)orUKAN;Kf@9&IKQ&_ATkHS-
z`~3X8a!XftH!m-5rioPK=O-s8pPy%IY-qSJ@4uT!V*QzWd#kmzwZFf+tG!WtPM^g8
z^&SNbLK3%?7Di}Z<h^tB(o*loj~~01g~Z183anbYcBvFMH+R3RwcFy0M`TV4zYHoa
zF6NJ(%s6x3jl_MM${T-rSvH8+#$y?|SToZ}P0a{n;KJhVQfvbkcE?=>S~@#DgM%j@
ziL<h@GBGt3bb9#kp{S^6j@j-73lh%Hvu)>-J@oeW?c4nFb}=_9tE;P%lapWGeevQ&
zg3-)ZuU;MRmtVhT&65HP&?sJ26{v-+tgKw9{Db)?@}R|`_Vph=#&mM*xU%<JLT-8k
z<HjI94V$oYbFITGdKRr;@4wEpy`?3fyNy?RTl#sqmJ9#>{w`!So9(;&a&vPt>yf1;
zB_*K2yHtH9<0^?gOqVZRa$0=x*}1ve4=lIo$Lt8GGXGIyH&ZaG;m8q}7)OP@+P!YS
zf4yE0E=Pspmo<3b&EvgRb}xEe+}^I`7XN=fm)D!#y*@cPS@f;A!c6(PABnfO<@)*g
z`KV1knX)Nj&4&*k{`{#?R#uLAc%YHFuCDHI8?Urk&W%Z`-kUaW-nc}r)OG3R&6h7-
zGE!AdeRgJMR#w(xw_YwjzJH(3+n@Y9NvQhf#^mEiyTzCL%rvU`QQ+%)mQz?w#=h>(
z`SbjWQ>ITp{<Nrd>Y@#?YUTn?(cAO(R(*ZdBWe8Q>(|iG(BnOlkKewneR^stE4SDK
zuIg`ZK!&}zxVW89)++VXl>2qRdHtn4c5YBEkXo+3_9V-Ta4n&V`9%!@Tk4)3Y-Tq$
zG7`CJ-5_vlTkdR!OX?TavozGX7ZiNhlzLj^?a>8oXUeV%D}*sQ+*gV-=Mh+NpX<uE
zlQpT}iNh;Bn-~}vm}fC=*fx3ML`Q*^6QMQ?4EKzGt#x?I&;gn!<YG@!WngGXc_N~H
z`O>97fBu{~dp0yAq>W$RF8|)1GiQ7@O*#G4&CSiq(lRqUJ3BMe(%M?yvS`WHt)k$8
z-#G`~uU@}TsXws${p(}B(kzZLwpCyL{r!D;nQyXzgq4+5V`F1!Y3ZfiE@nmF-^GfH
zi?cN+rlgd7c;FZ#B`KMin!0q=s;t~x-3^c1&p)4UQ+es=QCDYYXJ6mmqe+Qh56s(Z
z&%hwk>tlU=sZIK)7Z;UVF06~){o(EF>+4&8FTMOSBCP-X^ZdKJLU%CP391%c3zeF`
zK7N0nK-9Jz$#ctmAH90zb#3Acp}drjkB%}mEpzXa`T6Jb`ITa-s;WWryN*A8cy=#S
z!p(ho`~4TFE4a?T&G<|4@0UA#jskLWa^dS@D!;xGZ9fc}Hb2@e9vTvIBJmdX?jvg;
zsQW1D^ZngjZ!2Bj<sUzO)DB;#qp6vhn|t=e2?H}TKW}g4&{ZnCT0A{GICyz=_4V`f
z^8CEKg2KZ1`1$)gJ3D)O*RET)ZtdE;dn%3lk9T);9Qb;EzP-G-`11!3CQO<X6dis0
z&Yd~4W}Qmf*e7q_SGt{nL1M)Tk;vWV>z;i6dGqGYef#$P`t|Ed;;e-W74_!Y)$VF-
zb#-@dKXI)kd1=Lm2@^u9kGZ(IDz==PW2wB<o1`9KYvEEE2ZMDiEiaDk2$HM5xOvm2
zW&ZQeJuF~(lVc_w@8aT8QC&TI_U!YsOuLUJ`OY#~`8>(%@-pAW_mZYo26=le@|G|+
zH-Dw;7yI_rE3c>wlUa?8j5C8)ZP+m3^wUSeJAV9q#NBe?^mP5|AKeTL0Sccwrn2+P
zJt?r*UH10V_wVKg1_6PAiX4Y--I7`^>BzA$V$E{@`Dv*juypzI_V)JIuU^INC|Iao
zY04@j|43Bv-~RjWg<=mSa56W#we(u>$~kew7wn8ltZ#X2q+ot+T`Z_O?pn?GMft;}
zjXo!o!=_E0+ACu@sj6o=xD&?GZTWw`e95lWtF`4eZQZslDl(FlmDRT9hk)XeB}-Za
zgifr`WS_pPaqHI7yu7^BRMp8R->mFrVECf`L{Pi8x3{~iYtf=bfByazbecJH=4`WE
zrQ=B)isIta8yXnG!^4AvgZbKve}8*>>sHjK;))v^5;+z^dR?-zvOjlRv2AK<GBPr{
zbN6of+gqlIhgj4m|NQm!byHIlXeC$lc0Yy5oC@YiNl79rj9I=oZ#Xx>r~ia<SX)a=
z%>KGsNbz<+%-!9+y1KgPv0q-^x(`MlUtL}Ov9-0ewXyNwT<dZVUZ%SK?b==?E2~-9
z*p@9@HqWlM>fWA8Cf6tD85t53l=^L*KR-X;-`y>3UAAV{tXcEs#d&y~czb*M%GvVr
zkX}`EbhN3dX>9D>latktA3HWlx-i2eDk$jE6wP1>p0+zNujE)9=UA0$DJmYkdp9;Z
zy86Tf#k91vxVX5JCr`e6_ipbaO9lom#w~TCoO}E&7Zj|GUm$;pcWt}{KOX~w!puf-
z?a!Y+9Z9+K?bD~AEzJxJd)j&SL~t@NDAcpX@p0;~uFBA7V33G8utSJ}!P0O+v5W)y
zs%;0kjx&V?@9)_*DL6ShvueffshFtH;oQ!r=ryScG!V682al{($&n7h)#2;ctz5a#
z?$G<kQ&>O?F#;qetNH%=aG3x6JlorM?)YqVcXv0I=y~uU;nJk3Q$ds2)!*N3y!mF<
ztXVg1M1+Tjf6@dGSjmfsl)S&U_t~>&+qP}{^XJcn3l}C#m~gL16jaoHTCiG%eSYn?
z$l&11JBy#6nC0r~x^m@8Mn=Y{sHi1|hK3jK-`~Gv$&#HrEp>Iz9z6K)<>lq~>wfF%
zO?CESy7`SqR9t-elqm_i(F>kmxpploB0}R9H$#9*x0vp&U8UJ2C0}lB&EBYLWhJHP
z^6FN?v3~jbPftA8C|Z}kx^jBDespxSx~l5KDKX3a<}SLJVV-~Q%H_+4zsAPKK7Rc8
z?VC6MzSsXRzqG{D_Pa1>8HvUuMd!9Pk(-w-SfHS*%d2?h&YhZfcXrM+PQP{IM!;&&
zbmXkVSI?X|bLrBiEn7tHPtxRkQDW8W790cun>KHD-aCDg!?wbuV4#{|`$a6mnwf#k
zGW*(^oBQkQOG>t^Uj2G!@pI5bbKzsRnNbs*y_h7znHUt*cbzIUD0*_@Xt((PU$57P
zhK3p%8j6XD&6_umskH9*Tk}_o$|55p3kyHaFiificI(!!7Zy58OG&j9cd4qXe(n3b
z_YxNaLxal-OFot^v%EVuE?(T2b#>MLf4{O1xA9&%pL^zTJAZRi(>(k7dzUUvnmBP|
z!ojA#K0bMQ`4}k?kt?@uy?Xbq?(3_ovt~*0wSRtev^)Fyy2|S6`}=BlhtH9(cz%$P
zL1ID2$-)Ouo;-Q<sOaynQeWS*qS|2`_OBm5F8=oBX7F;qiDKE=ul4u+V2VGjsLI%*
z&B!o8_))RUn#j#;id(X-YVq>&KD=~tvU>dfy4pWKK3Y^e1q1{{Ma|l^%L*Ld;E=Fa
z^PAIA9?3O%_H6A>Jp7&QU@+sDxNg*ya;6{Plxh&8_x;-1XhTE8b?eqWDe|pn-gl6Z
zAwXq!`TJ#;Uv5r6pO>Gn{#^dIB3QM}uV261`(y;~X<eyr$S+`E5IOno?(XvU_jH#X
zdUJF0Z)YtQkj)Gp%ho5Q=H%!&3NTqe+xYR*)6+ku;b;v^U85g2p)X{sx36z$aq;B~
z7YfSC)Ox?azdzqBSE~8og^L$Cd3e^WUcI<#(zI#Mo<C2|%Uic-kx|W$50#&vrKY7#
zTAHF<{{CKRVPT?ygqxciJHOnKr4uJk3=0cewQAM1YuA{L+y0Jn<Y!=LRjg6*;IRXP
zOIK{_{#ZC^7#arN0ClbMx98o}dgGsxqN4ZoV?|wE-67Gi^>Mx0G5hOe6`#C*?Y;c}
zeV?Yqi<QmvqPO|Dy0-qBvU;`l%VVI{#O$S)U#?ua^2#)E{Wza(J(fjJPCTDq@3&P$
zQ}gf7=ktTC?o9s9St8vM;N;Y_XfMMraZXOoO>XwCb<OenYGxixh}l)La^b>-OP8wZ
z>*t@Iru*bskS6O(Az@)=CZ>6|)z@y`oH=`TcQ4k4LG_;>hI*<ThYlZpd}^xp`nbK1
z3M}&P?b%uJaZy(nmu1lr6&011wzg^0r<<FbtE;MNYHPQ*w;w-p<jApOVd3G|uU*T#
zw`b<@$F43eC!QEEFfa?vRLXwer@h>NeqLhY#fujeH?_XJy!>*;mQ$y^R&Cs{K|t}#
zQStZ>|7HLB&as$y{P9H54TaCn%)GLE(V|5HPU+|7DC#2G6B8FNT&TEJ&}OmEqqlE+
z1*~d*7-YVD^Crb;=DBm{f~<6SdbFQ1G!?2UxR@WC+7-jz-_h~m+cz_F^ZBOPV%<k)
znPg5{yjVHXi|f+D`g);X-@j;tPB?e>ZtRa4f45{_Ua>tbEsbO0vSn&Dv!_lqt^HM!
zxKzz-w(s83;^M{kX3dzP&=M0H>&e~gW^7<k@%dS=4<GX<_G4cg81DX1zZkwzs9QfV
z&{C)|;YiZPd3Lq4rh>t|d2(`c>sGI>et3wLot<4}s{&|vrhwJd)by1u-?BgT*CY7k
zY)(8ZD0_SB>HGKj2?+}pEpifQ*}C=X?d|z1{a3D9#bvIPqf)<EM&wJwyTUIoK)YbH
zZgD3hTn^t@bfiO&W8wb)|7K_HDSqCU@Vx}wPFRE5PDshkojZGWbY$eo6r<|v+c$06
zG*Q_-XnV=jY15`nnUay6{e8*JeZ>+lIBRaSGkjsI-MTF~JG)!Js_M%N`T9Qx(>9+z
zecC+#p3gh6Lpyft04-B=b#=`#+r4q)$78+HTeogaO-<dg<vq*Gp5ETot5+{xv`9)C
z1cHNto}HPgY{2r4ttj9EGlN6mm#aH2ojH^9@KEdif4^RTd3pK&dUdP2_wUc2wN}^M
zJiOvsgUIaH){eU-OqlTc`uhAE8ybD;p1gRGk)N+$q(AY?2}e-IbG_JJ-R3vPVq?}-
zEm>LF(9o-%lhy9-D(&87&?Hdx;laUQUtj0u=5AED`{d;0<mBX&x)!zS9_CobR-+T_
z)66F{H_0(DbTv)LG-H2$sp(G2Ue-PS3=$d#Dho*1bA?jlpQw@BvuM$yM@PGBAD&WJ
zvS`tv3l{<|#xXD`NX|?KjZ28@$K4TM$KzL1QzP=0iGg9##J4sU3=9VzusqXdWI$Sa
fNdo8de}=LnlK-k|)k_%|7#KWV{an^LB{Ts50h)Ty

literal 0
HcmV?d00001

diff --git a/docs/references/api/resource_embedding.rst b/docs/references/api/resource_embedding.rst
index 54de4d460..392655a8d 100644
--- a/docs/references/api/resource_embedding.rst
+++ b/docs/references/api/resource_embedding.rst
@@ -983,3 +983,41 @@ Hints also work alongside ``!inner`` if a top level filtering is needed. From th
 
   If the relationship is so complex that hint disambiguation does not solve it, you can use :ref:`computed_relationships`.
 
+.. _recursive_m2m_disamb:
+
+Recursive Many-To-Many Disambiguation
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+Use hints plus the :ref:`spread_embed` to disambiguate a recursive many-to-many relationship. Having the following:
+
+.. image:: ../../_static/users.png
+
+Note that ``subscriptions`` has more than one foreign key to ``users``.
+
+To get all the subscribers of a user:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /users?select=username,subscribers:subscriptions!subscribed_id(...users!subscriber_id(username))&id=eq.4 HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/users?select=username,subscribers:subscriptions!subscribed_id(...users!subscriber_id(username))&id=eq.4"
+
+.. code-block:: json
+
+   [
+     {
+       "username": "the_top_artist",
+       "subscribers": [
+         { "username": "patrick109" },
+         { "username": "alicia_smith" }
+       ]
+     }
+   ]
+
+.. note::
+
+  We're working on a better interface for recursive relationships to reduce the request verbosity.

From ea7a2bd531ffb11097900c6ec36ae729514e1611 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Thu, 11 May 2023 00:43:35 -0300
Subject: [PATCH 582/652] add bulk insert defaults

---
 docs/references/api/tables_views.rst | 50 ++++++++++++++++++++++++++++
 docs/releases/v11.0.0.rst            | 13 +++++---
 2 files changed, 59 insertions(+), 4 deletions(-)

diff --git a/docs/references/api/tables_views.rst b/docs/references/api/tables_views.rst
index 837dd8232..989c1f8d8 100644
--- a/docs/references/api/tables_views.rst
+++ b/docs/references/api/tables_views.rst
@@ -875,6 +875,56 @@ To bulk insert JSON post an array of objects having all-matching keys
       ]
     EOF
 
+.. _bulk_insert_default:
+
+Bulk Insert with Default Values
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+Any missing columns in the payload will be inserted as ``null`` values. To use the ``DEFAULT`` column value instead, use the ``Prefer: missing=default`` header.
+
+Having:
+
+.. code-block:: postgres
+
+  create table foo (
+    id bigint generated by default as identity primary key
+  , bar text
+  , baz int default 100
+  );
+
+A request:
+
+.. code-block:: http
+
+   POST /foo?columns=id,bar,baz HTTP/1.1
+   Content-Type: application/json
+   Prefer: return=representation
+
+.. code-block:: json
+
+  [
+    { "bar": "val1"
+    }
+  , { "bar": "val2"
+    , "baz": 15
+    }
+  ]
+
+Will result in:
+
+.. code-block:: json
+
+  [
+    { "id":  1
+    , "bar": "val1"
+    , "baz": 100
+    }
+  , { "id":  2
+    , "bar": "val2"
+    , "baz": 15
+    }
+  ]
+
 .. _specify_columns:
 
 Specifying Columns
diff --git a/docs/releases/v11.0.0.rst b/docs/releases/v11.0.0.rst
index a2de2b3b9..b24e61fa4 100644
--- a/docs/releases/v11.0.0.rst
+++ b/docs/releases/v11.0.0.rst
@@ -4,11 +4,10 @@
 Features
 --------
 
-Horizontal Filtering
-~~~~~~~~~~~~~~~~~~~~
+Inserts
+~~~~~~~
 
-- New ``isdistinct`` :ref:`operator <operators>`. It is a direct translation of `IS DINTINCT FROM <https://www.postgresql.org/docs/current/functions-comparison.html#FUNCTIONS-COMPARISON-PRED-TABLE>`_.
-- New ``and/all`` :ref:`modifiers`.
+- New :ref:`bulk_insert_default`.
 
 Resource Embedding
 ~~~~~~~~~~~~~~~~~~
@@ -18,6 +17,12 @@ Resource Embedding
 - New :ref:`null_embed`.
 - New :ref:`empty_embed`.
 
+Horizontal Filtering
+~~~~~~~~~~~~~~~~~~~~
+
+- New ``isdistinct`` :ref:`operator <operators>`. It is a direct translation of `IS DINTINCT FROM <https://www.postgresql.org/docs/current/functions-comparison.html#FUNCTIONS-COMPARISON-PRED-TABLE>`_.
+- New ``and/all`` :ref:`modifiers`.
+
 OpenAPI
 ~~~~~~~
 

From e0b0e988166d961142d220d1ec54a8d695b76f6c Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Thu, 11 May 2023 00:59:10 -0300
Subject: [PATCH 583/652] add impersonated settings

---
 docs/references/transactions.rst | 12 ++++++++++++
 docs/releases/v11.0.0.rst        |  5 +++++
 2 files changed, 17 insertions(+)

diff --git a/docs/references/transactions.rst b/docs/references/transactions.rst
index 45a17b1cc..1fc43360d 100644
--- a/docs/references/transactions.rst
+++ b/docs/references/transactions.rst
@@ -102,6 +102,18 @@ Because of :ref:`user_impersonation`, PostgREST sets the standard ``role``. You
 
 Additionally it also sets the ``search_path`` based on :ref:`db-schemas` and :ref:`db-extra-search-path`.
 
+.. _impersonated_settings:
+
+Impersonated Role Settings
+~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+The :ref:`Impersonated Role <user_impersonation>` settings are applied. For example, if you do:
+
+.. code-block:: postgresql
+
+  ALTER ROLE webuser SET statement_timeout TO '5s';
+
+Every ``webuser`` request gets its queries executed with a ``statement_timeout`` of 5 seconds.
 
 .. _guc_req_headers_cookies_claims:
 
diff --git a/docs/releases/v11.0.0.rst b/docs/releases/v11.0.0.rst
index b24e61fa4..bdccd0b0f 100644
--- a/docs/releases/v11.0.0.rst
+++ b/docs/releases/v11.0.0.rst
@@ -4,6 +4,11 @@
 Features
 --------
 
+Transactions
+~~~~~~~~~~~~
+
+- New :ref:`impersonated_settings`.
+
 Inserts
 ~~~~~~~
 

From 789cedff0898d6e6e168680e5e0accc05bdc7080 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Thu, 11 May 2023 01:17:55 -0300
Subject: [PATCH 584/652] add isolation level

---
 docs/references/transactions.rst | 77 ++++++++++++++++++++------------
 docs/releases/v11.0.0.rst        |  1 +
 2 files changed, 49 insertions(+), 29 deletions(-)

diff --git a/docs/references/transactions.rst b/docs/references/transactions.rst
index 1fc43360d..dc3777725 100644
--- a/docs/references/transactions.rst
+++ b/docs/references/transactions.rst
@@ -59,10 +59,29 @@ Modifying the database inside READ ONLY transactions is not possible. PostgREST
 
 The :ref:`options_requests` method doesn't start a transaction, so it's not relevant here.
 
+.. _isolation_lvl:
+
 Isolation Level
 ---------------
 
-Every transaction uses the PostgreSQL default isolation level: READ COMMITTED.
+Every transaction uses the PostgreSQL default isolation level: READ COMMITTED. Unless you modify `default_transaction_isolation <https://www.postgresql.org/docs/15/runtime-config-client.html#GUC-DEFAULT-TRANSACTION-ISOLATION>`_  for an impersonated role or function.
+
+Using :ref:`impersonated_settings`, change the isolation level for all the role's requests with:
+
+.. code-block:: postgresql
+
+  ALTER ROLE webuser SET default_transaction_isolation TO 'repeatable read';
+
+Or to change the isolation level per function call.
+
+.. code-block:: postgresql
+
+  CREATE OR REPLACE FUNCTION myfunc()
+  RETURNS text as $$
+    SELECT 'hello';
+  $$
+  LANGUAGE SQL
+  SET default_transaction_isolation TO 'serializable';
 
 .. _tx_settings:
 
@@ -87,34 +106,6 @@ And you can set them with ``set_config``
   SELECT
     set_config('response.<setting>', 'value1' ,true);
 
-Request Role and Search Path
-~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-Because of :ref:`user_impersonation`, PostgREST sets the standard ``role``. You can get this in different ways:
-
-.. code-block:: postgresql
-
-  SELECT current_role;
-
-  SELECT current_user;
-
-  SELECT current_setting('role', true);
-
-Additionally it also sets the ``search_path`` based on :ref:`db-schemas` and :ref:`db-extra-search-path`.
-
-.. _impersonated_settings:
-
-Impersonated Role Settings
-~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-The :ref:`Impersonated Role <user_impersonation>` settings are applied. For example, if you do:
-
-.. code-block:: postgresql
-
-  ALTER ROLE webuser SET statement_timeout TO '5s';
-
-Every ``webuser`` request gets its queries executed with a ``statement_timeout`` of 5 seconds.
-
 .. _guc_req_headers_cookies_claims:
 
 Request Headers, Cookies and JWT claims
@@ -153,6 +144,34 @@ The path and method are stored as ``text``.
 
   SELECT current_setting('request.method', true);
 
+Request Role and Search Path
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+Because of :ref:`user_impersonation`, PostgREST sets the standard ``role``. You can get this in different ways:
+
+.. code-block:: postgresql
+
+  SELECT current_role;
+
+  SELECT current_user;
+
+  SELECT current_setting('role', true);
+
+Additionally it also sets the ``search_path`` based on :ref:`db-schemas` and :ref:`db-extra-search-path`.
+
+.. _impersonated_settings:
+
+Impersonated Role Settings
+~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+The :ref:`Impersonated Role <user_impersonation>` settings are applied. For example, if you do:
+
+.. code-block:: postgresql
+
+  ALTER ROLE webuser SET statement_timeout TO '5s';
+
+Every ``webuser`` request gets its queries executed with a ``statement_timeout`` of 5 seconds.
+
 .. _guc_resp_hdrs:
 
 Response Headers
diff --git a/docs/releases/v11.0.0.rst b/docs/releases/v11.0.0.rst
index bdccd0b0f..d8b04ffbb 100644
--- a/docs/releases/v11.0.0.rst
+++ b/docs/releases/v11.0.0.rst
@@ -8,6 +8,7 @@ Transactions
 ~~~~~~~~~~~~
 
 - New :ref:`impersonated_settings`.
+- New configurable :ref:`isolation_lvl`.
 
 Inserts
 ~~~~~~~

From ed147ce5c8c9310a4e31832bae2a01f94b867b93 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Thu, 11 May 2023 01:27:34 -0300
Subject: [PATCH 585/652] add bug fixes

simply link to github releases page.
bug fixes do not add anything for docs.
---
 docs/releases/v11.0.0.rst | 18 ++++++++++--------
 1 file changed, 10 insertions(+), 8 deletions(-)

diff --git a/docs/releases/v11.0.0.rst b/docs/releases/v11.0.0.rst
index d8b04ffbb..6093452ed 100644
--- a/docs/releases/v11.0.0.rst
+++ b/docs/releases/v11.0.0.rst
@@ -7,14 +7,20 @@ Features
 Transactions
 ~~~~~~~~~~~~
 
-- New :ref:`impersonated_settings`.
 - New configurable :ref:`isolation_lvl`.
+- New :ref:`impersonated_settings`.
 
 Inserts
 ~~~~~~~
 
 - New :ref:`bulk_insert_default`.
 
+Horizontal Filtering
+~~~~~~~~~~~~~~~~~~~~
+
+- New ``isdistinct`` :ref:`operator <operators>`. It is a direct translation of `IS DINTINCT FROM <https://www.postgresql.org/docs/current/functions-comparison.html#FUNCTIONS-COMPARISON-PRED-TABLE>`_.
+- New ``and/all`` :ref:`modifiers`.
+
 Resource Embedding
 ~~~~~~~~~~~~~~~~~~
 
@@ -23,12 +29,6 @@ Resource Embedding
 - New :ref:`null_embed`.
 - New :ref:`empty_embed`.
 
-Horizontal Filtering
-~~~~~~~~~~~~~~~~~~~~
-
-- New ``isdistinct`` :ref:`operator <operators>`. It is a direct translation of `IS DINTINCT FROM <https://www.postgresql.org/docs/current/functions-comparison.html#FUNCTIONS-COMPARISON-PRED-TABLE>`_.
-- New ``and/all`` :ref:`modifiers`.
-
 OpenAPI
 ~~~~~~~
 
@@ -47,11 +47,13 @@ Documentation improvements
 - New :ref:`connection_pool` reference.
 - Split :ref:`api` into other sub-references.
 - Split :ref:`authn` into :ref:`db_authz` and :ref:`sql_user_management`.
-- Split :ref:`admin` into :ref:`intgrs` and :ref:`nginx`.
+- Split :ref:`admin` into :ref:`intgrs`, :ref:`nginx` and :ref:`connection_pool`.
 
 Bug fixes
 ---------
 
+- Please check the "Fixed" section on https://github.com/PostgREST/postgrest/releases/tag/v11.0.0 and https://github.com/PostgREST/postgrest/releases/tag/v11.0.1.
+
 Breaking changes
 ----------------
 

From d7907f4aa425606f8346a3eb92018756a740d0e3 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Thu, 11 May 2023 01:34:25 -0300
Subject: [PATCH 586/652] pin version to 11.0.1

---
 docs/conf.py                               | 2 +-
 docs/releases/{v11.0.0.rst => v11.0.1.rst} | 4 +++-
 2 files changed, 4 insertions(+), 2 deletions(-)
 rename docs/releases/{v11.0.0.rst => v11.0.1.rst} (90%)

diff --git a/docs/conf.py b/docs/conf.py
index 2e48d664b..c754b47b5 100644
--- a/docs/conf.py
+++ b/docs/conf.py
@@ -59,7 +59,7 @@ copyright = u'2017, ' + author
 # The short X.Y version.
 version = u'11.0'
 # The full version, including alpha/beta/rc tags.
-release = u'11.0.0'
+release = u'11.0.1'
 
 # The language for content autogenerated by Sphinx. Refer to documentation
 # for a list of supported languages.
diff --git a/docs/releases/v11.0.0.rst b/docs/releases/v11.0.1.rst
similarity index 90%
rename from docs/releases/v11.0.0.rst
rename to docs/releases/v11.0.1.rst
index 6093452ed..6818c5fdb 100644
--- a/docs/releases/v11.0.0.rst
+++ b/docs/releases/v11.0.1.rst
@@ -1,6 +1,8 @@
-11.0.0
+11.0.1
 ======
 
+These release notes include the changes in versions `11.0.0 <https://github.com/PostgREST/postgrest/releases/tag/v11.0.0>`_ and `11.0.1 <https://github.com/PostgREST/postgrest/releases/tag/v11.0.1>`_. The detailed changelog and pre-compiled binaries are available on the `GitHub release pages <https://github.com/PostgREST/postgrest/releases>`_.
+
 Features
 --------
 

From 946b1139129c9c3be6a042a606a1d65741a9f85c Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Thu, 11 May 2023 21:14:42 -0300
Subject: [PATCH 587/652] add function inlining

---
 docs/index.rst                            |  5 +++
 docs/references/api/stored_procedures.rst | 39 +++++++++++++++++++++++
 docs/releases/v11.0.1.rst                 |  5 +++
 postgrest.dict                            |  4 +++
 4 files changed, 53 insertions(+)

diff --git a/docs/index.rst b/docs/index.rst
index 34890d57d..35601c1c5 100644
--- a/docs/index.rst
+++ b/docs/index.rst
@@ -82,6 +82,11 @@ Leak-proof Abstraction
 
 There is no ORM involved. Creating new views happens in SQL with known performance implications. A database administrator can now create an API from scratch with no custom programming.
 
+Business Logic in Database Functions
+------------------------------------
+
+There is nothing "business" about keeping data segregated across piles of layers. Use database functions to process data and get the performance benefits of data colocality and reduced network roundtrips.
+
 One Thing Well
 --------------
 
diff --git a/docs/references/api/stored_procedures.rst b/docs/references/api/stored_procedures.rst
index 3bb971ab3..fcf42fed5 100644
--- a/docs/references/api/stored_procedures.rst
+++ b/docs/references/api/stored_procedures.rst
@@ -340,6 +340,45 @@ A function that returns a table type can be filtered using the same filters as :
 
     curl "http://localhost:3000/rpc/best_films_2017?rating=gt.8&order=title.desc"
 
+.. _function_inlining:
+
+Function Inlining
+~~~~~~~~~~~~~~~~~
+
+A function that follows the `rules for inlining <https://wiki.postgresql.org/wiki/Inlining_of_SQL_functions#Inlining_conditions_for_table_functions>`_ will also inline :ref:`filters <h_filter>`, :ref:`order <ordering>` and :ref:`limits <limits>`.
+
+For example, for the following function:
+
+.. code-block:: postgres
+
+  create function getallprojects() returns setof projects
+  language sql stable
+  as $$
+    select * from projects;
+  $$;
+
+Let's get its :ref:`explain_plan` when calling it with filters applied:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /rpc/getallprojects?id=eq.1 HTTP/1.1
+    Accept: application/vnd.pgrst.plan
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/rpc/getallprojects?id=eq.1" \
+      -H "Accept: application/vnd.pgrst.plan"
+
+.. code-block:: psql
+
+  Aggregate  (cost=8.18..8.20 rows=1 width=112)
+    ->  Index Scan using projects_pkey on projects  (cost=0.15..8.17 rows=1 width=40)
+          Index Cond: (id = 1)
+
+Notice there's no "Function Scan" node in the plan, which tells us it has been inlined.
+
 .. _scalar_functions:
 
 Scalar functions
diff --git a/docs/releases/v11.0.1.rst b/docs/releases/v11.0.1.rst
index 6818c5fdb..10257fa85 100644
--- a/docs/releases/v11.0.1.rst
+++ b/docs/releases/v11.0.1.rst
@@ -17,6 +17,11 @@ Inserts
 
 - New :ref:`bulk_insert_default`.
 
+Functions
+~~~~~~~~~
+
+- Filters on Table-Valued Functions are now guaranteed to be inlined. See :ref:`function_inlining`.
+
 Horizontal Filtering
 ~~~~~~~~~~~~~~~~~~~~
 
diff --git a/postgrest.dict b/postgrest.dict
index 6803c01be..92a3b4b87 100644
--- a/postgrest.dict
+++ b/postgrest.dict
@@ -19,6 +19,7 @@ Cardano
 cd
 centric
 changelog
+colocality
 ClojureScript
 cloudfared
 config
@@ -62,6 +63,8 @@ HTTP
 HTTPS
 HV
 Ibarluzea
+Inlining
+inlined
 Integrations
 ilike
 imatch
@@ -147,6 +150,7 @@ refactor
 Reloadable
 Remo
 requester's
+roundtrips
 RESTful
 RestSharp
 RLS

From 911634ed32d8d694851d0354fd4901ebe2471653 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Fri, 12 May 2023 01:13:35 -0300
Subject: [PATCH 588/652] move impersonated settings

---
 docs/references/auth.rst         | 13 +++++++++++++
 docs/references/transactions.rst | 13 -------------
 2 files changed, 13 insertions(+), 13 deletions(-)

diff --git a/docs/references/auth.rst b/docs/references/auth.rst
index 4eb8b93a1..9a53fd912 100644
--- a/docs/references/auth.rst
+++ b/docs/references/auth.rst
@@ -188,3 +188,16 @@ doing custom logic based on the web user info.
     END IF;
   END
   $$ LANGUAGE plpgsql;
+
+.. _impersonated_settings:
+
+Impersonated Role Settings
+--------------------------
+
+The :ref:`Impersonated Role <user_impersonation>` settings are applied. For example, if you do:
+
+.. code-block:: postgresql
+
+  ALTER ROLE webuser SET statement_timeout TO '5s';
+
+Every ``webuser`` :ref:`transaction <transactions>` gets its queries executed with a ``statement_timeout`` of 5 seconds.
diff --git a/docs/references/transactions.rst b/docs/references/transactions.rst
index dc3777725..6409ce82c 100644
--- a/docs/references/transactions.rst
+++ b/docs/references/transactions.rst
@@ -159,19 +159,6 @@ Because of :ref:`user_impersonation`, PostgREST sets the standard ``role``. You
 
 Additionally it also sets the ``search_path`` based on :ref:`db-schemas` and :ref:`db-extra-search-path`.
 
-.. _impersonated_settings:
-
-Impersonated Role Settings
-~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-The :ref:`Impersonated Role <user_impersonation>` settings are applied. For example, if you do:
-
-.. code-block:: postgresql
-
-  ALTER ROLE webuser SET statement_timeout TO '5s';
-
-Every ``webuser`` request gets its queries executed with a ``statement_timeout`` of 5 seconds.
-
 .. _guc_resp_hdrs:
 
 Response Headers

From ce82b0c79b831c01d8396c3374e1871234b9b2f7 Mon Sep 17 00:00:00 2001
From: Laurence Isla <lau.isla.c@gmail.com>
Date: Fri, 12 May 2023 21:27:12 -0500
Subject: [PATCH 589/652] Re-add missing legacy gucs information

---
 docs/references/transactions.rst | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/docs/references/transactions.rst b/docs/references/transactions.rst
index 6409ce82c..4c8e63ea4 100644
--- a/docs/references/transactions.rst
+++ b/docs/references/transactions.rst
@@ -131,6 +131,13 @@ PostgREST stores the headers, cookies and headers as JSON. To get them:
 
   The ``role`` in ``request.jwt.claims`` defaults to the value of :ref:`db-anon-role`.
 
+.. _guc_legacy_names:
+
+Legacy settings
+^^^^^^^^^^^^^^^
+
+For PostgreSQL versions below 14, PostgREST will take into consideration the :ref:`db-use-legacy-gucs` config, which is set to true by default. This means that the interface for accessing these GUCs is `the same as in older versions <https://postgrest.org/en/v8.0/api.html#accessing-request-headers-cookies-and-jwt-claims>`_. You can opt in to use the JSON GUCs mentioned above by setting the ``db-use-legacy-gucs`` to false.
+
 .. _guc_req_path_method:
 
 Request Path and Method

From 05bd033539fbff22734229d40cc8c0202da78c6c Mon Sep 17 00:00:00 2001
From: Laurence Isla <lau.isla.c@gmail.com>
Date: Fri, 12 May 2023 21:48:01 -0500
Subject: [PATCH 590/652] Add JavaScript redirect from the old api.html to new
 pages and sections

Uses the hashtag in the url to redirect to the sections where the content was moved to
---
 docs/references/api.rst | 99 +++++++++++++++++++++++++++++++++++++++++
 1 file changed, 99 insertions(+)

diff --git a/docs/references/api.rst b/docs/references/api.rst
index b83d24b94..b253f3be8 100644
--- a/docs/references/api.rst
+++ b/docs/references/api.rst
@@ -16,3 +16,102 @@ PostgREST exposes three database objects of a schema as resources: tables, views
    api/openapi.rst
    api/resource_representation.rst
    api/*
+
+.. raw:: html
+
+  <script type="text/javascript">
+    let hash = window.location.hash;
+
+    const redirects = {
+      // Tables and Views
+      '#horizontal-filtering-rows': 'api/tables_views.html#horizontal-filtering-rows',
+      '#operators': 'api/tables_views.html#operators',
+      '#logical-operators': 'api/tables_views.html#logical-operators',
+      '#pattern-matching': 'api/tables_views.html#pattern-matching',
+      '#full-text-search': 'api/tables_views.html#full-text-search',
+      '#vertical-filtering-columns': 'api/tables_views.html#vertical-filtering-columns',
+      '#renaming-columns': 'api/tables_views.html#renaming-columns',
+      '#casting-columns': 'api/tables_views.html#casting-columns',
+      '#json-columns': 'api/tables_views.html#json-columns',
+      '#composite-array-columns': 'api/tables_views.html#composite-array-columns',
+      '#computed-virtual-columns': 'api/tables_views.html#computed-virtual-columns',
+      '#ordering': 'api/tables_views.html#ordering',
+      '#limits-and-pagination': 'api/tables_views.html#limits-and-pagination',
+      '#exact-count': 'api/tables_views.html#exact-count',
+      '#planned-count': 'api/tables_views.html#planned-count',
+      '#estimated-count': 'api/tables_views.html#estimated-count',
+      '#updates': 'api/tables_views.html#update',
+      '#insertions': 'api/tables_views.html#insert',
+      '#bulk-insert': 'api/tables_views.html#bulk-insert',
+      '#specifying-columns': 'api/tables_views.html#specifying-columns',
+      '#upsert': 'api/tables_views.html#upsert',
+      '#on-conflict': 'api/tables_views.html#on-conflict',
+      '#put': 'api/tables_views.html#put',
+      '#deletions': 'api/tables_views.html#delete',
+      '#limited-updates-deletions': 'api/tables_views.html#limited-update-delete',
+      // Stored procedures
+      '#stored-procedures': 'api/stored_procedures.html#stored-procedures',
+      '#calling-functions-with-a-single-json-parameter': 'api/stored_procedures.html#functions-with-a-single-json-parameter',
+      '#calling-functions-with-a-single-unnamed-parameter': 'api/stored_procedures.html#functions-with-a-single-unnamed-parameter',
+      '#calling-functions-with-array-parameters': 'api/stored_procedures.html#functions-with-array-parameters',
+      '#calling-variadic-functions': 'api/stored_procedures.html#variadic-functions',
+      '#scalar-functions': 'api/stored_procedures.html#scalar-functions',
+      '#function-filters': 'api/stored_procedures.html#table-valued-functions',
+      '#overloaded-functions': 'api/stored_procedures.html#overloaded-functions',
+      // Schemas
+      '#switching-schemas': 'api/schemas.html',
+      // Resource Embedding
+      '#resource-embedding': 'api/resource_embedding.html#resource-embedding',
+      '#many-to-one-relationships': 'api/resource_embedding.html#many-to-one-relationships',
+      '#one-to-many-relationships': 'api/resource_embedding.html#one-to-many-relationships',
+      '#many-to-many-relationships': 'api/resource_embedding.html#many-to-many-relationships',
+      '#one-to-one-relationships': 'api/resource_embedding.html#one-to-one-relationships',
+      '#computed-relationships': 'api/resource_embedding.html#computed-relationships',
+      '#nested-embedding': 'api/resource_embedding.html#nested-embedding',
+      '#embedded-filters': 'api/resource_embedding.html#embedded-filters',
+      '#embedding-with-top-level-filtering': 'api/resource_embedding.html#top-level-filtering',
+      '#embedding-partitioned-tables': 'api/resource_embedding.html#embedding-partitioned-tables',
+      '#embedding-views': 'api/resource_embedding.html#embedding-views',
+      '#embedding-chains-of-views': 'api/resource_embedding.html#embedding-chains-of-views',
+      '#embedding-on-stored-procedures': 'api/resource_embedding.html#embedding-on-stored-procedures',
+      '#embedding-after-insertions-updates-deletions': 'api/resource_embedding.html#embedding-after-insertions-updates-deletions',
+      '#embedding-disambiguation': 'api/resource_embedding.html#embedding-disambiguation',
+      '#target-disambiguation': 'api/resource_embedding.html#target-disambiguation',
+      '#hint-disambiguation': 'api/resource_embedding.html#hint-disambiguation',
+      // OpenAPI
+      '#openapi-support': 'api/openapi.html',
+      // Resource Representation
+      '#response-format': 'api/resource_representation.html#response-format',
+      '#singular-or-plural': 'api/resource_representation.html#singular-or-plural',
+      '#response-formats-for-scalar-responses': 'api/resource_representation.html#scalar-function-response-format',
+      // CORS
+      '#cors': 'api/cors.html',
+      // OPTIONS
+      '#options': 'api/options.html',
+      // URL Grammar
+      '#custom-queries': 'api/url_grammar.html#custom-queries',
+      '#unicode-support': 'api/url_grammar.html#unicode-support',
+      '#table-columns-with-spaces': 'api/url_grammar.html#table-columns-with-spaces',
+      '#reserved-characters': 'api/url_grammar.html#reserved-characters',
+      // Transactions
+      '#immutable-and-stable-functions': 'transactions.html#access-mode',
+      '#http-context': 'transactions.html#transaction-scoped-settings',
+      '#accessing-request-headers-cookies-and-jwt-claims': 'transactions.html#request-headers-cookies-and-jwt-claims',
+      '#legacy-guc-variable-names': 'transactions.html#legacy-settings',
+      '#accessing-request-path-and-method': 'transactions.html#request-path-and-method',
+      '#setting-response-headers': 'transactions.html#response-headers',
+      '#setting-headers-via-pre-request': 'transactions.html#setting-headers-via-pre-request',
+      '#setting-response-status-code': 'transactions.html#response-status-code',
+      '#raise-errors-with-http-status-codes': 'transactions.html#raise-errors-with-http-status-codes',
+      // Admin
+      '#execution-plan': 'admin.html#execution-plan',
+      // Deprecated
+      '#bulk-call': '../releases/v11.0.1.html#breaking-changes',
+    };
+
+    let willRedirectTo = redirects[hash];
+
+    if (willRedirectTo) {
+      window.location.href = willRedirectTo;
+    }
+  </script>
\ No newline at end of file

From 2e6ebca8855fd1eafa0881e29c75ca9fe1b977b1 Mon Sep 17 00:00:00 2001
From: Steve Chavez <stevechavezast@gmail.com>
Date: Thu, 25 May 2023 22:54:23 -0500
Subject: [PATCH 591/652] Fix link to archlinux pkg

---
 docs/explanations/install.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/explanations/install.rst b/docs/explanations/install.rst
index 8d3a6455a..6944803a8 100644
--- a/docs/explanations/install.rst
+++ b/docs/explanations/install.rst
@@ -32,7 +32,7 @@ You can also use your OS package manager.
 
       .. tab:: Arch Linux
 
-        You can install PostgREST from the `community repo <https://archlinux.org/packages/community/x86_64/postgrest>`_.
+        You can install PostgREST from the `community repo <https://archlinux.org/packages/extra/x86_64/postgrest/>`_.
 
         .. code:: bash
 

From 281d7a9223bb734a82ed3b88b875b884d2151fb1 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Fri, 19 May 2023 14:21:56 -0300
Subject: [PATCH 592/652] remove db functions section on index

---
 docs/index.rst | 5 -----
 1 file changed, 5 deletions(-)

diff --git a/docs/index.rst b/docs/index.rst
index 35601c1c5..34890d57d 100644
--- a/docs/index.rst
+++ b/docs/index.rst
@@ -82,11 +82,6 @@ Leak-proof Abstraction
 
 There is no ORM involved. Creating new views happens in SQL with known performance implications. A database administrator can now create an API from scratch with no custom programming.
 
-Business Logic in Database Functions
-------------------------------------
-
-There is nothing "business" about keeping data segregated across piles of layers. Use database functions to process data and get the performance benefits of data colocality and reduced network roundtrips.
-
 One Thing Well
 --------------
 

From 5e19594ea488ace95dd42545a0077b7f8f243011 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Mon, 22 May 2023 16:28:04 -0300
Subject: [PATCH 593/652] auth: explain why jwt is used

---
 docs/references/auth.rst | 2 +-
 postgrest.dict           | 1 +
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/docs/references/auth.rst b/docs/references/auth.rst
index 9a53fd912..a25b08be1 100644
--- a/docs/references/auth.rst
+++ b/docs/references/auth.rst
@@ -42,7 +42,7 @@ This role switching mechanism is called **user impersonation**. In PostgreSQL it
 JWT-Based User Impersonation
 ----------------------------
 
-We use `JSON Web Tokens <https://jwt.io/>`_ to authenticate API requests. As you'll recall a JWT contains a list of cryptographically signed claims. All claims are allowed but PostgREST cares specifically about a claim called role.
+We use `JSON Web Tokens <https://jwt.io/>`_ to authenticate API requests, this allows us to be stateless and not require database lookups for verification. As you'll recall a JWT contains a list of cryptographically signed claims. All claims are allowed but PostgREST cares specifically about a claim called role.
 
 .. code:: json
 
diff --git a/postgrest.dict b/postgrest.dict
index 92a3b4b87..9f01bfde9 100644
--- a/postgrest.dict
+++ b/postgrest.dict
@@ -83,6 +83,7 @@ Kofi
 Kubernetes
 localhost
 login
+lookups
 Logins
 logins
 lon

From fff0eae77eb2af04c1c1dde4b1bca0a818540555 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Sat, 27 May 2023 17:43:15 -0500
Subject: [PATCH 594/652] Fix in-db config settings

---
 docs/references/configuration.rst | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/docs/references/configuration.rst b/docs/references/configuration.rst
index 557972a15..faadd91d9 100644
--- a/docs/references/configuration.rst
+++ b/docs/references/configuration.rst
@@ -159,6 +159,7 @@ db-pool-acquisition-timeout Int     10
 db-pool-max-lifetime        Int     1800
 db-pre-request              String                    Y
 db-prepared-statements      Boolean True              Y
+db-root-spec                String                    Y
 db-schemas                  String  public            Y
 db-tx-end                   String  commit
 db-uri                      String  postgresql://
@@ -198,7 +199,7 @@ app.settings.*
 
   =============== ====================
   **Environment** PGRST_APP_SETTINGS_*
-  **In-Database** pgrst.app_settings_*
+  **In-Database** `n/a`
   =============== ====================
 
   Arbitrary settings that can be used to pass in secret keys directly as strings, or via OS environment variables. For instance: :code:`app.settings.jwt_secret = "$(MYAPP_JWT_SECRET)"` will take :code:`MYAPP_JWT_SECRET` from the environment and make it available to postgresql functions as :code:`current_setting('app.settings.jwt_secret')`.
@@ -210,7 +211,7 @@ db-anon-role
 
   =============== ==================
   **Environment** PGRST_DB_ANON_ROLE
-  **In-Database** `n/a`
+  **In-Database** `pgrst.db_anon_role`
   =============== ==================
 
   The database role to use when executing commands on behalf of unauthenticated clients. For more information, see :ref:`roles`.

From 8d706a342c200463e07260013b11222482e2c86f Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Sat, 27 May 2023 18:15:01 -0500
Subject: [PATCH 595/652] fix broken links

---
 docs/index.rst                            | 4 ++--
 docs/references/api/stored_procedures.rst | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/docs/index.rst b/docs/index.rst
index 34890d57d..4020d6195 100644
--- a/docs/index.rst
+++ b/docs/index.rst
@@ -197,7 +197,6 @@ Here are some companies that use PostgREST in production.
 * `Drip Depot <https://www.dripdepot.com>`_
 * `Image-charts <https://www.image-charts.com>`_
 * `Moat <https://www.moat.com>`_
-* `MotionDynamic - Fast highly dynamic video generation at scale <https://motiondynamic.tech>`_
 * `Netwo <https://www.netwo.io>`_
 * `Nimbus <https://www.nimbusforwork.com>`_
   - See how Nimbus uses PostgREST in `Paul Copplestone's blog post <https://paul.copplest.one/blog/nimbus-tech-2019-04.html>`_.
@@ -206,8 +205,9 @@ Here are some companies that use PostgREST in production.
 * `Sompani <https://www.sompani.com>`_
 * `Supabase <https://supabase.com>`_
 
-.. Certs are failing
+.. Failing links
   * `eGull <http://www.egull.co>`_
+  * `MotionDynamic - Fast highly dynamic video generation at scale <https://motiondynamic.tech>`_
 
 Testimonials
 ------------
diff --git a/docs/references/api/stored_procedures.rst b/docs/references/api/stored_procedures.rst
index fcf42fed5..0597171eb 100644
--- a/docs/references/api/stored_procedures.rst
+++ b/docs/references/api/stored_procedures.rst
@@ -3,7 +3,7 @@
 Stored Procedures
 =================
 
-*"A single resource can be the equivalent of a database stored procedure, with the power to abstract state changes over any number of storage items"* -- `Roy T. Fielding <https://roy.gbiv.com/untangled/2008/rest-apis-must-be-hypertext-driven#comment-743>`_
+*"A single resource can be the equivalent of a database stored procedure, with the power to abstract state changes over any number of storage items"* -- `Roy T. Fielding <http://roy.gbiv.com/untangled/2008/rest-apis-must-be-hypertext-driven#comment-743>`_
 
 Every stored procedure in the :ref:`exposed schema <schemas>` and accessible by the :ref:`active database role <roles>` is executable under the :code:`/rpc` prefix. Procedures can perform any operations allowed by PostgreSQL (read data, modify data, and even DDL operations).
 

From 232c6dc702ba23ca444dca6afbf6f0e3295447bf Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Sat, 27 May 2023 22:00:14 -0500
Subject: [PATCH 596/652] dry config settings

Environment variables names and in-db configs on the table.
---
 docs/references/configuration.rst | 262 +++++-------------------------
 1 file changed, 43 insertions(+), 219 deletions(-)

diff --git a/docs/references/configuration.rst b/docs/references/configuration.rst
index faadd91d9..0f9ae8911 100644
--- a/docs/references/configuration.rst
+++ b/docs/references/configuration.rst
@@ -97,21 +97,10 @@ Configuration Reloading
 
 It's possible to reload PostgREST's configuration without restarting the server. You can do this :ref:`via signal <config_reloading_signal>` or :ref:`via notification <config_reloading_notify>`.
 
-It's not possible to change :ref:`env_variables_config` for a running process and reloading a Docker container configuration will not work. In these cases, you need to restart the PostgREST server or use :ref:`in_db_config` as an alternative.
-
-.. important::
-
-  The following settings will not be reloaded. You will need to restart PostgREST to change those.
-
-    * :ref:`admin-server-port`
-    * :ref:`db-uri`
-    * :ref:`db-pool`
-    * :ref:`db-pool-acquisition-timeout`
-    * :ref:`db-pool-max-lifetime`
-    * :ref:`server-host`
-    * :ref:`server-port`
-    * :ref:`server-unix-socket`
-    * :ref:`server-unix-socket-mode`
+- Any modification to the :ref:`file_config` will be applied during reload.
+- Any modification to the :ref:`in_db_config` will be applied during reload.
+- Not all settings are reloadable, the reloadable column on :ref:`config_full_list` specifies which ones are.
+- It's not possible to change :ref:`env_variables_config` for a running process, hence reloading a Docker container configuration will not work. In these cases, you can restart the process or use :ref:`in_db_config`.
 
 .. _config_reloading_signal:
 
@@ -135,73 +124,63 @@ To reload the configuration from within the database, you can use a NOTIFY comma
 
    NOTIFY pgrst, 'reload config'
 
-The ``"pgrst"`` notification channel is enabled by default. For configuring the channel, see :ref:`db-channel` and :ref:`db-channel-enabled`.
+The ``"pgrst"`` notification channel is enabled by default. You can name the channel with :ref:`db-channel` and enable or disable it with :ref:`db-channel-enabled`.
 
 .. _config_full_list:
 
 List of parameters
 ==================
 
-=========================== ======= ================= ==========
-Name                        Type    Default           Reloadable
-=========================== ======= ================= ==========
-admin-server-port           Int
-app.settings.*              String                    Y
-db-anon-role                String                    Y
-db-channel                  String  pgrst             Y
-db-channel-enabled          Boolean True              Y
-db-config                   Boolean True              Y
-db-extra-search-path        String  public            Y
-db-max-rows                 Int     ∞                 Y
-db-plan-enabled             Boolean False             Y
-db-pool                     Int     10
-db-pool-acquisition-timeout Int     10
-db-pool-max-lifetime        Int     1800
-db-pre-request              String                    Y
-db-prepared-statements      Boolean True              Y
-db-root-spec                String                    Y
-db-schemas                  String  public            Y
-db-tx-end                   String  commit
-db-uri                      String  postgresql://
-db-use-legacy-gucs          Boolean True              Y
-jwt-aud                     String                    Y
-jwt-role-claim-key          String  .role             Y
-jwt-secret                  String                    Y
-jwt-secret-is-base64        Boolean False             Y
-log-level                   String  error             Y
-openapi-mode                String  follow-privileges Y
-openapi-security-active     Boolean False             Y
-openapi-server-proxy-uri    String                    Y
-raw-media-types             String                    Y
-server-host                 String  !4
-server-port                 Int     3000
-server-trace-header         String                    Y
-server-unix-socket          String
-server-unix-socket-mode     String  660
-=========================== ======= ================= ==========
+=========================== ======= ================= ========== ================================= ==============================
+Name                        Type    Default           Reloadable Environment variable              In-database name
+=========================== ======= ================= ========== ================================= ==============================
+admin-server-port           Int                                  PGRST_ADMIN_SERVER_PORT
+app.settings.*              String                    Y          PGRST_APP_SETTINGS_*
+db-anon-role                String                    Y          PGRST_DB_ANON_ROLE                pgrst.db_anon_role
+db-channel                  String  pgrst             Y          PGRST_DB_CHANNEL
+db-channel-enabled          Boolean True              Y          PGRST_DB_CHANNEL_ENABLED
+db-config                   Boolean True              Y          PGRST_DB_CONFIG
+db-extra-search-path        String  public            Y          PGRST_DB_EXTRA_SEARCH_PATH        pgrst.db_extra_search_path
+db-max-rows                 Int     ∞                 Y          PGRST_DB_MAX_ROWS                 pgrst.db_max_rows
+db-plan-enabled             Boolean False             Y          PGRST_DB_PLAN_ENABLED             pgrst.db_plan_enabled
+db-pool                     Int     10                           PGRST_DB_POOL
+db-pool-acquisition-timeout Int     10                           PGRST_DB_POOL_ACQUISITION_TIMEOUT
+db-pool-max-lifetime        Int     1800                         PGRST_DB_POOL_MAX_LIFETIME
+db-pre-request              String                    Y          PGRST_DB_PRE_REQUEST              pgrst.db_pre_request
+db-prepared-statements      Boolean True              Y          PGRST_DB_PREPARED_STATEMENTS      pgrst.db_prepared_statements
+db-root-spec                String                    Y          PGRST_DB_ROOT_SPEC                pgrst.db_root_spec
+db-schemas                  String  public            Y          PGRST_DB_SCHEMAS                  pgrst.db_schemas
+db-tx-end                   String  commit                       PGRST_DB_TX_END
+db-uri                      String  postgresql://                PGRST_DB_URI
+db-use-legacy-gucs          Boolean True              Y          PGRST_DB_USE_LEGACY_GUCS          pgrst.db_use_legacy_gucs
+jwt-aud                     String                    Y          PGRST_JWT_AUD                     pgrst.jwt_aud
+jwt-role-claim-key          String  .role             Y          PGRST_JWT_ROLE_CLAIM_KEY          pgrst.jwt_role_claim_key
+jwt-secret                  String                    Y          PGRST_JWT_SECRET                  pgrst.jwt_secret
+jwt-secret-is-base64        Boolean False             Y          PGRST_JWT_SECRET_IS_BASE64        pgrst.jwt_secret_is_base64
+log-level                   String  error                        PGRST_LOG_LEVEL
+openapi-mode                String  follow-privileges Y          PGRST_OPENAPI_MODE                pgrst.openapi_mode
+openapi-security-active     Boolean False             Y          PGRST_OPENAPI_SECURITY_ACTIVE     pgrst.openapi_security_active
+openapi-server-proxy-uri    String                    Y          PGRST_OPENAPI_SERVER_PROXY_URI    pgrst.openapi_server_proxy_uri
+raw-media-types             String                    Y          PGRST_RAW_MEDIA_TYPES             pgrst.raw_media_types
+server-host                 String  !4                           PGRST_SERVER_HOST
+server-port                 Int     3000                         PGRST_SERVER_PORT
+server-trace-header         String                    Y          PGRST_SERVER_TRACE_HEADER         pgrst.server_trace_header
+server-unix-socket          String                               PGRST_SERVER_UNIX_SOCKET
+server-unix-socket-mode     String  660                          PGRST_SERVER_UNIX_SOCKET_MODE
+=========================== ======= ================= ========== ================================= ==============================
 
 .. _admin-server-port:
 
 admin-server-port
 -----------------
 
-  =============== =======================
-  **Environment** PGRST_ADMIN_SERVER_PORT
-  **In-Database** `n/a`
-  =============== =======================
-
-Specifies the port for the :ref:`health_check` endpoints.
+  Specifies the port for the :ref:`health_check` endpoints.
 
 .. _app.settings.*:
 
 app.settings.*
 --------------
 
-  =============== ====================
-  **Environment** PGRST_APP_SETTINGS_*
-  **In-Database** `n/a`
-  =============== ====================
-
   Arbitrary settings that can be used to pass in secret keys directly as strings, or via OS environment variables. For instance: :code:`app.settings.jwt_secret = "$(MYAPP_JWT_SECRET)"` will take :code:`MYAPP_JWT_SECRET` from the environment and make it available to postgresql functions as :code:`current_setting('app.settings.jwt_secret')`.
 
 .. _db-anon-role:
@@ -209,11 +188,6 @@ app.settings.*
 db-anon-role
 ------------
 
-  =============== ==================
-  **Environment** PGRST_DB_ANON_ROLE
-  **In-Database** `pgrst.db_anon_role`
-  =============== ==================
-
   The database role to use when executing commands on behalf of unauthenticated clients. For more information, see :ref:`roles`.
 
   When unset anonymous access will be blocked.
@@ -223,11 +197,6 @@ db-anon-role
 db-channel
 ----------
 
-  =============== ================
-  **Environment** PGRST_DB_CHANNEL
-  **In-Database** `n/a`
-  =============== ================
-
   The name of the notification channel that PostgREST uses for :ref:`schema_reloading` and configuration reloading.
 
 .. _db-channel-enabled:
@@ -235,11 +204,6 @@ db-channel
 db-channel-enabled
 ------------------
 
-  =============== ========================
-  **Environment** PGRST_DB_CHANNEL_ENABLED
-  **In-Database** `n/a`
-  =============== ========================
-
   When this is set to :code:`true`, the notification channel specified in :ref:`db-channel` is enabled.
 
   You should set this to ``false`` when using PostgresSQL behind an external connection pooler such as PgBouncer working in transaction pooling mode. See :ref:`this section <external_connection_poolers>` for more information.
@@ -249,11 +213,6 @@ db-channel-enabled
 db-config
 ---------
 
-  =============== ===============
-  **Environment** PGRST_DB_CONFIG
-  **In-Database** `n/a`
-  =============== ===============
-
    Enables the in-database configuration.
 
 .. _db-extra-search-path:
@@ -261,11 +220,6 @@ db-config
 db-extra-search-path
 --------------------
 
-  =============== ==========================
-  **Environment** PGRST_DB_EXTRA_SEARCH_PATH
-  **In-Database** pgrst.db_extra_search_path
-  =============== ==========================
-
   Extra schemas to add to the `search_path <https://www.postgresql.org/docs/current/ddl-schemas.html#DDL-SCHEMAS-PATH>`_ of every request. These schemas tables, views and stored procedures **don't get API endpoints**, they can only be referred from the database objects inside your :ref:`db-schemas`.
 
   This parameter was meant to make it easier to use **PostgreSQL extensions** (like PostGIS) that are outside of the :ref:`db-schemas`.
@@ -279,11 +233,6 @@ db-max-rows
 
   *For backwards compatibility, this config parameter is also available without prefix as "max-rows".*
 
-  =============== =================
-  **Environment** PGRST_DB_MAX_ROWS
-  **In-Database** pgrst.db_max_rows
-  =============== =================
-
   A hard limit to the number of rows PostgREST will fetch from a view, table, or stored procedure. Limits payload size for accidental or malicious requests.
 
 .. _db-plan-enabled:
@@ -291,11 +240,6 @@ db-max-rows
 db-plan-enabled
 ---------------
 
-  =============== =====================
-  **Environment** PGRST_DB_PLAN_ENABLED
-  **In-Database** pgrst.db_plan_enabled
-  =============== =====================
-
   When this is set to :code:`true`, the execution plan of a request can be retrieved by using the :code:`Accept: application/vnd.pgrst.plan` header. See :ref:`explain_plan`.
 
   It's recommended to use this in testing environments only since it reveals internal database details.
@@ -327,11 +271,6 @@ db-plan-enabled
 db-pool
 -------
 
-  =============== =================
-  **Environment** PGRST_DB_POOL
-  **In-Database** `n/a`
-  =============== =================
-
   Number of maximum connections to keep open in PostgREST's database pool.
 
 .. _db-pool-acquisition-timeout:
@@ -339,11 +278,6 @@ db-pool
 db-pool-acquisition-timeout
 ---------------------------
 
-  =============== =================
-  **Environment** PGRST_DB_POOL_ACQUISITION_TIMEOUT
-  **In-Database** `n/a`
-  =============== =================
-
   Specifies the maximum time in seconds that the request will wait for the pool to free up a connection slot to the database.
 
 .. _db-pool-max-lifetime:
@@ -351,11 +285,6 @@ db-pool-acquisition-timeout
 db-pool-max-lifetime
 --------------------
 
-  =============== =================
-  **Environment** PGRST_DB_POOL_MAX_LIFETIME
-  **In-Database** `n/a`
-  =============== =================
-
   Specifies the maximum time in seconds of an existing connection in the pool.
 
 .. _db-pre-request:
@@ -365,11 +294,6 @@ db-pre-request
 
   *For backwards compatibility, this config parameter is also available without prefix as "pre-request".*
 
-  =============== =================
-  **Environment** PGRST_DB_PRE_REQUEST
-  **In-Database** pgrst.db_pre_request
-  =============== =================
-
   A schema-qualified stored procedure name to call right after the :ref:`tx_settings` are set. See :ref:`pre-request`.
 
 .. _db-prepared-statements:
@@ -377,11 +301,6 @@ db-pre-request
 db-prepared-statements
 ----------------------
 
-  =============== =================
-  **Environment** PGRST_DB_PREPARED_STATEMENTS
-  **In-Database** pgrst.db_prepared_statements
-  =============== =================
-
   Enables or disables prepared statements.
 
   When disabled, the generated queries will be parameterized (invulnerable to SQL injection) but they will not be prepared (cached in the database session). Not using prepared statements will noticeably decrease performance, so it's recommended to always have this setting enabled.
@@ -393,11 +312,6 @@ db-prepared-statements
 db-root-spec
 ------------
 
-  =============== =================
-  **Environment** PGRST_DB_ROOT_SPEC
-  **In-Database** pgrst.db_root_spec
-  =============== =================
-
   Function to override the OpenAPI response. See :ref:`override_openapi`.
 
 .. _db-schemas:
@@ -407,11 +321,6 @@ db-schemas
 
   *For backwards compatibility, this config parameter is also available in singular as "db-schema".*
 
-  =============== =================
-  **Environment** PGRST_DB_SCHEMAS
-  **In-Database** pgrst.db_schemas
-  =============== =================
-
   The list of database schemas to expose to clients. See :ref:`schemas`.
 
 .. _db-tx-end:
@@ -419,11 +328,6 @@ db-schemas
 db-tx-end
 ---------
 
-  =============== =================
-  **Environment** PGRST_DB_TX_END
-  **In-Database** pgrst.db_tx_end
-  =============== =================
-
   Specifies how to terminate the database transactions.
 
   .. code:: bash
@@ -445,11 +349,6 @@ db-tx-end
 db-uri
 ------
 
-  =============== =================
-  **Environment** PGRST_DB_URI
-  **In-Database** `n/a`
-  =============== =================
-
   The standard connection PostgreSQL `URI format <https://www.postgresql.org/docs/current/libpq-connect.html#LIBPQ-CONNSTRING>`_. Symbols and unusual characters in the password or other fields should be percent encoded to avoid a parse error. If enforcing an SSL connection to the database is required you can use `sslmode <https://www.postgresql.org/docs/current/libpq-ssl.html#LIBPQ-SSL-SSLMODE-STATEMENTS>`_ in the URI, for example ``postgres://user:pass@host:5432/dbname?sslmode=require``.
 
   The user with whom PostgREST connects to the database is also known as the ``authenticator`` role. For more information see :ref:`roles`.
@@ -463,11 +362,6 @@ db-uri
 db-use-legacy-gucs
 ------------------
 
-  =============== =================
-  **Environment** PGRST_DB_USE_LEGACY_GUCS
-  **In-Database** pgrst.db_use_legacy_gucs
-  =============== =================
-
   Determine if GUC request settings for headers, cookies and jwt claims use the `legacy names <https://postgrest.org/en/v8.0/api.html#accessing-request-headers-cookies-and-jwt-claims>`_ (string with dashes, invalid starting from PostgreSQL v14) with text values instead of the :ref:`new names <guc_req_headers_cookies_claims>` (string without dashes, valid on all PostgreSQL versions) with json values.
 
   On PostgreSQL versions 14 and above, this parameter is ignored.
@@ -477,11 +371,6 @@ db-use-legacy-gucs
 jwt-aud
 -------
 
-  =============== =================
-  **Environment** PGRST_JWT_AUD
-  **In-Database** pgrst.jwt_aud
-  =============== =================
-
   Specifies the `JWT audience claim <https://datatracker.ietf.org/doc/html/rfc7519#section-4.1.3>`_. If this claim is present in the client provided JWT then you must set this to the same value as in the JWT, otherwise verifying the JWT will fail.
 
 .. _jwt-role-claim-key:
@@ -491,11 +380,6 @@ jwt-role-claim-key
 
   *For backwards compatibility, this config parameter is also available without prefix as "role-claim-key".*
 
-  =============== =================
-  **Environment** PGRST_JWT_ROLE_CLAIM_KEY
-  **In-Database** pgrst.jwt_role_claim_key
-  =============== =================
-
   A JSPath DSL that specifies the location of the :code:`role` key in the JWT claims. This can be used to consume a JWT provided by a third party service like Auth0, Okta or Keycloak. Usage examples:
 
   .. code:: bash
@@ -513,11 +397,6 @@ jwt-role-claim-key
 jwt-secret
 ----------
 
-  =============== =================
-  **Environment** PGRST_JWT_SECRET
-  **In-Database** pgrst.jwt_secret
-  =============== =================
-
   The secret or `JSON Web Key (JWK) (or set) <https://datatracker.ietf.org/doc/html/rfc7517>`_ used to decode JWT tokens clients provide for authentication. For security the key must be **at least 32 characters long**. If this parameter is not specified then PostgREST refuses authentication requests. Choosing a value for this parameter beginning with the at sign such as :code:`@filename` loads the secret out of an external file. This is useful for automating deployments. Note that any binary secrets must be base64 encoded. Both symmetric and asymmetric cryptography are supported. For more info see :ref:`asym_keys`.
 
   Choosing a value for this parameter beginning with the at sign such as ``@filename`` (e.g. ``@./configs/my-config``) loads the secret out of an external file.
@@ -531,11 +410,6 @@ jwt-secret
 jwt-secret-is-base64
 --------------------
 
-  =============== =================
-  **Environment** PGRST_JWT_SECRET_IS_BASE64
-  **In-Database** pgrst.jwt_secret_is_base64
-  =============== =================
-
   When this is set to :code:`true`, the value derived from :code:`jwt-secret` will be treated as a base64 encoded secret.
 
 .. _log-level:
@@ -543,11 +417,6 @@ jwt-secret-is-base64
 log-level
 ---------
 
-  =============== =================
-  **Environment** PGRST_LOG_LEVEL
-  **In-Database** `n/a`
-  =============== =================
-
   Specifies the level of information to be logged while running PostgREST.
 
   .. code:: bash
@@ -572,11 +441,6 @@ log-level
 openapi-mode
 ------------
 
-  =============== =================
-  **Environment** PGRST_OPENAPI_MODE
-  **In-Database** pgrst.openapi_mode
-  =============== =================
-
   Specifies how the OpenAPI output should be displayed.
 
   .. code:: bash
@@ -598,11 +462,6 @@ openapi-mode
 openapi-security-active
 -----------------------
 
-  =============== =============================
-  **Environment** PGRST_OPENAPI_SECURITY_ACTIVE
-  **In-Database** pgrst.openapi_security_active
-  =============== =============================
-
 When this is set to :code:`true`, security options are included in the :ref:`OpenAPI output <open-api>`.
 
 .. _openapi-server-proxy-uri:
@@ -610,11 +469,6 @@ When this is set to :code:`true`, security options are included in the :ref:`Ope
 openapi-server-proxy-uri
 ------------------------
 
-  =============== =================
-  **Environment** PGRST_OPENAPI_SERVER_PROXY_URI
-  **In-Database** pgrst.openapi_server_proxy_uri
-  =============== =================
-
   Overrides the base URL used within the OpenAPI self-documentation hosted at the API root path. Use a complete URI syntax :code:`scheme:[//[user:password@]host[:port]][/]path[?query][#fragment]`. Ex. :code:`https://postgrest.com`
 
   .. code:: json
@@ -638,11 +492,6 @@ openapi-server-proxy-uri
 raw-media-types
 ---------------
 
-  =============== =================
-  **Environment** PGRST_RAW_MEDIA_TYPES
-  **In-Database** pgrst.raw_media_types
-  =============== =================
-
  This serves to extend the `Media Types <https://en.wikipedia.org/wiki/Media_type>`_ that PostgREST currently accepts through an ``Accept`` header.
 
  These media types can be requested by following the same rules as the ones defined in :ref:`scalar_return_formats`.
@@ -659,11 +508,6 @@ raw-media-types
 server-host
 -----------
 
-  =============== =================
-  **Environment** PGRST_SERVER_HOST
-  **In-Database** `n/a`
-  =============== =================
-
   Where to bind the PostgREST web server. In addition to the usual address options, PostgREST interprets these reserved addresses with special meanings:
 
   * :code:`*` - any IPv4 or IPv6 hostname
@@ -677,11 +521,6 @@ server-host
 server-port
 -----------
 
-  =============== =================
-  **Environment** PGRST_SERVER_PORT
-  **In-Database** `n/a`
-  =============== =================
-
   The TCP port to bind the web server.
 
 .. _server-trace-header:
@@ -689,11 +528,6 @@ server-port
 server-trace-header
 -------------------
 
-  =============== =================
-  **Environment** PGRST_SERVER_TRACE_HEADER
-  **In-Database** `pgrst.server_trace_header`
-  =============== =================
-
   The header name used to trace HTTP requests. See :ref:`trace_header`.
 
 .. _server-unix-socket:
@@ -701,11 +535,6 @@ server-trace-header
 server-unix-socket
 ------------------
 
-  =============== =================
-  **Environment** PGRST_SERVER_UNIX_SOCKET
-  **In-Database** `n/a`
-  =============== =================
-
   `Unix domain socket <https://en.wikipedia.org/wiki/Unix_domain_socket>`_ where to bind the PostgREST web server.
   If specified, this takes precedence over :ref:`server-port`. Example:
 
@@ -718,11 +547,6 @@ server-unix-socket
 server-unix-socket-mode
 -----------------------
 
-  =============== =================
-  **Environment** PGRST_SERVER_UNIX_SOCKET_MODE
-  **In-Database** `n/a`
-  =============== =================
-
   `Unix file mode <https://en.wikipedia.org/wiki/File_system_permissions>`_ to be set for the socket specified in :ref:`server-unix-socket`
   Needs to be a valid octal between 600 and 777.
 

From 1c15d3d35bed8a36ebc31522830930fda0a77e6c Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Sat, 27 May 2023 22:35:24 -0500
Subject: [PATCH 597/652] remove note and put it at the start

---
 docs/references/configuration.rst | 8 +++-----
 1 file changed, 3 insertions(+), 5 deletions(-)

diff --git a/docs/references/configuration.rst b/docs/references/configuration.rst
index 0f9ae8911..440ada5d2 100644
--- a/docs/references/configuration.rst
+++ b/docs/references/configuration.rst
@@ -3,7 +3,9 @@
 Configuration
 #############
 
-Without configuration, PostgREST won't be able to serve requests. At the minimum it needs either :ref:`a role to serve anonymous requests with <db-anon-role>` - or :ref:`a secret to use for JWT authentication <jwt-secret>`. Config parameters can be provided via :ref:`file_config`, via :ref:`env_variables_config` or through :ref:`in_db_config`.
+Config parameters can be provided via :ref:`file_config`, :ref:`env_variables_config` or :ref:`in_db_config`. Using :ref:`config_reloading` you can modify the parameters without restarting the server.
+
+Without configuration, PostgREST won't be able to serve requests. At the minimum it needs either :ref:`a role to serve anonymous requests with <db-anon-role>` - or :ref:`a secret to use for JWT authentication <jwt-secret>`.
 
 To connect to a database it uses a `libpq connection string <https://www.postgresql.org/docs/current/libpq-connect.html#LIBPQ-CONNSTRING>`_. The connection string can be set in the configuration file or via environment variable or can be read from an external file. See :ref:`db-uri` for details. Any parameter that is not set in the connection string is read from `libpq environment variables <https://www.postgresql.org/docs/current/libpq-envars.html>`_. The default connection string is ``postgresql://``, which reads **all** parameters from the environment.
 
@@ -24,10 +26,6 @@ PostgREST can read a config file. There is no predefined location for this file,
 
   ./postgrest /path/to/postgrest.conf
 
-.. note::
-
-   Configuration can be reloaded without restarting the server. See :ref:`config_reloading`.
-
 The configuration file must contain a set of key value pairs:
 
 .. code::

From d59e2498be84b18eed47cf98f27a1ce8abc2c253 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Sun, 28 May 2023 00:01:54 -0500
Subject: [PATCH 598/652] add pre-config function

---
 docs/references/configuration.rst | 55 +++++++++++++++++--------
 docs/releases/unreleased.rst      | 68 +++++++++++++++++++++++++++++++
 postgrest.dict                    |  1 +
 3 files changed, 108 insertions(+), 16 deletions(-)
 create mode 100644 docs/releases/unreleased.rst

diff --git a/docs/references/configuration.rst b/docs/references/configuration.rst
index 440ada5d2..a55b5fef3 100644
--- a/docs/references/configuration.rst
+++ b/docs/references/configuration.rst
@@ -57,36 +57,51 @@ Environment Variables
 
 You can also set these :ref:`configuration parameters <config_full_list>` using environment variables. They are capitalized, have a ``PGRST_`` prefix, and use underscores. For example: ``PGRST_DB_URI`` corresponds to ``db-uri`` and ``PGRST_APP_SETTINGS_*`` to ``app.settings.*``.
 
+See the full list of environment variable names on :ref:`config_full_list`.
+
 .. _in_db_config:
 
 In-Database Configuration
 =========================
 
-By adding settings to the **authenticator** role (see :ref:`roles`), you can make the database the single source of truth for PostgREST's configuration.
-This is enabled by :ref:`db-config`.
+Using a :ref:`pre-config <db-pre-config>` function, you can configure the server with database settings. For example, you can configure :ref:`db-schemas` and :ref:`jwt-secret` like this:
 
-For example, you can configure :ref:`db-schemas` and :ref:`jwt-secret` like this:
+.. code-block::
 
-.. code:: postgresql
+  # postgrest.conf
 
-   ALTER ROLE authenticator SET pgrst.db_schemas = "tenant1, tenant2, tenant3"
-   ALTER ROLE authenticator IN DATABASE <your_database_name> SET pgrst.jwt_secret = "REALLYREALLYREALLYREALLYVERYSAFE"
+  db-pre-config  = "postgrest.pre_config"
 
-You can use both database-specific settings with `IN DATABASE` and cluster-wide settings without it. Database-specific settings will override cluster-wide settings if both are used for the same parameter.
+  # or env vars
 
-Note that underscores(``_``) need to be used instead of dashes(``-``) for the in-database config parameters.
+  PGRST_DB_PRE_CONFIG = "postgrest.pre_config"
 
-.. important::
+.. code-block:: postgresql
 
-   For altering a role in this way, you need a SUPERUSER. You might not be able to use this configuration mode on cloud-hosted databases.
+  -- create a dedicated schema, hidden from the API
+  create schema postgrest;
+  -- grant usage on this schema to the authenticator
+  grant usage on schema postgrest to authenticator;
 
-When using both the configuration file and the in-database configuration, the latter takes precedence.
+  -- the function can configure postgREST by using set_config
+  create or replace function postgrest.pre_config()
+  returns void as $$
+    select
+        set_config('pgrst.db_schemas', 'schema1, schema2', true)
+      , set_config('pgrst.db_jwt_secret', 'REALLYREALLYREALLYREALLYVERYSAFE', true);
+  $$ language sql;
 
-.. danger::
+Note that underscores(``_``) need to be used instead of dashes(``-``) for the in-database config parameters. See the full list of in-database names on :ref:`config_full_list`.
 
-  If direct connections to the database are allowed, then it's not safe to use the in-db configuration for storing the :ref:`jwt-secret`.
-  The settings of every role are PUBLIC - they can be viewed by any user that queries the ``pg_catalog.pg_db_role_setting`` table.
-  In this case you should keep the :ref:`jwt-secret` in the configuration file or as environment variables.
+You can disable the in-database configuration by setting :ref:`db-config` to ``false``.
+
+.. note::
+  For backwards compatibility, you can do in-db config by modifying the :ref:`authenticator role <roles>`. This is no longer recommended as it requires SUPERUSER.
+
+  .. code:: postgresql
+
+     ALTER ROLE authenticator SET pgrst.db_schemas = "tenant1, tenant2, tenant3"
+     ALTER ROLE authenticator IN DATABASE <your_database_name> SET pgrst.db_schemas = "tenant4, tenant5" -- database-specific setting, overrides the previous setting
 
 .. _config_reloading:
 
@@ -97,7 +112,7 @@ It's possible to reload PostgREST's configuration without restarting the server.
 
 - Any modification to the :ref:`file_config` will be applied during reload.
 - Any modification to the :ref:`in_db_config` will be applied during reload.
-- Not all settings are reloadable, the reloadable column on :ref:`config_full_list` specifies which ones are.
+- Not all settings are reloadable, see the reloadable list on :ref:`config_full_list`.
 - It's not possible to change :ref:`env_variables_config` for a running process, hence reloading a Docker container configuration will not work. In these cases, you can restart the process or use :ref:`in_db_config`.
 
 .. _config_reloading_signal:
@@ -138,6 +153,7 @@ db-anon-role                String                    Y          PGRST_DB_ANON_R
 db-channel                  String  pgrst             Y          PGRST_DB_CHANNEL
 db-channel-enabled          Boolean True              Y          PGRST_DB_CHANNEL_ENABLED
 db-config                   Boolean True              Y          PGRST_DB_CONFIG
+db-pre-config               String                    Y          PGRST_DB_PRE_CONFIG               pgrst.db_pre_config
 db-extra-search-path        String  public            Y          PGRST_DB_EXTRA_SEARCH_PATH        pgrst.db_extra_search_path
 db-max-rows                 Int     ∞                 Y          PGRST_DB_MAX_ROWS                 pgrst.db_max_rows
 db-plan-enabled             Boolean False             Y          PGRST_DB_PLAN_ENABLED             pgrst.db_plan_enabled
@@ -213,6 +229,13 @@ db-config
 
    Enables the in-database configuration.
 
+.. _db-pre-config:
+
+db-pre-config
+-------------
+
+   Name of the function that does in-database configuration.
+
 .. _db-extra-search-path:
 
 db-extra-search-path
diff --git a/docs/releases/unreleased.rst b/docs/releases/unreleased.rst
new file mode 100644
index 000000000..8b88fa9ca
--- /dev/null
+++ b/docs/releases/unreleased.rst
@@ -0,0 +1,68 @@
+Unreleased
+==========
+
+Features
+--------
+
+Configuration
+~~~~~~~~~~~~~
+
+- New :ref:`in_db_config`. It no longer requires high privileges and can be used on cloud-hosted databases.
+
+Documentation improvements
+~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+Bug fixes
+---------
+
+Thanks
+------
+
+Big thanks from the `PostgREST team <https://github.com/orgs/PostgREST/people>`_ to our sponsors!
+
+.. container:: image-container
+
+  .. image:: ../_static/cybertec-new.png
+    :target: https://www.cybertec-postgresql.com/en/?utm_source=postgrest.org&utm_medium=referral&utm_campaign=postgrest
+    :width:  13em
+
+  .. image:: ../_static/2ndquadrant.png
+    :target: https://www.2ndquadrant.com/en/?utm_campaign=External%20Websites&utm_source=PostgREST&utm_medium=Logo
+    :width:  13em
+
+  .. image:: ../_static/retool.png
+    :target: https://retool.com/?utm_source=sponsor&utm_campaign=postgrest
+    :width:  13em
+
+  .. image:: ../_static/gnuhost.png
+    :target: https://gnuhost.eu/?utm_source=sponsor&utm_campaign=postgrest
+    :width:  13em
+
+  .. image:: ../_static/supabase.png
+    :target: https://supabase.com/?utm_source=postgrest%20backers&utm_medium=open%20source%20partner&utm_campaign=postgrest%20backers%20github&utm_term=homepage
+    :width:  13em
+
+  .. image:: ../_static/oblivious.jpg
+    :target: https://oblivious.ai/?utm_source=sponsor&utm_campaign=postgrest
+    :width:  13em
+
+* `Roboflow <https://github.com/roboflow>`_
+* Evans Fernandes
+* Jan Sommer
+* `Franz Gusenbauer <https://www.igutech.at/>`_
+* Zac Miller
+* Tsingson Qin
+* Michel Pelletier
+* Jay Hannah
+* Robert Stolarz
+* Nicholas DiBiase
+* Christopher Reid
+* Nathan Bouscal
+* Daniel Rafaj
+* David Fenko
+* Remo Rechkemmer
+* Severin Ibarluzea
+* Tom Saleeba
+* Pawel Tyll
+
+If you like to join them please consider `supporting PostgREST development <https://github.com/PostgREST/postgrest#user-content-supporting-development>`_.
diff --git a/postgrest.dict b/postgrest.dict
index 9f01bfde9..fa04fbd50 100644
--- a/postgrest.dict
+++ b/postgrest.dict
@@ -148,6 +148,7 @@ Rechkemmer
 reconnection
 Redux
 refactor
+reloadable
 Reloadable
 Remo
 requester's

From d87d80108ac3adea5706c1344ee650e8c8282de6 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 29 May 2023 12:57:34 +0000
Subject: [PATCH 599/652] Bump cachix/install-nix-action from 20 to 21

Bumps [cachix/install-nix-action](https://github.com/cachix/install-nix-action) from 20 to 21.
- [Release notes](https://github.com/cachix/install-nix-action/releases)
- [Commits](https://github.com/cachix/install-nix-action/compare/v20...v21)

---
updated-dependencies:
- dependency-name: cachix/install-nix-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/ci.yaml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index c3bc41829..9411dfad9 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -16,7 +16,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v3
-    - uses: cachix/install-nix-action@v20
+    - uses: cachix/install-nix-action@v21
     - run: nix-env -f default.nix -iA build
     - run: postgrest-docs-build
 
@@ -25,7 +25,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v3
-    - uses: cachix/install-nix-action@v20
+    - uses: cachix/install-nix-action@v21
     - run: nix-env -f default.nix -iA spellcheck
     - run: postgrest-docs-spellcheck
 
@@ -35,7 +35,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v3
-    - uses: cachix/install-nix-action@v20
+    - uses: cachix/install-nix-action@v21
     - run: nix-env -f default.nix -iA linkcheck
     - run: postgrest-docs-linkcheck
     

From 48365188adb8556e3395cb3a3f20e66e42d70169 Mon Sep 17 00:00:00 2001
From: Laurence Isla <lau.isla.c@gmail.com>
Date: Wed, 31 May 2023 12:33:08 -0500
Subject: [PATCH 600/652] Add redirect to many-to-many relationships from
 embedding through join tables

---
 docs/references/api.rst | 1 +
 1 file changed, 1 insertion(+)

diff --git a/docs/references/api.rst b/docs/references/api.rst
index b253f3be8..2a6479781 100644
--- a/docs/references/api.rst
+++ b/docs/references/api.rst
@@ -78,6 +78,7 @@ PostgREST exposes three database objects of a schema as resources: tables, views
       '#embedding-disambiguation': 'api/resource_embedding.html#embedding-disambiguation',
       '#target-disambiguation': 'api/resource_embedding.html#target-disambiguation',
       '#hint-disambiguation': 'api/resource_embedding.html#hint-disambiguation',
+      "#embedding-through-join-tables": "api/resource_embedding.html#many-to-many-relationships",
       // OpenAPI
       '#openapi-support': 'api/openapi.html',
       // Resource Representation

From a7ff2294ac8d1bac3fc0d375452b6b935852c80a Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Sat, 3 Jun 2023 00:11:40 -0500
Subject: [PATCH 601/652] references: move raise error to errors page

---
 docs/references/api/stored_procedures.rst |  2 +-
 docs/references/errors.rst                | 56 ++++++++++++++++++++
 docs/references/transactions.rst          | 63 ++---------------------
 3 files changed, 61 insertions(+), 60 deletions(-)

diff --git a/docs/references/api/stored_procedures.rst b/docs/references/api/stored_procedures.rst
index 0597171eb..842ddf7a2 100644
--- a/docs/references/api/stored_procedures.rst
+++ b/docs/references/api/stored_procedures.rst
@@ -5,7 +5,7 @@ Stored Procedures
 
 *"A single resource can be the equivalent of a database stored procedure, with the power to abstract state changes over any number of storage items"* -- `Roy T. Fielding <http://roy.gbiv.com/untangled/2008/rest-apis-must-be-hypertext-driven#comment-743>`_
 
-Every stored procedure in the :ref:`exposed schema <schemas>` and accessible by the :ref:`active database role <roles>` is executable under the :code:`/rpc` prefix. Procedures can perform any operations allowed by PostgreSQL (read data, modify data, and even DDL operations).
+Every stored procedure in the :ref:`exposed schema <schemas>` and accessible by the :ref:`active database role <roles>` is executable under the :code:`/rpc` prefix. Procedures can perform any operations allowed by PostgreSQL (read data, modify data, :ref:`raise errors <raise_error>`, and even DDL operations).
 
 If they return table types, Stored Procedures can:
 
diff --git a/docs/references/errors.rst b/docs/references/errors.rst
index e481a70fd..0c0a40c72 100644
--- a/docs/references/errors.rst
+++ b/docs/references/errors.rst
@@ -96,6 +96,62 @@ PostgREST translates `PostgreSQL error codes <https://www.postgresql.org/docs/cu
 | other                    | 400                     |                                 |
 +--------------------------+-------------------------+---------------------------------+
 
+.. _raise_error:
+
+RAISE errors with HTTP Status Codes
+-----------------------------------
+
+You can return custom HTTP status codes by raising SQL exceptions inside :ref:`functions <s_procs>`. For instance, here's a saucy function that always responds with an error:
+
+.. code-block:: postgresql
+
+  CREATE OR REPLACE FUNCTION just_fail() RETURNS void
+    LANGUAGE plpgsql
+    AS $$
+  BEGIN
+    RAISE EXCEPTION 'I refuse!'
+      USING DETAIL = 'Pretty simple',
+            HINT = 'There is nothing you can do.';
+  END
+  $$;
+
+Calling the function returns HTTP 400 with the body
+
+.. code-block:: json
+
+  {
+    "message":"I refuse!",
+    "details":"Pretty simple",
+    "hint":"There is nothing you can do.",
+    "code":"P0001"
+  }
+
+One way to customize the HTTP status code is by raising particular exceptions according to the PostgREST :ref:`error to status code mapping <status_codes>`. For example, :code:`RAISE insufficient_privilege` will respond with HTTP 401/403 as appropriate.
+
+For even greater control of the HTTP status code, raise an exception of the ``PTxyz`` type. For instance to respond with HTTP 402, raise ``PT402``:
+
+.. code-block:: sql
+
+  RAISE sqlstate 'PT402' using
+    message = 'Payment Required',
+    detail = 'Quota exceeded',
+    hint = 'Upgrade your plan';
+
+Returns:
+
+.. code-block:: http
+
+  HTTP/1.1 402 Payment Required
+  Content-Type: application/json; charset=utf-8
+
+  {
+    "message": "Payment Required",
+    "details": "Quota exceeded",
+    "hint": "Upgrade your plan",
+    "code": "PT402"
+  }
+
+
 Errors from PostgREST
 =====================
 
diff --git a/docs/references/transactions.rst b/docs/references/transactions.rst
index 4c8e63ea4..bbf4b93b2 100644
--- a/docs/references/transactions.rst
+++ b/docs/references/transactions.rst
@@ -23,7 +23,7 @@ The access mode on :ref:`tables_views` is determined by the HTTP method.
    :header-rows: 1
 
    * - HTTP Method
-     - Access Method
+     - Access Mode
    * - GET, HEAD
      - READ ONLY
    * - POST, PATCH, PUT, DELETE
@@ -35,7 +35,7 @@ The access mode on :ref:`tables_views` is determined by the HTTP method.
    :header-rows: 2
 
    * -
-     - Access Method
+     - Access Mode
      -
      -
    * - HTTP Method
@@ -235,7 +235,7 @@ If the status code is standard, PostgREST will complete the status message(**I'm
 Main query
 ----------
 
-The main query is produced by requesting the :doc:`API resources <api>`.
+The main query is produced by requesting :ref:`tables_views` or :ref:`s_procs`.
 
 Transaction End
 ---------------
@@ -245,62 +245,7 @@ If the transaction doesn't fail, it will always end in a COMMIT. Unless :ref:`db
 Aborting transactions
 ---------------------
 
-Any database failure(like a failed constraint) will result in a rollback of the transaction. You can also do a RAISE inside a function to cause a rollback.
-
-.. _raise_error:
-
-Raise errors with HTTP Status Codes
-~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-You can return non-200 HTTP status codes by raising SQL exceptions. For instance, here's a saucy function that always responds with an error:
-
-.. code-block:: postgresql
-
-  CREATE OR REPLACE FUNCTION just_fail() RETURNS void
-    LANGUAGE plpgsql
-    AS $$
-  BEGIN
-    RAISE EXCEPTION 'I refuse!'
-      USING DETAIL = 'Pretty simple',
-            HINT = 'There is nothing you can do.';
-  END
-  $$;
-
-Calling the function returns HTTP 400 with the body
-
-.. code-block:: json
-
-  {
-    "message":"I refuse!",
-    "details":"Pretty simple",
-    "hint":"There is nothing you can do.",
-    "code":"P0001"
-  }
-
-One way to customize the HTTP status code is by raising particular exceptions according to the PostgREST :ref:`error to status code mapping <status_codes>`. For example, :code:`RAISE insufficient_privilege` will respond with HTTP 401/403 as appropriate.
-
-For even greater control of the HTTP status code, raise an exception of the ``PTxyz`` type. For instance to respond with HTTP 402, raise 'PT402':
-
-.. code-block:: sql
-
-  RAISE sqlstate 'PT402' using
-    message = 'Payment Required',
-    detail = 'Quota exceeded',
-    hint = 'Upgrade your plan';
-
-Returns:
-
-.. code-block:: http
-
-  HTTP/1.1 402 Payment Required
-  Content-Type: application/json; charset=utf-8
-
-  {
-    "message": "Payment Required",
-    "details": "Quota exceeded",
-    "hint": "Upgrade your plan",
-    "code": "PT402"
-  }
+Any database failure(like a failed constraint) will result in a rollback of the transaction. You can also :ref:`RAISE an error inside a function <raise_error>` to cause a rollback.
 
 .. _pre-request:
 

From e7d63a2b27733f6bff5524cc60e78ece56e098cc Mon Sep 17 00:00:00 2001
From: paulocr <paulo.calvo@gmail.com>
Date: Mon, 5 Jun 2023 15:02:52 -0600
Subject: [PATCH 602/652] Fix boolean configuration example

---
 docs/references/configuration.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/references/configuration.rst b/docs/references/configuration.rst
index a55b5fef3..bdd382e9e 100644
--- a/docs/references/configuration.rst
+++ b/docs/references/configuration.rst
@@ -43,7 +43,7 @@ The configuration file must contain a set of key value pairs:
   # The secret to verify the JWT for authenticated requests with.
   # Needs to be 32 characters minimum.
   jwt-secret           = "reallyreallyreallyreallyverysafe"
-  jwt-secret-is-base64 = False
+  jwt-secret-is-base64 = false
 
   # Port the postgrest process is listening on for http requests
   server-port = 80

From c62d24c993dcd286377f35f4aa02c47b8a811c85 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Wed, 7 Jun 2023 12:12:38 -0500
Subject: [PATCH 603/652] references: add dynamic pool

---
 docs/references/configuration.rst   | 10 ++++++++++
 docs/references/connection_pool.rst | 24 +++++++++++++-----------
 docs/releases/unreleased.rst        |  5 +++++
 3 files changed, 28 insertions(+), 11 deletions(-)

diff --git a/docs/references/configuration.rst b/docs/references/configuration.rst
index bdd382e9e..9b44ac3ab 100644
--- a/docs/references/configuration.rst
+++ b/docs/references/configuration.rst
@@ -158,6 +158,7 @@ db-extra-search-path        String  public            Y          PGRST_DB_EXTRA_
 db-max-rows                 Int     ∞                 Y          PGRST_DB_MAX_ROWS                 pgrst.db_max_rows
 db-plan-enabled             Boolean False             Y          PGRST_DB_PLAN_ENABLED             pgrst.db_plan_enabled
 db-pool                     Int     10                           PGRST_DB_POOL
+db-pool-max-idletime        Int     30                           PGRST_DB_POOL_MAX_IDLETIME
 db-pool-acquisition-timeout Int     10                           PGRST_DB_POOL_ACQUISITION_TIMEOUT
 db-pool-max-lifetime        Int     1800                         PGRST_DB_POOL_MAX_LIFETIME
 db-pre-request              String                    Y          PGRST_DB_PRE_REQUEST              pgrst.db_pre_request
@@ -294,6 +295,15 @@ db-pool
 
   Number of maximum connections to keep open in PostgREST's database pool.
 
+.. _db-pool-max-idletime:
+
+db-pool-max-idletime
+--------------------
+
+   *For backwards compatibility, this config parameter is also available as “db-pool-timeout”.*
+
+   Time in seconds to close idle pool connections.
+
 .. _db-pool-acquisition-timeout:
 
 db-pool-acquisition-timeout
diff --git a/docs/references/connection_pool.rst b/docs/references/connection_pool.rst
index 48683b90a..fbccccaa7 100644
--- a/docs/references/connection_pool.rst
+++ b/docs/references/connection_pool.rst
@@ -9,29 +9,31 @@ A connection pool is a cache of reusable database connections. It allows serving
 
 Minimizing connections it’s paramount to performance. Each PostgreSQL connection creates a process, having too many can exhaust available resources.
 
-.. _pool_growth_limit:
+.. _dyn_conn_pool:
 
-Growth Limit
-------------
+Dynamic Connection Pool
+-----------------------
 
-If all the connections are being used, a new connection is added to the pool. The pool can grow until it reaches the :ref:`db-pool` size.
+To converve system resources, PostgREST uses a dynamic connection pool.  This enables the number of connections in the pool to increase and decrease depending on request traffic.
 
-Note it’s pointless to set this higher than the ``max_connections`` setting in your database.
+If all the connections are being used, a new connection is added to the pool. The pool can grow until it reaches the :ref:`db-pool` size. Note it’s pointless to set this higher than the ``max_connections`` setting in your database.
+
+If a connection is unused for a period of time(determined by :ref:`db-pool-max-idletime`, 30 seconds by default), it will be closed.
 
 Connection lifetime
 -------------------
 
-After a period of time, connections from the pool will be released and news ones will be created. This time is specified by :ref:`db-pool-max-lifetime`.
+Long-lived PostgreSQL connections can consume considerable memory(see `here <https://www.postgresql.org/message-id/CAFj8pRCQN2B2vrVMH1-bd-8xtzjytWR%2BAjZ%2BMCj9J2wPxKPa9Q%40mail.gmail.com>`_ for more details).
+Under a busy system, the :ref:`db-pool-max-idletime` won't be reached and the connection pool can have many long-lived connections.
 
-The lifetime doesn't affect running requests. Only unused connections will be released.
+To avoid this problem and save resources, a connection max lifetime(determined by :ref:`db-pool-max-lifetime`, 30 minutes by default) is enforced.
 
-For knowing why a connection lifetime is necessary, see the following discussion:
-https://www.postgresql.org/message-id/flat/CA%2Bmi_8bnvpxHZtb6EgHSHY-xn29W8VJMzjPU3fiCOv1bfjrNuA%40mail.gmail.com.
+After the max lifetime is reached, connections from the pool will be released and news ones will be created. This doesn't affect running requests. Only unused connections will be released.
 
 Acquisition Timeout
 -------------------
 
-If all the available connections in the pool are busy, an HTTP request will wait until reaching a timeout. You can configure this timeout with :ref:`db-pool-acquisition-timeout`.
+If all the available connections in the pool are busy, an HTTP request will wait until reaching a timeout(determined by :ref:`db-pool-acquisition-timeout`, 10 seconds by default).
 
 If the request reaches the timeout, it will be aborted with the following response:
 
@@ -69,7 +71,7 @@ If the pool loses the connection to the database, it will retry reconnecting usi
 
 The retries happen immediately after a connection loss, if :ref:`db-channel-enabled` is set to true(the default). Otherwise they'll happen once a request arrives.
 
-The server reloads the :ref:`schema_cache` when recovering.
+The server reloads the :ref:`schema_cache` and :ref:`configuration` when recovering.
 
 To notify the client of the next retry, the server sends a ``503 Service Unavailable`` status with the ``Retry-After: x`` header. Where ``x`` is the number of seconds programmed for the next retry.
 
diff --git a/docs/releases/unreleased.rst b/docs/releases/unreleased.rst
index 8b88fa9ca..48e4ed895 100644
--- a/docs/releases/unreleased.rst
+++ b/docs/releases/unreleased.rst
@@ -4,6 +4,11 @@ Unreleased
 Features
 --------
 
+Connection Pool
+~~~~~~~~~~~~~~~
+
+- New :ref:`db-pool-max-idletime`. It enables a :ref:`dyn_conn_pool`.
+
 Configuration
 ~~~~~~~~~~~~~
 

From 188461af7d62ba120806792969605ce261d10865 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Wed, 7 Jun 2023 12:15:37 -0500
Subject: [PATCH 604/652] references: prepared statements mention

---
 docs/references/transactions.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/references/transactions.rst b/docs/references/transactions.rst
index bbf4b93b2..85f462fa2 100644
--- a/docs/references/transactions.rst
+++ b/docs/references/transactions.rst
@@ -235,7 +235,7 @@ If the status code is standard, PostgREST will complete the status message(**I'm
 Main query
 ----------
 
-The main query is produced by requesting :ref:`tables_views` or :ref:`s_procs`.
+The main query is generated by requesting :ref:`tables_views` or :ref:`s_procs`. All generated queries use prepared statements(:ref:`db-prepared-statements`).
 
 Transaction End
 ---------------

From fb59b82c35af874400ff478639d31f9dfca23384 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Wed, 7 Jun 2023 13:43:23 -0500
Subject: [PATCH 605/652] references: updated automatic recovery

* use bullets were possible and join paragraphs.
* add bug fixes to the unreleased page
---
 docs/references/connection_pool.rst | 47 ++++++++++++++---------------
 docs/releases/unreleased.rst        |  6 ++--
 postgrest.dict                      |  2 ++
 3 files changed, 28 insertions(+), 27 deletions(-)

diff --git a/docs/references/connection_pool.rst b/docs/references/connection_pool.rst
index fbccccaa7..a196ee689 100644
--- a/docs/references/connection_pool.rst
+++ b/docs/references/connection_pool.rst
@@ -3,22 +3,20 @@
 Connection Pool
 ===============
 
-Every request to an :doc:`API resource <api>` borrows a connection from the connection pool to start a :doc:`transaction <transactions>`.
-
-A connection pool is a cache of reusable database connections. It allows serving many HTTP requests using few database connections.
+A connection pool is a cache of reusable database connections. It allows serving many HTTP requests using few database connections. Every request to an :doc:`API resource <api>` borrows a connection from the pool to start a :doc:`transaction <transactions>`.
 
 Minimizing connections it’s paramount to performance. Each PostgreSQL connection creates a process, having too many can exhaust available resources.
 
+.. _pool_growth_limit:
 .. _dyn_conn_pool:
 
 Dynamic Connection Pool
 -----------------------
 
-To converve system resources, PostgREST uses a dynamic connection pool.  This enables the number of connections in the pool to increase and decrease depending on request traffic.
+To conserve system resources, PostgREST uses a dynamic connection pool.  This enables the number of connections in the pool to increase and decrease depending on request traffic.
 
-If all the connections are being used, a new connection is added to the pool. The pool can grow until it reaches the :ref:`db-pool` size. Note it’s pointless to set this higher than the ``max_connections`` setting in your database.
-
-If a connection is unused for a period of time(determined by :ref:`db-pool-max-idletime`, 30 seconds by default), it will be closed.
+- If all the connections are being used, a new connection is added. The pool can grow until it reaches the :ref:`db-pool` size. Note it’s pointless to set this higher than the ``max_connections`` setting in your database.
+- If a connection is unused for a period of time(determined by :ref:`db-pool-max-idletime`, 30 seconds by default), it will be released.
 
 Connection lifetime
 -------------------
@@ -27,8 +25,7 @@ Long-lived PostgreSQL connections can consume considerable memory(see `here <htt
 Under a busy system, the :ref:`db-pool-max-idletime` won't be reached and the connection pool can have many long-lived connections.
 
 To avoid this problem and save resources, a connection max lifetime(determined by :ref:`db-pool-max-lifetime`, 30 minutes by default) is enforced.
-
-After the max lifetime is reached, connections from the pool will be released and news ones will be created. This doesn't affect running requests. Only unused connections will be released.
+After the max lifetime is reached, connections from the pool will be released and news ones will be created. This doesn't affect running requests, only unused connections will be released.
 
 Acquisition Timeout
 -------------------
@@ -46,34 +43,36 @@ If the request reaches the timeout, it will be aborted with the following respon
    "hint":null,
    "message":"Timed out acquiring connection from connection pool."}
 
-Getting this error message is an indicator of a performance issue. To solve it, you can:
+.. important::
 
-- Reduce your queries execution time.
+  Getting this error message is an indicator of a performance issue. To solve it, you can:
 
-  - Check the request :ref:`explain_plan` to tune your query, this usually means adding indexes.
+  - Reduce your queries execution time.
 
-- Reduce the amount of requests.
+    - Check the request :ref:`explain_plan` to tune your query, this usually means adding indexes.
 
-  - Reduce write requests. Do :ref:`bulk_insert` (or :ref:`upsert`) instead of inserting rows one by one.
-  - Reduce read requests. Use :ref:`resource_embedding`. Combine unrelated data into a single request using custom database views or functions.
-  - Use :ref:`s_procs` for combining read and write logic into a single request.
+  - Reduce the amount of requests.
 
-- Increase the :ref:`pool growth limit <pool_growth_limit>`.
+    - Reduce write requests. Do :ref:`bulk_insert` (or :ref:`upsert`) instead of inserting rows one by one.
+    - Reduce read requests. Use :ref:`resource_embedding`. Combine unrelated data into a single request using custom database views or functions.
+    - Use :ref:`s_procs` for combining read and write logic into a single request.
 
-  - Not a panacea since connections can't grow infinitely. Try the previous recommendations before this.
+  - Increase the :ref:`db-pool` size.
+
+    - Not a panacea since connections can't grow infinitely. Try the previous recommendations before this.
 
 .. _automatic_recovery:
 
 Automatic Recovery
 ------------------
 
-If the pool loses the connection to the database, it will retry reconnecting using exponential backoff. With 32 seconds being the maximum backoff time between retries.
+The server will retry reconnecting to the database if connection loss happens.
 
-The retries happen immediately after a connection loss, if :ref:`db-channel-enabled` is set to true(the default). Otherwise they'll happen once a request arrives.
-
-The server reloads the :ref:`schema_cache` and :ref:`configuration` when recovering.
-
-To notify the client of the next retry, the server sends a ``503 Service Unavailable`` status with the ``Retry-After: x`` header. Where ``x`` is the number of seconds programmed for the next retry.
+- It will retry forever with exponential backoff. 32 seconds being the maximum backoff time between retries. Each of these attempts are :ref:`logged <pgrst_logging>`.
+- It will only stop retrying if the server deems the error to be fatal. This can be a password authentication failure or an internal error.
+- The retries happen immediately after a connection loss, if :ref:`db-channel-enabled` is set to true(the default). Otherwise they'll happen once a request arrives.
+- To ensure a valid state, the server reloads the :ref:`schema_cache` and :ref:`configuration` when recovering.
+- To notify the client of the next retry, the server sends a ``503 Service Unavailable`` status with the ``Retry-After: x`` header. Where ``x`` is the number of seconds programmed for the next retry.
 
 .. _external_connection_poolers:
 
diff --git a/docs/releases/unreleased.rst b/docs/releases/unreleased.rst
index 48e4ed895..1044e92d8 100644
--- a/docs/releases/unreleased.rst
+++ b/docs/releases/unreleased.rst
@@ -14,12 +14,12 @@ Configuration
 
 - New :ref:`in_db_config`. It no longer requires high privileges and can be used on cloud-hosted databases.
 
-Documentation improvements
-~~~~~~~~~~~~~~~~~~~~~~~~~~
-
 Bug fixes
 ---------
 
+- Fix dropping schema cache reload notifications.
+- Stop automatic recovery when the error is "no password supplied".
+
 Thanks
 ------
 
diff --git a/postgrest.dict b/postgrest.dict
index fa04fbd50..35bdccaf9 100644
--- a/postgrest.dict
+++ b/postgrest.dict
@@ -66,6 +66,8 @@ Ibarluzea
 Inlining
 inlined
 Integrations
+idletime
+IDLETIME
 ilike
 imatch
 io

From b1f50537e98a9697e05cd136fca405d56573432f Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Wed, 7 Jun 2023 19:33:42 -0500
Subject: [PATCH 606/652] clarify procs intro

---
 docs/references/api/stored_procedures.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/references/api/stored_procedures.rst b/docs/references/api/stored_procedures.rst
index 842ddf7a2..45c5e62f0 100644
--- a/docs/references/api/stored_procedures.rst
+++ b/docs/references/api/stored_procedures.rst
@@ -5,7 +5,7 @@ Stored Procedures
 
 *"A single resource can be the equivalent of a database stored procedure, with the power to abstract state changes over any number of storage items"* -- `Roy T. Fielding <http://roy.gbiv.com/untangled/2008/rest-apis-must-be-hypertext-driven#comment-743>`_
 
-Every stored procedure in the :ref:`exposed schema <schemas>` and accessible by the :ref:`active database role <roles>` is executable under the :code:`/rpc` prefix. Procedures can perform any operations allowed by PostgreSQL (read data, modify data, :ref:`raise errors <raise_error>`, and even DDL operations).
+Procedures can perform any operations allowed by PostgreSQL (read data, modify data, :ref:`raise errors <raise_error>`, and even DDL operations). Every stored procedure in the :ref:`exposed schema <schemas>` and accessible by the :ref:`active database role <roles>` is executable under the :code:`/rpc` prefix.
 
 If they return table types, Stored Procedures can:
 

From ee6b9c522476be3648d5a488707a329ea1e07003 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Wed, 7 Jun 2023 18:47:12 -0500
Subject: [PATCH 607/652] pin version to 11.0.1

---
 docs/conf.py                                  |  4 ++--
 docs/references/api/stored_procedures.rst     |  2 +-
 docs/references/configuration.rst             | 16 ++++++++--------
 docs/references/connection_pool.rst           | 18 +++++++++---------
 docs/releases/{unreleased.rst => v11.1.0.rst} |  4 ++--
 5 files changed, 22 insertions(+), 22 deletions(-)
 rename docs/releases/{unreleased.rst => v11.1.0.rst} (98%)

diff --git a/docs/conf.py b/docs/conf.py
index c754b47b5..5125f8299 100644
--- a/docs/conf.py
+++ b/docs/conf.py
@@ -57,9 +57,9 @@ copyright = u'2017, ' + author
 # built documents.
 #
 # The short X.Y version.
-version = u'11.0'
+version = u'11.1'
 # The full version, including alpha/beta/rc tags.
-release = u'11.0.1'
+release = u'11.1.0'
 
 # The language for content autogenerated by Sphinx. Refer to documentation
 # for a list of supported languages.
diff --git a/docs/references/api/stored_procedures.rst b/docs/references/api/stored_procedures.rst
index 45c5e62f0..e5098864b 100644
--- a/docs/references/api/stored_procedures.rst
+++ b/docs/references/api/stored_procedures.rst
@@ -65,7 +65,7 @@ The client can call it by posting an object like
 Calling with GET
 ----------------
 
-If the function doesn't modify the database, it will also run under the GET method(see :ref:`access_mode`).
+If the function doesn't modify the database, it will also run under the GET method (see :ref:`access_mode`).
 
 .. tabs::
 
diff --git a/docs/references/configuration.rst b/docs/references/configuration.rst
index 9b44ac3ab..50e71c17d 100644
--- a/docs/references/configuration.rst
+++ b/docs/references/configuration.rst
@@ -158,8 +158,8 @@ db-extra-search-path        String  public            Y          PGRST_DB_EXTRA_
 db-max-rows                 Int     ∞                 Y          PGRST_DB_MAX_ROWS                 pgrst.db_max_rows
 db-plan-enabled             Boolean False             Y          PGRST_DB_PLAN_ENABLED             pgrst.db_plan_enabled
 db-pool                     Int     10                           PGRST_DB_POOL
-db-pool-max-idletime        Int     30                           PGRST_DB_POOL_MAX_IDLETIME
 db-pool-acquisition-timeout Int     10                           PGRST_DB_POOL_ACQUISITION_TIMEOUT
+db-pool-max-idletime        Int     30                           PGRST_DB_POOL_MAX_IDLETIME
 db-pool-max-lifetime        Int     1800                         PGRST_DB_POOL_MAX_LIFETIME
 db-pre-request              String                    Y          PGRST_DB_PRE_REQUEST              pgrst.db_pre_request
 db-prepared-statements      Boolean True              Y          PGRST_DB_PREPARED_STATEMENTS      pgrst.db_prepared_statements
@@ -295,6 +295,13 @@ db-pool
 
   Number of maximum connections to keep open in PostgREST's database pool.
 
+.. _db-pool-acquisition-timeout:
+
+db-pool-acquisition-timeout
+---------------------------
+
+  Specifies the maximum time in seconds that the request will wait for the pool to free up a connection slot to the database.
+
 .. _db-pool-max-idletime:
 
 db-pool-max-idletime
@@ -304,13 +311,6 @@ db-pool-max-idletime
 
    Time in seconds to close idle pool connections.
 
-.. _db-pool-acquisition-timeout:
-
-db-pool-acquisition-timeout
----------------------------
-
-  Specifies the maximum time in seconds that the request will wait for the pool to free up a connection slot to the database.
-
 .. _db-pool-max-lifetime:
 
 db-pool-max-lifetime
diff --git a/docs/references/connection_pool.rst b/docs/references/connection_pool.rst
index a196ee689..c1ff099bd 100644
--- a/docs/references/connection_pool.rst
+++ b/docs/references/connection_pool.rst
@@ -13,24 +13,24 @@ Minimizing connections it’s paramount to performance. Each PostgreSQL connecti
 Dynamic Connection Pool
 -----------------------
 
-To conserve system resources, PostgREST uses a dynamic connection pool.  This enables the number of connections in the pool to increase and decrease depending on request traffic.
+To conserve system resources, PostgREST uses a dynamic connection pool. This enables the number of connections in the pool to increase and decrease depending on request traffic.
 
-- If all the connections are being used, a new connection is added. The pool can grow until it reaches the :ref:`db-pool` size. Note it’s pointless to set this higher than the ``max_connections`` setting in your database.
-- If a connection is unused for a period of time(determined by :ref:`db-pool-max-idletime`, 30 seconds by default), it will be released.
+- If all the connections are being used, a new connection is added. The pool can grow until it reaches the :ref:`db-pool` size. Note that it’s pointless to set this higher than the ``max_connections`` setting in your database.
+- If a connection is unused for a period of time (determined by :ref:`db-pool-max-idletime`, 30 seconds by default), it will be released.
 
 Connection lifetime
 -------------------
 
-Long-lived PostgreSQL connections can consume considerable memory(see `here <https://www.postgresql.org/message-id/CAFj8pRCQN2B2vrVMH1-bd-8xtzjytWR%2BAjZ%2BMCj9J2wPxKPa9Q%40mail.gmail.com>`_ for more details).
+Long-lived PostgreSQL connections can consume considerable memory (see `here <https://www.postgresql.org/message-id/CAFj8pRCQN2B2vrVMH1-bd-8xtzjytWR%2BAjZ%2BMCj9J2wPxKPa9Q%40mail.gmail.com>`_ for more details).
 Under a busy system, the :ref:`db-pool-max-idletime` won't be reached and the connection pool can have many long-lived connections.
 
-To avoid this problem and save resources, a connection max lifetime(determined by :ref:`db-pool-max-lifetime`, 30 minutes by default) is enforced.
-After the max lifetime is reached, connections from the pool will be released and news ones will be created. This doesn't affect running requests, only unused connections will be released.
+To avoid this problem and save resources, a connection max lifetime (determined by :ref:`db-pool-max-lifetime`, 30 minutes by default) is enforced.
+After the max lifetime is reached, connections from the pool will be released and new ones will be created. This doesn't affect running requests, only unused connections will be released.
 
 Acquisition Timeout
 -------------------
 
-If all the available connections in the pool are busy, an HTTP request will wait until reaching a timeout(determined by :ref:`db-pool-acquisition-timeout`, 10 seconds by default).
+If all the available connections in the pool are busy, an HTTP request will wait until reaching a timeout (determined by :ref:`db-pool-acquisition-timeout`, 10 seconds by default).
 
 If the request reaches the timeout, it will be aborted with the following response:
 
@@ -68,9 +68,9 @@ Automatic Recovery
 
 The server will retry reconnecting to the database if connection loss happens.
 
-- It will retry forever with exponential backoff. 32 seconds being the maximum backoff time between retries. Each of these attempts are :ref:`logged <pgrst_logging>`.
+- It will retry forever with exponential backoff, with a maximum backoff time of 32 seconds between retries. Each of these attempts are :ref:`logged <pgrst_logging>`.
 - It will only stop retrying if the server deems the error to be fatal. This can be a password authentication failure or an internal error.
-- The retries happen immediately after a connection loss, if :ref:`db-channel-enabled` is set to true(the default). Otherwise they'll happen once a request arrives.
+- The retries happen immediately after a connection loss, if :ref:`db-channel-enabled` is set to true (the default). Otherwise they'll happen once a request arrives.
 - To ensure a valid state, the server reloads the :ref:`schema_cache` and :ref:`configuration` when recovering.
 - To notify the client of the next retry, the server sends a ``503 Service Unavailable`` status with the ``Retry-After: x`` header. Where ``x`` is the number of seconds programmed for the next retry.
 
diff --git a/docs/releases/unreleased.rst b/docs/releases/v11.1.0.rst
similarity index 98%
rename from docs/releases/unreleased.rst
rename to docs/releases/v11.1.0.rst
index 1044e92d8..55cba22e2 100644
--- a/docs/releases/unreleased.rst
+++ b/docs/releases/v11.1.0.rst
@@ -1,5 +1,5 @@
-Unreleased
-==========
+11.1.0
+======
 
 Features
 --------

From 018427e2b63648a8e1674f85403fe848d1d137d6 Mon Sep 17 00:00:00 2001
From: David Baynard <dbaynard@users.noreply.github.com>
Date: Fri, 9 Jun 2023 21:23:04 +0100
Subject: [PATCH 608/652] Note content-type for singular objects (#639)

* Clarify vnd.pgrst.object+json is also Content-Type

The previous docs explained how the `Accept` header could be set to
`application/vnd.pgrst.object+json`. This change indicates the resulting
response `Content-Type` begins likewise.

While robust clients will correctly identify that
`application/vnd.pgrst.object+json` data are json, many others which
naively check the `Content-Type` is `application/json` will fail to
recognize what should be a valid `Content-Type`.
---
 docs/references/api/resource_representation.rst | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/docs/references/api/resource_representation.rst b/docs/references/api/resource_representation.rst
index 82f27d96b..c11d8e872 100644
--- a/docs/references/api/resource_representation.rst
+++ b/docs/references/api/resource_representation.rst
@@ -66,6 +66,8 @@ This returns
 
   { "id": 1 }
 
+with a :code:`Content-Type: application/vnd.pgrst.object+json`.
+
 When a singular response is requested but no entries are found, the server responds with an error message and 406 Not Acceptable status code rather than the usual empty array and 200 status:
 
 .. code-block:: json

From 396afa106ee885f6b58e5895252a839c574d54cf Mon Sep 17 00:00:00 2001
From: Laurence Isla <lau.isla.c@gmail.com>
Date: Mon, 12 Jun 2023 19:36:06 -0500
Subject: [PATCH 609/652] Remove old or unmaintained links from the ecosystem
 page

---
 docs/ecosystem.rst | 42 ++----------------------------------------
 postgrest.dict     |  1 +
 2 files changed, 3 insertions(+), 40 deletions(-)

diff --git a/docs/ecosystem.rst b/docs/ecosystem.rst
index 7774b3d1f..11c75a4c9 100644
--- a/docs/ecosystem.rst
+++ b/docs/ecosystem.rst
@@ -18,6 +18,8 @@ Community Tutorials
 
 * `REST Data Service on YugabyteDB / PostgreSQL <https://dev.to/yugabyte/rest-data-service-on-yugabytedb-postgresql-5f2h>`_
 
+* `Build data-driven applications with Workers and PostgreSQL <https://developers.cloudflare.com/workers/tutorials/postgres/>`_ - A tutorial on how to integrate with PostgREST and PostgreSQL using Cloudfare Workers.
+
 .. _templates:
 
 Templates
@@ -31,28 +33,10 @@ Templates
 Example Apps
 ------------
 
-* `chronicle <https://github.com/srid/chronicle>`_ - tracking a tree of personal memories
-* `code-du-travail-backoffice <https://github.com/SocialGouv/code-du-travail-backoffice>`_ - data administration portal for the official French Labor Code and Agreements
 * `delibrium-postgrest <https://gitlab.com/delibrium/delibrium-postgrest/>`_ - example school API and front-end in Vue.js
-* `elm-workshop <https://github.com/diogob/elm-workshop>`_ - building a simple database query UI
-* `ember-postgrest-dynamic-ui <https://github.com/benoror/ember-postgrest-dynamic-ui>`_ - generating Ember forms to edit data
 * `ETH-transactions-storage <https://github.com/Adamant-im/ETH-transactions-storage>`_ - indexer for Ethereum to get transaction list by ETH address
-* `ext-postgrest-crud <https://github.com/timwis/ext-postgrest-crud>`_ - browser-based spreadsheet
 * `general <https://github.com/PierreRochard/general>`_ - example auth back-end
-* `goodfilm <https://github.com/tyrchen/goodfilm>`_ - example film API
 * `guild-operators <https://github.com/cardano-community/koios-artifacts/tree/main/files/grest>`_ - example queries and functions that the Cardano Community uses for their Guild Operators' Repository
-* `handsontable-postgrest <https://github.com/timwis/handsontable-postgrest>`_ - an excel-like database table editor
-* `heritage-near-me <https://github.com/CodeforAustralia/heritage-near-me>`_ - Elm and PostgREST with PostGIS
-* `ng-admin-postgrest <https://github.com/marmelab/ng-admin-postgrest>`_ - automatic database admin panel
-* `pgrst-dev-setup <https://github.com/Qu4tro/pgrst-dev-setup>`_ - docker-compose and tmuxp setup for experimentation.
-* `postgres-postgrest-cloudflared-example <https://github.com/cloudflare/postgres-postgrest-cloudflared-example>`_ - docker-compose setup exposing PostgREST using cloudfared
-* `postgrest-demo <https://github.com/SMRxT/postgrest-demo>`_ - multi-tenant logging system
-* `postgrest-example <https://github.com/begriffs/postgrest-example>`_ - sqitch versioning for API
-* `postgrest-sessions-example <https://github.com/monacoremo/postgrest-sessions-example>`_ - example for cookie-based sessions
-* `postgrest-translation-proxy <https://github.com/NikolayS/postgrest-translation-proxy>`_ - calling to external translation service
-* `postgrest-ui <https://github.com/tatut/postgrest-ui>`_ - ClojureScript UI components for PostgREST
-* `postgrest-vercel <https://github.com/seveibar/postgrest-vercel>`_ - run PostgREST on Vercel (Serverless/AWS Lambda)
-* `PostgrestSkeleton <https://github.com/Recmo/PostgrestSkeleton>`_ - Docker Compose, PostgREST, Nginx and Auth0
 * `PostGUI <https://github.com/priyank-purohit/PostGUI>`_ - React Material UI admin panel
 * `prospector <https://github.com/sfcta/prospector>`_ - data warehouse and visualization platform
 
@@ -74,14 +58,10 @@ External Notification
 
 These are PostgreSQL bridges that propagate LISTEN/NOTIFY to external queues for further processing. This allows stored procedures to initiate actions outside the database such as sending emails.
 
-* `pg-bridge <https://github.com/matthewmueller/pg-bridge>`_ - Amazon SNS
-* `pg-kinesis-bridge <https://github.com/daurnimator/pg-kinesis-bridge>`_ - Amazon Kinesis
 * `pg-notify-webhook <https://github.com/vbalasu/pg-notify-webhook>`_ - trigger webhooks from PostgreSQL's LISTEN/NOTIFY
 * `pgsql-listen-exchange <https://github.com/gmr/pgsql-listen-exchange>`_ - RabbitMQ
 * `postgres-websockets <https://github.com/diogob/postgres-websockets>`_ - expose web sockets for PostgreSQL's LISTEN/NOTIFY
-* `postgresql-to-amqp <https://github.com/FGRibreau/postgresql-to-amqp>`_ - AMQP
 * `postgresql2websocket <https://github.com/frafra/postgresql2websocket>`_ - Websockets
-* `skeeter <https://github.com/SpiderOak/skeeter>`_ - ZeroMQ
 
 
 .. _eco_extensions:
@@ -91,25 +71,14 @@ Extensions
 
 * `aiodata <https://github.com/Exahilosys/aiodata>`_ - Python, event-based proxy and caching client.
 * `pg-safeupdate <https://github.com/eradman/pg-safeupdate>`_ - prevent full-table updates or deletes
-* `postgrest-auth (criles25) <https://github.com/criles25/postgrest-auth>`_ - email based auth/signup
 * `postgrest-node <https://github.com/seveibar/postgrest-node>`_ - Run a PostgREST server in Node.js via npm module
-* `postgrest-oauth <https://github.com/nblumoe/postgrest-oauth>`_ - OAuth2 WAI middleware
-* `postgrest-oauth/api <https://github.com/postgrest-oauth/api>`_ - OAuth2 server
 * `PostgREST-writeAPI <https://github.com/ppKrauss/PostgREST-writeAPI>`_ - generate Nginx rewrite rules to fit an OpenAPI spec
-* `spas <https://github.com/srid/spas>`_ - allow file uploads and basic auth
 
 .. _clientside_libraries:
 
 Client-Side Libraries
 ---------------------
 
-* `aor-postgrest-client <https://github.com/tomberek/aor-postgrest-client>`_ - JS, admin-on-rest
-* `elm-postgrest <https://github.com/john-kelly/elm-postgrest>`_ - Elm
-* `general-angular <https://github.com/PierreRochard/general-angular>`_ - TypeScript, generate UI from API description
-* `jarvus-postgrest-apikit <https://github.com/JarvusInnovations/jarvus-postgrest-apikit>`_ - JS, Sencha framework
-* `mithril-postgrest <https://github.com/catarse/mithril-postgrest>`_ - JS, Mithril
-* `ng-postgrest <https://github.com/team142/ng-postgrest>`_ - Angular app for browsing, editing data exposed over PostgREST.
-* `postgrest-client <https://github.com/calebmer/postgrest-client>`_ - JS
 * `postgrest-csharp <https://github.com/supabase-community/postgrest-csharp>`_ - C#
 * `postgrest-dart <https://github.com/supabase-community/postgrest-dart>`_ - Dart
 * `postgrest-ex <https://github.com/J0/postgrest-ex>`_ - Elixir
@@ -117,15 +86,8 @@ Client-Side Libraries
 * `postgrest-js <https://github.com/supabase/postgrest-js>`_ - TypeScript/JavaScript
 * `postgrest-kt <https://github.com/supabase-community/postgrest-kt>`_ - Kotlin
 * `postgrest-py <https://github.com/supabase-community/postgrest-py>`_ - Python
-* `postgrest-request <https://github.com/lewisjared/postgrest-request>`_ - JS, SuperAgent
 * `postgrest-rs <https://github.com/supabase-community/postgrest-rs>`_ - Rust
-* `postgrest-sharp-client <https://github.com/thejettdurham/postgrest-sharp-client>`_ (needs maintainer) - C#, RestSharp
 * `postgrest-swift <https://github.com/supabase-community/postgrest-swift>`_ - Swift
-* `postgrest-url <https://github.com/hugomrdias/postgrest-url>`_ - JS, just for generating query URLs
-* `postgrest_python_requests_client <https://github.com/davidthewatson/postgrest_python_requests_client>`_ - Python
-* `postgrester <https://github.com/ivangabriele/postgrester>`_ - JS + Typescript
-* `postgrestR <https://github.com/clesiemo3/postgrestR>`_ - R
-* `py-postgrest <https://github.com/Kong/py-postgrest>`_ - Python
 * `redux-postgrest <https://github.com/andytango/redux-postgrest>`_ - TypeScript/JS, client integrated with (React) Redux.
 * `vue-postgrest <https://github.com/technowledgy/vue-postgrest>`_ - Vue.js
 
diff --git a/postgrest.dict b/postgrest.dict
index 35bdccaf9..fad0d5b6b 100644
--- a/postgrest.dict
+++ b/postgrest.dict
@@ -21,6 +21,7 @@ centric
 changelog
 colocality
 ClojureScript
+Cloudfare
 cloudfared
 config
 CORS

From fdf85773e76705b8fd33e6b287ad1bf441952c9f Mon Sep 17 00:00:00 2001
From: Laurence Isla <lau.isla.c@gmail.com>
Date: Wed, 14 Jun 2023 14:25:54 -0500
Subject: [PATCH 610/652] Fix jwt_secret in example

---
 docs/references/configuration.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/references/configuration.rst b/docs/references/configuration.rst
index 50e71c17d..a0683c774 100644
--- a/docs/references/configuration.rst
+++ b/docs/references/configuration.rst
@@ -88,7 +88,7 @@ Using a :ref:`pre-config <db-pre-config>` function, you can configure the server
   returns void as $$
     select
         set_config('pgrst.db_schemas', 'schema1, schema2', true)
-      , set_config('pgrst.db_jwt_secret', 'REALLYREALLYREALLYREALLYVERYSAFE', true);
+      , set_config('pgrst.jwt_secret', 'REALLYREALLYREALLYREALLYVERYSAFE', true);
   $$ language sql;
 
 Note that underscores(``_``) need to be used instead of dashes(``-``) for the in-database config parameters. See the full list of in-database names on :ref:`config_full_list`.

From 772046242e2b0c359a26f2ff683ed6a901ddfd0c Mon Sep 17 00:00:00 2001
From: Laurence Isla <lau.isla.c@gmail.com>
Date: Wed, 14 Jun 2023 14:55:28 -0500
Subject: [PATCH 611/652] Add postgrest-docs-dictcheck to CI

---
 .github/workflows/ci.yaml |  9 +++++++++
 .gitignore                |  1 +
 default.nix               |  4 +++-
 postgrest.dict            | 32 --------------------------------
 4 files changed, 13 insertions(+), 33 deletions(-)

diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 9411dfad9..d26de3e70 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -29,6 +29,15 @@ jobs:
     - run: nix-env -f default.nix -iA spellcheck
     - run: postgrest-docs-spellcheck
 
+  dictcheck:
+    name: Run dictcheck
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+      - uses: cachix/install-nix-action@v21
+      - run: nix-env -f default.nix -iA dictcheck
+      - run: postgrest-docs-dictcheck
+
   linkcheck:
     name: Run linkcheck
     if: github.base_ref == 'main'
diff --git a/.gitignore b/.gitignore
index 4c1f95600..ccba409df 100644
--- a/.gitignore
+++ b/.gitignore
@@ -4,3 +4,4 @@ Pipfile.lock
 *.log
 diagrams/db.pdf
 misspellings
+unuseddict
diff --git a/default.nix b/default.nix
index 5dffe887a..42fbaca76 100644
--- a/default.nix
+++ b/default.nix
@@ -73,7 +73,9 @@ in
          | tail -n+2 \
          | tr '\n' '\0' \
          | xargs -0 -n 1 -i \
-           sh -c "grep \"{}\" $FILES > /dev/null || echo \"{}\""
+           sh -c "grep \"{}\" $FILES > /dev/null || echo \"{}\"" \
+         | tee unuseddict
+        test ! -s unuseddict
       '';
 
   linkcheck =
diff --git a/postgrest.dict b/postgrest.dict
index fad0d5b6b..52956e941 100644
--- a/postgrest.dict
+++ b/postgrest.dict
@@ -1,6 +1,4 @@
 personal_ws-1.1 en 0 utf-8
-Adossi
-AMQP
 api
 API's
 Archlinux
@@ -10,7 +8,6 @@ auth
 authenticator
 backoff
 balancer
-Beles
 booleans
 Bouscal
 buildpack
@@ -19,21 +16,16 @@ Cardano
 cd
 centric
 changelog
-colocality
-ClojureScript
 Cloudfare
-cloudfared
 config
 CORS
 CPUs
 cryptographically
 CSV
-Daemonizing
 DDL
 DevOps
 DiBiase
 dockerize
-DoS
 eq
 ETH
 Ethereum
@@ -54,7 +46,6 @@ Greenplum
 gte
 GUC
 gucs
-Gumbs
 Haskell
 Heroku
 HMAC
@@ -80,9 +71,6 @@ JSON
 JWK
 JWT
 jwt
-JWTs
-Kinesis
-Kofi
 Kubernetes
 localhost
 login
@@ -92,23 +80,18 @@ logins
 lon
 lt
 lte
-middleware
 misprediction
-Mithril
 multi
-MVCC
 namespace
 namespaced
 Nanos
 neq
 nginx
-ngrep
 nixpkgs
 npm
 nxl
 nxr
 OAuth
-onwards
 OpenAPI
 openapi
 ORM
@@ -117,7 +100,6 @@ passphrase
 Pawel
 PBKDF
 Pelletier
-Petr
 PgBouncer
 pgcrypto
 pgjwt
@@ -148,16 +130,13 @@ Rafaj
 RDS
 reallyreallyreallyreallyverysafe
 Rechkemmer
-reconnection
 Redux
 refactor
 reloadable
 Reloadable
 Remo
 requester's
-roundtrips
 RESTful
-RestSharp
 RLS
 RPC
 RSA
@@ -166,16 +145,12 @@ safeupdate
 savepoint
 schemas
 schema's
-Sencha
-Serverless
 Severin
 SHA
 Sommer
 signup
 SIGUSR
 sl
-SNS
-sqitch
 SQL
 sql
 sr
@@ -183,14 +158,10 @@ SSL
 stateful
 stdout
 Stolarz
-subselect
-SuperAgent
 SvelteKit
 SwaggerUI
 syslog
 systemd
-Tcl
-tmuxp
 todo
 todos
 tos
@@ -212,16 +183,13 @@ uri
 url
 urls
 variadic
-Vercel
 verifier
 versioning
 Vondra
 Vue
-WAI
 webhooks
 websearch
 Websockets
 webuser
 wfts
 Zac
-ZeroMQ

From ab986b77d8379968cced0720abaa8b1be044a20c Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 19 Jun 2023 10:22:57 -0500
Subject: [PATCH 612/652] Bump cachix/install-nix-action from 21 to 22 (#648)

---
 .github/workflows/ci.yaml | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index d26de3e70..782b3eceb 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -16,7 +16,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v3
-    - uses: cachix/install-nix-action@v21
+    - uses: cachix/install-nix-action@v22
     - run: nix-env -f default.nix -iA build
     - run: postgrest-docs-build
 
@@ -25,7 +25,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v3
-    - uses: cachix/install-nix-action@v21
+    - uses: cachix/install-nix-action@v22
     - run: nix-env -f default.nix -iA spellcheck
     - run: postgrest-docs-spellcheck
 
@@ -34,7 +34,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v3
-      - uses: cachix/install-nix-action@v21
+      - uses: cachix/install-nix-action@v22
       - run: nix-env -f default.nix -iA dictcheck
       - run: postgrest-docs-dictcheck
 
@@ -44,7 +44,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v3
-    - uses: cachix/install-nix-action@v21
+    - uses: cachix/install-nix-action@v22
     - run: nix-env -f default.nix -iA linkcheck
     - run: postgrest-docs-linkcheck
     

From 9780790cee18866f41795ab17ec2adaa016b4303 Mon Sep 17 00:00:00 2001
From: Joonas <joonasmertanen@gmail.com>
Date: Wed, 21 Jun 2023 12:09:11 +0300
Subject: [PATCH 613/652] Change example getallfilms to stable instead of
 immutable

---
 docs/references/api/resource_embedding.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/references/api/resource_embedding.rst b/docs/references/api/resource_embedding.rst
index 392655a8d..1507fd841 100644
--- a/docs/references/api/resource_embedding.rst
+++ b/docs/references/api/resource_embedding.rst
@@ -742,7 +742,7 @@ Here's a sample function (notice the ``RETURNS SETOF films``).
 
   CREATE FUNCTION getallfilms() RETURNS SETOF films AS $$
     SELECT * FROM films;
-  $$ LANGUAGE SQL IMMUTABLE;
+  $$ LANGUAGE SQL STABLE;
 
 A request with ``directors`` embedded:
 

From 14de9f1dfd1d3dc974f96d2086727ab1893ccadd Mon Sep 17 00:00:00 2001
From: Steve Chavez <stevechavezast@gmail.com>
Date: Thu, 22 Jun 2023 09:14:23 -0500
Subject: [PATCH 614/652] references: add computed fields page (#650)

---
 docs/references/api.rst                 |  7 +-
 docs/references/api/computed_fields.rst | 86 ++++++++++++++++++++++++
 docs/references/api/tables_views.rst    | 89 +++++++++----------------
 3 files changed, 122 insertions(+), 60 deletions(-)
 create mode 100644 docs/references/api/computed_fields.rst

diff --git a/docs/references/api.rst b/docs/references/api.rst
index 2a6479781..c156ffa67 100644
--- a/docs/references/api.rst
+++ b/docs/references/api.rst
@@ -12,9 +12,10 @@ PostgREST exposes three database objects of a schema as resources: tables, views
    api/tables_views.rst
    api/stored_procedures.rst
    api/schemas.rst
+   api/computed_fields.rst
    api/resource_embedding.rst
-   api/openapi.rst
    api/resource_representation.rst
+   api/openapi.rst
    api/*
 
 .. raw:: html
@@ -34,7 +35,7 @@ PostgREST exposes three database objects of a schema as resources: tables, views
       '#casting-columns': 'api/tables_views.html#casting-columns',
       '#json-columns': 'api/tables_views.html#json-columns',
       '#composite-array-columns': 'api/tables_views.html#composite-array-columns',
-      '#computed-virtual-columns': 'api/tables_views.html#computed-virtual-columns',
+      '#computed-virtual-columns': 'api/computed_fields.html#computed-fields',
       '#ordering': 'api/tables_views.html#ordering',
       '#limits-and-pagination': 'api/tables_views.html#limits-and-pagination',
       '#exact-count': 'api/tables_views.html#exact-count',
@@ -115,4 +116,4 @@ PostgREST exposes three database objects of a schema as resources: tables, views
     if (willRedirectTo) {
       window.location.href = willRedirectTo;
     }
-  </script>
\ No newline at end of file
+  </script>
diff --git a/docs/references/api/computed_fields.rst b/docs/references/api/computed_fields.rst
new file mode 100644
index 000000000..194a48f3c
--- /dev/null
+++ b/docs/references/api/computed_fields.rst
@@ -0,0 +1,86 @@
+.. _computed_cols:
+
+Computed Fields
+###############
+
+Computed fields are virtual columns that are not stored in a table. PostgreSQL makes it possible to implement them using functions on table types.
+
+.. code-block:: postgres
+
+  CREATE TABLE people (
+    first_name text
+  , last_name  text
+  , job        text
+  );
+
+  -- a computed field that combines data from two columns
+  CREATE FUNCTION full_name(people)
+  RETURNS text AS $$
+    SELECT $1.first_name || ' ' || $1.last_name;
+  $$ LANGUAGE SQL;
+
+:ref:`h_filter` can be applied to computed fields. For example, we can do a :ref:`fts` on :code:`full_name`:
+
+.. code-block:: postgres
+
+  -- (optional) you can add an index on the computed field to speed up the query
+  CREATE INDEX people_full_name_idx ON people
+    USING GIN (to_tsvector('english', full_name(people)));
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /people?full_name=fts.Beckett HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/people?full_name=fts.Beckett"
+
+.. code-block:: json
+
+  [
+    {"first_name": "Samuel", "last_name": "Beckett", "job": "novelist"}
+  ]
+
+
+Computed fields won't appear on the response by default but you can use :ref:`v_filter` to include them:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /people?select=full_name,job HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/people?select=full_name,job"
+
+.. code-block:: json
+
+  [
+    {"full_name": "Samuel Beckett", "job": "novelist"}
+  ]
+
+
+:ref:`ordering` on computed fields is also possible:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /people?order=full_name.desc HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/people?order=full_name.desc"
+
+.. important::
+
+  Computed columns must be created in the :ref:`exposed schema <db-schemas>` or in a schema in the :ref:`extra search path <db-extra-search-path>` to be used in this way. When placing the computed column in the :ref:`exposed schema <db-schemas>` you can use an **unnamed** parameter, as in the example above, to prevent it from being exposed as an :ref:`RPC <s_procs>` under ``/rpc``.
+
+.. note::
+
+   - PostgreSQL 12 introduced `generated columns <https://www.postgresql.org/docs/12/ddl-generated-columns.html>`_, which can also compute a value based on other columns. However they're stored, not virtual.
+   - "computed fields" are documented on https://www.postgresql.org/docs/current/rowtypes.html#ROWTYPES-USAGE (search for "computed fields")
+   - On previous PostgREST versions this feature was documented with the name of "computed columns".
diff --git a/docs/references/api/tables_views.rst b/docs/references/api/tables_views.rst
index 989c1f8d8..fa796c813 100644
--- a/docs/references/api/tables_views.rst
+++ b/docs/references/api/tables_views.rst
@@ -31,8 +31,8 @@ There are no deeply/nested/routes. Each route provides OPTIONS, GET, HEAD, POST,
 
 .. _h_filter:
 
-Horizontal Filtering (Rows)
----------------------------
+Horizontal Filtering
+--------------------
 
 You can filter result rows by adding conditions on columns. For instance, to return people aged under 13 years old:
 
@@ -249,10 +249,10 @@ Using `websearch_to_tsquery` requires PostgreSQL of version at least 11.0 and wi
 
 .. _v_filter:
 
-Vertical Filtering (Columns)
-----------------------------
+Vertical Filtering
+------------------
 
-When certain columns are wide (such as those holding binary data), it is more efficient for the server to withhold them in a response. The client can specify which columns are required using the sql:`select` parameter.
+When certain columns are wide (such as those holding binary data), it is more efficient for the server to withhold them in a response. The client can specify which columns are required using the :code:`select` parameter.
 
 .. tabs::
 
@@ -455,57 +455,6 @@ The arrow operators(``->``, ``->>``) can also be used for accessing composite fi
 
     CREATE INDEX ON mytable ((to_jsonb(data) -> 'identification' ->> 'registration_number'));
 
-.. _computed_cols:
-
-Computed / Virtual Columns
---------------------------
-
-Filters may be applied to computed columns(**a.k.a. virtual columns**) as well as actual table/view columns, even though the computed columns will not appear in the output. For example, to search first and last names at once we can create a computed column that will not appear in the output but can be used in a filter:
-
-.. code-block:: postgres
-
-  CREATE TABLE people (
-    fname text,
-    lname text
-  );
-
-  CREATE FUNCTION full_name(people) RETURNS text AS $$
-    SELECT $1.fname || ' ' || $1.lname;
-  $$ LANGUAGE SQL;
-
-  -- (optional) add an index to speed up anticipated query
-  CREATE INDEX people_full_name_idx ON people
-    USING GIN (to_tsvector('english', full_name(people)));
-
-A full-text search on the computed column:
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /people?full_name=fts.Beckett HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/people?full_name=fts.Beckett"
-
-As mentioned, computed columns do not appear in the output by default. However you can include them by listing them in the vertical filtering :code:`select` parameter:
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /people?select=*,full_name HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/people?select=*,full_name"
-
-.. important::
-
-  Computed columns must be created in the :ref:`exposed schema <db-schemas>` or in a schema in the :ref:`extra search path <db-extra-search-path>` to be used in this way. When placing the computed column in the :ref:`exposed schema <db-schemas>` you can use an **unnamed** argument, as in the example above, to prevent it from being exposed as an :ref:`RPC <s_procs>` under ``/rpc``.
-
-
 .. _ordering:
 
 Ordering
@@ -557,7 +506,17 @@ If you care where nulls are sorted, add ``nullsfirst`` or ``nullslast``:
 
     curl "http://localhost:3000/people?order=age.desc.nullslast"
 
-You can also use :ref:`computed_cols` to order the results, even though the computed columns will not appear in the output. You can sort by nested fields of :ref:`json_columns` with the JSON operators.
+You can also sort on fields of :ref:`composite_array_columns` or :ref:`json_columns`.
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /countries?order=location->>lat HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/countries?order=location->>lat"
 
 .. _limits:
 
@@ -1142,3 +1101,19 @@ Using ``offset`` to target a different subset of rows is also possible.
 
   There is no native ``UPDATE...LIMIT`` or ``DELETE...LIMIT`` support in PostgreSQL; the generated query simulates that behavior and is based on `this Crunchy Data blog post <https://www.crunchydata.com/blog/simulating-update-or-delete-with-limit-in-postgres-ctes-to-the-rescue>`_.
 
+.. raw:: html
+
+  <script type="text/javascript">
+    let hash = window.location.hash;
+
+    const redirects = {
+      // Tables and Views
+      '#computed-virtual-columns': 'computed_fields.html#computed-fields',
+    };
+
+    let willRedirectTo = redirects[hash];
+
+    if (willRedirectTo) {
+      window.location.href = willRedirectTo;
+    }
+  </script>

From 991b151b6907d3c02680e12d2bb250d285d7d7b8 Mon Sep 17 00:00:00 2001
From: Steve Chavez <stevechavezast@gmail.com>
Date: Thu, 22 Jun 2023 14:44:26 -0500
Subject: [PATCH 615/652] improve connection pool wording

---
 docs/references/connection_pool.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/references/connection_pool.rst b/docs/references/connection_pool.rst
index c1ff099bd..7464f9072 100644
--- a/docs/references/connection_pool.rst
+++ b/docs/references/connection_pool.rst
@@ -22,7 +22,7 @@ Connection lifetime
 -------------------
 
 Long-lived PostgreSQL connections can consume considerable memory (see `here <https://www.postgresql.org/message-id/CAFj8pRCQN2B2vrVMH1-bd-8xtzjytWR%2BAjZ%2BMCj9J2wPxKPa9Q%40mail.gmail.com>`_ for more details).
-Under a busy system, the :ref:`db-pool-max-idletime` won't be reached and the connection pool can have many long-lived connections.
+Under a busy system, the :ref:`db-pool-max-idletime` won't be reached and the connection pool can be full of long-lived connections.
 
 To avoid this problem and save resources, a connection max lifetime (determined by :ref:`db-pool-max-lifetime`, 30 minutes by default) is enforced.
 After the max lifetime is reached, connections from the pool will be released and new ones will be created. This doesn't affect running requests, only unused connections will be released.

From 06a389810703034bc34f72f828cc9665dd376b8a Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Mon, 26 Jun 2023 17:30:28 -0500
Subject: [PATCH 616/652] nix: add HISTFILE

---
 .gitignore | 1 +
 shell.nix  | 4 ++++
 2 files changed, 5 insertions(+)

diff --git a/.gitignore b/.gitignore
index ccba409df..bab47b52e 100644
--- a/.gitignore
+++ b/.gitignore
@@ -5,3 +5,4 @@ Pipfile.lock
 diagrams/db.pdf
 misspellings
 unuseddict
+.history
diff --git a/shell.nix b/shell.nix
index 4800d62ec..e8d38d96e 100644
--- a/shell.nix
+++ b/shell.nix
@@ -15,4 +15,8 @@ pkgs.mkShell {
     docs.dictcheck
     docs.linkcheck
   ];
+
+  shellHook = ''
+    export HISTFILE=.history
+  '';
 }

From d59f841d15993c5f865737e427625ad54e7c398c Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Mon, 26 Jun 2023 17:47:01 -0500
Subject: [PATCH 617/652] add request body handling

---
 .../api/resource_representation.rst           | 21 +++++++++++++++++++
 1 file changed, 21 insertions(+)

diff --git a/docs/references/api/resource_representation.rst b/docs/references/api/resource_representation.rst
index c11d8e872..8a1f80529 100644
--- a/docs/references/api/resource_representation.rst
+++ b/docs/references/api/resource_representation.rst
@@ -150,3 +150,24 @@ Example 3: If the stored procedure returns non-scalar values, you need to do a :
 .. note::
 
   If more than one row would be returned the binary/plain-text/xml results will be concatenated with no delimiter.
+
+.. _req_body:
+
+Request Body
+============
+
+The server handles the following request body media types:
+
+* ``application/json``
+* ``application/x-www-form-urlencoded``
+* ``text/csv``
+
+For :ref:`tables_views` this works on ``POST``, ``PATCH`` and ``PUT`` methods. For :ref:`s_procs`, it works on ``POST`` methods.
+
+For stored procedures there are three additional types:
+
+* ``application/octet-stream``
+* ``text/plain``
+* ``text/xml``
+
+See :ref:`s_proc_single_unnamed`.

From 3a41d55be6b36a16955c497492192ee7fbd30a7d Mon Sep 17 00:00:00 2001
From: Steve Chavez <stevechavezast@gmail.com>
Date: Tue, 27 Jun 2023 15:26:53 -0500
Subject: [PATCH 618/652] Fix inserting with defaults

---
 docs/references/api/tables_views.rst | 39 +++++++++++++++++++---------
 1 file changed, 27 insertions(+), 12 deletions(-)

diff --git a/docs/references/api/tables_views.rst b/docs/references/api/tables_views.rst
index fa796c813..5a8ca92e6 100644
--- a/docs/references/api/tables_views.rst
+++ b/docs/references/api/tables_views.rst
@@ -853,21 +853,36 @@ Having:
 
 A request:
 
-.. code-block:: http
+.. tabs::
 
-   POST /foo?columns=id,bar,baz HTTP/1.1
-   Content-Type: application/json
-   Prefer: return=representation
+  .. code-tab:: http
 
-.. code-block:: json
+    POST /foo?columns=id,bar,baz HTTP/1.1
+    Content-Type: application/json
+    Prefer: missing=default, return=representation
 
-  [
-    { "bar": "val1"
-    }
-  , { "bar": "val2"
-    , "baz": 15
-    }
-  ]
+    [
+      { "bar": "val1"
+      }
+    , { "bar": "val2"
+      , "baz": 15
+      }
+    ]
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/foo?columns=id,bar,baz" \
+      -H "Content-Type: application/json" \
+      -H "Prefer: missing=default, return=representation" \
+      -d @- << EOF
+        [
+          { "bar": "val1"
+          }
+        , { "bar": "val2"
+          , "baz": 15
+          }
+        ]
+     EOF
 
 Will result in:
 

From 1a9e105227f4e724814d57b4fe2f98c9dd803d6b Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Wed, 28 Jun 2023 12:12:27 -0500
Subject: [PATCH 619/652] add headings to computed fields

---
 docs/references/api/computed_fields.rst | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/docs/references/api/computed_fields.rst b/docs/references/api/computed_fields.rst
index 194a48f3c..5379d51d5 100644
--- a/docs/references/api/computed_fields.rst
+++ b/docs/references/api/computed_fields.rst
@@ -19,6 +19,9 @@ Computed fields are virtual columns that are not stored in a table. PostgreSQL m
     SELECT $1.first_name || ' ' || $1.last_name;
   $$ LANGUAGE SQL;
 
+Horizontal Filtering on Computed Fields
+=======================================
+
 :ref:`h_filter` can be applied to computed fields. For example, we can do a :ref:`fts` on :code:`full_name`:
 
 .. code-block:: postgres
@@ -43,6 +46,8 @@ Computed fields are virtual columns that are not stored in a table. PostgreSQL m
     {"first_name": "Samuel", "last_name": "Beckett", "job": "novelist"}
   ]
 
+Vertical Filtering on Computed Fields
+=====================================
 
 Computed fields won't appear on the response by default but you can use :ref:`v_filter` to include them:
 
@@ -62,6 +67,8 @@ Computed fields won't appear on the response by default but you can use :ref:`v_
     {"full_name": "Samuel Beckett", "job": "novelist"}
   ]
 
+Ordering on Computed Fields
+===========================
 
 :ref:`ordering` on computed fields is also possible:
 

From ab8ccf43a62151225d3d3d496743a75d0cfcc851 Mon Sep 17 00:00:00 2001
From: Steve Chavez <stevechavezast@gmail.com>
Date: Sun, 2 Jul 2023 14:51:47 -0500
Subject: [PATCH 620/652] add domain representations (#655)

* add domain representations

* Update docs/references/api/domain_representations.rst

Co-authored-by: Alexander Ljungberg <aljungberg@wireload.net>

* Update docs/references/api/domain_representations.rst

Co-authored-by: Alexander Ljungberg <aljungberg@wireload.net>

* Update docs/references/api/domain_representations.rst

Co-authored-by: Alexander Ljungberg <aljungberg@wireload.net>

* Update docs/references/api/domain_representations.rst

Co-authored-by: Alexander Ljungberg <aljungberg@wireload.net>

* Update docs/references/api/domain_representations.rst

Co-authored-by: Alexander Ljungberg <aljungberg@wireload.net>

* Update docs/references/api/domain_representations.rst

Co-authored-by: Alexander Ljungberg <aljungberg@wireload.net>

* add custom domain subheading and TOC

this way it can be seen at the beggining there are advantages over views
and computed fields.

* important note for scache reloading

* clarify advantages

* why not create a type?

---------

Co-authored-by: Alexander Ljungberg <aljungberg@wireload.net>
---
 docs/references/api.rst                       |   1 +
 .../references/api/domain_representations.rst | 200 ++++++++++++++++++
 postgrest.dict                                |   1 +
 3 files changed, 202 insertions(+)
 create mode 100644 docs/references/api/domain_representations.rst

diff --git a/docs/references/api.rst b/docs/references/api.rst
index c156ffa67..0796ba1af 100644
--- a/docs/references/api.rst
+++ b/docs/references/api.rst
@@ -13,6 +13,7 @@ PostgREST exposes three database objects of a schema as resources: tables, views
    api/stored_procedures.rst
    api/schemas.rst
    api/computed_fields.rst
+   api/domain_representations.rst
    api/resource_embedding.rst
    api/resource_representation.rst
    api/openapi.rst
diff --git a/docs/references/api/domain_representations.rst b/docs/references/api/domain_representations.rst
new file mode 100644
index 000000000..f303f6cf6
--- /dev/null
+++ b/docs/references/api/domain_representations.rst
@@ -0,0 +1,200 @@
+.. _domain_reps:
+
+Domain Representations
+######################
+
+Domain Representations separates "how the data is presented" from "how the data is stored". It works by creating `domains <https://www.postgresql.org/docs/current/sql-createdomain.html>`_ and `casts <https://www.postgresql.org/docs/current/sql-createcast.html>`_, the latter act on the former to present and receive the data in different formats.
+
+.. contents::
+   :depth: 1
+   :local:
+   :backlinks: none
+
+Custom Domain
+=============
+
+Suppose you want to use a ``uuid`` type for a primary key and want to present it shortened to web users.
+
+For this, let's create a domain based on ``uuid``.
+
+.. code-block:: postgres
+
+  create domain app_uuid as uuid;
+
+  -- and use it as our table PK.
+  create table profiles(
+    id   app_uuid
+  , name text
+  );
+
+  -- some data for the example
+  insert into profiles values ('846c4ffd-92ce-4de7-8d11-8e29929f4ec4', 'John Doe');
+
+Domain Response Format
+======================
+
+We can shorten the ``uuid`` with ``base64`` encoding. Let's use JSON as our response format for this example.
+
+To change the domain format for JSON, create a function that converts ``app_uuid`` to ``json``.
+
+.. code-block:: postgres
+
+  -- the name of the function is arbitrary
+  CREATE OR REPLACE FUNCTION json(app_uuid) RETURNS json AS $$
+    select to_json(encode(uuid_send($1),'base64'));
+  $$ LANGUAGE SQL IMMUTABLE;
+
+  -- check it works
+  select json('846c4ffd-92ce-4de7-8d11-8e29929f4ec4'::app_uuid);
+              json
+  ----------------------------
+   "hGxP/ZLOTeeNEY4pkp9OxA=="
+
+Then create a CAST to tell PostgREST to convert it automatically whenever a JSON response is requested.
+
+.. code-block:: postgres
+
+  CREATE CAST (app_uuid AS json) WITH FUNCTION json(app_uuid) AS IMPLICIT;
+
+With this you can obtain the data in the shortened format.
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /profiles HTTP/1.1
+    Accept: application/json
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/profiles" \
+      -H "Accept: application/json"
+
+.. code-block:: json
+
+  [{"id":"hGxP/ZLOTeeNEY4pkp9OxA==","name":"John Doe"}]
+
+.. note::
+
+  - Casts on domains are ignored by PostgreSQL, their interpretation is left to the application. We're discussing the possibility of including the Domain Representations behavior on `pgsql-hackers <https://www.postgresql.org/message-id/flat/CAGRrpzZKa%2BGu91j1SOvN3tM1f-7Gh_w441c5nAX1QqdH3Q31Lg%40mail.gmail.com>`_.
+  - It would make more sense to use ``base58`` encoding as it's URL friendly but for simplicity we use ``base64`` (supported natively in PostgreSQL).
+
+.. important::
+
+  After creating a cast over a domain, you must refresh PostgREST schema cache. See :ref:`schema_reloading`.
+
+Domain Filter Format
+====================
+
+For :ref:`h_filter` to work with the shortened format, you need a different conversion.
+
+PostgREST considers the URL query string to be, in the most generic sense, ``text``. So let's create a function that converts ``text`` to ``app_uuid``.
+
+.. code-block:: postgres
+
+  -- the name of the function is arbitrary
+  CREATE OR REPLACE FUNCTION app_uuid(text) RETURNS app_uuid AS $$
+    select substring(decode($1,'base64')::text from 3)::uuid;
+  $$ LANGUAGE SQL IMMUTABLE;
+
+  -- plus a CAST to tell PostgREST to use this function
+  CREATE CAST (text AS app_uuid) WITH FUNCTION app_uuid(text) AS IMPLICIT;
+
+Now you can filter as usual.
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /profiles?id=eq.hGxP/ZLOTeeNEY4pkp9OxA== HTTP/1.1
+    Accept: application/json
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/profiles?id=eq.ZLOTeeNEY4pkp9OxA==" \
+      -H "Accept: application/json"
+
+.. code-block:: json
+
+  [{"id":"hGxP/ZLOTeeNEY4pkp9OxA==","name":"John Doe"}]
+
+.. note::
+
+  If there's no CAST from ``text`` to ``app_uuid`` defined, the filter will still work with the native uuid format (``846c4ffd-92ce-4de7-8d11-8e29929f4ec4``).
+
+Domain Request Body Format
+==========================
+
+To accept the shortened format in a JSON request body, for example when creating a new record, define a ``json`` to ``app_uuid`` conversion.
+
+.. code-block:: postgres
+
+  -- the name of the function is arbitrary
+  CREATE OR REPLACE FUNCTION app_uuid(json) RETURNS public.app_uuid AS $$
+    -- here we reuse the previous app_uuid(text) function
+    select app_uuid($1 #>> '{}');
+  $$ LANGUAGE SQL IMMUTABLE;
+
+  CREATE CAST (json AS public.app_uuid) WITH FUNCTION app_uuid(json) AS IMPLICIT;
+
+Now we can :ref:`insert` (or :ref:`update`) as usual.
+
+.. tabs::
+
+  .. code-tab:: http
+
+    POST /profiles HTTP/1.1
+    Content-Type: application/json
+    Prefer: return=representation
+
+    {"id":"zH7HbFJUTfy/GZpwuirpuQ==","name":"Jane Doe"}
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/profiles" \
+      -H "Prefer: return=representation" \
+      -H "Content-Type: application/json" \
+      -d @- <<JSON
+
+    {"id":"zH7HbFJUTfy/GZpwuirpuQ==","name":"Jane Doe"}
+
+    JSON
+
+The response:
+
+.. code-block:: json
+
+  [{"id":"zH7HbFJUTfy/GZpwuirpuQ==","name":"Jane Doe"}]
+
+Note that on the database side we have our regular ``uuid`` format.
+
+.. code-block:: postgres
+
+  select * from profiles;
+
+                    id                  |   name
+  --------------------------------------+----------
+   846c4ffd-92ce-4de7-8d11-8e29929f4ec4 | John Doe
+   cc7ec76c-5254-4dfc-bf19-9a70ba2ae9b9 | Jane Doe
+  (2 rows)
+
+.. note::
+
+  If there's no CAST from ``json`` to ``app_uuid`` defined, the request body will still work with the native uuid format (``cc7ec76c-5254-4dfc-bf19-9a70ba2ae9b9``).
+
+Advantages over Views
+=====================
+
+`Views <https://www.postgresql.org/docs/current/sql-createview.html>`_ also allow us to change the format of the underlying type. However they come with drawbacks that increase complexity.
+
+1) Formatting the column in the view makes it `non-updatable <https://www.postgresql.org/docs/current/sql-createview.html#SQL-CREATEVIEW-UPDATABLE-VIEWS>`_ since Postgres doesn't know how to reverse the transform. This can be worked around using INSTEAD OF triggers.
+2) When filtering by this column, we get full table scans for the same reason (also applies to :ref:`computed_cols`) . The performance loss here can be avoided with a computed index, or using a materialized generated column.
+3) If the formatted column is used as a foreign key, PostgREST can no longer detect that relationship and :ref:`resource_embedding` breaks. This can be worked around with :ref:`computed_relationships`.
+
+Domain Representations avoid all the above drawbacks. Their only drawback is that for existing tables, you have to change the column types. But this should be a fast operation since domains are binary coercible with their underlying types. A table rewrite won't be required.
+
+.. note::
+
+  Why not create a `base type <https://www.postgresql.org/docs/current/sql-createtype.html#id-1.9.3.94.5.8>`_ instead? ``CREATE TYPE app_uuid (INTERNALLENGTH = 22, INPUT = app_uuid_parser, OUTPUT = app_uuid_formatter)``.
+
+  Creating base types need superuser, which is restricted on cloud hosted databases. Additionally this way lets “how the data is presented” dictate “how the data is stored” which would be backwards.
diff --git a/postgrest.dict b/postgrest.dict
index 52956e941..bf07b7b20 100644
--- a/postgrest.dict
+++ b/postgrest.dict
@@ -16,6 +16,7 @@ Cardano
 cd
 centric
 changelog
+coercible
 Cloudfare
 config
 CORS

From 4706472df96913479231bd28f56892690d98750d Mon Sep 17 00:00:00 2001
From: Grant <109616836+4dex@users.noreply.github.com>
Date: Wed, 5 Jul 2023 09:48:47 -0600
Subject: [PATCH 621/652] Update connection_pool.rst typo

---
 docs/references/connection_pool.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/references/connection_pool.rst b/docs/references/connection_pool.rst
index 7464f9072..aa0a904f6 100644
--- a/docs/references/connection_pool.rst
+++ b/docs/references/connection_pool.rst
@@ -5,7 +5,7 @@ Connection Pool
 
 A connection pool is a cache of reusable database connections. It allows serving many HTTP requests using few database connections. Every request to an :doc:`API resource <api>` borrows a connection from the pool to start a :doc:`transaction <transactions>`.
 
-Minimizing connections it’s paramount to performance. Each PostgreSQL connection creates a process, having too many can exhaust available resources.
+Minimizing connections is paramount to performance. Each PostgreSQL connection creates a process, having too many can exhaust available resources.
 
 .. _pool_growth_limit:
 .. _dyn_conn_pool:

From c74b9c4efa834f31e45e819dd33fb7dadd921c90 Mon Sep 17 00:00:00 2001
From: Steve Chavez <stevechavezast@gmail.com>
Date: Mon, 10 Jul 2023 17:04:23 -0500
Subject: [PATCH 622/652] add version querying (#657)

---
 docs/references/admin.rst | 25 ++++++++++++++++++++++++-
 1 file changed, 24 insertions(+), 1 deletion(-)

diff --git a/docs/references/admin.rst b/docs/references/admin.rst
index 6e00eb3f9..33110028c 100644
--- a/docs/references/admin.rst
+++ b/docs/references/admin.rst
@@ -19,6 +19,7 @@ For diagnostic information about the server itself, PostgREST logs to ``stderr``
 
 .. code::
 
+   12/Jun/2021:17:47:39 -0500: Starting PostgREST 11.1.0...
    12/Jun/2021:17:47:39 -0500: Attempting to connect to the database...
    12/Jun/2021:17:47:39 -0500: Listening on port 3000
    12/Jun/2021:17:47:39 -0500: Connection successful
@@ -83,12 +84,34 @@ Restart the database and watch the log file in real-time to understand how HTTP
 Server Version
 --------------
 
-When debugging a problem it's important to verify the PostgREST version. Look for the :code:`Server` HTTP response header, which contains the version number.
+When debugging a problem it's important to verify the running PostgREST version. There are three ways to do this:
+
+- Look for the :code:`Server` HTTP response header that is returned on every request.
 
 .. code::
 
+  HEAD /users HTTP/1.1
+
   Server: postgrest/11.0.1
 
+- Query ``application_name`` on `pg_stat_activity <https://www.postgresql.org/docs/current/monitoring-stats.html#MONITORING-PG-STAT-ACTIVITY-VIEW>`_.
+
+.. code-block:: psql
+
+  select distinct application_name
+  from pg_stat_activity
+  where application_name ilike '%postgrest%';
+
+        application_name
+  ------------------------------
+  PostgREST 11.1.0
+
+.. note::
+
+  The server sets the `fallback_application_name <https://www.postgresql.org/docs/current/libpq-connect.html#LIBPQ-CONNECT-FALLBACK-APPLICATION-NAME>`_ for this query to work. To override the value set ``application_name`` on the connection string.
+
+- The ``stderr`` logs also contain the version, as noted on :ref:`pgrst_logging`.
+
 .. _trace_header:
 
 Trace Header

From a6aa2adf04d54a7c77f78a46fe763fc9bede4cca Mon Sep 17 00:00:00 2001
From: Laurence Isla <lau.isla.c@gmail.com>
Date: Thu, 20 Jul 2023 09:02:33 -0500
Subject: [PATCH 623/652] Remove embedding disambiguation in favor of computed
 rels (#660)

* Add SQL snippets for ERDs
---------

Co-authored-by: steve-chavez <stevechavezast@gmail.com>
---
 diagrams/employees.er                      |   7 +
 diagrams/presidents.er                     |   7 +
 docs/_static/employees.png                 | Bin 0 -> 8244 bytes
 docs/_static/presidents.png                | Bin 0 -> 8331 bytes
 docs/references/api/resource_embedding.rst | 605 +++++++++++++--------
 docs/references/errors.rst                 |   2 +-
 postgrest.dict                             |   1 +
 7 files changed, 393 insertions(+), 229 deletions(-)
 create mode 100644 diagrams/employees.er
 create mode 100644 diagrams/presidents.er
 create mode 100644 docs/_static/employees.png
 create mode 100644 docs/_static/presidents.png

diff --git a/diagrams/employees.er b/diagrams/employees.er
new file mode 100644
index 000000000..7010a670e
--- /dev/null
+++ b/diagrams/employees.er
@@ -0,0 +1,7 @@
+[Employees]
+*id
+first_name
+last_name
++supervisor_id
+
+Employees 1--* Employees
diff --git a/diagrams/presidents.er b/diagrams/presidents.er
new file mode 100644
index 000000000..b49100961
--- /dev/null
+++ b/diagrams/presidents.er
@@ -0,0 +1,7 @@
+[Presidents]
+*id
+first_name
+last_name
++predecessor_id
+
+Presidents 1--? Presidents
diff --git a/docs/_static/employees.png b/docs/_static/employees.png
new file mode 100644
index 0000000000000000000000000000000000000000..0a72df2a28ccb7c5042db28cdbbc6a0a158874a1
GIT binary patch
literal 8244
zcmeAS@N?(olHy`uVBq!ia0y~yU|7$<z;J_uje&t-?$*sb3=9lxN#5=*4F5rJ!QSPQ
z85rbWdb&7<RLprhw=zT|{MYyWS9zUIYb{v7(IFV^a<ng_M_`I_p<<qJ%p;)!&!jsi
z4Sz0FQ#)p{IDO6$iI_)%(=%cUB-IuNPTs*%*xAIQtguN_Dkf6dq@%?Cz5Kpd=Zkk8
zE}so5uz!BVGPb<(UGUZW`(nR`T`jg$QZkTu^mxOPowf-EQe49N&RYyV8o6{w7F%DK
zrJ=3uTv%v0&$gOvsu!!i{`zNSD?<+-x$STz%QWxquGZb<?;oAF|9|B1@&1o*ZW`Og
zYfVjhdTMIbYhl4ppFTZ!^@^+S@vK8n!`Ow_3(m2r6ncAmd;9F!(jr`}Z{EI5%+Kea
z>BDBc`IdjKqa)*@#fuZOv$^Hv<$wJAdGO-Jjh#06vIRM-);tUe4ZW&)=~l&;7lM~A
zT`G8dj8{Zd^x)~!+=ttEou})?`n*V8{nS7>pSz)B!o-P<+~Rr<?(MC9aeKSITaN^z
zwDjy}WouQ7XT+MlSh#7EkffyKi_6RX7jHjWDD$Mq@=1{;$k1nJB>#N99`CcK^uUqT
z&5IT($ygLHEM2<v!<R2DQ>TVb-g<X;d45H8^=8Ky+YHmsd({2rIGmqn+q;X6wW0d^
zJ4Guisi2i2#m~=O)x7iMNy?s&$D}uG-`?Ka%iGl4T=?;k>*8By&!1;MUiiR*PpFfH
ztCdMqRCMdK%Q<y*b#7aA!(8<5y?K+<BW=!idb<Ac#qRw*o2Jg5-MzQ^`=adY>t>i{
zi@kaCX3MFVokgt9Z9I*=y}Wt%_H^Ffp1-*I`#TA<9ErMrKcBO0fBWPKi;|O*6H|k@
z{e+GVj=fLy;`i~mySobr3JD8K-&wapaiVeQtB|POWxBTY|K`NR#(HW^H9K)`e*Hhs
z`v1T0YpSWWty;CJWLn_LkSC8HJI}Q)S6do%a(Q@Y=)@R3b#rs`RV!9x1pJl~5)wLb
z=unf4tSl$P+xz?D(|4Ypu0MJ4;>CfvopYQQy{{~PbE7f!^fbxRodGd1J<RNU2M!-*
z7FPFb3DLS5`R>op&mO+MM~`$0D^5Q7qhw`B*UI4KkM8ZQwy674(fs#9LS|-X?eA}n
zN)r>_-Pw8K#0iEENnuK+rlLpGIvBPzoo;)jl%+9k+O!vUcblvE&Ee>D`LAhN{Y{7A
z#hznVmdv#*K9*6>knrTh#2-&4`+xZIGT3L938$#2=!x^^-E(qu9zA;GbE)ly;NA+~
z#-&SDot&H!5)%WncYgU&!r*XyUF_CRF|o0X4ewQb52nwrZ4*>>d(dzH@4zD0?h6}}
z-FqYqnF<RFchvvick-5?w$C26fS4E_2CH<1HEY*0?wOHhEGpE=^84G{=Gn8Q7cE}A
zG5@|DkBo&t(N39<A3v&PyRR|$IE&+K>57%l)922aQ}E(~;*8m|li%Ihxuf*8*s&hT
z=2NG<Z0i5rS(4kys}{$+Vf%LW505S$pOtaRB-Q8SgM-Z<*Vq5$PEAdnVUj7dBuJBu
zPo`tlDy_xK*^lxFuV?)7>MA$Ghv)O_vz|VE`jnBO>f4)}8oBy$dnAIF`8axcaf#{0
zaO{lX>wEmeF(rD5Z&&!zAk!6b0RaLG4{mMEj;frs<>BFW^E(@@I{NzBV)Txmn``~?
z@AvzM@7$5m)6>f>f3>Fa`AlE$+Pt7C)23be_4W13cXxNQ-40(Fa%FdU{;Nw%xu;H_
z{`qBSXy}u-Z+-Lf@|wQ1O_(sjp{%T|>T_^V(1}y0x)?Uh7CHO(ab}i~kkEpll@H#$
z$tj5KbZL^cE?cl+gTUsrvxg41^9Ke5G_Z1uDHt0I-`<|zzI3T-{J(Q^ttWUbePF@o
z>FHUz>^i%=ynN2>ZD$kiM=LK9fB*6E@t^D=pFVwB5VZ2g-xn`393!WCwH`U*^5f^v
zg|WNKc(d|9JUF<c<fV|8mzToy(-+r9o2R6uJ-QxWfAqve<<e^pE%=^2d$x61w%iU$
zivk5NFR!fH2Wh{)yqsa4AJ_aR-*?N(_KTM<UoQOcz)>e|j|3kd-`Tf(hb?Y}U6}af
zNlHakmC?g(LbrM<w6(P-PMz9X_xG3Sc5NQvi)lw@Po2uTHR^80=MB1zmo5c`goc`K
zm-cm=Ex0~Jt9AbT_{sY&U7j*!`t-+7PENLZ|8Hy9tt$<^7guFOGn=`+Zt9$_7&W6p
za?#NjJ9u^WF&viYkt~|2^1{Q#g(a@`YiRI{q%DGa@%wt#@Bep8Lt0Jn{p$7mx=v13
zpM6MVF>m6Uikqg;!krsd%5w{^Z;aVd;3%;0;tfak#Scw(Rg|_qxw2h1X2*t&cN4cL
zMVvn^pzA9qdH3*P=JI!UGGC=ht`)fU*~rDaTkQS%{r^^(T6lSS9+b}C!x$YMZDC=d
zU}7?*|ICcJb9*x{FI$*=yszfQrCw?Cth@HtO<(M){cX0)cXpfKTq{Sl$p^1r7mwbS
zlX+q9_u1z8Ne>UTzPP-cKPNZ$;<{Mtl6Q9`6%`e4>@Hs)c46|<)6+li^H>`6<jIqa
zn>{@}B2#u&e_y9yudK}MJx#}Pf8F1N>}+msZtjYT3I!b<p6l!5ufNWAes%Qt@#IfW
zPQJLdR$50_H!(GpH9tS!XNCdeY_nWY>f*Ia=RI`e1V4j@nwnewzsc(U91Qy_D=Mzs
z{<gFDIZNr`!-s!1NMALtuCDIt?NyDAj$UiSuqEjzSL59uKPnvmy}7yh<h^@w>3275
z*bwzP@5Tnl3HvKQrx}@>U(fX3{PXwk;J`q^cy)dK{##qKk3X;f@vxm~cGlKeckbT(
z`Dele0mpyaa&NPI&CW|pOWRWVI&AId+Y_qV`Q_C*U4mYJ<dwJEbMC#Fnp#`Wl=}<S
z#Pf4+zu*5~Z$)(Q9)=gE_4hA%^eD-y;=_Wldlwcuzx?+0_LSMPz4iBg5t^?z`6SE4
zoGdN@23I$?OOKEDYietEH#Il2R#tz1cQtzZt_uITR<1I~KUO-o@hsf3#Y9U-X9=&g
z8OOda=JzU`3)UniCf3Ybym;|}`=6hm=f3slVY~c~J(rjJbKjD&C{Vb&qp+Eai|fVW
ze!EAPRfRa`+E!nCQN_&8C-P^5yj_ilsHo_axpRHh{pKwAey_TJneXhd<$1T}R4_9$
zv;H)#z7@Sa?_=e}i4&XlyuQBvbEPTkiU19kviJA*>%XvN=apKrJ+JiRzHhg(Yj%Zb
zExo-xpZm?epU-AD?eg^Wthx8~^>x<D-R19}eZE)!zt-;V)vKW!(vDqN=*()H>gUHd
ze|gyIlecfrKF`m=VX!Oit6$>7L#<6)EqM-#Jj(r)9mmhlFEH`k+WP<hwqE1q;1GBd
z-oGDIrXQSr(DeGpP_3y|Z`s({xxZPLzvGdYm#_POYioAtu|sQDtva;Sd-{*R^K7dZ
zMQ_h*GFrd?->!uJe|~=c^StiwFU~(VHl=dse?Ku%x#pMk`#p!(&s-R^lEpjY=dWLf
zE?=H}|G5R9a~sdY@A|R3S{5x@#CDxo;YXiY?kyH+Y3VO7E;1`BDn@Kfa-Gb!SL~`%
zlb@eo)8ALz^Gn{`2%M1ap>kqYS@yD(AzGj|%2vIc*q|V#jNs{KXW5B~h;V$Ht{2;N
zdAUC`!@9V=T}zgz*i?LA`1$iEL!8X}IhMsNxncEJ|K8e~y>*|=g0R&SXV2y?FaOSV
z_4S2?%-7b(_usGk-OK-SRnW=_bLaNHd6NTbsAXSYcXWzoaKVQMj(flPxOUIWUE!Il
zeq)BYmC2(E)77SWC1z(wujaM3wm#UuQg3#{xBZ7#1TJQ={rBwb?2YyR>+0-PR9N!z
z^8V~wyLRopsoh@!!@{mTsA72V@@40lGd@R-97#CX#LB_P*S385@&|v8A35^i%F1B2
zoB14zgz}REi&^Kl^UEvg>h|8R|M_%!Dch;leKTjye6Ze3S($m~&Yew0`~Q6EPOvvH
z2snL?UB2c(y<NcrhPodQ+3WuA{eJIq*5&*6=imSS_3PDY&t*6N{QWB(<KOI~cKFH3
z$s02-tNr<OTK~k!la572n+|NBGG$8C`RSSok60&6nbIPv9j0J!FK=mS$-&R>o|>vU
ze}BfsMO8N=Hzu+Ek6aq`@a^{dZdFxQU0q!t&YIs>Ff*HWUf#CKM1-q#TCb#W+J}eX
zr%#{$DR=(tS>DC&{nxbqe>^V#c`qo{8WunES+Z=|qD70CT3cH^JUtH{Y-Tr1KE`uU
z)!q5^*%^k+pP!#U?r;CMWz8BLjj3KXwZEps?+kA4?)Kh$Zf2l_@f~HOw>i!0*RNlY
zclKu6tm0Ky-S^qq*){Finth$?RouRsndgmD=9T~Y@{(zH>DkYDcXmuXbLLEz?YV=^
z?7@kN3-1+gtNNO?)@pwJzn%9!MQ_hrTe>f7bFaMpy%$x7+xgdT-s7}zMX{LEl+C=l
z6Zh5rR?^hu3|{WnI(f3Nj*iZS?fLO8uC9sa=h?E|jM`ISIBD`^!}@<U71h;;Po3gQ
zOG_&#D?4^#qVmS-?|Da#A7AX;&R3OtX12M1cI(+!d*gjU*>%aXWl1kDEe+5R*|2$Y
z^URr&F)=X<0yG4~#M+qI`4X<Li*>tx`HlY^3qd<OyBb+{cXt*RmW02*zV0Y^*yJfz
zzD78CiGN7>`P)J(SAWmp4A~zTwE1`r?~FyyMX!cLMlaa3NocwM{AbfMo?3t!()nrY
zqttx%=yt4&-TmqFa;azM=l6%lRW6-rlXcVJ<2DB!UEPN-Uv}QyoSyvh($ceU{koU>
zc9|<EEO1>HyDYoVsjcot4l|@fgj8o@)}s2(TO{^&C>$>=C@66F{q3#qQ{lzD3qrI4
zBO)@+%=O#Wq2Rn{#*>?EYooVsVhxpGD|~T5(PyU7Q4Q%e&r>_Z)Z*GQ5+5NLSG<yv
zlq~uVuL@oLDzxtVySoo8`~>3HZcKQT+A+=Sr<B0re?NZy+<GE>83U*;<`LFk9QGyl
zvzWMeGN=~4v(q@mNb=90KLvk&d{q0|8*663vux2KCPzodrV|scuZumrqww*pFMisu
zD<#>4MMYbmJV`n6v}lf9t(5<KJ6AtHzGr7=x6ha{L+x|(*F8MVmQ`OgEcy;#T<rcc
z;l{OV*KX{oG|s!bYpLk_9UBvD^$#a(+O+Axt5;ebkJcq#SrO>_j2+s(;92J0FL&bf
zY3Ho0Rbg?#Yg`vLc1}+;Sh#SZf>KLc+oLx(H*4tX9({Xz`^JQWO=`REvEFFty~rS@
z8`bjn_jhGWOUc9S{Le32_8p$089XcJSR=?a8@FsZva|TPLH)lP3v27cmo5o$wK8qo
zxY5@t!T2Qi3`0Z1H>L~1JYr&G-rd=mJf%1BaNEJdhn=-!KTAz8)KA!SnyoEvo?Y##
zVnY|_if?abcJ8^@);WFQbi?Fh31?;)o_*UEcLPg932UU!c*1wP{C;iw>FN5j4~Z=9
zoiK4?;uhY?HZu+<m`q9Q?~xN0W>!j)zWr+N%ttfh%g&w_(Dm8FbMep-bjGDuM^}ev
z2?`1_mY0`%s0bCvv|qXuq!Yc3N9H)ElC04Y*VW?hSB0+LQ25yG&hB!47hmCrzYn!?
zKd|7-zP2WF(zjb$YvcCV|NEi*=FOW4)24yC>q<>qx0+sC8_lld^#9-A*|%NYm@~iT
z^V?T^U?|!tbMM~0vv0W$AK7wip1G0|lg#mjD^_rXua9FrUTC%b)%88g{pK<qFZ}WA
z^?E^Z@%Dwz?T3yXW2>vHV_=x-)w*JZ29JaRgRE6a!`{8NfByXWa5X&Mab*Y-!?iV$
z&DZ0qc^NhoJ@s;o{<?IR{Qke+q}zC<*|fE_Ev&4RY;0s&TU(<_&&{{*e|dTNV)uTz
z4I4H%9Pg7gEPE3Xv!^0({oCT_=Mqm$P~5O-Q`79((%05TAD`ac)zuWE2kHP+eSOt>
zxSc<HtEbD2oyF>HJd#Y(($XhVjDGz3mGt@9S>NJLH#eq+q@<)C)8wLQI+0EcukO_S
z|69KA+{wx6oD9CROghh;IrGDatF@`4!|vA$<-KK#7A@-Nc+suD??UvleHnjdnB_`E
zMnq)X<mBNInNt7ZLE}BMvuDm|=;`^L{x(H3nC1A2oBMvf(*Cvo|8M)XC7mux7U5Z2
zXD#!ezi#{8^82;huO;_%b{f8z^Ws6kYSHy<*4EZlPp5`&xumSD{IyG*;p{xy*?D(&
zxrT;@*6f=;T|6=}^5VtC?kjifm~raVDGf`@nRb6ZIN#cuEgr9DXE%@Gf_Qw*MTPmR
ze}DY<`+aa)nwsWRuU!QXnRf2pEzIEM=lATiea(*varJ*ot;*g=+}&N?ucfX1^5SCm
zk{1^gH*MOq=;C7c*IQ%-1s%)Z-C20)Qjk^A6ONg)XHT9xSN7(O8v!LHCbo5dW^i$F
zWxTw!l%?U&p+gnc)!*JIGF;i7A8%Foh(%OHBp@?W^XSo|6W6cTXI$VtUGJr>o7%mq
z3j!bc<ZNbK$=Vt=cfkUMPoF+5dVYTX^;^qU9<fe3!m)Ob?`$(chF|Y?zh`;b+1Y85
zc}eBfrKR0rpcZks?(M~Hy_Yu0N=bQvTeKoeK;sN^=gR*4`SW9@qobqBRIiu+{{D_C
z3knYA1T|(~*}4UHY`@BXL&~Y3V8glWE4<QX3MM8ZwpCvaoS3Nm@b&BN@c3F$uGU3?
ze<aLuW`sq3e|ML0PlxidhnJRmb8vAvrKT?Rvwr&YX;h|jJKt5W%PdE@d3Z#YcrOjw
zv1`|(i;LZBqO!8ILbOEh+_}ThP=6)xvn0d2dwW-Zzv1J!T6TkE^Ww#e&y~c-$1hpF
zJo)@Q+Yev9xYX3xxb;f0%FD~&*-?1-N!^JQqqQby`@2^0c3fK<-G1tnSIxJZ=_gK|
za;mJfypm<w!BMm`W_hl+xA)#{U!ShLnpGG7IdW-`<I<pyZ$rO(-|s&evSHqJhcjo+
z2uMhr`0nSmRH$gDO!2cb2d}OUXJimM*=@IQ)v8sVHK$IVY}~wg^EIdXn>TNsICI9O
zoln;1UfTM&y`aX-@9*yqpF4N%$+y?cuPb>IPE1hz@$Gj0#A(yoK7A^hGGz*=&84BC
z;o#@T7k}>HK}H4vdHMdPrY5)Vr|;gC?U%Pdw#;{SKu}QAq)9?^EDD(v6&0KAU7B)c
zrZKzMQlWzf4_egyv6yF5*>viZ*OO<@9vzpjcge`eSls?2-F7{rimK|%+KXTAmfwGB
zUtL*w@ak33^z-vTt%>=5y(Zr+%iqO-nws5Wx`!6IcK;}8b!xP${q^8rGrL;8v5k#P
zVPWBoz18N&`eavc_W4?TNn*pi>kR8+b~dqci!CUBe{aIcl!Bt7rv3ZvK|?HwhuQYc
z3DG(_QQ2KUK!8D8d$rs5>_0y~-q@Zm|Lf~(_L)9y=jK|2##k(hpYiDE=twQ~?R&f-
z`?}tdBS#c0EF@&DN*s2Vy}huvx*XI)+_-Tg2OnSFlx>yrCr-R;X#JXQ!V=u_HQg3m
z5ts>{JbAKe{`wXBd}kOe+!-s%3oh5wq-S;f`}^Dc=HU;yte~nHN2_7OgG)VWM`zqV
ztTyvGFDIwt`FXa!iCq`nPMkP#pi@}AXH%lk$F}zN&FsaHw!-40r`J_VE^3910Kgeb
zeLKw!4FzS6XYN%xC!n6|wa1s0Tkoz3Xb2Z-_o9D|Gb0N!6^}G|o6B-?a<Vko{eEL?
zcXq;oGdep=xb^PlybxNi2v#E&v+L#s)wo5!*wfMuE{!aBDb@;?a82|`NE3^h#X3DN
zP(o_POxEdjjNE#6nG946jJfsx+D8<;6l(yhe)<1kllOK89?mmon!Nw>i^a^kn3i~O
zsbsE{+C8-<*6C)pps>31EM0mQmsrfLFB|4T$2H)-f-{b)Y;Tv9k-4z1wmSIdkql;y
zsa_&tVw-Ls?%CGqnHQ9Ech^+g8HWux&Nf>fJ5Ytzis}$kyO);q?99vu7JNT{{yh8E
zYp%qr*GoJnD@^qYjEcIoqR#N6nJ_0O=Z7y}MD{GW8Dx0n`jjamC!Q8XL`R#iihomi
zFHOnRbnDL873OU}e!aPAoRXH7^y<pW-WM0SBhH^T(9F!t3|JZR;q&M0FWY9h?m0i-
z9yC%WC?LQfE-oGs9qqg@AmQz;ts0t|4^OwYw>LkwaO~0HO-xLDV8Q1<&*tIfZ*Oig
z_dVW_eqIhVu)BW$KdYRaoCojT^&RaNU%Y0G&*^jV^?zGUv#&WU3^;J=6xX$D*CZ^9
zRMy4s*VEXZd)ur)rX4hB+tJ&5^ufVq#mOfHgoK*-?f(eK9Dn%c=4Pw@@@Hpe8W<Zt
z&dth^wJtmJpqPoFwY4>3TaIMa*H^4Fec0I9*<0G$l$4bh-?O_e9=ng}z~A5B4fF5W
z?AW#I(5X{gi{1O(^78cLzhxb0VEmf5_@IRFviJY(#S;Ujcx;XG1$A+xua|y)cD5!`
zUtj;#y}i5rtU*H%J9qBnyd<U{=fm*gvcLUR$?Ik3=2$j;Dt~uJ(cj;HZrzO=Hv-(;
z*y6v<Ex)J8AR;HHr?I`{WzesGzu$8*<lflec>26{_&R~(g<BF1GU-Oo;^=OhGg;a^
zZ$fu>_qifIKE5flXGiPLf9>rX-`R2L(xnx_%l)F>R##UCyST7;st9T6>aM-IPQ!Ul
z)}i`eKYs?s#K=sYG9|#%lQVW#N$0()*SdBBMRj#{j0+@<(=u*?<`x(i?Em{Vzp13Y
zzMjcJPfu@4?rpQGPfs|fPMLCHUF>cTt*Mh-loob%aVaTj>FcZSjPVodY*A8DdU32*
zIwUU6k6+GaLFnqROjeI~_xIcDztZ3TXVSZSdrv>lbgDWx&o=r&f7IG#j?HWn7cW*8
z6%*siDSdfqspE4O<vXn0VgXT6QlTLs0byZcy|UKR`gcalgFScp)TtHK-{1Y|S28x9
ztfi%;VQ4t9rlw{^?eA|_c9*}mdfOGW=Xjs2GQ*b4%gd^!-rkhj9Tu09qr<qsH2d0z
zOs%P1Yu2psP@4FHC(9=B5DSyT_Po1FN{hB;Ul(F<40!RX<o&(5adkgam6TSkSfNl{
zTs+BZY00lInQJ$NhK8z4KFRViyR)P0%?(F}jN99CYi1q0wxjUzmcFg)iWhZ8?8~~U
zwRX?$^7mXxzpgzkuD$Sd^|L*-9}codJ^lZA{{IZth1c3Ojz$LtIxcqaS2H#?ma?z2
z$-T29P~d6w;Vw~ajs}G(d)Ry{{su4i`<OZFUjDT;kyf{Pxw(b^{QdgsYB$4#5Ur=x
zshuuPGRHsGH-p=2b-&-5GdT#W`CO=uX=dY9n(5=FHMOgw!^_L-#Lb&C*?1%lEDznj
zwd!kD^ZCx%v!yMqtv~;lyQ-<FsmSo<+3fslx1aC2@O1U|?dF!2mVuFxGsAuwr=JsG
zxV57&dG0n}#d~V<8zLhj9vtZu_VDp>Nk~x8i`&CdUtj;_<z@EF%*>jdtHakHx^+vc
z_V>4|n?BzE|4+Q3AfVvwEmMXAD*_j9ITaoj2I|-pl$N%3cXLniQoVHfG9$<1(^*Mp
zvR>TUs@)*o&Chh;NT={ux#>;|9V#m=H*MO)z_2=O?V-oV`vpZskG9*a&0GB|V~^eQ
zB`a2Ne1CWMa04TA$uarMI&&6rmc+`>f4ykgdatEI=K1$r92^?XJ>Tv>*NSyPCtJ3|
zW&Rr_g@1pQGC5pc?*IJqox68ehOdu{N;R!NDkmq`RB|@K_j>Aq<@4*bIE?2{pYG0(
z@#@OTub=Xtoteqfuxaz=uhV{hyPeO;AZu4MBk$fG&u7n`iO9*VyMFEQ@&4@G&Ce_^
z>dX=n5m^$tZOxh<5iZt38TXejUw-|zQ!ne+D#`3U-)?0`r3MEDt%%)SrZUy5^xG*@
z!MmxTj%>!cIhG~w?pRj+_@Fp-`t-~4^?w{EtNAK1Y^nH|v@fS$&i2HaGd)Sk$t(Bl
znNw6$^kTBVonm!$HIu`_g$tQ(|NHkZB{9)4E-tR*=_%1wD^@JHy*)oTB}JuB#(l1J
z`7?Ik^YiW1t*xy$ZQHi&?d|QC|Nj2Ia?_?spFVxku(O*tO(*iu`ghJQSC;$Bzq+w8
zdF}DCr>8`j9JIsNEfG|9o3M7Ru5HB!ht)Cj?P^cly?ggT@uINRD}$H&9VwK_y}xg6
zS9kZyEnBA4{d%b$q#?r6aIgBkZF9}K?pgbU1aIEBA@CvT>Vid!l(h8pmc{Na`^fAm
zFF(KPrr6wy<2{m#%dJ*;PuFX@_~FjZ;!;1>wQ+lAF<h|!_mO|!nzRky-tB(>N%`Tc
z*?afes;a1P)ckyI|9|CmabJF~FN?w_do49dJ2NAy-*;umq!6vA`;W}(o)ofu=}tY<
zFLPX6U0>>2Cmv#1wPuaUiRZU2Jk=HqOi5W1b~|Y0l>g<IzveIIzSwE5uHHUPKi-d-
zjYk0#KASfy$H&M2`t$j`roDZ9z_tw=CM@%x@5jf-_vFC?hy1-?#hyNS@?p{MpU>z2
z+%)Upt!cW^8n(7`o0^(D)FuZm_nZ6T?e_c2=FE|q`%lKcZcZD&ykG3D5=C!s@2Zze
zr)!v)OzD%gb_)#+b#W>A_{eqbOy1fbKYo1pJXcCF)IE9iFaGlrik)1xRDaKVb$z}3
z*6izjZ{EJuG%%R(?cLqgo9F)ev4%f(pOBz!^|v0oe?O96U0W-?HUIuRCMKpAXJ#6g
ze0dSb<Z!>{v+v$F-F|y|Thn|uyy|{x7-hC-PHqN|i7~I8o!!|toQpLxO&^t(m9;Hi
zoLs#7(xXh@!X{V!xUEsWPoAV)d%exk<-g5(7bU?pY$sRDy(Xd_@x@ku@mtJ}Ib0-Z
zQe|AN_CjNcUk0sdK0=an4`yh%op`_DqHTWm&gjDe@^5D0Y{tObGhoI)`K>WG`=4&>
S>|kJEVDNPHb6Mw<&;$VX&=Ii!

literal 0
HcmV?d00001

diff --git a/docs/_static/presidents.png b/docs/_static/presidents.png
new file mode 100644
index 0000000000000000000000000000000000000000..2164ff3de19ead9700797c517a93ec2486dbdbf4
GIT binary patch
literal 8331
zcmeAS@N?(olHy`uVBq!ia0y~yVA##Tz;J_uje&t-^M^_E7#JAXlDyqr82*Fcg1yTp
zGcYJHc)B=-RLprhw>l!^>9^zitJzqeL^UjWAnVBDI_c6B13AO|nR5irnjAc%<GVCD
zZGYaq{xX}HvW8zX9&Vhhz9;2;^8&k-ODnuL8ZZj7xC%P%^evivdd+?Lxi<~Z@SHI)
zzVq#u&3T(szt`=(_x0W1r>XC4tJkXv2sS2K+5JvkE6aFzi-=B{o6&|Fk|z%&nHzg8
z72;}TDt~v!v9hu<yIna`C(62^k45m|y}i{ZPM$n?cX#>3>C@R;of>!TvSM(ksIaK1
zsVT{;|Mex)rsju0US8gd`}^(Rym=F)RpNOd$z1VxpX}jQZt;ZVWM*@7a~??}7C%3~
zf|8P!y?bqQa&x8c#_3I0wzrqx|L>P}R(AHoXV2Oko7oayTv)ha<HpQ|ktH!K`@Uva
zadC481_w94ySrQZ>GEaE*v#|q9r^nD`ow9|+FrfNs;I6`{`BPJhAmr60=G;`w(s8C
z8yp<meC0~Woqe^^`g=Y&Ww&3Rm$*^dDKb)WSIJAJnLX=Y-&Xvybke?*)YOOF`uiM$
zf`YQ!51CBn)Be`d!ctLHb?DHcAK4#{9C4}n`}O*cf`?3Tbw5)hA|n$IwQxq|PM$p3
zF!Pd%g_YHzbLaRJ6%{S2zvXN`cD0<Z_}Q7prAt+ReS6!j>OF12s#U8ZAD33FXfAww
zjCYnzr4g^BQOldRZ$0&<o8O)uv~tOh9~DtsvqW{{_swCr@apR7l}nbmtp3}|Eq>zG
zty#<b=lfMwR(^SKka?DQzFcHP#D$H?$IqCxfB914<>$BT?d|Qt3{l(j<~n|!!tvW`
z&W-dlGaO%EU%!0TEUBX6;_PiVrh2K?e!pA3CGD(~m#^<qN#isDhF^cb-`{%c`qirw
z`}_Gz-`|_7rKNS`+pSwspFVwBG|#p=C^U3x<TC+rarf2X>z8F;Ul%xCFZRXG=kqSt
zFS?W%-@g0&zo*mV58b+TE5rVHpRBW&7gySu8I1h={34>Fj(XEy|5^0>%gf6izP?8n
zxprSUHvRO|8HUMhVe4W#54ZCx>*$<$Qar;XQ>cT3olmA=?p)cfuC6cl!n{g$6qf~a
z#C{e1AOG)@ctu48L&Fc<6?%U2Y&aP>I5;l62;Mr^qR?smN8Y*33LGF4Y;0`<BO^~f
ze`EEcAjzE7XeQ6)<^JvK*RQ{Kd&%<U%nWz#-ZlMo=gu7l21!ZDWt;)rMl*Tz_x(^x
zF_IMFVqLX*^;xs9>ei#{)URH>+FMs085PCF5VikWxUE`1P*Bpm2mjhzTUljfWkG3A
z*}ZQ@>6&jG-Ld|8_xG(Wy?TxP*ZuEhO$sxNRMzg;y?gPZMNBtu-mI~@%pg`REFvzR
z{P<WeD9<#pa+ln)w6bDqxOTiEG*?Ty*r@(r&6KHA7cN-9keZsBCcobHU{Zd|i4z_c
zmX;6qe!q8k_xpX_N4v#eZ;`bqP+(9nHxFO@{@vZ(3=IDM{-0T*`Xe`|CEndt`s2%G
z|A&trHGO=1e0J@bZ%o~?_4Cq9Qog^t8=xWb<J;~0jhUC#&dj%uU*7-VK?1{pr>Ccz
z{tC%WKGtLCxTW{=L3a5Ef4|>9zAg85KvY!MV)y=8wP(ILwbu!pxqDak=g*%j)~>yp
z85|wmEo)ttaA!y1qg=OKo3B@bcN9Km>+0^_`b~SP7mu8c#L}fpPn<f{G<B+IgMD5k
zpPY?EYHI3<6DI_2`&zdDs;I7hd~vb+iF4=7GGsUp@HhSabXs3SQ`2#K-d(A!o40R2
z{(k@eb(`bWCO<r_zu%>>(D2!rnazLx)QE_RCO$mWdg9EPBj@H?o3_|xU(?}eYM5=F
zKPyF#;lqcA&Npt~o_!|XebM30zaJhR7GPm)Qh4z0?(P+<R}0tQ+nPOnmagE#KR-Wz
z`2Icrlc+`QyCppmhD^`T&24sC*f4#%_^&T7o6nr_`Saznzl3?-oVLGvtG_2?XLrZ#
ztun3VJKG!DRkGta>%97Zm2;mz;5~Wjl#{0?=e(*{E7fv!b#)hpXwBa8`TKWwCnu-L
zWlNVXwW$ARlXh+n=gydQ*V0eONCiblul^dca=`+IbLY-UC3|-AZQmsA6ci-%>&r`K
zaq;PDxp(j0b#&3t&@iZqQ9AVKXm?_Me!pq<HHo+WuD-s!UESTL`}j5V^^f<-S{J;%
zWjeX{s@%jiH?+02C(fM7Szlkj_f6>b4`w+x623Htv9hwBICt(?r?C2iSFf_B=!<f-
zGR-#2b@KJ?J@(d3T3Y(c`}^|y|9+e8c`R$aN7$Q}FJB6<Fvi8jRo!fFYkM@=-|pbX
z<l_&XJzMtqDQ|5-Y3b3K#_3YNs}ngUPMla!Sa@(<?CuX2-Q^XHjDijyyMA3fGBR?-
znl&aTXS|)rSNnRSVNg)egz3}UpU<max79gQaMh|+AO3#7pZw;=#)6`vthWVG%ykcE
zP2{PWKX)P@w9a{%a7KDf@Nz#@hCdJeyK9n?lY1ww{-__*FJZ`(zyI&Hjd>Ew0+;#E
z&)dSk_~^TL@A@(?FO!tzIBe3UdF0&lH$5o{8;vJ59zEy5CT6WH8SzH#*_oNfkGjR0
z6cRo^J6n}6Ei1cr+uM(ikDrxT`6a`2qqvyZD%l&q<afsKxx2gb$lJ+ihpjo#%+4RB
z?Q`<+yLWnW(+?ataE<S{#;qr()}7i~@$r%Cnz+4E_wL=>QSmV;yZz{v;#)m8s=vSE
zRT8?-7PT#B=8f=>kd_S_3_R_-&r0~u7Obw_Rra>a-|nZ2?#7I~yu95f;w2;`H2z%@
z5?r)sQIxgHv-&Nb8=33(DB9QjDA>Af%NCQ5|8MEBT)uo+P)?3dTwI)^X~9GV4P|9!
z?`b**Cn!26<mdBydwYL*cUO9I`uSs1wZpd@n>b@eN9N^a3;pNYZP>J_skfJR&)&U)
zQc_(nUSvFZ{(SXK^U_8ymmk;n|7%sBSHX1c+O>kRvSZ%*dzX~Y6L)^TKzH7rJvMuO
zy;@yRTH3mFsVW<fL__H6u!YN(x!uY8^W$Su8MA2m`FWwAL;s84yzuvmmc(y`8&_5a
z&))jBnVtWN+^3g!cW-YyduM0y)tqZ<B9*_Xs;RB|>gwV$VeQ(rQPDLudouPXALn~@
zXXoZ~?L9g=IvKaO<z_v8e}Dh{6r;$+{OY}u#%{T@+X`#H-AvE=yMEuVRblpge0*PS
zWv^ek_3wwn{8_in()oBF&os}M+qq*$#$7ulC8s-icXkx|+RfOSa&l7Idv)hVPC1tB
z%}L=}Q=hzky*jP<!vn{S`yV>8I9y)lyZFnOl2vQhhJG&n^P^CR#c@mZr<3Y0UtL`t
z5)$HadYZ2A?NlSlxi*zScix>;pD*$|?fg97pFe+wgoe6CMn+DVFu`H{{(n|`|9m=~
zm29f^Er0*tu(kRc8XfE6_xth7*(~6<{}YgG_x0$#JC+%@{p<g}j@PuepC1$yw4(n1
zzogv?93|i1#cut%W9QD!zl+^^FIDNx-aMaY>EW)w|Nj2YVi#c8xqJ8Ot6EtV0_?m}
zOB9Pl7rXa|MgQHjdGk@br9qze?%hkOPe@pBBRrlXfA806w|?x(@OjhN*qF6wPwDGv
zx3)1dGFpKwH|a@#abaOr^1A5lerxw9E;Oz^a&OMx6pdv9)w3<r&!0Rgc%F54+1svO
zY4fgHKR-W<f(H(ZpN6aX%~@f}7!VsfH!9Q3-roMp+uPxPA_Z7_WGsXJ{JgWXIO$@;
zLg)6bw-+y7+^~6bb9+0xn%|s`@AvEFJ3Bk8&i8j*$(vtQQL&)>{k<$RMMcG^?WSpb
zyqQ0mDi6=G6crWqJ>w!A{7$|2QreL?c}IbS{QUlg28Nn17u`L)y)W;G$o1%#v)!^y
zTZC)tk_FTC<FEY?dVN}dzsT>YUaCb!MGOqm=6NFCM;Pim^t83P-TPz?{`&e_P(-9<
zdR&#~ddtv|kQGzwE`Dp<zj^cKlg}?qXsgV!Dt)yi{7-M<slO?Hw|su>zPGpf@wK(l
zXYa*@*Ev^LSD$$LNsYVVs(Yx-g8cjYPMkU85)&iiH{Y)J_4W12+S=UP^X>{=zI^o9
zF(o6TO($($#O^9_e12}O>%naAEg=yR8J{doj>uFh`0kv4#&dSeP2bMeR#vxODb;^(
zo<Cn+CLeQq`M$kdx0){Vo!$20MaG{Ghxt#OJLgtZwCR?FrlzLvF-4B1D8G|y*67^X
zR~voSEwu3bm12XoU(4Hi|8AO@Wj}K=pMKecewM$hMBkp8s@>7k<C2x7wQAL>fS8z`
zDN{she!ty5!!%p$*}1vedFI*IbaWy%Fo4?Ez0&3Zfq{+f{PK@3E%na&_tiIXd%;7e
zkN-<cOFKF`9MaO%xVX7DCLQf^lkd!UC)2Yu`}(>^|JTRvZtLmc>0PpV***WX!!u4t
z7vE3M?^*UP-8|*?w%p!(i^FP{`OH+xGfq1*L+$O~zkj9odS5YE*U`bTw(iT$^Y`Xh
znuz-Q`1C~mU+CO^<=6G~@#~A{9653Xk~QBQ+cLAbtoZXW>3jth6_(rE^N*jLtUht>
z+}=;0iY%<H7gv9OCt*`zpyo4U!8G^3`~UydfAsjVpuBv4_Vsm&=H}v0pFS-pC}`Ne
z-F%tP%qCWDF^P~R=4xte%5FUezP-IYao#+>=;-K{mX?IOyGniS_%6<|lsLU9^>jdN
zZ13Lc?~ksnjjs6eVq#mb<+sU}23mh(D=I7)68``DtH#}txJ8kJ2~^!w?wo)5zTqXL
zIs~Iq!69&Pg?o*$k<o;iGdt(mR?pIsYrE*_=GGQ?`}3)D9&C%l%KZKPE2^qKeSXt(
zQ;>ym-n@BkKOan;JCO%k_nkbDl&-?uJ=ajv)6-Lcg;6_v-IddI-{0L8U}0qElQGCo
zNZ4pB<YZKtJY$-of`Wr`azu1vcp12_HhIzOIeWKk5y{{CRcu%Jd%o=KY!()l2Ol0D
z)|HZ;f6O3l`Knc12M-?1imcU--`67^S8;F#PdwXUZR_N+Z8<lao;*pZsH}YW<KyFs
zA0HGqZQlIx+3b8JGqY_+A3c~l*U*}sU#>-g!=mDYLQPE#1H-m$+ivVC)m|6BzfV}*
zZ;OY_o=wJS&yV#=7Zeu@x5mw%w&ut|sAsI@<m7f#f7c5N4mSNI6{cveu2XjGO-pNQ
zV~2p4SleWE|3z!o@PN8+hg!L#-_*!H;0{^F8nGoq@Y}n)-A|sR^hg@J<%qK|US95>
zztP$VWYh6er?~9@{ZJOuiD<~XyX)YoQ(XW4{j(@}5zrmCplGJ#F_kAzo;+ASzs~5C
z`+U1vgQ_nXYipNj7$074*y9OG0_PST{k3TAtL>VJ8;#WtUcM~sJzX#Nt$|eQ`J13_
zFE|=7;sqg)aK(IutE=mYvuBUq&flNAszSm|-PP6AEjNG44P#^DiL+;SpPg+kEy{BE
zMf1j~<~>5cI|P*(J_Pso{1jwi^tb=JCD8829L$)9+3-3rFtBmO3XLzXu7Wx!O$rOv
ztl@dT_q!a6W58*r(_8E#-h7SNS)^+B|4;FqoyE(Ku5zDaS<Kd?knr}_R$ZfcQxZ2`
zSGKd0<KyG=@b-3&jg{@-07cn`MCJ|-=XSo_w*r#N58g0+-BJEtZqJ@Q58l4LduyRV
zT0?jlLttQ_01Kn4s_Kr4k4h|#7k;g*KUeqVMIc90!`a#9kFTr@mawfddGqFtfPer4
z!;00b4^PvLHpsbQVDs%pazROni-QA$S?;Ztt}ZTy1Glzje>`J+o`J#c*9+yX8^0{A
zlM&a8Ik5S>9k;Z!w1uUmqLLER(W6JDZqKo+l`>90*V5k3uA{39>cgCztp51T&COP|
z|9?F0m#{2S$;rvNusPj7=f(!dEw?wNa_`x*Cm}VpwUL=UtG1@4<HObP_{1kCCW0!b
zty@k1{Q0w?^!2rA+7@nZ2Boh;W?7Z4GSs`p;yq1Ak-@jF?(f&|!r991eF6+z{QT<N
z+}szB-M>G-qhp$G^s>w6r|Cv_bYz^JWoniC#Z~n9Y5n~^)22<6s%vU$y7K1z-QCNJ
zeYm-~tx8`_X?y?j^77SZ1Hazfk}16R_q*LvZ;fX9<i=}G^_pc_yzE@z^Ru(BKe1s9
z$jMoA@3$-W?}#^F3knJrJUrZ<y+uEMU(E6wj2Bj~-{*CGef;uUx1u)IA824qNltcV
z=a*Y@=~9rEzW(wjPg1I$&n?$bQ*+zm?c<}uuqEy6thA#s_I>8}Dw>UqjaM#O)O2o+
zrSsmZuSyJ4=FHK#_5Ats%QrSAYwGFsy}Ps1`RdiHAprpnzrVdzmX?;DWsukuc0VvM
zu;leMT`g_x#mww{0n7d7o;Y~0@y(kz8Q0gvmi+%$tEHv2XsP#fA%<DD)!SaApPy&T
z(!j<q=fla#32HN?rlyv>x}y2%^Jis-l6QA@x;;OcWNvs?5R}+GR)%Ed2+PR$FthP2
zm^Evb+i{brH|AHrv+UjX;zb6N!~cKZ_g}p=dD0{e8=E;*UtTQSn6!KM?(83O_H}#O
z-f!4oz~nH$?$^qw>fBsiOACtt2Zx3mVlpy5MLXww`t-@<&yr=!gczds)l@G2Y|?t;
zC(~6ACnu*Z^OEbo-Aw1;<_5J+j`d2j+uPgQ{QYwI!}ssz-ZJOyey?$h-e32Zfq`G%
zPUQBvxz_Cu9wdZ>hi88cj*MJ+ahdMTjQ98UGBP+iI%d5s+9{Klm#3kjA#gh=I5;po
zynUW+HPesBf9C!xpSSMU_it}+TRl(H`oVP7qeS)bm(QP_tE#NNy}8-EulBc+p`qa8
z<NfXZ{rv0V_GW#uShIGm>8+6cEg|oj3J$mNu2{G3SeK}F!Q*4RAz@)oD?^$(9z1=z
z^y>DhQ>Xgf-}P&X*U}%GUxBLY6{}YZA73p$eO<g=@FDHpk{dT{a0m#Pu;W)~NXUWH
zr@4!tpF4WATbz->=%)N@-`w2X?juv?&h5>+yDL-V>Dg1KoYK<N<f`8oPVToXc;N8o
z(`o$^r%yLGH#eXB`<i?Go3x}SCnnz5S8ILg(xrgNNX}NL#>MXai&m`QxOwyDqPvg#
z?fDoye0)rP$$HnmxVl>W-TnRjFJ5G5h;V6$aH*)MBs@COnYDVO=1l8yJuNLQ0U@EL
z!|nW!4>q%}Shvp2&yNpOgNun>Q+k?Kk!miy|Ia7xbMx)jZ_U5Ar}EK%b{+`^b93`K
zHkCr>&YerLp84|L=RZF`7d|;5s1vn?qgzZ@==R^ge;>Yn-Ch0t-OQRZ9UUBVtV+3d
zm%l&u<mBY7x31h*f7TRUX8iH<dHdvthgu~}G6dGFUHkCOo1VbMZi&~|#r}A+`Mitu
z&X_)Cc0L6I0|7HLv$X!~Q&Tj5Je!?wka9vGB03t>@R(s=Z|671g3;UCdvlK_2UAi~
zl7O^y_k;-opmOcSot?(NzP@h1a3Mg(s)R#PQ87(2T9?l#iSwb6v5$9Rmyz+FO`wkF
zJvL82ziU5h{Qml9WMpKw-&zOmkiI{*#j%Y~_EwQUlNU!Et~#bUaJ!s-%#MaTcVe33
z1kz?aEBg1RGFeXC!0!z+8&AX5t)^<evr>Ab+cGDeoo#;j^5x4K@@}1XPoCuT^YhE{
z|7h4_d1FuI=5yN*eZf_cU3Ux$5@K<@;9+@iOMJwewLId=8I}?7esi9}FSSq4lUQB}
zh%0C8j@ebx$#9`dRQrgTv(V3C!=`QFJq_Vy%mOTo$;bO#V`609-Pzgv>Q$DAh)BZy
zeYG35Yzc{eyYK(M>Kiw1Ja}-hSwmOXwX)K3(&Wh>&so1eaP68H!-t3M@}S(oup#ZN
zl;LJw)8wVMcbDsf26)b#@d*hDd2nW?F({>hn&H~v>rArww33pOKVFN@e|T+ew1&3!
z;YMcm3oC=w*F<gQy1gy;@VeOD1^@rmg2skkURoNUH8tzJ_uuFC{|}nquW3Hm%&x4c
z$mr_o3eveUc=?0p&)er(m%s86%?RrG89MRSDZeH4O7(hf2aa;wGHp`<`97v+L2R-I
zLJ%Az^&ka`5C!#zj&j_>!In72utS3JumnT*Ufx4TInFS5&z;CqW4;W+Sq~3t_z(r8
zHF<DFbibse<cTw9MC4DUOB7F<I5F|cH&CKFxMJ$v%a?`c&71c}K_a<~#nE8bCpHXo
zRP?`n_)u`-Y0;FaQ@56B$hMt0;la_=aOjZJ-Z#;&Bs}8YXliPH`1DCA_>$qV;+L0H
zLH)b8te=i$tV~wO+-P6*g=6N-nG$9>5!vmR7JB&lhI)%%lF+T>QPKUjWsAv`t5+2j
z6c%iCo~WZ+$rI)Bruy5PMg@)=o74I0{{2kvk+l{pD=P!Vo0xuF&!<mCroUya%Nzt)
zYQEnsw<vib;MOC-n4O*NGshxu%g?{x?{6%78};M&@59HAv2EM74K&ymbu3D>va+(`
z^I7wU&z`YKOH2FAFkrN_v`muP)wa4zai6?xRm<Aw?T==r&ud(~SozJHHwHydJl@>h
z9j^Ow!alp~tSnFyK+(WJVBNZP8@6t3-M`=d+WL6@R;R=bvJ4{P;*UWisRtUF6LWKW
zkIUD~Bqk<G#qWQ;`TlIDr^<SI=T;;qi1m1OugVv@f3#a%nBmut$NgKM3Cy=HUpMP-
z_WHeU3>r#GPG|F8URvtn0;)P+-QK?bTFm{jva%@?Co2B(^7dZ5E_Qd;jmqlk;E)iJ
zlPN}8+S<Zzc|XpbKi}WEjpyRb@|dYx!{X<AEu94F<y^jhZEZB~CS|2vRbRDs?%I{L
zwffJ;<C^N~?(hGu<JXe^YWz*Aif0R>aLUJA!HxY=rd<pZR<G86dt+m>oK1xTS8G#J
zQj&+>^vOPIi&w4Ex>)z(!oo!Yc7MMF@2dU1?M8THq-R`QoXX^r8d_Ri>*Dr$O`STm
z<o!L{sGUViql$ii`c(Al`uh15493RBD_5=Rnlx$BiQ~uHca^+!YG&ijn)cqkU#_#T
zPtJB$pPa21D=RCg*8lkNV-i=UbIqzt;p{9d7gh!@_gEM(!D-=w;^*fsdh7315#zdW
zecgr)0V2N+wQ_6f>h`W$wd%#OUTKrcPbo|efq{WlZ_8^Xtx7b$zPRZ8=jMgv1>I$e
z-*)Y?+O%<_;!Gd6=jY~Le!<VntIAOF_gATs(yCRf7WvJ!ni!+E{PFSr>>KOj_s?Sp
z@bT%n_VL%(*Y5r{A6sU<y`8^*ZQ}R8-|q{98Y^X+Yx3{xn8<KJd;K0KucblH|L}g4
z6c=}A(6F+KT5j+BCM47_Y+cOCi{-z+<!;^c&i8G3ZNSfphppmA%$)lh^=`G^2tE1i
z`I(uEx7L4qb2F>{n_kQg2L=rjlaSSa4>U4!GMs!`^l^QYkD9Whz!CfYfB*iuxIB6L
z*7w}Gb0KkY>mEKo(kaZ+VE6ye=d_=476l5H78Vx{xARNS-LGi3dey3oLoJ*siHVNE
z%X}7|xBow9(&WjeHLtR-Z%+4rb#3kJTk*c4T&+zE7rOQLt+-xyoqcNm)z#tMxovXH
zu``_Br0sXuTl3S1A>q%Dk5aW)uU@sN{G@W{&YcIZUU5C>Puk4@YVPv>?&{(KO?d>I
z|GM_n_qB)a-jx*<72Q$xR*H$4`QlP<ao%|MemT|;&s!%h+y@$K6cM@dVsD~z4O7F?
zrK&<gLKCJ;X<4v9VUBIJ*kZTdruFOfFI~FiQeFGT%gd|a`8io0X)~W}KKIa#2BC#5
z$G+{}x1wgnyEPJ3JZJh0_iO!H^JZ0daBlrE`+q-@dxexIPMpZnuxZmKlQ-}0?e%8J
zIMyTSdn_y<z=7e#%=CE|UwC_ZE<88adUA}Oc({yn&FY-3KlAeT?AlTEl#6izXxuqv
zxt55SjLe$E=(sq)fB*iea4;=hzFau)@$cC95W9Ex_xroF$u}Q!sJ7^pG|du;jEcI{
zz{vdK`TY82t5#|4s{E`5no(nMT=4Gh?%=}0jT!G>zxLMC(~GLTdgaQ5=4R%bw{BfJ
zH`iKIU%!9V>eVmb-Q7K9#taYdX*z=17X<}x-n=RJ!98^Qq)9?ry1Gke%#irF=<M<1
z%Om$?XJwtZcW)lUg;k-eHO$SYYiVn1s;ahzt&j8l|Kqql&$pdLPrYVYm+Srg@wk7=
z{Q3S<r%wHHJAZ#*MTG_9f}`Ey(kaVBv{q(cU#G&s^!Coq$zI;xE7z>)>65i~`}gl3
zOG8}!-_pI`cJKS~>sQeFxV=|y@mR9;UVL_R-7br{=K1p~T;u*fe(}O%x?Zf%+ta5{
zd+JTU{Q127`peJn|NmD$cl#ZN3;+K9cD?=d^z`g6r=J#m)c106aoJqEK6ZE5^4P!o
zlYafG`S<gA>8&p>E;{cqUbJ3T@ZvPx=#pD)ZEZoNrCaa)-m4j67jm89tS#HFjL%8o
zv2*G^9u=Q5Z=T=5g9lS`bA4lXmn{vCt8Cr0dGpmb=jYjaGi1EIwY9ge`p1VvDdRMr
zuP-h(uUWGOG!7~vCgxUHSQru=t$oY3>Pv^+j|a@JE-&XVeR-*siJAH3kxt=~4-Xuf
z9RB}#Za@3&?2e54`)WlbBs}!=^iuNk{SUYEFQ02&-lb%8B)zQ6?C<^mf8}|l&3a^H
zWI&ylKY#vYTwN6!5)q;C>(X_<qwntS&O9+e@ygEP^rDiIB?}fP{QC8J{p_vxrJbKX
z&aeMHJF2?4uhHz*o*Uoa+;nER!gbQfr`VwN#@Q-!w^H?E$B!SMbJ(CKZbs~zySqx8
zCr_Si*`9dD!~K+KzS&0Ysa`7T>YrDg+ah^p+Wc6x$ty#{(r&5CYKHGwGCw_i2`i}L
zM;qFKbnqo==i8c_i~s)i*4R~tCpoM~>~|}-xIyi&lHenU4ANW|^nF~SBE!JIU;<hT
s@ae0>VUu%pcIkvhB|yVRhyOFXA8&bmhMmEXfq{X+)78&qol`;+0E*r+mH+?%

literal 0
HcmV?d00001

diff --git a/docs/references/api/resource_embedding.rst b/docs/references/api/resource_embedding.rst
index 1507fd841..be4ea15f2 100644
--- a/docs/references/api/resource_embedding.rst
+++ b/docs/references/api/resource_embedding.rst
@@ -1,7 +1,7 @@
 .. _resource_embedding:
 
 Resource Embedding
-==================
+##################
 
 PostgREST allows including related resources in a single API call. This reduces the need for many API requests.
 
@@ -11,12 +11,13 @@ PostgREST allows including related resources in a single API call. This reduces
 
 .. important::
 
-  Whenever foreign keys change you must do :ref:`schema_reloading` for this feature to work.
+  - PostgREST respects composite foreign keys.
+  - Whenever foreign keys change you must do :ref:`schema_reloading` for this feature to work.
 
 .. _many-to-one:
 
 Many-to-one relationships
--------------------------
+=========================
 
 Since ``films`` has a **foreign key** to ``directors``, this establishes a many-to-one relationship. Thus, we're able to request all the films and the director for each film.
 
@@ -82,7 +83,7 @@ Since the table name is plural, we can be more accurate by making it singular wi
 .. _one-to-many:
 
 One-to-many relationships
--------------------------
+=========================
 
 The **foreign key reference** establishes the inverse one-to-many relationship. In this case, ``films`` returns as a JSON array because of the “to-many” end.
 
@@ -119,7 +120,7 @@ The **foreign key reference** establishes the inverse one-to-many relationship.
 .. _many-to-many:
 
 Many-to-many relationships
---------------------------
+==========================
 
 The join table determines many-to-many relationships. It must contain foreign keys to other two tables and they must be part of its composite key.
 
@@ -167,11 +168,11 @@ For the many-to-many relationship between ``films`` and ``actors``, the join tab
 .. _one-to-one:
 
 One-to-one relationships
-------------------------
+========================
 
-One-to-one relationships are detected when:
+One-to-one relationships are detected in two ways.
 
-- The foreign key has a unique constraint.
+- When the foreign key has a unique constraint.
 
 .. code-block:: postgresql
 
@@ -182,7 +183,7 @@ One-to-one relationships are detected when:
     sound TEXT
   );
 
-- The foreign key is a primary key.
+- When the foreign key is a primary key.
 
 .. code-block:: postgresql
 
@@ -216,12 +217,10 @@ One-to-one relationships are detected when:
 
 .. _computed_relationships:
 
-Computed relationships
-----------------------
+Computed Relationships
+======================
 
-You can manually define relationships between resources. This is useful for database objects that can't define foreign keys, like `Foreign Data Wrappers <https://wiki.postgresql.org/wiki/Foreign_data_wrappers>`_.
-
-To do this, you can create functions similar to :ref:`computed_cols`.
+You can manually define relationships between resources using functions. This is useful for database objects that can't define foreign keys, like `Foreign Data Wrappers <https://wiki.postgresql.org/wiki/Foreign_data_wrappers>`_.
 
 Assuming there's a foreign table ``premieres`` that we want to relate to ``films``.
 
@@ -292,6 +291,9 @@ We consider any value greater than 1 as "many" so this defines a one-to-many rel
     ".."
   ]
 
+Overriding Relationships
+------------------------
+
 Computed relationships also allow you to override the ones that PostgREST auto-detects.
 
 For example, to override the :ref:`many-to-one relationship <many-to-one>` between ``films`` and ``directors``.
@@ -318,10 +320,359 @@ Computed relationships have good performance as their intended design enable `in
 
   - Make sure to correctly label the ``to-one`` part of the relationship. When using the ``ROWS 1`` estimation, PostgREST will expect a single row to be returned. If that is not the case, it will unnest the embedding and return repeated values for the top level resource.
 
+.. _embed_disamb:
+.. _hint_disamb:
+.. _target_disamb:
+.. _complex_rels:
+
+Complex Relationships
+=====================
+
+As mentioned on :ref:`resource_embedding`, the server does joins based on **Foreign Keys**.
+When there are many foreign keys between tables, it needs disambiguation to resolve which foreign key columns to use for the join.
+
+:ref:`computed_relationships` can do the job here, they can choose join columns arbitrarily.
+
+.. note::
+
+  Previous versions addressed complex relationships with `Embedding disambiguation <https://postgrest.org/en/v11.1/references/api/resource_embedding.html#embedding-disambiguation>`_ but this is now deprecated. Follow the solutions in this section when a ``300 Multiple Choices`` error is returned.
+
+.. _multiple_m2o:
+
+Multiple Many-To-One
+--------------------
+
+.. tabs::
+
+  .. group-tab:: ERD
+
+    .. image:: ../../_static/orders.png
+
+  .. code-tab:: postgresql SQL
+
+    create table addresses (
+      id int primary key generated always as identity,
+      name text,
+      city text,
+      state text,
+      postal_code char(5)
+    );
+
+    create table orders (
+      id int primary key generated always as identity,
+      name text,
+      billing_address_id int references addresses(id),
+      shipping_address_id int references addresses(id)
+    );
+
+To successfully embed ``orders`` with ``addresses``, you need to create computed relationships for the foreign keys columns you want to use:
+
+.. code-block:: postgresql
+
+  create function billing_address(orders) returns setof addresses rows 1 as $$
+    select * from addresses where id = $1.billing_address_id
+  $$ stable language sql;
+
+  create function shipping_address(orders) returns setof addresses rows 1 as $$
+    select * from addresses where id = $1.shipping_address_id
+  $$ stable language sql;
+
+Now, we can unambiguously embed the billing and shipping addresses.
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /orders?select=name,billing_address(name),shipping_address(name) HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/orders?select=name,billing_address(name),shipping_address(name)"
+
+.. code-block:: json
+
+   [
+     {
+       "name": "Personal Water Filter",
+       "billing_address": {
+         "name": "32 Glenlake Dr.Dearborn, MI 48124"
+       },
+       "shipping_address": {
+         "name": "30 Glenlake Dr.Dearborn, MI 48124"
+       }
+     }
+   ]
+
+.. _multiple_o2m:
+
+Multiple One-To-Many
+--------------------
+
+Let's take the tables from :ref:`multiple_m2o`.
+To embed ``addresses`` with  ``orders``, you need to create computed relationships like these ones:
+
+.. code-block:: postgresql
+
+  create function billing_orders(addresses) returns setof orders as $$
+    select * from orders where billing_address_id = $1.id
+  $$ stable language sql;
+
+  create function shipping_orders(addresses) returns setof orders as $$
+    select * from orders where shipping_address_id = $1.id
+  $$ stable language sql;
+
+Then, the request would look like:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /addresses?select=name,billing_orders(name),shipping_orders(name)&id=eq.1 HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/addresses?select=name,billing_orders(name),shipping_orders(name)&id=eq.1"
+
+.. code-block:: json
+
+   [
+     {
+       "name": "32 Glenlake Dr.Dearborn, MI 48124",
+       "billing_orders": [
+         { "name": "Personal Water Filter" },
+         { "name": "Coffee Machine" }
+       ],
+       "shipping_orders": [
+         { "name": "Coffee Machine" }
+       ]
+     }
+   ]
+
+.. _recursive_o2o_embed:
+
+Recursive One-To-One
+--------------------
+
+.. tabs::
+
+  .. group-tab:: ERD
+
+    .. image:: ../../_static/presidents.png
+
+  .. code-tab:: postgresql SQL
+
+    create table presidents (
+      id int primary key generated always as identity,
+      first_name text,
+      last_name text,
+      predecessor_id int references presidents(id) unique
+    );
+
+To get either side of the Recursive One-To-One relationship, create the functions:
+
+.. code-block:: postgresql
+
+  create or replace function predecessor(presidents) returns setof presidents rows 1 as $$
+    select * from presidents where id = $1.predecessor_id
+  $$ stable language sql;
+
+  create or replace function successor(presidents) returns setof presidents rows 1 as $$
+    select * from presidents where predecessor_id = $1.id
+  $$ stable language sql;
+
+Now, to query a president with their predecessor and successor:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /presidents?select=last_name,predecessor(last_name),successor(last_name)&id=eq.2 HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/presidents?select=last_name,predecessor(last_name),successor(last_name)&id=eq.2"
+
+.. code-block:: json
+
+  [
+    {
+      "last_name": "Adams",
+      "predecessor": {
+        "last_name": "Washington"
+      },
+      "successor": {
+        "last_name": "Jefferson"
+      }
+    }
+  ]
+
+.. _recursive_o2m_embed:
+
+Recursive One-To-Many
+---------------------
+
+.. tabs::
+
+  .. group-tab:: ERD
+
+    .. image:: ../../_static/employees.png
+
+  .. code-tab:: postgresql SQL
+
+    create table employees (
+      id int primary key generated always as identity,
+      first_name text,
+      last_name text,
+      supervisor_id int references employees(id)
+    );
+
+To get the One-To-Many embedding, that is, the supervisors with their supervisees, create a function like this one:
+
+.. code-block:: postgresql
+
+  create or replace function supervisees(employees) returns setof employees as $$
+    select * from employees where supervisor_id = $1.id
+  $$ stable language sql;
+
+Now, the query would be:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /employees?select=last_name,supervisees(last_name)&id=eq.1 HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/employees?select=last_name,supervisees(last_name)&id=eq.1"
+
+.. code-block:: json
+
+  [
+    {
+      "name": "Taylor",
+      "supervisees": [
+        { "name": "Johnson" },
+        { "name": "Miller" }
+      ]
+    }
+  ]
+
+.. _recursive_m2o_embed:
+
+Recursive Many-To-One
+----------------------
+
+Let's take the same ``employees`` table from :ref:`recursive_o2m_embed`.
+To get the Many-To-One relationship, that is, the employees with their respective supervisor, you need to create a function like this one:
+
+.. code-block:: postgresql
+
+  create or replace function supervisor(employees) returns setof employees rows 1 as $$
+    select * from employees where id = $1.supervisor_id
+  $$ stable language sql;
+
+Then, the query would be:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /employees?select=last_name,supervisor(last_name)&id=eq.3 HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/employees?select=last_name,supervisor(last_name)&id=eq.3"
+
+.. code-block:: json
+
+  [
+    {
+      "last_name": "Miller",
+      "supervisor": {
+        "last_name": "Taylor"
+      }
+    }
+  ]
+
+.. _recursive_m2m_embed:
+
+Recursive Many-To-Many
+----------------------
+
+.. tabs::
+
+  .. group-tab:: ERD
+
+    .. image:: ../../_static/users.png
+
+  .. code-tab:: postgresql SQL
+
+    create table users (
+      id int primary key generated always as identity,
+      first_name text,
+      last_name text,
+      username text unique
+    );
+
+    create table subscriptions (
+      subscriber_id int references users(id),
+      subscribed_id int references users(id),
+      type text,
+      primary key (subscriber_id, subscribed_id)
+    );
+
+To get all the subscribers of a user as well as the ones they're following, define these functions:
+
+.. code-block:: postgresql
+
+  create or replace function subscribers(users) returns setof users as $$
+    select u.*
+    from users u,
+         subscriptions s
+    where s.subscriber_id = u.id and
+          s.subscribed_id = $1.id
+  $$ stable language sql;
+
+  create or replace function following(users) returns setof users as $$
+    select u.*
+    from users u,
+         subscriptions s
+    where s.subscribed_id = u.id and
+          s.subscriber_id = $1.id
+  $$ stable language sql;
+
+Then, the request would be:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /users?select=username,subscribers(username),following(username)&id=eq.4 HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/users?select=username,subscribers(username),following(username)&id=eq.4"
+
+.. code-block:: json
+
+   [
+     {
+       "username": "the_top_artist",
+       "subscribers": [
+         { "username": "patrick109" },
+         { "username": "alicia_smith" }
+       ],
+       "following": [
+         { "username": "top_streamer" }
+       ]
+     }
+   ]
+
 .. _nested_embedding:
 
 Nested Embedding
-----------------
+================
 
 If you want to embed through join tables but need more control on the intermediate resources, you can do nested embedding. For instance, you can request the Actors, their Roles and the Films for those Roles:
 
@@ -338,7 +689,7 @@ If you want to embed through join tables but need more control on the intermedia
 .. _embed_filters:
 
 Embedded Filters
-----------------
+================
 
 Embedded resources can be shaped similarly to their top-level counterparts. To do so, prefix the query parameters with the name of the embedded resource. For instance, to order the actors in each film:
 
@@ -419,7 +770,7 @@ The result will show the nested actors named Tom and order them by last name. Al
 .. _embedding_top_level_filter:
 
 Top-level Filtering
--------------------
+===================
 
 By default, :ref:`embed_filters` don't change the top-level resource(``films``) rows at all:
 
@@ -484,7 +835,7 @@ In order to filter the top level rows you need to add ``!inner`` to the embedded
 .. _null_embed:
 
 Null filtering on Embedded Resources
-~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+------------------------------------
 
 Null filtering on the embedded resources can behave the same as ``!inner``. While providing more flexibility.
 
@@ -528,7 +879,7 @@ Both ``is.null`` and ``not.is.null`` can be included inside the `or` operator. F
 .. _empty_embed:
 
 Empty Embed
-~~~~~~~~~~~
+-----------
 
 You can leave an embedded resource empty, this helps with filtering in some cases.
 
@@ -555,7 +906,7 @@ To filter the films by actors but not include them:
 .. _top_level_order:
 
 Top-level Ordering
-------------------
+==================
 
 On :ref:`Many-to-One <many-to-one>` and :ref:`One-to-One <one-to-one>` relationships, you can use a column of the "to-one" end to sort the top-level.
 
@@ -574,7 +925,7 @@ For example, to arrange the films in descending order using the director's last
 .. _spread_embed:
 
 Spread embedded resource
-------------------------
+========================
 
 On many-to-one and one-to-one relationships, you can "spread" the embedded resource. That is, remove the surrounding JSON object for the embedded resource columns.
 
@@ -633,7 +984,7 @@ You can use this to get the columns of a join table in a many-to-many relationsh
 .. _embedding_partitioned_tables:
 
 Embedding Partitioned Tables
-----------------------------
+============================
 
 Embedding can also be done between `partitioned tables <https://www.postgresql.org/docs/current/ddl-partitioning.html>`_ and other tables.
 
@@ -679,7 +1030,7 @@ Since it contains the ``films_id`` foreign key, it is possible to embed ``box_of
 .. _embedding_views:
 
 Embedding Views
----------------
+===============
 
 PostgREST will infer the relationships of a view based on its source tables. Source tables are the ones referenced in the ``FROM`` and ``JOIN`` clauses of the view definition. The foreign keys of the relationships must be present in the top ``SELECT`` clause of the view for this to work.
 
@@ -725,14 +1076,14 @@ It's also possible to embed `Materialized Views <https://www.postgresql.org/docs
 .. _embedding_view_chains:
 
 Embedding Chains of Views
--------------------------
+=========================
 
 Views can also depend on other views, which in turn depend on the actual source table. For PostgREST to pick up those chains recursively to any depth, all the views must be in the search path, so either in the exposed schema (:ref:`db-schemas`) or in one of the schemas set in :ref:`db-extra-search-path`. This does not apply to the source table, which could be in a private schema as well. See :ref:`schema_isolation` for more details.
 
 .. _s_proc_embed:
 
 Embedding on Stored Procedures
-------------------------------
+==============================
 
 If you have a :ref:`Stored Procedure <s_procs>` that returns a table type, you can embed its related resources.
 
@@ -770,7 +1121,7 @@ A request with ``directors`` embedded:
 .. _mutation_embed:
 
 Embedding after Insertions/Updates/Deletions
---------------------------------------------
+============================================
 
 You can embed related resources after doing :ref:`insert`, :ref:`update` or :ref:`delete`.
 
@@ -819,205 +1170,3 @@ Response:
       "last_name": "Boyle"
     }
    }
-
-.. _embed_disamb:
-
-Embedding Disambiguation
-------------------------
-
-For doing resource embedding, PostgREST infers the relationship between two tables based on a foreign key between them.
-However, in cases where there's more than one foreign key between two tables, it's not possible to infer the relationship unambiguously
-by just specifying the tables names.
-
-.. _target_disamb:
-
-Target Disambiguation
-~~~~~~~~~~~~~~~~~~~~~
-
-For example, suppose you have the following ``orders`` and ``addresses`` tables:
-
-.. image:: ../../_static/orders.png
-
-And you try to embed ``orders`` with ``addresses`` (this is the **target**):
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /orders?select=*,addresses(*) HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/orders?select=*,addresses(*)" -i
-
-Since the ``orders`` table has two foreign keys to the ``addresses`` table — an order has a billing address and a shipping address —
-the request is ambiguous and PostgREST will respond with an error:
-
-.. code-block:: http
-
-   HTTP/1.1 300 Multiple Choices
-
-   {..}
-
-If this happens, you need to disambiguate the request by adding precision to the **target**.
-Instead of the **table name**, you can specify the **foreign key constraint name** or the **column name** that is part of the foreign key.
-
-Let's try first with the **foreign key constraint name**. To make it clearer we can name it:
-
-.. code-block:: postgresql
-
-   ALTER TABLE orders
-      ADD CONSTRAINT billing_address  foreign key (billing_address_id) references addresses(id),
-      ADD CONSTRAINT shipping_address foreign key (shipping_address_id) references addresses(id);
-
-   -- Or if the constraints names were already generated by PostgreSQL we can rename them
-   -- ALTER TABLE orders
-   --   RENAME CONSTRAINT orders_billing_address_id_fkey  TO billing_address,
-   --   RENAME CONSTRAINT orders_shipping_address_id_fkey TO shipping_address;
-
-Now we can unambiguously embed the billing address by specifying the ``billing_address`` foreign key constraint as the **target**.
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /orders?select=name,billing_address(name) HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/orders?select=name,billing_address(name)"
-
-.. code-block:: json
-
-   [
-    {
-     "name": "Personal Water Filter",
-     "billing_address": {
-       "name": "32 Glenlake Dr.Dearborn, MI 48124"
-     }
-    }
-   ]
-
-Alternatively, you can specify the **column name** of the foreign key constraint as the **target**. This can be aliased to make
-the result more clear.
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /orders?select=name,billing_address:billing_address_id(name) HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/orders?select=name,billing_address:billing_address_id(name)"
-
-.. code-block:: json
-
-   [
-    {
-     "name": "Personal Water Filter",
-     "billing_address": {
-      "name": "32 Glenlake Dr.Dearborn, MI 48124"
-     }
-    }
-   ]
-
-.. _hint_disamb:
-
-Hint Disambiguation
-~~~~~~~~~~~~~~~~~~~
-
-If specifying the **target** is not enough for unambiguous embedding, you can add a **hint**. For example, let's assume we create
-two views of ``addresses``: ``central_addresses`` and ``eastern_addresses``.
-
-PostgREST cannot detect a view as an embedded resource by using a column name or foreign key name as targets, that is why we need to use the view name ``central_addresses`` instead. But, still, this is not enough for an unambiguous embed.
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /orders?select=*,central_addresses(*) HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/orders?select=*,central_addresses(*)" -i
-
-.. code-block:: http
-
-  HTTP/1.1 300 Multiple Choices
-
-For solving this case, in addition to the **target**, we can add a **hint**.
-Here, we still specify ``central_addresses`` as the **target** and use the ``billing_address`` foreign key as the **hint**:
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /orders?select=*,central_addresses!billing_address(*) HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl 'http://localhost:3000/orders?select=*,central_addresses!billing_address(*)' -i
-
-.. code-block:: http
-
-  HTTP/1.1 200 OK
-
-  [ ... ]
-
-Similarly to the **target**, the **hint** can be a **table name**, **foreign key constraint name** or **column name**.
-
-Hints also work alongside ``!inner`` if a top level filtering is needed. From the above example:
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /orders?select=*,central_addresses!billing_address!inner(*)&central_addresses.code=AB1000 HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/orders?select=*,central_addresses!billing_address!inner(*)&central_addresses.code=AB1000"
-
-.. note::
-
-  If the relationship is so complex that hint disambiguation does not solve it, you can use :ref:`computed_relationships`.
-
-.. _recursive_m2m_disamb:
-
-Recursive Many-To-Many Disambiguation
-~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-Use hints plus the :ref:`spread_embed` to disambiguate a recursive many-to-many relationship. Having the following:
-
-.. image:: ../../_static/users.png
-
-Note that ``subscriptions`` has more than one foreign key to ``users``.
-
-To get all the subscribers of a user:
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /users?select=username,subscribers:subscriptions!subscribed_id(...users!subscriber_id(username))&id=eq.4 HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/users?select=username,subscribers:subscriptions!subscribed_id(...users!subscriber_id(username))&id=eq.4"
-
-.. code-block:: json
-
-   [
-     {
-       "username": "the_top_artist",
-       "subscribers": [
-         { "username": "patrick109" },
-         { "username": "alicia_smith" }
-       ]
-     }
-   ]
-
-.. note::
-
-  We're working on a better interface for recursive relationships to reduce the request verbosity.
diff --git a/docs/references/errors.rst b/docs/references/errors.rst
index 0c0a40c72..d03db69fb 100644
--- a/docs/references/errors.rst
+++ b/docs/references/errors.rst
@@ -320,7 +320,7 @@ Related to a :ref:`stale schema cache <stale_schema>`. Most of the time, these e
 | PGRST200      |             | exist in the database.                                      |
 +---------------+-------------+-------------------------------------------------------------+
 | .. _pgrst201: | 300         | An ambiguous embedding request was made.                    |
-|               |             | See :ref:`embed_disamb`.                                    |
+|               |             | See :ref:`complex_rels`.                                    |
 | PGRST201      |             |                                                             |
 +---------------+-------------+-------------------------------------------------------------+
 | .. _pgrst202: | 404         | Caused by a stale function signature, otherwise             |
diff --git a/postgrest.dict b/postgrest.dict
index bf07b7b20..685cc788f 100644
--- a/postgrest.dict
+++ b/postgrest.dict
@@ -159,6 +159,7 @@ SSL
 stateful
 stdout
 Stolarz
+supervisees
 SvelteKit
 SwaggerUI
 syslog

From 4c4a1de832ee07166b773e743150a8605ab1d611 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Mon, 10 Jul 2023 17:57:16 -0500
Subject: [PATCH 624/652] to_jsonb index no longer required on json/jsonb

---
 docs/references/api/tables_views.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/references/api/tables_views.rst b/docs/references/api/tables_views.rst
index 5a8ca92e6..19f651d40 100644
--- a/docs/references/api/tables_views.rst
+++ b/docs/references/api/tables_views.rst
@@ -449,7 +449,7 @@ The arrow operators(``->``, ``->>``) can also be used for accessing composite fi
 
 .. important::
 
-  When using the ``->`` and ``->>`` operators, PostgREST uses a query like ``to_jsonb(<col>)->'field'``. To make filtering and ordering on those nested fields use an index, the index needs to be created on the same expression, including the ``to_jsonb(...)`` call:
+  When using the ``->`` and ``->>`` operators on composite and array columns, PostgREST uses a query like ``to_jsonb(<col>)->'field'``. To make filtering and ordering on those nested fields use an index, the index needs to be created on the same expression, including the ``to_jsonb(...)`` call:
 
   .. code-block:: postgres
 

From 220683cef001305d0ab456b8d3f8f28f8b1767b9 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Tue, 11 Jul 2023 10:31:51 -0500
Subject: [PATCH 625/652] add HEAD optimization

---
 docs/references/api/tables_views.rst | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/docs/references/api/tables_views.rst b/docs/references/api/tables_views.rst
index 19f651d40..3d4bb9b31 100644
--- a/docs/references/api/tables_views.rst
+++ b/docs/references/api/tables_views.rst
@@ -685,6 +685,14 @@ If we make a similar request on ``bigtable``, which has 3573458 rows, we would g
   HTTP/1.1 206 Partial Content
   Content-Range: 0-24/3572000
 
+.. _head_req:
+
+HEAD
+----
+
+A HEAD method will behave identically to GET except that no body will be returned (`RFC 2616 <https://datatracker.ietf.org/doc/html/rfc2616#section-9.4>`_) .
+As an optimization, the generated query won't execute an aggregate (to avoid unnecessary data transfer).
+
 .. _update:
 
 Update

From fefd0e2e83885ea4bce57c750a11668034c16b05 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Thu, 20 Jul 2023 23:04:19 -0500
Subject: [PATCH 626/652] dry config and make it responsive

* shorten connection pool
* move securing execution plan
* shorten config intro page
---
 docs/ecosystem.rst                  |   2 +-
 docs/references/admin.rst           |  28 +++
 docs/references/configuration.rst   | 376 ++++++++++++++++++++++------
 docs/references/connection_pool.rst |   6 +-
 postgrest.dict                      |   4 +-
 5 files changed, 335 insertions(+), 81 deletions(-)

diff --git a/docs/ecosystem.rst b/docs/ecosystem.rst
index 11c75a4c9..da7b4eb66 100644
--- a/docs/ecosystem.rst
+++ b/docs/ecosystem.rst
@@ -18,7 +18,7 @@ Community Tutorials
 
 * `REST Data Service on YugabyteDB / PostgreSQL <https://dev.to/yugabyte/rest-data-service-on-yugabytedb-postgresql-5f2h>`_
 
-* `Build data-driven applications with Workers and PostgreSQL <https://developers.cloudflare.com/workers/tutorials/postgres/>`_ - A tutorial on how to integrate with PostgREST and PostgreSQL using Cloudfare Workers.
+* `Build data-driven applications with Workers and PostgreSQL <https://developers.cloudflare.com/workers/tutorials/postgres/>`_ - A tutorial on how to integrate with PostgREST and PostgreSQL using Cloudflare Workers.
 
 .. _templates:
 
diff --git a/docs/references/admin.rst b/docs/references/admin.rst
index 33110028c..34ba883ba 100644
--- a/docs/references/admin.rst
+++ b/docs/references/admin.rst
@@ -220,6 +220,34 @@ The other available parameters are ``analyze``, ``verbose``, ``settings``, ``buf
 
 Note that akin to the EXPLAIN command, the changes will be committed when using the ``analyze`` option. To avoid this, you can use the :ref:`db-tx-end` and the ``Prefer: tx=rollback`` header.
 
+Securing the Execution Plan
+~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+It's recommended to only activate :ref:`db-plan-enabled` on testing environments since it reveals internal database details.
+However, if you choose to use it in production you can add a :ref:`db-pre-request` to filter the requests that can use this feature.
+
+For example, to only allow requests from an IP address to get the execution plans:
+
+.. code-block:: postgresql
+
+ -- Assuming a proxy(Nginx, Cloudflare, etc) passes an "X-Forwarded-For" header(https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Forwarded-For)
+ create or replace function filter_plan_requests()
+ returns void as $$
+ declare
+   headers   json := current_setting('request.headers', true)::json;
+   client_ip text := coalesce(headers->>'x-forwarded-for', '');
+   accept    text := coalesce(headers->>'accept', '');
+ begin
+   if accept like 'application/vnd.pgrst.plan%' and client_ip != '144.96.121.73' then
+     raise insufficient_privilege using
+       message = 'Not allowed to use application/vnd.pgrst.plan';
+   end if;
+ end; $$ language plpgsql;
+
+ -- set this function on your postgrest.conf
+ -- db-pre-request = filter_plan_requests
+
+
 .. _health_check:
 
 Health Check
diff --git a/docs/references/configuration.rst b/docs/references/configuration.rst
index a0683c774..338e0aa1b 100644
--- a/docs/references/configuration.rst
+++ b/docs/references/configuration.rst
@@ -3,24 +3,26 @@
 Configuration
 #############
 
-Config parameters can be provided via :ref:`file_config`, :ref:`env_variables_config` or :ref:`in_db_config`. Using :ref:`config_reloading` you can modify the parameters without restarting the server.
+Configuration parameters can be provided via:
 
-Without configuration, PostgREST won't be able to serve requests. At the minimum it needs either :ref:`a role to serve anonymous requests with <db-anon-role>` - or :ref:`a secret to use for JWT authentication <jwt-secret>`.
+- :ref:`file_config`.
+- :ref:`env_variables_config`, overriding values from the config file.
+- :ref:`in_db_config`, overriding values from both the config file and environment variables.
 
-To connect to a database it uses a `libpq connection string <https://www.postgresql.org/docs/current/libpq-connect.html#LIBPQ-CONNSTRING>`_. The connection string can be set in the configuration file or via environment variable or can be read from an external file. See :ref:`db-uri` for details. Any parameter that is not set in the connection string is read from `libpq environment variables <https://www.postgresql.org/docs/current/libpq-envars.html>`_. The default connection string is ``postgresql://``, which reads **all** parameters from the environment.
+Using :ref:`config_reloading` you can modify the parameters without restarting the server.
 
-Config parameters are read in the following order:
 
-1. From the config file.
-2. From environment variables, overriding values from the config file.
-3. From the database, overriding values from both the config file and environment variables.
+Minimum parameters
+==================
+
+The server is able to start without any config parameters, but it won't be able to serve requests unless it has :ref:`a role to serve anonymous requests with <db-anon-role>` - or :ref:`a secret to use for JWT authentication <jwt-secret>`.
 
 .. _file_config:
 
 Config File
 ===========
 
-PostgREST can read a config file. There is no predefined location for this file, you must specify the file path as the one and only argument to the server:
+There is no predefined location for the config file, you must specify the file path as the one and only argument to the server:
 
 .. code:: bash
 
@@ -46,7 +48,7 @@ The configuration file must contain a set of key value pairs:
   jwt-secret-is-base64 = false
 
   # Port the postgrest process is listening on for http requests
-  server-port = 80
+  server-port = 3000
 
 You can run ``postgrest --example`` to display all possible configuration parameters and how to use them in a configuration file.
 
@@ -55,7 +57,9 @@ You can run ``postgrest --example`` to display all possible configuration parame
 Environment Variables
 =====================
 
-You can also set these :ref:`configuration parameters <config_full_list>` using environment variables. They are capitalized, have a ``PGRST_`` prefix, and use underscores. For example: ``PGRST_DB_URI`` corresponds to ``db-uri`` and ``PGRST_APP_SETTINGS_*`` to ``app.settings.*``.
+Environment variables are capitalized, have a ``PGRST_`` prefix, and use underscores. For example: ``PGRST_DB_URI`` corresponds to ``db-uri`` and ``PGRST_APP_SETTINGS_*`` to ``app.settings.*``.
+
+`libpq environment variables <https://www.postgresql.org/docs/current/libpq-envars.html>`_ are also supported for constructing the connection string, see :ref:`db-uri`.
 
 See the full list of environment variable names on :ref:`config_full_list`.
 
@@ -64,7 +68,7 @@ See the full list of environment variable names on :ref:`config_full_list`.
 In-Database Configuration
 =========================
 
-Using a :ref:`pre-config <db-pre-config>` function, you can configure the server with database settings. For example, you can configure :ref:`db-schemas` and :ref:`jwt-secret` like this:
+You can also configure the server with database settings by using a :ref:`pre-config <db-pre-config>` function. For example, you can configure :ref:`db-schemas` and :ref:`jwt-secret` like this:
 
 .. code-block::
 
@@ -144,51 +148,19 @@ The ``"pgrst"`` notification channel is enabled by default. You can name the cha
 List of parameters
 ==================
 
-=========================== ======= ================= ========== ================================= ==============================
-Name                        Type    Default           Reloadable Environment variable              In-database name
-=========================== ======= ================= ========== ================================= ==============================
-admin-server-port           Int                                  PGRST_ADMIN_SERVER_PORT
-app.settings.*              String                    Y          PGRST_APP_SETTINGS_*
-db-anon-role                String                    Y          PGRST_DB_ANON_ROLE                pgrst.db_anon_role
-db-channel                  String  pgrst             Y          PGRST_DB_CHANNEL
-db-channel-enabled          Boolean True              Y          PGRST_DB_CHANNEL_ENABLED
-db-config                   Boolean True              Y          PGRST_DB_CONFIG
-db-pre-config               String                    Y          PGRST_DB_PRE_CONFIG               pgrst.db_pre_config
-db-extra-search-path        String  public            Y          PGRST_DB_EXTRA_SEARCH_PATH        pgrst.db_extra_search_path
-db-max-rows                 Int     ∞                 Y          PGRST_DB_MAX_ROWS                 pgrst.db_max_rows
-db-plan-enabled             Boolean False             Y          PGRST_DB_PLAN_ENABLED             pgrst.db_plan_enabled
-db-pool                     Int     10                           PGRST_DB_POOL
-db-pool-acquisition-timeout Int     10                           PGRST_DB_POOL_ACQUISITION_TIMEOUT
-db-pool-max-idletime        Int     30                           PGRST_DB_POOL_MAX_IDLETIME
-db-pool-max-lifetime        Int     1800                         PGRST_DB_POOL_MAX_LIFETIME
-db-pre-request              String                    Y          PGRST_DB_PRE_REQUEST              pgrst.db_pre_request
-db-prepared-statements      Boolean True              Y          PGRST_DB_PREPARED_STATEMENTS      pgrst.db_prepared_statements
-db-root-spec                String                    Y          PGRST_DB_ROOT_SPEC                pgrst.db_root_spec
-db-schemas                  String  public            Y          PGRST_DB_SCHEMAS                  pgrst.db_schemas
-db-tx-end                   String  commit                       PGRST_DB_TX_END
-db-uri                      String  postgresql://                PGRST_DB_URI
-db-use-legacy-gucs          Boolean True              Y          PGRST_DB_USE_LEGACY_GUCS          pgrst.db_use_legacy_gucs
-jwt-aud                     String                    Y          PGRST_JWT_AUD                     pgrst.jwt_aud
-jwt-role-claim-key          String  .role             Y          PGRST_JWT_ROLE_CLAIM_KEY          pgrst.jwt_role_claim_key
-jwt-secret                  String                    Y          PGRST_JWT_SECRET                  pgrst.jwt_secret
-jwt-secret-is-base64        Boolean False             Y          PGRST_JWT_SECRET_IS_BASE64        pgrst.jwt_secret_is_base64
-log-level                   String  error                        PGRST_LOG_LEVEL
-openapi-mode                String  follow-privileges Y          PGRST_OPENAPI_MODE                pgrst.openapi_mode
-openapi-security-active     Boolean False             Y          PGRST_OPENAPI_SECURITY_ACTIVE     pgrst.openapi_security_active
-openapi-server-proxy-uri    String                    Y          PGRST_OPENAPI_SERVER_PROXY_URI    pgrst.openapi_server_proxy_uri
-raw-media-types             String                    Y          PGRST_RAW_MEDIA_TYPES             pgrst.raw_media_types
-server-host                 String  !4                           PGRST_SERVER_HOST
-server-port                 Int     3000                         PGRST_SERVER_PORT
-server-trace-header         String                    Y          PGRST_SERVER_TRACE_HEADER         pgrst.server_trace_header
-server-unix-socket          String                               PGRST_SERVER_UNIX_SOCKET
-server-unix-socket-mode     String  660                          PGRST_SERVER_UNIX_SOCKET_MODE
-=========================== ======= ================= ========== ================================= ==============================
-
 .. _admin-server-port:
 
 admin-server-port
 -----------------
 
+  =============== =======================
+  **Type**        Int
+  **Default**     `n/a`
+  **Reloadable**  N
+  **Environment** PGRST_ADMIN_SERVER_PORT
+  **In-Database** `n/a`
+  =============== =======================
+
   Specifies the port for the :ref:`health_check` endpoints.
 
 .. _app.settings.*:
@@ -196,6 +168,14 @@ admin-server-port
 app.settings.*
 --------------
 
+  =============== =======================
+  **Type**        String
+  **Default**     `n/a`
+  **Reloadable**  &
+  **Environment** PGRST_APP_SETTINGS_*
+  **In-Database** `n/a`
+  =============== =======================
+
   Arbitrary settings that can be used to pass in secret keys directly as strings, or via OS environment variables. For instance: :code:`app.settings.jwt_secret = "$(MYAPP_JWT_SECRET)"` will take :code:`MYAPP_JWT_SECRET` from the environment and make it available to postgresql functions as :code:`current_setting('app.settings.jwt_secret')`.
 
 .. _db-anon-role:
@@ -203,6 +183,14 @@ app.settings.*
 db-anon-role
 ------------
 
+  =============== =======================
+  **Type**        String
+  **Default**     `n/a`
+  **Reloadable**  Y
+  **Environment** PGRST_DB_ANON_ROLE
+  **In-Database** pgrst.db_anon_role
+  =============== =======================
+
   The database role to use when executing commands on behalf of unauthenticated clients. For more information, see :ref:`roles`.
 
   When unset anonymous access will be blocked.
@@ -212,6 +200,14 @@ db-anon-role
 db-channel
 ----------
 
+  =============== =======================
+  **Type**        String
+  **Default**     pgrst
+  **Reloadable**  Y
+  **Environment** PGRST_DB_CHANNEL
+  **In-Database** `n/a`
+  =============== =======================
+
   The name of the notification channel that PostgREST uses for :ref:`schema_reloading` and configuration reloading.
 
 .. _db-channel-enabled:
@@ -219,6 +215,14 @@ db-channel
 db-channel-enabled
 ------------------
 
+  =============== =======================
+  **Type**        Boolean
+  **Default**     True
+  **Reloadable**  Y
+  **Environment** PGRST_DB_CHANNEL_ENABLED
+  **In-Database** `n/a`
+  =============== =======================
+
   When this is set to :code:`true`, the notification channel specified in :ref:`db-channel` is enabled.
 
   You should set this to ``false`` when using PostgresSQL behind an external connection pooler such as PgBouncer working in transaction pooling mode. See :ref:`this section <external_connection_poolers>` for more information.
@@ -228,6 +232,14 @@ db-channel-enabled
 db-config
 ---------
 
+  =============== =======================
+  **Type**        Boolean
+  **Default**     True
+  **Reloadable**  Y
+  **Environment** PGRST_DB_CONFIG
+  **In-Database** `n/a`
+  =============== =======================
+
    Enables the in-database configuration.
 
 .. _db-pre-config:
@@ -235,6 +247,14 @@ db-config
 db-pre-config
 -------------
 
+  =============== =======================
+  **Type**        String
+  **Default**     `n/a`
+  **Reloadable**  Y
+  **Environment** PGRST_DB_PRE_CONFIG
+  **In-Database** pgrst.db_pre_config
+  =============== =======================
+
    Name of the function that does in-database configuration.
 
 .. _db-extra-search-path:
@@ -242,6 +262,14 @@ db-pre-config
 db-extra-search-path
 --------------------
 
+  =============== ==========================
+  **Type**        String
+  **Default**     public
+  **Reloadable**  Y
+  **Environment** PGRST_DB_EXTRA_SEARCH_PATH
+  **In-Database** pgrst.db_extra_search_path
+  =============== ==========================
+
   Extra schemas to add to the `search_path <https://www.postgresql.org/docs/current/ddl-schemas.html#DDL-SCHEMAS-PATH>`_ of every request. These schemas tables, views and stored procedures **don't get API endpoints**, they can only be referred from the database objects inside your :ref:`db-schemas`.
 
   This parameter was meant to make it easier to use **PostgreSQL extensions** (like PostGIS) that are outside of the :ref:`db-schemas`.
@@ -253,6 +281,14 @@ db-extra-search-path
 db-max-rows
 -----------
 
+  =============== ==========================
+  **Type**        Int
+  **Default**     ∞
+  **Reloadable**  Y
+  **Environment** PGRST_DB_MAX_ROWS
+  **In-Database** pgrst.db_max_rows
+  =============== ==========================
+
   *For backwards compatibility, this config parameter is also available without prefix as "max-rows".*
 
   A hard limit to the number of rows PostgREST will fetch from a view, table, or stored procedure. Limits payload size for accidental or malicious requests.
@@ -262,37 +298,29 @@ db-max-rows
 db-plan-enabled
 ---------------
 
+  =============== ==========================
+  **Type**        Boolean
+  **Default**     False
+  **Reloadable**  Y
+  **Environment** PGRST_DB_PLAN_ENABLED
+  **In-Database** pgrst.db_plan_enabled
+  =============== ==========================
+
   When this is set to :code:`true`, the execution plan of a request can be retrieved by using the :code:`Accept: application/vnd.pgrst.plan` header. See :ref:`explain_plan`.
 
-  It's recommended to use this in testing environments only since it reveals internal database details.
-  However, if you choose to use it in production you can add a :ref:`db-pre-request` to filter the requests that can use this feature.
-
-  For example, to only allow requests from an IP address to get the execution plans:
-
-  .. code-block:: postgresql
-
-   -- Assuming a proxy(Nginx, Cloudflare, etc) passes an "X-Forwarded-For" header(https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Forwarded-For)
-   create or replace function filter_plan_requests()
-   returns void as $$
-   declare
-     headers   json := current_setting('request.headers', true)::json;
-     client_ip text := coalesce(headers->>'x-forwarded-for', '');
-     accept    text := coalesce(headers->>'accept', '');
-   begin
-     if accept like 'application/vnd.pgrst.plan%' and client_ip != '144.96.121.73' then
-       raise insufficient_privilege using
-         message = 'Not allowed to use application/vnd.pgrst.plan';
-     end if;
-   end; $$ language plpgsql;
-
-   -- set this function on your postgrest.conf
-   -- db-pre-request = filter_plan_requests
-
 .. _db-pool:
 
 db-pool
 -------
 
+  =============== ==========================
+  **Type**        Int
+  **Default**     10
+  **Reloadable**  N
+  **Environment** PGRST_DB_POOL
+  **In-Database** n/a
+  =============== ==========================
+
   Number of maximum connections to keep open in PostgREST's database pool.
 
 .. _db-pool-acquisition-timeout:
@@ -300,6 +328,14 @@ db-pool
 db-pool-acquisition-timeout
 ---------------------------
 
+  =============== =================================
+  **Type**        Int
+  **Default**     10
+  **Reloadable**  N
+  **Environment** PGRST_DB_POOL_ACQUISITION_TIMEOUT
+  **In-Database** `n/a`
+  =============== =================================
+
   Specifies the maximum time in seconds that the request will wait for the pool to free up a connection slot to the database.
 
 .. _db-pool-max-idletime:
@@ -307,6 +343,14 @@ db-pool-acquisition-timeout
 db-pool-max-idletime
 --------------------
 
+  =============== =================================
+  **Type**        Int
+  **Default**     30
+  **Reloadable**  N
+  **Environment** PGRST_DB_POOL_MAX_IDLETIME
+  **In-Database** `n/a`
+  =============== =================================
+
    *For backwards compatibility, this config parameter is also available as “db-pool-timeout”.*
 
    Time in seconds to close idle pool connections.
@@ -316,6 +360,14 @@ db-pool-max-idletime
 db-pool-max-lifetime
 --------------------
 
+  =============== =================================
+  **Type**        Int
+  **Default**     1800
+  **Reloadable**  N
+  **Environment** PGRST_DB_POOL_MAX_LIFETIME
+  **In-Database** `n/a`
+  =============== =================================
+
   Specifies the maximum time in seconds of an existing connection in the pool.
 
 .. _db-pre-request:
@@ -323,6 +375,14 @@ db-pool-max-lifetime
 db-pre-request
 --------------
 
+  =============== =================================
+  **Type**        String
+  **Default**     `n/a`
+  **Reloadable**  Y
+  **Environment** PGRST_DB_PRE_REQUEST
+  **In-Database** pgrst.db_pre_request
+  =============== =================================
+
   *For backwards compatibility, this config parameter is also available without prefix as "pre-request".*
 
   A schema-qualified stored procedure name to call right after the :ref:`tx_settings` are set. See :ref:`pre-request`.
@@ -332,6 +392,14 @@ db-pre-request
 db-prepared-statements
 ----------------------
 
+  =============== =================================
+  **Type**        Boolean
+  **Default**     True
+  **Reloadable**  Y
+  **Environment** PGRST_DB_PREPARED_STATEMENTS
+  **In-Database** pgrst.db_prepared_statements
+  =============== =================================
+
   Enables or disables prepared statements.
 
   When disabled, the generated queries will be parameterized (invulnerable to SQL injection) but they will not be prepared (cached in the database session). Not using prepared statements will noticeably decrease performance, so it's recommended to always have this setting enabled.
@@ -343,6 +411,14 @@ db-prepared-statements
 db-root-spec
 ------------
 
+  =============== =================================
+  **Type**        String
+  **Default**     `n/a`
+  **Reloadable**  Y
+  **Environment** PGRST_DB_ROOT_SPEC
+  **In-Database** pgrst.db_root_spec
+  =============== =================================
+
   Function to override the OpenAPI response. See :ref:`override_openapi`.
 
 .. _db-schemas:
@@ -350,6 +426,14 @@ db-root-spec
 db-schemas
 ----------
 
+  =============== =================================
+  **Type**        String
+  **Default**     public
+  **Reloadable**  Y
+  **Environment** PGRST_DB_SCHEMAS
+  **In-Database** pgrst.db_schemas
+  =============== =================================
+
   *For backwards compatibility, this config parameter is also available in singular as "db-schema".*
 
   The list of database schemas to expose to clients. See :ref:`schemas`.
@@ -359,6 +443,14 @@ db-schemas
 db-tx-end
 ---------
 
+  =============== =================================
+  **Type**        String
+  **Default**     commit
+  **Reloadable**  N
+  **Environment** PGRST_DB_TX_END
+  **In-Database** `n/a`
+  =============== =================================
+
   Specifies how to terminate the database transactions.
 
   .. code:: bash
@@ -380,7 +472,19 @@ db-tx-end
 db-uri
 ------
 
-  The standard connection PostgreSQL `URI format <https://www.postgresql.org/docs/current/libpq-connect.html#LIBPQ-CONNSTRING>`_. Symbols and unusual characters in the password or other fields should be percent encoded to avoid a parse error. If enforcing an SSL connection to the database is required you can use `sslmode <https://www.postgresql.org/docs/current/libpq-ssl.html#LIBPQ-SSL-SSLMODE-STATEMENTS>`_ in the URI, for example ``postgres://user:pass@host:5432/dbname?sslmode=require``.
+  =============== =================================
+  **Type**        String
+  **Default**     postgresql://
+  **Reloadable**  N
+  **Environment** PGRST_DB_URI
+  **In-Database** `n/a`
+  =============== =================================
+
+  The standard connection PostgreSQL `URI format <https://www.postgresql.org/docs/current/libpq-connect.html#LIBPQ-CONNSTRING>`_. Symbols and unusual characters in the password or other fields should be percent encoded to avoid a parse error.
+
+  If enforcing an SSL connection to the database is required you can use `sslmode <https://www.postgresql.org/docs/current/libpq-ssl.html#LIBPQ-SSL-SSLMODE-STATEMENTS>`_ in the URI, for example ``postgres://user:pass@host:5432/dbname?sslmode=require``.
+
+  Any parameter that is not set in the connection string is read from `libpq environment variables <https://www.postgresql.org/docs/current/libpq-envars.html>`_. The default connection string is ``postgresql://``, which reads **all** parameters from the environment.
 
   The user with whom PostgREST connects to the database is also known as the ``authenticator`` role. For more information see :ref:`roles`.
 
@@ -393,6 +497,14 @@ db-uri
 db-use-legacy-gucs
 ------------------
 
+  =============== =================================
+  **Type**        Boolean
+  **Default**     True
+  **Reloadable**  Y
+  **Environment** PGRST_DB_USE_LEGACY_GUCS
+  **In-Database** pgrst.db_use_legacy_gucs
+  =============== =================================
+
   Determine if GUC request settings for headers, cookies and jwt claims use the `legacy names <https://postgrest.org/en/v8.0/api.html#accessing-request-headers-cookies-and-jwt-claims>`_ (string with dashes, invalid starting from PostgreSQL v14) with text values instead of the :ref:`new names <guc_req_headers_cookies_claims>` (string without dashes, valid on all PostgreSQL versions) with json values.
 
   On PostgreSQL versions 14 and above, this parameter is ignored.
@@ -402,6 +514,14 @@ db-use-legacy-gucs
 jwt-aud
 -------
 
+  =============== =================================
+  **Type**        String
+  **Default**     `n/a`
+  **Reloadable**  Y
+  **Environment** PGRST_JWT_AUD
+  **In-Database** pgrst.jwt_aud
+  =============== =================================
+
   Specifies the `JWT audience claim <https://datatracker.ietf.org/doc/html/rfc7519#section-4.1.3>`_. If this claim is present in the client provided JWT then you must set this to the same value as in the JWT, otherwise verifying the JWT will fail.
 
 .. _jwt-role-claim-key:
@@ -409,6 +529,14 @@ jwt-aud
 jwt-role-claim-key
 ------------------
 
+  =============== =================================
+  **Type**        String
+  **Default**     .role
+  **Reloadable**  Y
+  **Environment** PGRST_JWT_ROLE_CLAIM_KEY
+  **In-Database** pgrst.jwt_role_claim_key
+  =============== =================================
+
   *For backwards compatibility, this config parameter is also available without prefix as "role-claim-key".*
 
   A JSPath DSL that specifies the location of the :code:`role` key in the JWT claims. This can be used to consume a JWT provided by a third party service like Auth0, Okta or Keycloak. Usage examples:
@@ -428,6 +556,14 @@ jwt-role-claim-key
 jwt-secret
 ----------
 
+  =============== =================================
+  **Type**        String
+  **Default**     `n/a`
+  **Reloadable**  Y
+  **Environment** PGRST_JWT_SECRET
+  **In-Database** pgrst.jwt_secret
+  =============== =================================
+
   The secret or `JSON Web Key (JWK) (or set) <https://datatracker.ietf.org/doc/html/rfc7517>`_ used to decode JWT tokens clients provide for authentication. For security the key must be **at least 32 characters long**. If this parameter is not specified then PostgREST refuses authentication requests. Choosing a value for this parameter beginning with the at sign such as :code:`@filename` loads the secret out of an external file. This is useful for automating deployments. Note that any binary secrets must be base64 encoded. Both symmetric and asymmetric cryptography are supported. For more info see :ref:`asym_keys`.
 
   Choosing a value for this parameter beginning with the at sign such as ``@filename`` (e.g. ``@./configs/my-config``) loads the secret out of an external file.
@@ -441,6 +577,14 @@ jwt-secret
 jwt-secret-is-base64
 --------------------
 
+  =============== =================================
+  **Type**        Boolean
+  **Default**     False
+  **Reloadable**  Y
+  **Environment** PGRST_JWT_SECRET_IS_BASE64
+  **In-Database** pgrst.jwt_secret_is_base64
+  =============== =================================
+
   When this is set to :code:`true`, the value derived from :code:`jwt-secret` will be treated as a base64 encoded secret.
 
 .. _log-level:
@@ -448,6 +592,14 @@ jwt-secret-is-base64
 log-level
 ---------
 
+  =============== =================================
+  **Type**        String
+  **Default**     error
+  **Reloadable**  N
+  **Environment** PGRST_LOG_LEVEL
+  **In-Database** `n/a`
+  =============== =================================
+
   Specifies the level of information to be logged while running PostgREST.
 
   .. code:: bash
@@ -472,6 +624,14 @@ log-level
 openapi-mode
 ------------
 
+  =============== =================================
+  **Type**        String
+  **Default**     follow-privileges
+  **Reloadable**  Y
+  **Environment** PGRST_OPENAPI_MODE
+  **In-Database** pgrst.openapi_mode
+  =============== =================================
+
   Specifies how the OpenAPI output should be displayed.
 
   .. code:: bash
@@ -493,6 +653,14 @@ openapi-mode
 openapi-security-active
 -----------------------
 
+  =============== =================================
+  **Type**        Boolean
+  **Default**     False
+  **Reloadable**  Y
+  **Environment** PGRST_OPENAPI_SECURITY_ACTIVE
+  **In-Database** pgrst.openapi_security_active
+  =============== =================================
+
 When this is set to :code:`true`, security options are included in the :ref:`OpenAPI output <open-api>`.
 
 .. _openapi-server-proxy-uri:
@@ -500,6 +668,14 @@ When this is set to :code:`true`, security options are included in the :ref:`Ope
 openapi-server-proxy-uri
 ------------------------
 
+  =============== =================================
+  **Type**        String
+  **Default**     `n/a`
+  **Reloadable**  N
+  **Environment** PGRST_OPENAPI_SERVER_PROXY_URI
+  **In-Database** pgrst.openapi_server_proxy_uri
+  =============== =================================
+
   Overrides the base URL used within the OpenAPI self-documentation hosted at the API root path. Use a complete URI syntax :code:`scheme:[//[user:password@]host[:port]][/]path[?query][#fragment]`. Ex. :code:`https://postgrest.com`
 
   .. code:: json
@@ -523,6 +699,14 @@ openapi-server-proxy-uri
 raw-media-types
 ---------------
 
+  =============== =================================
+  **Type**        String
+  **Default**     `n/a`
+  **Reloadable**  Y
+  **Environment** PGRST_RAW_MEDIA_TYPES
+  **In-Database** pgrst.raw_media_types
+  =============== =================================
+
  This serves to extend the `Media Types <https://en.wikipedia.org/wiki/Media_type>`_ that PostgREST currently accepts through an ``Accept`` header.
 
  These media types can be requested by following the same rules as the ones defined in :ref:`scalar_return_formats`.
@@ -539,6 +723,14 @@ raw-media-types
 server-host
 -----------
 
+  =============== =================================
+  **Type**        String
+  **Default**     !4
+  **Reloadable**  N
+  **Environment** PGRST_SERVER_HOST
+  **In-Database** `n/a`
+  =============== =================================
+
   Where to bind the PostgREST web server. In addition to the usual address options, PostgREST interprets these reserved addresses with special meanings:
 
   * :code:`*` - any IPv4 or IPv6 hostname
@@ -552,6 +744,14 @@ server-host
 server-port
 -----------
 
+  =============== =================================
+  **Type**        Int
+  **Default**     3000
+  **Reloadable**  N
+  **Environment** PGRST_SERVER_PORT
+  **In-Database** `n/a`
+  =============== =================================
+
   The TCP port to bind the web server.
 
 .. _server-trace-header:
@@ -559,6 +759,14 @@ server-port
 server-trace-header
 -------------------
 
+  =============== =================================
+  **Type**        String
+  **Default**     `n/a`
+  **Reloadable**  Y
+  **Environment** PGRST_SERVER_TRACE_HEADER
+  **In-Database** pgrst.server_trace_header
+  =============== =================================
+
   The header name used to trace HTTP requests. See :ref:`trace_header`.
 
 .. _server-unix-socket:
@@ -566,6 +774,14 @@ server-trace-header
 server-unix-socket
 ------------------
 
+  =============== =================================
+  **Type**        String
+  **Default**     `n/a`
+  **Reloadable**  N
+  **Environment** PGRST_SERVER_UNIX_SOCKET
+  **In-Database** `n/a`
+  =============== =================================
+
   `Unix domain socket <https://en.wikipedia.org/wiki/Unix_domain_socket>`_ where to bind the PostgREST web server.
   If specified, this takes precedence over :ref:`server-port`. Example:
 
@@ -578,6 +794,14 @@ server-unix-socket
 server-unix-socket-mode
 -----------------------
 
+  =============== =================================
+  **Type**        String
+  **Default**     660
+  **Reloadable**  N
+  **Environment** PGRST_SERVER_UNIX_SOCKET_MODE
+  **In-Database** `n/a`
+  =============== =================================
+
   `Unix file mode <https://en.wikipedia.org/wiki/File_system_permissions>`_ to be set for the socket specified in :ref:`server-unix-socket`
   Needs to be a valid octal between 600 and 777.
 
diff --git a/docs/references/connection_pool.rst b/docs/references/connection_pool.rst
index aa0a904f6..db7ed0160 100644
--- a/docs/references/connection_pool.rst
+++ b/docs/references/connection_pool.rst
@@ -16,7 +16,7 @@ Dynamic Connection Pool
 To conserve system resources, PostgREST uses a dynamic connection pool. This enables the number of connections in the pool to increase and decrease depending on request traffic.
 
 - If all the connections are being used, a new connection is added. The pool can grow until it reaches the :ref:`db-pool` size. Note that it’s pointless to set this higher than the ``max_connections`` setting in your database.
-- If a connection is unused for a period of time (determined by :ref:`db-pool-max-idletime`, 30 seconds by default), it will be released.
+- If a connection is unused for a period of time (:ref:`db-pool-max-idletime`), it will be released.
 
 Connection lifetime
 -------------------
@@ -24,13 +24,13 @@ Connection lifetime
 Long-lived PostgreSQL connections can consume considerable memory (see `here <https://www.postgresql.org/message-id/CAFj8pRCQN2B2vrVMH1-bd-8xtzjytWR%2BAjZ%2BMCj9J2wPxKPa9Q%40mail.gmail.com>`_ for more details).
 Under a busy system, the :ref:`db-pool-max-idletime` won't be reached and the connection pool can be full of long-lived connections.
 
-To avoid this problem and save resources, a connection max lifetime (determined by :ref:`db-pool-max-lifetime`, 30 minutes by default) is enforced.
+To avoid this problem and save resources, a connection max lifetime (:ref:`db-pool-max-lifetime`) is enforced.
 After the max lifetime is reached, connections from the pool will be released and new ones will be created. This doesn't affect running requests, only unused connections will be released.
 
 Acquisition Timeout
 -------------------
 
-If all the available connections in the pool are busy, an HTTP request will wait until reaching a timeout (determined by :ref:`db-pool-acquisition-timeout`, 10 seconds by default).
+If all the available connections in the pool are busy, an HTTP request will wait until reaching a timeout (:ref:`db-pool-acquisition-timeout`).
 
 If the request reaches the timeout, it will be aborted with the following response:
 
diff --git a/postgrest.dict b/postgrest.dict
index 685cc788f..cc6bc534f 100644
--- a/postgrest.dict
+++ b/postgrest.dict
@@ -17,7 +17,8 @@ cd
 centric
 changelog
 coercible
-Cloudfare
+conf
+Cloudflare
 config
 CORS
 CPUs
@@ -124,6 +125,7 @@ postgrest
 PostgREST's
 pre
 preflight
+plpgsql
 psql
 Qin
 RabbitMQ

From 1b036dfab9b42dce24af76f74546cefda07747d3 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Fri, 4 Aug 2023 18:18:23 -0500
Subject: [PATCH 627/652] release page for v11.2.0

Closes #644
---
 docs/releases/v11.2.0.rst | 4 ++++
 1 file changed, 4 insertions(+)
 create mode 100644 docs/releases/v11.2.0.rst

diff --git a/docs/releases/v11.2.0.rst b/docs/releases/v11.2.0.rst
new file mode 100644
index 000000000..48809ae62
--- /dev/null
+++ b/docs/releases/v11.2.0.rst
@@ -0,0 +1,4 @@
+11.2.0
+======
+
+Starting from this version, the release notes will be posted on PostgREST's GitHub release page. Please see https://github.com/PostgREST/postgrest/releases/tag/v11.2.0.

From e82dc41a6a691d258e7378d58cc4426511ad71de Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Fri, 4 Aug 2023 18:36:38 -0500
Subject: [PATCH 628/652] add link to github discussions

closes #401
---
 docs/index.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docs/index.rst b/docs/index.rst
index 4020d6195..d803c4a34 100644
--- a/docs/index.rst
+++ b/docs/index.rst
@@ -90,7 +90,7 @@ PostgREST has a focused scope. It works well with other tools like Nginx. This f
 Getting Support
 ----------------
 
-The project has a friendly and growing community. Join our `chat room <https://gitter.im/begriffs/postgrest>`_ for discussion and help. You can also report or search for bugs/features on the Github `issues <https://github.com/PostgREST/postgrest/issues>`_ page.
+The project has a friendly and growing community. For discussions, use the Github `discussions page <https://github.com/PostgREST/postgrest/discussions>`_ or join our `chat room <https://gitter.im/begriffs/postgrest>`_. You can also report or search for bugs/features on the Github `issues <https://github.com/PostgREST/postgrest/issues>`_ page.
 
 .. toctree::
    :glob:

From 43a8745e628454f52ce44dc3ffd63326f9bf03f5 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Fri, 4 Aug 2023 19:09:47 -0500
Subject: [PATCH 629/652] link connection string from connection pool

Closes #647
---
 docs/references/connection_pool.rst | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/docs/references/connection_pool.rst b/docs/references/connection_pool.rst
index db7ed0160..0876dbd27 100644
--- a/docs/references/connection_pool.rst
+++ b/docs/references/connection_pool.rst
@@ -7,6 +7,11 @@ A connection pool is a cache of reusable database connections. It allows serving
 
 Minimizing connections is paramount to performance. Each PostgreSQL connection creates a process, having too many can exhaust available resources.
 
+Connection String
+-----------------
+
+For connecting to the database, the pool requires a connection string. You can can configure it using :ref:`db-uri`.
+
 .. _pool_growth_limit:
 .. _dyn_conn_pool:
 

From 291b6f3587b468a33e430455523ac22737b59fe5 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Fri, 4 Aug 2023 19:38:21 -0500
Subject: [PATCH 630/652] add different ways to specify the connection string

Closes #576
---
 docs/references/configuration.rst | 34 ++++++++++++++++++++++++++-----
 postgrest.dict                    |  1 +
 2 files changed, 30 insertions(+), 5 deletions(-)

diff --git a/docs/references/configuration.rst b/docs/references/configuration.rst
index 338e0aa1b..e0c4864ef 100644
--- a/docs/references/configuration.rst
+++ b/docs/references/configuration.rst
@@ -480,18 +480,42 @@ db-uri
   **In-Database** `n/a`
   =============== =================================
 
-  The standard connection PostgreSQL `URI format <https://www.postgresql.org/docs/current/libpq-connect.html#LIBPQ-CONNSTRING>`_. Symbols and unusual characters in the password or other fields should be percent encoded to avoid a parse error.
+  The standard `PostgreSQL connection string <https://www.postgresql.org/docs/current/libpq-connect.html#LIBPQ-CONNSTRING>`_, there are different ways to specify it:
 
-  If enforcing an SSL connection to the database is required you can use `sslmode <https://www.postgresql.org/docs/current/libpq-ssl.html#LIBPQ-SSL-SSLMODE-STATEMENTS>`_ in the URI, for example ``postgres://user:pass@host:5432/dbname?sslmode=require``.
+URI Format
+~~~~~~~~~~
 
-  Any parameter that is not set in the connection string is read from `libpq environment variables <https://www.postgresql.org/docs/current/libpq-envars.html>`_. The default connection string is ``postgresql://``, which reads **all** parameters from the environment.
+  .. code::
 
-  The user with whom PostgREST connects to the database is also known as the ``authenticator`` role. For more information see :ref:`roles`.
+    "postgres://authenticator:mysecretpassword@localhost:5433/postgres?parameters=val"
 
-  When running PostgREST on the same machine as PostgreSQL, it is also possible to connect to the database using a `Unix socket <https://en.wikipedia.org/wiki/Unix_domain_socket>`_ and the `Peer Authentication method <https://www.postgresql.org/docs/current/auth-peer.html>`_ as an alternative to TCP/IP communication and authentication with a password, this also grants higher performance.  To do this you can omit the host and the password, e.g. ``postgres://user@/dbname``, see the `libpq connection string <https://www.postgresql.org/docs/current/libpq-connect.html#LIBPQ-CONNSTRING>`_ documentation for more details.
+  - Under this format symbols and unusual characters in the password or other fields should be percent encoded to avoid a parse error.
+  - If enforcing an SSL connection to the database is required you can use `sslmode <https://www.postgresql.org/docs/current/libpq-ssl.html#LIBPQ-SSL-SSLMODE-STATEMENTS>`_ in the URI, for example ``postgres://user:pass@host:5432/dbname?sslmode=require``.
+  - The user with whom PostgREST connects to the database is also known as the ``authenticator`` role. For more information see :ref:`roles`.
+  - When running PostgREST on the same machine as PostgreSQL, it is also possible to connect to the database using a `Unix socket <https://en.wikipedia.org/wiki/Unix_domain_socket>`_ and the `Peer Authentication method <https://www.postgresql.org/docs/current/auth-peer.html>`_ as an alternative to TCP/IP communication and authentication with a password, this also grants higher performance.  To do this you can omit the host and the password, e.g. ``postgres://user@/dbname``, see the `libpq connection string <https://www.postgresql.org/docs/current/libpq-connect.html#LIBPQ-CONNSTRING>`_ documentation for more details.
+
+Keyword/Value Format
+~~~~~~~~~~~~~~~~~~~~
+
+  .. code::
+
+    "host=localhost port=5433 user=authenticator password=mysecretpassword dbname=postgres"
+
+LIBPQ Environment Variables
+~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+  .. code::
+
+    PGHOST=localhost PGPORT=5433 PGUSER=authenticator PGDATABASE=postgres
+
+  Any parameter that is not set in the above formats is read from `libpq environment variables <https://www.postgresql.org/docs/current/libpq-envars.html>`_. The default connection string is ``postgresql://``, which reads **all** parameters from the environment.
+
+External config file
+~~~~~~~~~~~~~~~~~~~~
 
   Choosing a value for this parameter beginning with the at sign such as ``@filename`` (e.g. ``@./configs/my-config``) loads the connection string out of an external file.
 
+
 .. _db-use-legacy-gucs:
 
 db-use-legacy-gucs
diff --git a/postgrest.dict b/postgrest.dict
index cc6bc534f..3d968a3fe 100644
--- a/postgrest.dict
+++ b/postgrest.dict
@@ -78,6 +78,7 @@ localhost
 login
 lookups
 Logins
+LIBPQ
 logins
 lon
 lt

From a6f93f55b1c4196432d41f4b171a28f15972817f Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Fri, 4 Aug 2023 21:15:26 -0500
Subject: [PATCH 631/652] clear supported pg versions

closes #592
---
 docs/explanations/install.rst | 19 ++++++++++++-------
 1 file changed, 12 insertions(+), 7 deletions(-)

diff --git a/docs/explanations/install.rst b/docs/explanations/install.rst
index 6944803a8..df76e8aa5 100644
--- a/docs/explanations/install.rst
+++ b/docs/explanations/install.rst
@@ -55,6 +55,18 @@ You can also use your OS package manager.
       choco install postgrest
       scoop install postgrest
 
+
+.. _pg-dependency:
+
+Supported PostgreSQL versions
+=============================
+
+=============== =================================
+**Supported**   PostgreSQL >= 9.6
+=============== =================================
+
+PostgREST works with all PostgreSQL versions starting from 9.6.
+
 Running PostgREST
 =================
 
@@ -101,13 +113,6 @@ For a complete reference of the configuration file, see :ref:`configuration`.
 
   To test that the system path is set correctly, run ``pg_config`` from the command line. You should see it output a list of paths.
 
-.. _pg-dependency:
-
-PostgreSQL dependency
----------------------
-
-To use PostgREST you will need an underlying database. We require PostgreSQL 9.6 or greater. You can use something like `Amazon RDS <https://aws.amazon.com/rds/>`_ but installing your own locally is cheaper and more convenient for development. You can also run PostgreSQL in a :ref:`docker container<pg-in-docker>`.
-
 Docker
 ======
 

From 54bfefdb55fd45b529e7d9507f9485c14571a38b Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Fri, 4 Aug 2023 21:23:18 -0500
Subject: [PATCH 632/652] move heroku outside Installation

---
 docs/explanations/install.rst | 123 ----------------------------------
 docs/integrations/heroku.rst  | 122 +++++++++++++++++++++++++++++++++
 2 files changed, 122 insertions(+), 123 deletions(-)
 create mode 100644 docs/integrations/heroku.rst

diff --git a/docs/explanations/install.rst b/docs/explanations/install.rst
index df76e8aa5..fad838b60 100644
--- a/docs/explanations/install.rst
+++ b/docs/explanations/install.rst
@@ -261,126 +261,3 @@ You can build PostgREST from source with `Stack <https://github.com/commercialha
    - `--install-ghc` flag is only needed for the first build and can be omitted in the subsequent builds.
 
 * Check that the server is installed: :code:`postgrest --help`.
-
-.. _deploy_heroku:
-
-Deploying to Heroku
-===================
-
-1.  Log into Heroku using the `Heroku CLI <https://devcenter.heroku.com/articles/heroku-cli>`_:
-
-  .. code-block:: bash
-
-    # If you have multiple Heroku accounts, use flag '--interactive' to switch between them
-    heroku login --interactive
-
-
-2.  Create a new Heroku app using the PostgREST buildpack:
-
-  .. code-block:: bash
-
-    mkdir ${YOUR_APP_NAME}
-    cd ${YOUR_APP_NAME}
-    git init .
-
-    heroku apps:create ${YOUR_APP_NAME} --buildpack https://github.com/PostgREST/postgrest-heroku.git
-    heroku git:remote -a ${YOUR_APP_NAME}
-
-3.  Create a new Heroku PostgreSQL add-on attached to the app and keep notes of the assigned add-on name (e.g. :code:`postgresql-curly-58902`) referred later as ${HEROKU_PG_DB_NAME}
-
-  .. code-block:: bash
-
-    heroku addons:create heroku-postgresql:standard-0 -a ${YOUR_APP_NAME}
-    # wait until the add-on is available
-    heroku pg:wait -a ${YOUR_APP_NAME}
-
-4.  Create the necessary user roles according to the
-    `PostgREST documentation <https://postgrest.org/en/stable/auth.html>`_:
-
-  .. code-block:: bash
-
-    heroku pg:credentials:create --name api_user -a ${YOUR_APP_NAME}
-    # use the following command to ensure the new credential state is active before attaching it
-    heroku pg:credentials -a ${YOUR_APP_NAME}
-
-    heroku addons:attach ${HEROKU_PG_DB_NAME} --credential api_user -a ${YOUR_APP_NAME}
-
-5.  Connect to the PostgreSQL database and create some sample data:
-
-  .. code-block:: bash
-
-    heroku psql -a ${YOUR_APP_NAME}
-
-  .. code-block:: postgres
-
-    # from the psql command prompt execute the following commands:
-    create schema api;
-
-    create table api.todos (
-    id serial primary key,
-    done boolean not null default false,
-    task text not null,
-    due timestamptz
-    );
-
-    insert into api.todos (task) values
-    ('finish tutorial 0'), ('pat self on back');
-
-    grant usage on schema api to api_user;
-    grant select on api.todos to api_user;
-
-6.  Create the :code:`Procfile`:
-
-  .. code-block:: bash
-
-    web: PGRST_SERVER_HOST=0.0.0.0 PGRST_SERVER_PORT=${PORT} PGRST_DB_URI=${PGRST_DB_URI:-${DATABASE_URL}} ./postgrest-${POSTGREST_VER}
-  ..
-
-  Set the following environment variables on Heroku:
-
-  .. code-block:: bash
-
-    heroku config:set POSTGREST_VER=10.0.0
-    heroku config:set PGRST_DB_SCHEMA=api
-    heroku config:set PGRST_DB_ANON_ROLE=api_user
-  ..
-
-  PGRST_DB_URI can be set if an external database is used or if it's different from the default Heroku DATABASE_URL. This latter is used if nothing is provided.
-  POSTGREST_VER is mandatory to select and build the required PostgREST release.
-
-  See https://postgrest.org/en/stable/configuration.html#environment-variables for the full list of environment variables.
-
-7.  Build and deploy your app:
-
-  .. code-block:: bash
-
-    git add Procfile
-    git commit -m "PostgREST on Heroku"
-    git push heroku master
-  ..
-
-  Your Heroku app should be live at :code:`${YOUR_APP_NAME}.herokuapp.com`
-
-8.  Test your app
-
-    From a terminal display the application logs:
-
-  .. code-block:: bash
-
-    heroku logs -t
-  ..
-
-  From a different terminal retrieve with curl the records previously created:
-
-  .. code-block:: bash
-
-    curl https://${YOUR_APP_NAME}.herokuapp.com/todos
-  ..
-
-  and test that any attempt to modify the table via a read-only user is not allowed:
-
-  .. code-block:: bash
-
-    curl https://${YOUR_APP_NAME}.herokuapp.com/todos -X POST \
-     -H "Content-Type: application/json" \
-     -d '{"task": "do bad thing"}'
diff --git a/docs/integrations/heroku.rst b/docs/integrations/heroku.rst
new file mode 100644
index 000000000..614950c1d
--- /dev/null
+++ b/docs/integrations/heroku.rst
@@ -0,0 +1,122 @@
+.. _deploy_heroku:
+
+Heroku
+======
+
+1.  Log into Heroku using the `Heroku CLI <https://devcenter.heroku.com/articles/heroku-cli>`_:
+
+  .. code-block:: bash
+
+    # If you have multiple Heroku accounts, use flag '--interactive' to switch between them
+    heroku login --interactive
+
+
+2.  Create a new Heroku app using the PostgREST buildpack:
+
+  .. code-block:: bash
+
+    mkdir ${YOUR_APP_NAME}
+    cd ${YOUR_APP_NAME}
+    git init .
+
+    heroku apps:create ${YOUR_APP_NAME} --buildpack https://github.com/PostgREST/postgrest-heroku.git
+    heroku git:remote -a ${YOUR_APP_NAME}
+
+3.  Create a new Heroku PostgreSQL add-on attached to the app and keep notes of the assigned add-on name (e.g. :code:`postgresql-curly-58902`) referred later as ${HEROKU_PG_DB_NAME}
+
+  .. code-block:: bash
+
+    heroku addons:create heroku-postgresql:standard-0 -a ${YOUR_APP_NAME}
+    # wait until the add-on is available
+    heroku pg:wait -a ${YOUR_APP_NAME}
+
+4.  Create the necessary user roles according to the
+    `PostgREST documentation <https://postgrest.org/en/stable/auth.html>`_:
+
+  .. code-block:: bash
+
+    heroku pg:credentials:create --name api_user -a ${YOUR_APP_NAME}
+    # use the following command to ensure the new credential state is active before attaching it
+    heroku pg:credentials -a ${YOUR_APP_NAME}
+
+    heroku addons:attach ${HEROKU_PG_DB_NAME} --credential api_user -a ${YOUR_APP_NAME}
+
+5.  Connect to the PostgreSQL database and create some sample data:
+
+  .. code-block:: bash
+
+    heroku psql -a ${YOUR_APP_NAME}
+
+  .. code-block:: postgres
+
+    # from the psql command prompt execute the following commands:
+    create schema api;
+
+    create table api.todos (
+    id serial primary key,
+    done boolean not null default false,
+    task text not null,
+    due timestamptz
+    );
+
+    insert into api.todos (task) values
+    ('finish tutorial 0'), ('pat self on back');
+
+    grant usage on schema api to api_user;
+    grant select on api.todos to api_user;
+
+6.  Create the :code:`Procfile`:
+
+  .. code-block:: bash
+
+    web: PGRST_SERVER_HOST=0.0.0.0 PGRST_SERVER_PORT=${PORT} PGRST_DB_URI=${PGRST_DB_URI:-${DATABASE_URL}} ./postgrest-${POSTGREST_VER}
+  ..
+
+  Set the following environment variables on Heroku:
+
+  .. code-block:: bash
+
+    heroku config:set POSTGREST_VER=10.0.0
+    heroku config:set PGRST_DB_SCHEMA=api
+    heroku config:set PGRST_DB_ANON_ROLE=api_user
+  ..
+
+  PGRST_DB_URI can be set if an external database is used or if it's different from the default Heroku DATABASE_URL. This latter is used if nothing is provided.
+  POSTGREST_VER is mandatory to select and build the required PostgREST release.
+
+  See https://postgrest.org/en/stable/configuration.html#environment-variables for the full list of environment variables.
+
+7.  Build and deploy your app:
+
+  .. code-block:: bash
+
+    git add Procfile
+    git commit -m "PostgREST on Heroku"
+    git push heroku master
+  ..
+
+  Your Heroku app should be live at :code:`${YOUR_APP_NAME}.herokuapp.com`
+
+8.  Test your app
+
+    From a terminal display the application logs:
+
+  .. code-block:: bash
+
+    heroku logs -t
+  ..
+
+  From a different terminal retrieve with curl the records previously created:
+
+  .. code-block:: bash
+
+    curl https://${YOUR_APP_NAME}.herokuapp.com/todos
+  ..
+
+  and test that any attempt to modify the table via a read-only user is not allowed:
+
+  .. code-block:: bash
+
+    curl https://${YOUR_APP_NAME}.herokuapp.com/todos -X POST \
+     -H "Content-Type: application/json" \
+     -d '{"task": "do bad thing"}'

From b0aaf7afe851a6f2ab864bbca0de29b91afd85c0 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Fri, 4 Aug 2023 22:32:20 -0500
Subject: [PATCH 633/652] mention header names are lowercased

Closes #627
---
 docs/references/transactions.rst | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/docs/references/transactions.rst b/docs/references/transactions.rst
index 85f462fa2..1e732cd7a 100644
--- a/docs/references/transactions.rst
+++ b/docs/references/transactions.rst
@@ -113,6 +113,10 @@ Request Headers, Cookies and JWT claims
 
 PostgREST stores the headers, cookies and headers as JSON. To get them:
 
+.. important::
+
+  The headers names are lowercased. e.g. If the request sends ``User-Agent: x`` this will be obtainable as ``current_setting('request.headers', true)::json->>'user-agent'``.
+
 .. code-block:: postgresql
 
   -- To get all the headers sent in the request

From 459f3f817396aa3711546a22e6457c93b0a54a36 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Fri, 4 Aug 2023 22:43:22 -0500
Subject: [PATCH 634/652] add apache apisix tutorial

---
 docs/ecosystem.rst | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/docs/ecosystem.rst b/docs/ecosystem.rst
index da7b4eb66..423f0341b 100644
--- a/docs/ecosystem.rst
+++ b/docs/ecosystem.rst
@@ -20,6 +20,8 @@ Community Tutorials
 
 * `Build data-driven applications with Workers and PostgreSQL <https://developers.cloudflare.com/workers/tutorials/postgres/>`_ - A tutorial on how to integrate with PostgREST and PostgreSQL using Cloudflare Workers.
 
+* `A poor man's API <https://blog.frankel.ch/poor-man-api>`_ - Shows how to integrate PostgREST with Apache APISIX as an alternative to Nginx.
+
 .. _templates:
 
 Templates

From afee9b73a477b5655c304d44f0b5692fe5dc1412 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Fri, 4 Aug 2023 23:08:52 -0500
Subject: [PATCH 635/652] add return=minimal and organize other returns

Closes #624
---
 docs/references/api/tables_views.rst | 121 +++++++++++++++++++++------
 1 file changed, 94 insertions(+), 27 deletions(-)

diff --git a/docs/references/api/tables_views.rst b/docs/references/api/tables_views.rst
index 3d4bb9b31..469ad612f 100644
--- a/docs/references/api/tables_views.rst
+++ b/docs/references/api/tables_views.rst
@@ -693,33 +693,6 @@ HEAD
 A HEAD method will behave identically to GET except that no body will be returned (`RFC 2616 <https://datatracker.ietf.org/doc/html/rfc2616#section-9.4>`_) .
 As an optimization, the generated query won't execute an aggregate (to avoid unnecessary data transfer).
 
-.. _update:
-
-Update
-======
-
-To update a row or rows in a table, use the PATCH verb. Use :ref:`h_filter` to specify which record(s) to update. Here is an example query setting the :code:`category` column to child for all people below a certain age.
-
-.. tabs::
-
-  .. code-tab:: http
-
-    PATCH /people?age=lt.13 HTTP/1.1
-
-    { "category": "child" }
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/people?age=lt.13" \
-      -X PATCH -H "Content-Type: application/json" \
-      -d '{ "category": "child" }'
-
-Updates also support :code:`Prefer: return=representation` plus :ref:`v_filter`.
-
-.. warning::
-
-  Beware of accidentally updating every row in a table. To learn to prevent that see :ref:`block_fulltable`.
-
 .. _insert:
 
 Insert
@@ -743,10 +716,77 @@ To create a row in a database table post a JSON object whose keys are the names
       -X POST -H "Content-Type: application/json" \
       -d '{ "col1": "value1", "col2": "value2" }'
 
+.. code::
+
+  HTTP/1.1 201 Created
+
+No request body will be returned by default.
+
+.. note::
+
+   You can use the ``Prefer: return=minimal`` header to get the same behavior. This is only provided for completeness because it's basically a no-op.
+
+Prefer: return=headers-only
+---------------------------
+
 If the table has a primary key, the response can contain a :code:`Location` header describing where to find the new object by including the header :code:`Prefer: return=headers-only` in the request. Make sure that the table is not write-only, otherwise constructing the :code:`Location` header will cause a permissions error.
 
+.. tabs::
+
+  .. code-tab:: http
+
+    POST /projects HTTP/1.1
+    Prefer: return=headers-only
+
+    {"id":33, "name": "x"}
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/projects" \
+      -X POST -H "Content-Type: application/json" -H "Prefer: return=headers-only" \
+      -d '{"id":33, "name": "x"}'
+
+.. code-block:: http
+
+  HTTP/1.1 201 Created
+  Location: /projects?id=eq.34
+
+Prefer: return=representation
+-----------------------------
+
 On the other end of the spectrum you can get the full created object back in the response to your request by including the header :code:`Prefer: return=representation`. That way you won't have to make another HTTP call to discover properties that may have been filled in on the server side. You can also apply the standard :ref:`v_filter` to these results.
 
+.. tabs::
+
+  .. code-tab:: http
+
+    POST /projects HTTP/1.1
+    Content-Type: application/json; charset=utf-8
+    Prefer: return=representation
+
+    {"id":33, "name": "x"}
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/projects" \
+      -X POST -H "Content-Type: application/json" -H "Prefer: return=representation" \
+      -d '{"id":33, "name": "x"}'
+
+.. code::
+
+  HTTP/1.1 201 Created
+  Transfer-Encoding: chunked
+
+  [
+      {
+          "id": 33,
+          "name": "x"
+      }
+  ]
+
+x-www-form-urlencoded
+---------------------
+
 URL encoded payloads can be posted with ``Content-Type: application/x-www-form-urlencoded``.
 
 .. tabs::
@@ -952,6 +992,33 @@ In this case, only **source**, **publication_date** and **figure** will be inser
 Using this also has the side-effect of being more efficient for :ref:`bulk_insert` since PostgREST will not process the JSON and
 it'll send it directly to PostgreSQL.
 
+.. _update:
+
+Update
+======
+
+To update a row or rows in a table, use the PATCH verb. Use :ref:`h_filter` to specify which record(s) to update. Here is an example query setting the :code:`category` column to child for all people below a certain age.
+
+.. tabs::
+
+  .. code-tab:: http
+
+    PATCH /people?age=lt.13 HTTP/1.1
+
+    { "category": "child" }
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/people?age=lt.13" \
+      -X PATCH -H "Content-Type: application/json" \
+      -d '{ "category": "child" }'
+
+Updates also support :code:`Prefer: return=representation` plus :ref:`v_filter`.
+
+.. warning::
+
+  Beware of accidentally updating every row in a table. To learn to prevent that see :ref:`block_fulltable`.
+
 .. _upsert:
 
 Upsert

From 49d4b9b7db4d50b3851c6467a78c331db44d94ae Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Fri, 4 Aug 2023 23:11:12 -0500
Subject: [PATCH 636/652] fix dict

---
 postgrest.dict | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/postgrest.dict b/postgrest.dict
index 3d968a3fe..c5070d1dd 100644
--- a/postgrest.dict
+++ b/postgrest.dict
@@ -1,6 +1,7 @@
 personal_ws-1.1 en 0 utf-8
 api
 API's
+APISIX
 Archlinux
 aud
 Auth
@@ -186,6 +187,7 @@ Upsert
 upsert
 uri
 url
+urlencoded
 urls
 variadic
 verifier
@@ -197,4 +199,5 @@ websearch
 Websockets
 webuser
 wfts
+www
 Zac

From 095d43ff75a4701e0e8beb9f841a30249a9557fd Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Fri, 4 Aug 2023 23:51:41 -0500
Subject: [PATCH 637/652] add dynamic schemas example

Closes #644
---
 docs/references/api/schemas.rst   | 49 +++++++++++++++++++++++++++++++
 docs/references/configuration.rst |  2 +-
 2 files changed, 50 insertions(+), 1 deletion(-)

diff --git a/docs/references/api/schemas.rst b/docs/references/api/schemas.rst
index 359f5c959..4c62de451 100644
--- a/docs/references/api/schemas.rst
+++ b/docs/references/api/schemas.rst
@@ -105,3 +105,52 @@ You can only switch to a schema included in :ref:`db-schemas`. Using another sch
     "message":"The schema must be one of the following: tenant1, tenant2"
   }
 
+
+Dynamic schemas
+~~~~~~~~~~~~~~~
+
+To add schemas dynamically, you can use :ref:`in_db_config` plus :ref:`config reloading <config_reloading_notify>` and :ref:`schema cache reloading <schema_reloading_notify>`. Here are some options for how to do this:
+
+- If the schemas' names have a pattern, like a ``tenant_`` prefix, do:
+
+.. code-block:: postgresql
+
+  create or replace function postgrest.pre_config()
+  returns void as $$
+    select
+      set_config('pgrst.db_schemas', string_agg(nspname, ','), true)
+    from pg_namespace
+    where nspname like 'tenant_%';
+  $$ language sql;
+
+- If there's no name pattern but they're created with a particular role (``CREATE SCHEMA mine AUTHORIZATION joe``), do:
+
+.. code-block:: postgresql
+
+  create or replace function postgrest.pre_config()
+  returns void as $$
+    select
+      set_config('pgrst.db_schemas', string_agg(nspname, ','), true)
+    from pg_namespace
+    where nspowner = 'joe'::regrole;
+  $$ language sql;
+
+- Otherwise, you might need to create a table that stores the allowed schemas.
+
+.. code-block:: postgresql
+
+  create table postgrest.config (schemas text);
+
+  create or replace function postgrest.pre_config()
+  returns void as $$
+    select
+      set_config('pgrst.db_schemas', schemas, true)
+    from postgrest.config;
+  $$ language sql;
+
+Then each time you add an schema, do:
+
+.. code-block:: postgresql
+
+   NOTIFY pgrst, 'reload config';
+   NOTIFY pgrst, 'reload schema';
diff --git a/docs/references/configuration.rst b/docs/references/configuration.rst
index e0c4864ef..5da6db953 100644
--- a/docs/references/configuration.rst
+++ b/docs/references/configuration.rst
@@ -255,7 +255,7 @@ db-pre-config
   **In-Database** pgrst.db_pre_config
   =============== =======================
 
-   Name of the function that does in-database configuration.
+   Name of the function that does :ref:`in_db_config`.
 
 .. _db-extra-search-path:
 

From 637165ba5bd88d02f4e20076b4b6c50f1f24fa37 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Sun, 6 Aug 2023 21:00:16 -0500
Subject: [PATCH 638/652] use the foreign key join term

---
 docs/references/api/resource_embedding.rst | 327 +++++++++++----------
 1 file changed, 174 insertions(+), 153 deletions(-)

diff --git a/docs/references/api/resource_embedding.rst b/docs/references/api/resource_embedding.rst
index be4ea15f2..18c1076bf 100644
--- a/docs/references/api/resource_embedding.rst
+++ b/docs/references/api/resource_embedding.rst
@@ -5,19 +5,31 @@ Resource Embedding
 
 PostgREST allows including related resources in a single API call. This reduces the need for many API requests.
 
-**Foreign Keys** determine which tables and views can be returned together. For example, consider a database of films and their awards:
+.. _fk_join:
 
-.. image:: ../../_static/film.png
+Foreign Key Joins
+=================
+
+The server uses **Foreign Keys** to determine which tables and views can be joined together.
+
+- For joining tables, it reads foreign keys (respecting composite keys) and generates a join condition based on the foreign key columns.
+- For joining views, it reads the base tables of the views' definition, and generates a join condition based on the foreign key columns of the base tables.
 
 .. important::
 
-  - PostgREST respects composite foreign keys.
   - Whenever foreign keys change you must do :ref:`schema_reloading` for this feature to work.
 
+Relationships
+=============
+
+For example, consider a database of films and their awards:
+
+.. image:: ../../_static/film.png
+
 .. _many-to-one:
 
 Many-to-one relationships
-=========================
+-------------------------
 
 Since ``films`` has a **foreign key** to ``directors``, this establishes a many-to-one relationship. Thus, we're able to request all the films and the director for each film.
 
@@ -83,7 +95,7 @@ Since the table name is plural, we can be more accurate by making it singular wi
 .. _one-to-many:
 
 One-to-many relationships
-=========================
+-------------------------
 
 The **foreign key reference** establishes the inverse one-to-many relationship. In this case, ``films`` returns as a JSON array because of the “to-many” end.
 
@@ -120,7 +132,7 @@ The **foreign key reference** establishes the inverse one-to-many relationship.
 .. _many-to-many:
 
 Many-to-many relationships
-==========================
+--------------------------
 
 The join table determines many-to-many relationships. It must contain foreign keys to other two tables and they must be part of its composite key.
 
@@ -168,7 +180,7 @@ For the many-to-many relationship between ``films`` and ``actors``, the join tab
 .. _one-to-one:
 
 One-to-one relationships
-========================
+------------------------
 
 One-to-one relationships are detected in two ways.
 
@@ -220,7 +232,7 @@ One-to-one relationships are detected in two ways.
 Computed Relationships
 ======================
 
-You can manually define relationships between resources using functions. This is useful for database objects that can't define foreign keys, like `Foreign Data Wrappers <https://wiki.postgresql.org/wiki/Foreign_data_wrappers>`_.
+You can manually define relationships between using functions. This is useful for database objects that can't define foreign keys, like `Foreign Data Wrappers <https://wiki.postgresql.org/wiki/Foreign_data_wrappers>`_.
 
 Assuming there's a foreign table ``premieres`` that we want to relate to ``films``.
 
@@ -325,13 +337,21 @@ Computed relationships have good performance as their intended design enable `in
 .. _target_disamb:
 .. _complex_rels:
 
-Complex Relationships
-=====================
+FK Joins on Multiple Foreign Key Relationships
+==============================================
 
-As mentioned on :ref:`resource_embedding`, the server does joins based on **Foreign Keys**.
-When there are many foreign keys between tables, it needs disambiguation to resolve which foreign key columns to use for the join.
+When there are multiple foreign keys between tables, :ref:`fk_join` need disambiguation to resolve which foreign key columns to use for the join.
 
-:ref:`computed_relationships` can do the job here, they can choose join columns arbitrarily.
+.. code::
+
+  HTTP/1.1 300 Multiple Choices
+
+  {
+    "code": "PGRST201",
+    "details": [ "..." ],
+    "hint": "...",
+    "message": "Could not embed because more than one relationship was found for 'sites' and 'big_projects'"
+  }
 
 .. note::
 
@@ -365,7 +385,7 @@ Multiple Many-To-One
       shipping_address_id int references addresses(id)
     );
 
-To successfully embed ``orders`` with ``addresses``, you need to create computed relationships for the foreign keys columns you want to use:
+To successfully join ``orders`` with ``addresses``, you need to create computed relationships for the foreign keys columns you want to use:
 
 .. code-block:: postgresql
 
@@ -377,7 +397,7 @@ To successfully embed ``orders`` with ``addresses``, you need to create computed
     select * from addresses where id = $1.shipping_address_id
   $$ stable language sql;
 
-Now, we can unambiguously embed the billing and shipping addresses.
+Now, we can unambiguously join the billing and shipping addresses.
 
 .. tabs::
 
@@ -409,7 +429,7 @@ Multiple One-To-Many
 --------------------
 
 Let's take the tables from :ref:`multiple_m2o`.
-To embed ``addresses`` with  ``orders``, you need to create computed relationships like these ones:
+To join ``addresses`` with  ``orders``, you need to create computed relationships like these ones:
 
 .. code-block:: postgresql
 
@@ -669,6 +689,144 @@ Then, the request would be:
      }
    ]
 
+.. _embedding_partitioned_tables:
+
+FK Joins on Partitioned Tables
+==============================
+
+Foreign Key joins can also be done between `partitioned tables <https://www.postgresql.org/docs/current/ddl-partitioning.html>`_ and other tables.
+
+For example, let's create the ``box_office`` partitioned table that has the gross daily revenue of a film:
+
+.. code-block:: postgres
+
+  CREATE TABLE box_office (
+    bo_date DATE NOT NULL,
+    film_id INT REFERENCES test.films NOT NULL,
+    gross_revenue DECIMAL(12,2) NOT NULL,
+    PRIMARY KEY (bo_date, film_id)
+  ) PARTITION BY RANGE (bo_date);
+
+  -- Let's also create partitions for each month of 2021
+
+  CREATE TABLE box_office_2021_01 PARTITION OF test.box_office
+  FOR VALUES FROM ('2021-01-01') TO ('2021-01-31');
+
+  CREATE TABLE box_office_2021_02 PARTITION OF test.box_office
+  FOR VALUES FROM ('2021-02-01') TO ('2021-02-28');
+
+  -- and so until december 2021
+
+Since it contains the ``films_id`` foreign key, it is possible to join ``box_office`` and ``films``:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /box_office?select=bo_date,gross_revenue,films(title)&gross_revenue=gte.1000000 HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/box_office?select=bo_date,gross_revenue,films(title)&gross_revenue=gte.1000000"
+
+.. note::
+
+  * FK joins on partitions is not allowed because it leads to ambiguity errors (see :ref:`embed_disamb`) between them and their parent partitioned table. More details at `#1783(comment) <https://github.com/PostgREST/postgrest/issues/1783#issuecomment-959823827>`_). :ref:`computed_relationships` can be used if this is needed.
+
+  * Partitioned tables can reference other tables since PostgreSQL 11 but can only be referenced from any other table since PostgreSQL 12.
+
+.. _embedding_views:
+
+FK Joins on Views
+=================
+
+PostgREST will infer the relationships of a view based on its base tables. Base tables are the ones referenced in the ``FROM`` and ``JOIN`` clauses of the view definition.
+The foreign keys of the relationships must be present in the top ``SELECT`` clause of the view for this to work.
+
+For instance, the following view has ``nominations``, ``films`` and ``competitions`` as base tables:
+
+.. code-block:: postgres
+
+  CREATE VIEW nominations_view AS
+    SELECT
+       films.title as film_title
+     , competitions.name as competition_name
+     , nominations.rank
+     , nominations.film_id as nominations_film_id
+     , films.id as film_id
+    FROM nominations
+    JOIN films ON films.id = nominations.film_id
+    JOIN competitions ON competitions.id = nominations.competition_id;
+
+Since this view contains ``nominations.film_id``, which has a **foreign key** relationship to ``films``, then we can join the ``films`` table. Similarly, because the view contains ``films.id``, then we can also join the ``roles`` and the ``actors`` tables (the last one in a many-to-many relationship):
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /nominations_view?select=film_title,films(language),roles(character),actors(last_name,first_name)&rank=eq.5 HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/nominations_view?select=film_title,films(language),roles(character),actors(last_name,first_name)&rank=eq.5"
+
+It's also possible to foreign key join `Materialized Views <https://www.postgresql.org/docs/current/rules-materializedviews.html>`_.
+
+.. important::
+
+  - It's not guaranteed that FK joins will work on all kinds of views. In particular, FK joins won't work on views that contain UNIONs.
+
+    + Why? PostgREST detects base table foreign keys in the view by querying and parsing `pg_rewrite <https://www.postgresql.org/docs/current/catalog-pg-rewrite.html>`_.
+      This may fail depending on the complexity of the view.
+    + As a workaround, you can use :ref:`computed_relationships` to define manual relationships for views.
+
+  - If view definitions change you must refresh PostgREST's schema cache for this to work properly. See the section :ref:`schema_reloading`.
+
+.. _embedding_view_chains:
+
+FK Joins on Chains of Views
+---------------------------
+
+Views can also depend on other views, which in turn depend on the actual base table. For PostgREST to pick up those chains recursively to any depth, all the views must be in the search path, so either in the exposed schema (:ref:`db-schemas`) or in one of the schemas set in :ref:`db-extra-search-path`. This does not apply to the base table, which could be in a private schema as well. See :ref:`schema_isolation` for more details.
+
+.. _s_proc_embed:
+
+FK Joins on Table-Valued Functions
+==================================
+
+If you have a :ref:`Stored Procedure <s_procs>` that returns a table type, you can do a Foreign Key join on the result.
+
+Here's a sample function (notice the ``RETURNS SETOF films``).
+
+.. code-block:: plpgsql
+
+  CREATE FUNCTION getallfilms() RETURNS SETOF films AS $$
+    SELECT * FROM films;
+  $$ LANGUAGE SQL STABLE;
+
+A request with ``directors`` embedded:
+
+.. tabs::
+
+  .. code-tab:: http
+
+     GET /rpc/getallfilms?select=title,directors(id,last_name)&title=like.*Workers* HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+     curl "http://localhost:3000/rpc/getallfilms?select=title,directors(id,last_name)&title=like.*Workers*"
+
+.. code-block:: json
+
+   [
+     { "title": "Workers Leaving The Lumière Factory In Lyon",
+       "directors": {
+         "id": 2,
+         "last_name": "Lumière"
+       }
+     }
+   ]
+
 .. _nested_embedding:
 
 Nested Embedding
@@ -981,143 +1139,6 @@ You can use this to get the columns of a join table in a many-to-many relationsh
 
   The spread operator ``...`` is borrowed from the Javascript `spread syntax <https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Operators/Spread_syntax>`_.
 
-.. _embedding_partitioned_tables:
-
-Embedding Partitioned Tables
-============================
-
-Embedding can also be done between `partitioned tables <https://www.postgresql.org/docs/current/ddl-partitioning.html>`_ and other tables.
-
-For example, let's create the ``box_office`` partitioned table that has the gross daily revenue of a film:
-
-.. code-block:: postgres
-
-  CREATE TABLE box_office (
-    bo_date DATE NOT NULL,
-    film_id INT REFERENCES test.films NOT NULL,
-    gross_revenue DECIMAL(12,2) NOT NULL,
-    PRIMARY KEY (bo_date, film_id)
-  ) PARTITION BY RANGE (bo_date);
-
-  -- Let's also create partitions for each month of 2021
-
-  CREATE TABLE box_office_2021_01 PARTITION OF test.box_office
-  FOR VALUES FROM ('2021-01-01') TO ('2021-01-31');
-
-  CREATE TABLE box_office_2021_02 PARTITION OF test.box_office
-  FOR VALUES FROM ('2021-02-01') TO ('2021-02-28');
-
-  -- and so until december 2021
-
-Since it contains the ``films_id`` foreign key, it is possible to embed ``box_office`` and ``films``:
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /box_office?select=bo_date,gross_revenue,films(title)&gross_revenue=gte.1000000 HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/box_office?select=bo_date,gross_revenue,films(title)&gross_revenue=gte.1000000"
-
-.. note::
-
-  * Embedding on partitions is not allowed because it leads to ambiguity errors (see :ref:`embed_disamb`) between them and their parent partitioned table. More details at `#1783(comment) <https://github.com/PostgREST/postgrest/issues/1783#issuecomment-959823827>`_). :ref:`custom_queries` can be used if this is needed.
-
-  * Partitioned tables can reference other tables since PostgreSQL 11 but can only be referenced from any other table since PostgreSQL 12.
-
-.. _embedding_views:
-
-Embedding Views
-===============
-
-PostgREST will infer the relationships of a view based on its source tables. Source tables are the ones referenced in the ``FROM`` and ``JOIN`` clauses of the view definition. The foreign keys of the relationships must be present in the top ``SELECT`` clause of the view for this to work.
-
-For instance, the following view has ``nominations``, ``films`` and ``competitions`` as source tables:
-
-.. code-block:: postgres
-
-  CREATE VIEW nominations_view AS
-    SELECT
-       films.title as film_title
-     , competitions.name as competition_name
-     , nominations.rank
-     , nominations.film_id as nominations_film_id
-     , films.id as film_id
-    FROM nominations
-    JOIN films ON films.id = nominations.film_id
-    JOIN competitions ON competitions.id = nominations.competition_id;
-
-Since this view contains ``nominations.film_id``, which has a **foreign key** relationship to ``films``, then we can embed the ``films`` table. Similarly, because the view contains ``films.id``, then we can also embed the ``roles`` and the ``actors`` tables (the last one in a many-to-many relationship):
-
-.. tabs::
-
-  .. code-tab:: http
-
-    GET /nominations_view?select=film_title,films(language),roles(character),actors(last_name,first_name)&rank=eq.5 HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/nominations_view?select=film_title,films(language),roles(character),actors(last_name,first_name)&rank=eq.5"
-
-It's also possible to embed `Materialized Views <https://www.postgresql.org/docs/current/rules-materializedviews.html>`_.
-
-.. important::
-
-  - It's not guaranteed that all kinds of views will be embeddable. In particular, views that contain UNIONs will not be made embeddable.
-
-    + Why? PostgREST detects source table foreign keys in the view by querying and parsing `pg_rewrite <https://www.postgresql.org/docs/current/catalog-pg-rewrite.html>`_.
-      This may fail depending on the complexity of the view.
-    + As a workaround, you can use :ref:`computed_relationships` to define manual relationships for views.
-
-  - If view definitions change you must refresh PostgREST's schema cache for this to work properly. See the section :ref:`schema_reloading`.
-
-.. _embedding_view_chains:
-
-Embedding Chains of Views
-=========================
-
-Views can also depend on other views, which in turn depend on the actual source table. For PostgREST to pick up those chains recursively to any depth, all the views must be in the search path, so either in the exposed schema (:ref:`db-schemas`) or in one of the schemas set in :ref:`db-extra-search-path`. This does not apply to the source table, which could be in a private schema as well. See :ref:`schema_isolation` for more details.
-
-.. _s_proc_embed:
-
-Embedding on Stored Procedures
-==============================
-
-If you have a :ref:`Stored Procedure <s_procs>` that returns a table type, you can embed its related resources.
-
-Here's a sample function (notice the ``RETURNS SETOF films``).
-
-.. code-block:: plpgsql
-
-  CREATE FUNCTION getallfilms() RETURNS SETOF films AS $$
-    SELECT * FROM films;
-  $$ LANGUAGE SQL STABLE;
-
-A request with ``directors`` embedded:
-
-.. tabs::
-
-  .. code-tab:: http
-
-     GET /rpc/getallfilms?select=title,directors(id,last_name)&title=like.*Workers* HTTP/1.1
-
-  .. code-tab:: bash Curl
-
-     curl "http://localhost:3000/rpc/getallfilms?select=title,directors(id,last_name)&title=like.*Workers*"
-
-.. code-block:: json
-
-   [
-     { "title": "Workers Leaving The Lumière Factory In Lyon",
-       "directors": {
-         "id": 2,
-         "last_name": "Lumière"
-       }
-     }
-   ]
-
 .. _mutation_embed:
 
 Embedding after Insertions/Updates/Deletions

From 3f112553b08b0cc06793b42229658a8148c4ccce Mon Sep 17 00:00:00 2001
From: Laurence Isla <lau.isla.c@gmail.com>
Date: Mon, 7 Aug 2023 18:25:49 -0500
Subject: [PATCH 639/652] Add missing ERD/SQL tabs and fix some requests

---
 diagrams/README.md                         |   2 +
 diagrams/boxoffice.er                      |  15 ++
 diagrams/employees.er                      |   5 +
 diagrams/film.er                           |  11 ++
 diagrams/orders.er                         |   5 +
 diagrams/premieres.er                      |  16 ++
 diagrams/presidents.er                     |   5 +
 diagrams/users.er                          |   5 +
 docs/_static/boxoffice.png                 | Bin 0 -> 11482 bytes
 docs/_static/employees.png                 | Bin 8244 -> 8550 bytes
 docs/_static/film.png                      | Bin 51752 -> 56781 bytes
 docs/_static/orders.png                    | Bin 17892 -> 16680 bytes
 docs/_static/premieres.png                 | Bin 0 -> 8990 bytes
 docs/_static/presidents.png                | Bin 8331 -> 9166 bytes
 docs/_static/users.png                     | Bin 14073 -> 15354 bytes
 docs/references/api/resource_embedding.rst | 173 +++++++++++++--------
 16 files changed, 173 insertions(+), 64 deletions(-)
 create mode 100644 diagrams/boxoffice.er
 create mode 100644 diagrams/premieres.er
 create mode 100644 docs/_static/boxoffice.png
 create mode 100644 docs/_static/premieres.png

diff --git a/diagrams/README.md b/diagrams/README.md
index 67009dc31..fa4a1e7fe 100644
--- a/diagrams/README.md
+++ b/diagrams/README.md
@@ -8,6 +8,8 @@ You can go download erd from https://github.com/BurntSushi/erd/releases and then
 ./erd_static-x86-64 -i diagrams/film.er -o docs/_static/film.png
 ```
 
+The fonts used belong to the GNU FreeFont family. You can download them here: http://ftp.gnu.org/gnu/freefont/
+
 ## LaTeX
 
 The schema structure diagram is done with LaTeX. You can use a GUI like https://www.mathcha.io/editor to create the .tex file.
diff --git a/diagrams/boxoffice.er b/diagrams/boxoffice.er
new file mode 100644
index 000000000..7d6b0a1c7
--- /dev/null
+++ b/diagrams/boxoffice.er
@@ -0,0 +1,15 @@
+entity {font: "FreeSans"}
+relationship {font: "FreeMono"}
+
+[Box_Office]
+*bo_date
+*+film_id
+gross_revenue
+
+[Films]
+*id
++director_id
+title
+`...`
+
+Box_Office +--1 Films
diff --git a/diagrams/employees.er b/diagrams/employees.er
index 7010a670e..4632f5bac 100644
--- a/diagrams/employees.er
+++ b/diagrams/employees.er
@@ -1,3 +1,8 @@
+# Build using: -e ortho
+
+entity {font: "FreeSans"}
+relationship {font: "FreeMono"}
+
 [Employees]
 *id
 first_name
diff --git a/diagrams/film.er b/diagrams/film.er
index d19fdf61b..cc54c4800 100644
--- a/diagrams/film.er
+++ b/diagrams/film.er
@@ -1,3 +1,6 @@
+entity {font: "FreeSans"}
+relationship {font: "FreeSerif"}
+
 [Films]
 *id
 +director_id
@@ -31,6 +34,12 @@ year
 *+film_id
 rank
 
+[Technical_Specs]
+*+film_id
+runtime
+camera
+sound
+
 Roles *--1 Actors
 Roles *--1 Films
 
@@ -38,3 +47,5 @@ Nominations *--1 Competitions
 Nominations *--1 Films
 
 Films *--1 Directors
+
+Films 1--1 Technical_Specs
diff --git a/diagrams/orders.er b/diagrams/orders.er
index bdd93de2e..86f0805e9 100644
--- a/diagrams/orders.er
+++ b/diagrams/orders.er
@@ -1,3 +1,8 @@
+# Build using: -e ortho
+
+entity {font: "FreeSans"}
+relationship {font: "FreeMono"}
+
 [Addresses]
 *id
 name
diff --git a/diagrams/premieres.er b/diagrams/premieres.er
new file mode 100644
index 000000000..6099e74fd
--- /dev/null
+++ b/diagrams/premieres.er
@@ -0,0 +1,16 @@
+entity {font: "FreeSans"}
+relationship {font: "FreeMono"}
+
+[Premieres]
+*id
+location
+date
++film_id
+
+[Films]
+*id
++director_id
+title
+`...`
+
+Premieres *--1 Films
diff --git a/diagrams/presidents.er b/diagrams/presidents.er
index b49100961..ca7cf71ba 100644
--- a/diagrams/presidents.er
+++ b/diagrams/presidents.er
@@ -1,3 +1,8 @@
+# Build using: -e ortho
+
+entity {font: "FreeSans"}
+relationship {font: "FreeMono"}
+
 [Presidents]
 *id
 first_name
diff --git a/diagrams/users.er b/diagrams/users.er
index e42ca312f..8ec011302 100644
--- a/diagrams/users.er
+++ b/diagrams/users.er
@@ -1,3 +1,8 @@
+# Build using: -e ortho
+
+entity {font: "FreeSans"}
+relationship {font: "FreeMono"}
+
 [Users]
 *id
 first_name
diff --git a/docs/_static/boxoffice.png b/docs/_static/boxoffice.png
new file mode 100644
index 0000000000000000000000000000000000000000..87249a6659f7c1f1a050f800fec72e16a52a441a
GIT binary patch
literal 11482
zcmeAS@N?(olHy`uVBq!ia0y~yV610gU^u|R#=yYvW_@xo0|NtFlDE4H!+#K5uy^@n
z1_lKNPZ!6KiaBrZR>p)p{m1^{e4=dG1YZFY(SSP!tp~o$YFzd-?}6Sg;q7;NyE9Xs
zO<NZGc-f?9(-OrMMFo8VJElzWJrg1n=;JCPAdous?a#jlpT@K?&PfcL`~LUWS>eX%
z^NP=XpY!DO;o@_Z`(%=P8U>s>tbRs1-xL&Z;s~_y`qv_`s7>Riuv3TBq9^_widh|#
z>=j#9DB_ja_~XZqhQ}6FD^F<K*u<>*KR?RoSGglcAhVpDT*Stt)=h^4swb=YPO6fg
z@`qC~Y4hgIhmUj$PnB)EHQDvk@<e$jjzDLSj0<nzC-oKqQ<szT1)Q!3sMb4mT$*c9
z==3I9rn#w!fnjyn+DFsh-rGC-{<SYJFaLb1?l&jkn&L`SSO5OQsi?Iy{rtQgg^!PU
z-_E_ci8Xp#PN0L!di7U7g`MI&b$fqqU-EHlgK_$~g#Z8k78DdT%$p|{6B8pKDapy;
z;qBc#eY!XgFYm>T$?iXX{#>|VfkR5QrKRNz`+7U8(pN09va%A=(#a1FG~U=<uK()Q
ztCYGuo7`;cojPva+*z#dH`nTD{l2odQffXk8uIu56=P&%T(M#W1H+W5Qy(5^WZqHv
zSxql)4@ci)28QqN?l!l#vw!;Z=|^rzc=+Q>OTBlLyc9Y&&$fGh{lCbK?5c_&H-~st
zRaJGD|5_8Z)l2Pn#+)D0SFT=7{P^f-&7*uBLqoxnCr|!)e%|i4kH$yy(l0LpU0hvH
zs)SW8eB#d$Xf119=8~1A<>l@D@#XUQT(#RPJ|>BXiYgi#3&-v*dpiC8uF~#$d2#XM
z`};dP4|a>|2LuEtd^x?cP&yP84~xqF{Qdjz)hjM$W@eqZJu~9-5)vBT-rj!r%o(1(
zzCH=-GM)dikN0zEX>0%do_=o5!K<so6VuY#&dxS(He@>{@!zIt6(}VIYT8zRdm@~1
zdHR}n?_S>6sQf=JI(l~f{e8973(xo7H#aMJ5%BM?`TZK^^78U6`S<1a?c2w}&3*Xu
z^Yf`f%WXVM50?M__SVD4XG*Bf6VpYn#CLN{JofJH?u82%Hg<GygoKAPGt9H8Y??4Z
zprxh7AwFKd`un@1S5^j3mB~E4<ke4gH8mwoP0z566RsaP+|FP4<wam>yJJVp%-OS*
zb#!=s{`|?o$$79{zK+A$+4<k^PoIh=W^=A`dlhYKYh$xwx_iaLhYyW3O&mK`b#-(c
zXyFuQVEFs{`|*j&?go{gQl?Cw{`f#6bInp?V`Jmgwx2;I^X(N|JRZE=e!p$oHnUZ$
zS5KTajm_Qtc-n2#eR>PJUNq?|ws;)4bxTUxJTGT!@8ZSEOw7!pB7wI9KskVOZOl%g
z^z-wMwr~nxSm?~2k)7@A@6Uhk+_@i5Ci_pAGKD2LI5@TardFTfv0J+~_4o5L?AqM?
z$N%t*{UZO@baXA6Uw-vqq0FH}hYSiI9od%mD82RjpJ?q{3s$b=)YjJSku+x8xN&0_
zpKq3{t82veJlUAo*u=CnHd|ZUJs*!r&#<ets{8x(df0VeZ|}nk9Gep|GB|8)ZU6kf
z|DTParLFDI&6|?DcI`4SF>#5Cl6rP#=HdC9mEHR^9$ny2TrW9w*MsQr@OE|oc?w!u
zT!DdsKi=(rzailuQ);{Fv>7ubeCAq-y1KeLoqm6RfB*0A?;kIpUw3GVW^loW2aYdZ
zz3N(HpLt0oB{lWqd~GeQg7^1qfBgEjXxTD0hJet}qxXY-I211hyfpkTsvY*=<KyF}
z_#Q8P^!Tx1+8K$7NA8DYWM~}gm)AE^2?_~OneszAW@k~W|DP5CC2ud^f4=gM*R5IO
z5)>r#|3ztPs_MD9*2~Wb#IIVigvB`Rj6-OsXv44LhwFblWET+;S+HmklcuJogmD_r
z{eNFxUcRxjc=-jhQ>Rb={0_=fk&%*r{{C&9=0DFya_ZEn1;xdO_tpOXQEXQEDaBG=
zQSnLXk|5jq*x1+|yLWT@F8lK2r0~SD@bz&=mv~OTu&=iI#fujQjvZsOv$InQ_MKx_
zJ4;^r`h^Pz=GXr_S#O?u%jDnge}8{3-nMO<ui^Wfo7pWbEg2Yug@yn8`~7}~WwF|s
zvu70rI37HE)+Vg($D#UCH+tKL!{&?KdYks{wf%p$nVml&A%Q_wR`$#c!{+$9Cnp3s
zSeP<0GdW|`GxN^;|M2jzgiVEkkFW2-)vLSL#qLged1<MxpJVl#8-_fRMl5P-Y6fOz
zZvX%N-B|qmT=*gdR>dW~Geq|6-8*yp_U$gOU0hrY7<d?7-`u?XLb-n2o&-%z%{RT~
z_YxQ+ju*b^xBn-QB`ha*Zp)S}KXOg#GBYwZJa~|>@SB~T-JkEt$NN%y49h-0^If)Z
z;lcHjXU)3Rws`&Z_3`#~zh|50=WUFQi<7&2_3G2xYAPxQ$0VdJi&8cpS9+&yViJ;J
zUsqSByDj(rKHJl$P6=i0ulo8*?6&_ro0*}Zp`ImnhYlT@F$I(bvQD43p2*Ljqod<9
z%eO^)>+}0tGMd+|)4NyoTKCTGa{gPlZr#|N&j0J%+tb_6pE+~n%uM5G8TR$7S0A3F
z>Rs^klxSUKK!89`Z!aUm#EBDk)ciEMwl@0s_bhR}7>@Ap>t;veBO^Okhp+!MUs~>G
zUf<NIqHKIJC+ht?JsBBX+})L}t!KyItI*I<QE7?amvK?4Zs+{@@tc2h@bVu0_xE>n
zkD|G``045T&+U&NJ(~FW*;(Cf_C-%P%yMsCdGx(yLiltq-rpwA9zIkwazFFy>+7GE
zTdTjl={$18Wy+K(3T9?vbFE657_MBqmh}7E+do#@wrz9re|&bXwfMt_4;dJwrKML+
zimt2Mcj1D^biLT9-1|EWT<YrTW`DmuDS!XpY4!GLXC&_Itrnj;b!ta%@6&q5d3Lq4
z_S;?jVRLq-F?(fYrG}Q)A&|9CcbC0g)P1gHPg{uDPjwZQ2Xo8sIYvfGGAvlOtWAHz
znuQA+laKcuJbakBt*!0Dr%#6#I=BBQef;=w>$a^K7nQ!ezc26b_iIyI%iSOAnOrYi
zx$@-x_ODXT-db8(1wTKfGJL)6$0uXaaBi-(b9lITTwGkmw>Od!$t%{aYwPRd%gWCF
zcsqYTBSTM5&xY*ldJ&P42hW`0$-cJc;eRPD4Gn=^VNM*CwkxjOwcEON>xnaGj&ukr
zGh9)B)t1=l-Y>Us%N7xbTK?V9+w+`mOW9NyeEIT)fuUdCUd(Hql#~=G`b|v!mG3y*
z&OiOxOACgt&X&E~E5E<H8+P0L-@Qwhf>za<Pn|#i{Pzpi<?ncki$90me*Wy)r*h$`
zQ>HkChlgiyta~WV$#7?1ZS=B@LQYfsmsb6gl9DPYDLHaIzW%Jfb={vG9@c%2XT|RS
zSaj`4+^<QKgcd5!nlwph<#Gi94i=~DDoRR9Q90280S(;ZdLQQBy>n;Dt@7aB{-sMl
zUygWeRH7do6m)6X3=YLr-b*LdHy=B>dg1o`?CjIx-aD$l>lqmvw_e*>@Q~^L<gMGb
zwN1PBUoNih<D=FSlMhYTi#_!He!YI_n&4$V5AWyS+{9Y{|L=AW>0=VpbRrL_$7E+`
z@A>=fcF_CXhTh)Z|JF}fvu2H0{_C6zKlGc|#qQn~Vb*WhwzK&8DU&d#j!!E?KCNH9
z+BqytjERZqM=I}O>!_%xKY#yk-MaO|w{LDmMMhrU-h$%d?K6$jKfSJ~tmMos|NQLi
zj?&j+3=i&>-+%hLXkFCSS4%xVr9L}9pFcV}n!%y4(2$K+s%63i0TEHrhex}`J$!wS
z-q@Jj`tErA&Z5-K!8RU;4;*07)6-*kwY(8jC2iWY>BFO=+((WaIdJ2Kgv@bAe}Dd~
zSFakFnm&E5c>dI>L(_Dl0|EjXPMz|aV_PkD?b@{m7JN*N4tnCtITcSWy|S}bD(`E~
zSy0pQd-k<82R9}k4~UHHe0_cW;lqcWm+YN3P3+&#^Yx$R8yg${Ty%cctXZInOF%@V
z<?inC#XELLoSv@lo{^C;yZ_*c6CCaQ^2a&^l><UUTiyHR4qm^${ph#2xHzZn(WfpQ
zYUTbJSCx~aBO@c@a;xUY!}dS=`&qfg4&1*l&#<BDYu1{$y-`d4zPY(MF*Q|ndd11r
zs>a5`+w<>>RcTDr@V|VK-*aWi`TZ*kA0OjXy_9!%*TV}7ot>PmdNZ@Klq@VFGGyxh
z{rOq(@ewP-f$P`B@9rvfPDoI=|JknS2}e>=(vq&vcgyd)rldUaKE171+MG|_f1b!L
z4;}Biy1GAGcAqUQC=l2+Z&S`qqdous{np(kZ<Zs`)YOzBrL5@U>hZZ_#uon{X0?Sf
z$8T-TKHkP7dFb2w`{%Q=vS!^qCSU*Opqk&D6KmG4ow;qBS@!*Xwx2(KOgwq=q|;kI
zIhzyt(eCc;fB$~J|EJu0y57_MuP-g-*4Edb{^Q4NEe(x??Ca}N|Ni=#ylmMrpYZVM
zH*eqG>^WI&<K^Z4+jqp3m6dJww{34}`EXiXH|mIf{vVP2%jz}R+1WSm?XAAqz{osf
z;X=jB7cVCE_4U1(>~EKN^ypEg-|N<`OZ)%t`~JxP|NhS0x6e+PgJn(p{<=4}^Y^D-
zy?Rw>K6BNf?_XX0f2`s=@qja4>zPwZSJ%!x`(8YcE!{KeXbgv9i-x@F|Npl(rFwUZ
z9*e5FyR+E+W}>i@$82z8%+%%N|NUWWqprSc_B*?G*6yj31e|6`8KrRSDu4g)QrXU(
zJ0Dp1Wf*yZ+uMp+9!t4)2s@p4y&{n<Hq^<s9^Sb**TyHSW%Nv5R+g8apZ~?{*N2ZC
zW1C<5ZRVNRHCx)+YB>~L4%Yp8sSc{J>m@cVTEsNlEcejf>hB_A%wPX-D!MdkX=!aJ
zc^SlT;MUgciF4=nHZ?KT{QvuX?KPH(rl5X82h&{pdO25D*BRF3di#Dn;;#F7XJ>I>
zNJvZQ>M%_eK8PAqks2xEw4M{?@--hC4?S7{>gI7>xi#h8r&;gzS_bj{77-JB^zd*y
zsOPrkk>YxbOl}{6PrF{<+N#X}YS1lq>lOO-?#s)|T;0yAp49*TmTOb<V**#5fK$f|
zHeM+fZf@>3x3}}lT9q`+pD+LA>sLWR!AAXkKb#Wx*022b=;1@g{QUgR=SLP^fBl<_
zn|t!r{k~3d-b{@Qj*gBAJ&A8`ZQZbWv-9q<w-25_Z(kX_eBTzO1#2$Muvcu+xUnVk
zGN_lv&(F`n!W0n|b?E+m`GW@!a&<T6eN|}@u<Y*b6^%5j`jXKjXB(AL>FC&~<g{oW
zs0XVI>A_~)XcusLqG4qvwLS0dq>8;47rP%mdD4?l@ap1u_0pCW770f>1W)lbFF(QM
z&?4|LG&FSKqD4-RrteAru>@q!iHj|q!Ul<lSW?>+o2ve0>6w{{$sB)pq*M45U#q|(
z2Us_DdXS$V-?2VfZe?ZV8M9|6e|mCKiB<B_rAr_F{eFM=$PpGcHnxJ|VrLHzkJ;Zf
z{a6>=x)t^3b^QOP?rv@$AD@JzB&P82@P&WR%`)Xa+{Vky&?9dzw`|$6Kjnsoh9ACs
zY1z2ZkcEk{>g%i4+}qnUw_FlXbg9cY6VEku>Qo7<5)C6GqaUe>iHR2V|7_O9>|~Ob
zmR3<!J$U)Du&AhL&Fs_D^$%aaF8=-9-NUm?vsG>_-yzyy_xp`;&dp7(8Ie&@QZ==;
z3zsiv&(D7^_I+dieY-QW&HL}OGb~xYJo)LVsi1=W+uPgffoEC-t~%S+YsTy-VEpy#
zmxrI9TV|$aP;l_aZ@2T6&CSJMUt7zZ%v1dAjALo3>9)MPU7&h-!2$+$ez}&369uoW
zjc$MQCTHV!bx+m>6DA0hyuBqlT|eF}HC5Hi+q>}76VDefUOf2m@i9Y#eBBSm=jY}!
zGq||8EZDI_;^@(%5gU_O-TGuYw`?()GIi?0O`C)yB_)5nSlqv%{(s%V__CG>;lf}4
zEM2gAb@z!A9ye~@WMqhmjTICXWp#IVcX4%1e0FB0hrj>vNvhrg0s;rtn`d9su{$}>
zs+5acOh+KQeo_cS)sGJgJ=VP6`(5tL*|QVp&%gi3?$P7Nfl*OiFJ5H0xVxL*R@2k-
zTOwhq_~fe7$#|~4RbL+o*Eg5Fy_NXjKx0Q&*CF}(Ka30#b~QUr?BYHB?%rPQZ~x-L
z7*`a6Yt*11p}PNn%TrQP6qJ>j>;HZgpJ!X$CTCl<Wk<hzzuaCEKF@zqitG7T-Cr2R
z#m&7mYW}4CG8q{e4Ua7fWY`)0)X(0=s9>^A?_Al@pYKjiR{!wj%aLAb^Mt&-K1OD?
zga-#2BX*bRPScIP_R6lOr-y+--G5$A*(J?I`&QJoXHDEzAk_QQ`{A)(=@TbU3Py#6
zgtXkR|1TT6tHkmCzFNjB_bo4nI3JyNZmxCr-u=f!8=`K>1<c=(e`iOd?`$(geSQAG
zz`z^Za;0r-ZR2l67Zevi-tOp;9J1fJG>*X_;Q+(RfAvA1raOg(iXQ8i@4s>-1T+Tn
z>FH?++bR<-ZtjPVA2ajw^M849k@?`kgE#ioT7UZVDIg@Ig_)f%;p{Ba3s<g)Xg<C+
z>zHW6we|7+bLPm{)cz7-=aUgw#c*X^tTn^e!^Zq_HU}Ob@BjFE{r;pQ9fBG<Ixcl}
zc3$4zt=s-SIVl_x8hY^NP0409-b0Pd>_2KlLPH<Ey1H7zEJwnk@9^8(+f&PhI2BJF
zT=L-U+p~N2?p=EGi1zC2>+5n}U0HeN)~#8L0#%llmK)R0&oewGvAg7@(B;dQg)^BO
z*2eFTd-PY%u4YD|jQXavJByzi6&Dw8OFYc>?afW&YYUy(Cz=VX`6N6(-k;7eqqCDU
zxo6{#9~J+8x23*(`SQ$>BTH`15Z8&gkX4hInCNq=KFq~+<>&LeS1}$qbm-8Mn=Te#
z|13?&%<TO9{Cx6@3kxq?zTCWYscPE!dA%(yEE3Yv%q#w1esidmTf(l!qNk@vL4f1I
zt5;p}^?w2%RsUi9sKp>DEv>Ak#s*5cK0ZF6L4=$e8yFuxd>FB>#!^Q|=Lh%Iyu3V6
zNwRL8-kY~?85wM=zBnW$DIM#PWEK_{mXMTO7{9-cgOBgny4c+*1<yDXPaXUFeY?l(
zA3uIDFx36~nLd-%B`){j!-q3WGAFr+Z#ucUvF=_d`|(21u+5Q9;oG}9=dXMY9z)Fg
zn$vvfkkgdu(@&>F+yD8%Z1?|9@y1(OSy`XH|I(h_+RFOn%a<v#Y?Z98?(WH7UR(ra
zoE3qK6Oxlb!$DhTMuy#aoLe<7rFT-jbk4m!lIiE?O}+W8>iaw0vfC4t-B0E0zx3n!
z{(ndPx!gNcf`Wn=uEgh`I(N=3FAv<|Q*~b|F-a!>@n;qODSvK1c)fmqSQ$slo=rhP
zK^HbAyGKMvGf#Nq=pK3E^y$axhhz8G?REN|o1d@$?W38k|0cKOe=P#7yJ~)J3ab8<
zer^t9G7qTgyp$x+zUREKYQ0m(8N*{A9{1ZP9cW-QFfjp@&1$~0TBb}95fKyn<Sgmj
z#v?dO<-);(jNIaSE)fwDRo~z7*4EaBgoQCNC@Cu&CLQ63h=@3F-~dDI?{7!%?X7mL
zx^%o>{`iK(!xz@YT1!YvAHIB9IDCB^E5nQ#GZL<?iDY<{e>l&^|Ju&t=LS_@G9sd)
zoWjG!Ykz-xntni3-LBBYHm>me<QR|7Qy6T&IL=zsz9%mJ(Z4;{uUy%n8NAHo_k;zl
zt*p!k9zA{>nVYL?Y-E&VoOULm$1p4+;snEncXxMxek&_0E1BGLcBb+2n{OEt8XFsX
z43E8f^=byFADesT%$XbW>;GwPs=2u-wa4(7-QO>l)2=_Z===NY^?LnYe;MEY@H?Nc
z$XsxaYY_<DT=_YzrLFDI(W9(|g@qdW`tE*ye4xbK)WnpLk+Gou|Gyuv*Y6Jq3OdA}
zYZCL|%$YMT4h{^LE?+Kud&{(?t?ki`jme<$A@AOv&QG6;Lc+q7G&MQH!on<yo^UWE
zyuP;f#{PQyIdkR+NJ@52nj|D5CYE$_Q)<PpFPeHWI~a~h<mBWS)chzgI0kCY-?$M`
z^YiKS7dJL4_sLiuy1w<tuh;7jN*rG1J3Fe^KL+e{75$Qf(=~i^bJw1je-+g3PCC@W
zxn<v+>+kRF-R)97XX~;ZJ0#+3zl!SU>I%xs^BWr*Gl0gC%ii7TbZ+NcSpEH-fsxUp
z$(fg*?9aVzR`ciMafXIhud-NJSRTB*y!^+H$NfK__Ljc5z<7S1Ey(7Cw6wOC7M6&}
z$dC8e$L*Ekm$z$~I#u-Dot@3c`{k2wZOQ!e{q%JG_IdN<9zA}1ajCa>-Ol~{?fK;G
zdS;vFZ<Cm>A|=0G<+*1ZX!JfsO-+q$>C&a3(trL1sR9}HV-og#b0<w=l9iR+v17-F
z`M$osA1}Jge|&x9=+VwIb8d%xe|J|<Sh#u8B%z!;I|4O6GB<49YT74f%f(<(@j-!M
zf&Y9vhKB6x>lAHmW##MtYz%mm9}pgX-2dvOn3_o$HG9<k<_P?@ImxYBzsO|PtXY4i
zFmCy`dV5{5RMkmkw;q9?dUkelrKP1#wzcBo;xAskVqypi4mPa#kg%|wU7AZNc6Zs@
ztNZ<~t&8P;@bvsa6%`eRANMz#dU|^5uA4r0Ztv^s>pur;n25u@xy0+Ar>AGdj}M8P
zk9u(^zFNL&6&C}jf4K1J)~#D>US8aOuZnx>)TuiPAG19>JDZ(hNBMiXPoF=#3dQ;Q
z@;3b9DqgGlzwPfn9dT6^6$fwc?)7QmVPR|w_O;)?^6Kj9gA#{(B#onbV9CKhNVVSG
z-TlSOmn+W%FL(KAWNiHLwEq4rm49Eo$^x||o}8Fi(?7w(Kk)h0g9jNIKAf-rCtUsQ
zjpK5^xdo4p@v^Y7DXFTm?%K8M#pUJvLBYX+v9Y>F_ujvIr?+Kq+j;HqbuCMms?M1^
z_v43$&U36vx#DX+vQ~Y2)7dSqzbO6uyqewb_x<Mk_U+q=lP4V`A|ya1sLyOO-uSwo
zs-QG7&$fEes#RQ8R#ty<r#Ch>ZrHlj_4>Nl!r$L=bMEdEwg3A?*zU&z<{lYKp@$D2
zo;{|%PCI-ZhwS<t&pp>I*%{uE_f^H$vv_rSXsD>Pd7g~1iAhSoy#2Jo6y4vyUa$Wd
z{YEcl#{vEGCr>6aH8%X$Q&4b7G(0(J&AHVU_V3Tnw@(iX3sc&z_v*z9gXHAoXYbyf
zlSqCuJAYpy!;Q1E%_Wn2e*XS#-1j)5uyEsrZ?9gxx?%l(&*e97C(N}fO_G$9>@hs1
zrKL4v?%deTZ>`GTohd3Vj&yQj+W%(l_IpV^SMTS&eD&(qn<_s)KOJ@T<yU_kx%#Ez
zsI9*)<K0)DapIw&p`c-i`F6Dro<3cAq4xLh-;0+lVfps$Tg0{;$*k;bMuu(MwyjvP
z;=s=0=K>NE9c!bvYnkXp27IYBH8OIFiIHjJkz{gqc8-XOdUTlI{>abI&jW*l4}Y%-
z4h~Mt$?3_vyX)ip-KDSDgoT9{zAcn#U$H{t%zS%!F)^_V*RQ+x%h`VT`Fy^zu5NF9
zyn+B|d``aR10xSF@51%#`P0+WYd)P+2Mr;vS-aLS;Q&Kj)0Q@&j#;y2Srk9xNjpD}
zH#$1{#mkoq%irI-u_2N9(xpoY+1a<VY93`(?Rhj$y>b!vJ{Q$DH#RbZYKL8=uMP6<
zSS&sA;K>t~^z?L)`045T;a)tOmi2tTwK`n?$noRdI{6au><#nletEvw{rUO%?K^Ch
zm6hMz+bg}h{C!^O{=2(M53dYf9`z?KI9NC^FmT1%wXMsRsqMdW=Z?(p@9*<VZ?8S7
z-nZ;HcSrfWC!Le*13CZw`*(_ukzqsOW49eUcP4&%ax&xozP+0cPn@-CPI%}gi;t^~
zrM@XH5fl~{1|@X`1&5mp1w=yw0~vF3a|>kDuW75OxZG4U@1C?@C?q^Q`QxLb2Il7C
zzubkSrB82vd1q(w=I;!rC-?UDMmRHHym;|}1>ePs7r8pTKGxLM7QVk{`)^)>lhozQ
zmz_&XO(l|(_NJYgvGC1=*{&z!IYEuX*xh9dSFGrWKUOFc6C2CO;6Kmi;NI%*PyV&U
zC$9=gak^>Iclg{~>y0HZgZ|kSJH?rsJX_CV|L=#gjg5_ftSoPFaq-0Wv(Hs7;sB`@
z-LYfG1Nr|y*g?g4+}<ipYZ<4MzN&v*(<V=DX6KhnI5WfWtXkcIf7=WkHlB<ZI;D4P
zp@y_sjzd9#K~Zt>R9P-XBlnZ>jiAW2wzg(CuzY@<mdU;Sg^%6##d>*hy?Oig=e(`W
z&CJiv&+mWmAYsRj9S#Zt2M!)=-0!QSsma;Q&fm6hp&}cPM8od#_g*ryy+mgU1P25N
zurM*+xqJ8L@u#U5w>cg@djGur{}{1{LW_blerjL1U;qE^qw?PBODk8d{PTR#BBhkn
z)Q2A)9*)?OA-FDfcbm9=oPxGCw{hB;1N!^_G?m}0Was4M)X>&;4hj+y(~r{$j43TG
z-BI+EYybIMx1vDBi*fon&~(YEQ>Oxgf|@>jD5%rokNp1Ue)W6Xf8vQLDJnTRIR^@5
zN=ix!o}ZgLeVzWvKS92?pFMeU;L;_b!otD_7JS;_>z?fY{PnAAJD=<kdjV19x0R~v
z4KwHQFMBDgVqX3(X4(4n=U1&>Et%XSYgN)wD0954t4kueCp9(Ikm1eh_4|@~49k9f
z$z*GYjEvkkVS+$dOw5_CuC5z5HYQ6lJbU!$P~Fd`;$cBShc<2AJah44<;@#5Owd^N
z`ucifhMePlvOR{!%yMoV$hX$h>zg`#`sO)vWX!6+<*+q?W+k4VpKrcfch!@xzd&<l
zjFLX@9mH!y-#j|nT~J=$K5d%V|C<L7HqO7i`(;J_;iLCgtk76^Z<~Wc!^DY#=jK|o
zdwY8`G%Q@GXku!5aeIDzXHw8sCE*r<pNkXaS*w11(FC<u8kyNYoz{!nqcP=5a8OXo
zsqIUbEIDxOm|MyWRZB}y&*YJ?eSp2ol!+4+KThy@tR&2PRDH*ZR}2h1&7LlfAr@il
zVpeW}nEGVB!*sn^rsN*~e@BlV1vQymCe=TlSNizle>UFpj3%-7u0^|qu06pL=<Dg}
zX;JlM#SQ;$m%Qur89)=Kul}p^{?@o~v|D`P!i9|d{QM06f2Usf;q)3bs23idrJ-=K
zgzw{%Cn*ezJoo9Ij2G?p5xDB|)jGsIAV6TwoH<Kwv8mRxW@%U@W@VkKzjp1~v*Rx=
zU%ng|7N!>RSVX{go385rCr?st+`M`4*fF;^GeS0<U<vem_UxH~x%qMP`!$Q-1YC&=
z2ngst&)M1CRx7e(*Dk4*D_1H#{#*O&OQVAVgTkygpb%PCn=xU|oF2W{T?Y;wa>}SI
zc6QOfTr%Iz&Thk|O^5RL|82{=yUS5Q;K0?Zq8~qg1kF?3-&ebE?ONT7b{vYU+9&OA
zirHDjDk>^k@%!y|#w*v=a%Zgx4i0Xux^`A{LPC$}>?i;K{m!?k{N(cJ$@(r=H4ep3
z?uYHT9=&^~XHwobZQ3-Ci*2^m-xAKxv;Fh@8J9<aO#5>G`CU5i@9f-sqxiGQGN>Nd
z;9k7)dhdyxP91+PZs=zMm4149eu}@dDlB|tc9*?9v@Uk{tv&1Y_x}-^H*a2U-24gG
z4^B{Yo-liMcTZ1`*li07iwC{t_XM<VEXkSjM>OH$BG(UJzlN4c7=73BuW;+wwfM<;
zQ2lj^uTemWdE>^7pw6q3lG2Y!%lH5NcH8^*3MHw}@MRN646?83@JO5SFc{SRsrcvl
zccF9pr`8EkS(oR`m?2S7Rdwjb4GE@3hP_o^4{gi69S|L@{aksa`(e8lfkg?wzr8)Y
zr}A^lytAJE{>M*E)h>K}P4~_1?f&l!1J2JEa60ngFu(nSJ3EUR8ag^SM8w6nuk<Y}
zGz?o4(Ku1rT}fA$H#IeN#hNuPZf<OLzg{T6xxat^RqOVY)+*4t5{Hi;KWgaex|Wof
zELyyHcCN6vxOzx%wA>0%Cz0#Ri;Ih=Z##MJ+_Y+$ps#<7jg3KVmm9ZlpVpH5)TOPj
zA6~}MvSLe{ldrn}ydy6zE}kmJ4jC4edR02drZQ+{p~uzF<wZqJlP3#<x~Gvxo#P6j
z-P28n6<pSVmItg_rS;;)3y(X;5Q72<`T6|z_V%E<fBpV{P7V$XNy*6*XU^nwcX!_@
z2N`<xiHiFA_i5$lX9rK6T6H$}+nbxr%F4=XVt0#`m6ct%diCh+{C%A_ZbaxrY;btj
zDZc<TrkYe-T->~Txq3-yY4o0Jntrq8Y^xLu4F!{r^)z;Na`yD}Tv#7(&%(~`ZF+N&
z%8M|6Cl0~Mjg5^bc=r0Hzsgy6cCK}~%eJR)-t?R};c=5)Qw=<POXRYgR+ayo)6auC
zq@V`M^K)}SgLrdnDup0}l?<;|-#$OnnEm_v`^WA7edND!^XA9b%a<;F`1kw$_RdaD
z9v+?t&z`kSm>{sQ_R5tj3CH_nU)<eo&cnk48cFb(XCqnu{@&CTy*r}1zo&{;E%Tqx
z*Y|kV-S;0J9#$0K2nY#LxwcK}_@^%~gF%(ZvSrIaIrq!U%M+(hSHF^Xq(e~Y_n$YL
z&mSn9bK%b8Q|pXeI3^mavF7LJKYRQ3Zr1FM4i3=NFayV4F`bA53>!K+IF3mq$L=mm
z-M4Sw8vprrJPgL>=IK3#(`L*#@#V`Gmuu_?uC0$h|Ni;ne!Hw~z0J+ct5>WL*xkD$
zs;m6{y}dn;ccguP{QUWGiR3p|RtEDh{C>51eap6)^XH%6vSrJSBb~xW?}a(*Y)(I)
z*38Z?miheUOU)~JKR!HEIxZw3ae`sPa{u{WTkbz=X>B#s{2wVOs(S9cbs!IHcKNjF
z&+yPt!|3SfWoy@--Ijm<+^0{UZahBTe{-4d>=~f)<deC9K|(V-f7<i&^V84IvrR57
zEnSm-ex8rFcX#gHT~lqVzI2F+h-_$P=QmPTR$jJp<w-f4iUX%kp9amceE#quVSC=)
zq|ne%9dq;PzO&7G858#Z|F=6LSLI^N9{>4vscmg-IagK$>gekBPMtb+<Ec|#(<V+l
z`2W$)%Fk-6*R4wv6B9dg_N;Hl?A>K=lNfHyG)_MP^0Anh*qgKF_fs@AHP@_J({uFL
zF(YANVUYFzlZ4fOdT+Y_EZ|dpZQ!SH*-ak*iss&X_~>YN#g`X?)AVAyM76^{oVNe_
zB{*h(oveGGj9{d?mKN8sW5*a8jvR3T4Hci9q{_j;@!<BES*G3kt!1ySXo8Z1sj2CX
z`u}!*b1WFk%gZY&Djs}zc-W%mhXKQaB}<+x&Aqj#aF3v%U{d&tkKeu>dv|wt;s1ZN
zC9ke<G6+aXaamhigNnC_6DJCV{;vG@$Ffh}zR&z#1vA5gr%zeq<KsaM;;B=o3UII_
z$@Z@bkyKjM{;GV%v@>UXR$iO_ddB~?(c2jq-tYZB??icAT%6MBs_*a4ss}NE`iTv{
z3O_89ns#?@wYZy`+YIA$J~{ik9)G)^EY58_jVo7by7fx6US96c+z^qga@8cxQ|k+8
zF$+V%mluI`KaX~c8x}wF$;im?h<SVb=FOS@e|V*itLcTV1f_5No!|bve)WohLFRa8
z&GMBiH8-6(aKPb(@$dZ9-_NdHzi>ey>+|35_miKUnQ2k@h($<9Xu`B<ZNba^9$r})
z{NsH6zh=$gWgS=DgnS=QUE*{ev??b*zkjiNKWGjlF)=Zr=i&c<@BgdZ6Jv;oi0}}p
zPHt^&{ZkFHJcR%1`v6&);|EWk^jwvDV(at!JB!m99<07;E+#Mk|I*j$@9%gQ{5v;!
znN-zl-ro!jjm+#xx3}ebczGS#oPNIG%?-nhj115yywKK6ZBMN)1v2d?C#x%4T1wu$
zc@wmv;laV?i(9k9JGZNX245DQzk2nmld-@muc?Yo9W^ISfA0T$&N}1zI@z+fw^~6<
z;{4~?IM&tKf#w4~eE2YZ-TQ|R8$qR`g@wfJ?fLF;adKT<T?G#gFs_N*%r<M*ED6&r
zk-Fb+%?o7M<>lpVDn2lnnwqXywF>0Cfbj74vbVQ7uewF`YJXW1zhBPM(h?+hb#=I5
z&JBYCnfBY;^FO~`?l+g~n1osWy&moGbqU|z+|0c<&Em_~uM?+CX#ow`tXabo85udl
zFquuxzE0=*Um>TE2`1CKkM8^>FC?T?bbG<JZDyape@|z)adNV{Wb)VYMHQ8moonh}
zURpZ+-mA#CxN|bHva@p+uU~)u-=EL^8*h0mT3T`W^5vPGot~S2M{Y=H^r%ixPd`>D
z0~&2xx^!votuXJ6CVN{yKkl~|yV*B$rsVHWr}bNJc~<fCUc76!UVqnZ_fiM8^4}-^
zDz1NddAYKZ5>x)ZpK2wgr5E>Bm%F&Qd=OXv`t@scZ2f@-#vKI@ncDc}`IMEFIaru>
z?ArC{xP1MQS*F<x3{_QC7S-Q$($3Cm?US|sBwC{8H>cyum5?tlFT1ZX+oX`$I!`lr
zS%YC)r?7fgjPr!jt@C|nn<XCY5`A%DA@i3nUkoxXDE#^Ldc9J4{t72>oEHB7t9wb!
z&d!eE!ZL1$$H#h|Q&N^Vafu2a&D40Hchp{c(V`_kE7dn0MOlQl^V^@*t5+u`B{kXA
z{(5j~sx~N^K0iPI@$dKh%2rlVWo2bkesC(fa6Xy!XY1Cj8&ggSfr^&DzrVMyTc_va
z<6}_&ujb0NYo89Atx9-)ZtepMzctgRiA}XrYuR(_iQTjPiHF(V+}g^mr>AFNV9?Om
z$QTnFyRrU%-I>|u{`Yo^-+pwo`=EsI>(Jof#cv8Y6<xH7-XAKGX>a8gPkMN$_0v63
z#TEg>i#4FeN*ibxtpi(ayJX+(=MN9JC;47-yW*Ubv}lvFLQ99^t0(iPOlk3)taegK
z%!xyhODXiza!Wf7#V1!?k`d;~<lfmKD0BQ_xBk8f6*Fxh%UxBjf^7Wi`1$8*zNzy;
z?W~S0(2_~w7T>~_>rSfjN_Xn`wcwZRdVbJc=f=Rleb?E~zIEnMeAWK!n_`PVDQG>X
k6L?)M&IPw<5?}tG^M89$yLZob1_lNOPgg&ebxsLQ0KCXqxBvhE

literal 0
HcmV?d00001

diff --git a/docs/_static/employees.png b/docs/_static/employees.png
index 0a72df2a28ccb7c5042db28cdbbc6a0a158874a1..b21153cc5af6c662788cceeef1871d096f57bd3d 100644
GIT binary patch
literal 8550
zcmeAS@N?(olHy`uVBq!ia0y~yV0gm7z;J_uje&vT_j~_n1_lPUByV>YhW{YAVDIwD
z3=9eko-U3d6?5L+t&9js{muU2{lrqXn<B0Xrpzv`EWWHqPlX4aGSL+k-Cne^;_NB;
zDbuDc`MGb}`pnE3H`DYwH8ljgI-)W;7R}69v~-7~M)xVR2IlYY`StyHjG38xjnilR
zE{-jZtva{)4*Robb3V^`D%jC+Kw@%J{4EJ<reinmTPR9S7Vz^prg9|cdehIJKQ*+p
zF74VEyxcG2{yy95&ws7mv~S^yITM!q%{{a+`S_M~^^ZE$rS2-MJO9;p=e~s;Hm6R_
zC^OHy;}8}mCRhKb(7ELJ;x#>{%QkEfaPN~bjHu7zto-=MwdUK+bT;k=!*AwWTh^>u
z;}RD)&oC+R%$tvj+Q~wPI8V-KDR44UQ=BuQ$CE={CAqhtwAA#9sRzTH2|cE#jvi%o
zZsP%&RsKptgzL_(Qto%}-m!5v8L~0_aD5vWHq(b~rcYW=f`oB(&52WJW`T^4P|mxv
zqmh}NPhyR|pT{w&gXf)%(vJP8^f;!{!XF6@fEM9NhMW&uQhb~&6eY7+?D<d5X!-DY
zLeEV7I=M-PninfK$tDZ39K4}uplq~#WxC4z2@D@@Wv@@Xu)y&cU$bODRFu@UHId10
z40z6|2o+se;K;$vZCoaC=D-<4#mXsD!Dg=!{9~h%EOZELzt6wQ6L)u)I}5PPwR3Lg
zGcDV(Xl3y7uEMwX_TIkn(4g~ybJ#Hzu&WF^Ur*Te>Fd{{GmX=GWZ9B+)3#Ng`1QQt
z_qVr)#p7!j_4V~nq!|79{X6;mJX?kaVRb(R6&04;+uK~H>%|&mU(*p06U)lY{{HT+
zhlfYQ{Q2@JMv^tPwHp%;x1}8~e|1IEXO4y7T&vQity@j++___rc!*`m(xoe>RR8<=
z{OG>t=jN`y=GQN0d*o~Vzn{xb?TX!9miXer!h({LmgZ(=xw;>TYofRFZQZ(6DmlyV
z=bbw-dwx9XesOE7_L{Y8A3k`{@Zdp0&Yc~B*}r)hObec!k&N1u;(7R}8*@Waa`M)7
z{r&yw3@i;bwY8;r<)@}-Chc85ugdFB`Q7Edv(2{T-L;x@G9~LZ8?TfL$cEchU$2Ir
zJaouu?YSma?k(Ts<>l9J$~)dCo06Hi@|s(0jG>`n(#^lWzjwdhRq}GtB|ksEz8&lG
z@9)!keXr)TZ|_^?1)h`D0!vFvyH7uV@?^s5)vK?4dVIV;|I>G2X=!h%ee>AD0|FfE
z|Nq&%aF_M1RYIFqp5Iyg{7BVT;YF(Rw`?)#&CT>Ww(I;vWp|TnE9Xymet!P-AMOkO
z9Y1ua$#0H@ql=5z(n(gOuT<9ke!Kntk!{!3$Ls6GZ%k_4@#jDzvu|Gf-}es1r(b{C
z?Car?@#VYT)E1Ksi?iC-@Y{Y7h^u(m+SVPtRWEkegC8FsYiMg9j?Uk^bkn=1)8pL=
z3k~&Rb};z+`xpNF`T4o&HdmL3y;Y`N-Q6F5zu&KHVG$9tz2@g9wdBZMC7L2!tPR!A
zk7Q<MYUt`7ZDeM@ur)iJ!NJ#;*Y3{;XNHE>R#r8?IU3jeeSAdz@6Eq&_woMM_pIwy
zb2DsCKYy%O+B_g8re~@5^sdwPKc5I|Og$ww)!)}wbh^5_`r=iqxLR9VBX$%l+_9%l
zGOT~&e-#r}wj0iMUoN^o`m|?{P2tYDbLXB~c;o-y`~N#%Ut1r)e&gDe!OK@2DgXPc
zbkoL-iVP{Ksji};qFJS{zD+29e{bow+}mC4%WmGhsg)~hR}-=3@w<0=dj9_Y;?vn#
zSp@|HOG`~}-o7o&AZ3uy5D~UAWKxWtIzvi+zJF+Fs8;Ql_xIy-w2h57-+bEHF=x)4
zBdMRCpI`pvOUbI0D=+@CzS8o2!rF%Q>-9T4UN3j=my>#3`tp+NpY2npPW|!TZ?4tK
zKl}gf-zsUAGvm~MTN|4rb?@)(?LIwSKYQ)$>C@XcZ8Bo`-WO6+QxkH{{@07ej}AYs
z|NB)uD=UkEftj7JW%_h+1_fnhW>!{Ki>fagUf$k}E8fX|{`@&GFp!Z!Lsz%8x3~Ay
zS>c&8XC~dW|Mz3@&8Lhj_B5w`eRY+ChsR~P-&}**UnNJ59b2?y$&!on7g}bAa%!^9
zl3THD!-fmq*1Xe$_qLZGK75#wVe8hd9$sET{Nb#Q0iGvLo${KStf8x$TUN>N<I81#
zK{2sqpV-$dSimsbJpb4d&&dy-J!{Loz3t_lb(RlXu55O0=Ue&5USFSo|Nnp13<qxA
zlH#}fvEbUSckkY1+}@_k@Zi!??;QmXn@;_jU-!%NPV~-QyAECY^#1gTQcli0*8OX|
zPaHVlFjcwX+uPgS|G$0tlJlh_>D(O4vwHE@-E(qu^6u^FJUiPw`Oc2QM`er-uCA@O
zc3SOj7Y;hVE$?pE*6iz#zP-I|QT|Rw&1Z(fyHvLxiHk3Ocj@Tr8m66*VEE3KcdTE&
z|I3$>DO0B^nwp9lr=1Zv-PY2w;>y>LA07AC{bgYA^z^i-{bj<ig69WA!{o`rd-m>S
zyi+|P;b@nrhK`O)YO3nD_xJh3!^1h67^0)2@9e4EeDmq!$B&O5zIj}}UdGYU@y5Pd
z>!RY~ja6T>4EfU2pNsviiMDl~w{aWG7mF3l4Mjyo9Ui|^+nbu03U@AFzT7LGTTCaT
zC}8=<*X=J~zLa`><-NVN_3WJ7T<N=P-rnB7zFv>NS|_$TY;BOHItNqi{<^&<i)Psg
z3JU6K&7VKtKP)WFcUpf}*QH<9s*}zw@T;q{Te@V4#H!ubOjjtguHW;i>saxz7cVk+
zWGptE{AFincVkQD<WmnbYQ@CFIyyTY9UK~N?ed(gw$OL>{`#c{4<7vR;X{D-_gAae
zKRT&C|BBS%4-XHA#?8Mt=hM1%>nh&w{k~-yD?@&MzE0GZ6&H<y4xV?OwZmPmlI7#a
zk1y`-HqXh)dGPvm_xk<+r1JOw-F7awrM30pkB^TzxVf8Guhw3(X3d3_!RkIU3>f$S
z`P5yp?%IUiyLX>bPP=u_IVCZ%v89Ej=F3I*iXRW#6{nw0%+Btv`}^zR<9>U$pdg_&
zYu84{{OdKpci`XO-yh#>K7Z)&Vdk)~un8wqUfkTQE~XRFkbJ!F;K`Go&*!&CX6`s|
zvemkD$%2iyAMohf*u>bloI8EmI7{b$O9)>i?;L*j=&P6Io_VbdS+r^uS3AG_v30S#
z8SdN;-o10Dq@~fdm^l;HI+T@}{rU4JWSZ|Rlan47H`F(=mqsb_^Yi=6G&*`Caf8@{
zmK@eKYt|@CKb@GK-oAWZ6&E|dT+80Qdp90V(ml|=rfNg#X|bG}n~rAu{r%&|f<1fg
zWc=NpW@E3CER^)(r{Yg=+u(V7ijUKe36Q!Q+%AB$m0E-+ZFG~Us`F@Eaj!d4#Y2E)
zOZIiXqMdhcEHq$VwPJ-sVWDBq->){+-*oo<erN6C?k>G(cRaYg;qumMiOBQznEiEo
zueIk!zTT32oNw!Q#+l4^AiLnLF>tm2uqCC+xa38^+Rw|cOrJlW-%(&zP3#g8P@}}N
zW8wVvklk+%o_F3f&8p_dhK<e!m5{bY`x>8oP*ZGc@rffxTv%9H9rdOkK6{q8TU=l4
z`PP(IKUBlt?7O+ERC}54Y_)s+s{%AO)cpM9roPs+d{2AI_g1Hc2ejAkVPc5bl)||#
zc6ZyMLryi{Zl-ti_nQ}$Tsm6qQ5OH_$K!qtJ-uUdEQ>?tO_^bw&ezr5y|Lh-(_>ck
zM35n_etvum4_+>x9~Nz1^u)ut{c=)Uo!lhhNq5D+K3|!0&T8eupNf&IAH00Y$?)Uf
z@Ap@)y}i5p`h|xxcqUiKO`17R(Yfuw(W9*M>;GBW*w`3kU(-49wCKq3<H}Z6x0ZaH
z)ON&Pv@HI{ty@WFXPGJ}=|pZ~;kWs~aBFLJd*tRcMH?HLbLY+-;|rW*p?I^_IQ5js
zo12^29UUDvY~AYG&L=A%DcLz=hD36^T4c@5=9j(8E}po!*gg5ni;G#Oxw*M{1t*<+
zXbWnlah{A&=J{)*BEQLKZ^YKD(C$~RZf>tEh5kNzt~k>(NJHcp-@?!b&lP9J>BQ~1
zaYJznR}CL}TNcv(1jqf63+J6z#eUmS@lh!#I9Rn*x9IXRUk`6@P%E)PFJ?!=8-bof
zD)ZWXyu6%(f+lS|obYC!ai{aO8#f{Z1nbYd5SEtCezSgV;0zZhqclC_w6f9d!=DK~
zkVN6_0cx*44)pez>BClDUY>j;NvMP4^Ru(flP3$aI11Qzc6J`)>)p!qhpRvB*7kh)
zYipy^-xx$_AALUI?3d&6^$a_{cm4S#zRA5;YU%WE{4y2{jshF1zvu1Ua@>boJ;nIy
zwQEcbw|oxvyku5SG3JppV)^|1JUc^0b@l2w&UJskUQe>r*VjKY&sI8oUCcq{ew!wC
zxe5k`1tD4+%ic!)`1$kTxpRDSa&j|FGKKVFcd;;3yxaNQpyo#b!vW*-Hq7ek%hQgA
zUw^+gdb>gDDG>`x%Z16u`({{`YUSP8p*U^z%9RIKg|2?^{yo3DySs&z)uQ_U|8DH5
z+<ffYx|p3!7cK<cxOsD-|9rbgm-+4gd|<Bn`igaDOy9oR->YnwO_?*NC-HFG!Gi}G
zw{6=7Di*`m#heVDW!|R3$8hx6F)3>vB_%FCJ~aj@`}o?gQzOn@zC3xE|9rpNUtbg%
zuI#I=R#NKf=(rGZ{q*T>5iZuVGYp+mcP?I>y!p}RFJG3-G)}*?xZiHowc{HS4<9Mw
z7T3G7OZI;4_qkrx4<A0fvbVZ?s*#_c-;@ax9Hvd1rgd6YM&`w}wb3pvTM8e$39&dP
z%WqCQn^hE@l$`9z6@UKEpBgVuPs5OMcT>JsF*^zv_y7Gi`<lwPZ{OS;92%~D{l8^j
zh^%E1OZK%j2mk#1{PDPa{ejb`xo6ItDPfS%5Op(lciF>-?efR^?f-Q&G%#q0aMk?#
z`J97`>(Daa*%#JEn~R8xD;pUJMQ_hL+9|C5;p_GI<X2Z#O4!v{JbL`tu<Xr^wBs`-
zOlUYa*IHRwnR(y7eIDN4hj$b{{_wcpe$l2)Lff`&yRoOz*v8gYP+GeC-rj2Gl_8HF
z9Bh`bud{jd=#fF)pNfrp=USI1eR*-w!_%{I?_OIaW#x}o!{Za*+}POB*LUpB&f>z~
z-*SCsnQ$KOmv;{f6Z`Y$k3s#v8k?_If-An?Ex)+foj)QX;=!k<r+>Uy+`pmjZ<ULy
z>&vej;ui*(SY6Vcd{WBx{PnQ^=jK}PsQbI?U>@Itz-zx>{C>Z`y}6m0VZoLyB3?^{
zKnd~P-Q9u`5*-T`DCFGS#2URV=VJ7HRaMoF?(W0Q{B|4+9Gsj7zr4H*N~4B~>*M#Y
z3p#%67@M+NkHhb8Zwo&^^PO7i=jV50Qz~~(ZZ0E3{{Fva`+mLB=8?CP0kIht#O^Me
zVV*Cy%zu90r%y#PRwW#%si_`5K38U`tX#QLtxztm+#_E@N_bQC_jfPu?XB*X{=58Z
zG_$?Ey`d!IfqVDlKyB}1z0w;K4l*%(UzWqo$$9Y3&f<?xCi}lydVij6b=S#=<#jR#
z_BO6eKHm56#6;y2=gzs6m6_H3|66`%XEFQUs;@zsw^xVj8%n<3#?0{R>+9t~>+&oa
z=FVHbx9sgKzuSwoXZo~p3ad%1-M8<<f^)S=>FLY2z1e);?(jrqcL7n+)&mC|G^Tp}
z`EZzD!m>zZ-`{W1d%wJX^yt!yUrkL+KYssKwy=<pulc~p#l<BcBhz!^M#PUFKUPfL
zzG1_K8-B^c>#nJ$J2^F7doCNkCgNhxS|j=Ix{9FY^o|`CA)%pn*X#KN6%-hRt&8ad
z`QY4K>l<6M#cyrNY~HcMqWR1G2@@KO)6XUR{Pc83;bXRa|Nm95iP<T1xQ*92FmPhr
zuNBtI{X9G_cvqjDIC*mOg$n^Eo)%S9Rjulk@xEK@d180@dnFwm9^<q#2i8V!f9Ec)
z_WZ-c!vZXf!fHMTuC5MW7@`#z8{2DL{%*mxZDMb4Z4K6p4+v;@^(t%c@xbfnw`N~2
z`1&gJ&)4hm78M^9=2bl66cH7D`0VU#4Q=h;?zLau+!S_h<2g7zzOHkr_jDz5bMdQJ
zuUeG85^3X?=W`S|BCYdf<*r>)%I<wG5fKtyU0nj=;_ct>*UO(gd9v#L>V=`J!#bxQ
zsQdRby|6MaPA<i0=8kv0=JztT$nI57DJ?YxHG%DFe<`S_xZFQGd(D9Z4i(ka$<NQt
zeQ|3msD1X}&6}Q?#_3La)05xb*~!4*eY$%2SN%O7n5@d)toUx><mB|=;loCM`@bTf
z&g7lDcLjxnnAFwPdt|M}A|oRom0qq-I^4#)Vf%LR<;L4LZWLS}y6?*+?+@R;T|0bj
z#jS0*(oW9KhM>9@GL~?ATP~<s`Q=`?^Tdf0HFR}dpP!ri@zv_}UDu=T-o3jpKx4wB
zNlmWZVh@}7?ZCcxa%*e0pnyO_`Tg4P`@XYHX8N@K{r&y%&gb)-r|ZQgBquk6iV__i
z9#CGNZ&%B3$NG-6S<Z|darb3pWG2j+(<7+tcHrVgK{+|Oh;2ENWp8dYUXQEh)zj0f
z@;ni@w@Oi0m)GC^uZfJTY+`<Xf8F0-ifU?X^J_kJ%58IrO-fRFc4p?{O>6w;+pSo+
z^59(S@^{|zc}w5llRbFwV8rgS+|yD!=7(Dz?~!z_|NHg2eHOFOF2e>%Kkqyq4lXXG
zr9msV)jT^h^ULl0{V%mm)_Qq+YpSTU<lW!rd+**ot^0qcOc9CNk`Wl}EAuok>{^z<
z#AAUE`DCpmN^}liyeQZ$rhDl1`u+Fb?3yz{Xj|T0tEs<JrGH<UTWyp%!>-m!FMi(|
zqXUb%{X96Ue?FaFTGziaXr)Qn4mWj<reo6Axw*I=ym^!JA>!KF==Siq%B7L}rTsjv
zWmQyEJoxkTbJpqe^K84<#qO4}k*lw-xA}BJ`E1pKxx$mSN-cKlJ=Df49WrgMU9D7D
zSQy)0`K|j>Pfr5{&Cj1dt)@P2Nm=VwQDHG@^5l;{pU-z*7@(l7%^kel@93kW-CM6k
zZcgLP$;}m%kht-rSK_Q@^zyuh=X1;NU0k{6o^a8T4#7tbhv(T=KX~?x%~2pBH@DaR
z|DWLdcMa7xZQBNF{exnu?Cq_@Gcyc3y1JY)GFJF~Wp%u;bA4NCadGj*h0g3tmMvR#
zccO9auab(2iWk@P1Sg&glxS4o=;-Zrjfj}B(K(R~)DHHUV<9N?zv|U(eZ(-HTH%RP
zXQm(7KkwJKZqGaS42zz4Y_4Z++_|&hVN>L}S-C=-mdVF><gOSRTbI2tINkE37&NGd
zJd_7(vTthLvu6*F)pr|X{yE@r#w9Etm#lr(4N-eVI9A>9sb_TMrE6|4KkuFLomu5q
zT$sPVKNlyb;Q#fnRaV$!uFjjh%`5d#7_+t3PhGRAEnhx-Q1JKnKXvBJl2fO=w6wJs
zx3sWq+O}=k$;s-%f`P8CtdWtCfdK&mbM5Qrty;ZW)82mmGM|}F3@=VhRCXzOzjPOa
zhMnC$*TS7Ub_CqtSF5S4+<fZv>6Zr@nV-CP;UOj_wj@BKq;LB=+wAOYDf2v;*queK
zUESR;e?FhD&TwU!uXNO|5=~K2(ThjB#WN2yFtRk%{d%dstMs+l*4*3E+<K*4)&1ry
z`1Gl0)tWU+-n_~A*neqf@$)Tt?CMKgW_meg1w}@B=H=xj?VL18NQkBJ&Ye3i{(ir|
z{BS#eaBAw(sJ->GCS1FAZOY`yi#OHW+f&KnaHsmEP=0K+taX`)@XU@EmzH|7G&ngs
zhrX)+eAb+$;oG~r-i3vQQQr@g&M$p^EwlG%jPNCudEX3Jclk7(n!Ih*rSD7Du4UwZ
z^}?}O4I0|VKF9^}zw&R|m2i;hBX`aBcd;U(qASm;iOR_IJa~}6;Na@Y`t9xQc1~e6
z1wB2!$?E>oV)p0;)?d1Iak2aV$KTGdzE}L}aNRSY^3t{6_L-|s8b6a<qnE(cY*qg5
z4yZ@C)v-H$e(kh*mCqzUesXnnWv#5P&X##F;q=o-Q!?B6WPiC&w>9B4(~a8VA#>%T
zX<Y7GQ4tXVhOIBJK6?E4sH3dXqRr{&CoNvQ_}JUpmrJKh-Q_Emz4Fj@iQEe-PA&gi
zRsYp<O-t22UbCzV-1PIIxT^87o<8BAM-`XCJ|E)LEVRj7T?rdih9yO$fo6!%5tY2T
z+1J;}J}KG>$_ycafsKzICG9KiGfcBlD_no|*VorSpA{JgmlyBc3G157Kprz+(pgko
zeE7!3<X+h}w_V4k&6vUAC@^8hjEsgAKFsP%ICqu3mHPDgvthvlhvfD}%Pcphrlc_Z
z_&s&v85g~3gV4Fw<<s7<etvdj+Qf;Cda=6>T)q0$&OOztg8yWXnz3>4r0UA#tgW1p
zk&&G*US$0E@#Da;V{D)<my)t_U}&i7w3jzGtF!UTtqCjt_~@tr3u9|*E5p096D{)Y
zSR6Te^kMw}U*a+{G7p|SX^}KeTd-t_%i4eQY^y&U5%vf5^UBJ~I5;>C9P5=1{U#F^
z7x&}){{Ow8#>LN{j(XFRKRr1qz`_{5J}xxd*v3W%G_IYOr`N_O+a+gPWs)7usGzFK
zy4bznt({L6RLL|nFdR90bmf$bBH^j2OZ)6gR~&V7`SEOazCp$Xg)O<a#rXL6W>^#|
z85tP`goGSvU(GA|&341tcCkGgJ6Emh0{P=3>)y}L&#N!0);AYpX-qpeXJuIZj}H&8
ztc^BTQqt1WQewEWH9NfbZEJh`>ML_?tG8XdIqy}RPR#W*&^USNy?gh*+^c>s$nfju
z^ZB8-Y^uI!FfRE2@B99c;9%!(-@cjT-ZGiHeQL*xwcGDqif|KPv8woxu(<H$s>B?x
zrIXbB=dIZoFD@?5<j~G1d+Elso%=K*KSke})Y8-0smLHADCjs{KYrP&Ra#b+pHwWZ
zttZc)FE1!4Yf;d^aN*Qc?a)`(u3ek7d9$(a9E*t^9pB#F)vhaCyl9bzx_bMm)2B1v
z-`o4-$rG0*g#brKMnS>c+uM5Q%$@u4Fu(nh;^*f;<yL4|*rkoh$5$jD?|bs{<;qKG
zv(0i}e7zpO9F!HD7A|;ud%G~htzD(7y=?ye{;saCufJ;5szqzo=rB2CUtf2%GWzwh
z?XNE_<<7moZ!W0%+@61b+5f-q>scIXjCXF^QF7H_Tk7d)f()O&e_wv(O311eD;C_j
z6En-Qc-akqPtVR{+bk4SSE+LTyi<H$km1yc69JKRpPqPHmA(=Y6#V<#{=Xu_m&5$_
zE2dc1|FdCS5V|@{P%yBh#DsBy`Td&Uweyd5iwiS&d3!H@^(w1({qyzzU*6uXFDSV8
z_q*L%wO3A_IV1ADrF7q)Pu^24_WyXq&E)X%<x8vl)$7;mpG+~@Rq=7rEi)DtmI=Fe
zSA*iDE~iv@TiJ^Xja}W{p{GJaLMF7fvi|(_D=YVOjPRz=dCqp<ZX`1_G%~X<3SS@B
z(b3_MlcQr}Yy0s1d;SOS6~E83tzLD-*WX|K^|h&+H*Y@t=xF!VUmLe=V`GSjic&H)
z72UaWXYaAl^1P`NCo-z5tGl?ktXT8?+c!3bk20IKY!S)d`&G=XSE_ZQvU^wQ+O=zs
zzRk#r_MdOpyE*;5l9Cb=zwMU^Q9fI@ZhdrT;;l!QLjT^FG<kAhSXi6+y$a@Y=gw(8
zWpQK>{P=UR+OdC=FNka@*fjU?@&4eD5Rsq1e|LYrvpxTQ+?>c8ckj-9Qe=7c+O<_z
zx;r`)xVgEt^!3%17V*hiU6|}|w{m0uf&~hjwrp84X_8Q3fAy~~FV&J?-`J>Z`}fOb
zsp~s;?6|NZaB)XR#=$1ml;mV*&{WZmefjtInIs%wn7h67a2qd6Lr`$=)nB`+zG`tc
zDag$;7n`p4>iD*llR``mk&%&EPbW>9#KCa%$dQcP?(Y-U9s#wqMYY2g)c^k%v9n0k
zZ?08qQxnskKc7x(XlWffIaz(;^y%$;_SpRR@xwuYW#hZAudi=RJuUX--CgOToifw)
zVx1fv8&91%P|7E7*OPp_Ptn9g<lDDzkG#8P&$9gS>FMbmm7kYgdswHhuOG9wN_4tj
z?4env*#e@Xtp5J~4By>?&(E<`zIHV=`t<43jCXDen|*mUJHM&JAotc5wZ~arhi|-E
zb}`%HQgm=|^NSZ53=h2JW=Z_^cM866#x^A(L4gsJO@b>cEvHVIa^d6S<C+>89W0Iu
zy2bS`&9klMVDO!3)Y{R})!m)>{M_6tYopDX9EzWvQB+!#zyEL89Id?P=jMilg}Jr1
zwr(kW>{e7#qLQ7R4H|Xs?9i~ZoXHR{->&w>kxt=|z(7ZFy_f}8SBFntyjYo6&Spl(
zzkjFaPnxvI@ZZYd<&!2)7VecaZnG+Xr}J)Q=RdjJyIV3RpSvBk-CW9|Kw++J^)xMQ
zZB1?M?q$BS-54^SoS0~J^y-whjaTRT^T}FGIXB<lf9lk!Q)bTeT)1!{OG8dh&Wc^T
zqOz->?P{O$N6g$@ak_r|y3&Buhlg5ST)w<szkiYf$CHN-7aG+k-hFuQSg&+v$BV7k
z;})Cc-kRW}7My+h(xsqWlP?>O%U!;ae|=r7rnU9#jt(VdWlsT?UA4cr9sBW`ZK6r;
z_g7a}b27}eF86z$8>%(+%KrNL-qc;?@BMb}+zD~u)G1Q}j`zu4{k3J=HZ^v3b}k;C
zoGrF~9-UcvPS>tnx$yh_et$bVJ5X}u<Kz2sBf0<Lx3{-LPu2eUc>Kw;XKrC(VW4oY
zdbxD^i_8A@stk{gtZZiISBsC2_ww>mijR-qv~8Q3xVSi|@io_`GHC7lNt1-CJ{}c6
zdGu)OlOoHnuda6At9&l2rK2Nq+UD1b#a9-)^RNAwe|J~toy{g9a&mrre0+~8*RQ)B
z6%pZKoPJKFyu5tU$&@G0pSz!)rn~skrJ%W>l+;-KcOnA=BR^;@z>SV~v22o7B`Yj$
zS>@fa@bdOn-WlWf`Ptd*Ew;tJ9+N9hPBnbi9-=k1prGKularG_9u<$5*ph$jv-2i4
zzxj5&txk;x4mc#YA3DRKzC^6_y5`wJm4Jl-2Tq;xdS0n%o_{ar&4g&)x<6jsU%r%_
zcv|%3-QC+a7D~+VQ9FEhcX_XDTjV3#C1S6yuXlHJWIXS6hNo+PZq$uix1_9D(%LFO
zv*IXo^`P-hXj4S3@TRh^?%5lP2F%9S@9*@y6LSvMbbs=FLfSX(#I(Niu=NJ85pL9B
hb?_`XL}<c)_MY#?b1x;X1}&Um@O1TaS?83{1OQ-9q16BY

literal 8244
zcmeAS@N?(olHy`uVBq!ia0y~yU|7$<z;J_uje&t-?$*sb3=9lxN#5=*4F5rJ!QSPQ
z85rbWdb&7<RLprhw=zT|{MYyWS9zUIYb{v7(IFV^a<ng_M_`I_p<<qJ%p;)!&!jsi
z4Sz0FQ#)p{IDO6$iI_)%(=%cUB-IuNPTs*%*xAIQtguN_Dkf6dq@%?Cz5Kpd=Zkk8
zE}so5uz!BVGPb<(UGUZW`(nR`T`jg$QZkTu^mxOPowf-EQe49N&RYyV8o6{w7F%DK
zrJ=3uTv%v0&$gOvsu!!i{`zNSD?<+-x$STz%QWxquGZb<?;oAF|9|B1@&1o*ZW`Og
zYfVjhdTMIbYhl4ppFTZ!^@^+S@vK8n!`Ow_3(m2r6ncAmd;9F!(jr`}Z{EI5%+Kea
z>BDBc`IdjKqa)*@#fuZOv$^Hv<$wJAdGO-Jjh#06vIRM-);tUe4ZW&)=~l&;7lM~A
zT`G8dj8{Zd^x)~!+=ttEou})?`n*V8{nS7>pSz)B!o-P<+~Rr<?(MC9aeKSITaN^z
zwDjy}WouQ7XT+MlSh#7EkffyKi_6RX7jHjWDD$Mq@=1{;$k1nJB>#N99`CcK^uUqT
z&5IT($ygLHEM2<v!<R2DQ>TVb-g<X;d45H8^=8Ky+YHmsd({2rIGmqn+q;X6wW0d^
zJ4Guisi2i2#m~=O)x7iMNy?s&$D}uG-`?Ka%iGl4T=?;k>*8By&!1;MUiiR*PpFfH
ztCdMqRCMdK%Q<y*b#7aA!(8<5y?K+<BW=!idb<Ac#qRw*o2Jg5-MzQ^`=adY>t>i{
zi@kaCX3MFVokgt9Z9I*=y}Wt%_H^Ffp1-*I`#TA<9ErMrKcBO0fBWPKi;|O*6H|k@
z{e+GVj=fLy;`i~mySobr3JD8K-&wapaiVeQtB|POWxBTY|K`NR#(HW^H9K)`e*Hhs
z`v1T0YpSWWty;CJWLn_LkSC8HJI}Q)S6do%a(Q@Y=)@R3b#rs`RV!9x1pJl~5)wLb
z=unf4tSl$P+xz?D(|4Ypu0MJ4;>CfvopYQQy{{~PbE7f!^fbxRodGd1J<RNU2M!-*
z7FPFb3DLS5`R>op&mO+MM~`$0D^5Q7qhw`B*UI4KkM8ZQwy674(fs#9LS|-X?eA}n
zN)r>_-Pw8K#0iEENnuK+rlLpGIvBPzoo;)jl%+9k+O!vUcblvE&Ee>D`LAhN{Y{7A
z#hznVmdv#*K9*6>knrTh#2-&4`+xZIGT3L938$#2=!x^^-E(qu9zA;GbE)ly;NA+~
z#-&SDot&H!5)%WncYgU&!r*XyUF_CRF|o0X4ewQb52nwrZ4*>>d(dzH@4zD0?h6}}
z-FqYqnF<RFchvvick-5?w$C26fS4E_2CH<1HEY*0?wOHhEGpE=^84G{=Gn8Q7cE}A
zG5@|DkBo&t(N39<A3v&PyRR|$IE&+K>57%l)922aQ}E(~;*8m|li%Ihxuf*8*s&hT
z=2NG<Z0i5rS(4kys}{$+Vf%LW505S$pOtaRB-Q8SgM-Z<*Vq5$PEAdnVUj7dBuJBu
zPo`tlDy_xK*^lxFuV?)7>MA$Ghv)O_vz|VE`jnBO>f4)}8oBy$dnAIF`8axcaf#{0
zaO{lX>wEmeF(rD5Z&&!zAk!6b0RaLG4{mMEj;frs<>BFW^E(@@I{NzBV)Txmn``~?
z@AvzM@7$5m)6>f>f3>Fa`AlE$+Pt7C)23be_4W13cXxNQ-40(Fa%FdU{;Nw%xu;H_
z{`qBSXy}u-Z+-Lf@|wQ1O_(sjp{%T|>T_^V(1}y0x)?Uh7CHO(ab}i~kkEpll@H#$
z$tj5KbZL^cE?cl+gTUsrvxg41^9Ke5G_Z1uDHt0I-`<|zzI3T-{J(Q^ttWUbePF@o
z>FHUz>^i%=ynN2>ZD$kiM=LK9fB*6E@t^D=pFVwB5VZ2g-xn`393!WCwH`U*^5f^v
zg|WNKc(d|9JUF<c<fV|8mzToy(-+r9o2R6uJ-QxWfAqve<<e^pE%=^2d$x61w%iU$
zivk5NFR!fH2Wh{)yqsa4AJ_aR-*?N(_KTM<UoQOcz)>e|j|3kd-`Tf(hb?Y}U6}af
zNlHakmC?g(LbrM<w6(P-PMz9X_xG3Sc5NQvi)lw@Po2uTHR^80=MB1zmo5c`goc`K
zm-cm=Ex0~Jt9AbT_{sY&U7j*!`t-+7PENLZ|8Hy9tt$<^7guFOGn=`+Zt9$_7&W6p
za?#NjJ9u^WF&viYkt~|2^1{Q#g(a@`YiRI{q%DGa@%wt#@Bep8Lt0Jn{p$7mx=v13
zpM6MVF>m6Uikqg;!krsd%5w{^Z;aVd;3%;0;tfak#Scw(Rg|_qxw2h1X2*t&cN4cL
zMVvn^pzA9qdH3*P=JI!UGGC=ht`)fU*~rDaTkQS%{r^^(T6lSS9+b}C!x$YMZDC=d
zU}7?*|ICcJb9*x{FI$*=yszfQrCw?Cth@HtO<(M){cX0)cXpfKTq{Sl$p^1r7mwbS
zlX+q9_u1z8Ne>UTzPP-cKPNZ$;<{Mtl6Q9`6%`e4>@Hs)c46|<)6+li^H>`6<jIqa
zn>{@}B2#u&e_y9yudK}MJx#}Pf8F1N>}+msZtjYT3I!b<p6l!5ufNWAes%Qt@#IfW
zPQJLdR$50_H!(GpH9tS!XNCdeY_nWY>f*Ia=RI`e1V4j@nwnewzsc(U91Qy_D=Mzs
z{<gFDIZNr`!-s!1NMALtuCDIt?NyDAj$UiSuqEjzSL59uKPnvmy}7yh<h^@w>3275
z*bwzP@5Tnl3HvKQrx}@>U(fX3{PXwk;J`q^cy)dK{##qKk3X;f@vxm~cGlKeckbT(
z`Dele0mpyaa&NPI&CW|pOWRWVI&AId+Y_qV`Q_C*U4mYJ<dwJEbMC#Fnp#`Wl=}<S
z#Pf4+zu*5~Z$)(Q9)=gE_4hA%^eD-y;=_Wldlwcuzx?+0_LSMPz4iBg5t^?z`6SE4
zoGdN@23I$?OOKEDYietEH#Il2R#tz1cQtzZt_uITR<1I~KUO-o@hsf3#Y9U-X9=&g
z8OOda=JzU`3)UniCf3Ybym;|}`=6hm=f3slVY~c~J(rjJbKjD&C{Vb&qp+Eai|fVW
ze!EAPRfRa`+E!nCQN_&8C-P^5yj_ilsHo_axpRHh{pKwAey_TJneXhd<$1T}R4_9$
zv;H)#z7@Sa?_=e}i4&XlyuQBvbEPTkiU19kviJA*>%XvN=apKrJ+JiRzHhg(Yj%Zb
zExo-xpZm?epU-AD?eg^Wthx8~^>x<D-R19}eZE)!zt-;V)vKW!(vDqN=*()H>gUHd
ze|gyIlecfrKF`m=VX!Oit6$>7L#<6)EqM-#Jj(r)9mmhlFEH`k+WP<hwqE1q;1GBd
z-oGDIrXQSr(DeGpP_3y|Z`s({xxZPLzvGdYm#_POYioAtu|sQDtva;Sd-{*R^K7dZ
zMQ_h*GFrd?->!uJe|~=c^StiwFU~(VHl=dse?Ku%x#pMk`#p!(&s-R^lEpjY=dWLf
zE?=H}|G5R9a~sdY@A|R3S{5x@#CDxo;YXiY?kyH+Y3VO7E;1`BDn@Kfa-Gb!SL~`%
zlb@eo)8ALz^Gn{`2%M1ap>kqYS@yD(AzGj|%2vIc*q|V#jNs{KXW5B~h;V$Ht{2;N
zdAUC`!@9V=T}zgz*i?LA`1$iEL!8X}IhMsNxncEJ|K8e~y>*|=g0R&SXV2y?FaOSV
z_4S2?%-7b(_usGk-OK-SRnW=_bLaNHd6NTbsAXSYcXWzoaKVQMj(flPxOUIWUE!Il
zeq)BYmC2(E)77SWC1z(wujaM3wm#UuQg3#{xBZ7#1TJQ={rBwb?2YyR>+0-PR9N!z
z^8V~wyLRopsoh@!!@{mTsA72V@@40lGd@R-97#CX#LB_P*S385@&|v8A35^i%F1B2
zoB14zgz}REi&^Kl^UEvg>h|8R|M_%!Dch;leKTjye6Ze3S($m~&Yew0`~Q6EPOvvH
z2snL?UB2c(y<NcrhPodQ+3WuA{eJIq*5&*6=imSS_3PDY&t*6N{QWB(<KOI~cKFH3
z$s02-tNr<OTK~k!la572n+|NBGG$8C`RSSok60&6nbIPv9j0J!FK=mS$-&R>o|>vU
ze}BfsMO8N=Hzu+Ek6aq`@a^{dZdFxQU0q!t&YIs>Ff*HWUf#CKM1-q#TCb#W+J}eX
zr%#{$DR=(tS>DC&{nxbqe>^V#c`qo{8WunES+Z=|qD70CT3cH^JUtH{Y-Tr1KE`uU
z)!q5^*%^k+pP!#U?r;CMWz8BLjj3KXwZEps?+kA4?)Kh$Zf2l_@f~HOw>i!0*RNlY
zclKu6tm0Ky-S^qq*){Finth$?RouRsndgmD=9T~Y@{(zH>DkYDcXmuXbLLEz?YV=^
z?7@kN3-1+gtNNO?)@pwJzn%9!MQ_hrTe>f7bFaMpy%$x7+xgdT-s7}zMX{LEl+C=l
z6Zh5rR?^hu3|{WnI(f3Nj*iZS?fLO8uC9sa=h?E|jM`ISIBD`^!}@<U71h;;Po3gQ
zOG_&#D?4^#qVmS-?|Da#A7AX;&R3OtX12M1cI(+!d*gjU*>%aXWl1kDEe+5R*|2$Y
z^URr&F)=X<0yG4~#M+qI`4X<Li*>tx`HlY^3qd<OyBb+{cXt*RmW02*zV0Y^*yJfz
zzD78CiGN7>`P)J(SAWmp4A~zTwE1`r?~FyyMX!cLMlaa3NocwM{AbfMo?3t!()nrY
zqttx%=yt4&-TmqFa;azM=l6%lRW6-rlXcVJ<2DB!UEPN-Uv}QyoSyvh($ceU{koU>
zc9|<EEO1>HyDYoVsjcot4l|@fgj8o@)}s2(TO{^&C>$>=C@66F{q3#qQ{lzD3qrI4
zBO)@+%=O#Wq2Rn{#*>?EYooVsVhxpGD|~T5(PyU7Q4Q%e&r>_Z)Z*GQ5+5NLSG<yv
zlq~uVuL@oLDzxtVySoo8`~>3HZcKQT+A+=Sr<B0re?NZy+<GE>83U*;<`LFk9QGyl
zvzWMeGN=~4v(q@mNb=90KLvk&d{q0|8*663vux2KCPzodrV|scuZumrqww*pFMisu
zD<#>4MMYbmJV`n6v}lf9t(5<KJ6AtHzGr7=x6ha{L+x|(*F8MVmQ`OgEcy;#T<rcc
z;l{OV*KX{oG|s!bYpLk_9UBvD^$#a(+O+Axt5;ebkJcq#SrO>_j2+s(;92J0FL&bf
zY3Ho0Rbg?#Yg`vLc1}+;Sh#SZf>KLc+oLx(H*4tX9({Xz`^JQWO=`REvEFFty~rS@
z8`bjn_jhGWOUc9S{Le32_8p$089XcJSR=?a8@FsZva|TPLH)lP3v27cmo5o$wK8qo
zxY5@t!T2Qi3`0Z1H>L~1JYr&G-rd=mJf%1BaNEJdhn=-!KTAz8)KA!SnyoEvo?Y##
zVnY|_if?abcJ8^@);WFQbi?Fh31?;)o_*UEcLPg932UU!c*1wP{C;iw>FN5j4~Z=9
zoiK4?;uhY?HZu+<m`q9Q?~xN0W>!j)zWr+N%ttfh%g&w_(Dm8FbMep-bjGDuM^}ev
z2?`1_mY0`%s0bCvv|qXuq!Yc3N9H)ElC04Y*VW?hSB0+LQ25yG&hB!47hmCrzYn!?
zKd|7-zP2WF(zjb$YvcCV|NEi*=FOW4)24yC>q<>qx0+sC8_lld^#9-A*|%NYm@~iT
z^V?T^U?|!tbMM~0vv0W$AK7wip1G0|lg#mjD^_rXua9FrUTC%b)%88g{pK<qFZ}WA
z^?E^Z@%Dwz?T3yXW2>vHV_=x-)w*JZ29JaRgRE6a!`{8NfByXWa5X&Mab*Y-!?iV$
z&DZ0qc^NhoJ@s;o{<?IR{Qke+q}zC<*|fE_Ev&4RY;0s&TU(<_&&{{*e|dTNV)uTz
z4I4H%9Pg7gEPE3Xv!^0({oCT_=Mqm$P~5O-Q`79((%05TAD`ac)zuWE2kHP+eSOt>
zxSc<HtEbD2oyF>HJd#Y(($XhVjDGz3mGt@9S>NJLH#eq+q@<)C)8wLQI+0EcukO_S
z|69KA+{wx6oD9CROghh;IrGDatF@`4!|vA$<-KK#7A@-Nc+suD??UvleHnjdnB_`E
zMnq)X<mBNInNt7ZLE}BMvuDm|=;`^L{x(H3nC1A2oBMvf(*Cvo|8M)XC7mux7U5Z2
zXD#!ezi#{8^82;huO;_%b{f8z^Ws6kYSHy<*4EZlPp5`&xumSD{IyG*;p{xy*?D(&
zxrT;@*6f=;T|6=}^5VtC?kjifm~raVDGf`@nRb6ZIN#cuEgr9DXE%@Gf_Qw*MTPmR
ze}DY<`+aa)nwsWRuU!QXnRf2pEzIEM=lATiea(*varJ*ot;*g=+}&N?ucfX1^5SCm
zk{1^gH*MOq=;C7c*IQ%-1s%)Z-C20)Qjk^A6ONg)XHT9xSN7(O8v!LHCbo5dW^i$F
zWxTw!l%?U&p+gnc)!*JIGF;i7A8%Foh(%OHBp@?W^XSo|6W6cTXI$VtUGJr>o7%mq
z3j!bc<ZNbK$=Vt=cfkUMPoF+5dVYTX^;^qU9<fe3!m)Ob?`$(chF|Y?zh`;b+1Y85
zc}eBfrKR0rpcZks?(M~Hy_Yu0N=bQvTeKoeK;sN^=gR*4`SW9@qobqBRIiu+{{D_C
z3knYA1T|(~*}4UHY`@BXL&~Y3V8glWE4<QX3MM8ZwpCvaoS3Nm@b&BN@c3F$uGU3?
ze<aLuW`sq3e|ML0PlxidhnJRmb8vAvrKT?Rvwr&YX;h|jJKt5W%PdE@d3Z#YcrOjw
zv1`|(i;LZBqO!8ILbOEh+_}ThP=6)xvn0d2dwW-Zzv1J!T6TkE^Ww#e&y~c-$1hpF
zJo)@Q+Yev9xYX3xxb;f0%FD~&*-?1-N!^JQqqQby`@2^0c3fK<-G1tnSIxJZ=_gK|
za;mJfypm<w!BMm`W_hl+xA)#{U!ShLnpGG7IdW-`<I<pyZ$rO(-|s&evSHqJhcjo+
z2uMhr`0nSmRH$gDO!2cb2d}OUXJimM*=@IQ)v8sVHK$IVY}~wg^EIdXn>TNsICI9O
zoln;1UfTM&y`aX-@9*yqpF4N%$+y?cuPb>IPE1hz@$Gj0#A(yoK7A^hGGz*=&84BC
z;o#@T7k}>HK}H4vdHMdPrY5)Vr|;gC?U%Pdw#;{SKu}QAq)9?^EDD(v6&0KAU7B)c
zrZKzMQlWzf4_egyv6yF5*>viZ*OO<@9vzpjcge`eSls?2-F7{rimK|%+KXTAmfwGB
zUtL*w@ak33^z-vTt%>=5y(Zr+%iqO-nws5Wx`!6IcK;}8b!xP${q^8rGrL;8v5k#P
zVPWBoz18N&`eavc_W4?TNn*pi>kR8+b~dqci!CUBe{aIcl!Bt7rv3ZvK|?HwhuQYc
z3DG(_QQ2KUK!8D8d$rs5>_0y~-q@Zm|Lf~(_L)9y=jK|2##k(hpYiDE=twQ~?R&f-
z`?}tdBS#c0EF@&DN*s2Vy}huvx*XI)+_-Tg2OnSFlx>yrCr-R;X#JXQ!V=u_HQg3m
z5ts>{JbAKe{`wXBd}kOe+!-s%3oh5wq-S;f`}^Dc=HU;yte~nHN2_7OgG)VWM`zqV
ztTyvGFDIwt`FXa!iCq`nPMkP#pi@}AXH%lk$F}zN&FsaHw!-40r`J_VE^3910Kgeb
zeLKw!4FzS6XYN%xC!n6|wa1s0Tkoz3Xb2Z-_o9D|Gb0N!6^}G|o6B-?a<Vko{eEL?
zcXq;oGdep=xb^PlybxNi2v#E&v+L#s)wo5!*wfMuE{!aBDb@;?a82|`NE3^h#X3DN
zP(o_POxEdjjNE#6nG946jJfsx+D8<;6l(yhe)<1kllOK89?mmon!Nw>i^a^kn3i~O
zsbsE{+C8-<*6C)pps>31EM0mQmsrfLFB|4T$2H)-f-{b)Y;Tv9k-4z1wmSIdkql;y
zsa_&tVw-Ls?%CGqnHQ9Ech^+g8HWux&Nf>fJ5Ytzis}$kyO);q?99vu7JNT{{yh8E
zYp%qr*GoJnD@^qYjEcIoqR#N6nJ_0O=Z7y}MD{GW8Dx0n`jjamC!Q8XL`R#iihomi
zFHOnRbnDL873OU}e!aPAoRXH7^y<pW-WM0SBhH^T(9F!t3|JZR;q&M0FWY9h?m0i-
z9yC%WC?LQfE-oGs9qqg@AmQz;ts0t|4^OwYw>LkwaO~0HO-xLDV8Q1<&*tIfZ*Oig
z_dVW_eqIhVu)BW$KdYRaoCojT^&RaNU%Y0G&*^jV^?zGUv#&WU3^;J=6xX$D*CZ^9
zRMy4s*VEXZd)ur)rX4hB+tJ&5^ufVq#mOfHgoK*-?f(eK9Dn%c=4Pw@@@Hpe8W<Zt
z&dth^wJtmJpqPoFwY4>3TaIMa*H^4Fec0I9*<0G$l$4bh-?O_e9=ng}z~A5B4fF5W
z?AW#I(5X{gi{1O(^78cLzhxb0VEmf5_@IRFviJY(#S;Ujcx;XG1$A+xua|y)cD5!`
zUtj;#y}i5rtU*H%J9qBnyd<U{=fm*gvcLUR$?Ik3=2$j;Dt~uJ(cj;HZrzO=Hv-(;
z*y6v<Ex)J8AR;HHr?I`{WzesGzu$8*<lflec>26{_&R~(g<BF1GU-Oo;^=OhGg;a^
zZ$fu>_qifIKE5flXGiPLf9>rX-`R2L(xnx_%l)F>R##UCyST7;st9T6>aM-IPQ!Ul
z)}i`eKYs?s#K=sYG9|#%lQVW#N$0()*SdBBMRj#{j0+@<(=u*?<`x(i?Em{Vzp13Y
zzMjcJPfu@4?rpQGPfs|fPMLCHUF>cTt*Mh-loob%aVaTj>FcZSjPVodY*A8DdU32*
zIwUU6k6+GaLFnqROjeI~_xIcDztZ3TXVSZSdrv>lbgDWx&o=r&f7IG#j?HWn7cW*8
z6%*siDSdfqspE4O<vXn0VgXT6QlTLs0byZcy|UKR`gcalgFScp)TtHK-{1Y|S28x9
ztfi%;VQ4t9rlw{^?eA|_c9*}mdfOGW=Xjs2GQ*b4%gd^!-rkhj9Tu09qr<qsH2d0z
zOs%P1Yu2psP@4FHC(9=B5DSyT_Po1FN{hB;Ul(F<40!RX<o&(5adkgam6TSkSfNl{
zTs+BZY00lInQJ$NhK8z4KFRViyR)P0%?(F}jN99CYi1q0wxjUzmcFg)iWhZ8?8~~U
zwRX?$^7mXxzpgzkuD$Sd^|L*-9}codJ^lZA{{IZth1c3Ojz$LtIxcqaS2H#?ma?z2
z$-T29P~d6w;Vw~ajs}G(d)Ry{{su4i`<OZFUjDT;kyf{Pxw(b^{QdgsYB$4#5Ur=x
zshuuPGRHsGH-p=2b-&-5GdT#W`CO=uX=dY9n(5=FHMOgw!^_L-#Lb&C*?1%lEDznj
zwd!kD^ZCx%v!yMqtv~;lyQ-<FsmSo<+3fslx1aC2@O1U|?dF!2mVuFxGsAuwr=JsG
zxV57&dG0n}#d~V<8zLhj9vtZu_VDp>Nk~x8i`&CdUtj;_<z@EF%*>jdtHakHx^+vc
z_V>4|n?BzE|4+Q3AfVvwEmMXAD*_j9ITaoj2I|-pl$N%3cXLniQoVHfG9$<1(^*Mp
zvR>TUs@)*o&Chh;NT={ux#>;|9V#m=H*MO)z_2=O?V-oV`vpZskG9*a&0GB|V~^eQ
zB`a2Ne1CWMa04TA$uarMI&&6rmc+`>f4ykgdatEI=K1$r92^?XJ>Tv>*NSyPCtJ3|
zW&Rr_g@1pQGC5pc?*IJqox68ehOdu{N;R!NDkmq`RB|@K_j>Aq<@4*bIE?2{pYG0(
z@#@OTub=Xtoteqfuxaz=uhV{hyPeO;AZu4MBk$fG&u7n`iO9*VyMFEQ@&4@G&Ce_^
z>dX=n5m^$tZOxh<5iZt38TXejUw-|zQ!ne+D#`3U-)?0`r3MEDt%%)SrZUy5^xG*@
z!MmxTj%>!cIhG~w?pRj+_@Fp-`t-~4^?w{EtNAK1Y^nH|v@fS$&i2HaGd)Sk$t(Bl
znNw6$^kTBVonm!$HIu`_g$tQ(|NHkZB{9)4E-tR*=_%1wD^@JHy*)oTB}JuB#(l1J
z`7?Ik^YiW1t*xy$ZQHi&?d|QC|Nj2Ia?_?spFVxku(O*tO(*iu`ghJQSC;$Bzq+w8
zdF}DCr>8`j9JIsNEfG|9o3M7Ru5HB!ht)Cj?P^cly?ggT@uINRD}$H&9VwK_y}xg6
zS9kZyEnBA4{d%b$q#?r6aIgBkZF9}K?pgbU1aIEBA@CvT>Vid!l(h8pmc{Na`^fAm
zFF(KPrr6wy<2{m#%dJ*;PuFX@_~FjZ;!;1>wQ+lAF<h|!_mO|!nzRky-tB(>N%`Tc
z*?afes;a1P)ckyI|9|CmabJF~FN?w_do49dJ2NAy-*;umq!6vA`;W}(o)ofu=}tY<
zFLPX6U0>>2Cmv#1wPuaUiRZU2Jk=HqOi5W1b~|Y0l>g<IzveIIzSwE5uHHUPKi-d-
zjYk0#KASfy$H&M2`t$j`roDZ9z_tw=CM@%x@5jf-_vFC?hy1-?#hyNS@?p{MpU>z2
z+%)Upt!cW^8n(7`o0^(D)FuZm_nZ6T?e_c2=FE|q`%lKcZcZD&ykG3D5=C!s@2Zze
zr)!v)OzD%gb_)#+b#W>A_{eqbOy1fbKYo1pJXcCF)IE9iFaGlrik)1xRDaKVb$z}3
z*6izjZ{EJuG%%R(?cLqgo9F)ev4%f(pOBz!^|v0oe?O96U0W-?HUIuRCMKpAXJ#6g
ze0dSb<Z!>{v+v$F-F|y|Thn|uyy|{x7-hC-PHqN|i7~I8o!!|toQpLxO&^t(m9;Hi
zoLs#7(xXh@!X{V!xUEsWPoAV)d%exk<-g5(7bU?pY$sRDy(Xd_@x@ku@mtJ}Ib0-Z
zQe|AN_CjNcUk0sdK0=an4`yh%op`_DqHTWm&gjDe@^5D0Y{tObGhoI)`K>WG`=4&>
S>|kJEVDNPHb6Mw<&;$VX&=Ii!

diff --git a/docs/_static/film.png b/docs/_static/film.png
index 99843b8709145b1f89bf14ea93b2134a9f2b4a2f..03b9b2b749d9d7cc2a3d1a98995ef8bd86796b79 100644
GIT binary patch
literal 56781
zcmeAS@N?(olHy`uVBq!ia0y~yVEW9!z!by5#=yW(;;;RNfq{W7$=lt9;Xep2*t>i(
z1A_vCr;B4q#hf>H%OgU<f3bgfAJA^rP~w^+A}YFAB9O;$(Xk8zJtc|kYtt6F3CHff
zXe#A<?U35Gh)G*r9YY*?5**en5P5vdQBh+NM~4E3$L{_1KMJQ$R8lbNsj)v_Jb&)a
z?{|vtpO&h4ex~~TM2;qfh7J&za@JAQ)!o4b1il_lnFkW{@HCvMuB4=-6cpt1tP><M
zMPza%NI*&TC}AZ_m%U)<=y-Md`t|UOiUF+i=FRKkYwTEY6J)7|6^GKIUlTl3y7(Hk
z9?Tb3TI5zfA=S)f$(5R#8U+p}bJjdNJG-ub=?*Sea!7TBR>Y<hP8Fff9kRAnAr}<|
z1qDO9Pud6uvg+%(lzw>N$m;6k;_{^k<fni4mwHbx`28(+XKiC+qlS)7&V+yO@9)>|
z`%(V#(o)A?DoTr<^`5j5y!hX`;6cNWC|_S*h6!`$_S*mZ;T#Au`DzDPR$G7LL=Tl8
zzh19D`nRsG&UD`P^7nB&cI-HC-~hv{S+ibTSjfEZ&nIu2sxK?f8OH3Zk&KIrGcY%A
zZ);=I(a|x;x}xFY<`$M^op;BgaLN7q_vO>i&2d~GxA()h+xgwOK|w(uUM`=%$al8c
zg$oxNeAJpZZ#LeRf4}e2rAt=F-CbOKxk2&5Ag&j4;O_2nMuys7Uk-kGdHHBEBO{}R
zme#6Ido+WWCH(pE(W3gB&Zf<q10y0jjvR6M^X0Pti+g*mg@lC}88)Y%cYA$p?a|Nc
z;`j4)x-^+)U+ehICuh?Ux3}ux_3PsOa<)!^fr3H7!4IE5Z?F6NEAjL+-K)pypPmxs
zku+j4G&D?#3<wGms`~b(GxzqkhxhhYYiMaX`T6lFDJdD`-ZH7Eti1Z4-Oa_tmkI1z
zJ3G5a+2!Ts5s{G#)6dUiXi)c`r=X*==91;_@9&SFn`^!Lt+A=8=;rkE>#lx%{P?k9
z;UgCjaq;lVJzKVj7^j~*vebL}Dw};}Z=;?(e}4LH^rjTg-urw%e*P@nCa0vNdOT%b
z$1Gb%fhTEe3(L!=|BheqDl)h3&qw!<Uq3uNJaNX1j;1E2mbNx0waJVOee(8whYmSa
zR97ooT1MvN=jZb~3T#L?$i#4<OH}(v%AI@n<R(s>c;e(q$BYb(TU#=j88kFC5B~c4
zdi9?6OP7NFe7l{0;?yZ2?;@=_22M`SgP)(DpEz-%V%+DWW-cyEYG#}f4%}S+?M>v8
zB}*6>c9p;HD|>s3k-@D`MswT8@873Oo1Q;^-rdKChruB@Sa|=RPu#b*X0!YH`tI1Z
zOUc?=x=CTdiWMAEQc|XI`*-Y+U}R)uU=S4*m9Z+}@bmM#aP?~I>ebq1Z*Qq?<K^dH
zzo}o+IPJmXe*3n4`|P%C*}}lU%F6oa<AVnYprqH<))uk1%9O>iL4o7Lw{Ppdp6~4F
zm?fw7+2zWcy%9;l=gytun`>Rp#*mVh_UOsU$&WT}*<xb2GynQJ*`A)BSG9lH`Q;SM
z&BYlm?5nN5ar5R$+490dLE$g${PK&IELjpHe|LBJ`Yrhn4m3V`%`0uTp#1$k19S7^
zEu6v+9zSkg?mz#Ub()e=mJ~Ql!h(XDoZI<2-|zqVOnRqiLjIi{igK$hR`)7!Jj(8L
zxs>oR<a+qgzoP47{j{cr-P&III;^6q$|*KB_RjQq^ZIP7za@NmadE?j4F~e~|GmZ#
zC@eT}k-<#$MQOS=HhZoGd&pT9xyXo`8yYrtdEH!pp{1pz%GWt^UFzv+7p`7qWl&L5
zQ?j#*d-r3ear%Vm)7cpejE#k#AE=j9R#yJ;<A;K-E^qa>HwRBlR6hEe!67bAPE0o{
z<o%A$4v&uz=WjgnEY--!sNmHVO@@ZPK0X;483u;d)>aAgJQ*P&p$~t47PqvtIH*l_
zRGR4E?Y;U`rmnG((S+HvyB|GDTCsBF!^Qn}Oab3~8{6C2_2Tw)+_@9e(%PE%=t$?I
z%6043ZSDGcVxsb+?cB`ld@YkF3-ifXG)$Qyl5=B&V@`TTM#Ssi>Pm~2wV$*RG>vw3
zb+xGZvEhfEg+)Y-!InqgJ|36v&eb}X_4%lHe8+lcXXnJ+T;7!-U5d_a3hL_Y4mX{*
zJWbUTJsm4&Tg75)Yr7_Pw;02Ql9xdnL!Q05y1JmKsA=9jIW|5SjdS(umo01CS^WIk
zt9!q`z15D>H!~A6GcyYa4{zVM&u-tZSK1q6kM62cQVO#3dDgk&CKoTSYg(Eb!+{$&
zcH9cg_xJbzSb8*Q_Q}cW$yZhcUj3Gzo2#q#+99&DXXnn!skv|8yxEX_eO;D!Mo4Jr
z#>&snwB$?HcFmkA8MZDaGFe($T3RP=&yKLaf`WmUkAU*^+AdWyIXStjYL}ebcpB%;
zlWW)%nR9NACG&ze3$HM<^CkTL_V&f)<@_b3r3)7>WR#YcJ~Q85-q6r+>ZJ1c_;?E|
zD<^MnZr!LY4O6F1tvGY}vhc-=7e9RY(lT?V<dv&e6Z7)=0vEd}Dk(7qFZWw}`S01;
z=KSh@a~gK<wvO7G#adcgnvt2gFnGD&4EuUJy_g*g%*@SJUp-x1e7jv%WJR$kDXA(<
z^my?2v9fuQU+?+r*Tv)F;zG}Da&~c9f7P+?jIf}fprEFv+GkLG>*CdQ(gq|jaZ-|z
zKS*TBk{Q%h(y74Fw5VA@X%&B`%c2(oE13RSDk^1_uwNCCWfZ))TEePCBPTakRMu^?
zn7n-d{rdm07ZU{pO}%}db$YDyons*guDusWe*XG3)yUsviNYG<S_WBdzrMfk?~}FO
zw<R_!OG`zFGi+VVO^!f8!N6E}wLWLoq>dGmR;90|EOJ&*TEuo>B2pt`g`|{4LBi5m
zKNl=eu&}grjE<HT6B7f~@LpbCA|i@{f>+s2=X7*%{Qma#@Q;s=6*-s~6zuKgSBI^2
z3JRK(#H_5eNUAVpUdM`=r_Y~1K0UsUlObYTj^w1tlP6A`*a)hrPE1th>g((1$T~E!
zQfX1zyDu*<pEz^o$d#4B8*6?R75=}nGI-+5nVqcMVj6lDN=mB)-Jf-K%-XsC-!E<k
zgPI>7ypFf=$=<s0P(UzH)?lW(Qr5GOkX8SK11=jXDFxa5o2I6e^~|c|1p|Xc)t8K=
z$;bQU^WPM7bgbZuF!p!3a^~yn>-@)#9lNnHnLTQ2R_n>h>dw*8((ZjS2R}VMZE5B2
za;4>?xrtz)vHDc6hi~8VItpyaxoH#;6}8B<TWp3+rO~k-NoHqfXV-QQ7niFEpcEuw
zU8cjt#Ps0F6PA@BT*AV_XJ#6+&o<8wE6H$i31OagQ$WzvdEvr^Q@`!px%1%JvuiK?
z>*?t^#?jf)@v2c7BT>%e6$~_f{Nzc<`p<eXJ1!iUC?I%oH7KcGIrHY$R_}|70)m0e
ziAEsL+_-sD(~3n&DT~+?g3`R4;v&G}c+pWn@M^n@l4G}+?t-;z*S-jtwRO)Po0PP)
zrh31Q4yn6{{G%u3>f)7qdYbNsFJD4RB+kxSzg~aOo;@P6Y=VKCk02+bj*bpuo3o3|
zrzvpEuq;;N;o(u3=y60>L&M|ZLP0@6Q;u`S{x11z9z00Mxw9h>ltTpfnt7QT*=JqR
z*m==3Z+*UUmGGT?wbBd)UtR=qG%4iC*ZoLr{vt0W#ntJ;RA2v}?PY&Q$BK1R@>1@d
zJjoef`*rG~!xhP{Zf=Ke-;TbRC}7%g=~57b!|^^@Q5jA_!Hd~S8iM@%{09#ocD|Un
z=VDDw4U6jUbjPz23<r-NUw$h2+_`g14O-jd>;H!4TwmzSp7`m>Nl>!Cus+^?Vd(0x
zCIt?sz`%(g9{1aG#qKH*+_H6R>onbHuDG~3Cnu*S1&$_z!bdJU?Y@5f`dXy=XQ{EV
zajRkSF^*rqel>M=b{dquiBL2(4b2IUiP2dTyF2W~wY9SqCZA-P>7(}L&CTE&d#lT*
z{#8{~<!ol>7Xul-E_OFp`uTaHERF(AO-(I+bFDa|qN1F>zq{KCYBRt4^WZ_k!@b|{
z34i(Wg~iv`_u##IaX%im%eOpw^l17$?)rQILCv1^mwL|#3z}|Ov`C3Z-cBZbT}<P|
ziGmCdPV4VKGEF!7h*@Q2<%f?S9dmMY*2V3;rEp!8g;Ck9=fF(k^dq&Pa^P?~zo3{H
z8w04AxV9!zxjZf>M@P+P27|7yZbd~!$M4UdKO0tjNH}u*I5We#xV>EF=H_qi?UjD_
z?wy979vcIwnWXIAcjWHw^2CIM23hN}gj-uO1y~&4y#Dp|^$hcTxkry4ZAd=e$F?(G
zNhzzsE7aKEB_#U!xw(hic%>PpTs_C#)bQfP3$5F7RwW#4Y-|>_zf6RLg(uFR-!E%j
zcHrbm&ceb%4ILeqtSqf#eX`xw<?j^C%*6ixJYWCexO_bWL!XRg)0#DFtd2`aNOa7Z
zBje)g`tauFbPitL)_wcz{N~&BHZ?IZ9GGWYePN+9`;j9@7A#o6uyf~54j!JCwl+3C
zc{`o!^XJc(-&OXuYj^p3C1YdZ`v1T0Pn<fnRZ!XO!R-8f2Ol5rpEzMcL)_k~hc7QL
z-%<5dYtyDpAFhVSC*IhQ*wNd2baVRofPjF8=<RtAKcBY;wa5!!Ut4Q+Us_Pmln+#O
zX;gb$J9?DWXeQ6mqenIL^p4%#UH<U>`~Hp&4hac~g!lLM3a~JqJ9mz^=<IU;`Hwz4
zJpAJ7YVj>ww?2IJs*6)tZNZWyE<VrR-{0SFUH)!C`uTYmu3Ty9>*HhNm*Y`ZR$j7n
z>B+C*a*L-<73JaO-B|K6h~dBj$7WCqWlP3Irnk4ZA3rnGn33W9JX`0A3X7uRVnGp+
zmU*_-PVVmPK`TXMt;<CA&(!!otpV1)ec|QpUHJZ<?ULoom2GWfA8tNa^7fXf(M+G3
z^~;yHYX&cS@bGXus7n9!{XIW3Gjq+4hwT=1e=3?|w+Aox%ecL5?VWvHg$$|ot2;V4
z{(LyhKf@$b=-0Qm+{VVnHZ?ys1l7;AE^iCbn!1~x;l;(p?J>JQ{bl&@;9&FgV>9Q>
z`Ev=>7mzrsH}m`V@AWUY^gONKvOZ?#r&HIZ&GY8mSieYEOvzPCOY6|u=<Nam0u80F
zuO(hy=KJH*Y5j}qVy*u?xBnlQkz-|LHT7HW?QOiE)OKfQ@x|Tc`6A-tk8f;D236zV
z-rv8kaNX3*Y~9C-swyiP8JP!f-t@@V{a}3g@?}9;SzCWU|C={&w6=zahOXTtFFN&A
z{nhE}-x?bmi!PUk-HBUsQ(bA%vS$7RVT#t)(#QK`58vFJ{_*+z`bD+Bzjg6-dT5G@
zh&*_9c6LX1x3iNIQ&)F)VrFKiUG1+2H#etm*t)fK{rdHb4zHQEdGqFopvlvxw?BB0
z&?9Ba)y^+}?6`dWpIhtYB_uksudhqIx+-*ref_=}Ys5uGAAWp%e8ZM4HBYm@yt?YW
zXWH!9x3#~!ySVhOzS(=``q9hF{Ws>_wQ_BDT(YI8sHou04MPzzu|rp{ipJOfHC6MU
z*HicR*TcWx@4N3Vd%Ixi(xop9v@J_tiKqy1y7fx6R)2rDaK{db*4EY&=gzrhW@<)l
z$xys*XKO3l+S<x1=l-*F(&WjYgke+jLqOes-jNB4&L4h!OkT2dsiL|0_o?eHt_)WH
z^7=YIsAm?oCZci56cG_Iu}7bto|Z7l5CDxe{16iqG_^fzHFNv+?bCm2?cB0O<mAbd
zA3l8&y8Y+h@Aq6i6Fhd#oG~Ne-=Ci|3=)~<%$f5fYwPSy_x4sFK6Z?)uC6ZQ@-kjf
z(=#KZ!*jA4sGW0pxj#F@ij`AqcUtD&GMO=JmRW_&x^?R^uC5Z@mUp-7+uPfVQ%_GT
zC@pPmY-Dunk!V~UzTWJ_i$CY>|MS?|+Ui7a<C!*X+J!4ujzs70ZM|?Ipyu1n^bH#~
zW;X0rR9bX>VWj$J{Yf4w8@6mYa%X4p(b|<OS5CbZi(_!&+Rs_-e6mje|NULKem(z8
zpSF3n)k%+!^*%Z^Rdnf+B@Zt9+q=#-%U!T=A>&LRw)FJ$ocsIsp8Dpp-n+2S@X_PP
zg<oD=oZiQ?di84apb%bnZ*OjOzc~lg=hrZ4Yinm@Wi2XweeJ`SFD@k|Cc8>svn^QT
zl6s(l@zKXNwaF(1goK(7HnTg&$IGvc+IndF{W|XW`1mvPY^9GKJH|WdO!>Pzk`pIR
zl(4I@`11AZ!sW}`<!q}GK0iBqV@qZ*^Bqn>!M%EGX0CVg^z8g`>&~5+cQ+0;vm2(J
zktqBqx<KdQ_s^dXKRn#NvGB25&A*?|x9&Q($hCVz)z_?@wbS)t4}nIA{{5+Zb8m07
zPs^l9lO8;I(&FAP*O}Yh)g>S(*x1p*F~_2iiJf0=&F8&BSHt4s<nr$C>y6%?r>LmN
z*xK3(im;;M;)SbMuYU1il}YutoHO%mqif#3c%iY~K#1Ya&f?{#if?br?T)YiyY<+=
z(vp%_wz<ir*JF1UsfMkK(cHIv`*wE^509l~dU|>u{{HJX+9xMJ_WI7vpzPMOV$1&E
z<$fF-94kuyxVT&~F_^jDL4ak+k|ht~|Nol4<NV#bu{E;t^8KB{>ZepciB6q1E$P{r
znJ@0{E?>IxL7a$~SeWL-^)C)IGH=+t`S7Qwrx~ZLWr{SMSU++8eEB{(+f(c}RvbKf
z{J64`64Up0cbmJqxNdFB?LOGde)!xuzsyr<9UUF_LeB0w^X%8x*G0iWt5&R7Q2P3s
zMac_+hE0KcQcq9od>g(dqVdn48iv%xsi<Qp3vxp0|Ni=_zqjnDS@1HSgNxn!C(NAL
zDXJaT@!LH2mP%d03X5OjLPAZ?&(Bv@R%YfF(-HVyoG4x;>*eL8F!`iG(G!n9kLCX#
z*ircS!HX9sT>i02o9ETM+_L>?bmdxGLBWfwv#y=2@wF;{*8}R)#2i?<V@Jdvt|(Vm
z)^<MGrpc3qOG-;Yl~L^Ovd-si?d{iZlzVz|`pvasU69lF+;_Iw!7EonVm4m9cu|mH
z!o-P<|Nnj8&!Di5jg#Tv!Gk+$ej0%)rmC-59~tBF^WU@Wu3uC%*Q&H>_ipPqZ{IFl
zxpL);f>~=MjnhJ`{eO2ym)?ITC@6SUbn?%vJ39)Q-|zX{_oLu`Gdus0>u+ywU%w@x
zySuyF;^@7@?fg$)y^EhRYgX5uJvI!f!QV5pvQG8hI(p<tNABt6Ez%YR3wGomZsUD%
zcenYOvu6zx53&6C@#DeE%gcESu3w1}5ff9=)8hkmA*Sg@uUfNOO-X6dvh|?+?&ljB
z64G+wgolKL1OvmPM~?(#WMW?0bh-qk){B0>K1C)}CbfR%oH;TK2d=G+e)#gGrn#|4
zRh8AZH#eIvE_OeB=n&KXzu%(Q{$Bb_-P&3@Ffj1O-fHuG|NmA0`1MOkU7g*w`di40
z91qjl52{K^i)L*s*vw>VYHDF=2`Zi2`}_GB9{l_Jo1tNvZnRT)xcJVUJ3V}STxx1;
za&mKz7N4JEsob}1_RN`ABZRY4QdIW6yRguC>*lCE6@C5v{F^py5)ct#sjshZX=&-W
zFZSf=)5MF5TqTUteD3DYxmUr?Cv#wJ^!5cSS8_^AOZP|^GMSl~P4HUE)xC1T0*2%L
z^5Ws0wI3cZ>gedK`n$o$#l>Z+>FbF<UxoM-%(JOvTA*|B|BJ=_3{!elswyfTJUZHa
z;_O-1hzJQazd0K79>01OmHeNLjqQ<=4kssP#O5?!BO@bF14&rj@4%TeJVKo;K`TWv
zGczrUo^(Vs85cZo0D1dBBeRF6=fO5!=_7T#yu8wH(jD@rt&82A^ykM%P)pLr#^%D-
z?C@5#PY#hUBYx%te*E|mRAPj!jaqtPMn^}-6khjds{=k}|9^gde)sz6da+&3?R*Ot
zEMN#<AJ;m0a`4jPt5>c(5u3Z}T>AXlHp}8?3=Cp=F&(Yk;$d0FnU_>%%$l_*|Ng#!
z@NoCQK*6Ns<khjg8<S#fP36zew|B3r+ZQ1hCR$zn+pT9s*}1va%U=k9ER}PAwtB(h
z#mf8ES!~}ucdl&N+gqWzoV}}7X_@8U>v?x~_x>+Zo72u7VwbN8c>B?@nXPm4<ry<)
zp43$e7KM!0{8)N@srli{%l!pqWqbEle}B|2U$>$tP*F)qsp@lK%08~YzrP;`)m02X
z-fq9YA>*P_p~;=gmxZ@&+Xfn+1hsL`obi#6lzce1{NBMkJBvSlyPbdimDH+Lt2lUg
zjyyX%dt>$YygPd;g+cZGot?&ZKc5JL3h*L%sb^<rw{O2!#T~sp@95EP@rl!>v6-5h
zZppnZcDSAY_@2toSu!(KpMHOGQuxTxqYsbuO7AFtFL&kYRZu&NN7ib~r8iz@Pp*sI
zEg&hm@`b^ytv`NLxVD4lB0O1CXHCw#vLcY7p_!du%VLuG^!4CAr$uO@@aH!-jn_nP
z=d-f1+OT!2>+wF>i|b-{r|thCAU`cP>PK~R$BK)xIrnBVOq_J#;>CmM^K03Jg@x5N
z=zsY5v2pqG<%<qyTsy_i*wL}#<Hodk9tS}!T50L-GiT07-JUsXmeEAeY>cJMO!c6K
zFJDTI96hS2r^omG{r&b?v!p=vznE^6hLs7ZN3G=ZtW)ab<Kz8>FE6Ry*;UHjFK;jQ
z`u^Oxb1yD*X5V?W7Broc)qK(>Q2FGkQ-^w`%@eY-yAuz$EzG^WEg&#)sWhmdlAm0;
z$nDZXXZAC*OufO~-HXyKhnrm1YZx1YMzC&dPVc|->L6&uYQ41kv(8r@kecV(+GtSg
zu&T;x%hs)l$;r)4O-wsQTUKUn*tX5>_O@I>DXCR20y;W6q(mlHF0!(y|7W8Yv!h|o
z92p5IsYS`h`y|YAB-X516Y<~A#l@w!@1#wj?2A{g7KN{m+pu|a^URqu7ad-xreI<s
z(#*ztXri*aLDCTp*LG(Ym$N*RD;IHfb#-OUQMz>S;6lO0pyakn@-@?no8I2uhgSwK
z-;jIT?9I*1?iU{hD1*lEca^?=@ZbSMZEfv~*RKy>ytwhw|Nlpi9{urh`Fv2meDUJN
zg3#4r61G*K4jd!H{F+akY`jt|3_ot)|HlRz_B)!Go7)TOJDi-XE@54!!^6Xqkd@U{
z`1shvi;LY$`?l}dzq|bXqrczpxA*n&?J9lUR{Z=NBSW98b=$eQ)}XPT{JmepmZoz!
zIXM|59AG$+V&t(jsO04(*8jh*@BfitE*L0$Y+_|rnU|N>geg;0><;|;@-kRLLgK)=
zb9}PaWg#UMS2(8WM1p2)PQ2~z?LFGUDZF6mQdWL`eue|n<Lf$gqqlYBe){wYH2!|$
zMnufss;!Pmf>`^^VaqERLBnUw?EG#uH8u<nKm)<W#fRVB-Tm<0yS_({k{Av=Jw4s9
z=!wUjz18AuY-~3+CbKW|oz3PbaAe=Q`2BsApPzw}rFGexj0wM0l@_(B3Tpj(miI_T
zMg}y|CLt-QX*I<h)JifkHeTrRU+2}5En7sS&2k+4{P=WqbQ03j*{!XuBO)R+tV~w1
zce*gi%ga|(Rb9LB?&!@N9bH|;sa_8sKW^5G-L+uH4hePtc`fbj>~4KBo%id0^Zxw#
z^TPG(?&s&(Zp^-}w<Y^J-^`gaXBemReS3Smz4-aLgEw#foSOA)?b@{y=g#fDwl@0l
z^ZE5{d-vKZDJz3K_2k(zC3AD}pp{#~K2G~Sea;*nb93`G@%!bfs;WT7)cyS$zGB6S
zgrA?D&akVs+O%ntLDiQG7kBr^XJ#6|xV2R~YI|PqzrVj9&;S2N-Ky*jM`&oMimK|v
z`~Ux$Z_Bya1R8|<op>EGAe{f^J+IOtwKodx&sIhT1_n0Ho-OU;>-#!J$T7d~_xJaw
z_g=qp<;a7B&50=~EnBvjFr=!Q9X)z<NA-8TKY#y%I(`<GmWl80?Y*(PJiqzqr!Oyq
zW$bDsa&K>AW!SN6SJI&tPEaxq2nb+U84|U+;<O~BS3bdODMQ0j@9B@O$JZZ)_NW;g
zy2W%2il6!T%rIa??NKjSut4iE4>$K?^Kcgz-w8pgpSNw>wqfhmqX(PWMP*M(udZqF
zja<5HnUk|Kvu@Ou72A5(uFX|;bMXz#%+v&B?BeI=9$s4;y`%KCSl*o-jc?xMl)Sqm
z$*=&@=LU_{gZkVI4q8(|J-W-w{g1QD*IZE8Sn}$Mr_YnqCsQ_A9gkjD{QO*!Qhc2}
z!-d7}{5#8@{$_k|u$f)I*Vxi>XV`aV7nj~{{sWVOv^6yylaiGB<n8(L^Ye4=?h>v4
z_jCE8!;92(Y;9%v`1lIS%8v2d{{a=D7S`5>j~{0*D=RC?-JW|Jlra<E-Ps9hR&{lE
z7rwb+$Rled^85Sy{0S93y}i;paSQ>VZu9(E*Bmwc-!L;XD{?qZz1?m48`SjHxO&1y
zkU>OD?9sQkw?UqLcV}nwpFcG-X3ks~y*=;6jg88$@2_-gY;4?7_EsuvZB*;e&(FJ0
z<_87}%GuZPczb*A{C4i#xq`AXwlnkoZh)-?2>9mXSx{gA>c<{#=YRaT-#)MC<2Cp7
zaeI$s@7%d_Z&AIA%asZXBY!V-V`E`ZC#|f^Y|h-dhRMfxK-HmyK>|b6wj56I$p1=C
zZT*8@etyUHR)7ES;i2;!n@S<)HXiU`(6ni7ckaZ@u`1;f>SS5$)_Z7g_4k07n4Uw2
zoKn)$7jN0JB}g;8s>+Isn_E=u{puH2Rto?6`no;7?kB5u*ct~fFD@=_?!up+QhB6I
zID|S`w&&l^>$t6`w219k%DgFkJ9k?C``BNfaA}F>i|gy}d!H8R&?+h|bzL2{c0=jw
zur2xb<#eOBwX9yP&BMb3D$!&1R*6oVHVqUTIXO8Go<DCl%f00g8!Ow^)&?4Q*|K%3
zVePLHhK5;DH^t{%Ugq1pa^=cHk7`5h|Nk-m^5qM3nA|BiICxI?zs=|EntOYFneXrl
z3Ywazef}B{64D}RoOa;E2@au7mpfW|2QICPwdRpDS`zqp(}oQzu3o8dbab5Hp>p+H
z)IyD=OP6|hc{zD_aD4jwIXh?d(xq2D0x!;XQ=6=)qQcV5&JUVv1&!b5@Bb^dZ{NNd
zw$)}my}gN<nVh=1x}XjssODI+X3c_?D?6{PjXn&Sb9!-Yt#rdCp{b0_Y#ql%Mc=P}
zb!VqBs4S}aQSjpRYiECde%q=q2SAOT%*)Hzb_gpeRmnye$Mb84ty%HqxUbU00~ap}
zI^4Ye*3;8d!aOf#@zE)B=JZ^-60+y-x7+%;(xRfQ59&)db%jJkbhNavfEo>Uc5;=K
zl?H}}j@$F@&e#y#ytDXu-<|5}>gtx3mXNIHj~+FB`BL(+_V%{ikFVG7zjkALUtiyj
z9hX-h3(b3aYHGyJqSU#M*RHZpPJXQQyk6cg$z|!^xmKl44h{}$AFC@V9Zfch=igoa
zzHRbk;ijghRWS!v*+j1MO}ZNpwLLHPHEZ;uMT-(rQ(29TH(!?t{VF6RRPgbUtBRW1
zqAgoQrcIkxP*&!4yiazghJ>J?sprIr6Xz@o?fmlg_IAg8J9A#mICDMF%ZuyX-QDfy
z?S8MhwZz!UO3LA}+UHV1Vd3WQ_p1FD8roEU<I&R60yQIYa&s3hUcC51MTgX(W4+Rb
z#m~+}Z4C_#buBFXnBCXWA$953*Vhl9KVSaBV8yho%}zgNH<*4dHORcA@=^HSBG>LG
zubyhxsmh6pwq9Es-K~88+O=yxzFhX-Sot~4!omVnWZk+Y_3+_Ch6ZkNy#q&&vhLco
z>&4~e{6fOQuVteD|NHwiEM0_!ad-K9xA}Ip3s$e@p6SD;udfdp(Ea%MIG6s$m)F)x
zyY<WUZogO6-D$JeFzw8Yz_&JU_49n5bWWMv-tNBkzxDHFJJwo0JW(V2=j-+Ot8%L?
zxa4JJd&}?FiaXpi>Eh(%toZRkaa-<fwQZgr9tVDWe7rIDw%MPz`Srrfx9l!>$dq<w
zM&teZ|9h_$PMtRG(WRx{j}EU_RaKR+ud7+=np;y_Tlne8Nw1G)Qyx7^y0g2Szp${-
z!`Jud{r~^Iv+ZXC%}xI0cYpR;!Nx`=c)4HewryrzU0n(sOl5Cxv39yB^_8frsVONd
zJNryK{rY)nY3auF^KvPvsfxzN!t%9W1cQQtK<)b<zke&MtFxaxd2++Xje@63vR)tS
zl|FIuq~Q9URbR8-+}|(H$H&LP&Fvf)Cl?eH1d4=|loSV7S618VZ#fg@d&b4d>BaBs
zVP@xh@caG#<MV8*Crp~el%1VDW!f~e6Q-agN-MHtX0BiS`T6<9<?ru3x^wCI`T6Zz
zx0>?s@-l|3o38KwtY6Mn%UnutsuyUS$o}6CW;Hc6hEqayp`oEA@9*vPGYqYHV5Y6j
zeZT&{t&fk7fSjD(v879ww)RS!CtY6``{KsN#XD+#uePZ8ppbWO52vW8XrY#0bo6bu
zm$O0k$Mv18k+rG(#A2R*uVwe{-8<g@`T4oXvnnKH%AFJCAt53<IyzcYx5n(L5d8b=
ztFUn8f;B47udR(P`g`3iBt*o-#01nDt*@_t^6XjC%}uFEO7VV56CDIv*j7*9zHwvY
z-o3VK)~;Q+aN$LTS|LF}!N9j0&nyEiu~Fb)nlpDUBSU0l<c`9}Zc9`4JvvcdQc|+i
zWnYclFY)i!%e_voSfK$*w86o`=K1$n8nndMaPjlIXJ%$LUp-y^{+{ey>+&=ue-{^*
zB?>;zUO)Kr^K(F8VB_S;!VUjbzdt=$=;_J%@6TudkF`NTLYFRGy0E)Ee`lRu+#Zev
zMVI2{r|es>fZ_VOSmE=U^%K7R{QSJ=t(TYAhMJ$BtiH!fhp&$VwKW#3Ufn%SH~P`+
z{Cz7w`^Y-C@d&1~ZQ8cYEi5c-saep<Ew?0FIyyRLG1b@C@7y0MYF=Ag3mT*^etz!g
z;dXxQxw{h%GHrZ&ZEduufUTyo+UL@Oe}5`(+`fJIzyXJv_3PH@UE2}AzfSi2JX_(@
z5v#n<t@eJVAGe3Y+uJ)LBI1hGGVken3s<c0cys#JEhz?r@^>*ujvs&g^Ye4ijK_w=
z!vdnBtiHa!g_6J81jNNb>zoeWyC=slXXD`Dz_2a%cH4RT|9kxYvaqowU0&uJ5E$s_
z<ivEWM>6;&<E`E0?~~r#*m&W>g##xit8Yv=*u=J*UrA}v^|zo2ma?}}*Vab2>&5PR
zaA~P`7hmT+2A^lyD_5-GxOnkmQYUY~v@_+euki-06mfX^#8yiSR15d@^%d2|?x_%b
zdwYBP#*G{A{9EN!6!+|CcAu0f*Ro~HEJ|OAym|9RVXD`|7cV+Kd?+}PVpQ_}p6shv
zuS$2h`KFzn#hRR)4C<2_&E(lz_4QDfsP=~B<9se|Zr66n^YZf6d^{=+8hKU`;smXM
z%HQ|XZC&ronUc%==l7N0t7Lz__xrpb0!F6!adB~1`<e=~=bSx#+WX>vo{lMgX=!RU
zHZ~vL+%$G={}lB7{eAKO)$cDY?Ot?vp}2wcs-@o3^%U*x<!gU`V+}A{UR6?J0vbr!
z*4fuLP5NhFUtinYxw2orem!c|q@ZABwJXT?cYOWd)-PYaSgC)$c=6(dlPMcEZ)RqA
z@$#jjjt-A;`Z*ULAD%5+wmf+BsA*^M^Fvp!Zgup|d3SGb_k;-oXJ(mluUfV0QC)d?
zdCjkv%Wv$fwFdQ*mfM+{m~1F|>ZKF6N8*0%cUc)(*`q%{Gak5bL15ReUA$%dOYYRv
z)QHG32?lO`^Y(4w+gqj#srCPZgMvUk#WgWIg_;x|tl$6d&@$iI2Ko1F7!J%b&EAl9
zR?4-_=aff)lAN4eQ+s>+qQe!7fByKvvGs2{sOQ1hu%Y(%H?QMo&Yoq>&VFqbfB)P$
zKLHlUA3q-VvobWzn>VlE^E2O%KhDlJZ|%4Hwc^}gAwj{tt8P6}bnlZ9WZ+<6sjmL5
zb^FX*>+qc9<YeV{^X=>R?WjLJP505ijmgKme)r2*D$TL0jVdT95vlt6O7;5s`Sa(0
zc(?mKm(fh03zshoSABV*2wLFh<mu@-wGh<ft$04SoTaw5*3sG7IphAmy`a`UXm)p9
zY*EoC@Aogy+y57_v9)D2Ha2#Qjg2)hHy5|Du>s{quiWfndr$-~^PR005gEz(>eVZd
zA1-Xqk59b4E%)j@e^&+;dHMO%w^cL$*mS1t)!G`@J6)Hvrx}}?t}Q%zXZp>Z#p*J$
zvJ)pyZU)UizP!Br>$~objuo0SO|z%{`1S4WZ4Y1HwO@CJuZuZ2LD5-2SXkMwijkpP
zOt-1MogFk5wA_C_XnYYgB7bJ4v0>Sp2oX`ylV6QfPl@!%+smb&pXXXuX2!+M4O-ea
zzwQ_3-QDHxNl8i!3E$q_%(%O2YsI~<udgdk^mww*5mb0reSO6mA0Ka1^@YRL)z!n-
zw{`w}c~E;+H+tKZmvxgSO}el--9P8{Hs0^=?m7ns3KkU=frk4tFE87;<vpv<v)L2=
z{Ha;7diC{Pex>K<*>d%ZJ4_7@&dSPKv}6ejD=X{QSJB?y+>DHj8#Zikh>4L=^O?cm
zC=jO^2O5k$aOskeZuB;h`}cPgF244BUF`0#Kfj~(baZ%Dhp%7vZ4PJ+)74d>kADCC
z{XO~lxw%)j`TP1FeRFejwy1wijg6Y$oQStNWlNVXoncv=ww3>PSgF1DG#$_g`l`Ll
zAVc?2tAEU5zINuiQ$T>gqeqXVo<^0foC+EQ*;V@bRjsbMx%rJ-x32xJk(HHYSn(xu
zf6e@^uC5;i1+`mpZVLVT_pjpn-Eu(zfrhEt;Yn9k1b%%7TDq{(z|{0;Gdn-S6kV^#
z=%q`Sg2wI)N?rsM8sz@{_4Uz5&_dIzt3m_9!;c^9l|Fh>#Vq$$i>miD2VY-a`+q+c
z->CcX;o*mG-`q}5(=B{=$8yK+-H%^hUT#tM$AXKS`{CQSy*rDacP;)bI-i-L0W=eE
za>w4iwq<W_G=d7wM@PFsD_%f(e$phNHSzo9s=vQmd-ZQiYis9mXD6o%`|InUJb9Av
z_SV*<c_LzBZ06?MqyFEym*Vp*d*Ox+8!jzBX71?ec~X1s{e{l#3=VE?ZcCG2zI>T+
zecfH{ul!TaUfP^|oUcdPobU8>eQ|pS0YO1c<4%{L^`Aj4sDAr@5jF8aK~2HS{TMZ7
zvm{?$=9?6>r{rZ23mcn~ni`v=q~wqH_5Zui&9zomQ)6?ux%~xb#;~WShk;?;x^*Yc
zom*F`bM)v@4h{|mh7~JTJh-sX`B4jKQt!srY;n+}^Mag*r*7ThXV{tlwYj-DF(HA$
z-Q9gn+}>Ts@)c%jt9{=3;N3gE^73-m_KQz;?AYO;G%@5?m4UUjG{2k;Xf`eAx!r25
zrIOZVI_qM0x0z;N15G$enB_#&I;$xuWr1q#BiGy7+P2!QugRTVv~uOj6Q@rzGdy|n
z#349%^R43i`}=s4lan{9EQ{S;mZTIf&o5`=ke8>&u%Pz$w<M+bb4QP|Mny%PIDh{5
z;dcJOpdcml-?5?JnHfL}6z9*EXGl2Q#(QH!BD0T=k3q@_0Ul{H9{HLNj44Kudmq<b
z-jFu$)!9pzKwVD9goFimnEV?X8wFSxL96VF=VxYSP7Pbn+7P-r474ceoc3uUK|xbf
zO-)S?Pfx-7<?rt7y!L!w#J;HM>6eR&ik`5Yef9gTL+Gm4s~`Pa#r9^E*73W$O0{il
zZJ%B{>gn$fY9E3|XCfjZ9&Eo~m))@9K9A3{ms4|YY+ziuawTZYp{TgH@Z}{{otPa0
z!OQ(bpU?RJa{2s(j0}zK9ap-4fBN)kL-uvOl+;wvJp5F#ivfXw2lv(fPRP%{Ut#X<
z;_^l6&+q&H#o}+@x^?KzojvzzLuDf0Us%Y@;<%!0wpFQ?kB`rSMM2a4sj8@4`LW>T
z=`A@ogJOQG8X5|I{P?lxIB2$`E;}JDE$sDCx!#^0(D>YzEhcYnZe~|@@0${xtfsHe
z-z}!Qs{BsAl-lPnUT@yKDR_29^2o7chpt=^Io!^F{L0GUr^^;r{rh9-<?a16>r4Ed
z=kMO>O?!G~rt$JqK~lE1wlcO=TP~g2>EhzzJ6D0D;==>RY5MVfTeGis{Z{v%_s8q6
zl!U~AW5?JWB8&E=os~*SNm;O90Rw2U<II_oDngt~f;2B(y0l>NVrF)Bc81jREPc}E
ze4rl3zdx2vPEHDwPby6GSg>?y=u;MPNl8i2lu2Qs;gu^_K3sH{XVh4I_xpzr2aa}&
zPn<owd&35Uovo&^v9Z~u_Mmz${jIb`fx?_Qa|#|DU|h0f2`KR-?cOy-ZSTtnWB>JQ
zs=vRpsQi?&_4xC1bGt#yPj~2BSnLS9o^^elY}uO|f%_dgJ36ESf6jSxHS_*H+q5$?
zKAyV%^Udb-2I=Qy7!Dk2<=$BE@Q_!on(r)@;NW0}1LE;Diqj6YwY43(b!%79?}^Ip
zT_`JH<Mv8%i|HJ=wA8!s#RWwX5fSkCXHn6rE7NDqidt&3z^eB5x7J;|th&0o1f-?4
z>jEk-9%y9Fz8YT)S+%&xEiEaj>2N#0b9D6YslR8LW{cVVc+i~H&o5=daqr%}N54-_
zR=;j>b@SG(TkmXVPfJU?I*sY(&6|nW*Tr6)c45V;RY{+poei~n5hZGDY`i9B=cZ$3
zW@cs)dnyXo{>tWqEDJSdn(5O9n%?LZ*FV-PZGNO^dic^+tGW&xZ~&!8xAXIC7p`3k
zTIwrjTlL_$eEpI4`~T~0Kd{(E>0l!>`-a-zWnW%iX5Y1I7ic>{Z!hn&^Yi;>%$VVI
za`*c6`ZBVz3zsf!71ND6aO#wo&9j#;J72uWsHmzsbmk1tt5>fK%*~Il2wW^6C>Z#h
z(-1V%0-6B3dslXC)Yhh5yR5cs*>YiJusUeLt+-xHLu2E?)qgMCQxJ0OoOV^lAc5iC
z{r%@xa>g(I@uLE?G9o5-YDdQl)~Abavh&M@6sUYL66$2Jv$F#)>C;$$+i~ftnfq&h
zo4vcgU;le3s4FTMSiCeO)y&V&@56@=D++I^=B?lM^T!X3U;ooUn^RV)F7<i_n&0Sn
zQ4a|(LHsLi_dDw7=olm&>6pHan~ST-MaeNBAVAs0)y2idWj*)gpXM$_MMgov!Jzr4
z{abQFLPQuAgs+cVZ><BeuBvy&8S@41{c?`3uB`WKKKm|?-(C9png9!9x0r5K=Is?L
zG$JA+51u)*Mo>vv3Dg^CJz2xd#mCpCz#(B(vSN|*%0M3<pS5luKyF@<nQX-W;Kjwo
z5=JQ;prytuL%5`+rPoAmW@}P7vDLcfhXEU}REwByl!Myj!~+eCph;*3hxmAT(C`w&
z0{{7T5_UB^D(=bG|6w#YH=i+M253jY-QDHKA0BRh`fJ;^ZO6ppYZ&F_<xAe)61{cn
zmWGDLim$d`-rtu8t(Usb-PCY*cll!f`F5aP1wLxc)2E9sTC@nX8fMxJ0YO2*y^L2x
zWE&P$R#!h>y?)=M+vU&C$%4wySFc`y2FO_)4}ccV7C-mfS@!VZL(t%(-(0KK<^J<e
z$!6c*XUmZA@zK#A?{>d`()aiK{{OA*?d*pR9r|#u`aNi{fRmGxgP;HSG~H+h2FTp)
z)?J|e6*0R?JZpYzU9yDb@$vrS|Nj1ddh6$}U!dIy4A6XM?yy;I=K1sIk8esn{ouia
zhT`Yv6!rD_D=RBOOX9k^xRR2R7#QsTd|)nncZV}NI+}%r1+)sjU*7)Mn#j!`o}3h(
zV_D4Bq;TNSA*T2H|J$)RHf-N+?&R$J@oxG3gQre$vGd6|goTN1+O%my+1n_NCQvoS
z_~SnF%8wsE{y1*`ukrQu^^Z?Y)!w?VU)nrRL0#S5=R)}UxZc0NzaKt$kTEea@x<xV
z&R$+zYQD2tdU|+PtXKhB^Tzw<vWk*Y)#lh81&nodbrU>P?#%kZ#xQZ>M6Q40mn~*}
zJ+WunG_g&aH*3EIRV`lL-k`4Dn>RUYqPB9iwY6DPf79{t^*vg~Ev|Ru@9*!4Sy^4y
z<?lc%*(9vX)>PDddvo)`rAtl~6+0|~_!)|yojG`KZ*}44XTA*oy`TO6y1xG5>-GEB
zeXgA{|Npn!`N}9mAAHWv&L88<^X_!S?k-!He7x_%<;$x-mx4Oz#?sQ#8JU@hH#Q`8
z@wLVsx_w)E+qP|8e2W83UZ=zfu(-ImJa}_+^N-i-_k$9Tin{va^Y;H)7{0u_E3K%g
zc;e*AgQuoyKNYG3?YU?MH60#YkFRHCD0zL2m!aV4Dbbkyb+VupF)>Q<>$YqWF`CKa
z5NVW`kkA0?fyaFp6cuIV<>j@ousCr4zWmOeJ0rH`%$#vz`eY9k0hY$EpIlsAz9yuk
zuqZ1lgSJatTzJ8|qPqI<i4z_d6HU6(qSGc%o7QGm`)fh`{<<4mGKGtZia-+!e?HIu
zf8@u<#|xJ&YXg;@zrMa^_;AVpVfy)btPG$m<8U*)@ao*@bLRA{4qt!h;6X+P0a;mI
zadGjC%*?B=;}$Ji1RB5r4Iyl)KQTdZ>aEuH_QhMaOaZ&dCBGxh+Q`2AU5tynyRw0S
zfPCGLg%R<r4EO7P>+ULf$&{O$D<USw)NtqHsyVjRVp&;PFYfF#W&o|NV>spZAbv~1
zLnn@=hL4YrD{E?UW@cu7_1nPB#Z~b3mZ{HdGhT)x74z-u^{%g5vV`UIbba;%?eU;e
z<(|mdvXp=S{{EiewRFR#O-`PkoSQanD){y$5~N8`Q1Hdw-R3Ng4SV<6G9=vFQwds<
z5f~^qY0{(*f4|>%4h|Nctmf;Km8JFW&Q4})Yiq-qdh^waK0Z3Sqwq1?Jp1}S&~m;*
zEu1&D=gYV8$#x|kZtMK|Zg2JXb=PZSc9n3ty1FJc<>lt`E_id;tER>Vq~*qqh>uaT
zX3a{{1eGd+n%mQ?jsCye{a(q&M&|DBa`Eq(+1cP(G=>NE|9|rT`tp)lUtb?o(y05*
zacJk0eex^g`a0RL^>Mwox92l6fVQoLhlhg()<C22ix(>|TD0g0Kg-jc+}w?|zsnd>
zRgHu?m)t9TBPw6V+7P(dE%D)@R_FlAkuoVMsR<`jKyw;bu3mjzs=H{}vFm6X7c;k=
z{IjR>bHV?AwV-LXpFe*V6c!$wWtx3qYj$``YpbG>kx=aJvepnS*NhB}egA%CgG!X8
zOP7KMSlamIK~tj(UAx5$%*>9p%hz=*SfKFb<z;q;1*=wdJ$R6CX0|#1!Gi}YK0V=F
zvv%#nmoGbSZccX&4;Occ+`9)dRPwr19x^bJ^l07k<?S0b7@V17DQswHc;V8ertWU;
zXXoZ}hlhtxyKzDKC}@~QF@P1c9cLeC6ULP*A$N9_u0B?_a^=bm8#Wx+e!s3;)q9#r
zP>FB!X5VL9w`>8m3kqBIEP8yr|McGNn>Qccn0$QITkp_NQTKj1S5HsQkkHVhf8E^N
zri#s~y7=<)^4AhO_tgIW7JBRYQg88=_V(~w@o~rfzo>ou_%TsvWx~FF`~D=jx-3yR
zYc{i9R!a?(C0#<Sm;22PD&g>29jW%YU*6s=E^gkU!z-37SimsXy4<a>uyF0I>gwvl
zckk}Kciq^`Y~A;g8K8=INyS;Cnelt8O#S9qEPP?G>dMOC<x$)3?ks-peYzrRQ{G)G
z9x0O*_nw2+C78A}GP6JW_xE>^>1Rhr$B3Ops_SBQGS$}B`pmQ0d5=41-^p32M*GX&
zMu8S}xVX4n1tr{L{qp>d0t^g4fBuZvnk71E(j*b-2;nO^&u1<VFaPl&v8AmoENVel
zM@PqseV;ym{`hoyJQKq--RQO_Pf}7+QW9=&%LT3cX<D3JHRDY1UXCUPWo2a-clYGS
z$9g+DI~_eeI~N^R$`bhZ@81Lum94k-?A^=A0AA9Tdv{mpo9sI~3Ln+g*Vnt=6%w3y
z3AAF|$k^C0^^}NC{63j!)210186CQ^GWg?J^ZOcBd(_%b+Fb2+Q98K${l4zV&1nY@
z9%MXt@E~Zu7u+yab#rlX2??+N`&FDF;m3!EQ~P*jt+s4DocU?SnakQ2uU%`KIaAWf
z*?D8aL8d+5?^PER7q2e%y*)wE`N&1@?Ck86)YQ-{<*8mz-CV-g#oTl#cLenyTD!cy
zzRdJJK1=(b%ZsT;jvieYzrPN&h4j*;OAlVZ?k;|QF7aR!Yw0U>0|SBCX1PsWU0gy!
zLI!DPB&JN8c53U+>hF5T`eeCzd3op9RBk$VU11e}b#*mIQ@~rZ>TfyVv9%+$^J~A&
zY+9_Q6ci_GRl>jk?!jyn7yqWB_W4T}>X@c;8_z+0`#%iw^71a&$28+s>YY1th6gmO
zZ2f)@Xo848E9-2Lky_TGRjX&N_d6Q(>%oJBH+OalU%Pe<l#iO5nVFcF7#KEg+z47*
zyKbG{nl)<-DnEfDIpmeTsw(UJx?h^0J)pe2yeCqOEUc}Qe}8*B)lNcK&@}b$udmG;
zHyVNlEJU@#6jW7N{pZ;n)ZhQ7>FMd|#U=k(|6~U2y}P$sTv1W6ptyK)^xthYimTt=
z-hO?jKQAxu#+qll-|t)f<-mf43l&RBOXC%@7A;GEe5`kdQ7R}TLF>)5!`B_SdslY0
zS?(c_k0z`8Kf1X&-NVoC7|5E3hucrv&Ym=73TP#K((P@zpruV+U0o9<Pj2q$-~bi)
zadB~6d#sff?V9Md^uxDrZ3-Nq9Z@>Ex)&F@a{J7)kxV|;)3|Wq!bQ$GK~uD5?k{-A
z^ykl?EZfs8+jr%c{#;!D>q{ns!*spaC*P!{r4Qe^Ba?o9-r7%ldU|@KmT!*Pk|AjK
z??*C6Qv;{4+6i3+$16A1#qW=MTd&U>`l|HJjg4Nvy}Z3a)6-9$KM%JOla%c27T523
zKV2uX$-Q4L^!EPw^W&$+hYJguh9)2Hb9HcFm@{XN!c?!sq@*Ux;%A_hy<L23PX?~C
zVnuF*Jna>g2X9{68<u-|zL~k9;mVRTSFVU$Umw5z)1Czj6qYPse)#B7*1o>JqQ$?S
zmc6^vd3$?4XrM;ft;ZoGL?p#1QubYoM`c80<iiUKok5kszTfYxYrfwtf3#83I4$95
zm*|NTCl0X7*EF=WurQ>aUu|J&$;fc%(4iyW6crU;+~03sR8$0N9<GVp?3VNR*|TdM
z<*qIv)v&!*p+BovuL?T+%xC4KN@Znb2}#Ms!)?4>d{29yzJ4A3I%QwYkpO4s#g`0y
zeSN1)nF8vG2W1B52f)?>tPFWKWBPRQbMx){FI)(4ad837IOgyDIxU8G&a`P_pgmtN
zUUcl(Vc|2wppo14f^_z|IhF+_B`g8c_Dom*Y-ME?vA@n1y3D-a?ia`F>+9JWb_)J(
zYGV3WT2NrX!^897#fy%stHYDOzPj35q3+^x<;Ij%XWC|o$;!$yI0Oa;E=_iIbqxp%
zTsh?gb86?W1C7jv#m{^qqN5+**qD4{Q>ypUiGQZ)MjyI=Up{E12qPoooUTbCi<aHY
zIpw}Le(KbzQ-4Io#>Up<=H=;q-}mTs7ifd&zIz)InXA6P<1H>O1}#9bv$L!C^(C|U
z2xv=Xe^Bq4;LAaFr6Hm5<x7_@UmUx;%ygdq<dYAcJ!4Z>S8r);efZ#D^NG`^Cue{D
zb~``$c%Lk2|LrvWc)hv?g+>2w?kd#|2?;59azgOq;Zo>oR@>@t4$;xlx3}jXpJA9R
zBBLo7nA$C_KTTVF&D!_-e)BQ2@l@~%YKp6U4$0Tk)0^O-vZL^E+ns-J-sIR+d;qNj
z^IZGO(9rPUi;IgV&Y9B#stB#@%HBl8{I>u0&RVDIb*=P|y$U+H<&Lv1O}XcybFfWn
z=~1@$#Y)p!RJLUZ`Mxo{n84L}Q9`KKG-FNRh6WE2r7j6k>0=!_99fGN1+h$gcIn%m
z`X5&I;SMhkANss=-Cn)&XJ^jXa&J06&$js4Ez>m-8=1Pr^_OL<aa1<$+h=#^&>>Lq
z@Zv>=i<_I0nVHzpqemGUE?o+$`F1ls<czRW)KY%?KLU-7jbHDbyK-fV<RuMxt!JK~
z^>m<Cd`DN;p;J?}cN)GA3=B-@N&NNY<=0#DckZ+_zuX(35fULTBhxcwipZ>q%@f33
zTwDq+AN=<2u5|VHccArV0Z~z1YooU(y}PrM!6A63pi`8tu(0qxWerm)V}B`C6&04q
z$jFF26^5X7H9tS4>O^j0xxC!p{r|tej11Y=*R{@@H}8<|lDL?#sHm>Dx3@1|uz=z9
zwYAQko}GsZLqb9}RDaL2u(sZQ=cM2w7B(J<1HDWAy}X*%uGPJA<%+^Yj~z~O0W#tK
z9EwZcW=uc2r?;24jaT|ud5;-r_HMb~T&JKQp`M-|&?1tTmzO6WZsU!ay=jxtiKj&&
zp`llI<(!#ecxS_$pP!#!x0v$m+1c6PO*b2pk3X~3beht!apOmAeZK8mw;p{yzy6+6
zCx>Fo78R*9XQ{RB{c;wCk6hNi7T1YrVC5FuQxfUpb4I&AI4Y`Z%NCOzJ9a#HzyE*R
z>ebqJFU=GH&1X1))}|FccAH~gFK20K`QpMt=3QlPx$N!jb)vR#?Ao=f=D13Wz$G4*
zH$SVJwio^T_m82W_V+i_EPFFEvke<Jt_)_p8Fl37(Sx^dgBEE@*jANnmQ}a0kzr(H
z%vif$OjT7C)O=4$Qu^}c3ut8C!qU=FLEwXI?*|730R<f$p2x@gpIdwFzIN+>p1`G$
zS*!RI&#sr<YyW2Pyvju(pxs$dpSI4kt$uW*QyA1P($Ud*@bu|YgK%@j76B)Z>I-Ve
zH9(7m=FOWY(CKpF^5w$~jLaMA|NqN+`|0!NhwtC>Z;aqkR#x_zV<E^dXY=4%cxY(i
z*H>3Tm8pwTql?nP?Dc!w=319)y*YmD7~AD#zK7r5-foz2L1D(snOC!aho{zkzgzzB
z?OR@kiqB`wMfd6T_x6Iu363NgnwXeeSQ~A=CTgo!Vog=<&nYwa?X&yy_b+H2P|1r6
zjk}N9LL7PNS=F<}ix+=<HamaOrcINgr_GqbQD0vVs^;_eeidVI(3^hv`gQSiP_Irz
zR1~y`4m5HZ6C=Zr@bc2qtM5L{m@=j1zyXJhtgNIvI|}c7>gwY9@$=`yS65eGxPE>8
z^>6D>#mv5NA>hmmL+6L9-%gn#0*b!t>*L)sGG2Ip-paac*)q_`LyX>YYc9o>31)h>
zwz86vk_P7H&#k#uHh=k2vQK$ShuKx*_`tx%@AvEFnHm`&{bEN?PtHC$TP|m3=Rbcw
zpO3ly<447msZ$?5I@+zFsp;tB!&6dPI&s2;19u$@pP!q%VcWK2OTDKnOg;%(thHi=
z#){ReA3r$Q%yrzZ-~q$-ziXqnzuHq9Ym|R`8}IQxS>_KVelMGvm_$TG65id}DPdWp
zGHKGJfS@4IpyHM-CZLJb=xsTUQBk+NKW|knQPcs2=&i+OSB*jS{+<2x@|)AoA5))S
zb4XX-EJvcKs7U12s#U9$l$4r&m;5~@ou2^e3GOIVK6UEUf@RCv&YbaS&24c~tf{G4
zuzr1fZaqW6j}M6*N0Z)F#%^2h|LpnE<Hr~8*dcN8;>C`>zI7YVetdlV;e!VO+55gN
zTC)bUj^|Fy9Z<@1zH#&B!E@*O^cq5$m>L<%%F1evX9(u5nsNTb2?mBAKYr}ll)F9e
z?y6c}wTT`g^G-i4nqytgx7>feTU3<PrAwC-rh0w+@iE!L(o%CvX<^~YFpcY}zkj9F
z-TV9dd;HC3@9yr_KYKk6l(a!>6(%S;gC+o99aRU}J^SLaRkP9`FS9PG_?j-l%-lSE
z-TAX;TUW2vzH|5P#-gWQPo6zHboZ`oVq)Tk?c3L1i;Irl?RfjT`sdFsN`eduT3TE^
z8>QsW_g}9!jIVz5?j2uvc({yhl?bSe^YY^IUFgmMN+b(?zn&?7drS1d<%g=hdk<%a
zgouFVaUMKK08L-7TD6K{USHw))2FMS_864j-M4V&-8*-7JpS?P*R}6oZi#|+w^mjj
zJbRXRx!>GFjm+$z9)3k-<-tprCcUp{5pd#A<h{16>KQw~Tu+~@b<){crV+c#bc>3M
z6(^qrO)T8FapOw1*ReiXYo-dTkf-P7T7%{b{N`9RCLV4B4X0UJT59O&<$d|~_3WJ4
zv%5ciDzdP$N_udh@y4!F?R~#qY2Vph&j0l3(;Y=mx%TYct0=&+L(%4mW~U1iXv5YF
zL*`ktW`Snr`DCq*l<PQw{LGded=xaob!|-~Xm=54r@EV)8)(<sfktM~FqKZkh6U$-
zfBN#JW#vjuv%EVT+S=MPX3RKn`Lgh?UAsUFvnNfS9RKU#f_1mAn||J$XknaorUA5H
zIN|a#Ux7{+4lb^ynKLC@oD{3Rz3JSs!vfT2-nMO9Z-wdYb$)ZL9<JSf57dxmc6WE*
z_ZSpNEhZ7OwVp91e0p-Sqpz=R_ipPgTec`n^tiCxU;fRFjn0YNW`qlNAMNPvZSC*p
zR}td$@%8=q^?JOrjg1Uw7?y{JCobyD_4MDnQp$>po7>yjTbvZjAFi7`Sy)I|_~G;C
zpjFKiJzC=SRwe%Z^)+I9UaWH5(QgMYUD|Xv=A|DfRJM5@nDWBQp}xMJVS(ntS%DQ5
z7EDY`FPH)siLfv+9y)Z$pzcq_zQtRzzmzv`5%&#jH#i2G^8l4^{qpwDrpepYNGx{i
z%_?#G6k=Uff8+YIs%M;;T03{{+)?n5Y1OJ#Kl+?F6qkTHrl8KrqJR^^mn1^Y2nTil
z{{9{`P<I5>mw56d<yC3UQYI!Q1p$s12OlddC^Wo}XLg!$Z1YJ?K6$$}26Ib-zn(gN
z^r)kPfP#_HCeLr~QTxqIO;r_rPhPzWTD|Gv;o;!o!t(FeYyCa{e!VUzD|==wRe7#M
zQ2E6z_IXQ}FMoVuqH@h~1s6@5-TTjcF3(V35;#Lh(mYQ_+B{F@zTvGc8#Wj$OW7}`
ztE8^p-rC;2dBFk&F)682dH467Emt`t!F=G*p+i6VF21{XpZ8Ln$u_>i^73?stQydf
zJTcbU+1X~LuR^}vum8WXk(u2nI5_y2M6#%;XwKPLrfZ_N=lOVhch8(LV?#p&L)qtN
zzQ-hzLEEwp*{KS7?)_wIomW?9H`^prXtIaOnF|*t_|CJLnVOnf_*P3>`zF8rp98zf
z-=8~@WGLKybWQpDdpXDZWKG|_-~az#vYnkB$mpFrc5K-H?^n0sv51lqlj4$+lv%T8
zt#R*{dvjxBGS}_nM~-Y*=-h5J(c?&qlVWjMS(<kEx|FF?r>?h|UiRgmfS>K>mMe`5
z7b=3*dvDK=KXUZw!y6luXIPbL-QNgmg#?O<ihlU~`S8`%;h=q)3^R<=`OI=|9N4O<
ztLqvOAu(yvqzQB8+)+86+LQR@#YNC?*Y=$6@9u)~HE4-6L&UC<m4{-VF)C<kayB+L
zg7V#t!pA$F`p>gz?C<BlbonwP!^x8;KYaaqv`^L=)R7Mf3u9tf7qhczWAbs(O6Ln#
zuY$(A($36SXmG?-Rh6|{O!v^&*VhH5q;9D^zb$rQMy1oMgNF_=fwuT9@th1!c`hgC
z*wsoYDk?I}>zkY21FG9hx7ijvV1QI@;7#WzC#!St^1AM?`&;n$SLu}L(?Mg?lhyq}
zQ(hCMOlbj~-Em`MGDAa02ZxA=$QA44kPwlsuC9WIhghdfnWCVl$0yXu!pX@w;baO!
z!(8j~L$_{8P1lQU@=<dxEHqrSXwiao>-s?3c;4jy|MwR(nD_Sf_KEZ7_kX`v&Cklp
z3MyOn{dmOv<muCg&(6*+C@ywROjMjSd2(PtK*P@B=SfdaO!V;b0u8687)f5bbjcw5
znoiEmO{}1CS-b7qy1FWzq#S~SC%@-t5pcS-<8V8F@`ncp1-g%}ShL0@HB}X~PxQnI
zk2$v0V!L+j0<8g%NG>QZ&!3bmCMNdi!NKN&;^O9M)5L6SZ3QJHI##XHS~uhTnKMUv
zrOiQW?>JhWGP1KlE7*Vi`gP*u$-o=;H}{B%iGkW=n^I3RFx<O$57e^<?L*Mk)&^~u
zWe5lgYWne`LPT6#*~&_4Z}s=KZQINss}2v;8h?Bf&E#~{M)7RZvdy4YsDz%Lo<R4}
zJH-<{S~4#$dw8&!9n^?#<B?>Fjg19u>vr##%iZ+Y%F1d{_VsmKr{|q#wAtJ7{msqI
zpi#GFJ~Nvbnb{89xFNwWXR~6Py}G)3Mn;Cl9Cn5;udaG8yu117fy+0a#65j?clY|7
z%W(mQ{vN`oPn<Y#-u{2jk|ip6*O;85W-B_kUCA`-U9(1qgN3Q)^I3D<30(r8dbVvV
z+nPGtJpb6s%gaHdSYO`W76<h%ANSjXR*%2Axp}!~Uv@&mhf7~~?%WA#eeT|E9kwo}
z^Uj@^9lLic>*(-&`}XbXt<|emUE3iqI`x+Kh4j|ikdP^dzRW#uA1AZ<{=7htdyEYY
z8y7ED{`ccCKWOEErlzKeyRBl&1U1lxn9$W>5AW<OuK4rAkWa>fK~!{VR`S)^-iUfT
zB|ZJ|hlhtjBZ@XQHWQ{#zpiq;pt$&PpKF}&%e2jw<?m$5ty3?3F)}v(*|*@!maSV2
zYkm~$*tt{D&Q9+4x3|qRXG-qbvu9OpsV7Ig-#nX><t$E7K81ybLBYWfA3bVXv`7gw
z%DmXU|Cx2zUhs1Mc0SO!{D!KpSu<wLSg>c0OuxK+Ta2DN=v0wg&!0V8v}cdZt5>gl
zXFa}I`0n1`ZtL=Q4$jWZD_5@M;Nx?Pi<2uVDhh~+;gOY{%O-#L;zdDbcD^Im)<%O)
zMOqoW{LqC90zoT9xW)BcVq#=2UA~-{oqaoG`O+&>R;BN&|NrmB_4V@i4R4u%&JxjF
z>Ty_7LIN~Hb9uRc`>a_~pe2-htG{2mAnnAF$#_03<>t0r>9F;2z0U1?puHEM-RRqL
zZ~y2E&j(GluU)JA?fw0Jz1Uq2zP`MmO*lrWTwAtm`S7q^o{7P#q~eypb@DMD2}w!Q
zN<M#o{~5Dpfp(>D*tDssvy;=t)^_3Q)!i2tyDM8-N~Wcy_1c|V<~v(Ks1vl0)Y#aV
zqt)rlo14Ogg@rRLi`7Iwoex|!?`P%bXCGx7CsY}mnjQrWuz_atjEz4peaym{sTmg+
zcjC;MkQw)Mt*oT(*L>y$9Us!^(zG&odD68tkv7Xzmehep+a^t7S{VX5dc!F;R<^9H
zOv1j-=F{iTpdqZYv&}!tZgw;=H3glk@CbCONvE*-gt>Ehm6er26S0ntjs-<UOdm=*
zy4u^>LC0DZ7k^eeuPD|nC@tMx`T5zyKR-W%b`YMKX}mGzq!1_pfChR&TU2Ug)Ya8h
z)YKk<Hsm`wF+C}=%*o9)%)Mo@=l{Roz6ENz?F|<b;+#4r330G+aC0C2@$vD`zC|T*
zI?u}A-|O9ezi#)fud<+0_TAmxphivd%S%g5-)TcSm?gO!4`YLZgp!hy5;8M6)6>%}
ztgOPM(-tjW44Rz*4Z&9bKi~HA-R<q`JwHu)cDe7K{5Q?e^EQet6PAItTY{Q*3<4q|
zpwh%KI9QmSU+xH~D^YCa^lDx8_jd)QrBB;t30#u9@cnPg7NOA4&>zp|*Jt?HW)^aC
za)Oo}ZOOd6q2_1NjF~eX<KyK)!@A<}H3!RWoERAT<!nK__2X{2`TF*9{e1rC(`kJH
z4wllY3$K^$SusO>$<z~P&bWkxh+JDA-+$#wh}0&Bs5ATj|Kn!(@cHxVZFxsJ1a)QG
z1^nvjz$dKu&Nh4ae1840PGR+cn3yx=I!ixZbeF$s<^Q|8|I{h3eUB%xE$UBf*&-CX
ztK{Gu%VN+WaBpsJ=LekuGJU$Zj;`*{KDS#trpHe470;PGZQAtd$77GonmUzLS6A1<
z%BrZI|7H0k0oRZ-!k4-{RD^!~`n4$k{yq;6j|1P{-cC$SWzEmeFL`%o=KG2zy_>de
zV`Bi#IxTkV4T`uvWqYUk5<MYdVa2IliP_oR3!U2!9Xqz{+U^b^Cy+-&jf{+%_V2fk
ztA1;G<mge*8con%;}$2y`xiZ=O$r`3NJvP4Hc&2GwhYvm*s^5{Xl>)u)6;|fH8KO^
z;^HI>lUV-V6AW_yV&6I;?98Q0LYJ5M9^R69dBp_vvu@7L%=Ul32umd2;f=B?d(#0*
z{g;+_UbuYuv9(gB@}|w36{mW|-*R(yZsw|VdesPOd_HAiV&viF{n_VuYsbmS>drc1
zk8kJiKRQ)A9F!j=BsxU3!yY_1*j#g5*-J-Tn>%Qwh^D6IiPNW>Cr%WUk(E^x;HWqm
z92$D`bRlP^9%wwv!&*dKJUn;i`t|xXwY95t>wkPm^mb9oJ<-h0zk|un-d<j)lf}=^
zub`+1)C16O-Q%Nn_~K%B#mOfp%$n8p`}_OF#m~>}sa>J4WMzP%f5#+kUEQPK-rl~r
z++Y67tE=7jW^gF(0WG=k^6~;r>ZYfs&zL>?^S|vUPoL&aKR1Vw0W_j~<;s_(<!0+Z
zn-h$TjSb7+-FepKIV&J8PVT;76pQHR77fdtF@2yVfmT-F=EwBu;^x+ziY*^Nr!`%;
zbm`IFhWdLiFE5wg+uzf}laiM9X!-oQtR|NwJC`nB{#kaRE7)z9FJ1%<HG(Rg$?E<|
zppO5B4Go}lrla$t&pm2k-QQoP8M}+0pEE5KT9hM^eB#WRmKZ(v>3XqQxy#qCz1y@h
z>fGl4*1x~KeQe2DDcb1J@bB;M&$5d_#(PL7W@LZ{NI(;kg@uKn?i^?fS<;aXv){+O
zq|$zWdt2kK;MHQ-w!8ejlh#xxt*MJPY!JA+tF$`P(4QmI5|oOMmAt&f8ob=kH7ZI<
zFLswpaMYx%H*eqm>~o0Pna*0{<;4{g92^)C!C`A_Yhh(|=;qCt`@SkK5nY%xZ-UvW
zg9jP;`1op$E3{}VJax+J&8@B6LY*vkcbB)%ohvK)p=C=DD9$+)T^eW2l1e*2k9VTS
zk#Z5I6WSMauW@7^e|Kjm^D&A0h8&8z9(vOsKRY{n{hoRT(N8TJ?5}33FPW>Q2by`Z
zUa)>WzrVl#jhi<=%61A|@>#WN)ra@{|2t_-RnpbvUAlDXhfkjl9cX0!+2_WQsiO6a
zGjn-KNr^%6Gat}Cf$#V0+d&ob-o2S^Tu!$*cE<FbIpYI5ZR6I~Yz<9KP*WW=Q!Oqo
z{^IrP&$1iuZrZrf@%p;h>^;K9ieFui+9<xA(b&ic8nQ|_zyNB_Z@*vHJaww*y^6=Y
z64KJ2W%~s#aooIl6BGkHyu1&eJ#%BVQOp$){oEojW7e!kbIb2Jy1B7|7VG=YHUkaP
zf))tezZjQ!ZB671`+B?khPSp}x)iied4g2QyE~GfpPg-v(0OLfmFZYmSO{8p>*B)V
z)-QLqT;>wfiW%xH1v$C7pgr1OzLb=_y3+aHqGdu<NJz+oW4+QFwrpu>Yja!scEtqs
zC9(-E0*jU~Y}l~DU|;f<>cqsvo_l_?;wvjHy*)h>e}8+MeDL7GoS&bbzWMd_b<Odt
z@MFEwpe4Z9U;K@TjyCr9_kUNJnyUKyVY__9_jh+^M(Cs^ZJhD--QC%5L0#(IU0qz;
z($0dmNSH5My7Z`zk57by1H<mh&uYm%8_VxiwlhAE1I^#>T;@0T)Ths%Z!YniJi|pP
zv8}Bw=hKsuI@;Q+?^Vu!OXbd&fRl%IXkcJt^!B{M%@?LjpAMSsl9Q7wC@Wj`Qu%hr
zQt#<WN4rG1PEVRNNkBq^!`Igrw0f8U)EUpYv7s>=G!VRDgMo^ws-mUkPR~sS$3RO`
z=UA0?MQ^MAo(GyrINmS6K0J;AH1S_kQ!`=SJU#{wKfkv1>-9mih=$3>7Hrxi1YQ!;
zBWo?TJ^y~&x^;R^&d!F($9P&_P6q8%$hfEkS}wD2;X>b{eYuQhjr}=RZeOuNW682*
zmt?-Sm~4LXBn320a&fUc=#VJTqCL&vWeei>*M*$eu4rBUu4U_1Q@z+-EHi!D9z9BO
zadmZ!jg@8Rmt*;`MT3u|P8g`|i=z`(dhYj`e}8|2nysLTH+y^e_j|v~adB~hf&{b^
z<;3aJhtJM7fB5WK+o3~FD(dQ>X#mj9pA!?6Cr+8tGHH^~i4>zHOP3~ITN8O>Q!4kR
zOP8d6uG%hp1?1uBU0qzDUZRc;Pg+{qhfklJuCI&z+2`sp`^wsA^BcEsJ4Z*)ey_1a
zGBqtt%SN256?E*vzI}E@MMVq@Q>RW{v1ZMYx3{+oN=kO_tNpzQv@U3Cws_gwTUS#e
zxwyFtKRj@J_kP#%<?2k#%p1$zMx978%E-vLqWRt!+IcI_1+6~&a65lLXmI}YG+kzf
zk~cR5K_@FGBq(@!c?rnN_k)7h-CfzrYS*zj$NS~mo12{{&)sgcIBA|hkbYKH7HH;*
zjbE;(rG*8w`5-JT?8CQjVO=-#IWl!qj3o2!?qXF}UmkUP#p>10v9Wtug9YtQ;27zA
z_uW}VDDl>o%pYH`$8W6on8eV~*2ZRIYy0tGyL{4*4-b7O9ldyQV-)+@Zt<Y&s_%{c
z{QS7YGwpx7tqflu$MtsJ|79=#{r$cEOy&1?cdh37S34Ze;ZWpFN=ad<udioeV{=lQ
zocQ_K*^Z8m1CNjQ|LhCXzj*PY00&FVd;jO>=H9+ql2>YbUp!v@k^yKEe5!W%hu`n_
zKW>+=JJ86?E@dLpv_%$A*NiLIJpW$L<>mg#2b)-5+}^IQrLFz(xO{!Wkq*Hdo74R#
zKQS~g$k?<8w16h+aa~AAmcHYB(Qn|{tE)dM3eVJ4yV-tjnc%i@)22gTUS3w5>Ln;I
z-+$>+kcW!UzT~SnTe-y<81nM+c2s}Y+q7vDXn1d4@YbGRbKZYmFT8R-=sap$TUkv_
z%^j7W)mWH7=f*sE`jk~%TwKcO@;O&m*N3;ZW^?fI9eZ@Nd*`F=ixx3~_SG622WPy8
ztkP%j*Kg?U>}=e>-=0s-rlV6>ecP@*ydU4Z_X!CRsj01%-n)NWUst7*$6`(vCJSrp
z!zWL2GBq~5xA<E0@DOW6L_|UPp4^w+Rhu_&zPPhET_<*zNPO+r&~CZgckb*t_x$&x
z*DkN#9qAPQ@%#OLP=nFl-u}kz+xtuMDlY8<rMv@|`LCD1yVKa##ugMDEGQ$>vuBUZ
zlP6C=2Pc3w(p*^RY?yb)Vols$DK#}U4SoINkB|2&PCvc#ugzre@a`uy`DLNk_gGn3
z@!GX5UaZW<C)2Sudi$X}cVs~OKo>4lToR-yrWXU6at5`9u3g)<($9P4MFVLkkI8}C
zoa7kvVs{<M_OJ2r;gLuNwJGx@Up2kI?m2VszhAE-b`&UrmS%^Chig6QWFp*s10@2`
za<2OSbtNw^v1VmufrdJ!Xa+A>y0jHEx5;o};o-}5w;<cPJGSrX-I{q>t;0o$g_ZT-
znKL|23k7Vezk#}~Y3Js6w*DywRe)P&9PgL^Y&2Ijna8^9jRWX}v&D;<H%9a{G%&>M
zC}6Ctth^Jx%ejpwaE9!`W5?J)+ZhfWI`rVtBPLy4-Mp-Apq}fE4T%N@1`XS`nN@vx
z(Fj_$c<ZOEO@+X{d-p*5{*NRX+Su5DRy8s-K-TPVGk{hL{Q2`|$J;(xYqt3KcnK*f
zCk>HB?)`FCm(^59?%P%IvF7zJtBL=EV`6%ux99EM(%aYQ@P8X@EkGY%i&G-Es?sSp
z9WiAyGch|my9pjDp#3@5<Li4rd?={-bW$DUsF^b*VSUZJ<@Z}#TUlG26hX&E)%~de
zEtk8yyPO@`*W5mD{hr>ZPoA_KIpXr;=TFd~)ha>@!`H`wmJM868-1N6{ZiYOKfS9s
z6yHva(M!+1wkC15S?;5EVK*XH9G3kD8Wug$DJ=S~>&KhKgoFbO8-Dz#2n!88>Y^lA
z{rl~9$>g4=PoEkxoH=-~F*`py`?N%I&aEw(rtkO}e*gJ=e&^@8R;5|JxnI6~xnckR
zPjK$f<MQ=qB$D53K5w_W(7Ms#fZrU8kEd!%KR)_-?Q7{O&+6UGIf;pi*7g5ve!ty*
z|HkzAx|4N39<r-VKmD`MHOe9QF5@(l{k!(qZxMV5sv|N5nHm{{)qEP}&65LFuCmr;
zS2BNXJof9|?)Mwg&&%!Dwd>K3kB>EUb&u|?{%(+ZN(6Kwpq7@_i@Uqcmjr2cb#?7n
zsB&KKhmXJi@k6cL6DLh-S{=SV>HIufi-HFXpyTD2EL#TJ$8I!}=lQw0psvfecXzoN
zK%-&Xa&9tNTU&z;ZFhBb1=V%O<?DOg`{f>9Ss9$rv#|L2xr)cV<_9DW``iC**|Ec-
z=J(s}prv~E_Ev*N9GjY${(LyhpU|UdVew<>&sVRGeqQ_f^_94(Q>HwaU;ppm`~Cm>
zCQJ~Ju`c6z_3G7+`~Uy7-`t$8{Zzo%$wT_!=jEJE9@Zt#&&h5peH|tyB68%=;lno%
zxARMHk>9iE`O}Mw-F@8M+a;x>HvRci(^|T8=~AE2(5aTz*2c#qZf{EEW<GFkzWsTL
z<Tt1F_op!2cy)F4&fHU{PtRPrGIQ<TPYe;~=h;R&Ix-4(y7>6}_ot?(Ys;8xYj^j`
zT2E_jZQa<@!^75~8?m7w`u&?XXG}~@v;TYpCH6B%jx4!W^Y!DOpVyv)V)Vt#`+F*l
ze}B83fAinp-!ntBQlCD3TH~%{6R>UG&#l?l_kDSP^)r8HXz0GjW-G(@+HX;OXfm5u
zammq{vu8iv`~9ACR+biM#_H?q>yOWx-*?%bcX!qoi;WvMYUt^?1q29u`SL~N8Yc^r
z!Lc2M4?r6fcI~o?iH+U)eAljBGfcC^wu9y$3*X<{J6-Pb!Gnw-japiV%<tC(zhyE>
zPEH1GQ)d9x@r(@S*S@~Gy4u6j^WdJ!&k3oip}F^qcFx&d>FxXT)#IO^dwY7;e13f;
zu2<TePibPu?i~{ZQbC(yKxe)`vS!On`x4$Ma7fzS-TlVx+n|->SKnFO5D5wnW@I?r
z#=Cl(o}Has(axB}h~Cw!waXViI@&F6Sn(ktBP*-u_MgAs?=#F3yQ`<Cw^hzuLxY3C
zpy<ho>Cb+@UcaBA;r8{N#m}?uzI%6fH)vVdkB^VD&xXsNpPyeFw|v`+i;LYsZA~8^
zpRC-^kJ@FNI5KrJ&e$lngo6_L)z#sPpQ)_#t*o?USg>Y|Phw?gsOU8Pcs>Tuu?8td
zlIvo39}`{k|L=GCqN1Wzq8p}8oyrhbyZU4L@!G2vuRy0_%UYE@$g7VF3SxSY$^WN&
znocCsF^PM1zu!iEzIwI$dGz(`D|JtvKYtuFa9jB~4K&FO+W&WdB8TD<M{toGX=Y}|
z09sF>U~4Oznwsk2<#p)9MCHPVhgdmUol4%{lbx;~@8;_2y0tt0_qVsJH|$S8FRmNa
za(cS{<CBxsL5sBf?f<gG#>T!|*K_XNxtQJ2+w&GKTEql$_P+oBsySMnd}bQ4LN?2@
zy?Og~XVR~mCKKn^|Fc{Yq<QMpse-q+OhKExzrVW+s<x)@T~<^26<q2Bm9et2T9m(&
z0Ug3=ntkoTnVH50CMHLYbP5}0UQ*fjSkTF%`GSG86UTbc_OfSZBzxp+cb)wH_Wk>Q
zRqtsJo}8S#Vf*&y(^juu?W`jP8eh%I%8DucQ)8$vz_F@V`1`kS$6l}B-`CR8l4ZOb
zRL@0k&tv^iQuB3^s`rQI^Xm`Yx)rr>?$V{Ipv7q^DJcvLK|w(eUcT)7{QNv<GGP7Q
zZ&G?OI}X$;R2(~Zj&J|JU$4Dk0q;38G%PIX@2{@`!NJYV&CG2)l1=MkcRRVZ{@TK!
zc&hhbm!MO{#Oc%9{q6sXOq(|C#<tw(%`(m^LJxm@d<@!?Qc_Zqkde``G5NTXq9Wte
zsZ(PNt3N(+?KqmWZo=M*k4kUezEzy)A@WUKfTQ5YheXhzBd89VHcf2KoH-wkipMKx
zYIfd^b9QDfEGz_tY)MJUf~8AY-QC@F;`T^P*Nbi1xX}=_U^#HH8)HS)VGYocJFY%H
zJj;A$G6@R{XJlm^I(n2fzW%T2q)C%@7~b9bboFZS^V`?0pKSE{!b0X{zO&nYetr&G
z-4PZR7IH$^=@tuPvdx{oi2|42&9$$Wb8~asuyJGK`t|xs%F3_z@;5p(Y}jD%Zc#vL
zNN6Z4s9;Gp@q)~^R_xsU-uULtn*rhB%eg~6H-Gy6ot@#$?d|=~Ri1?2I`rFF_U+<C
zvlf9k8|n9VFWii{#g(f6<mZ&BQ(0GraIFmKYUh^+Eeg1I?_SMurIra|p#Fc0#zuAj
zc@8>a#l~;<oa&Rc{_yQ~zIpMgXOkySW?mW6m3@8P!-t34@64#Px3>okH_7&IVgCL7
z{c`JnlfqiNDxEk2lV;7D1=>Ao?bdzb+___IywVF+ujY1lcmMOg{(tk#nUbPmOOBqI
zZQd`P<s7x2k(uoSWDto%(M3~2S~~eyk0fZ&K=eb4_}|~(pX)`aFWI`l`zL5fs?QL#
zUgJc{rs>;^4GkAM%@c5%=WP4AMZl@z<C+G4Pfy3JEG;?vx}L(v$3TY~)wnCS2rP9x
z3L4-QJ1lYd?(XuPO#3!$5U8rEDkvyu*u2?T2Q)tA!J+5{cD$nQv-$P^98*$MczAg)
zZcg{Nu(UjQ<Hn5l5iJ6XwtzDKhgGXqb-m|U!fI({1={A=*49?z4q6=1sMny{^1(@M
zGU#3gqnSJ_SFYSq|KDzXxqzy!vxZ2JqCbbCZwDxZ^!M!91DdL2aHy)X^6~W*l#w}8
ztaWM9q{)*(>xyJ$WoOKo@t|9O--^#?*UytQ%aLGVVq{@r%*n|K2nYyR+uPR0cHK=u
z0CY}v=Bi+Y7J+-55~ZzzPE)2hC>-bzR8B}wKVCkiOxM;{*1b<=<#luI>+9p)=iAkS
zHZnb2y?!5P0`%eQ*PwH1|NMHrzVx1dWu>K)v$J9Kx11ACi$KSkU%YrRAn@n@eXHKQ
z$pLMa`~B^$vyTrC8?RIgpKQhyO~oa?H{6ffD7s``ta-fFyY`-68?SU*PY=(M<;$Hz
zLq!=jRDMna<u8lsZ#jGO&m^a&w*LS3o4>~pbn4U9s{6vi!W(mL8XY-$^lJA07J*Br
zAc=LUn3x#bF$vp>nwHkqtFP0`et*ja?I^u|eY*A&#)8A^UR^f+-?M9%RrrDW-*2~f
z^z?*8tY5yIT~>B()%)oJPEpoc&o~uZwybDrVPRNNR;<Cy%v|#73TOS_ui?$#e&0-=
zpZMrVXF`vnfq_6~W@hg>FAl}EvY_!Rr>HC7(RR~wS;;9WN7m+d=tggQu=RQzXnQ^A
z2%JNQ4za!O7I2!v2vt5=-JiimR_e3T!T`|h=ZTa}Y;U83gTbd<JwG?M@b9lu7B;p^
zQ<k?(FzW@yyrQmGbhI=>Kww~CZmg>-Ye-1Qf`tn&KKMI(#ta1`BOxg%DbU%pzOJ4e
znU_JSP2kd^HEY*0GVsgWt=Xn$ZZ1A;+O%Ff&{;hKQc_$D5&LQ^`(!LHy{Hv(^2m09
zq;u1X4+$JBOdd;vTAzaUkNy4q-LT@rgR1wNmn}2_O`R;CU&pmGrtfICxVeSCV#}5^
z(8#5Sv{A|l0SgO@JzIKvdwKWl*%PG^SellW20Er_(V|5P(@*bw3humuM)khlOZW5R
zJ9X;RDqVg)zP9!2^Y^~j@#auG)dcaT9<C*o&+{a<mc5Mvotj~2IPvzoqp3@mE(NW*
z;o{=jkayQ=%9JS@GVZRfte_K`Hg7IIJy%AtWs3qRPF*~Yf>&~A+);S><m6<o&#SLr
zS!TLn`}X52gO^X3G6l4k>c`KYAm@R$cwb+(W(`l#PMOfq(5-sX#%VnFYQM)a9QgC|
zvtiMb6IsWFI$bPket?z~&-%WEL$QTj_6MH>hvJgjR~Hwv`^~WkeEo}+TP)#V6RUo#
zn6Pm0^5n><s3P$rLQWphPM|VpQ47e#it1`+hI=)ieP6tK#l)~@&z>EIpSNyZ>6w$G
zV`F2ZAlAKb;ljqeySoyvt_tPa`=~|0DN6p;O!bxtWqKwiBF1TF0%i!RA(kbqbe}EY
z6lDlfA)vY?_qG|Rz03fb{b*`xV%w^zp>g2O&SKD6fGVo03zsZmF`CJfnVAV{8g9$E
zxyXQRzJQa*Yq0w+^<i1M7H@f1Rk1~&E&w#?wI%uc`}_5&vv-%j-{v3$T7TsT^4O)m
zP8THx|NI+IUcWwFEak+Z_|+96zH{eJ#)_yj!cH84b|GhkojN9+K6}=+va+)ImIZ;8
zRud*pyclzlQ?bQF2$XvkEwL)8unH<V)+1?PWRz7f+jq8^ql%ECh6YDkTABb?>x-M4
z)gL{2WKjIf=f<sDX6HEtoH#N~An9P|&YcGjA7*x1DDdprGv2(%czT3$mV@GSBFmef
zyITaDI)ns~rWG%(Yi(~=R#0I0Qs%^=sGBE$HqDtsu|?osYkT`=*+zkTCd-0BizGM{
zTR!N4))sNJd}srw?-mVPDKqz5v(pcYNH>GZebBlr7tcULe~^Bsj!BD>=7EG-1XRJ5
zDv0d`HA=u~3V68Oi6issw%prnjSd0N+h@*<>`twIy>|PK$8K(JX15FN{(cF5XCZB#
zm$U8ho)s(4>nkcU3aj~mwlye-aDjF}>&5O$cynVT2S0y%j9z}zmABl!zMf#~XWe~1
zzrHVj|KDx5K7saHo||h8JyN7K`FP*L<l}udDj|NL4rgE%BO~M2R~r|*U$%c`>|PWZ
zDOprpJo}@0lfWe@S9ka85hwP)`1JI2#I~GBZj~(S73uQ?7F}`ckzlm8w%(V#CHv*e
zmlj1&Jm%h7wrrV_k&#eaTN`LPYw~2_p5ETsmWqL8@Av)I1Lc#})VR1fP&=9-;q9%h
zKVB^Eukg551Uju=R6Fd0?Bat?&dxjQzrVXH4LXye>dOnpV-lcK)ZX6S{&;r&K1PNk
zM~-|D4Yo9N;s^|4h=_=gxNmrC?}iNqVb`|{?~FMIT5#1TV|gfSecaimrluR__iGMM
z(~Uj`5`R)uX}nx@ZD{R(`|7GHBL*IZ=-p*+wQs+_zkfbxq{l}`%y^>5k*cq+j$T_A
zdwSKXRarUvi=X?MWn55Do9HoP*DkBgn>HnFPCuU(85zm-R?UCjnWr5c9SNMAoNMCu
z*ZBkoPmYX?+^E0*&m`N*PfwQKK63o{W=3W<17Ba?w2X`s_p0C9e*5syxiwczKkiKK
z=ETEoY|m4BHdcRsw=r^anxVF~_Of;B&Y75)%-FlvHhN2jVD*<57ri%|O_@7acKiHp
zas6xAx5bTRtV%jcUtjCZ%*ZfMS6AOw`1n}V_S|*zt&@9F)6zCc8mAd>b8|0Sw(OXT
zlAyFf0>kY+mBnj+*9X@AtGlK&r>oMb<I<v}eWe*MW(Vfw>CHCH7Q1}mLc-l$rOA$t
zjyjf>J0*pLQZLLo`e%}=_l|A)c4|H|4xBoDTJ)CxT&u0uzRk5NO)}5F_vDsce1=}s
zmX4LHSBKwD`}E`_*YEne+5PtaW|Y3Tu<({yGdq9Sjc2JxYid8GrKN2;H`n_5t$Rn0
zww_GcB(>RW*^Kx1_F8YBzu3JW<g0l7(9o+{JH_?mVsdvs`?K@^@Av!9+_<sh+PBBY
zdRJfGY3gd|pA4$fKRkMNb~b2G?$qhiiMhGGnU|LxJa(+@eZ-Pp%ep@n`+mRM9d-Tv
z-QD5`4<5Yp8FcsB>1n!Kx1B$A>X7>UnxMzKKz+wOd-mM=bie+;?9H1uP4hOVos|j+
z3k!>`dv!(g$noRXXDwb>x&QY&YnzG>3$A@TdGh3q{q_H~`=jG+tG+z=XPbFR1vJVD
zTD0rw>ACmY=hOQ87pz*f>ei?C`~S<OpPTb=p85ClwJ$F%-TKdmG2#EezZNw=3f8`!
z4KDMXDlTr%kB^9oataO>W=Kd&W8>xRou2pk!9iw&V^K<SnaZFMns@gvFY|RSD>DP_
z;=39iUwHcZ+UVn=SF*3Ic{uI&&z}#kt&N^=GNq%tyE#IK4ZQvA*rHe!p@$zH9tPcV
zvN8F%f(REQLyuw1?y|MVYO1QL?wC#2j}My>ws~9byzu*b&f6()urSG37J(`cS65fi
zyxjKr+TrW=eA@AKYtBuhjLb|%207cRmIn_KK&NFUZItNi>ziScDRgaJY<KndcY90h
zdkkAzT0m#<2CWo%_wL=DUC+BeKl``Ses>%*LsD{bU|3jNJHI?=oyXH@_V<@Xnl6i<
zFW@vQC@xN}yR$R#`@6fVgR3tX%nn<)F<v-3JA3p0zwhhU=S-hE^=MO5Q-p^HM|W>;
zYWe$nOAWu}der{6zn(h7H#JrD@})~j3^P1bl2TJsxn9RtzctO1pRO01v~=mxI}^kg
z21MlEsq&pC&-CeT`F+hb(w0Rk+x3i$HXX~|_y1pYYp&h@KgD@>FD>=n`P7tmbEd~V
z@zBuFjkC@3H*LRPH~aSgcKN!9<ZH)xHYfIMeDWma+4JY&k2fqz=QlMq6%!I#wBhb&
z$$M3=bz4hk&YbC^AyRaE+O%ogPMnVo51)Sf_??}_H-CP9{@TXxU!||%nYOgeiY*_y
z4BKX#=Rf-M^Yf0v$80J>oZyugu2G7~$;mYz4zf@1S_(RF_1rw$(_dd%T3dsr@Ia&N
zGnR;+Jax(`GgFgc!HN|fuQk_uy1B9O@bK)I7v=5k{o?iO>#r-mef!3Bo|lJbNB!og
zeSuYlX6tt4eD?A4^K1SjXIaFOn3xD!P@8vmSLoyIJZC{&B2fDhdJGk4IO5b)?HwgA
zg+TK*pd)`k&7+48A2z<byF2`LdwYBPq2l1+U<(Ti&=4Nz2#J5c-`jT_eU$cpXLV&|
z;o*r+PEG<sLQKxi&Y-h&K(`WoczAfH+}~$zpvI`VxPBaHJp13z=klOV#pC1s?R)py
zhJ<9WD6E`0aiU;PPY>uEo|M#7NARpYD3}V$%iFhaH@`3FsjW2m<f}W|R;=(?Sdn*v
z{qVGZ1~(_{0i7fO+En=<^Wm?1)$b49yeX-wsv5B=#dGtMnu!rQ$E5T3G@9S5XpS!X
z`6(5&E8^bX>ItWxf;u9-M{9hauLRAi?@_ILCvBeB($&SKq@)xO7|6(Q;_TU@=jK{(
zEPn2nk(v4MdVKxSC7zRC%~`q-)D-`qq^}P;*Yp7BMDLUn0((B6v#xPh@>&+W+z+%D
z543)6?p)r|($am(6T_bUlncww2JM=Cy!5TNm)C+ti<oxC^vyQUSF*O=9eSVr;Drkt
z;wrtpymoAS^6c3&4{z_s|L(7e-M#H*QCfQX;^5_e4D-b9eSd$yed5H4PP0Lav0q$R
z2wH^6aOKuYVR`xW1?L-oe}C_+HI<10bT<6f?C>d5rxw1R{rdU3_3QgLY%mZJ5mB(R
zlA1ViVn=VUYhj@w!-6eaMCR9ii|iKpeC4kz$HSw&(&iry^V=`jv**v!_(q{1@ngr1
zUATO?I&=1%IWi}neiHL?iDHh8jlFT}7E^^)^`$ORZP2;ACsK_5{Cqy&z|5@8K>;*t
zS5#EAVC`Do@bGX3hssJzP!<6leV>||3R;F9p#xI3Y?<11>C?-9J=4|EdGe1RbPa^6
zDyz{<9!^fqAOC*8pRK!m<3>aCnoX-#aUE{w2i-UN>C-3B5szoi_<$Bmff_N}duPv%
z?)`mhZ?!q7ENW_ETC!}}q5JpezwZ40@nhq%WoeuL-%(al+F_kgU0Dg*|9fM1xjv{N
zF=2v$-s{!>)J#P|jcXI>oiTCQ@4fEtt7UAMeX?c3vyjNh&I=a;R;*kJ+N^x;+_@LG
zwrcaf%wkVFH|ONpE1ObIPLgV$<TKN#^|j`|2hIEjpu>F~Vq#)?FE8zrwFVuAaCXM7
zcdsUIFMfUwwCdQ=kr6Z$5x2MM>W=g2kI&A&^yla2ox8up?W>VI+|Iv#>)Q5q_Ns4h
zA|G2dIy6`oKT9|_$CB%GXh;a?XyA91#sBWG^GGn5nwo}$gn-7Sem?-E!Szw+H)>vt
zH+1rtT>ayNVxOFC)a#l9OWuK|sul)x9PgLc*3sA1ZS_z&v?6fvj?|4CH-7l=p&>%2
zt*wo1SLy4v(A8m@e|T1{S_N8zxntKZC#8uFN)tgH-NWbRT8n<mPfl(It)~6<_O^sc
z#)Ly9m8VuXxAXk~`8nf)!josul8*Puf|iUbDJd2F{Z;zQHutdIzaNjMi}l^RcMr73
zd&hIo{M-Kh^=see=H%=!e7@GP7IZn^hGS*IYCaGC&7CskN(tlt{rq-6802d{9Mr!3
z_0?7G>ThpWmj0b%S-h%uB74Kr)6+rcyxjTx?9WbVX=zX+u<~W)ja#=KeLinrpE-M(
z(@`76C7vgq7I`cU0?kE(+KqX4ceVce`}^{o2fZeBe=0!p?OIx1iIt$G*WKMavw1;-
z95p`*jvPO}c*P11(Ace~=fOp;-5>t_eqVfBH+Gi@=!B)KtHVK;5QAp<RaF%Y3^v^A
zP14fR0`1Scyxjl#>!wY=vQ|1pg@=p({q^<m6wP4Jf(p>8U2}8s>Tho<Ge0^^nZ0V2
z7U*c2&*$wyhrM37bg8MWjjihIt5(pcEa+Cp>(Lx6OmFV)7T^Exmp15lHCb8N6{}Yt
zzIIIvbac{E@98@}-Uo+V+#ZS3({!De`^{ajaA6}OGn;~%8k?e`;+>=O!`H{<erk$S
z5CApfEGj>#fbw2MbTsH#jI69IP!{d)=XY{;E_`=qXV&AF^UX6ZD7d(|EQsEoC&1MT
zI&OSh?ro8(r;X44@6?al!cqV4r~0uTN#@|-;1w%Zf>uHH_4R?4RiB${%^n+jSFM&e
z`|6BNT~5U(Cnu}x7#dD&ZE4x?^z`)2Z*Onkyk*N4tMmV3uUj6=ZYnc4zsE-{S!v>m
zTiGUAS2UKbUVS>nNV59N3&G15FD5Q_>rL|X^jx!KNz2I;qiNHo9ZNeq>nOv9D_25}
zNhB{@w(QKUTeD(!m2{p=F$#-`IkRZdB2Y_wwnd@R_WJDX>}6}$o@L{gJ0m0{bmQ^y
z{_L|iE>upMZ&P`QPtN89gMqcRb=muSwsFsT&!0cP{_|d5kI$L>|L1!iHhCKJeJw9&
z5z52Zq$DNK5%BYDs}G$$yY{Hwk4*g*C&fR1{uDeoz$hXv?(FW)URhZQI(>DDX0U<?
zSK*Trg3#6J7cX8kefRvw$HxT)1rBLxX<PsP{_(>hK3?9^((>vy>zW@0o6k;t^YrP_
zyLGm<wzA8XEd$-ay|Luwr8LVp&?I8q&+6YVE-H7pD3!c$$e-OZ;aclIEkP%#)B_ES
z5*7sst9MGQ(f#!O`|)>ocY|&z;S^Q_9dRrwD$2pb!}6gdYg;(z#Da$9hZmlkYu$c%
zxxccmE^lUL<^->$pe5gP=FAb<R#;e=d2RN*Id-+XZhpIa1+-ilH12!vo}8bb--eAF
z7ap3o#T#^7_xGAFl9H09aRFYl*#4?2wU}`EYTx|R#w*RXF`|c=oe#WkZf~`DPEHQ!
z9teg84;7{lB{F;0ug_om`{dcPpgoZ5Vt2FE*4BP`e_#IHyLTL1T!)U!*T<~gyKP(9
z=Q$IExHvc*+}zke_b`0;P_SavszaA934zX(FDY4K`HoX@&qD45PQ|Ues=w=jt`c6f
zNNL~VE!pSWZh_jWD_5?xsQ$L*kngs6XOI7R<hn_}tE=nK*6iy7GBQ1H-sFImpRNvD
z3p$YV)2C0fzRFCQ8=>R&{@z~Dw8xpb*5dc>-2<&5Sm@loq3mtct_!obNP~__kVyVo
z6|lbM^P+i`P906BPI<-bF5?B=RSr6>C@HCF(j=jE-?y*4IHjS~xb9B{XyG4dT@b^A
zx7+VOyJm?P_BeC)tYPV^5YR-q*3_hjhgv(jyPd15tU&u49=vSdf^8xDj>4Zy%9JK@
z)c*S7INz=ov_<mGn>SYXndS)u)$cBQ`{*5y_bSlh8zu(Ob>%@pLZI`EXZo<Qv$KP?
z&Ye27DzZ;~@=4H*o}jfy%a(x-76A{RyKV(d*D6f(0G&V#x&u9SS4m*R{>;m2JQ4;B
zj*gBTTwFmB=8*A~LpN?nEL*nh#*RW|v%EVe*2){F@qmUrJ32T(_X8|gu)y`)O5F<=
zFIGNnpZ^GaH}u5`CQcrk7l0-h?(8gPS5#E=@bYS!JzE-d(an$Fm!CR5fvpAjZ62-2
zZ!`B~%9$C44FB@gCO>%aAkBK-rr_}KcF@sE1>*bc&YwKV+1c6o;q&Ka7o|oI6{q!a
zdpFemtpc46eBkmzB~Uf?@nfTl(!;cVPJaI5pu5?anVFaFw+zWH`SipSbl%kd|NpH2
z{d_(@ZSLmz0+;@Q#<*CPEn6mGU8W-=Ba^jfb6j!2vY9?n-G>f2fewedv!l>-U3p2#
zk%i9fal81_)6<U}I~EpgSMed?$+Krg=kxFExVU3O%j1_XIg5*nmn>NV+9}D@$RH*r
z2D<5`yPG>U!-peN1T-oY5E|OLd9(3-Ll53nt5yYsg|#WW_km8(oMBU0v^jRa!>smY
z%hY0GV?h^ssr%1+@ayaA30_M(y1Nf=Og?T<{q4=P-N7n~OU{CqoAw#D)&Ku1e(TmP
z12eN{)_g0M_w?{sSXnVuRPFw_v-tU^IUOc#%a*BumUGD2Ryn9m26YQT(@9cG1CRdc
zxBu61<j9d_r<`sr{P*{F^1VHkHODh1pE`A_;OnbU(6W)8J9mQS%S1nWdAPf?|N8Yy
zfU6a>zvBJ9y+8Y0W_7f+xowp$-MeDX9+|0Ar(U>pDQjU!i$Ln-6-jo6hJw$}&2`>i
z_ji^Sf2RAnxz@+aTg)`=?d3tUo<TuEpqlc{o1Try#}@@J_p5PN=1oXT1N8<!$u@sb
zv9y$||MQXk%$YNw3xLzp)1}f}IRY=dNHhc0rTc1s&r;&fO#k!u@6Wyq%R<7!lHT9j
z3+g$6_KRm+Q26rZrtqv;vp_RDCIR2y-CekNF=$@u$BzooEWw>SbGWLVINFb$5x(SB
z^5O#Hv17+TyOie6l|6gi&qI2_vSn=5)zvp{-(I|E5tF2(BxriPQ&?R<TDrSaSpCqs
zbA9h;_^K%=FfcMQg7*D^R$hBZKYIK2Y&naQhjCzVaP#EJ!gJ=#0kun|&GQZ%I@I(&
z!Z+(khhXlj!<>riC(WDJr|jNmk|iH<MtG6RlOjtlZtl!y+)f-<u3Xs>*%!BL!v=w*
zjXPL{OnX5`ScA8_vnlGT+1P*vXm0JgbSVfleZHgOqf(2LBB)9%S8?hPs`&7L(Jc2C
zi?g#cXerjwqpZJv{Q}L~nHWxeX6KNSq5_#D3JDD@e0pkXR<4$|_D(aV#s#5wD?eQJ
zw|`ocduPYQ_ZD-m&FVIpyJn3JsJv8ERJ164C9-Di+U&ib)fHRzoVamAB6yik<J765
zp!?ppW?xUbyQ>t`toZcl(~mxPj!Y%pTgLj+PaD?%tC6v<+oQ_w-4W#J?G3tzv+(&j
zS<r=8z2^5EKryp!-MR8DVOUoFu2``GbdH^vnAnGp9}j{iT~>y4af|DLCZFL8oIN=*
zmx#%y6+b${2|A|e%8EeU+Ki=>XU+uWMF!B+9cZe*Sm_d|^V-TMYgMp0<iZ-0mI=p#
zLPJ}7dwD?>Rn`@aKfmAapWvYa4l2gDV`ubZb_g79<8^N5TU&qPUze!%hNPoh`;tR0
zM-@*zCT&+^A^PF#hQz~cyAt}+A3l6&GIxOx=<=JbTfb`G76rEmma_^8eku|b6`f&S
zuJ`TDP0%eWc|SKMAAj)lY3u*v_iEcsE4S7&{BN^mJ`upOk)xxdi<y1VmGBsgm5Z*m
zdTkAReNF83im;<swXTJ(eJr{%te~Nxx$6;IQ-t~>ISwsvvx5%j-t*Vn=o>m7;yLkm
z=en5bmGeH&DYiFkv2HhJIB@Bb(6(*cEQ+7`tUa2VmDRN_cDIs+#gEBPK^t#VP6)KL
zwO#W_FYE1}IbBszk+J^Y&-B)HJ1ak{fl72W-&vr&N}yuVvPfmoqD4zi^~u}MllHHB
zc19A^7zLd(bmdA*b2GEw91BJU&^XiT)!Lwm^~A(R&<X5W%a3k4wrqNyvW0~NXobq=
z&Bj}{Y)ME;V$#>wpP4K)dGch?+TV!CNYE<XS+izkTwNu)XYbyLGiPdke;s&l#?Mpx
z;zV~&U$R66bllI`+2){~S3hd(=FFYDvHE*n$I+yn@0Tu2?5X`^qxz{uz*V@@1+<#h
z{Ft4kW#mQ0iEKGfPffkCuXeYK()q_9AG~<M!2r4r;`8(K7k3svkLuPmG!)Fgx5sh1
zUhFAdZ2=C31<xKOhdy}t@Su&2ja{UghDHZt0>g~8Yjv})t`cQF(9_!+85Sm%++#S=
z<H%IT19G-iDuM0^2@1i1ffF@?KLrE@C0UofnV?~xcgN!0p9PN1DRG-~Z<{S!xl*(A
z+{u%jokx?_>E-9=zq=z}|3`6iuVwMG6FujT9(7e(7rs8uFgQ4P=6A-1t+}_Sake@g
zlSnRpc4lH^+S^-O=l85$wSM}Z@1Ne>G`_Z@@UhYRrF*`!CV$#nZ>Mf)Y5C^U)6+S(
zx8>gXZ@f~9K}SKs;bNjm1tTNlny&qR9<s_}-8Z|%^>3^UUVbBg|KDTN^yAN&<=;Ew
zH`nTD+@6X+<=ji>jWxSlTUlRUTPyAD?LE2DPDiJQF+ovLajVSCnqS}FpV!gRNtw60
z?fm%zQEz942L>Me_4PGl%@47yX=i5@t*`v?K~c?bPRF7}N;97yO)^Y7JF8XNJnw`}
z{ii3MGq0bSV=2ta${O^1(V|5H!otCMF-voAZgNelnXVV>l#-(Iz2@z$trdTNmCpPM
zY9hGz%dHK#Ex-EJYt{FALF1_T_xI@<_bqnsS28i#(sZ$YUfjN#&c*Kihpt~24-5?4
zuz9og_VRfGP9mMhAA`2&=H=yq#wykP=k<UtY54c|H|PYAK3VH!F9bZ9K})cw>&GX(
zxUeu)Z>^NHG&e)h*GbxkzP`SmZL%#&KFzq~MZlL=SGgHJfY$jQ?G~S}v%l!6m)^^5
z+qb)igor?oP=9uIHZwz4clXB3%W5;PM@K|}?!E?{;JBw^<B^>+jnkEsm6`eF?WRcB
z{{S6iad&cKBcqeEGw29mP>pcs&K&FTs!Lg(MrR&>1ns)wXmxt><cY_cBY~Sro<BP~
zd*X~4CuFy8-_D-Q(=Dd^D@7-?cJGtD(=TZYwYIk}-mn2QFD>-Z^hszpXr=o5d$yo#
z37UU*b7KQ7aot(`d{O!PdlxQT2q@`j5l|AB>u-N{cJ|@3XL&*UDW*>sw<>+L<i!RL
z<_Axo9(}3^IyWfdSk2d0S7R(29U9Wk&RSUb_!t92c6K%>16r58X=rX{HZd_t$jv?b
zH1Xoaiv@*+jeUK5bLPzX@a5%YuH)BMhwE?2y4qEJPU3JQGdrl_mX($L@Ux~z&Q^-4
zk>Tabm!?)M9*W7&%=7MW$n~=?4Ct6&_iN>uB3D<}J3q=)RaHUrn0I%THuv@M#l*%w
zeE$6SRNcGTF}Ipnxj{KNH#hgp9Lvep>(;LA1zl`<-~fY}nHgyAx!f<T|L^jO>T1yD
z<O|oXxwZ4jg06*s7vtr{_5FSI_jiqkY#SqZ%+1YLtXid{s_MGP$Mv?}TB|ty%J;4s
zB1Ql0il6a-E<<5vW?mD!Tdc>>;Mj)B&(FN>d)Iz{zyCjINu_~-!GS57!5`jkzYl7&
z1c0tv$!HM>%2c)e7GLx6sQT%rPoG}(b9l1(+nbx4jm}Sf_p-0I_vyU!l#~Z2C#(N>
zy?+0Pzu)ga{`U5^hK|mW$?E<FiHBG~hjql){Zs|r3bSXAjf=ax_mlQd0^Ohuux!`U
z3JVR7^-8yQ3acwwSxHq^R-QO{(lH@HfsI#6MKr%O*u&`l#$<QU^#Kf^#Y%Ze2aZpg
zJbB{m+1v~n7Z<VS<mRfL+r484=mgyZ?Q`FCb$2g)wPC}C2mfNNCT3k)(s|_bDwRmx
z=xtLf@={Wc{Qdp-p$O>YjU%1HiRtO=zP`SolYj5u-+w80dYCMz7z#3~mSL!=t-ZK4
zJKQAm63e`K^Efy-9LmbduI8_hD=sKFu&45~LCueX&i#1;P9Dw$A09a7+}k6`FK-u8
zqOnA-yQk;Km6gE@mo8<U=)rPK;?JKy2OfXiG4I`S|M^O~y1m}hyo<bKWo1D(?HC&i
zOG-+DB6!lINgFCYCb6)yE32!scXoDe*tqdw+shN$c6Oj6h+<}EUtf3he*J%5c6RnT
z*5!OZfBppZG^S4%2c7)AWJ$>4`m;edZcVVWv$LrBqQS+*_2kxvrE5g(yyVxvemtT6
z$3u3|X$uT?ItxuIKc(EbeOp;y|NZ3pg)4ey)$IkHx2vkE%EHR(s3OGp!+`(L{rmF&
z{{6df>C&NhcXxx1%JbSDIDh5Jl^50gT@*p%H|F{G6ciO5FD{(Gmh<7k!H)iZ_W9?-
zOEi|u+g<flYggIZQ@ZJOUtfhrL`NS!aDbuVOU2JgDRw3%A&bmooSm6>?b-!86}P9i
zm$Am<$JD7)FYc@T&2=>7lG}8>SkMi_UteE8eB*}1#EBDQVn8R7Y|EAY^XJcnRiWB1
zUcCzYrm8XBsp=Wyg2>Hjpk0#<{K?Z(GH-3s+<xrs<>mfM_dSf?RnmF8azo+cW2IGh
zf9=_0lQ*YobK2Pn6DEL;8364AzHsf@x@l%vpT8QJn7BANfLG|ff8Q^t?B=n?ea`&(
z`ljv=iziN;*!bZ?!IEXmw5&v&I93`51qbi^x^1>uZkJu{uLYiy)wue)uB5-exA*Yh
z-`^j;d2>c~ch%QbE|c^GI8>_ku`)6G`1&qw+j`{4kp=GkaxqH$H9u<SO_&hyP|<*?
zks&K93p8+2QDIS3T>SBIzkN|>4X0c``>}{#{h2E_q{#i)5Votc({twY(2$TF8{Zr~
zdi2AG4-P&)JfL-p@9tQ3e!R18-8xgb{Lqy2^y2LG>FMc@@9nJ?;A#c6owpx4zZ`Nw
z`t~!SSq-<U_ck>(?cme^^|ZI=-34VR6;;)Ppk+nhKhEA|m)!I4<KyF?*%8pf$=~1K
zoBvqo;_^{RNomJlMX#701&vitJ=c2q`yXHA+MSS@+4=YPcWo<~Pm(*!-bzU%#~96@
zIkWS}kBXHk`%2E2zx?=F)$7{A|34~T%6;n+;9vo*Hrut!>fQbQ{0tHX2@N4TPn_`R
zIQmE`KGl6;?9E-fcKvudJ>H=9*B7JHI?>yBj`ztn2WT9bYh8X}ZM6AHBP}hhh#duq
zzHL#d%a$#>aQ(V_TAJFXO`9%kOm?67)T`<o<H^E5`S<s=u3M*fZC&i|lcKp<kH5aU
zx7Ru(G*nTjQ$SptU0Pat=2Nf!)$7-T_6vP~7klK$5zrBkpmz9&4-IqY%1)Ug@+)?R
zfYYm%<Nfl<(5*S5vRpsUfNs0<^74w&3!Zdm`n-x?@Av-)oiD-A0J{8IRh2b%ciGex
z%TrE%eC6@1)kzVwaUXQm9K(lyf2$efKeb*0Rj5fvyST2$OLCoeTjn>H%i4Ok(Rt9_
z1n1AMKclF4>eQ(l8<X8zk6UXV;<x{!@cGB}`1-Sdt@ZT!ewRN!)~o$T{nV|By;A0R
zIvZ7{=zxx$-<0CH^!5twOP4Q$>gtyE_QQt`F@et4nLb_o&D*z{6V<PR4%Gmi?9nZ*
z4>~U?Z&OKOp&{s)9(H#27cXBr`up?u_4Nr&eyZ*}t7Tv9ZzcxNIYBR8zh?gNL3P)c
zqD<A?J=Nd&9v|y%-nY*VbZtc4pNf@xl|VCEprgyYy}3c_P&cRZJ2^Qmsrt{Uxi<Uy
zx(!>lJQ0gfSh5QgY~Q|pyYu`u=m?Zmt4=*N0NvLT7bj=lvvkdqJ!?|z)YRCXJ$q(g
zYC6?=nY4MHgNjgLX=HRXGx(b1c7A!#Mpn>bRFez=7A8i}OwYR5-Cg&pS~YBx1H;1f
zzTf_{B5*ON0~@&54OFoQgoe6KR`WF|dg1{Z$^u<pu{2}#vD>$$L1W01)qFu?$nWm%
zetc%8@rSQppQ<gpx34x@X(2xkPs`%P$|k0!7gq!-cV4YL6(qg>I%p`N{@+jb!|nW_
zy`>?cp$k{8<g~W7uBfh7wz8V_`{C;KQl?ogpkao8e|}2XRD4ixZxIZNRGP@)+|GA&
zs&@De)p*do(5>9!paWS>oIB@MR%Z6-(W3`1Uq-I%eF{EQ<oH78_6bv`wqCgsB4bk#
zkknLFP+)N9&K&_++1{omCY$<ype;Q|UtV6m`fVJiqD!38M2?LcHwHa^dV6d3@wZn$
z6@Jna;5Y#84rm01`}pugZOKsF=p?UD?crBxmskAc#6$x_!-K8d;tAQ=pc7s#tgJvQ
zR%-0zLARU#OkKHpQ~jFucJ|L7KCJK(UBbBdJO4_pE1%!qU%O__jBVS@iVF)9#r5M-
zA|oSv43C{Tb7scWsiM2<{#prhwd$CgPj78$F)%eXHA_1q@$T2=^z%jxIvN@s*3VwO
zIt8k!Zy6XFCCOTqBrr8LJbn6fV@C(avgON<PnkLuv@N0f|3BO8TU#`PLqk(%o8>0u
z-`|(IK7M~1=$sx`SJzd&{h^1;o;)#Luy*a)HeTtlm#<&{K5x7-?&8IZJPg(a4;Ubw
zmn~bi-1zeH@=hbrf!)F3;pwfdtv!avVq#(<R)?)sc_r9=)F(cEe(m3{*M*MHx2rwH
zu%YzzwNQ<98<US4+08$HB+0P+&AGYOYr@yZfwx;oOK%obcH6LGg$8KXYuedaUr+v8
z_3*RthIe}ZojiD}e}B{M>h8X{B{SHy-AQW4g$n_ls(<44R;d=o#m35lPMcl0aN&_>
zxt~s*J9q5k<KsJf>p-o)moGclMsIi05CJXe0PO*Ib93{~&|?k!)_V7L7PGhW%dflB
zE9m5*TKe`@XcA|xsHo`5vnR^l-fE5AT~>HrKW>jkD1ZO)!@JAhFX@YpiVDl>eAmp*
z?<Jdkd0Fq7vliLepG~};c{VGFbx)iyfuYd>R7`=6xsR{?I(5-uCEkeJ+j5s)dnDF<
zw4<-@*i`LsQ03Ut!gA#JanLb7YooWXE08WLD+{tNo0j+aU^6>IL*3tBp0TfAz4AI~
zqu6pKkxSm#-y>Ims}*FxG~MWeCnp3oG&K{?%rGn{FAp!tSkm~rVt(h9D<PmW;BVfP
zls3z8$jZ{1Gk30_fPli*)tmR&$*KR^I4QL_HP>wUnl&*i%{Ud8tkc%eXjrvMYx|wD
z%Kl5;0#{V882j60_ZWiq$6i|-4a(f@e6kmI7C%3q#ar{Kl9QA3;N9Kj4<A2f&d<-+
zn<>`m;^FWAJZ#TOziHE^F*IyWKMy(qP3U>b-<LB4oU$%WQuQu)cV}l*=IWHqnw2^C
z_sQPgp1-~%I{Vrh$M^U4YS-3AYRpuhZz|UhY9j8~xf6Wpc5rZTiAPIK&|<e<28Pbg
z&WfL(R834wK&OrW`0)d@4+3-=!r8M^ZxmXZnu@-^zkmIg-@i}m?{``3)(bkiJ0dD7
z>C6nngr3Cz|Ne6D@T{5kTd75$viASq@8G*MB(9!2b7qa(tEDOPYQEXEpIz;7_~ENp
zT*k)6pi{%F%ilfe<CnLSflMnj?c8Z;WNf_iugbo^-=hC~ILv?I%$YSIvuDkk_2cjN
z`=Hawq4TK>b~!QT)!%Y*?(CS@c6&mRsJOVc70aiY3tBa`+K!!>T%~Vr9)3|#ASm}o
zjoqQchcB*=w}0{SC1^X|>aev=2?+|IQ_Gc=mGf5kK0h}XbgS`-)vFgrZcYo$D*yB2
zBL^3kQ#+q5=%}W!wNZ*18XdDORxe!|dNo>kzUIP!js*)8I9i=R#}b}Ad2(u$YKuUS
z<rQQ9S4$TyQo6IZTAZno!P3$aG?4UFW>VGjkB^TV_20gITiM1Y=GBhwZf;PU>-nu)
zw}KvfDJv;G$pW2w8)R+CFKxzixQ%zRMVOIi%sk%L9*3_i_m>CNHVmNo`FGqeE-m#I
zm625BWmf&XB<|$NlLyyEZ&wiDm@s{Md)V5jh5qyHrkoHCVpW>R;pXO+ac_?$XlBSP
z_m+c($fFMr4|8yHH}BkOnUj+vBCED?@w%9ui(UwDWM0siss7a|DM@M3qD2!XOkmK}
z)delC?(6HjaP?|vNk+?+>Q$>&fmWl|)YPP`djp!uW_5ApP;`--a%OVXL(uM*GiQ!0
zaBP0?;K2dkKgum3{h_PF7G_>v_T%$;`<)9d%gV|?S6A=ZvqwZmR<UKmrT{mWSD;O;
zpd*<sCJKDI`RHTC48vqL(1~6z0yq>~LKr|^3<&zQ;lri5*5wBE|7u)ZT^r9oPd+t8
z^T*HU^R=%8+b0}g$SYbnb*kvP`2BpfwY8l_Qc_YHIyz70T~5(+;#gS;I;y3Km0LuX
zO>wK5z5V`Er6HO#{r&xquMS^tkbiHF7Q2(wyy)$Dp&90<+4<!_En3iBU!Z%^+4<!X
zPE1g&`1{MW?EO96a$7}3#T%Q``9Y&4>i+Y<t2DW}AMZ0@IM6Mwzailu6KFmw{oEYK
z^Yd)AOY*@-A8u_5ZQQxjlG%a3D&$vUUY_3f-)rmt|6AkQEw*OGiVo{-+1K^h8e(^s
ztv&QU-rL*z*yE294BJvp3a$KneO+wwx^?SB*G<17hdfHev*OZvVW$_*XPS6i{qR#V
zVyW-qU8S$t`1$z_j=gZ~=d!o4u>rL%cizj^kK5x=QDM=>BdN5J=jn%shZz?**?v|9
z4Oy3NyS^r}`N4yP&d+RYY!@zGTv@Oe;^Nk_2Gy^Jj&_SPGUVRcGSMP0C8b5pch-YX
zPft%>RsQkOQ3>NT9*N`+U%t3FIXO*DRt0HWscXVG?F#q#dA7_964KJ%bBzrR5ALo0
zt`+<J-rnkuFD@#BjtY49?wtS!%Y)B9r>^V2qGxY!@8asJY1PB__Tl07F1|(qCn+7T
zXP$dOcZWYXd|^ia%GIkuhjcnE6p)gV5?vP^94xHvH>Y9oVr4m-3I>0Fe->8OP|LI+
zYtU^k!OQ(Lt$3U`6kQZEX7H{Q-?DWpW6h1Sf5}P{IlR2Qrg}Z`Hp#sua`5263l}aN
z=oD7pvGL22cibEt0YCoqxBcVb;0X9~y8-3~&|Sd{9^T%Qt)|bK#pUgNT5J2orQYJ8
zYqA(XL(8w;g8c0<*ZpLTY;sl>S9$q&t?4UyKOGYk6JwL>Z{M(CgV*+_j~+3}^|$}{
zQPKH0GBOf$z(RMockAnv9#2`&NrPg#Q7juHc=Ge#dmZ-%oxr#Yv<E)p>Z+-W4zDnq
za^|`ss7(I+jCWVb%b=x3TNf%7a<DKlI6OZ$SNra~ojWbrcqAGoOb`H_Yg*yq!65-U
zq%W)WwU4Lg#2Zhyw)FS&gZ5f2TC@mazCe()#?0^u+w<>(j*kP~SY5s*a&uZjPvXZ%
zM~kKhPU$+LD8P}BnAmu%S2}#9Z+v|Gp32W`_wL;TEusRgD!S}%pZMy^O3+DB3^{jq
ziL$Y=39X)8Q=?;VFJD(zcjC;MBj4WMo;ZEF`o+FUlZ5!>Y&fc`e`_5D`A*<yS4Rg!
z|MAH;yq_Iv<(_{v=*pBc+9zfjryr0we4vqeb;vTi9d&=Jw*FB)c<q`PXtXgVMh4V4
zFL@E*GuKMA{?AADaL7c9#L=TiQ{_P8`k)0e3=ta=7(wGJSEoTvsYpyo33<AM6Lg4d
zme*XrXZ`Z_eW2qN0vEeI`1}*JuQu=A9?j5qZ*Fb|&6oA`_AXqvuJ7C1+mC;Id@Pi@
zX6;(g;Z<*LY-Hx+<GXO-Lc`Xrrb^1nj11_bXu+M??mZHXkB|3123;8PqsH#b*RO_!
zk6cpH)4h*^W;sC9vY@j?uU&Kd{p~GiBs{NY+q`*l(|xQgEfZf{SjeDqyx?T;vPIwj
zzukTxblWdzsr9;bdOW<mhUw>II*)|M$sa$6bA&EbDk(VX_qVr&|Nc}ydH($I)z#q<
z`)YO`>DvH0EG;Zdtm?~)z-JpL>3gd7bBpVp$T@xK(xlk}pa_}pDmgc|S2K9ogQMNz
zFK%vDKXdl%&d1DbJQK9`m%I%6P+^mjmgW`n|J_|{(D@?2e*FTqwSRnk{PEk{Xodqz
zJST(h;$%1w9$(8^TU*QEFyF3LrD(>bji8kRw{G16U6lg51A_rH(-gHmj~7(0ytu$9
zC@3hj5i}@T{{G&B&p$6*xZp6`Ece6f_4~uL_OB8NW0jMWJ9GH(Vy(~<Dq`I?L2JGl
zJZyP*cy6o?U%z7$Xy7xl@A%`5pP!#MJ|^Mq@1M>vW7@Q7A(qC*#$}(LcrIJEOs(+F
z*|WZnZaq6Y`*cqFn;RR2Hu}#ra!s>j$T>MlRYzCX_tlR%mc<c;g@%`}UQHEN^O>;P
zC-q%?aBy(i&Dh;#p)dYFe{9j!)pcWrVRFi~+?13f3>!|I@K{-u_3E#)6d$NSUJ&(a
z)22;H>(;Hi8Wip<EFf@T)sNRL6SDqRs+G>4I#u-ZmoF)AZ*5Ixn6Yr7V)>r>|NnxX
zPS=S%#IT|K{k_7cd-m*^(cRr0@($GcI3|%StnN3(V%_rP$0d@_T)jH==B-;^M~uqe
zL|ogH>fQP2*RNkXDk?22SFG@mdH(rljLh!x_h~kA{%L$)&YIt!^4lup@bmP9xo>9P
z-;l`s?cH7QeaA;Sg+YUlRaI8c&dh8E*(&|Z#l<Dz>?~8z7Vn3L+b7PP*?H!S4`?JU
zq37W7<Ln3it0la8@d9*s-prXZL3>&^Bp#kHWlGD@ZgJ4mkfo)ihmTK7Z!d4s^Fs$0
zz}5mJC#$Zj{rO2%OfRM*{ro)8vAxUv=Yy`N|M%~Ae%{U_`~UxwKHevLc$x2PQ0wx^
z^XJYQBA@|MH8nMhnjZ!{yu1e`npdvW1g)4lCSjI;ujj{)3ed3;-qZDprmj5mcYpnV
zxzp2h4_{vHuPDM*`00t~hYFiH_VxRm{@cqR2c3-qnqVy`C^)dQ`1yqS^ZS=9QK_h`
zRMgew_44w1ab;!j();`^0!|!1|A0oVfBpKkqvGSDBOM%-tt~AI>gw!FjSQegK^+~S
zjryPk84CkC{{H^{_|47D3=InwD69*QpSIY&e^Ku3Z51CMu^Jf}8GtV6NJ|54w*(cY
zmo8ua_~fK8=meyjH*fAJe$EFvn=AjG4QRD>VPPTYSg`;N7bhns&`rmCtG{16cjM2h
z8qpP<^RAvb;{#eq#lypM<M#G^)pL6*KezQt7&iTWmY1J@-o(`O=45sMC9g8??*sQJ
zlY2JC*Zpi|OfWPw6iNjhtyEH48tLWLb>w5%+Nh0owZ9CGNknf<Vr4#1_v@wlO0#Kt
zv8Nb7J-%=M{#K`@rG=%fw_&)p(3$<1L~_5JZ4$$cL#^C9cYS+zS6gtgO{!MafAHMc
z=WlPL*&28yja**+^4F9-zPtSWjJ`fTV>7cfNl8her=LE5p1En0(dO;jr$_RCJu`U~
z)7LZCIj<P|uW~N^XES-%`BSI5GPAQcuUVtB^6{r{XI8IVxiS6xJkKe!O|z%D?1Xoy
zwUt+=-#c=oMN~wj;P^aH7uMrw(SrkwYz=emYG=vX*ZrAXDG#~|dz=40zN;6F*9TpW
z7t_+Rv5~Q~w2atWW$NSOqjJtP?~a6fzZ@&Woqe^^-{0Lm{O9Lq(DfoKtBxcY{;08Q
z;J3ZJY}vA)$p*<uNuZ0jB&4N_j~f{of%=IL54RUz&&tjQojn+oyJF=^Mh4LR4e#z)
zs;H{ge!Ay%EIoE#jU>Z`b+Oj(<~S%c%$g-7BO~)fEBNB?{7XwZuYBq?G&E#j(A8b*
zf9&tZONF4JZ*z0;)6@0a8yg#4EWx9oTYIO2&h|d>d~xpWZ87VDB+JUmemv^dSLqAg
zw(r{7Xzw>F>sPPlW&mCJ?y_^zV}=QH=EUUf?d<HF+O=Hi)g6P`)!*MSHk=W4^Xl&F
z)7u=Al%(|T&d$TC$3WvIoi$lmTJ!Ad^-A}oczB)sc;iOIjvYHr_*D4MwPF<&6$P!c
zykGyH^}|DNHtpoopPk$J7=Oesy0<Miy0c7HMrOgfb$a15yYB6uJXts-L}mZ(sVbkB
z?l(BGxJ2gr`}^z+Gbe{CDJv_Ab&Kv(vs0WJ7!%XeD{T(CkgTez>cZvA&5IW+|M~k@
z_0&mY&ecck|NmiDS69!-%q$dM<Lu<5GR=2#`KRf7KAya-7r?GoDCi_5lAD{m^YpUi
z%e`e+pA&uVrN1n2)})}DD~mjn;x|3-U2}X_>FZUx$2MKrney-N@9zwDUtZODoxJs6
zskwmG$IJfqjfQQU!fFqGetz!Z=?OaXO!d?hl}+=#p3S$b?YeR$q%%KJ6|@xa#fuD3
zrL=3;t~+ebpK82!*ZedJ2?@Edt2CRTAwc8E-QDG?Nt)|@T;IosImH&OcW&d+G=C-}
ze?0Kh|F0jPc^^G`G-6{CE5pm{Gba2>czJ0lXva$4{e8V}-sGgDrz`8}@y(kz?@m02
zx52Ro@80z}xAQ4#YjcBEw^e*lIMye7dMYO$U)${2(u)=^2A!+%{QUgnS65bA)cz{z
zJ*J+&yZYOk#@Vx_m6Vl1*Hs@n<ODj@-2UGW<z>FJ!&XXgDlRc9Dk@T$*X^P-$GY6l
z@#2)VDNh_dJUW~nuP8oQbJEQgq<EfPE!RYk7Lehf?e^i}?bD}=H~i;~jNFvM`RMUu
z(DK*a<?jz&z6?GD^FSlBVa5f8mGiy{rK)~5G&D3YH*a6LQnNfaB0>Vx2imj8X36s9
z$>-<Uf|l>knk5ysK8}~+&h%FK`ago^d3PK@tD$YHTF%ZkcaD#jKX>jNLxXw#y$2s3
zAK$Qb>r<hJ(4o(bCxVx)`hH&G@YmPZFYc)<?!5Q^Q;kgf)~%)u{HN{hYJLc`wt^Pc
zJ-!td9=^WdyuD&6==`EJYu12PB7<gHpFLAjQDMo-$_nz{Kh2!eTSe&M@Av!LH*GQk
z-SxaZ|Nf(|udjdj_;KZzPs=|YQP1C9nkFQ!xa8pFOP8EVN=*Lz`2*@BgZgcUS~x+I
z*Hd5l`uaXCTJ<U^J-uDdwkqNNzS@YLMXHk~O#+Q>gVwp%{{F_=fBf)b_x@E|eP^yR
zdbCeX%|J{<#Gtsic;;jd9bMg<v(57*lI5p4mz0!DiCmX@dYX==W~bq?8%?a-68*=M
zXU?1{^!Cf!+tasZTy$Dho1C0%R`a6(v{vBxxl}JNFQe%tA%TI3?EG?1)(LkXeREoW
z{}f68&(F?AIyo^V_iQ{pUBCGF?vj^>B$CfuzdoHY;rsjh(|7y0zW@K2Q;n08lZRop
zWpP^Tzk0hqWozr%GiS{3IJ#ijvSUAL>|Wp6nmx1hB1=S2=!&PD8=MwSm^o{f*ObZW
zLSZQ>D$EDc&d<{geSST@Uf0ml``*cTaG-_GJ>n{y;90uj-2C*Q?^D0dw66bGv+}$=
zGc)tHw6jtxIX7%t_y5P{O;3sip6dAiER0>bawX4?4Qnbg9UUF-utXe_*j@f!?(*f!
zlYj2~dAI!j)ZbP$)4YSTGBOmDl$b!*HTU)LftHn|r?cnh=Y#r$z0&4v9};se&ooX4
zEwowYI~%l*D);ubqpLz!3y6!iFY}$v^ur+T&b4b|RaI3n(mjSVAHSGyTitf$O31q%
z4ho<d4$x^v)z#H2R<1mF;sl4XTTg?7!h|2fR{h7FGcq)m`OaojR#wi)%v@Od`Wk5L
zKu}zqJvus?LEfxE%BI5L`};`}KWpk*PlY`B7rix0)l_kbk#kPUQP4TQ#m~=y&LX;S
z@nYk~jfQSL5{=#B`ioYq=xDn!p~_oF?D4Iw*`STdd-m+Pu(!J0B=1f{+WUaY$s0gj
zRE8JV*U!JQ6*QqGHh<6CYg0XAS_B?Fe%xI7`59<1YSye-FD@=-2VJd{c6L_is(t6?
zT7#CA2ZV>OFOi*pX;*2si>oWBmjEhU*R9h7oqH;4U6%0s+uN)6=INB?nMyNk*t+%T
z$;s-cb<;C4I`&q7uiJFyXt(&%zK<0)d#b<tz1p#Ksp@v`?7%?5e}BKn_edJE<>loS
z6c=lo%f-gVLdW5BHur4WWaQ-R92gUG#&?@V#fOB}(+pGh*E7s8NMus;nepLdcIre?
z_t|E-JLZ;nYfE1D_o$sbYgX62z15H3-Q8_qV$uRyLN|Br#+si+XJ#6^ud1n>yus_)
zwiC0sL#{1Z-9L5SAJzPtPurragu-3-KM;2ENVTc^6Y;E&mzOu^))vm$X1S9r?(M6s
z?vc0OcjtBZ`na>ajcj&4oBmep`Fq@Y$Ej7PPn_sD&FNiSUOwF_FFn0oSl#bL&vLUX
zCsX$6?Wp~2#>K_8MD1Ldcx7GV>EGV-1cLTDIXM-4e;51X$BzTIZ_oZ6DFPWr-6lJI
z`qHJU44}J0B`gXS9I=dyZ#g|1?mltV&n*H$`>)JQ*|%Up!)?#4dK~=x?4a$bHQVar
z#JE~B?(Q<(F63VcT9>nSe|%t6RFr{<$(k!$Tdr(#>y={sVX)=N)6>&I0}Y@_)W?rO
zSFeCpnwp!7TUl8ZUH$%adi<im#cntD)mrQ5>Kdk<kuW&6q5gjz3mco)6kXe&rw<=y
z&cC<k;3QRVmA3OIr04H>J8j;Pt7{^SL5GnWn3=iN)YyPdodR8X`tWf3hK(CnzVi0w
zP+T(W>dcgXr>1I0Y)EKabojxZs;^vLUS2;Qw#%Q2RoiU0dGqGUyWiZ~TYXygTJW^G
zzrP-CzhAc+<Z`p{@bDQkXL|C^2KB4&+`TI(BEnK!{MkQ`H*VIlWomW*|CU!&RVAI9
zV|gb)A~ZA<bhf*+dES$%>%YIf?Y1s|mvCu`Culz*!+`?_7(kmH9v$u0mYKij?YmoB
zx$o{SKmO_IX;AX${IUP{J8Q2eoQg~ORvDkHxxcTr@b|Y|*Y<;gT&)7#M@8?+P8A6H
z|M6!{OM83rzdt`aIy*rtS3qaa{P}X(e@E3<Exq`CXMB%Mzy9OnV^B7YulvdR@#Du0
zTecj@-~YEQ{ro(}ANT#v*xA`Z4uz1Elmu<(0?h*NE`J}UWmkDycjl3;pffD@R0t+*
zlrS?hn_-m7wbt05L$Oq%|D@Di{pAyt-I*BrWGsVn87H<i-?Lw`s=`K&iHXS|>xzbJ
zdr;=PckjR#G4Us_JXgld%xqZoC1d8~qZ|{jKmYLA$HO)B@bl*rt+tz}Dz?<*xhM&K
z`SJzSdc3ovkoo=n{qALDX8-<t_HSuzJ$UEN9yg&%*R7xk{B~s~X!-T0ok5|YN7qDd
z2Hnu^H`mH@Zv3{Ko9S2e6k8_Tat2RVG=(A!vYPh3ee(vieW{|dvbOB4kQ2vB*(qm)
zoji0Oz=u{ZD%=8%Ra<M!1T{iE=014-ynV$A4cB%@kF}LQJ|s?ky&wg=#l7^<%HZXo
zRZbwOy+KP;?5wP$*2nGrwZ=SD$#iwf?Mf#O#g=KyRCs+)UYZgbxHRS7v14qrX3df?
z$q1O*q`-Um<YaYCuq_-bo3vCvx3#r_iiq{=^GlC9OHBx0AE#->0y1MlRj*mE5~yFM
zxMbcU&J8USs&c=)xELyz@4=ziawQz(g;#4E8W>#L9XJ$QG(=QCw@j$&4%@5HB5>)#
z#Th@X{8WSzpPiX$U}D13fBdnWprBxkq_?*>kA%U3u*XKGrmeeoSMLO^qCD{Uqkx!L
z7<Zr`$YK+nDQB)1YKN}_k62Bdcu@B7#|qH3bqq_EEqnCy^Ya&Xb{4NaI%UR;4)gqb
z3%sZ6J)I`X!NL%*`XfZYh{>5{eV|!7(Dthh8w@0*q`c<pdro`mxn{NZ=Crd1Bqpz3
z<Dk&c+R7?ro)>c%YOT!`<M?(}Rn>=2PfwSyDp_&HMGmyJmhnoSQM@4N+Q7{l!RB8n
zpK|6p=v3@G?^b|@JS6n@SAES|H^)K2VRPEq9rN<BE%fR=al(Vap`^qlCMIUV;>Dom
zw@vM@Er&LOc4DoK+WKgo@iEXQ7|<lQyE}W0o%~|={x$~%(3v&78$sh`9aFrg>m9s$
zRdm;`T?PgQpe4VBUtR>htHCzI{^9%g=_`)kx+MjhjNe~hpOKvnx-1WL8&3nj^||eN
zccr4DqF!8B*nDJ<GXn=dzx(@pdk;SU3_3x>Ece!f>+$ujg@qf>m{omybMk4%r(+R|
zBSb4IDh&Af`&WfHp1QC)T%XP1nX-+|9PRX!lp}6E5(g!cb!=_tGA2YtMFm}-F>~g|
z$?E<_rlzKykMr{KM7vh+*fHbft5=&ih1Cp>NoZ?nB_$v0nJBq@;zU8_14_!usn=ZJ
z%R6x>sxoW<CoIP-&x{NW(7Mo>_CJ3AHa;d1y(J@X=FSTfmECvjTC--&jT;-2BTrA$
zRXz3M_3O<OCJ3x7`%z<8{r#P6a?i%QyUUH``qel0=I{IIwusl?-~ZaWSZlThNhzr?
zjbocwSXee_EqmN}#W>#G)y*yG)s>Z?U1J_9OvyZTb#)IuR>b&!zr5Uk;<RbUc#}0H
z?bk0}%v@hzpOTgaT9OD_)EpEfB&HwN^WZ_klP6CU3=IX%%*^f>$W|Ubeq32yy*;}a
zboRpU_xm40?;y9gm-qDa1RX{j6(u!g%9IN$gO_L3q=Jr-2%6vNqU1B%jMqkvf8V}+
zpk7m4oSff$JKp5v<Ujv@zh_{mudfGPM)~XOYXPoS&;?~49-vk31%G}Nc3Snz*>-Kq
zy$w1S4m3FQ<mBXuGiP#^mzV$f^ZC4ozyI;c>i!pY7N>)*pg1?z8Z;mbT3wcLLE*^J
zqo83Sr-cHXoSdM^AkZjPOAE`o-sIzbj`8vG;`(t<+{{8$j?HosPI$dxb@+PF^&SC%
zfe+_JN29H|N}98)t&Oduw6yTsn@9<1Y33gjK4@!eFRuOlO|)y}mzLXS&iJf}-!FIU
z*s+eDo+pnkUAb~(Tkh=#&!2<l$sEJOw{OyC1SNMn<M4GcjzvXAplO|*#m|e5v-3za
zOqn9`?&s?8^(yOv!^7S8*Zob%$j}JnWBBs*>&NTy^^VTY%nYDOus`4T|98E=uNHLV
z5re~Gw_ea?EEQE%piRXSCr$(fUPMI1Oz({O*5!Ul8HE`c8b504mL{#y1m$h$8Y{z^
z9|iAjTwNWmI;o`5LE++OT>*}StSl|lhbC%jY@j0wgen<MoH*g&<kaNy_mcnz3-lbd
zrsihQ>QvAjuh2zS5|Gh_ju!WRIYx$GUtfPeS(LO9bjukiI|>O2fd)E${HRDtO$9ZD
zg;Jxp=bcsk#IU39NS~~=*A(r$2WNoB8`gAocHY^4dt0vd#1r8r$7VSl&Uv*W`}(>@
zL$>tvbOwjCG_^;MA1|Hs^OEg-$hgBvt1t5M>)%Y8#?;8b$Hx~C9)A4q@9&Hb&)PyK
zPMj#veRRttUQl?ebR11$c;F^?V$!TxT<q-Z7S`6FixEA1eL?$dn3$Lnva_{A<02y?
z(`>!GQkU;i{TU3N*)WoSeQoXIQ`y<s;hM*0IoW<Ly#iW%vt&t2-rZe{KjMqxC&`G5
zi$A_!|NrQTiOP%&=jYqIdwFr~DtoIH=<nmh!|-y+UZazHAf5e>Z@1rPVz{@zo}WQO
zM`wygcuY)>sCHP$jyh1)Q1cIT0}q3I+lDDyn`=EhINsgc%PlW2Ur}9Md~%nEic?jU
z)%ICFp;LO~I5;^EPEd5#s;SLAqQU=a=K96!;`VY?S69Dy{kr&kXlUq8!*}1`-F1$O
zll$(bqiw0LJ+r^FvvKE6OCMj~r+qJv^-2qLy2Qj@yLOGCp_N<w(Zj>-8ag_l?e%QD
zQY?)Q45g)|Te7dOTeKZ~N7wlo-QC=vl{vc6+Y(-1TMG)f0F5Wl*k;Y1y*O~O8-pEB
zapliXs&V`4dOtrupM0Q!(Zk;#6c9zl#j8a?$J&E-7uEj$miYA4RL~KJzrVi+-FWup
z?QL-zxqfLO6>pGFyq>*QnCQ`R<3>bY2k!^Pnfce($(qZ(dHf_+L7?II<AWD31}<7R
zV}`_*jEhWeZf-)yQ+ZEno<E-3Cu1q3rltlupCBhUcj3Z?jPCC4E^cm3=btaG{rxQ<
zG<0o%G^n=!xhFF-Gx78^U4c%Q8Mf7CK0ZDRR<7)nv#kOxy#)=g#KguXrlqybwJu-e
z+AWrGYl~(~Z0y4I>-o#e%kS(gULIAoul(&T*4Wrs&}G%no;?c)4}X4b5$HbmgyiJl
zXIr<5CRb|AT;H5`XGddG6I03id$J4xAt5SLYmOf~=Jf?c9)k8NC6CQGv*a)6Mq^*!
zwFO4<($d^^^UwD(U%q<v=+5HjpgQQqix;3fg_PZT4jk<k4-5%$an1pis7jZ26h0OZ
z69eUpjLb~X+B4AI9F5HE2IcQ!K7iY>i{tm#fqHN=XG(^xjcPq`zyY*%(ap{6>Ld+N
z1sNC^2s$GD%a<<;R<G^`U6XgbPxi*X+TZHy*RGW~eK@&i<Egk9qqyHECMsVQ6Uel9
z@z<F{aS2QRac2hy2De_Rr7r?FR+=_8HiE8?S~a0he&IZD3r)c3m8RD-=@m^)Oe<Ec
zYC8V-<kt`1zlWEc07Ze~6Xh)?sj|VFL{f7#ZsvH&-QJ$BU;gICau;{^@Ly3*VBblr
zelG2qKY#urX9cjHuPmycOMP<RNw|TeonDzsfm+O<>k4gML5)(-p-5jrjWiIW<w`K9
z{RUDQ<R56{|EhJ$6p=l3f1@rYLZmgf%;H@s4vL@`FEUKBukpn0Dsg;$ZSBG}Yu3Ej
z09ppH_~K&s<S#EScJVb&sA@efkvw(pje`dn`{it#7A{OIJ?0|S@#Ra&jT<)}Tw5Dm
zG}YhF&&|h&2b5uXd3j4-TwnyPVz_>N{X-8<#g;23a{cX%%<PL&PfzROYn>4F`NKo!
zIaZ}yp&rNk1J2v5G@oUb%axs-4Z2VZbXHz)urp|3dhRWg9w}3=ck_OMc4^z#$S@?N
zrnbJmzTUf55j1_3n5g)@=IW}@h+QR_U+?lLwg_kntNR^U5x5w#^1#4AV7cGiRY9_$
zUeBVp<#dAfIh>fN9Lm*X;-l=|w<h2x(&7WZIToNJAd)XEaI`3Rz;LWbQW?kMgXT$>
z{x6%br{W_MXnXraWp~hhieKK`-0ZXwbnaKn6}DLn-mgF#R}P#w!69v)$1?xC`}K9P
z8`I88f$r}K3=Ax~zIfTPHc8{O1(lzlJ@{B*QTxlJ?%&V!PNQCF^JCxd*Z0q}t$qZW
z+YAYL(H{Xy0xPRQ%S8@#i|Y%>$@M8Zw|Vd^m$a*~U`Y7>?rv(_?3pt;H%91`#`ya3
zt`1+%#;_)GGuy#~2Zf&V^6)HJyf|3)p)e?EUE%P0=DD}v<0DrF(Da{5pR}apLeI%+
zJ8FIw&AcvWRl*UyE$1L;5!d|r`h|Ju3lF}s`-78}GuSbk)6X+796NR_=(&%N&yLTV
zYW{w`o^g2@FX$pm(3LtTCMtv0HkH@Czqhxbq{PL~kMGXiyA$Wmjs0s5>Q)E@F@wx;
za&%;D;CD{8Tefap-=jxK9IZ|>ubX9E0qx`kowxho*|WAUUrIn1?to5lEq^a(Vrp9W
z=m;n1mW+eV>>s{-S#wG#kVQW2`R59ostb$V<V5G%_;V<BeRy_O`a^|Ho=3j#!pPbs
zaTl&#V`J!WQCe9HS)Op=!i66xva43D0`*d@N?)~r_Pl`Z%=`LE^v&D1ptX1`?Cg)B
z_cnpfc<_=~<>=thu*g|qzGQrSJh*#Q%BA{w$)z=G*Md$`GEP5tr6M{kER3OH%NCQB
z#Vc2?+^}WKnt)o+ZEaVty8i$7cV{xFsG4V6ZBX~8Vok)xrr%7CTK(6$)voqVb5d&&
z@H9Eoc7<C{Pw&CUijMyN=@#>*PHlbiBxT2r9U(jXBAqjj^-8z9c8fXch#kItdv@Dx
zP_AC$w>V|q74B!xo=F%aFgSt6{XwUJFedYW7OfV{)zs7!+P!BQXp`UsMdyH!kQR0S
zc?u>bBKi0CtquCqBH+Zaa?hegN}%-xxwp5qZrf&d=FFK7U$4hMetCJh&{NPF(`V1v
zY;A2pU5(=B=Rmy>4bW6JBQu-F){XF~>!PR2d}cP4zrUAwXGh_M>(|>mJ2{W_%j-`S
zZ)t4>otgt`hp$|zIZZFN>(Qe}S#_c*AeT$;+qbXc^D|!1=C;|hyQR(Z9xR_<cj(H>
z;D=A1urS=%RjSRy!=qw0@z;-tx;i`1(DKZgoo{b%SJv0}UnC3K6=PE&ur_*o+rov4
z^X%*U?En2>uB)p91>nv!@Lj=K=ic1h3_6zc&faSApFe+k`1!dxI52>=Zs|6F4g~;Z
zx-&D4L91%(>g+(PoBaL#*F<ey74+5!*93!Q#Rr8pKH07rGbBVrL>`=-ZT{io$Hwj3
z%eUUCuGE<MpJ!^#<eHC<SgXFh0dKZ+z}BNP+Q0GCZ{IJ;pP!v&?mvDQH2v~-Urugr
z;mb>^pbMan9AN>i|Gly@7<4N_K`IwFx1w0L>OS83nw%dW9)d@IK&LB$&KL=a-nDBN
zXvtY`FK^npIh_9f{-6_hUR+%K;p<md7Z(=YM9|T8SDKodm_Q3_?(Ql*+|14o8h!^Y
zJ9&Jp_weK6{h+bhV-m}JW-?9mXyKJMQ?Rs@%*@RE@xJ~)cWi7d=m;4PAD=Y^w;>l9
zH##Ud#Kp-eDJd;jzP!C#T;EAUWYK~J44c!>voU}g3Z0#u9^T%E=hy%1T(Drlt2)gT
z_%6a#L98no!@|POT)sScYxea%#)P)EwjRS{V!BaB7*5p4SQfcFs?yijfA;8+Qs}z!
z_xFUJf}+fJzInbJ^MPyYVztBPeEs-$^3<tEm6Vll{`&elGAC!vqQfgUGchqmxZ1_B
zFfq=ysWjTWWlM^bl$1|&^z55AZ*F|Q|Np$B$B$o6Sn_r9_U-21jX@{SU%6pg8d&@1
zj>0F#158XzBC>2Nn>TIVEZKh?bcjaI-(O$f9BSqE(Gc;P0@|y<d?4-YEY;Gz>({S8
zl79dAPw!4u?`Z}MZ|?3ckFhj0HU0MHrg3M{=CreqPJw1r854q+`%PVye|J|Y4@30U
ztk9X?!!F*RZp0FF{!jX=8yk}^T)%$&Xt(&zk17BD{oAl<6KKDkq6inLzcFEgz>1YC
zAA(lOT%Z2k_e(Ojn9eJY0AmIQSu0N$$B>5g>-Dd#i|uyp7Q1@NR*Px=dH3~kdkyOU
z)ojVXA9wNLmFgZtov1AwvAfHT*8l$<Z&UpZbV)*GWhLlj-EH~z`PkXnb8c<%ytq)v
zi6c-THZ~S?Z1(#2{cYQ~n^%2(1zK#vBWEMA+<!hB11JYEsD!Q54lH`}_~X}48#Zq~
zEFNE@SlDy^dGUX}n_G%rTv!-%olnMM!=bmKY^tB<Z@h3JV8@Of1^K(e*T;djhk%OQ
zD_5^BT)Vcn?(eUI7cK~Zim2;p>FJ>5K%iq6wrtt*;MFTGe}Dg(vyF9Qb_mQi%LQH7
zWdGV_pNXib=!z8=POS^wnsk(FP5l0UlUK8Kx+v*HY+zvLms@l6gvk4=tHbZ8dFI~Q
zvT|cKhvE`D(5lG7r>8`9Vs;3`?k;l;3>5U6XVclp%>L;8{{PSF`ae|ItjwM|#cs*&
z`M+YBK|Aq+j`#HR*j4&^-W9bCpQ|zRzt7g(+hLDpD>HN)O#<x*kT%N!-ORPC{C(fC
zUg^hQUtbRbMb8$OloS=S{Chm!-rj#cpSRyp`@3xGJ@?wFlO{DexATGgzhzIV<h#4O
z+2!Ts-&M{w%LTO}o;-V|WNa)fC@A>i#zy7xx|^F)zeN4pU;6r5qaoWd3DB{8QoGv(
zoL&i~r>BEX8}8`qa|;U-1I@&MN<jNMncUmkSQ%Q{+r4AMFIC4^`Olg&N2b$AX(Gq-
zb8}Z0_^AGV(9+g6?Pi|u;*@{JUq80FuUxqjw4rA6W@EFQ8x5c}*4EabgFLrw+XnSY
zVWA=DPLt&0eTAM(sxk7@E(mqHfVSyv$h~dm;_iN0X5N(vxwp6V&Yp5-O{8(mt`g3_
zzrVL{+h+FV%a;eQUUh9wKVKBD1e!fk_n+r+1=R5YZFcmXWzslnmXwdLFX#-`&Z|9M
zJ@WSRUT+2MF$7(uke!{Kk(C9S=T`Td!|)+7(l|Uk9MmB=bcpGG&F9`LX{k$JbMf)H
zd3bQ#+Lp`h>+5^t_U+{B>ta*yeczaT9Nd3+`Lgl+^Tol-{cdc_jcyI|jM|bRc>UkG
zxz?+n&N{Vk+QEYdLA|CqbLTExx|CH|Sh%9H^5mO`US3{@wq#zuu&1(k#mbe9=bs<G
zc~f$C`TJ#|i#QZhcNIKjs<4rB>yzo6t{=Z>#R?A4z;ala*pVbdP%km>?k-SA|Hj5-
zcIZ4QXiVw%x3`BkrJi1}W=+q*W_D%<&`o@@vb^^8_D`NZ1+C_tVUXB#=G@s&UtU~f
zc5`zBEqe`H7t^_9i3(`j3`l#IsCL%!@_ky$?=qEw?xv)s9*v2ORqcCwb8|amf}Ncm
zcy;SP&{~s}6qUfZYhQa#&Xc&bKHmOa%}JIUbFIryiKaVO{9m$k>Bi0J=QowUzP2%R
zb=bzo$NM*5Umve+wMI()e9JujeLtFJPuQ7!ypL<UpoGMUkdTlRzZYRaL6cS$-`P=k
z=ci*c+sQp?x3}f`1P2GdnlpK_uyFTLqt~;H)A@qK!lvyycKdd;)-&*?RnHgk^?yx4
zTQZV+HiGtY>jWF^jJcL_?Nm&#?E0s3EQ?d(UO#%IRCsoC`uT{*$9hlisjsx>mOAv@
z&6#x;gZHTk^XH$>$;nBnE6d2t+!(z*&+wR?Pt(+|l6(zoV|Gqjo&WF8&md4E_r@&K
z>?NOMDnBg*-NO8_!e*t_a=*E!czAg;nRHgl^-7sCF@SE%e0q91Xmv4Y_7BvpfL!}?
z;_TVA1$&nsU$!=8r_kA1riT}~c4tgp`X4m8XIJ|x;oY5`pvz7tO`g25`1v`n+TZ`@
zJbCg2v;yKzapdgsnp20{`9TX1MMOnU+USdQ8)jeAxwE6t`Pt9O>i(zpq&+(`Q$s^z
zf|a<aXzPp_5;IGu{^NGee0_cW@vE!DcRqi9Ztme*TeDNIF*3CC%TJRi3yEI!D=P2i
zCf8?MK`S!B`@dgaS~~wvj78O#6=&>&g`GN<EmH&Sobs7v!YL*u77!lpzB%nIXp-c}
zv15y3cb73RsH>~LTfb-5u3ezTl#3TDgAM{pJw2`P>(3uQ67KD(G%z-9h8}$K`T6<9
zk(<+|cIDsMQD{;4hy}E|nU|Lrbcp=HCRWgHvaNUOcdq&r+EC^3N-grf%H~a*X3U&9
z^UC&P4-dC*Ucc{G7h^(IRaI)-`5ABK{p_D!#>K~%#sC__J>9!mabNwBB+&H%t&0v%
z@b>cJ;^yL7b!F?*uO>G2|6(51M*Ldu`bp!iaZY~z`9+HsMfmygb$4_moSkj{{9LcJ
zx!*HWF)=Y6GqY(=pFP`jv|HT!h*9w~pJ@{(9+b1IIk9HVnjMdSe}6wca{8o6LZ82W
zO_h|C)UmUhXK8I+{QS<HJ3F%3_+(DV&NoWs0&TN7ed0udcKEs{pw18IoC1kt9Ye#w
zM{?fUtEcZZx*qa%YtEGwg512ksXKS>d~>W<`V43v`u5b*V((_D`OYdhe)#a=$izfN
zZ*T9(5k}?b=2$-cci;TT`QA3BE5`m(3a@6W7d`&`6Ey0+zwYmX<;&TPjg8ktZRKig
zYy@pj=;`U%adzpdq#GL&L7R5@WUX2{Iy$mC{(L_4_+vt1;=&gOcAB=fvfX03O-q-m
zetUmEUO9Jz)|u5BT3U~eZP(V+1YHgO;@Vp2l9G}KuU>K4+uN_pc{%UlB{7`{26uP&
zjO^^>XJ=;KDa_5y&AGLOlZ}mS!^VvVHzXe3QM{?@4P(Na8yi6m;o;#)NKbEXXkb{e
zdNnfx=<vpXfQCnpl0e7W9B5a)25J`w3kyp~NF?0clnR-rS-KQ-KF-v-T&-1Bao+j)
z`Jh(8ty{NVTv*7g<~QfWT<yJHVJ|I})6dO0cy_jVVnRa0*6iy=!o}wK_hRmD_ux>R
zZyOc;-uTOpkI6HSzkT~Q_1vej!a~QatgM~a*T?OZS{=S#Z+lEZL4oTbRr$(KPdJT?
zjW4c?wO+Am)wQbMpkvs#WL^d>T)h?{t$KK$mx{Xj>A%m<K6#Ro=Mm8@rn^L~U^iqd
zH!CYED6e;QcQ0JCMkjFD7x7h>))!7z^HrI5`tz^v@9suF+BtKkWYpHI*68hdjw(VA
ze|~=c;PcND=g+f$NbCso+@ybcv3oygB){nPTE43vqqgPT40=@g^5o~G`?q|3d6^x&
z@a@O1U!Y?ajvYG&>U)7k5Y5faXKJSjI&u6oc{Nl0|Mh!&+1*3$)yw?PX-E;i@n+JJ
zHkH*u3KO`^igHyHcy@AJO);9)!lxlCsMV+3+Q^uboVdV8^OVEtWiJ#Kx0QGaNH85b
z!l>!7Q{>Vmw-o6dU7?O=X&l^<3k&P(Q+C-;XE}PuEd6uc*_2~*Y@b`+FJ?2JZ}anA
z@rA=R-)^Sg+F!r_+WPqQmo5cey?(v?_0Rerhvi@WzW;w;Q*-m~H!=$sE{tp3wYUCg
zX149a=<VfC)-$|a`|#R<-?3pvyGnO%d3WjR_oB<od{3P|{rMN`%4N&kT3cIxeeADa
zvtotD--rD58Q*^}T!<EY)+nc@s_N=JP3Phi&EO{m7GFM{)_?tW`~7P-H>dy2`nj*C
zhv$6#`q<su&hjUio0@9s=$zTi^XTMcbx~Q_wV+;PR^_aCSJ&3-hVFebAI~(oySbJ9
zJiIqA*M4Ws&rNo}UMPD8B_u3h<Ck0W;X}ds*Us&HU$;!%^3^o|-X6WR-(T<g9M{&~
zo_%{;?y7a`!V(h~%2mHHJik-*<*%==fBigPfA8H##s%Az&M@0fxS11HRJ3Vc^*hV6
zGYp;8CVSrAo*(Y$=r~(@xx~fI=j~q4{JM6<iVIg(2A4iLA-FR}FLq~<YdfE8kegc@
zXq4J>(%H1&prA>=zP)|@GBrOhFU-%c&u^ZM=JLxco7wrRzUC}nwyf-DsfeiP%cs-h
z!<?O)&&{=7e&<fid7m0Lx3;F{=G4tMMWm&*S1#?%dV6c@s<msUo_>0%`u*PJCr)_G
z^ii96_F0&J^0cU`mvjA|=Z4S8JUv(Da_sk_>+53Y#h<uz>C%)rbJp1Z``Ev$<mDu@
zoEr~r=07;l_|}e{;Y-+;Gt9OT4h{{E9z7Bf7hitsR#a$M*tV>P2CII*-yaV;0oz-D
zuZpKt>8mMf{_|>X|NZ>=bE?^F)vY$XWykwui+09n>Fb9V6&0=i3%YVg)q7fr@5lIL
zqnTS04l?ORY&eiz?cmUGJt*Vz^Yhmq9qm^2Ja7Mh&%FA7Kf{vG&NOx}zgs$8<$c}X
z^Y;H^#JXMg|NFXrYt7G3x368Am%Qt7oZk!s$G^Y6UOqe9JTxrq+0UcT!ZI^6Ax=MY
zhM7%JP;lYz_xtZ(Pc2z>|Iah?s&6;b_ZQA@XkgHd-*-p2MK$wChhWv~wcGP<f4jKc
zUtUy1q~!G9s0|5@v-c;gjoBIW_;~;Kn*W>U|Mj`N+<*UDi<d87#;xAz;^vlhVS(fQ
zmD9e-T$cTAWMp*d_2JLCoxQzR_3J)%m(6EpsM0=U^S~W+=$fgS*{@wa)?xwz3&P_n
zUFB;&G^U-Kv$Fc#PWQ&fMlMdyz?hgh^Xh(O&b6!Eb+%pi@B2i>%F4>Fo}Q5Xb$?AV
zE+{;G_6*deyL+wLF7uMg+gn?`mEHS70s<xo2@8LHHaoxS>?v>Eg*%okaoPX(ZN6#R
z8Hv`GmJ>N<*<W5<{B`$z-SXPs-!u&jF1()c=uuLytaaGIg9o{|xpyy4^}Su}Q-0_4
zQt#=n_I|&2d2zqpsu?pRzP`ThfAHYJuKxb(n^I4gJUYU8GiMv$e0GK^>B+m9PYXYJ
z_RMS2w*33|GFcaXe{kRb`Ry&4lUJ=?Eh;X){Nv-}*&iMpd@GlIpn=iL+dKPu(Bh*<
zkIphocALIl<*|0Z{l6VuU0o_$zci<(r~lru=w9=8-v6maGeNg1Jbn7~=Pr>2w@VJ4
zKmGR08Roi_dwVL2EM&B_wJ*=k-?#F^hk{-yQ?KOXeP6%KW@cdc?>K|~kH>tw+9@+;
ztT=MSB{Vej<&~AeRy991*!_6GymZNu7YEtp_dMSCC-tff!?BHthuQwUYKmLBY15{|
z$t4zN!o$K=?bxy7aO;BaE7z=<ayRdLsbrnDmX=p!WTcnB|MmO-zHJZtdt>|KqMcjn
z|JUt|(VJ^s?gu)xJ0#>vuDlit!(2sm_2bu78Sb9T+g|?TeqH<FKb^wrCdtQo`uLjT
zy3F6N6PJ-$!zrwG=i|T3%*<b(=l|DPnfmwpj2RMZ<Mu}V{P{CBREfbrnSV=g`yreE
zj~V|h-nTC<F)`7q>dT7t-Y-9H%e%X3ZS?kEyLcEFUd&`yh}~Nix_-~6u0@L$nbiHM
zP*qdAS9Z6Mf#E{&hI2Lykvd{$=URt1v+-V<XIuT{lDB^5|9^k8GBQ4tW->55kT&?r
z<}gV_R(9=+7a6`Yja=*hzK$>b^(AwzRjJqEcK+*2JSU3?3qO7>#K>?!m*X?To(LT=
z-+4BXpuG);AA%~clBcIc57{s<*a{@dIn3U-FU=O@t`{@e85kINx(xUk7#Ji(66F{e
z7z{M3o-vl}>gwY1ymYtx{@cf15At8VdL<$){ra^L!-C@pX%JOuAXN_!w|h_0i`(-8
zq^hX6xHguF;fuzZGt3MO3~a75u$g|yhGBs>$P<Nyh4**ePoH0_Hu>a|_`k2h?*@o6
z{9p&Uk|7~L$Cs1gMNs{(%kyhunHYZPrafb1U|?ugI>XGcD<mo^YW2LIpnYzZmXV5z
zid|h@L3MTeX3d^m8=}Y{A)af-(2y4z60$^nUWHTM_UK7hu3TASntkns{r{i+`P|G5
z%t>i-3>R`|&6))&&^#}7iE5X8eB^rd+O=0-ug70s7rVPAMwUT>-}o~_LtgQZ4~bW=
zU(dd`r!s11(bDwadn!MN#K*6HdV2crbruW;3Lv-LeKy(OZlX$RYU<Xix9;}80?Vf}
zGqkzSU}q?q-OzCR|Bau^t}`&?KAtPga3QyiPgcwG*5-8o)z`nhzkmPkQ-+3z7mfKD
zUYH51`-Ql;w3y}JTQg&ZgzeWW!Cai27uUt^-ct0`EA2Vs1M5ezAQR4{Z8pohqp|(=
zT2bw=6M5UUb##3EZNE+d6;X}M?7w!oFc^p&vSC;deRh_qH)!cqQPHL|X`A<b-}^rE
z<D;Wm8XBOqm0+>uCIiE+D~-(TQMsqjoC!%wOI!VR>(;Gz1BDoV@Pa%B4Rla^&gNxU
z;2jbYvSlaB)9sRmNiA}fPbTWE;9&T}pD4$0L3P&b*;lVz`7*bEcj03<@epQ)f1L*W
z3@?N}e*Adq{Q2*tk_->7V^4C>NN=fRU|=|~fa5a*14D!3MibQrzwq#Ibx@amV!w9d
z{-3|^|JU1n_Z>JPDx6_{Q6efTI%!F-wE3?cLO&LNv+3Ys_#>Jq=dir`K_mN?!pCkq
z@8-o%XR@C>d-m(sLJSMs7p6l}FIEc$5orwMU0lhRfgvHFrIO(VYa6fhvYo}xUv=y6
zyRas5bIRtMCD&uiUw%9;fBpIV`gb?i@7x*r`uh6tprA=>!d9;dTYaogcJ-k{hs=)e
zE_m1^SM@^i>-+oh_CF5tmwb5<=y_@P`+cihT3A|JS~9Mz2(&7A&~W|Z(xpphS(UDG
za&}HNn{8V3#AEM|N8MR@dGCJBW@M;avVJ``149Y__S<XUyvdQZEIP7z?TQs1p`oEx
z6(1I;XxiJyXJ23U)oR_EH9niu&xaKhY$z%!vbjBb)~qQLCoTkK@}SDfokqsSU%%bX
ze|^zi{wio_(DTwv<Mb~#lKWpCYUSQ^Gw0Tx%FT7ZF3&&pwygS?RrR+u)AV9j)&KiE
z|JI($;^}vp89tbwIm7Ir9~cz0Xm$AdSNiooyVu3;UdGJMcOq-+s}Bzk7wwFhwB*ns
zCtg{rkmdgKr=5N}>GI1EPtQ&!X6CKM&;8bayjS^L_HOz8+Fb<?n_j(s{q@OY|5XbY
zI^Mi_^Vd`T`jxwOS^a$-|NqjC!pB!`+*tAHQ<15ONyf!Ru2nxCwugp=Ez7>X?&Q;=
zlMf4C%uJtmQ96H*V*BBT-M5(;+FWL^H^eR4xG~VW{N0rug^xvqgce=75^{E)ZS>i*
zXXhEjM@FvfxBnNBe5@xhAYj6;@9)?5^zgK{x3Au{>sGeS?6b?(MsI&Luln7^1C7jI
z4{_^zOuBUWGKis}qvPY;#&fawysf(DuClkY_++hAmS0}ExB7e5nHh$!?(g4!CT;Vh
zM~}YzzW+aNl1;rT14E7VtsI60(>wb6uRl20ymwn`TU%A_|EuBgFOPHzgQ^c1zIGYD
zc2Hv%)a2yk<c#~RrlN8p$E<qa_6VIxOD-;UuYUV||Jz9=KR-RqU;Fvd(eCmRTLy--
zXN(K3cXV|8ICecdD{IP>DNCkI5m_6(-Otq2)XUTJ;<nt|CP_y+!hU~$d3pKSLMEoX
z|BIj2AKbTOiA&!0-DlTFSASz<*na$s4TD3F_kn*O4)bqKJ1eCdz3q(fwfuW~KrwLh
z?Ki&p$#-@X&MQt$ODn6eVR-R&#!Pkwk4c9P9a7o4WoON=m&;eJT6O97`~B-PFE3lU
zZk^xNt5=Jx=E_>R*VOD$^P96mH+oyf)m5ROMr+=k9Se=q&uQ4&#;Q&Be13lZ`<~N`
z4RMVI{0tLRmM&YSrKaXK+bs9e1Vv|1<#**u$juzH)b#Y#d-m)JPJ0fzt|C%LY;D9w
zr?TC#j*gD=w!V0Ne*XF!H*WatkYact3o1uEb>-W1b#+7C+}hTJtxifx+EVp3OH^Du
z`{AM1u8xiuQw-)$n6TjS@qTS>ZSSzvp<>;xi{1Of9330uYQJ9f+abj8!q(^Adi$-+
z3|5YXg&Wh(%uu`+cj0DHaj`0>&+xramEnSNPCB$!q_kYAt&L@1_+R|zN1^AWlPRAH
zRX@0w?Y?_mmBFFkaR&Q^mu>v=dY(}`3KoKj!^-b>%Q-(Yd@yaPWSFaGV-quJOX6WR
z`EaKC;K<0AR4eZsjMLA7nyu?%c0Str_t)3gn<8|oo=kMNx$WicZCd&&q_wT>RE}Bp
zlM@rGJ{}dndgsoYo6E5meNO8?wnGceL#^DiOfo0EDXYF7r@`<;@{kSavV+Q9g^%03
zyu9{on?7aAiI*j>)a`$Es$_nCc6OFs?Jho9t0kcF<+T3(D>pZ%Z!LKlWc&Ba<#~@k
zeg3>P<)qNx$MXLJl9LxpNlSx@gqxewU(YSS_tEP3+1ch(r%qkE*uDSM)1uP9N0}Pr
z70)m;nAH9%iPRB$dt>9_?CQY4i8*GoH*MN<<-&ypuH9lUAGXVfMMlnC7rR?+`f1hn
z!wb{rRl4Qx`Pe4I*RHa1!-fFocD}1GFE4*uwDU=cRcKJqq5}sU-rm`H`Lzsa6W`gi
z%MTB?e|=y7fA{Tmk_>+w<Kx8{7(VP>us|U-H8m5|&9a&+WsuPD>eZ`|sHjzz#m_V}
zG(3KPdpr5^%PaTxR&OnTf6wf=WyOaDj~+b=iHy9N^#@)q?Ydf6{q0R)Mn=Z;7-@zd
z#-N&d(vmxOVs^&p`3LCh>0LWJ+uXGJTaM?Yr>CdyFYW0T*Y}#V@7F7BS?e;N*Voow
zo?}^Tl6Z*4)y-|ys#UA58h*c9F7GJEa0^srPf+olZRWdh;lg=gvllH=;*~b@0d3V)
ziPRDE)UEvjE-toaUthIsnVYAlC#Z1QRr)$4IC$}tDI&SIxA`i&^<<RZ`}g;E`F&TW
zhWQK6vN0&U{2!fL_U_Kg;^*gH-q@HNwKZ$%^RI=Ek9lTsex5mV=62cTOP09E*Zo*{
zZB69j)YH>e`p>tU6lM1!Dm?snmnp-APEbKp@#N`KP-njC(@AwzPk)<_Ezh_9_)+0I
z$09I#Th7H*p{q+?UQ)fgqtH41+?>Fws$D*6lh4h!U%z34fv2vnIcPw7)v8rr{{4QR
zeQQhRs@1E5OG~%T@mub{j-TNVZ=xK-gO3-S`A=qTef8wz<XJYAo8ImH9=HBFMoA-O
znl*(_#$v(G&(F2Z%)(Z#T-nvxd2yNVY?G7|0<P}v+NP$VX0v^7-n^-$ub*Bf$6&<?
zGF(tXV#S&@I-Z|uK74&GBqUVw=SN{`YU;_Xt*4SUW_)>ZQA<PP!s_+=v^=?Zc|$WZ
zR~i`^rEHB76&7B6b#?ga9Xlep#q~m5Tv!r8Cfa^xV9@XF?FIEk{rvo9uRnhLc=q>q
zckf%cB_%EL^7f9-t^aV4Jv2D@@y~yc`|aOFY-G4_8q~<i%FDYpJ-%*b?eA}y-{0Mx
zWtu%L{i_s%!+B7X{l%Z3pS$||r>o5LQPYjua^kosBf~oukY&6Q1`ZD&KJ4o2yEaWX
z+9d6aMErCXh8@hH_I}Ft+o93Xpe_Q#eL-VL0}f;rQu7gOdurM;mJ6wnp2MFrox<u<
z=FE8mZr&xN$vG_F{rlbSsgox^er@!iebVH~Uk@<z|JcRD@WRk1Z~N`Huay`W7#M2O
iZ_mWqk0GKg{#yT0bJ~91=Qsa@O!9Q~b6Mw<&;$SmiCIMe

literal 51752
zcmeAS@N?(olHy`uVBq!ia0y~yV4Basz!by5#=yX^f693w1_lPUByV>YhW{YAVDIwD
z3=9eko-U3d6?5L)t*qet{_p?CbfL&jj){w$l6+k*+*sW;ZJXC+IZ^9Cm*^|u;eLVM
zn#*<ly!>Ua?hScVU9}=V)4MB3MN=_IW#hGJ7ZkRgu-b2L^10YsKyasOrR}=c`_@&b
z*%^PH_hRavUq8>(96M&f!z?H$C^&I<{?4^qwFN-TPtFg6U0hsTym}5T@9600m?F{Y
z4^pFP$TeR{Nl7UvNyN_8#l>aG5sjLzj*bqG&cGicAdNzcKWKs!s4i>T$}J$cQ?{L7
zUQJEy*satPrCC>2I3DklT^rlhF@?#jYVWd+DQbUze^0-;DfOD3^Sa=LPOO_YZCVrC
z)^X?emnvUD&Df%%A`U*jV+K66?<V?JR9M`+dGp#oe`gmjPNJPtY3J(lZ_?bkzAi2;
zJ7ZRd=~|V)%h}uH;&Mu%)n9Pp{xz|?r!_LO&pI8tI!x8lQnI@Gx3%53mzS4E?yIq6
z*qVJ^O+({FU%#eOkW}W4SeGaI-qUn8M%WcU<FWtq!Fi+1?-v&r_sH4Ky13X~SWGNT
z=eUTVW-lmk8oa0LZA?1aRr7j1{}LsoqI8otdP+=dVs=jQp03AuVO^~CqD6}gc$!03
zhZTN&<f;|AD&#@k^K)~P-`?7K<ml1DcXurJ?A=@WX5(=V4i1CcM~)raRQtQEyVfl4
zj>p=ltr<5qEIj(_{l4FQcXyW;zqp|I>gsBD2L}d6N5>sIcSg=BKRr!X#;!)9L4AIW
zkhr+GlCpB-{yN+D`+l#xnRj`auZx>o(T4|)T48HCwr@AD{q^PG@#D|?>eG~zT$4IF
zrYIdec+jn&pkSl?_UiBN*b*3yg~!*X+WdIX{Or^8_`1jkcG6}!23gnF<!;;k?ehNm
zdSz?t+Xg&`Gp?_TZOnD+l}eS%zP&Bi?e4Bp?ws)Takk28YR4YkVP@ko*zWG;CS_-5
z$Cj{T*Dk5HM2VX>Z@TTT`^#lBZ|&N(hPA)GB>leG+TJext5`{?Rb*jexuE8EzqwXN
zZ*9$HEGQ^=uyXmlNBQ-?XYbs*VBz;>cK%N{lKTta+%ROw$;l}wDKXhz|M{%B&rBoM
zhTre^&;R{?|NT49-n{YITlMwBhYt)7E-Z8|d3B{z*}ae9!ILK~>(}e^@$o&|DOdL+
zu}{u6D&epGz8^~Me6pJ&zMr#xzai(Q(SujPzxP&uH>-{;E-tQoy>@%V_Pp4{dKV?7
zqizp_T~6)o=-}A2c{AgSYip(R^76zU7T?`fI>)N?RMPxTVf9HfXL33`KR4I1@DYo;
z|Gbn#Eu3ky&)faxY54#5{{N@D-|sWNzCHi`JZ5%2gWOvtpCcqCB^hkK-AJBeRob<;
z`un6wlbnwC$ufHQ`=?)8;>mh#{)`zOr>E)8G)m?A|L3_qBL_df`S$!fJ0?CoJ$>?w
z87IEHynObncKEtIbLA&@cx=32J6|d2UG3km*Pne)pI<B1@ayYqVF7^y@9yqCdGe&9
zjm@0taaEi<ZWaHy|Nr0hJI@#Q+bweIm0~zE!?3xfg+(uZA5YBOq?J`)Uzyu{pQ;_M
z)AUF>e^2A;)!Gc9t3n=L4UbQ~yv&zDCwAAAqut`qXa8Cmx;iZ9))r26b@k%8y}i9Z
zYv0`1*wWT^X=Aecv3~jUA08fN)TzpHb@A$|vU6P$b9;ZiePCc9L&%DN#^v+tZr!=I
zI$Zzr?@LR)&%Qt2FK=G0B`YhNd1b}KooCOT>&xH&cba_Nk4E{r9}kxu6khi&>e;hr
zOyTX1txH}cY}{M?{M?P3HyOj#584+zaM+hz^7`6Yr3xmS?{|uyeK*a%c42k6zKyMI
z=FLs2-D0|ju3ej!b#>L<EoOofcRPaOa%;Bp(z$bG@9rvHoO*iNmYkcD*6;gu>dv;@
z+h)c;p5A@VS#ZDhdt!F<m-wZcnwrnPTa~_g!aXrBFYiwI{aV&-=P&Old|dO|$=O-b
zuEs)C>(75iy~73_{r%~;wq*YJ{d;ri>uXBab(MlbxaKPbt&9C_5a{N{W?lBiz@D97
zZcD~&@sQ7LHyHiq*?9W-^||hztnOd*<wanhoNd-U?<(c5udkc$S65Rj`t>EV`)xa)
z?4u){!mQiQ7uP1R7L=BzetdLv$&w`>em<XXT=2jl>)M*kJp1BjJo@{7Jo3#J7ThT<
zV&}T#PFH8AqM@N6Lv(bslzHBq_r<vhr@7~szPe)ge)pMEr#8(vY^<uvs;{sA>dH#z
zgan1Q#5-Hq^7HdQ%lRKR=;-O$a-;6;rro=D9}WI&zA68{T^pb5sS698Ik~x&Ra9Em
z@BcUJ@$vrI{s)+!{avG^r0U5p)9JCZG<SXabiG)vIaL~ZdVSB%&SnmGzS}2j&B4Qy
za-e~+=HpTE16O}*KR-LWee-7H_j|w3lYGI(E0xlAC0m~1*8Y0?j~_o)R8~HG_Uzc}
z_5067=kH}buzLNzuI6Uuv$IT-e}8+s=jXH8&+78`d~7>fn71VB>Z-KdZQHhO$-O=8
z-QC^E5^Q>UdN*#|NRVK&v$K2lcZrgcsw*gK=skV%B;pGbsLVf5c6OHO;<&w4&x+y_
z<{G7PiE4+jB%GgTYxD2NW1Bx84zG#Y%EjRC@9)+xm;3Jd>(|-a{y*-w2NlrGPeG1Z
zzh0j~-EYo=o9XkHCLV74^7{IDnYR2}TQnaZ>(#!pwX&+psOX8ugIAM(+E#rzaPnlQ
z*HkS*5s{Q{$Hcx>C@CHF1SP?xrLV8e<bNNsBH-Yoliyz3em-OT?0f3zX%lD9?(XmB
z-~acU^x0Xar?2mG?G|%!cfY*Ak-2#8=FP^z%l(cXJ*paCEiNvel$0c4l;W{3*UZd}
zN7}4s#flY7@89m3xM73Av3~jddHTl2lfQf^VX(2Wsrdi*yQFcN&%%CnrJ$Icp6I(1
zRFsPNPrhE*)6ub^NHtut?chXZ_m2L4b#wFSVQZrTSBI^Y-gf@fsYmDS|3A63)H`H#
z7;kxbdG}j!y%+^MyL&a;ckkc7ztTS=aLLl86DLeKFj3ikMZiL)(pOgwo<G0-fIv)$
zprGKFx3|Af`@X%agW+`P`Q;raWH)Twc<}aZ>HPfnPFuHc-@d(~<7L&lb?dg|-=FvG
z?QL=I+Pu8HEt!|w%yMsuoc`$I@@`7oUHpv@Q0YvSR!m`Gp^A!1LUMBQ+aMR0B^;n^
z6tXgYzunHAJHNcSdHL4T6Y)aA!ax80eh+Tm2!V3<s*p7i6UB6+49efdWKUPB@9gLZ
z_#raU>9Q>mZK%|9r>1Imc697W-MwRn#i2uoEULfdaE7QVDJ}S*sg!!5N78tPLE<6Z
z+qw7l%q)C-Y~q|bF-)PI9UK{}R0TDgkM&48S5@uWdRjnmB9lf<m&Z(DA)%zVLM|>(
z*gy@D)N?mBCRe`O`CRAP(IZC$WMn|q<BMBcwYkM~4jAxghiWJV)vbIU>~d<(+UV_*
zX3fgd%fGRqQO>sN!ILL0>*Mxr*t#|K)02}SD}#=9g?4pJ@dx?%S+BG?pS!#Jw*32j
z+qauDtl#@hN;hiDhP*^2rKc0x?z%4VxxFn{dUx5|q$?`|(>}0d+}NPl%+9|p4y0hp
zq2(P@GJk)2%dD|s`sMrg_b)juD5&`z6xKf0#m{&c%F4=qZnLzsoLXY3r1W$iSh<~@
z9YfBY9ftR}9d75JUSO)Ev<MVFQLDq&ZrHy4`Sbbp+al)AoqP7uQt!1PQ#(9<E(J-?
znm%28v3q~o_jh-B<n89jT9*k(OMAb+x7X9#dvjT(lG4*Ykm;41)6c7!m`w4v|2t)x
zZnThu#EGNb;y)iW^RJ1W)#0&oaiyK>k~5v1of{*{N=i~LE^_smXEXEe?()aapQqpB
zw#vAmkUd31DJV}96a#{yqDS{se(u`xeof@&GY(oxO6C0^TO{r5?0O^&7kT`ys;Cet
zHdRsz5@_`o)HJrSwS9SO>uPW$&c49x4r*8vZh7NO^s`dpT)d_xAMe{({M>KPo;_<~
zyZ)%!+TOjT+To$OXdbkI|LUj6#Gs{RZ*N^$7dyM7g9Dm!7v$gHcTEq}^!|#Y#gE(G
zEKiqHOKhvZZAd!GwQ19)8AhpG7cX9Xb8qi#MrO7LZ{Fm*{p8|uO7|-$kcwYj(Tv)f
zb@WK5FsKDyP^x!IP}yz5v}s{F&u?r><u*<`qoAs~G@?&kDJTw{us^?EzkkxadFR$d
zZtm#sXJ6pnFL!2^DR+4I^(4#V%Y0|gu&Fds_n)UT?Qv(v6mh9C@rg#y-`w2Hz{18h
z>-DaZmrm35V%LOD>gf0bt`3&@%rI!I{QQj3AoG$+8=oxKfk#KXU*6lhThixvpX})m
z4-Z?Gy^&b#-oLEs>nnzsokgvh!OH^n*VW3%%4Xi!pm^T?zm2$FjKO)sq9-0=dNCXa
zHY6UFur7O(dsRY8>eLLwWQ)Q_EX-^?3-a#ny0Sige&XS_!k3qp*1R>(xpCmd#l@Ld
zRtUz$#eI2ye|{^s_@v2`lMByGm>}@&{r&SDg32F0eR?#}UGCxQ_50Zp-rd=`CFiD)
zzrX*k^7np0L6eSJo||iZd_~~mj9XhYO|z~n2wxw!CT{PqZR@;UmKa?5tf`dhwKi(&
zhc91P4xB#Sy{q&!(}W2V4)ELmad2~EV*nL%>gtylyYoMK^yp07rNG5*AD>Q-H>&uM
zAXo8#kx$0rz;XHdGw<&1zPTxto1s_ARLRb6-r;us%PRtvrA#skqD|l3**V$%|DVaC
z+F=hKKX%?<_qU^~>(S=(cFMZCy`bi5+U>8euU}ppZGPv@9SMU3201x7P#;V@zGfn*
zE&p!!`&q|r%HBx4zP5I;*Ho>NmzP>Ud?+x>xpCmqQt!y!WxD=$KUGR!Uwiud{r=_I
z*VoBdm2gByNB7BEyB+V7wXFSR;@rk_@a)-M`T9Q-m(Q!}vMhdPkauT?^>24U!JX3-
zm4doh*x98I9z1BC`}w5$e2IpQnU~dy?`E&xo5pbL<YaZ;!v;NmbFCyBKK^*zFJ1lp
zohi>@gLN@GlWyF;E$!&&D0ZBio7<Q{SyAy|jCu999A<;0<mCL{Qc+v8QW=i@`1rW@
z&YhUU20Y5@>c=^FcuelxxubKdt*uR}udnae&CTg&OJBZx>2`LODQ|rI{hH%*43pb-
z=6!v2l`X--+B*7*oRCmbp)E5zp9w?q?QOYfvwM1Y9#3?aGnA2$>A7;{%IrA*ii#Zz
z?bVfnJOn|hx#;cN?e~vezb<}2=GeUriOd@}ZcLkPn0&0@<0IEs*Vo7AJTEOPOM7)?
z<&7IR7!tCxz1#U@J-odi-`JR(wmUqovUSD`iB%yhlh&O+b7qOxRINGo_4gjlC@U-5
z^Y7Q|XGNc%on@?eGSNK))BxXC{QTU3t1nlan`3$S(o*ltySq$tZ*McbZDC;{ASLCM
zmZo;U?sx9S*zFx1pwj-%s<^#YYooWDO^=O<0cHEiYQ9Pa1_Ji>_Pa`69-8cLck*$+
zec#-<u^Z>!zI<6&U0uDq^xeC63^98uF2+26{n|S#ORM<VnZ(!E*2>t`%viES<=lLG
z|FuzDb-t|+T`dOcxE0;|xITY+x$MlDGgVYn5+vBf_2ZW0-`^+p_S2!ajm+%to&>qN
z=&S%$WxDR}$7^1z`OP`;@9*!KHkC$tdU`rBJ0{Gtt$y_Wy?;?r(Z;#I(}eFzw<Xrq
zzu)_PMeJ^~{QZB;A|oS9-rkye-v0j_K3S_Lx7Q~f?P8TXf9>0`{jY+9gBw@db5~ba
zcl&S6x+-B&pz!bCzt+7vf)k^IK+T$XBV*&8H9w8+-Mi;A-)`>9%gZOvnRDjMOykH6
z35=hgpHF{wW~OS``IncM&ooG6y1F`CT~qU9Qs1RVt3VA=29ul{7ix^`{Qdm+#Pwnh
z96h=;;+(1y)2p8%f`)(pd_KQp_wLVU&F{~6opohJ;yw47=Dxw6mPJoEKn;^uS5GTd
z$k|p+nQL7xcG^<PB*WqBtE)dh9+y9P>eQwiX4%(t?%ciG+1IBxt+=zJ0W{RJ(z%_l
zqN>WM_E(8n&JBmCD5=}q^Uaq_y}G!#{iazy*K*fxF+pMB;_z3QcXk*~)e2Rzv6&OP
zI&9*UDMy~quRqt!Z|Cv!)YP37AC)*cIm=7<*xA|B&dxge^Ye2_lMDgtvNs9;|NT8P
z)3{yIIPJpP=<Q7HKU`h9ybixpQmQX3EloW+NwuY=C1MZn$&)8LXBwwRwVcnpyX)e*
zSZljqFO<K%yL<ZA*Vpg8Z0Fbg(mdS8tE{2H(Xc9XwNd^(8?CT49v&VXzO&8FUQe#v
z-Nr9}?&<02m5+PPJ32ZT7C5zX^+*^t%`{G*<^QC+Lxf%W@h$7yt}gEiYkz%VG;qFj
zx8Uce)JKmV{dnAO|KY=j1(}zZJv;LCx^>|rmUZja9sPFhN7IsJ%Y>w*z0b}v&Ahav
zQ<5z>IM}lK+nZefqIzXe<JZh=TDQ2qkbpqL^y%RXzjb$Xfa=W`=Q}$@4i$ka&Y0sz
zkG7V*y>)S2?C$7oXJ;SFxUwR!)#}@WgUy-u_x;Vi8oV~jbXVEis0Y75{nBe2^NwA;
zI<;NCZpRH!jR$HMOiU_xYw-8%l{Jx{^}>~uit>YhhzM%39XxpOnx3P}l8_6R-(fZs
zLYFRGx-spnl#!9qn%J(6jwuXxKWi$56~4TrYL<KJNdEr6ZL3#n^V@u2FwMHMp)68K
zsc1T=(b9S9<jKUx$9i*aZ{u}$cbBXGQ^>^3ym9m9&1IQNN<mDZ#@P`Sb@k2V@8kUD
zSU4{Co11ZY8Sl4m->&I-ySR8wIJCUuPU&+0`OoD4|6u?B>-v5UUS3rloi!(p?<#pI
z<mu_T=hG?eqY(@5bRIe4l098PX=w*oOFO@O+KCB@XJ#5d@9QspaDZ{rq)9W(^WzLd
z)RdG|ef@WLdu%k~X>Mlck6M#`cbDnDefy3U{Yg7JOHf9pCsE?p9p(8SK72^}xm|SP
zCs4<}%Qq-Us9Q|;(dza49$i@(d`-{Y#pRtNr~tJt`|=`CNm<#l=7+)8S67ptoS0Zq
zRTZ^cM^JDlJ17t)E?u(Z!)g8fAAY~zAH3X8c3$;6%U9RdX20F!;_^gp*#}J}*P?H4
zBE|G#Jl@{g%E`%j@c8lLw^TbjJTyU#b=ODl-uY!@Xl%{8x~WW4Nhzr7MWeEyrV*>Z
zpy19}uK7wu&TWYiyIYhZ_g0yno~FCGOj1cHh@sVA@T9u2@#M3!%|CxUE<btl<Y1lS
zHr3yB7{b@ZXij^4_ss71`%b@JzrXH!-~QCoVrge)IC^=VinVU<@Q7SmZRdJq%G9Z@
zK0Z9N&GXgF&8M@=*KCNWvcJA2^00V(4da0>QSFSoyG(7Xzb$d=l`5~v$-c2AQ+Tqv
z|FZP+^FX5+pdeZj0vgyYDk{3Mvshi)JWs{ecJ6@#4xqs@t*|u_I>+DN+iQJyclq^z
z9UUDRH)5CUu`YWfAz$}Hadr6mW9QHJ|NlAv|HA6;?~aPuycd-=%Srh1;-X2`6%KuU
z{a@eTpFh;ft(&L4qv$DD@G_r;b$@?ZSXo`#kmx+G{$HhD%#MU@l9oj(+~RsH2{$$*
z_Q+a)+xCismpApy48u7Vg-wjiYysQzVqaZfe||&a;T<I}FXdjJQ%-zq=^tpk^~#Ds
zliXWVq)f9etPa-?TOU^&eO*;4DB{&m5zXg!?%etC@#Dhe<9(o>&aJ0+L|<QDzdU+-
z-j1C+4HFK4`p*%&%XC3QhV1-uPwtlAXHB@WBCzJ?)9E~NHZ$1eDjJyC`96F+F2A|@
zd)~I3n@kRi-FiFv`=5V!c-SQCN(URS)SWP0>+*L`&fEV_Ioc)q<HwH+>*MVgEn4*B
z&F1r<irW7F&-1xg=aioTHQn>>TCECM32L))@bjl1ZsP@wyKT+B{^`kN|Df%8vHSl2
ztKL=i_S8b>_6=LNKE1Iqx#Z1_iI<oA8>gHQxO3;ukB`UYD_^Z#KEpVj4>TyTte#bH
z;(iGwrKKJP1seoqWNI#(&9y2u0uAlzwPSC!#2+@`d3<WBcH7>)dqJZYg=;o!Fkm(i
z5)wL7x;g#48H2K!*|%-4^RKR&$|&*pc)xj3aWSY>HD`{DvVp;cg5u)cYiF&uf7T;u
ze5Q1D_<A#j!#8i<T=Z?i1cC0?k`@IE7$t6R%Qe28l9D3PZ}X|+;e!VWOO`FW_i5Il
z!-skQS_)2d>bkIDcgK{<^?N>X85$aj+3ub>b7siOpw`dN&oj?(zA0^%qhMxsEyq0V
zjD%j?9*@7jzILybOHWT<<~O&ix0jb;+qP{bFD^80*<#WsYaRAt*80@+^z@G{^%$)k
zhBr4iw;QLQ+fec{C~AA2@9k~5XU+Kd_*&Z9Ce56Aa{K+d=$z}iN=#B^;+mf)O`dF7
z{EWwUmdVC4&9KKf+AsNjQ{F#%bZClZ@C=hop~l9>A3uLyT<R@8ujZ2{sDOR*=1tdH
zIe&luIdkUdT-&*OH*>+qM@OBm*Q|}&ngt3Az2~z3e{HM0K5^zuPbVj)wnR`<@7K4t
z*%$TnAIMo0Jn+*Cby1Q3TGKTpaOKLCf1ca_e|Z1@KlA;6zs=rydgH3^_p1AEZO#7t
z?RNg;sZ(9AuZ#Wp=kxiO7Zx_V?(P&;-&Fs<PR)N_Pj@#rx47Pt^z-w6{Qf<8&YYN>
zuNKzU_X}o!ynZFDb*<(3UO9oyTlaok|MSX~5C$1p*^S$`Z~qapI;^*mnf=lG_whGQ
z3khn9fSh6Y{QUg%$H#h)96J`YH7m60`@7h6)wcfg?asDv3a^OUYvt+bxntL^S+~>9
z&B?4gf9A}SPft%*R973<{wi7KKi{vY$jCVTT*|>F)-&_%?=SkhH{kQ!RpIO97<i@4
zOy>8TpFDZ;;Z|<(g2F=0ZJ#?k8mjDEPxYLhuD?0&uGO>i^UweL`}^g^#q5jSdJo;d
ze}B*R4K`LtZKNZzkT%k+)As-W7{7b>uIBSu^JlxHOtWTu4}7+F;mf#HKmANIE;PKl
zy883ue)~yNr>1Vqy|yND$L`(2va+!`&xHjUTm2^*C0}0``{vfx?!3FZ49ng`L~YBd
zysUWr)1t!1$3j+xbbk0y5VkhTH7H1Ee*Hg7e!CwEQ?<jNJv!R0qM~wPp)<RUt?f*^
zS}RcE)z$5NdwcurVBW7UE*`c?ySuBDF=9)GprN5**y^8tmKGKU+1GT=&9^_lz_Izp
z#$@*2-`}U7n_~$Yv(LM`>u$k}c$XzBOy1}Pxoye2J1cB$RAPR9{@b8;n(NlBtNHbE
zIghki&w>RC46DM{p4wCSc}2uVB}GL=P&v3}jm|WkNGA^uj@Vr#hTqGJijtn4nJM;g
zbM*GSE!o%m`t5#o?5+O3sqSyp>Z>)&aksLjy^bpu+-aS|vsfbTj*e20)2}ZtnG@KS
z9`f?_RW&o4Hp?{o(h^T$<B+AxmVv6z;!QtJPuCX~7e6jv|EICNo!xh~+0o0FHy=oz
zXHm!$9v<Gk@Z+P98?(AWG2PMI`}EP#ZWb1n2Tz}dzNl4JQhITFyFPfzXhY1y;3ZQ|
zoIR_mt<CN3?w&n8Db$sBe);7Ufs47W=6!f@a7+IEe|q7;pG53jpP1=f-?00H?KuOU
zZ*OiM{`K|s%HZXFmOR?u`?A|#<}XV-JF9%Bkl@7X`G=ODuzmC3VDp;j?R~=Peh=Qi
zU*B&3E)dr4x)Sh1WG6c)CC#t@H`BSDFK~UFEvOp%I;*q8W9EVnnnnGf3jX57i$8w+
zFi1MW0V-nOPI7T^>FNcUeeC>s{`mO#&u@*Dl$26C!9w76L`O%*9n-46ov?}6i9%E6
z%{#ZN^tDCZpB-Dh1qB5+a`Eo&p3-pUjL){byQi+Ljo!F<^W%TN-#`EN`~7xMV@^qR
zT}aD$P-n05^Rvj^Jw;ESPLEG}cW37{y~S5fpFElP{M_6%@%!hUIpcF{OXgu`e%qGG
zlP7QW*53N&&6|jAIWzBB*7dIpSQzrhQgC9m!^$7Ipb58ITeFXAuiumOHt1CA&f@1q
zZ*CZ7PY+xr*><o`*80YdLgkk)U#7h%DJ$Dnmbvuan#j#BuCAWG_4I_-S5^cb29G)g
zY8_H<m_B{_J*6P0Y5MVbZ-u;UrKP2XgoH9~Y*3tQU4HE9)vLEur%K+tcdw$lI(j#c
zprGcWAYnUKui5|p{?5*baB+EJRdp-&iC*9b5kbL|{tttfbokA)=}eRWjaIpU+b=tP
zH8nMLqPO+b|Nnho#-iZBt*4+lZLO#8=AD0hynl1y<73i!>qAyf`Wg53(G07U<9)Jk
zZg1yrxVAR>@`l92)^^Jxj_)jf4r(54+_<r#q5?Et+RVngCU#m!hsVmGcZZ($$y!TT
z6g<$q9l9!{bHfIMHeTs6_vg`@QaUZ;pS8=^t@sehHP^m=UVQ!Esc&y@4_@jeI<M|m
z<}B0fWz|-$E-qaQ?zEmiw5#Hy(&2Xg=clG>_egy|qcIb<7Qpn>t*0GRL4!^F_J0J@
z)6=WIym0*d?Ci#^SMO>mDJi*zt~<PZ`gC#mnh%XT=ggf8YV6Lh`P5mde}8uVKF^E{
z4N!|*D|pR`lP5dt{{9MF?kD@^&6_o`eIO5nuRFYa^=j?&HlKa=ef78fD#FOf$gpJT
z(vA7|?TRJW-TVFhZu$L<)!*~@WUXBGR(<8*;84)e;4nAeetXr!2M3$~e7Wp@<ml1B
zrCy?+eJ$kV<XE@e-;yajapFW7n~DitqS}w%zV)4NSNq}P$DM0Gdp&%auC1gLRCB8I
z#~wj@d;2$U-kdmjl5s-?e|boVNbT=$Pftu#{`qZn_<FgA4<ByHy1FXhIVU&w<M;Ld
ztzW);DfZgd))q9<uG=?x^5nw{9GfGy<wWj#44VG&nQJxm<Yaa6S9?HRplgd}U*{5#
zl+0v1e`{;@Y<^BztC9}CxmGg|UOst}Gd@0EMn<M#_1+o$_J0iA`{njNwVb9Cd1y!B
z<1-IlK75$ib|-kbAE;uk`~B8@^Iz-tdy?7CM{UizxVt=m^SV2CV(wMF*1fhiI$UOY
ze4a$x!T0<BpIbh^&MPcz+Sb#8f`Xdjr%HeL`1w71Iz8UZezAN1vrhGS2JMgL&Y3gA
zIKA&?-J>I&DJdxoA3*chudZl*dw18{%Zp3ax{O7^)^@JvWVO3r_Dt80f7WY$&tUrh
zuj}gz|NJQQn`3dX_`EH9Oznf0^Z)-@epAiH=FXpeg^%5)>BsveB`IBA?r(m5eay~H
zE9|?9jv9cAwf+CT>i_#Z|Nn!B4;{<OwrxEv1a{un4Zmj^r|U4?+nSS``xDeM{PD28
zakal~yfnl8ipRV$v9XLRf|hcv-}g&vwplJy!plobb>jB?XyeyBdhA%yqa&OQfBych
z{CHFxG%=s>>dH#cG~SbE&pzG%|8IJ?xPH*eAl2^7+GBmP-WeGhvesoOe|~)Ak++j!
zaCbj${j+ciH#@&v3TU?6qL8V+zW&$O*X~=hu0k@_&cJomc8qV{zCC+>E2F--`Sila
z$7VXe=<Mu#^6VMYgEwz{+WBO4`Y!J*PXC<w;?0{kv-kZ})6_iqXWpDSKHXxvXZ!;K
zCRpzL`}Fj5%Zd*Q4L6m!Hl&@Es`~n>b@_62-RNzg0s9-bZfUvPJu=fc9n{?Z@#(aF
zVQJ~pqvG)@78Viq#)5(qg~HYyPM@sid*aL)6MIQX$s<RO1T6QHeUQbUdT&FSmsi)$
z__<c4I&w}-1;xdW_x*lnJbis`{oW@}Qa)E_Wohj$d%NjJN?O{i+xoG)SR67kG!D1(
zZ?AYgDN*9c@#Dt1w@m*0{d;p)X?9>8&(o&vZtipE&Vj}${{8(O{U^G!qr>B*=Jki4
ztG<2vwk7N8sYTNZzrVZ7aAke`{g~-9W}J9=dAaU4+maU(ET`1f{(gORZS?g&b}1(W
zgoK6je`H=<#9B}qwc=>E_~c2G4uJ+}4m2{ajNH7ea*lEOxfzGQPl~@+Gk0tD^=+Vz
zsnXM^o%^1Dc3a1*k(rsvP*Gj|_|>aZt=!@UJk2Lgc>MbMI(=JrPmjs|-Me=e|Nr~_
z{)ZpE(&lFS|Nr~_-X!C~0hv$d&z(y<+9fK{#uzg<x#<4B+B5TPrFTfhEcc!5=HbE7
zmM9=7n0O6TloS;enMm#eRc)I^?6@bGmkK4=vF2uHgF3W0CwJ}g_k29&d;hnrfI!3k
z{r3C+|FgcmJwN@)iHSXu#%*)v$lR;{U%T(;GwIE-1qBA7tHYjl>+dsoopF1c?%mzx
z#|?O5Vq!qEj0QY4H8rPlKkTXasN~)+cl7-E^S73Ebab5X)u<6$kacy{v+tYJ&nHQ+
znVFgG`SofwsE<|q`&;3oBb@VUzum0)ZI*j$O5x*Ucfb7j_U#*}vj>`Ge)A?rOh4|-
zqodurw|4B<u_5E4(t}q^J}bNTffCx2XU{GzcITIok=d|$^X3@~{)Ii)?Y?yR^3Si=
z<2$>$4qd%E)vZ@*>TL!+C8Z##7xT_D#aQdin>FiH`utk97~U2`Lqi@(BbEDhh#B1)
zeq~V=1A_@GR%po8d^lKh8#Hm!Cu^N?ecjxhdOA8iA0Hoo{OA#rLt5Ihqby(F@BeR?
ze5_~ZUT)o^M#jcB_f#4uCMLeQv9Z~2uGPm!-TGP;T^${F9_RGzna%w^5i}~Mprmx@
z)YL!qps_9Z#IEK0=WjvH=Z_yhf|hJFG%#dcT~&H`TV`gaii%3XlM{kkAuAl_T9tnI
z{Mpz!vv7xa{k=-)5W?&0>p^20X1TXMTyW+W)%wug(a~{L_xgrv!JWHyUD{V$eQSGu
z{qf_gqPMR*D*VCx@v~=cv(0idE-yPPJAb=LSAYNWcKNymzO&6rUR+oh;k+G`f@-<u
z2d!dZVF_3tw^!-A5y;5Wm-GBJLvwO-MQvPNT)Yfh{dYcp;+wAuYFhQT-F-R_RFs<K
z-RYP+SGM-|x2<KCN=iya;u<wwSLfQ*&f=9e0}uA>F3Xjx{SufxT}4Srsl4;h@`$tO
z4S}Bh`}c#((}}x19tN*TdVOu}n&|C(<>lq`YQII!GRZ8u96qV5qr>Cof)AQuh5!G4
zzq~o!f0lWE-`chFs)YpwHT6a8j%tCHTFkX71+9MT=$K*vn*R&slehEn@#%rKn40@!
zt)q7H2x_v5*e$*B^vRPA$;bI@Y-~P!{J62qGU(W!zwhg@tfia6wCko{mv3I49%$P2
zU=!<~ACLQ&ELjq<TSc=OZGqj6I6g(C)-bIqyM9^gW9Q~tfBf`mQ<>&dr>rb3-KZ@)
z*4FaL*_`mV|LfxA#pOH8WMTI8bvt(NzQ2^q)x~AW7A?_-!S7<(`D7G~j3!N1_XiEC
z7Zey=T@|_++z2h|*AjiWxeRG)F-Y&r%gf6z<d(m?(>Zyvu(EsK5>SJCqZX+8<o0s?
zF{S#t@p+r(xpU`&W<dof201+pe&-SQ;mnB>36GEUzPYn=a=Tnr$F|(t_sTT>zFa=v
z!`GMf!1e3X+2tw@B>mo5{5)cFTJO<a>hmg`zEA4{t!(3(Uv%7Wu9fTVvbPnV&zeh`
z<w(5W_gnA%p3i)sMN?}TZY^|XzgPP`cA5YDzS*;-FJ1%<Se>}@?%6Z9$H#gltx7a3
zEiG$)JZukH8T2$SX3~^m_dXd#E2~`rxwB0&oA&Rw2c>c|GqHwqbFGCXBsdO$n#0@k
z<r&sSZ(o*pxUGD72FxdUd3xvVe(NwYGWJLqGBreQP7B;$R|}e=cyn_zckP-kQEj8#
zTPA7e=lMoONu9U(%o7+GxMSBYriA2V(9)dR-``Zt&8MH6Ykj}hTPX2x8!wNn)s}!<
zb^m#1zP!Br^L_pQ(|>+`X8iHo{(olMc~$Repw$Qrc7HxNgOb?yQ*UhMOPlAV+}e_<
z6SqgA;p*ye@N~lM{eM1rgW5KaN^5_;T<+rLc5hQ`N{Whn-H$}hkdpMepHIcj^6&X%
zWUSbE?%cV)2@?dwbRrHc^`4&hdj_wR$%Bo@<&xju+sh+q#B$g`XIuE{FkjnwN=iyg
zLuS7D8M7rr5HwFJsuhxOX^AHTXmQw%!er2Z;K|AAoSd8wzg~|AP420Ng$D%*ftti;
z&F??C=q|rE^Y+T%<wXw<vAXrk#X4OTJ-hvW9k+vnL&MQu%Y0`Sy}YCvwm#0cpx{HU
z>}ID{E>Nrg+S=&NNk_TT&dfOY<mBYDZ?|pRcH`ExoB#7CRr}1fDxG1Ne2jOydG<A)
z2JyIxM)i3WOgpSZ^p%uYwTmBKHsDD+JInR*GT+Xgo+FnpPd;<TC$8$HYO#dQ`?z(W
zY9Ir&#OBN_)9&T-s$MO7yJ_?0n;Vnao7s4^7M|+L`~UAR!_Q@rpT2xyQ7|;z=yANX
zygdDAmndjai)Qe$4+og}FKkXfZ>=4+gagzUe{irl|E8X;?cCz$=NQA~5A2?rdwW~q
zmluHypmJ!=oH-HO^JJs9<tz+c9cJ_E#o`^iK`WbPo8=~*o~9eKr(z-~C48u#WuAM>
zB_&0LonLNA($TJp>gvnO{pI&Q3v+p=nW|T#rlL~t<3r*ypP5N)3heCcYCba(wrvdi
zk#k`|qpPgBki7i)r>CcT@7cG=!_)KNxpSadobIoBdU_0VY$`XMIG%TFi)MVyN7lX7
z-_tHEaQrFfAhdHjsOcy6y~Zr>&W~kppP!q1`qR_XjG#tU#m}eH&wk(vSnS4I_V(7%
zDVo6%I|>%=tb2B5W{<4(v<({!ievr!_&`DSVea?*eLvNLm-}s%uoV#8xXj43?B}o7
z>u2w6)ec*e@Z-ZnhCjdW|6f-9{oNe<dbu4^cG*`}IL@^yWstC|u{hku3rce~|Nndj
z`FLZp`!wC?wnT|N|Ns5ol6zZ>pPyf@`i&u<yj{$aU!Wyic2g#&pPr`s<@NP`HeRU<
zJB!oB^kOo$7Q~25)e6-rsP*&XEBMO)V(yEptHp)Y{Y>N?b`?B4BrEIxq%1WxweZoA
zPA2=x{lV|9fM)f}-_1GtM&RVhlP3B1=CpE)C*|koU;Nk1Z<p};+S+HIP`VGF4=#iD
zA6DOatfv$-!AR6jR#tXr!9%8P+qT(!x#0ZFpt_>MqOh<qWL=EpVS|p&PQ&Kdv@|vE
zX*!9Qm-&Lyk8?ZU!`H7*KRY`cw2<e;t*zR|>F17|Ki_|>S9){V+o)r`(&e|erlzHR
zI;lQC;!Dn%`S$bu=2~sczOGmG<;B6;?{`5f1!kCLi-CMA`n|WZvU1|&$&>SE80xEt
z9XAC{SAr6C8^1#59bZsm>-+us`o{U0mzRm2wge5jKRnzHn%V>f&2@Ekb>pln8ka6z
zy0N2h@zKejw8PdI>~C*xpMBpv@6L%&PfvUL_@w;$^77fQsoLRU-fNYV%2)aD?mj=m
zuo*N}ujV^zL&8C(2e1Br{r~ND{xfDfPEO7xOP9`kSbTk5Y)VQ>!Mi(_+j4KWf!5eL
zIy$b2+S;`$boHb;b9xppR-UdGd+6%btsZ;xE1#dVe!t9jwuE_}Ofx%w+Qmh#&o-1E
zZsVP4S*$kKs#HrfpYPM>&&&^ATwDxlw8s2@KEIynsIXmbPR@^Cuh(bZ-lnS^wnjlw
z@!`CB0q-YeJW?hdpoJ0!IX4VI!;^WlZ7Pk<ojV6w4+xUe3|_`i@a;|H=3dOTuK9fo
zmR45Njx6oyxDzy!Ykv5;n8fSrV#WB`-`w3jom*V*!nWLKh5vu&Rh|Y7oHwW6+xX_q
zn;G`?`+j=gK6sF^y1Kgf-pSh&%jfN}a_f`n+`iphzV^$+qkkvaR)0%*c4p?%q!Y61
z?rr+;?RGwB9ZXcq`M0;XUtZ+eeS4q#Wdk0)_<eKoYoDH)8o4ovHTU+m)c5!Hmd9-O
zNDN&cH@A_QU2MnOhwbuu(~2u9D`(!%zPc*4uDq;l+m6zsXV0GfGjHnD)Vlh2JD*p4
zy&BFKu{n)5``Vg=$Bwbp*Vls@H*pmYSyzRw4%6A%)p2K~k*HnyyE~p?Vbdf(DAeER
z>FPRk>{#2iwb8S0zkU1m<<-^Gk8XVQ=n<%KdQ|`4jvW?8#>SZ!7ah&LE+#A6yLPRv
zZuB-4HMO?d-`@;NUxmz>J6HGC)3e=?QHRodrA#G^(|F$R{VoSu+;Qw!n|AoR4Ov&U
z_WgV|yCzs^@5f`(b1aLG&8h$T>*-{5|Dr!X3fIN#Y??fI^3i?0(&lL=C#kZqvQ9m7
zw3Ffc{d)V)&(7{%{d~u^=bzl}Gj>P&t-C8GC3R|^ZS{{w-TEiaoin?A?D%nEdHM5y
zet!PB|Nn1$P@{A^Xm<6&sVlbgS#4KL7XJlW@1bX&b>+mIB{o)8v!0!u9lb~XPrv;?
z1yxnh6z|<nKeh))Pge6?0UBAV`_%ML;LWYA+y|5#?!UfQ{oc0f+Z)e-00GbvfL~u;
z`phypx##&e(7LsxtE)nvF?(Lu`~Uv`KmEVIzpLBY&RwuT;oAE6`T76lY^y-AegA8=
z(9Y|z(sr@2v5|W!3^g@1YySOw&Ld-SA?ep<<MeYM9(C(SE%p(dSaT}me0oWV$+>gq
zOmc5si4hkSb$xuScV)~@BS}d~&~SC#-(QRqrcHBma&p=if6AO|rYrCK%IBa$rD64Z
zr}n1jOg$YP3*368#10pHx005Y1~o_g{P^ns{Zt1H4e{PScI3!}sZ&$$ov(UZ^#0!7
zmv?u6*FFFJ+3fsT_RbSO<=x*``z$->^|iI9w`5-C;N(1Lz@wz3bmo5f?(+9)>gvlw
z?s)4drAE)>njaV#$il`JwD8c?(_a4m>EGYoefGtB<Hn6*hd&t_8cMWH)c0|7b!Gfn
zEx&m2;+5g+<>ch#wugq_tNheA{rl<vzu2em`}Zq*(V|6OZ#Qh3JNK?{v-*?yvtGId
zo8I-hC$moJX=vQ}^sB2ve?IEgZ&;oGKMQNuP{hXd$-IEHw!7!&SRVfO_qQ%na!!uU
z&6_uW%IWR8STyg&iwqlE+q29489_tv_x4tI+dQdzTlw$X_Wg{YHT>7s$NM`uF>Ovi
z|7`2^IA*Ww6Lxn*xX1nY^5sj)lM@pUT)k;q_2ot5<jKOI6%-m8C-(Sn(Fi`$*>Q(A
zRjuaOks}O0-+$jz7F$wc(%08#l7H_`%(|GJn~ny*v$V9#xxddg{=}cR+wXI|QPu5v
z@ggH8Cg#j-Myv97XIeOgJ$!tgOmvq!c>VhHsoLS6F1pJ<-OVOAF`AQ`JNeI#kI!Zw
zH8M8#^!H~!aQJZZ_xttp4U>;WY<3Y8oZK78mG<V{<>mYZU+Ye6dU9f-@}Gad-~agi
zJNnC}sOZSQmEJcO{I|>3dH?T|vU^{^LMPT&S5`L9pFdyH>;1Hj4vt^n-mVsR=<rC?
z(f|6rM$W$O&K~#8OWxeyKYxDxzn|0I=H%o^*ws|*d)c;bd+qPCZTa`}Hl90vyq#UH
z;z8dlk%^y<o;}-ZmU}DXi;K&<%%yfUYU=8r5A)kkd0~0^(xo#yzvLY|cdl=K-LI7%
z&tKfwxEQovrDKZaQoEXMIX5S{c8f)VhKB_OHCv26AD9RlEx+>{v=he#&o(8Tix!tA
zP5S9QT@SRb1vbPz*SZ`uHJv?O5!8zeSjjOT)YZ|{>;#XgPbqpF_I|NAsN>QVBxpC=
zG}~=++S!hdjt!s=)O@?zHL*=6c#j@EI&s2;hTh&@(7^pfB@NMs!7eKPe}8>FdG_qm
z^z-ws>AC)!G-Jkz@AvET-x|3rnG)~=v>r3*XxEmEi%mO=pGWN$`RVQA(sF2dhsdnF
zH^L~pt`Ocy*ZlBu`FtTs$;#7Z6DLjtbyrjaK!M_MQKRPGp(a-DA73u}uPytxWQhuB
z4(Gi6|C-a=f|vU}ecW%a*SN~%U9NWcI-M(5ataFzTUuKSzrDFBw8G29#o^)SWqR@Z
z&g>|B465j_W^LHGG4a}(NFE7;2k_=^?(J>53s1Sci#1L=lW?eob9>JA%Fk)XdZpcq
zii$YFtC&|#^Vzv`=g)huHrM_xD=I3=lYGH-Yx@q9j0+0_>Rlc`ehg|^<lfq{Q@gZd
zidyoq9!1bn)zpp-55`j|=bzu&nqB#F>2%mSNB{YDtbFdEhC|8wdvmj{u6p?7iAzF)
zLiY7_tO-Xt1i`(l`oFK^_x$;ETI~0+qenk}x$GajI!t%YoH-d67qM!Gt=W)aoOVXS
z$=TVm<b^=;@xG&{Pj{a=bLRH0X%`o}&n|reTJ!k#*Vo04&1@y_?#yiE78jD0<z4VW
zlc}Yp<-;Lv{RmL{({z~0JwGuq5wwE`G%)_<)z$8U&Fq_#kMp_p$#_;&?6{ft@6S)r
zR9f(IKf|mm8uKb1aXxzVh=Y&s*_oNfJ9h7$Ja1m#;>F6byGk~`_#3mMKyhu<RwYx@
zsng@CI>X~@r*2L^|7rXFzh~!U+%(|X_v@ARx3{;CH}l(_0IgKLv(uQ5kFRy#v@>UX
z?0!BGJ~!7oJ+OSa-`pEpv&C(zzC76X`(5&t6@j2Gi`P`Gi%UEwC;iaunv$1%yzlAG
z=kqp4hzkol7ZiY&!Yt0dzD_4%1H)m1H6aT-Jbs2QYrA`XzWw<no|7f4N;Kxzew(>-
zU+U>;ptY(~rid_rdWCUyKU1r|zdJig)qBI{&CCy`hQ}q|+fxZ@?||l=J32T(OG%%d
zpPw(6{rTD1Jzp+)^T=9F0Zq+3EBM{O$eeL+k0rO54rm?ko7>y_KR-Xex%73|p+kox
zOfm%W^76Kq+U_oUtE8-a_|4fnTQY?oAL~v2@Zg|M)Rq%Gn|P(oK+U3(S65E%5u5l4
zROc*NwrtjEX|o)VffkmQ7gvYt=j7&smj8vW3fY)6RY~b-@Jz1x1*IqMo<Dy+#*C-g
zw)z{xgV(RQV`NX26%{>t+;6{)BfFW6_t4FoGiRA*PntC8kbM20gU07=k_-O?E_O@I
z&p!`p-WSeKcW_`ZGc)`1^Z9&+X9hn`OjMS%tty$gPW8P+<=%D5?tMpY-=5uX_v^$W
z_O0pX=bf2j8SMN{$=o3Cj)jb@?9F|(*7xq+W7zZUR`!;Ri-&f#c5<}y%Rd86d{|mq
zUej~sT3Pn?R{58%$3~`a;&v9L&N9h#a&ci{X6IYt+|GApP2}Y5_v@skrKO{`=be3b
zcXwxh|ML9%`*!Tw74=45LgK`knZ}?>6SUh(?C{&d!a~p@?1j$lL3^u8yK8w5E0~*K
zf8*KN*LUpLu{KaU|7X>r#fvv?-MTdO^t2;Kj%)z!_TiCi+PrzQ>u%6K#%nw8f4&}H
zpL%wdsf=Zji}Q>k|69l_{99Hlvq2a5GsXOk-kx*QD0{kMYsr@vfzQs)E_Xk!5o|lZ
z`1v{TUV>F2oqe*_msSR=$5p>IUFI{>$<2-J-Me=>F*^hl;`^U{<*I5>e_wabuJ+fH
z?Ek0r_cMHW(9F*yAS&9retrJF302mM7B9}cw1ji2R%p`MS*8qI^6%Tl?~dJF#u$-0
zOSQVX8Z?0w5(4Vo9lCyfx|;8-2XEijUQc5X*eQ#;?_i>|#+f^Nl4_y*RQmb?(+)k~
zSNr?N@B9DH3H#d|>=M=9uyG^fgY)+PRTLEu^7JhCo2ymuf6EpVyMI5DZ*9-_Z|9Tk
z=;~S&wKWUW&B!VK^(B+R$jIo^TX``tHi!Lne?hCB3JVLj&zb!>?b4-79v&VB^0Q8?
z-o2pM-NgmeTi&y0Pgl*pMOl}Z@#fyz@({E@==?leP)@pE_nTK-TwKaL?~Jg&P2=Ll
z$(`3#Cp|wi)0lzv9{<}XPeLv|?dX_NovK#jH`i+FnKM3OIuQwM{tesj*Udh2#%D9T
z@%w(?djX~MHYOkc^!0kYu)KVKqQsFSN1nV+J@fjcb^X6RM}M`nu<ZN&&idE4x83vS
z%irFXtE{d4y07hEa#E53&*3*`&-^}I`S1{HcUgS>UsF)ajg?jOXUx%qSFcXh4qpdq
zQU3l0N@NdjY)sz%wdB9Q{ofQjl}E2%pJwK_N!a-J&d%aA{(^a+5ts7v@7DVnG&k4O
z)G&Z%j_ZHlzOS=Q)~@CTmuP3ll>F4R7?XUbm;QD?TbkMVHx)hg0!^QS%033Iur(*9
zYKNb(w*yr+e}8=iP0%Ykw|xMuTrYg&^5@T=6DLk6=<4=9KHd*%Pt16JLVDGFvs|g@
zZ8;A??R6!kCcn8>51&3g>Mmc)B4U$Lzk8j%Tio5t%Y2jn{`#t-qGC|}EeDh)4_G<B
ztMr>|)jEH^eEpw~?4T8>Mn;qB|2&re^78WWNA)auOP$;KK;;%AGuwrw-r_>S!n)gb
z@7#HDM`1E(A#9JN@ruaJ%jShmi_W^bO7z>eZ$IM#XCrM;u}qu71lfH1!T0u`Pp9?W
zo}QY@dw_wbyuAGJ-tYH}&2n$0gsciV$<PzL+)uJCQKI<yIny_9-kjO?{cidEj|bW1
zBV^9szI~gar;S%SYEAv`x7*MD{bUE)dK(lReAW!akdc+`?dj=JivN7s-#&N8jvW$_
zk&(}KaSE$N%-J5hyX@HZ`*qn2$8K%S?ygz)TJ+iTx$5fb$17eeYzM6xDUK~G+ZMPz
zFBa6GG{0MZexB{IOG~|bZ`_D@{ORfGXI1R%?92v#{`~3r{QUg$+xf?OB#(W0d6~P?
zH0YYhv;F78)<#L%+1Wk&w4?Ab&jAUuoEaNyf0rd6?~^?ScFykI(hVEa&(GT(TQ*Zn
zPA+fCBzyHD{!8`tOT7*MRJ%@@nfSd=*1G7y0mh`{<dw0z&Gzlvm$v@)Lg#i5Z*ODy
zf0aL<P6w?U++Fr|k=Il$lZ*=r_dgUQB`F>6lRbR+@ZqGtOFSoo)}fl2P3scX77`Gc
zu>O1Q$w{g@k(-|Mt$Y4!yDB57dK8bVXuMzlU$(x!{?)a$+zD5gpQ(q8d!AVpy829M
zSy@?2ON&AJIT<zoc|J$GM7i%=zj;&gu)z;dpD}E0RBL}fe_dVOmDS<>R;8~#T=us&
zOgSO2@9($hZn-O2S65A(I<@rrdf!uhH#esjzr3UhDmv``ehCH-_SyY-z-;?bFNjOV
zs-(We@fB<>K*!qX?P5F59zELn>+9>_{dKi5F)^QV<M-FuZrr$$0n{=%aNxl1sMU9(
zR`SokU;AD5a2xODGD-8PbLYlBXm(=V85p45bL5E2s<5?DPyTj4x}CqDb=|q*s<kNN
zrv;6_tE#IXzkTcL=Em09*$G+(2ikTEYI|Jr)}J_I#)&Rb?HPv2Y?Iaf&AxBmy7lVh
zFGazi#dxRt`ucRDwsf4FtPWcA_~*}`Gu4jlyizH>LatBDKuMZM*6Pc$Tp3x}%7?Au
zGwf=urfP?qUH|`m|9{hXvCrr0|9zgvIe)qT{Is8+o*uYbX}tFD8#hm_uMdqiG)~O9
z@i%Vjj2Rhz?Ip&2eSJ&c+3)-N`#W>M<}}~#uk+^3WBB>*wob?5#mbC~j4UiH6Q)i*
zIz7IwbNO=h)6;Z84H}=H^>6N0$DAwwf8b-d)$|Y{Bh7Zbg=ZpXJbq$evOV*h)JeC@
zH0is>#iu0pKil%qZ1&+?jcvQnPMaB=RvghGGfBqitmeXEuiE<h9l!7CwVs>)sm@N$
zRxWn_`{%!E?%iL#dR_Vb_s<QA)pVn`Evf(iZ)rW#q9DtnCmtKG&!25yzi-wAE=8?*
zzrVlVT=FtVNlEF)*X!}#C5FpwV)j;r-fdat-Y+Nm?(=>Xt(s4ff*B@KCQ`lY4r>UT
z=ihUQkGH?Sp><ER{Pp$m`a#ugZEZ7V%rL0<kic+lef;?c2b)2uzW(3O^rf}3t}j=_
z@3#Xj@w`?nFQ25`Qen4q*Dj;<b21D?#l@h;^}~k`K@C&}&>{`c#6az@5{7$~&t*aD
zv>Yxk^DPzLazW|ja*c_rLRX7L%-il8_4d|Q?<@ZnI5vagtg*3?N5&%HZl#v4Zm+0z
z*ow~Dy;WbmuJo^v$-1`2^ZY#9QrR|vMLaie-FkLg<JsTu_tg~?8qR|@zU%M*GYPbi
zMOj(d$jE3%`Fptqd&9mRY-Ydu^ctv`J#*&Fjm_!&zrVdret4)g>TUe4l1|XdnH4KE
z)~s2RaebZa`aPe#8vk#(x4XPQc6S+QXWicF?*%0#OTyR3MIF8jTFqVdX2!MRZ}0E>
z&$TKoC@Q+7_5b5>dCSsQBGdKbmpL}G?bx;J(Zh$0OP4MU+wW>QpP8L+L;86+z1UqX
zJ9k?4_4R?)lRPc|zP#j_-PE;<&g>IY4WDwo`bdW$*MgL^w5+NBf4yGMwV>wv-E!A=
z`zt>`i|Q{fE}qKB%%;&`RPewd_3En7Q-@l)r_Qhc7YQCjN_}=_=BZClPfxwOyIlMF
zx>)U^`b9|-_p_gupSf1YYmveG`K7O~t<>K8<;BIt2dv89-3bi$W}G5l_rozz#C4`g
z=A@`?DJO-t{`>Io@YPSY)!#I}zP=vLaP-h2r`2~=y{Bm`Tej?H*e=lQzL22c!ccP?
zo0yf++w=DAYB0*VVes@|Gkez}jjq|VqZ>=r{N}9KR{G;Z;?aW#7apkMl`=VTy*%;U
z^MlRopq<>@Ih(zvYPCjrE;C8neR>UVppx$_6Gpkd*vgQ57I!Y~IJ$88^5e&Pr3=f-
zK-(jidQVSEOFNdme($j<n!z8weLHsYWM}YlzmMzd|8_6+o?i6q%uJ#0+ARW$9&OmR
zZCT~#XRjXbvE*zuOgscSUSQ7pKezMugIa*Eq8^!MT?sH>y|eVS*xlXb&p{z^c=h7F
zRbQ3t?Bptb-2D22uYR_9e%iA$GZ{c#2M~T`7#tidWs<QV&U0_gPovn~Wlv8{)jn{T
zw`k7XxmOkQrt8Hn@}92u)2@1csU2wFNc6TG#sz+Jt$5^YBKBUIHGB4H_4zf2-re2J
z{dLyV7M1ynT=wkUYiMTntl$3M1ugrsHxjy0TQojN___vq`1_v^k6RmM>g4RaamyAJ
zE2}8o>z6MdzISily}i}Om7h|M^~?KjPCGl#LdJnZ(dB9A>M-4}ztvUKSS{=S*{qG;
z4syCq<R+GeFJDTQ`ORH*4Ky@c|NpP~^>wkq+xPkT`i8#tpKmvJ%^IBt4=4FuUl;rM
z*Vor9EG#Q>*Tn7?YskI5?c?Kq`&Cb6tx6s|I@*0^o^5olc7BJ$`nbJ2N?(gzym;}>
zp32GR=2|oJn_vI=<8eQCtsTR`g9l%I2Q3nPeQoU=`}#OpXYLP&`Rzr1m1^rre%AC_
zQug-NkDos`W?WQq>zC`DH&1Tn%$Yg&_su;!+x&U7Q0A*EEAQ+qZa2-oCi3IQudlEF
z{QZ7EB`xjQ?eg7)kB`;-e!Ja&u3*G+KiOATRtBF+*K843v`F*Rq#97W^*|$Y)O_oS
z6DP*(F5_)TJ39*$?+iUXJ)o%v&{V0p`E=0EKoxcM&-4HPaj$)MYO3~COa8{j#v@0L
ztPl?q5)!&ndYpUG%$X~vs`$;d66NORW>~Xk4QS`OWx)dm2GIQ1*;%F%Qc`xGYZ%s=
zZvOlC@5hfH7ZyK1=QG=kH$Ok0VeRUzsjid!1Cv0fJ{&l}z|YTL_4U=!udg9N6yu%y
z``cTP7w628`SSJaR=MYEk4~F75ws2!<hGah_U^v+`S;h?$M5Vc_7=(a^W%%J`>Fcv
z+qVo8sX24zbZueZE8x`e{PNAs=~v&&?_K*>=iR$^KZUm5xDoO7x3qcQg+;F1Yag?*
zv8AM@PMkOI+{44|SGA`eJ9aFp{O^~qU$2^O<bM3;=jSKSo-y&~A1{A(#q)K=_Po0n
zu7f64+S&Q#Kx@3`%$+;G(vBhdSkJ@1-|w?0fEFs=*vM>aYdgy{`<Qh8o`cr!_cZtR
z`Yue?)$_D-?R@$2<;H}AOhrXSJ8FM#yO!I3+||Wp!rZyN`}WoCJKoIBA2vOrY8Gfo
zZ}j#&QR{nm?!?^MlIdJhVsd+1?%@+BIC|ZjC#(4u6cwHNF24li!T74GT~@cHH7;ps
z^h%qb3om<ojQ8vBBS&0>goWq-__Jr@%nu)~)q9#b?X3K~>=&p;_@p{<+O%m`R)u=+
z)vEsd>}<`+bjRn+4<0{0d~<U;=u8@ZIU5E!zH;l@UnbBxA5<-Y)_2_aDBh+rf6<i}
zuV34ner);UZ7f=zlXg$(+tI{~43Fb|vM+CJR6cp~<Q(hrzRl_9H|5?o`||Z`=Jj>5
z@7}#TnitQZ=<+jqZ`IaacekuunK|)apLoesgM9AnhKq~c?F(yE7pN6|DEJX^@9tjr
z)1O}5xOp=%;lq<Js}m2mz54$A{QUFfv;Td1dOGXT&x*gx=khnSwz6hlTa)<kP%9{B
z#O^NJSpGh))c2ir`8$KeLo9xCEIuCj;pN=wVYhhEqK?kai&Co<PF<V)FMCzas?gPL
zyUX5!s;<n;%sJNOet8GE6<t_2r=OQw<~w_tot#ZY!M;+1?pGJjA2d!scVR`KvMGP%
zhX;%c7cR`&^!nk$#)S(NZ{EC_lAd1t=7!;|t=a50dyF#k^FccUO|!0C@RH$v^x{QF
zYb&d!rlv;Mp?S8|5>_QEuI+rbaoaY%FCUtUpPvJzg$IdAw$<Nq_UzdcAksQvg22{(
z(4e39Jn!gM5741L9(j4|a@I%q)%|+8oaz7MRd3FmJ)3!V*H`1$PoF(Ib?=jvh`jvy
zPGR*8+qYjY)p)f3)3k+xi)`lD)y^`%Un5*GgGJ7=$VGeM>get3tg`p0#KgvCURxuX
zer^t^7uX|jFK2IWUsO~CZX%oI-&=F-^Or9vKR!HM6Te@s!eU#|$45tJ%$l_+<DydO
z<Eays-B&s9mfO3a?BO9+zxj5(d-vK-n>GzJnpyMdr22uwtY3P2dO#ya$NOX-FYdPs
znr~kE>WWkRjMZ^_cS*%h)e6nHzt6Vz_czx-kuzt`T)2GMIZy<&D|T6@ddP$)m+#z}
zBc>Y#Ixyw6)f923ds3;368``DzW?OOlM6F1FEh!#H6`ons+U$OiY*n1cXpL_gBsrz
zYy9R~y}7-8eMs3WLlcvf!)?5v`B-*-InesT($r}-X=!O|;`T~4%rs61CCW>eE?HE6
z)7e}7{o1PN&1t@+`sEDi>FH<Ap7r$he!PDFKhWy0PGR*=Pp8L!`uF?&=FH1#ppD#H
zv#(b??lu2(^!cMlhn}3A%w20|ntctlhH_2Z-dT6<#QggDx_#nA!C$|AMg4aWTYC1<
zDuI*B1<p_Y_V#x1von&QaY6n4f1390wFRx#@tmv{5gq;7YLC}?(BAX4(bFeP5QuG8
z`lqd;(xT|x_QHziW7DQ>+m;0{_XBOq<B_!r$zGG@xi#x*m$G{wXhS@ooXv{THNLaW
za_;O1+-n=Zzpl1V&i2#<MdyyLu1l+KFLLE}a(3RDWNd1hdTmYQnK_om_kUeWOG|Tc
zae46i_31WV=`DRPU%oU<J0meoKmOm5jdT4smAnjEvvzIdz8cGyFJHdewd6wq<KKn`
zhChG)bX`d+e4$y%EH*E>a{BeBhnLlycpYoOFK6@M(o*j^w$;;S%#biLGFlP7UM~4q
z&%}=>Q$6m@KR<uZlg&&ub2^>}xK{oLEt<Z(+&?)Xp<(sv*TUDQgo(JWoxOe6sms^q
zpF4N%*|)d1mn>bHn4CQMy^@=k7uRzC`C;G7@~^F#x$9kep{lB?ps?`asoLQN1_le_
z_Ewo>UScse-kff?U8F89`su0V0!LF45*pkVJ1)LBVe(|>m>8MzcXuWp3Fc7LQe<au
zcZv<YdinC<ix&mm-H$tM&CbZ^m^=5baDQ|}#0Aj6TkO9Rmo5d(%~{PosfH_%3sijF
z*znL;Ju5XmJvkvkfpe9BQ-}C8mHAFn7VoY84%#R&XYO3k=G(r$KBM9|4#gwfPg}k0
zw&&b*Dl0Qv?ACj!RO1or)lI41JUl!deSObPOjM4Dh*&Xss*H?`ilDB0^|v<<@9Zpo
z_2zQ^zMpLD?Cf#1UqfZx!}f7i-|OEW=fn{hqkly`HXuL%G}W^1u*S4zc77oVi4|Ml
zPFqotb#2W_&`CG*=gSML`z`UEZ3YV9udlBQi-;WATm8L6_7QjTwKb77U$2HAIBYv-
z@7}#PcbDhyJpS>hc>IU6=J%&m?+@7Wx$etXA*YT>6$>Yw?|O5fk@?IFL+86p-XS%n
z+1Hk2Utb40gu!#N+Qps4&xPKfP~>`ku$f)PzHZL9x3`)3)j7`0x1ay;aQpOZnU^nL
zg3jFd`}_O!?ERH+F9=Qjw5|Hym;YU6D;F<1rt5X?*fBO~>DkM#fr`|fJ9lpSo33e5
z`^yBB;C#-z^-2i}2m~yv729HbZDaEB6DLnrW(9>$v(6Izwnx5xZ;QYp6|JjN&reqO
zzqC2sf6baT2FAvVYkz-xb7P}&{9fbqa|T&gG(hWuq)ajn>?nNvDVJYdPOfkLdVQ&0
zw(9EYHeTstt3p>_(cSdv$M4^uUUf~4&Axs6Zrr*hwzD_=sBPV!im<g&tOssvO#b-&
zdwBod-R1qA!s?G6J#u<`Yb$8$bYfy+YhPf9%*BfrL3`GHXPXs%dg5thY+NcE)LQW2
zfnyt=tk+_<-WS)_O0N!E3p$&JC1A2<e0=<|Ug_m_$IqYVmzS5<i{IC?f4}{=Z{J=e
zo#Eu<1Z_QA<jS3soBQ#@hX>c=>vcE0U+mt0X?uQrPEL-2p&@9Y5op@Fq44psm9^_4
zHa2~~SM6UL7ZM_}e*Zr!(2+hzj=01w_*LlNz1cv{{{5kSpd=(T_1UTPii#b--0$7K
zJ$uO#70^JUjg8HX{q^>;)@3Ymbp<8w@5yRwYrFMG9PAWU|MBbfdQV^9)YH>+89<va
z%FD}jbag?8XqjeRNw~f)7L+1DN9q+kblQ4<#R`qQJ3Aa9r%NmfT^;6{wb-CA+eFH5
zzMXGOjEq!on_I6GBmee;Z|>|g=H%q;k+YTZ_VzA&cjsgSBQpmVSJ3toRY5(Al0Zjx
z)c*daYGpM`zW$G(t*tF+oBU)o-;6su3Kxp8*Im?!-#14ycp0ch{`K|s@m^{385V^~
ze0+Q%Yon$v^PN3u>eQpx<LiC@|NGn6Uas)(@B8}8dn${q%HDVc1qtQv`N-zx<^~$H
zHNRgoIqT{w!-@|H@9ytEzb*InhYue>ZMc&6_hMJS2hEO5kFT5ADXd=f>51o|Lx(<m
z`2sp#DIz+0^2CXa8#fx>-CZ8OzHVLAR<8Q`deH8hC7zQ#{QS}`FZ2ELSpNTm<@4(n
z#qX~>--8qrNnWfEUcOveQB`I4vBJ-<@6)H#`r6Z`P4mjhSra8EE4%i^%a@wUZao1a
zu7S6<WG-enwI*`&mU;Kr#abV|bt|g&&Ev<5C8VXb%irG%J#A!UBw}rCee~wd$k#h#
zcbA1SEG>V3&#R=QWa2H2oI72MG`Pid0vJ?{jDmEf4U<}!G}`&)!%n}uzkmIg7Z;rk
zjf{do?L?`^lWksq727p^-n?~lEDD`&ZpoZ%RQ@g|_1l}9t-o%Dv9;FL|NC}3-)pK?
zsEEG4{?mVde`o#t^768%1L#1UMH*e7p3kq>YWQ?BeZFSbB8~L(^FkS1<KyE&)B01Y
zzrO<s78VwIeSLLxYM-pN*2|YKv#J9F1GyITNSS)+-rirof6@B&>v<%NTq-|2XpH)I
zull`a!>8Zx_iJ}8()jx7YVe&qcdk5U=aUKG;o$)-_13hsw2Z0+g;njZFM+4$iKHjm
z*4=BZ-OD8;BeN!CLcj1wnMvRMj|Oqsub<#mc-t1T1Qs+B@O70!!{*J#r>E&&-W3|M
z)N5)@@*L3o%-!APo&Ejn38$uLy12L`q^2&tcJkDzL#Ix4J$dqkDS3u<x!$>R=UzQN
zv?XxL4*Bxu=VZ-tZ@Jvwmb>*>x1^-x!^e-E!@|Vw*Z=<;oGc<bedS6`{r!K84!7|>
zKFn{Qa$$kvjoY_hTdjG1>c_{&g(W2^Pftya3TOVj?#t7^bx-dGo%?Njs@kURPen~_
z?N!eN&>Gm2Cr_@4*(nqp9K6*wJUqOow|8gB%SlnsUcc_{?BtBE{VMwF*RQOfpzS#?
z7WZ%1y!r97v$Owvy&fO6|GBWb-;oO!CivU`4auGZ+D=qeRdr`yZM1H6(45w<KPtt)
zflK^VBHQok$LwIR`NRCz!rtC~?Q#9RUxbbwI~J8%$(fXurS-w!r?-!fiiSpqb331)
zxVU>xj?T%GCt2T}&&tmB2KoLJ*JZcBM|CkiK0IBECd`@zYJF_!d#bu!TtBWRt7lP>
zftlH{qeq|4{QB<h?&V+42c(J#3Le~9{CtLK_O!4?922HZW6MyVAG#`JVd?8@uaa$T
zZPU)rTWk0H+uPeMt*wc<xo7uOe*W}z`s~@>Ute8iv?zTg0_vE&xv}x*xA?rPtEO7L
zd3s#Fp5@>4Kd!E>g|Dt?s`<>AkRP*ck;ao}&$9mh;p*C~A!qx3(H>Ay7&P_KsdOhN
zrVj=iYs89+KdZ|H|Fgbbb8(UDm9^2+cNRYfolbgwo^9mzJXz5Cv=5d2>YH107i$#S
z>lqpbzP)|nLcr_O$BwlLD!W}+6S;Z$F^xEx&dyGq$W1N!`~OV(@S))A-tfq$zBjZp
z^q)*t_h-5lZZ+F1*X!!4P)3WQCmiR_or~gpur7A@iF4=N7GHewyVlsm<jGm{`zbFj
zEMx%nwHSD0EIzC>w6p639hk-T;H>%mGvVL2->+j1IKIwa^W36}FMGN_RdFi1c!qXq
z&+qH&J8;<kSfxBerCH7mhrB$!{Jmep7T)sm@K8`t039osl$^YEU5rS{(ZwpcQ&iru
z@k)Wt+B|ZsS9)vT(<e_ROq!%59ME#=)~#6^laCiYJ0l4?zNezX;@Y)q875M*Otahe
z?yX%K_2~7rwb2ZB_Sf6r-#B4{K-Tqjpbmhir{|F)M-0-=NH7=~8+Uefo!b5`_1@ce
z6P4XRowI(QA$$7F85LvW;Jt6>UjP1h(xgd0UaemL;=)4axmKl*PE1t3apT4c=e$q<
z6g4!SE%lzxw4z=ek)2yKxNqLPdEoHFtVch~|NZ$Xv^`LB5~!?B%F3FRKONM~{B$ik
z{~>7C>66c=rfNTV_RJ{bg2LJ*A75Qv4LXz{YHQZiC~4Ks-GPhUZrr-Hsrb3yrp=oT
zO-w@i&(61>FKL`s@ZbPrT;<cLPII@fxC7eFzqjfus0my9>&wIS`~N9fSw-D_wmEpY
z-;Uk8Ut66Cnrwc~NLAH!b<N{ry)u?XEd2cZ4<5d)bPc?+x=P(|j)Jwd^?luEdp=I@
zk2m!5@mZ33dYXlm)v9oHUmu@_|997&d;I?W`D4A(pu>^676}LnE-YPYxW51R@u|m;
z9Qp9L-`*(YgupD5%uiP=xL<$#toP=%s!L=?cQ<pw$45tZ@w!Zz?NxYtZ`j%>P)lpY
z3JuU8F{stw#w#shmLtK&#`bevh>b63QCZYht%C;-g1W~yZbV#L8|{9)Pj+S4TB(&Q
zR~|WXWQv!xYbR)3BWRtuu%KY$#EF8RpPyH^w46Cn*&VcMPcLSNLqLE)V`Jlv-Mj4z
zXEao7eEIU_!v_x>=G)bRPV#zutaq_%x7aSe)ggZ$%l~Ic`1a-|Xu5623<=Nzbawd~
zh9~o5zWjKy`1s^q2b<ZG6A}*0GR?lRx7s{>U5uiM$&_<*ttZc&yLPK>THO7{#zv6l
zySvMctG;BI<=i;%<>h724D$E)_tiBuJNN(pH#@%WC+m;<xxYYjG#?%~{`>V>-^s}d
zwA}XFw{L4=b_Ts&yySJB-M>Gemd_Mcb#?Uz4=<SitopaVskzzvpYwTp=6^qfXDkhs
zv#D6X!os5Q>(?)?1q@wt=gt)p5?XXE^YSv^eM={axCZ|FdA?q&0o25I4HQvTQE^!r
zwRP1kKTsw1_4Re_+uL%3&zwCg%FN9C6<qngy0&)q`m=|&1<u$Z>Kd4Lf8W|2J9la}
zTv{7#zP0A&rqr&^&dy&k%*@PB=a%0KoE}*f)#I<^t=oD0?yger?3ePfT5o<ED=0Yp
z-OC_iZf*`bQ7fDw_4>Nlu0<NBUa#N3ZpO@+nm2FW1aUt+JS>`=oV<2v+b0%wcI{=$
zmPPH)UhLi<rWdzo#`<^9=hv_MY8|^eOgHuBrqrlX8Ch9Thr*(wpwrLJ&0Q^OynsjE
zF6Q<3pOJ-P#~weAy>b1uXUa;MK%r0nRz`RwuT-^l{rO&J_Vb8)41Xp}n2>(W*V|iJ
zORFmjypSj4%~}p&VPVh;{B!5}mif+J_4uKXu<*|6@9VBz@>qJ&E%EWbvbR!VVq#I-
zKL-Z|b@cS8n3{@)hhG=!KdW`>wXW9wJ9lElbfa44&65KygUr0t!p19=p{p1&uj|vl
zJw;Es($CFV7`Zv^)!pVv9)5n$Zfs0WNlUx5r}Fc1KQSL~@5fJ0PL7C-ytpE8an1hA
zH*elNa{PGkVmIEk_n*%;&li%E?A*E2a^1RhPj@*v7RIliFhQV=N79M)hlSvI#mfI7
zI!ix%z7?f;tj6xtojZFDNX~XmO-^<`KhKt1r~aDUouiqHHx!C*xiY!6l{I!(iDrn8
zlSt@Pt<Z|!Z?{{PzmrKnKkw=7{QXCd9BFCem0ol)BjeJNlf}F5?`dv!Ua2y-a#iT+
zWm~&1UY;>~cJ^7n`Z)_1Dt>)^{d{=b>M-43UtR_;*`cJQ6tTPPt?_HnfMCweP3r$1
z2i#geUBF3X$tBhKP92xhQ&U@K&jy`dtfHzaC@XvR=H_%xUf!oKE-tR9u6}KGM10oL
zrKt-iB_$^(&yC$E=G0*`sfJ6j>&T@`LB1}*K|!C+P7r(Qzxd*Uiy0-dZ30drUQ1`Z
z)oZ!H%gx=*)ZS#HrKs5W<;$0%E)R}C$-f^C^S4SpmlYK~dTFWm&g$=ZmM*GY-s@_(
z6i;30leO;X?mm3+;zZE;j5lxQ<lpvGY^j)a;DCdWurT)>#y5eWwdkOOYQopYMMOtW
z4=!1>LglB3)0CBvv-DKY&9goI?(S|*Ztlb9&hhoSIe&h3_Nwj0R)I&Jf558&E|f|v
zn&R<EvqdAgt*y-@@6L>4z0#BC&OLjyTfDQc@7afkhyQ#$F7GqfDm1%YPqC$9&h+Wi
z*EtI;^_b+Z=(5w$#N^1$o0942>7bF-($~{e<~enwfBODiT~*aJ+jC<_2Zxwm%!!T3
z$1^T0U}R?J3%Pz-?7X?BU8{iA!u9L>=gytG?y!JU2tzxctdgN&V6BXtoZtSszXpbe
zi5C_)f(|l~G)|lHdKu56A7GEomNw4=t$*KD`g+;xfEEGK8&6J72F+01*qCf#WySR2
zAiF$hg!wL;8rRZ8D)Za<WUHR(m<L+%$y$YI?RMdusII8kc;4=J59C}v<&(<=7Tw^J
zw>xukvieNB+Fi3Mm@F(UL95aJeO+JwQqLk#LsaSKmoHzglyc}#;ghvGk*((y8WSV4
z*u7s(Lu18}+@(vG3Q9|#o}wA-rDzl=b#A`>`qu(SxS!nFS<Jv1_cZ6)n#js_<*tQ?
zROV0O;S4O?ntOZNnl)>JGG9MB+6_9*yyD}dpiF;`z>Rly7PBunur|rp$LEx_Od!vu
z!xIG-Ic474V>xf$JdG};`12>j3ko)@yD#>LHE4fbEyK6>_vgQlh>3}@bXV?jp5(9C
zBH$Dvk$Y>)!3!5A?5+NuHPyc2Lxb;ZvzHoLfg+%E+9I&%(1z{Xk6*t&J$Sj_!?$nG
zetdkqv!^HJ!-In=s;V!oYyvr;>YPC5vf0_$fzAMdo}Dpq)~r*TQcsu2&eCY%GJNR4
zq1YmzzpkT$W9{){$Bu!9;y{)9t1FtbOfnbsvC3K&EzxrlaaB0ET)>G#abC1())kFw
zpFvy7($35XJaw_-5?pF~{{3sE9E+x$oB>K#JF36yG0dDf)9U5_cKJF56_qC|OAj47
zbYoMhx23B}i-5kGr(J7y(d09*wEzOCdB^)?_xygh8?=XNQ`%XnygNGr)BeiZR7^N<
zz#;G6o|V&B+1P{x1U_7`;uhC?a+u#<XY-C00jCqW<%%wrpffXSe}B{6zPgK@PbT45
zk0fX*U)0tt#s|-zySup^3x3U^*rHJl3Y$2NxVX4oe2yH7EJe3tIRa1i$lK2gT^+_~
zQ1&L`&)>g{AHIK2KQqJ7e{JxD>hJFi3m>_}#KeHk&}(MnRnpN}({tX5Ls3f~lnbVI
zxh+0;?wsG>eSwSJ7-XzUJnnM;@+_4TmzVcHJx%xKhD7GrT_uTUW*8nhdK7fd(lnjO
zAii|v7J;e#cgn<_LbT*-J}_EZTFO|JbTl+DL~Y3kTw}$+$jEr)=+VL-9};hE&*wkz
z=H}*?x3}wqmhpUfaWQ0l++Lsa%Z)(m)4CSfeEcDuzsGT^mj6C8rSt1=oELYxC+ox!
z*kE1$ZbRl}wOiYASF6oqaC39}@#6<*5yAKS_3ICFv<fUrnxs7+q;SRz2@zLCQ`4!6
z&TSd8-hO^;py{|>9BU6r+f;0@`OjLnPXH8dE{sCL!j0|K9@0`$S+biqZcIGVA!w3)
z%}0D;sMPoO_tXFX`wMC}hR0R5etUa+@%r`gOU&y2ehvSc{`AcopVQNHxAxuNUEVKi
zU6wKR>&wgR+1alrvFbDID16NJ{M_8d(cANm<|&(*i80vP?hWelvUv|GGCG({GA=MM
zsH>}+<=t6Ps-v#nK4l7M2)slvYH7jiYr3Gbpk6HQm#{9=0VRyf{`ODX<?A$pm~O2M
zRtJ?{b1aKDY}o=jmda)E#TCbOb#+0bj`@4Pih;I2{(L$;A~JI7QO&&pLPA16-fTV}
zu`!9&&dyHN3$&AovEu#S?_TN_fy+QE<j>pxk6B~}byn6D(0QF@@9ub(m2JCr_59Dz
z&yACh@qi8&)n316(P0g3@ZKoM@dJ|Pc`_e9nC9Ntpm=$?fBL~D*4Dh!ckax&xjB7v
z!a=4<lO};qTy*b~Ie6$0Q$>a8+R)WuJd#E&ckbK~QuTaP|LD;p3EL_YM@L81Jni@8
zuRou+*Ds7-^rp3?Ws1emDV*+39bU%|9%O_zNCVecxw*N4Mi-wvNpb6wIr;JNanPnL
zM@L5%Ha5^XZp;1Vo_eREwef!4?_SW_AbENDtv>Pb^7{IqL)N)3UAokDCvCA?FKEly
z#fukv<ZP|(=j2FBOYeLX*>!7MZujQRo7Wu{5S^kjA7u62yRzoy=3(n%PF`6V+#P%T
z_U+lJr>B7?crWcL&7L!74hIKE!kHO{IX5@C9$O(Ad{2vU-MV#APxbWlmMmQ=nk`t*
z%*?zk=cd!)HeOC%UR48wfY%jMwL(*V$}7$j2Ite4H*VZ0cyU2-UF_~<_v&i@yh?K{
zJ#_f+=dGrhmsCJUSSTqgd;0nwy?Rx&y85?~efz05hg!KAUOD}*%(}LQ(?%vZOy=6P
zYoI-v3!T~1&du>WJx%xJ{r&YPn?#+aSp75);0VmTx-!_^SI0Z(_@P5hda=7c+{#|>
z`6!Yr@7|uyef#X(+}xs`RtoP}7r#I5&9>N>n27y#whYSdeL7`I+ASK^pls5j5gxia
zOm~Bgx;lHqt*zP9SNwHsW;3k)RZ_|n<mKhnc}v)7iXN!&aGIiBU0n^TdF%i03#*Kq
zbYn~AWufne>E~qFcqBd?;q+Ma$g=vI4rr=>bNYEU&>GDruh;KaQ&x69KCyGrq$j}~
ziY_~|E-m3?2wxv}Rcn9kZ?gcalgsDLlan^jJ96{p%nKI+rs>5-Ju+*32b%OT%e`e#
z`>SMI-d!%6m`~|<b`+|ps!sKiXXlqwF))}g+dO}oSM{TlpajklxDLzWfeTS8`wT=}
z6>V*8<14pjUFG2AJ$mWVq!%w<2p!cadEIaSPeEC^`RC{7;8miaVa7i{KhL*J+r0sl
zEqWx4y-c1(i1ew<cj8by75etp){mb*CtqCT`s(cm(4jy1_s?CAuV1@W<<gav!B<;f
z%nvF1`>XWdzu);r#>St&Ufofc3|e#+nYNPW&faSA1qZJ0T?0B_a%$AIz18JROiTvm
z=K7!ixxSoq-%YVa;A!5)MXq1o-<Rj-=bxq@e{POt@sA&m`?pTwZg_ipJ7~RrsnMm!
zskgV~Cg0eQn39t6;NioA`)YrG`g(PJy#2FtbEBU<|Dpui1`8TgVpzCv;hM<JZPMm>
zQ#|7t85zMFjr;BY&Deggin{@HC&TvqcvHi#-@k*B|BoM_0jZ5!w}#$6apnwYF}F$1
z4T0q3<T-QZfEvVC3y(cM-VfTt!_XsZEmmLuU+L(J$B&!m&zHZxE;jkchldsx78f=o
zIv?wkjef9<^WnpXKYsmMbTMPY_U-96HYBcz+UoVX_TA&h&C{ogi|fTC+}Tlh<M!>#
zi{1H4ci#t{@p^4-bnxah-(TO}dgtWi?5lfsclYrlox+8Mg$v8x-r|umSrPI2#Wb_X
z=ip>?`SRuDgH5bYo;)e|{Vg}^>Z;HL=zSntzg5?7$@%c$Adj5QkC}gKzg%>`v#WIV
zl}Gg#zrMXaeP8YGO{u4+8NFZaH`nTw)CSO){JRuGLqpICxmQQFqKt80`sJSX=tyVI
zjSY=~i`_16O7+%@+jAm3zV_(K;N=z-9~7i|+b%En7Zw+9cU!zLaIu?f*T*BB!gu!7
z&c1LV0JK;0!a`@zxv<&S*Qsi1cD~>D+i&ge{QGuy?%v(FWeaEm_R5OD=Gfh3pv4(_
zvAd2OYURFa_W1GRn|rIx!@|Nq+bSMBNH}!(@Xalm!n@1fKH7Rc?(o5bjiA%6=Gj&k
z{rr^rRja<H#%8W{xtgM4<Hg19$(fla&&{=#G)MqlOXD-oX6Fz4DU*U)1Qs!U{PHEl
z#ul_ftiq+BV1tsp`l20NpZ|gO`ieSO7CdN(`gV|AUZbJt@2^tVK#`@{*Vl0^`10;<
zbZ1{**z44^G_AI_wyyT}_ORLB)Ad3bRMphn0!3USHzYJNX-u3r(bcZqEccd118DQS
zs=0Z1por_qlP3eCwq`Ajh>FU(`t{?-z@FaTsk_VHuS%7almzw0AH8`qXZ_g&2OPHQ
z=;-(`iUbD-o94L&f(D@176*#BO5z;Q?yi~F6{NNQy&|Z<RcsNMdhE{5;;rB2p5HxH
zR!+_@C1pv}yXVi{v$C{!rOkAv*7^GS&NR)Qw(D))RISh#S5^vxhO~|!U;TBN&rBy5
z7nZQFu&l_iFtM<(Fco$6?5!);uRjkuM9Qx2=hNwoFD@=_zjkC#-rZe{{L>dR?I?cE
zH`^?CQSR++Tk`M6txZo!Y3c9hkBp3bWww2n!uGqZ0-|0aAtHu`hMU&!5>S$lj*bSk
zZbH-2(vF>(X?)f2C}?uH`ujW3z5`GgXM4DNURe_<EG#U%)+jqWn;|GT_^MHQdb*IX
zFeew+qYDe2j~qQJC@t+>RAf~8>dM8cy17=RTgsSDXaE0LRr!3v)TyjCGLsf)aIIXq
z5;VrXIxnuN`s1UcN%ONkJwIu-tO$@Y%K<Gkcysfw3}{`H{r^9pT9GL^`7zV!<^J=}
zU0CQ0S{jm=2+FTrqS|2#E@s@=Utix@ezmDR+-|;0Wy<7c*KV<oC)MXC<mC8VUl;rG
z=4SQF%l*|gG&)XC*Uz?n?`iyV{?;nzq$H&eAHEuxm|U?+OHMxAA*h^jZOzT#+Zx`W
zYDY_?xVSiKOU6Oa2*&GxBlWE<EgqjV=S4?GMlM;t{PBwyC+1idgHFpd&%2XwZ%-v?
zn>%PqsPgl(sopxAoSZByETB`hb8^;PlUlk|(z%(9m!Y7jC@B5-bI|=ds;aEU#+!p)
zuV0aJ2HYReTD!OUds1%h*=J{GU)^+TYxe47&Ck=awD>{eQ|9K=9h=!QRp*7Tk9&Hg
zQ+Vk$|HW>-pvxAXpPQSKo}Mi`+rHlJ+O=z-EhbB^#Rr0dQ^2XiYjyB)KhXXU%i?DO
za&mq_K|;s-WP_(my}G_$zF}9(<yTi%cXo7WOpcH;&-1yuDwLCtFYWiYx1f$#-d!uu
zWYyNJs~*0-s%mP>j{KF7lr*gWS2JnyWYCJz<Nfl_54Cc$u(AqDNObJpZ4DZxZZ+1D
z+xb?n1!Vc@Lx-C3_x}~s*Vo@w{(jxG*)wJs<lnO~{aI38e*Em&-l^K*Lb9^4587Cl
z3Z6E<Uvn5V&H3R2!-A@>uRygyadGjUJ$niY3s07B-DI(6?_N)T|MXW^R<^XXFeD@-
zfM!%@nCH*)Q_p>++27YB>eTW4&g}esoD2RLitZ8@5;`<N(Ro6@aG=c7um3##{nfR!
zy7vG3)h%V3_2AK?MS5}nS7cvbmzbCsm{omDT*c6E;)xR;Z{EDgxV2^FEDkj_wW9Cu
z?kedQ{WsCn)O2xkn>1@y*Xq^U-@biQ%~}te<_Gm%Y>kbL@7%dlP+VM{wRcZykDA|{
zh!th-y;832e6n34-MziMw$<NsHrzROY?(){Z8vm0=c<{v*CcQ+wd1%=RrkNlH*emY
zvY2$r9VS>&RrSiM#mhTwH#ev++ffASpF4qiUgqF5Iu*3<;oMy7V$eMS$M@{n^WyGq
zbI`J>2lw_?`^>Qr6c-oIy1wr00>@?!Ztm0H_k8$JP*YobF~j7>?c2sVHw-|>PWt)v
zh1u5E*YDZ8x3j<h`1R}J(b2azS$ZnAtT+H_xrAt)J9iGW<1^>(uF%zgPEFO$xv_yU
zJ3AY+j-bDPdFttDpz232b{A;q9n`QkNMP`urV}`Sd;Wd9s&8*jPScGBIqdPV-p8-5
zt_Drm*8lrFKdRQn)%D|X`FhZ?wqa``9QRgzJ@s@>tH2_qiBEz#0#}00nFr0K=HA|x
zIko=#-ExK=8B3vth6aX5j~;>60fUZy`1j{0=mdDs$(p&hOy1qu$$a41+1Z8$2B1zC
zC_jRh+Ejnfd-LYajeWJ%`~D>-C2iQeS=q{JR`T(_sUL50DY_g51?!?9Lv!=zpwp<`
z`{h*i^!#-1?<&<c&APIn{QW)90zlu{W*4{RM&H_=zy6w`k<p>!$J^Je(b@O^Uo`_#
z@w|7<8l5$3)_C~&=^3=`EPnpz&6^lAb&VDQ(K$L>Ra#b*fO-%6|NqV3mV5gcyL`=o
ztE<C7^)GaqYzA`Y(bimlA?PTo4<F3xl9H4h9UVd4+8sMAl9H1>{rtkj7uQW$yH*#p
zsq*(^5vL9=P-=2n`uWxB^+CJKa!r5U*_JEawFq>k<b#J|WemrT9g~of%Cfx<pENRN
z5Yvr1qCUT-Y2!x2*xhBIou)qX?dC36pa41|V10ga@?#@AYelW;EiEh!LixWnPPx0e
zxpm&20E(fPFJ8YkE_nfJ5}&%dI{fCYQf*#ovyklvvM(%PWbpIz11$!6z0=ata><e<
z32A9=PEJgWjEpyK-4c?PUcL4D=RK95PrYwx5m+Pyj`6&_J39`ZoUC40P@wVIa3bh{
zEXd}Imc#A*#>LNkzDA%Hda-}!*w@<`r=59lppkjTj2RPV&py4tv3ZNo`PJd;iyj@}
z1U0*sJy$r=t&s1zX?6JeR~ABn5{in7KijlLr}|h3IZfHw(!z4D{y*rJj+xfwde-Id
zLayJ^(Ow(9{n*W$k+Ei(UtU~%WvHyI{OtUE|DqxzW%s@(KR!N=*-_BAV1WV?Gjm~i
z`SRf9exR|!RiUeeWMs~KdwaXHw>S0fuF{e>HztC%bIh9M<>TWsb6&fEQ;1p7(_oIk
zXMD0&Eh|@Qet&;|xm&N)p3mp3B_yW&oj)HmS@rR_{N>f*`me69UtfCW_U+k_6~SH}
z9vlp8Y-~N!=6#i)pDkRzyuG!R^?uD~UeKP@!-ttc$Ix!B_?UF&?Aec>J{>xGwDrxK
zH%9j2iY+U2KpA<;%qdeu%HH2Qdvdb+)xv3fe0)#MG?!;yUdFKJ@3-5ma`R0xh4S})
z6`MG5;*w>{9=&=sEB{jS^5yEbRbLd0jD)PMt!J6#cFmh7$8dL7>Em~IcW2%G@ZrNI
zOF_k!6)s>4I$vL34?1B4bYjhh#KWMC2KVmWdn$GKdVKv^Z~eVX;<oC5RwBmkDyht}
zHZwE(^5*8|14Yu(vxSapwg~78dD^uKq%I0u8wJ`OE2bNjkdWXI78bVit8M;08&JRH
z(4j-1Qyq8Sc_i+{5oqyAJdz_&4K!6Y+bp-_()U+aSA!Od+}TmsBX1w4ZU`zWXMlUu
zptCbUgH(ZChYlSAt&MnbVc{-5*C|YqS)Lq$I$euACaJe*h=Ybaz+++G_~mRo5)u^5
z^Y7_wwmb44JSe<r&q<fp*Vl({UnSzy(e>&8czsgy>+9=ZTTKyfx>F|ZBogK3#`f^x
zLl+m9fZb)e$NFToH}7o~a1!Z^`6=RLGkKB59Gl8X`ulz~ffjSFkGHR>saX-dJ#XRd
z6Vd#}#>Si191?Nb<8bKk;g4Uxx-Pz$ke?4a!aQPYmMCbU!B-<=W6*geywYYzZrqSi
zS69DR_d7QzD2PGAzRqTK*jlE9H#au^`2Aa4lTTh={?DI3JIdZl9d748e(+#p8?Urc
z*_#N^P=x6A{(k<rxHwQUE_{3}F+bnGU(Ob^!HxlR1TpA5s<gASzP!CX{l<+OHGl75
zTXp1WwSALPxLvD&f9d~!wb$0gdOJBWy}i91bUu@7oJ!sCK3UM(&4vpX0&Z=~_5T0w
z@5<QSWsxm9Ei0aUdwaWm_ipQH)24y0S&}l%+K_!+Pt9ir=%6UjAwW^(Bz9^*Z6bV~
znsp}%=UWsu{rFK)_WoY))TyF(cbBVMSj_nFp#XHx!MfPp6>qm*2i+q1e11LXp!=A8
zH8ZtB<>G>S`ump`KR*ZB>{s<ALq}Kl=FVbuW;PxL4Gqvvrs;?L7qW;bwp6s;ulw!m
z>EUsqR06b}V)^prk6yl9`P$%!a#M4&=uZp5qoFgt`(IxdJ9Ss->s9@=H8mp1$;nSa
z*(lP@tt}}%eYu6T_3G4_GiP=!T)6Pj!-os6-n+EaThyVmvolb{HBd|^VgZ9!N=nMa
z$N86+^)hK(UgjHIR9r0T8aQRn9GRt|tHZjME?pXS_t3Gq*V7Ub7DS1Oi7jL3TDfwi
z)b>RhUDKyezqV7OYf+Dcp%dej!|nX5Q@_8zA71t4#X<>5NzKmAPFK70HcLPJmIKG?
z`71k%(_`BgfR5HX(kc9N+d+|ClP6AG2pY^!J2geqXO;=4wzl?G9c^uHZEfvIlO|o+
zv?ux|DDAtsUD}lD4O*uO+VgSb$dZsphLCliudeL|Ew2b(?gv`5_v1%JX-81vW3~&|
zuV0__@c*aN`pg#=yYrh!^+w%W8*L8SymWJO`o#<r^!nErQvdF){{HFj_xr|qcXk9>
zet!h2loVS8M7uU`Hty`~WMO43d~reX(W6Hly}hcImNTtNU#<9h=FFKHmc?rF^?wZ4
zMr~c>Iav+Vg}okE-Ft6uHE57k>*JL*k;d^#*}1vA4p~`Q6Cbm!2wu+T=H~Y5@t$w;
z>!+9VRqj4<^vDt9eoRr35repXoX)qM)7U_T7-%>}TU-0<{%_AC@9rvH8NFRkQBiRh
zpX;A+4-b!h{FaKRE-iBH{_$k8zk!+Avh3^YzP!0P`Q_#1pyiTJPfy?a%5T2i+=b5V
zp!2jrh2GXIQSGob4vQ~tsQ>>jNU}OFE9=*h<gP^`+IhvrpP6o-mcIT|rSkNBNonci
zjEohfXW(`G=H=T0uc`bLdBi$x>eQo+%<L8=F9bkq^wzCgw~Nn{LvbEx4z8hrAtyJt
zv$yx?p+io#X8HGQ*6t$E)v>u>Jg<F+_aet;HU<kz%axlSe|`d9!_hQzX5`AR;WC@9
zOcKyvF=K`VsCDP!!g6<4>Eg`G%OIA%L|P-k@(!{_!fExpdwZ)lZrhgj`Ptd5$hWt)
zUfnpQ()+;F_C-fxg?gn-LHBabwJx7DckbHKoPU3QMnp${em=i`T2%c}#goeg^k>}O
zp8xrM{r}l#XPZBM@StJ-e0k80u$8^FLQWl<uIwmGUKO_1tDwN(_V#>rGqY)>udiL)
znCuQ(g`btBWoT%~Q1a?Z=Pc7~(0;f>hYx#tc|E$ZG5J-H^WR@znGYZagcp9^;eF`D
ziH@J2pHH4M=gf(T%9eG1EI`L$YG`yEIN)&S?%kJHRt9U%3H*36w_Gt!0d$iCXpPCu
zn-3p9J`Ac0Ur%TeSmdFjqx0k0?0nF0yPTXHL&*BLxktOjlk@WWrcW2w)6+{yPft!v
zJh=USUHA0q;-H0ow?VUk_x4m~eR}!s9q1rJ?eKLfR#vlWe}8*v@@~?nZ{O5xZRf5G
zUcTz_V_qH}3G+Oe&(F?Y{`sTM_UXlm8=N}4-hRJde;l&H{l%Yt|H8dLpUq}4dicU}
zlKDdqJ3p5~k?(&e&zRwnlA=;pR%ViWE9CF&X)|V=xVyW2t5~-`dPmCX>@3sITPxq*
zGS$)1*^<{iecPfVu|ddPrtFnEf#F>H--Fjh>rV)et8~4t$f4-6a>K@r3)9cfW1V*U
z#*K`rGiT0x`0QER?Af=2Z=Z=imhtFFXKPpDl@)=YJs%SU|LgBNbSySVOiZlg<)x(|
zw{>_yogf#*KOYYB-`QUuzxR_?%Zfd6dtLvVl$DjG%6L9iIk{Y5s)wH+ALvApYh}W&
z#UCCxetUNpbY14wtgB241_l$39C7iqYpq~}_O*N``73I5a*OMME_QkF=1t54UD?12
z#3Wd}uif82e^R796<ah|K})j_s;a7P1l@8o&!*FDF=*x3F20pPpFVxMRLbGR5vX~>
zYQ9rQz|EUCTiV+<*ZeGc^!Tx)VG_&XcK-11!gUjWqAmMfbsR_C&ww_qcGc{7kL2R3
z{gAE1F}urpA0BRh{NRDZ;Wl1L>oT3p%*?3L#fuh!PRIEA`ug*)*W=Uw{`&gn-d<^c
zfB#Zz8^x9i!4p&c6}1-3m?3fK(4iA&&OEsq9=|kpciAS7Kgx?1EdtFX{r&Y7wBRCa
zZ4@KukOzFjf)_JP=GfKF+OfmJM5=e!o0AKj+drvxg04LUEud>_3)){-3%U|^qOyC$
z?lN6ZPfyS$Nrpe)Zs&h_dt2Pt*!b6%m(Bb3*@3o3uZ^Bw{QTU<pU>w{|D_YI*isSa
z`AO4-b;`VXet&;`1&!&1t`56eYH@z)j2RMD-{1Kb6d0U4ca9<F-X2M2W@f#(Jsnf0
ziZWbY<_kKP1+?&}m0SGNL3a5GlP4cu=-kf1!Lh)#Tg?Bhx}IKN=H+FeVT~_ezMMFF
zc4_YIZEtRFW^cH2C+5%Jzo6Ol7Z(@5^3wvHlbd^Mi{{~Q2M)z~{zbQAJGfS)o}LEU
z?J9IWeTH@Ux>*%WJ~NG4J32T_KeC*FFWOA{nwXV!YE9(kE3J!Ghpcp3?l;%N%L{Zz
z-iZ?)e)DWj-p=2@R&5@`x^?S#B#oBLNLOnS5S<QcF@|_;17B4ew))J?n=_9bacOF5
z0+ru|g@s3s9h)>~&Kf<v*bvj~Ye$Y8aapaCe<wF9OG{iojz#X>>pwfv&dw5D?XRe{
zcy09dS5_>6pi@Ki3Z*C2aDAL}>g?I2UZOiK17nUIJNEMwzJ6fLnmQj}-}x0jfg<nj
z?d1-5Fyq`FPd}$UC*HhyV_;w~!L&qs!miTS(_Z`pn+zJH`Ty_lk|j${$UhF6GGT&)
zg9GSdl_STFWxc&?lYeiI(d+9MFA6r;|NGI*$jp`@+uhTnv$?Kyg@#r6JD;+$ZR-vT
zJoV69&GB*0iIXQmC&}x??wV5k{M<?1n?YqyPl*;47fYICObB~a`Sn$(-yDm;w7<J{
z>;R1jt&82g<&=Kxt|Ra6?moRH9-3~B6hHX%^z@(C@&A*~&$Hc<agixLKHk&LJCg9y
zG=>$z&0*`~d|g~zI)Bx^Tspnt``vO-Sr6(dfvzpPxheI_+uPfZJXdKE5S<9>1GIxC
z2F}g3?gZWIcXMXq;kJ`XA5)Kj#=`dfY}=T8{L#aQj1FI4U5(sRVfgIXGtlkDj~;<`
zX}o*)ZpY4@8;hQLEn2+z=Jx#f&R=mG5*Wk6!gL}xwS0YjJsC1kxna|$q;qpDLso~a
zHSr7NP}E|vbqy4WWmi1X{c8RGe~;Q%^YKoBtp$*;Ti`$6&cf32rPUlR#eA6@4-b!x
z^FWt{Bg*$!B~3%aiJ(F6?o-U5?U>x$+-q-tQ7!%cF7~T@kLP5ykC*-JMXNVm{;UMq
z6Qm%o?$qIQLo3{_^}@ocudg1yeyzRv*6E3`p{_q4C0`zmt$P_LDJl8o#YJXwb8|8M
zxHW3?GBY#Z+}ZhgX7>$lMVD02$cvR)XZq8$tSm23knF3m^z`%utv1+Q{(e*0+bB@4
z@7kKk#jgcg1s27Chc#1kE-&*1-BtoRq^|V!wZyzUztv%DZ|tkJj@?yqv9!X8BXFI{
zPmx7E8eL8yAtKBD<|h64@UW=$GizFA=E?N=wa3!u*SZA-35kh`eX0|1+Oq+qng_Ib
zwWYPS@b9lu&~8URzdjXdrivLIT#84!eJ1%UdIiEecc6aR?fm_|YooT7$W9Y*;`n%H
z!js^Rpb4{Qd#9wRRDXNp7#~0XdVKxdXJ==xKK%o<G~|(@r(LTCtEZ<Y$lcp=Z(rJ3
zoZi#ZQzAPFWI)U$kO2v~xo4~2?`_|>apO8?LC`XhY)~!ZrSefnJ~K1($gyKasi#Ch
zo3md3`S}^#qisC#ZI)99*U_6dXU>=*5!<fF1&y4jM_c3HynTD|^5x0;Keawh-@CUq
zb5G~#qi=6-zqu_}dgjcTyZD~AUf)w$Y-4L1DB`+r-sJTU9wfx>*KH9H_2|ssef;?G
z&-bd|UtH+ieyPKKj{={p)saU>yGvz{8Q<MsKmYIV@5N6}2<GJGdU|^wK61q6dLk#N
z{T;Tl=VwWA@!`vtH=E27((icw_uHIB8gp!`r-3%>uUP}ST`=?dy16<c`Yi%ZQzrOW
z2t6{qzCJ$vc%N*{-m0n3&dvsnf1EjcwiFz;ftntlG><5QjtbwBDSYkPHPCp)m36Vv
z*A+qbP3=;d?_}c?A1|MupRc2<d-3w*yPcr%=SylQmkac7+_VW?6)U<d4Sja<`OnYK
zEvvq0FjQ4lRa8|aB}~|Vdu{agNpt7&9+;r$eBt_a{nr<`Qt$7pb#ZfJy0A9d95grd
zxI?Zg?y=CLN&zu3x1u5==XSoUr5a8gigLlvPCh?3*BZ1rM_ye`?a}k+)7Q`2zTI3?
zQxmj$TEN(N^CrHv0ia73Hq`tqVgM~zS?3w&<ir%cJ&zT1*K0*Zg^hS&XbNce+Jl45
zJ9g{{*jrT^+pc`-#GzL1ofRJ!fu?sq%4mJR{cdyG*`y;Kf}q81<<~{eU0ogi@#|Ms
z&<R#iCzosNnlVG7?&nkSOP4Nf*t&HpXga&)LSvD?ov^U*OxtQR?`b-k@7HyMR(&q?
zpKr$iYS|sX_~-m*sq3F#oSSP6nqUMSpWEx!Jbn7~p4TEy9Ev3_>cV|tYa$M|a0+LD
zw!X|Set*xl?$1YezqwXNpPrtcd0_!)=|M$BMM7rg%Fyp09v+U_TP4~M9$zaeEG!Hf
zZ#vk_{<HquJKJ@~fB%>N@%XOg)N?C4PHBp6-XLIPJX`YitjivXJu@Vw?Q)*|cxYWb
z>*k!aXYHEpTP4#xi`Fe^ndo6D?)oz3ecXQgJNK?H_jW!0z53IR`+4tgul@eID(?F0
z(%7rJ)7M}BS`{m6U3Nq|e-C4EaWRKt!J8X~b8ISwZr;54;^t=cs_*Y~t;6Et<m7Ct
zSRS0boELI#o^5yb^>vI4RbO5(8XFsf_9DLD|G#bGM8Q3K_g(~zA)Z$?G7>U0Gz6W=
zv}Wzvi(9k9OI}^!Ja+6@kWWsIPEt}*%5!-^LC}G$TXJr0I#d?=yz1(cm_AwSwhbE$
zR8&<Do;bnL*ViXuQ(-V?&YV-d;mZ#lass*Pc)xu6%$bsIJra%2&d$!>6}dzav|Q!f
zTx&rosjfYHY)W2V<Gpw9o`iMTnv(vXH#R1NRtQFJPJ8(Iy#4V`Vf6)z7c=MQ=dX#|
zyX#EV`i~z!f;NUEB`0587i<0F$BzYtkB@;4g}$~fmfPFg`^V3p3zsZmiQb+!_3iGI
zlR}`qR1Y6Myj1&PYG!iiE4FzxVxZfRLAM?>v-4lrnjPLFY0UP1&u72b*es<*>B6Qg
z4lJy!p*#NWe!owcfrSAS6bl11SQsv@kGGGU)7jZ6GJW!7<=bVyzGPlp6KR}T{c`%|
z&6_*=`lcP_moo9V_3!g}dv0T6<C}Kdwrx`~H4W{Nx8HZ>qniIb9qViA^J|oHqjwf9
z4T-C|-z#m-1zK`)T*|Iy$D4?qJ9j3XnPK>JUi-Ff+h&;M&Jwu|x>e{g6EpMto9kZ1
ztbaAfyRdMhgjGq#&eDv`%+8;mpNIc2R%{V)baY%KR`+LK=Id)~lTJ=jRWdRP(wKV6
zYHjzG^a~3dlP)Z9Jm2&2+cz=aStb+j$=lULWMpS^b8~YWW?oV;EPogC@aa=kh7SFG
zKb*Q=-`Kdgprk~kSK3_c?yged%gg=6@7=q{)bQcs$B9=31qBtQOfnSKtXb2te*O9n
z-@l6=J9g~Q(W9;m0_J&l1e`b?zIvq<6BBc4OW~In7nvF~G&EKONv{t2es;Eb>*B?W
z4UCM0gw=cmjMLAFtl#%*)rCu!gtWuftT+@}Z&v!pPB?I{;F@bsicd|^JaqoNe^vd5
z2acNS7CkZ6)bxDu`nC6M9v+^S?(XgjmoHB~#ly?Hls{VW$;sstCr+Gl$98T5lfbTB
zyHY1DpRDfhb$pf2r<JP?-@3Ky%*V3#_jKQG&bzzIsB^*GxpUXN`F_7%+==7k!*=<u
zW4+R+&t1HEGZJ*y=FGRN&V5~VZs(c#_VHTVw{I6`X6F;pjovopXnR{**pK3cefD9Q
znVG5oCN30@FP(ILWAbsX+S=NWA09fd)X~@Xzj5>CNuk4ivesM-NymC57cE)h!lBp_
zv{FP)PVUf^D<NIMT2miQ4UZFi_UxIGrDdd6e}Dh<y6dZE)r4*94P9CN<HJLy28-HX
zTSUSG0u-vgzEb`2<%>&I)i2}q$*G1vRTgP+g#B(_HC-oCiC5o$u9c|Q(oZu#ZcaZx
zt!?V>FE5+7Y%z)1Rl>P)<;oZL_F6ZnJ3o%E`<c4)w|V|OnUg0^o;Z8<=$o6Hmwu}L
z{!Y=rKw##~nH?P+4yUK-F3nX`R1CFJUmDc;;X}carArlUZDY+o|GBa<_|kPpN5@Oo
zL1%QVi{0I3UH&fN&ySC(kILWPYPJ9O!&&S7rKQ{;naa=4Y&Ywg?v1-@IlZHU<ISC&
z!r|*;4*vQ1dFdz6Hm#YtYqPIiyY_!psIbRo&`pFdUS!<dyRWsi)xg-;IV^0N&b12{
z1d5-Zn<{6tVChm;eSQ6uw6sT{Juvg`h!wxPV_Ea(<ME7ZYi4fAzr8KjFy+JqtK8(&
z*XK^0IPmT5?Tage)hnv1yq;E7Re{DCxVX7Drk|gewRLL83biZqYHr=U`OyCVPksi_
zlv%{~yx7)_KY#w*q>}#Y%S!`8L&gs&iXSpBFY~;;E&smWTH&Z!>(}egGR<bQwYBY$
zvyIyJcJ=ywO$!$)f=bc&`1qB79v*HFwNkgYxBv3yrZ7W7Qc}~wW_It}K|w)F)~ox^
z>$$tT{PB7F|3^SmwG1cDoH_FK_4TDQwrts=bu~6BH)j2*dEPIV|M!_^Bf0<YH)%PW
ziUvvJv<Khb-riCB+YGdf=xwp$DqlT4J<!tKO{u313LZF=ytyIB$H%v$<Ymyz2x)0)
z2?>c4r$Sa2r=+JdH<a|3RDNH(d*{xpnbO+P<xWmaEdnRbojW!`(K%&(eBDpiG94wQ
z(xB>3oHjrC?_azq$N)OLEA!Er%b?SuCruJ!@UK$dvu97r?dorDH1D>=$Hc_EV_(_a
z-27$h-o1OjY+bl;;hUXzm#ROUGJT4z_w8-Dsqek72k%P%zW4jR=GCjU{pQ>C?yLR1
zsPgkO19S7^2b<Yfhs3*PJ+2D<7UR|{rCMA2-~i)~A3qKpJH{q!RdV3h*VhY|E>-od
zSfQ<{sTt%ia&fax>@E@CStbXYSh)j2LR#+atxo>@>}+bCdxQFZYf(Wbh9CFsS3LdO
zW1ny0uBxoOI4XBd&fS+UUotS%*4Dmw_3BjIv}w~o=j?73PE}eo>%xhga%N^`kg3gV
zyiQeByK+`++j8Yf$jjHud}mL4*=t~G>blsix8V6XS<QP#kGhHl?`mJSXno`Vzk!<h
zw?Et1R_{^TUH0~nyL@fSqen?A&m23(rW?KONT;y+s*v<bh~JL&$#&QO`^mol&!_GZ
zJ135q9R-Y_>#AQ}UH$R-{Cd#wJEoRPi&9fl6-`V;o}ZuJzI?g*ER)Qj*QEh}3;+MC
zJu}A=)Zp{*@tNYr%#d(#k?U2fWv}Lgb`>tD|Nn1O?ke^El^P;kFXtb+BqSuX>gusm
z*WSK)!^4nqb5rWfncuvY3iZp|Kg-p0St2O)@+V6}BQyJ<+qb0|KK%WDUs+#&y^qh!
z)Iv}!|Nj2|^tSl@b+KMc=Jl=bT%|UD>cp8dHN9<~pPk*lI()s7sj2AWW4)`VT3xB!
z>*M3Iq42TWl4Z-1K0iAPx?|wYn>S0|N=i!3Fi3RT+8-~sG^i7Fy1?04rl3(2yB`mj
zLA}JV*9(5BtE#f9s;Yvj4b@Wf{Cl9)&|CXnzI(?fD=XX5)^_UD<Vll23o|2UE?%rW
zY4YS$Wi4_2xFc6rhpz^C@9rX3?uh8<#}5uRr@9r3>BsRD7Z<y@x`uu{)7g>bmwZzF
z!;_5@qN1WSw6rFDWm{!oW#uJ*#EGM&we{q->2>*ed40!vrLX5UXFvGz^719ive(ym
zi=UmDIBEas>H62bWMA!yo30;!?8HQ6!=fi1YofMt{rmUt#;#KBy!-olWv$CR3ZI{!
zzy6EBlg}!us)=uJZROzRcAl;m`{AVee9)<`E2kz0|Gl=WG+RPiT3JJbqx$<h*Q6vR
zv;2EK>tc5=N<7?l;@r7uU!B6-9v|!d_;UIDM{jO!mar^R;ghjwc)#!Wx;yo4p#Dfi
zM8`yB_eY>X(;bD%pgG!`8qT4&B5v;b`sK@pijPStsi_CAUl&h5Kkw+()!`d+ZW@6O
z1kK;~Gi~Q~SpmVTroBA7S8vI`F9(`)-jL|L^Y+#)TRt2Wk54!^$C9BT^YSuBe}DeB
zx3)U_`0%8iouzuzZ@%5$YgIb07d_uxQdIl;n(mY5&z;@f+1vSK56v>oUXm-y`#*kf
zm8iI0Oha?CbF1^?SG(fG#KbPOu<GjSR#a6j%D=x)z-fVFGh2X$h=9|9lP6c6IdtPH
z=u#mWs}hd9yu1%zzpnkVmeJ+F<hWnHv&|B}ytsHtIZIbZXG79aE(uA=gZJ;tzkByC
zbl>&rlao{pjExVUnyUTrwEljN?}4*s&P@FG=O^e2#0K^K?aTe<9{Tq7Ht38*le{|;
z%5FUq`U2;gg>8G+(7^EI*|VfyUtV(X@v$+yc<}<XRyblyM&R6<Yl4Ed;lAS8PNLU;
z)<k7xt;)EuVPQ_~iA&kW&z?N-;8qX+QdC|pURhar$!_WOpLaGUw};G|KVN^UdBz2Y
zYki{HVIH@S^++mD4NseUUN?H%iN39=r^Pa7XC=Pcvc=?P<*XSqIEssl866^`qP(6m
zv-3^qn>>5A_S)Smt8DWp{(Kd)e$~8g0jC~mbH6elTU*=2j0_F!=)F~?Gv9Cb3cbc!
z^W(!p4==A(Av#y<r$#>CY{M^SBd~Dc!bgW%xi3l0TlMM4kt0%DHI<c}e^p&t;(6%e
z#f?5bQBkuxdV8l{jg`(_<8wDMGEzxN$?47Q?f%=2<>x-Mn(q?A`YQhU=S(v*Gtj0_
ztvmM?I5NAqyB|J(e*GD<R;R{`i`|utj5eKlGOJ!XJ3Bk)?k>@=urP*(<Nfl=>gw$K
z_U!{*swpBaCDpZLi3-F2===>@lbNoRf_6W)N*bqm<ZA2aOnG;E>!wYIKx6fulhv-S
z;1e}A-dun5vDM3?X_=Xw_x4sFK6}>p+T--h%uX@gsF0Ttm6eq*E-mG@`~Ak4;eT|O
zrn)*iJHMRE?{9BUze&!`?fv%lw*BVq8;x?;_}x`gQ+si7F*|6J<xMUH7nfNJ1QuPf
z$S>tv5TKx;;jv9FCARX<4@13}9SXLq@0>mBTUPw9`@zS@$1SSA>2!5>UtH=v-Ai?v
ztE+3phX;&BMMVjjnVNq$uJnm5t=(&6Yz#Voe99D&7cX9bZn)35yzFf8d2I^|3FkH*
z$I$veTwGiNf`W}Zc36NqCiCXa3zfR{|M&a-OI0&sVq!kLTD|_%Hv6hC9PE5D6Q=I{
z`|bABea}L^hs-x!m6+oD^7?vtJ~<l>dwYA(rj&{w9~A5U{Y*b{?AW6Njm$4DE_UC$
zX1C4NzqM+Mre8W|C10kl<zL$NGAKB>b@JrNH#Q_T@2LO34|EHI%l^8*E`^1KOZz9z
zovZuo%uHnlj^N<ni4!I$+>Q$hQc6lna=E=Nw{`XE)g1i%_0J46SH_pN-_5?g*uDSA
zmzS51u3o=SON6V{z|2g{w(5&OVq)UgUGF{>+?d<3O5sQAtDj4LEna1-3M!z#eQRrN
zZT)h?Z)s5Hv$M04UtCyt=}7OXOV_WvCnhT1+LGCP;=~Cf+e6)Ax=x;+Cynzt70>?I
z{-tKxw3#zGg@uJPGFSfhQ}eyH_Ru_krBzLHrS?CcyuzqY&bI6E@&4pDH#P>%+_uf^
z&)>fvL3NS3`f{)1*%ueFf(F68r|TUAB~5u>Z*T9L#@jmQ9ldfTB>CigwbyD&tN7}Y
zE^;THpJ&T(%I@FgyLV+REiFNdAgA^%U%a?k*1Bv#<>zOh>l6;Pa;Jg{y&vpzJ33bI
zeORx(S0Kc{S@W-m>VuP6oChYWTZK;Dxzp0g$tfWxr)T~Ce^Q`RBF{>DxwyETKk{U9
z9LLI)D=%ET);4e6yfrbVtN*>byZfruy4|~XZ%Np<etrJdNfAm)N~>(t=6`WAFf-HJ
z9`p5wUv%{CEcx5VkF#%1Kkt^7rUojyZR-B)xOH4fNoi4f@+VJy7It=ajj3KDA|fYF
zg?27ly*j(M&%XX&&6oH0_aEZ)aB*=7u{QaYQ@-dF=#XQE2hYyV-n9IpO~nTWhqIIY
zTb&x$MsGiK`LeL0qN0a~$AKfA!r3K0tE6w;x&^xQc)s^P{l$w9+pD{TSpM0vK-|f}
zfk8|sqCr^Q@5H3@GiFGDDuuOCTUUMA*dlP^>{;F5dm9p+TUuHUT)r$kT`zXk)Ux2W
z(R(TkYiept?($T5`R3IsE}G6g*}qEh#;sdPmzH=&>?+ax^XJck0F4Rr=lAce{{HBC
zeEn42Zj;(yB`GN>pgYK(PP@CeT6}x{eYd*0x|!*Bw&&fI0-c`Lz{q^1EHA{gudlD5
zq~uD8aYx6BSu<)baVNjLwDiKoiw7GRnJ+B&mj_KD$JhN-wXv~DDFjubZf<N-yq12s
zQyv;wP+)LvO=R<)JvKZN1`Pjyp0EG#>-GB6-`-zeFArKLu<f&wl2X-7gP%*p+ng32
zn562xAVllqgM-W_Syxuv+415<hKQ)BXJ`6LqvGPvUbb9i*VaUOczdtjx=mP6@S^b6
zPdVk@-rf>YQrE&}zfhepeR}(sFD2)+)RmN~c7C||&c(&WWr^KZqc{H!^V^4HX-xJ|
zg%lJQLB8qmID6x>CrC}!;U|+p_bps$JE<-xC@8p+cd|d|0@fgDwfR|~-Bc~DtyeAF
zVzq8h+pxi4P2^@bUR_Wc`PFnXUH8|&-|shOURH~YOiEH>Vqz-z@!=uY<5S%ir>xqN
z`tHt7P^lml<?7<%@|AV+`KU>=XLoA`FH=xbatd1)paE(i@JO4jIkaPWvdPL#xte-<
z$8K&;fB5p{%4O381qB0Z7i>J9J#ESq2k+NEcjl))Hqlj6WAj?N$;as0B3JG+b1Xm4
zEc8Ea<2(2IgUZ~%odpk>ii(Rr-pXFTa$zVaea5daU2R?bjOW+4x1jMA2?>b<hYvF^
zT(~gx(WA$YKi;c;fAHQtIW{)7jQjg+ot&If3>g_2L3@rsCyDmk|C8wJ>jU*g%ii2z
zRAd2d!>FjLI&|t3SM9GajzvYAa{f0mvx5dLIyyQIY)Cwuke=RtZEf`9+4=i4FN2PW
zO}@0m6J++9wQE5;;Xs4em%bS$9|KkO4D)n${J)t#-}APb-yDtH)f($cd_vbBd~$N~
z#7UEy1eM)Db6=o468`-C8yFDq;mmti*HhW2Pfk`hEO`+Cnjo>Q{&wWn)@(shQC0>Y
zyUvb|6<$}S)vSx#D>c`;+$}0fiiw%|<G0)S%64{gpbmtaTbs!CvbRy7e%Q;GFTo2N
za&MW~)cg<tZOQxg_BK0%hK|mWZMnBW<8mc0FR@-<AK%{H&D|$&-xs*pZDINQd!Vb#
zLFMYTwb9BZCL+Phd?vmE-8A;@?(U7Lr^R?=twh+^*nYfN+z(2Upibd&`T8kI{PK1^
zX1TW#{{Q>?;_`C-HeTtr88ak6Ipg8OhYSqG#l=saK6Q+bmtVjC->xgGBO@X@=GXn=
z?3c4$W$^Chj8$>XhuirNA3n_7+S>Z#K{J0sLPCRX^tObbpPq*Plbd>d+SS$Jhi~7O
zetvGQ^ZvTOpc8*s*w~UjK00b(X4bZPb@tTPib_h0rq5WR$e^U5@nWW-prD{rbaXV2
zq>+n=xVZPz`L*9>GAQ)P+v~LmfEE-uxx2gfNE*9oO!d;#v$KoS5a9v^CbwcsM^~2+
zL(9~uQ+JfSoFsC6e|<fp189Qr$@AyjiY+J3ofG3~b^7w^s&^MR7ncx2%iOu3sl-WF
z7cX6^YGZ5LD&VA|t_~W)y0|qveB$ic+TF|wZaor;Q%!Skg_OLz6Ipg|RoTD$|Nq9f
z7Wy9#`6?9=5z#SYhJ@z3D=UMU8fI7)r@7wm<FdUwZLxblm#(hv!}ss?xwyEN?6|o(
zotxp%?c2Lgm9AK^kKM(^<x3D}nD_bTM>>TQ6A~JDrOh0oqocLHfBkxNP2}c;^mKLx
z4j!JCb?fy0{l5SI)Vso*+uL+SxLD<EDi|0pO?W>^)%(GtM@mPZK7Z~U9WA{&e0|%#
zeRd2E{{H;CcI`4SG@SS-<oEi>&1`;tew(VmM^Qa=W;n2XeqGm^H9CKOJnlCzF`07o
z<?GkVnwp#p6K2iok~YtqBH0vnb@3}sU42N@K0Q7C@ZrPGUBPq9Uw#X_b~zWcbx=lD
z_T%GzdnbQ?|E}uqcgq<IPR#A-=vcMxoVv_h`+7N0AN9q>#i^VM3>6g>9-YB8H8$tw
z+xK${s~xy?D@shg#lh2)^URqu3^tyVN=i!~K7Op+-QC~s{`}nB#O!QsZEYPLP%Ccf
zrWGqRA|fId#P6?5y)}FG?C!L)vmPF7W(S>jb>{5ZjTsjg8G#Oy+pu8+0|RKr!C~e}
zx4^)_3zsfAwe!hp^=QimU(H^ycyaUh`}Of+<xfwEGOV~(Q1Nn`i@Q7MQ1uzs<#{t*
z%+%G{8Ng-hs$Ev^fByM=-kx!R&!jIVSNHZbv-9h1e*5C$VuprwvAdZnCaLWGbV}R6
z+<bac-klwdSFV7Q#kTjCg_EavsU{^QUD%!<ADJ)5aA#jFXpZQ^w{LD485&((T^Ck`
zYQK2(YFZ_)oQ;HYJD=|MzDuRMckMcK<Hn9dJ1!Ys-O09W*|JSLx`ZB{(zrW~nVpY;
zVOPn^AhmaQb{1b<*WA(35tmnb@AJ%Q)57v9)6&$;a&9!}#qK(A`ZV|V_xITwiqbRJ
zM{VU|FerHukdl_Bq^QU!tmZS}sEszGPVBlUr4=QQRtd?-@F=o?lC<qZ&|>w+$NQ&)
zl8~~!eZ1EnC1vGANbCB<IekS%#>H;ElTOX+tF~IU>iUD1Wh>8JzjjTGkB={Po9*e#
zxq-F!Pi1=-6clWIrJ$swwCeLbe`aQ8hX2y5LTB1k8l|0?p~xG%`d$8+Q>P{!RaH@W
z&~N__JWI69SK7th-I*g$?PSfh3)?quHeR!4&64j2{tMYoy}dmjwDIf1r%z3*SFgS@
zZ~5a(moHyj6{-y?khofzoH$(E-4_Qh_uFI<Y90Dk6Piw!pAX&op}Mr~@O-;vukPJB
z-Y<Xp(YCz1T_;X>@a+^96b#&YrSj9ygY5DQ3}SjQ9UndvfO?d5b#*s3rE;g8p9i`j
ziQ&in4S)7jelGa*#PiOMLgs@94}SRet*yDadCQ-Ro2x8xb8;@Mi8NjbTC+D@FILO=
z%-R5r4aLv>*2L|V`v2!Me^YZasN68gxglU({*L8Cifn+atZdGm9fIwAvQA!JTux3-
z7xq?{gIW*$$8|I`9MaO%K;r`Y|NZg~^M6@3P5gU_kMH_}t=!@hrcV!ltN8uW@sQg4
z&(6+n|L~zeMMWjy<RsM}e?Fgw<+zp0K0giYTsm!<e!Sk6ty@_c7#&Qqu6WdZzgwRA
zNK7X};pmFE!)?66FJHb4I#d0Auey|3j)s?)*OE<-9wjBFq^N+l&)@ub=+Ge+hK)5p
zi&n15y}fNw?C!EhpU>NiM@2;i*~acJ6XoRO-1N7(si|e*!i6G>7cW-+^XJczt=ZR8
z3j6x{m>M!}Zd$r#F0Yh{fUB#k=&`Bd!FRJ2S_EESTPw`ql97>NdA~JXd%do4`nf4v
z7Z*Q22U<pOb=_hUy{+J4kSmNs(ZzRCc&k(6f&~kT)K5;CHhFS$@$+*B&z#}WjoPAN
zeA8Xk)Kqli#*GF>Mozc4<u1K>cdMehI{UI^%Op&*L_is#r-x^bWigxYY_qAlH$$Sr
z!o-r2l0dD?vbVPu7Ct_fn$*?R1=^t<5g9pk=EeBAJ9h113!OS?Qd76M{vlAua&=7b
z!Gi}Sj8ZtVemr(}adFX~Hn-Hu#$~cIY%Rb;4J|FM?Rj@6fzBG|pRONY_io?LojWaR
zeiW?T_I!T*zs8`IpaT2bo14no|DVsVpSOGet9?PGD^Hs4sQQ|<^joNg2nPp8#k<Xq
zlarDJgoTy0H*emoU2bLrYErqrGWprl-F<kbar&!GU0R*}{p=r7)XHD}Hh#VM%o!gM
zadCTdzv$@bZ*zXF0-bmZDX=D4`Pv=tm2NM5eC%qfXsD2cL<c*+9H>kCZ3*aJW~HEh
ztN7=i?>}jmue(qp3~EotWo1=vvj(*&1rI=5m>rlcOcziq)y&7Pb48f%Tq{wo)+YUZ
zS$~(VUfrF1yf5>Y`<#xf7fYkEIy+w7TN}L{bjv5`T#w7X3#-yTJUF<c`un<NvmISb
zL$psmpQamK@axOVTNWaFRo2DqT=Y^cK(?r$;J^aMW|O--N=m=PS519Ve1Bi<jqUmI
zxiVcKN50w^wez{Lh6aZd$G#t{zG!P`tT3zl($UfJg7q*bD0W<yfE?G+(czJ6aeHou
ziJqDo8)z`==jZ2%DJd=A-rjzEH9X$6TTFMs(xd+;dUNyhgAP4oSde~x-iHq#R!pw#
z=y=67*<b0>j4fMCKrNE*@9sX$`~K+@=#bxp<mAQAre$9H`}_OG;^%%04wKb<4H6D8
zWZur-|F`Yx>TqU;uyrw-s*|qXZ13<8o>3z-(e2Lea{l#uK5<>TbV;knvhWd$Rq3l1
z`+q-}*YEk%B^A9q(mem(kt3bLj0}6LzD`n|v~?%H;6$|*wm*A1Iu1-!cE7NrFc~y$
z`1|{N_p~%MyI(JqHPcQ{)7`LryZifld#~Qw<~!RAbe<0A^xAon;$mWLr>E<C%YShR
zDGgrkH&w_#H#Zk_ZTgGr>*aZPc|j*xf@UROzI+K9MP=iaY5|QVTUq_7ul)1lBWT+%
zBg49N>q@ur3kJppzE=PF>+9=}ACJp}2JJw7CkD`R_>8-|woa+Jx3^mS-@kvLF@!6#
zYSh%!loS*gHm9Af%KKzl{w~I*?$3;q>Vc-Mt*sA1UAcSt_xH&*v-3~8w|n<)P}^{>
zRVmYlC*O@#R6y4%O-YiotpW$l^YinMe|>%Z;hQ%-+j4Iw9cW-QFg2ZewfxtY%sYE3
zg&95^lg>YI-~a<?4DsY-b<lFtJs*!r8<?B73owB$9yvK#ed64?z4L6Vr~L$_oC9xf
zZ)arq`}=!)V<Y3C!-oaM#Mso;)xW&F%zp0Nxu^5WgMx%Wi(-x(KYsYk8J_ifze(*X
zea)t=t*xnMW+rB6Xt?QfPe(_?-o3U_+j2Vh?6I+_`oh5w5D*aXw$^L)sjW8E-*nc+
z?q*{E4JVyBa|Sf5v;Y4;X*V}FP+h-1Ztp4E|H;Su6m@iXJUu-PjEtHVFIHybm*Y`a
zUtaXMbHzL%$Yijs`MM=bTr8}txXR1RC(fFs)grKH!2$=JxIGavHWdL~+?<?(3`fq*
zwa&h^Ma$F2N2FU^UrbytrXnpSFmPhVg$0cg=6Q2wMTOb3va)tY{rI@JexYMCTc=|)
zo2~J)$NlzV3@i*EU#(srCShLpr{dz?>T(d?SoSt*<)1GvFE5JRoOa33YyX_Nb6rbH
zN@kj^-1h&^=ktd^Ti^TFu3hWl>nr;Bc)xz}o|BW+PxoEjUtgaYT~M%L!=_D>j!H{O
zb;;NLSa@b9=&UXYDXD3e`+9qO*X*5ZU9R_i4-+$UtAJC@r<3YIH&0E~UcJ}9bbac}
z>@9_l-4gTj<J0y(JluZzo2H(g7`P$Cr>m=LSpV-2S3R58>NoeLm41bDhut>0)Y8JD
zqOJ})cyWpv|BII|6Q7-#`Qq~Oei3m{#|pIP;L24K28V7jU4!ChK09{qv^9QrsFnM~
z*|VY5zdK${ZfRk8`C8GrEkxq`<9_=`FD@>&sQRJ-x(|lo04UYHecKDVV6CCCkufGF
zX2J61><>KOC-uwOE}3_3x$i6!P$#Ep+qP{X%Xa-Qd3$T?g{xPm9tG{CvnYKPvh%o<
zX_knbO@)H?>C>m36A}~-9X`BtQ||3;iKnJ$o;ZD)nIR%F^5B633<oBAhJ%)jpPOUJ
z%#d+shoO{tp3d9sj0}$S^z_L0FD|dz%pdSM`zL5L|J+>b4coR&i`@<~=lnd|OTR$}
zXM@IN7!KUKC&$dr=W=?QE+d1gsw!yvET62^mowXh0{<?Y_T+Q7{=Np#J-!MmDlCkQ
zj0_E>udgl4zrXLqsZ*1Z7B5<qke%JV%y%{u1L$mmsxKL!IbG07ei>O=P|A37V<WQ@
zN6qiI+dq8y(lT|bC}=G0$&)8pTS0d+OBkp1ta<a~<YWn}5{;-W8IAL7tCQZ|+A8JU
z*ZFF)cKAAv_|<jSwX?syxq0bA;e5N=3Dc&vc~93<G&Kcn7h(UP!WeS**5@tH&dyf0
zw3OVrbLR}(>TMx)@9){Nu(2r_8-wm#3@T!=`FTgn-_enATh7g<c7FLscXk$M+}^f!
z%iGWA?b%@i^FcrP?f*2~-k$&X++1r=6M#X%+FDvWd>sn|=vdwQKOfsg?l1Kg2Q9|?
z{Os)N53@qj<rh4=9<(w<$;L(|Gc(h}-+%hqMf!6$Os`uM>Egmt_U=xncKEu4e}8@k
z{d~Xw|36r$2FJ(C_siS2O`9gRtMs*6tph77tD>Eq9Ivz)3j>FufUK;pYFTS*>y2%>
z(x8Pada=76{QCO3ps?`Z$H&J(XFq*;cUKxT$~oIC_rk8y?3T8+q*GHgL-XPj6BX-z
zy;OfWPlF+1Z<Xnuy?YDa-Ld@g`Z|BFl&Moff`XWS98Yp`^1UtoA--Nqh05RGn|d!g
zIy$`S{+~ZJkxIt3ze;Azn8Cns=FAz;1*w_0zrDR37!nflOk&@@eHqu*NPhY9#h~g-
z#?5W(_x<8(Yik2-a{t0_%wSXVW5b<qHUEA-moQ9X0UhDKF4lTY#73uEW#8UJK6&;`
z$;?cw{M{W!h8;V1CLU_xym0w)^Uj@?&(6)&UYq>ucK&`vYwO*Yt}j}a^*HL+&!3=W
z=nM?P!ooLecdxn^!VsV#a_RbHb^l|a+LE1L4s-?*X!;q{*xgzD{MxmZf*1GCiBgl%
zjoBf<&M()pdbKuqFQ|W8)VVp9%CqlGo-m=|%o!iepEl+1WVpDvKD@Z7Jjbq9N>5LZ
zp@ET^E#dvWy&E=cIIy?+`-1iB`{&G&nK5GqXuLi&Z~iK|(7m9#VTxujX!qut`2BHG
zO<6ZLsfy`FvE=9H-<%*T7&>p;HnTTx-!ApEUb%AR)O+7gP1V-W)MWgSl5z9&Y42@&
z)6dTX4c!K<bSW$}To=1rtu}9kg@uJj{O#Mfz2l{&qz+xX7FHEswaB-!Q@p|GYjtI%
zV|;x4E8jh3Z>5BUg_pkl{_d{x?{9BYe}g6kHf#{sxpSw7mzUG-vbS3M7`Co3TbKHB
zUYtXn?NqO&U%svgT)ZUZ+kr-Ai-HFXB3!I@?%etCuw6ds&ySBAwrp8*^|SJ#di||m
zYMwoR{`k($;!O)*c~94S`0?@a4`04aIW<r2QrO=3O(~skob~PP<!{}(1xip~zJ6u2
z*;yYF9v=Sd{9dh)uPbgD<=wHcu(Emt8u=0OX8<k7O?|7p=#{4JlG?w&zH&Vl5*7xv
z8$fHUG&MChxopk6yzEl#WUXb(mStR7G4ad3Jx8{c=*PImGyA(GY28}(=*0_->imQR
zh27tctgWTLzq>p6-ty(k!EOvsOkB9dR$YDhovK$(xiP1grymMWd2?eU2M5Ol-KnZA
z2U@wsK|9)a?A#ez5w9zF)jrG9?(w5X0U;q@&bSCOC@Cv14A5BeG<4CTMGIE1=9ZV2
zzxnae<Hr|w7N<w*yVlg$aB*{={-PD)77`+|Wy_We3!T}a9s3WTKQ}L2xKPLMYkT8K
z^}w@R^6p0c`ZYbiZsONTD@DY_K(p9!ad96$eLA!<c=?4rmBpFAr)q~6{Qp;b)9(8E
z_~~ss7*9OPUbN^*@YU+oMepy~s;H`ZzMpNH-IjKCmgoDwfBqCaJvEgp{_4*^tMp3a
zyoH5@K^?u7D_7pwQ)%4BFVAOfZJk-|=EkPxGb7;bW8sV4uDU1FD?68IJp?U=TC*l}
zb(n#%@#K5^F~<{r?ko*iTDxxDI?$QBjm+!}HaiplXFfkSmzg0_$k!$G`$_fr9^2P}
zRtm<~|J}M~xgbN>nh3?a(yP|5@2~s&>)^$Ufl_w`oD_6)e75<&{Qm6OvrTa)b_G;T
z;%AVttBLq^>%s+rva+&GF25fg?FL=c3To?2(~UlK@+2o{oGvCt=Fy`^r_O9y@BM1m
zG@KLKx@Q~M8$LfjKmE5q2PpP-J~!6V0+llb<>k{)DJd&o+*O*Lxhc@mk@4JI>-L4t
z?Mw_t;JLDZXZs&^O*->RZT_mNkj;Lf{xO>Qiq9TANVsw9)~R=r%8OPN7Z)F%VVJxj
z@2(ZYfkm#}1)rXHf;ReIxP1BW!^7>Vo9CyWou#Vk6<_m__1T%3%nUQka;3g}`Ep@h
zto4y2M-r~BiM(WYdAa}k4aYaF(y}_&Z~u>@wzhW9_j}bIo}LqZFL82kG&n7ExV<eG
zv~8waTwh5|jqUNV-or~gCxgcO-)_I})%|vR?rpJVHeRjZ`&U<o7d|}1YGGkvQ#@n$
zs^1xznJb@0MMXqB041wepcPg3_th%4I5e~IE(p+2Xla-{S@``@^(xO5sy};rdRp4s
z+e`NQ$HmE=n{Tf_+gD0jT3dQne_vmlz#<>erQw_la^5G0goG@;wzYcJD!Hp4L*(oH
z{bO$JD%Dm}R{pssh1a6~pADb99Z!0Cx`nm%;gcshd8JG)lx$wn20DiG^mKh?B_$>X
z0XaFnXz5_kLe+`7UyXBbndIExCku+ixz^>NLS@>`<9F}wjna+}S+eNJ>07s?w8Pd+
zI9tR%?~BN)X@!@rUOhTZH~PWLmz|FuC4mw(Xk759dBz2X*VorizqfnGjsqu7a9CPe
zf_fFVw&ivoIN-1*a`Uo7W?|{_r7_;p($YQB=6tWOuXp$K<oxyZHM^~?ZANys_v?8~
zE3Up57yP^X>dy_Jtg$X`ua>u1a&mHDOiWCggq();%@up({G_F&Z`OuHMn>)^c^R~|
z{f_tb&)|_8)NznYvub6E!tJG{r9pR&y}P>`bQSM3z1Xg=udjo~zr)wZP4&I8K)ikF
zQdK^AyB<~VX$MZ6SaGH-I5-$IK=R{pzx|S@9S!Q8Q6(iNfByVA^=5H^2B^ApadVqC
z(;-;=+Pc{8?f0s@&0_9tOm?4RS?pHkzpK5S9h9)QW?wft{^G_)<#Y3FwRcZF0a;?U
z_L6<%)tm0I*Nd*M3Y}q?+;(N#p+inLn||M~`>m_yJ1b<dRmTg~pv&nh4=wwxf4^S8
zpM_y#@^QYEIY+xhnHnsLpY?>8)%++}xPCoo*tkW&36x$zt3E(${<=U7W;ZvtM|aEb
zPrWKACZ@*F@$~fc@ST6(@BKax)FS{bS~-<=ZjNU4pXlf3<{q7ATg}2CC?ys3)M~|=
zS9Wom7c6jy*<I$_($>~h`ubYu`u+c+z7@O73ZHpA+s=1oNSAi_x{lc0Wu3XVw{>n#
zKi_rd&YkD)rca%!>Nn3ub6f6hHNUx5s+%@#T6O!4m-gR^v!G#a#g>XMFD7zua|>_J
zyIb|{-^r6FLH8tx)c^fDeMjx@Z^p^o+}ua!T9>;dB`rE};>3!O->WwF3%uGntzXVo
zXyU|)N){FoZ*Fb|hwzgpPeQ8xKmWT|agn&w2B(hY?>?<pY6Xo9DcpQ?=&Pfb7nfe#
z9u9MJ^GJQ|t9=h1B!Kq(oKczlTvJ2C!NrB;(W6Hf)<&D}*tyd&K7RitTVv1)!%LSh
zGulWltND60JoUD`ZIz0zRdD6+x7$-E-+OU0WIpS`g9oMZJnsgqHRfS(@0Xi8kHw{Q
z{l0&D6{}9ZS#!DCj+u$+%C8e!9zA+gq|P;U`JTjmr$C3PeF@<Yn!ja>Ny)oAlAF`c
z9(r+c@yD~~_aE&4|Mz`y{V`DbVdItZ_}(+mqLAtH^YiU1SFYT0sHtn^O3kS4dA$>r
z-JMp3B%PgQdg&E6XjZJabXLv3FPHs)yj(v2)h4c)pjP#1MceLu`|Q;D_9l3Fd4aMo
z=u9FB<1`+IgpZGof^O*njbEyIPn)uPz5tV)oZODOzgB*8EE@Ohv5}CL26g6V&Ybz;
z{(gH<%j)csFb$CpA3lHvVgrJL4%HiVbaZ6Rj7r<R+Iw}_+LXN!A@wr0RU*gx<)^n<
zH>zt3|M>ko`R1ln(8`ZfZ_kElh=BTCA8uu@cjRdN{rx@Yu=)*Kx3(@^sJJd>CzHLs
zJt!*87T>&dY11KhtxKoR-oGDTC9-t#<jHN(&Msdbtqeb@el@=O+Z)D!Z;_YYy?b}!
z<jI5o{{CKSDx|$AKqDbJnORy|IwB%MK}UyYu2rd%hX?4~*N*l3etC6Wy>w~P*$rwz
zn)#NXA!nO^rAx&RU0of{=<v<M?!ieTp97Pl^;Vrab&9L{`@7bS8x8mU`;`qk)h9Ix
zR0D;s4oiH0Z|{zZk4m3De_nmDN=Zp6DDk}dUV)(C;Du|~^4i+kM()hI>u@z$V)d!J
zcV+kg`NYk}C&LjRf8R)WLQYN&s0FX0s;a1_#ugP71?tSrnKS3XlP91#`IiqlK?9mK
ze^z_yvm_@!E;=20zDaNIg7VOxKYk>9dvh~lM}Z<}KL4d=)Pc$K!b0=2{rvbQO`cr%
z_!uv!GI#HnJNo<m{{C-oZ-?*B15JwYf@aMvEG!&WhAdjJfZ^A#UqL%x8Ln8jZk?&s
zzdt`egE|av?(P<^tE&Tz=bSzQS_F0WEN@<39s{WTyw%3Fy`y7=-9y{?Uz{>7FXM%*
z2KdCzFUPQ=^3%!yjSZ!*!*=Z00qQfZ4qIFG&JHvQ;j+W#_4W0~zrDQ;T6}e9XYuk=
z-LHfN1+SX>*u88O5D)+@i=1Oo=oBU=EZhuoZf2*hB1=(m@#!h%IX46p6%`FkO^+`1
zo}P8**`!HAnPvYrCLiBW_qS?I#73t5f4@mTdh}?*%$bpotw7TnCLmKmy;IN0YKbo|
zEe(2~SXXBU+G;w#?w98_ol9R{US8Vz;<Wbe>hF4a_xHuVJM;D0+UVrl+j6&VIx`8>
zH7j}9lz6x;@mP-}Xv;3>x=Wk7KN9u-eyZ2~`}thzx}%HBmqjb5R@=4nNH!@tw_Q25
zutRH0$;%+n@~#67jG(E{clY*o>+k;~Bqt}gX~*8`?@G$b%w9`{Zr!@IY14xT32P!Z
zvsG4BN*E+C{QErr|AVjB<EOv9zdqhxCt|~bu-ogFE@iE*uD)^m_TuR6c^X<;N$1rC
z1@}%7S=45}P*a5K%j@g?{$h)?b{0M50)^PxYK5s@s-X3`ZoN`dciUQ9OS`(d8kn2c
zr``O#Wa(1R*Bx0-F)=cW7A<=4<_!-!JG+IImECu_%k|CcVs|U)>G4gQHf>fO*Hz=~
zd3O(ezhB?qDXgBgOVcH!);fFX^ULSY^Eb2euj_Tb=&fX7A@Td$+tt_h-MV#4RBfKa
z&(lVsTS6{x&M^AOGEb)|KR>@8)SdY8@$rR=7ab?7`7SYalQz%O`T9mkP;jrtjw?bJ
z_lHbY^S!XdQ<%ZODla%FXu^~!EjMmNw6wP$K7O42?X9hs3$#xMZMC+rhyV=&yDba=
z&GlVAtFTBa>67OdCId6GX=@E<&6^ju_FjyVl9F#SNOaYizf)dcU*EoSr{$cvb05BW
z6SMSpY$s%7c2Skb%8)}>uZmt@AAdZ){;#U<wxGNEubw<PGA~$3=@N(9e3!2iwrw-p
zRr<Ou@9r+p1`SY`D=0{4(xgcre!t&;_{tTL`8A(9m(BKcanWB`HMQp5y}i<HZEY3L
z=a!q?6<Ji@yZpL@u8z)?A5x3=|Nm#r#l<ymx0hQ@jm@FMhaWzFe*89DN5`wqs;M>S
zW*W2iN|}Ou!c$dMb$+g)jJSCFjT;e}9s4{dt8Lx2=JKId?uql}{k!wz^N){@XBee&
z{rd6}w1Q*BycOXm)djEeadUG=L_{d)>G8Su$vC$2$zIrB|3Aw5-xANs6Q)lO&pxiK
zv`CzNvcHlRXrDi5eF4LRhlks*Rta6*{NwlU>#sg`bi6paF!Z`8XmK|qBjb+J*J7Z<
zveI_EKQU1mbbn6N)+|<bcJ`Vt7r~o^r+6(DF)n)(0Xl7>{N0^{8xjv+SQBY%l7A0$
z;<THe-#O#g_qS$??<#-a2kMp|eJOag`q{H*8#ZiMaW&a*o{c1E25_pYyL<A51&#$}
zWp3~9?FFs3x?Xk3+r?#8_;cI&A3uHsT{R23GwsKZ3ebG-ZO|U<XS4GUUAZE1xQ(}Y
z>QqrDXJ^m}h$^b84`=7^WBl;s-)7J(g^CJ`pPwISKuJki`QzvF_R7Y_!n@1g>urCx
zV1WYYfXVRnaWf2)-D2l!UF3d$Z*TREnx95h-`+$n|2oI2l<VcomzRDkyZ3=6hz$%3
z8v6VBw`|$+;c9sN!82#p_}zANad`!DBg2FV6Bw+mtw94`hK7bgKiBX7$0aK(3mP6;
z9lrk9_4xW;=XSn>=g#p}e}6Ys7BoNwTC`a8MdRQ5|Nr>g`Q_W%+u08tI&^An@$GH7
zpe4(o!7<R_ep_2xX;q(#{w7de`1!nj`{vEYb-&-5Z@q4xdP?NQ>(|O^YHZSGIR|!?
zz7`M_ZQZiPWb5|Uj*eH;q9*w>L~KX^4Lzo$1~2z>Eh*WurhM^+4FYLtX`nH?qf$~*
zN$>9L4A2l^n5QHE`03NuGiQA6>?-vZ+nst^474dJ|Ng!oZ@1rHuzr2Kd%A0gy^6Z}
z;q&MHl_xiV7R?twKL^^6(bv}(RC#)uu3^#<j;-6<!FH?3L`Fx0=225m#m2-;m^ZI4
z_4KrdS5^jl`1!ddB`Iy%v?(D!U%z|n#*K}Qjg4!3wtn#{E87+#CNAC%T5qys35yfQ
zi<d929+VWkst>BB6B8G@z1mmv(}-a~?eA}?+g8p?^>=ak+8$M9r~RrjW>*R5Anztt
zZm|U`R&eaC{(kJ)+1a2AKh(ZO9)7k|T@|$01(aOo&zJx9_ICT*+uN`IVd+?LE+r*}
z!C~j?4!ghnpz`#G$+jz({{H@MSp3W<B05^x&`?lKP3_V)*KV=U-#b9d|EK9jPnbBd
zvG(^jPwtTD$jGa1n>$xbv$V8iWKdF4`f!k4{=_y_b@l88t}ZSi)321Be||YAC@3H(
zh)G^vKJroJ=V!i0jvfvDy@OZUti@?z!_uXypl$^yelPpmukBS64wMD8{7XtpL5E^T
zRu&c-y6bgxyi)8{oxe7Ed)vm1hD}XP8_M6usi>)embiniwU9E)>3H)dM@2>D%8I^;
z%I=G*zrVY&uh#n8`}^_Uy6TH=J$dk;p;K7>(Vw56IXE~D+}xZlC@tOH$jqMgNAin{
zOUQ4NX*IKE%t*Mr%ons2sDY6gw4%Ugwi$1?nC_uAUg-rPS`Xj7i(70Z!o>>Ow-y^4
z3%VJyU*3M*(rdzjxlx-^I6+$qK(k2B?R+0Td~hf$GXq^A=4;;D(UBE7_x|U~CnqLy
zZReFT;n-XC)hQ=O=gpfp4_>{}(p`FGbGkn$iVjRxpFbu2-kwU(*@0jFJv!Q*niLZo
zYiia#z2nsPFYmYP+h=!eeSAM?#PRw0`R=pLa+g#)*4EaVUUX4XTBR&izis!@rK(lm
z-^J$bT)K2ATa=4S>C<m-Z+G<c)a1p0wgo09r>5?$`ua$?zoX+7W3T#rmoM)ZNM)Wl
ze}4UDt9N&Ix9|V=YjxD`vNty-o>UhMv<1y#f^L5S?Z9Mcm@q*Aw8`-OzTbK|xw+X}
z=kdu}CH(#Mb!(N6l2X-1gP$r&U*6spul@b)XrHXL$z2g8rB%;O%x;60uyn-PftPD_
zc;wEg5fT&>oOlbQUP(!5YvL!=MS07@rbR_<Okyp2dn;7BebMwIXJ?z6-eplzQo7V2
zr9OXt?KjE1ySqZAa~DqUXl`cSRq}Gt%d`O56DLnPCM79>?kIk_EWkD-BxK1;HGx3h
zs}?_F_SID8ZfWj#)tP;LouZ+kpmx}r3njrT<h=a+u9XOPtZ4huqO7zk6tw1kciCG3
z8JRU8BNhi}T-cQA?Q7oLk<}sG2bw%3?0PIq3gHvJ;5k)f?{Ag1F4Ix-oz()`q;+FM
zB4}iJmU(_3XxX>Ay1Q8QlM{lV^AguaZEb39W(G}Mu8G|(=Cw4a%%;A+9@Mf;KGxIN
z+{|3{^;PTI=<Q4l)AZx}_++gP96QDax<)i9DQTveZPgc!#>U2i^78hzYjtaCYCwne
z?Aj~f;-ar;cYAKf6+JyYK7KhH2M-U9IdkTKmbtjNxjlM5zaF$sw(R{qUIq?+{^Ov1
zQNh8%Jkn-7VPRpQGof2Jg+Z;A{Cz*&tU#01pzR?uX3l*0^?JN}K!8A>jAhf?+uK27
z2JiQL<^$c6RQvlIXhj{UC$(kEyg&bIUtiNLc^~P_Gn0XVbE>C{W5_+(@9*!o&z~>v
z<Lg`a;eq3q_xI&bPt!d-MKjo>Y;8x!D_KXEkZv|!DHS$esV`?{;Mu$<ZC$qJ!u9Lo
z{PK2FPJR0H3A8G$ps-N0cuy<0xL4}$@9)JKKr1giJUk|x`uq1UD?{YX4-XHsG8F#$
zlDTrtf&~ts6>TqGzU=(+<x5r!=c-%=mw<o?;OTeaGl}I&mpGiAozKj*7UybZVpy;g
zWeZ%x%HZWnR#sAJX=#`05PRm{RNT6C3pCri<U43en_)rt`nZg%tEPtB+nnytaKQfm
zA7+LVCr~!X6{2pCi?S(JS~Oj{{cfj+a!yW8LPCOqwz0W6I|FD>8AA-7I_LKFd-vq3
zs;VwkU)?yr@A9>4Y#&rQSsPkfSU40X%$?h-=-hT9DU|cw*6iz9CF@*VzSzI{siM?t
zU}CbSV734g!-kTVL7)poxy5uG0s{rBzQ5}|JKOy5>C>yvfX+;RD(77qpY9485&-q5
zKy!L~b#!$NYkm}f2BN=h>F9W230i{t-|PGP`^V4BG)~OT?LBhDWyXvd9=Aa|53;{n
zSX(nQL~YB_Jlhu@s5Q0X&ksW>lZ=4uuY!Vm-$3+gYHDg|YBu)w_v?JzQ~6o#(W6IM
zYv+mSMjg0yOA542Auw=a&h1A>yA$*B`c|x15w*I%<3;N6CzCt=O^w=~$D5p-%)-hF
z>aBYC_#An5b~bEj(aoDTJv=;C6xvo*RYmNnFx<3h(}UNqyEmtwfAs3=>WFPQlAsk%
z=J#th-$|@fQd%X)w_Et){z;vkoMySVS}rbjPd?DV$iTqO%?;{{fu^m$e{bKtyL#rm
zQ?EEUI6xPVE%Tob8d+gz=<DM<)*}fz64=xDQ)kDDXCh9e>Gpzwx}Y7|3?7~_zDt)c
z2i=lTR#sL}S~^we;Fm8YpjtvVYRihLRScjBnU3CG*RnFRTibHE+1cBptj(^@aa!mQ
z5HR73v73wjlDThwsw}EE_4fAu^6u{LJ4N2!r=!-MK5~S`w(84@tI0xw6J_52Q~|Af
z#wdbGD#So#_(S2ojul}?j~`bC-P_{4+-l;C87siWFK82N)YUze#Z#tCd2qM<{?(G;
z74srDCb7!M%9`HgQCg*_Hs2*=bx%*vg?+WvI`R8rK%Jblqg|pGu3o)bV%)K!tpe2D
zLtUkfyGRAO2E9f>_D;}h%i?DXs=vSU@bc2yeD?l*dC-X|UESS`4E=Jppt-?2ckd=<
zXM^TM-rV26|4bcd`}>hjVbD@J3k!<}i~H>k-P)SHFhnc0aI(6;n}Y*G-rZfTox<ve
zZr$3I=QpXNL+i+s$sJct9X-l=ykGwKxw+P<Pc=0)K?~x}oISg6@#5y_?RgKchR1_O
zgFy$&^+=g=ojiFGG?D~b`|=ia7b|EZ<?%k*iq~tmgU+u7t=SM(^Epue@3VZQ?8lEE
zEeap8fVu|qbw3z=XPbqdwiFh;_#afKZmoL1_d96cMC|Uelc&l-rT2%gUs)N>%&`<c
zdGaI&H}_%C9PiO?@yB0YUIraOkalK9V^0qc!vValcirH6Cnu&iZ{8HVyrg>M$dM}_
zZwd)sybM~Q69u~8v6<iQz)a)x33KM?OnrZ6r*K$U7|8XY7USF7+d(a2(2QCVXy&x+
zO@xS;7-+Q`15z;=6qA^!c;?KR2~($r=1Gg`L@<bpPv2$fsH9Y-ChKe7&=F_1Z{NNj
z_5a`hPrSY^_Q#*k=L<hS^L24^Q!+3R*tKhyhlfXl0MpHzHzkZxI&$Jeoj`|wG5EKA
zynOjGXdfP^XLIu8Ne>?%m#{FgH*epbzLJ}p+v_*i>gr!lA;G|%paLfAJ7{IhwQFHg
zRiGYRivXxk!k}PlE6cE8{d)e`*w~w=FI^Hk+|J)Vd$u$~!plobGcGOR1a0J4v`7gw
zB|Y0bzis;T@SUZvU%y`ckf*a_g%YS7-Fo@jwPP0+I&aLnss)Np>+*LlpP!w*xYS#m
z0d(Oe!-CY)({Ai4U7ZuZG^q1<zdY!Ks2%nH?b6Q8;mpp?R#8(sbmWLjSM-*QiNE|h
zIy$s^ZRfiz5!|<LpMX=s(^FGH7X*VApyq<M>#SM37F2tRh>D*42HG=n=ImKPQPI{Z
zQ$(grnR4LxarbEz_x4nRZVAY;7KiMWaakfLYgN+F-QB$<XVU!n^SAi=`}22;>$`=8
ziPhBB7JhpZ32JeGD&s?~+#f+5(bK27iD;K+yb|f`SRo@*rmocc@$1*4)8p$p?P`A=
zIC;`@o34Ta18B*DU9DA9b2B4@m6a7}2o^M<-0H+AEG(RJYYXRM_x@uIjLZxSVq#*T
zds}*XdLF!g&tG2t-DvM}7ndcLK6afR$uY69j12Pie+qZrw*UD=xJSlP=>Pt?)^33k
z9ZUv)SfW>lD8)H!*eW8pUf?6cBi}s@OCNA<+rDk{8A+WrxtG$d6CJ0q-kqNMcb^f@
z!=;jSZ3dyCuCdn*<@%E?Wa=V=r=^~G{&~eJtzUoZdfXPjD6tY0G@O0*QQ7Xh*XQ{y
zzyDK!q0Xm<X|1IUpP>ZLyXDjRzf|p=;kW$$zU3NS5jtZ0^Tl01ewo9tr|$>LrQGee
zcf_qPw2@2Re%p0>wl-6Rcv+3Y-Man#yVfP|jXR#UIkQ@ZL8#MT;qKF-%xV^fs7I?*
z85k~g_~RgUWN}vP{QOhq^wUjm4H<qkA5s4hlp49smg)bMtgT%qQ!agzI564D_p(VY
qKO@6|=pP@>t1~cU9wAKFF(z14s?7VK^^t*rfx*+&&t;ucLK6TOKBBV#

diff --git a/docs/_static/orders.png b/docs/_static/orders.png
index db709c873da885c3c73b42678bbcc279f582c836..0ac19aacd2c7ddfe9cbf1ae6d670fc8725b76206 100644
GIT binary patch
literal 16680
zcmeAS@N?(olHy`uVBq!ia0y~yU_8#i!0?cRje&t-Z(W@(0|NtFlDE4H!+#K5uy^@n
z1_lKNPZ!6KiaBrZmPdqKzsCOHzF>-mk#l%+S73mnpmfL6U}nKiU9mSCW3qkLT$l5G
zV_wy(8fbW}BAL~?$xFmEOJ~cCqkT$UCV_<xw|@QmaBk;0g98V6YWJQu_Mc;%{eJWJ
zITojDPu*h@6qHErF<iD`y;tV;2E$_#+SwMCM#m(QwMeGEc<*NHF$@#Zi`~^SW5$e2
zd2HH>xwp5uu8rE-6*F(La`Kv>h^<+o-`?MkzjZc2^~m}2{C|Ic*DtE{>+9L*b@=#k
z_TS&$YQIg}kfg@ZbglG*srxaBWFJ;_0@Ufldn!LGa5Vj}s``>K@s(xit0@uf{r&zM
zrzY+?d~%}Uu}=@)zhD1lo;>qP8<3x7NKKqLaYz0CeV4X1G%%#3q)Z9wj_`c+<b*_W
z)|<P#!~bmF_pkkDP~85y-pT6z)50c4a6%+C{8n-`HPrw6Jpa+RrezCmZ%XB!Gk0!c
zN=geGuT;YAZMm%PRvV=5`}IouW7Ly}huaI^-Lc%UYuBN(XMHu_9cW~Jab=}&ijm}!
zAkC<4Ii01iuPLgltB23sxN)O|d7jLhH*XRW5*Sv7bd|lmmH7GDS*uR{ci%*~lX^CK
z9XNixy{4wdq-$@<OCd%DhAZ20qpLnW>HKl;&Yd|%Mn+er%{EHylKB4d_3HKeg#O>z
zo*%#V6py5l%bk4%51ovRjFcFjJbI*b?95DK_uRP*84nILdcCdx^TRN7eVpz2imUI}
zZ1{Neu3Ra@g!%L18w-Dac>d&s#A*?)$ujnS5%zz-2nz~s&AAzLr|i#<k1?rz^7iwd
z^Zz=&zF#;t@Kntl8DC%DqxRa99<K~u&b220-=CjZuTQ@g6%Yt`^5aonztt{}zM811
zhR5ujT)fJcetUV@{pJ3KU%SJ?*F-4(+nIWL+K#ffQj;c6-dOfF>cz{KEANH}o~qGN
zS7+Z{{@%^Yi%Tzd7t4dguavnKyZ0YEJzam|oH;$N-C~`$udk2qU$aJs!NJ3$V~4GU
zg~a>&``we0l+w=6)6M&Du?*y?d5@I-n4cEoT;G38ODlKUuEf;f{dIpCME+PD+gbel
z!p3BG28YdQXFq(uU(d|&?%v*Rw_Yhm1|1!p51*cTe{`Gs{r!Dst*J`N%FI<&RXeJ`
z>%F?ZUjLe9)t8K%ySqdgE^N<_e{+BTevi}!{_8U3Z*Q?O%rMOso2DDBHtpoOb8R77
ztucD-D_3d?2@5ACBq-Fqd-ba8!-oO}hl&b|sBJl%#l^)-mMmdlSmrmktC5*~QRwQh
z6+y0lZ>%)<sCrSZl*REv*~wM4QFFt-e*Adx#T179KSJ-tt$B3u%a&K>_iL2@)o;kS
zsI>I_oH=ujoNsDwKKl0J#fy*1*xB1-O5few?EWXFuxpD(YR43RYY=zkna%0vP5#x#
z1cu#xzhmoGQ(jrCDc|1R^<E#p|J+yGEU9>*w}I>$%*#V-Yib-^{yYkAt@!!#XXfwl
zrm4v{Z{D;hc+l|UU%Px=z%0e*-`?JSlrDdNtC!28`B&Gfu6QSs8F*@ik%>u2)%<z$
z;u0iVx98tyVyOH3HT=u_`|_cy!$j@9Jv<Kd$yyr}JaD+OCQ^8J`Fk;YZJ!#?Ez5U+
z^ZW1h#_8uCJUu;K>ZqJm3CGQwHyIkFOtU)dpYhAv9eI4be`=EdT&t<8YXVP+9JzEU
z=uh$AUtd4}ZGSMsF!_j4U0q#AfB*45S!+<dgscwpUE{7d{qgSi`+{$^FZ-x^ao(dt
zpc3KVYJ+q>Az|UdZ*L+Q<lPE#Z*5`xkod(i;Q+&(9fi!AnwlTJehvM7CkbTBnKL|m
ze0&UcDtA&(Pg68B6ny#e<&Vex_5pjVN;#SsoSmJI96$c}!b0aqD}H=FZ{NOqxAnJo
zce`)gh*%T1H)_rGJ9lIlxMbt+ywwa_(t7BQ)Y*v22hX1$zb>P_qN#4Zk&)4fLx-I9
zoGX2FgmY_QGaIi^^08iN^*sBM7ZcpBU$fg+7cs?1KEBwd<VC=`Z);<AZaVPmSiii#
zi%Vf)VaV33t4xoV`_GSC^5apSe_VjrI!mKt5v~QVu4t;Lt1~mKS+nNB%a<$7-aWQf
zu(#WKYjwDOkDP5(u4H+6`PSRrLCX{-tNR}lkFS~d{P|q#@?*11vl$q!t`0vwN!9z)
z+VckwG8R8SryEpLxP7@rVNpttp~n26uOB}O%3lt6`t~hvaBwh#Lrsm%xw+Qrb=wLb
zyRC`cE!Nl9H^D<?Mf7&PY5MVft=!_zcHUn!<z)Z7d2&olOdmd<w_lukdYXZmS=+*e
zicwoK8sqDJvL5e~4X&D#^z6(`P}p8r?k|7i)~!WZS63Mr88t0ltekdsR_p2M`iIY)
zS##p!(Yx~=ExKCVH_OgEBv3={oNd(?4LQ4-jxS$ILe|I0zP-Ku_=$<i4<9~U__=nT
zRVmk8>vFaQf7S?V%l-TJPr@L9Vat!~gQr%U`c@q}^W`H;_pkp=l6JDNvnPLeaPU#4
zc&obqyay*ItKZm~EzZU()pEb?H?L6Vk||LqC6ax_EiAJhoSA9-;^yY`#@9RE-rUTt
zsj11q#TE4Xj!<&X#!rpwEyW(Zy}ez+s$|6siR>#Y8sFaDu54&1n3<W$!OQD<exB{o
zACHgsC*R#wy7X$yF^OcW11C2!NSo)m<mBiuIH*m2c&L?I!mh?bM^`s7BZDJ6JY2@E
zMuM50Pvo>t^fsQEGiN@k_Prjjeafm}*1CzyJf%+^k;>{Z3}Y)O(m62Cw)%+u`FXa{
znMnz(jsl?I?!GQH-@d+2JAB=WweNp@ef{CvH@Aw49hWk1tqfkCbY_O(j>^w!mo8r}
z{Qs}EN6M7z|IhRFpK@-O->+qtmzV$Z^ZERW&(C=8?W^rRal*rAj)kCe8&9Cu1=g*K
zR#sBF(c6wJ^PT<S%gf-Dw6sTWZ*SjG@lokmpKLcHGn>etRKsHttOrjT%D;U1a!1wI
zRX_ecR?QB%dE>@{*xhB1eqXo{u(c3W!(6&_Y09>_7KKhV=iINJn`?bFkDrtCV88vp
z8R^xa?6lN-de)t`%FoZ9TIXK-_xE?<mlqdp?9+QTcC}1SwtMvW@l-$cYpcWc@Bip`
zpZf9R$E@TlYxjpuF}=&R+bzm5S3^5{h2gP?$O9(>+wJ^Px+0B3d}kOiHnZ_I`KUEd
zoG5s2e|<l<xL(K8zkmK**peAMWA^OiLoJ*VhDk2#tTt`leAH6b*VlJr-QTJkH*Orb
zb4TWW{eRo2ty!!O4&Uj&zAjdK18>8pH$T<=<{Y@XIy^BiuTQ@IPv9I0i}e?ElY2r<
z=E!_bOio_B<-oJW?){&7|Nkh?&d%Oycy^X)aFx8cxO&|8)#2;o)@9F{U;nRioz<g9
zj})e#W~|vUJ4|V!hVJUc5jG+W@9yu9Pmm7zzPaja)|R}xQl?o~4s1v~{NVZXcJusu
zE8g-a_k_BDEXv4OF~x&V)@n+6PEyjMOC~|<)~&0&_R~=7(5yVyNM+sqW(=w6yr#z_
zw7D%T#S$(oaC|g>x^DEe?6am1oSSA_6fT;vWmWk4zHPa;vqI_vua#(@lFDS&gooiq
zhR4Tx53A3wVPf#`^mP3F?d`_o<9sUW>W}~a{?5V8eRz6&UFY8F?_H^B=jN>ZC{pAa
zd3o)I>?NX0eAX^JCXt-V;4dG}5F8x*=FU#xd-v|0IC0{@=jZ1Qb8c*~d2DNIYnXa!
ziqqTVS65a((!9B0gMmrztt|(P;_LsKF7utu#xTP;o$uM1nUl5Co}8GtVdF;44ePe$
z-UbyGC(fL4adByxQ4zXw_rH@8$)bY&GNvDHrq6$PVxlr@-<+ziuUZ=#7?#eiFbM>u
zjm>URj;Ah3W%Y<oKRsPP`TxJaUgqmRu1?y=(9yqARJ32l^vT<|y}!S|@AeL}t@^@|
znVGp^<3`8Z+j0$)j&M{|SBvlb*DGy)=;%?_ef#!Re0d?5b!|=O$H&JPM{Z7gacQad
zx{9Mxnfvzb`|<bt{le$xWS=~Fa^U1iPGz^A13x}K{v6ZqH+QCS`l8Cu&whNp9$)zM
zl<1M;$DQNj<x5{*1C<np#m~+NMLPFxeDvtS0|sSf<&xLe)^3@7sO#n|)9eci9GTa?
zdhk_7@;Ar&=MjY;--kX`<hZr|`HAJBlF2=WqH|<$QBzm>&9zz>xY&*L*wLd$9R*sL
z<ZUmr`t|h~9-F~ccW$ELv51vHItRn2eK;}E@R&sKK~S|BvGUiS&*zI{i+Ol>T6XWY
z?&<9f+??inX12NhdDkc1%=5!idkn*ty}7lO+qs=jG<}tqxA);oOT7hUWn+_aA52tE
z?%8OhtgFjAS<RP;;mmw{c|$`(4<8>;`SB^XAntkvs1d&A45%6fHS!FTk0l&zVtw?@
zF!`8*rKRNN^z(WX%fK#*nECO?$7BYF^Yd(rYp-q1zAlvA9;ST!^mP5lH#et0`V|TC
zh}oxT{_PvGpJq9)esbdV;*DL;?(MC%D0>r;Y2LiiYjxe<UknY4-TN0+e}CsSU)H{E
z&yiaTLyNX-+0wFfscP8zxV5Xl8HBC+^Y^c%rBPVdt?l{z+S=MVH#f0v+qO-@G)ttX
zx3}=c1x1~R4GWIA_1ByQh1$%-jEoM`>}w4j2KE1HuB-~>784T#DQ4rB<0&rwER@L(
z?$D&3nxN=h@Z^Nxj@`QtU$`J}?b@{&X1P)|wYA=Bc>idyC--a&Dt&cjWz6lWFE1M9
zY^$E!nm1!cgplteP%s)U>zb^r{r%LVsDhr2pL+dQ8y%C-HZ6XB&eg-iW8vw)ujBtW
zwYR$)Zh67%*SF@5c6atc!(%3&-)_I3bYnwet6q9`b~Ml0pYq@c_d2USzb5FGZ$S5Y
z%S}b=b=I*Sm(adn@#KWooJ||VWRlm^Jf5h$I^fhPh-L15Yn(K-K?a^Om$Tf&wRFuI
zum%ex_Kz)Es{_1>ba$*-qjTi=@#jBx?%QXVlasTf#&G)dlPLy<h9`~v9^Ttqy`%oW
zUDow=u?afb|KHu+y*#wi4`lqwtq<b%R<-)hHhcPW=hm&J`~H55){8&$ba(mtzOc1X
zPbH5>1ad6daeptzudlD!8E$OPpMOs3NJL`ozn{-5zP*uLv}h5-le#I+iDzaQT2y>c
zSmracsq*u)m1|Gmzc0_s#&aSxZ0?&kIeRKUtDQgp^~)E9sa`v445yo$nYFnnoiz4q
ztY5Fi?<fE&S^xe0Exxs@)}|;$^xOnRXN9R=AJ^Ca<qlsT*Sd10W*e_`Tk7d)4<8(C
zwz}OvZ{EBx?)61KFX^6-sIveC=9)FE-+z2euKD}*x<&mz8&K)M$}N`g;=;nC+xDMQ
zGBy@=@0WAko_E(oO3`Q;cg=6PWUC1iCpNB&-My&(|342euR{l$**DhwEMj427yrF4
zd|eEuqksYj)4BQf`g!&L{#f?(^c*>#c5Y7Oo7{_A&z$iAHMI}7^B-RwzTRuM<r<-f
zPfpC>dvkBEbnLE@gDV0TC#0mXh>MHAxwm(>%eB5aX1P+Jiv8Bs?Bq{RPCk;^G{5E(
z=cP-R3O+sYJTuo?{Qtl2`@8q*?wT@jBBQ*#yh-jYk$LmxExjufcJf1JXxO@)yLXGP
zyz}(*^wL{>2M##s#Ow&jjJ~|gcjDZ+z1P>rJF888SyKPXB;x`@UteFu?lRqFJ~M;f
z{MOFPzP`?NbK2Pr1rMFRyt=x2%k0Bil74+_Vt${m{}+7Amx1BPv18AoBv}|_WMw}-
zIVlXP16*!xOgSmEW7n>v2L~Eg1TJ>#e6x9n&up``TV@~7G6d<)zOf-O)0~mP!R5l`
z%cr;Ay>)As%lfG&Q;a}<F-|)J>U?<R?C%LRsX04wBUjpu4T&9nePO#S+YQ4k=Ez81
zW^@#|qPJ|$gb4wU&OhR8YAAhuE%DM4&l9IkX<e)}4ht+OO7UUO$;~bN{_bwf?fkpD
zSgoyh3+4BBcXR)H|NkHV>uYPZKh_$D34#^wDu3VCD{ZcoySwhM)vB<yQA*{jR&B2M
znDpb<FC{&_bs^u*pOUYxuI`bum0BOS_s|4I=Y+I0Hfd?;ny**GD}H`jDlvWT+}^3$
z;h-wUXeN)*OrEt-TThkFjSjp&S>6A_Qg87YGiEHvyu55j!9ykn1q}@jKR-VMGc&i(
z&(0S6z7Uj=;o;}!_gESvAtklQbFx~*#-!F;n@z0Tqdt86s3<QlpSvnyjnBu=pBFFs
zv$f*?KU>qB8xzd(@A(w%oU<-|zu&oY=Sm(O>9je$CT{O66(P=@J9l3E{r&ytwfh&`
z*q(oX((>i$>)zhpp1<7R{_m7$=jKMgu$!tHU-wgWZ^cKa)mA^guS)p(`ug&T%I-n!
ze6k!3mrfr(?A$Zkwz_QHdC~Q?zrSf-HLv)Pkab}}V^Gh`nUbt5EED$a+jpsKWr)}M
zxV=hBi_XqApRB-<_1!S*%8Hubj17PO{MqtT>rW*pT}wzvJh-tj`NQ|`?X9h>`~H0L
z_L*-d8@sFI;)*>A98&MSP0h^A#I9Yt#=*&X(p31|hQz}O+1aZL@1}N6pFZ7U_xXv+
z?g5+Ad^wsJn3<VvDn2aOGCMqxm4yY=fal=lJ-WO6J*Y2rBE<;Q4EFH%XJ>eGV<Yp|
z*Vo-EDl9HtzC3Z(tgeOz1_=p?C$sif{Qvj2pseiJWOe@ubLRBa|9LDAY9FnS+xy`#
zzrBK{CMUnVUCZj#+V}QUHcOl5DX6Nl1~2ym<$nP|!N&6U_Y`eyWdj2PCG6{Lw&mT`
z(lZH&*%CGN@X@2J-{0SFU%GUu-t8k1D<__Q>fz^iEhCgKY~P1fGOU}oZ+G|c;Q<X_
z>?(cTbz9wcR?F7x>yNIk4mU714vzlz_xJZ7UoQJUeDXwPp4`^$+mGMgo)5}Y5>ir3
zKMdFl_f~xcC8aqQg-$yAlaKT9NSpB-@0WLvijw;E<>lo3=<92vr$3*RwnvLSxyNvB
zQAtUNR}VvxuI#kQlbb=6?x9xhj;=1JkPwl)`};r{|M1C^o|@NAp7iwTVMxfz;$q0S
zxTrN~PLlP9#JC4dM~)oHxH5myB`r&{j0+6BQYH`TJ2!GUZ=9!`Jay{SsiFJktE;FS
zIDDAdJpUf3GQPDXvl%oj_V3Tn88($g>nchoCo`NVe^}_ch=+qCVD~ORPjK_Xuoo0}
z&(6+{*j1vLc6OGk+Ws?Vd{k6b7ly5kih6(e>ebLY;hC!L`xM&^kIguyqoc!6W3l$<
zmzTkNDn2qT_n+UkeY^RjNs|QR<@>K(30eE?;fog?-`?I%zP&9sVoQc#QgZUdi4z-F
zhp%5${QR5%3*-0q_piH_e>wtc9?dvrV{4n3o!uQ@|5x<utE=D!vcJFojF~eRhOdv?
zQTVvc&#hnDJg;TtO3i2I=l4f#&2m(l*m2&e?(f&@1qB5c9P>XNgP61=NVBQA`Qg*2
ztTTPsqNAgA;`T`V`}c2#Q7YG(HET*H$;_QIr{Lu!)h};u3LDMjS+;Ch#>GXfHMO-H
z>;6{Beo?89vORThyW8e2w?bz=`%{4*KfDipy0F{b65Pb<S@{6e(!x!ZG+l2@?g>?~
zsg=1bspPaiZg0W6JC=pF*TwGs@aQOaOG^s_!?Uxq+fz?Z)12Df(E;j)fGQSwdHKTX
zs3@sDd-fE(zh}#EpjX=b!eV#+KmUHee{p#^|E5iw7#PCW$GP6$R|`siGiJ_AJUvZU
z!n$nDrN<K6^X?uxGt;>6`@7hjo12#2*vEV<;^+Zo_hrU=_+*mTEPC+dM9H(Wv&}&@
zdQ5C=VonZ^zrQ~yt=_zOGpVTN+Z#zan~H{My3tNb6Av6Y!V(u3w_(c`mztVALA7aV
zX*YHjtG~LklDW9JxaR-g?+gv+=2}1g{eC~F?09u`b$h3<Iupaaz18i;>E{$oO+_0U
z8#8WhQuXoiNyy0PaO;&yJlw|1pwO2jnXIE<6E*cE&wA$Lr#3BFqGD71jVE}ypYGdb
z8-ylInX&}bjPXgYkhKV#c6Wch{P}sdhi92)d+pX-!=mvnR71<JZ_SaAX{8S$Za#VU
zj<4Z)*jgSIM~B&Fxm#8>ueaPJ6dZZ2F}Y`I{T!Ld&Xqc^4;UUhWe?LMk^EGC{qqwy
z+$(I4cXfjrDsksQZFFrm<mUd=70?F$(z`u1;E|hSAqAiToUldb=Gm^^!f;?^@NxwX
zCO&z)n69-!;A97F=Fjk(YhBJaZ{9ouQ`6R+J1uW*%kBRA`+N8N`hP#4KQcWosO+|&
z`1v`8hI@Of51%>1)6CA_=Av})_4V~rUrjyz)WFo#_4~WK-Fx}L?s@5xkf2~=Yg_p1
zOXiYg%al}AS*Pp8I_<CfyP^2GU+=3I_xIZy85s!(2rSrQtDwNJa^*@1yPAqZlUPo0
zL)mKL%$c2qkB>PDu&jyOEA{c?$BOUoWc%dp`LeUK|NQxUe&?y2`}<_o{pYbT$XJzd
zXliQyc+{<*kd@WN%+9BA^xdtk+-YfPpy8U0-(6RST2|DWgk8+oeTFxA>djVe@ehA~
z7K6q#f|vOSZm+Jcejatk#$KqC#kTs}kw#|r3A1K(WnEpRsHw?$@ZdoS%OVvOA<sgS
z_|CAC6R*32W=<AFd^~pgwD;>>zrMb1kKJ9SXkZ|~%+A-cf4{wvv9V#!4TH6>ueCsw
zi}ohvg&vD|`1HvW28J(Rx5jJTxP4nXXr%}{pUi;+jm#Ufuj}2oeS2~4?QK!l*K+QA
zc0wZANBz~cwcHFGoSYYT=^b5pHTiho!*g@3cT{{#>b%pj_yD-T@GE(7fl*9M?8npT
z@f*tCMyaT%DA?M{*8lw~{^spl?wCn>ii(Vql9G>p|NHyfS#SDd`TsxI8Nlt(TmSmO
z>0_Djv17+T`X|hs+37i1?clLvY;JCD8Ta?ug2vWfUS7Uhcew?xb=jMU8#iur+}>UC
zl4+(-n|AoR1<A+zHf-LkJ+Y1f66F^rC^`#BNOY9Fy>;-$4GE)}Jb8I}pf2##cL{%I
ztX{2cV`HN*(Ia4YS#II(#>U1UH{3k$b}U}-H#GQ|MDiQu*xhBW*Vn~<{`2R`%3!be
zzCJ#m_W1pLc2-(KTKe$u<L=9Ibv$;;Tb_Da^y2kv&@c__v1@B0h4)r{6}n&l>*ewf
z-@cvuyf>?+QdB~M!%;v$LSn__9h<x^KMuY3`(%Xc^tp3+cgFPn{r&y%iHXWD?(R1C
z@%8oI!u!<D(#^$1!P;7S-MV!@j~zX7L_trFFE1~T!7k=UZ(pC->6QD!d-cydIXg2h
zIPl)%@{Ua_434k1`968$sR#f5{x&c)blhL}SAoN6rH@JQJO9;MbuYMn1+IzRZPuZ2
zzG&6^(8s4YU$_u(Wo0n?)z#tGJ!2w6W;_m^_xof-YQWkk(}<`jC#8uAFE1_4xVb5{
zbNj+O>c=;1Fz{G<$!Wcote6<vgZh&JUu#{3<mCF!+x_-QFMJxC`cgglY3SOhtrKR<
zh**`Y@%^NsiHXSCsI7<c_y29<l{S0u?d@#?BcnqX7CM8v5fTy-3=CGKuUdBOuqbRi
z3v$i6*k~Es75l<_w{PFx-rmj*nw@%kd;8;OXJ;E27#s+XuWb!o9p>oo@1GOw;J|Qg
zO=R<l6CR+DzqKXv$Fte_32A9<w$<Mf9vo<Fef9X_Vs}s_1R6;9^z>X2yW7mISE@B~
zbDE<73j>2-;_*J&8ygat^X}|u)Cyhopj&_6fi0PrCrp{5GSBIX$+>&?<l^GuUfkHI
zJWVIEshwY5$<k7?t*y<X=n02e&W(l-9}1Q%U3&1~LB{)azjfXE<#e~H+uF*Wo~C<v
zo^7>&tSoPKb~cZM0mJ`a*Y_W(6g2I;IOWyHOIzmOs`&aUbl+y@nKNfDtpEQnX5Wm{
z+w<?s`T6-(9y1IRd1_^;rl$7j<KyEMKR>DZ&9~Fdn|}If#O5^K4vy?=YaIRj_>`2D
zr{-Pb;O2Hd-Y0u?UwE&-pWm^=?ff7A{4CD7w<mHX@BTlZxTVbVdNw8>XJYvG^L%~M
z*H>4)4DZ)|pSwdZ^7XZ~+*gmAW?y?^b^qUkgUn}U8ncJ44m%3+{@l5}3!U4O&d;;;
zD*X5F-=pu3o;_PuIA_uR^mB6#w(&|cF!1s58JL(HnPHf`A@#J_(ofgd#U8$~F&R{i
z>O^j0k(8AD@a4;qqut_1XMpA&qPB9mw1ln>%M@9xdG+zqO#7{=2?-5VUtc}_xwEsA
zbGm-xr=XQ4_brZfwQPCt__4E{o!zaFg;N(SP+)Rk$oTZ+<d+W*ohO}sTJq_M=cY}Y
zlx%Hny}Y~@Nt@>hFhuPx(-jo7t@$y5;lih<r$IqsU-!p?QNh;M_Se7P?_XYA>^^1Q
zJU>TAM->hxUI~MSjt(YfW=;mvtScRTa<*P8SFRM1miD%@vs<!$y?<C(SnI3#F?#AN
zL%j6#^hzEcVx4sQsmk=znhFXHt3p;fF|+fjC@nhLEiTMZR9Luh!UTayr=NlhP<HQA
zVF+33C0h0QS?{sJu76=GgId$h%y8VEcX!d2Ehe}2R-4b9J^S*i(A6)_&9w#@X=^)I
zFMgkonVDJ0{<>NvrB7eKsxp|={i*2c>s$8y{r%vS6qT8?XHVX|dGj&DSwXgOv%Uq(
z+S}V-`m~-^d$HH=?_E=67@j<TzT8*z-%~3~y@(AB3>WU~EH19yR`Ae?$w6E%X2II%
z?LrK@ik@-_3ckI&dpg5~na1f?_J#L`UwQia_3ADC)Ai$p7+zgm%q}Ph3XwBs&%S(m
zdb(Gkp`js5!>-cT%O=;|-&NYpaA8%3W(#aBfWQ4;m-TUbLBpIAw{A66Rae(Odh%(}
zrOTHWAM2IQmib;-AHFU|^H@qs%7nFR*Z$}iEM5QX>}+AdiyeZ>91N{(ZCY>Djf^I(
zi`%=ZuxFW_U0mzS<yLcKwAWqww>L@EUHs(682eL#Qc_&n+S+Gko9kasKX&XG189P)
zrLFDIfddSBdU{DawL({Qlsl}fUN05D*p0VG(%3CiK73t_;P=v}r$k*`T@!C@$@ID`
z&nWPIk<OcyHcE%$>;JZ<o}QL?XGh_Oj~^XhUt4=|O{6h{yx&DOc6Mb`Q&Hpeb1ge}
z?hLAQ6mW1UC@sBe;de3K*x0y7-af8}latdiCnsm$+t52AOD$~QK6}QduCCrAZ!cF@
zSGOX5|Gpn{vxF9}?C%dx{IxQ>U*6trx?XHTPEOCSudkDj_sJgJH2;*Ev9T~azub}E
z-`{)h)?6c`dHtlJjt<Y;+uPe0E=*i^9@LoVbZKhil~yt_5z*7rd*my(aN)v?D=Q}c
z2w1u6yZrI?*4Bl-v(0u+OAJ&wzRY*_qc=A<Gc>%ryZd=ochc0?hhp-3`up8yo8?~E
zS6jU%e!pD){e7<8V!EKw4IWu5kzc=lf!gQq?(Ae{@R}^HF~_o)&C=4cpt$(5h2O>d
ze6m&tPMq-Q`T6_(eny7t>*Lu4SJuA0w^y3MAn6E4OKWT5uP-k_W%03IX+zM|>FRL)
zix)3S9nX06_;Kirx>rGNZfv{C-gf=_`&(I4lN03GPft$^%E+wwT)Q%AXOSw4V}k;R
zMg6}$JO2Ls{M^9ENXUM+WpUcZ?XK62jEyhuudnBkx06{Pw^!@!vkj+QW*4Ss&RbUT
z=Z7KV0+26%`4pZ#bNqPwrAwDqWL;hL<?Z(SLV|%|VPZ39%(&1Ys0>crZ=N5QuRpVO
z{<*o<!VJ6W{#w<3zgy0ta9#7@lP4*gHg8sT6eybe?DY8y3!PVbP1O<+5OA=xwDg+4
zHTU+kS*F=;E-uB-&L}d7$jPk}nLKr>YhGU7qx4zFG=J?*IVrSshikW(AcIxmBbR+|
z@9iqhUiV(h&~T!f&kP5K7Y7=drH*EJeXYp6b$*Y?*DbH|_y2X9tnMFntL*J9)2#dZ
zY8SrN>e`-vKj`hPtt%@(Kbtaj>e4SaPfk|98ds(9`riI}f7|MBOXTZ*G=jzusy;qy
z4f}d^RjBs;(@cL>MXc8hUY7BBe|P=Pz0si`FZ}BiR^L$lJ@3n_tK2JBuDr25U;f#d
znas+{$~w{8cqUGqc;d_%5qEA-Z)SJ-`y;{Gpo;(Vtdxch0XaE7Yinx@YingABOwNZ
z<YPQJx3+MC=5da8iyM}{3bCpD#KOnNx6|+Q)8{ugryH1<xXiUGoiKN9@0BYdpeoh6
z?9Bm?+Ppg!0)lVezGY;%yxjlzv0mxK^z`=G=J`qQ?(F2?<!yCQa=g6ExA5&P)80pX
zvQ{h#-!;NN);&8jbHlc6ZHpHx&$F#=Td+VuCt?FbueA9wP$u=AZT9fgRBg~e!NtYy
z{3+?_k3T*>&cV;$uE3FTZH*)wzg$d0&$5vI>C5i7uVZCnOL};y)$8^wv)nGwSZdv0
zDWjP_&wqzpUEs)UVP%!{_SV))zYj6<Ky$)pXPF*8)XH6I)VsL3nYpK@=fc`(bJ;C@
zQ&T~8Ycm_~menq^uSCsKKAw4b*~FzwRcFqa@#L3y^Tv&ae?K0VcX8QL^)-vhq5Rz)
zMevA_FasAicku5x)4E$*GF3R3_SXH4%KRS~7|7B9N)j$E@9*thd~0j=^Q_Yg9Gf{9
zc;)T(1pE!Yle6U3dQt5#0ftE)DqCuQmsNd!#(VR|jVE2E1_lZ%L%h~TZ&y>g1j>_B
zrid*4_T<Tv08m~3kNfPobA5{zE$ZmVczJ1Q<v;JdZ*Oi&9fzm6(kCz8y_=VP#LdN|
z=!wU!vbRwSUu&;{43McWU9x0Cb93`0jn#YlWbBu9PgK4?A-IxZ>W{WL8#Wl!e7l*>
z!NK9sEvBn5(IX)}z5U_gc2MK%#hsm-CDf;SUEGl9{PFMc#q6c;Lmx|<W=(k=sdcnt
zlY74$gWa7e#cysHmb|$kDAdUU8gp2`|6iAwZWIH9jg1Z0)%`P#)04iuxVT}%hK7j~
z1$ULaY})_t7kBV-zt-*B&3SlvAHI3R6C51e($caZc)8z-u(eWa)~>y{JwF~a+;!sA
zDIxceS;tyiTNfrCZrkZ*)uiy?#l^*-<w|STtVzhp;Zavt|MTH6e@91$!2b0&H>W56
z{PZ;A#s)<dA<iX1npS0RI`&q7e{@{F{)&ZL@T%k9m+M|h32OSXEKJDFja_v8REm-0
zvvYI1C5_Xj+^~~eJz<OI+CTam|14d)H1O`O(vuf17+m-0nd<8*Yx&GnX|8Fu*j(G{
zu-j>(9)?9KzYI?0-`{6D*Sfr~qvFYm1N+0LvTJ=lu~Eme?vDkF<AEMY;|X)-@a&A~
z+pxi)qOuY+Tb+EoPj_Or-<mHRO$~3}yotFjEF{ELx;8RAH*$NPteWqvmNjeE2;DVL
z7G+g;m(94mj5q7bipKeMzc{B&n`U5W*f@K(^tt)={ORfGpb=%znwI>P`Y%Ew=l6Si
zduwmMKY8t1-FNr)&d&b5HhOzPdV2Vyw}pj;2mk-Q|3C5Wu2R)~`Ny=F{Q9gwZRW}9
z{)@7&uQM<=Z(q1jQASqQu>4)jpRd>BL3500X=(G$v#;9M#wQzfD^^R?&CTuUx9V5-
z_F9|e-C42a?XRz|S43^iS~=G=Vo!x(O>M29xOlkM@ANe`kDshi_MK(o7!V*ZY4YTW
z)26lE-kzU)a+0d*zA95~*=BZrw}JwLZ8<lawrnv0l_~MHU#H%>Ia}n~nn-46XJ^pV
zvZSQs&uj5BB3O@}wY2~9!Fl1YLlTdloS5N<Z^Sie<@!ZOjvYI8=+-SMMMcG(X@?}u
zawKwcb4}On*7^A9laT*HdCMXe)9h<43LK#7teKtPYj@?ECgFe8>HZVHyuQxQ@F{k3
z@5WC@Ak#DrV)eQal1KN4AANphW$=qTJB|5dtwLUKN^jAeE$#@Ko|*o>Y60tw<H|^D
z1S?OSI(6vQ)@)GH78Vx1aqAXnwg5CY+rZz=p`jN0^6qZ)GiS~))I^ljJUunFps=vf
zN3GdM&3Sd$+9~gh&ac*CU}0xJeE2YP&`OcEwziB*OE|;UL@fL^apj|cyyxIa&Oe}}
z!Yggo@&0L%<)1%)K*P7v=6O#d^X~1bjM$bl^U}7C4h|k^GaffLw+|mbp4|Lqnr^f~
z*_()^r=>wP17e)ZwOcN;%^fuJdIdCJI!!nF!Mk^TyUX8$7M&Fq7D^bUaDaxjIyyLV
z?(d6@nfCs|LT3+8Pez<0(GMORY-U)nEyv4?3$&~(@9r)|B_*c!_x3thRaq@sw8)_D
zPX%c8T3}${(R<}`pyi&y+S=OOk&%%VpPq2?$=mf@TN{1&?p;~y@^?qh&9(ll`}@sJ
z<E7t)IuS!^HS?aHn`7C0<w^((8=I1WK|rn#Xc^v)s=|v}mT~)PB+t*Y)xMJZqQ~&q
zDfZytV9*rDZ1enMYa%x@FtoL`fjTSO@7Hzf@B5*2ev_r8<&K)4MtU(j8dj{(aB+2g
z`0efOiod^1=ggV&N$2~YpP!j-iwX+||2QWy2|AQ=c5n6ff;TrdUdm%jPCd5FceX*z
zj{?v_ndj%{ySuosG&MB|h={b@-Cdr1VS(e$Q!4mIl=uA(_L(CjAfT|WDnx3FSKqX0
z(>83`a^%(3)umVEj(JVpzu#Wn{aDDB?CX4QZ*67%@UU%;u)5!Z`2BSj6(1JddLkhp
z&;Y7^UtU@|!!&!^jych3X=;-uO$t~Yw$|qR(uj(ETP7>tpKw?r*=OzM^z%*vETGix
zKi|$ZEKJPE$mqkbui2or0f!DbY1%15hHAdem?2?P`%6SWZqI?2mzO_$`?hz<5|tyz
zk1Ly+hUP}PySs16zb|)tTkhdSuH6FC(%n5hJTZH#MCV$Uw<&P!sQ+KL@%!A#%E>*3
zTcft;@v^hCzq!9(zO1ZlMbuWUGiT2l7CrHhkd}UYJAXeb!;9DT7Mzxlv7G~#FAHzm
zwhgo*A#i=1ZOx~X>L0#*X_+}w6109o+B~mgvHR6c3>yj`yUmz2E9u{#pDRLFi>U~4
z&N9#M3tsN`@b&urZOzTjaO-<|dOjSNuTMDAA-E!VIiHFUXV&#~z5o9HR@Tws@ttkP
z`r%>7iuU&QA3H;|Tnh>e_UzfCF!^Lcc6RsCZt=tS@5=`-^J$zqb?OY6(9=u}lP3#<
zmKe{ot#(qIeDKN@5#6XQ4eQtIUt1p^uT=Zo-BKdC=jqD4ySsk8-G2X5uc4u#qlZVw
zrESN0rIjr#EW&fz`D7<dm@pwflA)la<j6#2_pTdRZ>O%DxHv|yecwJiHJ=#)2{~tH
znU<P)=0@J|FXZOoX;I*)v@;L60Ut$@(2h&hf({o&?}^sbH#9Wt=<aTwJv(~iw&hE{
z1q(q(iNX-0M22C1PF=|iJ<1>EXrH$=`?}sl)mE=8dsRgf6OqzaR~)~-x>_m}E++b{
zV(Rlcqhnq1Go>usT3a2pri%UE;xIL^qGE@evX<}TQ@c-H@;?@FaY{sykH7!%CRXkX
z8xoy8RD`aq3gy1M%=hr`@9&S!xNsq0OU_Lp>+*Llx3}d6g2tC3A|A}n-{+W?woKys
z%3$@SELr*a{rhTvKYDPm`Nx~h=M|=UC8njdf!ZHuXPbMy)$m!f>u-;&wHRn|+HA92
z&_s^6x3|wc8_VlPT8xa0A3l6&m^o8&&6+hI9{1Zn`uh6101IRF_jkHqzL$S_5m-@O
zefZinv9`9hf`Wnrn^I3tar1I%xnKWZHuu&R$E{gc6{dO_CLCaBX=_u`)bzAzU6DCw
z?_S$|Kc7ke`1$kT&6|?PjvWI}y2)4;vD~|NZ^NcdO`V;bvrMzw&dxU1-s(O%d7USu
zN%}XXXJd>9x1F8clgE#P6Yl)}{(fcd?QJXy*Rx+;S?S_3Wx@mp22kfE>+!Yq@%}C@
zH*eld$;$F_Zs$`~TC`+|3X?-wSy|R;UOAhH9QVYe&$s#~PMmmaleBrB$Z5a1R-w6P
z)<kaRV6d(FvLfLA=T}!(U%kfOQ1|Plx{}hVQ>PX=HnXkl-MDF!5<|(eGm^cJMgHc3
z`j0!Co0$a#d*y7c&VM^I*E;+$!oeX=pFekx`nNS9b;`2+;cNadJJi+H-3oaauXOU_
z_3P6aF8uiTSkuaC7N~nNapJ_3ygblstc#0?h=>b=hrfUSzTfYxtA2b?T)K4W#fi%9
z91M_=mb^PV92qj+-rDNoQu60VA(KOs!i6s{FTecw`1qH1cdf1J{#eYMIdh@{$CL>Z
z0$$wM^KJ3+<?f*6Y_?TjIxbzltf`^V!Qv=zTU<gyLv89}_x_-)EUlx*j!o+C=YRS7
z_2j8jLl^E#-WlT;v~o&JOw5Zzt=uZpPkZW32aOJft_*5r<CF1lap@M<R|73OcT!YT
z1P#2HnN4%+lksF&;Wbt3%d@l6pdeZsw3O@Y48!KUySrR7Gc&hTf6p^AH(wsQI_%<H
z>v9jh>A_W1R<ZkPX6EGNtf>3@OG>`jH_2pa)gF_#%eDOaM8(yQpIUrJ1vDigz`(`J
z8+uDlQqnVgeVnS&B35p(CsK`qf=7=Y6@(79<lfyimEpov?eHn5&dxMezh3wJ>}+=i
z&^oQwzR<hp54Cc0GW`7YOKWQN&reH(eoL8VxjcLJ?8~R8-b;7Pm?6RBaCcX!_J`k>
zj;xK|eq`d~)#2+wO|X>QT;G!?PkI#=?VR)F%a;{}kB><muf21Bs&;snp`@f_N_O__
z=PLvmO!M!}=`gW=HtPtq+rH}2lZe8?qBS-p6J@-g<X!EPwNCo|?QKDEar5HE%Am%x
z-(0JQ-TM0)LbO;vJgj=GKEI|ZaIu@_)V(!7jTjExxDnA~Y+%sP-QE4;-jO3LpP!vQ
zy)~YhnVI4L?0G9TY+UtwW#D4AV?C0KL*AX5s-5(EUChp=6)QA!A~(6rVe@SKSFO8l
zgL$KXpkCabj?d4}gSvYjUS3W<K0N>a{my5QUsle=$LE%nrS<ImeE#C%;-#OO6dF1n
zyn3|?G%}f%mL_3ew?{%)NT}(?jT<$$SMPYX{G{P^6}Mn{`Spj}`Lpl%ACm}P?vi&x
z(lCkT(4j*HwZBRvBqS0ZAM2H{C{O^+xxILi!65%GB=`2VwHDR8n;w1SJ8I&(aN$Bw
ztIS17@O0^m3ywbX<gLrzNPPMF_2P!a!%oLn-S(etmV4yM$^{;MzO&7a-rStd$Z&Ue
z`T5ZONn2lETN^F@A@{F;O^pp`+88u@`}fz^ir?RKqqbx;wsMOny|}RO!u9L!-D0{0
z&(Fy+G;H5qzRn8Nn3*$2X2;H*nKH{?<hS$5CZwdO9Mcf`^!4?1N0+Sl-R1Au7Tkn+
z@6eaYhR3dGew+AsTkdVpbn(s2>5D^GhcPrPS)u~!RlmNr);T3brGejg)9T;X_b6F@
zdvTE&v<SBHv)ZvfS#AbUi&RKR=*ZXoc4gn*M8@o^k-WRBw0Y&q%!Nsz--Tsmdw=|>
z*lNE*e!Kqq-2w4?t6E*V#T*4%oc?O~&$p9JOiTpz8o$50J5_9I+@1=<StglG$;rtn
zDJcvN>#S`yZ{EBy;UE)(yxSUfKA8&|dh7qCrKU3e*dVcT^XB4tZ?8R>G2gCs*MS+k
zN?&Jvv0W*r@4KHrZ0DWb<^12@-xq)WK1KBQ-s<mLwBp|=ANQSYmUwQC<%iFon`89A
ziwAyuOm1m!cNSnV$-bs@{-#$4$HRvYH*DVAym_;+lCtu|nKL#2ZO}Z$%EtESKqGU-
z_jj_BCQSkjT!ThU*x1-2Hl=tjO#XbU{}unLtlv^584L_F43pUwEnYlv-n_oc%l#Jz
zFZTnrM&G=BTMQaC+MIqKGz)80`U*5bqp7J0T2BR9X51~Vzo_)}H3g*`w{J85nBepN
z?(X*Q@9!%sDKXvMRqC9Pp#f@{nB{`g?5f2vM}N;WPFFHA63WcX1T8-U^?HnrjSKgh
z`}XZrgAVylHazxe$yrfvU%dkT*j*;)XPc*;pXcl1a(S6=aP{|ukPs2Z1)Rca0vG?w
zW$q|`&L=47JJYCjRmjRk-#&8H*4EzInms)tJTWQsyK(L<6Cswyxczl=^MBvlTkXCz
z`}(=i{f{O#Jv`hl{_1z=9fvO;Pv5vPBWz8CBZG(1#0%fv-hO#@ws}f&@?`C62M#nW
z3DVq}cXw8Y$72iE`rx3TDYqt1p6o1ZT^3TU^Y+af4J|D%<XWXY|HR52KicM;Vt)EC
z@9LX3IZ^v+EJ3S!RD?J^mj=DMu~GT$-QD3mFE1=)wzRT(ruF;x`~AWUTzq_LN{bFQ
zvri7uS~_QrjFM8;?QOcId3R>?$y&ShN}H=OGc#}6v}w`4+TTGbDNBN4TRTJV_Ah&@
z{Of~<<MBROPo;?gd#k>_xE^0GI{7AOn^ety?a-o~bKLsne8t4XQc_Y}Vt17+-2eaI
z>`j|Cow$8_c8ZattBXs=@3&W0POg}qc7I>(%S%hWQ*v^Agw_2*vf>>JWvxmUxb;e{
z%)LC@JU`>kj>44GRM%t2jy-wu#Kr#42WC|@wJyV1GSFIq>vQc2q%yVje^`jh-(O#u
z8Q$F9zJ5ihNMu-;*peVk(3<|W(c53?gk8UM`SQaTFFJPYusCw`sH58CsW1LTKK$|f
zck+P-M$t6C*l+ere^wv$nx??<;qzzb|Ns7WM;+Z~WV$^oF=l_AY-VPr)ZM?4Gj1#b
zRjRm$9G)IIA(8ylWv6f7taT3pZ`@dvMZ~~Ds{)7A-m*700&{Y8PhYxp=|^=^&(vK;
zTT?<4V|Es?9y@j{<I<8&zvS*yXU_1b`_DVFCUP@qNyw6=OCMhLw|AXyS8I@cO=rfe
zSz5mH&RsD!GJ5pB(=hDSsobJF8xonXt&gAodSOj&^45z>JcU_USw&ylNhJ4(?k}p2
zx_aS4z*`^lTgO0qNmBFk`_J3|-?L@*!myYa85T!@`R4k$Pt8Ex#^j@|pbo}V<>h{J
zn-n-KYJL=CnlE*FjI_GMH6=g4|Keiz$1g80e{plOx{t4KVrpvZLg)5pQTKF}l$hdc
zKC-45N&5KsJb3kL*6Y9}Yu4z1h78Z0I|mwYS-V!3jZdb-y<d*;$A(G1&(F<eWY}B%
zy=~@9$p-$(uhz%x6w=evn{YB^!pW43tE;B^$(LG{zmowi#mUOzDlRVGl6zb1_xJbu
zCGw5@#WA~g?>>CvhJ<PMwIh2fKTnuDcdoXcg@uHioZJMjrJ&)~$!fkEl8$n1-DtJ^
z>>n!|S>e?g6~A_Lt+uFJ|LXdBe`YqG1yx^Pt(=>0p{d!~(V-W+Ye`vLI>VNXi%J{!
zeSCa;b??UQ+m~<IVj^W%v*S|POdmHFm(A(t&lRtG1X}I3_4?(@n=kyesrsVv^7ZT0
zYwM5q$+o_Fd~U9_r$9@Lp>rFLBEy!7k4Z{OxAs(SzGcB+0$TQVn_JdL9z4o%`A{P>
zyTVkj!k3p+LCYy@Y-HZv+Io1hy8nifmq7x8ZvAq-XU_Qi`F;QYvCq%XPn<EM1GIf*
z*|KF3I|>w&l9DD&o7Scqz3sr=yRzl)@433Uu|0b9$ROo}fK9~*20=l=8~bW^?=X9_
z(7AoWq)AK+H#R1-zq-D@A2jW{d^u>khLMpGG<I{anSJZ4__Q>&W4+SsjshF1zGi{;
zLEYV5Zc+EgV$IsMA3vYB7hlysSq)>YcfpGbiiPtvH8p2gm1^xOecjg4!Lg_MJKxKf
zFFU%r4*mG}cw_17Fc(+X%&Y60GX6fe|Mc|qqn6x~+VAJtR)^j4O?c`vRV%dM$A`ol
zH*YdBfaa?k8W=1rEFN4~==|a1$AfF5w;L2bayc`@&{@Yk=?I4*CkrcU;)w~0Cr+I@
zG+Esrq;*T)U8#5P-rd+)tX}r+&dhx2kpKIqdZ>K(^r>m-Qq@O~A8&nizZG+NNOx)c
zt`g71cA!?q$&)7~jMI8{Y|~=sku+vIdGh28+iJ50{_aW3mn~B=Fc4^LY|OeXDkRk8
z)+?2Hb^D(T)1sWq%XshHy<2)!?3h>V+NiA$9zPDgbvEH?$K=VAXGn<Z=;&Nn7i;a}
z?*91J)@+6bz1Uq(v{v8v_Tr*4sH^?u#l?z`k61yQq5S4r9XxY}=kD(E;~yU%|D5aW
z=f?+X$JPJ;eIK+;1+;4C)z#IHk9LbkeSiP&?{5YMef{+|$$9toth_S6zxK}Y<Nfl?
z3{~IW%+y|&eSO`d`Sb1T;}Ui!B_(n7Tx<(dJ`O6vcV)3B_k?OxRaGe{J$dqk;m3xc
zmQ`Azc0K+t_OCtwn!Et5HGX)wz3|_kN*5Ow&;nFPN5>m`tIgSXrKYUzYiVJrsHk}G
z?CfmNN-WR}*}7P3(9-|O>i*Yu$#;EwZhm;iqQ9(P13#vh+Wk9o<%$S{fPg@QoNblJ
zzKd1|uFFU!`*3g1zklrVa{sB@mM&TH;7}{~iqO?!v&{4P9vq%KeU*svA%FY7A$P8=
zi?v=8v5{%Ie*Cf5*Vh+5IKUXPGD!7&b~_^@<BrPDYSZ*$yQb^MKYDR-am2<XRvQ}|
z&|0n1|Dg3X4-RLZ*<)dC&8)Gb|Lg1P><lutRVL>x7z#>DSwAeyUkWbgG8L7TnfF$I
zcgx7oxVN{u{lp26FK=!NcXoDy7LnY!d-vg!CoJ*t@oS>Ca_PtKb15n^+Ln8}?fw4$
za#dATFYfKNJ~z*n+fm@c`gnWL$WCNrBxvi)>+9<$PM*xn&CR{^ubPUAg0iyn9XVm)
z=H>qLA06!$x2XMPvS;t!iBqPu{P<C^WZ5#Yo%OO-B@L~utaU%1ii65ZPEJk_fB)n0
z^?zBbtE;c93iW<$w=Ms^Tv%AxjZLZCV!BZ+H*Q4isrt$V8ZK&L<vwz8@#4kGx3=f^
z=ic7dStuzfxufc<mR0#X9!G&Am-ilZn_V3%nY?C?#yWS)sO@>aywYZ8zV2{*duywv
zqGDr5hhE&ChzH4hMLXxn$jDqdCLt|-d29Cdj*b^+W*U3-7wxJ0J1ZwQw|MHy%ggz{
zzPlU!a$^4?yHgXdKNe@m`1<Oq)OW-EyN>lpI!~K6?a^YH?Rj^VX8J7Kwr~CZe^&Ru
zIkEQ_f!3;pavhy2V{2>s@@TjCmF52OMuvup+}zw!MkyRej~vlB+Sb|{I9)IH#FZ;k
zczAhNhOQ3#^85XM?V~nze`dJ#NH~_hx}w<W;<PpU`m%q2e_sZ5+Gbq267uQ82Zc@-
zC*N5nib{)So99oOK3)7|iqWR6TbCZ~77q>!6Z`w~`Fv1AqgUEIEGs{dg_SjMciGz$
zH*U;GF_PT5bLZ2n{c5!;N?aTq3gzYHMkXdI+1c5%%yOkt)6%q5-IW&I-ku+Pex9wT
z+T@8VS88s}xY$%vTdQepZGC^+D<w;=|7$x8k7=14RZjo??d|2rx!=Bh18tY|n`^an
zv(?ORERGHH=ga^4{yzSS*0+zQ(6Q}%)j#(#FfbeioeSW8Ok#D)wYAagjshlCqTiK1
zriy|V%V{rS=a-vuI(U_^nh%3u=9g2aPHDY;HjN9s&0_`;RM)AW4BW|Uf~vl~k^J-b
zulH`rH8P;3qN`2x;`jA1GP6x7Gmfx4Pz>5{l6<NnFZ7s1vJcqmWWpQu;YyDFXRg&-
WbjDYh;}!!01B0ilpUXO@geCyMIGhgv

literal 17892
zcmeAS@N?(olHy`uVBq!ia0y~yU_8RW!0?cRiGhLPrgl&z0|NtFlDE4H!+#K5uy^@n
z1_lKNPZ!6KiaBrZraOqZOEWyUc~|?(y(P-NAr4i6ERILpL~{~4J7?W6E!!BL)O+#C
z<%lHlUe-5zT{d1g$i$@8CCl<MyzKe!!UlJ13)`+AcKgrG-g)<??Yq*l^k=b5$vq4V
z3^lTwR!TE4Fz7O}1T!#9VB}cFz@We^;KRt^z@{*RiJ^hV!GM*4L9!u%i-Ez2;h+cu
zLkdHaCIiC>hSeaAE26`~!a_nqg10~Vos^RD<l)1>|Gxx$7=N(2xVrL68ZB8F{jrvl
zhsUPsOUB>V&IYUxW;4z-k@5`)n6O2@v6_%=4bz%W{yFSEPlcmN!NYQWum8-dTCH;b
z1{p^ImX$vbOa2QF|DES(z`EdQ!o2wwMbp)1*|q+>cwA}Tb^TdPkqrr44&DcCYzx2G
z?XS_&dUjmK`X|q#%*BlfTn^lh%jNB*ln-zS>X>y4eDzhFWhTe5jA0AUm&wWQkAFxg
zPCMFf%$7BQBhm59$H`aU&z_dzvQF;${$%Oc-mte;{Bw4_y?0#ddg#^I-tw9mLY@LF
zD=of6oIG9~eY_-V?cK7lDGZ7&1#y=as@n5@c$u(l<*MYTuk1@c?b__`y{hKl)%yRl
zukD{)n;o0#YRatb{{FyB>&5pzEM2F(y0%uAhauzJp~Ht?|JcekdAjumL8p#QKfZoz
zPd;qo(IRm0W5jGVk@aCBzoW&^dev$K9X)rjsa3$K<=BhMHkzxZ%1N*CP-x+3Z9IK=
z*NVv;imSeUiLUY4Z}-*Pnst%a8pW&DdVA*{pJKX1MemIF-m3Jzkk2t?+a0>BHr)yr
zZ3Kg$T6b_9UXk=+?d*OV!J+6f(|`Zb<WGHkq2jK=-?#ePxd+FcakAEH6mViWexUY6
z%gV>UZe|BQow!2D>)PfhR|D11D<K}!Ce2&Aw)y`niGRP9oxg(Io^>_#)%$AxH!*Ta
z%ay7Q7rolb)MJ<y_xG-Irvryz(X)TT({t~AOTY1D-m_1O%5APK<9Z$K?)G~XTazY(
zZgA|u5CQR9aU$Mlm)(7mc;-nPf0#1J0dKc=6$BP!P0{NVaGG-Pg0sHs`)M{Y_g!08
zh^W4fT&pxg$>rtu+p~UnUJ+a}Klj@-WdWxtFZHLN`c?a7b^WidU8hztf2&V0csBQU
zV7Cj0V&3=M{L@wwmIi*d%2>5><;vH5mNU9vhq|ZzUiFN-X=O>|;&*p;e*W~-d!-%I
zKH+)u=C!r8`QGh%Kh@yji;W_RP8~*E5)V!}a;z+qz7YEK#s2vl6#m^f*(14mtwswA
zXLw$UF^6K=?~R|Ccr{xDoQiUfpXZ7yPkuhTt9td<HEM0S)^$HCc5jM^E_hz0!>{b}
z>YK!sNY9YQoU7(1yx)bm80zh)d?}~D!~EpaB0(pPkNW2e-WOF@Bsi>}clS=%(e(8~
zw{z~6+MUda-=q-wf|rM9%Exz(-hy&+dROlYP3U?uPxJq~9PPmUS1K-T4Z2wEbFQ&b
zE4B8rLE!x@4<0aFJi7MRir}U5?a%J{b-BMgz;*iOc~_6<eSXR&r=_!At!B%qnYs`8
zTQ3(nv-K8!oZH&xHT7MIkc@Bk{KVpIv8Q!3Z->k+P1&)2)xHJkT3<8vZLwy!&z$+c
ztHI~v;(odF0!l3cf0Mk$EuFS7c^Utxuyf-`biA`s_@#*xhjGt~-AWuzHrpnIEVT$Y
zpY=#Jr|hVyo}R9z?r)Qms~96=0!}EXyx;fb*51d7k9Xb9C~~nr_-D?Q*X@Vuz7@aP
zYS`HyVEgJsLA((|@M4A^$3DK7wf)$$Zm$gYqyD)biv=fLHovk+z-fnqrQzSt>|XL}
zOE`|cy1qF|*Mryh;sMK4Q|nbO0luDhlrDNmF1)nu|C?NKxxJO2U!2-!8qBs+T2p{S
z@l4A7h`+x@<yN`N&V2WJwW9&+gWJctt*VqJyKzjE+V-!R=_v0PqsKxVijIdi3TK)m
zSyq&Xs0unYwd7_i-RpW+_vv!kdfP8vHez6VYsJHrxfET}|9!vzxr?8}IA8A8?)3BX
z_Oj>iTM&41r)F8$v}x1A_=J_XuHOF9cIM~b`_?b{xBt)<;!srke|9!gOutpjnr~lA
z?>qdgoP08jfx&mlmunLzN18Zw<cMzh_vHVslbur^UcdcEw{B-h6Km&jf18=M=a*gA
zSB{duJx6az{2TtV^E^@yR(*Q)>!R?+%BgNsIkr}XuI9b{wtfDbe{<^hFZpurQsZK;
zW&9bdXMERrc4gbziT+)ND~*37d@?w)HE-=VBjueU!sqMwG<J$V$XcjcGrjD6MG2=H
zN8qpAHKCoqu1vhTFXeNnM``vO?z~e??-`pISFnY>W(fJ%TF9p2#4&MK@;Q-E-KF#M
zzlr%uq*|}7Q8_Z>XGLz=)q@i27H*Vlo$zDH-(R7>Z8Gam>|gq5x32HKOWyNCO<e?+
zEW3UvTi#{zWUlvm-`6C{**dYD*2wr@ylY=+%GUL(q-y4AvIGYxb1dUsyDcHA<lXVG
zMG>oPjTW^XwJG^!<?k1168kZr!|<3-+@pOrndkUk5uH-9=5BR=Z1u~FA5X56wJLe>
z;KAM(_H{qiUk9$eme6JREH(DNQLRV$b+ff0A|WMbZ&mZo+x)lc>Bi5O!UL<t*?wEy
zn(=DYslusSdv9Bm$!>j9@TR)41mqg8eG1nEBW5j(xG4O4N!6ds%ZGmUE0^ck7ks+(
z_lo%YPn@E$kInM#{$lU{t+}B0Q+UbS;_ob5q-tlibM#(Ze(%k@vlC;R_Xn~#wzRkN
z%h~K$DSatP*0Lz&#015lzflLT|7eQ1-t>N^(fjo}vUXW#uZD|So(#x**8F`Yf1cdk
zUH8i0&1>%dTaxgHmq9^V*L2o{JKFnyeT}Vi74hT@iaUPm<jE-ac`5=<GycCi^@(AB
zy#Dh;|35P@+{~DHP~`c%*{09>+mA{pHYHyw|9kd&<@=zdq@a7XRmIuK^~QRQ0(zA{
zj`wdq?`XlwaKfdVXIaUubyL~nE=ec`E&u;*_VM(ROS-$)p1k&P&bRkx_p`s4#F6;x
zX=CW_(`u^Tr_My2|I=Tp8aic5_c4!c91Ix&LA>F$(u;o{+OqZCBG%nHzg0U;d#-T`
zO~28dCsu58efebx?-O8MUp-buyw=;Na5Jg6Il*Lq<JGz6MNWhyuQ~glO~ln*l~d5E
z!|3(9{NTd^(x;E@pRL&{;M8<v#fwE=sY|C{U%w}C!GiS6?DUn&?jMq`|Jm@Nicfjo
zjljhkmUeqD?Xvpw@J7$Z+j3%$wLC><-dXW<vG{!r7ooDoxcBq-{|VCz*1f4Txjg;q
zm;bgakIxcjaJZb^xcH~fx7pvFdIX$wl8qlr@lQy-bE~EGQf3S5`+F(I9y=fX7da!M
zS@QGov3v0@KaX(v_uu>1&@Q-$r|r$o-SsOJTLWHR;oWPK7I*r8&C2sBa`&n}$u<k5
z8kOZgS+>rLW8p&Eo=>^QUFt-Z{oib<bj3QNdqt}FpU?G2MUq<tmVbU@Ti<h8Rlq5E
z&yzdM|Em0i{gacpCrphxJV%3}foJQHd74h5h3mHMT%r<L_8>w-By1OBl%{d=+fLc9
zNBm>na>{VFxOj?Y-*uh3q<67c&d={<ZYxi(`tjz@ojd*c{QS)xTnEe-va$sS1&2p}
zX<@Z`U3qq<<cl?DbfgqpIJ~^Wz5mDvgk-P27V>j{g}(89Lk>l!mCcjCKDS%fv^O|<
zqfXbC*U$AUBovSA`4=Cq7ua@1LNKsL(8<T~*W~Lyxw{=?z6&N>X$W#8E_?B_ckgO7
z_R>vPE@od&{c-2*_4p}uXFC}fOcser_)MI%INDmwiQ}UG`WUa(inA`goUY&P_A$~d
zuTN|0uJw;*O1_?XW8*we(d>J!i&djp7)(}7lkm}8-B7nphDlMU<A3qdkK03o?i%Fx
z>)#hrKfodQX4~Ii+ZJZs<8u1y`zGT3lCG_pQ&PGa8rZH1HES-q)jQidV7d#(#r1r>
zpZM;HO%E62e0gWa{<i9Vp{J=TrEF(@-wX?yu{u8Kc$I3w8egcLVivRd1(Zsd%yWM$
zT4jW@$xpYj{ImJ<{>{9%w;3PMm$$16RgfxBvUs+5d#>CXZNs~sw!+re)K@0uO6lKJ
zVp!m4`o-niGUW<E!@IGoqZT>02pqih?a$XM-XCB7*{UYII{n}ADwWVRx#IDYayIUC
zG|1fF=sVlYS8acJKz&<VTTrdL?&kC^0jG}CE9HmZUYYnm?|z}hC$BG)*YLNtZ0cJ$
zwLAWPV)Aj`EvpUdLfu#VUbD06cG=ZQ_YbePKb0uGwfv<`#;uaiCoZ1;_gLBK>W(${
zPvqKvJo5Kj{rdmfpURSoPIW6)#wKe|zo)F`Bk?d-N4=82D{o=A{14fm_pjBTJ7Qb=
z^;fRk;x*X`DNnEcU#@A-UvwpJqIpuomNjeE2sjA@NuQl*oW7*Cq>}r5I+qmt6XV>B
z3Fo&=taV(|T*nXUU|{c&><ix0As{;K<(B^}MmMEcf*BmRRd?7Pp5uDr>y3~54AUGz
z9hNO2BH@mno}TmWYOLmn{;;H$;lTIaxBILt^GlQ8@>VTlXqcvzA0J=2?e3zMO)B|&
zo=@y<|8+w$Gee^Mh18xG6;T^?^#3nR=VJIF_hFLx*Kczxw_doAec{BtU#k7*@@22Z
zdaf4P`1)VQU$A90Kh7Tf*}c9l%lPM=uf26qDoz<Mx7`0-d2UBbPs&#A9cS1Xw$#jD
z=N6|O^3vA)%Jx5&uAj^vJG;;HI>D>2%dw21L9D;->mSznn+ggq2}s|VUR<zs@=e!$
zTc-ake}C`nsZ*=|*r+fFIK4PG*Ls2}mr3*@cA@aj7!}u(2GcyneROqopFVwB{r#Qp
zZnlPL3741oE^3+0VB$T+F+14uS5Qfe-nNTc{0sg(xxv0E@=uGvB(oV=V32obM_?H*
zgYLm)zOzkCO=s^CWw_#XQ++}Ar;WymtMk6ZykG37(DFmFI_#aF@ToioF1OE&47&0Q
ztxKL>sx7a(d*!xj;fVu%zy4g|Zuj43RA_MO{Isij2@G5eA8a3NnP2tnUuP?$o4nrp
zJ9~b=s{SnhJ=XF=_WgBp*IY>{ek=lx1+QF}l#?Cj|38_*reiC!A!N_7X~tXats=ZY
zT~OT#4hkANI&1uW`Pvt+Sn=a)bxQ)*t5$KrMYb=l&B)H2y(h)On7^T|=-Zo{7Z<x<
zU!L~=-{120_x^$v3OI3a=AF-Yy!T`1_5Ja4etWV%6Ku|p+h6y$sJK|VxZi+*)kVtm
zvoeD&{}&%drxhEG?U^ooayT#2VUqRCogqr@#muHxQZ`@(EWrVx$|-d$3!XNfu7NWX
zxK?HKoatxSVpA}ae^pism?_}nDB3&mr=Z8{latjs6qS{C<lgltDk{>^)m{3FBj#E2
zswuThyELB9=Zr3WoP4un#iuj<3=L6^=S4!Ua?F%(+~UG-RPpmuYOwi}YC#bZmACE-
z(z#Y;e*hbP!I)L4ch*nAhH30gnhqQb7cEk<n;$=amY0`Tj@g+>ObfI)mN6){sQJz+
z`Sj%EuPc9^&#(XW_4Rkt-;eBVHx@i<iZ!2q`B&ay@!Y?;F43*)Z^|&7Wxiv~%AvTW
z`un>(zkZ(b=;B&;UUI{WuLtTU-Ai9CBYF6~LB^+*Ig(EU7Rs+FnWoG+DcAOGRb*GG
z+T-$k*GUQ-O(`>dcHYxTEB|P;SSdekib<()!x~2e*51yOcXoej`~U52a%{Aw)(eZC
z8@u#XQqO)nzQxDPZ)?0j@T9%F`!_y#bEmY>rbR&M?DBgWNfqMiKick{zwzesm+k5m
zD|b6pefybsa%ax6m9v>rc$zdbTrA!nn>xvHaqQF6_Y=0un#R05cJ=zE9-TGYgs1Ox
zJNN6g=jPcG(X%!wTV(j({(Abah3{Pvg=zsGN9Clr)MrsQXLc|3Q7pZE^Fw^f$z|D5
zemAQhDlNWS{4L#d^*#B&6`!{_zuh)3=Fw6<;WJT69Lp96Cd%~(g{%?r;&65C3fFr4
zcS2NcxR1NEvvTpQK(FjmY2SWodn-=b79rr{*zF?K*7Em5(a%rPU#o8DGsN?Q9LzG^
zTRgmuflE(Ir0A(sLcGrE_-kx;W`~;zvCdk$r?&R#(?8qy*VI*gbZ}QTbxoBm{=QIK
zZ_k<?cVp*NC1q}y-aB#Hq&=JZI@i9Rv4MMLYOxU)Kkt<3pYKnT+FM%`&#x`Z%WQo=
z@b$mb%RayR`!PA3U6?o3*LeHG*ZJYIw3SZm+LE?qfA`Y9O<nVrx?kAC+&Mp`{4LW#
z5fi0L2VDMoehS`bz2wYo_I^vZHr`1UvtC;iZ@s<pnS~JR5rdo0m$SA${T5koX7%mQ
zuX%?ycQd!=`z;i7`r-WK$-L(2bI)#lXI=O0&BwiOcdlfA&ii7!(z2vV&bixiuT1&B
zMlIjE_V0~9X6O0ON#3}7JO7dG?wi$mce^6q{CIa_&cp6?B2z>4I^&<ezhV64OSSU<
zjr;v1-ze<anYU#6`=;4HH+3zKkOGfJGzQhO)bI;9J$(4^>k1G1|BGi|p0iu^>HlZy
z>py&m_!*$Fd76RcZuT!XzfIHppZ@LS#j?NK-~PE-p18&#&HASoD?8io{~w#Cy)u6I
z@ZqI@QTthURx>{lSSecZBKD_wSXJpF!=rDvz2$A5`KJDt#ssUw|ITXaKRK$CaXe}F
zdSBtB9&SFq3C=pVSq+yia{BeMtxx92CSKio=Na3s%{{v*ev-x!iDawC<@v0ut}d`W
z|06Y8c;Bz`7S5wDH<)Z}v+vdKD800{q3Y8U&!{LVl~9(eokDrnT1_NP*9R|`uQ$5C
z)$GQ!xphSk`Ppyj?8^+^nylq<=fdXihi)_Njy$fX|9VM8t#xUbhI0m+&is%5-&3cD
zG#&RUwODX*!YoGnFV{8YrzO9XemODXfOvw-3f@~&uko&Y5oYtbaaksl;=%<<A6Zwv
zewuw+w|ebmujxyoDu3Ucy4UgLwo6L`W;t{SI{93i`MCUt*yVJ7bKUv5J}<w||GW6@
zLs9YddpNdc|NScdvS22^)byh18y<T{%SvaiUYcl`AZ_{eg?#PSESdYqBs};1SrylK
z^2U=~i)Tk(eyj>PTBUx;z#?Z(pkJV|)HU|06K?&gN}6l6(VorAGunUUgM&w%|8vha
zSKKju^~|{A8`!75yD7lc)ipIqV&RG<5s&8!|F!vRsq4dAoGd(lV~)5g$BZ}Sn<5<*
zW6xhX1p=>LTwJ{AhG~W+N0Wf+oi+UHelFPhoPF)okk(xL$DdY928An}U4B<*Uf9>z
zX;-(r-g)(2ZpoR=_J3~q?~SwjQ`R!8N8n&-j99Jxm2bc6!W3Pv-C2J4XL<Pd_uGF|
zt=qJ8c|HIBxXVsrQb*3b+xO?R+NFsioj1;1{;vN$e636_XQi<B%o@fCFIXDf9B29N
z3p3fdGWsKL;-+uy>vnkZ-kH5m|477^l%A6{pO$Ve(KO~Z7W+KO=+oElD<bOKiZ8!Y
z+aG*2Wa`N~@t`JwiTj!M>-j889NE*GKRpPS*l%v**YIKbolT0-Utc^wck;&8nsB$D
zF${Bx>-_r9-A$kOPh)nq!v$kj1{3!+X8-=Jt^Zx??BU_JVEWQW$JxdCWPBA%p1hoL
z*gJenwA?H8yU$KsvtJwiV}1P#74z@f2O0aSe4h0lX4k7N;JN#M^VFQY%?<{vy^6NB
zwpv<Tibo83D#Wt1wYBBt=fC<YZ&Ok5?95E9{7*k?qN8vB`};e5{rm|N0&L~A+YfKt
zzWx2(-Q{0@ojiFm{rtSOK{Hi6rKM-TySqDl{rp+8s=mLAZTeAT=@BT>e%R2|w6w5r
zW!(S2zrQbf$t%OxzDT2G!kjrWP9DC#XAc}$P*po?nc*=Vu|IN0H7eFx?ChVl*Q(}v
zS20)Gw|BPB;;k$?y5`tFKYx3>Tus6fo@E@G7Uy@1T(0}t)GN4r+nm!6Uu-X&|Ka>Z
z%Y%GcMo|yA<K;4VV)VjeV`INW`T4C=(#p)vz8(?p?tc9Id4HP<#g+&i(1=R!S6^S>
zqw^cwE^l#AaNx+y%DNU2A0NLz`}(>^@25<gmef;PTAICP{gNe17A{o$*XN+H;APb3
z%{4zhD4LmxDIR(J(cl=*;SUuyEfboXoqG?OXlkz9u;Ie#)2p}fZVL#No7OC_XieJv
zbMud=KlN;x&~$df*5z#>a;tf6mT0+rIrX{1b1C~v4L;j2qmVzmPaiy<&o;&2&iTN;
zY_Sbb5)KGS$~8)GEL&hGAt~u;Y8&Ye0?Yq>y?O-%Ud6`;2XEeH5v|P3+$`0ckb7%u
z_VsnKyI;M39QE$|%-OSzeKwyeyjsFBZO)=KkAzMJuBa8-1gel1d<=P+9Uc%EnE7NH
z!_4N3HJAhbb=pxO;I<FPvip;!O$IeI+*h^KPB_2irOEv>{SjR?%N}rVy->64>~--Y
zRxf7Od8?$?)%;AT{=fdzAB`1Leio)|J=6c=;!$n=1S1s&)27O0_k~W*l%Ki$yMCOX
zhnJU^S5N0I+4(c|Q!Kkfrx|@tPMaZZy~d04^siX6=9CF;;vU-S>g<XpwZFbB%RBL1
z$<XlPg$n_z`W+1ZF55EYOus|aqN)F8o8@M`YO8Vg^72};ivQpi)gRA{?3pqvD=Kns
zZQ-mB{AT%q^+>So72%kTTUqYMfIakL<~AfI2Unc7-@Dll_4e$|KKkeBZT-C)XVz=#
zJ^QllWb729Jlh`%e;M{Pect13sP4Rb_0svbHWi)iTfOtG`k&&*car!cQ$bBZ#U;DA
zm3Q?s@L$Q++puBF4F6Nw1t}lul@9CcCGO}diofzzg+s~4rsl(ggIhy2G&FvEc-Z`6
ztA_8Uj;1E3-j$z!)Y$bOUp-GJ(ndV1bkUq8kKT6#S%k0myu78N?^V~I<uZKkfg9VF
z<UV@q&Jp@VJv2Q0`t|GU<NjY=9o{c*e@tTfv}s-W_ix;|arW%ms=r5$9GNspsJ#69
zExxxWCMr9(@ibO1>wU(ZBpdUr{`9`NXZj^2C9fJkRBo{<c@dEO?2miDoM-6%V?Muy
zUa70Adxyr~`X(+aYFqnDWa|I(fr6J^BfqaUHZc+5fA=7o<)Da3+qbv3qobphH`>ke
z=)LRKGGXe}t1m7tUj4*7O~NfMZr`zAqBFmFPI^+bQ}n&Irsma%`*-ftJUKB@^uG#+
z(-%!vR@Rem*9Sy<Yu$?fpB}&X)_e|zeTo7;j>!odBZ6!ncsM#9ymDpBzpqQrZdtzu
z1Y-XGy0lHcraggy%f#&8W#QtgZCArWE^K&XlzD&gqh)#i$&XXrT<@KkkY{JHLjK@e
z$!9uF>yGz*mrzv8Uadd<@lL(H6Q?;i8?g4Se(-A!V|N_?AN7~DWv3<@{^4y_n}2HB
z#T8tC6P9k4@tlzJI`cZWYrdi6{%Y+>ERF&yr&CUqHa_7sVTyaTZo<6Ux`-k@=}9ss
zEM2P?ELoy*KCdfN9pv;RqwnkXJltRVJK}m+7nc>E^0s%}o{^jX7OwUGIfd(LouiNE
zw|92Onl=|-Kl)L?sl#M`)#8qav2z|sSJ@|T=HI=}*JRD5DY6G0t8cA~e;59FZqkRX
zH{PwD{F!T$f6t}7rVK7nLv2p^W3Q77F0K<zHh;5iahvwt9lxTc-8Bij-FZ4jIsNZf
zmx%Ja$6W01*}M(dy;gmC#md7ach|StAALXL()G)3{;sa)4=w%whS{@HLNSo9blcrU
zEC*lj|MR3*E%q_@yEB`XJo&TzZrsyDiQDJOD}QqjtVx{1=)LjxHXX^oUqS8oj>@Ss
zvs2Uc%xpWZ<fb34pQt)}U8ZH~`_}HBvhz3fSI2ke1ek3;A0Npz@yqLn-<PXbl}PRX
zJhAC{$IHv@){9s4D*tUNPw8Owa@y>FW947rw>NcW&o7&6yLHv}#|Ij}xkRP71i3Cf
zl>Knxdy$&<@8%N%MOqTLqy(RR)Hr&o^FOHJ{XO;O+AR01ud#-*xjemR8a?0X`oCOz
z_42mml704t?=PL(>ODQrqUQA_rQ=Q9r_KMVn*~qLesbsPZMSBHD{J=t*=;F#Dw<Cs
z!+(jJi;YhAGS=`z{^{Dk*}q?%c=dnYrL*5ooIH8*)TyQ=T??!N51mbGHsRs?op^u4
zQ}bPUpH^0`(){7ZnbbGG=G><{2Fq8cMM^xm)fc;aW@)%*=%r2Ur-}|Z{65;PtSqO$
zY5UR(%ex<@+pqdAcQ4pEEu8BT>*Xz5wyasB<FSfkm9XlaHOvQ}UOIYoYE}1+6#*xv
zu71lL-<bOK^eu+@ov$CQ)6cxmFq_?%MSRKfy^gyWzx|r8zuMDwe&OdD0Vj?1-}tAw
zUhe3a!n!T@^Lcr@>C25ZcI;mDCQ9vY>b~8(t!<dOLfQpBefY5A`25+8oxdhOS)Nqx
zF>^b=TyYPNw2GwY^}=Ua+k?;Mt8mqb&RUioKV6$M)iPm$t(TqTN0%AJ-##2=`pbB@
zCS_-f)VrBYZZ0b-f1i@SEgW3fAMzpN{Xr*r`@d|ztV2G<?Kn~Kea>I~*;hS8en_>f
z+Stif_xr`h8-EMt)R!MW#44@7XVM?r?nRkFM^3KjI2_*P+uT;|86~7+3aZs6sx5w2
zYW4lGfBpUX;Fw8sOEONaV9tHkw|V8Q(*i1aFS1r>tbe`nMOa|(?UkFIB%O>Ce)4R|
ze5%^H^}zO)$8r~(r<dn`-W5In)FI8kN;Nmvgx0$~)w)vffAgDDoQffGzK_d%W6F0P
zDf(bwe$(%JYXTR}1}xJ72~WAM^|%_allfm8pa1tlDXM3wOwE%+Dal<596{$YT{q<{
zZ>?pYQmw-!y=3~Xjnkvw&lg`4v$ddxfBs7G3Ev+rW!Cn$R<?-YbF}Zg^Xd7y;(piD
z<(j7%ncsGPVb?7Az3{M1%G?~sRnf`uA9ON5*g9~uwzr#?YDaDQ@Sz~Hey#4T4|mV<
z+Lx7YyAT$1(Xe%A0c<V6=8~7@+4V_s&4$N7otTJi+>co$l6}(W&UmtFy~^?h(p&yB
z2Y);0zIx70mgBj;T>+2y_9<L*RFYvhVBUV|<E(v;oxWPm%2HPHcAN6Q+2qCl<9q+r
zhpamA<hf|Vy5AcPZmK_*SG@Dg^5DaFEMnfD)qf?YDd2K;OM*79#f0#urN*wy*AzZ2
zsQtI%=LwbRX6E<9vKd!AyZltP{gP$eVP@YH`CqfV4Rm{U|L?fCd3%0na&wEP_nVt6
z+b<tm&XaWS*wK9|Yv#&M30!*pQR%G7lb-w#$$9c7<nu&Nz1*DAxrd)!jbd1$(DS$Y
z*O7^PkH4#2D{Ycl;Cx0tQ*A$&<EOtrgvzSh%S`W;9boMbve(FtDlIZr64W<Tn;BMK
zVzzw3kJnzMvjh{pYJxiVG<*M+5*9-?_uvydo8k{HU0Lfz+s#=_Jepdb6`r3`DJuQD
zE5r7T-`ZozDp%U&s%%5PME%fE`zL(*-qCr@6F!`L4sxsDoY@lp=VX{4+j#8c!AaiI
zv9ixM%-kx*kXf)RuWHim1=;4a-SyY0{Hxm(uyF6%Q(vbZwz@5qz2f!u_hyOdNp&|%
zrunzCX>Qg{zbmTHVt@4b5=G;5cilyovOij_c<@3XH1ByYe{i3!+{MFZy~1739!R{f
z>h*i=wBsM*V`A*r?Vh`ES65%}`3}?YINKl9KKD274tj0u+4}v_t!tTo@7$8e)YM$@
zBC>)fuEJ<;cwC3Q>bv>&H!cT-N5*-c-}Zjf=}6Cy{4Klu&Mga(UAkw*2FKcT_dOoA
zM%4|wXXb5Rt1r<~aPaWr({8`FnqLVB%DlSl@rKmpcIp|&Sy!r0?|*UWU`)8H=iw9k
zu5YP5=~^o8sZz)H+DeSUK{TlMula>58VCRG%#BzQ7HzGpds^@C^44?nFWipmR51Ph
z=FAeqV}GJAM{l0O%wK;<;`4exlO-YTvf68YMXl+3@J`2D?Dmeei=#i>np_?{&u*X0
zwcvgg-ea*Eha`+E%cqrJTM{8<7VErBe}?t4&5Ge?k1m#Vue`8uk5#l*&93?loU@m{
zm9VfZ$$T*-!CqT*(t|DW63Pc8xQ+V%CFr`JdTIS#+TOe*t)pGe{qDh=O-nC4pP#dA
z-K7@SZ8@RW<L*@zNj=kxb<gt_`Y>NkDpS>6YsRmh8T$%O?wSAR%oEO27C&BSOC`sM
zY`)_>GbsCZ`ky_j+{;<3XPyw$*?jVPm#VmD*h?9&oLp0mWp1VhGo-Gb*r#yKv_0Vz
zc!I-mgD-oox1LV5_U|JcwUai@sBG_ldFJdrnQgCUg(w~?xfR84w)}D1@{+07lS*fV
z*Z(TwnD%nUiSJMCtN(5FbQ3vVo-KBEkF{8m$H~Zks~P9CwW~K=YIRoF_WPE}N#XMb
z$BsTf{wlaDE?a)uw7rh|?_6qie$~7C#NnnXy>?ntR=r-+o&R!^u07Z13F-p74{u6Y
z_$27ep8Ge0=P5+2ZO`dGztr&9jOja0#ZJtX+3~rsQe?^IGWHddbFQ0eI{o^YmTx)j
z>6GlBsi{k!*I!cIX<J^Gpdxa$upsIAhQ4cI><70jbTr6Ki5GZ1>u{=_{=>RO4JPvY
zv%l~7mb(2h$JsnaS<xA5zARtbF<oG;PqwAi%peX?^&>VZUu0x?Po7$T^z{d!MUz{K
z?24y-TUSxyc=7d`{)oGGoV+DAYkv8_{(EQpc79|1Xs=`2KD|qE2wEEx>-%a?&C`-7
z(Z7#w-ptHBJzq6u&cta)3*N-Oxxp%47yVoQ?bbgJUghmd`8lon+lI7>ulml39ToD{
zRPop`|G?rkYH#luu4|U+6gX$Ov8cA^)P}RS>obD))y&9w`ZV{jQ;nSb#q*cvaSG`D
z`LHjb<aN{Q{eQPE`0+(T*U2exZoKnP%PBQF1rzxld}lctEWNzw@h6Slfsd`b?W?A%
zc)FZey{e!^^Ww*!Io0XaW=@CPFMd3Fhfl9;jn?|3uP$U77S6ws_xE?rygv#R0+S<7
z6&4gLypy%~((?H8XN&5Mt~+;ZX=#5l_s-kba*LOVTz&HCk@B|nu{NKlPh{S0wbks^
zK1<%nox3wW<;mLr_1k!S$AoK-HnJu6-1wHq7m=hXeo^wG;mwfW50kCBg7P2TDQ-Vk
zC$jJ6?f7ODtpG9O#Vk`M&J;Yl>Gj>?b57kbJ#y>9CGCtumvYl5ZOWXaBIqR4rSiLm
z&--<TF2e#gUwNOxxR?^HwGZE9ss6hxYS-nhmwMCk=EkDO$(JYY+`QPT@k9HL9X^L{
z9d%rKD*L0={6~xDCj^^|@9lC<zIWvKUL~E_xuNm*_Wz%?<<$$tdC{}a^?3hq*j8M=
zO1stIUrBzhe6jQI1s80uU-I7iruzS<+xxE8Ue)AHH_v`l=@g`w`S#5UrERHy4E5Ax
zx0jWLoSzc1%JspY8^1Mg+*qGIdsDE2M@N_D!(IM2x9*=+`}uE(z`}R?Rn<P8xmKxc
z6Jo5N6aTBYp}F+=(!f>@PpwHcC8EzKOsvo;Eh}LB;b;2yiiYE(zZG(d>iX*cF8?h_
z{oNR{?)s6swvtDGSsFLZ-)zdg@KVbQm4#9A>fEb7W$%lSbqp#|ia&UH=iBGXk5ygN
zFK5-pu08pt*^+1BT9toyc<LVQ`@6B{UPZX^$?5CQy#BlR_nH2}*z*4eQrJxc7l<9v
zn=$Ep*_V<>M*hY2h92Fnow<<{ems9K?meX`Cilc1Wg)Lfj~ONQ`$F!W-J0}IZSLg1
z6BX~;Fg3S_eYsZn@HD&sCegERO5^X_R{qb`-oDRPea#!oL{%ZNJ$rsfPk8_8?!&_3
z9?R$1nzP>Dj7&No9Z<+OQ^oW6r7!gc_m^9jzf)-8VEU(@Z3CJOyqf>({;|(9ZhYry
z&Wo)-^FHUeBgex(KkVImZ+~5O_6zgko{yWIKi&+fe$H3KaZz&P$DKOX)A{abt)G81
z>`G$Xkz@N7-`Z)R5%R`ihLrI9^P9?xpG<PSHEW5%*K>d8WTxF>aq6fn&b!txJ*l<m
z?;Yzag%jhYN`D3Q#mqN+d`emKT>szNd*4J-M4v2j3}D@LYs!a*Pgh48>-2cG2>gBa
z=gvlHp`UB~^!Pqa2?)|mns@Zbo~5^TTZMh;y}4HRtj4{)#o@(mUxaOEEmV2>Uf@3G
zb=mFqJuhm@E?$`b|MRccFOPm)%h4j>J#qH$U$)O?M9+RU@9)ZKi>&^w7O-!hvhB#V
zCbh)W)K-C6X1P(IX_dlfXJ+Q>&p39!-sMK+?zDBUUVg7BDPMf(xVhi_U+<S@y}y5W
zdTEHu&yN@TCH~6Ge)ViAew-Y%@nwp8F4Mz5=hp{bd~UVE!0wmgTH`|}cRW&(e}43M
z+JbA0=WemAw5|y{uuJf`I&05aiMLAM|M)$**gex^c0y$J4h`=tWv7n2rvj$y?AuZG
z=8%rO@weksZmaXh*G2_3eEj|YpXIlL&<htn?!ER$!0_yH_n3n8xBZ;r%6iXNy)25{
zvU#(eXV4_Cz`!?q+qb;)n0|hBYh+*WG`@SrCGj4|`xm!WNEzra?vu5dz0fk{_%Z=z
zuA7!y)8hA8E%*K&z1QmIin^+bhbKN(ADvrw+vHe;@xpD3c1>&Toa=naCn?);@`Wo`
zTsU&??AW+c`qSPMr%p}!Wz1_EyTH%-_!pU-x<AkMnmY3R@+#tzI>uM4_P_G=+6*SX
z|KE6urzQRWyHg_hU$3Uxlv5KHvxdfZUlqJFJNM|M^(Nwz%AbnYdf7fn5j-Z5tY-f1
z{ruY8sFkZEZ<R{!GcihYw@(dwExG+?>9)x~CAJpMSiNyqQ`4-*slok)(t5Vu{PSNV
zUtd<+zjY&1&&xNvqmNZYzFf6pw#Co(GdC;MKVEnux7SI(Yng_p##8sdSqFn&Y=58p
zbf>rKc|U#0H#e6}-Lz;|qV)L%J9od|D?CL$$nD6Zh4ZFWt@`vSi|yLEf63S9pVnBl
z*+b}KvBu7=rp^YYs~QhpS>g7Lbz|Rwh^{p|9UUDx7A|)0_mbT_o4M}caVN&`$k>gK
zy5yeAaBY&1wEk3d>is<fufL)kO&t9EpfS^6^Cd^Eik_U9py<5h*Vd->A6YlPv)+}X
zZTofd#Azo_B#XZM_2IZTx48Qht3K)Lf=ZeU4_=%6wY}_ic-#9I%W6!Ds`@9~aEuEp
zk{9xOd!uyiiqEe;aK2Bw`QzRBb+*OwnIA59zPLK?e%d;fe^+0AI~?`qBIAXe8ux=!
zHqEFoXtK}$cwhWqoY29G#`($i37^;gOun;4^T~%FvE6$&p8t6FMpHjuL)v3&u4Nn(
ztL*l_+xIa$*qoW+0#mK~cOOQE`$q6_6T9=5Cal_&1Df4NUi*7tj>vM?bsR76oQnwd
z^gMlK-S6|!d3%!u>i$ljzvtqT?3#mfBd1N7^Z)*P1E&=hUyoc$(3e)$Rjo{w6^_1d
zm?&<<x?<WXj|rujXEW->y=7BHZN2*!RI&@%pDekh2b#*?d~lDY*}m5cRG)9+-Rtf*
z_riMHnLDzx4s2NKFLBl`arrm@E$N$c>TZ>OyRvHDE0%u(mOGz6NKG$Z`@3(xZFNn4
zb>6FkmCV1^c03fms=av9kJ5jAw$A?h%|FTiem&(N-=W#B-Ku`-?U<>5xZ>6Y?==U$
zGaM|s#P)5jj(Y07oY&`6zaF2XsZqW7!>15w-rWDX=U;4k9<{;t+Omrh$!AjjUv_W2
zBKa-f@26Ex+?l4bHJ{wmLe}}D|9Q98VXM@Z=aD}T6+T>D?>-}74xhI$>khU18Ov%J
z7#uhho%|f<IsMe!zG$9!Vv9h~m)l=7p8x&Xx$LTv=t8rM@LQ+ZZ~xAovRrjZ<}3#f
z4S|r`I+IJE{gB;v^u*1>zNf{P2mJb*{y(EzK6cM1r?AI=FP$~sTm3yREKCeEpLBO;
zG5fV=&Fhz5tH0+ozq<R{mkl?vUR^u7ee?GC^9^ybx*^#fik_O8uMPd*$M2alVak*#
zQzV2-t?i8CPZX_7T>a(qm*-myjL-DShAnML{i`?Iac%0Ql~eR)L`6lNI(_>4ySve1
zyV-P)FY}%4!fDR<!^$hKSbr(c9<jndS9WS&*Uz!stDUoL+3hpV%fm~ru89$Ren0l^
z{`-$!?>sea-ap$vRleMj83M+;e}B3(YnxY)N|Lqz{rz|1w-)(Nm|(tf%GKbrOSqTK
z0)q)5f*~6-FRKL}@@3e^_W5P%tJO-P$@eD~|8+a(y5q&qUR~k#bMgBNuFufhd`A1~
znOpL^9;ulY<p0_ykbF`3?u;|)TVsra)5Owro~fojdHp`{;}7#Wv&+nX&Rw-^)f&Am
z59etzEZ8aFqWdx@`+E6f=8LudP8YW%m#fDLiHlF2(!VRY$Iz+c=Z9at4JI!h<OImc
zazFmwcAPU{sZML^)RSShzjhWImFeD}dQe~gq^13G_vi17{p+XPEcjQx)l8n@!kR+s
zUa8dLgu|;C{!c%6_sr9xpyYM)?f*O6%|HF2Ovj~QhfI@S&z(=p-TK!Z-uw4&^#5<a
z+a^qy<Dl<-w4Yy3#$uM!ixZbM+o!L~*lx3B{i=$m^UUzg;k=m_t9SK=y-zQbsS~L5
zs#OnOY;a6fa(Q^)hfRi;f~EvtG0J;wnp0TuN&Vs*b*tA$RKjajEm`j__$x0F^X0{d
zGj`wHUUjWvduz=<Yp40k;ERWAgMU|8l*bm%j^Ao@Y{!?(Cyx?it!89uta=f->)ZUj
z=6dbxwn|ROlsDl$vE}{+h0Ary*~eynYwhfQdqec~u6@QOr=-I9u0QXerM|^eFE?-B
z+G|V~Dx@@LJlgZ)MoG%0gK?XeO*BrtBvfs7@a>k5FR%Y~O5G|OsqNY4f6(om-`Xsj
z+mpPdqhp_MsN5>n@NDtKI-#Z|FIe`?S?fG|7TcbJgNv{5pPCgm_s**-g^ekjZuPC<
z41P4(>xpd4t?NHh1WqpPUAwOM#-1o{2jfc?i+`4+<=m;hbnBqs#$`cHwJ#Q4civy8
zzv)(A&%--Memr;CZP;fjx97<vxA5bZIcaNI7f4P_73ULQGB3t%kvDsBtf(rl^6$9I
z-&Dmry}E>x<SuG$d;27Bo%G}PSt}PWx^-&Z{Y$6wUBf5M=i?1Zi$1qY+hN6vln$%g
zMbEAtpQ!Ctwf$mf;Ki-)ERqhd{chs4VqMV3w+osUJBRF?Yi{Rbxvj#5-&{LZ)Rej1
zarL_W>vyD{t}iV7yW?G1+bb<AGdtyLF_m8*yf>^p{?2RZ>%s+l#IJAjd;R>{F%NG~
zN7wU*l0O`p{Blp%<`0^M|Nk7EH*MFcPhM5qYNyAZ^XjTsxKdhVw)B<8Q`c7BSJu{#
zTwhJR$$aN*$?n|Rg9<I&a&oa|x7P1n*fz;)wV7<YuJzQwpzoa1LsTaIuw3&xf`Q@D
z5~<(QO=1^lr0r}sT6%5U`5%?uVt(A;j3z2aq)lEgn%wiVJS{S4$+D$eH%|TEvUK*p
zKec}O#(Ivg`uB%)89uu|>)x!TG8I3Bk2THsX{NJn>+IE2pWoO}EB<fyzx*2s+Lb{|
zUte2Z61()#?SoCbH|s>^Jl@uqcQD)ko^R!^A4L)Vwv$XG$`^7ZpLudO@?PZRq|6&7
zyfgPDyqj^ZEyh&5zf9(-WBaF9HtdI%|7M@PA@WvV<7DUQZGN2JHU}wk`u%P-Wa`<d
z@c9M*wW1|+_7(5{SnQnMR`H_nitHTS2(H?HC(~YO`9`Fi4l8~8bglaG#CMlUpKMcM
z{Qq*{#IT|zO)JlLyyTvK=J(0-KJymzH23dYq&mNV({)m)Rl87hv}DuDK;AdMXG&f5
zsX2H>Ba$^3smq){W!`_!=}*4h`Pq1|<XTufpVAa-z1{QUziFSbH;bA3;Md=;T?b2^
zrRDS8F7;g{V4T0b{JGGQW%qC0_{0;l<Hs=*?yjq4j%yr>R{kh6`25O0p6{TMtnkl$
zf6~wIH#^z!=tth!MKjBfJMm~*z7Ax+T$!56AGWK2BV^tl??sP3Cx6v+UB8vz`*i=G
zr_=Ogg7WXU%84z>`4YG=BsM*^CfcmN_rJy&=Xnlq_)br1o#bu!xh~zmvMFJ!+$LSS
z>Bl6J;~r_1yKXCdaPIiizzOGW$u98Q6nlLMhw7XH&-<+@kp4d-wEyorqp81c-Z!6y
zf`{$jTNi0(uKWM(defuJ$y+#%_;>gTZL&V|CwpFZ(ai+AZWW23yL+~(HCAw5Jh^4s
z;>nt=KRCY&v&3xQS?^aKqIG}6p2f3er`P>`B&xeJq{bRFa-cHh^UTd#wwL{U)41q*
zr2NKRJ6oq2qy@it$p5XFKVLpAZks@F?$f&`8<s@v+%@Y;<<C<uw`l!3x_R^ETSceu
zX`J&oon-M%uk1||_x`ni`@coi6_lFCZmKzLTOG04qtrdUJE?Q2h>*%1{|A9#lgr*q
zTzBks;dnkLVyB&3>Wyb_?YB(Szb$_A)al!8tv_t`EfLmxxqHH!&#<uo(@k8<bavmX
zJ+rbW)_D!D?%pOfox5dfnzPkBg%n-vJ3G%Ww&Ibyvn^?h_Y9%g0Y?f8iXSK>dX?1J
z-M)8oUhj)9Gj_ymOFyx}%RY>;-+!{!t5p$6nwr~WU6vm`Qk%5<>-)v=g%wTghMh}g
z*v;7=-D`CAx3IJC-~7Dh9+#f(L&Zw<^546Tuh4Wg-MQyS$J=c2^M6vG99ZYKws%*)
zpL5tdy;*yrkNfWreq*S&WNQVp;jxa~_s<$srxgj#6_lOqyH(z9+2R-VTyv`5UAWnQ
z$h`V@_5>H!Q%Px48jOsL7pcqvCHGpp_NAp;#25mmu4&T5-PwM)=f@278wWNot~~l)
z==l-1bOrBl^-`wi$Br*kE>3qZWqN+xeYwG}Z{MsQ^*&NPqQbeetk3M|B(K{+^S3vD
zSpMUM`i(1RUDq$t`mAR6PBii5t2Mtq{rh`;NvJ!&?8Z2$xsuaAH0C^ix1>eo@cegc
z-zMi}$cyZH9#yq+TJ8Jzy4%}#t+!hG@J*Vpjlah!)wOeFLyv6hu|IZn$>VG1`d-bP
z<h7M!j(oK}tMu>E+~BflES!OcsxjX+cYh1toWE~=SBtRTN{>$$L+3cVJ=%EX=0Vm6
z)he@B21b_q->biUYHj{`PVH*Hh|U&P{rCUGp6sqFueej=-~Z$V%f3CUXWxAuCvX2S
zuE}BT^3|r?oI>x_Ii~!bvliU3pVw|NwJN~k_nE%>c+H=>pTm9QR2PN>|ERR~m>@Fu
zMEHl2e|Ln%V)w85TDnzjGygM#mTi+3ML0ZAe|KB{^o!nd)5$eIPwly9zw7)TiR-1`
z`F+X)giT!pb|-k*-M)Ca^R&&`zef~w#Z<SYIzF1eKVB!0t7xm@=ROY&QQ4Z6duC@J
z{o`w;{#)63S0xJ@f9N`kdxxg;&r8vsb@TPUbzfV~8$O$}{_E}+Ivbz={kc0~l8P+1
z%JEDl|9Li!9FmffrlrpN#4Rl?r%js{RO@19dwFwr8yg?DZS20VDN9eBt^F%kd}i%g
zjc2Yocd9q7ef|9RoDRS4zP~44J$QG(^~>fPKXO*>EoQeovZtrF*4tQrU0g+k-Psie
z|N1XZ?tijv{*HtVe$$o&**^PRCh%Fw?3?V>b4MK)CiNe>GUG?hw7s*Hr(d~pO{H~Z
z`Mc*+woZkQE%?2YeYN9+ey>%nru(_{Gdn(cbbU^)pTFIfHFD?941p=z)|si+l>E#J
zyLn0R*V&&tlg(8=MQ+pM`!va0@UxQIGu^9kZ*(?BN6!k}Q~iA1G;@)uOa90{diG%V
zhbqH!>%O+ke&+Q<Pep#-jq*VEY(|EwCznl6e12tC?ax<p^zP<=eU-BK*UN{k%E#Y}
zmjBAVETO#V$Nd-WTgo<^em>vmpGdjA==OQ9miR7M^y7tl&%ge@Un*LC{dFF%BcoH+
zefxe+;_hvy300rJtbBcb%I`mg1q)}_d^Gf2s`3AGSwLdV7w4$-mdS-j>qRW|?aY|B
z@)cZD^SJwPGSjtQ3p>q(oMRc{JD-;;^~arAa+Brst;4Q6pEa*Oke9l`TP!}twk&a4
zzvS=aQ*S4?uea0HJn-Xh{ePM29a<SLe#B+hb<B8nSy^w#=5NPax&@~fUoF|GbL(d0
zd=*X4r7JYP-E)pAU()UAIvf9Z!m4k=d240{{4Q7g`QgYuZt$?dV`1A951yW$?t6E_
z`&NyMoh2#8u?^D&H&(1zzI5KIJ$q&~Zr%L<#@FXYT?WS@3i7v!dhh$5w{d3Y9&KSB
zjjt0XyGne{KW~t(`R)Gv?u`%b$z)F}y6|xM_3M3~HeU`83^9LoA^Xv^+4-!C&U$Ex
z-uJsHr+v2dN$gM8{W<;k1{8MaojJau_i#+_RZ)>EJZt7u_1rFa8CmtiMSi#0+v+vF
zq6t3f_wO1VJM9(jdiTgl`;>F%tUKG)zP}Ky3N&%`bkekc70x})X@9M}_W4+?%Cf4H
z3Fpn$P7%Gzd%J?|?A_Y;u|Fq^WZOOz>Q)i7Z=Vz$&CC+KSW3dDH!H>0;{2Cv!}b3@
zJ>C?1I4FD03(cJ&Tzi`4%;|4^lsNgMorOnls@2n~%(e1NrA-O9E-1_}+m!z!@cf>Z
z-=0oq`S?uN2TzHKs$aUi&ghbnWTnpfKfHfFUOIGCaB1J;W2G%W?HC%?U+{5Dd%0!C
z4x4FnH^=rSJ52IkdVu^91RIn7gs#tz7R^t%JWn>ur(A1ih}4v$N16ryRCfR0_u=~_
zj=p)7(!UvJ=bx2-yv$dz{rLN+H^$+X`=p~kTx7fe((aYfXBBGm>a^EV=T|@f?D~Cd
z{id4|3=C7U^*|#Fx{`I@x9^uZp8ECiFO{8BWaC^qxK5Ycs&8_;A<h!aaA11krft89
zEa$zxH2ZpT(=0BumH!z(+q8?V|NpaidgGDcUD+O!Em78`@|*uX`+YwA`Hlw%@5Qs1
zZ8HrEzq+;LrCHY1qifEWOLkvY3U4XNOJB2c$&%Ep>wll?Zog;9vH#y`|9csiO!qxF
zr{lfqkLJ6hE7hm5Ro|4z)I6#Edd7`keVn@|{8Zhp{c-sZ+2CJQw_dDV@gj1^m-)2{
zn(J-cTaPSLy7&3SQRmt>JtihS)+M}gB{pk!Tsr)eHFEm3o^RzFuLOo&-28=OR=L8*
z$#3NB_z#LSyl4FU>qP(EWp^$~@5y<;-}?D4qvy}d%H?anm^KR>lGpe9ULybZ_uEHi
zf7N_spRWD+=*OWrzrE)650qPGm>)k@F1zJP%(jK!PplOFwN+iX+?Q8k+gHxTH`U)<
z`Pca^XWCi+-RI^-T@9XlKwe4xyUd<9IqORAf83nj|33G;udPMC!+uf2nwPV>?$4k1
z;$r5XbM9R8l$ZI-zw23K*7t?`-bBSUi&u6`-?MW2=>ty%&tKi^-Y5TR*^E7<5#M)S
z_ddNnT4?{d`y10=y!`I=FS&lM(GACn;=3OD_gT$9r;7SZS9Oa1kW+~8yLDh+k>yJR
z)ux2o=XQsGl-O{oWvO4xsgg@ulg{+>=AKvD`ulB7)V6c8ewLK)6P_OOcK37L!+UOC
zo9q3m-!k~$iUo&G2j`k>`Mcd_@oBl6hrdP4c1!Ltocz~co;4`_#(vAEnran>+_yHK
zn#Xoz&)s`-PnX4gU2#tJp{n`vnZY`%<MpO2zpmjM@$Agf9<{iqo_Vic$JT~$l<n4>
zZa>8~bNP>p%kr{R7Wpi@_XKIJ?y2dMx#Ry@A8L725;03-#kCIo&eEXsps|&A)1L%0
zGMH%k9WUH(5&p#g$*sSCy5G<Gn68v`JuB9FZr7T0J&DAyZ7h8Og@3<Zx2tc9u_@h~
zuw;LeP3x!NJXhQA@6uLzD7fzT?JqLx)C!Y3qJD+#t=H?ekP_2V;@2;j_$sJ~c$6;G
z@35@<WO=&y@SJr|yGwR#OTM0$b~iLg*V9&c;mX?9iPyP8tIqR&y{fhQ!L;p?@>ch+
zM{i?bU~L4Q3y}5ss;-Gs$4RT=KYaI-e!Y3P?5Xx&jlcgk*Ke`i^XSo3@$NTK-j|Qf
z@)Y;6wXxY(H+{iVP9C0?Jx9+<ugpwdtX&q~AFzF6X6rgT&-1nOCVCd{w%jHj?d!9m
ztiWWs(tP_`-_>8|Z@=*T-Xc?5oo%yrm41Bt=IwRk1>x@8SEVkc1bE%5I&=BAxW2lI
zs;a8$F_*i2=g)|5nzJ-ZUC+b6y19h;&Cw#;NmX`_pZ!!gV!e6iw`Kck4(@pnET-ot
zmBg+3R3_%_4GlR(7kmGDKW^j0cWxwxemk+LZhCLPV)o0D#%VQw^%xm?`HV}Z-dy0c
zP(ZP5nQJ-EYMrZU9zu$3i2^}Iv#T{zA8hS-y!>43&bq|YFJluoo8C>6v)a3Ab=p+h
zC%8tTf>cCjEfZX{LaJEGGiTKc!}L%t&sBd41yx*?wtfEc_w?UT?dyt9e3zVF5kLFc
z#yKJk7d905)x0s@HM_KO!lL<icYhbl{%UyHpfc0tlbouJ7+;YNKl=^^OU34AC1zLE
z?e^CES><u`M){MN{S%7?^{VQUPaj$M`MUlc(`Bc1ia*L4ME-UTzq5qxo$r0|B%P`#
z)yY3yUX?&r(d_&9qLA<1lJIYtbLz{V-wI}(d#u!O?cSAc$8=y@c~(~VNZMO|YkZ-`
zoSK$+EGaI?ZQnmR(esy%?942me1B!uDzDq8qz-1-G2CZ$yfa_hZ;xK|8O;j8eHq0(
zYwxdKKfB5IecZGc7w@m;+bhz=Rp@x8ZL46V*FDDA5Y|9%tJ}A}-i;8O#Nm3m@9x|Z
z&zP8yAj5FZ<Q{<}yFGQv3cOYp(o>GFI`m`j!$PK(rP4ajcd&oC@HF=Jo_AqC*Qow-
z{jn)>^}n7|p_$q%SDvzCjGglNe9PKhA2+^f{?lWtUB0|?)ugpmUy7fnyouVUy||``
z@f>0t?P9^cki(%24Qd~+F8;Y>(!|bbdjgjW8jI=8FuJl<boK)Ye%lG2$vrdq)75Th
z2)qfCJ9t@KfA;_4eCgClm%iPe5Yc6LZvV$@YdyvEOQ~=Egl13s`^!0gd6-Pl?f>UP
z6px+Rz5nmdC2q?#XP3{Z4T&i!-X%KwN|DsB*RR(8zrCj>=)KvlXJ%<!OBTJIpsGHf
z<CX2K{?_x~*d#Z4s=l80`1$$>Nvn0MSK6$+mipK^PS*G6o+rMsTQ!{)Zhg;hEUq`h
z=tgAw<x?k5b|f2pRg+JS5!rjnyLpL;EYotGsI6Khd-k^qt$edf<CSo*v$B-UWjlri
zo;9TgOV2Ee^|LfvzQ28IU)L^A_WgnTW2=8#t}~o3RObKo_04Mzp`NR^F3vyE^;y5-
zX)3nCy`soJ3pe}u6kQFU6nugA*8j$XuKj%H-z4WRS+^qV!oJT7W>!zO6Sci#zO}!-
z_`2x!%CG#(B$6NQo-JMX=3UOhwM!PIzr2)x?cb3-pE}f6u9WyZ&s9(AQEv8<b*t{*
zOFyyagS#fX`Zun7vqH>%uEaVdxRW(rz=u;ORb7VR!jC=~OQVz%6ZHRW<qJ={`}bwl
zt7Co>81~F_5q9X8vyJ-Sf4~-e)`-Meb_NrvKWWz;o?C8L(J@Hft+%`QmH6cR4YSz~
ziZEQr=m<;p+aq=P%GwMG0UySUpL}8*vv+ao-Z#H7lZ~O_89U@0612twg9BTFiF`x;
zv5Cs=vvzUb?_RS;$JyC=r5)2jk%s(Z6BM06q7x4sa9H{3@GbBf=pE@8hnrv;ihLT%
b5BqQ>)q({)hfXjsFfe$!`njxgN@xNAx&3r#

diff --git a/docs/_static/premieres.png b/docs/_static/premieres.png
new file mode 100644
index 0000000000000000000000000000000000000000..794e96767de072d6414630fc9fbfbeb24d4f9d9b
GIT binary patch
literal 8990
zcmeAS@N?(olHy`uVBq!ia0y~yV9aM=U^u|R#=yXEn(@(W1_lPUByV>YhW{YAVDIwD
z3=9eko-U3d6?5L+tquu!`iuR;`)`MQ6C4~=UHlt6CM8uif0@C(-aR<j@bvA%#ARF0
zcrUB8e))0JrY#$S{Exp`mf0w~e#s=IS&|%CVJkY8O<T00K|@1f`t$GY8|!(PEesBv
znYVBL)->Jp_vQP4-@IKpud*`zyqv2Gi;K$=)#z6<t(laRR#}PVD=G0NeN<Drq(G24
zx$Ap}pz;C@F8Qz@3a<~>Y+d7?lCs3}|9oDbT1OUE*2H5ylFQ1R#gz2)_*RFlH7b_~
z@t(1MTH=!v6V<*a7JbaSx5si`^*hVS%!;QEKFZxYWBs&+YF*~f_jGocbR3=C;n5s{
zU}o*D$iKgD?;-D0DU*x_cezTI#qRybW*VnwSx=ENPCqB}Rl@Gq3+3W==ajOkPb+V_
zpJaa|`t;%q!{jSZZ*R{xzpfZ*v$=0icUM=z+gqkN_x4D}?kYKWak2YZNj|}eX%T0(
zc>4MA#Z|pjEpB&oS;AQwwTGFBNkK_KP()n(@u#P!XIK<2+VyXGe4S%aQBiDLi0<j>
z`r-Y_pPrn2#@Bvg(UfzaKgnHQ?$3U}#%StIw|iZS7F2$I7O^>v_s*R=SDvaC-%owM
zci;bi)g|xlfULgw`g#5T-||)8-f+(KV^2>{FL`rAaCP{4x5C1Wal0@5eS3Ge`23nr
zoHezziTU~c2M##Axv`O%q2SMt!Y{9`a`*N1Wn5gus^&AJ;menjz5C?Mp2yCek@ZM|
zQNh$ybh4VS)9GotiOI>#Ad_ET<CU-fQ@HbO=b5Fe=F479;bRV)pq<oo;X(i>FYnqd
zXSe0vW@%uU(9qCOblc|VlgU}LeP^3>cAR)|aq-pE|Np-4KYH(89D_$f!h&6Q@9ZqT
zYL+U0-v0ldJNxV7bE9|dZ)9ed+Oj@;{k%1Cd!z39zjQAs*dQV<zPfhr$79m3cK!eJ
z+`j5~&|Q%8^yBtu_|7(4yW#KQf9qXbl$4Z?9GT7<sge9?>#m-YpEqfpT70Q;WA5#3
zMbl@`I&3;odl`d*prGKg62Z)GmhYRInEre`F8}KDrNtkFw8PiA<mIiqw`s-<i9KJh
zMT>s>{q=f$^36@DPuKnab~~SUny9#V@~J7BY`+=h?z}%dgFo1}bER5e;lU=>9d&=J
zTHo&f`AquFt*xsMeRVN?cx7d<Xk4aI`nfq$H``ZQ=J4)Jy7p-9tXW;*ah0xrCohZJ
zTUGI>Q=R7)$kflz&Yn1R$|)vBhT*~9@ArbQ@Bi_rdq>@0D<fm$jTIl0N`KBW%?^l&
z$hZ*SEv7qR#*B_Rb7aoUHuulJJ4G{i!pxbSQ>KXg`0-=K>GSh!e_wcPsJd*H#jzPP
zBuXnwN=!a|{ycHsymiwJmfjY~oC<bJ(DI|Z-&hxYes*?a-QTLxzY83jFD&sCZhpJW
zXJ(UlTm_@mT)uDLzG-M_9Xi;|&dA{B=LbrAvrICX!o$P=ypI3xwA^nl1H;RgFMs@e
zKA-p3Y|CObtI}63ZoN{8r>1DW`sCIt^>FX^d(Ep?Ye#L(YE^V@Tk-l-wYmP;E1-D$
z{OQw`f8XBS?Vhaef9UE}(fqw%r~Nu8kZ<LB?Z6e8ZEZ1zzqfdHrk$Pj@bCBg`sK0h
ze6nBWEnm9y;k~`p3=MDI<lMM*>(yRO8S65i-0F9CESvvDZOK^pZ+GJ1wkpFZb#cG$
z^CxHdm=^Zzt^OW1y|ul4arX6f8Q0cG9_y8E@95yTv$Od4i^qzq)}2~s7P+scviHql
zh_%%p%ZiH+zqq(qP+q=&nr`&8+sDqG^Lt<UvixlO$#dt-H0_dSN(KAMJa(6_ZFxSg
z+V4GU_2*~4Id^slp11#RV`FQ(vGQ};;@_&9!mdrwR=a<Gw-yr<(}XEgQi|-C+F$wd
z@#DdtpP&1_yBuOF8(jLUxVYHa#f4?lrcDB(qOEUlZ&$XmlCre4WN4`V{x0#}o=OSR
ztSO!w1vBTGKIyvYe(&nTM~|Aq)<!Wh)ct;It`omc=H<(mCr+O}Tz<c{eVOlUr$CV#
zH*Y>X)+;@$XXUEDxwp6Z&JB8bcei;{Q`3j9*W;B<O+_C*e3-R=-MV#Ki<vr14n-BY
zPChE#aL;_xvvYH~`T6;8+`hdyet%t7ArCjV_IKuhwMRmx{+n0zO7pA#fyc-D7l*D6
z%eb*YvBYZbz4LKX=e<_`rM+od%*C9K^UQLk{(bDP581KLf4*Jmzsy44;~`W3%`(gF
zTIxML>{k5hu(byD|7sS0_fP3vqZ)1!z327y_5E|L%OCyye&79gpX|d24;ZYitwBY`
zj|a{C8>+wO-MDch!)n>8Z|2qCa%#TcEtfFMk=V0m&xH+%&LD^S&Ni!f+-oi%FV8P7
zKK+(OiIVTewwS<we^#Y!?U68KV%U&+dYTk>#~E!SBOzt?z7|e>?o9z_!cQ;M;8Idj
z^7(1_LU)#IrLf@NsT(VV1v3S@%>^g2k;$C-#W+J#Q`4gSoy?xSd$YCVj5be_w^ajG
zWjdOgnrgY{CxT3$Y4YjY=g-aa=gYt6&vEs7_uThd`_C*(5!c4~^XGfk7CiBFS>mX3
z&&5UR$Ri|XE-R>Tudn~#zRla)yLpjD#IBM|Sr^w7TOGsW;F|5k5^vU%Mlv=P7w#wu
zM4Eb^G3<j>c(=K}yt{il!A?(0i_6i`v7n%!Vfk`(F`bBpMT?Y-T|JiMPMeWD$84k1
zY_r@$H#R0KDls(Nxf7!ky^UwOUaV1mf=k#Tp`sq;eC^4zXLqj*Ue3fIrWez3db+-{
zt*z|qYikd0%e{R@Mt0)2NUy%aC%LJ7vQ{l;&iMGuu@LMQ(+!&LKgU9F=FFKhjMMvm
zHYsmnnl>p}rZReFx41qN0~^0w&W5}L4UDC-d=sy3oFbF_ahuWCSD}C6qi$L$8TBoF
zBC+}AsUJUnFff$8y_LEl@BBPln9|2{woiR|Z?E;8yLUn5SVd)J;-MDKf`Wnr+j4Jj
z$hfG~x3AMDMbq+_&o-m7va*P+S)wj1+~RsJpP!w*xT7%HXNCdeVz=I=)vH(UbXK`!
z;(gLkEMMEC>PrTwc64-f+^~6bb9*~`+POKMTeGjvvNlm#oxo{%EK^u}L;e4{=G103
z-a`u<n|Y=!U%vdhtA|V2QK8}<WkjRLZ+6C=-S78BuYH?#ZcgOki2{+!SFF&OV_UuL
z)NNiVlM_$kJJ$1bZ$I|**|S;JEJ~}({{Q=%^)xc~e&U3q(T~M+A`;#Sbga3xA@Q(5
z&JBa&_QZx_jD&%dMnFupSgjcoCpKz_uS+=ABWWtiKQq$Ht81t8f~Z3^TXiHQCDn4*
zdz?HkAKtuuyZO49ok>9qDKmX4A}6#a?TecB^73+J8=F15X6GAbK9Lm>`LbZTZnV$K
zHXV<Y6cx8Vnap<vE5r=qb=wzdaPaY&t>iyfi8tGXdWM9Eh`2h2gorR4xO`doyxs3L
zGZ(M2J|>rc^K;1Mh&_xye*Ich{{G%GzQYdZ=h;4d|33enLB|&r6%_^stMYd}phTvt
z%Nx6^#IQJ|bg|a)=wCKh+5Sl|3x;|+IWa|T$!J{WJDX|6Z~c<k{dKbQ=FN-PkiaOW
z9~ZOy_qT7~%zjmzp0|9~v5DJTZ|twP7jZrK?d|QWsqFl6E=5I~Bo`|gmAtuOxVdl3
z_jh->1rIhbGM^D^Hq82Mv#~;WBBS8JHeP7~85tgTcXtbG>*OaVCVF^yIJmjBS&0Ue
zWu3o%U3~qXPoR?I!n#;%3kwSceSLn04avv(zP!IL|L)zpj4LYytx8@r^xOZtk)X1>
z^mW*mmzUXlrOn$mZ#H&vaw_=r#FL@HZ~5ULA0IO^96WeX!lq)wuDknce;Z_6P^hS=
zIB@Nnn5<RFfop4{zy4aMW0yR|HZJ*m@LB=kmbNypjEohUu@Nlt^71dQuAY8xQ}XdX
z&;S4a9=&-pQbtB*N$_&NO^JuunsfPOtyB~h6(7BLp`oXzCnO`I6TK}b@VdB|*r`)f
zwU^fZ{`Tn28=Z6K&RyD=?7ny3zn|ypxfs4Ky!_I|Wl8w@xJ$cAUuzwI`uMT3u$s?=
zGiQ7xO|z!FD6#tZ;lqTBi`~7WqN0{QS5i`P@~MfO&}w8B&&|#Kv{gLrLbdNSn>%;!
zvNjw!cFZd<aH55!<;fcxlU-d@l$D(sI`;41e`{ap>M$jxPmj9wr`?ukm}y_XucJdm
zT>Nwkr|_xV$FE*#+5i8u`QWF_%gZ`DPVA}teCn=WponF`g9FZwjoofOHvMKZmA%2m
z#YJN8`y!W372Sy+`?|Y@tE+z({SOw?k6W|t_SWp_CK(qN+$obb&l3@xXj%L$<i{di
z%}>X~@{=Eb`uK6;h7ATUFD`C(+&y8!1h4a~-P^w!nZ-}niBw`xF)#>7N=kZiZ*TRa
zS+lef6BC&nUR_<SUjFXR#Q6HZp$sS5<?A$*l&ZhI3A}!OmZ`VjTr1U`J9loX{G3);
zS~~Uny=wn+b1ap=zq>nm&mNo3{{HD|zOy>|`};dObmI5LFm%kHKmW~*jn11kZ&p=S
zc3$Q?d)an*e}Dg%*VoUNdcUvsH%r5ojEheD{{6~6dFs@pHEVPtcNQ&W2q@mY=tocJ
zw~Ag{|EDWEAD!jbIV~W#=f|UN4GoP0*6;T;8zvt+aO@b{?y|RsuB;6H_`d$X^yB0G
z?wixj8f0El(dcUW@S&hb&Q_{d%Jk6p`}O^WkB@<xTE}M?CT}Qw?Dpfw4+SM9rhfZ>
z7F^uig%1uewzRb+y}q`VgO~T{^ZE6ChRMek_|Lbyu`M@x=X6C$>FL|In=>RlKR5To
zw{LDvPE1TpOakKK?GF#PKfbWg`NZkd&2#6@J^5TqTbuj$x3{Yc_WCV%zQ3<_XRU7j
z{cX9?EG#S`H`Zxw+O+Azx7+!L4<BaUxN&1aX(=nijoY`AzrMQq<59Q%gZJ<G)z#I%
zW_3-fygTW+cG#K&+3WYRF@XHMCUSGZ>ub7uzTL`x_36@{J$nj%f6E0`VC&Ycv#9xD
zFv}!!(YpE8<$CL4b~dT`&U*0Y=jR<|Z>8M&<<_p7Z&z#e=IvWSY3c6ca@9VucE!(p
zYJNVQZc+Tqr}bl~>&wS$PgSnc)w!2?<oNN&S5^jBe7zcOn0-yB^yiO{k0(x@+A3+B
z_TYB@e%II6))sz!6}sowtJO2?YIogQSO5Rtj>5-nzxKS*waCrQy|_I;e#g$8FSo8<
zxkJr=9uLEg;^%zZ^6qx+|NAzdp&@Q>RpOl;g+D$V=FeVJG5Kp}U!R+wAD@_B%nGq3
zLS2g-T&`5!X=!1(apQ)9fk8m+yGM_jrpMPs-c?gmV_Ug$<<xhV@86fdc=6(ibLWm-
zTI&6k%bdX^_m;^0n$Nrp4>q5-V`kWre_xK_!)g8f4?zBSyY>1PuJX=DkCH5`t-~ea
zL#No?dwYAkbnUz>?(T9)Pft&VhPuDMB-dz1mOVVgdS&(Z2b=Gma&tS-Ebd=ZV^jCz
zA-jsYy0WFE<Z}P{$KKxFesNpwZK?j%F0;*YuN;b9^u#qLI3^~>An6E4-ujDgPX`-$
zy}iGG|G`~1ZbXQPi@)yO!pzK^n4Qhd;Nj!r(l2M5ke|Ok@AGAUd&Y`@l-pag!ynd(
z>&0*|NLUmkEd3~JS0ll2W#6O6kG1c-`}FkmkFVF`Ki(-m9}02#syWMV9a`;sYJ$D}
z&oGgr39+6B#X$XSW(Fyf6+iyIe|B~@2M>?S_Po0v&RM^I@a*jD7uVKGD=8^m*j4&E
zs&jSA?%mZ>f2lJy{Qmx)nc>st&tIpBi;5;*T;$3i=Og{(=~G2bO;6o`>3Xq;dZo>I
zxWW<>6&W79y1Lr!?e;y_%QM^g<=vXuc&{{`zq`Af(c$dzOQ1Hj;K3UkleK%!N2K;&
zzwtR_cEq038kO$-eSKyT+tbg>F&tRjZ?~#1D>*4i>rM9ab8|hsybf(jJzenkSLvHu
zTe-Ev);M^0cucKlI(cKqnU{}_cE7m3US38<=E38~&Arm*vrOf(g8~8?)<$oa66v1x
z?DcDIhKj#muTPvbsp-$38X5aK8D@4q7bhpCoZQ@t`)aG_SQIj`va+&$z8kx{?CR_F
zPkz3+xw-Js5zZ&io;|v=vl!G$iiwH2ur}J9A>jF&^z-w2xyAJsELgw*^7!ri{k+l9
z(Jig5in_YI&(F_ye|>H3)kl#<H}C!V`ML1dm&_;6pDSx>ay~xRdw7}eY=eXY45r^c
zJu(gh7uHv`g6-aIIkwujtGjz??(J=t7C16je!p9;s;ld3WMuSYvcH|6ySw|!`2G9-
z{QLdB==;0a%sV?a-nen&1iO5Vf_dJZ33u+q{CwChf8_Xa_dR>|q`bbimdQcQf1ZxG
zUd)8m;p@G8e0o}1S~?bKTv``vee&Env5EixAE~*!t8~)*`T9z~!e>iJhu?gxnfve0
zPbP=FySqXk?p*Qis@l(=KOen+umAe``svl*-<>=;SzT2@!QtDxyU|bgty=YD6%)g!
zzu)h#J{=q!eDvHozgY9^YipwVmzse_E#}pJi!3ZDnUZ~dUFdH4<WFDE&9%M+>QAqp
zl9Q8j<mS!DU1e{zl$0Jme8}W*ZjPn0l9F-yIT6=D6>V+r_4^+^N~-+za{1}KPODN+
zPn$Gnj*gPj&Ye3i?Wz1+bldjVi^Y?sO;c;<mk*m>`tp*ii(JgQ>nnqo7j6Ii`Sau}
zSFU(Hh6ZjZ%bt)8X;XB|?En2(960?+?a!yv7ioCye0%8d;iuo;-hTA-Y3hc&8ygah
zN?ru)J<XJyoGf3pa>2&JnTspxzuioKWx8Fp?%&V!m-qHoPyM~B@6DT>kKevcQ=eDi
z#Kq11_1fFp+x_=Wi^%@;`E%-r2M0ero1K4Zf}(TQ-imIU9V+Y6&(8z3Fy!RqjB0)q
zbar<Ov$L~Te!Uv*>XLG0MIfk&arEd>C8bM?-T6O$|E|A%zjgV$6H7cNAGv!s7SvwJ
zy}b=&rdL(fuDIP#o}@?`Bs5r9S#>oxH*d+j>~^o>G4II}Cj=(4xBi-$KJVi0ebFu|
zwzjc{4jp<j(Opiky1F{^`ntI~k(*p(C2ZksCD({O*&dZg^$ZOIe|>$e?&s&1l%5{`
zaC*tUzu%%?URyic!os4%Z~0`s*j+ESdV6_I+E@F#%Wt``zP^6srj$+*F|kt%o!dcf
zWMX1+aZyoMcXx7fI&$q=m|XpzLP5>{-d4wsr1m|st@%;l>E&e<Atxgf^Y)@&Xi9pz
z_xiZKDW|4r3dzZ>+wOPzX!X-mQ$b$r>bMg5aa&31{W)7#sCAjIH)AaL_ouQsb*@$E
zp?iC)<#)YpU}V<Xd)&#v!C~j;E4Ec%4xF8Be)V~;l&R4S`}_Or>$g7AdSAhi@bc19
zP(N_#?Xd8ytgM~o4mp>X@z(wS`~BAZ|GzI^TIzjqXK}jC|39BIuC0lj`)0G***TV%
z?<hvh`StbnY-^V81N=HG-8wvWdOm&lurYdj-qlDMtGRripP#?JTWsEnEqCt3nB?3L
z=vpN4b;A|@dy#uizUq-S=bNq<8?>HNP3!EvdvdI-tOA0I<&uy0nU<e;n)Gp*)Itre
zuC6YgY4`V3UVb2*Q7U-))z#I8rLRK1S|uxGAAaO(dg%0N?)3BXOe5-EUD4c<b92+V
z$DBMoNACasSH320@2+#-eM7_}_N;WX`FzIs$NT#KtGB-ajg%g4<6U_9<r$&NlT^Jo
zl)a5wvUKUp)c-D9JCDxJI<g{gv4E^>@7LGYmCen?_y7B)eXK{anUz~CWXIW6p{o<p
z)7#g@?p}3&#_G;(s$O<`YCfMeUtOZ(5_JINAW&PW{JmRBii(tZUXP-4+k>yy<MqG0
zMLn&&VXLc^J$u$HE`EOgBS(%n1d5!QXB!=Bo_EKhqOwx*?)IfGZ*N~;b@gzcto4JJ
zFF9QU6OxmIAF3|=a(%&{%7YbKr`)-ib9$PtshGgba7ZsI^0~d1_tt)Juiw$drKRfl
z;j9~nz@r1;v4;ts@%{b%{l}+jhp#e;_jGx7ux6`HVPWAipV>3Q_C#;ZVy&+J-Tv<v
zYo@!G7gyQ)d%4hV+3{7Os~<dno*pExCYo<<ZoXsZPDLA=J4+N!6uG#$ZK{aYe75>2
zsDQt7=Z?>-X1txrT*XV5E-ldTTKm^WQgG_}^z-wc{%eWP+_!Jvi@UqaWnEKbphNoC
zcKrSQ-8oPs=l;ICcNPjn?)miT>4SsK9)5o7w)CpPM*odFy1JYK0t7%c*UOiktlVM}
zfBq#01`6J*{T|E0#^$vAvg7j03xk*YRqao)t@~2}>M1c8l)MPov17-I*NYY}78DX<
zN>5J*4RC!tE`PjBRQuH5xt@#mH+6klTK@jtt2yPVmZ8&j7N1$N{&?`!+*?~XlaKd>
zzMnpK_U!J|)6*VaTIyZ(7BuSd^z`)Cy4H1nEROX`vsYJFx3sl|?dbpd`ugLg)8j7f
zR{y>-c)3CKx12e))nc!&uV25DS?L$|rWTpUCwB8aefBKr)s>YD4Xxbbk3Ky;?cwi#
zd{^n~4Y{|?_HL6l&ui)L=kJrXZriiR=E;*Mpce6ljT;YMTN};DFu(qv<+r!D*%@wZ
z%az`=Y10Hq!!hB(fkunEKNj!q?d{&P$3{h6{qfW3@yFEX*DNyM@BSq`Fm7MS^4_IS
zB;4<nz5q3*&zw1Oq*Hif#zm#lpGP`{C(fMNX<7Vi#p!i1I~Q$VyLPSauWxU;&CSj4
z>?mA(sP@RQV@m4k?16!S9bH{o+kJg}&N%D$DlPg19;=CM*NfZ3!2s%Z9^A#q%=W@o
zUr+B?zx}_C@_Uu+iHV67uU0O<uq87%W_Q`zOSLh3tG+HQjM-PSlPgd-FcUnEbA4ge
zSFO7BI(y%N+E<*MjzK{}ckbK~kdf)hySpp#;i1+UX1P&Ie-{)LF)_Tkvs1X4jd#_|
z1DzhJnwG~Vmdk$n_>qy}&8@Ac6YkElt-ezK{?1NePfyQ?Z8?(b;`jH(?k-C_+9k@t
z$?53k=C<_ri#t0v-(nZMY6BXqd2e-PZ*}>O-Mf?j{`wlRr@}BOIJofjHQkzDFPBGb
z$(U&MEAP$@!v^;Hs=ptP%Yz#Hd@>dd|Nj0~R#s*<&%5K`=hqi^-#q``k-xvcUtH!Z
zUGn~(?EJc4D|hw({{H^)larHQTwcyE;(Bmr@$*-IZglE+dV(V3=#v>U6iiG)oSdC~
zUp~@*ep-LOh-)BA!@cB3M>-!pd#2_+O=sfm?fKo)r%!jBop`wI<b{RKtPL+ptONx+
zdwWB#PuH<7eFf@5H@{^(@#N%W?OuIY_c>|bwE6mbtG-UUwl+Ha*0JNq-K)O7TDr|p
z^|*@*gNKVti)Opf$%*B%(zaD5Wp8dYE?A&&<L1qShYvFwr=L4=YissZvvcRpb@cVQ
z-QQQc@bb$CPoK7`dQVd@G7`GH+`oPIZtGd*`Fsx!&M#0@RNSz2Yb&VdwjlTRwvO)Z
z!w(KNgS0$((xN`UMkxFGx}&p9v(FUWahbMYPt8g{Y3~z;PtTV(W=R?*u`nc{7HXWr
zabhV8XRM#*94O-A;xgmY>yObEpVWw%`hylEaJ5D+>+V5DQe#^0|5tyzv;6%$*a#NZ
zk<|Q>WLK{|A6KGAQe$~pSy^WorE=Z5b7z4@*RLD<>-XP!cF|ql_5Z)WuTAv){rzoz
zzuC;6D=sR^>KZ5@DjLcjC>WTV@Nr$+(QfhNv$IT3oH-LRU9+pnZ>|+%#fR0Gr|ZQ!
zJwG@1wazlccvWS_?Uoi6h8358bgW35S+ep${8i9sl88vliWM3=cJ7p1qp#U_Oytt6
zM{nQeetGYwrlPXIwOcIX)|O0NcUPCKt;+AUynKC+%GdvCJlM=WJ$eVDf}x?H!(FlW
zt1Qai%s6_?&E;6)$8}8`HW--X-;-f5$iHW^_vgE%-qTmT6%rD9@b>N6zMR_HTEoms
zDr;hQi#0Yjg2pq~uh&mXPG)5I`0?Y5i;LN1WMu_qWO}&8^+GJS&9kjObpL*Qt)9}2
z4T;Q6&CL&Ayx>SrPw$bj6yoIMJaOX0gDIR7j}_ip!lf6tC*t9*OUgHo9C5Mv`{go2
z!<jQaf4<$$2j#MBYonKM`}ubJeS@+$5o@Bi^EtQk9sT?JJEM)pli+1O2jAV@-P^Z%
z#|{Z~zc~T+Yjm`<4&B(8{PAjd{L8J~Jv~Pnnb~<BsVcpFcw#qKQgX6k;UgCd3ky&m
zM5#%C-w&p)MJtqVa*OLJ*xJVG_Njip-`Cf7V@IJfs8pRfvs2NzO~KSu^z*Z`hrhkO
zJ#p^b-qX|dK{FSxwsddwn{U_q=1orN{QSLN#rFMrrOm>|rlh9E_Wj*m=d3KPLx&Dc
zm^ZJl>g%h8pf*iKTE~iYg->E#-TP!5udj=}xWJM5>(2G-^<!dV870n@PZxO~ySwaV
zZ`s>7Zyr2((o*~T8z?UxXl9DvUsqf5;=)2N!>RuoOtiJR^Y{NXv$3%ekd|J3EHyvB
z|LW@S$KCq-8ustEpEGC9s%ox|6HEn9Vp+H6-90qZI33ghE4?{U+5Jmbk&{!?y%T1N
zij4E-&11VP;@&Uk`u*MAtA}`PW+Zv~`K|jj1vKcAlanJLA<^;TMFyzq`S#{!)<aoN
z{r?OMOvgcM0rVDXaJjU6zUva!aCA3U-Jg%{9UW17HgDQg@as!v^P||Rl-V<8WCZkh
zuVdEVy=T{S2{jcJ1p@<tZQHh46hGr(nDU!-A*A14yl?git_>C82PZ1K2ds~?WnpDy
z{P902E{LbQtLwvMfBTi^^<#InNSo&^$iBX=>aUD#l}JP4#C3ij&z(N)927KZm+wjT
z`9FXDta{tk)wLnx;v%i@{w~uxkM8E`ld)`SXkY-<`RAq0a#oxRoNraiRsQ~7=yFvp
ztz)91?-#rGFRJ|f?8BEYCRWRY)%_MMSm5yX^!4lF3?F{IUazdG%KG!?Pf&%*#wXJO
z8Z5bWYf<g*Z=tp&N}CLH?zw4cXgDM#Ejn0J{`=e8#PoFb0~;dLRa9Qo=I%Rkak2Zy
z8_E3#@7|5gudEE#;SVmGuk6<2Fj>vF;KKvQEqQmP%F4=KTv;icl$`wV&6^%RS*rz!
zhucDLu?t4ZiRCNLwJ2oTxpOC|)?{F4ZEa;cYG!B{m=6lsj%#b9otIx;nd`FTj#BN%
zN3M7FRBk?X)Y{Nc@Z7m`8FzP?G8{O0lGD)8@Wsu|>N2vj4<9~kgbtu-=;%C|!Z~p(
z(y;G@*3OO&0pWOXnR|6}%1I$c1#WS@HJ>(hF-+*_;0Qj{_2dL()q}1_UY?$mS<Z^`
z^HWaANt@@Hl%H@3%Rkt}Dj@hZYwaqX)xLk)ma=Z#zTMr?v2o{N1ts1GP_5Y3PJkzy
zkXBTjc%uI@W@i!W#EBD41-T;|cI>byZg<$)@iWWTNAKRpj~^v0i&A`#IJs=?`I%)q
u#r}PPtBcF6jjecFpP;D>^hvNU^|$u(zRNiHP?Ldyfx*+&&t;ucLK6UK=&7v$

literal 0
HcmV?d00001

diff --git a/docs/_static/presidents.png b/docs/_static/presidents.png
index 2164ff3de19ead9700797c517a93ec2486dbdbf4..09c4e6f791899e28fe803767b04435fbf2a64d8a 100644
GIT binary patch
literal 9166
zcmeAS@N?(olHy`uVBq!ia0y~yVEE0zz;J_uje&td*K4XB0|NtFlDE4H!+#K5uy^@n
z1_lKNPZ!6KiaBrZR)&N;{m=g4yQoCMgv1CI(HJ2|7e-N0q55ayE@zhN2z)m=a_P+a
zsxQ(})1v2@Xz6}8iS`jO4Y_m3cJX?SEVWr0?>xG6w3HrLeE9kIVdB0%;{!ZBXAb<`
zb8cqw1H1FJ@1E~$=P#fA+>S|5P$HT4u6S>cEMxMTyn;=}YC?0~^mMlDTqpYZ)29iO
zCkJQloIF`LCMKq$Hg5iP^FS;0-$%Q}3m+V4^g7+#)FdD!b?Wu!Uwig-3jN5lNnUiI
z{IR4kcW=u1GiQ!mkFU?|iI7OvpWwDhTZHS*?(*{z8x4-dDcJR<pK18?>C=Qcb8_Ao
zY<ZNDex{+QsHot>1IOg{g`(=#$w~)Lo}1x;aE{xi>WYelQ&TjLb+j6OW6G>Ck5iiH
zpfpiJS?t&i?jy@T_DD{cJXyHv+nY>~fsF<|oy`0#i9R|OHzkER{mPEHG)<msIPt;9
zH$9y!{psmGDnCr-88SbD@p~j?QEj!E2UFhSIsX{Hq!CM#!iRQytJ-ZjH<RAjM^2VI
zzwWcnx?@5T5*?YBmq}Xlq&;fmlg)Y~z`&rVr>ACJy7{E~?%A`Ym6VlxW!a1imrZ)J
z?93AX$CAlyhv9w$+mi9&@y+r#Hv(TSmMShTHp#yyqwL;yq?KE|M|Rb$na1g>9>wgf
z+UoaO#-<`*tDlR@5$?VTSIrmM_3CSDAAWm#yP&vu`@6flA0O!yKE~I1wb*9fUO5dd
ztwYxD_awhDc(pcqd)~@(T2^ImGTs#Qv>o3(yMs^Gs-eTdMMGcTJuFP@Sik&wE&J+k
zIz~oDJrWQ9>qKqw5PjXkDcmE=m(AcZ_04%97RJ21yoilStTM8)p{KRi-F5GkT51*a
z_Qpo$<9)Ku+w<;T*jrt`wXE*vQ}HkF?n;-Hl}$LA^5OgU<DZ_M4vdRixAE+oH#vKL
zzuTR0b(N@!5NC>!WK&bqhO)O&y}z!;ZeAa~ozKqBZo{^1ZOfOdUt1p^pF6*__v_Dn
z^0rkXj*gBKyp|S}mAQq4h<y6|dG*~m-{0rr1gg&MEPkGGZjR-7eY38P4vwyljuoNO
zx3}l3Gq5yRmAqK6)o;39Y)GkD-W?AY7iIUp5Z&44`Errb(ZUR$K7S5gYo2{gCv@&}
z`@?O#%B@ZdS5?2gWm;5NxN^(C&wqP5I|HY#joRw9Hs{rql~K1POtYrEdj8=<!Pe3*
zonLS6^Pg$ddgkm|(`zrUuAaW?-xST@E!%$IOrL*s#d}l6hDVPdXW#Y9of-7cMm=nc
z`!_ECc{T^n&NdI-Z(luS{fDFC@e7tLaml^8(7FA?&Gh-9x86NFJ9}fnL#M0nH>aO>
z^Yimt`gMEm?Y7w6WuemV*YE$=wbXlhmhSJL&*yK|yKa6hz4r52^8l@>Qm6Z6t=m9e
zlh#kzv2XJ&!LJqHKq3A8UiFF7r<oZ{vaWE<wJyK5B0MgxZ^sUcJNxV9kN3;7Gt_*&
z8ouh&ix(MBo;+EwU;)GD=jX$9<2NR?Y6bGiS}lp1H)Tr8@qT$_eSLo8^m8G)_1pYX
zlaiA|?SKFN{doQUe@>2$jMH?Z*^G^i*S>xs{d)78w{JIQU)K{66@B>S<>i9n;^3)s
zt;_isHk7;!N=Z#!IW7E-^vV~r7ydezb@Ik@u~5S=nKh;JugBNNZoRj8`6fd{!>nAb
zsa})3ma;VD<mSHo`1p9%Q;`4HR)2cpsiZXN^wU+TmzVi27FPEQh>VO}T9|F!tFNo8
z+UerNaN^9F9=-T|Yqp)+QTW)z?{T)!>&><Cdnz_Y{q48=<q>LD{VnI}r!{NVc<E37
z^0wNy!T<5<!^=O4&N9o5dTGvXUHWRtx8HNE%L8I!co-^vd{ETU)xElJP4TBEo}qWo
zobh3Bm~U4ba(bFhWK%-}gGuf!k^H@1#U4F=92gN1k=s-L?oOlALI#E{nU~q#y?dAS
z^nBi8vyFDAFJBIRTduCIe)as4$2s@gUR2j6o_c)Kb^e>azCH=dB9)+^pbM))wbz!e
zS+nL!oxZN_)t!Ia`Q@1y!q&(2o;cwV5fQQCR8ev9#>B&HJkn-7XJ?r@$Hc@;&9$8!
z)1;6wCEL1pz2};?w2pn(#r5>`qW-^}#T2Oed-M65+IE$dl|OzypRes(k~?p2=ks^(
z)?IwId4AXPAANm&9sT{s@9r)K8Qap{zPRx5u~lVV-Q6D_w#$d@yt~YI_9~%gr>1J}
zD0@3AYUein;wvg)&c-hHBj0vv-Q;!En|}E4Vdevumqc&L5d8G%Q$SQy*WcgY4<9|s
z+N5yc)G4m=_xFx|dwV-{`PtfEUmOz>6wLDP^}KnLqZ7Hw<?6b<duylO-nwbiq0{>N
zc^<qBuWjd(?fUYi1e7$j!`EH;wI=p{1h1mLKEJE0Yk<~Nw%69HZ70_U_pY2}kjS*m
ze?A|>4AX3}w6n982C8dmah*GN?#0E$>^eF+AD)~Po?}(&HMQpa<)>frZ*9r6D0?Hp
zprEVEyKmn<w%)DF=GnTQKY6lo?OI*C-*1ff{QY(tWV)=~rt24`Xa;|HwR(M6l$?~*
zsw%m6j~+Go+yC8i>YI&?&4-Kb@}ax$9&Bb;wz7)Kj!Z~MSev|7Q(Ro!B==Ux>mui`
zbFcFCr>|EuHa1pKQ+xD!{r<N7`|XzmX|7qb=E72M@tV(P&2Q{3Uw=z`r~Quy%x~`R
zm(Sn#Q!OSoHZd`gF*`eZOa6U1LqkIkPtV2}z3Z8`v#+f=xGDAYg?+Wv5m8Z#N?%`#
z*i&Kn?Ck9H2@%;@r>E(@xV2S#&DymOA3SK7rW-A_=lz;zELHD*p8Waw`Nq=MVQ1!A
zU-wY_dwznVGXq2P_B_)fl`~g3n;L%nsHn5de7f(!<%(lG9mh8ts|kVXptKTDrO%=c
zt9U!AY^;-$4t)m6*GQe8!8r3%MVTDOVG!fbo0^n#9~F4TdT7b|oBFZ4TF#vD*^+Vb
z(2a!~svcZg>V1sw;F6COWyf5c9-qkb`n<Wis_M|?%af09-kinRwBX~d>}7rHZ%P^~
z$elko!{b9m*|8ZH3pasVA7?bGzQ5zu*I%FY`tHtR_9lgp-&R>+wxCMf>G4JB{`B<H
zhc7NJKE~%*Qegvf@$!#nG=6<~xw!D`zUuFJENpB}T2mKAZcdwFTWxmg)Tthk#Iqm^
zR&6YN?A9Y^8)eE~>*>iUrWe!k`ucila|2tDJ68n+1vS<G|9zjK!Ls<7g0?m{C<lGJ
zoxid6cbT&L^@0x*=Stqq-~YF*sfnpa-aan3@8HMB#}_YHz+jwy&LpmYmqY&M%!{$R
z%Xk?++{#{`Ipyp7`}@}&&fH*ebLK_UtdO7c6GKyd>}}@Fm7KeKw>3k;^>wjQslUIy
zUH!U1N@ud%`Ey4Wrk|fzP*ikiSLy2quU>T(K0fBCH8tt?x3@E_%k|{%^0s_eGPcsz
z*4ByLCF0UzS^Vt4*|WTSe0&n-c`|N25{%W=)yeHEjOEUsi!gQTlj)pmU9MzcAP^Q7
zmT_qb=Q98KeN(l=rL0Z%&iGVOR`=ytk5jZ0kCX{VGaK)vh<Veehl?wkRv=>6t~b3j
z@B6#EJ1Rady7!t_%B17ILNvF{yt!8`Tb&vwO%mFBeRaO_10P;cl)O7@e*ehq{C$~k
z3|!iA#B5I|IEgJRY}PY27OwvO&a^ZA?a!Y-ca**sTjo1E?M*<0?S%RB^WO;g%<}9{
z2el#BMsEkzAj$2AUNw48*ORnnnVfd1{~i-FGb3`ko*rL!^G2eAzCORCq@>!<HFLo(
z2$nm4?j&+M5@P+tH#YO;Zfx^ZzNsqYxwoox{YqsepLsTtMLT7h6js>nE`M)Umf@4)
z^UJc@`NQk=`;&ftdU}kn`Klnuyz6iDBhu2;8kPr33r>7xT=2l5c}x9=2aX&~4YJl{
z5=(5uto8KtUR++@zwz*euE~E{we|Jc87e9(B`t;2%I3V$4>&*1Hnh3I#>VE#x|{Vs
z9<qn--IjY>$;wK~Jnznd|9|iQKX~>mFT;Wmt&KT1jeh+2ap2f7wsq^)NtoqGtc%;r
z#UNo_rsL%7%*c?x=Of#bqMdOcLvz00+glB)QJxf8&Y3&cFzbrOlP6DByqY?7>ci9e
z`&;JEmw)r-O+tEl`?}cONr&5bqi*jme9U&}(4mCnWajwz_^Txz)!*JUZr^UcBuLY$
z{N0+5zMGdUQDI?ccUGHx@YE?TS?e;FoE)9~8J7Z1w79ys1h}}gY&^VT<AMbWObfn#
z{`>v@>Q_5=@4g(Jzt?r&zI`kWGP1Ir9T|^~bVgmzy}eC$>Xa!LW*8=4nRff;&6lF{
zcki}#b#)C~AGg<Jo1l!$npNh-&(3)L1{Gafzq$2DIL@0lFRS!Pk)^7d+N7O3cit+R
z>ErhO-Cbp+MO(A4Pg3BB+HRP4XGhj=CQw`J>#O}Ij%4k1{C+*YKGd@5#P#dqZ*Of~
zy=Bj~*XAN8Po9j}Rie4fcXk`7h|0Y!rtUw_WqaOTlUM&foz@36QbD=eZ?4tCB}-Ud
zUt8;(kf2ca=cD_cFPFSEG&Bx;d3hOBa?G(R<+A_tf!VEBs`bK!fSmjLWSiOfuUQ{E
za>Qjz#zm%;D_6d_u#mY=-oEd{hk`%fZs%+0>b6duDr%N<gQ2{<{K)a+i<6J{1!zsR
zsQF=_q@*-q!i0v74vx_3+uL#vFK}!wcyNI6#;sdPzrMWu@$dJ0!-@|HXXaXqPge6i
z^!N97!<-uiOO`HGw6&GBv$LCFmMg`^BhgU#`PsqKr@7P8(stDSwc7XZSN58ytz5=w
zXAEvEy|B=^Js==p!L~C84>Bq$Do$M&91zgp+|Cyo6?ga7vIhUhz9-hj?!K@(T>nIh
zk;YUnjj3LDb`&yOm%TYq|NnRViKj(>{(L^Kpv1z;Dw#67wYAm5!^2^F-d%;MUV=hG
zP22BPai^xHYUt{+GThl!$~|2_9#re;=;|gWCpYh_{e9@-MZxm-_d>JRD;=Ar8-3{B
zJvsUMKZXnnCMF^vhK!8Ng=N0dpsdI6;l)K|8OtITS69~?d#la={QaAloXo7PtzA)B
znRs<oC__N%BE!2Gwwr$c{CV*F`Sr(oua(sre){;a(MK)#Z(eqG_lp-9Yhrhc85$Zg
z%=62Y5fW<hoUHcnYIwZqiL%?<^ZT!@jb5!=ZN~TDrSGvRQ$$qM)s>Z%nI$D9fBb&G
z|Ko#$%oWwutFM0j_N{H|)TvSS3=6!c>t%h_n#O#<{{Nrg+&Phvkyc;b#Z4`ltSu}O
zPE1f_>pm#)<3yfPPEL-=wA$Zqw|n^c9qW-a77!3%SQ^x6Tm5Z8{r`VAwq#Cr-1hp(
zlaSQPyga=>fBp!Fh_sxy|1Yz1=S~hTE~lEBJ=eSqLG9?bCZJj(%Jq@Dn%XMcc{SfQ
zXIxaWtvb4;Qt{-!CntqfR8$^(e0*GgQDq<}7nf5`j!sZe(1!;Hng4t`t)Fpag`kj-
z(5sZ+ot>Q)<?m!b_1l~|GH-5e<=(h)BL^R!*^TT4TJI87)YPPw?45Pu>{-|KaeEC)
zUR>~c9kaWPH!(30)Xgd{zg{5~D81|1nSXzOU)+)zoO64d@B3T{o161(Dw|H6@aT~=
zK9&-fA1W_vTP4z@01Am6m7mq7c&UnTvC7$0G<^D0WMN^k;_CUcXIq^X8dS)L-adKi
z)S<Jp%?p2j%ayUKk@)-Tt8-nQ-Mf2xyB9556qUQU_V>3JH#dVie*Hf`KUcQ4mgZ_@
zN<TNpF(X5R#WA4P@}+C!z8XtVir=xrV(n9|R;Itdzq_ZTsC@eTdE$f#4M)4hl{Gb2
zUb}rwJ^k0Wx83*a|I5y=`P6yuwqXWn?7_vw<-qmp*Pp!inYF8-fuW+JBH{M7Tu^6J
zM@J_iKfiy)3Js5?K|ZrgI2jW1{(aeY+WP$-=JfRR=Hr4wLQLV|;cMddO6A_#;`sU5
zS&+!im_AT*(AGBg>)wW25u4L^b8>SH)6dE5*tzrIrAt9yb?OeaaDMpk!N4J3tNiDu
zR2LVQkSa+baq;#I8w`4+&H1ifyY}JpXXlt08N0t<E=T2VSF?Ql@F8P(c(_f?kAU^L
zk|sB&>qfWv&9zFrx2Li#Cv3`^wQD!l|F7$jwHDKj-qx~oscO`gjK&iuJeDk7dhq&n
z@dKBGA3S)F5V~{W$rK|MRn>+0_xEksyt#SxYHcx{hz8y0Z3(ZgtSl%hGV<6|U0wb7
z$H&JNZ?|4gNKa>vj*c#Qd5Kj!eBF^QQEi?JlUGfhIyH3GivyQ4mmTkyU%&0l_3PrP
zsi_qo9ys=HkG?#|(AfC$|I=>zuQ>m`UccXOd;a}(q0(RfdYi6!w_sZQDoLvnjo95~
zYcG8|aKIr5)KOi$Xwi%H`~R)_ST=vD|GAdd)|LAvELj|}Px`z>Lp#6xDqEu(Il)ZZ
zPv)7Ij%a*ewr0(mo@%M{J=s4$J<YnmfBmcA!nOKk{qpw5mif*GrFoOwTUTy8e35gY
zf$_(KX8wZT-*V?(f0&Z*aIgOVU$6PW_WuL5rXJ(FuCgWPrqKJn-{-xWT{TsZ#qqUi
zQC{A<z_@Qhva-F47Ab+oTW)X9zn&@USEiN~85wzFLn8CB9?9URy!zqc;W2wE0+WCK
z{QUgls?gQql8eH+#r55~#dIf3p4@DHuflnGsm0BiD?C+%cw{UD)<$n%_i0MSg9D8b
zo6~x4ZQ7iE{?MUAOl4(dQeQ7$x)d_qN8Nv(NyVN0|NmJ(J3D*%^~Yg;Wye04yj;C&
zi=<%^%cMz@Hssy4nlfdIf~~FWVz=HyZ*Fehdd<G(he5;g|0=u6-e!HMIDP6=LSo{=
z>sD;O-}cr1UiEMG+dDgj&(1P!R^XW6p|Ydq=O#t-qca>in*vgIx+opIx3_v@>S-|x
z3yTL|ug4z;6;NVg%eL0JZaP2Ldi$xe?8(MgkN&Y~zBlRa{`&ojvy<1H+p%j`(*1q4
z72ofcYs+rAyv$d6?!RN8>~H_?2XiwUZ`1z$^;1i;CmEaP-#ha4^>tG>^{{sT$CAtj
zsi#D0{{Q_R%GYx7YNxRJhZh$YXZ61_oj7F*OMQL)kt0VWzMnW3Q5*Vko1F8G+TUhv
z{PODz+wKb-I&^5l?Ag(aOIekan2#qL=tgZhur_*ok1X42^<{o@yHvfWNm%m)e{J=Y
zziDe@laQO+%gD?oVJ(vOXqsLum%qP%a(m(>AFG?Pva%0fyg2cHZRA#vguA;tNa6>Z
zEc%clxG8w>WE}ggZMoT-F8?t4_yE$adA+llo!?1-<;{(ahi@!25IzoRK}tJDMoRAc
z^U3?i&z}d+o#QJjD|>Nk>*`}APF_oePEXTq?(gT%$;kn=+Y=ABJ$!X_HABP3<l{;v
zCL#<Uj!EY`=uLku>VA7$uAr=JZ}s<giBC>UoN)SSL0Q?c6@iN<OrE^Be2?hcyE_V*
z6B83RY~0wme!c#r$&(ow;O(-NSxg=2s;a7r78VjlGkL<o!d~3isGO9X{I%ZR>ayQ_
zasTUE+dkc^C@(MP;^YkcYghcthiSpr&84ryLictGt7omfye&6cOH*^9Ve+vRy4yEz
zzHGg2#R`pAS65FzX4cf){I&1;-Me#fw7!;AegAoDYqqBV%i7x#=6Nw&YaMm(OY1Xj
zob#si!OxWP(o)s(@^Y)nPbyQVO$!PP6a=;0T$C0*JlrlU7+6?n7#R@}kdUAdyQgBJ
z2p8+!oyF~LeKMX58kUwbJ39DeEF2gzet&yw+I9Nm$xf^CcRnjuuKe=iqOw)R2ZftA
zZ%&*!Q*!E*DKBL5U8{vUTMivQ{PI|@bVxveL;n81W{eBmdZjM@`T1GX-hTeNn4L~{
zca<tLl)SlNxU2lVoN3;j8Ekwq9?SjaE^_ae3(U;aOif8y@$X^mj)H}!_7!Xj@1DF@
z&u0FcTT`Y@3)-A^HsmW8H@Bw%OV+hDlDctwX7tI~dM#bLRO<Crvzw|yoyUAMCae3a
zF@&D8_*An;^sS|}_3D3~0)nx7tEMspL`2NE^~?V67h%Q)wZFdwIypHlP3IGx|Mc|q
z@SEa(-?EO*`m$ns+p0Z#WHdE3J^cLK+}zlVjEp{fzhD3OU^DxNZ{OHHl$-+%&B2>9
z=a__$nlm0cZ*OmRe|>H3)oHf>cPYm{TKnMb+qGt!y^h{_eSZImg-MnSe?FhLzj|!u
z)Tv8@>m#22V2hPKefDhY{Q2@tO-&zuKA*2_ZZ7WV=-AQU@4mb2?Uh$`cv~-z3X6)2
zBK9z7&6U}>>H99m|K5L&9692pzBOV?#zeWjNw+>s+}o$BruOL0&f<t21&T>YNg*dc
zJ~=7;<oWaLGaXVQA}tFRC@?q_78=(5{Tj|AX~e?G$thu1v*YB^XyLoNN`rH=FD!7}
zn%AFs-2I!?vj-0t9=yzaiL1e&B!j!*5o#@3R9w6;K%+-2KNmEpVq5*~$gi)j4eS5a
zq@<@iFAR8aW~MO*FK?>?$B8p%OkB!cdMEGgYi(&caP_L_>hSe$v(0iZ?5QknX=!oL
zo1XmP!9fpy|MuClrJ0zR9z1;5n0tHM!qC-W8#Zic*t^$u(V|5PQ@so`FR3sD_+I#N
z&iefeQ|pd}kJqj>&AxWv+BLD_XJ;B`&z9EF)eSxWNZn@!13y1M^B1=}7B^qd@KJLP
z3KIJD?Jc*pwKb^7J=ny0V^b>kGQYW8>gwvChQzH~Qop~yKYn9l^2JT5-k^~n*KV<n
zo*tK|D5;v-T1FdNRz5zyu&L78_ilaq_U+im$Hzb3%3cpDpSEq=_Tth~?yz++oub-d
z5)0JNEV-{|opM5e;lQ=E(Y-R9#-&XP3U+pK6DLkQ#&<NN_Mkg>mSitu<i47nS@$-)
zvJ<`j%g4szru2mG_v`mxdVb}6{i<0Tr<nSnjupWtX`m(QxfvcazL;z4fro_7h<}=!
zf9*reu9A~C6la*&Z8BC9Qmak*{^d){^5yFMEs0l!SQzKcn|F-w@RE-cK~pY}LKr@2
zbGM=F{XJesfeqE)^OD<x)|+Hs<7sB+U$;%}{ry`HQ_L4!xe~(gzuMGjbzE4O*t<JB
zo8R5t9UeXXd;Z%QUlwowrDkd>3TiBMcXw}eUTGe+C4(_GzWK!O?PWhs<T<GO&%5%H
z<7igf_x!geGg9(zZ__<=_%NtJS^xKS{DhM!6HY&sFizv);^w~kYVY@Z)gAr)?fw1y
zOM*1LyuBG2tjpiI?63R#;K>sfX=&+_S64W*udfTW{v;q+_v@wlo<E;XXWZFgm|`T^
z#wXi#<x0qt=g(KqO?q`njzL951=J1V<KvrfGKGVW@7PS^bdz5zysMWkT?!iQxwSQ$
z-P_xH$IhLJzrMVz`1509Tq(nY1C7iQCK&>=Ofs3gy}d#9adL7>{ocFj@5=6bd#ewh
zKE2xQ_w<)5->FT!GJoCX9nYRW7iP%1x@zh*NeA~HiG^Y3PoMS<efIF7ql?SMix;P!
zQ}}h!U0zUdV$jMZ4-dCzuYLUFi3`Jv6BCuKwui^X`8__?dpYX(y?gWW?(SOpYO&s1
z+qyq9s=mBfxb@tY%*!R~oL#;=Y?sektIWY9Yge=5*58%gn>HD3+PZb=#l`Ng_twv6
zpLcYt6>svXXSKh-t^6mDerAT_^>wj}-TUP(?yLRnp*MZ90>_luvsbUWz9LZh*ZKN?
z&d<-!Up{G)P*-=ia&>j}uUD(rzc|#&9TF4cvvldwDU&8SojZ5#$-8%cE-u_+ItmO=
zo<DbQ=aXIZ=uy(CbLW<=SfLTRyS25|YWwz#i%Lum^XARlQvBSn>c<Dgr_Y~Xo}wAd
z!Jr$xt*67|`M0ojF`f*d5sH$(ze=nA{4ktrS3B#?+qWl=A9sIlC3@Lmd(O>CX8HGg
zzQ4b}{P*|wm&N0292r6`n}lz(FP%DX-nwi4vESF5&3SV*OX8$m`MVe<hs|kcFKNuS
ztu|v^@c4ND<vo?3IT&hxKApa*sMX1F-MV$5=Xme!EKY}2O0!Hdomg2}vu<nX>8TkT
z8^5}+u=(8EyZh_s=j7&|ymxP2QBl#ATf2*&^R>3O2iMf>IrmmjuvgZ48bd%<)~cxL
z<^J=R8K<9n5wqO6oi8Of*Ef7!%*7k?=USC6dUkfUuwdrh`M-X=+x?z{VXj4?)APU4
zlA!v>tRwr|l`A1PZrn)t_U5Kks!%7(fy<T`gMxz<r=K<~eB=`PbD?wlgt>ELQ-8<B
z#d&ynIRyp^+WmOIeB<`*)l<2f7?hm0=iU91_5R`E_8E4yyN=1^>gnm-*p>^L>@3aW
zXNaqOD$3yS{oUP%Z{PNI3acyG*~z_o_wK{z&zD!8ySX{N@ZX<GpE(wSxwp1lyb)Ge
zxijluS?=#(`IReIPVi6xDXaXyX;!wt$$8VJwZ-kNa@3ldHRbKy-Qv%lJ<GVhZtkji
zTeogq_2<0(e-?&0w$<A%m9IH|^ytGwt=tR^b$@?l<~%+zQCUM@-~Ic$yQO*W|NQ*S
z(7?#d7IM=(_BJ!PRi>-UYn*nb!A0rdEYoa*oErw9shjKT<FBvu^YZdqT9}%estD@a
z^*i7Gcf~y`OY6^{KM9$cD?k5BH4T41`R}W%t52Lg+q!n`TDO}Q7rRfKG^uIB27{|#
z4xRshFvMrthx7LTLw3&XdO2bK{^Z!Ou(qAW&zUN!wp`h6>nN~l&GPK(*Voq{U*y_-
zVQY5ykz>amotbHT;_TU@zu)ig|HIQBdx(L7xg4|>;7`pQyV|JbR{e6eOdq~*{M!?`
zIjyn7pz2FT%>KIA*Z;1BW@c)hn`^y1D*pQ4(^(7s)=Pa^a@zFwGT+%844zAaZf(nz
z78Ml@jEj?78@qejn>TMflqO!7U;oeZ<HwII4SX^d3%1n-1qm@K#K*^5mA(=Y6&Js}
z)O&iy$w{gy>FMsaRbLbq{f~|R_U`U%y|_IdOP4M!`Siq-i<?`SAtf`@ldIL~`8Tti
z8x9OB^6&2}d3s7TNJFIL?Jd)&Eg6EIDneDi-){ffrLUmSz;NN&+1W2IE_M%zi15hF
z%oLH3@Mu!FFjYIeWYy;K_i;=PcXyXB|NQ)XaAv0F(&fu9zqq)Vli}<8`|~?iT>86m
zwf(;z%?ua%?f<Q~{%<YMk6C-IzW!&sdu3(t%D}~LDY?083m>1lb7u}@viI_Ge|1NJ
z7ythL&U!t4`t-}%>-Q}BdMtc(*jf!`<>rnKE^h9VH*ZER?sHL6oay7n$jDf=H9RQD
zDK9TC>h<0)m%K}!pOf8tD|$yk;!^VuY3JswES6mw<QcoW>}u5U%a<o_+Pr!7o%y?>
zHl=VfF5ni|d$F}%`|!!QwZG=Sv90>DfKS%y!o9uKE1lc<R3>_yIC-)Y)L#Aa^75*x
zy;Wb8^!4@E=8A}kUE2MApSPc%pUPCPlecfrw)^=+_|)ms!K<gwo9DN;`g_=2Q$BwF
z<&Tf|PY%&qdUCS*>$`DoZfu|+kuuNo30gVj*7kgVLqo$U^XIQGuSrc!-BR%}DeL+=
z*~qA<Nj_?e!{aJj&GPT9371t`v}cb^S63IPSeU$ZtLe`lKQ1(}a=&<ZxZUcle{7G0
zVN;5c<kacYU+=Bo`Y>gESkB&g^J7<rIH^re{PE!-s0?{!WRjLtQTHwD>ieHJ&(E{%
zo-|2_g@r}JTI85d++M$LU5foR)35FD^6~=pPCwuIAZ?aoP<CQb$olpj^DGLPf>w&i
zT9=uWX)H?1&Fxk9pC@6>6V_W*n-ae@3)E&y%!^z9Kix1){Z;9-h{#AuYnEfLK+@?w
zFZ;ktH_#dea}6gN{B+OXo_F`qG~MVPS+?Y_^G>Q)dwFqzmth!4tp4s(bwxV)Ov0=0
sE6k70cn6=bf~*9=G!ESV`zNovJzDGfuUYdM7#J8lUHx3vIVCg!034|e(EtDd

literal 8331
zcmeAS@N?(olHy`uVBq!ia0y~yVA##Tz;J_uje&t-^M^_E7#JAXlDyqr82*Fcg1yTp
zGcYJHc)B=-RLprhw>l!^>9^zitJzqeL^UjWAnVBDI_c6B13AO|nR5irnjAc%<GVCD
zZGYaq{xX}HvW8zX9&Vhhz9;2;^8&k-ODnuL8ZZj7xC%P%^evivdd+?Lxi<~Z@SHI)
zzVq#u&3T(szt`=(_x0W1r>XC4tJkXv2sS2K+5JvkE6aFzi-=B{o6&|Fk|z%&nHzg8
z72;}TDt~v!v9hu<yIna`C(62^k45m|y}i{ZPM$n?cX#>3>C@R;of>!TvSM(ksIaK1
zsVT{;|Mex)rsju0US8gd`}^(Rym=F)RpNOd$z1VxpX}jQZt;ZVWM*@7a~??}7C%3~
zf|8P!y?bqQa&x8c#_3I0wzrqx|L>P}R(AHoXV2Oko7oayTv)ha<HpQ|ktH!K`@Uva
zadC481_w94ySrQZ>GEaE*v#|q9r^nD`ow9|+FrfNs;I6`{`BPJhAmr60=G;`w(s8C
z8yp<meC0~Woqe^^`g=Y&Ww&3Rm$*^dDKb)WSIJAJnLX=Y-&Xvybke?*)YOOF`uiM$
zf`YQ!51CBn)Be`d!ctLHb?DHcAK4#{9C4}n`}O*cf`?3Tbw5)hA|n$IwQxq|PM$p3
zF!Pd%g_YHzbLaRJ6%{S2zvXN`cD0<Z_}Q7prAt+ReS6!j>OF12s#U8ZAD33FXfAww
zjCYnzr4g^BQOldRZ$0&<o8O)uv~tOh9~DtsvqW{{_swCr@apR7l}nbmtp3}|Eq>zG
zty#<b=lfMwR(^SKka?DQzFcHP#D$H?$IqCxfB914<>$BT?d|Qt3{l(j<~n|!!tvW`
z&W-dlGaO%EU%!0TEUBX6;_PiVrh2K?e!pA3CGD(~m#^<qN#isDhF^cb-`{%c`qirw
z`}_Gz-`|_7rKNS`+pSwspFVwBG|#p=C^U3x<TC+rarf2X>z8F;Ul%xCFZRXG=kqSt
zFS?W%-@g0&zo*mV58b+TE5rVHpRBW&7gySu8I1h={34>Fj(XEy|5^0>%gf6izP?8n
zxprSUHvRO|8HUMhVe4W#54ZCx>*$<$Qar;XQ>cT3olmA=?p)cfuC6cl!n{g$6qf~a
z#C{e1AOG)@ctu48L&Fc<6?%U2Y&aP>I5;l62;Mr^qR?smN8Y*33LGF4Y;0`<BO^~f
ze`EEcAjzE7XeQ6)<^JvK*RQ{Kd&%<U%nWz#-ZlMo=gu7l21!ZDWt;)rMl*Tz_x(^x
zF_IMFVqLX*^;xs9>ei#{)URH>+FMs085PCF5VikWxUE`1P*Bpm2mjhzTUljfWkG3A
z*}ZQ@>6&jG-Ld|8_xG(Wy?TxP*ZuEhO$sxNRMzg;y?gPZMNBtu-mI~@%pg`REFvzR
z{P<WeD9<#pa+ln)w6bDqxOTiEG*?Ty*r@(r&6KHA7cN-9keZsBCcobHU{Zd|i4z_c
zmX;6qe!q8k_xpX_N4v#eZ;`bqP+(9nHxFO@{@vZ(3=IDM{-0T*`Xe`|CEndt`s2%G
z|A&trHGO=1e0J@bZ%o~?_4Cq9Qog^t8=xWb<J;~0jhUC#&dj%uU*7-VK?1{pr>Ccz
z{tC%WKGtLCxTW{=L3a5Ef4|>9zAg85KvY!MV)y=8wP(ILwbu!pxqDak=g*%j)~>yp
z85|wmEo)ttaA!y1qg=OKo3B@bcN9Km>+0^_`b~SP7mu8c#L}fpPn<f{G<B+IgMD5k
zpPY?EYHI3<6DI_2`&zdDs;I7hd~vb+iF4=7GGsUp@HhSabXs3SQ`2#K-d(A!o40R2
z{(k@eb(`bWCO<r_zu%>>(D2!rnazLx)QE_RCO$mWdg9EPBj@H?o3_|xU(?}eYM5=F
zKPyF#;lqcA&Npt~o_!|XebM30zaJhR7GPm)Qh4z0?(P+<R}0tQ+nPOnmagE#KR-Wz
z`2Icrlc+`QyCppmhD^`T&24sC*f4#%_^&T7o6nr_`Saznzl3?-oVLGvtG_2?XLrZ#
ztun3VJKG!DRkGta>%97Zm2;mz;5~Wjl#{0?=e(*{E7fv!b#)hpXwBa8`TKWwCnu-L
zWlNVXwW$ARlXh+n=gydQ*V0eONCiblul^dca=`+IbLY-UC3|-AZQmsA6ci-%>&r`K
zaq;PDxp(j0b#&3t&@iZqQ9AVKXm?_Me!pq<HHo+WuD-s!UESTL`}j5V^^f<-S{J;%
zWjeX{s@%jiH?+02C(fM7Szlkj_f6>b4`w+x623Htv9hwBICt(?r?C2iSFf_B=!<f-
zGR-#2b@KJ?J@(d3T3Y(c`}^|y|9+e8c`R$aN7$Q}FJB6<Fvi8jRo!fFYkM@=-|pbX
z<l_&XJzMtqDQ|5-Y3b3K#_3YNs}ngUPMla!Sa@(<?CuX2-Q^XHjDijyyMA3fGBR?-
znl&aTXS|)rSNnRSVNg)egz3}UpU<max79gQaMh|+AO3#7pZw;=#)6`vthWVG%ykcE
zP2{PWKX)P@w9a{%a7KDf@Nz#@hCdJeyK9n?lY1ww{-__*FJZ`(zyI&Hjd>Ew0+;#E
z&)dSk_~^TL@A@(?FO!tzIBe3UdF0&lH$5o{8;vJ59zEy5CT6WH8SzH#*_oNfkGjR0
z6cRo^J6n}6Ei1cr+uM(ikDrxT`6a`2qqvyZD%l&q<afsKxx2gb$lJ+ihpjo#%+4RB
z?Q`<+yLWnW(+?ataE<S{#;qr()}7i~@$r%Cnz+4E_wL=>QSmV;yZz{v;#)m8s=vSE
zRT8?-7PT#B=8f=>kd_S_3_R_-&r0~u7Obw_Rra>a-|nZ2?#7I~yu95f;w2;`H2z%@
z5?r)sQIxgHv-&Nb8=33(DB9QjDA>Af%NCQ5|8MEBT)uo+P)?3dTwI)^X~9GV4P|9!
z?`b**Cn!26<mdBydwYL*cUO9I`uSs1wZpd@n>b@eN9N^a3;pNYZP>J_skfJR&)&U)
zQc_(nUSvFZ{(SXK^U_8ymmk;n|7%sBSHX1c+O>kRvSZ%*dzX~Y6L)^TKzH7rJvMuO
zy;@yRTH3mFsVW<fL__H6u!YN(x!uY8^W$Su8MA2m`FWwAL;s84yzuvmmc(y`8&_5a
z&))jBnVtWN+^3g!cW-YyduM0y)tqZ<B9*_Xs;RB|>gwV$VeQ(rQPDLudouPXALn~@
zXXoZ~?L9g=IvKaO<z_v8e}Dh{6r;$+{OY}u#%{T@+X`#H-AvE=yMEuVRblpge0*PS
zWv^ek_3wwn{8_in()oBF&os}M+qq*$#$7ulC8s-icXkx|+RfOSa&l7Idv)hVPC1tB
z%}L=}Q=hzky*jP<!vn{S`yV>8I9y)lyZFnOl2vQhhJG&n^P^CR#c@mZr<3Y0UtL`t
z5)$HadYZ2A?NlSlxi*zScix>;pD*$|?fg97pFe+wgoe6CMn+DVFu`H{{(n|`|9m=~
zm29f^Er0*tu(kRc8XfE6_xth7*(~6<{}YgG_x0$#JC+%@{p<g}j@PuepC1$yw4(n1
zzogv?93|i1#cut%W9QD!zl+^^FIDNx-aMaY>EW)w|Nj2YVi#c8xqJ8Ot6EtV0_?m}
zOB9Pl7rXa|MgQHjdGk@br9qze?%hkOPe@pBBRrlXfA806w|?x(@OjhN*qF6wPwDGv
zx3)1dGFpKwH|a@#abaOr^1A5lerxw9E;Oz^a&OMx6pdv9)w3<r&!0Rgc%F54+1svO
zY4fgHKR-W<f(H(ZpN6aX%~@f}7!VsfH!9Q3-roMp+uPxPA_Z7_WGsXJ{JgWXIO$@;
zLg)6bw-+y7+^~6bb9+0xn%|s`@AvEFJ3Bk8&i8j*$(vtQQL&)>{k<$RMMcG^?WSpb
zyqQ0mDi6=G6crWqJ>w!A{7$|2QreL?c}IbS{QUlg28Nn17u`L)y)W;G$o1%#v)!^y
zTZC)tk_FTC<FEY?dVN}dzsT>YUaCb!MGOqm=6NFCM;Pim^t83P-TPz?{`&e_P(-9<
zdR&#~ddtv|kQGzwE`Dp<zj^cKlg}?qXsgV!Dt)yi{7-M<slO?Hw|su>zPGpf@wK(l
zXYa*@*Ev^LSD$$LNsYVVs(Yx-g8cjYPMkU85)&iiH{Y)J_4W12+S=UP^X>{=zI^o9
zF(o6TO($($#O^9_e12}O>%naAEg=yR8J{doj>uFh`0kv4#&dSeP2bMeR#vxODb;^(
zo<Cn+CLeQq`M$kdx0){Vo!$20MaG{Ghxt#OJLgtZwCR?FrlzLvF-4B1D8G|y*67^X
zR~voSEwu3bm12XoU(4Hi|8AO@Wj}K=pMKecewM$hMBkp8s@>7k<C2x7wQAL>fS8z`
zDN{she!ty5!!%p$*}1vedFI*IbaWy%Fo4?Ez0&3Zfq{+f{PK@3E%na&_tiIXd%;7e
zkN-<cOFKF`9MaO%xVX7DCLQf^lkd!UC)2Yu`}(>^|JTRvZtLmc>0PpV***WX!!u4t
z7vE3M?^*UP-8|*?w%p!(i^FP{`OH+xGfq1*L+$O~zkj9odS5YE*U`bTw(iT$^Y`Xh
znuz-Q`1C~mU+CO^<=6G~@#~A{9653Xk~QBQ+cLAbtoZXW>3jth6_(rE^N*jLtUht>
z+}=;0iY%<H7gv9OCt*`zpyo4U!8G^3`~UydfAsjVpuBv4_Vsm&=H}v0pFS-pC}`Ne
z-F%tP%qCWDF^P~R=4xte%5FUezP-IYao#+>=;-K{mX?IOyGniS_%6<|lsLU9^>jdN
zZ13Lc?~ksnjjs6eVq#mb<+sU}23mh(D=I7)68``DtH#}txJ8kJ2~^!w?wo)5zTqXL
zIs~Iq!69&Pg?o*$k<o;iGdt(mR?pIsYrE*_=GGQ?`}3)D9&C%l%KZKPE2^qKeSXt(
zQ;>ym-n@BkKOan;JCO%k_nkbDl&-?uJ=ajv)6-Lcg;6_v-IddI-{0L8U}0qElQGCo
zNZ4pB<YZKtJY$-of`Wr`azu1vcp12_HhIzOIeWKk5y{{CRcu%Jd%o=KY!()l2Ol0D
z)|HZ;f6O3l`Knc12M-?1imcU--`67^S8;F#PdwXUZR_N+Z8<lao;*pZsH}YW<KyFs
zA0HGqZQlIx+3b8JGqY_+A3c~l*U*}sU#>-g!=mDYLQPE#1H-m$+ivVC)m|6BzfV}*
zZ;OY_o=wJS&yV#=7Zeu@x5mw%w&ut|sAsI@<m7f#f7c5N4mSNI6{cveu2XjGO-pNQ
zV~2p4SleWE|3z!o@PN8+hg!L#-_*!H;0{^F8nGoq@Y}n)-A|sR^hg@J<%qK|US95>
zztP$VWYh6er?~9@{ZJOuiD<~XyX)YoQ(XW4{j(@}5zrmCplGJ#F_kAzo;+ASzs~5C
z`+U1vgQ_nXYipNj7$074*y9OG0_PST{k3TAtL>VJ8;#WtUcM~sJzX#Nt$|eQ`J13_
zFE|=7;sqg)aK(IutE=mYvuBUq&flNAszSm|-PP6AEjNG44P#^DiL+;SpPg+kEy{BE
zMf1j~<~>5cI|P*(J_Pso{1jwi^tb=JCD8829L$)9+3-3rFtBmO3XLzXu7Wx!O$rOv
ztl@dT_q!a6W58*r(_8E#-h7SNS)^+B|4;FqoyE(Ku5zDaS<Kd?knr}_R$ZfcQxZ2`
zSGKd0<KyG=@b-3&jg{@-07cn`MCJ|-=XSo_w*r#N58g0+-BJEtZqJ@Q58l4LduyRV
zT0?jlLttQ_01Kn4s_Kr4k4h|#7k;g*KUeqVMIc90!`a#9kFTr@mawfddGqFtfPer4
z!;00b4^PvLHpsbQVDs%pazROni-QA$S?;Ztt}ZTy1Glzje>`J+o`J#c*9+yX8^0{A
zlM&a8Ik5S>9k;Z!w1uUmqLLER(W6JDZqKo+l`>90*V5k3uA{39>cgCztp51T&COP|
z|9?F0m#{2S$;rvNusPj7=f(!dEw?wNa_`x*Cm}VpwUL=UtG1@4<HObP_{1kCCW0!b
zty@k1{Q0w?^!2rA+7@nZ2Boh;W?7Z4GSs`p;yq1Ak-@jF?(f&|!r991eF6+z{QT<N
z+}szB-M>G-qhp$G^s>w6r|Cv_bYz^JWoniC#Z~n9Y5n~^)22<6s%vU$y7K1z-QCNJ
zeYm-~tx8`_X?y?j^77SZ1Hazfk}16R_q*LvZ;fX9<i=}G^_pc_yzE@z^Ru(BKe1s9
z$jMoA@3$-W?}#^F3knJrJUrZ<y+uEMU(E6wj2Bj~-{*CGef;uUx1u)IA824qNltcV
z=a*Y@=~9rEzW(wjPg1I$&n?$bQ*+zm?c<}uuqEy6thA#s_I>8}Dw>UqjaM#O)O2o+
zrSsmZuSyJ4=FHK#_5Ats%QrSAYwGFsy}Ps1`RdiHAprpnzrVdzmX?;DWsukuc0VvM
zu;leMT`g_x#mww{0n7d7o;Y~0@y(kz8Q0gvmi+%$tEHv2XsP#fA%<DD)!SaApPy&T
z(!j<q=fla#32HN?rlyv>x}y2%^Jis-l6QA@x;;OcWNvs?5R}+GR)%Ed2+PR$FthP2
zm^Evb+i{brH|AHrv+UjX;zb6N!~cKZ_g}p=dD0{e8=E;*UtTQSn6!KM?(83O_H}#O
z-f!4oz~nH$?$^qw>fBsiOACtt2Zx3mVlpy5MLXww`t-@<&yr=!gczds)l@G2Y|?t;
zC(~6ACnu*Z^OEbo-Aw1;<_5J+j`d2j+uPgQ{QYwI!}ssz-ZJOyey?$h-e32Zfq`G%
zPUQBvxz_Cu9wdZ>hi88cj*MJ+ahdMTjQ98UGBP+iI%d5s+9{Klm#3kjA#gh=I5;po
zynUW+HPesBf9C!xpSSMU_it}+TRl(H`oVP7qeS)bm(QP_tE#NNy}8-EulBc+p`qa8
z<NfXZ{rv0V_GW#uShIGm>8+6cEg|oj3J$mNu2{G3SeK}F!Q*4RAz@)oD?^$(9z1=z
z^y>DhQ>Xgf-}P&X*U}%GUxBLY6{}YZA73p$eO<g=@FDHpk{dT{a0m#Pu;W)~NXUWH
zr@4!tpF4WATbz->=%)N@-`w2X?juv?&h5>+yDL-V>Dg1KoYK<N<f`8oPVToXc;N8o
z(`o$^r%yLGH#eXB`<i?Go3x}SCnnz5S8ILg(xrgNNX}NL#>MXai&m`QxOwyDqPvg#
z?fDoye0)rP$$HnmxVl>W-TnRjFJ5G5h;V6$aH*)MBs@COnYDVO=1l8yJuNLQ0U@EL
z!|nW!4>q%}Shvp2&yNpOgNun>Q+k?Kk!miy|Ia7xbMx)jZ_U5Ar}EK%b{+`^b93`K
zHkCr>&YerLp84|L=RZF`7d|;5s1vn?qgzZ@==R^ge;>Yn-Ch0t-OQRZ9UUBVtV+3d
zm%l&u<mBY7x31h*f7TRUX8iH<dHdvthgu~}G6dGFUHkCOo1VbMZi&~|#r}A+`Mitu
z&X_)Cc0L6I0|7HLv$X!~Q&Tj5Je!?wka9vGB03t>@R(s=Z|671g3;UCdvlK_2UAi~
zl7O^y_k;-opmOcSot?(NzP@h1a3Mg(s)R#PQ87(2T9?l#iSwb6v5$9Rmyz+FO`wkF
zJvL82ziU5h{Qml9WMpKw-&zOmkiI{*#j%Y~_EwQUlNU!Et~#bUaJ!s-%#MaTcVe33
z1kz?aEBg1RGFeXC!0!z+8&AX5t)^<evr>Ab+cGDeoo#;j^5x4K@@}1XPoCuT^YhE{
z|7h4_d1FuI=5yN*eZf_cU3Ux$5@K<@;9+@iOMJwewLId=8I}?7esi9}FSSq4lUQB}
zh%0C8j@ebx$#9`dRQrgTv(V3C!=`QFJq_Vy%mOTo$;bO#V`609-Pzgv>Q$DAh)BZy
zeYG35Yzc{eyYK(M>Kiw1Ja}-hSwmOXwX)K3(&Wh>&so1eaP68H!-t3M@}S(oup#ZN
zl;LJw)8wVMcbDsf26)b#@d*hDd2nW?F({>hn&H~v>rArww33pOKVFN@e|T+ew1&3!
z;YMcm3oC=w*F<gQy1gy;@VeOD1^@rmg2skkURoNUH8tzJ_uuFC{|}nquW3Hm%&x4c
z$mr_o3eveUc=?0p&)er(m%s86%?RrG89MRSDZeH4O7(hf2aa;wGHp`<`97v+L2R-I
zLJ%Az^&ka`5C!#zj&j_>!In72utS3JumnT*Ufx4TInFS5&z;CqW4;W+Sq~3t_z(r8
zHF<DFbibse<cTw9MC4DUOB7F<I5F|cH&CKFxMJ$v%a?`c&71c}K_a<~#nE8bCpHXo
zRP?`n_)u`-Y0;FaQ@56B$hMt0;la_=aOjZJ-Z#;&Bs}8YXliPH`1DCA_>$qV;+L0H
zLH)b8te=i$tV~wO+-P6*g=6N-nG$9>5!vmR7JB&lhI)%%lF+T>QPKUjWsAv`t5+2j
z6c%iCo~WZ+$rI)Bruy5PMg@)=o74I0{{2kvk+l{pD=P!Vo0xuF&!<mCroUya%Nzt)
zYQEnsw<vib;MOC-n4O*NGshxu%g?{x?{6%78};M&@59HAv2EM74K&ymbu3D>va+(`
z^I7wU&z`YKOH2FAFkrN_v`muP)wa4zai6?xRm<Aw?T==r&ud(~SozJHHwHydJl@>h
z9j^Ow!alp~tSnFyK+(WJVBNZP8@6t3-M`=d+WL6@R;R=bvJ4{P;*UWisRtUF6LWKW
zkIUD~Bqk<G#qWQ;`TlIDr^<SI=T;;qi1m1OugVv@f3#a%nBmut$NgKM3Cy=HUpMP-
z_WHeU3>r#GPG|F8URvtn0;)P+-QK?bTFm{jva%@?Co2B(^7dZ5E_Qd;jmqlk;E)iJ
zlPN}8+S<Zzc|XpbKi}WEjpyRb@|dYx!{X<AEu94F<y^jhZEZB~CS|2vRbRDs?%I{L
zwffJ;<C^N~?(hGu<JXe^YWz*Aif0R>aLUJA!HxY=rd<pZR<G86dt+m>oK1xTS8G#J
zQj&+>^vOPIi&w4Ex>)z(!oo!Yc7MMF@2dU1?M8THq-R`QoXX^r8d_Ri>*Dr$O`STm
z<o!L{sGUViql$ii`c(Al`uh15493RBD_5=Rnlx$BiQ~uHca^+!YG&ijn)cqkU#_#T
zPtJB$pPa21D=RCg*8lkNV-i=UbIqzt;p{9d7gh!@_gEM(!D-=w;^*fsdh7315#zdW
zecgr)0V2N+wQ_6f>h`W$wd%#OUTKrcPbo|efq{WlZ_8^Xtx7b$zPRZ8=jMgv1>I$e
z-*)Y?+O%<_;!Gd6=jY~Le!<VntIAOF_gATs(yCRf7WvJ!ni!+E{PFSr>>KOj_s?Sp
z@bT%n_VL%(*Y5r{A6sU<y`8^*ZQ}R8-|q{98Y^X+Yx3{xn8<KJd;K0KucblH|L}g4
z6c=}A(6F+KT5j+BCM47_Y+cOCi{-z+<!;^c&i8G3ZNSfphppmA%$)lh^=`G^2tE1i
z`I(uEx7L4qb2F>{n_kQg2L=rjlaSSa4>U4!GMs!`^l^QYkD9Whz!CfYfB*iuxIB6L
z*7w}Gb0KkY>mEKo(kaZ+VE6ye=d_=476l5H78Vx{xARNS-LGi3dey3oLoJ*siHVNE
z%X}7|xBow9(&WjeHLtR-Z%+4rb#3kJTk*c4T&+zE7rOQLt+-xyoqcNm)z#tMxovXH
zu``_Br0sXuTl3S1A>q%Dk5aW)uU@sN{G@W{&YcIZUU5C>Puk4@YVPv>?&{(KO?d>I
z|GM_n_qB)a-jx*<72Q$xR*H$4`QlP<ao%|MemT|;&s!%h+y@$K6cM@dVsD~z4O7F?
zrK&<gLKCJ;X<4v9VUBIJ*kZTdruFOfFI~FiQeFGT%gd|a`8io0X)~W}KKIa#2BC#5
z$G+{}x1wgnyEPJ3JZJh0_iO!H^JZ0daBlrE`+q-@dxexIPMpZnuxZmKlQ-}0?e%8J
zIMyTSdn_y<z=7e#%=CE|UwC_ZE<88adUA}Oc({yn&FY-3KlAeT?AlTEl#6izXxuqv
zxt55SjLe$E=(sq)fB*iea4;=hzFau)@$cC95W9Ex_xroF$u}Q!sJ7^pG|du;jEcI{
zz{vdK`TY82t5#|4s{E`5no(nMT=4Gh?%=}0jT!G>zxLMC(~GLTdgaQ5=4R%bw{BfJ
zH`iKIU%!9V>eVmb-Q7K9#taYdX*z=17X<}x-n=RJ!98^Qq)9?ry1Gke%#irF=<M<1
z%Om$?XJwtZcW)lUg;k-eHO$SYYiVn1s;ahzt&j8l|Kqql&$pdLPrYVYm+Srg@wk7=
z{Q3S<r%wHHJAZ#*MTG_9f}`Ey(kaVBv{q(cU#G&s^!Coq$zI;xE7z>)>65i~`}gl3
zOG8}!-_pI`cJKS~>sQeFxV=|y@mR9;UVL_R-7br{=K1p~T;u*fe(}O%x?Zf%+ta5{
zd+JTU{Q127`peJn|NmD$cl#ZN3;+K9cD?=d^z`g6r=J#m)c106aoJqEK6ZE5^4P!o
zlYafG`S<gA>8&p>E;{cqUbJ3T@ZvPx=#pD)ZEZoNrCaa)-m4j67jm89tS#HFjL%8o
zv2*G^9u=Q5Z=T=5g9lS`bA4lXmn{vCt8Cr0dGpmb=jYjaGi1EIwY9ge`p1VvDdRMr
zuP-h(uUWGOG!7~vCgxUHSQru=t$oY3>Pv^+j|a@JE-&XVeR-*siJAH3kxt=~4-Xuf
z9RB}#Za@3&?2e54`)WlbBs}!=^iuNk{SUYEFQ02&-lb%8B)zQ6?C<^mf8}|l&3a^H
zWI&ylKY#vYTwN6!5)q;C>(X_<qwntS&O9+e@ygEP^rDiIB?}fP{QC8J{p_vxrJbKX
z&aeMHJF2?4uhHz*o*Uoa+;nER!gbQfr`VwN#@Q-!w^H?E$B!SMbJ(CKZbs~zySqx8
zCr_Si*`9dD!~K+KzS&0Ysa`7T>YrDg+ah^p+Wc6x$ty#{(r&5CYKHGwGCw_i2`i}L
zM;qFKbnqo==i8c_i~s)i*4R~tCpoM~>~|}-xIyi&lHenU4ANW|^nF~SBE!JIU;<hT
s@ae0>VUu%pcIkvhB|yVRhyOFXA8&bmhMmEXfq{X+)78&qol`;+0E*r+mH+?%

diff --git a/docs/_static/users.png b/docs/_static/users.png
index f8b57fee753d46a31e6d918c868c8775fc8f97fb..d94f097fc01a41246fdc32b747369519bfe600e4 100644
GIT binary patch
literal 15354
zcmeAS@N?(olHy`uVBq!ia0y~yV4Tjtz;J+rje&vT#4NpU3=9lxN#5=*4F5rJ!QSPQ
z85k58JY5_^D(1YsTNxpI{k#2#@)!;l4~EE94LcgRx>k5N7CLI`t&LjUaV>Vs+HKdC
z?%29+ZP4^<S=v$GukC8;Xo_+@xHKwcTYtQ3p|hi-U{6EBjh*}L|D<|(2skluR>Ym3
z{M<9`-5FcvS%=Tu+1Y+vB3YqD!0F2K0%c!!2M)z04;Mah;!t#XtFcqSi6hY3OAjR5
zH;G%ZMPTb<+)}}sJA0%|xoqV6<Dx!sad8D*-_PyD5$Gu#TK?eKv$mbZ&sQmnEo!>B
z*ge~d#fjtLia9ZB)~tE(`0?Vthz>50Wm`D!7Av+0EGnB4!=c!+LRMAWi9<2V{bZ|v
zQ^&2$*doiaHxlMswgoTu<GRhl&R(3mtK?<SaX}#`j+I^4z>2@hgDIFE(-Ti7O`F!H
zzwZZ=nVH#zix(RMG+K7=wk~^fqjA$Fqt@FpmPIUba&iKlE&^Pw1!ZM!4h{`5zdt@c
zUi`hfPu9Av{@+h_Jw3gO|9`)SzM3!KBqcO;{)OviCr_R%C@wzy`T6;ssYj0<?da-q
z3JDQ8H^;L1a6A9$oX>a5?<anJb=BzfqsNa0<>mY9|Nj-Q|NB*ZmRYXW_3ORT<{Q$^
zN<Df0{P4+>E06sZcJgq({NP;7G@VGL&qw0|3knSS<n7PZ_Vx5k@z!}NYgNMW@83VJ
z>wo`zK7Zo;`S6wXP8^vXQZYrHJv~qEwYRq~-mpPHKW@)~MXuc<+kQTs9>3%J<z>Dg
z=Y9P2)cene!~AzXot<sIc*zo%b?Y~6GLo?<V7Phn=8mGLUcJB6TPC!vIH)?ksfp>`
z-<Ow{7ykWKDj_YM{Poq<gq}vjwq9v-CI&BW@4|<NSQ#1?E>twjzsFNtTntk4^3u{5
z_x4&dJUH4d{$v0D-}XEArJbA8>2Lp6L}?;NRaKSOcYh8=-q2=mJ^7jsjNj`HxA7K~
zmL9Eszqh?pSY64$Kwy2`-bdG#FJJDgG?9U!sJQsx^UtZT79TlwtSI;W{r&par!Qi+
znEDbF^jd3oFTB5_F!^2W(ch9?)28S1GemFCb6xD#Tkz#Ypoq9QGlP+_@y7D^ac}PK
z7H4W?ur7OZ;Ks(})N@9wCe5C$z1=4~JUnlv(O==9soLS|PQ>g|U9zs`^I7v37Z<zt
zZoj_ESUfm5_+71+SJ$E0kHgo;J-s)3=FF38vahX?WMXEXIB{a*-s<m3PfkoUFfe#<
z&09sN=KJ09nCO+;a&H$+Un{cL?)RI`Sx49V{BH?)dUCQl2Or<H5{W0W!ZI>F>i+Xq
zY~f#PUHtOaR&5q0Min7WFK=(dq9-0XH#RWJT9>)_`SJ0|+x5J?y}kJD-Me>pes}Me
zJK7<r%)oH&+&PPq7Xrt6B$+#1n(po{FBUcK?d@e`aC39puzB<0zrVjvoHC`wH2Ye@
ztu2`b1_lT0|Nm*`6joDER%WiTlkb<eZ`--^XLNG-wtA;k-EHe9?>h4MW5~VsYpUY0
zv9UE@uZI74xqLnY!~cK3*PmhTddk`ARP*oW^E=Py*;X&gyu3_9PtPqTM&`|%HzIlA
z|Ms2u^78V-=g-+0etf%~|MBhi`=_>k|N3>U(Z(xVzzK89yG;@dYhrc^JwDc3ojv>e
zy=wl23m0zKu;Ib9$cTu9tE)ou@18q%j;~u>|C!zSdA8Ec?ELGt?43S6e5-r;)g=%!
zjCOwbS@Y)hcK+plbDR46`E_)47cO4RJkg^i@9wULzu)h7cXDE~v9WowEp|f!BPizy
zD!U!HbV<l}wpr`Ed2(;wzTH^x&?#nbm8hGWTg>lcz0%4$Iz0RT{nDN@cdnuU$AZ<X
zyFo^6zh8Iwe*J%5S=qT+$JgcjZxOg8@KGXp%`)kJDN`<nSpI8lHgf!pjg22Ze!N(s
z;nLgG)MQZgC1b^h`%?s#u6+3W$%e3bI|ZDklz)8W+9PSqW@cvg;PX!b4welYHy%7O
zQCUz#WXU$qU~Rv9QSv%bTROTcUte4Mb>IA74zKfG2s=&LUhy&M&yUCbMW^NM>w1p&
z%PXs>u-x5Mdidt%^u(m3MU5OMcekC3;aK_HZ;r)6gN-2~^78#ly{BJubm5K8%F3F$
z^aiJ@xYMh>bFIsZ-p`#oxA5sH(I?NJJ1b3m@bB;Mh)pS++y8xed3hE`;Nxp+A`jaN
z*w+5~Qgz?I*5PF9gepBl!->`VOJ9fW*tyd&JY2l0s%pd5tw&Ey)!wPUXUP(knYs7N
z{--=X)_Z5yC(c!i{{H@c_})FaUAuN|*uMRE{{FwqKK%3Z?RxR{_ICc-Utbz0P89r6
zV|Qy?Zg=G7w3BD=1cnOkKlQFP<c^+>4o_cS--XMUosaj)Zp^*C&8t6p;;MH$WA@j{
zE_UxfR{ef2yR59NN&Y>V#csWi(n9NR8^-P^V0`!Pod5@mfw_76`t|xpk~T)wo!i<t
ziCgh&%umaAaeFEPm)FYM)kr)(-hX_qb$LKUM2B_xyM%9VZhrXsb!z7HIdgc@)6;YA
z@00D9w|6TnG%PAE78Dh2J#YVCX0dz!wA<geWL`E%Jj4>StAx|i(o#c9>(JqL{*9TJ
z)k<DoV&#{&3z4|oD{XF&aY5n8v15x?tXOgDc+tZ{tUVHjOq`sY8X6i0-rnABSo^DF
zW|3s^vonobx0-(cd2Ma<gO3#vo6~%!{<g3AVGt7&BOoHu^8Eb##XELLynOkRgOAT`
zecav;zu)iQZ)&EmukYgOs%UR7KXc~HACLR(cSt%e$@)~hPIn3@=1-kJXIu6rLML()
z%XIztW3R8T&))l<nVnA~W?%YwIT@RZ3BT9m2<~lW=TEx6E_UiRe}Dhub1aKR)&++g
zS#QO}#1s$}rM120?X9gpzTdB(dN026`@6e`mv~MVxz@^b?@HURU$55-%FC}W_zQ~B
zg4>{K@A>)p&+W2<H#&LgwOlFop03yGpuoV8lA3z({(bqq)!*9!G+OrVwLR7++wD8s
zOi@?Y_ie3t))fx>|9^~+BpC_`2|alB?AY4q{dKnA<8CTd?f?5t`g`4t4T%*$J}7c=
zaR~?tGA<0@V6Z5CHRX`8u&e8zRn3NNywYY5o}Qk*qxSc<GkaPuWo?l*&zmyy!p7v|
zeF;4$W!jbO|9oJc{=us3O^0^)It6ocaX~@B4I4Kyept3IB-J=UT3Y(?kB^T}oIdSb
zQ)9Dc&6*vhoSd9@s&lo%JV43)+_h_B*Vn}!-jI0s!jhBq{^C=nPJMW8uC+zQ2Zgk=
zvs$mMjb6Ps;O_GIbzJuL_A_S8Sde_YkAsWrQQDS{{(g5qKR$-1T`!(Ke_p(G%8wem
zviJ9TudR)4KL7mi<;%jBmX--U3wP{@c=$%LtLsPT@f#bH4b#ubNJvYAGEHM+<AcvX
z85%k|I;7_EGCFvAaymIXGw$&`=H4gMID57<4-e0SmoGbQtG^ZGo}S-2WqZLxCmu;7
zmS4Yqy|}eiTg`XYk+r8!oOo~#8Z9OabFE69GBPxdBpLe6x9gR!|08H;XP0q#8SnLF
zJ9bFa)z$4NeB5^H*IEnC)myik%E-tt?6DN~@b#UV9UdyUx2K2aolwB*Yim=zl0(`T
zDb-!QxWB%B=J{#UroFhZkh#I!e)p3nPo&;{e|dTNiPNW<8Mb6zW_x>k`}D~B%l+l`
zIPI#x`8-^@v+V7ylQnwrvzGjM!+R@a&4fwZio6{G8b=N^GJ~oIP%ZE2>DkfU-Mn<E
zYJ+*YabRFz)@%QZFBX5gyw&@D{@q=oAXneoqPg8K$|e8I48x3jdo0WUFZ(k+)puE4
zI4BK^d=1?wv2c}^^}J7~LubBnpE<ucckvS^58H2leirBL$eOI?o1!<-qxAJP-oL-T
zKDIN@TJmFmZCTm2Gtb%i<w9=$-&y=T#cui1r4PToy&YqJX~{AlL0e;EW4&WbmMqzR
zZ$a4duIWqW+0~ws?e6R2i`tqMy7=$5jEhay*V_5zAKlwqZS?y8&*$>%?(Ax9Z9TKp
zH#HNQGm^!`#4_&gGHoz7Z(-+`>$$w#-&sctl*w1FT*<+~;o#xHvAwsuoBR8|KdQ@p
zXPZ5Ic)0z<>C=Y~HnXS7om+F}U^Dy2*X#EyX=`(Lc6NUF_|Y*jQSo}ehsvRgi`{p!
z{5Z%if8gv{-gZ7&r>H0?vz!|T-g-y5_{Yb~`}z4XG%Q-A)FW>%=jrLGp`+tcQDM>I
zq*!4i_vOo%9YK#?ZK(fWmvd_i=gpfpJ$!tQtO#7ZqgsNQjVGYu|Ffgr;wMg@UR@$0
z!C;bkiABEtk70xPe&zi9{FvQkyp@%e9X&l$cGf?7`7-kHkEwqxubWMMCbql$z1+L|
z`}K|A&Cc*Uy1(PZ?t|yg^Bbq1WBKq*?bq#B!e8Itmyg|D_SCNY&5eoG^78Wi+j4Jf
zT`iA{lzet(=Hh~g4}X4sX1ubd<KFc6x|37I`a3!r)~;O}^LwJQ`>B|JfujA#53h;b
zY><6TXXevhDbq<a&6d~9KR@5Tec?jIu=R0&uL&l5PuDv-QQ18pAfREkdH$)MRg<$W
zE#Z82c6RvVA6wT(D9+s}5Oluw=hNvwKAqNIopXI{wE4_*e};rZEu38X-(S3X6&AUH
z-(hKJ(sJL~Z4;H<nN~y!?p+zYyhznnWaHMYN6*{;k4ddLHN!M}+M#M4?XWcyEd98-
zx%Yg(SMBw7ckS<QH#VpHFP*+e$~><}H+tKZ3WFvSy<DxZ6_;ju?=E|LVO^~Cs^^PX
zD{SW7=@9yq_uym2jXjmdH8nLGil6(%>?~sSpKs^t>B;Hi<MZIj6Bc=Sd7n8Jf$#Kd
zZEbDm*j9^uet!P=&f@0*K|xI6;o)l{H?su>2Hx0T|3CV7+?EVMIoqn1v$M^WO-)5}
zZ*4gk9$%|E{f(GTM8mq+-AS*nt=&=fR?5i8=)w|D;VoHLxemAS9&TdgPU(8_vBE~i
zs)U1?jpx9-ySocNKl2q46+L+D7@M+N&w=gt>$oR+EZHZo)NpTa_2I*ZneW$rmwk7C
zKYw&|^qKkg@y|9*4G9Pk*!T09^qpO$+*MUo88<hjPW}D;<44EcWp6iBea(v5Qz57y
zzt3fJ+Sv=c%k$67HeY|qWi3x?{kg53U9F}9Av$Xk7bPWb&HnS_V+@mR)fbI6e))9|
zJGL;3ax1q8ESd`H1tN7hyW1)%Dhh(V_xM&-SykA?O<nB3q3AL@ph&T0&*pD$Zy)!4
z;bH#ys`t``Czd?Zi`lW@r2vQGl4}=cLi?(V6y<9^G~ThDF0Aec%0x_!3}<JXAD^V^
zE#kM|mqYPZpI&!n=ilGolMl6U-Z@<K^XJbG-@mUf<mGhYxTs=Pe39wr&!2ZvDo;<>
zKR#LA|HGrB+@O|(d%xV(f|3@2MK&NMmnz%re!nqZ6S1)=`rpm;`469-o*sJbxmt@r
zu5-Fx)PswQ-5DAZ54W9M`}@OT{?}GAP8@-fs^Yo<k*Nn(T@!Tb*tY0&Qj|l~f|ox&
zK9(>_={U11c)4GulFB00BT0q~3GeRgl<I5QlfC5sx2&#7-C{4Ut`_(4_1#$f+%F<3
zD(Tggl>!_r7FAy~!q!AMrt7~q$Sl3sD{Y=-A@pfo;MPsLwb_}Bv9Yl^cXkN&80y6D
zlL-q8GcYtfcx7d<VcDA-R;w$0xA^zV*)lZDUeprzWmR|h&-!Xp*ORW^J<{fU3l}ad
zC@yYZw@&ZOnKKWbKX2EK-j-oy;=~as6)SdmLPrP3&Q#}izM~fwIzOGZzvAN}Jtw6W
zfvpRTA$|9Bz4tRVZ8B0(Q(F|c*lol1?dvzire^%Ub$8x`UwxCh+2&XjGL^r-7h1J@
zp>zA9*xhAXUt^=9x(>JVH=lpL|Lf_sJ9bF4^UJR*vCWO&eOox_eqhl>P?`7S`E%{P
zbFI=m@@{Qec}B!|>ch`JuV%U5zJBhT%QP3I#sG~YUtV4o6cAW&F=Cc^K3{lvxQum~
z&+12$wB+yK2HEP|&KLTlX0BC0(ZvQqWw(SQ9fGs?nkQ5#>*?_=UAnZOu<&ArjQ>0v
z$Eqr;d-eZo*LHcYN~*~hmX+mY*eYgy_kud8U*zGz!NtvOD%%xhQ}u;|nVql2LBZkn
zwp>s*)VJLwMCGs2nsd|BayM<;#+J+j%25n&J7EU(PScG(bm-8cu%v}gKJ{tq>9zIu
z^Q-yJYFV>J$G3g)rbUaCYJNOy|M2l+V}y>IhX=>Cb+O$aK75FJU;X#j*9RXf9(=6W
zQSwq~`=6JWmtVMi`SCT~hz$#_C1++NB_%0{a6RRElR0bKu~6BK8#iv9C8D`=&*84F
zt_N@5_MV$-efaX_;L8tJ9BpJ~Hz;`E;4{}sw5qDAps46jBQyJktgEY{-rqido`2`g
zog21oJND-0=AG3kx=~vk>gw#y&9m)3+AW@ZcUS3Fxo$I16SzxM`@+83>JL9_A|fLX
zo<HyZjOXUPdvdnb-=^FyJ2^@9!N-a_#&H)fUIdL7{QL2kf5(m;4)O8w%a$#hVO_4*
z)zvlSl`w;olhcEzPg#Y9g*jTCzP!ILe|>%Y^J}+n-FkFdf4@sYf`W{!tfBx%KtKQk
zKR^FWm!P{l7!*uQM4H)nn^vyW{POkd#iicjZ*FXCu2%Y&`!_87=nskHAFtQ%zp&Vy
zUqV8{K|>_z%ZrO0eSK{aI_vJ9uJmEOckkYr+qa{q#tN7+9$;c-o_g!q^ZE5@r>E&A
z_ZWWrcwByS`uTZR-7-qEo}8Gdqp0YZSJ^LT8&OtPw)Xq{*|SgE*xKGaGt>BH8?SWA
zwYj#{({$tZM6CSF%Eo3S`hRwoOJbtp>zkX^nH9dzvM$$4?%6nJj?A&gA7`vzzy8j*
zxVX4ArLV8`7#=e+HkM>i6W|bem;dd}&8zP=uUXUMJJ%{SQ93y}dD^U5r;a2UG9R!i
zd2wLv=FOXvmo8m;=E8*uzB3FQSMHEV&bhTElj}CagMYpu*YZn4d)6;m(o*~D<#Mjy
zCZ?vT3^#s$elGfMwc34kQI?A{Pg|ckf1dw-{r|no4hO8>vc;rzy2hKgZzoQg6qH`L
zCTc5J^tK$ws;a8FUsw8;y}i}CVui+;8HUU!Po4y|FluUSdU|_z-qcJ=N;)7hS$fi0
ziOD-tl=rSzoakXt{VhjDRn<{x;)6FgHyfCmx;i*8#O<qzTx)lIZFGC=?y`lkyURFu
zd0q4J^o}GMrk$VHyJn4!jBVAF*YEG`t)5|DZ<lv>SF5yn-h*#%Z=X1OHq>feGdusI
z6BCtxJe?jtVa5!OPM4;pCMHn7{@Jr<79}qxocX8qEjm{8arE9QQ$9Hx4s~^P7dJO2
zrHKl<y1e`L?W_3sh*iooizPih{b~Kqt1gR=dNd!BaDIHO_vy6RGiP3XX{$QXqXm?l
z|NZ&-{z(JVOYx^uG=me8lbIP_+}f(Gq^!I%a^KQi85x<BZF}qg+ilvkX@~yF88ajp
z4m>*AovN2#_u(M>k6*9XZ>;%Qq@t!4b~D}2kMGalzlk|HJ>Jvx4&J#l=l1pO_v^Z^
zTnU*mdv@{fpD&ls|8Um){t4O1Mum5G6f%E)e%?JSObk@D&iv~c85MQv&HkkQS3~Xg
zy?K+fCU&=2T3VV#{XZM?pKIsMlVf6H+K_%;uH?l9#<sRLukXRJTB_n3BYLh}30Y;j
zP&H)jeupdBkB)TS*jcQu7rU$F-rnkLt2tIzx97+I`T2Z4XfQJ|Kfixp?e9Z}4>LEj
z^S1?Puza{bJ@KgV^z7^F7#q$=f^rjRIP!YGg95{cw6u?_e(`W|IpyW)g{_TJogBe%
z;Lstag9i^XG$=Z^9XN4<!#M5CgiKJ`C@U*#VQCp^y$&?ynVFfH|2NX}{FcRw7mI$2
zj(z&ry6la_r%#_Y)ch>k8F{tRMouDmt6fdh(kDg#|J5#8wk&8Zr|!b6zpZTz#~&};
zvL)o*8&zZD&F8$uKUCPTu&^Y2dUEnk{Lc4XCnu{f4qooZ!NYUp=H~Q`xwp-7?(Pyj
zJImBLCr2l0YgX%v7a1HZOk1+9dZpdg4qvyR@bR%1*Valmn5T2>t@_%uZr!>V`{jOf
zndYB&|NZUl!#8jKT(ir+yNi|K$BV`N_oS+Qe0Y9+dC6>RYdiDl#fujUii()#pI=`V
zBh<;lQ1JK|uZ5M>wH5bYY01wod9~27neF6O>-v8-r%s*9s{OIW>wC<dJ9i$ueY^JK
zE#@yl{(oEB4qUnv^ze$+_Po1~^rl`>RaaO4^6qYQ_Pl%RxObPoKQ_xW`@-Jp@;_fL
z`|qgxYh`3?Y*_rvr{ieSk>kf7zr4J>;@20=Tif&b<@%53&Ym@^tM>P|g~7}H1UOhc
z{QTU~($u`Xyq^5Bto>zjZmxCvLg#iR4UHA2?3OOxe(HO8U{R5gk&)4peHGkXToWct
zIH0>eFXqyb&tG0%-u~~5*6Z!Nw2rCUUh7)?#LL@z=S<}-Ryze2<+kxiHs#*lc2Z||
z;bXR0X1QDwJ(f(I5w<Sor{CQ>_xIIW@B8~LnuU!Gl-115#rx%KopN$?Ds1F-mAq`a
zaU+7^|K0qPr%oN3sO)}Wxxaj?`C0$@cD>B(d=5$zK|_<X&GSL^-Ip(4Hl&@MmG$-J
z#$<Pf15K>lA3i*E77-U$wzQPYzP^ri{&~>I&-MAMSFb)}c=Y)3#XELHyxg(mcjSfy
z#z&7IPn<u$|M&Oz$&Ziq8W<Th?cTi`Rw8WPx|NmT%xrW1@9*w9CnhRBdi3bSMR$2c
zD=VoQJNdcR<?90DuYS9BFeP-s!V|ZcwfJOnG@K`Lb8|=j{`U4}pRDx^7o|k=ygLbf
zeSL4fyu3U$Z*$^dwqwsf-~9c4|9LKM?)$s`ue#;ct`z>|`TY7#*Vabw7j~Zb_wQeA
z*|Oak7nP1lB>(??|Gz~4@#JaKrunD{6~3;tkz+nk_U6VxiR3fq&-a^VU+a1K`t|9z
z-U<R6jMLAB>^}eJPfc2C>e3Cqudl6*tg5p5{P}aTjhuhpjbClN(h>~QX3SU-5|f&m
zx+eerKCa(eHf~HTe|P8Mx8*DDzgi`6e|7l!89R6GjG1p`W#ywGViX>JefvBAtM7%~
zoG0GTWoF}fFi(n~m)G_4v$F>ue_XJ5aWgx=T!z&isf!mc9=u=wzjwg`g&8wuJb2u1
ze{4_XXM=(V2eNYiZ}V0Q-RkS@-8^%qq>{4o(|JecTNEmpYpqxqy(L5N+Pc`&wkI@1
zxGrwbj|cTHR)?==V*m}F?f>^n`_!pZ3KKmp>?+OnnQte%|NlR0hMR(se}8>-j);)h
zRr;FEZa%-Xw6xDG6HZP}&JUkHtty+pYuB!hj*bKE@^u`{%*-4tOgC=dPJVc(wWGJU
zwY8NsDJcom*4Vi@=H=ucZ*Ol8*V2>gZ-0Ee|8ckezJ`@6HCdP#Wn^SF<lHnma`foQ
zH~xY9uZ9}hIXgSMxVeFfJT^8q17qXECnhQvethIQWy+K*CreEC{GY!xE9J_HK!y+3
zRvz`d``}{*2M<q6e}DfnXT>ZL5s{XQi`|`D|1WFN@a4U)-v07TD`;BkqVtp%fvuIF
zo^&pAUh$oai|fII2MY>RW+_RV=Y_0nY2UiFw0C>$>?nV|9>X)UOu4JSzjO8T<J-Px
z8`l*9CzIu?(mg!BY6LGWxxOy;#@6ic-rqrKU6QF+s){UYe|@nwJvM(rd1P*F;KX0c
zuf5-SXMer?f!W5QVeb~&m(Jbl;^NY9{BdaHrO5(L9(PxMeG(KF#>Vh<(+obvmI<>~
zUVU<Db+~?Bkhit9^}Cr|a{cZ0|Nl(RPS4Kn&b+)#QB{={G>$iQswl&PB}-Ulo8>kw
zUab7(>(|80%ud7PV-Fr4ZfCf6CSFC>|KCaV`3Fv%@L2g{$=|fp)WkbG3PG7|=T6IG
z{qp_K&(AM@>*ejevF>k`g{7sVijbp<(8B8P?}|3xoo3(H$jt5(9}miK$DW>^&d8wd
zKd+^^nVE%&aaY;fQ@+f4qH=P5|Nj1V)(~+D4;P<nReH$Z{_hddxk@b)emP~kb&HCN
zC*RnRxC2xUnP#&w%rMOs`yL?rVOgG2LW07hM~@0VKl9!C<+Q}%4-XH2Ja7NM;Pkim
z_xsb&&r>uq5;`z@RYmr-H4|^@>FMzatNXRgn<uwt@7|qHfByU_VUWOJ-udM0Y;(hs
z7Xg31UXPbBOky!-dh+Y*YYEFDm7t)Ygp`z)xz^>6KA*RrUODgKwYAX^8xk1b-P_we
z*SdVw(+W<-C3;t0%{=||^z@C1huIkN-|aOxrZrdg+lh(F21Z7Qj&_TG{P58E$@AyQ
z&(F;TO&i|bT^<+`((>g?38;g`FK6Qr6C?BQ&u4#7-=Cr2%ZtF2^mJ|6<cJ6f&|tN!
zZ145;@ybd{OiB|u#P#Ezoa%mecei-%?QO0(IXYZiToa~GZ{M)N;Khp<3MwitY4ryW
z9xNy+aq;rvirZJysTsUX!P;8-a6A9;O{u39#JVR=nZhD2F21MgE0=lxJ(sdFvuEe#
zcK6%;;wUUEtoZxOl#7e2;Q2XOP@`{m+1o>Nt;?s_nK^M>6j@u<@#)9M$1g4~=WlUR
z^z!lw2nuSNGDSqjx{N0<Fc9S1eYL+2NIX`n3BI~Ie7%5>5R<sLI0p+;MO9VOqa&Rf
zy1Gv%d1qy5$=Oseq^GBU_*wJf_3PvV4U8Gr)<_x|8Krzv@7<VsdYXZm*|AGYy%`ze
z;^HE9m1z3-_*_`#D_!&V>ve{P>+9nm|M~eDG>FzItp4E58=l(Q+83{0Epl$>yEAk4
z7o9Evr&r8tJ@xwf`eFnXADq2oae0~V;mzsiHxxW{s;H;{HCUY6cn+=%UVi1;`n`Mi
z#@Kd#DrCrKQ+085O}x9S^uyP$uIK03CMG5}rk|g8^6mM92OXE~Yu<8c_7*eOqfZ^K
zUM^(*QXr+cr0(LZCyUmv*WaG=``g<cH9w7>ot@1d9v(hr%9ICBPEP*u;V^&UhX;;Z
zzhq}+{kryb=FFJ|MMX`!cUxau8{K~9jL(kUyOj+LCd^h@XXC0`##pd4R&=7;tPLAB
zc)h-G|FAOygY;t1T7az~d!9Sr;|*UI!^kl6puv|#;ko-y{lC3hbM4NB@sj1`<?n=M
zxF{Wbd3m{E))kGGmX-&X{q5I&{df4#p$QWvFx1!A>%{Ds;4OFb=uv_0qjyf2g?gOs
zZEI~!d~so+*86@FnYXvLGBcc+Y3zP@;)L>($9koA)>oS@-Fourp;qn}*VoJM*}E5%
zxwm9oWO8+NJ#q4+V`QYHkB?8vt@O0CMJrZtSXo(R^*Y}=4;m%;@iF<ut5-^fhJye8
z{S)Xudg8<hhqyR79v+^oJMDY-+E#si)p~b#`Qcl)q=J|Gwa%O=nRkC*@6XTAL23N^
zySvSE=g!^5*L_9!(!|M^8Vy^nwDwAy7ybX1<&~}19s1<eD=uqmYZi9)!^e)X`OY?L
z-MG=PrnXj5faAl}@OVasStgZ}<?a9fDV{NV_G()`e}Dgos3_357-(EPYD)&AzrVkP
zq-5fc4-a=#eqI)JE^b@yZ8m3TXXx0-gU>(jY&N*O+<*BICytfjTg-O8c=__-nVH5j
zY$}bSw&ifz&F9a~&i?V^hk}|~oA$+*j~+Gs`}@22^;KUD5hWWN8D=(~1`m~{rAt-A
z*2Q!#SfFrbrZM}nWy`WW_4xSsb`(A3YU7n=o9Myf?Cf0f`WkQaww!~{&d$DCpwc1`
zRK6l2g8AU%z>OQ)I=Wf~eFF}E=Y$N7)$wZWWMN?msa`SnOB}DF%Wn@AA<)3Bar(I{
zB^sb1^EQ5Yz6E)YtqLEpRM^P*&9PW`rR?eBwY`7C!<)VIjMLAp`C>V-YyGRRO68U-
zdw1-xm@;iz(cv$qpxJ5<fB)mZ-|vrqUg+xX&fE}G8`=|o_jfqk-=BUQ7p*So?|W6_
zc}*=lJA3Bu*iy;xk`fb8P;hg1XXOVQ#+AO0m*jnQrd8mQ!I2|J95h6-Vr5tC>d`hc
z+ZHxCBKQ6LN!*Gqx?Egb8<LK4ZOOkcS7Rq178ds5^Jh@Q?D{dZp@NE!k60Vb>qE=m
z-;=HX^N~F!CT79<_58uX!Dr@Li@UnIdVS?&P*ha>@aa=iXD4Tilj5)M@B3e0Utjz>
zH#hg=)9LY`Nr%3^J^>CE4GoQk_V#ukrImRx3<6S8U5?Fc2d`Wa`St79i%Uzn%ii2j
zEKWNpaX7yIZ>yYb)qw*C7@QUgEOzgAD=9HKlC<&C^fg+?R=@kJ-MaF??c1{}tE*RU
z;$Ec25Rs6uVA)}XEHMd*6Cr={qtv;$xg*cdvz27ndHv4LV#(y5r%#?3$n_tusjYpw
z?fa)sNo%9Gr}Y?4n>q6&gF&Oif`a<Z>F3v#%}-5D&3ScYCD&~UY3a>Zu7s$GbxSf_
zTj<Q5H+Sw_S#4e2)V8*^oI@>~UPq5gBwt?U8+?O}A$m`RVRFyLNt1-Wy<9$DD<?TC
z>lDL=&(F_?|1J+Oj0^p?zU}>F1*>AkmK8bI*Tr^pbsg%FG@dYLPS2r3PDhR(KYZiH
zjMY1&goT-pNxXUcHg#KS&&ilY6YpK0;Gr_Zw%Tmcq)7@BJqo_PiJUQOmXd-3gMR$J
zHDU8#Ut4>4UF_})>td~2+S-)N&Bc>8N^DL)?-mv&)+c9s>TCJ?d$woh+skjyyL+ft
z+PvWRx7;Vso@vQmKiJG(_~eA(pHHXtJ$!sxT$CIg9U0ff?d2*iE(SFk89?L5GBy<g
zetv!(Jv|@=QBhJgwY47~9pyI3y25ep+_|g&WJAEIa+cQ0&T}za*k7Dk>bOcjU2n3w
ze;PwXNy(NopMLzPDEs@X^q54l{l6c|%m@7D*=SyV_U`U(9tO}<WOC0&QSGo3e_G@3
zeZOCSo?*l3>H6U})62@tj7>~ZjvYJp=I7_<M!A<RU%q)_qH<(Hg2HzH%>O~V%ibn2
z+}N6ZeU<F>pP!%4T)H%MX}T^$#PxNtkzrwC#s&rnX=!P1o}Qj=^m~$r%9_H*$JQht
z@0<E>kEo{n`c=Qf4}a&JyHmg^<ofpfc!qqpKuZgYgkwFD96UTOx3}d!eDZ|l!T$Y!
zwCC-N*<IFqJM7lED_2Ckr|C?5?XDoez)(_Jy84Z=jg8FCojX5#{yceh`2|S-8#G;1
zQex86(_@f)jAy3V#fuj&T)a53bN{Lx|NefDU$S)R-mmFb7do@Iw6`nk>+^Gq=`?KI
zxbaMtTtEA<8JE60pE@2b{X2Y`*U6`^uC4~HSgCl+ShaHbKPE*})5=dNM~)mxxVNYB
z!o`aRx8>e8NIN63CG#@d$&)7;?$!L{WMSH}Dqzn0Q&Y7w?(8rO571XrW7}Kxb&}>T
z_0m^YG(Y^T*^+;M-zif1)xBQxH(D1wU=R`(W@Kn)<DGOH6yAYhVavXFto!uw+OdCA
zmtHE?D=RCzaQX7;Pt)DA=3Bke7YGvGUH;z9&5cb=H>%~`-QCO#N0JP~)<iTmG%y@F
ze%#sJogFmia(!LwPW!e7bJZi?-`;Nbn``B$AfRArDLHfIOfLB%J4o-DJwHF6g_Sk*
z=JJv+VL$(AdHMOdxw*C75zlpWWE2t-`tbAl{NlH(gr}Q)w5k0i(%08F^_zC@+D9w4
zUAh#sCSoH~L(%z5;B>lPFjQ~VMO*Q=jJuv+Qn=b)t+#I7Ivxh=k{1Hie}9=)e|;s|
z-PxI#mzURb{PD&mOH{<9q)stxD13a(@R&sP&rhn{e0*u3QiI_}`uy5s62IS9%r?n9
z^zHrq^Ktv@&d#&1KgYzxG-KgH#mkp3C-ckMtO%Q5{rz1k!;J<;=7^vmA#E+Kq<%Tu
zr0i>J60NMPa!yUrjHypQKX0n#vikpjr!yv0e|r<CweG`*0=9<IcXwtUJ$lrz)8){+
zyStBrCK_Fo1VLk$$#3@mR+f{Kd-Lw@?llV*G#ov4Y*QmMyAear`RAJ#En1ZIpHJ)9
z>R11+eyA04Ik~iP!IMh{SKFUFdjCHD<=NM+-C~BvB!1uj|L=H(jojufTT+xJc0`|l
z{855oTk>(fV-m@Ab#-eZH>df;$H(WzGc`8MwJctCtM=LR=f>LF+O4@!+w;y|x_o)&
z{Q2^aKUU~iTSq^e0dgI~h9gH@mOj$b)=sYd{Vnvy^4?zF-Nn!Ol6y9Wua7e<E-v0_
z2JZ%kFRf!2eH>c)|CNVciSvAcMUz~+#S-7%+IpwC$7!KJ?eA|#7dp3t${+@Z>3Xpr
zUa#N3Xw4cPp-z^y(c6!Gd3pKc@Avzef4mp+1q}>+eGO`GgX-=YJ9#rRvl%9tLZAf?
zPoIXqwJR+x6%-U~<hTDLz{bV~S_rg#`|(4q+=9~5+}zyUM~)m>Q2YCvK&Ok*ag|!3
z{k6Zpc^y6a_+!DJAB8m^kBS?ZnzlM9G&DCePt%QV+p)tUufDCV4OAqyx3lx`@Fb+A
zf#xh9Jv!R0p{W`8Yf|XZimQA7&stEW$IEiHICI8|dE6ISO0N_z?9{&RX#elW;yWRt
zPiw#5Ex&N_;=;Gth1HqXPEuN4dhZwb+x=uoO--G;ZvCojyt(UteQOC(v$vObTDaj>
zs^h<3ul0Rq7%ZH&I4Eweig<K%^p>ovU9%@OW`rGWzmf6#*Veseg~i2}OE`EZ8C~9#
zb8nC2Z1eneh4JC*<JNxMmhYUd*D^us_U82dWzGswtL~{!@95yDsH}YW;^N|~T5mm{
zh>DAYmTG{;+jcCU_<FN@zg*(4FE2q88nevv`$V<FGM=V3w>el@bx!EY(D-D%ZpRJ@
zJ3Bj2U~k&A$wapAR99EmhllO*hmId-PueJ<sHhmRyG-}c;ltT`-+z65z4-FSm|Z2E
z(f_`@41V$QW#MZvorr+f8wD0+N_pxnUAi=4f1T}|Idc?*Iu(REL8EVP?(Pm>7VGKB
zX_kA7#ogWg#p~CHFI^H!KGt*aa63Qao|)%8toHqx>~GgNapJ_F!W*}4CEePRdE(Tm
zLpur|C#0mX6c-nRCgab~w-2|9d-*RYC<rvQ^5XUD#l_Fhfw~6_pk6^iK|zCqg2VN7
zu}|MQwzjt~uK)i}fUEVw)vK<{{pNnS>~9Ym`CR#U)w)HClq#yLL7G2&`LbrJ-K$%~
z&(_?J?iSOXFn@mk=JfMPA0Hi!*q#@=_PA5Wv6Y`V(n{xF$iKZ!_w$!8Pwe!gwye0c
zJeyzM?#$NNhRJP*%(iXYrekkE-*=XYXWC8=l_0Hu+j4Ik#mC2ATkbEv)9%;z_v=gc
z<lf$vntZ%3_3f>#lQWZ3QjQ!tbSMI}3}YI1tJAcpQ;$j{=N#{oy>t1LXngQ;zqOwt
z0-Dvc>i_*r-<EUJ=$J$@Xu(1Cw>L9`Zf7r^sO-L}rG;hZQ`@R96RNp(n>~5<%*fy0
z->mqV&$h(FY%@#K&(90Bi2Z&0O1t_O&%?o!-%sW;`P}mF-rnkq+j66i96PpX!2*WL
z%1RDy?&iKeJ|`z9hCPyf+l!z3?bx~V;k&!LHMF#xs;aDx^-8z1^UEpd>G9S7`>B3z
zo-H>6X!3N^=FL<4RCRQCcJAES(borBV<jjk$T-oXrCVHo(SijFZhiD(WoJKp@uHxn
zre?*@PpZp&W;VTflfxr#Cv$q5ZgYf=TTqZtOiav&S68*~?5PyKdGjV{YRm4|3*{q6
zk3RhR`Z{Q$Y_4@VsH%Q*Yb$s8yE}m&m+PH}&c@vOzS=W0Gn4D}?Ay0*E32w5J@+VL
zYnJG?oSRKwzI?HIJy{@k(ZnZ{X3gqi=a)Nh^QL5to&2v~zd%D6vrMzwdU|*m^7T5W
zPMM;hs>*u2Pu4jkM5L#uXG8vdJA-2n-o0BlEh27jRqKQa0-(7!1%U&XFAEE+`?+Lh
zYEF+?CA@x$$uZD;<c%8=-qZD187e9(6JK6hYG7#SINL1u!`JKa%nWh+>v}&wKM!h2
zsQb-n*u2^J%h#_9SFi5oleH?iob2M}w(4nxwAC>QDf2v??RU<cS>yL!v(rUMCvK0#
z=jZ3wZ?@ySs3zs9mztUiYLV_Lef{9|>+X5B)rSrpVmd$1_VFzVDXFAeTQV!Yy^$2t
zi{aqs=LdDwPE1e)Efc$yv~m0P>8te>MYyK+g`Wa-%I`HVT&T!UuvJS-kNw`A4{J|N
zR`*|(<Gkhckxt=>bLQw27tfzi?mCy>_1u{=F8}}ioj74aL)zI{3*GzW3d+lme|mb_
zu=-oh%x$-~=O16<Il17?4MWgEz{0{pi^@+be)DWPnc4Y3z3EU(x!~a7tw*^X9>$+#
zxUeGdX=Ti;j6;VG8I-&TP+g=h`mw@h%Cu>x{>m8{8$Z?hbk$Xdk&!VbaP_Pm<?rPf
z4&1sGHFu$4km}3*duOfs{6t7htgWSm<;U;epn=Uh(;W&64UZ%lu357t<<{=qyNjnE
zP!Zw;t?3F}?53!q;-Y)f_3p=OEnDtrsES{WjEZ{n?(Xh_f`SQ=b+51K-nen&N~MjT
zpWlnSyUm%Hm@cdgUT*b%zJTw_&rgz)l9(QxO`UhVU*0)9T)eZh^TYS=?GZYl#?q%x
zp9G|(yX*e`I(YlG^y};E-Mhtf142St=FE|qGIeU<?}?|*oN);Zycn&{v*v6CFKHe4
z)d!`FQaHBd-foMp|2s9h?C~*PliXV&c~M_?Z7O=|wPVMQgqxdEz4Eo!>Um9f^^AS=
zu|g|++uG07dh_PZ+puNJk!x$CFD~<y1`RsQn>P<My7b}UVbH1-&=m94tD<FPWgL8b
zZN0s`pxKG!<m4Z}emN-!JXpPcAJd2XDvk5&|5=_nd)8EJ{VJS2{2<@t<9)6b6&7Xh
z?sWe7Qv=GlprxdfRK2zCraeB^d*SNU*43+DN2gndZCg9#%d<M)N!*HGL+7fCFAV7T
z@S%W5!hk_(BFD68(;{{jse%><r=OFVF>BVLQ>VD9s;VrCpYf>q&+D0{8{KsNIcUhk
z&d#o*v(xeUxw(vcb}qTHzrH?i@3KdsQ=6Na*Tw8?N<7@=s3LUm!Uci5yGjpF(~S<9
zHRW9{8;`^RTT?kHsjg>dXEz^z?C9>!4r=dBwacE}*T?to-)~Tp_27{s;ALFT&dzRc
zWM&V`{=NNb^!in~QBhK7&YTgDl+^sL^6yBeaAIa=<l9=%Vv3C$*qXXpO?^UidNP`<
zx>_&ZNdj&5Sm&rZy`h2Oosoa&`c+(3f=(POcd|{5Njo=(^H{{zxT|YFxp64ERPt(p
zc8FZ$L)xyfGFebi@WICli?TN}mN~C9MV4~z(t6P+Yb{n|CvRzKX_Tuf#L2_UYnXCE
zfZ>1W?%F>;K+8Wt12HpZ%}P4d!s+4dJ^ALgb=tSXTtHhuOwJrX&hF~!%E8S&IZ{qc
ztZmO88=qMwozc^#Pj9dL`|BZO-Dh)z&ar*9zaPAN*Ed~1o{0ezu?L&k!6Sxe&$=ci
zDuSk%S-Hg?bnEY1F*$h=Xh%z_M<DCngU#%RFI*6C?~|FBxx4;<9jN5Fu_5u!CS~_N
z2Mv)&r>1J(QQ80Q-8&CY&&K`x_aD=`9k%4s<QC9c+P}ZQue{bWEnw?ECPf$HA2oJu
zywYvT?tKND*K{9EYH4pjeEqt3jotk0+baT<Wvt73v=tw|dDF9DgTalPH$hDz(5jyB
zo8OLf3UmGL?&%4M;ES320yM?2<-m%-#Q^~U2UJ@YEKm>;7f*h4q|@lFjEu~aEa90m
zW*oSCSN7z|lUKFQ2Z*c6gjf}4USB7BYiqW<aCjDD>6LhemW*=?9GewHxIq1H&<ge6
z-`}^dU8`I5?M>v`x6<Z$JjW!$qrEO4Wd~1bY-#v%=>}*j=*STl7gyJlcTP;-Rr}ja
z&c04(vyQd3^mP6Bwy9G^tG>KoWGHH8ekBFkadS~1lQmXTUS8fqMaXBS5i0{|MfJ{H
zQ2Xqp`g{c|E2;JI``v14Y(T*xt{?YcvcKKLl{vo;^V@@_>0Mo2L9?EF_Ut+E_+!EU
ze}ALw%|P3Zf{tsgUSM7Dz@fuM3A8A&_V>4`ySFnjtXsDZG*BHA8=IJr02)XJmD$&>
zU5nWooVy~&8<bjJMWl+Bl$Mn2NIWi@|HNBTLgK-pR&LPfK4^j?DXFRO@i9d$Ev{wD
zmNA$F-`u98mF2{tSn3lWFF$eOM6T<5tG;qEH8R}0cW-Lm|9jQ%PudCxPu#oL*2&p9
zv@2K?l&)P4dwF{YMnrV%|Nl>V;lhOy=6Nzayu7Be)4Vix3OIGN-Q8a=|Lxm1hI=+)
z2IcQ!c-@y+fqb<nk&TTFG~oTC#_rGGzYpKMS+n78Gduq)i%qk@`>UkVQd3*S_2V+E
zc(yLO2+5J>CU>u0tINhKrLw&SvYzI|xpQm`Q>IKwxV+4_proW_-#$AXU0uVpGZHp6
zKLXNrzq+C`;hKYor>EoldwUa8Q&l(HXlrvnKGxejaiZXvvu6$K{#4l1|C@7r-<B;R
zudlCfpFCOEMM=;_NpM&B`@X%^-%rWT-ZCHe<c;~Wn48IpEfcC5VFP2@TYYbD%e{G^
zk@@K~{kT0d7!x8RBYO;wrJb2^km1DMoZQ^Vx;ne$o{h5BWd?Hn%QxJ;vNAaJ*BpyN
zrPp_M8Z#f5Wtx3V_xsncskOhpOuW6X{{O!_-@3(ggKn@hl>PXSIJ53ppX}*dTeH<K
zA3JfPqqVhlqnhum6FTBtt#>|#eUH#$ZeV3&)B3tw;g-IE!Gx7Rpj$LlJhb(@pW>f@
znRCgMyHCcFNm*GrW=}=nvp4FHw&0x*E<r&-flikl6(5zjxVRV?Kr?u^x8({-OLsRl
zF+F+uR8dEV$I8lzgOhV&r>%vBL|<Q@ho|Sk)6?}0Q%{Mcq^BqU`0y}dTaM(BB*RIQ
zCOvrcs40AX+{0&QXGaCsHwrjiahrN2BsyJhecaw88@Ybd{CjiO#_paLyQ82{R7B*&
z7Jg37m0xn4esOVdJot6x`t@{6OUt5-FJ8RZ;NCBHQs@7#*XvWyEfUex&`3Bt+dO^V
zym>~yjm^!UpIal5{N~}|cAkbihX21_kLO{qE`2p6=y;Iig_+*XF6nwM!dE`j3N4ws
z_$a6x&b?*w=Eg>5ZgD*ph8M419lCs3IKK9)C>y_A&vO6yVLRu4GUW!XzY^hkdh5pR
z+lxb2hZ&vL+NQ0oefa9?@WP*;Qt#|6W-ott=iuAh+b2$*%*@WtK64u%AK!(mSEpKv
zF}%38cJ>`ZFU@M5CwGNKM3%f1;0WxxrXs#ELg#bk?{9BG{W{Q|JMZawih6o{>i+YN
zoSdv)_}~EJyVE;&nR0*m`c+hK`njXQGtZpy`SSk0JSQh7C>McBqVn=`(CGc<^z+lQ
zL3_kne`j7<@kx8aDLL-S?>%z1QI{137K!w#Ouus{X6E^$M~`wnzgbvb-oAUcHG_lF
z#0OtqUY0P;5^-{J`f!-vo?*pb{U;kX7^tYI9Jqg9o?Be+$s~731I_%CkEouWUQGOy
z7>`OjJ3H{MAc+=@wde9*aI=8dB~^cWbMW=`^%JK|Y2g%BdvJ4eddzHYalMA)j}xz~
z2(0+?!w@uc25)5@JaS~oxh%06GiESU6i2@L`1m-e@e5kT;n>XPs3WGVtjt_lS*i7P
zq3&044n>#PS2jB<Dk~SRS;I3~-M_7|kufJXxA55+N$_qo>G1II8#iw%T3AS!nVDtW
z+M?Oh+xzhKYwkvehV}b?aXH+*qVwU)mzJeVRk!8c?J~=~wZOGo3?wpfqF@`peBW&I
z{8dlixJtj$7jWv>b)~ZC<M;2!@9Zp2%*^DpwYB~7>MHm1b8{!J%v`X1dAo7?xr9$o
zPG;QPq#FMD!13ekhK7bO?(8&f*tIfJL4-?CPOguUnax2(=-{PGLfYZ$Tmk|Fo}HP=
z3~EWMi07`@@4%t>>d^21htEM~-Wv|L^RL!b2r`CjxhkohC$NZ@FZ(HIj@{{%IjHb-
zx<Ys-D!34Z?_Zso?&|03yEIC;MZhU##hjRRaeKYCs&Oc`oCwIwGX(8)Wt<h=BjD8W
jE3gRX?o&Kcf9=oCEB|<UUEOO21_lOCS3j3^P6<r_a9zH1

literal 14073
zcmeAS@N?(olHy`uVBq!ia0y~yVBE>Tz;J+riGhJZET`)b0|NtFlDE4H!+#K5uy^@n
z1_lKNPZ!6KiaBrhrpJVYU;n?C-<ZSVKtsYp?n~XujS&Hk$}1##H4>a1Sesdu<FbUj
z7p(}Kydpzkg3Fsjx=jav2L%dyuP{^aU=VFtAmlPZEj1w_?VtX)xu55xr_FGh$ryQG
z{QC1bTfg6|KHIq_dwy(P_k+(rIT#oi1iB|Jl4W3EkYI3F!@|HYf#--90|UcJA~`3-
zv}<c?ITwU~{QC9n;{RJ17``Z#M9R;wD15ZcclNJCQyo2ATv`^zGB7x3rSwg0YisKk
z(|yGq&ZgMe+1XXb$iT3&;U@tLH59`3)&8D#C)T3sOGaZ*b#?WoEqnIF{Cmg9z`()$
z7*jXTjEI@@=IzV4xai_y_tmRb8A<R+OH1qPuV1lZ#i~_WjkAs(Jt}RUCu3c<X4$f3
zU0q$Bot_R32Ob~qUs-BoWOO3(;$ruHyV_q@u3s<z@!=th<DDIa&e!A^87lriJl)g}
z20r~9!NI}K-|~`@lmfES)7_{2`}_U=jTtj$tXQIAwdVW`!{%Q<&fEXDNjV|#FssDM
zR!yyK&9r&*{KQz<*jBAxJ$d`}b+MCI9-ntX`@Jv&gQbDNv8nfKzsvR?cjjPaVF?Kh
z-MV$_)M?X}Em>0Y>*aD~_db=?clXs+pPgkY!^f`p<zc)0zpvNhw{G1Uy*<yBqqMAS
zUHtxk@9yqC)H~m@IPKgVOaJ+HZ{NIm^7&`+vojO-xic`ZaT;Z(YqadzWmU6q<;u?e
zYtEhl0UKM}l~=#LyL<ZiXF;bDD_cdygIBJID1Ldn{eIlus;?&}tJ}!Ef4zSHvOW#N
zZQHhe{P@vCYOS;_6N7<=gv8@hg^!Ot>|U`#gO``LxcIYW@w1%!`{qjh*b$SLmZr8Z
zZDWK*fKm%bQ$b<j!RwKckzc=lW$HaY)7V`h!0V<m14A=AYmfHJFaOsE+wd%D+F!$(
zRrmkz_wVoT|9?KeUcf0vZ~GPy`10%PYj!@Fh&>e_Te-yroO*kE=gytGqt4Hd&r#q|
z?B|L-;`(tJ+1bIpzkdBXWV-aFpoBofETapeMx9Dp2{9*AjHXVV`f=+Ajs7hHEDKk!
z?q2Wf>+9|1B_t$tZGHUvcklADvb@?3wY0G8DO$U7rKXLI$g-tNT@NT3t@668Y@p!b
z<+W<XihwQR4*wS|TBM|@>AB2Z#9*BY$D_mi_GeC=a^f&GH5C;RxpDjU<3*P)1r@pT
zbsr514ON{V6dWAAB|}itc+UL!=aV*mD0Or^_~z#3mnFZRoSc05(xnfZD=RB)zXT`s
z+vdnmke+Rp%hZ_FaO!BcxVV0t&SmAUnd|TDC{(VLm5`V*dGh63w`NVB{`~oK_gjY#
z9Xj#)>FMd~qqo0%c6Rpp`S$s_xw%<cRbO5RMp|WE(Wu#&e4NkbSM{GCAG<`gxwyG+
z-@5hc)hjM8F1?r?8)|-jTChMt({{=xP}1NwdTa3N=--C;x}Qr=^v9oB<~w`E)bukm
zE{6KLyC1)HEo@Vok5A8uzf))Y{QUfJ))m!R9UUBr-<Q1KsD9v|mt}*1mxl*9bd(eo
z9k0DuzQNWR6kQt<9CLDV!osedo~|Dq9ewr6m7d;Sb>CTAvaV_sJ(c=w|Npc7^>wkk
z%ii9atnRO+r4<zwHN$6FZ|~VZKR;hz8@+tlGPi3no6~xC@BZy?|F`7%xw)G*ZJIVs
zEH*aQ*4CDto!#I6eB|ad&zJMQfKsG{!Vf3yi%AE(yCwv#-rn$Clbxf<!^5NDr&j~l
zy!BHwfARMGoyuU)AP^uOu*Len{jXcw|NXgL&2hvlAs{#;WJ}svsqE}*w&sOv*4X6S
zFbEF5yfS$Cx~Q$MZf(u(`nGO<QbtC{;)hc-gGJtU|B;YLmtkC>@8RL`;rsXZFJ36<
zeg%W4PoGLkN;<dm{r&N{U-X6Ch4l@Ess<h_SFYsb<2%+^^y<pWipRHZZ_l4Rd2-@s
z9R;2q?M6p0FE6j+V&i@P9=6MGU}~5(Yu0oSxV|=edr@(*=&OYJ2C1h+W{R2oivG>T
za%}1W1y=cQ#{=vS8@_w@Zhrkg%gXA1e=3VkHdUGB-QQQcWbf+5N%jB#e&3XO+O0=o
z;j(4Nk~S_{yqI-S=a*HN^yBv2*p_?y$H&K8w{8s$2|082>~!5|H?Ly~nl5Wx*X`wy
zIBH>2{Vk_S;Y9fKnKM1@I{5oLB5zlIdg7Upv10Guy~~z8o1p0Y<;$06XJ!_^yJM+0
z-FvOt1*g>1r>jC&yY)&fU9>1EF;P%XPVa-fcipTzMsJU`?7h5~dyl_m!>$|M|4!@g
zpHR;_ZQ3+(y_k%Qj2EjW7C%2Xaq8qrlRSRk+gt7Vdw%`D&fY7N`BsOmy>#i4(2vF3
z92^SK6XHUDotbGIoBJj=D@*8I)RK;^CxRs|S?i>=e>&DHy*q3E`RD(CJnmn@)xt1Y
z-GANs_3GI{(Gh#AzJ7RknDrGq8(Z1qx11Mx_r5S#$HJyr{QR7%vwvaX$4RQ*TefaJ
z-XpoW<mDw{b-z8;-`A~XKRU-;_}P<_lNA*euU@@+e!hKqdHL~Uo72zFv#*zn_g<;>
z_qcrhnwXuF&Za51xb;W~%FD;cg23P3@Ap?%R(6(nF6k)cm)%$Rm~H-fa|43|-%d_e
zpS;lJ4Bx`p=J{=HZI3=K=<fCo3=E8ojdgKh;VYgwbLQ#k`r<zye0+TT@87?xSFPgW
z;yTtN>1-7o8L4^s_G{Uct~CaHuVNq6o?^W6Rr2`h>H5YJJQM51qoSg&EMM{X)RQME
zm-Gr_UcPwY5w>p48kOT=kB|2scQayXX>04Uw6?DORkG=<b@{uJ(B4~H*RIv=n-m)=
zV7YF}3xoaL5t_^Xt_)tD#NF$rEPVLG&p)l);*+Kp7Z<liOPJ@$ME;zezfbY4dH%gA
zFW+*4D&7f=KR-X8K4nVH->=u@Yd$nKEQoh@Zk|8?{$zFksvE49Ce9o$U%s69a!FB9
z(FY4}FWKx**KXXHA!UA4A?V1i=X|HV($m$&M4dSzqoVrcY-j0w`tU(v{YIx5494l_
zRMxMQf4p|>+8<8yX5A6cZglLOH!rTDqQcMb-0t%CLBYX?4;}JQJ#g-vU#C!ejc4}0
zC2Xq?=uSU<bpFr#_5W=xeGad>6cKdm>ebSdlT>f`UEOGAVlw5^@=lSB(>h$*Q<rYs
zI5B3gV8$G&e_7ett@D?1RdvpJH|5#euVMn)j0}n`ZG5t?UcHhM6fAsm!|>9NZ*QX?
z&PuuA#Nio}Bbw2;XX(X^S+iz&ScPV)P4;}oF(Gby#InlJm$K7D)h2uL<?qgtQCzZk
zvGSiaN9HT|`{s2_J)od!X<7OI-`}@y-!hdI&1n+2bougO@hhwuMw!O*&+jjO-uELe
z@BTjDxbV<WQBl!{ulenMG{|TqhQ3^}V#WRX|9jW0>Dl#t#exM4iY|*Up3vMsT|d6d
z$Ng5c$72J@-z?jHceMB|pS&sY=+UG4aeEZH>;C^O|8(o>)veWh-Zj;GTXU)}c6WDs
zdwKQr^i*AJKIoI1ySBBpb<tjlC0n*^d2?gq<97MFA73u}+yDEKEG;c<HFw_h>DzN}
zo5eJ`Ev~Gre3;G7&i?7(ix(OE{QRY*Uu%DVv#tFVQlr0f=g!;P^Z%c(|M&Ub-Q8QW
zuRm%z!?BQ8+U!C1)6>(lv$D?3x351l!|>OyUom>&OICfk9$!Cq)~v4UHPdw>i@v-F
z<mcyaQjoK+t9fx@;gKUp)`_i5ab0wnW1*n3+n$=ALW*CWoSgjVQ4%*d_ebUfZ*OmZ
z%(5az@B01w|EI^-Nm>>?*;)L2(&Wj7tp5J~?(WC)Dzu;8el7ao4xhn_%FoZv-rHNf
z^7KuKCWU=}zeQ(fXV+wBX1;v-wDjkv)Rq88N5+5k7PYm1MYY4`*wse){9YZlwyU$#
zvfu&3)fdm7KY#zefBouJs~$ail$4azGQYH><jc2j$F5&q=4)N~>B+6F**9~_N=v_P
zN<F>8RMl^`SHDZUpwqp3_io<2$+7U*F*j{(?HnI}|My;A$=}}GJl-dJdrxI?dU|?Q
z)vn%N-mN8%j&v3l7T*0Fc53@|?Gs|!x?td#zj1qmNHf=wyLWBX)YQz)zkhsu{OZ-K
zU%!4md-iNrR+gKao1UIt_O&&IWo65*_4oJR-<<C6<mBY)+S=E5ZcpXsZ*OnA-@TwG
z#LnJ6*Sh@Ojg61L->=Wl%G$JL%bzco{jaZ$b`P5n7iwi-aN+FPx69|(?J9kJ?ep{V
zH*>ZvT==ksQ~282X!pCt_ncL%dIWCmD%Ea3+}Yo+udgpY?})(3^!c@B$;WzLym+y@
z{QbU~pPTmXjdgcVzq6yzd%E7&&z~1RE1Sw$nN`$$ZM{<CcTIMO*WpT%l9EqqGF)6(
zOs`)3&6V+&iGkq@Cn&Ems4#C7VqkDE642i5Ush)3D6qTyy;$(`FE1}MX~i*IxPM^L
z<QWGIB5&F%gfTHNc(8p7FOyGCe;#+|IvaySJ=?LV3=9mD8Y6DjwmjFCmXdOEcK-V1
z%atov=FFYDK5p+Si}wr+FMJ<J@423loju#G)~d3^US0k9WPiIx-3tsK>KGoMic>Z+
zGSb&Sf9lk$Yipx@eSK3?Q?swHJNoG~0|QS<Ld?zVm|Z2E3LW0l^%6BROH04X*Z=u=
zb8~vgL~RBJHVuPyZ%pUe*XJc9IApy`PCGwutwucq!wXlad-olz1~rb``Q^pL#DdzV
z?OmP3U(#=!e(uiha{r5Q41YTwJxYp{Z;ZH^T~S?aU-99<?c3H?R#ks~d^9yRZReA1
zI(h1!1E`7M)wO6Z1DlzEc6BeWwAqp4$DcoadUl2(b2LX&#GVR6omOp`3+q`}4*Z&G
zWXtq<>fW|ht6tsRU4DISw0Y4JkI>LiclYB@o}@(FW^DM*ED>Hd**N{2LQBCq(VAXK
z`?^0rK0f|f>g>$yD6rgreqLs#W$`nggoFi3HdD<jD=V$b-kdmd=1I{`VKpBPe*XD3
zm7Biw@2~wm%}3fc@6L|u@9!pZ?q>B8bn^4_v-rr(@Ws?%-5a(1)aB3TE?crBA}XrP
z+Okuo;=_Z+?(Xikwqujk{r~;@oo{TsIrH+ezu#`>U)sK4_3G2lKNp(q+q1`pvC|-?
z>is=iSy@@T`TUJS6QuusU%zht=E~1$m1W^kQM)oPFB8{~+f(`3ZQkEgEd9s1xwtM}
zx@1-QO2m&_R9JZOv}s~8GBH6xpcZ>@ww9LGt5>h=|Nq%Md-m;1OTB*|OJ$fKCK1lZ
zv+vg{ZE^AGbLPnK^76X=zNDI&nc3RfYG-Gc^3O)9cU#HJOX2I|N}b(YLPJgU^!z+M
zHC0rWNL$-5EGTb`ur#nJd~{@beBI6Y`}YYtmA|{=$ica!>*)5ox2;XHudSJDU2bM-
z`t#SXZCkf~?V9|acYfV3O-BJyQPHAz<wv_jSsW)6d;LAaJMqV_UzakrJbU&m?xkST
z(*q02jb*<J`p>s><&cz;3hHHJV_Oj&U2nL%?CmVe;<UQDe{H<dRqr1DcJcG;n>KCQ
zf!ouV`{itnOiiy|z4|shuVcxA1qV)@TD5)Ba_2QHRlRL(Y%K!K2Ny_v+<)cQuV3%B
zu3WN2L|i;QB}GJ9T3THEda?R_ehV2tN5{tI=H@@U^>lP}w6$M@4BESQ?~)})PM%!3
zy{aXG^NX&<SvE(3yLpb`;olz}?LKwtl%k?y#S5+{&z~1t$h5Motb5Vs(bd(pBWB%!
zo&f)b2+l83QBhGG3#UyJTP1k^(V{%#!beA(+xfO`+4AGpuT3}K%rm(v|Ki09i^@+=
zrf3F(8j$POy?gPZ;=zH&W5?WLq$DIf1X>QXwKp^{G$~|dWqr`Sr}Ol|g9+27J$v?S
z*}8RkiHRT2n%^%eEAzU^?X+U=UQp9)j#cTZY15{G#vHo6YievjUF*MpKA&fC{PXMe
z`jaP53ak5t1P9MHPUp+qU-Y!=OP)f@y}i}j^Y7caySuYBFI>0IF8kV=<NflJm&Sfo
zWn(lKaGE-GYWDSYrUnKH1`_k;&C`$D^W*jU{Q^#VE!MfzM1J@P0ux^fI`G`Bn9s(>
zW+Jt=|IbUs_}Z_cPA|^PG!9XYV~pQjw${hjw(3jA$rLV$j|;bit`3{{TYD*^;*<#!
z6oTK^a`hko{N;<tKkq*ukINUba&vPV8yhz+Kh`6eoRZ>lkByyOxn*0<O{EQYw%7hH
z)2v>(YL%3A*_wjZQ>VN()xLV!d3Lt><gyrdDf1sSb(NJnSFT*?pf4pQb@b@bD{d{n
zg_;|rU0q$3-Fg;m%TG=g786^xWXY8~cXT$f)_jVn(Pwg46Qc4ya?O#~59Zf?le{V+
zC)X$7<>fVLrRKzqn^vwodFm9G;+DL-yBejnFJHba=ydMfxs@wd_JToVWTf{r9Zz51
zr=NdTB$ogD^z@4R2Z`c?O{_~&@9Ze#P;_=ae0jP5^{ZE}UcWAHUDl(}vCz4_XlG34
z-Ywg=KNh=l=T6?89Uq^aoqg-pt?cXT&d#x%d~07@+p&j-+vE4uc)ksfkB_f1zmc<T
z>eQ)|CIv-A+=#FLdo*ox{QkP$;E=U(d!uUNlNRi{c<EA7T3XxUTu)EW=;-LOvTbwc
z-o3EUIX5?VcNSyPQ-;U3-BV-qu3x(r79T(VY+AB+diwI--rk851v4iKP24!?{Bv;;
zkq28BH%e=NoSqyKGG)f47cVka8CqIODsIWYZ&!2s+O=hC*7z*H{Qu8q|E#SujnkD{
z3U&zIKmGlFeZRn`@86$)tT?oEN3B$E+3Rb%iNDq7*C_3kX6KV};FxPw>a~E|*myI)
z-46$!_#}Y>=JJi1m({Z7o}R9++``1fv@2_g^v0lVf2+1`-6|?7I@>IF(o4+++H&@F
zI{(j#)wWNXbg5HVeVPCKeML`Cb#!o~raqOmE}JrCO3dD>sWz8m<Kpbn&Pd4hPoF&b
z^Fem`jx8Mr&z*bse13i0zM9JU|7X}8K79D_<;%u8I&Z$;umAsIasQn=cOrDeBD+e>
z)O}~U)T(G}a|fEOd-nW!c}dBd`2BMICp<oQR_^)eP@}KzHz&bp=EaK_m9F3U^y!n8
zmDQd-dpwTntcq1L-w@(d00IW{&%6I`Q*W8Dc=6&H`;I6)ICgV$dTD9t_qVs**EaX(
ze0i3lI>~U;KL7d~e_5QJooD_N{_?y~Rn6S|`sK^P!NI|?v40o$+nqXbVgYzy&CAP+
z#qr7W=iOT-oEDc*S66?icWqs)b;0qeGxqG+bGV&fKWa<I!Gs$(Z;FbECGFn5d-twg
zRq5&KTaD&bu2{M9;P#6bFLEsW|L^<$D^|I=xxaq>diLy@Q1!vpxu2h%eSK>CiWM3y
z7k++z?s_XYC}>HEbHY@AhBpr3wVjQx*xnsFecF4$xoc~q1)Z4we_L_D{0D>cukW6*
zpOh`@{#3+Q|B$<2pRCFmC;092=fm5N9XodI+O;cO>V9(^IA+e6F=5(*1qv+zF)=b*
zZ}rJq3piDOe>e5UY5V_wngwQAm1c$Ot&P~oq!<zvrFAJTHdc43^p3?#y{C8m{2BXI
z^`qb$ws|K-f9SHZvO2f%EWDVZtE(Gp%Cxblf$@DX-<Q=9JFCCHTd-ik?(+9xp`jaZ
zzWMW~CO$siB~rlH+<f`vmnTo2%rV=&W=+oXb8{<pPu;%V{3Zu@WNPb{Ej1q=I7UZH
zUkg>_ICSL5l9ekxlk{a}WoONr#j)_ihYwv{TxPRl0|GXrpP%R4&iC-!+qZAq`Q`QA
z?Ag0_@5YTAzvPvalo-tPDJ}i__;`PKSXhz8oce!1)opESA0O+TIC0`5a9Q)C`1gs4
z%3r^J<>lpF?l)J;G)u(k#JO{RKFR{x>=GaBo;vLBnp*t)oajHh3)io!U$1v|a$4bf
zxQ+Mr=5&6ijQ{`s?qHgIcG=~Z2M-?Hwr$&$Syon7{qpwHHi<XhwB?Cw%*@POcrgQH
zzz3Pz;(9R}d!=ja{_lRjPxu{&;*=RPG?wWba_l(x{PX@FkGQi=n@GKVy?(zN2P+#}
zSLX8b*UK0fUU0Va%WvDbacAl4u*^(NrxQnxr2PByGyB>aNwXY@d&&E=udh3H?AUDc
ze5IB<ckdoPeE6f%j^<|Obra^!y?gU!W>(g&)YH>0T)1%NjE}FcufPBKx3{-TOG!Pl
zx?lT!?vJ>CpXdMYk+Ze3vf8y{$Be@dBO)W$#_TM5c&IhU?DxTD_87hECr^4NoVVY$
zIYQ^<T?dZVwzgTbXS=((+138qvTt8pe0=?z8yo-q`)8bfPUP}*36?t!9J#l*@hX-)
zJk&aC)~v$E$KKxADg1uBymgsQq`RxDtLMt)&+|C!=Ihty+D!8I@p+TDo?+Sb`|9n7
z9~SM5{d>CN>#NY{XzBLD3$H!@Sg~!}Hl?kW@9yq)_d6f_-_(D$neP&lJM#5^E?&73
z5*_{f#l^*|R%xZCrpCs`T3cJ&+uQ%SsD9w=Z1ekjtCufY<P_VRo1M+g#g&zn<>a*M
z#m=2OO-)U!zrRz}mX?sH`S<gA?9YBhjz#~U+`hT5)_Te6$@c7gGCy7{?q4A`C*OV9
z3--sS>dtnH>wo(Ed3TrZ^K)~ne}B{MtGyDjE$^;XV=~VS?eKLW;o-r$74>sEJ3CKA
z1P2B>X2tPH8nyK72X!g8zrVM)`r{*4KfiMy9v)6VKX2`lB_TmUpN`AdOGrv~{?U5!
z`KOH>zjj_g<=0oCo}MS$<?A|1FV_Ehsh*>+qqAo9>d#-l=H}<GU$x4}(D32MitTxK
zrEIIdG+an@;&^+1fBZ!~hPy0Dsr#2LUc7kUzI}@qJEyGNyVrL1*<)3YD@xju<tLvM
ziL}?y=s5p8`117*cK+(6>F@6BOg`SXcJ*p)UEQMxyH7v8b@S%k-R0*GA9juqkF9xR
zmKa-7Utb?n^8er8oyE_;c}4Lp*gtXl^!Dv>U7++=F@NWum%eX%u3fvfVS_<(a`K+o
zbvt+dJgvW9g+obSf4z9MWXO!!v)Nf#c%;pIQdTZrytuo&domd8-Me@0+__7aE}c0u
zGW@1gNJz*M{wa4EN-j2jpK-5e>hALQc4cpFtPWqFGK+PBhnpLlqkvNQyM{W}7mJu}
z)9>skOcGlxYP!N@ueA31*xkocj5g-T%s(F<9&TUpLE-=X%^wd`^S@Zc{N8Y{q;~xN
zy4=*%)a2yLpPyDHC@}4MaiH4gJ<HY&8w{EhUcG)TZ&%~N;dn0m-j2d%g^tDU{mYgu
z+qH9NW=6&XeiOav(vp%dpFCNzcJ11wOP{`ZQ}g7+#B0~WS}yFX{k_a@ZkNEXSF6{b
zU^{B<{H^H!zrUH6ml;a%$jZ(=aNxkMT~=9Jw`?)7x3@1YE*2G?`tWf3`Pt_B#>T-r
zChjhOziY=10|_2w<;BhH{Esf3IN_nKtsNQ~nw_29C~IG1_y5Vs$rkS0X3di7K6<FD
z(YE#|vzQ&oQ><JO?B`FN0(E-B{EjJ|xxFp-uu|ZRIbfjZ+}6_8R<?V(d%s-m&!^Mh
zzJ1HF@Y=O&o72xvn?8N{vSp7hty-mJZf?Hm)9vl~>*MxTJwDcZdwc%wUArcI`~Cg>
z<aOJ&ZOgm8&DYg+>8e#-HoYI-+}y0{JuM<4;z1>w-Te3O-}}q{d-D8wds~}b-Jc)R
z<Lh32%a_#nvQ_Wbv0mxg+FE(Lnj4dsF)XP5a&E_`7Z(@T*v&tg;y1&f(MnLe;19>-
z88ajV1VE;qJ9qBRotTyjPft&m<T<v~d%Bbqs2%?4)2D4YH=Fj~EqiyTGt_(KB8E#l
zMC9f77d<^SY0{)?*RJ*S@FXWc-m=9cXy-fy4u1ZA?eKMbs=js|ez>Rd^Rq`syS22m
zo}3VzJYj->lvGq)+`T(@=1iHgWX&2GIXO9DVPR?M=-AlU=;+;*pVQ>}#RUZ$U(dI%
zx6{)*ckrO1s_N2h+qUi8X=!RY^=Oi;eVt5p?%w+m(b38+ESKgdF|vAlpO!QGcQbvy
zZrq+73l=O;|Ig3GaMyjA@We;w^~*)IJvA@9zP?_$Ma^%H#sUMY+FvEy+}(YBd=t-d
z9ryb9AkL#To#$HNqGjeM&Yk=A_3PE^*O#BVKbb3Y$HbeP(}Sfye*5OeA!}DNV@pX{
znbAz2^z`&k?H4jkf^NwLM?`c8{Cd=_-x6DU{#<jjo|Qqsi({1qtU8Bw?B30NCeGEx
z<wJ!{aq;H~6DGWP@dDJBe7@Ibwpnjgcj&W^CoNk7!osF?cY7x#C8egSn)XjRuruUU
zxfQ5FVNrDX>#_V|1{)h&iqy(Ohn)1LXQ!mNEWey-GHVhT%$+Oi^y2C1>9+p^|H_z~
zn@30AUa~}`sGfiN>AeLHn<h@YcwD~z&gXAeuU^%U-E}0vU_+4-!wF&5BVMwyvW(o_
zN2`8)d3kely05SA<;$1T&(F(EPjA1xp;WrjIp4zS^Z&nfpuF3D_~zE^>z_g6JZ5sw
z9~p9sHqO1hLoiW!Ua9MUzx_o!WAvtb_suO7{3`P8H`g`S^{ZD$?<`6U4GqoBef#U{
zYi}>FK6!h;tFFs0X0SLucqu+n%rGIgBvLkdPsPR$lavi+9ISkovS|OD!X=kqu3NXR
z;>5LEx3W@GMMXqf(m#IWQ)$$hWxHg}nw%#mCR(@)E!(nX%aSE7(b2or&qhT@KY#Wt
zEG(?7^wfvF>5q<dMn*<jm%Z7rY15;R6_1bi|9{+XujW5bC!kk>BQ-U3;<WAg_aCXS
z+<5WiNsI96Nk4x6OifFR+fxx(wf@<enU_Cv20y4>v}1>bs;cWU_g}7SN(u`(IXDVR
zOHEBppB7kb&%eKJ?OIj)_K%$VzkK;}>sHi5!_4mnW@dU?T3uaThunLNjg8H7Z@KXC
z@AeG{2yk<2+r9huy4c-nJ~Ixa7{%|eiwy`U`1Ist>FaBr^8-^H9=~{@@htw~i;Ig{
zmzcBY?Ao=f#`ARf#fuk>YTMY^*uDwRRa`K?;NzpCjFQ@*QT6Ga;p^ji^>uV~czAf;
z-PyT#wXRR&Tm}ZQMWD3+tGjiD{!dd85)vx<`|B&OwAqB^jxw^cZ{NO+-(PokavC!;
zb8v95|9m^!{ChTyN}rxHFc=8D6lc$ov#Hon_qS?|(~8xrL1UCRZbTF*^YyxUdwI<=
zO6@w(IANYa{l7mucI?=ge0<f)l`mhuY;9?|v#)ly_DRl{iX4xwtPJMl<b3z;-K|@<
zoZEN|jg3El`sC&3S5{vBUi3U8LjcEuud6*&_MLxzetvpt>cy8Osi~<=3LZaAot>Q-
z-`1VkUH*PUkYt?qL7`k0M*|6-#-9fdGGCm(rLM7#DdX?Hd<|{w?Ck9Fl9C5oOKVo`
z+PinJcINFzkCG<7O84{gJ9L?eW8s@OIjfiidfg5yUOjlw(ZPLI&i{XZe;+FI_CDPy
ztlqU!|G|ctGiRQ-bN2i^+v*Pw82{}J+1=aAYxhdaAujIT+1cjJ&CS)>O41Cwk{%pA
zRj18*OMJ$R84rBt&X_V~%7zUaHf`Fpu8g%u+MI9s`orzkw{PFBw2_;B`mNTsS+iyZ
zsk0YwakWgCH*emFUs_sPO53@3WUWGc{(k#brum;gCNwlOI(oL-VqQt3mMrz<t5_vW
zv!?9cT^+u6e?4fn{&>H9{nuAh8)gK@Z%#VeWt@KQ%9Se*{tMJTZ(G0q{rdg?Zr!-i
z(f`)-eGq^2<hDj}ZFY5wg)h3r^-t8kS6X=a<qwHTQyx0IySpzFoayi;tm1FrVz-AZ
z%bQ!~%#qR6)wN{zYPqo3z2C>z_vDHz<#{3^A`y|1p2D|SVqPU?U%H@wtt@5HeXquE
zn(?(?r*?OH`}y^qIAVPuq2cgD5fKp!3yTx`UmrSjXw#-m`^pxB2X|baJn5;JUUhGl
z$$=e32?dXibT&?^<9?z1>GNkxnLekar8RdB7(Ha#_3Q5vQxk#XQ=5f3rZCU#>+74W
z?(a9#DD}#Uz*nzc_4W0!^T`~Txkk{bv9XcGk;7*L3k!<?OJHztbN<Jls_g9TTeg^(
zo12%GmU44<=kNR3W>u-XPrN0dy83s&{XdJ+S0TE(y1cx+;^NbP{HUnmdi;ETy&A`(
z>+$uzetz>T3Kz|qb!(1gvB&SJ+TlyenH9ghySuyg_cu!`D<cV>($cSyo6{z0#m_i(
z>eSZk>rxUD1`<5}{^!N@;~pfRz0||P3JxHp$(N2*FY8`hu<N58FAq<KNtFE0&v8w^
z8qWzphhAPEwz^PbcmL3#LubzTJXmR%d`v=8a^m)b2M=;A)Q#R2Fm<DV)9vl~(>G0D
zwQAMI<l|i72Tn!o_<P`h!=-(dpVKb+txESSX+Hma`t<3uXU*dJvS{JLz?hgGZ4psX
z&LyeaHg4qP<_-=D%F4@|_QQ@f=9OFa-3yXU5i30u!cH~*6VTqcZo%fw#aUTd$zTu`
zc5RZXcTjNf&l<aXLc42z7QIrg=-HWYkm*v>*Co8Xy#Dj;V#CA3!TkioCWSUW*)HRl
z&i70A?v>sC;MudX$H#ij^Y2}`b}epqS#OB`k)={nQtkZmbw59;ZjG<4t$lenVe`$f
zurMz#uf)W}`oCYrXP>S6`^)rNT*Tfg)A{G~GcynFif?ReR8>{Y&CR`e^JZCD8E61+
z>(;5yYJ*~5#btv!a{}5=9qK!#{>V1e((>}jEGaR$I%Ce99)Vli^X2#DW@jH(=k_p-
zICEyEv7nR1md^LA%jG_N|1KWTzjT}b;){8Acd6$5e=^yBN%`Xgjm#VigO~epmL#U7
zeLKi5KS9(i_m+$9(bbz685x!4ia!qe9wjaDYbt}mjSn9_eE9N(hnxHJr%%5gw#&1m
zz1tvhXo=_K701@B(Q)xqm@|L={fid`g@lwQh>B(#J<K(HRBc)Kh-LE0p1wXcm#228
zPM?1L;>8T}{CN$BxVN2ta%`q?x`5Ncg9jsyigNE1VhIcjI|f=ElYV~Q)vH%UPbBr4
zS9loj)p!8Pzj8N|p8oy)ee$G9PxQ^c@0&DbipnPmo)7aDE?NYt*XPcC`|8!KnKLab
zKc!Sx|6a66DdyLQht8#?rHxacf(9fyK3(q%4@o;a%XRJLd-v+Tzl$v{F0OHK@X=qp
zcCG(>yVBCqw^^GN^X?x%?!II$kB`vZ1G0);UD|TT9?fcNYXd2oXEPI2u!}vAHqTRd
zxk&oz(s|p}Y&X4?+_YgsKydJD(cWwZ#gezTOn<)DW)orUKAN;Kf@9&IKQ&_ATkHS-
z`~3X8a!XftH!m-5rioPK=O-s8pPy%IY-qSJ@4uT!V*QzWd#kmzwZFf+tG!WtPM^g8
z^&SNbLK3%?7Di}Z<h^tB(o*loj~~01g~Z183anbYcBvFMH+R3RwcFy0M`TV4zYHoa
zF6NJ(%s6x3jl_MM${T-rSvH8+#$y?|SToZ}P0a{n;KJhVQfvbkcE?=>S~@#DgM%j@
ziL<h@GBGt3bb9#kp{S^6j@j-73lh%Hvu)>-J@oeW?c4nFb}=_9tE;P%lapWGeevQ&
zg3-)ZuU;MRmtVhT&65HP&?sJ26{v-+tgKw9{Db)?@}R|`_Vph=#&mM*xU%<JLT-8k
z<HjI94V$oYbFITGdKRr;@4wEpy`?3fyNy?RTl#sqmJ9#>{w`!So9(;&a&vPt>yf1;
zB_*K2yHtH9<0^?gOqVZRa$0=x*}1ve4=lIo$Lt8GGXGIyH&ZaG;m8q}7)OP@+P!YS
zf4yE0E=Pspmo<3b&EvgRb}xEe+}^I`7XN=fm)D!#y*@cPS@f;A!c6(PABnfO<@)*g
z`KV1knX)Nj&4&*k{`{#?R#uLAc%YHFuCDHI8?Urk&W%Z`-kUaW-nc}r)OG3R&6h7-
zGE!AdeRgJMR#w(xw_YwjzJH(3+n@Y9NvQhf#^mEiyTzCL%rvU`QQ+%)mQz?w#=h>(
z`SbjWQ>ITp{<Nrd>Y@#?YUTn?(cAO(R(*ZdBWe8Q>(|iG(BnOlkKewneR^stE4SDK
zuIg`ZK!&}zxVW89)++VXl>2qRdHtn4c5YBEkXo+3_9V-Ta4n&V`9%!@Tk4)3Y-Tq$
zG7`CJ-5_vlTkdR!OX?TavozGX7ZiNhlzLj^?a>8oXUeV%D}*sQ+*gV-=Mh+NpX<uE
zlQpT}iNh;Bn-~}vm}fC=*fx3ML`Q*^6QMQ?4EKzGt#x?I&;gn!<YG@!WngGXc_N~H
z`O>97fBu{~dp0yAq>W$RF8|)1GiQ7@O*#G4&CSiq(lRqUJ3BMe(%M?yvS`WHt)k$8
z-#G`~uU@}TsXws${p(}B(kzZLwpCyL{r!D;nQyXzgq4+5V`F1!Y3ZfiE@nmF-^GfH
zi?cN+rlgd7c;FZ#B`KMin!0q=s;t~x-3^c1&p)4UQ+es=QCDYYXJ6mmqe+Qh56s(Z
z&%hwk>tlU=sZIK)7Z;UVF06~){o(EF>+4&8FTMOSBCP-X^ZdKJLU%CP391%c3zeF`
zK7N0nK-9Jz$#ctmAH90zb#3Acp}drjkB%}mEpzXa`T6Jb`ITa-s;WWryN*A8cy=#S
z!p(ho`~4TFE4a?T&G<|4@0UA#jskLWa^dS@D!;xGZ9fc}Hb2@e9vTvIBJmdX?jvg;
zsQW1D^ZngjZ!2Bj<sUzO)DB;#qp6vhn|t=e2?H}TKW}g4&{ZnCT0A{GICyz=_4V`f
z^8CEKg2KZ1`1$)gJ3D)O*RET)ZtdE;dn%3lk9T);9Qb;EzP-G-`11!3CQO<X6dis0
z&Yd~4W}Qmf*e7q_SGt{nL1M)Tk;vWV>z;i6dGqGYef#$P`t|Ed;;e-W74_!Y)$VF-
zb#-@dKXI)kd1=Lm2@^u9kGZ(IDz==PW2wB<o1`9KYvEEE2ZMDiEiaDk2$HM5xOvm2
zW&ZQeJuF~(lVc_w@8aT8QC&TI_U!YsOuLUJ`OY#~`8>(%@-pAW_mZYo26=le@|G|+
zH-Dw;7yI_rE3c>wlUa?8j5C8)ZP+m3^wUSeJAV9q#NBe?^mP5|AKeTL0Sccwrn2+P
zJt?r*UH10V_wVKg1_6PAiX4Y--I7`^>BzA$V$E{@`Dv*juypzI_V)JIuU^INC|Iao
zY04@j|43Bv-~RjWg<=mSa56W#we(u>$~kew7wn8ltZ#X2q+ot+T`Z_O?pn?GMft;}
zjXo!o!=_E0+ACu@sj6o=xD&?GZTWw`e95lWtF`4eZQZslDl(FlmDRT9hk)XeB}-Za
zgifr`WS_pPaqHI7yu7^BRMp8R->mFrVECf`L{Pi8x3{~iYtf=bfByazbecJH=4`WE
zrQ=B)isIta8yXnG!^4AvgZbKve}8*>>sHjK;))v^5;+z^dR?-zvOjlRv2AK<GBPr{
zbN6of+gqlIhgj4m|NQm!byHIlXeC$lc0Yy5oC@YiNl79rj9I=oZ#Xx>r~ia<SX)a=
z%>KGsNbz<+%-!9+y1KgPv0q-^x(`MlUtL}Ov9-0ewXyNwT<dZVUZ%SK?b==?E2~-9
z*p@9@HqWlM>fWA8Cf6tD85t53l=^L*KR-X;-`y>3UAAV{tXcEs#d&y~czb*M%GvVr
zkX}`EbhN3dX>9D>latktA3HWlx-i2eDk$jE6wP1>p0+zNujE)9=UA0$DJmYkdp9;Z
zy86Tf#k91vxVX5JCr`e6_ipbaO9lom#w~TCoO}E&7Zj|GUm$;pcWt}{KOX~w!puf-
z?a!Y+9Z9+K?bD~AEzJxJd)j&SL~t@NDAcpX@p0;~uFBA7V33G8utSJ}!P0O+v5W)y
zs%;0kjx&V?@9)_*DL6ShvueffshFtH;oQ!r=ryScG!V682al{($&n7h)#2;ctz5a#
z?$G<kQ&>O?F#;qetNH%=aG3x6JlorM?)YqVcXv0I=y~uU;nJk3Q$ds2)!*N3y!mF<
ztXVg1M1+Tjf6@dGSjmfsl)S&U_t~>&+qP}{^XJcn3l}C#m~gL16jaoHTCiG%eSYn?
z$l&11JBy#6nC0r~x^m@8Mn=Y{sHi1|hK3jK-`~Gv$&#HrEp>Iz9z6K)<>lq~>wfF%
zO?CESy7`SqR9t-elqm_i(F>kmxpploB0}R9H$#9*x0vp&U8UJ2C0}lB&EBYLWhJHP
z^6FN?v3~jbPftA8C|Z}kx^jBDespxSx~l5KDKX3a<}SLJVV-~Q%H_+4zsAPKK7Rc8
z?VC6MzSsXRzqG{D_Pa1>8HvUuMd!9Pk(-w-SfHS*%d2?h&YhZfcXrM+PQP{IM!;&&
zbmXkVSI?X|bLrBiEn7tHPtxRkQDW8W790cun>KHD-aCDg!?wbuV4#{|`$a6mnwf#k
zGW*(^oBQkQOG>t^Uj2G!@pI5bbKzsRnNbs*y_h7znHUt*cbzIUD0*_@Xt((PU$57P
zhK3p%8j6XD&6_umskH9*Tk}_o$|55p3kyHaFiificI(!!7Zy58OG&j9cd4qXe(n3b
z_YxNaLxal-OFot^v%EVuE?(T2b#>MLf4{O1xA9&%pL^zTJAZRi(>(k7dzUUvnmBP|
z!ojA#K0bMQ`4}k?kt?@uy?Xbq?(3_ovt~*0wSRtev^)Fyy2|S6`}=BlhtH9(cz%$P
zL1ID2$-)Ouo;-Q<sOaynQeWS*qS|2`_OBm5F8=oBX7F;qiDKE=ul4u+V2VGjsLI%*
z&B!o8_))RUn#j#;id(X-YVq>&KD=~tvU>dfy4pWKK3Y^e1q1{{Ma|l^%L*Ld;E=Fa
z^PAIA9?3O%_H6A>Jp7&QU@+sDxNg*ya;6{Plxh&8_x;-1XhTE8b?eqWDe|pn-gl6Z
zAwXq!`TJ#;Uv5r6pO>Gn{#^dIB3QM}uV261`(y;~X<eyr$S+`E5IOno?(XvU_jH#X
zdUJF0Z)YtQkj)Gp%ho5Q=H%!&3NTqe+xYR*)6+ku;b;v^U85g2p)X{sx36z$aq;B~
z7YfSC)Ox?azdzqBSE~8og^L$Cd3e^WUcI<#(zI#Mo<C2|%Uic-kx|W$50#&vrKY7#
zTAHF<{{CKRVPT?ygqxciJHOnKr4uJk3=0cewQAM1YuA{L+y0Jn<Y!=LRjg6*;IRXP
zOIK{_{#ZC^7#arN0ClbMx98o}dgGsxqN4ZoV?|wE-67Gi^>Mx0G5hOe6`#C*?Y;c}
zeV?Yqi<QmvqPO|Dy0-qBvU;`l%VVI{#O$S)U#?ua^2#)E{Wza(J(fjJPCTDq@3&P$
zQ}gf7=ktTC?o9s9St8vM;N;Y_XfMMraZXOoO>XwCb<OenYGxixh}l)La^b>-OP8wZ
z>*t@Iru*bskS6O(Az@)=CZ>6|)z@y`oH=`TcQ4k4LG_;>hI*<ThYlZpd}^xp`nbK1
z3M}&P?b%uJaZy(nmu1lr6&011wzg^0r<<FbtE;MNYHPQ*w;w-p<jApOVd3G|uU*T#
zw`b<@$F43eC!QEEFfa?vRLXwer@h>NeqLhY#fujeH?_XJy!>*;mQ$y^R&Cs{K|t}#
zQStZ>|7HLB&as$y{P9H54TaCn%)GLE(V|5HPU+|7DC#2G6B8FNT&TEJ&}OmEqqlE+
z1*~d*7-YVD^Crb;=DBm{f~<6SdbFQ1G!?2UxR@WC+7-jz-_h~m+cz_F^ZBOPV%<k)
znPg5{yjVHXi|f+D`g);X-@j;tPB?e>ZtRa4f45{_Ua>tbEsbO0vSn&Dv!_lqt^HM!
zxKzz-w(s83;^M{kX3dzP&=M0H>&e~gW^7<k@%dS=4<GX<_G4cg81DX1zZkwzs9QfV
z&{C)|;YiZPd3Lq4rh>t|d2(`c>sGI>et3wLot<4}s{&|vrhwJd)by1u-?BgT*CY7k
zY)(8ZD0_SB>HGKj2?+}pEpifQ*}C=X?d|z1{a3D9#bvIPqf)<EM&wJwyTUIoK)YbH
zZgD3hTn^t@bfiO&W8wb)|7K_HDSqCU@Vx}wPFRE5PDshkojZGWbY$eo6r<|v+c$06
zG*Q_-XnV=jY15`nnUay6{e8*JeZ>+lIBRaSGkjsI-MTF~JG)!Js_M%N`T9Qx(>9+z
zecC+#p3gh6Lpyft04-B=b#=`#+r4q)$78+HTeogaO-<dg<vq*Gp5ETot5+{xv`9)C
z1cHNto}HPgY{2r4ttj9EGlN6mm#aH2ojH^9@KEdif4^RTd3pK&dUdP2_wUc2wN}^M
zJiOvsgUIaH){eU-OqlTc`uhAE8ybD;p1gRGk)N+$q(AY?2}e-IbG_JJ-R3vPVq?}-
zEm>LF(9o-%lhy9-D(&87&?Hdx;laUQUtj0u=5AED`{d;0<mBX&x)!zS9_CobR-+T_
z)66F{H_0(DbTv)LG-H2$sp(G2Ue-PS3=$d#Dho*1bA?jlpQw@BvuM$yM@PGBAD&WJ
zvS`tv3l{<|#xXD`NX|?KjZ28@$K4TM$KzL1QzP=0iGg9##J4sU3=9VzusqXdWI$Sa
fNdo8de}=LnlK-k|)k_%|7#KWV{an^LB{Ts50h)Ty

diff --git a/docs/references/api/resource_embedding.rst b/docs/references/api/resource_embedding.rst
index 18c1076bf..63dda347e 100644
--- a/docs/references/api/resource_embedding.rst
+++ b/docs/references/api/resource_embedding.rst
@@ -24,7 +24,56 @@ Relationships
 
 For example, consider a database of films and their awards:
 
-.. image:: ../../_static/film.png
+.. _erd_film:
+
+.. tabs::
+
+  .. group-tab:: ERD
+
+    .. image:: ../../_static/film.png
+
+  .. code-tab:: postgresql SQL
+
+    create table actors(
+      id int primary key generated always as identity,
+      first_name text,
+      last_name text
+    );
+
+    create table directors(
+      id int primary key generated always as identity,
+      first_name text,
+      last_name text
+    );
+
+    create table films(
+      id int primary key generated always as identity,
+      director_id int references directors(id),
+      title text,
+      year int,
+      rating numeric(3,1),
+      language text
+    );
+
+    create table roles(
+      film_id int references films(id),
+      actor_id int references actors(id),
+      character text,
+      primary key(film_id, actor_id)
+    );
+
+    create table competitions(
+      id int primary key generated always as identity,
+      name text,
+      year int
+    );
+
+    create table nominations(
+      competition_id int references competitions(id),
+      film_id int references films(id),
+      rank int,
+      primary key (competition_id, film_id)
+    );
 
 .. _many-to-one:
 
@@ -136,24 +185,7 @@ Many-to-many relationships
 
 The join table determines many-to-many relationships. It must contain foreign keys to other two tables and they must be part of its composite key.
 
-For the many-to-many relationship between ``films`` and ``actors``, the join table ``roles`` is:
-
-.. code-block:: postgresql
-
-  create table roles(
-    film_id int references films(id)
-  , actor_id int references actors(id)
-  , primary key(film_id, actor_id)
-  );
-
-  -- the join table can also be detected if the composite key has additional columns
-
-  create table roles(
-    id int generated always as identity,
-  , film_id int references films(id)
-  , actor_id int references actors(id)
-  , primary key(id, film_id, actor_id)
-  );
+Thus, it can detect the join table ``roles`` between ``films`` and ``actors``:
 
 .. tabs::
 
@@ -177,6 +209,18 @@ For the many-to-many relationship between ``films`` and ``actors``, the join tab
     ".."
   ]
 
+The join table can also be detected if the composite key has additional columns:
+
+.. code-block:: postgresql
+
+  create table roles(
+    id int generated always as identity,
+  , film_id int references films(id)
+  , actor_id int references actors(id)
+  , character text,
+  , primary key(id, film_id, actor_id)
+  );
+
 .. _one-to-one:
 
 One-to-one relationships
@@ -184,38 +228,27 @@ One-to-one relationships
 
 One-to-one relationships are detected in two ways.
 
+- When the foreign key is a primary key as specified in the :ref:`DB structure example <erd_film>`.
 - When the foreign key has a unique constraint.
 
-.. code-block:: postgresql
+  .. code-block:: postgresql
 
-  CREATE TABLE technical_specs(
-    film_id INT REFERENCES films UNIQUE,
-    runtime TIME,
-    camera TEXT,
-    sound TEXT
-  );
-
-- When the foreign key is a primary key.
-
-.. code-block:: postgresql
-
-  -- references Films using the primary key as a foreign key
-  CREATE TABLE technical_specs(
-    film_id INT PRIMARY KEY REFERENCES films,
-    runtime TIME,
-    camera TEXT,
-    sound TEXT
-  );
+    CREATE TABLE technical_specs(
+      film_id INT REFERENCES films UNIQUE,
+      runtime TIME,
+      camera TEXT,
+      sound TEXT
+    );
 
 .. tabs::
 
   .. code-tab:: http
 
-    GET /films?select=title,technical_specs(runtime) HTTP/1.1
+    GET /films?select=title,technical_specs(camera) HTTP/1.1
 
   .. code-tab:: bash Curl
 
-    curl "http://localhost:3000/films?select=title,technical_specs(runtime)"
+    curl "http://localhost:3000/films?select=title,technical_specs(camera)"
 
 .. code-block:: json
 
@@ -236,20 +269,26 @@ You can manually define relationships between using functions. This is useful fo
 
 Assuming there's a foreign table ``premieres`` that we want to relate to ``films``.
 
-.. code-block:: postgres
+.. tabs::
 
-  create foreign table premieres (
-    id integer,
-    location text,
-    "date" date,
-    film_id integer
-  ) server import_csv options ( filename '/tmp/directors.csv', format 'csv');
+  .. group-tab:: ERD
 
-  create function film(premieres) returns setof films rows 1 as $$
-    select * from films where id = $1.film_id
-  $$ stable language sql;
+    .. image:: ../../_static/premieres.png
 
-The above function defines a relationship between ``premieres`` (the parameter) and ``films`` (the return type). Since there's a ``rows 1``, this defines a many-to-one relationship.
+  .. code-tab:: postgresql SQL
+
+    create foreign table premieres (
+      id integer,
+      location text,
+      "date" date,
+      film_id integer
+    ) server import_csv options ( filename '/tmp/directors.csv', format 'csv');
+
+    create function film(premieres) returns setof films rows 1 as $$
+      select * from films where id = $1.film_id
+    $$ stable language sql;
+
+The above function (see the **SQL** tab) defines a relationship between ``premieres`` (the parameter) and ``films`` (the return type). Since there's a ``rows 1``, this defines a many-to-one relationship.
 The name of the function ``film`` is arbitrary and can be used to do the embedding:
 
 .. tabs::
@@ -698,24 +737,30 @@ Foreign Key joins can also be done between `partitioned tables <https://www.post
 
 For example, let's create the ``box_office`` partitioned table that has the gross daily revenue of a film:
 
-.. code-block:: postgres
+.. tabs::
 
-  CREATE TABLE box_office (
-    bo_date DATE NOT NULL,
-    film_id INT REFERENCES test.films NOT NULL,
-    gross_revenue DECIMAL(12,2) NOT NULL,
-    PRIMARY KEY (bo_date, film_id)
-  ) PARTITION BY RANGE (bo_date);
+  .. group-tab:: ERD
 
-  -- Let's also create partitions for each month of 2021
+    .. image:: ../../_static/boxoffice.png
 
-  CREATE TABLE box_office_2021_01 PARTITION OF test.box_office
-  FOR VALUES FROM ('2021-01-01') TO ('2021-01-31');
+  .. code-tab:: postgresql SQL
 
-  CREATE TABLE box_office_2021_02 PARTITION OF test.box_office
-  FOR VALUES FROM ('2021-02-01') TO ('2021-02-28');
+    CREATE TABLE box_office (
+      bo_date DATE NOT NULL,
+      film_id INT REFERENCES films NOT NULL,
+      gross_revenue DECIMAL(12,2) NOT NULL,
+      PRIMARY KEY (bo_date, film_id)
+    ) PARTITION BY RANGE (bo_date);
 
-  -- and so until december 2021
+    -- Let's also create partitions for each month of 2021
+
+    CREATE TABLE box_office_2021_01 PARTITION OF box_office
+    FOR VALUES FROM ('2021-01-01') TO ('2021-01-31');
+
+    CREATE TABLE box_office_2021_02 PARTITION OF box_office
+    FOR VALUES FROM ('2021-02-01') TO ('2021-02-28');
+
+    -- and so until december 2021
 
 Since it contains the ``films_id`` foreign key, it is possible to join ``box_office`` and ``films``:
 

From 562f69977023d044457e4089a0fa3b0961c1d63f Mon Sep 17 00:00:00 2001
From: Laurence Isla <lau.isla.c@gmail.com>
Date: Mon, 7 Aug 2023 22:04:17 -0500
Subject: [PATCH 640/652] Revert disamb using FK instead of computed rels

---
 docs/references/api/resource_embedding.rst | 75 +++++++---------------
 1 file changed, 24 insertions(+), 51 deletions(-)

diff --git a/docs/references/api/resource_embedding.rst b/docs/references/api/resource_embedding.rst
index 63dda347e..3870f298a 100644
--- a/docs/references/api/resource_embedding.rst
+++ b/docs/references/api/resource_embedding.rst
@@ -372,7 +372,6 @@ Computed relationships have good performance as their intended design enable `in
   - Make sure to correctly label the ``to-one`` part of the relationship. When using the ``ROWS 1`` estimation, PostgREST will expect a single row to be returned. If that is not the case, it will unnest the embedding and return repeated values for the top level resource.
 
 .. _embed_disamb:
-.. _hint_disamb:
 .. _target_disamb:
 .. _complex_rels:
 
@@ -392,14 +391,8 @@ When there are multiple foreign keys between tables, :ref:`fk_join` need disambi
     "message": "Could not embed because more than one relationship was found for 'sites' and 'big_projects'"
   }
 
-.. note::
-
-  Previous versions addressed complex relationships with `Embedding disambiguation <https://postgrest.org/en/v11.1/references/api/resource_embedding.html#embedding-disambiguation>`_ but this is now deprecated. Follow the solutions in this section when a ``300 Multiple Choices`` error is returned.
-
-.. _multiple_m2o:
-
-Multiple Many-To-One
---------------------
+Instead of the **table name**, you can specify the **foreign key constraint name** or the **column name** that is part of the foreign key.
+For example, let's use the following tables:
 
 .. tabs::
 
@@ -420,23 +413,15 @@ Multiple Many-To-One
     create table orders (
       id int primary key generated always as identity,
       name text,
-      billing_address_id int references addresses(id),
-      shipping_address_id int references addresses(id)
+      billing_address_id int,
+      shipping_address_id int,
+      constraint billing_address
+        foreign key(billing_address_id) references addresses(id),
+      constraint shipping_address
+        foreign key(shipping_address_id) references addresses(id)
     );
 
-To successfully join ``orders`` with ``addresses``, you need to create computed relationships for the foreign keys columns you want to use:
-
-.. code-block:: postgresql
-
-  create function billing_address(orders) returns setof addresses rows 1 as $$
-    select * from addresses where id = $1.billing_address_id
-  $$ stable language sql;
-
-  create function shipping_address(orders) returns setof addresses rows 1 as $$
-    select * from addresses where id = $1.shipping_address_id
-  $$ stable language sql;
-
-Now, we can unambiguously join the billing and shipping addresses.
+To successfully join ``orders`` with the billing and shipping ``addresses``, use the corresponding foreign key constraints:
 
 .. tabs::
 
@@ -462,48 +447,36 @@ Now, we can unambiguously join the billing and shipping addresses.
      }
    ]
 
-.. _multiple_o2m:
+.. _hint_disamb:
 
-Multiple One-To-Many
---------------------
+Multiple FK Relationships to Many Resources
+-------------------------------------------
 
-Let's take the tables from :ref:`multiple_m2o`.
-To join ``addresses`` with  ``orders``, you need to create computed relationships like these ones:
-
-.. code-block:: postgresql
-
-  create function billing_orders(addresses) returns setof orders as $$
-    select * from orders where billing_address_id = $1.id
-  $$ stable language sql;
-
-  create function shipping_orders(addresses) returns setof orders as $$
-    select * from orders where shipping_address_id = $1.id
-  $$ stable language sql;
-
-Then, the request would look like:
+Additionally, let's create two views for ``addresses``: ``central_addresses`` and ``eastern_addresses``.
+Using the the view name is not enough to join ``orders`` with any of them.
+To solve this, you need to add the foreign key as a hint:
 
 .. tabs::
 
   .. code-tab:: http
 
-    GET /addresses?select=name,billing_orders(name),shipping_orders(name)&id=eq.1 HTTP/1.1
+    GET /orders?select=name,central_addresses!billing_address(name),central_addresses!shipping_address(name) HTTP/1.1
 
   .. code-tab:: bash Curl
 
-    curl "http://localhost:3000/addresses?select=name,billing_orders(name),shipping_orders(name)&id=eq.1"
+    curl "http://localhost:3000/orders?select=name,central_addresses!billing_address(name),central_addresses!shipping_address(name)"
 
 .. code-block:: json
 
    [
      {
-       "name": "32 Glenlake Dr.Dearborn, MI 48124",
-       "billing_orders": [
-         { "name": "Personal Water Filter" },
-         { "name": "Coffee Machine" }
-       ],
-       "shipping_orders": [
-         { "name": "Coffee Machine" }
-       ]
+       "name": "Personal Water Filter",
+       "billing_address": {
+         "name": "32 Glenlake Dr.Dearborn, MI 48124"
+       },
+       "shipping_address": {
+         "name": "30 Glenlake Dr.Dearborn, MI 48124"
+       }
      }
    ]
 

From 9ed7ff88465d1749cb85eb292562aee9b55e4812 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Wed, 9 Aug 2023 20:17:32 -0500
Subject: [PATCH 641/652] clarify FK joins

---
 docs/_static/premieres.png                 | Bin 8990 -> 0 bytes
 docs/references/api/resource_embedding.rst | 305 +++++++++++----------
 2 files changed, 163 insertions(+), 142 deletions(-)
 delete mode 100644 docs/_static/premieres.png

diff --git a/docs/_static/premieres.png b/docs/_static/premieres.png
deleted file mode 100644
index 794e96767de072d6414630fc9fbfbeb24d4f9d9b..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 8990
zcmeAS@N?(olHy`uVBq!ia0y~yV9aM=U^u|R#=yXEn(@(W1_lPUByV>YhW{YAVDIwD
z3=9eko-U3d6?5L+tquu!`iuR;`)`MQ6C4~=UHlt6CM8uif0@C(-aR<j@bvA%#ARF0
zcrUB8e))0JrY#$S{Exp`mf0w~e#s=IS&|%CVJkY8O<T00K|@1f`t$GY8|!(PEesBv
znYVBL)->Jp_vQP4-@IKpud*`zyqv2Gi;K$=)#z6<t(laRR#}PVD=G0NeN<Drq(G24
zx$Ap}pz;C@F8Qz@3a<~>Y+d7?lCs3}|9oDbT1OUE*2H5ylFQ1R#gz2)_*RFlH7b_~
z@t(1MTH=!v6V<*a7JbaSx5si`^*hVS%!;QEKFZxYWBs&+YF*~f_jGocbR3=C;n5s{
zU}o*D$iKgD?;-D0DU*x_cezTI#qRybW*VnwSx=ENPCqB}Rl@Gq3+3W==ajOkPb+V_
zpJaa|`t;%q!{jSZZ*R{xzpfZ*v$=0icUM=z+gqkN_x4D}?kYKWak2YZNj|}eX%T0(
zc>4MA#Z|pjEpB&oS;AQwwTGFBNkK_KP()n(@u#P!XIK<2+VyXGe4S%aQBiDLi0<j>
z`r-Y_pPrn2#@Bvg(UfzaKgnHQ?$3U}#%StIw|iZS7F2$I7O^>v_s*R=SDvaC-%owM
zci;bi)g|xlfULgw`g#5T-||)8-f+(KV^2>{FL`rAaCP{4x5C1Wal0@5eS3Ge`23nr
zoHezziTU~c2M##Axv`O%q2SMt!Y{9`a`*N1Wn5gus^&AJ;menjz5C?Mp2yCek@ZM|
zQNh$ybh4VS)9GotiOI>#Ad_ET<CU-fQ@HbO=b5Fe=F479;bRV)pq<oo;X(i>FYnqd
zXSe0vW@%uU(9qCOblc|VlgU}LeP^3>cAR)|aq-pE|Np-4KYH(89D_$f!h&6Q@9ZqT
zYL+U0-v0ldJNxV7bE9|dZ)9ed+Oj@;{k%1Cd!z39zjQAs*dQV<zPfhr$79m3cK!eJ
z+`j5~&|Q%8^yBtu_|7(4yW#KQf9qXbl$4Z?9GT7<sge9?>#m-YpEqfpT70Q;WA5#3
zMbl@`I&3;odl`d*prGKg62Z)GmhYRInEre`F8}KDrNtkFw8PiA<mIiqw`s-<i9KJh
zMT>s>{q=f$^36@DPuKnab~~SUny9#V@~J7BY`+=h?z}%dgFo1}bER5e;lU=>9d&=J
zTHo&f`AquFt*xsMeRVN?cx7d<Xk4aI`nfq$H``ZQ=J4)Jy7p-9tXW;*ah0xrCohZJ
zTUGI>Q=R7)$kflz&Yn1R$|)vBhT*~9@ArbQ@Bi_rdq>@0D<fm$jTIl0N`KBW%?^l&
z$hZ*SEv7qR#*B_Rb7aoUHuulJJ4G{i!pxbSQ>KXg`0-=K>GSh!e_wcPsJd*H#jzPP
zBuXnwN=!a|{ycHsymiwJmfjY~oC<bJ(DI|Z-&hxYes*?a-QTLxzY83jFD&sCZhpJW
zXJ(UlTm_@mT)uDLzG-M_9Xi;|&dA{B=LbrAvrICX!o$P=ypI3xwA^nl1H;RgFMs@e
zKA-p3Y|CObtI}63ZoN{8r>1DW`sCIt^>FX^d(Ep?Ye#L(YE^V@Tk-l-wYmP;E1-D$
z{OQw`f8XBS?Vhaef9UE}(fqw%r~Nu8kZ<LB?Z6e8ZEZ1zzqfdHrk$Pj@bCBg`sK0h
ze6nBWEnm9y;k~`p3=MDI<lMM*>(yRO8S65i-0F9CESvvDZOK^pZ+GJ1wkpFZb#cG$
z^CxHdm=^Zzt^OW1y|ul4arX6f8Q0cG9_y8E@95yTv$Od4i^qzq)}2~s7P+scviHql
zh_%%p%ZiH+zqq(qP+q=&nr`&8+sDqG^Lt<UvixlO$#dt-H0_dSN(KAMJa(6_ZFxSg
z+V4GU_2*~4Id^slp11#RV`FQ(vGQ};;@_&9!mdrwR=a<Gw-yr<(}XEgQi|-C+F$wd
z@#DdtpP&1_yBuOF8(jLUxVYHa#f4?lrcDB(qOEUlZ&$XmlCre4WN4`V{x0#}o=OSR
ztSO!w1vBTGKIyvYe(&nTM~|Aq)<!Wh)ct;It`omc=H<(mCr+O}Tz<c{eVOlUr$CV#
zH*Y>X)+;@$XXUEDxwp6Z&JB8bcei;{Q`3j9*W;B<O+_C*e3-R=-MV#Ki<vr14n-BY
zPChE#aL;_xvvYH~`T6;8+`hdyet%t7ArCjV_IKuhwMRmx{+n0zO7pA#fyc-D7l*D6
z%eb*YvBYZbz4LKX=e<_`rM+od%*C9K^UQLk{(bDP581KLf4*Jmzsy44;~`W3%`(gF
zTIxML>{k5hu(byD|7sS0_fP3vqZ)1!z327y_5E|L%OCyye&79gpX|d24;ZYitwBY`
zj|a{C8>+wO-MDch!)n>8Z|2qCa%#TcEtfFMk=V0m&xH+%&LD^S&Ni!f+-oi%FV8P7
zKK+(OiIVTewwS<we^#Y!?U68KV%U&+dYTk>#~E!SBOzt?z7|e>?o9z_!cQ;M;8Idj
z^7(1_LU)#IrLf@NsT(VV1v3S@%>^g2k;$C-#W+J#Q`4gSoy?xSd$YCVj5be_w^ajG
zWjdOgnrgY{CxT3$Y4YjY=g-aa=gYt6&vEs7_uThd`_C*(5!c4~^XGfk7CiBFS>mX3
z&&5UR$Ri|XE-R>Tudn~#zRla)yLpjD#IBM|Sr^w7TOGsW;F|5k5^vU%Mlv=P7w#wu
zM4Eb^G3<j>c(=K}yt{il!A?(0i_6i`v7n%!Vfk`(F`bBpMT?Y-T|JiMPMeWD$84k1
zY_r@$H#R0KDls(Nxf7!ky^UwOUaV1mf=k#Tp`sq;eC^4zXLqj*Ue3fIrWez3db+-{
zt*z|qYikd0%e{R@Mt0)2NUy%aC%LJ7vQ{l;&iMGuu@LMQ(+!&LKgU9F=FFKhjMMvm
zHYsmnnl>p}rZReFx41qN0~^0w&W5}L4UDC-d=sy3oFbF_ahuWCSD}C6qi$L$8TBoF
zBC+}AsUJUnFff$8y_LEl@BBPln9|2{woiR|Z?E;8yLUn5SVd)J;-MDKf`Wnr+j4Jj
z$hfG~x3AMDMbq+_&o-m7va*P+S)wj1+~RsJpP!w*xT7%HXNCdeVz=I=)vH(UbXK`!
z;(gLkEMMEC>PrTwc64-f+^~6bb9*~`+POKMTeGjvvNlm#oxo{%EK^u}L;e4{=G103
z-a`u<n|Y=!U%vdhtA|V2QK8}<WkjRLZ+6C=-S78BuYH?#ZcgOki2{+!SFF&OV_UuL
z)NNiVlM_$kJJ$1bZ$I|**|S;JEJ~}({{Q=%^)xc~e&U3q(T~M+A`;#Sbga3xA@Q(5
z&JBa&_QZx_jD&%dMnFupSgjcoCpKz_uS+=ABWWtiKQq$Ht81t8f~Z3^TXiHQCDn4*
zdz?HkAKtuuyZO49ok>9qDKmX4A}6#a?TecB^73+J8=F15X6GAbK9Lm>`LbZTZnV$K
zHXV<Y6cx8Vnap<vE5r=qb=wzdaPaY&t>iyfi8tGXdWM9Eh`2h2gorR4xO`doyxs3L
zGZ(M2J|>rc^K;1Mh&_xye*Ich{{G%GzQYdZ=h;4d|33enLB|&r6%_^stMYd}phTvt
z%Nx6^#IQJ|bg|a)=wCKh+5Sl|3x;|+IWa|T$!J{WJDX|6Z~c<k{dKbQ=FN-PkiaOW
z9~ZOy_qT7~%zjmzp0|9~v5DJTZ|twP7jZrK?d|QWsqFl6E=5I~Bo`|gmAtuOxVdl3
z_jh->1rIhbGM^D^Hq82Mv#~;WBBS8JHeP7~85tgTcXtbG>*OaVCVF^yIJmjBS&0Ue
zWu3o%U3~qXPoR?I!n#;%3kwSceSLn04avv(zP!IL|L)zpj4LYytx8@r^xOZtk)X1>
z^mW*mmzUXlrOn$mZ#H&vaw_=r#FL@HZ~5ULA0IO^96WeX!lq)wuDknce;Z_6P^hS=
zIB@Nnn5<RFfop4{zy4aMW0yR|HZJ*m@LB=kmbNypjEohUu@Nlt^71dQuAY8xQ}XdX
z&;S4a9=&-pQbtB*N$_&NO^JuunsfPOtyB~h6(7BLp`oXzCnO`I6TK}b@VdB|*r`)f
zwU^fZ{`Tn28=Z6K&RyD=?7ny3zn|ypxfs4Ky!_I|Wl8w@xJ$cAUuzwI`uMT3u$s?=
zGiQ7xO|z!FD6#tZ;lqTBi`~7WqN0{QS5i`P@~MfO&}w8B&&|#Kv{gLrLbdNSn>%;!
zvNjw!cFZd<aH55!<;fcxlU-d@l$D(sI`;41e`{ap>M$jxPmj9wr`?ukm}y_XucJdm
zT>Nwkr|_xV$FE*#+5i8u`QWF_%gZ`DPVA}teCn=WponF`g9FZwjoofOHvMKZmA%2m
z#YJN8`y!W372Sy+`?|Y@tE+z({SOw?k6W|t_SWp_CK(qN+$obb&l3@xXj%L$<i{di
z%}>X~@{=Eb`uK6;h7ATUFD`C(+&y8!1h4a~-P^w!nZ-}niBw`xF)#>7N=kZiZ*TRa
zS+lef6BC&nUR_<SUjFXR#Q6HZp$sS5<?A$*l&ZhI3A}!OmZ`VjTr1U`J9loX{G3);
zS~~Uny=wn+b1ap=zq>nm&mNo3{{HD|zOy>|`};dObmI5LFm%kHKmW~*jn11kZ&p=S
zc3$Q?d)an*e}Dg%*VoUNdcUvsH%r5ojEheD{{6~6dFs@pHEVPtcNQ&W2q@mY=tocJ
zw~Ag{|EDWEAD!jbIV~W#=f|UN4GoP0*6;T;8zvt+aO@b{?y|RsuB;6H_`d$X^yB0G
z?wixj8f0El(dcUW@S&hb&Q_{d%Jk6p`}O^WkB@<xTE}M?CT}Qw?Dpfw4+SM9rhfZ>
z7F^uig%1uewzRb+y}q`VgO~T{^ZE6ChRMek_|Lbyu`M@x=X6C$>FL|In=>RlKR5To
zw{LDvPE1TpOakKK?GF#PKfbWg`NZkd&2#6@J^5TqTbuj$x3{Yc_WCV%zQ3<_XRU7j
z{cX9?EG#S`H`Zxw+O+Azx7+!L4<BaUxN&1aX(=nijoY`AzrMQq<59Q%gZJ<G)z#I%
zW_3-fygTW+cG#K&+3WYRF@XHMCUSGZ>ub7uzTL`x_36@{J$nj%f6E0`VC&Ycv#9xD
zFv}!!(YpE8<$CL4b~dT`&U*0Y=jR<|Z>8M&<<_p7Z&z#e=IvWSY3c6ca@9VucE!(p
zYJNVQZc+Tqr}bl~>&wS$PgSnc)w!2?<oNN&S5^jBe7zcOn0-yB^yiO{k0(x@+A3+B
z_TYB@e%II6))sz!6}sowtJO2?YIogQSO5Rtj>5-nzxKS*waCrQy|_I;e#g$8FSo8<
zxkJr=9uLEg;^%zZ^6qx+|NAzdp&@Q>RpOl;g+D$V=FeVJG5Kp}U!R+wAD@_B%nGq3
zLS2g-T&`5!X=!1(apQ)9fk8m+yGM_jrpMPs-c?gmV_Ug$<<xhV@86fdc=6(ibLWm-
zTI&6k%bdX^_m;^0n$Nrp4>q5-V`kWre_xK_!)g8f4?zBSyY>1PuJX=DkCH5`t-~ea
zL#No?dwYAkbnUz>?(T9)Pft&VhPuDMB-dz1mOVVgdS&(Z2b=Gma&tS-Ebd=ZV^jCz
zA-jsYy0WFE<Z}P{$KKxFesNpwZK?j%F0;*YuN;b9^u#qLI3^~>An6E4-ujDgPX`-$
zy}iGG|G`~1ZbXQPi@)yO!pzK^n4Qhd;Nj!r(l2M5ke|Ok@AGAUd&Y`@l-pag!ynd(
z>&0*|NLUmkEd3~JS0ll2W#6O6kG1c-`}FkmkFVF`Ki(-m9}02#syWMV9a`;sYJ$D}
z&oGgr39+6B#X$XSW(Fyf6+iyIe|B~@2M>?S_Po0v&RM^I@a*jD7uVKGD=8^m*j4&E
zs&jSA?%mZ>f2lJy{Qmx)nc>st&tIpBi;5;*T;$3i=Og{(=~G2bO;6o`>3Xq;dZo>I
zxWW<>6&W79y1Lr!?e;y_%QM^g<=vXuc&{{`zq`Af(c$dzOQ1Hj;K3UkleK%!N2K;&
zzwtR_cEq038kO$-eSKyT+tbg>F&tRjZ?~#1D>*4i>rM9ab8|hsybf(jJzenkSLvHu
zTe-Ev);M^0cucKlI(cKqnU{}_cE7m3US38<=E38~&Arm*vrOf(g8~8?)<$oa66v1x
z?DcDIhKj#muTPvbsp-$38X5aK8D@4q7bhpCoZQ@t`)aG_SQIj`va+&$z8kx{?CR_F
zPkz3+xw-Js5zZ&io;|v=vl!G$iiwH2ur}J9A>jF&^z-w2xyAJsELgw*^7!ri{k+l9
z(Jig5in_YI&(F_ye|>H3)kl#<H}C!V`ML1dm&_;6pDSx>ay~xRdw7}eY=eXY45r^c
zJu(gh7uHv`g6-aIIkwujtGjz??(J=t7C16je!p9;s;ld3WMuSYvcH|6ySw|!`2G9-
z{QLdB==;0a%sV?a-nen&1iO5Vf_dJZ33u+q{CwChf8_Xa_dR>|q`bbimdQcQf1ZxG
zUd)8m;p@G8e0o}1S~?bKTv``vee&Env5EixAE~*!t8~)*`T9z~!e>iJhu?gxnfve0
zPbP=FySqXk?p*Qis@l(=KOen+umAe``svl*-<>=;SzT2@!QtDxyU|bgty=YD6%)g!
zzu)h#J{=q!eDvHozgY9^YipwVmzse_E#}pJi!3ZDnUZ~dUFdH4<WFDE&9%M+>QAqp
zl9Q8j<mS!DU1e{zl$0Jme8}W*ZjPn0l9F-yIT6=D6>V+r_4^+^N~-+za{1}KPODN+
zPn$Gnj*gPj&Ye3i?Wz1+bldjVi^Y?sO;c;<mk*m>`tp*ii(JgQ>nnqo7j6Ii`Sau}
zSFU(Hh6ZjZ%bt)8X;XB|?En2(960?+?a!yv7ioCye0%8d;iuo;-hTA-Y3hc&8ygah
zN?ru)J<XJyoGf3pa>2&JnTspxzuioKWx8Fp?%&V!m-qHoPyM~B@6DT>kKevcQ=eDi
z#Kq11_1fFp+x_=Wi^%@;`E%-r2M0ero1K4Zf}(TQ-imIU9V+Y6&(8z3Fy!RqjB0)q
zbar<Ov$L~Te!Uv*>XLG0MIfk&arEd>C8bM?-T6O$|E|A%zjgV$6H7cNAGv!s7SvwJ
zy}b=&rdL(fuDIP#o}@?`Bs5r9S#>oxH*d+j>~^o>G4II}Cj=(4xBi-$KJVi0ebFu|
zwzjc{4jp<j(Opiky1F{^`ntI~k(*p(C2ZksCD({O*&dZg^$ZOIe|>$e?&s&1l%5{`
zaC*tUzu%%?URyic!os4%Z~0`s*j+ESdV6_I+E@F#%Wt``zP^6srj$+*F|kt%o!dcf
zWMX1+aZyoMcXx7fI&$q=m|XpzLP5>{-d4wsr1m|st@%;l>E&e<Atxgf^Y)@&Xi9pz
z_xiZKDW|4r3dzZ>+wOPzX!X-mQ$b$r>bMg5aa&31{W)7#sCAjIH)AaL_ouQsb*@$E
zp?iC)<#)YpU}V<Xd)&#v!C~j;E4Ec%4xF8Be)V~;l&R4S`}_Or>$g7AdSAhi@bc19
zP(N_#?Xd8ytgM~o4mp>X@z(wS`~BAZ|GzI^TIzjqXK}jC|39BIuC0lj`)0G***TV%
z?<hvh`StbnY-^V81N=HG-8wvWdOm&lurYdj-qlDMtGRripP#?JTWsEnEqCt3nB?3L
z=vpN4b;A|@dy#uizUq-S=bNq<8?>HNP3!EvdvdI-tOA0I<&uy0nU<e;n)Gp*)Itre
zuC6YgY4`V3UVb2*Q7U-))z#I8rLRK1S|uxGAAaO(dg%0N?)3BXOe5-EUD4c<b92+V
z$DBMoNACasSH320@2+#-eM7_}_N;WX`FzIs$NT#KtGB-ajg%g4<6U_9<r$&NlT^Jo
zl)a5wvUKUp)c-D9JCDxJI<g{gv4E^>@7LGYmCen?_y7B)eXK{anUz~CWXIW6p{o<p
z)7#g@?p}3&#_G;(s$O<`YCfMeUtOZ(5_JINAW&PW{JmRBii(tZUXP-4+k>yy<MqG0
zMLn&&VXLc^J$u$HE`EOgBS(%n1d5!QXB!=Bo_EKhqOwx*?)IfGZ*N~;b@gzcto4JJ
zFF9QU6OxmIAF3|=a(%&{%7YbKr`)-ib9$PtshGgba7ZsI^0~d1_tt)Juiw$drKRfl
z;j9~nz@r1;v4;ts@%{b%{l}+jhp#e;_jGx7ux6`HVPWAipV>3Q_C#;ZVy&+J-Tv<v
zYo@!G7gyQ)d%4hV+3{7Os~<dno*pExCYo<<ZoXsZPDLA=J4+N!6uG#$ZK{aYe75>2
zsDQt7=Z?>-X1txrT*XV5E-ldTTKm^WQgG_}^z-wc{%eWP+_!Jvi@UqaWnEKbphNoC
zcKrSQ-8oPs=l;ICcNPjn?)miT>4SsK9)5o7w)CpPM*odFy1JYK0t7%c*UOiktlVM}
zfBq#01`6J*{T|E0#^$vAvg7j03xk*YRqao)t@~2}>M1c8l)MPov17-I*NYY}78DX<
zN>5J*4RC!tE`PjBRQuH5xt@#mH+6klTK@jtt2yPVmZ8&j7N1$N{&?`!+*?~XlaKd>
zzMnpK_U!J|)6*VaTIyZ(7BuSd^z`)Cy4H1nEROX`vsYJFx3sl|?dbpd`ugLg)8j7f
zR{y>-c)3CKx12e))nc!&uV25DS?L$|rWTpUCwB8aefBKr)s>YD4Xxbbk3Ky;?cwi#
zd{^n~4Y{|?_HL6l&ui)L=kJrXZriiR=E;*Mpce6ljT;YMTN};DFu(qv<+r!D*%@wZ
z%az`=Y10Hq!!hB(fkunEKNj!q?d{&P$3{h6{qfW3@yFEX*DNyM@BSq`Fm7MS^4_IS
zB;4<nz5q3*&zw1Oq*Hif#zm#lpGP`{C(fMNX<7Vi#p!i1I~Q$VyLPSauWxU;&CSj4
z>?mA(sP@RQV@m4k?16!S9bH{o+kJg}&N%D$DlPg19;=CM*NfZ3!2s%Z9^A#q%=W@o
zUr+B?zx}_C@_Uu+iHV67uU0O<uq87%W_Q`zOSLh3tG+HQjM-PSlPgd-FcUnEbA4ge
zSFO7BI(y%N+E<*MjzK{}ckbK~kdf)hySpp#;i1+UX1P&Ie-{)LF)_Tkvs1X4jd#_|
z1DzhJnwG~Vmdk$n_>qy}&8@Ac6YkElt-ezK{?1NePfyQ?Z8?(b;`jH(?k-C_+9k@t
z$?53k=C<_ri#t0v-(nZMY6BXqd2e-PZ*}>O-Mf?j{`wlRr@}BOIJofjHQkzDFPBGb
z$(U&MEAP$@!v^;Hs=ptP%Yz#Hd@>dd|Nj0~R#s*<&%5K`=hqi^-#q``k-xvcUtH!Z
zUGn~(?EJc4D|hw({{H^)larHQTwcyE;(Bmr@$*-IZglE+dV(V3=#v>U6iiG)oSdC~
zUp~@*ep-LOh-)BA!@cB3M>-!pd#2_+O=sfm?fKo)r%!jBop`wI<b{RKtPL+ptONx+
zdwWB#PuH<7eFf@5H@{^(@#N%W?OuIY_c>|bwE6mbtG-UUwl+Ha*0JNq-K)O7TDr|p
z^|*@*gNKVti)Opf$%*B%(zaD5Wp8dYE?A&&<L1qShYvFwr=L4=YissZvvcRpb@cVQ
z-QQQc@bb$CPoK7`dQVd@G7`GH+`oPIZtGd*`Fsx!&M#0@RNSz2Yb&VdwjlTRwvO)Z
z!w(KNgS0$((xN`UMkxFGx}&p9v(FUWahbMYPt8g{Y3~z;PtTV(W=R?*u`nc{7HXWr
zabhV8XRM#*94O-A;xgmY>yObEpVWw%`hylEaJ5D+>+V5DQe#^0|5tyzv;6%$*a#NZ
zk<|Q>WLK{|A6KGAQe$~pSy^WorE=Z5b7z4@*RLD<>-XP!cF|ql_5Z)WuTAv){rzoz
zzuC;6D=sR^>KZ5@DjLcjC>WTV@Nr$+(QfhNv$IT3oH-LRU9+pnZ>|+%#fR0Gr|ZQ!
zJwG@1wazlccvWS_?Uoi6h8358bgW35S+ep${8i9sl88vliWM3=cJ7p1qp#U_Oytt6
zM{nQeetGYwrlPXIwOcIX)|O0NcUPCKt;+AUynKC+%GdvCJlM=WJ$eVDf}x?H!(FlW
zt1Qai%s6_?&E;6)$8}8`HW--X-;-f5$iHW^_vgE%-qTmT6%rD9@b>N6zMR_HTEoms
zDr;hQi#0Yjg2pq~uh&mXPG)5I`0?Y5i;LN1WMu_qWO}&8^+GJS&9kjObpL*Qt)9}2
z4T;Q6&CL&Ayx>SrPw$bj6yoIMJaOX0gDIR7j}_ip!lf6tC*t9*OUgHo9C5Mv`{go2
z!<jQaf4<$$2j#MBYonKM`}ubJeS@+$5o@Bi^EtQk9sT?JJEM)pli+1O2jAV@-P^Z%
z#|{Z~zc~T+Yjm`<4&B(8{PAjd{L8J~Jv~Pnnb~<BsVcpFcw#qKQgX6k;UgCd3ky&m
zM5#%C-w&p)MJtqVa*OLJ*xJVG_Njip-`Cf7V@IJfs8pRfvs2NzO~KSu^z*Z`hrhkO
zJ#p^b-qX|dK{FSxwsddwn{U_q=1orN{QSLN#rFMrrOm>|rlh9E_Wj*m=d3KPLx&Dc
zm^ZJl>g%h8pf*iKTE~iYg->E#-TP!5udj=}xWJM5>(2G-^<!dV870n@PZxO~ySwaV
zZ`s>7Zyr2((o*~T8z?UxXl9DvUsqf5;=)2N!>RuoOtiJR^Y{NXv$3%ekd|J3EHyvB
z|LW@S$KCq-8ustEpEGC9s%ox|6HEn9Vp+H6-90qZI33ghE4?{U+5Jmbk&{!?y%T1N
zij4E-&11VP;@&Uk`u*MAtA}`PW+Zv~`K|jj1vKcAlanJLA<^;TMFyzq`S#{!)<aoN
z{r?OMOvgcM0rVDXaJjU6zUva!aCA3U-Jg%{9UW17HgDQg@as!v^P||Rl-V<8WCZkh
zuVdEVy=T{S2{jcJ1p@<tZQHh46hGr(nDU!-A*A14yl?git_>C82PZ1K2ds~?WnpDy
z{P902E{LbQtLwvMfBTi^^<#InNSo&^$iBX=>aUD#l}JP4#C3ij&z(N)927KZm+wjT
z`9FXDta{tk)wLnx;v%i@{w~uxkM8E`ld)`SXkY-<`RAq0a#oxRoNraiRsQ~7=yFvp
ztz)91?-#rGFRJ|f?8BEYCRWRY)%_MMSm5yX^!4lF3?F{IUazdG%KG!?Pf&%*#wXJO
z8Z5bWYf<g*Z=tp&N}CLH?zw4cXgDM#Ejn0J{`=e8#PoFb0~;dLRa9Qo=I%Rkak2Zy
z8_E3#@7|5gudEE#;SVmGuk6<2Fj>vF;KKvQEqQmP%F4=KTv;icl$`wV&6^%RS*rz!
zhucDLu?t4ZiRCNLwJ2oTxpOC|)?{F4ZEa;cYG!B{m=6lsj%#b9otIx;nd`FTj#BN%
zN3M7FRBk?X)Y{Nc@Z7m`8FzP?G8{O0lGD)8@Wsu|>N2vj4<9~kgbtu-=;%C|!Z~p(
z(y;G@*3OO&0pWOXnR|6}%1I$c1#WS@HJ>(hF-+*_;0Qj{_2dL()q}1_UY?$mS<Z^`
z^HWaANt@@Hl%H@3%Rkt}Dj@hZYwaqX)xLk)ma=Z#zTMr?v2o{N1ts1GP_5Y3PJkzy
zkXBTjc%uI@W@i!W#EBD41-T;|cI>byZg<$)@iWWTNAKRpj~^v0i&A`#IJs=?`I%)q
u#r}PPtBcF6jjecFpP;D>^hvNU^|$u(zRNiHP?Ldyfx*+&&t;ucLK6UK=&7v$

diff --git a/docs/references/api/resource_embedding.rst b/docs/references/api/resource_embedding.rst
index 3870f298a..6e12171c2 100644
--- a/docs/references/api/resource_embedding.rst
+++ b/docs/references/api/resource_embedding.rst
@@ -10,10 +10,12 @@ PostgREST allows including related resources in a single API call. This reduces
 Foreign Key Joins
 =================
 
-The server uses **Foreign Keys** to determine which tables and views can be joined together.
+The server uses **Foreign Keys** to determine which database objects can be joined together. It supports joining tables, views and
+table-valued functions.
 
-- For joining tables, it reads foreign keys (respecting composite keys) and generates a join condition based on the foreign key columns.
-- For joining views, it reads the base tables of the views' definition, and generates a join condition based on the foreign key columns of the base tables.
+- For tables, it generates a join condition using the foreign keys columns (respecting composite keys).
+- For views, it generates a join condition using the views' base tables foreign key columns.
+- For table-valued functions, it generates a join condition based on the foreign key columns of the function return type.
 
 .. important::
 
@@ -55,6 +57,13 @@ For example, consider a database of films and their awards:
       language text
     );
 
+    CREATE TABLE technical_specs(
+      film_id INT REFERENCES films UNIQUE,
+      runtime TIME,
+      camera TEXT,
+      sound TEXT
+    );
+
     create table roles(
       film_id int references films(id),
       actor_id int references actors(id),
@@ -80,7 +89,7 @@ For example, consider a database of films and their awards:
 Many-to-one relationships
 -------------------------
 
-Since ``films`` has a **foreign key** to ``directors``, this establishes a many-to-one relationship. Thus, we're able to request all the films and the director for each film.
+Since ``films`` has a **foreign key** to ``directors``, this establishes a many-to-one relationship. This enables us to request all the films and the director for each film.
 
 .. tabs::
 
@@ -183,9 +192,19 @@ The **foreign key reference** establishes the inverse one-to-many relationship.
 Many-to-many relationships
 --------------------------
 
-The join table determines many-to-many relationships. It must contain foreign keys to other two tables and they must be part of its composite key.
+The join table determines many-to-many relationships. It must contain foreign keys to other two tables and they must be part of its composite key. In the :ref:`sample film database <erd_film>`, ``roles`` is taken as a join table.
 
-Thus, it can detect the join table ``roles`` between ``films`` and ``actors``:
+The join table is also detected if the composite key has additional columns.
+
+.. code-block:: postgresql
+
+  create table roles(
+    id int generated always as identity,
+  , film_id int references films(id)
+  , actor_id int references actors(id)
+  , character text,
+  , primary key(id, film_id, actor_id)
+  );
 
 .. tabs::
 
@@ -209,18 +228,6 @@ Thus, it can detect the join table ``roles`` between ``films`` and ``actors``:
     ".."
   ]
 
-The join table can also be detected if the composite key has additional columns:
-
-.. code-block:: postgresql
-
-  create table roles(
-    id int generated always as identity,
-  , film_id int references films(id)
-  , actor_id int references actors(id)
-  , character text,
-  , primary key(id, film_id, actor_id)
-  );
-
 .. _one-to-one:
 
 One-to-one relationships
@@ -228,7 +235,7 @@ One-to-one relationships
 
 One-to-one relationships are detected in two ways.
 
-- When the foreign key is a primary key as specified in the :ref:`DB structure example <erd_film>`.
+- When the foreign key is a primary key as specified in the :ref:`sample film database <erd_film>`.
 - When the foreign key has a unique constraint.
 
   .. code-block:: postgresql
@@ -265,30 +272,24 @@ One-to-one relationships are detected in two ways.
 Computed Relationships
 ======================
 
-You can manually define relationships between using functions. This is useful for database objects that can't define foreign keys, like `Foreign Data Wrappers <https://wiki.postgresql.org/wiki/Foreign_data_wrappers>`_.
+You can manually define relationships by using functions. This is useful for database objects that can't define foreign keys, like `Foreign Data Wrappers <https://wiki.postgresql.org/wiki/Foreign_data_wrappers>`_.
 
 Assuming there's a foreign table ``premieres`` that we want to relate to ``films``.
 
-.. tabs::
+.. code-block:: postgresql
 
-  .. group-tab:: ERD
+  create foreign table premieres (
+    id integer,
+    location text,
+    "date" date,
+    film_id integer
+  ) server import_csv options ( filename '/tmp/directors.csv', format 'csv');
 
-    .. image:: ../../_static/premieres.png
+  create function film(premieres) returns setof films rows 1 as $$
+    select * from films where id = $1.film_id
+  $$ stable language sql;
 
-  .. code-tab:: postgresql SQL
-
-    create foreign table premieres (
-      id integer,
-      location text,
-      "date" date,
-      film_id integer
-    ) server import_csv options ( filename '/tmp/directors.csv', format 'csv');
-
-    create function film(premieres) returns setof films rows 1 as $$
-      select * from films where id = $1.film_id
-    $$ stable language sql;
-
-The above function (see the **SQL** tab) defines a relationship between ``premieres`` (the parameter) and ``films`` (the return type). Since there's a ``rows 1``, this defines a many-to-one relationship.
+The above function defines a relationship between ``premieres`` (the parameter) and ``films`` (the return type). Since there's a ``rows 1``, this defines a many-to-one relationship.
 The name of the function ``film`` is arbitrary and can be used to do the embedding:
 
 .. tabs::
@@ -363,36 +364,31 @@ Thanks to overloaded functions, you can use the same function name for different
     select * from directors where film_school_id = $1.id
   $$ stable language sql;
 
-Computed relationships have good performance as their intended design enable `inlining <https://wiki.postgresql.org/wiki/Inlining_of_SQL_functions#Inlining_conditions_for_table_functions>`_.
+Computed relationships have good performance as their intended design enable `function inlining <https://wiki.postgresql.org/wiki/Inlining_of_SQL_functions#Inlining_conditions_for_table_functions>`_.
 
 .. warning::
 
-  - Always use ``SETOF`` when creating computed relationships. Functions can return a table without using ``SETOF``, but bear in mind that they will not be inlined.
+  - Always use ``SETOF`` when creating computed relationships. Functions can return a table without using ``SETOF``, but bear in mind that PostgreSQL will not inline them.
 
   - Make sure to correctly label the ``to-one`` part of the relationship. When using the ``ROWS 1`` estimation, PostgREST will expect a single row to be returned. If that is not the case, it will unnest the embedding and return repeated values for the top level resource.
 
 .. _embed_disamb:
 .. _target_disamb:
+.. _hint_disamb:
 .. _complex_rels:
 
-FK Joins on Multiple Foreign Key Relationships
-==============================================
+Foreign Key Joins on Multiple Foreign Key Relationships
+=======================================================
 
 When there are multiple foreign keys between tables, :ref:`fk_join` need disambiguation to resolve which foreign key columns to use for the join.
+To do this, you can specify a foreign key by using the ``!hint`` syntax.
 
-.. code::
+.. _multiple_m2o:
 
-  HTTP/1.1 300 Multiple Choices
+Multiple Many-To-One
+--------------------
 
-  {
-    "code": "PGRST201",
-    "details": [ "..." ],
-    "hint": "...",
-    "message": "Could not embed because more than one relationship was found for 'sites' and 'big_projects'"
-  }
-
-Instead of the **table name**, you can specify the **foreign key constraint name** or the **column name** that is part of the foreign key.
-For example, let's use the following tables:
+For example, suppose you have the following ``orders`` and ``addresses`` tables:
 
 .. tabs::
 
@@ -415,23 +411,41 @@ For example, let's use the following tables:
       name text,
       billing_address_id int,
       shipping_address_id int,
-      constraint billing_address
-        foreign key(billing_address_id) references addresses(id),
-      constraint shipping_address
-        foreign key(shipping_address_id) references addresses(id)
+      constraint billing  foreign key(billing_address_id) references addresses(id),
+      constraint shipping foreign key(shipping_address_id) references addresses(id)
     );
 
-To successfully join ``orders`` with the billing and shipping ``addresses``, use the corresponding foreign key constraints:
+Since the ``orders`` table has two foreign keys to the ``addresses`` table, a foreign key join is ambiguous and PostgREST will respond with an error:
 
 .. tabs::
 
   .. code-tab:: http
 
-    GET /orders?select=name,billing_address(name),shipping_address(name) HTTP/1.1
+    GET /orders?select=*,addresses(*) HTTP/1.1
 
   .. code-tab:: bash Curl
 
-    curl "http://localhost:3000/orders?select=name,billing_address(name),shipping_address(name)"
+    curl "http://localhost:3000/orders?select=*,addresses(*)" -i
+
+
+.. code-block:: http
+
+   HTTP/1.1 300 Multiple Choices
+
+   {..}
+
+
+To successfully join ``orders`` with ``addresses``, you can specify the foreign key name like so:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /orders?select=name,billing_address:addresses!billing(name),shipping_address:addresses!shipping(name) HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/orders?select=name,billing_address:addresses!billing(name),shipping_address:addresses!shipping(name)"
 
 .. code-block:: json
 
@@ -447,43 +461,49 @@ To successfully join ``orders`` with the billing and shipping ``addresses``, use
      }
    ]
 
-.. _hint_disamb:
+Note that ``!billing`` and ``!shipping`` are foreign keys names, which have been named explicitly in the :ref:`SQL definition above <multiple_m2o>`.
 
-Multiple FK Relationships to Many Resources
--------------------------------------------
+.. _multiple_o2m:
 
-Additionally, let's create two views for ``addresses``: ``central_addresses`` and ``eastern_addresses``.
-Using the the view name is not enough to join ``orders`` with any of them.
-To solve this, you need to add the foreign key as a hint:
+Multiple One-To-Many
+--------------------
+
+Let's take the tables from :ref:`multiple_m2o`. To get the opposite one-to-many relationship, we can also specify the foreign key name:
 
 .. tabs::
 
   .. code-tab:: http
 
-    GET /orders?select=name,central_addresses!billing_address(name),central_addresses!shipping_address(name) HTTP/1.1
+    GET /addresses?select=name,billing_orders:orders!billing(name),shipping_orders!shipping(name)&id=eq.1 HTTP/1.1
 
   .. code-tab:: bash Curl
 
-    curl "http://localhost:3000/orders?select=name,central_addresses!billing_address(name),central_addresses!shipping_address(name)"
+    curl "http://localhost:3000/addresses?select=name,billing_orders:orders!billing(name),shipping_orders!shipping(name)&id=eq.1"
 
 .. code-block:: json
 
    [
      {
-       "name": "Personal Water Filter",
-       "billing_address": {
-         "name": "32 Glenlake Dr.Dearborn, MI 48124"
-       },
-       "shipping_address": {
-         "name": "30 Glenlake Dr.Dearborn, MI 48124"
-       }
+       "name": "32 Glenlake Dr.Dearborn, MI 48124",
+       "billing_orders": [
+         { "name": "Personal Water Filter" },
+         { "name": "Coffee Machine" }
+       ],
+       "shipping_orders": [
+         { "name": "Coffee Machine" }
+       ]
      }
    ]
 
+Recursive Relationships
+-----------------------
+
+To disambiguate recursive relationships, PostgREST requires :ref:`computed_relationships`.
+
 .. _recursive_o2o_embed:
 
 Recursive One-To-One
---------------------
+~~~~~~~~~~~~~~~~~~~~
 
 .. tabs::
 
@@ -541,7 +561,7 @@ Now, to query a president with their predecessor and successor:
 .. _recursive_o2m_embed:
 
 Recursive One-To-Many
----------------------
+~~~~~~~~~~~~~~~~~~~~~
 
 .. tabs::
 
@@ -593,7 +613,7 @@ Now, the query would be:
 .. _recursive_m2o_embed:
 
 Recursive Many-To-One
-----------------------
+~~~~~~~~~~~~~~~~~~~~~~
 
 Let's take the same ``employees`` table from :ref:`recursive_o2m_embed`.
 To get the Many-To-One relationship, that is, the employees with their respective supervisor, you need to create a function like this one:
@@ -630,7 +650,7 @@ Then, the query would be:
 .. _recursive_m2m_embed:
 
 Recursive Many-To-Many
-----------------------
+~~~~~~~~~~~~~~~~~~~~~~
 
 .. tabs::
 
@@ -703,8 +723,8 @@ Then, the request would be:
 
 .. _embedding_partitioned_tables:
 
-FK Joins on Partitioned Tables
-==============================
+Foreign Key Joins on Partitioned Tables
+=======================================
 
 Foreign Key joins can also be done between `partitioned tables <https://www.postgresql.org/docs/current/ddl-partitioning.html>`_ and other tables.
 
@@ -749,17 +769,17 @@ Since it contains the ``films_id`` foreign key, it is possible to join ``box_off
 
 .. note::
 
-  * FK joins on partitions is not allowed because it leads to ambiguity errors (see :ref:`embed_disamb`) between them and their parent partitioned table. More details at `#1783(comment) <https://github.com/PostgREST/postgrest/issues/1783#issuecomment-959823827>`_). :ref:`computed_relationships` can be used if this is needed.
+  * Foreign key joins on partitions is not allowed because it leads to ambiguity errors (see :ref:`embed_disamb`) between them and their parent partitioned table. More details at `#1783(comment) <https://github.com/PostgREST/postgrest/issues/1783#issuecomment-959823827>`_). :ref:`computed_relationships` can be used if this is needed.
 
   * Partitioned tables can reference other tables since PostgreSQL 11 but can only be referenced from any other table since PostgreSQL 12.
 
 .. _embedding_views:
 
-FK Joins on Views
-=================
+Foreign Key Joins on Views
+==========================
 
-PostgREST will infer the relationships of a view based on its base tables. Base tables are the ones referenced in the ``FROM`` and ``JOIN`` clauses of the view definition.
-The foreign keys of the relationships must be present in the top ``SELECT`` clause of the view for this to work.
+PostgREST will infer the foreign keys of a view using its base tables. Base tables are the ones referenced in the ``FROM`` and ``JOIN`` clauses of the view definition.
+The foreign keys' columns must be present in the top ``SELECT`` clause of the view for this to work.
 
 For instance, the following view has ``nominations``, ``films`` and ``competitions`` as base tables:
 
@@ -792,7 +812,7 @@ It's also possible to foreign key join `Materialized Views <https://www.postgres
 
 .. important::
 
-  - It's not guaranteed that FK joins will work on all kinds of views. In particular, FK joins won't work on views that contain UNIONs.
+  - It's not guaranteed that foreign key joins will work on all kinds of views. In particular, foreign key joins won't work on views that contain UNIONs.
 
     + Why? PostgREST detects base table foreign keys in the view by querying and parsing `pg_rewrite <https://www.postgresql.org/docs/current/catalog-pg-rewrite.html>`_.
       This may fail depending on the complexity of the view.
@@ -802,15 +822,15 @@ It's also possible to foreign key join `Materialized Views <https://www.postgres
 
 .. _embedding_view_chains:
 
-FK Joins on Chains of Views
----------------------------
+Foreign Key Joins on Chains of Views
+------------------------------------
 
 Views can also depend on other views, which in turn depend on the actual base table. For PostgREST to pick up those chains recursively to any depth, all the views must be in the search path, so either in the exposed schema (:ref:`db-schemas`) or in one of the schemas set in :ref:`db-extra-search-path`. This does not apply to the base table, which could be in a private schema as well. See :ref:`schema_isolation` for more details.
 
 .. _s_proc_embed:
 
-FK Joins on Table-Valued Functions
-==================================
+Foreign Key Joins on Table-Valued Functions
+===========================================
 
 If you have a :ref:`Stored Procedure <s_procs>` that returns a table type, you can do a Foreign Key join on the result.
 
@@ -845,6 +865,59 @@ A request with ``directors`` embedded:
      }
    ]
 
+.. _mutation_embed:
+
+Foreign Key Joins on Writes
+===========================
+
+You can join related database objects after doing :ref:`insert`, :ref:`update` or :ref:`delete`.
+
+Say you want to insert a **film** and then get some of its attributes plus join its **director**.
+
+.. tabs::
+
+  .. code-tab:: http
+
+     POST /films?select=title,year,director:directors(first_name,last_name) HTTP/1.1
+     Prefer: return=representation
+
+     {
+      "id": 100,
+      "director_id": 40,
+      "title": "127 hours",
+      "year": 2010,
+      "rating": 7.6,
+      "language": "english"
+     }
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/films?select=title,year,director:directors(first_name,last_name)" \
+      -H "Prefer: return=representation" \
+      -d @- << EOF
+      {
+        "id": 100,
+        "director_id": 40,
+        "title": "127 hours",
+        "year": 2010,
+        "rating": 7.6,
+        "language": "english"
+      }
+    EOF
+
+Response:
+
+.. code-block:: json
+
+   {
+    "title": "127 hours",
+    "year": 2010,
+    "director": {
+      "first_name": "Danny",
+      "last_name": "Boyle"
+    }
+   }
+
 .. _nested_embedding:
 
 Nested Embedding
@@ -1157,55 +1230,3 @@ You can use this to get the columns of a join table in a many-to-many relationsh
 
   The spread operator ``...`` is borrowed from the Javascript `spread syntax <https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Operators/Spread_syntax>`_.
 
-.. _mutation_embed:
-
-Embedding after Insertions/Updates/Deletions
-============================================
-
-You can embed related resources after doing :ref:`insert`, :ref:`update` or :ref:`delete`.
-
-Say you want to insert a **film** and then get some of its attributes plus embed its **director**.
-
-.. tabs::
-
-  .. code-tab:: http
-
-     POST /films?select=title,year,director:directors(first_name,last_name) HTTP/1.1
-     Prefer: return=representation
-
-     {
-      "id": 100,
-      "director_id": 40,
-      "title": "127 hours",
-      "year": 2010,
-      "rating": 7.6,
-      "language": "english"
-     }
-
-  .. code-tab:: bash Curl
-
-    curl "http://localhost:3000/films?select=title,year,director:directors(first_name,last_name)" \
-      -H "Prefer: return=representation" \
-      -d @- << EOF
-      {
-        "id": 100,
-        "director_id": 40,
-        "title": "127 hours",
-        "year": 2010,
-        "rating": 7.6,
-        "language": "english"
-      }
-    EOF
-
-Response:
-
-.. code-block:: json
-
-   {
-    "title": "127 hours",
-    "year": 2010,
-    "director": {
-      "first_name": "Danny",
-      "last_name": "Boyle"
-    }
-   }

From c229bee681459ac4b07c36dee093c0dfd8845739 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Wed, 9 Aug 2023 23:48:18 -0500
Subject: [PATCH 642/652] add disamb error

---
 docs/references/api/resource_embedding.rst | 28 +++++++++++++++++-----
 1 file changed, 22 insertions(+), 6 deletions(-)

diff --git a/docs/references/api/resource_embedding.rst b/docs/references/api/resource_embedding.rst
index 6e12171c2..4aa29d663 100644
--- a/docs/references/api/resource_embedding.rst
+++ b/docs/references/api/resource_embedding.rst
@@ -15,7 +15,7 @@ table-valued functions.
 
 - For tables, it generates a join condition using the foreign keys columns (respecting composite keys).
 - For views, it generates a join condition using the views' base tables foreign key columns.
-- For table-valued functions, it generates a join condition based on the foreign key columns of the function return type.
+- For table-valued functions, it generates a join condition based on the foreign key columns of the returned table type.
 
 .. important::
 
@@ -381,7 +381,7 @@ Foreign Key Joins on Multiple Foreign Key Relationships
 =======================================================
 
 When there are multiple foreign keys between tables, :ref:`fk_join` need disambiguation to resolve which foreign key columns to use for the join.
-To do this, you can specify a foreign key by using the ``!hint`` syntax.
+To do this, you can specify a foreign key by using the ``!<fk>`` syntax.
 
 .. _multiple_m2o:
 
@@ -432,10 +432,28 @@ Since the ``orders`` table has two foreign keys to the ``addresses`` table, a fo
 
    HTTP/1.1 300 Multiple Choices
 
-   {..}
+.. code-block:: json
 
+   {
+     "code": "PGRST201",
+     "details": [
+       {
+         "cardinality": "many-to-one",
+         "embedding": "orders with addresses",
+         "relationship": "billing using orders(billing_address_id) and addresses(id)"
+       },
+       {
+         "cardinality": "many-to-one",
+         "embedding": "orders with addresses",
+         "relationship": "shipping using orders(shipping_address_id) and addresses(id)"
+       }
+     ],
+     "hint": "Try changing 'addresses' to one of the following: 'addresses!billing', 'addresses!shipping'. Find the desired relationship in the 'details' key.",
+     "message": "Could not embed because more than one relationship was found for 'orders' and 'addresses'"
+   }
 
-To successfully join ``orders`` with ``addresses``, you can specify the foreign key name like so:
+To successfully join ``orders`` with ``addresses``, we can follow the error ``hint`` which tells us to add the foreign key name as ``!billing`` or ``!shipping``.
+Note that the foreign keys have been named explicitly in the :ref:`SQL definition above <multiple_m2o>`. To make the result clearer we'll also alias the tables:
 
 .. tabs::
 
@@ -461,8 +479,6 @@ To successfully join ``orders`` with ``addresses``, you can specify the foreign
      }
    ]
 
-Note that ``!billing`` and ``!shipping`` are foreign keys names, which have been named explicitly in the :ref:`SQL definition above <multiple_m2o>`.
-
 .. _multiple_o2m:
 
 Multiple One-To-Many

From daad21e9ec1b1275ef627804a298396b2d8a2679 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Thu, 10 Aug 2023 01:15:59 -0500
Subject: [PATCH 643/652] add note to impersonated role settings

---
 docs/references/auth.rst | 33 +++++++++++++++++++--------------
 1 file changed, 19 insertions(+), 14 deletions(-)

diff --git a/docs/references/auth.rst b/docs/references/auth.rst
index a25b08be1..3e7428f2e 100644
--- a/docs/references/auth.rst
+++ b/docs/references/auth.rst
@@ -37,6 +37,24 @@ The picture below shows how the server handles authentication. If auth succeeds,
 
 This role switching mechanism is called **user impersonation**. In PostgreSQL it's done with the ``SET ROLE`` statement.
 
+.. _impersonated_settings:
+
+Impersonated Role Settings
+--------------------------
+
+The impersonated role has its settings applied. For example, if you do:
+
+.. code-block:: postgresql
+
+  ALTER ROLE webuser SET statement_timeout TO '5s';
+
+Every ``webuser`` :ref:`transaction <transactions>` gets its queries executed with a ``statement_timeout`` of 5 seconds.
+
+.. note::
+
+   Settings that have a high privilege context (like ``superuser``) won't be applied, only settings that have a ``user`` context will be. This is so we don't cause permission errors.
+   For more details see `Understanding Postgres Parameter Context <https://www.enterprisedb.com/blog/understanding-postgres-parameter-context>`_.
+
 .. _jwt_impersonation:
 
 JWT-Based User Impersonation
@@ -71,7 +89,7 @@ If the client included no JWT (or one without a role claim) then PostgREST switc
 JWT Generation
 ~~~~~~~~~~~~~~
 
-You can create a valid JWT either from inside your database(see :ref:`sql_user_management`) or via an external service(see :ref:`external_jwt`).
+You can create a valid JWT either from inside your database (see :ref:`sql_user_management`) or via an external service (see :ref:`external_jwt`).
 
 .. _client_auth:
 
@@ -188,16 +206,3 @@ doing custom logic based on the web user info.
     END IF;
   END
   $$ LANGUAGE plpgsql;
-
-.. _impersonated_settings:
-
-Impersonated Role Settings
---------------------------
-
-The :ref:`Impersonated Role <user_impersonation>` settings are applied. For example, if you do:
-
-.. code-block:: postgresql
-
-  ALTER ROLE webuser SET statement_timeout TO '5s';
-
-Every ``webuser`` :ref:`transaction <transactions>` gets its queries executed with a ``statement_timeout`` of 5 seconds.

From b33bfb656d5d1ec233130b82f0db4b183d4b49eb Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Thu, 10 Aug 2023 01:24:02 -0500
Subject: [PATCH 644/652] add preference-applied for return=*

---
 docs/references/api/tables_views.rst | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/docs/references/api/tables_views.rst b/docs/references/api/tables_views.rst
index 469ad612f..518a58e2e 100644
--- a/docs/references/api/tables_views.rst
+++ b/docs/references/api/tables_views.rst
@@ -750,6 +750,7 @@ If the table has a primary key, the response can contain a :code:`Location` head
 
   HTTP/1.1 201 Created
   Location: /projects?id=eq.34
+  Preference-Applied: return=headers-only
 
 Prefer: return=representation
 -----------------------------
@@ -775,7 +776,7 @@ On the other end of the spectrum you can get the full created object back in the
 .. code::
 
   HTTP/1.1 201 Created
-  Transfer-Encoding: chunked
+  Preference-Applied: return=representation
 
   [
       {

From 78d9880607907a35639aa5ae11c27c3ec5bbb054 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Thu, 10 Aug 2023 02:11:41 -0500
Subject: [PATCH 645/652] add nulls=stripped

---
 .../api/resource_representation.rst           | 37 +++++++++++++++++++
 1 file changed, 37 insertions(+)

diff --git a/docs/references/api/resource_representation.rst b/docs/references/api/resource_representation.rst
index 8a1f80529..76c0c5511 100644
--- a/docs/references/api/resource_representation.rst
+++ b/docs/references/api/resource_representation.rst
@@ -85,6 +85,43 @@ When a singular response is requested but no entries are found, the server respo
 
   Admittedly PostgREST could detect when there is an equality condition holding on all columns constituting the primary key and automatically convert to singular. However this could lead to a surprising change of format that breaks unwary client code just by filtering on an extra column. Instead we allow manually specifying singular vs plural to decouple that choice from the URL format.
 
+Stripped Nulls
+--------------
+
+By default PostgREST returns all JSON null values. For example, requesting ``/projects?id=gt.10`` returns
+
+.. code:: json
+
+  [
+    { "id": 11, "name": "OSX",      "client_id": 1,    "another_col": "val" },
+    { "id": 12, "name": "ProjectX", "client_id": null, "another_col": null },
+    { "id": 13, "name": "Y",        "client_id": null, "another_col": null }
+  ]
+
+On large result sets, the unused keys with ``null`` values can waste bandwith unnecessarily. To remove them, specify ``nulls=stripped`` as a parameter of ``application/vnd.pgrst.array``:
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /projects?id=gt.10 HTTP/1.1
+    Accept: application/vnd.pgrst.array+json;nulls=stripped
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/projects?id=gt.10" \
+      -H "Accept: application/vnd.pgrst.array+json;nulls=stripped"
+
+This returns
+
+.. code:: json
+
+  [
+    { "id": 11, "name": "OSX", "client_id": 1, "another_col": "val" },
+    { "id": 12, "name": "ProjectX" },
+    { "id": 13, "name": "Y"}
+  ]
+
 .. _scalar_return_formats:
 
 Scalar Function Response Format

From cacbbc31fee8bb072f870b77266179b7c84c2dc9 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Thu, 10 Aug 2023 02:27:21 -0500
Subject: [PATCH 646/652] add setof record functions

---
 docs/references/api/stored_procedures.rst | 33 +++++++++++++++++++++++
 postgrest.dict                            |  1 +
 2 files changed, 34 insertions(+)

diff --git a/docs/references/api/stored_procedures.rst b/docs/references/api/stored_procedures.rst
index e5098864b..9aa28d9e2 100644
--- a/docs/references/api/stored_procedures.rst
+++ b/docs/references/api/stored_procedures.rst
@@ -420,6 +420,39 @@ PostgREST will detect if the function is scalar or table-valued and will shape t
 
 To manually choose a return format such as binary, plain text or XML, see the section :ref:`scalar_return_formats`.
 
+.. _untyped_functions:
+
+Untyped functions
+-----------------
+
+Functions that return ``record`` or ``SETOF record`` are supported:
+
+.. code-block:: postgres
+
+  create function projects_setof_record() returns setof record as $$
+    select * from projects;
+  $$ language sql;
+
+.. tabs::
+
+  .. code-tab:: http
+
+    GET /rpc/projects_setof_record HTTP/1.1
+
+  .. code-tab:: bash Curl
+
+    curl "http://localhost:3000/rpc/projects_setof_record"
+
+.. code-block:: json
+
+  [{"id":1,"name":"Windows 7","client_id":1},
+   {"id":2,"name":"Windows 10","client_id":1},
+   {"id":3,"name":"IOS","client_id":2}]
+
+However note that they will fail when trying to use :ref:`v_filter` and :ref:`h_filter` on them.
+
+So while they can be used for quick tests, it's recommended to always choose a strict return type for the function.
+
 Overloaded functions
 --------------------
 
diff --git a/postgrest.dict b/postgrest.dict
index c5070d1dd..f4aa4dd42 100644
--- a/postgrest.dict
+++ b/postgrest.dict
@@ -182,6 +182,7 @@ unicode
 unikernel
 unix
 updatable
+Untyped
 UPSERT
 Upsert
 upsert

From 005f9e4d59fc7e283c18f2a685a7a86b956bdf20 Mon Sep 17 00:00:00 2001
From: steve-chavez <stevechavezast@gmail.com>
Date: Wed, 4 Oct 2023 12:24:04 -0300
Subject: [PATCH 647/652] releases: add v11.2.1

---
 docs/releases/v11.2.1.rst | 4 ++++
 1 file changed, 4 insertions(+)
 create mode 100644 docs/releases/v11.2.1.rst

diff --git a/docs/releases/v11.2.1.rst b/docs/releases/v11.2.1.rst
new file mode 100644
index 000000000..e5cf84b9b
--- /dev/null
+++ b/docs/releases/v11.2.1.rst
@@ -0,0 +1,4 @@
+11.2.1
+======
+
+v11.2.1 is a maintenance release that addresses bugs introduced in v11.2.0. Also PostgreSQL 16 is now tested and confirmed to work. For more details, see https://github.com/PostgREST/postgrest/releases/tag/v11.2.1.

From 23790b7e8d2db403f8dbdfa245291ce423c2c6d5 Mon Sep 17 00:00:00 2001
From: Laurence Isla <lau.isla.c@gmail.com>
Date: Mon, 11 Sep 2023 15:19:10 -0500
Subject: [PATCH 648/652] Remove former sponsor

---
 docs/index.rst | 4 ----
 1 file changed, 4 deletions(-)

diff --git a/docs/index.rst b/docs/index.rst
index d803c4a34..bd4a19d69 100644
--- a/docs/index.rst
+++ b/docs/index.rst
@@ -42,10 +42,6 @@ Sponsors
     :target: https://www.2ndquadrant.com/en/?utm_campaign=External%20Websites&utm_source=PostgREST&utm_medium=Logo
     :width:  13em
 
-  .. image:: _static/retool.png
-    :target: https://retool.com/?utm_source=sponsor&utm_campaign=postgrest
-    :width:  13em
-
   .. image:: _static/gnuhost.png
     :target: https://gnuhost.eu/?utm_source=sponsor&utm_campaign=postgrest
     :width:  13em

From f975830d313c8a367ecc3acb2884b492b7db0f7b Mon Sep 17 00:00:00 2001
From: Laurence Isla <lau.isla.c@gmail.com>
Date: Mon, 6 Nov 2023 22:49:53 -0500
Subject: [PATCH 649/652] add Neon as new sponsor (#693)

---
 docs/_static/neon.jpg | Bin 0 -> 79105 bytes
 docs/index.rst        |   8 ++++++--
 2 files changed, 6 insertions(+), 2 deletions(-)
 create mode 100644 docs/_static/neon.jpg

diff --git a/docs/_static/neon.jpg b/docs/_static/neon.jpg
new file mode 100644
index 0000000000000000000000000000000000000000..5f4819a24830e1db09694ba18ca8d4b16ba634ae
GIT binary patch
literal 79105
zcmex=<NpH&0WUXCHwH#V1_nk3Mh1rew;7xn7%2oGLnt(Yk@5cl20;!+MdmhUMnMK9
zK}Kdl#{Wkc<QW(kSs`XKKmj8YGYcylI|nBh_x~ddTLl=H7@3)wSeRK^Sy&ht7;71s
zm>F0ES%nl09od8f6WNstMT{CJF62;l+IUbj=;8+z<D{Y{PA)NV2}vncHFXV5EfZ5S
za|=r=XBSsDcMngm;E>R;@QBE$<doF3^o-1`;*!#`@`}o;=9bpB_Kwc3Nt35coi=^O
z%vp;TFIl>5`HGdRHf`Rrb=&qGJ9iyAeB|h{<0np@x^(%<)oa&p+`RSh(c>pipFMx^
z^3}&rpTB(l_Wj4tUm$-mGB88D#R!TEkk`=sCCI?U$i%|J%)$=x7b8<S10xf&APcLa
zA)An6AbVn=u#!<Dhlta}g&PlYDjNrV5KSt&$R(y?@=*07$ZKGq5$CZcvU~>j7{Xt-
z7<iZ&8JGl_1sUua{{7QnSisc4#V|^Z1_6~*!O!E5_rDGN(EY7uYs8<_wVw5ls%Mw(
zxV%U3;nU`TkG4;Yye6t%J-TP|?VB%dRo?lu^xM|TMA;`{+dG%)Ev?ME*8Zj<y0N0U
zJIj1};#3_TwTIEh$1DR622b+y6PVTVDk*EV#;%C0(pXEs+3Q|hp0%Q0|F7b{>HD~A
zr40&~AD4U^bGqBmBI8lfImU-G5<lB%AG@$JOeC@U$ir1h1vhm1_3}!!4$IGbT=c5q
zmW5A=QAb+E9i0#PpMoFd{}I{$xW7An5`X)(D)vKf<<GFOZQZ)<V|=Gd|7mWO@LAjT
zru}kO-jSK~o4xJJ>)8eWqGQhmc-7aO+#~+5XCGJO)|jx$&dtHWD{c6AtzT+|7)%vY
z^i)rOTex+hb^J|Nv;L3MkLKT6`K95pjc<&7+YLFn5B(~kA}jnkn-3M%i(Fau@|bDH
z<InSy4uqUc^(ziq?f%=mb<>$JS^t}-r8^3G!#|1b{&@Lud>6~hNAlhELZuOUY11lm
z*4t!1(lojIX;S>j%WR9biCyfO>XG|)QIm<Ha&LfE|E|LyuJa~Tsy3e}$`Wcx77dyg
z*%G=lVc*?!*K2d;^_~izvgF;J+36qS>c2F7eBK?VG+(IV{G(~bZAZgbcC2kY_VK=O
z$f>JQmx^XBoT_umGEZ#&o~u?8Il59J3$sdA9^x{L3IC%ir)K}zFnhWESMe)+^`DY<
zJ#9UB^FPC;hue489h!FiVvY3MpZUcPA0CYf`TnR*v3mEO=SI7)ul{vzZ|SEOUN)YO
zd_F$nEt&tDJO1N;hRMud*JVE3P<ENSZQK4&kEZSasW$&Zsa3dWVR)R{Bi{N~#WTz9
z|9!rE{!cOX&KeJPJH_jq{~0!H{m=07-^7^7hac+wXSi8#ee0Hmp3(mqRDXUo?-%*#
zef@9h`Rn;VBF~imXE;5t|GkWj_ao>342FLTzWryIu=YR0=g()0{rOuw_peU;x_keI
z<=_8E{pp+W(OpFM$7K8e42O>;-#;(7_UoT(-@}BD)TzGy&%nvH^L+i=>VIsN{~4zD
z)$1L;JTLO$hiUb1Zd8|lGx_@a@v>zfAN6Te?NfQg`k$e+=Xm^|9lI|7lbKO5{YXMW
zMRW9jhJ$Or|7Vb27y0nR`tY{HKh@pl|7TGC&%j%}$|mrrRD8$hZ|}CBGv?LZ{^!Wg
zN&1~OZvIyPw)g+$x?f#?x!(C7+s<@nu5E`OzJKaAuRHGI-O9Uj1s~O^$A1n=KfC|e
z>}T@jzYiLGl<%~EVZXM)wlw;my>-{qxje?V`JH#y9h>!^;dY66zwk%<zao{Ncl~Er
zxG&+$r~eF@_s_=r-I@%tj?Mm|!nO03kPzDb*Ct%&#l!92L~?fh)`<Pj@MM?%%eexN
z;?(y3XSinb?f3oP@dlUo|2a~pe>y4kqkPBl*!n2-e}}gJXZSPm{L`4pOWSk*J?i~k
ztyLCR&$ssd_p*(9D&}|I3V&qtpJDI*t)KbkzVG<?<<i}C_Wy+Z1%>}JDE`f!_dImp
z-(uUMbA9qlrEG71EBW*5_SNry{ALvD3)f$CowxlzLvqbw*XRE(UM-LBH2Tqf#9jWQ
z-L>=adsp4B|M>66<5$_!N<O@d3|KPx<(miV{=Gl`tCqWS$JF|>&hxfk|0nvH{d@hE
z96uY^M}q$u4BuuvzaFyhKf~jH`=4K*RPy59tEt*QgWKkL`^WvO+MEHl(|KO@rhnJY
zh)-MnTI`KQMgI}ot#4E6?*#p*e_Qo@ipJ_&Q|-2YS6=>b<z+sVN7?@wPCC!4e|X>E
zKf|;BL+6u1KZ<v>abEwre)+ex-{pVGeEwIt&Z?{L-nsez7-ehj&5nQmD_>6KQS|yB
zCycj0{kwWb{JPh#rSjJ=`l=$Q_>nthZgr&G^Wc5Yum6kww$9UO`k&v+?*C9+zHXNE
z;f@~@xBO?g#`C^<{g2S&e`aq}er6UgRM9>E$Nbk0jD4lvZ$36L{Qb{RQ~!1Kv_(s%
zO=$hka9Flx+wIu8w|V73kMxww;&1=FyXSLE-TKx487ltmbE}!B`caJI-~DTQ?Vo7Y
zzMlW{{f(~{&*hfwSoUyNi^;xKhL`Scd3}GqzrI(yz(@I*{|weyx9hVWf8BT5$L*Te
zt*mP&Z~eSnG5bie{l|dp<n@1!=I<`NRp6eJJa5lD?P)QymP*`?tqj{`y>{!X_x~CA
zs;=y4?%495q4mx4tIuY<w#`ld{XMtl>rLCs=O-Vzry~E^AiLq~<FNg|zU}x`*!QP=
zomHQB<}uqflU{$i?!E2pkK7lR9`Pw&{Lhg0TzmbWo{!g}|1(_vy8pCqcy!hD!|VI!
zi~ccRdGn>%e8D}X`OEI#Ihdog{bSf}!KO+s*Q@~dy4?>y+w6GK<ojVw-Y1pB=1%+B
zd&(ZvgzT`lesquX+~#=#=YNzlcAhIVJYn2Z=R57WWgTPav1cZqW!TsS-8rMBdGxOp
zTI6Ie*ckdcczMf_tE=1R+OPh1{^9$ce`-%G?wCb7_g9>n7T>ept0gnwQOvX13#0N(
zR+zkeoLr?<Gv&EcR!B0t<}ohMm4AOf*nivp(SL@v=bbi=b~7LM8v1za?pvSAHg~0t
zV3TC7X|9rV&~%}~UC)CzU9%E?DrVjOaXHstjXz!|R$Xo@jb=PLgXQJ1r97v3-C6s3
zHMG4fa!%_mZ7*DFs~<1ldgj-^x7&+<m$&Sj`cET8bfvS++UbRDadS1UES&jJ<3Zua
z#lEH*4~uO!O_M#g)z@<MGYg-KFYa$Hnmp<Ee};$ZZ`D7%esnqd<uvo6iu$8PE|Gim
z*X}8djq#N6);<2s^ws>0uMORQKl6B)QR<wZZ+iFG)a<;T$G_DN*US7+K2q+^*nH%?
z+9S=&MbjK-of7#dx|FMMW%O@jQSq-i=jPZ~Jmv~o+Fz0pdgR*a4_}g=?BDvw=;QZB
z8{d+mKXPizJdbSE{OsLcT<J7VY0pD1Q|<bc$4b}4O_%fEJ7x0H%CdjM!f?@e-NP5U
zC;j5upJty&<>n1_TFif*{M}lg>-s})^B?0M>9%v9AJsmsS{ofUF=@}153Eby7@kg7
znKtRT?$+m>`MRmmXYCHXjk|T|=G#(Tw`;GsS9^P}zp=;c!_|+<ZKZP$t<~w9>$c&G
z@KmdrTV9?DT(LOFsORN_mwtM4qqf|d8`V{kab>wxsaEiR1_Qf!^8Oq@gn8Us<3y7T
zEZ&QKydiPrT=A@li~A1#C~iI;usobKY#rBHs~bM$B9Aw0UEF(m)0>?1*3%m{A4;3K
zOjx}ASi*;j{ReaXL#~$I_4^%p-BkK-a`=^Z%l2I<^$mJg>l}1NKQDI4j@^6r?V6Om
zdiBgDX_F$KPklP^#^#MGlmGg9P32MLipbHGvZ%4;aGNS6qIqbll*xj%TqQ4qdlI<{
zyEgTNgoLh{WdA(d^z7z5rL)F7pY6{Y%e=QbyRr1+&t>_ulM5~TGG{*CXsQ}6+<W}-
z$En&$8)vNgnyNMRqeRzMt*a~5EzbqzPS8qbne!|8=kvX(LFN0iU;Wutf4C~^T*R@z
zx!2GCnfjmM!L1_=LiOiG&swgnuB*T9`u%6gA<k%D^X=95|FIXPI^Vv3dAsDV&&P8L
z+_I-F_5Z>Bwf_3gxq+=)tN+QxKVNrUhq3X`Im1~`=DPj4U;k<2p2XUJ@z1Zl{`@xg
zp15uQ1N-x@56D)h&kFYXyVdV+`F{re@LJu)R>|BoTjJ`<cGtzte&@HM@OVyt@|P$7
z(w7HRUDtWOJoV?dfBR3o=rIY8x_|xGm)G^){xOs1zfQgV_1~6_mpLk9|HXf(`R9Gk
z)vx7W{PLLVI?wmlt^cs;^S|x4ml?j<`fqFb>)hYj+3}HAE6y1iHduc>UjK2O=efTn
z@9+L+h~<6k`)j{?c3tfDpH-(AEoA*H*F|1=f8TZa{PVwVylByVy?*}P>(_3*`cfsV
z)%bOt=at;uwf`BO{;i*RSt2`Sw{2C`ZD0NG-!D{1{wlXPr#-DW?B411U$*c4&%nQb
zk-&A|U;A~fV&;Z?F#h@FT{ZKI>iHj@tPEZhf4%%)+^)G=wnG2*r95D~P(T0k&$4x%
zA$$M)di$$>`m0=yn)~NY$Np!~tzY)QsPJ{n=DFMIO@HdYez)<mg!Vu4s+;<+{q2^l
zT9ADG+KyKt)%riU|J?sMmrLtc>0kX<Up~F@61K2>-Q>Qt=v>*peQWn0j(@#ykK*^;
z`Ikd~-9CRZ%d>%f!=L@<qn^z5eS7O))%Q>PX63K@Yn3SPeS3ZF+r|54y-qLBYmM~y
z_4&BEZNr}rR$ty&J?<*LzjxPd{~!F}FRoY5>y?U&-Lmy<_4oIiZ`~_1R?WM4euaIT
zf8ad+bww5L`#i5){PySVr}x({=jOi(Sbq6*ZEou7%g?jlX59AM`KfNl+n*@~9=5gB
zj4xw?SKN=C|8)PNKmQr*{d(kP|H{oR+4O$de}>YzJuhcVKL3^Q`Mk~Vrpkk&$1Pvh
ztAF0_KRx_=iLIB(_p<AYKb3#J^q;{zH}^tWkN>x4{m0qEF7Nl=;m5!H`HjZorXTJp
zowZ|pJmq_h{E=PR*Hw=#t(zPD^Zv#!l{&gJpH8~{PsG6Yb#?ug%jLVbPyO}vlik+!
zA7lPal9!p}tWxZ(eAL8m(or41izh`UZm4+Dd!fzUjdALfwlIb!j@8S9N>(|o)jT&h
zs<_vyRP*GarIrU*Iu*=`nvyQ5s&Pu!V#}<|MJunY^je~IX{A+Yrk|;1=yJ>8m3~W9
zmU12{$O@RFGG(#Gmd7fyGMAjcTz|9q+mh)=f-~>)?o++L`t>G`HG6a)t={RhZ?{^Q
zcCL8zEVsk2H>D<C-m0E(>&a|gz0<FYT<tdgef>cE65F!!VCDmNN_&FNK7aFJC%a(M
zs;J04e{WUPtTtV3o|*PJH~3)ka=n~eUJ^O}X1P|So9(~Izxep2d-c4l2MYK*ByOCx
zoWJ={!F!>ktf<JdzM2<K8CPwU-#^Fy?()Xtr@SJMTq(G*F6Umz>$Ls#;oltpt`lJh
zV02(*7(A4`#lNfavTOIJ-*1V!-m@sWx?lMIiFvXg{N@+QF5LCeY%$OK{Nj>{$DY11
ziT18OoApgo>YnwDH{#yWr=#b(-3t6>!+q%Tqk9U6Q!f>_u}!Mjb8d@N(DJ6m8k&dZ
z%nn=Kxzeg4E2!UQ<*s%6H_y>Hr~aA!()X9#Ex*hvbmteI)p+<ZCUVA=cAgJnk)5IH
z&XPwf=kmCGxUnYIs^nGi)0<-4yuIf)ep%(s>n-c8*B2<0CoDemq1O6m`oUMW$`*%Q
zDP5cN?RDri)9T-Q{X?(3e?IBe_kb(;&nLb6_U+TNw952dyLL?Te5XEfmS<}D#FIL{
z_1VG8-8r55q<OvO^4Q7sTA65EYHGDI$#e}~>NQ1lilU!jKu^$?pun(={~6RH*JaKs
zWXqlT{N}sFp0k_hyf!$Nc5`3$j3lk3k3Z+7&v=xT^zp}^JgqIyqlLSVC9S%8BuV?~
zlviP^!%EfFHO<084xW7dtNcHMyw|Cq{gXa_vP|awS$63^!}aM8H)^e``e0jIc}#m&
z@$db%{~6Z4U3zYYbNYAHzxnk)R8Gu1e!8L3(zfwGgT?n>GDYW>`|aJG`Eun|3GM8)
zSHInMuYY}F4o~{)f6TvXZ5h^ip0Bq1Ui+V6{g32D2Ic;%U;e9a{<Qtf#Bj@B@+<5f
ze_oe)?t1v;%i+sb$G`kn8`!%gYWsf%_ILl*FH97cP;Q*lw|wD$2HXD(eA$yqP5xTH
z|CjYXf94*=&-K&he~5p$^knw5;_A5fpZ?mf^;_Y*=-$1#aeK@5?TZ%D`eOflJ&VkL
zhF?G5WKSv;x@i0BKf}~F`^vvuJMNNvu|6(mZn)(M`_q3Oe|#OYdEVRYPrpZI-n;#J
zdrCf6{`36Zr_V>n{;GKvdXC{i{rr!Av!^Zf&ffiEcjf-+)$y(`FH5{nUBA5Eu6y13
ze=MhVyIK93^?0uL-TSro?sdoRHov~E?PGWSwUfEm&fS%Je6{#`<LlRNY+uhRj@Li-
zpW*8D+<&nK?fKgKUp;w{(l>wRe}>m7zv_Rzp0w2W-+u;w^XE_h+O=$p{rd9Nzq%-4
z#>W27*LFO$zP~-}*MEkIdlGZER=r+#uj@a<he!X|KYdx3dFAr2-TxW%Utf6HB7Q#m
z?_ay{my2GPR!((zdF5Zd*Q2>^U-tjuSAG8cukK^H?&~Kjzh?W}pPA_JT!oM0`5nPu
z;X2PImDPp6__OQpa~I{jS$qF<bM1WJXZ$**c;)2}Z<p6!{>OM>>eMD54d&%6AMEw^
z_ZijhzOM3o-(J(ZThmKF?OR)!x2rU0dHM7DSLeMWvtQqLwhEpzZ|{yjCm(<O_NG>Q
zQt^L=w)d;9e|o?1)y39b(b*+?*L;sH+h4bB<6M22CrymZ8)R*((^dE!n0FjlXL;q`
z+34M|>p#7|9h<wzRx9LvZgt7E^Xslx#hrbf{>eBsZ_n3nZ{NS{WAl$cw&S_^+PU8|
zt4eEY-u?@ZTPv0MI(7NFT`zyVFWa)ce72@6<MEind5>l5_6N=bH9Zzz5B(AU$+P4?
zgYo61z8Uj<<Nh<0t-Y(i+x2>ouVlk@lltFWFYkOl|0^bL-@ZLXg~z>q#0xCD&s4ZS
z{g93K=l={XIr(>=>{@^Lg;7TRp?R^(_QxH{e)jtE*W11|+pfyTg#S2F@50KUwOLtv
zv1qE|)G1R_Q!ROxBs6ib2spB&1ozBQm2};4$|$I3(Vdhzv6p+Mtz5Ql)>Yep$C_?l
z0h4<cU0JNLZK<Sssmf(vlS`S)W>qb#yI6PnKZC^mN5>mlqK+Pze#}lNJ6HRNPUzIH
z9IAcJOR|@%PB^*pV7^WG?ik^fH}3oBzFnKXrRP7x$~cA}bM*yx*an|jtu@E@a9>;e
zT(hO;dzJ<X|2up3$$gWUk6%`VE$`Ygx#EwS-m1k;tvM#~zYcyW{}@!K`XOrRtm~l`
ztJ_lBPZyuGIAwG^aHU_q&bin-i=NL2To^S?e_H0A!|Xk)R$MrI?Xcrt?f6~u_qPtB
z>VuU*gz*RWe+E|FA2SOdz3&T~&;MYS|C{{QU!rptZdWrFnWy^Eb?dUdtM9w2Bv@-_
z8vV%kHS{_At$ME6o8z0`3N`-?e{jv0XMdYk+UB0Rjq{SS{Ab^L7GcBlDzV_plG)ph
z*2|=(YAij=^<nSN(EZP)zpboT-T7F52^;s}Ikr`+l|M{x-w<KmHhoh`)<=J_hXpat
zbJIk!9JMC3Y^vI0IQ3L-ruVBKYgS8Y)y$7rwe;sb5eD1p`JZp!{&oG;rupH^Q*ZzI
z&#<oj=S+^cTd`l_dw-RDjh{3z-16Ih2Bn?PZP)L2*>C>0N_myY@0&mC;_4UO{i3rf
zrKn0qz~S2;_T^qr=K6m9`Q=Oe^+zSg%r<S?fBk2D^rQxMucuSq&HHxud;RrCB~DVW
zSHIqOuWI$re^ULS?;CHgUsn0}%eu(3<+r0tzx-ZX`|GyzB17-IZTsW)FS~VnVQR3%
z$(NVq|5iPn^Y5?8wbQ@;=9L_h-IxFCtBTCWm`U@#)vf=t|NK9h7cEx$v;S@RvQcZD
zrERUP?eEW*FYQbZ_BH$S>(92IFE?J4cr$J8_Upf@zeG)5!NT0XuJZh4`*w?Uk^cKv
z#nwO2x7(X{$tv^kKmPes*Dssv8R}hKTYvuN`>rQ*{q5(wKH0y1@0}MtWtaVZ-{$_=
zy|*sq0OQN~G2trDYrox({aY`cS^L#0nfvvw-LKdC@4kHc()-Z6KkDayzP59Du>a}Z
zU;kFsvAZZfO<nx;-`;BBMP+YnYwP{v?(W-qJZSm+yW4JSf30)-*!v|)|Mf@pb)M&a
zzx><sxxW2w`9+SB=yDOJs&HMe`5(kz{byKz<wZ}}tjwpoKi9?Hv|68Fzdp|R-j3&i
zyT85Pdi`PktG|97NB8|_DEFTfYcIagz`=0hiT9IZHm}$h-~FGVar@m*<}KD$=GWi7
z{rOMJHK@|o`2LP>{~7Fi3(qaC(!KuhSNy*Di=tO7T@)98S#6!?m91ZYzPtVD-@ex|
zFIr4vzvpiZ3-YV_`u>>JgYy3jwyXO}?Y{oBzjo{O(}gbrmrdKNyM5iZ`_DgZoUbV}
zr+AW;+|1XF_bnvf#}u!;_P+Yp*6r&{FWqln=_d8BDz;?5ugSiB(=VKv^6d#v@wr-y
z=lg#=NZP3$oNIFZz4zs{=Yx8+mo8nOx^~a*(*5DD^V&+<SDs(*RD3-C#OM1f?53Wy
zy!HLw-`v-wzv>UzY87nSI{C}>=+&9ew{F?DtmI6kO?_N_P~`*u=P{F4)|Q1`KmSkO
ze|9auSFiQ!l(*Ntt#!-qFQ1(E=*8Q)#ctoPZh80fWjV*6`d?Q++9{m-!+oqf+D`b9
zcm2cJ(zn;$n||?Kt(d>x%|6DPzjxfx`ug{;d9BIk`rh;FSO3YjujXRVV1CJe)BU(m
zh4y3nwndZDe9e!(tC3xCOz`RFlxr!SB}prGa=c!Dc<Jhx+%sXDVppbiMSA`{{o?J>
z%@6ZMinM}PYCN!*mfu#m<w|Psyvn&=g{N*c?do|vC;0T0)lpwQd_JO=%6Vn~`*^o=
z2J<;9)=vnY8|ln=RH#O`Z`oq4d6z2JygaT|2+}b(==5T(Z+mr2eY~FaT20me9T@+r
z@ZV<C_O<+p`+r0}|Ksbs@}J?sT>0(l$Nn?ixOM-V^2Q%~`48Uz5w_b-$@jNwOofoY
zz<-8AhkiIe;P1-aeQ4ze=VRPU>r=M(Njpn?6kGi5>1DPhbtm$9dpGD->+k=^_`&^;
z+r>5i87`S^IseDId;Pz*UCeQ(-`78p|0wOY`9Filt;_Zw_4M}tl6t{gt-tp_!-V=H
zxl-r<DrfurXE?HB*MEi=*$YhH?EC)D{Y&_N2A0zQ3{7|coxlGfoS)^#yyGqx9{*7O
z?e)i6eAe{-{|xD|`A4VS)4FoJNjiA@#*6>dYV1DRe=~2BKR%Cb>Q`BHw~xM0>ZC7j
z&1b4O_KuhT$Sl`=6Cd$2RLnm1Kz;x8KlZQcZUh*>W@-7)-~XYd|MsN)AL06Mia+-M
zPKy3x)cu&}KG%CYnW*)LZ|+I>$J8J5pP}VH!=w7<eKK2mA5HmiyeHcC->G=fxd|E{
zzJ9+Qbs$1)i@4e+2L30r|0!o&tA8mSmHtol==J{$&aq6_H~qf<lbys6n)o;TKf^(_
z`UeZm<v#@9zw!8R{MOd<hcfE8PCt^Du6Tcl{lJ8ZhyN6hXYAv;X1~d8;eQ5Boq0kZ
zy!}e`zdpPEn@uqD--?)+{|svu2=9OVBcpCwfWZR(C(r+Jt^CixZuu(ygRlPW;79sz
zI`e;vMf^!^KM=)!_-<}Zz5QFx!UvqD&X3o#WXv<jPWy1Ap0y@zo3oGA!OKSu9}$nw
z5&O@OWf(QH?!1Kd?pvqdzs=V-{=6E)+l=c|zwiIV|D$(t<bQ@Gxta5SOc#&;%Ui;>
zcly2m3@7X#nf0dso49pZ{iB%J`Y)yzq`t*h|7TG6&(Lwpbp9{5Ycu~dbQYHWXSi_P
zA^T?S`#;UYz=r-y@;_9?|HxckS%1*CKIcAb-N|tKjjjC$EB3@bjF<m0<;OSvTU_-W
zMw!nK%1P|~D0P#c=j4azgWe^k#%Vfd4_<%!@0iNxBjTzx)0p0U%gnj={nkD2oquDY
z$@zIr?4$n-oHh0zws+JNK0Yr}QGU>l>%+AE6&3AA>kK}YZC_TAf9Rg%1(VsC`lYeO
zN9+`?<>hRdEAD<-=i#jP0aw0i@6OiN&R8<<S;Zr_0>(eL|J~gGp>+8lVdHOUJFnSj
zekcz5xc%+qkK%q-dneugBe`+=#eKpzv#Ua{E)l%>I$q*WQpsQI;7g_%&v)*)w8#I$
z?8EiqCYhIx#am^U%)92<7;8H#{d4he_xgj6;y(oBcZy40oBiARkKzyJ-zGoee&+D?
zu8ey*>;AF(UAts9DE_X@7pqwH{_uYWp0D23KmA@j-1$RU<Xb>%XTF{aZ^47F|K|T;
z{-pkx|Brb2Kd#>&PwEOEo4@`3@wL1<>D3+V2k)l4|D6{(_dC<{qCZR*>!kcw9AK86
zc5BM^35r}{2B$a}ehMFp-#-8C>5mc{f3*Hi|94H!T34dAzh{5O`tE<~cZGUa3)koV
zIQF|FYrodQQ!5@YXo&8u`~EL|%F&OXAFtheVPEs(@S`jAU3xY4v_G=%N!lf}Q}xMj
zr)+J#?>a~4*F962<mbzn`uzL;&$hb{)qe=||DmDYu%>VJgZ$g8za9UOHm88Mz2!ec
z=K0=vvYV{y-sP6mOW!<D*w}yfV`E=a!=}%_@Bf^iU8DG)p}BScgN^?gSWEWWJAb(T
z_V`EXqf)Ldhl2T!zUQy8`f+#Fz2)x?N8kUk`_c90n&ijT9ZLioA}Xd?K0dug*j1(P
ziTuLf+P^L94?f$!b$LsAyZ_&n_NnWe?4?a2a!hVZl+JIJdfsivUUB8_p{J&{)p3)f
zXFq!1Qu=%Lj<S<-6BqnQJ|JdzSNqM*wtFF6cf|LCvSa_t&EE|EGc-@Be=v3aHkDcB
z?eFT0@BBMsFQor;)?FL+-$7BC^}M=zDO<N}ofSP-|55L@&FlWi?%29-_q<qphs$66
z<umpfTwABx<^E7QGksfIK>GV8E00c<yiM*(tB)%gl#~=m#!7mIg#~eKP!VusX?Ea)
zl-W#s@BC*-+q!e-?fq}QefHm6cK2UMuG-xjxx2SLF1y_GoP8-nJ?ng=ibwYysNxa5
zeN}b+{67pN7clbjf8;K%`q}yHKf^(@Eg!|ce)g%~y7%M+_Z|5f(%-VV_ve+pQ!Gzb
z;kh7QJN@MDKU?fK<=>e7?fT#O`yVWb-+a93KSO5z&D}>&KFVkMu}**Et6RSBZ|2%0
ze|UauTG_O4JEb4lALSjl?cVpFp{4k^op|<d#}zlYSD!TxzP#RKzQ~XG(2wlRHO>#u
z3uYZSzh(skBor7H@IU|kkGu3g1MAVf{~4NWUfXZ(o1FRE_}0G*$&cU7{OBDx>Cy8?
zfA(|xxB4H>-p_DbM^hx8XP;tyZhcPup}cdKOlF1Ou;1*|vgdbVc7oqu-OpuzC4YGT
zXAs<yZU3crt?_>bp+~R(Gb~)!KxPGYuOc|wPVK|?wmlxXtrI`8H7<UgcE<NxV@7GN
z)vZ6bIsdGv`N)3DX1(>v?lU*{pXx8Wz;hqwIi?2tDeL>9K74dPHorSg$#dC`=7=Bt
zkF9T8>d7vdTJo~Sc}0Di<1|ao+~wWb837C%j|#c1TD5@xot^Z;uW~Xc3VI#=`KP2_
zS>?v5@jK$7W_4!fwbIJxYVV$^-M+f5{`mY$%pKz5Ki)sq7k1iP6DDu<(YbHq4bDgE
zT2qs!g+9tT{adSh%G|3qdNCVzM47x<?A0q(vRLAfVArRwK9B9E7soAme!tqfEdKh7
zx=@bV-`lfqpZ@iqK_w#O`NYPTm*-jae|`xX&e*qa{r*Y+_L|&ZWLT{mfA?>FtY`ML
z;{D5AOZFQt6L>RkZ~WK%9e-W_cI{7^&r=ihVNbo7ovw3r?Zer>Prvr({NZ=)SFM?B
z8n0F6mfv@?Blcfj-X79-*3@F%nm0PSdL^$r)h{pIy=z*oU3NuYz0Bixc1NFDY@eKR
zZmvzNR>||;W9Q~%?Xg+4;>vQTR;yJZvF@ISmPT!E&Cm#KQCJ*iJjMRn{RPu6xVQX?
zdT14A@Z-3%{EUKi$-T!P{IG8RP}y3uuC2QLboTYrn|VH4pD{Z1#W*8j;jD{C9~9l$
z&)R+Jqp6`}YE7En+L~Sar25pq#M$4t{4KdxQ2e2I`w7<&*7v3_V_F%QE_tus(|25E
z_hxIEX-S^ypN=1w3A<f?J7V^>+gojnqP}%4S~NXnlJ~-Yvx9%}*NUuk5_$Y!Kktr1
zhAlB4_c({;x~j~16>=^;XvwU&FR#3UC+}IRu6DcrkKyq*r~fm!bRWL|Lv&sJr)x_;
zZWq~o-}1=o{X5(LGdxwB|4}90)&G~VjOl-d*2wSw8ElWrZ#@3yj8%=&hwt)VzOMbx
z0MayHc<<*PxBYh({%1Jl{+~g}^Gn!&hQ-E*>wkpL|IhIGLHv*8^*86#pH=?w{U2*~
z{hzHXr%M#-Or4k8QUC2N>(8M0Lhl#8Um~I_Ob^%p2%TU5`A+#C!}o74|7UQSeE9wk
zVX!re|K>ij|0VUv?v?$YHQ6r$zeGk?m><sm_iXd~f7RXp8F;FHoAk}+tg*3w`#kzT
z!_&3ikJc$xKP$cecc=S*hN<HJ8HB>WM8|(lx5)p`z_t1QziReBhTq>@{m<Ys{qTQ=
zAEIDemVUIW`F>{ge})Gp`+r7Uzp(wqt}StVAMXDXc|QNoH`)ITJk7t&>MyE&_|Nc<
z<#qg@Eh}rh=ULx3T=RbaZtwpLQ>XrC5Q_g27hPd{xclF;&FBABbN^@HY5i^1|8vPN
z_J1s|-G9EC%HL7Ed|zVpyXF5GPVm<9)b()Zv+pSW&%jj-Rp0*Gy#As(+>WJx_s_BY
z_;voN`TrRdf__Q<l?c1X|KT~<O<zUoPR!q2@$$oBkSB!K{Ac)dX;I{}Y~7Dr<6~E@
zKk8_>e&PCyz1HhFEK2L|oU8m<pLHYtM@s(9!~Z(n+y66sP>%f1@N};Kw{z+L862n9
zy{P}B{GXxI{FjmL9;Js@|1%UvKL5{P>-wLe&HeA3`WI7P$p3)Yvh>-{$@j&B-?jf|
zPzw4b^H*|O_aQsE{|txLy#LQIZ}I+zlj_qI|1+4ZcKDN5I{D96tNCwj>i@Ew2Wtrb
z<9Yw$;(xvJeE%69x|RNCIPdVEq0RH}oc|0jre=Vw=zqHMip^n(???RK^@DAY`zsZ8
zPpIJgKauD4f4)fnXW;4mZ6UXxtAzPKL%!7c{|q{>;><<9ueGf|{Lgj$BJqn`qwWcR
z__b|UQt|qKRoS1F?Kg?PxplWrxT5C!v*%I&8J;fR>U`vS_0{S3|1&ULtQE5BGrWCh
zPGkL@W5xd&&fD%@J3q+yx7@$8>gx~r^9#N&UOWH!s=r#bd*h$ixBryVUzC6GYQ`R&
z6QSGwGi07C`SPEk)v*1W<=>fo#UHv4FSn^bes24JhSPCY-&U5YeV_b?SNx*)i_fxq
z^iG8TJ(DiKF7^9&W&4fu-yABQ-y$b#`JZ9=+T#BV)9%*(y0Y!w+x@{Fe?|ZGZ@hh&
zr?dV}&E0>M6Q9XT*eC73c~8IHPXF2-(+}TnAC6P~aJ_wNzEFnLw$4?r1^mU9FSup5
zIXl0Q_1?nrW%nZEy%V;HZ@d@j^D?!x=v&auxS!?|{?vB}`Zro!-~Vgrk-UF1?F|3b
z+pS!_^20v$TCqK%ix12Ro|R%F?yPveNT=QOyiv_@tuw|}rkRgF^{D!sYSp?@XmQ4m
zUAXP&c}^KQEr~U{k<Ppw>vdFp^t5j#W!6Q8|F}~>+tGoQA$r5UotNIP*{ZD>#eLT9
z-K}5OQdHxlXM0YnP<0EEjIvC2=i$%_S7<(4ny|6-gT)y&YhKHsBM&~B7)E4m%rjaZ
z&mShb;!4kCKciL;H!tsqEwiqwl|1-3_0yX)e)-mwS`ll+wE4Rahc*|^wQ-YLlO4EH
zQf;ZE(-LJ>jor)Et@#>%(M4$K5rgycnkIp#+W&S6SpDnK{<~>ukm<_cwY-U8bF^H)
z_dHrEe{k{N%ZtNIR|c)+Z(C~-+W#ZV)z7}!W$VHP0Z5Z;^^@lRk-7PwL397#ZTsKd
zuKzl5A5#GPgS(*7Q}&Jj&i`lF!hTHtX8L3KhC2Hi=8yNbf4KeV{9)ZPet`<-qq{^-
zY!@pJTr%zZth$Big)+a&c0RmY?mO?Z^GEwOQ&7pl|6}ptTW!l9{;l`DQc~;o?NovP
zum229^=s_^2p0e2R{k*gAJ@?jiu!Xh;`#Syt#8}qH=q6Z`KD>pi**EI47*O+sr@l+
z58Acss;Pf#o#wt&vyU-%UsWA%D4jj=!F`b|tJ(F3tRJ11XxJL{{`!@_%N8U$fX6l1
zAE^J4`TL(i!{_h1{crStTh+hz{Ug7C|5FyY74e@T#QujV^S^-4AMXD<?SDM}uaAb%
z?dSSu=U>WY=3@BIpz)vKhgI>vVEf<B{~2zy|F*AxHRVGn)2qGm&xL>9huMM@jv|bI
zrT;S=TxI`hrhc>hH*Y)J{|v7-U0Wd@`r<!>#r#*B9S${cG5itx&(O5zKf}Sg`qcS9
zRM*X4S!1@zyS{(_)~83?<`*vc!}Q_UcG2GDO$pc53I|-Sas9aZ=!V-_0YAijr+d!2
zA8~1qHtW2lkMD~_XIZhHUDv+khkxvUhL*=Z4F4I-{BJ-0$2I+T&VPo3o_})nyXv#}
zd!*KFemL9LDf&J~jl_q^u|I+zv>$$A9yRA%VMX}Er)$3+?LD@9`R!NNt%53UAKf0O
z`J;bj#>bnPxBfHqeC^QDIij$3?cciR`Je1<UPvG(8xh9ew*MJeF8ya{dRuo-{(~=X
z`r%*fO*XZaAN#+RY}&P<IqL5$JH4!5>vlfyFyYuLz51-z?T2~mO}1CvKUiDz$ksn%
z-nrig+y4oA_Y1_`dR=G!LBH?O<=iiuxX%6ldi!bq`S_RfUnc)&U^()ip=sN{Q}Q1|
z^;>fv>o?XZ%s)I|xW+UwSN-Vx205c0o45a%{^8Ou&(_6pwtM%qT|Rn`^@?7XeY;Kl
z!^3t{>vPM~lh@t)5r2$xO@*^NTit>SpjZpITK`0RW&QQm=l>?3bdZ1W*J1IdFYyz=
zon`yr`UjKkKZN%8)qn8vzomEk(fY&NcYka@R4*~t-08>H4_2Q;=bb)0UwDsVcA@gY
z@|+0&%!PkkK1|rPZ{G*;Ua@o8Yo#824!*cP`HGG9BY)u+RXcR&UOQj^`9DKj)cx50
zubcl)s?XMMyua=J0eyylm+Chk?@s<$f7rewDs$JySrOAt$9(v=KI1<_+VvXwM{niN
z&GY3xx=->-SgvvOr6;p0CRI%P?6>DiN%dLl;63a+zrbfY>Y406RLlSAi~ry^|F>9u
zmi%9<KdcM*AC`eO9WejB@=vt>r2dcm{|rgu&Hov`%3WT;yce7u!0W5*C;AJl{Lj$R
z9IN|T{_R|!=aY)R-8`xC)$&h$aQxjJmA5%tuV%I{+Lf7A_+qdBkKK<vwjY_}SYGz|
z%<WmRx6c^z?!F!S>-)az+ltmZ)h+&2KkrY7-|~60er^93f7xco;YC09e^yx+d4B)N
zn!WlzjF$;q_FcdG_1~KPMyWp4^Ygu)&h_{HdfoM3e7*NvgZ9+aeJgMNXPED|yGs7j
z`!|(R?!S%yC`4QotbZt3uGJ;#eR6eHkk=Ci#!Qv;iMLnpHa3gwT>n(hZ1Qx`^rGDD
zUw6lD`x3HJW6A9*l}X+yle}H}e=Ynad}+D&i?t8dXkKo$*e5dAUBcDXYHD%KxwVm7
zCi#_Woh#My{C#<)rJwI9-~CIopZ32BK!gsC6>SgeH2yQ3H2%@~pCL)Vd;eGYE80(X
z{Ac**;b;1vVUu^qe}=FAy>`||{C}GNDgDooQZD?T;nifBI)>{%Zq#>yQlbdsU*U}V
zpExe<e<PjzpJB<y@ZYIZ|1+G}uJ@l|gN*vW#h2~x%B=q9Iy3)oLjow)W-g6AUV)q!
z@fG2W4s!n)e(Tp={?8!wpCP%vZyv+nMgJMn&r9C>A^oWT@Z8u^Tj9`cXRcYbE?IHy
z*Z#IY?#qmqZrlAZUMO=@Os1UDh4tl8uc}h7e6XLcKGnow*6XWr_doc5UG<-#$>l%8
z!Du^<{|pBs>=@+bf9P4~Gylo?AQBZe{p0Hgt>+e8-!;FX^sj5)b^mKyqE9Z|HvNb^
z|DTAG*RS_;S2S5LFWkQO!q$qnTlcDc6Jq`Mb?2}14xlnpgZYE-Kfb#E3{%wVuE&29
z|2x<I>#~3R7ubKAf_+`TO8$>j<9`N?N>EZxUH*9ezhxqvxu2&$JO9$Gv6Z2IO8p;D
zvqN+K--Z7f-Z=lAzyGUOg;rx}T>t0JKkqNVhj)?o;{5CV&+y=?{7;|h2m61k&X@bo
z@HH|!gnQMO`Z@kzBNrq($e)$}BcuACf%W{B{|rrOe=N8Bo&TR9y?d>G^xtj&3@Wl}
z-Cg$W-MZ=O7x|m-AO8Iu`*QV1|07Yp59XbZ{kU&+d46T)ht&snO<j7e<@>F=rH}1p
zoGTx`W%vFNf24u`)2om1U4H@}pBJg<KK9SzquSob@{&LHM_;w^eRN*z$MW#~*Z+7w
zsuz4ceREdSwf&EH%R_hUzVdZ$cKDUNJpHe>!GXJW?A^C#UiR#jPiMK8u}s}_Km2d*
z%Z-hY@Pv;FfIR$d|IORqx_?~%t^OzJga7gKH{U-J+yCMCqwR;^M#)AWo~QZY?}<Lg
zjZ@-Y{5m(^>g=+L?nA$xuAjN|$LvG9zRp|x@V(HB>*llUb}qaBa(lVhC5HO7<$nZM
z|KmFN;r>6a{lE1i|9EWdcK*<R{69mx_L7R^Z~Z^Km&V*Nu@m^%`gZTd%Qc}7XXm;-
zdL3%dyHCk|Syt5Xrsw;1Us--Rb@TNa+4{BFQO8@p+J?Ph{(7&0i(%oa{|qPegZ?wD
z=RW^eeNuz{!C#H;sW0{`Kx$yd-@^YHSc?8LG##u-`_Iti|EIG1NR;Q*Kjpv8{y1Lw
za=X5NKa2A2M&*xUGxH`z-u`j<p#KVk%@^%de?;AT_^xF3eyd~0k9?a@e@Oe0_llC=
z-L}CltebZIeD&?qe+FItuQUJ7*`IO0S$^yCgZYeg7wR{^@B1>p<38s<m5i5bek32c
z<?PjXRdw3sz)PjMcCRc-Wx0=3@h#6UU-V=0;aPjv&fB~oyUhGn*vj<m>TDAYo^P)h
zASG?1{14myfA0D})cyZ<+i&InH@A-I0{e&EptcL+zgP8K`=3nzWB#9EBlp4o48Qs_
zuQ1*N*IM8OQSv9A?Q6*Xb@M;NihWD3JpUJ;{`}APuQu1e^Kyc=f2{w{V5f1j{*J}Z
z{j+!5KNjv(u2X)*H|^Z#_`iNfBok5|Ut3mu_r=|}e`~M(XJ|{G$&vYF&%b}O*IkSA
zJ927{+`he4$+ka~m2K<VCD%n>xp#iu?<Mo|_iry=WVnCQ?fln^FHT<d_~Y@HF`MUo
zyLId5e};JFWdgVTU4KM=efhoAerf+r=6}A+AF}`L`p@ut@)g5h;h(NcW*_-^`ai>p
z<Nq0!J*dC({KCfQ7n>h!`p>Y+v;Ng(L%T`qXWFlD0##BdNfjJch;o;?^~d7>3@Yaz
zssHWRr}v-XN`1ikNss?C{8Y5K{_muo@_&Y_b|ydG3)(-q|MB|YiFf?}GpzC{{J|Xm
zIPsqbq*3_AcX9m*d9VKr8*=;qO*$I?c3Sv<2BkZ@{~aip|Eu5UKSN2;`k$gt_kUw-
z{?BlwDs5`H>_bqTK$oL2{`0E;P@Mi}*?)#_xBfHi&i&7D&Fu%LgM4!dOvP96H-*2G
z|J40$-e>>A_}iqvvuo1LoBt{Ou*+1KCHZ*L??eAgKJ5K6LAL%tob3g%>WmuC2m6Jb
z^Le6{%~ZMey=;5fue$vUvaHm*N@BTVFCC2j_5R7f{|tNnGepP#P>ug1YW;xyk7)e2
z(v3g%f0*}5o~Op+!=9?J?vKwOq%B_+eecKq2mcv*-{&r`crf>xwWp2q19=hCwx#tS
z?mrS;+q!J-qqAD)ex3Ss-r?i=cALxx@3|Yc{@cHLz44c4jjf<X3Y`BL*zN023EO9{
z|IPjH-27jc>)Bs0|Ct3ITC~5)|Bu(<Kf@FoP~zNl`Q!Ef48dG1+kT$@oc?9D!=VQI
zQ}+M(=KN=va{k|i{|w(0|DC`8YpIQ>!>;x2Kacz?e<2aT?)s2d?RMP9^wuxd*JkE?
zT`!n1%lCHluH#m>v#h3Wo%5D?mq({TSGwWu<4UVrb@~{CICrc4)}H^e_CJF_W&J_z
z{Vx{$yE*?yS)F+O=dJ}hd;Wd@mpDwN(r?CZi2ozK{x_(Kwc4NYpMm$^m3Stb*xw%6
z@`8JG7yQ_KcvtT9BlG2dNXLIzedEV*mz@_(!*^dc(Qn-+dL?yd-?3L=n<m*NNj%(f
zTV=z!)lVnr=KW`=uAgmRxkB>O{kQ9XNBpt;+qOS7zV|=F*7BpCl7Eyxq#rcjr~L0^
zTln_9AJaS6E#G$G5BCFKy@$H_Vwb}|zVF={&;P^Pd*9COxz_&su07a)HFevix9jy5
zGW=(du)h`jt>ee?-;sZ+eysiNQIq|V=bze-xgXn)MQ!id6S%_D_RF<tle2_cF7L5j
zaCpVNEOD#&mOZMA4=?`_eQ+1kJ>Tqy=eb_|vTIHVI_|f<mr?t6{OeeI=ELB=hx}Uk
z55D_<C~bdx^*;lv{gunXKO`S;`?LQM+jM2w<r>%Dt~KHF{xcl9&slPMcZ7c0u1jB}
zcjsCMe-uArFW|1*d0G9Eo%{<srC9FJD<&l$w|;Land@bn$nfRLzsvs_Qu%)vfBwh$
zpW(y2)4o^jv-~^mi`!@GOSt6i-)b_u)-S%Xo?~6&%!Sn^+ddp`EVaJh`7u6%br$DV
z_8%8=wyI3<F_E>r;>KuN|N8U$&-UqcV)X~b>>o_7XRk4_(R`@?Lw*07^{ZbdJ@Z~z
z`qBTPeS4kdkLhQpOgdGQ{&CaoNBlifH-vxhHoNY-M43rLfPq2GJ7xNbFYAAl*8dUa
z|2OgIZ?^voj}-o$pa18*2DjencQ)pa&Ho6j{>RDt@!oyEZ6DXaVgGIaLUZYw)tTxC
z=kwkFcWyfWv-fvy^&Wrochw)G*-@!_KJHPq4z4YNtsxEzOy<3`5B^a7?f8F&X0!hc
zY5y6dGH>ng_|K5|{ucZ3{VaQu+}75oet7;kq5V<+q3+*pTetXfAHEgdwWZhI`Nz};
zvU=7#)~jBvabD;7adpsCy+>lROq?#C-pO?B{pZ|&=^yQXSJodix6gk6L+$>Nr$5qv
zht}xq|1jy*^{7)n*dLj7Yge>Cv_BfF@4EN5?y;>Oz8^Q+;F`Kp|K`)nTchvuycWo)
zv-@yv?%Ef*kNr6+(msc5-CUrb`(|JIp(#8X3=8-#zW<>r|3?J0M&X0c{oCOW^WSPe
z+-a))pMm9I)jaMW&mYXSoq4|hA6Lb!Z^!JVGXihPI(u*1b$!c<w>f)~9~4*D<}bhX
z<MUxVsohupU0iy!Hob`R%h&7PFF)DeR6lUf?8EdU`&ldOAK5q9I4}LN{lI(y8{LQh
z8Kf(;k5<WEihHq7?Zfo0FSC8C57#MN(pNrHUKO`>as17!sM<62D&M9XoZ7G5#a3#<
z=p6c=VM5%}{|s^B^MCoPGSoMJW$HV9vCa|JFyp^{{)bZkAF=*N*Z&BmKlb@>-*Ih?
z=iiC{G_$2Df4u$>b?cSd{!Kev+Wos9-9ME7R(f@;x%-dh58ql@tbK3td-YoT!}mpO
zEYsPW|HPIri+lNx?c@2w52AB7-&Nf<FRt6Wbnp4EH9y2ZUVf<l*6>630eiVRmLKn(
zeoX%`{ZV=Q+dbY7)=U1Vs#M)@wdCcKY4<Ahbk`+qzfzK0?0zNpeTltrMSAq+%X{1(
z#tXjOwZ3hS=hDomZ&O#iymsJx1h{MTkEQ;>H~XJ5`yb4;|EBZriv6$BAKVV|hu(sR
zkAAQGqxGL*Qv8Se|BmRh|7Un*yF7rs8d0IvEC2eT9(V2Ie+I`|@Ba+m>g(TD32l>V
z+x43Zw7{Y8b?NulFY1rw3%dU^()s(J;mT{%t!w@>JhR%JzkcrT%DtPfS~8TsbGO^y
zzy0%<bEW!q-TUibKfAy3nUn6#{|vtOKfK-h&*cH*fpwAR-$m=K|7^98w>0X$Z~gk$
z3%<sDs;amD{I529+LC|&8DjUZ|Do=aoFDuv?C*pfe`oCz=>IkKKf`y`72%)N#dm+y
zEBO6r{r5}D>aWbdu=`(N{=xd+D%1b1H5Pu!^>g#D8nl)QW-G=bzRUiT&p)O58{LoI
z|8@V$^;6IOKf@&9-ugF_9@+m5e(c}(QTU(le+Jq5o3cm#GyGa|T)x5dpPBrl21uXB
z<(B!M#xLuCv)%a5@KPuA-_6wePr9e~zhUS6&#>al`S0#p{~0F6MgM0=kg)&jzAQ7m
z@E*9a2yXW<I><j+{-1%}to~H~e}>%kzqj50o08u!h4F{E11m%1mQ8!FsF{5eD-XZU
zonKy(uzCBmXNlQ~nWlfgp6n7S7l@3w9TOLOCd55AJKyxknF&XgSFmP*TC)7>|1%`c
zzdiX|^M8h>in@z&{C}5%3louE_G5L@_m^e=Vq2!S-bVPN{(<Y?%_jfoez^ZgEZ41f
zCtly<`zWw+%cMsf@78RMl@8x<@lW`}+;GQ__3eA?*S}1NUZ4Coul~V|{|q03{cnE%
z$2Ix4<x6{+e_Z!^`H$R+*m$wd=#S(zQ*Z6}(lyc_&s^~Nlrii2%}F<2{gb@ryY$_{
z2l6tvZ$!MjXMAD7q_hne{&+9_vHVb-G{aws1xyY0jP?(nzyIl!{<ic#Lt_2S%l{do
z@*n(VsGl4PPPV@m{%1J2LjF_x{I>rL-=gZQ{xiHvbeMMEvM%S}<P3=b_Mh(m84g~a
z|7qrbhFkLgj@aM){huLZc@u1`@7!NzE{3;tQvVrFx_;pQ+qX~jKf~p>txVI-U;O9(
zdo7j@sC}#a51Yr|j_kg?rT%98H=YmI*6Z&0$p3BrTgQ+2zJ1)UGxfIgTD^|?k^3R)
z&MS@NP5Uq9m(H*=y#MN!O55{OS8Gfk>c(Xx%)0G6^Pp|+>-DGej~)MD4K8H<_5Ejf
za4-Ld(xm!>0d+>N>&5q3-+CQY|0ec>aQx+*KjnOLe$DHz{<!~<_N{|!BmRh8sPWC%
zAgk`a@zOezv-OYOZCsQk_+zu%hi%&*uH`=bc45{(`%8QB9~wm8udZ41{`t>a$A3-#
zVSKQT|3~pdeZC6rhu>RmEFZ)(S6I7U{$u%2pY4ae%jFvLhxt4e^`6`M&U;_@WB>54
z)UESg7q|49UD8;aQ}WjC(!EQU?wPc41etO%&NT(a0%&NYLjJAkZ-YPFe>d83|2Y1w
z{_kQtxfk<=_K8<KI=Z$rmOG+j?a|&>?piPJDSf!Nma#kd!}+c+mP@nGvLD%{dUe{y
zC9#dBbFWk{31|4vpuGQw_V+(R{}~>c{}EdKZR_=Y9NC|<<ureIKH43*C-=AQpRoO#
zn>7B^e|Yxn?c06FSNShr^>RbS?*rd|?=gS8S4pGf<+WF~#z(_$nYOp?Nq!i)-ckGY
zZQs~^)it}y?X@8-lvlF<8QA95-87fqQvOFc_8(it@@T91NBD2tKK}ha_ciO?Z=Hj#
zKKtSLm}BY3?T37W{ylofx_#@W4fCEKkLUSgxg_##%(~eR@3%=MiEM4kj&M+|+k5}+
zg?|fHNaCwW^p7shD$blf>xxzGpIv5itCwfaYFjHh_sFc&zNM=VuDtWos`lxxW4XEc
zrQW&XkvlH0RiCQ9x7qW`(`|hbZ}es<aDht-`MvTVoag`0-G1c#4^{W0A0OIFoLyhz
z@VCcKBm3IsnuH&rEaz)iR2YZO(kS`(vHhX$(z{RhPMi6-*X)wChE3pNPTej0JL@Db
zuiYY>`}XTv`GaxlA13H-eVM!dr@r^w)L-?h#Sh7M@8|hvS7Y?S|5$u;o#}--r9b*V
zdKX0gn18U&<iph)doF&xEA=z_^gMBGnQzy_E~{L#S~k6&b=~U4S=+Yna$BF8y7Ff1
zEhnBYSqvJ?KLr0XG~f8o@C4NVFZs`KWApET{|qm$KhR~U=iUP9kjcMW{$ce$&-%ml
zzXkTl|7Te7ZLWhXxM~8WE)m8*Q(hmo`nU7t-}Ng$zsXOR;jg>-!a7~_?{uf~!--!v
zeG}PQ8^5{#{L{~0{xkIEDYgGeiTr&3pV(%%Y5y5M%f^5Fx7XO=IMbq1`v>}0|1-p|
zeC{;&*8BajW`Fj@)pCj!pL|h&e)%W+b34^-f4{8%ba~zFnypsJ(ivOx-+%cx(`a37
zn}x;Wmoby){oVKbKSS*9_fPjIe&4UVf8Fvg^M5PVpWIfX^q*m4@_&Y+s@8h*k7;|{
zXWRek`p<Bu<ovJRUlOZp#cL$||8<)FXIO1><d@yPl7Dj%y=BZg2rS1Z{;2=YWc!Z!
z-;{pr{?8Ej*J+=3|9^%jEsx`WtL*6i&k*wC^5Z=&{~0FNACLd$UTFVsrQz`hy!E~9
zKNdie$wjl?{|pMX+W!u2v;XBSTE8ta{!e$&``?U*>R;I!|Gju>|C8`({~2zu@&9KC
zd^s!hPC0yhT7)5h{io)ChJ$D4f13TD;db`Fx7+_SL`pwUWvJu5z~~^qZ2ku~(eVEa
zP3!+N9JIZ7HCFoD+8+*U)-Y>pS1dbWv}sP$5+M$SCO&=<#=l(k2am~r$T$4KZr@v<
zfB%N{fpzy8-z~jT6a3q)?)*OC%lDi=n7ymi-|Acb==`C-{Qg@ba_d-f<F{6vKRC^M
z`-3g-&GtTgA^zaX_Fd@*4@6gG{bz{(Y~NkQ26E*c`w#y8KQzSOGXG~_x%GE(jqY#P
z8iwmnntuCLY}qeY!5z4Jk3VZo#0Qn{f+yEhh#$LEx}|G-Rq3MzJ1=b&b-Pkyyzb!g
zAKk8#Wc~dcU+};D`SL#l?|1pv6aO=?eE!eS)co)K{trR(Z=OF~zs3CkZ^6m*lH`kf
z>L2KaWfwlSZ<VucI(P4R_y_wQorO87cNgsFd+vGl?Uk2tsu$BYU;8q1$<|#r1=#O=
zVf;bs{yN+Bwy(_(-wS3){n##^?tE>_+Jq>{n#Q7%(=YU0cg{aO`=oHCT>R{(-cR4%
zf4a|Xg51h=&%Yb~XAs={djFT+v+DmDgf4vsopRB@|D$()?0<$Od71V<rcIy!m-h=p
z{gIqs@Bb<nd;VuQvSrVIh8Ot@nExrKU$1{DJ<I=}>eA=`8Juew<UdN=?f%c;apzL~
zM_qmUU(zo?>$Gluz5mPY+2sEWotc&Y87|y+VE^NGe%*hDOXeo?|9E?!|JU}5VdwJy
z3<qEDdiwQmZ|8r8rh-hv+D)HsT|fJup>5Nidi}S;Dt2k-f251v-(2^0_w+Ku9q9_f
zWxn6S?e}VdQ^8NI{|pB~`(5(w^!_s(OtsHCacrmF)`#y~vp;~wSz48{m+x$L-14FR
z(0>NbJ3lr%ZRR<uyJ-85xoduW`}ORWXs_~>t=!*AGw)@luwLCi{qC<<bvzdg7O-pC
z^lUuVtI~I>ql4Rex4^1Z3xv)bX%J!Zv|yOS#qggYlmCb6@i&=^>JIGR5dY@(Z^Ijz
z*QUj(euzJORyp*?+RALJxOF=}E<a|lzN=2>)#;V>=`XiO_06ftU-eolzfC@1oA|E!
z<}dI0UQF`%_%dJulifdXYaQB5{g=1@!OQp?$G!e8|IhGX`aP>38<%AmW!a0?C-2Sn
z|MBp_TW7z^Yx7EzA9%idQ)B#bz2lC3lkR1ow&z^mm_PfG-+s|4)BZDLT-hi3BkR$-
z;LJpwJkHgBU;aJ!{AUzo0&OGz4`cnuVw)fCzdirkoF5XU(%kW!f5QLHuz#2kdoxC0
z`mN=?|9JoSekhy#(4*vex?JM658IEP?=+uYcA{VTAjeKt<t@_{*00?&`}f*^>AxHT
zjM`TJXHeMd{cn%H{g-)O4F4I}U$M$gU-YL5G~gdI|3l{X1N_bRx9T5>|Dln8K)%0@
z<)WR+AGIH|f9wD7KD<xw!@RwWlkUB`mfvx~H*>|y>l3y_wY5I-We;q-9P?p&S4s40
zet{q1N2<zZK9c9piptx%?8g1*hPw3ngPHpubpK}%|IhGXa=g@pgL>OPs(<tOF?&t?
z{Kk6e<(tEHZl5sw_R}A}AETnVwQaRMer$gDSL<5zk{z42ZT#?`;YdCIt<#VBIioVS
zi`5x@2ybZ2UHp0T%a=c1>{kA01RiwzEB2q^Ae;SzU3RAb8JZIQc(p(Hek}TI{;~Rv
z;z#xi9JTM+W6QAX>els5`;@Op>Mr}S^22-o@JhAK^>_9kk!O!|i$7A8yDDp!4)3F0
zEAH3~vAb5c{knhsvE~12`N6!eM)srm!8(y2y&paw`6b_5!~S?Zf5t!E5Bc4HOjq2_
z`X~3%ysh*%hpDf4?8Q=VP1UXYFPqxhJ-hem+^c);T^XwGVG0+FS1sUw;Qo(4`9H(N
z)BiXx|7S=#|JM0G!}9osEsTHkz=PBEyXGHS|5Nop1Mh!^H%=ew|1G{%%1{ojh*?1`
zI`&VokNAJ`XV-rdzq0?!wyb{#76<>G&v$qI8_kSu@w@x)?7H!vp^r}yRLy>$S2`=}
z?SBTx8~v}#t1BhDn)iSG&%lsvHC4B^^wpQ&TVMZY;Hli$x^4IFc>VYzbAzu4_7wK*
zJG`{WuQu*<>fh3TyXOkDpZ)sf@~^*UTUPCDEjqWne$tCQ_rLyUU|wdhed(L~@v1+y
z-_(27Z_+sa=Jto4s)~5|pF#WAKd;j)f5db3eU1OW$Bq9P0`@!G|8)J&z_$O*l>ZF(
z<|Wli$1(mj16PG$Ux8Z^pvDF&Pe%W!{7<!dLHjqZAItwO{?%GDUH(7ANzP;Yzj+qQ
z|6BQS`SFU*{|svX8T$6W>3dZFHz>LPfYg5mY5tE6;B0EYC|CNQ!>{na%{ld7rfL0W
z$l0|2r`Xf`-<VrKL(}QM7f-D}v0nE-!v-Gte~T}htlse+T)~6pctArWpMw80G|#qw
zYW|;L+x5S<^Z#u!Kj6jiM;g@s@dYR8Pt)XosIUJ!xBTFLhQD5GRxtmax~xrlM(Xw*
zU7By7cX^~YWn7C$YYWxX2|Ds{lE)Ialu71c;bB?_np_#`=k))PiT}^Q_VeU#gI967
ze|P_9Nc_*hvb*l=tfNn_?frQB!Sc2opXP6M*S2!6o;~|NgUk<Zw+&ldHvbT;)!Ddh
z`NP)<A8VAasFq!N-2Sll>bm(K-tfO({`GH0y^IMcH02llXZYY#|3h;=xC-9(cd^O-
zzIs;u`fYnmS9A07KQ=#jHaT#|<`3z|>=_-a^3pGqmiI}Ye`7D48CQDueWOifdSd0O
zALfxe=ANCm_2Js^qjDl2CD?!6t2-ROUHr}O{|v0Wf9KZ7{`Rgr`%lMT;D`B<4wLf&
zFU;?`uJ73=@#EX6!+v`|>K~Tx*rj89=RZSY#q~q~8E#E;`*hFp-IuxPUi&WoiGJuC
z9{(Y|V~_PC*%0Q>?DU+p<gMrb&v2sJ<v+uQeY5{FEZuNHGv}}Tllt9fnL#^`{zUG7
zu<E+Fxc!IV{|rAgo@_ThU8wZ$?*6TNcbzop*Iv7K`SJboQBe+ZZfSy1w+`}d-ILJL
z#*x%!8u2)kQG5OD`l{TzFguO~3l{LNtA8;6KK~c~Zu{-?-*|smf3$#mJ$DUgSxwsg
z_J69|lnZuz_|MSu&#1!q@T@b^<$CX}{jRK2RxWyCDBT{wx%xjty!wxr{|vd{mK8j^
z$Q%B<EziI9pKjf;`mOs9t=@U>+Vw~2Z;pR_|M2VCD?Vc0+4Yitv_HnTtIac0Y}#Y^
z%2&xSh*?8LCaK|z{Sp18Oi@dIF91!<UReG|>h_v@ne`u{@^3CWcI#0@!bkb${TZ>+
z0e$AF(YrnDnEp6@<SF~C^-;yUeqm%ROZ^nzT%P9Vt_!ArbU#1)i~ZG4O<hv!|1^Eo
z|Mg+de}+qy8q9y>SBR9wb${Yw6Jh+j_&>wJY5PBw+Hb4>JNtW6{nuny2l;!`-|GK1
z`6K#w{XWi$@82r_F8IU0tj6(2_(y4vTJ<ARd`p(9HH9SF&0L=m)f1gxA}>-=9oTn2
z{KNB(l9Rb#ZKcDuY~8nMo@JsW!+!>~^FMU*{|GTZR{tYZ{P@C$V_WqWKfZtS`XkeC
ztE)e7KaP%a<f@qLz3G#levRy74W0cLxA=F;3AcT^bw6@T#M>?Z83ZGL+NpndV;FHa
zF0)EQH~8Ay%yqN(&5Ay~@W*G!IKb@x3=i)AXZWFC-)a9~_B^A@{~6NO-wF=7ZWH;N
zyW;y1U5y=G(tC@K*l$+v-s4!$e*2%|52s@+yRMq{w@LMU@?TLC@FR1Hb79?dp}RFM
zKT4OMe{A@upQ9#>b^G#oeg9APSJ)55>3rDUU!(nSzHEj3kt*??8qvr8{4eh5d}#09
zqrW;L`<~QC|JFaQ%cHY?v3LBjU6)yWH*?mx_O&m=r_Gu-dDYA7;bvC7t!MY%UGh2l
ztV|EjKOTyP7uBjhJ&wC}{;%s-{lB_1n%~s!T>siDRJUzm_WC=QzScdd=X?LF{^R8%
zhWiDcpRB*|+@$_zZS24Nj~ZH!=X{laKI>fZtA8G!7xK-u+T_6bpTX|&&$ONC!S(vy
z`tjF&f0w-IsVdv=TlZwr-@4zE8Q8ymUuWrm_I7O5>w9<YmtVMNaNU3Jm-tKDYt1)Z
z{^jy_;{GSM_X+-IxUum+!%ppAf4Dp6etvWIKf@Jwzklb%f6r_GYyX#b>b@R3Uj1K7
zg@1pxIrwk+#jOwJFDoJjOrh0I&DD?k-&X$!{qX43bC2Jp*Sl?;vsJErw{mX_yZ1`h
z?v<dHiPW;SHXky#otHi1n_ZrpZTfF{vVnH-ay8yM(c|+y^7$*I1><!q_P7hCM^sJC
z2tQpUaq);Vd&jcn;@$>lw8IuREwl)0Uf8*?eRa?Ahgx^T4;)<9f1t+Um&cF%0}(xL
zkzddF3#ZS>nwpVhv`?;A#>XIHR@^0_#WS9Tt`0nq_}p)=W#Y$(8rzt>#O77AjwB?f
z)tp^fcYoHAp2Z$NGMC+4k$&&i^v=Ak!b<6!TXRc#b)4?r5SvrV@NvgK{{COdX~EgQ
zjT;LrN|vgs_nkMCxEa#7r_b>4(;cjyU#C6~jlCIN{^xh!udHWVRi;HAkgO9kocyff
z&wmEt{!-;{mC5a=K0WpP&tUpA(st_F@{1Yr+pkU4JrY>4{NcHU$(b8|UcV=QJ$Gw%
zzk%lQsY_p(S(!MQ<)qhb+$l1rvW4N^J>M@!POl1E>fceJF5PnYQ{8Xz$!TAVweDS1
z&rhHJ*kERirOMmtXMO>`x96_5FIV}MmAX~?^711!?0p9x?u_4h^vTR~^2Y0)P2RkG
zdh&+KP*YCp`1vN!y7Erts_Jj4Vf|=);6H<K$xTy#){3U{k!^R5Y~S`mb=#GamujC`
zJXgG&UU;xJ{n-}d?#i^r+;>Ne_Aa@6tmpBs$<04LxBU3bY;(A^c#c`7S9eQcNW!Xs
zV-J=G&kb%fXYOp(iIcu%6&fmeb*WTDtJjhbSG9w?XZ}q-I8ULVy~BcQW<O_oMa-?K
z?0y!f1VRmd{9$?Z`L{*#rawL!j}7)+y|iXU$ZFTXBdbEyTUSTTkvaEn-;Uo3kbc7;
zpL%D1x&4n|{lB2Y{~1`m{%6>{?uY$<hLxdH8R|D(WeDB3ann_u^(JTi&Rq|@Tq+&i
zE$i&RZ+qLjQ@>8V6W_jj^PVj`JQa3r-PPo&uw(l?^R|rG#}g$br!>^hTK-4I_CEvL
zzgP7e%l1FYzwP|Z>ciY?i+?LtOb)VYKQh1FN_Ee5bNS6?yI0<citg@?nD^@0x6cp$
zGjwdNUdcDHRzyj@{rcsj59fLuTy*;3>y-|-Ki03dpX3D|JHPDzL$&;msQTmYpz+Aw
z%m0jORCi53a-ZME=T=<v$Hx!qR<FEss{(W&UBlaapSRhDp*!0T-xshkn=bx+Kkq)J
zTQ}me>IAOl=f7F^=Ieh3mWt`e{_%VaP+zwC`Q2ZY>uzV&m)-vmb^o^WxB9>P{xdwd
zGyj(Kx2b<;?@5&J+Qazht@F2%ZTm03`*$+)(SL^afBIYgE~(?ZQ_=qL_>o+;Yv2A<
zWFM~+uYMizHCO-b^ljqX%B#{l{+O?NeNXWE9@|H<5whn$i-MB}RTk57z25cvP{Xcw
z`@V><UN8N=V1eH5^?O+vOYhdc(BNM8`n{t=Y<YZ@=^y+542o}s{~h|3|8Lr1huOZ?
zCSPj(zgI3;0BYDCef^K?_QSv7hvPqltpB00ZSI;|o~f0^zjOXwo~O_z$;?)(eRRIW
zp7=*|+1{`*{4D<^w{dyAi^Hv?9ZpN9v?)xFk3S!O?Y{EoOO34zwX(lu{zPB?$53~@
ze$)2jwNa|Gy?<!__Nd|ev3;e}e}<xL{&socJ%*2^Pt2&C@HFnW+ti54jRpSih2JyG
z)ZH`pZ_d2--;GS5vo<7Iia2aJY!8AR32&wU`23Gc`lD8S^ZX6&Z`XeeyY=YY?Z6+^
zzcuPE)ahRI{d*_O?7N)8MLUs-b>9!)s@O53HF|DvOt=5#oJ9ejWA5F(eLMQ7>5+>r
z59A-Ef~p9{zY_HaSN-F=`p5r21M9RO@@q4<6~{*YvHp?%@$)e|g?XxJzSbUle}q1g
zZ~t&F#;8e1()7K|i&<5hCoFsPkK^;+D+0b*dnW(o|C+EMl{fsKW7YJ(6>;@1ZKg2(
z<G;dXt?&Aim6?m--^Kq74^GGbw3>h0{@>Z(2kn1tT(p4yi{}FVIriE1H_ab}zuoyk
z{<!?+_P3G`cIQji7=64ur!el8WYp=%3#Hxa=2Gh2HL7b})|Ni}&mj7v?1$>N{?$?M
zZas?D{$2f7>3iVid<OfI+5fm6{%2sB{R2cU{JSvqNB-l5m5=?K<IE=qUH!*YQ?&iE
z-Qh(w?jNppM{WH!bHzcP?*$q50yawdZ{FA>Kdf9A6<t2>aO`E@>uq1(3J2_F-8$Vj
z=U<in&X+GY{&a^liI&$txOe`C{`!vn3G(6@@teZm20yZOJ|e%7zqj<}<-_-s_L=Wm
zxB0hz#rF8Uo@pQDnnc&><=OFNS53JtzF%MucP7i)g|DVxuNSJ36tOxp&lJ?%cZjaa
zT%P~hUv+=+d-)%>%F!2VeAm<;G}+_%aBsZ#NA~s_#|QDZyrVCaz7_g+IrL)bUh&Xf
zKN#zmzWU|1GEw(v-_oV8!psHYZp7d8H(mO4$;FuH(<(;F8;pMxLNi;beQW$D?|;(&
z8E&*b_|NdyeakC`_Zjf<Uj8Sq<KlnJ&rbRB@A{P;2mUk6zxmhw)9d)FCd>bwciz8o
z>9Sqb6W{%3;N}1E@exP;G3WWwu75Yr%D(!aVSD(^uiNgq6$I6`Uta(7SO4?Kkd@i5
z*N6Yow?F;q^J0G8YyJPY_TSCDeRFcS%JZu)cIn$svQp-Lvu1n!2m95EuXY}^<@c-p
z&oCi-TB+{-yIc4CXL$JM+ziK>$+!3a;r;izs@@}hlf&^h_diUizp}wT*6q*rhc#~R
z=cW1YQ~J+f=Mn$W{^ji#h08B?A3XY>A!O0-{aZG3*RfwLeI$Pw-f@8Tv*l;iZ|#4p
zx?<n*RW%wPME^_^tE!n4QE@qb)12d#wN>+VueW{q`LOoeG_(BKxn-#p@7}+=_Si$|
zzTeipvFSg8Uy47TXBF}0@Zod(N3R@wSWrBVzsq=zZk$h;zPR*p!HEx62Tiw=XK$S}
zmFL!yR31NlQK_5RAq63Z-p2nJe|i1***`CF#*gfS6}M*S=&=<a{1{i>vgYNZk27}I
z#rQcluJwxfks~IQ`SA0sjZ+LQ&V*z??F~5a@MGZFdYjijR{WC%b<&o7sPCz9f1q1;
z`p7-et9mAD<BlFyxv=rmJ4Kyd-MMdAeuhsoR}{_5RS$1V5ZUz3CH4D{^v=)w_|FyW
z{LcUQb?VJ&LY{}#s#k<9c`6xlIBCW9Hy<s$PHCBLxEiuD#IxA#m2NFN_ea0lgEOxQ
zcUa^buAi1R!*V&-m8HLTec8F_Ria@@{JW14R(~e;*63!Oni?|Qq;g8i{_KAoe-ba&
z8T~NhtvYcqbM1{8Z}tQ(T+(uS$*a_e)r&lQ)-TJ_>MvXtEA&!H=Ucz#zK#33<i7?V
znlJQezwnQwzWmm25jnRx9=4wUG~?{9nPv7<cbqbu{cX~L<i(OnMt_`(TOO=>xHK$c
zkDT6I{jZx3>5FWdFS;YFuehaT!_9rXmk$;4`AcpO);%L5-SbfL->1qtD}!mu`bV}~
zoa5Ri78<9|+OypI#_KPazdC?31l3kxvlCi@T}j3YY{p-?{~1`~|1(V40GiUMfAe}D
z|9^&8p{Wk?Z?-zHGNiq>GMo5FS2^^<e})c|wdS!GO7EKecE9$;H|f~z;7g{x%E4Qw
zoesLRHP-B#=9{gu<^h}LReQgdK9RO{_qJIPdP<WtB{|rCPOU$9NdAL^ZuvL1k9vE5
z$JCv?Cwt}Ve})^gk5(NCu2_BOTYS#d()^pnM`oS9yLRrf?zJ(ov9YhBmLKvL$`)_B
ze&C<c4kP=vt<tOg87fXaH07*OT>s;Vc-*dEnZI6t{waTID>Ep?-m&5S?fxhIN8yL!
z$L(+aK9rYvHLLvK{#$yd4~p#<`zOD%@BQI_D!YFaKJMjy#NM>^%BG!>$(L(97reg3
zB5>>Vt%B`WX1ngcX5yJX+3(7`goLp0{C)o!l%eapUbX*cU|UdsO0G`&Kf}$;AFuy2
ztZZe9u6g=%^DkdeSO2N}e+G8H`cvuu88YgB3;btDfB!dV9@m1{@Wp=~)mwkz(O_Qr
z!L)VR>c{!)nN=;?#fd8`mLI+*zU|Gq)rFart8Yc$IdoQ9rEAk+<zrFi?u?ybVGIra
zE`KHe?Tr7(Z~jMcM*Z22KNkNP4()&R{y&3_7n?j-c=o>@?}x|#iT-C0umAZdfbl<r
zz~}mdlKWpA*(X!~F#cote};Lg475_~&HhLF_J0PJ>}~U;XV@qDw+o)l*C{^q_~?DH
zlb%V1DtXK`&RSl(n%h|Y3>;+w*xwulkGB5w1uate&%m-Zza{=d#QdIr8hhI=@k)Pd
z`H}x2`Eh>BrCX0Im*lEcD4l=sZL8@U59X-YI~Cs_^7pK>J8za!oteAt;HPzq7{tS$
z=kNa~b^P;kaHaX5Az}UxMg6yTm(|_B|G{^C!+pW`TThzScgJ&o;kAFDe|*RLbxZbK
z>p!aBW~DcEssE$ixJTaB66^Bn)GFfQd29SDa}=lhZQ1d$_FB8_mF>6m7Ro40-hc1<
zow~!w3nT0&)&H=b|LyIE?+5j7lso?I`eVED=AA!bf7jc1E{gxr@6{ENviHOJ1M6G&
zsb2aMzxws}`1C8uS4?K_7q4->xJUY7Jm2iIW{<r;>b0hRbh@X#V%;Bml|0V9Yp<@~
z_3O|6GyfS(z~fQu-{$^jV2l1ExbNEj%=fpozfClsd~n$x^B>#~`J1$t&o2FKwzBr)
z_D7=A`{h3B&1e&TVfLS4^Pd9Ge4$-4{&<Q^o^fKk5JUYUQ3l*Qium8k|Kr*EpJDRK
zznlLvyt%(e_&>vHDJ_Qo3@)=6G?<_6zpeev6ttZnKmO)_hGX@c)8DE;II$=G!~0``
zuEqI<xjJQXS|9wo)+q0glmGaip~1!>_g&hD`@J=$re{87&YDvYbMs#0omX+PAH`;`
ztMHGx{)IP$eO30(e_r+<Lg)WbEkAz#hpPEo;nEM?kCqr$tbe$^n{VaXKWsmqFUt%U
zlN0)}^TBE9?vfoPoy+!gAHHYzVg2ndulYOXG48yg_x_LJihD12wa$IE{lR^q3hSfu
zR5<s}oqzKCr>}p$+Z$wPXfQ0`FZt2<+w)J_kL4eVAJiYH@31quQWN^&@wdVqKYH%7
zZP^?1cisDgR`Ex*=W}JrX??ghd!<*@>wkj%Z{s;4vv#?4D{o!bTf5?QZjw@apn(hH
zL-2BHg0uGvvQN*gj()?oer4HzhUF(WzU}%qcX{yNd42yG4lXahy3cjl?5g=6zaKG-
zf6Z3=pCP&Dvfur;SKoa3{pVMFbb46u{OZ_}-}@hawYlN!TJLY3Yx;KkN~M+O{1={h
z-;?~O_{*=y(~7tLetkVZe$T5Ot9{?M|NPG|{q&_&2RFv!3ts;%jwxPQdvE&h`#;O#
zFWoZSKj}Y1+kXb*Up9Xy?SFEoPUt_wjm?mup70LY&vOp`XSn>I;qNB)zZSK8Q}^}E
z<6Hl0Y52c2pP65*`gs0j0=O~*5B-Bm+Ou|sKd%0ht1<jIzx!eC_FZAUTA4Y?o}s35
zy&|@(74u9g3!TLAHTt!sp0H(xn8SiO%pdC13qy8jH|$v4nQ1B$7C$YdFJ4{ZN>8y(
zsaIuPxaH-^T`RrjC3YVUS<ij<Vy}1XP5bkILLS}xVBS6_{HRFm#>%|VAj^`S%3+3Q
z3%_cn?hN&s@>FBhl+0%qXLP+j?0xDcD&%|9{-FCL&)BCk??tARO^QrO`sAs+F}=J@
zb?)5Gv^3QjlOiVh*7sl4@>}b9Wu@hnm6oT9R|feN&v~k@=~p~CFKEi_DNAk_<!-y3
z{^OwLxi!zj);ted>UnOd*Ho3~K}(*iYo05bzE|^{@2Q~4x!Z2%?(SV70ABxAHT@8O
z*RA)5_$4DN7JHmMJ3DvtN4B1KLHDCBE}1Cx?8*j<rcVls9{cV+{CCnfi+K_2a;09K
zd;UeA=a0+TKc<g*)as|*+b0#XBj&Nrlsg&EX2!g7y?%Jx`ZpU*E`7Vf;}!I4o0iB^
ztI`jjjwG)B*Zr`(Q}TT4pYWDPI-CD4=GKeRE1&8Y)GKpaYp#d4U|X*J-K3Q(e%I_5
zJ#D`_S<$al^O3=&BZ-CbJN}7%wCjBA&z~8m@!{#0s=n?ux7Ob6y;38zbe3h}EaT6P
zrJ02?+qO@;#HhRWj&byv)jEEQ|E4~C^PfTMQO|U}^Pg;D40pz5w)d%Xb~NA93u^TW
zO)S@n=&{WRIs7QY@2bI%uF#B-o^-#!_&4l)g<^q6XUat%iR3eyXRmp-;Np>oh9<v`
zZs(e^>d?E8LW`^mE8CAIzKU8WFYL9JYh$lhQP=(TDc?YQtcG@@NrbWckw5Q`@?&<g
z*Y_wtddu$mF}&qZ=%QEiq(9oX*?2C!@p_)@NBQ>B(~@7#W;<Tr66?pk);!{3X|LI<
z=l)ks_B!2qbUa|=j(L~fajtzf$&BGYgTeV97X1G>_#f5(P>=66U4LuxxA=>u`^D-G
z-7~qq*s5*Tr1;mn{xiJU{3y5XpLRAs>yKl<9<JLe8~o62>#BRsOaB=Bn7GovxH7rA
zF!96nN2Y)F8B9NTPxr?<?tI_U{9pej{@Dkf8VC3O`M)~<XJ`(vf68wUnk(G`+8KD|
zP^0d?qCYqPs$DQx!2hZLKST3!`=`eL8MfH}?Wo`U{ohJ|)&RZL7ylL7&;7+F!g%YC
z>3@bv-4En{%hqWBXIOrli&c02;y?Z0qaj<PK$B?Dt`aLlz0~{<72Ds0)_yeq7XL&3
zcis<sck!t6Z_Yn@eZJjZ^x3A%Z^T~wQT}nXddaOH`A4d*tv7ule(B{rjvp(RWz<Pu
zGRd~~bv*n0SZsJ`VrpjU3V#LmpJ%}tvu^8uhJ&*I86K>W7uo+{^879P|LF4b-^h})
z{Gt6(=(^vB?Qa=BRLT0>aDD90eKXeIuK$rO=W^X;H~%<)5Iy^C;ff0TkbNyjb(bxF
zWY2Zy?#o~CU0<zVF#Ox=|F!+^#QL21H+O$~^}}>=O~v2obs8D=B6jjwoA=GEHJhm&
zo&8VXqwe0dOP?)#a9^$>>0{z`8|g=X&941B_UXCP^)+kWExT;Ws~>y$-`xe-Qf@12
z7{7c4wTwVL$-30~gMRxTtlq!r{vV;^53XK6V&D5usXhM3)b*L)n;*P?^Pl12UbibX
zo<BCPJGx6E?9$CkFDk+h+$z1M^0E9#Z_)MN?1#S<o=jhU_>sM2{EzH|`;-{|GpN?z
zuK#xV$MgRTtW1BG{8RXMMShFiUbfYb*UQEp=I!fUa=bA8p*%x{y?6Nb5Bm?_XUY^8
zH_u;E;eF^E@3(4;Wjl9YHLZ2Z^*{1Y?aJ5vVy|y~+r6@B+uHvOVd4K7jGvqWFG~4!
zs{Y`X`x{f=zbX9Bz_RIwclo2eTF<?H%>M14wX6ND_2b#zj}uMr&0b#PaM>i+{9#(Z
z$hB)9<8DQ+Kcvt1L-|PfEVi{K-*2&Z@9}?hJ965k%Jj`GLbtEIzx3<&KbgOO$Qt?q
zO*;S7{&xFs$A5<O^*=Ps-+X=apW){EZ&N>1e6(+@@e>ZXWLj(cc8yIo=wu_Y?*TvR
zAK4$S7xYiBsWE+=&nJC*>85>V(|5(KU3%};Kar1d6Cdfb{^&kZCv){c)-U5fllDJY
zvHyeje}-G^|2SiRyJg9<{4>0@z2lGQ`u_|WujjManZNku`?S5O&bUJET6IaTw@-AZ
z-gT#s^V{w2FVDO$_)k9OmHDsf&8Dk&dn#P9aenZ&`rtg{j{&N+^LD?!cYeF?_2SQI
zpw$?Vd_#CGL-+dn6Xj9=88&QN{GVaz<nS+3Eu*HY{%7!8`S;FBUEQa-WpB>^WPZd|
z{z&G#|Iazk@=kBRp1rjE^82bXW2fTtHf6sal%Idub*faiyySkZb<Qrc%8%{!yFq6o
z%uEzv;Io^*{^5Uy>(6$q3i;2_us{57-I^CYRr`1T+ux{K>{oAod;8brD=%`Chs6qe
z-TD`Qedb^3x|8*v^6WY5-$edrxHI){o$b8c&wf0=xAi~6ClC2A=f7Bo{WAJtv;WmJ
z&_afUTG2Sqzgo~4B`8(1{&%XsN<7on8y6ntmColqXz;bSG$PMI?oo6_zfFRiag+VL
zf0Ms1_dcX^Pq6NtvdM`TSMEpX9GY4(b=H4|=~EJZtyW+7=kb@-Ypv?|(gm7hcJ$m<
zTpVh*p)b{2VA6H>w;91z_g%j1o%JVw{b!#44BGHbe|DSxPP4O>Z=I)<&+}u_!}E<c
z{-s=Zyj9L9f4H{cw?cc2OHr~|@PfYU(XOAK{I)6E)#UYd*=+0kFYYgX-ot<R&8tYh
z$~ga);y13QaZA0{IxC%de$s7PuEfb5wLxn{41R7=K53uGV`pSM`GAd?_OIv{Paj)<
zcx+o^J3oB-ubD?IW(BSfDvfG$oaO7(tMkZk>dU`DTatOq@>$<Jf1}uT?AVfdaUXW<
zzu}r%8WtoO845b2KTI-ci4ceK1V@EFN7H{Z-2x{CbqDoKDx4CPxqMaTTB+=iYd!xN
zf|4~(X$58lP73N-bh&5I)yuvam!p<#$quoaaj0Q1ZwsiKU4KygKf_ZU`w#x{zpdUk
z|7Z9$H8Ozxw=THg7hybKvHeh-=*RD^dpsZH%T{DNew^O4CwXDkJ@Jp_Ej7VQBC`KU
zespi!`daeK+5E%*6fbOzuHI`L39W^%eA(-C?a`@!rygZTuTX6ZcVqa^ps)W!fBhc;
z=cD&O`1VV_s^1d-=K0ds_l*Cx+7zyLm*H30e(OI&XMNgwq1WL7htnU(cSudyc(Qy&
zjosC)-b*jniPyMYS-xZU#Czut*xB!&er*1Sz8~`+WyoJ&{`GI>_RrR!QF2iJmZ!!@
zL-ygQ<A0RzDPJ)C&#?LL=HL8Lm$vqAs=S~6JN#Sf7xDe+pZ~1f({F#`)1LQg@%m-|
z8MJ(NbEvP%-etdQ{g2*F@xR<k>VM4C{m*b=E&LG6oaz52&XxbC=3W0qJ3#6i?9j{G
zs{a|5q`UuT=$v%_FV_{sDVZnhUrJv5&+sT^`+o+ft?*Md>1}v_)!(W6AH4rrpV@z_
z{#(J{IsAWwFWIy5-(r7!{osFwCiP>^-!|k6&gbOsx-YQD`hoMK#E0*Hr0wPYUGc*H
z_WfJ?Z`{8<%lzB&n|6o)u3ldGpCP*iaun>uzbgZb&(xXL$o{DO?es_S$IK7<kIps9
zciBn)iTz;TxlgX*x#OfqkIsJ8=lQYObJxYK5o=AkH5K+>+N$w3?_RBT<mEiwQeWwy
zuFD~p_12bhduMkXus^o@A6MXSrawXd8Je>GU7s&(pE|$uKSSo#qz_Ne)G7T)ef;fG
z-j`nEN81nC3&g~kH`ys>T!`sZWcnv<eV6~pH>=Wb>zDt?KYmaCV}0}EYo(rlEDI|&
zRBygtxA*FQ2Jh8xpVY{L$4Y*ge@pzk?mt83{2Tipxh_At|7P~%@V+{(AD?bSA1z%~
z;T$6Pa-QObt-HK$l=w?kga>y0XE+pR^Wpw&rLI@;JQdfSukW!fEEX}olR4?6NX~+_
zYyUH>-<|yH?B6N>86JH0@1MtiY0V$Y-^q2S{;~YHs$=vrtox((gX3NA?f5I^mYmKu
z=3BY)NB4nS@1{R~&-r8fkzG?CcptTszPeAOqV8%`bVf;uv&_Wi>%Zzh@Zb2)&|d$c
zLjI4?_G4CC=S_Wdp1tnce+Ev)S+^|pZCoG6x7x8>+hdwu6k2mT)t=W*_s8d><sO^z
z1@5S~EdIPWQ28kH#!d&j)%*T4G|&If@St<rtd#8^>aIuaTV5)=f6gx5{x>gw`z~8<
zv)jD3OS4qI`Bz<!Ub(z>$*nDB^V03JKJBk`SYP*_!Q}e08t0F~|M=zqGc@H^6q>%a
zZ@<r4pMAg6YTG<X6YG;Tq94{DoX7K#<$z|m)w#7F%f27I<vUyGRNAf|wYrZs&Hpid
zs@55vKh}TO?|<;&{O$HfZ<ii#uTR<EV$buRAtjdY*{OS)d!kpzy8d>kiS7<+`u6tu
zo{OdPMSr9pw&(uRs~>nd?$oVZ`QRU}kLCs)d&NC_x4fACEv2q2y!FffGcf!MvQzyN
z_+#eB#m8>lKeE0@Uf@su$M8q$olCdRKN4s2qxaF?@?-Z5ucvO=(sbyOZ~T#cD*LW%
zo$I<*M>jVo*Y0|y#<oq{wr^>0&u0l-Aolui{Q(Ov@O<#y_#X=Le}tC({>N4NJME=G
z#b@UoJ3tYg{_~4}NBow!Mc2clYUEV5O?vjqpQT1-!=BCCr#;-N-}&p@)MB=68)7rA
zo7wZ3#LK>_O54AzV$$uy6SElR&g+f4U;3Zn;rxaFwhJDY30xAW<SOE^@wiOZN}0k%
ztu8JBqJko<p#h>H3=B+-{R_BAUI_JKGNf2#KX!k6`5WcmHuVQx>(l#1|DBWHQs3&f
z{b6naulHd&jmu)^t{;!*{*#-@^5MmNfqgQsua}kYzhS3&ao<H7)mismdtKj>eK!2i
zJ&ntz>$zUfy4G9A_|IeihoJXA)YiXc{m;O%_wQoU`Hk|@U!Gkpv3|Dqnw`L(xJxFt
zciXf4N&27@&M70O{NZ=Z-UFAn?lp<I74hTt!Oi#Mvf}u!t44?Kx?1A>p8rRG9K)Ya
zu#p!2@4-Jp|1+rUf4Ki|M;!luhAY*63;4b@fct2mChfmq(<}D3cij)38y$F_{a?M>
z`&Y$p=iRyf#nfurLhtyWrT*6+hHu;TZ(jPJwvQ~iM<idr`rLE=<FV_P&n#HoSN;7z
zgZ=Z@5q?X*-T(BT!TfKfTuI{9wN?7B*MHsdz?$&~*Rv^auf0E?`d4|8z}DUOv-RzN
z)W7x=wVorNSO4q&MA73x%UA!obvy3#vgJO>*<b(KFVC&l+kbKSo7w*v)SiEs{qN|+
z{|w8efBji(ResiRef_<E0bTYln_twe{gUyaw*IQt{;#S1b{*>t{!M~=2|U1L7xZ`Y
z{wHl&`@hM5c>iyD_~-4H`v3XrCH`kfo-_GBL(t4Wx4*3W&oJ3`X8n!VO8*(I9R7G|
z|C#1L8xh7Zf7$=d>c{WD3t8tM;unuSb*pubkbaYC^i1=$cU!mAC08U>%KYpsOk_H#
z*Ku|qr^$<yONVdmZJW*d{d@n#>Bscf2Oh4-K2p&&=~!Z>Z^5#}xSESc5?(mZePX&?
z?K#&CE5o@yD^H%9@*(6^>c@)m<^z|G{%5HFD`u1R>#K}@>z%;Pl{#f&J=ZzXOrM|G
z7@=cppQ$Ie*3#VK`hkl*ubvv^g=8gUhMb<V;nTqcjmP#**}rZ6J>+5-;=>-Gwu{X4
z{u=fN>$~E(KE@xe@AxNrp{DSGyvz%!<*j>?AN*$!$(*+9eES~nhiCIHMe|0xT`SrB
z;@Oscm*2m6KJDJ4dlffjWj=7QFw{>w{zrWJKMwoH{Xf*~``7(5uMyaEy{7m#f5m@>
zBW(P9*^^D5ZGObxDD`i-mg)M#{hi^@gg$3XFE_Sbet5rZ?5XF`+q>-fE2foxOflPj
zPm^`~qF47HzWi)I#|qR-WptoM8w)<C4a$s=l>6yFLsR&FhEx9b59Y*wtBc>n|8I-@
z;ZvYJ6R#LFm_I51;}-wVz%uCvXbnX2-#OPG{@Y!-{D<)4?T43N+4`TM!Co@uvhSC9
zg4f?a+8!Hy=$>lV?bLsZKfFHn@y3mtKj!;yow%;#_i0)2qgJI`-z{9=xa<|fto^HQ
zeoOypS$8#lQ~q1l-@<<~KbjxlzZL&*-}VouALX~1#hhH4wNmC+-rj{V=S%aKRct>b
z^>y*t#XmM5k~)1ecHQ(xx_s|G`|g-`>DR$$-9eYPa$5%oUpw#q^H=%j3qQ{xx}DH&
zm<Z!9{r?Os7ydIeCH}j#|3gTBzuA5EI_3=j<rT?}xyC_1j(%JoyJ2sAdp+A8%@t=$
zrrny~slWEBc)&-qJ-f=5=Rfdgym3cu?_*tOzbh%*|DFGEuldn=;U5LU<-7d<v436v
z<^0zzf15#@cN_M9@H>BV^TGJd@^3yb@LX2mepszG{z#nim7`n!>HnDi_-)v|bNa%6
zJU%{Kna{fG)jh3`oEtW6PxnZ?{Kc2s_rf04hqrb058ac!u%(+J{l*rC09IbomyST=
zm%n}gg9ZCP`0u~@{2!P1Z|fh^zg7NSXk)cKs`l0Cl|RIf&x+kU>&NSd?!Av17hn35
z{~$N&8E4e-z->voUt=x5XV$4+Ox=6I^mO%Fqi-22_+P)XKk@k=m-2rGmM?!7*gu$6
zzoophKE1!cO7rvDo?FKc@9(IJU3;p+_|f@>WxHnasvo;2xO<L)!JW#q>(Lj}rhc{O
z$)0d8W7dMtZzokZ@VC5xq{sgZgjQfY^^c9o-gVvnv)Gkd%l`~Mvv1q4U+?wzm8ibg
zyzk#izJ_hx8Fv2HmH!MAeg4URoRB_!^M8icp0ldYK5qRzvmyP@yn3x;#oMFH>)Y@B
z`uTH?VAIc+*DvSp`g2m$@Z^*K4EoD|T$g!O5?}u6Kf~#NGA{x*U%s4M2kPa|47Zur
z{u*?h-`?`_TleZe=>DrdCiQyti~Z|=r0)DHUU%~Tr@Z-`{~6vy{b#t-`?oH2_UoC+
z@_%jXfBE?Tiu$GS@=Ml-#<GX0{~1>6RDQ9oJpQEv(%S<SJ)m1`K23i+_dkP*ap-@B
z4WJg|mtFhk?weBoDYKaWx6G6Izowjjc7JL4pP6q?|2rNj{%@Il-_(C8@=uXW5x#Xd
zHsWq{d}Pd>$a^<qoJ-TovrVRbH`^ZeN$1*kv(JZ4>KGr?QrU1;T4$oisu!nDaopzZ
zJd*HHq9#sgZ;qKZchodx-p<2U=gPRr?d3eSRO*U$aN$a?ty&X%US3(QaZb1=Rcy&*
zv%^V+7CL_NlFjR*xw{XAE$uw?Xv5X4fFp?;O|;zBa(&SbnvxZ`)@_Yq(A21+Ua#Vw
zbWTl`^Edx9+}!?n?)qc=oZPu#k2wBRKD@DL`$ySXiyZ$hWK^<_7mPg8m}qwW2ImUb
zJb}z#vrbEH+qP-frCZPcdVDZGy2ie9j>U>+qAP<Ry_qJkc<#dxW%t)xwzSDxAG+KW
zGM6X*VE1xY*MyI+mYO@Yi3?8O^`GI@e};xSgNJ_tA5LvQv-;xlW0kU6CB=8NS~B*O
z%4$CRd`DG7<5ERU+Js}57cAHi*|gI4;fEhSZm~M<mqLF}{C)G#pTPeNlhQv5|2q;d
zUjNE|Mfl0W{|tX7%*p=GkTPBHKf|l}QZ?lr^FQVPc>V9hJN5qzSJf>3Fs}c&;Xi{2
zINve<QoFeS3IEdi8)nD<Gk7Mg|8`pYKf}bl*#8U(7XE+Tm(}mG4FA*h>HcqqgP=1U
zjJ<aEeSo#0KqmZWP__SIx%ppk{qNlRyW9RVyjHGZS-^jA7lQ`#m)rk1_Wx(lO#IK#
zRP~?X=Jgu+{|r}FoocYZnT2R*J@}_lqyMA&<NAm9d;SUiiTKdg{`h^{eStr=D=Wf}
z&Exy1Ix9Y7pTY&x45?e+4t=}ZwSlKcW&6(UlcY~euXwO`<Bn~6wl`HAus?P9ANS(_
z3@nyEdjB)9Z2YmHPN~MKKjuf{Z?PKRkGyBMACB)37xb)N{m1m$yCdH({89O_xRl46
z$Lj9ZHRZey`9-V_CO_UQcj(b0m95ve+%5Oo#Jc_bWxsj5_P>-re-*q0;%~rzh6h*p
ze>$H(T>o3wUbg<L!2<96Is47(J-6^^F#lQnpW(sF^FMw5GrZ;h&yXbl=I?)oRlx_L
zXURRU!z}C>0@&}xfAIRx@YD18AK~tQ=TCog{LgT$`A4OL{99WGP_FwB{zruQALr`d
zD)k4w|B1MMSp99ukLthMewlxpdi?NzhR%87^DZC$&mi_sG;7z|J!Ri-tv~#qLDGBq
ztN29k^P6v+UtN(MbGgRxLA~JJ%qX3I8Xwke`=vMin}gi)pEv6dy6t~(!~TZ``<wWc
z@jo^{@NYMbzn%Rc_>TFF8s87ehi3JjKgQ4J^xVIXJ74Ax_lEhgA4Arwp1u3YdF>yw
zoj=+a99{b2yVUcpcQr!!xh501^WOjZx9xZTvlC5ARx?QmaVRu#SSU1~Q25~ZM2bz7
z0anQ|1hBh5_|L#zvHy{L*B|Q#{tOktN9I|6+~56muKnSC!XL_;x7hk0xu^BfzQZ(o
z#+xr|xewoyyO^6_TALkl<-J<hb^psIx2;#-zCBa9=@w^dsT1e!lKhJ?|F-OZFk}CR
z%;j&5e>=xy#EblA$iM3!_IFAhucuL*^M~o)wb}uHm)aCBw{4qTo2hzr$;Q`mVn6hk
z#LN1<x)!-7U2gA3dH<_6maAU;+JC5)?|R@Rn*fLFm#_b0{?B0im+e18n*Yt@Z*_lr
z_X+%{e&GJ*{D<9#>pAPhD>6>n&Tp@=<~=ew%WCNnvuoe)DSb5Cy)q`gqWS1Ott$^V
zZ|)EM=-&C&H#+{x;w@XcJ_pRwj!x;2JAMHiCL*TsKUrVJe|=c_pJB<T0QMjD0UB@i
zia!zI(O~}V{-2>)xBkhi`kem^zs=vX{AYM|tgFHPq8cI>{rUNyp=nC}K{L?#jz2Wt
zzj?m)59^PoOMC4@wu#R=f2h7&Dr|ms>Ern3d)C#7yvsZPSgO2d+;{2SnXqql`X73a
zK3zBc(O*H{sYia*Eze!_dY1wFPr16g{~0zcf6M-#f#ucTMSr4yo7G+1C-Lv-$FP?A
ztu^|OVy(~b_>g{-pYdLNeB_VvNA8FJCS@d8?QgAd{yV>1rY^_q*0%Q5H?!`EeYBgs
zxMI1}wJq5U_Um8&`pe%3ZqnJ`^?w-t2Qqp7O|ioMKSSVKs|M>^piVKUbkSh`8Fsy`
z^leK0mFU3#43|!>{`Mnet5kOW-NRRZuZ*mp`JX}g<{#bp&$qpvla}?~_22J!*Jr;a
zPc5jezHaK(`{wKZyZ;&3|M4B4%dvlc>iREx%ig{7T76!jr^ufF@UL&{BF~+6&wKyn
z>z}H;5+~`*^=toZeY5pHLz54q`mgJ%Uc0u;{m-y&ef{*j<335#ZtXwwuWNrQWB<+T
z4;{XII3fQtaNqj##pX42n)`qL{LirM$bW{V@{6RhUtE94dv*U~@#y~yH%`mda>uZL
zft=(5j%iSy{zQIFD*aFF!@Z@C`2}9aNnE_9ezkP<!sO-dHr+fy_dNP?A5_kN(&4YQ
zMk$h`&*<TkRM#Zid2%N<-tnEA`janW<!QsS+JD1Yxi<G|l@=Pe+?5Jit+vqr)|H;j
zm1kEto}QKKYE~U%IU)JSa+}i?)mpul&my-eznURcy2@>;)sB^iiWa(sre*|(u5vS(
z>baG}a^=|-%g)Tct$o()(|f-wxp_LJymqf1o%(m|oqE%&bKkCoH@&*_iZe8|>CwH4
zdy)$$hIu@3a}PM>@Ofi}PZ+ak=YhusUpLG+BU^PNCQe+?ucS~SCrob1ibn=tUxozE
z)w-hXRI=*woREh>LOqivWmfLkqo%Ka^w9>1Kc+cy*32F2n~y#CX!6`$xaH`>RbG9{
zyd8^!3|G4C<=QY;Ys+$pb8|gT33)E-x_Yh{biUn<AMD5L6o2GCTC08ZpX5$~tf-Wm
z8L2$qs(PpFSA8~f#i2EA+0r+PWll+|b?(_c+jH&vgl#+9Us;%UZ(hgtNM?U$k<_a`
zYsSExL96C$*zrc^txQ;a?~<kB;hfz|t4ft6-PT$bg&)4Muxqi~Uj0=M_8FbGVDB`#
zr~dGd)8hWquYO-yrRmSzcPL~_VP&1wl$hFW{Ni3;Ua4w?EY(l%JRG{Pdtv)}@9)|V
z*B^=JuL=6lHv7?k2EG{W+p+5>)+b%kzWZX=mcS$5ciAmiC33txBdvGJCZ)SkzS;G;
z`_6s36={EM9_!<n*+=-K4ixHnMj0*a>fdzqVa#J2zsMPvTIBR~kGYu@97(+E;b|^$
zT(Es*`?0`hhm$g{%>T`PK&Eu!kM6^g^}<g~7u(or*`1bbDOI-d3!NF%YME?wCMT%7
zO_}GFljn|O7IREv%*@)&#6_K!-2dqQ&vX6}|KEZ&vHuxX{971${6E7dr^5ArC&jq`
zXINE}8K+c#a{uG?zm<2)|IZLI<M9W!{l^af2>_2I@V}Vt_Mc&b-PHdK3Ag3{s&?(a
zt+W20>(27O4G-<V%FX=u;%WRR?bG#dnAt(69G%sAXAN4s04_E_i)23Nf4ladp}AoH
zgZc5>*S|IWsQ+!_kB4jjT{No~vD2<UB>kU(({_KOo$`-(#}8}jKQ!0ae^`DvSNylO
z=ao9y?CsNL|FM1WR`va!w_&f(UzzpknZ1(cq+0@EUw_~KIbWy#h(i4bFZ*AT_SyA+
ztU*V^J$HAAto-}_&*6WH%>Nmh0{=5yIQcvJKf}ZOAN>C_SXnWhKL5V{S#|uIhyNMa
z_JOX1`OlELzdxSiKSRd;wpsrf-kKJEWPY%{-^TW%_`weq^B=Xhl*aRWum6$uOV{16
zKl1WgJIT!Q@Lk0*E{mSsx*xb{TEwT7#e&uiVsZ7=ptVH?$dmh(^~d%%?dST>ka50M
z&gO^g$NdL>$sg%&l^3qDEq_=q{X_pqz-hhNYhH@Csz|48n{_+j(pO)rcha%pj@Q3b
zpS6$saBp|=ve&=ZmM(i8mD~Dv2m9xo`yVpY{|I%?oKeyJZL34Xgzk^c2U`P#JVNz9
zOue(JkFmU5q2|nSl_v20L%shQIvoBpJeX4d#RxQ5{G<Gj@PCGLeGOpQ_CHRbT4V8l
zhJ};AZU4`3c>ja>|4K?&r_aClpW)2k3xAvI6Z4z)fACv>^SRsKnRN_ze?0pB@Lc;N
zf02q+r|LVZ-pzevFErQx=&k;5^HyzsRTbC%@U^FI*z<0W=|1jl_EVqE_;ZE-*YES2
zUN9`+Klq>F_UwPWxBfQPKUnaeVM~4Y{w)7~sq1e!(?9AT+ZEpOr8epQ0eL|i!-wyA
zRF^l~m@fMf?qL=cxBSERBjOW$Zlz7ly56t0(&}tU>NJy9*(3+w*!%JO?oV5OV*W=C
z`9DJa|JwX--T%+P2Rgm}=fw+<C^4WQ2<#sT*#A(K|I0If>;8YT{~1{RGkjjWKnHfD
zW#fN_gBt%CUZnh8`=8;%`ycB68Rp6|g0GC?|Ixz#kJJ4>gR}bEd{8&+p#7g0FSzyX
z_x@*?L2kO0r@uGTSN`Gt&(IvP|G~`ro39_c-@ISGhW!!$t)_gLKm0$IfB62Gy;<=i
z`%!z2EGwRUIzKWW-Bms|PqsVy^4oplFTb1La+!6kJ8jq0xqJWid^bzWNZPY);<Xe=
zHmvs)0i6{HYC`<^_;*A7gDLVK{N-;Sek*=|%lkL$KU_X;r@wR7xo7^JzjUYmXE?mR
z`;+&w8}To1#faY*{U;OuBl!5Od;QA}uQ;!}zjcq}`d9aaC%v-vo_&_<RkU_k3-ix?
ze;3w2IDP-->LcF^vg9|tf7|@A{lP2NYkH;j{52^b>|5)sUQVALykWY_<v+Hoe?$lV
zkY8O9?X^+K+k5BN9sd+xl^b~S9+-cA>on^N{3qvk$bU%t&+tcN^5Nr=yFZ8@JAae;
zk=o2;Vech3&p!6=y2tl1Z%0Uj?q#nl|M>4$MEmV3C|dOWxOZm5!S@2KJd7WD-~W-8
z{LjF;YwPZv+nT=_ZM%}#l&RG9@AS9+zf%@(+2fM5x;ST6`*CURuWbqD$F`S+ZD;fl
zIw<^<LAOfv`+tT5srf(J{Qq&+|7URX{?9O5^|#W0hR=T%n7-NfpJDg%ug^;2ME^51
z$JsyFx=-=CPRZQ(Zy_JvH|FR)37LQ7pVr?+_UYPZ`F(;;Ez5pg&r%cevA;8=*I7Jq
z*^lag*;xh=Gfycq+dKY~sXsX5Kg0HEYuDa7`Z4|6{J)cJI3LcmSzNmE2iN;Y-;exf
z5R7KGoSFRL+3pXQABIgXR`Kp#4Z66_@YK&hBLyJ?-KyK~_rK`BG5_Y`e>{)=w${n$
zO<z@aIbQakW!>dC#mie~ckf=Se0XBUeug@+>|KfmvvsAzKb-5f@2^ukS}f>!^xgV}
zHQ5)XKC1OZN4#9mIVnJA`}OzPU+tIZ-wgi7{kM025<j2&!}&M8zZL$7{t$KNW#-~6
ztN#pbHrAr&kH`zX+!*h_;$ZIM{4T36v-TgEFUOs|d#2o_c&Uo@aq})2^6uTTF*-W>
zuz>OFE?5(`t0L$T=h`Rdr`rTM{q~biS#jdFCkyk|K0ZGFWC!`v{@4pjE^uu^ey*Iq
z#QuZt{U1u@Z%Y3&ux$Q#{YZUB{bsk-9~TE)-=|sO?eihMGx$+^?-qWMmmgnBg>BgN
zboI-!U+ztR^mW%h+#8@eE4zEeJ)Q-v($5!w&W$y@|Ez8=Vi6ltgB|OChNhPP3<pj2
zr}F>MJbtKF`l0z-&j)wiL$-gI-=X}`ykSrEgSTG%yfr>QYFC|p;=ESB)h1YN{wftK
z|E?{!E57U(ttbw=Tw2ffx-j}>)ZBAZ|1)rkx9!nh`@+Gr_+vGWYL=CfGVuH>X{U>C
zZEP21++uB<xu(Qc+yCO5-otAq&-OLCB(0rn(=l=NnZ!n(bsLYZ`8_kxk&AH_@)0IG
z*Y#x2y6~T2#kR%g*Z)en`detlU5o5*ifh082<!gvs{W)|z4Y^+PpAJmXKePjZfEqL
zeSfQB&V;I8X21T2k!|O5TiI=&Fa7iWb>;Iz{vUex?fx_9p1kV${rltfKflOoPb$@4
z^m}*a%hk1f9mlSD#{SAW*}%NC$ZzTTb$g@hn?C=WxJNm=yl$5H^Zj4WznJ_j@IS-k
zvLAu}8IrF5dy>EUk+FD9p5pge^)*TLm+~)4`!CLK@!rnu{+}UC;_-{9NA`>1>un(I
zuPOU;-v3mbwf=AWAM5`NORxTU`(^QehRNPD>Tf((`Ok1=S-sg`?fp;Ar^SD>I<fz&
z!Jm@#pB4Ty=zxs*CV%tyKkxX%_P?b|_Wza2{&JtK{>iHk@_(mP@c-4Fzw(Fje+KpZ
z!~Yq6YZl1=is|2GpX1-)9I<)NkKGTolT35XuErmmm1DTMJ~OjyqE7ZB2~kGv$|bkm
zR<6<vmOVCA=wAM|>Av%SJO5h$()huvGaq)W7qTd7{&(@fg`OX)8NK-8<4%9Laz%M=
zU|@Kkw(de!nM3;DOE<kLJX##MvT@bM{nz$;#j}QGwjTX4|FDVFnN5Fe(vR-o3c0gy
z|MbMnV}j>i9OK;aXww-Rkz$S8H?N(}ToZ50HG}JZ?4M)n9~A%j4hf(I_UZF`um5LY
ztBFzH@j360?7F>smv@!iIQBD4;`G{Wo0m6V4!CqHQ~sp->HV80Jv;el=aMaZHvgS{
zFkbZIJc&Z3)$z9;Riv9wm9eXDXx|%T&^)K$=R7{$rC-mmtU6bB+9TQE()!lf%fl*a
z{G`8~XWkQg>__mCS6fSiMGx&fvm$Xvzkd7PAdv-6HvC-2X8%QYy46;-mG;Hbt@D&Q
z?bE}S$&0rBE&kD5pStRg>c@S{m)&)&U7i)sx5v9au{vAnY;I+0<-^&xyQ5cE227d8
z-J#MKu_P$;acQcGVEjvc$wwb{wzu1a_aAtqne-vz9@qK83Y$>QV{3W*#Dym&txo(X
zlI6PN%F?JQ4}<1Bx|7c7=DFqKzqy6`%sFRPq#ym+$1LnF*?9beUVZPuqz_+}!}+@o
zCGDsekLT@N7{+^SsnnM&r?pxW^Nd>-Yiyfk&#e8Y#Qx|6@WA1}&Mo;rnP0|#<K6h5
z;Znrvznf0|XLu4lz5WKD@PCHDm-FBCh5lzy+Oz%N0fYKq{XUo0J>COr^+N{X2bjnF
zGwFJ`)Uz#|EOVm+-@dFgw_jVgZdKhYS=$r8_LtV)tG{IbWWQZg<-f{Y@o&e{-d~T&
zt=512Pu?<o-kkJ1eDj}QNNN81Y_9iSx&I6%TYm4WuKi~7<9N!h{|r&z-#_VGJ*iYE
zDs$hi?3b_dCA61pzaIX#?B7-qrmFg1`?j98++KEnR{Z7gdizgS%G`B&f8XAEAMZck
z`IqwFDHVU`{uAl<=l##{&h6JeXQ`hXL+@Aq`r`4QVM+WVr|lQ_A9B6jdg(vInLe9e
zLOcCm9011$EHs&)>fg5h=aIG=e3}p6e}<Q(_13i-{~4ZKdM5wP@}&J&&G~2dd%gc@
zd~^EWzD@dnee7km|D3QtEwF&8!M6Qd-G7Ej*FT*9ckHhIe+IW%f6Wih|7o>{{Xavh
z9P@t$@AOx79RC?k-UeL&cPfVc-*n~g5e<$kOdJYLMjSQ*jt`nF6uz$idUDBSU$t48
z%ht`RGP!(l*>?Be5|^^hs?ELZA9C5(<l0$#>&2ghzpehk@t=X`k3&u3!`ZHKEFVo@
zKe}~KS*jvFYIez`mp)xQ-pk@xr@eNo__L)k=(%@Al2}>s{r?QJ?t9d;&u2>4@BAcV
z6{9@w(ef;j%uk0E&uVFguAF|#aF24sQPW_-spq%^mx@N~Pt__s^l;T<`_u22^f$df
z{O0XPfBwWpJIp%_i?_+OnsXGq%MJBf>$CNk=H<57uB|?9!5Y;TfjxziB`bp>Vsvxz
zPn7<-RBr$}0#VLUZVThr>j&QV_da~jRPp+udDpv$7g6V1YGURITuGa*z4*2HF1<y^
zU1wPSEP0#t%IR9JH2<b-p(z<l+C!#2I{Yj6P`<?ejTO$_HkOaHKK(m+=0|>~^5KYE
zTlHl&8y|TZanokqa^uUav%+Uj6FvB!VRKrkrL5(pGwRXoe=R|`0_ZD0xM%R;a%Z7X
zrCsJ>8Gk<U<5yR{ds?|oU*ovvQ`3;U)0oYU`0i0zd2)|lX6T`i<=%!X<5@rH)|<{h
z1HM*^@h|A68VdGFia@8428?3=ba9<t>DiR|zqnqh%YXZ69@zKq-q&B@TlOfYFKQ|M
z^fbCMy6!*2{6DjwU))zacj;yGGkfjtXG<PnytH#wNOZ}cx4-Jt=W~?Ah1ak9&(QER
z=)V8w`KNZO2WoF$H~n&U^s?nH$thdPsw?-$PP_j>$BRLR>&eQn@4NpqnC*`K_4)HX
zfqL`rkv04Ny+8A>eSfO`PxJm(`)|7S@0@<^%NKedxBB1r7yZBNf2nHM%G9XFfA!J-
z8}a!3g4fKyK>MsfeHmz0{ptPf+<%5ilB@nR+^9di|5t4Mx%*!BKTUSF|LrUC|Lc|h
zIsek`e?H$*|1%`7>Hg0U%zxbLKZ6nfrz4>KT8V$>?|-uOkMVzojoZEdGhAG@-}giM
zKfm>i{~2z&H~eR~bo1BzCi_oif9(G=Y?{vapJC~Vzt`7)J@cO-*~eb!N51RFy5?0s
z(vO4*yo%D>nyxza@0`Q!T|Od{)FrB`S7(M<&(_`%sh9KaVbi-?9_tkQTt5}x>DPV~
zGvDCE<~6c9W#O|Dm$x2ET(wr+udHyc<!Zk^rB;ta`^1I40@k-4xwN!nVbI*HfH^gF
z3MY!@X`C$9lRsZjvhk;1ZtKdHV-K^y+E)5yU0&FE_)3qVgpaSL(>`%guReADpt)5c
z&*cxF@7d33dcJv|(e4lTmTii8S^R#_hkM(UZ|ARhsq>>Rrhl6DZztDnE7Lr(tCxOO
z{+zQ;=iNH{ljlWh%+KyIdQ{`**&n=q`nBRCPb$~zu1uSmJ#}Hw%c9H25^skX^XN@l
z*b(#L`JwPbN!p;}-L)%H=Tt-<jhNGJ5PT%{>dudqe0dAAEZ0S9ZsqD-tND1t*;SH#
zqPIc}x#!7U=8Wg;I8td^S5TJ$&J1~Al9i#}g|Y*_;afeR=3%E8pWhd;)2-3^q4?me
z_apOT^E>DB?-TfAd-3_@w_EGwY63paZ?|E5a8~Pi*uL$TzO1hGJ}ReuWy@TlW3~Rl
zyS855@?%~8qDkL=J-c`5X3CCP7B`sB*zwif_|LFO{;lvMTW3(I^Zjk`Z}UGTAM++I
z@_iH=e&{~Coy8x+AG06X8Xul^{a4-e!u7AD)SLDMu6<P&r6M(N?b6K4S=-GvMjWkQ
z`SM%7)t$K8?h4w=H~ai@!ZugN2$~S1to*3go%Q}tyXpMjT(9hZg`3uX-|}5)|87}3
z@9=-&{~3(``F}nUZ+mXu>EH2&`^*0AjGWoE^H<%z{m<85+PU01KDPSLe+FK&ms_{H
zvm~vX<bCPe{;%I}%+O!(r~UIftEu|CYcIXu_SZ`KnC{E{^S}OQ;PY60Vd9)834Qba
zGb{&9&9A%ncUR{1%m4Ui?n%5Ezx&_bxLflt+<&vm@V5=<xcrS7^5+BgnLY|DUu}MO
z{+Hq}zW*7f6n~ig@8s0~469`-zwoBjyP!t5yk_0a`=6Xm<A3x2C<m=T{dxPP`+o+t
z=?4E9HlFkR&#=<xU+%B)`jhj{?0-`_vHn%!kC*Y!9REdthQ#04Z~p#g+WxlsZ)Pv+
zf0<l=xsT^R!^x`;?0;)~kpC5JAN;}npWprV{|w)P9@u}`DZlIMzn$~nWCXBJtjYS}
zx~L}kL+<tVtpd|_ZCyXJ`r+Ih&CgqUV_Z&3TL#4CntjOKel@3~WZwOpi(2uwB4TdW
z<vyC<_A|V5k72y(u@#A*W$d>cO|e`%f6HlORo`Pmle>ynHXd2BBKgC%DOnc_*K!;e
zZ#xve@Mn9sokXgfR>3-D<>M<7KiimZIacs5H*M9^nX{HXX18>-ymI<u))iwJ-KA1j
zWU_;M40q(nDYZZR&(QJ5dToV!?A036N4j>o`cW6xt8BWWv;1JiQU}RcS#DR`tw;Q2
zk1oB!ue$Z=k_~sGPV4Tu==GoB$+zl>&*qrUekLha+Pu2qtkD^t4?E82rtDl8B$gF0
zCuZffg;8@BM)P(ow!CoU;j5q{0V}OcGtb38QLCMpw#RVJGaLJP4_-aJxh=G7p0ISw
z+S6zK*63=S67HUAbwxXPiuS`olT<5-HKtJ!b8Nk)XkA{Z<Mqj31zNU)O6V7qjf{Wf
z|Htk6pMiDb4^!}JsN_YFvU0~CJ%8)_(cORdt{?6n>}(UaoUXRzlgummJ-_R|h^e$k
z-g+DR56``?>OQ@^Wwmz2qL1uH`URuneq<lo6mcWtp83cAMo05}^NaP-Rh$2Ox6kzd
zVG;h1>+|oB>~+`wGi+Vo_mA&IarUHFc5)xs-|SodAa4F5&sy2Nt6prgQ~RKN>rcc-
zyBTt-+1~teHBKL=Y>YXteb8vj4u<s?PgZH`U){g!%*T4Z`hzj`4>s5{+Egyd{`Bwe
z{%vhDADtChwm5acpX48_Kk`3PYqlv~bHUwg{fFz1ecyN6NI&A1<T|6&9rxkb(v;MW
zJ%v9nv^(hL=BK{?m%IMJzlHlBO#aXCq3qcHNB&Y3!4KU3i2P^p{m?dl>Fc-Y3p47s
zo^LWK{jhc4)U_TL59iw-_h)$7t=^vdr8n(Sq|p20{~7q+?9p9Z;rVDoZ1lrFvsBM*
zesrIo`73CgyE%X6-#d}_qO#1U?P{A}np>M#o6Gui>eo3RW254tVqG@hj*Yr=;5_fq
ztw;1GJKE@d^cG$-akDa$<21x!El4#wEb^IuKKswmymbFl?)h8V|Mu<Q{QTc~f5rfx
zed2#h?Wf28Ft+{|Wc%Bt{^q2L%l{d|_rLk;=>97Zd;%**q0fGH{<ie~KhYl+f3yF)
zx=yo#IqctokM|G9-`xCodH)~bb$^?EuGVj?iGJ|D^`GWP@wTt|Z}w)L54`wQ|IOQU
zzfF67v#niz|K;>~{x{#hdABxY8avC~$+c6@e|q|#p<{OagYA#kzuo$uVb<;6O8tKy
z%x`6^)%$XF{mvWlKRP#qM-ts3vdZ<JTfhf8Nm<$dk@^0gfpyzu(^&g}y?-}sxi4@l
zGWKwB@xpBT&C}oPW}CYDut?XXh%Dg@dA1VWJZ<l(av|rJW?Q9xS}dGj$uc`7KyR04
zUHvNi4eNg>PX8m5`S3r(56$@Q1%Id4XXdm1@PF|AZO$*dt!pcc{xcjDm+Fz{-e;Nl
zizocoxy{KBeT9!$P22p4pS|Mw;dx@)bHf8aY`x#HCp`TTufFp~^{y|y(H`5kPd>CO
z!uZ!j)V|T@_y4$Bf0u&}8N2?s`=46f_3!fBOMjdcKRh@7;kzmK`5%6qRl(#N|4;b5
zd`0nrL!}>`e?%Y4PW(INo`TfOjvrN@-!8gvvs2gS(JKZ2_jZc^8Ja+6q36B%&+uTQ
zdHj~CTbIANTKwC#{;<u#4_%dVj~{&jtzCGi`=6n8wfd10R|AuOq<?t-oBucWKheu#
zI;Hh*_1`uyZ1~M+-k|+8e*UY8zmI~q9l%l&&YrUUbl%e9b+6U8f7`aG@V<P`>`(9G
zQ_p7{kF5;7_n#p>xBRa?^S>bD7x(SXy<PrC`&o1e=+=-=d*6Jij$b*CQJrb0df<PC
z18-mdXJ9|``7!tH&sG0ytLqQQ%}H05d^yi5ZD)GW_4oG|{by)?QsO3+xoH2_*ZDs<
zHmtnUw|L%hg^w?9?RXx%yKZj$?Eef+dDC6?z5e?v`}3WDE&Egbf11y4jsK<#?!WF(
zdv9rPR)4YmqG|Mt=MSyk9ya^ES*G%fsOMh+)U;l+^mlswNuI0qZ|oo5|EstDdHz!Q
zKeJ*E|2uA}{%@)A&+RW`|1+pn8~tb4c+K@c!^-x@OY3K{|4b5L2w>mv@BIBwQU4_W
zGu*hn^gqLk%kj&882@Kb4{!L-@MiIW`j<I>{SV6jw62r?&v4Tl)H;4r_xk#;XZ0Hw
zI<PX-RR0e9!|2~B#a(gz&^5n*HXoiYyq}pZQE3yn$SKOR<gvivldB`xs^=<sY(HDH
zs8;1*(RZur8}-J2m271DWm1J6&67XmR}()eF>0DTFRSMBpP_o0R}NZbU0ylk!IkCl
zx>N14c69vC*?DQb)(^`>`)U6s)o~r~FN!S8=Sx)AGdfXlem-y8vZcWto4R5yuWT%N
zoO$KU2G8??)BNU}#<<k(i+J%!z2l%a`%mFtWzYMj{>$E)cKL3``Oo|xzJkZNz(o)h
z)_|$l|FE=vRNhsm3OXu%fA*1&VoO)YX5Q!5|0i8z_#tij%9uO8xew2CS0q1-Z&t50
zciBEKQrQ1eX}n0*KDCd{(NRCkzDsTIGW88U9r=~Bn`ztjfBW9{e^LF<&?HoMtbX(H
zH=F-6u-yJTu_pXO_rquHODg^|JpTUX`iJ<(;YZ(hmPdv4n;)^4tyur)dZUSc=d5}2
z*ZtUZ-FMSf{Tl6ux!y;<OQ|>hu{K$s{O~^m|BZ;_-FxF=!y~R7ymkDw{1N@O{|x+g
zdKLE3KPo>)AE@K`G5dkM(5>0>f<KfWvA3D{OIA3?Z_-(pYr3BIN7wPdi(9>OU#))<
zck{eNX&CoTM+W(`{LT9xT(SS5{=VfuL%zu0WuDhe_uriFzVUL6|HJt=4j<99@30Y?
zFP?BUZ~3Hr!5`Zr_V2p($Mb`~&!%>tD>?fFUr%^-=|}sK;@HTF-A8xLKU|%?zP(P7
z;oqXSxw&g{*S=Y^_Q96TTbiV!y}cunw{P3JZF_H0)4h8fQ<a)Hlw7(bl3e>Nt_F&R
zIxxu3k^d0D|3f?ejW%c*@x{0C-xmEioV&E*cl3qykK)byIDe@7%|EtZ(k6Ym@+-4%
z<yHADCfED;`7>@ETe$euEw}#1{2f-?oBnXtu6a4DZPGq1@88xllvr*>e=Yktzjagn
z!DsV7_<dZ{q4al-ea=f8`)8}Rt+*%gLs4%1({z5NjQS6I;x5ju)RfMCA<tYgF})%E
z?e;&y&;N0Y|7NK_=>6u&#=o=e^g8ybM`Wr;ePlmS-&vLMLH}4Rv%lxkzDFNx%!|uw
z7ymf!yTNta^ziF-QWgEj<>W5x-|}U5Y<~FVt=vC!ZirsKxvXwsfbq{QAJzZJ`u}HO
z+4W)jQQrE8a?A67dzp9Jm_L3S{_xm>Yx_A(B1@Ki6zhK^`Ny~{_r3h_kDhAtO0_F_
z%=L4n_il`gVo6G7kY6sp?LWgG(fV&p{~4M}V_sC5zfJ$`^g^D0Pv)ausmDj;B!A>D
z$*9x$(fCn1;^L$1AG)QHHu4X6xsS|R-(I4d^q;}|%9dW?qjLJ)hxdtGHLbM{x|~~j
zeCOp-maPnbPF%Hr@Jj!On%l$=_Yd6{*ZbmstK*OD$MyaDl>Zoi*x#}Ehx5bFd}|;5
zXK0n;Kg=&&ao?}&l7Gj=R|0xd7ye29QCYV+F6#EuQ`x6Qte0=u)5T!@vwl+j%3rsC
zGyG>b=vbfb|3fqU!0h?A#J{CpwF#_!P-}j?PT@!Px*I<(A3lEAPW^&S>cic<{E>Sv
zmHHa$ms<OrUr;gsaMjnTN86Ux=IhN}8`-JS_EqoATL-(l3;0jT|IqmUM=Tpu3^zsn
z=zf^rQlGij|B>kZE<4>9`_w+lx0mp@*@<1QNnG`E7JFO%mbHdo`-P+8DkeKj_qhCZ
zuY1tWO&^|~5D$E{-A?|aj7L(gmZO6F^{?OO`_vt(-}e1b{tu1#H@_GEyByD4!rv*S
zf9Sl>kI6^=$$VJ*{>Xj4%z5Hh_xRZ;uHY4pzFtym?(>noV|#``#U$S3!-03>?nK6U
zuc@exbWG4$w0ZAd#;nQjYLfpmu(JGTX!=}#(9-_F9IL<Y55Mo3FH*X`W4_du<Co8^
z{h<B8tTXu|_apcAw_jNzr{#;CuU}UY|L}X0-h<7v&Ij4aeq7#fWB=&(UG>1rUvrfY
z|C%<tRQ4)Eo!`s)50%sZ2=A-)^DynddHUPg%UgPOv<GhbaQvWd(9gC)>6px-n!L+O
ztq}>QpS&v1l~)wY;c2LMso&`SN5uM@&3}fb_6n~543GHVO#Qg}@P6SpC2W@$ew^PH
zChLB9zQ7*F>Q$;2H*Wd3zrn^cb7{qDhpvCQ_MuxZZr%Ci_=oeIOD}%StkGWkdRkTO
z(Mt@q${+I|rMLa#uF?E4`(ytx=RiAwAHE;HADb_16K2vKvhQkt+aLCad%cfZy}0yd
z$-HaUXI)-ag<jaSb<(rDdU`c0qAEhqbTR(u{jL0;;o!;m4}SHxgTHnENc^q;M{4`u
z1;UT=kM0c)x%fxzp8k)-B^h-x;<N1AzRnl9`=22z>)JiDt7@COf9pH#6SOH4XMI=G
z;kD{SibMFHTff);bH6Zu+xkD^{{J|q{${DT9sMKt<Lz&)ZLc4zx3AU7``X`9&$CDQ
z(f&?5gG+r2k|y!m9}(XteQEiJ@D|g9$u?5EE6R`6>3w*&=a=o#c}v;mnr{8ue3#)?
z^jCZR`UgAhx1K*#e|!5s-V;Cie}~oZ`HL(+biZq#@sE&yV)0TL*M6~gHvQ24w*JyS
z+1Khpmvl>Y<G6i(G#|3s9Qo#op3QIO?4p0cXD+yK)pP%>%lHGD$~NBrRQdiE_rEjM
zd+ong|2uz0q<*O^L!D9mK?nN>d+&en<Nu*<-cicmUN62+<Mn(YJJXj!FJG>$;rYS2
zF!GP%kM@Tz)?a;c|Iz8U?$IB%AD+(^A9efhv~Tr1KlUHLCEt^Nxm4CX<Z_K={qor3
zr4I5_X8He-Oa0Hl@_xsaTfEudivDgk*{d>5;FX!3#1Hk=vCl2sc3xKbaeJAHM)*t~
zsovYmUHXz-8R}i<Z!G^K!vD<yG}~Ii9Pp$2x5}TK57&?8syj~h-}bSsJy&e$!~YDj
zKlpx!{H}U=ZJy-^_Rck1`o(`FmU@=VP15BKzOtp`i@k8Ke8{d3`&O=vi1aO6pc_<s
ze$xu(58>Zl{%2^O@SowqjQ<Q9`uj`!Tjr^Jyx+Iat|t1!w(Tn_ijUhd{++$YcyYzO
z`1V`ZW^Hn<UiRbgu{iCI;SK*}oL9ZPwM1M>Z12Op%*X5$KDM`hUG2Ts{K!7(OL=SW
zSuy<ie!>31r~eE;)MKB%c6?-i^ZvKf7uL)?bhvi;kMIZU_BiM<O!{>7pV^B~j#A5F
z&#sO?#c^YzhesB}zux`H>u+EF=Jt2Lo&3E&UVkUmng8&A^q-;qOXb^Ko51BS=iiD_
z@A)HKU9Y#4Z*Jz}`3x2F4!eHb-u&e1eD|xfon{}A;%%MZ@wVjlS@*-+qt?w9+@m1(
z{A2xN@k9F?<az&ue{6r8e?*@1kIs+y2f4PU_F@&UkNvtjz5S2nqNuZ_`O9yvy|%Dk
zC(!iS%2ja@FQv?8=RePiy0^7{`HNe=OW&=mPtP=9|E&74`X4_VXs6B(?xRx2+y2S?
z;QzMd$MfW+caO8K@3&F^@cED&{|EDq+<EsT=Y4nf@0>4Cqx@0G;?XqsEg3bgA6_56
zyyx3z8;@^m^NTImi+@|!AH4OS;e$7S?>v)Bdjub!*k||e%;&6w3eCs%OYUKQc=~+X
z##h_LuZ5XOg+A}tCsy(Jk>1Y5f7h<(J+kY2#~<~DKb$=_Z{EB6`XBctw_Rm6GgjBR
zf7$;qUbG_qc$~zC_q}@rAK9`Wv*Z0(*S@r3{-HYE58Ku+|IvKdP6M<ajBVw@AI*nv
zeVbfZzVvmJ+U8|<qqC&KRxi67b0bU4Tp;$AzlqRsWrq9!_T%**0{KB#;k`ZopCPUM
zw{QKcsUNpOZn*<p19DK|t#1DQ2P@})@Xyx1ouRMuZh!WFhK6b1!=?uuFU&1w*)M3K
zGL5@KHM}b$)h%U`rr^XYQ&SZtI_#>yeg5O*_{r(NmFf>|2aRYsi8uXc_%Q9le}<oI
zP5m?eGi1I0p}zf1_3z9Y^^f+4<ooLx_sLYucKgWITfZ!`PIdc-_V$wh4DuCx|K5pv
z#|!_l`8Y=^{@eYQ8qcNYPM2oZF1>S{_d;aJ+qmmN7uRo<HT%H)C)ZA(#{Xmgo8`Yf
z|Cs+c_@Mg7^yBuMuOF-Dsd#^Q`ZA$!<yPMh>q|zyHp?zeS8myL*_3;(Y{LG_>m(QK
zz5Gs3C$D9Kzt#q6edoVNUC+p;|Bjqxy7g1trSvkvBO5B~^5?w!?c}EX^XB}F(33d~
z8O%SA{#~>G!OQnQRQ=x^ee`=jV@3SY`$GG(_6xqe6o2!zRQsEY59jm!nEvoz_sU4q
z^;0wTkIa{;IDWuR<YVZ%g|a87osaqvU-^;Sh3VEK?%lt$w?vn-mb}}YS0R2V{)dhB
zKhBAd=Zj>@$^7X4@c!HKAF9i<ra!v&`uIHcAN3FROH`;Ip4O%*^Qumv`{DT`{vtI_
z)ukm7HT^t)>^_>ltPE`3K4p_l!n<kjj(@rMA^7q1gYR$IKV09o&#;E=$J7V!yW_e4
zB<8AKZ?DOJ5L<LQ{=!!N&1b%Czm{8?t~^^e+G}rDt$FlCQ<kmQOl-q$z4yANle1OY
zdv-*Ft=_L+r+qf<xw2LJbgaGK<+pkI>)*d$r?h3$#!Xu~pYPhUXV=`vO}DPy;&?La
z(W6WujU@L;?jd0bjDN2FyE6Yn>G?lGhrgA6T(|TAKkKV{iTbSEc+cn=ru@Qn=l2PH
zIQ#vuwr$$^fL$BsyZg)4IDcH<p!>&TUhJk<V)vAPR4=QzeehRn@6*{Y?<ww{ao0J6
zJ-VvS{6B;8(S73o84f<O|KRgpvSPODhwuIW#Otp9XW%gT8y~jm^1DBU>nivU$mxD4
zZ_~+36O75;r_z1kzHsSzIlH;bm1`Hhx_xLK^T)7_Dw+x#FYD{s?5<?6Uvj_6ek=O{
z`CH)+&i21${%v0q{9*br`IcGJW|ptK^<(>iTT`NzXk3%3iJG@?(W`Ajwev$hyzkm_
zI`g4#@}W4DO&9-oF1&kcThz7b%kQ?gI@q`I|Iq9IBa{DIwC>*g4dFfi8B*$RPCqzb
zrqo`d#{c8;!?Er$AKj1Sb5@iej1&2=y>$=wquchfu`yAe>5uh=va7Cl>VKWj`$Ecg
z*#r}BU4=}mZ5vnLsc4hFt907!nq%IUS6l3u{xdY^?SHV&epCG)p>5y49i9JeQTL;s
zjem-_{$S;AvVR!$!|L$SrST89?3bK>r2e+j_ak-kzZtY2pXL8;bM)K(t%B8i9KV%*
zZk+$Z9aPW#XK3pAcV7NO@cO2G8b7}NHaY(I#UJj6@?BQf56MQ>Dg8*hd}!DGKdQU<
zTmA??w*H*G{O0SZH^G_lH}2VAa1mcyE;A{%`vvbN-A$(rWdH0xX@BL@`yU$if5gnc
zar|d!N{@D4_V3bsvAh2?vZD0=sL09u5dLu8WAbr(i5lmnvsdIM?zQ6GdbF?k!CSlE
zwRdjWZT)C`<R06F(vM4Co897Dz4Db*>e)$5yWaI5i3FXekpDw{)2l_&@i$k0J2l(o
zbEw~9`}TjF(OL7{{9dy4&6irYmZu?Mje1N-&1b7ph4arR|KrO19aK~IpP{+0K7T&f
zAEUnwCi=2J=07~%^p7j^R{x><H}5~{Kk~lKp0!l_Zu#L&SyIc7+Do2%7~df;k+V-S
z`@V?tkA-iZ_%l^ZJ|d^S??>=MY2Dbh_M2=pAFce-5Pt1i{qnCr=3jjON9z8629{%g
zcho<ab6tMB$oy^L2jzbRcYbV>zq!^<X8w=Jc#b;7`a>@F80!1ok1m$y`cwP3c}aar
zzf?u~+>*?u{|vwVr4sj=Rkh!Acy)i$AN_ynm+tZXXJ}qg|6uw)%O7hW#y8JW-Tqe1
zCjK#hN0j_wTZMZysuy#=Onl@oP%-KHp<9)^_r}Y6t4Ni9TYAT>dg-=_kGI`7XuMgo
ziRZ5@$X)C0KltbWP|sVL_%Q$0>~Ad>_b7i9j<~4)k*)i~=EHXKALEbscU=FKl2v!S
zwD#e7=8RphE8I>;PgL9f;othlr{{BJMBP2Q_D@yWYWr_x3vwH*`+ulU|09z8t^7Yj
z)0`TKkKxDrZ_fWGy#I&8ANh~|F+c2AZ9k&VbNfed#N?y%<UcHLs!6R?oi;arO}106
z;+K5+47PipqC3<ky?(pFc1e6%_!Ob?e|skX^%wZh(9~3aFnj-ldG|l~R(J2`sk;y_
z{_NU5gTu>jWtH9E{GZ{FtwP0rhDU#oE`6P8blYzAGWY7GKl~5aXI(1ouyI~$epFtf
zLd;$;V?u0fMVfC`#p7*LB!8UE|IffatNx%(d_;y`ecFG9+g7~HXG(p8^m%IpcU<jp
zsC(sUV)o-c>mp<MuN#-`H=kw{_{<`R@%PQ&Z1o32>J!iZ(A00w+v<Na{BhXSN9#pj
z%rc#~^|5_RoXX}sAM%g!Gu^%u{o-xKukVeeSGMoHvZYr(@OsI6{#SD5A9DU_{U|i=
zNXgaq_&9B)MbLq|_7}Mfb)f6(9QHrhzyE_Tr~zi*wZ2aBPuP$CNA+FxQd_!LOW3%6
z2>w?0;oscH?`3{?Nx#rn|Lxvm>YIJUj_*g|!|2nl+qY)#=gOXEyYb_#+gZQdmb16&
znN**D%W=S7$7KHxoAduTpW7|E@Y;TJ{oCowUZ!m5`*-+oJ<HeZGbtUna?SF4XZZxK
zd~ibP%JLMJH<2FF4fYH2Z)E@DO8+fVf6%Q)z5G%BP5Z}X&5zIeJ8#&q_v8G-YrXFM
zXE;<ZYQvVFu({k{w1W9a*f*&+RkdrsKDfC5q0Yqx*J?Ody%xJZZJzAMur1Tx8Zv*e
z`;0tL`!BZi;N0TKFaNGyseEI9>Dl_Fr6yt5U9Y{2-~PvRzw*D}&o}B1y({?^f9q%W
z`}%LEu7CQ^(6)7#2m|wF<(2PW$827i{jc_~{rP_~4_nOM?3aJN`rnjQbI(8h@%{YI
zqlM?z-mjnkxNiN^U$fn8g)Xm;u8*~Q;u$k}<=%b&89x1IF#EmVxWakS)xGr(O5;B~
z|DyO?`#;0Uy??a-Gi=PMe|hNFCcjsIzuLc8|6;+~FQp$AmOY%Z|Fd$RUBj|^=Rq*3
z2bx{2OQ^dM&#-?({<?j-KfG?}b*_q8{zuI!M&NC%cG&JIZnM5H83;sVedn9_isRJ!
z{53w?nY=r`I?K)f!}(?Ahw|Ubq8%UQ+ci|DCci%T(Tu6rE_C`ci&<TQXJ2ZliZ-8F
z?I&>Tn3vJQnIWN9UOO8U9Q@BPPu|O)b)Ij}k&4-eElM`^92eyOx?FFu_tey#^VAl#
z6wlI{Q)#z!=JhF=j~AOtCVuwXxNcS0@)^4-<QrH2c=1mUI*zHIIV<<w#+5H`xy@#o
z9@VzGK6BZPTSt06-HD5janH_W@mR3gQ|Hr?j8&Xz2@8Z=%Tj;H_+|DVOx>XsyuSC0
zVMPufU#rEbQthOTr7ItP__B~=xu)OJs0l5}5~qAms*1fSefonZE_+6T(H>sOM}|B5
z%()v5K78pGyfR+2XDyGNT(5<zrC(`wNQ*Md>?uno`EIFqnRY>S>mIR-PnPa6bZB{O
zt>oHU+-KY>d0h10^$Sa-L^3Y4A9kB+75MVq<))^KnVZ~yFLatx@I~W7`$3TKe+FI)
z4fhXSYHNK#D=uN<`pkds**|!*{)bxp(fMulTidq(XJ8fkVBWU1U$lnd$Irz-q>ev2
zwtvZuJ8{u}<bLdYXv=>1K2J`<$Ec{t872N4HLe%F)U(I@h(EG@dy(^sAOD^owUgQZ
z@AR%6AEwkPGyK&4$65QIf!(6+`uz`n{~6lk1pm&nDg5yL;D3g#;cwnQ(9U%`e&C<v
z$FTh?YwUlle9$ZR{H?fEe#;;IkLiAw_JpUZH=FcEy?gZOyywUHhwn>e&B~kcu_F3#
z)qjTe8pCB7v%;ouW^CW(?Oj>(wZ8DLZr%C+3?C}C{}I0ZNc4E?m;8QvcKeL^H*ZH=
z%h$~{{m&q9`=y-ZkAoj}AN+Xs$ggP&*Z&BQy7*5$>sIdKVucHJJXum(Ha=W%DbD#R
zgZ`82r@w^PH~v-rcRGGs{+so`bAE9D6AOQ{^5f-){~3<m=R7ctJ$(8hseNzj4^4ix
z@y^+0FYj4>h+8Q(_pv`iw)us~yZ+gWDsCVC#kSFOkC5LqHBo(s^E&?-nr7DB+GYMn
z`0_WIzYF$f+xq*p$6l?I{NZF_!~Ssh6r)=elOMJBn8w;4tmiGM^^^F@YxMSyt$wfR
zU#ZteFTK2;z4Atd)8)7;Z<OXeJ7uB5_~zIAr?-DI|2tm4<^3P=&HuRMAMMqDB!2X6
zSiNY)sryIdrT;Tz`uG3S+_L?8zKtQM0pot5XP184wcn1H-@RAA^0lA4LipkP1{29G
zbA=B_DMz_3&72k9_(!^&Z;o*Kw(ob}e%Cgc^)t8l_o5B|8Jd0mGd!3OHlH`;gYNm}
zI-9II%}J-<EPkx}{y1-uey6}4QHECmFQfA2CVpstJCn7gxJGBbKWoQt!GHzK+ooNA
zU;c;xVe&t&*x!6LrT-b4Wd1W8bTY~3sj>L6{87ZR4}a=pf4u*#_owWl>%P`U-S;`~
zWZhaefBETE2NP}Y%};-Hp1Y#k33O8HS+&q;eu0}eo!6dUaH}HzSeR5K)9stuUqD-G
zmY@G4wEWxM_J3T8zgg<e+iy)hJ8kxoio?g_M0Z~Nr|}}nCGEEF#X9XD(&76*#2?Wp
z*=rZ;9=7MwANy55`knWDRBzex);nn5mA8Ks*JZE=?B21fQf&h3syFo$w!f8MQ-8?%
zcj}+YkL)-9-Td4B+xJi4HM^6~e#&S4JM&}Zy12jd&wpC}spda}@~O`?GxzMh{b!}w
z8wK0>%UAw&`QiPKckX|NrX~Lw4*JxjKC-`E|Lx+Bn;%YptNFP6t>K#ZnviQY+K;Dv
z+<%0>r%rnFN0CeZ5BIW1e$ZVaRo}jccX7r(u~=@e5A6-AKYG<bcY+=&o8{hAx}Wcd
zckqX=$J@Sq5dC%g*H7L4rT-c7@Bc9W9R0Uz|AVG@$vr&tg-rf4+~R&z|K|1Y=(xJu
zv-G?FXn)xC{;<{B{fG6%|5*Qs{9yj*eq-z0;~js(YttY86+Zk=qW!Ub_tqVy963)n
z{-|8meOe>w;=PXtw$Bgw_d4@OoqF4UhJ&;AZ@p5-^>=Z7ru>cVM|SO>xa3dK2fpba
z`yVddws@_HS>{LKhq6a@#dmL!=g-LNmA&6#llkHI(fSXQvaT0+ikw_nBNb@mFCw^g
zhuHnI_dj@lvA-zSIR8oae+G7jx=Z_1{_fuYV8eXbFXx$$ul{k^_ec6;Tj6h(KeQj7
zmX?m*>-O=VM7DXI$h9y1{Jq-ea*J*sy)SE8-zlf~;poX}k6!&deAFt(a7st??L(X|
z-tYYqx9k2t{)K;Mf?{BQCMXFq)E^Y7W2!s%pMlY|m+kbot}8ae59M!eerVoN@>;rJ
z+C6hQ*~v%hw}`)$WpDjj8<lzUa>(o>^OQII+<Mm9>BsVq`Ui5?yp&qrcJ|v`1K!)u
z-t1qmd;W>`KMv3UUF=8wKVtfiz8|&kxG%L&>Bseh^EWR)bT{f;eYc$LB^9amqw-z#
zLN>X7m#%SssLxR`{b*F)?uE{4-Fb|EtbWAb{q=Rc(EUt<S8+1i^7&qw$C-3TUUZE5
z?!WBauiZDdZtITw%l}6F(fmJBq5m0J=6{@inDdYPhtDoQE`KOL{^8~1qf7q8ff9QA
zF{>-PPTe{&P5hq5hyFg*Yc_(bUpjq1x#Q}We!h%*+<W$Kja>8PY`NpCjQ48~Zkd1j
z*I)hz-+exczis@_z#;}}H&=A~T{JymlHVJ@S-*es;dz>yHtwAi&+sSzhyS{xiz{aF
ziXRa(IP-qRAG054Km7WAc%I7k%kQsUKk`qk*5CQs+v$hy3;xku9+#2upJDxH`zzDG
zE&Q?jq5Li8f1LWiU27_S)a!n^$MWO)e+HJfKlXl1KUnmttT%Dx{#HAse`n_@eynew
z9kijWeB%}SO{Lxb+iqGL--@l=_RiZaL-^(|`xE~eRQzv9KMp@8fAjmd9Y1V88h@+!
zux;sM`~C~}er!LmpLvh{V%4?B)|(&W@BYW|G5(NzTUFoGW%pi6y`8pyWrm#T$7`MI
zZ~TaQ?>p`G(dkhsaZ>Z1`*nxbdR<`MelC8t{j&Y7@*mRk-(LNgcXpq`zsvi#_8&ao
zde8FX{y(AjR4%<;yC?hO^W$azls_u<rpIpo_@AL8W#@<Z_OJXB&a3am9(|<iefXd5
z$88f=WObL;CO)doyI1jkIa?j*TIrDg3`u*v|8d^^&%m}bd;Z32>p!v`f3$4jhw@`~
zEZ+TcFYn3BKNJ@A{g3+oZJj^n3br5qZgp(G-Tc2Z*?W~QKH*<|_wTA$+xOuoyr*t!
zQL6_JN*DfTXvQ)q9VY*w(EpFf^*GRM`M*QqlmDn)dwlUfL#F;M>)2gCoIhj-b-Dh#
z{K2>VTg<NhBlEkXYIpnQeTuD+KKv;%Q;PMD(WzVZ{eN;F<i@=^9CYc;S7}QI`wsgb
zitc{|jpP3_G#&Wk^JC#h_s8Y^dx{_U-<<t0ZN2F7Bla>CmC3t*O#GPqXnL2z{75;j
z59M7p!OODu$!@$-vRd=u$MPfjqOZ;5G_I7Ku1!8PE2U0q_x$6^N9IW}{M%cn`=8<9
zQu_~H{?au%yFQd3_LY9De=xpd!%N}Ai)s=s*=bhvAD3GE`r?f}QDsXXy=SX<^g8%M
z-p(bm?kDzKH}U6r`Hy+;m9?&C+a^BZ=k+u(zt*sJ>HY`*%I#a^xhoET+x4HJiTgjp
zLBFrBea%Dry?&hhZB*lw&sp)@{c@?e9qW(BA0|h|${*2Pm@SYybA6p`P1=vz>WAk=
zUwq8kX7FS3p-ZpoBtP2jo!|CP@khANj*E_^RjRqMQ*ZmfyY6q-{!8IM!@(T;2Mc!f
zAI|@wq~2Gboqx0c=&ko{TlH_nKU{y%TE1zX_131(P9N>MAKKsY{bRi1{3C5KHre1q
z`?URAqK<c}Uij*r-L0E_s7_<L@6|28cjtzCZ!2J~dwYHA{Pn><;{G!<*VjLoV8{NS
zp=tBK3-d)y_V@g=`)J>^kFAF3Ls{dae3_dy_PZ~=sZ;uK{Yaeom94(U2je6!mfDuP
zUoTn9>|p<)|3`oL$Mg<)&#PNSwqG`R&-c<yY<iu#oaToe*82Xw_R7B={<!*|fvo|w
zNz112L9Msf59`PJx5OXhAK~~idq<7=W5LI{){o-bgJZKJlP-Vdm#k1f8l@v1r*uhS
zcgDM|ywZo|^ncV>*G!yU9b4_gm%^Yj?fz`LqW=s{!u1Dt?cZAehW&SL#rtn_{w}sN
zKKM|c|BvS6Bm4ROiT((FFunWUbML>)O8A9dOye(qbiVVVZ`S(de-tnOyDOYo&%4Kc
z`OP1f{xdu}-kNI@YW1Vq;e&pwX?~}J>UQrEfA_jy%AYU)<JbPX@}E-n{H^+LKL3`E
ztZ0j_Z=TP;k2}*|uC$*w;_Qmsu4`*zel$LM-%-ck9QaXp<1VSVb@v25sJEDW`H*`2
zM%~qg{}~R|KAth@lgqVdO$=6BpX`_Z&oJ?Q{Rfx(Kg{aC8T?)KpCR#n^M8h|@89M=
z>hHQ|{jvPG#UI~CvFs1OH`*jG|Dk*!j`u^{>_@fHhj#JJUlEsSmA3fNdZCK-0e14c
zKZ>nirQT`6Ywg<|wduo*54*DDWUkmau5bLPTlI7A{A$_qKO)ipc)ouKk>~$f-%<a;
zH@?%(eEK7~=G4`%rrU46eq3L$B0ucnJ_VhCTfWO*#PjY`UpM`s+6VUzQQcDQY;XHc
z|407(KPHD<ExB@KPvM8pK9}C>zi$ZiPW@Z+ufFmx-+zXK0{<Bv%-Szd|6uz5jq|2|
zuzocC*xvd_$NOtM*T?+$d{l}>>guzlA0|I^+q_2Y^?TMoQk$>5$@yyS%equO@T1=H
zqG=N=mLDz7ic{Wx(ZqlI>0AZw^Z%qzKdC!%!T9n19~$kTV{N`Y|Ie`5`tP#+U%h_Z
zYV=Nj@t;BYPgnheX>pbx@(=6(&{Th;`;q^VdRK`&ONH>k_^s{-^@S_;ACuF(n)Ah;
z_eb*KUH1JY-gl#8u9wbr%dY0t_qv?(aN4V1|2|c$U7P!8QsxpDw*=0t{coTD@Ou91
zQ2pV1`yWjG&+uiU{f*=Q8H9`<#{Xw9`65#D^mkDG!2|Z7BXe#pf2iL1PwB?LYxmjr
zS^Ze-f2macL;0cgjdEs}>ePQ6KlV?p?bxHoo*!Q1v+dix?1$Us;9ae{>udrabI+AO
z{3|6dF8gHOtZS!UF#lO+pDKUzKg03*?fh>WKSY14{?NPR@{ir$T7Dc|_#^Mrt3!uA
zed6cOj8nY!pJ9tl{$uUa)-3bB+SoqG=hoZ*SYN=GYj;FNwd0k1iMQL*7Wmz^+u!+j
z^?!zgcj`Zc)JxS^ZuyY@N7(p5ewX~=!Wzd9w#$#qzcoGT!{4i`UQM6Jam`fvuld9O
z3<s5KQ&)IaFSzmgvCEY`nIDy1=lfm$%3FTuyFBk3g)2`#)OXfIFUnqEcf0aGL$qy)
z9cT}x^nZqfoA-(T-Mf$ZrTjMew-Y~#KVomR<Ei)-TXz4!@x$^h-|gft+7v(bw&(lN
z^TK?d{m1fd8_z`*n{FTeC$RIXNxaaDD*IL)8$<DqKkh=&6}#j`GOSdpQnz<GM(+Lc
zY4@M9+uk+jue`tQ{Ez3|-|1V=x6D(y3OYWnYrfbX_K(-yHdepqsR({7-)$l<`A75P
zo@rs%i_F`$O24*ee=$$@L)rSZG14Au_QcG(ws+CXH1)Rchs+J{$@=@Sr@nr5`_K7j
z-~Vy2{%2sd_%ZuG1IyXJyKPKAR6jCXzcOR~=J@0F9l!h!{%5$Q{_sCT*VBKeFYlB2
zu|MEy_`zTNM<0u=EluWcF@4`wr!?&ve@A%H;`)p~7R^U)g)LqdpIsH-l3!!T|EqrC
zU+@162OrpP6F(B)SiiCSp#ROy5AUsCU6E#g>+vJ@?zeR+uXnk=DVv<NpKG6B#y|P}
z*Xv|s1T(&G%=~Bk(Y^1FXzgnM<ylrW(`V_omfCZ_3VapC-ubm!lF@$p+4!&S57qxj
zZ~f1}BJ=~~59=R+AJe}r_`Bjy@#7nHQa{)qUHQ+z`bYZ1`G;-06Cc)w$A3&~esG`T
z$Ni(TuJ>)d>wVbj>5)1KU*$*gtvY)wm;Z?R>~&3VYli9RUjN|D8#iv=a*bir%jJ_U
z)||h+{?_Y%JRkn{*pxqzt@`}U;>XI5{txVr{*KmsXQRFBkH<%mdf|P1+2I$WeRcPB
zKZ>q2v99mfC)Xdg$2;26CU!~1>?6#Fr)|3X%Kk&+k4+g5E=Ta&U%mZj`kkuhf23Fb
zXJB#uyQu!b+&Hlx_df=ITk~W3BYEy0{}~=1Z#Ru^Gpaii$M$jF%=LeaK0I$TIa~gh
z`O);g^(EbNlMl=3{MfwWc(T<Ws~s0rKGn(ovHz&wv8HtP-}oc)0;c<UelSS>;Q!CS
z`uRUY6T`og@*lkB-}wA+|6A@4!jI;^m3&+;QE~d))DPtc=X!ho*!w8HZPxj=wSP<>
z$+zB@_>*6`;>N8X<`2Ugw|aa%vDLr5%699P&#$hFaVM6qJgzs_^vJgDW(||J-7dTQ
zXZ`oh&-j0s&;G}8`?vXjhJ!Ks_SxC>w}c<@AA8TZ{D5|RV{wJYAF1m$?2ERo_|G7s
z`eV<m2OkAL?mv89u6ybxdHyZ^Zze9&o04Q+HT^d4i%D0a7%tW8zy4ysJOAeXZx*19
zt>D&m@xSZEHLO?bv})o%)F1ZcfBgRK!j+l-8N~NEKa`#?^g2%UL;iuiyzgyPlh;%j
zANa>}>C0dKz)S!5Gd|q*v}>=e&#Yhhsyyi4o!eX2&Rt>r=bC-u`o{Z$_767yXZR4R
z-#(wOK104+PIbq}@VCw%)sM}y`*HtcV9=p>VR`<F@I!GbKc+wSs4>hpopXz?xxVt@
ze$Mj`_P1{f%$RN`^ucF)oy^wlAI|I(zbNdoV0N@`^wf9XZm*yAQvOBe(*Fzx*T;Ww
z<+VR-R>gb$&BFDstCp_omz!zdTWWtx{oBOuBe!~AMg5(-$F(whaZUK88kt#VF4r$V
z$u|F?wLE|KrXXD|ZJ9`hvVXJlKmR%Z!2ch&;BS_!{|q18`hRGwoB!eSgYu*Dl6vj=
z5AV0%-?IJ9-H!sV18>xXe5jjP{-|Ey<t&|9+jc%Y?JFehFZo0Jk^15N!qG3Ip7m!h
zH~ltu*^4-Z=vcE)|FXFq<Zj2^TKa7NTK+G8|1&ft)Lr|2e|!2H=HI$?S7)7_B30j2
zr~Suh%k1ORu9bN&ds+Ws(;nH?S^N3-solwls=EIwH~Hc2`|>~hk4&E@wPnZtU3<1)
z&@;KQe#!47zg0Z{8D!^k{c)K8(EP3S!~I>;Zkhj4DYxhOXOr=tK|uG9?YHe4{@tB_
zaKAwAA9u0dZ!g~JKiTx}%4FYY`K?QPU*E3$S9B}Jh$Dvi*Xj@Af22T{ez^Q+XlkhF
zjs>0hoeS!>KU{v`KSO8y7P+-6YJ5J{bw1YS7pigmadz3OIK_QC=1KdDRcIf+wom$l
zdXr+iSFA-v^?_gNeec|xY-~#Qv&UuF3GBJB?8CWfobhY-`LAEPKlqzvjp*9{3<uZL
ze{fxY%kD}|;)n0Y>wEq)h}LJ^jeGyC=DN}c)#puHqT{>c#s7)@U_Th8x^C&hEUESV
zx?e5oWPVgXxZm?n@9yChcOx_R>1?|YelYJ=>am4#iyq|GmRD8X)Sq|!li_~`miqq;
zO))i~Q~U1zyMAAAtA6Ky29cWZWq%Aml>Y5Ms(<VB<9*9l@C*O({>ZlU@!#^0`F<a^
zx9ffVc4c<JkL4f3K6`!4y}Q1<#y5LqMfIUud5w?!MYF@^DPMV0qR(7$fMxpm)vxdW
zlPuf#chl?rA2O%^5t0u5kuBf&<vhoqiVw%T9&Pt%Kjy3cIB$F9N50Al@?U1JRX!qB
zw)w-<S;75w*8Xi~fubx9+s-&QNclhgTi5;}{<n9HFsLc_p!xoXpqqP)AM$r>53?7o
zWB4)K@kjHA`p4|;U+zX9{w06ZzU`jkcJp0g8_OU5-aV7`db>^RqLZtB2tS(NsCw1L
z@!|Qm+5WOM_S0iN`b|w$TfL$&w@Ur`>g?_3zt~?~{|&Tec?Ea>4@Lg|`UflI87E}i
zQ~TKe=JcZ1ahz@Ep7BQh6R%1CG4T<v^n<-uckZ}eWB+&lBk%Q1^5TEo>sfE?|L~vT
zn|YVs9#NaL`@i*rA~V>x&3gOe>tFxRr~flFY1AJy|MH*VhxY!r4_EvV|FQL>{n0wH
z4{@y@?jMieB7Q7hEaUozyEXnF<0dbySbgxH=#C8^&TW5Wt9;~F)Q|l~<jj6defayY
zf9yxM*(+}!U3~bFtmA_#rHQHOWvu(n?$3Q+KW+K9{U7=N@$&p<Xo{#<e6Z+69LKf#
zO#3!Fy>`DH-M%01&Hm`@{n6#qt9`+LyM7;ulld6lvXxgjcw^s_W53#FE_8or`93$y
zyV^I{YsVz(7Yv)CGq0ED@A_tMV-ISreaNwYoBdnyKf^)a+<)dZVL!h9XW-a=!2f3d
zQLFIoe?otJei*Jl{_sD8<i9KTbEDh0eem1(Fy*RgZt%nYhTDGpi|a1P$$TvTwnt9m
z^7{34G8IDKkN%VUDEpt`$bBBBt#`jfz1v>r@4GKQ`S&X1`;_gcug$H0RKAA6aBgq_
zyDg`AajE1v_65h|y}qReT@1T*`s&*s<)41{|BN`VT=Ur~KmTpcv6Io!$=daYMVJyk
zpR1oApJ%}T_3JvzEBULwhTV=oy}SI+d0W?$lfqS=KVNpY^p9R&$Kh>v>(~FVU+^{N
z>&rhMD*rQl{djH1tB~Jc@4o%3|G9eh(u=zP8RTETbN?dyTc`fyz8anX3>%C8GZcwm
z-Kt(ySo{9x=6{`bU0(Oy>$$@J2FL%tcwFv3LzMi5MwDG`?5E<lmH(M=HvHdV(78aD
zUi~Zk75Jaw<kB<tZ;B_?zY4aWT{rdqr}WMGzhzV6f6b_~3jaBwewv~KD?>Fu=)g(U
z^$+L&?cEjsuh;ZfezX0j(hB~6r)=2&O*?<(kKliX$=e_PXZSm12mfC^_jh~i*QNiK
z0xzc*&0mxA)mr<kdEnOV`!0Xwj_#KJt-WJXb@XZN9dY+wU3<pK>~111;PKH{r0b+g
z-icG89qVf1gn9c9Ju0xcV=EKKFWtVj<><pgk;h?e>bxDxwM;*Jed%ivvN&qWbHBBg
z%Owv5^-T6%JX^B)P@08LSbYECz+(x8H?n@%qzMcAnQr*8Mon$XiX?-pFV1?2W?Wxv
zd1<v@=COh)i&ZXX{0aTLsE#A<kJQJ!+m5Q&o4)>3-}PbNf}=~SOT&2!7iRGtF1TWH
z-^gIH(8>B_)xEbYcKj|~JO5|m<Mfsv`*|!T9_N;t(I<9JHC%8)a>`T9i#<_OYZgmt
zW`8}yZc?dbuJPDl^1{xZspZ{=AMQWdFKeTC^hfBCa~7e&f`=-vyiT$xmsQt1*ORQO
z_0!HQ=xTD&zY2}eyuf1*o;!<5u6i%ocBtlie7AgiD+6dx!Oi;{*B{dE7q7T$r<gVE
z@IS%%%y&6;dOl3=5B?a~;+e?9I{mc$jck*svqw&=&(5tdNsXABmoka}Rs3T1wyQh(
zyA~hY*~<F2_0ZHSANtmsYb5_@y&QZfXz5u#_rH^+rhK-#nj9Fiusbp(L|y8us`szm
zFIGP6ty6#WqVQaDd;F{a3>-<8ANsbcYoy6|zM1l&WW{IaiEHMWCeFIPTB>WAytvFN
z!{rv&S6jue4gJ?U|K$YKLw={O&#;p3DzQyJET?{P%X+~d*+;6v7BBeGe)!h6x#_E4
zRDEk-ee>+{SGUYIFL@<!Cn9TB*viDh!sHb%uV4Fo^WM$#rd!V#9oAmVP;aw;%YTMH
zQkVZTuuS{A#Ky7u(OKq)$B)F{Y(65jZei)FY~J6-Kkl7Av`^wn-nv<4pVsb^tN4C6
zUdT@Fhqupm!8hA3{*(I=e{fff)+f=epCvpPBeidPf3xS=pIQII==t#~yUCC01^%75
zzb&oxaju*8;=+gVt^4KdWc(lO?lf8PFn!Xo-;ep5w*F@jj>wAo(>E`)GruKH{NlRQ
znL@vQdo)?<y<nT~c7O7=ebL%g^H2R}c=P_Z<G<_mA3V<APWW;85PQ^*z>nV_i1%&H
zXZ#cTBY)i)wF`Sf6BoS>yz%4vL-`}I_I`Wj`+Rh7+T;0m_P5HslG``0NiM#)r|^Mq
zx&KGLi4W_AZ!liZt@r<Azpeg<)#Jza+v_a<GaQtzPqOch=f5A(d{BN%`diKq;*ZVS
zdOu9|-8287o!;M>bw)pKAO0rwZI-lsW`#}gqWH6^#-6gv7B5>ZYJ8AqVsq4z-}6t|
z{}KHBkK6q5`yVQz-`_H>_`&@kym6oL-9NQkek7)@@O>;V^m?Am<ileB8F<w`e);IS
zbYFLJ#r4c}Cm(Oi{<_0ZM|V-gmL%U#IShYy{b%U7VxMvTm*IbgrujcgY)bz#oQh)j
zV+$G_{LgSO<xlN@2G;6pbxhfHwm)Pa^f#N=Gnw4)xD_|=9^Xf^osY~us_s9cy`C-h
zl&PlaYHhQvu~PBu&8f2cXKb1q^>N9KKxT&e#QG0ueVcX9{}HbL)^cG9-^nF)x8+Rt
zH-%5Vqf>SM!2Jfpt!o0!!ZaSu_MG<kiDF#z&4?AXZyrpKkF|UH>&`!BJ9Af=``i7G
z-bizurdgkDFYl_8w{VijlOKmyD=%JoBDGXC(nF!i@xcXtm%oz#Zg1gvRHs&B^`ZXg
ze};B>0Xv~TP8T13<Zr0c_@R8Xo^Ma#f*9ka`*uF~&mf&){!i+oUcdFRFxU3ri>21L
zH6tZsgUYm=88VpvRM|0BoIgJQgZuj*+U3n(`^92o>+|Z4{%6?QxBh{B=XNW(c@O_Y
zet7Ks(QWOA+m8-@*t>6kX4>1tkMa-g7C&nJuxx30Zq}vDd&-whtIJxp2y5upi+|6~
zzwn<SZ2u39{|s-_Q-6#6J7~XE{B3N0_3~cthxrHJR)_znw!OP#*1p~qHU1y1qATnl
zJndVYn^~BzdaZNqAHR?K&0FqzdFU;=xh(EZjLs_IQfB+J&Hs33{+)dP8|d`Xtu=}t
z)jQX^ZGOmqv)}*v{;czo-Yf3B5<FY}NS-PFWmW#6n`_rU<Waw_v(Mzm`U7$LX5pI`
zWmUPi)i~}y@1fq=sJiuQcJ$l(f6ia4|6v<_Z2R{6QvVqe?zj7>O4Ya7iT%m`xQ1m-
zlcc^)>7(;ZFTx!R14SksWk0;z=+v4^PMZ}=LuPU}|K&er|3hW}9~sq;@&7n2e_K{u
z{#Noq{mt_apC5gj_}IU9p7M{Yg^&Ejew;osPxi{1QhC7&@rU~x(=I&Nbn(mY-I+PL
zYxl|Aynnn@rQ7=a$~%WnC^xAk@L#e2(d+!J=Rd<@`5&798QPtX$NyQnfdAR#e_YwW
zYhLgF5On|6;Uo9Aws+ZyS0q1_@3e`0=+9b_9r59O%hz82*vom#KKONtx3Bp+vy?ZA
zJA0>o-j><1cIP7gOzqMr`Ca04BgtXg_SYN#{;fZ#_s4N%#q@u?e!KTw%}d+8Yt!G(
z{|pZn#>w?%KCPTva-aLh=5Mn<yz9>Cd2?n%#EV;L^ON%h6cw6oStN&cnFI)bi=Q;<
zr}mP15&IAMs&kiucU1_reY<w=oyd>g$I?f-UP(Of)%)_Fp+#OW|Bc=>%h0QNI{9nY
zuFq9t@XRgGXFa1c*;RT4_wpZ0|1)ftfBn?a{qx!X4D8<Zr^M|u`G3pSr=R~DH;-w-
z%s={1e=h!6iggO1I{uH`+{b^t1OG1BpJd;<X@Qh`^FH=JULXHXnLT6rm3=BdKKp!l
zx1!ZNm&rQ5)ykTUOLEU8$r(zmtXHe-FZ?<6pP|X`Kf}R8{~1K=A54+ooZn@iF5mv2
zVYC0?^<B5pyX_2rOn<Dl{Ly;RACHeli7hLgFI3@tAdYvkpRc|5#=V=py={#j{+pIG
z&AfBzq|8|!d(K`u#T54E{k^}}|5*Mi{m&q{qVD4SFQ82v_8(qUy#CKHWed;0)cOZY
z<G1H`*gsfOzx8<E{_J|u8jBC_5A7GM`0n(<tanvK@S$J(mafYz+~2rId1-~!<$zfC
z(58FuqPy>!yKOR7c33Ico9uhATp(_Bt$f^nhG+F<^EYmP)A(pVDBb*#n*AaFTlVEY
z-s#K!_<q!H*i);1XuZIXrOWqTUh^mRgZj6PKf235d_H`u_u+)|OERq9O@5GV-*(+<
zk6^rc%OA^izAGbNN^Q85cuDU-rfJ^%C-waG>~<FQ2c7L7bjfdBw!iY>YJbUpXZCNA
zZ(FncLwo-o_K*CB#LR!W_xzD8ToV=Vz4&z%+y2bjg%yVn>{Hrx;qCi9_K)RxV!e5v
zZVCIR^nt&7?aen|yO`^GO}GB}E4N$zg8L!)AGXZjPF?tVLiNYn-zxvk+6&j{%g#P(
zHuJ;g$RBe*L?78M-Xt{P?tGyi%a6p%mQ*Yj&YAV>nmrq%QF|BXTjs^b*!IP3&;GFa
z&-qu^|8XY%XJEbmx92~@gOzX18}~5V?fp>vt>;q7O4Ho*2kb{)ZaKIv>sD>=)TP%p
zuCFot=r+^(#eTs(=1Wi8o)NbTiDK_vv-ZpFv&qpP)VddLowl@s=MU&&(~b5ICdY4a
zf2;h+zO{b)`8U@e%onOjnEi13q0{kA^QHHR|IqfH9{q7&??YbxqyKb1&TrnQQIUM;
zR&39&=RGCAbDfXxQ@gNF$$9D4e;Xg})w+I2>hHGB!iU-R(%JhYSiY2BeVI0W+Wqwp
z7ydb0f6)3r!-EI=e`u8d5l()%MxMn^==FVGJB=ElOL<?T-*eSy|9Jo4Z}?Fw@kag9
zyKb+;ug^cY>wfc};0N+DnPyS@)>js<j`>mb_-Ob)vF%siZIzAozmT)lHa&Xxm4@3X
z`+nE;|6~09_P0s>!Ix2|;$G~sf7|_ABC|ZI_SjPMKPvWu_G#;7;xfNig-y69zge&U
zL-C`=t4Y_lvdm%KG3oQ;<?U;4i5t0cofPOwNdMOUTcz%X{O0{{&wlVeynl=Oo5LUF
zy?;#oaQ=w7`K;(Hv4XoVZ=G+q@m$)$xA`Hz#E<-trpwVE)^}}b-L+-jYqx7TYt!fZ
z?!UD4t;PL{`lyRrqd)L3(_qFwKA-lVAzi-F&hYOFJG&a0zjOY{-TP7P`|<j*{|udS
zf<NLPO8;jNyLbQPJ&Da9`Fl-g`*M5ky#D^nTK(uNYrf3L*H5f|JzG{jcvssUj}H-d
zPKc>7X6(!VINANn#{Ucg#q|e+>|d<@cclJDX`ONX7n=a%V9+_`=JpSkO|R-*V|D)6
z`5W`yF5SyG`t|SrBmTWrYwzyenE32;=5qZvf74~39$My8_BsBBt9D}CJBIQG)0aQv
zzq)^2{-1%R>OVsh>%VjMAG}nr>{B)G%CFDhzcu~HF5T<xTl;(E6h6FN-)54}SyA=v
zTXgq&-ai^2oU*L`>=W63Wv#H!M$n1z@j^e^kHjh0nuTrN_2FFOs(TfI4E7EFKP;9X
zoj%X#KSR^Ge|L6GeYk_&_v7(~8ueU}=YK=zH|^u8G5;`k`=o{`eVmuwf5#*`e73ug
zHbF9VVh8)Lvi}SRwQ?V90}VyhAGB27)+AkV`<u|;NqSNi${rJ!@BYF5KzjAco5`WU
zrf1Jwj=AIE_H+3(&n0OSZ+5WX`@;B7$Node{k#7e4*J(WSnOs$VfovqzvHId{PgDb
zZ^u7Qw>L}N-p-tNCs`)I>vvex{V!pkUjJv{t6xz5M_e3q{_w}>e_T)hGq9}sJN=(g
zjp&Cf^A!Frw-c|hfB63Rd+r~S@06OuJ|1ti)2=bPp#Ed?hxcyPfBk(fE%@kjS)RLM
zzt^N6cVk`!|KO_U%nbX_a4Sx;DdJH7!{Tq^{~4MVgVyxaKj_;pV5d@{{*d+e4}~l_
z^(OtE`J1O7pWl9c`#!n($Ld6ze!GW$)Nk3E{BXV85B{T3Ipsk&vV$tZkH~Rf`|9z=
zWHrC=$(6S=s$92rXur?BUcLVHlX{2w%=QnytiL7iaYe2F+qA#k|9EN~F0IScNoxB1
zAib}q@I!sTMP1%A&Ov);`+odfQ?%`)>yff~)i+*tuKM9*xy~gpChLPsTq;|AlKcnX
z^*^-w-%S6{!0PiOa`hj#zq9suuZ@1ak9XIW%m38>D1Q7lH*>+CpdYEVD^IS_Yx}2s
z$>gth)Wxm5+()k6O1-!6;d+rD(Q()R*seG%dT+Yj!sJJD#gELByXasqWdGpP{-190
z2j>5_*Kd>mb$<R<UWU5*`h%11e-il*I$8gE`<r&q`R-e;GSp}OXW07wV6FGJ34bTo
zXYt>>?{-bs#&-3es=sspnf?*KwDtE7m0cSzn(BAO^Vax2sFscUbW2ic+N0~fyRIkg
z-O;3}JSiig;^M^_1`PihRN{ZAwZAoAQGZbFKf{9+@mzMsHPt_|AAOnpt@20XNBM`_
zkIT1RIGmgOct8K`AI*p68U3(-d_q^pR5D@n&X4YmX&+hd?ao{n8~<`!)wjh9+!vl+
zmnn8@a@My->)mftH*cH%dg<@z`1trQ+b)BOOaC9rZA%|W?o&DVyRt^D`|yS6m{`wc
z_g}^fd^s;K@iuZ=#KRxqD=PG^KPtU?Qp<Jk(&a7bJNHP(ozre9Nn<a)Tl?ZagSGz;
zz3YEO<PU+ys`vlUIP#xC=pREx`Vp)3hwC|hC?Aa9oPOY#o$QsjHJKmXy)V>+K6)?U
z{wVmNz0vouw(rN{?0)n<iufbFXzSGJ9cmxu|52Lox{7V$qm^4@<*x9SzP<c$|JUNb
z`t}bd&fm1W^FKpU{tvb5Z#sXQ{CH-$wx;@leCx!l`2r;?@B7d4=c{r0G5Ha1@uTJa
zHp<`jss~&x+3RT|`{=!Nww+ja*yXL<t7YSK6-~XvBlIqrFvgwweLFt*&&2->>DkfQ
z_ix{S5IXhk9`UmB`mOH|OGoeap0Rk|tyi}mKQ`+W`SxAFYrV(?U*SDPN0qh|xt-}-
z8qvh_pCQ+Z;h&WKgKzv2ueaIr?|(2ap8xGv?iG7XAJt3NU7BZj^~;i((@uSl{h-(R
zA=>4`yM=`e)+)O$>)0t(EV_3tjdekL*ghA97&}MXsQtCJVfz>V+Zumf{g06JKkmhk
z&;L*fZ?H4`q5kmwn};7>KYIKASiM9=@lmVqT{V%9?hF1X4%xEx!@BPBB`<cd1iZLr
zJ|X5tr1#3#Q9VYdf>L%|eRrkJsfA&CUEY6&ruc=w{xjfcU{%&XSS$Y__`TGBhJz9R
z88Ys({<~Ob{UiKgeT&uprhlA2iXW`q-nK_|ebzmt%j>ti=c{=A$h|M|y87O0y19Bu
zdw1^q(O;gZx~9;ClWk_M(auSgp^n+rU$*}-zq>we`M22r3@nB}xaNNd^#5UY`O)(?
z@sG|1$qJp0`Pl!K|HI@1aSA)4Pp<i6_{jc;hlzaee*QncE2ARM@}B)S`{DZTI`u8r
zzuKzZ$}YRQ<u&J*{|shodnz5c^JjaXR8ReDJ^$#Gu>TAn0`q?;>A&sFTsznJ`2J1T
z-^xFTF#T)ob!BTl|I1y+TmIBPI2*d|3vXPl%<Elcn?HPi^!%`I?b|2Oxqjz#>z#d*
z{Wf3O@_VlR(K^{pyDv5PFTNkY(|-5X{|w6CS3lJMBbWWV6jasvA6tL3|6BBr`46p4
z1YeiMG5L4NbNoqP+uEabp1o^pzVx5)57#D_yt6rZ%f3B)TK}XCk<oevY<s8Q|Ifhi
zZ^3_t2UF!g6so@|{m;N^_c3+)L5nZ;LjTU$Z~6MHS8x5YKk`3XS7pxn*ZlbM@>_AQ
z<dio5aQ&$5)9k(N<J|uYZ6&9bSG}rI@7QDbKwc~^lkIclhyM(1rEBF6|I@f)Vo<mL
z`jfi<49F+I)Eih`YFwKw%m2sMl+XQd?b*wde}$(!-}PeZ`X_sKmD)e8x9zTcS9<$*
zwBhxC&$a90+;WTjmfu}A|9WhG_FB^y1#Yrar`OMaeErvjiNQPnGw{dp*Zcq5TX<#V
zve(zQFWsK@vc&t>yZ;PlChd4`zkAVt2K(2(w!V*fbJpFyzkU7J;$NJ9r`12XZzooN
zW9NT{o!sxA#`UsSncT0q|1te9f32wfQ@I+g*d2NIe@*}mfJVz-NE{RcpsWl<c9tK^
z+x98_$otQ5XrK1wYyTO%_J`(4pW3x)SGU^jfXnY3^s{TT&O}L05lzX|eWyI{QgwG_
zU4FNPzw+ape#ygkoSXZM^^YF4R$JI{=#gT5V(-E0fm1g8*kd!h<keA&Q${P@wrD55
zy0$p@nZ@DePkh!V4ELBHnW6Ex=uT45#oso5!oq(44$C$kQF+>SEODvY%h0aEDXBrN
z6=8?N);leKDt@&7ru-xKhP-w9Hpa=NkMDDDS(Cf&OLY2<>uZ&hmRXd>axtpjK4I>$
z?6bG`Yh@YxjGb16Gj+rNy!|Nr;_h)9#g4UICk$rv>7P&y^XHG(T4?oipV*w8F`CaL
zT}5qto{K#f?>xP*`>>bD+^Y9XuMYFee@;F!f3dvWhd8Bu+U*-E=9xTv88Z2BQqdfn
z*UuxOik=oMotbha<fGA?=s9uPdVR*+S|zpn6d$BUNo4$4trO&|GvTcCQ4=GZprcwQ
zMMrgVLLW~uXPo4c5PGp8HNlagC;anKuTo9Fl2w=IT1{E5RjPTVXQ5T8qPpavf=NLw
z4^<v(oYZvlTsHZ_zx<V)7gq-LMtDt)3Z81UWtHoprIv^Mj9WcCHJu736;4T++%wr%
ztvjl0_KMfy+kWLuTz>D>uHM@--j@6|yH@@B_Dm*|R^7L{lOmrLbe#*+xVdd*PA*Gd
z4<EDa%ttF86x|WiH#qi4<zf552L)d@R;>CQSX8jMeIeJ>Rp+M}P1m*XirJWV&FAHT
z1jC=}^xER5KG;|}&0bi~$BtY7aM-bAL*c+FcQO(;d{`N^Ws0(9(dCw<r^U4+&1!o;
zbbmAXxV&3Ww=}<FwSChb6Uo$E(;oMuRdec<bqa4zouw<JX{_XJwu)^b_c76uO68e(
z!oSK7$1nQNAX3O%W0!pF<Jv<vMX!1$q-xc_=ChJ}9rCa(Ypu;Hp*@d-)+J3dn)2|p
z%%&w;ZhP!k?lJtO`7vMU`r)*iQmH?xhrfraHcVOhpJC0;R{J6^fkQj4EuG@zd8OBD
z=cI^R#!X$PUInjOefX>X;dwF_ZB!R!?vwfOY<B*V7qeV9-Fo>=Y+*~mk)?BI&U33=
zr>8#k$&TH-cTS34eR^fuu3fXTJC{!V&v3zKvdXC)#aaiR%v59Ri=CRfMY;XpgBO}b
zLCa=OS*m$1cy-j)s7Z5k+|>5GN;0(QnrbM~wKY3rWl;Q!bFLFpWsIjJ7|FCVI_sP=
zI%89CLq|;3`{t$PVox=_il@A~zCLQn@@V1C^+D^@MLSl83wN##+Z#1ib!*(h*J#^i
z&a=N=`=5bb^WVYy8{^+DeBghR{fO`S8jrTyM>ba^f1CZ|@B{80ruCe4XJ+-BHEmrt
zd*w^3+P>whYrH<nw{4x;x=*Jf`H(-`>JQ&te%FY3KIZR~a$ES}kOKdGd4@j@AM}s<
zv;8Q3q<>gnvLgNwe}hfp(&*RoL_V%>`g+&+$UV`IYW-!L+pc`Et#;eF=d!7_<hD&q
z&(1w_QQY14_Qk6XRwq?FCO(~d$>OowBu|xuPALVQckhm9En1;-<_IgpBnJ`3e^&M%
zV%FahewhE(`#%F~+~3W0rhmk)zNvBja6axw<HP;jKeCVf@;%!7uJh6UAEEPk{_ua8
zANeu8eXFj~qxb$-|Cm0STYpe$eTR+t+FLQ+Y}*%RS=FtTX5GuhSpM~|*zvEI|1+>|
z`8#c&T2}mr9Q!xMi7PY1cky@IC!c5dcd%Z-PWwl6%$8~Kf-eg*|1&T=`8)ql@Wb_b
z498BrKXgz3$Ihj9UUjPdu9lTQ9Mv$j|K_9;*1Cx0xsxuxvp4zA@Zg;NE%t}%&HJ<B
zZ#92Q`q9eQHBbNV5<A%%`;YO5R`=G~DtX5y$Nb<ffBgHrP=&UKuj8$E&yVa{-||o8
zRh{9MO&hjNRk>g%Uor39yA0mmE#->tztsLS91?wS|Ch)f<NpjzvY<QZK)u~t&%d4c
z+wz|wQDdKw|L?FL{}~?EAN;Y;qQ+_KkL(X`_c$(!I`wPXRufOXg==30yu6kA<e&Tp
z{x;Tg)8?7|=wEv@@j*U|=ei%2HR0<snPV>Vo{*N$dU35vcIlL&in{Aw+b*x4X8j`G
zt?81q_K_W3W^JF$Hn}!EOlv-s@lIsNBz>LLn{pTMf3yOvt5m=HG5z1U+sEhs+VM4t
zRd@d4KmFfsEl6~be^&pWfxWKo#Nr3n|A;U@{QlN`!41>>t@hdf8CuIWXK(i}n=EN(
zSi{%u_CdZo=++@=?u;*I_2S#6-)GZ%d**xj_o`+4&Aas@A9f~pI+n)ue|As*&%o;Z
zpP^}9Y)$TehUQZH2h-%)a!Xg=_^0qE<!W9H@5lBxyI#Ex&YCCrw>fwE!?|at_orNG
zeYft{`y=%t+48LajE@#vFYx(3E9cF5+qDP#8uO;l4*#@m|E!I_y+P-j*PY1!(EUy1
z$MWA16-|et>xDrVx`;&kf7tT2nCIK)8o3{WdRrg-<$5PwoGE*6`ilF1g09sWM8BFi
zdv|xOx7Wozn$=P+7oQ&d`TfuSxb@F!I{!1Uul&PzeSMAWZ|=HFRe95;e<UA{Q~R;|
zgY~hf>oe13uHE|H`(;1ZkM9rHO@AsW_V1bXUHgaMk5=zDvRJx#Q#R9P&wR6mOtH*w
z|3<r2>Hm>j`*He%{?7W;{kN*WMO@`;EdIFvkiC5VKKr@sF<UP@-G9wawBq~2`-k?o
zhuzxW_Hg$!-}sQtAJ%v8lev4d;#hRG;PQ&HddVM>dh7OGeKgy{L+@XF=ifQ?htSiQ
z<j3@*{kNmP3H*@#9r}m&Z}&dUAFm%yZ~o7ap?^!;?P_U!o1Ea4FKcBLuju7&jkR|D
zaJ~KOUQgY7w-5dL&v4|f-}8veb|SZ4|7S?p`lE4OMR5FwZH=|XkB(n3(Jf(K1KNHX
z8Ts=52mk!rUFZF`Y~8q}{hRgQ<u$9LEtIxx>pt_t@Ns9#rw5Hf8sAU6SAH9~^X{Cd
zGbV9G+q?gie|r2s1KZpBQ|bE?{eR2XRR3pK75*rdDc1g|{@)${8RBMf+0V=WVHN!^
zVCQd-`Wvr*+tt7N@<Ej4{KI<vv+}3c|B;;gpFvaZ?;`s*Cv7tSGpxS<t!}~Mck_SP
zdOvX6Xg2dVZ{6itX&s+_)cfxHvGIfQv41MT5`Cv5uD$(Z`H}r$UZ>Vfo9nfHrw{*U
zkjQ^vcqqBEq<f-H<FeKW;mcufcm3Ia;=BD1<Mzk#2j@%tJMo`ki~F0MYy2PXzTaEV
zUuT>3pF#4`hjSa3zgWBK{vX93jSuSE_6cve_QiBp`IWD$ec6xO@mzmX6KcA3apaFI
zf8h!(>DN=HANiFN#IWV^)xYolGpzhO0ZXYM`BD9-|Lx{)JU=vlNBt50+i9l;im}%E
z4FCRLdTUqJ*nC*~Z|;KbNK@`ych}1{+7JB&Uum`4Xg^xtH9czD>iiGW{jMi%-uCg`
z(ucO?hiBP-{;}%)p;_Xc4R$9#&hPmr`$y^ne`ihQ<Nbm^f*-Cw9M70BYkH?m=%apt
z_?P=6KTK~e;kB~N-)b8jdPVQvW#7v>xtGt*t9)8<VYl#SPX!*vPuCCMm-u(k{zIt!
z&F_chh4<JmuHpK-v5ql2{QF~%_>Oo!6M5N8EBlT$EM>pe&0O<C`B8q`)2lVok8X23
z*_M4*J?=tDZJD(8YVOPV-?)Es&u%ccQ~tYj|AV{hf2gFt)m)f8ZF>AB_oh1TAKU&j
zI9w^I=l}8jTgB{<ALc76oc?`c?Yn&>s=nDqx^{Vu_Vur^W)Y9)-LjXi;6C!Jq{UPA
z=#-T<3mfkIXE2HXq3*Z+vH#8g4F9-x{+2gC>|6Ib{-b@<e}>%sE%z8VT-hU7Uz{{w
zz$DlI(YvW1-XGZ|H?^!ay_Wq^d8?^!@?rC^Pw#x49X_g_oqEZ}+-NaF{W|ft*1t>s
zo!Gyz7qqcj|J$M;-yi5VegDrOYm?7^_<ifQdj|V=H2Dj>KBr_}e%<ZdwU0IC56<$w
z+w!6&^rQ4q-9>-wKJ=d3yx?}l;v>IYetqkgeZlJAQ~$yLKf{gaZ|&E&@{9c`{@Yid
zrr%v>aCN~aQ+}x*zaQiu&KIt@_D-4U_KL~JqUN{j+4%0#5Hi_5)iiY49e2UT#~F{c
z7(ug|2aoUn;B+2zxzd}>zlF2qxB0(W`k?ji+?v`CzaQB*mz)>=q3!drzWa~sgZ}O+
z{Ug0~#}93KX_ek?ll#cG`k$b_NJY@6SC@}kY5$O_Rd%$Kyu2qpdCiaL(4D(4ZavS<
zRF$*s<=^`03lIEfI5>5_U`^S4!TovbTUOm#`~0x=de$1nAKh9f3ybwSAKsUZc)d^i
z!_}Qzwx*j+vs&J>$9~0KUbjaQk9S_xwc%XmUi8^@@vSus=imQou(STp(9}_X%Kkq?
zUj1+5{kO9JGlZ<~T_LiquK$z$N&kNwpZ_yxhW=-0D*w-L^HB}se}=353j*}!fBXLL
zUj61)R?rQE|AOK_lq^3mU+|C2e}<+*fAT-3El--ZPx9}=Kf)g-KlX2Ur!-A-+IJ5*
z=8ONte$4W2=2W`%)lTV;@yChPnn%jLllA7-Dw#;Nu08T#{n|b2zi+R9eda%dL;MfL
z`nUWaK7X6=pP?zB?ueb@kLs1tcjepU8UD%CotLw?RChnQeASQiNAd^s*<Z}(vGHE^
zdfK$&vw9N?SNHQr{J8A0;fmP3Uyl#&)BbR5%Z1wMVOwS;2=ChYYwenBEBE%2-tZ$*
z|5h%~sN!o~c0XI{-qzLkZfEZD>tB*N?b5whQOj1YxaZ9~w{7n7n+Hwretmo8VszAP
zXPwU{Wde6Ir2p9T?_&9+y1Vipg7)`a|IfgXqhETmJ}3V6^hdSN58CR7i0!gly2kUj
zQ%%jaXFu|nzw)ju+h!H|ZNWdii)+`jp8a$yGR9YZZplWs&kVDpel4y3X}#^=-|Jt_
zf8+RZ{^Rp++5Z`uYX6<x_MbuEpG}S1hyM(R_#5wY>@j{gpZ)ghS(om|SRY=RIU!@8
z?1$&=CA@OiLq76%*|^qbFYoxWpZ7<;&(*EFuWZ{f>DH-;+`QBdjm3}FH~weX$o}^3
zgMNlT0UzHVTz_-^x6L2aJ8F!Vzn;%qQ~G#*+kW1E1~1L)M6U(BimLtIvh}`D#;ljy
zF0W_3GF{8$c87?s$)ga@Gp8N$>Nx&09E_`faG(E&8sF02;{UGQ-(r5qzG0X9oBJQv
zKe&Hjf9HP&nHtMS_giM2@7!bmP<!|M=6_5d?fcHRnAW%IuZ#Jkv*pA6uFIaa#t~Qc
z*gtqHe`HtPYhS0sVTL!(F3Vz=^|OBd>(BO+^naKhe#GDNNBlnn>%zaYzVLHrO}}Pk
zel(w>ruIkeM}Ge;Wgaz-4^G=R$yxuHnY%12B8)dR_3{38JI;?<ixYkSH6|6U5oyqw
z92R}=Kf~Pr4BR#6U(Nr=ul=84O5z{R{|uWy{Yd=Ju;%CQfD6W-fB)l|_Mc(G@;@Sr
z|Lw6)vHz>_ci9T&-wS_C|0sTNKZl*nkN*sht{;ib;^(cg`w{zKzG#i>$Lk&Il6K6y
z?eHPLsYLrfgV2xpQ9If$X}(+5>~+!P^y`;N+nTaFl^Z8XESa#%fc@vaWy>GP|FAm!
zk1KuU5BWp)S?vV>9lg)HPpHB;=*QYe@B6n|#Vvg#e_Q;~_e1jR70rk2`E>qhKf1W=
z$8OIb;j3T&Q<2m7F!`mp)%hlyX!Qf9buGV~_V4&-dr9}Ljr!vQbML3_-8Ol9>Fwfo
zck}=8Ecy{!__#9vk0t0_yN}<det5XvXF^4A^xt`VY#;GUyD$IQ7j`YbLrh+5kLiN5
z6^e$6`~2Gq98x@0rHa;c^CY~Pc2a-hZ_ve0AO15mSNvyqFt`4LU%u?^n#2#{Z8o_d
zH$Tpsw*RB|pP;`BO6M{kz14sC=MsaxSDzm~&r?x;=%3(+@V2d;soVSC?9-Wj_}2Qq
zFWupLFPHR-MZBD~ZFA;|=Ivk0>Rw!6|1tC5+4-L)@HfPNtC-Ji|FtwDgz?|aDU5%L
z|1%tXI)C%JosaL|IR7o{?~*OvzW#yRL8IfZ?+JV?5i`>*OkecF{_*+tFSmmq-Oc*w
zX7bkV{IUNGyf&N<B~m5}-g$M;^0MycXL}r)YUR`Ri|zVV``ykMG{0SE^G9bU=rF09
z`o|{y2&r+n_LZNhrszlN;@45RdwwnNDv7oBy;>vx(YECD?j0)Ir|!|Z_{U~%uBxi{
z&$Xs^y@R)I+qvn|*6MBsvG?cBf7$-<$NanB|0u@s{%2U|ec1ko;-&pRg&OAz{ksf0
z74nVnZ}~rwf9L<>_;=x+-H+rC&mXD3)qEs<m;K?jiECa)xrAMt_N^@Z+&s;X+m?NM
zx%`Lv!CTWibl=zrF8a}aMEF+JtAF~}a&vUVs(H1KM$K<`jMc7uQ+u$w^kF`8MRoYK
zQt5vFANGg#$zR?oTOWHhKkf1!`-g9ZJumC3?7O;kZQQT2EtgB~TKjL@HtTcXm3-B<
zTbC}~^X{IxxJ|8;t)})v{p00tME^6e`u@;-B<ua~+3F9$-}e1bUS4rI@<V&q9{We<
z*<ae3et0{*yGFOXeEFU@g%9#abh$irrCwdV9roea(v>d)qkl9XmRj52QDa|RyD010
z_U#PvT7N43Gc+;&XE>;6pJA(4Eid%%h&|^X<~ozVPUpQp@*k*<4SpcEa?#y;H}6Ir
zTyrq>!}P!p^V_!Wb@rO}{OzyW?L9U2k8*k6>%OhuvZdDPl5)m_$TIs=pC8w^+BpAa
z`**)yY>(iF`eV12e(&0!Tz~8RaXX10$sf7jOt|@ax}3t_`TGpBW`#HJi8O6tijIy=
z-73%d^48L`z58$JDqgX<U0uGTG02@Y@BP~U4AQs1*x%Mt&s6HYXDqxY<Grvzlvyh4
z;v@@IPA!iI6DJ;JRzaK)Vn1trmz7DK+>e<bg&jJkb-R4L-d!?dPSfs(m$$zD?J=KS
zx4loaz|)dN=FyZ_8M|Mm{@T0!C1@J%OncW%Sv%Q}?nio>W*04<RQOyx)g<k5_eyuY
zM?8l)-O9={{iaHsjD4$`_T8d2?)isr&({`SSy`L+cKiCTtN)tV$r;{MP5o7xGWDd@
z{14)<zWv)~-clBC_T|goeQ(XT-_wx%&tU)j@_&Zw7d~ED{rvv=2kZVbteZ9am}YKu
zY2Ezwf2=PDe~tcT`ghqL@g)^ThabB4f1S<G6PIBwe)zD}z113<FPZA<{d@I1q+0rK
zP^I1R<*&rd%f&NUrca8zdFRI7scU$yZ?xF)_F(c#ja8=UQboQyPDQyce{b^Sc3|fA
zbhXK0-obz4e~JH9-=VMZU=4fAJ%#5MeB#HRSo9P<?0IjxYD1-2>eR;{BYG}X$Q(9a
zAN*=&U2?;*q{1mLLXKTInDEg;GGW6Nb)8(z<AUEG)p-6W)l!-G<M+WJ<yE_^DwaEy
zloUwDO6H$PO;w!QsL;frBK2kOUjCn;jX7-2f6jjql2iRr945HZzyF8Y5_O4l!tJ6d
z!7UF}mP#HAJib-qq{(BITbavd`_%u@iEqFE#rB8!e+I5v;r|SiSJtNU|7Wm&@t@(r
zjrvcn{~3<BfB5{b`y9`Ih9irW|1&&$@SmZz`@`>l?fcpOGd%QPRR5_|e{JIa7fS8_
z_?G`?ILZG{$-I64m)H;a|5PQ_|1+4gW3i){^FM=QMExIm@Ba*w_<wZVll#wbvHalv
zACsTV|8qzGkB)!)e}*r%71l6kt@!m!Fu&{Y`rrK^9juS^+t0=pUT52Sx6sbx`oHDu
zm^xO~?QQzcu;7gTKarsS3{Q^#XAl%V{GZ{M9>`Fkoaz4=X1CZ2*2(kjv;L6r>&JW-
z`QNqPuYZW{Gw0a<E~)=NgPQ3hc?R1Z&ztWr7fxCKpP}5vUhtn>-#(iU>GEGqGLnDZ
z5BhiU^nZpI*6jZoT0`uA8m<?p;Cy@RkHXu%JEp6Z{bx9Rarq<v!wat;zsDsXFY+S(
z&wTf9eewSp9DmsV(OUSQ;bi~c`UmFQr3<?MGwhzM_MhR|<tO`ZD?iF_)ZZuS`f#oC
z(K@;7rhD^`RQcch@>V+f(pT*hx;jFi{yh)exoyj?Ss81R%{JbWJeB)9_U@L1xo5(E
zUViC3^MU%qG;LmY(f0Lm`-&%jy1Y1QZsakM*XN2>YaGfwHmfk;S=OD;JykFNT>i51
zBXje{dD6iriuS3T_*`?{?EI$l$&IHr*X)+>T-tW<xM=VC-u2GBovXv<3F-6mm~Sh1
z`s<iltI6MI*Ppi5&pQ6|7-)g+=6~m|eY*1}|3{{XR_yd6*S7PpXRKA8^{&i<y`@P~
z=3|e(3SahDeU=wj)<4?MbZAQDQkmcUkxQ#rRaAr?37s}q*=x#^dna|H?);5Eu*<Yi
zPQQTFDzIqMBOcqbX={TI2e0m2tM74fX^`(1?~=L~*MHrq-w0Zs4PIu=%8>dhO0IjY
zmfFU}FRM1W|65zCYj^2qu)2EEU1yD$d36Dn&-VN&3!eI{u*X<uyZ#wv`8JC;a`NI5
zuj|V!x=Mwv#|m8!K6m`7q+hngVUtsz-kdV{q1=BkapT0k?cc+crn<_OUeqnsiFkRd
zZaTxZ%Q`w+UMCdkzR6A4(jb$pq+Rj2M~1<8yM^dBVb-PtK_LbfK6+eD<sk(#sv@#H
zZ)&e9N#syZnffz7Wx8{Y95eIuz=)dttStu~Uf#8^`S8U<7yVsJ{aQ2+TC1!-y=mLg
zQ?IO$Z)Iix7q$Nc_dnPw{~?>bt0wjFe(Aca@*jMBl@EW~-krbvqxlj28{eJ>T>7If
zyT9{mY~b^c{2g@+70pq5FYi%Zo)Og?w{3grhwdZh_hc{cF}fCY#h&-;>AmIwAEqC=
z&)-n5dQbMpLC{Rve}<;mAG6|_GX9zU-T0p&Nj5ulznuE+AB8LL)&&2sTvD;>-I;as
z_9<Q2CzpM4Nk#s#04;}Ufv>Lr5?h~cyGcdxyzXwT4Z7mz&;Pl1uRZsp_&=`T{|v0D
zfA^|(KPd04&wPJt_2c7z)VCG?$o$9o$MTAe+q8H=op<bW?K)T0==|_r{?bg&rZ2Sn
zOto(K;a|tXZ12ShD+o`zb@o@}KfnJB#^1mH<7oZQz;>dh>f`gH^V{XOn*R~;e)#Z*
z`v?02Rqy6Mw&(eG&dzSb_Sui}kHx0DPC6g>;qUq*^(=QfAOEQTaMrYN|B-uAAFl}f
zxPG+Y#q~PLy&vpmKAbOb@X<`h_vzcG|NJHYBKRZofjGV&D<9ZP{W18_{_wB;(RmC%
zdLQZw{t!McCw6slX32h`3iqSCY@ang@?{U|Gw*ZXc=b!I(`WzP5l?z=ad$FVnMp9)
zpI-fsEBikK+qb&A{~12`zVDsYesuj!_rvjG|7_~c?UL_W^zr(^{|vqMtZPlzhCg;c
zc=giyWgq$4b3Yn8e~>Y(*nQ}q&W}p9*&?SuRv+4xy1%j1F?C7BDp}_P{}isOf6#9`
zn6-WPpMOvG>+g2E-|{2+A7A)?hNi1O%n$9VZ(dWM^ZKvTb(c$D-U|C(-4p#G{9EP6
z`tIDfCEXQk9!(GV=->HIBx~3AF4N3Mt$r)l{W$jhh}654C8>L_luCEMT()xpU+RAb
zW|#jAVtw<!f%Yz?{%1ItSpQ&W{1&#!AJ;$TU4QiTe4dJ@Z}t9o|Bn54=~ms&hwt0v
z<bTwc*RFZp$$uzTIcVF(q>p)xx#i`n9Uts(+t0iu<U?5ZnryRa+t)wP=e`&Jquqzm
zdhPtP_2KTn8tYETZ`N<#pX`5g@`L4Xc0S;(KPIR7q5q&h)5|)Ji+fxjpRM|Rq)zi%
z@+RY$*!WlC-!Grjc`)zatCw5m^Sw;Ee7H{V;{MHlG#~mJdwe+7y(F_N;ryq(AAA2Z
zu>AYG=PUp1;79EpZ|sx&Z@v0``1<~>^1WMk>sDR<miyym@#5GQ*X_kjt$)|XT@PtL
z*q>auEGA-CoMXMn`%K-{YY+Kc*igjzYW`yT8*PoP4E476KNPFKv3+EJ+y5Wu^hY=M
zNmj@oiL?80_qX+r-v|FQNbQrVNIz&NW2gLad6&+lXYtH6t{;|7O;25(C8w}=!|Vh5
z^sny8E?$_ywY}=z_6Pbr&7!w&I_4dickcGh8~+*1{<8n$T>GDaRqdnS;)nZLBI^$S
zXV~VYw(^li&X;W8<ZtCaE-tO8Ivn-U<X6~4yTzrIt16uCyI)M+Ef(bxb!=<7?i#@x
zFQ-j<Wv-pQ{K$odZ)I<nzo_3R{$}}ayNd8{0e@%NG1r~7<NBof;r@a1E&telq^7Po
zx;!GY=ttAzLv?Z+FKvw%%POnN-Me=Fx9>fs)z$wQM1FL=vk>xikGuL+*6GQ~;!=}7
z{^VJIxBO>F(QmQe-u~v~$M|nyKOQI6mOkL`+Qszp@~bG@1DijJxBPKl7I!<lPVnRL
zHvLG|Hh#eh>m$F)ras~|vVL8CS2}3gffxT2FPrxBXIZVAT*LS;+J5W$KSIa<an1eD
zz!LT2WBteMgTL~Ro|fnOW3q4WwL1B_TlY7&*lGE*>~Gb(YVvj8$Gn{nm+jj7Be;B3
zWETI!{o+6PAH__Qs#|IN+RAQj>ErdRcO!o^$FOeuUa$YjD!c!O<?MglrE6X`AHMkS
zM$6qSebxEj+NS=t`FCd8KE++pPbOW>d8>B$ACHT!TH22IO|h9~+p6}M3*J7NT{XEW
zf_vTTufO{j{%3eFZ~uq<`+r2r|8eF2c8IPi_`6+apJk1}5975Ji}(d=l72k>?QnAa
z&3_l=MILYPHS+vY-)<-KW5RYjtE)Dyk7P~XY`H7{sJ_=E|3`S8%;lih;Tz{4yVc+J
z;79G+#$D0t53cvOzx4c<*1ubEZ2SH*wAa>Mi|4iBU;1P9QLE{H4EG<eXRfe!`<>po
zr}lBZ;QjhTlRt(vKK!fy+c|XC^*zat<3+PR|DAOC?X0QqHb2T2eDz(f_UX07tKvL$
z4%i0AUba8``yYqqZ-IZe?79ClJXjaMF~7e~t?oqpR`$dDnJbEq{WIVBk-yib^aJ~&
z{Vg@>3#0G+QTWlBm|wW&NB0pq;mcoo^|-r#@Aj5Z-MgpBGVk5mw-;wcE_P$h-GAi%
z{j>kle=WHX__Omr1M9@U-FraGkQx6oG!^{26u+7MaQ10#`_6rO7xoxGs&9K7GEdsq
zI`rfE!~W70#gFuQA6B2fy}H}m)=Xc@yiN5()ob(Xf;TdXvo~gk?|xhIGr7Pw*7VMQ
z2BY_l`!}!uBhLPh^ZCd8V|EIE=kHJRzrFrJ{ZZ+;{GmUxAJq$2uzxH0(fLTjw4b*=
zKT~So!X+>NDR2Cs-}y)Tku1~um=D)_SKNASC%gZO$yt}oZ`-5FmKUdLR5n~)zSw{1
z+x;gu|CRj5Rd*)p`5%$h|2Q^&m<}!p+iw1Gnf=KB*!e~&?V6BlHTjF~R=7WU-@H#N
zbJx*h>mRO{-8XT?%U!PLx*zLvyuMY|yY}F+S5YBSbt`#SznG_R*_59@>(;W_RXqP0
zZ1Zm|{>NGWpMf<Dba_op`RvF1tzY`PZrQj0lZuadEywhCi+#Gq9`DKz-~4&+{*)@e
zRTH}YMWDa^;qa>uugnJ>G0lH8!(_E>>Fw}KYc3z#$GdCWwXY5Sd*{u~+gH7%v|Ro}
zvHTyg_wkp54;%cuk#~L8%;|o=)4G4#)}8q_Pi4Q=glX5Ttu?>gZ#LXJ_n|qbZ0oi5
z+{D$+g|d6LZSO8w=FU8`Jih8bgYk>=Kh)FzNP{-zg3dvj_NTV_ar@idsUHtNNI$qY
z_~^8IDnAZ>oc*oIPG!sAMgMel7e~b0duh*aWBXCU|M6V+BXLR_&1RLhAN7}h+5I4&
zKhpNt*5xN3@AW=>@_}uPP<U+k+{^jT%m3!o7uA1=nEyj{>GwY($G@q{Z;o%+XIgRj
zA%Cw8d+E}O`46|=Tl-jFDqEg!PxYD~@jhm|{G01DbS=NihKGJU-fkMXVAJmI<54|w
zsvplc{t3@ce!SOAUU*BL(ue6ij9W{0|Fky#^YGE7{SP+p|KM2PRi}KlWVd|({!OOu
z*4DDOZ}k_6eqoj0SD&8WWnO=C`uoLiu9)_!AD7?!{HU(C-(^!<x7W_uGq#==sIYtV
z>W?#D<J!ZuJPfgF-@jg6f9-zbn|YT18JaunA8fPV8s2{STkS<V`|Qc_HC|ilnY|a*
zu>R0}pv(Sfe&5q;4cnyB8rS^LJ~;Wue+KXCrhEyF`=stw6o<}Lopwv;qOXb%>(#eE
zvwvvsKXm-f^gq(u|1+?Cs;Rk9XZy$e@80^n^X*pshvd2bC|#X?te&ZkrQ*}!-`0=v
zyY{JOCTZHJew03bkALsBT>ppP+ijRvZ~oDJXqS42U+d$y-pA+3UHH0tt+4Nh-rhO?
z44CU)|N6JPa=y!d2GG#GL;S7f-<JQl_(=cu<8R&{&AaOCvcl_lE^b*b|L@E{^^daW
z7CyG;i2Px6<}mN^H}`HGy>NM}J$qKzrK~vRt988Yc5~O?sCf4JNY(KM{@%QQ3I`v&
z=V-k4FaGM@s_&OK{<-=`0<=>2Kf}Qc`v<ec#O`m_`jhx$`G?P*KdNPyZe4$1{jKbW
zX1$MWix2!Ny!7R^t-RyqxBm<)?D9MRaer9bHZeJEpWKJK{&g?z30+?MWZHADi%Hcd
zpH1Oj_wDQDcl-V`D77ECe=GhUxBGtv))ybeTmFf>GOS7byXs3lYsIc}{~4S=upc_#
zW+(fh{NVfcf0`dv*Zi`Z`N&`XRUOZV@2z_{7v6DC__eoh;^Xr@_mq+!uGJ3yXu59h
zBVBdRt6z8IIqZ5_{&M^M%|B!RssCd7&v1~X{=tOY{|qei{?4)qU0&mQ^^3jmzsvRV
zroG%p<)ur{^Tghd`;qK;d5?DXs#`VoKT;p=-hE<C+sfnzKWZEw`38qvKQ=YlZ0)0X
z(br)gPu4EXl#`w7IDdBu<EQqw&lhIbY5Z;5pYxu#BHit3jq4+O!Mc<G8McJAf^OV-
z5mkC`{krU3_tt-CJ|<N+b#cZmzxljJ|1Dqjs{Fgyx2UqYsVv{iw-+DI&E?tb)p20n
z%5^X2KfU>%fo1XE=K4H;=K6y^^$F)CD{g-?{JZ*({6l{3e^>uAFmJstT(SD7{pRgQ
z-}6`GAKs-l^YLGy*Fo1z?-qxDsGT=`NoG{-nxL3_udG_H?p?Y@aL?tlG9Kp`BX9q^
zxBv94=f55X1OzZT$alqmh<^V=`Fo4~gSGQFPwRcSRz2>roqXM;{cL$(_Y2mYzb|CE
z{w@25Q!%eUWPYsJ{P6e@?p&*T|32>Fe0<|eEbqFld$oP{epGMX<GA33obsjIt-X5p
zkIduw*r2vAzWmk9f2FhZ_Wx&K1#KVa{Nwr2M=Eyz@%$UlgFY@j@ZsG0^3@gYhxb|k
z5dP@&-EZr^3tM(vcyHss@Q=d}_K(`p7j^XX_+~${=eOJbh@a<ne702WvZYI<?<QSx
zFo}z=-G5T*KZCgagEjX*MA`q)itG8$uxZ)qkL8cmkI$7q`X>K<9oxV2^=y0e7iIl3
z*?d`duHIW4=OusGepD~6xPEM(aEsrrwxtix3*O7N6YBfL%^UUF$NQ|g-_ET}ub1uX
zt)KZf>OaH5UHd=eoA>Wev6soT-=6>W{KCi=^>QU|^+UJ*;QXLw8+JNk_Ct}Xzf<3}
zum0oyV{+}H*tm@8^@67Pe6ja4_X&UK?OVS3<vh*{TVLOeKC<MG`*i<H|D>7i?*C_K
z?zDf<T`y+;V8wq1-aqUg^}kjBn7Jytrtk;j!iqk5?myfg>$~;7{AXyX7d3h77ys7!
zcdU^0>n$J7H`wXl+rzmmv(EHN;+Bgx!P#=15Bp_b&*E!ek{PG^;f30~X=U5*{AXDA
zm;Yh@!|iVy|1+>I`p?j$l09qw!L|BF?r&j#voLXWmR0ZhKU(=c@_bv~3;of*zWnmn
zP~YMs;OZdx&^@gWDi>aDpKzRQ<wy31%C}EGvUbei?_9r@b@B@Br59I!&${3J@<~~|
z^!^7M;y*;5|DpA)x$?LA>BsdQ_Tn{`k0aLRZ=K(8e{=YOzjC)DJ}zC?@YbYv9q2sM
z>-Iu6jt^I)?`V1-aY4WIbU*9q(%hx5q^9*<k1B0FyF=XHwfx2PpUdha{xf{Y?f)Z?
z{iywo?z-&wZTH_!U!3_*`tQP;&<B6L56W}YasT|q-=V*cufjQg_x60DAD53sotyu6
zbz=HQ`(sjNb8{EH*k#}Pb=rT17V`s9`#Zku7mK_112i?-x`%=9*8NlW++WTABmVp!
z=jF$s`}ErX2wy((pMmWk-`=gqkKJ#J7pO7(`27LssASo6{}10LKi)4<q3`@LzqOQ~
z>Hh1gRlLT&yFThS?x}ptt<N2sb$yp!t9+mRL-GF%Ez^%!vA6ZDUlZBzK38_;zw-Lc
z?T7dO(C7an{5tZ-#HDp-<u||oBf|VZZ}sDoTe$f<x*xp1Ir&lP6FUt%_Sr|cA8woW
z@A<=H+Y?trzRZ7=Tjy)^pTT2iwe*S7$UMcJySGoe=fLytll_A}EAzLNzjNykD(|!Z
zqyC?vX;zlK+?Vs6_A;jDZ&^Qx@Aw+uBgeb<N8v|j-ye=2xgXXwKKQZzORn;fI*AKD
zW!nlXCLg&j#kaC}(Vd8sD~=b)zMFI}VhZp3zxDCPe_roX_;-H)mi{;PzY{CEAHILn
z`P=#SpMoF#4`lUT$9_0|eE$#i{G;{)Kkh#Jkhiqxm+svgAN3Eue)iG4*)+ORz1jKW
z{?=0Ij+BdErBCR@y^px~)mJ>?>Y=>(<$0_AGyKk99$hJS_df$KsO|agKf~gN{|rqV
z>mMHcyXHT`&s2xZzwiIdISE?4zh?i3sQ8<ck5{>^U;pps{cXovZK87-ub8~&|5Np`
zzHd+dl6#S7q8Q7IKRkcD$4=wJvh8WHvdYr~KV1F0%d00zTWb>I>XQBE{xhund$#`I
z?)e{L_e+2_r0DJ`|7~7(S<0?C@ps4{r4P2-k66b`Rye!wxVXpiWB<dc)7CGl@IE4^
zex<}ZBjv&#^~d!*KPDfE6YV}?RX4qK`HOif{YSU`>TlU&zBn>t*4^F?;~&L;=ly4R
zF#kWp_P)u#i~jI`)LZ>qxbC`CdfS)#xAs3=wtK~o=77Jm_ZdaLm{r%A{;}TmioWUW
zyJ3$HPP}pJW!N;qlhws5{B6o6M7e!8I<sN51;c-aL@$Pq^KU6X;6L>K*8B(MNA+*s
ze(c|_`zQ3n{zv~Anzz=oR_u45se9(p@sMV*Tl@Np3-e2Mg?H|;T<M<rNT2id2dDf$
zmXC6^J+E)M-X3^)ZCVfWpDp|I<$oxJ{}I{zk5lpEy7=yR_AmFl=h^>=e9-G1{xSW~
z`&+-i<!t$wx^Lryv(nyuNxzmK@z}##So&yx<3GjATe4R?y0-pncSntA{kPSx{dp_S
z9|>?=?V84&9UpI9KYjY?%gILP|M7vA<KMcK$+^V+cgkU#i9Zbwu8#e8K7KRny^SIQ
z$9c4wV`6F~CvhKoq?VcY{;l3u$tSZiQ}<R%N-{i)s{B<KzW>g;D)TqB{~1_<|1&g!
zj)6(6v)z7d|E;L|kJS&aXRO%w-TB%+m48?FZ*^_&%KhW|$e#CX{_<Wk`Idj8AG<T}
zY5$n5T#+qMp;;nbYyQx$bNS0@w{)NP*cj*SGMih$x%$udecwL$=jL8MUoHPa@^{I9
zhJ*SwmcL`_51J+aXK1SY5&YQwXnyN2{}vne5AP4%=igJS-~DxMaqzWwc0w6ux9pq0
zyzhN2d$ni3sEy*<+0xeMr7~{Kc9ng$J%8Dc^}bz~V?X@s_;%p!viH~5|CE1r|MC2r
zyZ>>k{%2qj|8aADjq}Bl_r39(e`i$nSV`B^{|L^ler$hp{iC)CrPeF<Sn_RMe<$PC
z`osJZ8N2RW)Z4nG#`?$M1<@6g{ikJ1_m&@+CAVAX_U)$IC4a+Ke!Ez@?cM#>{)mt4
ze`JpSXJB3bWA?+@@oiG+Z*^JQ);{vCtWnq7`r-A1{DXhBANhAK`^dZb#l~ANqoz%K
zpqaNtU-0hfs{J=^EkC@QpXbM9|Ep)0UTdsPtrgw9fY1B-Y45*hm)Gl_-)sM%ZU2Y7
z`)|EJKL0lHgZkUl-_<n+AKMSEzxn-Pd(W2rog01#Kep>ETwW9QchR5f#o7LAGo$#{
zKj0TT^iT1koy^>_Q`e(^bUxDWh%%kB&+4LH?jGX@Z>?k7kNkSxW5dT^dNsSY{Nnxd
z-oI*(|MCei0FSI{fCgCY1@`ClGx|TY@BO|{sZVHE_z_;c<8fQ2S@@K_Tp1aCba8f=
zlMl<R7yhZaYhp!D2Clt5-Fn7#H6=fz>uKxO>{)a5+t=-G>-s<Je);s_KjoG`CC5IB
zYRSxW?}!Xz?l36LyfD?q##o0>uFrd3!c?~@+R36dV$v2zKW#rP^O^6-&t>O(wVR6X
ze*GghegE>iSN<8clx;ix>(#8<TKU9>#`pXF)~}HNoAr2Q`18+K|1(Vbx2N~gw)t28
zGd%oNdrgIbZ|ZTYzHhI$FPnb(<LCF=cDtF~kGmH)-~M&r0pUwK)q_rbug!n{^7+l>
zuNUq~ydVCv{B`<Iy}zCz2}Nwh*LOad^PfR)x#h2LQLp~grTh6m*Ejt>yI6GVw%3>L
zuKkqt+V{;D=a2ImK3?Dd<=1tYXS;7!<-ffC>rJji?!}zncT2v${u?pT;lK$=l|Fad
zzpE!Ljm~}b_0PYzd#mRP_D`D|yZy`i>-o0&i>n&vF!p>rE?a;8>8wX9gZ|b(_|Guu
z?d=byo{`bMv)}!#tAD!DAb`z)f1h^WQs1xJpX|=Ro;Nq{*vH<zwe@Rl>ra#~vpoOl
z>#w98uR=b5y86D>>es*BvyVodyS{hrllk$l|4HpRV^BD6#*5-PpN#*s`+Gf}>-(QU
zulrZ{&$%Hhx37Qsv+~=2hNhG=f99`v|L3o}<B!LCi~W}Vx?k`5pMm*H?5y<VUgF!s
z7ni+y|M}K=|CuwDQzlQoQ(HIl>zC)!o4-Drb7}9E@}Ih8+wZ^FYReV)r8>9z?wc?7
z?pl3~x+xVWng3(1i{UlNzdtz-p8vzXex>M7@t(~^59Wm4|8qR`{kr}8V}GrmcJ7wE
z`^4jaxAEQo^ltHWzqz{mtL^Uc`>%h({1$X;=&!@y3_qOt_59db>#+D~*AH2#ZC@9&
z*<G>EefJhSxvkrTv}Rm-xb#}@6HjIRnWDX?)gDWV{+0X^b7IxAds+#fMb<jEeOhzf
zbgiaSp71<%o=-8htQJQPnJx`Bt(a9fXYpBo&ZxlM&F){;UvzJOoi3;QpjczshChZ=
z(thr(^b#(4ZsRBVq@s#zk)PmNt(m)z2DdyFx2mxE)NZ`&;%~wDmka+b1s}!&y3+tU
z??O+C{j=tO2KMxt_#X#9EdIyoXgB-A;*e`4vHFk2-|~LA|B(Hdue(#%U%lxM*)~7;
z&(L{K=jxWzd&B)FX_n-QAGv4nA->5*d)-N!?&S5EQcvGE=U;ku`N*eRew=T2#qF-k
z_;ckyL$i5(M*dCpL-lO?Gxp#7&k*%7zR^bdcfya)kJrxcTBBp*S-tp$oc526ADZqz
zyx(r}pMj+!|6q93)Gy-uOm}?X?=E@Y9d&N?!(O?2)#v$cSDceg^H{d+n%blbENdq1
zeN$g_g$J~Nr@3u^ru~iVhxb7zcP##4`#Ydw^}}uZKWaacKg2I^yN3OTZu#mLR`ZW`
zpYNHqZ2pRu``P!YRwN%x4%_n4wypaCzua8=Bfq})K5FBY_q*_=HraRQ^w7yc{fDD2
zuz%e9pMkBfM*ZXU-v0~_R&#z7K76`9^TGY5`waUufAl{RTe9s}!zF#)Kgs#aYV1Co
zZ+W+sL!s8TG&eZzqez|lr7dfn9&zfwvEg5zCFW_IQC#UD|4JBTFA;k5%Nv5ajjZvH
z%@0e@u2s6L`f+}%%JldT%YQAI_RXa|ZRNv{#z)?)Tzhj-cf~dDj3w7{wxsXg*>y>>
zH?d>ctKgdbGI@`m-;F=Nd{+2{f3d%!DwOr5YV?mh{M2Kj^>I1p)zwF2)c!M+bM1IF
zVbQ}`AHHv!t9eS`yg`6Bzi-Ilpp|nIHbu?Y<Ex{}b;+JhO1$@`s$1{HnR4b~?(RXM
z6E8NTrY1PDPgQ0qTR(4Q(AlNy&*tsE9s4Wu`{F-5Q#CKod3jD~dC-)lTvMKlOF9+Q
zY-)LQ^|8g4D+^WTL}jjC*8YI6S@gK&`_-T8pI-kb?R!>{J9l;2&-w%VUs&f$o;Ys5
ztak6}NyWc+l~>ot+6z}4I=}mR{6!_#0LvF1lHY#S|9aiE)cfnEuYbf}UwylAOVYYq
zdw1KdK6k5TuiVO4AGl?BO4eCkd3ky3e+Ii<e{WaKK4yD$(#!1lf9zkcOkr$pC~&uT
z{`%{>s@Jsrwd;RXecw9i{?3aM_rte8f4XdS-mGtTs+y__s=oebcpWb4HGlT|Rqy^Y
ztb2XgWqoS?^q>E7rf2mPUY@snYvH+Ny}$0h{a*FuPw!*t=+*zW$vFP1s-N%wZy#^r
zl@+`9ANs!SeRZ8(+sCfx_s_QdG5`7fjh+L`e};KK|1<EU@84SJxAfh+>GQ5%PF*&?
z+pMK>%NOtGwehj$#?SNiEx)|p*757(<<~#1%RKL|KlT3CS5+nprtYnZ4t;rXwccI%
zVk77K_Rp`+yK&Ce;>)_oE0=D6`F!d6-Yxr2yj#v|61{J)-nRP}%fqYg=d7GBDQn!o
z=KuJ3-Qw#K=hs=L2fwc_-SqN51M|nv?-%>-eO&vWA-d9Z>AbylZu49FN_Xr$|4#jn
zozK^ImdDxI*)8Ax^zRYg&-!TUe}-q)`fvX;*zZ~^cFTO%g<m$a#Eu^QwmfjX^~>j*
zzU+Q8@zvBneYFVzj85VI*8XfR`?r7np1+NM`|ZSiAK16^KC+EsYmWc;`&QN`XQj8(
z&O2=H3jOeRO@pV>&+USD?!J0=N~ut6d46Ugmw(F5{|r8LJ@@3VKKREzt#n4vRGr5?
z%iGSp3Yt@ymAI)&<dwVH;j>y(#kZ{W7wkN<RAuEkgEJZrR|oaR=*<4l5Lnk8CwuL|
zIi_jVGXtl}yzWhJJF5lOTI412%3b;Jm42J+V6A6WRaTxe`79-o^<{B1r`o^m>tB5S
zl>=_Qa4`%BWn=$s;@>%Sy#KEKXJDyQ_;>F97WSq$bqY1AKjtph>wa{e=e}=gMw)l_
z?bvXyD_`z<9m>vicfY=cH|wz9^&0!NFSncB>g!*ddCjVK%Ey>!w*$;SYW^;-e{g!f
z%;EJ}QS0Ai{!Xg!4*hWU*+S!&a%_K>?a^QJqdMlpy&2oKE#ffc@2cl6*)JOL<J`CE
z_uD;H&+b3O&*Yq*k*g4$>y$d{>A~##@1y>S#W#L5u0J>@{zFLW#0fQVf7|CeGWg6F
zwKL;5@$UowZ;LfMejVfgZMWe35<9l~gVXJ|Y+Jw9=|97k?Qgq3m>-anY4Xl|-u$4v
zbx-BT@|Y`&yjS!-n=5;~zhr+?Rb8{`(FrqkzfRl!QKig0Z<6Q2ECaWT9-QiTYtMh)
z3F@pJw61?J^FPC;<$r|PA3OzJ`Es-U(5$5^KI$#cU0>t=W9nmHx7$bTMeH<Qe-pbD
z@p4vw&mY(9<(Xpg$rp7}=UqR1PvXP9-iPlwGIVR#ys`>w%w1bC`N*whn|OZzYrr4v
zf3Eyp_n#r<_1?1gfj`!M*zNt>ZFS-E_=@v~$^?arSKUeRwC^y{wwUmDamail-!(5k
z*8OJ)nIrw%WBFC}-QM@54G(&SuXWPhn;InO_o+6O^_u@%H?6lzF6Hk2&oFbo_kV^(
ze#Umkp2g`@L{7Ew%kKPk<DJPvn|+fj=G+$kc>R$~JG&SEYsqzr#aGW2z0wRntG#?i
zqGpnDjGK|g`BMj$OrFQ_#@$lZjnAt5{Cd;R!Ygy{&Yjo!^3~Vd=YIX^|FqQYmg=fk
zZ|0wU;l&_pKXaYbRMV^bR-b+UU0>g}W?P`I-d!v6eSfQ7uDkYgZ@Bu){$o4U?T>%h
z_MgG-`tA667us%V+s&<eUHWg=at-DU@`3*uUahm5n)@&N<92`RUpMaR-urgDHg4MG
z>fCzu&q1u`Dv$d+|LHCCTOR%8<)-*+FaMl<EcSlY{k8wz?Op$U5(C5cuSbjg7X7TN
zD%&<MR{U=6LcY22^S}PkzWwah*T-L8&v{aE{HINA#j4Qz@$ve$<yEggN6%id^zzr&
z%T9l+uHxsMc=EXAL0SIwd9@#7f>+k<@7r%%_w@SZ&?QOt_6q;ozsyzhn1f7p!u;1)
zzNjzb_q(%sW$vH*ckibz+x2eOo!3jb^VaMtsSS_L`tttbX0zb?lII=2DmNdu-TC^u
z<=G;?b?eU7hgao4zrS{id#y$8@_hH&t?z5&Py5|0HV=GxdB06UQH3mnr2N`quVuep
z=H9;k>)z?Q<qN&$b^Bjmyl>id-`%&b{S-FOUtUyvKCa@gg}Thgd6gkvzrSw&x9;t>
zU0Kt*o-g*AcdP8W%bV}j``(>=dr?|W*#4t+_xfL*f9rS7_p@s3_nCZezs|=ZzZmJR
zZTsKuVBfa?*tK8#_t&5KUbHpGCpWdi`(5?R=lR!nzWVxSUadg@`_28Ep1*lo{rGLz
z>ErW^F8A0mU0TO_Y<_yB!1*3i=}bEh<?U0F;`wj+?B1%qQsnk4q2qri=51GamB0Ky
zL*QTeJ^V*L_9eDF=2JiT+m8Q0Sm=g|m{8k_>C#ShZ#4pEZTVDV8*yK@W2I!kv5@v}
zr5xAy*;VMjy1#gR!;gKYXEw}9KUyK~-t_6!t8MJu-OJaDJYL~{XEB#>*gVg+RqOkY
zg!HUP&I<l_cA?bEXQBr2YZDj@7#K>J8|=CMGq{)C_|M>T$um-0b&+?<Zq$8~gO?|-
zT9f~GLY>^7m|3rnNJYwVeB66*QsmdYdY3G>+)aBFIW05oBU{&|X!r7RMdRlon|5rx
zBA4B7A2>b4yF%A}a{nofWPJ<I3v2G)d9<E$_v+ssv1)JT?-iGfz2_I^S+D%#@fW)f
zpO3z}u}<OC{a^jZzTS<x`gzZKcE4?rbCa~L^=56|(X0|`aAjk~uHHxbvl2E+@Elv3
z<A2RqYv&q+8#OxhCN-76RsR%x;61Xhy!qXp(50*2v`2ghn0>_TbH8p%rnKL-*3#b=
zk9mS3^S{iFt~ZTwHo3TB;y!1|DQOnze>lTi->gb}ADT1&!1OI$;hT$_!u`&^tDkwN
z@{8xk(+$~IOLtg{9*s;%Kk01oU}<>AhOgH*hpJnq-iR_hzoB5+d{wWVZGo+ae|ww_
zS{ub>s``1)waZcdrfbg#N5>r0b}r1f$rt(HEiF>9tjl4&NXN}E_t4Zl3Ff0UU$gr7
z0;lg*UF;iqKRbGPUhJ3K3;%o$=Z)u#TPH8-v`t>vX~~Q0hp#WUGF=h6T+j3JTCYVt
zFRw0Fd2ChOH79kkm*<iTEuT1!KmI5G{ML@;!L_BgzHj%PcI!Vw>>D@p+k5wl?cJp}
z{nd9B2A&7?^N;O#9_+jQ-}Xy)=lv?Vb5G#X>5rek_;0V@6MuN&e+GNMug8Pd&3?bE
z@7nd#wfoh+m<4)Y-(ULU@4cumDUBQoPYU~=&-Z#X*MI-k{|xqfZ~N`_P3FG2cX#Ri
z+-(;oe1E+BbxiTfx_#xJ{H|@k`~BzaL*`%N;-~w~dYP|xB`xvJ=l-~T&3~#Nd|l^x
zb?^1Bi?{BsnRMxz^+M^J@wu^E-ppS=ZQk~@m~)ozkN;<gNM0Z3E^GBMX7l{}tG&0c
zpZ+s5dEXTAyjfq~rf#3QS3g-T?WE=3+Jlylud_2xo>QGXuQ)dJ`+tVE{9o^LOTT0~
z>PFqW{e4^KtM#A#&+nXRcu?JLPx^m`wLj$JtRC%LZoT_^{j~YrVS9I3msmeoyL7(y
zpRd`c*Pr{B_PqJgG~bjnt9$~Y&!pA}bfp|p$~zc)=E&3_N3FiYik$LOe(dZ$eCc8S
zsw=BSJB~fxaPjb^XZ<!;IjgfSKixHb(^656D=Q|qXoW82v^cdU|LxNYS=+7rE_Oew
zb}crUw(ah{m!(^FTi4n?c;6x~TvL}|C;Y*0@2aRfol>%aYkAu`?uETKtlwU$w)x`W
zm2QF3@tm^9r%UZ=(fpI#W@GaBo?%Hm--m7aGZJ5~>YHX4QQmxN>6`WE_HX_8o_Ct2
z+MEzMUBBR%i9Jg$)vqmB-}+DC<LX5}vRgK<InLh^T(Vg*F^*ef`sQcP{Vk85=AL@2
zuy9JHYEST#>nh5cTZP}RZ?WHKHhDqJt=IQO_21g~*5{fO->!)FF|I#k(JyVhIO}`3
z!0o%)&UW6jS+{Mx{QankczgKf9Tn~0%-i<6#%xz#?`-~&TfFsr;S{YyTX~upUhSDA
zyzHrl&2hoFsWNVva`~y|%^?Ll?6Qg%cm2C`=-O1}-~NaGGc0n8ob*T|-A?&&!5+un
zg<*4R%=uH#ZT}`}8C*0)F1>TTSDU(7%)L`V2i@9)na_GHl?gs;F!iZ#?Nb(k+s?dO
zw-`p>zI{|iz>y_W#K2jI<58Q$Vy=ltrL>k5E?T9e5z4@z{p;IQtq{%Ng-&y=OfoLF
zYMEp@nY;{I>Zc|0^73+)g?@7_R3)4=-3+}9JyrVO+%m~bd>ORRX{wcoMsTZ?NyZ_Q
zmw{l#LCaYsf|vUV2DB)OO1NqqRhgu^mKQYoG9XQ8{7pElPFlF)rB&Q|_M2OC&Hb;u
z-8_HuE3>li8`7_z+SwQJ`M~r1tj^2J1B<S-Xt{5BEUCZCb8)lbsZD$CwO`$wvz>8P
z;`;j4&n#^0%v!%(znPSIb$PAWp6wUQEQ>#!e|YfqhyM%**<U~OW&h7GL3{oy3He`4
zhw2}i%Kvlt+5e+$o=pA4{SW4r)_?3uiT?hdp@9EKSUvB5h8OcIl>akuf^})ur$4ZN
z!Os4lq2)^bPlo>t9hnc0|CI)vwsj<2=|96W#`=d*H5UIF7S%tP|3}qC|DVIszq6;;
zUtr_@&%l{c|7ioJ7KZ-}t(hMl|LX)@YxiO5h5bL7rhkiz{LkR@hX0>X;(vyp5&sz;
zN&P7O&)~w&TK`CUV*O`^`a@fO6#r*%VsEO4X$cGe&){^2{h#1Ns21sp^8XAj{H*^O
z9_dc}&+wU}{o(w>#n&HxZ{ojxXcp&xhTB~6H!Z{eavS|;_@i{V{?o?)3`Z<JeE!#A
z2U-dr4_XQ@xcp)JVdv`)pEvejKNQ8DH~%yLTkqe>n$=G$i~lq1)G`0hpe6O;`QfYE
znF_MLJnWfR|E}ZykI?%(eZ?PMA85C&e>CyKe+K*bAJZ@WJ9bL$XIS)qh8BzXe<9(2
zoX;`*XILcN{GZ{Y<jMM<9hpDEKOFe_qws<9*AMmW{r?`XtWSFKpW%z<Y5Nb&-2WL)
zwf|=j_}#GoMaM(_KW>}y|0S7i>1VHSKm7h#hMnk#XPs)EpG|uCeJ;oA82G)`j)+z%
z@GEj>?<z6MS<Kz>>z=gM>4G22Ma4T8HXgcoq-e>d{%y;>Of7?QRnKOdt*NRk=P9`6
zAAIYnjqSvzrFr+ap58Qvjcw_z%{4!AY&B!oO7C0kzVPDpCDn}%gSQbh>ax+uK_9`S
KPMVPae-i+?QWjbO

literal 0
HcmV?d00001

diff --git a/docs/index.rst b/docs/index.rst
index bd4a19d69..b007bf8a7 100644
--- a/docs/index.rst
+++ b/docs/index.rst
@@ -46,12 +46,16 @@ Sponsors
     :target: https://gnuhost.eu/?utm_source=sponsor&utm_campaign=postgrest
     :width:  13em
 
+  .. image:: _static/oblivious.jpg
+    :target: https://oblivious.ai/?utm_source=sponsor&utm_campaign=postgrest
+    :width:  13em
+
   .. image:: _static/supabase.png
     :target: https://supabase.com/?utm_source=postgrest%20backers&utm_medium=open%20source%20partner&utm_campaign=postgrest%20backers%20github&utm_term=homepage
     :width:  13em
 
-  .. image:: _static/oblivious.jpg
-    :target: https://oblivious.ai/?utm_source=sponsor&utm_campaign=postgrest
+  .. image:: _static/neon.jpg
+    :target: https://neon.tech/?utm_source=sponsor&utm_campaign=postgrest
     :width:  13em
 
   .. The static/empty.png(created with `convert -size 320x95 xc:#fcfcfc empty.png`) is an ugly workaround

From 6af706facd69de3fad3fd86875d16a3b662a1fe6 Mon Sep 17 00:00:00 2001
From: Laurence Isla <lau.isla.c@gmail.com>
Date: Tue, 7 Nov 2023 17:24:46 -0500
Subject: [PATCH 650/652] Remove former sponsors (#694)

---
 docs/index.rst | 8 +-------
 1 file changed, 1 insertion(+), 7 deletions(-)

diff --git a/docs/index.rst b/docs/index.rst
index b007bf8a7..83232238b 100644
--- a/docs/index.rst
+++ b/docs/index.rst
@@ -38,17 +38,11 @@ Sponsors
     :target: https://www.cybertec-postgresql.com/en/?utm_source=postgrest.org&utm_medium=referral&utm_campaign=postgrest
     :width:  13em
 
-  .. image:: _static/2ndquadrant.png
-    :target: https://www.2ndquadrant.com/en/?utm_campaign=External%20Websites&utm_source=PostgREST&utm_medium=Logo
-    :width:  13em
-
   .. image:: _static/gnuhost.png
     :target: https://gnuhost.eu/?utm_source=sponsor&utm_campaign=postgrest
     :width:  13em
 
-  .. image:: _static/oblivious.jpg
-    :target: https://oblivious.ai/?utm_source=sponsor&utm_campaign=postgrest
-    :width:  13em
+  |
 
   .. image:: _static/supabase.png
     :target: https://supabase.com/?utm_source=postgrest%20backers&utm_medium=open%20source%20partner&utm_campaign=postgrest%20backers%20github&utm_term=homepage

From c1c45060baeb439cd3b56cc79b831732cf4efb95 Mon Sep 17 00:00:00 2001
From: Wolfgang Walther <walther@technowledgy.de>
Date: Sat, 17 Feb 2024 12:53:41 +0100
Subject: [PATCH 651/652] chore: Prepare merge of postgrest-docs into postgrest
 main repo

This avoids some merge conflicts to allow git blame to detect renames properly.
---
 .github/workflows/{ci.yaml => docs.yaml}           | 14 +++++++-------
 .readthedocs.yaml                                  |  2 +-
 .gitignore => docs/.gitignore                      |  2 +-
 README.md => docs/README.md                        |  0
 {diagrams => docs/_diagrams}/README.md             |  4 ++--
 {diagrams => docs/_diagrams}/boxoffice.er          |  0
 {diagrams => docs/_diagrams}/db.tex                |  0
 {diagrams => docs/_diagrams}/employees.er          |  0
 {diagrams => docs/_diagrams}/film.er               |  0
 {diagrams => docs/_diagrams}/orders.er             |  0
 {diagrams => docs/_diagrams}/premieres.er          |  0
 {diagrams => docs/_diagrams}/presidents.er         |  0
 {diagrams => docs/_diagrams}/users.er              |  0
 default.nix => docs/default.nix                    | 13 +++++++++----
 .../extensions}/sphinx-copybutton.nix              |  0
 {extensions => docs/extensions}/sphinx-tabs.nix    |  0
 livereload_docs.py => docs/livereload_docs.py      |  4 ++--
 postgrest.dict => docs/postgrest.dict              |  0
 requirements.txt => docs/requirements.txt          |  0
 shell.nix => docs/shell.nix                        |  0
 20 files changed, 22 insertions(+), 17 deletions(-)
 rename .github/workflows/{ci.yaml => docs.yaml} (77%)
 rename .gitignore => docs/.gitignore (79%)
 rename README.md => docs/README.md (100%)
 rename {diagrams => docs/_diagrams}/README.md (91%)
 rename {diagrams => docs/_diagrams}/boxoffice.er (100%)
 rename {diagrams => docs/_diagrams}/db.tex (100%)
 rename {diagrams => docs/_diagrams}/employees.er (100%)
 rename {diagrams => docs/_diagrams}/film.er (100%)
 rename {diagrams => docs/_diagrams}/orders.er (100%)
 rename {diagrams => docs/_diagrams}/premieres.er (100%)
 rename {diagrams => docs/_diagrams}/presidents.er (100%)
 rename {diagrams => docs/_diagrams}/users.er (100%)
 rename default.nix => docs/default.nix (79%)
 rename {extensions => docs/extensions}/sphinx-copybutton.nix (100%)
 rename {extensions => docs/extensions}/sphinx-tabs.nix (100%)
 rename livereload_docs.py => docs/livereload_docs.py (61%)
 rename postgrest.dict => docs/postgrest.dict (100%)
 rename requirements.txt => docs/requirements.txt (100%)
 rename shell.nix => docs/shell.nix (100%)

diff --git a/.github/workflows/ci.yaml b/.github/workflows/docs.yaml
similarity index 77%
rename from .github/workflows/ci.yaml
rename to .github/workflows/docs.yaml
index 782b3eceb..f9bf2fd3a 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/docs.yaml
@@ -1,14 +1,14 @@
-name: CI
+name: Docs
 
 on:
   push:
     branches:
     - main
-    - v*
+    - rel-*
   pull_request:
     branches:
     - main
-    - v*
+    - rel-*
 
 jobs:
   build:
@@ -17,7 +17,7 @@ jobs:
     steps:
     - uses: actions/checkout@v3
     - uses: cachix/install-nix-action@v22
-    - run: nix-env -f default.nix -iA build
+    - run: nix-env -f docs/default.nix -iA build
     - run: postgrest-docs-build
 
   spellcheck:
@@ -26,7 +26,7 @@ jobs:
     steps:
     - uses: actions/checkout@v3
     - uses: cachix/install-nix-action@v22
-    - run: nix-env -f default.nix -iA spellcheck
+    - run: nix-env -f docs/default.nix -iA spellcheck
     - run: postgrest-docs-spellcheck
 
   dictcheck:
@@ -35,7 +35,7 @@ jobs:
     steps:
       - uses: actions/checkout@v3
       - uses: cachix/install-nix-action@v22
-      - run: nix-env -f default.nix -iA dictcheck
+      - run: nix-env -f docs/default.nix -iA dictcheck
       - run: postgrest-docs-dictcheck
 
   linkcheck:
@@ -45,6 +45,6 @@ jobs:
     steps:
     - uses: actions/checkout@v3
     - uses: cachix/install-nix-action@v22
-    - run: nix-env -f default.nix -iA linkcheck
+    - run: nix-env -f docs/default.nix -iA linkcheck
     - run: postgrest-docs-linkcheck
     
diff --git a/.readthedocs.yaml b/.readthedocs.yaml
index 4690fde9d..0d7162c8f 100644
--- a/.readthedocs.yaml
+++ b/.readthedocs.yaml
@@ -3,7 +3,7 @@ sphinx:
   configuration: docs/conf.py
 python:
    install:
-   - requirements: requirements.txt
+   - requirements: docs/requirements.txt
 build:
   os: ubuntu-22.04
   tools:
diff --git a/.gitignore b/docs/.gitignore
similarity index 79%
rename from .gitignore
rename to docs/.gitignore
index bab47b52e..503e5d524 100644
--- a/.gitignore
+++ b/docs/.gitignore
@@ -2,7 +2,7 @@ _build
 Pipfile.lock
 *.aux
 *.log
-diagrams/db.pdf
+_diagrams/db.pdf
 misspellings
 unuseddict
 .history
diff --git a/README.md b/docs/README.md
similarity index 100%
rename from README.md
rename to docs/README.md
diff --git a/diagrams/README.md b/docs/_diagrams/README.md
similarity index 91%
rename from diagrams/README.md
rename to docs/_diagrams/README.md
index fa4a1e7fe..7014ae378 100644
--- a/diagrams/README.md
+++ b/docs/_diagrams/README.md
@@ -5,7 +5,7 @@ The ER diagrams were created with https://github.com/BurntSushi/erd/.
 You can go download erd from https://github.com/BurntSushi/erd/releases and then do:
 
 ```bash
-./erd_static-x86-64 -i diagrams/film.er -o docs/_static/film.png
+./erd_static-x86-64 -i film.er -o ../_static/film.png
 ```
 
 The fonts used belong to the GNU FreeFont family. You can download them here: http://ftp.gnu.org/gnu/freefont/
@@ -20,7 +20,7 @@ Then use this command to generate the png file.
 pdflatex --shell-escape -halt-on-error db.tex
 
 ## and move it to the static folder(it's not easy to do it in one go with the pdflatex)
-mv db.png ../docs/_static/
+mv db.png ../_static/
 ```
 
 LaTeX is used because it's a tweakable plain text format.
diff --git a/diagrams/boxoffice.er b/docs/_diagrams/boxoffice.er
similarity index 100%
rename from diagrams/boxoffice.er
rename to docs/_diagrams/boxoffice.er
diff --git a/diagrams/db.tex b/docs/_diagrams/db.tex
similarity index 100%
rename from diagrams/db.tex
rename to docs/_diagrams/db.tex
diff --git a/diagrams/employees.er b/docs/_diagrams/employees.er
similarity index 100%
rename from diagrams/employees.er
rename to docs/_diagrams/employees.er
diff --git a/diagrams/film.er b/docs/_diagrams/film.er
similarity index 100%
rename from diagrams/film.er
rename to docs/_diagrams/film.er
diff --git a/diagrams/orders.er b/docs/_diagrams/orders.er
similarity index 100%
rename from diagrams/orders.er
rename to docs/_diagrams/orders.er
diff --git a/diagrams/premieres.er b/docs/_diagrams/premieres.er
similarity index 100%
rename from diagrams/premieres.er
rename to docs/_diagrams/premieres.er
diff --git a/diagrams/presidents.er b/docs/_diagrams/presidents.er
similarity index 100%
rename from diagrams/presidents.er
rename to docs/_diagrams/presidents.er
diff --git a/diagrams/users.er b/docs/_diagrams/users.er
similarity index 100%
rename from diagrams/users.er
rename to docs/_diagrams/users.er
diff --git a/default.nix b/docs/default.nix
similarity index 79%
rename from default.nix
rename to docs/default.nix
index 42fbaca76..08f654e59 100644
--- a/default.nix
+++ b/docs/default.nix
@@ -27,17 +27,19 @@ in
     pkgs.writeShellScriptBin "postgrest-docs-build"
       ''
         set -euo pipefail
+        cd "$(${pkgs.git}/bin/git rev-parse --show-toplevel)/docs"
 
         # clean previous build, otherwise some errors might be supressed
         rm -rf _build
 
-        ${python}/bin/sphinx-build --color -W -b html -a -n docs _build
+        ${python}/bin/sphinx-build --color -W -b html -a -n . _build
       '';
 
   serve =
     pkgs.writeShellScriptBin "postgrest-docs-serve"
       ''
         set -euo pipefail
+        cd "$(${pkgs.git}/bin/git rev-parse --show-toplevel)/docs"
 
         # livereload_docs.py needs to find "sphinx-build"
         PATH=${python}/bin:$PATH
@@ -49,8 +51,9 @@ in
     pkgs.writeShellScriptBin "postgrest-docs-spellcheck"
       ''
         set -euo pipefail
+        cd "$(${pkgs.git}/bin/git rev-parse --show-toplevel)/docs"
 
-        FILES=$(find docs -type f -iname '*.rst' | tr '\n' ' ')
+        FILES=$(find . -type f -iname '*.rst' | tr '\n' ' ')
 
         cat $FILES \
          | grep -v '^\(\.\.\|  \)' \
@@ -66,8 +69,9 @@ in
     pkgs.writeShellScriptBin "postgrest-docs-dictcheck"
       ''
         set -euo pipefail
+        cd "$(${pkgs.git}/bin/git rev-parse --show-toplevel)/docs"
 
-        FILES=$(find docs -type f -iname '*.rst' | tr '\n' ' ')
+        FILES=$(find . -type f -iname '*.rst' | tr '\n' ' ')
 
         cat postgrest.dict \
          | tail -n+2 \
@@ -82,7 +86,8 @@ in
     pkgs.writeShellScriptBin "postgrest-docs-linkcheck"
       ''
         set -euo pipefail
+        cd "$(${pkgs.git}/bin/git rev-parse --show-toplevel)/docs"
 
-        ${python}/bin/sphinx-build --color -b linkcheck docs _build
+        ${python}/bin/sphinx-build --color -b linkcheck . _build
       '';
 }
diff --git a/extensions/sphinx-copybutton.nix b/docs/extensions/sphinx-copybutton.nix
similarity index 100%
rename from extensions/sphinx-copybutton.nix
rename to docs/extensions/sphinx-copybutton.nix
diff --git a/extensions/sphinx-tabs.nix b/docs/extensions/sphinx-tabs.nix
similarity index 100%
rename from extensions/sphinx-tabs.nix
rename to docs/extensions/sphinx-tabs.nix
diff --git a/livereload_docs.py b/docs/livereload_docs.py
similarity index 61%
rename from livereload_docs.py
rename to docs/livereload_docs.py
index 8dae16577..741633d43 100755
--- a/livereload_docs.py
+++ b/docs/livereload_docs.py
@@ -2,9 +2,9 @@
 from livereload import Server, shell
 from subprocess import call
 ## Build docs at startup
-call(['sphinx-build', '-b', 'html', '-a', '-n', 'docs', '_build'])
+call(['sphinx-build', '-b', 'html', '-a', '-n', '.', '_build'])
 server = Server()
-server.watch('docs/**/*.rst', shell('sphinx-build -b html -a -n docs _build'))
+server.watch('**/*.rst', shell('sphinx-build -b html -a -n . _build'))
 # For custom port and host
 # server.serve(root='_build/', host='192.168.1.2')
 server.serve(root='_build/')
diff --git a/postgrest.dict b/docs/postgrest.dict
similarity index 100%
rename from postgrest.dict
rename to docs/postgrest.dict
diff --git a/requirements.txt b/docs/requirements.txt
similarity index 100%
rename from requirements.txt
rename to docs/requirements.txt
diff --git a/shell.nix b/docs/shell.nix
similarity index 100%
rename from shell.nix
rename to docs/shell.nix

From 68d83f74630091611d394cebb6b936b2e2b6ca1f Mon Sep 17 00:00:00 2001
From: Wolfgang Walther <walther@technowledgy.de>
Date: Sat, 17 Feb 2024 12:57:18 +0100
Subject: [PATCH 652/652] chore: Run postgrest-style on docs files

This prevents CI from failing after the merge.
---
 docs/conf.py                    | 164 ++++++++++++++++----------------
 docs/default.nix                |   4 +-
 docs/extensions/sphinx-tabs.nix |   2 +-
 docs/livereload_docs.py         |   7 +-
 docs/shell.nix                  |   3 +-
 5 files changed, 89 insertions(+), 91 deletions(-)

diff --git a/docs/conf.py b/docs/conf.py
index 5125f8299..38256b280 100644
--- a/docs/conf.py
+++ b/docs/conf.py
@@ -18,48 +18,45 @@ import os
 # If extensions (or modules to document with autodoc) are in another directory,
 # add these directories to sys.path here. If the directory is relative to the
 # documentation root, use os.path.abspath to make it absolute, like shown here.
-#sys.path.insert(0, os.path.abspath('.'))
+# sys.path.insert(0, os.path.abspath('.'))
 
 # -- General configuration ------------------------------------------------
 
 # If your documentation needs a minimal Sphinx version, state it here.
-#needs_sphinx = '1.0'
+# needs_sphinx = '1.0'
 
 # Add any Sphinx extension module names here, as strings. They can be
 # extensions coming with Sphinx (named 'sphinx.ext.*') or your custom
 # ones.
-extensions = [
-  'sphinx_tabs.tabs',
-  'sphinx_copybutton'
-]
+extensions = ["sphinx_tabs.tabs", "sphinx_copybutton"]
 
 # Add any paths that contain templates here, relative to this directory.
-templates_path = ['_templates']
+templates_path = ["_templates"]
 
 # The suffix(es) of source filenames.
 # You can specify multiple suffix as a list of string:
 # source_suffix = ['.rst', '.md']
-source_suffix = '.rst'
+source_suffix = ".rst"
 
 # The encoding of source files.
-#source_encoding = 'utf-8-sig'
+# source_encoding = 'utf-8-sig'
 
 # The master toctree document.
-master_doc = 'index'
+master_doc = "index"
 
 # General information about the project.
-project = u'PostgREST'
-author = u'Joe Nelson, Steve Chavez'
-copyright = u'2017, ' + author
+project = "PostgREST"
+author = "Joe Nelson, Steve Chavez"
+copyright = "2017, " + author
 
 # The version info for the project you're documenting, acts as replacement for
 # |version| and |release|, also used in various other places throughout the
 # built documents.
 #
 # The short X.Y version.
-version = u'11.1'
+version = "11.1"
 # The full version, including alpha/beta/rc tags.
-release = u'11.1.0'
+release = "11.1.0"
 
 # The language for content autogenerated by Sphinx. Refer to documentation
 # for a list of supported languages.
@@ -70,38 +67,38 @@ language = None
 
 # There are two options for replacing |today|: either, you set today to some
 # non-false value, then it is used:
-#today = ''
+# today = ''
 # Else, today_fmt is used as the format for a strftime call.
-#today_fmt = '%B %d, %Y'
+# today_fmt = '%B %d, %Y'
 
 # List of patterns, relative to source directory, that match files and
 # directories to ignore when looking for source files.
 # This patterns also effect to html_static_path and html_extra_path
-exclude_patterns = ['_build', 'Thumbs.db', '.DS_Store']
+exclude_patterns = ["_build", "Thumbs.db", ".DS_Store"]
 
 # The reST default role (used for this markup: `text`) to use for all
 # documents.
-#default_role = None
+# default_role = None
 
 # If true, '()' will be appended to :func: etc. cross-reference text.
-#add_function_parentheses = True
+# add_function_parentheses = True
 
 # If true, the current module name will be prepended to all description
 # unit titles (such as .. function::).
-#add_module_names = True
+# add_module_names = True
 
 # If true, sectionauthor and moduleauthor directives will be shown in the
 # output. They are ignored by default.
-#show_authors = False
+# show_authors = False
 
 # The name of the Pygments (syntax highlighting) style to use.
-pygments_style = 'sphinx'
+pygments_style = "sphinx"
 
 # A list of ignored prefixes for module index sorting.
-#modindex_common_prefix = []
+# modindex_common_prefix = []
 
 # If true, keep warnings as "system message" paragraphs in the built documents.
-#keep_warnings = False
+# keep_warnings = False
 
 # If true, `todo` and `todoList` produce output, else they produce nothing.
 todo_include_todos = False
@@ -111,158 +108,151 @@ todo_include_todos = False
 
 # The theme to use for HTML and HTML Help pages.  See the documentation for
 # a list of builtin themes.
-html_theme = 'sphinx_rtd_theme'
+html_theme = "sphinx_rtd_theme"
 
 # Theme options are theme-specific and customize the look and feel of a theme
 # further.  For a list of options available for each theme, see the
 # documentation.
-#html_theme_options = {}
+# html_theme_options = {}
 
 # Add any paths that contain custom themes here, relative to this directory.
-#html_theme_path = []
+# html_theme_path = []
 
 # The name for this set of Sphinx documents.
 # "<project> v<release> documentation" by default.
-#html_title = u'PostgREST v0.4.0.0'
+# html_title = u'PostgREST v0.4.0.0'
 
 # A shorter title for the navigation bar.  Default is the same as html_title.
-#html_short_title = None
+# html_short_title = None
 
 # The name of an image file (relative to this directory) to place at the top
 # of the sidebar.
-#html_logo = None
+# html_logo = None
 
 # The name of an image file (relative to this directory) to use as a favicon of
 # the docs.  This file should be a Windows icon file (.ico) being 16x16 or 32x32
 # pixels large.
-html_favicon = '_static/favicon.ico'
+html_favicon = "_static/favicon.ico"
 
 # Add any paths that contain custom static files (such as style sheets) here,
 # relative to this directory. They are copied after the builtin static files,
 # so a file named "default.css" will overwrite the builtin "default.css".
-html_static_path = ['_static']
+html_static_path = ["_static"]
 
 # Add any extra paths that contain custom files (such as robots.txt or
 # .htaccess) here, relative to this directory. These files are copied
 # directly to the root of the documentation.
-#html_extra_path = []
+# html_extra_path = []
 
 # If not None, a 'Last updated on:' timestamp is inserted at every page
 # bottom, using the given strftime format.
 # The empty string is equivalent to '%b %d, %Y'.
-#html_last_updated_fmt = None
+# html_last_updated_fmt = None
 
 # If true, SmartyPants will be used to convert quotes and dashes to
 # typographically correct entities.
-#html_use_smartypants = True
+# html_use_smartypants = True
 
 # Custom sidebar templates, maps document names to template names.
-#html_sidebars = {}
+# html_sidebars = {}
 
 # Additional templates that should be rendered to pages, maps page names to
 # template names.
-#html_additional_pages = {}
+# html_additional_pages = {}
 
 # If false, no module index is generated.
-#html_domain_indices = True
+# html_domain_indices = True
 
 # If false, no index is generated.
-#html_use_index = True
+# html_use_index = True
 
 # If true, the index is split into individual pages for each letter.
-#html_split_index = False
+# html_split_index = False
 
 # If true, links to the reST sources are added to the pages.
-#html_show_sourcelink = True
+# html_show_sourcelink = True
 
 # If true, "Created using Sphinx" is shown in the HTML footer. Default is True.
-#html_show_sphinx = True
+# html_show_sphinx = True
 
 # If true, "(C) Copyright ..." is shown in the HTML footer. Default is True.
-#html_show_copyright = True
+# html_show_copyright = True
 
 # If true, an OpenSearch description file will be output, and all pages will
 # contain a <link> tag referring to it.  The value of this option must be the
 # base URL from which the finished HTML is served.
-#html_use_opensearch = ''
+# html_use_opensearch = ''
 
 # This is the file name suffix for HTML files (e.g. ".xhtml").
-#html_file_suffix = None
+# html_file_suffix = None
 
 # Language to be used for generating the HTML full-text search index.
 # Sphinx supports the following languages:
 #   'da', 'de', 'en', 'es', 'fi', 'fr', 'hu', 'it', 'ja'
 #   'nl', 'no', 'pt', 'ro', 'ru', 'sv', 'tr', 'zh'
-#html_search_language = 'en'
+# html_search_language = 'en'
 
 # A dictionary with options for the search language support, empty by default.
 # 'ja' uses this config value.
 # 'zh' user can custom change `jieba` dictionary path.
-#html_search_options = {'type': 'default'}
+# html_search_options = {'type': 'default'}
 
 # The name of a javascript file (relative to the configuration directory) that
 # implements a search results scorer. If empty, the default will be used.
-#html_search_scorer = 'scorer.js'
+# html_search_scorer = 'scorer.js'
 
 # Output file base name for HTML help builder.
-htmlhelp_basename = 'PostgRESTdoc'
+htmlhelp_basename = "PostgRESTdoc"
 
 # -- Options for LaTeX output ---------------------------------------------
 
 latex_elements = {
-# The paper size ('letterpaper' or 'a4paper').
-#'papersize': 'letterpaper',
-
-# The font size ('10pt', '11pt' or '12pt').
-#'pointsize': '10pt',
-
-# Additional stuff for the LaTeX preamble.
-#'preamble': '',
-
-# Latex figure (float) alignment
-#'figure_align': 'htbp',
+    # The paper size ('letterpaper' or 'a4paper').
+    #'papersize': 'letterpaper',
+    # The font size ('10pt', '11pt' or '12pt').
+    #'pointsize': '10pt',
+    # Additional stuff for the LaTeX preamble.
+    #'preamble': '',
+    # Latex figure (float) alignment
+    #'figure_align': 'htbp',
 }
 
 # Grouping the document tree into LaTeX files. List of tuples
 # (source start file, target name, title,
 #  author, documentclass [howto, manual, or own class]).
 latex_documents = [
-    (master_doc, 'PostgREST.tex', u'PostgREST Documentation',
-     author, 'manual'),
+    (master_doc, "PostgREST.tex", "PostgREST Documentation", author, "manual"),
 ]
 
 # The name of an image file (relative to this directory) to place at the top of
 # the title page.
-#latex_logo = None
+# latex_logo = None
 
 # For "manual" documents, if this is true, then toplevel headings are parts,
 # not chapters.
-#latex_use_parts = False
+# latex_use_parts = False
 
 # If true, show page references after internal links.
-#latex_show_pagerefs = False
+# latex_show_pagerefs = False
 
 # If true, show URL addresses after external links.
-#latex_show_urls = False
+# latex_show_urls = False
 
 # Documents to append as an appendix to all manuals.
-#latex_appendices = []
+# latex_appendices = []
 
 # If false, no module index is generated.
-#latex_domain_indices = True
+# latex_domain_indices = True
 
 
 # -- Options for manual page output ---------------------------------------
 
 # One entry per manual page. List of tuples
 # (source start file, name, description, authors, manual section).
-man_pages = [
-    (master_doc, 'postgrest', u'PostgREST Documentation',
-     [author], 1)
-]
+man_pages = [(master_doc, "postgrest", "PostgREST Documentation", [author], 1)]
 
 # If true, show URL addresses after external links.
-#man_show_urls = False
+# man_show_urls = False
 
 
 # -- Options for Texinfo output -------------------------------------------
@@ -271,30 +261,38 @@ man_pages = [
 # (source start file, target name, title, author,
 #  dir menu entry, description, category)
 texinfo_documents = [
-    (master_doc, 'PostgREST', u'PostgREST Documentation',
-     author, 'PostgREST', 'REST API for any PostgreSQL database',
-     'Web'),
+    (
+        master_doc,
+        "PostgREST",
+        "PostgREST Documentation",
+        author,
+        "PostgREST",
+        "REST API for any PostgreSQL database",
+        "Web",
+    ),
 ]
 
 # Documents to append as an appendix to all manuals.
-#texinfo_appendices = []
+# texinfo_appendices = []
 
 # If false, no module index is generated.
-#texinfo_domain_indices = True
+# texinfo_domain_indices = True
 
 # How to display URL addresses: 'footnote', 'no', or 'inline'.
-#texinfo_show_urls = 'footnote'
+# texinfo_show_urls = 'footnote'
 
 # If true, do not generate a @detailmenu in the "Top" node's menu.
-#texinfo_no_detailmenu = False
+# texinfo_no_detailmenu = False
 
 # -- Custom setup ---------------------------------------------------------
 
+
 def setup(app):
-    app.add_css_file('css/custom.css')
+    app.add_css_file("css/custom.css")
+
 
 # taken from https://github.com/sphinx-doc/sphinx/blob/82dad44e5bd3776ecb6fd8ded656bc8151d0e63d/sphinx/util/requests.py#L42
-user_agent = 'Mozilla/5.0 (X11; Linux x86_64; rv:25.0) Gecko/20100101 Firefox/25.0'
+user_agent = "Mozilla/5.0 (X11; Linux x86_64; rv:25.0) Gecko/20100101 Firefox/25.0"
 
 # sphinx-tabs configuration
 sphinx_tabs_disable_tab_closing = True
diff --git a/docs/default.nix b/docs/default.nix
index 08f654e59..f57a96813 100644
--- a/docs/default.nix
+++ b/docs/default.nix
@@ -15,8 +15,8 @@ let
     })
     { };
 
-  sphinxTabsPkg = ps: ps.callPackage ./extensions/sphinx-tabs.nix {};
-  sphinxCopybuttonPkg = ps: ps.callPackage ./extensions/sphinx-copybutton.nix {};
+  sphinxTabsPkg = ps: ps.callPackage ./extensions/sphinx-tabs.nix { };
+  sphinxCopybuttonPkg = ps: ps.callPackage ./extensions/sphinx-copybutton.nix { };
 
   python = pkgs.python3.withPackages (ps: [ ps.sphinx ps.sphinx_rtd_theme ps.livereload (sphinxTabsPkg ps) (sphinxCopybuttonPkg ps) ]);
 in
diff --git a/docs/extensions/sphinx-tabs.nix b/docs/extensions/sphinx-tabs.nix
index f90b1c18d..fbc164419 100644
--- a/docs/extensions/sphinx-tabs.nix
+++ b/docs/extensions/sphinx-tabs.nix
@@ -26,4 +26,4 @@ buildPythonPackage rec {
     homepage = "https://sphinx-tabs.readthedocs.io";
     license = licenses.mit;
   };
-}
\ No newline at end of file
+}
diff --git a/docs/livereload_docs.py b/docs/livereload_docs.py
index 741633d43..67a2165d6 100755
--- a/docs/livereload_docs.py
+++ b/docs/livereload_docs.py
@@ -1,10 +1,11 @@
 #!/usr/bin/env python
 from livereload import Server, shell
 from subprocess import call
+
 ## Build docs at startup
-call(['sphinx-build', '-b', 'html', '-a', '-n', '.', '_build'])
+call(["sphinx-build", "-b", "html", "-a", "-n", ".", "_build"])
 server = Server()
-server.watch('**/*.rst', shell('sphinx-build -b html -a -n . _build'))
+server.watch("**/*.rst", shell("sphinx-build -b html -a -n . _build"))
 # For custom port and host
 # server.serve(root='_build/', host='192.168.1.2')
-server.serve(root='_build/')
+server.serve(root="_build/")
diff --git a/docs/shell.nix b/docs/shell.nix
index e8d38d96e..8e116f031 100644
--- a/docs/shell.nix
+++ b/docs/shell.nix
@@ -2,8 +2,7 @@ let
   docs =
     import ./default.nix;
 
-  pkgs =
-    docs.pkgs;
+  inherit (docs) pkgs;
 in
 pkgs.mkShell {
   name = "postgrest-docs";