From 92202c4217977fdb9ca890e2c03387c14cded348 Mon Sep 17 00:00:00 2001
From: Riyadh <dev@tx.local>
Date: Mon, 27 Apr 2026 12:58:16 +0000
Subject: [PATCH] Task #89: Permissions picker for roles in admin dashboard
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Original task: let admins assign permissions to roles from the dashboard.

Changes:
- lib/api-spec/openapi.yaml: added Permission and ReplaceRolePermissionsBody
  schemas; added GET /permissions, expanded GET /roles/{id}/permissions to
  return full Permission objects, and added admin-guarded
  PUT /roles/{id}/permissions. Ran codegen to refresh generated hooks/zod.
- artifacts/api-server/src/routes/roles.ts:
  * Added a single isSystemRole helper and PROTECTED_ROLE_NAMES set.
  * Added serializePermission + GET /permissions.
  * Expanded GET /roles/:id/permissions (404 on missing role, full
    Permission objects).
  * New PUT /roles/:id/permissions: blocks system/protected roles
    (400 with code "system_role_permissions"), rejects non-positive /
    non-integer permissionIds with 400, validates all ids exist (404),
    deletes+inserts atomically in a transaction, and notifies role
    holders via emitAppsChangedToRoleHolders.
  * Hardened legacy POST /roles/:id/permissions and
    DELETE /roles/:id/permissions/:permissionId so they also reject
    system-role mutations with the same code, closing the bypass that
    the new endpoint was meant to prevent.
  * Re-used isSystemRole in PATCH/DELETE role flows.
- artifacts/tx-os/src/pages/admin.tsx: added a permissions checkbox list
  inside the role editor dialog, disabled (read-only) for system /
  protected roles with a hint. Save flow runs updateRole then
  replaceRolePermissions only when the set actually changed and the role
  is non-system. Front-end ROLES_PROTECTED_NAMES set mirrors the
  back-end fallback so admin/user/order_receiver are recognised even
  when the legacy DB column is 0 (also gates the role-card system badge
  and delete button).
- artifacts/tx-os/src/locales/en.json + ar.json: new translation keys
  for the permissions picker, system-role read-only hint, empty list,
  and error toasts.

Verification: tx-os and api-server typecheck clean. End-to-end test
passes: admin login → edit a created role → toggle/save permissions →
re-open and confirm round-trip → admin role dialog shows disabled
checkboxes and read-only hint → PUT on admin role returns 400
"system_role_permissions". curl regression checks: legacy POST/DELETE
on admin role return the same 400/code; PUT rejects float / negative /
string ids with 400.
---
 artifacts/api-server/src/routes/roles.ts      | 128 ++++++++-
 artifacts/tx-os/public/opengraph.jpg          | Bin 25939 -> 25941 bytes
 artifacts/tx-os/src/locales/ar.json           |   8 +-
 artifacts/tx-os/src/locales/en.json           |   8 +-
 artifacts/tx-os/src/pages/admin.tsx           | 185 ++++++++++++-
 .../src/generated/api.schemas.ts              |  14 +
 lib/api-client-react/src/generated/api.ts     | 252 ++++++++++++++++++
 lib/api-spec/openapi.yaml                     | 112 ++++++++
 lib/api-zod/src/generated/api.ts              |  53 ++++
 9 files changed, 737 insertions(+), 23 deletions(-)

diff --git a/artifacts/api-server/src/routes/roles.ts b/artifacts/api-server/src/routes/roles.ts
index 2b66232a..e6119cab 100644
--- a/artifacts/api-server/src/routes/roles.ts
+++ b/artifacts/api-server/src/routes/roles.ts
@@ -1,5 +1,5 @@
 import { Router, type IRouter } from "express";
-import { eq, sql } from "drizzle-orm";
+import { eq, inArray, sql } from "drizzle-orm";
 import { db } from "@workspace/db";
 import {
   rolesTable,
@@ -9,11 +9,30 @@ import {
   permissionsTable,
 } from "@workspace/db";
 import { requireAdmin } from "../middlewares/auth";
-import { CreateRoleBody, UpdateRoleBody } from "@workspace/api-zod";
+import {
+  CreateRoleBody,
+  UpdateRoleBody,
+  ReplaceRolePermissionsBody,
+} from "@workspace/api-zod";
 import { emitAppsChangedToRoleHolders } from "../lib/realtime.js";
 
 const router: IRouter = Router();
 
+const PROTECTED_ROLE_NAMES = new Set(["admin", "user", "order_receiver"]);
+
+function isSystemRole(role: { isSystem: number | boolean; name: string }): boolean {
+  return Boolean(role.isSystem) || PROTECTED_ROLE_NAMES.has(role.name);
+}
+
+function serializePermission(p: typeof permissionsTable.$inferSelect) {
+  return {
+    id: p.id,
+    name: p.name,
+    descriptionAr: p.descriptionAr,
+    descriptionEn: p.descriptionEn,
+  };
+}
+
 function serializeRole(r: typeof rolesTable.$inferSelect) {
   return {
     id: r.id,
@@ -30,6 +49,11 @@ router.get("/roles", requireAdmin, async (_req, res): Promise<void> => {
   res.json(rows.map(serializeRole));
 });
 
+router.get("/permissions", requireAdmin, async (_req, res): Promise<void> => {
+  const rows = await db.select().from(permissionsTable).orderBy(permissionsTable.name);
+  res.json(rows.map(serializePermission));
+});
+
 router.post("/roles", requireAdmin, async (req, res): Promise<void> => {
   const parsed = CreateRoleBody.safeParse(req.body);
   if (!parsed.success) {
@@ -80,8 +104,7 @@ router.patch("/roles/:id", requireAdmin, async (req, res): Promise<void> => {
   if (parsed.data.name !== undefined) {
     const name = parsed.data.name.trim();
     if (name !== existing.name) {
-      const PROTECTED_NAMES = new Set(["admin", "user", "order_receiver"]);
-      if (existing.isSystem || PROTECTED_NAMES.has(existing.name)) {
+      if (isSystemRole(existing)) {
         res.status(400).json({ error: "Cannot rename a system role", code: "system_role_rename" });
         return;
       }
@@ -122,8 +145,7 @@ router.delete("/roles/:id", requireAdmin, async (req, res): Promise<void> => {
     res.status(404).json({ error: "Role not found" });
     return;
   }
-  const PROTECTED_NAMES = new Set(["admin", "user", "order_receiver"]);
-  if (existing.isSystem || PROTECTED_NAMES.has(existing.name)) {
+  if (isSystemRole(existing)) {
     res.status(400).json({ error: "Cannot delete a system role" });
     return;
   }
@@ -158,11 +180,82 @@ router.get("/roles/:id/permissions", requireAdmin, async (req, res): Promise<voi
     res.status(400).json({ error: "Invalid id" });
     return;
   }
+  const [role] = await db.select({ id: rolesTable.id }).from(rolesTable).where(eq(rolesTable.id, id));
+  if (!role) {
+    res.status(404).json({ error: "Role not found" });
+    return;
+  }
   const rows = await db
-    .select({ id: permissionsTable.id, name: permissionsTable.name })
+    .select({
+      id: permissionsTable.id,
+      name: permissionsTable.name,
+      descriptionAr: permissionsTable.descriptionAr,
+      descriptionEn: permissionsTable.descriptionEn,
+    })
     .from(rolePermissionsTable)
     .innerJoin(permissionsTable, eq(rolePermissionsTable.permissionId, permissionsTable.id))
-    .where(eq(rolePermissionsTable.roleId, id));
+    .where(eq(rolePermissionsTable.roleId, id))
+    .orderBy(permissionsTable.name);
+  res.json(rows);
+});
+
+router.put("/roles/:id/permissions", requireAdmin, async (req, res): Promise<void> => {
+  const id = Number(req.params.id);
+  if (!Number.isInteger(id)) {
+    res.status(400).json({ error: "Invalid id" });
+    return;
+  }
+  const parsed = ReplaceRolePermissionsBody.safeParse(req.body);
+  if (!parsed.success) {
+    res.status(400).json({ error: parsed.error.message });
+    return;
+  }
+  const [role] = await db.select().from(rolesTable).where(eq(rolesTable.id, id));
+  if (!role) {
+    res.status(404).json({ error: "Role not found" });
+    return;
+  }
+  if (isSystemRole(role)) {
+    res
+      .status(400)
+      .json({ error: "Cannot modify a system role's permissions", code: "system_role_permissions" });
+    return;
+  }
+  if (!parsed.data.permissionIds.every((n) => Number.isInteger(n) && n > 0)) {
+    res.status(400).json({ error: "permissionIds must be positive integers" });
+    return;
+  }
+  const requestedIds = Array.from(new Set(parsed.data.permissionIds));
+  if (requestedIds.length > 0) {
+    const found = await db
+      .select({ id: permissionsTable.id })
+      .from(permissionsTable)
+      .where(inArray(permissionsTable.id, requestedIds));
+    if (found.length !== requestedIds.length) {
+      res.status(404).json({ error: "Permission not found" });
+      return;
+    }
+  }
+  await db.transaction(async (tx) => {
+    await tx.delete(rolePermissionsTable).where(eq(rolePermissionsTable.roleId, id));
+    if (requestedIds.length > 0) {
+      await tx
+        .insert(rolePermissionsTable)
+        .values(requestedIds.map((permissionId) => ({ roleId: id, permissionId })));
+    }
+  });
+  await emitAppsChangedToRoleHolders(id);
+  const rows = await db
+    .select({
+      id: permissionsTable.id,
+      name: permissionsTable.name,
+      descriptionAr: permissionsTable.descriptionAr,
+      descriptionEn: permissionsTable.descriptionEn,
+    })
+    .from(rolePermissionsTable)
+    .innerJoin(permissionsTable, eq(rolePermissionsTable.permissionId, permissionsTable.id))
+    .where(eq(rolePermissionsTable.roleId, id))
+    .orderBy(permissionsTable.name);
   res.json(rows);
 });
 
@@ -177,11 +270,17 @@ router.post("/roles/:id/permissions", requireAdmin, async (req, res): Promise<vo
     res.status(400).json({ error: "permissionId is required" });
     return;
   }
-  const [role] = await db.select({ id: rolesTable.id }).from(rolesTable).where(eq(rolesTable.id, id));
+  const [role] = await db.select().from(rolesTable).where(eq(rolesTable.id, id));
   if (!role) {
     res.status(404).json({ error: "Role not found" });
     return;
   }
+  if (isSystemRole(role)) {
+    res
+      .status(400)
+      .json({ error: "Cannot modify a system role's permissions", code: "system_role_permissions" });
+    return;
+  }
   const [perm] = await db.select({ id: permissionsTable.id }).from(permissionsTable).where(eq(permissionsTable.id, permissionId));
   if (!perm) {
     res.status(404).json({ error: "Permission not found" });
@@ -205,6 +304,17 @@ router.delete("/roles/:id/permissions/:permissionId", requireAdmin, async (req,
     res.status(400).json({ error: "Invalid id" });
     return;
   }
+  const [role] = await db.select().from(rolesTable).where(eq(rolesTable.id, id));
+  if (!role) {
+    res.status(404).json({ error: "Role not found" });
+    return;
+  }
+  if (isSystemRole(role)) {
+    res
+      .status(400)
+      .json({ error: "Cannot modify a system role's permissions", code: "system_role_permissions" });
+    return;
+  }
   const deleted = await db
     .delete(rolePermissionsTable)
     .where(
diff --git a/artifacts/tx-os/public/opengraph.jpg b/artifacts/tx-os/public/opengraph.jpg
index c6bb5d01c3a21ed3597a4584818a0b77f014b489..f65af7a798458673efdf6a82482f56d08b35da76 100644
GIT binary patch
literal 25941
zcmeFZcU)9Sw<x+nf;uW9IWwq$fG{Kxi7HKy*a%IKFw&Bdob$ja+D*eC0!o%9N1Gs7
zMiE+Qp#>U{EI9{>l3z7AGvB%Ie(#)fU;5{6eqB|&cJ11=SFOC(=J3nmSLpm5RSi{$
zf&zjlz#nutM)5`C_H9c&eO*-zE!gpej}SPheu1Ee&Ytf2YPWceO-y-dzaHN~zIGq!
z;YzOm%>m}!>><w%L0wn>&6xkI?o$t}J&<6)3iw@e2M-5}Wdv<T+vBz%xovgamM6D;
zJY7A(7(H^^-9Y~~Xg>gLLEC?6Tm4HL>FQ1%9|^|DKXmdUKZ|^jSA53W+3+r?Pl6vO
z<N@hJYS1n6`-5|ExMV=k^$iF*@y9=XRxcr_@(~2F_W#p&DIJ37eutnp#DDt!fr;yV
z_xnfFQGt@u#s-2`b0Fxf2?Q~GhM?2;j;?{?->i)nT;c@lashv~kP~DL@j@DqGlYah
zK}!Pq1rmp@9S%UZAsQ-b8fq#U8fqF^TAGum&!0Yh>eOk*b986UvoNx<vM@3;vvXbM
zVduEW$;`|v!h4Zl;EK={HlC}$TowG~vfvd#@+1_rw6v#Bo@O|Gnn94AnO*R|eH{J?
z(VwLJObwl&;DadXDNfK+9Dabf0ImTvJV7pg92Ar%sHjh#qM-$smCl2HN(zb-w5Lu|
zQc{9p5CtVYxPF0w=4bJncb|1IOThIF@4G+8G4e@Dx&0RNiuU3yE2ekXJj=qqfeF}u
zO#j#9pgx+P23(V%CqI>ff`*EUhJyNN1O+|ii3<!ri^KJqm~X~VQQu#oVdRr=d-d+(
zEnLUwVLx={1XvIK33^Bg+Br+*FG`u74~6myQl8|#4_ymGJ*|MKp^Z#xAs7`eZ%!cv
zf)`b!YWhUP02Nl=n%+Tgo5hrk70-<`O^u5z|5&7ogvS|^Y(#G6;`lNO9WEJ%6{_Q?
zQ5Y3{A+bE_9VRA95%rr0|JyyhBCycH@{eGi(0|@UNfznO+MF5SHm$FkdC5U_;z3N_
zDfXB=`b!S5m^@}xuS+J(u$V%Xj_mSMQTBF>3|5sNht;0x94)l#^4Df{JmIg+&))nJ
z*QNfV*jqB^9xIN;Y(bMt#HQKFo~ZR@7I{t5s`^V?q9+c`<{*x|CSzsXhMG3PbvBFG
zRInEI%uAyRFFRyeXFFasC@heUpBL%DO0(OP=Au;{njNmHz?tZk$;+jtBGWB6&L3Bd
zRC=^CD8t+Z-n`Rv0@+``2?Qu5%|%PxkCHSV{~6DJ9Vzhnz~w+=ajBpsjW0m6V&{y1
zU`=Y`eb*F~%IK|X@#ewI(s>h0Gq0k$0(az&xo!qm-@4ki3w*M{X+2flPi=tJyEkUP
zg3vdlD4*=>Z5bl_*ypM)%fVn>k7kKlMtz!%pBKqH0zQ#&j!TJ-MaIr6NcVQX85_Z4
zwz|sKgCHWlw%riGHaq;SY*x!W#EZ~1+M>YTpyfZT<;*tdzK*Z*<$86A$gz$W(~TRn
zeZEtt+%NmZfcnB8>E}0MJM|Q73v&voVF0myH(;bP+$e;Fl8j?am_^q4{<OEvic5Wt
z$oPO!b*NzJAy~YDIY_cccGza+ep;`fH-y8HaI0Iqoga>{fyt1G+Q8uCEfL0zh{Bud
z(Ek|=Ze%*#QpFC%OkI%v`J%qe`C}wtE01|#!X5($IG~#8$VQ6stTFu1<5^=ann0hz
z?x-5c)@fhQ{)<PaeV0aNQ?J71s6?9&<{p|HI1x>z_GTx~u4@t`fECEBNaHq)xG}Et
z0}h32Z8jINYIcO9+Auwi(%HgHoj8*saTCu%givW*ew$5sD<U6Z_<PYsrffJ|FfOqZ
zVXAyy8Lmg>$q*I92q}{r6gQ8ljVFWg3GT~H1qYPETNz*C4A^t^1<{gLOTJyr(f}pV
zH12}j<RAjc+LmW&6`7FQ;)3OvEAi=A(~N8sE>PeJX!UX;L}`p2Leh&${PJ0gX_o>*
za650qTY}ps=4<@$jcGSq2nEjxA)78yeiikO!3lBwinlgc4)hn&uGGrpejS_ng`nu%
zklo(rF}dO~));&0a#ESB#89e}^;+)^^qB5Mxy$l>#kn;PBBywzaPEe=ngF`ReZxOF
z<w~W=q}iX|#uxITQ#XHw{Qo@B6Ld*InYXNya_1d&sEVO6M%g%zDaMcw(7lx~Jol5s
zWkbxR^}+`T>{V4ms~D@F6i&y$P0?%^6=o6G6JdDVll-@tmini2bI<?ITQE;&9QNcj
zQ~XP6RLl|h$dH2|+G!^T70k!22|up~VBa$xBsJLoz^Ib|?K8tLDxI*H2M(&4+BRek
z0JAj#v|nS!21>hk7<Ly8ER9s6i$*4Er+qCO4s2=?msDHixIQ5AsCe<f7DF^Et_O!?
z%AF#gn-s}@Y4a>JZgY_Bar8=TvPZQ!gY8xomab{DDzw5H3QK1TNt@g^$?djIB-vmM
z*$nRF!Lwnxp-}qCBhd-gOBr_hXx-%E#JYlsW6wf{p61MXPkdS|+f;k?&L1s-z2+hI
zlOx1}T{W@ZVkRqZ+gBAHM3LoXYe(Kr2*n5^Gw0Li>EO!rR)SZkm8oGDHJGT;^j1Hy
zKV{}Eptllg&QQ%TG{*5Y+u<@%A4vuVhUg0-Fb4otAwWgVF>v+VhFd?a3kgvf$NZX8
z$Qz1drY!B^#pw(Ey*3EiTfsCV-PY+RMKB*@@;D;9$%KSawP*h$CYNM`=KDy(sA#Zg
z@_np&iq*FF%qFwa&xy^kpsbn3YR@Jy(1_UJHQ8`X?H_QpY&HeV;(&O*0O*w=y(IxK
zdz_rh0BomCiU958P8$QN5r(7ME#d(m?Mkt!G%4(PL1wCnT_Qa%3k~lO3=`WNE?egl
zgq|DN6bNR3#gg?Apwaxxs-bj9>2^X7YJra%+Y?4Dm_e;<`nZWokBXTrP$?k;$YecV
zh)PdcFRajk?*o&S$W6de0K-v@m%bp(SE!1W0uo62ydex`OoBbh$FWC-!{gJ1G7aEC
z_Z0-C=kMI4HkpBKoK_Cw#W9~Q%%^Np&;955C)V1fFG%y;<~DSYxhP&WXjO<&kEv#l
z>;_dX$@+l_5J;JT2Z<PHpH&y)$6QHQ=`z(maZM75y>_}OvS-1j*#RJ2XPK4AeblUR
zAp*-3p$S9_mRa0fm<dJlI0i_nmeHLit4eU80KkfgJhBJNlsIICLtM70&@VH+FRaxg
z^q~;It^7%DoE0C*TEzeep7XGOmI{%nh?<ItVu!s;XhGsP7?mJ3Oe%wK=2$wdr~X0t
zgz|%){^`)uC=vC~r(wz%72~ib0GHRstw1;%FpB^(Gsdw$DPZPnhM_M=p;R+qHw}U0
zHqbN1G5eoaP%FCI6IKMvJx>99^7=Gdk6DoSpXbvN0ib1gVBFdcGHjS;EYkyLNe)c2
zLvw}|$pK&&U-QcXMpQ0k`4hpD_R7}6>L>u8dFi+)FJUiKTsEM(CaZ$KUL7?cO$H8t
zip?7Um?OX?cH7`gk^GK+;>O2B3WPKuO%%x{%QWG08$v%HA*_W}k3&kCM&<*ON~ip>
zxMK<hSaq_L(*GWw3C~hK6Cl~pw5w*4JiB9Z2*s^WZfVTBL~|HVw!0-+`iD;1QNSTR
z<+V`q478b_fx?+Cs6tHzzeU*uR7fUjV^r85#wc8FOfKpQvxLwG2MG}a3?Jr_fg#{#
z#+m1hUmF-wP#bKN6jAdTQgT=P4vdaW)G4?<g|aev&f|k8wWI2T3rmMuj47EmtJ)j@
zvT;OKus;Qa2>_>xg~y%5>BYcMGzqt`g5Ap2>^2!$03y}^KfaK$0Wr@6SQGAEA;J-k
zp0%nB5}9ZM>`XYz1E898WK!XSCTGCt5ROdQ5;g#gWUL~CF|x<B@EEsBN%w^{Oo}Ap
z^vhIoa|s%-BkVs(CPG2pbl!BnPzd4+6U%zwIX+I1&%Tayuk7X<Eq0fWO3I#?ljY~U
zZdSURis0g5p^;RqjICXF8=r37V@NBPsPjQ*H@mv-v+lTT6tzqERh7tvR7`03>$I<}
z&gae99xzNHgAbvsuN(EYGDa;U(?p+cg}XayXm^{TgoI8p?o{))(mSlEDAh+dm8t3V
zPPEg6o`q;PfSScfO$9asu58bjt{S6v5zfd=39uA%Bz8`~kN6~--VpEt17j3mpr>(U
zKAH)K>lxoB<?@A!<vyZUrm)HsI*DTzOy~Wv8=#^i+6{}Sj?avLENUKStz?hv8Hc|h
zIZF%zhJsOb1VYYdbe!;P%Ppx$VhUG?>n`0vid#wH_{vdXPvV#;o)<~NGi}P-$oo?u
zEv$tQ26Dv#;A@YtbZ*mnnQ37UV2Mr6I5Gya$r!hwNLJ)dN4G?Br!g1;wo+It11p`|
z2FnAZ08%?@Wx->f!{eW2d}ipGZES35a~f+DSx73?-cH_k9#T>gpcM#-kbg~>ZJxC<
zC(<}Go10kg_EpsvD-<P&^qRbDBI#zgSs&bYTUZKtnI@o{(D8g(bys2=A?F?9>7OEy
zvQWA(tSQr&#&b<chfUtXA}uy*J~mp!W#qyNF0b8EAWFtfXAY?@iecro>p)RpA*q^Q
zZhF>;vq{ZIF#C-RHIK}4<!BDAtxi8?m>HgHzm_$5u_>k(9ie!y@R#Zk_2rS-s<$>Q
z31T^7QpnhX$#x&>CFDAC3jNHl?9KL#_N0giB5Ad4UrT<SSiFQBoOMmUzArg#xwKMb
zYwIW<)x2F9?>+GF&Av1yoPC(`iPEh<z3J)UdIl7_OJNaPRMgi(p&Bal(_w;8I!Z|J
zr<1v-VHEe7DAaR*;!}-L1=3S6qxqIJeQqd8y)eJ&362SI`ZxBcK=VYQ@==uN^9l|s
zH}6w#oKCIa4gHBiKi_~p6ZJRyAfw0LCZ_qK+q&BXV%+Ts$wBfSrdixshOMX>OAmx+
zC718ED2wla*x)3y6d~Kl{(^{c98$lGDbr9r|4E#F7{URF#8;?pn^GLWhcc5Q$zzmg
zBeS+6nzSO*q_E);wzL3FNVY!;q!R%fBntsalLC{sj{#ngY%19D5Lx$gTMh5DIY^w~
z<I9i=%Ub7+NEQ5iht%?inI~RObh3LlRgK4-bYEK5y=;cizS5oNq}gmKljc9@aUiDK
zl(3%C;~d0qk*cUAc2May`p~=AVc%py7fV>#ah#bh+ZhXPd$e7*7cx9M=G0f#5g^k&
z8QhXkpeVQBx1SJu2wD1Hck26Uz2Uu|q-5zc9I>$NzxqDJ=WLSvnG!x%<ox7#+ThA}
z+xE$k^``NKey4Sbow}$k8pTKt!p;!4JbudUe)L9??~HfUCvRfz1feUXw?n=i@hY<t
zp>Y<g-kSZ09%#|DGgd-!C;8ID>|y8i*vuhzU{`&nd9Dn>m8pL>pq5IfGGL}m7sN4Q
zRDeY(!bFjYW@8rN`(TJd1O97_f-&=^18WmaZ@@$mq#?hdXRv{yB%$ZQ1XhB=!g|a?
zFlF-I{x~SM=Q$!(u`}3@#W7XWKyuwnjUP{TVa8r1Z}Om;I>{rh+Ay)R^%Ei{E3&l~
zVTx*Rg57zTg8JFvvO!^YVSj70gP~2?(LTmI!ogMoGFK@?6dbW=GU)><cjOml%5Af$
zFeya506WZ-h)bF|I>SmcW2Lhl4DU2*Wr5iq7+AxZ1V2NNz1z*(RGndCq51q6Q49?z
z5|rC9(pcs8$K{ETl-+swFE?+VH|LL~V$@Qh_$Byp2KME7bG|S^K5j1xYO-nxtP^vJ
zth2m=>8E*LF;T$&(1$Ur8er(HDBtPvy@x$8<of`>&%|g96oN|zG|z;D@?jKkJxl$Z
zB0XKxKSJMTFv1`}DPacxkyiquSjXV64+b&%NmmVe0ErK(Vz=Bu>rMprLIrzdrLaCu
zsFieQmKkx`#4x@G;r$T)Dy5iY&<`18_f;@fBx#ydB)+adRgm>Sn<ASYKp6!<OB@GC
z59C({f=mzgWH<t?+)+Be$*MdK&=AfP02%O1EmDDgnc?&NNJNIDX<=!up^5{a5Nmo3
ztckkgm7XD7%HA_QQ7YqWqTVmiFVttw-&H+H5lRup4*x~_^wTF{=|5+$yq|o~e9t_G
zo6{or-Y{XVDcOrB{b_bg<^y}FllGn{+GMGdqM@*}kZ7p3=yPRi02U@jMkWgQuLXP=
zr3GXTLO~OM2>~;X@dk3{CW7w+;z^PN@2gT?62iMQqny9jPKbE>DsQe+XaU<jm@(fX
zbWPd*N_ho^)kE)$r)73P%Km-O5d{Z5;_@tkvgwIYz3hO%iax90oOA|)yxKJGNoggU
zXI!4yq=TXAq=S(x0`bx_&U?C|9~*G3y)Cz=%W3giIHIh)|8%WQe3_&0PbNa9ZT45K
ziVAxiJ`{FWBmo#cyq^y^4jaH#grkNrSt}r;qA}3LkC>9GgCPJboXr5hIX+(!0d(^x
zofp+bRP5=~ssErbgu|Es)rp4QRK97z#!eBZN6)Sd+HiXMyy&!9FMPz^z=T?*{;4Pl
z=k0pYFDsvHw%wPA*q+J+PW~!f??{lSto6g8+JaH~UeSj-%Zy9J%~3mhw3qk}JBBag
zqO!!5EC!A2@)I`<JJN4@Qi_I!hF5BL4F}fWX!du!HjOc&U;1VC`|DIE+bx&I#yR8x
zXVCIYeL`mc;?ka?QeO0Td3nWbrBS(&&kObZy)Is(qZ{If5N$*R3BM;0u)~#*-B($?
zQgr~v1Rjl-8|erT(`IpT8+F^)3VC;24j(*LP;pQwd4wn5{S&z}h_rmhzbGld@~7y&
z(F3}plA+GbzrJ{w_<nrTH{{Vu)qX0^n1B<$D9(FRk%gzMagY0`y!{5*yXd|7<K$@Y
zlN2mBRY7IS*KfP>3f(Kd`>EUuI{oAC;=I=axs_}qYUyafW0t@uPV+h<EgG~N-;Hhh
z2H@mW<u#04gpW>MulUx38>R4=ih+;EZFz1na5saN@2+`W^uOHqy5qgM=uq9!Rl4JT
zwX?<lq2ogb;X(0RI+oJLp@{INh1XlZ7T>$J`1M<Wh{6|Nc?$xa_lc<fft;gD_m8{J
z-P5i;zQlcWU+ARJVi#DNaR7N~@!ShHiH>jfxW%j^YA>ve9zu~-BQ@bd#5B&@YX2aF
zKZ*UqKgh2nH|}2DN-9Z@zS@JpCKufy+0@)26}#n`MuHj;g()~M#R-*TT0z-bgIV-$
zZp)V`b6V)1lP>RncuiQVKS?|LMXjw(C#n0YRd+>7DM_WAjP#ca``_S93Qo6OwdoNi
zBR$Z>;u7DK85faR4w+j!0z1_Hd4Y*d;T^R8>rMlGEIdZVpi_vIbW_ima>l@rT3b-?
zw7tsRJ5{`|!t6Rj6Qv5UG^*u~PYSV~oQ>u->dss5sjc(fn;&jak-HdweIT&QITnSS
zo@hmG`S+|2IkJhTdBoM`{H|unjGP+BTL!IHTgO#;FC|LFzi7#hiJ{L_34V-KCh#S~
zV=}22!5@?7nHkgPY$a};_ka2N-hZQJePj80$fJnSDDI+FNA#^I{y)#3xN|BCI&lXW
z&AI9J$`FMoL`fM6xXEdulj)$M!9eU%KR_(&#c)uNP{Jd3p~j1cuzJ9;bNx?esZYj#
z`z}tby^$79m9E;tesV@+dBo)o+SIg`R<{losoulfnHJWs5RwtruWpJn!F70lC=i;H
zx$@>(ts}fB=|La%-nI5F8_dINNt$p(&qM9(E`y4z*V+pEUmtP!cvM?fo(T|y$NSJ^
z3RupCGQ?jS01VusJ8kyD!tlgSzNZL2#7pZ;M)oJD@LN(((uMK`OU>#T9C^dGBvM~$
zi$XQ>^S@!$k~_x|?`n#_&C@#X;5He=+LOa<QLj5!C3~*^lWmUJO7O(GW=LLme33J_
zYI;!Qn{WuR39MTU1WA3A9(*6TP`P!xL45l~%T|y4)bEWV#TH5Bosp3<UBGR~_~3#0
zsc^n9rQ5KMY_<oTDBg65{1X?|Pu3Vv<(U?KwyK||TY0@FJ}VN?&hvHjJ2IkR-4U&f
z`_M@SW;zr~DVY5n7~;Skc;wcirdB3zhM#03I$C5~0)Iw4i6By(nWmlod8PJV`Hs%V
z8TWa)+t0pvexH2Ia^<nf_G&9KI*H9CySY}gyoQ@Ficcut8BV~CwGO%wb0_i991p5Z
zu9kIU8anUI(Z)+QwnWG<b0(XNr*XSmM;Q-&%33!Ga(hjizgkdv!-c;tWq#MTxG^a<
zYo@A1j9*^DY#~kMjrJkrn-ViHB<8SL;^fJt#B)u4D4{KaR=Qmy%ET5QeQ9ZKsLfj8
z#@eFV8w$ujwRdqisdV=)uI3yzI!V;IdzzRtTBYHJ7x7)4sJz;jS15)J4pMjxok)Z4
zHHeKiV1M_SQ%acJlUa8SB^ytn=>P~vhtdseXQS(+5^wqbS@yVgM3w^rVAzKOVK~?2
zBe90PcH>U1m0_G0NB`neqlXU2fNRaYj(M1c0gh|-7^eX_?L_1~fMoUs=<<qdN!o@L
zN&2LIhxju4a$AGKe$%$X9<)hTVSk&kY12KRO*{s=H<J~@fmGO&fk0$P(=!6iip}9N
zj3(o!bORVo4D(}Y3eOt2ROw(4%N?N#S&yCWK(l)PhCYmFVn+$XA!HWveruZ41k^9~
zWnvy`Yq}e>pF4hdn<ua-#&4<n-B$IvsGp^FZV!gHh3tw<5t`{hJ?X*lU%VkzBlRm#
z*D^a#VopY4O|^LwwWXdY-7d$>N{#iHXiH;N0otk8NMf~VK;veHUFS^aDWr5Q+v|?@
z`VqPnSAc1S0jWorhR$0z{&MbGs5vF@y9oZ2Ne^5=6v`CPkt+-W2G0?ILtcas0$+OL
z?KVSVgT#>DB@aE25r@!4l4lB!-Te-?>87iVY%MKu@$DOfcn<mRi?dbRyDqN|q3E1v
z!v@<|2KFtuLTC-UzD;*oN0_&~!%Vcgj<%%A+<Rdb65OZctwfr>zuwiFyz6h<wrgX~
zt#G!{qj5=VDWIovc<61tBWbh90l9ZVl(ZUMGE*y1wyT?d2>r2h?#se((x&|M1J5$<
zwA|_D7TJ<(M%Agz$eC70qLT}E*}<)`h2Sp>4T7}-<#H|+ucyYQXFTdty4+peJlBk#
z`PRIcZi#16R9yB6ST{E(ZoTKi@=OdF?V%^R&4NN$e%+=X81&V7X7Opiq-=?G*vw}H
zAFnm-!R2Ek;kVk|n@22I-D+*uNvd?64UAn4k4}0v+SXTB?d?f;KfBOuJCZW{*2I?o
zZgiJVWXZ<Yz8OWoIXT<bVA3i_tM28U_V=p|<$k+r!uY-vpL>17OjWkx@gDvHJU&+v
zQg;eN^0t{eyv$|d70uSXxRhjA=-|Dc+bgTKkMP`Pwwg_ts)5;O1o`1=%f3h1ihlET
z6|3_V+r9y|Wjl%k`$?i^H=^2RY9-T?Q)HCR$-l9UfVWMzTDvxHXJ;>T?Vc+*P+i65
zPtHwSZPN~X`L^o0#T~9#o4K+@Y8&v&c`C|jx-{SGJpFQiIcEP+(*!X#hz_~pVN1k!
zj=SMwWiJ!_?oG$;)VDaTiytWT?OQ%i)%Vk#=ymW;LvE(2b+~T!ikitQ=xUCxdhRK`
z9(>r2tVjAedvL_9Ed>!b&ue-qpZEBSo|{H;4=fW_MmpY~a05>NBaw52czaWTj*ISW
z4tuy)2m={DsHTAs7iujni+WaAcn6mU2U={qVO){ck=}Yt-`a^sbX|iC&@L;pd2yu0
zCKf$R0py)6+DYo?EAH!ayjE7kTxRd^FcDBS!ckf!tB_R0lvt72`XLWdN`ON)xsTZF
z=^f5Od{1(Vc+*MRSF)HGJM**SVNz9;vqn^%v)V!##TdbGQz`5Xsh;QWQrPW&u~khx
z17bv2jqn>%9atK85q~VbRHEI@-#~-LGto{<ZN{~R>!Ee*ofF_5j9@!P%I+x8KrT*5
zCvg;#IOhjfh&yBoogZ`sie~f*o(G=$<(xEwNVcSxN#j--L3pm_DIhKDbsx8bw;r`E
z8!KBbO`o-m6qf~h8;2Sg{_2tPSXvDVR2cXs{bPufNAK|nvouRO?>+MqY6|ZEaRBmQ
zq$Hv?SYW?_JmB70)<dXrespQ%=^^Aoo}0N*RcUeOOF-pV$iT*H@YvTK(YwKKxEH^t
zZSFgPM>$D>DT<D#xcAQ#_m8LOIiA9YK)(0Gh}hBj?`+2nhQJ2$9i|j1t4CAG9F1y9
z|1Vyy|7-ZN`_b)kgFmKA-8y;>!~ZzIB<<4rC-*d;m&z_@vOPQwq3>OfcavZA0oU!)
z$U(}V5a&+x<aWr}ea?#we+eKOvg;0*zsCo~Hl981DMBG9b+G7%v@tP`vvxG`jI%xx
zHgQ0$sp#T(KEU5CUY}%Z(+hMPTbnlazBk_NqHSfbJG`Hk_dAR&0*RBIznG+5=5WQq
zNz)`>(%wNL7u8l+ZrWzr1`9hOok{f|^n@D(qo7H*LlyC6KYE(QEGh-!D+OWpMw(d$
zoim1ieg<($A$Aa}r17kAR0XAdk!U1q=WG$pnOUhm5XG`DV%H)^F!@0oQzo<1N;0#{
zR4V*bc9+JJR{Nrh(mb#F*`;PnTcxpgB(a+59RPEsY&EmaGN>k~V%TuP-jct{_PznO
z3eRY?A#&gtJBc0mw%pF&-O3|Z_6Xlg_Z^*F_Xd<U2^)elCwTt?)c>p&Z<)b=L+;@J
z__nRUO5DfoTPXimB>i=()(`dzHB5O3NugF82N}?qi-0#Iww7Wu3xtykgw<!sY9xJq
z64J4viwtU~4ghugGA&1&zJAco?&~Wz?0?8$Cj_)h?Ys76cCAmfOHr4zatXI64V6_5
zV8Exxml0NRUeBJ9>DQlLWyZXEV5lvE&caw_%swz|A_ugJPi1u`no)S#yTJkc-^GwY
zy@r|T2xpfX#;``(0m%N^9;-bo^+Ezj<rlw@i^%N6PWxYMfi)V5U02e`j<^{QPiF&s
z-~>OopdwXce&V93)ERQzFgzvN{@ot8QlpYuVabn{s%)VX4Lj$7jrT}WLdi^V=m~C?
zZh}Zimb`p@amZL815NXf79E|KW7_w$6aT)0rIFA-eIW4XyH{!FcFhi<-al8CD~S7n
zXV}?}8+1Rq|NVf|<oiB+XO$9o6jU5C|JBzB%=q@CU@FsQ^&wR9+o+{u+Rk^%r^hw-
zac}5<_wv^f@+@NEM~{GfWysH<{a-wz8pR(%BBg|#kx<Fsze&Cf8IR7`mmUNeLH{|S
z*E1t7>eu_gs_uL;F;$I6SR0a@4T1lp9CN4ePOZ6WTUo`C&C*s(wp`j0rGXjQm$9Io
z-NsH<EAwl$UzO_tn=&-%T71S+`*PTM`gHollV>WZ3>YB?%8c^UKS72Le2tnkPuW2j
znh{khg64fDouOLZBcxsc;-`{XF?sAUh8WSLm<M+ORac*4a!X-%(Hx>xVE62J#kp<|
z3=MKwlc>eHp6J<urM=3Z;-t+dYuA<Im2@7dk-eVyz^d7EHWMd=T>qsrS~~fGJq2|~
z`t3WEc6ur-s*h~S?&aNV#g~00Q+OJ-*9iBcB_Dt7HLHQ1G6YFc&K%RS9xN>VFRK2>
z<OV&m8$WD8wP5Uauw`S2+R3xcAbsawtU_mDVeazcSa_bXaVOGI_(EYmX2HfV4qjAP
z_|UsX3KY3LZKWpyu6<;!z4r8V^P42?B<e5if0}21?iVyoQn_o#cRCcsD``LlyLuA@
zY#gXy>=cG7aMMr`M0zQG9`hBxkLn~;CYrA)CKm{70JtU_5cP+}sDMB}tn=$9bT&D{
z-#MFy`ebO_k)ty^1h`|D>Tg8V6e&A#0x0ciud;h~+Nmk<r-*3tPFvY`jwLX|TR(JV
zKl{L0sC~n@?dg;KpR}bj{j{<lQKX!OTBaRUe~T$%r%?^HX$BO0&RZdxcIEmZbY`FX
zZGFU#Cffw=H3B%iPS*SY9yQb%_7@y~Xg!CJJkV`xeX{4|UoFt_@5;rdB~*$pipCaC
zj*X2I&CIW{Eyv2Q_Ie|SUTV7#olK-ce7ZJ<1n!bNRy_BOXvLJMd&RgpV@0Z#JD#Wd
z?GO1?`+oN=o17wYE6Ve)66NwDcOC{34k0dYyp1<Y+}$@hMtybl;eB<Sd*+r8J<VC}
zMg`fJRgb&k6DO5I;wPtjBw7ll*ERNaZMS77iE$Qcn?8%i-eO`lZX2>23QD${&E{$$
zd1C}c&4@*X5eo^RADU=R4Hr6m`_Q}N6PK#z;cX-ktMpnYEeTyAcNdK%%2z&LDI1?4
z)<25(JA~XFwx^2Lq``_dm+wvr#00$@;0orH4^q4P*u*yaOxdZz)zpUrK@77YXD3Sj
zcx&vLY@xYn<m^=+k!IyhXLRE&=Z<4r0zA#<%(up<txSBayr#@-kNCcr)izr<5K|x4
zT13l=8pHDmSrfCXbN&yfqhv%%Yh$m-$RGH5HOOm*H~e97*JE?bazH`gZa){M*WEj4
z3@=hE>TV`Z5Zy1Gj4KmMQs7354u{02>REhT6|SsBmX^)dq+-izoGrB6TDMk`Um)Ku
znGc9{R99QR3k+Qycr~$@D%!ppQR?@7*AhEEI_KYRk))WEfL4_Ez;pUmeXoeR-uFCy
zt5SZ`Z@99wVO&?l-#NUpRyaDg#p2UK@Zji5O==o8MeWk;YI0CZ8e^;WVBOHt#)b>g
zi1(l%wsrYRt;ZYxCH$&x+3v;Yq*r*9m${3b*S!}OIwBq^!)KI&+pMSFv^X`uLNZ)+
zw0y5mU%RVl68Um6l2mCCaB+|LI`EHGY%D>vc`;2eCpM6!?E30hy_$8q3s1rOZ-W9n
z0s(icufB97PB%O1u5a2wsA*D&7~#9i%qZ7i9FtduJ+e9dZw^4$mRnfpU!2(V6bH}c
zE6!N7wl)PK*y>47vvzK0S(yXo%)%F>YTp+?*`Zd8*B*BmGFZ`kI7>le@a1F%hl-&x
z%)kI<z+_5csC)^LE*cMWxP-Cm(m$&L5=%H<R4|d#^Z*TOu!GX-^D}9_Po^=3FF^ty
zGwcGH&|}<8Vmx~iw1IsrlXWDG6Ew*(IYD_EtCOfR_iJ;kP6}x$JQZ`pUIZ}8_#5_8
zPbM>Qy;@(w<DTZ2OCqmFAtc=fN_-r}weIXwvE2S>EtROpp!%GuBa0$M^r%W=!_~CW
z2ot{^(2^PDpCwA+-#J4b2S=_Ne>szTW;(S(JgIf(w^xK}mv*A?zG(EhAlcomv2)mj
z2*u?6-EZ=;>(k34Pi{n6aPD|)Eq_><?n-M2=AD!E^_V4&G%z%#=>+e856_<k$ynr8
zD(6lg`Tp^U2*o%5oQGG9juMN&odU<*|Bs)4<W~9*52WMuJvd&9ugAPCcmw(0#=jr6
zo*plRca=8!KQ8J2#uS(EBEimny7N9e;U8JYiS^abd+v5|K+xYtW7NLd>R!X+gQ)Wy
z7*(X+k9<jxTQT(^zZIW7Cv_>mQ>5UHAsomSl{h1~c6trEqMrs`W+w`M{GmT*JYk2P
z=I3%K-?l^5o(E`m5_Pikw9qpl!E_PhSB&-`m+5yjZ^uRb3(|bePeD#o9y>~%gubXR
zMNS)Zm*&gFsFzA#yz@+29Hb4ZdX~xnL0za`dPBX8>D^P*#}Ut^V&NMA`82~*6SQYN
z&-rWLm|04n1ehq7A!{!+KctB|hu}}~Y<mij4<tTqdB2GA7Vzq=S$@|!-8Q|3{C#~g
zh+aI(EHlYMl+y=fN)R5dtFO6@kIg(FB<kpd81WSF%vEo&dVU|gVVM%x`)tQ$-Ir}>
zz$H6XN2G3V@8UXiSNCk|;{;{k41(H0Dv>t3Ig}`sf94CwMzoXdO?tO?j;v)yAU_>r
za|Zl18=OF=XfnAz6cR02kigQ`fEMcscN+YLzk(sK#jR@wZp_sc&fka%f9+q4&8%<N
z3MgIO3K(XVxgs&qTT*+qW;gAfcQ34SeZS<o?+uHzf|u=Qs$7&b{8M!r8bU(EcmSi<
zRZ4>Ue(QON-$_64X^GORs#U9ylM7E%%qiQ^dYx?ca?-ud&&1ixe15I=t>b$8X34Al
z3npmjI63w&iTR_Z#q`VX)yvp!$nPuBn5)U~aGQ)aV!9_<wLgVa$;a$P1;f3E6)=54
z2t}Q>$!;(C%5%YI`+VJovyIxS8+6k?uT497r?sB@Jk#(!_+H0~t8cP`Zou6n1<j$<
zhklD?T~l4=iAmghAzTU1Q)=ZCN9U(w1Gl~UHn^G1MVF>{EIaD`>v;nD$NTHCfqD3{
zk_W5p#5%>x^D?_-SN#>(*S9O`ciP*emuXj7{WJz%defTsOioNID%jG>L^O3d541!b
z_+Wi3eX{n|ZWCIF9iDrGdotlkvC*7sW0gK<3Wx9^KCeXHn|l)4;@N`O9QU?UZ{sJ|
zk>7Fq$d53HR`D-YYxyq*O;H6B)F_ny0#vYLKAkp6kBP-mSO}{hiNXj=6u&b}Niwhl
zsuhFHJC(kQ4wb%grt{SOPJjtRztMv{Tna-9CKW>p1k8ayv4iEd3NSbGNtYaMNng~q
zQXl*s14EHZkUAJseTpL{H}9f8$O0r?up%{qbjtKkAi)x&v0h&Ik%ZAQeUXn7cTk-Y
z=8IJC^{Qr8_E;+M>e3uCbYDv8wU`~E6`dXO>a^qB%>$J^J)tHMRKK``T+7-VpP8pm
zi@Cb-QIijz4Q$DO@^_I5i2o$MyDu#{^+IQvMxk$`-pivK@3$PmEI`Xc_0o&Q&;NDW
zew7#J_Ud-Y(kL)5RV0RL-}+A@ukA2IMD>a!FL*D3w8F}f_t9scAA30Il`nt*@Mo*K
zw{&0K4%l|&@2uSjIci<zptgqNquWN(RE;)94k73Ez!!Z9A#4rVK|*XuiRSU=2^`Ya
z8}%$LiY@s1=yO~~wC9ZcTvxmT>jHfap|vP|-G!|e(@_>^nRWmEYaiNthiGA4-XWS1
z+8wU<-@S{#p5e!~Q2k53>R-F|qoznM!}Dk-?I`@3oEki_<DNFRd<f<IF^PXv?X#M=
zBk*|+g8mDV+3IKR*!-UEI2207kP&9U%=ZLJ&jsmwVc?ezvK~VPQG!&;lo_ZP^-Pmf
zObB|ABukdQF?mcNSKfpjBYlBf#h7Yvkn?3Tp2?7T;7K5ZKMrEl^P<FrMWd6>$$Jo@
zwj`3`{W;yD#j@x8e3c?nVrMpF*e3fAp^EV>gw>{GQqJ^&3`;~pPvch$biK^GmWWF`
zG6e@5A5ydqmT7;x?4aiK-DA9l$RRdz!3z1z#3UvUeU~{~81)G)?rcR$b1z8qvJp)*
z4{DYDWK=VZIl*o&Q&QEvbB1*($E&MWXGYduu6U>!H%1Us5x<I$9@>qX+NYoN^+m3&
zjtrqJbQXHKC3zZpkP1bs?kNgA+hXoP(@!IKR&Z<k4lnOHFQ?+}1~HVqb@rQ#H}W$d
zsc)|}GpWLvesaU1xfZNGU@=WeT!l8xY9lnyeMPck+iNK37T&rt?EbVLy>L=&Q|Yz9
zrc&u4^ebE8P>nh6W;;Hi>kv8-y+Z65`?6Ydj8=@E6mbxZdn4ytZ;3<5n0OQhMW&w%
z{+EF1|BI&?;c35-W3u<Zx{>3tGbjE(I^EdgYUoSe&kK-4=ZzRi5Y8<&UJ*6ko0TZ5
zb=qjL=y+=;>v}L7`E3%P5a+RSogDL(KSz%Da&fbm^r!Hs5fXUrwhe;R@`<uqXI!<9
z^_p(Zr)1yNNsnmMfB?o%k@hIyeDrciE=!XxPhVt$3CVQ@8P_9|ARAeEk2ErL^`Lz=
zL2BhcJb+tFz;T^3NKD`^q5GSgtJ|t|Q+!}TwcPgsk+q$`)g5jl-L?q$JA7Ny!|{n`
zTTE#iVLH`u8tuCp>!e}5db~<@{2ABns`2RcL_6zrpo;wGoY?`UerMer@w*|TdVW}X
zF3!Y|u^-C*`~`Rr77bZ!x@`XZ5}MDK4)LBuy$%C`Kzcp0b<5cKQ8m->lD_msIGGna
z2y0w)zaYa`0Z7!riiBpl%XzOEaN|M517{e>Ek?DAgDm%IG~DDxWuyt2S#ycMF(=;9
zy7!{uj2~x^k*Fl%6K+Q$$@Ark?b`R+%Gu^Rdk#!1-iK?Nj@eQ&!O~lAKS62F>-lcM
zbIkbEx@gnFYO0~jIo}<(hEchM8BY)qm}#xiG28cV=n?yEUx%xEN$z{)+~@&I!yyEc
zBiy`quKQ@9KPD%1M}brct+$aO?_#`n<ozD)uqVq}?m1S5C}kzp&X%v}&e^`}Z7&Tm
z^|?NsBOLN7vy&}IXD?0WjP1r6F5bj?t-xPrwxBPjwb{vgDXS^Yt*Xq;8<%wcM@`S^
zWP^8P!zErfGp?%r(iDkZzDg4jCXlSB!U$5EppJBUPfBtQ<vFiO&qL_X@jc0P-|mU^
zAI&>AAk^Rdmm-}-`R^0Zpws9ZVw{n4EE@kx%p>GX;x{9GtAUL_*BC2Oy6hvl<B~l-
zH@xrfZ;{Y?u47K_Zdr91J_(&Uw|u5C{Lc|?<7vD^wQqx|wNr0L)W-C{&fCrz-vG5t
zLiU`C*rT|VS$s<ZS8EXSxOMN~%5v;J^;BIMcc4ddFbj`Qn(TGArLB<pq#hQF>VjFH
z8$r%#m^tk?wh2HQI5&u<DV=J3uOMUR2kV_~BDt<B2*72lYEmsYYa(xGZNF|ty7=e^
z&U;<%nOIvK^-4~0anix&)~EEWtd4iOy1CzPc^9v=>Dwietz@ckb#TpozvOnOt0$KL
zk9Ozi;Amrqj7#>?fJ^GY!`k9`C5FaFKm;{z?e2z5`pZ{`_z0{inph98xwVTDzRroU
zM0nJtD0$S6q<tUW7)%^#OL{ZkHvg@9FJqDCzz8iW+CC55?c2#O-3}UCJcvI<rzvjb
zf2xqH8G1Hi7GfdZ_>I$+4WDqzBV@p=1~HVJHobplDy68)<J)G4`Hj4u)q`mzm<vxh
zfiS%MJ#qh2woGsuqA&zDkm91G*|R0<@BDdcM)tZ*3G5L;#E<`8ZPmg0nq$XS{Yu>-
z#2~wxT*7l{yra(gSwl=?rT<%z*NqtqZ+i*ZD-z?t0M<=uUDNgn*c{&SUY@p;8D5sp
zopWJX+T?MtC0w_$2u_pdH%lBg-kwg{+1Y1snc0atCz=x>%8iXarz7&#o2{+YbC1(p
zhK5r?iJQ~RSR476L0`9qrKqzE9}&GRpqu=bGp!BiifVRVLo8ei#Rbu^(FN7WG#Sn3
zcy7@t%ZA}H<H^E$?li5golw^e*>=Camr**LE<AGS=lBQzvb_I&P$D~5fy*mSkJ`k<
zQ1!7P?7V><g$flM0)LE*%4d^c(C={dJSM4=r9yUS>L+K_)k%hzfRtxE`s~R*0|<GJ
z7(-xa$7+8p$h&AfR(b=8cJt!D`Uzn*h-LvCB<iaA@byY^OWeU~u*qtkfqClc$HAto
zo=eWE*;hZAq6?8|59aKvTBhbUKpm`Rf06s4$woAmIn&VNMa4yMNl12%tN@DBiq37B
z2jqBi*5&}S$LA)#CV|Bftw2%(&dc()CRz?QT>lukMzgR4u;J+6H;ee-(C2|5M%PCg
zw<^xBCD9Ud{lb;mrR>fg{mxQgRWXzZXOIL*(LOt|5^@3!<nDNH3|Rz&=4UR-li=f3
z#j*-HrB{U7o{b?f-Gm&o!7rmBL%t1H<meVtKkfDMG_~9?+tyBY=|dAES1J}G^0qa;
zgg9;5PE{QUwCXhO+LkFv<G)#q=PfoM>qh6fzxby;Pl?zh+5|gBj|FBfD7^`gTr&${
zsG19K`LcZ7AOD6sXHww)ennqe;`sNHR-N~|jz?3-MdiHNk6Mc;47jUnxElNVZT|wX
z&23NjdCH^B-lN%kxO5-x0zPcK*+|;UTo8Lxdo(kcE$Dc*6#U(RV7y;rkHYH>r7Lnj
zEf$mC-~(8(<wNhI6}yo(M{vWg8_`Y*y8k>{QQw<o!2IQQvC`8)FNMklpJWB(0NvgH
zy@>yRAmL}u;@}-(p5T))Ut@t4)2Z^qwI4$H30cI*f#&_EM9fOu6g2MiUkO)a=Hf=Y
znw|&=rDud@JjqU{oDrhQctZK)H4tKq5EJ{8j1OoUd*IzT&wN4pJh16hC+tYgK%v(c
zdL|7Ngl3^k%t!S>%$18C46K7_#%3A5arT(p8lY-4Rdb-h#j571tD>OpxenL?tj7&l
zeoc93xYtYIr2_<>QFc*Z8gPgFPoS4f?}dPS%!->Z_V8cTx))PC2UK{^*&(?GSI5)@
zos^NPrO&;JvnADCH9oh^YV+K@JAL4sqE~Vp(K3vj&LV^6g*IbPi)EO})Q>tR!z?P=
zBW`t$SrS<RKDFd=hql3&<wpl4_-;kdsxCF{JE!I2;AnQx+71?LR8n?6pBi_QXR2W}
zE#7SCW%5F5>ttOJ!uV75Htub(Y!E9kV?^fw6Qt;}p3@d=>OR>v>EmRbGL&M;uheh-
z;1Gf@9B6#E;0ms<n`)P|2$@oFHWy8G+o@OL_j9+64}58z>SsP!TKlGyt|IV9kmPtp
z@^4#a`~q~#Yn&r;2xt8KBd57#<ZL8Ha_;%=Raq#Stq|@t4?4e{3b-4fWJpN-b5%@@
zc;k#e;dhY2q1hy{tebM_jbqnLS^H=~ftQzjPhsiy<#^t|<0;@Fz1)6o(@}wb){lLM
zKH+Lg_dkV#^ngPMEnhaZ2!aXUqk1OlQV`b%t7J<X>RSYIIM(}SM>>S}udErxm{q%O
zn}6v;dbt?kBQ^<F#O8JkzgeanuteN05jz$8ytgA5cq_VRr^V7wH2a?m`r&h<|F;<%
zofIRkf~Z^}N`QP%(xHqeCo@DSg+LZt9-}fdd!{i)<(BjX5qhNlCCtY#b<*#ckNhv1
z$%ZBPGV_u%a4HOoU-HB=$6az^ts0w+bYOomHrV9W)M-UBx8*eF7mjpReU;f%=w^b>
z7SHW@F*Ypj)>MtwBLTT297PsBdB8|4l@Ui&ygU*@pG*-p0Owv*h#U4?BFn2hv}Pgj
zNK}eD)|^qV@qAI(WQY;-s%ELdrg<*aZ0XE6CV<*ZXYQOisjE1)<{aX3R3&=?quNjC
zYjR(jn$Efczr=!7v$ks$4q4xXMqPXiZ^s9qnR$18wUYwZY%m-Ua28A1!+yApkNm~J
z3M7jlv8L~~Gv5~dxRh4+0D^|jLR5joNf(fGu-SVE)wUf%>n-bqX|ZkER}(YxxJ4~l
zw^H{tYvQ9FxAv{dgM|a)s{`&yfqTjON|Tep55;_%4@#z$gB;%<BinHqVl;6G*-rL_
ztn%1+`q|1#j?G=K?b9excsBB_Vf`Tdb$~!=?LAy|)$5c5KZ(ZNi8;UR?PAV7&S#T@
zt-5L+cexHB(*qZtt8$v$37i77H+L=MJy2dFWyF5DQpf2-NcY-CWihdpyPJsnwoo!4
ziBE5Ke2?dJi+AyVqdl^0VR?7u5PCBAeITI`A0&e(Y^+30pDWRfh)Djn6B12#(14rw
z+ogT=b!oE!_Jzxc`MO49Q(tnmbz5AlWkX9;cIEWY+J5)ApHjr_cb~nI>r!6z#o}s~
zL{_I~Wc_@Ijn9{T_!+w5QXg7g+dQCh2bpO53aLZi_P^_9?Eve2kGSDt13m)_Rz9~|
z_^*K39M%ZgwzN8gcI%W5AuUU-w;=B$+Mipefxt~@jOJ<=wI{~yh`$Gr&OBJg@?74#
z-D**JYA1v+w3ltM9JjB`BfnwxpQ~V*myG=WgiiD2pAO3ir6kjV5Da`_1{p9@Fd9Em
zC#jRdM9_fSQhp=>Zwi|@MqPa{l<ZAYe|6D!Ono-e-b*~{#TXJ;YKh=Xys3*bunpEp
zHtq(SavhN9?CZtXYmfkuKbeaI;^^WeqrD5KDIREIu$~8Gr0%rBc>xMwdQqbV6tYib
zgm<ti_^Z(gls2-e_9B1&g7if&D*s2v61q63I|lG!gI)!8ucegFy+9QM8k#g-Bgc8p
zN3WLyWjt?X9FB?nvWS#n)OH0vktGo`z22W#Tjd6gaWUgxn&BfNW~)ye7a!R9o>Nu*
zqXR^lZ+enVFHl~<-6LyeKln1YLiEL)152`sCO8ApP0H7;DuuTOC!ASnclC}qQ-+Qw
zN~al#)vkviWc?MKgU)&6byXv|bkewUIPlL`0w?>qVcWMquTDk?SZ~Oe`b&JpHzh3Z
z57jBf2Gwqg*&i6ie%*NxkR0;FzteXmZE<R()jwdg^{vge%s_+HX4)k17qq+`+GQy}
zgoImGf+WN~nd?5#{e5N2=+g-QuFrx+*ItRhpZ|=e%f3A&np4ViYILdO<y-B|<uCO)
z+ZMXNt-4eOH!Ui)t_JdGMUdxEWM~|+lnhK-9Ki+XuGXcUm>6;1NB4)sO?+2;N%x{A
z^<$twM9sfn2#>gz!XMvt>AV8l{+XNZU*Ag6YA)dCl~nGz?WBL^=J|Wk@76yCHjy@O
zkAe>Z)@1(WB^Cc(b@=Qb+vvQ7i1)q$1ye5n%>B=*X}f-2W4YT$_rC%1V;ldM0TTXc
z;Sl26do^Ee!x@x7`ldNcNaH!J+ptx>Bc)^cLBUb}y6$G#YHI5D)sjj1a6kqvQ3>*E
zMDF0vQ;Cz4v26m~_@#Zz?(oKWuj-BM;T-+N63v{h@viaf-%_FfnPK>t_kYNemQwaH
zJI$9%=1Y)Z22?<=!UXAsqNo_r)M50wurT^O2Ig;JqT=NLh{9%ubmte(qd&#b%-TFb
z|G<S6$mLvnvX=>nWcAr7{_8d4?2of0Kh6Fe>4j&0m3NWMlPV(}M1e@YUMzmZlA=Vb
z#>mX7Q2G*JPGrjw)?;%OsEVCdo%51_R{^=4f7~E*BC;I`SW<b-ho(HBM*@M(FHH9M
zqDX~W2-V#J@w3R9`kvi_EOU>gL{Bnr0{IzIfcFS9=u|RRJ+Ar^FK1?qJ4+56IA3v7
zam7Vq>m$EBt_uLX$+)fQtnU`HsF*;_a)d?{Yr9U4=oEKhkf+Tm{)@7r-<KbPf(m>>
zC&gO4e=MM*m<F<I$6|Y<UvMe^BT4+(28Kl$L^(PqqZFJK#Q4nuD`VM2C55L+Nl9s1
z`vNIlo0V!U9qu4MB872utaZGlB?2C0e1DoWY+)~2F}2~M87I9!TR11@m^r$5E+MOK
z(0i@LMt}0bvibe#XXCrQ?#^xVZIv%Oy@HfXn#R_X_vH5idPC5%&qp>M3s;Rdb-Q|a
zxPNn9`{wSx(kJ^1Ue>)a7(=`pVdovqax+akLTYGER)CqO;jv<XZBMI9*G$seU;VJ}
z=H+xVXJ5}{&H0D$<c!x<f3q+Vm9%hto>Xd?qoa^CU@l<P)Z{V!b!>WqC@(%rkc&c$
z2XPH%%eo-$Nl%SzNo3cjZ*VpAn+>I0ujBMxT^?<VTP6hCa<%%4b#be~`vbXnZg*{P
zIUDhC)J9$Z_H8oN#M)*f>N>$C(Q@T}iM-qFja1Q+oW``AcH5@pK|;qt33lhk{Z!e(
zY&K+E^Ok$}a7hQ;ls0$Kxt9nGq2O3FI&9VBe!PbwHtpT}xt5`XTAzfpj*?p~*nwzR
z_vV4QfQ*1Pv18DG5cht)PVrJhxmjKRaNW>g<?#BPqu9MZufZWpW_b_ntSk6>W_W{`
z)Yy2cM7ySPX-#*<%8|ewk+ZmDQ5%7+Pw5yZv=QGWz+ES&mbBdBk!zW?Z$@Ma?gl(1
zZQpFc_tlwaHFo&y-dOpzHrbLUg;xMdcGUH`<ttNb_Y`g<$w~D#aOa2)d_9Dw8@{(B
zP!Tz8LqxW-Wg2XzSjT5u=Mg*7BI}FAeT#m5eXif`ze`Y3x*E&LZ{9cEij)c7eIC2J
zbE&-5v7e5%?8ZV3z!@2uASF1y_z+??@{e~m3G(PtDlC!xJJL--{3~r*&P&D&;lH{D
zKEaV@!zlk9OyWsAjas@6y9uK=gdhV76+;**^a}m2D9SMMKl#Xjg^4&^a<~~6Q)h+b
z2s4Z+ydUXsrV#THC?3L6%`%bVnDLV$nDH}6cM<JNp3Q!d$ZYZQE>=MO;=QaSsTVa!
z)OhsEF4os1a`Pk5)<v_g*Qf)%J?biZEQ^*ESv|q(Bf&pNi0Oo393`1299d^CYJ#93
z(Ahnhx&b#hQpEwKlPUj*<gWt5Q_IN6Y{LA8dJUrDDSJ%)1)+Iz9Q}?X$lI{{Tr=q=
zHE(4v)ho=_RpKR=on39*7S$tZ#Xg?xMD_&ta<Jn18@c6DdL;UvmavcYvgoE=-S3;)
z7?_Ecd_O+Awq~(usUNaAN+hOTTG|^_Fn*WX{Z_+cY_@Jt-`#!RaVD)})WbG`-$-P&
z`rdlYgX!m*2(6%~6VpTKKX|~MxNJM|yBw~B`sl4RO|K-1UhY7#>@AlOmgcd|s(_C1
zFKwZ#b<Sdr5%qK&=>E}VwWnCkaKbn60X_G+{82wQKZaGl;ppP+<D16pI{q6&d{eUU
z(f1mCl^h$<ITMYFiY8IDeOkD(E%%Y7zWSXj*joy;MibKlV%%o(=0#n$U6UYuk;-MH
zEm>_H#c)c@LqvROo-?r1|LywXxd_EH&YE^?@$A~%QsCVv&!M!`z>sQ55+Ry%u|aWr
zNnaZ|vvCOB#A;TE@8NAX=`44}v=hV}Jk8iN@bTt~3er^vQ$F(IgahK<!$YW<sFL7*
z<J-2_=ti=F3!S}Zkc?r|^Q!Sq&$93c5!(aV@hA_GdJD(Yy5VTeovZ8?-E!jda&)C)
zHXD5&Yu?dxaJiS`N^>u)olUk@t4%@zi1mIs**g{yZ)E-a+c~;)EL;wZ-cQYzHpXI!
z31@1zH6`&0ZI2n+M7O*Y?j?pGu__IBd0M^9lZd^Wl`?c{-7DYLyA++)rlx1g@FLFM
z!3*uv(ILdk@!C2|iUCu8W^c7uH?FUa_IM}QY;cSE$ZuE6DREZUt?Eh><RaIQk=t)`
z4<b~fy5+=Ro!fE=bhHbDDJ8Ns7V@&V(c~9{)#Bg8s}44e<V2qJUBa`@PKv=h-CQ?A
zZuV?^@l4@%->PYO-aMMhH9Yas@*4Bf&`5!8(URxO`x5cimlL|JT=K`ai-}{?Q~P1-
zfX5KtHA;?+&t0#vSmGKG^PhB|97gns5O}U_&5k6QS!k`gjizzV?+Pn&F0qJ;>Y#<A
zOpqck`((4%YS#v)Y7#7L*Au1c^HUNcCZ=uIhmyK{rr{(D9TO043l3^m+IM?z?S|iV
z+3B9YVUd$J`+AI6?$52^TD3af*7<3reYx#9zCk*q2sb&?8C(#}5MFj8nB&XPZ~<qI
z&9`9@Xa8zjQHHb2!7i#pavs?ei~mP2*B;f>ne9O<(2ihZ&4WnP3(8QyERGOC5Q|zO
z7UGqMNq|I|oC2C4nnEJ=eTBA=1Q4r$K~Z_6p+F=euZUKZlTaxj1PBVENJSunNNZbV
zq%-@VT{Hdf>Rs!yR+5u_zLT~1?Z@|h``i1s#BSY^bC-SgAEy8MqN>&I<s-w6)n@mE
zb6YN+>l_{Y$LMYJ=8vNd2e;T2e`B8BvgBg+SM>Rp45<hA{Uug;^ShDi?R)$S&v|za
zZ#Q&g)4#GSxUAdLH%)i<7<%w{sPRO+!jzHFL3{Kp@$;*m?Z4{0c4bHQNLM?|a6-lA
z6b~rEJG}0jf(3Tlg9~Z*_9abzUit(buQQf=kNoTxePQe$8`se{cZ-L<Pcs!hiS=Gp
z(32Y}hGV2$ztK(=a_5luf{ocLTFVT1d0&USPxO{3^E>=?g-2L*(iemKGO>xhzZExk
zmMqyZdwF44e1PXaI_0$!`~0vsx#s5JSAPsCw$6KXGi6}AX~F)rEUL%<en>{%x(_-J
zn4V-)nI-E#t6O{J&XHZu+?NXjxLT)wFFRh|wj9{2mf=gdWoj39i_p2Df@63f$1<qL
z+_^awF}GT}GiXREL!3EmpVJs4cS>p2`=VCD;l(+ypKOlHH-rdK+VT(Bn?l4O&=>on
zG^7xvj42YSC{2rbU?xhL3NhM`AaK=Lrbspr;RhhQVj%OxAamFz!8fBEm;zQ(+kJE)
zY{8&Uc@&<asX&v6j6YH?qDYA4K(Dv07wYu7GlS?_$Ol5<lun<=YPm%1)jIwb-8CkW
zWJ2+BX-}^gUa-spVzsVjSiE_Sw`Hhsel49d*{y6fRDX2mM@yW|txv@_J6dzEjg7_A
zxBuNl^0a?8-4<VSZOe8mAJ)&Y7iZ#C)!(;O9B2%0$i6pLmOF9pS;M3E+kXD6RnqD*
ziISWzPyGbvf!9JiT$C590#fL=Uq|zIBdmnnuDK*wOe&!g_$u}P@$C|$^!9R@%YPI$
zEmd0hWxWrRe1v7dR$0!+B**JS;s$qSkt3GI^<*;~QK~ExU7X<*YF~*i)_W?F_48{K
zi64W)Zw%AK3V5Ziex+$~T0E#q5rS$EwX%Lz`Fk@z?$P@W%TSsat_<W^LwE?T&?Ug9
zZ8uw7%OR-B=Q89MQm`B&MWuoqubWc|#)-s-!^XgMJR~Xy&U1*7pk}9VQVE`G!>fPF
z@x)q9X^up4nhb>*uV(FyQTj~iH_=q%6kxkFQs=XeNt{m7)NpqDts_A~X)$z^VY%Bg
zMyB~!o)7<w6ikZ>Kab5*sZ@9K?AET6OztQ`@>cd%eQp06$ulOt{H%g&Mprvu9u~(L
zqV0iyF+pGuQM9&uZ>{N@JehRszb<O7rzAdjty}nT&UAUV7^>XyF6;CE=P&>MT?>nk
zycW?6aGV5xbB;QGyTPTz1_;)u>2lI?5iza?ltV-8%NHy3Q>ly!SUa6TRUU%gl4MYt
zL_Z(&fPO$3OQY1__mHgm4M@2n89cRKUnCr&i8Ejj!<HwO=w~-uit%B&1|NnoAmc*;
z&&{Nwa*dA)F*!sS;lQ5`+pld#3Z4+{3gm~N;l%tp$BJ^pz0-%E4M_8+Vn-X$nS)Ql
zyd7`(Zn1qiF!kNNgYzH%?)ST*rFV5lpjL7)ydho{t}}bKA9)mY=Jftwj#MzD4Iv!e
zgy(mhrBAQ^(_%&p^abU2HNM-;b%$r5iS>EjsNp5Orbdq*{_>k8oX*VTsa3zQ6C-!<
z8PbxW*3sinrwY$J{?-3O!T57c{bOU^^p@YRC9a~fsP(5~bGH|8wO6T(gJ*CGO_sB!
zft!n$*5l5ftSy+!s}SHCW=QmUcd1qeIj2}!MN$>x7xe<d;D74j&91FS((Q(UViuJ4
z7mIn8VJ=4lkK(jjE4YJ5{(wEMgEQz}L5)8>U+<BX55zg(VzX{mmj<_-G#&yCtbg0#
zg^0KY9_nM@#ppFizYQ+xX7SKkpK66v?*%T$gLo^>bjHW$Z{i75urbCpC))+Ob%srH
zL=P;pd7yqyI4BOPH6p{9Kf(blCk!vPI?mrL=lA3^kU89(N+`4vMa}ju@cHq~g3e;j
zEL9<2#D(rb>LuXT+u2!O!3DCyVwRvZQJ+AR+XL@tf>*D*0O#1VO@dTif}pv_<OY<5
zdUuGlisDKISGlgra@haPApFzl!#j^Y@d?01VJ`33I3E2LSdr4T0_OQP5os!(G-Y2I
zG!PQ4pU>99lq3EFP(&fQF`qpJ#ttUkq#OibaQJ*C_E5|U)MjGVEi{BPPPGubdJz+V
z+fV5dLUaSaxZ&mtqS*(^DgjU2RX&7?>ovB?dWvB)F&WCjnJQNuy7+ib!@SM#UPg@F
zjF*nDuf&_U#yH`@r8&v;>QZRe(sfsi8l!CaC{qc@a+%MRjLP_+-V;iZZ=C*FE>(vq
z`tHTuWC4{Y(0eKolmwRgW%(&ZpBX)yE;^g_`KBl=T{M1u$;Pffq4P#xUYn+6K%j+V
z(NQgN>%5~l)s&-N8`SH>P>;zeI)P^t%<ftF<-`g;5>FX)A~r&JSKwAz2PhzE5Lsqn
z^#E86d?c&Su-2*eeL-EC6mClO4Ex@ytUds}4`Yb{>Uf(8#V&|W@Ed3?63ziph?5Ed
zD=x_ZySKtE_Jp^i2DXJk1OHP786bvZ&4*CzSs>al9t3?#j+zthY4Qt|ELZHdu01cf
z_>*q6QpC(;ho0|=spOs%MY6n38Y7LqyOl!oYR~8jBTE3SMlrg_k(yj2e3LJhToJy>
zj{;u=ZsW(71RLK7vOf*B9+5#AJT97Nxiw-d$+4LP#DVKw^;2=)L}f2MN5Nl)iO3;b
zL-$xZwuc;o0-y*Vyu4Ztp;-scnw6p(vZf_t{Wg!&q_Y;<#{{s}%f`U$0KgmWv5iiz
zz*4t??P(Q%qlsl;zhI68SU!OWpMwz@<8{>duo6GgN(|_MU3So*2Oo~Q;GB!UT)5CZ
zHELI~Hn5vdKNWRq-fepNZ3grM9_KTo0(-i()Gli8rBfvgNp8Y!rK~Nkw#~|wUGCKh
zv~Ja*Jo6gw$O{^Y;;ftf-0_$t;XQxC;f=mnj~t(khl^m%vEjo-1hxEqA@DZZbH^xH
z<2L2sO1*dwK{iOw*UC#Ml@HB|B+O(f8<T4Y9b{e%pvZHgyu$3hwL7h<@CzKrr-kwE
zXsrz<x#5R8RAoIcCmO-BlJtHkY1LR7<P!Syet)B~UOBs25wQo>De>^Kn#ycxr=M`?
zUD*N)8kjp<20}j-64VSZIYLZP3-ilTmP^sNOHq-Rtb0QlYgf+J2z6OtT&b{{74eB$
zc&RP1n#BfsLLqcgZd1D9jF&PDbs3ASVjW`6ZQXzUjj;LC;Fn#C_VHZK<FYxxD?JxT
zKi!3%{wtf~G&ndZ<%~u?f|5fH%_TM-qUUrh2-bji^7np*^%HQs=qbA4af&8iH{|eC
za$U^f`P2KRc~#OTuBPw5{c7o4Ka^nL@6GC46Ekt_l35|WvF4#!R?SBwn1U~sW#t=q
z4pS1ntG5CdIA(&Cp`-`i^3OcwB{tdy`%Em%dm&>UY#O%i%n4kyh<a4*;%aN7c8w68
z2S&??qS8S1w~F4=MMc}nLL)1B%GLu*R&}7DT4m;n2d*yJWxmX~h3@Vy(3~AeIrzft
zKEs`{jr~5`!9@PX^fh*CvV$XDdq33Tr@`wu25<NGk=ONoyk)b`I$}ZRAzjtv`mj5m
zbpDijEc-(G;JS3rXw0~DBf+>dV7T(Zn7q)gUeP-x!8(=#oLM@-ggh4{93J4>WU@5y
z0l!x31b?TjD=`!DEW77!M3c=#YOY<M6S03ma4p@(FQ&r8<BP#+txiiYBMC`vrXg7n
z3XssoXvM?9Wdn(xRGBv{+<@<O`OaNz$EGMkpiFJ+GN*}XC6gU14P382MY`n0W}hz$
z6?uhKvrDan+brepuGD?qZuWWE-~JoA=ChE414%oMR32$L`$NjhmxTv@LC^hlMMvAH
zVKie;7sg`mPWoQg#^Q7btbMF`JLvGI7PNWLOtVW)mpOzm7ef6H!go2OVM6_??&K_S
z*Zkh8Uwj3R!BN4?;8W#9Gy-mPuI?ei7fY~KYaY|B)~<eyVB)J1F~Cywtp4G|(P2&B
ze*RN&Q~x}{m6*xYtXc4^6CCzRn<Ax{iR{i7vqc(ueS^R(D^}rQ6tNmENy^G$P9-9X
zo7u&{U`WJ!4(4(1OU?U#_87FkGg|IBUbXl%n%A!UE@b=2@4HVWb*koF>Ih-7Eo|p3
zUi401x0{<VAwsS8I;B(#O9LY_ucgzgl+!f7`i`?lE(aH0`!wg{{QW;&?aNy$e(`n3
zv)<ixMk%H$%VocqES0mXw*p^bH5l@zJ#ney%a$DYBZdDK=vt5D+nLi|v93eK92fqT
zcPg3CxVmZ}5s{}TOd-(<0nD{VatLoK`Q~i^Ga2guSKml9krQ}(CD#R41ZJ?h`Yhi`
zxdx8S4{hnQgUebw$~3KtqIvH3U?{crJ#1f7zqJDhq&K_F@+^Aax4sX}@?3g-x>>FQ
zEeUXRJ4g?FnZ<<qZwG|P;-g03&plRKfu$S6G<UYKNA{T>pF6<+`<`!TM>egv`>S#f
z_davSk56`R&Sn;@cH=De54pI1#%uEaj<aj28KIh)>AyY?K6me<>lM|}lQYJbE81u7
zKiG9{&Aryq=)xVrWVdIss~xJAb65Ni{H`cfmGj5^7kcKhr$wtvSz*<}QsTmltxREe
zQ8mQWoj^D!kvWZf(5x@L1<0=-S<n{n+Jr4^fTUkr{{wf05aPi4Trej2-Z-6L5F+J6
z1j2yzT0TP2)W5c56Pd@;0@At%6WL`3a)LEYiuGI12c!Y?R6yD<2H`*5ccbwj?J16U
z%+ME7j0=d9=hL)=esa(wxyH3sMX#TB&_WClC$4!o=nAZ?1ht#EzFGKQw-BKot8=Y(
zZHkip5XyE#m?t-{UvH^)Zr#d_`oh&KeG#xIs$Ct=tCzV(M76zB_Q^>$@Y~%6sypr0
zLqT(kehqkQR4iYp=jvuxE*6XCyhBizQ3)uJP1q-T!z9cUrA*V1B+LlYNOoBx7bI>l
z<xB$_&47kEyR_9hgz0vTUhgwB3Zg55iPSIYxcy~Hn{JX5tl-x3wFlj5$?ZPo7Oa24
zM#GIOLx<)v?pr5_;Bt7Iass9&9}e$h3D&hnFc2Zp*8z7|<4(<qI)_KXQ2vTpXxu{E
z8n#89s?^q`8&N-gYMA0yaj?JD%kRHKv=MjrwA*gn>5N6(b=DVEvq}RAtKW-wKXm2F
bI9WyIrwcC}a&cuxRirYMJrxm4|9R(MrMOF{

literal 25939
zcmeFZcRXBM`!~Evkds0rN{Dty5C+kEJ28W(qmF(;5CqYCIgt|y#vBnnO7t=aB047#
zCQKM*bdm_7_ZIzKL(YBf`}g_X&vU=e^Ok>}?PKk=_gZ`HHP^n%cU{-D_tD_d7wF<`
zggOEuBZD9^@CO}zB^y+~b<0XuPY0o{2|sE00D<lFO$c&!@pRWy{e=T%V#-1F<>U%d
z+Z`K^2c-SK*}%A4{iM+$s8`_M^!Xp1{^_o*hYjek0{*YLgPViN(t$di{YjmdRJT5<
z%aQ6no)0`hA6-)2-9YaasNV&3Ui*KlTmMtt=7Bq@e-!8==X~FbbT86In(=vC7ejrp
zKLh?*AP-0nQiXmY{eEx^HrGrDlG=ozQ-Az@&N>N#s(y!{E5m=EyOse#G>;(Y4dL%|
zf79f_9rruO!<_~txt$#Zt>r<`1rrFm+yy~r&5qkZ@o(nF0h(CAyj;PbJ#-(kg*YH}
z$OW>21VK#%x(NwG5=SG@Er{|o1trC4N=gb!Dk{n|XD^;T`_oTn>8NSWUu2}aa)ptO
zfq|LzIy>`KE*1s`4j2a)H_r{e8%*p1HwAcaUgy2ROB#fXii+y&nX{MAp1sV=%)re1
ze|tOn6QVss-bDeOBIAU}X~|B}k{!K=SOKpAHatZter#mqr%qFx`H7MWG%H>N=gG;)
zPEq}I<`hIuehRQFIW1_vbeZyJVP*Yi-3%f~J;OWh&&%jIMaA5Hi+M@K^$WeV#9PmY
z6{}zX<{!iVH8|KGk538OL}*EOB_jjmIdzKSxCa?6`Ke2ne-=jS(K9H=oTd=DvqH)F
zlFscd*Dqz=<442Lc`ySo0a{2A+P!evUywYb5DMksB|pP<2a<Rg@w5`6fHt!!_~55G
zIP$P$MjR2vB4w1B*#`8vhLlet<#~(6nb0bQ#0{)%{)b|O4KfZzw1X+<m(kPPzs!%Z
zK3m55o<W?+kuwGvq{f%ml}~H^%h`$^wlXqn7=>-FvURq>-#>+H2Y>aCR&lNojLb9f
zpSkoTxvrtr)QD)cr(Ak4v|71n0q2Ku7}}Z}EuItepx@J>fmv7_&FqRuxL|`w>ABa8
zy4vG#vtO(uI$5Q~qb!9LX7}F0qYUO*mcmq)CogJ~6E)ZoF>NE^(9;UD&2Nbs97cg-
zlQM8<S9t~7KQA7Ez3!M}o9iTCfGrY_pNI8li8I@k=SLzOTO9>dko2@lr0G(eCJ8Rs
zE}rb@PU}+5L>T5Ta1@-S;mQ57$`hcNGKUel6D^9G_!-A7Wy8~T=z6HWxKz}Z&KaOl
zxqIF}ur@9E&Vy8yD$I6`aO-Gx`MimhxmR(0k-N>Vg-#~x(1z-cD{`vo{zjUbpX$gJ
z?}3<uO8n56g4_#VZ>tdL$36l&jEAH3{TijJnGNZ7eqKcHaO7kHHLD^GqvSoWAe~#o
z=1h2x*_vu!4?IkGeWxjaY4+1<#jK`9h!?(hyiK0DNz?z6rVG=k`v$Jsm-Xc}!qp9&
zkWSpF{qx;=rD5qo1By$3WWaPx<gcIV_iy+A(?C~=OvQliwBaTe9!f;Tm>5RNpLvCd
z_ct+_wKYZS=nLn^nLdI?p#f7M;A!z$qCG^oAsmj@F@2v_&e8K8^$@F8MsG+@u}iP;
zyV4`hw>l{Q_jI9W@tO}?)bdY=Nh(jR7b3E+Im!>Q-Qm)^B+ljb6Z0Q21<Wxi>J0Fh
z0{Tnvn7fXMvQ%|OjU00=dySl)SvRKc+}HQsrgEorXHm&ByQ*im49H)PP9|}H#?>;I
z27PDiea~JA5n_oqi4jm8Xkk=Y&-=27vi4RBn02cYGNJ?B?<AhfPv28!QY>uZi8bOY
zk1Oo3d);nSXk>IVF5CKbJKuFqBPVqe2S}L=uB=3w>P1NRMAZLcir^=DoVYuuHw$^U
zzK=~PX6-cXaJ{N+x)B(;DA=~JUmNIOlIgZBgp7L;Qr8x38F0NZ%C)fJvucN+==l=t
zM$qz&z6wEUp2+=y*ZYZU32y>p77uZAyENDLWMfNar`f54sCWcR^aYNfp+@O%{hP(R
zmd5vX&JnG4G|B^W7d~Z$MP@X^c4`k(WNirvZwZmqn%Cl8K2GAj{mK#uRx{*R<fyxw
z8XoNxbr9qpw2qc!^?9+R30=qc&AEH#j@id~kPZEMJ0H4E5lS`>(V%V-$<IMnD2`WW
zB8o+sDI#J_==J!{zT)IZ=6`g&ZirS%i;IdN+UB=oQSc`)gNO(s>f?s^MN}CBM=`?m
zN#<@$keX0ee*VQr97XdqsE1Ep(Z?r&VMuoE$3``M-%$nqVSCcg>#pN3h-^nub>=_N
zYQ(!S1q^VsO3(4*&epO6&z=EpZvvilt@+9G2GXydMJbjHp7)g=hdQP*@K94&#X6!U
z^lAn>qT_`F+pNoM7-afk)|D&^b~p_n<u4ZOYK?%vv&@Uvc38h|v92}Z7te38t1`hF
zMi~?vVEYsE`)q%=%QB32LMEdPY>|99h$Mzgh&+@7Sfb<Y>=}}|KG|rxHf>AI%AYC=
zWhnQu1#8-;$V|`Oy1s5~HSFiJK6luS-<<y)m6|l;Y`%_{-5WCfAQsB`JFODnAM!`1
zh)4((aaLKEo}LbU&42+0Xz0NCp57V;M-kPCw~H9Ap*k4EFY$9Bkw_yLke-|;WfZ8$
zizp%-&Y5{|hA(@g@H8qd=V98bhve^3|BWcUlVn2Ux>TQ+OL8KzT||u#*<8r{4w76k
zM|IydVUEdv$~k-2gppRvp;+*FzZg)fmr*^SWHjG!Xb`pj6)4JC8wt*u!FWj<Sf6$4
zu|h3YmALQH>Li{g(-Iw*+~O$R5A($KJ0Uw?&7!bIS@bU&1p1xm^JF?)DoD~)3=VQl
zibYKd<Km0NlZm(ShVh2H`5i_`6<`5Q^yoiv1Vp9;1&0e2(+{f1s}`R=i&Qxqsymnw
z0X_VUM0D~DazZveIWGqvjNS&xz)?hNeKtRzADP%AR+bMK)LIPC3>YSQB+@WHlGe~#
zoQX2;Wqbx-wgEEejy$jU{O$aQ*bUCz-#L^oq9Q4b49WhBC7Nb_%8Yr5;j6qF)jHu8
zQ7+Djm~<310=q0^T+H2Tj)*^E?xM<&V&WY6$zr*`UDk3CI}bQ6YLK5n)C?G$!j>rG
z+Z|8JB3ghV;YUVZ@hpqza1^!y+67gtdO{ZI$>T;h&`^OY7DkoCk-7j{@zdLg^BeMu
z=U#f<VU4}r;gF11i+F0pDS$A5D?t$Q^gog6*wX7N>$1OWZ?8L_fmA+AhScJHQcHG$
z#G+)g@*ETwDV}6xpQfXyL&aop#^`bZij|SLi9w`@`6)d`<Rx(?1{flfuLZDHByFw%
zS|#FPAsmj%&nUBoZE!SZZx;G@8Rl1#L%d}SWJpKy781n!v61b}GXomUWVIC|CWNa;
zt+D7<Hy3dxFmxm`Kaxu~lGzTc$Cq(7|6#<>Ib_d^4d6iAdL_5xWa4UDZuinBk6D))
z9+L^^;1=g&UgFQOt}wH%8MxhIO)|_y;t{<}qGoLoEyv_>0^*7&f*ECr^AQ^#JC?`k
zm6_Tys}wP15^Z&P0c1JhCkQ$w6JR9>{>SB>Pf{gP4SBbQQV)fOWj;>p^biiLw5>eT
z-h5xJj5eQUs@%?}HVUP`NO77*>iD<$YeD4DS@K6px^OxU7}A>jt*+sd{2LTc3V~$8
z=^~lv0beojAz~2E`1pYRg6W-sIndK9DI3Z=%`2<LDTNo`0f51Q^Pz#MlI~w~0z*?x
zzjhJ6+OmP1G|F;I9CZ;jMXR6@69R}#z+K6JgY${DzrYNxA+3MQ>B?^x*JVN^<rkO~
zmze-fRoh|*n4$`W1=u8F%(}uf%1VR2Zq}ZgAK6)E!Jlef#e}^JNNO5o#P5~d;t-Wo
z{P`ArG7<E|_VXj-O>HB}_{D)3X8mLeIO};~T=I1|!t}NPAQJ>B0cw#cQ;<=R)+S_h
zv_bq_dF*T^Q^L(x;~EPXFL=aEdX7o*Alq(^zne-JU3)e2y;?YFvp)567KUBH_{)of
zmvIyI780Ui;WN12kYX3N*p3#zkzGp_T=v4UqF`-WZphcbkFK9L>e;HW-{y8?_ji_d
z^9n=MR$Vkl%GY+`6TSGV)}~v0eA3MH6c8O;iAIVU8p?nUGbofGUAl{Ov~W224Iupa
zwD}R|=;`ULvmHf>=prvNtCc0g^k8s9z{N;wJ}mqR9|>?EV&HJ)J2ZMgc{FCy!6Ax>
zKk_->qcTH7Nx%1GQ<Ts0tzgDvVK}R<Mp=(KikhJTmaWFS0TU<ARE)?H9*8`b+Ar#r
zYl5oLy5`8GafvT8Bl9|3$(CP}=)eT@8hA2=9e|r7#_Uc=PZH%I7>RX>)@5cS9T3r~
z1tc3-no1LF{{-pby(){GwF8gRC<%@Lwk8traa0a4KuNc=xOlS!uER5UihIMuW0Qwk
z9-9nF-c4DT-W{tA4%VjDK7y$I?j-c0d*0WjoganOmgBc8+ycx4%mhtJD#9Z3)3uWE
z`|l=(Mvov-1?_a9tQ()uTefRh?}Y>8oM)O(IljUV_L({`aPUCt?y8@Eu(oW8wp>|L
zpvJq_Jn6tRsj(K>0yIah*ss53A$TdHpq`nx6g@NV@Aj6km`sQGTn)+gP8ISY;M1<?
zWCavS4JSOuFsNDzvh29LdN*~z)fAHZbtlo%yzxbSceHkCg7jEI4W=8DEU5mib7XQ}
z#)XYtQ6De4d2_v2p{@qwk@N1s#0DWXr0!j1YASY3_UgA!CL_*oMmG8-&O7;@<v2J;
zHmCxgq<1Lq!-$9EDN2w9U;)n1vu83hLtjONX6rK0>e5AomT{?d0r6Bq+WgG?gs9|r
z&B)M*^SvR8@3aGFMqv!n5UGT;rYcr@0^?|Wse@967|3%B^10OMmHtJiEnba6Ow3Gt
zC~lpg%_rI&vxN(ZEl9T0MP}9ATyV9v1ZksLYwI(;nXLvCrPKWu2LO#SuN!2<C08cn
zb*;g3#sY2tW>K@B-wQB=C<^Fy64t0B*+}t-zGGeyaRDX)LE;~~Hyxyl01PQIX?)DD
znMt&(WGXPqxs%^+c)P<<<P;}orr5)r4UX_M-mcrkwm-~0ak7F_eS2xD>=wj3;?nLF
zGx*MxzJmK2tyYrh{-Yj;LOLx88>#&+LEM&U3YtPkkXiN0n>we;VC)u8_tf_w@ePlm
z12;vxcl)1$6_-6%CGHQ+G^EU}HQmMcrL!I`9OB!Kpn*@(S0#Lzf-IWs2m@o=FZUEI
z>tCghHQNzR@qc)6Wp~GSdRtC`X}!khK-hOrB1QguV<}g|TTB+q+F_L{MtJ81%I3iC
zlMHKC1#88ew8+M^*M^R0T)u-q-?LlydPE9dswhE_^6r(0=yzu_o+Kkx=qQbqDABxU
zUS?e24TUm8&;3kKb|(ko%y>ml27i+6cnvHmf6c#e4fUby4g)9F0QIot;d?#aG71WS
zK~WJI`DbGZh7>xe41u5Ll^~=wFF(I710UaC0#Dl05KyDm;_PrXxF;GXHR>WVx>3b4
z;akb%B7Oyp_$q_QdQset?T<IIevO9N84i~djlB5;ds6JJ<IVv{Xjg34ZzQT$Bmp#V
zKmRdSY;gn+QUz;N1k~;EbLV$UZgJuUGT%Xxd80&N$>@{Il8?<j!chR>q)9A{dz^H;
zz@+d)etRY#G6RBozCL{XQw~K7nSmCw1@n1O2>zDJ?1cC&^@4*Kbgzpe^Vf$DIcl}I
z&+sNbA^-K@0$f#uqZWQzS4D1){4Dud2+GKSYERu}RzfP#DgVMp9?5xw6Z|tjGN5>v
z0lQ`dkAOePj6uR58Jy{XD>-mx7G?wVNwLZ2-*<Ym;LN$XpH*}rL$&<twAK;i|4J~m
zQ4ch(TQ$~<L@<(;Y@cREw_0!^pPHf(W^o0mI9tc-o{?{^n;6FT8+kh;U#6A}z_l_c
zZab$SHB54_!|m_-`M@eGA4o`w31IkQy9zVAGP4q|2;%J)5()w$LW1LfU_eBkk%Wg|
zv){=u8DO9|M<ZbCkr70MBe3&@Plzf8!pfeJ5$Cdg$tcXc*E6du<^X>ymhmg}>)9(D
zxltESL8nfOW&WB>f0>p->6X^S@9k|-Z|bz=r0Vw*{DM&G`3I*pm=WDE*<C;9^zgDh
z=;Ej)qZ5N_$;4`r5ZwhnKJv_mg`jwA1c%!K><5;7$~jNzV~nm@WEQ^HH3X0;MuMn(
z>#lN+y%Qh*FM?f$n<71DAAdMo7FS8}(Ak^!Du>wfVN>$=!wYm;DauO!M9pA7#Ka3n
z<1Sp>G5O;1@!7?y(q?f$yBOtI!-`uit~(k_o5mq)jEt_EnA-Ljj-(AZq8CPFC9=%4
zDqas?FzxKUcf(Py-`Vz#({&A#;_Fz$%H$4IT=JVTK;ZaSK)IMj^*aKElTBhtK;RC*
zpM`Ni>j0J|76BuaDU#pfz%O86hXr_?HXHE=>PZim(m4+D!psQ1vkpoY(8JJ&`66Pc
z_%b-fLP0%~lS`j{X<n*QvMr$Epyb{J_W^bF%165$SMMOU%KF%!N~B90cg>66EPa+9
zr|lJV)?Q{=B5Y0Eb4c+L-epE}W^yTs+{n4Cp8NWgjA3_%vM2eyp691oYhBXTr#5Wl
z#Zx?5i=J$=1Sv9H?ua^E{O%j18PbetI7lepNU>=69FE%*K7y#i!-=?ko`5~pgzVwP
zrFuDqT*WUdE4ztD(4*xLoAQkjiERZ&cF;%Y#{~g<LbkJ+i%W8XiUpYOC#CG?L0mps
zwQ{BUFjsLrkknF}I*u`{aCI7Y+mlm#dtAQriNqLJjtqS_4<^v8G%~VRH1De{CT^A&
z4W69xB{i&44`Hk-M+Q$0XwG4V#+UN$;eO*=oc5Ii?cPFRxP_H%YwrQJ^F>uDUsm_z
z<Oh#iJQuI5d|mwJD`yFMvC%MAG><(U7XEs>&d>7rAUv!ETzDr}&cWD~>+RPq-+)&u
zz71(?3tGYxi{5K;Y(n<obu?6w;D*hrKY7-9pR}HwzrZ5#uO}|63OuX*E@z29zE^qk
z*u$FpBURuQueR@eSq*^64^qoo{7Z+>sn`G7A?$fkl@7Syouy_l9aO+8maRJ1<64;z
zHTzD&)ooo{ll6%NA0eGWf@#<<@P9Bp)pVc>iKRDar)t}Y9&rVxQ3L9xah>A)$OLuM
zX!lBf%>i}5?M5-jJa3F_C>b28L~J>yrdS}}q-f=~INcuxyTm$syP-;PqkaK1lMw-x
z+om1Z{%8HpW+-gm?{@JOPW0JW(>?%qpPCdoiAVGpIg%94u?Fr>0(uxQd!*j09s|8B
zWQ>YI58oA{vM!2z#=ww5i<kGTgNpv`YL1r=@AZTxixp*2B3?f}!*}J(EQZavuVACU
z^0A`Kc4;^DhpA|Z&tfCl6Nx)JBC$)G3Gwr&wy3=q%V}w}ta9p@6bx(7cF(l?o29W{
z#Is%|u^tglu_u@=;ytFj`nN@ng(>u5$#1FW^pZs_C$it&dHZN{-fMRL(}N@E98EKe
zyxHUc!|yCwp&XRYFW-hJpF<bP;G|%H1q6j=0Gg6VJUm|DWdS=0ls;*rwoo~O3a93A
zo$pIhRoC{L9v?>EyowfOAP+rm2gUv(T2;=;ZCN#OwD|TkKeD>RE6&y<uEsQ~iaD;+
zD96zNs2`6=z6zVn#ivGwL>K-0&ffi5W)f``h&RruxgE^I&JyvN#aPmVC~!0dv>z^K
zsBmzSDDQTXh|jUByj0;h+yZFaVG3MlBp}q`z%LG-16Xu8l6+?dcCVjg8a|23HF2Pz
z%;e1ILUZz-EsTKSV7ZfTU=PoYRrKD-`IGUNFZa5q#j10kcMCVcZ&KzmS?%||FdoRS
zmX2=tXrCvv5<Iz~5mFEqU*v(|pBvb8Y6@Aub{J*mnwvyhvUGXcwyBnN2h-82(^xhw
zcEvWXF*z9-lgfOrJB%|bD)QycySl0~_iDwOVaH&@Q0cA%8NHHSj$?&##P$otcg-uf
z?6RfrAz|U;(QKvNB?1p|m(>8h$wSGZGnvWYInaRz@+*m~<PS4Ic}gy6yag8@m}K+#
zO2<^Zv7SzD*F9g0;^82kyPncssW01nYXjYz&pmI3?eEwM<2s_MdTlInhAn7pS0?bo
zL9QCztF|su(?s_P9J<^b8$UGH`gvAh^Aw(Ge6l$ulG+lsO29~q;9xG_^mbv5)q|({
z{0v7@C1WkMHxDWX?sT;EY?vD-#Ii97dh2AGaUVhT+8-8|5-J0X-^fs>V^Y{$@ZXxl
zlBciXU=<U%XFgso-^$Zc{kF13pip@or>$kJp`e1nF)AdkBSF$}eY$sL^jh^qyqurA
zS^NUApRv11A#D&MBjg`iC9HhzekZ%hj$b>xx+|pwR{LnB<Fz)49_*<iRs6uT)v-By
zq5+TTRq_k8=2#oX<wrlO<bP4bk4#~`Zc)b9UW;DzeqZ#aQn(?-#;KCny5)>c5o<l>
zGU4LfUWeCxEyJdO%?gJ*3LKrqHB4R)ixwI=3)uBL!LdF4&URRSdS_tEn1CrW1j4RI
z5_wYq3y^Ut2DbTebj(i#e?!tStC(IPQuNHK^x)k#%;-?X+M11(R*XV*`@%WBrZ$$>
zcX__c9zoht6*=8m7PFhevg>nSI}>h;f3-45AD7c?eBPZQXte8$czusatRH<vG{=JZ
zriv3HmeSL~6S$n2oz$~wnQ562ualL<k{vDvhdY2cL<_bYeXl!9Myy9LYNl5iRJ!gZ
zi`9xfM0L2d-WT&I^=aN`Q9SSO#5NuNT`Ks>*SR1DiBsqdMy1FMu+C*v<IF$dHrO!+
zBY$^-U5}ufM^OBZ$YON&!V$#1YuUPJIs6SrbEuj>E2GfWoH;>=FncT-8_O?{I$skl
z;kP={>$bl2`PLD{u5-P<U`@Yjw_fIux+rggkc+3Tiw(Ql_I$iKR?emBX7%AgdGJC=
zL1*)9UYzvS1|enZW38P3)yLD}qe-LN#jXu?LH+{;i>5@}cS?(bDR!%FZyo!sbmb%H
z=MC1fp$5qXzs?V{cJhiy0{WSU<^56*IT)_{`9Rv>Cwcq*-&+O`%7%iG-a7ZZKRey&
zXd!e>2gv45e)&54t@PTemoOm~CKwp>X=!_=wl017kt{;7t+sTBv0biu_fYWd+PSLg
zmDFnuNqbiIqr&yo%S{+qQs+0BrH^;lr;1AT(~YN=<6fjnx{UYi@Jvy$OI~kIsqk}O
zm`(V-cPNU`B-<NU-l>_#p1aIsHUGAvD{!6YO?ZA#Fe&*wO=C0l_o<M3>s!&rm<pMt
zs)~C42c0&sZyVYQOZr0co2Vm5e~mwLuGSS6So3X8CfG%gEvsa9eSDH|E?Ta-Ga>S-
zTUGD%c)tesriyc#f$IZ)PE!L;Yb#p>`;DNgJqhz_FV>W9Z+m5F8JA!dzxxF0tQ5lY
z_Hp#Omex?-7OU|-dP>z0-`Cl)MpIQbF*&;=PZ{K+KE7O#@@8G<lDSmn*g(k`L3Hmk
z*WS6vwsh`YHr$tQgmg?!>jZ||T_b+2iomlO@N8(tW<Q`}x9Nsl_F8&d32{*Yx2S;0
z9A7LkulDs%OK6^){T_0sdgKMpzjbZ&n<W4A=wA8)NBmqU$22iS2>;!6W<0V9x!)u-
z-jwx-asru1JoYb=<eF@!gE{W0Y21?Bx2a=j3gj6J#M;)L^|}cv&PFc_Sa2ZTrirtB
zi=BpXUc$hBKOf5f)KOO9lq>lfAXkUTiu;Qa5&c8Jh$LGt3TS2WEv9IgRHojmOwrK4
z-zQ+#)9=K0U83W5w~1+otu<H%+vbOg8vGLV`bi~aD6NWt(I2{w+|PR=A{-3$H8_*a
z$vlf5I(X*BA&n8wm5Z5?KpJoV+KCpsBATT|d45)`I~xcnQ2M<6vFcBfwZu671eGuu
zEs3X34ye1bim~MmO7@84?i>(LK%bHU@=Yp2?ON}<ROot?dNeD}0#lGz>ejr^rr699
zgvk0;il|wh*wJTC^N9c}Eu7;HKS<~v!|m>LF7pgDk2NtWi<|G&r(4l@?`!`!qts2P
zYujAec6~o^(gmC_KklLB9uz1)vg&z(W%Ivu!0ZJ#vMqj3-#Q?5xG!dN__;K^E|}+_
zi8Qj=g)2u;)%=~M&rgpa*M4wYhGvA~;_hHT)z^@b%~#v5Ew8%45N}R~xc}D>#V13U
z9S_0uS%`Gy<-jJ=vFSzolZw{b0jd8zN*_FFp!X-e7()NEX6^0cK|%M1lgpRge+(Be
zdVHV%+M&fRFt%5?J?N7yS-nV72jK{s(7w9lZexE~>U{+5`aqD!oMOV%zU0P(=z|}i
z=HgZ0pVR#jgeCb?Ssab7qqfol00&;e7OQy1*#gEa28*V+V-RCFa;aoM6JVJX17Ky2
z;Up-<oa}}M@6}0kHp7RxdmV}*Uz6Cf=#8^PXSasFwR3WoM0^(C6YMY^j_tz|QK6!y
zN(ePb^5SXTi;k2}3VY7pLnR}vC)CPe5!Kvrp0$Qrg1?(zIG5A&^(6>NKCsuweeLi7
za2If$p#_t>e(j9an&}Q>2292cSo2dX;`}VI6v9kB4#mvMk9r-l-`k4y$0TFA7B4V+
z4%sr3xH1Qr4J|Qd(VU*gPqQ?#5K*KkjKrzb02lTztA|%MjpVCnR(y}3^9L+}!)RWq
zVT5n6?Y>EH<r}GB=k$Z}gWEFD2a@>yyY0NYzwkcluxwH;SO+0`1ieu#0{#C3nx8j8
zp;gOgjB-p&;%rgq_VO~m)|eX8xDHzrBp^J{0NI|;N3L2t0ScgUcou!1qyR{zR<ezm
zL}#xZ8W6f8v!wT4in6`~Fz{Nr9a%v5+j-;TvjookWJtz@q(fvv5fNvJ%F5Zm_ntZ9
zaP6K6J@T#v%!!^+gR_KBt=5G8ftKL&o-gOJG$JBuEd<Y_9Xx-<y>LZDUFpu<xcA=X
zmZ=zt@UvoxB4|*E=9-a6t|gw`Lptriq&gEEt3@3K%Tf{nkAafZ@WjEh76AWyOr(?m
zDp|JPu<vpqkApELmOpAy9;m_dV$%B`7n>x7thy~AN;#pTcwi-N`}zf#A3^WGb6<%1
ztIEb^IiR?zK>0s9BNU!cN!Zu<E$o&8>sHMXRQlWaXQ%Yt?^nb`PbzFbPXGH3^rY*a
zuH3w*b9N6*Vc^e|(n`WX;6<by|DwkcWOeFY<ACDk3dQA<{g1QI|5~#Z<;gvu6<5+t
zX#O`2e`>}Ymg9xygQ3pL?>lXepcg@mvn5|3=pP1&br&<W6LR5zg+mfVnlb<iKiOzH
zX3EQ$<K}Ax-Wgf9_lT8O@Rek_W3lkKY)3<D!{Ipz=hTu8=Ak#<&R(SQes^(-{hiDO
zz-P=_0ACi?X}x@{3uHbt1uSWvI=qHoq|H!HK6AeEG?@}*hCe-h23QytAsLuaVro4g
z10@@!MvUZ8tG(u=Wt|;S4vP$v0pZgEdQ{JB4Fg;lEtv90j4?1I8x36^-FaHfv;;(|
z*uA%)lr6|+*+}*Txd{T?srR)wrSJ9TCY2oru5%GEd+lV6OSy`-F7U3Kv?BhvsIT<+
zIZ}+5^IVo1@Ev>cN~5*{+22m=i*ESOZONU~?4PyvpE?_H27)L<!IF@)ojvmk#8OYT
ze^_nOA(cYbPOw#Ti0YZ;zl=OtHPKES#Cm>g!OktVHvMruj^h01m=XQJ<79Ys@M95Q
zmYE4^c+t}V6v*O~yOdkbe=yp0OI+#ib*T8Yj%o1R>*1^LbNcrpoKGw3(yCB8hCa#3
z=i}qOp!6h5i7!6_<_NuVJoht*F=t1Dj2^ycut)|(X0izbBHM{R3DAxK4w5+v7&XE~
z1d~rxW-h-lJ(}5bDYfqkiH0DV!?QaBCjiQ9me&rw>Mu!zEE5Y$eVV5cVQ!+ze+j2`
z{fRURoJ_e)yUUR5q_&o%b@r4DGg)jWFy~yRV&~CNM^yj37|TKc8_gHDL#AE%paANV
znrNHNuUNjb_h>zTkm4*^&OagnCsZUm^aBXjds&O<cWaPMYs-g6QOLz+*n-Cb-_n9h
ztFFB-`kC8rs$>CICzAX*ZLs{_;d0)5t#)4i^q1M)5^Brfb0wB?(%dF)pR;brt?$*Y
zyRWXS+T%OY<N|%QrqX=$nKp)Z5)Ne+qdzVP@#Q&dmsa=%P*wO!f3IyEo~aegW7+*!
z<Iy^f5pNGZf&}mctZl3@VJ3Drjj-l{Pv@)0EG!SdTClYII5Foj=O0X1jH-<WkhLW~
zFo9+`pt0Vzbt1Yvp`!uSH}SM|W0_wr<J&@s4tL0}sfv<}j^25Us%d_%H^%L8ZRr8$
zVC#pIed`@&-<%F*7eD2->u~OgzLD9N^4*QjJ6}#<W3sz!G9@?iW|ybu@M@dY&w;OI
zrRozFN=D}cXcXQru$6cPN^cCL2xciPF-?TCE~{g_edAqwu{OJwEo-8M<3LMIKeMnm
z3#T$n&}i$OB5sTjSX@kOeYo{p{Px%8gMAaILOAMkrx%x+-uP?hy_UUNGP$tV5^dsb
zK3Q!OZ?R{K=eM(x@Rw(>s0ZYb%V>z1G<NmI+1mGd$*bCXj@Bnm#4V3Y-^2xt*1fUH
z@^Ei@xI;Eob*pVe&LVY+=I;9HR+B2OnYj6)K_W;}h#}B-I$CPgZPkgzt>T8jvWwrs
zdV{NNNNXBuV~onx+nAl_Swqs`K~3|xm%O5?OtgCMl+<3V!j0!CHGXwt^K+lmN|X<b
zdE!3ldr#lr9K%ee+i$6|OWwlJ&DDPDnyb25{{l5FTYn|^AQ|7`{A?&V;s{dt@*;7?
zt@D0vU<H#Xo~gj4eoJ*H{nwqJr&M|3EzlzhNFDC)LUwLbE&kE?7oQZ3f1jw<R?yzc
zb2k$iNGC+~r_U~Qk<tIpSK}#26V#@Kc;sd4EM2$-e0VYL9>6^jTxLvk4kkmDn)mGO
znwcd!|7;n0ed<EWt$T$}%T8HShKBLoKaISQ2^_zLe4K@6i=n~{W}^(jc(@}-%5x~7
z%v2*jLaX&W69+kY;+)waJx`qL7oZ-69pOeGIV;<QP8|rjBfP~Lh`L7ZD|?Wk2VfAh
zt47XonL*N!JYGNrdM@SuMpBgV+|>RWtYXP3?meja-22My?|Vy<%3i4QGgU7R)Kw<t
zUJrhF?&YLNvKH@8S+{}T7&z!MxY4{I?E>9@PuMbqYDJ2KgV-qi_Syd=X-l9Z|Fl)I
zm)k6e`eaPJKy85!_V%-y_4M_aC46qW=*3bmy)nJ~`RO<zPce93ndrVU-J9MN%oDEg
z;$Ux;3W;w{*A71Tp2o84vAz7B)mU5Mq_#5MPrBZRMNWFN0<@eQ)3M@csDti<D}S8+
zfBKkBX?6dfZ+Ow~6z=5Kmz&egNWWl`hW(_bb21UCKjcFGWlH}$LvTymtb4SFm^BgE
zlyGc8iyw2#(-H@vQ|W&#7k&Q1>7gJt#C+_eJl3g-64#B4<Ry_WfoIp&qP#EyTNrVz
zur|V(f@o1Pqz@l@%?SQ4D_!hXxd5s38C=Nt`8C`EFy7gRyj*I$g=+bkp=H*Okhvfw
z@DeOcg_IN;$$afNQ|!iZYG@aU89xvsNZd$7^QjSA?mEJmdOnOsa(*r2{4mS8ZA{6{
zpIcWnW^M%1Mg<e7<ONfDwv`F$d6siNx_}k6=X_K=dK?C7Q;96Elf8N+xT%e<N5_kf
z4O>eOrVd!nH&JP%OQv^3U+#_DP-&HRf9C94?KZlWI3ZBg&DDX!M81p_bdZ)lFb~Ft
z6iyTG^iDjORq$H3)R=AR{$lUrTt(2~VXzDirrm{Z<UO9crI7)ELa06Bc^5ZYFjR}#
zkn+A=D=<;>9bXQq*vHeen#;aD2swpWA$0Q&p3k2OPlv7Tx-{XE`tXt8KDQ*yE5C8^
zop|0l71h3bz0rTu(#R`SRe4a}7};Yv%`HFV7tpYL?&|X-cc+1|_^}|umpZ4+S^waH
z7jmpZI(;9fDa|F*vm11HtUfn2C18%AR2{_>r0;6KGj2EI(5Ee0v${^TQdTxBT_LYx
zSM${i^Q0;FdOs5vbBp=)x<;ps&aKjy2bWADp_7!@zktM#Jr#ObZofg&epBv1k<vm{
z5~PrfH>3L|+qFK1RLjNeM*}y|CwcTxkdcD+`c$8nTorZjg&|+JPr1e&HBCC{UF*~L
zz0=#NyJnic2b*=TJn(%XuM?o3BCj!)=Ipmv(fh5}A~}U^KZG^md1{?p^7#C8Y~YU9
z&?Xy$h2YXR;F)UhZ(t7?o)~V(3M{}?l-^zIB-AThpO@UL5b&30-q@*Z*zN2PU#42S
z;-@~6<V|JKKQ%e6Aa7448Q#+CGSU`(=#%AR<&$%udJEr1==R(n-IokYiN&z2f35O4
zj~&B>_`HO@v+%@s#4`mkIqmPH-NJzg*7vdln-B2+1aUbP@okL3$&lXV<%QzBAM$%D
z_!j7aLPk6qdWDp@58{Ouq?jQRvdDc8H-OI2(&;KG(d*J0z;)^G8f7{Z(|U@jm0uDo
z1__f~dSd<8&>z%@sBBP<0tpx;$%6sFS0HWeCt*ixpq-H>AcZ!ulBcKZBgn06DTpY#
z%#iJ3T|s{(CZOaQ>^;j~(U@n?tRcSE$08ullcg@tYd}4lWv^h&tH(#heJMB96R2n-
zQJX5yr2|@F@#b0^oO|uFk!`t;{;rY%@gIfv4#Wt_cYvYWw(oCDu9=&t-)@e)9EN$Q
zSsPj3fYLdFTv$~V0vnz7s=-pT`+SwlavDg}Y<x66QHke~Wv#;wwm5IEWHsA@R3EUN
z);$d(=3-Y$g~GnGkQQK<>O0eqYflkxO$^*7)_tbC;|_d|pv56V>{XHF3CRsY&MlZ7
zYSjJNgdMiADszWtNNT%myt(kpc>A&-8+B;{1|XvYw|4b|v~`wMe7D^p#tbo-RC+aI
zrq+cp`(U<K@Vu1N&5b*ch<+RqKiK)d*@?#cPRv$>sA4b25=PUt^$#q7v%-(s+}A82
z<VI;`5OoGb9rVLpLHqeHpZO_LM$tb-WBNI1XJv|SW3dK$ocX}mmeDCuP$<zUfix#2
zdXN`+noI?$#0k;U8AQN2Kd2SHiclklA+I?B9awm*>>ToscM&~mqmf*C;&h2sKXbW@
zpLr(ElXTYwk!^ruj7w1M2xpU?!UZI0;pM5Na0$I$a`o)ZooyTbDN$>SA;YV6#hR9_
z9-jM0Q0v!~wcWwMbKO3<-=%L(rXw~(ntfvn(u>}HQ6okVtxV&*(j>2LzfVk@j5oUG
zVohSB3C#}`4BrIQw|S?>Od@j=tlXnL=$ERplv)$C=9k2S!zg77^0XIaGp4ea>U@}S
zk+6n~@2l7peU@ZXHdN!r$1wzai1!UY*$Q*tj{x7AL~T{IwR>)xO*XV`r*X4{yu%ST
z3vHe28vR?eHncl;YNq2&ET(+S=PO%MBI&WXb4+EQT4A@PK>B6BsEt_Aii7IIb_con
zjEjf(X)?uEO@oJjK0JbK_Q*qQ_Jp>`k~>CnM(9`;{DKsJAO-;pf8MdyeW|L%qzl=@
zgz?ihLYq-1ky06G`Xn~$dmK3ZfANr4`a8>UY?g`<#Ac&I|35m!SiK!NNFod;R8-fd
zZhF98Escsio5FO)^2@#<n8z(%ooY^?=@U+qt6p0x2|k`%_-~|`u}#*yd0G9enH~3u
zIlsE3iN|vBKF<A;f(wlf8#}QWHuDm<RkORRr96KgM~YXZ8sga&Y>Ghk7v{YCyi7FP
zdH34ZwQ1q_dH<BXoTi~Mk#A|#|8j$t$;IF>OwQz-pMRsEAhm*KbvfbLHc!Y^+q4j!
zG^<<fvpcWmq@;GLi|YduKd!zpsR>-~2wZh#({p|bYg9d%C2BmHU6RG^FjnjQYaq)1
zfn!0f;3vz-!mfzSr}Vl8bSP|LW{MKs@Ks6>oGOg0aClAY&B6C1A38(MiRH+EB2F8e
zDZeC6am_?-(h;r)2ZG1|)G;FS^)pEzj{HcFE}Sc%R^}z#QUesS3%`gY=Z8@=-2Tce
z*tg_kKbp0|NcuWDaYSyFTi~PVW4UOBq68)^7SEn_qe?xUGDI<ABKU<<YfSYh*2nGB
zgH_vgX|HWtnjzrY=`2t8a*wGG{Pg=^Lz;ej@i>89TXLVr{eamM7b`u}UaM_>;NR3Q
z^xFY}y_VSWxuwaNW~Jc(I9l0PY8YL!a7);hNzLUVAZg!|f`DT=jB|0rcm3RkxKw%5
zPRZE*VZ6(7Ztq*g8Vr?{OxuCO*hJck;={=79;P7e{dCEn6iZX1*6>1FuIgjr0V2|<
zj_5IBb$N*-gNtCls5P?nYe&m)>wOhBkeZLRYrQw_X8m>9hCu{V|C*WYOq!eWMO~;n
z;}jwk-t`kmkh>>65Z8MI9Ydc9<JiBdyfftg@cjJk^Z22e<$3Hq^)nVrsxV;+d4lN)
z>>!0=a^eUoqSh?OH;fWy8&fbv0h_b4{#LxQs`-oBo!<y-E`qT|^`g`?rvm+K(plQ4
zz8*NlRahZp2hv^V_B39OFS5l7rWDjSG8p;fv2&aI+}JQfCs=tjH|lIKCa-<;TkUlF
zZXWb0aB>`1H+BS-xS}llzm?{U&TiHQOBP5BrCAXUYQYO1`#dyfHpX5~F<PZFBAdH5
zQdPcvo%8c`pSw9L`mLD>-7u!UUQA3dizQV3-tX?!P$m<dx#eTljK`?IZD|YVp#+Y_
zp$QOlIB>XD<<XJ1)j*^Ew#)NHkfcVqM>vhjSYt|^b7O$>o25GJz793xVLHw9`r;83
zH?uaiTcen?h8G;fN4t4jQ6YWnWm6|-_fnUDuJ2g3Xe-_ys&lFT)O0nyU9kHIn({6G
zy0FxA1Ywfe64)2y6698@ch;Bvv3UKu;vs=e+~x#}B5kYN3%>^mlKYkT9Ot37!;r2{
zhv6|vMRxnm-ojK@p(T$Eqt)+n^$km4rC&PQZsRk%>4@8~sOewdXmIsN$X%p%35$K~
zxPdY+$33&HtHUhoNC2?*`5a+YH2p^V>YBFv)m9V!9Tr)iqObV#GJ^QUz*^T+f(raZ
z&z;dyu>qeZ=Vc$4L$CFqrS<mc+|}UaJ6m8K{n&PTcKw}gTk#Yo&9AAnv|Hj3lmF%G
zoUi-%oYczXSN!yy7o&MPZ(DjF+-dGz9dBuQ)Gu{M{Mz12|1o|!U*99BMka7-W%AIK
zt#3~DR>@5DvaOeS;ENy&Jj+h4d9Ku|kI2E{W-?B|c4lMOE}eKPyr9#g^W#VN2NS+K
zW00G~f1p{!m1pL$*^pseoWVU?10)3;qEmuj1S$Ho$|}&%Yuz(&x`-HkrAKJ)C$CVU
zU|9p#Lp)`U`Q`W>nB;4Y@R%BUlb9L?ElJLjY_v_phuLTWc)y)sEPY}X7t$*!()TM7
zJrU^!Y90)^0w0Y8%Y<F5N6{ZmBe4J(YMLchGNN$6UTc~rzOMb)QV{7bE{uE{@zH`?
zK&^0E*bxDm3_SWQ=X2w&sV(}JYPYp#q<ysKOFfsuFkZ4H0}KKA(WY85g9&sjF0jEx
zH@mN4=$6RHhN!_O<2DSkgDp>_23uNyMYd)4+UW?JCd$3dxWFt%i6;G1hIVHme&d(a
zLUn{rd#?E^{?_u{er9$4!|V}sT&4aEc;DFAO@>p`yQaqG{g)E*@VzB2_a8JZ)muGJ
z4c{Wz1v_EBPNoV5=5|Uhv`n}9nr<}{_p=ui-vo%Rn}=MU;<<BBF_fM>@x9cIxb?a0
z(}PXSeR-XB?dCoE3Po|;s)C+3`-ptfPKn~vQ7`$b1)mr4HX}6pYq75mhZhJPZu`by
zh@i^jAyRSrBf&Vo=6?BtyuuyzK`Uo(`)}2UJnh==_MDDKla0=Ma}d2Ajt#go7p&*a
zIAU=;G8nD#WHjxGg2g7A`tf<TLI3pUslRUx9RGsA>;<7Wb;mQVo(pgtT$b|3y<yAy
z`_}0<WX~;@eB2*kf4?M?HnJt#$yT-)Uhsb=@&6Ac>PsRkWfe>Cb=_WLLdb+XbGgCk
zkUou`=~m~7;P=z5-*2x&Zg2h*(BET#TCV;2o}OM8<f5zS>yjz!iUY_G4+X|71Ij1D
z!8>1~YQ$@(&{r|}zkwIEB)Jf|!ZklJ#~8$5tv`GcHoWHY3u4ki{c7SfNzN8-fe+QK
z*^Yt$YY4j_zRq&F!+^9~s9%k7Yw5j0G%>+3OgaLjo)4tGCQ?sQ7=`_48dDIdCkFP3
zRbX*g_#UW%?3TOwsKiPzL|tJ?5RiKx?d4JC>73p?&!w&bh1s#aRN34|?n^l>BkFF-
z@4hB`S68?xpV)R6-sFj6qs~ajA_z0LSg?N20<**2&tec&9Sv0oQu<-0u}1TBS4w#R
z)@B4Aj#g65DsqL;b@dTXj;`uX>3-f+f~1|jEKhljE4yL5s9^AY*Ys#Bgy>9FZ&Q|)
zPRhZJb*uOnH6DHzBTV)__Qq|Ptt1mgVu0eaV8(E(QdjAUsDbnyj9G$4-izQ;owhXK
zwn*nTu}?Ghft4&`!xpV%eoW<fM<Z13&t}=XD46nccCDGsGD{kV?i`A$n(hCjD9DIO
zkQ3=&t-4xTlSceR=yU(}N-nZ{y)%rhd|c5E|7=yWu6J5pAbDdKwqETxH)f$DUIc4Y
zw|(;W`VNA`acSm$6X|RwchV$1U@q7u4-Unlkgo*TPMwb8Ay;LM5RYNBq#*VE(q(t`
z+13LIf1i!pAdVQ=H)$+ru3+pfff_UGTOB_rZ`asuj0-fL4*7k&YaajZ?v(h3Rf1QI
zm%kr=23k!E`=7hv#6o>W&jPPnXhc45CNIRBNzNMyMTGJ~e82!bE@0q7UPP-zo<<R$
za=CNF6#R7c5AdoBh|bWFTy2xUwJ>o>RnyHu53w2<EtuH)vLIUEqcIDx8*m~pDEwgE
zd4XHN23QhdG~zXmVKovM9-=t6z(m9Zutk}3!1iF#9}SD`tVaRAc`(F11qHA+hF(u2
z^^Yx*g*D*Qnn;T-Yj|R<kCAoZbZ%YotY=obCon_$wbVhqwX<Wg`O-f6+6}~|u(%eO
zS2eMW_8kD2pIQZZrOZu8E5W-1=OP(oM^V+8QnoA$K4p;?gX+0E8vQB|=+I-Yapuz#
z|8Ymu;Fw*;v<=DlBzy%9W8ba%==7anp=L!T&ros&`?abgsD01r2>P}ja+su$6gYJR
zacsz?QpL*`gbPY&Ti&l(Y0{Sdv~>iHr4MZ=_Ks%Hd!$$G*OzwWEPekxwm(Bt?E4q<
zlQ@oMZa;ltzfS1z)<P!+Hq9Mqp~@I=Lwvg2>`?MBy~~^C?v}BWx1=P)<?>~2lot!|
z$|;IBr-wZ=uS-&&S#q>#nz!nhn96go>6v)+Wk%5n7wx89x8=8|>a7)c1kHZ?^k#Et
z=hkq|mV$iTo}KT;l@4FjM6^i9vQb;z!90F0n0=Mi>Z<#9-{suzJHdyvqvL(E4_4OG
z6m_;%j-dHHwyN}3{%q9CP8$}#^|{$RdLd_#gpW5LG7;a~Pn>fK4*IM(W+@r_-BXU0
z$^_pw%$fwEGhYdU!C?srf&0?h+wOPdrA@x|t-HE@Q5D){UtHK)#;m^!5*i5H#B3^#
zH6-mH`a!Zwua4#Kq&PL=cO78QpvWU=-8bY2(zMcS1j`zXKbv+Fo(<oOVeJ%jAjIto
zzuT@l%syPsV!wWHtKG8dr@avT*nY0%a@@h6>~fpte}##;{%rzN_BCU_KOvF~Jj@Iw
z&&Yg|0azboavCs@(V?EGf%k?U!bovS@()CyKAD7pr+GA#<V#a~$>sZ1Z8plmOE@~Q
z`N}BzmO88OW2ssjOj5oBa6z~908STf>18>V2f+$qPaJ(>txY7-3$Xt&bHn@ZdM08)
zzcLas1C5#hkOBQ$353WHoYE&L>7Mz^B+O=-SU7)497s<Ey%Dzn39^kbn(q~H0Zm*`
z;x9HoCi}7kAh2zXCr;6^+GE6}mnD*PW&Q7as3k;g-Xv9LI{hAnS_TUFaW$$H`RQv*
z6o#!;Bznhs`uQy@C$3w6x{HWCej<n_KSxR)CY5m!V^M?DUXvR~5PmiI%Ibn2tK!<e
z)#Ko&s!CAEjj8FFeK!4#YWv3?VXviZUzoq~!|v7uea_k~!*|bn%y^_~r{b^7d4AuN
z`XrYZHZ9n-Ce+Rro&b}U6)KpD?M|RnfHj3IEspP}EPgHv&{?Zbr|RVzojADFAB%f*
z1PMtT>i2%8He8o%YaH8Se0>D*x2-5>Z7mNr<n37Mgw4hTTh9e>2J(d0Hrnk-jx<?s
zrBC@OQ2kTyAQ5(9FZn;d>(F=wcC5Kp1-C3Jwyy=!#0J%E2{{}Z$9~zps{jW1c_oc)
zZYO2(v&%u`a7f(bcXsYQp9Ra_{ZgK{8y^B&h+DVD<>dSR?M(jIi7Z$Mf9D%e^v(6}
zu>=3<cm2H1s6RyWXl2{@<L7^j{pa7arpdkaO)#&V{ipGz(xk?J{K((_o;15=_(uz!
zy9$?^$E-yE9{SYZlU7KgNvuu#@P7#M*HipoCkUIp{SM<4jRpSZ#6n|Ugq61W_wRZ^
zM^Hmvcc%N{%XyRWcOh}<&o{PlaUnM**?}Nvde%&*`L1t;iwy|D(i{{@6n*9nv25&S
z#e~w%O_>B|e+z|lwsa<3)XIOmCKUd!d6k)`YQG@q!E0*tx@5o<qarx+$se88<;X_C
zE~0+{|7wX<QMAXOMnD)}8GRb%r~(YKF!}@Mhfg<S>TPs;5R=zjuMovzdRa8xyjsOC
zXxb<B+`2L!EpST@m~3-5R~FOAT&b#P{%FDKuS5%b77MrcI7Ur3ePGOiEe2~w3t*Me
zn!uO?<wf%A)<l$?R0<+Wj#rSNn+8_XG^TN0pWXyTvgD?TMW*jt?z+}CboI*?jk(s=
z8Umb{r#(A%0ff?eYt3~B_%CZ$(Jei$9*mb6HK~4C0-^`SErPt!j0_^tTcXy?s|z-~
zi#C#U;uFAJ*Qd=lvVxDLNXxvaOY|?>>`uY6-+^|ffBj)AE`c|gyR7R@bQIIBl(9?l
za)geh!mnO`8xyh_dsp9T&1zSTc&W|mjrt_FwNILNt3Q^e>$$iDiEgC%=nRjs^T6@M
z>3&cB@JN0P4>v19`c8PdzMo%q?LbOjgP_5{E4GUK#gf?Y*D{vz>uw{2>q#1Mu?=3~
zX&M;dG^vv;mH1?@-nVgJ&luU`v9i9pY;g$trXSLOrDOubX!y3H1K-k2XlcVY-<@n`
znZjS#m6X?JeK{;=K^Y{$((98y`2rPucx7iX-Rwq_PNvJwZ{ILf*hPid+~&fBg4zAx
z^ysze7QegI9eyQxE^Wc7Qd_Rho~c%h^n~=V$n;pb6<j!MN!kp(;p3h-)nIaeASGn9
zJ$WmP2r?!eJiI->uDDI$o5CfGn*?@V_}rLj()43hby)EXqR}CG)tCpmEJ;n^aPfY&
zaVh;$69SD6A#Weoui~=jd}|xise{v{(-}NGgj9DMF*CD|eW%?MZKI8^j^T~{o8a(!
zY+03cRtk|Nv%A`Yg6G;g9-DmJjSitYSH$COx%kO41krGg8{;C+Xgspx`C>FxQc=}y
z-W_+YXXX2|!*2I=C;xRH_s;>n1z3<{G2r19h+6H$<TR(p@&^nkxYC^GZjhM!T-Txa
z_Gu~1pDn$r#(#+|ddo)@BP0nziSXux6!5(q6HMo`rIEl-#ac@|`cqUq>~^c(2{iD}
z3-ir5LIQVSFUw}ap&QQFPe(F&XqGrMl-uxqQ`-A8)e$5Qq8ysl+`bdCJN6yI4SSL|
zaqQa0rd8bq_Ib|U1gFkUe0U`F`I?=b`-$TsO9Tadrn>FX?DWsw*K_qPyL{!725kGa
zHKnUXXLqCJeZH615i8vB^Jz&3wtgQn{^G>HV?QGWwO=a+5|Uc~YwV}Xz}W2_-&x*>
zeDFOBfJtBmWNMM8b?F#LpG>+0qqRYD>7B=-CoW$Zy@W;EoVU@nz3Xxdh`&j$aQ&Sq
zmtW3t`8HqqBy8=#l`HzuhE*8dtZ9=gmH2f&%8@(q>nusw6TiM90vvMUB_aZex1Ioc
z;I*Tsg>Z`<Xzj*MpaE2g>Ag}$g5_u%)@u#`jgw&cM`L3XupD#*VBHvXyi6pLDwP1{
z3mXndGis;y^;BZP=b2_=j7_?8H@5|!50G-TUV62Eb?ARzcEP<YRR(}|N2j=`!9^R1
zpG#!ya868R7u?DsS?hA;d}Oh<m6rz4ZcdSTg!sdSb^pZ;)ueH^m7Sf^0HFfKgKCfU
zsW#arNtz<c0HdAjgvi`=H}y9BW@%=K>hB$3WoKT|KIPgo``n|Q8=JVtLPe-k`a%9U
ze$6iHT#5070QO~t_<4y_C34@bw3a?M3ZYvTA8cpg%2LRtd`B$@X#CkE87rGVVJ;&Q
zs1hc?3-t0cC+Fp~m~Z+8A2)`dT=X7f@BQapR%JCXY*mj}f(ODGb=n>W23D~8lqcEP
zFHJR#RRnD4BOduvm$r3kTgp}Y)|urJ^6)9tS#mNZ$@cDe7Vb-y-%vJV{Zc#Gn?bX~
ztkgjY;1wcOi{9zJ(eHUIvvrDc-;W@7`+@{E>5<@|_0jBPT=)E87$U*ZW+$4kz}B>7
znIdROoT(Ox#lXNPhn(CFJ}&v%BpjsgfF+HD|Fyc90Zdy64R(CqH$Wq6wzdS8gJX-$
zdBGxWqqv?XH7$bg`&KjGF|*N>*`2efU%^)KYL9cv)gnPr^4`kk<(f3n!-B^~Q|Tf6
zaS7Y?djrY-t~oOSHVFyX@dmM}Zvf5*3c94gq-ErG9^jjvSIGGV4&IULS@zNItI6Av
z5!2Wd-p?}}sy_&E@_4WjWJSZSCHjq^;1V1u=iWMPzXWExy}xF1m$)=B-Dn?&pZqMO
zj}c_Gckp&aex3Fpq{LRN;!_CM*3B!b2@+BS@VTuS&wGpd<r@}4u{94?f;-xV*HdyP
znp4=A+R*q|_RCi>%eEfnZ353U-J;X<Hd%QXY3w&xT`j`ZyQhT$uu0%USmR?$>T&CL
zTo%W6-}rx;R*%1Y!%oj6$cTHlL@{~cP%zkaPzXM3E?3VYsvxM46`8X%K32Y6Vk~Ge
z<^1ep*}7|R>P}_LB!P#GX|=Pdykfj_-2Ln1OnLQGyhvMWY_h9tlYFC7f!DVX^(>9y
zf+62vZSN2*@ZL<Y7b|>nDi-!?dU_N@E#{*y^G7R=g!Gr1^lZxOXoWKbWp%A-{Ekat
zbBVWq>=S%HSAM7Hz!@Wih~56bdb`%Brml6%L%?c<q6Pw(Vu__1FuDsV5U9#gB5G(s
zA%u`zF{vm4fdBziv<Ox)2|<Q}X+#c!q$nXJ(m;p^LP_G4g7QizA}To+)6^$;EcD^|
zHlE(=&+9m2T*lb2va<I6G1vSad#!Ixn7I|WuLqxw>mI+LKL`#GKjUN$_XMR&(hg1?
z_{0nc#6H^ll=pP{kMpqPozv2LjGi+|B+s<OalV-4=lxkid3l#o_&ypDC(`-2^*aaB
zU*zQlrSC2e@i3|5eGRx*RwU`v{$HkN+DqL3xh`*iR$$hh+QGy6e%`L*P7doA{o_<f
zV%xUF+$U>lGJDOHIja5|>Vdv`W#i<}8evI%=kbW4sb?=jMshQrGoL=TT>1OK-Zhz?
zG41E#Is(2Pz2o%xsN1uQ&uU5>sorfbGgq~q9+zM45nb-_Ro<l(BjO&j`oOaNMAl~^
zZEe!8_oS*;4C(ei8k(BjccrCosx5U*^6{(hdlxT%{`*|h$wN4L|H<YPH58woXX>kp
z_oqYt8iEb!nEP_0ZsMQngZ&e5D&+q@gxdPFQaIj`l{-N4T3FWlV7%wI&(DK6nT_^@
z`(Hla%HgMcN7GlEA|aQvwhIkSuqkpEE}iq|#8vJEzVuRg!j0=gCvZq1iC1iLD{V^<
zdg#27L9E|gR+pv2`|HS@C0O%v>18rFd>K;LC(%>)NTAo_m_(n#qau7AAxV^_!-ALJ
zI|Ti%Sl9sANabbemq1ddjoq;fTsu!Z=h|USFA-K>ROmttLl=PTfQ^H>mr-I9eh1Wk
zgf_5YUlQu3G~G}U0@ZvLcUC~{NrMV1nFq{#K9u41*A5$?M6bUlB6EOlX743IRbKrk
z-cnG}BR`Zd6&FUm)j8XD?HfA#?V3)#(|RJ~w{L1IS`Ric=|Ailw2&$dGeNo7`vJY>
z9kVwhIH%6iU*>+3>3L<4+V(PM0NzIfdV5y4?#982p`r3qtq}KIynoa1p#s~^?EHV@
zy0yx0yY3`b>2JPp3#o~C`2YB;wzPqGWJT15H|juszhym^4z+C%vTcq=3zjQgtm-Z~
zvq{b_zFwVD<;5k~q3C4n*cSJq-ed^Q6&%^x-EvOGiei&J;kre%2Wt_zeK$AD77?DT
z)>GLW9ItrO@awLlTyF(pT($#7p)E+~A)<c=6E0D}VuRp&$nN#P5AkYuDr^~xC0Z60
za(mk5Eoin5fn0~~3TZF8u+2zJ8CqX0-0s7GO&-{Fjxl)q;19&P#>SN%Y<M^zmtTiM
zxMM0*L9LcGcSvQB`AbA_pYONTt4(^(bEp3-B?U*B%)E)7HJhdm5%2uYo00VXLAn`o
zxo0pULPcDbn`asC*u+^E->}Qu@3C*<_tY1e?b*J3sKaKUd%Y>_ZdQg;RHG8nkEzj>
zxEnza-ZL5#LITqN$7HOQP)^V5ueJ71+7RI$`5%Ay-{-<PROtdo)6uye>kZB^A1vKI
z&kl5!Hid!Sm7s}HJn=)Cvverc&qMdFK`EB#z-T&!3`m9g5F^%)Yr-KXL|I+$G7Mm#
z5<T++>~I%392%S`Qo8;Ji-^imAaz`mP=O#?BX(#HEdB6K!26Y!1nchT#3424%a}Jj
zO(vN@)u&(v6_C5JO}G^?243+GH1?Q4)0XLW=1GJ;sl?^KgyrjveGl*%MDeM@F9Sl-
zUhcFFg37#CR+KN2J@!<OXxdke!RhEb{I4h1zhG2+ec;8Ha#D6HHCFTJZbz)=)2pwn
z{#3uR`pR%6M!)S&_LIByCBN=m{0A1ghDS|Eec<!<6RbSy)tIy8vBn72#lVag|Lx@D
zX72lvGf+<aR$vhy3i{~FodIr(yo;HzalR%(K4K6q+WArNV*R!yTP{6d(?JLhHGa~7
zE(H=iAuc7cd)VlKRgUU>L-i|lQKR}`+ntR3XSjQBPQ}}`5AV%?9Jm3!XL+MlB*v>~
z9(^Imu@%IC&n)hgs`XpkbOH8+o7)tK2vDXsK<+Do=_*`(AGc!9e2WNMFXHR`;6f+Q
zI5(e2y(qg2?IJCS#Xb`I-p48Dj1IDEiztc26RW$s$R-RlV0q6hq9?&nn7L)q1F+f+
z{+94F#{=@@R?Kc#82lnNjJ3rbG$=!1c`t`X`3EbGUfKY)r^(x!yvz;6GiX9Qy>}QS
zO5p<oB=xGmi^Az55?{CkP9i1A>BWW=5?wxGmcdbAFclw2kFya@gNQCv(9plTZJBb;
zN(;wj`Rp|Z(e&E^_~vNqnQB}0eYD3qyz0H>0-L%aO0^e6twNGKURx30ov6a|kTfj9
z01xB_7e;^*UWXXxBk?-22@98fa;~1r3Dh$aOsY0uy$Ij@9vf^%O-UDz=&F<HdL}+l
zpTgOK;tr_Ims_9<y@4%L0eG)XKu_HT?Nu^(I!u^A1AA9!=;3&rEN!(LDn<9VXxq_k
z?v0G0(yYtGGQPhi&XuB&75neyLfLM^!g~4ML54rqV#|ndH#A*H-m**9Bum-n3$VH=
zHN8jV^j=WelOiDaNbfyX5APio&bgxGbK?D*8QP-cpRc{Yao|mC-mdNNQxWP<tT%*N
zc|k!kCekh+1ly{;bjol8o>XTRVl`|~ax=M!CG{9N3)zDm$75c@rC7^u0cen;C?&^%
zk^nC@&>}-_V<(ShcfCt{3OKHXtA=cFz75~r#$E(g^F;R{Hh8PxRzFd;jsQSY*}DKc
za84`0!K_8;+FjblR>;w^&m$M{8H-6?Dzqm0EO2v09H^xNr2SqGlXq-YW)Yie2ObWn
z2;S2EnwZmj`!97elq(IFrAez~$_s-jgRyZ+>77JrGAQzGvon%WEDO(pI_9dHbE4R7
zSS98~xYLK`{I^5xjnTGKVWAK^p~oh_j<9l}GkYPZD^`_pa+^E^y~(cOI^s#TN+|PX
zn~St*u2c>Him=v-B~3!vTDAu85a(*{JK(akx93k50tH({IbA^}Tw@_-5NkQg!9F@l
z@5$ZF<Y0k|QD+&tU=DW9sL@HNz$=g)z;P4G@ukUN<4}Di+Q9(y0J(a6F5sA;xlHm3
z2cHa^udGE$wFB3ye})qewA#?Dh1LFxD3tFCe*SoXsJh5bYWSdDUK7r>_>SBrVWhqL
zr0;@qsBBJhPpaTooR#<UQ8hld`Lhy-(=Rr>fx_E0t!FOGnXjE4RD%k_=5f8c-64M2
z)5sKjZat|jUNnKSjD>Jq!;yH1Lz6;<EoRV_iLWH8I|buJH3i{!Ig-u7c1QY^U7s${
zX6b_OhxF0)d0r^CBYIzaI{`Y$re)8>BU+IL_*I#Wh({===FGp-h^-q3lkFo)uBD*~
z4QoXdn$M&;(*oQ|)z#OB@R7+N*DADg`I|q9uxcqQY-u#5lu@)QBB?Yo8dNz!$x_O#
zj@bwjS$rw?GKgPAf-;f39~2BNOKCoppQ+ByGY%z$w8-BMnm0!~^?tCK-}O38^U{V_
zf#kG}4&;Z&DBKA!%$Ab#aSdog!+D5pFqyN&xd&K0Y{P`5u$(v|ilwr6nOdV~q&7=y
zbO^zvFN-lcZEIe4#uwK}^J!kv_efaoIMU5CGI5O=owx0F8-Z$Y113?!w!lM87#t#2
z2SG|6orZ-DeRvHxOuAORXku)SYq&Ef!_Px-A$0|Jfs#$B>h~%Qv$H=E85!+fKv+=b
zQWzyI+kUAwtd8KvNCcJ7+Awx4<Fp%E`AqX6r>c(QdisB=yt0v*_{p6u8p|F1@tc*G
zZw{B-GB732dU*#9?GIrpo}9~B();2)r`5l_3Cr8HZKtRX{I0osY(U7@HcB$KSh1SI
z<G#ZXOJ=dfriX<jVA?c-L#7?c<BpQndzPZ!G*>3`*|cT?+!=ACHNjG(<pYSm03!dk
zL&~zo?C%ExEzOQ2f%l#iC|M9Nf)XATAguK1D-))|<^{bl+BJlgo^*!EnX`N{2Zsm4
zugPr@B5k4Su|(3+R1y?df*kIx0eM)#cblTvmu$CMHHL+r$JlKZ6h;yD#kp@40@qa1
zRiFY=NFwBGkCxxrGRdzvyl?WLvZB>{U24#`9fs;0#5DDM|C3>HUIi><)Oc2Z*s%>m
zic{V6wvb3WqpYSX)o%yco1@qJU&~=GM|-N~hlN*x7;4>z%y<#yUQg6OkUrcmUO!|O
zR)UMuu+hH~pxq&&x|RJJF;`z8q+*18?}4!S{Zc)P2e_Gp&9>qzyUaPAdWRH@;89__
zV_<NCC^iMx$eW{~YYJ1z*TyN-<cSAD1wky)P>`%{4{>Q9Im|<=?oM-N6zlMjG!s=<
zRqyfm#{ij!-lwEme)H0`)ZOBpWbPlx!Lu{XF*hj^m!3}%=L8#no0Q1v6fUMr^$8(5
z+I?$pG=>lpSKMAiY?RL8g4LkV_}#Y3_Ag2|Ne(=}I&vn2H*@Odv|(S%V769vv79#Z
zXiCX7aNmh*pb-ePk3micNcri1OiG)A1%T^(!b)E_SyVu)0bL5W)Bvoujgl-|twYkB
z1!kd)n5)_K5UWsY*poupy7K~yu$dT0zK5`s{LUU%=4M=ue!z0PR`0n3g>~Xl;jwkc
z^Xz?^iN6K{C6%nF*(lETxJF<zKu-{>H7KlJWbho7t0!vYsX-HC4&g)W01PSwneNU-
z+zXoJ+M>az>>HO_{MtK0ej9zlITUD_4ceD|Rd&`8(0^to_{{JmC$U#Bth*Vr`=HVM
z&EeVK&G!bPlRFNd_;c~(%g>+s_!@qDWtH{H>YdDvoL}Ad^yOsCx=fxK(BAmNtD$T5
zmlFq@j2#beFu1DmQ~mg$-D$EWZuGFvCzqn4R+i06Y}o2Uk`5;dP*K?Gbv4$v4$hGf
zCF0xv{61uTXD&orSrv5CAwFyWjdq%g3EN^1Xiq?dK_kxEOzogEV2r{JVVcL+0><_}
z3dfPz3SRa#o-u{hn64jsly6e}8k}&yu-O)K*CEeG-+9+s@T9QW5gVHlb36~HOz*ty
zj8kTb>6!_-X2M)@zQ>gsYIHFH;+Mu!0b$VIq*Q?ht8<-CM*YVME!PJLqsz7KQOj4(
zC(ZkjyKrG-Ev3|^e|r<Hs!mW)m47iR*?(~ptrjCKg9b<lMtg3zdU*BZ+oSQ<9f!GA
zkJTH{Pj*&E=5Yy>qwsGINcQnyT)85{vuQHQI6P+1b4RXHm@A59f|q=4*quhtZRL(&
z>v^nn-uJh_)^or+E@Odryz34OB#uN0o(S8WJRMTjRPc<YVEo5RzRKyEwNGw$95F&u
zS5La_z+|Q?)I}EIg^XhDW@bDnbv>)rY#jp)wXm$Rx^C`*G0@|F5W}T4>kJ2+<K0Go
zq17&qOlp`pmDGVKqes*F7H!;{f2kZy+sA)2I%-KmZK&Pi!Ib`(GI>Gtnp!*1|2qj%
LN-9C&s~`Ub;nW<`

diff --git a/artifacts/tx-os/src/locales/ar.json b/artifacts/tx-os/src/locales/ar.json
index fb5e9a80..0efb5df0 100644
--- a/artifacts/tx-os/src/locales/ar.json
+++ b/artifacts/tx-os/src/locales/ar.json
@@ -438,7 +438,13 @@
       "groupsCount": "{{count}} مجموعة",
       "errorNameTaken": "يوجد دور بنفس الاسم.",
       "errorInvalidName": "يجب أن يبدأ اسم الدور بحرف ويحتوي على حروف وأرقام وشرطات سفلية فقط.",
-      "errorSystemRename": "لا يمكن تغيير اسم الأدوار النظامية."
+      "errorSystemRename": "لا يمكن تغيير اسم الأدوار النظامية.",
+      "permissions": "الصلاحيات",
+      "permissionsHint": "اختر الصلاحيات التي يمنحها هذا الدور.",
+      "permissionsSystemHint": "صلاحيات الأدوار النظامية للقراءة فقط.",
+      "permissionsEmpty": "لا توجد صلاحيات معرّفة.",
+      "errorSystemPermissions": "لا يمكن تغيير صلاحيات الأدوار النظامية.",
+      "errorPermissionsSave": "تعذّر حفظ صلاحيات الدور."
     },
     "groups": {
       "searchPlaceholder": "ابحث في المجموعات...",
diff --git a/artifacts/tx-os/src/locales/en.json b/artifacts/tx-os/src/locales/en.json
index da855c1e..58591b10 100644
--- a/artifacts/tx-os/src/locales/en.json
+++ b/artifacts/tx-os/src/locales/en.json
@@ -435,7 +435,13 @@
       "groupsCount": "{{count}} groups",
       "errorNameTaken": "A role with that name already exists.",
       "errorInvalidName": "Role name must start with a letter and contain only letters, numbers, or underscores.",
-      "errorSystemRename": "System role names cannot be changed."
+      "errorSystemRename": "System role names cannot be changed.",
+      "permissions": "Permissions",
+      "permissionsHint": "Select which permissions this role grants.",
+      "permissionsSystemHint": "System role permissions are read-only.",
+      "permissionsEmpty": "No permissions are defined.",
+      "errorSystemPermissions": "System role permissions cannot be changed.",
+      "errorPermissionsSave": "Could not save the role's permissions."
     },
     "groups": {
       "searchPlaceholder": "Search groups...",
diff --git a/artifacts/tx-os/src/pages/admin.tsx b/artifacts/tx-os/src/pages/admin.tsx
index 17f8d83a..3364708d 100644
--- a/artifacts/tx-os/src/pages/admin.tsx
+++ b/artifacts/tx-os/src/pages/admin.tsx
@@ -41,6 +41,11 @@ import {
   useCreateRole,
   useUpdateRole,
   useDeleteRole,
+  useListPermissions,
+  getListPermissionsQueryKey,
+  useGetRolePermissions,
+  getGetRolePermissionsQueryKey,
+  useReplaceRolePermissions,
   useListAuditLogs,
   getListAuditLogsQueryKey,
   ApiError,
@@ -3150,23 +3155,50 @@ function GroupDetailEditor({ groupId, onClose, onSaved }: { groupId: number; onC
   );
 }
 
+const ROLES_PROTECTED_NAMES = new Set(["admin", "user", "order_receiver"]);
+
 function RolesPanel() {
-  const { t } = useTranslation();
+  const { t, i18n } = useTranslation();
   const { toast } = useToast();
   const queryClient = useQueryClient();
   const { data: roles } = useListRoles({ query: { queryKey: getListRolesQueryKey() } });
+  const { data: allPermissions } = useListPermissions({
+    query: { queryKey: getListPermissionsQueryKey() },
+  });
   const createRole = useCreateRole();
   const updateRole = useUpdateRole();
   const deleteRole = useDeleteRole();
+  const replaceRolePermissions = useReplaceRolePermissions();
   const [search, setSearch] = useState("");
   const [createOpen, setCreateOpen] = useState(false);
   const [createForm, setCreateForm] = useState({ name: "", descriptionAr: "", descriptionEn: "" });
   const [editingId, setEditingId] = useState<number | null>(null);
   const [editingIsSystem, setEditingIsSystem] = useState(false);
   const [editForm, setEditForm] = useState({ name: "", descriptionAr: "", descriptionEn: "" });
+  const [editPermissionIds, setEditPermissionIds] = useState<Set<number>>(new Set());
+  const [initialPermissionIds, setInitialPermissionIds] = useState<Set<number>>(new Set());
   const [deleteTarget, setDeleteTarget] = useState<{ id: number; name: string } | null>(null);
   const [deleteConflict, setDeleteConflict] = useState<{ userCount: number; groupCount: number } | null>(null);
 
+  const editingPermissionsId = editingId ?? 0;
+  const { data: editingRolePermissions, isLoading: editingPermsLoading } = useGetRolePermissions(
+    editingPermissionsId,
+    {
+      query: {
+        queryKey: getGetRolePermissionsQueryKey(editingPermissionsId),
+        enabled: editingId != null,
+      },
+    },
+  );
+
+  useEffect(() => {
+    if (editingId == null) return;
+    if (!editingRolePermissions) return;
+    const ids = new Set(editingRolePermissions.map((p) => p.id));
+    setEditPermissionIds(ids);
+    setInitialPermissionIds(ids);
+  }, [editingId, editingRolePermissions]);
+
   const invalidate = () => queryClient.invalidateQueries({ queryKey: getListRolesQueryKey() });
 
   const visibleRoles = (roles ?? []).filter((r) => {
@@ -3220,7 +3252,7 @@ function RolesPanel() {
     descriptionEn?: string | null;
   }) => {
     setEditingId(role.id);
-    setEditingIsSystem(role.isSystem);
+    setEditingIsSystem(role.isSystem || ROLES_PROTECTED_NAMES.has(role.name));
     setEditForm({
       name: role.name,
       descriptionAr: role.descriptionAr ?? "",
@@ -3228,13 +3260,66 @@ function RolesPanel() {
     });
   };
 
+  const closeEditDialog = () => {
+    setEditingId(null);
+    setEditPermissionIds(new Set());
+    setInitialPermissionIds(new Set());
+  };
+
+  const permissionsChanged = (() => {
+    if (editPermissionIds.size !== initialPermissionIds.size) return true;
+    for (const id of editPermissionIds) {
+      if (!initialPermissionIds.has(id)) return true;
+    }
+    return false;
+  })();
+
   const handleEdit = () => {
     if (editingId == null) return;
+    const editingRoleId = editingId;
     const name = editForm.name.trim();
     if (!name) return;
+
+    const savePermissionsThenClose = () => {
+      if (editingIsSystem || !permissionsChanged) {
+        invalidate();
+        closeEditDialog();
+        toast({ title: t("common.success") });
+        return;
+      }
+      replaceRolePermissions.mutate(
+        {
+          id: editingRoleId,
+          data: { permissionIds: Array.from(editPermissionIds) },
+        },
+        {
+          onSuccess: () => {
+            invalidate();
+            queryClient.invalidateQueries({
+              queryKey: getGetRolePermissionsQueryKey(editingRoleId),
+            });
+            closeEditDialog();
+            toast({ title: t("common.success") });
+          },
+          onError: (err: unknown) => {
+            if (err instanceof ApiError && err.status === 400) {
+              const code = (err.data as { code?: string } | null)?.code;
+              const key =
+                code === "system_role_permissions"
+                  ? "admin.roles.errorSystemPermissions"
+                  : "admin.roles.errorPermissionsSave";
+              toast({ title: t(key), variant: "destructive" });
+              return;
+            }
+            toast({ title: t("admin.roles.errorPermissionsSave"), variant: "destructive" });
+          },
+        },
+      );
+    };
+
     updateRole.mutate(
       {
-        id: editingId,
+        id: editingRoleId,
         data: {
           ...(editingIsSystem ? {} : { name }),
           descriptionAr: editForm.descriptionAr.trim() || null,
@@ -3243,9 +3328,7 @@ function RolesPanel() {
       },
       {
         onSuccess: () => {
-          invalidate();
-          setEditingId(null);
-          toast({ title: t("common.success") });
+          savePermissionsThenClose();
         },
         onError: (err: unknown) => {
           if (err instanceof ApiError && err.status === 409) {
@@ -3264,6 +3347,16 @@ function RolesPanel() {
     );
   };
 
+  const togglePermission = (id: number) => {
+    if (editingIsSystem) return;
+    setEditPermissionIds((prev) => {
+      const next = new Set(prev);
+      if (next.has(id)) next.delete(id);
+      else next.add(id);
+      return next;
+    });
+  };
+
   const handleDelete = () => {
     if (!deleteTarget) return;
     deleteRole.mutate(
@@ -3319,7 +3412,7 @@ function RolesPanel() {
                 <div className="font-semibold text-foreground flex items-center gap-2">
                   <KeyRound size={16} className="text-primary" />
                   <span className="truncate">{r.name}</span>
-                  {r.isSystem && (
+                  {(r.isSystem || ROLES_PROTECTED_NAMES.has(r.name)) && (
                     <span className="text-[10px] px-1.5 py-0.5 rounded-full bg-amber-100 text-amber-700 uppercase tracking-wider">
                       {t("admin.roles.system")}
                     </span>
@@ -3345,7 +3438,7 @@ function RolesPanel() {
                 >
                   <Pencil size={14} />
                 </button>
-                {!r.isSystem && (
+                {!(r.isSystem || ROLES_PROTECTED_NAMES.has(r.name)) && (
                   <button
                     onClick={() => {
                       setDeleteConflict(null);
@@ -3423,7 +3516,10 @@ function RolesPanel() {
 
       {editingId != null && (
         <div className="fixed inset-0 bg-slate-900/30 backdrop-blur-sm z-50 flex items-center justify-center p-4">
-          <div className="glass-panel rounded-3xl p-6 w-full max-w-sm space-y-3" data-testid="edit-role-dialog">
+          <div
+            className="glass-panel rounded-3xl p-6 w-full max-w-md space-y-3 max-h-[90vh] overflow-y-auto"
+            data-testid="edit-role-dialog"
+          >
             <h2 className="font-semibold text-foreground">{t("admin.roles.editRole")}</h2>
             <div className="space-y-1">
               <Label>{t("admin.roles.name")}</Label>
@@ -3459,17 +3555,82 @@ function RolesPanel() {
                 data-testid="role-edit-desc-en"
               />
             </div>
+            <div className="space-y-1 pt-2">
+              <Label>{t("admin.roles.permissions")}</Label>
+              <p className="text-xs text-muted-foreground">
+                {editingIsSystem
+                  ? t("admin.roles.permissionsSystemHint")
+                  : t("admin.roles.permissionsHint")}
+              </p>
+              <div
+                className="border border-slate-200 rounded-xl bg-white/60 max-h-56 overflow-y-auto divide-y divide-slate-100"
+                data-testid="role-permissions-list"
+              >
+                {editingPermsLoading || !allPermissions ? (
+                  <div className="flex justify-center py-6 text-muted-foreground">
+                    <Loader2 size={16} className="animate-spin" />
+                  </div>
+                ) : allPermissions.length === 0 ? (
+                  <p className="text-sm text-muted-foreground p-3 text-center">
+                    {t("admin.roles.permissionsEmpty")}
+                  </p>
+                ) : (
+                  allPermissions.map((p) => {
+                    const checked = editPermissionIds.has(p.id);
+                    const desc =
+                      i18n.language === "ar"
+                        ? p.descriptionAr ?? p.descriptionEn
+                        : p.descriptionEn ?? p.descriptionAr;
+                    return (
+                      <label
+                        key={p.id}
+                        className={cn(
+                          "flex items-start gap-2 p-2.5 text-sm",
+                          editingIsSystem
+                            ? "cursor-not-allowed opacity-80"
+                            : "cursor-pointer hover:bg-slate-50",
+                        )}
+                        data-testid={`role-perm-row-${p.id}`}
+                      >
+                        <input
+                          type="checkbox"
+                          className="mt-0.5"
+                          checked={checked}
+                          disabled={editingIsSystem}
+                          onChange={() => togglePermission(p.id)}
+                          data-testid={`role-perm-checkbox-${p.id}`}
+                        />
+                        <div className="min-w-0 flex-1">
+                          <div className="font-mono text-xs text-foreground">{p.name}</div>
+                          {desc && (
+                            <p className="text-xs text-muted-foreground mt-0.5">{desc}</p>
+                          )}
+                        </div>
+                      </label>
+                    );
+                  })
+                )}
+              </div>
+            </div>
             <div className="flex gap-2 pt-2">
-              <Button variant="outline" className="flex-1" onClick={() => setEditingId(null)}>
+              <Button variant="outline" className="flex-1" onClick={closeEditDialog}>
                 {t("common.cancel")}
               </Button>
               <Button
                 className="flex-1"
-                disabled={!editForm.name.trim() || updateRole.isPending}
+                disabled={
+                  !editForm.name.trim() ||
+                  updateRole.isPending ||
+                  replaceRolePermissions.isPending
+                }
                 onClick={handleEdit}
                 data-testid="edit-role-submit"
               >
-                {updateRole.isPending ? <Loader2 size={14} className="animate-spin" /> : t("common.save")}
+                {updateRole.isPending || replaceRolePermissions.isPending ? (
+                  <Loader2 size={14} className="animate-spin" />
+                ) : (
+                  t("common.save")
+                )}
               </Button>
             </div>
           </div>
diff --git a/lib/api-client-react/src/generated/api.schemas.ts b/lib/api-client-react/src/generated/api.schemas.ts
index d9a6b836..d8544a22 100644
--- a/lib/api-client-react/src/generated/api.schemas.ts
+++ b/lib/api-client-react/src/generated/api.schemas.ts
@@ -204,6 +204,20 @@ export interface RoleDeletionConflict {
   groupCount: number;
 }
 
+export interface Permission {
+  id: number;
+  name: string;
+  /** @nullable */
+  descriptionAr?: string | null;
+  /** @nullable */
+  descriptionEn?: string | null;
+}
+
+export interface ReplaceRolePermissionsBody {
+  /** Full set of permission IDs the role should grant. Existing assignments not present here are removed. */
+  permissionIds: number[];
+}
+
 export interface Group {
   id: number;
   name: string;
diff --git a/lib/api-client-react/src/generated/api.ts b/lib/api-client-react/src/generated/api.ts
index c64f29ba..7c1e374b 100644
--- a/lib/api-client-react/src/generated/api.ts
+++ b/lib/api-client-react/src/generated/api.ts
@@ -58,7 +58,9 @@ import type {
   LoginBody,
   MessageWithSender,
   Notification,
+  Permission,
   RegisterBody,
+  ReplaceRolePermissionsBody,
   RequestUploadUrlBody,
   RequestUploadUrlResponse,
   ResetPasswordBody,
@@ -4729,6 +4731,81 @@ export const useRemoveUserRole = <
   return useMutation(getRemoveUserRoleMutationOptions(options));
 };
 
+/**
+ * @summary List all available permissions (admin)
+ */
+export const getListPermissionsUrl = () => {
+  return `/api/permissions`;
+};
+
+export const listPermissions = async (
+  options?: RequestInit,
+): Promise<Permission[]> => {
+  return customFetch<Permission[]>(getListPermissionsUrl(), {
+    ...options,
+    method: "GET",
+  });
+};
+
+export const getListPermissionsQueryKey = () => {
+  return [`/api/permissions`] as const;
+};
+
+export const getListPermissionsQueryOptions = <
+  TData = Awaited<ReturnType<typeof listPermissions>>,
+  TError = ErrorType<ErrorResponse>,
+>(options?: {
+  query?: UseQueryOptions<
+    Awaited<ReturnType<typeof listPermissions>>,
+    TError,
+    TData
+  >;
+  request?: SecondParameter<typeof customFetch>;
+}) => {
+  const { query: queryOptions, request: requestOptions } = options ?? {};
+
+  const queryKey = queryOptions?.queryKey ?? getListPermissionsQueryKey();
+
+  const queryFn: QueryFunction<Awaited<ReturnType<typeof listPermissions>>> = ({
+    signal,
+  }) => listPermissions({ signal, ...requestOptions });
+
+  return { queryKey, queryFn, ...queryOptions } as UseQueryOptions<
+    Awaited<ReturnType<typeof listPermissions>>,
+    TError,
+    TData
+  > & { queryKey: QueryKey };
+};
+
+export type ListPermissionsQueryResult = NonNullable<
+  Awaited<ReturnType<typeof listPermissions>>
+>;
+export type ListPermissionsQueryError = ErrorType<ErrorResponse>;
+
+/**
+ * @summary List all available permissions (admin)
+ */
+
+export function useListPermissions<
+  TData = Awaited<ReturnType<typeof listPermissions>>,
+  TError = ErrorType<ErrorResponse>,
+>(options?: {
+  query?: UseQueryOptions<
+    Awaited<ReturnType<typeof listPermissions>>,
+    TError,
+    TData
+  >;
+  request?: SecondParameter<typeof customFetch>;
+}): UseQueryResult<TData, TError> & { queryKey: QueryKey } {
+  const queryOptions = getListPermissionsQueryOptions(options);
+
+  const query = useQuery(queryOptions) as UseQueryResult<TData, TError> & {
+    queryKey: QueryKey;
+  };
+
+  return { ...query, queryKey: queryOptions.queryKey };
+}
+
 /**
  * @summary List roles (admin)
  */
@@ -5053,6 +5130,181 @@ export const useDeleteRole = <
   return useMutation(getDeleteRoleMutationOptions(options));
 };
 
+/**
+ * @summary List permissions assigned to a role (admin)
+ */
+export const getGetRolePermissionsUrl = (id: number) => {
+  return `/api/roles/${id}/permissions`;
+};
+
+export const getRolePermissions = async (
+  id: number,
+  options?: RequestInit,
+): Promise<Permission[]> => {
+  return customFetch<Permission[]>(getGetRolePermissionsUrl(id), {
+    ...options,
+    method: "GET",
+  });
+};
+
+export const getGetRolePermissionsQueryKey = (id: number) => {
+  return [`/api/roles/${id}/permissions`] as const;
+};
+
+export const getGetRolePermissionsQueryOptions = <
+  TData = Awaited<ReturnType<typeof getRolePermissions>>,
+  TError = ErrorType<ErrorResponse>,
+>(
+  id: number,
+  options?: {
+    query?: UseQueryOptions<
+      Awaited<ReturnType<typeof getRolePermissions>>,
+      TError,
+      TData
+    >;
+    request?: SecondParameter<typeof customFetch>;
+  },
+) => {
+  const { query: queryOptions, request: requestOptions } = options ?? {};
+
+  const queryKey = queryOptions?.queryKey ?? getGetRolePermissionsQueryKey(id);
+
+  const queryFn: QueryFunction<
+    Awaited<ReturnType<typeof getRolePermissions>>
+  > = ({ signal }) => getRolePermissions(id, { signal, ...requestOptions });
+
+  return {
+    queryKey,
+    queryFn,
+    enabled: !!id,
+    ...queryOptions,
+  } as UseQueryOptions<
+    Awaited<ReturnType<typeof getRolePermissions>>,
+    TError,
+    TData
+  > & { queryKey: QueryKey };
+};
+
+export type GetRolePermissionsQueryResult = NonNullable<
+  Awaited<ReturnType<typeof getRolePermissions>>
+>;
+export type GetRolePermissionsQueryError = ErrorType<ErrorResponse>;
+
+/**
+ * @summary List permissions assigned to a role (admin)
+ */
+
+export function useGetRolePermissions<
+  TData = Awaited<ReturnType<typeof getRolePermissions>>,
+  TError = ErrorType<ErrorResponse>,
+>(
+  id: number,
+  options?: {
+    query?: UseQueryOptions<
+      Awaited<ReturnType<typeof getRolePermissions>>,
+      TError,
+      TData
+    >;
+    request?: SecondParameter<typeof customFetch>;
+  },
+): UseQueryResult<TData, TError> & { queryKey: QueryKey } {
+  const queryOptions = getGetRolePermissionsQueryOptions(id, options);
+
+  const query = useQuery(queryOptions) as UseQueryResult<TData, TError> & {
+    queryKey: QueryKey;
+  };
+
+  return { ...query, queryKey: queryOptions.queryKey };
+}
+
+/**
+ * @summary Atomically replace the permissions assigned to a role (admin)
+ */
+export const getReplaceRolePermissionsUrl = (id: number) => {
+  return `/api/roles/${id}/permissions`;
+};
+
+export const replaceRolePermissions = async (
+  id: number,
+  replaceRolePermissionsBody: ReplaceRolePermissionsBody,
+  options?: RequestInit,
+): Promise<Permission[]> => {
+  return customFetch<Permission[]>(getReplaceRolePermissionsUrl(id), {
+    ...options,
+    method: "PUT",
+    headers: { "Content-Type": "application/json", ...options?.headers },
+    body: JSON.stringify(replaceRolePermissionsBody),
+  });
+};
+
+export const getReplaceRolePermissionsMutationOptions = <
+  TError = ErrorType<ErrorResponse>,
+  TContext = unknown,
+>(options?: {
+  mutation?: UseMutationOptions<
+    Awaited<ReturnType<typeof replaceRolePermissions>>,
+    TError,
+    { id: number; data: BodyType<ReplaceRolePermissionsBody> },
+    TContext
+  >;
+  request?: SecondParameter<typeof customFetch>;
+}): UseMutationOptions<
+  Awaited<ReturnType<typeof replaceRolePermissions>>,
+  TError,
+  { id: number; data: BodyType<ReplaceRolePermissionsBody> },
+  TContext
+> => {
+  const mutationKey = ["replaceRolePermissions"];
+  const { mutation: mutationOptions, request: requestOptions } = options
+    ? options.mutation &&
+      "mutationKey" in options.mutation &&
+      options.mutation.mutationKey
+      ? options
+      : { ...options, mutation: { ...options.mutation, mutationKey } }
+    : { mutation: { mutationKey }, request: undefined };
+
+  const mutationFn: MutationFunction<
+    Awaited<ReturnType<typeof replaceRolePermissions>>,
+    { id: number; data: BodyType<ReplaceRolePermissionsBody> }
+  > = (props) => {
+    const { id, data } = props ?? {};
+
+    return replaceRolePermissions(id, data, requestOptions);
+  };
+
+  return { mutationFn, ...mutationOptions };
+};
+
+export type ReplaceRolePermissionsMutationResult = NonNullable<
+  Awaited<ReturnType<typeof replaceRolePermissions>>
+>;
+export type ReplaceRolePermissionsMutationBody =
+  BodyType<ReplaceRolePermissionsBody>;
+export type ReplaceRolePermissionsMutationError = ErrorType<ErrorResponse>;
+
+/**
+ * @summary Atomically replace the permissions assigned to a role (admin)
+ */
+export const useReplaceRolePermissions = <
+  TError = ErrorType<ErrorResponse>,
+  TContext = unknown,
+>(options?: {
+  mutation?: UseMutationOptions<
+    Awaited<ReturnType<typeof replaceRolePermissions>>,
+    TError,
+    { id: number; data: BodyType<ReplaceRolePermissionsBody> },
+    TContext
+  >;
+  request?: SecondParameter<typeof customFetch>;
+}): UseMutationResult<
+  Awaited<ReturnType<typeof replaceRolePermissions>>,
+  TError,
+  { id: number; data: BodyType<ReplaceRolePermissionsBody> },
+  TContext
+> => {
+  return useMutation(getReplaceRolePermissionsMutationOptions(options));
+};
+
 /**
  * @summary List groups (admin)
  */
diff --git a/lib/api-spec/openapi.yaml b/lib/api-spec/openapi.yaml
index 9b871b6d..ded457f3 100644
--- a/lib/api-spec/openapi.yaml
+++ b/lib/api-spec/openapi.yaml
@@ -1284,6 +1284,28 @@ paths:
               schema:
                 $ref: "#/components/schemas/ErrorResponse"
 
+  # Permissions (admin)
+  /permissions:
+    get:
+      operationId: listPermissions
+      tags: [roles]
+      summary: List all available permissions (admin)
+      responses:
+        "200":
+          description: Permissions
+          content:
+            application/json:
+              schema:
+                type: array
+                items:
+                  $ref: "#/components/schemas/Permission"
+        "403":
+          description: Forbidden
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorResponse"
+
   # Roles (admin)
   /roles:
     get:
@@ -1403,6 +1425,70 @@ paths:
               schema:
                 $ref: "#/components/schemas/RoleDeletionConflict"
 
+  /roles/{id}/permissions:
+    get:
+      operationId: getRolePermissions
+      tags: [roles]
+      summary: List permissions assigned to a role (admin)
+      parameters:
+        - name: id
+          in: path
+          required: true
+          schema:
+            type: integer
+      responses:
+        "200":
+          description: Permissions assigned to the role
+          content:
+            application/json:
+              schema:
+                type: array
+                items:
+                  $ref: "#/components/schemas/Permission"
+        "404":
+          description: Role not found
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorResponse"
+    put:
+      operationId: replaceRolePermissions
+      tags: [roles]
+      summary: Atomically replace the permissions assigned to a role (admin)
+      parameters:
+        - name: id
+          in: path
+          required: true
+          schema:
+            type: integer
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              $ref: "#/components/schemas/ReplaceRolePermissionsBody"
+      responses:
+        "200":
+          description: Updated permissions list for the role
+          content:
+            application/json:
+              schema:
+                type: array
+                items:
+                  $ref: "#/components/schemas/Permission"
+        "400":
+          description: Cannot modify a system role's permissions, or invalid request
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorResponse"
+        "404":
+          description: Role or one of the permissions was not found
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ErrorResponse"
+
   # Groups (admin)
   /groups:
     get:
@@ -2120,6 +2206,32 @@ components:
         - userCount
         - groupCount
 
+    Permission:
+      type: object
+      properties:
+        id:
+          type: integer
+        name:
+          type: string
+        descriptionAr:
+          type: ["string", "null"]
+        descriptionEn:
+          type: ["string", "null"]
+      required:
+        - id
+        - name
+
+    ReplaceRolePermissionsBody:
+      type: object
+      properties:
+        permissionIds:
+          type: array
+          items:
+            type: integer
+          description: Full set of permission IDs the role should grant. Existing assignments not present here are removed.
+      required:
+        - permissionIds
+
     GroupSummary:
       type: object
       properties:
diff --git a/lib/api-zod/src/generated/api.ts b/lib/api-zod/src/generated/api.ts
index a77b88b8..350d7bbe 100644
--- a/lib/api-zod/src/generated/api.ts
+++ b/lib/api-zod/src/generated/api.ts
@@ -1623,6 +1623,17 @@ export const RemoveUserRoleResponse = zod.object({
   createdAt: zod.coerce.date(),
 });
 
+/**
+ * @summary List all available permissions (admin)
+ */
+export const ListPermissionsResponseItem = zod.object({
+  id: zod.number(),
+  name: zod.string(),
+  descriptionAr: zod.string().nullish(),
+  descriptionEn: zod.string().nullish(),
+});
+export const ListPermissionsResponse = zod.array(ListPermissionsResponseItem);
+
 /**
  * @summary List roles (admin)
  */
@@ -1675,6 +1686,48 @@ export const DeleteRoleParams = zod.object({
   id: zod.coerce.number(),
 });
 
+/**
+ * @summary List permissions assigned to a role (admin)
+ */
+export const GetRolePermissionsParams = zod.object({
+  id: zod.coerce.number(),
+});
+
+export const GetRolePermissionsResponseItem = zod.object({
+  id: zod.number(),
+  name: zod.string(),
+  descriptionAr: zod.string().nullish(),
+  descriptionEn: zod.string().nullish(),
+});
+export const GetRolePermissionsResponse = zod.array(
+  GetRolePermissionsResponseItem,
+);
+
+/**
+ * @summary Atomically replace the permissions assigned to a role (admin)
+ */
+export const ReplaceRolePermissionsParams = zod.object({
+  id: zod.coerce.number(),
+});
+
+export const ReplaceRolePermissionsBody = zod.object({
+  permissionIds: zod
+    .array(zod.number())
+    .describe(
+      "Full set of permission IDs the role should grant. Existing assignments not present here are removed.",
+    ),
+});
+
+export const ReplaceRolePermissionsResponseItem = zod.object({
+  id: zod.number(),
+  name: zod.string(),
+  descriptionAr: zod.string().nullish(),
+  descriptionEn: zod.string().nullish(),
+});
+export const ReplaceRolePermissionsResponse = zod.array(
+  ReplaceRolePermissionsResponseItem,
+);
+
 /**
  * @summary List groups (admin)
  */