From d017028719d8e8ea0b1397ba797cbb2106e5f92f Mon Sep 17 00:00:00 2001
From: Paul Lizer <paullizer@microsoft.com>
Date: Sat, 24 Jan 2026 18:02:49 -0500
Subject: [PATCH 01/11] updated the logging logic when running retention delete
 with archiving enabled (#642)

---
 application/single_app/config.py              |   2 +-
 .../single_app/functions_retention_policy.py  |  66 +++++--
 .../RETENTION_POLICY_NOTFOUND_FIX.md          |  95 +++++++++
 ...test_retention_policy_notfound_handling.py | 180 ++++++++++++++++++
 4 files changed, 330 insertions(+), 13 deletions(-)
 create mode 100644 docs/explanation/fixes/v0.236.012/RETENTION_POLICY_NOTFOUND_FIX.md
 create mode 100644 functional_tests/test_retention_policy_notfound_handling.py

diff --git a/application/single_app/config.py b/application/single_app/config.py
index 0596e3ca..caf09fc8 100644
--- a/application/single_app/config.py
+++ b/application/single_app/config.py
@@ -88,7 +88,7 @@
 EXECUTOR_TYPE = 'thread'
 EXECUTOR_MAX_WORKERS = 30
 SESSION_TYPE = 'filesystem'
-VERSION = "0.236.011"
+VERSION = "0.236.012"
 
 
 SECRET_KEY = os.getenv('SECRET_KEY', 'dev-secret-key-change-in-production')
diff --git a/application/single_app/functions_retention_policy.py b/application/single_app/functions_retention_policy.py
index 6ce6dee0..56167fa1 100644
--- a/application/single_app/functions_retention_policy.py
+++ b/application/single_app/functions_retention_policy.py
@@ -6,8 +6,9 @@
 This module handles automated deletion of aged conversations and documents
 based on configurable retention policies for personal, group, and public workspaces.
 
-Version: 0.234.067
+Version: 0.236.012
 Implemented in: 0.234.067
+Updated in: 0.236.012 - Fixed race condition handling for NotFound errors during deletion
 """
 
 from config import *
@@ -565,10 +566,21 @@ def delete_aged_conversations(retention_days, workspace_type='personal', user_id
             conversation_title = conv.get('title', 'Untitled')
             
             # Read full conversation for archiving/logging
-            conversation_item = container.read_item(
-                item=conversation_id,
-                partition_key=conversation_id
-            )
+            try:
+                conversation_item = container.read_item(
+                    item=conversation_id,
+                    partition_key=conversation_id
+                )
+            except CosmosResourceNotFoundError:
+                # Conversation was already deleted (race condition) - this is fine, skip to next
+                debug_print(f"Conversation {conversation_id} already deleted (not found during read), skipping")
+                deleted_details.append({
+                    'id': conversation_id,
+                    'title': conversation_title,
+                    'last_activity_at': conv.get('last_activity_at'),
+                    'already_deleted': True
+                })
+                continue
             
             # Archive if enabled
             if archiving_enabled:
@@ -613,7 +625,11 @@ def delete_aged_conversations(retention_days, workspace_type='personal', user_id
                     archived_msg["archived_by_retention_policy"] = True
                     cosmos_archived_messages_container.upsert_item(archived_msg)
                 
-                messages_container.delete_item(msg['id'], partition_key=conversation_id)
+                try:
+                    messages_container.delete_item(msg['id'], partition_key=conversation_id)
+                except CosmosResourceNotFoundError:
+                    # Message was already deleted - this is fine, continue
+                    debug_print(f"Message {msg['id']} already deleted (not found), skipping")
             
             # Log deletion
             log_conversation_deletion(
@@ -631,10 +647,14 @@ def delete_aged_conversations(retention_days, workspace_type='personal', user_id
             )
             
             # Delete conversation
-            container.delete_item(
-                item=conversation_id,
-                partition_key=conversation_id
-            )
+            try:
+                container.delete_item(
+                    item=conversation_id,
+                    partition_key=conversation_id
+                )
+            except CosmosResourceNotFoundError:
+                # Conversation was already deleted after we read it (race condition) - this is fine
+                debug_print(f"Conversation {conversation_id} already deleted (not found during delete)")
             
             deleted_details.append({
                 'id': conversation_id,
@@ -730,10 +750,21 @@ def delete_aged_documents(retention_days, workspace_type='personal', user_id=Non
             doc_user_id = doc.get('user_id') or deletion_user_id
             
             # Delete document chunks from search index
-            delete_document_chunks(document_id, group_id, public_workspace_id)
+            try:
+                delete_document_chunks(document_id, group_id, public_workspace_id)
+            except CosmosResourceNotFoundError:
+                # Document chunks already deleted - this is fine
+                debug_print(f"Document chunks for {document_id} already deleted (not found)")
+            except Exception as chunk_error:
+                # Log chunk deletion errors but continue with document deletion
+                debug_print(f"Error deleting chunks for document {document_id}: {chunk_error}")
             
             # Delete document from Cosmos DB and blob storage
-            delete_document(doc_user_id, document_id, group_id, public_workspace_id)
+            try:
+                delete_document(doc_user_id, document_id, group_id, public_workspace_id)
+            except CosmosResourceNotFoundError:
+                # Document was already deleted (race condition) - this is fine
+                debug_print(f"Document {document_id} already deleted (not found)")
             
             deleted_details.append({
                 'id': document_id,
@@ -744,6 +775,17 @@ def delete_aged_documents(retention_days, workspace_type='personal', user_id=Non
             
             debug_print(f"Deleted document {document_id} ({file_name}) due to retention policy")
             
+        except CosmosResourceNotFoundError:
+            # Document was already deleted - count as success
+            doc_id = doc.get('id', 'unknown') if doc else 'unknown'
+            debug_print(f"Document {doc_id} already deleted (not found)")
+            deleted_details.append({
+                'id': doc_id,
+                'file_name': doc.get('file_name', 'Unknown'),
+                'title': doc.get('title', doc.get('file_name', 'Unknown')),
+                'last_updated': doc.get('last_updated'),
+                'already_deleted': True
+            })
         except Exception as e:
             doc_id = doc.get('id', 'unknown') if doc else 'unknown'
             log_event("delete_aged_documents_deletion_error", {"error": str(e), "document_id": doc_id, "workspace_type": workspace_type})
diff --git a/docs/explanation/fixes/v0.236.012/RETENTION_POLICY_NOTFOUND_FIX.md b/docs/explanation/fixes/v0.236.012/RETENTION_POLICY_NOTFOUND_FIX.md
new file mode 100644
index 00000000..82a0ec15
--- /dev/null
+++ b/docs/explanation/fixes/v0.236.012/RETENTION_POLICY_NOTFOUND_FIX.md
@@ -0,0 +1,95 @@
+# Retention Policy NotFound Error Fix
+
+## Issue Description
+
+The retention policy deletion process was logging errors when attempting to delete conversations or documents that had already been deleted (e.g., by another process or user action between the query and delete operations).
+
+### Error Observed
+```
+DEBUG: [Log] delete_aged_conversations_deletion_error -- {'error': '(NotFound) Entity with the specified id does not exist in the system.
+```
+
+### Root Cause
+
+This is a **race condition** scenario where:
+1. The retention policy queries for aged conversations/documents
+2. Between the query and the delete operation, the item is deleted by another process (user action, concurrent retention execution, etc.)
+3. The delete operation fails with `CosmosResourceNotFoundError` (404 NotFound)
+
+## Fix Applied
+
+**Version: 0.236.012**
+
+The fix adds specific handling for `CosmosResourceNotFoundError` in both conversation and document deletion loops:
+
+### Conversations
+- When reading a conversation before archiving: If not found, log debug message and count as already deleted
+- When deleting messages: Catch NotFound and continue (message already gone)
+- When deleting conversation: Catch NotFound and continue (conversation already gone)
+
+### Documents
+- When deleting document chunks: Catch NotFound and continue
+- When deleting document: Catch NotFound and continue
+- Outer try/catch also handles NotFound to count as successful deletion
+
+## Files Modified
+
+- [functions_retention_policy.py](../../../application/single_app/functions_retention_policy.py)
+  - `delete_aged_conversations()` - Added CosmosResourceNotFoundError handling
+  - `delete_aged_documents()` - Added CosmosResourceNotFoundError handling
+
+## Technical Details
+
+### Before Fix
+```python
+# Read would throw exception if item was deleted between query and read
+conversation_item = container.read_item(
+    item=conversation_id,
+    partition_key=conversation_id
+)
+# Delete would throw exception if item was deleted
+container.delete_item(
+    item=conversation_id,
+    partition_key=conversation_id
+)
+```
+
+### After Fix
+```python
+try:
+    conversation_item = container.read_item(
+        item=conversation_id,
+        partition_key=conversation_id
+    )
+except CosmosResourceNotFoundError:
+    # Already deleted - this is fine, count as success
+    debug_print(f"Conversation {conversation_id} already deleted (not found during read), skipping")
+    deleted_details.append({...})
+    continue
+
+# ... archiving and message deletion ...
+
+try:
+    container.delete_item(
+        item=conversation_id,
+        partition_key=conversation_id
+    )
+except CosmosResourceNotFoundError:
+    # Already deleted between read and delete - this is fine
+    debug_print(f"Conversation {conversation_id} already deleted (not found during delete)")
+```
+
+## Benefits
+
+1. **No false error logs**: Items that are already deleted no longer generate error entries
+2. **Accurate counts**: Already-deleted items are properly counted as successful deletions
+3. **Graceful handling**: Race conditions are handled without disrupting the overall retention process
+4. **Better debugging**: Debug messages clearly indicate when items were already deleted
+
+## Testing
+
+Test by:
+1. Enabling retention policy with a short retention period
+2. Running the retention policy execution
+3. Verify no NotFound errors are logged
+4. Verify deletion counts accurately reflect processed items
diff --git a/functional_tests/test_retention_policy_notfound_handling.py b/functional_tests/test_retention_policy_notfound_handling.py
new file mode 100644
index 00000000..ee417335
--- /dev/null
+++ b/functional_tests/test_retention_policy_notfound_handling.py
@@ -0,0 +1,180 @@
+#!/usr/bin/env python3
+"""
+Functional test for Retention Policy NotFound Error Handling.
+Version: 0.236.012
+Implemented in: 0.236.012
+
+This test ensures that the retention policy correctly handles CosmosResourceNotFoundError
+when attempting to delete conversations or documents that have already been deleted.
+This prevents false error logging for race condition scenarios.
+"""
+
+import sys
+import os
+
+# Add parent directory to path for imports
+sys.path.insert(0, os.path.dirname(os.path.dirname(os.path.abspath(__file__))))
+os.chdir(os.path.join(os.path.dirname(os.path.abspath(__file__)), '..', 'application', 'single_app'))
+
+def test_notfound_exception_import():
+    """Test that CosmosResourceNotFoundError is properly imported."""
+    print("🔍 Testing CosmosResourceNotFoundError import...")
+    
+    try:
+        from config import CosmosResourceNotFoundError
+        print("✅ CosmosResourceNotFoundError imported successfully from config")
+        return True
+    except ImportError as e:
+        print(f"❌ Failed to import CosmosResourceNotFoundError: {e}")
+        return False
+
+
+def test_retention_policy_function_definitions():
+    """Test that retention policy functions have proper exception handling."""
+    print("\n🔍 Testing retention policy function definitions...")
+    
+    try:
+        import inspect
+        from functions_retention_policy import delete_aged_conversations, delete_aged_documents
+        
+        # Get source code of delete_aged_conversations
+        conversations_source = inspect.getsource(delete_aged_conversations)
+        
+        # Check for CosmosResourceNotFoundError handling in conversations function
+        if 'CosmosResourceNotFoundError' in conversations_source:
+            print("✅ delete_aged_conversations handles CosmosResourceNotFoundError")
+        else:
+            print("❌ delete_aged_conversations does not handle CosmosResourceNotFoundError")
+            return False
+        
+        # Check for 'already deleted' debug message pattern
+        if 'already deleted' in conversations_source:
+            print("✅ delete_aged_conversations has 'already deleted' debug messaging")
+        else:
+            print("❌ delete_aged_conversations missing 'already deleted' debug messaging")
+            return False
+        
+        # Get source code of delete_aged_documents
+        documents_source = inspect.getsource(delete_aged_documents)
+        
+        # Check for CosmosResourceNotFoundError handling in documents function
+        if 'CosmosResourceNotFoundError' in documents_source:
+            print("✅ delete_aged_documents handles CosmosResourceNotFoundError")
+        else:
+            print("❌ delete_aged_documents does not handle CosmosResourceNotFoundError")
+            return False
+        
+        # Check for 'already deleted' debug message pattern
+        if 'already deleted' in documents_source:
+            print("✅ delete_aged_documents has 'already deleted' debug messaging")
+        else:
+            print("❌ delete_aged_documents missing 'already deleted' debug messaging")
+            return False
+        
+        return True
+        
+    except Exception as e:
+        print(f"❌ Failed to verify function definitions: {e}")
+        import traceback
+        traceback.print_exc()
+        return False
+
+
+def test_already_deleted_flag_in_details():
+    """Test that already_deleted flag is used in the response details."""
+    print("\n🔍 Testing 'already_deleted' flag in response details...")
+    
+    try:
+        import inspect
+        from functions_retention_policy import delete_aged_conversations, delete_aged_documents
+        
+        # Get source code
+        conversations_source = inspect.getsource(delete_aged_conversations)
+        documents_source = inspect.getsource(delete_aged_documents)
+        
+        # Check for 'already_deleted': True pattern in conversations
+        if "'already_deleted': True" in conversations_source or '"already_deleted": True' in conversations_source:
+            print("✅ delete_aged_conversations includes 'already_deleted' flag in details")
+        else:
+            print("❌ delete_aged_conversations missing 'already_deleted' flag in details")
+            return False
+        
+        # Check for 'already_deleted': True pattern in documents
+        if "'already_deleted': True" in documents_source or '"already_deleted": True' in documents_source:
+            print("✅ delete_aged_documents includes 'already_deleted' flag in details")
+        else:
+            print("❌ delete_aged_documents missing 'already_deleted' flag in details")
+            return False
+        
+        return True
+        
+    except Exception as e:
+        print(f"❌ Failed to verify already_deleted flag: {e}")
+        import traceback
+        traceback.print_exc()
+        return False
+
+
+def test_version_number():
+    """Test that the version is updated correctly."""
+    print("\n🔍 Testing version number...")
+    
+    try:
+        from config import VERSION
+        
+        # Version should be at least 0.236.012
+        version_parts = VERSION.split('.')
+        major = int(version_parts[0])
+        minor = int(version_parts[1])
+        patch = int(version_parts[2])
+        
+        if major == 0 and minor >= 236 and patch >= 12:
+            print(f"✅ Version {VERSION} is correct (>= 0.236.012)")
+            return True
+        elif major > 0 or minor > 236:
+            print(f"✅ Version {VERSION} is correct (later version)")
+            return True
+        else:
+            print(f"❌ Version {VERSION} is lower than expected 0.236.012")
+            return False
+            
+    except Exception as e:
+        print(f"❌ Failed to verify version: {e}")
+        import traceback
+        traceback.print_exc()
+        return False
+
+
+if __name__ == "__main__":
+    print("=" * 60)
+    print("Retention Policy NotFound Error Handling Test")
+    print("=" * 60)
+    
+    tests = [
+        test_notfound_exception_import,
+        test_retention_policy_function_definitions,
+        test_already_deleted_flag_in_details,
+        test_version_number
+    ]
+    
+    results = []
+    for test in tests:
+        try:
+            result = test()
+            results.append(result)
+        except Exception as e:
+            print(f"❌ Test {test.__name__} failed with exception: {e}")
+            import traceback
+            traceback.print_exc()
+            results.append(False)
+    
+    print("\n" + "=" * 60)
+    print(f"📊 Results: {sum(results)}/{len(results)} tests passed")
+    print("=" * 60)
+    
+    if all(results):
+        print("\n✅ All tests passed! NotFound error handling is correctly implemented.")
+        sys.exit(0)
+    else:
+        print("\n❌ Some tests failed. Please review the implementation.")
+        sys.exit(1)

From 2e8e87a43b40c0d397a6cb8252408c65b0a2824d Mon Sep 17 00:00:00 2001
From: Paul Lizer <paullizer@microsoft.com>
Date: Mon, 26 Jan 2026 09:30:34 -0500
Subject: [PATCH 02/11] Corrected version to 0.236.011 (#645)

---
 application/single_app/config.py                                | 2 +-
 .../{v0.236.012 => v0.236.011}/RETENTION_POLICY_NOTFOUND_FIX.md | 0
 2 files changed, 1 insertion(+), 1 deletion(-)
 rename docs/explanation/fixes/{v0.236.012 => v0.236.011}/RETENTION_POLICY_NOTFOUND_FIX.md (100%)

diff --git a/application/single_app/config.py b/application/single_app/config.py
index caf09fc8..0596e3ca 100644
--- a/application/single_app/config.py
+++ b/application/single_app/config.py
@@ -88,7 +88,7 @@
 EXECUTOR_TYPE = 'thread'
 EXECUTOR_MAX_WORKERS = 30
 SESSION_TYPE = 'filesystem'
-VERSION = "0.236.012"
+VERSION = "0.236.011"
 
 
 SECRET_KEY = os.getenv('SECRET_KEY', 'dev-secret-key-change-in-production')
diff --git a/docs/explanation/fixes/v0.236.012/RETENTION_POLICY_NOTFOUND_FIX.md b/docs/explanation/fixes/v0.236.011/RETENTION_POLICY_NOTFOUND_FIX.md
similarity index 100%
rename from docs/explanation/fixes/v0.236.012/RETENTION_POLICY_NOTFOUND_FIX.md
rename to docs/explanation/fixes/v0.236.011/RETENTION_POLICY_NOTFOUND_FIX.md

From 604246126ddc931e300798ff2b7e5b7307f8c5a5 Mon Sep 17 00:00:00 2001
From: Paul Lizer <paullizer@microsoft.com>
Date: Mon, 26 Jan 2026 09:44:27 -0500
Subject: [PATCH 03/11] v0.237.001 (#649)

---
 application/single_app/config.py                               | 2 +-
 .../CONTROL_CENTER_APPLICATION_ROLES.md                        | 2 +-
 .../{v0.236.011 => v0.237.001}/CONVERSATION_DEEP_LINKING.md    | 2 +-
 .../{v0.236.011 => v0.237.001}/PLUGIN_AUTH_TYPE_CONSTRAINTS.md | 2 +-
 .../{v0.236.011 => v0.237.001}/PRIVATE_NETWORKING_SUPPORT.md   | 2 +-
 .../{v0.236.011 => v0.237.001}/RETENTION_POLICY_DEFAULTS.md    | 3 +--
 .../features/{v0.236.011 => v0.237.001}/USER_AGREEMENT.md      | 2 +-
 .../{v0.236.011 => v0.237.001}/WEB_SEARCH_AZURE_AI_FOUNDRY.md  | 2 +-
 .../AGENT_PAYLOAD_FIELD_LENGTHS_FIX.md                         | 2 +-
 .../AGENT_TEMPLATE_MAX_LENGTHS_FIX.md                          | 2 +-
 .../CONTROL_CENTER_DATE_LABELS_FIX.md                          | 2 +-
 .../RETENTION_POLICY_NOTFOUND_FIX.md                           | 2 +-
 .../SOVEREIGN_CLOUD_COGNITIVE_SERVICES_SCOPE_FIX.md            | 2 +-
 .../USER_SEARCH_TOAST_INLINE_MESSAGES_FIX.md                   | 2 +-
 .../WEB_SEARCH_FAILURE_GRACEFUL_HANDLING_FIX.md                | 2 +-
 docs/explanation/release_notes.md                              | 2 +-
 16 files changed, 16 insertions(+), 17 deletions(-)
 rename docs/explanation/features/{v0.236.011 => v0.237.001}/CONTROL_CENTER_APPLICATION_ROLES.md (99%)
 rename docs/explanation/features/{v0.236.011 => v0.237.001}/CONVERSATION_DEEP_LINKING.md (99%)
 rename docs/explanation/features/{v0.236.011 => v0.237.001}/PLUGIN_AUTH_TYPE_CONSTRAINTS.md (99%)
 rename docs/explanation/features/{v0.236.011 => v0.237.001}/PRIVATE_NETWORKING_SUPPORT.md (99%)
 rename docs/explanation/features/{v0.236.011 => v0.237.001}/RETENTION_POLICY_DEFAULTS.md (99%)
 rename docs/explanation/features/{v0.236.011 => v0.237.001}/USER_AGREEMENT.md (99%)
 rename docs/explanation/features/{v0.236.011 => v0.237.001}/WEB_SEARCH_AZURE_AI_FOUNDRY.md (99%)
 rename docs/explanation/fixes/{v0.236.011 => v0.237.001}/AGENT_PAYLOAD_FIELD_LENGTHS_FIX.md (95%)
 rename docs/explanation/fixes/{v0.236.011 => v0.237.001}/AGENT_TEMPLATE_MAX_LENGTHS_FIX.md (95%)
 rename docs/explanation/fixes/{v0.236.011 => v0.237.001}/CONTROL_CENTER_DATE_LABELS_FIX.md (96%)
 rename docs/explanation/fixes/{v0.236.011 => v0.237.001}/RETENTION_POLICY_NOTFOUND_FIX.md (99%)
 rename docs/explanation/fixes/{v0.236.011 => v0.237.001}/SOVEREIGN_CLOUD_COGNITIVE_SERVICES_SCOPE_FIX.md (98%)
 rename docs/explanation/fixes/{v0.236.011 => v0.237.001}/USER_SEARCH_TOAST_INLINE_MESSAGES_FIX.md (98%)
 rename docs/explanation/fixes/{v0.236.011 => v0.237.001}/WEB_SEARCH_FAILURE_GRACEFUL_HANDLING_FIX.md (99%)

diff --git a/application/single_app/config.py b/application/single_app/config.py
index 0596e3ca..12906ce8 100644
--- a/application/single_app/config.py
+++ b/application/single_app/config.py
@@ -88,7 +88,7 @@
 EXECUTOR_TYPE = 'thread'
 EXECUTOR_MAX_WORKERS = 30
 SESSION_TYPE = 'filesystem'
-VERSION = "0.236.011"
+VERSION = "0.237.001"
 
 
 SECRET_KEY = os.getenv('SECRET_KEY', 'dev-secret-key-change-in-production')
diff --git a/docs/explanation/features/v0.236.011/CONTROL_CENTER_APPLICATION_ROLES.md b/docs/explanation/features/v0.237.001/CONTROL_CENTER_APPLICATION_ROLES.md
similarity index 99%
rename from docs/explanation/features/v0.236.011/CONTROL_CENTER_APPLICATION_ROLES.md
rename to docs/explanation/features/v0.237.001/CONTROL_CENTER_APPLICATION_ROLES.md
index 29ffc1fc..3d61f752 100644
--- a/docs/explanation/features/v0.236.011/CONTROL_CENTER_APPLICATION_ROLES.md
+++ b/docs/explanation/features/v0.237.001/CONTROL_CENTER_APPLICATION_ROLES.md
@@ -4,7 +4,7 @@
 
 Added two new application roles for finer-grained access control to the Control Center, enabling organizations to delegate administrative functions while maintaining security boundaries.
 
-**Version Implemented:** 0.236.011
+**Version Implemented:** v0.237.001
 
 ## New Roles
 
diff --git a/docs/explanation/features/v0.236.011/CONVERSATION_DEEP_LINKING.md b/docs/explanation/features/v0.237.001/CONVERSATION_DEEP_LINKING.md
similarity index 99%
rename from docs/explanation/features/v0.236.011/CONVERSATION_DEEP_LINKING.md
rename to docs/explanation/features/v0.237.001/CONVERSATION_DEEP_LINKING.md
index d3c6e53e..cebf392b 100644
--- a/docs/explanation/features/v0.236.011/CONVERSATION_DEEP_LINKING.md
+++ b/docs/explanation/features/v0.237.001/CONVERSATION_DEEP_LINKING.md
@@ -4,7 +4,7 @@
 
 SimpleChat now supports conversation deep linking through URL query parameters. Users can share direct links to specific conversations, and the application will automatically navigate to and load the referenced conversation when the link is accessed.
 
-**Version Implemented:** 0.236.011
+**Version Implemented:** v0.237.001
 
 ## Key Features
 
diff --git a/docs/explanation/features/v0.236.011/PLUGIN_AUTH_TYPE_CONSTRAINTS.md b/docs/explanation/features/v0.237.001/PLUGIN_AUTH_TYPE_CONSTRAINTS.md
similarity index 99%
rename from docs/explanation/features/v0.236.011/PLUGIN_AUTH_TYPE_CONSTRAINTS.md
rename to docs/explanation/features/v0.237.001/PLUGIN_AUTH_TYPE_CONSTRAINTS.md
index 093923c6..9d2ea6e6 100644
--- a/docs/explanation/features/v0.236.011/PLUGIN_AUTH_TYPE_CONSTRAINTS.md
+++ b/docs/explanation/features/v0.237.001/PLUGIN_AUTH_TYPE_CONSTRAINTS.md
@@ -4,7 +4,7 @@
 
 SimpleChat now enforces authentication type constraints per plugin type. Different plugin types may support different authentication methods based on their requirements and the APIs they integrate with. This feature provides a structured way to define and retrieve allowed authentication types for each plugin type.
 
-**Version Implemented:** 0.236.011
+**Version Implemented:** v0.237.001
 
 ## Key Features
 
diff --git a/docs/explanation/features/v0.236.011/PRIVATE_NETWORKING_SUPPORT.md b/docs/explanation/features/v0.237.001/PRIVATE_NETWORKING_SUPPORT.md
similarity index 99%
rename from docs/explanation/features/v0.236.011/PRIVATE_NETWORKING_SUPPORT.md
rename to docs/explanation/features/v0.237.001/PRIVATE_NETWORKING_SUPPORT.md
index de2ae92f..5379b73d 100644
--- a/docs/explanation/features/v0.236.011/PRIVATE_NETWORKING_SUPPORT.md
+++ b/docs/explanation/features/v0.237.001/PRIVATE_NETWORKING_SUPPORT.md
@@ -4,7 +4,7 @@
 
 Comprehensive private networking support for SimpleChat deployments via Azure Developer CLI (AZD) and Bicep infrastructure-as-code. This feature enables secure, isolated deployments with private endpoints, virtual networks, and private DNS zones.
 
-**Version Implemented:** 0.236.011
+**Version Implemented:** v0.237.001
 
 ## Key Features
 
diff --git a/docs/explanation/features/v0.236.011/RETENTION_POLICY_DEFAULTS.md b/docs/explanation/features/v0.237.001/RETENTION_POLICY_DEFAULTS.md
similarity index 99%
rename from docs/explanation/features/v0.236.011/RETENTION_POLICY_DEFAULTS.md
rename to docs/explanation/features/v0.237.001/RETENTION_POLICY_DEFAULTS.md
index e3fe426d..cdca4ce5 100644
--- a/docs/explanation/features/v0.236.011/RETENTION_POLICY_DEFAULTS.md
+++ b/docs/explanation/features/v0.237.001/RETENTION_POLICY_DEFAULTS.md
@@ -1,8 +1,7 @@
 # RETENTION_POLICY_DEFAULTS.md
 
 **Feature**: Admin-Configurable Default Retention Policies  
-**Version**: 0.236.011  
-**Implemented in**: 0.236.011
+**Version**: v0.237.001
 
 ## Overview and Purpose
 
diff --git a/docs/explanation/features/v0.236.011/USER_AGREEMENT.md b/docs/explanation/features/v0.237.001/USER_AGREEMENT.md
similarity index 99%
rename from docs/explanation/features/v0.236.011/USER_AGREEMENT.md
rename to docs/explanation/features/v0.237.001/USER_AGREEMENT.md
index e87589d7..d72d6533 100644
--- a/docs/explanation/features/v0.236.011/USER_AGREEMENT.md
+++ b/docs/explanation/features/v0.237.001/USER_AGREEMENT.md
@@ -4,7 +4,7 @@
 
 The User Agreement feature allows administrators to configure a global agreement that users must accept before uploading files to workspaces. This provides organizations with a mechanism to ensure users acknowledge terms, policies, or guidelines before contributing documents to the system.
 
-**Version Implemented:** 0.236.011
+**Version Implemented:** v0.237.001
 
 ## Key Features
 
diff --git a/docs/explanation/features/v0.236.011/WEB_SEARCH_AZURE_AI_FOUNDRY.md b/docs/explanation/features/v0.237.001/WEB_SEARCH_AZURE_AI_FOUNDRY.md
similarity index 99%
rename from docs/explanation/features/v0.236.011/WEB_SEARCH_AZURE_AI_FOUNDRY.md
rename to docs/explanation/features/v0.237.001/WEB_SEARCH_AZURE_AI_FOUNDRY.md
index 7107017f..2e8e3b7c 100644
--- a/docs/explanation/features/v0.236.011/WEB_SEARCH_AZURE_AI_FOUNDRY.md
+++ b/docs/explanation/features/v0.237.001/WEB_SEARCH_AZURE_AI_FOUNDRY.md
@@ -4,7 +4,7 @@
 
 SimpleChat now supports web search capability through Azure AI Foundry agents using the Grounding with Bing Search service. This feature enables AI responses to be augmented with real-time web search results, providing users with up-to-date information beyond the model's training data.
 
-**Version Implemented:** 0.236.011
+**Version Implemented:** v0.237.001
 
 ## Key Features
 
diff --git a/docs/explanation/fixes/v0.236.011/AGENT_PAYLOAD_FIELD_LENGTHS_FIX.md b/docs/explanation/fixes/v0.237.001/AGENT_PAYLOAD_FIELD_LENGTHS_FIX.md
similarity index 95%
rename from docs/explanation/fixes/v0.236.011/AGENT_PAYLOAD_FIELD_LENGTHS_FIX.md
rename to docs/explanation/fixes/v0.237.001/AGENT_PAYLOAD_FIELD_LENGTHS_FIX.md
index e7f38582..e3119d5c 100644
--- a/docs/explanation/fixes/v0.236.011/AGENT_PAYLOAD_FIELD_LENGTHS_FIX.md
+++ b/docs/explanation/fixes/v0.237.001/AGENT_PAYLOAD_FIELD_LENGTHS_FIX.md
@@ -1,4 +1,4 @@
-# Agent Payload Field Lengths Fix (Version 0.237.009)
+# Agent Payload Field Lengths Fix (Version v0.237.001)
 
 ## Header Information
 - **Fix Title:** Agent payload field length validation
diff --git a/docs/explanation/fixes/v0.236.011/AGENT_TEMPLATE_MAX_LENGTHS_FIX.md b/docs/explanation/fixes/v0.237.001/AGENT_TEMPLATE_MAX_LENGTHS_FIX.md
similarity index 95%
rename from docs/explanation/fixes/v0.236.011/AGENT_TEMPLATE_MAX_LENGTHS_FIX.md
rename to docs/explanation/fixes/v0.237.001/AGENT_TEMPLATE_MAX_LENGTHS_FIX.md
index 71e1f0de..7748a093 100644
--- a/docs/explanation/fixes/v0.236.011/AGENT_TEMPLATE_MAX_LENGTHS_FIX.md
+++ b/docs/explanation/fixes/v0.237.001/AGENT_TEMPLATE_MAX_LENGTHS_FIX.md
@@ -1,4 +1,4 @@
-# Agent Template Max Lengths Fix (Version 0.237.010)
+# Agent Template Max Lengths Fix (v0.237.001)
 
 ## Header Information
 - **Fix Title:** Agent template max length validation
diff --git a/docs/explanation/fixes/v0.236.011/CONTROL_CENTER_DATE_LABELS_FIX.md b/docs/explanation/fixes/v0.237.001/CONTROL_CENTER_DATE_LABELS_FIX.md
similarity index 96%
rename from docs/explanation/fixes/v0.236.011/CONTROL_CENTER_DATE_LABELS_FIX.md
rename to docs/explanation/fixes/v0.237.001/CONTROL_CENTER_DATE_LABELS_FIX.md
index a7d1bf34..1add8e46 100644
--- a/docs/explanation/fixes/v0.236.011/CONTROL_CENTER_DATE_LABELS_FIX.md
+++ b/docs/explanation/fixes/v0.237.001/CONTROL_CENTER_DATE_LABELS_FIX.md
@@ -1,4 +1,4 @@
-# Control Center Date Labels Fix (Version 0.235.074)
+# Control Center Date Labels Fix (v0.237.001)
 
 ## Header Information
 - **Fix Title:** Control Center Date Labels Fix
diff --git a/docs/explanation/fixes/v0.236.011/RETENTION_POLICY_NOTFOUND_FIX.md b/docs/explanation/fixes/v0.237.001/RETENTION_POLICY_NOTFOUND_FIX.md
similarity index 99%
rename from docs/explanation/fixes/v0.236.011/RETENTION_POLICY_NOTFOUND_FIX.md
rename to docs/explanation/fixes/v0.237.001/RETENTION_POLICY_NOTFOUND_FIX.md
index 82a0ec15..e264920f 100644
--- a/docs/explanation/fixes/v0.236.011/RETENTION_POLICY_NOTFOUND_FIX.md
+++ b/docs/explanation/fixes/v0.237.001/RETENTION_POLICY_NOTFOUND_FIX.md
@@ -18,7 +18,7 @@ This is a **race condition** scenario where:
 
 ## Fix Applied
 
-**Version: 0.236.012**
+**Version:v0.237.001**
 
 The fix adds specific handling for `CosmosResourceNotFoundError` in both conversation and document deletion loops:
 
diff --git a/docs/explanation/fixes/v0.236.011/SOVEREIGN_CLOUD_COGNITIVE_SERVICES_SCOPE_FIX.md b/docs/explanation/fixes/v0.237.001/SOVEREIGN_CLOUD_COGNITIVE_SERVICES_SCOPE_FIX.md
similarity index 98%
rename from docs/explanation/fixes/v0.236.011/SOVEREIGN_CLOUD_COGNITIVE_SERVICES_SCOPE_FIX.md
rename to docs/explanation/fixes/v0.237.001/SOVEREIGN_CLOUD_COGNITIVE_SERVICES_SCOPE_FIX.md
index f76993ba..4316dfcb 100644
--- a/docs/explanation/fixes/v0.236.011/SOVEREIGN_CLOUD_COGNITIVE_SERVICES_SCOPE_FIX.md
+++ b/docs/explanation/fixes/v0.237.001/SOVEREIGN_CLOUD_COGNITIVE_SERVICES_SCOPE_FIX.md
@@ -4,7 +4,7 @@
 
 Fixed hardcoded commercial Azure cognitive services scope references in chat streaming and Smart HTTP Plugin that prevented proper authentication in Azure Government (MAG) and custom cloud environments.
 
-**Version Implemented:** 0.236.011
+**Version Implemented:** v0.237.001
 
 **Related Issue:** [#616](https://github.com/microsoft/simplechat/issues/616#issue-3835164022)
 
diff --git a/docs/explanation/fixes/v0.236.011/USER_SEARCH_TOAST_INLINE_MESSAGES_FIX.md b/docs/explanation/fixes/v0.237.001/USER_SEARCH_TOAST_INLINE_MESSAGES_FIX.md
similarity index 98%
rename from docs/explanation/fixes/v0.236.011/USER_SEARCH_TOAST_INLINE_MESSAGES_FIX.md
rename to docs/explanation/fixes/v0.237.001/USER_SEARCH_TOAST_INLINE_MESSAGES_FIX.md
index f93a7871..7ba7ed08 100644
--- a/docs/explanation/fixes/v0.236.011/USER_SEARCH_TOAST_INLINE_MESSAGES_FIX.md
+++ b/docs/explanation/fixes/v0.237.001/USER_SEARCH_TOAST_INLINE_MESSAGES_FIX.md
@@ -4,7 +4,7 @@
 
 Updated the `searchUsers()` function to use inline and toast messages instead of browser alert pop-ups, improving user experience and aligning with modern UI patterns.
 
-**Version Implemented:** 0.236.011
+**Version Implemented:** v0.237.001
 
 **Related PR:** [#608](https://github.com/microsoft/simplechat/pull/608#discussion_r2701900020)
 
diff --git a/docs/explanation/fixes/v0.236.011/WEB_SEARCH_FAILURE_GRACEFUL_HANDLING_FIX.md b/docs/explanation/fixes/v0.237.001/WEB_SEARCH_FAILURE_GRACEFUL_HANDLING_FIX.md
similarity index 99%
rename from docs/explanation/fixes/v0.236.011/WEB_SEARCH_FAILURE_GRACEFUL_HANDLING_FIX.md
rename to docs/explanation/fixes/v0.237.001/WEB_SEARCH_FAILURE_GRACEFUL_HANDLING_FIX.md
index 233324c9..ad18d356 100644
--- a/docs/explanation/fixes/v0.236.011/WEB_SEARCH_FAILURE_GRACEFUL_HANDLING_FIX.md
+++ b/docs/explanation/fixes/v0.237.001/WEB_SEARCH_FAILURE_GRACEFUL_HANDLING_FIX.md
@@ -4,7 +4,7 @@
 
 Fixed an issue where Azure AI Foundry web search agent failures would cause the AI model to answer questions using outdated training data instead of informing the user that the web search failed.
 
-**Version Implemented:** 0.236.014
+**Version Implemented:** v0.237.001
 
 ## Problem
 
diff --git a/docs/explanation/release_notes.md b/docs/explanation/release_notes.md
index 2d1e0e94..df88ebcd 100644
--- a/docs/explanation/release_notes.md
+++ b/docs/explanation/release_notes.md
@@ -1,7 +1,7 @@
 <!-- BEGIN release_notes.md BLOCK -->
 # Feature Release
 
-### **(v0.236.011)**
+### **(v0.237.001)**
 
 #### New Features
 

From 84e00cba645fc8dd800c17fbd3611527a003d0a1 Mon Sep 17 00:00:00 2001
From: Ed Clark <clarked@microsoft.com>
Date: Mon, 26 Jan 2026 10:41:16 -0500
Subject: [PATCH 04/11] Use Microsoft python base image

---
 application/single_app/Dockerfile | 130 +++++++++++-------------------
 1 file changed, 48 insertions(+), 82 deletions(-)

diff --git a/application/single_app/Dockerfile b/application/single_app/Dockerfile
index c6209334..c3434c8e 100644
--- a/application/single_app/Dockerfile
+++ b/application/single_app/Dockerfile
@@ -1,98 +1,64 @@
-# Stage 1: System dependencies and ODBC driver install
-ARG PYTHON_MAJOR_VERSION_ARG="3"
-ARG PYTHON_MINOR_VERSION_ARG="13"
-ARG PYTHON_PATCH_VERSION_ARG="11"
-FROM debian:12-slim AS builder
-
-ARG PYTHON_MAJOR_VERSION_ARG
-ARG PYTHON_MINOR_VERSION_ARG
-ARG PYTHON_PATCH_VERSION_ARG
-
-ENV DEBIAN_FRONTEND=noninteractive \
-    PYTHONIOENCODING=utf-8 \
-    LANG=C.UTF-8 \
-    LC_ALL=C.UTF-8
-
-# Build deps for CPython and pip stdlib modules
-WORKDIR /deps
-RUN apt-get update && apt-get install -y --no-install-recommends \
-    build-essential \
-    wget ca-certificates \
-    libssl-dev zlib1g-dev libbz2-dev libreadline-dev libsqlite3-dev \
-    libncursesw5-dev libffi-dev liblzma-dev uuid-dev tk-dev && \
-    rm -rf /var/lib/apt/lists/*
-
-# Build and install Python from source
-# Example: https://www.python.org/ftp/python/3.13.11/Python-3.13.11.tgz
-WORKDIR /tmp
-RUN wget https://www.python.org/ftp/python/${PYTHON_MAJOR_VERSION_ARG}.${PYTHON_MINOR_VERSION_ARG}.${PYTHON_PATCH_VERSION_ARG}/Python-${PYTHON_MAJOR_VERSION_ARG}.${PYTHON_MINOR_VERSION_ARG}.${PYTHON_PATCH_VERSION_ARG}.tgz && \
-    tar -xzf Python-${PYTHON_MAJOR_VERSION_ARG}.${PYTHON_MINOR_VERSION_ARG}.${PYTHON_PATCH_VERSION_ARG}.tgz && \
-    cd Python-${PYTHON_MAJOR_VERSION_ARG}.${PYTHON_MINOR_VERSION_ARG}.${PYTHON_PATCH_VERSION_ARG} && \
-    LDFLAGS="-Wl,-rpath,/usr/local/lib" ./configure --enable-optimizations --enable-shared --with-ensurepip=install --prefix=/usr/local && \
-    make -j"$(nproc)" && \
-    make altinstall
-
-USER root
-WORKDIR /app
-RUN groupadd -g 65532 nonroot && useradd -m -u 65532 -g nonroot nonroot
+# Create nonroot user/group with a stable UID/GID (choose values consistent with your org)
+ARG UID=10001
+ARG GID=10001
+
+FROM mcr.microsoft.com/azurelinux/base/python:3.12 AS builder
+
+ARG UID
+ARG GID
+
+# CA
+# copy certs to /etc/pki/ca-trust/source/anchors
+#COPY caroots /etc/ssl/certs
+RUN mkdir -p /etc/pki/ca-trust/source/anchors/ \
+    && update-ca-trust enable \
+    && cp /etc/ssl/certs/*.crt /etc/pki/ca-trust/source/anchors/ \
+    && update-ca-trust extract
+
+ENV PYTHONUNBUFFERED=1
+
+RUN set -eux; \
+    echo "nonroot:x:${GID}:" >> /etc/group; \
+    echo "nonroot:x:${UID}:${GID}:nonroot:/home/nonroot:/bin/bash" >> /etc/passwd; \
+    mkdir -p /home/nonroot; \
+    chown ${UID}:${GID} /home/nonroot; \
+    mkdir -p /app; \
+    chown ${UID}:${GID} /app; \
+    chmod 744 /app
 
-RUN python${PYTHON_MAJOR_VERSION_ARG}.${PYTHON_MINOR_VERSION_ARG} -m venv /app/venv
-RUN python${PYTHON_MAJOR_VERSION_ARG}.${PYTHON_MINOR_VERSION_ARG} -m pip install wheel
+WORKDIR /app
 
-# Copy requirements and install them into the virtualenv
-ENV PATH="/app/venv/bin:$PATH"
-COPY application/single_app/requirements.txt /app/requirements.txt
-RUN python${PYTHON_MAJOR_VERSION_ARG}.${PYTHON_MINOR_VERSION_ARG} -m pip install --no-cache-dir -r /app/requirements.txt
+USER ${UID}:${GID}
 
-# Fix permissions so nonroot can use everything
-RUN chown -R 65532:65532 /app
+# Copy requirements and install them to system
+COPY application/single_app/requirements.txt .
+RUN python3 -m pip install --no-cache-dir -r requirements.txt --user
 
-RUN mkdir -p /app/flask_session && chown -R 65532:65532 /app/flask_session
-RUN mkdir /sc-temp-files && chown -R 65532:65532 /sc-temp-files
-USER 65532:65532
+FROM mcr.microsoft.com/azurelinux/distroless/python:3.12
 
-#Stage 2: Final containter
-FROM gcr.io/distroless/base-debian12:latest
-ARG PYTHON_MAJOR_VERSION_ARG
-ARG PYTHON_MINOR_VERSION_ARG
-ARG PYTHON_PATCH_VERSION_ARG
+# Setup pip.conf if has content
+#COPY pip.conf /etc/pip.conf
 
-ENV PYTHONIOENCODING=utf-8 \
-    LANG=C.UTF-8 \
-    LC_ALL=C.UTF-8 \
-    PYTHONUNBUFFERED=1 \
-    PATH="/app/venv/bin:/usr/local/bin:$PATH" \
-    LD_LIBRARY_PATH="/usr/local/lib:${LD_LIBRARY_PATH}"
+COPY --from=builder /etc/pki /etc/pki
+COPY --from=builder /home/nonroot /home/nonroot
+COPY --from=builder /etc/passwd /etc/passwd
+COPY --from=builder /etc/group /etc/group
+COPY --from=builder /home/nonroot/.local /home/nonroot/.local
+COPY --from=builder /app /app
 
-WORKDIR /app
+# RUN mkdir -p /.local/bin && chown -R ${UID}:${GID} /.local
+ENV PATH="/.local/bin:$PATH"
 
-USER root
+# RUN mkdir -p /app/flask_session && chown -R ${UID}:${GID} /app
 
-# Copy only the built Python interpreter (venv entrypoint handles python/python3)
-# Copy the full CPython installation so stdlib modules (e.g., encodings) are available
-COPY --from=builder /usr/local/ /usr/local/
+WORKDIR /app
 
-# Copy system libraries for x86_64
-COPY --from=builder /lib/x86_64-linux-gnu/ \
-    /lib64/ld-linux-x86-64.so.2 \
-    /usr/lib/x86_64-linux-gnu/
-    #/usr/share/ca-certificates \
-    #/etc/ssl/certs \
-    #/usr/bin/ffmpeg \
-    #/usr/share/zoneinfo /usr/share/
+USER ${UID}:${GID}
 
 # Copy application code and set ownership
-COPY --chown=65532:65532 application/single_app/ /app/
-
-# Copy the virtualenv from the builder stage
-COPY --from=builder --chown=65532:65532 /app/venv /app/venv
-COPY --from=builder --chown=65532:65532 /app/flask_session /app/flask_session
-COPY --from=builder --chown=65532:65532 /sc-temp-files /sc-temp-files
+COPY --chown=${UID}:${GID} application/single_app ./
 
 # Expose port
 EXPOSE 5000
 
-USER 65532:65532
-
-
-ENTRYPOINT ["/app/venv/bin/python", "-c", "import runpy; runpy.run_path('/app/app.py', run_name='__main__')"]
\ No newline at end of file
+ENTRYPOINT [ "python3", "/app/app.py" ]

From 317c6eec6684b96f77d776cd0fd7e50f9cc5370a Mon Sep 17 00:00:00 2001
From: Ed Clark <clarked@microsoft.com>
Date: Mon, 26 Jan 2026 10:44:49 -0500
Subject: [PATCH 05/11] Add python ENV vars

---
 application/single_app/Dockerfile | 9 +++++----
 1 file changed, 5 insertions(+), 4 deletions(-)

diff --git a/application/single_app/Dockerfile b/application/single_app/Dockerfile
index c3434c8e..ec647884 100644
--- a/application/single_app/Dockerfile
+++ b/application/single_app/Dockerfile
@@ -46,10 +46,11 @@ COPY --from=builder /etc/group /etc/group
 COPY --from=builder /home/nonroot/.local /home/nonroot/.local
 COPY --from=builder /app /app
 
-# RUN mkdir -p /.local/bin && chown -R ${UID}:${GID} /.local
-ENV PATH="/.local/bin:$PATH"
-
-# RUN mkdir -p /app/flask_session && chown -R ${UID}:${GID} /app
+ENV PATH="/.local/bin:$PATH" \
+    PYTHONIOENCODING=utf-8 \
+    LANG=C.UTF-8 \
+    LC_ALL=C.UTF-8 \
+    PYTHONUNBUFFERED=1 \
 
 WORKDIR /app
 

From 25f41fb89dd688d3551796d64d82474a33c3c61b Mon Sep 17 00:00:00 2001
From: Ed Clark <clarked@microsoft.com>
Date: Mon, 26 Jan 2026 10:45:43 -0500
Subject: [PATCH 06/11] Add python ENV vars

---
 application/single_app/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/application/single_app/Dockerfile b/application/single_app/Dockerfile
index ec647884..228904a4 100644
--- a/application/single_app/Dockerfile
+++ b/application/single_app/Dockerfile
@@ -50,7 +50,7 @@ ENV PATH="/.local/bin:$PATH" \
     PYTHONIOENCODING=utf-8 \
     LANG=C.UTF-8 \
     LC_ALL=C.UTF-8 \
-    PYTHONUNBUFFERED=1 \
+    PYTHONUNBUFFERED=1
 
 WORKDIR /app
 

From 0753f529aa42c7b5eb2e3948e0d9e5fda95bd7f7 Mon Sep 17 00:00:00 2001
From: Ed Clark <clarked@microsoft.com>
Date: Mon, 26 Jan 2026 12:01:25 -0500
Subject: [PATCH 07/11] Install deps to systme

---
 application/single_app/Dockerfile | 25 ++++++++++++++-----------
 1 file changed, 14 insertions(+), 11 deletions(-)

diff --git a/application/single_app/Dockerfile b/application/single_app/Dockerfile
index 228904a4..bdb54f1e 100644
--- a/application/single_app/Dockerfile
+++ b/application/single_app/Dockerfile
@@ -28,25 +28,30 @@ RUN set -eux; \
 
 WORKDIR /app
 
-USER ${UID}:${GID}
-
 # Copy requirements and install them to system
-COPY application/single_app/requirements.txt .
-RUN python3 -m pip install --no-cache-dir -r requirements.txt --user
+COPY --chown=${UID}:${GID} application/single_app/requirements.txt .
+RUN python3 -m pip install --no-cache-dir -r requirements.txt
 
 FROM mcr.microsoft.com/azurelinux/distroless/python:3.12
 
-# Setup pip.conf if has content
-#COPY pip.conf /etc/pip.conf
+ARG UID
+ARG GID
 
 COPY --from=builder /etc/pki /etc/pki
 COPY --from=builder /home/nonroot /home/nonroot
 COPY --from=builder /etc/passwd /etc/passwd
 COPY --from=builder /etc/group /etc/group
-COPY --from=builder /home/nonroot/.local /home/nonroot/.local
-COPY --from=builder /app /app
+COPY --from=builder /usr/lib/python3.12 /usr/lib/python3.12
+
+USER ${UID}:${GID}
+
+# Setup pip.conf if has content
+#COPY pip.conf /etc/pip.conf
 
-ENV PATH="/.local/bin:$PATH" \
+COPY --from=builder --chown=${UID}:${GID} /app /app
+
+ENV HOME=/home/nonroot \
+    PATH="/home/nonroot/.local/bin:$PATH" \
     PYTHONIOENCODING=utf-8 \
     LANG=C.UTF-8 \
     LC_ALL=C.UTF-8 \
@@ -54,8 +59,6 @@ ENV PATH="/.local/bin:$PATH" \
 
 WORKDIR /app
 
-USER ${UID}:${GID}
-
 # Copy application code and set ownership
 COPY --chown=${UID}:${GID} application/single_app ./
 

From f2958f05ae1df6f2eb5ba70ff04d523a3d15a5b8 Mon Sep 17 00:00:00 2001
From: Ed Clark <clarked@microsoft.com>
Date: Mon, 26 Jan 2026 12:59:58 -0500
Subject: [PATCH 08/11] Add temp dir to image and pip conf support

---
 application/single_app/Dockerfile | 14 +++++++++-----
 pip.conf.d/.gitkeep               |  0
 2 files changed, 9 insertions(+), 5 deletions(-)
 create mode 100644 pip.conf.d/.gitkeep

diff --git a/application/single_app/Dockerfile b/application/single_app/Dockerfile
index bdb54f1e..018ce81a 100644
--- a/application/single_app/Dockerfile
+++ b/application/single_app/Dockerfile
@@ -1,12 +1,15 @@
 # Create nonroot user/group with a stable UID/GID (choose values consistent with your org)
-ARG UID=10001
-ARG GID=10001
+ARG UID=65532
+ARG GID=65532
 
 FROM mcr.microsoft.com/azurelinux/base/python:3.12 AS builder
 
 ARG UID
 ARG GID
 
+# Setup pip.conf if has content
+COPY pip.conf.d/ /etc/pip.conf.d
+
 # CA
 # copy certs to /etc/pki/ca-trust/source/anchors
 #COPY caroots /etc/ssl/certs
@@ -26,6 +29,9 @@ RUN set -eux; \
     chown ${UID}:${GID} /app; \
     chmod 744 /app
 
+RUN mkdir -p /app/flask_session && chown -R ${UID}:${GID} /app/flask_session
+RUN mkdir /sc-temp-files && chown -R ${UID}:${GID} /sc-temp-files
+
 WORKDIR /app
 
 # Copy requirements and install them to system
@@ -45,10 +51,8 @@ COPY --from=builder /usr/lib/python3.12 /usr/lib/python3.12
 
 USER ${UID}:${GID}
 
-# Setup pip.conf if has content
-#COPY pip.conf /etc/pip.conf
-
 COPY --from=builder --chown=${UID}:${GID} /app /app
+COPY --from=builder --chown=${UID}:${GID} /sc-temp-files /sc-temp-files
 
 ENV HOME=/home/nonroot \
     PATH="/home/nonroot/.local/bin:$PATH" \
diff --git a/pip.conf.d/.gitkeep b/pip.conf.d/.gitkeep
new file mode 100644
index 00000000..e69de29b

From efd6fe7a7a8d8720f8dadfe8997568935c674267 Mon Sep 17 00:00:00 2001
From: Ed Clark <clarked@microsoft.com>
Date: Mon, 26 Jan 2026 13:04:02 -0500
Subject: [PATCH 09/11] Add custom-ca-certificates dir

---
 application/single_app/Dockerfile | 2 +-
 custom-ca-certificates/.gitkeep   | 0
 2 files changed, 1 insertion(+), 1 deletion(-)
 create mode 100644 custom-ca-certificates/.gitkeep

diff --git a/application/single_app/Dockerfile b/application/single_app/Dockerfile
index 018ce81a..65483ac6 100644
--- a/application/single_app/Dockerfile
+++ b/application/single_app/Dockerfile
@@ -12,7 +12,7 @@ COPY pip.conf.d/ /etc/pip.conf.d
 
 # CA
 # copy certs to /etc/pki/ca-trust/source/anchors
-#COPY caroots /etc/ssl/certs
+COPY custom-ca-certificates/ /etc/ssl/certs
 RUN mkdir -p /etc/pki/ca-trust/source/anchors/ \
     && update-ca-trust enable \
     && cp /etc/ssl/certs/*.crt /etc/pki/ca-trust/source/anchors/ \
diff --git a/custom-ca-certificates/.gitkeep b/custom-ca-certificates/.gitkeep
new file mode 100644
index 00000000..e69de29b

From 7d0a792428dd8ecc74a9a2dd30a0d4109c2e53f0 Mon Sep 17 00:00:00 2001
From: Paul Lizer <paullizer@microsoft.com>
Date: Mon, 26 Jan 2026 15:50:05 -0500
Subject: [PATCH 10/11] Logo bug fix (#654)

* release note updating for github coplilot

* fixed logo bug issue

* added 2,3,4,5,6,14 days to rentention policy

* added retention policy time updates
---
 .../update_release_notes.instructions.md      |  90 +++++++++
 application/single_app/config.py              |   2 +-
 application/single_app/functions_settings.py  |   9 +
 .../single_app/static/images/custom_logo.png  | Bin 11705 -> 11877 bytes
 .../static/images/custom_logo_dark.png        | Bin 13770 -> 13468 bytes
 .../single_app/static/images/favicon.ico      | Bin 2237 -> 2237 bytes
 .../single_app/templates/admin_settings.html  |  36 ++++
 .../single_app/templates/control_center.html  |  24 +++
 application/single_app/templates/profile.html |  12 ++
 .../CUSTOM_LOGO_NOT_DISPLAYING_FIX.md         | 102 +++++++++++
 docs/explanation/release_notes.md             |  22 +++
 .../test_custom_logo_sanitization_fix.py      | 172 ++++++++++++++++++
 12 files changed, 468 insertions(+), 1 deletion(-)
 create mode 100644 .github/instructions/update_release_notes.instructions.md
 create mode 100644 docs/explanation/fixes/v0.237.003/CUSTOM_LOGO_NOT_DISPLAYING_FIX.md
 create mode 100644 functional_tests/test_custom_logo_sanitization_fix.py

diff --git a/.github/instructions/update_release_notes.instructions.md b/.github/instructions/update_release_notes.instructions.md
new file mode 100644
index 00000000..353cea48
--- /dev/null
+++ b/.github/instructions/update_release_notes.instructions.md
@@ -0,0 +1,90 @@
+---
+applyTo: '**'
+---
+
+# Release Notes Update Instructions
+
+## When to Update Release Notes
+
+After completing a code change (bug fix, new feature, enhancement, or breaking change), always ask the user:
+
+**"Would you like me to update the release notes in `docs/explanation/release_notes.md`?"**
+
+## If the User Confirms Yes
+
+Update the release notes file following these guidelines:
+
+### 1. Location
+Release notes are located at: `docs/explanation/release_notes.md`
+
+### 2. Version Placement
+- Add new entries under the **current version** from `config.py`
+- If the version has changed, create a new version section at the TOP of the file
+- Format: `### **(vX.XXX.XXX)**`
+
+### 3. Entry Categories
+
+Organize entries under the appropriate category:
+
+#### New Features
+```markdown
+#### New Features
+
+*   **Feature Name**
+    *   Brief description of what the feature does and its benefits.
+    *   Additional details about functionality or configuration.
+    *   (Ref: relevant files, components, or concepts)
+```
+
+#### Bug Fixes
+```markdown
+#### Bug Fixes
+
+*   **Fix Name**
+    *   Description of what was broken and how it was fixed.
+    *   Impact or affected areas.
+    *   (Ref: relevant files, functions, or components)
+```
+
+#### User Interface Enhancements
+```markdown
+#### User Interface Enhancements
+
+*   **Enhancement Name**
+    *   Description of UI/UX improvements.
+    *   (Ref: relevant templates, CSS, or JavaScript files)
+```
+
+#### Breaking Changes
+```markdown
+#### Breaking Changes
+
+*   **Change Name**
+    *   Description of what changed and why.
+    *   **Migration**: Steps users need to take (if any).
+```
+
+### 4. Entry Format Guidelines
+
+- **Bold the title** of each entry
+- Use bullet points for details
+- Include a `(Ref: ...)` line with relevant file names, functions, or concepts
+- Keep descriptions concise but informative
+- Focus on user-facing impact, not implementation details
+
+### 5. Example Entry
+
+```markdown
+*   **Custom Logo Display Fix**
+    *   Fixed issue where custom logos uploaded via Admin Settings would only display on the admin page but not on other pages (chat, sidebar, landing page).
+    *   Root cause was overly aggressive sanitization removing logo URLs from public settings.
+    *   (Ref: logo display, settings sanitization, template conditionals)
+```
+
+### 6. Checklist Before Updating
+
+- [ ] Confirm the current version in `config.py`
+- [ ] Determine the correct category (New Feature, Bug Fix, Enhancement, Breaking Change)
+- [ ] Write a clear, user-focused description
+- [ ] Include relevant file/component references
+- [ ] Place entry under the correct version section
diff --git a/application/single_app/config.py b/application/single_app/config.py
index 12906ce8..9a5c892f 100644
--- a/application/single_app/config.py
+++ b/application/single_app/config.py
@@ -88,7 +88,7 @@
 EXECUTOR_TYPE = 'thread'
 EXECUTOR_MAX_WORKERS = 30
 SESSION_TYPE = 'filesystem'
-VERSION = "0.237.001"
+VERSION = "0.237.003"
 
 
 SECRET_KEY = os.getenv('SECRET_KEY', 'dev-secret-key-change-in-production')
diff --git a/application/single_app/functions_settings.py b/application/single_app/functions_settings.py
index 7a411064..5fa59f12 100644
--- a/application/single_app/functions_settings.py
+++ b/application/single_app/functions_settings.py
@@ -794,6 +794,15 @@ def sanitize_settings_for_user(full_settings: dict) -> dict:
         else:
             sanitized[k] = v
 
+    # Add boolean flags for logo/favicon existence so templates can check without exposing base64 data
+    # These fields are stripped by the base64 filter above, but templates need to know if logos exist
+    if 'custom_logo_base64' in full_settings:
+        sanitized['custom_logo_base64'] = bool(full_settings.get('custom_logo_base64'))
+    if 'custom_logo_dark_base64' in full_settings:
+        sanitized['custom_logo_dark_base64'] = bool(full_settings.get('custom_logo_dark_base64'))
+    if 'custom_favicon_base64' in full_settings:
+        sanitized['custom_favicon_base64'] = bool(full_settings.get('custom_favicon_base64'))
+
     return sanitized
 
 def sanitize_settings_for_logging(full_settings: dict) -> dict:
diff --git a/application/single_app/static/images/custom_logo.png b/application/single_app/static/images/custom_logo.png
index 45a99fd35f8834db8920ea29bd2bfee10fe754d2..ecf6e6521a737af56bcc82321caff1acefb63494 100644
GIT binary patch
literal 11877
zcmbVSQ*b5FvOTe_iEZ1)1QR=%Boo`VCg#L8C$??dIx$YHiF0#by`T5{K6dY_UHhlI
zR`qJE2qlH@Nbq>@0000<Mp{DU>mL0&Ca}<7b|BOr0RUiPkdY8o^T@jJMM%>#bv@Df
z>>)PKO&_BW7h~gs!t;bf7a<GMg!O<rz`&xfTLo1W>v$*A>2x(aEdiEwn!I$+Dm1*i
zUM$Pel3##J;C)7YK|jk#q$A;wC`f-$v8SgyKY|SY>3$mL`c7x1^RmlOP<Z!E^ES-*
zz12MUy#cV)ltiKaKgOXKOlSkC449|O4GDurfCx**|MG{}CQ+@gFM{OFM%nB8aRFnl
zCc@9f{_PFWGyEgo^4Nl6PmjILk9or|u;^$&r535>u|hzRFk0~Qul?@VOSxT=!1q8B
zWZGM(?G^g^>n1hOl`y~J{t9gY7;UF~ea%%x%%4A{n^y?u;!y0U*+Wq{H91xaThg$&
z%^Gogfl@&_{%YPA)q4BFby>dM*1!M=dtnDeL7ItF=Bv!CEFa|rYHQR3S;;jzvRf>G
zj7UhhF4!+;#%rRo6`ZXe-`B_NV)H4^R<HWE*-w)ct{oUL0C>>e=VSD{VVA!D!{XxN
zI~Mg?X~0{YilaQ3APO3iMv}-OJYLLVjJsr(Y%hYcc$dB~XBkxPKQaF(VyMBekz7}2
zj~Cb}-q%dTu5A62Pvb@6D%}=4LUNek*K<f;p~wO`lassmbR4J%9H?>}D0#me%{wB#
z+fj0BHx(3UK~O;YzE_uDh9*Li0Sdb?JbMk%QMXXgB!Vv%W2FAi?vFO)SECyXtDT*l
zp2~Dee`pbVXo;PV5)o$vaJKuwNWoFa@JZgiK+G5LMVl9WgD2vwjEwd*WHwhN@^_)0
zqaBIx<I`gZPm^}B(es?7Bno|^k(&z`gbHDR$h8k!5CvTqPRMMc>|{IK{k3W}3+#I;
z$1pxjOn6g^Ry9oDT_<NuktYhE6ARJ{kai;``R<cYB+2WmpP?8p0nF#Mj|Z?Gzrs4o
zXO(h4=YOKn6D4E$Is{jT`^C(F+)2)up@pO8b4yOyynTm6A6b8$W`4wt7#NTD!FUIg
z=<Hnkeo9gRu`&0!0i=@Ra^K))6MRcpD!mQ>N%_wQJ?S4jM*-MtPu&El>`>RDJxBiQ
zWWP@^>mc{cJ}B~jHjoVj+~YuE8q(ZfB_r1p1LShePB>>p%e=$8+G=`w{L97K!HTuO
zVQ~Rb8leek4}Wn=b%A(bqdxF*cl_EcDAf{>5#TCN_e8??{yX|BC5d^xGx#Qp(#dE_
zQZE<+N-m&R{I#y+gzl@r@Y%=-=tiv{(y;_Y9MIcc;;3Cu`xM>KP}LHG3_31!^oWzR
zkf_p1_Y?<bDFRc~nzFt)m;xe2Dkdf@(V?;f7ebT;N|C_*2QS|cy%Xee3AW_7c+8(*
zkwzr90lg4pxlZlui2Xa=FC>K~FzCQWj0|_(3=anx9i#k$rQY6NRtn%hC0LC?!IVPT
zlfLLww0$&`!Q!YFXob;)bMWy+O1f$NRIYthYkdzkbf3U*^<+26&1;fnd8Pb8O3R#&
z{C%cJ^r}n~8K)}PYm<mQC&h4j-;kPjAWXG@yOGge`n)UFxpCeyx8Q|_1{Zp@y94Q{
zn22*^p2llD>waiCPTd;U!Ih7RA0`d+JrUlwZ#<PQxfl)W62&@IkNh@7_fOsJT*PO`
z9?E5_zd<X(ixr-6IS&1BeFCU&@wr9sfS}Ka0*e^UyRn+EziBn?IrNm`aRq@Vl+J0V
zC|<|~<!qvUu~bAl=``j08VXnx+dbwpIcNY_IilOnBKPZ#V6%p2b&+;>85uts%aEK0
zT#bX6CImp7@7vADiVLpCh`Nurhx0w0Id8ij2odJ6ko~a&=eWEjbw*qIHNW!J)ziJy
zwKml~wfp+Kr6A-7IrfiK2jb>CZAsLw*|qfV@Ubk=Le1CO$s12>S~aT;9ydlB3C}ic
z!KUKc$qGbGw`Fnkl06j7exz_BMi{k_#m(e%D3E&{f-~M<fq<xoO<gC?Bv%VD;~h69
zlbxC7L&iZorLr$^OfKeWut_;?we}9wU%$fEO{a17Zow~Y3y*{_wv#9=<abq89jhnf
zCEg?T{${;0Z8<*zhHrHX3`SX=!*J!Qsej*aLbg_$7o4GToR3-inLpQRxlp1N`tdK|
zB)be)N&-Zdcsus0y1J~Zt5fb~ne))tgec91{$QUWSmS18{WG8vK>3VLKuAbgoP-*N
zz<GNzniK0DQ5Y8bLP>UE(rr#U<Gkx>{5%T#BT3x!Y~qamw*2i$V8S5J3G2rDy_Z-r
z`P1lh9xKjftKBu#SE5wB^2z&fJbA8KuR}p8jVQIK5q$N41oA0|;Co1%M^u-=54+q=
zONl35LTjg`zv}PZGjn_Z{=4kfA54WD@<aQHaptuURB|(;=`Kjf$V6+>_#**9h5H;;
z4XWe+-qi{=4?MR^zMT0Kk<bsnd`E!ClO&hn0V}|<us*)NzBcS|yWmTKBuu3`MfGkI
z5FRZ~(pB2U5EmC0*p8Wh?_mQSh-nFAe_`)E&UX7A7VHfVoX<R`&g9yHwwNVMb)Lg_
z^&@3!Db%a0TVUwE)`iWtY~TI+9O2NCnO@J)Cvw3PW}p?o5+S3(;aTKf3$K)!eyawX
zQRn_mYJPLn-?}H_25|R4O4H6Q*MRW6r&Hyof&A<pabhF#)2RKB;13l83R;fTV5ZNm
zzmb#EZT|dkko$if<;3EyAyL912P$j$GP<tv<OVLnf^X9bK5I_FEi^M>)Z_}*ngAzx
z6nZMurk91u+eu4AQ0bC)5~!cAZe633_}wpjFwnXpU=_&ox;6GMe&O#(g69#5CJ7@J
ze>O!#M1)OTWiBP=l>RHg3^|;G)jj{Casu;_9wQjjVeS!&0kd>{?cnR;a-TqOq5|+@
z1!HV7k_OGE2zoXE+6hBCnbITe>&#K46}xZ^$nLE_X5<Cb)9^zwlC7&6i}{Y|?z=VG
zYc#p^yZxwe^_&HFJ+I<9<FpL#t*A;S2<QJ1UF<dR>fbi~QA~)_0ig!^<HN{5aenIb
zylc0`+|VKKWG&3xi20AB479BMvmh7y7J7AU^}$5wTvCIOe05m`6G42_XN-CDg112>
zd@F3lzp-Y|sBw>koC8W;pY(OxnZwvwL4plh8K3oDtyt6IUI?wc_xm??V_oIZnz3_j
z{c+6mv+Qj;-MB6*fryS!vs4&j$Tp(jBpNqId9uggZim5oyYP^=VL!vmRdCp@)0W?L
zGCRFP$*ywA%6$4d)?5#!E>?ii>0=UIvw7icmad}2TW1b?Pu@`QO|Ar!atmOt{icu~
zf{fe6Pm>JcT?$!3)0kHZcqS6!-qIVgl?qbxFNmc&3eL_vkclwF{17DVPUNBa=CT@f
z83z}(Tl;OQc=gw>%8vkC*h;jrp7JFtdn4NT!YF6aT&O^~*@tw4s7F7s+_ZuGSdL%B
zf5b3x!`4uHllA|Nf^B?cjif^wF)7h(#9^Y!NY{;^yiYi(?O=&@0@f^};&s8az<Y?B
z5>sMoH<2&==N+vHuzzcj54LbO94U5Y{HwQ%T}$s>^_;S>e7R~GTv51W=iq3h2@e9n
zUekx~X)W&C9HqD8v!C-=(1sk-!H`ZX(7vY9z;6fNSsd5QM;60~1eyFD!pl?@s6;k`
zM7Q%%IEyTGzj(7$Lih-mB%rr+p({f+{3YZ>Sz~03Kf5~4Gj7ozt|Qf0&?Uh{Q~&Gk
zW$O(970Kw-v!s*d!>BtK38xlPzC)vjH^-?0Uld)h_}m24L4OiDNMjR|9PB3DYE8Jc
zG==U6MGZW}>_VM13j6nkrWkf6B@hYQUh>Di=WGaS4cTDN0@&}~@O(5Chv>2hw%%xI
z5MCP<hS%Ud4*Lh*8i^!nEE!abG%a&lIg;A^j!k2E_ABmKdSYhiFx9Z#k>e2!ocOHt
zcX^(hv<Ub(9NzsPDv#mgq2G~z^Z-XRkVO)?v1d&WccMoISV0cKEQka6B6G+&wtF&l
zI(Rk0;z~R$$}GdgsfjO(YMUNPzds25P7Ks*!j7HOWXJkdn-L#YwJ&}xDh&#q9I_X3
zx5Qf@NhL!>-rKKN+E7K#h4wfn)t2-QTaL+zA#BEKp8@3nq{!5H?q@RQ5*#T!ITm*W
zM}H?dT~HhJ0mVy2D;0GowISgr#shh6)%&fsgtK_@de7C*kSxE#vOoV&ZObQu2LlK!
z0g;7BMG>?n6kHZoynx(0ZE6f6DUuuh?yFn@2yS}q2gdI8Jbmx#g#xPOKEB<RH&93t
zgCC{DIt8=GRBdCQB1^a!5t@u(=t~2T%xv<90g@Q0nM{rWmSms(r6PrPIF=mq!B>jj
zGW_<z40TV5tg;wv@C~r_ErCNVrRzfJdq5LpEtfJpN!<6hj877<t)swyg@J*AuWpx{
zV<{AO;R%xE_^`7xHjLiiOB?^>G3u1DC}M+TLH?K4^ius~72jnYf2=49&=So!t5fIU
zknPn$+uu9Y4)g!xn38su0>^jxa|fAN0EhZyKYy1q)?mYmmK_P6N@hhIXU1Zt2l5Zm
zU!{p9h>+5ULwah?CSFj&X0aKq_qLpSF;YI$U_DGO`lfk`7I=Fcel5p^2sR&4WPt=r
zz_BmMkiyo|h|FlxqZ*1%UcAU18Wv{IX}i&U#9<&e!p-R1jO1yV0l3At;;w`lbe6`)
zqH%cPzWvdr1{0(UIron(KF*6kK6M^F!3CPO9TJMDd`JnqOn07uE$&D1%lWuu)a5Fl
zkWjmDy)+J9R52@8>^`$<b$5YrUH}hK)DXINg#5KdgtFHz$;2fMrnKWXH~}1hP=cu2
z$jQ^mfd160u%UrRZ1(kbnV4aeJwGRVLrYI{n*0r{zH-iZ{Z%0h^Z5RK&!Fm!|IFU~
z!^qG`&TmM2%Hl_@(8BeTBB}r&>$1hW94&IgbA8xtQDu6!K#oNxsddS5n7#uU%?pQO
zV}yfS42ud%1J%Ky*nOm>?LQmhsOcLAK6<{khRMTKf0qsl#}CID;m3nU+)uOh@SV)z
zQ!Gn%-w@_b3>r=UA8qSZe}a`PUkn%+@3puw#IkCgO^&@8shx!g@AjIjH&_@p$TS?r
zy}q-c5)=jq_3oj!RE6y6*kI*ZRG{t!Ri^8sj;xvA@^o|NM1S(iB-j_n-1|noU{^^6
z%~;18C4Rf;#HCN^#hNjhnvf%V6$<I{%p+=L81qAMdLdxh;IK&`x7HqG6sUye=rgez
zauQYr&%rK9OFv>!dE?7_+G5abdF8xn{-W*2AMh2PZD@7ySY<K8$>$lA6ZnaK)I{2z
zvs+g*AKdDH^|KX9KJ}4fJiiesEbzS7$M3~t@HZL3RAx?BGo_?Q;DGs&$<?<EJ9f6+
z6R`5~KD*$RUQtT=S4&0&iR<h%4zq};xcFE`PubJbYo&lJeQfS@?{LYtX<x#n#(BCQ
zcEgAj_yiUU<}3t~Dc7hWBiPk5ge(6HI&kny;-NhlK@PgFIpj}H1=~qP8E8-1)uERp
z6gyJOp85uSJM&<i=S#I_{%0p}AEY@v>;hUp9khA>_f?e*Cz`z=tKB0t8Xr~Om&i+N
zSAUGmiHk>NJ)ywB2JtYn7Rh+E!R*E4VS0CHi<%rpWo9_RwsR)83<fQyWr*gJ9a4!0
zMxxG4(QKSRZHLKXR$@dJ+ZD=8*qCI5o9b)*-s`}4ai2JH|1KI6OxCBMW^VB#{s*Nn
zAPC=+v_P4JvD%U~f|hJzChq53MpO-he7$$<9nRQ(j{l?=$-2th<-NZ(H~?&7rCJZP
zu5>0XBi!sW@?!Cf`y>04FJ=K{V@QLhhjONI!TOCth6t_`2tIySm2$!!l+J`JC<(SV
z|J4h;-0IB9w(obEX&}6Bp1D;|odSVC^dYhYDT=PNt<S6ha>%{!Rm8MsZ1yGc!#<Z|
zexLpcL5|;lUf{c036Ke0l^-3*O<Zhh*0!KH6DCZV-L?01OO^)qPl%T1#?SLrMZ~dL
znhT%|C#aD1K2qb453mV1RZAl$VEJ@Pg?><XMCgM5PG3$iDAy9!^D-T?@9?sdU@Upr
zEC5kcQMvJbH%aw78wyc*D{PQ-mC&S-LL+&42}Qyupad=E-?OLHHx$k>NiRd_R4pnF
z4-orY_jRkx0M_)?DX7z{L5|`kbCP901UuW?Ub-k9EvVRebB)<scPu!X;nB}$U9__=
z#HrGb28IZo^%xZSLx&ws$hPGQv<g{o*f4npjj}RL6Vc^~XuXcYlfS<ucQq@MNgW1{
zM78}|{$?ov6|loPp3v;jR=0ao$f0STJOUE=Yo&66Ku*rrx$g}7)K*56ol$-+R(!%B
z=1NzfHO=+Z4?788@JC#mqRwRWx2vTA0)4m57sk3t;4fwH##+Xu=bd&^!F6Oa?kcAk
zPsz;YwSrMU!Qsr|XVw)H;Qe#bIhCXa#8gvguBJ#b<+Km%KI$t*dR0#6=H@JWGL+d4
zR!5m%2q54|Klg-YAIg4c9BuZlMDoP;?6360h|XJCFE1P0L__y#dCu3HPP}A;4UKu0
z1V^iSm9)EYQS&sA{FsJOqCt3iQdJau0H3)FVyiQB49=D(EQ<5Bk5J(#As$q>(Q$(_
zhQ#oQ?utNOtQU^8lAXS6Fm-<drsWMe66IF1xpD=1;hNUsp=q+<*WPE@0vY}_pCU_-
z9!npdseTQadK^b$2~~@^S}ejB^t}rR7Zx$5X4DdF?T+CWL~`x9GWXd`Tr09S&q9WV
zNyz!89tqwVgs)2zDzlZ78=G-2o1jBe90O~N?=C!mp2E`mt4fR8f$z-ens;1)h^3H~
z8VYal-pHF9M+L176FV6MnHoy#Q`F%E*4Z5Fr~U*JP?3#oyQ+ls9z%Ce;$&^sDmrr(
zk6nU7^uC;Ns2&8g=7X`i-|sF(!ZO%?AVJ{aH@YDzL%^y9N({?XrDx>$;t=FL|N31e
zp-uG9Do&e7A%J&f+$v`?NF8u3FSn~=o5|oXFfC$jm)*OhBHNg78U0jJ6zQ6NlIc9@
z9Rsp7l!D16AxWmNTwV}g%~(O3u=HU#ngo*cu4<h^ADcBwnQp<`9xfqV)|Ho+m*V_7
zT3nGOy;2{(tsJ7<g02FRc)tkt9HERj+Mo@Z2bTPTPl?yfE)(!3IL}Lw9<$Q6p55eZ
zU!vg~YPST6`RY!&!k4n5^I$0*@>La_EOZC?me2B7$AIe2ln}F%#aQ|W6K@DDv${9L
zJ^!kldG|h(*a#i++n$JtDy=!@ofO3W;}tE(kIJ2<B2Z*%4DBb_G9$Z$(`muBr6HPQ
ztg66g>7mW59RCIrh$`3KI9^TdoqfsGk>mW3^dR0?Q`*)?BWl@M=;A-Igdi0#w(sM3
zEI6#GS%$x$!HYpb+gWA<ZU@0gYnA!i5rp$o6W=<^b~a_-;@wPe&?X5uu-1;H$+}uP
zJ|Z+K!#pxAGN!|xXq4tIo@Un2CONb=ln30YJWd^|3c@&XfE_5(+%U(&Tvt{bfNVr_
zA3p5EFk6gCfGautwO{%u)O|rwH3ZWtDyjBCFw3O^HH<5n1^BKWhFoCld&y=^(K0Ik
zL--&38{39mgseoRGP^rt4DWZi#z_n8sP@RDbs4*R3U9f!bAw7!!gXU;BDa)vC1P82
zHx+46?{c7xl!ysAsx>7>BXOk`0$LqGAH!tlBx6`;Xikf{)eIhD0nC0~-IQ~!cNk0T
z5mmr-PaqIKmI>d?%1mU#5Q<62)T7mJr`eW|StOOk_0A}mir}yzbRnp7jjP#MF@Lt@
zG}asLuE>zF!WLnHFxpkup{jU8rG2%FA&ikXyXMU{3r>t-O0U4e5Ny`tFQqn0XQ|vX
zPjQL$gbrF)xuUk(-VJtlw5g$nW3@DWH0?SPWCtU9t3vXMh9`^M@6mdBZUboo18mtr
zV%ONS25hVT=iN+hdp}X+=P2np+{nd@y0IJe@Y-+l!!Q8gev0@#S==4xxzQUgj0fzP
za*Z2<PCG2S#*IXZJc5`F1UC%(JSs+$Itz-i3dk-f-4-yOH0!lodBEN?Mw=oUWyG&b
z!=Me$^4EDtr|>`uY6G054S{;`^=x7djaN}{P)GWf6B@_mB*HDUrO3wuRsO=l6-OQs
zu<%cek_P^f6;qlnWYzK^E=4j@{v9%hq|?r|{w1<%q6HcP0zx~(>5U9vW9WCJ>Q(ff
z`J6c;I%`9<3OSWbFKG+X;MDR`43<BxYD&QwZAOL^=)$gPhX?Lvhb@G1+oZXRt@@x!
zc(Vr6c&soJ`Jd}$!Af*ix)Ly=RO?$uIvI65=gzc{3O$n<P8ieXRM`B~%qyAZJ<b~b
z;w78tlsn?}ldKf?;L{ThN?)mhE`S9F#(Fl{ojB)tEbxf5kbO%j9)(`psr5}HfwBfF
zfO#4?k`7miEB(_Z&0*~$kCQ(qV1&8dVvCFa@_eB7WDL)V^uhJ2CCK0;FC!?5zk%U1
zDK~#=o}Xl^uCTWUyOyyQ-{vsmxWOE2-V4=(lV-ISWJ2ECR=k5a0`kl`BCp|9%?<<4
zwcixak|SAlsbXEgcJz=zm8@w=+l(6jyWgmioMTiaE3j+Z*Q^n=Wk=``Yni%N&5x&(
zk>o~m>Sb0xE|@tY-DtOp;J2Mol2SGG)=ONtKx8Z7Ys^>gY#1V20w>!w63hL-Q&Z`2
zAd1?V0hwJ*4#6`xc<My;_B;NXiT{$(NGC<D>9;N(YR!Y){WTHjH<oE(`lBC$<KHPk
zR`(``ICes>Z5ZeRb{oT6CqLzzkB47>jJNoB-M0TCaQApEg$X@wVF*9v6KA{S*d=oQ
z>h}{tEwumrq&Hq}35DCd+ZJyE>Jv+@xW9Yw${r|ARG}Vc<vMK5{4I_izL=}k5DsTa
zBb5t>TdEh%zp-(S*i|g!yx1AeVC9=35IW6jK;lAks^_1Mf@!kaXe~8V6%0xzIz6Bc
zQ6ad3`7l_gAUpZVLy3ybJKx>ieF%R$lkr4ntiskgPzNg(xVK>|Z<}5n-8FW5iVkvA
zBP=9&F(+A-<fEC7fTn6!mUD>|(vDnbf;AXXCSe~r=A1t_$ld%n5NyiuFZVT?2&g3*
zTmqbpMa2sG%?v8~Z!+(OP58D_;r)*LE$TDz-Ohj47Gy8%OG!TV^3YZF{!A7gK9Vr<
zC(Ygxq=H6e=v_nTPcvB0BWH&&aLs7FQtjF<ZT>A#2uE^GjtUQ>1ws~imYtP<D1iSr
z>20yUZ#m&Kk#<I#<;4Y+esY>Zl#exdt4Lh@g5||}4$87?V~yl;yU-xy`ReQWNuyU^
z8wIYkM+eSJ?%AvkAL!4i6`QF4b&wg}PC>9ljJ&1`gA<qpN*7D4eS<t(y)UT|Z)B0N
zypEfdf)5MOxetlr&D+|#4y=+ZE|lf?4VC%2yVY)sPqQU}FT4~ZF_9(dxQMPpv_&3x
z_M>+v%(qW(PUIRdl@dl1B1Z3RZ=isoqfT-5)L1(wro?l3HPLh`f&t|P_)}DsyQb&;
zU`SJM37=Y9WQ`ac_ct;9UU(MedJwXqS+Y)KKEbJ+`_^5}zps@_sj|PzSZ_jLDl#Hs
z7MkRob!YD@dCk!$OY!*#&Cpn{Xr$BwJv)R#5?bE%@)zyGj5|@=rz~WoCbY9o<!*o*
zZ#oe=wnt5wjvjHt&rS{2D<KVPMYr=H$O2R11`v*EEy`8-L}O4trJ-*Pf=E2NVg?z5
zn9@=2AD*elXFpqImjr3nyqUCW93;6ng{jPNZ)PqViqqGt0<*L2+p5O7ti@Sxn8Qak
zqUWB8W53sbWCRbk_`HVNf6~APAyl2Hp(-Ak%B3vE!jgX~I-_zIVn*3=dd6PtH94B4
z3?Mbpv|eCUq!3S&^Pt7`IM*@9dGQ7Rp1s5L@-hdDpvml5D6&UYxR%kImUdkt%<!0j
zzbnqnz~Z8&;(~4hMoHXr#r`1;$WtHhlKwE%8Au!;MXXq02;*SH{p9tmH!VMCny^zh
zH{WaHPLzlbg1Nf7XHLVl&5T;kts>r_YQUNRAwE~D%x!CV$k`2t$l6N6t}|5aT5=JQ
zrP6ApK}8$O8zXj1IEi?ckiBS-TV8(6MSG4tyEC1YiZH(q@n(gC`(}Fr#nyF@vF(D8
zO$M{<#^;l!E)~E}NJ<Fn)j{;lG6asDyoduRGzC3o3ITvXcE5C36XYL<kAI1U+TO=T
zf>@r)<Bc-OIHf)P?sKH33tq_ZlT3Jw=uLU40$8Xi6MaT_a``%+C+T_rSf!I8yNA$5
z%oY{1$OQ4zEkKt^(8i8Gov0t%OxENWTVa!FS=`NC-|o^kU#vdj2Y3*HvnE*Bt9sW7
zD#$>YB9Q)~J<u-I*6FBld`W_Y$;|De=~uhCI90n9`EE(bwcV1Us=d~XH-hLFpHSXq
z`d&|#62W<i7HNmg>4ObBWMwIsB;F1K1LIi9xLmYRRl-aKw^CB$Bow)39m08T8t~-A
zlx#qun&EDmb=P-AdlK@@C<$p$Y$XSLPA!h$YErn;jiC6pH0@#7A<dAHN9A~ni#y6m
zGL(siE92r-gMquo5>IYbv&<TK@(ts$zi0JahlC4qEX7f*fqU8qkyKNWL7St|Za;;v
z5@%mm@%2~FJ@{n3#BpqhD1=|dM++)c2X7n_1d7D@0FXL5WXJL=C#c#jr7-GdeAVy%
zTh%vP_yC|7A<n>QM#)bL!|y9#+?62S&p^XDs@eYXhvkvKiGGb*l0vD1s3NH&j&Ch`
z)+D^1W6;Q0I}i2?7$xgHI9U^X9!>0s_4=$uf}7q~0@1eCe`ov6>-t^Mtztd*pi0P5
z!EK=$19Q1dg5i=h`Y#x(wIrWeec*PED}LCbkuarYWULEW2Xa}HxY5!U|4N*81BG8O
zjBS%a;09r))`y#rg*63^gol-Y+I6B-(W($6ahh2Q_v$lA$svi^nzqEfreX>Cb3&Uy
zf^|1%(Xrn9>`EZb*>5Wx8;Kpe#=AJbW;X^pbkHR_ogi0KfR@LdIojD32(A;>8ZE{n
zv19Z*pVT;TP{d2L{L4-S#-Hbp){EU)>(0h8^@egYCo!&CtoNdGRHQ@Cj#<8T!{CNy
z(!3%R5Y?;s6>cXoT)2@7P(-SK!``7KaQ}3r(E9-#e%jW6Hak;M^y(y-rKu1fuZRLC
zZk4{5%d2`0`YQN4*12TC4X_w$VEfE?cZ^#Wy4~XfA8Wme>4PvM+gUr-AM#tufOSA;
zp@Z5v@vHN%uAh<8TQrPwmS!<y2R$>?m6wPr*6poB`_aWJSoW5?ASli<X$g7ENTE?|
zET4*ta4m^u{?BekSSua%dif+hv2#21eSbq~i3+*iPrqcMnBo}oZlXgZ<+u^29$s1T
zF&+*Vbu`g(blxWwj=2tnmh;%QmCx;x&AlZ}19?XR|Jl1CxxmE-uO4K*Fc}MMJF+BR
ze)(gHyG!M04q2RR*7+Eb>ZiUxoxHY^K`1B^@78-`Pq}7QIjQ1Xmoh31mYoa~r|0Y>
zO&&VN$wtl7Xt_Sw^ez`@@m=4k-5<d1Zh4Nfua1NDx;8`eR?hH>%IvV&Paii1R&rs(
z<i#B_f2%;crCkk|P2tAU?f8t#RLrQhwPPn4#nF3H+&^tRafvr-z18Rc)PXkaNm0>7
z0}5(>jKSz{+i>Nk6<X!H*fu5UwdgVHNW>Kp%~)<Veg48L)s)R^5Gl`Og!#7`dX?~-
zL-P0<tpOulA)iE*GBhg4BM&Hp0*q7SyD4gTJYT!hnp@`13wof4Ma(n^9NTI!i_(O|
zl~vH0`9ov=<1W=O{tDZD@g>zSM84nQaud>)ISVX1*enR~_2o5A@%BwD;LV4O4-Sx$
z-`i``x=e>$Xo)u0DzZ%%a|scUSwPah6grGElXa@6GVUz8X9|nz&LGQFcc(^lOiYu`
ztL|&*%Y&;ZRPc|{GP%SNgPJltPJ5g;QOodmJstrm`;`?anq$|Q$y*N1RA&0LdBgmV
zt?TP6_Cq$#$W3NoKt*U{$Seu)V4lMFlM9ggnef1TDO`a&;!YM8z5%LCCq0&zgW4OC
zA#V%xKLLSsvk%rxA<ujuc`{;X6lUtc3F6+}Bw7vPTk|z4Y#lh`kIz1VzdRNXO#C>*
zAKT{e`$?XfYW=33o}NmybM|HFMYRxSC`NZg0?g?HjFoyt45J%a>B@KoFHuGQ1)%O2
zaA9uOx`J9OqBcK}RWm|jU*~6Fn$32bkYN41%a&ntJa$7+=cXB^tv^`~AM}J8k8bMp
z1<zjLMSmLSZ~mH=h}!pPQ?WXfFfO2S<%^E>Q#HgCilMd3&B$=dU#@MDOhQp{=zz_|
zGQY{Dyr~mGRlpJ%T%n3N@Ln!Av-JZV^!CbElq8gs2X;{mqlz}^T$Gc*=6oY0B=k-h
z)=PR|&@WfUL`p0oPo&T$7>}nvqM5nd`x@6*g+Hm4Q!Jj_Hc9szyw<!Q-h_E>C_dlF
z*ki~AmlDGo)bHnq{LVbLb}+oYL)#gbgg$!BNq^ivfjpkeJw18YdOhRqYBumUhum%N
zGgEZZ!%4Ni%6K2Q7J^a+I*n|lfOmcSwds0?>%RH@-QD)#$n#=z#+*Xi-k0CDv?(@t
z#!QNoCuGtum$AB#Kq3C>(EF(H=N035#qng#d)1G-bgFM10^TJz?)ySJtedItVX>Yg
zxZ!7SE8z{lEh*Z>H~ps79j1Bl*P3~+TsFU?N2X~#{%t`-Kba*t|MokVO)v_yjO0E(
zyFqJOgHrk2ne2fKwKMc{>a{zfBe3gN8lfwXrftOc<Kjegke*DUnHTcG^r?fZ%A~`7
z0q=}P>b3TLe0!VNi0dW;en?&T?+sh6!DwG!V*z#K4c7^&&WMc*v5XwmKITxbsC1CL
z*L^3r=(%K2pCU<ESoc*|alA0(GyX|6HF-hsbgNfNv~DwmX=94Oyhx$4|2};g2xvOA
z3jS7=RMS60SWGAC(X=Berp}!(*xw$N{l3@aoIDSA9wwh?h}JlL)R^485apBE^?;W_
zw?RpMNPVf5D1*<zX%EL_%VFU@69X>)g?##UAS~IyNg|R(_q#g;=_)i*TT|tNCAO%%
zRXeNsd^W1}R`5<Orh2Rt$)IQQPBra+&_puH)c=n1N~G>29&z-!WB3QU>%KCeqa+$>
zGP3bZvkZ(DJ3+J@dXMfudHI^?<vy%d!y~KAMwxu+1e8&ix(~h^V&8|D#Nt8mH3}TW
z-`W}qc1~`yt4eo$$iFzj>|BKiQ42DjJ?XvX3e0qD#)03G<yt+gHy!RAS<o{Xba&2F
zJd^8VradmbjVw<SAy<DX&bEa^n(Z%Di8p(0cOEwjB%?ky7~Ta>@*{_wc7gPy>mQS`
zSAlsgd9!UBS=jv0vbN4x!%9GS@Rtr2_|IR}wtwM%4N{EHv$Ky~(>VSejry*~{}*SL
z^RLv%$c*?PDI_qGjg~~{^Rhc$&NHLn8+!oww|z2{A{vcOe9vn40hx!;3P@Vo?80h)
z>Vlv7XRhL5!RU05js+vqPllvJ{)aXK<4cgJogK`TxdI$KF7*_SDdTtcj-GIAuDwEn
zU)xuwX4}7Wht+o<SnMLzPSZCFo?GA&HOfe4x!~j5Vx3p%D!hl06AvVZ_eX7)s^vb+
zCii5cCoZEWivknd^0MZnFFC#Z&jdv-cqWaZHHjqlj5`K>`A}Yt-<9tLgyA0{eVe`_
z$rSc-W{302`5DIG6yhWCk-N5_&y6PcbgN8nWD5acA~S>+OjBecA`PMb=ndBblk}Y%
z=@6)~_Wr8!G@q4O4kZKO`+*grC%$^-xXVG=@9*z&{OfG=qe?l)E3PGEORu0EhL!y4
zygibVPLjWxU`E2J@{|R-crnn&ZZML{c6Wqby}Bs8TQRa*yRUu%Fs4o3{UADvj;eC*
zrd%K9@4E_2MO`tiH_*e@81qpEV6@%&2=a12GmcLwA9Z-cEYtra%PC3}AC05<KMhpv
z<ehwyBB<9Ept(+?25}!BM!s)P;hsbWnfCln8NlC<@rMXte@K@i&6pwcvRER&_05&c
z4W;Lb7iUs3tOV!}A4-nDI!!JuHq|b7L|uAe!1rMdHP>jdzU|-K+&Cy28~p}^IgxRZ
zy-hJ_G&}LRl*f6QGj$$iSpWQ6eO4zA!%1)kYXm-wwdndxWURf;A@|p+jc7OPw6fhP
z1~V9NoxF_D#)elxBpKqR5$jz(R{RHad41WS9F8%SGI|}%sN2j^LZyGQB`Q$^^P6){
z<UV0IXLw66tx&fR=mx0FLqc{%n+TvSGSi!Lwu8~zR&#3pZq@zkfPo(Il+Lp`BlEqE
zqVImMs)XQnXMu7Dv$*@Z#`UL&*DbrqDE>mYz*M$nGY*UHaYo)tq_s<L{<P>hI##<~
zek|qKok4CPx?D{N)TH0E?1hHqBT)#?5NAf)FpsL+&`@fKSIF^m&kS|z;}OBdq~|~;
zkD|UQLaV}%=NpsowX<Gk0zIeGgUcWu+|$$mGXMGbpFe*Dow3aAh$H9<iZGB}A?JYk
z9wJ~}5jZkAbM)u>{@Ic>LtmN`p1CZZFu5I>c;gQDt8JbIc6mmD7;>cI#ZTAchi<CN
ze6d<ikgdjMMhy8WBP?68UJy7A#!9c`HwjGprH5O&*T}VuftgGj1*eElkk{%D_0$k<
zGF?hT*Z%xi60as%TKh@$m*dfmE|RWLaru&xk`IG0N*dxd!CM%>lcjz{(1`|M(?T}g
zZI{k=L&SppN+Kd7GlmQ9rDJmr$t6aocrjBHe$VMLa#2rWeJ)&uEHy`6wl6Q<;V<@(
zlWV$UJntYC)4$nu^1nfDJd3WVdg|_9x*k$d7l<&@e3A6B`^-+xtSYV{e)dCA!B%NB
zJ*fUcHQE5?NvedjcT0GO4yq<%H-rvenwG~b?>{Y}sEP~4S%H2fdvB(6W7C>4Zu;xe
z205Jbnw39qIvZT{elg+1*1F9VNPfr3JeY+2Nxoi28rCk;g8v1*JrR;ocTg8Aq?gLL
zF`JU`t(bk`u{VC_Y)=?$cbH0T7I8ulexlTE_B?dbLO{~mWAp&0nJ2S7-fnfedJ7r_
z(|&g1{UtU@x1oATea-N(pe`W5m!~r>cjre&YWs${ZSY2cZKy2{vS}IWU?j=cUQ8Hj
z*E4AVqNJYZiRQ)zZB$Na@6^j%WxIte41dAwP0IVqCI~Lm-4h|a50{qRe&m;|j-#dj
zc5Y3DlYY%g7~Bb?PL{C|G0<I>Qbg}>)uVwlWi`YQCAa53S-TG}!<94HI^u;%CcCgE
zx{CHeMc%w9{H&350!17W3QCX5%G2e9$ecCU$v6GhA{w;tI9Sr|F9oaSg<ykDSUj+V
zVagu~D@F^&3pZL>9mssAw$;DmEBy5D)*hQ9Y#hxX{`fgN9%1_!_+cXO9>+8-Fcqj#
zrSnh|XZJF+LNkSIezz&HGk9l+PIR6CFhlBSC0F#UL59kS7rvYi7007XZy=1!f~mf2
zb6K1Bqcu&kQ_Sr6Wuj=gbZ^F21>{A+3UVRFX!(>#7vtCNSvey$y>U(PsA^8qUY|H-
zJXlxARXk*15Dg*eic=i=DhdCW)c=Rs|BnIWs9t}99kq6189+p7f62!IGLi}s)ndPb
F{sTGwC=37q

literal 11705
zcmbVSRa6~Iv>XoZ2Pe23+%-UOcXyW%G`Ks#NpK79?(P!Yf`s56+}-VQKi=p2d27w=
z{@T5I?Vg^ls$CJvic+XZ1V{h?pvp*#tG<uJ@9$>>xcAr>>W>TnOaU_DBI+I)C%)bp
z)DoVjSDG5`{x84BCr;~*>b_9INPx|uba42cuEGbiKVs_SN6>^?j;s7*^5Ty()1Si6
zmsAq{v1{tYzgx`qFKQ!1j-o=65^h`CMS^@d4aZIAmc5?i%Al=0>q<()^-kaY3%<Hr
z_ukNu&y%axjb6%K<(=ki4*-qA`u_^g<05`bFev9W{i0W)LTvPYARbJ7aWk(^jL|hB
z1RKR+Veuj`0oMFxy9HlgPj_3o@Jp24YP-?Tb80n&9!8o`qoS-xoKb4*Nga-B)4cCM
zFPmKijro~+_MMIQR%)%P9<=xn_7H<Ftpn`e0b?7FdwsoYzmYgf-PHE$sVS*XPq(Xt
z)huzLP`hEE4b5u9PS3JWH&jTnr4})i0J(0T=Mn7FU5r1LpSjT?(S2%=&abwAktR^a
zeW9pg2?+^G$IGv{fot2^S;Fj&09Sv+Ff(x1pn7%U<~{qh-TiEBx#Y+pvm9uF$gSz&
zu6`7uLx4d;JDplMYgj(nQ&3P?4gDos7Y_y;s^*<GC?)!xC7>txT=*o8&jKB+g$Gzp
z+@5|kB>4@09+`kBrEb$HWU*U4#aI<{o{YcYRvnBVbLm{hJUDc@9?ezqsTb~fCc_2r
zPqNJEh$a*lj?8q8%=B(s&A;c3`P{W^Mce#BKa4ZBcwrQV5^i4=oM})^X{cu(ssGc!
zk^bK^^XGHKnAVPx_1c@mkgPljY7ZJZdi7cIixA8`dpKk>4Z1%9{P~6-L_v}B7KIc5
zLPQ|zXNr(r<KyCTCHA4gnkkHfGfvQSVv=Bn=|{BOPZxzEI%p{J@~WP1$B-IUed7RN
zdm5KdIG(CnBoZm4mC48upe!>BbS@JoJods>YDpMVY=AlZ`ofvBHIxk;WmA9-)&WEt
zkQM;d59GZVSz<~)pJgG6Gm=qBG+o;|evPL(3($&53l#+Ot;Pw#3&SXb1J$25qh9l9
z=fa-g8HSO>2-aah7=g;s!_j`MD0#pFL?%l*<Vd2_C?E&SB8LJXni>i71mGIey;eg@
z&wUT-;Yf!vCRgR#sFY#w6yg`-JopRbh@V0M-;xWAQUFk}uzGT-ckc@{;pal~sP2js
zcf}{?&&I9qa~pejcw}N3GU-+Z=D<KMRH-Jkc>ZGPL$hA{Ys5Zqq!@#yD5mn1dCpN~
zlAkqO?9&t|WCgcVG2nz{Y9Pv(tPUNUzcVj!QGQ(Gz{{8<z`}r4@dq|Bwl;3GnS&63
z`J=lvW?61TWtiDgD^~3Qq~Or47?ahTCR(ABj3*+ZE`>HxfXOe{#GtyrTUVS{s-u0?
zjucsFno_OwRsHR|iw7~0HyJ7dG<)ujRvqWlEJHM_%x!(JPFW&C4=q*<qk;|Ze-(<0
zi^D2CPtQw)?w1}QSi6KP+4Kkt^tvd^jZ+)-dtgjHHJxYhFWtYLuuMJXB!B(p0+RpO
z|3Uyk0@LWuVK?1pItWxzpasxBy)bCd7h9>M5EL@YWpr#*+P5Bmi-?GTC%8kc=`Eo`
zhlTl8b<Cyj{F!ao$rvE}+UU35?pWWu{Xrp%?IN3fM9qTzYW00NW&}HVX<P~#){VN|
zc6I%!{0s?hhw)9-L))nwp1Ra04XjL8FKUXsRGC4^5BSd|qy=FB5^%}CZmNrz;I><K
zVQn$7T{@F$A{Z}3wIY<A{%R7kQ$dCXAb1Nxsghxu%ifEsV$Y_d6Z18o3x^)uN;iDM
z4tPJMe%QTZA&NmY5TbxTgqLf}u)}6&T~DV>x%%~6TV?UVF}(8Wp93fL?<9vrt~faE
zY{>gJ4#xSCbtj$n;R%}7i6*lSi1o+o361bGLSNfyOc$N3a=Q%aGZ`Wa*~0+`y=J>v
z7mq~ua}oU23c=)DSSQPy!`bHGr>CFGBo61)nSy>Z7iVtKLJ&(bbua-GXT~zqHeTZJ
zQ52gy_oxIoYcukkuGXOp3Gbfs2{LG8TT=fJF%s)|zAKvXlWo%W3-NESf1TfdneN9V
zRMI8xdbu4J_aP?j){|4XN;AmosiuW)s|HIQ_k}$2{o$2+x|cE5DWz^+_w&~KVVw}H
z{BIN^LpA`|DUcr&{G@N)u;MyzAdpElAK(+k<AaR!F=AM#Sx;;opOEkq0Qg>~n>*~L
zN|ShOwB$xaAbxl4A!wIGBjOR>%TSF`wp+iuBTl<uy!qK^6V`}uSBL3aGe>VWc--at
zQ<zetsI$wrBD0QW`H$d)P71VfJT-j(B58%5`!R95+sP7X+0PH)^4CtQnIfOJ*Oy`*
zI>kdge%uKRS#mZn{fre8&2&=v)2x*vjr%^hxobq44Au-t1av^BTXn_!kq&l9oA>1@
zrZ?+iNna#_q?A<55q2il=J`)Ul?I$1hzt_bBeU7Kfti`v8##q}(5X39ROCE_>^loz
z)I=2FN0NH~x7Q)ni-J6(3RohAc-_hyMaRqhMw|JyTATSQ#r$Wb@lUN8R9VFtPNV0U
zcPp;&f!SEnD7(3lC477R|E}|B-GXg)Ob*4{SJ#xK9p%|{eB1|bXs7f0xq#7vr02G9
zFVaoE9Q?l|RWRF`64f5M`5k(V*0cGaUQXSBNWVfXFs?A%kltvX4>!=DTj|VrOem9u
z9LLqA!v;p|!Jud{60cHFzswpL89B=%ae(cKijF1`nmy`@cECg2zBlgTCO8h7%vq+1
zt+vd6YxuNj)pr~?4;&At#npRv{&SvK6wN!NRt*@=sGnc%dO-!;W{MOZ)?U1gWG@RL
z6A+$YNzL4tVi3$@K)aZ@Kika6x`Mp?v8AAWv|}0NK~sxFLm7Vz${b&10z_frl<3gM
zEXym8Z=c(4WkJwkqh|ouhpmSOLm%&N?Bm>0woeSm9=lLzI{VOIGUVX7wD*pMPKMzj
zYqEH>;$sO1wdY~Hn<nHWk($GQp0;_xyu<U&hp!C^Fdr{>9h+*vOiP|Th$PMYdG_%%
zhAln8l_7To>ySU!Zk9BO+K8G~hM|=`)i4E>*Kn5RqI-H9Q6X8LO6PX;JOdl3WAtvc
zqIy#JG#A$jN&Z^=0#SOB$-<HOR9}?o^>`I5lhwh&>Gq|a3qXmAHZ&&SOxM))#mg5&
z2dvV%ge|^=S($6RrjN|jT|D16|M)6@nOKzM60dprYjbn+=C{R!FeM%X!9gm=$&aE;
z-WkPAJF4-k=L*lml0hLWDwdh|Kh^F}s@m#htGK@}2AaOauZQyX_Kmt0EW&${rls7{
z2-}EIKJbPud{E;2?Z^mXy&|P4Urvsd{;Q<qSHk|DHT?u3f`%R!VqZHR3lZ`}?7UzQ
z4+0}ua2jzHCI*s9ID$lfh!P?~)Li_|;=0;47dDTutuzc65ib9pCnm7D9YGqAimCU-
zynNP+F2L{o4sDF|N29WVH0jVLDrd!mrOB>AK@JpU!QoU6si~iw$)@Zx0d)$^2&Y_P
zSn-kuzQoTXRGKS$iK;PJB8Y*gNHw87;XN=k6;KjS+h871Sqv+cZH?8sCxsbyr9Ps-
z#RoDI-gq!<?xwz|0+hr1fiXzhJ)l8&2oLwF5YC$k%~(#wcog|YOoJ<%saNxy!mqSW
zCYR&fsvV6d2MCM#lLXXo^M6C_jm?C%IWTm8d+l78)jK$=(rrAP7Mb~Jl_MDnm7Jr+
zC!{7pW@0OjDAC`pnRXIcZYUjDk?aZE6D~}&@&MxpJG)(QY1m*580;M0Nu~g-ARbzi
zkxO40hR%4|H3$VRwp1jBaInG_$3BV)T7)p0JdDudMQA}%2h0^}2dCxTIu^M&-3?LX
zb0w_=kerp9<dG*QDyu3BXwqKSr;297TabxjVCVh4aA`5Ld8v4?H16{=Qx6nva3^uZ
zy(wxm!!n!4xW`eU?GVn#Ee$Tj$-(Yr=ff*t|C4n8I)`K`L5IElbmeBV+~M0Os*M(;
z4aA!-&N{3>D<dpe7EX_0lZ!)-ik2oYu09ocWiD$Zue|TX&WYRY`1`l#S|Y%&FgZm*
zcx2sdCZKF`I#HUYK~Pz95TEGrJH$e7(tQf>wf@lq&m@w4OXXOLjf#--mlB~%5`b5Q
zRmwn(nI=OC8KhzBgJX{PEHRQtE*gKf6dv{UFT-gA9GC)uLnvO!7~=8?!7}>{&a2Ht
zn4sqacxewi5>_BxR^BKGLRP^ZFE(b80O3V-uKt2r-6akxQy&;+h?>yQtJR>Y+@6s=
zst2xRAOJQU*(OX*|0^|@G^}dSEd9Ty@#a~MMCrxm+e>~W{}1To35-MEB>*p5+hgNo
z^S7};($E|rSBDocBUSaLD<=wQ0`@R?s?Ugwy`SPWoj(0yA^ce#{o}_<+dJ%zIR8Pr
zxyRLuooMtmZ5(5()lRobc_*u4H|g&mB?4Z|^Kt8aeVL7P$@2C}*RS7{z;Q!fT~H#3
z6YbjRv0%BgENTQ~)fq>S?5hIdRRGi2EMyW)btH~Y-F=TA|JIE;CHmL#>C(4598C~w
zFf5K8qjVYT)y#$LvFLGxWy%E&a;BWuP4kVkcUt(~gU>E7US-|LB`X3Sq?;#`m`CM4
z;p?+C7^T$qjwITCey~ZsP#}2WwfPBnyB-~W1@mT8zz%aRt%LXmE7AIIB0GwLU%S{G
z7+XTqET%6^Rh)>#84;-(xoPr(L!AA)tY*v7-J)VhEyus%^f@`#G6JhdH?N^{zA&Ff
zYtGwDj|B!j@n&hi)qv>8M@7obO14438Li5ii}7<0+6?;}4dLhnI&>FLsq(|W;up?0
zQ_`xr?+O|r&{q07eugMnmfi#Y2MRZ@dW#H(9;#=x#Yh)OeD1W2Ja%arFcJWz2t_Y1
z>QFaZo)T00z>GImCSKC&ztmJ2QuLv_gtgambaZPvC}mnC$iokv210QL79>)2Yf^lF
zSCBQ2dw!AEu1t*Iv6V#g-Izr2-C&+pN7X*=q;w*0$lQyPt~(e68wqVjgbehDOP40{
znV)ra+KYGA&B?7b6hYf6e?HvL1#SF^yB3G<f(0=c8V?c>iNFpSyfe7>Rp@jYK0qxW
ztxlyMzc_cVzo}2ttu<I%&VC^mgi)omHAUIl?bMcy_RTpqjMOzZQsMuJL<|_*j;#mp
zz>7dcnCK9fhR0`uqryR!;yExm!i?fc%I_u24l7xwt!!trN@Zz&zlhmlejSpYiW+G>
z`iRwWJ*S~g5@OUV208sI^GUqVb_ww|WYc;6L{Q51sV1M+Yv4WAP*jTB310Lk^EmUx
z4Z^m7dAE<mJ3}f~iAl@I=;+?Zu`k#njk9f`6KKUoLde}3i4we>M}k{N@cG=73+Z((
z(K;hqS8@AZeCO3k=ytp?J#>xGc<91+m;7=m5P4{;wLlD}y~klf!4MV|+aSAKie*+G
zbOe{)v<rV-1z}*{(B5;EZKRXMPhZuWDzI#@W~E-^d9S$=9{i1pS?u<I^XS&=&?ORL
z&YjFlS(||{Rz97@=(M|O>`%7-Ju=_=#fpFdSF?|oLQs;@)B0%>Rh*dGR-~FpJ<=}Y
zr|?ue6tt$Eovg|~S|^bar*@g&XZgv-94ZPou?kE2l3z--UjsGh{hp!1Nw6=Cvzq*9
z^x1x95+vLfKN<lSRI##<XXZdm3@PQHj;*{sBbN_{BGEVf9&v&P(=>L_t@UjrCvO{|
zfZouniBBwlrYxoV1aIHIgirH<bpwPLyatxFh4fejM2Sz*3f9lo<I=8m8r-zNk5vTt
z_QgEm6-RFEEGU!eufJ|4N?6O1d`WEErJdRM_}T_}4H+>{a(SSQW$39cC%{spd-xw=
zywm_mbegvyv@MmEP?|`DjBx(TwbO02beAe@5?k|Hk+ye|VCrHyo9f_1m+?fMi4`j-
zG;03|dVp|S0g8y((+$(>47p#F0h!8vUgy$qJlBqnRyN_=E)u&`dBJF?<<C9C**Y@V
z{$d(x>RSpJiapC>XtKOnAxR_k7Z;&l{TO6|ZnGL%5;EK~p-#Z(p=e@Xj8<-W>3RJJ
zpY&~vcc}iPoNpf6FL!#rPm2dbp((s0+id3SenqHKE_T&Af|#A0;KG+_5P9et{Jov8
z*gX}L>!6aae^a@6ejY7Ws$MCJbL2vuMJ+q`?cYCI<PB*8KEd-6g_y?~2YdKNR%<^Z
zpEA|O#rame*hw!l#HLHc`&ToQRo>sPx^xx&rPN8CHTLUWVt^oREc))r^N&AClWx&_
z$}1lztf66woInX^hUl}uG>%+Rg!~(Yr9(uC))RLRe!nQbsadkh5O+zLXXKmkvPj$Y
z;fknh{&>W@9t)Ah0vZ#}lKjw0KFkLL4f}esiD4YL5@bRd9HszEAvzHc>rvU?wfdZH
zGM+A4*#n_2oMzncc6Rg_P{84hSGI!g;>pws%GumpuE;O4-O{7^YSL)5#FD)SICk6S
zos6i){>3EYNH##+OysodZq1w2;)l#Mn49W(&6d*xEO<NT9&H9gE<5l6E0HUbmX{4%
zSB27-D&{3ZRSk==ul7?jRL}nY{$bWh=B}(e^Jdl{X1c_-Hf;&nWTl7uA?LCPEdhw{
zXsy|#FO=nEvEHIg#F<G<`}ehkak3``*~a6Jz|SW7aS&9_@=5d&W8gTr8Q?_tQ?7_S
z3k}Hs`CMkCXjDR=xy)}K6eN=N_6>?Hi{L6GZ~h9?^+K6KH7&UnNj)7S-w$;atEYBr
zYikJ9GKNP-uTVYLC?1@oR#c=pf~9QJq%ww!F%_rhWq#I_YAPw0f5G;Q0zw(z=j~I6
z?WKUTAjKK2w2YpUWk=Yci_Rx;E?HSvSP%i0`{48Q^UK@K?_9Lnz9YQyC01NOaqr9W
zKL`oN$c^OR#+>-01t|5(wTMbsVXqL(Hk2)XNyEOA^xA;Cr_?CWR5u=A=B_T@{qf-l
zMr8gB4|ykZHc5Dt`d2NJBL)#M?BE~)>}V*F@dhT82nNOq@4I~TW*doy3<}VE#N88^
z1i?i`fFpS@%;PodYUht&;bdSK!FVBL!yi&2z651B+ceA>2bFFKP*8xm)GE_Meje&2
zFyJ7=s*=NGNX*&J$eK{0rtMcoFhz^>SmH~vgb=**(}ncoRrTx0dBSN6p1mrlOgMZ4
zHI1RCQf8Ov$;^w6658L5{gZ~&1!Zi{`1a&2f0--4YjUb<j5k)=Fz+8!Xw1tA3m49f
zi{KEh@%bO31=q~268;0v?9FU$M&;x+7pstHlzgORZL-jsWQ3Nk+%;~hlU8kD_nd*{
zM+NnUCE)vDO-p`W31t%blH-UfD0(c+1D>8g$&simxxhF#zAgCZY!R@e$B}J<-$^%v
zU$lI3>e6{h!SkGc=hCBDKY^Zr^!<8QS&J$+U;O4f;2Z3nbs!?SZrKN`2EP#CggChB
z5~o=W4LPiM?laa^(jXctQ6O^Qumxl3=L`Sj%l!?5a7R|Jn~(-q`hzndn9^i``!NGa
zmFWX!i=|>xyaPGfsB*!<ZS`&}sN~!4{QlwxS|G9!SJl7ZH9Y)Vc%U%dusE5qM5p$c
zN^M@xbq4a8_xqi2LW!<GyhLH;=WTC$Ofn9x-~fMsJ7;f3|MdoU;Rw@ujHf09g5)Gt
z2>Naf-d5hN&IkIlx)P<ta$-;!Ib_sbRMdRq3~_7FDO!w1$COJnnLR;OjKNR0>77->
zOPZFTohA(8F(`Xw0&)^{Ew&`5N1=g7eWu=?mG$gj4@u9anVpC^m_`($N&8t<EA(vG
z9}?Myg2>RE+NukAo6|BE!Qv*1KenhEL`NEiwTk1KM71@`M(Bz&;@6xf1!C%JlnS<V
zqV2{Ow(k)sw4?H_aDlT>BXZpQm=pkpVBL`_w*kK&?D+LNp!hdt)JYTbA7?+?Pp#1V
zic0GX<0-7<VS*WmNq7b9Zwsp+HH9EuQz;|bxe6#WqLMSF@+XG;j}T+g;Npg`B|>T%
zniT6W1VFo1kDq1gm&FrzgOAH_ser5Vz#c%$Ef3<()?q8vw6?Di(iTus{>B=48S(q&
zclC0ki54F_yDF~4<|h-HSTYkweU%&Ycu3c?fqQPdRf6@&(vBqI<N;8ZpJl`CQfbV9
zeJZ5H+)cDldxz0+D51sVDYl@BFAiN}mDP0%@4o(^8%U%S7z*Si8eN7&C*wig=NDqe
zv#R)Fm*j_=jD{Q>Z4^xiy**E8Xc^!*HJCmt|NDW?g}DEP@Svm$Zah&%u7{J$#7p_J
zRR#CeL*Or8D)=v}hJ>W&qj^T0a^XL&$6k?vXPn*Wt#SD7HdTXdyv?FFk>_7|8>^GP
zr*luD-R*qJw7(dP<~fkjgaXR6oY(n{`hR7)GT1TIzz<{zcz;P*<wYN8cN?(3I;G#{
zrfmhGY5f8%2O<;9<6~{$h86DHbg>{%%95Z4#`t`v-^?#ANTE`axq1#c&*;EUm<5bC
zBWHrNN>Rj&1h_0~+Qk57=A{ho#q?lqICDONrYuftZTkH2mE30jzkTW|1dVV2{1**{
zQq4|b9xB~Nmx)fOuI`9|C>u~uk<}wVy`T;ZZm?v-j?W`v$YtZyStILL>#|^_;BeNP
z`hnr!<Ot;iu#E^Aw62m1-rtm)iFWg$j6Xw!7>MN8R*cjI{0TwMwyR}B%>0{+cl>9;
z>;Ch5ByV%;Z-=RPAU`fjJRw^-6R^Gg=SyB)w-23~pXFuHFc=-@a7eA2my3U;SJYy7
z4br^MkrERdh_$UF+hJ(97FzIrLzDfhRWwskR1c_B3c7w#c}e*pDRosZ?+|V8{O0Xg
z(qB_-W7zj~uxw8cqD!XOz{e|-AQZRM#PPE|4k?Q_GB-CD743G?*DndCsr+6^I1=+F
z)v92wis8&2>Bz<GAVSsPlJm_1{6weh`p7AOP9G3`CXv}_fY|kc6vpdo`7B?vTH@Q|
z)~Zlf>#VFHk#z+z!g5X(uo9E~w2*+V;B$1;M_{xPyK(YByB1g2d9?1hh1Jz@GDu^O
z3Dx{nZ)L@ZKB#0(`^}ELsn0t_U!Vo>Nkb4Xz3Hrb+hH6t^jq`XlhFJ8g+K(cXV>#J
zF=C=W3hc}NOr+u(CKXDKmFd$aB6Te__fr68SGAhpyCPE;)hVGqT%N-BeHv}qX&o*N
zmx<6)>uT>}yO2<6#3-#)Mo%MJjLKyC1NP@r0Q<n<vBhq>okaJAze7pu_s?ylZTIY{
zBVXRwZPzE+fk@1V#w<jrNH5ixs3>Ca=sLX7_oz(qaJT{b%1QRphw@6j=0RuV@Pl5C
zvXK|YnLWI!4gwH7Rk~bA_hjgw>K)31t1V_;eW+-I>jJaOy5~Q!{}P5|^+;%K7kSl_
zS0nxuiM0qj9=3h`nAP-nIfmC9&$zWfDq6hQUdB&hnieN_mgk%|tIP0wK5zFrub061
z5ah$t?eY2du$q*l<izOJ^8+<kw~g)y9&)k~UZr9Xrj-377ap{n@UIb6H8r($NwG5*
zhmxT}6FY}2#L)efNYsd???wf<m5pJBmU&LKjPoE9)+;<Gy#52Mhi@h7{WUd~!a9-9
zRf;#=1y+x}u@QPy29XG%q47gUjGoO5E5Gw*zl1wYFH{qPvg;Wy!<s|$Q~!nRBB`d7
z_Gw1BVFb{|2~mGg{E_=Ti}rpT5t)hQZG1NS!8)yI60J;)iXXO@%SJb5^l}@W@vm#%
ztaY{@wIW$^&tl=gY$gB8C5Pg|IRX^VG@<|RLvd1n{|LbWe40VPv?2VIgz-@<pNA^9
zT^*+5x#$Y5J=3(*X$Ca48WC|~#qh!qUyU6n7}y{<+PU;B*4<5*PQIX@h$}Je@M@#s
zZR;~7#r89F4L}JJ$7c1o8o&S6TTxr`rel=B{nM4XTHM!sb39riP@zhXqzt<OwuCKU
z!9j<BPoPs3n@9aSCi1k!r%Sa=KX>~-vahSU-m$@dbcxsNJvwM*#IeC@OP_UxZ~@HP
zjwZ&)nEYGG32+gIOZlVC^MDOe=bC^{a_2ytKU@xru&g?}!c)JxZ&Uu$zZmzo`w33D
z?!tz)$?2#+OG8A53o}3kl8lU>L`5^>9m3~i#k-R%N8mF26uO&Mwq;F)0a@NkB;|-z
z1{QW&0>0{O#Tn?hy1Z&$W<cZM98+N=0y-W02Ip6s_qvP%hC@KNAMzAt(3i1LdqRT1
zFs`HZ$Wb`#Funwl(59i4`EY;BBTHYK*<LJ(g-gBoxS~#s9doiQP)G2tLMX&$Ps#9y
zRW;+vQvdvQNe;Ab`kNFf{4OewE;Q&Tv_?KQ-7B=1Jkgg9blbpUSA`AFG?qm68!M$i
z8em+xC-^bw#A91}PvjMxWTsiZAf`s{3YUF6@xgXOiy8n;y%@eh^Udnz%#Mjq;dOU@
zEc-!_gEK9<Aug4*Z^|PTw%TZn7+#f$6&(I9m;|{B>DF7H%$<C?b3q(tnD9BO;Vw-y
zHxiCwJlW7%@{i&dK-g<2fGbNez7_z7t81=yY&EYiHQVh?WUitTazFohy$I5R^5BNW
z&cpWCxAdU!?M3w^5DusJ6yT_844iPdO@uZ^r2Z!jYq<0-o)9=^25y&0sU!Og(AwRG
zmL9B^CylXCK~PXe2b>U&NDRn4x_RW&)sk=oV|wS*O%A_JOh@)0#e!5RAbz2Vs6(;!
zIFbE*^l7tGN}`Y|mrpo<>x+tt+{~b~tjP+O;{Ql<r^+-_mW=s5IAtE9=yqz0_Xgr~
z1_twx>Qg@9!HD}Lu1e>y6Je>U#^$)RN1Z=--yXM;?tSI3e!`(r@*07*ME&G4hzMbQ
zBwI^*ftCDC-a{ph245y1QmsL8)xcuhYT^k}eosp6IR4#zr@wQqc!4$7GbYCHx`ELx
zmY1bC!x?XE8=P-}Z<x{p6YWk{nYDP7MB48IAN;_~L{2MmK`JzCz5p$xmVptADUMhN
z>FbP*7uI3+%X-=aQ6Uggf2N!5#zPFGvLI?aP$G%&w-9Pc<C_lI#52K&>;I|6J9ZK)
zyPrgcf9p7JD9%pOuk@&;o_O6&RkL8%pRs&)*B#?kucg2S4oc`+7eRj9@(2!p5vnKs
zaOhZNZ$yE1_AOr+4C+<w?KX}8mDCU~lB&RDcMx!!EY=JncOrQ>f2ngWE<&m{(D&j+
zG&a}^jM-_*U+QE_cR_df>Q6)rN{$Rs!;R21V9N%86_@*mH{<4&Q5-G(Uxw9pnh7Pv
z-%e*7jzx^c6LAACKaBp{xP$0*U!g_+(}4Cze~BPWZV&cYmKN+N{J8i;!|39bB|-RF
zQHJ}>Z3unQJ}KPng<Cs8MaJ%7PEX?U6(N*e{!4NyyyH100*Z(jYi`OY9j<2^9PzRr
zd;Ja-9cm9uPT&Uq_~-MwQc4A9MV?sMjLyAlwU0*o744W4H~?zmnZHNiPDpZi2$`+e
z9Zgucb32SjpLzFPa<O~+Dyhk)8nSBvm$VzS|DzlQMQEDyKv&)ai$ryce9&G`>k)We
zvPgVDL6pJ)ymU^@jx4;d6fq4!CGxWkc=J5mQWDsk$`y0hZ0M3EYEmIiaTWSD67(^#
zJVrrox<*-3x*QR5MAZmCt5CV=O1jBStMA|u*rZ?Y6s>qA6Dro%M{`%{%Wa%3bEys-
zNyv<rNNU7T$wV`#+yNapJ&m4e>tNNba=tz9<he(XWvh4qNs*GQ*k)&w#rikPzfe`3
zRh_j$YyR-U21lP~d#q4zs>pcv)EGKc=X&#9tf~-xNoNb<x!d#B9WRdo$5p4<VXwIw
zVtBV+ohgC)rth*0C{=%+WzB~aeAk`WR~|NbaO-7+k?OWh6I@d;BfFjFSM2}Zt3gHm
zdb)gx*(;zHFa(y)&&0y!iC<y*wv0VHTd8?e<^gxPxg^AwMl8f@RUMEf$PH5hE5l&Z
z?d#+7Tm^d=A;my$V{U<UD-oP=6o4gRQs5*RN`yl$CwxnL{)P7D;l`%E-2H?gW{*P2
zKU63!gvR&Yo3efMcoglAk-_p|fsj{keVnuXVtu9mPj<1Cs#T}E1yjmHh5@oTZB9hP
zZoe0Y>iOl3jAhR0R7)#MAuAO9WQ#jF^7i7QBGWS0{yKCOLD5{Og?Ay}`JJ#cpx)G)
zf~Tx7JVm-^y5ZJzFn#>=Zia^&Y2<H;qs0)3i7;#%b?@HMX+AVO+K=BJ6G~<4X1abZ
zIb@SpQGfZX*3YUZT#CFqvp5E?B_$=@B8EGoD06X(xL6SZ6r+c}gc!DVrMJh@YW1T(
zPu-aU=9BI(OmcD`b*%b1?+Z)pe~ZB-KW03vb+TdA^}Jk3WbXCK&em%`zE>I@Jv*U6
z_0c`vVsn6N(|4yb*ec8LZ;Q}er#3<IpEHKpSLq{DVu_2jzIi32CdavF%G~7mFW;!Z
z&DcDD%fmSZIeraV@IHM=o76$cb9^zbRlQ-1di5%P@PS@=7MK$-dK>aHvL+p@W0>|c
zer!SB#VwP|rkuuVib86US@n3`;dy&LIdvc@Z#`FLmBzYiVSv|$BgjoT<Se6iqIFiv
z4pVz$(Ndm>Vd#f)z$0QNXaO{zA#G43PSU>Y8h<wt^~%i|th7jO@L7lZ5Hl`5Rza}$
zq0IOp9wizTP@1^pU_7H=Jq|t$2rmhqREyK0P(l3i!tAB_+a|T=V_}FU7d~Be(2S(e
za1V=N%^VFYa$){tV}~#=;3wyEm6tcmHKG6fQ0K8`#tQ;ItVS7Rrm?>NYmpM-z%S8u
zrX+D)RM&wC^X9s7;dCC`mHQn&36-33JMA-QN;xg}+fz?A9iFGxkw<{kBYb_V69y%C
zSqTVItWr5yw|wUWDYV&zje@^<Q;>Ir5Z97Rwy!ps)RDi^f`Fu*#d4^M`t97h<u~BD
zE9sCAm{*MFKn~f9K)_-$O21C;-(BD3%lFCJ!@C=M{Q_`~`gG1888i#O_sOVaE=?<U
zAhazG{Nokkl7)%Ed@fl#+5h!#-En2+0V!G-fcxuGVzK8@pG;QLfwJVA728(}`K1pt
z{GBW|7Ae8(SA~C}1Lh*u641;!b=YBzXMY^Q0YBJMs6Ay9Xlxtxw79E@Lp2v`O!{Kq
zo3Qd(UXQvXnR`qbXjM=>klpOMsiq2Rv%!Yd`?dS8vt=6HO~T$W9w<(=rhNC*+wG(a
z&ZyW%%t!=~eIB^I)9*AtBI3;uU%w_>bVv1d6s7eD0#w8BtTAXTx<%l-0c4upHVZUM
zfS*;+FE_jbCr2qKU^u^<Em44p-^Q?wh;^5UiP(FhHpd()Cm@GRWvUkP;u=2}p?8c-
z94(E44=E#gs%xgJd}Rm_tV{<k9&;;vmzJg*i>=C>Ga9q=DEB9!yx*1@Z9bX=&a2C<
zv@^4xMH**vfxD~qM3}hCe{~lJ?2OStGV2?vz=2bj=3xwbNH3C!KJUJt4^)#i<_}(c
z5CAiOn}OC74k;@lUQhWlg5WXq%L7z2Gc7QD^&BUYMIsxf%RQo&zV~po+s11}Wh5V_
zJ07Y#{*IyhCVxj5lxovYucOn?`2w1hB-a~nUw{Vo!{*M&BzDr#bpa_~=RcqL_`F2p
zi`A%=4AKfo6*#VH3o=^^l1_<9NDMy)CBx=&_?rAtOl{z33R}*$%@PynF^0VuLXPxC
z6AwkCkDqtv%e2{0lD!LadO9;ztw&8>2k+U*#zP2JuVgf#V6N@21Q5;+nR?erp4qq)
z#&Vlyjye#8Pu0A3D5nm$$Rw<EEWSEAwzvy&F|;LP0Z1D0`2gspskyVVOSAc{WPnTu
zBf#~Rv5-?F9K+clg2K!3-}V`_utmp}Jum?WxX{n~K+OgLu{1K5?Dy`0Ho!zLz2hI}
zo|$2X;2sJY0rb7p>I)kdoI>fL)ghAhi=%f*bTN0LUr=;T_YxEEk9g>`{e3bO#f|9@
z+uZ$fQssD3GBiCwCTOyfi@HNq$hONo-mTH-NwR6uTpu4`$%V8*c>|63F0AQyIClKx
zXypX%qK*moB2{DVs>KKK+)h^(;io>Pwnl6tlP|=_Y%3kS`yHUe+@+-Q4nG2Dtf*4$
zkvp5{s>r$feO+j652_;}W!P_X%F-+A+e#y97o43vcC#7!@(pRYw;wl+I1M56t(Yb_
zQ<DAwHjONu-h$C5eTm<EM;{r+jAwra=KI1Ts;MVk2rJo~Oqy*bXyba<08mhwpY|g!
zQ58QUHRSOdS<$FQI!&@tKQQ%lCtkC<Ed59B1(y94d3s#SEWE1~{`8AROx2?1uuw43
zKVPy95jih*`97hUyh0!E?nj77j>r?8pnw3@ysnd;6j4C$^27Prqs_ZXNty7Y-8gj{
z)?N@Rf!FcIub}0<@`PEF^nISaSNrExE_H7edg$}f96P243M;_;VD!7hi1jxrn0$&u
z9A&@K$l5fA-E&Hs_Jm2O^9XIXz&5I^0`7C;--GWvfCe<o8P!$YQ({n2`1rk>5`C?$
z58q7MXogQewVX9Wc?vz#jeP{_R!PnIhRRfn!AKqH?x04_JC-F#=pHQ_9wXp5(TSpq
zF)=;u8<j{0<TYA?CU}3)M{xjCy6%YlK}3>Y|D3a&>fKl6<4Com{sT(>bI8zNS_jA`
z?sqW=rtUqc^;)TEirX$JW*-fY<@zWlLBE=kCy5u`+4|W0xmNNBSv7$)!wDy(Ghy>$
ziIU$F&(|wCzg(tP85wH3L>8xH{`-&~?YqqjxQU62JFJyyl#^gB^Z4IzXAB&S7`C)W
z3%*wtGZ*IZ=A8>9Vdggq)&@V7jf}e`{4AGGUXlMtFkOa9mfx51nE7g<(jDN0yZ>x6
zDb4)3o~NeGLS$J|#ehN<0iM1jrapSIUt6Nid2fO_zy{!<m1%o9{cd&vYZYE?nZDPE
zEX4tbf~g*B*Zh<n=|s-db)tkTMWH*PQQD>5z^{`ij3D-%1!r|lPINH@J3-}MizLQW
za76y|xs<L|d?oKG7-(9xvxnR}-OuBM7hLN6l?oWFY(fjLEEa^4f(@teJb<&s7ge6#
z&7Bd>5wS!H+iTq`8JM;U66XQR-kWW$j$4Dpr=&t2h(t!fxp+Ji-)+(`v21C~jaO$(
zC_A!OSa3@d<MCv~mf$^t7uH&7*>+fy!#uQbe8JmV2W}3a&2Y(MbE0LOG$U(w6odB`
zxcG}78KB8<=<W7<t0H|S{(gx8E{VvEkTSz;HoJwZ*;q&tc%LB<P4b|6Qlw8MDsY0A
zcs2_@(0KLHwNLk`W5K}X&TKt*utF!}$R!|501kzn@Y~}HmI5NN>&rkE$sctiyy5w@
zCUdu3FFdt%r_;<2S07-I3E!bXujTEe@c_PY02JK+5yJ3Zg?3vyaLUB>s^2ZyfQ*Eq
Kc$KK}xBmg`z(eK$

diff --git a/application/single_app/static/images/custom_logo_dark.png b/application/single_app/static/images/custom_logo_dark.png
index b3beb694201dc8b371e45c973895a95e211eab8e..4f28194576a32f4463ff13ac96521f979e739bb0 100644
GIT binary patch
literal 13468
zcmbVzRZtvVv^CBE0}MX+Ac4W%-6gmLcXubj-3JQ}36|jQ!QCOaBm@uc791|$U;op6
zybry*>hwd`>9cF^wbxo5qoyK<iB5tJ2M33#ATO=)b{~1WECDEQu|F~h0}hVcLP1(W
z>(iH$0JI-u+FAPoC5vm$>wiE|Uuy@&C7o|4tu(`t;-R7W79bhQ!ymAO6$}6Eo_(6E
znHdQiq~ViEVe&QDSY}5F0s><~4AifN4=tpYBpgoR^rUNbVPQer>*wQ(=ANg{#|P(4
zSxA}K!OH4_c8SVYkCy-efDA|i2}k<>5PHY4&fl+w0E~Tlz&Y-#rZ8f`=naBI2#llN
z=gJx(Pp3*BIYkP)Ss`{~0|^+H!BOn^yHO$H7L$}0dd`{{v+epbkc!c8<?OC$$#~`V
z6A~K**n&T^<)0z$edspo%JP&DY6!f3lRbf6r*9Kq#*t|)pYxw+*7jr0pype>?m&^r
zy(=be<#rHNsx*>F*T>tn_zInx>V9e2FP1OC9J1^~o{o-=$Wq6ssk4NA04{WMg2E?S
z7!Y}m=|iQi0Ns>ajjP&T1(j|RDW5ZKZI9VzADq*A*YkYwQEnuT2#UI=u*Jjx_%W4(
z67L!)b*vDde-aiJ*K7uJ`lSLHQxW-rE8yPx$0Vn?)tC=RPSt}9BczCYaX(soDgtj0
zW2Gzj3iJ%clL~O$1c;@{zsqQ^B2>bCWdZw$+KsqZ`WR@kp=M@8p|MDJYcZ17K*!Q{
z>Mq{_3#=}5m1x4Fdo6oysbS!!Z}@uYgG2N~luYqyf&Kpf5MdX)`3l8woHwmRV!2Ga
zYn(|+L1@(<^;!5p2T*b{GQ$sLT3vbLJH{=}t8IF2-vHLw;h=82mH8`Slu8;P*sQX2
zOhP8fm^(Ds7#^cpi}77;=qn1%(~Pb#@3MVU(l&ponV#q&&Ea`L1pJV$w)TzXD!YpF
z?|-Pn&5o`87uiSbL)h2baF9rNkdo*a2oZM0E=y8ko>_bN_q)xIxs9Ol)%DHM(mLXE
zPSrAD??lhtchEFf@Q_<&a2R_57!M}F%OAZVBLXw@Z#8sgP)}Wdw>4V9P!yJul9IdX
zsDUCCeJ?UU{XXO)3fs^Im%BcTe$A4|(p9M$*oBwps#>z(oIxDxhumGRdmYypp<guy
zv{0UqvX%}7ESDUY5RT}uR2{&P2=4WSlkZ&*n>jOsM)9KJ%&)R#jMvbiw`wlke50qY
zfE<?g5V!`DxdZH?w;&fpAUPOYiQqIvePvq|`z-1#;*wZq5WCmI*jzV=u!UB`JUnlP
z`x#%n8dT_^vg1clpmi^mxh?H#8r<}H&O>E$KP?NgOP}0vw;S7^jI<^*YGKB<sBBW*
zsw4u1amZ*B7|s1w{JQrDNEMC*F+Z?kg@8V6pfvfeQp#gK8I@`I;#)k?#L&hOvV4}m
z>DJcv`L=ORA=9Dy651;fU|x9Hu3wdnmtHB~kuBHbjvLb4)a0Ryk4p8pY=VPPsSSBC
zg^A^<l$bd2kgyJclaxz0$YM&1%V;SQnY#AQnw%a*E6iTU>Pd3`d^q9&?@0^8kH8bw
zIG2ZU6r_IsP%#L#SaMly^OFA()$0%ZQ0d6qUdO4fS5l6yLWgHhovb#Ch}fpxg5Fl#
zX^@$P{Zr3R4{p2WCma{6g%@Zav;(Q-ml$9mjEjqr6xFX-fXb2yz#(WtikJzx6vpjD
zPJB-@%&m`iHB|(5^nML3DjTF!_3JY+SG<g768qWAxj`|2hdrR*<~rkEoxPq9=c9*z
z<v4~+kmT^$A!f3Xt-5a+9eC>Zf}A?jSYB$tP(;d^1$!4LR?5uCM%lwIQ5n~RPE)k!
z6U7@EjF-fw24hpDO}Q97q}>PFM|nW(Nl?5E*0$$MYD`+)ch3A|xL|JNRG!!!=n;LL
zk#>e>ZLD{4zkOqDv4s-0Ifhu*8|~)AD)pPjP|3Dr@qh`w)u^k9pimuBYWmF(M55La
zxH9lA?k>cV5`L|~EBshWbKt*HRWg=YchyTsVO^@Bqp3~sn0u=eOeW-g%q|(-JJ2_j
z?}#V|CMIqzIN<I^F9fqwR!?)GoOKmK(TAj!v5PZG<_?$*AHPvPLn|9xgU~FLBCF1)
z)5;#OZoeM#47Q%A5fig=WlV#AMfxv3JJ}S!sJ>Gib2|+{adYg3ilBUJQxlVntnfB4
zEy`k2;#n-rdnAv&)^G)}HjD4Y6>VK~?ZKl_oot3s;>*}^lX&&BpTfHx|4mVKzR~cw
zSj|AxWX)JwIJz0vRu)2!T<2CgUoMpW#xYZSQkTB%Se)u!G5@>C!Olg<WB&<eC_|kI
znkp8iq;pwmb^`ve%j5l#rUC{OchWaDc%SI=lDfI3KkwbXm7%YWb9s}k&$-_yOUuVr
zRn5l`vHDna3LQ?5uSI=as@JC27q|Q&um+Nn44_1~Z5T!1-6sDKKUPA*xhv97!NB|l
z`=(DLqitSC#hCGHjdm&ZzBl$2YS2G~iG!jVUn@obHg))c&AJzPo=<niGtQ1XWv^xK
zci4jLSoP`$)|(uNL?8CQ!Iv$kvlxunm3);=6nnX|R$af)R28x6vEip&OXS}IG=DrZ
zu6Ny(4D9ms?Q^lPu)q*L{u*xR$vL!~A5E=1!wBA{XCF#rGwJG};1wEw4F3)Hnq&<g
zQeasZL%V;WcCNX?=_?nEVF+MOmKUzG9Q`~Rcydkb=YH0COESH8?)J%8Tl*P<tz#N(
z-9WfM4-&3&p4kGvhyDb>yZ_P9zEO}--w^N~^*}EC2}YajBTN%#%WE)dX~}y_AaE`7
z5fbboM)V35KphM?U*XCw76~{kE0HvL{uN2x=`Vaxkeqyqsrx;)5csM3BiO>R=FV;`
z2DKA`qD_l2pw+k{D9F|oy43K4%2x~L0Tq&pPFP-7w`DcVV*GTwV86g=QQT~EMgit|
zy~9i3qhrJq0!g~;8sV?qRT;G8Zup)$1@~D0`HPaN*tC^Xm#J5#<sO24$$5SRdn-IL
z!~r6O`=y_#6A*?uZfhVV2Y2B~C1VC-E$WGZEIE^+@6M<Kqzum1efi^O64j(%=dU{7
z6+45=34uI>*3QGu59zCSQg)7xDZ~1&!h*v3NgURj7s=5LR^#bhZ>9K^Lp{q@ff84C
zS?J(zic-7XYbeJ*w;z14sp)CZC%N^LhnK8aNy5Pi{_tod%^|RRw(?s}bPj5`<&>AU
z2!dU}1mU*DcRW*9wFT%5E!gh1B-r-*-G+j3Ie6GcOKj$_&W0J=FM}YVA$Fz0=w>S5
zsF%^ayMcGB;cs<jqM)7jm)Ak?I;z-f9X0K4IAk`o#q&U;LYHyjE+50-ldYEj9Jls(
z!;8?+T|cL=KI^%t)0l;7OvZO>`TCc@<lfY+h!|=Ax;gixYTFZu_`&UwDy_~nh|mT?
zd2y${I=(c+&Jd?!K&sNanY-N1r!EVF;jUot!?-T9^>1%H^}K?}Rk-Y_)m$LIa38vQ
zDxUJ(-FK%I9pR*@{=O&GOjlT)0TjR5Qt<IHlUNA1&k3S5;g;QaU@9vPMx(_AE6Ql6
zZUg&2<!x_#Bp4r@vWaRi$+F(Ui?quf5uz>>5C<yLrj-72q(F`n%oy)f=Yp{vw(*Yb
zjk&><WjU=hp3H31=HbX_6CJh%Ru@9|9@4#TmY0`5($Uj*!#JwRqX$2pG%YC(SPYuG
zv8azMWLMh|q(O%5s1BQxRvQtq=sw{~MMJ{}xRps4y#jtX>*=Jmq`Fv(KKj$8{CXG`
z|J>>hN@x{_M=zR{$}VQLYtm0GNH7Od(WWotN80(9a)0m@&6|2XIb5h%b%j2iuD0v3
z31!UmY~8`Il^Jfxh6{4f{JQqy_Dr?h$TFjOQ4#Jb*2ss=GEJwhgmJ%@_n6zvH|HSX
z9TTBPoM8gLuZxL_CfMHyLcnO|@UG&spOnN+OFTp}TD_KZ2&~LFDcZ|)nFW72{-cl3
z*gX3@I=>ezsk&(25x>C+Jd=cAQV=i4ANigaf~iqaP^!lX&@X0^lW(5sawYv+x7GM5
zL)M6{M_roq(amk^)u0{Y?D3QcGxem+Qx~9Is(kxc_FU9>GvJrt`>rV>W-3c)ZnQ}l
zTGxIED#fRDVw*4OU+gc+^23ziU74mLE>1vn0%zj;ibW>00D&#iHnWaIPD&8M_o$wa
zxE(QjTNw!Ly&Ih8<WT}D7^Nf}lXpc`#aEH$b$2n2ynZx)i%k7Dk}Q8xr(avrD7p-X
zcf@n*PMIGdrHiVRz`1Q*-0eA9cb6HmzOpGEkiTs?s}?}j03Trmn~Weq!eZz;?~#Z6
zMSa02pdPA-3j?FbI>+U))rOh4tYGes9AVD&Z2R3lh&Q<g<KuHrslbSau}|TW3OIB3
z+}@K)9Y<=EaoZ0}I8^$64RszOFX=rF(^etr-3d*@;#tEQ;90Wg5ld65WXc#H+}zwW
zDAvsnZj=ZLrJ_%_lCU769$3RH%sJ!lDI>r^9p+*#(lZ<=@4a$M%#AiToxdd>m>S%^
zAb=*E`k(irvI#t2&z+qvMH$QGdlsUq(~%>64p)fQKAwHgMlPNC#GR#>t5fx%*Av?U
ze&7RRP1gpQgk0E5AI49+sT}PZKWVDbPt-3i5t6L&7yFo+GJ)M%*2Zf%iU+DkO}{CO
z=6XLP$Hj!X7WH#D>ZR8lJd~P|yvBkUiQ*y*-WT<m5XKEIt$kb%K<sgs@W(aw`T4b&
zYc4Y6a^m;eH+bKF@$^n1`>YbxoIb=TK^QxDk?j1Ub#~c`oLOqP7yRL)J=Bq}M*n1W
zqm_r@(fwg&Bul|i8h>^qrG;=PKVck0jI>6~utjWPxzR(WBL<>|W~@ZeRluttdpsij
z>Tt)XU8p#=09IEbegqIc1D9$a)G;a$U44Y~kf&IbYROq9Y0~5Vvj?_T_qKceZ!_oY
zR2W`T-8=uK91le9%>NUZEQG9Eu$hUfwHFk!HqAs3?bU2%3h^>7(r}~dX=I^y$L6q@
zZn0!6%H&ANELPY$7s=A%QQo#7tYk`9E<e+>=ga9b8>*%xWvYb#yN_ufFv=foIP&e=
zH^11ytu|@u7t9)cCyvPLgmLHw9Y|+~AFBiixymkf!;!svgBc;fxx0WmU1q9qUJKZn
za><-k*_WwVjTzpO#;OVTVo99{C~<~ssNDhWLpa4-ebN=KUj7iq>(m~M_99Zq{Szd>
zLy<_i$4&lMGtVNpBiCUkm2<^eBOE!(6gGs1R%E7^?!=>*nba9w$1TO2B2PE>VHG_!
z-xZD-V$g6fjCY}9kbZ*#yKo}az5U+e!gwytOrrL%f;a@e+~&}{kQnvSPi(JRqyg5I
zaBN36;8Ue4(4~w<Iw88lr%|1__2@bYBoL|6M*1JVJ|?WVh!Fu>%nMNWdLH-&$Rau+
z^~p)!)aa&nuI{H;!1}c)Nr*9@M1F*8j3sBPM`kxalZMZn%zsP7ku*g?CAPMqie!zU
z--_ZBcLe^xq8G=<XV;eLO6+b3c>FgpTl5}Vp70=0uWq9NUZMWiF`q}o9|0*T47M6A
z#xG8hD28JMv8g^R<JhS(Fnr~?ggKsPe%Q=A2%Q#VTGaT?B^!<;-{g=+2r*DPuMUuK
z`WW`JL=a*P%#?uyc~)BlG85`#HwVxU-Fak9sCs}=w;-8RPAh?8RCn*eOmrqm2=8e>
zv$Iy8Yh$M>+wmTsY32pGd3s)(`CtI1>Z*no>N4-ma<M>?Nx`M2uJw{B4j{=EmfszK
zGuifc7f552zGF!rW;ToPe;D`M|LKQzR?pZzJ$&)_Sr$Rrpa%V7ShG;0rM)wkZASa0
zSc(H}SE;dxmwEhs$()T6=Mx9)V#!h;0X;^IO8BJNI+O;7Ds^hFcY5pX)23)CKa&DP
zosK-HKTNR$w;o>_a*qN$cgE6MuCsPYJzD=fSbw`u(`ELKaN_fag<hlBViYo?prELf
zE;vwz2ac)HUb~N=+Qq@)KeyO>UHXkmOCsCDk%vbSg%MJ#_{)TL^`O2X1A9HM^?GJ(
zm04hb9W%}=t<?T$U0t2Q+bnSqOr}Wy4|4a+Gx-r6;pYV+2OFC99(bT#g=`5;?y6F(
zUhL;I{5nPqCJR1y4La8bVq>pw_`N*7Z5Y?Gow8tI42sx^F;HD&#hG=B;NAn4AU(&T
z+f<^v!dY>C@t{uLAbXGgyZ)#P+X3z?x`_lI#$E%Gz0P^v`|p^iXTug8TW_t25f5)K
z9tQgZ9D%<@k))9Z33GB@?vIR&?1B3B?z>)*qPbJmNvsh<oUIYv?ts#ci1Zn4HW0}s
zg?vEr{<W&R&RqDh{f5CESBzyJ(na!7Txd=|zs68`*PaPrgep#Sq>$p0M^LbhDP^>y
z#BPNztaNO!|0jz=!!OJElDy?s4;$dX&HcZ&vldF}NEj?3p)dOR4KcQn;$7Zrakl>0
zY1?3fi$SG83D=&LI=JJ@MF8Z1LmTx_Vnw8fhjC-#lEYY`_~=V880={q|HD^r1Chen
zQ~@-@5nQg{#-<^+dHj>sgKl3E(OL}#!M0|QtzM7aD<7VmN#_xwD@rB06bI&t8G>?b
z>0WNk*;<lBORlVL-1>H43#y0L%A-oaYYj`qg}3rj!lfZLf6VzBYOz7&@+Q?fdUsTm
z@b}OsYAq*mf?kGJ75K|`?TR3#oXNls(ok0^shUi5fXBrk5z`xqG_oG_`s|WGzxDB;
zt!~7_C|8HZQ=S5vt@tjn@o>=qNAk7Kc7}RQPI*Ml92_RvcqQ>28aI8pGrszG)*VFk
z?YKU2VPgb`8tF@t7JWrfx4Wg)eXieWjMJYVbp#2YlWM(=J_P)#w_1CfTdLi&Cwan?
zz|q#Yq-LuF6U!HAiaWsYX_xSy+uh8Z=<h!F<lAs&o$)yN&6gYGxfxX9Qe{RJgk2Ve
zxRZ=T8VjwJzkk`y3!9LF)h*b5>N;~k3_GaVy}a*Eqc+kRR<P*^qbo)|SGbmcz9fE<
zrVa_1dcDZ9$-O62;}B0++pAo#f6_yv=3_!HVRAC2jTVds2LD)(I_ec%a?lIegX6m0
z-?v5N_!pN+9M(@>LBZ#6`JT{erI`hblGkPJ&)Ezu>L$Mx35wl(Rh0M1Z!ZEEo-|ue
z=i}(MsSHvfN?;Dxl(2`~xLrUbDb)aHMlnxveGjzIC2Cu|%&OKLnw>#oU*d&Ao#{_e
zZ1-Cr#?n1x&y5;#{b`6>S(}dDflcW{WEU2F*Dg;@oe!>|Y2|@0i%A!mWZHf#0aNa|
z;h7D)&bi}dFJx4Q56JG^Q9VBP;6AF5vCE&C`SxZ!;l0<)@tv+}=ooQRn-~1hG1&ln
z>Ms1dufYeMJI&(sAt8V9>zxE0ZKy6i4V@p9=<xF1*dzhFhvPOMdBelcKT8fB<aq%l
zyqC+=upkUTtq<2cY?-L%BjS`kGa)5{SQLl|5uJioHrS37MC5+Z{w|#&czt*%HnIQn
zuRU6o2po6^&AZyZp6oy5zY*c+tZJ_tzbxud{XqixKR?`XX-v<|%=FC1PAd;;9FWX$
ztJsAa<7aBMrc^K3_YO~_sEXRL8h0!oc-GNuAdl{!Bp;)M8uxn<nwdw+(SS9z=kTYl
za=~PkUoxlml=<b{DbD8|vKN~pdu`TlB^uq?hy22XPkF_2)G86RW{V28LatD*J`~DC
z({ajU=bk!WNMegzPvcBlb8WYt3IOXG*!xQCvwiuYcHRwWh@faDPNMMF-an_9^%Z-M
zuZ>r^Uq4cK{Nqptc@40v2+G^=c+WM|61-pX`s-^9En<Sxg>9Tz!$cUEJp)j6o3|eW
zdG?(@(qw{aCDjirgph5%{wx?8+u?LgPC{n2{D<5DuYre9{dnyvrV_8MUAADK0^ZE)
zEz03@$#sI^u5|ct4fOg%XdJu}7vBqvjN8TO!9sKhuFGi{)5bQz78FkT<&tLrgSy}F
zaUy)Cp9GM<GD7@5uk`TuwtfTF;qHIWJwql#qYDGo;)h~<ZGq3bkAOH+hgbQMgA!K8
z-x2M+s6-}&uz><Xc5!x_BGvg7bv_MlvJ*(Sowp%kr7C{x9=pZW8*gHj0e3P{#1&P^
zhT#^Zgi8|@{qhWs`|=|P)_t$*f1F6gTESN?XgQm#<xTnStDgh{SH5F=Jd>f`rCGZ5
z^LNdFk~WGz_H_A~?%Uz}LHU~D1QQXfd;R7M_??f{U`^#Yg7sU<QS18ly=+>#G8Ty!
zMAn)w_`dA6(Hfu>U|M~@6*y^+3W!^5iPm>I!%Nmyz0ylE6bY#;iPFR1i<Pg(AZ<gI
zJF)7P#0Eu=KeLgE?3_KpnHw4tY%17xnRY2Q%D=~);)0XL;e3}7*6)LME|B7Lf{~@P
zOY}Awd;@QCL6)(Y*^@qijeY$$K@$M}in5>!QN9yVojcV}k_5T9A@`O4p5S=(e+*Yr
ziEjto6D)b%)p^;jDk+ECIj;;-^)m;1sJN|6BX5{!1doX!nnZ*OIwW;rDqeU%{<(|w
zivmgu2rUkbxm@HG&Zy;Qv8iD|j_H!Ho``=bm+z%>dG2^OXuviQgpi>0v(V+svlELS
zcvNs>qBV!$5nWDYGh=~~Kq`6uUYUJl;Zj$|L086bcprh3(c@|Sld4JU22kAK4`k}U
zq#Fe|xfm$#IuH_yG|HO&SF31Mv3*w<e_2eYVjT+n)fm5-CX9MC6rc$`XD`e377FqG
zp@X`4REFBRqpNAw^lKeguIFpp!;JbY$Dj119(Ty;FNxis-#(&n53KmWD5k#~|A`D1
z(H?9oX2`C_bH(my$MHRAljT;{+~B+aJRFvx;weRsuFlP_O%wj3+om}gjH)z%?!(j$
zD$r%7kOAl&_!tv&qLp0PN8)|$fuW|yYLt0)7TdjIUE2AD4&3+EH^8M1lDc#x$FV2n
z%`8~UTcUr74mc&fG;U-`seGl*@&-yKvaX6q;AH$lglCg?dF?a#_YX?-HRnPVLA%EV
zp;u8ZdfQ_xISEiia%h%aF7da9TL9x{a6vWP2$x^6Ep?@!S42DF?Hj2JLL<=?64GI>
zb$!U?+vMPeSD#!}U03Nnbf5b;@B>b)l^cZ?k*mgzPg!zg)gwOxm3Q89u2^|@V`D=@
zQa)0{7e&eu$;`7av;aBoU&7flQ~0!w1pJqH9X!WB!AftWL8bAwfIR24%BS)o4{W9d
zdu_Y%O!$VAClX$Zh(&vy(wJyU`#k7ZcD4itk0I_oy8PDy-accmeS6C5{o*Bfw!i6I
zL(BD1l!15bu#4Q*a07Wf&f-r+#SS1NrYFW;bJ|!0j9;9d+X6nAx*5Ph+wt&_PS(E!
zSj6<uLO*GWSm6-7A!+KeMTe#w=*?@?oPAal&XzKYo4xQB!dgiGh&PIGVmwXw>;bm}
zZ%(XT=sE{TV)Mzq2;I#<SgDM@E;fHM=VDhIP_>1FmJuR9gartdw=pVEyUWDk65Uz;
zX-;E(h;&8EFz+a+W<yk1&n5#1u&UnWtwc>kaTC~z23#VEgtre>kqdcqM@2;y(Lj5?
zVs)ai0w%scLJy3X-a})lyDTUy-&o(m_?na2w2g5sY4*xsq$xC<!7?pQqnyf+gnup#
z@04aeS$y5lZt<FEjDMK^J!-4w7Y*=#!w_tZUz<1=%QY9I*|`|BJRej*za*kB>Ff${
z1BP?=sK@pdPq8Hd##iW@`ZEE6Ihq}dl{-8K!SJfqjA{A^gKnfB!lGiuE#E=anpcr(
zb{*c7ua!^MtBX|+O3eQez#EwsT}L*!G1B7jZTJWiS~4MCPh?8d%}y(+0b~)I%ZUum
z(RH=e*NRcp!Q>OA4N+LPXGlR4@eNY6;sz}Q<Me;}`t+{FWxan?V+_G6dhSu<0(t#B
zds;gj9XUSQF%yzTgw6{$cJ#xtu(ohzyTb-ilAFHjRwR6&c<HlCfX!kOZX=4`^pX%l
zG{grW!bo4rOZMDbxy*VcO^TUHabkhN;F^ZstF=xYg%Vd}ycj*;@2CERxaEeGSL<27
zzu6>yPnaEvlBl^Kk&+jbgr^=4?$$1>K}6%GX_CV-Dk%NcdmNL~T}Dv+NQsuD88Q)V
z#^39kWB>)Vx=TF(Dco1J>2J;1aJde!3#0S+VfLHQYXns(V#5}^k@+}DM=U{k(?PU*
z()R61Yt<|OP)aAU?OkWYDiq-*$~8*LRt2IZmMqV#gTKSXNlV}8+Se1$R14|N37itS
zB`ae1z0^<G@Dmkfi*$hF1>CjR`wEd+NNP~2&Hra(7Jv?kIc==;mC?qpc8g#(QFFqZ
zb$Erxsy1xJrN&Nm-66dXErmM|fZv?hyQ*2jd~T`xbX@J;`h;~SlIlc~8WQ?ht2@Y(
zSkU*pMSjUyW^|rNL-8<<PUFn6mj1M~p(G&_<MTweBf<v+D-v?@0AZ7n^)#iTHNYRl
zi{%$@HHN>mYDRM};S9$*MH&YU<>iw5gQ;Ec`GE5BK+U<Eq9k{;uB4<9q&V5SN<k~p
zN3<{4=7uiJ=^fqv`+*hsWDzVxO0@y71~wHmyC|8-2+oM611zR2l@EBFKEvwM9N5Uc
z5xF>AV%m&p;=oSX$no&9ii!4+mACVq<5qs`Ds~uN#>~O({VbD`#H&o=?cr#}^GLe6
zv=zOSpnVqWZ#!4ddm4<5XVKBF26a^Wj!PLD&dhEc!$i<N6Aa3`QXHIZ;e=ihxfk?P
zXPDQGuojt8k&`lYz~ea~7Qt-Wcon1T>$DhGWdQA18i<yO%hkii5&o~d`0pvA=*mT%
zewE_rfX?&qNqjZQwVhWcoAXfl#Yo*8R1_cTt;P{JFdEq2lpxvY&&9&)Mc>}{lN&8v
z5oil2%{89!p6m`^4L(f)s13N4SCF^hXn^Q~U!s%UMP>I9l$W$dB0yRGn{c?4x_+I;
zulFM(@_LpK6o-n8M5NK*nxf1))&gjQo36J+I`#s(B%!$&ZvN>Y#rJ50+BF|5QG@#r
zX4RM98KO`^i_q~?qX#YWSkm6x?7hDy%^W>N7!>&~#&qxhqNV-r%nI<@TJBI*yn0QA
zE-uI<)2_6@J%aK`Z5-blJ&SdLa{vjU?~J2~oBg(BDw?-9qW8u(H!vTeYina-8?JG3
z;aNbjk)NNhG+I6F>vW&Yi!?%BytTiDJX?dUDT{$7GT=FpsiH1bXdi2A)^2OpS)KtS
zfs1O%3;}pMw)<*RH6;Qg;hWzORb<>A6uFnn6qUlIXu6MC5|45S{7PfN6*XM(n1RaK
zR;C7h8h>jfl)0Ii!Bvrvleij@5ax~52;~ouV}S|>eZoFr$R<G0(H3Qv`zw744+(GR
z9{{dpA96pYT>wm7TU)~46(kjeIUG{Ytlt=&hgf9R7qA^$#H_X?=ZbXo?Ffw~K-UE1
zAJm=y?O2u4e*u-B1N(-2ZAAcK&aE(M2(K&e2kz%aNX?Gn*pr9B<YL2H10$7bM5lJE
z(=t@js%OqsB2H@D9l8FaHlD;NmZaj4l6F`{LqkJqS(NTgX4vwX;#z78b&4NI;qXRH
zbjfG>GRtR@JeAm6&06t)(TGTmbb74QJvMAv5abidTr-BIp@-)aWn%wS@W!<Qdd`JJ
zTA>-ePqmQ%#Hw>^mZcuFRa@)nhb6AeVRz!_5z<6UR(GkD(gq^J@ABZYhGt5HBQ%*A
zPj*mahYJUs&E-+lz$o)5$P6{Bw2UHkLCo_wM0egO`AKf;vh2>ifsh0#pSq~vvvb;t
zbKGDMGpH#){J=8cl1+tDpp&@@O3hHr^=<RxDZ?;yq~7+ng+>TtT!#o5OEGOiUm?m=
z&}fspk)=vu$ytYGkJxM-IFr;utW&WNu#(*e>N&{@7q_N~rbWk>3huJa_WfRbBo|tg
zyrL6;9b)p$xFW*iY~{8H=JUq9R4g4P3M5=n>AD^*dI<?@FKRbR;4@&5qZR#83~h7Y
z8LJ^cZ%sy)!dTZV(-NQgTl5kkU$X3-#A2Jd%TQjPOPv9_>;4pU<mF1y-zBmMe-4@Y
zK4U9P$o2e@%_!Tcx6`=YdNSDhaCyN{%{)mGDhL!qy<rir90dHLjr`MV%5Q@;{)<fv
zP}yW*;!)Y@b+p*Bbky`p2A1!Phzdh&-#XU)&VtctNjb*&4-rk%r7pI2<UQt`7I9Ia
zQ~ke~IXTtW)6|u^o9RFmiQk@1dG%sWdL2&P>)89ygMdZ0-idq!A8WYWTbxVEa05hZ
z0PkyA^~pORbxbJ%mj#D7R##?^^IjW}_Z|8@!yOo|CEaP%E$V_CEN|!C9|(JRiLl8F
z_;)1^@H_H^57}s{K)`t~YjO*l>O$hln+nR;uR1*Ne5hA!LPw{ClnH0qd=;Fe^J*K>
zQ7e?EuHR?>&O2vGT_jMot8zH^K7*BfmFB2uNBEzlp#(jzDIO*QFtI?Vzy?Qx;!pUI
z3FBp}i4Cux?rDaBF=0aFVQ8Xb(BIE(3wNRArN*4eS|Oi99HcGBFOVrYKS%9;$CO|(
zUS^e8Qm{7_FY0=&o%3V`laoJt|M+bN4kzvl!;~-!iIzdQqy<wyrXlVOm3yni3R6Ce
z?FD#$sO&L;LubDh`0*ipIJojuXe8?d+;?{#IPQQ0T?}zQx!r*j6cLdq8DkLBJY5t!
zxloXhXavu4PCO#(bJb8#Ge)1s(uKTJoENtSqB|s6au)HBP739CU-^#+;%}??wdWsg
z)Z#wlUjffDL88r_>JyxY2$j}i_ZO;b+Bua0dhgI<hqombGQ3gBp(|(un%6Dlq;!w5
zN!Vs|W%I$m9e;OwIqp5Z86+?l3$NRW@t@hTZW_Ti1e6>+^5UsdyENY=ewE~eO681(
zOh8i!g!57J*znPlczp<l?zTP&=LXAtTqP_?Rht*zr|Xj&@6YDA<AY==hWz!LR@Xnp
zOJBHKTAdPmJ>hX!)G8TQpbyV1(^7P5twukQmwDs3zgf>Yqb@1rr<T8I0;o8=_`^MM
zBZKA~(}~tRgldGeS&HSj1>Xly%wc;z_Wkw~>H7ny8i?pOK0A;=IR1CKD?`J>L_o~m
zbf{6SYI*0KY;S=LPt~x-=zNa-!YCUa>{U2fDO;r?0-{KyVedDDg+6R1g({L%kiIRf
z-clL#aF7`E<kTv4p=IR>EgBQ|6(>j-^mZ15AqvYiX{?rX`HfVfW9%LpmU)so{ayk|
zuBFP;YE7$}33WnpK3AB}1|n!bn7$XOBo(aLn041z<vm<n(t#xgA)+!gb6$Nu%1;!H
z?Gma3KOZEi{9Heh4DxXTNJDm!$%|<kZ?VEv9;qxgnDkF5r(HiX$T~0AhP<(a!qFgK
zBFE9iS`s4m(4RJ<M(|`R>S@v-|D}Wq_`i1dFl~{gRR#7j8tFis#Ni+w%_{wa#EWE;
zwFbYbcxBhkkM3U!{IO}{uOye?lD5##+N#f*4sU|e@KZy=89Vk_N|2eZf1Te4h`V<Y
zl`o)22jK6A4Md7R$)$pdNJN9mUo;hm>4t8f@*+?8)i7oLA<qWkNHvN0{ZrC`8WsO>
zSC0}(getJ;)gujUb!Uw4oauQTDGn`@jP1vim%r=V@~hYpobbxKGO7vY=t5THw`%yM
zsERzmnzTJ@pKL?Vh_`ML7{!g)lNc-6V^SyNS-P&TF3Xj*P8H5dMoKEwZd}ogXy(ak
zv5y2>MlfCyADEW1B0PM=Tyi?OG`xkE9C7M8TVFhNkeB`}|HBf^o5JS!B!!~QxOe~Z
zM{zb|=wGGwnCZXRpxOK_dTf`zPtP##G#`xP!?M_)W{>|)7^bd_Wf(+eZv*h4w5gsU
zYCMwHBB`@`kx@|}Z?$w&Tj#Gp2$y513eZ@C*a}aXb=rTHe~nc+!~-X|3EIuN-{nlM
z)j6&3D)ZZ#F)z5c`iJiM$b~(}5Gg_i=u<`aeAedPgrbGqlO~(WdeKCO2qA>QkEN6T
zv_p5cQ&%W4D)_s7SXS9p(6NT<BT<YT>PhSP@Bq>XIw79w!Z{TUZ&Tz}3ou(y>FpOW
z{XVVI9{8Gcz)S3#+Xz`QY4hgJb7@S!W2?X>&6O=|=D}%JV8I(<j({jf*~$a{i-pR~
zwqu1<WNi6lIXMrv_E&cy|KfWbH7O*5w81q5BlrUHt%VwF_x?h?M4{~admHKcbA6oW
zziEF4F*-B5A_oL)i9lNgWuU9XTy?16h{vQ%RF6`0Q5XlX?`e$wQxH06%F6{5?8E3O
zT!LG6wGiZN{2>hbyLsXLPi~atv|*vq=9O)1lXgVj_MzM^tto6!n;7jMx0Fl&Yi$w~
zN%@F>w?2F15`EKbF0`RUsAegyONtuCGuu;(H6~&;W%Y1Zbx|YmGD(149A9fi{{0^U
zSj@H}KNkVJXoV61MR2$F;ZksY$-2S^4B6v|a5$(w5y8+$#F;t&JRp8-M?{P3+9#wd
zRGiQbcX7mF+hFMT6F`WhVc9&KV>Vt+F|GyDBih@;2?@b{!=+~_t3r2+aR;9eOC_qp
zEPCku{F1*U1%?ncO*AAFfW<F;d`Ey#5HMI03VnE6p#E>wm=_eI8vtkCoIimxkRnka
z7@hTb-48Fi7y(d<7>E0pL5V<!wq-DV?8Z=}yFSmORn&jd(R2a-aYfD*5IVt-dHMyh
zDd#XyT>8%o0F>o}9DW5E+qpb~7P-iRS@5jTjeC&xI@3R1?eFjZ%+lb2k5Mu9y|iKP
zi{i>VS>Qeq#0mWw;CJae5)}+qbS}SnHu+B;;mF}uBd#`LCR~>T5O21ZXr6UPMum00
zJQ%Ungv{$G&!uZBTE%axFmloomZ29>L}2<0E7gudA6qszH(44EmU;m=p`L`;_y!bO
z_&Y+nRA<~gc+J(j#2!fpvH`D(I&Mn@af7ch952@0$TUQoX!KviGpDKrpQ8Isn%+!`
zzu$}uHBp8%S=#6aaJ6JchY1uucgcAu_d5}L-o4bFQZKwxCd7`_qo6h_WV@L1*nh`s
z&xAwEC)ARk@~D~I&qS5Z(}LUwHupYMXn#LH9#aumg_wyzO{4?R)2?SQrn=#Tuv`SR
z1Qw|hA)K^NU5}^l&0uHpw0JfP_B_U~Wiz(o=>_p1!9{jp{DY^hDf@H0WC7eSB0i<G
z8vru%Y}i4Jeid&x2Zd^pMgWm;@p5FSy)Z%Y&uZDK%Fg$IR`%p*Y$Yv5mL9Esc2#Ja
zV$Ha9Lr%&2tccGYc-!0Ykxp0ol|U-!d2!sn+(=_s=fwS5RPLUH!gRHub`%NOCA_n^
zUI-pI^5SC{2Fg^qfftblCzgRI*BEEaCvzkYPuX#&RlxmmlYW(q*3SF4N#)0yQ@LNP
zic}{9L|pNQh7TBQt@Z_u(GRX~QnBS1v+xeE0b86PEtspon%TNfq&htB;a#$V^qVnk
z`@<^9qPEk#_Mf>-)f!GuBOYbEhqjmp&sGaQxj*SbZz55DY~ho>@Cp_2k(ay&NcT@i
zum|f$X1Y76G)3gt1*)l=MQcvtE_S3;kmMO#daM*iWaL`81BvhE{hnwf=z&?cz?a3q
zw3RVEmJ^Zk?BZXkS~^|clvJIS?)<q?aRLhIJCxa<ji6bh^oMydqRS@^SuttYV02*z
zs+s3Z0=W?3TYHdp9&T368P8yIaj}9+V%o{wT)3jL%-ulW*JZO;!{+4wjw8+LEThhv
zFu2W8s%5@1nHQe`d-Cm%#C&-3=J{+QL34q~>2D%$n{Smf^#HTv$W>vy9RpLUw=P#(
z@z+O|;0$R7d~`3pPtLr*Yvxt`*MoGZv!>0i)YD4&d~;jgymp;@Z$w1p(qU5jQ&m~B
zL=v@?Xr7L9=gkKb8GE%UZuu&WU|TYuzsX|_Q=&&wk?Ty*gTvq+s(6S~&%P%+OId6v
z0rIPcBPu!8Y7&8LET90RjrByTsP{FQg6!|Ri2Na+f}}@$e8XNwIyD7!#-~m3X0dfQ
zGHdWI3{3r=`DD4SzjW#7ERxW%qAo=vTND4C*}{?E=dyW8rSnIy#d;RwSH9GQSUEYl
zgTV~ru}@{~J?Rl4rjE<C@IilRDB<(41?M-D79}j}IL6ez=un3{CF1xX5UO`$2AitK
zOe&6g`ne)4adwH24Dpkz7FVkle_mG^z+G3O#amaT!&_JS{&{@?^BH}~L!|VYD=urp
zhC64G)KgO|CSy-(pKt>qOQ|>({J^8yPG{Mu%bfeJxiMG0CWIu0{KZwCEvgF?FW+9w
zR?`y$z-WeB(V0Anwt^g9Gf7j0>{*Wd_5?SiZ$qG4DAYLkh8}})G}Fwty!f$vSN{Lt
zjre-{7PYi*49u^zOxf1$1XxHChePHJ;pwM_EKcJl+xR`3Z)3%Ks94OKQsSUHqUc6*
z>fd(AnWUM8BR+AqlN4pT;3B5A(F-p<axMRs-i;4)S7GqNmuZ#eyH*t+6rU*e?z;iw
zvDT7eF4K|34jARI?GjI6NHA~m`!{$%11_5%PutH98-5BpxEGVCp`RxSoF;fdd*2Qh
z7eFN=dG6<*NR%3gH*{y>-b#k$*Hu8KOqZgdt9(?I^r{T_)nGn|?mE#VA&4M!ayj+y
zO>v%lJ~dz_OkCiO*OC3={J7Q3A)&dJrHDyOSE0?8rC6L2^LNKRhw)Rzl6{ZfMhgu{
zs@7%`+q%i7U|FKE1j`F4N-%WfSZKLm#CiD@&hOwLG7#t3x9M&A^NYysO-4d5BtVZ)
z#U^id6(IvtQlkF-A#%)od=Z9JFS4sL67p5(qdw%aha%Km6XH5H7>3>mPV#IEl;q$q
z(q-&g@-h&<t23^6?GV*->7lR#av;+HmoXDYuX@~vz<%B0Nm)QkbCV>Z_MGWnv?%V-
z=)&RrGf@pFL13y1w((n9ikI=FDi&d@C@DP=rOtP6#WKMp3tU?Z8Fh3R(~3tYRql>9
zJBJ<{*ItlT2oZ4=+-%->@w+|@w(F}R;q`iiTW1C$gw`9WR>Q!m;-iunmY<h2zi>7{
zMsQu}*Bcut)qCX1_?K;$h&wvic^pq8o^D$CsAw1;{OF4Tf*^(i$#CjuL+zS{=HV^3
zG!9ShzWu!e<O5WUh`u1bbZrf<6WLlMHn398hyE8cx|I9DYbtVcKjg^Hy}UivlmPhH
zEH1icN5DV)W8?#ZlGH$PO>K(wKIkL7Ys-pD_bMo-5O-M}oJ36H8CP6ZJDk6D^s+<s
zs$deVKPo|)8Kw6sN;c*?LKD5LK=9^QAUckGmK}CpON$;>XQq%lxHh%!oesUyJeb#5
zW`q#Nm8HcT27Skk!3JDZyr)Z+2rAP;f0~sl3rURyk%o%!JgnxJSz`f#rD|13165_I
z9?K=F>S;_=WJt{pAMkewrxi}SUjua<Cln}s_o+q;oHewyIV?DqLyuF`#K}N5+3bPF
zEXe=<n8Gk8rb;P<UFG9+aV7oCpEiFx)EGS{jIY(DKU_Pd))xWl_{~SuwVMXO?RK9&
zWistPS4wH1`fSC}?<>%My?%~~iP52o96I@STwMhe$KKrI>hSVEyTfMCf>Ir?ox8xz
zrYbRre3(hidDEVOKBe5kf={T#A<R>0zG|!)?cJQlt?*2D?Aq#P8D-x<lGwK~=R0}Y
z+5zr`oEM0vrL_CG#LdCc8)}ipjN{c-f8TWWm?##d28Hqmnx6LouK+A<5Fr2Bw_x+p
zupVvm&zq09ov5SuY9eYXN15_(>*h(0&D=lF;#~msKI&%!X?&sokF)+C*!o{#nhEPg
aj13{1xX1-4^7hveoPvysbhV^u=>Gr|kZNTB

literal 13770
zcmbVzWmFV>*!R*cOLuptbh|Wy;?gOxbc3{nfFRu+0xKdc9fGt-NQ1DzA}J*x;?nud
z{hs&h^W~XycJ}O-+4;v@*RLkwnZ70oAw3}o1R~Maf*1ndBf!T29~U@(jf)@xfgY!8
zLsX$bMMvGiVO*NwBG-3D0T)YL6G?9uhax==U%IC{wJZ${(k9qa<Kgj0SAg`HV+vJ9
zxT3(;_}C?tg=yfXhLwh{LcEjimmSW3>>KUn1y$csBza77Pb7KZdeI&>Di&5YpBWnU
z-e?Av&dqAkyC`rk`t_h?IjRi;0|El>&e!S*_sSE6JO59oQrYPUf4t71ov3`1Vrj^r
z@<flq&!8a+e2K*Td^!ve2L}gnp90F-kY-9BEI|aznVXxVmKdw9<{KRsSE6R3ar3Ec
z?Hjj)Zvlq@^YLc&n|!`7ucJV|&8gGVmNR#Tn-{{WL&L-0Mn>XknV5_iI#TktOB6#z
zrKCO}LrX_TwO{aOzglh!7m8HCW|r~Y8!4HYnURxtVUkfKC)&))E+H-5p4o3BI&{ej
zW{3plUPVh=T>5ZDR+6Ulfo0{WiueHfcyPSMX^L44xF!z|4~ax#=yCUjoix5MSKe;_
zx&lm}B3){{0GrwI?~}H^?(lGn3yS9go_HX{<IiF~l!@Pz^{eJG_4&6!#E}i##J3wg
z;qZfmy?duI-D|Tx;AZhbEeo-hY`q+R!@;q)j~Rm_<EQ`9SGnuo39e@;=-ILVc5MwQ
z$@=%S*{`|Yem%pT+n$K6y#JTCq^hmxBCRAniBibn-rao1@7|^z5%7%OBBw69oPNRJ
zaANkR$oa3(hw>TchTR(ske$?r`ugLHtE;Oin#6Cp`g(e`y7U2!ukqPhP_A@v$~QUu
ztk~=>qfS&$LcU{*KYq-Wpk-1s&!~M(f!VE?IdOW`Lpp_?c9)bieincaiU+ZeHPsRo
zLw~Ea&tD@tx<kFtS@Nooz<N%M^TQ=95SVjy(iYd0tRDt~MAJ~y7|CUJ47~W`n3<Uw
zsQ2{g=-DR^t0LO*@#q*(U-}-as02PMIi#S(NNVIoNM6uCs>E+cYTqNK9MQ)TL#IN*
z!k=;u=wYJxm~3oAEChXaeRePcP|0y&NOv73T#r9H<ms~hnzeB5nl=RH>Z-$iOlR;)
zDy)tWQ}oFYJ2NOMUvNwu-&+cFxY~VFtzbvv7Db*^hu$)a&CFpX3q&?IH;a%PhK>0Y
z`BBr*V1lUQ1ql;4nAP4q8dg2+RS6B#27w_l8WnXa-XS5OO6Pa87eu)vR_9LI0Rr4Q
zn2N5bN%fLr27mlw3>5*cq;zErIr6H+D!i3@Qrn$NA!RpjLu~Rdj)~vw>R+PIvWn%Z
zR-Jj-n@~Jt_{3PEx?>qB9_`6;@W+^Icv$rBA=;6gc^$^}2PJA#rN%Y$EaWq}_UucY
z0d9KGhf>E;6Af}}I#G=2!t3iI`{A93Zet5xjgs2BkN`r}6J2bsT0aoaZuLX{uy(a+
z==mWT#36p~O?P*<h^u5F2AP?2;W|iy0o4YPD$F+D=Rg=AOlmZr9cfg^GF{%^L1HYW
zcra*T*53o-W5hHrd#2*9>~GGGP>jWz6%`e(VPTfU#KedB%2LWN%`*O76=jcYJ9rtS
z&V7{rp5oCf<}0BrzqUMuO$*||&BG|i#!!@Rcu63xq$E5vG~^FAlr_;hIX6eZ@G09V
zIx&+s^tgq>rXGCCqI*XwC2V?uV#Az>T9ob<IWFBec9;C!TdM8!dg4ss>-#6gYOR9M
zFSo4E!n?bjgoOorisO|e6%{=&o~1M7$2&Kf3f?yxUmL|et>;3759L+g-`{JT-Zg)(
z_}7f3_A7{N^ogwsUqA@O2v9Qeii#xlPOmMMO06tSp=Axl&wTqTU+@uzokh;<(8R^X
zy{5EbsDVMCc;0xC^53`rT^R2F7>;J0=1xj#$IAo#Q!o%iA5>LUJ@`5}Kq%DpDcDmE
z%f5hCvJdU0wJuNDR3a%k`}A1t^e;8zK`85+YbScCTD#<=Bw7&bPObo4hVPlZ#YB_f
ztj^uc^z?M<BSx7t9WbsYMd61JAASKP?y-!_r4Q2YL9TE@Cq^m(qZzjho|U0x+8y34
z9}*gh7a!kyyDh@wL7g(owAn)C)_R(`=U{%+{JrA{nlEDo<ER$%VK`|nahK=$t!(_9
zYs<&_o_MA)bMv$^-VTk$G;H(*vCg?{=}}wpy2PJ<wz^M)3!g0gCCseacydmMOac-b
zlxL>HS2zJv%+~oS2CSfP*I%^=S?SdKg_FMV$w~bm2WLo&wmVDqXL8wb3-l8(v}yBv
z0b0>(h!#x&TI>#OH(Q;=m5WfTCZ{m1EJ1|a|M-!$(i@>{ps&wdHKZ;Ag*=LWd@Ku8
zo517MiG$~O$fXEOR&H+YO(_$m(qA0{io-e$f{FbeD2^=Fl@t(G|Mg+d<tpeBV$W18
zLa}@Qqk#=G0m`rvxE5~4{=Fb35{JD?W8_8H+Qr$gUzPcJd8QJNLqbB#Q&Li-fJGEq
z(%bPMN+i1AwfWf}-Mh6o85nrDcrx<Ot-NQ%>ovM?-viaQ{|1kAR(7`t3-S2)=NA*p
zkbU@07kbh!_pF%t_2mX7h*2RZ4YXd{Jh{oCnG!E#(Uymvl%Gm|QvwnNdWv>>CkR8B
zvpg#*O6Vw<JtQrjd9l%6lWFgB@zxFJ^7J>m8GX1R&84{w2+_`-k?vrY=rDfQVfhCb
zWt&jlk4Zv%k)Dh0WB8=pK`j@B%kgUWK$BqjQ7bZJG*olyuODdAq;@h^BPZ6j|Ii}m
zEG_GwD!UwQDFfMW0*Uvs`_BoE{*l}S<X)irqOcT`HMYXoL*B!Fa<Ix=-#<sSMTDJv
zqfw^q%{{ARFV<0L)e5n5*!&x}Pyo+T<bUQQica6FF|xS@9uXMqlW`489rAbS+Dd!J
zXLsK@U{@v`l9rT|v}tH+&aYTH9^&kl-0Tt&5heR`d$1_^(n2by<R7|zG+x=`fx2+_
zD*F#n?Z>w&IPGAv*(J%ova8tO;z@^DG#afAvImZkSFc{B#jm<7-eMA$6izsj;ih09
zC>4-%YVmKKE+$v)vaa^}`ue_}C~huJ_k1}ob`jt4z}->iL$tw*q2HSj=Q4bVjaJK_
z&W|Guiwg^l4<Fh$tiEo`3=7ICiESMI{BrTGWVIwhK`LTglky3BTIc!z(X3GW842t)
z9@+l>zKa`rXW|P+m)P_*A>X$JJvkyWMJ$Q0epb9TOw~|<8zGmUhh$GlG?VrqS8h6d
zI%Z9Gv$+&+Jy12Xx^}(?c8$*RDQI)peJiZ_$_`gqBwL4wu61IF6(935YOSCc!TfRD
zxCeoC*PF1X54xTEp0)^%8f5M|LbXft&$~XwpE-}^(NM3NbE$bxAE5&AN}j9OBIr>o
zJZXGeVK6=cPQ1?+f0O)PsKfHya_VAzWLn(8K5Z06HZIaKm6~}N&+E8!o>-YBIuxlQ
zs=;A1vbDFtL5kJ4($k@gwM8nCuh%*6`%<!E$<>vWI8;0jpEEW~M6c>a@0x3?=jSib
z5InNGdSDO~&z}L!bMVnaFn6&m>LUE|HE7B&`GAZ_tu`G@R>`$ZWLW*9P%(A&Sw14n
z+ZNepgE-mrtM<Q+CB{`>Vl;RA^)L8y-Hj!?_&2+g>{t9}Y{QLj6Y&2kIKw~ByXL=w
zq~hCB&o;Hmr1-UF{d4{4+~wuz`9~r#F_DG4e0fgn3P5u916w-qCJU_-C6o_tCD(ee
zlHPj7cAFXj^(ZfH3?;ig>Rfo(=hZwza^TdT;yXFFd)tVJhn`a0ba!a9w;=P_{BOlJ
z4-a(sny6fy7?yFxjAXU{@AewMc^)13Yy=Y%6G@~#|LyxHZ-Y8yQk$bHws^vv?UVi~
zOz|SJjpaffNzJ0M$y&Ll|NQ(y2U3`_C$G#hWEV7g$==}7YN;CS-(h)gX<%^d#jF@Y
z*&1Sn0e&eAiWN)-2bbkzQF%WjZQ<I^36ny@b>N#M#Kd8(mO>9MN;a2~yPc-B^OPVm
zYmI2Ta78<=xcoONK49J_*g*T(<@n|+E3Y6U(=nSUJw&^P)&uimr4$KZAKmm|+c#PY
z_p)W{hd;-UGH!;e;{R-5Gs#RxE4U}&>+mg@Gk^qR7K<hv*9@YqLoa>?_FnxP6REG2
zx)K~SH&O$WLCdhGU+SHNmIBRg{<pNRTG3gcKK~i)E4@%VoTIfEd=K_{0LL+FGkje}
zFQUV+qP41;kvDZ0?{wh*Lb0&0q{R)i%d1kgfX?+T-JRA?fZ${-jwE)2DDsH`3oYx~
z#Z#%mJC#I>`jX<}yNG15c3|8J1yHt4*S-;nA%+dymn!eDG1$Lfy!)Cp0Fkv;QH!oL
zjOnAnj*pkaXPt3<jIm>*1%KgxIzl$_-iHZSRQ}}UJ8~!9kWg$DUU*BEq4?$2yla3=
zwsvpt^Lhq~9)AJxWxWwH0?;sp)T57NpnlsIHS_*#rG<IL#fZb@)`Jg5+#loj1X5@c
zG%7H_Rz!apvKOXHsuHv`g1wW{sO`0%;v4b0QatL@aI?0wgf6+i;%T~ExafVjLt4FB
za$K{jCLP0y@&OlfNGNib<%y}gQrSe@orSZWw1%-gG{wf^d>hAvWY}@UX=!G>VYkSs
zkml!e5RK07cwR5Srmj>tcK@Wq@{o)E{?avntqPN8YiAy0n{;K~Z7hGd_(<&QpgR{K
zoI>K`jI%S!C+@}mk2S131oXSKNzJx$EtFq5Vz)T(9Gp%EP@3n^68rYmkn5MW#_>yW
zzdG!cs*ic@*Uy(WL?9)*bYN{vI?U&C#W`1D`a4Z#`-^S1q9P(g-0b@y%tUM@xjI#=
zz*D{n`T%OCRx{+zOz*I?hBedi3ArUGY8;hvCW%$H!VqVg{~?cMpjXRIc572sy=qBi
zK(N6ViP_2EWxBYM_=hqnBaY2Y&v-||l)N0p>G<HBumz7dtVL)D<W=($lyi`pXM4r}
zzwPJj?ye^i!SW8uNm;%1<(;IoC<ne=%Brb=ip<o9kPt$V!qQUGJT_DadoxC!M1ImZ
z4WW3kcA~$WP!sTD7oFpQ!dCH<TxV@+k@~RRDVIGN=I&V+Mnbl~t&ON6WXNGXfiN>O
zD_K@UxqUkh*Q#T2O6l}@94K`tA}e=;>BrM@TDgk#yK_|PJ){bOjivkv%5MacfSh)(
zuC6XE%Ggv@l^^N5gywHaXMg7JAC)P3S1gcoRf3Zjz+IS)(3ty-FwV!m!yj^>+uU@Q
zy1|?}D@)$VOB83fsS{gq?ZBnf#)oB2Y&$g1IJeMG@Duo8k9QOQnc7BoCx?86WEPP_
z_^puhOP1&AK;xx?_>WPFgzp~}8p?Y!ebO~=$4jD<E7aEYAjX`EVEuc?B6>MI$Vs>O
zs7$$ZYPS$UowN`aj~#ezdsR}^)Ug8dIDJs?K0ugY;g=^cmr#JT)Q@@Ta1t1_u?e>@
zI}NK(qn;K@TS+J@v#@?ga)5?tUomPny!?z<=#BQSdA{?SEe2zHcu)j)D*(8oaac2)
zOoxe`{bkESgP`-%(vFMO(3^Izwfh!mdPx?I8?bl=05gk<iZY-c`&J|6wfgV+>MEEj
zSY;C<^^B12pes2}YUa5M>YRuX6^ub<jdYe2RaTBzJ3Ks;#t3s!EFrYpbbQejj-=}K
z24O#cg<a^)EYgt@z@3@xS#u`DeytMmfP4peFBi1l7gb_hb5^J}Z37-{nPp2KM61Pk
zscY0)Rn5}vOIegkFNZk?1zq-BQfKRIuNYTc_2_ZmEdU%)AFMS3jpv}+rU$jV7cc3&
z_2z|@wEXBVXyBJ?`tb`byW}o;Y-_JH>n_#nH*aJzpOI=NoGVg`{O#2wcqJ^K{XMwO
zNh{`9&~?mJivCl3`^7)?4{KcIslIBC$wnWsi-pf%pBhBqhT4BtyDhSH;6#F`>rC_R
zI@CGifMqw7pQ~jdwOXY++}U~W!<G%VryzA=rsv#UjUKn(lbZP-F%4Z9kXf|C{M?-1
zYlQU;Fly(bcP(o2Jjt1LcrG;{+y~^qz~=71j-qXu6i`{7?7srm{-Ss=E)^FDTh*36
zxzkgU{vF05pHnDz?p-);kG!;W;EN8+9(Q1U>f7*DDmCl>lDv_7Kh{RF*+;NTRu6&J
zHg^=AT3*yBEByV61lZZiQ_38Y)YR0({}AOLpek;e?@L?c;HbUT{RUA3EjEn8nrF|t
zQqM0g9)|w@{Tn{62dFI3`7XA$>l*-TYHv0F6EU{!i#aZ5+_F{Yh9Kzsrjpm1R_ny(
zYB2f=Z?hD8&z+m2%NWgp9!}|Y_xApKU}6<u<N=Vw|H!=-&inrUewIg%9=!&Y<+>nP
z^qgh~8pO2Oz{@ZptaZh2c8$65dhVfd{Ln(2e}<^u%-THts)YDF&TgLEDR=<yHbiD+
zJjbzLRKyux&qPn(nNXq5QZD%B+zHqe|8@QPFNg)CUq{z3(J}TOxVKeqvQ+QI2uG^J
zf55alrL)wZF{V5#ePd$-)E7}_T(ic-rer#@J9YL3RB|9jOaDF<D!ApZ^6O{9B3Wq9
zRL?Pk=$M{xAd^DZC!pm<00Z(eKKb2(GXKE;vb6x)v-vRPbY1jXL;+cRp>Q0?(T!qf
zr>Y4W*Ml35($muB@f+#%W>4+byGR!38lL4ZRnGCvxJyQePOm*^rvK4TKN$gpkE6XW
zGuNpM$vgFnDR-7sykBPq*$A!LiIpVCEYd+`Ww!k()#-ek<QjV!b60ArQm$tPKtJu0
z{{ActKUc-P{6h+`qz83h^#81MH2Wj10=u~j$5#KyR3rHDi9uvbX#=E~M!dhKJby6s
zVz0Bbd;a7H^`-cKbf*2PG<Z7D$WL^**vRo2xI$aQMkB0Zl(L<vM>KN+wmq;pP)bVj
zXkyi8m?>W|^!##EFo6~z{eHq7zsOqwZWb6?7n%%aw@=#0qgPzp)sypEy}iBN2Hihy
z3f9l>zt7?)v}dPdVWGLZyDRmxKx}AqpOo}n)Tn{C(Xs-WqgtpY-tYI&cr+qsZ>=o;
ziz#clMssz`!Yc!tV;dS>_yc{7zpk9{pkb$ss!jOXusA~bHE!|PwwAzMwm{wI%@Y8r
zC&vG1^80LDBPNj<dD)pootCCf_CmTEN;s4^MUh^RpP%sJ=`t+?!yKS3+64uDCfM<E
zn5AQVDJG_}><n7$jCi;g1dWf6*Pc2zVzXiT%Vm>Kglv@nY_BI2(2M{{3`~Zg4J-h_
z($}wFRU1uP>OXJ3!|K`X9d7jKU*R)~R~{e7-7x|61z6z@IH>zK1?T4wD}HUNy$oJ#
zJF4-$y5)vLEs7mrZ63P9!V4vqMQgVNprBD*>sfl>w$htnqfWyqOiE<=#qxnlA2H7i
zIxJJ-wT4N#<6AOy8W*nNDg$F7@BU`F&Dsa9093ha^PNBn=(5nR@sfaVd%HDc%Lo!i
zl?SMr-9VcoK#<(_y*2#K>aY5}?V!Ob7C%weKYRz>K{`1(No|kZ%_!vg!KL&km+HD;
znq+xS&h>5leR94F3<mq=M#>~N2pI&5EAvzUS#=^Cp5~(0+67z8XZcqibql1h4;>xf
zu}nSj)UE8}(hP-zXEL~k)3Z2<CEQWmYv_mTWw-jX4^>r&(a})~-|3BwmsHvvB1WI)
zFRJFM6D^UC89Sl<k$=NWL8r>6(@*yOrWBC}{^=CG&n=1=@uG4~bH0&@kzonOCpn@F
z`Oa)@)^3S(;fBjiwXbj!4d1z=JVU>_qv96K#hW!Dn#3Z{N#il>qy`637=wv;CE`U*
zT;}ZaG2rD|jL2gRmKEUgP91fq`sj6j+}=DD8dO^Vj6a)P2pPK|2Q}dp`vHm0H*=fN
zIp_`lm7>{m)+JE7o1+8QKOzX=4o3NWIaK^+EjSEd^4LeE#Qnq@HyC+W??;}rZ-R!8
zoDnnwe}p|^V$$jk=qnJK?4zB=D#=bxPK61Tz1XAdm4zI-^^JmV`Em3<_G1~X<{s%P
z57?2wEH4yR3`$5y`1<=pvuoxbl(Y3C`p&vi3cl&-@HK2S@9geQahAXR`Wo^|b2c$n
z=B3XPN!}}3#1^fgpoarzavYr{jw(MwEn$$D4ZCFqEdHHZRIV#+L{ud?q*&E~O9t%X
z0UAPsZ0+neoibG-+azZaKFWZ9_v2wOVtX@ypfzjZDaIX98q=SdW27A<@>eyQT_6sb
zoKTwm&XUPpKM@7al%Acd)7yGI0|Q;bu}}J+{q2N9i_-sKf!Y;Y2&7#`@LCrb{=OF6
z%_(k(+3FjXvmN;u^PXv$QX9)}Y!;nu*Z^-nt%D4;F;%zT_p3bgv8~#sn~r<noc@er
z5ex={)5YREQ2J(ZQ;;m&N=hwr=fug8<C#~CxT@3d>31fE^0o)$96TtgmbjRHrbDcR
zUvtQ_vRm4DYn7Z_Fy4=W;^#6K<gs}MtIf-~&VP(7(lG63$+f*8A4@Tec$iXNT3dTa
z1^`Pt#ooUh)U}3GCRyAPXB9J+UbLy!sOWX)mS^Yb3h!&R8sR!U2xHH@qm3vld<C>i
zFnSpjj015c;1=~M=gv@QXWERP6Kq)+zToLs++5-oB9OY}1rISTJP;S-2qnEAzU#xw
z!NGZg*|H&VF*Ix^?KPlfGmy3^qxH*SgqC8+BzJ_q<)HR)-qXD^2mA81ty27agxIM4
zk5Mq_E4ZKaN8_e=><fNX{dX!d&)3P9a1>-^U5q7&O*ry^%2w0c`w%H~WaDeqUNq`}
z4JwW&0q4aMQj*Q+gLo+kJ?=uP)4QY?2dzgPA3crn%g8wpabqnZ^#}-x6)@0Z1rG;T
zS7(0I9P<Fflu|x#HA<x;cN}tM3|*`L>e22Gj)MpM%O4V0UBZMjunN+Sh^bjUQ-ccI
z=m2Sr5tY-ng+J^Qb0ou_eJPV7<c`YGKkd$xVSdfHQOU>_+cKBm0(zD>w4YTs*7}l4
zfDB=&h7Z(@4z+kT_>aT?q|1eOu0x+_!JQ|s4i`57(;#)J?M~SW>5)6~jYhMi_$jI4
z>9gx02Cq|$KHF;UbZGtn>n7pFQ;5iN$>?70cBaFGn3jT^<^zSX=x1akcv#aR=h<Mo
zqlVTl479u>=Yn8Mn0%Mw^-+VJn^(ZG_@#wZi|dynj!~6?i!jl-4Wk0B0)3F&{vU_~
zfA%{8t(euxNh(3?bmQN7c8nZqJb_A{8FmNCN|OYSg)0r-O}@0-Zd+*qZ+<adp62V<
zh8F<4zv|}tx{ZkKI$11NA_yFVmiAa}IUAYbh`?U2cY?t<7s%$jer4!VO1yv@=GP#9
zgTOq?>glfUs7yK<8dy<sFkW~0HSV9L2_2oB^PJyVTuVo0QmeSL=(@x<LEv-c8I42S
z<m=8AjnuSt<a<HRwTu4o-2YTdC-BTha;3$fu!FdygS?cvrvT%3XK_M4ZGm|$+3Mjf
zw`f)soe#@$FZb#bm$1nN@kB-6R>);tV&j$p@W-frzQ-ZyzE^S0pp-4foEZJ14C-89
zHnRqruApSWnMR?;>JGm9%OUKkpnTtm&_v>;Q(r(Tx<obDFqkt8o3@_~cW7KE<!ft$
zCuYK%fNkHaz!&*H<hyeMJ^3?VVUx8icw3PsYkZ}(ufzLm!Vu7&PN78KKF7@QCb^Fj
z8{e5x#=GxltD6ZU{^p1m1DfI8cF=%q3+GX%Vl(>_F$euBH7CU-?&Z^EeG7sI(_{i}
zlC;0F*@m6ZMlKep-H;fUZ_mWJS^cdvyMu~Zxc%Zd)L3y{hJ7llCa`iXeMd8oY(0wH
z=FR3~<o|_MtB`^5V$$k0Gy|~lE1{sTFn}U_CMfGD>G8x~;k!0>@z^EVc0*X$Bw~rG
z#p}I)wuq}*zU2H{qvE}JT}}Q{i@C7VY<@1_%h_<VcYCcV;qicjZ!V78<KqL$Zu~kd
zM=)||u?KUqY&VC8hlWn??`|A_q*k&u{z@?EWPAS0%B+sbP)1(JjbosN;|>*fjhp*M
zd<Y!Ci78TSJ}ld4e5hKqM23x#Sr$l>sD3m3{z+GfqTIW0<%)oR2pDo_`FgNLk{7z1
z0Wo6oZ4<1w@?`m8N-TAj6$4?pT(9gxW$+=zmaecK3x=mdd1+~C+}uDXt%m+?vTF>&
zk$3?hlHg>V$K?4KyxBS?{|~EuymPM4m>i&Dq=NZ0I-?C9b>*;pxiFxfCtbDK!n4LG
zV_H#~xg0c=jvB1V=Y{vYIvsf~J)Y>;|FTmZn%Pgu`|Z{DdqCJ)ZM7eMq#TwaTF>36
zqkePDB>(C%@Mi#$I`LPi;+hj|FzQoVJ}VrDy^{&#+p%&Io>I~0<{ihn$0;tv!!~s7
zkv5%35h!%>K=7xRQ4L>z=+4flF<D4gd$1{oUWq`QrertYQn>wz&XtLej=tR{r|P)i
ze-opiz_<cn&Z$=TT|(t>Et)9v_=Zy}3<vc4EJV}jDfWSk&+}i}hl{GgVKp-!rz{NL
zwV9^QzNmC0a2f5z#(47N34cadne%qxrG%K6DgegW*{%4qU-xUvKIDwTJWByt%7}e)
zM!%I$qPc8T`>XQx2A53L@!I;LG>6S)bF^R>FUf($)7O97<dnk}G~yk8x@X3ZUtWHu
zWoCX|1{MBUB0_1s<Sa=kL$*%jMxJDkQXbCewL%!LxtT5OCOFS8s#HTeXPasbmQ$L$
zx7(6f$qBL(=+crkem3mXW2#ili1y7|)?VJ9JgJw|Wg3oRxzsLM>wh7k#{MDHvSXw`
z%Y2UMc~edu_5QEMj|mftX^-QLYk(SaDql1I>5Ch(?qYafT>B3_+)EVnLXcXd)#C=;
zX0Kd7?@mXS@av;?v3`|$^Y$c(5b>=WC305f*SDinsqbOV=q9Nn(dMU+w}9(WV##)a
z0;JY=^5~~+1y2E3ZEcKzD$l3hKad;v!>Ak08I5ua0LNTH+T=A3LFji{>Na~)BDM=?
z%{(f0Jrz77<db^2em51h(9W6}fsrEQywyHEuG4@`xOn?pZpTY@@S=yfuXA=w+M&|M
zca-aWf%@%B#18=+0x9=p5rG!TglH8Pmr(#a-q)gh*PegMy4O}Y1cqV@#vYHJvfZH}
z|20Mslzp_AbI@5Z;J@d9nJ~GFHtx25*ae8B*&_k)*N#@pl$dYJHA=NCbvVR!YV1Gn
zs)bth#3T$pZXH0%1#!9@n(B$+ltnVnK0`W)BgBTZrq2Ai3xmA^+Cm(w&97yuu3oXr
zG1~NxH$nNW+|4$nX;0;I>}ghVYP9j`mQY94UQ1Hi$Qy8S#wMgQ6#59$``_tD^ba#c
z7nDCLzuHnbqH@N0#n#MN$HfC|0wV`VbhX6N_%YO}hQ@?Hn{;AoYE3`E*9G*^xMo-E
z#DZk*3r=$d)V75hmy$J8-v-gz(`k-aSw<x?#5-Fn`>uT%%y}vz`Zo0%@+%U&P>lI;
z<D*Sq4#xVTMZ%s}o<R|FFB|6mk0@e;+_CM49vAe7c4qlk<9O*$XI2v9)m;(EhJ^e6
zA$^TUQLL6^*sQFMRko-{c_alB)aG?=5K{u0N77Nm&5eS(K_$CUC&Mbv-d;aDsX(j^
zf@bM*>3iAygdV6J6`Z3?d78Edl#JZa{qm@ZK;($Ot7^H+Y8{!WE;*NA$*;R|0mtT<
z>3qF&*RR*EYiBGqQ2rZ|am*+P++5bgbTh-fC(Tu=@bBio70B2)<LT-7aw3{Yn)J~l
zeRW(f9y9;ybmnu852PS|ahA7nasE)zfCy93`HOZUbRx!!rb@!5CD(mGJ_%UAF}XND
zTeYY&9#dP_URWXeixbzOoI7?V$&fs<Kz@{cYk|nI;H8{Z1urJY{d9m0q#g%z(UVY%
zk~1<u#lkbO!@jN~F)tZxf5mv7kbDWQkOQA=9p7DAY3`<$AW_J`iGf?SzI9Qvj}^lB
z?9m6ELjhJPLqaR0gXpB=8*ZrXSN57gq4@k(R`Px5JL-ePhwY~RF_^uG4wRCj<nt{L
z*&F;Kd^HgSuR_WTP2Hs0H7ygJbdDEC48wJMS~P1QIFk*VPO**i%a<FMZN@&>U=SO&
zi#;*fXbx)DHqFDr36<j479Un<E^t|r8iL5F1-cMYv?fg03F&rrqd0Zr0sD}Ukid1(
z6f{~+lGUOL0wrXi^4>opAqj7>6n^Bn+_jC|-Q5j`wb{Q(1}(Y9&PM|#43NbTepi(y
zC3oo6T}J@sg!qD>!lk;>g%dXtE_XvmD7;%BSaXF&TF%*5F%cd{=HVOC7OAGbDI??V
zZh_#c+Q<~~=#R-(%iv3FU5Nz0c3bNS?=`GP-kTU0Y|yy1(o2-}3EHn|?76V{Fghil
zV`=*yJ5w{@>hTx1Ez(+9)ZVQ+e$5TfF+rt}n2K}ccN{UKq??{sArjl~E_k9+(t8GO
zsRsEn%}wOZ4_=Mf2D@Qz0*b5=&aCfH-%GM|z~dJeYNyiY2IHvqMHzCFRh2aqCVcN{
zz<2`btg5nYFF@QRFCeXhx3djI(LM+Md~hvuapOjrelP}O?{Dq#XS(oN3u<cWBH*fx
zSFt!xUKR(3HDQw}ARn)ipR23z_RForyi{@j*Aabm^@l^F@Sxp`MTxOK*BE;1V7wXo
zl#Y9H(N+O3RaHeb?$ljyZ@9uoeuFuOhbkvE9s<ZF758sKBmQ=VR9rdbv_O?|+hf2G
zY$l^Ix)kZDeTAUH3Qc_ErlVBbR=k=)s$)yflwY?A2`OoWT*vZD@^l6@I@rVv-g~9$
z_>@#$O>ziZop!<$k2A=%+qzcNT7}Ryxq(%WO)vHNc&%a(kMn!QxPq^i73Zz2hWN>D
z-R0ODTM>>iZfq2LOrAB5n}g9XZ8b0jrP@>!C>`=SI=(FLtJtOw68QJ99@{TZFDyLA
z!mrlX*GVgUlsy@lhS}cT&~-b3B?;bxm4?OVrB7=}NlEc+?!KF>J+r6{UnD1Aa$k5S
z1A#_;_aTFR={;Hz{ZorPlxgFo3=u?n+!Z4KSu2T(Hk9V8GY0C?g^3a2k80?Wv;}Fy
zGH~57rgI0LNbnRr7{JR#t^1!~UD^VAWkUYiQwY+rd5KX1jIGqNFg+x?>FCTpW{R(x
zlhq)USm_vBLw()<CRqc0OsaS?SXJM#QxMzgIvWe#S9@=JrD|&??jSlun?C{D=tQh;
z?=sleS_&WIlgW=R52uehtaq$-4yozzp<}zKD4?~C2@QW%U8M>R9Oafu)KVqQb?MGZ
z^Wj@EG9jmXA0`T=MU+c(pW!b@&<*=IeDzqd8KJSZvM{}EV7)E|QXuDHEKw|d4QApq
zv0ycGYB(d_IPn^qxmKD!;-<AeY<uqH(Ki7xE>^~^l2v8_LcyWQN6%!WO!I7HJi{+y
zEV2{!!oRtmQE#=aio^s32<J9q!povrKYfVVA16<v%n%%7=h^OaCRszXxGpf1E(V|O
ztvxrjV=%EMmzX1sh@WDXr+IK`=CFRv2}+6*i(|tkSSQAl@n!Jdr^z425e*sW%&*G&
z!(5a8;>8O)K%Tq-t%}Oa-;~2DuK1~gWZjx6l6JLpcLsia8F@#VFpL~0;>Twuiy>$2
zNuPlAhL^XxZUrU9l_-Yo{Y|br2-*7~m$@5Ejjx<AwFcxdup+l)H0jT-*M=Fh68I*U
z{wdmE1_=h=6UK9`WfBpgOC4cfSHw!x&R8_?JJJ*)TJIU`cT$)XZ<Py#rm!00Z`k3K
zwm%-RD0MBU?fZ-hfq5wDpD(s~6ymLu!knCxksqa32gi}LQX(ya^10BpaOJ-;_{_*C
zeu^0Y>DB`(=Qx(Gv5IAMkY$*S!YlXt#a&Z$M&MUaB_%Z(lllG?g`fH(K&+OJblct8
zsRPvfUc!O-ahcM-LdIb-pGVzNxEcpA@FkuRctt4Yv$|Wj?w5K3Dn9N357bC#<dq3E
zl@d2W{nWDYvKqC@7!GwWXc2JR`5pdb@|@NbRdT;p2-^R&2Z{vpeeGpgAt_=z?udYb
zd^mUj?7|h}w@8b=th4&^h%0<%r5gTPr$51o$WG(=k_DYlr3BN_s8&LJ`())@)4coL
zCJ<Nf_>WXnfQ0gv3W|#rZTJEnfly6?v}`S+J3jCqsc+xDwYSr7*e&+XK6?@6T<3k8
zB5PTA<<2gr$v4l#$R=xRk9wu6b7cy~PCdK0kj@DI#_z{ThvNMb=Cd#Wry0TGBpW9?
z`s{Qi%QL_ykXJs5iDw6cX#m=09+21k7$-_{71dgojNDYeoIc?HoC;|(b;+EZZ=*1E
z^JzS*b!UzOGDgNm6$@YFI0LDTEKKB$H;r1cz#E0QDh-0~V(q&Y8Pxj+ux6a#N`nm4
zh|m?E&0S@-bgo^U9|k1rGkeYK3n*laoF>GdG%_@&wV&Z-PgP5~=<hOBO5T)}7)m_a
z%=ndhJ;*@`bnFiWoz=lGpZQ+U6Wz+Xxa4yiKJ}DrSCm4dn=o-Dma6S?rj!^40Z8cS
zqNVsbPjhS^U+`<&gf>;cl8_V=i+VAGTog-V<#%sMrmZSc$%vP~_Fvude=^I}<-m<#
zWhhnMngYc2sun1<sZG%qB*>hgGVw*cqZdEnv>5McnGjLiE1!4MOh23mDRUgE)x{R{
z|NitR__eQM60PtAEOb*bpykVhOt08%bod!WQ}xISGkB*@n3B*~i?^H!UrfUyR*lqr
z!Wh>yfNMxtpWF)bicXWUj3|1Y2R*#wb(&qTHnFIp5}BVYwY;FVLh6s1Zsk9tPGcb7
zxp_$!EhE}F#P{>?&HvBQUgoQsd^5)Yo?_pF1%#x8gguaU3YscWWWNs$#+Y%ng~>`t
zJOLE!F7rRnx`d>_^hk!}+o8Lak+V^^g*WL&=k3Rvk`T)m4GXdcNY76^QNn&Vd}Rka
z$!WE3024gCT5RVrt7Wuzel(BvGwrM22Y{BHTJ#a>2T0u3pYH}Pz<YWNVS{Z)sSv)s
z7~X`G`0<sMm2A*Z-jXw-S5ZbL2o>^OWy}8vhycLY23fIbHSWghtTwD81guzWfK2VG
z9qRm%y<XRlPZi~oXbe~Ka}6y%DgvG6jflloH{|Ns>A_OGa8#LMFkp`CXBxhatGsM&
zDUM5$Ld=+db-w$cf=dDDM-Ob}26d7zH?@QAuXc$RZvRM3$)RQONSSMy<ox&SLARej
z`2%|zBpO8!H>HF=3>1sxVNuosc_#MCtJ-v!3Z9GqJyA1wuW3&Gh(+!+aXd_5VC32-
zv34-@BE3xdZpF;Wy1StP#0LR3bL3}RMa!NM=QnEaBY8@L{^^54eF}7H=SoyIv;N8-
zcQva(+PD98&>&qOV}lANcI-jsppsG@xO>IKPD#&duR!h?HCcFA>!)FJ#1Ig`8+L77
zhOx_;^HLfY{dM@*`uX$6c>JMSujJ*RBP+JS)(*?I-NoB3k$8Zpm)anVZRA8nMVpOB
z1tXsfr!ad+Ss+-;*$d-~cyFGI`GFDM@3Rf1B)-(N_?fS_7<i+aol;rZGj-tiEnY9y
z5)YC?R5(*y;cMe@H-1YithBi|Q4tkj%vSRWnw;B2zy^-qMnUIh9fLXF5^Hgr@Eb%Y
zaK#Ja)^Z61)<)&?8cq&+v8fXGImH!@Ruc3Tg8u5LJBYE#x1m!sx*NwD4>weBbDN}&
z^<`7C^{a$Ha~g$A)?-Y>x3&#S&VMotU-N{t&50uqT5?!{N74?kA%O((Zf4n9NolEc
zj-x7$Yarmr1(H`8W8A{v=1W~J=p7qhcLoEclgnewpkp9z>7%=ql$7KRH%}1wyWb$^
z{?x$00&bW97zlKcj};Y}a#JwJ<6DX!r#D!&xmDEX7?P9q;O``*{X?n-9YtZ`wRr+Y
z=4#5(XQ}_<dO`n=?OHE+3CM(b*_~elj$k?o>91zms>e}-nHD<1R@{XXyzpt)jt5Bv
znag4T`8r+v`H2C_(&2J*cGjBsFSzJ-CfP^AHc0WD!OhoLY8**y)7)^_fEnrAVVO!(
zVv%~rfZ{PfkpA^gcK8CzbfEJ&U+d__-P*{uuf^}yYfn(Axd%gxDO@mH=ig4D*8+8|
zx8htwi_U)rUGtQZh0^(=eFz}S=R^I^TGm^*)1>fo#Uv~YGqO&fK5BoX|G{%mAPEZU
zavg;Wc<%#&_}@ndZwO3Kqq$?>0>v{msR^7LFyhsI-fx%e`tWBfvBeJR3Np!fvl`VS
z*YMdr9~Y$3+P^dWZdqZiTqHu-mR2S$fp%)pk@YHP%#M5eb|L_2Gga+P48nY>uU`Pn
zKnM!83eyjWU6UZIY9%2Tk%G~hVLmUTq}^0y-^`W*+3f^18#XR5Gj6o%nY)3Xdr8?`
zn)akU_zP#=I0%>CK$S{w9O}{@YBPO3@u6jvln22Sm>|pc6GEONOIEcvyB`X@ddw~^
zE<_?vm?9HmXzQT-A|JeU4=9!&laJzb86504uy=Aq2R*fkTvGA=jI($G^NdeVCliy9
z;4n6iXCE3LCvHW4;ILamuU{#JDMudP;FqT^&>#FniHdibxx7x?s+@M0vKnhrqVg#D
z4mqV;Lj&O>F7{50J@=3nYX2598W3mO#c%cj7ld7FVq(%sK3&RD*?!HgCjWv@rhuWr
zLc0cE6x<P`Bv23Mw=$OVV8GV6V6qqxuMg1wex+FPINpSGK**1~>(jh@)50>AsP(5T
zQ<cbm*(vnbp9J{5VL&pc=lGk*>yyodg~*Jw8sT?8zq#nMip7Ab*!GaEv$i`X6f+Sb
z)QLVZ`LfGD;Jv-dNN<K-NL&nf^Y3J_yw}q<3Or2tBXUp+E*@TQ&uq9r_II=giW}xB
z($!ABJc(^_Z~lHd)56m9*_B$4bm>@cNrlI!yr>XF9H2G)i@i0owZvN|I#_N_tH|Ed
zpE6x9kU<b|*7b0dTbNHQ*wEX@WcpfL@MqUC($imCJ2-&{TFdl0EMFscB--@IBP%ph
zR|(e_92&gM7-P2Xp8Nq~ttFbw!Ig~x2gX3v1#1>!^1&v3CFSK&*0qZU6XQ*Wh+7Tt
zr5>cyy5_+zym6INHM&1Tg?_v+Vb9S$FaJuKjC>@4(E&RK`~1f%ijY^EE!<#28bxZz
z=^NkH+wIlW9tQfe&h)k-AWPaC01&B&|B_A8E8b83Guo}q|AhltP*1sR9f~~)6{q?W
zDs!)g9Q~@Z#l^go`C`Bu={#R{3#c|17hAJ#f?HzFWRwA!(equ8;SR~=&00wr(V(CI
z{D2@GVzsB|Ehc=D%&^P<{Ld22QD+#Ebm4o&tobl=?YX|5mH+hPSq>^4m98(=H9reS
zVM4GXtO4Z<&);{ifnZ;*M#b}1#v2V-o7CCa2Zo6Snwy)O-o{rtnl0U!nIW4AJjP1u
zZ~7TMmQ(~jsro=yXwlTDCQ7m>l8Bc;>R~110KxZ2TAk`Y(;UbkP+>?fwZZ51TYjXx
zR-8^Lt;J`HA-L&#7qqQZG%0gL5HnB=odL`%hnl4jIMUZ^%CULGp?UA<=wPiScy5fS
zJNAfgSd}}oaVJ&i)}AdlRJZcA(2VwGWv|+M73^ipJw8*A*DFS+R%oWbfkCPfFQp)C
zQuskhYO-ejckpb6mrm7O4)9_J-}X}g8|~D6`9sLNk~jCCQQ8=Do#ALEUOcKL`ubrt
z^jIh<4uxII&3p)uE-FGrYKaSlZyR9?8!g6-cAV#fm!p@LmwWXocfUO=CPWy%qA(_-
zH_UR39Ct*HfMkiW?KahbJ;SelJQhhBOYi>OR3`azM$weE5|nvUc0Uld9N-GbKW9?(
zJx#>LRr`C9v4&Cn^hL7RRBqet?517v`)5BNcOCHf;QEGny5j-weSFzTos1~rEPkn-
z7|j|a9C_m%7AJxg>1amERH%H8Lkq$T1i5))%zWEV+P2IYHdDCXt5~Xh>!PS`q>OW`
zxz?LFM@5D)vi*Foy1IHR1rZCBzYarrfuD)_+ve$4zk(0;pM(kXw0T(@pxinNzU<j?
o4bGO2HGcWu-*ei`fBS$Xf>}V9ef<3bct;DQt*#HLQ?rf!A9-E3SpWb4

diff --git a/application/single_app/static/images/favicon.ico b/application/single_app/static/images/favicon.ico
index d8f058f6866570b29f44c682b05a6a010bdedf60..3dc7742a5aa3422badbf8b10bf9d9a21db43f205 100644
GIT binary patch
delta 2147
zcmV-p2%Pu55xo&M000310{{>Z00000AON%h001@s000;m00000AOP9|008O%001B$
z00000AOQIT006`U005K01QU@-5r2D0L_t(|oZXT=YgADXhMzg--n+TG!4Q;X!S$m^
zAdLutz!rjqm5qfz#M0i<TCmTLu(JpRQrHGU*gy)Ae4t<=G1)!dnUQPuiur7XJTS$)
zbIuIsodY)l0Wu&=;yS|Q{F%$=X&U(?_kVJoX!Ss=LyDr9x4;WGHW3}`Sbslq1+gq%
zs<KW>Ta6}pyLj(TN8CT)v@OVyWBq9HCt}BrZ@b9zDDp|&mx43YKp8A<RHN~lWMw(P
z^_k#33*=(lc3~KV8Jt64pdOc__#=0F=t5VV?-{oLwy&=;(19RbgBI>zT{ysO6$xEn
z<icVQdjhiO!e)TaRaM=3(0{u>?7vxfomD64T`^tE>rook&uom<Q@>I^l}9mtq%>Xu
zPW05gyWeK-9q-IN4Hvf1>2$gys>h1$wyJQ)q8-#*5Tuv#w8kNI{+FyVvk_Fa6|>M5
z)pq4R9g(tb;P@A&`1Qw?=6thgE|OneI?H7rsn+V==WEx@`=9&<bq58P^BVm-9h24p
zFn^&*L_t(|ob8lNXjNAb$N&HHaX(_7#AMMbsklhBsI+urD@YZoC_zvJ5lUAIF03DD
zH(eA0U6dBGloH*!s<<m9kX5w{?V^%Jb)f`x5fMZL`;wRY-o59{$cyjEL!zkYN`Ej6
zch1~1=iW2_0p9b@!q>>>ixw;Z?Zl+xyMNDb1=my90x&(kH{Ld2Xs8Cj_vH0_%@Arf
zPk*sl@{dpbPcF+g+bsF5ll(H!<>`5wrrV#1FTU?wksJZA(+Iv1!|&C|5CSHV;UmDU
zvc?R!$Q!}x1{*L_mgTJP^J@hhrpR1qhQFygqM$>b4;u|z#8wy4!2Nb{y3B0>?0;!c
zrvZCbMf#L-)DknI+(~ejMpvrn9g-`dI-$S>pchDf85O@;#cnmc4At#ww1LPqF3rDf
z{$IasLNi=5q6bKGNfFM0vX9h9svIQnyH%V75JR)t51=8$rvUy6&2Uh_A1ruGj5Yxs
z1+k8Tt1zrsuMd+@XLEl_fUiX21b@MXfkKrv5J92+6188+{K?<O3JT{z{lujHFu^?_
zE>gLHz)g_-#+zDet~E9B-Pc<Owm#V9Vo{AJeaRfaQH}1$%Ibefj9-v(z7<)|()3<Y
z7US*vilXC&Itb9v;A4ec4Mp{{_hxV9<g#V*8AbO1n3^8h<wuwQxg4*G?|<{3yWAar
z)qZdLuDGPr%i@>$^`d4~G_C2hLcjM(IzL}tPin~mfPo}Wc8HVNFc<#qwrt0AY-|kM
zwq06M-irzN0L#*PdQf3z)r4CTamWhWt@lT?IAf?Mtk{iW<YBo`PIe9zm)dM87S)<%
z*(M=BEQ{ibb8a=6v?{aEurD@QyQm3MmO1lS6vf@A2YU_DH#iiZy8%1W?~ae|OnM_l
z-h;QwW1qVSbaOtG^pn;BACuGs5r4o*L_t(|ob6Rzh*eb-{?^%ht+Us;x2p~{>QsoC
z5h^7Vl?h1&LE=+kghHtl^iUB-Vh=$?1sPF65cCw$gG4V8g;`MKKo3PoFM{SnFM=ZK
z%sAuBJ@=dy`_7qr@7$b8rH3Bw2b;V1zH6_aZ~Yu#fB^;=pbM(jLg#CNyMIz0?msqs
zO-Qi>%Q~kzu7~PPeNNFLZ1vxB2;l)V8bb@b>B0xu>s8Kpl?$vg8Vz&c_kEC~eFiSa
z*5&pN_4*C0VoqdhUn-J$vYhco&Qjx)cQf+_uX5Tczp2rQjPHv6RV$gtPy=(3MTDL^
ztr(0B<dp*vidt>?KY}+iPk#iI3Dy)o{|1v-1z@_F;%y=tb}C;H?0^|fQWI+^;9v=C
zOmeI<#h0y1&6j+TpN%k1IaZTG4drXCi>*(g@RXDjE|YC!_AbgMA@H%*biNC~c-IR}
zpKsG2naJcf5xLC;{@AIEa^NT8y$^n~5ArhCQgbSgap0Zpd-eCQ%73I+IV2)$eUSa}
z-lgtAuX2t9KOJ>D<#&AW_p?fiL;8VzvE8lP4vF?_0IqANqsDi5m6KlOuv31|t9-|S
zcSHrVj{5spr5X2GmaX6{&3*7&yvkXx{_aj%RmOafSH1F|PWgaWneu^u@PQAr%J)e5
z^*Pyuvvdb%>9|vQJby3Tc>tGSHVuQb*cr106!V%`Y4xZ-X1nEDjjA?cMG=tfgX)c5
z)8|0cFr!}qTAq|R5i<<XAtt}4pz_E=iGKV0zO^6i|MB*1KA)O7=v6i)z-I}SrGZX*
zBroJvJVS)jM0C;2{sK@E(Uh5;0#GC_nQ7%^dvEQ0+6Iqelz)IBGwdy9nn!%#2}|r~
z0@`H>K5U_U(HG^|sgbR}e0}T9&+d^=x^>WKU`SO*`YJoEqHHrzMW0ps$V?4Ou(Vw}
zfuBT{tw0UKJ?)mwu@v_qgjJpXJASrdHrtL=3HRb^CSl6TZ^af~M5cFk%sF?(-vWvU
zAHpUd!sht6Vt<O_tmr7LA@+FUL)emL=_43I<1*8;YuJqXJ+W%_o}*A~wR@AKe3%?o
zV+i%!@~7h9Dy-N&>zus8g}f2#1XSJ$;L#qVz52>-c+|G#7on}Az>!-D!}-$a#4-bo
z8!3oZ+U)-|5Y~gNo@Lp}obsQ@k};fX4;nYm=t2hm1zc?!ISV@@8Tr)A=gho5&-3HV
zd`m9*8E*2hb8ez6OKD2;0+&3JPvw79?|WJO|ADSTcCM0(s&+ax((~J^cTwsG7+?TY
Z_!}p`4s?)md<*~p002ovPDHLkV1oEUB}o7P

delta 2140
zcmV-i2&4DC5xo&J000310{{>Z00000AONfZ001@s000;m00000AOPP20080v001B$
z00000AOQRW006;}Gbev@Nkl<Zc%0pmJ!@1^5Qd+bbMM{U-JpnJS#bR*4A_Ve5VjC3
ztkR_LhgjNMS_}662s;ZwNMS2TSiwTX4<fiLG1)!2Gh>mfY+^R8-~&_4nfII--Z}7J
zAV2|V8)u=d{@CTyL<&Tk$3kxHSphiUQdQNuD_i00AU3zTy;y(NKGoHIGv1K%yFU|@
z-RfxsJ&AZu&~=r)z=z4xPsI0wcpoC0N#wOf+}2=hO0AyWHnaJ*6m>l!?4A$<S4wd%
zhA>v)Ji!zgS)^x4;%0<j3!yK;_X7X=cxVp_u#q5rhYk_DAxv<8g=im`g|MOGcR;>`
zu%qyyX_|9a2UmZ_!$&tB7R^C^Qmt0&wwK31`faQo`IXC+GKupe=lM(Ez>dtj^zFjs
z{ZH5L>R(&v^?Lmo%`L+}cN$&u<P$&z8RRl=Gi9=<FHWx0%sQ#iu9$V3h}DGDfCllA
z6%Ls$=!2z{%S*>O?ITJ1_Q~2A{r)At0CfeI^VEa#Qvj3S0WW{1Nkl<Zc%1E&Pl(l3
z6vw~cbMO8A8RyC5Ed0YHF3d!uXk!YZB8D;qN)SP`GH6kzSeq8XK#M4trNrpYmEulB
zaOIzcwMb@>E|Ni8Oau}^y_q+^_kO>7&uKAl<RQ<Pq(zV)xE${Jch9|?bAjjlZ{aie
z4~<zdH~`kyX<vWZuz-IHKX9-EAOmtx?*IVf<1GMTz;EC-<7l}u|JoJV_aP5o`l8t5
zitO9I^J<_k^NTLe4?dw60Pw!bJ_2x96z{3<GZP(0#8nh{5%8Ow$e2(3DLUKfBIfG4
zo)05on}QQmU5MRyi)LF5^eD>-vA9=Va|0bb0zmr0?*)I{8PH|{cg|EtjC#Tmb80+H
zaGqitP3>or8(}tMzzkrQNbXLCZ=B&R6W)f|K@;mBaf{E(_q%_#A4=@TyQ20kDK`!A
zJg9Gz_J<kQ5xC$CrvaqcZQcRUQQ}nq*JC#xSMYNOexhPsz$QVwOvN1t8@AgMB+R=q
ze5$}c)ii%Yup=;-u>~R;Y*dqt8d)yCHeR4|5wz`+hYtxJ1#yGModoWK9F-ug-a_x%
z%*TiJkL~~Mh)-2BosDD*04FW^FB)e*W+}Zvro~=jyU6ojtGb#7;FH?4(AEJI3SKhk
zome$rg&@ZoueTku*Qj<Bz_r<}N5bUVD{EKZxP5=ZNO;|s{^V-?SNh%e_lD&`a{x4~
z2|LteQ<C0n-e5F@EMHu#?`5rQ3BXuZW^bz3`M3~&SZUe*vZ<*l95`@u=y(%=VLjI5
z?fkew=1t-QP58hm9|5?W9L@^ulvDSLivC_N)mQsPrD4g2K>)5Oid{->sH^Hb@BL;n
z>oqj8)NwA`<|5{5sq2zus;cUj$Avuu`QO<7>8JSA1jO>_uY4c!gzY*1Vg3T2y9jiB
zlr?CR-T@zz*8~xN!%0LzRCt{2l})HsRTRhn>+H4G*=yh1RUi48A!bJCqlBU|A*mop
z92G_=luAK^iZBuz1Q8WvL<K?6D58NxlZe7BC{k!pgfs~>2TcS;^!e21d-vS4SA%!o
zyVvVSDh(RkA8gKE`>eCq$6jk6V91amLwZnmTu#0o!qx775&mPt*F}jrm^UjmaU;x@
z4md>vGWz7fb%`-PfL3edGT-#zs5{v7IGc`%=>eE6l_>9X)Pn;CfQz$rsd+%NIbTdY
zsBXZ8M^Rj$D@oQ!DqTw1CL*J3dMuc{X=Y0$$z1@rJBkZ3)WQgQ#J)8H05maQOslQ~
z0AOe|7G4y8yt^|IkPED+x%vj@unfRtyTsc>v>=#%MeyD3bdK6sK@od0u%@W6$_-z3
z&bMFUs6RVloGL6QgE{hRowJ=!VPGoqnUHiNxxb6tCPewOGg)l~Fy8aR%IDd1Oj7BR
z^fy(#EkyY^m>!TQPe>}ABd_DAFH58JVEULu*&?ZbbT+<6OwY0DUR7PmQFloyJ(S@=
zHa#g(o@UdrVDb(}zF$l`63Y+#i%ntGCMW<j0Nelo(vUmY^az{o3nuTe>30%kGn<Z0
zJIeQoX&V4iN{b|w6-QprrYG3=?%88CJ<U;HWs|>x$!<2C;3z+Elzn3QJxY0fMz@eu
zZkAMkjtA4nt2&$la31cHa0Ca+ZUGs9!m~F42!K{6bXwio009IPJ7IPcTlpM_TJH2K
zKnshE!vti2_6qU#n)3dK3j6l=ohv`u_2cauxtf^T!=`Hs;Io2qcF++<@j~VGGekH>
zL}%UoZvdHyCfxlffVv39RHw>E0n`qR13t=ss1Fb@;*K5lRC_;1Ipc*NEI?bmz=s{=
z7rD--k1pBp%h$Kw{Oor9q*n*67Dmi$$v|b7-6*ZwJ^~<h=K(+ib1+v@=@R8hq_hYP
zEa+>uG?OI&DaN>Lw*L;DXt__fBXyPgxt5!-6qC0^Wb_I;VL%?VH*54#{{jL4j&Uu2
z$G8qa(ajWD@1`u!z(N28$GE;s<s%qD3m4y>J;Uxa=!thnzf1s}jqfdr{4fP9#|WC0
zS5HYP+iI`3O*^NrNUd)G$e?^DfJgg`_V1T_;gJKq^SK-Z0D;0>I8J4!!}A<8?qncZ
z?9=ZXAgl&?Go`e+qUtB|;xtZT9Mh>^&;M%RDx4rmaSPyFO-y|*BCD&aIwT^uR9YRE
zwk!xCoXI(BTiaujWl1$r{m~cs|Cej2_L)kqF<m>eHPZL&-}j2CA2MXf4F3QpzYcVu
Sxg3iC0000<MNUMnLSTYqWdO|p

diff --git a/application/single_app/templates/admin_settings.html b/application/single_app/templates/admin_settings.html
index 7ef20f2d..70edcc45 100644
--- a/application/single_app/templates/admin_settings.html
+++ b/application/single_app/templates/admin_settings.html
@@ -2463,8 +2463,14 @@ <h6 class="mb-3"><i class="bi bi-sliders me-2"></i>Default Retention Policies</h
                                 <select class="form-select" id="default_retention_conversation_personal" name="default_retention_conversation_personal">
                                     <option value="none" {% if settings.default_retention_conversation_personal == 'none' %}selected{% endif %}>No automatic deletion</option>
                                     <option value="1" {% if settings.default_retention_conversation_personal == '1' or settings.default_retention_conversation_personal == 1 %}selected{% endif %}>1 day</option>
+                                    <option value="2" {% if settings.default_retention_conversation_personal == '2' or settings.default_retention_conversation_personal == 2 %}selected{% endif %}>2 days</option>
+                                    <option value="3" {% if settings.default_retention_conversation_personal == '3' or settings.default_retention_conversation_personal == 3 %}selected{% endif %}>3 days</option>
+                                    <option value="4" {% if settings.default_retention_conversation_personal == '4' or settings.default_retention_conversation_personal == 4 %}selected{% endif %}>4 days</option>
                                     <option value="5" {% if settings.default_retention_conversation_personal == '5' or settings.default_retention_conversation_personal == 5 %}selected{% endif %}>5 days</option>
+                                    <option value="6" {% if settings.default_retention_conversation_personal == '6' or settings.default_retention_conversation_personal == 6 %}selected{% endif %}>6 days</option>
+                                    <option value="7" {% if settings.default_retention_conversation_personal == '7' or settings.default_retention_conversation_personal == 7 %}selected{% endif %}>7 days (1 week)</option>
                                     <option value="10" {% if settings.default_retention_conversation_personal == '10' or settings.default_retention_conversation_personal == 10 %}selected{% endif %}>10 days</option>
+                                    <option value="14" {% if settings.default_retention_conversation_personal == '14' or settings.default_retention_conversation_personal == 14 %}selected{% endif %}>14 days (2 weeks)</option>
                                     <option value="21" {% if settings.default_retention_conversation_personal == '21' or settings.default_retention_conversation_personal == 21 %}selected{% endif %}>21 days (3 weeks)</option>
                                     <option value="30" {% if settings.default_retention_conversation_personal == '30' or settings.default_retention_conversation_personal == 30 %}selected{% endif %}>30 days</option>
                                     <option value="60" {% if settings.default_retention_conversation_personal == '60' or settings.default_retention_conversation_personal == 60 %}selected{% endif %}>60 days</option>
@@ -2479,8 +2485,14 @@ <h6 class="mb-3"><i class="bi bi-sliders me-2"></i>Default Retention Policies</h
                                 <select class="form-select" id="default_retention_document_personal" name="default_retention_document_personal">
                                     <option value="none" {% if settings.default_retention_document_personal == 'none' %}selected{% endif %}>No automatic deletion</option>
                                     <option value="1" {% if settings.default_retention_document_personal == '1' or settings.default_retention_document_personal == 1 %}selected{% endif %}>1 day</option>
+                                    <option value="2" {% if settings.default_retention_document_personal == '2' or settings.default_retention_document_personal == 2 %}selected{% endif %}>2 days</option>
+                                    <option value="3" {% if settings.default_retention_document_personal == '3' or settings.default_retention_document_personal == 3 %}selected{% endif %}>3 days</option>
+                                    <option value="4" {% if settings.default_retention_document_personal == '4' or settings.default_retention_document_personal == 4 %}selected{% endif %}>4 days</option>
                                     <option value="5" {% if settings.default_retention_document_personal == '5' or settings.default_retention_document_personal == 5 %}selected{% endif %}>5 days</option>
+                                    <option value="6" {% if settings.default_retention_document_personal == '6' or settings.default_retention_document_personal == 6 %}selected{% endif %}>6 days</option>
+                                    <option value="7" {% if settings.default_retention_document_personal == '7' or settings.default_retention_document_personal == 7 %}selected{% endif %}>7 days (1 week)</option>
                                     <option value="10" {% if settings.default_retention_document_personal == '10' or settings.default_retention_document_personal == 10 %}selected{% endif %}>10 days</option>
+                                    <option value="14" {% if settings.default_retention_document_personal == '14' or settings.default_retention_document_personal == 14 %}selected{% endif %}>14 days (2 weeks)</option>
                                     <option value="21" {% if settings.default_retention_document_personal == '21' or settings.default_retention_document_personal == 21 %}selected{% endif %}>21 days (3 weeks)</option>
                                     <option value="30" {% if settings.default_retention_document_personal == '30' or settings.default_retention_document_personal == 30 %}selected{% endif %}>30 days</option>
                                     <option value="60" {% if settings.default_retention_document_personal == '60' or settings.default_retention_document_personal == 60 %}selected{% endif %}>60 days</option>
@@ -2502,8 +2514,14 @@ <h6 class="mb-3"><i class="bi bi-sliders me-2"></i>Default Retention Policies</h
                                 <select class="form-select" id="default_retention_conversation_group" name="default_retention_conversation_group">
                                     <option value="none" {% if settings.default_retention_conversation_group == 'none' %}selected{% endif %}>No automatic deletion</option>
                                     <option value="1" {% if settings.default_retention_conversation_group == '1' or settings.default_retention_conversation_group == 1 %}selected{% endif %}>1 day</option>
+                                    <option value="2" {% if settings.default_retention_conversation_group == '2' or settings.default_retention_conversation_group == 2 %}selected{% endif %}>2 days</option>
+                                    <option value="3" {% if settings.default_retention_conversation_group == '3' or settings.default_retention_conversation_group == 3 %}selected{% endif %}>3 days</option>
+                                    <option value="4" {% if settings.default_retention_conversation_group == '4' or settings.default_retention_conversation_group == 4 %}selected{% endif %}>4 days</option>
                                     <option value="5" {% if settings.default_retention_conversation_group == '5' or settings.default_retention_conversation_group == 5 %}selected{% endif %}>5 days</option>
+                                    <option value="6" {% if settings.default_retention_conversation_group == '6' or settings.default_retention_conversation_group == 6 %}selected{% endif %}>6 days</option>
+                                    <option value="7" {% if settings.default_retention_conversation_group == '7' or settings.default_retention_conversation_group == 7 %}selected{% endif %}>7 days (1 week)</option>
                                     <option value="10" {% if settings.default_retention_conversation_group == '10' or settings.default_retention_conversation_group == 10 %}selected{% endif %}>10 days</option>
+                                    <option value="14" {% if settings.default_retention_conversation_group == '14' or settings.default_retention_conversation_group == 14 %}selected{% endif %}>14 days (2 weeks)</option>
                                     <option value="21" {% if settings.default_retention_conversation_group == '21' or settings.default_retention_conversation_group == 21 %}selected{% endif %}>21 days (3 weeks)</option>
                                     <option value="30" {% if settings.default_retention_conversation_group == '30' or settings.default_retention_conversation_group == 30 %}selected{% endif %}>30 days</option>
                                     <option value="60" {% if settings.default_retention_conversation_group == '60' or settings.default_retention_conversation_group == 60 %}selected{% endif %}>60 days</option>
@@ -2518,8 +2536,14 @@ <h6 class="mb-3"><i class="bi bi-sliders me-2"></i>Default Retention Policies</h
                                 <select class="form-select" id="default_retention_document_group" name="default_retention_document_group">
                                     <option value="none" {% if settings.default_retention_document_group == 'none' %}selected{% endif %}>No automatic deletion</option>
                                     <option value="1" {% if settings.default_retention_document_group == '1' or settings.default_retention_document_group == 1 %}selected{% endif %}>1 day</option>
+                                    <option value="2" {% if settings.default_retention_document_group == '2' or settings.default_retention_document_group == 2 %}selected{% endif %}>2 days</option>
+                                    <option value="3" {% if settings.default_retention_document_group == '3' or settings.default_retention_document_group == 3 %}selected{% endif %}>3 days</option>
+                                    <option value="4" {% if settings.default_retention_document_group == '4' or settings.default_retention_document_group == 4 %}selected{% endif %}>4 days</option>
                                     <option value="5" {% if settings.default_retention_document_group == '5' or settings.default_retention_document_group == 5 %}selected{% endif %}>5 days</option>
+                                    <option value="6" {% if settings.default_retention_document_group == '6' or settings.default_retention_document_group == 6 %}selected{% endif %}>6 days</option>
+                                    <option value="7" {% if settings.default_retention_document_group == '7' or settings.default_retention_document_group == 7 %}selected{% endif %}>7 days (1 week)</option>
                                     <option value="10" {% if settings.default_retention_document_group == '10' or settings.default_retention_document_group == 10 %}selected{% endif %}>10 days</option>
+                                    <option value="14" {% if settings.default_retention_document_group == '14' or settings.default_retention_document_group == 14 %}selected{% endif %}>14 days (2 weeks)</option>
                                     <option value="21" {% if settings.default_retention_document_group == '21' or settings.default_retention_document_group == 21 %}selected{% endif %}>21 days (3 weeks)</option>
                                     <option value="30" {% if settings.default_retention_document_group == '30' or settings.default_retention_document_group == 30 %}selected{% endif %}>30 days</option>
                                     <option value="60" {% if settings.default_retention_document_group == '60' or settings.default_retention_document_group == 60 %}selected{% endif %}>60 days</option>
@@ -2541,8 +2565,14 @@ <h6 class="mb-3"><i class="bi bi-sliders me-2"></i>Default Retention Policies</h
                                 <select class="form-select" id="default_retention_conversation_public" name="default_retention_conversation_public">
                                     <option value="none" {% if settings.default_retention_conversation_public == 'none' %}selected{% endif %}>No automatic deletion</option>
                                     <option value="1" {% if settings.default_retention_conversation_public == '1' or settings.default_retention_conversation_public == 1 %}selected{% endif %}>1 day</option>
+                                    <option value="2" {% if settings.default_retention_conversation_public == '2' or settings.default_retention_conversation_public == 2 %}selected{% endif %}>2 days</option>
+                                    <option value="3" {% if settings.default_retention_conversation_public == '3' or settings.default_retention_conversation_public == 3 %}selected{% endif %}>3 days</option>
+                                    <option value="4" {% if settings.default_retention_conversation_public == '4' or settings.default_retention_conversation_public == 4 %}selected{% endif %}>4 days</option>
                                     <option value="5" {% if settings.default_retention_conversation_public == '5' or settings.default_retention_conversation_public == 5 %}selected{% endif %}>5 days</option>
+                                    <option value="6" {% if settings.default_retention_conversation_public == '6' or settings.default_retention_conversation_public == 6 %}selected{% endif %}>6 days</option>
+                                    <option value="7" {% if settings.default_retention_conversation_public == '7' or settings.default_retention_conversation_public == 7 %}selected{% endif %}>7 days (1 week)</option>
                                     <option value="10" {% if settings.default_retention_conversation_public == '10' or settings.default_retention_conversation_public == 10 %}selected{% endif %}>10 days</option>
+                                    <option value="14" {% if settings.default_retention_conversation_public == '14' or settings.default_retention_conversation_public == 14 %}selected{% endif %}>14 days (2 weeks)</option>
                                     <option value="21" {% if settings.default_retention_conversation_public == '21' or settings.default_retention_conversation_public == 21 %}selected{% endif %}>21 days (3 weeks)</option>
                                     <option value="30" {% if settings.default_retention_conversation_public == '30' or settings.default_retention_conversation_public == 30 %}selected{% endif %}>30 days</option>
                                     <option value="60" {% if settings.default_retention_conversation_public == '60' or settings.default_retention_conversation_public == 60 %}selected{% endif %}>60 days</option>
@@ -2557,8 +2587,14 @@ <h6 class="mb-3"><i class="bi bi-sliders me-2"></i>Default Retention Policies</h
                                 <select class="form-select" id="default_retention_document_public" name="default_retention_document_public">
                                     <option value="none" {% if settings.default_retention_document_public == 'none' %}selected{% endif %}>No automatic deletion</option>
                                     <option value="1" {% if settings.default_retention_document_public == '1' or settings.default_retention_document_public == 1 %}selected{% endif %}>1 day</option>
+                                    <option value="2" {% if settings.default_retention_document_public == '2' or settings.default_retention_document_public == 2 %}selected{% endif %}>2 days</option>
+                                    <option value="3" {% if settings.default_retention_document_public == '3' or settings.default_retention_document_public == 3 %}selected{% endif %}>3 days</option>
+                                    <option value="4" {% if settings.default_retention_document_public == '4' or settings.default_retention_document_public == 4 %}selected{% endif %}>4 days</option>
                                     <option value="5" {% if settings.default_retention_document_public == '5' or settings.default_retention_document_public == 5 %}selected{% endif %}>5 days</option>
+                                    <option value="6" {% if settings.default_retention_document_public == '6' or settings.default_retention_document_public == 6 %}selected{% endif %}>6 days</option>
+                                    <option value="7" {% if settings.default_retention_document_public == '7' or settings.default_retention_document_public == 7 %}selected{% endif %}>7 days (1 week)</option>
                                     <option value="10" {% if settings.default_retention_document_public == '10' or settings.default_retention_document_public == 10 %}selected{% endif %}>10 days</option>
+                                    <option value="14" {% if settings.default_retention_document_public == '14' or settings.default_retention_document_public == 14 %}selected{% endif %}>14 days (2 weeks)</option>
                                     <option value="21" {% if settings.default_retention_document_public == '21' or settings.default_retention_document_public == 21 %}selected{% endif %}>21 days (3 weeks)</option>
                                     <option value="30" {% if settings.default_retention_document_public == '30' or settings.default_retention_document_public == 30 %}selected{% endif %}>30 days</option>
                                     <option value="60" {% if settings.default_retention_document_public == '60' or settings.default_retention_document_public == 60 %}selected{% endif %}>60 days</option>
diff --git a/application/single_app/templates/control_center.html b/application/single_app/templates/control_center.html
index 853b4631..7a86d961 100644
--- a/application/single_app/templates/control_center.html
+++ b/application/single_app/templates/control_center.html
@@ -1670,8 +1670,14 @@ <h6 class="fw-bold"><i class="bi bi-hourglass-split me-2"></i>Retention Policy</
                                                 <option value="default">Using organization default</option>
                                                 <option value="none">No automatic deletion</option>
                                                 <option value="1">1 day</option>
+                                                <option value="2">2 days</option>
+                                                <option value="3">3 days</option>
+                                                <option value="4">4 days</option>
                                                 <option value="5">5 days</option>
+                                                <option value="6">6 days</option>
+                                                <option value="7">7 days (1 week)</option>
                                                 <option value="10">10 days</option>
+                                                <option value="14">14 days (2 weeks)</option>
                                                 <option value="21">21 days (3 weeks)</option>
                                                 <option value="30">30 days</option>
                                                 <option value="60">60 days</option>
@@ -1687,8 +1693,14 @@ <h6 class="fw-bold"><i class="bi bi-hourglass-split me-2"></i>Retention Policy</
                                                 <option value="default">Using organization default</option>
                                                 <option value="none">No automatic deletion</option>
                                                 <option value="1">1 day</option>
+                                                <option value="2">2 days</option>
+                                                <option value="3">3 days</option>
+                                                <option value="4">4 days</option>
                                                 <option value="5">5 days</option>
+                                                <option value="6">6 days</option>
+                                                <option value="7">7 days (1 week)</option>
                                                 <option value="10">10 days</option>
+                                                <option value="14">14 days (2 weeks)</option>
                                                 <option value="21">21 days (3 weeks)</option>
                                                 <option value="30">30 days</option>
                                                 <option value="60">60 days</option>
@@ -2287,8 +2299,14 @@ <h6 class="fw-bold"><i class="bi bi-hourglass-split me-2"></i>Retention Policy</
                                                 <option value="default">Using organization default</option>
                                                 <option value="none">No automatic deletion</option>
                                                 <option value="1">1 day</option>
+                                                <option value="2">2 days</option>
+                                                <option value="3">3 days</option>
+                                                <option value="4">4 days</option>
                                                 <option value="5">5 days</option>
+                                                <option value="6">6 days</option>
+                                                <option value="7">7 days (1 week)</option>
                                                 <option value="10">10 days</option>
+                                                <option value="14">14 days (2 weeks)</option>
                                                 <option value="21">21 days (3 weeks)</option>
                                                 <option value="30">30 days</option>
                                                 <option value="60">60 days</option>
@@ -2304,8 +2322,14 @@ <h6 class="fw-bold"><i class="bi bi-hourglass-split me-2"></i>Retention Policy</
                                                 <option value="default">Using organization default</option>
                                                 <option value="none">No automatic deletion</option>
                                                 <option value="1">1 day</option>
+                                                <option value="2">2 days</option>
+                                                <option value="3">3 days</option>
+                                                <option value="4">4 days</option>
                                                 <option value="5">5 days</option>
+                                                <option value="6">6 days</option>
+                                                <option value="7">7 days (1 week)</option>
                                                 <option value="10">10 days</option>
+                                                <option value="14">14 days (2 weeks)</option>
                                                 <option value="21">21 days (3 weeks)</option>
                                                 <option value="30">30 days</option>
                                                 <option value="60">60 days</option>
diff --git a/application/single_app/templates/profile.html b/application/single_app/templates/profile.html
index e5a62887..2ab543f7 100644
--- a/application/single_app/templates/profile.html
+++ b/application/single_app/templates/profile.html
@@ -319,8 +319,14 @@ <h5 class="mb-3"><i class="bi bi-hourglass-split me-2"></i>Retention Policy Sett
                         <option value="default">Using organization default</option>
                         <option value="none">No automatic deletion</option>
                         <option value="1">1 day</option>
+                        <option value="2">2 days</option>
+                        <option value="3">3 days</option>
+                        <option value="4">4 days</option>
                         <option value="5">5 days</option>
+                        <option value="6">6 days</option>
+                        <option value="7">7 days (1 week)</option>
                         <option value="10">10 days</option>
+                        <option value="14">14 days (2 weeks)</option>
                         <option value="21">21 days (3 weeks)</option>
                         <option value="30">30 days</option>
                         <option value="60">60 days</option>
@@ -338,8 +344,14 @@ <h5 class="mb-3"><i class="bi bi-hourglass-split me-2"></i>Retention Policy Sett
                         <option value="default">Using organization default</option>
                         <option value="none">No automatic deletion</option>
                         <option value="1">1 day</option>
+                        <option value="2">2 days</option>
+                        <option value="3">3 days</option>
+                        <option value="4">4 days</option>
                         <option value="5">5 days</option>
+                        <option value="6">6 days</option>
+                        <option value="7">7 days (1 week)</option>
                         <option value="10">10 days</option>
+                        <option value="14">14 days (2 weeks)</option>
                         <option value="21">21 days (3 weeks)</option>
                         <option value="30">30 days</option>
                         <option value="60">60 days</option>
diff --git a/docs/explanation/fixes/v0.237.003/CUSTOM_LOGO_NOT_DISPLAYING_FIX.md b/docs/explanation/fixes/v0.237.003/CUSTOM_LOGO_NOT_DISPLAYING_FIX.md
new file mode 100644
index 00000000..166dc7c9
--- /dev/null
+++ b/docs/explanation/fixes/v0.237.003/CUSTOM_LOGO_NOT_DISPLAYING_FIX.md
@@ -0,0 +1,102 @@
+# Custom Logo Not Displaying Across App Fix
+
+## Issue Description
+When an admin uploaded a custom logo via Admin Settings, the logo would display correctly on the admin settings page but **not appear elsewhere in the application** (e.g., chat page, sidebar navigation).
+
+### Symptoms
+- Logo visible in Admin Settings preview
+- Logo not appearing in sidebar navigation
+- Logo not appearing on chat/chats pages
+- Logo not appearing on index/landing page
+
+## Root Cause Analysis
+The issue was in the `sanitize_settings_for_user()` function in [functions_settings.py](../../application/single_app/functions_settings.py).
+
+This function is designed to strip sensitive data before sending settings to the frontend. It filters out any keys containing terms like:
+- `key`
+- `secret`
+- `password`
+- `connection`
+- **`base64`**
+- `storage_account_url`
+
+The logo settings are stored with keys:
+- `custom_logo_base64`
+- `custom_logo_dark_base64`
+- `custom_favicon_base64`
+
+Because these keys contain `base64`, they were being **completely removed** from the sanitized settings.
+
+### Template Logic Impact
+Templates check for custom logos using conditions like:
+```jinja2
+{% if app_settings.custom_logo_base64 %}
+    <img src="{{ url_for('static', filename='images/custom_logo.png') }}" />
+{% else %}
+    <img src="{{ url_for('static', filename='images/logo-lightmode.png') }}" />
+{% endif %}
+```
+
+When `custom_logo_base64` was stripped entirely, this condition always evaluated to `False`, causing the default logo to display instead of the custom uploaded logo.
+
+## Solution
+Modified `sanitize_settings_for_user()` to add boolean flags for logo/favicon existence **after** the main sanitization loop. This allows templates to check if logos exist without exposing the actual base64 data.
+
+### Code Change
+```python
+def sanitize_settings_for_user(full_settings: dict) -> dict:
+    # ... existing sanitization logic ...
+
+    # Add boolean flags for logo/favicon existence so templates can check without exposing base64 data
+    # These fields are stripped by the base64 filter above, but templates need to know if logos exist
+    if 'custom_logo_base64' in full_settings:
+        sanitized['custom_logo_base64'] = bool(full_settings.get('custom_logo_base64'))
+    if 'custom_logo_dark_base64' in full_settings:
+        sanitized['custom_logo_dark_base64'] = bool(full_settings.get('custom_logo_dark_base64'))
+    if 'custom_favicon_base64' in full_settings:
+        sanitized['custom_favicon_base64'] = bool(full_settings.get('custom_favicon_base64'))
+
+    return sanitized
+```
+
+### How It Works
+1. The sensitive base64 data is still stripped during the main loop
+2. After sanitization, boolean flags are added:
+   - `True` if the logo exists (base64 string is non-empty)
+   - `False` if no logo is set (base64 string is empty)
+3. Templates can still use `{% if app_settings.custom_logo_base64 %}` and it will correctly evaluate to `True` or `False`
+4. The actual base64 data is never exposed to the frontend
+
+## Files Modified
+- [functions_settings.py](../../application/single_app/functions_settings.py) - Modified `sanitize_settings_for_user()` function
+
+## Version
+**Fixed in version:** 0.237.002
+
+## Testing
+A functional test was created: [test_custom_logo_sanitization_fix.py](../../functional_tests/test_custom_logo_sanitization_fix.py)
+
+### Test Cases
+1. **Logo flags preserved as True** - When logos exist, boolean flags are `True`
+2. **Logo flags preserved as False** - When logos are empty, boolean flags are `False`
+3. **No spurious flags added** - If logo keys don't exist in settings, they're not added
+4. **Template compatibility** - Boolean flags work correctly in Jinja2-style conditionals
+
+### Running the Test
+```bash
+cd functional_tests
+python test_custom_logo_sanitization_fix.py
+```
+
+## Impact
+This fix affects all pages that display the application logo:
+- Landing/Index page
+- Chat page
+- Sidebar navigation (when left nav is enabled)
+- Any other page using `base.html` that references logo settings
+
+## Security Considerations
+- ✅ Actual base64 data is still never exposed to the frontend
+- ✅ Only boolean True/False values are sent
+- ✅ No sensitive data leakage
+- ✅ Maintains the security intent of the original sanitization function
diff --git a/docs/explanation/release_notes.md b/docs/explanation/release_notes.md
index df88ebcd..3b3de6e6 100644
--- a/docs/explanation/release_notes.md
+++ b/docs/explanation/release_notes.md
@@ -1,6 +1,28 @@
 <!-- BEGIN release_notes.md BLOCK -->
 # Feature Release
 
+### **(v0.237.003)**
+
+#### New Features
+
+*   **Extended Retention Policy Timeline Options**
+    *   Added additional granular retention period options for conversations and documents across all workspace types.
+    *   **New Options**: 2 days, 3 days, 4 days, 6 days, 7 days (1 week), and 14 days (2 weeks).
+    *   **Full Option Set**: 1, 2, 3, 4, 5, 6, 7 (1 week), 10, 14 (2 weeks), 21 (3 weeks), 30, 60, 90 (3 months), 180 (6 months), 365 (1 year), 730 (2 years) days.
+    *   **Scope**: Available in Admin Settings (organization defaults), Profile page (personal settings), and Control Center (group/public workspace management).
+    *   **Files Modified**: `admin_settings.html`, `profile.html`, `control_center.html`.
+    *   (Ref: retention policy configuration, workspace retention settings, granular time periods)
+
+#### Bug Fixes
+
+*   **Custom Logo Not Displaying Across App Fix**
+    *   Fixed issue where custom logos uploaded via Admin Settings would only display on the admin page but not on other pages (chat, sidebar, landing page).
+    *   **Root Cause**: The `sanitize_settings_for_user()` function was stripping `custom_logo_base64`, `custom_logo_dark_base64`, and `custom_favicon_base64` keys entirely because they contained "base64" (a sensitive term filter), preventing templates from detecting logo existence.
+    *   **Solution**: Modified sanitization to add boolean flags for logo/favicon existence after filtering, allowing templates to check if logos exist without exposing actual base64 data.
+    *   **Security**: Actual base64 data remains hidden from frontend; only True/False boolean values are exposed.
+    *   **Files Modified**: `functions_settings.py` (`sanitize_settings_for_user()` function).
+    *   (Ref: logo display, settings sanitization, template conditionals)
+
 ### **(v0.237.001)**
 
 #### New Features
diff --git a/functional_tests/test_custom_logo_sanitization_fix.py b/functional_tests/test_custom_logo_sanitization_fix.py
new file mode 100644
index 00000000..419a7a1f
--- /dev/null
+++ b/functional_tests/test_custom_logo_sanitization_fix.py
@@ -0,0 +1,172 @@
+#!/usr/bin/env python3
+"""
+Functional test for custom logo sanitization fix.
+Version: 0.237.002
+Implemented in: 0.237.002
+
+This test ensures that custom logo boolean flags are preserved in sanitized settings
+so templates can detect if custom logos exist without exposing the actual base64 data.
+
+Issue: When a logo was uploaded via admin settings, it was visible on the admin page
+but not on other pages (like the chat page) because the `sanitize_settings_for_user`
+function was stripping `custom_logo_base64`, `custom_logo_dark_base64`, and 
+`custom_favicon_base64` keys entirely, which templates use to conditionally display logos.
+
+Fix: Modified `sanitize_settings_for_user` to add boolean flags for logo/favicon
+existence after sanitization, allowing templates to check `app_settings.custom_logo_base64`
+(which will be True/False) without exposing the actual base64 data.
+"""
+
+import sys
+import os
+
+# Add the application directory to the path
+sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)), '..', 'application', 'single_app'))
+
+
+def test_sanitize_settings_preserves_logo_flags():
+    """
+    Test that sanitize_settings_for_user preserves boolean flags for logo existence.
+    """
+    print("🔍 Testing sanitize_settings_for_user preserves logo flags...")
+    
+    try:
+        from functions_settings import sanitize_settings_for_user
+        
+        # Test case 1: Settings with custom logos present
+        settings_with_logos = {
+            'app_title': 'Test App',
+            'show_logo': True,
+            'custom_logo_base64': 'iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAADUlEQVR42mNk+M9QDwADhgGAWjR9awAAAABJRU5ErkJggg==',
+            'custom_logo_dark_base64': 'iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAADUlEQVR42mNk+M9QDwADhgGAWjR9awAAAABJRU5ErkJggg==',
+            'custom_favicon_base64': 'AAABAAEAEBAAAAEAIABoBAAAFgAAACgAAAAQAAAAIAAAAAEAIAAAAAAAAAQAAA==',
+            'logo_version': 5,
+            'some_api_key': 'secret-key-123',
+            'azure_openai_key': 'another-secret-key',
+        }
+        
+        sanitized = sanitize_settings_for_user(settings_with_logos)
+        
+        # Verify non-sensitive fields are preserved
+        assert sanitized.get('app_title') == 'Test App', "app_title should be preserved"
+        assert sanitized.get('show_logo') == True, "show_logo should be preserved"
+        assert sanitized.get('logo_version') == 5, "logo_version should be preserved"
+        
+        # Verify sensitive keys are removed (api keys, secrets)
+        assert 'some_api_key' not in sanitized, "API keys should be removed"
+        assert 'azure_openai_key' not in sanitized, "Azure OpenAI key should be removed"
+        
+        # Verify logo flags are boolean True (not the actual base64 data)
+        assert sanitized.get('custom_logo_base64') == True, "custom_logo_base64 should be True (boolean flag)"
+        assert sanitized.get('custom_logo_dark_base64') == True, "custom_logo_dark_base64 should be True (boolean flag)"
+        assert sanitized.get('custom_favicon_base64') == True, "custom_favicon_base64 should be True (boolean flag)"
+        
+        # Verify the actual base64 data is NOT exposed
+        assert isinstance(sanitized.get('custom_logo_base64'), bool), "custom_logo_base64 should be a boolean, not a string"
+        
+        print("✅ Test 1 passed: Logo flags are preserved as boolean True when logos exist")
+        
+        # Test case 2: Settings without custom logos
+        settings_without_logos = {
+            'app_title': 'Test App',
+            'show_logo': True,
+            'custom_logo_base64': '',
+            'custom_logo_dark_base64': '',
+            'custom_favicon_base64': '',
+        }
+        
+        sanitized2 = sanitize_settings_for_user(settings_without_logos)
+        
+        # Verify logo flags are boolean False when logos are empty
+        assert sanitized2.get('custom_logo_base64') == False, "custom_logo_base64 should be False when empty"
+        assert sanitized2.get('custom_logo_dark_base64') == False, "custom_logo_dark_base64 should be False when empty"
+        assert sanitized2.get('custom_favicon_base64') == False, "custom_favicon_base64 should be False when empty"
+        
+        print("✅ Test 2 passed: Logo flags are False when logos are empty/not set")
+        
+        # Test case 3: Settings without logo keys at all
+        settings_no_logo_keys = {
+            'app_title': 'Test App',
+            'show_logo': False,
+        }
+        
+        sanitized3 = sanitize_settings_for_user(settings_no_logo_keys)
+        
+        # Verify logo keys are not added if they didn't exist
+        assert 'custom_logo_base64' not in sanitized3, "custom_logo_base64 should not be added if not in original settings"
+        
+        print("✅ Test 3 passed: Logo flags are not added if keys not in original settings")
+        
+        print("\n✅ All tests passed!")
+        return True
+        
+    except AssertionError as e:
+        print(f"❌ Assertion failed: {e}")
+        import traceback
+        traceback.print_exc()
+        return False
+    except Exception as e:
+        print(f"❌ Test failed with exception: {e}")
+        import traceback
+        traceback.print_exc()
+        return False
+
+
+def test_template_compatibility():
+    """
+    Test that the boolean flags work correctly in Jinja2-style conditionals.
+    """
+    print("\n🔍 Testing template compatibility with boolean flags...")
+    
+    try:
+        from functions_settings import sanitize_settings_for_user
+        
+        settings = {
+            'custom_logo_base64': 'some-base64-data',
+            'custom_logo_dark_base64': '',
+        }
+        
+        sanitized = sanitize_settings_for_user(settings)
+        
+        # Simulate Jinja2 conditional: {% if app_settings.custom_logo_base64 %}
+        if sanitized.get('custom_logo_base64'):
+            light_logo_condition = "show custom light logo"
+        else:
+            light_logo_condition = "show default light logo"
+        
+        assert light_logo_condition == "show custom light logo", "Light logo should use custom"
+        
+        # Simulate Jinja2 conditional: {% if app_settings.custom_logo_dark_base64 %}
+        if sanitized.get('custom_logo_dark_base64'):
+            dark_logo_condition = "show custom dark logo"
+        else:
+            dark_logo_condition = "show default dark logo"
+        
+        assert dark_logo_condition == "show default dark logo", "Dark logo should use default (empty base64)"
+        
+        print("✅ Template compatibility test passed!")
+        return True
+        
+    except Exception as e:
+        print(f"❌ Template compatibility test failed: {e}")
+        import traceback
+        traceback.print_exc()
+        return False
+
+
+if __name__ == "__main__":
+    results = []
+    
+    print("=" * 60)
+    print("Custom Logo Sanitization Fix - Functional Tests")
+    print("=" * 60)
+    
+    results.append(test_sanitize_settings_preserves_logo_flags())
+    results.append(test_template_compatibility())
+    
+    print("\n" + "=" * 60)
+    success = all(results)
+    print(f"📊 Results: {sum(results)}/{len(results)} tests passed")
+    print("=" * 60)
+    
+    sys.exit(0 if success else 1)

From 823e6fa8045939146b9bed0fed14b2eb2415a900 Mon Sep 17 00:00:00 2001
From: Paul Lizer <paullizer@microsoft.com>
Date: Mon, 26 Jan 2026 16:31:34 -0500
Subject: [PATCH 11/11] Rentention policy (#657)

* Critical Retention Policy Deletion Fix

* Create RETENTION_POLICY_NULL_LAST_ACTIVITY_FIX.md
---
 application/single_app/config.py              |   2 +-
 .../single_app/functions_control_center.py    | 138 ++++++++++++++++++
 .../single_app/functions_retention_policy.py  |  32 ++--
 .../single_app/static/js/control-center.js    |  26 ++++
 .../single_app/templates/control_center.html  |   8 +-
 ...RETENTION_POLICY_NULL_LAST_ACTIVITY_FIX.md | 133 +++++++++++++++++
 docs/explanation/release_notes.md             |  17 +++
 7 files changed, 335 insertions(+), 21 deletions(-)
 create mode 100644 application/single_app/functions_control_center.py
 create mode 100644 docs/explanation/fixes/v0.237.004/RETENTION_POLICY_NULL_LAST_ACTIVITY_FIX.md

diff --git a/application/single_app/config.py b/application/single_app/config.py
index 9a5c892f..9aa4c4b8 100644
--- a/application/single_app/config.py
+++ b/application/single_app/config.py
@@ -88,7 +88,7 @@
 EXECUTOR_TYPE = 'thread'
 EXECUTOR_MAX_WORKERS = 30
 SESSION_TYPE = 'filesystem'
-VERSION = "0.237.003"
+VERSION = "0.237.004"
 
 
 SECRET_KEY = os.getenv('SECRET_KEY', 'dev-secret-key-change-in-production')
diff --git a/application/single_app/functions_control_center.py b/application/single_app/functions_control_center.py
new file mode 100644
index 00000000..9337f408
--- /dev/null
+++ b/application/single_app/functions_control_center.py
@@ -0,0 +1,138 @@
+# functions_control_center.py
+"""
+Functions for Control Center operations including scheduled auto-refresh.
+Version: 0.237.004
+"""
+
+from datetime import datetime, timezone, timedelta
+from config import debug_print, cosmos_user_settings_container, cosmos_groups_container
+from functions_settings import get_settings, update_settings
+from functions_appinsights import log_event
+
+
+def execute_control_center_refresh(manual_execution=False):
+    """
+    Execute Control Center data refresh operation.
+    Refreshes user and group metrics data.
+    
+    Args:
+        manual_execution: True if triggered manually, False if scheduled
+        
+    Returns:
+        dict: Results containing success status and refresh counts
+    """
+    results = {
+        'success': True,
+        'refreshed_users': 0,
+        'failed_users': 0,
+        'refreshed_groups': 0,
+        'failed_groups': 0,
+        'error': None,
+        'manual_execution': manual_execution
+    }
+    
+    try:
+        debug_print(f"🔄 [AUTO-REFRESH] Starting Control Center {'manual' if manual_execution else 'scheduled'} refresh...")
+        
+        # Import enhance functions from route module
+        from route_backend_control_center import enhance_user_with_activity, enhance_group_with_activity
+        
+        # Get all users to refresh their metrics
+        debug_print("🔄 [AUTO-REFRESH] Querying all users...")
+        users_query = "SELECT c.id, c.email, c.display_name, c.lastUpdated, c.settings FROM c"
+        all_users = list(cosmos_user_settings_container.query_items(
+            query=users_query,
+            enable_cross_partition_query=True
+        ))
+        debug_print(f"🔄 [AUTO-REFRESH] Found {len(all_users)} users to process")
+        
+        # Refresh metrics for each user
+        for user in all_users:
+            try:
+                user_id = user.get('id')
+                debug_print(f"🔄 [AUTO-REFRESH] Processing user {user_id}")
+                
+                # Force refresh of metrics for this user
+                enhanced_user = enhance_user_with_activity(user, force_refresh=True)
+                results['refreshed_users'] += 1
+                
+            except Exception as user_error:
+                results['failed_users'] += 1
+                debug_print(f"❌ [AUTO-REFRESH] Failed to refresh user {user.get('id')}: {user_error}")
+        
+        debug_print(f"🔄 [AUTO-REFRESH] User refresh completed. Refreshed: {results['refreshed_users']}, Failed: {results['failed_users']}")
+        
+        # Refresh metrics for all groups
+        debug_print("🔄 [AUTO-REFRESH] Starting group refresh...")
+        
+        try:
+            groups_query = "SELECT * FROM c"
+            all_groups = list(cosmos_groups_container.query_items(
+                query=groups_query,
+                enable_cross_partition_query=True
+            ))
+            debug_print(f"🔄 [AUTO-REFRESH] Found {len(all_groups)} groups to process")
+            
+            # Refresh metrics for each group
+            for group in all_groups:
+                try:
+                    group_id = group.get('id')
+                    debug_print(f"🔄 [AUTO-REFRESH] Processing group {group_id}")
+                    
+                    # Force refresh of metrics for this group
+                    enhanced_group = enhance_group_with_activity(group, force_refresh=True)
+                    results['refreshed_groups'] += 1
+                    
+                except Exception as group_error:
+                    results['failed_groups'] += 1
+                    debug_print(f"❌ [AUTO-REFRESH] Failed to refresh group {group.get('id')}: {group_error}")
+                    
+        except Exception as groups_error:
+            debug_print(f"❌ [AUTO-REFRESH] Error querying groups: {groups_error}")
+        
+        debug_print(f"🔄 [AUTO-REFRESH] Group refresh completed. Refreshed: {results['refreshed_groups']}, Failed: {results['failed_groups']}")
+        
+        # Update admin settings with refresh timestamp and calculate next run time
+        try:
+            settings = get_settings()
+            if settings:
+                current_time = datetime.now(timezone.utc)
+                settings['control_center_last_refresh'] = current_time.isoformat()
+                
+                # Calculate next scheduled auto-refresh time if enabled
+                if settings.get('control_center_auto_refresh_enabled', False):
+                    execution_hour = settings.get('control_center_auto_refresh_hour', 2)
+                    next_run = current_time.replace(hour=execution_hour, minute=0, second=0, microsecond=0)
+                    if next_run <= current_time:
+                        next_run += timedelta(days=1)
+                    settings['control_center_auto_refresh_next_run'] = next_run.isoformat()
+                
+                update_success = update_settings(settings)
+                
+                if update_success:
+                    debug_print("✅ [AUTO-REFRESH] Admin settings updated with refresh timestamp")
+                else:
+                    debug_print("⚠️ [AUTO-REFRESH] Failed to update admin settings")
+                    
+        except Exception as settings_error:
+            debug_print(f"❌ [AUTO-REFRESH] Admin settings update failed: {settings_error}")
+        
+        # Log the activity
+        log_event("control_center_refresh", {
+            "manual_execution": manual_execution,
+            "refreshed_users": results['refreshed_users'],
+            "failed_users": results['failed_users'],
+            "refreshed_groups": results['refreshed_groups'],
+            "failed_groups": results['failed_groups']
+        })
+        
+        debug_print(f"🎉 [AUTO-REFRESH] Refresh completed! Users: {results['refreshed_users']} refreshed, {results['failed_users']} failed. "
+                   f"Groups: {results['refreshed_groups']} refreshed, {results['failed_groups']} failed")
+        
+        return results
+        
+    except Exception as e:
+        debug_print(f"💥 [AUTO-REFRESH] Error executing Control Center refresh: {e}")
+        results['success'] = False
+        results['error'] = str(e)
+        return results
diff --git a/application/single_app/functions_retention_policy.py b/application/single_app/functions_retention_policy.py
index 56167fa1..07f391a0 100644
--- a/application/single_app/functions_retention_policy.py
+++ b/application/single_app/functions_retention_policy.py
@@ -6,9 +6,10 @@
 This module handles automated deletion of aged conversations and documents
 based on configurable retention policies for personal, group, and public workspaces.
 
-Version: 0.236.012
+Version: 0.237.004
 Implemented in: 0.234.067
 Updated in: 0.236.012 - Fixed race condition handling for NotFound errors during deletion
+Updated in: 0.237.004 - Fixed critical bug where conversations with null/undefined last_activity_at were deleted regardless of age
 """
 
 from config import *
@@ -449,20 +450,11 @@ def process_public_retention():
                 'document_details': []
             }
             
-            # Process conversations
-            if conversation_retention_days != 'none':
-                try:
-                    conv_results = delete_aged_conversations(
-                        public_workspace_id=workspace_id,
-                        retention_days=int(conversation_retention_days),
-                        workspace_type='public'
-                    )
-                    workspace_deletion_summary['conversations_deleted'] = conv_results['count']
-                    workspace_deletion_summary['conversation_details'] = conv_results['details']
-                    results['conversations'] += conv_results['count']
-                except Exception as e:
-                    log_event("process_public_retention_conversations_error", {"error": str(e), "public_workspace_id": workspace_id})
-                    debug_print(f"Error processing conversations for public workspace {workspace_id}: {e}")
+            # Note: Public workspaces do not have a separate conversations container.
+            # Conversations are only stored in personal (cosmos_conversations_container) or 
+            # group (cosmos_group_conversations_container) workspaces.
+            # Therefore, we skip conversation processing for public workspaces.
+            # Only documents are processed for public workspace retention.
             
             # Process documents
             if document_retention_days != 'none':
@@ -529,14 +521,16 @@ def delete_aged_conversations(retention_days, workspace_type='personal', user_id
     cutoff_iso = cutoff_date.isoformat()
     
     # Query for aged conversations
-    # Check for null/undefined FIRST to avoid comparing null values with dates
+    # ONLY delete conversations that have a valid last_activity_at that is older than the cutoff
+    # Conversations with null/undefined last_activity_at should be SKIPPED (not deleted)
+    # This prevents accidentally deleting new conversations that haven't had activity tracked yet
     query = f"""
         SELECT c.id, c.title, c.last_activity_at, c.{partition_field}
         FROM c
         WHERE c.{partition_field} = @partition_value
-        AND (NOT IS_DEFINED(c.last_activity_at) 
-             OR IS_NULL(c.last_activity_at)
-             OR (IS_DEFINED(c.last_activity_at) AND NOT IS_NULL(c.last_activity_at) AND c.last_activity_at < @cutoff_date))
+        AND IS_DEFINED(c.last_activity_at) 
+        AND NOT IS_NULL(c.last_activity_at)
+        AND c.last_activity_at < @cutoff_date
     """
     
     parameters = [
diff --git a/application/single_app/static/js/control-center.js b/application/single_app/static/js/control-center.js
index bf155fe7..7e79d22a 100644
--- a/application/single_app/static/js/control-center.js
+++ b/application/single_app/static/js/control-center.js
@@ -3639,6 +3639,32 @@ async function loadRefreshStatus() {
             lastRefreshElement.textContent = 'Error loading';
         }
     }
+    
+    // Load and display auto-refresh schedule info
+    try {
+        const response = await fetch('/api/admin/control-center/refresh-status');
+        if (response.ok) {
+            const result = await response.json();
+            const autoRefreshInfoElement = document.getElementById('autoRefreshInfo');
+            const autoRefreshStatusElement = document.getElementById('autoRefreshStatus');
+            
+            if (autoRefreshInfoElement && autoRefreshStatusElement) {
+                if (result.auto_refresh_enabled) {
+                    // Build status text
+                    let statusText = `Auto-refresh: daily at ${result.auto_refresh_hour_formatted || result.auto_refresh_hour + ':00 UTC'}`;
+                    if (result.auto_refresh_next_run_formatted) {
+                        statusText += ` (next: ${result.auto_refresh_next_run_formatted})`;
+                    }
+                    autoRefreshStatusElement.textContent = statusText;
+                    autoRefreshInfoElement.classList.remove('d-none');
+                } else {
+                    autoRefreshInfoElement.classList.add('d-none');
+                }
+            }
+        }
+    } catch (autoRefreshError) {
+        console.error('Error loading auto-refresh status:', autoRefreshError);
+    }
 }
 
 async function refreshActiveTabContent() {
diff --git a/application/single_app/templates/control_center.html b/application/single_app/templates/control_center.html
index 7a86d961..dbdce4d7 100644
--- a/application/single_app/templates/control_center.html
+++ b/application/single_app/templates/control_center.html
@@ -443,12 +443,18 @@ <h2>Control Center</h2>
             <p class="text-muted mb-1">Manage users and their workspaces, groups and their workspaces, and public workspaces.</p>
         </div>
         <div class="text-end">
-            <div class="mb-2">
+            <div class="mb-1">
                 <small class="text-muted" id="lastRefreshInfo">
                     <i class="bi bi-clock-history me-1"></i>
                     Data last refreshed: <span id="lastRefreshTime">Loading...</span>
                 </small>
             </div>
+            <div class="mb-2 d-none" id="autoRefreshInfo">
+                <small class="text-info">
+                    <i class="bi bi-calendar-check me-1"></i>
+                    <span id="autoRefreshStatus">Auto-refresh scheduled</span>
+                </small>
+            </div>
             <button type="button" class="btn btn-outline-primary btn-sm" id="refreshDataBtn" onclick="refreshControlCenterData()">
                 <i class="bi bi-arrow-clockwise me-1"></i>
                 <span id="refreshBtnText">Refresh user, group, public workspace data</span>
diff --git a/docs/explanation/fixes/v0.237.004/RETENTION_POLICY_NULL_LAST_ACTIVITY_FIX.md b/docs/explanation/fixes/v0.237.004/RETENTION_POLICY_NULL_LAST_ACTIVITY_FIX.md
new file mode 100644
index 00000000..315792af
--- /dev/null
+++ b/docs/explanation/fixes/v0.237.004/RETENTION_POLICY_NULL_LAST_ACTIVITY_FIX.md
@@ -0,0 +1,133 @@
+# Retention Policy Null Last Activity Fix
+
+## Version: 0.237.004
+
+## Problem Statement
+
+The retention policy execution was incorrectly deleting brand new conversations that had null or undefined `last_activity_at` fields. Users reported that conversations created just minutes or hours ago were being deleted when the retention policy ran, even with a 730-day (2 year) retention period configured.
+
+### Symptoms
+- New conversations deleted unexpectedly after retention policy execution
+- Deleted conversations had `last_activity_at: None` in the archived records
+- Error logs showed: `name 'cosmos_public_conversations_container' is not defined` for public workspaces
+
+### Example
+A conversation created at `2026-01-26T20:16:50` was deleted despite a 730-day retention period because it had `last_activity_at: None`:
+
+```json
+{
+    "id": "3e137eed-cfe0-4ce4-a011-cf285e20fbc7",
+    "last_updated": "2026-01-26T20:16:50.590604",
+    "last_activity_at": null,
+    "title": "sumamrize https://academy.faa....",
+    "archived_at": "2026-01-26T21:22:47.746434+00:00",
+    "archived_by_retention_policy": true
+}
+```
+
+## Root Cause Analysis
+
+### Issue 1: Flawed Query Logic
+
+The original SQL query in `delete_aged_conversations()` had this logic:
+
+```sql
+WHERE c.{partition_field} = @partition_value
+AND (NOT IS_DEFINED(c.last_activity_at) 
+     OR IS_NULL(c.last_activity_at)
+     OR (IS_DEFINED(c.last_activity_at) AND NOT IS_NULL(c.last_activity_at) AND c.last_activity_at < @cutoff_date))
+```
+
+This query translated to: **Delete if `last_activity_at` is undefined OR null OR older than cutoff.**
+
+The problem: Conversations with null/undefined `last_activity_at` were being deleted **regardless of their actual age**. The intent was likely to handle edge cases, but it had the opposite effect—treating "no activity date" as "infinitely old."
+
+### Issue 2: Missing Public Conversations Container
+
+The code referenced `cosmos_public_conversations_container` for public workspace retention, but this container doesn't exist. Public workspaces only have:
+- `cosmos_public_documents_container`
+- `cosmos_public_prompts_container`
+- `cosmos_public_workspaces_container`
+
+There is no separate conversations container for public workspaces.
+
+## Solution Implementation
+
+### Fix 1: Corrected Query Logic
+
+**File Modified**: `functions_retention_policy.py`
+
+Changed the query to only delete conversations that have a **valid, non-null** `last_activity_at` that is older than the cutoff:
+
+```python
+# Query for aged conversations
+# ONLY delete conversations that have a valid last_activity_at that is older than the cutoff
+# Conversations with null/undefined last_activity_at should be SKIPPED (not deleted)
+# This prevents accidentally deleting new conversations that haven't had activity tracked yet
+query = f"""
+    SELECT c.id, c.title, c.last_activity_at, c.{partition_field}
+    FROM c
+    WHERE c.{partition_field} = @partition_value
+    AND IS_DEFINED(c.last_activity_at) 
+    AND NOT IS_NULL(c.last_activity_at)
+    AND c.last_activity_at < @cutoff_date
+"""
+```
+
+**Logic Change**:
+- Before: Delete if null/undefined OR older than cutoff
+- After: Delete ONLY if valid date AND older than cutoff
+
+### Fix 2: Removed Public Workspace Conversation Processing
+
+**File Modified**: `functions_retention_policy.py`
+
+Replaced the conversation processing block for public workspaces with a comment explaining why it's skipped:
+
+```python
+# Note: Public workspaces do not have a separate conversations container.
+# Conversations are only stored in personal (cosmos_conversations_container) or 
+# group (cosmos_group_conversations_container) workspaces.
+# Therefore, we skip conversation processing for public workspaces.
+# Only documents are processed for public workspace retention.
+```
+
+## Files Modified
+
+| File | Changes |
+|------|---------|
+| `config.py` | Version updated to `0.237.004` |
+| `functions_retention_policy.py` | Fixed query logic (line ~528), removed public workspace conversation processing (line ~453) |
+
+## Testing & Validation
+
+After the fix, retention policy execution should:
+
+1. ✅ Skip conversations with null/undefined `last_activity_at` instead of deleting them
+2. ✅ Only delete conversations with valid `last_activity_at` dates older than the retention period
+3. ✅ Not show `cosmos_public_conversations_container` errors for public workspaces
+4. ✅ Successfully process document retention for public workspaces
+
+### Test Scenarios
+
+| Scenario | Before Fix | After Fix |
+|----------|------------|-----------|
+| Conversation with `last_activity_at: null` | ❌ Deleted | ✅ Skipped |
+| Conversation with `last_activity_at: undefined` | ❌ Deleted | ✅ Skipped |
+| Conversation with valid old date | ✅ Deleted | ✅ Deleted |
+| Conversation with valid recent date | ✅ Kept | ✅ Kept |
+| Public workspace conversation retention | ❌ Error | ✅ Skipped (documents only) |
+
+## Recommendations
+
+1. **Backfill `last_activity_at`**: Consider running a migration to populate `last_activity_at` for existing conversations that have null values, using `last_updated` as a fallback.
+
+2. **Ensure New Conversations Set `last_activity_at`**: Verify that all conversation creation and update paths properly set the `last_activity_at` field.
+
+3. **Monitor Retention Execution**: After deploying this fix, monitor the next retention policy execution to confirm no unexpected deletions occur.
+
+## Related Documentation
+
+- [Retention Policy Feature Documentation](../../features/RETENTION_POLICY.md)
+- [v0.236.012 NotFound Error Fix](../v0.236.012/RETENTION_POLICY_NOTFOUND_FIX.md)
+- [v0.235.022 Document Deletion Fix](../v0.235.022/RETENTION_POLICY_DOCUMENT_DELETION_FIX.md)
diff --git a/docs/explanation/release_notes.md b/docs/explanation/release_notes.md
index 3b3de6e6..9c037e02 100644
--- a/docs/explanation/release_notes.md
+++ b/docs/explanation/release_notes.md
@@ -1,6 +1,23 @@
 <!-- BEGIN release_notes.md BLOCK -->
 # Feature Release
 
+### **(v0.237.004)**
+
+#### Bug Fixes
+
+*   **Critical Retention Policy Deletion Fix**
+    *   Fixed a critical bug where conversations with null/undefined `last_activity_at` were being deleted regardless of their actual age.
+    *   **Root Cause**: The SQL query logic treated conversations with missing `last_activity_at` field as "old" and deleted them, even if they were created moments ago.
+    *   **Impact**: Brand new conversations that hadn't had their `last_activity_at` field populated were incorrectly deleted when retention policy ran.
+    *   **Solution**: Changed query to only delete conversations that have a valid, non-null `last_activity_at` that is older than the configured retention period. Conversations with null/undefined `last_activity_at` are now skipped.
+    *   (Ref: retention policy execution, conversation deletion, `delete_aged_conversations()`)
+
+*   **Public Workspace Retention Error Fix**
+    *   Fixed error "name 'cosmos_public_conversations_container' is not defined" when executing retention policy for public workspaces.
+    *   **Root Cause**: The code attempted to process conversations for public workspaces, but public workspaces don't have a separate conversations container—only documents and prompts.
+    *   **Solution**: Removed conversation processing for public workspaces since they only support document retention.
+    *   (Ref: public workspace retention, `process_public_retention()`)
+
 ### **(v0.237.003)**
 
 #### New Features